JDK-8351954 : Release Note: ML-KEM Private Key Encoding is Not Finalized
  • Type: Sub-task
  • Component: security-libs
  • Sub-Component: javax.crypto
  • Affected Version: 24
  • Priority: P3
  • Status: Resolved
  • Resolution: Delivered
  • Submitted: 2025-03-13
  • Updated: 2025-03-14
  • Resolved: 2025-03-14
Description
The ML-KEM implementation in the SunJCE provider in JDK 24 encodes the decapsulation key in its expanded format, as defined in [FIPS 203](https://csrc.nist.gov/pubs/fips/203/final), into its PKCS #8 encoding. This encoding may change as the [related IETF draft](https://datatracker.ietf.org/doc/draft-ietf-lamps-kyber-certificates/) is not yet finalized.