Comment by shuckles

The SE’s AES engine line encrypts and decrypts data to flash, and the SEP is responsible for generating all keys.

At this point, the people who claim they can’t trust Apple’s key generation should also distrust Intel or AMD or any other vendor’s key generation as well. Might as well generate keys by hand.