From nobody Wed Oct 8 03:35:13 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 59C471A01EA for ; Wed, 8 Oct 2014 03:35:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.687 X-Spam-Level: X-Spam-Status: No, score=-4.687 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.786, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lZ9SmYlDlyP5 for ; Wed, 8 Oct 2014 03:35:07 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 53C6F1A01EE for ; Wed, 8 Oct 2014 03:35:05 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml406-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BNK68397; Wed, 08 Oct 2014 10:35:03 +0000 (GMT) Received: from SZXEMA409-HUB.china.huawei.com (10.82.72.41) by lhreml406-hub.china.huawei.com (10.201.5.243) with Microsoft SMTP Server (TLS) id 14.3.158.1; Wed, 8 Oct 2014 11:35:00 +0100 Received: from SZXEMA501-MBS.china.huawei.com ([169.254.2.205]) by SZXEMA409-HUB.china.huawei.com ([10.82.72.41]) with mapi id 14.03.0158.001; Wed, 8 Oct 2014 18:34:58 +0800 From: Likepeng To: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= , "Hannes Tschofenig" , "ace@ietf.org" Thread-Topic: [Ace] Next step for use case document Thread-Index: AQHP2+Z2zMYxzyxQtE+FAIirW36spZwmBHpQ Date: Wed, 8 Oct 2014 10:34:57 +0000 Message-ID: <34966E97BE8AD64EAE9D3D6E4DEE36F2581A37D0@SZXEMA501-MBS.china.huawei.com> References: In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.66.167.122] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/ace/C6Jr1Es0BikkScb1HDEb-X0qLV4 Subject: Re: [Ace] Next step for use case document X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Oct 2014 10:35:11 -0000 SGkgR29yYW4sDQoNClRoYW5rcyBmb3IgdGhlIGlucHV0Lg0KDQpNeSB1bmRlcnN0YW5kaW5nIG9m IHRoZSAiIHNlY3VyZSBzdG9yZSBhbmQgZm9yd2FyZCAiIHVzZSBjYXNlIGlzIG1haW5seSBhYm91 dCAib2JqZWN0IHNlY3VyaXR5IiwgcmlnaHQ/DQoNCldlIGRpc2N1c3NlZCAib2JqZWN0IHNlY3Vy aXR5IiBkdXJpbmcgSUVTRyBldmFsdWF0aW9uLCBhbmQgSSByZW1lbWJlciB0aGUgY29uY2x1c2lv biBpcywgdGhpcyBzaG91bGQgYmUgaW4gc2NvcGU6DQpodHRwOi8vd3d3LmlldGYub3JnL21haWwt YXJjaGl2ZS93ZWIvYWNlL2N1cnJlbnQvbXNnMDA2MTkuaHRtbA0KDQo+IFRoZSB1dGlsaXR5IGNv bXBhbnkgd2FudHMgdG8gdmVyaWZ5IHN0b3JlZCBhbmQgZm9yd2FyZGVkIG1ldGVyaW5nIGRhdGEg d2l0aA0KPiByZXNwZWN0IHRvIGF1dGhlbnRpY2l0eSwgaW50ZWdyaXR5IGFuZCByZXBsYXkuDQoN CkFib3V0IHRoZSBhdXRoZW50aWNpdHksIGludGVncml0eSBhbmQgcmVwbGF5LCB0aGV5IHNlZW0g dG8gYmUgcXVpdGUgZ2VuZXJhbCBhbmQgbm90IHNwZWNpZmljIHRvICJzdG9yZSBhbmQgZm9yd2Fy ZCIgdXNlIGNhc2UuDQoNCk1heWJlIGl0IGlzIGJldHRlciB0byBnbyB0byBhIGxpdHRsZSBiaXQg bW9yZSBkZXRhaWwuIA0KDQpGb3IgZXhhbXBsZSwgYWJvdXQgaW50ZWdyaXR5LCB3ZSBjYW4gc2F5 LCBkaXN0cmlidXRpb24gZW50aXR5IChlLmcuIERhdGEgQ29sbGVjdGlvbiB1bml0KSBtYXkgcmVh ZCB0aGUgZGF0YSwgYW5kIG11c3Qgbm90IG1vZGlmeSB0aGUgZGF0YS4NCg0KPiBUaGUgdXRpbGl0 eSBjb21wYW55IHdhbnRzIHRvIGNvbmZpZ3VyZSB1dGlsaXR5IG1ldGVycyBzZWN1cmVseTogVGhl IGRldmljZXMNCj4gc2hvdWxkIGJlIGFibGUgdG8gdmVyaWZ5IHRoYXQgYSBjb25maWd1cmF0aW9u IHJlcXVlc3QgaXMgYXV0aG9yaXplZCwgYXV0aGVudGljLA0KPiBpbnRlZ3JpdHkgYW5kIHJlcGxh eSBwcm90ZWN0ZWQuDQoNCkFib3V0IGNvbmZpZ3VyYXRpb24sIEkgZXhwZWN0IHRoaXMgc2hvdWxk IGJlIG91dCBvZiBzY29wZSBhbmQgc2hvdWxkIGJlIGRvbmUgYnkgb3V0LW9mLWJhbmQgbWVjaGFu aXNtcy4gDQoNCktpbmQgUmVnYXJkcw0KS2VwZW5nDQoNCj4gLS0tLS3pgq7ku7bljp/ku7YtLS0t LQ0KPiDlj5Hku7bkuro6IEfDtnJhbiBTZWxhbmRlciBbbWFpbHRvOmdvcmFuLnNlbGFuZGVyQGVy aWNzc29uLmNvbV0NCj4g5Y+R6YCB5pe26Ze0OiAyMDE05bm0OeaciDI55pelIDIxOjA4DQo+IOaU tuS7tuS6ujogTGlrZXBlbmc7IEhhbm5lcyBUc2Nob2ZlbmlnOyBhY2VAaWV0Zi5vcmcNCj4g5Li7 6aKYOiBSZTogW0FjZV0gTmV4dCBzdGVwIGZvciB1c2UgY2FzZSBkb2N1bWVudA0KPiANCj4gRGVh ciBXRyBjaGFpcnMgYW5kIGFsbCwNCj4gDQo+IFBsZWFzZSBmaW5kIGJlbG93IHNvbWUgZnVydGhl ciBzdWdnZXN0aW9ucyBmb3IgY29udGVudCBvZiB0aGUgdXNlIGNhc2UNCj4gZG9jdW1lbnQuIEFw b2xvZ2llcyBmb3IgdGhlIGxlbmd0aHkgbWFpbC4NCj4gDQo+IEkgcHJvcG9zZSB0aGF0IHNvbWUg dXNlIGNhc2UgaW4gdGhlIGRyYWZ0IHNob3VsZCBoaWdobGlnaHQgdGhlIG5lZWQgZm9yIGENCj4g c29sdXRpb24gdGhhdCBzdXBwb3J0cyBzZWN1cmUgc3RvcmUgYW5kIGZvcndhcmQuIEhlcmUgYXJl IGEgc2V0IG9mIHVzZSBjYXNlcw0KPiBzdXBwb3J0aW5nIHRoaXMsIHRoZSBmaXJzdCBvbmUgaXMg YmFzZWQgb24gaW50ZXJ2aWV3cyB3aXRoIHBlb3BsZSB3b3JraW5nIHdpdGgNCj4gdXRpbGl0aWVz LiBUaGUgb3RoZXJzIHVzZSBjYXNlcyBzaG93IHRoYXQgdGhpcyBpcyBub3QgYW4gaXNvbGF0ZWQg ZXhhbXBsZS4gKFRoZXJlDQo+IGlzIG5vIG5lZWQgdG8gaW5jbHVkZSBhbGwgdXNlIGNhc2VzIGlu IHRoZSBkcmFmdC4pDQo+IA0KPiBVdGlsaXR5IGRhdGEgY29sbGVjdGlvbg0KPiAtIC0gLQ0KPiBB IHV0aWxpdHkgY29tcGFueSBpcyB1cGRhdGluZyBpdHMgb2xkIHV0aWxpdHkgZGlzdHJpYnV0aW9u IG5ldHdvcmsgd2l0aCBhZHZhbmNlZA0KPiBtZXRlcnMgYW5kIG5ldyBjb21tdW5pY2F0aW9uIHN5 c3RlbXMsIGtub3duIGFzIGFuIEFkdmFuY2VkIE1ldGVyaW5nDQo+IEluZnJhc3RydWN0dXJlIChB TUkpLiAgQU1JIHJlZmVycyB0byBhIHN5c3RlbSB0aGF0IG1lYXN1cmVzLCBjb2xsZWN0cyBhbmQN Cj4gYW5hbHl6ZXMgdXNhZ2UsIGFuZCBpbnRlcmFjdHMgd2l0aCBtZXRlcmluZyBkZXZpY2VzIHN1 Y2ggYXMgZWxlY3RyaWNpdHkgbWV0ZXJzLA0KPiBnYXMgbWV0ZXJzLCBoZWF0IG1ldGVycywgYW5k IHdhdGVyIG1ldGVycywgdGhyb3VnaCB2YXJpb3VzIGNvbW11bmljYXRpb24NCj4gbWVkaWEgZWl0 aGVyIG9uIHJlcXVlc3QgKG9uLWRlbWFuZCkgb3Igb24gcHJlLWRlZmluZWQgc2NoZWR1bGVzLiAg QmFzZWQNCj4gb24gdGhpcyB0ZWNobm9sb2d5LCBuZXcgc2VydmljZXMgbWFrZSBpdCBwb3NzaWJs ZSBmb3IgY29uc3VtZXJzIHRvIGNvbnRyb2wNCj4gdGhlaXIgdXRpbGl0eSBjb25zdW1wdGlvbiBh bmQgcmVkdWNlIGNvc3RzIGJ5IHN1cHBvcnRpbmcgbmV3IHRhcmlmZiBtb2RlbHMNCj4gZnJvbSB1 dGlsaXR5IGNvbXBhbmllcywgYW5kIG1vcmUgYWNjdXJhdGUgYW5kIHRpbWVseSBiaWxsaW5nLg0K PiANCj4gVGhlIHRlY2huaWNhbCBzb2x1dGlvbiBpcyBiYXNlZCBvbiBsZXZlbHMgb2YgZGF0YSBh Z2dyZWdhdGlvbiBiZXR3ZWVuIMKzc21hcnQNCj4gbWV0ZXJzwrIgbG9jYXRlZCBhdCB0aGUgY29u c3VtZXIgcHJlbWlzZXMgYW5kIHRoZSBNZXRlciBEYXRhIE1hbmFnZW1lbnQNCj4gKE1ETSkgc3lz dGVtIGxvY2F0ZWQgYXQgdGhlIHV0aWxpdHkgY29tcGFueS4gIFR3byBwb3NzaWJsZSBpbnRlcm1l ZGlhdGUNCj4gbGV2ZWxzIGFyZToNCj4gDQo+IC0gSGVhZC1FbmQgU3lzdGVtIChIRVMpIHdoaWNo IGlzIGhhcmR3YXJlIGFuZCBzb2Z0d2FyZSB0aGF0IHJlY2VpdmVzIHRoZQ0KPiBzdHJlYW0gb2Yg bWV0ZXIgZGF0YSBhbmQgZXhwb3NlcyBhbiBpbnRlcmZhY2UgdG8gdGhlIE1ETS4NCj4gDQo+IC0g RGF0YSBDb2xsZWN0aW9uIChEQykgdW5pdHMgbG9jYXRlZCBpbiBhIGxvY2FsIG5ldHdvcmsgY29t bXVuaWNhdGluZyB3aXRoIGENCj4gbnVtYmVyIG9mIHNtYXJ0IG1ldGVycyBhbmQgd2l0aCBhIGJh Y2toYXVsIGludGVyZmFjZSBjb21tdW5pY2F0aW5nIHdpdGgNCj4gdGhlIEhFUywgZS5nLiB1c2lu ZyBjZWxsdWxhciBjb21tdW5pY2F0aW9uLg0KPiANCj4gRm9yIHJlYXNvbnMgb2YgZWZmaWNpZW5j eSBhbmQgY29zdCBlbmQtdG8tZW5kIGNvbm5lY3Rpdml0eSBpcyBub3QgYWx3YXlzDQo+IGZlYXNp YmxlLCBzbyBtZXRlcmluZyBkYXRhIGlzIHN0b3JlZCBpbiBiYXRjaGVzIGluIERDIGZvciBzb21l IHRpbWUgYmVmb3JlIGJlaW5nDQo+IGZvcndhcmRlZCB0byB0aGUgSEVTLCBhbmQgaW4gdHVybiBh Y2Nlc3NlZCBieSB0aGUgTURNLiAgVGhlIEhFUyBhbmQgdGhlDQo+IERDIHVuaXRzIG1heSBiZSBv cGVyYXRlZCBieSBhIHRoaXJkIHBhcnR5IHNlcnZpY2Ugb3BlcmF0b3Igb24gYmVoYWxmIG9mIHRo ZQ0KPiB1dGlsaXR5IGNvbXBhbnkuICBPbmUgcmVzcG9uc2liaWxpdHkgb2YgdGhlIHNlcnZpY2Ug b3BlcmF0b3IgaXMgdG8gbWFrZSBzdXJlDQo+IHRoYXQgbWV0ZXIgcmVhZGluZ3MgYXJlIHBlcmZv cm1lZCBhbmQgZGVsaXZlcmVkIHRvIHRoZSBIRVMuICBBbiBleGFtcGxlIG9mDQo+IGEgU2Vydmlj ZSBMZXZlbCBBZ3JlZW1lbnQgYmV0d2VlbiB0aGUgc2VydmljZSBvcGVyYXRvciBhbmQgdGhlIHV0 aWxpdHkNCj4gY29tcGFueSBpcyBlLmcuICAiYXQgbGVhc3QgOTUgJSBvZiB0aGUgbWV0ZXJzIGhh dmUgcmVhZGluZ3MgcmVjb3JkZWQgZHVyaW5nDQo+IHRoZSBsYXN0IDcyIGhvdXJzwrIuDQo+IA0K PiANCj4gU2VjdXJpdHkgcHJvcGVydGllcw0KPiANCj4gVGhlIHV0aWxpdHkgY29tcGFueSB3YW50 cyB0byB2ZXJpZnkgc3RvcmVkIGFuZCBmb3J3YXJkZWQgbWV0ZXJpbmcgZGF0YSB3aXRoDQo+IHJl c3BlY3QgdG8gYXV0aGVudGljaXR5LCBpbnRlZ3JpdHkgYW5kIHJlcGxheS4NCj4gDQo+IFRoZSB1 dGlsaXR5IGNvbXBhbnkgd2FudHMgdG8gY29uZmlndXJlIHV0aWxpdHkgbWV0ZXJzIHNlY3VyZWx5 OiBUaGUgZGV2aWNlcw0KPiBzaG91bGQgYmUgYWJsZSB0byB2ZXJpZnkgdGhhdCBhIGNvbmZpZ3Vy YXRpb24gcmVxdWVzdCBpcyBhdXRob3JpemVkLCBhdXRoZW50aWMsDQo+IGludGVncml0eSBhbmQg cmVwbGF5IHByb3RlY3RlZC4NCj4gDQo+IFRoZSB1dGlsaXR5IGNvbXBhbnkgd2FudHMgdG8gYmUg aW4gY29udHJvbCBvZiBhY2Nlc3MgdG8gcGxhaW4gdGV4dCBtZXRlcmluZyBkYXRhLg0KPiBPdGhl ciBwYXJ0aWVzIG1heSBiZSBhbGxvd2VkIGFjY2VzcyBidXQgYXQgdGhlIGRpc2NyZXRpb24gb2Yg dGhlIHV0aWxpdHkNCj4gY29tcGFueS4gRS5nLiB0aGUgc2VydmljZSBvcGVyYXRvciBuZWVkcyBh Y2Nlc3MgZHVyaW5nIHRlc3Qgb3IgZXJyb3IgY2FzZXMsIG9yDQo+IGZvciBjYWxpYnJhdGluZyB1 bml0cyBvbiByZXBsYWNlbWVudC4gSW4gcGFydGljdWxhciwgaXQgc2hvdWxkIGJlIHBvc3NpYmxl IHRvDQo+IGNvbmZpZGVudGlhbGl0eSBwcm90ZWN0IHRoZSBtZXRlcmluZyBkYXRhIGJldHdlZW4g c21hcnQgbWV0ZXIgYW5kIHRoZSB1dGlsaXR5DQo+IGNvbXBhbnkncyBuZXR3b3JrLg0KPiANCj4g KFRoZXJlIGFyZSBhbHNvIG90aGVyIGRlc2lyYWJsZSBzZWN1cml0eSBwcm9wZXJ0aWVzLCB0aGUg YW1iaXRpb24gaGVyZSBpcyBub3QgdG8NCj4gYmUgZXhoYXVzdGl2ZSBidXQgdG8gaGlnaGxpZ2h0 IHRoZSBuZWVkIGZvciBlbmQtdG8tZW5kIGF1dGhvcmlzZWQgYWNjZXNzLiApDQo+IA0KPiANCj4g DQo+IEFjdHVhbGx5LCB0aGUgZHJpdmUtYnkgbWV0ZXJpbmcgdXNlIGNhc2UgKHNlY3Rpb24gMi41 LjEpIG1heSByZXF1aXJlIGEgc2ltaWxhcg0KPiBmdW5jdGlvbmFsaXR5Og0KPiANCj4gDQo+IERy aXZlLWJ5IG1ldGVyaW5nIGRhdGEgY29sbGVjdGlvbg0KPiAtIC0gLQ0KPiBUaGUgbWV0ZXJzIGNv bW11bmljYXRlIHdpdGggYSB2ZWhpY2xlLWF0dGFjaGVkIGJhc2Ugc3RhdGlvbiwgd2hpY2ggZHJp dmVzIGJ5DQo+IGFuZCBjb2xsZWN0cyBtZXRlciByZWFkaW5ncy4gVGhlIGRyaXZlLWJ5IHNlcnZp Y2UgY291bGQgcG90ZW50aWFsbHkgYmUgb3BlcmF0ZWQNCj4gYnkgYSB0aGlyZCBwYXJ0eSBjb2xs ZWN0aW5nIG1ldGVyIHJlYWRpbmdzIG9uIGJlaGFsZiBvZiBvbmUgb3IgbXVsdGlwbGUgdXRpbGl0 eQ0KPiBjb21wYW5pZXMsIGFuZCBzaG91bGQgbm90IGhhdmUgYWNjZXNzIHRvIHBsYWluIHRleHQg bWV0ZXIgcmVhZGluZ3MsIG9yIG5vdCBiZQ0KPiBhYmxlIHRvIGNoYW5nZSB0aGUgcmVhZGluZ3Mu IEFsc28gaW4gdGhpcyBjYXNlIGl0IG1heSBiZSBjb3N0LWVmZmljaWVudCB0byB1cGxvYWQNCj4g dGhlIHJlYWRpbmdzIGZyb20gdGhlIHZlaGljbGUgb25jZSB0aGUgY2FyIHJldHVybnMgdG8gdGhl IDNyZCBwYXJ0eSBwcmVtaXNlcywNCj4gZS5nLiBvdmVyIFdMQU4uIFRoaXMgbWVhbnMgdGhhdCB0 aGUgcmVhZGluZ3MgbmVlZCB0byBiZSBzdG9yZWQgYW5kIGxhdGVyDQo+IGZvcndhcmRlZCwgYW5k IHNob3VsZCBiZSBwcm90ZWN0ZWQgZW5kLXRvLWVuZCBiZXR3ZWVuIHNtYXJ0IG1ldGVyIGFuZA0K PiBNZXRlci1EYXRhIE1hbmFnZW1lbnQgc3lzdGVtIGluIHRoZSByZXNwZWN0aXZlIHV0aWxpdHkg Y29tcGFueSBuZXR3b3JrDQo+IGFuYWxvZ291c2x5IHRvIHRoZSBwcmV2aW91cyB1c2UgY2FzZS4N Cj4gDQo+IA0KPiBUaGVyZSBhcmUgb3RoZXIgZXhhbXBsZXMgd2hlcmUgaXQgbWF5IGJlIGltcG9z c2libGUgb3IgaW5mZWFzaWJsZSB0byBzdXBwb3J0DQo+IGVuZC10by1lbmQgY29ubmVjdGl2aXR5 LCBlLmcuIGluIG5ldHdvcmtzIHdpdGggc2xlZXB5IGRldmljZXMsIGluIHdoaWNoIGNhc2UgYQ0K PiBwdWJsaXNoLXN1YnNjcmliZSBwYXJhZGlnbSBtYXkgYmUgbW9yZSBuYXR1cmFsLiAgSGVyZSB3 ZSBwaWNrIGFub3RoZXINCj4gYXBwbGljYXRpb24gb2YgcHVibGlzaC1zdWJzY3JpYmU6DQo+IA0K PiBJbmZvcm1hdGlvbiBDZW50cmljIE5ldHdvcmtpbmcgKElDTikNCj4gLSAtIC0NCj4gSUNOIGlz IGEgcGFyYWRpZ20gZm9yIGRhdGEgYWNjZXNzLCBjaGFuZ2luZyBmb2N1cyBmcm9tIGN1cnJlbnQg aG9zdC1jZW50cmljDQo+IG5ldHdvcmsgdG8gYW4gaW5mb3JtYXRpb24tY2VudHJpYyBuZXR3b3Jr LiAgSW4gYSBob3N0LWNlbnRyaWMgbmV0d29yaywgdGhlDQo+IGJhc2ljIGlkZWEgaXMgdG8gY3Jl YXRlIHNlY3VyZSBjb25uZWN0aW9ucyB0byBob3N0cyBvZiB0cnVzdGVkIHByb3ZpZGVycyBvZiBk YXRhLg0KPiBJbiBhbiBpbmZvcm1hdGlvbi1jZW50cmljIG5ldHdvcmssIG9uIHRoZSBvdGhlciBo YW5kLCBpdCBpcyBhY2NlcHRhYmxlIHRoYXQgYW55DQo+IHNvdXJjZSAoY2FjaGUpIHNob3VsZCBi ZSBlcXVhbGx5IHVzYWJsZS4gIFRoaXMgcmVxdWlyZXMgc29tZSBtZWNoYW5pc20gZm9yDQo+IG1h a2luZyBlYWNoIGluZm9ybWF0aW9uIGl0ZW0gdHJ1c3R3b3J0aHkgYnkgaXRzZWxmLCB3aGljaCBj YW4gYmUgYWNoaWV2ZWQgZm9yDQo+IGV4YW1wbGUgYnkgc2lnbmluZyBkYXRhLg0KPiBJbiB0aGlz IGNhc2UgYSBjb25zdW1lciBvZiBhbiBpbmZvcm1hdGlvbiBvYmplY3QgY291bGQgcHJvdmUgaXRz IGF1dGhlbnRpY2l0eSBieQ0KPiB2ZXJpZnlpbmcgdGhlIGRpZ2l0YWwgc2lnbmF0dXJlLiAgQXBw bHlpbmcgSUNOIHRvIHRoZSBJb1Qgc2V0dGluZywgc2Vuc29yDQo+IHJlYWRpbmdzIGNvdWxkIGJl IHByb3RlY3RlZCBhbmQgc3RvcmVkIGluIGFyYml0cmFyeSBjb250ZW50IG5vZGVzLCBub3QNCj4g bmVjZXNzYXJpbHkgb25seSBpbiBvcmlnaW4gc2VydmVyczsgZGV2aWNlIGNvbmZpZ3VyYXRpb24g dXBkYXRlcyBjb3VsZCBiZQ0KPiBwcm90ZWN0ZWQgYW5kIHN0b3JlZCBpbiBwcm94aWVzLCBub3Qg bmVjZXNzYXJpbHkgb25seSBpbiBkZWRpY2F0ZWQNCj4gY29uZmlndXJhdGlvbiBzZXJ2ZXJzLg0K PiANCj4gU2ltaWxhciBzZWN1cml0eSBwcm9wZXJ0aWVzIGFwcGx5IGFzIGluIHRoZSBwcmV2aW91 cyBjYXNlcy4NCj4gDQo+IA0KPiANCj4gR8O2cmFuDQo+IA0KPiANCj4gDQo+IEZyb206ICBMaWtl cGVuZyA8bGlrZXBlbmdAaHVhd2VpLmNvbT4NCj4gRGF0ZTogIFdlZG5lc2RheSAyNCBTZXB0ZW1i ZXIgMjAxNCAwOTowNg0KPiBUbzogICJhY2VAaWV0Zi5vcmciIDxhY2VAaWV0Zi5vcmc+DQo+IFN1 YmplY3Q6ICBbQWNlXSBOZXh0IHN0ZXAgZm9yIHVzZSBjYXNlIGRvY3VtZW50DQo+IA0KPiANCj4g PlRoYW5rcyBhbGwgZm9yIHRoZSBmZWVkYmFja3MgdG8gdGhlIHVzZSBjYXNlIGRvY3VtZW50Og0K PiA+aHR0cDovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1zZWl0ei1hY2UtdXNlY2Fz ZXMvDQo+ID4NCj4gPkhhbm5lcyBhbmQgSSB3ZW50IHRocm91Z2ggdGhlIGZlZWRiYWNrcyBpbiB0 aGUgbWFpbGluZyBsaXN0Lg0KPiA+DQo+ID4NCj4gPkluIHN1bW1hcnksIHdlIGZlZWwgdGhhdCB0 aGVyZSBpcyBubyBjb25zZW5zdXMgdG8gYWRvcHQgdGhlIGN1cnJlbnQNCj4gPnZlcnNpb24gb2Yg dGhpcyBkb2N1bWVudC4NCj4gPg0KPiA+Q29uc2lkZXJpbmcgdGhhdCB1c2UgY2FzZSBkb2N1bWVu dCBpcyBvdXIgY2hhcnRlciBpdGVtLCBhbmQgdGhpcyBpcyB0aGUNCj4gPm9ubHkgdmlhYmxlIGNh bmRpZGF0ZSwgb3VyIHBsYW4gaXMgdG8gYXNrIGF1dGhvcnMgdG8gdXBkYXRlIHRoZSBkcmFmdA0K PiA+YWNjb3JkaW5nIHRvIHRoZSByZWNlaXZlZCBmZWVkYmFja3Mgc28gZmFyIGFuZCB3ZSB3aWxs IGluaXRpYXRlIGFub3RoZXINCj4gPmNhbGwtZm9yLWFkb3B0aW9uICBmb3IgdGhlIG5ldyB2ZXJz aW9uLg0KPiA+DQo+ID5BbHNvLCBraW5kbHkgcmVtaW5kIHlvdSB0byBjb250cmlidXRlIHlvdXIg dGV4dHMgdG8gdGhlIHVzZSBjYXNlIGRvY3VtZW50Lg0KPiA+DQo+ID5UaGFua3MsDQo+ID4NCj4g PktpbmQgUmVnYXJkcw0KPiA+S2VwZW5nICYgSGFubmVzDQoNCg== From nobody Wed Oct 8 05:41:53 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B1AA1A0349 for ; Wed, 8 Oct 2014 05:41:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.901 X-Spam-Level: X-Spam-Status: No, score=-3.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VyhIP0AVfPm8 for ; Wed, 8 Oct 2014 05:41:49 -0700 (PDT) Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 381321A0347 for ; Wed, 8 Oct 2014 05:41:48 -0700 (PDT) X-AuditID: c1b4fb30-f79736d0000053b8-0a-5435310ac4ae Received: from ESESSHC012.ericsson.se (Unknown_Domain [153.88.253.124]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id 7E.5A.21432.A0135345; Wed, 8 Oct 2014 14:41:46 +0200 (CEST) Received: from ESESSMB303.ericsson.se ([169.254.3.188]) by ESESSHC012.ericsson.se ([153.88.183.54]) with mapi id 14.03.0174.001; Wed, 8 Oct 2014 14:41:35 +0200 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Likepeng , Hannes Tschofenig , "ace@ietf.org" Thread-Topic: [Ace] Next step for use case document Thread-Index: AQHP2+Z2zMYxzyxQtE+FAIirW36spZwmBHpQgAAuHIA= Date: Wed, 8 Oct 2014 12:41:35 +0000 Message-ID: References: <34966E97BE8AD64EAE9D3D6E4DEE36F2581A37D0@SZXEMA501-MBS.china.huawei.com> In-Reply-To: <34966E97BE8AD64EAE9D3D6E4DEE36F2581A37D0@SZXEMA501-MBS.china.huawei.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.4.140807 x-originating-ip: [153.88.183.16] Content-Type: text/plain; charset="utf-8" Content-ID: <24503BBB51C8854E9E68B7BDB030DDB5@ericsson.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFuphkeLIzCtJLcpLzFFi42KZGfG3RpfL0DTEYPEqOYvv33qYLZbuvMdq sedwE7MDs8fiTfvZPFqOvGX1WLLkJ1MAcxSXTUpqTmZZapG+XQJXxoQrD5gKNqVWzHvwgr2B 8UlSFyMHh4SAicSaNRJdjJxAppjEhXvr2boYuTiEBI4ySjRtfATlLGaUOHp2LwtIFZuAi8SD hkdMILaIQJHEnHMvWEAGCQsYSbw5JQIRNpZoOLiQHcK2kji0bAaYzSKgInHr6BlGEJtXwEKi Y+ZBNhBbSKCFUeL/dHEQm1MgTKLt43dWEJsR6KDvp9aArWIWEJe49WQ+E8ShAhJL9pxnhrBF JV4+/gdWLyqgJ/Fsw2Z2iLiixM6z7cwgpzELaEqs36UPMcZaYsb25ewQtqLElO6H7BDnCEqc nPmEZQKj+Cwk22YhdM9C0j0LSfcsJN0LGFlXMYoWpxYn5aYbGemlFmUmFxfn5+nlpZZsYgRG 38Etvw12ML587niIUYCDUYmHd8EskxAh1sSy4srcQ4zSHCxK4rwLz80LFhJITyxJzU5NLUgt ii8qzUktPsTIxMEp1cA4++KsBp2D7+9bLl23nMHJy/vHqTeiya0vjFWPb8us9rvcqPa36W3M 9eZ2b84v09ykDq4oPp3/sHGqYC+T1/8s308un0NzdZZF6T7x45WuMTx2UfDAajajNbf/vH/z LcBXksW73s197YUqs5ylH+f9fGy4tK+gfhb7g7uuHZW+yVUK9tZ71x1TYinOSDTUYi4qTgQA F2O6ZZ8CAAA= Archived-At: http://mailarchive.ietf.org/arch/msg/ace/S2k4XOeumDlhgyy-z2OMufqWSMg Subject: Re: [Ace] Next step for use case document X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Oct 2014 12:41:51 -0000 SGkgS2VwZW5nLA0KDQpPbiAwOC8xMC8xNCAxMjozNCwgIkxpa2VwZW5nIiA8bGlrZXBlbmdAaHVh d2VpLmNvbT4gd3JvdGU6DQoNCj5IaSBHb3JhbiwNCj4NCj5UaGFua3MgZm9yIHRoZSBpbnB1dC4N Cj4NCj5NeSB1bmRlcnN0YW5kaW5nIG9mIHRoZSAiIHNlY3VyZSBzdG9yZSBhbmQgZm9yd2FyZCAi IHVzZSBjYXNlIGlzIG1haW5seQ0KPmFib3V0ICJvYmplY3Qgc2VjdXJpdHkiLCByaWdodD8NCg0K WWVzLCBvYmplY3Qgc2VjdXJpdHkgaXMgY2VydGFpbmx5IG9uZSBjYW5kaWRhdGUgc29sdXRpb24u DQoNCj4NCj5XZSBkaXNjdXNzZWQgIm9iamVjdCBzZWN1cml0eSIgZHVyaW5nIElFU0cgZXZhbHVh dGlvbiwgYW5kIEkgcmVtZW1iZXIgdGhlDQo+Y29uY2x1c2lvbiBpcywgdGhpcyBzaG91bGQgYmUg aW4gc2NvcGU6DQo+aHR0cDovL3d3dy5pZXRmLm9yZy9tYWlsLWFyY2hpdmUvd2ViL2FjZS9jdXJy ZW50L21zZzAwNjE5Lmh0bWwNCj4NCj4+IFRoZSB1dGlsaXR5IGNvbXBhbnkgd2FudHMgdG8gdmVy aWZ5IHN0b3JlZCBhbmQgZm9yd2FyZGVkIG1ldGVyaW5nIGRhdGENCj4+d2l0aA0KPj4gcmVzcGVj dCB0byBhdXRoZW50aWNpdHksIGludGVncml0eSBhbmQgcmVwbGF5Lg0KPg0KPkFib3V0IHRoZSBh dXRoZW50aWNpdHksIGludGVncml0eSBhbmQgcmVwbGF5LCB0aGV5IHNlZW0gdG8gYmUgcXVpdGUN Cj5nZW5lcmFsIGFuZCBub3Qgc3BlY2lmaWMgdG8gInN0b3JlIGFuZCBmb3J3YXJkIiB1c2UgY2Fz ZS4NCg0KVGhhdCBpcyByaWdodC4gVGhpcyBmb3JtdWxhdGlvbiBpcyBzdHJlc3NpbmcgdGhhdCB0 aGV5IG5lZWQgdG8gYmUgdmFsaWQNCmFsc28gaW4gInN0b3JlIGFuZCBmb3J3YXJkIiB1c2UgY2Fz ZXMuDQoNCj4NCj5NYXliZSBpdCBpcyBiZXR0ZXIgdG8gZ28gdG8gYSBsaXR0bGUgYml0IG1vcmUg ZGV0YWlsLg0KPg0KPkZvciBleGFtcGxlLCBhYm91dCBpbnRlZ3JpdHksIHdlIGNhbiBzYXksIGRp c3RyaWJ1dGlvbiBlbnRpdHkgKGUuZy4gRGF0YQ0KPkNvbGxlY3Rpb24gdW5pdCkgbWF5IHJlYWQg dGhlIGRhdGEsIGFuZCBtdXN0IG5vdCBtb2RpZnkgdGhlIGRhdGEuDQoNCknigJltIGFncmVlIHdp dGggd2hhdCB5b3Ugd3JpdGUgdGhhdCB0aGUgc2VydmljZSBvcGVyYXRvci9kaXN0cmlidXRpb24N CmVudGl0eSBtdXN0IG5vdCBtb2RpZnkgZGF0YSBhbmQgbWF5IHJlYWQgdGhlIGRhdGEgZHVyaW5n IHRlc3Qgb3IgZXJyb3INCmNhc2VzLiBUaGlzIGlzIGEgY29uc2VxdWVuY2Ugb2YgdGhlIG90aGVy IHNlY3VyaXR5IHByb3BlcnRpZXMsIHNvIHRvIG1lDQp0aGlzIGlzIGp1c3QgYSBtYXR0ZXIgb2Yg cHJlc2VudGF0aW9uIHN0eWxlOyB3aGV0aGVyIHlvdSBhKSB3YW50IHRvDQplbXBoYXNpc2Ugd2hh dCBpcyBzcGVjaWZpYyB0byB0aGlzIHVzZSBjYXNlIG9yIGIpIHdhbnQgdG8gZW1waGFzaXNlIHdo YXQNCmlzIGNvbW1vbiBiZXR3ZWVuIHRoZSB1c2UgY2FzZXMuIE1heWJlIHdlIGNvdWxkIGRlbGVn YXRlIHRvIHRoZSB1c2UgY2FzZQ0KZWRpdG9ycyB0byBjb21lIHdpdGggYSBwcm9wb3NhbCBob3cg dG8gcHJlc2VudCB0aGlzPw0KDQo+DQo+PiBUaGUgdXRpbGl0eSBjb21wYW55IHdhbnRzIHRvIGNv bmZpZ3VyZSB1dGlsaXR5IG1ldGVycyBzZWN1cmVseTogVGhlDQo+PmRldmljZXMNCj4+IHNob3Vs ZCBiZSBhYmxlIHRvIHZlcmlmeSB0aGF0IGEgY29uZmlndXJhdGlvbiByZXF1ZXN0IGlzIGF1dGhv cml6ZWQsDQo+PmF1dGhlbnRpYywNCj4+IGludGVncml0eSBhbmQgcmVwbGF5IHByb3RlY3RlZC4N Cj4NCj5BYm91dCBjb25maWd1cmF0aW9uLCBJIGV4cGVjdCB0aGlzIHNob3VsZCBiZSBvdXQgb2Yg c2NvcGUgYW5kIHNob3VsZCBiZQ0KPmRvbmUgYnkgb3V0LW9mLWJhbmQgbWVjaGFuaXNtcy4NCg0K TWF5YmUgY29uZmlndXJhdGlvbiBpcyBub3QgdGhlIHJpZ2h0IHdvcmQ/IFRoaXMgaXMgYWJvdXQg Y2hhbmdpbmcgc2V0dGluZ3MNCmluIHRoZSBzbWFydCBtZXRlci4gSSB1bmRlcnN0YW5kIHRoaXMg YXMgYW4gYW5hbG9ndWUgdG8gdGhlIGtpbmQgb2YNCihyZS0pY29tbWlzc2lvbmluZyBhbmQgbWFp bnRlbmFuY2UgYWN0aXZpdHkgZGVzY3JpYmVkIGluIHRoZSBCTE1TIHVzZSBjYXNlDQooU2VjdGlv biAyLjQuMSBvZiBkcmFmdC1zZWl0ei1hY2UtdXNlY2FzZXMtMDEpLCBhZ2FpbiwgaW4gdGhlIHNl dHRpbmcgdGhhdA0KdGhlcmUgaXMgbm90IG5lY2Vzc2FyaWx5IGRpcmVjdCBjb25uZWN0aXZpdHkg dG8gdGhlIHNtYXJ0IG1ldGVyLg0KDQpCZXN0IHJlZ2FyZHMsDQpHw7ZyYW4NCg0KPg0KPktpbmQg UmVnYXJkcw0KPktlcGVuZw0KPg0KPj4gLS0tLS3pgq7ku7bljp/ku7YtLS0tLQ0KPj4g5Y+R5Lu2 5Lq6OiBHw7ZyYW4gU2VsYW5kZXIgW21haWx0bzpnb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5jb21d DQo+PiDlj5HpgIHml7bpl7Q6IDIwMTTlubQ55pyIMjnml6UgMjE6MDgNCj4+IOaUtuS7tuS6ujog TGlrZXBlbmc7IEhhbm5lcyBUc2Nob2ZlbmlnOyBhY2VAaWV0Zi5vcmcNCj4+IOS4u+mimDogUmU6 IFtBY2VdIE5leHQgc3RlcCBmb3IgdXNlIGNhc2UgZG9jdW1lbnQNCj4+IA0KPj4gRGVhciBXRyBj aGFpcnMgYW5kIGFsbCwNCj4+IA0KPj4gUGxlYXNlIGZpbmQgYmVsb3cgc29tZSBmdXJ0aGVyIHN1 Z2dlc3Rpb25zIGZvciBjb250ZW50IG9mIHRoZSB1c2UgY2FzZQ0KPj4gZG9jdW1lbnQuIEFwb2xv Z2llcyBmb3IgdGhlIGxlbmd0aHkgbWFpbC4NCj4+IA0KPj4gSSBwcm9wb3NlIHRoYXQgc29tZSB1 c2UgY2FzZSBpbiB0aGUgZHJhZnQgc2hvdWxkIGhpZ2hsaWdodCB0aGUgbmVlZCBmb3INCj4+YQ0K Pj4gc29sdXRpb24gdGhhdCBzdXBwb3J0cyBzZWN1cmUgc3RvcmUgYW5kIGZvcndhcmQuIEhlcmUg YXJlIGEgc2V0IG9mIHVzZQ0KPj5jYXNlcw0KPj4gc3VwcG9ydGluZyB0aGlzLCB0aGUgZmlyc3Qg b25lIGlzIGJhc2VkIG9uIGludGVydmlld3Mgd2l0aCBwZW9wbGUNCj4+d29ya2luZyB3aXRoDQo+ PiB1dGlsaXRpZXMuIFRoZSBvdGhlcnMgdXNlIGNhc2VzIHNob3cgdGhhdCB0aGlzIGlzIG5vdCBh biBpc29sYXRlZA0KPj5leGFtcGxlLiAoVGhlcmUNCj4+IGlzIG5vIG5lZWQgdG8gaW5jbHVkZSBh bGwgdXNlIGNhc2VzIGluIHRoZSBkcmFmdC4pDQo+PiANCj4+IFV0aWxpdHkgZGF0YSBjb2xsZWN0 aW9uDQo+PiAtIC0gLQ0KPj4gQSB1dGlsaXR5IGNvbXBhbnkgaXMgdXBkYXRpbmcgaXRzIG9sZCB1 dGlsaXR5IGRpc3RyaWJ1dGlvbiBuZXR3b3JrIHdpdGgNCj4+YWR2YW5jZWQNCj4+IG1ldGVycyBh bmQgbmV3IGNvbW11bmljYXRpb24gc3lzdGVtcywga25vd24gYXMgYW4gQWR2YW5jZWQgTWV0ZXJp bmcNCj4+IEluZnJhc3RydWN0dXJlIChBTUkpLiAgQU1JIHJlZmVycyB0byBhIHN5c3RlbSB0aGF0 IG1lYXN1cmVzLCBjb2xsZWN0cw0KPj5hbmQNCj4+IGFuYWx5emVzIHVzYWdlLCBhbmQgaW50ZXJh Y3RzIHdpdGggbWV0ZXJpbmcgZGV2aWNlcyBzdWNoIGFzIGVsZWN0cmljaXR5DQo+Pm1ldGVycywN Cj4+IGdhcyBtZXRlcnMsIGhlYXQgbWV0ZXJzLCBhbmQgd2F0ZXIgbWV0ZXJzLCB0aHJvdWdoIHZh cmlvdXMgY29tbXVuaWNhdGlvbg0KPj4gbWVkaWEgZWl0aGVyIG9uIHJlcXVlc3QgKG9uLWRlbWFu ZCkgb3Igb24gcHJlLWRlZmluZWQgc2NoZWR1bGVzLiAgQmFzZWQNCj4+IG9uIHRoaXMgdGVjaG5v bG9neSwgbmV3IHNlcnZpY2VzIG1ha2UgaXQgcG9zc2libGUgZm9yIGNvbnN1bWVycyB0bw0KPj5j b250cm9sDQo+PiB0aGVpciB1dGlsaXR5IGNvbnN1bXB0aW9uIGFuZCByZWR1Y2UgY29zdHMgYnkg c3VwcG9ydGluZyBuZXcgdGFyaWZmDQo+Pm1vZGVscw0KPj4gZnJvbSB1dGlsaXR5IGNvbXBhbmll cywgYW5kIG1vcmUgYWNjdXJhdGUgYW5kIHRpbWVseSBiaWxsaW5nLg0KPj4gDQo+PiBUaGUgdGVj aG5pY2FsIHNvbHV0aW9uIGlzIGJhc2VkIG9uIGxldmVscyBvZiBkYXRhIGFnZ3JlZ2F0aW9uIGJl dHdlZW4NCj4+wrNzbWFydA0KPj4gbWV0ZXJzwrIgbG9jYXRlZCBhdCB0aGUgY29uc3VtZXIgcHJl bWlzZXMgYW5kIHRoZSBNZXRlciBEYXRhIE1hbmFnZW1lbnQNCj4+IChNRE0pIHN5c3RlbSBsb2Nh dGVkIGF0IHRoZSB1dGlsaXR5IGNvbXBhbnkuICBUd28gcG9zc2libGUgaW50ZXJtZWRpYXRlDQo+ PiBsZXZlbHMgYXJlOg0KPj4gDQo+PiAtIEhlYWQtRW5kIFN5c3RlbSAoSEVTKSB3aGljaCBpcyBo YXJkd2FyZSBhbmQgc29mdHdhcmUgdGhhdCByZWNlaXZlcyB0aGUNCj4+IHN0cmVhbSBvZiBtZXRl ciBkYXRhIGFuZCBleHBvc2VzIGFuIGludGVyZmFjZSB0byB0aGUgTURNLg0KPj4gDQo+PiAtIERh dGEgQ29sbGVjdGlvbiAoREMpIHVuaXRzIGxvY2F0ZWQgaW4gYSBsb2NhbCBuZXR3b3JrIGNvbW11 bmljYXRpbmcNCj4+d2l0aCBhDQo+PiBudW1iZXIgb2Ygc21hcnQgbWV0ZXJzIGFuZCB3aXRoIGEg YmFja2hhdWwgaW50ZXJmYWNlIGNvbW11bmljYXRpbmcgd2l0aA0KPj4gdGhlIEhFUywgZS5nLiB1 c2luZyBjZWxsdWxhciBjb21tdW5pY2F0aW9uLg0KPj4gDQo+PiBGb3IgcmVhc29ucyBvZiBlZmZp Y2llbmN5IGFuZCBjb3N0IGVuZC10by1lbmQgY29ubmVjdGl2aXR5IGlzIG5vdCBhbHdheXMNCj4+ IGZlYXNpYmxlLCBzbyBtZXRlcmluZyBkYXRhIGlzIHN0b3JlZCBpbiBiYXRjaGVzIGluIERDIGZv ciBzb21lIHRpbWUNCj4+YmVmb3JlIGJlaW5nDQo+PiBmb3J3YXJkZWQgdG8gdGhlIEhFUywgYW5k IGluIHR1cm4gYWNjZXNzZWQgYnkgdGhlIE1ETS4gIFRoZSBIRVMgYW5kIHRoZQ0KPj4gREMgdW5p dHMgbWF5IGJlIG9wZXJhdGVkIGJ5IGEgdGhpcmQgcGFydHkgc2VydmljZSBvcGVyYXRvciBvbiBi ZWhhbGYgb2YNCj4+dGhlDQo+PiB1dGlsaXR5IGNvbXBhbnkuICBPbmUgcmVzcG9uc2liaWxpdHkg b2YgdGhlIHNlcnZpY2Ugb3BlcmF0b3IgaXMgdG8gbWFrZQ0KPj5zdXJlDQo+PiB0aGF0IG1ldGVy IHJlYWRpbmdzIGFyZSBwZXJmb3JtZWQgYW5kIGRlbGl2ZXJlZCB0byB0aGUgSEVTLiAgQW4gZXhh bXBsZQ0KPj5vZg0KPj4gYSBTZXJ2aWNlIExldmVsIEFncmVlbWVudCBiZXR3ZWVuIHRoZSBzZXJ2 aWNlIG9wZXJhdG9yIGFuZCB0aGUgdXRpbGl0eQ0KPj4gY29tcGFueSBpcyBlLmcuICAiYXQgbGVh c3QgOTUgJSBvZiB0aGUgbWV0ZXJzIGhhdmUgcmVhZGluZ3MgcmVjb3JkZWQNCj4+ZHVyaW5nDQo+ PiB0aGUgbGFzdCA3MiBob3Vyc8KyLg0KPj4gDQo+PiANCj4+IFNlY3VyaXR5IHByb3BlcnRpZXMN Cj4+IA0KPj4gVGhlIHV0aWxpdHkgY29tcGFueSB3YW50cyB0byB2ZXJpZnkgc3RvcmVkIGFuZCBm b3J3YXJkZWQgbWV0ZXJpbmcgZGF0YQ0KPj53aXRoDQo+PiByZXNwZWN0IHRvIGF1dGhlbnRpY2l0 eSwgaW50ZWdyaXR5IGFuZCByZXBsYXkuDQo+PiANCj4+IFRoZSB1dGlsaXR5IGNvbXBhbnkgd2Fu dHMgdG8gY29uZmlndXJlIHV0aWxpdHkgbWV0ZXJzIHNlY3VyZWx5OiBUaGUNCj4+ZGV2aWNlcw0K Pj4gc2hvdWxkIGJlIGFibGUgdG8gdmVyaWZ5IHRoYXQgYSBjb25maWd1cmF0aW9uIHJlcXVlc3Qg aXMgYXV0aG9yaXplZCwNCj4+YXV0aGVudGljLA0KPj4gaW50ZWdyaXR5IGFuZCByZXBsYXkgcHJv dGVjdGVkLg0KPj4gDQo+PiBUaGUgdXRpbGl0eSBjb21wYW55IHdhbnRzIHRvIGJlIGluIGNvbnRy b2wgb2YgYWNjZXNzIHRvIHBsYWluIHRleHQNCj4+bWV0ZXJpbmcgZGF0YS4NCj4+IE90aGVyIHBh cnRpZXMgbWF5IGJlIGFsbG93ZWQgYWNjZXNzIGJ1dCBhdCB0aGUgZGlzY3JldGlvbiBvZiB0aGUg dXRpbGl0eQ0KPj4gY29tcGFueS4gRS5nLiB0aGUgc2VydmljZSBvcGVyYXRvciBuZWVkcyBhY2Nl c3MgZHVyaW5nIHRlc3Qgb3IgZXJyb3INCj4+Y2FzZXMsIG9yDQo+PiBmb3IgY2FsaWJyYXRpbmcg dW5pdHMgb24gcmVwbGFjZW1lbnQuIEluIHBhcnRpY3VsYXIsIGl0IHNob3VsZCBiZQ0KPj5wb3Nz aWJsZSB0bw0KPj4gY29uZmlkZW50aWFsaXR5IHByb3RlY3QgdGhlIG1ldGVyaW5nIGRhdGEgYmV0 d2VlbiBzbWFydCBtZXRlciBhbmQgdGhlDQo+PnV0aWxpdHkNCj4+IGNvbXBhbnkncyBuZXR3b3Jr Lg0KPj4gDQo+PiAoVGhlcmUgYXJlIGFsc28gb3RoZXIgZGVzaXJhYmxlIHNlY3VyaXR5IHByb3Bl cnRpZXMsIHRoZSBhbWJpdGlvbiBoZXJlDQo+PmlzIG5vdCB0bw0KPj4gYmUgZXhoYXVzdGl2ZSBi dXQgdG8gaGlnaGxpZ2h0IHRoZSBuZWVkIGZvciBlbmQtdG8tZW5kIGF1dGhvcmlzZWQNCj4+YWNj ZXNzLiApDQo+PiANCj4+IA0KPj4gDQo+PiBBY3R1YWxseSwgdGhlIGRyaXZlLWJ5IG1ldGVyaW5n IHVzZSBjYXNlIChzZWN0aW9uIDIuNS4xKSBtYXkgcmVxdWlyZSBhDQo+PnNpbWlsYXINCj4+IGZ1 bmN0aW9uYWxpdHk6DQo+PiANCj4+IA0KPj4gRHJpdmUtYnkgbWV0ZXJpbmcgZGF0YSBjb2xsZWN0 aW9uDQo+PiAtIC0gLQ0KPj4gVGhlIG1ldGVycyBjb21tdW5pY2F0ZSB3aXRoIGEgdmVoaWNsZS1h dHRhY2hlZCBiYXNlIHN0YXRpb24sIHdoaWNoDQo+PmRyaXZlcyBieQ0KPj4gYW5kIGNvbGxlY3Rz IG1ldGVyIHJlYWRpbmdzLiBUaGUgZHJpdmUtYnkgc2VydmljZSBjb3VsZCBwb3RlbnRpYWxseSBi ZQ0KPj5vcGVyYXRlZA0KPj4gYnkgYSB0aGlyZCBwYXJ0eSBjb2xsZWN0aW5nIG1ldGVyIHJlYWRp bmdzIG9uIGJlaGFsZiBvZiBvbmUgb3IgbXVsdGlwbGUNCj4+dXRpbGl0eQ0KPj4gY29tcGFuaWVz LCBhbmQgc2hvdWxkIG5vdCBoYXZlIGFjY2VzcyB0byBwbGFpbiB0ZXh0IG1ldGVyIHJlYWRpbmdz LCBvcg0KPj5ub3QgYmUNCj4+IGFibGUgdG8gY2hhbmdlIHRoZSByZWFkaW5ncy4gQWxzbyBpbiB0 aGlzIGNhc2UgaXQgbWF5IGJlIGNvc3QtZWZmaWNpZW50DQo+PnRvIHVwbG9hZA0KPj4gdGhlIHJl YWRpbmdzIGZyb20gdGhlIHZlaGljbGUgb25jZSB0aGUgY2FyIHJldHVybnMgdG8gdGhlIDNyZCBw YXJ0eQ0KPj5wcmVtaXNlcywNCj4+IGUuZy4gb3ZlciBXTEFOLiBUaGlzIG1lYW5zIHRoYXQgdGhl IHJlYWRpbmdzIG5lZWQgdG8gYmUgc3RvcmVkIGFuZCBsYXRlcg0KPj4gZm9yd2FyZGVkLCBhbmQg c2hvdWxkIGJlIHByb3RlY3RlZCBlbmQtdG8tZW5kIGJldHdlZW4gc21hcnQgbWV0ZXIgYW5kDQo+ PiBNZXRlci1EYXRhIE1hbmFnZW1lbnQgc3lzdGVtIGluIHRoZSByZXNwZWN0aXZlIHV0aWxpdHkg Y29tcGFueSBuZXR3b3JrDQo+PiBhbmFsb2dvdXNseSB0byB0aGUgcHJldmlvdXMgdXNlIGNhc2Uu DQo+PiANCj4+IA0KPj4gVGhlcmUgYXJlIG90aGVyIGV4YW1wbGVzIHdoZXJlIGl0IG1heSBiZSBp bXBvc3NpYmxlIG9yIGluZmVhc2libGUgdG8NCj4+c3VwcG9ydA0KPj4gZW5kLXRvLWVuZCBjb25u ZWN0aXZpdHksIGUuZy4gaW4gbmV0d29ya3Mgd2l0aCBzbGVlcHkgZGV2aWNlcywgaW4gd2hpY2gN Cj4+Y2FzZSBhDQo+PiBwdWJsaXNoLXN1YnNjcmliZSBwYXJhZGlnbSBtYXkgYmUgbW9yZSBuYXR1 cmFsLiAgSGVyZSB3ZSBwaWNrIGFub3RoZXINCj4+IGFwcGxpY2F0aW9uIG9mIHB1Ymxpc2gtc3Vi c2NyaWJlOg0KPj4gDQo+PiBJbmZvcm1hdGlvbiBDZW50cmljIE5ldHdvcmtpbmcgKElDTikNCj4+ IC0gLSAtDQo+PiBJQ04gaXMgYSBwYXJhZGlnbSBmb3IgZGF0YSBhY2Nlc3MsIGNoYW5naW5nIGZv Y3VzIGZyb20gY3VycmVudA0KPj5ob3N0LWNlbnRyaWMNCj4+IG5ldHdvcmsgdG8gYW4gaW5mb3Jt YXRpb24tY2VudHJpYyBuZXR3b3JrLiAgSW4gYSBob3N0LWNlbnRyaWMgbmV0d29yaywNCj4+dGhl DQo+PiBiYXNpYyBpZGVhIGlzIHRvIGNyZWF0ZSBzZWN1cmUgY29ubmVjdGlvbnMgdG8gaG9zdHMg b2YgdHJ1c3RlZA0KPj5wcm92aWRlcnMgb2YgZGF0YS4NCj4+IEluIGFuIGluZm9ybWF0aW9uLWNl bnRyaWMgbmV0d29yaywgb24gdGhlIG90aGVyIGhhbmQsIGl0IGlzIGFjY2VwdGFibGUNCj4+dGhh dCBhbnkNCj4+IHNvdXJjZSAoY2FjaGUpIHNob3VsZCBiZSBlcXVhbGx5IHVzYWJsZS4gIFRoaXMg cmVxdWlyZXMgc29tZSBtZWNoYW5pc20NCj4+Zm9yDQo+PiBtYWtpbmcgZWFjaCBpbmZvcm1hdGlv biBpdGVtIHRydXN0d29ydGh5IGJ5IGl0c2VsZiwgd2hpY2ggY2FuIGJlDQo+PmFjaGlldmVkIGZv cg0KPj4gZXhhbXBsZSBieSBzaWduaW5nIGRhdGEuDQo+PiBJbiB0aGlzIGNhc2UgYSBjb25zdW1l ciBvZiBhbiBpbmZvcm1hdGlvbiBvYmplY3QgY291bGQgcHJvdmUgaXRzDQo+PmF1dGhlbnRpY2l0 eSBieQ0KPj4gdmVyaWZ5aW5nIHRoZSBkaWdpdGFsIHNpZ25hdHVyZS4gIEFwcGx5aW5nIElDTiB0 byB0aGUgSW9UIHNldHRpbmcsDQo+PnNlbnNvcg0KPj4gcmVhZGluZ3MgY291bGQgYmUgcHJvdGVj dGVkIGFuZCBzdG9yZWQgaW4gYXJiaXRyYXJ5IGNvbnRlbnQgbm9kZXMsIG5vdA0KPj4gbmVjZXNz YXJpbHkgb25seSBpbiBvcmlnaW4gc2VydmVyczsgZGV2aWNlIGNvbmZpZ3VyYXRpb24gdXBkYXRl cyBjb3VsZA0KPj5iZQ0KPj4gcHJvdGVjdGVkIGFuZCBzdG9yZWQgaW4gcHJveGllcywgbm90IG5l Y2Vzc2FyaWx5IG9ubHkgaW4gZGVkaWNhdGVkDQo+PiBjb25maWd1cmF0aW9uIHNlcnZlcnMuDQo+ PiANCj4+IFNpbWlsYXIgc2VjdXJpdHkgcHJvcGVydGllcyBhcHBseSBhcyBpbiB0aGUgcHJldmlv dXMgY2FzZXMuDQo+PiANCj4+IA0KPj4gDQo+PiBHw7ZyYW4NCj4+IA0KPj4gDQo+PiANCj4+IEZy b206ICBMaWtlcGVuZyA8bGlrZXBlbmdAaHVhd2VpLmNvbT4NCj4+IERhdGU6ICBXZWRuZXNkYXkg MjQgU2VwdGVtYmVyIDIwMTQgMDk6MDYNCj4+IFRvOiAgImFjZUBpZXRmLm9yZyIgPGFjZUBpZXRm Lm9yZz4NCj4+IFN1YmplY3Q6ICBbQWNlXSBOZXh0IHN0ZXAgZm9yIHVzZSBjYXNlIGRvY3VtZW50 DQo+PiANCj4+IA0KPj4gPlRoYW5rcyBhbGwgZm9yIHRoZSBmZWVkYmFja3MgdG8gdGhlIHVzZSBj YXNlIGRvY3VtZW50Og0KPj4gPmh0dHA6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQt c2VpdHotYWNlLXVzZWNhc2VzLw0KPj4gPg0KPj4gPkhhbm5lcyBhbmQgSSB3ZW50IHRocm91Z2gg dGhlIGZlZWRiYWNrcyBpbiB0aGUgbWFpbGluZyBsaXN0Lg0KPj4gPg0KPj4gPg0KPj4gPkluIHN1 bW1hcnksIHdlIGZlZWwgdGhhdCB0aGVyZSBpcyBubyBjb25zZW5zdXMgdG8gYWRvcHQgdGhlIGN1 cnJlbnQNCj4+ID52ZXJzaW9uIG9mIHRoaXMgZG9jdW1lbnQuDQo+PiA+DQo+PiA+Q29uc2lkZXJp bmcgdGhhdCB1c2UgY2FzZSBkb2N1bWVudCBpcyBvdXIgY2hhcnRlciBpdGVtLCBhbmQgdGhpcyBp cyB0aGUNCj4+ID5vbmx5IHZpYWJsZSBjYW5kaWRhdGUsIG91ciBwbGFuIGlzIHRvIGFzayBhdXRo b3JzIHRvIHVwZGF0ZSB0aGUgZHJhZnQNCj4+ID5hY2NvcmRpbmcgdG8gdGhlIHJlY2VpdmVkIGZl ZWRiYWNrcyBzbyBmYXIgYW5kIHdlIHdpbGwgaW5pdGlhdGUgYW5vdGhlcg0KPj4gPmNhbGwtZm9y LWFkb3B0aW9uICBmb3IgdGhlIG5ldyB2ZXJzaW9uLg0KPj4gPg0KPj4gPkFsc28sIGtpbmRseSBy ZW1pbmQgeW91IHRvIGNvbnRyaWJ1dGUgeW91ciB0ZXh0cyB0byB0aGUgdXNlIGNhc2UNCj4+ZG9j dW1lbnQuDQo+PiA+DQo+PiA+VGhhbmtzLA0KPj4gPg0KPj4gPktpbmQgUmVnYXJkcw0KPj4gPktl cGVuZyAmIEhhbm5lcw0KPg0KDQo= From nobody Wed Oct 8 18:02:12 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A47E81A87ED for ; Wed, 8 Oct 2014 18:02:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.687 X-Spam-Level: X-Spam-Status: No, score=-4.687 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.786, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9sM0CwMgNPDW for ; Wed, 8 Oct 2014 18:02:05 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 034F01A8820 for ; Wed, 8 Oct 2014 18:02:04 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml406-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BNL24114; Thu, 09 Oct 2014 01:02:03 +0000 (GMT) Received: from SZXEMA402-HUB.china.huawei.com (10.82.72.34) by lhreml406-hub.china.huawei.com (10.201.5.243) with Microsoft SMTP Server (TLS) id 14.3.158.1; Thu, 9 Oct 2014 02:02:02 +0100 Received: from SZXEMA501-MBS.china.huawei.com ([169.254.2.205]) by SZXEMA402-HUB.china.huawei.com ([10.82.72.34]) with mapi id 14.03.0158.001; Thu, 9 Oct 2014 09:01:56 +0800 From: Likepeng To: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= , "Hannes Tschofenig" , "ace@ietf.org" Thread-Topic: [Ace] Next step for use case document Thread-Index: AQHP2+Z2zMYxzyxQtE+FAIirW36spZwmBHpQgAAuHICAAMss4A== Date: Thu, 9 Oct 2014 01:01:55 +0000 Message-ID: <34966E97BE8AD64EAE9D3D6E4DEE36F2581A3B0D@SZXEMA501-MBS.china.huawei.com> References: <34966E97BE8AD64EAE9D3D6E4DEE36F2581A37D0@SZXEMA501-MBS.china.huawei.com> In-Reply-To: Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.66.167.122] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/ace/8-9lZcjwPVAJHuJL2j64wIPivr0 Subject: Re: [Ace] Next step for use case document X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Oct 2014 01:02:10 -0000 PiB3aGV0aGVyIHlvdSBhKSB3YW50IHRvIGVtcGhhc2l6ZSB3aGF0IGlzIHNwZWNpZmljIHRvIHRo aXMNCj4gdXNlIGNhc2Ugb3IgYikgd2FudCB0byBlbXBoYXNpemUgd2hhdCBpcyBjb21tb24gYmV0 d2VlbiB0aGUgdXNlIGNhc2VzLg0KPiBNYXliZSB3ZSBjb3VsZCBkZWxlZ2F0ZSB0byB0aGUgdXNl IGNhc2UgZWRpdG9ycyB0byBjb21lIHdpdGggYSBwcm9wb3NhbCBob3cNCj4gdG8gcHJlc2VudCB0 aGlzPw0KDQpNeSBwZXJzb25hbCBwcmVmZXJlbmNlIHdvdWxkIGJlIGEpLCBidXQgbGV04oCZcyB0 aGUgZWRpdG9ycyB0byBkZWNpZGUuDQoNCktlcGVuZyAoSW5kaXZpZHVhbCkNCg0KPiAtLS0tLemC ruS7tuWOn+S7ti0tLS0tDQo+IOWPkeS7tuS6ujogR8O2cmFuIFNlbGFuZGVyIFttYWlsdG86Z29y YW4uc2VsYW5kZXJAZXJpY3Nzb24uY29tXQ0KPiDlj5HpgIHml7bpl7Q6IDIwMTTlubQxMOaciDjm l6UgMjA6NDINCj4g5pS25Lu25Lq6OiBMaWtlcGVuZzsgSGFubmVzIFRzY2hvZmVuaWc7IGFjZUBp ZXRmLm9yZw0KPiDkuLvpopg6IFJlOiBbQWNlXSBOZXh0IHN0ZXAgZm9yIHVzZSBjYXNlIGRvY3Vt ZW50DQo+IA0KPiBIaSBLZXBlbmcsDQo+IA0KPiBPbiAwOC8xMC8xNCAxMjozNCwgIkxpa2VwZW5n IiA8bGlrZXBlbmdAaHVhd2VpLmNvbT4gd3JvdGU6DQo+IA0KPiA+SGkgR29yYW4sDQo+ID4NCj4g PlRoYW5rcyBmb3IgdGhlIGlucHV0Lg0KPiA+DQo+ID5NeSB1bmRlcnN0YW5kaW5nIG9mIHRoZSAi IHNlY3VyZSBzdG9yZSBhbmQgZm9yd2FyZCAiIHVzZSBjYXNlIGlzIG1haW5seQ0KPiA+YWJvdXQg Im9iamVjdCBzZWN1cml0eSIsIHJpZ2h0Pw0KPiANCj4gWWVzLCBvYmplY3Qgc2VjdXJpdHkgaXMg Y2VydGFpbmx5IG9uZSBjYW5kaWRhdGUgc29sdXRpb24uDQo+IA0KPiA+DQo+ID5XZSBkaXNjdXNz ZWQgIm9iamVjdCBzZWN1cml0eSIgZHVyaW5nIElFU0cgZXZhbHVhdGlvbiwgYW5kIEkgcmVtZW1i ZXINCj4gPnRoZSBjb25jbHVzaW9uIGlzLCB0aGlzIHNob3VsZCBiZSBpbiBzY29wZToNCj4gPmh0 dHA6Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNoaXZlL3dlYi9hY2UvY3VycmVudC9tc2cwMDYxOS5o dG1sDQo+ID4NCj4gPj4gVGhlIHV0aWxpdHkgY29tcGFueSB3YW50cyB0byB2ZXJpZnkgc3RvcmVk IGFuZCBmb3J3YXJkZWQgbWV0ZXJpbmcNCj4gPj5kYXRhIHdpdGggIHJlc3BlY3QgdG8gYXV0aGVu dGljaXR5LCBpbnRlZ3JpdHkgYW5kIHJlcGxheS4NCj4gPg0KPiA+QWJvdXQgdGhlIGF1dGhlbnRp Y2l0eSwgaW50ZWdyaXR5IGFuZCByZXBsYXksIHRoZXkgc2VlbSB0byBiZSBxdWl0ZQ0KPiA+Z2Vu ZXJhbCBhbmQgbm90IHNwZWNpZmljIHRvICJzdG9yZSBhbmQgZm9yd2FyZCIgdXNlIGNhc2UuDQo+ IA0KPiBUaGF0IGlzIHJpZ2h0LiBUaGlzIGZvcm11bGF0aW9uIGlzIHN0cmVzc2luZyB0aGF0IHRo ZXkgbmVlZCB0byBiZSB2YWxpZCBhbHNvIGluDQo+ICJzdG9yZSBhbmQgZm9yd2FyZCIgdXNlIGNh c2VzLg0KPiANCj4gPg0KPiA+TWF5YmUgaXQgaXMgYmV0dGVyIHRvIGdvIHRvIGEgbGl0dGxlIGJp dCBtb3JlIGRldGFpbC4NCj4gPg0KPiA+Rm9yIGV4YW1wbGUsIGFib3V0IGludGVncml0eSwgd2Ug Y2FuIHNheSwgZGlzdHJpYnV0aW9uIGVudGl0eSAoZS5nLg0KPiA+RGF0YSBDb2xsZWN0aW9uIHVu aXQpIG1heSByZWFkIHRoZSBkYXRhLCBhbmQgbXVzdCBub3QgbW9kaWZ5IHRoZSBkYXRhLg0KPiAN Cj4gSeKAmW0gYWdyZWUgd2l0aCB3aGF0IHlvdSB3cml0ZSB0aGF0IHRoZSBzZXJ2aWNlIG9wZXJh dG9yL2Rpc3RyaWJ1dGlvbiBlbnRpdHkNCj4gbXVzdCBub3QgbW9kaWZ5IGRhdGEgYW5kIG1heSBy ZWFkIHRoZSBkYXRhIGR1cmluZyB0ZXN0IG9yIGVycm9yIGNhc2VzLiBUaGlzIGlzIGENCj4gY29u c2VxdWVuY2Ugb2YgdGhlIG90aGVyIHNlY3VyaXR5IHByb3BlcnRpZXMsIHNvIHRvIG1lIHRoaXMg aXMganVzdCBhIG1hdHRlciBvZg0KPiBwcmVzZW50YXRpb24gc3R5bGU7IHdoZXRoZXIgeW91IGEp IHdhbnQgdG8gZW1waGFzaXNlIHdoYXQgaXMgc3BlY2lmaWMgdG8gdGhpcw0KPiB1c2UgY2FzZSBv ciBiKSB3YW50IHRvIGVtcGhhc2lzZSB3aGF0IGlzIGNvbW1vbiBiZXR3ZWVuIHRoZSB1c2UgY2Fz ZXMuDQo+IE1heWJlIHdlIGNvdWxkIGRlbGVnYXRlIHRvIHRoZSB1c2UgY2FzZSBlZGl0b3JzIHRv IGNvbWUgd2l0aCBhIHByb3Bvc2FsIGhvdw0KPiB0byBwcmVzZW50IHRoaXM/DQo+IA0KPiA+DQo+ ID4+IFRoZSB1dGlsaXR5IGNvbXBhbnkgd2FudHMgdG8gY29uZmlndXJlIHV0aWxpdHkgbWV0ZXJz IHNlY3VyZWx5OiBUaGUNCj4gPj5kZXZpY2VzICBzaG91bGQgYmUgYWJsZSB0byB2ZXJpZnkgdGhh dCBhIGNvbmZpZ3VyYXRpb24gcmVxdWVzdCBpcw0KPiA+PmF1dGhvcml6ZWQsIGF1dGhlbnRpYywg IGludGVncml0eSBhbmQgcmVwbGF5IHByb3RlY3RlZC4NCj4gPg0KPiA+QWJvdXQgY29uZmlndXJh dGlvbiwgSSBleHBlY3QgdGhpcyBzaG91bGQgYmUgb3V0IG9mIHNjb3BlIGFuZCBzaG91bGQgYmUN Cj4gPmRvbmUgYnkgb3V0LW9mLWJhbmQgbWVjaGFuaXNtcy4NCj4gDQo+IE1heWJlIGNvbmZpZ3Vy YXRpb24gaXMgbm90IHRoZSByaWdodCB3b3JkPyBUaGlzIGlzIGFib3V0IGNoYW5naW5nIHNldHRp bmdzIGluDQo+IHRoZSBzbWFydCBtZXRlci4gSSB1bmRlcnN0YW5kIHRoaXMgYXMgYW4gYW5hbG9n dWUgdG8gdGhlIGtpbmQgb2YNCj4gKHJlLSljb21taXNzaW9uaW5nIGFuZCBtYWludGVuYW5jZSBh Y3Rpdml0eSBkZXNjcmliZWQgaW4gdGhlIEJMTVMgdXNlIGNhc2UNCj4gKFNlY3Rpb24gMi40LjEg b2YgZHJhZnQtc2VpdHotYWNlLXVzZWNhc2VzLTAxKSwgYWdhaW4sIGluIHRoZSBzZXR0aW5nIHRo YXQgdGhlcmUgaXMNCj4gbm90IG5lY2Vzc2FyaWx5IGRpcmVjdCBjb25uZWN0aXZpdHkgdG8gdGhl IHNtYXJ0IG1ldGVyLg0KPiANCj4gQmVzdCByZWdhcmRzLA0KPiBHw7ZyYW4NCj4gDQo+ID4NCj4g PktpbmQgUmVnYXJkcw0KPiA+S2VwZW5nDQo+ID4NCj4gPj4gLS0tLS3pgq7ku7bljp/ku7YtLS0t LQ0KPiA+PiDlj5Hku7bkuro6IEfDtnJhbiBTZWxhbmRlciBbbWFpbHRvOmdvcmFuLnNlbGFuZGVy QGVyaWNzc29uLmNvbV0NCj4gPj4g5Y+R6YCB5pe26Ze0OiAyMDE05bm0OeaciDI55pelIDIxOjA4 DQo+ID4+IOaUtuS7tuS6ujogTGlrZXBlbmc7IEhhbm5lcyBUc2Nob2ZlbmlnOyBhY2VAaWV0Zi5v cmcNCj4gPj4g5Li76aKYOiBSZTogW0FjZV0gTmV4dCBzdGVwIGZvciB1c2UgY2FzZSBkb2N1bWVu dA0KPiA+Pg0KPiA+PiBEZWFyIFdHIGNoYWlycyBhbmQgYWxsLA0KPiA+Pg0KPiA+PiBQbGVhc2Ug ZmluZCBiZWxvdyBzb21lIGZ1cnRoZXIgc3VnZ2VzdGlvbnMgZm9yIGNvbnRlbnQgb2YgdGhlIHVz ZQ0KPiA+PiBjYXNlIGRvY3VtZW50LiBBcG9sb2dpZXMgZm9yIHRoZSBsZW5ndGh5IG1haWwuDQo+ ID4+DQo+ID4+IEkgcHJvcG9zZSB0aGF0IHNvbWUgdXNlIGNhc2UgaW4gdGhlIGRyYWZ0IHNob3Vs ZCBoaWdobGlnaHQgdGhlIG5lZWQNCj4gPj5mb3IgYSAgc29sdXRpb24gdGhhdCBzdXBwb3J0cyBz ZWN1cmUgc3RvcmUgYW5kIGZvcndhcmQuIEhlcmUgYXJlIGEgc2V0DQo+ID4+b2YgdXNlIGNhc2Vz ICBzdXBwb3J0aW5nIHRoaXMsIHRoZSBmaXJzdCBvbmUgaXMgYmFzZWQgb24gaW50ZXJ2aWV3cw0K PiA+PndpdGggcGVvcGxlIHdvcmtpbmcgd2l0aCAgdXRpbGl0aWVzLiBUaGUgb3RoZXJzIHVzZSBj YXNlcyBzaG93IHRoYXQNCj4gPj50aGlzIGlzIG5vdCBhbiBpc29sYXRlZCBleGFtcGxlLiAoVGhl cmUgIGlzIG5vIG5lZWQgdG8gaW5jbHVkZSBhbGwgdXNlDQo+ID4+Y2FzZXMgaW4gdGhlIGRyYWZ0 LikNCj4gPj4NCj4gPj4gVXRpbGl0eSBkYXRhIGNvbGxlY3Rpb24NCj4gPj4gLSAtIC0NCj4gPj4g QSB1dGlsaXR5IGNvbXBhbnkgaXMgdXBkYXRpbmcgaXRzIG9sZCB1dGlsaXR5IGRpc3RyaWJ1dGlv biBuZXR3b3JrDQo+ID4+d2l0aCBhZHZhbmNlZCAgbWV0ZXJzIGFuZCBuZXcgY29tbXVuaWNhdGlv biBzeXN0ZW1zLCBrbm93biBhcyBhbg0KPiA+PkFkdmFuY2VkIE1ldGVyaW5nICBJbmZyYXN0cnVj dHVyZSAoQU1JKS4gIEFNSSByZWZlcnMgdG8gYSBzeXN0ZW0gdGhhdA0KPiA+Pm1lYXN1cmVzLCBj b2xsZWN0cyBhbmQgIGFuYWx5emVzIHVzYWdlLCBhbmQgaW50ZXJhY3RzIHdpdGggbWV0ZXJpbmcN Cj4gPj5kZXZpY2VzIHN1Y2ggYXMgZWxlY3RyaWNpdHkgbWV0ZXJzLCAgZ2FzIG1ldGVycywgaGVh dCBtZXRlcnMsIGFuZA0KPiA+PndhdGVyIG1ldGVycywgdGhyb3VnaCB2YXJpb3VzIGNvbW11bmlj YXRpb24gIG1lZGlhIGVpdGhlciBvbiByZXF1ZXN0DQo+ID4+KG9uLWRlbWFuZCkgb3Igb24gcHJl LWRlZmluZWQgc2NoZWR1bGVzLiAgQmFzZWQgIG9uIHRoaXMgdGVjaG5vbG9neSwNCj4gPj5uZXcg c2VydmljZXMgbWFrZSBpdCBwb3NzaWJsZSBmb3IgY29uc3VtZXJzIHRvIGNvbnRyb2wgIHRoZWly IHV0aWxpdHkNCj4gPj5jb25zdW1wdGlvbiBhbmQgcmVkdWNlIGNvc3RzIGJ5IHN1cHBvcnRpbmcg bmV3IHRhcmlmZiBtb2RlbHMgIGZyb20NCj4gPj51dGlsaXR5IGNvbXBhbmllcywgYW5kIG1vcmUg YWNjdXJhdGUgYW5kIHRpbWVseSBiaWxsaW5nLg0KPiA+Pg0KPiA+PiBUaGUgdGVjaG5pY2FsIHNv bHV0aW9uIGlzIGJhc2VkIG9uIGxldmVscyBvZiBkYXRhIGFnZ3JlZ2F0aW9uIGJldHdlZW4NCj4g Pj7Cs3NtYXJ0ICBtZXRlcnPCsiBsb2NhdGVkIGF0IHRoZSBjb25zdW1lciBwcmVtaXNlcyBhbmQg dGhlIE1ldGVyIERhdGENCj4gPj5NYW5hZ2VtZW50DQo+ID4+IChNRE0pIHN5c3RlbSBsb2NhdGVk IGF0IHRoZSB1dGlsaXR5IGNvbXBhbnkuICBUd28gcG9zc2libGUNCj4gPj5pbnRlcm1lZGlhdGUg IGxldmVscyBhcmU6DQo+ID4+DQo+ID4+IC0gSGVhZC1FbmQgU3lzdGVtIChIRVMpIHdoaWNoIGlz IGhhcmR3YXJlIGFuZCBzb2Z0d2FyZSB0aGF0IHJlY2VpdmVzDQo+ID4+IHRoZSBzdHJlYW0gb2Yg bWV0ZXIgZGF0YSBhbmQgZXhwb3NlcyBhbiBpbnRlcmZhY2UgdG8gdGhlIE1ETS4NCj4gPj4NCj4g Pj4gLSBEYXRhIENvbGxlY3Rpb24gKERDKSB1bml0cyBsb2NhdGVkIGluIGEgbG9jYWwgbmV0d29y ayBjb21tdW5pY2F0aW5nDQo+ID4+d2l0aCBhICBudW1iZXIgb2Ygc21hcnQgbWV0ZXJzIGFuZCB3 aXRoIGEgYmFja2hhdWwgaW50ZXJmYWNlDQo+ID4+Y29tbXVuaWNhdGluZyB3aXRoICB0aGUgSEVT LCBlLmcuIHVzaW5nIGNlbGx1bGFyIGNvbW11bmljYXRpb24uDQo+ID4+DQo+ID4+IEZvciByZWFz b25zIG9mIGVmZmljaWVuY3kgYW5kIGNvc3QgZW5kLXRvLWVuZCBjb25uZWN0aXZpdHkgaXMgbm90 DQo+ID4+YWx3YXlzICBmZWFzaWJsZSwgc28gbWV0ZXJpbmcgZGF0YSBpcyBzdG9yZWQgaW4gYmF0 Y2hlcyBpbiBEQyBmb3Igc29tZQ0KPiA+PnRpbWUgYmVmb3JlIGJlaW5nICBmb3J3YXJkZWQgdG8g dGhlIEhFUywgYW5kIGluIHR1cm4gYWNjZXNzZWQgYnkgdGhlDQo+ID4+TURNLiAgVGhlIEhFUyBh bmQgdGhlICBEQyB1bml0cyBtYXkgYmUgb3BlcmF0ZWQgYnkgYSB0aGlyZCBwYXJ0eQ0KPiA+PnNl cnZpY2Ugb3BlcmF0b3Igb24gYmVoYWxmIG9mIHRoZSAgdXRpbGl0eSBjb21wYW55LiAgT25lDQo+ ID4+cmVzcG9uc2liaWxpdHkgb2YgdGhlIHNlcnZpY2Ugb3BlcmF0b3IgaXMgdG8gbWFrZSBzdXJl ICB0aGF0IG1ldGVyDQo+ID4+cmVhZGluZ3MgYXJlIHBlcmZvcm1lZCBhbmQgZGVsaXZlcmVkIHRv IHRoZSBIRVMuICBBbiBleGFtcGxlIG9mICBhDQo+ID4+U2VydmljZSBMZXZlbCBBZ3JlZW1lbnQg YmV0d2VlbiB0aGUgc2VydmljZSBvcGVyYXRvciBhbmQgdGhlIHV0aWxpdHkNCj4gPj5jb21wYW55 IGlzIGUuZy4gICJhdCBsZWFzdCA5NSAlIG9mIHRoZSBtZXRlcnMgaGF2ZSByZWFkaW5ncyByZWNv cmRlZA0KPiA+PmR1cmluZyAgdGhlIGxhc3QgNzIgaG91cnPCsi4NCj4gPj4NCj4gPj4NCj4gPj4g U2VjdXJpdHkgcHJvcGVydGllcw0KPiA+Pg0KPiA+PiBUaGUgdXRpbGl0eSBjb21wYW55IHdhbnRz IHRvIHZlcmlmeSBzdG9yZWQgYW5kIGZvcndhcmRlZCBtZXRlcmluZw0KPiA+PmRhdGEgd2l0aCAg cmVzcGVjdCB0byBhdXRoZW50aWNpdHksIGludGVncml0eSBhbmQgcmVwbGF5Lg0KPiA+Pg0KPiA+ PiBUaGUgdXRpbGl0eSBjb21wYW55IHdhbnRzIHRvIGNvbmZpZ3VyZSB1dGlsaXR5IG1ldGVycyBz ZWN1cmVseTogVGhlDQo+ID4+ZGV2aWNlcyAgc2hvdWxkIGJlIGFibGUgdG8gdmVyaWZ5IHRoYXQg YSBjb25maWd1cmF0aW9uIHJlcXVlc3QgaXMNCj4gPj5hdXRob3JpemVkLCBhdXRoZW50aWMsICBp bnRlZ3JpdHkgYW5kIHJlcGxheSBwcm90ZWN0ZWQuDQo+ID4+DQo+ID4+IFRoZSB1dGlsaXR5IGNv bXBhbnkgd2FudHMgdG8gYmUgaW4gY29udHJvbCBvZiBhY2Nlc3MgdG8gcGxhaW4gdGV4dA0KPiA+ Pm1ldGVyaW5nIGRhdGEuDQo+ID4+IE90aGVyIHBhcnRpZXMgbWF5IGJlIGFsbG93ZWQgYWNjZXNz IGJ1dCBhdCB0aGUgZGlzY3JldGlvbiBvZiB0aGUNCj4gPj51dGlsaXR5ICBjb21wYW55LiBFLmcu IHRoZSBzZXJ2aWNlIG9wZXJhdG9yIG5lZWRzIGFjY2VzcyBkdXJpbmcgdGVzdA0KPiA+Pm9yIGVy cm9yIGNhc2VzLCBvciAgZm9yIGNhbGlicmF0aW5nIHVuaXRzIG9uIHJlcGxhY2VtZW50LiBJbg0K PiA+PnBhcnRpY3VsYXIsIGl0IHNob3VsZCBiZSBwb3NzaWJsZSB0byAgY29uZmlkZW50aWFsaXR5 IHByb3RlY3QgdGhlDQo+ID4+bWV0ZXJpbmcgZGF0YSBiZXR3ZWVuIHNtYXJ0IG1ldGVyIGFuZCB0 aGUgdXRpbGl0eSAgY29tcGFueSdzIG5ldHdvcmsuDQo+ID4+DQo+ID4+IChUaGVyZSBhcmUgYWxz byBvdGhlciBkZXNpcmFibGUgc2VjdXJpdHkgcHJvcGVydGllcywgdGhlIGFtYml0aW9uDQo+ID4+ aGVyZSBpcyBub3QgdG8gIGJlIGV4aGF1c3RpdmUgYnV0IHRvIGhpZ2hsaWdodCB0aGUgbmVlZCBm b3IgZW5kLXRvLWVuZA0KPiA+PmF1dGhvcmlzZWQgYWNjZXNzLiApDQo+ID4+DQo+ID4+DQo+ID4+ DQo+ID4+IEFjdHVhbGx5LCB0aGUgZHJpdmUtYnkgbWV0ZXJpbmcgdXNlIGNhc2UgKHNlY3Rpb24g Mi41LjEpIG1heSByZXF1aXJlDQo+ID4+YSBzaW1pbGFyDQo+ID4+IGZ1bmN0aW9uYWxpdHk6DQo+ ID4+DQo+ID4+DQo+ID4+IERyaXZlLWJ5IG1ldGVyaW5nIGRhdGEgY29sbGVjdGlvbg0KPiA+PiAt IC0gLQ0KPiA+PiBUaGUgbWV0ZXJzIGNvbW11bmljYXRlIHdpdGggYSB2ZWhpY2xlLWF0dGFjaGVk IGJhc2Ugc3RhdGlvbiwgd2hpY2gNCj4gPj5kcml2ZXMgYnkgIGFuZCBjb2xsZWN0cyBtZXRlciBy ZWFkaW5ncy4gVGhlIGRyaXZlLWJ5IHNlcnZpY2UgY291bGQNCj4gPj5wb3RlbnRpYWxseSBiZSBv cGVyYXRlZCAgYnkgYSB0aGlyZCBwYXJ0eSBjb2xsZWN0aW5nIG1ldGVyIHJlYWRpbmdzIG9uDQo+ ID4+YmVoYWxmIG9mIG9uZSBvciBtdWx0aXBsZSB1dGlsaXR5ICBjb21wYW5pZXMsIGFuZCBzaG91 bGQgbm90IGhhdmUNCj4gPj5hY2Nlc3MgdG8gcGxhaW4gdGV4dCBtZXRlciByZWFkaW5ncywgb3Ig bm90IGJlICBhYmxlIHRvIGNoYW5nZSB0aGUNCj4gPj5yZWFkaW5ncy4gQWxzbyBpbiB0aGlzIGNh c2UgaXQgbWF5IGJlIGNvc3QtZWZmaWNpZW50IHRvIHVwbG9hZCAgdGhlDQo+ID4+cmVhZGluZ3Mg ZnJvbSB0aGUgdmVoaWNsZSBvbmNlIHRoZSBjYXIgcmV0dXJucyB0byB0aGUgM3JkIHBhcnR5DQo+ ID4+cHJlbWlzZXMsICBlLmcuIG92ZXIgV0xBTi4gVGhpcyBtZWFucyB0aGF0IHRoZSByZWFkaW5n cyBuZWVkIHRvIGJlDQo+ID4+c3RvcmVkIGFuZCBsYXRlciAgZm9yd2FyZGVkLCBhbmQgc2hvdWxk IGJlIHByb3RlY3RlZCBlbmQtdG8tZW5kDQo+ID4+YmV0d2VlbiBzbWFydCBtZXRlciBhbmQgIE1l dGVyLURhdGEgTWFuYWdlbWVudCBzeXN0ZW0gaW4gdGhlDQo+ID4+cmVzcGVjdGl2ZSB1dGlsaXR5 IGNvbXBhbnkgbmV0d29yayAgYW5hbG9nb3VzbHkgdG8gdGhlIHByZXZpb3VzIHVzZQ0KPiA+PmNh c2UuDQo+ID4+DQo+ID4+DQo+ID4+IFRoZXJlIGFyZSBvdGhlciBleGFtcGxlcyB3aGVyZSBpdCBt YXkgYmUgaW1wb3NzaWJsZSBvciBpbmZlYXNpYmxlIHRvDQo+ID4+c3VwcG9ydCAgZW5kLXRvLWVu ZCBjb25uZWN0aXZpdHksIGUuZy4gaW4gbmV0d29ya3Mgd2l0aCBzbGVlcHkNCj4gPj5kZXZpY2Vz LCBpbiB3aGljaCBjYXNlIGEgIHB1Ymxpc2gtc3Vic2NyaWJlIHBhcmFkaWdtIG1heSBiZSBtb3Jl DQo+ID4+bmF0dXJhbC4gIEhlcmUgd2UgcGljayBhbm90aGVyICBhcHBsaWNhdGlvbiBvZiBwdWJs aXNoLXN1YnNjcmliZToNCj4gPj4NCj4gPj4gSW5mb3JtYXRpb24gQ2VudHJpYyBOZXR3b3JraW5n IChJQ04pDQo+ID4+IC0gLSAtDQo+ID4+IElDTiBpcyBhIHBhcmFkaWdtIGZvciBkYXRhIGFjY2Vz cywgY2hhbmdpbmcgZm9jdXMgZnJvbSBjdXJyZW50DQo+ID4+aG9zdC1jZW50cmljICBuZXR3b3Jr IHRvIGFuIGluZm9ybWF0aW9uLWNlbnRyaWMgbmV0d29yay4gIEluIGENCj4gPj5ob3N0LWNlbnRy aWMgbmV0d29yaywgdGhlICBiYXNpYyBpZGVhIGlzIHRvIGNyZWF0ZSBzZWN1cmUgY29ubmVjdGlv bnMNCj4gPj50byBob3N0cyBvZiB0cnVzdGVkIHByb3ZpZGVycyBvZiBkYXRhLg0KPiA+PiBJbiBh biBpbmZvcm1hdGlvbi1jZW50cmljIG5ldHdvcmssIG9uIHRoZSBvdGhlciBoYW5kLCBpdCBpcw0K PiA+PmFjY2VwdGFibGUgdGhhdCBhbnkgIHNvdXJjZSAoY2FjaGUpIHNob3VsZCBiZSBlcXVhbGx5 IHVzYWJsZS4gIFRoaXMNCj4gPj5yZXF1aXJlcyBzb21lIG1lY2hhbmlzbSBmb3IgIG1ha2luZyBl YWNoIGluZm9ybWF0aW9uIGl0ZW0gdHJ1c3R3b3J0aHkNCj4gPj5ieSBpdHNlbGYsIHdoaWNoIGNh biBiZSBhY2hpZXZlZCBmb3IgIGV4YW1wbGUgYnkgc2lnbmluZyBkYXRhLg0KPiA+PiBJbiB0aGlz IGNhc2UgYSBjb25zdW1lciBvZiBhbiBpbmZvcm1hdGlvbiBvYmplY3QgY291bGQgcHJvdmUgaXRz DQo+ID4+YXV0aGVudGljaXR5IGJ5ICB2ZXJpZnlpbmcgdGhlIGRpZ2l0YWwgc2lnbmF0dXJlLiAg QXBwbHlpbmcgSUNOIHRvIHRoZQ0KPiA+PklvVCBzZXR0aW5nLCBzZW5zb3IgIHJlYWRpbmdzIGNv dWxkIGJlIHByb3RlY3RlZCBhbmQgc3RvcmVkIGluDQo+ID4+YXJiaXRyYXJ5IGNvbnRlbnQgbm9k ZXMsIG5vdCAgbmVjZXNzYXJpbHkgb25seSBpbiBvcmlnaW4gc2VydmVyczsNCj4gPj5kZXZpY2Ug Y29uZmlndXJhdGlvbiB1cGRhdGVzIGNvdWxkIGJlICBwcm90ZWN0ZWQgYW5kIHN0b3JlZCBpbg0K PiA+PnByb3hpZXMsIG5vdCBuZWNlc3NhcmlseSBvbmx5IGluIGRlZGljYXRlZCAgY29uZmlndXJh dGlvbiBzZXJ2ZXJzLg0KPiA+Pg0KPiA+PiBTaW1pbGFyIHNlY3VyaXR5IHByb3BlcnRpZXMgYXBw bHkgYXMgaW4gdGhlIHByZXZpb3VzIGNhc2VzLg0KPiA+Pg0KPiA+Pg0KPiA+Pg0KPiA+PiBHw7Zy YW4NCj4gPj4NCj4gPj4NCj4gPj4NCj4gPj4gRnJvbTogIExpa2VwZW5nIDxsaWtlcGVuZ0BodWF3 ZWkuY29tPg0KPiA+PiBEYXRlOiAgV2VkbmVzZGF5IDI0IFNlcHRlbWJlciAyMDE0IDA5OjA2DQo+ ID4+IFRvOiAgImFjZUBpZXRmLm9yZyIgPGFjZUBpZXRmLm9yZz4NCj4gPj4gU3ViamVjdDogIFtB Y2VdIE5leHQgc3RlcCBmb3IgdXNlIGNhc2UgZG9jdW1lbnQNCj4gPj4NCj4gPj4NCj4gPj4gPlRo YW5rcyBhbGwgZm9yIHRoZSBmZWVkYmFja3MgdG8gdGhlIHVzZSBjYXNlIGRvY3VtZW50Og0KPiA+ PiA+aHR0cDovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1zZWl0ei1hY2UtdXNlY2Fz ZXMvDQo+ID4+ID4NCj4gPj4gPkhhbm5lcyBhbmQgSSB3ZW50IHRocm91Z2ggdGhlIGZlZWRiYWNr cyBpbiB0aGUgbWFpbGluZyBsaXN0Lg0KPiA+PiA+DQo+ID4+ID4NCj4gPj4gPkluIHN1bW1hcnks IHdlIGZlZWwgdGhhdCB0aGVyZSBpcyBubyBjb25zZW5zdXMgdG8gYWRvcHQgdGhlIGN1cnJlbnQN Cj4gPj4gPnZlcnNpb24gb2YgdGhpcyBkb2N1bWVudC4NCj4gPj4gPg0KPiA+PiA+Q29uc2lkZXJp bmcgdGhhdCB1c2UgY2FzZSBkb2N1bWVudCBpcyBvdXIgY2hhcnRlciBpdGVtLCBhbmQgdGhpcyBp cw0KPiA+PiA+dGhlIG9ubHkgdmlhYmxlIGNhbmRpZGF0ZSwgb3VyIHBsYW4gaXMgdG8gYXNrIGF1 dGhvcnMgdG8gdXBkYXRlIHRoZQ0KPiA+PiA+ZHJhZnQgYWNjb3JkaW5nIHRvIHRoZSByZWNlaXZl ZCBmZWVkYmFja3Mgc28gZmFyIGFuZCB3ZSB3aWxsDQo+ID4+ID5pbml0aWF0ZSBhbm90aGVyIGNh bGwtZm9yLWFkb3B0aW9uICBmb3IgdGhlIG5ldyB2ZXJzaW9uLg0KPiA+PiA+DQo+ID4+ID5BbHNv LCBraW5kbHkgcmVtaW5kIHlvdSB0byBjb250cmlidXRlIHlvdXIgdGV4dHMgdG8gdGhlIHVzZSBj YXNlDQo+ID4+ZG9jdW1lbnQuDQo+ID4+ID4NCj4gPj4gPlRoYW5rcywNCj4gPj4gPg0KPiA+PiA+ S2luZCBSZWdhcmRzDQo+ID4+ID5LZXBlbmcgJiBIYW5uZXMNCj4gPg0KDQo= From nobody Thu Oct 9 03:48:22 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C16771ACD4A; Thu, 9 Oct 2014 03:48:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.987 X-Spam-Level: X-Spam-Status: No, score=-4.987 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.786, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k-Ss90QZAcLw; Thu, 9 Oct 2014 03:48:19 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0075A1ACD3F; Thu, 9 Oct 2014 03:48:18 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml406-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BNL74014; Thu, 09 Oct 2014 10:48:17 +0000 (GMT) Received: from LHREML513-MBB.china.huawei.com ([fe80::b810:863:a57e:3ff]) by lhreml406-hub.china.huawei.com ([10.201.5.243]) with mapi id 14.03.0158.001; Thu, 9 Oct 2014 11:48:16 +0100 From: Hosnieh Rafiee To: "ace@ietf.org" Thread-Topic: some suggestions - clarification of ACE scope and secauth Thread-Index: AQHP466Hjbmt+uEqAkuKiz5ogU7rww== Date: Thu, 9 Oct 2014 10:48:15 +0000 Message-ID: <814D0BFB77D95844A01CA29B44CBF8A7A47504@lhreml513-mbb.china.huawei.com> References: <34966E97BE8AD64EAE9D3D6E4DEE36F2581A37D0@SZXEMA501-MBS.china.huawei.com> <34966E97BE8AD64EAE9D3D6E4DEE36F2581A3B0D@SZXEMA501-MBS.china.huawei.com> In-Reply-To: <34966E97BE8AD64EAE9D3D6E4DEE36F2581A3B0D@SZXEMA501-MBS.china.huawei.com> Accept-Language: zh-CN, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.221.82.100] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/ace/41YeesBI64fMjTLE2E-Wpd9OYIM Cc: "secauth@ietf.org" Subject: [Ace] some suggestions - clarification of ACE scope and secauth X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Oct 2014 10:48:20 -0000 SGksDQoNCkluIHNlY2F1dGggcmVxdWlyZW1lbnQgZHJhZnQsIHRoZXJlIGlzIHR3byByZXF1aXJl bWVudHMgdGhhdCBJIHN1Z2dlc3QgdG8gYmUgY29uc2lkZXJlZCBieSBBQ0UgaG93ZXZlciwgSWYg QUNFIGRvZXMgbm90IHdhbnQgdG8gd29yayBvbiB0aGVtLCAgSSB3aWxsIGtlZXAgaXQgaW4gc2Vj YXV0aC4NCg0KSGVyZSBpcyB0aGUgbGluayB0byBzZWNhdXRoIHJlcXVpcmVtZW50IGRyYWZ0Lg0K aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LXJhZmllZS1zZWNhdXRoLXVzZWNhc2Ut MDEgDQoNCg0KICAgU2NlbmFyaW8gMjogQWxpY2UncyB3YXNoIG1hY2hpbmUgdGVjaG5pY2FsbHkg aGFzIGEgcHJvYmxlbS4gSXRzDQogICBhcHBsaWNhdGlvbiB3YXMgY29uZmlndXJlZCBieSB0aGUg dmVuZG9ycz8gaW4gYSB3YXkgdG8gcmVwb3J0IHRoaXMNCiAgIHByb2JsZW0gYXV0b21hdGljYWxs eSB0byB0aGlyZCBwYXJ0eSB0ZWNobmljYWwgc2VydmljZSAocmVwYWlyDQogICBwbGFjZSkuIEJv dGggdGhlIHRlY2huaWNhbCBzZXJ2aWNlIGFwcGxpY2F0aW9uIGFuZCB3YXNoIG1hY2hpbmUgbmVl ZA0KICAgdG8gYXV0aGVudGljYXRlIGVhY2ggb3RoZXIgc28gdGhhdCB0aGV5IGNhbiB0cnVzdCBh bmQgZXhjaGFuZ2UNCiAgIGluZm9ybWF0aW9uLiBTaW5jZSB0aGUgYXBwbGljYXRpb24gYXJlIHVz dWFsbHkgaW1wbGVtZW50ZWQgYnkgdGhlDQogICB0aGlyZCBwYXJ0eSBhbmQgdGhlcmUgd2FzIG5v dCBtdWNoIGVmZm9ydCB0byBzZWN1cmUgdGhlDQogICBjb21tdW5pY2F0aW9ucyBiZXR3ZWVuIHRo ZSBkZXZpY2UgYW5kIHRoZSBhcHBsaWNhdGlvbiwgdGhlIHNlY3VyaXR5DQogICBvZiB0aGVtIGlz IGEgYmlnIGNvbmNlcm4uDQoNCkFsaWNlIHR1cm5lZCBvbiB0aGUgd2FzaCBtYWNoaW5lIGF0IGhv bWUgYW5kIHRoZW4gd2VudCB0byB3b3JrLiBBbGljZQ0KICAgY2FuIGNoZWNrIHRoZSBzdGF0dXMg b2YgdGhpcyB3YXNoIG1hY2hpbmUgdXNpbmcgYW4gYXBwbGljYXRpb24gb24gaGVyDQogICBTbWFy dHBob25lIHJlbW90ZWx5IGF0IGNvbXBhbnkgeC4gV2FzaCBtYWNoaW5lIGRvZXNuJ3Qgc3VwcG9y dCBhbnkNCiAgIGNlcnRpZmljYXRlcyBzaWduZWQgYnkgYSBDQS4gQWxpY2UgbmVlZHMgdG8gYmUg YXV0aGVudGljYXRlZCBpbiB0aGUNCiAgIHdhc2ggbWFjaGluZSBhbmQgd2FzaCBtYWNoaW5lIG5l ZWRzIHRvIHRydXN0IEFsaWNlIHRvIGFsbG93IGhlcg0KICAgY29udHJvbCBpdCByZW1vdGVseS4g U2luY2UgdGhlIGFwcGxpY2F0aW9uIGFyZSB1c3VhbGx5IHByb3ZpZGVkIGJ5DQogICB0aGlyZCBw YXJ0aWVzLCB0aGUgc2VjdXJpdHkgb2YgdGhpcyBjb21tdW5pY2F0aW9uIGlzIGltcG9ydGFudCBh bmQNCiAgIHRoZSBmaXJzdCBwb2ludCBvZiB0cnVzdCBpcyByZWFsbHkgaW1wb3J0YW50Lg0KDQpU aGFua3MsDQpCZXN0LA0KSG9zbmllaA0K From nobody Thu Oct 9 03:50:37 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 795F51ACD45; Thu, 9 Oct 2014 03:50:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.987 X-Spam-Level: X-Spam-Status: No, score=-4.987 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.786, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XCQTZzG8gYdC; Thu, 9 Oct 2014 03:50:31 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 369AC1ACD4B; Thu, 9 Oct 2014 03:50:31 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml405-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BNL74237; Thu, 09 Oct 2014 10:50:29 +0000 (GMT) Received: from LHREML513-MBB.china.huawei.com ([fe80::b810:863:a57e:3ff]) by lhreml405-hub.china.huawei.com ([10.201.5.242]) with mapi id 14.03.0158.001; Thu, 9 Oct 2014 11:50:28 +0100 From: Hosnieh Rafiee To: "ace@ietf.org" Thread-Topic: Correction: some suggestions - clarification of ACE scope and secauth Thread-Index: AQHP467W3DWWuTjMsECZBwmlAyg4rA== Date: Thu, 9 Oct 2014 10:50:27 +0000 Message-ID: <814D0BFB77D95844A01CA29B44CBF8A7A47526@lhreml513-mbb.china.huawei.com> References: <34966E97BE8AD64EAE9D3D6E4DEE36F2581A37D0@SZXEMA501-MBS.china.huawei.com> <34966E97BE8AD64EAE9D3D6E4DEE36F2581A3B0D@SZXEMA501-MBS.china.huawei.com> Accept-Language: zh-CN, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.221.82.100] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/ace/G8ol25OOjvw0DgKslnHeHTcveJE Cc: "secauth@ietf.org" Subject: [Ace] Correction: some suggestions - clarification of ACE scope and secauth X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Oct 2014 10:50:36 -0000 Rm9sbG93IHVwOg0KUmVxdWlyZW1lbnQgLT4gdXNlIGNhc2VzDQo= From nobody Fri Oct 10 01:48:38 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C8731A6F7D; Fri, 10 Oct 2014 01:48:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.149 X-Spam-Level: * X-Spam-Status: No, score=1.149 tagged_above=-999 required=5 tests=[BAYES_50=0.8, HELO_EQ_DE=0.35, SPF_HELO_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QCAmgD9wht_N; Fri, 10 Oct 2014 01:48:34 -0700 (PDT) Received: from informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AC6CE1A6FB9; Fri, 10 Oct 2014 01:48:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from smtp-fb3.informatik.uni-bremen.de (smtp-fb3.informatik.uni-bremen.de [134.102.224.120]) by informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id s9A8ltZC023878; Fri, 10 Oct 2014 10:47:56 +0200 (CEST) Received: from [134.102.218.214] (dynamic-218-o.informatik.uni-bremen.de [134.102.218.214]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by smtp-fb3.informatik.uni-bremen.de (Postfix) with ESMTPSA id B2CA293; Fri, 10 Oct 2014 10:47:55 +0200 (CEST) Message-ID: <54379D37.6060609@tzi.de> Date: Fri, 10 Oct 2014 10:47:51 +0200 From: Stefanie Gerdes User-Agent: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 To: Hosnieh Rafiee , "ace@ietf.org" References: <34966E97BE8AD64EAE9D3D6E4DEE36F2581A37D0@SZXEMA501-MBS.china.huawei.com> <34966E97BE8AD64EAE9D3D6E4DEE36F2581A3B0D@SZXEMA501-MBS.china.huawei.com> <814D0BFB77D95844A01CA29B44CBF8A7A47504@lhreml513-mbb.china.huawei.com> In-Reply-To: <814D0BFB77D95844A01CA29B44CBF8A7A47504@lhreml513-mbb.china.huawei.com> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Archived-At: http://mailarchive.ietf.org/arch/msg/ace/ihPPhm476-2vkBDtOG3m2HyeBYc Cc: "secauth@ietf.org" Subject: Re: [Ace] some suggestions - clarification of ACE scope and secauth X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Oct 2014 08:48:36 -0000 Hi Hosnieh, Thank you for your suggestions. I am not sure if I completely understand which part of your scenario you want us to integrate into the use cases document. Some questions inline. On 10/09/2014 12:48 PM, Hosnieh Rafiee wrote: > Hi, > > In secauth requirement draft, there is two requirements that I suggest to be considered by ACE however, If ACE does not want to work on them, I will keep it in secauth. > > Here is the link to secauth requirement draft. > https://tools.ietf.org/html/draft-rafiee-secauth-usecase-01 > > > Scenario 2: Alice's wash machine technically has a problem. Its > application was configured by the vendors? in a way to report this > problem automatically to third party technical service (repair > place). Both the technical service application and wash machine need > to authenticate each other so that they can trust and exchange > information. Why does the washing machine contact the repair service and not Alice herself? She would have to make an appointment with them anyway if the machine is broken. > Since the application are usually implemented by the > third party and there was not much effort to secure the > communications between the device and the application, the security > of them is a big concern. > > Alice turned on the wash machine at home and then went to work. Alice > can check the status of this wash machine using an application on her > Smartphone remotely at company x. Wash machine doesn't support any > certificates signed by a CA. Alice needs to be authenticated in the > wash machine and wash machine needs to trust Alice to allow her > control it remotely. Since the application are usually provided by > third parties, the security of this communication is important and > the first point of trust is really important. Which authorization problem do you want to solve here? Please have a look at section 2.2.1. in [1]. Do you want to address an authorization problem that is not already covered here? Thanks, Steffi From nobody Fri Oct 10 01:51:09 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 516101A6FE5; Fri, 10 Oct 2014 01:51:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.348 X-Spam-Level: X-Spam-Status: No, score=0.348 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, HELO_EQ_DE=0.35, SPF_HELO_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wmKl-Y_pblT6; Fri, 10 Oct 2014 01:51:06 -0700 (PDT) Received: from informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 01A731A6FA9; Fri, 10 Oct 2014 01:51:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from smtp-fb3.informatik.uni-bremen.de (smtp-fb3.informatik.uni-bremen.de [134.102.224.120]) by informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id s9A8opgV002656; Fri, 10 Oct 2014 10:50:51 +0200 (CEST) Received: from [134.102.218.214] (dynamic-218-o.informatik.uni-bremen.de [134.102.218.214]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by smtp-fb3.informatik.uni-bremen.de (Postfix) with ESMTPSA id 68D4096; Fri, 10 Oct 2014 10:50:51 +0200 (CEST) Message-ID: <54379DEB.6070303@tzi.de> Date: Fri, 10 Oct 2014 10:50:51 +0200 From: Stefanie Gerdes User-Agent: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 To: Hosnieh Rafiee , "ace@ietf.org" References: <34966E97BE8AD64EAE9D3D6E4DEE36F2581A37D0@SZXEMA501-MBS.china.huawei.com> <34966E97BE8AD64EAE9D3D6E4DEE36F2581A3B0D@SZXEMA501-MBS.china.huawei.com> <814D0BFB77D95844A01CA29B44CBF8A7A47504@lhreml513-mbb.china.huawei.com> <54379D37.6060609@tzi.de> In-Reply-To: <54379D37.6060609@tzi.de> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit Archived-At: http://mailarchive.ietf.org/arch/msg/ace/L9nj9_OqlviXvJuQ0Nm4xtH_lyY Cc: "secauth@ietf.org" Subject: Re: [Ace] some suggestions - clarification of ACE scope and secauth X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Oct 2014 08:51:07 -0000 [1] https://tools.ietf.org/id/draft-seitz-ace-usecases-01.txt On 10/10/2014 10:47 AM, Stefanie Gerdes wrote: > Hi Hosnieh, > > Thank you for your suggestions. I am not sure if I completely understand > which part of your scenario you want us to integrate into the use cases > document. Some questions inline. > > On 10/09/2014 12:48 PM, Hosnieh Rafiee wrote: >> Hi, >> >> In secauth requirement draft, there is two requirements that I suggest to be considered by ACE however, If ACE does not want to work on them, I will keep it in secauth. >> >> Here is the link to secauth requirement draft. >> https://tools.ietf.org/html/draft-rafiee-secauth-usecase-01 >> >> >> Scenario 2: Alice's wash machine technically has a problem. Its >> application was configured by the vendors? in a way to report this >> problem automatically to third party technical service (repair >> place). Both the technical service application and wash machine need >> to authenticate each other so that they can trust and exchange >> information. > > Why does the washing machine contact the repair service and not Alice > herself? She would have to make an appointment with them anyway if the > machine is broken. > >> Since the application are usually implemented by the >> third party and there was not much effort to secure the >> communications between the device and the application, the security >> of them is a big concern. >> >> Alice turned on the wash machine at home and then went to work. Alice >> can check the status of this wash machine using an application on her >> Smartphone remotely at company x. Wash machine doesn't support any >> certificates signed by a CA. Alice needs to be authenticated in the >> wash machine and wash machine needs to trust Alice to allow her >> control it remotely. Since the application are usually provided by >> third parties, the security of this communication is important and >> the first point of trust is really important. > > > Which authorization problem do you want to solve here? Please have a > look at section 2.2.1. in [1]. Do you want to address an authorization > problem that is not already covered here? > > Thanks, > Steffi > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > -- Stefanie Gerdes Tel: +49 421 218 63906 TZI Universität Bremen E-Mail: gerdes@tzi.de Bibliothekstr. 1, MZH 5150 28359 Bremen, Germany From nobody Fri Oct 10 02:58:49 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 10BAB1A87B9; Fri, 10 Oct 2014 02:58:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.987 X-Spam-Level: X-Spam-Status: No, score=-4.987 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.786, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mD2cv8XRlSju; Fri, 10 Oct 2014 02:58:46 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 46BCC1A87B3; Fri, 10 Oct 2014 02:58:46 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml403-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BNM67938; Fri, 10 Oct 2014 09:58:36 +0000 (GMT) Received: from LHREML513-MBB.china.huawei.com ([fe80::b810:863:a57e:3ff]) by lhreml403-hub.china.huawei.com ([::1]) with mapi id 14.03.0158.001; Fri, 10 Oct 2014 10:58:31 +0100 From: Hosnieh Rafiee To: Stefanie Gerdes , "ace@ietf.org" Thread-Topic: [Ace] some suggestions - clarification of ACE scope and secauth Thread-Index: AQHP466Hjbmt+uEqAkuKiz5ogU7rw5wo9Z+AgAARRzA= Date: Fri, 10 Oct 2014 09:58:31 +0000 Message-ID: <814D0BFB77D95844A01CA29B44CBF8A7A47A47@lhreml513-mbb.china.huawei.com> References: <34966E97BE8AD64EAE9D3D6E4DEE36F2581A37D0@SZXEMA501-MBS.china.huawei.com> <34966E97BE8AD64EAE9D3D6E4DEE36F2581A3B0D@SZXEMA501-MBS.china.huawei.com> <814D0BFB77D95844A01CA29B44CBF8A7A47504@lhreml513-mbb.china.huawei.com> <54379D37.6060609@tzi.de> In-Reply-To: <54379D37.6060609@tzi.de> Accept-Language: zh-CN, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.221.82.100] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/ace/5cK7S3vQKPsHuy-DdkUFlvYG8Cc Cc: "secauth@ietf.org" Subject: Re: [Ace] some suggestions - clarification of ACE scope and secauth X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Oct 2014 09:58:48 -0000 Hi Stefanie, Thanks for your message. My responses inline >=20 > Thank you for your suggestions. I am not sure if I completely > understand which part of your scenario you want us to integrate into > the use cases document. Some questions inline. Just these two use cases that I explicitly included in my message. Because = Kathleen reviewed secauth requirement and one of her question about these u= se cases that it might be covered by ACE.=20 > > Scenario 2: Alice's wash machine technically has a problem. Its > > application was configured by the vendors? in a way to report this > > problem automatically to third party technical service (repair > > place). Both the technical service application and wash machine > need > > to authenticate each other so that they can trust and exchange > > information. >=20 > Why does the washing machine contact the repair service and not Alice > herself? She would have to make an appointment with them anyway if the > machine is broken. This is based on an article I read about "talking home devices and privacy = and security concerns. This article was based on researches of one of the = owner of new smart wash machines who was concerned about the information se= nt back and forth by wash machine to x locations. In that article it also e= xplained the ability of a smart wash machine that sends its problems to rep= air service centers automatically and explains the remaining concerns about= the security of such applications since the producers only outsource them = without much supervision on their security.=20 The scenario which you explained is a bit different (only the end point is = different) however, IMO, the security of that can be considered in a same w= ay. =20 > > Since the application are usually implemented by the > > third party and there was not much effort to secure the > > communications between the device and the application, the > security > > of them is a big concern. > > > > Alice turned on the wash machine at home and then went to work. Alice > > can check the status of this wash machine using an application on > her > > Smartphone remotely at company x. Wash machine doesn't support any > > certificates signed by a CA. Alice needs to be authenticated in > the > > wash machine and wash machine needs to trust Alice to allow her > > control it remotely. Since the application are usually provided by > > third parties, the security of this communication is important and > > the first point of trust is really important. >=20 >=20 > Which authorization problem do you want to solve here? Please have a > look at section 2.2.1. in [1]. Do you want to address an authorization > problem that is not already covered here? >=20 I checked ACE use case section 2.2.1. It appears that the use case only con= sidered authorization and not authentication. So it seems that it presumed = the authentication of Jane have already done and Jane only needs to authori= ze Jeffery to access some resources. I have a question for you. I haven't read the new version of OAuth document= s but such authorization scenarios might already considered by Oauth. Maybe= it is good to check with them if it wasn't done before.=20 Thanks, Best, Hosnieh From nobody Sat Oct 11 23:53:29 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3557D1A88F2; Sat, 11 Oct 2014 23:53:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.551 X-Spam-Level: X-Spam-Status: No, score=-1.551 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, SPF_HELO_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CQJ-YRyTlz9j; Sat, 11 Oct 2014 23:53:26 -0700 (PDT) Received: from informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 35E011A1AFB; Sat, 11 Oct 2014 23:53:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from smtp-fb3.informatik.uni-bremen.de (smtp-fb3.informatik.uni-bremen.de [134.102.224.120]) by informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id s9C6rMaY013548; Sun, 12 Oct 2014 08:53:22 +0200 (CEST) Received: from [192.168.217.145] (p54891112.dip0.t-ipconnect.de [84.137.17.18]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtp-fb3.informatik.uni-bremen.de (Postfix) with ESMTPSA id 03B8DA6D; Sun, 12 Oct 2014 08:53:21 +0200 (CEST) Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Carsten Bormann In-Reply-To: Date: Sun, 12 Oct 2014 08:53:20 +0200 X-Mao-Original-Outgoing-Id: 434789600.561424-2f9352141ba1efcc42ed177ff36ff23b Content-Transfer-Encoding: quoted-printable Message-Id: <0B1527DE-D410-421C-9870-EFA120F1AEA0@tzi.org> References: To: "StJohns, Michael" X-Mailer: Apple Mail (2.1878.6) Archived-At: http://mailarchive.ietf.org/arch/msg/ace/jFjgVWqgNhKk8x-6WyJL0kIC7Bw Cc: "dtls-iot@ietf.org" , ace@ietf.org Subject: Re: [Ace] [Dtls-iot] Interesting article on IOT security from real world liability perspective X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 12 Oct 2014 06:53:28 -0000 On 12 Oct 2014, at 07:11, StJohns, Michael = wrote: > = http://money.cnn.com/2014/10/08/technology/security/internet-of-things-sec= urity/index.html?iid=3DHP_LN&hpt=3Dhp_bn5 If you take the effort to look at the vulnerabilities reported, it is = interesting to see that they are all exploiting the lame security model = for today=92s home networks: A single shared-key WiFi password that = grants access to everything. The LiFX vulnerability was caused by the light bulbs needing to tell = each other that shared-key WiFi password over the (unsecured) 802.15.4 = network. (Well, it was dumb enough to communicate that key in an = unsecured fashion, but the damage that LiFX could cause was much worse = due to the sensitivity of the WiFi key.) The Belkin camera vulnerability was caused by handing out the permanent = keys for cloud access to the camera to anyone that had access to the = WiFi network, even temporarily. (That was probably considered OK = because the shared-key protected home network is =93secure=94, no?) Instead of having this simple-minded perimeter security, we need to move = to real, authenticated authorization. That=92s what ACE is about. Of course, as long as the IoT devices need the WiFi password to access = the network, and other devices in the home rely on lame WiFi perimeter = security, those other devices will remain vulnerable to any bugs in the = IoT devices. If you want to keep those lame other devices, the only = solution here is to firewall them off. (Using IPv6 for the IoT devices = helps quite a way here.) The next time you read one of those dime-a-dozen articles about =93IoT = security=94, read closer and find out they are really a lament about = today=92s lame home network security model. Gr=FC=DFe, Carsten From nobody Sun Oct 12 01:40:51 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 75E6F1A8956; Sun, 12 Oct 2014 01:40:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.551 X-Spam-Level: X-Spam-Status: No, score=-1.551 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, SPF_HELO_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mTBwLSVLyPRY; Sun, 12 Oct 2014 01:40:37 -0700 (PDT) Received: from informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9D06D1A1B69; Sun, 12 Oct 2014 01:40:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from smtp-fb3.informatik.uni-bremen.de (smtp-fb3.informatik.uni-bremen.de [134.102.224.120]) by informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id s9C8eXPj015897; Sun, 12 Oct 2014 10:40:33 +0200 (CEST) Received: from [192.168.217.106] (p54891112.dip0.t-ipconnect.de [84.137.17.18]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtp-fb3.informatik.uni-bremen.de (Postfix) with ESMTPSA id 66B0CABA; Sun, 12 Oct 2014 10:40:32 +0200 (CEST) Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Carsten Bormann In-Reply-To: <63722FD9-BA11-48E6-951A-7A3823F5EFD5@tzi.org> Date: Sun, 12 Oct 2014 10:40:30 +0200 X-Mao-Original-Outgoing-Id: 434796030.617112-58a1dc33bdaf36152d29474fb6880c05 Content-Transfer-Encoding: quoted-printable Message-Id: <300A8653-4B32-40AB-8DB3-EE8EA3F1C2C7@tzi.org> References: <63722FD9-BA11-48E6-951A-7A3823F5EFD5@tzi.org> To: dtls-iot@ietf.org, core , ace@ietf.org, "6lo@ietf.org WG" <6lo@ietf.org>, lwip@ietf.org X-Mailer: Apple Mail (2.1878.6) Archived-At: http://mailarchive.ietf.org/arch/msg/ace/0zhb6zc8nrkh0Q7CW7b4qFm-FGc Subject: [Ace] Constrained Node/Network Cluster @ IETF91, early draft version X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 12 Oct 2014 08:40:41 -0000 A first draft version of the IETF91 agenda is out. ** THIS IS GOING TO CHANGE ** for conflict resolution, so please don't make travel arrangements based on it. Here is my usual eclectic condensed agenda built from that. =20 I notice there is no ROLL meeting in the agenda. The Constrained Node/Network group meetings are nicely spread out over = Mon-Thu, with a peak on Wednesday. I hope the social is bad, because that is about the only time between = the two CoRE meetings... All times are HST (UTC-1000) (use = https://datatracker.ietf.org/meeting/agenda-utc and press the button to = get your local time in case you want to listen in from remote). Gr=FC=DFe, Carsten MONDAY, November 10, 2014 0900-1130 Morning Session I Coral 2 APP appsawg Applications Area Working Group WG - = Combined with APPAREA Coral 4 OPS v6ops IPv6 Operations WG 1300-1500 Afternoon Session I Coral 4 RTG bier Bit Indexed Explicit Replication BOF 1520-1720 Afternoon Session II Coral 1 INT detnet Deterministic Networking BOF Coral 5 OPS anima Autonomic Networking Integrated Model = and Approach BOF Coral 3 OPS v6ops IPv6 Operations WG 1730-1830 Afternoon Session III Coral 5 OPS anima Autonomic Networking Integrated Model = and Approach BOF Coral 1 SEC *** dice DTLS In Constrained Environments WG TUESDAY, November 11, 2014 0900-1130 Morning Session I Coral 2 APP uta Using TLS in Applications WG Kahili 1/2 INT *** 6lo IPv6 over Networks of = Resource-constrained Nodes WG Coral 5 TSV tsvarea Transport Area Open Meeting 1300-1500 Afternoon Session I Coral 1 APP httpbis Hypertext Transfer Protocol WG Coral 4 RTG rtgarea Routing Area Open Meeting Coral 2 TSV tsvwg Transport Area Working Group WG 1520-1720 Afternoon Session II Coral 2 APP *** core Constrained RESTful Environments WG Coral 5 RAI webpush Web-Based Push Notifications WG WEDNESDAY, November 12, 2014 0900-1130 Morning Session I Kahili 1/2 APP *** core Constrained RESTful Environments WG Coral 3 INT homenet Home Networking WG Lehua Suite SEC oauth Web Authorization Protocol WG Coral 4 TSV rmcat RTP Media Congestion Avoidance = Techniques WG 1300-1500 Afternoon Session I Coral 5 SEC *** ace Authentication and Authorization for = Constrained Environments WG 1520-1650 Afternoon Session II Coral 4 APP httpbis Hypertext Transfer Protocol WG Kahili 1/2 INT *** 6tisch IPv6 over the TSCH mode of IEEE = 802.15.4e WG THURSDAY, November 13, 2014 0900-1130 Morning Session I Coral 5 SEC tls Transport Layer Security WG Coral 2 TSV taps Transport Services WG 1300-1500 Afternoon Session I Coral 4 INT dnssd Extensions for Scalable DNS Service = Discovery WG Coral 3 SEC saag Security Area Open Meeting Coral 1 TSV tsvwg Transport Area Working Group WG 1520-1620 Afternoon Session II Coral 4 INT *** lwig Light-Weight Implementation Guidance WG FRIDAY, November 14, 2014 0900-1130 Morning Session I Coral 3 INT 6man IPv6 Maintenance WG Coral 1 TSV tcpinc TCP Increased Security WG 1150-1320 Afternoon Session I Coral 4 INT intarea Internet Area Working Group WG Coral 2 SEC httpauth Hypertext Transfer Protocol = Authentication WG From nobody Sun Oct 12 17:17:05 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B3F91A90F1 for ; Sun, 12 Oct 2014 13:11:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=unavailable Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wnDAPV-gp8_r for ; Sun, 12 Oct 2014 13:11:05 -0700 (PDT) Received: from mail-qc0-f169.google.com (mail-qc0-f169.google.com [209.85.216.169]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1A27F1A8772 for ; Sun, 12 Oct 2014 13:11:03 -0700 (PDT) Received: by mail-qc0-f169.google.com with SMTP id o8so4225749qcw.28 for ; Sun, 12 Oct 2014 13:11:03 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :cc:subject:references:in-reply-to:content-type :content-transfer-encoding; bh=vW/qN15vVZ96V1Iv0qfGDeuhByWhazc7kz5NvBwsTIU=; b=WWwadgH8DBQVpTKZQOhgiEfIA5WDUeqLmdQbPyogn8L/XTt3CZXbYtI+va9IrpFsJG 7X8NlReGjqD8672Eq2/v8nrDvLuAETq8ZrjAJu97cohsJoREOmqfcMzIO4mSO2kiYIcJ 6cZsq02nDuZU3ISS5OPR61XNRAJpI7LeR2ZkzHdorkCtcIRETwfZgZpoRH2VBG5AYh7N voLTzCfgcJXwN1bHesoGaBu0wpq705CwK/BNIQxB+Q9r/l5uwbmEDfOTeRngzERGCabA CCPJ2Y1iEPruXz7GOy2CVFLWj2oLff8Go0rl2T0vJXdmWzs8W+5JubY419h+VrKOALVd 6KXA== X-Gm-Message-State: ALoCoQlPYNzLkZzDL3JmZdoGYxg/phIAZMpa2NoQSU/vhk063V0EbK+4aYyS+87gnaDiH0A8ivww X-Received: by 10.229.29.3 with SMTP id o3mr33226892qcc.10.1413144663074; Sun, 12 Oct 2014 13:11:03 -0700 (PDT) Received: from ?IPv6:2601:a:2a00:e7:a9a3:fe68:413b:c049? ([2601:a:2a00:e7:a9a3:fe68:413b:c049]) by mx.google.com with ESMTPSA id 17sm10789086qgj.32.2014.10.12.13.11.02 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Sun, 12 Oct 2014 13:11:02 -0700 (PDT) Message-ID: <543AE069.7040407@nthpermutation.com> Date: Sun, 12 Oct 2014 16:11:21 -0400 From: Michael StJohns User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.1.2 MIME-Version: 1.0 To: Carsten Bormann References: <0B1527DE-D410-421C-9870-EFA120F1AEA0@tzi.org> In-Reply-To: <0B1527DE-D410-421C-9870-EFA120F1AEA0@tzi.org> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit Archived-At: http://mailarchive.ietf.org/arch/msg/ace/Rwhe63vJVGY8N_v-KJeGoIiz2ko X-Mailman-Approved-At: Sun, 12 Oct 2014 17:17:03 -0700 Cc: "dtls-iot@ietf.org" , ace@ietf.org Subject: Re: [Ace] [Dtls-iot] Interesting article on IOT security from real world liability perspective X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 12 Oct 2014 20:11:06 -0000 On 10/12/2014 2:53 AM, Carsten Bormann wrote: > On 12 Oct 2014, at 07:11, StJohns, Michael wrote: > >> http://money.cnn.com/2014/10/08/technology/security/internet-of-things-security/index.html?iid=HP_LN&hpt=hp_bn5 > If you take the effort to look at the vulnerabilities reported, it is interesting to see that they are all exploiting the lame security model for today’s home networks: A single shared-key WiFi password that grants access to everything. > > The LiFX vulnerability was caused by the light bulbs needing to tell each other that shared-key WiFi password over the (unsecured) 802.15.4 network. (Well, it was dumb enough to communicate that key in an unsecured fashion, but the damage that LiFX could cause was much worse due to the sensitivity of the WiFi key.) > > The Belkin camera vulnerability was caused by handing out the permanent keys for cloud access to the camera to anyone that had access to the WiFi network, even temporarily. (That was probably considered OK because the shared-key protected home network is “secure”, no?) > > Instead of having this simple-minded perimeter security, we need to move to real, authenticated authorization. That’s what ACE is about. > > Of course, as long as the IoT devices need the WiFi password to access the network, and other devices in the home rely on lame WiFi perimeter security, those other devices will remain vulnerable to any bugs in the IoT devices. If you want to keep those lame other devices, the only solution here is to firewall them off. (Using IPv6 for the IoT devices helps quite a way here.) > > The next time you read one of those dime-a-dozen articles about “IoT security”, read closer and find out they are really a lament about today’s lame home network security model. > > Grüße, Carsten > It's kind of interesting how different my take away was from yours. (And, yes, I did read the article and read it closely so please give me the benefit of the doubt that I knew what I was doing when I offered the article instead of suggesting I didn't understand what I was reading). I didn't/don't really care that a vulnerability was related to X or Y, but that the vendor knew that its scheme was weak and provided the product anyway. The article wasn't about IOT security technology and I didn't present it as that (note the words "real world liability perspective" in the subject), but was an interesting look into the "ship or die" mentalities in a lot of product companies as it affects provision of good security technology in consumer products. All of the products were/are considered "IOT" or IOT precursors. All of them were provided with about the cheapest security possible, at least partly because that security was in wide deployment. There's no evidence that the product companies actually looked at the threat models for the environment that their products were going to be in. That's a continuing problem for companies, and sometimes a problem for the IETF and its working groups. Later, Mike From nobody Mon Oct 13 02:14:36 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE43F1A6F33; Mon, 13 Oct 2014 02:14:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.551 X-Spam-Level: X-Spam-Status: No, score=-1.551 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, SPF_HELO_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ok3mm8d6JsiA; Mon, 13 Oct 2014 02:14:34 -0700 (PDT) Received: from informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB4111A6F2B; Mon, 13 Oct 2014 02:14:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from smtp-fb3.informatik.uni-bremen.de (smtp-fb3.informatik.uni-bremen.de [134.102.224.120]) by informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id s9D9ESsf009085; Mon, 13 Oct 2014 11:14:28 +0200 (CEST) Received: from [134.102.218.214] (dynamic-218-o.informatik.uni-bremen.de [134.102.218.214]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by smtp-fb3.informatik.uni-bremen.de (Postfix) with ESMTPSA id 655EAF6; Mon, 13 Oct 2014 11:14:28 +0200 (CEST) Message-ID: <543B97F1.9010207@tzi.de> Date: Mon, 13 Oct 2014 11:14:25 +0200 From: Stefanie Gerdes User-Agent: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 To: Michael StJohns , Carsten Bormann References: <0B1527DE-D410-421C-9870-EFA120F1AEA0@tzi.org> <543AE069.7040407@nthpermutation.com> In-Reply-To: <543AE069.7040407@nthpermutation.com> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Archived-At: http://mailarchive.ietf.org/arch/msg/ace/G_OrY0MQUOBJt64dqmG-a0-mrvk Cc: "dtls-iot@ietf.org" , ace@ietf.org Subject: Re: [Ace] [Dtls-iot] Interesting article on IOT security from real world liability perspective X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Oct 2014 09:14:36 -0000 Hi Mike, On 10/12/2014 10:11 PM, Michael StJohns wrote: > On 10/12/2014 2:53 AM, Carsten Bormann wrote: >> On 12 Oct 2014, at 07:11, StJohns, Michael >> wrote: >> >>> http://money.cnn.com/2014/10/08/technology/security/internet-of-things-security/index.html?iid=HP_LN&hpt=hp_bn5 The article seems a bit sensation-seeking to me.. what exactly was your point in posting it? If your intent is to point out that we need security even for the smallest devices, I completely agree with you. If you want to point out that it is easy to do security wrong, I also agree with you. I think one big problem in current developments in this area is that there are no standardized security solutions for devices with strong limitations in terms of processing power, storage space etc. Vendors will come up with their own solutions which likely will have a lot of security problems. We could decide to refuse to develop protocols for this type of devices and let those people go on with their own solution (I don't really expect them to stop using those devices). Or we can design protocols that are able to cope with the limitations of the devices and provide the best possible security. Best regards, Steffi From nobody Mon Oct 13 03:22:08 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7EFE01A8969; Mon, 13 Oct 2014 03:22:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xQvSdrxkqs68; Mon, 13 Oct 2014 03:21:58 -0700 (PDT) Received: from mailscan1.extendcp.co.uk (mailscan3.extendcp.co.uk [79.170.43.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 684BC1A6F93; Mon, 13 Oct 2014 03:21:58 -0700 (PDT) Received: from lb1.hi.local ([10.0.1.197] helo=mailscan2.extendcp.co.uk) by mailscan-g67.hi.local with esmtp (Exim 4.80.1) (envelope-from ) id 1XdclI-0008RC-EE; Mon, 13 Oct 2014 11:21:56 +0100 Received: from lb1.hi.local ([10.0.1.197] helo=mail41.extendcp.co.uk) by mailscan2.extendcp.co.uk with esmtps (UNKNOWN:DHE-RSA-AES256-GCM-SHA384:256) (Exim 4.80.1) (envelope-from ) id 1XdclG-0000vq-3s; Mon, 13 Oct 2014 11:21:56 +0100 Received: from host81-132-242-250.range81-132.btcentralplus.com ([81.132.242.250] helo=[192.168.0.2]) by mail41.extendcp.com with esmtpsa (TLSv1:DHE-RSA-AES128-SHA:128) (Exim 4.80.1) id 1XdclD-0004Xk-8U; Mon, 13 Oct 2014 11:21:51 +0100 Message-ID: <543BA7BC.7040900@gridmerge.com> Date: Mon, 13 Oct 2014 11:21:48 +0100 From: Robert Cragie Organization: Gridmerge Ltd. User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: Stefanie Gerdes , Michael StJohns , Carsten Bormann References: <0B1527DE-D410-421C-9870-EFA120F1AEA0@tzi.org> <543AE069.7040407@nthpermutation.com> <543B97F1.9010207@tzi.de> In-Reply-To: <543B97F1.9010207@tzi.de> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms070609050506080503040105" X-Authenticated-As: robert.cragie@gridmerge.com X-Extend-Src: mailout Archived-At: http://mailarchive.ietf.org/arch/msg/ace/IY3obPyvGLGCbYU_qmm5QqIYyos Cc: "dtls-iot@ietf.org" , ace@ietf.org Subject: Re: [Ace] [Dtls-iot] Interesting article on IOT security from real world liability perspective X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: robert.cragie@gridmerge.com List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Oct 2014 10:22:04 -0000 This is a cryptographically signed message in MIME format. --------------ms070609050506080503040105 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: quoted-printable I think Mike's "ship or die" comment is very relevant. The problem with=20 security is that it is not necessary to have it to function. A door=20 without a lock is still a door. Therefore, the easiest corner to cut for = a product is security as it is still possible to show products working=20 without security in place. From that point of view, it is inevitable=20 that early releases of products will have vulnerabilities, some of them=20 significant. This will lead to sensationalist articles such as this,=20 promoting the services of "security experts" who often have some snake=20 oil solution which will cure everything. However, I agree that the presence of standards and and subsequent=20 multi-vendor support building it in to platforms, especially constrained = platforms, will make it easier to produce products with "invisible=20 security", i.e. baked in and virtually transparent to the actual=20 function of the product. There is some way to go before we get there but = that should be the goal and hopefully the ACE WG will help to achieve=20 that goal. Robert On 13/10/2014 10:14 AM, Stefanie Gerdes wrote: > Hi Mike, > > > On 10/12/2014 10:11 PM, Michael StJohns wrote: >> On 10/12/2014 2:53 AM, Carsten Bormann wrote: >>> On 12 Oct 2014, at 07:11, StJohns, Michael >>> wrote: >>> >>>> http://money.cnn.com/2014/10/08/technology/security/internet-of-thin= gs-security/index.html?iid=3DHP_LN&hpt=3Dhp_bn5 > The article seems a bit sensation-seeking to me.. what exactly was your= > point in posting it? If your intent is to point out that we need > security even for the smallest devices, I completely agree with you. If= > you want to point out that it is easy to do security wrong, I also agre= e > with you. > > I think one big problem in current developments in this area is that > there are no standardized security solutions for devices with strong > limitations in terms of processing power, storage space etc. Vendors > will come up with their own solutions which likely will have a lot of > security problems. > > We could decide to refuse to develop protocols for this type of devices= > and let those people go on with their own solution (I don't really > expect them to stop using those devices). Or we can design protocols > that are able to cope with the limitations of the devices and provide > the best possible security. > > Best regards, > Steffi > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > --------------ms070609050506080503040105 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIRnzCC BXQwggRcoAMCAQICECdm7lbrSfOOq9dwovyE3iIwDQYJKoZIhvcNAQEMBQAwbzELMAkGA1UE BhMCU0UxFDASBgNVBAoTC0FkZFRydXN0IEFCMSYwJAYDVQQLEx1BZGRUcnVzdCBFeHRlcm5h bCBUVFAgTmV0d29yazEiMCAGA1UEAxMZQWRkVHJ1c3QgRXh0ZXJuYWwgQ0EgUm9vdDAeFw0w MDA1MzAxMDQ4MzhaFw0yMDA1MzAxMDQ4MzhaMIGFMQswCQYDVQQGEwJHQjEbMBkGA1UECBMS R3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRowGAYDVQQKExFDT01PRE8g Q0EgTGltaXRlZDErMCkGA1UEAxMiQ09NT0RPIFJTQSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0 eTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJHoVJLSClaxrA0k3cXPRGd0mSs3 o30jcABxvFPfxPoqEo9LfxBWvZ9wcrdhf8lLDxenPeOwBGHu/xGXx/SGPgr6Plz5k+Y0etkU a+ecs4Wggnp2r3GQ1+z9DfqcbPrfsIL0FH75vsSmL09/mX+1/GdDcr0MANaJ62ss0+2PmBwU q37l42782KjkkiTaQ2tiuFX96sG8bLaL8w6NmuSbbGmZ+HhIMEXVreENPEVg/DKWUSe8Z8PK LrZr6kbHxyCgsR9l3kgIuqROqfKDRjeE6+jMgUhDZ05yKptcvUwbKIpcInu0q5jZ7uBRg8MJ Rk5tPpn6lRfafDNXQTyNUe0LtlyvLGMa31fIP7zpXcSbr0WZ4qNaJLS6qVY9z2+q/0lYvvCo //S4rek3+7q49As6+ehDQh6J2ITLE/HZu+GJYLiMKFasFB2cCudx688O3T2plqFIvTz3r7UN IkzAEYHsVjv206LiW7eyBCJSlYCTaeiOTGXxkQMtcHQC6otnFSlpUgK7199QalVGv6CjKGF/ cNDDoqosIapHziicBkV2v4IYJ7TVrrTLUOZr9EyGcTDppt8WhuDY/0Dd+9BCiH+jMzouXB5B EYFjzhhxayvspoq3MVw6akfgw3lZ1iAar/JqmKpyvFdK0kuduxD8sExB5e0dPV4onZzMv7NR 2qdH5YRTAgMBAAGjgfQwgfEwHwYDVR0jBBgwFoAUrb2YejS0Jvf6xCZU7wO94CTLVBowHQYD VR0OBBYEFLuvfgI9+qbxPISOre44mOzZMjLUMA4GA1UdDwEB/wQEAwIBhjAPBgNVHRMBAf8E BTADAQH/MBEGA1UdIAQKMAgwBgYEVR0gADBEBgNVHR8EPTA7MDmgN6A1hjNodHRwOi8vY3Js LnVzZXJ0cnVzdC5jb20vQWRkVHJ1c3RFeHRlcm5hbENBUm9vdC5jcmwwNQYIKwYBBQUHAQEE KTAnMCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMA0GCSqGSIb3DQEB DAUAA4IBAQBkv4PxX5qF0M24oSlXDeha99HpPvJ2BG7xUnC7Hjz/TQ10asyBgiXTw6AqXUz1 uouhbcRUCXXH4ycOXYR5N0ATd/W0rBzQO6sXEtbvNBh+K+l506tXRQyvKPrQ2+VQlYi734VX aX2S2FLKc4G/HPPmuG5mEQWzHpQtf5GVklnxTM6jkXFMfEcMOwsZ9qGxbIY+XKrELoLL+QeW ukhNkPKUyKlzousGeyOd3qLzTVWfemFFmBhox15AayP1eXrvjLVri7dvRvR78T1LBNiTgFla 4EEkHbKPFWBYR9vvbkb9FfXZX5qz29i45ECzzZc5roW7HY683Ieb0abv8TtvEDhvMIIF5jCC A86gAwIBAgIQapvhODv/K2ufAdXZuKdSVjANBgkqhkiG9w0BAQwFADCBhTELMAkGA1UEBhMC R0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgG A1UEChMRQ09NT0RPIENBIExpbWl0ZWQxKzApBgNVBAMTIkNPTU9ETyBSU0EgQ2VydGlmaWNh dGlvbiBBdXRob3JpdHkwHhcNMTMwMTEwMDAwMDAwWhcNMjgwMTA5MjM1OTU5WjCBlzELMAkG A1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9y ZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxPTA7BgNVBAMTNENPTU9ETyBSU0EgQ2xp ZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EwggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQC+s55XrCh2dUAWxzgDmNPGGHYhUPMleQtMtaDRfTpYPpynMS6n 9jR22YRq2tA9NEjk6vW7rN/5sYFLIP1of3l0NKZ6fLWfF2VgJ5cijKYy/qlAckY1wgOkUMgz KlWlVJGyK+UlNEQ1/5ErCsHq9x9aU/x1KwTdF/LCrT03Rl/FwFrf1XTCwa2QZYL55AqLPikF lgqOtzk06kb2qvGlnHJvijjI03BOrNpo+kZGpcHsgyO1/u1OZTaOo8wvEU17VVeP1cHWse9t GKTDyUGg2hJZjrqck39UIm/nKbpDSZ0JsMoIw/JtOOg0JC56VzQgBo7ictReTQE5LFLG3yQK +xS1AgMBAAGjggE8MIIBODAfBgNVHSMEGDAWgBS7r34CPfqm8TyEjq3uOJjs2TIy1DAdBgNV HQ4EFgQUgq9sjPjF/pZhfOgfPStxSF7Ei8AwDgYDVR0PAQH/BAQDAgGGMBIGA1UdEwEB/wQI MAYBAf8CAQAwEQYDVR0gBAowCDAGBgRVHSAAMEwGA1UdHwRFMEMwQaA/oD2GO2h0dHA6Ly9j cmwuY29tb2RvY2EuY29tL0NPTU9ET1JTQUNlcnRpZmljYXRpb25BdXRob3JpdHkuY3JsMHEG CCsGAQUFBwEBBGUwYzA7BggrBgEFBQcwAoYvaHR0cDovL2NydC5jb21vZG9jYS5jb20vQ09N T0RPUlNBQWRkVHJ1c3RDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2Nh LmNvbTANBgkqhkiG9w0BAQwFAAOCAgEAeFyygSg0TzzuX1bOn5dW7I+iaxf28/ZJCAbU2C81 zd9A/tNx4+jsQgwRGiHjZrAYayZrrm78hOx7aEpkfNPQIHGG6Fvq3EzWf/Lvx7/hk6zSPwIa l9v5IkDcZoFD7f3iT7PdkHJY9B51csvU50rxpEg1OyOT8fk2zvvPBuM4qQNqbGWlnhMpIMwp WZT89RY0wpJO+2V6eXEGGHsROs3njeP9DqqqAJaBa4wBeKOdGCWn1/Jp2oY6dyNmNppI4ZNM UH4Tam85S1j6E95u4+1Nuru84OrMIzqvISE2HN/56ebTOWlcrurffade2022O/tUU1gb4jfW CcyvB8czm12FgX/y/lRjmDbEA08QJNB2729Y+io1IYO3ztveBdvUCIYZojTq/OCR6MvnzS6X 72HP0PRLRTiOSEmIDsS5N5w/8IW1Hva5hEFy6fDAfd9yI+O+IMMAj1KcL/Zo9jzJ16HO5m60 ttl1Enk8MQkz/W3JlHaeI5iKFn4UJu1/cP2YHXYPiWf2JyBzsLBrGk1II+3yL8aorYew6CQv dVifC3HtwlSam9V1niiCfOBe2C12TdKGu05LWIA3ZkFcWJGaNXOZ6Ggyh/TqvXG5v7zmEVDN XFnHn9tFpMpOUvxhcsjycBtH0dZ0WrNw6gH+HF8TIhCnH3+zzWuDN0Rk6h9KVkfKehIwggY5 MIIFIaADAgECAhEAkJNVgmy0T3j/sFnejfTMyTANBgkqhkiG9w0BAQsFADCBlzELMAkGA1UE BhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEa MBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxPTA7BgNVBAMTNENPTU9ETyBSU0EgQ2xpZW50 IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0EwHhcNMTQwOTE2MDAwMDAwWhcN MTcwOTE1MjM1OTU5WjCCATcxCzAJBgNVBAYTAkdCMRAwDgYDVQQREwdXRjQgNFdBMRcwFQYD VQQIEw5XZXN0IFlvcmtzaGlyZTESMBAGA1UEBxMJV2FrZWZpZWxkMRQwEgYDVQQJEwtHcmFu Z2UgTW9vcjEfMB0GA1UECRMWODkgR3JlZW5maWVsZCBDcmVzY2VudDEXMBUGA1UEChMOR3Jp ZG1lcmdlIEx0ZC4xNDAyBgNVBAsTK0lzc3VlZCB0aHJvdWdoIEdyaWRtZXJnZSBMdGQuIEUt UEtJIE1hbmFnZXIxHzAdBgNVBAsTFkNvcnBvcmF0ZSBTZWN1cmUgRW1haWwxFjAUBgNVBAMT DVJvYmVydCBDcmFnaWUxKjAoBgkqhkiG9w0BCQEWG3JvYmVydC5jcmFnaWVAZ3JpZG1lcmdl LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALTtrEYc/EYQZDn+/Byj786j qzQJukVnEZ0qu6G8Y/QZphmITLPJJCxlCvJhRGCt5zRDfwG1lM0k77mTVP166mrPMKfEbhAF mhW54app3f02j/E0T73Wkwqhc2xj+vs6ox+kXRZIiEa/VY1TXd8ALZZAJ2uPQm+3QByE0cO6 7Q7jr5dmZuXAuygh5Q7MvzxL0vKmxhJ1n0veVDwk+BifimRX+HHU3XTGrqySkiN4Amdm7ESD qdO7UAoezIGZoA/fTJE9CS4f4tVXcKhfGlp/Tw3K9q9cp6cjYD802hnFoiSQ9PgLviP20lcH CIGn91WkYhuYG9u8Fzgzmu0yVK5L0kkCAwEAAaOCAdswggHXMB8GA1UdIwQYMBaAFIKvbIz4 xf6WYXzoHz0rcUhexIvAMB0GA1UdDgQWBBTSD2iG48824eEQkBLu4BgdWzh49TAOBgNVHQ8B Af8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDBAYIKwYBBQUHAwIw RgYDVR0gBD8wPTA7BgwrBgEEAbIxAQIBAwUwKzApBggrBgEFBQcCARYdaHR0cHM6Ly9zZWN1 cmUuY29tb2RvLm5ldC9DUFMwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2NybC5jb21vZG9j YS5jb20vQ09NT0RPUlNBQ2xpZW50QXV0aGVudGljYXRpb25hbmRTZWN1cmVFbWFpbENBLmNy bDCBiwYIKwYBBQUHAQEEfzB9MFUGCCsGAQUFBzAChklodHRwOi8vY3J0LmNvbW9kb2NhLmNv bS9DT01PRE9SU0FDbGllbnRBdXRoZW50aWNhdGlvbmFuZFNlY3VyZUVtYWlsQ0EuY3J0MCQG CCsGAQUFBzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20wJgYDVR0RBB8wHYEbcm9iZXJ0 LmNyYWdpZUBncmlkbWVyZ2UuY29tMA0GCSqGSIb3DQEBCwUAA4IBAQAq8C9mIiSV9Nj9ZjHa 1kupbDGYy57v5fCk9lT++uiwGBP9yIFd9Gr8wISOl+96l9OLo8E+5CcPLyt96H4ez/ksXjC1 5EhzuhUB7HNi2b9GLDenjiHW4vBmSoIAbt9Pnz6zZsPH7eBPBcqkIWLFuqKBYUoXKLpzrVtr Kgv6PM3t2+4YakBnMWjpcqzinurEeGq4mh3gHTv03wcyT6eQVCu5k4yaJxoQReYtYIjv+W+m LmT/ZW61ZATZb2adV8xPejUlWSq4+2bpRbXZpD9FAmomNC8fSvGUUhMfYq5t5IUPHfP0kEH5 WQVWgVfpcf6Q8rnpWznsMiJrucUpJf8ZenHtMYIEKDCCBCQCAQEwga0wgZcxCzAJBgNVBAYT AkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAY BgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMT0wOwYDVQQDEzRDT01PRE8gUlNBIENsaWVudCBB dXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhEAkJNVgmy0T3j/sFnejfTMyTAJ BgUrDgMCGgUAoIICTzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEP Fw0xNDEwMTMxMDIxNDhaMCMGCSqGSIb3DQEJBDEWBBRVLUVwKJfKBiNnYsVJ+51d0CyN0TBs BgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYIKoZIhvcNAwcw DgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEo MIG+BgkrBgEEAYI3EAQxgbAwga0wgZcxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVy IE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1p dGVkMT0wOwYDVQQDEzRDT01PRE8gUlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2Vj dXJlIEVtYWlsIENBAhEAkJNVgmy0T3j/sFnejfTMyTCBwAYLKoZIhvcNAQkQAgsxgbCgga0w gZcxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAOBgNVBAcT B1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMT0wOwYDVQQDEzRDT01PRE8g UlNBIENsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhEAkJNVgmy0 T3j/sFnejfTMyTANBgkqhkiG9w0BAQEFAASCAQCcA+285cJX1aHHZudtMAULmWBqCAggwxV3 mWsNuSn5/f1xXZv8+ESy/Ivnz5beK2A2wcPRJdHs8SwxQ8u0SN+YCU3gqOenu9GSOnNaIPbI S4hpH5HiVks2iGfy9irtPVqb2WTzr4qKJcM4v9NW0NQalilWv8iTbIJ4pF1WW0HtEyTnDLXz ItKCVuRkd41EgZfqhQinPlr5VkqrGnfQN+LPm0J3HJHOCYAH7R1/XsXzHpCV+piqax/lKllh nm56SvQgO3B0FAdTQlz2jPR57Gvy09NSKtk2RLotZbZcc2HWtpIkNZ5cNF5NSSMAlw2t2gGo AtpNEbDP7x9MGN6vAuG1AAAAAAAA --------------ms070609050506080503040105-- From nobody Mon Oct 13 03:54:16 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9841F1A8989; Mon, 13 Oct 2014 03:54:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.151 X-Spam-Level: X-Spam-Status: No, score=-0.151 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, HELO_EQ_DE=0.35, SPF_HELO_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rlsOkmydwDrr; Mon, 13 Oct 2014 03:54:05 -0700 (PDT) Received: from informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F135F1A0183; Mon, 13 Oct 2014 03:54:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from smtp-fb3.informatik.uni-bremen.de (smtp-fb3.informatik.uni-bremen.de [134.102.224.120]) by informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id s9DArmXR024342; Mon, 13 Oct 2014 12:53:48 +0200 (CEST) Received: from [192.168.217.145] (p54893EA6.dip0.t-ipconnect.de [84.137.62.166]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtp-fb3.informatik.uni-bremen.de (Postfix) with ESMTPSA id 59E281E9; Mon, 13 Oct 2014 12:53:47 +0200 (CEST) Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Carsten Bormann In-Reply-To: <543BA7BC.7040900@gridmerge.com> Date: Mon, 13 Oct 2014 12:53:45 +0200 X-Mao-Original-Outgoing-Id: 434890425.566031-5a950fba5bf3bf7119412e36e4e7bec2 Content-Transfer-Encoding: quoted-printable Message-Id: References: <0B1527DE-D410-421C-9870-EFA120F1AEA0@tzi.org> <543AE069.7040407@nthpermutation.com> <543B97F1.9010207@tzi.de> <543BA7BC.7040900@gridmerge.com> To: robert.cragie@gridmerge.com X-Mailer: Apple Mail (2.1878.6) Archived-At: http://mailarchive.ietf.org/arch/msg/ace/ZabYSyV5LmZh8OXu2knuZZEZB8I Cc: Stefanie Gerdes , ace@ietf.org, "dtls-iot@ietf.org" , Michael StJohns Subject: Re: [Ace] [Dtls-iot] Interesting article on IOT security from real world liability perspective X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Oct 2014 10:54:07 -0000 On 13 Oct 2014, at 12:21, Robert Cragie = wrote: > I think Mike's "ship or die" comment is very relevant.=20 I completely agree. Unfortunately, there is very little that we can do about this in the = IETF. I believe it is worth analyzing the unsavory situation we are in, to = some greater detail. =97 even if the companies wanted, they don=92t have (and cannot afford) = the engineering in house that could be tasked to create a secure product = (there is one exception in the consumer electronics space, and their = track record still isn=92t exactly stellar) =97 there is little economic incentive to be secure (no teeth in the = product liability) =97 sales and thus economic success is dominated by =93ease of use=94 =97 and this is amplified by the need to minimize costly customer care = contacts =97 ease of use is dominated by =97 expectations of users (plug and play etc.) =97 you can=92t actually be more secure in a way that causes hassle = that users don=92t expect =97 interoperability with what=92s already there =97 which includes deployed systems with abysmal security =97 that might damage the security of the IoT gear if it relies on = that =97 or bugs/unforeseen interactions of the IoT gear might damage = the =93security=94 of deployed systems It is very hard to secure home IoT if that needs to plug into and = interact with other networked home gear in its current insecure state. = My only hope is that if IoT gear can be made to lead in usable security, = that might shift expectations. It seems we=92ll have to do some of the = engineering here that the gear makers can=92t. We also need to spend more time pointing out that, if it isn=92t usably = secure, it=92s *not* IoT. Gr=FC=DFe, Carsten From nobody Mon Oct 13 07:08:45 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8220E1A8AEA; Mon, 13 Oct 2014 07:08:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.278 X-Spam-Level: X-Spam-Status: No, score=-1.278 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 47SbQ3mzzTzz; Mon, 13 Oct 2014 07:08:02 -0700 (PDT) Received: from mail-ig0-x234.google.com (mail-ig0-x234.google.com [IPv6:2607:f8b0:4001:c05::234]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BF15E1A1AB5; Mon, 13 Oct 2014 07:08:01 -0700 (PDT) Received: by mail-ig0-f180.google.com with SMTP id uq10so10533246igb.13 for ; Mon, 13 Oct 2014 07:08:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=jfihb82DIIkdckPyB32OtbTYa9yeSny+IPB5ndh0Eso=; b=EKB0sf/S8RQbXDSEd8U/BtqU94EFs4mE2vDI8SpzJfDBCwVrXQHUkP+lyEHhk6OxWh Q8zV6c0xtplrRp9t0eMwFLnfkRqxoAjQgNvwjjF1C0+aQMKvZILva/4lDvfb4tQj2JYw hyspeVBu01WwhyWPKqFvHpShQwgf+zZonSqKQq/+dkWH2/+SoSoq8B6pushVtSHdNO8b vGDfbuPxq0eJbmFt9CiCt1qjTl0HWQ0LGSoACfK/v5eM3G8m6hy/aT1rljVJQAGYQhe0 x5U/ZsBb7vsiu/0uq+bFeTzv9m2OjAWeOqeRGMh8PRt5BI8qCDzVuvaZzuxQI5WSNvcx 1fbg== MIME-Version: 1.0 X-Received: by 10.42.236.142 with SMTP id kk14mr37427059icb.9.1413209281164; Mon, 13 Oct 2014 07:08:01 -0700 (PDT) Sender: barryleiba.mailing.lists@gmail.com Received: by 10.107.163.3 with HTTP; Mon, 13 Oct 2014 07:08:01 -0700 (PDT) In-Reply-To: <300A8653-4B32-40AB-8DB3-EE8EA3F1C2C7@tzi.org> References: <63722FD9-BA11-48E6-951A-7A3823F5EFD5@tzi.org> <300A8653-4B32-40AB-8DB3-EE8EA3F1C2C7@tzi.org> Date: Mon, 13 Oct 2014 10:08:01 -0400 X-Google-Sender-Auth: M0_EFXlEBh63nqszumW0mnOngpc Message-ID: From: Barry Leiba To: Carsten Bormann Content-Type: text/plain; charset=UTF-8 Archived-At: http://mailarchive.ietf.org/arch/msg/ace/kaGiijswyjg5BHwLVeVI9RfkVPs Cc: lwip@ietf.org, "6lo@ietf.org WG" <6lo@ietf.org>, dtls-iot@ietf.org, core , ace@ietf.org Subject: Re: [Ace] [Dtls-iot] Constrained Node/Network Cluster @ IETF91, early draft version X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Oct 2014 14:08:04 -0000 Do you think the conflict between CORE and WEBPUSH is an issue that we should try to resolve? Barry From nobody Mon Oct 13 07:17:11 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 920E41A0004; Mon, 13 Oct 2014 07:17:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.686 X-Spam-Level: X-Spam-Status: No, score=-2.686 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-0.786, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EaVxpLyMRE_I; Mon, 13 Oct 2014 07:16:57 -0700 (PDT) Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7B62F1A002F; Mon, 13 Oct 2014 07:16:21 -0700 (PDT) Received: from [192.168.10.188] ([195.50.187.121]) by mail.gmx.com (mrgmx002) with ESMTPSA (Nemesis) id 0MF4eJ-1XNSzT2wQN-00GK5m; Mon, 13 Oct 2014 16:16:16 +0200 Message-ID: <543BDEAA.1000701@gmx.net> Date: Mon, 13 Oct 2014 16:16:10 +0200 From: Hannes Tschofenig User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.1.2 MIME-Version: 1.0 To: Hosnieh Rafiee , "ace@ietf.org" References: <34966E97BE8AD64EAE9D3D6E4DEE36F2581A37D0@SZXEMA501-MBS.china.huawei.com> <34966E97BE8AD64EAE9D3D6E4DEE36F2581A3B0D@SZXEMA501-MBS.china.huawei.com> <814D0BFB77D95844A01CA29B44CBF8A7A47504@lhreml513-mbb.china.huawei.com> In-Reply-To: <814D0BFB77D95844A01CA29B44CBF8A7A47504@lhreml513-mbb.china.huawei.com> OpenPGP: id=4D776BC9 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="IhAn8r5Lm9LQbQExhWceP0pdRSW8Cv9mG" X-Provags-ID: V03:K0:jkRMInZ/xHVhsLcp+ew2kV8t0AmF+CTfvNo+ZDVnM3eGWUxwdd9 n4hd0n0DuRJzxIadeX9N+PEECXLZ1RMidkagkynxnIvK3vhOg99wgWJubBCEcXT/0zdEV/X Bn/qQ+78eeE87lnoZZ5HTPtd9Gg6Epb3qc4QPMKZXsEYBjQ/A8KeuJZZFY4ChYlv2WicEIn wBNLZzYit7od3nX2LYXbg== X-UI-Out-Filterresults: notjunk:1; Archived-At: http://mailarchive.ietf.org/arch/msg/ace/RK91_L7RocLNQ72uE17X4DnsEoU Cc: "secauth@ietf.org" Subject: Re: [Ace] some suggestions - clarification of ACE scope and secauth X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Oct 2014 14:17:04 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --IhAn8r5Lm9LQbQExhWceP0pdRSW8Cv9mG Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Hi Hosnieh, the scenarios fall into the scope of ACE if at least the resource server is constrained. If the washing machine just talks to some cloud-based infrastructure then that's not really of interest to ACE. If there is, however, a technician standing next to the washing machine and wants to retrieve information from the washing machine using his mobile phone or tablet directly then the washing machine becomes the resource server. To me it appears (from our earlier discussion about the scenarios) that you envision some interaction with a server-side infrastructure. If that's the case then you should be able to solve these use cases with the already existing standards we have developed. Ciao Hannes On 10/09/2014 12:48 PM, Hosnieh Rafiee wrote: > Hi, >=20 > In secauth requirement draft, there is two requirements that I suggest = to be considered by ACE however, If ACE does not want to work on them, I= will keep it in secauth. >=20 > Here is the link to secauth requirement draft. > https://tools.ietf.org/html/draft-rafiee-secauth-usecase-01=20 >=20 >=20 > Scenario 2: Alice's wash machine technically has a problem. Its > application was configured by the vendors? in a way to report this > problem automatically to third party technical service (repair > place). Both the technical service application and wash machine need= > to authenticate each other so that they can trust and exchange > information. Since the application are usually implemented by the > third party and there was not much effort to secure the > communications between the device and the application, the security > of them is a big concern. >=20 > Alice turned on the wash machine at home and then went to work. Alice > can check the status of this wash machine using an application on he= r > Smartphone remotely at company x. Wash machine doesn't support any > certificates signed by a CA. Alice needs to be authenticated in the > wash machine and wash machine needs to trust Alice to allow her > control it remotely. Since the application are usually provided by > third parties, the security of this communication is important and > the first point of trust is really important. >=20 > Thanks, > Best, > Hosnieh > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace >=20 --IhAn8r5Lm9LQbQExhWceP0pdRSW8Cv9mG Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJUO96rAAoJEGhJURNOOiAtSrkIAIvqHlaOU520JIYYEC+JJbmY kMGrwhiMxnGNG2ng5GHJFWktq8/Fx0mFibORTOaHf7Yem4+d5TWrk/f9lmIe/px3 6slldWfT1WSYEfECgJ6C02edA50Im4Jq6kpvETUlNbGW1m0LjG2kXOd06XAHx5fP dJ+l3fbeFPNk1m4vCNlAMUdGspfGUz/X1r+1sBb9nohs23IEjkPeTL3URi1sa/9x EthXTs8c///52BqM1eUWb1ujceMuQmPblTtDrSvRBMij4j6hgt1JyWUMxmZnBTxh n4ahBTLPvSMCzbdFNjfuyRRj6o7Ee64SoLSiV6HBSr7/1JT8B9tyO1eTFwEuNI4= =rM+R -----END PGP SIGNATURE----- --IhAn8r5Lm9LQbQExhWceP0pdRSW8Cv9mG-- From nobody Mon Oct 13 07:32:05 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8337B1A0146; Mon, 13 Oct 2014 07:31:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.551 X-Spam-Level: X-Spam-Status: No, score=-1.551 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, SPF_HELO_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HiIVMxUQGUJB; Mon, 13 Oct 2014 07:31:53 -0700 (PDT) Received: from informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 194221A011B; Mon, 13 Oct 2014 07:30:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from smtp-fb3.informatik.uni-bremen.de (smtp-fb3.informatik.uni-bremen.de [134.102.224.120]) by informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id s9DEURKZ013492; Mon, 13 Oct 2014 16:30:27 +0200 (CEST) Received: from [192.168.217.113] (p54893EA6.dip0.t-ipconnect.de [84.137.62.166]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtp-fb3.informatik.uni-bremen.de (Postfix) with ESMTPSA id D40D14A6; Mon, 13 Oct 2014 16:30:26 +0200 (CEST) Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Carsten Bormann In-Reply-To: Date: Mon, 13 Oct 2014 16:30:25 +0200 X-Mao-Original-Outgoing-Id: 434903424.999653-fad1173128c59a861aa97f8549987f5b Content-Transfer-Encoding: quoted-printable Message-Id: References: <63722FD9-BA11-48E6-951A-7A3823F5EFD5@tzi.org> <300A8653-4B32-40AB-8DB3-EE8EA3F1C2C7@tzi.org> To: Barry Leiba X-Mailer: Apple Mail (2.1878.6) Archived-At: http://mailarchive.ietf.org/arch/msg/ace/zMi9Ywq5mbMmGMYTFIPKeL2zj4I Cc: core , ace@ietf.org Subject: Re: [Ace] [Dtls-iot] Constrained Node/Network Cluster @ IETF91, early draft version X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Oct 2014 14:31:55 -0000 On 13 Oct 2014, at 16:08, Barry Leiba wrote: > Do you think the conflict between CORE and WEBPUSH is an issue that we > should try to resolve? That is indeed a good question. I listed webpush in the cluster agenda because it could be of interest = in the context of proxying Observe and CoAP-MQ functionality into the = HTTP world and vice versa. I don=92t know whether there are going to be CoRE people in Hawaii who = would want to go contribute to the webpush WG. (I know that Klaus is = not coming, and I have heard a lot of grumpy noises about being able to = travel to Hawaii.) I certainly would like to go. But then I don=92t = know whether webpush will be relevant for the above mentioned purpose or = not. What do other CoRE/ACE people think? (Trimming the CC list a bit, because this is mostly an application space = issue.) (Oh, and I also wouldn=92t mind increasing the separation of the two = CoRE slots by moving the first around.) Gr=FC=DFe, Carsten From nobody Mon Oct 13 07:36:26 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7049E1A00F7; Mon, 13 Oct 2014 07:36:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.278 X-Spam-Level: X-Spam-Status: No, score=-1.278 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Nq_HdxnUyyHS; Mon, 13 Oct 2014 07:36:22 -0700 (PDT) Received: from mail-lb0-x22e.google.com (mail-lb0-x22e.google.com [IPv6:2a00:1450:4010:c04::22e]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8848A1A0100; Mon, 13 Oct 2014 07:36:13 -0700 (PDT) Received: by mail-lb0-f174.google.com with SMTP id p9so6466943lbv.5 for ; Mon, 13 Oct 2014 07:36:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:in-reply-to:references:date:message-id:subject :from:to:cc:content-type; bh=jQY/3qPg3COHDBEWgTNs+N8wo2+JbZyuK5LaNTstMLk=; b=nwj3DzSJobiOe3BZzqseft+6XdR3ZcsjiU5hoO6LLlNKLHT4NwcUvL24XcR5fV9Tlh 3ydOhohn4cDlXr235mYxLVWTyQAgbjuXdl3EjC4XKfprm5TRwIZ99FATUm0LiBx/VVNZ KmXnM/jAogzjQXXaYB4VkzvqIlC2AiK6MCbUjVL4TLGV+Pzz89R8YzNGtOaF33Zs6Qw7 HRB9wlJoPcoIUI3fdhldmCh9cxsNCKbEYqnhqcnllCv3aTPvQ6zOmlBhjpmnQUqbOgdc 6fY2WX4YY9SlRU8MR5L8emQbTGmbtPmLHeMf8IncvmxlPM60041iB6Wc5UI7jivDJbyI FkpQ== MIME-Version: 1.0 X-Received: by 10.152.88.1 with SMTP id bc1mr842280lab.28.1413210970705; Mon, 13 Oct 2014 07:36:10 -0700 (PDT) Sender: barryleiba@gmail.com Received: by 10.152.8.103 with HTTP; Mon, 13 Oct 2014 07:36:10 -0700 (PDT) In-Reply-To: References: <63722FD9-BA11-48E6-951A-7A3823F5EFD5@tzi.org> <300A8653-4B32-40AB-8DB3-EE8EA3F1C2C7@tzi.org> Date: Mon, 13 Oct 2014 10:36:10 -0400 X-Google-Sender-Auth: xuaEFoTD7x6ZJyPd8VO2S5sMsxk Message-ID: From: Barry Leiba To: Carsten Bormann Content-Type: text/plain; charset=ISO-8859-1 Archived-At: http://mailarchive.ietf.org/arch/msg/ace/8aE2QDrksV58DpyP-oHlyPZo9-w Cc: core , "ace@ietf.org" Subject: Re: [Ace] [Dtls-iot] Constrained Node/Network Cluster @ IETF91, early draft version X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Oct 2014 14:36:23 -0000 > (Oh, and I also wouldn't mind increasing the separation of the two CoRE slots by moving the first around.) It's VERY hard to move core... it has a very challenging conflict list. Barry From nobody Mon Oct 13 08:17:21 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F19531A034E; Mon, 13 Oct 2014 08:17:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.987 X-Spam-Level: X-Spam-Status: No, score=-4.987 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.786, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mrSFS4Z4TZNh; Mon, 13 Oct 2014 08:17:17 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 313AE1A01C6; Mon, 13 Oct 2014 08:17:17 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml402-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BNP23713; Mon, 13 Oct 2014 15:17:15 +0000 (GMT) Received: from LHREML513-MBB.china.huawei.com ([fe80::b810:863:a57e:3ff]) by lhreml402-hub.china.huawei.com ([10.201.5.241]) with mapi id 14.03.0158.001; Mon, 13 Oct 2014 16:17:13 +0100 From: Hosnieh Rafiee To: Hannes Tschofenig , "ace@ietf.org" Thread-Topic: [Ace] some suggestions - clarification of ACE scope and secauth Thread-Index: AQHP466Hjbmt+uEqAkuKiz5ogU7rw5wuCFgAgAAZMhA= Date: Mon, 13 Oct 2014 15:17:13 +0000 Message-ID: <814D0BFB77D95844A01CA29B44CBF8A7A4829E@lhreml513-mbb.china.huawei.com> References: <34966E97BE8AD64EAE9D3D6E4DEE36F2581A37D0@SZXEMA501-MBS.china.huawei.com> <34966E97BE8AD64EAE9D3D6E4DEE36F2581A3B0D@SZXEMA501-MBS.china.huawei.com> <814D0BFB77D95844A01CA29B44CBF8A7A47504@lhreml513-mbb.china.huawei.com> <543BDEAA.1000701@gmx.net> In-Reply-To: <543BDEAA.1000701@gmx.net> Accept-Language: zh-CN, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.221.82.100] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/ace/XybRTQoDkl53kOkF8mMqgHLXd4c Cc: "secauth@ietf.org" Subject: Re: [Ace] some suggestions - clarification of ACE scope and secauth X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Oct 2014 15:17:19 -0000 Hi Hannes, Thanks for your response. My responses inline... >=20 > the scenarios fall into the scope of ACE if at least the resource > server is constrained. I presumed that something like wash machine have constrained resources. > If the washing machine just talks to some cloud-based infrastructure > then that's not really of interest to ACE. If there is, however, a > technician standing next to the washing machine and wants to retrieve > information from the washing machine using his mobile phone or tablet > directly then the washing machine becomes the resource server. Ok, So, if I understand you correctly, if one end point is constrained devi= ces and the other point is cloud infrastructure, this is not what ACE will = work on and I can put it in secauth.=20 > To me it appears (from our earlier discussion about the scenarios) that > you envision some interaction with a server-side infrastructure. If > that's the case then you should be able to solve these use cases with > the already existing standards we have developed. >=20 Yes true. But it appears that I have to revise the scope based on your comm= ents and other offlist discussion. Thanks,=20 Best, Hosnieh From nobody Mon Oct 13 09:03:47 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 183E61A0346; Mon, 13 Oct 2014 09:03:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.551 X-Spam-Level: X-Spam-Status: No, score=-1.551 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, SPF_HELO_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hceqhcm2pH-D; Mon, 13 Oct 2014 09:03:44 -0700 (PDT) Received: from informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 648801A037E; Mon, 13 Oct 2014 09:03:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from smtp-fb3.informatik.uni-bremen.de (smtp-fb3.informatik.uni-bremen.de [134.102.224.120]) by informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id s9DG3XIG014893; Mon, 13 Oct 2014 18:03:33 +0200 (CEST) Received: from [192.168.217.113] (p54893EA6.dip0.t-ipconnect.de [84.137.62.166]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtp-fb3.informatik.uni-bremen.de (Postfix) with ESMTPSA id F25E6594; Mon, 13 Oct 2014 18:03:32 +0200 (CEST) Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Carsten Bormann In-Reply-To: <814D0BFB77D95844A01CA29B44CBF8A7A4829E@lhreml513-mbb.china.huawei.com> Date: Mon, 13 Oct 2014 18:03:31 +0200 X-Mao-Original-Outgoing-Id: 434909011.275065-4f9c0a48d2711f6ddd9a0f029661d8ba Content-Transfer-Encoding: quoted-printable Message-Id: <15F2FD1A-76F7-42F3-BBFB-645DD1EC9279@tzi.org> References: <34966E97BE8AD64EAE9D3D6E4DEE36F2581A37D0@SZXEMA501-MBS.china.huawei.com> <34966E97BE8AD64EAE9D3D6E4DEE36F2581A3B0D@SZXEMA501-MBS.china.huawei.com> <814D0BFB77D95844A01CA29B44CBF8A7A47504@lhreml513-mbb.china.huawei.com> <543BDEAA.1000701@gmx.net> <814D0BFB77D95844A01CA29B44CBF8A7A4829E@lhreml513-mbb.china.huawei.com> To: Hosnieh Rafiee X-Mailer: Apple Mail (2.1878.6) Archived-At: http://mailarchive.ietf.org/arch/msg/ace/8heddWlSI8SCcxEMTMdYyubQKoY Cc: Hannes Tschofenig , "secauth@ietf.org" , "ace@ietf.org" Subject: Re: [Ace] some suggestions - clarification of ACE scope and secauth X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Oct 2014 16:03:45 -0000 On 13 Oct 2014, at 17:17, Hosnieh Rafiee = wrote: > Ok, So, if I understand you correctly, if one end point is constrained = devices and the other point is cloud infrastructure, this is not what = ACE will work on If this is just about a secure connection between the constrained device = and a less-constrained device, that is already covered by DTLS, so there = is nothing to work on. If the point is to have the less-constrained device become authorized to = access resources on the constrained device, then we need something like = ACE. A more detailed introduction of what ACE is about is in = draft-gerdes-ace-actors-01.txt Gr=FC=DFe, Carsten From nobody Mon Oct 13 09:18:23 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 187231A1AA2; Mon, 13 Oct 2014 09:18:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.987 X-Spam-Level: X-Spam-Status: No, score=-4.987 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.786, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZRo5xakMbcOR; Mon, 13 Oct 2014 09:18:12 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 696F01A1AA9; Mon, 13 Oct 2014 09:18:11 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml406-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BNP28593; Mon, 13 Oct 2014 16:18:01 +0000 (GMT) Received: from LHREML513-MBB.china.huawei.com ([fe80::b810:863:a57e:3ff]) by lhreml406-hub.china.huawei.com ([10.201.5.243]) with mapi id 14.03.0158.001; Mon, 13 Oct 2014 17:16:50 +0100 From: Hosnieh Rafiee To: Carsten Bormann Thread-Topic: [Ace] some suggestions - clarification of ACE scope and secauth Thread-Index: AQHP5v9EihhV/Ms4z0++EQrL8hLnc5wuMN5Q Date: Mon, 13 Oct 2014 16:16:49 +0000 Message-ID: <814D0BFB77D95844A01CA29B44CBF8A7A48363@lhreml513-mbb.china.huawei.com> References: <34966E97BE8AD64EAE9D3D6E4DEE36F2581A37D0@SZXEMA501-MBS.china.huawei.com> <34966E97BE8AD64EAE9D3D6E4DEE36F2581A3B0D@SZXEMA501-MBS.china.huawei.com> <814D0BFB77D95844A01CA29B44CBF8A7A47504@lhreml513-mbb.china.huawei.com> <543BDEAA.1000701@gmx.net> <814D0BFB77D95844A01CA29B44CBF8A7A4829E@lhreml513-mbb.china.huawei.com> <15F2FD1A-76F7-42F3-BBFB-645DD1EC9279@tzi.org> In-Reply-To: <15F2FD1A-76F7-42F3-BBFB-645DD1EC9279@tzi.org> Accept-Language: zh-CN, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.221.82.100] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/ace/8RSi7TkYkPTxx7EBZGCIzwpb1Zg Cc: "secauth@ietf.org" , "ace@ietf.org" Subject: Re: [Ace] some suggestions - clarification of ACE scope and secauth X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Oct 2014 16:18:14 -0000 Hi Carsten, Thanks for your message. Please see my responses inline... > > Ok, So, if I understand you correctly, if one end point is > constrained devices and the other point is cloud infrastructure, this > is not what ACE will work on >=20 > If this is just about a secure connection between the constrained > device and a less-constrained device, that is already covered by DTLS, > so there is nothing to work on. To some extend true. Thanks for clarification. I will check DTLS again to s= ee what they have and how they want to provide the authentication and autho= rization in virtualization environment, share the result with the mailingli= st. Besides the above mentioned scenarios, secauth plans to work on first point= of trust for different use cases. Does ACE also work on this first point o= f trust? If so I will remove all use cases regarding constrained devices, i= f not I only change these particular use cases to only focus on providing f= irst point of trust. > If the point is to have the less-constrained device become authorized > to access resources on the constrained device, then we need something > like ACE. >=20 > A more detailed introduction of what ACE is about is in draft-gerdes- > ace-actors-01.txt Thanks, will take a look. Best, Hosnieh From nobody Mon Oct 13 13:10:54 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 986AF1A001A; Mon, 13 Oct 2014 13:10:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YlTY4USWuLRA; Mon, 13 Oct 2014 13:10:42 -0700 (PDT) Received: from mail2.ihtfp.org (mail2.ihtfp.org [IPv6:2001:4830:143:1::3a11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 767A71A000E; Mon, 13 Oct 2014 13:10:42 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail2.ihtfp.org (Postfix) with ESMTP id D2CF3E2035; Mon, 13 Oct 2014 16:10:40 -0400 (EDT) Received: from mail2.ihtfp.org ([127.0.0.1]) by localhost (mail2.ihtfp.org [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 03112-01; Mon, 13 Oct 2014 16:10:38 -0400 (EDT) Received: from securerf.ihtfp.org (unknown [IPv6:fe80::ea2a:eaff:fe7d:235]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mocana.ihtfp.org", Issuer "IHTFP Consulting Certification Authority" (verified OK)) by mail2.ihtfp.org (Postfix) with ESMTPS id 15302E2031; Mon, 13 Oct 2014 16:10:38 -0400 (EDT) Received: (from warlord@localhost) by securerf.ihtfp.org (8.14.8/8.14.8/Submit) id s9DKAbMe016454; Mon, 13 Oct 2014 16:10:37 -0400 From: Derek Atkins To: Barry Leiba References: <63722FD9-BA11-48E6-951A-7A3823F5EFD5@tzi.org> <300A8653-4B32-40AB-8DB3-EE8EA3F1C2C7@tzi.org> Date: Mon, 13 Oct 2014 16:10:37 -0400 In-Reply-To: (Barry Leiba's message of "Mon, 13 Oct 2014 10:36:10 -0400") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Virus-Scanned: Maia Mailguard 1.0.2a Archived-At: http://mailarchive.ietf.org/arch/msg/ace/gOXsA8ldRysHuCFojnRHogbBH_g Cc: Carsten Bormann , core , "ace@ietf.org" Subject: Re: [Ace] [Dtls-iot] Constrained Node/Network Cluster @ IETF91, early draft version X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Oct 2014 20:10:51 -0000 Barry Leiba writes: >> (Oh, and I also wouldn't mind increasing the separation of the two > CoRE slots by moving the first around.) > > It's VERY hard to move core... it has a very challenging conflict list. As it is, half of core conflicts with oauth. :( > Barry -derek -- Derek Atkins 617-623-3745 derek@ihtfp.com www.ihtfp.com Computer and Internet Security Consultant From nobody Mon Oct 13 13:39:56 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF32A1A000E; Mon, 13 Oct 2014 13:39:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.551 X-Spam-Level: X-Spam-Status: No, score=-1.551 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, SPF_HELO_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Vir9k_EocanA; Mon, 13 Oct 2014 13:39:48 -0700 (PDT) Received: from informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 86A981A000A; Mon, 13 Oct 2014 13:39:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from smtp-fb3.informatik.uni-bremen.de (smtp-fb3.informatik.uni-bremen.de [134.102.224.120]) by informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id s9DKdieX009748; Mon, 13 Oct 2014 22:39:45 +0200 (CEST) Received: from [192.168.217.113] (p54893EA6.dip0.t-ipconnect.de [84.137.62.166]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtp-fb3.informatik.uni-bremen.de (Postfix) with ESMTPSA id BF9376E0; Mon, 13 Oct 2014 22:39:43 +0200 (CEST) Content-Type: text/plain; charset=iso-8859-1 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Carsten Bormann In-Reply-To: Date: Mon, 13 Oct 2014 22:39:42 +0200 X-Mao-Original-Outgoing-Id: 434925581.810006-02f1d5cceedcffd8a3321d08850da60d Content-Transfer-Encoding: quoted-printable Message-Id: <4C043B72-A4C2-421F-A983-91BE6F4C48E3@tzi.org> References: <63722FD9-BA11-48E6-951A-7A3823F5EFD5@tzi.org> <300A8653-4B32-40AB-8DB3-EE8EA3F1C2C7@tzi.org> To: Derek Atkins X-Mailer: Apple Mail (2.1878.6) Archived-At: http://mailarchive.ietf.org/arch/msg/ace/S-VzWa6piy6F4CFy_SSjixazAYI Cc: Barry Leiba , core , "ace@ietf.org" Subject: Re: [Ace] [Dtls-iot] Constrained Node/Network Cluster @ IETF91, early draft version X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Oct 2014 20:39:50 -0000 On 13 Oct 2014, at 22:10, Derek Atkins wrote: >> It's VERY hard to move core... it has a very challenging conflict = list. >=20 > As it is, half of core conflicts with oauth. :( Yes, that is one of the compromises we incurred to keep scheduling = manageable. In the last few meetings, we asked to have at least *half* of the core = meeting to be free of conflicts with the most relevant security WGs. = Asking to have no such conflict on both meeting slots would make = scheduling even more impossible. (Both homenet and rmcat are additional = painful conflicts.) Gr=FC=DFe, Carsten From nobody Mon Oct 13 18:20:19 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4A6851A1A73; Mon, 13 Oct 2014 18:20:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6s8pKrs1Iccx; Mon, 13 Oct 2014 18:20:11 -0700 (PDT) Received: from mail-pd0-x232.google.com (mail-pd0-x232.google.com [IPv6:2607:f8b0:400e:c02::232]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E22811A1A72; Mon, 13 Oct 2014 18:20:10 -0700 (PDT) Received: by mail-pd0-f178.google.com with SMTP id y10so6501684pdj.37 for ; Mon, 13 Oct 2014 18:20:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=content-type:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to; bh=OfOnOjiUb+NSBd+BGgHlSGmhe7gKMq+nwUd9z4AIk0A=; b=ZM2oEXtL9T4rEjlVdfkFcplvJ/L1j0tDHMxFozn1jpZOYOweLTD9GXB0Q5PISL9rOP KntLpPjK4A5AlXh/sHGA1C6jZZDMaeHkr6KaG8NRg9vD7WMtaiEogFEjcnMQOISJtW13 Mb6wE0bZAFnTL3qV3/DT+fyWf5qwjm823tU7cernwT30EuKHuP6DME/Gg6vkOpSXFgl+ AV+Bc8s2SRRSKMpn5nf5QpbwKUQI4paBLRHeYMppSPYg7oV1t4pMkvXM08Ienxqtd7n+ FLUAV4t7xvygpo6ZyvkCMk+3E6jY5GA7cQKIzDKtBTePljINTzG8siS4b7JRM2JOzjOe uoaA== X-Received: by 10.66.124.136 with SMTP id mi8mr1458724pab.105.1413249610560; Mon, 13 Oct 2014 18:20:10 -0700 (PDT) Received: from [192.168.0.100] ([203.230.193.47]) by mx.google.com with ESMTPSA id fn2sm12338978pdb.75.2014.10.13.18.20.07 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Mon, 13 Oct 2014 18:20:09 -0700 (PDT) Content-Type: multipart/alternative; boundary="Apple-Mail=_402E8211-9928-42CF-81AE-13DB60ABBC57" Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Jong-Hyouk Lee In-Reply-To: Date: Tue, 14 Oct 2014 10:18:52 +0900 Message-Id: <6010AC77-D2E4-413B-B94F-DC3EF0933EC0@gmail.com> References: <0B1527DE-D410-421C-9870-EFA120F1AEA0@tzi.org> <543AE069.7040407@nthpermutation.com> <543B97F1.9010207@tzi.de> <543BA7BC.7040900@gridmerge.com> To: Carsten Bormann X-Mailer: Apple Mail (2.1878.6) Archived-At: http://mailarchive.ietf.org/arch/msg/ace/BGx6zK7WMIzk2-68cANY-XJUV0g Cc: robert.cragie@gridmerge.com, Michael StJohns , ace@ietf.org, "dtls-iot@ietf.org" , Stefanie Gerdes Subject: Re: [Ace] [Dtls-iot] Interesting article on IOT security from real world liability perspective X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Oct 2014 01:20:13 -0000 --Apple-Mail=_402E8211-9928-42CF-81AE-13DB60ABBC57 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I agree that the article is one of dime-a-dozen articles while such = security vulnerabilities were happened due to the =E2=80=9Cship or = die=E2=80=9D mentalities, which are needed these days especially to = startups. I bet that such security vulnerabilities will be continuously = reported and the IETF cannot help much for solving those things happen. = The IETF is just one of standardization development organizations. J. -- Jong-Hyouk Lee, living somewhere between /dev/null and /dev/random Protocol Engineering Lab., Sangmyung University #email: jonghyouk@gmail.com #webpage: https://sites.google.com/site/hurryon On 2014. 10. 13., at =EC=98=A4=ED=9B=84 7:53, Carsten Bormann = wrote: > On 13 Oct 2014, at 12:21, Robert Cragie = wrote: >=20 >> I think Mike's "ship or die" comment is very relevant.=20 >=20 > I completely agree. >=20 > Unfortunately, there is very little that we can do about this in the = IETF. >=20 > I believe it is worth analyzing the unsavory situation we are in, to = some greater detail. >=20 > =E2=80=94 even if the companies wanted, they don=E2=80=99t have (and = cannot afford) the engineering in house that could be tasked to create a = secure product (there is one exception in the consumer electronics = space, and their track record still isn=E2=80=99t exactly stellar) > =E2=80=94 there is little economic incentive to be secure (no teeth in = the product liability) > =E2=80=94 sales and thus economic success is dominated by =E2=80=9Cease = of use=E2=80=9D > =E2=80=94 and this is amplified by the need to minimize costly = customer care contacts > =E2=80=94 ease of use is dominated by > =E2=80=94 expectations of users (plug and play etc.) > =E2=80=94 you can=E2=80=99t actually be more secure in a way that = causes hassle that users don=E2=80=99t expect > =E2=80=94 interoperability with what=E2=80=99s already there > =E2=80=94 which includes deployed systems with abysmal security > =E2=80=94 that might damage the security of the IoT gear if it = relies on that > =E2=80=94 or bugs/unforeseen interactions of the IoT gear might = damage the =E2=80=9Csecurity=E2=80=9D of deployed systems >=20 > It is very hard to secure home IoT if that needs to plug into and = interact with other networked home gear in its current insecure state. = My only hope is that if IoT gear can be made to lead in usable security, = that might shift expectations. It seems we=E2=80=99ll have to do some = of the engineering here that the gear makers can=E2=80=99t. >=20 > We also need to spend more time pointing out that, if it isn=E2=80=99t = usably secure, it=E2=80=99s *not* IoT. >=20 > Gr=C3=BC=C3=9Fe, Carsten >=20 > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace --Apple-Mail=_402E8211-9928-42CF-81AE-13DB60ABBC57 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 I = agree that the article is one of dime-a-dozen articles while such = security vulnerabilities were happened due to the =E2=80=9Cship or = die=E2=80=9D mentalities, which are needed these days especially to = startups. I bet that such security vulnerabilities will be continuously = reported and the IETF cannot help much for solving those things happen. = The IETF is just one of standardization development = organizations.

