Marvell, Microsoft and Oracle Form OCP Security Group

Marvell, Microsoft, and Oracle have established a new Open Compute Project working group to develop standardized hardware security modules for hyperscale data centers, aiming to embed cryptographic verification directly at the server level.

The initiative addresses security demands as cloud providers scale AI workloads and prepare for post-quantum cryptography standards. The announcement arrives as Marvell Technology Inc (NASDAQ: MRVL) shares trade at $227.83, down 5.56% from a previous close of $241.24 as of October 16, 2026.

"An integrated HSM will allow cryptographic key operations to execute where the workload runs, satisfying both regulatory compliance and zero-trust architecture requirements, all without compromising higher performance for security," said Cary Ussery, senior vice president and general manager, Multimarket Business Group, at Marvell.

Open Specifications for NIST FIPS Compliance

The newly formed working group will define open technical specifications for a NIST FIPS 140-3 Level 3 integrated hardware security module (HSM). This architecture is designed to enable secure key caching and cryptographic key lifecycle management directly within server hardware.

Traditional data center security often relies on external security appliances or discrete peripheral cards. Integrating these functions into a standardized module allows cryptographic operations to occur closer to the compute engine.

"As AI transforms cybersecurity and quantum technology reshapes cryptography, protecting the keys and credentials at the heart of our digital infrastructure has never been more important," said Mark Russinovich, CTO, deputy CISO and technical fellow, Microsoft Azure.

What Is a NIST FIPS 140-3 Level 3 HSM?

Federal Information Processing Standards (FIPS) 140-3 is a benchmark for cryptographic modules established by the National Institute of Standards and Technology. Level 3 certification requires physical security mechanisms designed to detect and respond to unauthorized access attempts.

This security tier mandates tamper-evidence enclosures, zeroization circuitry that erases cryptographic keys if physical breaches occur, and strict separation between interfaces used for administrative roles and data operations.

"An open specification for integrated Hardware Security Module (HSM) capabilities is an important step toward enabling cryptographic operations where data is processed, protecting keys within a hardware security boundary and supporting cryptographic verification of workload integrity," said Pradeep Vincent, executive vice president, Compute and AI Infrastructure at Oracle.

Timeline and Upcoming Demonstrations

The working group plans to release an initial draft of its technical specification leading up to the 2026 OCP Global Summit. The organization has scheduled formal technology demonstrations for the event, which runs from October 12-15 at the San Jose Convention Center, with version 1.0 of the specification to follow.