JEP 527 is now integrated into JDK 27! This feature enhances the security of Java applications by implementing hybrid key exchange algorithms for TLS 1.3. By combining quantum-resistant ML-KEM with traditional elliptic-curve algorithms, the JDK impl…

Inside Java is a resource for Java developers, offering insights, tutorials, and updates on the Java programming language, platform, and ecosystem. With contributions from Java experts and members of the Java community, Inside Java covers a wide range of topics, including language features, performance optimizations, and upcoming releases. Developers can stay informed about the latest developments in the Java ecosystem, learn about new APIs and frameworks, and explore best practices for building robust and scalable Java applications.

Inside Java

JEP 527 brings post-quantum hybrid key exchange to TLS 1.3 in JDK 27, combining quantum-resistant ML-KEM with traditional elliptic-curve algorithms to defend against future quantum computing attacks. Three hybrid algorithms are now available in the SunJSSE provider: X25519MLKEM768, SecP256r1MLKEM768, and SecP384r1MLKEM1024. X25519MLKEM768 is enabled by default, and applications using javax.net.ssl APIs benefit automatically without code changes. This protects against harvest now, decrypt later threats where encrypted data is collected today for decryption once quantum computers become available.

Post-Quantum Hybrid Key Exchange for TLS 1.3 – Inside.java

Enabling and Customizing Hybrid Key Exchange Support