Our model is that no hardware is trusted except the CPU and TPM. Plaintext data never leaves the CPU. All of main memory is encrypted, so it's beyond just prote

Our model is that no hardware is trusted except the CPU and TPM. Plaintext data never leaves the CPU. All of main memory is encrypted, so it's beyond just protecting crypto keys in registers like TRESOR.