When you choose to encrypt a partition, Bootgen appends the secure header to that partition. The secure header, contains the key/iv used to encrypt the actual partition. This header in-turn is encrypted using the device key and iv. The following table shows the Zynq UltraScale+ MPSoC secure header.
Figure 1.
Zynq UltraScale+ MPSoC Secure
Header
