ML-KEM (CRYSTALS-Kyber)

Lattice-based key encapsulation mechanism selected by NIST in 2022 as the primary post-quantum encryption standard.

Core Principles & Analysis

• Ships in three parameter sets — ML-KEM-512, -768, and -1024 — with 768 as the common default.
• Encapsulation and decapsulation each run in well under a millisecond on commodity hardware.
• By 2025 over half of Chrome's TLS 1.3 connections negotiated hybrid key exchange built on it.

Specifications & Metrics

• FAMILY: Lattice (Module-LWE)
• STATUS: Standardized
• STANDARD: FIPS 203
• YEAR: 2024