1. A device comprising: a processor; and a computer-readable medium including modules, the modules when executed by the processor, configure the device to perform a secure boot process based at least in part on receiving an update for software, the modules comprising: a cryptographic module configured to secure the device by: generating a sealing seed; generating a migration key based at least in part on the sealing seed and at least one software descriptor associated with a previous version of the software; and generating a sealing key based at least in part on the sealing seed and at least one software descriptor associated with a new version of the software.