diff --git a/pkg/tls/certificate.go b/pkg/tls/certificate.go
index e1e11191c..ea7f895ae 100644
--- a/pkg/tls/certificate.go
+++ b/pkg/tls/certificate.go
@@ -35,14 +35,16 @@ var (
 	// Available CurveIDs defined at https://godoc.org/crypto/tls#CurveID,
 	// also allowing rfc names defined at https://tools.ietf.org/html/rfc8446#section-4.2.7
 	CurveIDs = map[string]tls.CurveID{
-		`secp256r1`: tls.CurveP256,
-		`CurveP256`: tls.CurveP256,
-		`secp384r1`: tls.CurveP384,
-		`CurveP384`: tls.CurveP384,
-		`secp521r1`: tls.CurveP521,
-		`CurveP521`: tls.CurveP521,
-		`x25519`:    tls.X25519,
-		`X25519`:    tls.X25519,
+		`secp256r1`:      tls.CurveP256,
+		`CurveP256`:      tls.CurveP256,
+		`secp384r1`:      tls.CurveP384,
+		`CurveP384`:      tls.CurveP384,
+		`secp521r1`:      tls.CurveP521,
+		`CurveP521`:      tls.CurveP521,
+		`x25519`:         tls.X25519,
+		`X25519`:         tls.X25519,
+		`x25519mlkem768`: tls.X25519MLKEM768,
+		`X25519MLKEM768`: tls.X25519MLKEM768,
 	}
 )