SecurityConference50min
Quantum-Safe Java Without the Hype: What Developers Need to Know
This talk demystifies post-quantum cryptography for Java teams, explaining quantum threats, public-key risks, KEMs, ML-KEM, and KDFs in practical terms. It outlines what to inventory, how Java’s provider model supports crypto evolution, and what teams should do now—without hype, panic, or deep math.
talk.summaryAiDisclaimer
Oumaiyma INTISSAROracle
Post-quantum cryptography is entering the Java conversation, but many developers are left with panic or confusion. Are RSA and elliptic curves suddenly broken? What is a KEM? What is ML-KEM? Why do KDFs matter? And what should Java teams actually do today?
This talk explains quantum-safe cryptography for Java developers without deep math and without hype. We will clarify what quantum computing threatens, what it does not immediately threaten, and why public-key cryptography is the main area of concern. We will introduce key encapsulation mechanisms, explain ML-KEM at a practical level, and show why key derivation is important in real protocols.
We will also look at how Java’s provider-based security architecture helps the platform evolve as cryptographic standards evolve.
The focus is practical: inventory where your systems use public-key cryptography, understand TLS and certificate dependencies, avoid custom crypto, follow standards, and track public JDK evolution.
Key takeaways:
No advanced cryptography or quantum physics background required.
This talk explains quantum-safe cryptography for Java developers without deep math and without hype. We will clarify what quantum computing threatens, what it does not immediately threaten, and why public-key cryptography is the main area of concern. We will introduce key encapsulation mechanisms, explain ML-KEM at a practical level, and show why key derivation is important in real protocols.
We will also look at how Java’s provider-based security architecture helps the platform evolve as cryptographic standards evolve.
The focus is practical: inventory where your systems use public-key cryptography, understand TLS and certificate dependencies, avoid custom crypto, follow standards, and track public JDK evolution.
Key takeaways:
- Understand what quantum computing threatens.
- Learn the role of public-key crypto, symmetric crypto, KEMs, ML-KEM, and KDFs.
- See how Java’s provider model supports crypto evolution.
- Know what Java teams should do now.
- Avoid panic migrations, custom crypto, premature assumptions, and roadmap speculation.
No advanced cryptography or quantum physics background required.
Oumaiyma INTISSAR
Oumaiyma Intissar is a Software Engineer in Oracle’s JDK team, where she works on JDK security libraries. Her day-to-day work touches the security foundations of Java, including cryptographic providers, TLS/JSSE, certificates, keystores, PKCS#11, and related JDK security tooling.
Before joining Oracle, she worked in the fintech industry, building enterprise Java/Angular applications and contributing to security, performance, and technical leadership initiatives. She is passionate about Java, platform engineering, and making security topics easier to understand for developers. Active in the Moroccan tech community, she also contributes to programming contest organization and enjoys helping young engineers grow.
Before joining Oracle, she worked in the fintech industry, building enterprise Java/Angular applications and contributing to security, performance, and technical leadership initiatives. She is passionate about Java, platform engineering, and making security topics easier to understand for developers. Active in the Moroccan tech community, she also contributes to programming contest organization and enjoys helping young engineers grow.