--- title: SEALSQ and wolfSSL Add wolfTPM Support for QVault... description: SEALSQ and wolfSSL announced wolfTPM support for SEALSQ's QVault TPM, adding embedded software support for post-quantum algorithms (ML-DSA, Hash-ML-DSA,... canonical: https://daily.dev/posts/sealsq-and-wolfssl-add-wolftpm-support-for-qvault-post-quantum-tpm-jb14mmsbc twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: SEALSQ and wolfSSL Add wolfTPM Support for QVault Post-Quantum TPM | daily.dev og:description: SEALSQ and wolfSSL announced wolfTPM support for SEALSQ's QVault TPM, adding embedded software support for post-quantum algorithms (ML-DSA, Hash-ML-DSA,... og:url: https://daily.dev/posts/sealsq-and-wolfssl-add-wolftpm-support-for-qvault-post-quantum-tpm-jb14mmsbc og:image: https://api.daily.dev/og/posts/jB14mmSbC.png og:image:alt: SEALSQ and wolfSSL Add wolfTPM Support for QVault Post-Quantum TPM og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # SEALSQ and wolfSSL Add wolfTPM Support for QVault Post-Quantum TPM **[The Quantum Insider](https://daily.dev/sources/thequantuminsider)** · 3 min read · 0 upvotes · 0 comments ## Summary SEALSQ and wolfSSL announced wolfTPM support for SEALSQ's QVault TPM, adding embedded software support for post-quantum algorithms (ML-DSA, Hash-ML-DSA, ML-KEM) implemented in the TPM hardware. QVault is positioned as the first shipping TPM 2.0 device implementing the post-quantum algorithms from the Trusted Computing Group's TPM 2.0 v1.85 spec in silicon. The integration adds QVault-specific device detection and SPI configuration to wolfTPM, plus a new pqc_ctrl tool for testing algorithms, running self-tests, and working with PCRs. Testing was performed on physical QVault hardware and wolfSSL's firmware TPM environment, covering ML-DSA signing/verification and ML-KEM encapsulation/decapsulation at all key strengths, with private keys generated and used entirely within the TPM boundary. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Does wolfTPM support the SEALSQ QVault post-quantum TPM hardware? Yes, wolfSSL added dedicated wolfTPM support for the SEALSQ QVault TPM, including manufacturer detection and device-specific SPI configuration. The integration supports ML-DSA, Hash-ML-DSA, and ML-KEM parameter sets and was tested on physical QVault hardware as well as wolfSSL's firmware TPM environment, passing all wolfSSL PQC test suites used for the wolfTPM Firmware TPM PQC v1.85 release. _Track post-quantum TPM tooling like wolfTPM and QVault as it matures on daily.dev._ ### What is the pqc_ctrl tool used for in wolfTPM? pqc_ctrl is a new command-line tool added to wolfTPM for developing and testing post-quantum TPM features. It lets developers examine supported algorithms, run self-tests, generate random data, work with PCRs, and test ML-DSA, Hash-ML-DSA, and ML-KEM parameter sets from a single interface against QVault TPM hardware. _Developers evaluating post-quantum TPM workflows follow tooling updates like this on daily.dev._ ### Why does running post-quantum algorithms inside a TPM matter compared to running them in software? Running ML-DSA and ML-KEM inside a TPM like SEALSQ's QVault keeps private keys generated and used entirely within the hardware boundary, so they never leave the TPM. wolfSSL's CTO Todd Ouska noted that algorithm strength alone is irrelevant if an attacker can extract the private key from the device, making hardware-bound key operations essential for real security. _Anyone weighing hardware versus software post-quantum key protection can follow this space on daily.dev._ ## Similar posts on daily.dev - [SEALSQ Highlights Role of Crypto-Agility in Preparing for Future Cryptographic Threats](https://daily.dev/posts/sealsq-highlights-role-of-crypto-agility-in-preparing-for-future-cryptographic-threats-ft9dg9gdm) · The Quantum Insider · 0 upvotes · 0 comments - [SEALSQ and GlobalFoundries Partner on Post-Quantum Security](https://daily.dev/posts/sealsq-and-globalfoundries-partner-on-post-quantum-security-9tpdu7r2e) · The Quantum Insider · 0 upvotes · 0 comments - [SEALSQ Advances QASIC Quantum-Resistant Semiconductor