From nobody Tue Mar 1 14:53:27 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 064041B42E2 for ; Tue, 1 Mar 2016 14:53:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.001 X-Spam-Level: X-Spam-Status: No, score=-0.001 tagged_above=-999 required=5 tests=[BAYES_40=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Amp7isckBmP5 for ; Tue, 1 Mar 2016 14:53:23 -0800 (PST) Received: from relay3-d.mail.gandi.net (relay3-d.mail.gandi.net [IPv6:2001:4b98:c:538::195]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 800011B42E1 for ; Tue, 1 Mar 2016 14:53:23 -0800 (PST) Received: from mfilter10-d.gandi.net (mfilter10-d.gandi.net [217.70.178.139]) by relay3-d.mail.gandi.net (Postfix) with ESMTP id 80B1BA80D3; Tue, 1 Mar 2016 23:53:21 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at mfilter10-d.gandi.net Received: from relay3-d.mail.gandi.net ([IPv6:::ffff:217.70.183.195]) by mfilter10-d.gandi.net (mfilter10-d.gandi.net [::ffff:10.0.15.180]) (amavisd-new, port 10024) with ESMTP id N2oqvjgw737J; Tue, 1 Mar 2016 23:53:20 +0100 (CET) X-Originating-IP: 93.199.254.229 Received: from nar.local (p5DC7FEE5.dip0.t-ipconnect.de [93.199.254.229]) (Authenticated sender: cabo@cabo.im) by relay3-d.mail.gandi.net (Postfix) with ESMTPSA id 7FB9BA80CF; Tue, 1 Mar 2016 23:53:19 +0100 (CET) Message-ID: <56D61D5D.5080601@tzi.org> Date: Tue, 01 Mar 2016 23:53:17 +0100 From: Carsten Bormann User-Agent: Postbox 4.0.8 (Macintosh/20151105) MIME-Version: 1.0 To: Hannes Tschofenig References: <56CEE2B9.7070902@gmx.net> <56CEF0DC.5060605@tzi.org> <56CFF310.9000203@gmx.net> In-Reply-To: <56CFF310.9000203@gmx.net> X-Enigmail-Version: 1.2.3 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: "Ace@ietf.org" Subject: Re: [Ace] Reminder: ACE virtual interim meeting X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Mar 2016 22:53:26 -0000 Hannes Tschofenig wrote: > What design team are you referring to? During the Yokohama IETF, Goeran and Klaus volunteered to work on this, joined by Ludwig and Francesca. (It is not a formal, WG-chair-licensed design team, but it seems it will result in a viable proposal. It will need some more time.) One observation is that the outcome of the team may not be identical with the various stopgap CoAP-Authorize style options being mulled. But maybe we should indeed do this right. Grüße, Carsten From nobody Tue Mar 1 14:53:53 2016 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id E1CBB1B42E9; Tue, 1 Mar 2016 14:53:52 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.15.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160301225352.10821.13656.idtracker@ietfa.amsl.com> Date: Tue, 01 Mar 2016 14:53:52 -0800 Archived-At: Cc: ace@ietf.org Subject: [Ace] I-D Action: draft-ietf-ace-actors-03.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Mar 2016 22:53:53 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Authentication and Authorization for Constrained Environments of the IETF. Title : An architecture for authorization in constrained environments Authors : Stefanie Gerdes Ludwig Seitz Goeran Selander Carsten Bormann Filename : draft-ietf-ace-actors-03.txt Pages : 32 Date : 2016-03-01 Abstract: Constrained-node networks are networks where some nodes have severe constraints on code size, state memory, processing capabilities, user interface, power and communication bandwidth (RFC 7228). This document provides terminology, and identifies the elements that an architecture needs to address, providing a problem statement, for authentication and authorization in these networks. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-actors/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-ace-actors-03 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-actors-03 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Mar 1 15:00:32 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81C201B42FD for ; Tue, 1 Mar 2016 15:00:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x5wFLbfjsmRY for ; Tue, 1 Mar 2016 15:00:29 -0800 (PST) Received: from relay5-d.mail.gandi.net (relay5-d.mail.gandi.net [217.70.183.197]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ACB641B42FC for ; Tue, 1 Mar 2016 15:00:29 -0800 (PST) Received: from mfilter31-d.gandi.net (mfilter31-d.gandi.net [217.70.178.162]) by relay5-d.mail.gandi.net (Postfix) with ESMTP id 2FBDD41C09B; Wed, 2 Mar 2016 00:00:28 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at mfilter31-d.gandi.net Received: from relay5-d.mail.gandi.net ([IPv6:::ffff:217.70.183.197]) by mfilter31-d.gandi.net (mfilter31-d.gandi.net [::ffff:10.0.15.180]) (amavisd-new, port 10024) with ESMTP id E45x06ki6XqB; Wed, 2 Mar 2016 00:00:26 +0100 (CET) X-Originating-IP: 93.199.254.229 Received: from nar.local (p5DC7FEE5.dip0.t-ipconnect.de [93.199.254.229]) (Authenticated sender: cabo@cabo.im) by relay5-d.mail.gandi.net (Postfix) with ESMTPSA id 4100541C090; Wed, 2 Mar 2016 00:00:26 +0100 (CET) Message-ID: <56D61F08.6010904@tzi.org> Date: Wed, 02 Mar 2016 00:00:24 +0100 From: Carsten Bormann User-Agent: Postbox 4.0.8 (Macintosh/20151105) MIME-Version: 1.0 To: "ace@ietf.org" References: <20160301225353.10821.12033.idtracker@ietfa.amsl.com> In-Reply-To: <20160301225353.10821.12033.idtracker@ietfa.amsl.com> X-Enigmail-Version: 1.2.3 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Archived-At: Subject: [Ace] Fwd: New Version Notification for draft-ietf-ace-actors-03.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Mar 2016 23:00:31 -0000 In preparation for the interim, I have tried to fulfill my role as an editor and address the actionable comments from the reviews by Abhinav Somaraju and Samuel Erdtman (thank you! These were useful.) For lack of time, these changes have not been vetted by all co-authors, but the resulting update probably is a better basis for the reviews that have been promised in Yokohama and are still outstanding than the previous draft would have been. Grüße, Carsten -------- Original Message -------- A new version of I-D, draft-ietf-ace-actors-03.txt has been successfully submitted by Carsten Bormann and posted to the IETF repository. Name: draft-ietf-ace-actors Revision: 03 Title: An architecture for authorization in constrained environments Document date: 2016-03-01 Group: ace Pages: 32 URL: https://www.ietf.org/internet-drafts/draft-ietf-ace-actors-03.txt Status: https://datatracker.ietf.org/doc/draft-ietf-ace-actors/ Htmlized: https://tools.ietf.org/html/draft-ietf-ace-actors-03 Diff: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-actors-03 Abstract: Constrained-node networks are networks where some nodes have severe constraints on code size, state memory, processing capabilities, user interface, power and communication bandwidth (RFC 7228). This document provides terminology, and identifies the elements that an architecture needs to address, providing a problem statement, for authentication and authorization in these networks. From nobody Wed Mar 2 04:56:18 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2C33C1A039C for ; Wed, 2 Mar 2016 04:56:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.901 X-Spam-Level: X-Spam-Status: No, score=-3.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nrJE4jlUPMfP for ; Wed, 2 Mar 2016 04:56:13 -0800 (PST) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 482B21A039F for ; Wed, 2 Mar 2016 04:56:13 -0800 (PST) X-AuditID: c1b4fb3a-f79ce6d000005138-13-56d6e2ebfc6d Received: from ESESSHC016.ericsson.se (Unknown_Domain [153.88.183.66]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id 58.D7.20792.BE2E6D65; Wed, 2 Mar 2016 13:56:11 +0100 (CET) Received: from ESESSMB303.ericsson.se ([169.254.3.52]) by ESESSHC016.ericsson.se ([153.88.183.66]) with mapi id 14.03.0248.002; Wed, 2 Mar 2016 13:56:10 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: "Ace@ietf.org" Thread-Topic: [Ace] Reminder: ACE virtual interim meeting Thread-Index: AQHRb74Yq+trzjxSIUSRgUf1ignVM588nMEAgAEzzQCAB1l7gIAA/EKA Date: Wed, 2 Mar 2016 12:56:10 +0000 Message-ID: References: <56CEE2B9.7070902@gmx.net> <56CEF0DC.5060605@tzi.org> <56CFF310.9000203@gmx.net> <56D61D5D.5080601@tzi.org> In-Reply-To: <56D61D5D.5080601@tzi.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.0.151221 x-originating-ip: [153.88.183.150] Content-Type: text/plain; charset="utf-8" Content-ID: <9A95BE8787998E48951C236CFC7056C5@ericsson.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrMIsWRmVeSWpSXmKPExsUyM2K7k+7rR9fCDDZPU7H4/q2H2eLIlLus Fkt33mO12Db5FZPFq9Y7zA6sHos37WfzWLLkJ5NH77HfbB7TFmUGsERx2aSk5mSWpRbp2yVw ZTzonsVccImj4vHlmcwNjFs4uhg5OSQETCS2PGtkgbDFJC7cW8/WxcjFISRwmFHi3NwjUM4i RomjJyYwglSxCbhIPGh4xARiiwgoSiy6c4kFpIhZ4DSjxJFli8ESwgIWEi+OHWWEKLKU6N6z Esp2k9j94j87iM0ioCLxYeY0NhCbF6j+0ap+sDOEBColjj97DGZzCqhLXNsCsZgR6Lzvp9aA zWcWEJe49WQ+E8TZAhJL9pxnhrBFJV4+/sfaxcjBISqgJ9F1pAIirCSxYvslRpAws4CmxPpd +hBTrCVW3fnAAmErSkzpfsgOcY2gxMmZT1gmMErMQrJsFkL3LCTds5B0z0LSvYCRdRWjaHFq cXFuupGRXmpRZnJxcX6eXl5qySZGYNQe3PLbagfjweeOhxgFOBiVeHg/yF0LE2JNLCuuzD3E KMHBrCTCa3QHKMSbklhZlVqUH19UmpNafIhRmoNFSZyX7dPlMCGB9MSS1OzU1ILUIpgsEwen VAPj4ti5ayKPbNApunxGoWXp/Q+fv05jelpefmriHo0Mca0nq8w3Xr9T3m/pdniSif6XMnb9 QgfxRFaVRbOe7FTQWd7QayHF/Z5jhqxN3PZbtXNOxi0+NOnlMaVzYm8Yz+7Rr7x0f0L8wq7Z m08xLVtfmOd5QLDWS6t2y3QJptiLYRIcBqVPpe+YKbEUZyQaajEXFScCAGyPdlDWAgAA Archived-At: Cc: Carsten Bormann , Hannes Tschofenig , Ludwig Seitz , Francesca Palombini , Klaus Hartke Subject: Re: [Ace] Reminder: ACE virtual interim meeting X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2016 12:56:15 -0000 DQoNCk9uIDIwMTYtMDMtMDEgMjM6NTMsICJBY2Ugb24gYmVoYWxmIG9mIENhcnN0ZW4gQm9ybWFu biINCjxhY2UtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgY2Fib0B0emkub3JnPiB3cm90 ZToNCg0KPkhhbm5lcyBUc2Nob2ZlbmlnIHdyb3RlOg0KPj4gV2hhdCBkZXNpZ24gdGVhbSBhcmUg eW91IHJlZmVycmluZyB0bz8NCj4NCj5EdXJpbmcgdGhlIFlva29oYW1hIElFVEYsIEdvZXJhbiBh bmQgS2xhdXMgdm9sdW50ZWVyZWQgdG8gd29yayBvbiB0aGlzLA0KPmpvaW5lZCBieSBMdWR3aWcg YW5kIEZyYW5jZXNjYS4NCg0KQXMgbWVudGlvbmVkLCB0aGVyZSBpcyBvbmdvaW5nIHdvcmsgb24g cmVxdWlyZW1lbnRzIGZvciBhcHBsaWNhdGlvbiBsYXllcg0Kc2VjdXJpdHkgd2hlbiB1c2luZyBD b0FQLiBGb3IgdGhvc2UgaW50ZXJlc3RlZCwgeW91IGNhbiBmaW5kIHRoZSBsYXRlc3QNCnZlcnNp b24gaGVyZToNCg0KaHR0cHM6Ly9naXRodWIuY29tL2VrdHJhaC9jb2FwLW9iamVjdC1zZWN1cml0 eQ0KDQpUaGlzIGlzIGEgbW9yZSBkZXRhaWxlZCBhbmFseXNpcyBvZiB0aGUgcHJvYmxlbSB0aGFu IGhhcyBwcmV2aW91c2x5IGJlZW4NCnByZXNlbnRlZCAoaW4gZS5nLiB0aGUgT1NDT0FQIGRyYWZ0 KS4NCg0KSXQgaXMgd29yayBpbiBwcm9ncmVzcywgd2UgcGxhbiB0byBoYXZlIGEgdmVyc2lvbiBy ZWFkeSBmb3IgbmV4dCBmMmYNCm1lZXRpbmcuIENvbW1lbnRzIGFyZSB3ZWxjb21lLCBwbGVhc2Ug c2VuZCBkaXJlY3RseSB0byBtZSBvciBhbnkgb2YgdGhlDQphdXRob3JzLiANCg0KDQoNCkfDtnJh bg0KDQoNCg== From nobody Wed Mar 2 04:58:09 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4DE991A039C for ; Wed, 2 Mar 2016 04:58:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.899 X-Spam-Level: X-Spam-Status: No, score=-3.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c58VbLyWgCny for ; Wed, 2 Mar 2016 04:58:06 -0800 (PST) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5C4721A02BE for ; Wed, 2 Mar 2016 04:58:05 -0800 (PST) X-AuditID: c1b4fb2d-f79836d000006396-c4-56d6e35aaf5e Received: from ESESSHC019.ericsson.se (Unknown_Domain [153.88.183.75]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id 5D.8D.25494.A53E6D65; Wed, 2 Mar 2016 13:58:02 +0100 (CET) Received: from ESESSMB303.ericsson.se ([169.254.3.52]) by ESESSHC019.ericsson.se ([153.88.183.75]) with mapi id 14.03.0248.002; Wed, 2 Mar 2016 13:57:12 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Samuel Erdtman , Hannes Tschofenig Thread-Topic: [Ace] Reminder: ACE virtual interim meeting Thread-Index: AQHRb74Yq+trzjxSIUSRgUf1ignVM58+muSAgAeLr4A= Date: Wed, 2 Mar 2016 12:57:11 +0000 Message-ID: References: <56CEE2B9.7070902@gmx.net> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.0.151221 x-originating-ip: [153.88.183.150] Content-Type: multipart/alternative; boundary="_000_D2FC9BA04EC5Dgoranselanderericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrAIsWRmVeSWpSXmKPExsUyM2K7t27U42thBvcP2Fh8/9bDbLF05z1W i/9LTzE5MHu8+LeH0WPxpv1sHkuW/GQKYI7isklJzcksSy3St0vgyvi2+RdbwWPfig8dK5ka GM94dzFyckgImEi8nHmaGcIWk7hwbz1bFyMXh5DAYUaJA8tfs0I4i4Cc1/tZQarYBFwkHjQ8 YgKxRQTCJd7taAOzmQUUJXbPOssOYgsLWEi8OHaUEaLGUqJ7z0oo20riVs9RFhCbRUBF4sTM 50D1HBy8QPWf54iAhIUEciWmv74ONoZTIFBiyfLnYOWMQMd9P7UGapW4xK0n85kgjhaQWLLn PNQDohIvH/9jBRkpKqAn0XWkAiKsJLFi+yVGiNZYiePr94GV8woISpyc+YRlAqPYLCRTZyEp m4WkbBbQVGYBTYn1u/RnQf07pfshO4StIdE6Zy6UbS3x9PAOZmQ1Cxg5VjGKFqcWF+emGxnr pRZlJhcX5+fp5aWWbGIExuvBLb91dzCufu14iFGAg1GJh/eD3LUwIdbEsuLK3EOMEhzMSiK8 RneAQrwpiZVVqUX58UWlOanFhxilOViUxHnZPl0OExJITyxJzU5NLUgtgskycXBKNTCWGD28 5fjOrJhzPWt93XvW9C0PrrKe6nDZ8Sh14uLdtz+Y3NBdeOZxosqL57tLZxukH58ZWXt6ypvY 214H/k46nv1h3+uTrhtePvv3NPBOYV+fZnf/dzutqasTGSzqV7guLCq5ka5VGO917/2GhafO rDDtFdi8qU0zVElXftVbneiN+0KjJ+67qcRSnJFoqMVcVJwIAC33uOjTAgAA Archived-At: Cc: "Ace@ietf.org" Subject: Re: [Ace] Reminder: ACE virtual interim meeting X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2016 12:58:08 -0000 --_000_D2FC9BA04EC5Dgoranselanderericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgU2FtdWVsLA0KDQpGcm9tOiBBY2UgPGFjZS1ib3VuY2VzQGlldGYub3JnPG1haWx0bzphY2Ut Ym91bmNlc0BpZXRmLm9yZz4+IG9uIGJlaGFsZiBvZiBTYW11ZWwgRXJkdG1hbiA8c2FtdWVsQGVy ZHRtYW4uc2U8bWFpbHRvOnNhbXVlbEBlcmR0bWFuLnNlPj4NCkRhdGU6IEZyaWRheSAyNiBGZWJy dWFyeSAyMDE2IGF0IDE5OjQzDQoNCg0KSSB0aGluayB0aGF0IGl0IHdvdWxkIGJlIGdvb2QgdG8g aGF2ZSB0aGUgYXBwbGljYXRpb24gbGF5ZXIgc2VjdXJpdHkgc29sdXRpb24gZGlzY3Vzc2lvbiBk dXJpbmcgdGhlIG1lZXRpbmcuIElNSE8gaXQgd291bGQgYmUgcHJlZmVyYWJsZSB0byBoYXZlIHRo ZSBhcHBsaWNhdGlvbiBsYXllciBzZWN1cml0eSBzb2x1dGlvbiB3cml0dGVuIHVuZGVyIEFDRSBz aW1pbGFybHkgdG8gdGhlIHNpZ25lZCBIVFRQIGJlaW5nIHVuZGVyIG9hdXRoLg0KDQoNCkkgdGhp bmsgeW91IGhhdmUgYSBwb2ludC4gQUNFIGJlaW5nIHNlY3VyaXR5IGFyZWEgaXMgYW5vdGhlciBy ZWFzb24gd2h5IGFuIGFwcGxpY2F0aW9uIGxheWVyIHNlY3VyaXR5IHNvbHV0aW9uIGNvdWxkIG1h a2Ugc2Vuc2UgdG8ga2VlcCBpbiBBQ0UuIE5vdCBhIGNsZWFyIGN1dCB0aG91Z2guDQoNCkfDtnJh bg0KDQoNCg0KLy9TYW11ZWwNCg0KT24gVGh1LCBGZWIgMjUsIDIwMTYgYXQgMTI6MTcgUE0sIEhh bm5lcyBUc2Nob2ZlbmlnIDxoYW5uZXMudHNjaG9mZW5pZ0BnbXgubmV0PG1haWx0bzpoYW5uZXMu dHNjaG9mZW5pZ0BnbXgubmV0Pj4gd3JvdGU6DQpIaSBhbGwsDQoNCkkganVzdCB3YW50ZWQgdG8g cmVtaW5kIHlvdSBhYm91dCB0aGUgdXBjb21pbmcgQUNFIGludGVyaW0gbWVldGluZywNCndoaWNo IGlzIGdvaW5nIHRvIHRha2UgcGxhY2UgbmV4dCB3ZWVrLCBXZWRuZXNkYXksIE1hcmNoIDJuZC4N Cg0KSGVyZSBpcyB0aGUgaW5mbzoNCmh0dHA6Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNoaXZlL3dl Yi9hY2UvY3VycmVudC9tc2cwMTYzNC5odG1sDQoNCktlcGVuZyBkaXN0cmlidXRlZCB0aGUgYWdl bmRhIGZvciB0aGUgbWVldGluZyBzb21lIHRpbWUgYWdvIGFscmVhZHk6DQpodHRwOi8vd3d3Lmll dGYub3JnL21haWwtYXJjaGl2ZS93ZWIvYWNlL2N1cnJlbnQvbXNnMDE2MzMuaHRtbA0KDQpXZSB3 aWxsIG9idmlvdXNseSB0YWxrIGFib3V0IG91ciB3b3JraW5nIGdyb3VwIGl0ZW1zOg0KICogQWN0 b3JzIGRyYWZ0DQogKiBBQ0UgT0F1dGggU29sdXRpb24gZHJhZnQNCg0KQWRkaXRpb25hbGx5LCB0 aGUgQ1dUIHdpbGwgYmUgcHJlc2VudGVkIHRvIHRoZSBncm91cC4gTW9zdCBsaWtlbHkgd2UNCndp bGwgaXNzdWUgYSBjYWxsIGZvciBhZG9wdGlvbiBvbiB0aGF0IGRvY3VtZW50Lg0KDQpJIHdvdWxk IGFsc28gbGlrZSB0byBsb29rIGF0IHRoZSBtaWxlc3RvbmVzIGFuZCBtYWtlIHBsYW5zIGZvciB0 aGUgbmV4dA0KZmV3IG1vbnRocy4gSSB3b3VsZCBhbHNvIGxpa2UgdG8gZmluZCBvdXQgYWdhaW4g d2hhdCB0aGUgYmVzdCBob21lIGZvcg0KYW4gYXBwbGljYXRpb24gbGF5ZXIgc2VjdXJpdHkgc29s dXRpb24gKG9uIHRvcCBvZiBDb0FQKSB3b3VsZCBiZS4gVGhlcmUNCndhcyBzb21lIGZlZWRiYWNr IG9uIHRoZSBsaXN0IHNheWluZyB0aGF0IENPUkUgd291bGQgYmUgYSBnb29kIHBsYWNlIGJ1dA0K b3ZlcmFsbCB0aGVyZSB3YXMgbm90IG11Y2ggZmVlZGJhY2suIEhlcmUgaXMgdGhlIGxpbmsgdG8g bXkgcXVlc3Rpb246DQpodHRwOi8vd3d3LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIvYWNlL2N1 cnJlbnQvbXNnMDE2MTUuaHRtbA0KDQpLZXBlbmcgaGFkIHBsYW5uZWQgYSAxLWhvdXIgbWVldGlu ZyBhbmQgSSBhbSB3b25kZXJpbmcgd2hldGhlciBpdCB3b3VsZA0KYmUgT0sgZm9yIHlvdSBpZiB3 ZSBydW4gYSBiaXQgb3ZlciB0aW1lLiBBcmUgdGhlcmUgcHJvYmxlbXMgd2l0aCBpdD8NCg0KQ2lh bw0KSGFubmVzICYgS2VwZW5nDQoNCg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXw0KQWNlIG1haWxpbmcgbGlzdA0KQWNlQGlldGYub3JnPG1haWx0bzpB Y2VAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2FjZQ0K DQoNCg== --_000_D2FC9BA04EC5Dgoranselanderericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <1BC0B7279CFB354A86984097E9A0FF77@ericsson.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1zaXplOiAx NHB4OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiPg0KPGRpdj5IaSBTYW11ZWws PC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPHNwYW4gaWQ9Ik9MS19TUkNfQk9EWV9TRUNUSU9O Ij4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmk7IGZvbnQtc2l6ZToxMXB0OyB0ZXh0 LWFsaWduOmxlZnQ7IGNvbG9yOmJsYWNrOyBCT1JERVItQk9UVE9NOiBtZWRpdW0gbm9uZTsgQk9S REVSLUxFRlQ6IG1lZGl1bSBub25lOyBQQURESU5HLUJPVFRPTTogMGluOyBQQURESU5HLUxFRlQ6 IDBpbjsgUEFERElORy1SSUdIVDogMGluOyBCT1JERVItVE9QOiAjYjVjNGRmIDFwdCBzb2xpZDsg Qk9SREVSLVJJR0hUOiBtZWRpdW0gbm9uZTsgUEFERElORy1UT1A6IDNwdCI+DQo8c3BhbiBzdHls ZT0iZm9udC13ZWlnaHQ6Ym9sZCI+RnJvbTogPC9zcGFuPkFjZSAmbHQ7PGEgaHJlZj0ibWFpbHRv OmFjZS1ib3VuY2VzQGlldGYub3JnIj5hY2UtYm91bmNlc0BpZXRmLm9yZzwvYT4mZ3Q7IG9uIGJl aGFsZiBvZiBTYW11ZWwgRXJkdG1hbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOnNhbXVlbEBlcmR0bWFu LnNlIj5zYW11ZWxAZXJkdG1hbi5zZTwvYT4mZ3Q7PGJyPg0KPHNwYW4gc3R5bGU9ImZvbnQtd2Vp Z2h0OmJvbGQiPkRhdGU6IDwvc3Bhbj5GcmlkYXkgMjYgRmVicnVhcnkgMjAxNiBhdCAxOTo0Mzxi cj4NCjxicj4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgaWQ9Ik1BQ19PVVRMT09LX0FUVFJJQlVUSU9O X0JMT0NLUVVPVEUiIHN0eWxlPSJCT1JERVItTEVGVDogI2I1YzRkZiA1IHNvbGlkOyBQQURESU5H OjAgMCAwIDU7IE1BUkdJTjowIDAgMCA1OyI+DQo8ZGl2Pg0KPGRpdj4NCjxkaXYgZGlyPSJsdHIi Pg0KPGRpdj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjhweCI+PGJyPg0KPC9zcGFuPjwvZGl2 Pg0KPGRpdj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjhweCI+SSB0aGluayB0aGF0IGl0IHdv dWxkIGJlIGdvb2QgdG8gaGF2ZSB0aGUmbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMi44cHgiPmFwcGxpY2F0aW9uIGxheWVyIHNlY3VyaXR5IHNvbHV0aW9uPC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTIuOHB4Ij4mbmJzcDtkaXNjdXNzaW9uIGR1cmluZyB0aGUgbWVl dGluZy4gSU1ITyBpdCB3b3VsZCBiZSBwcmVmZXJhYmxlIHRvIGhhdmUNCiB0aGUmbmJzcDs8L3Nw YW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi44cHgiPmFwcGxpY2F0aW9uIGxheWVyIHNlY3Vy aXR5IHNvbHV0aW9uPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuOHB4Ij4mbmJzcDt3 cml0dGVuIHVuZGVyIEFDRSBzaW1pbGFybHkgdG8gdGhlIHNpZ25lZCBIVFRQIGJlaW5nIHVuZGVy IG9hdXRoLjwvc3Bhbj48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90 ZT4NCjwvc3Bhbj48c3BhbiBpZD0iT0xLX1NSQ19CT0RZX1NFQ1RJT04iPg0KPGJsb2NrcXVvdGUg aWQ9Ik1BQ19PVVRMT09LX0FUVFJJQlVUSU9OX0JMT0NLUVVPVEUiIHN0eWxlPSJCT1JERVItTEVG VDogI2I1YzRkZiA1IHNvbGlkOyBQQURESU5HOjAgMCAwIDU7IE1BUkdJTjowIDAgMCA1OyI+DQo8 ZGl2Pg0KPGRpdj4NCjxkaXYgZGlyPSJsdHIiPg0KPGRpdj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEyLjhweCI+PGJyPg0KPC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9i bG9ja3F1b3RlPg0KPC9zcGFuPg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+SSB0aGluayB5b3Ug aGF2ZSBhIHBvaW50LiBBQ0UgYmVpbmcgc2VjdXJpdHkgYXJlYSBpcyBhbm90aGVyIHJlYXNvbiB3 aHkgYW4gYXBwbGljYXRpb24gbGF5ZXIgc2VjdXJpdHkgc29sdXRpb24gY291bGQgbWFrZSBzZW5z ZSB0byBrZWVwIGluIEFDRS4gTm90IGEgY2xlYXIgY3V0IHRob3VnaC48L2Rpdj4NCjxkaXY+PGJy Pg0KPC9kaXY+DQo8ZGl2PkfDtnJhbjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+PGJy Pg0KPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPHNwYW4gaWQ9Ik9MS19TUkNfQk9EWV9TRUNU SU9OIj4NCjxibG9ja3F1b3RlIGlkPSJNQUNfT1VUTE9PS19BVFRSSUJVVElPTl9CTE9DS1FVT1RF IiBzdHlsZT0iQk9SREVSLUxFRlQ6ICNiNWM0ZGYgNSBzb2xpZDsgUEFERElORzowIDAgMCA1OyBN QVJHSU46MCAwIDAgNTsiPg0KPGRpdj4NCjxkaXY+DQo8ZGl2IGRpcj0ibHRyIj4NCjxkaXY+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMi44cHgiPi8vU2FtdWVsPC9zcGFuPjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2IGNsYXNzPSJnbWFpbF9leHRyYSI+PGJyPg0KPGRpdiBjbGFzcz0iZ21haWxfcXVvdGUi Pk9uIFRodSwgRmViIDI1LCAyMDE2IGF0IDEyOjE3IFBNLCBIYW5uZXMgVHNjaG9mZW5pZyA8c3Bh biBkaXI9Imx0ciI+DQombHQ7PGEgaHJlZj0ibWFpbHRvOmhhbm5lcy50c2Nob2ZlbmlnQGdteC5u ZXQiIHRhcmdldD0iX2JsYW5rIj5oYW5uZXMudHNjaG9mZW5pZ0BnbXgubmV0PC9hPiZndDs8L3Nw YW4+IHdyb3RlOjxicj4NCjxibG9ja3F1b3RlIGNsYXNzPSJnbWFpbF9xdW90ZSIgc3R5bGU9Im1h cmdpbjowIDAgMCAuOGV4O2JvcmRlci1sZWZ0OjFweCAjY2NjIHNvbGlkO3BhZGRpbmctbGVmdDox ZXgiPg0KSGkgYWxsLDxicj4NCjxicj4NCkkganVzdCB3YW50ZWQgdG8gcmVtaW5kIHlvdSBhYm91 dCB0aGUgdXBjb21pbmcgQUNFIGludGVyaW0gbWVldGluZyw8YnI+DQp3aGljaCBpcyBnb2luZyB0 byB0YWtlIHBsYWNlIG5leHQgd2VlaywgV2VkbmVzZGF5LCBNYXJjaCAybmQuPGJyPg0KPGJyPg0K SGVyZSBpcyB0aGUgaW5mbzo8YnI+DQo8YSBocmVmPSJodHRwOi8vd3d3LmlldGYub3JnL21haWwt YXJjaGl2ZS93ZWIvYWNlL2N1cnJlbnQvbXNnMDE2MzQuaHRtbCIgcmVsPSJub3JlZmVycmVyIiB0 YXJnZXQ9Il9ibGFuayI+aHR0cDovL3d3dy5pZXRmLm9yZy9tYWlsLWFyY2hpdmUvd2ViL2FjZS9j dXJyZW50L21zZzAxNjM0Lmh0bWw8L2E+PGJyPg0KPGJyPg0KS2VwZW5nIGRpc3RyaWJ1dGVkIHRo ZSBhZ2VuZGEgZm9yIHRoZSBtZWV0aW5nIHNvbWUgdGltZSBhZ28gYWxyZWFkeTo8YnI+DQo8YSBo cmVmPSJodHRwOi8vd3d3LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIvYWNlL2N1cnJlbnQvbXNn MDE2MzMuaHRtbCIgcmVsPSJub3JlZmVycmVyIiB0YXJnZXQ9Il9ibGFuayI+aHR0cDovL3d3dy5p ZXRmLm9yZy9tYWlsLWFyY2hpdmUvd2ViL2FjZS9jdXJyZW50L21zZzAxNjMzLmh0bWw8L2E+PGJy Pg0KPGJyPg0KV2Ugd2lsbCBvYnZpb3VzbHkgdGFsayBhYm91dCBvdXIgd29ya2luZyBncm91cCBp dGVtczo8YnI+DQombmJzcDsqIEFjdG9ycyBkcmFmdDxicj4NCiZuYnNwOyogQUNFIE9BdXRoIFNv bHV0aW9uIGRyYWZ0PGJyPg0KPGJyPg0KQWRkaXRpb25hbGx5LCB0aGUgQ1dUIHdpbGwgYmUgcHJl c2VudGVkIHRvIHRoZSBncm91cC4gTW9zdCBsaWtlbHkgd2U8YnI+DQp3aWxsIGlzc3VlIGEgY2Fs