<tns:profile xmlns:tns="http://www.qualcomm.com/sectools" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.qualcomm.com/sectools ../../../schema/v1_5/profile_1_5.xsd" id="MONACO" minimum_sectools_version="1.26" schema_version="1.5">
    <platform_binding_values>
        <soc_hw_versions>
            <value>0x601A</value>
        </soc_hw_versions>
    </platform_binding_values>
    <authentication>
        <image_list>
            <image id="XBL" authenticator_oem="XBL-SEC">
                <sw_id>0x0</sw_id>
            </image>
            <image id="DEVICE-PROGRAMMER" authenticator_oem="XBL-SEC">
                <sw_id>0x3</sw_id>
                <image_format>ELF-V6-DEV-PROG</image_format>
            </image>
            <image id="VIP" authenticator_oem="XBL-SEC">
                <sw_id>0x3</sw_id>
                <image_format>MBN-V6</image_format>
            </image>
            <image id="ADSP" authenticator_oem="TZ-PIL">
                <sw_id>0x4</sw_id>
            </image>
            <image id="TZ-DEVCFG" authenticator_oem="XBL-SEC">
                <sw_id>0x5</sw_id>
            </image>
            <image id="SP-MCP" authenticator_oem="TZ-PIL">
                <sw_id>0x6</sw_id>
            </image>
            <image id="TZ" authenticator_oem="XBL-SEC" authenticator_qti="XBL-SEC">
                <sw_id>0x7</sw_id>
            </image>
            <image id="UEFI" authenticator_oem="XBL-SEC">
                <sw_id>0x9</sw_id>
            </image>
            <image id="RPM" authenticator_oem="XBL-SEC">
                <sw_id>0xA</sw_id>
            </image>
            <image id="XBL-SEC" authenticator_qti="PBL">
                <sw_id>0xB</sw_id>
                <image_format>ELF-V6-XBL-SEC</image_format>
            </image>
            <image id="TZ-APP-OEM" authenticator_oem="TA-LOADER">
                <sw_id>0xC</sw_id>
                <image_format>ELF-V6-PLATFORM-INDEPENDENT</image_format>
            </image>
            <image id="TZ-APP-OEM-BACKWARDS-COMPATIBLE" authenticator_oem="TA-LOADER">
                <sw_id>0xC</sw_id>
                <image_format>ELF-V6</image_format>
            </image>
            <image id="TZ-APP-QTI" authenticator_oem="TA-LOADER" authenticator_qti="TA-LOADER">
                <sw_id>0xC</sw_id>
            </image>
            <image id="VENUS-FW" authenticator_oem="TZ-PIL">
                <sw_id>0xE</sw_id>
            </image>
            <image id="STI" authenticator_oem="TZ-PIL">
                <sw_id>0x11</sw_id>
            </image>
            <image id="GPU-MICRO-CODE" authenticator_oem="TZ-PIL">
                <sw_id>0x14</sw_id>
            </image>
            <image id="QHEE" authenticator_oem="XBL-SEC">
                <sw_id>0x15</sw_id>
            </image>
            <image id="CDSP0" authenticator_oem="TZ-PIL">
                <sw_id>0x17</sw_id>
            </image>
            <image id="SLPI" authenticator_oem="TZ-PIL">
                <sw_id>0x18</sw_id>
            </image>
            <image id="ABL" authenticator_oem="TZ-PIL">
                <sw_id>0x1C</sw_id>
            </image>
            <image id="IPA-FW" authenticator_oem="TZ-PIL">
                <sw_id>0x1D</sw_id>
            </image>
            <image id="TZ-TEE" authenticator_oem="TZ-PIL">
                <sw_id>0x1E</sw_id>
            </image>
            <image id="CMNLIB" authenticator_oem="TZ-PIL" authenticator_qti="TZ-PIL">
                <sw_id>0x1F</sw_id>
            </image>
            <image id="SHRM" authenticator_oem="XBL-SEC">
                <sw_id>0x20</sw_id>
            </image>
            <image id="AOP" authenticator_oem="XBL-SEC">
                <sw_id>0x21</sw_id>
            </image>
            <image id="OEM-MISC" authenticator_oem="XBL-SEC">
                <sw_id>0x22</sw_id>
                <image_format>ELF-V6-OEM-MISC</image_format>
            </image>
            <image id="QTI-MISC" authenticator_qti="XBL-SEC">
                <sw_id>0x23</sw_id>
                <image_format>ELF-V6-QTI-MISC</image_format>
            </image>
            <image id="QUPV3" authenticator_oem="TZ-PIL" authenticator_qti="TZ-PIL">
                <sw_id>0x24</sw_id>
            </image>
            <image id="XBL-CONFIG" authenticator_oem="XBL-SEC">
                <sw_id>0x25</sw_id>
            </image>
            <image id="UEFIFV" authenticator_oem="TZ-PIL">
                <sw_id>0x27</sw_id>
            </image>
            <image id="NPU-FW" authenticator_oem="TZ-PIL">
                <sw_id>0x28</sw_id>
            </image>
            <image id="IP-PROTECTOR" authenticator_oem="IP-PROTECTOR">
                <sw_id>0x2A</sw_id>
            </image>
            <image id="SEC-ELF" authenticator_oem="XBL-SEC">
                <sw_id>0x2B</sw_id>
            </image>
            <image id="IPA-MICRO-CODE" authenticator_oem="TZ-PIL">
                <sw_id>0x2D</sw_id>
            </image>
            <image id="CPUCP" authenticator_oem="XBL-SEC" authenticator_qti="XBL-SEC">
                <sw_id>0x31</sw_id>
            </image>
            <image id="CAMERA-FW" authenticator_oem="TZ-PIL">
                <sw_id>0x34</sw_id>
            </image>
            <image id="TOOLS-FV" authenticator_oem="XBL-SEC">
                <sw_id>0x3A</sw_id>
            </image>
            <image id="QUANTUM-FV" authenticator_oem="XBL-SEC">
                <sw_id>0x3B</sw_id>
            </image>
            <image id="QUEST-FV" authenticator_oem="XBL-SEC">
                <sw_id>0x3C</sw_id>
            </image>
            <image id="CDSP1" authenticator_oem="TZ-PIL">
                <sw_id>0x44</sw_id>
            </image>
            <image id="Q6-CDSP0-DTB" authenticator_oem="TZ-PIL">
                <sw_id>0x52</sw_id>
            </image>
            <image id="Q6-ADSP-DTB" authenticator_oem="TZ-PIL">
                <sw_id>0x53</sw_id>
            </image>
            <image id="Q6-CDSP1-DTB" authenticator_oem="TZ-PIL">
                <sw_id>0x57</sw_id>
            </image>
            <image id="GPDSP0" authenticator_oem="TZ-PIL">
                <sw_id>0x58</sw_id>
            </image>
            <image id="Q6-GPDSP0-DTB" authenticator_oem="TZ-PIL">
                <sw_id>0x59</sw_id>
            </image>
            <image id="GPDSP1" authenticator_oem="TZ-PIL">
                <sw_id>0x5A</sw_id>
            </image>
            <image id="Q6-GPDSP1-DTB" authenticator_oem="TZ-PIL">
                <sw_id>0x5B</sw_id>
            </image>
            <image id="DEBUG-POLICY" authenticator_oem="XBL-SEC">
                <sw_id>0x200</sw_id>
            </image>
            <image id="DEBUG-POLICY-QTI" authenticator_oem="XBL-SEC" authenticator_qti="XBL-SEC">
                <sw_id>0x200</sw_id>
            </image>
            <image id="GVM1" authenticator_oem="TZ-PIL">
                <sw_id>0x81</sw_id>
            </image>
            <image id="GVM2" authenticator_oem="TZ-PIL">
                <sw_id>0x82</sw_id>
            </image>
            <image id="GVM3" authenticator_oem="TZ-PIL">
                <sw_id>0x83</sw_id>
            </image>
            <image id="GVM4" authenticator_oem="TZ-PIL">
                <sw_id>0x84</sw_id>
            </image>			
        </image_list>
        <authenticators>
            <authenticator id="TZ-PIL">
                <supported_image_formats>
                    <image_format id="ELF-V6">
                        <file_type>ELF</file_type>
                        <elf_properties>
                            <elf_class>
                                <default_elf_class>32</default_elf_class>
                                <supported_elf_classes>
                                    <value>32</value>
                                    <value>64</value>
                                </supported_elf_classes>
                            </elf_class>
                            <contains_preamble>false</contains_preamble>
                        </elf_properties>
                        <hash_table_segment_properties>
                            <hash_table_segment_placements>
                                <default_hash_table_segment_placement>START</default_hash_table_segment_placement>
                                <supported_hash_table_segment_placements>
                                    <value>START</value>
                                </supported_hash_table_segment_placements>
                            </hash_table_segment_placements>
                            <hash_table_segment_alignment>0x1000</hash_table_segment_alignment>
                            <hash_pages>false</hash_pages>
                            <segment_hash_algorithms>
                                <default_segment_hash_algorithm>SHA384</default_segment_hash_algorithm>
                                <supported_segment_hash_algorithms>
                                    <value>SHA384</value>
                                    <value>SHA256</value>
                                </supported_segment_hash_algorithms>
                            </segment_hash_algorithms>
                            <hash_table_segment_version>6</hash_table_segment_version>
                            <hash_table_segment_metadata_versions>
                                <default_hash_table_segment_metadata_version>0.0</default_hash_table_segment_metadata_version>
                                <supported_hash_table_segment_metadata_versions>
                                    <value>0.0</value>
                                </supported_hash_table_segment_metadata_versions>
                            </hash_table_segment_metadata_versions>
                        </hash_table_segment_properties>
                    </image_format>
                </supported_image_formats>
                <default_image_format>ELF-V6</default_image_format>
                <supported_oem_signing_features>
                    <supports_vouch_for>true</supports_vouch_for>
                    <default_signature_format>ECDSA384</default_signature_format>
                    <signature_formats>
                        <signature_format id="ECDSA384">
                            <signature_algorithm>ECDSA</signature_algorithm>
                            <signature_hash_algorithms>
                                <default_signature_hash_algorithm>SHA384</default_signature_hash_algorithm>
                                <supported_signature_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_signature_hash_algorithms>
                            </signature_hash_algorithms>
                            <ecdsa_curves>
                                <default_ecdsa_curve>SECP384R1</default_ecdsa_curve>
                                <supported_ecdsa_curves>
                                    <value>SECP384R1</value>
                                </supported_ecdsa_curves>
                            </ecdsa_curves>
                        </signature_format>
                        <signature_format id="RSA256">
                            <signature_algorithm>RSA</signature_algorithm>
                            <signature_hash_algorithms>
                                <default_signature_hash_algorithm>SHA256</default_signature_hash_algorithm>
                                <supported_signature_hash_algorithms>
                                    <value>SHA256</value>
                                </supported_signature_hash_algorithms>
                            </signature_hash_algorithms>
                            <rsa_paddings>
                                <default_rsa_padding>PSS</default_rsa_padding>
                                <supported_rsa_paddings>
                                    <value>PSS</value>
                                </supported_rsa_paddings>
                            </rsa_paddings>
                            <key_sizes>
                                <default_key_size>2048</default_key_size>
                                <supported_key_sizes>
                                    <value>2048</value>
                                    <value>4096</value>
                                </supported_key_sizes>
                            </key_sizes>
                            <exponents>
                                <default_exponent>65537</default_exponent>
                                <supported_exponents>
                                    <value>65537</value>
                                </supported_exponents>
                            </exponents>
                        </signature_format>
                    </signature_formats>
                    <serial_bind>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </serial_bind>
                    <debug>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </debug>
                    <uie_key_switch_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </uie_key_switch_enable>
                    <root_revoke_activation_enable>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </root_revoke_activation_enable>
                    <supports_root_revoke_activation_enable_as_combined>false</supports_root_revoke_activation_enable_as_combined>
                    <crash_dump>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </crash_dump>
                    <supports_oem_id_product_id_independent>true</supports_oem_id_product_id_independent>
                    <supports_anti_rollback_version>true</supports_anti_rollback_version>
                    <mrc_specs>
                        <default_mrc_spec>2.0</default_mrc_spec>
                        <supported_mrc_specs>
                            <value>2.0</value>
                        </supported_mrc_specs>
                    </mrc_specs>
                    <certificate_chain_depths>
                        <default_certificate_chain_depth>3</default_certificate_chain_depth>
                        <supported_certificate_chain_depths>
                            <value>2</value>
                            <value>3</value>
                        </supported_certificate_chain_depths>
                    </certificate_chain_depths>
                    <platform_bindings>
