Tropic Square has officially rolled out version 4.0.0 of the libtropic SDK, bringing crucial security, usability, and maintenance upgrades to developers building with the transparent, RISC-V-based TROPIC01 secure element. Designed to protect cryptographic keys in embedded systems, IoT devices, and hardware wallets, the TROPIC01 chip gets even easier to integrate with this major release.

For R&D teams, security engineers, and hardware hackers, libtropic 4.0.0 introduces overhauled firmware update mechanics, new MCU support, and major refactoring of Layer 2 communications.

Key Release Highlights:

• Hardened Firmware Updates: 
  Ensuring secure device lifecycle management is a top priority. The lt_do_mutable_fw_update() function has been extensively reworked to follow a new, recommended firmware update procedure. Furthermore, the firmware update examples now demonstrate how to securely handle Maintenance Mode to significantly reduce the potential attack surface.

• Cryptographic API Usability (ECDSA): 
  To make integration with existing cryptographic schemes simpler, the ECDSA API command lt_ecc_ecdsa_sign has been updated. Instead of taking arbitrary raw message data, the function now expects a pre-calculated 32-byte hash (such as SHA-256). This removes the burden of data hashing from the API itself, allowing developers greater flexibility in choosing their digest strategies. L2 Communication Refactor & Maintenance: Internal Layer 2 communication has seen significant maintenance improvements. The release introduces lt_l2_transfer, a unified function that combines sending and receiving while implementing an automatic retry mechanism for CRC errors. Developers can now also track L2 connection health using new diagnostic counters like l2_crc_error_count.

• Expanded Hardware Ecosystem: 
  Support for the STM32U5 family has been officially added, complete with examples (Hello World, FW Update, Chip Identification) for the STM32 Nucleo U545RE-Q board. Additionally, the community continues to grow, highlighted by a new community HAL for the Raspberry Pi Pico.

Migration & Next Steps 

We also noted that all instances of "USB Dongle" have been renamed to "USB DevKit" in the HALs, and several prefix updates have been made to avoid naming collisions.
‍
The libtropic SDK Team recommends reviewing the full changelog on GitHub for detailed migration steps.

Developers are encouraged to share their migration experiences and feedback directly with the team.