pqcstatus
Algorithm

SecP384r1MLKEM1024: quantum risk, deadlines and replacements

Quantum-resistant

Hybrid TLS 1.3 key exchange combining P-384 ECDH and ML-KEM-1024 (highest security level).

At a glance

Quantum riskQuantum-resistant
Used forKey establishment
Post-quantum algorithmYes
Hybrid ofECDH + ML-KEM

Positions and deadlines by authority

AuthorityPositionEffectiveScopeDetails
ANSSIRecommendedin forceall variantsHybrid at security level 5, matching ANSSI's preference.

Sources

  1. RFC 10024 — Post-Quantum Traditional (PQ/T) Hybrid Key Agreement Mechanisms for TLS 1.3 · IETF
  2. IANA — Transport Layer Security (TLS) Parameters (Supported Groups, SignatureScheme) · IANA
  3. ANSSI views on the Post-Quantum Cryptography transition (2023 follow-up) · ANSSI (guidance)

Catalog version 2026-09-28. Every position links to its primary source; draft documents are labelled as such.

Frequently Asked Questions

Is SecP384r1MLKEM1024 quantum-safe?

Yes. No known quantum attack breaks SecP384r1MLKEM1024 at the recommended parameter sizes.