Oxide has described some stuff around their Root of Trust implementation: https://oxide.computer/blog/exploiting-undocumented-hardware...