Trail of Bits Joins Cloudflare as Independent Auditor for Signal Key Transparency
The security firm is operating an open-source auditor to automate the verification of encrypted chat keys.
Trail of Bits has launched an independent auditor for Signal's Automatic Key Verification system to prevent man-in-the-middle attacks. The initiative ensures that the public keys provided by Signal's servers remain consistent and untampered with, removing the burden of manual verification from the user.
As part of this security architecture, Signal requires signatures from three independent auditors to validate the integrity of its key map: Signal itself, Cloudflare, and Trail of Bits. The system utilizes a Merkle tree to maintain a globally consistent view of public keys associated with user phone numbers. Trail of Bits developed its auditor implementation from scratch based on a specific auditor specification, and the resulting code is open source.
The Shift to Key Transparency
Traditionally, Signal users had to manually verify "safety numbers"—the fingerprints of public keys—either in person or through a separate trusted channel. This manual process was the only way to guarantee that a compromised server had not swapped a contact's key for one controlled by an attacker. Automatic Key Verification introduces a "key transparency" mechanism that automates this trust process without sacrificing the underlying security of the encryption.
Industry Implications
By involving third-party auditors like Trail of Bits and Cloudflare, Signal significantly reduces the risk that a compromised central server could silently redirect encrypted messages to an attacker. This move lowers the barrier for the average user to verify the integrity of their communications. According to Trail of Bits, the firm is not paid by Signal or any other party for this service, stating that they operate the auditor in the interest of the community because free and private communication is a "critical public good."
Security Constraints
Despite the automation, the system has specific temporal constraints to maintain security. Signal clients require that the Merkle tree heads be endorsed by all registered auditors within the last seven days. If this endorsement is missing, the application displays a warning to the user. According to Trail of Bits, this window means a fully malicious server can maintain a split view of the system for a maximum of one week before clients are alerted to the discrepancy.