SEALSQ Enhances INeS PKI Platform with Code Signing Capability to Secure Firmware Integrity in Alignment with RED and CRA Regulations

Geneva, Switzerland, Aug. 28, 2025 (GLOBE NEWSWIRE) — SEALSQ Corp (NASDAQ: LAES) (“SEALSQ” or “Company”), a company that focuses on developing and selling Semiconductors, PKI, and Post-Quantum technology hardware and software products, today announced a significant enhancement to its trusted INeS PKI platform, which now includes secure code signing services designed to protect the integrity of firmware distributed across connected devices. This new capability positions INeS as a future-proof trust infrastructure for manufacturers needing to secure over-the-air (OTA) firmware updates in compliance with emerging global cybersecurity regulations.

INeS now supports firmware signing with both legacy ECC (Elliptic Curve Cryptography, RSA algorithms, enabling customers to meet today’s performance and regulatory needs while preparing for the quantum era.

“With global regulations such as the EU Cyber Resilience Act, NIS2, and U.S. Executive Order 14028 raising the bar on software supply chain security, firmware integrity has become mission-critical,” said Gweltas Radenac, IoT Security Business Line Director of SEALSQ. “By integrating code signing into our INeS platform, SEALSQ delivers a scalable, standards-based, and post-quantum-ready trust infrastructure for OEMs across IoT, Medical Device, and critical infrastructure such as Smart Grid.”

End-to-End Firmware Protection via INeS

The upgraded INeS platform now offers:

• Secure code signing authority integrated into the INeS PKI
• Flexible signature algorithms: ECC (e.g., ECDSA, EdDSA)
• Key and certificate lifecycle management for firmware signing keys
• Compliance-ready trust policies aligned with ETSI EN 319 421, ISO/IEC 27001, NIST SP 800-57
• Support for offline signing (air-gapped facilities) and secure signing via HSM
• Secure timestamping and signature metadata generation for auditability

Responding to a New Regulatory Landscape

This strategic enhancement to INeS aligns with new and pending regulations that require software publishers to guarantee the authenticity and integrity of software components:

• EU Cyber Resilience Act (CRA): mandates signed firmware and vulnerability disclosure obligations
• UN R155 / ISO/SAE 21434 (automotive): demands cryptographic integrity of OTA updates
• U.S. Executive Order 14028: emphasizes software supply chain integrity and SBOM traceability
• ETSI EN 303 645 & NIST IR 8259: recommend secure update mechanisms and signed firmware for IoT

Post-Quantum Readiness Built In

With quantum computing threatening the long-term security of current cryptographic schemes, INeS integrates Post-Quantum certificate support, enabling customers to:

• Sign firmware using both ECC algorithms
• Deploy crypto-agile mechanisms in existing hardware

A Trusted Platform for IoT & Beyond

INeS is used by global manufacturers to inject and manage digital identities for over 30 million smart meters and industrial IoT devices worldwide. With this new code signing extension, OEMs can now leverage the same infrastructure to ensure firmware authenticity, integrity, and compliance, from chip to cloud.

About SEALSQ:
SEALSQ is a leading innovator in Post-Quantum Technology hardware and software solutions. Our technology seamlessly integrates Semiconductors, PKI (Public Key Infrastructure), and Provisioning Services, with a strategic emphasis on developing state-of-the-art Quantum Resistant Cryptography and Semiconductors designed to address the urgent security challenges posed by quantum computing. As quantum computers advance, traditional cryptographic methods like RSA and Elliptic Curve Cryptography (ECC) are increasingly vulnerable.

SEALSQ is pioneering the development of Post-Quantum Semiconductors that provide robust, future-proof protection for sensitive data across a wide range of applications, including Multi-Factor Authentication tokens, Smart Energy, Medical and Healthcare Systems, Defense, IT Network Infrastructure, Automotive, and Industrial Automation and Control Systems. By embedding Post-Quantum Cryptography into our semiconductor solutions, SEALSQ ensures that organizations stay protected against quantum threats. Our products are engineered to safeguard critical systems, enhancing resilience and security across diverse industries.

For more information on our Post-Quantum Semiconductors and security solutions, please visit http://www.sealsq.com.

Forward-Looking Statements
This communication expressly or implicitly contains certain forward-looking statements concerning SEALSQ Corp and its businesses. Forward-looking statements include statements regarding our business strategy, financial performance, results of operations, market data, events or developments that we expect or anticipates will occur in the future, as well as any other statements which are not historical facts. Although we believe that the expectations reflected in such forward-looking statements are reasonable, no assurance can be given that such expectations will prove to have been correct. These statements involve known and unknown risks and are based upon a number of assumptions and estimates which are inherently subject to significant uncertainties and contingencies, many of which are beyond our control. Actual results may differ materially from those expressed or implied by such forward-looking statements. Important factors that, in our view, could cause actual results to differ materially from those discussed in the forward-looking statements include SEALSQ’s ability to continue beneficial transactions with material parties, including a limited number of significant customers; market demand and semiconductor industry conditions; and the risks discussed in SEALSQ’s filings with the SEC. Risks and uncertainties are further described in reports filed by SEALSQ with the SEC.

SEALSQ Corp is providing this communication as of this date and does not undertake to update any forward-looking statements contained herein as a result of new information, future events or otherwise.