Oracle is releasing Java 27, the latest version of the world’s number one programming language and development platform.
Featuring thousands of performance, stability, security, and productivity improvements, Java 27 (Oracle JDK 27) provides a strong foundation for continued Java innovation, according to Oracle.
To help organizations prepare for more secure communications in a post-quantum world, Java 27 advances its post-quantum cryptography (PQC) capabilities with hybrid key exchange for TLS 1.3.
Oracle is also highlighting JDK 28 early access (EA) to preview future innovations such as Project Valhalla. In addition, Oracle is announcing aligned updates across the Java ecosystem and Oracle Java Verified Portfolio (JVP), including Helidon 27 for lightweight microservices, JavaFX 27 for rich client applications, and Oracle Jipher 20, now part of JVP, to help customers deploy Java applications in FIPS 140-regulated environments.
“For more than three decades, Java has helped developers build powerful, reliable, and secure applications,” said Georges Saab, senior vice president, Oracle Java Platform and chair, OpenJDK governing board. “Java 27 continues that proud tradition by providing a stable foundation for today’s enterprise workloads and innovative AI and post-quantum cryptography capabilities. With Java 27, Oracle delivers a major post-quantum cryptography milestone and is executing on a roadmap to bring comparable capabilities to JDK releases with long-term support offered by Oracle. This will help customers protect business-critical applications and data with less disruption.”
Features and capabilities include:
JEP 527: Post-Quantum Hybrid Key Exchange for TLS 1.3: Helps organizations strengthen the protection of sensitive data and business-critical communications against “harvest now, decrypt later” threats while enabling developers to meet evolving cryptographic requirements with minimal application disruption.
JEP 538: PEM Encodings of Cryptographic Objects (Third Preview): Helps to enhance the secure handling of widely used cryptographic material while improving interoperability with common security tooling and infrastructure. As a result, Java applications can integrate more easily with modern authentication, encryption, and certificate-management systems, helping support secure enterprise AI deployments.
JEP 536: JFR In-Process Data Redaction: Helps troubleshoot production systems more safely by reducing exposure of sensitive information. This supports compliance, privacy, and security requirements while preserving the operational value of JFR diagnostics, which is especially relevant for AI-enabled systems that may process sensitive customer, employee, operational, or regulated data.
JEP 537: Vector API (12th Incubator): Helps improve throughput without requiring specialized native code by accelerating analytics, AI inference, and workloads for scientific computing and media. By accelerating data processing and delivering more insights and value with less hardware, the vector API improves Java application performance while preserving the portability, maintainability, and security expected from Java.
JEP 533: Structured Concurrency (Seventh Preview): Helps reduce development risk for cloud, microservices, and AI-enabled applications by enabling developers to build scalable, resilient services with fewer concurrency defects. This is relevant for AI workloads that coordinate many parallel tasks such as model calls, data retrieval, enrichment, ranking, orchestration, and real-time decisioning. In addition, by improving reliability, cancellation, error handling, and observability for multithreaded code, it helps developers accelerate their development projects.
JEP 534: Compact Object Headers by Default: Helps accelerate application modernization by reducing JVM memory overhead with compact object headers enabled by default. As a result, customers can run existing applications on a newer JDK and reduce memory footprint. For customers running large Java estates, this can improve application density, reduce infrastructure cost, and increase the scalability of cloud services and microservices as well as data-intensive and AI-enabled workloads.
Additionally, Java 27 includes non-JEP updates that strengthen security through post-quantum cryptography, improved cryptographic performance, greater runtime visibility, and enhanced diagnostics.
The features Java 27 are a result of continuous collaboration between Oracle and members of the global Java developer community via OpenJDK and the Java Community Process (JCP), the company said.
For more information about this news, visit www.oracle.com.