bootgen -arch zynqmp -image test.bif -encryption_dump
Generates an encryption log file, aes_log.txt. The aes_log.txt generated has the details of AES Key/IV pairs used for encrypting each block of data. It also logs the partition and the AES key file used to encrypt it.
Note: This option is supported only for AMD Zynq™ UltraScale+™ MPSoC.
[bootloader, encryption=aes, aeskeyfile=test.nky] fsbl.elf
[encryption=aes, aeskeyfile=test1.nky] hello.elf