6/2/2015EuroSys2006Page 1 Reducing TCB Complexity for Security-Sensitive Applications: Three Case Studies Lenin Singaravelu, Calton Pu, Hermann Härtig,