Full Wallet Guide series →

CRYSTALS-Kyber / ML-KEM, Explained

By the BMIC Research Desk · Updated 2026-08-29 · Part of the BMIC Wallet Guide series
Quick answer: CRYSTALS-Kyber, standardized by NIST as ML-KEM (Module-Lattice Key-Encapsulation Mechanism), protects keys using lattice math -- problems that stay hard to solve without the private key even for a large quantum computer, based on current cryptographic research.

CRYSTALS-Kyber is the specific algorithm behind BMIC's post-quantum key protection, and it's worth naming precisely rather than waving at “quantum-safe math” in the abstract.

NIST standardized it under the name ML-KEM: Module-Lattice-Based Key-Encapsulation Mechanism. Think of an ordinary cryptographic lock as a puzzle only your key's exact shape can solve quickly. Kyber's puzzle is built from lattice math instead -- imagine a vast, oddly-angled grid of points in many dimensions, where finding one specific point without already knowing the private key takes a search space that stays enormous, even for a quantum computer, based on current research.

NIST selected Kyber in 2024, after a multi-year public competition where cryptographers worldwide were specifically invited to attack every candidate algorithm. That public-attack process is what standardization actually means in practice -- not one company's internal claim about its own math, but years of attempted breaks, in public, that didn't succeed.

BMIC uses ML-KEM for key protection specifically because of that public vetting, replacing reliance on elliptic-curve cryptography alone -- the scheme most wallets still depend on, which has a known theoretical weakness against a sufficiently powerful quantum computer (Shor's algorithm).

FAQ

What does ML-KEM stand for?

Module-Lattice-Based Key-Encapsulation Mechanism -- NIST's standardized name for the algorithm originally called CRYSTALS-Kyber.

Why lattice math specifically?

Certain lattice problems have no known efficient solution even for a quantum computer, based on current cryptographic research -- unlike the math behind most wallets' existing elliptic-curve cryptography.

When was it standardized?

NIST finalized ML-KEM in 2024, after a multi-year public competition where cryptographers worldwide attempted to break every candidate algorithm.

Does this replace all of a wallet's cryptography?

It replaces the specific piece responsible for protecting the private key against quantum attacks -- it doesn't change how the wallet is used day to day.

This page is part of The Complete BMIC Wallet Guide, a 20-episode video " series on how the wallet works, why it works, and how it is designed -- including an honest look at what " it does not protect against. See the full series →
See the live product at bmic.ai →
This page is technical/educational information about wallet security and post-quantum " cryptography, not financial advice. No cryptographic system, BMIC included, can promise protection " against every possible future attack.