Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
This paper analyzes the 2025 Signalgate leak of US military information, despite the use of Signal encryption, to understand the socio-technical factors undermining confidentiality. Applied pi-calculus is used to formally model a secure facility setup, demonstrating its inability to prevent leaks due to power imbalances and oversharing. The analysis reveals how a false sense of security from cryptographic tools, combined with a disregard for process, led to compromised operational security and geopolitical harms.
Encryption can lull users into a false sense of security, leading to oversharing and leaks even in supposedly secure channels due to human factors and power dynamics.
We analyse the 2025 Signalgate leak of sensitive US military information by the Trump administration, addressing why confidentiality was violated (messages leaked to the press) in spite of encryption (Signal), to deepen the socio-technical considerations when designing and deploying encryption. First, we use applied pi-calculus to formally model the boutique secure facility setup requested by the US Defence Secretary, to prove that a leak would not be prevented. We then examine how using a secure channel might still not give overall information security, as, in this case, power imbalances between personnel and officials led to the application of cryptography that compromised their operational security. We look at how cryptographic tools may have instilled a false sense of security, and led officials to"overshare". We then apply this analysis to the Trump administration's general desire to burn through political, legal, and now technical process, and demonstrate geopolitical harms that may arise from such ineffective use of cryptography in a brief use case. We conclude that, even with advancements in usability of cryptographic tools, genuine message security is still out of reach of the"average user".