SealSQ Corp (NASDAQ: LAES) and wolfSSL Inc. announced that wolfTPM, an embedded software library for TPM 2.0 devices, now supports the SealSQ QVault TPM, a hardware security chip designed to implement post-quantum cryptographic algorithms.

According to the companies, the QVault TPM is on track to be the first TPM 2.0 device to implement in silicon the post-quantum algorithms introduced in the Trusted Computing Group's TPM 2.0 v1.85 specification. The integration gives developers access to the device's ML-DSA and ML-KEM capabilities in embedded applications through the wolfTPM software layer.

The integration adds dedicated QVault support to wolfTPM, including manufacturer detection and device-specific SPI configuration. A new tool called pqc_ctrl allows developers to examine supported algorithms, run self-tests, generate random data, work with platform configuration registers, and test ML-DSA, Hash-ML-DSA, and ML-KEM parameter sets.

Testing was conducted on physical QVault TPM hardware and in wolfSSL's firmware TPM environment, covering ML-DSA signing and verification and ML-KEM encapsulation and decapsulation at all key strengths.

"QVault implements post-quantum algorithms directly in TPM hardware, while wolfTPM provides the embedded software support needed to use them," said Jean-Pierre Enguent, CTO at SealSQ.

"Running ML-DSA and ML-KEM inside the SealSQ QVault TPM means the private keys are generated and used in hardware and never leave the TPM boundary," said Todd Ouska, CTO and co-founder of wolfSSL. "wolfTPM is how developers leverage those operations from their application."

The integration, which includes build instructions, post-quantum examples, hardware benchmarks, and the pqc_ctrl tool, is available on the wolfTPM GitHub repository. The announcement was made in a press release issued by SealSQ.