Seems like the offset of signature should be 384 rather than 388

[zxystd]

https://github.com/torvalds/linux/blame/master/drivers/bluetooth/btintel.c#L970 From linux code we can see that there is 4 bytes gap(or other data) between public key and signature data stored in firmware blob, not a continues memory.