The encyclopedia · Software & IT · Technical decision · 2013–2016
Signal's double ratchet changed keys on every message, so a stolen key decrypts nothing
Signal combined a DH ratchet with a hash ratchet so each message uses fresh keys; WhatsApp, Messenger and Wire adopted it for over a billion users.
Signal Foundation (Open Whisper Systems)
The solution
Encrypted chat that reuses one key lets an adversary who later steals that key decrypt years of recorded traffic. OTR rotated keys, but its three-step ratchet forced senders to hold key material for days when the other side was offline.
Signal's double ratchet mixes a two-step DH ratchet (a RootKey re-derived at every exchange) with a hash-iteration sub-ratchet between exchanges, delivering both forward secrecy and future secrecy.
A formal security analysis of the protocol (2016) found no major design flaws; by then the Signal protocol was in WhatsApp, Wire and Facebook Messenger, serving well over a billion users.
Why it worked
- Key rotation shrinks the damage window of any single compromise.
- Forward secrecy protects old messages; future secrecy heals the session.
- Async-friendly design fit phones and unreliable message transports.
- Public formal analysis gave other messengers confidence to adopt it.
What can be applied
For long-lived secrets, rotate early and often: if every message uses a fresh key, the window a single leak can open shrinks to almost nothing.
Aftermath
The Double Ratchet became the backbone of end-to-end encrypted messaging at billion-user scale, and formal methods for analyzing ratcheting protocols grew directly out of the work.
Sources
spotted an error? The archive wants to know.