thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Advanced

Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM)

NIST post-quantum key encapsulation standard (FIPS 203), derived from CRYSTALS-Kyber.

Definition

ML-KEM is based on the module learning with errors problem and comes in ML-KEM-512, ML-KEM-768, and ML-KEM-1024 parameter sets. It offers fast operations with public keys around 1-1.5 KB. ML-KEM-768 is widely deployed in hybrid TLS, and NSA CNSA 2.0 requires ML-KEM-1024.

Example

OpenSSL 3.5 supports the X25519MLKEM768 hybrid group for TLS 1.3.

Exam tip

ML-KEM = Kyber = key establishment; ML-DSA = Dilithium = signatures.

Related terms