ML-KEM, a NIST FIPS 203 standard, enables secure shared secret establishment resistant to future quantum attacks, addressing vulnerabilities in classical schemes like DH/ECDH and RSA. AWS KMS supports three ML-KEM key specifications and protects private keys within high-assurance FIPS 140-3 Level 3 hardware modules.
Customers can export public keys and use standard cryptographic libraries to perform encapsulation, with decryption handled within KMS. This post-quantum capability is widely available except in some Middle East and China Regions, helping prepare cryptographic infrastructure for quantum threats.
Source & further reading
AWS Key Management Service now supports ML-KEM for post-quantum key encapsulation ↗Source published 2026-10-26. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.