A key-encapsulation mechanism (KEM) is a cryptographic protocol used to securely establish a shared secret between two parties. Instead of sending a raw encryption key, the sender encapsulates a random session key to the recipient’s public key, and the recipient decapsulates it with the matching private key. The result is a shared symmetric key that can then protect bulk data efficiently.
KEMs matter because they are central to modern secure communication and to post-quantum cryptography. They appear in TLS, secure messaging, and other systems that need fast key exchange with strong confidentiality. In current defenses, standardized KEMs such as NIST’s ML-KEM are used to reduce the risk that future quantum computers could break traditional key exchange methods. In attacks, weakness usually comes from implementation bugs, bad randomness, or endpoint compromise rather than the basic idea of encapsulation itself. A KEM is only as strong as its algorithm, validation, and key management.