J.
--
Jong-Hyouk Lee, living somewhere between /dev/null = and /dev/random
Protocol Engineering Lab., Sangmyung = University


On 2014. 10. 13., at =EC=98=A4=ED=9B=84 7:53, Carsten = Bormann <cabo@tzi.org> = wrote:

On 13 Oct 2014, at 12:21, Robert Cragie <robert.cragie@gridmerge.com> wrote:

I think Mike's "ship or = die" comment is very relevant.

I completely = agree.

Unfortunately, there is very little that we can do about = this in the IETF.

I believe it is worth analyzing the unsavory = situation we are in, to some greater detail.

=E2=80=94 even if = the companies wanted, they don=E2=80=99t have (and cannot afford) the = engineering in house that could be tasked to create a secure product = (there is one exception in the consumer electronics space, and their = track record still isn=E2=80=99t exactly stellar)
=E2=80=94 there is = little economic incentive to be secure (no teeth in the product = liability)
=E2=80=94 sales and thus economic success is dominated by = =E2=80=9Cease of use=E2=80=9D
 =E2=80=94 and this is amplified = by the need to minimize costly customer care contacts
=E2=80=94 ease = of use is dominated by
 =E2=80=94 expectations of users (plug = and play etc.)
   =E2=80=94 you can=E2=80=99t = actually be more secure in a way that causes hassle that users don=E2=80=99= t expect
 =E2=80=94 interoperability with what=E2=80=99s = already there
   =E2=80=94 which includes deployed = systems with abysmal security
     =E2=80=94 = that might damage the security of the IoT gear if it relies on that
=      =E2=80=94 or bugs/unforeseen interactions = of the IoT gear might damage the =E2=80=9Csecurity=E2=80=9D of deployed = systems

It is very hard to secure home IoT if that needs to plug = into and interact with other networked home gear in its current insecure = state.  My only hope is that if IoT gear can be made to lead in = usable security, that might shift expectations.  It seems we=E2=80=99= ll have to do some of the engineering here that the gear makers = can=E2=80=99t.

We also need to spend more time pointing out that, = if it isn=E2=80=99t usably secure, it=E2=80=99s *not* = IoT.

Gr=C3=BC=C3=9Fe, = Carsten

_______________________________________________
Ace = mailing list
Ace@ietf.org
https://www.ietf.org/mail= man/listinfo/ace

= --Apple-Mail=_402E8211-9928-42CF-81AE-13DB60ABBC57-- From nobody Mon Oct 13 19:08:25 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 312AD1A1BD6; Mon, 13 Oct 2014 19:08:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3PUzndhBRXB6; Mon, 13 Oct 2014 19:08:10 -0700 (PDT) Received: from mail-lb0-x230.google.com (mail-lb0-x230.google.com [IPv6:2a00:1450:4010:c04::230]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DE6481A1BC9; Mon, 13 Oct 2014 19:08:09 -0700 (PDT) Received: by mail-lb0-f176.google.com with SMTP id p9so7267416lbv.7 for ; Mon, 13 Oct 2014 19:08:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=nFyNWKAYyi50r3WLnzxc3cdpXUAWIbWGSmBfpsGCDoc=; b=zs0RkGGBXUZ2NZxzZoBPaKK60ltf4Q7v3iOSFyKttXRlFFykmXbcIEF+GDWlQQYM+X W1vEIw3VS+JiAi/NsoXtbmJ6Yg2qqzt+6nnK1l8GcdB41RVrEjOQd8+toNYCsJGSUrpO oKzeky9Piuuk6HCG+r3T6VOVsVrbVvnJ4hoV2N0INX2DV6Q+OiEBHyhEPRRzi1zWnu7o Hr49czBqeKCxkI4AYu4i4lFPN7gAJTlAIpCfuCUkQ7M1jnLa7SNHGkv0vJVmZ/e0AHy1 7+gARjKeJogh7e3N8u+MZklgXkKurfD9bWip3FQzZGamkkmrcdDZFFuEpTOE3C5nmGGu vMLw== MIME-Version: 1.0 X-Received: by 10.112.130.41 with SMTP id ob9mr2077895lbb.74.1413252487943; Mon, 13 Oct 2014 19:08:07 -0700 (PDT) Received: by 10.112.95.36 with HTTP; Mon, 13 Oct 2014 19:08:07 -0700 (PDT) In-Reply-To: References: <0B1527DE-D410-421C-9870-EFA120F1AEA0@tzi.org> <543AE069.7040407@nthpermutation.com> <543B97F1.9010207@tzi.de> <543BA7BC.7040900@gridmerge.com> Date: Mon, 13 Oct 2014 22:08:07 -0400 Message-ID: From: Kathleen Moriarty To: Carsten Bormann Content-Type: multipart/alternative; boundary=047d7b342ba6859d170505587cb8 Archived-At: http://mailarchive.ietf.org/arch/msg/ace/zl-qLjWVxJQwB5elV4rTu-YkeoI Cc: "robert.cragie@gridmerge.com" , Michael StJohns , "ace@ietf.org" , "dtls-iot@ietf.org" , Stefanie Gerdes Subject: Re: [Ace] [Dtls-iot] Interesting article on IOT security from real world liability perspective X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Oct 2014 02:08:15 -0000 --047d7b342ba6859d170505587cb8 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On Mon, Oct 13, 2014 at 6:53 AM, Carsten Bormann wrote: > On 13 Oct 2014, at 12:21, Robert Cragie > wrote: > > > I think Mike's "ship or die" comment is very relevant. > > I completely agree. > > Unfortunately, there is very little that we can do about this in the IETF= . > > I believe it is worth analyzing the unsavory situation we are in, to some > greater detail. > > =E2=80=94 even if the companies wanted, they don=E2=80=99t have (and cann= ot afford) the > engineering in house that could be tasked to create a secure product (the= re > is one exception in the consumer electronics space, and their track recor= d > still isn=E2=80=99t exactly stellar) > =E2=80=94 there is little economic incentive to be secure (no teeth in th= e product > liability) > =E2=80=94 sales and thus economic success is dominated by =E2=80=9Cease o= f use=E2=80=9D > =E2=80=94 and this is amplified by the need to minimize costly customer= care > contacts > =E2=80=94 ease of use is dominated by > =E2=80=94 expectations of users (plug and play etc.) > =E2=80=94 you can=E2=80=99t actually be more secure in a way that cau= ses hassle that > users don=E2=80=99t expect > =E2=80=94 interoperability with what=E2=80=99s already there > =E2=80=94 which includes deployed systems with abysmal security > =E2=80=94 that might damage the security of the IoT gear if it reli= es on that > =E2=80=94 or bugs/unforeseen interactions of the IoT gear might dam= age the > =E2=80=9Csecurity=E2=80=9D of deployed systems > We should do what we can within the scope of work for ACE. When we get further into this work, having some open source implementations could help. The hard part may be reaching the vast number of products for which these solutions might apply so their engineers are aware of the work and other efforts they should be leveraging. We can't really worry about the marketing, but there is a real need to improve the state of security for IoT and I look forward to seeing what this team does to help. Does this article and discussion influence the use cases? I think that's where we are at right now and contributions are welcome to improve, discuss, or add use cases. Thanks, Kathleen > > It is very hard to secure home IoT if that needs to plug into and interac= t > with other networked home gear in its current insecure state. My only ho= pe > is that if IoT gear can be made to lead in usable security, that might > shift expectations. It seems we=E2=80=99ll have to do some of the engine= ering here > that the gear makers can=E2=80=99t. > > We also need to spend more time pointing out that, if it isn=E2=80=99t us= ably > secure, it=E2=80=99s *not* IoT. > > Gr=C3=BC=C3=9Fe, Carsten > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > --=20 Best regards, Kathleen --047d7b342ba6859d170505587cb8 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable


On Mon, Oct 13, 2014 at 6:53 AM, Carsten Bormann <= cabo@tzi.org> wrote:
On 13 Oct 2014= , at 12:21, Robert Cragie <robert.cragie@gridmerge.com> wrote:

> I think Mike's "ship or die" comment is very relevant.
I completely agree.

Unfortunately, there is very little that we can do about this in the IETF.<= br>
I believe it is worth analyzing the unsavory situation we are in, to some g= reater detail.

=E2=80=94 even if the companies wanted, they don=E2=80=99t have (and cannot= afford) the engineering in house that could be tasked to create a secure p= roduct (there is one exception in the consumer electronics space, and their= track record still isn=E2=80=99t exactly stellar)
=E2=80=94 there is little economic incentive to be secure (no teeth in the = product liability)
=E2=80=94 sales and thus economic success is dominated by =E2=80=9Cease of = use=E2=80=9D
=C2=A0 =E2=80=94 and this is amplified by the need to minimize costly custo= mer care contacts
=E2=80=94 ease of use is dominated by
=C2=A0 =E2=80=94 expectations of users (plug and play etc.)
=C2=A0 =C2=A0 =E2=80=94 you can=E2=80=99t actually be more secure in a way = that causes hassle that users don=E2=80=99t expect
=C2=A0 =E2=80=94 interoperability with what=E2=80=99s already there
=C2=A0 =C2=A0 =E2=80=94 which includes deployed systems with abysmal securi= ty
=C2=A0 =C2=A0 =C2=A0 =E2=80=94 that might damage the security of the IoT ge= ar if it relies on that
=C2=A0 =C2=A0 =C2=A0 =E2=80=94 or bugs/unforeseen interactions of the IoT g= ear might damage the =E2=80=9Csecurity=E2=80=9D of deployed systems

We should do what we can within the scope of w= ork for ACE.=C2=A0 When we get further into this work, having some open sou= rce implementations could help.=C2=A0 The hard part may be reaching the vas= t number of products for which these solutions might apply so their enginee= rs are aware of the work and other efforts they should be leveraging.=C2=A0= We can't really worry about the marketing, but there is a real need to= improve the state of security for IoT and I look forward to seeing what th= is team does to help.

Does this article and discus= sion influence the use cases?=C2=A0 I think that's where we are at righ= t now and contributions are welcome to improve, discuss, or add use cases.<= /div>

Thanks,
Kathleen

It is very hard to secure home IoT if that needs to plug into and interact = with other networked home gear in its current insecure state.=C2=A0 My only= hope is that if IoT gear can be made to lead in usable security, that migh= t shift expectations.=C2=A0 It seems we=E2=80=99ll have to do some of the e= ngineering here that the gear makers can=E2=80=99t.

We also need to spend more time pointing out that, if it isn=E2=80=99t usab= ly secure, it=E2=80=99s *not* IoT.

