Encrypt plaintext to a recipient using both X25519 and ML-KEM-768.
The sender generates an ephemeral X25519 key pair and an ephemeral
ML-KEM-768 encapsulation. Both shared secrets are combined via
HKDF-SHA256 to derive the encryption key.
Output format:
ephemeral_x25519_pub (32 B) || ml_kem_ciphertext (1088 B) ||
nonce (24 B) || ciphertext || tag (16 B)
Encrypt
plaintextto a recipient using both X25519 and ML-KEM-768.The sender generates an ephemeral X25519 key pair and an ephemeral ML-KEM-768 encapsulation. Both shared secrets are combined via HKDF-SHA256 to derive the encryption key.
Output format: ephemeral_x25519_pub (32 B) || ml_kem_ciphertext (1088 B) || nonce (24 B) || ciphertext || tag (16 B)