1- When using swap with scratch, the image is now decrypted when copying from 2 the scratch partition to the primary slot. Therefore, the sratch partition 3 doesn't contain plaintext firmware data anymore. 4