Roadmap](https://daily.dev/posts/sealsq-advances-qasic-quantum-resistant-semiconductor-roadmap-krekqxjer) · The Quantum Insider · 0 upvotes · 0 comments - [Hardware Security Module Integration for Quantum-Safe Model Contexts](https://daily.dev/posts/hardware-security-module-integration-for-quantum-safe-model-contexts-64tno8yb1) · Security Boulevard · 0 upvotes · 0 comments --- Tags: [#quantum-computing](https://daily.dev/tags/quantum-computing), [#cryptography](https://daily.dev/tags/cryptography) [View this post on daily.dev](https://daily.dev/posts/sealsq-and-wolfssl-add-wolftpm-support-for-qvault-post-quantum-tpm-jb14mmsbc) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"SEALSQ and wolfSSL Add wolfTPM Support for QVault Post-Quantum TPM","url":"https://daily.dev/posts/sealsq-and-wolfssl-add-wolftpm-support-for-qvault-post-quantum-tpm-jb14mmsbc","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/sealsq-and-wolfssl-add-wolftpm-support-for-qvault-post-quantum-tpm-jb14mmsbc"},"datePublished":"2026-09-03T13:50:08.523Z","dateModified":"2026-09-03T13:59:54.333Z","description":"SEALSQ and wolfSSL announced wolfTPM support for SEALSQ's QVault TPM, adding embedded software support for post-quantum algorithms (ML-DSA, Hash-ML-DSA,...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/05c7c887d2fdf4c45c52d251871a6180?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/05c7c887d2fdf4c45c52d251871a6180?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"The Quantum Insider","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Quantum Insider","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/7b14a6b34c1b464c9e8a88d9a0dac951","url":"https://daily.dev/sources/thequantuminsider"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/sealsq-and-wolfssl-add-wolftpm-support-for-qvault-post-quantum-tpm-jb14mmsbc","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"quantum-computing,cryptography","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Quantum Insider","item":"https://daily.dev/sources/thequantuminsider"},{"@type":"ListItem","position":3,"name":"SEALSQ and wolfSSL Add wolfTPM Support for QVault Post-Quantum TPM"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/sealsq-and-wolfssl-add-wolftpm-support-for-qvault-post-quantum-tpm-jb14mmsbc#faq","mainEntity":[{"@type":"Question","name":"Does wolfTPM support the SEALSQ QVault post-quantum TPM hardware?","acceptedAnswer":{"@type":"Answer","text":"Yes, wolfSSL added dedicated wolfTPM support for the SEALSQ QVault TPM, including manufacturer detection and device-specific SPI configuration. The integration supports ML-DSA, Hash-ML-DSA, and ML-KEM parameter sets and was tested on physical QVault hardware as well as wolfSSL's firmware TPM environment, passing all wolfSSL PQC test suites used for the wolfTPM Firmware TPM PQC v1.85 release. Track post-quantum TPM tooling like wolfTPM and QVault as it matures on daily.dev."}},{"@type":"Question","name":"What is the pqc_ctrl tool used for in wolfTPM?","acceptedAnswer":{"@type":"Answer","text":"pqc_ctrl is a new command-line tool added to wolfTPM for developing and testing post-quantum TPM features. It lets developers examine supported algorithms, run self-tests, generate random data, work with PCRs, and test ML-DSA, Hash-ML-DSA, and ML-KEM parameter sets from a single interface against QVault TPM hardware. Developers evaluating post-quantum TPM workflows follow tooling updates like this on daily.dev."}},{"@type":"Question","name":"Why does running post-quantum algorithms inside a TPM matter compared to running them in software?","acceptedAnswer":{"@type":"Answer","text":"Running ML-DSA and ML-KEM inside a TPM like SEALSQ's QVault keeps private keys generated and used entirely within the hardware boundary, so they never leave the TPM. wolfSSL's CTO Todd Ouska noted that algorithm strength alone is irrelevant if an attacker can extract the private key from the device, making hardware-bound key operations essential for real security. Anyone weighing hardware versus software post-quantum key protection can follow this space on daily.dev."}}]} ```