In theory, you can keep the RAM powered and read the decryption key from it. I believe a system like Apple’s Secure Enclave (everything contained in one chip)

In theory, you can keep the RAM powered and read the decryption key from it. I believe a system like Apple’s Secure Enclave (everything contained in one chip) is better in that regard, although I’m not an expert.