secp256r1mlkem768

Hybrid PQ | Security: Quantum-resistant (~192 bits classical) | Code: 4587

Group Details

Group Name
secp256r1mlkem768
Group Code (Decimal)
4587
Group Code (Hex)
0x11EB
Type
Hybrid PQ
Security Level
Quantum-resistant (~192 bits classical)

What is secp256r1mlkem768?

secp256r1MLKEM768 is a post-quantum hybrid combining the NIST P-256 curve (secp256r1) with ML-KEM-768. This hybrid provides quantum resistance while using NIST-approved classical cryptography, making it attractive for government and enterprise environments that require FIPS compliance. Like X25519MLKEM768, it protects against future quantum computers by combining classical and post-quantum algorithms. The use of secp256r1 instead of X25519 may be preferred in regulated industries due to established certification and compliance requirements. ML-KEM-768 provides NIST security level 3, equivalent to approximately AES-192. Browser support is emerging alongside X25519MLKEM768 as part of the industry transition to post-quantum cryptography.

Role in JA3 Fingerprinting

The secp256r1mlkem768 group is used for ECDHE key exchange in TLS, providing perfect forward secrecy. Different browsers and HTTP clients advertise different supported groups, making this a key component of JA3 fingerprints.

Fingerprinting Impact: The order and selection of supported groups reveals browser type, version, and security preferences.

Test Your Configuration