bCBmb3IgYWRvcHRpb24gb24gdGhhdCBkb2N1bWVudC48YnI+DQo8YnI+DQpJIHdvdWxkIGFsc28g bGlrZSB0byBsb29rIGF0IHRoZSBtaWxlc3RvbmVzIGFuZCBtYWtlIHBsYW5zIGZvciB0aGUgbmV4 dDxicj4NCmZldyBtb250aHMuIEkgd291bGQgYWxzbyBsaWtlIHRvIGZpbmQgb3V0IGFnYWluIHdo YXQgdGhlIGJlc3QgaG9tZSBmb3I8YnI+DQphbiBhcHBsaWNhdGlvbiBsYXllciBzZWN1cml0eSBz b2x1dGlvbiAob24gdG9wIG9mIENvQVApIHdvdWxkIGJlLiBUaGVyZTxicj4NCndhcyBzb21lIGZl ZWRiYWNrIG9uIHRoZSBsaXN0IHNheWluZyB0aGF0IENPUkUgd291bGQgYmUgYSBnb29kIHBsYWNl IGJ1dDxicj4NCm92ZXJhbGwgdGhlcmUgd2FzIG5vdCBtdWNoIGZlZWRiYWNrLiBIZXJlIGlzIHRo ZSBsaW5rIHRvIG15IHF1ZXN0aW9uOjxicj4NCjxhIGhyZWY9Imh0dHA6Ly93d3cuaWV0Zi5vcmcv bWFpbC1hcmNoaXZlL3dlYi9hY2UvY3VycmVudC9tc2cwMTYxNS5odG1sIiByZWw9Im5vcmVmZXJy ZXIiIHRhcmdldD0iX2JsYW5rIj5odHRwOi8vd3d3LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIv YWNlL2N1cnJlbnQvbXNnMDE2MTUuaHRtbDwvYT48YnI+DQo8YnI+DQpLZXBlbmcgaGFkIHBsYW5u ZWQgYSAxLWhvdXIgbWVldGluZyBhbmQgSSBhbSB3b25kZXJpbmcgd2hldGhlciBpdCB3b3VsZDxi cj4NCmJlIE9LIGZvciB5b3UgaWYgd2UgcnVuIGEgYml0IG92ZXIgdGltZS4gQXJlIHRoZXJlIHBy b2JsZW1zIHdpdGggaXQ/PGJyPg0KPGJyPg0KQ2lhbzxicj4NCkhhbm5lcyAmYW1wOyBLZXBlbmc8 YnI+DQo8YnI+DQo8YnI+DQo8YnI+DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXzxicj4NCkFjZSBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86 QWNlQGlldGYub3JnIj5BY2VAaWV0Zi5vcmc8L2E+PGJyPg0KPGEgaHJlZj0iaHR0cHM6Ly93d3cu aWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9hY2UiIHJlbD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJf YmxhbmsiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vYWNlPC9hPjxicj4N Cjxicj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGJyPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9ibG9ja3F1b3RlPg0KPC9zcGFuPg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_D2FC9BA04EC5Dgoranselanderericssoncom_-- From nobody Wed Mar 2 09:05:23 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 32ED31B2C9A for ; Wed, 2 Mar 2016 09:05:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.606 X-Spam-Level: X-Spam-Status: No, score=-2.606 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.006, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0YnKEFsywEyR for ; Wed, 2 Mar 2016 09:05:20 -0800 (PST) Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 87BF21B2C99 for ; Wed, 2 Mar 2016 09:05:19 -0800 (PST) Received: from [192.168.10.131] ([80.92.123.193]) by mail.gmx.com (mrgmx002) with ESMTPSA (Nemesis) id 0MPDeK-1aWkMn2X6e-004Ouv for ; Wed, 02 Mar 2016 18:05:17 +0100 To: "Ace@ietf.org" From: Hannes Tschofenig Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9 Message-ID: <56D71D4C.2040807@gmx.net> Date: Wed, 2 Mar 2016 18:05:16 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="dJodPmku7unE0OmQIMSUgmAA8TPNnDoR3" X-Provags-ID: V03:K0:09/4vbOR/TpEC6s99hJktt2JsJNKv6JtPcFAQl52fX+2v1pvCr6 0qAcgIqIm5sRJx3hTK6o/J5X28l6fcCrYKEq/x+K6VdTTvmXQPinxBq/yl5UBjf7zc1cPF9 somwbHAt+KDZkixpOQhG14yu8v8pigBNv/beaIwgrjsa+hmQab5Sld68wN6ffB/lViM1Ve/ SPpV/rEXsLhJaFGeyieSA== X-UI-Out-Filterresults: notjunk:1;V01:K0:A8UJBuLdZkc=:59HRepGY7zejO1YCwxyQX5 jDBNi9pXUZ/I6r0Eow5YHwB/fOYHsM6lPY2PZdhgd/BVhVVRuePORGVow5gQN3rMLwlc3asTi ceWef118Y3cp2ch084MaJcuAHTDYmR3UFiVbk3bEL23cNtgyGRy/aL242DJNbvCPL0Pfv7udz KB7H5s/UTLykdzMuqBrJ/qsQwukbatQ9XxS+MbET/C3dicxbnNisJmKmew/5aJj3AfhBfpiy2 96cPYADz8Augg3o46i39fywf/U4ef7VjuhRsaFv/ztZyJj3/ttIqHy8ukE+rUO+clkJh8i5qq t7UeJKEjyQ+/os8riBI5ickD97O46gm/zwUsJ9u7CRYoNYKHDoPzxrVWyfvhvXnSlY07bR70x 5325uNXcn7p0eSreDb58KTI5DgOQXmWoJBgVtXfNaJyfS8TKE6028W3XjHYTPzied+o0hONEv LFkp1XivNyci+FhC2+KkFEO9yXdhRBqWQNj63/XMMVpLkHJRFG8EHUT310o8YKKtnkJ6vq2BV dRl+c0WiZQo4DwzKJ1cys/1J7RzP68O24x8j9AY0Xs2sp6gsUGfm+ZBxyRJP5VYwP3X5Y2S7H wJstBNH58JePCL+IXeEySdvYSYmn/UUoLgjs8mc3x+zzMXdYyuUEgrH0enoj1liS0o6X/yCkP LPG0NJPuOGTc+DT6oqFu+iopDiTGL4q5etr1r3AG0dDMQFpeyQe4BQMwEoJBX9fisiKo9OnNd V9FOM75atkmSxVZwmJ780vDlS/m85PtC40An0dsQcPf+7zUAeNH75KJ79jU= Archived-At: Subject: [Ace] Virtual Interim Meeting Minutes -- March 2nd 2016 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2016 17:05:21 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --dJodPmku7unE0OmQIMSUgmAA8TPNnDoR3 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Thanks for attending the virtual interim meeting today. Here are the meeting minutes: https://www.ietf.org/proceedings/interim/2016/03/02/ace/minutes/minutes-i= nterim-2016-ace-1 The notes are a bit sparse; please drop a note if we had forgotten an important comment. I will distribute separate mails regarding the discussed issues to solicit your input. Ciao Hannes --dJodPmku7unE0OmQIMSUgmAA8TPNnDoR3 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJW1x1MAAoJEGhJURNOOiAtARoH/25OxdIkfa2mTQgUM56lvaSP 3US9CiZyTq1VVqaN0moykkF8/FEMlPSKkIW3nxh4wKK6NTveJ1cgJQYyfT1NpSIx rI/TPwz7JsGcDrYkU+6OnXdUfbMxBhOtFW0gB5qEJC18e/97hb73c6d+FQwpBs6M Ed45m73M4CHp6KPDmfe7Oy4EeAgSDMHHU0Sto8J258xLp8o+ZoCvhyTq+HkY1za3 o6o548q/hhWRvDPgStE08ya95yoksrcBlR5WR+tpMQplGpq7W/oLOidU26DNuydD P7kTdX/on5HOQAjQ7B9Pk/O+lAl8ttXQxzOwOULwF4Vzy+FvUPYQfSmqUN4bQeo= =Pmso -----END PGP SIGNATURE----- --dJodPmku7unE0OmQIMSUgmAA8TPNnDoR3-- From nobody Wed Mar 2 09:13:01 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 161B01B2CA7 for ; Wed, 2 Mar 2016 09:13:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.606 X-Spam-Level: X-Spam-Status: No, score=-2.606 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.006, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dew6B78F8Yo5 for ; Wed, 2 Mar 2016 09:12:58 -0800 (PST) Received: from mout.gmx.net (mout.gmx.net [212.227.15.15]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 58F261B2C9B for ; Wed, 2 Mar 2016 09:12:58 -0800 (PST) Received: from [192.168.10.131] ([80.92.123.193]) by mail.gmx.com (mrgmx003) with ESMTPSA (Nemesis) id 0MQhyf-1aTHSs3iSD-00U6Mz for ; Wed, 02 Mar 2016 18:12:56 +0100 To: "Ace@ietf.org" From: Hannes Tschofenig Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9 X-Enigmail-Draft-Status: N1110 Message-ID: <56D71F16.7080303@gmx.net> Date: Wed, 2 Mar 2016 18:12:54 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="QjJcNOK35WJLHkdOcHuTvAvHmm1l62WLI" X-Provags-ID: V03:K0:qKWakgYtwkzzsXoZvvgUsjlBX0PA6EnGe4JREgv8P8xCtUf63I2 IeBMw5ZR1M5yXqREtlhEWgut4isoqU1K9fN44KMtMipNmOw1fbIBCdv1BUwqZSeUYVjib1E I1Bd8gI3kvTL5OAoyj4W+RDUXNN/d47/HdInQ3MaoIkiX/4tCBob0JiYY/cYrFkai3RRpaf AKn33+i79ohCrM7K0QEHg== X-UI-Out-Filterresults: notjunk:1;V01:K0:7MG8EB9sZhA=:5uyzyM3wuhEPnhkxS9V2x6 BiLKEe80xyBMCGhUnhBcpAm/P5/ufPrWuETA7eyeblHxdrPn6LcWN3yqa/Df2cxuJ3K9WytvO VTgiHjZqC8X8nHFWIs8L8Z7PkTU8ECj0tM/8goCsZPZBpiW5DktHDNWkPC5LtnzWSIcan0k26 fhb2bNY4XKhF4YI6HPWAgZixlFutPRvwSjPNbX77YXmRjBbmK0T+5IBtCcLHy+qyJbrsbdmZx lS03sHAsYlGov8eLXwMcjLZCwK7NrOWnQjPVjUXYLRWn3qvh8xsvq7z6e7083iCbNwu8+5msd gsWotZZDuMEszSSoALH1NCiWeAvSymJfXu9arx5cKqINTReBb1SA29zFaqOvomwA1JgWTzYTH AhTBsxQJDxGcogDTKusQxvDq7wfMGxluSPEIvD9ODKSMzybaGaP6xk/uV5PBoIbJVPS+SwKnP 2yZUucOtmHqwIJZx9+a9MGkmW1q6TcLM8CJBPLyRzyOQcN1U3aI6ILId8DvrVkbH181Aqhfc7 Ch65fB3XGA8M/Wrur/4v27GFio3zImB7qv15mRNT5fvNTCqa3xXvSERj1VYdOnETyI6A1XO8t Qzt03XApLienA0IHZvF3KIhswwCZr5OiGaxIyiwmyNjoxJUhnu9VB/lHm1MtZYylovo3QpByR qq8KfbX0Y7Mrj97xWyWe2AD1/+Ys5xDg77La8Ot8PzMKYD34brhkR5UXnyb0vafpELt6MYHsj 3RVqWn2QdFSU3cnbYuqmQUHTff0ZjSxXKk5Ta6Dmz6C+cwtp7QH1SoWA3VU= Archived-At: Subject: [Ace] Milestones X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2016 17:13:00 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --QjJcNOK35WJLHkdOcHuTvAvHmm1l62WLI Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi all, we have two milestones in our charter and we would like to get your feedback about the expected steps to finish those items and whether the indicated dates are realistic. ** Mar 2016 Submit "An Architecture for Authorization in Constrained Environments" to the IESG for publication as a Informational RFC. --> Carsten said that we need feedback from the reviewers who volunteered at the Yokohama IETF meeting. Sandeep and Robert said that they will do their best to review the document in time before the deadline. I will drop a mail to Robin Wilton, who also volunteered. I dropped him a reminder already. Additionally, Michael volunteered. I would say that we might need to adjust the milestone to April. ** May 2016 Submit "Authentication and Authorization Solution" specification to the IESG for publication as a Proposed Standard. --> Here the question is what we expect to have completed by May. Here are possible options: * Specification completed. * Reference implementation available. * Interoperability testing done. * Formal verification of the security parts. Also, the amount of specification work depends a bit on your feedback on the items we are going to ask feedback for. It would be good to know whether you have an opinion about these issues. Ciao Hannes & Kepeng --QjJcNOK35WJLHkdOcHuTvAvHmm1l62WLI Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJW1x8WAAoJEGhJURNOOiAtVhgIAKcIClKbGELwkr3CMwI6GHN+ zqVM1/hRaSmnhGCCcwNzXn5woFegVGbCMJwYn/ohPBQ6HlQsxG24QczOqldidKUL bIZZ+cCjwhe9YDsXg6kEZurWmAFiczwGIo7XmzGGLO6ivh7PPwGYiwYYABBlkD70 KfDtsAcbSaHGYVt6tliU/Ovz4QzDb6kLCdsAWAq8SEjIw1gg4Tdw2RBuDnvQJwAV QP6y861NJ0kaVfiZA6WlLvNTLUVkqmk7WDSDQhjVN0Lv/bM/kk3VZdaKfSxhM17g C9wHkC2aHov+xqnoH3ZpCYzmB3j17KjQOtEtHZCHvlPR1tA441Z0BgniU6L45Rs= =CzGi -----END PGP SIGNATURE----- --QjJcNOK35WJLHkdOcHuTvAvHmm1l62WLI-- From nobody Wed Mar 2 09:17:40 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8AE561B2CC2 for ; Wed, 2 Mar 2016 09:17:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.606 X-Spam-Level: X-Spam-Status: No, score=-2.606 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.006, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hrBvdKI0kF6k for ; Wed, 2 Mar 2016 09:17:38 -0800 (PST) Received: from mout.gmx.net (mout.gmx.net [212.227.17.22]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 956781B2CA4 for ; Wed, 2 Mar 2016 09:17:37 -0800 (PST) Received: from [192.168.10.131] ([80.92.123.193]) by mail.gmx.com (mrgmx103) with ESMTPSA (Nemesis) id 0MV6PJ-1aOrH02umD-00YU3G for ; Wed, 02 Mar 2016 18:17:35 +0100 References: <56C6EAAA.50009@gmx.net> To: "Ace@ietf.org" From: Hannes Tschofenig Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9 X-Forwarded-Message-Id: <56C6EAAA.50009@gmx.net> Message-ID: <56D7202E.2090407@gmx.net> Date: Wed, 2 Mar 2016 18:17:34 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <56C6EAAA.50009@gmx.net> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="BEIIoVmae6jwCj49NfnN60j0WMglU8Sp8" X-Provags-ID: V03:K0:N6AGwE/zpbgpownlqVqtxjWMPtTThLMEnO1IDte/7PYVzAUtTfk EjzVhzQ9436vE3u5hnFNr5y/iDJgDa1f0I/3FhImt/fiTKn0YznivE41mNyu5nJ1kTFCKme zTrqPDVZPyqGO1XCc/1hrPE5VCOLJG2jztVHO1TzwAkuHe/LbrahNkBx9mzzlZi+pVG8Sen Kfztpkk4AykyhvEkxE4DQ== X-UI-Out-Filterresults: notjunk:1;V01:K0:87rRzpjUs2M=:RQA5326QMtXg9gWXje8eNx /gOMua+Ya6aXR+gXA+iULAIFeF+iV6LadldwxydlmPGegSX8jh8a2jMUOWaaLhDeGVF3iBui1 wL/goDDigpzy5cQHFC1qD+TZcppDglKIDfLhYatgvSsGPpW1/JuF+M2Ilp3MBUh8hTeKJPmLH ftBGhDBC7Pm1FHpuiO3f3uNR6D2++Fzexq4Wmx7/x1ykKhDf7QmV7li88HQME9SLs5JaCZV1U OEiQcFINn5r6GxUXqwxbUy33boQDT/YBQj5XL7YGms/RlgtdIn8qZNH/nTMWpIcHNr4I6NcZw Pz2Ii2P0aDIX0tNyjgpGTLmcZV5pEeS6Abp5n2gk5qmYNz6yFgH8ORdr6IZSYNKqzS7UAxIOu brH7WjkBHbV9X+OeEaMpN19qj0llJHnG6zIr5VDI22PCjujiERoAs51DjthRWZ49UFZNMVeSu 1ErecgkeAuPKStpCMR6Y9y0+h626gWeOBIaP13g+R9DCV2pv5ZJbhdg2zIik5Gas7RF/B7JUR Xlt63XaPr4rKlNjkDBIYCj3IK1sjVplCtfRIGmpA8RUs3jhMR7GI38tKD9J7kujkZTG/B704U 5m06LgrrEo3HITfbqH/CQmUiJquP91j5BlU1uR0EYimgofp5YJj0Wr9cpjwNB45D2fIu4q7Ql vdMoljP87B50lLlncJomPPKAg3i1Gb61hy0MeaeAIHH2qOAQ7StMsZNdP97u/lRQoQlyaDMbw AxDSGUpNnm+3EQNimOim1pT7fleMwI+DWvE+W4662T21a149fGFK34jb5xk= Archived-At: Subject: [Ace] Fwd: OAuth Security Workshop -- July 14th and 15th 2016 in Trier/Germany X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2016 17:17:39 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --BEIIoVmae6jwCj49NfnN60j0WMglU8Sp8 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Hi all, during the ACE virtual interim meeting today I mentioned this workshop. You may want to consider submitting a paper to this workshop since the IETF ACE work is also within the scope. Your input is highly appreciated! Ciao Hannes -------- Forwarded Message -------- Subject: [OAUTH-WG] OAuth Security Workshop -- July 14th and 15th 2016 in Trier/Germany Date: Fri, 19 Feb 2016 11:12:58 +0100 From: Hannes Tschofenig To: oauth@ietf.org Hi all, early this year we announced our plans to organize an OAuth security workshop. In the meanwhile we have made progress in the planning activities and we are happy to announce that the workshop will take place July 14th and 15th 2016 in Trier/Germany. The date fits nicely with the IETF meeting in Berlin and our host, the Chair for Information Security and Cryptography at the University of Trier, may be familiar to some of you in context of the formal security analysis of OAuth also published earlier this year. More information can be found here: https://infsec.uni-trier.de/events/osw2016 With this workshop we particularly encourage researchers and other security experts to analyse OAuth and OAuth extensions and to report their findings at this workshop. Please note the position paper deadline, which is May 21st. We are looking forward to your contributions and to the discussions at the workshop! Feel free to contact us if there are questions. Ciao Hannes & Derek --BEIIoVmae6jwCj49NfnN60j0WMglU8Sp8 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJW1yAuAAoJEGhJURNOOiAt3jQH/A2HZWAXXAQdyOg3sqUeHv+L uzkrhLAcVIFPyTZ9t2YZo3t1WVs87rCf+ZASOqL447+XDPqMZ7ZbCupENomh6vxd cRliJaFO8gF5IRsoytR+CRQkQnJJYOi+jMMJu3Z4SRokqc/68/RsAlEuDQh4DPT8 Vk8KYTKCY4dGgCfPzIdu1ck+o0VdbfoxxuWJwj9zxSw/NdMCS9phVs/+14rYfBjZ zvqbpAkLHKB0UGwPuffKGDqrojYUc5pSbDmfzz0tvBLgu9aQk9WDVQNNA+2SRI/d d3jVAmD7ARD/afrweqABYD/lgDXVHGnB7j+IPmB7CyZI//fCn1PEydLxdS/yODQ= =SxED -----END PGP SIGNATURE----- --BEIIoVmae6jwCj49NfnN60j0WMglU8Sp8-- From nobody Wed Mar 2 09:33:12 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C2B321B2ED5 for ; Wed, 2 Mar 2016 09:33:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.606 X-Spam-Level: X-Spam-Status: No, score=-2.606 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.006, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JMm08TEsosc8 for ; Wed, 2 Mar 2016 09:33:09 -0800 (PST) Received: from mout.gmx.net (mout.gmx.net [212.227.17.20]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BB1471B2ED1 for ; Wed, 2 Mar 2016 09:33:08 -0800 (PST) Received: from [192.168.10.131] ([80.92.123.193]) by mail.gmx.com (mrgmx103) with ESMTPSA (Nemesis) id 0MGRhs-1afYMk2XBI-00DEra for ; Wed, 02 Mar 2016 18:33:06 +0100 To: "Ace@ietf.org" From: Hannes Tschofenig Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9 X-Enigmail-Draft-Status: N1110 Message-ID: <56D723D1.3090204@gmx.net> Date: Wed, 2 Mar 2016 18:33:05 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="jUoMUHuU5ABauriKgECnpP52f1K0fGQR9" X-Provags-ID: V03:K0:exMJowmK7/CKKu+Daug9SiQp1Ck8Oii46sAL1BREN7lhxI0hYNl KKTBquAa4oingCSakbxbCsqU3Kh3CsWGjUJ+p1YLpg2GtN2JO1Cwu2eoGOxKiMjo0oeE590 Pn4CkIf2LFSayWECWe0u02HFkBpy1eF1yGQkX/UUQ32G/DZAOV3425RNyKuCU+wM9uEiZ5g zOXat9mNg6JpyUmkChEbg== X-UI-Out-Filterresults: notjunk:1;V01:K0:Mg6sJ0OnO7g=:zHQPTGytK/FasV387D4Bjj jByA0XkcH2AisDFLavzuXHEC7D2SMKwTFROixXvIHrQ7KCYjq3qBeVV8DUXmhU5sMmVTQWFG/ N4PGY66utuj/IvRtIpv8PWIhxiNqjvh193A+92TRG+ZRGBoSjin4CgphfJJPzH3aETd5YGIxW 5jTsNfJGPcSHdBb9f1fzCs8LINpMcEfzjYlEh0QPU9vygZDwaGUCbmI87U3DenoTCMCISC7Q+ IwTqXOpTzG/i1x46mds2xvrXK8YUbdnutxMARBldWDeoKmFPJACHEACudmv/K/7dIMHf5cKXX +llq62mf1+MWOSMtr3uIsP5mVHkoZm9CXfmkEk34aP1qvFRm+4MHRe7NPDXlaGq7QQVDL/M+m Byti3IljgiYQwcJaa8QV0MtN+f2IbjhHCrMKxpUa42SbylQXsMh/Li1hqYDRW+EXFcwoshYdn P3/0clM3kfGGlKfG56RX03ewgtUBQGzsQggOdq0y/r4j+GGT5vgMMRdFaKgagoBNWFWjgGPah Jd8c+IU7HOMRjC6RJomAfE/zIanb8lgfDNxDkkWESyy8axfJVxOpU9uFgr8PMbGeYVFjnSqkW BogShcsMP1/7qM/M2e1qh/8ku0xpbYefP8x1UOudvJaw/oJ/nQNu/kBMOTy/ANeeJECSiLWEf 0GYNkOD8H0/3UA784QoAxOuQbOIHS4wYY48RWmI86lLH/LryFxuIMFzPYiU0hdG2yeoEMNn7L O7cvOVQN6TBc+72/PmPfWh3HiylKjHeUKCNEj8NtIBDkUmj6DxMflWo83IQ= Archived-At: Subject: [Ace] CBOR and/or JSON X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2016 17:33:10 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --jUoMUHuU5ABauriKgECnpP52f1K0fGQR9 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi all, specifying the ACE OAuth solution the following design question turned up: Should both CBOR and JSON be supported in the WG document? Or only one of them? What should be described in the WG document: * Alternative 1: CBOR and JSON * Alternative 2: CBOR only * Alternative 3: JSON only Additionally, there is the question about HTTP and CoAP support. Should the WG document only describe * Option 1: Use of CoAP, * Option 2: Use of HTTP, * Option 3: Use of HTTP & CoAP Here are the slides from the ACE virtual interim meeting providing further background information: https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-int= erim-2016-ace-1-3.pdf Deadline: 16th March 2016 Ciao Hannes & Kepeng --jUoMUHuU5ABauriKgECnpP52f1K0fGQR9 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJW1yPRAAoJEGhJURNOOiAt72UH/2Q0DIMfehV00JvfId2fMF81 CVUKBnDmermFvM3uClAlwjcjTfiQEqrrjGViFLBWANpx3vbkCdUQ+sYcTiZIsLic EEqqT7h66QKzb795Jo0jMECGVvjUIb1KXDrJrZEpJl5Guv0unhNjkL39C+GdpkXo 7niQR9W+HxTPrUE8FbupIMrfe1IWxRi0z0q4KGfn+X5596PCJJg2sGiXLdWez7uK Gzcq1pTE3tq6GgbwjP2JGHSEmxYDQS1n/VWw+jmcNmrfvwBxAcIkrM9qgmojMm/m c/2SdqfHi1jEMJp/xJLWhJ3MDzLRc1MLytrpstLf+uEhjq4ZY5qFv70AR+b23Jo= =LjH/ -----END PGP SIGNATURE----- --jUoMUHuU5ABauriKgECnpP52f1K0fGQR9-- From nobody Wed Mar 2 09:38:28 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8419D1B2DED for ; Wed, 2 Mar 2016 09:38:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.606 X-Spam-Level: X-Spam-Status: No, score=-2.606 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.006, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DGqgxkMt3b9q for ; Wed, 2 Mar 2016 09:38:25 -0800 (PST) Received: from mout.gmx.net (mout.gmx.net [212.227.17.20]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5F3941B2F03 for ; Wed, 2 Mar 2016 09:38:25 -0800 (PST) Received: from [192.168.10.131] ([80.92.123.193]) by mail.gmx.com (mrgmx102) with ESMTPSA (Nemesis) id 0MHrk1-1ac04Q28zt-003bGk for ; Wed, 02 Mar 2016 18:38:23 +0100 To: "Ace@ietf.org" From: Hannes Tschofenig Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9 X-Enigmail-Draft-Status: N1110 Message-ID: <56D7250E.6020300@gmx.net> Date: Wed, 2 Mar 2016 18:38:22 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="l2m47hVwQDEtbspC5oSi66nJTda4cu4tp" X-Provags-ID: V03:K0:6Clj9GV3jggma3MgkLIGHT3uFNN2UsHYg7TjYG0cOm2VIhhQPH6 Q0yYVbdUdlED64yst415IJHIw5cPnjfRj+hgkK6TbnDmfXwY9Nxhr9I2DMz0n1cQCqpe+Wh mlotFIL+HGH2ls5kTGDMCj29tQPfXfawG7AL1DxprYmVhMtDqongCzfDBIJ7s5l69ouej/2 Bg7BTsIzMWDyyjWYfz54g== X-UI-Out-Filterresults: notjunk:1;V01:K0:wCoWuxeSN0U=:anCDlF0Ek9CW2yM0PezlVt LgwG8drE5rFopEw7FO188k5OnQFwB5X0oPyrK3IJI6TLtCVE8WfxJ/1p6GbiK5UBRfvRrG6Sj nKjmEFFqyVc4aEMKLsniKiGD+1br5JdUbmcgTEFHo4sMHRjHBibiNPSqycJzxl+EHImwlCBAi Ktk9ft/COJ0b735aRRH+Jobsukn5HlGUKUpFGb5jRQ5rG9sXVfW90lTjkEV9NOSas76mfjhbm YNNoYYWL3urfbRRQ/ocEnrylN3bdqX2AfqEsTzMmEz1by7pyPHasNqDDytIqTtMp1yPsGflsR n6SmyJr9hw36BhdKe1l/IifZNDzLgKa9spgzqrsYKu8X2oVqCjvkXVkA3yF6G+3yvFgpR7suk X5nI59PCq7PhfDrIVRuh6vKmJtL5qpJv3vez6rYqFkpW9FAsav5Dr5IxNqIu3B8jv8hgXWELn qnRRYoufhXIYYscpyejK9obGpP4X1zz+PfOwOX/lzauKhvPk0kc9ODdKlBQDhgCd5ztRrJiGe xuO+Mcg4sTy6co8jPLjUV//V3OFLW9v59oqvGF+T2AlkX/kD+byyDcVJUVSyO1Sc5deLSEJrL zHsRKFvECikb/pYACwvCvMBgKld9xHxb+G8ll9eGKOFDXj9Zn+IMFN6Jst7Gd2aY0wiQd+hYA t5lU1qXQXSViJNuCggvcNfrPDKtP+u6emNt0GooXPsRNhHQpE2DDyhXdj5aex+PpbxWmEG6uA NpUEN2wVoiKfHazTYRja5Z3J4EAY/03i+pz0OdUj2kO/c8XdbxIgNP/U/jc= Archived-At: Subject: [Ace] Deployment Options X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2016 17:38:27 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --l2m47hVwQDEtbspC5oSi66nJTda4cu4tp Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi all, describes 6 deployment options in Section 6: 6. Deployment Scenarios . . . . . . . . . . . . . . . . . . . . 18 6.1. Client and Resource Server are Offline . . . . . . . . . 19 6.2. Resource Server Offline . . . . . . . . . . . . . . . . . 22 6.3. Token Introspection with an Offline Client . . . . . . . 26 6.4. Always-On Connectivity . . . . . . . . . . . . . . . . . 30 6.5. Token-less Authorization . . . . . . . . . . . . . . . . 31 6.6. Securing Group Communication . . . . . . . . . . . . . . 