Gr=C3=BC=C3=9Fe, Carsten

_______________________________________________
Ace mailing list
Ace@ietf.org
htt= ps://www.ietf.org/mailman/listinfo/ace



--
=

Best regards,
Kathleen
--047d7b342ba6859d170505587cb8-- From nobody Tue Oct 14 09:12:43 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 241671A89BB for ; Tue, 14 Oct 2014 09:12:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.686 X-Spam-Level: X-Spam-Status: No, score=-2.686 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.786] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yPQvo4l7AnbQ for ; Tue, 14 Oct 2014 09:12:39 -0700 (PDT) Received: from smtp-in1.interdigital.com (smtp-in1.interdigital.com [64.208.228.133]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D10CD1A8986 for ; Tue, 14 Oct 2014 09:12:38 -0700 (PDT) X-ASG-Debug-ID: 1413303157-06daaa3ff5218f30001-Yzt3Th Received: from smtp-out1.interdigital.com (sahara.interdigital.com [10.0.128.27]) by smtp-in1.interdigital.com with ESMTP id SQdUw1RRQ3pf6Gu3; Tue, 14 Oct 2014 12:12:37 -0400 (EDT) X-Barracuda-Envelope-From: Akbar.Rahman@InterDigital.com Received: from interdigital.com ([10.0.128.12]) by smtp-out1.interdigital.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 14 Oct 2014 12:12:37 -0400 Received: from KYANITE.InterDigital.com ([10.1.64.253]) by interdigital.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 14 Oct 2014 12:12:36 -0400 Received: from KAINITE.InterDigital.com (10.1.64.252) by KYANITE.InterDigital.com (10.1.64.253) with Microsoft SMTP Server (TLS) id 14.3.195.1; Tue, 14 Oct 2014 12:12:36 -0400 Received: from NALENITE.InterDigital.com (10.2.64.253) by KAINITE.InterDigital.com (10.1.64.252) with Microsoft SMTP Server (TLS) id 14.3.195.1; Tue, 14 Oct 2014 12:12:36 -0400 Received: from NABESITE.InterDigital.com ([fe80::4d8a:a889:67c2:f009]) by NALENITE.InterDigital.com ([::1]) with mapi id 14.03.0195.001; Tue, 14 Oct 2014 12:12:35 -0400 From: "Rahman, Akbar" To: Carsten Bormann , "StJohns, Michael" Thread-Topic: "Apple Stores Will Sell a Smart Lock for Your Front Door" X-ASG-Orig-Subj: "Apple Stores Will Sell a Smart Lock for Your Front Door" Thread-Index: Ac/nyVL5OonVDSArTYKvZlrzlFq6dw== Date: Tue, 14 Oct 2014 16:12:34 +0000 Message-ID: <36F5869FE31AB24485E5E3222C288E1F01F404@NABESITE.InterDigital.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.3.1.133] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginalArrivalTime: 14 Oct 2014 16:12:36.0670 (UTC) FILETIME=[AB606DE0:01CFE7C9] X-Barracuda-Connect: sahara.interdigital.com[10.0.128.27] X-Barracuda-Start-Time: 1413303157 X-Barracuda-URL: http://10.1.245.3:8000/cgi-mod/mark.cgi X-Barracuda-BRTS-Status: 1 X-Virus-Scanned: by bsmtpd at interdigital.com X-Barracuda-Spam-Score: 0.00 X-Barracuda-Spam-Status: No, SCORE=0.00 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=9.0 tests= X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.10560 Rule breakdown below pts rule name description ---- ---------------------- -------------------------------------------------- Archived-At: http://mailarchive.ietf.org/arch/msg/ace/L21056UcMJU_8zkijN6m2FyY9Qs Cc: "dtls-iot@ietf.org" , "ace@ietf.org" Subject: [Ace] "Apple Stores Will Sell a Smart Lock for Your Front Door" X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Oct 2014 16:12:41 -0000 Hi Carsten/Michael, (And changing the Email subject) I found this article also very interesting (and it contained some relevant = references to the smart lights and electronic keys use cases that had been = previously discussed on these lists). http://www.businessweek.com/articles/2014-10-14/apple-stores-will-sell-yves= -behars-smart-lock-for-homekit#r=3Dread =20 Best Regards, Akbar -----Original Message----- From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Carsten Bormann Sent: Sunday, October 12, 2014 2:53 AM To: StJohns, Michael Cc: dtls-iot@ietf.org; ace@ietf.org Subject: Re: [Ace] [Dtls-iot] Interesting article on IOT security from real= world liability perspective On 12 Oct 2014, at 07:11, StJohns, Michael wrote: > http://money.cnn.com/2014/10/08/technology/security/internet-of-things-se= curity/index.html?iid=3DHP_LN&hpt=3Dhp_bn5 If you take the effort to look at the vulnerabilities reported, it is inter= esting to see that they are all exploiting the lame security model for toda= y's home networks: A single shared-key WiFi password that grants access to = everything. The LiFX vulnerability was caused by the light bulbs needing to tell each o= ther that shared-key WiFi password over the (unsecured) 802.15.4 network. = (Well, it was dumb enough to communicate that key in an unsecured fashion, = but the damage that LiFX could cause was much worse due to the sensitivity = of the WiFi key.) The Belkin camera vulnerability was caused by handing out the permanent key= s for cloud access to the camera to anyone that had access to the WiFi netw= ork, even temporarily. (That was probably considered OK because the shared= -key protected home network is "secure", no?) Instead of having this simple-minded perimeter security, we need to move to= real, authenticated authorization. That's what ACE is about. Of course, as long as the IoT devices need the WiFi password to access the = network, and other devices in the home rely on lame WiFi perimeter security= , those other devices will remain vulnerable to any bugs in the IoT devices= . If you want to keep those lame other devices, the only solution here is = to firewall them off. (Using IPv6 for the IoT devices helps quite a way he= re.) The next time you read one of those dime-a-dozen articles about "IoT securi= ty", read closer and find out they are really a lament about today's lame h= ome network security model. Gr=FC=DFe, Carsten _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace From nobody Sat Oct 18 04:35:43 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A17CE1A6FB9; Sat, 18 Oct 2014 04:35:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.55 X-Spam-Level: X-Spam-Status: No, score=-1.55 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id stMgleWfmA9Y; Sat, 18 Oct 2014 04:35:36 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 67B671A6F9A; Sat, 18 Oct 2014 04:35:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from smtp-fb3.informatik.uni-bremen.de (smtp-fb3.informatik.uni-bremen.de [134.102.224.120]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id s9IBZWHE000960; Sat, 18 Oct 2014 13:35:33 +0200 (CEST) Received: from [192.168.217.113] (p54892213.dip0.t-ipconnect.de [84.137.34.19]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp-fb3.informatik.uni-bremen.de (Postfix) with ESMTPSA id 7A253E12; Sat, 18 Oct 2014 13:35:32 +0200 (CEST) Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 8.0 \(1990.1\)) From: Carsten Bormann In-Reply-To: <300A8653-4B32-40AB-8DB3-EE8EA3F1C2C7@tzi.org> Date: Sat, 18 Oct 2014 13:35:31 +0200 X-Mao-Original-Outgoing-Id: 435324931.27575-9f5700bb96d21423e37a9b0134ec2caf Content-Transfer-Encoding: quoted-printable Message-Id: References: <63722FD9-BA11-48E6-951A-7A3823F5EFD5@tzi.org> <300A8653-4B32-40AB-8DB3-EE8EA3F1C2C7@tzi.org> To: dtls-iot@ietf.org, core , ace@ietf.org, "6lo@ietf.org WG" <6lo@ietf.org>, lwip@ietf.org X-Mailer: Apple Mail (2.1990.1) Archived-At: http://mailarchive.ietf.org/arch/msg/ace/sZdxInm0F1cwEPCx_oZIJL8Oqjk Subject: Re: [Ace] Constrained Node/Network Cluster @ IETF91, "final" version X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 18 Oct 2014 11:35:41 -0000 On 12 Oct 2014, at 10:40, Carsten Bormann wrote: > A first draft version of the IETF91 agenda is out. > ** THIS IS GOING TO CHANGE ** for conflict resolution, > so please don't make travel arrangements based on it. >=20 > Here is my usual eclectic condensed agenda built from that. =20 > All times are HST (UTC-1000) (use = https://datatracker.ietf.org/meeting/agenda-utc and press the button to = get your local time in case you want to listen in from remote). Here is an update with the =93final=94 agenda (caveat viator). Note the 6TiSCH move, and the newly scheduled JOSE meeting (across DICE, = ouch). Gr=FC=DFe, Carsten MONDAY, November 10, 2014 0900-1130 Morning Session I Coral 2 APP appsawg Applications Area Working Group WG - = Combined with APPAREA Coral 4 OPS v6ops IPv6 Operations WG 1300-1500 Afternoon Session I Coral 4 RTG bier Bit Indexed Explicit Replication BOF 1520-1720 Afternoon Session II Coral 1 INT detnet Deterministic Networking BOF Coral 5 OPS anima Autonomic Networking Integrated Model = and Approach BOF Coral 3 OPS v6ops IPv6 Operations WG 1730-1830 Afternoon Session III Coral 5 OPS anima Autonomic Networking Integrated Model = and Approach BOF Coral 1 SEC *** dice DTLS In Constrained Environments WG Rainbow Ste 1/2 SEC jose Javascript Object Signing and Encryption = WG TUESDAY, November 11, 2014 0900-1130 Morning Session I Coral 2 APP uta Using TLS in Applications WG Kahili 1/2 INT *** 6lo IPv6 over Networks of = Resource-constrained Nodes WG Coral 5 TSV tsvarea Transport Area Open Meeting 1300-1500 Afternoon Session I Coral 1 APP httpbis Hypertext Transfer Protocol WG Coral 4 RTG rtgarea Routing Area Open Meeting Coral 2 TSV tsvwg Transport Area Working Group WG 1520-1720 Afternoon Session II Coral 2 APP *** core Constrained RESTful Environments WG Coral 5 RAI webpush Web-Based Push Notifications WG WEDNESDAY, November 12, 2014 0900-1130 Morning Session I Kahili 1/2 APP *** core Constrained RESTful Environments WG Coral 3 INT homenet Home Networking WG Lehua Suite SEC oauth Web Authorization Protocol WG Coral 4 TSV rmcat RTP Media Congestion Avoidance = Techniques WG 1300-1500 Afternoon Session I Coral 5 SEC *** ace Authentication and Authorization for = Constrained Environments WG 1520-1650 Afternoon Session II Coral 4 APP httpbis Hypertext Transfer Protocol WG THURSDAY, November 13, 2014 0900-1130 Morning Session I Hibiscus 1/2 INT *** 6tisch IPv6 over the TSCH mode of IEEE = 802.15.4e WG Coral 5 SEC tls Transport Layer Security WG Coral 2 TSV taps Transport Services WG 1300-1500 Afternoon Session I Coral 4 INT dnssd Extensions for Scalable DNS Service = Discovery WG Coral 3 SEC saag Security Area Open Meeting Coral 1 TSV tsvwg Transport Area Working Group WG 1520-1620 Afternoon Session II Coral 4 INT *** lwig Light-Weight Implementation Guidance WG FRIDAY, November 14, 2014 0900-1130 Morning Session I Coral 3 INT 6man IPv6 Maintenance WG Coral 1 TSV tcpinc TCP Increased Security WG 1150-1320 Afternoon Session I Coral 4 INT intarea Internet Area Working Group WG Coral 2 SEC httpauth Hypertext Transfer Protocol = Authentication WG From nobody Fri Oct 24 20:16:18 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 365E21A1ADD for ; Fri, 24 Oct 2014 20:16:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zqsjR9y7N5Yd for ; Fri, 24 Oct 2014 20:16:15 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 279A21A1A33 for ; Fri, 24 Oct 2014 20:16:15 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml401-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BKX48408; Sat, 25 Oct 2014 03:16:13 +0000 (GMT) Received: from SZXEMA406-HUB.china.huawei.com (10.82.72.38) by lhreml401-hub.china.huawei.com (10.201.5.240) with Microsoft SMTP Server (TLS) id 14.3.158.1; Sat, 25 Oct 2014 04:16:12 +0100 Received: from SZXEMA501-MBS.china.huawei.com ([169.254.2.205]) by SZXEMA406-HUB.china.huawei.com ([10.82.72.38]) with mapi id 14.03.0158.001; Sat, 25 Oct 2014 11:16:07 +0800 From: Likepeng To: "ace@ietf.org" Thread-Topic: Draft submission deadline Thread-Index: Ac/wAgP0bEz9LNFlS3uH32HkYz1d8Q== Date: Sat, 25 Oct 2014 03:16:06 +0000 Message-ID: <34966E97BE8AD64EAE9D3D6E4DEE36F2581A8C23@SZXEMA501-MBS.china.huawei.com> Accept-Language: zh-CN, en-US Content-Language: zh-CN X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.66.167.122] Content-Type: multipart/alternative; boundary="_000_34966E97BE8AD64EAE9D3D6E4DEE36F2581A8C23SZXEMA501MBSchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/ace/sNnyKHnDErXHXohXZg5pKFS5ahA Cc: Hannes Tschofenig Subject: [Ace] Draft submission deadline X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Oct 2014 03:16:17 -0000 --_000_34966E97BE8AD64EAE9D3D6E4DEE36F2581A8C23SZXEMA501MBSchi_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello all, Kindly remind that draft submission deadline is next Monday. * 2014-10-27 (Monday): Internet Draft submission cut-off (for all draft= s, including -00) by UTC 23:59, upload using IETF ID Submission Tool. * 2014-10-27 (Monday): Draft Working Group agendas due by UTC 23:59, up= load using IETF Meeting Materials Management Tool. Also please send us (ace-chairs@tools.ietf.org) your agenda request for the= F2F meeting. Thanks, Kind Regards Kepeng --_000_34966E97BE8AD64EAE9D3D6E4DEE36F2581A8C23SZXEMA501MBSchi_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hello all,

 

Kindly remind that draft submis= sion deadline is next Monday.

Also please send us (ace-chairs= @tools.ietf.org) your agenda request for the F2F meeting.=

 

Thanks,

 

Kind Regards<= /p>

Kepeng

--_000_34966E97BE8AD64EAE9D3D6E4DEE36F2581A8C23SZXEMA501MBSchi_-- From nobody Sat Oct 25 00:38:41 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F4A61A6FFC for ; Sat, 25 Oct 2014 00:38:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.198 X-Spam-Level: X-Spam-Status: No, score=-4.198 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, T_HK_NAME_DR=0.01, T_RP_MATCHES_RCVD=-0.01, UNPARSEABLE_RELAY=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R2QkSsxSBtk1 for ; Sat, 25 Oct 2014 00:38:35 -0700 (PDT) Received: from bohuslav.ifi.uzh.ch (bohuslav.ifi.uzh.ch [130.60.155.10]) by ietfa.amsl.com (Postfix) with ESMTP id C757E1A7034 for ; Sat, 25 Oct 2014 00:38:34 -0700 (PDT) Received: from authenticated sender schmitt by bohuslav.ifi.uzh.ch (postfix) with ESMTPSA id SA; <556247FC76> Message-ID: <544B537A.5060205@ifi.uzh.ch> Date: Sat, 25 Oct 2014 09:38:34 +0200 From: "Dr. Corinna Schmitt" User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:31.0) Gecko/20100101 Thunderbird/31.2.0 MIME-Version: 1.0 To: Likepeng , "ace@ietf.org" References: <34966E97BE8AD64EAE9D3D6E4DEE36F2581A8C23@SZXEMA501-MBS.china.huawei.com> In-Reply-To: <34966E97BE8AD64EAE9D3D6E4DEE36F2581A8C23@SZXEMA501-MBS.china.huawei.com> Content-Type: multipart/alternative; boundary="------------070607030308000007080106" X-Virus-Scanned: clamav-milter 0.98.1 at bohuslav X-Virus-Status: Clean Archived-At: http://mailarchive.ietf.org/arch/msg/ace/k-OsHd7RJIndhY42OeNSNsJSJrc Cc: Hannes Tschofenig Subject: Re: [Ace] Draft submission deadline X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Oct 2014 07:38:38 -0000 This is a multi-part message in MIME format. --------------070607030308000007080106 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Dear Kepeng, thanks for the reminder. Due to overlapping events I will not join IETF 91. Thus, we decided to submit the draft update until end of 2014. I hope to find some time to join the ACE session remotely. Regards, Corinna Am 25.10.14 um 05:16 schrieb Likepeng: > > Hello all, > > Kindly remind that draft submission deadline is next Monday. > > * *2014-10-27 (Monday):*Internet Draft submission cut-off (for all > drafts, including -00) by UTC 23:59, upload using IETF ID > Submission Tool . > * *2014-10-27 (Monday):*Draft Working Group agendas due by UTC > 23:59, upload using IETF Meeting Materials Management Tool > . > > Also please send us (ace-chairs@tools.ietf.org) your agenda request > for the F2F meeting. > > Thanks, > > Kind Regards > > Kepeng > > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace -- --------------070607030308000007080106 Content-Type: multipart/related; boundary="------------030307000106050603090906" --------------030307000106050603090906 Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 8bit
Dear Kepeng,

thanks for the reminder. Due to overlapping events I will not join IETF 91. Thus, we decided to submit the draft update until end of 2014.
I hope to find some time to join the ACE session remotely.

Regards,
Corinna


Am 25.10.14 um 05:16 schrieb Likepeng:

Hello all,

 

Kindly remind that draft submission deadline is next Monday.

Also please send us (ace-chairs@tools.ietf.org) your agenda request for the F2F meeting.

 

Thanks,

 

Kind Regards

Kepeng



_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace


--
--------------030307000106050603090906 Content-Type: image/png; x-mac-type="0"; x-mac-creator="0"; name="visitenkarte.png" Content-Transfer-Encoding: base64 Content-ID: Content-Disposition: inline; filename="visitenkarte.png" iVBORw0KGgoAAAANSUhEUgAAASgAAACgCAIAAAAw8WZPAAAAAXNSR0IArs4c6QAAAARnQU1B AACxjwv8YQUAAAAgY0hSTQAAeiYAAICEAAD6AAAAgOgAAHUwAADqYAAAOpgAABdwnLpRPAAA buNJREFUeF7t3Qe8FtXRP3CT901i2htTTVeTGE035Z+YZkxijFFjQcVKVXrvvffee6/Se+9I R0CahSqCgtJBQKTl/9099y4P9yIiEOXq83zwus8+Z8+ePTtzZs7Mb2Y+9p///OeKd/uMGTNm 5cqVWq1atWr//v3v1jz9e3oGPnIzcOWVV/7ud7/z2DfeeON9993n67tMAcZ7p8/s2bMfeeSR q666Skd14s/o0aOdTH/SM5CegSwzMHny5MAjWAbXYRnMcg7muuKsvz333HOuvPXWW59++ul9 +/ad4/r0T+kZSM9A9hnAdTjopptuwp9nnZ+zMB5mu/nmm8/Nr+m5Ts9AegbedQYIMNKLGMze MivjVa1alax866233rXTdIP0DKRn4HxmIOifWXjqDMbDdRqdOnXqZPqTnoH0DFyKGcBNmLNP nz40z1QuPc14NEx86bc0412KCU/3kZ6BaAYC4/k0adKEYEt4L4PxKKP2dUEaphkvTTLpGbhU M5AwHs4i2Ii3wHsZjJdq/bxgxsvk7XPovWkl9lK90HQ/OWMGUhlvx44d1157bRBvEeNxQdxx xx0Ju7wnxjtx4sTJEyeSa/fs2b1mzZrp06YPHzp02JAh/jmYOmUyifrGG28kzU6eyBmzlh5l egYucgZSGQ/9ly1btk2bNhmMh+vw3oUxXrhq586dkyZNatyoYY1q1apXq1anVq0G9eo1rFu3 ob/16tWrU6d61arVq1WvX6/+6FGjt219NVx1kY+Uvjw9A5f/DGRhvJdffpnQixiP4INNSbV1 no/EI+hsBl2/ffuOnj17li9XrmrlKhivaZMmXTt3fnrwoKlTpsyeNXvO7NnTp00bNnRoj27d WjRv3rhhw+pVq5cuWbpTx46bN28K7KerSGymP+kZ+DDOQBbGQ/CMKYsWLboiMWa+J4kXGGb0 qFHlypatVrVqy+YtunbpsnDBgtkzZo4bOzb7Jm/evGecX75sWa+ePTWuXatW2dKl+/fre/jw YY2PH08z3oeR6NLPlGLVTJgiIMuuCP9LZZVzSzwsovGunTsbN2pUsUKF5k2bDujf74Xnn8c8 zg8cMLBCuXKv79hhzhM5dvTo2y2bN2/YoMHxY8e12bhhw/BhQ1s0bVa1cuWaNWps2rgxrXam SfTDOgPZJV5Ak12RP39+3r3zZzwtX968mW5Zr27dNq3bLFiwYPOmTXv37Hb+hRdeaFCvfptW rVu1aJnwkoO5s+c4o/3gQQN9XfbssmeXLiX9Onbo0KhRw9IlSzr+b8i9YPi55IbU49aY4yfi 5enSKclRT8czPD5pj86HiAuzMx49k7Z5RRbLCgY4h8Tz6ytbtpQpXTrs5ba8vMWZwQMHkn57 du/R47/vvPPfd92FLZ0/cuTI4UOHHIwaOfLef//7zjvuaNWyha99+vRt3qz59te2b33llT69 e7do1qxYkaKB984x4cnSENqkPs/5X3VJXijGyzKYLF8v6C6RvvD228defOGFtWvWHHrzzfPZ aV/QjdIXva8zkJ3xgn3lCiDOLADqs77y2JryH5EKNnXNmzXr3Knj/v37aJj169WbMX0GY+bK 5cunTJ78VMGCRQsXLl60qM3bcyuemzljhqt6dutWMH/+J/PntxvkynDJvr372rZp88zcuW+8 /kbMe81Lliix5eWXw9Yxu63l2LHjSxYvNs6DBw8ans+xt48tXrSI8ebNN98860Rqc/To0WZN m+Z54vF169ZdQjrW1fLlyx95ODeJ/fbbb7u7UZHhe/fuveC7RPrC88/f8+9/f+H//u/zn//c nDlz0ur3+8of/7WbXSzjRULm5Ek806RxEzZJTNK5c+eXXnypdMlSFM6li5doMGHcuP59+w3q 379mjeq7du3EVBs2rHfjwQMGdOvSuX/v3jWrVX/z4MG9+/Y9u2RJm9athw8btmDe/Igze/Zs 3bKVHeORw4dTN4cZwu3kyTffPPSrm276whe+sHbN2iBe9u8/8LOf/vSLX/wipgpSOhB9+DU8 LSfHN77+dfGIvXr0SG2TCMxwSTI1CdtEfcVdht6yCFhnmjZpqtsfXn/9gQMHjr711r3/vucr X/7y2rXR2MJVZ3QV95X6ZrPcMQy+YIEC+rzt73+rVq3qhg0bLoyHQ1cXdu1/jfbesePsmsI7 jTx5rZdwkBc8S8mFyajO0VXyrpOHfW8Sz2Vjx4whslq3arV169Y1q1a3atmyc8eOc2bNInwi Ujt5EkNWrVK1ZvXq+fPmxZlUphnTp1PMGjdswOJSrXLlgvny7969J2KJN97ApdOnTp01c2bb 1m22b9/eoV077r4e3bpHhH6md+HUyVOHDh36xc9//vnPfU6fmYy3/yc//jH58NJLEeNl/3jg 48feHjt6NA5n7EkaBHF61kvCSfvC1F+1T7ZeCR/a5TZv3oKEj9ofP/HTn/7ks5/97OZYYqcS U1ATMroNojzlTJYx/PmPf/z85z+/efPm6PwF4dSzdHjBhBUT9wljiN7FRXzi53jHLXagyH37 9x858lbGHTMfIPWeYcYgLvbu3Xfs2LGLGE7GpfFDnX6lnvQ99RnGGAZ//Ngxo0rOvJPmleW9 nC/jRZR36hQzZrkyZVq1aLFkyeIN69e3b9vu9dffGDVixBtv7Iyf5MT+ffuKFylSqkSJ8mXL 3H7bbfx4M6ZNw0779u3Ndd99LCj8B84vmB+JuPBZtHDRYw8/XKRQ4SOHDlO0WjVv7vL16zdk ed/uTnH91S9vuuqqLwSp4rP/wIGf/exnX/rSlzZu2Lh39+4qVau0bNmCCM11/3333ntP/379 XMU52aN791q1a7GjEstFixV1d+dPHD9OSyxUqBDLELZp367dnf/61x3//CdPo02pBtOmTS1W tOjAAf1LlSzlV2cGDhjwQK5ct/7lFiYi82u0NarXGPL009aXEiVKkKsUxNy5czdu0mTcuHGF Cxfu0rmLnr2fiRMnPvXUU8xXpihsDnfseB2Q4K4777rvnnt5Vg4dPvzKK6+UKF7i29/+1he+ 8H+PPfaYTa+Rv1e20X79uvXlypUrUqRI2TJlFi9afDFsE+xSR986+p6IMkvjt98+ijTfiRxx Ea/Sr3716+B/Mn6zWqVKlddefTXLuvP6668/kvvhv9zyl02bIt/vxQzJteSEV/PSSy8VLVLE HSN6OG/W03j1qlVVqlTdtXMX/rnrzjvZJ+2ngEN2vrHzrK/swiVeWHL43+rWrt2zRw/W/0kT Jgzo15/EM61+Oha74Xbv2tm+bZsmjRsVL1KU0Js0aSK6rFK58p7du/kMKlUoX71K5SqVKs5N 2b34SbfPPbdy8qRJWzZvfnrQ4LatW9uVvSfG44hH/V/60hc/9alPfe5zn/vaV79KYSMJly5Z ao/32//3/3y1GwQMd/DUk0/pnF3nq1/56qc++ckVK1bQb50nTn/60586sINFA40bN3aMl/wl 5Ht07/Hxj30Md/36l78qXqyYHkYMH+Gnf99993MrVlxzzTWf/cxn3Vr7W//ylzGjR/vp61// OsuTSb/9H7f72r170HVPbtu69ZY//9mZL171RQNwULRoUUP97ne+S2aSeKT67f/4x6HDkVHq PVGY9rNmzvrSF7/YpHHjMqVKXfPda6ZNm5Zlrc0i6rN8zUIiDerXDyr6WT/n1hpcsn79+rxP PHFg//7kQbL0w/b2veuus0JFciymMWTg8VetXJml5cL5C0y+peTc488+zuxEbzdeIF++l154 ccf2HTVq1CRCAg4k++esklCzMaNGf/5zn31126vWi+98+9tbt24bOWK4YdsdnPWVXTjjedp9 e/dWrVyJL47DAJXXrlmT6HtlyytBbQsikfb49KBBxYoUQXwMJ+PHje3SqXPRwkU2b9zUskWL B+6/P+/jjzdt1IhBJfVNWOybN23WsWOHl1560Z6Q2aZyxYpbtkTG0sTEgmAPHz70q1/+8qpo j5epah7YHyQe3WzrK1u9wv/5n//B2mYk1/33h30dLedvf/3rlZ/6FPfFiuXLceP1P/gByCjx 9bGPfezRRx5hSkXuv/rVr55fu3b5s8u+/73vfeMb39i9a1e7tm01+OY3vwlzQw0mD3XYrGmz iHliNZXW/Yn//d+HHngAb6Own//sZ/afkDomgXB2U+179+q9Yd26r3z5K9ddey0pF15tgwYN /PTYo4/ywcycMfNb3/qmUS1auNBk/u63/w83mh/KxQVAeXTuWur3ju2vOc6fL999993rYNu2 baR0o0aNyA2moA4dOljsKlWsNH78eL+aPQxWoWLFCRMmWEb7+/Tt1759+759+qD13/z611On Th0zekzXLl3r16/ft29feweT7EldK+1VyxYtrarI9403XgdB7Na1K5EFR/HG66+b3s9+5jPl ypazGw+i4PChw927dStXrvzokSMJ/0YNG331K1955OFHwoZWhzOmT0PKq1etHjpsWLeu3WrX qt2nV6+XN7/M4/W1r32NimFuF8xfULlSJauz9/j2sbcZGgy1d+/e8+fPN+zWrVozmLOu165d u3//fnQMQrJevegBJ0+afOjNQ7ZCn/70p5944gnaVvfu3V/dts19bRkqVKjYuWMncqxbNMJy NlCJjhxeXLJDmThhwnXXXkOhe+CBB1CLm9Kzvvud79h9XGLGi5aiyZOrVanct3dvE2pZmj9v Xs/uPRgVkiXZxBFfdWvXKl2iBN4rWCA/bHTtGjWeeOzxhfPnFy1cqFTxElTNxx99ZN68eanj 8wLwkvfXrk1b74+QbNywkYmM22RoAIHxfnnTTV+86iq6QZiIAwcO/uynP2Nc2bRxE7fEtddc 861vfSvMY4Xy5RE3kJq3/feY8RZRKU+cuOOfd2AnXPf44499/OMfR08jRowgJ6+++ms/+P73 se6nr7ySyFm/bl37du31QNsM96pZvYavhEm+vHkxcMJ4D+bK5cEt2L/+1a8w3sYYCeDTqVMn 7b1dmqQDil+w1Wh5+23/+N///d+pk6eElsyYH7viiqcHD3Z8y5//5BZWorO+v3eVfq7CeD/+ 0Y3r173k2GMa1fbXXnvwgQdKly6NDRhvmIK+fvXX/3LLn8uXL2/GVj73HDpmMKtUsSLSIf// 9te/0R2KFyuKmH584423/f3v3pdrv//97wPhMiA98fjjjzz88E0///mePXtoB48/9pjO/3n7 7XT4z332s3nz5OFM+v3NN1tWSpUs8fWvX61zQsbg0bHjm37xi2rVql1//fVDhwxF93g7f778 mD+T8aYbxuqVq+jhN97ww6pVqnztq18Z0H+A4V199dWYbf78BT/+0Y95s/7+178ZCRv7d77z bbxqOaMrff6zn9X5jTfeYCbDJYTkvGeeiVaW+Hk5kO1Hrv7a14x85IgRX/7SlxYvXITrvPpy 5cv36dW7Vo2aP/3xT9q2aQvnGI04/jAH7tu7J1CjiaXu6Wr2rJkF8hf49je/2aNHjxGB8V6+ 1IxnUlq2bNmsSZNpU6fOnjWrQL78hZ58avOm6DanF+Z4E2jBo4K21rhp0+FDhloL8z6RZ+6c udAtlhOYsjq1a82de4ahXCe4ZdCAAVga3VAz3Kh+3bpvHz29u4j2eIcOeWfUuUQPsdx+77rv mcRXXtmC8a757ncxD1+iDpECcqcVZzDelVdivIgfOnZ03j7zuuuuu/GHN9iU2gqSk7RBK6tF vXevXkOGDLEussdoSVC4yt2ZdpiUCEYnTTrl3rJH4sWM58W8GUnjq64KyoYP6f31q6/+7ne/ S9H9zGc+E7TrsOdElJ/8xCdmTJseWt59190f//jHRg4fbtfxpz/+0TpCfl4s470UMR440c2/ +x3z1be+8Y3q1asRgN/51rc2rN/wk5/8JISE/b9f/waxejSbAjveb3/725jtnnvuKVuGsh19 /n3nXcC3DpB4sVjBxsl2sLSeG274oZf1oxtvLFKoEBFHsg0aOJA2sW7dehTyg+99nwCc/8w8 rLt7d4SsoBQdPHDA5W7kq/UrX958NpA//clPpkyaFJ7XX+IUBa9ZvcpiUalSJWd+8Yufe4/0 +R//6Edert3NH3//B+fnzpn9/eu+x8LHrNWhfdRnty5db/7dzQ6KFStaqlQpBz/76U+s4wcP HJw0cSK59K1vftMBU/uNN9yw6rmVa9aspoksXby4QH6mwLzhkd3rB9ddZ80KLOeVEQx5Hn+c HiHsJrTBeFh9x47t48aOY2nXDDE4c4kZz51wfO1aNQkBhIXErZED+/c/cvjIGVvJmPEG9OvH X3fLH/8oIqFVq1b0GS9m5PARsNF33XFH7vvvb1Cv7jPPnFY1g5pK139m9pxXX3112bPP2gKx x9SqWdNXUiJZ5smKe/59D7q3CmK5I2+9xQNBdPzpD384fPgI1RTjURR37dplwKVLl4kYr3v3 LIxHInmvn/zkJzEbQ5GWtsX/8z8f/8Pv/0DHCNO6d89ef1u1aqkHARaBJmgsDvCbd+a8NXLK pMmB8fhYvFpbxM9+9jMzZ8586+hRQ/VQeZ54gnS1M7zlT382gYm1wDvWAxsS4TNr1syvfvWr FNpNmzYee/voJWG8SNWMTbhUuHz58nF+WpuEokTaY9++r732Ggq2uGjw29/8Bh0XLlS40FOF xo8bT6ZhvHvvucci69djb79929/+1qhBzHiPPVayZElbod/+9rd0H4IRw8yZNfuGH/7Q47Rr 165bt+5Urx9eHzEeje5HN9zw+o7tkyZOuuGH16OKTMY7aHnq1DFikvzYLm9eKr3BkDxZGG/t mtUYj2LpjtScXj17zJ8/z8xDbjA7sf1qz8/pdbNzSOM1NrbNWDdN4FtH3ipSuIi1wBnXDh40 GF8xoowbN55YmzB+PDObBZqoF7x23XXXLlm0mJvXJ7x9HwqdJZ5QDZYwBGrPXLBgweBAThiP Yd80/uJnP7eg6Pa/wnicdZUqVOzfty/RRJR5+LlxxrIzlJ9Tp6KtUes2jz/yCFNPoSefZLKz DbUXomHmfeLx+++55+EHHyhVongWVRNOSle8eeXLlitbqvTLmzaNGDacO962J7lFsO7QDEkP VGtl/fGPf+yAAAxKmhWBpkcR4rjz9amnCvm1U4cOGA95OZ4XbywjGnr8CV/pmfNj/yEevuvO aP/2zW9886+33oqSbM8MqWmTyLjCrBKuMvV/+P3v//ynPzn585/93F2gwx3f8c/bI9Pf0bf/ cdttvtqxMI1SuV1Cif30p690I8SdPIiDCRMm2ohrHGm2n/50tHVsEhmT7F5wL15lbcs6t++q ZcYNXEXaXPWF/6tRowat8qc/+TGf/ltHjtx9513snLiOZ4V8u+GGG/51xx3aWIOsoZ733nvv bdSwodEOHjTI17qxnCeBWYft8ZYsWfLQgw8SmJw6P/zh9XCGzlAR1730Em7MlStXv379vYXF ixfT3J5f+/zY0WO+8bWrX3t1m/0IzblunXp8sJH0OHnKevrLm36h/x98/3vDhgy1xuknvMEw /kzjynN01zKly7iEUIpcVnNm2w6w6onq5DtlD/vHP/7x8MMP79u3n6pJrLmWfmg5sI1kFi5e vDgWcS0VhsXBIBs2aGjHMWrkKHa1a7/73WJFi8nR/OUvfXHJokVI9Jvf+EaFCuXJTLLOpvHv f/ubBciON4iWQAPJMaqmVFvr+/Xrd813vst6BJjlzMZNZ4ccX6BxxS3ZAJh9Md7G9etNk72s dTSb5fTU3j17atWoQdvs368/QUdjHD923LgxY7t37fbEo4/16tnLDpjUpnNnIayYc9bPmTnr 1a1bEcrkiROrValii5jaLIwe7z36yKM0qN/f/DtK7MQJE6MZOXmS6YLW7n1gJC3tCiypqJCk kujCcsXOHhlFTv0H0gUNiRikT4Y+Ga8xmLn+/e9+h23sNo8fP0am5c2Td9SokWHSeRSQoAW1 RPHiwYPPKmMppQVYF/XDfkhJ++Mf/mBxpXlqsPWVLV48gYYWkwcJkpPZ84FcD+jt3nvu7dun L/Jykt7VsH59BEFeZZvb8+O8k6dsd2vWqFmmTBnvi0IY6AWJoHVCb8yoUXjg5z//ueelyJFv brRi+YqKFSsxhjVv3gwcp1evXjNmzAz384y2RowrWo6MzSFt2rTlzrELbdq0KdXLbNNrSpcq jb6Z3CxPFDANoAvsAL3KLp0716hZ004s2SzR9umBQ4cMiZTPgwebNWuGl8Lz+mvRsR/zRiwT 4ydMwPyWLZYSYkqfNiMeiOOX8QPgnvT2pnhTV65cpQOLSPv2Hdgdhg0bzt5o9SS6Vz5na7Ky YsWK7dq2a9q0mS+nTp4YNmxo5cqV586d26RJ02ARwUulSpVs2aI5FjJ7xhC2nYnCmbxBJ9nh 2Jm4o5cvX4ZaQD4YKfiHdu7cddYXd+GMN2rkCM9pO2TG+/XpQzcI+JIsH9qzrVqgVK+qZ4/u S5csYSgfO2Yswg3nWVCQfhbGMzKq4+yZszp16EiVJbgtwEwj2ZuFTuyUCJlwHCGLjx9PlqXw Nfzk48WEg6AuZsdYnnFh7BqJrzrt9c6Yej6tlMspk4Fb4saZ3Ub++miNDOexPVMNs0TcQ4aV KBpqpgNdJ8k4Q4vw9UK57mTq06VOTnIXB5Re3kJrfGaD03OV2syDhDiSM06mTGY0pbGqknxQ aXwy4yniB8qYRi/Fw3oXqSSYiiXIJKSM9kmz5InCGV1mecbk/SYHJzIHGRxd2T/ZZyk1f0Jq e2/8bAve6YfKmMNMensnxPyFM97oUSObNGw4aOCANatXYyFCL9ipsjLe668PHjjA4rRg3ryh Q4dWLF/e1q5e3ToWcraKFcuWPb92DRGRnfEisjtxgnmDJ501zBJr09+hfcSrZ9wiepWR3yKF QDOwIGG9DCQb+zair5nH0fnIG5wZphS3cybTaXoiK946/JTKAKk3DbfMaKCnTIdK8s7sdkDG f/Ob3/zPxz8ePGkp98q4NpXlkmdMHuFs7/t8zp3hBs4YZ+QGP33ezpxxclkmHj1pk9F7ZsvM Z8zwFWUAieKOwin/S+YhzHP0Y+bf1DPJcWr7cDJz6s71aPFbzHiEjDd4+sKMyYxXtvCM8WsO RynPknqD0/fNPJs8Vvxc5+tKT52qcNMwK9kf5mIYb0STBg1sABg/+vbuQ1PasX171oX51Enb 6B7du61du2bJ4iV0D1av4sWK534oN92M089+w1aYNynVgR5GqSsrIhvM1MmT165ebXfets3Z GO98aO+cbc4hTM4qbcKUZZ+45GTWu8XtOSHs3Ig7bqjwdBc98EvWQdhRx+p5+vM+zcDFMN4o sqtf374vb9o8fOgwaiToY3Z6YlRo3KD++LFjJk2YaBNFarEWCH+gNDLiUbvpkFx8z8zNsseL hJgOqZqCD2wbJowf53bAIqkSL2gyWT6xKHv3JSqs08m1Z7kkFqRZnyhDrGUsDUGlJCoTXora x4tw6gt0jl4wfuzYZUuXXjzW8ZKTRliUz2fSLvmtP7IdXjjjzZo1i0fO7o6Jn1zCVCReNhTv qZ2vvzH06aeZJWV5GD9u3HPPrWCoFezHz8bzvmTxInFmAVR9pg4ZEf3uXbsF+DVt3Hj5smep alUqVZaeLGmGUN566whQKLACRJx/0f9ff8NW0xJ+Pm/Utg0yo0XzFnrI3p6tr3jRYpCWYJ8Z N7UTO3Vq5vTpDRvU50WwdWbCejh3boYZXgoGJCsFW47gpuyyI3V1OJ+xpdt8uGfgwhnvpRdf tGGjZLKckntVK1WGLcimap7avXNnm9atGJHZLZk07QnFH4wYPnzqlEnMaM/MmQPCUrlChSyq Jqai+SyYP09L1iHBdazD3AlgRwnjOXj22We5azm+v/+979/wwxt++hPW8p+wPmfdB57tHWoD z816TgPs0L79GZfEu8ED+w/w7TA3c9QGPSwe1X969+x19113Pf/883//298pzLkffIiVuU2r Vjf/9ndQS4zXwXvx4aab9NNd5AxcIOPZtRAIsGAd2rWN4NETJ/bt1WvksGEg3ll4jx8PQgUQ wVatXp3anTq0nzVj+qwZM8SniwmaOmnStMmTy5YqlYrVjLekkcmLnXfixEmECfNuuzZtuCX4 W1IZD1CLP5S/FSry+ut/wOuNi8ZPiNCG4RPUp3DM4JYchzMEJgt7rvtzrVq5KiiHqXKJD5SR nRvQEpN6vl+fvgBQrOr/uO0f856ZB3ixcOHC3j17Yjnu6V/8/BfBX3+RLyZ9+Yd7Bi6Q8QKN Mkvy0tDWGC25E3r16EmyZaE5+h/n2/wFCwYNGkQWsX/CxYEOtG/Tlpth3JgxrNhdO3cJ+Npk rh2/+MKLTRs3nT59OifysqXPRpCxevXejhDrGa0i5nz7bcIQcAyUjDMN1/3zn/90hhWUX5GM 1fTwkUP82pHR9QDZvA+wYMaM6Ry7RiKGCMNjpNdf3xFQzgsWzHeeXxV4JUBPOHO576iRTViA ZkcgL+VvwRpvu+22alWr0YS5vAsXKgTnTYCDlYJZ7ty1K0H0fbipJ/10FzwDF8V406dOg9Vi q+QlB03gN0wiwRMRQeJhMHEMUPDQJ3yRi+3rnn8eAA9Kk1bmQxcNEi/1s2fvXszTulVLTmeQ P7Z4PsNEiMVSMXrqcAlNVYwCkMRS1ov//IfqG8D+jnfv3oU3YAi2bttmt/blL38ZWpIL+9NX fgrAh5aoZfC589sKSvDVBzrp0KHDv/zlLwU6XHvtNeGk2KJFcTwbvzAMDe824QZ8LNo92l/u 3MlRy88bocMu+IWkL/xozMCFM575sQsSWQdrv3DBQqSPjnUnxiR8jsrRc+zY9ldf4zSHwo/5 oQ/XeWAVYTUCTMMxYRLhvk+eDFfF/44GnyZLyboXX6SsVixfAWIzizh1iX7hG/9yyy0YI8lH OGDAAF/hVLS3KED04UlGIJLQpg4CS0YZ64ULBSx+/H8+PmvGTKoj5gTvgquIIi3mz+eWxHga 61zyeVApfYK8ZFkgsn+9rFwFHw0yznlPeeGMFywNZAvjXpVKlbgHunfp2kUIXdu2Hdu3jw/a AUbyH1SqUKFzhw7du3QRU2eb17VTpy6dOrVs1kxcpgP/BA3Vr1vHgWtdqLEDpk6XQ8oBKHVo 115wQ3auCxIPCAhL/O63v2MFDWwwcOBAZ4SWOBa7ASKMozIZ79uEHkSSn/D2vffe94lPfILH AtzUJaVKlEwYiWYKF0sGBldHk0YRUDOEJuS895we8WU2AxfOeIHoyROM0axxYzF1AszBncFZ alStWrJYcdgUdsiSJYqTV+wiUoxxxLVo1hSXVqxQ3p4NrlrqB9wovV+F8uVEo8vCAjztwJap fNmyMtuKCxbhDvgXAo5SZy+IRKBHGHAIY3HWCc9AtWKSggUKOmNrx/KZMJ4wEPbPkOKFQBYV ivHIW+nMXAKV5nyYFPKQpcSFIdhPUJIGHirNeJcZDefI4VwU4wXeY9IUEsrMwJjO9gjNLEpN zPi0KVMdkCQTxk9wnsSgjjKW3HfPPYLBxRAJNxRiSLUTAFq3Th0ijspXl+WzY0cxfngAZzYS zFi/PvuHG2X18J44CZ4pegM/PFmwIMuJVWDXrt3YyW7QSeGYrqI3iuYWBRMkHsZjBQ3xYIHx /vcT/wtC2bB+FAPONBJyfjLb4NjAeHzfacbLkdR9GQ/6Yhkv5r1TjRs1Jgrq1a3HrMevBRVF HEWwzMaN+bKLFC4s8teBXH033nCj8BPmeDEX4tA3btwApSnEi+4HPoYnwcapdrff9neARior BmYtlEkhOx4FMzCifupTnxRl873rrrWRu1702HXXiR9l5Rdf97Uog8DDbiTQTiiKZAc8H1/5 ylfiCL0Mxrvrrjvxm+Xg2aXP/t///Z9jO7q77767RrXqkaj88Y9lTAlRtqJX/Er8piXeZUzP OWZol4DxdCHEA2JDkIHkFrAsQoDhbhkwJ44bB8zRo2vXIYMHyXriQIRbrH+W+MY3vl63Vi0h RXJptmjalK+MRte+TRueCciPAX37yWUiaqNkyRJCE95pd4dp+bgF2tA2JbqQSuhrX/uquFtG mqJFikoJwV5SoEAB2YfkPhAwwhopPYGgSRKPNkniiQoVqC+oxC369O4jJyet9cpPXVmyRMk3 3zwoQwTx+EKcwkyGGFbNd9pq5pgXnh7o5TEDl4DxgpWFIle2dJnmzZsjX3Aqhkr1Ejq1b1+m ZKmunbrI605vnD51CiVT2pnyZcpiBtksbJzq162HY/3jKO/TsydoGBu9/EhqLURxbjHRv9Nc SQYvLdTpj+Pt2wW5eCoBLMRvCKySzUGzYGt9fcfrYGU0yeNxrBAOZF8NAU1hy2ozKdAJPEAM DCeBzjkJPCNbi2eEGk1jGi8P0s3Zo7gEjBcmIOK9ba8KJcRLHHpt2rQWB2R3JIpRRL1/XNJQ woKgBQLLsCBHC1w1kWV/JcUFBJYNGKEnmR+/vA2eXNROnluvS6wpWQ7CeLJ8AuI5nEwc3Emb yDNxZs3opJPgHkhtmbPfeXr0l8EMXDLGC2HUZAtZx1ApE96A/v1BsZIb0DzlgChfpsyTBQqo RpLniTyMnPIOLJgXGet95JKQb4cuV61K1Tq1a2/bGqUGuwymKD2E9Axc+hm4ZIyXyD3cItIH DlNFBF4v6BNGS0Dn3Xv2+NuwXv0QF8MKKlWE8jcRimXaNJ43fMiAoaIQeFeI/730j5vuMT0D l8cMXGLGS0DJ9k7SYJJd0kKxpjSoX89XyWSLFy0yacL4qZMnVShXntuAVGzauBEHoH8ay/YX cmCmue7yII/0KP5bM3CJGc8wQxR9YB6aJy8f/zhnQ/Wq1TgY+MS5B2r4r3JlTvOqVSqrSaIc lwwuIuoyWC4leP+/9dzpftMz8IHOwKVnvNTHSQwSUJ2SK4p2le5TZJ0SsIIS4EXomcrHnbZb XE4JET7Q95K++Yd8Bv67jJeksnkn82OmiEvnHfiQ01n68bLMwH+X8dLTnZ6B9AycdQbSjJcm jPQMfAAzkGa8D2DS07dMz0Ca8dI0kJ6BD2AGPpKMF2w+mZ/zmfX31PhdO0y9eXbkZzgTRWOk ZD4+V5+Z+Zsv7SDf9SnSDS5mBnI242VHY57PXCDULBe+61WXFqgZYOXJJwvvqScQygBHjBRV s36XD7R3AjJVGyCN4X63Cbssfs/BjGfoEpCJJFDDxUeKlMT/fu5k95oJVgLR7tipk7ydIhIC DPqdPn5dvWZNz569xDGcu+V5vlIDWLN6jVwZ3bt1X71qZZY+fVVnr3jxElteeeW8bnfqpIrN hvf88y8YQMoacbqkxHkOLN3sfZuBHMx4KEwAqwKOii0LxpPWUshcVAg6qFyZJXgcJEIgZIuQ 4EwyCFnJfvXrX//gB98XOBsQaoFkIx0vviTjZCxNVFFWhW9BnE43yKLkwHGYxDNOuntSR+WM WhnRANSjEkAo0k8JVaWJw02TSkO+CtuXSDcpc5tUPgoqaBhYUnbHVxVdRB7iPceyYsvYLWGh XqU5DWWHo/7T4IT3javO40Y5m/EmTpz46U9/pkOHjmKO7vxXVEoS9jr1kYjBKNleZmklxA0L qoghupdmQq22lzdvUhA8cNHevXtCEuhUPsSD5OquXTvXrn1exs5Enkj+Jy1nKr85Vv8tFLIy 87hFbbTdu/YEvTF5F9JVSMJ7y5/+BCAu6yGJnSDsDr75piSBcoS2adNGVC9MuQhj5cdSxyMD m7sEXtW/TG6ORQkKXAxh9YraWVNCugqRh4Lyk6Lt50EP6Sbv0wzkbMZTAfiqL1wV6qdLMi0a XeoHRRQ6deoo64TUg+o0pJZN10w9a/wp5C9hIQc4UCDS9773vWu+e43KktgMyrRixQq9evZU JlL6sxUrlovKFeCLGYoUKdy9e/e//vWvxKZKLC6H9q5Vq5a6hJLJ537oIdyC4nPdd79q7IqD Fi9WLMTmxlLq5JEjb/38pz8V6r569ZrTYvP48c6dOunwW9/6drkypQ3v61+7OveDD6ru4kYy d5LkkkpJhJEvTx55QQUZlyhWTP4YgcUwd5s2bVLYUZZeqXu///3vKT4uf+GggYOUQZUlTVpR 9d+tGmmZ9z5x1Xnc5sPAeKHcHBnw6KOPUgiVDZMB6ZOf/MQd/7yjR48eGC8p3aORDLyf/MQn 1CVPpJCDfn37OVm3Tl3JNr/whf+rXKmiSPZrr/nu16++WtXyBfPnhwy5KJtodfBArlwSY197 zTWqr7BnPPrIw5/8xCeFIFavVv3jH/+YMoCkaL06dWfOnKXqqqroI4ZnVPQOeqngep1IAwMr HmSsYoNXfvJTTxV8UuXuaVOnafCpT35SNaUuXbpKgla7dm3Z5tVzJ6uxk+f62BVXVK9eQ5Jf Bd+HDx9uYPJ/eljppG6++feSO+XJk2fK5CmVKlV2F0XGW7RoIaY+bXc5D454n5p8mBjvP2qs KyA+/5l5aj5ffbWK25EOqSxoQnC+ivdD06rUZzBeJAVOPProI6ovBKVOaW+UunHDevJHnukg lDCeXCxKN6qy4kCKNCextxzvbx48IKyesMWBG+NkSnZofnVepRZK41VXXdWkcZQGNxJ48Rpw 7NjbzCo33vBD7KcT8vbJgk/qYf++DLy4pGxqNrwYB+Cr7S6HmtxnNrHKEjnTrl27r3z5SwKv rA62uPICW2vcpWfPnn4lLV3L2uRY9hqrg7ymqXd/nygrfZtzzsCHgfGYWBAWmlZ73gIvhYQg 9x/dcOOBffsz9MlTGVusQJfIXXhuJCIzjSKqnP/5z3+Wy8zJwk899aMf3Sj3EsZTuzyD8fr1 y2S8ufKOKccZGO+mm26SEwnj/eRHP4qDel/A8HL4CryQRRffyu1px2XnmZB+YoORWub+++77 8he/+NILL+bO/fBvf/tbwjncDuMRtspq40kGmEJPPRUYz4LiV0kTv/XNb0iJv2nTxm9945tN mzSWoA3jqVTuV1U+pc1evSra48ntfc13viNxcHjYNC9cPjPwYWC8efPmI6xhQ4dR6iRaJ0/y 5817w/U/3LN7DyqP0hYpdRJ/NGPHJxBQuaRjEY3LOX/0aJlSpSXefHnzywTSH/7w+7/+9dZX trwsXyCKPyvjqeXgvLydzCSB8X584402cljl61+/WqVbumgkA48fW7Vq5Re/+MWmKRLPSfUk QreyHhqMjEw1alT/3Oc+F1JWR4zXurXx2E8eOXLkhz+8PmE8i4JfW7Vs+c1vfF0WpsB4zZo2 SWU8aRaxuiVAyy1btmhQpnSa8S4fjssYSc5mPDsi4uuvf/ubRJ0sCtgAsSK4B+6//+qvfVUq aHn7ZNGcOmVqEDiB94TCf+ELX7jh+uvt3277+9+nTJqocAIr4q9/9evb/n7b5z73WXwlv5hU gY89+kjgBNYUN1q0cFHY49kKOkmgsce4S+7cD3FoOOAAkM+ziZj6GjVtGnPlyvWnP/5R+9o1 a4YBUDTfOnpU1m2bwwceeMBmjFDl+mCTNE7M9uCDD1WrUkXCqOBOOHT4kAd5/NFHidNvf/tb IUVvwwYNlHRWHWXd+nWf+fSnpfpUJ8xdOnXqHD1dr16Ob/nzLSqHSvL7y5t+oe6KwkZvvnno sqO+j/CAcjDjRX7t1avLly//1JNP2iMxLXJhoTx03LdvX5aSw4cPod1ixUvIlptpVMwogrdk yRKZJvLlzVumTJmQoX3pkiWly5QhWzjBfN2/b7/k1gMHDoom6NSpRYsWlStXzsZJ/s9y5crL FoOJevfu3ahRY0qgBBb16tU/fOiwnLlVqlRRBkwy3BbNmxmXHNgMnqHPsMezFRQK7KcCBQr2 6N6dwyNTFK9ma3niiTzdu3aTSLtq1ap6s+1knlGDRQJCObVlpqEvsr5UrVKN319hzWrVqqki ZmDlK1ScN3++rrgWWrVspX9Zfd1UGaZiRYs1atgoLpT77jiYjzAvvK+PnoMZLwvwKoim4DtP jsNBIu7iqWVXzJr8L0tXiWxMlZOOQ82jjM5jX3y4Y3KQfTazDCD49pOTKWPOejK6XVzMPdtd Mu6LiVNulzGwgBA4PciUeyWmnfeVvtI3e4cZyMGM54kCICP5JM8YzoSv72RUOPdVSedJJ6kd huPkLllud8avmbfJMv/Z736Wx3mHu5zrdpmPnPrUqe3TjHCZzEDOZrzMScyE88d5ls49s7Ek OXviwFAUNsiZiA1SOzpxdgY+U5ZGl4QJvbC3G+RbKt8GGXthvSVXpfYQS9ywZFxst9lHFeT5 eRpPo3m+yAfLyZfnYMYLalXMJxnFzVNddmd9KciCnVAi97MSDaZl6oTw0HOis6WSLzY4gxmh yQ4dCkBKn5DS9+jRt0DMLmA3hR/Azdhgjx59O1Bwklz0+LsFKZxDpgW7bpZBBlY0d5eWdJN5 i5Ljv8MKmDHUeInxXJd2ADmotxzMeIYu/bsqPw5e27Zt5MiRGStuCj1loUgvm9Fvfpy7OnlJ QcI4M3bM2LJlynAqRILr5MlevXoqmB54+9CbB2vWqLEmNpkmOiFoJQxXEhWhKkP//v1nz5rZ qWOnpNlZNcwst05t075t29WrVrmcfaV69erlyparUaPmwhicfVaqSgafNIjQ1plNiTWrABvp nrgsWXhMZiR2I3lMzd5Zx5mI3NN3jKYoQ7s++zD8GkmwE6Bt3bt1MxWhWap+Hs6E/ScLsLLy qswT6HGb00tA/MoybhIdXerV4TJhzhzMeN4fFOWwYcMcrF29mjkxxazwH2rMGV8zzQwd2rdX F8VPQeVKbcNEmdRIQQ4lixd/KNcDwavO38BTFy5MPvsP7GeHJD/DGX48BlI2RgX9UpvFq39W m0pQa8MnlSKV5gRDcRICUywSg+2Lz78AL5baONFmk5PPPPPMCy9EjrvsHzRdpnTpBPzN3aLP uXPnrl+/HtLgrFOUejI1BiI5HwaQxZATfuUyZUNOFqPs42FP5tv0yM8tXx6gQhmTQPU9ccac ZJmfy4RhLtUwcjbjATEHZti6ZUsokrx27RoHEF4onS9B4T4FjJT88ZxDnh4CzIXspPcM5G55 htKEhLT245l//ON2QOdDh4CJT1HzlLYtVrjIizFBk5PFihThxHPVwAEDXeK+Rw4dIiGbNWuu OBmfOAwXMSUdfdPGjV0yccIEjgTgSb3Fmt6pdevWqT0GWaLw2PbtO/r169+sWTM98+D79O7Z S4F1qLckGogDoGbNmkYCitm7V2+IcEU2ZSilD/MouESue9VdDB7MTb0xGG6xF9DhilhzpZBy XO2G91SBAkHi+bRs0Tx1+bBqqJ7rcaZMnkT2zJgxs0uXLk0aN546dVrTpk1HjBjBf6j8k3ir nj17jBo5yvysX7/hjTdeBwQ1FRz3oS6Np2ioEsaYsaIlxowZy5uiTevWrT2vmoRmHgZ9/Ljx O19/49FHHgHdduHE8RN4VlauWKGUd9u2bT2Xik5eh/cFgkPfBtCrV68e2PdpCXipqP4y6CeH M16PHhxxFDz0V6N6dZuZmjWqL126lMyZO2f22jWrVSnqipQ6d/YWoftR8MO5c8+cPiNQ4YRx 413F+6wi9IplyytUqICybRTDm27epInqYoMHDrRjaVCvXtu2bZC4gs9g1oLcSpUsaWnX26hR o/jxlPJbv2FDsaJFpk6Z3LJ5c5KTgrdi+Yry5crjk9Dh2tVrli97dvCgwfh/1apV4pjokGTm ooULJ0+ajDQXLlx0/733GXO8LpzikYO6tr/DLerAvPzylnJlyr7x+uuulX57wfwF4h6sC5gN 0UNI099g06wOHdp3oAh07NABt4wfPz7XffeFrMH4X83QLS9vCeuOvwL5pPQGDADIVtUMB5ol K8uDDzwAzlr4qULLly2/9S9/GTd2bNHCRejVVjRTQWxWr1YtWo969hTN6NdHcudetHixsocW l7x58ryyZYvGvKkrn1u5bcuWObNnqZgtOmnDunWtW7cSh4Eb8z7++I7XtoOzzZhuwO29Jrgf RUsVG9W5laVooUKehVj+UNpgcjrjdcc5EydN4j1HuC+9+MJDDzyABIXwwDELz1F+CCwLir9P r17oA61079o1YTyiaVG8fVK62RIuvGD9+nW+hl2HIipCSJX1e27Fii5xmQegUChKQkybIUOe dgv4LMoVE0uNaAe42r0wXpvWrYiRpwoWhFp+5OFH4mJjERR7z569cG21a9dRBX41aRzXW+cc VzJJjaTFixZFEql58xXLl6cwXjWi28Ixa0a0WACg7Nq5U6Q5BrMXjW8XgXKQOEf53j17H3zg wU6dO4uHsvRUqVgxCDq3c5UDXcHQIPqE8dxu7uzZvpooSb7bt2urHwjPRvUbOFmnZk2kryq9 Y8vX4oULYdAUuLeiQc84CbNqVmnXVA9fmzVpGuEQSpZc/uwy/JzQlqXNSzG2DRs2KBplzHTR EsWKLlqw0AriwmiJqV5j+fJloVvIoeHDhls+OnboGJaMJKLyMpBVl2YIOZ3xeii57sVs2bwZ HYPzI3cUbBexbdurVStXUbeoV4+ezZs2xVpjRo/REouKQI/kXUQoTYT8OOjTp09c46Hl889H dTAD4ylstH7dOu3xtj5Rw/Rp05FmYDzhORivdu1aGI8hVJsMxpscM17/ARaC5cuXr1m7lh2V ukipU5hFvomhQ4ay06xa+Zy7h1tPGDcOPwcLCjVvxbJlWRiPNJg5Yzp5VblSZbqfZPj169XT Zt/+/YSneHYYmvnz52G8fHnzzJkzd8WKFQBlFcqWjRjv1KmK5cqJMAyP3LF9h4DwDh86ZFC8 RTnFjNeOVCf6LEmmgPoAc1eubFk6uQr1JDPgTq0aNaSrSBhPKv6pU6d4Cp24iq2rdMkStsTl SpdW/dNJJRCB4BYvXkJXN59DBj89bep0ANfiRYsuWbS4Tq1a2hi5NWXF8mUe31cQ9rHxy/Jy K5YvB/j24bOw5GzG69ShA7LzhtauXmWZP3L4kIrQY8eOmzNn9tZXtqrCZ9OCRqtbpNeuLVu2 7IwZM/55++30yUB2djIVCY2pU9lRtmx5GcosWBRjxjtRvUoVYT5UtVtvuQW5d+3WbdLESRiV MjZt2lS6mQiAu++6i/Ylao5eR1oWK1x4wrixlDEaoOKbtCb/mBDYcWzkShYvMWH8BMTtdkgz ADi7dOo8dtQosbyRfjVt2t9uvXXZ0qUx451EjuwiMN842bpgVJUrVcLSipm5+7atVLjZQn7b t21H4tE2d+/ehR/69+s/b94zIoawa/v27QcPHqTEvP1neK6tW7fBqhmzqaDaPfPMPHFStqYl ihWn1EGWkdgUh9o1a5gBxQynTJla+MknBUlAfs+bO4eSSQCSe+Da5u3BXLlEA5oiMln/BrZw wULMbxMrWMmiYAJ6dO9mxZk/f/6/77rTRprMr1O7Di0gz+OP7XzjdcqzXZyWdolUaOuXfhg8 Bw0Y4OmETRbMn4+4jhnvQ6Vy5mDG8yps53CUA+YTlISyrNYtmregpciqYLPEQgDfGCwco0aN FlBDY6RrhU0XKUT+MGYKnGOnmz17Djt4+IlWNnPGTK9cLDnCcvLZZ5996aV13j5SYyBhGGRI wIrdunbDdSLfhPkISF+37qUgEl2Ojok4VhDCSqcvvvCiMtQDBgw01Fdf3Yaw3IcNEwNoMHjg IMF77CUqchqAreabhw5ZGt4+dgxSFFc7iSXQqBxJrvUULVu2tDti15HsqEWLlhs2bIRWpTC3 atXKGYKCqta5c5cRw4YdOhhbjOJ93Yb1G8RGNW3SFOLUyfA4OjQDwiNog0L4bWbNgOAmSw8r CFMHcaeCvFgkthn9WCMYThTTtsS8tG4dY4n2Otm69ZWxY8dQHQ8ePEA7ZXbasH4dZcE4hw0d ynwiSNLwbJLhV60pONBusFu3bpCufsVqfBI0BTrLwAH9CUD7z2gVjLyCaca7NFruxfZyNhzj acRjlhUlC0IyZq0zai/7GsRgGFZG+0x3Q3J5oN3wyeKxSAFyngZwRs0yP8mFp3vIhJVmsdpn ONDjeyV3yfII2Xs7x5nEMJh9HlIGkzF7wcmS2jLJCpM5RWdBlqZ6F7Iv52cdW+pkJpdk91KE 7FUXSy6X2fU5W+JdZpOZHk56Bs53BnI244WlMDyDv/+NdfG8nEjvgOTM/hKMMAMReib67Hxf 17u1o6clYiQW25dOUMT5qoMwjKc6gqWE40QipaoM7zbSj/rvOZjxImTgsSi5nWc4cvhIAApe SlIL4XMAlJlozOzE4tY+4dbnRUoxgIad8xwpn0Of59XbmY3CTlL/zDkh7V8MXr2Ans5ySUaw VZxEmCE3mvaTMqYd0f2xY8cxYvxconwjS+alueWHupcczHgBlGxbz5gmHlQmr8R+EA4CBWec jMD4Z5yMfsgkkYTQkwszcsyePMkAGNIohJkKxJCx0mceMJ8wHjCuhPMZvUUwwwBFPM1FbJvA GdBtsgwi3+R2qaPN6OJsMUEBpZ3cInNIp/tnfhRcW6tWTaCZZc8uCyDIlIfKGH/2543Dfc/F 7R6Njy6a6qpVx4we/eqrrzVu2Ei0LjOmK3kO1LiHs6lZs4Zmad5710UjBzOeoUNISIk3e/Zs tjKZS84EQJ6BwwxaEBRI9l0+MRkLh+NhLlIrKyDFjRs2nC4WHRN+zF0Z3fCYAXIxq0iORBSk dp6p8sX6WCa78kZwasGy6DbcNwnbTa6dMGHCypUrU7six7MPO+PNRewSc2PMj107dwFzEboO xsUgmfJ2U0N44+CjTANSKmDVc51VdOtH5l9wNu51YLfXXnuVvZEbAGhG6he99ezenbN029at 7psYjd+V+D7KDXIw43nfDOuSWCZEiWgGDRhYpWrV3r37HH377aefHgLhIWPCqBEjYa840y3M cICcXc2aN2fdrlql6jPPzMUwjPi0MokkeAIgs6Smrle3Hm8SdPLokchr6759e1u0bFGrVm2+ JmEQfG4w+ERcseLF//WvO3E+vziQNN8G1JVkDbyCL7zwYrt27bnRIdpwV5hoRvmypcsEGyZX Ne+WA64tcrtJk6Zt2rR9Ye3zd999N+Al2z1HWeUqVYYNG+7K0aPHcJPobeTIUXXq1DVgcBl4 EYiZkLrChx+iQrnyQQ8MH+tRl85denTvsWPH6zzgnpcj0Ug4SPRPUXRrDhjhFJ4XkitSHUMs YmYPiYQ3G+pMJD0DAwG7hK98DOXKlnFt8utHmaPO89lzNuNhKlnDYrmBlE/xDpUvWxbFYwzw rkKFCtG7+HaLFi4Mc8hxDOj477vvHj92HLAvyCVvFXyTNZs/2n6Ok7pr5058g8CNWKhK5SpL Fi/hXwawhF8BziBDZKpdumQpkQKECc4CRgzvAh8t1R9S1icHF6xww/r1YankJuKnKl2ylFCA RMh07tTZ7dQ/AVXhsufyMmYAK5UPeL2xE5TzyBEjXFizeg1eNU5zmaQrV66M1qGN9UnMQoE8 PWhw6VIljYTHMkhX4+Gdc2DwHGikK6aSahrcxIVgJc57XoPx+Dz4ADe84YSYrE3AAIQYn57L 9cbDKdxB4plEVjds0PD5taejoghtqVy6du2q/arnVsLKOjBmrsjZs2afW2s9T9L8cDfL2YyH Vp59NgPn4cVDPwyPBSBHMEhHvbp16J8L5y/o1qWLkyWLF/NVPAHUv8zNI0cMf/Pgm+XLlFa9 AJoR40lSBPW7bNmzUBra8+pOmzKldq0oHK5i+fJJqAuEIfRJ7ty5582dC5gClmkSixQqTGpF AMW4aoIIicGDBgYEI7h9iPSJfcCRrLMdhbDhLyaCpkyZ0qFdO7gtTAuo7VeLBeCVWz/84EO2 jlKhLVq0MGStxYEtmjXXpnKFiuDaoGc4n8pK3YwYYOWqgOR6bfv2jh07YoaNGzcEMKSFwNLj oG+fvqCVXNjQBWRUtapVwFwAXPwEMSOeIEgt0ljaX0tA4EN/HYen8DW4+PbvP2AAAGh0yxAa 4om6dumapFT7cHPORT5dzmY82wxbi0TDGdCvX8h4CQMFMIUa1r30EjgFxsMMJYsVI5QwHigW /iRVYD6gojAevnLV9OnTevXoQRSgS19VCALdYE4gScqWKqWyl5PPrXgOdtGODriJXgrKGKCP gPwEkRgCE8qiiCKHPj0kpHZu0gT8MuCeMwwzjjEerVI8IY6dNjWKbNq2bWvZMmVF2UgyLawB OLNK5UrSh23dtk3RH1wEo+zXls1bIHxISLAsWiGciicNMwAUTrp6HMe2ZDHmez2hGo2hUSPA SAc0zxnTpoO/gNFE4M+KFa0drVtGz2t9oW068AjgY8IvILaC7HKSug5ikkx1OLCQlS9bThAQ /Tlgr23zwMqTh71I6vwQX56DGc+6Kw4I2M/mR6wXzSpCSxYtKmyMQkX+UNIYJKOok3btAK+e zJ9fcQ9qJ+Ai/oTWlTzTV0GiwJODBw/Ony+/JNBUTUod0rH8Q3VCZgLv2klWqlDRBgnErHSp UsTUww/lxqgLFiwsXqz42jVr8z2RBy4Z9kpyS4AskmrihImdOnTUj3BvgwkEjSswqruDO9tb zpg+TdkgLI3oGWkMHnga4llsgQgAjya2TVwfM73dncD5WKlr4MFJb2OzaxXWoDxQIHR/NS5S uPBo4Q6t2xCSJCSkuPNw4bZ/IP+lSpSkb7OFkI1AniJ94dGo3/aQ1atWE0aQdBVYK5C+kZtq wFGg6nHjxi1cYCzP2OtaDlh9NbMdtYKYeboAqGp84SXyY3xImS8HM17AFqlZ1a9fX2YMUdi+ KpwgqjJKanDq1Lxn5gpPhVoUFcZ2ggPZJ2logkRffPFFOx+bHNs8+5nVq1d16NCBGAQRtPvC J6QKsbNl88u6xRiWfVYNbZCySBlCxoZQYBty7NWrN7aBzHQM2ElRpPFKaiAsdeXKVZhEEKBq dcEHsHvXbtB7Ymfzps1GawtHAut8/vwFbdu2U3VMG/BuDYgOGE7PhVvkcdEJeKf+RXB7cBuz lSufAxPt06c3QRfkUtAAlyxaRFZ369ZVnmmTYz2KvJHHjsFG4gpD0obMpwaDU5PYrP8Vylc0 5kmTJodOEmZLpfloqnfvxmYqNwgFZGSKZmzYcA6MYJ59dslS97XrE5KX2s+HlHEu9rFyMOMl pJboP6mQwiABsvwUnjb5KRycFQOZ5WTYRGX/pE5flkQSoXEqyDO6XYqPQ6g7AcKtl9ptAhk9 Y/DvkMbi9NPFZBB4JvsgA7onOZ/l0UClGVTDr+dgmHMgRWP80BkOj3DmYmnzQ319zma8nPtq zLtNXefOnXfv2nlmIsH3+5nYReWcjtj2PME37/cAP5z3SzPeB/Zes8irD2QciWs+QtsdT8uo 9+8lpBnv/Zvr9J3SM5DMQJrx0sSQnoEPYAbSjPcBTHr6lukZSDNemgbSM/ABzECa8T6ASU/f Mj0DacZL00B6Bj6AGUgz3gcw6elbpmcgzXhpGkjPwAcwA2nG+wAmPX3L9AykGS9NA+kZ+ABm IM14H8Ckp2+ZnoEczHhxmscMMH5I7hhCb97rS4WZDLMQgIuOU+H277W3828f7hINOyOO4fSl IVDg3J8kniCjcQhNCBkv40+YkPiJMrJZJ8EZyU9JCEVSFDI1ju7MsImMyQkhF8ktUoeadBs1 eIfohIxHzoyWOOszhnGeT3xD8qbC857njL3b1L4fv+doxjsugaRMOwoehPcktDQqzfMeP+Lo JIOQux9QWIidIL04LewJGUfE1L1T6EBCxO/xbqebG3AIKfQ3yTLkZyvHoWgw70hGgR/kL1Ip QfomyQX90YnAQtmZMugvypwbLUzCC50PS5IDl8R3PPHWkWjqhCbs2bM7JErcs3uvZ08YSdj7 jtdff3Xbq8IRpb2QXdRESQkTzU9mHIObRj9l1pR3awUbBPueIywoZHPzV4LAqBTz2RbKI6rP HDoUErqde3rdyPOLAIwm8JwgbzdSP1C5lQt+X5f2whzMeN6KkiCFCxcpX768mjvmRSEuQdln ov5Px6Elj5p6gAIkhhg3Zkwo6dy8aZP1L70Ueli6eHHd2nVioZqZqTqOxQ5SMdBxdJz5axLz FjFPyoqeiKZIIsWfRFxYo5VFkU9JHGo476/g1Hx58qKSs5Kdk35Sk0z6oxrVqklmMWTw4Pnz 5rujNCoSioWrYu49JEGLHBOK9QiWlQRNLgwJHUJ2DPHjhQsXln9T7LmvIoNKlyotq8XmzS+H B1RJS+2X2nXqlChRQj4YZ6Q2Gz92rIygoorDg8ho5hYh2UT4KLckv2DqY2al1xMnhSM3adRY foCe3Xsk61d007ipg0mTJgmxdZyljkKsz2Smr86czEOHolJ7wurDTSPxHmVJy3jvyd39pNRu wwb1w7u7tFx0Ab3lbMYLOeeIK7m3vH605aVaBRFEyE0kdlu0NbKTalptGhOuio3zcS7naJmX EkKWPqm+oguPH1ezTra8kKlOqhW14MK6G9ggfFSl079mqhxbm8PqLhDbT/v37Uu4S/0gvzqJ evQfsu6RTqFlLO2itV8AePWqVTrG6YZcK/+SxJsPP/RQKKyV5Y0GaabmkdQS+MqodCv1g1QU 0YAXLmwYF5TMYOAZM2vXrOUWEq5MnKh82Fi50qSZqVi+whtv7JR/dvLEqFyZgXhezC+4XslI SdNCD+5ltP6akwH9+jspnp1AM11uahyRgD1yBMWHUuYmXz9SV+jBGwlBydnVPyeV1FMQk9Q1 53oIExjl84z0jKiQ4N69+6gbo0eNxn6+xm9nj+eVsjp5F5HUlUj32DGZF4sWLqTCkZ/27tsb K9sIIJreAwf2hzGEN67iZ4P69dKMdwHLxBmXmE35C6QeMbOWZNXhlFaUXESevFo1a6urLNeY 1H0Ki1etVk3qFOWOK1WsJNlJqxYtJUeRztkbVU1WZjuqZs8ePWlRsnFpQ0qowuU91aldS+eq z+lNTgdZfVSQrFatuvSYbVq1/sMf/oA4QqJOmQUlcZHQWvE3SVz69elrRVfRynIg54ocKtu3 vybZniRIJJWsE15/RGsxN0pRERjPZ9SIEf379lXQTycJC4WfgiClK6q8l5o8V5EwCSw0UNFS TdbQ2EdmJDUDpSSUr0VWmKaNm4Q8ufILyq0iA0WD+g0krUDrMlyE0sqknPRHFqkgE5yRu1Yi I6wlHYb0FmHOlYyVRUJ9eckpLAFS11A0ypevgLFNmhTD7qgs4e7dewIDJ0MKfbq7BIcmPzCh rKS4i1yVf0lqDPM5YcLEAf0HFCxYUBHZpc8+a3klq/M8kWf9upeGPP10hQoVpcawQjVp3ERi JSl0S5coIfWTZlKqCuo/8tYRiVUVnY5qa0s3HKeiqVSpcolixcx/SO59scR30dfnbIknKdgT jz/x5JNPNmsSZbZq07pNvz59LN5UUDm/VCr2RjGVcseoTQlLqY1e3rzl3rvvlgTJu5w+daqc JbNnziI6MJu/UdHWoUPkyUOyVE2aiaRjRJAstxUrlKdrPVXgSbLIvkKbGtVrWEddSNkjHCSH xhV66N2zR8F8+W0nsJZ8gZhZs2NH30aO8rXIfSLlHiZKDANy+6mwafwouE6t2mR1tSqVSYNA H74qE42BQ+72TZs216xZK17Io0IRDtq1aZsnTx6FKQsWKFi/Xn2XHIlqJ0RqcMkSJf/fb35D vURrmPmlFyMt2pDGjBqFQ3AsQmzbuo1nlKEoqJdlS5ci2SI+jzvv2qWzTDAOqH/9+kVZKnCm CntPFsj/zNw5tpSFCz2Fc0yC/bAMn1RN+UtlH5UwSh7BaJwnT3quSZMmWhnDE/krd8uTBQvK oSYHXKsWzTdt3HDHP26nvCycPx/34u2e3bpT/vv37xfeoIQuMhpa7yxnJtYyKjna448+Kukb SViiaFF7UfMvMWmp4sXVpldfVvFtSdaktLHLxefyXHl98jgaUprxLmrdiFZf5Ua7dpN6VeYv mpIcRCqJSuq65eXNqEeWS6RJF6JxeT1jxoxWAN3uR6lXKopMW7Z2gwYOkM6ImiR7LD3KCrp5 40aqqWoMC+fPsxVR1TH3Q7mbNm1WuFAhRRLpdWQdBpOtCK0bg0xbJFggTYmrH3n4YTk7EZbz XraRyDOp6KQslI8+/EjtWrXUHmgoU1hmfRUXSs2E2hy0bdO2atVqhC1VU1KjIB+sDldccYWF IFAMc0iF8hVcHudgjxp0aNe+b99+iHhklIEvSr9ZrVpV2fgIfyPctHGT7KOSiNKyQs5pOyvF n4MUOnb8mOxpshjGtZ2lEjtcoVyUri/6Lb5X9WpVg248beq0wYOj1NG1atRcv36DdKO7d+4k ssuWKW3XJ0116HDNmjVkjgMZqCRfDCc9nUfo27t3xM+ZezNZp3DF5s2baMKG59WYW3J42dJn B/bvp8w19Vj604h1T5zUZt2LL9FuHnzgAVkGZVKTetAW14pmybPHw3gjRgwnAx+4PxfhLJep h2VzkiLR17pxweeN6zeEEtNpxrtYxkNDiMacyq4Z8md6YWafUkfJrFq5UmQ76drVrlob/IAC vKeqFSsxYsppOX7cWGqkjF00N/obxtOPVJxv7NxZQzmO+fMaNWgwYfw4RPnmm4cOxkVV9UO9 JLJY0uSx9tW2SlXUtavXlCxRwg4K71GfnJcXjG4TLrH8Y0V0tmr1qsM0uSgzV/RJrClKk2um 7rG0fOq8/uWWW9wl2HAYFSWcJaAsGWHfZdl+Ji46Gz6SF6JCB1jOoqNz+iHpLb2f3KHO+5XU tdAQtr7Wr1sXe4RryZMK5ctZODz+sbeP4l5LQxBKfu3bu0+oEe9DZ+vff4CDMqVKrd+wgagk 1mybCRP6BR4IzVavWa0EswNSS20TBzpT+hxTydUZKdjRJ8PIVKZUaZk5ZWcsX6YsPqGTV65Y ycj79O5F37ZQhpkk8IcNifIUW0qsj8yqllEagc3qgf0HPG+ZUiWlVLXAUV9NjvRNqtWSvQS4 bYOnsxOJ52dZtGlPG1cuiu3ihVPuV6nUbc/oHl6YysNegL2HN03BkHOWQvj4Y4/LZCklprIK FmbWDUqLNyd565hRo627pCWZwDxDqWNIWPfii6+/sZNiJnlk3dq1WR3Z+qKq3IMGIg70pLFc sfrPlzcvC2SDevWdl41PyXXcpZ/evXrTyuyC6I0SUBIINDELBIlE3EkFL5Ulug6Gh4gxZsyU 4jJhJAdVK1UKxqFEPjiOWsfqn61agXz5KYoeH/V36tB+aqzU0cQ8e9KPgsaFnnrKgIsULqLW NLovUbwEg1CdWrVw7zNz5lIWlExo37YtUrRm2Z3KqDtz5ozQA6lu6iQvpKiTyXaMZL6Huutf /6Lu1qheTRZ3/dDeLXOutQzhwCWLF4WEtj169AwSL8seD08/v/Z59lL8Zj3yq+LYD+TKRQex ajxZoGB0bfcexKORFC9aTIp+Sqkq87LQSwFM0bXBk5rNg5PVrFk8D9RL2RatHfJk57rv/pjx mq5eufLAwQMVypbDqHazkhRbGW1D9J+WeBfJeiet0CNGjLQuBlMEFUj9ILttTIi1qKCUfsV3 hg8fMXnylI0bqX6bvWDrPdcTQqRKIeVZs2exgqgr8NZbR5Xz3r9/H3cg4tCnv7qVqdZ+Q4ER Ak25Dx2+eehNQ6d5yodp48SAqdkLz6+VSRZXUJ+wmeyuVFbjkQyXuT961LhKOCmEaJJ3H+wl EmwmcxHl+Vy1yvbpbPQRmf/ci3mDP0AaX5TnqVhuULAkogaT9KMZ48eQIUNtdwMvrVmzdsTI kbt2RuXEJH72UDNnzjIhhBLzCTvTM1G6segT7fcOHpRp0/RqRvvVP51NNls7KJZh02WG5cx+ bsUK+gLiHjt2rLoRJs2qpzG3xGvbtgX5lvrx1XThEzMZKxEnvaOQXt4uMVS091pf3vwyFXfi xEkyoCqDYdiS1StJz/eowAMlxcbPezRLVlJjsAQsW7bMhFhq2V3pI5HJ9OhR6wV92DFXkzdI nblYmrtE1+dg40qqNMiyssZrWkoKyxRpEq5Krj2zslesAmUa9MJFqQt2SjcZtofkzFnzYZ7R PsW5Fw0ghR5Dsyxn3tHwdmbyzOT9JeNMJYxkAIHtU0abJQ3m6WycyeVZKIOim/I4mbXHYqUx Ow0lg8nuToi4OqWj1JZZJjx7t6nzmepeP+sYkrechU4uEeNcbDc5m/Eu9unT16dn4AOagRzM eBbLZPRBOwoC6lLOZOYtguk/rLJZbhCt2SnFYrNInowLM4Esrk0VO6niNFEss8jYLG0iQGnS W1yJ/Ayxlu3howk5w5OWkez9vc5SIo6S580+1Umb0HmQOUGSx6PIQKWeqUecgYzNuCS+PExd xtPFVplU8Z78FCpsJhpH7IS/pDTwXmfq/NrnZMY7fpxxcssWxRG2ej0HDhxUEOHSTrqXGpAT sQUyep1gK1lqptIJbTDsKjOoTZVwu59Dh8LXBJpoJ7bjte0xnOKg3SZkhjH7avuhyMGGjRtY U5JLbOE2bNjI4geWoQ3XCD+4j32XF+Z2Nqs2OTjQ3mzbtlc3bFivOOtZnz1GyBzne1SyyxgS pMj5kUdGK0NVOMVGLjx7BAw6cCAq457Sizb2xgyOYRjhjRheJuNFLGQ36CnswWxVudftM5l4 wzzYHJoFM2OEoddQKzce+UZmEvMMPrpp8+bDbx6KqDae54ALDcgyW2VTcekX3/c0U+fdOAcz nilmqCxQoACsCazjunUvhepwyaoZjkmEQAepP6WKytS5ymJrdgksCNe58wiCAZBlLwJ2pIC5 tOGLZ0EN/b999K08jz/OPZg5jKikEeM7uytfBXplZgRe4dTmxEdMjgEs9PB8XGndYI6+fZQR r06dOmXKlKlapTLjQblyZSFu6tevhzIxKkc8MynPHuMNFEjevHlq166lxhBTx1nsMXFNJYUs QXaAeEKxsWha4k+4Y/T3zD1laj/hF2WG2HK13LtnjzEbQ2ob/WGApwoW7NGtW+jfje6+8061 BMMtNN7+2nYGZC+rR7fuVpAWzZt5BP4DDIMhlWoyh0yj/EChZxeqjlKkUCHNmG2xPb8O2IqZ dIlnZyKGEIAo0nLRosWKGbHfqj2YEMB5c8EH0DBnM556yEyall44abYvrlXIzEgURNrYKedB +EFEYmo+xueDaKK3EpePVXkHXDPWTML6Gq+cQb+JpYSWjGBPFSjA4a6BGIg+vftwWwErhVcb tB1m6wL58sVglIhW+KYfffhhjuCEppVibtUy8inrMwYiRmOAseKWcEmtWrWA9AMnJO8/0C4X Ip+BS/Ati2tykjfZsRKtHhlqhA09/HRW8tEtaczUHiBabkO0sg1akAio0C3RQTQlAtOsRDOT oSJGz6gSYJ5HH2vXJipbCQ4CjRlVoowrwifzAOf5+COPdOvcOQyGizXXvfc+M3t2Mg9gesEd J5ri6FtH98NVxvg1dcswlRqd4cIgVONhHyxetCgfaXTy2DFOF04Lx1FVtvETeGUxeVRbs0oV r4mnbu2aNdtffY3v4aww1w+At855y5zNeKRHcKBXr16DLbtA/ny1atYCwmShZmeP5EyFCtxK bx48wDmrUhwX9sJ4DSYh8SpGpUEFig+KzYwZylYtdQbtOetaLxicivvBSbKOeAp8kvAqMATg RQSJOHWKpZ6rmi+R6zkm8ij+BU1wJXNeE1YJbXFgQDBpYJ3u3r370qVLUjknNIM+4zcH91WC jz+NX85JhcSqVKqs8BjAGvs7lGapUqVZ+XftysB2ZhHvboHTVN4MHhdAFsLKs4tRgLHi4Nqz ew9NwTKUcL4DZQBVBQuPQEo3atBQnc0O7TOcjZwf0KfJUqGN9U5XADrd4yqZ3Bgtm7ckIWdn egWxfdmyZUBPpkyZZM6jQcbhHcFJyNOdN29eJQq5ExJG5QUh3HhKleNzkqfE2+TM4OLHaSbc JDhP4sGaQagErDaVRNG11Mm83FgujCeHM16PHqWjaoktOUxfevGFwk89ZTvUqWMnPiLeapAO OgxZBPFQIF9e72zunLla8sMiRE68ShUqzJsXvdRkpz5s+PA5szNAIZzOMGj2TlGlxZgqufgq la/A+5QQh57xGJcgwIqTsKMLFixQjxaAJuqWpH3r6EMPPIDhjYpqRMKAGloa/nXHHevXrder oIGBAweWKF4c80TdZm6QOAA5fMkiG6rRI0ciUGUrLS7aAEz97re/LV+uLJFjm9S/Xz8162hx RERQIHm0Bw0cZCsVhwedNAlPPPYYqlUxE4DOP15paiGOov268OlBg1yVaoYB++IfD/w/bOgw /jF4zgQXpta5KuoJ42kD0wyGCnwXqk+bDY44LLFg3rzQCdfl7X//O7CBn1q2bOV2XkeRIoWB 4/bt248DKedQRDz+bhQumTFt2q233NKlSxfaKfyDMwKXbv7tb82VZRFWRl1eJ7naoXA9CICO Pv9w880BqHR58lsyqhzPeDVr1qRu2QhZv4MONnTokJHDh9uPzZsblapE0JDQ9WrXpmpGK3GL FlMnTwKVUBQOzYnKCeQO0QurlS9/vmLFiou7EdngQBktQBNUy6VrpiLGq1AhqJq+gkrnzZMX TkW19IIFCgBM5H7oIVqQJRk+m/pkli3DDz34IIe4S4gaVIWRoF4QKPBkYm/k66cyhSUgiCxA DRU2HSQxaQplUi89jnEK/rXkI7hAo6HzZXE5eB+AG9hIkPxAf0ailDRmo2F6EIoiafn4o4/x Pnv8m37xC0IvuvXxEyJqBw8aDORx/3331YCfbtvWQz2cOzcfOgBa8WLFAn4a4yUSz1chObly 5YJxIzltPufMmQPdakkqWqQIHGmIh8J4ue6/H07aMfgIaCUtkWlEYGGIRQwf8U1hJxkdT5qM Dx2wCVFeQGHtUe0dDI+4BoUNwDfAIC1FMFN26tdvkDfPE8xI4cEv50/OZjwY6UBePiB5ETWw uAwcOGrkCLssaAdfMQ8oE5Cetw5WInATjIvwQRDEEUNZWOnhLQirunXrQUELlmFJGzNmTFQV uUGDu+++O6hA9CUlvyPTYhy1ybo4bNhwberUqY2qFi9eMnDAwN59ehcrVgzFJOEFkPIQzy5n PEiWc2AL28UQFuRDAQY7jqg/7KxOnoRTiwo4xyFnoQ2lC/W3Ugx5bCQbx40dg3UTksXqNjm+ Ghi8OAlJ4kER6M0eD60LHfAroCblmTRjtCDxdFi0cJFhQ6OtVwhTMkVMGsWLl6BtstzQZgd4 qN69WTUee/QxS4aW1i97vNB5vB7tJ6ysbqVKlbIAqWXta+/evXLnzq2ZWdKG/blkyZK0DA9I /qsNGEYOj0JHTZ5C1I99e/hqd0fERQcvvqASPXEdxjl92nT6vP02DdPX2lHQUwb0lApqHtwr dcN8ebJfzma8Xj17jB0zOrwnaK9Qu9yajbZodHQzWigwJ+t8zWrVAb5QFZ3Ei8EDUIt4EjmG lxQ6oaAmqmY4s3XrKxbXcEwpgg+0ZcowK2T60yiNtosJ9YDVU958Dd2CUJIVjRo2omjZaFnR O3ToWKhQIbApVGi9V9O4VKmS6DW6JCreesomqljRIqxEemCTJFHhpMlnazwiwyp0SyBJ+z2B diSAzuG5Q4qHLHu8iPH2G3aFsMezKgm9o28XyC+uZy5IKv4sVbIUiZF6LVmHSZInip9iUbfO 0f7NBzbVGpekWkiaUfYE4yRfgSotYck8AH2VK1OO7AJ8hSZjLnYX4ExbNc8IrWpmPKOY+qAw W3GaNW4irI51F9SOUs1oqWB14UKFCepXX32VZdhCCZ7qwWkxwLelS5acMSPCml6ezJY6qhzM eKj21ddeQ0+BYmDWoxQpJ07s2LH9jTeiRADIl34Cx4iWvTZaH20zorC4CPjkKVMIIpEjYTqC LXPH9h0Qj8G6Gc6Tb9Sz8NUL1qe/Wd6rbqNbZ35sooiUMKqQQGn16jWsKThWz4gG2jNE6MQS ZpWvhpdCLicobzwHBuVyEQDMKoLiUGSgaY3Jeaq1Y3XJp02bTrsL9snsBBebUt8Kj+9XEl4k m8gJC5PIJmZAV3GgGXMiJTws76idYWJn9ZMbKc4e1gVTDU1JPmahJLalCP4afzSz3oVY2PAh vYULG6ox0DPtt6M68ps3G4ApJV1BQ4NETXowBpZbQXfhwe0bx0+YCIubOQ+bpk6dRp671/r1 68yJZchPOcF/npONKymJseL3Gn+SXVMqeDL8mqwxWX5KKCMxsaTSUyoqJfSTnbhDgo/TFBZG kvIJYwsnU4+zf40vyoBrZHo6znVJ0ttZB5Y6pAyBlg3BmsxYlgFn0daS6T091TGiIPtjvtM8 pK7xqccZbJn5JKlskzxdWALOMXWnW0bzl0auZCfS9Jn0DKRnIEe7E876+s4qtc4io86mkATn +RkyJEYYhjOpP1EUQuN3IqHkkosZZJo+P8QzkIP3eGd9K1QSWxf/zmHXOvrWW7bmGcn54n18 0FEDa7HCrX3+ed5bEKegv9m6MKPbAs6YPoPrwh4yoBbfifF0yJDDCmLbmJofNhmwQdrC2WVd /sa3DzHpf7CPlrMZL2Xbdhqn//TTTwe7c8xOpzcGSWOmF5462MuQC1Azlr3Qnj2aoa9xo4YM bsAuTI6YBO6EV4oFnJlUtGW3rl1eBLOMWSqDac/cQ+pHFgYG1WRfl+w6kjFI4yPj0OkGHywV pO/+vs9ADma8iGdi0xk8brAQbHt1Gx/xsCFDnh78tLBxDm7cAZEo5Jm5TBuNiTt2wt17MN1e TgXJMzmvubm279jBssdCPf+ZeTiNKRwaA8SRI5v7wWfylKmSJsGOuTDOWxzJPKZCljfH7nLo 8GEeYSbQ3Xt261b2LrbNKINDDBzzZsNcGwOMr6RMI4YNjwXv0Q8+19z7TnbpG+ZgxkOv0FLl ypWHHfEiBw4YwIErzaOTeZ/IU7VqFeikyBfUrBlJVbx4cRlQgI/gvzZu2sixK5vlX2+9Fe+1 bNni9zf/XoIGPi7/eCCkypk4YeL9997L7ydjUpfOnSQO4Em//fbbpUtp2iTKJxkJq1P/ASuT GdYRcJkERDxyNWrWBONgKBejoPOKFStyeERcFzOexpzCXTp37t2zl5Qt0Plc2AaZ1jk/aqyY UxnPuNHrUwUKBlAIoAmpFXLxQ7s3b9rMDqxSpUpbt2yRlgfWkRe7dKmSXNIA7zKIyP8FMMX3 ChIpb7E2OpHoVnJleaxs88TCgXqSk9WqVMVpoDAEY+sYnl+2dGnJ0oOWSAWV/8cBNNOi2Fk8 Y9p0OZdopFHeruPHuKrlUwqN9QBXEVUFOHUK0AMUAwBaqiwyMGwm05+PzgzkVMYLMoQjWDiJ FNHgVLBUgb4BxKLceBE8ql4E4GzcGD6LqQOhO1mhbNk5c2djHjpnzHivUB2rx4xH3EmJi9Pk gcM2sqqCwsAHSwoowSOAYuu4BwBrGXXCvcSqdI0DYVq3ar1s6VLgKeBdQa7u2L5dlBxaQthp U6P86j4ghe3btAnHVocA/JXzC8Y6zXgfHZYLT5qDGS+ghwkxsEOSqnSJkiG3PugwQL0DYGWM B7m7dPESMqpl8xYeWA5Glkk4SRfWrVP3tde22+5RQbUXgikAh2pKTI0fO44SmPeJJwCa2rRt K/BHviqRYJrhyZUrngvTh/F0G/FzhQoyTwtKCGhMEq91XIRAHjuBambZjhRqXjhpcN9rKSWZ A7E/bLBpxkszHvDTtddee8Wtt96KQMPyHD6X1T7EYEDpJaWVLBkKmdTq2LEjbbN71279+/WX MNOAYflBpaLkykuXCleV6hz1V6lUUeQBqcX0Iic09K3AH8hJqGKX4C6cIMEjeKRiA5C44FGY Z+zo0WvWrpXpmX1EgmqAr9mz59jgMZPA4LvR3XfdBbIklTpjZteu3aZOnRKCaOSulKFdRoOn nx7CCkqiijETmtCrZ69JEybojVjmV0gzXprxcgbjeU+AjIIjxYABXkbrwslTjPhEDd8A6HME vNyxg1gTSCLOUkESRkvbQtZOqHzmRJdjV1vEkLpD5E6IA1Aoz0n7QDGjYbkRJKql9ObYLAKI viqkJToOFWrs0BYtWoh7FZojHl24YOFCv8aZRU6wrEBy+mzdGoEYiTtgaE5C5wUZgTtu377D lvKjRnbp583BqqaXl0jj+PgMGGL4NXm8VIdbuCq5PGkTqCGLkE8AK2d12WVpn3ptfIvTSbJS 73jmsC8vVSLNEu/PDORsxnt/5ih9l/QMXPIZyMGMd56wzOxTFm9YMyK7L4eNaxCA7wRAy/KY voZ3ltRDPjtNnAk6Df0HFeCsKNN33WSee5CXnC4/9B3mYMbzbpYtWy6vUcI8iQUoOcj+/jQW GGoPFkfuvR6Fk3+gL9l4hNvZN77TKGBKhYTbpkaPGYO2wWVgYqK0lpkg7ezP66HUalQ55OWX N6uywJcYb1Zfj/JhZkOZAuLYKvOvvNMy5LxtsL1uFi39A525nH3zHMx4iKBZ0yZRfoTMj/JU IcW/g7h2+elPwJSFp4XknD51GmMMt4GkfdH5zEC7ZDoyY/ZOB3R7zxmiJlPmRMaSk6nZrDM2 mUnLhEwDh5y5zTu9I+W3UEU5yOHTci8TZcrkw7UYJeTL3JfCo6m5lfp0MppED5gZER9+4tnv 3r0HV6dEZkp/GKp8M+r1hV8Dj4Vj7scK5cpivDNHmHoHNdNHuC87kDXLD2pNhoLVOZv8P7jR 52zGU3VNcishycePvQ2DIv+U5Hxy4xQvXkzCPLZEpsXVa9ZESTgkxoyqdUcVt9XiYsEXcCAB GQKKQJfHjqmJB4epJDrz4yG5igUl7NoVYTJPnFAfWGQ6OSFHy062yrhouISqfnIlAlabJi5D o0TOZoPRj58UFla7izMd54SMmu7omKFVOjC5H6XE4pZg3pT1QGIyFxJlADeJjUeGwlWrVovp VoKPTz+OSY9YRfrAkOCAT9+v7iKdCd8GDKrjUAuJKVU6CZnzpE6RlcSA9+7Z7Xk5UdTc4TUJ 1SfNlXEaAyeK3oTnO3mQBfiNndJym65169dp76TBw52q1KM3hm+w1aefHhzVOr8Myhp/cOxz 4XfO2YwHrSIBifLWXTt3ARC55Za/cLUpaHjLLbeEBGFAm9Wj/MT1uRMgUVCpnLZ8dzhBklaV 2WSMlRcE/cFh+lUmr/vuuUeZO7Qr8xxwCWkg52yUDnDrVkWbpd9CjqNHjxoSZ/gy8T169ChX tpwkKMDZfHTWAv4JiLCyZctyl1euVNG9otSA+/Yjbn6IRQsXkFdr1z7fpGkT2VflIDEGGACZ nsmoqHH8oXzCl0n1JSFn+bJlIcsgUSdMGO8nydQsHIBplStXIb2hdv7yl7/ECQ5fhBZQh10e Md6RO+64Q+Yy2ZnuvfdeTPXs0iUywEoPY7TyC4HLSFgGOOrCjRvWgwpUr1ZdAb1Vq1YpQKmu rdybUVKTOnXAXC09JnbihPGm4p577sH55kHVctrs5bBJvnDy/+CufEfGy58/P8JN1TYutyk2 NimGZJImpmhTXG1y/vB3m0y5vgkjnAZvqZmVfuHCRSFXCroPBcf9BNglozMyIhlyP/jgnNmz nh48qG3r1nLOyeEhPzSwGFHTplWrXj16Eq0YMs9jjxFTZGZAqBBxvPa41LF0Q/37RlXCBeMp m4r96GalS5biMDR1SjHjH7FIdlM6DBMLU0ogG4l8hFguPEX4SUag4XFwEymsN6kyn3/hBWxg n+avx1RqPGR0pWRKOEsiEbkyqamjkC9PHntXEDlZUlaufE6dR8147WU3mjZlqjLikXq5b7+R h6TLBw7sl2aTDJ8xY6YM0PJhmgQ7OreQH0ViMnVhZROcOWM6AFDPnlFv1jWLVFrVvGDOzc54 NKCbbrrpiqpVqwL+XuaMR7ysWPEcCIsCvDRJ9U0RLoUQWIwWJKnrvLlzPYJ4BVlxwrMIsSPi qIING9SXT5LWhIvgXYQSYUiJruCtmzRuBEs5eOBAVYXJrihT6vLl7dq0AcvEWoIhZJgO2fIk DnJ56Pm1ba/Cdnbu2Im0UcnZmTgZbv0AZONFV80U89t0yfnpDFEmJ6SD9u3bcf1TFKFqMG3o DbmHxKwYT0QFvVcaNfEWBq9SsfNMMmQUw4m9Wf26Uf4yCq+MmrVq1yarqakGuWH9Biq3NOna k2x8/ThfAV05wmTgVrs43ItOThrj/HnPPEMaW18sBDLf1qsjT/spD+i83mbNmCFTU7euUW8k /JLFZ2S/vmAS/GhemJ3xFLumpFwhg2/RokUvc8aT2hUpSAlesVx52zDYMcv2kbeOUNuwnxgc ATgegUBApgwDTtLTGFRgo6mp2M+mS+o7mqS48pLFi8u3aeNmyS+YL7/U1IhVSnBKJjYr/ORT UgOKbn/iscfJKM1syeS9kkIzlCUI9nr64fBhQ/2VcJrEK1tabfG3jTBUAnCJVJz6sUwApilR 4BKiiXFFmrAKRNCu3YapK3FG3bp09atr6caGR+IRxX169ZZkNrw2m668efJs2fKyXK6ygHk0 WDn1ekg8GjV0uASb4pjIbUH0+EfPAZ0zsP8AS0OZ0qVkE/NVOQcrl9mZPWumNcjKMmTQYJEZ AjU8ZqMG9a1fJJ7UzoI8BF65pEXLlhL+Ofhoss3FP3V2xgscd0VAjl3mjCcv+nPLlrEcEHFY TpSd1OLibiz79jlq7lj7baLwGIrv1bM3/VBouaXdvmh4DKSOFu+2bUNx+qqVq7ZqFSGbyTGp pnUrSK9gwYKRyDp1Cn+iYDOO1iWTtSHs3iNKV96vbx85p7Foz+7dataoKREtD4fErOqJlyhW nJa4bes2iE28JOxdks98efJaDkaNGvXE4483btzIMCSEJPEwHouFyKahQ4fRgXfu3GV7ZgXB xpLwYlTWlyaNGotdAlUjOYkgkRlgop6XJJRJmtosV6xtWMECBUl+T6rAyNKlz9oysP2SY0aL c+gyZUqXkb1X2maZKsUZCi+kJ9u7UoNpBzQFYVDuiJNZj9q0aknM6g3oVLSUxzd7xi+TvI3i 5bYBuXiWeH96yM54xB2hd4WXdPPNN1svE9673KYYKdOR6E5WcTF1NnUkwPoNG3x1nkyzq0G1 dkchpSSDJFMe6cQJwOgXWeTi2CI2TFXv4t4OImL9RKa/3XvYF0kbPUdugxMnXCjVioOouDYi PfLWGzsjNKb5YZthtECpLIohyTnepvup0SF1vN5wkZa4RVJkmzSWHssERlq1ehWZaTCYnPSL IKbHjslFaYemE4MJedfd2rVUSrfWf1zL6Di9kYWGePdePDg902aS0SXq8ODBuKzfgWich9/y q0+cJ+aE/wkLJMPDa2Ud4WkwFXL1unVczTxqSWzqwSDdSD+GZ0rDjLH6CunwK65Oavq9P8T6 YbpLFsbzpq666ip/I8aTzJxp7rJlvGBbT/xRiVcqOWC0nD49Y2uXnAzaUXioxHCf5WSYlHM3 S9pkX7pwvs1bq1atK1aoGDaZqb2lKhFZ5jal2RkJocP55Eapw07tOXUkyeSkOvdSM9CkdpLl eVMHnDEJmR7CZE6yDObDxBLvz7NkIZuE1yLGw3+0TRj/8CYuN4l37gkK/rdIvr2/nyj38/Hj FHVxQ2SCeSNC3wXe9f6OMH23y2EGUhkvldEixvMRrHnfffflUMYLw34nDOR/a/ZjKGQiyoKa +n6P4b/1bOl+L9kMpDJeqmqZwXgIiKWFvSXHSbxLNkPpjtIz8F+YgYTxmFEEnYeqmj6nGc8p 9pYs0ehn3aikT6ZnID0D72kGbEmYMJPd3BmM5wvrlp8lin1PnaYbp2cgPQPnmAGyDlvhvdQ2 pyVeOEvuPfLII1xAmDA9m+kZSM/AxcwAbrKvo2GmyrqsqmbqDYDI2Dldk2a/i5n39LUf5RmA Z7jxxhs56pJ93bkkXvIblnMNZx9rJ6OLvR8P7Ed5HtPPnp6Bc89A7FuabadGZ7zyyiuFH2RR L8+L8ZJGPA0MnsQl9lXqPv1Jz0B6Bs46A5REbILr8N5ZpVwq4/1/9BckHFTJneYAAAAASUVO RK5CYII= --------------030307000106050603090906-- --------------070607030308000007080106-- From nobody Mon Oct 27 03:11:16 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E64C1A9033 for ; Mon, 27 Oct 2014 03:11:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.26 X-Spam-Level: X-Spam-Status: No, score=-2.26 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_LOW=-0.7, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sIIf4p9ySZ8n for ; Mon, 27 Oct 2014 03:11:08 -0700 (PDT) Received: from outbox.sics.se (outbox.sics.se [193.10.64.137]) by ietfa.amsl.com (Postfix) with ESMTP id 1DAA21A901E for ; Mon, 27 Oct 2014 03:11:08 -0700 (PDT) Received: from e-mailfilter01.sunet.se (e-mailfilter01.sunet.se [192.36.171.201]) by outbox.sics.se (Postfix) with ESMTPS id 9DD15196F for ; Mon, 27 Oct 2014 11:11:05 +0100 (CET) Received: from letter.sics.se (letter.sics.se [193.10.64.6]) by e-mailfilter01.sunet.se (8.14.4/8.14.4/Debian-4) with ESMTP id s9RAB5RU025194 for ; Mon, 27 Oct 2014 11:11:05 +0100 Received: from norm.sics.se (norm.sics.se [193.10.64.192]) by letter.sics.se (Postfix) with ESMTPS id E143240126 for ; Mon, 27 Oct 2014 11:11:05 +0100 (CET) Received: from [192.168.0.108] (unknown [85.235.11.178]) by norm.sics.se (Postfix) with ESMTPSA id 35F55A1 for ; Mon, 27 Oct 2014 11:11:05 +0100 (CET) Message-ID: <544E1A38.1070901@sics.se> Date: Mon, 27 Oct 2014 11:11:04 +0100 From: Ludwig Seitz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.2.0 MIME-Version: 1.0 To: "ace@ietf.org" References: <20141027100404.26117.25685.idtracker@ietfa.amsl.com> In-Reply-To: <20141027100404.26117.25685.idtracker@ietfa.amsl.com> X-Forwarded-Message-Id: <20141027100404.26117.25685.idtracker@ietfa.amsl.com> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms080106000102030809050207" X-Bayes-Prob: 0.5 (Score 0, tokens from: outbound, outbound-sics-se:default, sics-se:default, base:default, @@RPTN) X-p0f-Info: os=Solaris 10, link=Ethernet or modem X-CanIt-Geo: =?UTF-8?Q?ip=3D85.235.11.178; _country=3DSE; _region=3DSk=C3=A5ne; _city=3DLund; _latitude=3D55.7028; _longitude=3D13.1927; _http://maps.google.com/maps=3Fq=3D55.7028,13.1927&z=3D6?= X-CanItPRO-Stream: outbound-sics-se:outbound (inherits from outbound-sics-se:default, sics-se:default, base:default) X-Canit-Stats-ID: 09N8ab52G - 109897e974f1 - 20141027 (trained as not-spam) X-Antispam-Training-Forget: https://canit.sunet.se/canit/b.php?i=09N8ab52G&m=109897e974f1&t=20141027&c=f X-Antispam-Training-Nonspam: https://canit.sunet.se/canit/b.php?i=09N8ab52G&m=109897e974f1&t=20141027&c=n X-Antispam-Training-Spam: https://canit.sunet.se/canit/b.php?i=09N8ab52G&m=109897e974f1&t=20141027&c=s X-CanIt-Archive-Cluster: PfMRe/vJWMiXwM2YIH5BVExnUnw X-Scanned-By: CanIt (www . roaringpenguin . com) on 192.36.171.201 Archived-At: http://mailarchive.ietf.org/arch/msg/ace/EIE8X7QhnLVP3oFheIsoFDJgybs Subject: [Ace] Fwd: New Version Notification for draft-seitz-ace-usecases-02.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Oct 2014 10:11:14 -0000 This is a cryptographically signed message in MIME format. --------------ms080106000102030809050207 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Hello, here is an updated version of our use-case draft. We have tried to=20 integrate all comments we have received and we have also tried to=20 simplify the document. Furthermore we have shifted focus from=20 "requirements" (which some didn't like) to "authorization problems that=20 need to be solved". The idea behind this change was to make the use=20 cases even more solution independent, and just highlight the problems=20 that solutions need to address. We also added two new use cases and expanded the smart metering use case.= Regards, Ludwig Seitz -------- Forwarded Message -------- Subject: New Version Notification for draft-seitz-ace-usecases-02.txt Date: Mon, 27 Oct 2014 03:04:04 -0700 From: internet-drafts@ietf.org To: Mehdi Mani , Sandeep Kumar=20 , Goeran Selander=20 , Sandeep S. Kumar=20 , Ludwig Seitz , Goran=20 Selander , Stefanie Gerdes=20 , Stefanie Gerdes , Ludwig Seitz=20 , Mehdi Mani A new version of I-D, draft-seitz-ace-usecases-02.txt has been successfully submitted by Ludwig Seitz and posted to the IETF repository. Name: draft-seitz-ace-usecases Revision: 02 Title: ACE use cases Document date: 2014-10-27 Group: Individual Submission Pages: 24 URL:=20 http://www.ietf.org/internet-drafts/draft-seitz-ace-usecases-02.txt Status: https://datatracker.ietf.org/doc/draft-seitz-ace-usecases= / Htmlized: http://tools.ietf.org/html/draft-seitz-ace-usecases-02 Diff: http://www.ietf.org/rfcdiff?url2=3Ddraft-seitz-ace-usecas= es-02 Abstract: Constrained devices are nodes with limited processing power, storage space and transmission capacities. These devices in many cases do not provide user interfaces and are often intended to interact without human intervention. This document comprises a collection of representative use cases for the application of authentication and authorization in constrained environments. These use cases aim at identifying authorization problems that arise during the lifecylce of a constrained device and are intended to provide a guideline for developing a comprehensive authentication and access control solution for this class of scenarios. Where specific details are relevant, it is assumed that the devices use the Constrained Application Protocol (CoAP) as communication protocol, however most conclusions apply generally. =20 Please note that it may take a couple of minutes from the time of submiss= ion until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat --------------ms080106000102030809050207 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMVDCC BhgwggUAoAMCAQICAwiRTjANBgkqhkiG9w0BAQsFADCBjDELMAkGA1UEBhMCSUwxFjAUBgNV BAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRl IFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlh dGUgQ2xpZW50IENBMB4XDTE0MDEwNzA3MjgzNVoXDTE1MDEwNzEyNTgyMlowODEXMBUGA1UE AwwObHVkd2lnQHNpY3Muc2UxHTAbBgkqhkiG9w0BCQEWDmx1ZHdpZ0BzaWNzLnNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLm1tc30QxHa9wtdVjC3NgxjLJicnccm0HD+ 1X16kPMKGvwps8F1oDhYn7jXIe46p1AuJMzLK0GIioE4JwxCFGdvpz7cg2xyTyrdBVUzSqez Dfqt4FOJq6hrdrIMS8MHEzl7Jk02gv9cTn/pHQvDpkiThRpbSLU5mlMqtEQ8gDQY5YyBX0Mv 5qculV08I2JU8HEeTt1oeqhvBImgQfOVYMDatHlWHUVVrmYd6iIo+cuiUGd5kiA0XuaLYX0E oCoao/z5Wg9U0sQlx0hl4r96Q+NdoZZ1prfts3qtyBzJ2hu135aikigzJ6sueWHv/jbISUek tOMm0xkx1GOqqWtEAwIDAQABo4IC1DCCAtAwCQYDVR0TBAIwADALBgNVHQ8EBAMCBLAwHQYD VR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMB0GA1UdDgQWBBRZmjjBh8N3klra+mVQgC00 pl68ZTAfBgNVHSMEGDAWgBRTcu2SnODaywFcfH6WNU7y1LhRgjAZBgNVHREEEjAQgQ5sdWR3 aWdAc2ljcy5zZTCCAUwGA1UdIASCAUMwggE/MIIBOwYLKwYBBAGBtTcBAgMwggEqMC4GCCsG AQUFBwIBFiJodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRmMIH3BggrBgEFBQcC AjCB6jAnFiBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTADAgEBGoG+VGhpcyBj ZXJ0aWZpY2F0ZSB3YXMgaXNzdWVkIGFjY29yZGluZyB0byB0aGUgQ2xhc3MgMSBWYWxpZGF0 aW9uIHJlcXVpcmVtZW50cyBvZiB0aGUgU3RhcnRDb20gQ0EgcG9saWN5LCByZWxpYW5jZSBv bmx5IGZvciB0aGUgaW50ZW5kZWQgcHVycG9zZSBpbiBjb21wbGlhbmNlIG9mIHRoZSByZWx5 aW5nIHBhcnR5IG9ibGlnYXRpb25zLjA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vY3JsLnN0 YXJ0c3NsLmNvbS9jcnR1MS1jcmwuY3JsMIGOBggrBgEFBQcBAQSBgTB/MDkGCCsGAQUFBzAB hi1odHRwOi8vb2NzcC5zdGFydHNzbC5jb20vc3ViL2NsYXNzMS9jbGllbnQvY2EwQgYIKwYB BQUHMAKGNmh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL3N1Yi5jbGFzczEuY2xpZW50 LmNhLmNydDAjBgNVHRIEHDAahhhodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS8wDQYJKoZIhvcN AQELBQADggEBAHqEYmtWr83S+iLXE97KBnHJZiMr6PMuLKxmh0o6UJJwKgf+KTP2czxRnPSI +whuqfQZdmz6g3A2K8AooMU0RXrzncnX1c4826APdnXkRxnGQxtZXI1wuhPn4z7iDKZ6ij9u K5Pfn10JL/ERDig2qJQbqvhtIAx0RY7y7r+hLMvgXVq9mf3WRJYmGQeFW+N9t5Z1eEwG4m9R KAZm0fnfeDn/Ai4kmxTckBH7dZwW2lTtwQqQ4su+PGCJ0e9ndBLpvTqaYGSAl+L7PO7vxPhS /cS67Xa6BtnYJLTr3MaGXaN+CEUFSfwQHa9DKcAqh3kldErI3kCvnot0CigBl4aILOEwggY0 MIIEHKADAgECAgEeMA0GCSqGSIb3DQEBBQUAMH0xCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1T dGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWdu aW5nMSkwJwYDVQQDEyBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wNzEw MjQyMTAxNTVaFw0xNzEwMjQyMTAxNTVaMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3Rh cnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmlu ZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGll bnQgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCYPMzi3YGrEppC4Tq5a+ ijKDjKaIQZZVR63UbxIP6uq/I0fhCu+cQhoUfE6ERKKnu8zPf1Jwuk0tsvVCk6U9b+0UjM0d Lep3ZdE1gblK/1FwYT5Pipsu2yOMluLqwvsuz9/9f1+1PKHG/FaR/wpbfuIqu54qzHDYeqiU fsYzoVflR80DAC7hmJ+SmZnNTWyUGHJbBpA8Q89lGxahNvuryGaC/o2/ceD2uYDX9U8Eg5Dp IpGQdcbQeGarV04WgAUjjXX5r/2dabmtxWMZwhZna//jdiSyrrSMTGKkDiXm6/3/4ebfeZuC YKzN2P8O2F/Xe2AC/Y7zeEsnR7FOp+uXAgMBAAGjggGtMIIBqTAPBgNVHRMBAf8EBTADAQH/ MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUU3Ltkpzg2ssBXHx+ljVO8tS4UYIwHwYDVR0j BBgwFoAUTgvvGqRAW6UXaYcwyjRoQ9BBrvIwZgYIKwYBBQUHAQEEWjBYMCcGCCsGAQUFBzAB hhtodHRwOi8vb2NzcC5zdGFydHNzbC5jb20vY2EwLQYIKwYBBQUHMAKGIWh0dHA6Ly93d3cu c3RhcnRzc2wuY29tL3Nmc2NhLmNydDBbBgNVHR8EVDBSMCegJaAjhiFodHRwOi8vd3d3LnN0 YXJ0c3NsLmNvbS9zZnNjYS5jcmwwJ6AloCOGIWh0dHA6Ly9jcmwuc3RhcnRzc2wuY29tL3Nm c2NhLmNybDCBgAYDVR0gBHkwdzB1BgsrBgEEAYG1NwECATBmMC4GCCsGAQUFBwIBFiJodHRw Oi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRmMDQGCCsGAQUFBwIBFihodHRwOi8vd3d3 LnN0YXJ0c3NsLmNvbS9pbnRlcm1lZGlhdGUucGRmMA0GCSqGSIb3DQEBBQUAA4ICAQAKgwh9 eKssBly4Y4xerhy5I3dNoXHYfYa8PlVLL/qtXnkFgdtY1o95CfegFJTwqBBmf8pyTUnFsukD FUI22zF5bVHzuJ+GxhnSqN2sD1qetbYwBYK2iyYA5Pg7Er1A+hKMIzEzcduRkIMmCeUTyMyi kfbUFvIBivtvkR8ZFAk22BZy+pJfAoedO61HTz4qSfQoCRcLN5A0t4DkuVhTMXIzuQ8Cnykh ExD6x4e6ebIbrjZLb7L+ocR0y4YjCl/Pd4MXU91y0vTipgr/O75CDUHDRHCCKBVmz/Rzkc/b 970MEeHt5LC3NiWTgBSvrLEuVzBKM586YoRD9Dy3OHQgWI270g+5MYA8GfgI/EPT5G7xPbCD z+zjdH89PeR3U4So4lSXur6H6vp+m9TQXPF3a0LwZrp8MQ+Z77U1uL7TelWO5lApsbAonrqA SfTpaprFVkL4nyGH+NHST2ZJPWIBk81i6Vw0ny0qZW2Niy/QvVNKbb43A43ny076khXO7cNb BIRdJ/6qQNq9Bqb5C0Q5nEsFcj75oxQRqlKf6TcvGbjxkJh8BYtv9ePsXklAxtm8J7GCUBth HSQgepbkOexhJ0wP8imUkyiPHQ0GvEnd83129fZjoEhdGwXV27ioRKbj/cIq7JRXun0NbeY+ UdMYu9jGfIpDLtUUGSgsg2zMGs5R4jGCA90wggPZAgEBMIGUMIGMMQswCQYDVQQGEwJJTDEW MBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlm aWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVy bWVkaWF0ZSBDbGllbnQgQ0ECAwiRTjAJBgUrDgMCGgUAoIICHTAYBgkqhkiG9w0BCQMxCwYJ KoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNDEwMjcxMDExMDRaMCMGCSqGSIb3DQEJBDEW BBShxTePDYzY7sXd9UQIkQsY5JAxvTBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjAL BglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFA MAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGlBgkrBgEEAYI3EAQxgZcwgZQwgYwxCzAJBgNV BAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRh bCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1h cnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQQIDCJFOMIGnBgsqhkiG9w0BCRACCzGBl6CBlDCB jDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3Vy ZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNz IDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgMIkU4wDQYJKoZIhvcNAQEBBQAE ggEAhQtxciuCVFAIkDqBB0ziOlcoQFF3+iVzXmaTt4GXvPoTpJFmQga4Eun13iiLRVbIqDsK L57MIzmk8aVIQTttBEus4uKOnkR/ha8a1EcXIzhj6BJSsnGYFaucws9O7W5TCM5V7/4WgF7j B9PCtB4eZrZ7qHzh+ceI/j1UXZlttd/v8bxJOXWFCmGeX4aZmkuyia6OEqaev97IWaekk1y7 xTQ5uTm/WAXlqGD3+7kqkb5SZz6QXE3hdA/DTHB38yU4caZXhxjLVsR36K5otmU3j67UIgvo 6wttyKHUtmIj8Whw3kCLPxt33cDuJdXr7AGjsXB1ffrBkAm3jNZJu19I/gAAAAAAAA== --------------ms080106000102030809050207-- From nobody Mon Oct 27 09:59:23 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 303BC1A1B5E for ; Mon, 27 Oct 2014 09:59:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.26 X-Spam-Level: X-Spam-Status: No, score=-2.26 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_LOW=-0.7, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gBt4mlFc23Qg for ; Mon, 27 Oct 2014 09:59:16 -0700 (PDT) Received: from outbox.sics.se (outbox.sics.se [193.10.64.137]) by ietfa.amsl.com (Postfix) with ESMTP id 83AA61A00AB for ; Mon, 27 Oct 2014 09:59:16 -0700 (PDT) Received: from e-mailfilter01.sunet.se (e-mailfilter01.sunet.se [192.36.171.201]) by outbox.sics.se (Postfix) with ESMTPS id 79427198A for ; Mon, 27 Oct 2014 17:59:15 +0100 (CET) Received: from letter.sics.se (letter.sics.se [193.10.64.6]) by e-mailfilter01.sunet.se (8.14.4/8.14.4/Debian-4) with ESMTP id s9RGxFqI020215 for ; Mon, 27 Oct 2014 17:59:15 +0100 Received: from norm.sics.se (norm.sics.se [193.10.64.192]) by letter.sics.se (Postfix) with ESMTPS id 9342F4016C for ; Mon, 27 Oct 2014 17:59:15 +0100 (CET) Received: from [192.168.0.108] (unknown [85.235.11.178]) by norm.sics.se (Postfix) with ESMTPSA id 0A2C72F4 for ; Mon, 27 Oct 2014 17:59:15 +0100 (CET) Message-ID: <544E79E2.8090107@sics.se> Date: Mon, 27 Oct 2014 17:59:14 +0100 From: Ludwig Seitz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.2.0 MIME-Version: 1.0 To: "ace@ietf.org" References: <20141027165542.19108.73264.idtracker@ietfa.amsl.com> In-Reply-To: <20141027165542.19108.73264.idtracker@ietfa.amsl.com> X-Forwarded-Message-Id: <20141027165542.19108.73264.idtracker@ietfa.amsl.com> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms070300000403010807060506" X-Bayes-Prob: 0.0001 (Score 0, tokens from: outbound, outbound-sics-se:default, sics-se:default, base:default, @@RPTN) X-p0f-Info: os=Solaris 10, link=Ethernet or modem X-CanIt-Geo: =?UTF-8?Q?ip=3D85.235.11.178; _country=3DSE; _region=3DSk=C3=A5ne; _city=3DLund; _latitude=3D55.7028; _longitude=3D13.1927; _http://maps.google.com/maps=3Fq=3D55.7028,13.1927&z=3D6?= X-CanItPRO-Stream: outbound-sics-se:outbound (inherits from outbound-sics-se:default, sics-se:default, base:default) X-Canit-Stats-ID: 09N8gXfxb - 6d2896fae6eb - 20141027 X-Antispam-Training-Forget: https://canit.sunet.se/canit/b.php?i=09N8gXfxb&m=6d2896fae6eb&t=20141027&c=f X-Antispam-Training-Nonspam: https://canit.sunet.se/canit/b.php?i=09N8gXfxb&m=6d2896fae6eb&t=20141027&c=n X-Antispam-Training-Spam: https://canit.sunet.se/canit/b.php?i=09N8gXfxb&m=6d2896fae6eb&t=20141027&c=s X-CanIt-Archive-Cluster: PfMRe/vJWMiXwM2YIH5BVExnUnw X-Scanned-By: CanIt (www . roaringpenguin . com) on 192.36.171.201 Archived-At: http://mailarchive.ietf.org/arch/msg/ace/PB5ynTLurMSlskE-vtGdkBqtY0s Subject: [Ace] Fwd: New Version Notification for draft-seitz-ace-problem-description-02.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Oct 2014 16:59:20 -0000 This is a cryptographically signed message in MIME format. --------------ms070300000403010807060506 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable We have submitted an update of draft-seitz-ace-problem-description. The=20 update consists of minor editorial changes and some added assumptions=20 and requirements. /Ludwig -------- Forwarded Message -------- Subject: New Version Notification for=20 draft-seitz-ace-problem-description-02.txt Date: Mon, 27 Oct 2014 09:55:42 -0700 From: internet-drafts@ietf.org To: Ludwig Seitz , Goeran Selander=20 , Ludwig Seitz , Goran=20 Selander A new version of I-D, draft-seitz-ace-problem-description-02.txt has been successfully submitted by Ludwig Seitz and posted to the IETF repository. Name: draft-seitz-ace-problem-description Revision: 02 Title: Problem Description for Authorization in Constrained Environments= Document date: 2014-10-27 Group: Individual Submission Pages: 19 URL:=20 http://www.ietf.org/internet-drafts/draft-seitz-ace-problem-description-0= 2.txt Status:=20 https://datatracker.ietf.org/doc/draft-seitz-ace-problem-description/ Htmlized:=20 http://tools.ietf.org/html/draft-seitz-ace-problem-description-02 Diff:=20 http://www.ietf.org/rfcdiff?url2=3Ddraft-seitz-ace-problem-description-02= Abstract: We present a problem description for authentication and authorization= in constrained-node networks, i.e. networks where some devices have severe constraints on memory, processing, power and communication bandwidth. =20 Please note that it may take a couple of minutes from the time of submiss= ion until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat --------------ms070300000403010807060506 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMVDCC BhgwggUAoAMCAQICAwiRTjANBgkqhkiG9w0BAQsFADCBjDELMAkGA1UEBhMCSUwxFjAUBgNV BAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRl IFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlh dGUgQ2xpZW50IENBMB4XDTE0MDEwNzA3MjgzNVoXDTE1MDEwNzEyNTgyMlowODEXMBUGA1UE AwwObHVkd2lnQHNpY3Muc2UxHTAbBgkqhkiG9w0BCQEWDmx1ZHdpZ0BzaWNzLnNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLm1tc30QxHa9wtdVjC3NgxjLJicnccm0HD+ 1X16kPMKGvwps8F1oDhYn7jXIe46p1AuJMzLK0GIioE4JwxCFGdvpz7cg2xyTyrdBVUzSqez Dfqt4FOJq6hrdrIMS8MHEzl7Jk02gv9cTn/pHQvDpkiThRpbSLU5mlMqtEQ8gDQY5YyBX0Mv 5qculV08I2JU8HEeTt1oeqhvBImgQfOVYMDatHlWHUVVrmYd6iIo+cuiUGd5kiA0XuaLYX0E oCoao/z5Wg9U0sQlx0hl4r96Q+NdoZZ1prfts3qtyBzJ2hu135aikigzJ6sueWHv/jbISUek tOMm0xkx1GOqqWtEAwIDAQABo4IC1DCCAtAwCQYDVR0TBAIwADALBgNVHQ8EBAMCBLAwHQYD VR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMB0GA1UdDgQWBBRZmjjBh8N3klra+mVQgC00 pl68ZTAfBgNVHSMEGDAWgBRTcu2SnODaywFcfH6WNU7y1LhRgjAZBgNVHREEEjAQgQ5sdWR3 aWdAc2ljcy5zZTCCAUwGA1UdIASCAUMwggE/MIIBOwYLKwYBBAGBtTcBAgMwggEqMC4GCCsG AQUFBwIBFiJodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRmMIH3BggrBgEFBQcC AjCB6jAnFiBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTADAgEBGoG+VGhpcyBj ZXJ0aWZpY2F0ZSB3YXMgaXNzdWVkIGFjY29yZGluZyB0byB0aGUgQ2xhc3MgMSBWYWxpZGF0 aW9uIHJlcXVpcmVtZW50cyBvZiB0aGUgU3RhcnRDb20gQ0EgcG9saWN5LCByZWxpYW5jZSBv bmx5IGZvciB0aGUgaW50ZW5kZWQgcHVycG9zZSBpbiBjb21wbGlhbmNlIG9mIHRoZSByZWx5 aW5nIHBhcnR5IG9ibGlnYXRpb25zLjA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vY3JsLnN0 YXJ0c3NsLmNvbS9jcnR1MS1jcmwuY3JsMIGOBggrBgEFBQcBAQSBgTB/MDkGCCsGAQUFBzAB hi1odHRwOi8vb2NzcC5zdGFydHNzbC5jb20vc3ViL2NsYXNzMS9jbGllbnQvY2EwQgYIKwYB BQUHMAKGNmh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL3N1Yi5jbGFzczEuY2xpZW50 LmNhLmNydDAjBgNVHRIEHDAahhhodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS8wDQYJKoZIhvcN AQELBQADggEBAHqEYmtWr83S+iLXE97KBnHJZiMr6PMuLKxmh0o6UJJwKgf+KTP2czxRnPSI +whuqfQZdmz6g3A2K8AooMU0RXrzncnX1c4826APdnXkRxnGQxtZXI1wuhPn4z7iDKZ6ij9u K5Pfn10JL/ERDig2qJQbqvhtIAx0RY7y7r+hLMvgXVq9mf3WRJYmGQeFW+N9t5Z1eEwG4m9R KAZm0fnfeDn/Ai4kmxTckBH7dZwW2lTtwQqQ4su+PGCJ0e9ndBLpvTqaYGSAl+L7PO7vxPhS /cS67Xa6BtnYJLTr3MaGXaN+CEUFSfwQHa9DKcAqh3kldErI3kCvnot0CigBl4aILOEwggY0 MIIEHKADAgECAgEeMA0GCSqGSIb3DQEBBQUAMH0xCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1T dGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWdu aW5nMSkwJwYDVQQDEyBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wNzEw MjQyMTAxNTVaFw0xNzEwMjQyMTAxNTVaMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3Rh cnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmlu ZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGll bnQgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCYPMzi3YGrEppC4Tq5a+ ijKDjKaIQZZVR63UbxIP6uq/I0fhCu+cQhoUfE6ERKKnu8zPf1Jwuk0tsvVCk6U9b+0UjM0d Lep3ZdE1gblK/1FwYT5Pipsu2yOMluLqwvsuz9/9f1+1PKHG/FaR/wpbfuIqu54qzHDYeqiU fsYzoVflR80DAC7hmJ+SmZnNTWyUGHJbBpA8Q89lGxahNvuryGaC/o2/ceD2uYDX9U8Eg5Dp IpGQdcbQeGarV04WgAUjjXX5r/2dabmtxWMZwhZna//jdiSyrrSMTGKkDiXm6/3/4ebfeZuC YKzN2P8O2F/Xe2AC/Y7zeEsnR7FOp+uXAgMBAAGjggGtMIIBqTAPBgNVHRMBAf8EBTADAQH/ MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUU3Ltkpzg2ssBXHx+ljVO8tS4UYIwHwYDVR0j BBgwFoAUTgvvGqRAW6UXaYcwyjRoQ9BBrvIwZgYIKwYBBQUHAQEEWjBYMCcGCCsGAQUFBzAB hhtodHRwOi8vb2NzcC5zdGFydHNzbC5jb20vY2EwLQYIKwYBBQUHMAKGIWh0dHA6Ly93d3cu c3RhcnRzc2wuY29tL3Nmc2NhLmNydDBbBgNVHR8EVDBSMCegJaAjhiFodHRwOi8vd3d3LnN0 YXJ0c3NsLmNvbS9zZnNjYS5jcmwwJ6AloCOGIWh0dHA6Ly9jcmwuc3RhcnRzc2wuY29tL3Nm c2NhLmNybDCBgAYDVR0gBHkwdzB1BgsrBgEEAYG1NwECATBmMC4GCCsGAQUFBwIBFiJodHRw Oi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRmMDQGCCsGAQUFBwIBFihodHRwOi8vd3d3 LnN0YXJ0c3NsLmNvbS9pbnRlcm1lZGlhdGUucGRmMA0GCSqGSIb3DQEBBQUAA4ICAQAKgwh9 eKssBly4Y4xerhy5I3dNoXHYfYa8PlVLL/qtXnkFgdtY1o95CfegFJTwqBBmf8pyTUnFsukD FUI22zF5bVHzuJ+GxhnSqN2sD1qetbYwBYK2iyYA5Pg7Er1A+hKMIzEzcduRkIMmCeUTyMyi kfbUFvIBivtvkR8ZFAk22BZy+pJfAoedO61HTz4qSfQoCRcLN5A0t4DkuVhTMXIzuQ8Cnykh ExD6x4e6ebIbrjZLb7L+ocR0y4YjCl/Pd4MXU91y0vTipgr/O75CDUHDRHCCKBVmz/Rzkc/b 970MEeHt5LC3NiWTgBSvrLEuVzBKM586YoRD9Dy3OHQgWI270g+5MYA8GfgI/EPT5G7xPbCD z+zjdH89PeR3U4So4lSXur6H6vp+m9TQXPF3a0LwZrp8MQ+Z77U1uL7TelWO5lApsbAonrqA SfTpaprFVkL4nyGH+NHST2ZJPWIBk81i6Vw0ny0qZW2Niy/QvVNKbb43A43ny076khXO7cNb BIRdJ/6qQNq9Bqb5C0Q5nEsFcj75oxQRqlKf6TcvGbjxkJh8BYtv9ePsXklAxtm8J7GCUBth HSQgepbkOexhJ0wP8imUkyiPHQ0GvEnd83129fZjoEhdGwXV27ioRKbj/cIq7JRXun0NbeY+ UdMYu9jGfIpDLtUUGSgsg2zMGs5R4jGCA90wggPZAgEBMIGUMIGMMQswCQYDVQQGEwJJTDEW MBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlm aWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVy bWVkaWF0ZSBDbGllbnQgQ0ECAwiRTjAJBgUrDgMCGgUAoIICHTAYBgkqhkiG9w0BCQMxCwYJ KoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNDEwMjcxNjU5MTRaMCMGCSqGSIb3DQEJBDEW BBSKTiB/d+mMYrXf5kR1E7B4XlR3xzBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjAL BglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFA MAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGlBgkrBgEEAYI3EAQxgZcwgZQwgYwxCzAJBgNV BAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRh bCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1h cnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQQIDCJFOMIGnBgsqhkiG9w0BCRACCzGBl6CBlDCB jDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3Vy ZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNz IDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgMIkU4wDQYJKoZIhvcNAQEBBQAE ggEAfoEWQlJ97iR05JKdIAa+fDvj/R52hHrPZwENgXb9EtJ8rMxZDc4BxsxZr0VSX0LN6EvE Y8du/hX4VXXr8XhF1MHK59ur7bKnbHyy04t1cDfMPL1FEPXCQ/AqLg8UzqPnCca8ubXSckl3 WuNb2WaY7MBOhDIBWVH2YyfRu+k+pndaAncSBJct5JIwLk2xeBHOuxcpRhaBTSceri9XqwkR uo9WULlzRsiCnjtehLvZvEHo+YFZIAeVdQSaNrPKVIz/tYzJLzMyLs/8jYruTQll/1drznUH bWAR1BTNAjjmgcFnfqgcWlDxv+F8sGD47qouzEVYQCdK7xqh0O5gQEqb0QAAAAAAAA== --------------ms070300000403010807060506-- From nobody Mon Oct 27 10:08:32 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B8DC1A0145 for ; Mon, 27 Oct 2014 10:08:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.901 X-Spam-Level: X-Spam-Status: No, score=-3.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dZXv8BXalqf5 for ; Mon, 27 Oct 2014 10:08:09 -0700 (PDT) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0BC151A1F70 for ; Mon, 27 Oct 2014 10:07:57 -0700 (PDT) X-AuditID: c1b4fb2d-f79fc6d000001087-c2-544e7beb99c9 Received: from ESESSHC001.ericsson.se (Unknown_Domain [153.88.253.124]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id 5B.74.04231.BEB7E445; Mon, 27 Oct 2014 18:07:55 +0100 (CET) Received: from ESESSMB303.ericsson.se ([169.254.3.115]) by ESESSHC001.ericsson.se ([153.88.183.21]) with mapi id 14.03.0174.001; Mon, 27 Oct 2014 18:07:55 +0100 From: =?iso-8859-1?Q?G=F6ran_Selander?= To: "ace@ietf.org" Thread-Topic: New Version Notification for draft-selander-ace-object-security-00.txt Thread-Index: AQHP8gPUxIg8OZMBVkq2y2ZwSnGC2ZxELRAA Date: Mon, 27 Oct 2014 17:07:54 +0000 Message-ID: References: <20141027163403.19156.47977.idtracker@ietfa.amsl.com> In-Reply-To: <20141027163403.19156.47977.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.4.140807 x-originating-ip: [153.88.183.18] Content-Type: text/plain; charset="iso-8859-1" Content-ID: <916B51BE38340B44927C2AE4D8EDAF71@ericsson.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprAIsWRmVeSWpSXmKPExsUyM+Jvje7rar8Qg4mfbCy+f+thtnjVeofZ gcljyZKfTB69x36zBTBFcdmkpOZklqUW6dslcGX8+nWbsWCaUMXNk2uZGxjP8XUxcnJICJhI XPx5nh3CFpO4cG89WxcjF4eQwBFGiZnbzjJCOEsYJc5t/8gGUsUm4Cpx4ME7pi5GDg4RAUWJ 648SQcLMAr4S/xfPYgcJCwuESsxaaQoSFhEIk7j2+i8jhG0ksanrNBOIzSKgKrH0QSfYRF4B C4lN/5ezgthCAo4S86fvAYtzCjhJzHi4iRnEZgS67fupNUwQq8Qlbj2ZzwRxs4DEkj3nmSFs UYmXj/+BzREV0JN4tmEz1F+KEh9f7WOE6NWTuDF1ChuEbS3x/fQxqLi2xLKFr5kh7hGUODnz CcsERolZSNbNQtI+C0n7LCTts5C0L2BkXcUoWpxaXJybbmSsl1qUmVxcnJ+nl5dasokRGIUH t/zW3cG4+rXjIUYBDkYlHt4PNb4hQqyJZcWVuYcYpTlYlMR5F52bFywkkJ5YkpqdmlqQWhRf VJqTWnyIkYmDU6qBcZbR3VWuN9XXfi25cT7X//TS2vcpQXeW20/ouNOUd5qPSUavKC9bkFcq +aSoYXHE5Mii3NNTfnidVb3zfrPYVLXL9t7hOjzJF6vj2bV/7TrS+CrDelbapg9OrvWvZaNf /3M/H9WaXeC/40Tk9AjW1wt84woaW4ruHpls+uLvLGundW3HXkafVWIpzkg01GIuKk4EADlz y/ajAgAA Archived-At: http://mailarchive.ietf.org/arch/msg/ace/7DzTl0Q7Ue4b7OrtezHrFSNS3jc Cc: Ludwig Seitz , John Mattsson Subject: [Ace] FW: New Version Notification for draft-selander-ace-object-security-00.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Oct 2014 17:08:17 -0000 Hi all, Although we are still collecting use cases, we would like in parallel to start discussing object security for CoAP. We have submitted a new draft on the topic. The draft presents one method to integrity protect individual CoAP requests and responses by including a JWS detached signature as a new CoAP option (called the "JWS option"). This provides end-to-end security of payload, request method and other data, e.g. in store-and-forward use cases where DTLS is not sufficient. As is noted in the JWS draft, a unique message identifier is required for replay protection, and for this purpose we introduce sequence numbers in the JOSE header of the JWS option. We elaborate on how this can work together with proxy caching and CoAP Observe. This first version of our draft is focusing on integrity protection, we plan to cover encryption in later version. The JWS option can be used in conjunction with hop-by-hop DTLS/TLS. The draft may be interesting also in the of context of secure multicast, securing CoAP over SMS, and CoAP endpoint identification (cf. key identifiers). We would like to present this in the ACE slot in Hawaii. Thanks, G=F6ran On 27/10/14 17:34, "internet-drafts@ietf.org" wrote: > >A new version of I-D, draft-selander-ace-object-security-00.txt >has been successfully submitted by Ludwig Seitz and posted to the >IETF repository. > >Name: draft-selander-ace-object-security >Revision: 00 >Title: October 27, 2014 >Document date: 2014-10-27 >Group: Individual Submission >Pages: 26 >URL: =20 >http://www.ietf.org/internet-drafts/draft-selander-ace-object-security-00. >txt >Status: =20 >https://datatracker.ietf.org/doc/draft-selander-ace-object-security/ >Htmlized: =20 >http://tools.ietf.org/html/draft-selander-ace-object-security-00 > > >Abstract: > We present a format for data object security in Constrained > Application Protocol CoAP, i.e. protection of individual request and > response messages between client and server. > > =20 > =20 > > >Please note that it may take a couple of minutes from the time of >submission >until the htmlized version and diff are available at tools.ietf.org. > >The IETF Secretariat > From nobody Mon Oct 27 23:40:28 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B18381A0252 for ; Mon, 27 Oct 2014 23:40:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LUuFgjTA96qe for ; Mon, 27 Oct 2014 23:40:26 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 587B31A01F0 for ; Mon, 27 Oct 2014 23:40:25 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml405-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BOC79319; Tue, 28 Oct 2014 06:37:11 +0000 (GMT) Received: from SZXEMA404-HUB.china.huawei.com (10.82.72.36) by lhreml405-hub.china.huawei.com (10.201.5.242) with Microsoft SMTP Server (TLS) id 14.3.158.1; Tue, 28 Oct 2014 06:36:49 +0000 Received: from SZXEMA510-MBX.china.huawei.com ([169.254.3.131]) by SZXEMA404-HUB.china.huawei.com ([10.82.72.36]) with mapi id 14.03.0158.001; Tue, 28 Oct 2014 14:36:37 +0800 From: Bert Greevenbosch To: "Ace@ietf.org" Thread-Topic: Submission of ACE comparison draft Thread-Index: Ac/yeYU71CpSHOg/RoKHZmzfjlTb2Q== Date: Tue, 28 Oct 2014 06:36:36 +0000 Message-ID: <46A1DF3F04371240B504290A071B4DB63E7A4F24@SZXEMA510-MBX.china.huawei.com> Accept-Language: en-GB, zh-CN, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.63.174.121] Content-Type: multipart/alternative; boundary="_000_46A1DF3F04371240B504290A071B4DB63E7A4F24SZXEMA510MBXchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/ace/ZEljFFcZegdfXUk1R2OpBXO2nwo Cc: Hannes Tschofenig , Likepeng Subject: [Ace] Submission of ACE comparison draft X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Oct 2014 06:40:28 -0000 --_000_46A1DF3F04371240B504290A071B4DB63E7A4F24SZXEMA510MBXchi_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello all, I have submitted the following draft for ACE: http://datatracker.ietf.org/doc/draft-greevenbosch-ace-comparison/ The document compares the currently proposed solutions for ACE. It highligh= ts both the similarities and the differences. Also, it discusses various po= ssible architectural models. I hope that this will help in the decision making process about which direc= tion ACE should go. I look forward to your comments, certainly also from the authors of the doc= uments that are discussed in this draft. @Hannes, Kepeng: can I have a time-slot to discuss this draft in Honolulu? = Thanks! Best regards, Bert --_000_46A1DF3F04371240B504290A071B4DB63E7A4F24SZXEMA510MBXchi_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hello all,

