Hybrid Key Exchange
Combining a classic and a post-quantum key exchange in one session, so the session is only broken by an adversary who defeats both.
A hybrid key exchange derives a session's keys from two independent mechanisms at once - typically the well-studied elliptic-curve exchange X25519 together with the post-quantum ML-KEM - and mixes both results into the final secret. An attacker must break both to read the session, so the arrangement is at least as strong as the stronger half.
The reason to prefer it over a post-quantum algorithm alone is conservative rather than technical: lattice cryptography is newer than the traffic it protects and has had far less time under attack than elliptic curves, while elliptic curves have the opposite problem in a quantum future. Hybrid declines to bet on either. The cost is a larger handshake - more bytes once per connection, not per record - which is another reason a long-lived stream is cheaper than repeated polling. X25519MLKEM768 is the registered and recommended TLS group for exactly this pairing.
Real-time data, at edge speed.
A live evaluation measures EdgeOrigin against your coverage requirements: decision-ready real-time data, delivery latency into your systems, and record-level provenance.