Modern 256-bit authenticated cipher widely used in TLS 1.3 and SSH. Not a NIST-approved algorithm.
At a glance
| Quantum risk | Quantum-resistant |
|---|---|
| Used for | Symmetric encryption, Message authentication |
| Post-quantum algorithm | No |
Sources
Catalog version 2026-09-28. Every position links to its primary source; draft documents are labelled as such.