Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

kem

package

Go to main page

Versions in this module

v1

v1.26.16

May 12, 2026

v1.26.15

May 12, 2026

v1.26.14

May 12, 2026

v1.26.13

May 11, 2026

v1.26.12

May 11, 2026

Changes in this version

+ func NISTCategory(scheme KeyExchangeID) uint8

+ func SharedSecretBits(scheme KeyExchangeID) uint16

v1.26.11

May 11, 2026

v1.26.10

May 11, 2026

Changes in this version

+ const AEADKeySize

+ const DKGChannelScheme

+ const SharedSecretSize

+ const TranscriptHashSize

+ var ErrBadCiphertextSize = errors.New("kem: ciphertext size does not match scheme")

+ var ErrBadPrivateKeySize = errors.New("kem: private key size does not match scheme")

+ var ErrBadPublicKeySize = errors.New("kem: public key size does not match scheme")

+ var ErrClassicalKEMForbidden = errors.New("kem: classical KEM forbidden in strict-PQ mode")

+ var ErrDKGSchemeMismatch = errors.New("kem: DKG channels MUST use ML-KEM-1024")

+ var ErrEmptyTranscript = errors.New("kem: transcript is empty")

+ var ErrUnsupportedAEAD = errors.New("kem: unsupported AEAD")

+ var ErrUnsupportedScheme = errors.New("kem: unsupported scheme")

+ func AssertDKGCompliance(sessionScheme, profileHighValueKEM KeyExchangeID) error

+ func CiphertextSize(scheme KeyExchangeID) (int, error)

+ func GenerateKEMKeypair(scheme KeyExchangeID, randSrc io.Reader) (pub, priv []byte, err error)

+ func HashTranscript(msgs ...[]byte) [TranscriptHashSize]byte

+ func NewAEAD(id AEADID, key []byte) (cipher.AEAD, error)

+ func PublicKeySize(scheme KeyExchangeID) (int, error)

+ type AEADID uint8

+ const AEADChaCha20Poly1305

+ const AEADNone

+ func (a AEADID) String() string

+ type ActiveProfile struct

+ DKGKEM KeyExchangeID

+ ForbidClassicalKEM bool

+ HashSuite string

+ Name string

+ NodeIdentity string

+ PostQuantumE2E bool

+ SessionKEM KeyExchangeID

+ func LuxStrictE2EPQ() ActiveProfile

+ func (p ActiveProfile) Banner() string

+ func (p ActiveProfile) Validate() error

+ type KEMSession struct

+ SchemeID KeyExchangeID

+ SharedSecret [SharedSecretSize]byte

+ TranscriptHash [TranscriptHashSize]byte

+ func InitiateDKGKEMSession(scheme KeyExchangeID, peerKEMPub []byte, transcript []byte) (*KEMSession, []byte, error)

+ func InitiateKEMSession(scheme KeyExchangeID, peerKEMPub []byte, transcript []byte) (*KEMSession, []byte, error)

+ func RespondDKGKEMSession(scheme KeyExchangeID, ourKEMSec []byte, peerCiphertext []byte, ...) (*KEMSession, error)

+ func RespondKEMSession(scheme KeyExchangeID, ourKEMSec []byte, peerCiphertext []byte, ...) (*KEMSession, error)

+ func (s *KEMSession) DeriveAEADKey() [AEADKeySize]byte

+ func (s *KEMSession) DeriveDKGAEADKey() ([AEADKeySize]byte, error)

+ type KeyExchangeID uint8

+ const KeyExchangeMLKEM1024

+ const KeyExchangeMLKEM512

+ const KeyExchangeMLKEM768

+ const KeyExchangeNone

+ const KeyExchangeP256Unsafe

+ const KeyExchangeP384Unsafe

+ const KeyExchangeX25519Unsafe

+ func (k KeyExchangeID) IsForbiddenInPQMode() bool

+ func (k KeyExchangeID) IsPostQuantum() bool

+ func (k KeyExchangeID) NISTCategory() uint8

+ func (k KeyExchangeID) SharedSecretBits() uint16

+ func (k KeyExchangeID) String() string