Bug ID: JDK-8353682 Refactor TLS to use KEM for key exchange

Type: Enhancement
Component: security-libs
Sub-Component: javax.net.ssl
Affected Version: 25

Priority: P2
Status: Closed
Resolution: Duplicate

Submitted: 2025-04-03
Updated: 2025-07-23
Resolved: 2025-07-23

Versions (Unresolved/Resolved/Fixed)

The Version table provides details related to the release that this issue/RFE will be addressed.

Unresolved : Release in which this issue/RFE will be addressed.
Resolved: Release in which this issue/RFE has been resolved.
Fixed : Release in which this issue/RFE has been fixed. The release containing this fix may be available for download as an Early Access Release or a General Availability Release.

To download the current JDK release, click here.

Other
tbdResolved

Refactor TLS implementation to switch from traditional KeyAgreement to KEM. It targets for TLS 1.3 implementation.

Blocks :	JDK-8358541 - Post-Quantum Hybrid Key Exchange for TLS 1.3
Duplicate :	JDK-8314323 - TLS 1.3 Hybrid Key Exchange
Relates :	JDK-8353153 - Providing access to internal TLS spec classes in SunJSSE for 3-party JCE provider
Relates :	JDK-8314323 - TLS 1.3 Hybrid Key Exchange