FCIA's FC-SP-3 standard brings post-quantum security to Fibre Channel

INCITS T11 completed the FC-SP-3 standard for Fibre Channel, removing legacy cryptography such as 3DES, MD5 and SHA-1 and adding CNSA 2.0-aligned ML-KEM-1024 and ML-DSA-87. The specification shrank from 288 to 152 pages, and deployment rides the normal three-to-five-year hardware refresh without replacing SANs.

• Removes 3DES, MD5, SHA-1, RSA-SHA-1 and older DH-CHAP groups
• Adds ML-KEM-1024 key establishment and ML-DSA-87 signatures
• Specification cut from 288 pages to 152 pages
• In-flight encryption runs in the HBA at line rate with no key server