
    AWS has deployed ML-KEM post-quantum key agreement standards to AWS KMS, ACM, and Secrets Manager, enabling hybrid post-quantum TLS with minimal performance impact across these security-critical services.


<div>
<p>
AWS has announced support for ML-KEM post-quantum key agreement in three critical security services: AWS Key Management Service (AWS KMS), AWS Certificate Manager (ACM), and AWS Secrets Manager.
</p>
<ul>
<li>ML-KEM is a new hybrid post-quantum key agreement standard for TLS</li>
<li>Support is currently available in non-FIPS endpoints across all AWS regions</li>
<li>Performance impact is minimal, with only a 0.05% decrease in transactions per second</li>
<li>CRYSTALS-Kyber (the predecessor) will be supported through 2025</li>
<li>AWS plans to deploy ML-KEM support to all HTTPS endpoints in coming years</li>
</ul>
<p>
Customers can enable post-quantum TLS in AWS SDK for Java by calling `.postQuantumTlsEnabled(true)` when configuring their HTTP client, protecting against future quantum computing threats.
</p>
</div>


Related articles