See also:
https://www.openssh.org/pq.html
https://www.redhat.com/en/blog/post-quantum-cryptography-red-hat-enterprise-linux-10
To enable KexAlgorithms option "mlkem768x25519-sha256" for OpenSSH Post-Quantum Cryptography on Rocky Linux 10.2 (as of 2026-0905)
----------------------------------------------------------------------------------------------------------------------------------
# Change to root
sudo su -
# Create new file to enable "mlkem768x25519-sha256"
echo "KexAlgorithms +mlkem768x25519-sha256" > /etc/ssh/sshd_config.d/10-pqc.conf
# Restart sshd service:
systemctl restart sshd
# Verify "mlkem768x25519-sha256" is now enabled:
sshd -T |grep ^kexalgorithms | grep -i mlkem768x25519-sha256
# Example output:
sshd -T |grep ^kexalgorithms | grep -i mlkem768x25519-sha256
kexalgorithms sntrup761x25519-sha512,sntrup761x25519-sha512@openssh.com,mlkem768x25519-sha256,mlkem768nistp256-sha256,mlkem1024nistp384-sha384,curve25519-sha256,curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group16-sha512,diffie-hellman-group18-sha512,diffie-hellman-group14-sha256