image = download_firmware_package() if not verify_signature(image, vendor_pubkey): abort("Invalid signature")