34 Describing all 6 deployment options at a level that allows interoperable implementations in a single document, namely in draft-ietf-ace-oauth-authz>, make the document longer (obviously), requires a fair amount of work, and takes longer. For this reason we are asking for your priorities. Which of these deployment options are more important for you than others. Please let us know which of them would you include in the WG document, which of them would you would like to see covered in separate documents, and which of them would you drop? Here are the slides from the ACE virtual interim meeting providing further background information: https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-int= erim-2016-ace-1-1.pdf Deadline: 16th March 2016 Ciao Hannes & Kepeng --l2m47hVwQDEtbspC5oSi66nJTda4cu4tp Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJW1yUOAAoJEGhJURNOOiAtQOgIAIDnPRioMF5xzPnd0unFEh44 64bfYgjQmbAAA8zo4lL8Fjg68pRpj6fPyLumW4wUtX2fzpYbV8zcMIzCd7z9uluN RSq1FhJFLRexPiEP4i8PZwjv7hWEqzkclmD1rPCC/rhiyJBN9GL5EAUm6a3tu7gC 2C/PrCLcxmvI/nQzb8SEX3b2bCe72c+5JJhGULtlHP6nBLr4VJKhA1PVK9EZ5QxX ZIxhOpSngsVqaTgHLKJ9iVSieZ76DaJScVfq47e5+UNuC9uRaw1Eyxb4c2cv8ihZ 53cM6c4U841gmXxt3xf74PytoIL9jcnlLbZj+XK66I3Nb6/xNSNSAT8hZk0gPG0= =HGkA -----END PGP SIGNATURE----- --l2m47hVwQDEtbspC5oSi66nJTda4cu4tp-- From nobody Wed Mar 2 09:42:24 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D83881B2F52 for ; Wed, 2 Mar 2016 09:42:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.606 X-Spam-Level: X-Spam-Status: No, score=-2.606 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.006, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iw-sircVtt7f for ; Wed, 2 Mar 2016 09:42:20 -0800 (PST) Received: from mout.gmx.net (mout.gmx.net [212.227.15.18]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D41661B2F4F for ; Wed, 2 Mar 2016 09:42:19 -0800 (PST) Received: from [192.168.10.131] ([80.92.123.193]) by mail.gmx.com (mrgmx001) with ESMTPSA (Nemesis) id 0MSuMn-1aR1ki2qJB-00Rtas for ; Wed, 02 Mar 2016 18:42:17 +0100 To: "Ace@ietf.org" From: Hannes Tschofenig Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9 Message-ID: <56D725F8.60306@gmx.net> Date: Wed, 2 Mar 2016 18:42:16 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="pr2q9R8jhA4oVcdOSPPftOULK6sDuhn2j" X-Provags-ID: V03:K0:QOs96dQwwJpetLgQIiKb2gW+HNH2S/sUnyyvopmcbK2fD35+LdC qQ1nM6Jh2TWZJxoA0oURlx2hqHBEaIj1rSI/zO4yRlPGWqBq6QaWg5bf9TqD9Z4AVh9xhV1 mfdjzJRdWu4//dbhYGFqk7K8wOZMeGk/9B6o7gemJhgywhF0UgpNJDxf4AcVNawpeLbj7+H aatvUmNQgT48qn01yqm2w== X-UI-Out-Filterresults: notjunk:1;V01:K0:l4n/3lcVUzc=:Ci5WxDKI2UP4z+Zhvvl/Ns KGfc9zCKgD40sMFukFtNInDkWAcVSuX64lxiJ5/FhgxZAXi5SmgNVVVsh49I0H8vBygJ1GXWY WugRohOYff/0DI+OAme4NuIA05LLEMWcoAVt6wXJZIdjzVRxRrvgbsmWEOlJL3QVFFI8j+ODR ldTTpwleOSE0wWE96AMgR8u2+evBVZ0z8FPSfclX3M+7DBI6X/bfuciigwOJpetKhDxEXJrRr ThNyt6pVWU7Yy89Ae6plo0+UT9cuU/z5o9V4z8X5+zra/bx5MSHCuvrj0dIxWCNZcDpIGrZGS G/iOGPx3MFOuMkvUeq4S/pRWUrn3AqoI7xkO9TYq/piSvR+SCYj5LkzBqc21l2zGgyLFnBuwN cFLJJbqGcz+VGGLByTeGkPhjnpIjfqAjEhNy8vk+NlT9s7FhmaxmmmOtx4wd8owriLRVVp9HD lPJUDpKGx8BSPL2deUBh89Kc4kq6U9gTvJVtkUHUFEJs2LmKBqNW79pcCheqB47Uv82ZfiIhp Zk6IGNTP3y61m66BasqFBR4pOPCP3Qubh1u9R4qYCR6TGiXlceZmRVCFwjkk38N/IjxU+UIFD JimgmoDzc2YS5gZhaW2PVn1B1JYuw3tIRTPvpb16OZmR8/qMhW+uNdY21ScTHeRkhq7KAtIs+ tEPBaFz3qwnO0SNWS4iL/bCDsRT55Rq4hATR0Te+DlT2HZZb86ZmmVUBOprPXBHQhUMilnkQK lR49MP5x3/U8VIcabcknodhkMi+lxM/BxDbjA9FATKr1hILhs+AdWIY2V+E= Archived-At: Subject: [Ace] Options for Transporting Access Tokens X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2016 17:42:23 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --pr2q9R8jhA4oVcdOSPPftOULK6sDuhn2j Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi all, in the ACE architecture there needs to be the option to pass the access token from the client to the resource server. It turns out that there are various options to do so (each with pros & cons). Here is the list we discussed at the interim meeting: =3D POST to a well-known or discoverable resource (e.g. /authz-info) =3D Use a dedicated CoAP option =3D Use TLS supplemental data (RFC 4680) =3D Use psk_identity (DCAF) =3D Define new TLS certificate type (similar to RPK) =3D Use ticket extension (RFC 5077) Here are the slides from the ACE virtual interim meeting providing further background information: https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-int= erim-2016-ace-1-2.pdf Since we are still in the phase of exploring options and finding new options we soliciting your input without setting a specific deadline. Ciao Hannes & Kepeng --pr2q9R8jhA4oVcdOSPPftOULK6sDuhn2j Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJW1yX4AAoJEGhJURNOOiAtZUAH/RnMKwRYgda5X1vwmvzTsByz NE79IJy0Ay4I90cW1RNWG7LBDMIdCFrF6yHYQYZq8rYeui7LS0DIyh/1IroEiSXn uvrgjEHwY0tP/8k1KRYrfJSscSUTHXhTDzFF9Pf+slTT/ArUn4NlLhWbsaDN54z+ 3UNbKZ00lfojAUjSRhnp10n6s+XmYQLfUb+8EwM5bewvM4tFh/X32YG9l76iGj3l mU3CcRbI2Uf33pVpJw1Zq/QgGWhXDwMUkzdf6bv1+5K+kalWnRoraWVp+di/AQh4 RtYiEtjOHYkd1+EAyGMvHG370YvVUl2ShbvP5Rc4chIzgax0kFAZ5cVHibU03Y4= =ork9 -----END PGP SIGNATURE----- --pr2q9R8jhA4oVcdOSPPftOULK6sDuhn2j-- From nobody Wed Mar 2 09:53:57 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7DE651B3093 for ; Wed, 2 Mar 2016 09:53:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.606 X-Spam-Level: X-Spam-Status: No, score=-2.606 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.006, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PAbmlA0E13Uo for ; Wed, 2 Mar 2016 09:53:53 -0800 (PST) Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 954071B3000 for ; Wed, 2 Mar 2016 09:53:52 -0800 (PST) Received: from [192.168.10.131] ([80.92.123.193]) by mail.gmx.com (mrgmx002) with ESMTPSA (Nemesis) id 0M6AbC-1ZhqWi1sT4-00yABE for ; Wed, 02 Mar 2016 18:53:50 +0100 To: "Ace@ietf.org" From: Hannes Tschofenig Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9 X-Enigmail-Draft-Status: N1110 Message-ID: <56D728AD.7050109@gmx.net> Date: Wed, 2 Mar 2016 18:53:49 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="RBmRK9IFquNp2AWH8MlmeRJauleo0bKt8" X-Provags-ID: V03:K0:AM/XNhqT5Dv4c4nMswcbX8ElUtexVa/nP59byAUUZ3u2UjM+X3B ML1clvFzUzZbKajNvUmX5rinYA1yV0x5zx8llPREA0mIGE9D8ejHufl1r5ZOG99xDIbM9RW xJqRUD0KWenyLRv7+VVihUTLx0x/SF77xTSMppxzwJT/EF7IWH9q8Zbwv0liODhPR1OYlhI tl83j/Kd/OLewyAZgmZdw== X-UI-Out-Filterresults: notjunk:1;V01:K0:vB7gU97aJis=:K/KkOAZkwMgvMlBX2fqSVg sUSf+bye8788f88y/wM8RDENjdXmhA9W1PsPLKcx1z+3M1olwTGkJ0wdXPOzeGeubzKM1wvKA BzuusJvwFS5TLNlh1oGS2FYwFqCYN83t9umjTYnV27d3QXLacKBZtitQ5ebQ1kSy+zIhYtnA0 0cCtuDSmTYDOz5PIS7NCd/t73vYt2RPPYWa4Y4WYMtusG0LJOrVHm+9FCAWigF/BKuOQXlj/o GDzSfvN1lAtgHgK3hcjjOOG4fdGgdZRmsAZP7eUG98PJ3LQb8sGlz9TGdTaS9X2r6k+ND0KV/ cio4kIll0SPUoaGjvs398SWfeE0noOo7bTjLYuluMAN3UN0njCBoYp5hlrTeVgQG7CWkqqikY PNAhN7FzHUpkCxSr89czbcvHLwu7jVqQkEx6IgJg6mkfxm8mtSvZ+gtg2TbDLSFkN60xfZ1ht u7qLs5MI88q0nyjEWG9AW1kgYlVsHhXU/RDvn0UAapiWlVjaR7rO7HtfSXhTjG3A5d7Pketm6 IggReDjWzuQpzSkq+GU7jraHQGu14HexyAIZxMPE+UEIHsRgr7fZ3VB31YWi8GRlXGMBkr3Iw 6nu+pk+DNNpP2nOOx0NabMHXnHMaqI6StwyENwW7SuIepKRtMslM13lhjtsXitEyawywj8YBO lmgbE7bT45R5EEnrsoGa6Mb1IiBAwuAdbVBRX6s7tBgmJmWRYy4eOKTqV2x1sjbKLKc2x40/K MFDaC850mgQ/7cy2ClgQhWyWYIUGz5NVu826BmHkEnPO+6s/NDlE4O87s+s= Archived-At: Subject: [Ace] RS Synchronized Time X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2016 17:53:54 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --RBmRK9IFquNp2AWH8MlmeRJauleo0bKt8 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi all, on the mailing list and subsequently at the virtual interim meeting we had a discussion about the requirements for time synchronization. It seems that there are three possible approaches, namely 1) No requirement for real-time clocks and time synchronization at all. 2) Requirement for a real-time clock at the RS 3) Requirement for a real-time clock at the RS together with the need to synchronize time with the AS. At least Carsten was of the opinion that we need to support this functionality and that it can be accomplished fairly easily. On the mailing list there was not much support for this functionality. Here are the slides from the ACE virtual interim meeting providing further background information: https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-int= erim-2016-ace-1-5.pdf If you have experience in this field and ideas on how the nonce-based approach could work please share it with us. Once we have enough details about the solutions we will have to make a decision. Ciao Hannes & Kepeng --RBmRK9IFquNp2AWH8MlmeRJauleo0bKt8 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJW1yitAAoJEGhJURNOOiAtwIEIAIcJ3AYJ04d6VClsbdJ49Ab5 eyiiDUtzAkJ9VuegZzqBBUSwpRVgtyWXBHvtYvCnRHcFpHKoakde4RlsxAzOuoUb fDnBzJIy2qgEBKScTRdmBtAyNwa1nNPRiNstETeqmg0h/Pg4yoAzQ0K4wfTPMCxr fMcX+ApgC1I04+I04D9DZaUziwVfDHWap0QAt9R4YTrdK7D86UNnj0ScQfNYpQyo qFi1gH/iYnBvIuqwDkEd9hNRzbxwLPY8dxspo/ePwMeOUZneBO0RO1Tzt9GJnb3e FjFtDEa4NO/RpNezd8Sduwcdab22eAqq41x9PL53DgFz4Eyao8WRw4gsDT1inok= =d0nM -----END PGP SIGNATURE----- --RBmRK9IFquNp2AWH8MlmeRJauleo0bKt8-- From nobody Wed Mar 2 09:59:59 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F5D81B31F4 for ; Wed, 2 Mar 2016 09:59:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.606 X-Spam-Level: X-Spam-Status: No, score=-2.606 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.006, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 60n5QbICs1bu for ; Wed, 2 Mar 2016 09:59:55 -0800 (PST) Received: from mout.gmx.net (mout.gmx.net [212.227.17.20]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AB2A71B31F2 for ; Wed, 2 Mar 2016 09:59:54 -0800 (PST) Received: from [192.168.10.131] ([80.92.123.193]) by mail.gmx.com (mrgmx101) with ESMTPSA (Nemesis) id 0MUkxk-1aP7rX1oeC-00YDEo for ; Wed, 02 Mar 2016 18:59:52 +0100 To: "Ace@ietf.org" From: Hannes Tschofenig Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9 X-Enigmail-Draft-Status: N1110 Message-ID: <56D72A16.5050607@gmx.net> Date: Wed, 2 Mar 2016 18:59:50 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="46njOXrKNhqxOtVW8RK1C90UtaXUWk8ai" X-Provags-ID: V03:K0:iWLQ4tl2NqGv5QC4/W7jBu4AsGmRA+a2KAt+9XkxI8E4WHiuN58 JXFDg8TtbmwbeF9CJm5rEjVWBbaSZGx6C9EiIfNWsi+y7YLI57/LQOVyq+XUHbNk677R/o8 vPZ1edssXayGiZEc/vIVRGq2AN8ronhC5TRFAYTRvnnsw/1xneCSvdRS0qGoMC1wlQc+WeN HpnJqHMpzZo+VmwCQG0ew== X-UI-Out-Filterresults: notjunk:1;V01:K0:v4nIYQCxGXM=:fzpQenc74k/LZZDCh/qNXl /PaXcuVTCMSvqitkHa8ZAKCco77ZKKVmQxKR5+HToME6B8bTOrpjZ1l2sI8kJ7T5AyzOQpAjw rdMC3quPa1HuMqXoWVJUNf1EvzODgTi8sDowXVV07atyM3jA0QP0DX1fq/azQseihYmOLiX1e Iy6BZzAM0eBKKPSKU/lp9K63Ggu+Q1rB78f+WgaJKP0oQ/xWBAJQndCJ3M3iTrIu97gZJLOSy 7x9fahrBduEjZHZSvyKKkGeiMCGaEzLqdXtKRAQ4HQdpy76bU2Bck893J/71Ijass65THAyzD 5Ip5k7Q5iRjBZ2Hkeoq/GjjIjvi1G08PkhTxRS6/O7xcFXj1LjTM+8GF5VU9M2euW2WklOd8w FkznW7U/uF2yn9CjSsS+IexcQKpALp2/rJIBtdQKefq1gWn1xDxyvzw/iTMbu2oaBFKahV+iq sCY2T8MlSafupE/giL0ILTUfoYgQt3V50vYwqLOUcAb3lrYTJ34AyiEhCkiHr5SAoxMYyaFmC kOBwhukfJGhavy2A2SVgWofcZLCrS7EQzYzyWrHzT48Mrq4cQ7rUZSs56RYkRfO8FlhkAziQl FcewPMfG+PPb8pmxnDBx6so9DPSvn+7rz622h4+M4Bsk6BW9iVfz40JG5txJWDfhybJkZ22l7 MQXzl8WwZZFEsFMhdk0hY0lieukVGG7BOTFJPdaNtJ2Vbsdh+CR0+vsDgNz93uCe/DiBBnM6W uDUcL5n6KKQhdlqNe6oIeQ4TSJqx2n7r+NHm09ISCkIa7pxl27Ic0lbFZeI= Archived-At: Subject: [Ace] DTLS and OSCOAP X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2016 17:59:56 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --46njOXrKNhqxOtVW8RK1C90UtaXUWk8ai Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi all, in specifying the details for the communication between the client and the RS we need to settle on a security mechanism. There are four options: * Option #1: Do not specify a solution in the WG document (1) * Option #2: Specify a DTLS-based solution * Option #3: Specify an application layer solution (for example using OSCOAP) ** Option #4: option #2 + option #3 Note: We are asking for feedback about what should go into draft-ietf-ace-oauth-authz. There is always the possibility to specify other solutions in separate documents in parallel or later. Here are the slides from the ACE virtual interim meeting providing further background information: https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-int= erim-2016-ace-1-4.pdf Deadline: 16th March 2016 Ciao Hannes & Kepeng PS: (1) This was the approach that was selected in OAuth where the Bearer Token specification was published as a separate RFC. --46njOXrKNhqxOtVW8RK1C90UtaXUWk8ai Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJW1yoWAAoJEGhJURNOOiAtsKkIAIYnBrqVFGAoV+zPRIfk0w7H DdoNqCXT/5BKlu2Y6K46clmaBKCLoDYrdWoY/NVdITXpDkocVQFwzjc0tWR1hg/w JlVEWDWwic/ZMwNPghqoaD/Zkmmxi0NceJgX1OEc/CtPMCtsIBsObKfxOVZEpk06 AtSLKLeOPhz2ToOHKBKzKSXEsNe9WTz9Rm2u05y7Ryu0b6Il2+txcYVhIkbh40UI o6lDr2iaFPkiWfwdv9QZLloNVfCZ3278ML+xF307IrM4+Lm8gROfTKGsh29cNZy4 zzIZtPTvhAfaOA8E5x8Pvj9Wm5h47B3Ra0F++mGZT7q8c7oqcb7yhxu0yN6Zemw= =9Bbq -----END PGP SIGNATURE----- --46njOXrKNhqxOtVW8RK1C90UtaXUWk8ai-- From nobody Wed Mar 2 10:06:39 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B4771B3209 for ; Wed, 2 Mar 2016 10:06:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.606 X-Spam-Level: X-Spam-Status: No, score=-2.606 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.006, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u7lghpu6Njh1 for ; Wed, 2 Mar 2016 10:06:35 -0800 (PST) Received: from mout.gmx.net (mout.gmx.net [212.227.15.18]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 179C71B3114 for ; Wed, 2 Mar 2016 10:06:34 -0800 (PST) Received: from [192.168.10.131] ([80.92.123.193]) by mail.gmx.com (mrgmx001) with ESMTPSA (Nemesis) id 0MhhwJ-1aERFy0IGh-00Mtae for ; Wed, 02 Mar 2016 19:06:33 +0100 To: "Ace@ietf.org" From: Hannes Tschofenig Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9 X-Enigmail-Draft-Status: N1110 Message-ID: <56D72BA7.1030003@gmx.net> Date: Wed, 2 Mar 2016 19:06:31 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="iuisJ9DaskSeqpWPfkFwlr5Vt2K4ELoCt" X-Provags-ID: V03:K0:Lt4BT+VcF9AK82jz+WOxKuaaH0fVw3ZP+b0HJhVnndX0FDL+SGz Yc1x9yzNYn/zEo84fyI3Kxb9t+0/d9luYr2U77xGN03I2OpJeOc5CRfEG7RR7JovVPiPC0f XzL50rre+VUHZeK9w1/RGTpIfOjkY3Kd5Qe3XGPlN8oyA3CGiJgBnM8lLhBBSviOG0AGgWt BJMSyqnYCgSWI8MshRdyA== X-UI-Out-Filterresults: notjunk:1;V01:K0:fsqfkK9DnTE=:ixAag2AFnTLT1BnNQ1kXWl 4/8B37c7W2HyCpoAsEKylda0x+iIMf9VJfnX8yXPiHrkIduEKN2TzOgLswSYNh0LzxK7MN7Qu JhVL19HNSXAGwLVWDwCi/tpSlQM4KJQHt+WyRwjUYlO2pTc0PgwElwWmsXKZw2Z/0IaKbtGpS MzlrwiBnLgKSoEh9A/NAEduUU/eOhQBYpIMY8clW2xxp/+G2Lzt2vPF4zB5U1SZeTj24bf3gb fp8LPSEcVvmJ8+mX5LrZw8uMvwcN90jVXpw7eVwV7HLYvqI8yW7JnDkIezLcHSVeUGHxajgc5 l+fivFWnmn+b+xwE0kz8CJ2YazKI8/jFfVBtZi7qSwMNPrFbdOhKxLYujy/7Kb08bjgmcFWup r8iOwY99LDQ+JmZJ19XjV5HBGOvfZ5cBZyvmLfiG6+vf8eX5ZnbJXXTRsBzAGxgQR4J2pW8M8 CRl41vpHRyB0GDwspToUgMm51AL06QhI+j/1q9jsQR/Nz943JDHYKS0ZDyyWEsrqmuDcs9BcC 4hCxnTiWRbm2IP+2DqQ5md8b5J5RHMeBn0yvTlsZovStuz1OU47Cc0xQLAISCXEKh7u8nAb38 IA388IC8dYOaoT7t2B2X8fporPJudZY8TzXX1+lY0SJ4y7Y7TMics/HOyt45Ibt72vay0vpJs 9jtl61WLVdAfQb7Kab5TJd6tS+Dfv3DyIdYnf9Tzfn+34Vlog/AkIC9jd/U+s1h6t9tuwbI6R /xLY6rFr87w2sLbP+D+95dpLKY5BwooYGEzN9UbJLeDgQruHBaF3c5KHrj0= Archived-At: Subject: [Ace] Credential Options X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2016 18:06:37 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --iuisJ9DaskSeqpWPfkFwlr5Vt2K4ELoCt Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi all, in an attempt to progress the question arises about solutions should be described in enough detail to have them interoperable. There are three types of credentials specified: * PSK * Raw Public Key * Certificates With regard to asymmetric cryptography we settled with ECC and DTLS/TLS profile document makes certain recommendations regarding the crypto. However, there is still the question about what is mandatory-to-implement and what should be described in the WG document. What should be mandatory to implement: * Option 1: Nothing * Option 2: PSK, RPK, Certificates * Option 3: PSK * Option 4: RPK * Option 5: Certificates Which of the three should be described in the document? (Obviously the MTI versions but also others or should they be covered in separate documents?) Here are the slides from the ACE virtual interim meeting providing further background information: https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-int= erim-2016-ace-1-3.pdf Deadline: 16th March 2016 Ciao Hannes & Kepeng --iuisJ9DaskSeqpWPfkFwlr5Vt2K4ELoCt Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJW1yuoAAoJEGhJURNOOiAtc0gH+wQvZPq2g6NIibgzvSsG5UWo xsjB3f3CyFfV0b2GWJjIxx59hG40bg+2xjYFbD05NV0xzvNGAhlhOL8HYhX8wzVk UwbbHYVRjaPdRRaAkKIhq917PYRCNqhcmkRPm2Px1uaZcfnHRj3Nl02YJwdTeYFK tnzUcMy5VfGMZinWT3aRQZUN8s0V+OYav/JAXrZR5ZUNPmL9AGqtDU84I8PWcZll 9m1HUHtsU9MUP/jRuJrRKH1ckEjxMkSMMeNcHEsP/sN1TxdoprYzsSqzniZ/AGPm gvuctTvIsTJL+m6AbOKZmADR9Ol17okPMK4o5S8lrjmpRvQXXSwnlczarkDewaY= =j+01 -----END PGP SIGNATURE----- --iuisJ9DaskSeqpWPfkFwlr5Vt2K4ELoCt-- From nobody Wed Mar 2 11:03:44 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D73A1B2D8B for ; Wed, 2 Mar 2016 11:03:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.977 X-Spam-Level: X-Spam-Status: No, score=-0.977 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qxmmkenbN6Ra for ; Wed, 2 Mar 2016 11:03:34 -0800 (PST) Received: from mail-wm0-x230.google.com (mail-wm0-x230.google.com [IPv6:2a00:1450:400c:c09::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 96CF61B2D87 for ; Wed, 2 Mar 2016 11:03:33 -0800 (PST) Received: by mail-wm0-x230.google.com with SMTP id l68so2646574wml.0 for ; Wed, 02 Mar 2016 11:03:33 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wahlstromstekniska-se.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=hnxGGI4Ue/M0DPyCEJqmKl4pUsP2rqYL39XDgRaor08=; b=DcuEXpI6jGZLVMdKCmHjg+7KFbA0wZqX9j/KWjX+jqeEaHcfKLicMSPWYJrZ5+fI7q VaHm7+ZGU8zgeWjj3rQW7fFKlOnQj4508IoULPZGdrTTgfUL8JOT3jMiraNtHftmUiKf fdDIvEa7Ytq4fNtTtNKo0/ufca9hrqHOGaTNk8999nZLq/30N8tqo4znL2Z8cxxrlND+ 0S9O03FJKNRIdSQvj4Qf72iCdzkVR6QR8ELvBzzh/qQvougOopuqJB30T/OevzESWrwq NeFLe14MZp919kIjNMRMjqN8nPS0wpOwgdk2DxE9QUkA6OHpp0cWLaxdpAkPeoNTEZua G8aQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=hnxGGI4Ue/M0DPyCEJqmKl4pUsP2rqYL39XDgRaor08=; b=ILMeEEk/kaDwtIHJczLY0booUVondZy3228y+QDr44h3c+CCplximEzA3TC9jl9PUF wpJAF8gtL1XN9qRJv45FHLtHXjUe0Xu2+xx3FwlQIjODX0yb/GikwVgMDgR5bdHo6SMH x+KB5Rtq3tXk9UqO5b+mnQxcbXHzjaNobYBUForgbF6xqlL1tSf/z3GmLmkxYTXHWWuY YienvHdgaQcAaD1yjizpccXI9G9x94BHiZ+0ctNZn/vwz2elbSXmdAjCNTaoa8B4AMry cYlOXuTSoFlEDjGO1usbLdodOiCp1a5tgVaYZgIVtsDm5blahB/wSF5FxPgM0F3Pm5Gz m0vQ== X-Gm-Message-State: AD7BkJJf7bVfcxChAq3KBHDP8IdtIMvT738aEimhdCw+vg754w8UoJjjpFt2gvpdXrMkjQtXG1mDqyXaLHNRZA== MIME-Version: 1.0 X-Received: by 10.28.59.212 with SMTP id i203mr1440363wma.69.1456945412031; Wed, 02 Mar 2016 11:03:32 -0800 (PST) Received: by 10.28.226.132 with HTTP; Wed, 2 Mar 2016 11:03:31 -0800 (PST) X-Originating-IP: [37.247.26.197] In-Reply-To: <56D723D1.3090204@gmx.net> References: <56D723D1.3090204@gmx.net> Date: Wed, 2 Mar 2016 20:03:31 +0100 Message-ID: From: =?UTF-8?Q?Erik_Wahlstr=C3=B6m?= To: Hannes Tschofenig Content-Type: multipart/alternative; boundary=001a1148f62abdf6f4052d1589bb Archived-At: Cc: "Ace@ietf.org" Subject: Re: [Ace] CBOR and/or JSON X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2016 19:03:38 -0000 --001a1148f62abdf6f4052d1589bb Content-Type: text/plain; charset=UTF-8 I think that the original scope of ACE should have been more then just constrained devices. It's a continuum between larger and smaller devices and it should have been a solution that fits both. We are where we are, so right now we are building for constrained devices only. That's off course totally as it should be because that's what the charter and name say so I don't have any problem with it. But the thing is that I can't imagine that the industry is using CBOR to a larger extent then they are using JSON. JSON is the default go to protocol. Alternative 1 option 3 (that's actually alternative 4 in the PPT) makes it work with both CBOR and JSON over both CoAP and HTTP and that's my preferred way forward. I am however fine with alternative 2, option 1 (that's alternative 2 in the PPT), making it CBOR over CoAP only and later extending it with JSON. / Erik On Wed, Mar 2, 2016 at 6:33 PM, Hannes Tschofenig wrote: > Hi all, > > specifying the ACE OAuth solution the following design question turned > up: Should both CBOR and JSON be supported in the WG document? Or only > one of them? > > What should be described in the WG document: > * Alternative 1: CBOR and JSON > * Alternative 2: CBOR only > * Alternative 3: JSON only > > Additionally, there is the question about HTTP and CoAP support. > > Should the WG document only describe > * Option 1: Use of CoAP, > * Option 2: Use of HTTP, > * Option 3: Use of HTTP & CoAP > > Here are the slides from the ACE virtual interim meeting providing > further background information: > > https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-interim-2016-ace-1-3.pdf > > Deadline: 16th March 2016 > > Ciao > Hannes & Kepeng > > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > > --001a1148f62abdf6f4052d1589bb Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
I think that the original scope of ACE should have been mo= re then just constrained devices. It's a continuum between larger and s= maller devices and it should have been a solution that fits both. We are wh= ere we are, so right now we are building for constrained devices only. That= 's off course totally as it should be because that's what the chart= er and name say so I don't have any problem with it. But the thing is t= hat I can't imagine that the industry is using CBOR to a larger extent = then they are using JSON. JSON is the default go to protocol. Alternative 1= option 3 (that's actually alternative 4 in the PPT)=C2=A0makes it work= with both CBOR and JSON over both CoAP and HTTP and that's my preferre= d way forward. I am however fine with alternative 2, option 1 (that's a= lternative 2 in the PPT), making it CBOR over CoAP only and later extending= it with JSON.
/ Erik

