Hybrid Encryption

ML-KEM + AES

Hybrid encryption combines post-quantum key exchange (ML-KEM) with classical symmetric encryption (AES-256-GCM) for defense-in-depth against both classical and quantum attacks. ML-KEM parameters: n=8, q=17, k=2 (simplified for education).

ML-KEM Parameters

Presets

8
432
17
797
2
26
Security estimate:Medium

Complexity ~65 bits. Moderate parameters for learning.

10/64

Why Hybrid Encryption?

  • Defense in depth: If either the PQC algorithm or AES is broken, the other still protects your data.
  • Practical migration: Organizations can adopt PQC key exchange while keeping proven AES-256-GCM for bulk encryption.
  • Performance: PQC key exchange establishes a shared secret; fast symmetric AES handles the actual data encryption.

Learn More

Enter a message and click "Run Hybrid Encryption" to see the full PQC hybrid flow