ML-KEM

ML-KEM, Module-Lattice-Based Key-Encapsulation Mechanism, originally proposed as 'CRYSTALS-Kyber', is one of the first three post-quantum cryptography (PQC) standards published by the US National Institute of Standards and Technology (NIST) in August 2024, as Federal Information Processing Standard (FIPS) 203. It is a lattice-based algorithm that solves the key-exchange problem in the post-quantum era, replacing the role of RSA-based key exchange and Diffie-Hellman, both of which break in polynomial time on a Cryptographically Relevant Quantum Computer (CRQC) using Shor's Algorithm. ML-KEM's hardness rests on the Module Learning with Errors (MLWE) problem and the Module Learning with Rounding (MLWR) problem, both believed to be hard even for quantum computers. The algorithm comes in three parameter sets, ML-KEM-512, ML-KEM-768, and ML-KEM-1024, providing increasing security levels. It was selected after a multi-year NIST PQC competition (call for proposals: December 2016).

• 1 Standard: FIPS 203 (Federal Information Processing Standard 203)
• 2 Published: August 13, 2024
• 3 Family: Lattice-based cryptography
• 4 Original name: CRYSTALS-Kyber
• 5 Underlying problem: Module Learning with Errors (MLWE)
• 6 Parameter sets: ML-KEM-512, ML-KEM-768, ML-KEM-1024
• 7 Role: replaces RSA key exchange, Diffie-Hellman
• 8 NIST PQC competition launched: December 2016
• 9 India's DST PQC Task Force adopts NIST standards as baseline (May 2026)

India's DST Post-Quantum Cryptography Task Force, in its May 2026 roadmap, recommends ML-KEM (Kyber) as the baseline key-encapsulation mechanism for migrating banking, Aadhaar, and defence-communications infrastructure to quantum-safe standards.