On Wed, Mar 2, 2016 at 6:33 PM, Hannes Tschofenig <hannes.tschofenig@gmx.net> wrote:
Hi all,

specifying the ACE OAuth solution the following design question turned
up: Should both CBOR and JSON be supported in the WG document? Or only
one of them?

What should be described in the WG document:
* Alternative 1: CBOR and JSON
* Alternative 2: CBOR only
* Alternative 3: JSON only

Additionally, there is the question about HTTP and CoAP support.

Should the WG document only describe
* Option 1: Use of CoAP,
* Option 2: Use of HTTP,
* Option 3: Use of HTTP & CoAP

Here are the slides from the ACE virtual interim meeting providing
further background information:
https:= //www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-interim-201= 6-ace-1-3.pdf

Deadline: 16th March 2016

Ciao
Hannes & Kepeng



_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace


--001a1148f62abdf6f4052d1589bb-- From nobody Wed Mar 2 11:10:50 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF50F1B2DB0 for ; Wed, 2 Mar 2016 11:10:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.977 X-Spam-Level: X-Spam-Status: No, score=-0.977 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IdCcKqSQQL5S for ; Wed, 2 Mar 2016 11:10:47 -0800 (PST) Received: from mail-wm0-x231.google.com (mail-wm0-x231.google.com [IPv6:2a00:1450:400c:c09::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5D3611B2D9E for ; Wed, 2 Mar 2016 11:10:47 -0800 (PST) Received: by mail-wm0-x231.google.com with SMTP id l68so2696230wml.1 for ; Wed, 02 Mar 2016 11:10:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wahlstromstekniska-se.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=wiDtVvhk+PBZqoARZgkjSPAH2kSgvBUVYb6p1u/5md0=; b=vZnuDXghRuom1GV8+IdfZU+X/msQ7kvoa/ORdrL5g2fUQKg5j0gwve+qb0UCade5VN 4+E9qkggwoZkjX6/JBb7zP5CQWXz4endKvxNjvI7CmkoqpBLCBFlmjU1KiC6R81TJiL6 lzSyc/zbaPjGEuFueA6cu+ri7NE4cGz9QbTBE5/aYhuZ5oAIhAMzCHaezMqNky+BZi41 5AIkwdhJqNlZZxNIvUVdtst547qj4aKDPy4Sef+/SX7ylk0feicr/uv1iiItHgXv7PLk ete5iFW+ZaPvgHgWavVtKX9fFDYJv/FzohPozHpLTPYt9lORF2Wk5rGZwQjx1o/FLFIH pxBw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=wiDtVvhk+PBZqoARZgkjSPAH2kSgvBUVYb6p1u/5md0=; b=jK73qE+XfLfmihSHTRRVksDpVO7wKjiWGWqFffXB1T8j7g7YoP44mZgNAIGYExTflj gIxgfm1X7Ww0aIn3NVOosbi7erTaMHz2lIoIV6EZmxKhCKEhTgIYGRYmqVVtPQk/J5Tb 4HCeaQUT9i6ACXZ93C1CU1S9KoDFJ2jtyTzkGDUeHc20addyIv9/DW/Gp/ZI0QtaYS2y rRFHPzY6GLUS8coT4yqB48BL+QQZ4TxNeoc6sv5Q2E1rXQ9YZJUuvcrO4N0eUndmrK8s X3rPAfPIR+LbjlRtE4Eqw5lbYa28dMsQjwBMVDamMi2QFUzG1CH9DXoKotu6LB3gcPCM tFKQ== X-Gm-Message-State: AD7BkJLnGfqwv5Im1CV7n9jeebp0bVS3dIWv4DMtxUaEp8pnABje1i481b6JMEAkUQQJq9GfBNQYrqm8kOxnAQ== MIME-Version: 1.0 X-Received: by 10.194.121.34 with SMTP id lh2mr26940496wjb.145.1456945845710; Wed, 02 Mar 2016 11:10:45 -0800 (PST) Received: by 10.28.226.132 with HTTP; Wed, 2 Mar 2016 11:10:45 -0800 (PST) X-Originating-IP: [37.247.26.197] In-Reply-To: <56D72A16.5050607@gmx.net> References: <56D72A16.5050607@gmx.net> Date: Wed, 2 Mar 2016 20:10:45 +0100 Message-ID: From: =?UTF-8?Q?Erik_Wahlstr=C3=B6m?= To: Hannes Tschofenig Content-Type: multipart/alternative; boundary=089e01227cf0975251052d15a353 Archived-At: Cc: "Ace@ietf.org" Subject: Re: [Ace] DTLS and OSCOAP X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2016 19:10:48 -0000 --089e01227cf0975251052d15a353 Content-Type: text/plain; charset=UTF-8 +1 on ** Option #4: option #2 + option #3 / Erik On Wed, Mar 2, 2016 at 6:59 PM, Hannes Tschofenig wrote: > Hi all, > > in specifying the details for the communication between the client and > the RS we need to settle on a security mechanism. > > There are four options: > > * Option #1: Do not specify a solution in the WG document (1) > > * Option #2: Specify a DTLS-based solution > > * Option #3: Specify an application layer solution (for example using > OSCOAP) > > ** Option #4: option #2 + option #3 > > Note: We are asking for feedback about what should go into > draft-ietf-ace-oauth-authz. There is always the possibility to specify > other solutions in separate documents in parallel or later. > > Here are the slides from the ACE virtual interim meeting providing > further background information: > > https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-interim-2016-ace-1-4.pdf > > Deadline: 16th March 2016 > > Ciao > Hannes & Kepeng > > PS: (1) This was the approach that was selected in OAuth where the > Bearer Token specification was published as a separate RFC. > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > > --089e01227cf0975251052d15a353 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
+1 on=C2=A0
** Option= #4: option #2 + option #3
= / Erik

On Wed, Mar 2, 2016 at 6:59 PM, Ha= nnes Tschofenig <hannes.tschofenig@gmx.net> wrote:
Hi all,

in specifying the details for the communication between the client and
the RS we need to settle on a security mechanism.