                        <default_platform_bindings>
                            <value>SOC-HW-VER</value>
                        </default_platform_bindings>
                        <supported_platform_bindings>
                            <value>SOC-HW-VER</value>
                            <value>JTAG-ID</value>
                        </supported_platform_bindings>
                    </platform_bindings>
                    <requires_secondary_software_id>false</requires_secondary_software_id>
                    <requires_feature_id>false</requires_feature_id>
                </supported_oem_signing_features>
                <supported_qti_signing_features>
                    <supports_vouch_for>false</supports_vouch_for>
                    <default_signature_format>ECDSA384</default_signature_format>
                    <signature_formats>
                        <signature_format id="ECDSA384">
                            <signature_algorithm>ECDSA</signature_algorithm>
                            <signature_hash_algorithms>
                                <default_signature_hash_algorithm>SHA384</default_signature_hash_algorithm>
                                <supported_signature_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_signature_hash_algorithms>
                            </signature_hash_algorithms>
                            <ecdsa_curves>
                                <default_ecdsa_curve>SECP384R1</default_ecdsa_curve>
                                <supported_ecdsa_curves>
                                    <value>SECP384R1</value>
                                </supported_ecdsa_curves>
                            </ecdsa_curves>
                        </signature_format>
                    </signature_formats>
                    <serial_bind>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </serial_bind>
                    <debug>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </debug>
                    <uie_key_switch_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </uie_key_switch_enable>
                    <root_revoke_activation_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </root_revoke_activation_enable>
                    <supports_root_revoke_activation_enable_as_combined>false</supports_root_revoke_activation_enable_as_combined>
                    <crash_dump>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </crash_dump>
                    <supports_oem_id_product_id_independent>true</supports_oem_id_product_id_independent>
                    <supports_anti_rollback_version>false</supports_anti_rollback_version>
                    <certificate_chain_depths>
                        <default_certificate_chain_depth>3</default_certificate_chain_depth>
                        <supported_certificate_chain_depths>
                            <value>3</value>
                        </supported_certificate_chain_depths>
                    </certificate_chain_depths>
                    <platform_bindings>
                        <default_platform_bindings>
                            <value>SOC-HW-VER</value>
                        </default_platform_bindings>
                        <supported_platform_bindings>
                            <value>SOC-HW-VER</value>
                            <value>JTAG-ID</value>
                        </supported_platform_bindings>
                    </platform_bindings>
                    <requires_secondary_software_id>false</requires_secondary_software_id>
                    <requires_feature_id>false</requires_feature_id>
                </supported_qti_signing_features>
            </authenticator>
            <authenticator id="TA-LOADER">
                <supported_image_formats>
                    <image_format id="ELF-V6">
                        <file_type>ELF</file_type>
                        <elf_properties>
                            <elf_class>
                                <default_elf_class>32</default_elf_class>
                                <supported_elf_classes>
                                    <value>32</value>
                                    <value>64</value>
                                </supported_elf_classes>
                            </elf_class>
                            <contains_preamble>false</contains_preamble>
                        </elf_properties>
                        <hash_table_segment_properties>
                            <hash_table_segment_placements>
                                <default_hash_table_segment_placement>START</default_hash_table_segment_placement>
                                <supported_hash_table_segment_placements>
                                    <value>START</value>
                                </supported_hash_table_segment_placements>
                            </hash_table_segment_placements>
                            <hash_table_segment_alignment>0x1000</hash_table_segment_alignment>
                            <hash_pages>false</hash_pages>
                            <segment_hash_algorithms>
                                <default_segment_hash_algorithm>SHA384</default_segment_hash_algorithm>
                                <supported_segment_hash_algorithms>
                                    <value>SHA384</value>
                                    <value>SHA256</value>
                                </supported_segment_hash_algorithms>
                            </segment_hash_algorithms>
                            <hash_table_segment_version>6</hash_table_segment_version>
                            <hash_table_segment_metadata_versions>
                                <default_hash_table_segment_metadata_version>0.0</default_hash_table_segment_metadata_version>
                                <supported_hash_table_segment_metadata_versions>
                                    <value>0.0</value>
                                </supported_hash_table_segment_metadata_versions>
                            </hash_table_segment_metadata_versions>
                        </hash_table_segment_properties>
                    </image_format>
                    <image_format id="ELF-V6-PLATFORM-INDEPENDENT">
                        <file_type>ELF</file_type>
                        <elf_properties>
                            <elf_class>
                                <default_elf_class>32</default_elf_class>
                                <supported_elf_classes>
                                    <value>32</value>
                                    <value>64</value>
                                </supported_elf_classes>
                            </elf_class>
                            <contains_preamble>false</contains_preamble>
                        </elf_properties>
                        <hash_table_segment_properties>
                            <hash_table_segment_placements>
                                <default_hash_table_segment_placement>START</default_hash_table_segment_placement>
                                <supported_hash_table_segment_placements>
                                    <value>START</value>
                                </supported_hash_table_segment_placements>
                            </hash_table_segment_placements>
                            <hash_table_segment_alignment>0x1000</hash_table_segment_alignment>
                            <hash_pages>false</hash_pages>
                            <segment_hash_algorithms>
                                <default_segment_hash_algorithm>SHA384</default_segment_hash_algorithm>
                                <supported_segment_hash_algorithms>
                                    <value>SHA384</value>
                                    <value>SHA256</value>
                                </supported_segment_hash_algorithms>
                            </segment_hash_algorithms>
                            <hash_table_segment_version>6</hash_table_segment_version>
                            <hash_table_segment_metadata_versions>
                                <default_hash_table_segment_metadata_version>1.0</default_hash_table_segment_metadata_version>
                                <supported_hash_table_segment_metadata_versions>
                                    <value>0.0</value>
                                    <value>1.0</value>
                                </supported_hash_table_segment_metadata_versions>
                            </hash_table_segment_metadata_versions>
                        </hash_table_segment_properties>
                    </image_format>
                </supported_image_formats>
                <default_image_format>ELF-V6</default_image_format>
                <supported_oem_signing_features>
                    <supports_vouch_for>false</supports_vouch_for>
                    <default_signature_format>ECDSA384</default_signature_format>
                    <signature_formats>
                        <signature_format id="ECDSA384">
                            <signature_algorithm>ECDSA</signature_algorithm>
                            <signature_hash_algorithms>
                                <default_signature_hash_algorithm>SHA384</default_signature_hash_algorithm>
                                <supported_signature_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_signature_hash_algorithms>
                            </signature_hash_algorithms>
                            <ecdsa_curves>
                                <default_ecdsa_curve>SECP384R1</default_ecdsa_curve>
                                <supported_ecdsa_curves>
                                    <value>SECP384R1</value>
                                </supported_ecdsa_curves>
                            </ecdsa_curves>
                        </signature_format>
                        <signature_format id="RSA256">
                            <signature_algorithm>RSA</signature_algorithm>
                            <signature_hash_algorithms>
                                <default_signature_hash_algorithm>SHA256</default_signature_hash_algorithm>
                                <supported_signature_hash_algorithms>
                                    <value>SHA256</value>
                                </supported_signature_hash_algorithms>
                            </signature_hash_algorithms>
                            <rsa_paddings>
                                <default_rsa_padding>PSS</default_rsa_padding>
                                <supported_rsa_paddings>
                                    <value>PSS</value>
                                </supported_rsa_paddings>
                            </rsa_paddings>
                            <key_sizes>
                                <default_key_size>2048</default_key_size>
                                <supported_key_sizes>
                                    <value>2048</value>
                                    <value>4096</value>
                                </supported_key_sizes>
                            </key_sizes>
                            <exponents>
                                <default_exponent>65537</default_exponent>
                                <supported_exponents>
                                    <value>65537</value>
                                </supported_exponents>
                            </exponents>
                        </signature_format>
                    </signature_formats>
                    <serial_bind>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </serial_bind>
                    <debug>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </debug>
                    <uie_key_switch_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </uie_key_switch_enable>
                    <root_revoke_activation_enable>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </root_revoke_activation_enable>
                    <supports_root_revoke_activation_enable_as_combined>false</supports_root_revoke_activation_enable_as_combined>
                    <crash_dump>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </crash_dump>
                    <supports_oem_id_product_id_independent>true</supports_oem_id_product_id_independent>
                    <supports_anti_rollback_version>true</supports_anti_rollback_version>
                    <mrc_specs>
                        <default_mrc_spec>2.0</default_mrc_spec>
                        <supported_mrc_specs>
                            <value>2.0</value>
                        </supported_mrc_specs>
                    </mrc_specs>
                    <certificate_chain_depths>
                        <default_certificate_chain_depth>3</default_certificate_chain_depth>
                        <supported_certificate_chain_depths>
                            <value>2</value>
                            <value>3</value>
                        </supported_certificate_chain_depths>
                    </certificate_chain_depths>
                    <platform_bindings>
                        <default_platform_bindings>
                            <value>SOC-HW-VER</value>
                        </default_platform_bindings>
                        <supported_platform_bindings>
                            <value>SOC-HW-VER</value>
                            <value>JTAG-ID</value>
                            <value>INDEPENDENT</value>
                        </supported_platform_bindings>
                    </platform_bindings>
                    <requires_secondary_software_id>false</requires_secondary_software_id>
                    <requires_feature_id>false</requires_feature_id>
                </supported_oem_signing_features>
                <supported_qti_signing_features>
                    <supports_vouch_for>false</supports_vouch_for>
                    <default_signature_format>ECDSA384</default_signature_format>
                    <signature_formats>
                        <signature_format id="ECDSA384">
                            <signature_algorithm>ECDSA</signature_algorithm>
                            <signature_hash_algorithms>
