CRYSTALS-Kyber: Lattice-Based KEM
Walk through Module-LWE key encapsulation and parameter sets.
Why Kyber?
CRYSTALS-Kyber (renamed ML-KEM by NIST in FIPS 203) is a Key Encapsulation Mechanism (KEM) based on Module-LWE. It replaces RSA and ECDH for key exchange, providing quantum resistance at practical performance levels.
KEM vs Key Agreement
A KEM encapsulates a shared secret: the sender generates a random key K, encrypts it with the recipient's public key (encapsulate), producing a ciphertext C. The recipient decapsulates C with their private key to recover K. No interactive key exchange needed.
All lessons in this course
- Shor's & Grover's Algorithms Explained
- CRYSTALS-Kyber: Lattice-Based KEM
- CRYSTALS-Dilithium & Falcon Signatures
- Migration to PQC: Hybrid Approaches