NIST Special Publication 800-227, Recommendations for Key-Encapsulation Mechanisms

Published

September 18, 2025

Author(s)

Gorjan Alagic, Elaine Barker, Lidong Chen, Dustin Moody, Angela Robinson, Hamilton Silberg, Noah Waller

Abstract

A key-encapsulation mechanism (KEM) is a set of algorithms that can be used by two parties under certain conditions to securely establish a shared secret key over a public channel. A shared secret key that is established using a KEM can then be used with symmetric-key cryptographic algorithms to perform essential tasks in secure communications, such as encryption and authentication. This document describes the basic definitions, properties, and applications of KEMs. It also provides recommendations for implementing and using KEMs in a secure manner.

Citation

Special Publication (NIST SP) - 800-227

Report Number

800-227

NIST Pub Series

Special Publication (NIST SP)

Pub Type

NIST Pubs

Download Paper

https://doi.org/10.6028/NIST.SP.800-227

Local Download

Keywords

cryptography, encryption, key-encapsulation mechanism, key establishment, public-key cryptography

Citation

Alagic, G. , Barker, E. , Chen, L. , Moody, D. , Robinson, A. , Silberg, H. and Waller, N. (2025), NIST Special Publication 800-227, Recommendations for Key-Encapsulation Mechanisms, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.SP.800-227, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=960583 (Accessed November 22, 2025)