pqcstatus
Algorithm

Kyber (pre-standard draft): quantum risk, deadlines and replacements

Quantum-resistant

Pre-standard Kyber used in early TLS deployments (X25519Kyber768Draft00). Obsolete: migrate to ML-KEM.

At a glance

Quantum riskQuantum-resistant
Used forKey establishment
Post-quantum algorithmYes

Recommended replacements

Sources

  1. IANA — Transport Layer Security (TLS) Parameters (Supported Groups, SignatureScheme) · IANA

Catalog version 2026-09-28. Every position links to its primary source; draft documents are labelled as such.

Frequently Asked Questions

Is Kyber (pre-standard draft) quantum-safe?

Yes. No known quantum attack breaks Kyber (pre-standard draft) at the recommended parameter sizes.

What should replace Kyber (pre-standard draft)?

ML-KEM.