Hello,
in the Security Reference Manual I find:

With Secure Provisioning Tool I wrote a correctly executable image, where I set image version 0x0013FFEC.
Rereading the contents of the flash I find that the area declared reserved is actually populated, and among other things I see that the version image is at offset 0x600:

Moreover, the word at address 0x500 seems a plausible header (although 0xd8 should indicate a signature).
I would have expected to find this area unpopulated (like that between 0x100 and 0x3FF).
Where can I find the documentation for these areas?
regards
Max