Is the internal Boot ROM has functionality to write to the NAND?
Is the Boot ROM code opensourced, like AT91BootStrap from ATMEL?
Not sure if it has that functionality as such, but it's main point is to read bootloader/bootstream (depending on device you have in mind) from boot device.
Code is not open-sourced, but behavior is documented in reference manual.