KEM

A KEM is a public-key primitive that securely delivers a random shared secret: the sender encapsulates a secret against the recipient's public key, and the recipient decapsulates it with the private key. It is the standard way modern and post-quantum schemes establish keys, replacing direct public-key encryption of session keys. NIST's ML-KEM is the flagship post-quantum example.