x25519mlkem768

Hybrid PQ | Security: Quantum-resistant (~192 bits classical) | Code: 4588

Group Details

Group Name
x25519mlkem768
Group Code (Decimal)
4588
Group Code (Hex)
0x11EC
Type
Hybrid PQ
Security Level
Quantum-resistant (~192 bits classical)

What is x25519mlkem768?

X25519MLKEM768 is a post-quantum hybrid key exchange that combines the classical X25519 elliptic curve with ML-KEM-768 (formerly known as Kyber-768). This hybrid approach provides quantum-resistant security while maintaining backward compatibility with classical cryptography. The combination ensures security even if either algorithm is broken: if quantum computers break X25519, ML-KEM-768 provides protection; if ML-KEM-768 has weaknesses, X25519 maintains security. ML-KEM (Module-Lattice-based Key Encapsulation Mechanism) was standardized by NIST in 2024 as part of the post-quantum cryptography initiative. Chrome and other browsers have begun experimental support for hybrid PQ key exchange. This is considered the most practical transition path to quantum-resistant TLS.

Role in JA3 Fingerprinting

The x25519mlkem768 group is used for ECDHE key exchange in TLS, providing perfect forward secrecy. Different browsers and HTTP clients advertise different supported groups, making this a key component of JA3 fingerprints.

Fingerprinting Impact: The order and selection of supported groups reveals browser type, version, and security preferences.

Test Your Configuration