As for the trust, we generally trust the CPU manufacturers, including their implementation of encryption like the AES instructions.