A Go implementation of the quantum-resistant key encapsulation method ML-KEM (formerly known as Kyber).
See the codehttps://pkg.go.dev/filippo.io/mlkem768
Package mlkem768 implements the quantum-resistant key encapsulation method ML-KEM (formerly known as Kyber), as specified in NIST FIPS 203.
Only the recommended ML-KEM-768 parameter set is provided.
This code was upstreamed in the standard library in Go 1.24, and as of Go 1.26
it is just a wrapper for the crypto/mlkem and crypto/mlkem/mlkemtest
packages.
https://pkg.go.dev/filippo.io/mlkem768/xwing
The xwing package implements the hybrid quantum-resistant key encapsulation method X-Wing, which combines X25519, ML-KEM-768, and SHA3-256 as specified in draft-connolly-cfrg-xwing-kem.
Most users will probably be better served by the hybrid KEMs in the
crypto/hpke package.
11,921 followers · starred May 2026
1,465 followers · starred Feb 2024
194 followers · starred Nov 2023
1,576 followers · starred Jan 2024
A Go implementation of the quantum-resistant key encapsulation method ML-KEM (formerly known as Kyber).
See the codehttps://pkg.go.dev/filippo.io/mlkem768
Package mlkem768 implements the quantum-resistant key encapsulation method ML-KEM (formerly known as Kyber), as specified in NIST FIPS 203.
Only the recommended ML-KEM-768 parameter set is provided.
This code was upstreamed in the standard library in Go 1.24, and as of Go 1.26
it is just a wrapper for the crypto/mlkem and crypto/mlkem/mlkemtest
packages.
https://pkg.go.dev/filippo.io/mlkem768/xwing
The xwing package implements the hybrid quantum-resistant key encapsulation method X-Wing, which combines X25519, ML-KEM-768, and SHA3-256 as specified in draft-connolly-cfrg-xwing-kem.
Most users will probably be better served by the hybrid KEMs in the
crypto/hpke package.
11,921 followers · starred May 2026
1,465 followers · starred Feb 2024
194 followers · starred Nov 2023
1,576 followers · starred Jan 2024
