Skip to content

feat: Post-quantum TLS via JDK 25 - #2595

Draft
mattrpav wants to merge 1 commit into
apache:mainfrom
mattrpav:post-quantum-cryptography-tls
Draft

mattrpav wants to merge 1 commit into
apache:mainfrom
mattrpav:post-quantum-cryptography-tls

Conversation

@mattrpav

@mattrpav mattrpav commented Sep 21, 2026 •

Copy link
Copy Markdown
Contributor

*** Pending October 26 release of PQC support in JDK 25

Notes:

  • M-R jar used to isolate supported features to jdk25
  • JDK 25 puts post-quantum algorithms at the front of the list by default
  • JDK 25 required for ML-KEM and other post-quantum algorithm support
  • JDK 25 now allows specifying algorithm group names (aka 'NamedGroups'), so all the quantum-ready groups can be added vs having to sift through algorithm names in a list.
  • JMX operations added for the specific values related to post-quantum configuration
public String[] getNamedGroups();
public String[] getSignatureSchemes();
public boolean isRequirePostQuantumKeyExchange();

@mattrpav
mattrpav force-pushed the post-quantum-cryptography-tls branch from f7e4aff to c8a75f5 Compare September 21, 2026 17:00
@mattrpav mattrpav added this to the 2026 Security hardening milestone Sep 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: In progress

Development

Successfully merging this pull request may close these issues.

1 participant