I was under the impression that the Signal protocol won’t work in a system with decentralized identity because it assumes there is a sovereign identity provider (for Signal it’s the telephone system) and a keypair isn’t that. But I would love to be wrong about that.

At Planetary we’ve had our eyes on MLS, although it doesn’t do metadata encryption which is really important. https://en.wikipedia.org/wiki/Messaging_Layer_Security