[{"data":1,"prerenderedAt":91},["ShallowReactive",2],{"news-\u002Fnews\u002Fnist-sp-800-227-kem-guidance":3},{"id":4,"title":5,"author":6,"authorTitle":7,"authorUrl":8,"body":9,"canonical":8,"category":43,"date":44,"description":45,"draft":46,"extension":47,"faqs":48,"findingsSource":8,"geo":58,"image":60,"industries":61,"keyFindings":8,"meta":64,"modified":65,"navigation":66,"path":67,"pullquote":8,"recommendations":8,"references":68,"related":72,"seo":79,"seoTitle":80,"signposts":8,"slug":81,"stats":8,"stem":82,"tags":83,"tldr":89,"__hash__":90},"news\u002Fnews\u002Fnist-sp-800-227-kem-guidance.md","NIST Issues Final Guidance on Key Establishment Mechanisms in SP 800-227","ArcQubit Team","",null,{"type":10,"value":11,"toc":39},"minimark",[12,17,24,27,30,33],[13,14,16],"h2",{"id":15},"nist-issues-final-guidance-on-key-establishment-mechanisms-in-sp-800-227","NIST issues final guidance on key establishment mechanisms in SP 800-227",[18,19,20],"p",{},[21,22,23],"strong",{},"18 SEPTEMBER 2025, GAITHERSBURG",[18,25,26],{},"NIST finalized Special Publication 800-227 on 18 September 2025, giving practitioners implementation guidance for key establishment mechanisms. These mechanisms let two parties agree on a shared secret, and they sit at the core of secure communication. The guidance supports FIPS 203, the ML-KEM standard NIST published in 2024, and anticipates the future HQC standard that NIST selected as a backup.",[18,28,29],{},"The publication complements the algorithm standards rather than repeating them. FIPS 203 defines ML-KEM as an algorithm, while SP 800-227 tells engineers how to use key establishment mechanisms correctly in practice. The two documents work together: one specifies the mathematics, the other guides the implementation so teams avoid mistakes that could weaken an otherwise sound algorithm.",[18,31,32],{},"By covering both FIPS 203 today and HQC in the future, SP 800-227 points implementers toward crypto agility. A team that follows the guidance can build systems that support more than one key establishment mechanism, which matters because NIST chose HQC specifically to diversify away from a single mathematical family. Supporting both reduces the risk if one family later proves weaker than expected.",[18,34,35,38],{},[21,36,37],{},"Why it matters."," SP 800-227 closes a gap between a standardized algorithm and a correct implementation. Engineers building post-quantum key establishment now have NIST guidance on how to do it, and the guidance already looks ahead to HQC. Teams that read it alongside FIPS 203 can implement key establishment correctly the first time and keep room for a second algorithm.",{"title":7,"searchDepth":40,"depth":40,"links":41},2,[42],{"id":15,"depth":40,"text":16},"Policy","2025-09-18","NIST finalized SP 800-227 in September 2025, giving practitioners implementation guidance for key establishment mechanisms, supporting FIPS 203 and future HQC.",false,"md",[49,52,55],{"q":50,"a":51},"What does SP 800-227 cover?","SP 800-227 gives practitioners implementation guidance for key establishment mechanisms, the schemes that let two parties agree on a shared secret. It supports FIPS 203, the ML-KEM standard, and anticipates the future HQC standard NIST selected as a backup.",{"q":53,"a":54},"How does it relate to FIPS 203?","FIPS 203 standardizes ML-KEM as an algorithm. SP 800-227 is implementation guidance that tells practitioners how to use key establishment mechanisms correctly, so the two documents work together rather than overlap. One defines the algorithm, the other guides its use.",{"q":56,"a":57},"Who should read it?","Engineers and architects implementing post-quantum key establishment should read SP 800-227. It helps teams apply FIPS 203 correctly and prepare for HQC, reducing the chance of implementation mistakes that weaken an otherwise sound algorithm.",[59],"gaithersburg","\u002Fassets\u002Fog-default.png",[62,63],"Cross-Sector","Information Technology",{},"2026-09-09",true,"\u002Fnews\u002Fnist-sp-800-227-kem-guidance",[69],{"label":70,"url":71},"National Institute of Standards and Technology, \"Recommendations for Key-Encapsulation Mechanisms,\" NIST Special Publication 800-227, Sep. 18, 2025.","https:\u002F\u002Fcsrc.nist.gov\u002Fpubs\u002Fsp\u002F800\u002F227\u002Ffinal",[73,76],{"label":74,"url":75},"NIST Approves First Three Post-Quantum Standards","\u002Fnews\u002Fnist-approves-first-three-post-quantum-standards",{"label":77,"url":78},"NIST Picks HQC as a Backup Key Establishment Mechanism","\u002Fnews\u002Fnist-selects-hqc-backup-post-quantum-encryption",{"title":5,"description":45},"NIST Final Guidance on KEMs (SP 800-227)","nist-sp-800-227-kem-guidance","news\u002Fnist-sp-800-227-kem-guidance",[84,85,86,87,88],"post-quantum cryptography","crypto-agility","quantum readiness","PQC migration","for enterprises","NIST finalized SP 800-227 in September 2025, giving practitioners implementation guidance for key establishment mechanisms that supports FIPS 203 and future HQC.","3xIsQo6gHukQn86lyfdpIFTKw_i50rZXoBEZXMEs2kQ",1792182886403]