Java and Post-Quantum Cryptography
summary
Java adds concrete post‑quantum pieces: a new KEM API (JDK 21), a finalized KDF API (JDK 25), implementations of ML‑KEM (JDK 24 with parameter sets 512/768/1024), ML‑DSA (JDK 24 with 44/65/87), and HSS/LMS (JDK 21). JDK 26 ships HPKE and ML‑DSA jar signing; JDK 27 integrates TLS 1.3 hybrid key exchange (default X25519+ML‑KEM‑768 enabled). Keytool, jarsigner, intrinsics and planned backports to Java 17/21 are delivered or scheduled; performance and certificate size tradeoffs are acknowledged and being optimized.
AI-written summary · about
chapters (14)
- 0:00Java and post-quantum crypto
- 1:50Quantum threat to crypto
- 8:35NIST post-quantum standards
- 13:39Java crypto evolution
- 17:31Java PQC roadmap
- 20:42Hash-based sigs HSS/LMS in JDK 21
- 22:50KEM API and key encapsulation
- 24:16ML-KEM lattice key exchange JDK 24
- 27:32ML-DSA lattice signatures JDK 24
- 32:06HKDF key derivation JDK 25
- 36:01Hybrid public key encryption JDK 26
- 37:07PQ hybrid TLS 1.3 JDK 27
- 41:28Future Java security projects
- 44:39Q&A
related talks
48mSecure Java Applications against Quantum Threats
40mJava Security Evolution - Out with the Old, In with the New
45mFrom Java 17 to 21: A Showcase of JDK Security Enhancements
46mFrom Theory to Practice: Real-World Lessons in Post-Quantum Cryptography Migration
47mReal-World Lessons in Post-Quantum Cryptography Migration
37mKeeping Your Java Applications Secure - Cryptographic Improvements and Best Practices
52mSecurity Control Enhancements
44mTheory to Practice: Real-World Lessons in Post-Quantum Cryptography Migration