Oracle Launches Java 27 Featuring Hybrid Post-Quantum Cryptography for TLS 1.3
Oracle Launches Java 27 Featuring Hybrid Post-Quantum Cryptography for TLS 1.3 Oracle (NYSE: ORCL) has announced the general availability of Java 27 (Oracle JDK 27), introducing significant security, runtime, and developer updates across the Java ecosystem. A central focus of the release is advancing enterprise post-quantum cryptography (PQC) readiness to protect global cloud, microservice, and enterprise applications against “harvest now, decrypt later” security threats. Heading the security updates is JEP 527: Post-Quantum Hybrid Key Exchange for TLS 1.3, which integrates hybrid key exchange algorithms natively into the javax.net.ssl APIs. By combining classical key exchange with quantum-resistant key encapsulation mechanisms, Java 27 enables default quantum protection for network communications without requiring application code rewrites. Additionally, Oracle announced Oracle Jipher 20, now included in the Oracle Java Verified Portfolio (JVP), which wraps a FIPS 140-3 validated OpenSSL cryptographic module supporting NIST-standardized ML-KEM (Kyber) and ML-DSA (Dilithium) algorithms. [ Java 27 PQC & Cryptographic Security Enhancements ]Enhancement / FeatureImplementation MechanismSecurity & Operational BenefitJEP 527 (Hybrid TLS 1.3)Native integration via javax.net.ssl standard APIsDefends TLS network streams against future quantum decryption without breaking legacy compatibility.Oracle Jipher 20FIPS 140-3 validated OpenSSL module in Java Verified PortfolioAdds native support for NIST ML-KEM and ML-DSA algorithms in regulated enterprise environments.JEP 538 (PEM Encodings)Third preview for encoding cryptographic objectsStreamlines management and interoperability of quantum-safe keys, certificates, and CRLs. Beyond security enhancements, JDK 27 incorporates performance and language optimizations, including JEP 534 (Compact Object Headers by Default) to reduce JVM heap footprints and JEP 523 (G1 Default Garbage Collector Across All Environments). The update
