Sean Mullan 🏳️‍🌈

JDK 27 is out, and now you can read about the performance improvements that were included in it: inside.java/2026/09/28/p...

My conversation with Sean Mullan, Lead of the OpenJDK Security Group and Tech Lead of the Oracle Security Libraries Team, about security in #Java: inside.java/2026/09/24/p... (Also on Spotify, Apple Podcasts, etc.)

JDK 27 Security Enhancements: seanjmullan.org/blog/2026/09... #jdk #openjdk #security #crypto #jdk27

JDK 27 includes support for post-quantum hybrid key exchange for TLS 1.3 (JEP 527)! This is a significant feature that builds on the ML-KEM post-quantum algorithm that was introduced in JDK 24. Backports are also planned for Oracle JDK update releases -see the Java Crypto Roadmap for more details.

Java 27 is almost here❣️ Join us tomorrow at 15:00 UTC for a 3 hour livestream featuring live coding, technical deep dives and conversations with the guests from the JDK team and community. See you live 👇 www.youtube.com/live/4V2jooU... #Java #JDK27 #AI

Targeted to JDK 28: JEP 542: PEM Encodings of Cryptographic Objects: openjdk.org/jeps/542 #openjdk #jdk28 #security #crypto #java

We have announced plans to backport Post-Quantum Hybrid Key Exchange for TLS 1.3 to Oracle's JDK 25, 21, 17, 11, and 8 update releases. See www.java.com/en/jre-jdk-c... for more details and several other planned actions. #jdk #java #security #pqc #crypto

Targeted to JDK 27: JEP 538: PEM Encodings of Cryptographic Objects (Third Preview): openjdk.org/jeps/538 #openjdk #jdk27 #security #crypto #java

Call to Action: Download #JDK27 and try out the new PQC feature: Post-Quantum Hybrid Key Exchange for TLS 1.3 inside.java/2026/05/17/q... #openjdk #tls #pqc

The initial source code for Project Brisbane has dropped! Project Brisbane is a JCE provider that uses the Foreign Function & Memory API to encapsulate a FIPS 140 validated OpenSSL library. See github.com/openjdk/bris... for more details and subscribe to brisbane-dev@openjdk.org. #openjdk #crypto

My #JavaOne talk on Java and Post-Quantum Cryptography is #2 on Tech Talks Weekly list of top 9 talks and podcasts 😁. www.linkedin.com/posts/tech-t...

My #JavaOne talk on "Java and Post-Quantum Cryptography" is now on YouTube. Check it out! youtu.be/6xh-bN4W74o?...

Probably the most cool visual explanation for HTTP/3 in #JDK26 by @lutskedev.bsky.social and Johannes Bechberger 🥳🥳🥳!!! #Java #JEP #VoxxedDaysAmsterdam

JavaOne keynote. Java 26 JEPs.

JDK 26 Security Enhancements: seanjmullan.org/blog/2026/03... Highlights of this release include a second preview of the PEM API, API support for Hybrid Public Key Encryption, and signed JAR support for the post-quantum ML-DSA algorithm. #jdk #java #security #crypto #jdk26 #openjdk

On my way to #JavaOne 🛫

#JavaOne is coming! Are you? If in person, check out dev.java/community/ja... for a user-friendly schedule. And if you see me on site, flag me down - I want to chat with you. If you stay home, join us on stream: dev.java/community/ja... TL;DR: Tue, Wed, Thu, starting at 1500 UTC.

Less than two weeks until my #JavaOne talk on "Paths to New Numeric Types On the Java Platform" [LRN1429] reg.rf.oracle.com/flow/oracle/... See on you on Tuesday, March 17, 11:30 AM to 12:20 PM PDT in Room 105.

Only 19 more days until JavaOne! This is a developer focused conference where many talks are by engineers working directly on the JDK and Java Platform. And don't forget to use code J12026_BT_FH and get $150 off admission. www.oracle.com/javaone/ #javaone #java #jdk

Check out my colleague Jamil Nimeh's article on "Post-Quantum Hybrid Key Exchange for TLS 1.3": inside.java/2026/02/17/t.... This feature will be in the next JDK release (27). #java #tls #security #jdk27

Come to #JavaOne 2026 on March 17-19! Use code J12026_BT_FH and get $150 off admission. My session is titled "Java and PQC" and I will describe the cryptographic enhancements that we have made to the Java Platform to protect your sensitive data against the future threat of quantum computers.