                                <default_signature_hash_algorithm>SHA384</default_signature_hash_algorithm>
                                <supported_signature_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_signature_hash_algorithms>
                            </signature_hash_algorithms>
                            <ecdsa_curves>
                                <default_ecdsa_curve>SECP384R1</default_ecdsa_curve>
                                <supported_ecdsa_curves>
                                    <value>SECP384R1</value>
                                </supported_ecdsa_curves>
                            </ecdsa_curves>
                        </signature_format>
                    </signature_formats>
                    <serial_bind>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </serial_bind>
                    <debug>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </debug>
                    <uie_key_switch_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </uie_key_switch_enable>
                    <root_revoke_activation_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </root_revoke_activation_enable>
                    <supports_root_revoke_activation_enable_as_combined>false</supports_root_revoke_activation_enable_as_combined>
                    <crash_dump>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </crash_dump>
                    <supports_oem_id_product_id_independent>true</supports_oem_id_product_id_independent>
                    <supports_anti_rollback_version>false</supports_anti_rollback_version>
                    <certificate_chain_depths>
                        <default_certificate_chain_depth>3</default_certificate_chain_depth>
                        <supported_certificate_chain_depths>
                            <value>3</value>
                        </supported_certificate_chain_depths>
                    </certificate_chain_depths>
                    <platform_bindings>
                        <default_platform_bindings>
                            <value>SOC-HW-VER</value>
                        </default_platform_bindings>
                        <supported_platform_bindings>
                            <value>SOC-HW-VER</value>
                            <value>JTAG-ID</value>
                        </supported_platform_bindings>
                    </platform_bindings>
                    <requires_secondary_software_id>false</requires_secondary_software_id>
                    <requires_feature_id>false</requires_feature_id>
                    <supported_soc_lifecycle_states>
                        <value>RMA</value>
                        <value>OPERATIONAL-EXT</value>
                        <value>OPERATIONAL-INT</value>
                    </supported_soc_lifecycle_states>
                </supported_qti_signing_features>
            </authenticator>
            <authenticator id="PBL">
                <supported_image_formats>
                    <image_format id="ELF-V6">
                        <file_type>ELF</file_type>
                        <elf_properties>
                            <elf_class>
                                <default_elf_class>64</default_elf_class>
                                <supported_elf_classes>
                                    <value>32</value>
                                    <value>64</value>
                                </supported_elf_classes>
                            </elf_class>
                            <contains_preamble>false</contains_preamble>
                        </elf_properties>
                        <hash_table_segment_properties>
                            <hash_table_segment_placements>
                                <default_hash_table_segment_placement>END</default_hash_table_segment_placement>
                                <supported_hash_table_segment_placements>
                                    <value>END</value>
                                </supported_hash_table_segment_placements>
                            </hash_table_segment_placements>
                            <hash_table_segment_alignment>0x1000</hash_table_segment_alignment>
                            <hash_pages>false</hash_pages>
                            <segment_hash_algorithms>
                                <default_segment_hash_algorithm>SHA384</default_segment_hash_algorithm>
                                <supported_segment_hash_algorithms>
                                    <value>SHA384</value>
                                    <value>SHA256</value>
                                </supported_segment_hash_algorithms>
                            </segment_hash_algorithms>
                            <hash_table_segment_version>6</hash_table_segment_version>
                            <hash_table_segment_metadata_versions>
                                <default_hash_table_segment_metadata_version>0.0</default_hash_table_segment_metadata_version>
                                <supported_hash_table_segment_metadata_versions>
                                    <value>0.0</value>
                                </supported_hash_table_segment_metadata_versions>
                            </hash_table_segment_metadata_versions>
                        </hash_table_segment_properties>
                    </image_format>
                    <image_format id="ELF-V6-XBL-SEC">
                        <file_type>ELF</file_type>
                        <elf_properties>
                            <elf_class>
                                <default_elf_class>32</default_elf_class>
                                <supported_elf_classes>
                                    <value>32</value>
                                    <value>64</value>
                                </supported_elf_classes>
                            </elf_class>
                            <contains_preamble>false</contains_preamble>
                        </elf_properties>
                        <hash_table_segment_properties>
                            <hash_table_segment_placements>
                                <default_hash_table_segment_placement>START</default_hash_table_segment_placement>
                                <supported_hash_table_segment_placements>
                                    <value>START</value>
                                </supported_hash_table_segment_placements>
                            </hash_table_segment_placements>
                            <hash_table_segment_alignment>0x1</hash_table_segment_alignment>
                            <hash_pages>false</hash_pages>
                            <segment_hash_algorithms>
                                <default_segment_hash_algorithm>SHA384</default_segment_hash_algorithm>
                                <supported_segment_hash_algorithms>
                                    <value>SHA384</value>
                                    <value>SHA256</value>
                                </supported_segment_hash_algorithms>
                            </segment_hash_algorithms>
                            <hash_table_segment_version>6</hash_table_segment_version>
                            <hash_table_segment_metadata_versions>
                                <default_hash_table_segment_metadata_version>0.0</default_hash_table_segment_metadata_version>
                                <supported_hash_table_segment_metadata_versions>
                                    <value>0.0</value>
                                </supported_hash_table_segment_metadata_versions>
                            </hash_table_segment_metadata_versions>
                        </hash_table_segment_properties>
                    </image_format>
                </supported_image_formats>
                <default_image_format>ELF-V6</default_image_format>
                <supported_oem_signing_features>
                    <supports_vouch_for>false</supports_vouch_for>
                    <default_signature_format>ECDSA384</default_signature_format>
                    <signature_formats>
                        <signature_format id="ECDSA384">
                            <signature_algorithm>ECDSA</signature_algorithm>
                            <signature_hash_algorithms>
                                <default_signature_hash_algorithm>SHA384</default_signature_hash_algorithm>
                                <supported_signature_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_signature_hash_algorithms>
                            </signature_hash_algorithms>
                            <ecdsa_curves>
                                <default_ecdsa_curve>SECP384R1</default_ecdsa_curve>
                                <supported_ecdsa_curves>
                                    <value>SECP384R1</value>
                                </supported_ecdsa_curves>
                            </ecdsa_curves>
                        </signature_format>
                        <signature_format id="RSA256">
                            <signature_algorithm>RSA</signature_algorithm>
                            <signature_hash_algorithms>
                                <default_signature_hash_algorithm>SHA256</default_signature_hash_algorithm>
                                <supported_signature_hash_algorithms>
                                    <value>SHA256</value>
                                </supported_signature_hash_algorithms>
                            </signature_hash_algorithms>
                            <rsa_paddings>
                                <default_rsa_padding>PSS</default_rsa_padding>
                                <supported_rsa_paddings>
                                    <value>PSS</value>
                                </supported_rsa_paddings>
                            </rsa_paddings>
                            <key_sizes>
                                <default_key_size>2048</default_key_size>
                                <supported_key_sizes>
                                    <value>2048</value>
                                    <value>4096</value>
                                </supported_key_sizes>
                            </key_sizes>
                            <exponents>
                                <default_exponent>65537</default_exponent>
                                <supported_exponents>
                                    <value>65537</value>
                                </supported_exponents>
                            </exponents>
                        </signature_format>
                    </signature_formats>
                    <serial_bind>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </serial_bind>
                    <debug>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </debug>
                    <uie_key_switch_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </uie_key_switch_enable>
                    <root_revoke_activation_enable>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </root_revoke_activation_enable>
                    <supports_root_revoke_activation_enable_as_combined>true</supports_root_revoke_activation_enable_as_combined>
                    <crash_dump>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </crash_dump>
                    <supports_oem_id_product_id_independent>true</supports_oem_id_product_id_independent>
                    <supports_anti_rollback_version>true</supports_anti_rollback_version>
                    <mrc_specs>
                        <default_mrc_spec>2.0</default_mrc_spec>
                        <supported_mrc_specs>
                            <value>2.0</value>
                        </supported_mrc_specs>
                    </mrc_specs>
                    <certificate_chain_depths>
                        <default_certificate_chain_depth>3</default_certificate_chain_depth>
                        <supported_certificate_chain_depths>
                            <value>2</value>
                            <value>3</value>
                        </supported_certificate_chain_depths>
                    </certificate_chain_depths>
                    <platform_bindings>
                        <default_platform_bindings>
                            <value>SOC-HW-VER</value>
                        </default_platform_bindings>
                        <supported_platform_bindings>
                            <value>SOC-HW-VER</value>
                            <value>JTAG-ID</value>
                        </supported_platform_bindings>
                    </platform_bindings>
                    <requires_secondary_software_id>false</requires_secondary_software_id>
                    <requires_feature_id>false</requires_feature_id>
                </supported_oem_signing_features>
                <supported_qti_signing_features>
                    <supports_vouch_for>false</supports_vouch_for>
                    <default_signature_format>ECDSA384</default_signature_format>
                    <signature_formats>
                        <signature_format id="ECDSA384">
                            <signature_algorithm>ECDSA</signature_algorithm>
                            <signature_hash_algorithms>
                                <default_signature_hash_algorithm>SHA384</default_signature_hash_algorithm>
                                <supported_signature_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_signature_hash_algorithms>
                            </signature_hash_algorithms>
                            <ecdsa_curves>
                                <default_ecdsa_curve>SECP384R1</default_ecdsa_curve>
                                <supported_ecdsa_curves>
                                    <value>SECP384R1</value>
                                </supported_ecdsa_curves>
                            </ecdsa_curves>
                        </signature_format>
                    </signature_formats>
                    <serial_bind>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </serial_bind>
                    <debug>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </debug>
                    <uie_key_switch_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </uie_key_switch_enable>
