Crypto.PubKey.ML_KEM

An ML-KEM encapsulation key, aka public key.

An ML-KEM decapsulation key, aka private key.

The ciphertext produced by the encapsulation function and consumed by the decapsulation function.

A shared secret returned by the encapsulation and decapsulation functions. Length is 32 bytes for all defined parameter sets.

Generate an ML-KEM key pair from a random seed.

Generate a random seed (d, z) and the expanded key pair, returning everything. This is Algorithm 19b introduced in Section 7 of RFC 9935.

Later use generateWith to re-expand a seed value (d, z) that has been recovered from storage.

Generate an ML-KEM key pair from the specified seed (d, z). Length of inputs must be 32 bytes.

Generate a shared secret key and an associated ciphertext using randomness.

Generate a shared secret key and an associated ciphertext using a specified random input. This byte array must be 32 bytes and not repeated with other encapsulations. For testing purposes.

Return the shared secret for a given ciphertext. Does implicit rejection in the event the ciphertext or encapsulation key have been tampered with.

The class of ML-KEM parameter sets.

ML-KEM-512 (security category 1)

ML-KEM-768 (security category 3)

ML-KEM-1024 (security category 5)

Utility class to deserialize ML-KEM objects from byte arrays.

Utility class to serialize ML-KEM objects to byte arrays.

Returns the encapsulation key embedded in the given decapsulation key. Note that they may not necessarily match when the decapsulation key was decoded from an untrusted source.

Try to detect corruptions in a pair of keys. Note that this does not fully guarantee that the key pair was properly generated. Returns True when the key pair is found valid.