Sean Mullan 🏳️‍🌈
banner
seanjmullan.org
Sean Mullan 🏳️‍🌈
@seanjmullan.org
OpenJDK Security Group Lead. Views my own.
Reposted by Sean Mullan 🏳️‍🌈
📢Important Update 📢

Many have asked for more time to submit to the 2026 #JavaOne call for papers. We've extended the deadline until Nov 13th at 11:59pm PT. Be sure to submit your #Java proposal(s) before time runs out:

➡️ social.ora.cl/6013A7UXF
November 11, 2025 at 5:43 PM
Only 5 days left. Looking forward to reviewing some security related proposals!
🚨 Time Sensitive 🚨

#Java peers...the 2026 #JavaOne call for papers closes soon. Get your proposals in by the Nov 11 deadline ➡️
social.ora.cl/6017A7UwL
November 6, 2025 at 10:05 PM
Reposted by Sean Mullan 🏳️‍🌈
📢 Announcement 📢

#Java peers, the 2026 #JavaOne call for papers is now LIVE. Please make your submissions by November 11, 2025 5:00 p.m. PT by visiting the conference website:

➡️ social.ora.cl/6013A7UXF
October 23, 2025 at 5:27 PM
Reposted by Sean Mullan 🏳️‍🌈
Big news from the JDK Security team 🥳!!! Checkout the roadmap!
#Java #JDK #security #cryptography
We plan to backport the quantum-resistant ML-KEM and ML-DSA implementations to Oracle's JDK 21 and 17 releases in the second half of FY26. See www.java.com/en/jre-jdk-c... for more details.

#crypto #jdk #java #pqc #security
www.java.com
October 9, 2025 at 12:53 PM
We plan to backport the quantum-resistant ML-KEM and ML-DSA implementations to Oracle's JDK 21 and 17 releases in the second half of FY26. See www.java.com/en/jre-jdk-c... for more details.

#crypto #jdk #java #pqc #security
www.java.com
October 9, 2025 at 11:30 AM
"Post-Quantum Hybrid Key Exchange for TLS 1.3" is now a JEP Candidate! This feature will protect Java applications using TLS and the javax.net.ssl APIs from future quantum computing attacks.

openjdk.org/jeps/527

#java #jdk #security #tls
JEP 527: Post-Quantum Hybrid Key Exchange for TLS 1.3
openjdk.org
October 1, 2025 at 12:58 PM
Four key security-related JEPS have been integrated since JDK 21.

#jdk #security #crypto
#Java peers...Find out what #JDK enhancement proposals have been integrated in #JDK25 since #JDK21:

openjdk.org/projects/jdk...
September 24, 2025 at 12:56 PM
JDK 25 Security Enhancements: seanjmullan.org/blog/2025/09...

Highlights of this release include a final version of the Key Derivation Function API and a new preview API for encoding and decoding cryptographic objects to/from PEM.

#jdk #java #security #crypto
seanjmullan.org
September 23, 2025 at 2:36 PM
JEP 524: PEM Encodings of Cryptographic Objects (Second Preview) is now a Candidate - openjdk.org/jeps/524

This is the second preview of the new PEM API for encoding and decoding security data. Only a few changes since the first preview which will be in JDK 25.

#openjdk #crypto #security #java
September 12, 2025 at 1:58 PM
Great video by @ammbra1508.bsky.social on recent #Java #Security enhancements! Ana explains the concepts and importance of each feature with useful real world examples.
Emerging threats demand stronger defenses for #Java apps!

Learn how to adapt runtime security settings and prepare for post-quantum cryptography from the latest video from our #RoadTo25 series:

youtu.be/xeOuEqorY8g

#JDK25 #OpenJDK #SecurityUpdate #Security
How to Handle Security Changes in Java 25 #RoadTo25
YouTube video by Java
youtu.be
September 8, 2025 at 2:10 PM
Reposted by Sean Mullan 🏳️‍🌈
#Java peers, #JavaOne IS BACK AGAIN IN 2026 (March 17-19). Read our blog to learn more and sign up w/interest if you want to attend, speak, or sponsor: social.ora.cl/6011fdkbH
August 4, 2025 at 3:40 PM
Reposted by Sean Mullan 🏳️‍🌈
Hey #Java Developers, ☕️

I'm going to be at JVMLS next week and I want to ask the JDK architects your burning questions about Java! Reply here by August 3rd, and upvote any questions you see that you'd like asked!