                    <root_revoke_activation_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </root_revoke_activation_enable>
                    <supports_root_revoke_activation_enable_as_combined>false</supports_root_revoke_activation_enable_as_combined>
                    <crash_dump>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </crash_dump>
                    <supports_oem_id_product_id_independent>true</supports_oem_id_product_id_independent>
                    <supports_anti_rollback_version>false</supports_anti_rollback_version>
                    <certificate_chain_depths>
                        <default_certificate_chain_depth>3</default_certificate_chain_depth>
                        <supported_certificate_chain_depths>
                            <value>3</value>
                        </supported_certificate_chain_depths>
                    </certificate_chain_depths>
                    <platform_bindings>
                        <default_platform_bindings>
                            <value>SOC-HW-VER</value>
                        </default_platform_bindings>
                        <supported_platform_bindings>
                            <value>SOC-HW-VER</value>
                            <value>JTAG-ID</value>
                        </supported_platform_bindings>
                    </platform_bindings>
                    <requires_secondary_software_id>false</requires_secondary_software_id>
                    <requires_feature_id>false</requires_feature_id>
                </supported_qti_signing_features>
            </authenticator>
            <authenticator id="XBL-SEC">
                <supported_image_formats>
                    <image_format id="ELF-V6">
                        <file_type>ELF</file_type>
                        <elf_properties>
                            <elf_class>
                                <default_elf_class>32</default_elf_class>
                                <supported_elf_classes>
                                    <value>32</value>
                                    <value>64</value>
                                </supported_elf_classes>
                            </elf_class>
                            <contains_preamble>false</contains_preamble>
                        </elf_properties>
                        <hash_table_segment_properties>
                            <hash_table_segment_placements>
                                <default_hash_table_segment_placement>END</default_hash_table_segment_placement>
                                <supported_hash_table_segment_placements>
                                    <value>END</value>
                                </supported_hash_table_segment_placements>
                            </hash_table_segment_placements>
                            <hash_table_segment_alignment>0x1000</hash_table_segment_alignment>
                            <hash_pages>false</hash_pages>
                            <segment_hash_algorithms>
                                <default_segment_hash_algorithm>SHA384</default_segment_hash_algorithm>
                                <supported_segment_hash_algorithms>
                                    <value>SHA384</value>
                                    <value>SHA256</value>
                                </supported_segment_hash_algorithms>
                            </segment_hash_algorithms>
                            <hash_table_segment_version>6</hash_table_segment_version>
                            <hash_table_segment_metadata_versions>
                                <default_hash_table_segment_metadata_version>0.0</default_hash_table_segment_metadata_version>
                                <supported_hash_table_segment_metadata_versions>
                                    <value>0.0</value>
                                </supported_hash_table_segment_metadata_versions>
                            </hash_table_segment_metadata_versions>
                        </hash_table_segment_properties>
                    </image_format>
                    <image_format id="ELF-V6-DEV-PROG">
                        <file_type>ELF</file_type>
                        <elf_properties>
                            <elf_class>
                                <default_elf_class>32</default_elf_class>
                                <supported_elf_classes>
                                    <value>32</value>
                                    <value>64</value>
                                </supported_elf_classes>
                            </elf_class>
                            <contains_preamble>false</contains_preamble>
                        </elf_properties>
                        <hash_table_segment_properties>
                            <hash_table_segment_placements>
                                <default_hash_table_segment_placement>START</default_hash_table_segment_placement>
                                <supported_hash_table_segment_placements>
                                    <value>START</value>
                                </supported_hash_table_segment_placements>
                            </hash_table_segment_placements>
                            <hash_table_segment_alignment>0x1000</hash_table_segment_alignment>
                            <hash_pages>false</hash_pages>
                            <segment_hash_algorithms>
                                <default_segment_hash_algorithm>SHA384</default_segment_hash_algorithm>
                                <supported_segment_hash_algorithms>
                                    <value>SHA384</value>
                                    <value>SHA256</value>
                                </supported_segment_hash_algorithms>
                            </segment_hash_algorithms>
                            <hash_table_segment_version>6</hash_table_segment_version>
                            <hash_table_segment_metadata_versions>
                                <default_hash_table_segment_metadata_version>0.0</default_hash_table_segment_metadata_version>
                                <supported_hash_table_segment_metadata_versions>
                                    <value>0.0</value>
                                </supported_hash_table_segment_metadata_versions>
                            </hash_table_segment_metadata_versions>
                        </hash_table_segment_properties>
                    </image_format>
                    <image_format id="ELF-V6-OEM-MISC">
                        <file_type>ELF</file_type>
                        <elf_properties>
                            <elf_class>
                                <default_elf_class>32</default_elf_class>
                                <supported_elf_classes>
                                    <value>32</value>
                                    <value>64</value>
                                </supported_elf_classes>
                            </elf_class>
                            <contains_preamble>false</contains_preamble>
                        </elf_properties>
                        <hash_table_segment_properties>
                            <hash_table_segment_placements>
                                <default_hash_table_segment_placement>END</default_hash_table_segment_placement>
                                <supported_hash_table_segment_placements>
                                    <value>END</value>
                                </supported_hash_table_segment_placements>
                            </hash_table_segment_placements>
                            <hash_table_segment_alignment>0x1000</hash_table_segment_alignment>
                            <hash_pages>false</hash_pages>
                            <segment_hash_algorithms>
                                <default_segment_hash_algorithm>SHA384</default_segment_hash_algorithm>
                                <supported_segment_hash_algorithms>
                                    <value>SHA384</value>
                                    <value>SHA256</value>
                                </supported_segment_hash_algorithms>
                            </segment_hash_algorithms>
                            <hash_table_segment_version>6</hash_table_segment_version>
                            <hash_table_segment_metadata_versions>
                                <default_hash_table_segment_metadata_version>0.0</default_hash_table_segment_metadata_version>
                                <supported_hash_table_segment_metadata_versions>
                                    <value>0.0</value>
                                </supported_hash_table_segment_metadata_versions>
                            </hash_table_segment_metadata_versions>
                        </hash_table_segment_properties>
                        <vouch_segment_properties>
                            <vouch_segment_version>0</vouch_segment_version>
                            <max_entry_count>30</max_entry_count>
                            <vouch_segment_hash_algorithms>
                                <default_vouch_segment_hash_algorithm>SHA384</default_vouch_segment_hash_algorithm>
                                <supported_vouch_segment_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_vouch_segment_hash_algorithms>
                            </vouch_segment_hash_algorithms>
                            <phy_addr>0x14819000</phy_addr>
                            <vouch_segment_placements>
                                <default_vouch_segment_placement>START</default_vouch_segment_placement>
                                <supported_vouch_segment_placements>
                                    <value>START</value>
                                </supported_vouch_segment_placements>
                            </vouch_segment_placements>
                            <vouch_segment_alignment>0x1000</vouch_segment_alignment>
                        </vouch_segment_properties>
                    </image_format>
                    <image_format id="ELF-V6-QTI-MISC">
                        <file_type>ELF</file_type>
                        <elf_properties>
                            <elf_class>
                                <default_elf_class>32</default_elf_class>
                                <supported_elf_classes>
                                    <value>32</value>
                                </supported_elf_classes>
                            </elf_class>
                            <contains_preamble>false</contains_preamble>
                        </elf_properties>
                        <hash_table_segment_properties>
                            <hash_table_segment_placements>
                                <default_hash_table_segment_placement>START</default_hash_table_segment_placement>
                                <supported_hash_table_segment_placements>
                                    <value>ANY</value>
                                </supported_hash_table_segment_placements>
                            </hash_table_segment_placements>
                            <hash_table_segment_alignment>0x1000</hash_table_segment_alignment>
                            <hash_pages>false</hash_pages>
                            <segment_hash_algorithms>
                                <default_segment_hash_algorithm>SHA384</default_segment_hash_algorithm>
                                <supported_segment_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_segment_hash_algorithms>
                            </segment_hash_algorithms>
                            <hash_table_segment_version>6</hash_table_segment_version>
                            <hash_table_segment_metadata_versions>
                                <default_hash_table_segment_metadata_version>0.0</default_hash_table_segment_metadata_version>
                                <supported_hash_table_segment_metadata_versions>
                                    <value>0.0</value>
                                </supported_hash_table_segment_metadata_versions>
                            </hash_table_segment_metadata_versions>
                        </hash_table_segment_properties>
                        <vouch_segment_properties>
                            <vouch_segment_version>0</vouch_segment_version>
                            <max_entry_count>12</max_entry_count>
                            <vouch_segment_hash_algorithms>
                                <default_vouch_segment_hash_algorithm>SHA384</default_vouch_segment_hash_algorithm>
                                <supported_vouch_segment_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_vouch_segment_hash_algorithms>
                            </vouch_segment_hash_algorithms>
                            <phy_addr>0x14819000</phy_addr>
                            <vouch_segment_placements>
                                <default_vouch_segment_placement>START</default_vouch_segment_placement>
                                <supported_vouch_segment_placements>
                                    <value>START</value>
                                </supported_vouch_segment_placements>
                            </vouch_segment_placements>
                            <vouch_segment_alignment>0x1000</vouch_segment_alignment>
                        </vouch_segment_properties>
                    </image_format>
                    <image_format id="MBN-V6">
                        <file_type>MBN</file_type>
                        <mbn_properties>
                            <mbn_version>6</mbn_version>
                            <mbn_metadata_versions>
                                <default_mbn_metadata_version>0.0</default_mbn_metadata_version>
                                <supported_mbn_metadata_versions>
                                    <value>0.0</value>
                                    <value>1.0</value>
                                </supported_mbn_metadata_versions>
                            </mbn_metadata_versions>
                        </mbn_properties>
                    </image_format>
                </supported_image_formats>
