Even though the diagram above exemplifies a TEE having an running method (Trusted OS), we could just Use a bare-steel firmware exposing an interface with distinctive access to specified hardware methods.
Encryption is https://delilahnqab914244.blogprodesign.com/52392493/anti-ransom-software-for-dummies