Secure Java Applications against Quantum Threats
summary
Claims that Java already implements HPKE + ML‑KEM + KDF + AEAD and that JDK 21/24/25 add the needed APIs and algorithms (ML‑KEM, MLDDSA, final KDF) and practical tooling. Demonstration generates ML‑KEM keypairs with keytool, derives keys and encrypts/signs between Alice and Bob, and runs a Spring Boot app with mutual TLS using ML keys; JFR/jcmd capture SSL handshake and certificate events; browser support is limited and OpenQuantumSafe OpenSSL provider (v0.7.0) is needed for non‑Java tooling.
AI-written summary · about
chapters (9)
- 0:00Introduction and goals
- 1:55Quantum threats and risks
- 6:05Understanding quantum threats
- 8:54Post-quantum standards
- 13:53Implementing HPKE in Java
- 17:38Messaging simulation
- 24:38Application security demo
- 34:10JDK tools and profiling
- 37:50Conclusion and Q&A
related talks
51mJava and Post-Quantum Cryptography
40mJava Security Evolution - Out with the Old, In with the New
46mFrom Theory to Practice: Real-World Lessons in Post-Quantum Cryptography Migration
47mReal-World Lessons in Post-Quantum Cryptography Migration
45mFrom Java 17 to 21: A Showcase of JDK Security Enhancements
37mKeeping Your Java Applications Secure - Cryptographic Improvements and Best Practices
44mTheory to Practice: Real-World Lessons in Post-Quantum Cryptography Migration
52mSecurity Control Enhancements