 

I have submitted the following draft for ACE:

http://datatracker.ietf.org/doc/draft-greevenbos= ch-ace-comparison/

 

The document compares the currently proposed solutio= ns for ACE. It highlights both the similarities and the differences. Also, = it discusses various possible architectural models.

 

I hope that this will help in the decision making pr= ocess about which direction ACE should go.

 

I look forward to your comments, certainly also from= the authors of the documents that are discussed in this draft.<= /p>

 

@Hannes, Kepeng: can I have a time-slot to discuss t= his draft in Honolulu? Thanks!

 

Best regards,

Bert

--_000_46A1DF3F04371240B504290A071B4DB63E7A4F24SZXEMA510MBXchi_-- From nobody Tue Oct 28 12:40:28 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF94F1A6F99 for ; Tue, 28 Oct 2014 12:40:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.55 X-Spam-Level: X-Spam-Status: No, score=-1.55 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iT5y1JK5x7LN for ; Tue, 28 Oct 2014 12:40:26 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AA4A81AC422 for ; Tue, 28 Oct 2014 12:40:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from smtp-fb3.informatik.uni-bremen.de (smtp-fb3.informatik.uni-bremen.de [134.102.224.120]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id s9SJeKYC014558 for ; Tue, 28 Oct 2014 20:40:20 +0100 (CET) Received: from [192.168.1.146] (pD9F61101.dip0.t-ipconnect.de [217.246.17.1]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by smtp-fb3.informatik.uni-bremen.de (Postfix) with ESMTPSA id A937BCD8 for ; Tue, 28 Oct 2014 20:40:20 +0100 (CET) Message-ID: <544FF11A.5050907@tzi.de> Date: Tue, 28 Oct 2014 20:40:10 +0100 From: Stefanie Gerdes User-Agent: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.2.0 MIME-Version: 1.0 To: "ace@ietf.org" References: <20141027214258.19769.21416.idtracker@ietfa.amsl.com> In-Reply-To: <20141027214258.19769.21416.idtracker@ietfa.amsl.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Archived-At: http://mailarchive.ietf.org/arch/msg/ace/yiIbxvwt1NyPhegJiKbj_19k-pw Subject: [Ace] Fwd: New Version Notification for draft-gerdes-ace-actors-02.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Oct 2014 19:40:27 -0000 Hi all, I submitted a new version of the actors draft. The main changes are about terminology. I added some considerations on authentication, authorization and security objectives. Comments are very welcome! A PDF version with more detailed graphics can be found at http://tools.ietf.org/pdf/draft-gerdes-ace-actors-02.pdf Best regards, Steffi -------- Original Message -------- Subject: New Version Notification for draft-gerdes-ace-actors-02.txt Date: Mon, 27 Oct 2014 14:42:58 -0700 From: internet-drafts@ietf.org To: Stefanie Gerdes , Stefanie Gerdes A new version of I-D, draft-gerdes-ace-actors-02.txt has been successfully submitted by Stefanie Gerdes and posted to the IETF repository. Name: draft-gerdes-ace-actors Revision: 02 Title: Actors in the ACE Architecture Document date: 2014-10-27 Group: Individual Submission Pages: 26 URL: http://www.ietf.org/internet-drafts/draft-gerdes-ace-actors-02.txt Status: https://datatracker.ietf.org/doc/draft-gerdes-ace-actors/ Htmlized: http://tools.ietf.org/html/draft-gerdes-ace-actors-02 Diff: http://www.ietf.org/rfcdiff?url2=draft-gerdes-ace-actors-02 Abstract: Constrained nodes are small devices which are limited in terms of processing power, memory, non-volatile storage and transmission capacity. Due to these constraints, commonly used security protocols are not easily applicable. Nevertheless, an authentication and authorization solution is needed to ensure the security of these devices. Due to the limitations of the constrained nodes it is especially important to develop a light-weight security solution which is adjusted to the relevant security objectives of each participating party in this environment. Necessary security measures must be identified and applied where needed. In this document, the required security related tasks are identified as guidance for the development of authentication and authorization solutions for constrained environments. Based on the tasks, an architecture is developed to represent the relationships between the logical functional entities involved. Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat From nobody Tue Oct 28 19:00:42 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 868C71A3B9F for ; Tue, 28 Oct 2014 19:00:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x9bNjlNqVELU for ; Tue, 28 Oct 2014 19:00:40 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8625B1A3BA2 for ; Tue, 28 Oct 2014 19:00:39 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml403-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BOD73462; Wed, 29 Oct 2014 02:00:37 +0000 (GMT) Received: from SZXEMA405-HUB.china.huawei.com (10.82.72.37) by lhreml403-hub.china.huawei.com (10.201.5.217) with Microsoft SMTP Server (TLS) id 14.3.158.1; Wed, 29 Oct 2014 02:00:36 +0000 Received: from SZXEMA510-MBX.china.huawei.com ([169.254.3.131]) by SZXEMA405-HUB.china.huawei.com ([10.82.72.37]) with mapi id 14.03.0158.001; Wed, 29 Oct 2014 10:00:30 +0800 From: Bert Greevenbosch To: "Ace@ietf.org" Thread-Topic: Upload of draft for "Pull Model" Thread-Index: Ac/zHByFNu8lqvUOT/6DrBovs1PuHw== Date: Wed, 29 Oct 2014 02:00:29 +0000 Message-ID: <46A1DF3F04371240B504290A071B4DB63E7A6319@SZXEMA510-MBX.china.huawei.com> Accept-Language: en-GB, zh-CN, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.63.174.121] Content-Type: multipart/alternative; boundary="_000_46A1DF3F04371240B504290A071B4DB63E7A6319SZXEMA510MBXchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/ace/hrbKHBND3pRCL4ICLX28Y5n-64w Subject: [Ace] Upload of draft for "Pull Model" X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Oct 2014 02:00:41 -0000 --_000_46A1DF3F04371240B504290A071B4DB63E7A6319SZXEMA510MBXchi_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi all, Monday I uploaded a draft for the "Pull Model". http://datatracker.ietf.org/doc/draft-greevenbosch-ace-pull-model/ The draft describes an ACE solution, where the resource server directly con= tacts the authorisation server to verify access rights of the client. The idea is to keep the client separated from the authorisation process, as= it may be unable to access the AS directly, or it may not want to process = access permissions. I look forward to your comments. Best regards, Bert --_000_46A1DF3F04371240B504290A071B4DB63E7A6319SZXEMA510MBXchi_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi all,

 

Monday I uploaded a draft for the "Pull Model&q= uot;.

 

http://datatracker.ietf.org/doc/draft-greevenbos= ch-ace-pull-model/

 

The draft describes an ACE solution, where the resou= rce server directly contacts the authorisation server to verify access righ= ts of the client.

 

The idea is to keep the client separated from the au= thorisation process, as it may be unable to access the AS directly, or it m= ay not want to process access permissions.

 

I look forward to your comments.

 

Best regards,

Bert

--_000_46A1DF3F04371240B504290A071B4DB63E7A6319SZXEMA510MBXchi_-- From nobody Tue Oct 28 19:03:50 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C9F441A3BA3 for ; Tue, 28 Oct 2014 19:03:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DTbV2RgArtWl for ; Tue, 28 Oct 2014 19:03:46 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 21D841A3B9E for ; Tue, 28 Oct 2014 19:03:45 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml402-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BLA81456; Wed, 29 Oct 2014 02:03:44 +0000 (GMT) Received: from SZXEMA407-HUB.china.huawei.com (10.82.72.39) by lhreml402-hub.china.huawei.com (10.201.5.241) with Microsoft SMTP Server (TLS) id 14.3.158.1; Wed, 29 Oct 2014 02:03:43 +0000 Received: from SZXEMA510-MBX.china.huawei.com ([169.254.3.131]) by SZXEMA407-HUB.china.huawei.com ([10.82.72.39]) with mapi id 14.03.0158.001; Wed, 29 Oct 2014 10:03:38 +0800 From: Bert Greevenbosch To: "Ace@ietf.org" Thread-Topic: Upload of ACE for Resource Directory draft Thread-Index: Ac/zHIzX0LvhWse8S1CH2PXt7v4lYg== Date: Wed, 29 Oct 2014 02:03:37 +0000 Message-ID: <46A1DF3F04371240B504290A071B4DB63E7A6329@SZXEMA510-MBX.china.huawei.com> Accept-Language: en-GB, zh-CN, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.63.174.121] Content-Type: multipart/alternative; boundary="_000_46A1DF3F04371240B504290A071B4DB63E7A6329SZXEMA510MBXchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/ace/k19orIYkRSVt_BCb3TnOxv4xl6g Subject: [Ace] Upload of ACE for Resource Directory draft X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Oct 2014 02:03:49 -0000 --_000_46A1DF3F04371240B504290A071B4DB63E7A6329SZXEMA510MBXchi_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi all, On Monday, I uploaded a draft that applies ACE to the Resource Directory. http://datatracker.ietf.org/doc/draft-greevenbosch-ace-resource-directory/ Since the Resource Directory is implemented as a CoAP client, ideally we ca= n use standard ACE to protect it. The draft's aim is to describe how to do = this. However, since the ACE architecture is not yet chosen, the draft currently = remains fairly high level, and mainly describes issues and related requirem= ents for a solution to be described later. The draft is informative, as its goal is not to specify new technology, but= rather to describe how ACE can be used for protection of the RD. I also th= ink it is a good opportunity to see how ACE works in a practical situation. Comments are welcome. Best regards, Bert --_000_46A1DF3F04371240B504290A071B4DB63E7A6329SZXEMA510MBXchi_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi all,

 

On Monday, I uploaded a draft that applies ACE to th= e Resource Directory.

 

http://datatracker.ietf.org/doc/draft-gr= eevenbosch-ace-resource-directory/

 

Since the Resource Directory is implemented as a CoA= P client, ideally we can use standard ACE to protect it. The draft's aim is= to describe how to do this.

 

However, since the ACE architecture is not yet chose= n, the draft currently remains fairly high level, and mainly describes issu= es and related requirements for a solution to be described later.

 

The draft is informative, as its goal is not to spec= ify new technology, but rather to describe how ACE can be used for protecti= on of the RD. I also think it is a good opportunity to see how ACE works in= a practical situation.

 

Comments are welcome.

 

Best regards,

Bert

--_000_46A1DF3F04371240B504290A071B4DB63E7A6329SZXEMA510MBXchi_-- From nobody Tue Oct 28 19:25:32 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B4261A1BA5 for ; Tue, 28 Oct 2014 19:25:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jtaD2sNARdL0 for ; Tue, 28 Oct 2014 19:25:29 -0700 (PDT) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 666EF1A1B58 for ; Tue, 28 Oct 2014 19:25:29 -0700 (PDT) Received: from 172.18.7.190 (EHLO lhreml404-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id BOD74852; Wed, 29 Oct 2014 02:25:28 +0000 (GMT) Received: from SZXEMA404-HUB.china.huawei.com (10.82.72.36) by lhreml404-hub.china.huawei.com (10.201.5.218) with Microsoft SMTP Server (TLS) id 14.3.158.1; Wed, 29 Oct 2014 02:25:27 +0000 Received: from SZXEMA510-MBX.china.huawei.com ([169.254.3.131]) by SZXEMA404-HUB.china.huawei.com ([10.82.72.36]) with mapi id 14.03.0158.001; Wed, 29 Oct 2014 10:25:23 +0800 From: Bert Greevenbosch To: "Ace@ietf.org" Thread-Topic: Upload of ACE for Resource Directory draft (correction) Thread-Index: AQHP8x+XE891CvtUKU++M9ZJMMszwg== Date: Wed, 29 Oct 2014 02:25:23 +0000 Message-ID: <46A1DF3F04371240B504290A071B4DB63E7A63DF@SZXEMA510-MBX.china.huawei.com> Accept-Language: en-GB, zh-CN, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.63.174.121] Content-Type: multipart/alternative; boundary="_000_46A1DF3F04371240B504290A071B4DB63E7A63DFSZXEMA510MBXchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected Archived-At: http://mailarchive.ietf.org/arch/msg/ace/ebeMJQQmiBKeJagStoh7kfMvfeM Subject: [Ace] Upload of ACE for Resource Directory draft (correction) X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Oct 2014 02:25:31 -0000 --_000_46A1DF3F04371240B504290A071B4DB63E7A63DFSZXEMA510MBXchi_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable I made a typo in the previous e-mail: the RD is implemented as a CoAP serve= r, not a CoAP client. --- Hi all, On Monday, I uploaded a draft that applies ACE to the Resource Directory. http://datatracker.ietf.org/doc/draft-greevenbosch-ace-resource-directory/ Since the Resource Directory is implemented as a CoAP server, ideally we ca= n use standard ACE to protect it. The draft's aim is to describe how to do = this. However, since the ACE architecture is not yet chosen, the draft currently = remains fairly high level, and mainly describes issues and related requirem= ents for a solution to be described later. The draft is informative, as its goal is not to specify new technology, but= rather to describe how ACE can be used for protection of the RD. I also th= ink it is a good opportunity to see how ACE works in a practical situation. Comments are welcome. Best regards, Bert --_000_46A1DF3F04371240B504290A071B4DB63E7A63DFSZXEMA510MBXchi_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

I made a typo in the previous e-mail: the RD is impl= emented as a CoAP server, not a CoAP client.

---

Hi all,

 

On Monday, I uploaded a draft that applies ACE to th= e Resource Directory.

 

http://datatracker.ietf.org/doc/draft-gr= eevenbosch-ace-resource-directory/

 

Since the Resource Directory is implemented as a CoA= P server, ideally we can use standard ACE to protect it. The draft's aim is= to describe how to do this.

 

However, since the ACE architecture is not yet chose= n, the draft currently remains fairly high level, and mainly describes issu= es and related requirements for a solution to be described later.

 

The draft is informative, as its goal is not to spec= ify new technology, but rather to describe how ACE can be used for protecti= on of the RD. I also think it is a good opportunity to see how ACE works in= a practical situation.

 

Comments are welcome.

 

Best regards,

Bert

--_000_46A1DF3F04371240B504290A071B4DB63E7A63DFSZXEMA510MBXchi_-- From nobody Wed Oct 29 08:42:00 2014 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 36F9A1A00F7; Wed, 29 Oct 2014 08:41:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.311 X-Spam-Level: X-Spam-Status: No, score=-2.311 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OiJERUHMcFNK; Wed, 29 Oct 2014 08:41:54 -0700 (PDT) Received: from inkolg01.tcs.com (inkolg01.tcs.com [121.241.215.10]) by ietfa.amsl.com (Postfix) with ESMTP id F26D11A03AA; Wed, 29 Oct 2014 08:41:01 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AqoFAJIHUVSsEhcE/2dsb2JhbABcg2JYvVqOU4FmAQSBWYV5AoExAQEBAQFyC4QCAQEBBAEBAQJjBgkCEAsHBgQDAQIGAQELBAEQBwIVEB8IAQgGCwgJEogzsVYBAZVxAQEBAQEBAQEBAQEBAQEBAQEBAQEBF4VZYol6OQoNBAcGDAGDGoEeBYsqPIctgQqBUAFnhDeEDTyDDQWTbYFMZAEBAQGBBAeBPAEBAQ X-IPAS-Result: AqoFAJIHUVSsEhcE/2dsb2JhbABcg2JYvVqOU4FmAQSBWYV5AoExAQEBAQFyC4QCAQEBBAEBAQJjBgkCEAsHBgQDAQIGAQELBAEQBwIVEB8IAQgGCwgJEogzsVYBAZVxAQEBAQEBAQEBAQEBAQEBAQEBAQEBF4VZYol6OQoNBAcGDAGDGoEeBYsqPIctgQqBUAFnhDeEDTyDDQWTbYFMZAEBAQGBBAeBPAEBAQ X-IronPort-AV: E=Sophos;i="5.04,810,1406572200"; d="jpg'145?scan'145,208,145,150";a="604898846" Received: from INKOLSALDLPMTA1.india.tcs.com (unknown [127.0.0.1]) by INKOLSALDLPMTA1.india.tcs.com (Service) with ESMTP id E6AE7DAC12; Wed, 29 Oct 2014 21:10:57 +0530 (IST) Received: from InKolM02.tcs.com (unknown [172.18.18.104]) by INKOLSALDLPMTA1.india.tcs.com (Service) with ESMTP id 8CDE2DAC02; Wed, 29 Oct 2014 21:10:57 +0530 (IST) In-Reply-To: References: <20141027163403.19156.47977.idtracker@ietfa.amsl.com> To: "ace@ietf.org" MIME-Version: 1.0 X-KeepSent: 6BC21082:26F86456-65257D80:0026BCD7; type=4; name=$KeepSent X-Mailer: IBM Notes Release 9.0 March 08, 2013 Message-ID: From: Abhijan Bhattacharyya Date: Wed, 29 Oct 2014 21:10:52 +0530 X-MIMETrack: Serialize by Notes Server on InKolM02/TCS(Release 9.0.1HF198 | January 23, 2014) at 10/29/2014 21:10:56, Serialize complete at 10/29/2014 21:10:56, Serialize by Router on InKolM02/TCS(Release 9.0.1HF198 | January 23, 2014) at 10/29/2014 21:10:56 Content-Type: multipart/mixed; boundary="=_mixed 0056238265257D80_=" Archived-At: http://mailarchive.ietf.org/arch/msg/ace/NhHfrPvMuExYP9_uuvoJQxPOSKc Cc: Soma Bandyopadhyay , Arpan Pal , Ace Subject: Re: [Ace] FW: New Version Notification for draft-selander-ace-object-security-00.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Oct 2014 15:41:59 -0000 --=_mixed 0056238265257D80_= Content-Type: multipart/alternative; boundary="=_alternative 0056238365257D80_=" --=_alternative 0056238365257D80_= MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi All, Would just like to take this opportunity to share some progress we have = made regarding object security based on CoAP. During London meeting (IETF 89) we submitted a draft describing a work in = progress on providing inherent capability in CoAP to mutually authenticate = the endpoints and agreeing on a session key. At present the scheme is = conceived for systems where provisioning pre-shared secret is possible. = The session-key generated in the process can be used for object security = for CoAP payloads. The draft is available at: = https://tools.ietf.org/html/draft-bhattacharyya-core-coap-lite-auth-00. = The work has also been published : = http://dl.acm.org/citation.cfm?id=3D2523504 http://ieeexplore.ieee.org/xpl/login.jsp?tp=3D&arnumber=3D6815204&url=3Dhtt= p%3A%2F%2Fieeexplore.ieee.org%2Fxpls%2Fabs_all.jsp%3Farnumber%3D6815204 = = Recently we have extended the work and created a scheme which we name = "LESS (Lightweight Establishment of Secure Session) on CoAP". The proposed = scheme models the full exchange as just two pairs of CoAP request/response = and generates the key-pair (server-write-key, client-write-key) similar to = DTLS. The scheme uses AES-CCM-8 encryption algorithm as proposed in sepc. = The generated key-pair can be used to exchange CoAP payloads in a secure = manner. Further, we take a cross-layer approach to provide optional channl seurity = to the full application layer message (CoAP header + payload). The = resultant of the session establishment process over CoAP is used to create = the session tuple {server-write-key, client-write-key, server-IV, = client-IV}. (Ofcourse, IV generation is not same as proposed in DTLS).The = session tuple is used to populate a structure same as the DTLS-PSK session = structure without any modification. Once that is done, the control = switches to transport layer and uses same DTLS-record-encryption technique = to provide channel security to the full CoAP message. Unfortunately, we could not publish the work as a draft as the work is = under review in an international conference though I am attending IETF91. = We may submit the full work as a draft before the next meeting. However, we are sharing some comparative results that we achieved over a = controlled emulated WAN. The results show that LESS is quite lightweight. It will be really great to hear whether our approach makes sense and, most = importantly, whether the problem we are trying to address does have some = relevance. = Regards Abhijan Bhattacharyya Associate Consultant Scientist, Innovation Lab, Kolkata, India Tata Consultancy Services Mailto: abhijan.bhattacharyya@tcs.com Website: http://www.tcs.com ____________________________________________ Experience certainty. IT Services Business Solutions Consulting ____________________________________________ From: G=F6ran Selander To: "ace@ietf.org" Cc: Ludwig Seitz , John Mattsson = Date: 10/27/2014 10:38 PM Subject: [Ace] FW: New Version Notification for = draft-selander-ace-object-security-00.txt Sent by: "Ace" Hi all, Although we are still collecting use cases, we would like in parallel to start discussing object security for CoAP. We have submitted a new draft on the topic. The draft presents one method to integrity protect individual CoAP requests and responses by including a JWS detached signature as a new CoAP option (called the "JWS option"). This provides end-to-end security of payload, request method and other data, e.g. in store-and-forward use cases where DTLS is not sufficient. As is noted in the JWS draft, a unique message identifier is required for replay protection, and for this purpose we introduce sequence numbers in the JOSE header of the JWS option. We elaborate on how this can work together with proxy caching and CoAP Observe. This first version of our draft is focusing on integrity protection, we plan to cover encryption in later version. The JWS option can be used in conjunction with hop-by-hop DTLS/TLS. The draft may be interesting also in the of context of secure multicast, securing CoAP over SMS, and CoAP endpoint identification (cf. key identifiers). We would like to present this in the ACE slot in Hawaii. Thanks, G=F6ran On 27/10/14 17:34, "internet-drafts@ietf.org" wrote: > >A new version of I-D, draft-selander-ace-object-security-00.txt >has been successfully submitted by Ludwig Seitz and posted to the >IETF repository. > >Name: draft-selander-ace-object-security >Revision: 00 >Title: October 27, 2014 >Document date: 2014-10-27 >Group: Individual Submission >Pages: 26 >URL: = >http://www.ietf.org/internet-drafts/draft-selander-ace-object-security-00 . >txt >Status: = >https://datatracker.ietf.org/doc/draft-selander-ace-object-security/ >Htmlized: = >http://tools.ietf.org/html/draft-selander-ace-object-security-00 > > >Abstract: > We present a format for data object security in Constrained > Application Protocol CoAP, i.e. protection of individual request and > response messages between client and server. > > = > = > > >Please note that it may take a couple of minutes from the time of >submission >until the htmlized version and diff are available at tools.ietf.org. > >The IETF Secretariat > _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace =3D=3D=3D=3D=3D-----=3D=3D=3D=3D=3D-----=3D=3D=3D=3D=3D Notice: The information contained in this e-mail message and/or attachments to it may contain = confidential or privileged information. If you are = not the intended recipient, any dissemination, use, = review, distribution, printing or copying of the = information contained in this e-mail message = and/or attachments to it are strictly prohibited. If = you have received this communication in error, = please notify us by reply e-mail or telephone and = immediately and permanently delete the message = and any attachments. Thank you --=_alternative 0056238365257D80_= MIME-Version: 1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi All,
Would just like to take this opportu= nity to share some progress we have made regarding object security based on CoAP.
During London meeting (IETF 89) we submitted a draft describing a work in progress on providing inherent capability in CoAP to mutually authentica= te the endpoints and agreeing on a session key. At present the scheme is conce= ived for systems where provisioning pre-shared secret is possible. The session-k= ey generated in the process can be used for object security for CoAP payloads.=
The draft is available at: https://tools.ietf.or= g/html/draft-bhattacharyya-core-coap-lite-auth-00.
The work has also been published : <= /font>
http://dl.acm.org/citation.cfm?id=3D252350= 4
http:= //ieeexplore.ieee.org/xpl/login.jsp?tp=3D&arnumber=3D6815204&url=3D= http%3A%2F%2Fieeexplore.ieee.org%2Fxpls%2Fabs_all.jsp%3Farnumber%3D6815204<= /font>  

Recently we have extended the work a= nd created a scheme which we name "LESS (Lightweight Establishment of Secure Session) on CoAP". The proposed scheme models the full exchange as just two pairs of CoAP request/response and generates the key-pair (serv= er-write-key, client-write-key) similar to DTLS. The scheme uses AES-CCM-8 encryption algorithm as proposed in sepc. The generated key-pair can be used to exchan= ge CoAP payloads in a secure manner.

Further, we take a cross-layer appro= ach to provide optional channl seurity to the full application layer message (CoAP header + payload). The resultant of the session establishment process over CoAP is used to create the session tuple {server-write-key, client-wri= te-key, server-IV, client-IV}. (Ofcourse, IV generation is not same as proposed in DTLS).The session tuple is used to populate a structure same as the DTLS-PSK session structure without any modification. Once that is done, the control switches to transport layer and uses same DTLS-record-encryption technique to provide channel security to the full CoAP message.

Unfortunately, we could not publish the work as a draft as the work is under review in an international confere= nce though I am attending IETF91. We may submit the full work as a draft before the next meeting.
However, we are sharing some compara= tive results that we achieved over a controlled emulated WAN. The results show that LESS is quite lightweight.

It will be really great to hear whet= her our approach makes sense and, most importantly, whether the problem we are trying to address does have some relevance.

 

Regards
Abhijan Bhattacharyya
Associate Consultant
Scientist, Innovation Lab, Kolkata, India
Tata Consultancy Services
Mailto: abhijan.bhattacharyya@tcs.com
Website: http://www.tcs.com
____________________________________________
Experience certainty.        IT Services
                       Business Solutions
                       Consulting
____________________________________________



From:     =    G=F6ran Selander <goran.= selander@ericsson.com>
To:     &n= bsp;  "ace@ietf.org" <ace@ietf.org>
Cc:     &n= bsp;  Ludwig Seitz <ludwig@sic= s.se>, John Mattsson <john.mattsson@ericsson.com>
Date:     =    10/27/2014 10:38 PM
Subject:   &nbs= p;    [Ace] FW: New Version Notification for draft-selander-ace-object-security-00.txt
Sent by:   &nbs= p;    "Ace" <ace-bounces@ietf.org>




Hi all,

Although we are still collecting use cases, we would like in parallel to
start discussing object security for CoAP. We have submitted a new draft
on the topic.

The draft presents one method to integrity protect individual CoAP
requests and responses by including a JWS detached signature as a new CoAP<= br> option (called the "JWS option"). This provides end-to-end securi= ty of
payload, request method and other data, e.g. in store-and-forward use
cases where DTLS is not sufficient.

As is noted in the JWS draft, a unique message identifier is required for replay protection, and for this purpose we introduce sequence numbers in
the JOSE header of the JWS option. We elaborate on how this can work
together with proxy caching and CoAP Observe. This first version of our
draft is focusing on integrity protection, we plan to cover encryption in
later version. The JWS option can be used in conjunction with hop-by-hop
DTLS/TLS.

The draft may be interesting also in the of context of secure multicast,
securing CoAP over SMS, and  CoAP endpoint identification (cf. key
identifiers).

We would like to present this in the ACE slot in Hawaii.


Thanks,
G=F6ran





On 27/10/14 17:34, "internet-drafts@ietf.org" <internet-drafts= @ietf.org>
wrote:

>
>A new version of I-D, draft-selander-ace-object-security-00.txt
>has been successfully submitted by Ludwig Seitz and posted to the
>IETF repository.
>
>Name:                                  draft-selande= r-ace-object-security
>Revision:                 00
>Title:                                  October 27, 2014
>Document date:                 2014-10-27
>Group:                                  Individual Submission
>Pages:                                  26
>URL:            
>http://www.ietf.org/internet-= drafts/draft-selander-ace-object-security-00.
>txt
>Status:        
>https://datatracker.ietf.org/doc/d= raft-selander-ace-object-security/
>Htmlized:      
>http://tools.ietf.org/html/draft-selan= der-ace-object-security-00
>
>
>Abstract:
>   We present a format for data object security in Constrained
>   Application Protocol CoAP, i.e. protection of individual request and
>   response messages between client and server.
>
>                  
>        
>
>
>Please note that it may take a couple of minutes from the time of
>submission
>until the htmlized version and diff are available at tools.ietf.org.
>
>The IETF Secretariat
>

_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace

=3D=3D=3D=3D=3D-----=3D=3D=3D=3D=3D-----=3D=3D=3D=3D=3D
Notice: The information contained in this e-mail
message and/or attachments to it may contain
confidential or privileged information. If you are
not the intended recipient, any dissemination, use,
review, distribution, printing or copying of the
information contained in this e-mail message
and/or attachments to it are strictly prohibited. If
you have received this communication in error,
please notify us by reply e-mail or telephone and
immediately and permanently delete the message
and any attachments. Thank you

