Google Widens Gemini 4 Carbon Access After AI Agents Verify Signal Code
Google expands Gemini 4 Carbon access; AI agents verify Signal code security.
Google has expanded access to its Gemini 4 Carbon AI model, making it available to paying developers and businesses via the Gemini API and Gemini for business. Agents built on Carbon were used by Google DeepMind to formally verify security guarantees in the Signal protocol's libsignal implementation, a process that traditionally takes years but was completed in weeks. The AI agents generated millions of lines of formal proofs, confirming security properties like forward secrecy and post-compromise security for the compiled machine code.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Google?
Get an email when a new story names Google, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonGoogle DeepMind used AI agents built on Gemini 4 Carbon to formally verify security properties of the Signal protocol's libsignal implementation in weeks rather than years, confirming guarantees like forward secrecy and post-compromise security at the compiled machine code level. This matters because cryptographic libraries underpin the security of billions of communications, yet formal verification has historically been too resource-intensive for routine use. Unverified implementations can harbor subtle flaws that invalidate theoretical security guarantees even when the protocol design itself is sound. AI-assisted formal verification represents a step-change in the ability to rigorously audit critical security dependencies at scale.
What helps against this
How we list vendors
- Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
- Software supply chain security
Malicious and vulnerable open-source packages are caught before they ship.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — PHP2Shell