Maximizing Security with JDK: Understanding Built-in Capabilities
summary
Covers concrete JDK security features and how to use them: replacing Math.random with SecureRandom over Math.random for true entropy; generating keys with KeyGenerator, AES and RSA/ECC operations, and signing/digesting with MessageDigest; managing KeyStore and SSLServerSocket for TLS; extending with Bouncy Castle via Security.addProvider; policy files and deprecated SecurityManager behavior; Kerberos via the GSS API and the new Key Encapsulation Mechanism (KEM) API in JDK 21 aligned with NIST PQC plus live code examples and debugging pointers.
AI-written summary · about
chapters (13)
- 0:00Introduction
- 2:10Focus on JDK security APIs
- 6:27Cryptography basics
- 10:05Secure randomness
- 11:56Key generation
- 15:57Bouncy Castle extension
- 18:31Symmetric encryption
- 20:44TLS communication
- 22:54Managing keystores
- 23:15Access control
- 29:01Testing with policy files
- 30:46GSS API authentication
- 34:30Closing
related talks
44mMaking the JDK More Secure
45mFrom Java 17 to 21: A Showcase of JDK Security Enhancements
40mJava Security Evolution - Out with the Old, In with the New
37mKeeping Your Java Applications Secure - Cryptographic Improvements and Best Practices
52mSecurity Control Enhancements
34mUnlocking the unknowns: Cryptography Essentials
51mJava and Post-Quantum Cryptography
39mEvolving the Security of the Java Platform