diff --git a/devkey/README.md b/devkey/README.md
new file mode 100644
index 000000000..679f9a46a
--- /dev/null
+++ b/devkey/README.md
@@ -0,0 +1,9 @@
+This directory contains a developer key, and an X.509 certificate signed with
+the developer key. The key is an Ed25519 key, and you should "kindly note this
+is a dev key, don't use for production" (n.b. you can use anything for a private
+key in Curve25519, including that very string encoded in base64).
+
+See https://github.com/betrusted-io/betrusted-wiki/wiki/Secure-Boot-and-KEYROM-Layout for
+more explanation on why this key exists, and how it may or may not be used.
+
+
diff --git a/devkey/dev-x509.crt b/devkey/dev-x509.crt
new file mode 100644
index 000000000..648adab80
--- /dev/null
+++ b/devkey/dev-x509.crt
@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/devkey/dev.key b/devkey/dev.key
new file mode 100644
index 000000000..65b8d2716
--- /dev/null
+++ b/devkey/dev.key
@@ -0,0 +1,3 @@
+-----BEGIN PRIVATE KEY-----
+MC4CAQAwBQYDK2VwBCIEIKindlyNoteThisIsADevKeyDontUseForProduction
+-----END PRIVATE KEY-----
diff --git a/tools/sign_image.py b/tools/sign_image.py
new file mode 100755
index 000000000..55c9a3a0b
--- /dev/null
+++ b/tools/sign_image.py
@@ -0,0 +1,104 @@
+#! /usr/bin/env python3
+import argparse
+import sys
+from Crypto.IO import PEM
+from nacl.signing import SigningKey
+from nacl.encoding import RawEncoder
+import os.path
+
+import binascii
+
+DEVKEY_PATH='../devkey/dev.key'
+
+def loader_sign(source, output, key):
+    with open(source, "rb") as source_f:
+        source = list(source_f.read())
+        source += len(source).to_bytes(4, 'little') # append the length to the image, and sign that
+
+        # NOTE NOTE NOTE
+        # can't find a good ASN.1 ED25519 key decoder, just relying on the fact that the last 32 bytes are "always" the private key. always? the private key?
+        signing_key = SigningKey(key[-32:], encoder=RawEncoder)
+
+        signature = signing_key.sign(source, encoder=RawEncoder)
+
+        with open(output, "wb") as output_f:
+            written = 0
+            written += output_f.write(int(1).to_bytes(4, 'little')) # version number 1 record
+            written += output_f.write(len(source).to_bytes(4, 'little')) # record the length of the final signed record (which /also/ includes a length)
+            written += output_f.write(signature.signature)
+            output_f.write(bytearray([0] * (4096 - written))) # pad out to one page beyond
+            output_f.write(signature.message) # the actual signed message
+
+def main():
+    global DEVKEY_PATH
+
+    parser = argparse.ArgumentParser(description="Sign binary images for Precursor")
+    parser.add_argument(
+        "--loader-image", required=False, help="loader image", type=str, nargs='?', metavar=('loader image'), const='../target/riscv32imac-unknown-none-elf/release/loader_presign.bin'
+    )
+    parser.add_argument(
+        "--kernel-image", required=False, help="kernel image", type=str, nargs='?', metavar=('kernel image'), const='../target/riscv32imac-unknown-none-elf/release/xous_presign.img'
+    )
+    parser.add_argument(
+        "--loader-key", required=False, help="loader signing key", type=str, nargs='?', metavar=('loader signing key'), const=DEVKEY_PATH
+    )
+    parser.add_argument(
+        "--kernel-key", required=False, help="kernel signing key", type=str, nargs='?', metavar=('kernel signing key'), const=DEVKEY_PATH
+    )
+    args = parser.parse_args()
+
+    if args.loader_image and (args.loader_key is None):
+        loader_key = DEVKEY_PATH
+    else:
+        loader_key = args.loader_key
+
+    if args.kernel_image and (args.kernel_key is None):
+        kernel_key = DEVKEY_PATH
+    else:
+        kernel_key = args.kernel_key
+
+    if loader_key is not None and loader_key is not DEVKEY_PATH:
+        with open(loader_key) as loader_f:
+            loader_pem = loader_f.read()
+            try:
+                pem = PEM.decode(loader_pem, None)
+            except:
+                passphrase = input("Enter loader key passphrase: ")
+                pem = PEM.decode(loader_pem, passphrase)
+
+            (loader_pkey, pemtype, enc) = pem
+            if pemtype != 'PRIVATE KEY':
+                print("PEM type for loader was not a private key. Aborting.")
+                exit(1)
+    else:
+        loader_pkey = None
+
+    if kernel_key is not None and kernel_key is not DEVKEY_PATH:
+        kernel_pass = input("Enter loader key passphrase, enter if none: ")
+        with open(kernel_key) as kernel_f:
+            kernel_pem = kernel_f.read()
+            try:
+                pem = PEM.decode(kernel_pem, kernel_pass)
+            except:
+                passphrase = input("Enter kernel key passphrase: ")
+                pem = PEM.decode(kernel_pem, passphrase)
+
+            (kernel_pkey, pemtype, enc) = pem
+            if pemtype != 'PRIVATE KEY':
+                print("PEM type for kernel was not a private key. Aborting.")
+                exit(1)
+    else:
+        kernel_pkey = None
+
+    if loader_pkey != None:
+        output_image = os.path.dirname(os.path.abspath(args.loader_image)) + "{}loader.bin".format(os.path.sep)
+        loader_sign(args.loader_image, output_image, loader_pkey)
+
+
+    if not len(sys.argv) > 1:
+        print("No arguments specified, doing nothing. Use --help for more information.")
+        exit(1)
+
+if __name__ == "__main__":
+    main()
+    exit(0)