Algorithms
What is ML-KEM?
Also known as Kyber, CRYSTALS-Kyber.
Module-Lattice-based Key Encapsulation Mechanism. NIST's primary post-quantum KEM standard, finalised as FIPS 203 in August 2024. Three parameter sets (512, 768, 1024) at NIST security levels 1, 3, and 5. QNSI default KEM in every tier.
Decision context
Why ML-KEM matters
ML-KEM is the primary standardized mechanism for establishing quantum-resistant shared secrets. It is relevant wherever a system currently depends on RSA, finite-field Diffie-Hellman, or elliptic-curve key agreement to protect data whose confidentiality must survive a future cryptographically relevant quantum computer.
How to evaluate ML-KEM
Record the exact ML-KEM parameter set, implementation and protocol composition. Verify encapsulation and decapsulation with authoritative test vectors, test invalid-ciphertext behaviour, and prove that the derived secret reaches the intended authenticated encryption path. A configuration label or advertised library is not execution evidence.
Algorithms
Algorithms evidence boundary
Algorithm names alone do not establish security or deployment readiness. Parameter set, implementation, key and signature sizes, execution boundary, validation status, and failure behaviour all matter. Buyers should distinguish a standardized primitive from a product path that has independently demonstrated that primitive in production.
Deep dive
ML-KEM on QNSI
NIST's primary post-quantum key encapsulation standard, finalised August 2024 as FIPS 203. QNSI policy sources select ML-KEM across PQC-native tiers and define it for transport and envelope targets; complete production negotiation and envelope execution remain NOT VERIFIED.
For parameter sets, key and signature sizes, NIST ACVP conformance status, and when to use it, see the full ML-KEM algorithm reference.
FAQ
Common questions
What is ML-KEM?
Module-Lattice-based Key Encapsulation Mechanism. NIST's primary post-quantum KEM standard, finalised as FIPS 203 in August 2024. Three parameter sets (512, 768, 1024) at NIST security levels 1, 3, and 5. QNSI default KEM in every tier.
Why does ML-KEM matter?
ML-KEM is the primary standardized mechanism for establishing quantum-resistant shared secrets. It is relevant wherever a system currently depends on RSA, finite-field Diffie-Hellman, or elliptic-curve key agreement to protect data whose confidentiality must survive a future cryptographically relevant quantum computer.
How should ML-KEM be evaluated?
Record the exact ML-KEM parameter set, implementation and protocol composition. Verify encapsulation and decapsulation with authoritative test vectors, test invalid-ciphertext behaviour, and prove that the derived secret reaches the intended authenticated encryption path. A configuration label or advertised library is not execution evidence.
What is ML-KEM also known as?
ML-KEM is also known as Kyber, CRYSTALS-Kyber. Module-Lattice-based Key Encapsulation Mechanism. NIST's primary post-quantum KEM standard, finalised as FIPS 203 in August 2024. Three parameter sets (512, 768, 1024) at NIST security levels 1, 3, and 5. QNSI default KEM in every tier.
More