                <default_image_format>ELF-V6</default_image_format>
                <supported_oem_signing_features>
                    <supports_vouch_for>true</supports_vouch_for>
                    <default_signature_format>ECDSA384</default_signature_format>
                    <signature_formats>
                        <signature_format id="ECDSA384">
                            <signature_algorithm>ECDSA</signature_algorithm>
                            <signature_hash_algorithms>
                                <default_signature_hash_algorithm>SHA384</default_signature_hash_algorithm>
                                <supported_signature_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_signature_hash_algorithms>
                            </signature_hash_algorithms>
                            <ecdsa_curves>
                                <default_ecdsa_curve>SECP384R1</default_ecdsa_curve>
                                <supported_ecdsa_curves>
                                    <value>SECP384R1</value>
                                </supported_ecdsa_curves>
                            </ecdsa_curves>
                        </signature_format>
                        <signature_format id="RSA256">
                            <signature_algorithm>RSA</signature_algorithm>
                            <signature_hash_algorithms>
                                <default_signature_hash_algorithm>SHA256</default_signature_hash_algorithm>
                                <supported_signature_hash_algorithms>
                                    <value>SHA256</value>
                                </supported_signature_hash_algorithms>
                            </signature_hash_algorithms>
                            <rsa_paddings>
                                <default_rsa_padding>PSS</default_rsa_padding>
                                <supported_rsa_paddings>
                                    <value>PSS</value>
                                </supported_rsa_paddings>
                            </rsa_paddings>
                            <key_sizes>
                                <default_key_size>2048</default_key_size>
                                <supported_key_sizes>
                                    <value>2048</value>
                                    <value>4096</value>
                                </supported_key_sizes>
                            </key_sizes>
                            <exponents>
                                <default_exponent>65537</default_exponent>
                                <supported_exponents>
                                    <value>65537</value>
                                </supported_exponents>
                            </exponents>
                        </signature_format>
                    </signature_formats>
                    <serial_bind>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </serial_bind>
                    <debug>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </debug>
                    <uie_key_switch_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </uie_key_switch_enable>
                    <root_revoke_activation_enable>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </root_revoke_activation_enable>
                    <supports_root_revoke_activation_enable_as_combined>false</supports_root_revoke_activation_enable_as_combined>
                    <crash_dump>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </crash_dump>
                    <supports_oem_id_product_id_independent>true</supports_oem_id_product_id_independent>
                    <supports_anti_rollback_version>true</supports_anti_rollback_version>
                    <mrc_specs>
                        <default_mrc_spec>2.0</default_mrc_spec>
                        <supported_mrc_specs>
                            <value>2.0</value>
                        </supported_mrc_specs>
                    </mrc_specs>
                    <certificate_chain_depths>
                        <default_certificate_chain_depth>3</default_certificate_chain_depth>
                        <supported_certificate_chain_depths>
                            <value>2</value>
                            <value>3</value>
                        </supported_certificate_chain_depths>
                    </certificate_chain_depths>
                    <platform_bindings>
                        <default_platform_bindings>
                            <value>SOC-HW-VER</value>
                        </default_platform_bindings>
                        <supported_platform_bindings>
                            <value>SOC-HW-VER</value>
                            <value>JTAG-ID</value>
                        </supported_platform_bindings>
                    </platform_bindings>
                    <requires_secondary_software_id>false</requires_secondary_software_id>
                    <requires_feature_id>false</requires_feature_id>
                </supported_oem_signing_features>
                <supported_qti_signing_features>
                    <supports_vouch_for>true</supports_vouch_for>
                    <default_signature_format>ECDSA384</default_signature_format>
                    <signature_formats>
                        <signature_format id="ECDSA384">
                            <signature_algorithm>ECDSA</signature_algorithm>
                            <signature_hash_algorithms>
                                <default_signature_hash_algorithm>SHA384</default_signature_hash_algorithm>
                                <supported_signature_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_signature_hash_algorithms>
                            </signature_hash_algorithms>
                            <ecdsa_curves>
                                <default_ecdsa_curve>SECP384R1</default_ecdsa_curve>
                                <supported_ecdsa_curves>
                                    <value>SECP384R1</value>
                                </supported_ecdsa_curves>
                            </ecdsa_curves>
                        </signature_format>
                    </signature_formats>
                    <serial_bind>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </serial_bind>
                    <debug>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </debug>
                    <uie_key_switch_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </uie_key_switch_enable>
                    <root_revoke_activation_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </root_revoke_activation_enable>
                    <supports_root_revoke_activation_enable_as_combined>false</supports_root_revoke_activation_enable_as_combined>
                    <crash_dump>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </crash_dump>
                    <supports_oem_id_product_id_independent>true</supports_oem_id_product_id_independent>
                    <supports_anti_rollback_version>false</supports_anti_rollback_version>
                    <certificate_chain_depths>
                        <default_certificate_chain_depth>3</default_certificate_chain_depth>
                        <supported_certificate_chain_depths>
                            <value>3</value>
                        </supported_certificate_chain_depths>
                    </certificate_chain_depths>
                    <platform_bindings>
                        <default_platform_bindings>
                            <value>SOC-HW-VER</value>
                        </default_platform_bindings>
                        <supported_platform_bindings>
                            <value>SOC-HW-VER</value>
                            <value>JTAG-ID</value>
                        </supported_platform_bindings>
                    </platform_bindings>
                    <requires_secondary_software_id>false</requires_secondary_software_id>
                    <requires_feature_id>false</requires_feature_id>
                </supported_qti_signing_features>
            </authenticator>
            <authenticator id="IP-PROTECTOR">
                <supported_image_formats>
                    <image_format id="ELF-V6">
                        <file_type>ELF</file_type>
                        <elf_properties>
                            <elf_class>
                                <default_elf_class>32</default_elf_class>
                                <supported_elf_classes>
                                    <value>32</value>
                                    <value>64</value>
                                </supported_elf_classes>
                            </elf_class>
                            <contains_preamble>false</contains_preamble>
                        </elf_properties>
                        <hash_table_segment_properties>
                            <hash_table_segment_placements>
                                <default_hash_table_segment_placement>START</default_hash_table_segment_placement>
                                <supported_hash_table_segment_placements>
                                    <value>ANY</value>
                                </supported_hash_table_segment_placements>
                            </hash_table_segment_placements>
                            <hash_table_segment_alignment>0x1000</hash_table_segment_alignment>
                            <hash_pages>false</hash_pages>
                            <segment_hash_algorithms>
                                <default_segment_hash_algorithm>SHA384</default_segment_hash_algorithm>
                                <supported_segment_hash_algorithms>
                                    <value>SHA384</value>
                                    <value>SHA256</value>
                                </supported_segment_hash_algorithms>
                            </segment_hash_algorithms>
                            <hash_table_segment_version>6</hash_table_segment_version>
                            <hash_table_segment_metadata_versions>
                                <default_hash_table_segment_metadata_version>0.0</default_hash_table_segment_metadata_version>
                                <supported_hash_table_segment_metadata_versions>
                                    <value>0.0</value>
                                </supported_hash_table_segment_metadata_versions>
                            </hash_table_segment_metadata_versions>
                        </hash_table_segment_properties>
                    </image_format>
                </supported_image_formats>
                <default_image_format>ELF-V6</default_image_format>
                <supported_oem_signing_features>
                    <supports_vouch_for>true</supports_vouch_for>
                    <default_signature_format>ECDSA384</default_signature_format>
                    <signature_formats>
                        <signature_format id="ECDSA384">
                            <signature_algorithm>ECDSA</signature_algorithm>
                            <signature_hash_algorithms>
                                <default_signature_hash_algorithm>SHA384</default_signature_hash_algorithm>
                                <supported_signature_hash_algorithms>
                                    <value>SHA384</value>
                                </supported_signature_hash_algorithms>
                            </signature_hash_algorithms>
                            <ecdsa_curves>
                                <default_ecdsa_curve>SECP384R1</default_ecdsa_curve>
                                <supported_ecdsa_curves>
                                    <value>SECP384R1</value>
                                </supported_ecdsa_curves>
                            </ecdsa_curves>
                        </signature_format>
                    </signature_formats>
                    <serial_bind>
                        <supported>true</supported>
                        <supports_single_serial>true</supports_single_serial>
                        <supports_multi_serials>true</supports_multi_serials>
                    </serial_bind>
                    <debug>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </debug>
                    <uie_key_switch_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </uie_key_switch_enable>
                    <root_revoke_activation_enable>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </root_revoke_activation_enable>
                    <supports_root_revoke_activation_enable_as_combined>false</supports_root_revoke_activation_enable_as_combined>
                    <crash_dump>
                        <supported>false</supported>
                        <supports_single_serial>false</supports_single_serial>
                        <supports_multi_serials>false</supports_multi_serials>
                    </crash_dump>
                    <supports_oem_id_product_id_independent>true</supports_oem_id_product_id_independent>
                    <supports_anti_rollback_version>true</supports_anti_rollback_version>
                    <mrc_specs>
                        <default_mrc_spec>2.0</default_mrc_spec>
                        <supported_mrc_specs>
                            <value>2.0</value>
                        </supported_mrc_specs>
                    </mrc_specs>
                    <certificate_chain_depths>
                        <default_certificate_chain_depth>3</default_certificate_chain_depth>
                        <supported_certificate_chain_depths>
                            <value>2</value>
                            <value>3</value>
                        </supported_certificate_chain_depths>
                    </certificate_chain_depths>
                    <platform_bindings>
                        <default_platform_bindings>
                            <value>SOC-HW-VER</value>
                        </default_platform_bindings>
                        <supported_platform_bindings>
                            <value>SOC-HW-VER</value>
                            <value>JTAG-ID</value>
                        </supported_platform_bindings>
                    </platform_bindings>
