SNIA Developer Conference September 15-17, 2025 | Santa Clara, CA
Jeff Hilland
Distinguished Technologist -- President / SPDM WG Co-chair
HPE
This session will cover an update on DMTF's SPDM (Security Protocol & Data Model), including their strategy to support PQC (Post Quantum Cryptography). DMTF is adding bindings for storage (NVMe, SAS & SATA) as well as TCP and those will be covered as well for encryption of data in flight. Also covered will be updates to SPDM as well as the current roadmap of future releases.
Related Sessions
The Latest Features in DMTF Redfish® for Storage Management
DMTF Redfish® is a fully featured management ecosystem for server management, but what about storage? Isn’t that SNIA Swordfish®? While Swordfish provides storage-centric functionality, it leverages its base functionality from Redfish. This comprehensive presentation will explore how storage users and implementers can take advantage of the latest features in Redfish directly, including:
* The latest fabric extensions, including support for CXL, supporting Swordfish and Sunfish
* Metric changes for streaming telemetry
SPDM PQC & Authorization
DMTF’s Security Protocol and Data Model (SPDM) protocol is a widely used set of standards that enable secure communication and device authentication for platform-level security. This session will give an update on major developments by the SPDM Working Group, and where the group is going over the next year. In the past year, DMTF has released SPDM version 1.4, the first version to support CNSA 2.0 algorithms for post-quantum cryptography. This was added to the specification in a way that maintains backwards compatibility with existing deployments and enables platforms to adopt forward-looking requirements. The SPDM to Storage binding (version 1.0) was also released, enabling SPDM to secure a broad range of storage transports using a common command set. This release enables SPDM across a variety of storage protocols using a broadly compatible command set.
DMTF has also released the SPDM Authorization specification, which adds access policies on top of SPDM. The authorization specification leverages the capabilities of SPDM to bring access control, credential provisioning, and policy management to modern platforms, including support for CXL. The session will conclude with a look at the SPDM Working Group’s roadmap, including anticipated enhancements and potential new use cases.
