Cryptographic protection for trusted operating systems

A method for protecting a trusted operating system, comprising:

• initializing a device;
• loading a virtual machine manager into memory circuitry in the device;
• selecting, using the virtual machine manager, a first range of memory in the memory circuitry in which to cryptographically protect a trusted operating system;
• and
• updating processing circuitry in the device based on the selected first memory range.

At least one machine-readable storage medium having stored thereon, individually or in combination, instructions for protecting a trusted operating system that, when executed by one or more processors, cause the one or more processors to:

• initialize a device;
• load a virtual machine manager into memory circuitry in the device;
• select, using the virtual machine manager, a first range of memory in the memory circuitry in which to cryptographically protect a trusted operating system;
• and
• update processing circuitry in the device based on the selected first memory range.