--=_alternative 0056238365257D80_=-- --=_mixed 0056238265257D80_= Content-Type: image/jpeg; name="plot_latency.jpg" Content-Disposition: attachment; filename="plot_latency.jpg" Content-Transfer-Encoding: base64 /9j/4AAQSkZJRgABAQEAYABgAAD/4QBaRXhpZgAATU0AKgAAAAgABQMBAAUAAAABAAAASgMDAAEA AAABAAAAAFEQAAEAAAABAQAAAFERAAQAAAABAAAOw1ESAAQAAAABAAAOwwAAAAAAAYagAACxj//b AEMAAgEBAgEBAgICAgICAgIDBQMDAwMDBgQEAwUHBgcHBwYHBwgJCwkICAoIBwcKDQoKCwwMDAwH CQ4PDQwOCwwMDP/bAEMBAgICAwMDBgMDBgwIBwgMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwM DAwMDAwMDAwMDAwMDAwMDAwMDAwMDP/AABEIAgsClwMBIgACEQEDEQH/xAAfAAABBQEBAQEBAQAA AAAAAAAAAQIDBAUGBwgJCgv/xAC1EAACAQMDAgQDBQUEBAAAAX0BAgMABBEFEiExQQYTUWEHInEU MoGRoQgjQrHBFVLR8CQzYnKCCQoWFxgZGiUmJygpKjQ1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2Rl ZmdoaWpzdHV2d3h5eoOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK 0tPU1dbX2Nna4eLj5OXm5+jp6vHy8/T19vf4+fr/xAAfAQADAQEBAQEBAQEBAAAAAAAAAQIDBAUG BwgJCgv/xAC1EQACAQIEBAMEBwUEBAABAncAAQIDEQQFITEGEkFRB2FxEyIygQgUQpGhscEJIzNS 8BVictEKFiQ04SXxFxgZGiYnKCkqNTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4 eXqCg4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2dri 4+Tl5ufo6ery8/T19vf4+fr/2gAMAwEAAhEDEQA/AP38ooooA8s/bk+JF18H/wBjL4reKbHxbaeA r/QPCep31p4kudPOow6FOlrI0d21uEczCJwr+XsfdtxsfO0/nZYftDfFT9iz4Z/EvXb7RPi38JvF dn8BNY8UWXhP4lePn+IkWva5pjRF9R0+8kvrpYI7NbmMTwN9la5+3QsLci1Zh+qXjfwRo3xM8G6r 4d8RaVp+uaBrlpJY6jp19brcWt9byKUkikjYFXRlJBUggg15d8GP2AfhX8CdS1C90jRNb1i81LRv +EcefxX4n1XxXLBpZO57CBtUubk29tIQhkhh2JKYot6t5Ue0A8o+EPhy7/ZZ/wCChXgn4baF4v8A Hfi3wx4++Gus+INYHifxVqPiKUahpt/pMMN7C95PN9mWZNSuFeKDy4WKxEINgB+vK8s/Z/8A2MPh 7+zHq93qHhPT9eGoXdlFpguda8Tapr81nZxMWjtLZ7+4nNrbBmz5MBSMkKSp2rj1OgClfarPaTlI 9NvbpQM74mhC/T5nB/Sof7euv+gJqf8A33b/APx2tOigDM/t66/6Amp/992//wAdo/t66/6Amp/9 92//AMdrTooAzP7euv8AoCan/wB92/8A8do/t66/6Amp/wDfdv8A/Ha06KAMz+3rr/oCan/33b// AB2j+3rr/oCan/33b/8Ax2tOigDM/t66/wCgJqf/AH3b/wDx2j+3rr/oCan/AN92/wD8drTooAzP 7euv+gJqf/fdv/8AHaP7euv+gJqf/fdv/wDHa06KAMz+3rr/AKAmp/8Afdv/APHaP7euv+gJqf8A 33b/APx2tOigDM/t66/6Amp/992//wAdo/t66/6Amp/992//AMdrTooAzP7euv8AoCan/wB92/8A 8do/t66/6Amp/wDfdv8A/Ha06KAMz+3rr/oCan/33b//AB2j+3rr/oCan/33b/8Ax2tOigDM/t66 /wCgJqf/AH3b/wDx2j+3rr/oCan/AN92/wD8drTooAzP7euv+gJqf/fdv/8AHaP7euv+gJqf/fdv /wDHa06KAMz+3rr/AKAmp/8Afdv/APHaP7euv+gJqf8A33b/APx2tOigDM/t66/6Amp/992//wAd o/t66/6Amp/992//AMdrTooAzP7euv8AoCan/wB92/8A8do/t66/6Amp/wDfdv8A/Ha06KAMz+3r r/oCan/33b//AB2j+3rr/oCan/33b/8Ax2tOigDM/t66/wCgJqf/AH3b/wDx2j+3rr/oCan/AN92 /wD8drTooAzP7euv+gJqf/fdv/8AHaP7euv+gJqf/fdv/wDHa06KAMz+3rr/AKAmp/8Afdv/APHa P7euv+gJqf8A33b/APx2tOigDM/t66/6Amp/992//wAdo/t66/6Amp/992//AMdrTooAzP7euv8A oCan/wB92/8A8do/t66/6Amp/wDfdv8A/Ha06KAMz+3rr/oCan/33b//AB2j+3rr/oCan/33b/8A x2tOigDM/t66/wCgJqf/AH3b/wDx2j+3rr/oCan/AN92/wD8drTooAzP7euv+gJqf/fdv/8AHaP7 euv+gJqf/fdv/wDHa06KAMz+3rr/AKAmp/8Afdv/APHaP7euv+gJqf8A33b/APx2tOigDM/t66/6 Amp/992//wAdo/t66/6Amp/992//AMdrTooAzP7euv8AoCan/wB92/8A8do/t66/6Amp/wDfdv8A /Ha06KAMz+3rr/oCan/33b//AB2j+3rr/oCan/33b/8Ax2tOigDM/t66/wCgJqf/AH3b/wDx2j+3 rr/oCan/AN92/wD8drTooAzP7euv+gJqf/fdv/8AHaP7euv+gJqf/fdv/wDHa06KAMz+3rr/AKAm p/8Afdv/APHaP7euv+gJqf8A33b/APx2tOigDM/t66/6Amp/992//wAdo/t66/6Amp/992//AMdr TooAjs7h7q2WR4JbZ2zmOQqWXnvtJHvwakoooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKAC iiigAooooAKKKKACiiigAooooAKKK+dP+Co//BRLSP8Agl1+yndfFjXvDepeKtKsdTtdOmsrC4SC 4/fsyq6lxtOGC5BI4JOcjB0pUpVJcsd/u216mdSpGEeaW3376dD6Lor8mP2KP+Ds34dftvftW+Bf hPoXwl8a6PqvjnU006C9vtRtTb2uVZmdgmWOFVsADk4GR1H3f+1x+1D4g+Anx1/Z78L6PZ6Pc6f8 WfGs/hvV5LyKR5ra3TSb69D25SRQsnmW0YJcONpYbckMKq4edNJytZ9mnt6N9yaVeE21G913TW/q l2PeKK+e/wDgpr+034v/AGUP2a7LxH4FTw2fEmreLfD/AIZt5NdsJ76xtl1LVLayeZoYZ4HkKLOW CiVMlRk4rqPhR4M+PGj+N7a48c/Ej4R+I/DaK4uLHQvhvqOi30rFCEKXM2uXaIA2CQYG3AEAqTuG JseuUV8S/s//ALT37Rn7fnwL8QfFH4Ra/wDAfwZos+pavpvhfwz4p8M6nrl9K1jPLaxtqd9a6lbL ZvPNCZGhjtJmt4pUyZnBWu1/ad/bQ+IPwvvPgH4B03w94N8J/Ff476jLpzza9qEmqaB4Ra1szd3n MX2aTUZSF8mCFHtjM8gctGqMtAH1LRXivwWT9oXwz8aLrTPiRefCXxp4CvdJW4s9f8L6TfeG9R0v UElYSWs9hc3d8s8MkTRsk8dzGyNHIrQsGRx6x4x8ZaP8O/Cepa/4g1XTdC0LRraS91DUdQuUtbSx gjUtJLLK5CRoqgksxAABJNAGlRXjfwN/b6+GH7Q3jW28N+H9U8SWGv3+nnVtP0/xL4R1jwxcavaA jfcWaala25u403JvaDeEEkZbaHXPHWf/AAV6/Z81Kye+tfGuqXmjWutN4d1HWrfwnrM2jaDqC3gs mt9Rv1tDa6ewmKc3ckQ8uSKXPlSJIwB9K0UV8o+Hf2qfip+2H8dPiL4f+CV18PPCPgn4Sa1N4T1n xX4s0S88QvruuRJC9xZ2dlbXtiIobXzCklxJcOWmzGsICGQgH1dRXinhr48eKf2fvgr4p8Q/tE3f gTQofCt+0MGv+HTdCz8R2rlPs0kWnyebcwXkjyC3WxjlunkmCiJ5TKiDd+A37YfgD9pDX9Y0bw1q OtW/iHQI4p7/AETxB4d1Lw3q9vBLnyrg2WowQXBt3KsqzCMxsyOoYsrAAHp1FfC/hT/gqT4w8R/8 FMF8DHRfCw+AWo+KtT+F+m+IVhuF1Wbxdp+mw6hPG0hl8k2p/wBNtQFi3efZuN/8NeiftS/tE/Fn T/27fhl8Gvhrq/w78NQeMvCWueJr/VfE3he81942sLiwhSGKK31GyChxeMSzM33BgcmgD6kor55/ Ya/ao8XfGTx18Yfhv8RrDw3D8Qfgn4kg0bUNR8OpPFpOvWd5ZQ6hYXsUE7SSWsjW86rLbtLOI5I2 2zSKw2/Q1ABRXlv7Rn7Rt18C9T0Gzs9Bt9bn1uK6mJm1A2aQrAYAeRFIWJM47DG081w3hz9ujVdV 8U6PYXfgvT7W31XUrXT2mh155nhM86QhwhtVDYLg43Dgda4KuZUKcpRlf3d/dk0tE90rbNPc9Cll eIqRhKNvf2TlFN6tbNp7prbU+i6K+XP2uP2jPit4f/be+D3wd+Gmq/D3w7H8QvD3iHXNQ1XxN4Zv NeaA6a+nrHFFDb6hZYD/AGt9zM7fdXA65q6X+1j8Uvg7+0vonwU+LKeBG134oWGoy/Djx94f0u7g 0bUry0tUmnsdQ0qa6kltp4gzSIEv5FuoopMPbupQd5559W0V8T+KPi3+1P4b/bb8G/Bz/hZH7P8A P/wlvhDV/Ff9r/8ACqNXX7L9gu9Pt/s/kf8ACSHf5n27dv8AMXb5WNrbsr6Nq37S3xB+Gf7bfwN+ Duv3Hg7Xl8e+E/Ems6/q2n6Nc6aWutOk08QfZYXu5/JiZbt96yPMxKqQ68ggH0lRXzt+3j+134i/ Z98WfB7wH4LtfDCeNPjb4qbw3p2reJnlGjaDHFaTXc9zLHEyPdTFIRHDaLLAZ5ZVHnR453/g9D+0 L4W+MZ0/4h3/AMJfG3gS/wBN8yHWvDOjX3hrUdJvkdswy2Vze36XMEiFCsqXETRsrAxOGDqAe1UU V+e/h39uL9pfxl+zX8Z/jTo178Eb3w98IPFniiy/4Qy48Kana6hremaFqE8csa6uNUeKC7mtbd9k hsHjWUruTZkgA/QiivjPwt+3v48/bH/aVb4f/Be9+H/gfT9I+H2hePr/AFrxppF1rd5qK6wJHtbW 0023vLLEUUUW6a6NywWSWKIQ/N5ldP8AGH9oX45/ss/sEfHXx14/0z4Zal40+GGh6vrfh3UtDjvI 9G8RwW9vLPbSXFhLK09o42qksK3UwJBZJsNtQA+paK+SPiD+3Z45+JPi/wADfCn4I6T4Z134s61p WmeIvG2s6rBNceGfhhpU6JKZr6KKaOae9ul8xLKwSaOSTDzSSRwxFn+s7RZktIluHjlnVAJHjQoj tjkhSSQCexJx6nrQBJRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUA FFFFABRRRQAUUUUAFFfNn7Vnxl8YeD/jQmj6F4ju9F0+PRLW8McFpaymSWSe6RmJmic/dhQAAgdf WvPP+GgPiR/0Pmr/APgu03/5Grz446Ur8lKTSbV/d6Np7yT3XY9GWXxjb2laMW0nZ8/VJraLWz7n 2tRXxT/w0B8SP+h81f8A8F2m/wDyNR/w0B8SP+h81f8A8F2m/wDyNVfW6v8Az4l98P8A5MX1Ol/z /h90/wD5A+1qK+Kf+GgPiR/0Pmr/APgu03/5Gr6u+CHiW88Z/BfwhrGoyifUNW0SyvLmQIEEkskC O7YAAGWJOAMCqpYxyqKlOm4tptX5ejSe0n3RFbBqNJ1YVIySaTtzaXTa+KK7M6iiiiuw4gooooAK KKKACiiigAooooAKKKKACiiigAooooAK+Jv+DgH9hvx//wAFEv8AgnZqfwx+Gtppt34n1HXdPvUF /eLaW8cUDs7szt9AAACSWHGMkfbNFa0arpy5kr7rXzVulu5lWpKpHlbts9PJ3P5yv+CU/wDwbO/t Rfsb/wDBRP4S/E7xhpfgpvDHg/XUvdRNh4gSe4WIo6FlQqu7G8EjOcA4BOAf1x/4KlDUfDvxu/ZV 8YxeG/GniDQfBHxIuNS12Tw34Z1HxBcabbPoWpW6zPb2MM0+wyzRpkIRlxX2JRV1a/PFQUUkrvS/ W3dvsTSocknJybbstbdL9ku5+fP/AAVU+Luhftr/ALFs+heG/h98XvFNtpHjbwlqWt6Rqfwg8TWr Xmmx65aSXey2u9PRrxVgSVpI4VkOwHK4PPp37KHhj9lXTPjdpk3wu/Z5/wCFf+M1inFprf8Awz1r Hg/7MhibzV/tG40m3ii3puXaZVL7toDEgH64ornNz8vvjV8Dv2Yv2j/HEnjrxt+yR8evBX7QuiXl w0LeD/Buv6XqNxrBcMt1Dr+jhNJuGebDRX11dhUB3SmEbwPXb7Q9V8Gf8E/fgd4F/ay+D2uftAyX mkQ2fjbUNO8Or4zfw9qiQqsNxcWcKyXc7FJJ42vLOOV0kjLH5ZfMH3JRQB+c/wDwTy/ZP0D4C/tl aAf2ZfB/xe+Gf7O2n+HtWHjXTfGI1/TtK1rWZ5LM2RsNM1xhdpcxpFK010kKQtGUjEjuHRfpD/gq v+z94o/ac/YW8XeEvBunwa34ha80nV7fR5riK2j11LDVbS/lsDJL+7Q3EVs8IMhVN0i7yE3V9EUU AfD/AI88aX3/AAUH/as/Zu1XwT4H+J/hrS/hR4hufGXifVvGPgzU/C39nRS6ReWSabEL+GI3VxLL dDf9mEsSJA5aVS0Qk8p0D4CeOof+DeL4+eCX8FeLU8Z6z/wsL7BoJ0i4Gp332nWtTktvKttnmyed HJG8e1TvV1K5BBr9NqKAMX4aw3Fv8OtAju0mjuo9Nt1mWUESK4iXcGB5DZznPOa+Of2dtU1n/gmZ 8ZfjN4X8b+EviHr/AMP/AIk+PNW+IvhLxT4T8Jah4oRG1J4p7zS7y20yCe6tporl5Wjkkh8mWFgB L5iMg+4KKAPh79r/AMUeLv2q/hj8Nvij4f8AhP8AEdfDvwU+K9p4vl0DVtLWy17xdo9paXltNfWe mSn7SskUl19ohtbhIbmb7J8kPmPAG5v41fFvxP47/awuv2i/h98M/ifqPh/4J/CnxFpMNtqfgrVt I1XxprN9NYz2mm2mnXUEd9NFGbTdJMIVjDTKFd9soj/QWigD8v8AxD/wRy+J/gf/AIJfabpGj/Gj 4ka38TvBwh+Jll4curDQG0m78ZQ3X9sSESx6YuolZNQaVV/0zcA6qW2DbXo/xa+HPjz9rr/goF+z Z4+0Kb4ufBzTrz4T69danqmn6DafbNBubqfR5U0u8/tOwuYIZjtkBjeJZSbdtpAVgfvmigDzD9l/ 9kzwx+yloWvRaLc63reveMNUfXPEviPXLoXWreIr9kSM3Fw6qkagIiIkMMcUESKFjjReK9PoooA8 H/bK+FXif4geIvCV94e0O41uPTLa/guVhubeF4jK1oyH99IgIPkv0JI49a8u8Kfs9/EI+OPDktz4 M1GytbPW9PvLieW/sGSKKG7ildiEuGY4VDwqkk19k0V5tbLfaOp+8klPdLlt8Kj1i3su56lDNPZq n+6i3T2b5r/E5dJJaN9j4r/bb166+Ev/AAVK/Z3+IV/4X+IWseDtD8HeL9M1HUfDPgzV/Eq2Fxcy aQbeOWPTraeSMyCGXaWUA+W3PFP1XRPEH/BQz9uj4PeNtP8ACfjTwb8JPgJeanrQ1TxXoU+hX3jH V7qwFpBDaWN0I72G2tkuLoyy3VvD5kixrEJE3SV9o0V6R5Z8yfEbwFrt9/wV++FHiaDRdWm8N6d8 LPFOn3eqpZyNY2tzNqehvFBJMBsWV0hlZUJDMInIBCnHDftt69dfCX/gqV+zv8Qr/wAL/ELWPB2h +DvF+majqPhnwZq/iVbC4uZNINvHLHp1tPJGZBDLtLKAfLbnivtSigD5J/aP/ae+GX7QHwzs7DxX 8APin8Wfhjd6itnrkeqfCPV3m0O4O37Ndf2RqFnFeXUOGm3T2MM7wMqZUByyeJfsA/sh+GfgB+2z 4Sb9lnwT8Yvhh8ArLRNZn+Idp4uHiDS9E1zVLgWaWCWel64wujfoLffJeRQJCIEEPnO7NGn6R0UA eXfDb9j/AMJ/Cn4jSeKdL1f4pXWpy+bmHWPiX4k1rTR5md2LG8vpbUYz8uIhs/h218Y/sV/8E1tb +OfwM+L/AIa+KPjP40+HPAPjD4reMJ9Q+HyRWOiabr2mza3cSoTcixTVvs10m1mMN8iSxuVB8t2V v0fooA+Gf2/vhP8As8/G3xd/wrb4+fsv+MfEnhrSdNt18L+LPDXgLUtfg+yR+UxsobnQopNQ01o5 d6mB1iikjQFXcM0a+RaT+zT4/wBB/wCCYP7anhbwr4Z+Klv8Jtf8NXml/BfwX4nnvdU8SQWUegJa ulvbXDzXttaT3CAWthOVnjCMWghMuyv1DooA/Nn4QfsyeMf+COUHhbx98MtB+IPxC+FPxAg00fFf waRea94n0rWJYreA+I7KMrJdXLFvlvLVclVUPGgWMqn6Qadfx6pp9vdRLOkVzGsqCaF4ZAGGQGRw GRsHlWAIPBANTUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAU UUUAFFFFABRRRQB8k/tlf8nHN/2Ldh/6VX9ea16V+2V/ycc3/Yt2H/pVf15rXDl38J/4p/8Apcj0 My/jR/wU/wD0iIUUUV3HnhX2V+zR/wAm4/D/AP7FvTv/AEljr41r7K/Zo/5Nx+H/AP2Lenf+ksdc NT/fKf8Ahn+cDvp/7lU/xw/KodtRRRXccAUUUUAFFFFABRWb4xutYsfCepTeH7DTdU12K2kfT7PU L57C0uZwp8uOWdIZniRmwC6wyFQSQjYwfli8/wCCjPjf4OfEzx7pfxc+HXgXQPDvwx+H1z8QfE2r +D/HN54ll0i3V2W2tpbefSLH99dLBfPEFduLGTdt3RlgD65orwL4FftbeMvEHx4sPhx8Uvh/ofw/ 8T+JPDM3i3QI9I8Ty69FdWltPbwXkNy8llaeRdQveWmY4/ORhKxWQ7Dn32gAoqlfeJNO0ycxXOoW VtKBnZLOqNj1wTUP/Ca6N/0F9M/8Ck/xoA06KzP+E10b/oL6Z/4FJ/jR/wAJro3/AEF9M/8AApP8 aANOisz/AITXRv8AoL6Z/wCBSf40f8Jro3/QX0z/AMCk/wAaANOisz/hNdG/6C+mf+BSf40f8Jro 3/QX0z/wKT/GgDTorM/4TXRv+gvpn/gUn+NH/Ca6N/0F9M/8Ck/xoA06KzP+E10b/oL6Z/4FJ/jR /wAJro3/AEF9M/8AApP8aANOisz/AITXRv8AoL6Z/wCBSf40f8Jro3/QX0z/AMCk/wAaANOisz/h NdG/6C+mf+BSf40f8Jro3/QX0z/wKT/GgDTorM/4TXRv+gvpn/gUn+NH/Ca6N/0F9M/8Ck/xoA06 KzP+E10b/oL6Z/4FJ/jR/wAJro3/AEF9M/8AApP8aANOisz/AITXRv8AoL6Z/wCBSf40f8Jro3/Q X0z/AMCk/wAaANOisz/hNdG/6C+mf+BSf40f8Jro3/QX0z/wKT/GgDTorM/4TXRv+gvpn/gUn+NH /Ca6N/0F9M/8Ck/xoA06KzP+E10b/oL6Z/4FJ/jR/wAJro3/AEF9M/8AApP8aANOisz/AITXRv8A oL6Z/wCBSf40f8Jro3/QX0z/AMCk/wAaANOisz/hNdG/6C+mf+BSf40f8Jro3/QX0z/wKT/GgDTo rM/4TXRv+gvpn/gUn+NH/Ca6N/0F9M/8Ck/xoA06KzP+E10b/oL6Z/4FJ/jR/wAJro3/AEF9M/8A ApP8aANOisz/AITXRv8AoL6Z/wCBSf40f8Jro3/QX0z/AMCk/wAaANOisz/hNdG/6C+mf+BSf40f 8Jro3/QX0z/wKT/GgDTorM/4TXRv+gvpn/gUn+NH/Ca6N/0F9M/8Ck/xoA06KzP+E10b/oL6Z/4F J/jR/wAJro3/AEF9M/8AApP8aANOisz/AITXRv8AoL6Z/wCBSf40f8Jro3/QX0z/AMCk/wAaANOi sz/hNdG/6C+mf+BSf40f8Jro3/QX0z/wKT/GgDTorM/4TXRv+gvpn/gUn+NH/Ca6N/0F9M/8Ck/x oA06KzP+E10b/oL6Z/4FJ/jR/wAJro3/AEF9M/8AApP8aANOisz/AITXRv8AoL6Z/wCBSf40f8Jr o3/QX0z/AMCk/wAaANOisz/hNdG/6C+mf+BSf40f8Jro3/QX0z/wKT/GgDTorM/4TXRv+gvpn/gU n+NH/Ca6N/0F9M/8Ck/xoA06KzP+E10b/oL6Z/4FJ/jR/wAJro3/AEF9M/8AApP8aANOisz/AITX Rv8AoL6Z/wCBSf40f8Jro3/QX0z/AMCk/wAaANOisz/hNdG/6C+mf+BSf40f8Jro3/QX0z/wKT/G gDTorM/4TXRv+gvpn/gUn+NH/Ca6N/0F9M/8Ck/xoA06KzP+E10b/oL6Z/4FJ/jR/wAJro3/AEF9 M/8AApP8aAPlz9sr/k45v+xbsP8A0qv681r0P9rrVLbVv2iJJbS5guo18OWKlopA6g/ab84yO/I/ OvPK4cu/hP8AxT/9LkehmX8aP+Cn/wCkRCiiiu488K+yv2aP+Tcfh/8A9i3p3/pLHXxrX1z+zd4u 0m2/Z38AxS6pp0ckfhzT1ZWuUDKRbRgggng1w1P98p/4Z/nA76f+5VP8cPyqHo9FZn/Ca6N/0F9M /wDApP8AGrtjqNvqcAltp4bmInG+Jw659Miu44CaiiigAooooAbMXWFzGqvIAdoZtqk9gTg4Hvg1 8w6R/wAE/r34lfsW/F7wN8SNYtB47+P8Oqv4v1nSSbuKwkvImt7e3tWmjjaS3sbUW8EO9ELi33sq vI9fUFFAHzb8FfgJ8U/GX7VOhfFb4vWngLRdS8E+Dr3wlpFl4U1u71aHVHv7qyuLy/nNxZWptz/x LrdY4F84ASykykha+kqKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigA ooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACi iigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigD5J/bK/5OOb/sW7D/ANKr+vNa 9K/bK/5OOb/sW7D/ANKr+vNa4cu/hP8AxT/9LkehmX8aP+Cn/wCkRCiiiu488K+yv2aP+Tcfh/8A 9i3p3/pLHXxrX2V+zR/ybj8P/wDsW9O/9JY64an++U/8M/zgd9P/AHKp/jh+VQ7aiiiu44AooooA KKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAo oooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACii igAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKAPkn9sr/AJOOb/sW7D/0qv681r0r9sr/ AJOOb/sW7D/0qv681rhy7+E/8U//AEuR6GZfxo/4Kf8A6REKKKK7jzwr7K/Zo/5Nx+H/AP2Lenf+ ksdfGtfZX7NH/JuPw/8A+xb07/0ljrhqf75T/wAM/wA4HfT/ANyqf44flUO2oooruOAKKKKACiii gAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKA CiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAK KKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigD5J/bK/5OOb/sW7D/0qv681r0r9sr/k45v+ xbsP/Sq/rzWuHLv4T/xT/wDS5HoZl/Gj/gp/+kRCiiiu488K+yv2aP8Ak3H4f/8AYt6d/wCksdfG tfZX7NH/ACbj8P8A/sW9O/8ASWOuGp/vlP8Awz/OB30/9yqf44flUO2oooruOAKKKKACiiigCO7u 4tPtJbi4ljgggQySSSMFSNQMliTwABzk15l8I/2yvh98crbW73w5qOty6FoNs17N4gvvDep6ZoF5 agt/pVnqdzbx2d7blVLia1mljaMrIGKMrHP/AOChPwg8UftA/sKfGHwL4KuI7bxb4v8AB+qaRpLv P5Ctcz2skaIZP4Axbbu7bs9q+FfG3wO8XftQ/D/4jeBfgdpv7QWheFPGfwW8QaP4o0n4s3HiCOzt vEVylvHo9rYvrpciRQdTSd9OJswgh3Nk25IB98fs/wD7Z/w9/ac1e70/wnqGvHULSyi1MW2teGdU 0Ca8s5WKx3dsl/bwG6tiy486APGCVBYblz6nXyH8IfEd3+1N/wAFCvBPxJ0Lwh478JeGPAPw11nw /rB8T+FdR8OynUNSv9JmhsoUvIIftKwpptwzyweZCpaIBzvBH15QAUVSvtAg1GcyySXqsRjEV5NE v5KwH6VD/wAIla/89tT/APBlcf8AxdAGnRWZ/wAIla/89tT/APBlcf8AxdH/AAiVr/z21P8A8GVx /wDF0AadFZn/AAiVr/z21P8A8GVx/wDF0f8ACJWv/PbU/wDwZXH/AMXQBp0Vmf8ACJWv/PbU/wDw ZXH/AMXR/wAIla/89tT/APBlcf8AxdAGnRWZ/wAIla/89tT/APBlcf8AxdH/AAiVr/z21P8A8GVx /wDF0AadFZn/AAiVr/z21P8A8GVx/wDF0f8ACJWv/PbU/wDwZXH/AMXQBp0Vmf8ACJWv/PbU/wDw ZXH/AMXR/wAIla/89tT/APBlcf8AxdAGnRWZ/wAIla/89tT/APBlcf8AxdH/AAiVr/z21P8A8GVx /wDF0AadFZn/AAiVr/z21P8A8GVx/wDF0f8ACJWv/PbU/wDwZXH/AMXQBp0Vmf8ACJWv/PbU/wDw ZXH/AMXR/wAIla/89tT/APBlcf8AxdAGnRWZ/wAIla/89tT/APBlcf8AxdH/AAiVr/z21P8A8GVx /wDF0AadFZn/AAiVr/z21P8A8GVx/wDF0f8ACJWv/PbU/wDwZXH/AMXQBp0Vmf8ACJWv/PbU/wDw ZXH/AMXR/wAIla/89tT/APBlcf8AxdAGnRWZ/wAIla/89tT/APBlcf8AxdH/AAiVr/z21P8A8GVx /wDF0AadFZn/AAiVr/z21P8A8GVx/wDF0f8ACJWv/PbU/wDwZXH/AMXQBp0Vmf8ACJWv/PbU/wDw ZXH/AMXR/wAIla/89tT/APBlcf8AxdAGnRWZ/wAIla/89tT/APBlcf8AxdH/AAiVr/z21P8A8GVx /wDF0AadFZn/AAiVr/z21P8A8GVx/wDF0f8ACJWv/PbU/wDwZXH/AMXQBp0Vmf8ACJWv/PbU/wDw ZXH/AMXR/wAIla/89tT/APBlcf8AxdAGnRWZ/wAIla/89tT/APBlcf8AxdH/AAiVr/z21P8A8GVx /wDF0AadFZn/AAiVr/z21P8A8GVx/wDF0f8ACJWv/PbU/wDwZXH/AMXQBp0Vmf8ACJWv/PbU/wDw ZXH/AMXR/wAIla/89tT/APBlcf8AxdAGnRWZ/wAIla/89tT/APBlcf8AxdH/AAiVr/z21P8A8GVx /wDF0AadFZn/AAiVr/z21P8A8GVx/wDF0f8ACJWv/PbU/wDwZXH/AMXQBp0Vmf8ACJWv/PbU/wDw ZXH/AMXR/wAIla/89tT/APBlcf8AxdAGnRWZ/wAIla/89tT/APBlcf8AxdH/AAiVr/z21P8A8GVx /wDF0AadFZn/AAiVr/z21P8A8GVx/wDF0f8ACJWv/PbU/wDwZXH/AMXQBp0Vmf8ACJWv/PbU/wDw ZXH/AMXR/wAIla/89tT/APBlcf8AxdAGnRWZ/wAIla/89tT/APBlcf8AxdH/AAiVr/z21P8A8GVx /wDF0AadFZn/AAiVr/z21P8A8GVx/wDF0f8ACJWv/PbU/wDwZXH/AMXQBp0Vmf8ACJWv/PbU/wDw ZXH/AMXR/wAIla/89tT/APBlcf8AxdAGnRWZ/wAIla/89tT/APBlcf8AxdH/AAiVr/z21P8A8GVx /wDF0AadFZn/AAiVr/z21P8A8GVx/wDF0f8ACJWv/PbU/wDwZXH/AMXQBp0Vmf8ACJWv/PbU/wDw ZXH/AMXR/wAIla/89tT/APBlcf8AxdAHy5+2V/ycc3/Yt2H/AKVX9ea16H+11p0emftESRxNOyt4 csWzLO8zZ+03/dyTjjp0rzyuHLv4T/xT/wDS5HoZl/Gj/gp/+kRCiiiu488K+yv2aP8Ak3H4f/8A Yt6d/wCksdfGtfXP7N3hi2uP2d/AMjS6iGk8OaexC386qCbaPoA+APYcVw1P98p/4Z/nA76f+5VP 8cPyqHo9FZn/AAiVr/z21P8A8GVx/wDF1dsbFNOgEUbTMoOcyyvK35sSf1ruOAmooooAKK+S/Cv/ AAWi+Cd9/wAFCPG/7M3iTW/+EI+JfhW+sLHTF1qSOGw8VveW8M0cVlPnBuA08cfkSbHdpE8rzfnC fWlABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUU UUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRR QAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAHyT+2V/ycc3/AGLdh/6VX9ea16V+2V/y cc3/AGLdh/6VX9ea1w5d/Cf+Kf8A6XI9DMv40f8ABT/9IiFFFFdx54V9lfs0f8m4/D//ALFvTv8A 0ljr41r7K/Zo/wCTcfh//wBi3p3/AKSx1w1P98p/4Z/nA76f+5VP8cPyqHbUUUV3HAFFFFAH4W/8 F6tX8S/8Fff21tS/ZM+D37N2j+LPGvwxl07+3PiprkslqPCaXUP2gKk8LKI7bypdxW4abzmWYR2j SRRyH6v/AOCZ3/BFf4+fsVfH3wj428fftp/E34r+H9D06a1u/A1//aL6PI8lq0KqrzajIjJA7BkJ twT5a/Kh6dd+yt+0x44+MH/BdT9pj4bHxTaeHPhz8INH0KeDwnaaRYRTeJtQ1Cxhll1S5uGiN0/l LsiASRVK/Zs9Cr3vH37VXxG+En/BffwB8Iv+E+bxF8M/it8PtQ1hvB8um2Ak8J3lofkvUuIolujB P9mlVRPJIvmPOBwI1iAPueiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAo oooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACii igAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKAPkn9sr/AJOOb/sW 7D/0qv681r0r9sr/AJOOb/sW7D/0qv681rhy7+E/8U//AEuR6GZfxo/4Kf8A6REKKKK7jzwr7K/Z o/5Nx+H/AP2Lenf+ksdfGtfZX7NH/JuPw/8A+xb07/0ljrhqf75T/wAM/wA4HfT/ANyqf44flUO2 oooruOAKKKKAPgT/AIKaf8EIdM/bj+Pen/GX4bfF3xz+zx8bLa0TS7vxV4YaRhqlkqMmyaOKe3l8 0LtQSJOo8tdro4CFLf8AwSz/AOCGGjf8E+PjT4m+L/jf4peM/j38cPFVkNKufGHiUyK8FkBEBHHH JNPIZCkMMbSyzyERwokYiUur/lf/AMHCvwv/AGMdW/4KN+OILnVPjT4v/aN8V3NjHqei2vinRfCP hDQphZWqRC51PU7JliDWwjlyrSoWJVpIScL6R/wbX/8ABJb4b/s2ftceFvifr/7UnwP8afFOHS76 PS/h34F8VafrM8JntAskk86TFpWihe6DxQQlAypILh0VlYA/fiiiigAooooAKKKKACiiigAooooA KKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAo oooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACii igAooooAKKKKAPkn9sr/AJOOb/sW7D/0qv681r0r9sr/AJOOb/sW7D/0qv681rhy7+E/8U//AEuR 6GZfxo/4Kf8A6REKKKK7jzwr7K/Zo/5Nx+H/AP2Lenf+ksdfGtfZX7NH/JuPw/8A+xb07/0ljrhq f75T/wAM/wA4HfT/ANyqf44flUO2oooruOAKKKKAPxW/bd8G/sS/Fn9sX9tLxp8d/wBmvXNc1H9n iPwxeeIPEWj+NtUe+8Vf2lawxReXYLc2tvbmFViQgSkOFLcNwfVf2fv2S/2Tf2AP+CrX7Onh/wCE f7Ps+h+KPi14T1nxBpviybxvq08mhQx2LM8LWM808MzSxOULFxsJyNxANeW/8FLP+CDf7X37S/7X H7R/iD4T/E74O+GfhZ+0SNGi13R9auLn7dqEWm2sCQrIw02cwlZ45HBgmBZWG4n7o9B/YH/4JPft r+Df+Cifwj+Ln7SPxb+EfxA8N/CbQtS0HS7bQhJBfWkFzZvAiIiaZapIA3lktK5YBTgk8EA/UD4z 2mn6h8HvFlvq2r2egaVPo15He6nduqW+mwmBxJcSMzKoSNcsSzKAFOSBzX5d+IfgTqv/AAS9+F3x T+Hvgrwn8Er74naZ+z1rWu+HvH3w4+HCeFvFOntp4htcaiftN5Jcy3kkkU8UiNHvmsLnMbbd8f6u +IvDun+L/D9/pOrWFnqmlapbyWl7ZXcKz293DIpSSKSNgVdGUlSrAggkEYrk/gf+zF8Nf2ZNNv7L 4bfDzwN8PbPVZVmvYPDWg2ukxXkigqryLbogdgCQC2SAaAPmD4EfB/wJ+zZ/wUh+H2gfBPQPD3hv wN4w+Eeraz4jh0Czit7TV5INR0hNK1G5aMATXLpc6gqzOWkkVpiS23K/a9cP8GP2Y/hr+zh/a3/C u/h54G8Bf29Kk+p/8I7oNrpf9oyJu2vN5CJ5jLvfBbJG5vU13FAFK+g1GScm2urKGLH3ZbVpGz9R Iv8AKofsus/8/wDpn/gA/wD8erTooAzPsus/8/8Apn/gA/8A8eo+y6z/AM/+mf8AgA//AMerTooA zPsus/8AP/pn/gA//wAeo+y6z/z/AOmf+AD/APx6tOigDM+y6z/z/wCmf+AD/wDx6j7LrP8Az/6Z /wCAD/8Ax6tOigDM+y6z/wA/+mf+AD//AB6j7LrP/P8A6Z/4AP8A/Hq06KAMz7LrP/P/AKZ/4AP/ APHqPsus/wDP/pn/AIAP/wDHq06KAMz7LrP/AD/6Z/4AP/8AHqPsus/8/wDpn/gA/wD8erTooAzP sus/8/8Apn/gA/8A8eo+y6z/AM/+mf8AgA//AMerTooAzPsus/8AP/pn/gA//wAeo+y6z/z/AOmf +AD/APx6tOigDM+y6z/z/wCmf+AD/wDx6j7LrP8Az/6Z/wCAD/8Ax6tOigDM+y6z/wA/+mf+AD// AB6j7LrP/P8A6Z/4AP8A/Hq06KAMz7LrP/P/AKZ/4AP/APHqPsus/wDP/pn/AIAP/wDHq06KAMz7 LrP/AD/6Z/4AP/8AHqPsus/8/wDpn/gA/wD8erTooAzPsus/8/8Apn/gA/8A8eo+y6z/AM/+mf8A gA//AMerTooAzPsus/8AP/pn/gA//wAeo+y6z/z/AOmf+AD/APx6tOigDM+y6z/z/wCmf+AD/wDx 6j7LrP8Az/6Z/wCAD/8Ax6tOigDM+y6z/wA/+mf+AD//AB6j7LrP/P8A6Z/4AP8A/Hq06KAMz7Lr P/P/AKZ/4AP/APHqPsus/wDP/pn/AIAP/wDHq06KAMz7LrP/AD/6Z/4AP/8AHqPsus/8/wDpn/gA /wD8erTooAzPsus/8/8Apn/gA/8A8eo+y6z/AM/+mf8AgA//AMerTooAzPsus/8AP/pn/gA//wAe o+y6z/z/AOmf+AD/APx6tOigDM+y6z/z/wCmf+AD/wDx6j7LrP8Az/6Z/wCAD/8Ax6tOigDM+y6z /wA/+mf+AD//AB6j7LrP/P8A6Z/4AP8A/Hq06KAMz7LrP/P/AKZ/4AP/APHqPsus/wDP/pn/AIAP /wDHq06KAMz7LrP/AD/6Z/4AP/8AHqPsus/8/wDpn/gA/wD8erTooAzPsus/8/8Apn/gA/8A8eo+ y6z/AM/+mf8AgA//AMerTooAbAHWFBKyPIFG5lUqpOOSAScD2yfrTqKKACiiigAooooAp6hDqEkw NpdWcEYXlZbZpWJz1yJF46cY/GoPsus/8/8Apn/gA/8A8erTooAzPsus/wDP/pn/AIAP/wDHqPsu s/8AP/pn/gA//wAerTooAzPsus/8/wDpn/gA/wD8eo+y6z/z/wCmf+AD/wDx6tOigDM+y6z/AM/+ mf8AgA//AMeo+y6z/wA/+mf+AD//AB6tOigDM+y6z/z/AOmf+AD/APx6j7LrP/P/AKZ/4AP/APHq 06KAPkL9rqO6j/aIkF3NBPIfDljhooTEoH2m/wCMFm5685/CvPK9K/bK/wCTjm/7Fuw/9Kr+vNa4 cu/hP/FP/wBLkehmX8aP+Cn/AOkRCiiiu488K+uf2brbVm/Z38AmK905Iz4c0/arWTswH2aPAJEo yffA+lfI1fZX7NH/ACbj8P8A/sW9O/8ASWOuGp/vlP8Awz/OB30/9yqf44flUOj+y6z/AM/+mf8A gA//AMeq7YpcRwAXMsM0ufvRRGNcfQs386moruOAKKKKAPwl8U/8FFPij/wT/wD+C8P7as/w0/Zo 8fftGSeKpPCiahF4Ze7VtBEGkIY2l+z2N1xL5rhdwT/Utjdzj7G/4J8/8Fm/jx+2J+1LofgHxz+w 98XPgp4b1WC6muPFuuyai1jYNFA8qI4m0u3TMjKIxmVeXGATwdH41/tIfsg/8Edf2tvjf8YfG/xk ktfiT8ZzpCa94RW7i1a9tXsbCQWiwWFrCbm2WaLky3TeUWeP50DAHjP+CdP/AAcEeJP+Cq/7bth4 T+FPwG8XaV8D9OFy2u+PteVnkjdbDzIrZo4N1tazG6ZVCm5naSL5giEnYAfptRRRQAUUUUAFFFFA BRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAF FFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAV4H+0n+0n4s+GHxXTQ dBTw6touk29+739lNcSM8s1zGQCk8YCgQDsTljzXvlfJP7ZX/Jxzf9i3Yf8ApVf1wY5OUqVO7SlK zs2nblk91Z7pHo4BqMatSybjG6uk1fnitndbN7oP+GyviR/e8Ef+Ca6/+TKP+GyviR/e8Ef+Ca6/ +TK81op/2dS7y/8AA5//ACQv7Sq9of8AguH/AMielf8ADZXxI/veCP8AwTXX/wAmUf8ADZXxI/ve CP8AwTXX/wAmV5rRR/Z1LvL/AMDn/wDJB/aVXtD/AMFw/wDkT7f+Efi64+IHwp8Ma9dxww3Wt6Ta 380cQIjR5YUkYLkk7QWOMknFdDXE/s0f8m4/D/8A7FvTv/SWOu2q8vqSnhac5u7cYt+rSM8xpxp4 urCCslKSXomwooorrOMKKKKACiiigAooooA+Sf2yv+Tjm/7Fuw/9Kr+vNa9K/bK/5OOb/sW7D/0q v681rhy7+E/8U/8A0uR6GZfxo/4Kf/pEQoooruPPCvsr9mj/AJNx+H//AGLenf8ApLHXxrX2V+zR /wAm4/D/AP7FvTv/AEljrhqf75T/AMM/zgd9P/cqn+OH5VDtqKKK7jgCiiigD8ev+CoH/BvD8Uvi z+3X4x/aY+C3ir4SeKPEnixrU3/gP4l+DbPVNKlgt7OCJ0imuYrmMyyvaRKp8m3ZFmkxcoM7s3/g hp8efj3+zV/wUU+K3wr/AGjfgD4i8B+Jv2h/E9/41i8TWAL+G01IWK3b2FvKGlgmj8gStviu5njd BG6Z3vH9qftM/wDBfX9kr9jv44698NviP8WP+Ec8aeGHij1LTv8AhGNZvPszSwxzoPNgtJImzHKj fK5xuwcEED480T/gpP8ABX/go/8A8HDP7LOq/Bfxp/wmdh4X8JeKrTU5f7Iv9O+zSy2UjIuLuCIt lVJyoIGOcUAfsNRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFF ABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUA FFFFABRRRQAV8k/tlf8AJxzf9i3Yf+lV/X1tXyT+2V/ycc3/AGLdh/6VX9cOL/i0P8T/APSJnoYP +DX/AMC/9Lgea0UUV3HnhRRRQB9lfs0f8m4/D/8A7FvTv/SWOu2rif2aP+Tcfh//ANi3p3/pLHXb Vw5X/udH/DH8kd+a/wC+1v8AHL82FFFFdxwBRRRQAUUUUAFFFFAHyT+2V/ycc3/Yt2H/AKVX9ea1 6V+2V/ycc3/Yt2H/AKVX9ea1w5d/Cf8Ain/6XI9DMv40f8FP/wBIiFFFFdx54V9lfs0f8m4/D/8A 7FvTv/SWOvjWvsr9mj/k3H4f/wDYt6d/6Sx1w1P98p/4Z/nA76f+5VP8cPyqHbUUUV3HAFFFFAHj vxN/4J4fs/8Axq8c3/ifxl8DPg74t8S6qUa91bWvBmm399eFEWNTJNLCzuVRFUbicKoHQCpvhR+w B8B/gN43tvE3gb4J/CPwX4ksldLfVtC8H6dp19AroUdUmhhV1DKxUgHkEg8GvXK+aNc+GH7T8/8A wU20bxTYfEbwZB+y5BojQaj4Pe2jOtXGo+RMomWT7EXCCZoWx9rUYRvl7EA+l6K479oP49eGP2Xv gr4l+IPjPUP7L8L+E7Jr7ULnYXMcYwAAB1JYhR0GSMkDJr87PCH/AAWr1KDxb+094jPxG+E3ji28 FfCW08f+D/BPh7XtO1SHTLqM6v8AarKS9tGeS8mSO2097oozRwtcAJ8hWWQA/USivln4QeLfiJ8A v22/Cvwo8Z/EjXPirZfEDwHqnif7dq+m6ZYy6NqGmXmmwSxWy2FrbA2syankLP50qG2UeYQ7V9TU AFFUr7VZ7ScpHpt7dKBnfE0IX6fM4P6VD/b11/0BNT/77t//AI7QBp0Vmf29df8AQE1P/vu3/wDj tH9vXX/QE1P/AL7t/wD47QBp0Vmf29df9ATU/wDvu3/+O0f29df9ATU/++7f/wCO0AadFZn9vXX/ AEBNT/77t/8A47R/b11/0BNT/wC+7f8A+O0AadFZn9vXX/QE1P8A77t//jtH9vXX/QE1P/vu3/8A jtAGnRWZ/b11/wBATU/++7f/AOO0f29df9ATU/8Avu3/APjtAGnRWZ/b11/0BNT/AO+7f/47R/b1 1/0BNT/77t//AI7QBp0Vmf29df8AQE1P/vu3/wDjtH9vXX/QE1P/AL7t/wD47QBp0Vmf29df9ATU /wDvu3/+O0f29df9ATU/++7f/wCO0AadFZn9vXX/AEBNT/77t/8A47R/b11/0BNT/wC+7f8A+O0A adFZn9vXX/QE1P8A77t//jtH9vXX/QE1P/vu3/8AjtAGnRWZ/b11/wBATU/++7f/AOO0f29df9AT U/8Avu3/APjtAGnRWZ/b11/0BNT/AO+7f/47R/b11/0BNT/77t//AI7QBp0Vmf29df8AQE1P/vu3 /wDjtH9vXX/QE1P/AL7t/wD47QBp0Vmf29df9ATU/wDvu3/+O0f29df9ATU/++7f/wCO0AadFZn9 vXX/AEBNT/77t/8A47R/b11/0BNT/wC+7f8A+O0AadFZn9vXX/QE1P8A77t//jtH9vXX/QE1P/vu 3/8AjtAGnRWZ/b11/wBATU/++7f/AOO0f29df9ATU/8Avu3/APjtAGnRWZ/b11/0BNT/AO+7f/47 R/b11/0BNT/77t//AI7QBp0Vmf29df8AQE1P/vu3/wDjtH9vXX/QE1P/AL7t/wD47QBp0Vmf29df 9ATU/wDvu3/+O0f29df9ATU/++7f/wCO0AadFZn9vXX/AEBNT/77t/8A47R/b11/0BNT/wC+7f8A +O0AadFZn9vXX/QE1P8A77t//jtH9vXX/QE1P/vu3/8AjtAGnRWZ/b11/wBATU/++7f/AOO0f29d f9ATU/8Avu3/APjtAGnRWZ/b11/0BNT/AO+7f/47R/b11/0BNT/77t//AI7QBp0Vmf29df8AQE1P /vu3/wDjtH9vXX/QE1P/AL7t/wD47QBp18k/tlf8nHN/2Ldh/wClV/X1H/b11/0BNT/77t//AI7X yr+11dyXn7REjyWs9ow8OWI2SlCxH2m/5+RmGPxzxXDi/wCLQ/xP/wBImehg/wCDX/wL/wBLgeeU UUV3HnhRRRQB9lfs0f8AJuPw/wD+xb07/wBJY67avOP2btauYv2d/AKLpGoyqvhzTwHV4Arj7NHy MyA4PuAa7T+3rr/oCan/AN92/wD8drhyv/c6P+GP5I781/32t/jl+bNOisz+3rr/AKAmp/8Afdv/ APHaP7euv+gJqf8A33b/APx2u44DTorM/t66/wCgJqf/AH3b/wDx2j+3rr/oCan/AN92/wD8doA0 6KzP7euv+gJqf/fdv/8AHaP7euv+gJqf/fdv/wDHaANOisz+3rr/AKAmp/8Afdv/APHaP7euv+gJ qf8A33b/APx2gD5c/bK/5OOb/sW7D/0qv681r0P9rq7kvP2iJHktZ7Rh4csRslKFiPtN/wA/IzDH 454rzyuHLv4T/wAU/wD0uR6GZfxo/wCCn/6REKKKK7jzwr7K/Zo/5Nx+H/8A2Lenf+ksdfGtfXP7 N2tXMX7O/gFF0jUZVXw5p4Dq8AVx9mj5GZAcH3ANcNT/AHyn/hn+cDvp/wC5VP8AHD8qh6PRWZ/b 11/0BNT/AO+7f/47V2xuXu4A8ltNasTjZKULfX5WI/Wu44CaiiigD8d7z4JP+1N/wWz/AOCg9vqd pBrXxK8M/CGz8MfDTTrmWKJobXUtDKzvbmRgq7riVEaUsAn22RSyhyK8Q/4I+/8ABPeP/glp/wAF h/2ePB0UniOL4mePPhHq2qfFHRr3VLG+t/D7s2YY4WtkwIzNbJwZJCTtIcjIPrP/AAVjtP2Vv2wP +Cj2o6ZF+074k/Y8/aq+FEMegP4seSTTdP1jTZLOO8B+1LPBECI714VY3dvMx81GimjWEj65/wCC TP8AwRW8Pf8ABO/xj4p+J/iH4l+Jfjv8ZfH9uttqPjvXt3nSWWVZYoVeaeTDrHBvd55C/kR7dija QD7lryfxT+xh4I8e/FL4jeJ/EFtd66nxU8IWPgjxBpF46Nptxp1q+oOqqioJA8n9pXCuTIQQse0K QS3rFFAHi37P/wCxVZfBH4jDxdq3jzx78TPEtnof/CM6TqHit9OabRNMMqSyWsBsrS2DiWSG3aSS cSyubeLMnBz7TRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAB RRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFF FFABXyT+2V/ycc3/AGLdh/6VX9fW1fJP7ZX/ACcc3/Yt2H/pVf1w4v8Ai0P8T/8ASJnoYP8Ag1/8 C/8AS4HmtFFFdx54UUUUAfZX7NH/ACbj8P8A/sW9O/8ASWOu2rif2aP+Tcfh/wD9i3p3/pLHXbVw 5X/udH/DH8kd+a/77W/xy/NhRRRXccAUUUUAFFFFABRRRQB8k/tlf8nHN/2Ldh/6VX9ea16V+2V/ ycc3/Yt2H/pVf15rXDl38J/4p/8Apcj0My/jR/wU/wD0iIUUUV3HnhX2V+zR/wAm4/D/AP7FvTv/ AEljr41r7K/Zo/5Nx+H/AP2Lenf+ksdcNT/fKf8Ahn+cDvp/7lU/xw/KodtRRRXccAUUUUAfjj/w Xy/bR/4Jx+GPiB4j8HfG74Xn4o/GjRrm3/tGDwvo02la5bTHTt9obrWFa2822EM0SmNZrgITGTAx iwniv/Btz+xx+078J/219L8U6X4I+OHwh/ZTa21D7V4X8e+LEnNzfSWUarOLI29kZWebyXS4WxRQ kZTzXKkN9Yft8/8ABWj9hz/gkv8Ata+PPENz4Mj8X/tM6hdRPrh0XQTcazavLpkKwh9Su9sVtbNb xWqPFaysQZN5gZmkNZ3/AASw/wCCrX7Wv/BUb9vLUGvvhFofwe+AXw5vrvS/FenXcol8RWupCw2x 2F01x5cxYXLCb9zZwbFXY7sVO8A/VmiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKK ACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooA KKKKACiiigAooooAKKKKACiiigAr5J/bK/5OOb/sW7D/ANKr+vravkn9sr/k45v+xbsP/Sq/rhxf 8Wh/if8A6RM9DB/wa/8AgX/pcDzWiiiu488KKKKAPsr9mj/k3H4f/wDYt6d/6Sx121cT+zR/ybj8 P/8AsW9O/wDSWOu2rhyv/c6P+GP5I781/wB9rf45fmwoooruOAKKKKACiiigAooooA+Sf2yv+Tjm /wCxbsP/AEqv681r0r9sr/k45v8AsW7D/wBKr+vNa4cu/hP/ABT/APS5HoZl/Gj/AIKf/pEQooor uPPCvsr9mj/k3H4f/wDYt6d/6Sx18a19lfs0f8m4/D//ALFvTv8A0ljrhqf75T/wz/OB30/9yqf4 4flUO2oooruOAKKKKAPzc/bz/wCDfi7+OP7WXiL9or4GfHv4i/Av44eITbm+urWUXGj6jFb20USW rRRGKZI5XtrVpPMkniIjbMDZAHlv/BG34Fftq/8ABPr9v/xv4P8Ajh4J8MeOvAfxz1i98Tax8TfD s6yQrrX2JbjzDHGsZgt2KSQFJrO3BmcGORlCrL+utFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAB RRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFF FFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAV8k/tlf8nHN/wBi3Yf+lV/X1tXyT+2V/wAn HN/2Ldh/6VX9cOL/AItD/E//AEiZ6GD/AINf/Av/AEuB5rRRRXceeFFFFAH2V+zR/wAm4/D/AP7F vTv/AEljrtq4n9mj/k3H4f8A/Yt6d/6Sx121cOV/7nR/wx/JHfmv++1v8cvzYUUUV3HAFFFFABRR RQAUUUUAfJP7ZX/Jxzf9i3Yf+lV/Xmtelftlf8nHN/2Ldh/6VX9ea1w5d/Cf+Kf/AKXI9DMv40f8 FP8A9IiFFFFdx54V9lfs0f8AJuPw/wD+xb07/wBJY6+Na+yv2aP+Tcfh/wD9i3p3/pLHXDU/3yn/ AIZ/nA76f+5VP8cPyqHbUUUV3HAFFFFABRRRQBleO9Y1Pw94I1nUNF0eTxFrFjYz3FjpSXMdq2pz pGzR24lkwkZkcBN7/Ku7J4Br5xu/+Ch+rfAvXfH2mfHHwd4b8H3PgXwHcfEeSTwf4nuPFMEulW0j xTiTzrCxkin3KPLTy3WUeZh1MbCvon4kjxGfh7rg8Htoi+LPsE39jHWFlbTvtnlnyRceURJ5JfaG KfMFyRk8V8bT/wDBM/xF8fNQ+Mn/AAl3hj4W/BDR/i94I1bwtrem/DjUZdY/4SbUtRlWRte1GWbT 9PWS7ttsqxFoZHf7bclph8q0AezfAr9rbxl4g+PFh8OPil8P9D+H/ifxJ4Zm8W6BHpHieXXorq0t p7eC8huXksrTyLqF7y0zHH5yMJWKyHYc++182/BX4CfFPxl+1ToXxW+L1p4C0XUvBPg698JaRZeF Nbu9Wh1R7+6sri8v5zcWVqbc/wDEut1jgXzgBLKTKSFr6SoAKKpX3hvTtTnMtzp9lcykY3ywK7Y9 MkVD/wAIVo3/AECNM/8AAVP8KANOisz/AIQrRv8AoEaZ/wCAqf4Uf8IVo3/QI0z/AMBU/wAKANOi sz/hCtG/6BGmf+Aqf4Uf8IVo3/QI0z/wFT/CgDTorM/4QrRv+gRpn/gKn+FH/CFaN/0CNM/8BU/w oA06KzP+EK0b/oEaZ/4Cp/hR/wAIVo3/AECNM/8AAVP8KANOisz/AIQrRv8AoEaZ/wCAqf4Uf8IV o3/QI0z/AMBU/wAKANOisz/hCtG/6BGmf+Aqf4Uf8IVo3/QI0z/wFT/CgDTorM/4QrRv+gRpn/gK n+FH/CFaN/0CNM/8BU/woA06KzP+EK0b/oEaZ/4Cp/hR/wAIVo3/AECNM/8AAVP8KANOisz/AIQr Rv8AoEaZ/wCAqf4Uf8IVo3/QI0z/AMBU/wAKANOisz/hCtG/6BGmf+Aqf4Uf8IVo3/QI0z/wFT/C gDToqOzsodOtlht4YoIUztSNAirk5OAOOtSUAFFFFABRRRQAUVBqGl22rQiK7toLqNW3BZYw6g4x nB78n86p/wDCFaN/0CNM/wDAVP8ACgDTorM/4QrRv+gRpn/gKn+FH/CFaN/0CNM/8BU/woA06KzP +EK0b/oEaZ/4Cp/hR/whWjf9AjTP/AVP8KANOisz/hCtG/6BGmf+Aqf4Uf8ACFaN/wBAjTP/AAFT /CgDTorM/wCEK0b/AKBGmf8AgKn+FH/CFaN/0CNM/wDAVP8ACgDTor4W/aI8GaPdftG+OFl0nTJR De2qRhrVGCL/AGdaNgZHAyScepPrXJf8IDoP/QE0j/wDj/wrzKWKxVROUKcbJyWsnf3ZNX+B727s 9SrhMJSajOpK7UXpBW96Klb41te2yP0Wor86f+EB0H/oCaR/4Bx/4Uf8IDoP/QE0j/wDj/wrX2mM /wCfcf8AwN//ACBn7PBf8/J/+AL/AOWH6LUV+dP/AAgOg/8AQE0j/wAA4/8ACvtD9nDwnpV5+zz4 Cmm0zT5ZZfDunu7vbozOxtoySSRySe9FLE1vbKlWgldNpqTezS6xXcVXDUfYutRm3ZpNOKW6b6Sl /KejUVmf8IVo3/QI0z/wFT/Cj/hCtG/6BGmf+Aqf4V3HAadFZn/CFaN/0CNM/wDAVP8ACj/hCtG/ 6BGmf+Aqf4UAadFZn/CFaN/0CNM/8BU/wo/4QrRv+gRpn/gKn+FAGnRWZ/whWjf9AjTP/AVP8KP+ EK0b/oEaZ/4Cp/hQBp18k/tlf8nHN/2Ldh/6VX9fUf8AwhWjf9AjTP8AwFT/AAr5V/a60u20n9oi SK0toLWNvDlixWKMIpP2m/GcDvwPyrhxf8Wh/if/AKRM9DB/wa/+Bf8ApcDzyiiiu488KKKKAPsr 9mj/AJNx+H//AGLenf8ApLHXbV5x+zd4R0m5/Z38Ayy6Xp0kknhzT2ZmtkLMTbRkkkjk12n/AAhW jf8AQI0z/wABU/wrhyv/AHOj/hj+SO/Nf99rf45fmzTorM/4QrRv+gRpn/gKn+FWtO0Wy0ff9ktL W18zG/yYlj3Y6ZwOcZP513HAWaKKKACiiigAooooA+Sf2yv+Tjm/7Fuw/wDSq/rzWvSv2yv+Tjm/ 7Fuw/wDSq/rzWuHLv4T/AMU//S5HoZl/Gj/gp/8ApEQoooruPPCvsr9mj/k3H4f/APYt6d/6Sx18 a19c/s3eEdJuf2d/AMsul6dJJJ4c09mZrZCzE20ZJJI5NcNT/fKf+Gf5wO+n/uVT/HD8qh6PRWZ/ whWjf9AjTP8AwFT/AAq7Y6fb6ZAIraCG2iBzsiQIufXAruOAmooooAKKKKACiiigAooooAKKKKAC iiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAoorwf4qftlal8P/AIna54es vCVjqUWiSxQtcz609s0rPbxT8ILeTAAlA+9zg9K58RiqdFRdS+rsrJt3s3sk3smdOGwlSu5Knb3V d3aStdLdtLdo94or5p/4b117/oRNI/8ACkk/+Q6P+G9de/6ETSP/AApJP/kOsf7Rpdpf+AT/APkT f+zaveH/AIMh/wDJH0tRXzT/AMN669/0Imkf+FJJ/wDIdV9V/wCCg+s6NplzeT+BNMMFpE00gj8R Oz7VBJwDaAE4Hcj61FTNKEIuclJJav3J/wDyJVPKa85KEHFtuy9+G7/7ePp6iiivRPNCiiigAooo oAKKKKACiiigD4p/aB/5OP8AHn/X/a/+m2zrla6r9oH/AJOP8ef9f9r/AOm2zrla4cu/hP8AxT/9 LkehmX8aP+Cn/wCkRCiiiu488K+yv2aP+Tcfh/8A9i3p3/pLHXxrX2V+zR/ybj8P/wDsW9O/9JY6 4an++U/8M/zgd9P/AHKp/jh+VQ7aiiiu44AooooAKKKKACiiigAr5J/bK/5OOb/sW7D/ANKr+vra vkn9sr/k45v+xbsP/Sq/rhxf8Wh/if8A6RM9DB/wa/8AgX/pcDzWiiiu488KKKKAPsr9mj/k3H4f /wDYt6d/6Sx121cT+zR/ybj8P/8AsW9O/wDSWOu2rhyv/c6P+GP5I781/wB9rf45fmwoooruOAKK +Tf+C0n/AAUQ1z/gl3+xBffFrw/4e0nxTe6drFlp76dqEskMUsdw7ISHTlWU7T0IIBGOcj8ef+I3 z4mf9EK8C/8Ag7u//iK6Y4ZcqlKajfa9+9uifVM5pYh8zjGDdt7W7X6tdz+jiiv5x/8AiN8+Jn/R CvAv/g7u/wD4ij/iN8+Jn/RCvAv/AIO7v/4in9Xp/wDP2P8A5N/8iHt5/wDPuX/kv/yR/RxRX84/ /Eb58TP+iFeBf/B3d/8AxFfsN/wRb/4KIa5/wVE/Ygsfi14g8PaT4WvdR1i909NO0+WSaKKO3dUB LvyzMdx6AAEDHGSpYZcrlCalbe1+6XVLqwjiHzKMoNX2vbtfo32I/wBsr/k45v8AsW7D/wBKr+vN a9K/bK/5OOb/ALFuw/8ASq/rzWvIy7+E/wDFP/0uR7OZfxo/4Kf/AKREKKKK7jzwr7K/Zo/5Nx+H /wD2Lenf+ksdfGtfZX7NH/JuPw//AOxb07/0ljrhqf75T/wz/OB30/8Acqn+OH5VDtqKKK7jgCii igAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKK ACvin9oH/k4/x5/1/wBr/wCm2zr7Wr4p/aB/5OP8ef8AX/a/+m2zrhxf8Wh/if8A6RM9DB/wa/8A gX/pcDlaKKK7jzwrJ8ff8iJrf/XhP/6Latasnx9/yImt/wDXhP8A+i2rhzT/AHOt/hl+TPQyn/fq P+OP5o/Raiiiu488KKKKACiiigAooooAKKKKAPin9oH/AJOP8ef9f9r/AOm2zrla6r9oH/k4/wAe f9f9r/6bbOuVrhy7+E/8U/8A0uR6GZfxo/4Kf/pEQoooruPPCvsr9mj/AJNx+H//AGLenf8ApLHX xrX2V+zR/wAm4/D/AP7FvTv/AEljrhqf75T/AMM/zgd9P/cqn+OH5VDtqKKK7jgCiiigAooooAKK KKACvkn9sr/k45v+xbsP/Sq/r62r5J/bK/5OOb/sW7D/ANKr+uHF/wAWh/if/pEz0MH/AAa/+Bf+ lwPNaKKK7jzwooooA+yv2aP+Tcfh/wD9i3p3/pLHXbVxP7NH/JuPw/8A+xb07/0ljrtq4cr/ANzo /wCGP5I781/32t/jl+bCiiiu44D8xv8Ag7p/5Qz+I/8AsZ9H/wDR5r+Tyv6w/wDg7p/5Qz+I/wDs Z9H/APR5r+TyurEfBT/w/wDt0jmofHU/xf8AtsQooorlOkK/rD/4NFv+UM/hz/sZ9Y/9Hiv5PK/r D/4NFv8AlDP4c/7GfWP/AEeK6sP/AA6v+Ff+lROav8dP/F/7bI+g/wBsr/k45v8AsW7D/wBKr+vN a9K/bK/5OOb/ALFuw/8ASq/rzWvHy7+E/wDFP/0uR7OZfxo/4Kf/AKREKKKK7jzwr7K/Zo/5Nx+H /wD2Lenf+ksdfGtfZX7NH/JuPw//AOxb07/0ljrhqf75T/wz/OB30/8Acqn+OH5VDtqKKK7jgCii igAooooAKKzfGXjHSfh34Q1bxBr+pWOjaFoVnNqGo6hezLBbWNtChklmlkYhUREVmZiQAASa8x+C f7eXwv8Aj9Nq8Wia1rGmXGhaTHr93B4o8Nap4WmGmyFwt+kep29u0trmNwZ4w0akYLAkZAPYKK8s /Z//AGz/AIe/tOavd6f4T1DXjqFpZRamLbWvDOqaBNeWcrFY7u2S/t4DdWxZcedAHjBKgsNy59To AKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAr4p/aB/5OP8AHn/X /a/+m2zr7Wr4p/aB/wCTj/Hn/X/a/wDpts64cX/Fof4n/wCkTPQwf8Gv/gX/AKXA5Wiiiu488Kyf H3/Iia3/ANeE/wD6Latasnx9/wAiJrf/AF4T/wDotq4c0/3Ot/hl+TPQyn/fqP8Ajj+aP0Woooru PPCiiigAooooAKKKKACiiigD4p/aB/5OP8ef9f8Aa/8Apts65Wuq/aB/5OP8ef8AX/a/+m2zrla4 cu/hP/FP/wBLkehmX8aP+Cn/AOkRCiiiu488K+yv2aP+Tcfh/wD9i3p3/pLHXxrX2V+zR/ybj8P/ APsW9O/9JY64an++U/8ADP8AOB30/wDcqn+OH5VDtqKKK7jgCiiigAooooAKKKKACvkn9sr/AJOO b/sW7D/0qv6+tq+Sf2yv+Tjm/wCxbsP/AEqv64cX/Fof4n/6RM9DB/wa/wDgX/pcDzWiiiu488KK KKAPsr9mj/k3H4f/APYt6d/6Sx121cT+zR/ybj8P/wDsW9O/9JY67auHK/8Ac6P+GP5I781/32t/ jl+bCiiiu44D8xv+Dun/AJQz+I/+xn0f/wBHmv5PK/rD/wCDun/lDP4j/wCxn0f/ANHmv5PK6sR8 FP8Aw/8At0jmofHU/wAX/tsQooorlOkK/rD/AODRb/lDP4c/7GfWP/R4r+Tyv6w/+DRb/lDP4c/7 GfWP/R4rqw/8Or/hX/pUTmr/AB0/8X/tsj6D/bK/5OOb/sW7D/0qv681r0r9sr/k45v+xbsP/Sq/ rzWvHy7+E/8AFP8A9LkezmX8aP8Agp/+kRCiiiu488K+yv2aP+Tcfh//ANi3p3/pLHXxrX2V+zR/ ybj8P/8AsW9O/wDSWOuGp/vlP/DP84HfT/3Kp/jh+VQ7aiiiu44AooooAKKKKAOb+Mvi2z8BfCPx RreoaDrHimx0jSrq7uNG0nTW1K/1aNImZraC2HM8sgBRY/4mYDvX56apoviP/gpL8Dfj/c6honjv QvjP8TfhdqvhXwt4b1n4feIfD2i+D9OkRiti+qajp9vBdX1zPJA9w4bavlKkCmOCS5n/AEvooA+Q /hD4ju/2pv8AgoV4J+JOheEPHfhLwx4B+Gus+H9YPifwrqPh2U6hqV/pM0NlCl5BD9pWFNNuGeWD zIVLRAOd4I+vKKKAKV9pU93OXj1K9tVIxsiWEr9fmQn9ah/sG6/6Dep/98W//wAarTooAzP7Buv+ g3qf/fFv/wDGqP7Buv8AoN6n/wB8W/8A8arTooAzP7Buv+g3qf8A3xb/APxqj+wbr/oN6n/3xb// ABqtOigDM/sG6/6Dep/98W//AMao/sG6/wCg3qf/AHxb/wDxqtOigDM/sG6/6Dep/wDfFv8A/GqP 7Buv+g3qf/fFv/8AGq06KAMz+wbr/oN6n/3xb/8Axqj+wbr/AKDep/8AfFv/APGq06KAMz+wbr/o N6n/AN8W/wD8ao/sG6/6Dep/98W//wAarTooAzP7Buv+g3qf/fFv/wDGqP7Buv8AoN6n/wB8W/8A 8arTooAzP7Buv+g3qf8A3xb/APxqj+wbr/oN6n/3xb//ABqtOigDM/sG6/6Dep/98W//AMao/sG6 /wCg3qf/AHxb/wDxqtOigDM/sG6/6Dep/wDfFv8A/GqP7Buv+g3qf/fFv/8AGq06KAMz+wbr/oN6 n/3xb/8Axqvjf46QPa/tDeOo3nluXW/tcySBQzf8S6z67QB7cCvtuvin9oH/AJOP8ef9f9r/AOm2 zrhxf8Wh/if/AKRM9DB/wa/+Bf8ApcDlaKKK7jzwrJ8ff8iJrf8A14T/APotq1qyfH3/ACImt/8A XhP/AOi2rhzT/c63+GX5M9DKf9+o/wCOP5o/QP8AsG6/6Dep/wDfFv8A/GqP7Buv+g3qf/fFv/8A Gq06K7jzzM/sG6/6Dep/98W//wAao/sG6/6Dep/98W//AMarTooAzP7Buv8AoN6n/wB8W/8A8ao/ sG6/6Dep/wDfFv8A/Gq06KAMz+wbr/oN6n/3xb//ABqj+wbr/oN6n/3xb/8AxqtOigDM/sG6/wCg 3qf/AHxb/wDxqj+wbr/oN6n/AN8W/wD8arTooA+JPjpA9r+0N46jeeW5db+1zJIFDN/xLrPrtAHt wK5quq/aB/5OP8ef9f8Aa/8Apts65WuHLv4T/wAU/wD0uR6GZfxo/wCCn/6REKKKK7jzwr65/Zu0 W5l/Z38Auur6jEreHNPIRUgKoPs0fAzGTge5Jr5Gr7K/Zo/5Nx+H/wD2Lenf+ksdcNT/AHyn/hn+ cDvp/wC5VP8AHD8qh0f9g3X/AEG9T/74t/8A41R/YN1/0G9T/wC+Lf8A+NVp0V3HAZn9g3X/AEG9 T/74t/8A41R/YN1/0G9T/wC+Lf8A+NVp0UAZn9g3X/Qb1P8A74t//jVH9g3X/Qb1P/vi3/8AjVad FAGZ/YN1/wBBvU/++Lf/AONUf2Ddf9BvU/8Avi3/APjVadFAGZ/YN1/0G9T/AO+Lf/41Xyr+11aS WX7REiSXU92x8OWJ3yhAwH2m/wCPkVRj8M819e18k/tlf8nHN/2Ldh/6VX9cOL/i0P8AE/8A0iZ6 GD/g1/8AAv8A0uB5rRRRXceeFFFFAH1z+zdotzL+zv4BddX1GJW8OaeQipAVQfZo+BmMnA9yTXaf 2Ddf9BvU/wDvi3/+NVzn7NH/ACbj8P8A/sW9O/8ASWOu2rhyv/c6P+GP5I781/32t/jl+bMz+wbr /oN6n/3xb/8Axqj+wbr/AKDep/8AfFv/APGq06K7jgPy6/4O2dMnsv8Agjb4keTUby7U+JdHGyVY goP2jr8iKc/jjmv5SK/rD/4O6f8AlDP4j/7GfR//AEea/k8rqxHwU/8AD/7dI5qHx1P8X/tsQooo rlOkK/q3/wCDSbTJ73/gjb4bePUby0UeJdYGyJYipP2jr86Mc/jjiv5SK/rD/wCDRb/lDP4c/wCx n1j/ANHiurD/AMOr/hX/AKVE5q/x0/8AF/7bI98/a6tJLL9oiRJLqe7Y+HLE75QgYD7Tf8fIqjH4 Z5rzyvSv2yv+Tjm/7Fuw/wDSq/rzWvHy7+E/8U//AEuR7OZfxo/4Kf8A6REKKKK7jzwr65/Zu0W5 l/Z38Auur6jEreHNPIRUgKoPs0fAzGTge5Jr5Gr7K/Zo/wCTcfh//wBi3p3/AKSx1w1P98p/4Z/n A76f+5VP8cPyqHR/2Ddf9BvU/wDvi3/+NVdsbZ7SAJJcTXTA53yhA30+VQP0qaiu44AooooAKKKK ACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAr4p/a B/5OP8ef9f8Aa/8Apts6+1q+Kf2gf+Tj/Hn/AF/2v/pts64cX/Fof4n/AOkTPQwf8Gv/AIF/6XA5 Wiiiu488KyfH3/Iia3/14T/+i2rWrJ8ff8iJrf8A14T/APotq4c0/wBzrf4Zfkz0Mp/36j/jj+aP 0WoooruPPCiiigAooooAKKKKACiiigD4p/aB/wCTj/Hn/X/a/wDpts65Wuq/aB/5OP8AHn/X/a/+ m2zrla4cu/hP/FP/ANLkehmX8aP+Cn/6REKKKK7jzwr7K/Zo/wCTcfh//wBi3p3/AKSx18a19lfs 0f8AJuPw/wD+xb07/wBJY64an++U/wDDP84HfT/3Kp/jh+VQ7aiiiu44AooooAKKKKACiiigAr5J /bK/5OOb/sW7D/0qv6+tq+Sf2yv+Tjm/7Fuw/wDSq/rhxf8AFof4n/6RM9DB/wAGv/gX/pcDzWii iu488KKKKAPsr9mj/k3H4f8A/Yt6d/6Sx121cT+zR/ybj8P/APsW9O/9JY67auHK/wDc6P8Ahj+S O/Nf99rf45fmwoooruOA/Mb/AIO6f+UM/iP/ALGfR/8A0ea/k8r+sP8A4O6f+UM/iP8A7GfR/wD0 ea/k8rqxHwU/8P8A7dI5qHx1P8X/ALbEKKKK5TpCv6w/+DRb/lDP4c/7GfWP/R4r+Tyv6w/+DRb/ AJQz+HP+xn1j/wBHiurD/wAOr/hX/pUTmr/HT/xf+2yPoP8AbK/5OOb/ALFuw/8ASq/rzWvSv2yv +Tjm/wCxbsP/AEqv681rx8u/hP8AxT/9LkezmX8aP+Cn/wCkRCiiiu488K+yv2aP+Tcfh/8A9i3p 3/pLHXxrX2V+zR/ybj8P/wDsW9O/9JY64an++U/8M/zgd9P/AHKp/jh+VQ7aiiiu44AooooAKKKK ACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAr4p/a B/5OP8ef9f8Aa/8Apts6+1q+Kf2gf+Tj/Hn/AF/2v/pts64cX/Fof4n/AOkTPQwf8Gv/AIF/6XA5 Wiiiu488KyfH3/Iia3/14T/+i2rWrJ8ff8iJrf8A14T/APotq4c0/wBzrf4Zfkz0Mp/36j/jj+aP 0WoooruPPCiiigAooooAKKKKACiiigD4p/aB/wCTj/Hn/X/a/wDpts65Wuq/aB/5OP8AHn/X/a/+ m2zrla4cu/hP/FP/ANLkehmX8aP+Cn/6REKKKK7jzwr7K/Zo/wCTcfh//wBi3p3/AKSx18a19lfs 0f8AJuPw/wD+xb07/wBJY64an++U/wDDP84HfT/3Kp/jh+VQ7aiiiu44Aoor82P+Drzxjq/gH/gk NreraDqupaJqtr4m0nybywuXtriHdKyttkQhlyrMpweQSOhrahSVSfK3ZWb77Jvy7GNeq4Q5kru6 Xbdpefc/Seiv4SP+Gwfi3/0VL4jf+FJe/wDxyj/hsH4t/wDRUviN/wCFJe//ABytOTD/AM8v/AV/ 8kRz4j+WP/gT/wDkT+7eiv4SP+Gwfi3/ANFS+I3/AIUl7/8AHKP+Gwfi3/0VL4jf+FJe/wDxyjkw /wDPL/wFf/JBz4j+WP8A4E//AJE/u3r5J/bK/wCTjm/7Fuw/9Kr+vDv+DUTxlrHj/wD4JDaJq2va rqWt6rdeJtW868v7l7m4m2yqq7pHJY4VQBk8AAdq9x/bK/5OOb/sW7D/ANKr+vNzOkqeIoRTuua/ benJ+fc9PLKrnh68mrPlt32qQXl2PNaKKK6DlCiiigD7K/Zo/wCTcfh//wBi3p3/AKSx121cT+zR /wAm4/D/AP7FvTv/AEljrtq4cr/3Oj/hj+SO/Nf99rf45fmwoooruOA/Mb/g7p/5Qz+I/wDsZ9H/ APR5r+Tyv6w/+Dun/lDP4j/7GfR//R5r+TyurEfBT/w/+3SOah8dT/F/7bEKKKK5TpCv6w/+DRb/ AJQz+HP+xn1j/wBHiv5PK/rD/wCDRb/lDP4c/wCxn1j/ANHiurD/AMOr/hX/AKVE5q/x0/8AF/7b I+g/2yv+Tjm/7Fuw/wDSq/rzWvSv2yv+Tjm/7Fuw/wDSq/rzWvHy7+E/8U//AEuR7OZfxo/4Kf8A 6REKKKK7jzwr7K/Zo/5Nx+H/AP2Lenf+ksdfGtfZX7NH/JuPw/8A+xb07/0ljrhqf75T/wAM/wA4 HfT/ANyqf44flUO2oooruOAKKKKACiiigAoqO7tlvbSWBzIqTIUYxyNG4BGOGUhlPuCCO1fnT4eg 8Qfs7/8ABPT9vQfDbUPFj+JfCniXxRLoF5c6te63rEU8fh7T2icXN089zNKhAKl3dvlUAgAYAP0a or4o+BHwf8Cfs2f8FIfh9oHwT0Dw94b8DeMPhHq2s+I4dAs4re01eSDUdITStRuWjAE1y6XOoKsz lpJFaYkttyv2vQAUVSvp9RjnItrSymix96W6aNs/QRt/Ooftes/8+Gmf+B7/APxmgDTorM+16z/z 4aZ/4Hv/APGaPtes/wDPhpn/AIHv/wDGaANOisz7XrP/AD4aZ/4Hv/8AGaPtes/8+Gmf+B7/APxm gDTorM+16z/z4aZ/4Hv/APGaPtes/wDPhpn/AIHv/wDGaANOisz7XrP/AD4aZ/4Hv/8AGaPtes/8 +Gmf+B7/APxmgDTorM+16z/z4aZ/4Hv/APGaPtes/wDPhpn/AIHv/wDGaANOisz7XrP/AD4aZ/4H v/8AGaPtes/8+Gmf+B7/APxmgDTorM+16z/z4aZ/4Hv/APGaPtes/wDPhpn/AIHv/wDGaANOisz7 XrP/AD4aZ/4Hv/8AGaPtes/8+Gmf+B7/APxmgDTorM+16z/z4aZ/4Hv/APGaPtes/wDPhpn/AIHv /wDGaANOisz7XrP/AD4aZ/4Hv/8AGaPtes/8+Gmf+B7/APxmgDTr4p/aB/5OP8ef9f8Aa/8Apts6 +w/tes/8+Gmf+B7/APxmvjf46PO/7Q3jo3EcUUxv7XcschkUf8S6zxgkKTx7CuHF/wAWh/if/pEz 0MH/AAa/+Bf+lwOaoooruPPCsnx9/wAiJrf/AF4T/wDotq1qyfH3/Iia3/14T/8Aotq4c0/3Ot/h l+TPQyn/AH6j/jj+aP0WorM+16z/AM+Gmf8Age//AMZo+16z/wA+Gmf+B7//ABmu48806KzPtes/ 8+Gmf+B7/wDxmj7XrP8Az4aZ/wCB7/8AxmgDToqnp8+oSTEXdrZwxheGiuWlYnPTBjXjrzn8KuUA FFFFABRRWfPc6ssziKy054wx2s166sRngkCI4Ptk/WgD45/aB/5OP8ef9f8Aa/8Apts65Wul+Ojz v+0N46NxHFFMb+13LHIZFH/Eus8YJCk8ewrmq4cu/hP/ABT/APS5HoZl/Gj/AIKf/pEQoooruPPC vsr9mj/k3H4f/wDYt6d/6Sx18a19c/s3XOrL+zv4BEVlpzxjw5p+1mvXViPs0eCQIjg+2T9a4an+ +U/8M/zgd9P/AHKp/jh+VQ9HorM+16z/AM+Gmf8Age//AMZo+16z/wA+Gmf+B7//ABmu44DTr8xv +Dun/lDP4j/7GfR//R5r9Jvtes/8+Gmf+B7/APxmvzN/4O2Z9Qk/4I2+JBd2tnDGPEuj4aK5aVif tHTBjXjrzn8K6sJ8b/wy/wDSWc2L+Bf4o/8ApSP5SKKKK5TpCiiigD+sP/g0W/5Qz+HP+xn1j/0e K+g/2yv+Tjm/7Fuw/wDSq/r5w/4NJp9Qj/4I2+GxaWtnNGfEusZaW5aJgftHTAjbjpzn8K+iP2up LqT9oiQ3cMEMg8OWOFimMqkfab/nJVeevGPxrPN/95oesf8A00zfKP8AdsR6P/07E88ooorQwCii igD7K/Zo/wCTcfh//wBi3p3/AKSx121ecfs3XOrL+zv4BEVlpzxjw5p+1mvXViPs0eCQIjg+2T9a 7T7XrP8Az4aZ/wCB7/8AxmuHK/8Ac6P+GP5I781/32t/jl+bNOisz7XrP/Phpn/ge/8A8Zo+16z/ AM+Gmf8Age//AMZruOA/Nn/g7p/5Qz+I/wDsZ9H/APR5r+Tyv6t/+DtmfUJP+CNviQXdrZwxjxLo +GiuWlYn7R0wY14685/Cv5SK6sR8FP8Aw/8At0jmofHU/wAX/tsQooorlOkK/rD/AODRb/lDP4c/ 7GfWP/R4r+Tyv6t/+DSafUI/+CNvhsWlrZzRnxLrGWluWiYH7R0wI246c5/CurD/AMOr/hX/AKVE 5q/x0/8AF/7bI+j/ANsr/k45v+xbsP8A0qv681r0P9rqS6k/aIkN3DBDIPDljhYpjKpH2m/5yVXn rxj8a88rx8u/hP8AxT/9LkezmX8aP+Cn/wCkRCiiiu488K+yv2aP+Tcfh/8A9i3p3/pLHXxrX1z+ zdc6sv7O/gERWWnPGPDmn7Wa9dWI+zR4JAiOD7ZP1rhqf75T/wAM/wA4HfT/ANyqf44flUPR6KzP tes/8+Gmf+B7/wDxmrti9xJADcxQwy5+7FKZFx9Sq/yruOAmooooAKKKKAI7u0i1C0lt7iKOeCdD HJHIoZJFIwVIPBBHGDXm/wAEv2LPg5+zR4gu9W+HHwl+Gfw/1W/t/slze+G/C9jpVxcQ7lfynkgi RmTcqttJIyoOMgV6ZRQBw/wY/Zj+Gv7OH9rf8K7+HngbwF/b0qT6n/wjug2ul/2jIm7a83kInmMu 98Fskbm9TXcUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAV8 U/tA/wDJx/jz/r/tf/TbZ19rV8U/tA/8nH+PP+v+1/8ATbZ1w4v+LQ/xP/0iZ6GD/g1/8C/9Lgcr RRRXceeFZPj7/kRNb/68J/8A0W1a1ZPj7/kRNb/68J//AEW1cOaf7nW/wy/JnoZT/v1H/HH80fot RRRXceeFFFFABRRRQAUUUUAFFFFAHxT+0D/ycf48/wCv+1/9NtnXK11X7QP/ACcf48/6/wC1/wDT bZ1ytcOXfwn/AIp/+lyPQzL+NH/BT/8ASIhRRRXceeFfZX7NH/JuPw//AOxb07/0ljr41r7K/Zo/ 5Nx+H/8A2Lenf+ksdcNT/fKf+Gf5wO+n/uVT/HD8qh21FFFdxwBX5jf8HdP/AChn8R/9jPo//o81 +nNfmN/wd0/8oZ/Ef/Yz6P8A+jzXVhPjf+GX/pLObF/Av8Uf/SkfyeUUUVynSFFFFAH9Yf8AwaLf 8oZ/Dn/Yz6x/6PFfQf7ZX/Jxzf8AYt2H/pVf18+f8Gi3/KGfw5/2M+sf+jxX0H+2V/ycc3/Yt2H/ AKVX9Z5v/vND1j/6aZvlH+7Yj0f/AKdiea0UUVoYBRRRQB9lfs0f8m4/D/8A7FvTv/SWOu2rif2a P+Tcfh//ANi3p3/pLHXbVw5X/udH/DH8kd+a/wC+1v8AHL82FFFFdxwH5jf8HdP/AChn8R/9jPo/ /o81/J5X9Yf/AAd0/wDKGfxH/wBjPo//AKPNfyeV1Yj4Kf8Ah/8AbpHNQ+Op/i/9tiFFFFcp0hX9 Yf8AwaLf8oZ/Dn/Yz6x/6PFfyeV/WH/waLf8oZ/Dn/Yz6x/6PFdWH/h1f8K/9Kic1f46f+L/ANtk fQf7ZX/Jxzf9i3Yf+lV/Xmtelftlf8nHN/2Ldh/6VX9ea14+Xfwn/in/AOlyPZzL+NH/AAU//SIh RRRXceeFfZX7NH/JuPw//wCxb07/ANJY6+Na+yv2aP8Ak3H4f/8AYt6d/wCksdcNT/fKf+Gf5wO+ n/uVT/HD8qh21FFFdxwBRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUU UAFFFFABRRRQAUUUUAFFFFABXxT+0D/ycf48/wCv+1/9NtnX2tXxT+0D/wAnH+PP+v8Atf8A022d cOL/AItD/E//AEiZ6GD/AINf/Av/AEuBytFFFdx54Vk+Pv8AkRNb/wCvCf8A9FtWtWT4+/5ETW/+ vCf/ANFtXDmn+51v8MvyZ6GU/wC/Uf8AHH80fotRRRXceeFFFFAHwN/wXv8A+Cv/AIm/4I+fCPwB 4p8O+D9C8ZHxfq9xpVxbajcy2/kbIRKsiPHn0YEEc5ByMYP5gf8AEb58TP8AohXgX/wd3f8A8RX0 B/we7f8AJpPwT/7G67/9IjX83dd86zp06ailqr6xT+011T7HDCkqlSo5N6O2ja+yn0fmfuJ/xG+f Ez/ohXgX/wAHd3/8RR/xG+fEz/ohXgX/AMHd3/8AEV+HdFZfXKnaP/gMf8jX6pDvL/wKX+Z+4n/E b58TP+iFeBf/AAd3f/xFfsP/AMEW/wDgohrn/BUT9h+w+LWv+HtK8LXuo6xe6eunafLJNFFHbuqA l35ZmO49AACBjjJ/i0r+sP8A4NFv+UM/hz/sZ9Y/9HitI1XVp1OdLRXVkl9qK6JdGZypqnUhyt6u zu2/st9W+x7H+0D/AMnH+PP+v+1/9NtnXK11X7QP/Jx/jz/r/tf/AE22dcrXh5d/Cf8Ain/6XI93 Mv40f8FP/wBIiFFFFdx54V9lfs0f8m4/D/8A7FvTv/SWOvjWvsr9mj/k3H4f/wDYt6d/6Sx1w1P9 8p/4Z/nA76f+5VP8cPyqHbUUUV3HAFfmN/wd0/8AKGfxH/2M+j/+jzX6c1+Y3/B3T/yhn8R/9jPo /wD6PNdWE+N/4Zf+ks5sX8C/xR/9KR/J5RRRXKdIUUUUAf1h/wDBot/yhn8Of9jPrH/o8V9B/tlf 8nHN/wBi3Yf+lV/Xz5/waLf8oZ/Dn/Yz6x/6PFfQf7ZX/Jxzf9i3Yf8ApVf1nm/+80PWP/ppm+Uf 7tiPR/8Ap2J5rRRRWhgFFFFAH2V+zR/ybj8P/wDsW9O/9JY67auJ/Zo/5Nx+H/8A2Lenf+ksddtX Dlf+50f8MfyR35r/AL7W/wAcvzYUUUV3HAfmN/wd0/8AKGfxH/2M+j/+jzX8nlf1h/8AB3T/AMoZ /Ef/AGM+j/8Ao81/J5XViPgp/wCH/wBukc1D46n+L/22IUUUVynSFf1h/wDBot/yhn8Of9jPrH/o 8V/J5X9Yf/Bot/yhn8Of9jPrH/o8V1Yf+HV/wr/0qJzV/jp/4v8A22R9B/tlf8nHN/2Ldh/6VX9e a16V+2V/ycc3/Yt2H/pVf15rXj5d/Cf+Kf8A6XI9nMv40f8ABT/9IiFFFFdx54V9lfs0f8m4/D// ALFvTv8A0ljr41r7K/Zo/wCTcfh//wBi3p3/AKSx1w1P98p/4Z/nA76f+5VP8cPyqHbUUUV3HAFF FFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFfkx/wAHZv7a /wAV/wBiH9nb4S678J/HWu+BtV1jxHdWF7Pp0ir9qh+y7wjqwKnDKCDjI5wQCc7UKSqT5W7KzffZ N+XYxr1XCHMld3S7btLz7n6z0V/GR/xEC/tmf9HB+Ov++oP/AI3R/wARAv7Zn/Rwfjr/AL6g/wDj dacmH/nl/wCAr/5IjnxH8sf/AAJ//In9m9Ffxkf8RAv7Zn/Rwfjr/vqD/wCN0f8AEQL+2Z/0cH46 /wC+oP8A43RyYf8Anl/4Cv8A5IOfEfyx/wDAn/8AIn9m9fFP7QP/ACcf48/6/wC1/wDTbZ13v/BG v4reJPjn/wAEvPgp4w8X6zfeIfE/iPw5HfalqN5Jvnu5ndyzsf5AYAAAAAAFcF+0D/ycf48/6/7X /wBNtnXl5lT9niaVO97Ta+6Ez1Msqe0w1apa14J/fOBytFFFdRyBWT4+/wCRE1v/AK8J/wD0W1a1 ZPj7/kRNb/68J/8A0W1cOaf7nW/wy/JnoZT/AL9R/wAcfzR+i1FFFdx54UUUUAfiP/we7f8AJpPw T/7G67/9IjX83df0if8AB7t/yaT8E/8Asbrv/wBIjX83ddWI+Cn/AIf/AG6RzUPjqf4v/bYhRRRX KdIV/WH/AMGi3/KGfw5/2M+sf+jxX8nlf1h/8Gi3/KGfw5/2M+sf+jxXVh/4dX/Cv/SonNX+On/i /wDbZHsf7QP/ACcf48/6/wC1/wDTbZ1ytdV+0D/ycf48/wCv+1/9NtnXK14+Xfwn/in/AOlyPZzL +NH/AAU//SIhRRRXceeFfZX7NH/JuPw//wCxb07/ANJY6+Na+yv2aP8Ak3H4f/8AYt6d/wCksdcN T/fKf+Gf5wO+n/uVT/HD8qh21FFFdxwBX5jf8HdP/KGfxH/2M+j/APo81+nNfmN/wd0/8oZ/Ef8A 2M+j/wDo811YT43/AIZf+ks5sX8C/wAUf/SkfyeUUUVynSFFFFAH9Yf/AAaLf8oZ/Dn/AGM+sf8A o8V9B/tlf8nHN/2Ldh/6VX9fPn/Bot/yhn8Of9jPrH/o8V9B/tlf8nHN/wBi3Yf+lV/Web/7zQ9Y /wDppm+Uf7tiPR/+nYnmtFFFaGAUUUUAfZX7NH/JuPw//wCxb07/ANJY67auJ/Zo/wCTcfh//wBi 3p3/AKSx121cOV/7nR/wx/JHfmv++1v8cvzYUUUV3HAfmN/wd0/8oZ/Ef/Yz6P8A+jzX8nlf1h/8 HdP/AChn8R/9jPo//o81/J5XViPgp/4f/bpHNQ+Op/i/9tiFFFFcp0hX9Yf/AAaLf8oZ/Dn/AGM+ sf8Ao8V/J5X9Yf8AwaLf8oZ/Dn/Yz6x/6PFdWH/h1f8ACv8A0qJzV/jp/wCL/wBtkfQf7ZX/ACcc 3/Yt2H/pVf15rXpX7ZX/ACcc3/Yt2H/pVf15rXj5d/Cf+Kf/AKXI9nMv40f8FP8A9IiFFFFdx54V 9lfs0f8AJuPw/wD+xb07/wBJY6+Na+yv2aP+Tcfh/wD9i3p3/pLHXDU/3yn/AIZ/nA76f+5VP8cP yqHbUUUV3HAFFFFABRRRQAV5v+2P8dZ/2Xv2Rvil8S7XT49Wuvh94S1XxJBYyMyR3klnZy3CxMyg lVZowpYA7QSe1ekVk+PvAmj/ABS8C614Y8Rada6x4f8AEdhPpep2Fym+G9tZ42ilhcd1dGZSO4Jo A+Y/g344+JXwM/bD+G/w/wDGnxJ1j4o2Hxc8Dav4hlk1PS9MsB4e1LS5tLEiWQsrWBvsk6aqw2XL XEqfZocS8yF/rKvD/gB+w1pvwP8AiVbeLNS8d+P/AIj6zouhHwx4el8VS6fIfDWmPJFJNb27Wlpb vKZmt7XzJrpp5m+yx/vBmQv7hQBSvtfg0+cxSR3rMBnMVnNKv5qpH61D/wAJba/88dT/APBbcf8A xFadFAHzF/wUS/aS/aB+DHhDw3efs7fBi1+MmrXl5LDrGn6jejRvsEAQGOZJJ3jVssCpUbjyDwAc /KH/AA8b/wCClv8A0Yl4Y/8AC8sf/kmv1MorphipRiopLT+6m/vaZzyw0ZScm3r/AHmvyaPyz/4e N/8ABS3/AKMS8Mf+F5Y//JNH/Dxv/gpb/wBGJeGP/C8sf/kmv1Mop/XKnaP/AIDH/IX1SHeX/gUv 8z8s/wDh43/wUt/6MS8Mf+F5Y/8AyTX37+zB8VvGfjf4BeF9X+KPhKXwX4/1Cz87WtCs4ZbyDSpy zfuVmTekm1duWViCckY6D0+ioqYiU48skvkkn+CRVPDxhLmTfzba/Fs8q8a/G3xzpHiq8tND+Gs2 taVAUEF/Pqclm1zmNWYiL7M5UKxZOTklCcYIzl/8L9+J/wD0SKP/AMH8n/yHXtNFeXLC1W21Wkr+ UNPL4Onnr3bPVji6SSToRdut56+fx9d9LLskeLf8L9+J/wD0SKP/AMH8n/yHR/wv34n/APRIo/8A wfyf/Ide00UvqlX/AJ/y+6H/AMgV9cpf8+IffP8A+TPFJv2gfifDC7j4P+aUBIRNffc/sM2gGT7k D3Fesf8ACW2v/PHU/wDwW3H/AMRWnRW1CjODblUcr9+XT0tFb+d9tLa3wr14VElCmoW7c2vrzSe3 lbfW+lsz/hLbX/njqf8A4Lbj/wCIo/4S21/546n/AOC24/8AiK06K6DmMz/hLbX/AJ46n/4Lbj/4 ivy1/wCDpj9hH4uf8FHP2d/hdoXwY8Ean4y1Xw54juL/AFGDzYdO+zwtbFFfddvErZbjCkn2xX6u 0VpTqODuuzX3pr9TOpTU1Z90/ud/0P47/wDiGe/bi/6IPqf/AIUWj/8AyXR/xDPftxf9EH1P/wAK LR//AJLr+xCiszQ/jv8A+IZ79uL/AKIPqf8A4UWj/wDyXR/xDPftxf8ARB9T/wDCi0f/AOS6/sQo oA+Yf+CR/wANfEP7MX/BNb4NfD/xzoup6H4u8KeHIbDVbD7O1z9lmVmJTzIQ8b9RyjEe9ZPxh+EX ijxT8a/Fur2Gg6nPp2p3dvLbS+QyeYq2NtEx2thhh43HIHTPQg19aUVOJj7eqq091Jy07tNfdqy8 NN0KTow2cVHXsmn9+iPiz/hRHjH/AKF3U/8Av1R/wojxj/0Lup/9+q+06Kog+LP+FEeMf+hd1P8A 79VneL/2efG2qeE9UtYPDWpyT3NpLFGvlgbmZCAMk4HJ719yUVliKKq0pUpbSTX3qxth68qNWNaO 8Wmvk7mZ/wAJba/88dT/APBbcf8AxFH/AAltr/zx1P8A8Ftx/wDEVp0VqYmZ/wAJba/88dT/APBb cf8AxFH/AAltr/zx1P8A8Ftx/wDEVp0UAflF/wAHTH7CPxc/4KOfs7/C7Qvgx4I1PxlqvhzxHcX+ owebDp32eFrYor7rt4lbLcYUk+2K/Ez/AIhnv24v+iD6n/4UWj//ACXX9iFFaTqOSin0Vvxb/Uzh TUXJrq7/AIJfofx3/wDEM9+3F/0QfU//AAotH/8Akuj/AIhnv24v+iD6n/4UWj//ACXX9iFFZmh/ Hf8A8Qz37cX/AEQfU/8AwotH/wDkuv6E/wDg3Q/Zj8ffsI/8EzdF+HvxW8Lan4V8X2mu6leS2G1b 7ZFNMGjbzLYyRnI5wGyO4FfftFaQquKlFfaVvxT/AEM501Jxb6O/4NfqfJfxh+EXijxT8a/Fur2G g6nPp2p3dvLbS+QyeYq2NtEx2thhh43HIHTPQg1gf8KI8Y/9C7qf/fqvtOiuajRVKLjHu397bf4s 6q9eVWSlLokv/AUkvwR8Wf8ACiPGP/Qu6n/36o/4UR4x/wChd1P/AL9V9p0VqYnxZ/wojxj/ANC7 qf8A36r6X+B10/g/4KeD9I1Kz1O21HStEsrO6i+wTv5UscCI67lQqcMCMgkHsa7yispUU6qq9Umv vaf6I2jXkqUqXRtP7k0vzZmf8Jba/wDPHU//AAW3H/xFH/CW2v8Azx1P/wAFtx/8RWnRWpiZn/CW 2v8Azx1P/wAFtx/8RXwr/wAHF/7Mfj79u7/gmbrXw9+FPhbU/FXi+713TbyKw2rY74oZi0jeZcmO MYHOC2T2Br79orSnUcHddmvvTX6mdSmpqz7p/c7/AKH8d/8AxDPftxf9EH1P/wAKLR//AJLo/wCI Z79uL/og+p/+FFo//wAl1/YhRWZofx3/APEM9+3F/wBEH1P/AMKLR/8A5Lo/4hnv24v+iD6n/wCF Fo//AMl1/YhRQB8Bf8G6H7Mfj79hH/gmbovw9+K3hbU/Cvi+013UryWw2rfbIppg0beZbGSM5HOA 2R3Ar2H9pf4b+IPiD8a21fR9F1O8046JaWfm/Z3j/epPduy7WAbhZUOcYO7rwcfTlFTiY+2nCpLe NrW8ouOvyf3l4abownTjtO97+clLT5r7j4s/4UR4x/6F3U/+/VH/AAojxj/0Lup/9+q+06Kog+LP +FEeMf8AoXdT/wC/VH/CiPGP/Qu6n/36r7TooA4P4HXT+D/gp4P0jUrPU7bUdK0Sys7qL7BO/lSx wIjruVCpwwIyCQexrqf+Ettf+eOp/wDgtuP/AIitOissPRVKlGlHaKS+5WNsRXlWqyqy3k2383cz P+Ettf8Anjqf/gtuP/iKP+Ettf8Anjqf/gtuP/iK06K1MT4C/wCDi/8AZj8fft3f8Ezda+Hvwp8L an4q8X3eu6beRWG1bHfFDMWkbzLkxxjA5wWyewNfz2f8Qz37cX/RB9T/APCi0f8A+S6/sQorSdRy UU+it+Lf6mcKai5NdXf8Ev0P47/+IZ79uL/og+p/+FFo/wD8l0f8Qz37cX/RB9T/APCi0f8A+S6/ sQorM0P47/8AiGe/bi/6IPqf/hRaP/8AJdf0J/8ABuh+zH4+/YR/4Jm6L8Pfit4W1Pwr4vtNd1K8 lsNq32yKaYNG3mWxkjORzgNkdwK+/aK0hVcVKK+0rfin+hnOmpOLfR3/AAa/U+Y/2l/hv4g+IPxr bV9H0XU7zTjolpZ+b9neP96k927LtYBuFlQ5xg7uvBxxH/CiPGP/AELup/8AfqvtOiuajRVKLjHu 397bf4s6q9eVWSlLokv/AAFJL8EfFn/CiPGP/Qu6n/36o/4UR4x/6F3U/wDv1X2nRWpifFn/AAoj xj/0Lup/9+q+l/gddP4P+Cng/SNSs9TttR0rRLKzuovsE7+VLHAiOu5UKnDAjIJB7Gu8orKVFOqq vVJr72n+iNo15KlKl0bT+5NL82Zn/CW2v/PHU/8AwW3H/wARV2xvk1CASxrMqk4xLC8TfkwB/Spq K1MQooooAKKKKACiiigAooooAKKKKACiiigAooooA+a/2ndQ+IfxR/aAu/APgz4oar8KLPQfA8vi eS/0bStN1DUdRvZbl4LdHGoW9xELSIQStIiRrLI0sWJowjLJmah+0543+NH7D37PviXSb23+HXiv 48L4bXUL2G2jupPDa39j9uuxax3KvG04SOSGIzpIiO6O8coUxt6r+0L+xl8PP2o9U02/8YaXrEuo 6VZ3Omw3mkeItS0K6ksrkxNcWc0thPC89rK0MLPbyl4mMakoSAaseNf2RPAPxC+HmqeFNW0nUZ/D +qXtlqKWkWt39uNHuLMW/wBkk05o5lbTTC1rC8YsjCEkUyAB3dmAPj/4a/E344/G34+/GH4Ir8bv E/hhvgc121t4yt/D2hy694ua5tbG8sjdRS2LWKwWou54JBbW0LzGKBvMiIkWT7F/ZA+Muo/tF/sl /C74havpsWjat478I6T4hvbCLd5djPd2UVxJCu75sI0hUbucDnmuE1n/AIJffBbXPDmmabN4e8Rw