Verify key length and store about secure boot

Hi,we want to check the secure boot to make sure it comply with company safety requirements.
So there Some details need to be worked out.
Is the Secure boot only supports RSA2048 ? Can we use RSA4096? from the https://docs.nvidia.com/jetson/archives/l4t-archived/l4t-3231/index.html#page/Tegra%20Linux%20Driver%20Package%20Development%20Guide%2Fbootloader_secure_boot.html%23wwpID0E01I0HA I known that the public_key_hash is store in the efuse,so where the public_key store?

hello Username1,

please check AGX Xavier Fuse Specification App Note, there’s bit[1:0] from FUSE_BOOT_SECURITY_INFO for secure boot authentication scheme,
00b: SHA2 Hash
01b: 2048 bit RSA
10b: 3072 bit RSA
11b: ECC (Elliptic Curve, see also bit 7)