Abstract: A device for handling sensitive data comprises a first integrated circuitry forming a first trust zone and a second integrated circuitry forming a second trust zone. The first circuitry comprises a secure processing unit adapted for processing sensitive data, the second circuitry comprises a persistent memory area within its trust zone for storing sensitive data. The second integrated circuitry is separated from the first integrated circuitry, the processing unit of the first circuitry transfers sensitive data from the first trust zone to the second trust, the second circuitry transfers sensitive data stored in its persistent memory area to the processing unit of the first trust zone. The first and the second integrated circuitry comprise crypto means for securely transferring sensitive data based on a symmetrical crypto method using a secure key. The second integrated circuitry comprises means for initiating a new key generation to replace the active secure key.