Jetson Nano Secure Boot Procedure

My doubts are below:-

  1. How public key has been generated? Is it generated from Private key through odmfuse.sh script file via mkpkc utility? or through some other method? Please explain.

  2. How Public key will be flashed into BCT area for further authentication process to achieve security? As per my understanding, below command is using for PKC signed binaries i.e. signing the binaries with RSA 2K private keyfile.

sudo ./flash.sh --no-flash -x 0x21 -y PKC -u keyfile device name mmcblk0p1

Please see below screenshots taken from the training video Jetson Security and Secure Boot and I have highlighted the confusing points, i.e. RSA2048 Public Key or RSA2048 Private Key??