· Palaniappan P · 8 min read
AWS KMS Post-Quantum Cryptography: ML-KEM Hybrid TLS and ML-DSA Signatures in Production
AWS KMS, ACM, and Secrets Manager now support ML-KEM hybrid TLS and ML-DSA digital signatures. This guide covers when to enable post-quantum cryptography, how to configure it across the AWS SDK and TLS clients, performance tradeoffs, and how to plan the migration for long-lived data.