• Design abstractions that facilitate future security models, as the
primitive for application compartmentalization
• clean separation of policy and mechanism
• object-oriented structure (subject to the limitations of C)
• a user space capability-system model providing protection
• Cryptographic primitives, that can support many different higher-level operating system features and applications
• secure random number generation
• a library of encryption
• signature functions