CERTICOM LICENSES ECC TECHNOLOGY TO ASIA-BASED ZEETOO

Zeetoo leverages Certicom experience and the strength of ECC to secure data for financial and healthcare industries

MISSISSAUGA, Ontario – (December 14, 2005)– Certicom Corp. (TSX: CIC) today announced that Asia-based Zeetoo Sdn Bhd (Zeetoo) has licensed Certicom's Security Builder Crypto to build elliptic-curve cryptography (ECC) into its financial trading and secure messaging applications. By using Certicom's ECC implementations, Zeetoo can leverage Certicom's experience and offer its customers a proven, standards-based technology that meets the stringent security requirements of the financial, healthcare and government sectors.

At the core of Zeetoo's applications is the Syphernetics Cryptosystem, a security system that employs the most advanced algorithms recognized by the global cryptography community and that meet the U.S. government Federal Information Processing Standards (FIPS). Specifically, Zeetoo is using ECC for authentication, integrity and non-repudiation; the Advanced Encryption Standard (AES) for encryption; SHA-2 for hashing; and Mersenne Twister for generating random numbers.

"The mobile communications market presents a huge opportunity for many security players, especially those of us who are focusing on industries that place a high value on their data, such as finance and healthcare. The winners will be those companies that protect information with the most advanced cryptography, such as ECC and AES," said C.S Gan, CEO of Zeetoo. "By working with the Certicom team, who is regarded as the ECC experts, we can offer our customers the most advanced cryptography and proven, efficient implementations."

ECC is a computationally efficient form of cryptography that offers security equivalent to other competing technologies, but with much smaller key sizes. This results in faster computations, lower power consumption, as well as memory and bandwidth savings, thereby making it ideal for today's resource-constrained environments. In its recently published cryptographic specifications (known as Suite B^[1]), the National Security Agency named ECC as the public-key cryptography to use for securing classified and unclassified information.

"The National Security Agency's Suite B recommendations for using ECC raise the bar on how to protect sensitive data in the government and commercial sectors," said Ian McKinnon, president and CEO at Certicom. "Zeetoo recognizes this shift and is ready to meet the needs of organizations that place a high priority on securing their information assets."

Security Builder Crypto, the first toolkit to include standards-based ECC implementations, acts as a software cryptographic provider within the Certicom® Security Architecture™, a comprehensive, modular and portable solution designed to allow developers to quickly and cost-effectively embed security across multiple families and generations of devices.

About Certicom
Certicom protects the value of your content, software and devices with government-approved security. Adopted by the National Security Agency (NSA) for classified and sensitive but unclassified government communications, Elliptic Curve Cryptography (ECC) provides the most security per bit of any known public-key scheme. As the undisputed leader in ECC, Certicom security offerings are currently licensed to more than 300 customers including General Dynamics, Motorola, Oracle, Research In Motion and Unisys. Founded in 1985, Certicom's corporate offices are in Mississauga, ON, Canada with worldwide sales headquarters in Reston, VA and offices in the US, Canada and Europe. Visit www.certicom.com

For further information, please contact:

For Certicom
Tim Cox	Brendan Ziolo
ZingPR	Certicom Corp.
(650) 369-7784	(613) 254-9267
tim@zingpr.com	bziolo@certicom.com

For more information on Suite B, refer to the recently published information on the NSA site at: http://www.nsa.gov/ia/industry/crypto_suite_b.cfm?MenuID=10.2.7. For information on why the NSA choose ECC, visit: http://www.nsa.gov/ia/industry/crypto_elliptic_curve.cfm?MenuID=10.2.7

Certicom, Certicom Security Architecture, Certicom Trust Infrastructure, Certicom CodeSign, Certicom KeyInject, Security Builder, Security Builder API, Security Builder BSP, Security Builder Crypto, Security Builder ETS, Security Builder GSE, Security Builder IPSec, Security Builder NSE, Security Builder PKI and Security Builder SSL are trademarks or registered trademarks of Certicom Corp. All other companies and products listed herein are trademarks or registered trademarks of their respective holders.

Forward-Looking Statements Except for historical information contained herein, this news release contains forward-looking statements that involve risks and uncertainties. Actual results may differ materially. Factors that might cause a difference include, but are not limited to, those relating to the acceptance of mobile and wireless devices and the continued growth of e-commerce and m-commerce, the increase of the demand for mutual authentication in m-commerce transactions, the acceptance of Elliptic Curve Cryptography (ECC) technology as an industry standard, the market acceptance of our principal products and sales of our customer's products, the impact of competitive products and technologies, the possibility of our products infringing patents and other intellectual property of fourth parties, and costs of product development. Certicom will not update these forward-looking statements to reflect events or circumstances after the date hereof. More detailed information about potential factors that could affect Certicom's financial results is included in the documents Certicom files from time to time with the Canadian securities regulatory authorities.

The shares of the company described above have been offered only to qualified institutional buyers in reliance on Rule 144A under the Securities Act of 1933, as amended (the "Securities Act"), and outside the United States pursuant to Regulation S of the Securities Act. The shares have not been registered under the Securities Act and may not be offered or sold in the United States or to a U.S. Person absent registration or an applicable exemption from registration requirements.

This press release does not constitute an offer to sell or the solicitation of an offer to buy any security and shall not constitute an offer, solicitation or sale in any jurisdiction in which such offering would be unlawful.