EN
Back to the archive

The encyclopedia · Software & IT · Technical decision · 2013–2016

Signal's double ratchet changed keys on every message, so a stolen key decrypts nothing

Signal combined a DH ratchet with a hash ratchet so each message uses fresh keys; WhatsApp, Messenger and Wire adopted it for over a billion users.

Signal Foundation (Open Whisper Systems)

The solution

Encrypted chat that reuses one key lets an adversary who later steals that key decrypt years of recorded traffic. OTR rotated keys, but its three-step ratchet forced senders to hold key material for days when the other side was offline.

Signal's double ratchet mixes a two-step DH ratchet (a RootKey re-derived at every exchange) with a hash-iteration sub-ratchet between exchanges, delivering both forward secrecy and future secrecy.

A formal security analysis of the protocol (2016) found no major design flaws; by then the Signal protocol was in WhatsApp, Wire and Facebook Messenger, serving well over a billion users.

Why it worked

  • Key rotation shrinks the damage window of any single compromise.
  • Forward secrecy protects old messages; future secrecy heals the session.
  • Async-friendly design fit phones and unreliable message transports.
  • Public formal analysis gave other messengers confidence to adopt it.
What it achievedRotate keys with every messageclever

What can be applied

For long-lived secrets, rotate early and often: if every message uses a fresh key, the window a single leak can open shrinks to almost nothing.

Aftermath

The Double Ratchet became the backbone of end-to-end encrypted messaging at billion-user scale, and formal methods for analyzing ratcheting protocols grew directly out of the work.

Sources

spotted an error? The archive wants to know.

Related cases