                    <requires_secondary_software_id>false</requires_secondary_software_id>
                    <requires_feature_id>true</requires_feature_id>
                </supported_oem_signing_features>
                <supported_oem_encryption_features>
                    <default_encryption_format>UIE</default_encryption_format>
                    <supported_encryption_formats>
                        <encryption_format id="UIE">
                            <encryption_type>UIE</encryption_type>
                            <encryption_specs>
                                <default_encryption_spec>UIE-2.0-L2-1.2</default_encryption_spec>
                                <supported_encryption_specs>
                                    <value>UIE-2.0-L2-1.2</value>
                                </supported_encryption_specs>
                            </encryption_specs>
                            <root_key_types>
                                <default_root_key_type>OTP-OEM</default_root_key_type>
                                <supported_root_key_types>
                                    <value>OTP-OEM</value>
                                    <value>OTP-QTI</value>
                                    <value>RTL-QTI</value>
                                </supported_root_key_types>
                            </root_key_types>
                            <supports_encrypted_segment_indices>true</supports_encrypted_segment_indices>
                        </encryption_format>
                    </supported_encryption_formats>
                </supported_oem_encryption_features>
            </authenticator>
        </authenticators>
    </authentication>
    <debugging>
        <legacy>
            <oem_image_id>DEBUG-POLICY</oem_image_id>
            <qti_image_id>DEBUG-POLICY-QTI</qti_image_id>
            <debug_policy_revisions>
                <default_debug_policy_revision>5</default_debug_policy_revision>
                <supported_debug_policy_revisions>
                    <value>5</value>
                </supported_debug_policy_revisions>
            </debug_policy_revisions>
            <phy_addr>0x1C000000</phy_addr>
            <elf_class>
                <default_elf_class>64</default_elf_class>
                <supported_elf_classes>
                    <value>32</value>
                    <value>64</value>
                </supported_elf_classes>
            </elf_class>
            <debug_policy_segment_placements>
                <default_debug_policy_segment_placement>END</default_debug_policy_segment_placement>
                <supported_debug_policy_segment_placements>
                    <value>END</value>
                </supported_debug_policy_segment_placements>
            </debug_policy_segment_placements>
            <debug_policy_segment_alignment>0x1000</debug_policy_segment_alignment>
            <supported_debug_options>
                <debug_option id="ONLINE-CRASH-DUMPS" requires_serial_bind="true">
                    <bits>0</bits>
                    <description>Enable Online Crash Dumps.</description>
                </debug_option>
                <debug_option id="OFFLINE-CRASH-DUMPS" requires_serial_bind="true">
                    <bits>1</bits>
                    <description>Enable Offline Crash Dumps.</description>
                </debug_option>
                <debug_option id="JTAG-DEBUG" requires_serial_bind="true">
                    <bits>2</bits>
                    <description>Enable JTAG debugging and traces for all subsystems.</description>
                </debug_option>
                <debug_option id="LOGS" requires_serial_bind="true">
                    <bits>3</bits>
                    <description>Enable Logs.</description>
                </debug_option>
                <debug_option id="JTAG-DEBUG-MODEM" requires_serial_bind="true">
                    <bits>4</bits>
                    <description>Enable JTAG debugging and traces for Modem subsystem.</description>
                </debug_option>
                <debug_option id="MODEM-TRACES" requires_serial_bind="true">
                    <bits>5</bits>
                    <description>Enable traces for Modem Subsystem.</description>
                </debug_option>
                <debug_option id="JTAG-DEBUG-ADSP-HLOS-TRACES" requires_serial_bind="true">
                    <bits>6,7</bits>
                    <description>Enable JTAG debugging and traces for ADSP and HLOS.</description>
                </debug_option>
                <debug_option id="JTAG-DEBUG-HLOS-TRACES" requires_serial_bind="true">
                    <bits>6,8</bits>
                    <description>Enable JTAG debugging and traces for HLOS.</description>
                </debug_option>
                <debug_option id="ADSP-HLOS-TRACES" requires_serial_bind="true">
                    <bits>7</bits>
                    <description>Enable traces for ADSP and HLOS.</description>
                </debug_option>
                <debug_option id="ALL-TRACES" requires_serial_bind="true">
                    <bits>7,8</bits>
                    <description>Enable traces for QTEE, ADSP, and HLOS.</description>
                </debug_option>
                <debug_option id="HLOS-TRACES" requires_serial_bind="true">
                    <bits>8</bits>
                    <description>Enable traces for HLOS.</description>
                </debug_option>
                <debug_option id="NONSECURE-CRASH-DUMPS" requires_serial_bind="true">
                    <bits>24</bits>
                    <description>Enable Non-secure Crash Dumps.</description>
                </debug_option>
                <debug_option id="APPS-ENCRYPTED-MINI-DUMPS" requires_serial_bind="false">
                    <bits>25</bits>
                    <description>Enable APPS Encrypted Mini Dumps.</description>
                </debug_option>
                <debug_option id="MPSS-ENCRYPTED-MINI-DUMPS" requires_serial_bind="false">
                    <bits>26</bits>
                    <description>Enable MPPS Encrypted Mini Dumps.</description>
                </debug_option>
                <debug_option id="LPASS-ENCRYPTED-MINI-DUMPS" requires_serial_bind="false">
                    <bits>27</bits>
                    <description>Enable LPASS Encrypted Mini Dumps.</description>
                </debug_option>
                <debug_option id="CSS-ENCRYPTED-MINI-DUMPS" requires_serial_bind="false">
                    <bits>28</bits>
                    <description>Enable CSS Encrypted Mini Dumps.</description>
                </debug_option>
                <debug_option id="ADSP-ENCRYPTED-MINI-DUMPS" requires_serial_bind="false">
                    <bits>29</bits>
                    <description>Enable ADSP Encrypted Mini Dumps.</description>
                </debug_option>
                <debug_option id="CDSP-ENCRYPTED-MINI-DUMPS" requires_serial_bind="false">
                    <bits>30</bits>
                    <description>Enable CDSP Encrypted Mini Dumps.</description>
                </debug_option>
                <debug_option id="WLAN-ENCRYPTED-MINI-DUMPS" requires_serial_bind="false">
                    <bits>31</bits>
                    <description>Enable WLAN Encrypted Mini Dumps.</description>
                </debug_option>
            </supported_debug_options>
        </legacy>
    </debugging>
    <fuse_blowing>
        <image_id>SEC-ELF</image_id>
        <fuse_regions>
            <fuse_region id="READ_PERMISSIONS">
                <fuse_row address="0x00780190">
                    <fuse>
                        <name>SECONDARY_KEY_DERIVATION_KEY_READ_DISABLE</name>
                        <description>Recommendation is to provide --fuse-secondary-key-derivation-key-read-disable. This bit determines the read permission setting for this region.</description>
                        <bits>31</bits>
                    </fuse>
                </fuse_row>
            </fuse_region>
            <fuse_region id="WRITE_PERMISSIONS">
                <fuse_row address="0x00780198">
                    <fuse>
                        <name>READ_PERMISSIONS_WRITE_DISABLE</name>
                        <description>Recommendation is to provide --fuse-read-permissions-write-disable. Disables further QFPROM changes to the this region. Blow this bit after the region has been completely provisioned.</description>
                        <bits>5</bits>
                    </fuse>
                    <fuse>
                        <name>WRITE_PERMISSIONS_WRITE_DISABLE</name>
                        <description>Recommendation is to provide --fuse-write-permissions-write-disable. Disables further QFPROM changes to the this region. Blow this bit after the region has been completely provisioned.</description>
                        <bits>6</bits>
                    </fuse>
                    <fuse>
                        <name>FEC_ENABLES_WRITE_DISABLE</name>
                        <description>Recommendation is to provide --fuse-fec-enables-write-disable. Disables further QFPROM changes to the this region. Blow this bit after the region has been completely provisioned.</description>
                        <bits>7</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_CONFIGURATION_WRITE_DISABLE</name>
                        <description>Recommendation is to provide --fuse-oem-configuration-write-disable. Disables further QFPROM changes to the this region. Blow this bit after the region has been completely provisioned.</description>
                        <bits>8</bits>
                    </fuse>
                    <fuse>
                        <name>PUBLIC_KEY_HASH_0_WRITE_DISABLE</name>
                        <description>Recommendation is to provide --fuse-public-key-hash-0-write-disable. Disables further QFPROM changes to the this region. Blow this bit after the region has been completely provisioned.</description>
                        <bits>24</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SECURE_BOOT_WRITE_DISABLE</name>
                        <description>Recommendation is to provide --fuse-oem-secure-boot-write-disable. Disables further QFPROM changes to the this region. Blow this bit after the region has been completely provisioned. Once blown no further changes possible to QFPROM sheet via sec.elf.</description>
                        <bits>30</bits>
                    </fuse>
                    <fuse>
                        <name>SECONDARY_KEY_DERIVATION_KEY_WRITE_DISABLE</name>
                        <description>Recommendation is to provide --fuse-secondary-key-derivation-key-write-disable. Disables further QFPROM changes to the this region. Blow this bit after the region has been completely provisioned.</description>
                        <bits>31</bits>
                    </fuse>
                </fuse_row>
            </fuse_region>
            <fuse_region id="FEC_ENABLES">
                <fuse_row address="0x007801a0">
                    <fuse>
                        <name>OEM_SECURE_BOOT_FEC_ENABLE</name>
                        <description>Recommendation is to provide --fuse-oem-secure-boot-fec-enable. This fuse is used to enable the Forward Error Correction for this region (if applicable).</description>
                        <bits>30</bits>
                    </fuse>
                    <fuse>
                        <name>SECONDARY_KEY_DERIVATION_KEY_FEC_ENABLE</name>
                        <description>Recommendation is to provide --fuse-secondary-key-derivation-key-fec-enable. This fuse is used to enable the Forward Error Correction for this region (if applicable).</description>
                        <bits>31</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SPARE_28_FEC_ENABLE</name>
                        <description>Recommendation is to not provide --fuse-oem-spare-28-fec-enable. No FEC; No redundancy. This fuse is used to enable the Forward Error Correction for this region (if applicable).</description>
                        <bits>35</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SPARE_29_FEC_ENABLE</name>
                        <description>Recommendation is to not provide --fuse-oem-spare-29-fec-enable. No FEC; No redundancy. This fuse is used to enable the Forward Error Correction for this region (if applicable).</description>
                        <bits>36</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SPARE_30_FEC_ENABLE</name>
                        <description>Recommendation is to not provide --fuse-oem-spare-30-fec-enable. No FEC; No redundancy. This fuse is used to enable the Forward Error Correction for this region (if applicable).</description>
                        <bits>37</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SPARE_31_FEC_ENABLE</name>
                        <description>Recommendation is to not provide --fuse-oem-spare-31-fec-enable. No FEC; No redundancy. This fuse is used to enable the Forward Error Correction for this region (if applicable).
 0x0: DISABLE - Disable
 0x1: ENABLE - Enable.</description>
                        <bits>38</bits>
                    </fuse>
                </fuse_row>
            </fuse_region>
            <fuse_region id="OEM_CONFIG">
                <fuse_row address="0x007801a8">
                    <fuse>
                        <name>E_DLOAD_DISABLE</name>
                        <description>SW only use for Boot. Disable the removable SD and then USB downloader in Apps PBL error handler, as well as the method to force download during code boot via magic cookies in IMEM.</description>
                        <bits>0</bits>
                    </fuse>
                    <fuse>
                        <name>ENUM_TIMEOUT</name>
                        <description>SW only use for Boot. BOOT ROM must support USB enumeration timeout. Timeout applies to both enumeration for FLCB (fast low current boot) and USB download mode. If USB is not enumerated within time (90 seconds), quit USB enumeration If USB suspend or disconnected after enumeration, start timer again.</description>
                        <bits>1</bits>
                    </fuse>
