package main
import (
    "log"
    "os"
    "github.com/KarpelesLab/hsm"
)
func main() {
    // Set the HSM type via environment variable
    os.Setenv("HSM", "software")
    // Create HSM instance
    h, err := hsm.New()
    if err != nil {
        log.Fatal(err)
    }
    // List keys by name (auto-generates in software mode)
    keys, err := h.ListKeysByName("mykey")
    if err != nil {
        log.Fatal(err)
    }
    // Use the key for signing
    key := keys[0]
    log.Printf("Key: %s", key.String())
}

type HSM interface {
    Ready() bool
    ListKeys() ([]Key, error)
    ListKeysByName(name string) ([]Key, error)
    PutCertificate(name string, cert *x509.Certificate) error
    GetCertificate(name string) (*x509.Certificate, error)
}

type Key interface {
    crypto.Signer
    PublicBlob() ([]byte, error)
    String() string
}

import (
    "crypto"
    "crypto/rand"
    "crypto/sha256"
)
// Get a key
keys, _ := h.ListKeysByName("signing-key")
key := keys[0]
// Hash and sign
message := []byte("data to sign")
hash := sha256.Sum256(message)
signature, err := key.Sign(rand.Reader, hash[:], crypto.SHA256)

import "crypto/x509"
// Store a certificate
err := h.PutCertificate("my-cert", cert)
// Retrieve a certificate
cert, err := h.GetCertificate("my-cert")

import "github.com/KarpelesLab/hsm/yubihsm2"
// Create connector
connector := yubihsm2.NewHTTPConnector("localhost:12345")
// Check status
status, err := connector.GetStatus()
fmt.Printf("YubiHSM2 version: %s\n", status.Version)
// Create authenticated session
sm, err := yubihsm2.NewSessionManager(connector, 1, "password")
// Generate a key
keyID, err := sm.GenerateAsymmetricKey(
    0,                              // 0 = auto-assign ID
    []byte("my-key"),               // label
    yubihsm2.Domain1,               // domains
    yubihsm2.AsymmetricSignEcdsa,   // capabilities
    yubihsm2.Secp256r1,             // algorithm
)