[aftbit]

Could something like this be built using ARM's TrustZone features?

[nicolas314]

Nope, TrustZone is not tamperproof, cannot resist determined attackers who have access to the hardware. HSMs and smart cards are designed precisely to cover this use case.