pqcstatus
Algorithm

SecP256r1MLKEM768: quantum risk, deadlines and replacements

Quantum-resistant

Hybrid TLS 1.3 key exchange combining P-256 ECDH and ML-KEM-768.

At a glance

Quantum riskQuantum-resistant
Used forKey establishment
Post-quantum algorithmYes
Hybrid ofECDH + ML-KEM

Sources

  1. RFC 10024 — Post-Quantum Traditional (PQ/T) Hybrid Key Agreement Mechanisms for TLS 1.3 · IETF
  2. IANA — Transport Layer Security (TLS) Parameters (Supported Groups, SignatureScheme) · IANA

Catalog version 2026-09-28. Every position links to its primary source; draft documents are labelled as such.

Frequently Asked Questions

Is SecP256r1MLKEM768 quantum-safe?

Yes. No known quantum attack breaks SecP256r1MLKEM768 at the recommended parameter sizes.