Java 27 brings major post-quantum security leap, G1 garbage collector by default, and more

Oracle has released Java 27, marking a significant milestone in the programming language's security infrastructure with enhanced post-quantum cryptography (PQC) capabilities. The latest version introduces hybrid key exchange for TLS 1.3, helping organizations prepare for secure communications in a future quantum computing landscape. The update delivers nine JDK Enhancement Proposals (JEPs) focused on boosting developer productivity, improving application performance, and strengthening security features across enterprise deployments.

The release encompasses a mix of preview, incubator, and finalized enhancements across the platform. Four of the nine JEPs are preview features allowing developers to test emerging language capabilities before finalization, while one incubator feature provides early access to experimental APIs. Key additions include Lazy Constants initialization and in-process data redaction to JDK Flight Recorder, a security-focused enhancement filtering sensitive information before diagnostic data is written. Other notable improvements span structured concurrency, primitive type patterns, and continued evolution of the Vector API for accelerated computation. Java 27 also makes the Garbage-First (G1) garbage collector the default collector in all environments, rather than just server environments. In addition, Java 27 brings memory footprint optimization, while TLS security updates strengthen cryptographic foundations across network communications.

The release extends beyond core security enhancements, bringing coordinated updates across the Java ecosystem. JavaFX 27 offers developers improved performance and accessibility for building interactive user experiences, including enhanced metal rendering on macOS and richer text editing controls. Meanwhile, Helidon 27 supports lightweight microservices development. Oracle highlighted JDK 28 early access as well, which previews upcoming innovations like Project Valhalla. Georges Saab, senior vice president of Oracle's Java Platform and chair of the OpenJDK governing board, emphasized that Java 27 represents “a major post-quantum cryptography milestone” with Oracle executing on a roadmap to bring comparable capabilities to long-term support releases, enabling customers to protect business-critical applications with less disruption.