Software: Keys are in software - in CPU.
Hardware: Dedicated to hiding it in the secure enclave.

Did this answer your question?