Overview
- Oracle officially released Java 27, which includes JEP 527, a hybrid TLS 1.3 key‑exchange that combines classical algorithms with post‑quantum primitives so captured traffic today cannot be decryptable by future quantum computers.
- The release adds security management features to help regulated deployments, including JEP 536 for in‑process data redaction in Java Flight Recorder and JEP 538 for safer PEM handling of cryptographic materials.
- Java 27 ships runtime and API changes aimed at AI and heavy data workloads, such as the Vector API incubator for faster numeric code, a preview of structured concurrency to simplify parallel tasks, compact object headers by default to cut memory use, and G1 set as the default garbage collector for predictable performance.
- Oracle expanded the verified cryptography and ecosystem support by adding Oracle Jipher 20 to the Java Verified Portfolio with a FIPS 140‑3 validated OpenSSL module and post‑quantum algorithms, publishing Helidon 27 and JavaFX 27 updates, and reporting OCI as the first cloud provider to support JDK 27.
- Market and roadmap signals followed the launch: Oracle shares ticked down modestly after the announcement and the company published JDK 28 early‑access previews featuring Project Valhalla and Project Leyden as the next phase of platform improvements.