They use the Signal protocol. The keys are not generated by Facebook, and are never on their servers. They are generated on the devices themselves.