tpiX8TajaeM9btNX1OO/kjkvYr7UIrtbu/ineGEyR3csqN5MeQQi4930bRrPw7pFpp+n2ltYafYQ pb21tbxLFDbxIoVI0RQAqqoAAAAAAAoAs0UUUAFFFFABRRRQAUUUUAFFFFABXzB/wUU1r4veG9X8 H6j4Af4vReDLCw1e58Uv8OI/CUmsLKgtGsyy+IgYmhCC93C3BkLeXwRX0/Xm37QH7J/hD9pxLSPx ZP43NraQy2xtNF8b61oFpeRS4EkdzBYXcEd0pAxidXG0sBwzAgHGftCfHHUfEX7Nnw/1P4a+Ll0w fFXVdD03TfFU1hG9xbWN+yO15FbzxiP7S1vu8pZoiiSyIXidVMTfPPws+Ifxt+Nv7XfxR/Z6X44+ JvD0Hwfnmlj8cW+gaFL4i8S/adO0e9tYbiKSxbT1itTqcySeRaxSShLU74j5nm/Xfjb9kvwF8RPh /rfhTV9Ivbnw5rs1lcNYJrF7BDpclmsC2j6eI5l/s0wm2gkQ2Xk7ZU80YlZnPB6v/wAEuPgrrXhO w0mTQfFMD2El/IdXtPHGu2mv3/28xm8W71WK8W/vEmENuGS4nkUrbW642wxhQDr/ANhf456p+09+ xZ8JfiRrdlb6drHj3wfpXiC9trcMIYprq0imcRhudmXJXOeCOT1r1Sqfh3w7p/hDw/YaTpNhZ6Xp Wl28dpZWVpCsFvaQxqEjijjUBURVAUKoAAAAGKuUAFFFFABRRRQAUUUUAFFFFABRRRQB8UfGT9pf 4t/BH48ftF6VJ4y0DVoPD/w60DxN4Tt7jQktdN8PXOo6xr1ijShZGnuAkNnZNKXnCyPFK0a26yCN PSv2XfEfjnwD+1r8RvhH4r8eeIPihp+g+FPD3i/T9e1zT9Ns9Qtm1G51ezlsmGn2ttbvEG0kSxsY hIDPIrM4VcbWs/8ABOL4S+Jvix4t8aavpXivW9Z8d6XNoevw6p421y+0vVNPkFwDZSafNdtZ/Zk+ 13JjhEISFp3aNUY5rb+F37E3w/8Ag34b1jTdAh8Xwv4gvbK+1HU7zxprWoa1dtZvG1tC2o3F3Jef ZkMeBbed5BWWdTGVnmDgHzFF+1H8Vvh3/wAKz+Kuo+O7rxXonxW8U+ItAm8DLpmnwaNoNta6Xrmo 2kttcR24vjcRroqRzGe4ljc3NwyxxBY1Ttv2WfiV8UPC37Q/wq0Pxl8R7/4l2Hxo+G2qeNLuKbSd OsbPwxfWM+jAppxtbeOU2cq6yUC3ctxKotoT5zFn3eweBf2DvhZ8N/jDdeOtI8O3sWuXE9/dxwT6 5qF1pGn3F85e9ubTTZZ2srSedmk8ya3gjkfzpwzETSB5f2eP2Gvhl+yvr1zqXgnQ9SsLqawTSbcX 2v6jq0Wj2COXWx0+K7nlTT7TdtJt7RYoj5UIKERRhQD1qiiigAooooAKKKKACiiigAooooAK+XdW 8dfF23/as+NPg6y8V22tSR/DS38Q+D9MttItbKHSr+e81aCAb5S7SyEW1sHeaXyWZCyxQqxWvqKv FNY/4J+fDjW/jXrfxElm+JcHi3xDYy6Ze3dp8S/EtpEbWRJk8mO3iv1ghSP7RM8QijXyZX82LZIA 4AOU/wCCefxb8Q+Ibjxf4J8fat8Yp/iR4Wg03VNU034hWvhlLqztL1J0t5rWXw8gs5LeWazvFAkd p1aBt6orRl/LdC/aN+Knh/WPAnxUv/H914g8N/ED4geIfClx4Cj0zT49I0nT7SHWTayW10luL4Xi HSYmmeaeWJ2muQsMQ8vyvpP4ZfsYeA/hD4f16w0SPxgs3ie7trzVNWv/ABprWpa5eNbFDBG2pXN1 JeiBNpAgEwiAlmGzE0oet4P/AGEfhb4D+OUvxF0vw/fQ+JXv73VoUl13ULjStPv70Mt5e2umyTtZ Wt1OJJhJcQQJLJ9ouNznzpd4B4r+yD8UvipafFb4MyeMfiVdfEPTfjn8Pb/xdfae2j6fZ2Hhe+hO lzIumSW0EcxsimoyRbLyS5lIjgbzgfMEn2RXkP7P37CPwt/Ze8Vza14K8P32nXxsG0mzF3ruoanb 6JYNKszWWnQXU8sWnWrSJETb2iwxHyIAUIijC+vUAFFFFABRRRQAUUUUAFFFFABRRRQB8Rfta/G7 4s/s0fE/xvrHhn4mt4yTSfB+ua/qvh3WNG0+Dw34JViq6HL5kESX5laRHDpPdyLcJDeuq24EQj9S /Zk1Lx98NP2qvGnwu8XfETXvipptl4S0bxTY6zrel6bY6hZT3N1qNrcWx/s+2toHgb7FHJGGi8xC 0oaSQFfL1dP/AOCbXwk07xv4v10ab4yum8f3Wo3niTSbzx3r13oGuSahA1vd/aNJlvWsJFeF/LCN AVjVIwgTy027Xwn/AGG/h18EdB1ux8O2vi2CbxG9kdR1S88Z61qGs3Edm261t/7RuLqS8W2iJk22 6zCECecbMTShwD5z0L9o34qeH9Y8CfFS/wDH914g8N/ED4geIfClx4Cj0zT49I0nT7SHWTayW10l uL4XiHSYmmeaeWJ2muQsMQ8vyug/ZB+KXxUtPit8GZPGPxKuviHpvxz+Ht/4uvtPbR9Ps7DwvfQn S5kXTJLaCOY2RTUZItl5JcykRwN5wPmCT2rwf+wj8LfAfxyl+Iul+H76HxK9/e6tCkuu6hcaVp9/ ehlvL2102SdrK1upxJMJLiCBJZPtFxuc+dLvP2fv2Efhb+y94rm1rwV4fvtOvjYNpNmLvXdQ1O30 SwaVZmstOgup5YtOtWkSIm3tFhiPkQAoRFGFAPXqKKKACiiigAooooAKKKKACiiigAooooAKKKKA CiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACs/xZ4s0rwF4 V1PXdd1PT9F0TRbSW/1DUL+4S2tLC3iQvLNLK5CRxoiszOxAUAkkAVoV4B/wVi/5RZftLf8AZKvF H/pouqAL3hn/AIKefs1eNfEmn6No37Q3wN1fWNXuY7KxsbLx5pVxc3s8jhI4oo0nLPI7MFVVBJJA AJNet+O/H2hfC3wfqPiLxPrWk+HPD+jwtc3+p6peR2dnZRL1kllkIRFHdmIAr+Wr9mz4ZaV+1r/w Q+0r4PfDz9jL4keNfj34k17y9M+LVn4AtYdGhA1gSsr6+WDBVt1e2YTFYkLHcwCA192/8HE/x11L 9kP/AIJIfs7fsr+L/HNunjHx/baJovjTxFJFc3oi0zS4rcXl4dn72TN0LduQzypHMNpZiVAP2V+D /wAcfBX7Qvg5fEXgDxh4W8c+H3me3XU/D+qwanZtKmN8YmgZk3LkZGcjIzWF8cP2wvhH+zJqGn2f xJ+KXw5+Ht3q0bTWUPiXxLZaTJeIpAZ41uJELqpIBK5AJFfjf/wa1ftZ/Dn4X/t0/tFfs4fDfxjJ 4o+E2u6nJ40+G93NaXFs80abI7iJhcJHKZhbG0Vi6Lu+wyOAA3N//g3A/Zg+HP8AwUe8X/tMfGv9 onwT4Z+JPxpvvHs2l6npfi+yh1mPw7bGOORI47W4DpFiQSW6NtykdkI4yih1IB+wfjX9rz4TfDb4 T6L498R/FD4d6B4F8RvFHpPiLUvEdnaaTqjSxvLEsF1JIIpS8ccjqEY7lRiMgE1J8Zv2svhX+zjp ek33xD+Jnw/8B2Wv7v7MuPEXiKz0uLUdoVm8lp5EEmA6E7ScB1PcV+MP/B0P+yf8Mf2Mf+COuh+D PhPbW+meGz8d4dTuNJgu1nh0W8uNF1OSW2QfeiTBSRYmJKiUYwmxRU/4JHePdO/4KP8A/Ba3W9W/ apj1Hw98Yfg7plvJ8LPhfqkCrpOhWsUcUq3UUjN/pV/HG0VxkxqW3faUysKLbAH7F/FH/goL8BPg d4xn8O+Nfjf8IfB/iC2jjlm0zW/GOnafeRJIgeNmhmmVwrIyspIwQQRkGq5/4KN/s9D4eL4vPx4+ DI8JtqJ0ca1/wmum/wBnG9EQlNr9o87y/OERD+Xu3bSGxjmvxV/bX0TV/EH/AAdU/Ea30X9nTwr+ 1FenwXYt/wAIT4g1LTdPs2UaZZZu/N1COSDdFxgbdx3nBHNfql+xt+yF4L+Nv7MMmk/F79if4M/B JYvEM1/F4E+yaD4l055BBHGup7rW3W3EzoWizs8wLEATtIFAHo2mf8FTv2Ydb1K3srL9o74DXl5e SrDBBD4/0mSWaRiFVFUT5ZiSAAOSTXtniLxFp/hDw/f6tq1/Z6XpWl28l3e3t3MsFvaQxqXklkkY hURVBYsxAABJOK/DL/g2N/Y9+Efxd/aA/bBbxZ8LPhz4obwX8Q4IfD51bw1ZXp0JFudSwlp5sbeQ o8uPAj2geWv90Y/Xf/goh/yj/wDjn/2T7X//AE23FAGF/wAPYv2WP+jlv2f/APw4ekf/ACRXV/GH 9un4I/s8eJrfRPiB8Y/hX4G1m6tEv4bDxB4ssNMuprd2ZUmWOeVWMbMjgOBglWAPBr8Hf+CEPw98 VeKf2DvDUmn/APBNv4S/tHaRPrV7G/xB1/xJ4Zs72YfaCHjaC+tpLgrByoy2GA+XArtf+C4Pifwh 8O/+Dmr4Iap42+FusfGPwfpnw5ie/wDBej+GoPEN1q8YGuBRHYTERzCJtsxDEBFhZ/4RQB+5vwS/ aQ+Hf7S+gXerfDjx74L+IGlWFx9kurzw3rdtq1vbTbQ/lO8DuqvtZW2kg4YHGDXmn/D2L9lj/o5b 9n//AMOHpH/yRX5i/wDBtpovhz9p7/gqH+01+0l8HdH034X/AAI1Cyt/C2meArdra0uFuWSylW6l sLd3jt0H2a4dSPkL3cqRMwjmA/L79gn9qP4EfAH/AIJMfHHSPih+zpqnxC8aeNNQvdG8H+PZfB9n daXoF9NpaC3tzqsrrPbzRur3PkwZYqNwxuJAB/Xpp2pW+safb3lncQ3VpdRrNDNC4kjmRhlXVhwy kEEEcEGvKfhx+3/8B/jH8RbXwf4Q+Nnwj8VeLb5pUttE0fxhp19qNw0SPJKqW8UzSMUSN2YBTtVG JwATX4i/8FD/AA58Uv2Ev+DV/wDZ7+Ht54xE9t4/1u1g8Tavo99/aVra6Nfpe6lBZJcQsUmgCmBW MTtFJ5bIjPG6lvo7/gu9/wAEvP2a/wBlj/girrHi/wCGngfwf4H8U/DH+wr7wl4w0S1jg1u7uPt1 tbo8l9CFmu2limdtzuwD7ZesYIAP1G+OX7W/wp/Zgm0yP4l/E74e/DyTWhI2nr4m8RWekNfiPb5h iFxInmBN6btucb1zjIpvwO/a8+E37Tt3qNv8Nfih8O/iHPo6RyX8fhnxHZ6s9krlgjSi3kcoGKsA WxnacdDX4Bf8Fk/jHqfxa8C/8EpvHfxK0HVPiLqOuaRbat4h0mDSlv73xYHk0J5oktHwlxLdrkCI 4SRpscK2K9U/4Jav4B/bw/4OKx8T/wBnr4fw/s7/AA7+Cng6XTvFnhG50+y8O6prd7Kt7aOr6Xay MoCzTQ+acFUNlEX2SyR5AP3trxn4H/8ABQX4Q/tKftCePPhb4D8Wt4p8ZfDEhPFEVjpN89ho8pfy xBJf+SLMzFw6iFZjITDONv7mXZb/AG/PjFqn7PP7C/xl8e6Ish1rwX4I1nW7AqoYpcW9jNLGxyCM B0UnIOADwelfLf8AwbSfA2y+Ff8AwRy+HmqWdy0/iL4km+8Wa3qssYae8vrm5kVZJCSTIyQxwpuY kt5eeM4AB9e6X+1x8KNc+Nc/w1sfid8PLz4jWrOs3hWDxHZya3EUj81w1mJDMCsfznKcLyeOa6DU vi94T0b4l6b4LvPFHh208Y6zaSX+n6FNqUMep31vGcSTRW5bzJI0P3nVSB3Ir+df4Y/sc+PPgrpP wR8D+Jv2fPHPgz4xfBH4xS/EP4l/HjUPDscXh698O2k1xe3NyfEJPmXSCArJ5b/eMW0AyEpXvnwz /bI+OHi39tTwd8Wvhz4V8B33xr/bZm1XTPhu3xEW6i0jwR8P9CSS5ijdbTbcGa/bN05VmX9xEQre YNoB+z3x++O/hn9mL4NeIfiB4zutQsPCnhS0N/q13Z6Vd6pJZ26kB5jBaxSzGOMHe7qhEcau7lUR mEf7PH7RHgr9rD4LeH/iJ8O/EFn4p8GeKbc3OmanbK6JcIHaNwUdVdHSRHR0dVdHRlYBgQPAf+CR 37fusf8ABRf9nbxhN468N6Lofjv4b+LtS+H/AIutNLZ5tHvb20EfmT2nm5f7PIsoASQlgVYEkYY/ LX/BuBC3wL/aY/bh/Z+0i4SXwD8I/iTHeeGYFnaUafDfvfKbUbicCNLGEHHV/MJ5JoA/VeiiigAo oooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACii igAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAK4/9 oX4KaV+0p8AvHHw51241C00Tx/4fv/DeoT2DpHdw295bSW8rxM6uiyBJGKlkYAgZUjg9hRQB4n/w T3/YO8If8E2P2W9F+EfgXUvEmreG9CuLq5t7nXbiCe+drid53DPDFEhAZyBhBgYzk81zXjb/AIJd fD74k/8ABSHwr+1Br+r+MdW8deB9FbRNA0ma8gGhaXGyTo0yQLAJWmIuZzueVgGcEKCibfpGigD5 g+On/BJ34d/Hb/goZ8N/2m7jXPHHhz4mfDSzXTrM6Le20NhqlsGuMxXcclvI7ho7qeJjG8bGOTbn 5VI86+Pn/BAT4Q/Fn9pPXfi34L8bfGz4AeO/F/mt4l1D4V+Lj4f/AOEikkdJHkuVMUoDM6B28ry1 kkLSOHkJevuSigD4U+M3/BvT8DPjX+wX4d/Z5vta+J2n+E9C8Vf8JtPq9trkU+ua3q7W9xBNc3c9 zBMjGb7TI7iOKMbwCoUZB6f9sv8A4Ik/Cj9s34zfDP4k3ev/ABD+H/xH+FUENtpHifwdqFrZajPH CwaBbgz20ySCNt5XCLxLIrblIUfYlFAHwf8AtKf8EAfAH7SP7YuqfHdfjP8AtGfDz4kaxpttpd1q XgfxTZ6I7wwW8Vvw0dkZB5ixKzqH2FuiqMKPoz9if9jv/hiv4b6n4b/4Wn8ZPi1/aepNqX9qfEjx L/b2pWmYo4/s8U3lx7IB5e8Jg4eRzn5sD2SigD5o/wCCff8AwSu+Hv8AwTd8X/FfWvA2s+M9Vuvj Dra69rKa7d208dtOr3DhbcQwRFUzcvw5c4C88HPufxm+Fun/ABy+D/ivwTq017baV4w0e80S9ltH VLiKG5geGRoyysocK5ILKwBxkEcV0lFAH5tfCP8A4NofBvwA8Fw+G/Af7U/7bPgnw7byPNFpegfE qDTbKN3O53WGGyVAzHkkDJPWvoT4if8ABJn4d/E7/gpF8P8A9qPUtd8cr8Qvhxov9hadZRXtsNJu YfLvI988bW5maQi9lOVmUZVOOCG+oaKAPjz4Rf8ABFD4Yfs6/t9eIf2hPhv4n+IvgDXvF8hfXvDO jXtivhnVw5VpVltZbR5AJJB5pMcqlXZihQEisT9mT/g3++Av7Mv7EnxF/Z/ibxf418AfE2+OpamP E13a3F5a3HkxRJLbSQW8KxvGYY5EbaWVxnJHFfb1FAHyJ+zx/wAEW/hT8D/2Jta/Z21/WvHfxd+D +rMGg0LxvfWtwNHHmNKy2k9nbW00QMpEgO8mN13RlCW3eR+E/wDg2X+CtleeDrDxh8Tv2jPir8Pf Al0t3o/w98Z+Nxf+E7Vo4pIoFWzjt4yqRCQ7VR1BA2PvjZ0b9F6KAPlz9tP/AIJIfDL9uf42/A/x 34n1LxdoWo/ADU11Tw1ZaBcWlrYTOtxaTrHcRyW8jGINZxKFiaMhSwz0I5/4s/8ABFD4YfEH/goD pn7TPh3xP8Rfhd8UrKNI7248IXtjb2WukAozXkFzaTiUyRERvgqGVFJG8b6+w6KAMj4g+BdL+KPg LXPDOuWwvdF8R6fPpl/bklRPbzxtFImRyMozDj1r4b/4IYfs2fHD/gnt4N8Zfs6fEPwc138MPAur 3t98OPH9pq1hNb6xp1zctO1nc2qyi6huVkmeTcYfLYtOu5RHE0/33RQB5P8Ats/sg6H+3d+zrrPw u8Ua94s0Hwx4kkgGrHw9eRWd1qNtFKsrWjyvFIVhlKKsgj2uybl3BWYHzv8AbZ/4JOfDP9tnw98O LefU/HHwv1v4RM6+D/EXw81caFq3h+3eBYJLWCQRuiQvHHEpATIEYCsoLBvpyigD5m+DX7JWmf8A BKP9hTX/AAx8A/AXiD4keIrL7Rq9vp15rNpFqvjLWp9iG6vr25eCEMxWMyycbYoSI43ZUibzf/gh J/wTz8Z/sPfs4eK/Efxbe2m+OPxu8S3XjTxz5MkUy2dzNI7R2oliJSTYHeRipZBLcSqrMoVm+4aK ACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooA /9k= --=_mixed 0056238265257D80_= Content-Type: image/jpeg; name="plot_bw.jpg" Content-Disposition: attachment; filename="plot_bw.jpg" Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAA5AAAAJdCAYAAABETZj6AAAAAXNSR0IArs4c6QAAAARnQU1BAACx jwv8YQUAAAAJcEhZcwAADsIAAA7CARUoSoAAAI5oSURBVHhe7d0HdFTV2vDxJ5BGCj20SJeiIkgR EEFURBEFARFQvPbP+7lUvF4V9BZFr14v2F5d+voqr1iuKCgqoGJBRASVIiBN6aH3Thqh5Muz/c7c mWRy5iSZJDPn/PdaZwUyZ87s/Ts7k3my9352TH5BEQoCCCCAAAIIIIAAAggggAACIQSqIIQAAggg gAACCCCAAAIIIICAEwECSCdKnIMAAggggAACCCCAAAIIICAEkHQCBBBAAAEEEEAAAQQQQAABRwIV HkBmZGRIw4YNZdGiRcVW8IEHHpCUlBTZt2+f75yTJ0/KwIEDJSYmxhydO3eW7Oxsx4870uAkBBBA AAEEEEAAAQQQQACBYgUqLIDUwLF27drSokULOXjwYLEVmjhxojz//PNFHh8zZoxUrVpVNOfPiRMn JD09XUaOHOk7L9Tj9AEEEEAAAQQQQAABBBBAAIGyCVRYANm8eXMTOG7atMkEksGKBo+vvPKKrFy5 MuCc3NxcmTp1qgwfPtw8LTY2VkaPHi2zZs0yo5ShHi8bEc9GAAEEEEAAAQQQQAABBBBQgQoLIENx z58/3wSP8+bNk+Tk5IDTd+3aJXl5eWb00io6Apmamio6shnq8VCvzeMIIIAAAggggAACCCCAAAKh BWIqeh9IDfh69Ogh06dPl65du5oaavDYr18/EwympaWZr71795YlS5b4/l/4Of7X0efYPW69TmiO 38/Yvn17wPpKp8/jPAQQQAABBBBAAAEEEEDAzQIREUDq1NXbb789qPNjjz0mN998s22AGO4A0s03 nLYhgAACCCCAAAIIIIAAAqUViIgprLfddptJjmMduk6ycePGsnfvXhk7dqzJ2hofH2/WT1plx44d cuzYMdG1laEeLy0Oz0MAAQQQQAABBBBAAAEEEPiPQEQEkKFuSGJiogwdOlSmTJliTtUtPcaPHy99 +/Y1U1xDPR7q+jyOAAIIIIAAAggggAACCCAQWqDCAkj/bTx2794t3bp1K7LXo111x40bJ6dOnTJ7 QMbFxYmOQE6aNMn3lFCPh6bgDAQQQAABBBBAAAEEEEAAATuBCl8Dye1AAAEEEEAAAQQQQAABBBCI ToEKG4GMTh5qjQACCCCAAAIIIIAAAgggYAkQQNIXEEAAAQQQQAABBBBAAAEEHAkQQDpi4iQEEEAA AQQQQAABBBBAAAECSPoAAggggAACCCCAAAIIIICAIwECSEdMnIQAAggggAACCCCAAAIIIEAASR9A AAEEEEAAAQQQQAABBBBwJEAA6YiJkxBAAAEEEEAAAQQQQAABBAgg6QMIIIAAAggggAACCCCAAAKO BAggHTFxEgIIIIAAAggggAACCCCAAAEkfQABBBBAAAEEEEAAAQQQQMCRAAGkIyZOQgABBBBAAAEE EEAAAQQQIICkDyCAAAIIIIAAAggggAACCDgSIIB0xMRJCCCAAAIIIIAAAggggAACBJD0gVIJTJw4 URISEmTRokWler5XnvTAAw9ITExMwJGSkiL79u0rE8H8+fN915w8eXLQa/mf41+HwYMHl+m1o/XJ xXmozdixYwOalZubK02bNi1y7wrfS/2/5V+Sn4lg/cL/Wk6NS3qPnb6udd1gfcvfpri+57T+nIcA AggggAAC0SdAABl994waR4GA9QH8u+++k6ysLMnPzzfHiRMn5NJLL5V69er5Ao/SNOeTTz6Rtm3b Sq1atWTKlCm2l3j//fd9r79p0yaZO3eudO7cWbKzs0vz0lH/HH8PvSdq8tJLLwX8QSQxMVG2bNkS cN8GDBggnTp1Crif+vwRI0Y4NsnIyJDatWvLa6+9Jnv37i1y/euvv75U/SLUPQ7X62rw2KZNGzlw 4ICpf0na7hiJExFAAAEEEEAgogUIICP69pRv5YKNpgT7XvnWwn1X1w/rAwcOlEGDBsmSJUskKSnJ 18jY2FiZMWOGzJs3r9QN1+u/+eabMnz4cLn11ltl5syZjkeCmzdvLs8++6wsXbrU1CMaiwbloY6S tEtNNBi64oorTHBf1tFhu9d++eWXJS8vT/QepqWlFekXGszqCHVZSrB7HI7X9Q8eC9e/LPXluQgg gAACCCAQXQIEkNF1v6KutsGmAhaeLmg1qvD0umBTZJ2cEwzJGoGxAuTipt/qyKH1mP9rlWS6rn5Y 11HHRx55pNj71bNnz4DRG6f10wvOmTPHXL9///5yzz33SHJysgkinZZLLrnEjFyuWbPG6VNcf54G 9i+++KLEx8fLnXfeWS7tPXnypKxfv96M4Ok9C1Y0+Lv66qvL/Pr+9zgcr0vwWOZbwgUQQAABBBBw jQABpGtuZeQ1RIOiRo0amWl/1hROa7pg4SBSgzX/aX061VNHhO666y7fVEsn5wRT0KCwRYsWMmrU KF89Xn31VenWrVvQ6YI6QqSPnX/++b7zNVDr1atXyJE+68N6u3btRA8npST10+tPmzbNBI9du3aV xo0biwajn376qeMpqTt27JBDhw45qZqnzrEst27d6tiyJEAapOqodEWM/vrf47K+rva5YcOGmWmr jDyW5I5zLgIIIIAAAu4UIIB0532t9Fbph8777rtPdERl0qRJvvpY0+t0GqU1VVBHN6ZOnSp9+/b1 Teuzpnq+8MIL5rlOzgnWaK3H+PHjTRA7evRo3yk33XST6Jq2Z555pkiwoKNQCxcuDBghtEb6NAC2 K/p6y5cvlyZNmgRMXS3uOSWt34IFC0ywqNNXtVjBwapVq0QPJ2XdunVmpE2DUMp/BNSyVatWsnbt WjPCWx7ltttukz//+c+iax39p4uHOxlN4Xtc2tfVP+QMGTJEvv32W4LH8ugQXBMBBBBAAIEoFCCA jMKbFg1VtgIpDdL81wBq3Vu3bm2SyehohhUEdejQwYysFR6ZvOiii8zz9cN9qHOCuWzbtk10hK9w PUoTeOn1wz3ts6T10+Q5Ov2xT58+vubecMMN0qBBA3n66adDdg21uP32230jmCGfwAlhF3juued8 I9tvvPGGub4VUPpn6NWfIV1LW3hdcnFTwK2KFnePnb6uf4P1Dy36BwsNqMtram/YgbkgAggggAAC CJSrAAFkufJ69+K7du2SY8eOyeOPP17kA7BOBfUvGsx9/PHHJsgrfL41MuPknEjSLo9pkNYorH6Y 1yyuVmBRrVo10debNWtW0AQw/qNdaq8ZOzUQpQQKOFkrGG4zHRm0pnfn5ORInTp1pF+/fmZU3BqF tx63vgYLIEt6j+1e17+NVtZZHTXVP/B4dQuYcN93rocAAggggEA0CxBARvPdi+C6N2zYUFJTU+Wx xx7zfUD2/yB8/Phxs4bPKoU/LOuHaZ0GevPNN/vWHTo5p7JJdPuHoUOHmumkTqeUOq3zzz//LLt3 7zbTawsHFZrVVQPL2bNnF7lc4W0r2HohuHhxo8FO709Zz7NG2UszhbYs99judR966CEzA0BHL60g MtQIaFkdeD4CCCCAAAIIRLYAAWRk35+orZ31odRJchcdWXv99dcD2qqBmK6d1IQ2uu7QyTnBsIpL MmMloylJshunN8NaL2k3pVSnGeroqtP6WWsli6tvly5dTMAdbE2n03p7+Txrza72t7vvvrtcKPQ1 Hn744WIT9FjTvv3XAoejIuF63XHjxvlmCRBEhuPOcA0EEEAAAQSiU4AAMjrvW8TX2toWQdc5jhw5 MqC+Ggyec845AdMtn3rqqSKb2xde7+fknMIwWg9NnqOZLzWZjlXeeecds7bLGmEJJ6gmCtI9FnXK X+fOnQMCBmtdmzWN12n9Qo2OacCto73lMfIZTptIvJb2UZ0S/NVXX5lkMf77M4a7vr/++qtZw1o4 ALO2ydARZrvtX0pbn3C8buFp5OFO/FPatvE8BBBAAAEEEKhggYKpcBQESixQkPwjv6CrBj0KPiDn F2zMbq5ZkCwnv2BtY5HzCrYzCHjNglHG/IK9CQPOK1h/lV8wLdN3npNzimtI4ecWZCHNL5gKWuT0 gqmg+cEes55fEKQ5tiqu7YXbpRcMVb+C6YNB6+VfGesalq22Re9RwfRGx3V284mWR7B+G+q+Wvcy 2L2zzJz+TOi9DFaHwj8TTu5FSe5xSV7X7roF08vzC0a7TRtKU2cn7eIcBBBAAAEEEIhcgRitWgXH rLwcAggggAACCCCAAAIIIIBAFAowhTUKbxpVRgABBBBAAAEEEEAAAQQqQ8DRCKQmltC08sEGK6tU qWKybepXCgIIIIAAAggggAACCCCAgHsFQgaQujWA7s335ptvyunTp4tI6HYNn3/+uTRt2tS9SrQM AQQQQAABBBBAAAEEEEBAbAPIU6dOycSJE+VPf/pTsanna9eubfbpa9myJZwIIIAAAggggAACCCCA AAIuFrCdd5qZmSlffPGFCR6rVasmmsZdp6pWr17dpKKPiYkxKe/j4uJcTETTEEAAAQQQQAABBBBA AAEEVMA2gNS9yXRfuaSkJDON9bLLLpP09HSZO3euvPvuu1K3bl258847RaexUhBAAAEEEEAAAQQQ QAABBNwtEDLzjU5j1QBSN0Q/88wzzQhkgwYN5NJLLzUjka+++qrs2rXL3Uq0DgEEEEAAAQQQQAAB BBBAwH4EUn2qVq0qBRurS7169UwgefjwYTOtdfXq1aIJdg4cOCAnT56EEgEEEEAAAQQQQAABBBBA wOUCtiOQiYmJZtRx//79snjxYrnooovkxIkTcs8990i/fv1k9+7dJqhkCw+X9xKahwACCCCAAAII IIAAAggUCIQMIDt06CA1atQwAWS7du2kbdu2JqnO0aNHDaBOZdXRSQoCCCCAAAIIIIAAAggggIC7 BULuA5mTkyN6aKbV1NRUs+fjHXfcIcePH5cuXbqY/SE1sQ4FAQQQQAABBBBAAAEEEEDA3QIhA8hg zdftPfLz883ayISEBHcL0ToEEEAAAQQQQAABBBBAAAEjUCSAPHbsmJw+fVpSUlJMAh3r/5aXrnfU /SB1D0g9T7O06p6QrIOkRyGAAAIIIIAAAggggAAC7hYICCD37dsn/fv3N5lVp0yZIi1atJCBAwfK 2rVri1XQPSA/++wzadq0qbulaB0CCCCAAAIIIIAAAggg4HGBgCQ6Opq4Y8cO2bp1q1njaP1fA8ri jm3btrGNh8c7Ec1HAAEEEEAAAQQQQAABbwgEBJA6DbVBgwYmKY6ub7T+r1lYizsaNWpkprRSEEAA AQQQQAABBBBAAAEE3C1QZA1kVlaWSZCjayC16JYdOhJZXNG1kOwF6e5OQusQQAABBBBAAAEEEEAA ARUoEkDq1FVNjnPixAkTSOr2HaES5CQmJqKJAAIIIIAAAggggAACCCDgcoEiSXSuueYaWbduneNm k0THMRUnIoAAAggggAACCCCAAAJRLRAQQO7evVu6detmkug4LbVq1ZLFixdLy5YtnT6F8xBAAAEE EEAAAQQQQAABBKJQIGgSHf+EOQkJCWbPR93r0f/7Om1Vv5+WlkYSnSi88VQZAQQQQAABBBBAAAEE ECipQEAAWbduXfnqq69k48aN5li9erX84Q9/EP3+5MmTfd/XKa5PPPGEVK9eXe6++26TtZWCAAII IIAAAggggAACCCDgboEiI5A1a9aUOnXq+I69e/eaLT3at2/v+169evWkY8eOJtHO9OnT5ejRo+5W onUIIIAAAggggAACCCCAAAISEEAW9tDAUEcbMzMzZcOGDQEP5+XlmQBy5cqVcuTIESgRQAABBBBA AAEEEEAAAQRcLmAbQOrIoybH0QDxySeflIyMDPPv7du3y5tvvmkCyFBbfLjcj+YhgAACCCCAAAII IIAAAp4RsA0gq1WrJu3atTMYc+bMkc6dO5uAskOHDvLJJ5+Y75999tmSmprqGTAaigACCCCAAAII IIAAAgh4VSBgG49gCLqlx5AhQ2TZsmVy+vTpgFMaN25sRiL79OnjVT/ajQACCCCAAAIIIIAAAgh4 RiBkAKkSmkjnX//6l7z11lty6tQpg9OgQQP54IMPzGgkBQEEEEAAAQQQQAABBBBAwP0CjgJIZcjN zTXJdKxStWpVqVWrlvuFaCECCCCAAAIIIIAAAggggIARcBxA4oUAAggggAACCCCAAAIIIOBtAccB pI4+6hrImJgYSUxMlOzsbPNvTbQTFxfnbUVajwACCCCAAAIIIIAAAgh4QMA2C6u2X4PGxYsXywUX XGAysHbv3l2+/PJLGTBggLRp00aee+45s50HBQEEEEAAAQQQQAABBBBAwN0CIQPIb775RgYOHCir Vq2S/fv3mz0gdQRSv7d7926ZMWOG2RuSggACCCCAAAIIIIAAAggg4G4B2wDy6NGj8sYbb5hAUaeq auAYHx8vycnJcsUVV0j9+vVl06ZNAcl13M1F6xBAAAEEEEAAAQQQQAAB7wrYBpA5OTmydOlSqVu3 rkyePFnGjh1rAsj8/HyzjUdqaqqZ4lp4f0jvctJyBBBAAAEEEEAAAQQQQMC9ArYBpAaKVapUkTPP PFN69OghaWlp5v+aPEdHJY8dO+b7v3uJaBkCCCCAAAIIIIAAAgh4WcAaNIvWr+G8d7YBpE5bbd26 tWzZssUk0jl06JAveHz77bflwIEDJrGOjkRSEEAAAQQQQAABBBBAAAG3CJw6dUpOnjxpEobq12g+ rDZom8pabLfxUKQJEybIqFGjJCEhwQSPOq1V10DqV31cp7U+/PDDZmorBQEEEEAAAQQQQAABBBCI ZgH/UUYNuKxD26QzNKOpaPympWrVqr5DZ5RaR2naEnIfyJ07d8rVV18ty5YtK3L9Vq1ayeeffy76 lYIAAggggAACCCCAAAIIRLuANdKYl5dn8sG4qXTq1MkM/MXGxpqjNCXkNh6NGjUy+z7ef//9UqtW Lalevbo5+vTpI1988QXBY2nUeQ4CCCCAAAIIIIAAAghEnIA12qjBY3Z2dsTVr6wV0jZp2/xHVUt6 zZAjkNYFc3NzA7br0MhVA0kKAggggAACCCCAAAIIIOAGAR191AArKyvL7HW/fft2NzTL14YzzjhD atSoYZYkWiORJW2g4wCypBfmfAQQQAABBBBAAAEEEEAgWgR07aMGkDpwdvToUZMwVJOIuqnojNI6 deqYgcDExEQzjVXXQ5akBD07MzPToDk5dCuPkuwDmZGRIQ0bNpRFixYF1HPixIkmSY91dO7cOWDY WG/mwIEDS/14SVA4FwEEEEAAAQQQQAABBLwpoLGNZi3VpKFuK9ombVtJ4rfCBkUCyH379km/fv3M 2kYnR8+ePR0N7WrgWLt2bWnRooUcPHgwoB4aHH7zzTeyd+9ek9lIG5Weni4jR470nTdmzBiTOai0 j7vt5tMeBBBAAAEEEEAAAQQQCJ+Axhl6aHClawQ1JnFb0TZp27SNVntL2sYiAaRecPfu3SaYc3Lo HpFOcJs3b24Cx02bNplA0r/o0Ol7770naWlp5tv6/0GDBsnWrVvNKKQOI0+dOlWGDx/ue3z06NEy a9Ys0YA31OMlReF8BBBAAAEEEEAAAQQQ8J6AtU2HFUS6TcAKHrVdpd2SJOgUVmu/EAtM/5+SkmLm y+q82dTUVN/RoEGDUqeAtbshq1evliZNmkhSUpLs2rXLLGbV0Uur6Ail1kNHNkM97rYbT3sQQAAB BBBAAAEEEECgfASskbnSBljlU6vwXDUcbSuSREdHHa+66ipZu3atGdnT0UWdOjp+/HizBlGz9Wgw aW2wqY/VrFnTnOOkaMDXo0cPmT59unTt2jXoU3Q95KhRo0xwqKOSwZ7j/z09p/A1nbxOcfXVUc3j x487aQ7nIIAAAggggAACCCCAQJQLWFNXdWmdzoDUmZM6K7N+/fpR3rLA6u/Zs0d0AFBnhOpAnZVE p/AAol2jiwSQGhgePnzYjPhNnjxZnnzySRNEapaehIQEOf/88+XVV1+VevXqlQozVGA3f/58s8fk vHnzfAFmRQeQ2l4n03JLBcCTEEAAAQQQQAABBBBAIKIErABSYwANIDUD686dO6VatWoRVc+yVkaT 6DRq1MjMLNUAMi4uzmRhLVMAWbhSuv+J4l155ZWi6x21NGvWTCZNmmRG/Upa7ALIwiOP1rV1JLRN mzYybtw4GTFihPm2Bpqa7Eevp1NZ7R631laWtK6cjwACCCCAAAIIIIAAAt4QsBLn6B6Q+/fvlx07 dpR4i4tIl9LBQl0KWLduXbMXpAaQTmeSWm2z3fRDh3A16t62bZtJVmMVjVwVOJzlgQcekFdeecUk 7ikc8Ono59ChQ2XKlCnmJbVeOqW2b9++5txQj4eznlwLAQQQQAABBBBAAAEEEPCqQNAAUqNuHXW8 7bbbpHHjxjJs2DATfetQp476LViwQHr16lUiM/9tPHQ+cbdu3cxaSv8sqkuXLjWRsLUXpE6ZtfaL 1NFHDVr1MY2U9S8COgpqlVCPl6iynIwAAggggAACCCCAAAIIIFBEoMgaSA3oBg8ebJLo6OJRHeb0 T6Kjo3065GmlgNWATufPaoBJQQABBBBAAAEEEEAAAQSiUYAprM7uWpEAUkcHe/bsKRs3bvRdQYNE K1OPLjDVBDtW0Sw+n376qdlyg4IAAggggAACCCCAAAIIRKMAAaSzu+ZoH0gNGjUTka6F3L59u1mn aB2aWIeMpc6wOQsBBBBAAAEEEEAAAQQQiGaBIgGkTkXVfR01s6mTQ0cgdf8QCgIIIIAAAggggAAC CCCAgLsFit0HUjOdOim6PlIDzpKmf3Vybc5BAAEEEEAAAQQQQAABBCpCgCmszpSLBJDOnsZZCCCA AAIIIIAAAggggIB7BAggnd1LUqc6c+IsBBBAAAEEEEAAAQQQQMDzAgSQnu8CACCAAAIIIIAAAggg gAACzgQIIJ05cRYCCCCAAAIIIIAAAggg4HkBAkjPdwEAEEAAAQQQQAABBBBAAAFnAgSQzpw4CwEE EEAAAQQQQAABBBDwvAABpOe7AAAIIIAAAggggAACCCCAgDOBIgFkdna2ZGZmOj6ysrLk9OnTzl6N sxBAAAEEEEAAAQQQQAABBKJWIGAfyH379smQIUNk/fr1jhvUsGFDmT59ujRp0sTxczgRAQQQQAAB BBBAAAEEEIgkAfaBdHY3AkYgFW3r1q2yZ88ex0dGRoacOHHC2atxFgIIIIAAAggggAACCCCAQNQK BASQVapUkbS0NElJSXF81K9fX2JjY6MWgIojgAACCCCAAAIIIIAAAgg4EwiYwqprGQ8dOiQnT550 9uyCszTorF27tlStWtXxczgRAQQQQAABBBBAAAEEEIgkAaawOrsbAQGks6dwFgIIIIAAAggggAAC CCDgLgECSGf309E2HjoiWVxmVrKwOoPmLAQQQAABBBBAAAEEEEAg2gVCBpA5OTny2GOPSZs2beTM M88scvTs2VO2b98e7Q7UHwEEEEAAAQQQQAABBBBAIISAbQCpw7jvv/++vPTSS7Jz586gmVm3bNlC Fla6GQIIIIAAAggggAACCCDgAQHbAFKnp86cOdNMX42PjzeJcmJiYiQpKUkSEhLMv+vUqUMWVg90 FJqIAAIIIIAAAggggAACCNgGkDp9deXKlSZgfPzxx6VPnz5yxhlnyNy5c+Xf//63CR7vuusuadSo EZIIIIAAAggggAACCCCAAAIuFwi5BlIT6FSrVk26du0qrVu3Ntt2NG7cWC6//HKpUaOGvP7667J7 926XM9E8BBBAAAEEEEAAAQQQQACBkAGkBow6XbV+/fomkDxy5IjMmjVLNmzYINnZ2bJ3717Jy8tD EgEEEEAAAQQQQAABBBBAwOUCtgGkBo4tW7aUgwcPypIlS6RXr14mWLz77rvliiuuMCOPGlTq2kgK AggggAACCCCAAAIIIICAuwVsA0gNDs8991xJTEyUH3/80fxbt/I4evSoHDhwQPLz8+Wiiy6StLQ0 dyvROgQQQAABBBBAAAEEEEAAAYkpCALz7RyOHTsmmo1Vs7DWrFlTZsyYIbfffrscP35cunTpIm+/ /bY0bdoUSgQQQAABBBBAAAEEEEAgagV0C8MTJ06Y2Gf//v2yY8cOk//FTeX06dOSnp4udevWleTk ZImLiyvxbNKQAWRhMH1RBVVMHaHUF6YggAACCCCAAAIIIIAAAtEsQADp7O6FDKkVUqNwHYnUjKwa ONarV89kYNVRSX2cggACCCCAAAIIIIAAAggg4H4B2wBSg0Pd71G377jgggtk2bJlRmTt2rXSo0cP adasmbzwwgtmqJeCAAIIIIAAAggggAACCCDgbgHbAFJHHqdNm2ayrd5xxx3Srl07o9G8eXO57777 zPf1cU2qQ0EAAQQQQAABBBBAAAEEEHC3gG0AmZOTI6tXrzaLLAcNGmTWPGrRqau6jYcmz9H9IHV6 KwUBBBBAAAEEEEAAAQQQQMDdAiHXQGqSVs24unXr1gCJXbt2SXZ2tmhSnRCJXN0tSOsQQAABBBBA AAEESiWgnyOj/ShVw3kSAlEsYBtA6v6PZ599tpmi+o9//EO2b99uEurs2bNHnn76adm3b5+0bNlS UlJSopiAqiOAAAIIIIAAAghUlIDm2NDEjJpDQ79G+2G1g8SSFdWDeJ3KFrDdxkN/oF9//XUZNWqU ybaq2Vc1C6uOOGrwqF8fffRR+ctf/mKmtVIQQAABBBBAAAEEEAgm4D/SqJ8rrUPPjcbZbDExMaaZ VatW9R36Odk66AXRJ8A2Hs7uWch9IHXU8eqrr5bly5cXuWKLFi3kiy++MFlaKQgggAACCCCAAAII FCdgjTTm5eXJ0qVLXQfVqVMnM6ASGxtrDkr0CRBAOrtnIddAnnHGGSZIvPfeeyU1NVWSk5PN0bt3 b4JHZ8achQACCCCAAAIIeFrAGm3U4FFzaLixaLu0ff4jq25sJ21CIOQIpEWk87v9t+vQ9ZEaSFIQ QAABBBBAAAEEELAT0NFHDa40l8aRI0dMXg23FR10qVGjhvl8bI1Euq2Nbm8PI5DO7nCREUjdusPK rqqXsP6vc9Nr1qzpO/QHQ89z61+RnPFxFgIIIIAAAggggICdgLX2UYNIzeyvQaQbi7ZL26fttNrs xnbSJgQCAkhNjHPZZZeJzuFetmyZHDhwQPr37y+tWrWS5s2bS5MmTXxHs2bNzPd79epVZIsPWBFA AAEEEEAAAQQQ8BfQoEpntOnghBuLtkvbp+2kIOBmgYAAUodtN23aJOvXrzc/3Pr/jIwM2blzZ7HH xo0bzQ8LBQEEEEAAAQQQQACBwgI6i00PDaysKYJuVNLPw9o+a4/0aMws68b7QpvCLxAQQGra4bp1 65rtOuLi4kwa4jp16khSUlKxR1pamkldTEEAAQQQQAABBBBAIJiAFUxZQaQblazgUdtG8OjGO0yb LIGAJDr6Q71//37zl5PatWubFMT6f53LXVzR4FGDToJIOhUCCCCAAAIIIIBAYYHCiUl0Zpu1h6Kb tDRobNSokflcrIl0dDCGz8fRdYdJouPsfjnOwurscpyFAAIIIIAAAggggMB/BLzwoVxbqwMw6enp BJBR3Pm90FfD0U9D7gOpL6KZVv0XPOu/9WCRcBT/hFB1BBBAAAEEEEAAAQQQQKCEArYBpEbh77zz jpx11lnyhz/8wUxn1f+3adNGWrduLc8++6zZ04eCAAIIIIAAAggggAACCCDgfgHbAFL3s5k2bZrZ 7PWSSy6RHTt2yFNPPSXbtm0z3/vXv/5lHqcggAACCCCAAAIIIIAAAgi4X8A2gNRpqr/99pvUrFlT zj33XFmyZIls3rzZZGeNj4+XQ4cOyeuvv272i6QggAACCCCAAAIIIIAAAgi4W8A2gNRsUjpFNTEx 0WztsW7dOrO/TdeuXWXSpEnSoEEDWb16tRw7dszdSrQOAQQQQAABBBBAAAEEEEBAbANITbGsKYg1 iFy7dq05tLRs2VK6desmNWrU8G2YiiUCCCCAAAIIIIAAAggggIC7BWwDSA0QL7/8cjl48KDceuut 8sUXX5h9ezSJjk5b1ZFH/b8b9/Jx922ndQgggAACCCCAAAIIIIBAyQVsA0idunrVVVdJUlKSWe94 /Phxs7fNBRdcIPPnz5c9e/ZIs2bNJCUlpeSvzDMQQAABBBBAAAEEEEAAAQSiSiDkPpB9+/aVJ554 QpKTk82U1X/+859yzjnnyHvvvWfWRl555ZXm+xQEEEAAAQQQQAABBBBAAAF3C8QUJMrJt2viiRMn zMOHDx+W06dPS506dSQ2NlZ27dol+lTN0KojlBQEEEAAAQQQQAABBAoLaAJG/Typ28PpnuK6LZxm 9Hdb0c/J6enpZraeDrxoHpGqVau6rZmubo8X+mo4+qntT68Gidddd5389NNPkpaWJvXr1zfBo5aG DRtKo0aNCB5d/WNE4xBAAAEEEEAAAQQQQACB/wiE/PPPihUrZPDgwXLmmWfKlClTRPeG1MiVggAC CCCAAAIIIIAAAggg4C0B2wBSh901QY5mYd24caPccccdcvbZZ8tzzz1nMrBa01u9RUZrEUAAAQQQ QAABBBBAAAFvCtgGkDqH++WXXzaZVjVhTmZmpmzevFn+9re/Sdu2bWXYsGGyc+dOk52VggACCCCA AAKRI6CzhaL5iBxJaoIAAggg4C8QMomOnqzbdeTl5cnUqVPlqaeekqNHj/pGHxs0aGDWQk6ePFka N25sAk0KAggggAACCFS8gCaA0AR31lHxNQjfK1r7TOtXEpGEz7UyruSFxCTqGo7kJJVxf3jN/wh4 oa+Go586CiAt1uzsbJN99fvvv5e7777brIe0iibYOeOMM+STTz4xgSQFAQQQQAABBCpGwH+kUT8A WYe+eohk6xVTwRK8igaMWjRotA7N2GkdJbgUp0aIgBc+lBNARkhnK2M1vNBXKyyAzM3NNWse//rX v8qcOXNMGmYNJK03eMXWolt6LFmyRFq0aFHG28fTEUAAAQQQQMCpwMmTJ0UPnS20dOlSp0+LivM6 deok8fHxJgu8lQk+KipOJX0CXvhQTgDpjg7vhb4ajgAyZBbWb775Rs4991zp0KGDTJgwQTZs2GCC x4SEBLO1x7PPPit33XWXmbqqCXesvxy6oxvRCgQQQAABBCJbwBpt1OBRZwq5rWibtG3+o6puayPt QQABBKJJwDaA1M1e//KXv/iCRm2YBoq9evWSn3/+WZYvX26msj7zzDOyevVqefrpp01gSUEAAQQQ QACBihHQKaoaXGlCO01257aibdK2Wes73dY+2oMAAghEm4BtAKnTYTSIjIuLk9TUVBkzZoysWbPG rHNs166dNGzY0DyWnJxspq1ef/31omshKQgggAACCCBQ/gLW2kf9fa1Bli4xcVvRNmnbtI1We93W RtqDAAIIRJOAbQCpf+3TLTw++OADMwr55JNPStOmTaVOnTpB22gtdo8mAOqKAAIIIIBAtAtoYKV7 M/snt4v2Nln11zZp27SNFAQQQACByhewDSB1iw7dumPAgAFSr149U1tNqFP4qPxmUAMEEEAAAQS8 J2Bt16HBlZX8wW0KGjxq27SNbtiexG33h/YggID3BGwDSB1R1Myq1sijjkaeeeaZAUfPnj1l27Zt 3pOjxQgggAACCESAgLVNhxVERkCVwloFK3jUi0bbliRhheBiCCCAQIQIhJzC+u9//1uee+452bp1 q+zYsaPIoVNbNTua05KRkWHWTi5atCjgKbq2YeDAgSaLqx6dO3cOyCZX1sed1o/zEEAAAQQQiDYB a2TOjQGWm9sWbf2M+iKAAAIqYBtA6sL1zz//3OwBqUGdZmAtfNStW9ds9BuqaOBYu3Ztk2zn4MGD RU7XBD16Hf1FodNV0tPTZeTIkb7zyvp4qPrxOAIIIIAAAtEu4NYAMtrvC/VHAAEE3CRgG0DqwvWV K1ea9nbv3l0WL15skun4H/Pnz5czzjgjpEnz5s1N4Lhp0yYTSPoXXVOpay2HDx9uvq0bBY8ePVpm zZol+/btM2suy/J4yMpxAgIIIIAAAggggAACCCCAQEgB2wBSn61TR6tUqSJ9+vQxW3foyKD/oYl2 NOArS9m1a5eZBqujk1bR19CtQ3TksqyPl6VuPBcBBBBAAAEEEEAAAQQQQOB3gZiC6S75xWFo8Hj/ /ffLG2+8IQ8//LA8+uijZXbTgLBHjx4yffp06dq1q7leqO+lpaXZPifU49brOK28jnrqnlMUBBBA wMkMi2hU2r59ezRWmzr7Ceivb02co7+rs7OzzSyf3bt3u24/5j179oj+sVpnLyUlJZk/WusftnVp DSXyBbzST/VO0Fcjvz/a1dArfTUc/bRIAKkjgVZMqV812c2IESOkV69e8tprr0m1atWK2CckJDju MaGCxWBBZagAMdTjJQ0gdQ2mHhQEEEBAP7C6sWjAQYluAevDjv6+0vt54MAB2blzZ9Df09HcUl1O 06hRI7MHtf48xsXFEUBG0Q31Sj/VW0JfjaKOGaSqXumr4einAQHk/v37ZdiwYWaNo1X0r5saqepf /PTNW//q51/0r4IfffSRNG7c2FGvCRZA6hrHNm3ayLhx40ywqkXXVvbr18+MTupU1rI8rgEmBQEE EEAAAbcJWHs/atI7/R2u2dIL/56O9jbr5xBd1qJJ+5KTk00A6SR5X7S3203190I/1ftFX43+XuuF vhqOfhoQDeo0mI0bN5p9Ha1Dfxnp9zXI03/7P6b/XrduXYm28QjWtTSz69ChQ2XKlCnmYX298ePH S9++fUWDv7I+Hv3dmRYggAACCCCAAAIIIIAAApUvEBBA6l8ta9WqJTol1emho5JO/hLov42HrtHo 1q2bpKSkmCyrWnT0UaN+XdOgf13UYHXSpEk+obI+XvnU1AABBBBAAAEEEEAAAQQQiG6BgCmsGsBp QKfrKTSYLBwY6shg4Zw7ek69evXKnIk1uhmpPQIIIIAAAhUvwHSrijfnFUsu4IV+qirhmBpYcl2e EU4BL/TVcPTTgBFIDQZ1TaOuZ9T1Bvpv/0OzEepj/ocubC/rNh7hvPFcCwEEEEAAAQQQQAABBBBA oHwEit0H8ptvvpHWrVtLkyZNzHH++eeb9ZEUBBBAAAEEEEAAAQQQQAABbwoEDSDnzJkjt9xyi6xf v96XNOfnn3+Wq6++Wn788UdvStFqBBBAAAEEEEAAAQQQQMDjAkUCyKNHj8r//u//miQ2mtDGSqaj /16zZo08+eSTZrNiCgIIIIAAAggggAACCCCAgLcEigSQurnkkiVLjMI111wjv/32m6xdu1buvPNO 871ly5aJBpkUBBBAAAEEEEAAAQQQQAABbwkEncKq2Vbj4+Nl8ODB0rx5c2natKkMGTLEbK+h2Ymc bNvhLUZaiwACCCCAAAIIIIAAAgi4XyBoAKnTVfXQcvz4cXPUrl1batSoYb6XnZ3t+74+RkEAAQS8 IqDpr6P98Mq9op0IIIAAAgggEH6BoAGkbsuRl5cn999/v7Rq1cocAwYMkEOHDsmBAwfkkksu8X2/ V69eJtEOBQEEEHCrgM680JkZukeufo32w2qHtouCAAIIIIAAAgiURCAmv6D4P2HPnj2iQaFmYHVS dFRS10y2bNnSyemcgwACCESNgP9IowZb1qENKPTWGRVtsmaW6DIE66hSpYpYR1Q0gkoGCLDpNR0i GgS80E/1PoRjg/ZouJ9urqMX+mo4+mmRAHLv3r1y+eWXm4yrTkp6errMnj1bmjVr5uR0zkEAAQSi RsAaadQZGUuXLo2aejutaKdOncx6d511ogcl+gT4sBN998yLNfZCPyWAdEfP9kJfLZcAUuE0iNQp Tk6K/hW7fv36fPhwgsU5CCAQNQLWtFVd563rvp3+US1qGlhQ0bZt20pSUpLZrkkDSBKkRdPd+72u fNiJvnvmxRp7oZ8SQLqjZ3uhr4YjgCyyBlI/QDRs2FCaNGni6NARSP5y7Y4fGlqBAAL/EdApqvqL RAPIzMxMV9Jou7R92s5onJLryptCoxBAAAEEEIhwgaBJdCK8zlQPAQQQKFcBa+2jTmHVACsrK6tc X6+yLq7t0vZpO602V1ZdeF0EEEAAAQQQiA4BAsjouE/UEgEEKkFAgyqdzp+Tk1MJr17+L6nt0vZp OykIIIAAAggggIATAQJIJ0qcgwACnhLQ6Zx6aGBlrYdwI4AGj9o+bafVZje2kzYhgAACCCCAQPgE CCDDZ8mVEEDARQLWmkAriHRR03xNsYJH/QZrIN14h2kTAggggAAC4RcggAy/KVdEAAGXCFijcm4N rtzePpd0Q5qBAAIIIIBARAkQQEbU7aAyCCAQiQJuDiAj0Zs6IYAAAggggEDkCjgOIHWtjG6mrYdO 6dLMfda/I7d51AwBBBBAAAEEEEAAAQQQQCBcAo4CyJUrV8qFF14orVq1kh49esgXX3wh/fv3N5tQ v/jiiyaLHwUBBBBAAAEEEEAAAQQQQMDdAiEDyO+++04GDBggixcvlq1bt8q6deskLi5OLrnkEsnI yJCPP/5Yjh496m4lWocAAggggAACCCCAAAIIICC2AeSxY8dkwoQJsmXLFqlatarExsZKQkKCpKSk mKCyXr16smHDBtHzKAgggAACCCCAAAIIIIAAAu4WsA0gs7OzzchjrVq15L333pPHHntM4uPjTbr3 Ro0aSfXq1X17iLmbidYhgAACCCCAAAIIIIAAAgjYBpBW5sE2bdrIpZdeKunp6VKlyu9P2bdvn2Rl ZUlMTIw5KAgggAACCCCAAAIIIIAAAu4WsA0gExMT5cwzz5Rt27aJJtLRqaoaQB46dEgmTZok+/fv l+bNm5sprRQEEEAAAQQQQAABBBBAAAF3C9gGkBoY9uvXT/bu3SvXXXedjB07Vnbu3Cm33XabvPDC C2b6at++faVGjRruVqJ1CCCAAAIIIIAAAggggAAC9kl0NGnOoEGDpGXLlnLgwAEz8njy5EkzfTUn J8dMab3hhhvMukgKAggggAACCCCAAAIIIICAuwVCbuPRpEkT+fLLL+WPf/yj6JRW3cJDD90PcubM mXLWWWe5W4jWIYAAAggggAACCCCAAAIIGIGQAaSe1LRpUzNlVbfs0L0f9fjss8+kXbt2MCKAAAII IIAAAggggAACCHhEwFEAqRbVqlUzU1atQ7f2OHHihDkoCCCAAAIIIIAAAggggAAC7hcIGUAeP35c nnjiCbMOslmzZgFHq1atpFevXiZLKwUBBBBAAAEEEEAAAQQQQMDdArYBpGZZ/eCDD+T555+XTZs2 yZYtW4oca9askby8PHcr0ToEEEAAAQQQQAABBBBAAAH7NZBZWVlmreORI0cMlZVAx/+rTmWtWrUq lAgggAACCCCAAAIIIIAAAi4XsB2B1K06VqxYYQi6desmCxculPXr1wcc8+bNkzPOOMPlTDQPAQQQ QAABBBBAAAEEEEAg5BpI3fexSpUqctlll0nHjh1NRlb/Q4NH3S+SggACCCCAAAIIIIAAAggg4G4B 2wCydu3acvnll0tCQoLEx8e7W4LWIYAAAggggAACCCCAAAII2AoUCSB1xNHaniM/P1+GDx8uNWvW lF9//VWOHj3qe8w6h2086GEIIIAAAggggAACCCCAgDcEAgLI/fv3S79+/US359CjTZs2cuONN8q+ fftkxowZcu655/oes85hGw9vdBRaiQACCCCAAAIIIIAAAggEBJA6+qhJcqztOjZv3mz2eNTva0Kd rVu3so0HfQYBBBBAAAEEEEAAAQQQ8KhAQAAZExMjNWrU8G3Xoeseq1WrZg79t//2HdZjdevWZRsP j3Yemo0AAggggAACCCCAAALeEogpWOeYbzX51KlTsmfPHrPOUYs+pKOPWjTTqgaY/ufq+RpUkonV W52G1iLgdgF9b9P3Qd0LV6f279ixw2Sjdls5ffq0pKeni/4hMDk52byfs69vdN1lL/RV+ml09clg tfVCP9V201fpq9EgEI5+GvCJSD84NGrUyLdNR1pamtx7771y2223SWpqasD2HQcPHpQRI0bIX/7y Fzl27Fg0eFFHBBBAAAEEEEAAAQQQQACBMgjY/kld1z2uXLlSVqxYIZmZmQEvU69ePdm+fbvMmjVL jhw5UoYq8FQEEEAAAQQQQAABBBBAAIFoEAgaQOrQpk5dPX78uNkDMjExUfLy8sz3rGPDhg2+oFLP pyCAAAIIIIAAAggggAACCLhboEgAqYHi008/LW3btpUePXqYLKy6BqhPnz7SunVr33H99ddLdna2 WTPjvzbS3Vy0DgEEEEAAAQQQQAABBBDwrkCRAFIT5+zcuVM2btxotu3QRBK6+FkDyYyMDN+xd+9e o3bBBReIrpWkIIAAAggggAACCCCAAAIIuFsg6BTWpKQkM3VVM69aRRPs6P/9D82++uijj0pKSoq7 lWgdAggggAACCCCAAAIIIICAFAkgNXB85JFHZM2aNfLTTz9JixYtpEGDBjJnzhxZt25dwKGPd+jQ AUYEEEAAAQQQQAABBBBAAAEPCAQdgaxdu7Y0a9ZMunTpIt9//70sWrRIevXqJc2bNw84dASSgkC4 BDQZUzQf4XLgOggggAACCCCAAAIIRKpAyJ2xdZPpxo0bR2r9qVeUC+j6Ws3sq2tt/bP8RuO/rTZo mygIIIAAAggggAACCLhRIGQA6cZG06bKF7C2itFgSwMv3TJG9x3VQ7P7RtNh1VvbYCWd0gCY7W0q v59RAwQQQAABBBBAAIHwCsQUZF3ND+8luRoCoQWsEUbdNmbp0qWhnxBFZ3Tq1Eni4+N9CaeiqOpU 9f8LWH/YyMrKMtsY7dixQ6pUcd/f2/SPHDrLpG7dupKcnGy2ZdKEaZToEfBCX6WfRk9/LK6mXuin 2nb6Kn01GgTC0U/d94koGu6cx+uov0j00OBRRxrdVrRN2jarnW5rH+1BAAEEEEAAAQQQ8K4AAaR3 732ltVwHvTW40imfmZmZlVaP8nphbZO2TdvIAH95KXNdBBBAAAEEEEAAgcoQIICsDHUPv6aVZVWn sGqQpVME3Va0Tdo2ax0kayHddodpDwIIIIAAAggg4F0BxwGkXVZM7/LR8tIKaFClCWc0AY3birZJ 20bg6LY7S3sQQAABBBBAAAEEQgaQOpLyj3/8Q9q2bSutW7cucuj+kNu2bUMSAUcCOqVTDw2urEX1 jp4YRSdZmVi1jVZ7o6j6VBUBBBBAAAEEEEAAgWIFbANI/YD/4YcfynPPPScbN26UjIyMIsdvv/1m EoZQEHAqYK0LtIJIp8+LlvP058YafWQNZLTcNeqJAAIIIIAAAggg4ETANoDUtVyfffaZHDlyxFxL 07sXPmrUqOHK9PZO8Din9ALWyJwbAyw3t630d5xnIoAAAggggAACCLhBwDaA1LVcK1asMO3s2rWr LFy4UNatWxdwfP/999K4cWM3WNCGShBwawBZCZS8JAIIIIAAAggggAAC5S4Qcg2kTk/VDbQvu+wy 6dy5s7Ro0SLgaNq0qdkwnYIAAggggAACCCCAAAIIIOBuAdsAsnr16tK3b19JSEiQxMREd0vQOgQQ QAABBBBAAAEEEEAAAVsB2wCyWrVqMnLkSKlZs6ZoshzdIF0ThBQ+MEYAAQQQQAABBBBAAAEEEHC/ gG0AuX//fhk7dqzo1+nTp0v79u2LbONx0UUXsY2H+/sJLUQAAQQQQAABBBBAAAEExDaAPHnypGzY sMFsip6dnW228Ni0aVPAsXr1arbxoCMhgAACCCCAAAIIIIAAAh4QsA0gY2JiJDU1Nej2HdZ2Hmzj 4YFeQhMRQAABBBBAAAEEEEAAgQIB2wCybt26MnPmzCJbd/hv5cE2HvQjBBBAAAEEEEAAAQQQQMAb ArYBpI4y6h6Phbfu8P9/uLbxyM3NFb2WjnrqkZKSIvv27fPdBZ1OO3DgQN/juqWITqu1SqjHvXE7 aSUCCCCAAAIIIIAAAgggUH4CRQJIK8Oq9ZLBsq6GOwurBn/Dhg2TW2+9VXRjeT1eeukl6devny9I HDNmjJlKq4/pmsz09HSTIdYqoR4vP0KujAACCCCAAAIIIIAAAgh4QyAggNRsq7rvo47uLVu2TA4e PChXXXVVkcyrrVu39n0vHFlYNYBcvny5tG3b1qeur7F27VrJysoSHZ2cOnWqDB8+3DweGxsro0eP llmzZplRylCPe+NW0koEEEAAAQQQQAABBBBAoHwFAgJIDeR0v8eVK1eawM36f+HMq/7/D0cW1sTE RHnsscfkmWee8Y04fvLJJ/Lggw9KWlqa7Nq1y2R61amzVtERSE3wo5lhQz1evoRcHQEEEEAAAQQQ QAABBBDwhkBMwZTQfKupe/bskd69e5tRvc8//1xatmwpffr0kV9//bVYDQ3kvvvuO2nevHmZxDQQ 1JHPQ4cOmeskJyeb4FADSP3ao0cPsxdl165dzeP+39Nz7B63nuO0gtr+48ePOz2d8xwKaFc7ffq0 +cOErl/VEe7du3dL/fr1HV4hOk7Tn6MGDRpI7dq1JSkpyYyYV6lSxazfpUS+gFf6qd4J+mrk90e7 Gnqlr9JP6afRIkBfjZY7FbyevKc6/5waEEDq2sadO3eKftUPwHFxceb/uuawuKLrEjWI1A/JpS06 BbV9+/by7rvv+gLEiRMnyqhRo0ygmJmZWaEBpLbXrs2lbafXn2f9YFr7ih44cMD0r2rVqrmKJicn Rxo1aiR16tQxAaT+HBFARs8t9ko/1TtCX42efhmspl7pq/RT+mm0CNBXo+VO2QeQfE4NfR8DAsjQ p5fPGaFGGDW4bNOmjYwbN05GjBhhKjF//nyTZEefq1NZ7R7XEUpKZAjoHyf0B1OnSOua2x07dpjg yk1FR1n1jyq6DY6OpGsAqX9ooUSPgBf6qd4N+mr09MniauqFvko/pZ9GiwB9NVruVPH15D3V2T2M iE/uDRs2lPj4eHn66ad9tZ4zZ44cO3bMTI3VNZJDhw6VKVOmmMd1CuT48eNNwh8NDkM97oyCsxBA AAEEEEAAAQQQQAABBOwEIiKA1ABQM64uXbrUt8+jNX3VGj3U0Uf9q4CuI9MRHR25mjRpkq9toR6n GyCAAAIIIIAAAggggAACCJRNICICSG2CBpFbtmzx7QOp6x79p57qGssZM2b4Hl+yZIlZX2aVUI+X jYlnI4AAAggggAACCCCAAAIIREwAya1AAAEEEEAAAQQQQAABBBCIbAECyMi+P9QOAQQQQAABBBBA AAEEEIgYgSIBpGaQKukRMa2hIggggAACCCCAAAIIIIAAAuUmEBBA6rYK/fv3N1tiOD0uuugi2b59 e7lVkAsjgAACCCCAAAIIIIAAAghEhkBAAKnbY/z666+yYcMGx8fq1avl+PHjkdEaaoEAAggggAAC CCCAAAIIIFBuAgEBpG6RUb16dbOxu3Xo97To12Df1/PZJL3c7g8XRgABBBBAAAEEEEAAAQQiRiAg gKxbt67MnDnT7Mmox4oVK+QPf/iD1KlTR959913f93/77Td59NFHpUaNGnLfffdJenp6xDSIiiCA AAIIIIAAAggggAACCJSPQEAAqSOJTZo0kTPPPNMcug4yOzvb7NHYs2dP3/dbt24tPXr0EJ3yOmfO HMnKyiqf2nFVBBBAAAEEEEAAAQQQQACBiBGw3cbj4MGDsmrVKhNE7tixI6DSOqU1Ly9PFi1aJIcP H46YBlERBBBAAAEEEEAAAQQQQACB8hGwDSDj4+OladOmJkD85z//KQcOHDBbfBw9elQmTZokJ06c MLXS71EQQAABBBBAAAEEEEAAAQTcLWAbQOrU1bPOOkvy8/Pl888/ly5duphpreedd55MnjzZyLRo 0UJSUlLcrUTrEEAAAQQQQAABBBBAAAEEJGQAedddd4muedQgcvPmzWZ7j4yMDLN1R+3ateXhhx8W Tb5DQQABBBBAAAEEEEAAAQQQcLeAbQCpTdfg8YsvvpDbb79d4uLifFt5NGzYUKZPny5XX321+R4F AQQQQAABBBBAAAEEEEDA3QKOIj+dpvrCCy+YbTzWr19vvi5cuNBkZmUPSHd3EFqHAAIIIIAAAggg gAACCFgCjgJIPTk1NVWaN29u1jzqFh+NGzdGEQEEEEAAAQQQQAABBBBAwEMCjgLINWvWSK9evcx0 1gsvvNBMab3iiivk7LPPlpdfftnsB0lBAAEEEEAAAQQQQAABBBBwt0DIAHL+/PkycOBA0a86fXXF ihVmzWP37t3lt99+kw8//NBs60FBAAEEEEAAAQQQQAABBBBwt4BtAHns2DGZMGGCCRy1xMTEiG7t odNZBw0aJGlpabJu3ToCSHf3EVqHAAIIIIAAAggggAACCBgB2wAyOztbFixYIDVr1pR33nlH/v73 v0t8fLzZ0iM9PV1q1Kghp06dktOnT8OJAAIIIIAAAggggAACCCDgcgHbAFIDRQ0O27RpI1deeaU0 a9bMt2XHwYMHRQNMLToySUEAAQQQQAABBBBAAAEEEHC3gG0AqdNVW7ZsKTt37hRNpKMBo65/1Kmt kydPln379pmgMjk52d1KtA4BBBBAAAEEEEAAAQQQQMB+CmtKSorJtrp792657rrr5IknnpBdu3bJ 7bffLs8995yZvtqnTx8zlZWCAAIIIIAAAggggAACCCDgbgHbEcjY2FgZPHiwNG3a1ASRe/fulRMn TpgRyczMTKlfv76MHDlSEhIS3K1E6xBAAAEEEEAAAQQQQAABBOxHINVHp6jqvo+33XabaECp6x31 OP/88+Xzzz+Xdu3awYgAAggggAACCCCAAAIIIOABgZD7QKrBmWeeKS+++KLZsmPDhg3m+Oyzz6Rj x44eIKKJCCCAAAIIIIAAAggggAACKuAogNQTdT1k8+bNpUWLFuaoV68egggggAACCCCAAAIIIIAA Ah4SsA0g9+/fb7bvaN26te3Rq1cv2bZtm4fYaCoCCCCAAAIIIIAAAggg4D0B2wDy5MmT8ttvv8n6 9ettj/nz58uAAQNk8eLF3hOkxQgggAACCCCAAAIIIICARwRsA0hNlmPt8Wglz7G+Wj66L6SW5cuX y4QJEyQ3N9cjdDQTAQQQQAABBBBAAAEEEPCWgG0AmZqaKhdccIHUqVNH3n77bTMaqYcGizfeeKNU r15dnnzySXn00UclPj5eVq1aJVlZWd4SpLUIIIAAAggggAACCCCAgEcEbAPIU6dOyZEjRyQxMVF6 9+4tbdq0Mce5555rAkt9XNc+6jrJ2rVry5YtW8z+kBQEEEAAAQQQQAABBBBAAAH3CdgGkDk5OWZU MTs7W3bu3BnQ+qpVq8qJEyfMiKSOVOpopP5fg0oKAggggAACCCCAAAIIIICA+wRsA8j8/HwTFB4+ fFjGjRsnhw4dMgKanfWtt94yj50+fdr8X4NNXQ+payQpCCCAAAIIIIAAAggggAAC7hOwDSB1VPGy yy4TDSQ//fRTOf/886Vt27bSrVs3Wbhwofl+/fr15eDBg+ZIT0/3Jd1xHxUtQgABBBBAAAEEEEAA AQS8LWAbQFarVk3+/Oc/S8uWLc3U1I0bN8ratWtl06ZNJnjUdY8jR46Uffv2mf83a9ZMUlJSvC1K 6xFAAAEEEEAAAQQQQAABlwrYBpDa5tatW8u0adPk8ssvDyDQkcePP/7YJNC57rrr5JdffpGXX35Z kpKSXEpFsxBAAAEEEEAAAQQQQAABbwuEDCCVp127djJp0iTZsGGD71i0aJHJzKrbd9SqVUtatWol DRs29LYmrUcAAQQQQAABBBBAAAEEXCzgKIDU9tetW9dMZbWOJk2auJiFpiGAAAIIIIAAAggggAAC CBQWCBlAaqbVf/3rX3L22WebBDqFDx2F3L59O7IIIIAAAggggAACCCCAAAIuF7ANIHWLjqlTp8r4 8ePNfo+aQKfwoWsfjx8/7nImmocAAggggAACCCCAAAIIIGAbQGZlZcmMGTN8+z8G40pNTTX7P1IQ QAABBBBAAAEEEEAAAQTcLWAb+eXk5MiKFSuMQJcuXeSnn36SNWvWBBxz586VM844w91KtA4BBBBA AAEEEEAAAQQQQEBsA0jd2zE3N1diYmKkb9++0r17d2nTpk3AoUl14uLioEQAAQQQQAABBBBAAAEE EHC5gG0AWb16denTp48kJCRItWrVXE5B8xBAAAEEEEAAAQQQQAABBOwEbANIDRpvuukms8+jTl3V Ka0UBBBAAAEEEEAAAQQQQAABbwrYBpAHDhyQp556Svbv3y/Tp0+Xjh07yllnnRVwXHzxxWzj4c2+ Q6sRQAABBBBAAAEEEEDAYwK2AaTuAanbd+hXzciqW3gUTqKzbNkytvHwWKehuQgggAACCCCAAAII IOBNAdsAUpPnJCUl2cqwjYc3Ow6tRgABBBBAAAEEEEAAAe8J2AaQderUkc8++8yMOq5bty7oMW/e PLbx8F6/ocUIIIAAAggggAACCCDgQQHbADI2NlZatGhhtu1o1apV0KN58+Zs4+HBjkOTEUAAAQQQ QAABBBBAwHsCtgGkcuj6x/Hjx0u7du2KJNDRhDok0fFep6HFCCCAAAIIIIAAAggg4E0B2wDy9OnT 8tFHH8m4ceNk9erVRRLo6NTWX375hSQ63uw7tBoBBBBAAAEEEEAAAQQ8JmAbQGrm1RkzZsjBgweL ZSGJjsd6DM1FAAEEEEAAAQQQQAABzwrYBpA5OTmi23RUq1ZN/vrXv0rv3r2lUaNGMmvWLJkwYYLU rl1bRo0aJenp6Z4FpOEIIIAAAggggAACCCCAgFcEbAPI/Px8Mz1VA0gNHnUdZHx8vHTs2FGuvfZa qVWrlkyePFn27dvnFS/aiQACCCCAAAIIIIAAAgh4ViBkEp0qVapIYmKiGXlMSEiQI0eOyPfffy97 9uyR3Nxc2bhxo/lKQQABBBBAAAEEEEAAAQQQcLeAbQCpAaNu03H06FH59ddfpUePHmZE8q677pIr r7xSdu/ebUYnNcikIIAAAggggAACCCCAAAIIuFvANvLTkce2bduaoPHrr7+W8847T8444wwz+rh5 82Y5deqUdO3aVerWretuJVqHAAIIIIAAAggggAACCCAgIQPIRx99VFasWCH6tVmzZvL3v//dTGXV 0rlzZ/nXv/4lmomVggACCCCAAAIIIIAAAggg4G6BkHNP09LSzChk48aNpWrVqnLDDTeYPSHXrVsn n376qZx11lnuFqJ1CCCAAAIIIIAAAggggAACRiBkAFnYSdc7tmzZUlq1aiUNGzaEEQEEEEAAAQQQ QAABBBBAwCMCIQPIkydPyjPPPCPnnnuunHPOOUWOSy65RLZv3+4RLpqJAAIIIIAAAggggAACCHhX wDaAPH36tHz00UdmneOqVatMJtbCx9KlS02SHQoCCCCAAAIIIIAAAggggIC7BWwDyKysLJk+fboc PHiwWIWUlBS28XB3H6F1CCCAAAIIIIAAAggggIARsA0gc3JyZPny5eZEzbg6f/58k0DH//juu+/M 1h4UBBBAAAEEEEAAAQQQQAABdwuEnMKam5srMTEx0rdvX7nwwgvl7LPPDjg0mU5cXJy7lWgdAggg gAACCCCAAAIIIICA/QhkrVq15NJLLzX7PiYnJ8OFAAIIIIAAAggggAACCCDgYQHbEUgNHG+55RbR QHLNmjUky/FwR6HpCCCAAAIIIIAAAggggEBAAHngwAEZMGBAwFYdt912m+j3NZnOeeedV67beOh0 2aZNm5ops3qMHTvWd4d0O5GBAwf6HtM1mdnZ2Y4f51YjgAACCCCAAAIIIIAAAgiUTSAggDxx4oRJ muO/Vce6deskLy9PMjMzzShkeW3jkZGRIY0aNZJx48ZJfn6+OfwDyDFjxkjVqlXN97We6enpMnLk SF/rQz1eNiaejQACCCCAAAIIIIAAAgggEBBA6qhfSdc6hmsbj5dffllGjRolI0aMKHJXdGRy6tSp Mnz4cPNYbGysjB49WmbNmiX79u2TUI9zmxFAAAEEEEAAAQQQQAABBMouEFMwopdvXUaniW7ZsiVg raMGlVWq/B5nnj592owA+n9PRwV12mlZMrFqANi+fXupXr26LFmyxLxWfHy8zJs3T7p27So6Otmj Rw8zjVb/r8X/e2lpabaPW89xyqVB6fHjx52eznkOBbTvaB/SfqbTj3V/0d27d0v9+vUdXiE6Ttuz Z480aNBAateuLUlJSeYPHvozpD83lMgX8Eo/1TtBX438/mhXQ6/0Vfop/TRaBKKlr7L9XvE9SuMg PqeG/okLCCBDn14+Z2gwqGsa//u//9s3Ajlx4kS56667TBAZKkAM9XhJA0idIqsHJbwC1ocdtdUA UtfW7ty5U6pVqxbeF6rkq+n+qTodu06dOiaA1D+uEEBW8k0pwct7pZ8qCX21BB0jAk/1Sl+ln0Zg 5ytBlbzST6PpPVU/m1CCCxw7dszEAHxOte8htgGkjhbp1NEnnnjCfBB+9dVXTaCn6yJvv/12OXTo kNxzzz1yxx13mFGW0pZgI4w6KtmmTRuzJrJbt24VOgJZ2nbwvNACp06dMj+YWVlZsn//ftmxY4dv hDv0s6PjDP250TW6devWNVPCNYDUkXpK9Ah4oZ/q3aCvRk+fLK6mXuir9FP6abQI0Fej5U4VX0/e U53dQ9ttPPRDvgaQq1evlv79+0urVq3MVRs3bizDhg0z3588ebIcPXrU2asVc1bDhg3NlNVNmzYF PSPY4xp46F8JmjdvLqEeL1PleDICCCCAAAIIIIAAAggggIARsA0gddqIZmXVKaJ/+MMfzBpFLTrl UBPa6NpHHY0sawCZmJgoQ4cOlWeeeca3Ncd7771npjj26dNHrMenTJliXl/nJo8fP1769u1r6hbq ce41AggggAACCCCAAAIIIIBA2QVsA0gditfphhqwacIT/3L48GGzvYc+rueVtTz33HNy8cUXmyl/ mmxEM7Lq1FYNELXoVFYdVtbHdEqgjkBOmjTJ97KhHi9r/Xg+AggggAACCCCAAAIIIOB1AdsAMiEh QVq3bi1HjhyRp59+2jfSqCOTGvDt3bvXjELqVh7hKHpNaw9I3XfSCh712rrGcsaMGb7HNVur/yLg UI+Ho35cAwEEEEAAAQQQQAABBBDwsoBtAKmBoU4T1VE/Dd40m2m7du2kU6dO8vbbb5tgTqeY1qhR w8uGtB0BBBBAAAEEEEAAAQQQ8ISAbQCpU0UHDx5sRhl1+ujatWtN4pw1a9aYfRI1y+TIkSNFRyop CCCAAAIIIIAAAggggAAC7hawDSC16S1atJDPPvvMJNHxLx07djSjku3bt3e3EK1DAAEEEEAAAQQQ QAABBBAwAiEDSD3prLPOkhdeeEFWrVrlO6ZNm2b2Z6QggAACCCCAAAIIIIAAAgh4Q8BRAKkUderU kXPOOcd3NGnSxBtCtBIBBBBAAAEEEEAAAY8K6G4L0X549NaVW7NtA0jduuO1116T3NzcoBXQ7//7 3/+W3bt3l1sFuTACCCCAAAIIIIAAAghUnIDmPtFt/Kzt/PTf0XxY7dB2UcouYBtAaqIcDSBvv/12 s5WHf8nOzpb777/fbO+RlZVV9ppwBQQQQAABBBBAAAEEEKg0AR1p1EBRAy0NujQW0O379NDP/tF2 WHXXdmh7rMA4HHvYV9pNioAXjinYiiO/uHroyGKPHj0kIyNDevXqJR988IE0aNBANm7caILKH374 wWzhsWjRIpNsh4JAKAHrDUn/6LB//37ZsWOHVKnieCZ1qMtHxOP6ppSenm6yFCcnJ4tmM65atWpE 1I1KOBPwQj9VCfqqs/4QyWd5oa/STyO5Bzqrmxf6qVveU61Rxry8PFdu06cDYvHx8WZ/eT0KFy/0 1XC8p9p+ctf9HxVZy7x58+Tyyy+X0aNHy4ABA2Tu3LnmLxT6uJ5HQQABBBBAAAEEEEAAgegU0OBJ Dw0edaTRjUXbpe2z2urGNlZEm2wDSE2c8/HHH8vNN99sRolWrlwpL730kvz222+mbldeeaV8+eWX ZrSFggACCCCAAAIIIIAAAtEpoJMSNbDS6Z6ZmZnR2YgQtdZ2afu0nTaTMF3Z9nA2yjaA1KHds88+ W5577jn5+9//bqbiKXpiYqKMHz9e3nzzTbMPpDVKGc6KcS0EEEAAAQQQQAABBBAofwEry6rOLtTP +m7Nb6Lt0vZpO602l7+u+14h5OIzHerVYPHtt982i0+1aPbV119/XV555RXf99xHQ4sQQAABBBBA AAEEEPCOgAZV+nlfk8+4sWi7tH0k0Snb3bUNIA8cOCDXXXed/Nd//Zds3rzZjDzedNNNZk/IDRs2 mMBS10VqIhQKAggggAACCCCAAAIIRJ+ATufUQwMrK5FM9LUidI2tTKzaTqvNoZ/FGYUFbANIRV61 apVZbJqamioTJkyQ559/Xj777DNp2rSpGQJetmxZsftEwo0AAggggAACCCCAAAKRL2CtCbSCyMiv cclrqMGxNfrIGsiS+1nPCJmFNSEhwaxz/Oqrr+SGG24wo4/du3eX6dOny8UXXywpKSmlf3WeiQAC CCCAAAIIIIAAAhEhYI3KuTW4cnv7KqoThQwgr7rqKpk8ebJccMEFAfv1dejQwYxIaoZWTa5DQQAB BBBAAAEEEEAAgegXcHMAGf13p/JbUCSA1HWPV199tXTp0kV+/PFHk331rLPOKlJTfezGG2+UmTNn shC18u8jNUAAAQQQQAABBBBAAAEEyl2gSACp6x51XeOSJUvMHjA1a9aUZ599Vjp16iQPPfSQWQ+p 5fDhw7Jw4UKTXMetf6Uod31eAAEEEEAAAQQQQAABBBCIIoEiAWRMTIwkJSWJrn3UfSA1UY4GiRpU rlu3zhcsVq1a1UxdZQ/IKLrbVBUBBBBAAAEEEEAAAQQQKINAyH0g9doaTGqwqNt4UBBAAAEEEEAA AQQQQAABBLwpYBtAVqlSRXSkUUcltehX/b8WfYyCAAIIIIAAAggggAACCCDgHQGiQO/ca1qKAAII IIAAAggggAACCJRJIGgAqWsfNVmOJs3R5Dlvv/22nDx5Ur788kvp2LGj2Rfyj3/8o/menktBAAEE EEAAAQQQQAABBBBwv0DQANLaZHPr1q2yevVq2b9/v0mec+TIEVm1apWsXLlSMjIyzPfIwOr+TkIL EUAAAQQQQAABBBBAAAEVKDaAdMpDAOlUivMQQAABBBBAAIH/CJw+fdrspR3NB/cTAQS8J1AkgKxT p458+umnsmLFCkfHnDlzJD093XtytBgBBBBAAAEEECihwKlTp8wSIN13W79G+2G1Q9tFQQABbwjE FIwg5nujqbQyEgT0F4z+ssnKyjJTo3fs2OG6jL76l2T9o0rdunUlOTnZbIFjZS+OhHtAHUILeKGf qgJ9NXRfiPQzvNBX3dJP/UcZ9b5Zh/axaPwoZmXo199v1qEZ+q3D/2fHC/002t9Tg92jPn36RPpb YInrN3v2bNvPaF7oq+F4TyULa4m7Hk9AAAEEEEAAAQRKJqAf2nS0MTc3V5KSkiQ1NVVq1qxpjlq1 akXdYdVd26Ht0XZp+7SdFAQQcLcAAaS77y+tQwABBBBAAIFKFrBGGzXDfXZ2diXXpnxeXtul7fMf WS2fV+KqCCBQ2QIEkJV9B3h9BBBAAAEEEHC1gE5R1cDq+PHjkpmZ6cq2aru0fdrOaJyS68qbQqMQ KCcBAshyguWyCCCAAAIIIICAtfZRp3dqgKU5ANxYtF3aPmsaK1NZ3XiXaRMCvwsQQNITEEAAAQQQ QACBchbQgEqTyOXk5JTzK1XO5bVd2j4Cx8rx51URqEgBAsiK1Oa1EEAAAQQQQMBTAjqdUw8NrKwM j24E0OBR26fttNrsxnbSJgQQYASSPoAAAggggAACCJSrgLUm0Aoiy/XFKuniVvCoL88ayEq6Cbws AhUkYDsCqW90U6dOlS5dusjNN98sBw8elOnTp0vnzp2lY8eOMmHCBKYqVNCN4mUQQAABBBBAIHoF rFE5twZXbm9f9PY8ao5A+AVsA0hdEP3hhx/KkiVL5Oyzz5bdu3fL2LFjZenSpfLLL7+Yf3/11Vfh rxVXRAABBBBAAAEEXCjg5gDShbeLJiGAQBAB2wBSF0SvWLHCbG7btWtXEzj++uuvvsvs3LlT/vu/ /1sOHz4MLgIIIIAAAggggAACCCCAgMsFQk5hzc3NlWrVqkn9+vXlt99+MwukO3XqJK+99pqkpaWZ 0UkCSJf3EpqHAAIIIIAAAggggAACCBQI2AaQMTExUqVKFbOnj05f3bhxo0Fr3bq19O/fX2rXru3b 7wdNBBBAAAEEEEAAAQQQQAABdwvYBpCpqaly8cUXm+Q5t912m8ycOdMElK1atTKjjtnZ2UZHA00K AggggAACkSBgbdwezV8jwZE6IIAAAgggEEzANoBMSkqSq6++2gSIW7ZskWPHjol+r1u3bvLzzz/L 3r17JT093XyPggACCCCAQGUJ6PIKnS2je9Hp12g/rHZouygIIIAAAghEkoBtAKkV7du3r4wZM8bU WQPJRx99VNq3by+vvvqqHD9+XPr06SM1a9aMpDZRFwQQQAABjwjoKKMGi9YG7fp7SRPA6aGzZKLt sOqu7bA2Ztf2aTspCCCAAAIIRIJATEE66fxQFcnMzJTNmzebAFKnr8bGxpqEOvrUhg0bSp06dUJd gscRMALWhzzdImb//v2yY8cOMy3aTUU/6OnIfN26dSU5OVni4uKkatWqbmqi69vihX6qN9ENfdUa aczLy5MaNWq4rm8eOXJE4uPjze9dPQoXL/TVaO+nwe6R/vHdbWX27NnF/u7zQj+N9vdU+unvP5Fe 6KvheE919Mk9JSVF2rVrJ+ecc475RaYf+PXf+j2CR7f9CqA9CCCAQHQI6C96PTR4tNbkR0fNnddS 26Xts9rq/JmciQACCCCAQPkIOAogN23aJJdffrmcd955Zsrq119/LQMGDJDOnTvL66+/bqYPURBA AAEEEKhIAZ0Fo4GVTvfUmTJuLNoubZ+208GEITcS0CYEEEAAgQgTCBlALliwQK655hqZNWuWLF++ XPT/+otMRyCXLl0q77//vkmuQ0EAAQQQQKCiBKwMq/oHTA2wdFq8G4u2S9tnrYNkLaQb7zJtQgAB BKJLwDaA1L98TpgwQVatWuVrlWZc1XUmw4YNM2u81q5dK0ePHo2uVlNbBBBAAAFXCGhApclmNPmM G4u2S9tH4OjGu0ubEEAAgegUsA0gde3FDz/8INWrV5fXXntNHn74YbMGUqfRnHHGGSb7qpX9Ljqb T60RQAABBKJRQH8P6aGBlZX0IBrbEarOViZWbafV5lDP4XEEEEAAAQTKU8A2gLTSo5911lkyZMgQ ad26tUmgo7/ENDOc9Rdfzc5KQQAB9wtE88bsVt3df5e800JrTaAVRLqx5RocW6OPrIF04x2mTQgg gED0CdgGkAkJCdK8eXPZs2ePZGRkmHUYuh1Bbm6ufPjhh7Jv3z5p3Lix6LRWCgIIuFOADdrdeV/d 0iprVM6twZXb2+eWfkg7EEAAAS8J2AaQun1H3759zV59uubxqaeekl27dskf//hHeeaZZ8z01Usv vdRMZaUggIC7BNig3V330+2tcXMA6fZ7R/sQQAABBKJLwDaA1A3Qr732WmnYsKFs3rxZtm/fbvaj 0m09Dh8+LLVq1ZKRI0eKjlRSEEDAXQJWAKkzDnSWQWpqqvljkR76sx9th1V3bYe2R9tlZbZ0152j NQgggAACCCCAQPkJhNzGo2XLljJz5ky54YYbAmrRvn17+eyzz8zekBQEEHCXABu0u+t+0hoEEEAA AQQQQCBcAiEDSH0h3fPxxRdflGXLlvmOadOmSffu3cNVD66DAAIRJMAG7RF0M6gKAggggAACCCAQ QQK2AeSBAwdk4MCBctlll5kq62ijdegU1gsuuEBuueUWM52VUnoBMluW3o5nhl+ADdrDb8oVEUAA AQQQQAABtwjYBpA6jW3x4sWycOFCOXbsWECbdT3R+vXr5fPPPyeALEVvILNlKdB4SoUKsEF7hXLz YggggAACCCCAQFQI2AaQumWHZmJNTk6W2NjYgAbp1h66rYcWa4+qqGhxJVeSzJaVfAN4+ZACbNAe kogTEEAAAQQQQAABzwoUCSA1y+rzzz8vXbp0kYsvvli2bdsmOpW1X79+0rFjR99x/fXXS2ZmZpHA 0rOSDhtOZkuHUJxWqQJs0F6p/Lw4AggggAACCCAQsQJFAkj94Lhx40ZZsmSJrFq1yowyaqr7X3/9 VX755Rffodt6aOnUqZPUrVs3YhsYSRUjs2Uk3Q3qEkrA7RuYu719oe4vjyOAAAIIIIAAAqURCDqF Vfd/dFJq164tf//736V69epOTvf8OWS29HwXiEoANmiPyttGpRFAAAEEEEAAgXIRKBJAJiQkyEMP PWS26/jmm2+kUaNGUqNGDfn0008DtvHQx+fNm8dWHg5vC5ktHUJxGgIIIIAAAggggAACCESsQNAR yPT0dLNdR58+fWTu3LmyYMECufrqqwO28dDHzz777IhtWKRWjMyWkXpnqBcCCCCAAAIIIIAAAgiE ErDNwrp371558cUXpUoV29NCvQaPFwiQ2ZJugAACCCCAAAIIIIAAAtEuYBsZavIc3efxyiuvlB49 esjXX38d7e2t1PqT2bJS+XlxBBBAAAEEEEAAAQQQKKNAyH0gdS/ITZs2yU8//SS33nqrWfM4ceLE Mr6sd5/u9syPbm+fd3suLUcAAQQQQAABBBBAQMQ2gNQsq88884zUqlXLWO3cuVMWLlwoDz74oNm+ 4//8n/8jWVlZOJZCgMyWpUDjKQgggAACCCCAAAIIIFCpArYBpG7nMWjQIJNtdfHixfLII4+Y9ZCH Dh0yGVl1JPKCCy4wU1x1vSQFAQQQQAABBBBAAAEEEEDAvQKOsuOcc8450qVLF3n00UdlxYoV8j// 8z+SmJgomlF05cqV8uWXX8oll1xiAskdO3aUWeuBBx6QlJQU2bdvn+9auh5z4MCBEhMTY47OnTtL dna248fLXCkugAACCCCAAAIIIIAAAgh4XMBRAKlGx48flyeffFLuvvtueeWVVyQ3NzeA7tdff5Uf f/yxyPdL6qujms8//3yRp40ZM0Z0PaZO/Txx4oToViMjR470nRfq8ZLWg/MRQAABBBBAAAEEEEAA AQQCBUIGkIsWLZILL7xQunbtatZD6r6QOuqoJT4+Xv7617/K8OHDzf8TEhLKtOWHBo8anOr1df2l VTRYnTp1qu91YmNjZfTo0TJr1iwzShnqcW46AggggAACCCCAAAIIIIBA2QVsA8iDBw/Kww8/bEYW depqXl6eecVzzz1XZs+e7VsX+dJLL5lz/va3v4mumyxNmT9/vgkedb1lcnJywCV27dplXrtFixa+ 7+sIZGpqqmRkZEiox0tTH56DAAIIIIAAAggggAACCCAQKBBTMCU0vziU3bt3myQ5mzdvNqdo1tU7 7rhD6tSpIy1btizyNJ3mqkl2ShpEavDYr18/EwympaWZr71795YlS5b4/q/7UE6fPt2MhGrRc6zv 6XPsHree4/Tm66imtiVcRYl1vaiu49R1mxqYq+2IESPC9RIRc53JkydLgwYNzAhyUlKS6Gix9gld t1qcQ/369SOm/uGoyJ49e4o1CMf1y/Ma9NXf/6YW7OfVbf1U2xmtfZV+ynuq9XulPN8Pw3Ft+irv qdHQV+mnvKeWtJ/aBpDbt2+XwYMHy+233y7dunWTZs2a+bb0CMcbq3UNnbqqrxGsPPbYY3LzzTfb BojhDiB1jaUe4SrWD6ZeUwPIAwcOmC1R+vfvH66XiJjrzJw5Uxo1amT+yKABpP4xoXAAWdihWrVq EVP/cFQkJyenWINwXL88r0Ff/c+HHbf3U+1H0dpX6aeBH3bc3lejtZ/qzxh9lffUkn4wL8/f8cVd m37Ke2pJ+6ltAKkjZlu2bJHmzZuXaW1jSX8YCo9A6hrHNm3ayLhx43yjdv6jljqV1e5xDTAru5w6 dcoEpbpv5v79+0222j59+lR2tcL++jq1WacX161b10xF1gBSkx9ZJZiDdlo3FR29sjOI9LbSV0W8 0E+1H0ZzX6Wf/v5O4oW+Gs39tLh75LXf/17op7ynRvqnm9/rx+fU8Pzut/3krtMPdaqq9QFf94LU hDq6hYa++em6yIooumXI0KFDZcqUKeblNLAdP3689O3b10xxDfV4RdSR10AAAQQQQAABBBBAAAEE 3C4QNIDU6SK6LYYGijp19a233pL169fLfffdZ5LlLF26VL799lu59dZbZfny5RVipKOP+hcsXUun o1o6gjdp0iTfa4d6vEIqyYsggAACCCCAAAIIIIAAAi4WKBJA6lSRzz77TF599VUTKOo2HpqJ9aGH HpIFCxYEUOjjr7/+elgTzugL6JTZrVu3mtFFq+ho6IwZM8x6Aj00wY6usXP6uIvvIU1DAAEEEEAA AQQQQAABBCpEoEgAqWv0NFA7duyYrwKaqe/TTz8122ZowhsNJG+44QYzGqjTWPU5FAQQQAABBBBA AAEEEEAAAXcLFAkgdfqqjixqcHjXXXeZKat/+ctfzKjfmWeeabKy6rTWYcOGmeQousWHf7Dpbi5a hwACCCCAAAIIIIAAAgh4V6BIAKmBomY91XWGPXv2NPtAXnrppSZRjW63YCXU0dFIDTL1XF2bSEEA AQQQQAABBBBAAAEEEHC3QNAkOtZeIBpEarG2YdDgsvCWCyXdN8TdnLQOAQQQQAABBBBAAAEEEHCv QNAAUhPW5OXlmUys559/vtx5550mUY6ud+zVq5f53v/9v//XbKeh51IQQAABBBBAAAEEEEAAAQTc L1DsPpA62piRkSE///yz2cJDs7NmZmbKL7/84vuelRHV/Uy0EAEEEEAAAQQQQAABBBBAIOgaSB1Z dFr0XA0kKQgggAACCCCAAAIIIIAAAu4WKBJA1qlTR6ZNmyaLFy92dHzzzTeSnp7ubiVahwACCCCA AAIIIIAAAgggIEUCSE2cc84550iXLl0cHe3bt5eEhAQoEUAAAQQQQAABBBBAAAEEXC5Q7BpIl7eb 5iGAAAIIIIAAAggggAACCJRQgACyhGCcjgACCCCAAAIIIIAAAgh4VYAA0qt3nnYjgAACCCCAAAII IIAAAiUUIIAsIRinI4AAAggggAACCCCAAAJeFSCA9Oqdp90IIIAAAggggAACCCCAQAkFCCBLCMbp CCCAAAIIIIAAAggggIBXBQICyMzMTHnggQfksssuk5UrV8rhw4dlyJAhcsUVV8iuXbu8akS7EUAA AQQQQAABBBBAAAEECgQCAsjs7GyZNm2azJ07V/Tf+fn5smjRIvnxxx/l5MmTgCGAAAIIIIAAAggg gAACCHhYICCAPH36tMTExIh+veWWW+SSSy6RAwcOyPHjx+Wqq66S888/v8jRv39/2blzp4cJaToC CCCAAAIIIIAAAggg4A2BgAAyNTVVevbsaQLINWvWyPLlyyU3N1dOnDhhprT+/PPPRY758+dLTk6O N7RoJQIIIIAAAggggAACCCDgYYGAADI5OVkef/xxGT58uGOSxMREM2pJQQABBBBAAAEEEEAAAQQQ cLdAkSysTZs2lf/6r/+SxYsXyxdffCH16tWTlJQU+eSTT8x6yMLH119/Lenp6e5WonUIIIAAAggg gAACCCCAAAKBSXQsjwYNGkiXLl2kX79+Mnv2bNFpqoMGDQq6BvK8886ThIQEKBFAAAEEEEAAAQQQ QAABBFwuEHIfyHbt2kmHDh1czkDzEEAAAQQQQAABBBBAAAEEQgmEDCCtC7z88stywQUXSNeuXaVb t27y6KOPhro2jyOAAAIIIIAAAggggAACCLhIIGQAeeTIERk2bJj8/e9/lwULFpi1kboO8tlnnxXd wmPPnj0u4qApCCCAAAIIIIAAAggggAACxQnYBpC6ncdXX30lH3/8sRw+fDjgGrp1hybZ+eijj+TU qVMII4AAAggggAACCCCAAAIIuFzANoDMzs6WGTNmmH0hL7nkEvn+++/N6KMm1dGtPnT7junTp8vR o0ddzkTzEEAAAQQQQAABBBBAAAEEQgaQS5cuFd0f8r777pNevXqZTKwXXnih3HvvvVKrVi1ZtWoV AST9CAEEEEAAAQQQQAABBBDwgEDIKaw6VTU2NlYaNWoUwKH7Q8bHx0tubi5TWD3QUWgiAggggAAC CCCAAAIIIGAbQOr+ji1btpTMzEyZNGlSgJauizx48KA0bdrUjFBSEEAAAQQQQAABBBBAAAEE3C1g G0CmpKRI3759JT8/X/73f/9XunTpYrbx0K/jx4+XkydPysUXXyw1atRwtxKtQwABBBBAAAEEEEAA AQQQENsAMi4uToYMGSINGzaUrKwsWbJkidnGQ7/q6KMGjjfeeKMkJiZCiQACCCCAAAIIIIAAAggg 4HKBkPtAtmrVymRi1b0g/YtmZf3yyy/lvPPOczkRzUMAAQQQQAABBBBAAAEEEFCBkAGkntSxY0d5 6aWXzOijbuOhx1tvvWWms1ap4ugSaCOAAAIIIIAAAggggAACCES5gOPor379+mbto27joUeTJk2i vOlUHwEEEEAAAQQQQAABBBBAoCQCjgPIklyUcxFAAAEEEEAAAQQQQAABBNwnQADpvntKixBAAAEE EEAAAQQQQACBchEggCwXVi6KAAIIIIAAAggggAACCLhPgADSffeUFiGAAAIIIIAAAggggAAC5SJA AFkurFwUAQQQQAABBBBAAAEEEHCfAAGk++4pLUIAAQQQQAABBBBAAAEEykWgVAHkhg0bZMCAAdK9 e3e5+uqrZefOneVSOS6KAAIIIIAAAggggAACCCAQOQKlCiCPHTsmc+fOlYULF5qvOTk5kdMiaoIA AggggAACCCCAAAIIIFAuAqUKIKtUqSIJCQmmQvo1JiamXCrHRRFAAAEEEEAAAQQQQAABBCJHoFQB ZKtWreTrr7+WBQsWyKxZsyQ9PT1yWkRNEEAAAQQQQAABBBBAAAEEykWgVAFkUlKSdOzYUbp162a+ WqOR5VJDLooAAggggAACCCCAAAIIIBARAqUKICOi5lQCAQQQQAABBBBAAAEEEECgQgUcB5CvvPKK 9OjRw2ReveCCC2Ts2LEVWlFeDAEEEEAAAQQQQAABBBBAoHIFQgaQR44ckeHDh8vf/vY3+emnn0zm VV37OH78eLnqqqtkz549ldsCXh0BBBBAAAEEEEAAAQQQQKBCBGwDyNOnT5tkOR999JEcPnw4oEK6 dcfMmTPl448/llOnTlVIZXkRBBBAAAEEEEAAAQQQQACByhOwDSCzs7NlxowZooFk7969Zc6cOfLj jz+avR+vu+46s33H9OnT5ejRo5XXAl4ZAQQQQAABBBBAAAEEEECgQgRCBpBLliyR5ORk+dOf/iQX X3yxWf940UUXyahRo6RWrVqycuVKAsgKuVW8CAIIIIAAAggggAACCCBQuQIhp7DqVNXY2Fg544wz Ampav359iY+Pl9zcXKawVu495NURQAABBBBAAAEEEEAAgQoRsA0gdX/Hli1bSlZWlrz33nsBFZo2 bZocPHhQmjRpYkYoKQgggAACCCCAAAIIIIAAAu4WsA0gU1JS5LLLLjNrICdMmCDdunXzbeUxbtw4 OXnypJnWWqNGDXcr0ToEEEAAAQQQQAABBBBAAAGxDSDj4uJkyJAh0qBBA8nMzJRFixb5tvI4cOCA pKamyo033iiJiYlQIoAAAggggAACCCCAAAIIuFwg5D6QrVu3NplWhw4dGkChWVm/+OIL6dixo8uJ aB4CCCCAAAIIIIAAAggggIAKhAwg9aTOnTvLSy+9ZEYfdRsP/frWW2+ZjKxVqji6BNoIIIAAAggg gAACCCCAAAJRLuA4+mvYsKF0797dBI36tVmzZlHedKqPAAIIIIAAAggggAACCCBQEgHHAWRJLsq5 CCCAAAIIIIAAAggggAAC7hMoEkDq1hw33HCDybbq5Ljmmmtk586d7pOhRQgggAACCCCAAAIIIIAA AgECRQLIvLw8mTdvnlnn6OSYM2eO5OTkwIoAAggggAACCCCAAAIIIOBygaBTWOPj4x03W7fwiImJ cXw+JyKAAAIIIIAAAggggAACCESnQJEAsk6dOvLxxx+b0ccFCxbIwoULZenSpfLBBx9IvXr1AlqZ kJAgTz31lKSnp0dn66k1AggggAACCCCAAAIIIICAY4EiAWRcXJx06NDBZFrt1q2btGnTRp5//nlz HDp0yFw4NTVVpk6dKj/88IPccsstooEkBQEEEEAAAQQQQAABBBBAwN0CxWZhXbZsmVx66aXSs2dP effdd81opE5X/eijj8wayWuvvdbsD6kBJwUBBBBAAAEEEEAAAQQQQMD9AkGzsI4cOVJGjBghmiBn 1apVct5558m3335rprMOGTLEjFBSEEAAAQQQQAABBBBAAAEEvCVQbBbWdevW+SS2bNli1jref//9 0qtXL7nwwgt9x6BBg2TXrl1lVps4caJJxmMdOrqZnZ3tu+7Jkydl4MCBpX68zBXkAggggAACCCCA AAIIIICAxwWKBJAawCUnJwew6NrH2bNny1dffSXz58+XH3/80XfoyKR/oFcaTw0Ov/nmG9m7d6/k 