There are four options:

* Option #1: Do not specify a solution in the WG document (1)

* Option #2: Specify a DTLS-based solution

* Option #3: Specify an application layer solution (for example using
OSCOAP)

** Option #4: option #2 + option #3

Note: We are asking for feedback about what should go into
draft-ietf-ace-oauth-authz. There is always the possibility to specify
other solutions in separate documents in parallel or later.

Here are the slides from the ACE virtual interim meeting providing
further background information:
https:= //www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-interim-201= 6-ace-1-4.pdf

Deadline: 16th March 2016

Ciao
Hannes & Kepeng

PS: (1) This was the approach that was selected in OAuth where the
Bearer Token specification was published as a separate RFC.


_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace


--089e01227cf0975251052d15a353-- From nobody Wed Mar 2 11:20:33 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE4AE1B2DD2 for ; Wed, 2 Mar 2016 11:20:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.977 X-Spam-Level: X-Spam-Status: No, score=-0.977 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Z0s0vC67s9vz for ; Wed, 2 Mar 2016 11:20:27 -0800 (PST) Received: from mail-wm0-x22f.google.com (mail-wm0-x22f.google.com [IPv6:2a00:1450:400c:c09::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1EA2A1A8908 for ; Wed, 2 Mar 2016 11:20:27 -0800 (PST) Received: by mail-wm0-x22f.google.com with SMTP id l68so3296582wml.0 for ; Wed, 02 Mar 2016 11:20:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wahlstromstekniska-se.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=jxv6O5V5y6+wvKhCHDfsrIz3J87oY/HO+V7gxa+8TxA=; b=lS4giSrrai5YONnjeAuHggdjAMeMogmBy3LMJs6Y+TInLHfr5R6m66ViDNIG2QKUNz KaT8WaihHTO4Sh/NilxOFIeGa7Aog5IkRt1yLLvJj9UqTtO4TgZMvczrLnQpQy641lof tTFzTUeMXJ4XzNejZIysf731veGpW3aqJd9xx3qq14m342+FzpDB1fjZuBI3bLR0c3kW IlAFtVrL0i490D36JDUuI86rqYxHWB7MoEOWF9blS4x/s26DbXww4ZMfHyCp0e/1ym+g WIx+gsTGuUQqz3xqs6ySx32Av/dNQ2oUW36V55JSwQgTA4flceeUSx3RqI0Nun/s7omW eDSg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=jxv6O5V5y6+wvKhCHDfsrIz3J87oY/HO+V7gxa+8TxA=; b=JAxMUAn8dr0nVDxNREtnxAL/5y4PrvdbII+vdyllh2Sa7cSr3nlOw6GOQXbwn0xmiX J7bVMdmtJEeiyTNXmHU+Y6BbyI/j3TsSX05kSbPZQdVHClhpbutiM0D0kdVcDiNrtrXS HfJqfSNnNFH4tYizZm8QU9Qw0v6YPfoyHydD45+PTR+529vASOQBBU7vhHWaV+WJygoc Ea4Mbpf57RE5zRR1dNgVBu9swOiWJbZo30OToWMW2iaDGQDheXMvc/siQjCOPeKEvElm dmDADcX/EM7OzG7Hxh4uhktXXxLxiRRK6ODcwRjR75BEVTobIO4D8eQGB6qjEHgIIjIr lV6w== X-Gm-Message-State: AD7BkJK0snLT2uwViMjxydXSn57MwbXisyRGGKvkKqMGK8mNH1qL0up9+PueEn0EX5M4lzzvHhcXt3RCsgTt3g== MIME-Version: 1.0 X-Received: by 10.194.63.7 with SMTP id c7mr28272629wjs.168.1456946425701; Wed, 02 Mar 2016 11:20:25 -0800 (PST) Received: by 10.28.226.132 with HTTP; Wed, 2 Mar 2016 11:20:25 -0800 (PST) X-Originating-IP: [37.247.26.197] In-Reply-To: <56D72BA7.1030003@gmx.net> References: <56D72BA7.1030003@gmx.net> Date: Wed, 2 Mar 2016 20:20:25 +0100 Message-ID: From: =?UTF-8?Q?Erik_Wahlstr=C3=B6m?= To: Hannes Tschofenig Content-Type: multipart/alternative; boundary=047d7b86d9cc2949e1052d15c6f0 Archived-At: Cc: "Ace@ietf.org" Subject: Re: [Ace] Credential Options X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2016 19:20:28 -0000 --047d7b86d9cc2949e1052d15c6f0 Content-Type: text/plain; charset=UTF-8 I think all three PSK, RPK and cert needs to be defined in the core document. I don't think anyone should be MTI, they all have different setups and security properties so forcing a constrained device do implement something it will not be using is not really efficient. / Erik On Wed, Mar 2, 2016 at 7:06 PM, Hannes Tschofenig wrote: > Hi all, > > in an attempt to progress the question > arises about solutions should be described in enough detail to have them > interoperable. > > There are three types of credentials specified: > > * PSK > * Raw Public Key > * Certificates > > With regard to asymmetric cryptography we settled with ECC and DTLS/TLS > profile document makes certain recommendations regarding the crypto. > > However, there is still the question about what is > mandatory-to-implement and what should be described in the WG document. > > What should be mandatory to implement: > > * Option 1: Nothing > * Option 2: PSK, RPK, Certificates > * Option 3: PSK > * Option 4: RPK > * Option 5: Certificates > > Which of the three should be described in the document? (Obviously the > MTI versions but also others or should they be covered in separate > documents?) > > Here are the slides from the ACE virtual interim meeting providing > further background information: > > https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-interim-2016-ace-1-3.pdf > > Deadline: 16th March 2016 > > Ciao > Hannes & Kepeng > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > > --047d7b86d9cc2949e1052d15c6f0 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
I think all three PSK, RPK and cert needs to be defined in= the core document. I don't think anyone should be MTI, they all have d= ifferent setups and security properties so forcing a constrained device do = implement something it will not be using is not really efficient.

<= div>/ Erik


On Wed, Mar 2, 2016 at 7:06 PM, Hannes Tschofenig <hannes.= tschofenig@gmx.net> wrote:
= Hi all,

in an attempt to progress <draft-ietf-ace-oauth-authz> the question arises about solutions should be described in enough detail to have them interoperable.

There are three types of credentials specified:

* PSK
* Raw Public Key
* Certificates

With regard to asymmetric cryptography we settled with ECC and DTLS/TLS
profile document makes certain recommendations regarding the crypto.

However, there is still the question about what is
mandatory-to-implement and what should be described in the WG document.

What should be mandatory to implement:

* Option 1: Nothing
* Option 2: PSK, RPK, Certificates
* Option 3: PSK
* Option 4: RPK
* Option 5: Certificates

Which of the three should be described in the document? (Obviously the
MTI versions but also others or should they be covered in separate
documents?)

Here are the slides from the ACE virtual interim meeting providing
further background information:
https:= //www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-interim-201= 6-ace-1-3.pdf

Deadline: 16th March 2016

Ciao
Hannes & Kepeng


_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace


--047d7b86d9cc2949e1052d15c6f0-- From nobody Wed Mar 2 11:33:25 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A74D91B2DBF for ; Wed, 2 Mar 2016 11:33:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.506 X-Spam-Level: X-Spam-Status: No, score=-14.506 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.006, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3vvtACvhaaVp for ; Wed, 2 Mar 2016 11:33:21 -0800 (PST) Received: from aer-iport-2.cisco.com (aer-iport-2.cisco.com [173.38.203.52]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 433051A896D for ; Wed, 2 Mar 2016 11:33:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=7956; q=dns/txt; s=iport; t=1456947201; x=1458156801; h=reply-to:subject:references:to:from:message-id:date: mime-version:in-reply-to; bh=XPFfNa9WrWg/SB5sTN04XwRSMaSNFg4M9WizrcNHKfg=; b=ditJnEeJtxD10X0h15UqUR/sQ7Ggsko7HjIOr81+fxlrt4MGqHM4yqgR 9vsvMi3uXhgrqDj9Ef70kBLXuEj2WmG5qkNK3JShLnxmZEfiZZG3JWP4s y91b3lLhFH4sW7vWWvgfq8ziYHjRuOOrSfZ5NfBsK+k3v0vWtMavSm1qk Q=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0DPAQBzP9dW/xbLJq1ehAxtuh4BDYFnF?= =?us-ascii?q?wELhWwCggAUAQEBAQEBAWQnhEEBAQECAQEBAQELVwkKBgsLGAkWCAcJAwIBAgE?= =?us-ascii?q?VHxETBgIBAReHcQMKCA6yR4h2AQEBAQYBAQEBARuGEoQ6gjqBVQqEVgWOIIhyh?= =?us-ascii?q?VqICYkmhVCOTB4BAUKEAh4uAYckgTsBAQE?= X-IronPort-AV: E=Sophos;i="5.22,530,1449532800"; d="scan'208,217";a="633023869" Received: from aer-iport-nat.cisco.com (HELO aer-core-4.cisco.com) ([173.38.203.22]) by aer-iport-2.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 02 Mar 2016 19:33:18 +0000 Received: from [10.131.65.134] (dhcp-10-131-65-134.cisco.com [10.131.65.134]) by aer-core-4.cisco.com (8.14.5/8.14.5) with ESMTP id u22JXIds012628 for ; Wed, 2 Mar 2016 19:33:18 GMT References: <56D723D1.3090204@gmx.net> To: ace@ietf.org From: Paul Duffy Organization: Cisco Systems Message-ID: <56D73FFD.9090501@cisco.com> Date: Wed, 2 Mar 2016 14:33:17 -0500 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------040704020201090207070908" Archived-At: Subject: Re: [Ace] CBOR and/or JSON X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: paduffy@cisco.com List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2016 19:33:23 -0000 This is a multi-part message in MIME format. --------------040704020201090207070908 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit On 3/2/2016 2:03 PM, Erik Wahlström wrote: > But the thing is that I can't imagine that the industry is using CBOR > to a larger extent then they are using JSON. JSON is the default go to > protocol. This is today a true statement. The balance, however, will shift. http://openconnectivity.org/resources/specifications, Core Spec... "An OIC Device shall use CBOR as the default payload (content) encoding scheme for resource representations included in CRUDN operations and operation responses" CBOR will also find a home within LPWAN architectures, maybe also 802.11ah, etc. Wherever power, bandwidth, and compute resources are limited. One of the advantages of the RESTful approach is the potential to swap in/out transport and payload options to fit the deployment. Use HTTP and JSON if you can, CoAP and CBOR if you must. Ideally with as stateless a translation as possible between HTTP/CoAP and JSON/CBOR. > Alternative 1 option 3 (that's actually alternative 4 in the > PPT) makes it work with both CBOR and JSON over both CoAP and HTTP and > that's my preferred way forward. I am however fine with alternative 2, > option 1 (that's alternative 2 in the PPT), making it CBOR over CoAP > only and later extending it with JSON. > / Erik > > On Wed, Mar 2, 2016 at 6:33 PM, Hannes Tschofenig > > wrote: > > Hi all, > > specifying the ACE OAuth solution the following design question turned > up: Should both CBOR and JSON be supported in the WG document? Or only > one of them? > > What should be described in the WG document: > * Alternative 1: CBOR and JSON > * Alternative 2: CBOR only > * Alternative 3: JSON only > > Additionally, there is the question about HTTP and CoAP support. > > Should the WG document only describe > * Option 1: Use of CoAP, > * Option 2: Use of HTTP, > * Option 3: Use of HTTP & CoAP > > Here are the slides from the ACE virtual interim meeting providing > further background information: > https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-interim-2016-ace-1-3.pdf > > Deadline: 16th March 2016 > > Ciao > Hannes & Kepeng > > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > > > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace --------------040704020201090207070908 Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 8bit
On 3/2/2016 2:03 PM, Erik Wahlström wrote:
 But the thing is that I can't imagine that the industry is using CBOR to a larger extent then they are using JSON. JSON is the default go to protocol.

This is today a true statement.  The balance, however, will shift.

http://openconnectivity.org/resources/specifications, Core Spec...

"An OIC Device shall use CBOR as the default payload (content) encoding scheme for resource representations included in CRUDN operations and operation responses"

CBOR will also find a home within LPWAN architectures, maybe also 802.11ah, etc.  Wherever power, bandwidth, and compute resources are limited.

One of the advantages of the RESTful approach is the potential to swap in/out transport and payload options to fit the deployment.  Use HTTP and JSON if you can, CoAP and CBOR if you must.  Ideally with as stateless a translation as possible between HTTP/CoAP and JSON/CBOR.


Alternative 1 option 3 (that's actually alternative 4 in the PPT) makes it work with both CBOR and JSON over both CoAP and HTTP and that's my preferred way forward. I am however fine with alternative 2, option 1 (that's alternative 2 in the PPT), making it CBOR over CoAP only and later extending it with JSON.
/ Erik

On Wed, Mar 2, 2016 at 6:33 PM, Hannes Tschofenig <hannes.tschofenig@gmx.net> wrote:
Hi all,

specifying the ACE OAuth solution the following design question turned
up: Should both CBOR and JSON be supported in the WG document? Or only
one of them?

What should be described in the WG document:
* Alternative 1: CBOR and JSON
* Alternative 2: CBOR only
* Alternative 3: JSON only

Additionally, there is the question about HTTP and CoAP support.

Should the WG document only describe
* Option 1: Use of CoAP,
* Option 2: Use of HTTP,
* Option 3: Use of HTTP & CoAP

Here are the slides from the ACE virtual interim meeting providing
further background information:
https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-interim-2016-ace-1-3.pdf

