Safeguarding data during computation using hardware-protected enclaves that isolate code and data from untrusted software.