Java Security Evolution - Out with the Old, In with the New
summary
JDK 24 permanently disables the security manager permanently disabled so attempts to enable it throw errors and System.setSecurityManager throws UnsupportedOperationException, while common permission-check patterns still behave as before for compatibility. Java 24 adds post‑quantum support: a KEM via MLChem key encapsulation (512/768/1024) with keytool support, a lattice signature MLDDSA signatures (44/65/87) with keypair/cert generation, and a preview KDF (HKDF) API; JDK22/23 also added TLS/provider introspection and macOS root keychain access.
AI-written summary · about
chapters (6)
- 0:00Introduction to Java security
- 3:14Principles of security updates
- 11:40Post-quantum cryptography
- 19:47Deprecation of security manager
- 32:14Enhancements and future outlook
- 38:18Q&A session
related talks
45mFrom Java 17 to 21: A Showcase of JDK Security Enhancements
51mJava and Post-Quantum Cryptography
48mSecure Java Applications against Quantum Threats
52mSecurity Control Enhancements
39mEvolving the Security of the Java Platform
40mMaximizing Security with JDK: Understanding Built-in Capabilities
44mMaking the JDK More Secure
37mKeeping Your Java Applications Secure - Cryptographic Improvements and Best Practices