Deadline: 16th March 2016

Ciao
Hannes & Kepeng



_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace




_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace

--------------040704020201090207070908-- From nobody Wed Mar 2 12:03:53 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C17781B2E0E for ; Wed, 2 Mar 2016 12:03:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A-is7HTAIor4 for ; Wed, 2 Mar 2016 12:03:50 -0800 (PST) Received: from smtp2.pacifier.net (smtp2.pacifier.net [64.255.237.172]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 19CE81B2E74 for ; Wed, 2 Mar 2016 12:03:46 -0800 (PST) Received: from hebrews (c-24-21-96-37.hsd1.or.comcast.net [24.21.96.37]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp2.pacifier.net (Postfix) with ESMTPSA id E7B102CA06; Wed, 2 Mar 2016 12:03:43 -0800 (PST) From: "Jim Schaad" To: "'Hannes Tschofenig'" , References: <56D723D1.3090204@gmx.net> In-Reply-To: <56D723D1.3090204@gmx.net> Date: Wed, 2 Mar 2016 12:03:42 -0800 Message-ID: <034e01d174be$9f7e7c50$de7b74f0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQKCX38vmRUoscwEmVWhYeyW2SgIuZ3kvaYQ Content-Language: en-us Archived-At: Subject: Re: [Ace] CBOR and/or JSON X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2016 20:03:52 -0000 > -----Original Message----- > From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Hannes Tschofenig > Sent: Wednesday, March 02, 2016 9:33 AM > To: Ace@ietf.org > Subject: [Ace] CBOR and/or JSON >=20 > Hi all, >=20 > specifying the ACE OAuth solution the following design question turned > up: Should both CBOR and JSON be supported in the WG document? Or only = one > of them? >=20 > What should be described in the WG document: > * Alternative 1: CBOR and JSON This is viable only if we think that we are going to use the same = authenticators for both general OAUTH and ACE OAUTH. It also requires = a good mechanism for party A to know which is going to be acceptable for = party B and be able to ask for it. There is a negotiation problem that = would need to be solved. > * Alternative 2: CBOR only Preferred choice. > * Alternative 3: JSON only Based on sizes of messages I don't think this alternative is viable. >=20 > Additionally, there is the question about HTTP and CoAP support. >=20 > Should the WG document only describe > * Option 1: Use of CoAP, > * Option 2: Use of HTTP, > * Option 3: Use of HTTP & CoAP >=20 > Here are the slides from the ACE virtual interim meeting providing = further > background information: > https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides- > interim-2016-ace-1-3.pdf >=20 > Deadline: 16th March 2016 >=20 > Ciao > Hannes & Kepeng >=20 From nobody Wed Mar 2 12:38:16 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 50F1C1B2FD7 for ; Wed, 2 Mar 2016 12:38:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kLFzZAjD3vG1 for ; Wed, 2 Mar 2016 12:38:13 -0800 (PST) Received: from smtp2.pacifier.net (smtp2.pacifier.net [64.255.237.172]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 51B571B2FD8 for ; Wed, 2 Mar 2016 12:38:13 -0800 (PST) Received: from hebrews (c-24-21-96-37.hsd1.or.comcast.net [24.21.96.37]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp2.pacifier.net (Postfix) with ESMTPSA id 9A2BA2CA25; Wed, 2 Mar 2016 12:38:12 -0800 (PST) From: "Jim Schaad" To: "'Hannes Tschofenig'" , References: <56D72BA7.1030003@gmx.net> In-Reply-To: <56D72BA7.1030003@gmx.net> Date: Wed, 2 Mar 2016 12:38:10 -0800 Message-ID: <034f01d174c3$70541b60$50fc5220$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQJv+fno2TeTjCYDcMM/3wdFGmH34J4Jkp2g Content-Language: en-us Archived-At: Subject: Re: [Ace] Credential Options X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2016 20:38:15 -0000 > -----Original Message----- > From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Hannes Tschofenig > Sent: Wednesday, March 02, 2016 10:07 AM > To: Ace@ietf.org > Subject: [Ace] Credential Options >=20 > Hi all, >=20 > in an attempt to progress the question = arises > about solutions should be described in enough detail to have them > interoperable. >=20 > There are three types of credentials specified: >=20 > * PSK > * Raw Public Key > * Certificates If you say certificates, do you need to make an additional statement of = what type of certificates we are dealing with? Are these the PKIX X.509 = certificate or something akin to the automotive certificate that was = presented in SAAG a couple of meetings ago? =20 Jim >=20 > With regard to asymmetric cryptography we settled with ECC and = DTLS/TLS > profile document makes certain recommendations regarding the crypto. >=20 > However, there is still the question about what is = mandatory-to-implement and > what should be described in the WG document. >=20 > What should be mandatory to implement: >=20 > * Option 1: Nothing > * Option 2: PSK, RPK, Certificates > * Option 3: PSK > * Option 4: RPK > * Option 5: Certificates >=20 > Which of the three should be described in the document? (Obviously the = MTI > versions but also others or should they be covered in separate > documents?) >=20 > Here are the slides from the ACE virtual interim meeting providing = further > background information: > https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides- > interim-2016-ace-1-3.pdf >=20 > Deadline: 16th March 2016 >=20 > Ciao > Hannes & Kepeng From nobody Wed Mar 2 14:13:16 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0897D1B32BE for ; Wed, 2 Mar 2016 14:13:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XdCs0E9nnhAZ for ; Wed, 2 Mar 2016 14:13:13 -0800 (PST) Received: from relay2-d.mail.gandi.net (relay2-d.mail.gandi.net [IPv6:2001:4b98:c:538::194]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2E20C1B32BA for ; Wed, 2 Mar 2016 14:13:13 -0800 (PST) Received: from mfilter48-d.gandi.net (mfilter48-d.gandi.net [217.70.178.179]) by relay2-d.mail.gandi.net (Postfix) with ESMTP id 330D2C5A53; Wed, 2 Mar 2016 23:13:11 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at mfilter48-d.gandi.net Received: from relay2-d.mail.gandi.net ([IPv6:::ffff:217.70.183.194]) by mfilter48-d.gandi.net (mfilter48-d.gandi.net [::ffff:10.0.15.180]) (amavisd-new, port 10024) with ESMTP id jsT0wIRF5HYh; Wed, 2 Mar 2016 23:13:09 +0100 (CET) X-Originating-IP: 93.199.254.229 Received: from nar.local (p5DC7FEE5.dip0.t-ipconnect.de [93.199.254.229]) (Authenticated sender: cabo@cabo.im) by relay2-d.mail.gandi.net (Postfix) with ESMTPSA id 2E834C5A51; Wed, 2 Mar 2016 23:13:09 +0100 (CET) Message-ID: <56D76573.8060804@tzi.org> Date: Wed, 02 Mar 2016 23:13:07 +0100 From: Carsten Bormann User-Agent: Postbox 4.0.8 (Macintosh/20151105) MIME-Version: 1.0 To: Hannes Tschofenig References: <56D728AD.7050109@gmx.net> In-Reply-To: <56D728AD.7050109@gmx.net> X-Enigmail-Version: 1.2.3 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: "Ace@ietf.org" Subject: Re: [Ace] RS Synchronized Time X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2016 22:13:15 -0000 Hannes Tschofenig wrote: > 1) No requirement for real-time clocks and time synchronization at all. > 2) Requirement for a real-time clock at the RS > 3) Requirement for a real-time clock at the RS together with the need to > synchronize time with the AS. > > At least Carsten was of the opinion that we need to support this > functionality and that it can be accomplished fairly easily. Clarification: I was arguing that a solution that is applicable to constrained devices needs to address (1). I was not arguing (2) or (3) are needed (at least not for the PSK or RPK cases -- traditional certificates obviously do need more powerful devices); they should not be part of an MTI mandate. Also, I should clarify that "no time synchronization" is in terms of wallclock time -- there may or may not be a monotonous (boot relative) time available to even a constrained device. There may also be an event-based mechanism of progressing a logical clock (cf. Lamport timestamps for an example that is about as old as IP); what is needed here depends on the application. Modern Web frameworks use freshness indicators of this kind in the form of authenticity tokens and similar anti-CSRF mechanisms, so I'm not sure we have to spend a lot of time looking for them. Grüße, Carsten From nobody Thu Mar 3 00:28:52 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E0B41A1A12 for ; Thu, 3 Mar 2016 00:28:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kEaEU08_83zW for ; Thu, 3 Mar 2016 00:28:48 -0800 (PST) Received: from mail-lb0-x229.google.com (mail-lb0-x229.google.com [IPv6:2a00:1450:4010:c04::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3B3DA1A1A04 for ; Thu, 3 Mar 2016 00:28:48 -0800 (PST) Received: by mail-lb0-x229.google.com with SMTP id x1so14365913lbj.3 for ; Thu, 03 Mar 2016 00:28:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics-se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to; bh=jR4cVmHLReFLazYzqQ9XviCp0SLEH32wxjOm8Dd//HM=; b=oFu2w9SBCcsUiX8RuUghIO/5pdn9vO3lzryTeaemFgOwBTKExTrRY67zdMJ5lhAOGY mKV6M4lsyty637CnaZ0VScfzluWkpH1teII2alOWUwMZvZ0RiVqcZq+G3vfe2zTkPK4T 2FxESB7NUWzC2g0LGDB61Id4q6OGU6IcX3g/8BExTwaIWf5as/ySa7NpyowQx2/IlUE5 E6MDL7G2h6ZkyJy3rWBLP+9rdX5YO4SOUV+teEqXDmObRnfComP6dZKWTt9ITI3mawqM qD7K+ITbRkwOJ/jdckyjHQeyvyjWWIXcwqB7NhdBqYZ8B9HJFTpWdQ0rL9H3GkgT5YeL 116A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to; bh=jR4cVmHLReFLazYzqQ9XviCp0SLEH32wxjOm8Dd//HM=; b=eKF0xAIlwYONtZh7yKvL34lecBRZAJxe3YFDFZdddwxX7oY5ei0Rm7NCtz7PCRcBXK bTg4seasOSdtIf0ZhQ9xVLeTRIfvt6ocm2UFpdZfMFuW295MwE7ZYMxJcr5BvDOESC1T 15KMvlC1o8JU2/l7NxUyqFFiIzNOPNgFm5ZhstXunDrZs8/jqaLIDu7CdaAj8cmVPsXE 792+wy28x+atm7QccFy8Djg31sxZR/qoimOuH//SvrTxey8Oxnsrv9YFIdMMSqLV+/rf 4cZKfQTNkxWx3KkbJL9Md0DwHl1WXf4TykB68zKhTIKetewWvKmOuFq28hqY1/nJ7ivz XpXg== X-Gm-Message-State: AD7BkJJnWI2ddxmK3rUJcu1Bj0wM7fG6yQz/9yPrwL66+jCYSX39ZITdv+aRwZArK8aaKQDe X-Received: by 10.25.27.21 with SMTP id b21mr377291lfb.99.1456993726414; Thu, 03 Mar 2016 00:28:46 -0800 (PST) Received: from Hyperion.suse ([85.235.10.186]) by smtp.gmail.com with ESMTPSA id cc7sm6096650lbd.11.2016.03.03.00.28.45 for (version=TLSv1/SSLv3 cipher=OTHER); Thu, 03 Mar 2016 00:28:45 -0800 (PST) To: ace@ietf.org References: <56D72BA7.1030003@gmx.net> From: Ludwig Seitz Message-ID: <56D7F5BD.1060002@sics.se> Date: Thu, 3 Mar 2016 09:28:45 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms010904010505090709060101" Archived-At: Subject: Re: [Ace] Credential Options X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2016 08:28:50 -0000 This is a cryptographically signed message in MIME format. --------------ms010904010505090709060101 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: quoted-printable On 03/02/16 20:20, Erik Wahlstr=F6m wrote: > I think all three PSK, RPK and cert needs to be defined in the core > document. I don't think anyone should be MTI, they all have different > setups and security properties so forcing a constrained device do > implement something it will not be using is not really efficient. > > / Erik +1 /Ludwig --=20 Ludwig Seitz, PhD SICS Swedish ICT AB Ideon Science Park Building Beta 2 Scheelev=E4gen 17 SE-223 70 Lund Phone +46(0)70 349 9251 http://www.sics.se --------------ms010904010505090709060101 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC CtEwggTnMIIDz6ADAgECAhAfP2QWc8z7Bo71GhHCZ7DdMA0GCSqGSIb3DQEBCwUAMHUxCzAJ BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGll bnQgQ0EwHhcNMTYwMTA3MTE1NzM3WhcNMTcwMTA3MTE1NzM3WjA4MRcwFQYDVQQDDA5sdWR3 aWdAc2ljcy5zZTEdMBsGCSqGSIb3DQEJARYObHVkd2lnQHNpY3Muc2UwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQCiG5fxnXbdU0+3qInGZloXB0zZLM6XAu0EmTuCsWOU8eXN lCe37PTURORfLc3te4gCDcG1GrI2AuWR9MvlcYddMZt5y0T5BVWIu534vVJtG3QCuEYRJOTW B6RWQfK+dIPpZsNhgEQkYLjTHYoCu58gP0pfxNie1X7D+RxeQcq+ynNmyFdsxc2mI+dQqBKq 4zTsCNP4/jpSuovXTn8hEbbR8zkVQ2v/Gx+EO8oMIvkIEUYzkMxe3E9A7dq5DwotRDzP+y3g C4DCtI0tfIUtFjx18Pb5UMNUKZjitrOpXfheEz/igxziydri8bYpx4qGU9CNX+MvQG7Ogqju XKfQhUTTAgMBAAGjggGuMIIBqjALBgNVHQ8EBAMCBLAwHQYDVR0lBBYwFAYIKwYBBQUHAwIG CCsGAQUFBwMEMAkGA1UdEwQCMAAwHQYDVR0OBBYEFBMb8zf+BJ13fxqEl9gYiwxZ4hpmMB8G A1UdIwQYMBaAFCSBbDlhvkkPj7cbRivJKLUnSG1oMG8GCCsGAQUFBwEBBGMwYTAkBggrBgEF BQcwAYYYaHR0cDovL29jc3Auc3RhcnRzc2wuY29tMDkGCCsGAQUFBzAChi1odHRwOi8vYWlh LnN0YXJ0c3NsLmNvbS9jZXJ0cy9zY2EuY2xpZW50MS5jcnQwOAYDVR0fBDEwLzAtoCugKYYn aHR0cDovL2NybC5zdGFydHNzbC5jb20vc2NhLWNsaWVudDEuY3JsMBkGA1UdEQQSMBCBDmx1 ZHdpZ0BzaWNzLnNlMCMGA1UdEgQcMBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBGBgNV HSAEPzA9MDsGCysGAQQBgbU3AQIEMCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3RhcnRz c2wuY29tL3BvbGljeTANBgkqhkiG9w0BAQsFAAOCAQEAbgRzIj1s9U5kpXodti5kdj3ztjPb oz4pz8zNwn3qPUW8c3Zd40IFe+R5hRDuIm2aa//fmwop2mLM3+5/LnSnacaDnRfE7pP3NgqX XUuuZf9TtMLU6RUh2Z9JKs0IzWKALPhoLgnCsbtYDrF4QAoVqeNV79Lb6a3r6KdB/xFErbee OkZk/iw9HCr/jnvysYjfFQcBounseJS3JG4RNIuDpfsWPupQSAhl4s0akaakiwqOHCU7x0Ra rbCN+bg+6R5FEtSouIh53Z04JmI7LU3leo/AseQiUpJ6HqQNJYjnsCw8DDbijNhH41ZZKrvB rKMfVvlCH9VqrKW4kPGajKMEJDCCBeIwggPKoAMCAQICEGunin0K14jWUQr5WeTntOEwDQYJ KoZIhvcNAQELBQAwfTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzAp BgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMTIFN0 YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE1MTIxNjAxMDAwNVoXDTMwMTIx NjAxMDAwNVowdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNV BAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENv bSBDbGFzcyAxIENsaWVudCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL19 2vfDon2D9luC/dtbX64eG3XAtRmvmCSsu1d52DXsCR58zJQbCtB2/A5uFqNxWacpXGGtTCRk 9dEDBlmixEd8QiLkUfvHpJX/xKnmVkS6Iye8wUbYzMsDzgnpazlPg19dnSqfhM+Cevdfa89V LnUztRr2cgmCfyO9Otrh7LJDPG+4D8ZnAqDtVB8MKYJL6QgKyVhhaBc4y3bGWxKyXEtx7QIZ ZGxPwSkzK3WIN+VKNdkiwTubW5PIdopmykwvIjLPqbJK7yPwFZYekKE015OsW6FV+s4DIM8U lVS8pkIsoGGJtMuWjLL4tq2hYQuuN0jhrxK1ljz50hH23gA9cbMCAwEAAaOCAWQwggFgMA4G A1UdDwEB/wQEAwIBBjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEgYDVR0TAQH/ BAgwBgEB/wIBADAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9z ZnNjYS5jcmwwZgYIKwYBBQUHAQEEWjBYMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5zdGFy dHNzbC5jb20wMAYIKwYBBQUHMAKGJGh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL2Nh LmNydDAdBgNVHQ4EFgQUJIFsOWG+SQ+PtxtGK8kotSdIbWgwHwYDVR0jBBgwFoAUTgvvGqRA W6UXaYcwyjRoQ9BBrvIwPwYDVR0gBDgwNjA0BgRVHSAAMCwwKgYIKwYBBQUHAgEWHmh0dHA6 Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeTANBgkqhkiG9w0BAQsFAAOCAgEAi+P3h+wBi4St DwECW5zhIycjBL008HACblIf26HY0JdOruKbrWDsXUsiI0j/7Crft9S5oxvPiDtVqspBOB/y 5uzSns1lZwh7sG96bYBZpcGzGxpFNjDmQbcM3yl3WFIRS4WhNrsOY14V7y2IrUGsvetsD+bj yOngCIVeC/GmsmtbuLOzJ606tEc9uRbhjTu/b0x2Fo+/e7UkQvKzNeo7OMhijixaULyINBfC BJb+e29bLafgu6JqjOUJ9eXXj20p6q/CW+uVrZiSW57+q5an2P2i7hP85jQJcy5j4HzA0rSi F3YPhKGAWUxKPMAVGgcYoXzWydOvZ3UDsTDTagXpRDIKQLZo02wrlxY6iMFqvlzsemVf1odh QJmi7Eh5TbxI40kDGcBOBHhwnaOumZhLP+SWJQnjpLpSlUOj95uf1zo9oz9e0NgIJoz/tdfr Bzez76xtDsK0KfUDHt1/q59BvDI7RX6gVr0fQoCyMczNzCTcRXYHY0tq2J0oT+bsb6sH2b4W VWAiJKnSYaWDjdA70qHX4mq9MIjO/ZskmSY8wtAk24orAc0vwXgYanqNsBX5Yv4sN4Z9Vyrw MdLcusP7HJgRdAGKpkR2I9U4zEsNJQJewM7S4Jalo1DyPrLpL2nTET8ZrSl5Utp1UeGp/2de oprGevfnxWB+vHNQiu85o6MxggPMMIIDyAIBATCBiTB1MQswCQYDVQQGEwJJTDEWMBQGA1UE ChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRo b3JpdHkxIzAhBgNVBAMTGlN0YXJ0Q29tIENsYXNzIDEgQ2xpZW50IENBAhAfP2QWc8z7Bo71 GhHCZ7DdMA0GCWCGSAFlAwQCAQUAoIICEzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwG CSqGSIb3DQEJBTEPFw0xNjAzMDMwODI4NDVaMC8GCSqGSIb3DQEJBDEiBCB9jHGlYsdDWirJ n/9WgnIY+qohzxIYrnBN04iPp46bwTBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjAL BglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFA MAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGaBgkrBgEEAYI3EAQxgYwwgYkwdTELMAkGA1UE BhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRp ZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBD QQIQHz9kFnPM+waO9RoRwmew3TCBnAYLKoZIhvcNAQkQAgsxgYyggYkwdTELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmlj YXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQ Hz9kFnPM+waO9RoRwmew3TANBgkqhkiG9w0BAQEFAASCAQAT3nnCldg5lhBEFuYXiBARc7mk 5+Tz2vkhooMt4YCBbD1Vdqs51+AlAFGv5ALBZXUFzqLE7+tGBm+N57Y5dy13hEa2UAcdqGNF f8xWR6uBrL9mMhSPre6qnTsCgqL68L26me4M6YHu/bEXumOWq8/xuvNGU7zttoV2J7NMy89J q8lDXIQRR+wQlvGHIGVKn4cbo+a/t1ibIuGgfSxOqzLnHB6wgW1DLo5IxAY4ndeQgHVh7X3i WoSrvU6eTGR6TcaFIDGtpK5mZDPveW+0xJkKR6GrWD0IAWPTeddNsf3fjPkeNvCQCjeRu6IX dKmuodHJXLvFlgQ1T1gwN9mUAC60AAAAAAAA --------------ms010904010505090709060101-- From nobody Thu Mar 3 01:19:12 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F9CD1A6FA6 for ; Thu, 3 Mar 2016 01:19:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.901 X-Spam-Level: X-Spam-Status: No, score=-3.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uzk82nwJP1CW for ; Thu, 3 Mar 2016 01:19:10 -0800 (PST) Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A3BDC1A6F99 for ; Thu, 3 Mar 2016 01:19:09 -0800 (PST) X-AuditID: c1b4fb25-f794e6d000003d15-12-56d8018b088a Received: from ESESSHC019.ericsson.se (Unknown_Domain [153.88.183.75]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id A1.4A.15637.B8108D65; Thu, 3 Mar 2016 10:19:07 +0100 (CET) Received: from ESESSMB303.ericsson.se ([169.254.3.52]) by ESESSHC019.ericsson.se ([153.88.183.75]) with mapi id 14.03.0248.002; Thu, 3 Mar 2016 10:19:07 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: "Ace@ietf.org" , Hannes Tschofenig Thread-Topic: [Ace] Milestones Thread-Index: AQHRdKbIL/Nmd6l3gE2M3YNRQhHvJp9HcioA Date: Thu, 3 Mar 2016 09:19:06 +0000 Message-ID: References: <56D71F16.7080303@gmx.net> In-Reply-To: <56D71F16.7080303@gmx.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.0.151221 x-originating-ip: [153.88.183.17] Content-Type: text/plain; charset="utf-8" Content-ID: <17CA676A0EED9F4ABBC7E09049FAF705@ericsson.