For a corporate WPA3-Personal SSID using a PSK, which encryption cipher must be configured?

WPA3-Personal, also known as WPA3-SAE (Simultaneous Authentication of Equals), mandates the use of CCMP128 (AES-128 in CCM mode) for encryption. This provides robust security for personal networks. While WPA3 supports stronger ciphers like GCMP256 and CCMP256 in its Enterprise mode (WPA3-Enterprise), these are not required or typically used for WPA3-Personal. GCMP128 is also a valid cipher but is not the mandatory one for WPA3-Personal. The standard specifically designates CCMP128 as the baseline encryption for WPA3-Personal to ensure interoperability and a strong security posture.