Summary

Backport the KEM API to JDK17 (JSR 392 MR 1).

Problem

The KEM API is necessary to support new PQC algorithms like ML-KEM. See the original CSR for JDK 21 for more detail.

Solution

Backport the KEM API to JDK17 MR 1.

Specification

These new classes will be added into the javax.crypto package in the java.base module:

• KEM
  • KEM.Decapsulator
  • KEM.Encapsulated
  • KEM.Encapsulator
• KEMSpi
  • KEMSpi.DecapsulatorSpi
  • KEMSpi.EncapsulatorSpi
• DecapsulateException

Their specifications are identical to those of JDK 21 except for the following change:

- * @since 21
+ * @apiNote This class is defined in Java SE 17 Maintenance Release 1.
+ * @since 17

The full specification is attached to this CSR.

Note: Unlike JDK 21, we will not add the DHKEM algorithm implementation to JDK 17 MR 1.