x25519mlkem768
Hybrid PQ | Security: Quantum-resistant (~192 bits classical) | Code: 4588
Group Details
x25519mlkem76845880x11ECWhat is x25519mlkem768?
X25519MLKEM768 is a post-quantum hybrid key exchange that combines the classical X25519 elliptic curve with ML-KEM-768 (formerly known as Kyber-768). This hybrid approach provides quantum-resistant security while maintaining backward compatibility with classical cryptography. The combination ensures security even if either algorithm is broken: if quantum computers break X25519, ML-KEM-768 provides protection; if ML-KEM-768 has weaknesses, X25519 maintains security. ML-KEM (Module-Lattice-based Key Encapsulation Mechanism) was standardized by NIST in 2024 as part of the post-quantum cryptography initiative. Chrome and other browsers have begun experimental support for hybrid PQ key exchange. This is considered the most practical transition path to quantum-resistant TLS.
Role in JA3 Fingerprinting
The x25519mlkem768 group is used for ECDHE key exchange in TLS, providing perfect forward secrecy. Different browsers and HTTP clients advertise different supported groups, making this a key component of JA3 fingerprints.
Fingerprinting Impact: The order and selection of supported groups reveals browser type, version, and security preferences.