5+fLiRMnTGIeHQm1ypgxY6Rq1aqlfrw09eI5CCCAAAIIIIAAAggggAAC/xEoEkBqAHf8+HHHRrrl R1m38YiNjZX33ntP0tLSzOvq/3Vkc+vWrSY4zc3NNUl7hg8f7nt89OjRMmvWLNm3b1/Ixx03hhMR QAABBBBAAAEEEEAAAQSKFQi6jYcmytEMq06OL7/8Uho1ahR24tWrV0uTJk0kKSnJTJHNy8uTFi1a +F5HRyg1G2xGRkbIx8NeOS6IAAIIIIAAAggggAACCHhQIKZgxDE/0tqt6yFHjRplgkMdldSvPXr0 kOnTp0vXrl1Ndf2/p+fYPW49x2k7dVSzJKOwoa6rxKdPnxadqqsjqgcPHpTdu3ebREVuK5MnT5YG DRpI7dq1TfCvo8lVqlQxo9TFOdSvX99VDHv27CnWINIbSl/9/W9qwX5e3dZPtZ3R2lfpp7ynWr9X eE+NHIHifv/znvr7z2skF95TeU8t6XtqxAWQusayT58+ZquQYMFiRQSQugZTj3AV6wdTr6kB5IED B2Tnzp3Sv3//cL1ExFxn5syZZkS6Tp06JoDUbV4KB5CFHapVqxYx9Q9HRXJycoo1CMf1y/Ma9NX/ BJBu76faj6K1r9JPAz/suL2vRms/1Z8x+irvqSX9YF6ev+OLuzb9lPfUkvbTiAogC488Wh1d10C2 adNGxo0b5xu100CzX79+ZiRSp7LaPW6trayMH0rrNU+dOmWC0qysLNm/f7/s2LHDBMpuK5psSacX 161b1yRj0gBSkx/ZOWindVPR0Ss7g0hvK31VJJiB2/qpNSoQrX2Vfvr7O4kX+irvqZH+W+P3+tn9 /vdCP+U9Nfr7Ke+pzu9hxHxyf+CBB+SVV14xmVgLB3yJiYkydOhQmTJlimmZTgUdP3689O3b15wb 6nHnHJyJAAIIIIAAAggggAACCCBQnEBEBJBWltWlS5eaUStrL8iEhARZtGiRqbuOPupfsPQxHdXS EbxJkyb52hXqcboAAggggAACCCCAAAIIIIBA2QQiIoDUEcQtW7aYtQL+hyaysdY8ajKWGTNm+B5f smSJWWNnlVCPl42JZyOAAAIIIIAAAggggAACCEREAMltQAABBBBAAAEEEEAAAQQQiHwBAsjIv0fU EAEEEEAAAQQQQAABBBCICIFSBZAbN26UQYMGyYUXXijXXHON7Nq1KyIaQyUQQAABBBBAAAEEEEAA AQTKT6BUAeTRo0fl22+/lR9//NF81b0NKQgggAACCCCAAAIIIIAAAu4WKFUAqZlQ4+PjjYx+1f9T EEAAAQQQQAABBBBAAAEE3C1QqgCyVatWMnPmTJk3b5588cUX0qhRI3cr0ToEEEAAAQQQQAABBBBA AAEpVQCpezXq9ho9e/Y0X3UbDgoCCCCAAAIIIIAAAggggIC7BUoVQLqbhNYhgAACCCCAAAIIIIAA AggEE7ANIA8ePCg33nij9OrVy/a49tpr5dChQwgjgAACCCCAAAIIIIAAAgi4WMA2gMzLy5O5c+fK /PnzbY+PP/5Yhg4dKqtXr3YxFU1DAAEEEEAAAQQQQAABBLwtEHIKq653dFJ0O48JEyaIBp0UBBBA AAEEEEAAAQQQQAAB9wnYBpCpqanSvXt3qVWrlrz44osm66oes2fPliFDhog+/re//U3+9Kc/SVxc nCxZskSysrLcp0SLEEAAAQQQQAABBBBAAAEE7LOw5ufnmxFFHYUcPHiwybqqx6WXXioXX3yx6OM5 OTlm+qoGmZs3b5ajR4/CigACCCCAAAIIIIAAAggg4EIB2xHI7OxsWbFihQkSDxw4ENB8DSpPnDgh S5culZo1a5rj+PHjcurUKRcy0SQEEEAAAQQQQAABBBBAAAHbAPL06dNmSurhw4fl+eef961v1IDy vffeM/8/efKkycCam5srMTExiCKAAAIIIIAAAggggAACCLhUIOQaSJ2yqqOKU6ZM8W3l0bt3b/nu u+/MFNbatWub0UkNMhs2bChJSUkupaJZCCCAAAIIIIAAAggggIC3BWwDSJ2m+uCDD0qDBg3MaOOi RYvMdh6LFy82QWW1atVk2LBhsmvXLrP2sVGjRiaxDgUBBBBAAAEEEEAAAQQQQMB9AiG38ejQoYN8 +OGHJhurf0lJSZFJkyaZ5DoDBw6UH374QV544QWTcIeCAAIIIIAAAggggAACCCDgPoGQAaQ2Waex vvvuu2b00drKY86cOSZ41FFIHXns0aOHtGnTxn1CtAgBBBBAAAEEEEAAAQQQQMAI2AaQe/fulXvu uUd+++03admypVx44YW+rTy6dOkCIQIIIIAAAggggAACCCCAgIcEbANIzbA6c+ZMufbaa00CnSef fNJDNDQVAQQQQAABBBBAAAEEEEDAX8A2gKxSpYrJtKojkDp99emnnzYjkEOHDjVZVykIIIAAAggg gAACCCCAAALeEbANIHWLjtdee03q1atnRLKzs02ynI8++kguu+wyueKKK2Tu3Lne0aKlCCCAAAII IIAAAggggICHBWwDyPj4eLn88svlyy+/NIHiG2+8IZp9VcuSJUvk66+/ljFjxphtPCgIIIAAAggg gAACCCCAAALuFnCUhbVjx45y0UUXyW233SYLFiyQH3/8UUaOHGlk1q5da0YmKQgggAACCCCAAAII IIAAAu4WcBRAWgSrV6+Wxx57TJ566ikTRGqJi4uTmJgYdyvROgQQQAABBBBAAAEEEEAAAfttPNRn +/btJmlO7969zVdd//j5559LRkaG4Rs4cKBvjSSeCCCAAAIIIIAAAggggAAC7hWwHYE8dOiQ2QdS g8bvv/9e1qxZYySSk5Pl/fffl3nz5sk//vEP37pI9zLRMgQQQAABBBBAAAEEEEAAAdsA8vjx47J0 6VKfkm7hoYlzvv32WxkxYoTZ0qNhw4YoIoAAAggggAACCCCAAAIIeEDANoA8efKk6FYezz33nMnC +tZbb0nfvn2la9euHqChiQgggAACCCCAAAIIIIAAAv4CtgFkWlqavPPOO3LvvfeaLKwtW7YM0NPR Sc3GquskKQgggAACCCCAAAIIIIAAAu4WsA0gExISpH379ibTqn8ZO3asSapzww03yMyZMyU3N9fd SrQOAQQQQAABBBBAAAEEEEAgdBZWy+jLL7+Uyy67THr06CHPPPOMSaqje0BqkFmlSol2A4EdAQQQ QAABBBBAAAEEEEAgCgVsIz8dWbzlllvM9NU//vGPMnv2bPnpp58kOzvb19RzzjlH6tSpE4VNp8oI IIAAAggggAACCCCAAAIlESgSQJ44cUL+53/+Ry655BK5+OKL5e233zbbdWzdutV33ZiYGOnTp4/M mjXLnFujRo2SvCbnIoAAAggggAACCCCAAAIIRKFAkQDyyJEjMmHCBPnuu+9k4cKFviZVq1ZNxo8f L8OGDZPY2FizfYdOaW3VqlUUNpsqI4AAAggggAACCCCAAAIIlFSgSACpW3ccPXrUXEfXN/7jH/+Q xYsXy48//ij33HOPNG/eXHQEMi8vT3Jyckr6epyPAAIIIIAAAggggAACCCAQpQJB10BqgKhFp7N+ 8skn8uSTT8qCBQtERyH1sfz8fPO4dV6Utp1qI4AAAggggAACCCCAAAIIlECgSACZmpoq559/vrnE 6dOnRfd6nD59ujz00EPSs2dPmTRpkpw6dcps7ZGYmFiCl+JUBBBAAAEEEEAAAQQQQACBaBYoEkAm JyfLP//5T7MG8qOPPpK0tDTTvszMTPnhhx9k27ZtJrDUBDoDBgwwW3lQEEAAAQQQQAABBBBAAAEE 3C8QdApr06ZNpXfv3jJkyBD54osvzPYd9957b4DG3r175bPPPpO77rpLdu3a5X4pWogAAggggAAC CCCAAAIIeFzAdh9ItencubNceuml8vjjj8v3339vgsauXbv62JYtWxawL6THPWk+AggggAACCCCA AAIIIOBagZABpNXyWrVqSa9eveSqq66Sf//73zJnzhyToVUT6+iaSAoCCCCAAAIIIIAAAggggIC7 BRwHkP4MrVu3losvvlgefPBBmTZtmjRu3NjdSrQOAQQQQAABBBBAAAEEEEBAShVAWm6ahVWns+oo JAUBBBBAAAEEEEAAAQQQQMDdAmUKIN1NQ+sQQAABBBBAAAEEEEAAAQT8BQgg6Q8IIIAAAggggAAC CCCAAAKOBAggHTFxEgIIIIAAAggggAACCCCAAAEkfQABBBBAAAEEEEAAAQQQQMCRAAGkIyZOQgAB BBBAAAEEEEAAAQQQIICkDyCAAAIIIIAAAggggAACCDgSIIB0xMRJCCCAAAIIIIAAAggggAACBJD0 AQQQQAABBBBAAAEEEEAAAUcCBJCOmDgJAQQQQAABBBBAAAEEEECAAJI+gAACCCCAAAIIIIAAAggg 4EiAANIREychgAACCCCAAAIIIIAAAggQQNIHEEAAAQQQQAABBBBAAAEEHAkQQDpi4iQEEEAAAQQQ QAABBBBAAAECSPoAAggggAACCCCAAAIIIICAIwECSEdMnIQAAggggAACCCCAAAIIIEAASR9AAAEE EEAAAQQQQAABBBBwJEAA6YiJkxBAAAEEEEAAAQQQQAABBAgg6QMIIIAAAggggAACCCCAAAKOBAgg HTFxEgIIIIAAAggggAACCCCAAAEkfQABBBBAAAEEEEAAAQQQQMCRAAGkIyZOQgABBBBAAAEEEEAA AQQQIICkDyCAAAIIIIAAAggggAACCDgSIIB0xMRJCCCAAAIIIIAAAggggAACrgkgT548KQMHDpSY mBhzdO7cWbKzs7nDCCCAAAIIIIAAAggggAACYRJwTQA5ZswYqVq1quTn58uJEyckPT1dRo4cGSam 8F7GCnLDe9XIuFpJ2laScyOjdc5q4aZ2uakthe+e07Y5Pc9Z74iss9zSNre0I1jvKEnbSnJuZPVE +9q4qV1uagvvqUX7rVvur1vawXtq8PfWcNxfVwSQubm5MnXqVBk+fLiRio2NldGjR8usWbNk3759 EfV70rppVaq4gr6IrbbLScd0s4NTg4jqmEEq4+Z7pM11cp8wiPReKr73G95Tf59940YHJz+rkd9T 6at6j3hPjfyeyj36/R652SEc76kxBSN2+ZHfne1rmJGRIT169JDp06dL165dzcnBvue0ndu3b2f6 q1MszkMAAQQQQAABBBBAAAHPCBBAeuZW01AEEEAAAQQQQAABBBBAoGwC7pxHWTYTno0AAggggAAC CCCAAAIIIBBEwBUBZMOGDSU+Pl42bdrka+KOHTvk2LFj0rx5c248AggggAACCCCAAAIIIIBAGARc EUAmJibK0KFDZcqUKYZEt/QYP3689O3bV9LS0sLAxCUQQAABBBBAAAEEEEAAAQRcEUDqbRw3bpyc OnXKZE2Ki4sTHYGcNGkSdxgBBBBAAAEEEEAAAQQQQCBMAq5IohMmCy6DAAIIIIAAAggggAACCCBg I+CaEUjuMgIIIIAAAggggAACCCCAQPkKEECWry9XRwABBBBAAAEEEEAAAQRcI0AA6ZpbSUMQQAAB BBBAAAEEEEAAgfIVIIAsX1+ujgACCCCAAAIIIIAAAgi4RoAA0jW3koYggAACCCCAAAIIIIAAAuUr QABZvr5cHQEEEEAAAQQQQAABBBBwjQABpGtuJQ1BAAEEEEAAAQQQQAABBMpXgACyfH25OgIIIIAA AggggAACCCDgGgECSNfcyoppyMSJEyUmJsZ3jB071tELO3mek3McvRgneV5g/vz5Af3U6rMpKSmy b98+Wx8n/dDJOZ6/CQAUK3Dy5EkZOHCgTJ48Oeg5pe1fTp7n5BxuHQIqYNdPeY+lj0SCQLB+GOx9 tbTve06e5+ScSLAKex3yKQg4FJg3b15+fHx8/sKFC80zcnJy8ps0aZL//vvv217ByfOcnOOwmpyG QL72p+Tk5Py9e/eWSMNJP3RyTolelJM9I2C9Zxb8Is/XI9h7Z2n7l5PnOTnHMzeDhhYr4LSf8h5L J6psgT//+c8B76ObNm3Kr1WrVsD3Svu+5+R5Ts6pbKPyen0prwtzXXcJnDhxIn/AgAH5jz32WEDD 3njjjfxOnTrlZ2VlBW2wk+c5OcddmrSmvAVKE0A66YdOzinvtnH96Bco7o9vpe1fTp7n5Jzol6UF 4RSw+yMx77HhlOZa4RTQoHLQoEHmkqV933PyPCfnhLNdkXYtprCGfUzXnRfUqSzLly+Xtm3bBjSw devWsnbtWikIIIM23MnznJzjTlVaFUkCTvqhk3MiqU3UJboEStu/nDzPyTnRpUVto03ASR90ck60 tZv6VpyA9p/169dLhw4dzIuWtj85eZ6Tcyqu5RX/SgSQFW/OKyKAQAUI6B816tWr51sLOXjw4Ap4 VV4CAQQQ8IYA77HeuM/R1MoFCxbIV199Jf3794+makdlXQkgo/K2UWkEELAT6Nmzp07P9x0FU7Fk 6dKlQhBJv0EAAQTKLsB7bNkNuUJ4BTIyMkxyskceeUS6du0a3otztSICBJB0CgQQcL1AYmKiTJo0 SWbNmhUyC6vrMWggAgggEGYB3mPDDMrlSiSg2VhbtGgho0aNEqe7A5ToBTiZAJI+UDqB2NhYM6d8 zZo1ARdYt26dtGnTRgqysQW9sJPnOTmndLXmWQj8R0D7ql1x0g+dnIM5AqUVKG3/cvI8J+eUtt48 DwEV4D2WflAZAho89urVSwqyWhcJHkv7vufkeU7OqQyPCnvNSMvqQ30iV8BJumI9p6DzljiFspNr R64MNYs0gcKpva1sgv5ZhOmrkXbXvFOfUNktQ22XRN/1Tl+pzJba9VPeYyvzzvDaloDuBOD/fhlM xsnnS95TS96n2Maj5Gaefob+sGqAaB2Ft/UI9kOoYKGe5/QcT+PTeMcChfub9lf6qmM+TiwngcL7 6xX3Phrq/ZL32XK6QVzWCDjpp7zH0lkqW8DaRsP/M6n178JBJe+p4b9bMXrJChvu5IUQQAABBBBA AAEEEEAAAQSiVoAkOlF766g4AggggAACCCCAAAIIIFCxAgSQFevNqyGAAAIIIIAAAggggAACUStA ABm1t46KI4AAAggggAACCCCAAAIVK0AAWbHevBoCCCCAAAIIIIAAAgggELUCBJBRe+uoOAIIIIAA AggggAACCCBQsQIEkBXrzashgAACCCCAAAIIIIAAAlErQAAZtbeOiiOAAAIIIIAAAggggAACFStA AFmx3rwaAggggAACCCCAAAIIIBC1AgSQUXvrqDgCCCCAAAIIIIAAAgggULECBJAV682rIYAAAggg gAACCCCAAAJRK0AAGbW3joojgAACCIRD4IEHHpCYmBhzTJ48ORyX5Br/X+DkyZMycOBAn+/YsWPL 1WbixIm+1+rcubNkZ2eX6+txcQQQQMCLAgSQXrzrtBkBBBCIAAH/D/tWAOf/1Q3B3Pz5830BzeDB gx2p+z8n2oOgd955Rz799FPT7scee0wKB5AZGRlSu3Ztn1FCQoIsWrSoiJP/eXb94rbbbpM33njD PH/p0qUyfvx4R+achAACCCDgXIAA0rkVZyKAAAIIVKDA9ddfL06DrgqsFi/lUECDvgcffNCc3alT Jxk9enTAM/VxDZAPHTrk+35eXp5069atyEjwyy+/bM4bNGiQjBgxwrYGN910kwwYMMCc8/TTTwcN SB02gdMQQAABBIIIEEDSLRBAAAEEKl1AA4P8/HxzzJs3z1efmTNnEgBU+t0pXQWsoE+f/dBDD0lS UlLAhazHk5OTZe/evXLixAlf4DdlyhTfuRpovvnmm6Lnvf766yErExsbKy+++KLUqlVLNCDVIJKC AAIIIBA+AQLI8FlyJQQQQACBMAh0797dF0hoALBp0yZz1eKmvBY37dGqiv8aR2uKbEpKiuzbt6/Y 2ubm5krTpk2Drt0rvK6vuPWTWt9evXr5XmPatGklns7qlDNYG4sbvfWfIus/Zbjw+U7PC1ZH9Zs6 dap5SEcfdR1kcaVv376SlpYmGvi1atXKnLZ161bf+kUr0NTRTD3PSWncuLH07NnTnDpr1izbe+3k epyDAAIIIPAfAQJIegMCCCCAQFQLFDft0Vo39/zzzxdpX1ZWlrzyyitB260B4rBhw0wQo8V/7Z5e s169er51ff4XqIwpt3Zt1IC1cHCtgaZ/UOtff/9Ay+l5xXWcn3/+2een00kLjz467XAaxOr909HH u+++W5yumdRgVEe1tei9nj17ttOX5DwEEEAAgRACBJB0EQQQQACBiBJYsGCBL0DTwKFPnz6++vlP dS083dV/2qMGgffdd59vfZ2OgmkgYU2T/fOf/1xsm8eMGeN7fX09K/GL/zX9r+c/9dJ/yq0mdPGf jutf908++aTM5oXb6H99q30aXN91111mNM+aCqovbE0btTx0lFeT2Whxep5dA9atW+d7uG3btrZt tQJXbc/69evNuU2aNJH4+HhfEhwdfczMzAy6ZlID4mCJd1q3bu173TVr1pTZmwsggAACCPx/gYJf HhQEEEAAAQQqXKAgW2Z+wa8i2+P9998PqFdOTk5+QXAR9DkFAZTv3IKAKL9gDZw5ryAQyV+4cGGx 7SsItnzXu/POO33/LggS8wuCzqDXtKu3f50LAkjf9fzrZ4ft/5zCdfB/nl0b/Z2s9hdn59S48Hl2 bbDurZ29f/39Pa3nWA6WgXWfrP/7tyeYrf/1C0aRK7x/84IIIICAWwUYgeRPCQgggAACESdgjZBZ GTetdYfVqlXzTY10Wum4uDhp3ry5o9P9k7SsXbvWjFpaZceOHQEZQx1dsIJOctLGxMREMx23cNGp t7oW0toyxOl5ZW2a3pMlS5aYZDdW0VFHHbVt3769jBw50nxbE/Do9/1HJ3VKrNZz6NCh5hz/NZNl rRfPRwABBBCwFyCApIcggAACCFS6QOGpqTpd0T9hSuFprZq1U6df6tRL/wCkrA3ReljTPzV4LBiR 9F0yPT3d91qFp8RaU0H1a6htJspax2DP12m0OvU0VNFptYWn/lrP0X0TZ8yYYf7r9LxQr+efBCnY uRpEHjx40De1+Pjx49K1a1d57733TFAYKgGPdU2d8lp4nWUkB/yh3HgcAQQQiGQBAshIvjvUDQEE EECgiECbNm3MGj674p+Fs3AgqM/TJDGFN7XX7w8fPlzuueceX6CoiWisjesbNmwoqamp5mWDbVKv AZyeE2w9nj4n3KNk/m0svF2FFYDp67Zr184cWj8NtDT7rGYo1UDSf/2m5en0PDv/sqw/1Ayujz/+ uBl1fPXVV01gGCxDq3+m12B1Kck6TH7MEEAAAQRKIODWubm0CwEEEEAgsgX810CGWh9ot/ax4Fee WWdY+BrFrbGzzrfWxfmvgbTW+fnXrSBYzS8Y8TSYoa5ZeM1fcefbtdd/DaRV18JfreeXpD6hzrXa 6fQ8u97lf7/s1nEGu4Zl7/R+BltnWRAY5xdkfzX9wv/+RfZPBLVDAAEEokOAEcgSBNucigACCCBQ OQK63u27774rsl5OR9qKm8JqTY8MlnHV2haiuNbcdNNNvr0odQSzX79+JpOp3TX1Wo888oiZgmmV YOv8wiloVx+djmtNCdXX1HNvvfXWoC+vayOtacNOz7Nrh//6RP+psaHarqOfmnFVRx/V0r/YrZn0 N9fnbNu2TXQLEC3WPpOhXpvHEUAAAQScCcRonOvsVM5CAAEEEEAAAQScCWgwqIl5Dh06ZNYyanKc 0u4H6ewVfz9LEy4NGTLEbMViJeUpHGCW5HqciwACCCAQKMAIJD0CAQQQQAABBMIuoCOGzz77rLlu sDWjYX/B/3/Bd955x7ePZ+ER4fJ6Ta6LAAIIeEmAEUgv3W3aigACCCCAQAUK+I8G6svqVNlgyYvC VaWJEyfK7bffbi5XkaOe4ao/10EAAQSiQYAAMhruEnVEAAEEEEAAAQQQQAABBCJAgCmsEXATqAIC CCCAAAIIIIAAAgggEA0CBJDRcJeoIwIIIIAAAggggAACCCAQAQIEkBFwE6gCAggggAACCCCAAAII IBANAv8PSs43sfUDp6AAAAAASUVORK5CYII= --=_mixed 0056238265257D80_= Content-Type: image/jpeg; name="plot_ratio.jpg" Content-Disposition: attachment; filename="plot_ratio.jpg" Content-Transfer-Encoding: base64 /9j/4AAQSkZJRgABAQEAYABgAAD/4QBaRXhpZgAATU0AKgAAAAgABQMBAAUAAAABAAAASgMDAAEA AAABAAAAAFEQAAEAAAABAQAAAFERAAQAAAABAAAOw1ESAAQAAAABAAAOwwAAAAAAAYagAACxj//b AEMAAgEBAgEBAgICAgICAgIDBQMDAwMDBgQEAwUHBgcHBwYHBwgJCwkICAoIBwcKDQoKCwwMDAwH CQ4PDQwOCwwMDP/bAEMBAgICAwMDBgMDBgwIBwgMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwM DAwMDAwMDAwMDAwMDAwMDAwMDAwMDP/AABEIApkD2gMBIgACEQEDEQH/xAAfAAABBQEBAQEBAQAA AAAAAAAAAQIDBAUGBwgJCgv/xAC1EAACAQMDAgQDBQUEBAAAAX0BAgMABBEFEiExQQYTUWEHInEU MoGRoQgjQrHBFVLR8CQzYnKCCQoWFxgZGiUmJygpKjQ1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2Rl ZmdoaWpzdHV2d3h5eoOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK 0tPU1dbX2Nna4eLj5OXm5+jp6vHy8/T19vf4+fr/xAAfAQADAQEBAQEBAQEBAAAAAAAAAQIDBAUG BwgJCgv/xAC1EQACAQIEBAMEBwUEBAABAncAAQIDEQQFITEGEkFRB2FxEyIygQgUQpGhscEJIzNS 8BVictEKFiQ04SXxFxgZGiYnKCkqNTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4 eXqCg4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2dri 4+Tl5ufo6ery8/T19vf4+fr/2gAMAwEAAhEDEQA/AP1o/bc/4K5fs8/8E5fF+iaD8ZfiD/whuq+I rRr/AE+D+wtT1H7RArmNn3WlvKq4YYwxB9sV4n/xFGfsJ/8ARc//ACzPEP8A8g19Nftcfs3/AAW+ JXhPUvGvxW+E/wAOviI3gvSbm7SfxB4ZstXuba2iRpnjia4icqDtJ2ggE1/PDP8Atx/FXxR4R8Se NtA/4J3/ALCVn4F0bSNP8VvNf/Dyxkl07RdTvJLWwuJpDexeYpkjdXkWJAgjaV0ij5AB/TxpGrQa 7pNrfWkhltbyJJ4X2ld6MoZTg4IyCODzVysfwPO9z4N0eR4LO3eSyhZorUqbeMmNflj2krsHQYJG MYJrYoAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKA CiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAK KKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKK4v41/tB+Af2a/CltrvxF8ceD/AG i3d2thBqHiPWbbSrSa4ZHdYVlndEaQpHIwQHJEbHGFOOQ+F3/BQj4CfHDx1YeFvBXxx+D/jDxPqn mGz0jRPGWnahf3flxtLJ5cEMzSPtjR3O0HCoxPAJoA9jorzP4m/tR+H/AIU/tEfC/wCGeo2esz69 8Wf7V/sie2ija0tv7OtluZ/tDNIrruRgE2I+WznaOay/2xP2w9J/Y28J+E9S1Hwx4s8YX3jfxTZe D9H0rw6tl9rur+7EphUteXNtAiExMCzSjBI7ZIAPYKK8m+EP7RHiv4i+J5bHXvgd8Ufhtp8Ns9wd X8R6h4amssqR+6xp+rXcwYgkgmIIAhywOAfM9H/4KgweOvBb+NfBPwP+O3xB+GRkJtfGGgaZpUtp qlurhHurSxl1CPVbmENu2mKyZpVQtEsqsjMAfUtFeI/F/wDbt8JfDO08AQaNpPin4ieJvinbNf8A hPw34atIjqer2iRxSzXRN5Lb29tBFHNEzyXU0IBdEGZGVDc+Bn7WzfGD4i6r4O134bfE34XeKtOs xqUNl4rsbRodUtNyI81re2Fzd2UvlvLGrxifzYzIhaMKysQD2KiiigAooooAKK+fvFH/AAUA0+f4 seJPBnw7+HHxJ+M2r+CbgWXieXwkml2+n6BdtHHItnLd6nfWUEtz5cis0Ns8zxAjzRGWQN6J+z78 e9P/AGh/BM+r2ei+KPDN9pt4+m6roniLTWsNT0e8REd4JUJZH+WSNllheSGRHV45JEYMQDvaKK+d vhP/AMFLPAPxj/bj8afAPS9O8W2/inwXbzzHVruyij0TWntlsTeQWc4lLyTWx1G2WVGjTDFsbgpN AH0TRXgHxs/b0j+FX7UNp8INB+FnxM+JnjO58L/8JhJH4bk0S3t7Ww+1tabnk1LUbMF/NAG1N3DA +uOz/Zd/am8Nfta/D6913w9BrGmXWianPoWvaJrFqLXVPDupwBDNY3UYZlWVBJG2Ud43SRHR3R1Y gHplFFFABRRRQAUUUUAFFFFABRRRQAUUVmTeLtKt5nil1TTo5I2KsrXCBlIOCCCeDQBp0VBY30Go 26TW80U8T52vGwdWwcHBHHWvkP4Q/wDBXm0+MX7P+ifFuw/Z/wD2grf4Va5bpfL4mFloOoLa2Zl8 trp7Cy1WfUnjQgs6xWkkgVWbYQCaAPsOivE/F37ZLnwb4e8VfDv4a+OfjT4Q8SaYNWtde8G6l4fF isJGVydQ1O0diV+b92jgdCQ2VrF/Y9/b1vf2zfDfhLxNovwR+LnhrwL4101dW03xPrtz4cWxa3eL zImeG21ae8UyDAA+z5BYbtoyQAfQ1FeZfsd/tS+H/wBtj9mfwf8AFbwpZazp/h3xvY/2hY2+qxRx XsSb2TEqxySIGyh4V2GMc15pe/8ABSWHxFdeLJvhz8GvjL8X/D/grULvSNR17wvb6NDYSX1ozJdW 1quo6jaXF40TqYy9tDLG0gZEd3VlAB9MUVzPwm+KWlfGv4b6R4p0RNSj0zWYfOij1CwmsLyAhirR zW8yrLFKjqysjqGVlIIrgf2xf2ydL/Y30XwPPfeEvGPjbUviL4st/BmiaT4bFiLue/ntrq5Tc17d W0CR7LSUFmlGCV4wSQAeyUV87eGP+ClHgqG68f2HxD0Pxf8ABfX/AIa6CfFus6V4xhs2mOiBTnU7 eXT7m7t7iAOrxMsUzSpIm1o1Lx786x/4KQzx6boGu6z8BPj/AOHPAviGeFIPFV5pOl3FrawzKTDd XVla6hNqlrAw27mmskMO8ecsQDbQD6aorzG1/am0C9/bD1H4JpZ6yPFemeDrXxvJdmKL+z2sri+u LJI1fzPMMwltpCVMYXaVIcklRl/syftoeGv2u/EXi1fA+leI9U8H+Fb59Ki8aNDAnh/xDdxHbcRa dJ5xmuUhk3RvOIRAXR1SWQq2AD2KiiigAooooAKKKKAON/aAv9G0z4EeNrrxDb3d54fttAvpdTgt lVp5rVbeQyogYhS5QMAGIGSMkCvxM/be/wCCYPwc1/8A4JS/Cj9obRPjD8fvCHwX8MfD/S9K8TaU 0GnXPiXxv4am1aK40+xn23dnYLPaveOiF1nBVLfCSyQqsv6ff8FW/wDglD4H/wCCuHwK0jwR428Q +K/DUPh7Um1nTbvQ5LdWW7+zywJ5yzRP5kQEpJRTGxwAHWvxv+Cf/BID/gl5a/tJ+G/hB4h/ap8b eMvipbX8OnahaW9xHpnhzW75FEj2yXQsHhiWUgxCNNQaXewiWQzECgD+iHwXJYyeD9JbTI2j01rO E2qNkssOwbAcknIXHUk1rVXsrOHT7SK3t4o4IIFEccaKFSNQMBQBwABxgVYoAKKKKACiiigAoooo AKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigA ooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACi iigAooooAKKKKACiiigAooooA/IH/g9W/wCUWXgH/squnf8Apo1ivyA/4Ncf+U6/wM/7j/8A6j2p 1/X7RQB8d/tof8pav2Kv+55/9M0NZP8AwWx0G88U+Ef2b9Nsdb1Tw3e33x68LQw6pp0dtJeae7C7 AmiW5imgLqeQJYpEyOVI4r6b+OX7LXwx/adt9Og+JXw48CfEODR2kewj8S+H7TVksmkCh2iFxG4Q sEUErjO0Z6CuP0//AIJrfs5aX4R1Lw/a/AH4KW2g6zcW93f6bF4G0xLS+mtxKsEssQg2SPEJ5wjM CUE0mCN7ZALXgP4BeIfhVcanqvi745/FH4jaANOniutJ8R6d4cislQqC0udN0m1uC6qGAHmlSGOV JwR8WWvwW8afshfsnW/xR/Zi/bT8Ozfs3fD7w3qOo6F4W8c6Hpvijw9dNHJdlbIa9BJb30VnHK0d siGSaaBoNhaQAQD7g+DX7DHwT/Z08Wt4g+H3wd+FngTXnt3tG1Lw94TsNLvGhYqWiMsESPsYqpK5 wSo44FVtP/4J9/AbTfigvjm1+CPwhtvGy6kdYHiCLwdpyaqL4yGQ3X2kQ+b55kJcybt24k5zzQB8 8/EXw5oP7cFt+zt40uviRrn7Mv7VGueBbrV/B1pbXFrNexG/02OS/wBPn02/iaLU7e3kEUskBRJk +zK4e3YFhf8A2MPjL8b/AIW/tw3/AOzv8U/iR4U+PkWm+BD4vufGumeGU8OaroV22oLDFp+pWkEs toFngl8y3dPKkZbWbdG4Blr6j+Nf7O3w/wD2lfDdro3xH8CeDvH+j2V0L23sfEmi22q20E4VkEqR zo6rIFd13AZw7DOCal+DfwG8Dfs6eEW8P/DzwZ4U8B6DJcNdtp3h3SLfS7NpmCq0pigRELsFUFsZ IUc8CgDwD/gsf4u1Pwd+x/YPBq+o+HfCeqeNvDeleOdXsbySxm0vw1carbw6pN9ojw9ugtmdXmVk McbO24Yrzq8+E3gf9kz/AIK2fATwz8B/DnhrwLa+PPC3iS6+IfhvwlZw6fpl3o9tFbtp2qXVnbgQ rMmoSLbw3JRXdbm4j8xlXZX3VqWnQazp1xZ3dvDdWl1G0M0MyCSOZGBDIynhlIJBB4INcV8Df2Wv hj+zFb6jB8Nfhx4E+HkGsNG9/H4a8P2mkpetGGCNKLeNA5UOwBbONxx1NAH5C/CL4CeCfhF/wbXf DL466J4Y0mH4w+EdN0bVdG8ZTI0+uaY41+FDBBeOxmitSkkqG1jdYCs0o2Yds/tzXFRfs7+AF+D8 Xw8HgXwavgC3iSGPwyNFtho8caSCVEFps8kKsgDgBcBgCORmu1oA+J/+CLWqWXgT4dfFb4U60YdN +KPgb4leI7/xNps8gF7cxajqc99Y6lg/PJb3FrND5c2MMYmXO5GAqft+/Grwl8e/iV+z94XPifRt d+COu/FK78KfER7S+WTSr2+g0q6lsdGvZEzHJDLqQtYZbd22SyYt5Fbc8dfTnxw/ZE+E37Tl5p1x 8Svhf8PPiHPo6SR2Enibw3Z6s9krlS6xG4jcoGKqSFxnaM9BWzJ8CvBM/wAIh8PZPBvhV/AIsRpY 8NNpNudI+yAYFt9k2eT5QAA2bduB0oA+BtX+LXgj/gl3+3D+0FN8PtM0/QPg14A+Clv438YeEvD8 cdvo+keJBeTx6esFsmILS8v7ON1eNPJ80W9tI4cnzB47qnwS+PH/AAT+/Zc+Bnxj8a+Avh7a3PwJ 8V3XjXx54j0jxjqGp67qOneILhx4iEmmHR4owFF2twyi6k8r+zoypkKA1+n/AIc/Y8+EXg74WzeB dI+Ffw50rwPcXyapL4es/DVlBpUl2kkciXDWyxiIyq8UTByu4NEhByox23i3wppfj3wvqeha7pmn 61oetWsthqGn39ulzaX9vKhSWGWJwUkjdGZWRgQwJBBBoA+FfjF4p8fWX/BdTT7z4YeG/BHjK+u/ gIGlj8QeKrnQbRbY+ICRLHPb6ffGRi20BTGqlWJ38AH6B/YI/ZS179mfwt451fxnrmna78QPi34q n8beJ20uFotK027mtra3Wxst4Ej28EVtFGs0oEkxDSMse8Rp6xpHwi8KeHPFNprmn+F/DthrVhpK aBbahb6bDFdW+nI4dLJJVUMturgMIgQgIBAzXS0AFFFFABRRRQAUUUUAFFFFABRRRQAV89eNf+Ry 1f8A6/Jv/Rhr6FooA5n4Of8AJONO/wC2v/o16+O/+CJnxY8MfAz/AIIT/BLxb4z8Q6P4W8L6J4VE 9/quqXaWlpaIbqVQXkchRlmVQM5LMAMkgV91V4h4K/4Jq/s5/DbxdpniDw78APgp4f1/RrhLyw1L TfA+l2l3YzIdySxSxwB43UgEMpBBHBoA8g/4I3fDbXPht/wTRQazol94VtPEeseJfE2haDdxeTPo uk6hqd5d2ULxf8siYZVl8vgp521grBlHXf8ABFD/AJRH/s5f9iBpP/pMlfTdxAlzC8ciLJHICrKw yrA9QR3FZngjwPovw08JadoHhzR9L8P6Fo1ulpYabp1pHaWdjCgwkUUUYCRoo4CqAAO1AHyh/wAG +v8Ayhk/Z9/7Fr/24mrzjwx+yzq2iaHq3jX9lH9sy1+Hnwo03xNq3iPxV4b1zQNK8XeHLC9MqXV9 aGeVre90uEP573ELXBaM3DMvkHJb6Qg/4JVfsvWNzFPB+zd8BYZ4WDxyJ8P9JV0YHIYEW+QQecit 7xt+wB8B/iT8Sbjxn4i+CXwj8QeMLq4juptd1Lwfp11qU00YURyNcSQmQuoRAGLZAVcdBQB5r+yN 8efjZ+3F+wF8LviPo9/8O/hn4z8UWslzq66r4Uv/ABBpV/EkssMdzZRLqNlLHBcrGlzE0kkh8mdA QT89eWf8FYU+Ifhrwr+x6tw/g3xr8RLb496SwMcdz4Y0XUZ/7K1wouC2ozWqbNoJzOcgkDB2r9+1 h+LPh54f+IE2jTa9oOj63N4d1FNX0p7+yiuW0y9RHjS6gLqfKmVJZFEiYYLI4BwxyAfGXxY/Y3j+ KHi/4o/GT9rLUvA/hTwlqvw5l+Gf/CP+HtZubvS9C0W5u4rm8v7rVZ7e1leeW4SHBFvDFbR24JaQ s7jzn4/at+0B/wAEz/hXZfFnwt+1LYfHz4YN/Ymi+Evh54w8K6bLqviyO6mtIkisdc05oJbzUZYv OeB2gkRw+ZEk2mYfpPe2cOoWktvcRRzwTqY5I3UMkikYKkHggjjBryv4RfsFfAz9n7xpF4k8B/Bb 4T+CPEMETwx6poHhHT9NvY43GHQTQxK4VhwQDgjrQB+f3/BS39nz4xftOf8ABW3x54T+EHi3Q/C1 zd/s8aRNq1vfJcRy+JoE8S6mf7IW6gljksYrlfMSW5jJkVcKoG9nX7f/AOCdP7TXgj9o/wDZ1sLf wh4ZHw7vPAezwzr3gKW3W1ufAt7bxqraa8SqoEaLjy3VQkke1lAyQPYU+Hfh6L4hy+LU0HR08VXG nJpEusiyiGoSWSSvKlq0+3zDCskkjiMttDOzAZJNU9I+DHg7QPibq/jaw8J+GrHxl4gt4rPVNft9 Lgi1TUYIgBHFNcqolkRAqhVZiF2jAGKAOpooooAKKKKACiiigDm/jB4e1Txd8JvFOk6HefYNa1TS Lu0sLnOPs9xJC6RyZ7bXKn8K/mPHj/4P+K/2BtE/Yt0H9j/xTpH7csdxb6Q2rnwxZpqFtqEeofa5 b5tSD/2h5ZtA0pDRiGOJiA3kRrIf3S/4LT+LP2k9A/ZEurP9mz4c+HfiTrfiD7XpniSy1N1ElnpU llOsk1spu7cyXG/YqovmsS2BG1flLpfwa/4KfftQ/wDBMHwv+zHc/s4/DTw58J9Y0TSdCTWtZnt7 LXNPsree3ljnuYLjUnkhlXyVMg+w+cgDFI1kCEAH9B3hyzudO8Pafb3tx9rvLe3jjnn/AOe0gUBn /E5P41erN8LaRJ4e8Nadp8k7XUlhaxW7TMMNMUQKXIycE4z1PXrWlQAUUUUAFFFFABRRRQAUUUUA FFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAU UUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRR RQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFF ABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAV5JrX 7eXwN8N6vr2n6j8Z/hRYX3hS8j07W7a58XafFNo907tGkFyjSgwys6soRwGLKQBkGu4+Lmiav4l+ FXibTfD96+ma9qGlXVtpt4rFGtbl4XWKQEcgq5U57Yr+UrwJqfh7wNoXxD/ZR8EfAL4l2Xxu+Lng bwz4I1bQdXti7L4rs9Tkvb/VGDTO8Vt9m8mWIoioqxl2VYwZHAP62KKzPCOkTaB4U0uwuJvtE9ja RW8kvJ8xkQKW555IzzWnQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAF FFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUU UUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRR QAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFA BRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQBhfE3xTceBfhv4h1y0sn1K60bTbm+htFOGuniiZ 1jB7FioH41+J/wCx5qH/AAVn/wCCi/7POhfGjwT+0V8F/B3hTx3Jd3el6PqOiWaTWMKXU0OwBdHu SIwYyE3zySFNpc7s19rf8Fk/+Ce/xT/akFt8QfBH7VnxS/Z+0H4feHLyfVdI8JRXkn9s+VvuDMRD qNmhlCKUUOD2+YCvzGi/4JifEL9lL/gk9pv7RHh79v79pDwz8HIdGtPEdp4c0PRptNvLaHUbuPhb b/hI4rVZmmuzI6rNl2Z9pkkYKwB/RD4cgvbbw/YR6lNFcahHbxrdSxjCSShRvYcDgtk9B9BV+sXw BOLjwLosi3c9+slhAwuZlKyXGY1/eMCSQzdTknk9TW1QAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQ AUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAB RRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFF FFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUU UAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQB8sf8FW/+CUPgf8A 4K4fArSPBHjbxD4r8NQ+HtSbWdNu9Dkt1Zbv7PLAnnLNE/mRASklFMbHAAda+H/hR/wZb/s2eGLD w/N4r8e/GDxZq2nGGTVVgvrHTdM1aRCDIogW1eeGGTBG1bkyKrcS5w1fr5rOrWugaTdX97PHa2dl E888znCRRopZmJ7AAE/hX5M6H/wdVQah47sPE15+zF8YNN/Zh1HVf7Oi+MM8M4sAhka2W5aE2ot/ LF2piZRel1VWO1pV8ggH602VnDp9pFb28UcEECiOONFCpGoGAoA4AA4wKsVFBOlxCkkbrJHIAysp yrA9CD3FS0AFZninRrrxH4W1PTrPVtQ0C7v7WW3g1OwSB7vTXdCqzxLPHLCZIyQyiWOSMlRuRlyp 06zPFOjXXiPwtqenWerahoF3f2stvBqdgkD3emu6FVniWeOWEyRkhlEsckZKjcjLlSAfPf8AwS+1 bxHffCX4h2Pifxj4m8d6joHxN8T6PHq+vTxSXs8FvqMkcSsIY4oY1VQAI4Yo41HCoowKP2y7m/8A iR+038FPhLJrvifQPCvjSPXda11/D2tXWi6jqC6bb23kWovLSSO5giMt4srmCSN2NuiFjG8iN0n7 J/7Fcn7KVv4st4fip8S/HFn4w1K71m5h8Qx6LGLW/u5mmubqFrDT7V1eR3J2szRrgbEWotV/YQsN R+D3w68Op8R/ilD4q+FvzaF4+l1O1v8AxTvaF4J2uZbu2mtrrz4nZZFnt3QkI4VZI43QA+Yl+Lvj C00bxB8El8ZeMX0m1/aEtPhlD4h/tmd9ei8P3Gi2+vNaLqJP2kzqsr2X2lpDdLEQ/nGcCUe5/sh3 WofCn9tH40fByHXvFfiHwf4a0Hw14r0Q+INcutdvdIbUm1O3ubRr27eS6kjL6Ys6LPLIVNxKqlYw iL08X/BPbwenwJvfBr654wk1bUPEf/CaTeMGvIf+EhPiATLMuqhxCLZZVZEUQrbi1EKiDyPIzEep /Z4/Zd0/4Aap4o1qbxN4q8c+MfGs9vLrniTxFJa/br9baLybaER2kFvawwxIWCpBBGC0kjtukkd2 APUqo3uvw6fMYpI71mAzmOzmlX81Uj9avUUAZf8Awltr/wA8dT/8Ftx/8RR/wltr/wA8dT/8Ftx/ 8RWpRQBl/wDCW2v/ADx1P/wW3H/xFH/CW2v/ADx1P/wW3H/xFalFAGX/AMJba/8APHU//Bbcf/EV 4f4r/wCCsH7MvgPxVqWha78fvhFout6Ldy2GoaffeKbO2u7C4icpLDNE8geORHVlZGAKkEEAivoS v4gv+CsX/KU39pb/ALKr4o/9O91QB/XX/wAPjf2T/wDo5H4I/wDhY2H/AMdo/wCHxv7J/wD0cj8E f/CxsP8A47X8StFAH9tX/D439k//AKOR+CP/AIWNh/8AHaP+Hxv7J/8A0cj8Ef8AwsbD/wCO1/Er RQB/eP8AC79obwb8cfAtj4p8E+ILLxh4Y1TzPser6IG1Cwu/LlaKTy54Q0b7ZEdDtJwyMDyCK3Lz x3p+nW7zXBvoIUxueSwnRVycDJKY618M/wDBrj/ygo+Bn/cf/wDUh1Ovtn4x/wDJONR/7Zf+jUoA P+Fw+HP+gj/5Ly//ABNH/C4fDn/QR/8AJeX/AOJrw2igD3L/AIXD4c/6CP8A5Ly//E0f8Lh8Of8A QR/8l5f/AImvDaKAPcv+Fw+HP+gj/wCS8v8A8TWl/wAJba/88dT/APBbcf8AxFfPdfTFAGX/AMJb a/8APHU//Bbcf/EUf8Jba/8APHU//Bbcf/EVqUUAZf8Awltr/wA8dT/8Ftx/8RR/wltr/wA8dT/8 Ftx/8RWpRQBl/wDCW2v/ADx1P/wW3H/xFH/CW2v/ADx1P/wW3H/xFalFAGX/AMJba/8APHU//Bbc f/EUf8Jba/8APHU//Bbcf/EVqUUAZf8Awltr/wA8dT/8Ftx/8RS/8Jda/wDPHVP/AAW3H/xFadFA Hjnxq/4KFfA39mvxRb6H8Rvix4C8Aa3d2i38Gn+I9Zh0q7mt2d0WZYp2R2jLxyKHA2kxsM5U45D/ AIfG/snf9HI/BL/wsrD/AOO1+Cf/AAerf8pTfAP/AGSrTv8A076xX5A0Af21f8Pjf2Tv+jkfgl/4 WVh/8do/4fG/snf9HI/BL/wsrD/47X8StFAH9tX/AA+N/ZO/6OR+CX/hZWH/AMdrr/gr/wAFCvgb +0p4ouND+HPxY8BeP9btLRr+fT/Dmsw6rdw26uiNM0UDO6xh5I1LkbQZFGcsM/wzV+v3/BlT/wAp TfH3/ZKtR/8ATvo9AH9Nf/CXWv8Azx1T/wAF1x/8RR/wl1r/AM8dU/8ABdcf/EVp0UAZn/CXWv8A zx1T/wAF1x/8RR/wl1r/AM8dU/8ABdcf/EVp0UAZn/CXWv8Azx1T/wAF1x/8RR/wl1r/AM8dU/8A Bdcf/EVp0UAZn/CXWv8Azx1T/wAF1x/8RR/wl1r/AM8dU/8ABdcf/EVp0UAZn/CXWv8Azx1T/wAF 1x/8RR/wl1r/AM8dU/8ABdcf/EVp0UAZn/CXWv8Azx1T/wAF1x/8RR/wl1r/AM8dU/8ABdcf/EVp 0UAZn/CXWv8Azx1T/wAF1x/8RR/wl1r/AM8dU/8ABdcf/EVp0UAZn/CXWv8Azx1T/wAF1x/8RR/w l1r/AM8dU/8ABdcf/EVp0UAZn/CXWv8Azx1T/wAF1x/8RXPfFH9ofwZ8DvAl94p8a6/ZeD/DOl+X 9s1fW92n2Fp5kixR+ZPMFjTdI6INxGWdQOSBXaV8Af8AB0d/ygo+Of8A3AP/AFIdMoA9t/4fG/sn f9HI/BL/AMLKw/8AjtH/AA+N/ZO/6OR+CX/hZWH/AMdr+JWigD+2r/h8b+yd/wBHI/BL/wALKw/+ O0f8Pjf2Tv8Ao5H4Jf8AhZWH/wAdr+JWigD+2r/h8b+yd/0cj8Ev/CysP/jte/8A/CXWv/PHVP8A wXXH/wARX8C1f3+UAZn/AAl1r/zx1T/wXXH/AMRR/wAJda/88dU/8F1x/wDEVp0UAZn/AAl1r/zx 1T/wXXH/AMRR/wAJda/88dU/8F1x/wDEVp0UAZn/AAl1r/zx1T/wXXH/AMRR/wAJda/88dU/8F1x /wDEVp0UAZn/AAl1r/zx1T/wXXH/AMRR/wAJda/88dU/8F1x/wDEVp0UAZn/AAl1r/zx1T/wXXH/ AMRR/wAJda/88dU/8F1x/wDEVp0UAZn/AAl1r/zx1T/wXXH/AMRR/wAJda/88dU/8F1x/wDEVp0U AZn/AAl1r/zx1T/wXXH/AMRR/wAJda/88dU/8F1x/wDEVp0UAZn/AAl1r/zx1T/wXXH/AMRR/wAJ da/88dU/8F1x/wDEVp0UAZn/AAl1r/zx1T/wXXH/AMRXgH/D439k7/o5H4Jf+FlYf/Ha+kq/gDoA /tq/4fG/snf9HI/BL/wsrD/47R/w+N/ZO/6OR+CX/hZWH/x2v4laKAP7av8Ah8b+yd/0cj8Ev/Cy sP8A47R/w+N/ZO/6OR+CX/hZWH/x2v4laKAP7yPhd+0P4M+OPgSx8U+CtfsvGHhnVPM+x6vom7UL C78uRopPLnhDRvtkR0O0nDIwPIIrof8AhLrX/njqn/guuP8A4ivhP/g1x/5QUfAz/uP/APqQ6nX3 /QBmf8Jda/8APHVP/Bdcf/EUf8Jda/8APHVP/Bdcf/EVp0UAZn/CXWv/ADx1T/wXXH/xFH/CXWv/ ADx1T/wXXH/xFadFAGZ/wl1r/wA8dU/8F1x/8RR/wl1r/wA8dU/8F1x/8RWnRQBmf8Jda/8APHVP /Bdcf/EUf8Jda/8APHVP/Bdcf/EVp0UAZn/CXWv/ADx1T/wXXH/xFH/CXWv/ADx1T/wXXH/xFadF AGZ/wl1r/wA8dU/8F1x/8RR/wl1r/wA8dU/8F1x/8RWnRQBmf8Jda/8APHVP/Bdcf/EUf8Jda/8A PHVP/Bdcf/EVp0UAZn/CXWv/ADx1T/wXXH/xFH/CXWv/ADx1T/wXXH/xFadFAHjnxq/4KFfA39mv xRb6H8Rvix4C8Aa3d2i38Gn+I9Zh0q7mt2d0WZYp2R2jLxyKHA2kxsM5U45D/h8b+yd/0cj8Ev8A wsrD/wCO1+Cf/B6t/wApTfAP/ZKtO/8ATvrFfkDQB/bV/wAPjf2Tv+jkfgl/4WVh/wDHaP8Ah8b+ yd/0cj8Ev/CysP8A47X8StFAH9tX/D439k7/AKOR+CX/AIWVh/8AHa6/4K/8FCvgb+0p4ouND+HP xY8BeP8AW7S0a/n0/wAOazDqt3Dbq6I0zRQM7rGHkjUuRtBkUZywz/DNX6/f8GVP/KU3x9/2SrUf /Tvo9AH9Nf8Awl1r/wA8dU/8F1x/8RSf8Jba9odT/wDBbcf/ABFalFAGX/wltr/zx1P/AMFtx/8A EUf8Jba/88dT/wDBbcf/ABFalFAGX/wltr/zx1P/AMFtx/8AEUf8Jba/88dT/wDBbcf/ABFalFAG X/wltr/zx1P/AMFtx/8AEUf8Jba/88dT/wDBbcf/ABFalFAHH/Hu00S++B3jSDxLdy2HhyfQr6PV bmNGd7e0Nu4mkCqCxKx7jhQSccAmv5+fFWl/tiH/AIJS6P8AB3xdN8Jbb9h5NN08zfHCz0+6uNRl 8Nm8iureYadHI1+G+aG3CnS1ZSAZZFQSXVfsP/wV2/YE+If/AAUN/Z1s/B/w5+NviL4J6rZXkt3c 3Wl/aRH4gha1mh/s+5MFxCwgdpFLEiUAL/q2Nfnp4E/4NTPjb4r+BHhvwD8S/wBuH4iXPgRLeyg1 nwFplvf3mgxwwSRyfZLU3F+sWyNo1MUj2YCMiP5Py7aAP2o8I29laeE9Li06TzdOitIktXzu3xBA EOe+VxWlVPSNIg0LSbWxtI/KtbKJIIU3FtiKoVRk5JwAOTzVygAooooAKKKKACiiigAooooAKKKK ACiiigAr+IL/AIKxf8pTf2lv+yq+KP8A073Vf2+1/EF/wVi/5Sm/tLf9lV8Uf+ne6oA8AooooAKK KKAP6/f+DXH/AJQUfAz/ALj/AP6kOp19s/GP/knGo/8AbL/0alfE3/Brj/ygo+Bn/cf/APUh1Ovt n4x/8k41H/tl/wCjUoA8NooooAKKKKACvpivmevpigAooooAKKKKACiiigAooooAKKKKAP5gf+D1 b/lKb4B/7JVp3/p31ivyBr9fv+D1b/lKb4B/7JVp3/p31ivyBoAKKKKACv1+/wCDKn/lKb4+/wCy Vaj/AOnfR6/IGv1+/wCDKn/lKb4+/wCyVaj/AOnfR6AP6fqKKMDAGMigAoowB0AFH4UAFFGB6CkY DaTgetAC0UUUAFFFFABRRRQAUUUUAFFFFABXwB/wdHf8oKPjn/3AP/Uh0yvv+vgD/g6O/wCUFHxz /wC4B/6kOmUAfyBUUUUAFFFFABX9/lfwB1/f5QAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUA FFFFABX8Adf3+V/AHQAUUUUAFFFFAH9fv/Brj/ygo+Bn/cf/APUh1Ovv+vgD/g1x/wCUFHwM/wC4 /wD+pDqdff8AQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAH8wP/B6t/wApTfAP/ZKt O/8ATvrFfkDX6/f8Hq3/AClN8A/9kq07/wBO+sV+QNABRRRQAV+v3/BlT/ylN8ff9kq1H/076PX5 A1+v3/BlT/ylN8ff9kq1H/076PQB/T9RRRQAUUUUAFFFFABRRRQB5d+1t+1t4I/Yx+DWq+MPG/ij wr4ditra4bTINc1u30ldZu44JJks4ZJj80sgjICqGbqQpxivjr4h/wDBx38GPBv/AATPt/jlY+If hbrHxCm0PT9Vb4Wx/ES0OsR3FxNDHLZZihkn82JZXYk2o/1Z3iJdzp9Nf8FB/wBgD4N/8FCfgqvh 341aJLq/hzw/JLq9rPFqlzp76TOLeSM3StDIoYpG7kLKHj7lDivwC8FftZf8EevgrqGmWkf7PHx7 +IN74VuEjj8Q6lMZo/EDwP8ALdS2zavBA6SlQxie1jQq21oVBKUAf00eF9bTxR4a07U442iTUbWK 5VG5KB0DAH3Ga0aoeHdcj8TaBYalAkiQahBHcxLIAHVXUMAcEjOD2Jq/QAUUUUAFFFFABRRRQAUU UUAFFFFABRRRQAV/EF/wVi/5Sm/tLf8AZVfFH/p3uq/t9r+IL/grF/ylN/aW/wCyq+KP/TvdUAeA UUUUAFFFFAH9fv8Awa4/8oKPgZ/3H/8A1IdTr7Z+Mf8AyTjUf+2X/o1K+Jv+DXH/AJQUfAz/ALj/ AP6kOp19s/GP/knGo/8AbL/0alAHhtFFFABRRRQAV9MV8z19MUAFFFFABRRRQAUUUUAFFFFABRRR QB/MD/werf8AKU3wD/2SrTv/AE76xX5A1+v3/B6t/wApTfAP/ZKtO/8ATvrFfkDQAUUUUAFfr9/w ZU/8pTfH3/ZKtR/9O+j1+QNfr9/wZU/8pTfH3/ZKtR/9O+j0Af0/UDoKKKACiiigAoboeM0UUAFF FFABRRRQAUUUUAFFFFABRRRQAV8Af8HR3/KCj45/9wD/ANSHTK+/6+AP+Do7/lBR8c/+4B/6kOmU AfyBUUUUAFFFFABX9/lfwB1/f5QAUUUhcDvQAtFAYH1oLAc0AFFJuHTPNLQAUUUUAFFFFABRRRQA UUUUAFFFFABX8Adf3+V/AHQAUUUUAFFFFAH9fv8Awa4/8oKPgZ/3H/8A1IdTr7/r4A/4Ncf+UFHw M/7j/wD6kOp19/0AFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQB/MD/werf8pTfAP/ZK tO/9O+sV+QNfr9/werf8pTfAP/ZKtO/9O+sV+QNABRRRQAV+v3/BlT/ylN8ff9kq1H/076PX5A1+ v3/BlT/ylN8ff9kq1H/076PQB/T9RRRQAUUUUAFFFFABRRRQBxvx/hE/wI8bRto154jWTQb5TpNq SJ9TBt5P9HTCud8n3BhGOWHyt0P4ef8ABNL/AIKuftPf8E6P2KPBfwbt/wDgnN8efE8Xg4Xirqsd jq2mm9E97PchnhGjyYcLMEZt53shbC7tq/uj8W/EmqeDvhX4m1jRbFdT1nSdKuryxs2BK3c8cLvH EcEHDOAvBB5r+aXTv+Cg/j7SP2WPjPr3iT9tbxp4x+JPjzwF4W8a+GLbQ/FU1jcaD4iudZmW60O2 sbe42KY4EAniiiiRY5VPlBVjLAH9N/h3UptZ8P2N5PayWM93BHNJbSZ327MoJQ5AOVJxyB06Cr9Z vhG4vbvwrpc2pR+VqM1pE90m3btlKAuMdsNnitKgAooooAKKKKACiiigAooooAKKKKACiiigAr+I L/grF/ylN/aW/wCyq+KP/TvdV/b7X8QX/BWL/lKb+0t/2VXxR/6d7qgDwCiiigAooooA/r9/4Ncf +UFHwM/7j/8A6kOp19s/GP8A5JxqP/bL/wBGpXxN/wAGuP8Aygo+Bn/cf/8AUh1Ovtn4x/8AJONR /wC2X/o1KAPDaKKKACiiigAr6Yr5nr6YoAKKKKACiiigAooooAKKKKACiiigD+YH/g9W/wCUpvgH /slWnf8Ap31ivyBr9fv+D1b/AJSm+Af+yVad/wCnfWK/IGgAooooAK/X7/gyp/5Sm+Pv+yVaj/6d 9Hr8ga/X7/gyp/5Sm+Pv+yVaj/6d9HoA/p+r56/4TXWv+gvqf/gS/wDjX0LXzPQBp/8ACa61/wBB fU//AAJf/Gj/AITXWv8AoL6n/wCBL/41mUUAaf8Awmutf9BfU/8AwJf/ABo/4TXWv+gvqf8A4Ev/ AI1mUUAe6/Cu8n1DwJYTXE0s8z+ZueRi7NiRgMk89K6OuZ+Dn/JONO/7a/8Ao166agAooooAKKKK ACiiigAooooAK+AP+Do7/lBR8c/+4B/6kOmV9/18Af8AB0d/ygo+Of8A3AP/AFIdMoA/kCooooAK KKKACv7/ACv4A6/v8oAxde8e6V4XvEt767MEzoJAvlO2VJIzlQR1Bqn/AMLh8Of9BH/yXl/+Jrhv j9/yONt/15r/AOjJK4agD3L/AIXD4c/6CP8A5Ly//E0f8Lh8Of8AQR/8l5f/AImvDaKAPcv+Fw+H P+gj/wCS8v8A8TVzQfHuleKLx7exuzPMiGQr5TrhQQM5YAdSK8BrufgD/wAjjc/9ebf+jI6APX6K KKACiiigAooooAKKKKACiiigAr+AOv7/ACv4A6ACiiigAooooA/r9/4Ncf8AlBR8DP8AuP8A/qQ6 nX3/AF8Af8GuP/KCj4Gf9x//ANSHU6+/6AE2D3NGwcck4/WlooATaMEZPNHljOTkmlooAaVAyeef 85p1DHjpmigAooooAKKKKACiiigAooooAKKKKAP5gf8Ag9W/5Sm+Af8AslWnf+nfWK/IGv1+/wCD 1b/lKb4B/wCyVad/6d9Yr8gaACiiigAr9fv+DKn/AJSm+Pv+yVaj/wCnfR6/IGv1+/4Mqf8AlKb4 +/7JVqP/AKd9HoA/p+ooooAKKKKACiiigAooooAxvH/jOx+HHgbWvEWqPLHpmg2M+o3jRoXdYYY2 kchR1O1Tx3r+dD4a/tdfDz4ofH23/aI+F3/BIr4h+NLi61abVNE8T6Vq2tT6PezRSPB9pSxt9Nl0 1ZldGLCNXEc6MwYyLvr+if4p31/pXwv8R3Wl6Smv6pbaZcy2mmSYKajMsLFIDntIwC/8Cr8HP+CW P7Pf/BTP4sfsK+C/EfwH+OfwU+F/wm1W41WXw/4Tv9Pjnn0BBqt2s1tum0m8lCLcCbYklzK6JsVi pUqoB++vh3UptZ8P2N5PayWM93BHNJbSZ327MoJQ5AOVJxyB06Cr9UPDkF7beH7CPUporjUI7eNb qWMYSSUKN7DgcFsnoPoKv0AFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFfxBf8FYv+Upv7S3/AGVX xR/6d7qv7fa/iC/4Kxf8pTf2lv8Asqvij/073VAHgFFFFABRRRQB/X7/AMGuP/KCj4Gf9x//ANSH U6+2fjH/AMk41H/tl/6NSvib/g1x/wCUFHwM/wC4/wD+pDqdfbPxj/5JxqP/AGy/9GpQB4bRRRQA UUUUAFfTFfM9fTFABRRRQAUUUUAFFFFABRRRQAUUUUAfzA/8Hq3/AClN8A/9kq07/wBO+sV+QNfr 9/werf8AKU3wD/2SrTv/AE76xX5A0AFFFFABX6/f8GVP/KU3x9/2SrUf/Tvo9fkDX6/f8GVP/KU3 x9/2SrUf/Tvo9AH9P1fM9fTFfM9ABRRRQAUUUUAe5fBz/knGnf8AbX/0a9dNXM/Bz/knGnf9tf8A 0a9dNQAUUUUAFFFFABRRRQAUUUUAFfAH/B0d/wAoKPjn/wBwD/1IdMr7/r4A/wCDo7/lBR8c/wDu Af8AqQ6ZQB/IFRRRQAUUUUAFf3+V/AHX9/lAHkHx+/5HG2/681/9GSVw1dz8fv8Akcbb/rzX/wBG SVw1ABRRRQAV3PwB/wCRxuf+vNv/AEZHXDV3PwB/5HG5/wCvNv8A0ZHQB6/RRRQAUUUUAFFFFABR RRQAUUUUAFfwB1/f5X8AdABRRRQAUUUUAf1+/wDBrj/ygo+Bn/cf/wDUh1Ovv+vgD/g1x/5QUfAz /uP/APqQ6nX3L4916fwv4Tu7+2SJ5oNm0SAlTl1U5wQeh9aANnePejcOeCce1eQ/8L/1r/n10z/v 2/8A8XR/wv8A1r/n10z/AL9v/wDF0AevbgATg8UFwCBg4NeQ/wDC/wDWv+fXTP8Av2//AMXR/wAL /wBa/wCfXTP+/b//ABdAHr9FeV6B8bdW1bXrG0lt9OSO6uI4mKxurAMwBxluvNeqUAFFFFABRRRQ AUUUUAFFFFABRRRQB/MD/wAHq3/KU3wD/wBkq07/ANO+sV+QNfr9/wAHq3/KU3wD/wBkq07/ANO+ sV+QNABRRRQAV+v3/BlT/wApTfH3/ZKtR/8ATvo9fkDX6/f8GVP/AClN8ff9kq1H/wBO+j0Af0/U UUUAFFFFABRRRQAUUUUAYHxK8B2fxS+HWv8AhjUZbqGw8R6bcaXcyW7KsyRTxNE7IWDAMFYkEgjO Mg9K/CzxD/wb3f8ABMPwlr99pOrftiXml6rpdxJaXtnd/FfwnBcWk0bFHikRrMMjqwKlWAIIIIzX 6h/8FJv+Cp3wG/YX0ifwT8VfifJ8O/EvjjQbt9FlXQ9Tv2VWV4ROHtLaZUKSHOGweM4Nfhz/AME0 rf8A4JLWn7FHgtP2ibma6+Mii8HiJ5B4wALi9nEBT+z1FtsNuISu0btpG/D7gAD+mLwjp9rpXhbS 7SxnNzY2tpFFbzb1fzY1QBW3LwcgA5HBzWnWb4R+wf8ACK6X/ZWf7L+yRfY/vf6nYNn3vm+7j73P rzWlQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAV/EF/wVi/5Sm/tLf8AZVfFH/p3uq/t9r+IL/gr F/ylN/aW/wCyq+KP/TvdUAeAUUUUAFFFFAH9fv8Awa4/8oKPgZ/3H/8A1IdTr7Z+Mf8AyTjUf+2X /o1K+Jv+DXH/AJQUfAz/ALj/AP6kOp19s/GP/knGo/8AbL/0alAHhtFFFABRRRQAV9MV8z19MUAF FFFABRRRQAUUUUAFFFFABRRRQB/MD/werf8AKU3wD/2SrTv/AE76xX5A1+v3/B6t/wApTfAP/ZKt O/8ATvrFfkDQAUUUUAFfr9/wZU/8pTfH3/ZKtR/9O+j1+QNfr9/wZU/8pTfH3/ZKtR/9O+j0Af0/ V8z19MV8z0AFFFFABRRRQB7l8HP+Scad/wBtf/Rr101cz8HP+Scad/21/wDRr101ABRRRQAUUUUA FFFFABRRRQAV8Af8HR3/ACgo+Of/AHAP/Uh0yvv+vgD/AIOjv+UFHxz/AO4B/wCpDplAH8gVFFFA BRRRQAV/f5X8Adf3+UAeQfH7/kcbb/rzX/0ZJXDV3Px+/wCRxtv+vNf/AEZJXDUAFFFFABXc/AH/ AJHG5/682/8ARkdcNXc/AH/kcbn/AK82/wDRkdAHr9FFFABRRRQAUUUUAFFFFABRRRQAV/AHX9/l fwB0AFFFFABRRRQB/X7/AMGuP/KCj4Gf9x//ANSHU6+2fjH/AMk41H/tl/6NSvib/g1x/wCUFHwM /wC4/wD+pDqdfbPxj/5JxqP/AGy/9GpQB4bRRRQAUUUUAafgr/kctI/6/If/AEYK+ha+evBX/I5a R/1+Q/8AowV9C0AFFFFABRRRQAUUUUAFFFFABRRRQB/MD/werf8AKU3wD/2SrTv/AE76xX5A1+v3 /B6t/wApTfAP/ZKtO/8ATvrFfkDQAUUUUAFfr9/wZU/8pTfH3/ZKtR/9O+j1+QNfr9/wZU/8pTfH 3/ZKtR/9O+j0Af0/UUUUAFFFFABRRRQAUUUUAeIftn/s6/CD4hfDrXPHPxJ+EXw3+Jl/4I0K8vLR /Enhqy1WaOKGJ5zDG9xG5RWZegIGTmvwt8dft/eFvAPh/wCEF9a/sOfsdeNY2+HFv8WPis2lfDew tf7M0W61NbWKKwWSVzHNFHJAHaTz90lwp8uNI3r9uv2jP+CiPgP4BftHab8IvEejeJtR1vxB4M1f xmsltaW02ntYafG7XELmSZW811Rgq7Chz8zLX89Hg39sL/gmL8N/hT8UfB/h7wl+2doul/Fq5tv7 WlgGgPdWmn292t2mlW8sl0xW0M0cRYvvncQoGmODkA/qM8L3tlqPhrTrnT4lhsLm1ikto1QRhIig KAKOFAUjgdK0qyfBV3aX/g/Sp9Oge2sJ7OGS2iYANFEUBRSATyFwOp+ta1ABRRXjv7ePx11n9m/9 lLxX4s8Ox2TeIrc2em6U97EZra3u729gsYJ5Y1ZTJHHJcLIyBlLKhUMpOQAexUV8v/Cbxf47+An7 cOj/AAi8WfEbX/ijofjfwNqHinTdT8QaZplpqenXunX1lbXMAbTba1ha3lj1G3dFeEyI8MuZXDqi M/4KRfHfxX8H9R+FWmaN4j8U+EvDvjHX7nT9e1Xwhodt4g8VwrHYT3ECadp0sF01wDJFunMNldyR wRyNsjUPPEAfUdFfnt8Iv24fH3xR/ZW0aPQfiPb+In+IPxgPw88J/EB9Lso9bh0YxtcS3d9p4iS3 g1SNbe9t0iltYlBW2llteXhb3v8AZS+JPi/w5+1L8VPgx4v8X6l4/wD+EL0nQvFGi6/qtjZWmqXN nqZvoXt7n7FDBbO0Vxp0xV47eE+XPGrB2RpHAPo6iiqN74k07S7gxXWoWVtKBnZLOqNj1wTQBeor M/4TbRv+gvpn/gUn+NH/AAm2jf8AQX0z/wACk/xoA06KzP8AhNtG/wCgvpn/AIFJ/jR/wm2jf9Bf TP8AwKT/ABoA06/iC/4Kxf8AKU39pb/sqvij/wBO91X9tX/CbaN/0F9M/wDApP8AGv4lf+CrU6XH /BUX9pKWN0kjl+KfidlZTlWB1e6III6igDwCiiigAooooA/r9/4Ncf8AlBR8DP8AuP8A/qQ6nX2z 8Y/+Scaj/wBsv/RqV8L/APBsD4n0zTf+CGnwOhuNRsYJk/t7ckk6Iy58QakRkE56V9s/FTxRpmpe BL+G31Gxnmfy9qRzo7NiRScAHPSgDxyiiigAooooAK+mK+Z6+hf+E20b/oL6Z/4FJ/jQBp0Vmf8A CbaN/wBBfTP/AAKT/Gj/AITbRv8AoL6Z/wCBSf40AadFZn/CbaN/0F9M/wDApP8AGj/hNtG/6C+m f+BSf40AadFZn/CbaN/0F9M/8Ck/xo/4TbRv+gvpn/gUn+NAGnRWZ/wm2jf9BfTP/ApP8aP+E20b /oL6Z/4FJ/jQBp0Vmf8ACbaN/wBBfTP/AAKT/Gj/AITbRv8AoL6Z/wCBSf40AfzKf8Hq3/KU3wD/ ANkq07/076xX5A1+u/8Aweg6pbat/wAFRfAUtpcQXMa/CzT1LRSB1B/tfWDjI78j86/IigAooooA K/X7/gyp/wCUpvj7/slWo/8Ap30evyBr9d/+DL7VLbSf+Covj2W7uILaNvhZqChpZAik/wBr6OcZ Pfg/lQB/ULXzPX0L/wAJto3/AEF9M/8AApP8a+eqACiiigAooooA9y+Dn/JONO/7a/8Ao166auK+ FfijTNN8CWENxqNjBMnmbkknRGXMjEZBOeldF/wm2jf9BfTP/ApP8aANOisz/hNtG/6C+mf+BSf4 0f8ACbaN/wBBfTP/AAKT/GgDTorM/wCE20b/AKC+mf8AgUn+NH/CbaN/0F9M/wDApP8AGgDTorM/ 4TbRv+gvpn/gUn+NH/CbaN/0F9M/8Ck/xoA06KzP+E20b/oL6Z/4FJ/jR/wm2jf9BfTP/ApP8aAN OvgD/g6O/wCUFHxz/wC4B/6kOmV92f8ACbaN/wBBfTP/AAKT/GvgT/g5+8T6ZqX/AAQ0+OMNvqNj PM/9g7UjnR2bHiDTScAHPSgD+RGiiigAooooAK/v8r+AOv76f+E20b/oL6Z/4FJ/jQB5n8fv+Rxt v+vNf/RklcNXY/G3VLbVvFVvLaXMF1GtoqlopA6g73OMjvyPzrjqACiiigArufgD/wAjjc/9ebf+ jI64aux+CWqW2k+KriW7uYLWNrRlDSyBFJ3ocZPfg/lQB7PRWZ/wm2jf9BfTP/ApP8aP+E20b/oL 6Z/4FJ/jQBp0Vmf8Jto3/QX0z/wKT/Gj/hNtG/6C+mf+BSf40AadFZn/AAm2jf8AQX0z/wACk/xo /wCE20b/AKC+mf8AgUn+NAGnRWZ/wm2jf9BfTP8AwKT/ABo/4TbRv+gvpn/gUn+NAGnRWZ/wm2jf 9BfTP/ApP8aP+E20b/oL6Z/4FJ/jQBp1/AHX99P/AAm2jf8AQX0z/wACk/xr+BagAooooAKKKKAP 6/f+DXH/AJQUfAz/ALj/AP6kOp19s/GP/knGo/8AbL/0alfC/wDwbA+J9M03/ghp8DobjUbGCZP7 e3JJOiMufEGpEZBOelfbPxU8UaZqXgS/ht9RsZ5n8vakc6OzYkUnABz0oA8cooooAKKKKANPwV/y OWkf9fkP/owV9C188eEp0tvFWlyyukccd3EzMxwqgOCSSegr3T/hNtG/6C+mf+BSf40AadFZn/Cb aN/0F9M/8Ck/xo/4TbRv+gvpn/gUn+NAGnRWZ/wm2jf9BfTP/ApP8aP+E20b/oL6Z/4FJ/jQBp0V mf8ACbaN/wBBfTP/AAKT/Gj/AITbRv8AoL6Z/wCBSf40AadFZn/CbaN/0F9M/wDApP8AGj/hNtG/ 6C+mf+BSf40AadFZn/CbaN/0F9M/8Ck/xo/4TbRv+gvpn/gUn+NAH8yn/B6t/wApTfAP/ZKtO/8A TvrFfkDX67/8HoOqW2rf8FRfAUtpcQXMa/CzT1LRSB1B/tfWDjI78j86/IigAooooAK/X7/gyp/5 Sm+Pv+yVaj/6d9Hr8ga/Xf8A4MvtUttJ/wCCovj2W7uILaNvhZqChpZAik/2vo5xk9+D+VAH9QtN 2Nkcj/Cs7/hNtG/6C+mf+BSf41owTpcwJLE6yRyKGVlOVYEZBB7igA2Hkkgk/pRsPIJOMU6igBpQ 54OM0bDx0I+vSnUUAFFUbzxRpmnXLQ3Go2MEyY3JJOqsuRkZBPpUX/CbaN/0F9M/8Ck/xoA+Nv8A gqV8cP25fhV8RfDFt+yj8G/ht8TfDV3p0kuuXfiW9it5rO7EpCRxh9TsyVMeDkK/P8Q6V8uf8Nj/ APBZH/o074Af+De1/wDmhr9F/wBrz9sX4ffs1eENV0zxB8Wfhf8ADrxrqujXU/h2DxZ4lsdKNxOI 2WKUJcyLvjE20EgEcEGv5ydB+AHwi+F//BOqx/a/0H9svVIP23NLJ1+XTpfHOnXeoXF2b5rWW2a1 O+/md7ViGaSWSOZC5ZDDIQAD+o/w5Pe3Ph+wk1KGK31CS3ja6ijOUjlKjeo5PAbI6n6mr9ZPgvV7 jX/B+k39yIFuL6zhuJREcxh3QMQvJ+XJ45PHc14b+29+3a/7I3xN+CfhOy8LReJtT+MXit9B8yfV G0+DRbOG2kubu+ZlgmMpiiTIhwm/J/eJjNAH0RXA/tMfATTP2n/gb4j8CateXunWuvW6rHfWWz7T ptzHIk1vdRbwyGSGeOOVQ6spaMAgjIPxr/wSf/4L9eHv+Covx88SeBk+GXif4dY0+51/wZqWoztc QeMdJt71rOa6U+TGsMiSbFaNWmUN5q+YTEc/oRQB4H8HP2U/GmmfHS5+J/xL8f6B4w8b2/hqTwlo r6B4VfQNM0qyluI7m4kME15eSy3E00NtvYzrHstYlWJTvd8XxH+xf8RNZ074ReKj8X7K/wDjd8Kd L1DSZPFeqeD4pdI8TQ6gtuL1brSre5tzHue0tZYzb3URjeBcl42kjf6WooA+U7L/AIJr3X/CvvEd 7d+O4H+L3iLx5bfEpvFNroRg0qz1q1ghtLdYtLa5cizNnAtvLEbozSpLM32hHZHj9G/Zp/Zl1r4U fELx3498a+K9N8Y/EL4hDT7bUr3StEbRdLtLKwjlS0tba1e4uZUVWuLmVmluZWaS5kIKJsjT2aig AooooAKKKKACiiigAr+IL/grF/ylN/aW/wCyq+KP/TvdV/b7X8QX/BWL/lKb+0t/2VXxR/6d7qgD wCiiigAooooA/r9/4Ncf+UFHwM/7j/8A6kOp19s/GP8A5JxqP/bL/wBGpXxN/wAGuP8Aygo+Bn/c f/8AUh1Ovtn4x/8AJONR/wC2X/o1KAPDaKKKACiiigAr6Yr5nr6YoAKKKKACiiigAooooAKKKKAC iiigD+YH/g9W/wCUpvgH/slWnf8Ap31ivyBr9fv+D1b/AJSm+Af+yVad/wCnfWK/IGgAooooAK/X 7/gyp/5Sm+Pv+yVaj/6d9Hr8ga/X7/gyp/5Sm+Pv+yVaj/6d9HoA/p+r5nr6Yr5noAKKKKACiiig D3L4Of8AJONO/wC2v/o166auZ+Dn/JONO/7a/wDo166agAooooAKKKKACiiigAooooAK+AP+Do7/ AJQUfHP/ALgH/qQ6ZX3/AF8Af8HR3/KCj45/9wD/ANSHTKAP5AqKKKACiiigAr+/yv4A6/v8oA8g +P3/ACONt/15r/6Mkrhq7n4/f8jjbf8AXmv/AKMkrhqACiiigArufgD/AMjjc/8AXm3/AKMjrhq7 n4A/8jjc/wDXm3/oyOgD1+iiigAooooAKKKKACiiigAooooAK/gDr+/yv4A6ACiiigAooooA/r9/ 4Ncf+UFHwM/7j/8A6kOp19s/GP8A5JxqP/bL/wBGpXxN/wAGuP8Aygo+Bn/cf/8AUh1Ovtn4x/8A JONR/wC2X/o1KAPDaKKKACiiigDT8Ff8jlpH/X5D/wCjBX0LXz14K/5HLSP+vyH/ANGCvoWgAooo oAKKKKACiiigAooooAKKKKAP5gf+D1b/AJSm+Af+yVad/wCnfWK/IGv1+/4PVv8AlKb4B/7JVp3/ AKd9Yr8gaACiiigAr9fv+DKn/lKb4+/7JVqP/p30evyBr9fv+DKn/lKb4+/7JVqP/p30egD+n6kD dBg0teHf8Lh8R/8AQSP/AIDxf/E0Ae4eYB1yKBICM4IFeH/8Lh8R/wDQSP8A4Dxf/E0f8Lh8R/8A QSP/AIDxf/E0Ae4bxzweKN498fSvD/8AhcPiP/oJH/wHi/8AiaP+Fw+I/wDoJH/wHi/+JoA9xorB +G2sXWv+DLK7vJPOuJt+59oXOJGA4AA6AVvUAfMX7en/AASj/Zx/b81rTvFvxy8CR+Kbrwfpstvb XsmvalpqWVruMsgItbiJWAOW3MCR64r8K/EP7Wv/AARp0bXtQs7b9mD456vbWlxJDDfWmq36296i sQJoxLr0coRwAwEiI+CNyqcgf0bftL2Nhq37N/xBtdVvhpel3PhvUYru8KPILSFrWQPLtRWZtqkt hVYnHAJ4r+fb9qn9lL47fs9/8EwfAPjr4dT/AAv134P/ABF+FHh7wv8AEHxZYR30tv4Yi07XTc6Z r9uksMGo5kS8hlkMdlNLA0Nw2wbYXAB/Rb4GmsrnwXpEumwyW2nSWULWsTnLRxGNdink8hcDqfqa +Ev+C73wE8JfteL8BvhJeeMfHXwy+JfjXxfdf8IN4x8OWUd0NGnh0+ZryK7BubeUQTWrSL+5fd5i xE5QMr/d/gtAnhDSlW+fVFFnCBeNndd/Iv705JOW+9ySeetfib/wcL/8EhP2Ufhl8Ur39p740/Ff 4s+GU8da4sGqeG9As7LUb3xFMtjsittM3xotmyrb+Y8100sRA2ZRnTIB9BfsUfsZfD79gH/grn8L vhJp/jLxPrGo+C/gBc23hrSzo1pDYLBLrZm1C+uLlbxpzdXF20rrH9kSEIQBM7xsK/UWvxV/4Ne/ hv8AsNXfxr8d+K/2eNa+Mdx8ULLR20+50b4mzaeuo2mlNNA0l5aR2KCB4nm8mJ3LvJGY1BWJZlM3 7VUAFFFFABRRRQAUUUUAFFFFABRRRQAV/EF/wVi/5Sm/tLf9lV8Uf+ne6r+32v4gv+CsX/KU39pb /sqvij/073VAHgFFFFABRRRQB/X7/wAGuP8Aygo+Bn/cf/8AUh1Ovtn4x/8AJONR/wC2X/o1K+Jv +DXH/lBR8DP+4/8A+pDqdfbPxj/5JxqP/bL/ANGpQB4bRRRQAUUUUAFfTFfM9fTFABRRRQAUUUUA FFFFABRRRQAUUUUAfzA/8Hq3/KU3wD/2SrTv/TvrFfkDX6/f8Hq3/KU3wD/2SrTv/TvrFfkDQAUU UUAFfr9/wZU/8pTfH3/ZKtR/9O+j1+QNfr9/wZU/8pTfH3/ZKtR/9O+j0Af0/V8z19MV8z0AFFFF ABRRRQB7l8HP+Scad/21/wDRr101cz8HP+Scad/21/8ARr101ABRRRQAUUUUAFFFFABRRRQAV8Af 8HR3/KCj45/9wD/1IdMr7/r4A/4Ojv8AlBR8c/8AuAf+pDplAH8gVFFFABRRRQAV/f5X8Adf3+UA eQfH7/kcbb/rzX/0ZJXDV3Px+/5HG2/681/9GSVw1ABRRRQAV3PwB/5HG5/682/9GR1w1dz8Af8A kcbn/rzb/wBGR0Aev0UUUAFFFFABRRRQAUUUUAFFFFABX8Adf3+V/AHQAUUUUAFFFFAH9fv/AAa4 /wDKCj4Gf9x//wBSHU6+2fjH/wAk41H/ALZf+jUr4m/4Ncf+UFHwM/7j/wD6kOp19s/GP/knGo/9 sv8A0alAHhtFFFABRRRQBp+Cv+Ry0j/r8h/9GCvoWvnrwV/yOWkf9fkP/owV9C0AFFFFABRRRQAU UUUAFFFFABRRRQB/MD/werf8pTfAP/ZKtO/9O+sV+QNfr9/werf8pTfAP/ZKtO/9O+sV+QNABRRR QAV+v3/BlT/ylN8ff9kq1H/076PX5A1+v3/BlT/ylN8ff9kq1H/076PQB/T9XzPX0xXzPQAUUUUA FFFFAHuXwc/5Jxp3/bX/ANGvXTVzPwc/5Jxp3/bX/wBGvXTUAfJ3/BXr9gr4g/8ABQb9m628J/Dz 43+IPghqWnXU17eXmmm5WHXoDazRGwumguIWW3dpFZiwlAC/6tq/KX4W/wDBCeX4mfAP4WeBPHn/ AAU/stX8AfED7PpuneBNE8RHUNA8Q/Y7mIS2GjtNqghuvJnVERlsz5cgjJhDAJX7yfGjwRc/Ez4P +LPDdneDT7zxDo15psF0QSLaSaB41k45+UsDxzxX8y3iD/gnV8fvjj8EPEOr+PP2cPi34d1z9nn4 caR8L/h5pml21/Nd6h4kj1pJX1m18hAr2ywtfSSTL5lv+8jKylvLIAP6hNI0iDQtJtbG0j8q1sok ghTcW2IqhVGTknAA5PNfmv8A8HF9t418Pav+y9498B/Azxn8ddX+GXxF/wCEkn0jQ9Pub6NbeGDJ jmWC2nMbPJ5TRzMMRtCfkct8v6ReEbe9tPCulw6lJ5uow2kSXT7t2+UIA5z3y2ea/PT/AIOQvE3x a0T4DfCGw+H/AMVdR+CPg7xN8RdN0Hx145sLx7Kbw1Y3T+VFdSTpJE0dskhJkPmxKT5SvIiMxoA+ Irn/AIKi/tHTf8FK7T9pGP8A4Jt/Hq11a38AS+BpdNt7bVo3vt97Hci6muBo37zYsYjWMx8ZJLnC qv71+HdSm1nw/Y3k9rJYz3cEc0ltJnfbsyglDkA5UnHIHToK/L7/AII4/s5H4Vftb3OqD/gpd/w1 rv0C6g/4Qf8A4Sj+0vK3SwH7d5X9sXn+qxt3eVx533hnB/VCgAooooAKKKKACiiigAooooAKKKKA Cv4gv+CsX/KU39pb/sqvij/073Vf2+1/EF/wVi/5Sm/tLf8AZVfFH/p3uqAPAKKKKACiiigD+v3/ AINcf+UFHwM/7j//AKkOp19s/GP/AJJxqP8A2y/9GpXxN/wa4/8AKCj4Gf8Acf8A/Uh1Ovtn4x/8 k41H/tl/6NSgDw2iiigAooooAK+mK+Z6+mKACiiigAooooAKKKKACiiigAooooA/mB/4PVv+Upvg H/slWnf+nfWK/IGv1+/4PVv+UpvgH/slWnf+nfWK/IGgAooooAK/X7/gyp/5Sm+Pv+yVaj/6d9Hr 8ga/X7/gyp/5Sm+Pv+yVaj/6d9HoA/p+r5nr6Yr5noAKKKKACiiigD3L4Of8k407/tr/AOjXrpq5 n4Of8k407/tr/wCjXrpqACiiigAooooAKKKKACiiigAr4A/4Ojv+UFHxz/7gH/qQ6ZX3/XwB/wAH R3/KCj45/wDcA/8AUh0ygD+QKiiigAooooAK/v8AK/gDr+/ygDyD4/f8jjbf9ea/+jJK4au5+P3/ ACONt/15r/6MkrhqACiiigArufgD/wAjjc/9ebf+jI64au5+AP8AyONz/wBebf8AoyOgD1+iiigA ooooAKKKKACiiigAooooAK/gDr+/yv4A6ACiiigAooooA/r9/wCDXH/lBR8DP+4//wCpDqdfbPxj /wCScaj/ANsv/RqV8Tf8GuP/ACgo+Bn/AHH/AP1IdTr7Z+Mf/JONR/7Zf+jUoA8NooooAKKKKANP wV/yOWkf9fkP/owV9C189eCv+Ry0j/r8h/8ARgr6FoAKKKKACiiigAooooAKKKKACiiigD+YH/g9 W/5Sm+Af+yVad/6d9Yr8ga/X7/g9W/5Sm+Af+yVad/6d9Yr8gaACiiigAr9fv+DKn/lKb4+/7JVq P/p30evyBr9fv+DKn/lKb4+/7JVqP/p30egD+n6vmevpivmegAooooAKKKKAPcvg5/yTjTv+2v8A 6Neumrmfg5/yTjTv+2v/AKNeumoA/Pr/AILPftOX/wCzL+1P+xpez/EO8+HvgvVfiJcQ+Kp5NebS dLvLJbVW2XzF0ieEMc4lyoJr4S+PP/BbPXviv/wRs/bCmuv2i9Dtfi7onxcm0n4cjQfEVjo3iCTw 5FqujmF7FbJop7iAwte5uFDl4xLudlU4/X79t3/gm78F/wDgo34Z0LR/jN4M/wCEy07wzcy3mmxf 2vf6d9mlkQI7brSaJmyoAwxIHYV85/8AELn+wn/0Qz/y8/EP/wAnUAfcPwwu5tQ+G3h64uJZLief TbaSWSRizyMYlJYk8kk85NflD/wdueI/hx4Z+HX7M118UrHxVr3g2z+JkV5rmhaSyxrrGlRxD7dG X86Jkn8ptsRVlz5kg8yIkOP1x0jSINC0m1sbSPyrWyiSCFNxbYiqFUZOScADk818y/8ABVL/AIKa Wv8AwTR+EPh3VLH4f+Kfix478cat/Y3hfwhoCsLrVZlieeZ2dY5HSKOJCSUilcs8Y2bS7oAfAf8A wQM/aC/4J8fE/wDbju9M/Zh+BnxT+HPxIXwvezSar4hv5p7NrATW4mhCvq12N7OYiD5XRT8w6H9o q+Hv2Gf+Cw99+2F8evhv4K1T4Wv4Os/in8KU+J+iatF4i/tJDi7W2n0+SP7NCVeMtu8wMQylflUt gfcNABRRRQAUUUUAFFFFABRRRQAUUUUAFfxBf8FYv+Upv7S3/ZVfFH/p3uq/t9r+IL/grF/ylN/a W/7Kr4o/9O91QB4BRRRQAUUUUAf1+/8ABrj/AMoKPgZ/3H//AFIdTr7Z+Mf/ACTjUf8Atl/6NSvi b/g1x/5QUfAz/uP/APqQ6nX2z8Y/+Scaj/2y/wDRqUAeG0UUUAFFFFABX0xXzPX0xQAUUUUAFFFF ABRRRQAUUUUAFFFFAH8wP/B6t/ylN8A/9kq07/076xX5A1+v3/B6t/ylN8A/9kq07/076xX5A0AF FFFABX6/f8GVP/KU3x9/2SrUf/Tvo9fkDX6/f8GVP/KU3x9/2SrUf/Tvo9AH9P1fM9fTFfM9ABRR RQAUUUUAe5fBz/knGnf9tf8A0a9dNXM/Bz/knGnf9tf/AEa9dNQAUUUUAFFFFABRRRQAUUUUAFfA H/B0d/ygo+Of/cA/9SHTK+/6+AP+Do7/AJQUfHP/ALgH/qQ6ZQB/IFRRRQAUUUUAFf3+V/AHX9/l AHkHx+/5HG2/681/9GSVw1dz8fv+Rxtv+vNf/RklcNQAUUUUAFdz8Af+Rxuf+vNv/RkdcNXc/AH/ AJHG5/682/8ARkdAHr9FFFABRRRQAUUUUAFFFFABRRRQAV/AHX9/lfwB0AFFFFABRRRQB/X7/wAG uP8Aygo+Bn/cf/8AUh1Ovtn4x/8AJONR/wC2X/o1K+Jv+DXH/lBR8DP+4/8A+pDqdfbPxj/5JxqP /bL/ANGpQB4bRRRQAUUUUAafgr/kctI/6/If/Rgr6Fr568Ff8jlpH/X5D/6MFfQtABRRRQAUUUUA FFFFABRRRQAUUUUAfzA/8Hq3/KU3wD/2SrTv/TvrFfkDX6/f8Hq3/KU3wD/2SrTv/TvrFfkDQAUU UUAFfr9/wZU/8pTfH3/ZKtR/9O+j1+QNfr9/wZU/8pTfH3/ZKtR/9O+j0Af0/V8z19MV8z0AFFFF ABRRRQB7l8HP+Scad/21/wDRr101cz8HP+Scad/21/8ARr101AHxH/wVK/4KhfF/9gr4i+F9F+G/ 7J3xJ/aH0/XtOkvbzU/DT3qw6TKspQQSfZ9PuhuZRu5ZTg9D1r5d/wCIjr9qf/pGP+0B/wB/dX/+ Udfq18W/EmqeDvhX4m1jRbFdT1nSdKuryxs2BK3c8cLvHEcEHDOAvBB5r+aXTv8AgoP4+0j9lj4z 694k/bW8aeMfiT488BeFvGvhi20PxVNY3Gg+IrnWZlutDtrG3uNimOBAJ4oookWOVT5QVYywB/Tf 4d1KbWfD9jeT2sljPdwRzSW0md9uzKCUOQDlSccgdOgr4o/4LT/CEfG2P4L6N4N+Ktt8JP2hE8R3 1z8LNRu9Hl1Gz1K9GmXCXdjcFYZo4YZLZ2LSSKQNgwsh+Q/anhG4vbvwrpc2pR+VqM1pE90m3btl KAuMdsNnivxV/wCCzX/BMX4u/Ej/AIKrfBbVdK/at+I/haz+M/iy+tfDFhaJemL4ayW+jbpZrLbq CAtOInVvKW3OJmyW5BAPSP8Agit/wT78SfsE/t06d4c/aD+MGgeM/jXpHwuOi/D7wxoGnXzaTpHh KK+QzTC9ktLeGS4+1fIYjmZUO9mcSLs/XSvyQ/4JufsJxfsFf8FqG0H4q/tCfFf9of40a78I5r3Q dT160CWOlaONUCTQvLNqd1eGXzkLRoY47cCS4IZ5CRH+t9ABRRRQAUUUUAFFFFABRRRQAUUUUAFf xBf8FYv+Upv7S3/ZVfFH/p3uq/t9r+IL/grF/wApTf2lv+yq+KP/AE73VAHgFFFFABRRRQB/X7/w a4/8oKPgZ/3H/wD1IdTr7Z+Mf/JONR/7Zf8Ao1K+Jv8Ag1x/5QUfAz/uP/8AqQ6nX2z8Y/8AknGo /wDbL/0alAHhtFFFABRRRQAV9MV8z19MUAFFFFABRRRQAUUUUAFFFFABRRRQB/MD/wAHq3/KU3wD /wBkq07/ANO+sV+QNfr9/wAHq3/KU3wD/wBkq07/ANO+sV+QNABRRRQAV+v3/BlT/wApTfH3/ZKt R/8ATvo9fkDX6/f8GVP/AClN8ff9kq1H/wBO+j0Af0/V8z19MV8z0AFFFFABRRRQB7l8HP8AknGn f9tf/Rr101cz8HP+Scad/wBtf/Rr101ABRRRQAUUUUAFFFFABRRRQAV8Af8AB0d/ygo+Of8A3AP/ AFIdMr7/AK+AP+Do7/lBR8c/+4B/6kOmUAfyBUUUUAFFFFABX9/lfwB1/f5QB5B8fv8Akcbb/rzX /wBGSVw1dz8fv+Rxtv8ArzX/ANGSVw1ABRRRQAV3PwB/5HG5/wCvNv8A0ZHXDV3PwB/5HG5/682/ 9GR0Aev0UUUAFFFFABRRRQAUUUUAFFFFABX8Adf3+V/AHQAUUUUAFFFFAH9fv/Brj/ygo+Bn/cf/ APUh1Ovtn4x/8k41H/tl/wCjUr4m/wCDXH/lBR8DP+4//wCpDqdfbPxj/wCScaj/ANsv/RqUAeG0 UUUAFFFFAGn4K/5HLSP+vyH/ANGCvoWvnrwV/wAjlpH/AF+Q/wDowV9C0AFFFFABRRRQAUUUUAFF FFABRRRQB/MD/wAHq3/KU3wD/wBkq07/ANO+sV+QNfr9/wAHq3/KU3wD/wBkq07/ANO+sV+QNABR RRQAV+v3/BlT/wApTfH3/ZKtR/8ATvo9fkDX6/f8GVP/AClN8ff9kq1H/wBO+j0Af0/V8z19MV8z 0AFFFFABRRRQB7l8HP8AknGnf9tf/Rr101cz8HP+Scad/wBtf/Rr101AGZ4x8VWPgPwlquuapMLf TdGs5b67lxnyoYkLu34KpNfzlfDj9r74b/FT9oZP2hvhT/wSP+IfjiWbWp9S0TxPpeq61NpN5NE7 wi5Fhb6dNpqTqylmWMOI51LBjIvmV/RB8Z7PUtS+EHiy20bS7PWtYuNGvI7HT7ptsF/OYHEcMh3p hHYhSd68E/MvUfip+xNd/wDBWv8AYN/Zj8LfCXwf+y78HNR8NeEFuY7CbWNesJrzy5rqa52O8Wux qwRpiinYDtVdxZssQD9xPDupTaz4fsbye1ksZ7uCOaS2kzvt2ZQShyAcqTjkDp0FflD/AMFV/wDg 28/Z0/aA/aR1j9ob4nfHHxH8KtH1/Uo5/F76lqWmWemyL9njtbeK0uriNFs3MiRktN9o3klVVSQR +r3hye9ufD9hJqUMVvqElvG11FGcpHKVG9RyeA2R1P1Nfnt/wX2/Y8vv22vEv7Mfg3UfC/ivxV8O bv4gTQ+KIdGsry4SwM2nzQ2d3dNbKXt7ZJ3xJOxVY1kYk4oA5v8A4Iv/APBNz9iD9iv9pDXtd/Z+ +Oml/F74i6voUlj9nm8eaNrt1p1h50TzvDb2EcZUM6wBpHVtoCqpUO4f9PK/ny/4NnPBPgvS/wDg pxDpXgj4PeLvBvif4ZfCi68MfFq+1maeaG18URaosUjQnz3SNrgRlTE6r/x6v5cSCOWST+g2gAoo ooAKKKKACiiigAooooAKKKKACv4gv+CsX/KU39pb/sqvij/073Vf2+1/EF/wVi/5Sm/tLf8AZVfF H/p3uqAPAKKKKACiiigD+v3/AINcf+UFHwM/7j//AKkOp19s/GP/AJJxqP8A2y/9GpXxN/wa4/8A KCj4Gf8Acf8A/Uh1Ovtn4x/8k41H/tl/6NSgDw2iiigAooooAK+mK+Z6+mKACiiigAooooAKKKKA CiiigAooooA/mB/4PVv+UpvgH/slWnf+nfWK/IGv1+/4PVv+UpvgH/slWnf+nfWK/IGgAooooAK/ X7/gyp/5Sm+Pv+yVaj/6d9Hr8ga/X7/gyp/5Sm+Pv+yVaj/6d9HoA/p+r5nr6Yr5noAKKKKACiii gD3L4Of8k407/tr/AOjXrpq5n4Of8k407/tr/wCjXrpqACiiigAooooAKKKKACiiigAr4A/4Ojv+ UFHxz/7gH/qQ6ZX3/XwB/wAHR3/KCj45/wDcA/8AUh0ygD+QKiiigAooooAK/v8AK/gDr+/ygDyD 4/f8jjbf9ea/+jJK4au5+P3/ACONt/15r/6MkrhqACiiigArufgD/wAjjc/9ebf+jI64au5+AP8A yONz/wBebf8AoyOgD1+iiigAooooAKKKKACiiigAooooAK/gDr+/yv4A6ACiiigAooooA/r9/wCD XH/lBR8DP+4//wCpDqdfbPxj/wCScaj/ANsv/RqV8Tf8GuP/ACgo+Bn/AHH/AP1IdTr7Z+Mf/JON R/7Zf+jUoA8NooooAKKKKANPwV/yOWkf9fkP/owV9C189eCv+Ry0j/r8h/8ARgr6FoAKKKKACiii gAooooAKKKKACiiigD+YH/g9W/5Sm+Af+yVad/6d9Yr8ga/X7/g9W/5Sm+Af+yVad/6d9Yr8gaAC iiigAr9fv+DKn/lKb4+/7JVqP/p30evyBr9fv+DKn/lKb4+/7JVqP/p30egD+n6vmevpivmegAoo ooAKKKKAPcvg5/yTjTv+2v8A6Neumrmfg5/yTjTv+2v/AKNeumoA5f4zX97pfwh8WXWm6haaRqNt o93La313IsdvZSrA5SaRnIVURgGJYgAAkkDmv5wP+Cev/BJr9hP9rf8AZI8M/Ej4+ftbz+G/i94t n1C78S6dP8S/D2nTQXIv7iPdJHewy3DO6Ishldz5vmeYvyutf0g/GFNAl+EvipfFSF/C7aRdjWF3 ugaz8l/PG5CGH7vdypBHYg1/LTf/AB4/ZH1JNW1Lw7/wS58f6z4VsBbXcWqyfFbxRADZXlybawuZ ljiljhFzKBGgErq0uY0eQjJAP6qfCOn2uleFtLtLGc3Nja2kUVvNvV/NjVAFbcvByADkcHNcrov7 T/w18R3WjQad8RPA1/N4i1K60bSo7fXrWVtTvrUMbm0gCyEyzwhG8yNMsm07gMGul8DxiLwVo6JY y6aq2UIW0kZme0Hlr+6JbDEr93J545r8M/8Agot/wQF1f9kfxcPizpX7bmt/BT4LaF4l1HxFFFq0 2oLdeBZryOR5DpCWtwPtl1PI0kflxrbytE2N0zAhwD95K8v/AGxP2gpf2W/2bvE/je20yLWtR0uO C302wknNvDeX11cRWtrHJIFYxxNcTxB3CsVQsQrEYP5v/wDBv18NovHPxq1/4i+Gf+Ch3xA/av8A Dmh2E2i6h4S16z1jT2sLiYwyRXrW2o30kgUKrokvkbGJlVZN0bqP0g/bE/Z9l/ak/Zu8TeCLbUot F1HVI4LjTb+SA3ENnfWtxFdWskkYZTJEtxBEXQMpZAwDKTkAHCfBv46fEvwV+1hafCD4saj4E8Sa h4k8JXPi7Q9c8L6Hd6FCRZ3dta3tlLa3F5eFmQ3tpIkyzjeJJFMKeUHkh/4KF/t12v7HVn4K0aHW vAHhrX/iLqE9jaa5441ePTfD3h22gi8y41C6ZpI2nCF4Y0tkkjaeWeJPNhUtKjvhR8DPih41/aki +L3xQ0/4f+G9Y8NeD7rwj4e0Tw3rl5rtsDeXVvdXl7PdXFnZlS5srONYUgJRY5WMz+aEjzfHHwD+ M/jLSvgr8S7uL4Vah8dfhlDeRatpMd5f2HhbV01CBIb2K2u2huLq1KmKCWOV7eYnyniZAJfMjAI/ EX7X/iLSP2WPAGreGPHXwm+LHi/4p+KofCXh3xV4csJYvCTTSzT+ZcmGPULp5VtYbW5LRpeAzSwe Xvg3lo+r/Ze+PXjTXfjp8R/hP8R5vCupeL/AFnpGtQ6z4f0640qx1rTtSW6WJ/sc89y8EsU9jdxM BczKwSOTKGQxJ5TH/wAE/fiBe+GPE/jeW58E6X8Wdb+KNj8VrPQLS8uZfC1ldWmn2+lfYTdG3Sdz c2UDmW8+yhlnuPMFu4iCSerfsvfAXxpoXxz+I/xY+I8PhXTvF/xAs9I0SDRvD+o3Gq2Oi6bpq3TR J9snt7Z55ZZ767lYi2hVQ8ceHMZlcA96ooqje+G9O1S4Mt1p9lcykY3ywK7Y9MkUAXqKzP8AhCdG /wCgRpn/AICp/hR/whOjf9AjTP8AwFT/AAoA06KzP+EJ0b/oEaZ/4Cp/hR/whOjf9AjTP/AVP8KA NOv4gv8AgrF/ylN/aW/7Kr4o/wDTvdV/bV/whOjf9AjTP/AVP8K/iV/4KtQpb/8ABUX9pKKNEjji +KfidVVRhVA1e6AAA6CgDwCiiigAooooA/r9/wCDXH/lBR8DP+4//wCpDqdfbPxj/wCScaj/ANsv /RqV8L/8GwPhjTNS/wCCGvwOmuNOsZ5n/t7c8lujs2PEGpAZJGelfbHxT8L6Zp3gS/mt9OsYJk8v a8duiMuZFBwQM9KAPHaKKKACiiigAr6Yr5nr6F/4QnRv+gRpn/gKn+FAGnRWZ/whOjf9AjTP/AVP 8KP+EJ0b/oEaZ/4Cp/hQBp0Vmf8ACE6N/wBAjTP/AAFT/Cj/AIQnRv8AoEaZ/wCAqf4UAadFZn/C E6N/0CNM/wDAVP8ACj/hCdG/6BGmf+Aqf4UAadFZn/CE6N/0CNM/8BU/wo/4QnRv+gRpn/gKn+FA