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprLIsWRmVeSWpSXmKPExsUyM2K7t243440wg3V3tC2+f+thtli68x6r A5PH4k372TyWLPnJFMAUxWWTkpqTWZZapG+XwJWx5vpPloIPPBXT2r4xNjAe4eli5OSQEDCR uH7/LguELSZx4d56ti5GLg4hgcOMEtu3fmGCcBYxSkxtvcEMUsUm4CLxoOERE4gtIhAksfvW F1YQW1hAVmLhn6WsEHE5iXPr2qFsI4kX7WvZQGwWARWJGZtawGxeAQuJ5Q/7wOYICahJLHy5 Emw+p4C6xPw3Z9hBbEagi76fWgNWwywgLnHryXwmiEsFJJbsOc8MYYtKvHz8D2gXB4eogJ5E 15EKEFNCQFFieb8ciMksoCmxfpc+xBBribXzulkhbEWJKd0P2SGOEZQ4OfMJywRG8VlIds1C 6J6FpHsWku5ZSLoXMLKuYhQtTi1Oyk03MtZLLcpMLi7Oz9PLSy3ZxAiMtINbfqvuYLz8xvEQ owAHoxIP74YV18OEWBPLiitzDzFKcDArifA6fwcK8aYkVlalFuXHF5XmpBYfYpTmYFES52X9 dDlMSCA9sSQ1OzW1ILUIJsvEwSnVwKh+Va/psALXhbqgqIn9F5Xa7jnY+57t2/DT8dUemZ2S c4WulnRvfG5wJZRfXjbPZ5722fbNiwWVRC3sOZVLIrmOfli3xENpyh7O0y3nXevP/Pq/5q63 utIX/7e14hbMahxiMkWfFHWXJFbO4Vs5U0z1b8W8bxubH0UnnbgQrr/m0fLQllx+bSWW4oxE Qy3mouJEAJCnMWCwAgAA Archived-At: Subject: Re: [Ace] Milestones X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2016 09:19:11 -0000 DQoNCk9uIDIwMTYtMDMtMDIgMTg6MTIsICJBY2Ugb24gYmVoYWxmIG9mIEhhbm5lcyBUc2Nob2Zl bmlnIg0KPGFjZS1ib3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiBoYW5uZXMudHNjaG9mZW5p Z0BnbXgubmV0PiB3cm90ZToNCg0KPg0KPioqIE1heSAyMDE2IFN1Ym1pdCAiQXV0aGVudGljYXRp b24gYW5kIEF1dGhvcml6YXRpb24gU29sdXRpb24iDQo+c3BlY2lmaWNhdGlvbiB0byB0aGUgSUVT RyBmb3IgcHVibGljYXRpb24gYXMgYSBQcm9wb3NlZCBTdGFuZGFyZC4NCj4NCj4tLT4gSGVyZSB0 aGUgcXVlc3Rpb24gaXMgd2hhdCB3ZSBleHBlY3QgdG8gaGF2ZSBjb21wbGV0ZWQgYnkgTWF5Lg0K PkhlcmUgYXJlIHBvc3NpYmxlIG9wdGlvbnM6DQo+DQo+ICogU3BlY2lmaWNhdGlvbiBjb21wbGV0 ZWQuDQo+ICogUmVmZXJlbmNlIGltcGxlbWVudGF0aW9uIGF2YWlsYWJsZS4NCj4gKiBJbnRlcm9w ZXJhYmlsaXR5IHRlc3RpbmcgZG9uZS4NCj4gKiBGb3JtYWwgdmVyaWZpY2F0aW9uIG9mIHRoZSBz ZWN1cml0eSBwYXJ0cy4NCj4NCj5BbHNvLCB0aGUgYW1vdW50IG9mIHNwZWNpZmljYXRpb24gd29y ayBkZXBlbmRzIGEgYml0IG9uIHlvdXIgZmVlZGJhY2sgb24NCj50aGUgaXRlbXMgd2UgYXJlIGdv aW5nIHRvIGFzayBmZWVkYmFjayBmb3IuDQo+DQo+SXQgd291bGQgYmUgZ29vZCB0byBrbm93IHdo ZXRoZXIgeW91IGhhdmUgYW4gb3BpbmlvbiBhYm91dCB0aGVzZSBpc3N1ZXMuDQoNCkkgdGhpbmsg dGhpcyB0aW1lIGxpbmUgaXMgdG9vIG9wdGltaXN0aWMgZm9yIGFueSBvZiB0aGUgYWJvdmUuIENv bnNpZGVyaW5nDQp0aGF0IHdlIHNwZW50IG1vc3Qgb2YgbGFzdCB5ZWFyIHRvIGRldGVybWluZSB3 aGljaCBvZiB0aGUgY2FuZGlkYXRlcw0Kc29sdXRpb25zIHdlIHdlcmUgZ29pbmcgdG8gdGFrZSBh cyBhICJzdGFydGluZyBwb2ludCIsIGFuZCB0aGF0IHdlIGhhdmUNCnJlY2VpdmVkIG1hbnkgcmV2 aWV3cyBjYWxsaW5nIGZvciBkaWZmZXJlbnQgdHlwZXMgb2YgY29uc2lkZXJhdGlvbnMgYW5kDQpl eHRlbnNpb25zLCBhbmQgdGhlIG9uZ29pbmcgZGlzY3Vzc2lvbiBhYm91dCBoYW5kbGluZyB0aGUg ZGlmZmVyZW50DQpkZXBsb3ltZW50IG9wdGlvbnMsIEkgdGhpbmsgaXQgaXMgcmVhc29uYWJsZSB0 byBnaXZlIHRoaXMgd29yayBpdGVtIG1vcmUNCnRpbWUgdG8gY29tcGxldGUuDQoNCg0KR8O2cmFu DQoNCg== From nobody Thu Mar 3 01:47:40 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD8971A87EF for ; Thu, 3 Mar 2016 01:47:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.9 X-Spam-Level: X-Spam-Status: No, score=-3.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fFuNCONKKYfJ for ; Thu, 3 Mar 2016 01:47:38 -0800 (PST) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 885571A882C for ; Thu, 3 Mar 2016 01:47:37 -0800 (PST) X-AuditID: c1b4fb3a-f79ce6d000005138-cb-56d808375989 Received: from ESESSHC005.ericsson.se (Unknown_Domain [153.88.183.33]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id 7F.39.20792.73808D65; Thu, 3 Mar 2016 10:47:35 +0100 (CET) Received: from ESESSMB303.ericsson.se ([169.254.3.52]) by ESESSHC005.ericsson.se ([153.88.183.33]) with mapi id 14.03.0248.002; Thu, 3 Mar 2016 10:47:34 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: "Ace@ietf.org" , Hannes Tschofenig Thread-Topic: [Ace] Deployment Options Thread-Index: AQHRdKpW2n5qYqA50EqdLwCS8CIhm59HehaA Date: Thu, 3 Mar 2016 09:47:34 +0000 Message-ID: References: <56D7250E.6020300@gmx.net> In-Reply-To: <56D7250E.6020300@gmx.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.0.151221 x-originating-ip: [153.88.183.148] Content-Type: text/plain; charset="utf-8" Content-ID: <3C1A68DD6D399F49A5C5F303F9CB80E7@ericsson.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprJIsWRmVeSWpSXmKPExsUyM2K7oq45x40wgymdohbfv/UwWyzdeY/V gclj8ab9bB5LlvxkCmCK4rJJSc3JLEst0rdL4Mroe+FY8ESm4trUPYwNjC0yXYycHBICJhIt L94yQthiEhfurWcDsYUEDjNKbDsg38XIBWQvYpToXtYFVsQm4CLxoOERE4gtIhAksfvWF9Yu Rg4OYQFViRVvKyHCahKbn69ggbCNJN5+Pw82k0VAReLQu++sIDavgIXEn0ubWSF2qUlcmzMP rIZTQF3iyMVmsFWMQPd8P7UGbBWzgLjErSfzmSDuFJBYsuc8M4QtKvHy8T+wE0QF9CS6jlRA hJUkGpc8AQszC2hKrN+lD2FaS0zdWA0xUFFiSvdDdohjBCVOznzCMoFRfBaSXbMQmmchNM9C 0jwLSfMCRtZVjKLFqcXFuelGRnqpRZnJxcX5eXp5qSWbGIERdnDLb6sdjAefOx5iFOBgVOLh 3bDiepgQa2JZcWXuIUYJDmYlEd7NzDfChHhTEiurUovy44tKc1KLDzFKc7AoifOyfbocJiSQ nliSmp2aWpBaBJNl4uCUamAsj131oeH0lVudJySUDwbxr9y7222X/p3SdT+bdEK/vWA3SlMQ 5G66z5jRlatS/IB1z7TubSdkftUFrhV7Eer7fPf9eexr5D+s+L9iU0DqAVPm5fP+rspTnbfr SIhcmdyuwhvLZiayZwfK536927dOY/0eSTl9gz0+Yi9bTs/Z/Xq9wJSCO0IPlViKMxINtZiL ihMBETf5VKwCAAA= Archived-At: Subject: Re: [Ace] Deployment Options X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2016 09:47:40 -0000 DQoNCg0KT24gMjAxNi0wMy0wMiAxODozOCwgIkFjZSBvbiBiZWhhbGYgb2YgSGFubmVzIFRzY2hv ZmVuaWciDQo8YWNlLWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGhhbm5lcy50c2Nob2Zl bmlnQGdteC5uZXQ+IHdyb3RlOg0KDQo+SGkgYWxsLA0KPg0KPjxkcmFmdC1pZXRmLWFjZS1vYXV0 aC1hdXRoei0wMT4gZGVzY3JpYmVzIDYgZGVwbG95bWVudCBvcHRpb25zIGluDQo+U2VjdGlvbiA2 Og0KPg0KPiAgNi4gIERlcGxveW1lbnQgU2NlbmFyaW9zICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gIDE4DQo+ICAgICA2LjEuICBDbGllbnQgYW5kIFJlc291cmNlIFNl cnZlciBhcmUgT2ZmbGluZSAgLiAuIC4gLiAuIC4gLiAuIC4gIDE5DQo+ICAgICA2LjIuICBSZXNv dXJjZSBTZXJ2ZXIgT2ZmbGluZSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDIy DQo+ICAgICA2LjMuICBUb2tlbiBJbnRyb3NwZWN0aW9uIHdpdGggYW4gT2ZmbGluZSBDbGllbnQg IC4gLiAuIC4gLiAuIC4gIDI2DQo+ICAgICA2LjQuICBBbHdheXMtT24gQ29ubmVjdGl2aXR5ICAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDMwDQo+ICAgICA2LjUuICBUb2tlbi1s ZXNzIEF1dGhvcml6YXRpb24gIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDMxDQo+ ICAgICA2LjYuICBTZWN1cmluZyBHcm91cCBDb21tdW5pY2F0aW9uICAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gIDM0DQo+DQo+RGVzY3JpYmluZyBhbGwgNiBkZXBsb3ltZW50IG9wdGlvbnMg YXQgYSBsZXZlbCB0aGF0IGFsbG93cyBpbnRlcm9wZXJhYmxlDQo+aW1wbGVtZW50YXRpb25zIGlu IGEgc2luZ2xlIGRvY3VtZW50LCBuYW1lbHkgaW4NCj5kcmFmdC1pZXRmLWFjZS1vYXV0aC1hdXRo ej4sIG1ha2UgdGhlIGRvY3VtZW50IGxvbmdlciAob2J2aW91c2x5KSwNCj5yZXF1aXJlcyBhIGZh aXIgYW1vdW50IG9mIHdvcmssIGFuZCB0YWtlcyBsb25nZXIuDQo+DQo+Rm9yIHRoaXMgcmVhc29u IHdlIGFyZSBhc2tpbmcgZm9yIHlvdXIgcHJpb3JpdGllcy4gV2hpY2ggb2YgdGhlc2UNCj5kZXBs b3ltZW50IG9wdGlvbnMgYXJlIG1vcmUgaW1wb3J0YW50IGZvciB5b3UgdGhhbiBvdGhlcnMuDQo+ DQo+UGxlYXNlIGxldCB1cyBrbm93IHdoaWNoIG9mIHRoZW0gd291bGQgeW91IGluY2x1ZGUgaW4g dGhlIFdHIGRvY3VtZW50LA0KPndoaWNoIG9mIHRoZW0gd291bGQgeW91IHdvdWxkIGxpa2UgdG8g c2VlIGNvdmVyZWQgaW4gc2VwYXJhdGUgZG9jdW1lbnRzLA0KPmFuZCB3aGljaCBvZiB0aGVtIHdv dWxkIHlvdSBkcm9wPw0KDQpUaGUgcmVhc29uIGZvciB3cml0aW5nIHNlY3Rpb24gNiB3YXMgdG8g ZGVtb25zdHJhdGUsIGJ5IG1lYW5zIG9mIGV4YW1wbGVzLA0KdGhhdCB0aGUgT0F1dGggcHJvZmls ZSB3ZSBhcmUgd29ya2luZyBvbiBjYW4gYWNjb21tb2RhdGUgYSB3aWRlIHZhcmlldHkgb2YNCmRl cGxveW1lbnQgc2NlbmFyaW9zLg0KDQpXZSBnb3Qgc3VwcG9ydCBpbiB0aGUgbWVldGluZyB5ZXN0 ZXJkYXkgdGhhdCBhbGwgdGhlc2Ugc2NlbmFyaW9zIHNob3VsZCBiZQ0Kc3VwcG9ydGVkIGluIHRo ZSBBQ0UgZnJhbWV3b3JrLCBhbmQgdGhlIHByb3Bvc2FsIHRvIGNvbnNpZGVyIOKAnHByb2ZpbGVz IiBvZg0KdGhlIEFDRSBmcmFtZXdvcmsgdG8gYWRkcmVzcyBzcGVjaWZpYyBzY2VuYXJpb3Mgd2Fz IGFsc28gd2VsbCByZWNlaXZlZCwNCndpdGggdGhlIHJlbWFyayB0aGF0IGl0IG11c3QgYmUgcG9z c2libGUgZm9yIGEgY2xpZW50IHRvIHN1cHBvcnQgbXVsdGlwbGUNCnByb2ZpbGVzIGFuZCBrbm93 IHdoaWNoIHByb2ZpbGUgdG8gdXNlLg0KDQpUbyBwcm9ncmVzcyBvbiB0aGUgZnJhbWV3b3JrIGFu ZCBhdCB0aGUgc2FtZSB0aW1lIGVuc3VyZSB0aGF0IGRpZmZlcmVudA0Kc2NlbmFyaW9zIGNhbiBi ZSBzdXBwb3J0ZWQgb25lIHByb3Bvc2FsIHdhcyB0byBwcm9maWxlIGEgZmV3IHNjZW5hcmlvcw0K dGhhdCB3ZXJlIHN1ZmZpY2llbnRseSBkaWZmZXJlbnQuIE90aGVyIHNjZW5hcmlvcyBjb3VsZCBw b3RlbnRpYWxseSBiZQ0Kc2VwYXJhdGUgZHJhZnRzIHdpdGggZGlmZmVyZW50IHRpbWVsaW5lcy4N Cg0KQWxzbywgdGhlcmUgaXMgYSBkaWZmZXJlbmNlIGJldHdlZW4gImRlc2NyaWJpbmcgYSBkZXBs b3ltZW50IG9wdGlvbiIgaW4NCnRoZSBzZW5zZSBvZiB3cml0aW5nIGRvd24gZGV0YWlscyBvZiBh biBleGFtcGxlICh3aGljaCBpcyBjdXJyZW50bHkgdGhlDQpjb250ZW50IG9mIHNlY3Rpb24gNikg YW5kIGRlZmluaW5nIHdoYXQgbWVzc2FnZXMgYW5kIG1lc3NhZ2UgZmllbGRzIG9mIHRoZQ0KZnJh bWV3b3JrIHRoYXQgYXJlIHVzZWQgYW5kIGhvdyAod2hpY2ggaXMgd2hhdCB3ZSBuZWVkIHRvIHNw ZWNpZnkpLg0KDQoNCkfDtnJhbg0KDQoNCg0KPg0KPkhlcmUgYXJlIHRoZSBzbGlkZXMgZnJvbSB0 aGUgQUNFIHZpcnR1YWwgaW50ZXJpbSBtZWV0aW5nIHByb3ZpZGluZw0KPmZ1cnRoZXIgYmFja2dy b3VuZCBpbmZvcm1hdGlvbjoNCj5odHRwczovL3d3dy5pZXRmLm9yZy9wcm9jZWVkaW5ncy9pbnRl cmltLzIwMTYvMDMvMDIvYWNlL3NsaWRlcy9zbGlkZXMtaW50ZQ0KPnJpbS0yMDE2LWFjZS0xLTEu cGRmDQo+DQo+RGVhZGxpbmU6IDE2dGggTWFyY2ggMjAxNg0KPg0KPkNpYW8NCj5IYW5uZXMgJiBL ZXBlbmcNCj4NCg0K From nobody Thu Mar 3 01:50:10 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8A7C51A905D for ; Thu, 3 Mar 2016 01:50:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.9 X-Spam-Level: X-Spam-Status: No, score=-3.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FDwP_1cTD1Ha for ; Thu, 3 Mar 2016 01:50:06 -0800 (PST) Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3E2F31A882C for ; Thu, 3 Mar 2016 01:50:06 -0800 (PST) X-AuditID: c1b4fb25-f794e6d000003d15-0e-56d808ccaa13 Received: from ESESSHC006.ericsson.se (Unknown_Domain [153.88.183.36]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id 07.91.15637.CC808D65; Thu, 3 Mar 2016 10:50:04 +0100 (CET) Received: from ESESSMB303.ericsson.se ([169.254.3.52]) by ESESSHC006.ericsson.se ([153.88.183.36]) with mapi id 14.03.0248.002; Thu, 3 Mar 2016 10:50:03 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: =?utf-8?B?RXJpayBXYWhsc3Ryw7Zt?= , "Hannes Tschofenig" Thread-Topic: [Ace] DTLS and OSCOAP Thread-Index: AQHRdK1XY01mkeMWy0aLtJOrE1vpmp9GdFOAgAEGbwA= Date: Thu, 3 Mar 2016 09:50:03 +0000 Message-ID: References: <56D72A16.5050607@gmx.net> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.0.151221 x-originating-ip: [153.88.183.149] Content-Type: multipart/alternative; boundary="_000_D2FDC72F4EEC3goranselanderericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrAIsWRmVeSWpSXmKPExsUyM2K7iu4ZjhthBocXylh8/9bDbPF1QhOr xdKd91gdmD0Wb9rP5rFkyU8mjzXTZrAEMEdx2aSk5mSWpRbp2yVwZaz4eIC5YLJDRc+cJ2wN jCvsuhg5OCQETCS2twV0MXICmWISF+6tZ+ti5OIQEjjMKPH10lRGCGcRo8TJfQ0sIFVsAi4S DxoeMYHYIgIlEps/v2cHsZkFFCV2zzoLZgsLKElsP/KAEaJGWWLH6z1Q9VYSq1uXsILYLAIq Ep1HljKD2LwCFhKrW/aB1QsJ5Eoc2H8frJ5TIFBix/q9YDWMQNd9P7WGCWKXuMStJ/OZIK4W kFiy5zwzhC0q8fLxP1aQx0QF9CS6jlRAhJUk1h7ezgLRGitxe+F6doi1ghInZz5hmcAoNgvJ 1FlIymYhKZsFNJVZQFNi/S79WVAPT+l+yA5ha0i0zpkLZVtLrLz2gwVZzQJGjlWMosWpxUm5 6UbGeqlFmcnFxfl5enmpJZsYgfF6cMtv1R2Ml984HmIU4GBU4uHdsOJ6mBBrYllxZe4hRgkO ZiUR3s3MN8KEeFMSK6tSi/Lji0pzUosPMUpzsCiJ87J+uhwmJJCeWJKanZpakFoEk2Xi4JRq YMz5lnA6pV70Rbn22Uab9HLJLu/99xr2TmWSyjtgXHUw9KO0vsH0/18T53+Mbg+6bLy4MHSn xi7HM18Mj2fzz9FTU5RmdThYlpIUOpfB24/j0rPaOddu/L273u/yiZ8nk1KKTAtZ85dsMJ8q lXLdtzFe031LZMWer61J4mLzE1dEqz7J7X57V4mlOCPRUIu5qDgRAH+2pQzTAgAA Archived-At: Cc: "Ace@ietf.org" Subject: Re: [Ace] DTLS and OSCOAP X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2016 09:50:08 -0000 --_000_D2FDC72F4EEC3goranselanderericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQoNCkZyb206IEFjZSA8YWNlLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOmFjZS1ib3VuY2VzQGll dGYub3JnPj4gb24gYmVoYWxmIG9mIEVyaWsgV2FobHN0csO2bSA8ZXJpa0B3YWhsc3Ryb21zdGVr bmlza2Euc2U8bWFpbHRvOmVyaWtAd2FobHN0cm9tc3Rla25pc2thLnNlPj4NCkRhdGU6IFdlZG5l c2RheSAyIE1hcmNoIDIwMTYgYXQgMjA6MTANClRvOiBIYW5uZXMgVHNjaG9mZW5pZyA8aGFubmVz LnRzY2hvZmVuaWdAZ214Lm5ldDxtYWlsdG86aGFubmVzLnRzY2hvZmVuaWdAZ214Lm5ldD4+DQpD YzogIkFjZUBpZXRmLm9yZzxtYWlsdG86QWNlQGlldGYub3JnPiIgPEFjZUBpZXRmLm9yZzxtYWls dG86QWNlQGlldGYub3JnPj4NClN1YmplY3Q6IFJlOiBbQWNlXSBEVExTIGFuZCBPU0NPQVANCg0K KzEgb24NCioqIE9wdGlvbiAjNDogb3B0aW9uICMyICsgb3B0aW9uICMzDQoNCisxDQoNCkfDtnJh bg0KDQoNCi8gRXJpaw0KDQpPbiBXZWQsIE1hciAyLCAyMDE2IGF0IDY6NTkgUE0sIEhhbm5lcyBU c2Nob2ZlbmlnIDxoYW5uZXMudHNjaG9mZW5pZ0BnbXgubmV0PG1haWx0bzpoYW5uZXMudHNjaG9m ZW5pZ0BnbXgubmV0Pj4gd3JvdGU6DQpIaSBhbGwsDQoNCmluIHNwZWNpZnlpbmcgdGhlIGRldGFp bHMgZm9yIHRoZSBjb21tdW5pY2F0aW9uIGJldHdlZW4gdGhlIGNsaWVudCBhbmQNCnRoZSBSUyB3 ZSBuZWVkIHRvIHNldHRsZSBvbiBhIHNlY3VyaXR5IG1lY2hhbmlzbS4NCg0KVGhlcmUgYXJlIGZv dXIgb3B0aW9uczoNCg0KKiBPcHRpb24gIzE6IERvIG5vdCBzcGVjaWZ5IGEgc29sdXRpb24gaW4g dGhlIFdHIGRvY3VtZW50ICgxKQ0KDQoqIE9wdGlvbiAjMjogU3BlY2lmeSBhIERUTFMtYmFzZWQg c29sdXRpb24NCg0KKiBPcHRpb24gIzM6IFNwZWNpZnkgYW4gYXBwbGljYXRpb24gbGF5ZXIgc29s dXRpb24gKGZvciBleGFtcGxlIHVzaW5nDQpPU0NPQVApDQoNCioqIE9wdGlvbiAjNDogb3B0aW9u ICMyICsgb3B0aW9uICMzDQoNCk5vdGU6IFdlIGFyZSBhc2tpbmcgZm9yIGZlZWRiYWNrIGFib3V0 IHdoYXQgc2hvdWxkIGdvIGludG8NCmRyYWZ0LWlldGYtYWNlLW9hdXRoLWF1dGh6LiBUaGVyZSBp cyBhbHdheXMgdGhlIHBvc3NpYmlsaXR5IHRvIHNwZWNpZnkNCm90aGVyIHNvbHV0aW9ucyBpbiBz ZXBhcmF0ZSBkb2N1bWVudHMgaW4gcGFyYWxsZWwgb3IgbGF0ZXIuDQoNCkhlcmUgYXJlIHRoZSBz bGlkZXMgZnJvbSB0aGUgQUNFIHZpcnR1YWwgaW50ZXJpbSBtZWV0aW5nIHByb3ZpZGluZw0KZnVy dGhlciBiYWNrZ3JvdW5kIGluZm9ybWF0aW9uOg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcHJvY2Vl ZGluZ3MvaW50ZXJpbS8yMDE2LzAzLzAyL2FjZS9zbGlkZXMvc2xpZGVzLWludGVyaW0tMjAxNi1h Y2UtMS00LnBkZg0KDQpEZWFkbGluZTogMTZ0aCBNYXJjaCAyMDE2DQoNCkNpYW8NCkhhbm5lcyAm IEtlcGVuZw0KDQpQUzogKDEpIFRoaXMgd2FzIHRoZSBhcHByb2FjaCB0aGF0IHdhcyBzZWxlY3Rl ZCBpbiBPQXV0aCB3aGVyZSB0aGUNCkJlYXJlciBUb2tlbiBzcGVjaWZpY2F0aW9uIHdhcyBwdWJs aXNoZWQgYXMgYSBzZXBhcmF0ZSBSRkMuDQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18NCkFjZSBtYWlsaW5nIGxpc3QNCkFjZUBpZXRmLm9yZzxtYWls dG86QWNlQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9h Y2UNCg0KDQo= --_000_D2FDC72F4EEC3goranselanderericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1zaXplOiAx NHB4OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiPg0KPGRpdj48YnI+DQo8L2Rp dj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8c3BhbiBpZD0iT0xLX1NSQ19CT0RZX1NFQ1RJT04iPg0K PGRpdiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaTsgZm9udC1zaXplOjExcHQ7IHRleHQtYWxp Z246bGVmdDsgY29sb3I6YmxhY2s7IEJPUkRFUi1CT1RUT006IG1lZGl1bSBub25lOyBCT1JERVIt TEVGVDogbWVkaXVtIG5vbmU7IFBBRERJTkctQk9UVE9NOiAwaW47IFBBRERJTkctTEVGVDogMGlu OyBQQURESU5HLVJJR0hUOiAwaW47IEJPUkRFUi1UT1A6ICNiNWM0ZGYgMXB0IHNvbGlkOyBCT1JE RVItUklHSFQ6IG1lZGl1bSBub25lOyBQQURESU5HLVRPUDogM3B0Ij4NCjxzcGFuIHN0eWxlPSJm b250LXdlaWdodDpib2xkIj5Gcm9tOiA8L3NwYW4+QWNlICZsdDs8YSBocmVmPSJtYWlsdG86YWNl LWJvdW5jZXNAaWV0Zi5vcmciPmFjZS1ib3VuY2VzQGlldGYub3JnPC9hPiZndDsgb24gYmVoYWxm IG9mIEVyaWsgV2FobHN0csO2bSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmVyaWtAd2FobHN0cm9tc3Rl a25pc2thLnNlIj5lcmlrQHdhaGxzdHJvbXN0ZWtuaXNrYS5zZTwvYT4mZ3Q7PGJyPg0KPHNwYW4g c3R5bGU9ImZvbnQtd2VpZ2h0OmJvbGQiPkRhdGU6IDwvc3Bhbj5XZWRuZXNkYXkgMiBNYXJjaCAy MDE2IGF0IDIwOjEwPGJyPg0KPHNwYW4gc3R5bGU9ImZvbnQtd2VpZ2h0OmJvbGQiPlRvOiA8L3Nw YW4+SGFubmVzIFRzY2hvZmVuaWcgJmx0OzxhIGhyZWY9Im1haWx0bzpoYW5uZXMudHNjaG9mZW5p Z0BnbXgubmV0Ij5oYW5uZXMudHNjaG9mZW5pZ0BnbXgubmV0PC9hPiZndDs8YnI+DQo8c3BhbiBz dHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCI+Q2M6IDwvc3Bhbj4mcXVvdDs8YSBocmVmPSJtYWlsdG86 QWNlQGlldGYub3JnIj5BY2VAaWV0Zi5vcmc8L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86 QWNlQGlldGYub3JnIj5BY2VAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxzcGFuIHN0eWxlPSJmb250 LXdlaWdodDpib2xkIj5TdWJqZWN0OiA8L3NwYW4+UmU6IFtBY2VdIERUTFMgYW5kIE9TQ09BUDxi cj4NCjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIGlkPSJNQUNfT1VUTE9P S19BVFRSSUJVVElPTl9CTE9DS1FVT1RFIiBzdHlsZT0iQk9SREVSLUxFRlQ6ICNiNWM0ZGYgNSBz b2xpZDsgUEFERElORzowIDAgMCA1OyBNQVJHSU46MCAwIDAgNTsiPg0KPGRpdj4NCjxkaXY+DQo8 ZGl2IGRpcj0ibHRyIj4mIzQzOzEgb24mbmJzcDsNCjxkaXY+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMi44cHgiPioqIE9wdGlvbiAjNDogb3B0aW9uICMyICYjNDM7IG9wdGlvbiAjMzwvc3Bhbj48 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvc3Bhbj4NCjxk aXY+PGJyPg0KPC9kaXY+DQo8ZGl2PiYjNDM7MTwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxk aXY+R8O2cmFuPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPHNwYW4gaWQ9Ik9MS19TUkNfQk9E WV9TRUNUSU9OIj4NCjxibG9ja3F1b3RlIGlkPSJNQUNfT1VUTE9PS19BVFRSSUJVVElPTl9CTE9D S1FVT1RFIiBzdHlsZT0iQk9SREVSLUxFRlQ6ICNiNWM0ZGYgNSBzb2xpZDsgUEFERElORzowIDAg MCA1OyBNQVJHSU46MCAwIDAgNTsiPg0KPGRpdj4NCjxkaXY+DQo8ZGl2IGRpcj0ibHRyIj4NCjxk aXY+PGJyIHN0eWxlPSJmb250LXNpemU6MTIuOHB4Ij4NCjwvZGl2Pg0KPGRpdj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEyLjhweCI+LyBFcmlrPC9zcGFuPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNs YXNzPSJnbWFpbF9leHRyYSI+PGJyPg0KPGRpdiBjbGFzcz0iZ21haWxfcXVvdGUiPk9uIFdlZCwg TWFyIDIsIDIwMTYgYXQgNjo1OSBQTSwgSGFubmVzIFRzY2hvZmVuaWcgPHNwYW4gZGlyPSJsdHIi Pg0KJmx0OzxhIGhyZWY9Im1haWx0bzpoYW5uZXMudHNjaG9mZW5pZ0BnbXgubmV0IiB0YXJnZXQ9 Il9ibGFuayI+aGFubmVzLnRzY2hvZmVuaWdAZ214Lm5ldDwvYT4mZ3Q7PC9zcGFuPiB3cm90ZTo8 YnI+DQo8YmxvY2txdW90ZSBjbGFzcz0iZ21haWxfcXVvdGUiIHN0eWxlPSJtYXJnaW46MCAwIDAg LjhleDtib3JkZXItbGVmdDoxcHggI2NjYyBzb2xpZDtwYWRkaW5nLWxlZnQ6MWV4Ij4NCkhpIGFs bCw8YnI+DQo8YnI+DQppbiBzcGVjaWZ5aW5nIHRoZSBkZXRhaWxzIGZvciB0aGUgY29tbXVuaWNh dGlvbiBiZXR3ZWVuIHRoZSBjbGllbnQgYW5kPGJyPg0KdGhlIFJTIHdlIG5lZWQgdG8gc2V0dGxl IG9uIGEgc2VjdXJpdHkgbWVjaGFuaXNtLjxicj4NCjxicj4NClRoZXJlIGFyZSBmb3VyIG9wdGlv bnM6PGJyPg0KPGJyPg0KKiBPcHRpb24gIzE6IERvIG5vdCBzcGVjaWZ5IGEgc29sdXRpb24gaW4g dGhlIFdHIGRvY3VtZW50ICgxKTxicj4NCjxicj4NCiogT3B0aW9uICMyOiBTcGVjaWZ5IGEgRFRM Uy1iYXNlZCBzb2x1dGlvbjxicj4NCjxicj4NCiogT3B0aW9uICMzOiBTcGVjaWZ5IGFuIGFwcGxp Y2F0aW9uIGxheWVyIHNvbHV0aW9uIChmb3IgZXhhbXBsZSB1c2luZzxicj4NCk9TQ09BUCk8YnI+ DQo8YnI+DQoqKiBPcHRpb24gIzQ6IG9wdGlvbiAjMiAmIzQzOyBvcHRpb24gIzM8YnI+DQo8YnI+ DQpOb3RlOiBXZSBhcmUgYXNraW5nIGZvciBmZWVkYmFjayBhYm91dCB3aGF0IHNob3VsZCBnbyBp bnRvPGJyPg0KZHJhZnQtaWV0Zi1hY2Utb2F1dGgtYXV0aHouIFRoZXJlIGlzIGFsd2F5cyB0aGUg cG9zc2liaWxpdHkgdG8gc3BlY2lmeTxicj4NCm90aGVyIHNvbHV0aW9ucyBpbiBzZXBhcmF0ZSBk b2N1bWVudHMgaW4gcGFyYWxsZWwgb3IgbGF0ZXIuPGJyPg0KPGJyPg0KSGVyZSBhcmUgdGhlIHNs aWRlcyBmcm9tIHRoZSBBQ0UgdmlydHVhbCBpbnRlcmltIG1lZXRpbmcgcHJvdmlkaW5nPGJyPg0K ZnVydGhlciBiYWNrZ3JvdW5kIGluZm9ybWF0aW9uOjxicj4NCjxhIGhyZWY9Imh0dHBzOi8vd3d3 LmlldGYub3JnL3Byb2NlZWRpbmdzL2ludGVyaW0vMjAxNi8wMy8wMi9hY2Uvc2xpZGVzL3NsaWRl cy1pbnRlcmltLTIwMTYtYWNlLTEtNC5wZGYiIHJlbD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxh bmsiPmh0dHBzOi8vd3d3LmlldGYub3JnL3Byb2NlZWRpbmdzL2ludGVyaW0vMjAxNi8wMy8wMi9h Y2Uvc2xpZGVzL3NsaWRlcy1pbnRlcmltLTIwMTYtYWNlLTEtNC5wZGY8L2E+PGJyPg0KPGJyPg0K RGVhZGxpbmU6IDE2dGggTWFyY2ggMjAxNjxicj4NCjxicj4NCkNpYW88YnI+DQpIYW5uZXMgJmFt