Dashboard  /  Generate

Generate Key

Create a new post quantum key pair in the vault. The private half is encrypted at rest with AES-256-GCM; only the public half is ever exported.

A human readable label. Rotation preserves the name across generations.
ML-KEM is for key encapsulation, ML-DSA is for digital signatures. Preferred tier is ML-KEM-1024 and ML-DSA-87.
Cancel

Parameter Sets

AlgorithmTypeTierPublic KeySecret Key
ML-KEM-1024 KEM preferred 1568 B 3168 B
ML-KEM-768 KEM legacy 1184 B 2400 B
ML-DSA-87 SIG preferred 2592 B 4896 B
ML-DSA-65 SIG legacy 1952 B 4032 B