NEW
Also known as: CRYSTALS-Kyber
A lattice-based post-quantum KEM standardized by NIST, providing quantum-resistant key encapsulation for secure key transport.
DESCRIPTION
Kyber (standardized as ML-KEM in FIPS 203) is a lattice-based key encapsulation mechanism designed to resist quantum attacks. It offers strong performance and compact keys compared with many PQC alternatives. Kyber is integrated into hybrid protocols and being adopted in TLS experiments for future-proof security. It complements Dilithium for signatures within the CRYSTALS suite.
ALTERNATIVE DEFINITIONS
Wikipedia
CRYSTALS-Kyber is a lattice-based, post-quantum key encapsulation mechanism (KEM).
Identifies lattice-based and post-quantum nature of Kyber.
NIST FIPS 203
This standard specifies ML-KEM, a key-encapsulation mechanism (KEM) intended to provide protection against quantum computer-based attacks.
Describes ML-KEM (Kyber) goals in official NIST standard.
CRYSTALS Project
Kyber is a key-encapsulation mechanism that is designed to be secure even against attackers with quantum computers.
Project page emphasizes quantum-resilience and design intent.
RELATED TERMS
Post-Quantum Cryptography Key Encapsulation Mechanism ML-KEM HPKE TLS Lattice-Based Cryptography Dilithium FIPS 203
COMPETING TERMS
Classic McEliece SABER NTRU
KNOWLEDGE AREAS
Data Security Software Engineering Cloud
TARGET AUDIENCE
Security Architect Cybersecurity Engineer Chief Information Security Officer Software Developer Cloud Architect DevOps Engineer
EXTERNAL SOURCES
- Wikipedia - Kyber
- NIST - ML-KEM (Kyber) formal standard
- CRYSTALS - Official Kyber project page
- Open Quantum Safe - PQC implementations including Kyber
TOP QUESTIONS
Why is Kyber important for post-quantum security?
Kyber provides quantum-resistant key transport and is standardized by NIST, making it a practical choice for future-proof protocols.
Category: Relevancy
What distinguishes Kyber from other PQC KEMs?
Kyber offers efficient performance and compact parameter sizes compared to many alternatives like Classic McEliece.
Category: Opinion
How is Kyber deployed in real systems?
It can be integrated into hybrid TLS handshakes and HPKE variants, often alongside classical methods during transition.
Category: Example
What risks exist when implementing Kyber?
Side-channel leaks, incorrect parameter handling, or non-constant-time code can compromise security.
Category: Risks
Is Kyber the same as ML-KEM?
Yes; the NIST standard FIPS 203 refers to Kyber as ML-KEM.
Category: Misunderstanding
What is a competing term to Kyber?
Classic McEliece and SABER are alternative post-quantum KEMs with different trade-offs.
Category: Alternatives
How should teams prepare to adopt Kyber?
Use standardized libraries, test hybrid deployments, and monitor evolving protocol guidance and vendor support.
Category: Best practices
What is the origin of Kyber?
Kyber comes from the CRYSTALS suite, developed by researchers for NIST PQC standardization.
Category: Origin
Who benefits from understanding Kyber?
Security engineers, protocol developers, and architects designing quantum-resilient infrastructures.
Category: Audience