IETF Publishes Hybrid ML-KEM Key Agreement for TLS 1.3
RFC 10024 specifies three combinations of ML-KEM and elliptic-curve key agreement at Proposed Standard maturity.
A NIST paired-photon source with microstructured fiber, used as quantum-secure communications context. Image credit“Mass Weddings. NIST’s New Efficient 2-Photon Source” by A. Migdall / NIST. Reused under NIST public-information policy. · https://www.nist.gov/copyrights-disclaimers
Implementers of TLS 1.3 have a common specification for combining ML-KEM with existing elliptic-curve key agreement. RFC 10024 gives interoperability and migration work a shared target. IETF history records publication on August 10. The Standards Track RFC has Proposed Standard maturity.
The specification defines three combinations: X25519MLKEM768, SecP256r1MLKEM768 and SecP384r1MLKEM1024.
Proposed Standard describes the specification's maturity, not the extent of adoption. Publication does not mean every browser, server or certificate system has migrated. Implementations still need interoperability testing and measured rollout. These changes concern key agreement; migrating signatures is separate work that operators need to distinguish from this update.