Particle.news

Oracle Releases Java 27 With Post‑Quantum TLS and Performance Upgrades

It delivers hybrid post‑quantum key exchange, in‑process JFR data redaction and incubator performance APIs alongside vendor libraries for enterprise adoption ahead of JDK 28 in 2027.

Overview

  • This week Oracle published JDK 27, a non‑LTS release that includes nine JEPs with key items such as JEP 527 (post‑quantum hybrid key exchange for TLS 1.3), JEP 536 (in‑process Java Flight Recorder data redaction) and JEP 537 (Vector API in incubator).
  • JEP 527 implements hybrid post‑quantum key exchange to protect data from 'harvest now, decrypt later' threats by combining classical and post‑quantum algorithms and aligns with ongoing IETF work on hybrid TLS specifications.
  • Runtime and language changes in JDK 27—including the Vector API incubator, Structured Concurrency preview, compact object headers by default, and G1 as the default garbage collector—aim to reduce memory use and speed AI and data processing without forcing native code.
  • Oracle folded Helidon 27, JavaFX 27 and Oracle Jipher 20 into the Java Verified Portfolio to give enterprises supported libraries and FIPS‑capable cryptography, and Oracle Cloud Infrastructure is reported as the first cloud provider to offer platform support for JDK 27 deployments.
  • Many JDK 27 features remain in preview or incubator stages and Oracle has published early‑access JDK 28 previews for Project Valhalla and Leyden targeting 2027, so widespread enterprise migration will hinge on stabilization, vendor binaries and further testing.