Support for Java 25 PQC in Spring Security

Expected Behavior
Spring Security should provide support for Java 25’s PQC capabilities, including standardized algorithms such as ML-KEM, to enable quantum-resistant authentication and secure communication aligned with the Java platform's latest security roadmap.

Current Behavior
Spring Security currently relies on traditional public-key cryptography which is not quantum-resistant and does not yet leverage Java 25’s new PQC features.

Context
Java 25 was recently released with native foundations for quantum-ready cryptography, including support for ML-KEM (the most commonly adopted PQC key encapsulation mechanism).
Spring Security alignment with Java 25 would allow production systems to begin transitioning to quantum-safe cryptographic primitives without external workarounds.

I have not found an official Spring roadmap regarding PQC integration and would like to understand if support is planned or can be considered as an enhancement.

Thank you!

The issue names no files, tests, or entry points. Start by reviewing Spring Security’s existing cryptography integrations alongside Java 25’s ML-KEM capabilities; the issue does not define concrete acceptance criteria for what completed PQC support should include.