DIREC project

High-Assurance Group Messaging

Project impact

Secure digital communication is essential for modern society, government services, and national defense. Technologies like TLS, which protects websites, and secure messaging apps such as Signal are trusted by billions of people because they use strong cryptography and carefully tested software.

Today, communication is increasingly happening in large groups rather than only between two people. This is important for governments, companies, and international organizations. As a result, there is a growing need to make group communication just as secure and reliable as private one-to-one messaging.

The Messaging Layer Security (MLS) protocol is becoming the international standard for secure group messaging. It is already being adopted by platforms such as Discord, German public-sector messaging systems, and NATO communication systems. Improving the security of MLS, including protection against future quantum-computer attacks, is important for creating secure and independent digital infrastructure and reducing reliance on closed systems from large technology companies.

PROJECT DATA

Project name

High-Assurance Group Messaging

Project period
2026-2027
Funding
DKK 395.000

Scientific mission

This project aims to provide the first complete security analysis of MLS at both the cryptographic and software implementation levels, similar to what already exists for TLS and Signal.

Building on earlier research from Aarhus University and partners such as Cryspen, the project will carefully study whether MLS is secure in real-world use, including new post-quantum versions designed to resist attacks from quantum computers.

The research will use advanced formal verification methods to create machine-checked mathematical proofs of security. At the same time, the project will investigate how formal verification can help speed up security certification processes such as Common Criteria, which are often required for government and defense systems.

By combining fundamental research, practical deployment, and certification work, the project will help strengthen secure, open, and trustworthy communication infrastructure.

Project Participants

Bas Spitters
Bas Spitters – Associated professor – Aarhus University
Arne Stig Peters
Arne Stig Peters – Founder – Confiware ApS
Franziskus Kiefer
Franziskus Kiefer – Co-founder and CEO – Cryspen

Partners

Aarhus University logoConfiware ApS logoCryspen logo