I don't get why you would need secret hardware for that -- all the encryption can happen in software, and there are plenty of public known encryption algorithms

I don't get why you would need secret hardware for that -- all the encryption can happen in software, and there are plenty of public known encryption algorithms that are secure. Maybe the need for secure storage of a private key?