CERTICOM ANNOUNCES INDUSTRY'S FIRST SECURITY PROTOCOL MODULE TO MEET NSA SUITE B CRYPTO REQUIREMENTS

Security Builder SSL includes recommended algorithms enabling vendors to quickly and easily meet NSA requirements for securing government data

MISSISSAUGA, Ontario – (October 11, 2005)– The latest product from Certicom Corp. (TSX: CIC) enables organizations to implement security protocols that meet the National Security Agency's (NSA) cryptographic specifications for securing both classified and unclassified communications- known as Suite B. Security Builder SSL includes optimized implementations for Secure Socket Layer (SSL) and Transport Layer Security (TLS) protocols as well as the algorithms named in Suite B.

By setting clear cryptography standards for securing government communications, the NSA is promoting interoperability and the sharing of information, two guiding principals behind the U.S. Crypto Modernization Program. Suite B states that elliptic curve cryptography (ECC) should be used for key agreement and digital signatures and AES for encryption. [1]

"With this latest version of Security Builder SSL, organizations can meet government requirements, save development time and leverage the efficiency and expertise Certicom has built into its implementations," said Jim Alfred, Certicom's director of product management. "Launching the first product to support Suite B underscores Certicom expertise in ECC and our commitment to help customers meet government security requirements."

Security Builder SSL is one of the security protocol modules that comprise the Certicom Security Architecture, a modular set of software cryptographic providers, security services and board support packages which expose cryptographic functionality available in hardware. All components of the Architecture are pulled together by a common, intuitive application programming interface (API) that sits between the applications, services and cryptographic providers.

[1] For more information on Suite B, refer to the recently published information on the NSA site at http://www.nsa.gov/ia/industry/crypto_suite_b.cfm?MenuID=10.2.7.

For information on why the NSA choose ECC, visit http://www.nsa.gov/ia/industry/crypto_elliptic_curve.cfm?MenuID=10.2.7

About Certicom
Certicom protects the value of your content, software and devices with government-approved security. Adopted by the National Security Agency (NSA) for classified and sensitive but unclassified government communications, Elliptic Curve Cryptography (ECC) provides the most security per bit of any known public-key scheme. As the undisputed leader in ECC, Certicom security offerings are currently licensed to more than 300 customers including General Dynamics, Motorola, Oracle, Research In Motion and Unisys. Founded in 1985, Certicom's corporate offices are in Mississauga, ON, Canada with worldwide sales headquarters in Reston, VA and offices in the US, Canada and Europe. Visit www.certicom.com

For further information, please contact:

For Certicom    
Tim Cox Brendan Ziolo  
ZingPR Certicom Corp.  
(650) 369-7784 (613) 254-9267  
tim@zingpr.com bziolo@certicom.com
Certicom, Certicom Security Architecture, Certicom Trust Infrastructure, Certicom CodeSign, Certicom KeyInject, Security Builder, Security Builder API, Security Builder BSP, Security Builder Crypto, Security Builder ETS, Security Builder GSE, Security Builder IPSec, Security Builder NSE, Security Builder PKI and Security Builder SSL are trademarks or registered trademarks of Certicom Corp. All other companies and products listed herein are trademarks or registered trademarks of their respective holders.
Except for historical information contained herein, this news release contains forward-looking statements that involve risks and uncertainties. Actual results may differ materially. Factors that might cause a difference include, but are not limited to, those relating to the acceptance of mobile and wireless devices and the continued growth of e-commerce and m-commerce, the increase of the demand for mutual authentication in m-commerce transactions, the acceptance of Elliptic Curve Cryptography (ECC) technology as an industry standard, the market acceptance of our principal products and sales of our customer's products, the impact of competitive products and technologies, the possibility of our products infringing patents and other intellectual property of fourth parties, and costs of product development. Certicom will not update these forward-looking statements to reflect events or circumstances after the date hereof. More detailed information about potential factors that could affect Certicom's financial results is included in the documents Certicom files from time to time with the Canadian securities regulatory authorities.
The shares of the company described above have been offered only to qualified institutional buyers in reliance on Rule 144A under the Securities Act of 1933, as amended (the "Securities Act"), and outside the United States pursuant to Regulation S of the Securities Act. The shares have not been registered under the Securities Act and may not be offered or sold in the United States or to a U.S. Person absent registration or an applicable exemption from registration requirements.
This press release does not constitute an offer to sell or the solicitation of an offer to buy any security and shall not constitute an offer, solicitation or sale in any jurisdiction in which such offering would be unlawful.