Sealsuite QS7001, CC EAL5+ Certification Process Underway and NIST Entropy Validation Obtained

The Quantum Shield QS7001, a quantum-resistant security chip from Switzerland-based semiconductor and security technology company SEALSQ Corp, has successfully completed the NIST SP 800-90B entropy source validation, a mandatory prerequisite, while currently undergoing the Common Criteria (CC) EAL5+ certification process. Although specific schedules mentioned in some materials, such as a 'January on-site audit,' cannot be confirmed in the provided official press releases, the completion of cryptographic toolbox validation in July 2025 and the acquisition of entropy validation in May 2026 demonstrate that the QS7001's certification process is advancing systematically ¹².

SEALSQ explicitly states that the QS7001 has not yet received its final certificate and emphasizes that it is meeting the technical requirements necessary for the EAL5+ evaluation ³. This entropy source validation signifies that the QS7001 has established a crucial technical foundation for securing future FIPS 140-3 and CC EAL5+ certifications ².

Progress of QS7001's CC EAL5+ Certification

SEALSQ's QS7001 is a RISC-V-based secure hardware platform developed to overcome the limitations of existing cryptographic methods. In July 2025, SEALSQ announced the completion of the Cryptographic Toolbox Validation for the QS7001 ¹. This phase involved validating the performance of the post-quantum cryptographic algorithms Kyber and Dilithium, as well as the hardware macros supporting them. Based on this, SEALSQ has initiated the formal CC EAL5+ certification process with the French evaluation body Serma Labs ¹.

According to SEALSQ's official product page and recent materials, the status of the QS7001's CC EAL5+ certification is 'In Progress' ³. It clearly distinguishes that the certificate has not yet been issued, suggesting that references to 'passing' in the community or certain investment materials may refer to the advancement of specific stages within the evaluation process rather than the issuance of the final certificate ³⁴. However, while an initial press release from August 2024 used language stating that the QS7001 was certified at EAL5+, more recent official materials from 2025 and 2026 consistently describe the certification process as ongoing, requiring careful interpretation of the difference between process advancement and final certification completion ⁵³.

Acquisition of NIST SP 800-90B Entropy Source Validation

On May 27, 2026, the QS7001 obtained NIST SP 800-90B entropy source validation (Certificate #E333) through testing by the French accredited testing body SERMA Safety and Security ². Entropy is the source of unpredictable random numbers generated in cryptographic operations, and the NIST SP 800-90B standard used for its validation is stipulated as a mandatory prerequisite for obtaining FIPS 140-3 and CC EAL5+ certifications ⁶².

SEALSQ CEO Carlos Moreira assessed this QS7001 entropy source validation as a significant milestone, stating, "No cryptographic module can claim compliance with FIPS 140-3 without a validated entropy source" ². The QS7001's entropy source is implemented as a physical noise source based on a Ring Oscillator, and this validation secures a foundation that can be applied to SEALSQ's future product lineup and partner integrations ⁶².

Technical Specifications and Security Capabilities of the QS7001

According to materials released by SEALSQ, the QS7001 is designed to simultaneously address the post-quantum era and current cyber threats. Key technical features are as follows:

• Processor and Architecture: Equipped with an 80MHz 32-bit secure RISC-V CPU, it performs low-latency cryptographic operations via a dedicated crypto accelerator ³.
• Post-Quantum Cryptography Support: Optimizes and supports NIST standard algorithms Kyber (key encapsulation) and Dilithium 2 (digital signature) at the hardware level ¹⁷.
• Legacy Compatibility and Crypto Agility: Supports existing classic cryptographic algorithms such as RSA, ECC (572-bit), and AES, enabling gradual migration ³¹.
• Security Architecture: Includes tamper-resistant features, Secure Boot, and a hardware Root of Trust ³¹.
• Specifications: Provides 512K Flash, 80K RAM, and 128K ROM memory, and is designed to operate within an industrial temperature range of -40°C to 105°C ³.

SEALSQ explains that the QS7001 is designed for deployment in high-reliability environments such as defense, finance, energy infrastructure, and medical devices ³¹. In particular, the EAL5+ grade is regarded as a top-tier certification level that demands rigorous verification, ranging from design documentation and code reviews to vulnerability simulations, surpassing general security requirements ⁸.

Implications of EAL5+ Certification and Market Impact

The EAL (Evaluation Assurance Level) 5+ grade in CC certification is interpreted as an indicator that the product possesses a high level of protection against both physical and logical attacks ⁹. SEALSQ believes that being evaluated with the goal of EAL5+ certification for the QS7001 establishes a foundation for meeting the trust standards required in defense and public procurement markets ⁹.

Currently, SEALSQ is also preparing certification for its Trusted Platform Module (TPM) product line, the 'QVault TPM,' alongside the QS7001 ³. SEALSQ emphasizes that it is one of a few companies globally holding both EAL5+ and FIPS 140-3 certifications, expecting that this certification portfolio will be a key factor in securing competitiveness in the public procurement and industrial security markets ⁷. However, the final issuance of the certificate for the QS7001 itself will be determined through the ongoing CC evaluation process ³.