[goodpoint]

there are methods to store keys in RAM in encrypted form and decrypt them only on the cache and CPU registers

[brobinson]

Talked about a bit here: https://youtu.be/pKeiKYA03eE?t=963

Using debug registers to hold an AES key purely in the CPU is genius.