Hey #Java Developers, ☕️ Early-Bird ticket pricing for #JavaOne (Mar. 17-19) ends ONE WEEK from today on February 9th! Head to javaone.com now to buy your tickets and use the DISCOUNT CODE J1WEB100 for save an additional $100! See you there in March!

Learn more about Prompt Injection techniques and advanced escalation by joining me at #JavaOne (March 17-19 | Redwood Shares, CA). Use code J12026SSM at checkout by Monday, Feb 9 to save $50 off your early registration. See you there! social.ora.cl/6002h6oOr

JEP 527, "Post-Quantum Hybrid Key Exchange for TLS 1.3" now targeted to JDK 27: openjdk.org/jeps/527 mail.openjdk.org/pipermail/jd... #jdk #openjdk #tls #crypto #pqc

JEP 527, "Post-Quantum Hybrid Key Exchange for TLS 1.3" now proposed to target JDK 27: openjdk.org/jeps/527 mail.openjdk.org/pipermail/jd... #jdk #openjdk #tls #crypto #pqc

I have been to many #JavaOne conferences, but last year's was one of my favorites. Don't miss this chance to attend this year's conference, mingle with other Java developers and users and hear some great talks that are being lined up.

The 2nd JEP Preview of "PEM Encodings of Cryptographic Objects" has been targeted to JDK 26. This API makes it easier to encode and decode security objects to/from PEM. If you haven't already, please try it and let us know what you think! openjdk.org/jeps/524 #jdk26 #openjdk #java #security

Only 5 days left. Looking forward to reviewing some security related proposals!

Big news from the JDK Security team 🥳!!! Checkout the roadmap! #Java #JDK #security #cryptography

We plan to backport the quantum-resistant ML-KEM and ML-DSA implementations to Oracle's JDK 21 and 17 releases in the second half of FY26. See www.java.com/en/jre-jdk-c... for more details. #crypto #jdk #java #pqc #security

"Post-Quantum Hybrid Key Exchange for TLS 1.3" is now a JEP Candidate! This feature will protect Java applications using TLS and the javax.net.ssl APIs from future quantum computing attacks. openjdk.org/jeps/527 #java #jdk #security #tls

Four key security-related JEPS have been integrated since JDK 21. #jdk #security #crypto

JDK 25 Security Enhancements: seanjmullan.org/blog/2025/09... Highlights of this release include a final version of the Key Derivation Function API and a new preview API for encoding and decoding cryptographic objects to/from PEM. #jdk #java #security #crypto

JEP 524: PEM Encodings of Cryptographic Objects (Second Preview) is now a Candidate - openjdk.org/jeps/524 This is the second preview of the new PEM API for encoding and decoding security data. Only a few changes since the first preview which will be in JDK 25. #openjdk #crypto #security #java

Great video by @ammbra1508.bsky.social on recent #Java #Security enhancements! Ana explains the concepts and importance of each feature with useful real world examples.

Hey #Java Developers, ☕️ I'm going to be at JVMLS next week and I want to ask the JDK architects your burning questions about Java! Reply here by August 3rd, and upvote any questions you see that you'd like asked! Watch answers on Aug 14th at youtube.com/java

We just published a new JEP Draft for "Post-Quantum Hybrid Key Exhange for TLS 1.3". This will build on the post-quantum ML-KEM implementation in JDK 24 (JEP 496) and is another significant step in protecting your Java applications from future large-scale quantum computers. openjdk.org/jeps/8358541

My #JavaOne `25 talk on "Java Security Evolution: Out with the Old, In with the New" is now available on YouTube: www.youtube.com/watch?v=hLJQ... #java #security

Just one month to go until my #JVMLS talk on "New Numeric Types in Java": openjdk.org/projects/mlv...

JEP 470: PEM Encodings of Cryptographic Objects (Preview) has been targeted to JDK 25 - openjdk.org/jeps/470 This is a Preview API, so we have time to make changes. Let us know if the API is easy to use and satisfies your use cases. #openjdk #crypto #security #java

My status! Mets vs Sox

JEP: 510: Key Derivation Function API has been targeted to JDK 25 - openjdk.org/jeps/510 This was a Preview API in JDK 24, and JDK 25 will contain the final, or permanent version of the API. #openjdk #crypto #security #java