Unfit to Boot: Breaking U-Boot's Fit Signature Verification