Trail of Bits Builds Auditor Verifying Signal Key Map Integrity

Signal launched Automatic Key Verification, a key transparency system. Trail of Bits built and operates one of three independent auditors, written from scratch, that verify the consistency of Signal’s public key map. Clients require signatures from all three auditors within seven days to prevent server-side key tampering. Their auditor’s code is open source.