> Term
Kyber-768
Module-Lattice-Based Key-Encapsulation Mechanism standardized by NIST in FIPS 203 (ML-KEM-768), providing post-quantum security equivalent to AES-192 against both classical and quantum computing adversaries.
Detailed Explanation
Kyber-768 is the primary recommended parameter set for general-purpose post-quantum encryption in TLS 1.3. Its cryptographic hardness is rooted in the Module Learning With Errors (M-LWE) lattice problem, which cannot be solved in polynomial time by Shor's algorithm.
Why It Matters
Immune to cryptanalytically relevant quantum computers (CRQCs), protecting encrypted communications from Harvest Now, Decrypt Later threats.
Common Failure Mode
Practical Example
Production Manifestation
Deployed in Chrome, Cloudflare, AWS KMS, and Linux kernels via hybrid X25519 + Kyber-768 cipher suites.
Frequently Asked Questions
What is Kyber-768 in short?
Module-Lattice-Based Key-Encapsulation Mechanism standardized by NIST in FIPS 203 (ML-KEM-768), providing post-quantum security equivalent to AES-192 against both classical and quantum computing adversaries.
What is the most common failure mode?
Larger public key and ciphertext sizes (~1,184 bytes) triggering TCP segmentation issues across legacy network middleboxes.
AI Summary
Module-Lattice-Based Key-Encapsulation Mechanism standardized by NIST in FIPS 203 (ML-KEM-768), providing post-quantum security equivalent to AES-192 against both classical and quantum computing adversaries. Immune to cryptanalytically relevant quantum computers (CRQCs), protecting encrypted communications from Harvest Now, Decrypt Later threats.