Pure-Go host driver for the TROPIC01 secure element.

This library implements the full TROPIC01 communication protocol (L1 SPI framing, L2 request/response, L3 Noise-encrypted session) with no CGo or external C dependencies. It is aligned with the reference C library and the Rust crate.

go get libtropic-go

Requires Go 1.22 or later.

package main

import (
    "fmt"
    "log"

    "libtropic-go/tropic01"
    "libtropic-go/tropic01/keys"
    "libtropic-go/tropic01/hal/usbdongle"
)

func main() {
    // Open a USB devkit dongle.
    transport := usbdongle.New(usbdongle.Config{Port: "/dev/ttyACM0"})
    dev := tropic01.NewDevice(transport)
    if err := dev.Init(); err != nil {
        log.Fatal(err)
    }
    defer dev.Deinit()

    // Reboot the chip.
    if err := dev.Startup(tropic01.StartupReqReboot); err != nil {
        log.Fatal(err)
    }

    // Start an encrypted session using production keys (slot 0).
    if err := dev.SessionStart(keys.SH0PrivProd0[:], keys.SH0PubProd0[:], 0); err != nil {
        log.Fatal(err)
    }

    // Ping the chip.
    resp, err := dev.Ping([]byte("Hello TROPIC01!"))
    if err != nil {
        log.Fatal(err)
    }
    fmt.Printf("Ping response: %q\n", resp)

    // Clean up.
    dev.SessionAbort()
}

The cmd/tropic01-example-usb-devkit binary demonstrates common TROPIC01 operations using a USB development kit dongle:

go build ./cmd/tropic01-example-usb-devkit
./tropic01-example-usb-devkit <command> [device_path]

Default device path: /dev/ttyACM0

NewDevice, Init, Deinit, Startup, Sleep

GetInfo, GetInfoChipID, GetInfoRiscvFWVer, GetInfoSpectFWVer, GetInfoFWBank, GetInfoCertStore, GetLogReq

SessionStart, SessionAbort

Ping, RandomValueGet, ECCKeyGenerate, ECCKeyStore, ECCKeyRead, ECCKeyErase, ECDSASign, EdDSASign, PairingKeyWrite, PairingKeyRead, PairingKeyInvalidate, RMemDataWrite, RMemDataRead, RMemDataErase, RConfigWrite, RConfigRead, RConfigErase, IConfigWrite, IConfigRead, MCTRInit, MCTRUpdate, MCTRGet, MacAndDestroy

See LOWLEVEL.md for detailed API signatures, transport interface, constants, and protocol internals.

go test ./...

Tests use the simulator transport (tropic01/hal/sim) and require no hardware.

See LICENSE for details.