Glossary

ML-KEM

Module-Lattice-Based Key-Encapsulation Mechanism

A post-quantum scheme derived from CRYSTALS-Kyber for establishing a shared secret; TLS deployments pair ML-KEM-768 with X25519 in the hybrid X25519MLKEM768 group, which stays secure if either component holds.

Defined in: NIST FIPS 203, Module-Lattice-Based Key-Encapsulation Mechanism Standard

Covered in

Guide

Post-quantum migration: cryptographic inventory, hybrid TLS and deadlines

Inventory public-key cryptography by operation, owner and lifetime, turn on hybrid ML-KEM key exchange where it is already available, and plan signature and archive migration against the NIST, NSA, NCSC and EU dates.