Oracle announced the general availability of JDK 27, featuring nine significant enhancements including improvements to Java language features, security, performance, and libraries. Key additions include hybrid key exchange for quantum-resistant TLS 1.3, new cryptographic encoding APIs, AI inferencing support via pattern matching enhancements, G1 garbage collector as default, compact object headers, lazy constants initialization, structured concurrency APIs, and vector computation optimizations.
RFC 10042 defines Post-Quantum/Traditional Hybrid key exchange methods for SSH to protect against harvest-now-decrypt-later attacks from future quantum computers. It extends SSH's transport layer with PQ/T Hybrid methods based on module-lattice-based key-encapsulation mechanisms, ensuring security is at least as strong as the most secure scheme in the hybrid exchange.
A technical document discusses quantum O(1) invariants and their application to post-quantum cryptography, with references to formal theorem proofs and FPGA pipeline performance metrics. The author notes ongoing debugging work and mentions version control considerations.
Cloudflare's 1.1.1.1 DNS resolver now validates post-quantum DNSSEC signatures using ML-DSA-44, a NIST-standardized algorithm, to prepare DNS infrastructure for potential quantum computing threats. The implementation addresses the challenge of handling much larger signatures (2,420 bytes) while maintaining backward compatibility with conventional algorithms.
Cloudflare's 1.1.1.1 DNS resolver now validates post-quantum DNSSEC signatures using ML-DSA-44, a NIST-standardized algorithm, to prepare DNS infrastructure for potential quantum computer threats. The transition presents challenges due to the large size of post-quantum signatures (2,420 bytes) and the need to maintain backward compatibility with older resolvers during the migration.