ML-KEM

ML-KEM — Module-Lattice-Based Key-Encapsulation Mechanism, originally proposed as 'CRYSTALS-Kyber' — is one of the first three post-quantum cryptography (PQC) standards published by the US National Institute of Standards and Technology (NIST) in August 2024, as Federal Information Processing Standard (FIPS) 203. It is a lattice-based algorithm that solves the key-exchange problem in the post-quantum era — replacing the role of RSA-based key exchange and Diffie-Hellman, both of which break in polynomial time on a Cryptographically Relevant Quantum Computer (CRQC) using Shor's Algorithm. ML-KEM's hardness rests on the Module Learning with Errors (MLWE) problem and the Module Learning with Rounding (MLWR) problem — both believed to be hard even for quantum computers. The algorithm comes in three parameter sets — ML-KEM-512, ML-KEM-768, and ML-KEM-1024 — providing increasing security levels. It was selected after a multi-year NIST PQC competition (call for proposals: December 2016).

• 1 Standard: FIPS 203 (Federal Information Processing Standard 203)
• 2 Published: August 13, 2024
• 3 Family: Lattice-based cryptography
• 4 Original name: CRYSTALS-Kyber
• 5 Underlying problem: Module Learning with Errors (MLWE)
• 6 Parameter sets: ML-KEM-512, ML-KEM-768, ML-KEM-1024
• 7 Role: replaces RSA key exchange, Diffie-Hellman
• 8 NIST PQC competition launched: December 2016
• 9 India's DST PQC Task Force adopts NIST standards as baseline (May 2026)

India's DST Post-Quantum Cryptography Task Force, in its May 2026 roadmap, recommends ML-KEM (Kyber) as the baseline key-encapsulation mechanism for migrating banking, Aadhaar, and defence-communications infrastructure to quantum-safe standards.