That doesn't quite answer my question, I think. My statement was that: - if you have an opaque enclave on the device (e.g. a black box you can't peer into), y

That doesn't quite answer my question, I think. My statement was that: - if you have an opaque enclave on the device (e.g. a black box you can't peer into), you can't know what it's doing - if you don't, you can read the private key bits out Your statement was that it has a private enclave you cannot extract key material out of, which resolves the latter half of the question, but not the former, I think?