ML-KEM-512 (FIPS 203 Level 1) Parameter Tier
Parameter-tier sub-spec for ML-KEM-512 (NIST FIPS 203 security level 1), the smallest ML-KEM variant. Algorithm definition deferred to LP-4600.
Implementation status (code-audited 2026-07-03): SHIPPED Parameters (k=2, eta1=3) confirmed against luxfi/crypto/mlkem (circl v1.6.3).
Abstract
ML-KEM-512 is the NIST FIPS 203 security-level-1 parameter set of the Module-Lattice-Based Key Encapsulation Mechanism (formerly CRYSTALS-Kyber). This LP pins the tier identifier, parameter constants (k=2, eta1=3, eta2=2, du=10, dv=4), and the implementation pointer; the algorithm itself is defined in LP-4600. Sizes: public key 800 B, secret key 1,632 B, ciphertext 768 B, shared secret 32 B. Use ML-KEM-512 for performance-critical key encapsulation (e.g., session-key setup in PQ-TLS 1.3) where a 128-bit post-quantum security margin is sufficient. For the network default use ML-KEM-768 (LP-4620); for ultra-conservative deployments use ML-KEM-1024 (LP-4630).
Reference implementation
- Primitive:
luxfi/crypto/mlkem/mlkem512 - Test vectors: NIST KAT vectors (FIPS 203 Appendix A)
Copyright
Copyright and related rights waived via CC0.