Skip to main content
All glossary terms

Credentials & security

ML-KEM

ML-KEM is a post-quantum key-encapsulation mechanism standardized by NIST for establishing a shared secret between parties. It is a key-establishment algorithm, not an encryption mode for application data; a protocol uses the resulting secret with an appropriate symmetric cipher.

Also known as Module-Lattice-Based Key-Encapsulation Mechanism.

Why it matters in practice

Using ML-KEM requires compatible implementations and a protocol that authenticates the exchange as needed for the application. The algorithm’s role should not be confused with digital signatures or bulk data encryption. System security also depends on implementation, key handling, downgrade behavior, and the surrounding protocol.

Example

Two compatible endpoints use ML-KEM to establish shared key material, then use a separate authenticated cipher for a message.

Educational note

This definition is general information, not legal advice. It may omit facts that matter to a specific situation and does not establish or guarantee compliance.