"Haven" guards against so-called evil maid attacks, in which your boot software is surreptitiously modified to defeat encryption.
