It doesn't matter who loads encrypted img into the memory. ppc bootrom still validates and decrypts it. Or am I incorrect?
Could you specify some timing. From what is see marcan names boot0 boot0, boot1 boot1 and booroms bootrom. But I can still be missing something since there is so few places...