Trusted Computing Base

it must be TRUSTED

a component or portion of the system that must operate correctly to ensure security

it must be Complete (unbypassable), Correct (verifiable), Secure (tamper-resistant)

it should be small as much as possible for easier to write and audit

Keep It Simple Stupid (KISS)