GnRWZ/whOjf9AjTP/AVP8KP+EJ0b/oEaZ/4Cp/hQB/Mp/wAHq3/KU3wD/wBkq07/ANO+sV+QNfrv /wAHoOl22k/8FRfAUVpbwW0bfCzT2KxRhFJ/tfWBnA78D8q/IigAooooAK/X7/gyp/5Sm+Pv+yVa j/6d9Hr8ga/Xf/gy+0u21b/gqL49iu7eC5jX4WagwWWMOoP9r6OM4Pfk/nQB/ULXzPX0L/whOjf9 AjTP/AVP8K+eqACiiigAooooA9y+Dn/JONO/7a/+jXrpq4n4WeF9M1HwJYTXGnWM8z+ZueS3R2bE jAZJGeldH/whOjf9AjTP/AVP8KANOisz/hCdG/6BGmf+Aqf4Uf8ACE6N/wBAjTP/AAFT/CgDTorM /wCEJ0b/AKBGmf8AgKn+FH/CE6N/0CNM/wDAVP8ACgDTorM/4QnRv+gRpn/gKn+FH/CE6N/0CNM/ 8BU/woA06KzP+EJ0b/oEaZ/4Cp/hR/whOjf9AjTP/AVP8KANOvgD/g6O/wCUFHxz/wC4B/6kOmV9 2f8ACE6N/wBAjTP/AAFT/CvgT/g5+8MaZpv/AAQ1+OM1vp1jBMn9g7Xjt0Rlz4g00HBAz0oA/kRo oooAKKKKACv7/K/gDr++n/hCdG/6BGmf+Aqf4UAeZ/H7/kcbb/rzX/0ZJXDV2Pxt0u20nxVbxWlt BaxtaKxWKMIpO9xnA78D8q46gAooooAK7n4A/wDI43P/AF5t/wCjI64aux+CWl22reKriK7toLqN bRmCyxh1B3oM4Pfk/nQB7PRWZ/whOjf9AjTP/AVP8KP+EJ0b/oEaZ/4Cp/hQBp0Vmf8ACE6N/wBA jTP/AAFT/Cj/AIQnRv8AoEaZ/wCAqf4UAadFZn/CE6N/0CNM/wDAVP8ACj/hCdG/6BGmf+Aqf4UA adFZn/CE6N/0CNM/8BU/wo/4QnRv+gRpn/gKn+FAGnRWZ/whOjf9AjTP/AVP8KP+EJ0b/oEaZ/4C p/hQBp1/AHX99P8AwhOjf9AjTP8AwFT/AAr+BagAooooAKKKKAP6/f8Ag1x/5QUfAz/uP/8AqQ6n X2z8Y/8AknGo/wDbL/0alfC//BsD4Y0zUv8Aghr8DprjTrGeZ/7e3PJbo7NjxBqQGSRnpX2x8U/C +mad4Ev5rfTrGCZPL2vHbojLmRQcEDPSgDx2iiigAooooA0/BX/I5aR/1+Q/+jBX0LXzx4ShS58V aXFKiSRyXcSsrDKsC4BBB6ivdP8AhCdG/wCgRpn/AICp/hQBp0Vmf8ITo3/QI0z/AMBU/wAKP+EJ 0b/oEaZ/4Cp/hQBp0Vmf8ITo3/QI0z/wFT/Cj/hCdG/6BGmf+Aqf4UAadFZn/CE6N/0CNM/8BU/w o/4QnRv+gRpn/gKn+FAGnRWZ/wAITo3/AECNM/8AAVP8KP8AhCdG/wCgRpn/AICp/hQBp0Vmf8IT o3/QI0z/AMBU/wAKP+EJ0b/oEaZ/4Cp/hQB/Mp/werf8pTfAP/ZKtO/9O+sV+QNfrv8A8HoOl22k /wDBUXwFFaW8FtG3ws09isUYRSf7X1gZwO/A/KvyIoAKKKKACv1+/wCDKn/lKb4+/wCyVaj/AOnf R6/IGv13/wCDL7S7bVv+Covj2K7t4LmNfhZqDBZYw6g/2vo4zg9+T+dAH9QtfM9fQv8AwhOjf9Aj TP8AwFT/AAr56oAKKKKACiiigD3L4Of8k407/tr/AOjXrpq4n4WeF9M1HwJYTXGnWM8z+ZueS3R2 bEjAZJGeldH/AMITo3/QI0z/AMBU/wAKAKfxP8D2/wAUPhr4h8NXcjw2viLTbnTJnUZZEmiaNiOR yAx7ivyH/aV/4Nx/j3qnwr+H/gH4W/H3wnYeHL7wNafDT4n3OoaG+njW9JsNTku7Ce1tFF0TcJFc SRuv2mDzDAp8xRcShf0x/a5/a++HP7Ovg/VNI8TfFv4Z/DbxfrOkXUugx+J/EtjpUk0uxkjmRLiV C6LLtBI4yMZFfz/f8E9f+CTX7Cf7W/7JHhn4kfHz9refw38XvFs+oXfiXTp/iX4e06aC5F/cR7pI 72GW4Z3RFkMrufN8zzF+V1oA/pY8O6HH4Z0Cw02B5Hg0+CO2iaQguyooUE4AGcDsBX5xf8HI3hQ2 Hw9+AvxM8S/DvVvix8IfhD8RIvEXxB8MWNsLoyaattKv2ySFsJLFAdxaOUiJxJskZY3dh+jPhHT7 XSvC2l2ljObmxtbSKK3m3q/mxqgCtuXg5AByODmtOgD8Zv8Agiv8QPh3+27/AMFbvEfxy/Zr+Cmq /Bn4FaB8NX8Ha27aDaaJZa7rr38NysaW9m72xljtzGzFXLhfLLhQ6bv2ZoooAKKKKACiiigAoooo AKKKKACiiigAr+IL/grF/wApTf2lv+yq+KP/AE73Vf2+1/EF/wAFYv8AlKb+0t/2VXxR/wCne6oA 8AooooAKKKKAP6/f+DXH/lBR8DP+4/8A+pDqdfbPxj/5JxqP/bL/ANGpXxN/wa4/8oKPgZ/3H/8A 1IdTr7Z+Mf8AyTjUf+2X/o1KAPDaKKKACiiigAr6Yr5nr6YoAKKKKACiiigAooooAKKKKACiiigD +YH/AIPVv+UpvgH/ALJVp3/p31ivyBr9fv8Ag9W/5Sm+Af8AslWnf+nfWK/IGgAooooAK/X7/gyp /wCUpvj7/slWo/8Ap30evyBr9fv+DKn/AJSm+Pv+yVaj/wCnfR6AP6fq+Z6+mK+Z6ACiiigAoooo A9y+Dn/JONO/7a/+jXrpq5n4Of8AJONO/wC2v/o166agAooooAKKKKACiiigAooooAK+AP8Ag6O/ 5QUfHP8A7gH/AKkOmV9/18Af8HR3/KCj45/9wD/1IdMoA/kCooooAKKKKACv7/K/gDr+/wAoA8g+ P3/I423/AF5r/wCjJK4au5+P3/I423/Xmv8A6MkrhqACiiigArufgD/yONz/ANebf+jI64au5+AP /I43P/Xm3/oyOgD1+iiigAooooAKKKKACiiigAooooAK/gDr+/yv4A6ACiiigAooooA/r9/4Ncf+ UFHwM/7j/wD6kOp19s/GP/knGo/9sv8A0alfE3/Brj/ygo+Bn/cf/wDUh1Ovtn4x/wDJONR/7Zf+ jUoA8NooooAKKKKANPwV/wAjlpH/AF+Q/wDowV9C189eCv8AkctI/wCvyH/0YK+haACiiigAoooo AKKKKACiiigAooooA/mB/wCD1b/lKb4B/wCyVad/6d9Yr8ga/X7/AIPVv+UpvgH/ALJVp3/p31iv yBoAKKKKACv1+/4Mqf8AlKb4+/7JVqP/AKd9Hr8ga/X7/gyp/wCUpvj7/slWo/8Ap30egD+n6vme vpivmegAooooAKKKKAPcvg5/yTjTv+2v/o166auZ+Dn/ACTjTv8Atr/6NeumoA/NT/gvv8EPgV46 8a/Ax/iB8Ao/jv8AEz4heJYvAPhSwm8c6l4VtrKKbfNNPNNaFv3cbbSx8l2w55GAD4j/AMFUf+CO 37Ff/BMv9lZvi8f2TI/HvhrQtTsrXxPDB8UPEGn3elWtzPHbi5gVp5FuWE0sa+WzQ53g7gM4+yf+ C0//AAT08f8A7dnwX8Eat8HfF9j4I+M/wh8UW/ivwjqV8Slo8qjZLBI4jkKhkIcZjdHaJY3XZIzL 8Q/FT9m//gpb/wAFh9I034L/ALQ3gv4ZfAb4L3t5bah4r1fw9e21zfa1BbzxSLaIiX96TLvVZU+S KMNDl3OFjYA/Z3wtHZQ+GdOTTCp0xLWIWm1iw8nYNmCeSNuOTzX5mf8ABzF4V8bXnh/9m7xZ8Pvg 18Qvi/4n+HHxJtvFUUHhi1ursWkVoYpniuI4LaYhJyiosh27GTI35Kn9PNOsINIsLe0to1htrWNY oo14CIoAAHsAAK/PT/g4X+M/jvwV8NPg/wCB/CvxkX9nfw/8UvFk2k+JPiL5gt30WGDT7i7htxOZ IjB58sQG9JYmJjC7wjSKwBr/APBNT/grp8bv23v2irjwX8Qv2M/in8BdBi0i41JfE3iGS/a0eaN4 lW1Hn6ZbJvcSMw/eZxGflPJH35X4wf8ABDv9szxJ+0B+3H8GtKsfjD4y+JFrcfs5x33xB0y88SXG s6fpeux6nFHHPJ5kjrFftEyrIOHwQWyXav2foAKKKKACiiigAooooAKKKKACiiigAr+IL/grF/yl N/aW/wCyq+KP/TvdV/b7X8QX/BWL/lKb+0t/2VXxR/6d7qgDwCiiigAooooA/r9/4Ncf+UFHwM/7 j/8A6kOp19s/GP8A5JxqP/bL/wBGpXxN/wAGuP8Aygo+Bn/cf/8AUh1Ovtn4x/8AJONR/wC2X/o1 KAPDaKKKACiiigAr6Yr5nr6YoAKKKKACiiigAooooAKKKKACiiigD+YH/g9W/wCUpvgH/slWnf8A p31ivyBr9fv+D1b/AJSm+Af+yVad/wCnfWK/IGgAooooAK/X7/gyp/5Sm+Pv+yVaj/6d9Hr8ga/X 7/gyp/5Sm+Pv+yVaj/6d9HoA/p+r5nr6Yr5noAKKKKACiiigD3L4Of8AJONO/wC2v/o166auZ+Dn /JONO/7a/wDo166agAooooAKKKKACiiigAooooAK+AP+Do7/AJQUfHP/ALgH/qQ6ZX3/AF8Af8HR 3/KCj45/9wD/ANSHTKAP5AqKKKACiiigAr+/yv4A6/v8oA8g+P3/ACONt/15r/6Mkrhq7n4/f8jj bf8AXmv/AKMkrhqACiiigArufgD/AMjjc/8AXm3/AKMjrhq7n4A/8jjc/wDXm3/oyOgD1+iiigAo oooAKKKKACiiigAooooAK/gDr+/yv4A6ACiiigAooooA/r9/4Ncf+UFHwM/7j/8A6kOp19s/GP8A 5JxqP/bL/wBGpXxN/wAGuP8Aygo+Bn/cf/8AUh1Ovtn4x/8AJONR/wC2X/o1KAPDaKKKACiiigDT 8Ff8jlpH/X5D/wCjBX0LXz14K/5HLSP+vyH/ANGCvoWgAooooAKKKKACiiigAooooAKKKKAP5gf+ D1b/AJSm+Af+yVad/wCnfWK/IGv1+/4PVv8AlKb4B/7JVp3/AKd9Yr8gaACiiigAr9fv+DKn/lKb 4+/7JVqP/p30evyBr9fv+DKn/lKb4+/7JVqP/p30egD+n6vmevpivmegAooooAKKKKAPcvg5/wAk 407/ALa/+jXrpq5n4Of8k407/tr/AOjXrpqACvj0f8F6/wBkm403x1f2vxh07VNK+G11a2niHUtN 0XU7/T7Brm4NvA4uYbZ4ZYXmGwTRO8eSp3AMpP1B8W/BL/Ev4V+J/Dcd29hJ4g0m601blPvW5mhe MSD3Xdn8K/mx8Ofsf/tQ6Xd+Kv2YvDn7HGo+CL34heCfD/wx1/xrb2jt4Ymk06/lv7nxFLerbLbT SXELqDmcyK0SqpeTZCoB/TXBOlxCkkbrJHIAyspyrA9CD3FfDn/Bfb9q74Sfs8fsf2Hhv4qfCO9+ PEvxT1hPDnh3wPZqUuNWv2RijpOoMtuy5CJLbq84kmjCLyzL9seFtETwv4a07TI5GlTTrWK2V2GG cIgUE+5xX4nftl2f/BUz9pT4z+CNZf8AZb+DcifBzxufFHhDU7bW7KK4nEfmxLHOJNcO6GaJl8xQ qPlVIKEUAeu/8G7n7QXwN8N/E/x98GvDv7K3ij9kf4vzWq+J7vw/4judQ1K817Sk8qFJ1vdQjjug ElkP+jFBGA5kjLlp/L/WSvyo/wCCdXw2/bd+Nf8AwVm0z41/tSfBfwP8OdH0D4c3/hGxuvDeqWc0 TSS30FygeNNRu52c4lGTiNQOgY5P6r0AFFFFABRRRQAUUUUAFFFFABRRRQAV/EF/wVi/5Sm/tLf9 lV8Uf+ne6r+32v4gv+CsX/KU39pb/sqvij/073VAHgFFFFABRRRQB/X7/wAGuP8Aygo+Bn/cf/8A Uh1Ovtn4x/8AJONR/wC2X/o1K+Jv+DXH/lBR8DP+4/8A+pDqdfbPxj/5JxqP/bL/ANGpQB4bRRRQ AUUUUAFfTFfM9fTFABRRRQAUUUUAFFFFABRRRQAUUUUAfzA/8Hq3/KU3wD/2SrTv/TvrFfkDX6/f 8Hq3/KU3wD/2SrTv/TvrFfkDQAUUUUAFfr9/wZU/8pTfH3/ZKtR/9O+j1+QNfr9/wZU/8pTfH3/Z KtR/9O+j0Af0/V8z19MV8z0AFFFFABRRRQB7l8HP+Scad/21/wDRr101cz8HP+Scad/21/8ARr10 1ABRRRQAUUUUAFFFFABRRRQAV8Af8HR3/KCj45/9wD/1IdMr7/r4A/4Ojv8AlBR8c/8AuAf+pDpl AH8gVFFFABRRRQAV/f5X8Adf3+UAeQfH7/kcbb/rzX/0ZJXDV3Px+/5HG2/681/9GSVw1ABRRRQA V3PwB/5HG5/682/9GR1w1dz8Af8Akcbn/rzb/wBGR0Aev0UUUAFFFFABRRRQAUUUUAFFFFABX8Ad f3+V/AHQAUUUUAFFFFAH9fv/AAa4/wDKCj4Gf9x//wBSHU6+2fjH/wAk41H/ALZf+jUr4m/4Ncf+ UFHwM/7j/wD6kOp19s/GP/knGo/9sv8A0alAHhtFFFABRRRQBp+Cv+Ry0j/r8h/9GCvoWvnrwV/y OWkf9fkP/owV9C0AFFFFABRRRQAUUUUAFFFFABRRRQB/MD/werf8pTfAP/ZKtO/9O+sV+QNfr9/w erf8pTfAP/ZKtO/9O+sV+QNABRRRQAV+v3/BlT/ylN8ff9kq1H/076PX5A1+v3/BlT/ylN8ff9kq 1H/076PQB/T9XzPX0xXzPQAUUUUAFFFFAHuXwc/5Jxp3/bX/ANGvXTVzPwc/5Jxp3/bX/wBGvXTU AcX+0LaJqPwD8d28mjX3iKOfQL+NtKs3ZLnUwbaQG3jZVZg8n3FKqxBYYBPFfhj/AMEvf+Cov7UH /BNL9jLw38G7T/gnh+0H4wsvDN5qE9tqUtrq1lLJFdXs10qOg0eQFk87YXBAbbnaucD94/iVY67q nw68QW3hi9t9O8S3OnXEWk3dwoaG1u2iYQyOCrgqshUkFW4B+U9D+IX7ct//AMFX/wDgnv8As56p 8VPHv7VXwbk8JaJeWNpfvpfh+zuZ7YXV1FarMY20FCyI8qswUs+0HarHCkA/c3w7qU2s+H7G8ntZ LGe7gjmktpM77dmUEocgHKk45A6dBX5ef8HVvhDR/F/7M3wWh8dfEO68EfB+T4m6ba+PobG6WPUL 3TJSVee3hIdrmS2UPJ5SRTMufN8p/KxX6feEZbifwrpj3d3b3909pE01zAQ0Nw5QbpEIABVjkjAA wegr8yv+Dm/4e+IPFfhj9nHW/DvwA8W/tBy+CPiLF4g1HQdJ0251G0uLCBFaezvIIbacGK5AVA8i lV2EFJVZkIB5N/wQM/Z9/wCCfHww/bju9T/Zh+OfxT+I3xIbwvewyaV4hsJoLNbAzW5mmDPpNoN6 uIgB5vRj8p6j9oq/K/8A4I4/tGn4q/tb3Olj/gmj/wAMlbNAup/+E4/4Rf8As3zdssA+w+b/AGPZ /wCtzu2+bz5P3TjI/VCgAooooAKKKKACiiigAooooAKKKKACv4gv+CsX/KU39pb/ALKr4o/9O91X 9vtfxBf8FYv+Upv7S3/ZVfFH/p3uqAPAKKKKACiiigD+v3/g1x/5QUfAz/uP/wDqQ6nX2z8Y/wDk nGo/9sv/AEalfE3/AAa4/wDKCj4Gf9x//wBSHU6+2fjH/wAk41H/ALZf+jUoA8NooooAKKKKACvp ivmevpigAooooAKKKKACiiigAooooAKKKKAP5gf+D1b/AJSm+Af+yVad/wCnfWK/IGv1+/4PVv8A lKb4B/7JVp3/AKd9Yr8gaACiiigAr9fv+DKn/lKb4+/7JVqP/p30evyBr9fv+DKn/lKb4+/7JVqP /p30egD+n6vmevpivmegAooooAKKKKAPcvg5/wAk407/ALa/+jXrpq5n4Of8k407/tr/AOjXrpqA CiiigAooooAKKKKACiiigAr4A/4Ojv8AlBR8c/8AuAf+pDplff8AXwB/wdHf8oKPjn/3AP8A1IdM oA/kCooooAKKKKACv7/K/gDr+/ygDyD4/f8AI423/Xmv/oySuGrufj9/yONt/wBea/8AoySuGoAK KKKACu5+AP8AyONz/wBebf8AoyOuGrufgD/yONz/ANebf+jI6APX6KKKACiiigAooooAKKKKACii igAr+AOv7/K/gDoAKKKKACiiigD+v3/g1x/5QUfAz/uP/wDqQ6nX2z8Y/wDknGo/9sv/AEalfE3/ AAa4/wDKCj4Gf9x//wBSHU6+2fjH/wAk41H/ALZf+jUoA8NooooAKKKKANPwV/yOWkf9fkP/AKMF fQtfPXgr/kctI/6/If8A0YK+haACiiigAooooAKKKKACiiigAooooA/mB/4PVv8AlKb4B/7JVp3/ AKd9Yr8ga/X7/g9W/wCUpvgH/slWnf8Ap31ivyBoAKKKKACv1+/4Mqf+Upvj7/slWo/+nfR6/IGv 1+/4Mqf+Upvj7/slWo/+nfR6AP6fq+Z6+mK+Z6ACiiigAooooA9y+Dn/ACTjTv8Atr/6Neumrmfg 5/yTjTv+2v8A6NeumoA5j4xac+sfCTxVZprs3heS70i7hTWYiwk0ktC4F0u1lOYs7xhlPy9R1r8D fGv/AATD0n4qfsc+H/jL8Zf+Ck3x7+Iv7MGpa3YjURrPgjxMbTUYvtaxqTHc3kzWyPIPLjvJbZoU kdCCxKq37+/ErwNa/E/4da/4avnljsfEWnXGm3DRnDrHNE0bEe+GNfiLL+wH/wAFJfFf7Oum/sSa 3o3wrj/Z9tng0K4+KdrdwjUJNDhlFwqCH7V52QirAE+whiVVWk2FpyAfuXo1pa2ekWsFksa2cMKJ AEOUEYUBQD3GMV8vf8FTfhN+1l8V/BXhOD9k/wCJ/gf4Za7Z300mvXHiW1juIr62MaiJIw9heYZX 3E4VOD1PSvp/QdHh8O6HZ6fbBhbWECW8QY5bYihRk9zgV8F/8HB3h+0T9m/wn4l1X9rvxX+yJoug a00VxrGg22o3dz4hknj2x2ggsLmCeUpseTCiTaquxCqrMADyL/gmP8X/ANtH4df8FdtU+BH7UPxy 8BePLe2+G7+MrXS9E0m1t0vRJepbRyxTR6ZauXiKSb43ZciVWUSBWKfq9X4n/wDBvd4d/Z/vf+Cg 3ivxbpv7ZfjT9rH416n4PbTrGTX/AAnrmky6XpcdxE1yzT6g03nHf9mVFEqbAZcK+/KfthQAUUUU AFFFFABRRRQAUUUUAFFFFABX8QX/AAVi/wCUpv7S3/ZVfFH/AKd7qv7fa/iC/wCCsX/KU39pb/sq vij/ANO91QB4BRRRQAUUUUAf1+/8GuP/ACgo+Bn/AHH/AP1IdTr7Z+Mf/JONR/7Zf+jUr4m/4Ncf +UFHwM/7j/8A6kOp19s/GP8A5JxqP/bL/wBGpQB4bRRRQAUUUUAFfTFfM9fTFABRRRQAUUUUAFFF FABRRRQAUUUUAfzA/wDB6t/ylN8A/wDZKtO/9O+sV+QNfr9/werf8pTfAP8A2SrTv/TvrFfkDQAU UUUAFfr9/wAGVP8AylN8ff8AZKtR/wDTvo9fkDX6/f8ABlT/AMpTfH3/AGSrUf8A076PQB/T9XzP X0xXzPQAUUUUAFFFFAHuXwc/5Jxp3/bX/wBGvXTVzPwc/wCScad/21/9GvXTUAFFFFABRRRQAUUU UAFFFFABXwB/wdHf8oKPjn/3AP8A1IdMr7/r4A/4Ojv+UFHxz/7gH/qQ6ZQB/IFRRRQAUUUUAFf3 +V/AHX9/lAHkHx+/5HG2/wCvNf8A0ZJXDV3Px+/5HG2/681/9GSVw1ABRRRQAV3PwB/5HG5/682/ 9GR1w1dz8Af+Rxuf+vNv/RkdAHr9FFFABRRRQAUUUUAFFFFABRRRQAV/AHX9/lfwB0AFFFFABRRR QB/X7/wa4/8AKCj4Gf8Acf8A/Uh1Ovtn4x/8k41H/tl/6NSvib/g1x/5QUfAz/uP/wDqQ6nX2z8Y /wDknGo/9sv/AEalAHhtFFFABRRRQBp+Cv8AkctI/wCvyH/0YK+ha+evBX/I5aR/1+Q/+jBX0LQA UUUUAFFFFABRRRQAUUUUAFFFFAH8wP8Awerf8pTfAP8A2SrTv/TvrFfkDX6/f8Hq3/KU3wD/ANkq 07/076xX5A0AFFFFABX6/f8ABlT/AMpTfH3/AGSrUf8A076PX5A1+v3/AAZU/wDKU3x9/wBkq1H/ ANO+j0Af0/V8z19MV8z0AFFFFABRRRQB7l8HP+Scad/21/8ARr101cz8HP8AknGnf9tf/Rr101AH OfFp9ch+FfiaTwuEPiaPSrptIDqGU3ghfycg8EeZt4PFfyc6B8T/AIP6f8CfjD4Qi8VfEb4lfHD4 3eD/AAozW+t2l3LrUfxCXXJWvYI53hVh5K+Wd8ju0vmuokZmKJ/RL/wVb/bj+JP7KXiX4AeC/hNp /g278afG/wCINv4VNz4msri8sNMsDEzXFz5UNzbM8ke6JwPNG5UdQpZlK/nV+0p/wWEb4S/8FP8A 4sfFDwZ+yf8ABTxP8J/2evE1j4f+InxPGhWw8a29zcu+mvcwX4dWz5m6BY1imJSLa8kYmXywD9x/ CNve2nhXS4dSk83UYbSJLp927fKEAc575bPNflP/AMHVnxI+HHwl0D9lfxF8TNC1TxX4b0D4pwap qehQ2sVzbavpkMYa9hkSWVEdyhTZG4KSfOjMisSf1h06/g1awt7u2kSa2uo1lidejowBBHsQQas0 Afld/wAEcP8AgqN+xN+2H+1vc+Ev2fP2df8AhVfjyLw/dahJrP8AwgWg6GXs45YFlg8+xnkmO5nj OwrtOzJOQK/VGiuU+NPxi0D9n74Ua/418T3ctloHhuze9vJIoHnlKr0SOJAXkldiESNAWd2VQCSB QB1dFeN/Av8Aa/t/i/8AEu98Ea74D8efDDxra6SmvwaL4qTT5JdQ05pTCbqGbT7u7t2CTAI8bSrN GXjLRqssbN6D8UPih4f+C3gHV/FfivVrTQvDmg27XV9fXT7YoIx39SSSFVVBZmIUAkgEA6OivnL4 e/8ABS7wZ8Sv2NdF+NFj4a8fWtj4m1mfw5pHhe90uK38S3+qR6pPpYsRbNN5ccz3NvJ/rZUSOMF5 mhVJCnd/s7/tRaf+0BqnijRZvDPirwN4x8FT28WueG/EUdr9usFuYvOtphJaT3FrNDKgYq8E8gDR yI22SN0UA9SooooAKKKKACiiigAr+IL/AIKxf8pTf2lv+yq+KP8A073Vf2+1/EF/wVi/5Sm/tLf9 lV8Uf+ne6oA8AooooAKKKKAP6/f+DXH/AJQUfAz/ALj/AP6kOp19s/GP/knGo/8AbL/0alfE3/Br j/ygo+Bn/cf/APUh1Ovtn4x/8k41H/tl/wCjUoA8NooooAKKKKACvpivmevpigAooooAKKKKACii igAooooAKKKKAP5gf+D1b/lKb4B/7JVp3/p31ivyBr9fv+D1b/lKb4B/7JVp3/p31ivyBoAKKKKA Cv1+/wCDKn/lKb4+/wCyVaj/AOnfR6/IGv1+/wCDKn/lKb4+/wCyVaj/AOnfR6AP6fq+Z6+mK+Z6 ACiiigAooooA9y+Dn/JONO/7a/8Ao166auZ+Dn/JONO/7a/+jXrpqACiiigAooooAKKKKACiiigA r4A/4Ojv+UFHxz/7gH/qQ6ZX3/XwB/wdHf8AKCj45/8AcA/9SHTKAP5AqKKKACiiigAr+/yv4A6/ v8oA8g+P3/I423/Xmv8A6Mkrhq7n4/f8jjbf9ea/+jJK4agAooooAK7n4A/8jjc/9ebf+jI64au5 +AP/ACONz/15t/6MjoA9fooooAKKKKACiiigAooooAKKKKACv4A6/v8AK/gDoAKKKKACiiigD+v3 /g1x/wCUFHwM/wC4/wD+pDqdfbPxj/5JxqP/AGy/9GpXxN/wa4/8oKPgZ/3H/wD1IdTr7Z+Mf/JO NR/7Zf8Ao1KAPDaKKKACiiigDT8Ff8jlpH/X5D/6MFfQtfPXgr/kctI/6/If/Rgr6FoAKKKKACii igAooooAKKKKACiiigD+YH/g9W/5Sm+Af+yVad/6d9Yr8ga/X7/g9W/5Sm+Af+yVad/6d9Yr8gaA CiiigAr9fv8Agyp/5Sm+Pv8AslWo/wDp30evyBr9fv8Agyp/5Sm+Pv8AslWo/wDp30egD+n6vmev pivmegAooooAKKKKAPcvg5/yTjTv+2v/AKNeumrmfg5/yTjTv+2v/o166agD5C/4K/8A/BPLxh+3 h8JvBOo/C3xpafD74x/CTxNB4t8Ga1exmSyS6jUq0FwBHJ+6cFSf3cgJjCsjozKfi7Tf+DeX4z6T /wAErvFvwTfx18P9W+Ivx5+IFv4r+Knia7vLxLeO0hukuBFp4S13XExkhSXMywruklHTaw++v23P +CuX7PP/AATl8X6JoPxl+IP/AAhuq+IrRr/T4P7C1PUftECuY2fdaW8qrhhjDEH2xXif/EUZ+wn/ ANFz/wDLM8Q//INAH3noOjw+HdDs9PtgwtrCBLeIMctsRQoye5wKu1T0jVoNd0m1vrSQy2t5Ek8L 7Su9GUMpwcEZBHB5q5QAV4T/AMFIfhVr/wAZv2M/F2ieGNOl1nX7eTT9Zs9OidEl1JrDUba/NtGz lUEsq2xjQuyrvdckDJHu1FAHyP8ADXxLc/tOf8FCdD+Kuh+FviBo3gv4ffDfV/D8934j8Kah4aud U1HUtQ024FrFbahFBcSrBDphZpFi8ktcxBZGZZFS58Qvhd8Qf267L4O/FHwnrifDHTdGt5NcHgX4 neALnUJYdTcp9lu7u1t9Us3ju7RRMEilkmiR5hKEE0MMkf1ZRQB+Zf7PvwI+L3w4/Ya+HmueM9Ku dcu/hl8dtb8a3Wh6L4PvbDWP7LfXtdiubiO1kubiW73C/N/DHCgka2KRxrcybZJfpL9kO11D4r/t o/Gf4xw6D4r8PeD/ABLoPhrwpog8QaHdaFe6u2mtqdxc3bWV2kd1HGH1NYEaeKMsbeVlDRlHb6io oAKoXugQajN5skl6r4xiO8miX8lYD9Kv0UAZf/CJWv8Az21P/wAGVx/8XR/wiVr/AM9tT/8ABlcf /F1qUUAZf/CJWv8Az21P/wAGVx/8XR/wiVr/AM9tT/8ABlcf/F1qUUAZf/CJWv8Az21P/wAGVx/8 XX8Sv/BVlRB/wVE/aSjUsVj+KXidQWYsxA1e66k8k+55r+36v4gv+CsX/KU39pb/ALKr4o/9O91Q B4BRRRQAUUUUAf13f8GwWgW9/wD8EM/gfNJJfK7/ANvZEd7NGv8AyMGpDhVYAfgK+2fin4ft7LwF fyxyX7Onl4El7NIv+sUcqzEH8RXxr/wa4/8AKCj4Gf8Acf8A/Uh1Ovtn4x/8k41H/tl/6NSgDw2i iigAooooAK+hP+EStf8Antqf/gyuP/i6+e6+mKAMv/hErX/ntqf/AIMrj/4uj/hErX/ntqf/AIMr j/4utSigDL/4RK1/57an/wCDK4/+Lo/4RK1/57an/wCDK4/+LrUooAy/+EStf+e2p/8AgyuP/i6P +EStf+e2p/8AgyuP/i61KKAMv/hErX/ntqf/AIMrj/4uj/hErX/ntqf/AIMrj/4utSigDL/4RK1/ 57an/wCDK4/+Lo/4RK1/57an/wCDK4/+LrUooA/l7/4PQbCPS/8AgqL4Cjiad1Pwt09syzPM2f7X 1ju5Jxx06V+Q9fr9/wAHq3/KU3wD/wBkq07/ANO+sV+QNABRRRQAV+vH/Bl9YR6p/wAFRfHscrTo o+FuoNmKZ4Wz/a+j90IOOenSvyHr9fv+DKn/AJSm+Pv+yVaj/wCnfR6AP6av+EStf+e2p/8AgyuP /i6+e6+mK+Z6ACiiigAooooA9j+Fnh+3vfAVhLJJfq7+ZkR3s0a/6xhwqsAPwFdD/wAIla/89tT/ APBlcf8AxdZvwc/5Jxp3/bX/ANGvXTUAZf8AwiVr/wA9tT/8GVx/8XR/wiVr/wA9tT/8GVx/8XWp RQBl/wDCJWv/AD21P/wZXH/xdH/CJWv/AD21P/wZXH/xdalFAGX/AMIla/8APbU//Blcf/F0f8Il a/8APbU//Blcf/F1qUUAZf8AwiVr/wA9tT/8GVx/8XR/wiVr/wA9tT/8GVx/8XWpRQBl/wDCJWv/ AD21P/wZXH/xdfAv/Bz7oFvYf8EM/jhNHJfM6f2DgSXs0i/8jBpo5VmIP4iv0Or4A/4Ojv8AlBR8 c/8AuAf+pDplAH8gVFFFABRRRQAV/fR/wiVr/wA9tT/8GVx/8XX8C9f3+UAeMfG3To9M8VW8cTTs rWitmWd5mzvfu5Jxx06Vx1dz8fv+Rxtv+vNf/RklcNQAUUUUAFdj8EtOj1PxVcRytOqraM2Yp3hb O9O6EHHPTpXHV3PwB/5HG5/682/9GR0Ael/8Ila/89tT/wDBlcf/ABdH/CJWv/PbU/8AwZXH/wAX WpRQBl/8Ila/89tT/wDBlcf/ABdH/CJWv/PbU/8AwZXH/wAXWpRQBl/8Ila/89tT/wDBlcf/ABdH /CJWv/PbU/8AwZXH/wAXWpRQBl/8Ila/89tT/wDBlcf/ABdH/CJWv/PbU/8AwZXH/wAXWpRQBl/8 Ila/89tT/wDBlcf/ABdH/CJWv/PbU/8AwZXH/wAXWpRQBl/8Ila/89tT/wDBlcf/ABdfwL1/f5X8 AdABRRRQAUUUUAf13f8ABsFoFvf/APBDP4HzSSXyu/8Ab2RHezRr/wAjBqQ4VWAH4Cvtn4p+H7ey 8BX8scl+zp5eBJezSL/rFHKsxB/EV8a/8GuP/KCj4Gf9x/8A9SHU6+2fjH/yTjUf+2X/AKNSgDw2 iiigAooooA0fCcYn8U6ZGxcLJdxKSrFWALjoRyD7jmvc/wDhErX/AJ7an/4Mrj/4uvDvBX/I5aR/ 1+Q/+jBX0LQBl/8ACJWv/PbU/wDwZXH/AMXR/wAIla/89tT/APBlcf8AxdalFAGX/wAIla/89tT/ APBlcf8AxdH/AAiVr/z21P8A8GVx/wDF1qUUAZf/AAiVr/z21P8A8GVx/wDF0f8ACJWv/PbU/wDw ZXH/AMXWpRQBl/8ACJWv/PbU/wDwZXH/AMXR/wAIla/89tT/APBlcf8AxdalFAGX/wAIla/89tT/ APBlcf8AxdH/AAiVr/z21P8A8GVx/wDF1qUUAfy9/wDB6DYR6X/wVF8BRxNO6n4W6e2ZZnmbP9r6 x3ck446dK/Iev1+/4PVv+UpvgH/slWnf+nfWK/IGgAooooAK/Xj/AIMvrCPVP+Covj2OVp0UfC3U GzFM8LZ/tfR+6EHHPTpX5D1+v3/BlT/ylN8ff9kq1H/076PQB/TV/wAIla/89tT/APBlcf8AxdfP dfTFfM9ABRRRQAUUUUAex/Czw/b3vgKwlkkv1d/MyI72aNf9Yw4VWAH4Cuh/4RK1/wCe2p/+DK4/ +LrN+Dn/ACTjTv8Atr/6NeumoA8Z/a4/ZF+H37Q3hHU9a8Q/B34W/FLxpomkXUfh1fFvhux1TE+x nitxJcLlInl27gHQck5HWvwr/aRb9rD9kP4VXPjj4j/8E2/+CfPhXwlZXdrZXOp3Pg7RJYLWS5nS 3h8wx6uxRDLIimRgEQHLMqgkfuf+0x+1x4T+F2qat8PE8Y2fhz4n6p4K1fxRosdxYXFxHb21nEQ9 7IyQyxhIpGQlGDO4B2o+CK/I+9/4Jwf8FEf+Cuf7NXhXT/iF+1b8F/GPwA+JD6brN3LpejvZXl3p 3nRzrPFF/YlpK0igCRIZZIgzqocqOQAfuP4RiuIPCumJd2lvYXSWkSzW0ACw27hBujQAkBVOQMEj A6mtSqWg6PD4d0Oz0+2DC2sIEt4gxy2xFCjJ7nAq7QAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAV /EF/wVi/5Sm/tLf9lV8Uf+ne6r+32v4gv+CsX/KU39pb/sqvij/073VAHgFFFFABRRRQB/X7/wAG uP8Aygo+Bn/cf/8AUh1Ovtn4x/8AJONR/wC2X/o1K+Jv+DXH/lBR8DP+4/8A+pDqdfbPxj/5JxqP /bL/ANGpQB4bRRRQAUUUUAFfTFfM9fTFABRRRQAUUUUAFFFFABRRRQAUUUUAfzA/8Hq3/KU3wD/2 SrTv/TvrFfkDX6/f8Hq3/KU3wD/2SrTv/TvrFfkDQAUUUUAFfr9/wZU/8pTfH3/ZKtR/9O+j1+QN fr9/wZU/8pTfH3/ZKtR/9O+j0Af0/V8z19MV8z0AFFFFABRRRQB7l8HP+Scad/21/wDRr101cz8H P+Scad/21/8ARr101ABRRRQAUUUUAFFFFABRRRQAV8Af8HR3/KCj45/9wD/1IdMr7/r4A/4Ojv8A lBR8c/8AuAf+pDplAH8gVFFFABRRRQAV/f5X8Adf3+UAeQfH7/kcbb/rzX/0ZJXDV3Px+/5HG2/6 81/9GSVw1ABRRRQAV3PwB/5HG5/682/9GR1w1dz8Af8Akcbn/rzb/wBGR0Aev0UUUAFFFFABRRRQ AUUUUAFFFFABX8Adf3+V/AHQAUUUUAFFFFAH9fv/AAa4/wDKCj4Gf9x//wBSHU6+2fjH/wAk41H/ ALZf+jUr4m/4Ncf+UFHwM/7j/wD6kOp19s/GP/knGo/9sv8A0alAHhtFFFABRRRQBp+Cv+Ry0j/r 8h/9GCvoWvnrwV/yOWkf9fkP/owV9C0AFFFFABRRRQAUUUUAFFFFABRRRQB/MD/werf8pTfAP/ZK tO/9O+sV+QNfr9/werf8pTfAP/ZKtO/9O+sV+QNABRRRQAV+v3/BlT/ylN8ff9kq1H/076PX5A1+ v3/BlT/ylN8ff9kq1H/076PQB/T9XzPX0xXzPQAUUUUAFFFFAHuXwc/5Jxp3/bX/ANGvXTVzPwc/ 5Jxp3/bX/wBGvXTUAfFf/BXn/giz8Gv+CrPhbStW+I2p+IvCWv8AgWzujYeI9GuYo3t4GQu0dzHK jpLArhZCAEcbSFkQM2fyS8Gf8EY/+CZ2l+C/g2ni39qT4uvrfxjtx/wj94tkNCtdcZbj7K1yLa50 qR7C2ecMsb3coRgrFZZArMP6H/it4Bg+K3wu8SeFrm4ltLbxLpV1pUs8QBeFJ4WiLqDwSAxIz6V/ PdN/wQP/AGsviD8EviInxI+EngLxN4s8I+AdL+D/AMMrSx1jTxC1tBqsVw/iFZZpwYWS3jnAJ8qe T7YVMCguKAP6JPDuhx+GdAsNNgeR4NPgjtomkILsqKFBOABnA7AVfrM8I6RNoHhTS7C4m+0T2NpF byS8nzGRApbnnkjPNadABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABX8QX/BWL/lKb+0t/wBlV8Uf +ne6r+32v4gv+CsX/KU39pb/ALKr4o/9O91QB4BRRRQAUUUUAf1+/wDBrj/ygo+Bn/cf/wDUh1Ov tn4x/wDJONR/7Zf+jUr4m/4Ncf8AlBR8DP8AuP8A/qQ6nX2z8Y/+Scaj/wBsv/RqUAeG0UUUAFFF FABX0xXzPX0xQAUUUUAFFFFABRRRQAUUUUAFFFFAH8wP/B6t/wApTfAP/ZKtO/8ATvrFfkDX6/f8 Hq3/AClN8A/9kq07/wBO+sV+QNABRRRQAV+v3/BlT/ylN8ff9kq1H/076PX5A1+v3/BlT/ylN8ff 9kq1H/076PQB/T9XzPX0xXzPQAUUUUAFFFFAHuXwc/5Jxp3/AG1/9GvXTVzPwc/5Jxp3/bX/ANGv XTUAFFFFABRRRQAUUUUAFFFFABXwB/wdHf8AKCj45/8AcA/9SHTK+/6+AP8Ag6O/5QUfHP8A7gH/ AKkOmUAfyBUUUUAFFFFABX9/lfwB1/f5QB5B8fv+Rxtv+vNf/RklcNXc/H7/AJHG2/681/8ARklc NQAUUUUAFdz8Af8Akcbn/rzb/wBGR1w1dz8Af+Rxuf8Arzb/ANGR0Aev0UUUAFFFFABRRRQAUUUU AFFFFABX8Adf3+V/AHQAUUUUAFFFFAH9fv8Awa4/8oKPgZ/3H/8A1IdTr7Z+Mf8AyTjUf+2X/o1K +Jv+DXH/AJQUfAz/ALj/AP6kOp19s/GP/knGo/8AbL/0alAHhtFFFABRRRQBp+Cv+Ry0j/r8h/8A Rgr6Fr568Ff8jlpH/X5D/wCjBX0LQAUUUUAFFFFABRRRQAUUUUAFFFFAH8wP/B6t/wApTfAP/ZKt O/8ATvrFfkDX6/f8Hq3/AClN8A/9kq07/wBO+sV+QNABRRRQAV+v3/BlT/ylN8ff9kq1H/076PX5 A1+v3/BlT/ylN8ff9kq1H/076PQB/T9XzPX0xXzPQAUUUUAFFFFAHuXwc/5Jxp3/AG1/9GvXTVzP wc/5Jxp3/bX/ANGvXTUAct8bND1nxP8ABnxdpnh2YW/iDUdFvLbTJTJ5YiungdYm3fw4cqc9q/lH uNW1P4n/AAKsPFWmJ8SfhHb/ALE/gHTdB0OJbVLGX/hZFxr0bXEaxYZjLMHuZJB8k4+xxl12oVb+ sD4qeOG+Gfww8S+JBZTaj/wj2l3Op/ZIm2yXXkwtJ5anBwW24BweT0r8HYv+Ctv7Zel/snfGz4me NvjT4J8Oak/gDwv8UvAdhoeg6fPp2m2uqaxNa/2U4ntWleR44nTa8szoQh83IkwAfvj4RuL278K6 XNqUflajNaRPdJt27ZSgLjHbDZ4rSrM8I6vNr/hTS7+4h+zz31pFcSRcjy2dAxXnngnHNadABRRR QAUUUUAFFFFABRRRQAUUUUAFFFFABX8QX/BWL/lKb+0t/wBlV8Uf+ne6r+32v4gv+CsX/KU39pb/ ALKr4o/9O91QB4BRRRQAUUUUAf1+/wDBrj/ygo+Bn/cf/wDUh1Ovtn4x/wDJONR/7Zf+jUr4m/4N cf8AlBR8DP8AuP8A/qQ6nX2z8Y/+Scaj/wBsv/RqUAeG0UUUAFFFFABX0xXzPX0xQAUUUUAFFFFA BRRRQAUUUUAFFFFAH8wP/B6t/wApTfAP/ZKtO/8ATvrFfkDX6/f8Hq3/AClN8A/9kq07/wBO+sV+ QNABRRRQAV+v3/BlT/ylN8ff9kq1H/076PX5A1+v3/BlT/ylN8ff9kq1H/076PQB/T9XzPX0xXzP QAUUUUAFFFFAHuXwc/5Jxp3/AG1/9GvXTVzPwc/5Jxp3/bX/ANGvXTUAFFFFABRRRQAUUUUAFFFF ABXwB/wdHf8AKCj45/8AcA/9SHTK+/6+AP8Ag6O/5QUfHP8A7gH/AKkOmUAfyBUUUUAFFFFABX9/ lfwB1/f5QB5B8fv+Rxtv+vNf/RklcNXc/H7/AJHG2/681/8ARklcNQAUUUUAFdz8Af8Akcbn/rzb /wBGR1w1dz8Af+Rxuf8Arzb/ANGR0Aev0UUUAFFFFABRRRQAUUUUAFFFFABX8Adf3+V/AHQAUUUU AFFFFAH9fv8Awa4/8oKPgZ/3H/8A1IdTr7Z+Mf8AyTjUf+2X/o1K+Jv+DXH/AJQUfAz/ALj/AP6k Op19s/GP/knGo/8AbL/0alAHhtFFFABRRRQBp+Cv+Ry0j/r8h/8ARgr6Fr568Ff8jlpH/X5D/wCj BX0LQAUUUUAFFFFABRRRQAUUUUAFFFFAH8wP/B6t/wApTfAP/ZKtO/8ATvrFfkDX6/f8Hq3/AClN 8A/9kq07/wBO+sV+QNABRRRQAV+v3/BlT/ylN8ff9kq1H/076PX5A1+v3/BlT/ylN8ff9kq1H/07 6PQB/T9XzPX0xXzPQAUUUUAFFFFAHuXwc/5Jxp3/AG1/9GvXTVzPwc/5Jxp3/bX/ANGvXTUAZPjb xJp3gzwbq+sau6RaTpNlNeXrsu5UgjjZ5CR3AUHivwzH/BLv9hv4efALRf29X+En7SMPwvbUbfxC nw+NxpE1nY2ckgihvpLMTGdrETGObylvXYKwLReQHQfuZ428N6d4z8G6vo+rokuk6tZTWd6jNtVo JI2SQE9gVJ5r8Hrf/gmb8W9S+AGhfDDWf2/fgfqf/BPuTXotJt7/APtyxTUdRgjmNyulpdCHy2m8 9DGIhqDIioGEWEEAAP3u06/g1awt7u2kSa2uo1lidejowBBHsQQas1X06wg0iwt7S2jWG2tY1iij XgIigAAewAAqxQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAV/EF/wVi/5Sm/tLf9lV8Uf+ne6r+3 2v4gv+CsX/KU39pb/sqvij/073VAHgFFFFABRRRQB/X7/wAGuP8Aygo+Bn/cf/8AUh1Ovtn4x/8A JONR/wC2X/o1K+Jv+DXH/lBR8DP+4/8A+pDqdfbPxj/5JxqP/bL/ANGpQB4bRRRQAUUUUAFfTFfM 9fTFABRRRQAUUUUAFFFFABRRRQAUUUUAfzA/8Hq3/KU3wD/2SrTv/TvrFfkDX6/f8Hq3/KU3wD/2 SrTv/TvrFfkDQAUUUUAFfr9/wZU/8pTfH3/ZKtR/9O+j1+QNfr9/wZU/8pTfH3/ZKtR/9O+j0Af0 /V8z19MV8z0AFFFFABRRRQB7l8HP+Scad/21/wDRr101cz8HP+Scad/21/8ARr101ABRRRQAUUUU AFFFFABRRRQAV8Af8HR3/KCj45/9wD/1IdMr7/r4A/4Ojv8AlBR8c/8AuAf+pDplAH8gVFFFABRR RQAV/f5X8Adf3+UAeQfH7/kcbb/rzX/0ZJXDV3Px+/5HG2/681/9GSVw1ABRRRQAV3PwB/5HG5/6 82/9GR1w1dz8Af8Akcbn/rzb/wBGR0Aev0UUUAFFFFABRRRQAUUUUAFFFFABX8Adf3+V/AHQAUUU UAFFFFAH9fv/AAa4/wDKCj4Gf9x//wBSHU6+2fjH/wAk41H/ALZf+jUr4m/4Ncf+UFHwM/7j/wD6 kOp19s/GP/knGo/9sv8A0alAHhtFFFABRRRQBp+Cv+Ry0j/r8h/9GCvoWvnrwV/yOWkf9fkP/owV 9C0AFFFFABRRRQAUUUUAFFFFABRRRQB/MD/werf8pTfAP/ZKtO/9O+sV+QNfr9/werf8pTfAP/ZK tO/9O+sV+QNABRRRQAV+v3/BlT/ylN8ff9kq1H/076PX5A1+v3/BlT/ylN8ff9kq1H/076PQB/T9 XzPX0xXzPQAUUUUAFFFFAHuXwc/5Jxp3/bX/ANGvXTVzPwc/5Jxp3/bX/wBGvXTUAc78W/BL/Ev4 V+J/Dcd29hJ4g0m601blPvW5mheMSD3Xdn8K/BLVNU/bL+Iv7A+l/wDBO2//AGPdW0y7QWnhW5+J rCaXwrHY292l4t6H+zfZd4ijRjKLss0oO2MTMsS/vh8SrHXdU+HXiC28MXtvp3iW5064i0m7uFDQ 2t20TCGRwVcFVkKkgq3APynofxC/blv/APgq/wD8E9/2c9U+Knj39qr4NyeEtEvLG0v30vw/Z3M9 sLq6itVmMbaChZEeVWYKWfaDtVjhSAfud4c0j/hH/Dthp5mkuPsNvHb+bJ9+XYoXcfc4zV6svwjL cT+FdMe7u7e/untImmuYCGhuHKDdIhAAKsckYAGD0FalABRRRQAUUUUAFFFFABRRRQAUUUUAFFFF ABX8QX/BWL/lKb+0t/2VXxR/6d7qv7fa/iC/4Kxf8pTf2lv+yq+KP/TvdUAeAUUUUAFFFFAH9fv/ AAa4/wDKCj4Gf9x//wBSHU6+2fjH/wAk41H/ALZf+jUr4m/4Ncf+UFHwM/7j/wD6kOp19s/GP/kn Go/9sv8A0alAHhtFFFABRRRQAV9MV8z19MUAFFFFABRRRQAUUUUAFFFFABRRRQB/MD/werf8pTfA P/ZKtO/9O+sV+QNfr9/werf8pTfAP/ZKtO/9O+sV+QNABRRRQAV+v3/BlT/ylN8ff9kq1H/076PX 5A1+v3/BlT/ylN8ff9kq1H/076PQB/T9XzPX0xXzPQAUUUUAFFFFAHuXwc/5Jxp3/bX/ANGvXTVz Pwc/5Jxp3/bX/wBGvXTUAFFFFABRRRQAUUUUAFFFFABXwB/wdHf8oKPjn/3AP/Uh0yvv+vgD/g6O /wCUFHxz/wC4B/6kOmUAfyBUUUUAFFFFABX9/lfwB1/f5QB5B8fv+Rxtv+vNf/RklcNXc/H7/kcb b/rzX/0ZJXDUAFFFFABXc/AH/kcbn/rzb/0ZHXDV3PwB/wCRxuf+vNv/AEZHQB6/RRRQAUUUUAFF FFABRRRQAUUUUAFfwB1/f5X8AdABRRRQAUUUUAf1+/8ABrj/AMoKPgZ/3H//AFIdTr7Z+Mf/ACTj Uf8Atl/6NSvib/g1x/5QUfAz/uP/APqQ6nX2z8Y/+Scaj/2y/wDRqUAeG0UUUAFFFFAGn4K/5HLS P+vyH/0YK+ha+evBX/I5aR/1+Q/+jBX0LQAUUUUAFFFFABRRRQAUUUUAFFFFAH8wP/B6t/ylN8A/ 9kq07/076xX5A1+v3/B6t/ylN8A/9kq07/076xX5A0AFFFFABX6/f8GVP/KU3x9/2SrUf/Tvo9fk DX6/f8GVP/KU3x9/2SrUf/Tvo9AH9P1fM9fTFfM9ABRRRQAUUUUAe5fBz/knGnf9tf8A0a9dNXM/ Bz/knGnf9tf/AEa9dNQB4T+39+1v8Pv2UPgeF8f+ONR8ByfEK5bwf4dv9N0e/wBX1A6pdW83kC3t 7GN52kGwspUKNwRdwZlz+K3xt/4Ju+Dr39rnw7+zb+0B/wAFTfiR451XVNV059Q8BaxpmsTW99uc Sx2r3k2o3FjaXUqDERmBdWliYRtvRX++f+Dia41H4NWv7Nfx6n8J6x408C/AT4mW3iPxdp+mQLPc 2tkUwt8qOQhMMiKVLFQJHjy8YJdfyU+IHw+0r45f8Ew/2lv2mPGfhCOP4qftQ/F3T7T4Ny6hbIdb WNNUWeT7AyjcimJp7dnQhWNuoJOEyAf1E6dYQaRYW9pbRrDbWsaxRRrwERQAAPYAAVYrN8I297ae FdLh1KTzdRhtIkun3bt8oQBznvls81pUAFY3j3x3ovwu8Eax4l8R6rYaH4f0Czl1DUdQvZlht7K3 iQvJLI7cKqqCST0ArZr54/4KneF9V8WfsJ+N4dJ0++1WfT5dM1a4s7OB7i4ubSz1O0u7pI4kBeVj bwTARKC0h+UAlgCAdr8CP2wfAP7SOt6jpPhq+1621zSrWG/udI8Q+GtT8N6otpMzpFdraajb2872 zvHIizohjLxuobcrAaPx5/aX8J/s32OkS+Jj4nnm165e0sLPQPC+qeI7+5dI2kci1063nnCKiktI UCLlQWBZQfnb4d/HTwd+1T/wU68PeO/hf4u0Hxv4I8D/AAr1nTvEeveHr1NT0tbq+1TS5rOyaeEt F9pSOwvJWiDGWNHQsqrMhbd/aR/4K7/Cj4Kfsq+Bvibo+v6LrVr8XSIPAf8AbGoL4c0/V5XjaQS3 V1eiNbK1jRS8kkq7woCpHLK8cTgHqdn+258L7/8AZ9m+KMPilH8G210dPlm/s+6F/Hei4Fr/AGeb DyvtYv8A7SVgFmYftBlYRiPeQtbXwJ/aX8HftJadq1x4T1DUZLjQLtbHVdN1XR73RdW0mZokmRLm xvYobqAvFJHInmRKHjdXXcrAn4atD4L8I/stfDjx5o/xc8GfF7SvDPxug8c/FTxd4a1O3vtG025u 47kXMm2CSVbaztZLyzbEjkwW8SzSNhGkr3D9jPxxpHx8/b6+PPxL8C6zp/iX4bal4d8J+HbPXNKu FvNJ1vU7M6tPdvbXKZimEMV9ZxO8LMokVo2IeJlUA+taKKo32lz3cxePUr22UjGyJYSv1+ZCf1oA vUVmf2Bdf9BvVP8Avi3/APjVH9gXX/Qb1T/vi3/+NUAadFZn9gXX/Qb1T/vi3/8AjVH9gXX/AEG9 U/74t/8A41QBp1/EF/wVi/5Sm/tLf9lV8Uf+ne6r+2r+wLr/AKDeqf8AfFv/APGq/iW/4KtxGP8A 4KjftJIztI6fFLxOC7YDOf7XuuTgAZPsAKAPn+iiigAooooA/r9/4Ncf+UFHwM/7j/8A6kOp19s/ GP8A5JxqP/bL/wBGpXwv/wAGwWlXFz/wQz+B0kep31sjf29iONISi/8AFQal03Rk+/Jr7Y+KelXF t4Dv5H1S/uUTy8xyJCFb94vXbGD78GgDx2iiigAooooAK+mK+Z6+hf7Auv8AoN6p/wB8W/8A8aoA 06KzP7Auv+g3qn/fFv8A/GqP7Auv+g3qn/fFv/8AGqANOisz+wLr/oN6p/3xb/8Axqj+wLr/AKDe qf8AfFv/APGqANOisz+wLr/oN6p/3xb/APxqj+wLr/oN6p/3xb//ABqgDTorM/sC6/6Deqf98W// AMao/sC6/wCg3qn/AHxb/wDxqgDTorM/sC6/6Deqf98W/wD8ao/sC6/6Deqf98W//wAaoA/mU/4P Vv8AlKb4B/7JVp3/AKd9Yr8ga/Xj/g9BtJLL/gqL4BSW6nu3/wCFWaed8wQMB/a+scfIqjH4Z5r8 h6ACiiigAr9fv+DKn/lKb4+/7JVqP/p30evyBr9eP+DL60kvf+Covj5Irqe0f/hVmoHfCELEf2vo /Hzqwx+GeKAP6hK+Z6+hf7Auv+g3qn/fFv8A/Gq+eqACiiigAooooA9y+Dn/ACTjTv8Atr/6Neum rifhZpVxc+A7CRNUv7ZH8zEcaQlV/eN03Rk+/Jro/wCwLr/oN6p/3xb/APxqgDTorM/sC6/6Deqf 98W//wAao/sC6/6Deqf98W//AMaoA06KzP7Auv8AoN6p/wB8W/8A8ao/sC6/6Deqf98W/wD8aoA0 6KzP7Auv+g3qn/fFv/8AGqP7Auv+g3qn/fFv/wDGqANOisz+wLr/AKDeqf8AfFv/APGqP7Auv+g3 qn/fFv8A/GqANOvgD/g6O/5QUfHP/uAf+pDplfdn9gXX/Qb1T/vi3/8AjVfAn/Bz7pVxbf8ABDP4 4ySanfXKL/YOY5EhCN/xUGm9dsYPvwaAP5EaKKKACiiigAr+/wAr+AOv76f7Auv+g3qn/fFv/wDG qAPM/j9/yONt/wBea/8AoySuGrsfjZaSWXim3SW7nu3Nop3yhAwG9+PkVRj8M81x1ABRRRQAV3Pw B/5HG5/682/9GR1w1dj8E7SS98U3CRXc9o4tGO+IIWI3px86sMfhnigD2eisz+wLr/oN6p/3xb// ABqj+wLr/oN6p/3xb/8AxqgDTorM/sC6/wCg3qn/AHxb/wDxqj+wLr/oN6p/3xb/APxqgDTorM/s C6/6Deqf98W//wAao/sC6/6Deqf98W//AMaoA06KzP7Auv8AoN6p/wB8W/8A8ao/sC6/6Deqf98W /wD8aoA06KzP7Auv+g3qn/fFv/8AGqP7Auv+g3qn/fFv/wDGqANOv4A6/vp/sC6/6Deqf98W/wD8 ar+BagAooooAKKKKAP6/f+DXH/lBR8DP+4//AOpDqdfbPxj/AOScaj/2y/8ARqV8L/8ABsFpVxc/ 8EM/gdJHqd9bI39vYjjSEov/ABUGpdN0ZPvya+2PinpVxbeA7+R9Uv7lE8vMciQhW/eL12xg+/Bo A8dooooAKKKKANPwV/yOWkf9fkP/AKMFfQtfPHhGNpvFWlxq7xM93EA64LId45GQRke4Ir3T+wLr /oN6p/3xb/8AxqgDTorM/sC6/wCg3qn/AHxb/wDxqj+wLr/oN6p/3xb/APxqgDTorM/sC6/6Deqf 98W//wAao/sC6/6Deqf98W//AMaoA06KzP7Auv8AoN6p/wB8W/8A8ao/sC6/6Deqf98W/wD8aoA0 6KzP7Auv+g3qn/fFv/8AGqP7Auv+g3qn/fFv/wDGqANOisz+wLr/AKDeqf8AfFv/APGqP7Auv+g3 qn/fFv8A/GqAP5lP+D1b/lKb4B/7JVp3/p31ivyBr9eP+D0G0ksv+CovgFJbqe7f/hVmnnfMEDAf 2vrHHyKox+Gea/IegAooooAK/X7/AIMqf+Upvj7/ALJVqP8A6d9Hr8ga/Xj/AIMvrSS9/wCCovj5 Irqe0f8A4VZqB3whCxH9r6Px86sMfhnigD+oSvmevoX+wLr/AKDeqf8AfFv/APGq+eqACiiigAoo ooA9y+Dn/JONO/7a/wDo166auJ+FmlXFz4DsJE1S/tkfzMRxpCVX943TdGT78muj/sC6/wCg3qn/ AHxb/wDxqgDK8UfGfwd4J8VQ6FrXizw1o+t3Gn3Grxafe6pBb3Utlb4+0XSxOwYwxZG+QDamRkjN aHgjxxovxL8Jadr/AIc1jS/EGhazbpd2GpaddR3dnfQuMpLFLGSkiMOQykgjvXxJ/wAFi/8AgjNr P/BSXW/DnjPwD8ZPFHwX+I/hfRr7QFvdO85rXW9OuQWexuPJmikjR5AoZwzqUZw0Uny7fyc/Z/8A 2ZrPQviN4X+AFn/wV88X+EviBZCLQovDHhqHxDL4Y027SIEWFnqZ1C3sXVSPKjA8otJtiCCQiOgD +laiqHh3TptG8P2NnPdSX09pBHDJcyZ33DKoBc5JOWIzyT16mr9ABRRRQAUUUUAFFFFABRRRQAUU UUAFFFFABX8QX/BWL/lKb+0t/wBlV8Uf+ne6r+32v4gv+CsX/KU39pb/ALKr4o/9O91QB4BRRRQA UUUUAf1+/wDBrj/ygo+Bn/cf/wDUh1Ovtn4x/wDJONR/7Zf+jUr4m/4Ncf8AlBR8DP8AuP8A/qQ6 nX2z8Y/+Scaj/wBsv/RqUAeG0UUUAFFFFABX0xXzPX0xQAUUUUAFFFFABRRRQAUUUUAFFFFAH8wP /B6t/wApTfAP/ZKtO/8ATvrFfkDX6/f8Hq3/AClN8A/9kq07/wBO+sV+QNABRRRQAV+v3/BlT/yl N8ff9kq1H/076PX5A1+v3/BlT/ylN8ff9kq1H/076PQB/T9XzPX0xXzPQAUUUUAFFFFAHuXwc/5J xp3/AG1/9GvXTVzPwc/5Jxp3/bX/ANGvXTUAFFFFABRRRQAUUUUAFFFFABXwB/wdHf8AKCj45/8A cA/9SHTK+/6+AP8Ag6O/5QUfHP8A7gH/AKkOmUAfyBUUUUAFFFFABX9/lfwB1/f5QB5B8fv+Rxtv +vNf/RklcNXc/H7/AJHG2/681/8ARklcNQAUUUUAFdz8Af8Akcbn/rzb/wBGR1w1dz8Af+Rxuf8A rzb/ANGR0Aev0UUUAFFFFABRRRQAUUUUAFFFFABX8Adf3+V/AHQAUUUUAFFFFAH9fv8Awa4/8oKP gZ/3H/8A1IdTr7Z+Mf8AyTjUf+2X/o1K+Jv+DXH/AJQUfAz/ALj/AP6kOp19s/GP/knGo/8AbL/0 alAHhtFFFABRRRQBp+Cv+Ry0j/r8h/8ARgr6Fr568Ff8jlpH/X5D/wCjBX0LQAUUUUAFFFFABRRR QAUUUUAFFFFAH8wP/B6t/wApTfAP/ZKtO/8ATvrFfkDX6/f8Hq3/AClN8A/9kq07/wBO+sV+QNAB RRRQAV+v3/BlT/ylN8ff9kq1H/076PX5A1+v3/BlT/ylN8ff9kq1H/076PQB/T9XzPX0xXzPQAUU UUAFFFFAHuXwc/5Jxp3/AG1/9GvXTVzPwc/5Jxp3/bX/ANGvXTUAc38YPD2qeLvhN4p0nQ7z7BrW qaRd2lhc5x9nuJIXSOTPba5U/hX8x48f/B/xX+wNon7Fug/sf+KdI/bljuLfSG1c+GLNNQttQj1D 7XLfNqQf+0PLNoGlIaMQxxMQG8iNZD/UpRQBR8OWdzp3h7T7e9uPtd5b28cc8/8Az2kCgM/4nJ/G r1FFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABX8QX/BWL/lKb+0t/2VXxR/6d7qv7fa/iC/4Kxf 8pTf2lv+yq+KP/TvdUAeAUUUUAFFFFAH9fv/AAa4/wDKCj4Gf9x//wBSHU6+2fjH/wAk41H/ALZf +jUr4m/4Ncf+UFHwM/7j/wD6kOp19s/GP/knGo/9sv8A0alAHhtFFFABRRRQAV9MV8z19MUAFFFF ABRRRQAUUUUAFFFFABRRRQB/MD/werf8pTfAP/ZKtO/9O+sV+QNfr9/werf8pTfAP/ZKtO/9O+sV +QNABRRRQAV+v3/BlT/ylN8ff9kq1H/076PX5A1+v3/BlT/ylN8ff9kq1H/076PQB/T9XzPX0xXz PQAUUUUAFFFFAHuXwc/5Jxp3/bX/ANGvXTVzPwc/5Jxp3/bX/wBGvXTUAFFFFABRRRQAUUUUAFFF FABXwB/wdHf8oKPjn/3AP/Uh0yvv+vgD/g6O/wCUFHxz/wC4B/6kOmUAfyBUUUUAFFFFABX9/lfw B1/f5QB5B8fv+Rxtv+vNf/RklcNXc/H7/kcbb/rzX/0ZJXDUAFFFFABXc/AH/kcbn/rzb/0ZHXDV 3PwB/wCRxuf+vNv/AEZHQB6/RRRQAUUUUAFFFFABRRRQAUUUUAFfwB1/f5X8AdABRRRQAUUUUAf1 +/8ABrj/AMoKPgZ/3H//AFIdTr7Z+Mf/ACTjUf8Atl/6NSvib/g1x/5QUfAz/uP/APqQ6nX2z8Y/ +Scaj/2y/wDRqUAeG0UUUAFFFFAGn4K/5HLSP+vyH/0YK+ha+evBX/I5aR/1+Q/+jBX0LQAUUUUA FFFFABRRRQAUUUUAFFFFAH8wP/B6t/ylN8A/9kq07/076xX5A1+v3/B6t/ylN8A/9kq07/076xX5 A0AFFFFABX6/f8GVP/KU3x9/2SrUf/Tvo9fkDX6/f8GVP/KU3x9/2SrUf/Tvo9AH9P1fM9fTFfM9 ABRRRQAUUUUAe5fBz/knGnf9tf8A0a9dNXM/Bz/knGnf9tf/AEa9dNQBzfxg8Q6p4R+E3inVtDs/ t+taXpF3d2FtjP2i4jhd448d9zhR+NfzHjwB8H/Cn7A2iftpaD+2B4p1f9uWS4t9XbSD4ns31C51 CTUPskti2mhP7Q8sWhaIlpDDJEpIXyJFjH9CP7QP/BRzwR+zh+01pPwp13SvFd34i1nwdqvjiC4s La3kslstOR3njZnmRxMwQ7FCFScZda/FPSP+Cw//AASo0L9qKL4y2f7KvxWg8f2+oHVYrkaTZHT4 rvYVE66cdY+wrICfMDCDKygSjEgDgA/oh8OXtzqPh7T7i8t/sl5cW8ck8H/PGQqCyfgcj8KvVQ8O 65H4m0Cw1KBJEg1CCO5iWQAOquoYA4JGcHsTV+gAooooAKKKKACiiigAooooAKKKKACiiigAr+IL /grF/wApTf2lv+yq+KP/AE73Vf2+1/EF/wAFYv8AlKb+0t/2VXxR/wCne6oA8AooooAKKKKAP6/f +DXH/lBR8DP+4/8A+pDqdfbPxj/5JxqP/bL/ANGpXxN/wa4/8oKPgZ/3H/8A1IdTr7Z+Mf8AyTjU f+2X/o1KAPDaKKKACiiigAr6Yr5nr6YoAKKKKACiiigAooooAKKKKACiiigD+YH/AIPVv+UpvgH/ ALJVp3/p31ivyBr9fv8Ag9W/5Sm+Af8AslWnf+nfWK/IGgAooooAK/X7/gyp/wCUpvj7/slWo/8A p30evyBr9fv+DKn/AJSm+Pv+yVaj/wCnfR6AP6fq+Z6+mK+Z6ACiiigAooooA9y+Dn/JONO/7a/+ jXrpq5n4Of8AJONO/wC2v/o166agAooooAKKKKACiiigAooooAK+AP8Ag6O/5QUfHP8A7gH/AKkO mV9/18Af8HR3/KCj45/9wD/1IdMoA/kCooooAKKKKACv7/K/gDr+/wAoA8g+P3/I423/AF5r/wCj JK4au5+P3/I423/Xmv8A6MkrhqACiiigArufgD/yONz/ANebf+jI64au5+AP/I43P/Xm3/oyOgD1 +iiigAooooAKKKKACiiigAooooAK/gDr+/yv4A6ACiiigAooooA/r9/4Ncf+UFHwM/7j/wD6kOp1 9s/GP/knGo/9sv8A0alfE3/Brj/ygo+Bn/cf/wDUh1Ovtn4x/wDJONR/7Zf+jUoA8NooooAKKKKA NPwV/wAjlpH/AF+Q/wDowV9C189eCv8AkctI/wCvyH/0YK+haACiiigAooooAKKKKACiiigAoooo A/mB/wCD1b/lKb4B/wCyVad/6d9Yr8ga/X7/AIPVv+UpvgH/ALJVp3/p31ivyBoAKKKKACv1+/4M qf8AlKb4+/7JVqP/AKd9Hr8ga/X7/gyp/wCUpvj7/slWo/8Ap30egD+n6vmevpivmegAooooAKKK KAPcvg5/yTjTv+2v/o166auZ+Dn/ACTjTv8Atr/6NeumoA+Pf+C0/iz9pPQP2RLqz/Zs+HPh34k6 34g+16Z4kstTdRJZ6VJZTrJNbKbu3Mlxv2KqL5rEtgRtX5S6X8Gv+Cn37UP/AATB8L/sx3P7OPw0 8OfCfWNE0nQk1rWZ7ey1zT7K3nt5Y57mC41J5IZV8lTIPsPnIAxSNZAhH77/ABi8ej4U/CTxT4pN ubseGtIu9VMGcGbyIXl2Z7Z24/Gv50tR/wCCnn/BSjxJ8M/FvxJb4+/Drwp4f0fwho/xIl0o+H9L ElrousahJaQC3WTTZZJBAV3Oryu/lmPa00rhGAP6QPC2kSeHvDWnafJO11JYWsVu0zDDTFEClyMn BOM9T161pVj+B76fVPBej3Vxcx3s9zYwyyTopRJ2aNSXAKqQGJzgqMZ6DpWxQAUUUUAFFFFABRRR QAUUUUAFFFFABRRRQAV/EF/wVi/5Sm/tLf8AZVfFH/p3uq/t9r+IL/grF/ylN/aW/wCyq+KP/Tvd UAeAUUUUAFFFFAH9fv8Awa4/8oKPgZ/3H/8A1IdTr7Z+Mf8AyTjUf+2X/o1K+Jv+DXH/AJQUfAz/ ALj/AP6kOp19s/GP/knGo/8AbL/0alAHhtFFFABRRRQAV9MV8z19MUAFFFFABRRRQAUUUUAFFFFA BRRRQB/MD/werf8AKU3wD/2SrTv/AE76xX5A1+v3/B6t/wApTfAP/ZKtO/8ATvrFfkDQAUUUUAFf r9/wZU/8pTfH3/ZKtR/9O+j1+QNfr9/wZU/8pTfH3/ZKtR/9O+j0Af0/V8z19MV8z0AFFFFABRRR QB7l8HP+Scad/wBtf/Rr101cz8HP+Scad/21/wDRr101ABRRRQAUUUUAFFFFABRRRQAV8Af8HR3/ ACgo+Of/AHAP/Uh0yvv+vgD/AIOjv+UFHxz/AO4B/wCpDplAH8gVFFFABRRRQAV/f5X8Adf3+UAe QfH7/kcbb/rzX/0ZJXDV3Px+/wCRxtv+vNf/AEZJXDUAFFFFABXc/AH/AJHG5/682/8ARkdcNXc/ AH/kcbn/AK82/wDRkdAHr9FFFABRRRQAUUUUAFFFFABRRRQAV/AHX9/lfwB0AFFFFABRRRQB/X7/ AMGuP/KCj4Gf9x//ANSHU6+2fjH/AMk41H/tl/6NSvib/g1x/wCUFHwM/wC4/wD+pDqdfbPxj/5J xqP/AGy/9GpQB4bRRRQAUUUUAafgr/kctI/6/If/AEYK+ha+evBX/I5aR/1+Q/8AowV9C0AFFFFA BRRRQAUUUUAFFFFABRRRQB/MD/werf8AKU3wD/2SrTv/AE76xX5A1+v3/B6t/wApTfAP/ZKtO/8A TvrFfkDQAUUUUAFfr9/wZU/8pTfH3/ZKtR/9O+j1+QNfr9/wZU/8pTfH3/ZKtR/9O+j0Af0/V8z1 9MV8z0AFFFFABRRRQB7l8HP+Scad/wBtf/Rr101cz8HP+Scad/21/wDRr101AHj37bf7X/wi/Yt+ BF94p+NfivTfCngq/kGkSPdRT3El9JOCvkRQQI88zFN7ERoxVFdzhUZh+QP/AAUI+G3/AASu8Zfs c/Bz4rv401/UfBfw7S78NeE/C/g7Xp5tY8URpdG+fSbyPUFkv4YYXnlbfJJbeTHqCgSDzbUV9K/8 HLHgfxdrV1+zP4j8P/AnxR+0Vo3gbxvcazrvg3S9HuNSttShW3UJHdLFb3CpGzEjMkTKfmGCCRX5 bfs5+HvFPwP/AG9fG3xw1L/glh8ZPEkeqaqmq+DvCS6Xq1jofgmTafMKQLpDRXLbzuj3RpHCQCkY ZUdAD+nzwNqcWseC9HvLe1jsbe7soZo7ZMbLdWjUhBgAYUHHAHToK16oeHdSm1nw/Y3k9rJYz3cE c0ltJnfbsyglDkA5UnHIHToKv0AFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFfxBf8FYv+Upv7S3/ AGVXxR/6d7qv7fa/iC/4Kxf8pTf2lv8Asqvij/073VAHgFFFFABRRRQB/X7/AMGuP/KCj4Gf9x// ANSHU6+2fjH/AMk41H/tl/6NSvib/g1x/wCUFHwM/wC4/wD+pDqdfbPxj/5JxqP/AGy/9GpQB4bR RRQAUUUUAFfTFfM9fTFABRRRQAUUUUAFFFFABRRRQAUUUUAfzA/8Hq3/AClN8A/9kq07/wBO+sV+ QNfr9/werf8AKU3wD/2SrTv/AE76xX5A0AFFFFABX6/f8GVP/KU3x9/2SrUf/Tvo9fkDX6/f8GVP /KU3x9/2SrUf/Tvo9AH9P1fM9fTFfM9ABRRRQAUUUUAe5fBz/knGnf8AbX/0a9dNXM/Bz/knGnf9 tf8A0a9dNQAUUUUAFFFFABRRRQAUUUUAFfAH/B0d/wAoKPjn/wBwD/1IdMr7/r4A/wCDo7/lBR8c /wDuAf8AqQ6ZQB/IFRRRQAUUUUAFf3+V/AHX9/lAHkHx+/5HG2/681/9GSVw1dz8fv8Akcbb/rzX /wBGSVw1ABRRRQAV3PwB/wCRxuf+vNv/AEZHXDV3PwB/5HG5/wCvNv8A0ZHQB6/RRRQAUUUUAFFF FABRRRQAUUUUAFfwB1/f5X8AdABRRRQAUUUUAf1+/wDBrj/ygo+Bn/cf/wDUh1Ovtn4x/wDJONR/ 7Zf+jUr4m/4Ncf8AlBR8DP8AuP8A/qQ6nX2z8Y/+Scaj/wBsv/RqUAeG0UUUAFFFFAGn4K/5HLSP +vyH/wBGCvoWvnrwV/yOWkf9fkP/AKMFfQtABRRRQAUUUUAFFFFABRRRQAUUUUAfzA/8Hq3/AClN 8A/9kq07/wBO+sV+QNfr9/werf8AKU3wD/2SrTv/AE76xX5A0AFFFFABX6/f8GVP/KU3x9/2SrUf /Tvo9fkDX6/f8GVP/KU3x9/2SrUf/Tvo9AH9P1fM9fTFfM9ABRRRQAUUUUAe5fBz/knGnf8AbX/0 a9dNXM/Bz/knGnf9tf8A0a9dNQAUUUUAFFFFABRRVe9vIdPtJbi4ljgggUySSOwVI1AyWJPAAHOT QBYorhfgl+0r8Of2mdFvdS+G/wAQPBXxA07TZxbXd14b1y11aG1lKhhHI9u7qjFSDtJBwc1pfFj4 x+EPgN4KufE3jnxX4b8F+GrJ447jVdd1ODTrGBnYIitNMyopZiFAJ5JAHNAHUUVyMfx18Ez/AAiP xCj8ZeFX8AixOqHxKurW50j7IBk3P2vf5PlAAnfu24HWpPhH8afBvx/8GQ+JPAfi7w1428O3Ejwx apoGqQalZSOh2uizQsyFlPBAOQetAHVUUUUAFFFFABRRRQAV/EF/wVi/5Sm/tLf9lV8Uf+ne6r+3 2v4gv+CsX/KU39pb/sqvij/073VAHgFFFFABRRRQB/X7/wAGuP8Aygo+Bn/cf/8AUh1Ovtn4x/8A JONR/wC2X/o1K+Jv+DXH/lBR8DP+4/8A+pDqdfbPxj/5JxqP/bL/ANGpQB4bRRRQAUUUUAFfTFfM 9fTFABRRRQAUUUUAFFFFABRRRQAUUUUAfzA/8Hq3/KU3wD/2SrTv/TvrFfkDX6/f8Hq3/KU3wD/2 SrTv/TvrFfkDQAUUUUAFfr9/wZU/8pTfH3/ZKtR/9O+j1+QNfr9/wZU/8pTfH3/ZKtR/9O+j0Af0 /V8z19MV8z0AFFFFABRRRQB7l8HP+Scad/21/wDRr101cz8HP+Scad/21/8ARr101ABRRRQAUUUU AFFFFABRRRQAV8Af8HR3/KCj45/9wD/1IdMr7/r4A/4Ojv8AlBR8c/8AuAf+pDplAH8gVFFFABRR RQAV/f5X8Adf3+UAeQfH7/kcbb/rzX/0ZJXDV3Px+/5HG2/681/9GSVw1ABRRRQAV3PwB/5HG5/6 82/9GR1w1dz8Af8Akcbn/rzb/wBGR0Aev0UUUAFFFFABRRRQAUUUUAFFFFABX8Adf3+V/AHQAUUU UAFFFFAH9fv/AAa4/wDKCj4Gf9x//wBSHU6+2fjH/wAk41H/ALZf+jUr4m/4Ncf+UFHwM/7j/wD6 kOp19s/GP/knGo/9sv8A0alAHhtFFFABRRRQBp+Cv+Ry0j/r8h/9GCvoWvnrwV/yOWkf9fkP/owV 9C0AFFFFABRRRQAUUUUAFFFFABRRRQB/MD/werf8pTfAP/ZKtO/9O+sV+QNfr9/werf8pTfAP/ZK tO/9O+sV+QNABRRRQAV+v3/BlT/ylN8ff9kq1H/076PX5A1+v3/BlT/ylN8ff9kq1H/076PQB/T9 XzPX0xXzPQAUUUUAFFFFAHuXwc/5Jxp3/bX/ANGvXTVzPwc/5Jxp3/bX/wBGvXTUAFFFFABRRRQA V82f8FdN/wDw7x+IvmY/svbp/wDbm7/U/wBkf2la/wBpednjyPsP2nzc8eXvzxX0nVe9s4dQtJbe 4ijngnUxyRuoZJFIwVIPBBHGDQB8u6zNZ23/AAWM8KSaI9hGkfwV1RvEzRFAFthrOn/2OZCvIXd/ bPlbvlx9q287qi+Nfj7w/wDFD9tP9k7xFp2taJ4j8Cawvia50XU7O7ivNNvdUbTY/sclvKhKPMbP +1NjISSnn4717p8GP2ZPht+zhoV/pPw7+HvgfwFpOqzefe2fhzQbXSre8k27N8iQIiu20BcsCccd Kbrv7L/w08UfBuD4can8OvA2o/Dy0jihg8L3Og2k2iwJEweJVs2jMKhGAZQEwpAIwaAPgST7P/wl nizZ9j/4VZ/w2JY+ZnZ9g3/2bZ+fvx8mP+Eo9fm+2bt3z19K/s4eX/w9R/aa/sf7P/Y//CP+DP7X 8rbj+3fJ1Pzd+3/lt/Z39k7t/wA3l/ZsfLivdY/gV4Jg+ER+Hsfg3wqngE2J0s+Gl0m3GkfZCMG2 +ybPJ8ogkbNu3B6VJ8I/gt4N+AHgyHw34D8I+GvBPh23keaLS9A0uDTbKN3O53WGFVQMx5JAyT1o A6qqN9DqLz5trqyhix92W1aRs/USL/Kr1FAGZ9l1n/n/ANM/8AH/APj1H2XWf+f/AEz/AMAH/wDj 1adFAGZ9l1n/AJ/9M/8AAB//AI9R9l1n/n/0z/wAf/49WnRQBmfZdZ/5/wDTP/AB/wD49X5YftCf 8GiHwG/aS+Pvjf4i698RPi7a654/8QX/AIj1CGwudOjtIbi8uZLiVIle0d1jDyMFDOxAAyxPJ/WK igD8bv8AiCf/AGcP+im/G3/wN0v/AOQqP+IJ/wDZw/6Kb8bf/A3S/wD5Cr9kaKAPxu/4gn/2cP8A opvxt/8AA3S//kKj/iCf/Zw/6Kb8bf8AwN0v/wCQq/ZGigDwr9gv9iLTP+CeH7KfhT4O+CdfvtU8 MeD/ALZ9judbt1nv5ftN5PeSeY8JijOJLhwNsa4UKDk5J9S8SeFdS8UaPPYXGo2KQz7dxjsXDDDB hjMpHUeldHRQB5n/AMM7f9Rj/wAlP/s6P+Gdv+ox/wCSn/2demUUAeZ/8M7f9Rj/AMlP/s6P+Gdv +ox/5Kf/AGdemUUAeZ/8M7f9Rj/yU/8As67n7LrP/P8A6Z/4AP8A/Hq06KAMz7LrP/P/AKZ/4AP/ APHqPsus/wDP/pn/AIAP/wDHq06KAMz7LrP/AD/6Z/4AP/8AHqPsus/8/wDpn/gA/wD8erTooAzP sus/8/8Apn/gA/8A8eo+y6z/AM/+mf8AgA//AMerTooAzPsus/8AP/pn/gA//wAeo+y6z/z/AOmf +AD/APx6tOigDM+y6z/z/wCmf+AD/wDx6j7LrP8Az/6Z/wCAD/8Ax6tOigD8+/8Agp5/wbx/DD/g rH8e9H+I3xF8a+PdF1zRdAh8NwQ+HGtLa0a3iubm4V2WeGZzIXupASHAwF+UEEn5y/4gn/2cP+im /G3/AMDdL/8AkKv2RooA/G7/AIgn/wBnD/opvxt/8DdL/wDkKj/iCf8A2cP+im/G3/wN0v8A+Qq/ ZGigD8bv+IJ/9nD/AKKb8bf/AAN0v/5Cr6N/4Jh/8G8fww/4JOfHvWPiN8OvGvj3Wtc1rQJvDc8P iNrS5tFt5bm2uGdVghhcSB7WMAlyMFvlJII/QSigDM+y6z/z/wCmf+AD/wDx6uG/4Z2/6jH/AJKf /Z16ZRQB5n/wzt/1GP8AyU/+zo/4Z2/6jH/kp/8AZ16ZRQB5n/wzt/1GP/JT/wCzo/4Z2/6jH/kp /wDZ16ZRQBznhvwrqXhfR4LC31GxeGDdtMli5Y5Ysc4lA6n0rQ+y6z/z/wCmf+AD/wDx6tOigDM+ y6z/AM/+mf8AgA//AMeo+y6z/wA/+mf+AD//AB6tOigDM+y6z/z/AOmf+AD/APx6j7LrP/P/AKZ/ 4AP/APHq06KAMz7LrP8Az/6Z/wCAD/8Ax6j7LrP/AD/6Z/4AP/8AHq06KAMz7LrP/P8A6Z/4AP8A /HqPsus/8/8Apn/gA/8A8erTooAzPsus/wDP/pn/AIAP/wDHq8d/b0/Yi0z/AIKH/sp+K/g7421+ +0vwx4w+x/bLnRLdYL+L7NeQXkflvMZYxmS3QHdG2VLAYOCPdaKAPxu/4gn/ANnD/opvxt/8DdL/ APkKj/iCf/Zw/wCim/G3/wADdL/+Qq/ZGigD8bv+IJ/9nD/opvxt/wDA3S//AJCo/wCIJ/8AZw/6 Kb8bf/A3S/8A5Cr9kaKAPxu/4gn/ANnD/opvxt/8DdL/APkKv1++y6z/AM/+mf8AgA//AMerTooA 4fxf8J7rxrqkV3d6rBHJHEIgIrMhcAk95Dz8xrL/AOGdv+ox/wCSn/2demUUAeZ/8M7f9Rj/AMlP /s6P+Gdv+ox/5Kf/AGdemUUAeZ/8M7f9Rj/yU/8As61PCHwnuvBWqS3dpqsEkkkRiIlsyVwSD2kH Pyiu4ooAzPsus/8AP/pn/gA//wAeo+y6z/z/AOmf+AD/APx6tOigDM+y6z/z/wCmf+AD/wDx6j7L rP8Az/6Z/wCAD/8Ax6tOigDM+y6z/wA/+mf+AD//AB6j7LrP/P8A6Z/4AP8A/Hq06KAMz7LrP/P/ AKZ/4AP/APHqPsus/wDP/pn/AIAP/wDHq06KAMz7LrP/AD/6Z/4AP/8AHqPsus/8/wDpn/gA/wD8 erTooAzPsus/8/8Apn/gA/8A8er8gf8AiCf/AGcP+im/G3/wN0v/AOQq/ZGigD8bv+IJ/wDZw/6K b8bf/A3S/wD5Co/4gn/2cP8Aopvxt/8AA3S//kKv2RooA/G7/iCf/Zw/6Kb8bf8AwN0v/wCQqP8A iCf/AGcP+im/G3/wN0v/AOQq/ZGigDwr9gv9iLTP+CeH7KfhT4O+CdfvtU8MeD/tn2O51u3We/l+ 03k95J5jwmKM4kuHA2xrhQoOTkn1LxJ4V1LxRo89hcajYpDPt3GOxcMMMGGMykdR6V0dFAHmf/DO 3/UY/wDJT/7Oj/hnb/qMf+Sn/wBnXplFAHmf/DO3/UY/8lP/ALOj/hnb/qMf+Sn/ANnXplFAHnGm /Ah9J1K2u4tXRpLWVZVDWhKkqQRnD9OK7T7LrP8Az/6Z/wCAD/8Ax6tOigDM+y6z/wA/+mf+AD// AB6j7LrP/P8A6Z/4AP8A/Hq06KAMz7LrP/P/AKZ/4AP/APHqPsus/wDP/pn/AIAP/wDHq06KAMz7 LrP/AD/6Z/4AP/8AHqPsus/8/wDpn/gA/wD8erTooAzPsus/8/8Apn/gA/8A8eo+y6z/AM/+mf8A gA//AMerTooAzPsus/8AP/pn/gA//wAeo+y6z/z/AOmf+AD/APx6tOigD8+/+Cnn/BvH8MP+Csfx 70f4jfEXxr490XXNF0CHw3BD4ca0trRreK5ubhXZZ4ZnMhe6kBIcDAX5QQSfnL/iCf8A2cP+im/G 3/wN0v8A+Qq/ZGigD8bv+IJ/9nD/AKKb8bf/AAN0v/5Co/4gn/2cP+im/G3/AMDdL/8AkKv2RooA /G7/AIgn/wBnD/opvxt/8DdL/wDkKvo3/gmH/wAG8fww/wCCTnx71j4jfDrxr491rXNa0Cbw3PD4 ja0ubRbeW5trhnVYIYXEge1jAJcjBb5SSCP0EooAzPsus/8AP/pn/gA//wAerhv+Gdv+ox/5Kf8A 2demUUAeZ/8ADO3/AFGP/JT/AOzo/wCGdv8AqMf+Sn/2demUUAeZ/wDDO3/UY/8AJT/7Oj/hnb/q Mf8Akp/9nXplFAHOeG/CupeF9HgsLfUbF4YN20yWLljlixziUDqfStD7LrP/AD/6Z/4AP/8AHq06 KACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAr8//AIlftVfFCD4EfGf9 oux+Iep6T4d+DnjPW9Kj8BLo+nTaLqWkaHqLWF89zM1udQa7mFveTxyQXUUcZa2UwyCOTzv0Ar5O 8bf8E3td8SDxj4N0/wCIumaX8E/iH4pl8WeIPDLeFzPrTz3Fyl3e2ltqf2tYorS6ukeSRZLKaUC6 uVSZA0XkgHt/7WHxuP7M37LHxM+JIsP7UPw98K6p4l+xl9n2v7HZy3Plbu27y9ue2a8A+G/jv4of AH46fAfTvGvxS1T4k6d8dra80/ULS/0XTrGDQtXg0qTVUbTTZ28MqWjR216hjvHupMC3/fblcy+2 +P8A9n7VPi/rvxE0nxf4rOufCrx/4VXwyfBo0qGD7CZFuY764+2qfNl+0Qzxp5bALH5OVJLmuC+C /wCxZ420L4o+A/EHxI+J2mePbb4T6Zcab4St7Dwr/Ys5eeBLWS+1KU3dwt1d/Z0KBreO0hBnuD5J DRrEAeIfCH9qn4o3XwI+BH7RWrfETU9R8N/GzxPo2nah4En0fTU0fQ9P127+y6etnNFbrf8A2q3e exEks91PFL/pJEUYeMQ/oBXyd8NP+Cb2u+BV+H3g29+Ium6h8FfhPria94V8MweFzbaxG8DyvYWl 5qRu3intbQyjy1is4JW+zW2+Vyspm+saACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooA KKKKAPkz/gon8TPHfgb4w/CWy0XxT8ZfBfgLVYNbbxNqvw68ADxdfx3ESWZsY5YzpWpGFGL3PzCF d20/NxXsX7H3jXSviJ+z9omtaH8Sdd+LGnX7TMniHWrWztNRlYSur29xBa2lokEsDq0LwvbxyxtG ySDzFapPjv4L+LPiPXNFvPhn8QvBXg+3tYLmHVLLxL4Ln8RQagztCYZYzBqNjJC8YSZSC8iuJvuq UBPE/Cb9jPxH8A/hD4Z8N+D/AIm3em6t/wAJzceN/G2sXGgWty/jN769uL3U7RYSQllHPNcYjePc 8EcUa7pG3OwB4t8bvjp8X/E/hb9pn4p+D/iDqPhq1/Z2vr2w0LwVDpumXGj+Kv7L0q21K4bUpp7V rxXunuJLcfZbq3WKOKFuXMhbstS+IXxD/bJ/aN8WeGfA/wATdf8AhJoXgTwboetWkmjaZpd/Nr1/ rC3cq/bf7Qs7jbbW8dpCFS38mRzcTlpBtj23fjb/AME6PEfxIuPiv4b8PfEjT/C/wr+PEpuPHWhz eGpL/WJJJ7SKxv8A+zdQ+2xxWaXNpbwoVltLnZIZpFP7wKnS/FP9jzxpa/GHWPGfwg+IOgfDm/8A Fvh+08N+IodY8LTeIIZorJp/sNzZBL60+y3MSXdyjM/nxyDyMxjyjvAOt/YV/aB1H9qn9jj4afEX WNPtdJ1vxh4dtNR1OytSxt7W8aMfaI4yxY+WsocLlmO0Dk9T63XE/s7/AAK0P9mD4DeDfhz4YF0P DvgbRrXQ9P8AtUgkneC3iWJGkYABpGC5YgAFiSAOldtQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQ AUUUUAFFFFABXzH+0v8AFP4o/Df9vT9nXRtN8W+H7f4ZfEPxDqej6roUfhwnVLloPDmrXys+oPcO vlCa1hYRxW0UmU5mZCyN9OV81/tZ/smfFb47ftB/DTxr4S+Jvw+8JWPwr1K41nSNO1fwDea1LcXd xpl5psxnni1i0DReTeyMqJGjK6KS7rlSAZnxK8S/EH9pP9tHx18K/CfxN8SfCLS/hn4Q0bW31HQN N0m/u9ZvtXn1KONZhqNncotvbpphOyIRvI1w2ZAFUV6V+wl8edX/AGnf2Qfh9468R2Wnad4l17SY 31m20/eLOHUIyYbpYA7Mwh8+OTYGZiF25Zj8x5340/so+Nrr456t8SPhH4/8N/D/AMVeK9AtvDni Ftf8KTeJLS+hs5biWxnhijv7Mw3EDXl2NzNKjrKoaP5Aa1PhN+yfqn7PXhP4KeDvAPjzU9I+H/ws spNN1nStQ0231G88awCxaCAz3hCNbzJclbp5IUAlZWTaqNgAHzVeftPfFjUfgLqv7S1j8QNTtvD2 h/Ee60KT4cyabpj6FLoNn4lfw/dO1x9lGoi9MMU16jrd+UJhHGYXjDI258Y/jL8YPimn7TnjPwF8 RNR8GD9nPUJdI0DwtHpemXekeLbuy0Sy1mU6pJcWz3axXDXq2uLO5tmjjjLhvMbI6/Uv+CbOuXiz +Brb4iabZfAa78bjx1c+FI/DUja69ydUGtSWS6sb3ykspNUBleP7EZfJkkhWVdyyLa+O3/BPPxP4 +1L4saT4O+Jen+CPAPx8Ibx5psnhl9R1d5JLKHTbyfS777ZFFYyz2FvBHumtbpY5IxKFJJQgH0Z8 MPHFv8UPhr4e8S2kbw2viLTbbU4UY5ZEmiWRQeByAw7Ct+qWgaLaeGtDstNsYFtrHT4EtreJclYo 0UKqjPOAABzV2gAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKAPD/APgoj4q+Ivw8/Y4+ IPij4Y+J/DfhPxJ4T0HUdaa81jw8+to8NvY3EvlwxrdW6xzmRY2WWXzo12sGgkDccP8AtmfFr4l6 N/wTx8OeKPA2oeMLfxhqd14UbU9Q8LeGk17V7ewudQsV1S5t7H7LcrI6Wcly+BbSbduQhwBXqH7a HwU8X/tHfs6+JPAfhDxZ4c8HT+LrK60fU9Q1nw5Prq/YLm1mglWGGK9tDHPmRGWVndF2MDE24Fc3 w38Hfi94S/Zn0LwtY/EvwNb+OvD5t4IdeXwLcNpF1aQgIIJtObUzMWaMYLx3qHeAwAXMZAML9g74 kaT4/wD+ExisfjT8VPilqOj3Fra6jpPj/wAL2XhnV/DDtG0sZNjHpGmXKJcRyKyvcRujiEeURiTN L41+KvG3xk/bQtPhF4Y+IPiD4XaTofgxfGGqaroFhpl3qmpy3F7JaW1sraja3UEcCC3uHkxAZHZ4 NsiKjrJJ4M/Yx8c+HV+L3jG5+Kdgnxt+KmiWuiQeK9L8JR22k+ForKK5WwNrpdxcXDSCOW7nnkFx dSmaSQjKRrHGmr8UP2WvHOofFLw78RPAXxB8P+HfiFYeHf8AhFdcvPEHhR9a0vxDZiVZ1drW3vbO SGeOcStGyT7AtzOrRvmNowDwv4ZftefEz9p7wh8E/Aa+LW8DeMPFus+L9K8W+KdA0q0e5H/CMXsu nzGxgvUuraFru4EEpMsc6xxGVFAcpInuP7C3xh8UeO2+K3grxjrDeJdf+EHjebwt/bclpDa3GtWb 2FjqNpcTpAqwC48i/jjkMKRI0kLOsUSsEHN2H/BOe5+GHws+Ftn8PPHI0fx98KrvU7208R6/oi6t ba3Jqryy6sL6zgmtNy3NxMbgCCaExyxxEEorxv6Z+yp+zdN+zp4X8TNqmvL4o8W+PPEVz4q8S6tH YDT7e8v544YdsFuHkMNvFb29vBGjyyyCOBd8sjlnIB6tRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAB RRRQAUUUUAFZPjTT9U1fwfq9poepQaNrd1ZzQ2F/Lai7jsbhkIjmaEsvmqjlWKbl3AYyM5rWrD+I mka34g+H+vWHhvWYPDniG+0+4t9L1aaxF/Fpl08TLDcNbl0EyxyFXMZdQ4XbuXOQAfLfwx+IXj34 Mf8ABQK3+Ftz8VvFvxp8PjwDe+J/Fb69o+jwXXg25juraPTgk2mWdnGovkkv8QXCySEWG+NlVZc8 P8EP2lfivN8Iv2dfj3rvxD1DV/D/AMetX0m11jwNcaVpq6R4btdbjdrEafPDbR3xnt5ms4ne5uJ0 lV7hvLjJjMXqv7DP7FfxQ/ZI09NH174j/DPxroepyzX/AImvIvAGo2XiTxbqMkQRr+81CfW7pHlY qm5fs/lrGiwxLDEkapR+Ev8AwTj1/wCHs3wy8Kaj8R7DVfg78FtRXU/Bvhu38NPa6ujQRSw2EGoa k95Kl1BaxTsEEdrbyO0NuzyMUcSgHoX/AAUG+POu/s7/ALNN1rHhhraHxLrmvaH4T0y6uIxNFps+ rataaat20Z4k8gXRmEZ4cxhSQGJHh/xa/ap8e/8ABPPUvjLp3iTxhq/xjsfC3wlv/ij4dufEVlp1 jqf2mweSG5sJpNNtbW3a2ZmsmRvs4lUyz5eQbFT2n4rfsia98e/hj8RfC3jX4iXWrWviLxHaeIfB 09to1vZzeBWsns7mxjUqT9s8m/tPtBebBkEpiYbBzz1l+wJf/Fm7+Jd/8cfF2kfEDU/iV4Pb4fzw eHdAl8N6Zp2iP57Sxwwy3l5N9plkuHZ5zcYxFAEjQxszgGH8PfE3xO/Z4/aU+EPh3xl8UtW+J+j/ ABj0zUYLuPVdH0yx/sPV7S0S9Q6ebG2gYWkkQvFaO6NxIPKt8TA+Z5v1nXzt8Gv2PfHOlfGTwn4v +J3xM0nx7J8N9GudG8LW2leFm0LBuVhjnvdQZ7y5F1dmK3jRWhW2iXzbg+UfMQRfRNABRRRQAUUU UAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQ AUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFAB RRRQAUUV/Pj/AMHGf/CmP+IiT4B/8NDf8ka/4Vra/wDCTf8AH9/qft2veX/x4/6T/rvK/wBVz6/L mgD+g6ivwo/4IbamPhr+3H+1h4x/ZhGuw/sS6J4WnvfDi+I7q8s9AufEMdrYyF45dQZGUqYbtZJJ HVkt2g84j90Rzy/8HWPxd+EHxa8LWXi/Wf2Tvidpk+vR6P4h0H4cWviiLVrFG3JJNDqF4p0yZI5A AHt5bhJcjy2MbecoB+/Fcb8X/wBoHwH+zvo1jqXxB8beEfAunaneLp9ndeIdYt9Mgu7llZlgjed1 V5CqMQiksQpOODXwr+2t/wAFYPjXff8ABTXT/wBkv9mLwT8OtV+INhoy+IfEniP4g3F4uiaXbNAZ REIbQpMxxJa/vVZ/mn2eVgNIvyL/AMHHXij42Xv/AATJ+ET/ALROi/DzQPHOj/G+1ge68HXc8mg6 nYjTbuSK7hFyxnhHzvGyzYbdAzYCstAH7rUV+c/7Cn/BXzx5/wAFIv2rfipr3w807wLpH7Jvwf8A MsrvxHqVjdXXiTxZdxxs7PZolzGltblB5itNC77Ag275XW3+BvH/APweHfEPUJtY8Z+ErL9n/TfC VlqkMdj8PddtfEtx441GyWSKOWT7fBCNIjeRTLKNz/ulG3bOyr5oB/QjRX4E/wDBSb48/GT9qX/g rX+wd8S/hVafDCwk8feFY/EPw4tfFBvytrJdWiTXUWsG35IQvtQ23XHOa/cz4Kf8Jr/wqXw3/wAL G/4Rf/hPf7Ph/t//AIRvz/7I+2bR5v2Xz/33k7s7fM+bGM80AdVRX8uXwc+G/wAEviL/AMFdf22k +NH7M/x3/aQtbT4la0dKtvhppV/fy6E7a1qPmyXQtLy2KrKAgTeXBMb4Awc/pn+1Z+3Zc/8ABH// AIJpfs1j9mz4PL4C8PeOfGC+H7fwV8T7XUo9S0KG8lu7qVJgbp54Z2uCzZd5gqycIQFUAH6tUV+W v/BWD/gqL+1n/wAEpv2FR8S/GHh39na78W6/8TYfD2i6fo/9s6np1poc2n3tyouZJXtJJL1ZbVVM iKkTKSfKUnC9X/wUJ/4KwfHD/gk7+x/4y+I3xr8I/B7VPEXiLxJFoXw00Hwbq2p3UEKyQzSl9Vur qCFpTCsRYmCGISkBMRb96AH6P0V+X/hL/grJ+0p+x/8At7/B34NftceD/gnDp/x8C2nhrWvhxd6g o0nUDIIhbXcd47mVmmlto8x7UXzgyvLhlWD4E/8ABUD9rf8AbI/bZ/ab+Enwr8Mfs529t8C/F1vp VrqfiubWrSQ2DXV5E2+K284XM7pbDDBrZIyM7ZQ+IwD9R64v/hon4f8A/C6f+Fcf8J34O/4WF9m+ 2/8ACL/21bf215G3d532Pf53l7ed2zGOc4roPGniiDwR4Q1bWrpXe20izmvZQvUpGhcge+FNfmR/ wa3eAZ/it+zP8RP2oPGUljrHxT/aF8ZajqGo6ksTB7Oygm8qOxjLlikKzLOyop2hDCnPlLgA/Uui v5hvGn2X/hpXxT9u/wCFhf8ADyr/AIaQ/wCJZ/yGPtP/AAjeyLytm3/Q/wCzfs2dn8X2bbt/0XbX 2V8Rv+Cjdz8SP+CiGn/tD6H8O5/jdaprt18Hf2cPCtlqtvp9vr14hRtf8Rm9mR0hiwEt4p13I8ZY OIwploA/Zbx3490P4XeD9R8ReJ9a0jw74f0eFrm/1PVLyOzs7KJesksshCIo7sxAFQfDf4neG/jL 4JsPE/g/xFonivw3qys9lq2jX8V9Y3iq5RmjmiZkcBlZSVJwVI6g18+f8E2f+ChVp/wUf+HHxB0/ xL8Prz4c+Pvhr4kvfBfjfwbqN/DrENjcxkr+7uo1WO6gkjyN2xQWSUAOgSWT5P8A+CDdld/si/8A BQL9sf8AZX0+6ubn4efDrX7HxP4RtpZS/wDYsGpRtNJarkn5Aj22AMfMkjHLSGgD9U6KKKACiiig AooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKAC iiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKK KKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooo oAKKKKACiiigAooooAKKKKACiiigAooooAK+L/2iv+CRX/C/P+Cv/wAIv2rv+Fhf2T/wqvw+uhf8 It/YXn/2phtSbzftn2hfK/5CH3fJf/U9fm+X7QooA4D9p/8AZ70f9rH9nLxx8M/ENzqFnofjzRbr Q7y4sXVLq3iniaNnjLqyh13ZG5WGRyCOK/LzVf8Ag2C+JPjH9lHwL8F/EP7XU2p/D34Z6/b674Z0 a3+FWnWNrYMpu2n3vFdC5mlle6LCR5yFzKWSRnVo/wBgqKAPhf8Abb/4I1aj8cv20NH/AGjfgv8A GjXvgB8arTTv7F1PV7bQrbxBp2t2PlPFsnsZ3jR5drRAM7OgEEREYkRJF4j9rX/ghT45/bl/Yy8M /DT4p/tKar418WaR8Qh471HxVqPg+EwXyLaSWqadBp0V1HFaQCNlbCOylzK2zMhx+j9FAHw38Pf+ CMcPwF/4KaeMvjx8NvH9v4T8E/FTTjZePPhtJ4eN1pfiGV9xkuUlW6jWCVnIcMYJCrS3ODtnZB5j 8K/+CFfxt/Yzh8ReF/2bP2z/ABP8JPhNquovqWneE9V+HuneK5dGeWNBMkV5dTKwQyBmUIiEAjcZ JN0r/plRQB8E/ts/8EU9a/aX1D9njxV4M+PXi3wF8WP2d7BNN0zxnq+jw+KLrW0FvHE9xeRTyRrJ dO8fmNKxZWMsoZG3KU+y/gn4W8S+BvhN4c0bxl4s/wCE68V6Zp8Nvq3iH+zItL/tq5VQJLn7LETH DvbJ2ISq5wK6uigD8uPBv/BAz43fs/ftd/G34s/Bf9sP/hWF18b/ABLe+INVsf8AhVNhrXlJPe3F 3Fb+Zd3bA+Ubl13okZfqQOAPU/2w/wDgjx48/bs/ZW+C3gj4l/H4eIPG/wAK/GS+LdS8XnwRb2n/ AAkuyW4MVv8AYbe5jittkM0cW9Wfd5O4rlzj70ooA+P/APgtT/wSm/4fA/ss6B8Mz49Pw7/sPxXb +J/7S/sT+1/P8qzvLbyPK+0Qbc/a92/eceXjad2R2P8AwVG/4Jo+CP8Agqt+yvffDHxrdahpJju0 1XRtZsQrXOjahGjpHOEb5ZEKyOjxnG9HYBkbbIv0fRQB+efwO/4IgeML39sHwD8Z/wBo39ozX/2i Ne+Elt5Xgqxk8J2fhuy0qb5ibidYJJTcyhijhzscvEhdpAqqPUv2C/8Agll/wxD+2b+0h8XP+E6/ 4Sf/AIaD1uHWP7K/sX7F/YPlz3cvl+d58n2jP2rG7ZHjy84+bA+uqKAK+o2EGr2FxaXMazW11G0U sbch0YEEH2IJFfmt/wAEI/hv8Qv+Cc/jf4n/ALJnjfwb48n8IeGPEN5rvw48c/2Nc3Gh6zpNwd/2 ea9jj+zwXS4EjRsVzJLKo5Vd/wCmNFAHlv7ZvwU8UftI/sweN/AHg/xuvw51zxlpcukJ4j/sxtRk 0yKYeXO8USzwESmJnVHEoMbsrgErg/On7R//AARZ0Hxz+zb8DfBvwk8caj8FfFX7OV7Fe+BfE1pp UOr/AGN9gS5+0WszKtwLjl3DOA0hy29SyN9u0UAfIn7B37Dlp/wSd+AXxP8AEviTxZ4w+M3j7xvr l9438aeILLw451DX7tySsNnpdp5rKAvCxIXJkkkIKRlI4/Gv+CDH7MPxIl8c/Hv9qH4xeGNU8E+O /wBorxEs1h4Z1O2ktb7w9o9m0sdvFPFIqukjhguHGSlvC/G8iv0gooAKKKKACiiigAooooAKKKKA CiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAK KKKACiiigAooooAKKKKAP//Z --=_mixed 0056238265257D80_=--