TLS-SE Quick Command Guide
The EtherTrust TLS-SE console provides access to a selected Secure Element through a TLS 1.3 PSK session. Select or reserve an SNI, enter an text command, and submit it.
Key slots and algorithm indexes
Commands use a one-letter prefix and a two-digit hexadecimal index: gXX, pXX, etc. The last two bits select a slot from 0 to 3. For this guide, the ECC/RSA selection follows the requested TLS-SE convention shown below.
| KeyIndex (slot 0) | Algorithm / object | Generate command |
|---|---|---|
00 | secp256k1 (ECC) | g00 |
10 | secp256r1 / P-256 (ECC) | g10 |
20 | RSA-2048 | g20 |
30 | Secret (AES/HMAC) | t30<hex-secret> |
For slot 1, replace the final digit with 1 (e.g., g01, g11, g21). Slots 2 and 3 work the same way. The index is hexadecimal, not a decimal counter.
ECC and RSA — key operations
| Syntax | Action |
|---|---|
cXX | Clear the selected key (destructive) |
gXX | Generate an ECC or RSA key pair |
pXX[parameter] | Read a public key; for RSA use parameter 0 (modulus) or 1 (public exponent) |
rXX[parameter] | Read private-key material where permitted (sensitive) |
sXX<hex-data> | Sign a hexadecimal message with the selected key (up to 32 bytes in the documented single-input mode) |
Examples: g00 generates a secp256k1 key pair in slot 0; p00 reads its public key. g10 generates a secp256r1 key pair in slot 0; p10 reads its public key. g20 generates RSA-2048 in slot 0; p200 reads its modulus and p201 reads its exponent.
AES-128 and HMAC — secrets and operations
| Syntax | Action |
|---|---|
tXX<hex-secret> | Set a secret; use t30 for secret slot 0 |
AXX<hex-data> | AES-128 encryption with the selected secret |
aXX<hex-data> | AES-128 decryption with the selected secret |
hXX<hex-message> | HMAC-SHA-256 with the selected secret |
HXX<hex-message> | HMAC-SHA-512 with the selected secret |
AES-128 requires a 16-byte secret (32 hexadecimal characters). When using the text-mode AES/HMAC commands, the index can select secret slot 0 as 00, while t30 selects the secret object for initialization.
Copy-ready examples
?00
g00
p00
r00
g10
p10
r10
g20
p200
p201
t3000112233445566778899AABBCCDDEEFF
A0000112233445566778899AABBCCDDEEFF
h0048656C6C6FSource: TLS-SE 3.05 SHELL — sections 3.3, 3.4, 4, 5 and 6.