The asymmetric algorithm for key establishment is ML-KEM (FIPS 203), previously CRYSTALS-Kyber, at the ML-KEM-1024 parameter set to protect information up to TOP SECRET, as CNSSP 15 Annex B lists it among the general purpose algorithms; only ML-KEM as specified in FIPS 203 is in CNSA 2.0, and an implementation called CRYSTALS-Kyber that does not adhere to FIPS 203 is not compliant. Hybrid solutions combining a CNSA 2.0 algorithm with a CNSA 1.0 one may be allowed or required by protocol standards, product availability or interoperability (FAQ), but from the mandated date selecting CNSA 1.0 algorithms alone is no longer approved. Annex A of the policy still dates FIPS 203 to 24 August 2023, the draft; the final standard was published in August 2024.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.