# AWS KMS adds post-quantum shared-secret establishment with ML-KEM

_Published Monday, October 26, 2026 at 5:14 PM EDT · Science, Security · Latest · Tier 2 — Notable_

AWS says its Key Management Service now supports ML-KEM, a post-quantum cryptography standard that lets two parties establish a shared secret. The addition addresses attacks in which adversaries record exchanges today to recover their secrets when sufficiently powerful quantum computers become available.

KMS supports ML-KEM-512, ML-KEM-768, and ML-KEM-1024. Its Encapsulate API produces a random 32-byte shared secret and ciphertext; Decapsulate recovers the secret using the corresponding private key. KMS protects private keys in FIPS 140-3 Level 3 validated hardware security modules. Customers can export public keys for partners or applications to perform encapsulation locally.

The feature is available wherever KMS operates except the Middle East (UAE), Middle East (Bahrain), and China Regions.

## Sources

- [Recent Announcements](https://aws.amazon.com/about-aws/whats-new/2026/10/kms-ml-kem-post-quantum/)

---
Canonical: https://techandbusiness.org/newswire/cGaRk7_wqIdkp0KKjZeA8E
Published: 2026-10-26T21:14:50.585Z
Story chronology: 2026-10-26T08:00:00.000Z
Retrieved: 2026-10-26T23:40:33.739Z
Publisher: Tech & Business (techandbusiness.org)