Well...
The protocol being used is (allegedly) open source, reviewable here...
https://github.com/whispersystems/libsignal-protocol-java/
But being that it's a Facebook implementation I still have a fair few reservations about exactly how it was implemented in this instance. Good to see they're trying though.
Biting the hand that feeds IT
