Encryption Engine
AES-256-GCM + ML-KEM (Kyber) Hybrid Encryption Module
Hardware-accelerated symmetric and post-quantum hybrid encryption module providing confidentiality for command uplink and selective downlink, using AES-256-GCM for bulk data and NIST-standardized ML-KEM (Kyber) for key establishment.
Purpose
Protect against unauthorized command injection (which could destroy the Ark) and unauthorized read of sensitive payload (e.g., human genome data) over a 100-year mission spanning the transition to quantum-capable adversaries.
Context
Operates under L3-COM-CRYPT-PROT (SDLS framing); receives keys from L3-COM-CRYPT-KEY and authentication from L3-COM-CRYPT-AUTH. Hardware accelerator (FPGA or rad-hard ASIC) for line-rate operation; algorithms updatable in firmware as standards evolve.
Principles
- ▸AES-256 in GCM mode provides authenticated encryption with associated data (AEAD); 256-bit key resists quantum brute force (Grover's algorithm halves effective security)
- ▸Post-quantum cryptography (PQC) replaces RSA/ECC public-key algorithms vulnerable to Shor's algorithm with lattice-based schemes
- ▸NIST PQC standards published August 2024: FIPS 203 (ML-KEM, formerly Kyber), FIPS 204 (ML-DSA, formerly Dilithium), FIPS 205 (SLH-DSA / SPHINCS+)
- ▸Hybrid encryption combines a classical algorithm (ECDH) with a PQC algorithm (ML-KEM) so security holds if either is broken — recommended during PQC transition
- ▸Hardware acceleration is needed for high-throughput symmetric encryption at line rate; PQC operations are computationally heavier than ECC
- ▸Side-channel resistance (constant-time implementations, masking) prevents timing/power-analysis attacks on extracted keys
Typical implementations
- ▸NIST FIPS 203 ML-KEM (Module Lattice Key Encapsulation Mechanism) — formerly CRYSTALS-Kyber, published Aug 2024
- ▸Microchip / SEAKR rad-hard crypto modules for spacecraft
- ▸ESA Cryptography Application IP for CCSDS SDLS
- ▸Open-source liboqs and PQClean reference implementations for FPGA porting
- ▸Cisco/IBM hybrid (X25519 + ML-KEM) TLS deployments
- ▸NSA CSfC Commercial Solutions for Classified — hybrid classical+PQC requirement for new programs
Lunar considerations
- ▸100-year mission must support algorithm replacement; algorithm agility (cipher suite negotiation) is essential
- ▸Lattice-based PQC computations are slower — ensure rad-hard CPU/FPGA has headroom
- ▸Key rotation schedules must work across the 1.3-second Earth-Moon delay and DSN outage periods
- ▸Long-term key storage (private keys) must survive radiation and physical attack — secure enclave required
- ▸Hardware updates over the lifetime of the Ark may require crypto migration via authenticated firmware updates
Specifications
Functional
| primary function | Authenticated encryption/decryption of command and telemetry data with PQC key establishment |
| inputs | Plaintext blocks from L3-COM-CRYPT-PROT, Ciphertext blocks from L3-COM-EARTH-PROC / L3-COM-MESH-ROUT, Symmetric keys from L3-COM-CRYPT-KEY, ML-KEM ciphertexts/encapsulations for session keys |
| outputs | Ciphertext + authentication tag to L3-COM-CRYPT-PROT, Decrypted plaintext + authentication verdict to L3-COM-CRYPT-PROT, Session key establishment results, Performance and error telemetry |
| symmetric algorithms | AES-256-GCM, AES-256-XTS (storage), ChaCha20-Poly1305 (alt) |
| pqc algorithms | ML-KEM-768 (Kyber-768), ML-KEM-1024 (Kyber-1024) |
| hybrid key exchange | X25519 + ML-KEM-768 |
| throughput mbps min | 100 |
| side channel resistance | constant-time, masked |
| key size bits | 256, 768, 1024 |
Physical
| mass kg | 0.3 |
| dimensions | 100 × 80 × 15 mm module |
| materials | Rad-tolerant FPGA (Microchip RTG4), Rad-hard secure enclave / HSM (Microchip CryptoAuthentication or equivalent), Tantalum/ceramic capacitors, Polyimide PCB |
| operating temperature c | -40, 70 |
| radiation tid krad | 100 |
Operational
| power consumption w | 3 |
| thermal range c | -40, 70 |
| lifetime years | 25 |
| mtbf hours | 250000 |
Interfaces
Provides
- Authenticated encryption/decryption operations
- Encryption at rest for sensitive vault contents
Requires
- Encryption keys and key schedules
- Authentication credentials for hybrid key exchange
- 5 V/1.8 V supplies, ~3 W
Cite this entry
Lunar Ark Codex. "Encryption Engine" (L3-COM-CRYPT-ENC). Retrieved 10 September 2026, from https://lunarark.com/entry/L3-COM-CRYPT-ENC
Licensed CC-BY-SA 4.0. You may reuse and adapt this entry with attribution, under the same licence.