                    <fuse>
                        <name>FORCE_DLOAD_DISABLE</name>
                        <description>SW only use for Boot. To disable method to force boot from USB via GPIO or magic number in RAM.</description>
                        <bits>2</bits>
                    </fuse>
                    <fuse>
                        <name>FAST_BOOT</name>
                        <description>These fuses are used by boot code to specify which device has priority to be booted from. For SRV1L/SA8620P/SA7255P, the mapping is as follows:

Following change is needed for fast boot options: 
0000b -&gt; UFS-USB
0001b -&gt; eMMC-USB
0010b -&gt; USB
0011b -&gt; UFS-USB
Rest are reserved. If selected, treated as invalid boot option.</description>
                        <bits>9:5</bits>
                    </fuse>
                    <fuse>
                        <name>SW_FUSE_PROG_DISABLE</name>
                        <description>This fuse disables the ability to write fuses through the software interface.</description>
                        <bits>12</bits>
                    </fuse>
                    <fuse>
                        <name>PBL_FDL_TIMEOUT_RESET_FEATURE_ENABLE</name>
                        <description>Fuse bit to reset device if PBL enters into EDL mode unintentionally.</description>
                        <bits>13</bits>
                    </fuse>
                    <fuse>
                        <name>WDOG_EN</name>
                        <description>Recommendation is to provide --fuse-wdog-en. Combined with GPIO Wdog disable (connects to MPM). Prevents the Watch Dog from being disabled by the GPIO.</description>
                        <bits>14</bits>
                    </fuse>
                    <fuse>
                        <name>PBL_LOG_DISABLE</name>
                        <description>SW only use for Boot. Control logging mechanism in Boot ROM (If blown, Logging is disabled &amp; mandated for external parts).</description>
                        <bits>15</bits>
                    </fuse>
                    <fuse>
                        <name>ROOT_CERT_TOTAL_NUM</name>
                        <description>Defines the total root cert number supported from the certificate (Upto 4 roots).</description>
                        <bits>18:17</bits>
                    </fuse>
                    <fuse>
                        <name>SW_ROT_USE_SERIAL_NUM</name>
                        <description>If set, PBL checks that signature covers a serial number that matches that read from fuses. This is for secure boot authentication.</description>
                        <bits>21</bits>
                    </fuse>
                    <fuse>
                        <name>USB_SS_DISABLE</name>
                        <description>Used to disable USB SS enumeration during Boot.</description>
                        <bits>22</bits>
                    </fuse>
                    <fuse>
                        <name>DEBUG_POLICY_DISABLE</name>
                        <description>Recommendation is to not provide --fuse-debug-policy-disable. Debug Policy is bypassed when this bit is 1. Debug Policy provides a means to re-enable debug capabilities under OEM-specified selectable conditions.</description>
                        <bits>28</bits>
                    </fuse>
                    <fuse>
                        <name>ALL_DEBUG_DISABLE</name>
                        <description>Recommendation is to not provide --fuse-all-debug-disable. This fuse permanently disables all debug of the chip. This should only be blown once the OEM is done with their development and testing. No RMAs are possible after this fuse is blown.</description>
                        <bits>29</bits>
                    </fuse>
                    <fuse>
                        <name>SHARED_QSEE_SPIDEN_DISABLE</name>
                        <description>Recommendation is to provide --fuse-shared-qsee-spiden-disable. Shared QSEE Secure Invasive Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse.</description>
                        <bits>30</bits>
                    </fuse>
                    <fuse>
                        <name>SHARED_QSEE_SPNIDEN_DISABLE</name>
                        <description>Recommendation is to provide --fuse-shared-qsee-spniden-disable. Shared QSEE Secure Non-invasive Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse.</description>
                        <bits>31</bits>
                    </fuse>
                    <fuse>
                        <name>SHARED_MSS_DBGEN_DISABLE</name>
                        <description>Recommendation is to provide --fuse-shared-mss-dbgen-disable. Shared MSS Invasive Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse.</description>
                        <bits>32</bits>
                    </fuse>
                    <fuse>
                        <name>SHARED_MSS_NIDEN_DISABLE</name>
                        <description>Recommendation is to provide --fuse-shared-mss-niden-disable. Shared MSS Non-invasive Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse.</description>
                        <bits>33</bits>
                    </fuse>
                    <fuse>
                        <name>SHARED_CP_DBGEN_DISABLE</name>
                        <description>Recommendation is to provide --fuse-shared-cp-dbgen-disable. Shared CP Invasive Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse.</description>
                        <bits>34</bits>
                    </fuse>
                    <fuse>
                        <name>SHARED_CP_NIDEN_DISABLE</name>
                        <description>Recommendation is to provide --fuse-shared-cp-niden-disable. Shared CP Non-invasive Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse.</description>
                        <bits>35</bits>
                    </fuse>
                    <fuse>
                        <name>SHARED_NS_DBGEN_DISABLE</name>
                        <description>Recommendation is to provide --fuse-shared-ns-dbgen-disable. Shared CP Invasive Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse.</description>
                        <bits>36</bits>
                    </fuse>
                    <fuse>
                        <name>SHARED_NS_NIDEN_DISABLE</name>
                        <description>Recommendation is to provide --fuse-shared-ns-niden-disable. Shared CP Non-invasive Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse.</description>
                        <bits>37</bits>
                    </fuse>
                    <fuse>
                        <name>APPS_DBGEN_DISABLE</name>
                        <description>Recommendation is to provide --fuse-apps-dbgen-disable. When blown will disable the non-secure invasive debug facilities of APPS (including APPS processor) subsystem. This OEM controlled fuse can be overriden by the corresponding QC fuse.</description>
                        <bits>38</bits>
                    </fuse>
                    <fuse>
                        <name>APPS_NIDEN_DISABLE</name>
                        <description>Recommendation is to provide --fuse-apps-niden-disable. When blown will disable the non-secure non-invasive debug facilities of APPS (including APPS processor) subsystem. This OEM controlled fuse can be overriden by the corresponding QC fuse.</description>
                        <bits>39</bits>
                    </fuse>
                    <fuse>
                        <name>SHARED_MISC_DEBUG_DISABLE</name>
                        <description>Recommendation is to provide --fuse-shared-misc-debug-disable. Shared Misc Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse.</description>
                        <bits>40</bits>
                    </fuse>
                    <fuse>
                        <name>SHARED_MISC1_DEBUG_DISABLE</name>
                        <description>Shared Misc1 Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse.</description>
                        <bits>41</bits>
                    </fuse>
                    <fuse>
                        <name>SHARED_MISC2_DEBUG_DISABLE</name>
                        <description>Shared Misc2 Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse.</description>
                        <bits>42</bits>
                    </fuse>
                    <fuse>
                        <name>SHARED_MISC3_DEBUG_DISABLE</name>
                        <description>Shared Misc3 Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse.</description>
                        <bits>43</bits>
                    </fuse>
                    <fuse>
                        <name>SHARED_MISC4_DEBUG_DISABLE</name>
                        <description>Shared Misc4 Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse._x000D_SHS_SERVER_DISABLE renamed.</description>
                        <bits>44</bits>
                    </fuse>
                    <fuse>
                        <name>SHARED_MISC5_DEBUG_DISABLE</name>
                        <description>Shared Misc5 Debug Disable bucket. This OEM controlled fuse can be overriden by the corresponding QC fuse.</description>
                        <bits>45</bits>
                    </fuse>
                    <fuse>
                        <name>USB_PIPO_DISABLE</name>
                        <description>This fuse is used to control the USB PIPO mode.</description>
                        <bits>50</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x007801b0">
                    <fuse>
                        <name>TZ_SW_CRYPTO_FIPS_ENABLE</name>
                        <description>Enable FIPS mode for TZ software crypto. Disable by default and blow to enable.</description>
                        <bits>4</bits>
                    </fuse>
                    <fuse>
                        <name>TZ_SW_CRYPTO_FIPS_OVERRIDE</name>
                        <description>Override TZ_SW_CRYPTO_FIPS_ENABLE fuse. Non-override by default and blow to override the TZ_SW_CRYPTO_FIPS_ENABLE fuse to disable the FIPS feature in TZ.</description>
                        <bits>7</bits>
                    </fuse>
                    <fuse>
                        <name>SPARE_REG28_SECURE</name>
                        <description>This fuse determines if the corresponding OEM spare region is treated as secure. If blown, it indicates secure, and the region has the properties of a customer private key, and is not readable through SW while debug is enabled.</description>
                        <bits>12</bits>
                    </fuse>
                    <fuse>
                        <name>SPARE_REG29_SECURE</name>
                        <description>This fuse determines if the corresponding OEM spare region is treated as secure. If blown, it indicates secure, and the region has the properties of a customer private key, and is not readable through SW while debug is enabled.</description>
                        <bits>13</bits>
                    </fuse>
                    <fuse>
                        <name>SPARE_REG30_SECURE</name>
                        <description>This fuse determines if the corresponding OEM spare region is treated as secure. If blown, it indicates secure, and the region has the properties of a customer private key, and is not readable through SW while debug is enabled._x000D_
* This region is reserved for DOLBY and will be blown by QC.</description>
                        <bits>14</bits>
                    </fuse>
                    <fuse>
                        <name>SPARE_REG31_SECURE</name>
                        <description>This fuse determines if the corresponding OEM spare region is treated as secure. If blown, it indicates secure, and the region has the properties of a customer private key, and is not readable through SW while debug is enabled._x000D_
* This region is reserved for DOLBY and will be blown by QC.</description>
                        <bits>15</bits>
                    </fuse>
                    <fuse>
                        <name>SEGMENT_HASH_FUNCTION_SELECT0</name>
                        <description>SEGMENT_HASH_FUNCTION_SELECT_0 is used to determine segment hash computation algorithm with MRC 0 Indexed Root Certificate enabled. 0 means SHA384, 1 means SHA256.</description>
                        <bits>16</bits>
                    </fuse>
                    <fuse>
                        <name>SEGMENT_HASH_FUNCTION_SELECT1</name>
                        <description>SEGMENT_HASH_FUNCTION_SELECT_1 is used to determine segment hash computation algorithm with MRC 1 Indexed Root Certificate enabled. 0 means SHA384, 1 means SHA256.</description>
                        <bits>17</bits>
                    </fuse>
                    <fuse>
                        <name>SEGMENT_HASH_FUNCTION_SELECT2</name>
                        <description>SEGMENT_HASH_FUNCTION_SELECT_2 is used to determine segment hash computation algorithm with MRC 2 Indexed Root Certificate enabled. 0 means SHA384, 1 means SHA256.</description>
                        <bits>18</bits>
                    </fuse>
                    <fuse>
                        <name>SEGMENT_HASH_FUNCTION_SELECT3</name>
                        <description>SEGMENT_HASH_FUNCTION_SELECT_3 is used to determine segment hash computation algorithm with MRC 3 Indexed Root Certificate enabled. 0 means SHA384, 1 means SHA256.</description>
                        <bits>19</bits>
                    </fuse>
                    <fuse>
                        <name>EKU_ENFORCEMENT_EN</name>
                        <description>Recommendation is to provide --fuse-eku-enforcement-en. When this fuse is blown will enable enforcement of the EKU field in the certificate.</description>
                        <bits>30</bits>
                    </fuse>
                    <fuse>
                        <name>DISABLE_RSA</name>
                        <description>When this bit is 0 and signed image type is SHA384 + RSA/ECC is 0  -&gt; RSA OPERATION.
When this bit is 0 and signed image type is SHA384 + RSA/ECC IS 1 -&gt; ECC OPERATION USING PKA IP.
When this bit is 1 and signed image type is SHA384 + RSA/ECC is 0 -&gt; Error.
