A lattice-based key encapsulation mechanism selected by NIST for post-quantum cryptography standardization.