---
name: "EVP_KEM-ML-KEM"
section: "7ssl"
platform: "linux"
package: "openssl"
version: "3.6.5-1"
release: "Arch Linux 2026-11-01"
platforms: ["linux"]
url: "https://new.carta.tech/EVP_KEM-ML-KEM"
---

# EVP\_KEM-ML-KEM(7ssl)

EVP\_KEM ML-KEM keytype and algorithm support

## NAME

EVP\_KEM-ML-KEM-512, EVP\_KEM-ML-KEM-768, EVP\_KEM-ML-KEM-1024, EVP\_KEM-ML-KEM - EVP\_KEM ML-KEM keytype and algorithm support

## DESCRIPTION

The **ML-KEM** keytypes and parameters are described in **EVP\_PKEY-ML-KEM**(7). See **EVP\_PKEY\_encapsulate**(3) and **EVP\_PKEY\_decapsulate**(3) for more details about basic KEM operations.

### ML-KEM KEM parameters

- "ikme" (**OSSL\_KEM\_PARAM\_IKME**) \<octet string\>

  The OpenSSL ML-KEM encapsulation mechanism can only be modified by setting randomness during encapsulation, this enables testing, as per FIPS 203, section 6.2, algorithm 17.

  This parameter should not be used for purposes other than testing.

  When this parameter is not set, encapsulation proceeds as per FIPS 203, section 7.2

  This parameter is only settable.

- "fips-indicator" (**OSSL\_KEM\_PARAM\_FIPS\_APPROVED\_INDICATOR**) \<integer\>

  The OpenSSL FIPS provider returns 1 if the operation is FIPS approved, or 0 otherwise.  See "FIPS indicators" in **fips\_module**(7) for more information. Supplying the test-only "ikme" parameter causes this indicator to return 0.

This can be set when using **EVP\_PKEY\_encapsulate\_init()**.

## CONFORMING TO

- FIPS203

  ## SEE ALSO

**EVP\_PKEY\_encapsulate**(3), **EVP\_PKEY\_decapsulate**(3), **EVP\_KEYMGMT**(3), **EVP\_PKEY**(3), **provider-keymgmt**(7)

## HISTORY

This functionality was added in OpenSSL 3.5.

## COPYRIGHT

Copyright 2024-2026 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License").  You may not use this file except in compliance with the License.  You can obtain a copy in the file LICENSE in the source distribution or at \<https://www.openssl.org/source/license.html\>.