anchor.diff: -{ lib, stdenv, fetchFromGitHub, openssl, pkgsCross, buildPackages }:
  +{ lib, stdenv, fetchFromGitHub, openssl, pkgsCross, buildPackages
  +
  +# Warning: this blob runs on the main CPU (not the GPU) at privilege
  +# level EL3, which is above both the kernel and the hypervisor.
  +, unfreeIncludeHDCPBlob ? true
  +}:
   
   let
     buildArmTrustedFirmware = { filesToInstall
  
positive.code:     meta = with lib; {
        homepage = "https://github.com/ARM-software/arm-trusted-firmware";
        description = "A reference implementation of secure world software for ARMv8-A";
        license = licenses.bsd3;
        maintainers = with maintainers; [ lopsided98 ];
      } // extraMeta;
    } // builtins.removeAttrs args [ "extraMeta" ]);
  
negative.code:       sha256 = "sha256-qT9DdTvMcUrvRzgmVf2qmKB+Rb1WOB4p1rM+fsewGcg=";
      };
  
      patches = lib.optionals (!unfreeIncludeHDCPBlob) [
        # this is a rebased version of https://gitlab.com/vicencb/kevinboot/-/blob/master/atf.patch
        ./remove-hdcp-blob.patch
      ];
  
      depsBuildBuild = [ buildPackages.stdenv.cc ];
  
  