@mjg59 I can see how it happens, having been on the development side of ROM based bootloaders. The test keys had to be used for the majority of testing because the customer wouldn’t generate signed images for all of our test scenarios, and (rightly) kept hold of the private keys. I managed to get them to sign one benign image with each production key for our final tests, to prove that the correct public keys were in the final product.