When this bit is 1 and signed image type is SHA384 + RSA/ECC IS 1 -&gt; ECC OPERATION USING PKA IP.</description>
                        <bits>31</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_HW_ID</name>
                        <description>The OEM hardware ID. Bits 15:0.</description>
                        <bits>47:32</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_PRODUCT_ID</name>
                        <description>The OEM product ID. Bits 15:0.</description>
                        <bits>63:48</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x007801b8">
                    <fuse>
                        <name>PERIPH_PID</name>
                        <description>Bits 15:0 of the PID.</description>
                        <bits>15:0</bits>
                    </fuse>
                    <fuse>
                        <name>PERIPH_VID</name>
                        <description>Bits 15:0 of the VID.</description>
                        <bits>31:16</bits>
                    </fuse>
                    <fuse>
                        <name>ANTI_ROLLBACK_FEATURE_EN</name>
                        <description>Recommended value is --fuse-anti-rollback-feature-en=0xf. Bit 0 - BOOT_ANTI_ROLLBACK_EN
Bit 1 - TZAPPS_ANTI_ROLLBACK_EN
Bit 2 - PILSUBSYS_ANTI_ROLLBACK_EN
Bit 3 - MSA_ANTI_ROLLBACK_EN.</description>
                        <bits>35:32</bits>
                    </fuse>
                </fuse_row>
            </fuse_region>
            <fuse_region id="PK_HASH_0">
                <fuse_row address="0x007802a0">
                    <fuse>
                        <name>PK_HASH_0</name>
                        <description>Hash of OEM Root certificate.</description>
                        <bits>63:0</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x007802a8">
                    <fuse>
                        <name>PK_HASH_0</name>
                        <bits>63:0</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x007802b0">
                    <fuse>
                        <name>PK_HASH_0</name>
                        <bits>63:0</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x007802b8">
                    <fuse>
                        <name>PK_HASH_0</name>
                        <bits>63:0</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x007802c0">
                    <fuse>
                        <name>PK_HASH_0</name>
                        <bits>63:0</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x007802c8">
                    <fuse>
                        <name>PK_HASH_0</name>
                        <bits>63:0</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x007802d0">
                    <fuse>
                        <name>PK_HASH_0</name>
                        <bits>63:0</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x007802d8">
                    <fuse>
                        <name>PK_HASH_0</name>
                        <bits>63:0</bits>
                    </fuse>
                </fuse_row>
            </fuse_region>
            <fuse_region id="OEM_SECURE_BOOT">
                <fuse_row address="0x00780da8">
                    <fuse>
                        <name>OEM_SECURE_BOOT1_ROM_PK_HASH_IDX0</name>
                        <description>Recommendation is to not provide --fuse-oem-secure-boot1-rom-pk-hash-idx0. Boot Segment for Apps &amp; other peripheral images.</description>
                        <bits>0</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SECURE_BOOT1_ROM_PK_HASH_IDX1</name>
                        <description>Recommendation is to not provide --fuse-oem-secure-boot1-rom-pk-hash-idx1. Boot Segment for Apps &amp; other peripheral images.</description>
                        <bits>1</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SECURE_BOOT1_ROM_PK_HASH_IDX2</name>
                        <description>Recommendation is to not provide --fuse-oem-secure-boot1-rom-pk-hash-idx2. Boot Segment for Apps &amp; other peripheral images.</description>
                        <bits>2</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SECURE_BOOT1_ROM_PK_HASH_IDX3</name>
                        <description>Recommendation is to not provide --fuse-oem-secure-boot1-rom-pk-hash-idx3. Boot Segment for Apps &amp; other peripheral images.</description>
                        <bits>3</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SECURE_BOOT1_PK_HASH_IN_FUSE</name>
                        <description>Recommendation is to provide --fuse-oem-secure-boot1-pk-hash-in-fuse. Boot Segment for Apps &amp; other peripheral images.</description>
                        <bits>4</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SECURE_BOOT1_AUTH_EN</name>
                        <description>Recommendation is to provide --fuse-oem-secure-boot1-auth-en. Boot Segment for Apps &amp; other peripheral images.</description>
                        <bits>5</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SECURE_BOOT1_USE_SERIAL_NUM</name>
                        <description>Recommendation is to not provide --fuse-oem-secure-boot1-use-serial-num. Boot Segment for Apps &amp; other peripheral images.</description>
                        <bits>6</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SECURE_BOOT2_ROM_PK_HASH_IDX0</name>
                        <description>Recommendation is to not provide --fuse-oem-secure-boot2-rom-pk-hash-idx0. Boot segment for MBA image.</description>
                        <bits>8</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SECURE_BOOT2_ROM_PK_HASH_IDX1</name>
                        <description>Recommendation is to not provide --fuse-oem-secure-boot2-rom-pk-hash-idx1. Boot segment for MBA image.</description>
                        <bits>9</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SECURE_BOOT2_ROM_PK_HASH_IDX2</name>
                        <description>Recommendation is to not provide --fuse-oem-secure-boot2-rom-pk-hash-idx2. Boot segment for MBA image.</description>
                        <bits>10</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SECURE_BOOT2_ROM_PK_HASH_IDX3</name>
                        <description>Recommendation is to not provide --fuse-oem-secure-boot2-rom-pk-hash-idx3. Boot segment for MBA image.</description>
                        <bits>11</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SECURE_BOOT2_PK_HASH_IN_FUSE</name>
                        <description>Recommendation is to provide --fuse-oem-secure-boot2-pk-hash-in-fuse. Boot segment for MBA image (Must be blown for legacy reasons).</description>
                        <bits>12</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SECURE_BOOT2_AUTH_EN</name>
                        <description>Recommendation is to provide --fuse-oem-secure-boot2-auth-en. Boot segment for MBA image (Must be blown for legacy reasons).</description>
                        <bits>13</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SECURE_BOOT2_USE_SERIAL_NUM</name>
                        <description>Recommendation is to not provide --fuse-oem-secure-boot2-use-serial-num. Boot segment for MBA image.</description>
                        <bits>14</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SECURE_BOOT3_ROM_PK_HASH_IDX0</name>
                        <description>Recommendation is to not provide --fuse-oem-secure-boot3-rom-pk-hash-idx0. Boot segment for Modem image.</description>
                        <bits>16</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SECURE_BOOT3_ROM_PK_HASH_IDX1</name>
                        <description>Recommendation is to not provide --fuse-oem-secure-boot3-rom-pk-hash-idx1. Boot segment for Modem image.</description>
                        <bits>17</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SECURE_BOOT3_ROM_PK_HASH_IDX2</name>
                        <description>Recommendation is to not provide --fuse-oem-secure-boot3-rom-pk-hash-idx2. Boot segment for Modem image.</description>
                        <bits>18</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SECURE_BOOT3_ROM_PK_HASH_IDX3</name>
                        <description>Recommendation is to not provide --fuse-oem-secure-boot3-rom-pk-hash-idx3. Boot segment for Modem image.</description>
                        <bits>19</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SECURE_BOOT3_PK_HASH_IN_FUSE</name>
                        <description>Recommendation is to provide --fuse-oem-secure-boot3-pk-hash-in-fuse. Boot segment for Modem image (Must be blown for legacy reasons).</description>
                        <bits>20</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SECURE_BOOT3_AUTH_EN</name>
                        <description>Recommendation is to provide --fuse-oem-secure-boot3-auth-en. Boot segment for Modem image (Must be blown for legacy reasons).</description>
                        <bits>21</bits>
                    </fuse>
                    <fuse>
                        <name>OEM_SECURE_BOOT3_USE_SERIAL_NUM</name>
                        <description>Recommendation is to not provide --fuse-oem-secure-boot3-use-serial-num. Boot segment for Modem image.</description>
                        <bits>22</bits>
                    </fuse>
                    <fuse>
                        <name>FEC_189</name>
                        <description>FEC autocalculated based on 56 bits in the row.</description>
                        <bits>62:56</bits>
                    </fuse>
                </fuse_row>
            </fuse_region>
            <fuse_region id="SEC_KEY_DERIVATION_KEY">
                <fuse_row address="0x00780db8">
                    <fuse>
                        <name>SEC_KEY_DERIVATION_KEY</name>
                        <description>This 256-bit value is used as the secondary key derivation input; used to generate the secondary key used by the crypto engine. When running insecure (no secure boot; or Debug enabled) then SKDK is fed into the key derivation function to generate a unique "non-secure" secondary key for use by the crypto engine. When running secure (secure boot; and debug disabled), then SKDK is fed directly to the crypto engine as the secondary key.After the SKDK value has been correctly programmed, the SKDK Read Disable should be blown to permanently protect the SKDK value. Prior to this, the SKDK value can be read from the QFPROM by software. The TZ fuse blow API is capable of automatically generating a random number for use as the SKDK so that the SKDK value is never available outside of the device.</description>
                        <bits>55:0</bits>
                    </fuse>
                    <fuse>
                        <name>FEC_191</name>
                        <description>FEC autocalculated based on 56 bits in the row.</description>
                        <bits>62:56</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x00780dc0">
                    <fuse>
                        <name>SEC_KEY_DERIVATION_KEY</name>
                        <bits>55:0</bits>
                    </fuse>
                    <fuse>
                        <name>FEC_192</name>
                        <description>FEC autocalculated based on 56 bits in the row.</description>
                        <bits>62:56</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x00780dc8">
                    <fuse>
                        <name>SEC_KEY_DERIVATION_KEY</name>
                        <bits>55:0</bits>
                    </fuse>
                    <fuse>
                        <name>FEC_193</name>
                        <description>FEC autocalculated based on 56 bits in the row.</description>
                        <bits>62:56</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x00780dd0">
                    <fuse>
                        <name>SEC_KEY_DERIVATION_KEY</name>
                        <bits>55:0</bits>
                    </fuse>
                    <fuse>
                        <name>FEC_194</name>
                        <description>FEC autocalculated based on 56 bits in the row.</description>
                        <bits>62:56</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x00780dd8">
                    <fuse>
                        <name>SEC_KEY_DERIVATION_KEY</name>
                        <bits>31:0</bits>
                    </fuse>
                    <fuse>
                        <name>FEC_195</name>
                        <description>FEC autocalculated based on 56 bits in the row.</description>
                        <bits>62:56</bits>
                    </fuse>
                </fuse_row>
            </fuse_region>
            <fuse_region id="OEM_SPARE_28">
                <fuse_row address="0x007811c0">
                    <fuse>
                        <name>OEM_SPARE_28</name>
                        <bits>63:0</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x007811c8">
                    <fuse>
                        <name>OEM_SPARE_28</name>
                        <bits>63:0</bits>
                    </fuse>
                </fuse_row>
            </fuse_region>
            <fuse_region id="OEM_SPARE_29">
                <fuse_row address="0x007811d0">
                    <fuse>
                        <name>OEM_SPARE_29</name>
                        <bits>63:0</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x007811d8">
                    <fuse>
                        <name>OEM_SPARE_29</name>
                        <bits>63:0</bits>
                    </fuse>
                </fuse_row>
            </fuse_region>
            <fuse_region id="OEM_SPARE_30">
                <fuse_row address="0x007811e0">
                    <fuse>
                        <name>OEM_SPARE_30</name>
                        <bits>63:0</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x007811e8">
                    <fuse>
                        <name>OEM_SPARE_30</name>
                        <bits>63:0</bits>
                    </fuse>
                </fuse_row>
            </fuse_region>
            <fuse_region id="OEM_SPARE_31">
                <fuse_row address="0x007811f0">
                    <fuse>
                        <name>OEM_SPARE_31</name>
                        <bits>63:0</bits>
                    </fuse>
                </fuse_row>
                <fuse_row address="0x007811f8">
                    <fuse>
                        <name>OEM_SPARE_31</name>
                        <bits>63:0</bits>
                    </fuse>
                </fuse_row>
            </fuse_region>
        </fuse_regions>
        <sec_elf_properties>
            <elf_class>
                <default_elf_class>64</default_elf_class>
                <supported_elf_classes>
                    <value>32</value>
                    <value>64</value>
                </supported_elf_classes>
            </elf_class>
            <phy_addr>0x00000000908FF000</phy_addr>
            <sec_dat_segment_versions>
                <default_sec_dat_segment_version>2</default_sec_dat_segment_version>
                <supported_sec_dat_segment_versions>
                    <value>1</value>
                    <value>2</value>
                </supported_sec_dat_segment_versions>
            </sec_dat_segment_versions>
            <sec_dat_segment_placements>
                <default_sec_dat_segment_placement>START</default_sec_dat_segment_placement>
                <supported_sec_dat_segment_placements>
                    <value>START</value>
                    <value>END</value>
                </supported_sec_dat_segment_placements>
            </sec_dat_segment_placements>
            <sec_dat_segment_alignment>0x0000000000001000</sec_dat_segment_alignment>
        </sec_elf_properties>
    </fuse_blowing>
</tns:profile>
