He has worked on many platform security technologies over the last decade or so: He co-invented sealing and attestation, and then led the incorporation of these technologies into the original TPM specification. He also designed - and then worked with hardware partners to deliver - several of the newer secure-boot and isolation technologies that are now common in CPUs.