Identify management company uses ECC to embed secure identity functionality into a single email address

MISSISSAUGA, Ontario – August 25, 2004 – Certicom Corp. (TSX: CIC), the authority for strong, efficient cryptography, today announced it has licensed Security Builder Crypto 4.0, its cross-platform cryptographic toolkit, to Avanza Technologies to build Elliptic Curve Cryptography (ECC) into its secure identity management product, It'sM*iMail. Avanza's product generates an email address that looks and acts like a standard email address but is encrypted with security features that dictate user identification and privileges. Avanza needed the strength of ECC to provide authentication and key exchange, and the small key size to make it all fit.

It'sM*iMail fights spam and viruses by creating a non-transferable email address that prevents others from using an email address without the owner's authority. The Avanza framework gives the email creator control over who can read the message, who can respond to it and how long the address remains valid.

For Avanza, Security Builder Crypto and its optimized ECC implementations was the obvious choice for its cryptography. First, Avanza needed a cyptosystem small enough to fit into an email address. Second, the ECC implementation had to be flexible enough to work on a number of different platforms, including Pocket PC, Linux and Microsoft Win32. Third, Avanza's customer-data protection technology required a cryptographic framework robust and efficient enough to process hundreds of thousands of key pairs in conjunction with a real-time customer database to prevent theft of customer information. Finally, Avanza needed the confidence that the public-key scheme used would remain viable for the life of a potential email address - potentially for many years.

"The email address would be unwieldy if we used any other public-key technology," said Philippe Richard, vice president of technology at Avanza, when asked why he chose ECC. "With ECC we get small key sizes which means we can express a crypto strength stronger than those used by even the most security-conscious Internet transaction sites. We chose Certicom because they had the right technology, the right expertise and the right patents."

Certicom is a pioneer in researching and developing ECC, which provides the highest strength-per-bit of any known public-key today. In 1997, the company developed the industry's first toolkit to include ECC. Security Builder Crypto is optimized for size and performance on over 30 platforms and includes strong, efficient ECC implementations. Last year, the National Security Agency (NSA) purchased extensive licensing rights to Certicom's ECC-based intellectual property, validating ECC as a strong public-key technology and spurring adoption by other companies.

"Avanza's secure identity product is another example of an application where the need for a small key size sets ECC above other public-key cryptosystems. ECC's efficient size makes it ideal for resource-constrained environments or for applications where speed is important," said Ian McKinnon, president and CEO at Certicom. "Avanza's solution offers a powerful value proposition: it protects users from unwanted email while being easy to use and adaptable across a number of platforms."

About Avanza
Avanza Technologies is a software company that specializes in the design of innovative context-based identity and privacy solutions. Avanza's It'sM*iMail™ product line uses patent-pending technology and Elliptic Curve Cryptography (ECC) to deliver unprecedented owner-controlled email addresses embedded with non-transferable public keys that can only be used by the intended recipient. The resulting Managed*Identity™ easily enables users to securely communicate via email by providing unique identity-based interactions. Give it a try at testdrive.itsmimail.com or visit www.avanzatech.com.

About Certicom
Certicom Corp. (TSX:CIC) is the authority for strong, efficient cryptography required by software vendors and device manufacturers to embed security in their products. Adopted by the US Government’s National Security Agency (NSA), Certicom technologies for Elliptic Curve Cryptography (ECC) provide the most security per bit of any known public key scheme, making it ideal for constrained environments. Certicom products and services are currently licensed to more than 300 customers including Motorola, Oracle, Research In Motion, Terayon, Texas Instruments and XM Radio. Founded in 1985, Certicom is headquartered in Mississauga, ON, Canada, with offices in Ottawa, ON; Reston, VA; San Mateo, CA; and London, England. Visit www.certicom.com.

Certicom, Security Builder, Security Builder Crypto, Security Builder SSL, Security Builder PKI, Security Builder GSE, movianVPN, movianCrypt and movianMail are trademarks or registered trademarks of Certicom Corp. All other companies and products listed herein are trademarks or registered trademarks of their respective holders.

Forward-Looking Statements
Except for historical information contained herein, this news release contains forward-looking statements that involve risks and uncertainties. Actual results may differ materially. Factors that might cause a difference include, but are not limited to, those relating to the acceptance of mobile and wireless devices and the continued growth of e-commerce and m-commerce, the increase of the demand for mutual authentication in m-commerce transactions, the acceptance of Elliptic Curve Cryptography (ECC) technology as an industry standard, the market acceptance of our principal products and sales of our customer's products, the impact of competitive products and technologies, the possibility of our products infringing patents and other intellectual property of fourth parties, and costs of product development. Certicom will not update these forward-looking statements to reflect events or circumstances after the date hereof. More detailed information about potential factors that could affect Certicom's financial results is included in the documents Certicom files from time to time with the Canadian securities regulatory authorities.

The shares of the company described above have been offered only to qualified institutional buyers in reliance on Rule 144A under the Securities Act of 1933, as amended (the "Securities Act"), and outside the United States pursuant to Regulation S of the Securities Act. The shares have not been registered under the Securities Act and may not be offered or sold in the United States or to a U.S. Person absent registration or an applicable exemption from registration requirements.

This press release does not constitute an offer to sell or the solicitation of an offer to buy any security and shall not constitute an offer, solicitation or sale in any jurisdiction in which such offering would be unlawful.

For further information, please contact: