Oracle has bolstered Java’s defenses against future quantum computing threats with Java 27, the latest release of its widely used programming language. The update introduces hybrid key exchange for TLS 1. 3, a specific implementation designed to strengthen post-quantum cryptography and prepare applications for evolving security needs. Featuring nine JDK Enhancement Proposals aimed at boosting developer productivity and application performance, Java 27 also delivers updates to Helidon and JavaFX. “Java’s security, reliability, and enterprise scale make it a critical foundation for AI agents,” said Arnal Dayaratna, research vice president, software development, IDC.
Java 27 Strengthens TLS 1.3 with Post-Quantum Hybrid Key Exchange
Java 27 introduces hybrid key exchange for Transport Layer Security 1. 3, a proactive step toward safeguarding data transmission against the potential threat of quantum computers compromising current encryption standards. This implementation prepares applications for a future where algorithms currently considered secure may become vulnerable to attack, particularly for sensitive communications across diverse digital environments. The new feature addresses “harvest now, decrypt later” threats by combining conventional and post-quantum cryptographic methods, offering a layered defense.
Oracle is also extending its commitment to secure communications through updates to the Oracle Java Verified Portfolio (JVP), including the addition of Oracle Jipher 20. This inclusion assists customers in deploying Java applications within environments governed by Federal Information Processing Standard 140 (FIPS 140), a United States government computer security standard used to accredit cryptographic modules.
The move underscores Java’s increasing focus on compliance and trust in handling sensitive data, a critical requirement for enterprise AI systems and business-critical applications. The integration of post-quantum cryptography within Java 27 isn’t simply about future-proofing; it’s about enabling developers to meet evolving cryptographic requirements with minimal disruption. The hybrid approach allows for a gradual transition to post-quantum algorithms without immediately breaking compatibility with existing systems.
Further bolstering Java’s capabilities, the Vector API, now in its 12th incubator phase, aims to accelerate analytics, AI inference, and scientific computing workloads without requiring specialized native code. This enhancement promises improved throughput by optimizing data processing and delivering more insights with less hardware, benefiting data-intensive applications. Simultaneously, the Structured Concurrency JEP seeks to reduce development risk for cloud, microservices, and AI-enabled applications by enabling the creation of scalable, resilient services with fewer concurrency defects.
This is particularly relevant for AI workloads that coordinate numerous parallel tasks, such as model calls, data retrieval, and real-time decision-making. Oracle’s commitment extends beyond immediate releases, with previews of future innovations like Project Valhalla available through JDK 28’s early access program.
Project Valhalla focuses on bridging the gap between Java objects and primitives, beginning with value classes, potentially offering denser and more efficient data representation for applications in analytics, financial services, and AI, the company says. “For more than three decades, Java has helped developers build powerful, reliable, and secure applications,” said Georges Saab, senior vice president, Oracle Java Platform and chair, OpenJDK governing board.
3, specifically “helps organizations strengthen the protection of sensitive data and business-critical communications against” emerging threats. This feature is designed to be minimally disruptive, allowing developers to adapt to new cryptographic standards without extensive code refactoring.
Oracle’s partnership with Quantinuum, demonstrated by the integration of Quantinuum’s Helios quantum computer into Oracle Cloud Infrastructure, further supports these advancements, providing access to quantum computing resources for testing and development, according to the company. The company’s algorithmic approach, which reduces average quantum circuit depth by 53.99% compared with existing methods, also contributes to more efficient quantum computations, the company says. These combined efforts position Java 27 as a platform prepared for the evolving landscape of secure computation and the demands of increasingly sophisticated AI applications.
For more than three decades, Java has helped developers build powerful, reliable, and secure applications.
Georges Saab, senior vice president, Oracle Java Platform and chair, OpenJDK governing board
See today’s quantum computing news on Quantum Zeitgeist for the latest breakthroughs in qubits, hardware, algorithms, and industry deals.