Watch answers on Aug 14th at youtube.com/java
August 1, 2025 at 2:50 PM
We just published a new JEP Draft for "Post-Quantum Hybrid Key Exhange for TLS 1.3". This will build on the post-quantum ML-KEM implementation in JDK 24 (JEP 496) and is another significant step in protecting your Java applications from future large-scale quantum computers.

openjdk.org/jeps/8358541
New JEP Draft: JDK-8358541: Post-Quantum Hybrid Key Exchange for TLS 1.3
mail.openjdk.org
July 24, 2025 at 5:22 PM
My #JavaOne `25 talk on "Java Security Evolution: Out with the Old, In with the New" is now available on YouTube: www.youtube.com/watch?v=hLJQ...

#java #security
Java Security Evolution - Out with the Old, In with the New
YouTube video by Java
www.youtube.com
July 21, 2025 at 7:42 PM
Reposted by Sean Mullan 🏳️‍🌈
Just one month to go until my #JVMLS talk on "New Numeric Types in Java": openjdk.org/projects/mlv...
openjdk.org
July 5, 2025 at 7:04 PM
JEP 470: PEM Encodings of Cryptographic Objects (Preview) has been targeted to JDK 25 - openjdk.org/jeps/470

This is a Preview API, so we have time to make changes. Let us know if the API is easy to use and satisfies your use cases.

#openjdk #crypto #security #java
JEP 470: PEM Encodings of Cryptographic Objects (Preview)
openjdk.org
May 27, 2025 at 8:41 PM
My status! Mets vs Sox
May 22, 2025 at 12:27 AM
JEP: 510: Key Derivation Function API has been targeted to JDK 25 - openjdk.org/jeps/510

This was a Preview API in JDK 24, and JDK 25 will contain the final, or permanent version of the API.

#openjdk #crypto #security #java
openjdk.org
May 16, 2025 at 1:41 PM
Reposted by Sean Mullan 🏳️‍🌈
This is a long expected feature!
Most framework provide such feature, it is great that it would be provided OOTB by the JDK
PEM Encodings of Cryptographic Objects (Preview) is now a Candidate JEP - openjdk.org/jeps/470

This is a new API for encoding and decoding Java objects to and from the PEM format.

#openjdk #crypto #security #java
April 29, 2025 at 1:36 PM
PEM Encodings of Cryptographic Objects (Preview) is now a Candidate JEP - openjdk.org/jeps/470

This is a new API for encoding and decoding Java objects to and from the PEM format.

#openjdk #crypto #security #java
April 29, 2025 at 1:13 PM
JEP: 510: Key Derivation Function API is now a Candidate - openjdk.org/jeps/510

This was a Preview API in JDK 24, and we are now proposing to finalize the API.

#openjdk #crypto #security #java
openjdk.org
April 16, 2025 at 12:41 PM
Reposted by Sean Mullan 🏳️‍🌈
My #JavaOne talk on Sequenced Collections has been posted!

youtu.be/6yuDqkkYTGU?...
Sequenced Collections - Deep Dive with the Expert
YouTube video by Java
youtu.be
April 13, 2025 at 5:43 AM
JDK 24 Security Enhancements: seanjmullan.org/blog/2025/04...

Highlights of this release include 2 new core quantum-resistant cryptographic algorithms (ML-KEM and ML-DSA), a preview API for Key Derivation Functions, and the permanent disabling of the Security Manager.

#jdk #java #security #crypto
JDK 24 Security Enhancements
seanjmullan.org
April 8, 2025 at 1:24 PM
We're hiring! The Java Platform Group is responsible for developing the JDK. Most work is in open source (OpenJDK). This opening is for the Java Security Libraries team. It can be on-site or remote.

www.linkedin.com/jobs/view/41...

#security #crypto #hiring #java #jdk
Oracle hiring Principal Software Developer (Java Security Libraries) in United States | LinkedIn
Posted 1:00:23 PM. Job DescriptionDesign, develop, troubleshoot and debug software programs for databases…See this and similar jobs on LinkedIn.
www.linkedin.com
March 25, 2025 at 1:38 PM
Thanks for all those who attended my session on #Java Security Evolution at #JavaOne 2025. I'll send a link to my slides in a followup post.
March 23, 2025 at 2:49 PM