FrodoKEM
An unstructured-lattice key-encapsulation mechanism several European authorities recommend as a conservative hedge against a future break in ML-KEM's structured-lattice assumptions, at a real performance cost.
Approved or recommended by
FranceANSSI
RecommendedA valid conservative option for high-security applications where the bandwidth penalty is not prohibitive.
ANSSI views on the Post-Quantum Cryptography transition (2023 follow-up) →SpainCCN (Centro Criptológico Nacional)
RecommendedNetherlandsAIVD / CWI / TNO
PermittedAcceptable, not recommended, pending standardisation.
The PQC Migration Handbook, 2nd edition (Dec 2024) →MalaysiaCyberSecurity Malaysia (MySEAL)
PermittedFrodoKEM 976, 1344 · eFrodoKEM 976, 1344
AKSA MySEAL 2.1 Approved algorithm list →This page lists only jurisdictions we have researched and where a primary source names a position on FrodoKEM specifically. Absence from this list is not evidence a country prohibits or ignores it -- see that country's page directly.