cDsgS2VwZW5nPGJyPg0KPGJyPg0KUFM6ICgxKSBUaGlzIHdhcyB0aGUgYXBwcm9hY2ggdGhhdCB3 YXMgc2VsZWN0ZWQgaW4gT0F1dGggd2hlcmUgdGhlPGJyPg0KQmVhcmVyIFRva2VuIHNwZWNpZmlj YXRpb24gd2FzIHB1Ymxpc2hlZCBhcyBhIHNlcGFyYXRlIFJGQy48YnI+DQo8YnI+DQo8YnI+DQpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NCkFjZSBt YWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86QWNlQGlldGYub3JnIj5BY2VAaWV0Zi5v cmc8L2E+PGJyPg0KPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9hY2UiIHJlbD0ibm9yZWZlcnJlciIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vd3d3LmlldGYu b3JnL21haWxtYW4vbGlzdGluZm8vYWNlPC9hPjxicj4NCjxicj4NCjwvYmxvY2txdW90ZT4NCjwv ZGl2Pg0KPGJyPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9zcGFu Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_D2FDC72F4EEC3goranselanderericssoncom_-- From nobody Thu Mar 3 02:55:11 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 065C71A8A16 for ; Thu, 3 Mar 2016 02:55:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Pn5msnZPyVYa for ; Thu, 3 Mar 2016 02:55:07 -0800 (PST) Received: from relay4-d.mail.gandi.net (relay4-d.mail.gandi.net [217.70.183.196]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 988CD1A8A15 for ; Thu, 3 Mar 2016 02:55:07 -0800 (PST) Received: from mfilter29-d.gandi.net (mfilter29-d.gandi.net [217.70.178.160]) by relay4-d.mail.gandi.net (Postfix) with ESMTP id 16F5317210C; Thu, 3 Mar 2016 11:55:06 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at mfilter29-d.gandi.net Received: from relay4-d.mail.gandi.net ([IPv6:::ffff:217.70.183.196]) by mfilter29-d.gandi.net (mfilter29-d.gandi.net [::ffff:10.0.15.180]) (amavisd-new, port 10024) with ESMTP id dkinlXVpeTTc; Thu, 3 Mar 2016 11:55:03 +0100 (CET) X-Originating-IP: 93.199.254.229 Received: from nar.local (p5DC7FEE5.dip0.t-ipconnect.de [93.199.254.229]) (Authenticated sender: cabo@cabo.im) by relay4-d.mail.gandi.net (Postfix) with ESMTPSA id B0631172111; Thu, 3 Mar 2016 11:55:02 +0100 (CET) Message-ID: <56D81805.70508@tzi.org> Date: Thu, 03 Mar 2016 11:55:01 +0100 From: Carsten Bormann User-Agent: Postbox 4.0.8 (Macintosh/20151105) MIME-Version: 1.0 To: Hannes Tschofenig References: <56D72A16.5050607@gmx.net> In-Reply-To: <56D72A16.5050607@gmx.net> X-Enigmail-Version: 1.2.3 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: "Ace@ietf.org" Subject: Re: [Ace] DTLS and OSCOAP X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2016 10:55:10 -0000 We had a slightly different set of options when we looked at this in the phone meeting. What I said (and what I think received agreement in the room) was to do the DTLS-based version in the initial WG document, and to be ready to do an "object security" style solution once the foundation for that becomes available -- possibly later in a separate document or possibly right in the initial WG document. So this would be your option 4, but with the twist that we are cognizant the "object security" solution might not become ready at the same time. Grüße, Carsten Hannes Tschofenig wrote: > * Option #2: Specify a DTLS-based solution > > * Option #3: Specify an application layer solution (for example using > OSCOAP) > > ** Option #4: option #2 + option #3 From nobody Thu Mar 3 03:13:43 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98C481A8BC1 for ; Thu, 3 Mar 2016 03:13:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.606 X-Spam-Level: X-Spam-Status: No, score=-2.606 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.006, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QgqSJi1kZ1Jo for ; Thu, 3 Mar 2016 03:13:39 -0800 (PST) Received: from mout.gmx.net (mout.gmx.net [212.227.15.18]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 691381A8BC0 for ; Thu, 3 Mar 2016 03:13:39 -0800 (PST) Received: from [192.168.10.131] ([80.92.123.193]) by mail.gmx.com (mrgmx001) with ESMTPSA (Nemesis) id 0MXq3L-1aQFR13iK7-00WpET for ; Thu, 03 Mar 2016 12:13:37 +0100 To: "Ace@ietf.org" References: <56D72BA7.1030003@gmx.net> From: Hannes Tschofenig Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9 X-Enigmail-Draft-Status: N1110 Message-ID: <56D81C5F.3000100@gmx.net> Date: Thu, 3 Mar 2016 12:13:35 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <56D72BA7.1030003@gmx.net> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="3OkPB2b6UPcO88JAWwAGvbkxCKXSJ4pvK" X-Provags-ID: V03:K0:rQcpdXhwaTQEHK71b5rhILL8vVsht+R2nB++qRHma99tH8zFdFr UsxnnkZKXRq9xcHDIYWXDZ6AjrayG/COqaZptORoCHIOGJEQCVy8EjXYr+weLgasQli365Y PCAYoY+oujhLUIeQVPXTeGjCFHSaC6G63z4WNFLpqNler3lTkQInjkMtpOvGMJtBYB9qEip qQ23C2k3N9Wu2LqB9mQrg== X-UI-Out-Filterresults: notjunk:1;V01:K0:t1Ot3g1z4vI=:SEAg3qsWGsHS+6y0/45a8Q hXL6s7yELtmaCvxM1t6SrnPTml+hip0+3zFxfzACVzUmulpJlfa+NAfr2ksHZxYI+FmC65C4g HZG1dGGWPKtrhMGZbaTU2RMjvbb7RyK8XSK0R8xkhkCI31QxjoFtdxkl71pUjVboAwoOa5mf+ RATFD07vuulMSMCSql9zmg5pkSXjQFY8oVVll3u3lljU85PUnwnHqfJ/BRjwia1IvzCN/7rCP 3tAOPXz7G3KbX0M3A3H/QI7p/d4r0X5RMKMgUHB2FTCCij6kDSWYqFtBlSJNTFRpY4zf0G1NO 9bFFV+W58u6kj1yGAJy1Y87L7TNSULvWoKbyCbHbZWUz+qs4C98UjB6xu04j8zir768kByEdt teV8Ccrxi4moVtFKin53KNj40AmT7jCF3uC2bvpXSvZKCXQ3hYsOTQWZYBASmhDjOQFqsvi8i iMaALpjOWJfieoYnrdPYcruf8L+kOBwUaD3k53UFbX+1F1UXoK+RzpZmeeftBhT7fbqjZxd9p nvb0fKWTzy3vcdDqQvn8OyAVX3rbvFqF52dmjROdlQONfZVsm29uYgtasm2A2bwQ8OKKGhv2y HBnZpOpNaetvKw1fcGhK8UsA3Gro0/YRz5VBjpbL5G7hELQhKrzjxdmTuzBkxfSiOQ6RP+xMO uniGlp8/6sYBhWNy7S2+8RzSkRhTVsg/kkFQS63vZ1va5Sejn//pakKb3hx9qGzpT6+nDMsUm fKQUAKkuD56UvhSmK32CsG+2Fhcgw7f2NW7+YHmdak9PGl0xUdMZfia9Ivo= Archived-At: Subject: Re: [Ace] Credential Options X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2016 11:13:41 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --3OkPB2b6UPcO88JAWwAGvbkxCKXSJ4pvK Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable -- chair hat off Hi all, I would also like to state my view in this discussion. On 03/02/2016 07:06 PM, Hannes Tschofenig wrote: > Hi all, >=20 > in an attempt to progress the question > arises about solutions should be described in enough detail to have the= m > interoperable. >=20 > There are three types of credentials specified: >=20 > * PSK > * Raw Public Key > * Certificates >=20 > With regard to asymmetric cryptography we settled with ECC and DTLS/TLS= > profile document makes certain recommendations regarding the crypto. >=20 > However, there is still the question about what is > mandatory-to-implement and what should be described in the WG document.= >=20 > What should be mandatory to implement: >=20 > * Option 1: Nothing When we speak about MTI then we have to say which nodes need to implement certain functionality mandatorily. I think we need to make this decision on a deployment profile bases rather than for the entire document. So, my impression is "nothing for the overall document" but for instead for each profile. > * Option 2: PSK, RPK, Certificates > * Option 3: PSK > * Option 4: RPK > * Option 5: Certificates >=20 > Which of the three should be described in the document? (Obviously the > MTI versions but also others or should they be covered in separate > documents?) I think we should describe the raw public key (RPK)-based mechanism in the document. >=20 > Here are the slides from the ACE virtual interim meeting providing > further background information: > https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-i= nterim-2016-ace-1-3.pdf >=20 > Deadline: 16th March 2016 >=20 > Ciao > Hannes & Kepeng >=20 Ciao Hannes --3OkPB2b6UPcO88JAWwAGvbkxCKXSJ4pvK Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJW2BxfAAoJEGhJURNOOiAt9VoH/1JAK/UznOX4irve3Rbrf3xc TmW7/Mnkx7iEEhV1sjS1bTm33l+aLPz3oskoC0BMNGy9a1AH3eMM9gF55B27k0PZ 4Ajg8FrsOJ8d86FeeJMtPpd6omfT2oJJOTrvTaudNxQG9GIkKquFqhXNysD/NaFV mBPLuqwu/oGEHbjn1QSgyzHOSJS8lsLIMx4yi/9eIYwLMDAYSoLam8148y5gF+eD CoRkhIKToc9jeCYSE0rvtukFdMAmdBo4rnimKETgujtdWrT1yWfxAKSuKJi1Tu5I lFw913+qCyZVsLX84m6tpHT42PPEjlBXQOw/OXz6e5GARUA2cLmmvoAbjqttkes= =3h9N -----END PGP SIGNATURE----- --3OkPB2b6UPcO88JAWwAGvbkxCKXSJ4pvK-- From nobody Thu Mar 3 03:16:41 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5D4F01A8F3B for ; Thu, 3 Mar 2016 03:16:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.606 X-Spam-Level: X-Spam-Status: No, score=-2.606 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.006, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fEhU3i82dgFU for ; Thu, 3 Mar 2016 03:16:38 -0800 (PST) Received: from mout.gmx.net (mout.gmx.net [212.227.15.18]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8673F1A8F39 for ; Thu, 3 Mar 2016 03:16:37 -0800 (PST) Received: from [192.168.10.131] ([80.92.123.193]) by mail.gmx.com (mrgmx003) with ESMTPSA (Nemesis) id 0MBWTO-1alv6r2WiE-00AVJi for ; Thu, 03 Mar 2016 12:16:35 +0100 To: "Ace@ietf.org" References: <56D72A16.5050607@gmx.net> From: Hannes Tschofenig Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9 Message-ID: <56D81D12.4030707@gmx.net> Date: Thu, 3 Mar 2016 12:16:34 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <56D72A16.5050607@gmx.net> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="8P9pvmVm2XHAGURtAoFA2GbPD69sP1h0W" X-Provags-ID: V03:K0:1CLddJPa60ELo1g2uLBml5HG5mfkxG67P+g9Gp8QtcVkeqRtb1R G/I3jJOWW7pg1S8VjbHKwQMcfFowovHr/HTbZeRoV4IvC4bFd1BrKMmO3ITkDwWOaJ3gGu3 Bcm2jsR2pEhb3ygFv99E0PcGbECg+G8mBhindtI135nCTXXeEMUANdVAIPb8mZ37niB7Mmp JPk0egoGtmqXrc2V408FA== X-UI-Out-Filterresults: notjunk:1;V01:K0:oeEaPXBFmsM=:Kh32aB3oEOfWFJhhAEunDi IowH9ncdoc3T9t/Z5VSxDJfCWkOfWn+d3/POIyckWWlWPM5D/eBRKh4dVII/Yl2ZKv8Xmg57j Mc0+c2+68pBteESLFjOt1ydhVwRfiJHV0aLzwgTgrb0GI6GfuO/XhUIv4J6xh/LcrwuT9bE9m uDVaFxwuk/eWUzIhQllp0o/pVbe2bHDfxHhqmZmy2rah7ZDm/IBYangQ16ryo5AAXAlfasbah PXWf28z2IE4maS6ZklZP/yaQZb0p4d8bOKzUGJne3YOfNaxsZYkGR9HT2tfKULeuXHmcDlVyd IVnKgM31duNOZgCRRznufLoNZe1XvnP4esifJrEKGqp3ARDUnuSfm6n2rdUwPzSAlE25ZGpsE ZmV03EEMbd6hd7qjDsMx3prmUktTU8K/qv+NFqhOwsGWfBEm745GEe+R0tS0yxWSVY+bhkFsP Fni51T9KLEwi5A/3IBr3Zw50Jyl2Eu0f+UOVyNEEV7O1CaoRde/dHNtXJzW4GZCEXkmgU0Z/c ZRfxMJ5gyDp9liIjz1Ip/Gslu5emOAvxVFZHPkgHt6nDHTJi/6UekKO4kaT8WO1+gxGR4pMTq Ezy+Mn0X+LTjvSMg1x0keZCep2Ox/F8QOSNdpGiqv+50k2HqoJsZZeG9FhZ9sCNeqh3l2waFE AVz5j/x6/fO86iy3ro7+oSnGlg5QntCLsni1CLHuFT5O5SIQBbHvB50ECf6z9eMadzxUMnkVN kEFLXUM1LtbE0BqY8TBkhEPlPNFx5iZdYSa3jCkHG3gJBfaKHRLM8hgVOW4= Archived-At: Subject: Re: [Ace] DTLS and OSCOAP X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2016 11:16:39 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --8P9pvmVm2XHAGURtAoFA2GbPD69sP1h0W Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable -- chair hat off I would go for option #1 similarly to how it was done in the OAuth WG. The DTLS-based solution (as well as the application layer solution) should be documented in separate documents ideally in parallel with the ACE OAuth WG document. On 03/02/2016 06:59 PM, Hannes Tschofenig wrote: > Hi all, >=20 > in specifying the details for the communication between the client and > the RS we need to settle on a security mechanism. >=20 > There are four options: >=20 > * Option #1: Do not specify a solution in the WG document (1) >=20 > * Option #2: Specify a DTLS-based solution >=20 > * Option #3: Specify an application layer solution (for example using > OSCOAP) >=20 > ** Option #4: option #2 + option #3 >=20 > Note: We are asking for feedback about what should go into > draft-ietf-ace-oauth-authz. There is always the possibility to specify > other solutions in separate documents in parallel or later. >=20 > Here are the slides from the ACE virtual interim meeting providing > further background information: > https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-i= nterim-2016-ace-1-4.pdf >=20 > Deadline: 16th March 2016 >=20 > Ciao > Hannes & Kepeng >=20 > PS: (1) This was the approach that was selected in OAuth where the > Bearer Token specification was published as a separate RFC. >=20 >=20 >=20 > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace >=20 --8P9pvmVm2XHAGURtAoFA2GbPD69sP1h0W Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJW2B0SAAoJEGhJURNOOiAtD6EH/icQJoQiXx23O9UN0kJTIvLA v8Vqdp4IgMcW62tPhdVEGmSviTS24u0z7KtfzVItDTKZcmubOFjEyocodGyGJxRi HHKYbsZ3sMHRQ3g3FH2fqXmlsmEZxsQaP00g0zZRpG86UWvTR/9NRrtrQZmFHFMN KnEg9Kq7m5wtER9J0zbJotk0loWR+bTu52YpUfUyI2WiqldRVKbmPbuE0+bMJVuj cQtmLwq/TLXLqBZvj14k7lRSyliyXrP3dI6wR7x6FGe/hDYntb5rj7ZyaOp1y8us qoIN3GI+zF+z2XXXVDJ1pSGBdlfc5mFZ+MOv4rxx+e+PlcMEC8MmOKBTiCDudmY= =HncA -----END PGP SIGNATURE----- --8P9pvmVm2XHAGURtAoFA2GbPD69sP1h0W-- From nobody Thu Mar 3 03:33:05 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D46531A9069 for ; Thu, 3 Mar 2016 03:33:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.606 X-Spam-Level: X-Spam-Status: No, score=-2.606 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.006, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gt7XHSzKMzts for ; Thu, 3 Mar 2016 03:33:02 -0800 (PST) Received: from mout.gmx.net (mout.gmx.net [212.227.17.22]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7D6721A906D for ; Thu, 3 Mar 2016 03:32:59 -0800 (PST) Received: from [192.168.10.131] ([80.92.123.193]) by mail.gmx.com (mrgmx103) with ESMTPSA (Nemesis) id 0M4Wwq-1ZfNjg3YlA-00yhpi for ; Thu, 03 Mar 2016 12:32:57 +0100 To: "Ace@ietf.org" References: <56D723D1.3090204@gmx.net> From: Hannes Tschofenig Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9 X-Enigmail-Draft-Status: N1110 Message-ID: <56D820E7.2070304@gmx.net> Date: Thu, 3 Mar 2016 12:32:55 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <56D723D1.3090204@gmx.net> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="P4cqWtC1OFWqjffhXffqlLsP7j5p0PRo1" X-Provags-ID: V03:K0:sqIZeS6X3CLP5aMQoBEdeemCCbermZME+hNL0irIyuzexnYT+UJ q3Ii9SdeSG+QboNWqsxglAlR+zlowj1GDD5CYeuNJglbEPqwpHsk64u8DGs1UH+cTklfznT z703DXeToExTWJqLk9719UH470gF7RGsRgWmuSsUi9+Ah/aKAWw7oJ/IBtLX5ZC0td3ZY+s wXYMbXQ9ihPuW/bMrPKdg== X-UI-Out-Filterresults: notjunk:1;V01:K0:t6/e6d6r6KU=:lEwGoCDZF/hz+i8IFpad4s WRyndG46+Jh3ANyt0+p6quohWnSHs/cQOAv0P0vbzEddIm85DrBkAxQiaC3/6pjdjXHlQkEIq CxSEROAg+VP2UW4xLwW36u9r+nFQM4tr/U1Drs/Suf+5japF4aHowwtpLwxDg0G5DtgRqBfUt BmptiLg+x5tvP1rghcP4++fH8057vNEg540vwwc2MqZT09qK7Mj6g0ny6a4kWwxdBKca43J2U EGODZ3ST6rKpwaqceKw071nqTkbzNHLjmoighNsdLFiHzBLEjBqTB+iUYDf4gYBc25Ol12d9X v/tUM6/mCsnEdIQJ+Qkztj8efoBTevITNzm+uDN/MTib6go9D6he4+sJG0Emuw1Nyvi0t+a9v yL7Lcww5qUkfhLdkeafgf+riKT8dzx/3HQ+7hPaXuK4iyCNftlEePwRVzg56/z4+dyCHTf67W logFAyo0xxBXgkyJFUnXTUpJjvpkt6frUNZ3wq1d//PPE7uZGWygkxb89s6F5nGmWIOSeNujF Cwqp0iCSKjt2bZS9qkFtLGXM+cv+0dmPs+Z6JwV7Ds+wpX4D2qwikRilxcjJicsM+OCKvKrUT 1De2JE/tKHwx7zngYAGupVvKyfAOWpuqTPE5a8+emwzNOfJfooAa+Xk3vmfxHaFBJkWSm+rxe 5Jmxg3mHveECMCmPwDgBsxKAlT4UBXS2rQNeZ50wRDi/wLMK57B5ibY4SmocvGKSDYDHPibX/ axsqX++mWGWFpCugny7RTO9Dstk3/24nqMEk1stx9Xb92tfSXzXrTgx654g= Archived-At: Subject: Re: [Ace] CBOR and/or JSON X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2016 11:33:04 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --P4cqWtC1OFWqjffhXffqlLsP7j5p0PRo1 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable -- chair hat off I have included the wrong link below. Here is the correct one: https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-int= erim-2016-ace-1-0.pdf I would focus on CBOR in the document. This does not mean much from a presentation style in the document since it will be shown as a JSON diagnostics form anyway (or at least I think it should for readability). The CWT content is not in the ACE OAuth document and so it will have no impact. When we define extensions in CWT they also need to be defined for the JWT. For the token introspection we already have the HTTP version in OAuth and no changes are needed there. I still believe we need a version that runs over CoAP as well. For the client I would make a distinction between the type of client: * For rich clients, like mobile phones, I would allow them to work with HTTP and no changes should be needed to the OAuth framework. * For constrained clients, we will have to define a CoAP-based version. Ciao Hannes On 03/02/2016 06:33 PM, Hannes Tschofenig wrote: > Hi all, >=20 > specifying the ACE OAuth solution the following design question turned > up: Should both CBOR and JSON be supported in the WG document? Or only > one of them? >=20 > What should be described in the WG document: > * Alternative 1: CBOR and JSON > * Alternative 2: CBOR only > * Alternative 3: JSON only >=20 > Additionally, there is the question about HTTP and CoAP support. >=20 > Should the WG document only describe > * Option 1: Use of CoAP, > * Option 2: Use of HTTP, > * Option 3: Use of HTTP & CoAP >=20 > Here are the slides from the ACE virtual interim meeting providing > further background information: > https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-i= nterim-2016-ace-1-3.pdf >=20 > Deadline: 16th March 2016 >=20 > Ciao > Hannes & Kepeng >=20 >=20 >=20 >=20 > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace >=20 --P4cqWtC1OFWqjffhXffqlLsP7j5p0PRo1 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJW2CDnAAoJEGhJURNOOiAtvtsH/AmThgJ3edsVdLzZRmvLBtVL Ig6K3TaoRG0jopTxFS1Qbqhs69E80EubdckOsHboynGT+RBD9DVtd0CeoYIkYz0o /x3hmeo9ksubCkauevEqoJfFWTalpMW+6H914D7hNShHR5ZoJmvXeOjwd4IBCdrs Vfze2v73UAkeuJWdbAPOi15zwZQcfc247AyRV6XRe+bd8TexZ9qgAvSqcf9GKM9A 9EUuEfVCHo5WkbL7ob19m9xQ8NQbq9rsX2cBL85AwpDgX74DKNhcV+7cTKkkaZDA AB613tv0VnAE+PLnhBmaSZSjMpSGn1/RBGOzcsihiu7M585aDjn50zs0RohvGNY= =bG3F -----END PGP SIGNATURE----- --P4cqWtC1OFWqjffhXffqlLsP7j5p0PRo1-- From nobody Thu Mar 3 03:40:50 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 597F11A9093 for ; Thu, 3 Mar 2016 03:40:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.606 X-Spam-Level: X-Spam-Status: No, score=-2.606 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.006, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2aZxjMkT_IeH for ; Thu, 3 Mar 2016 03:40:47 -0800 (PST) Received: from mout.gmx.net (mout.gmx.net [212.227.17.21]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 609FB1A9092 for ; Thu, 3 Mar 2016 03:40:47 -0800 (PST) Received: from [192.168.10.131] ([80.92.123.193]) by mail.gmx.com (mrgmx101) with ESMTPSA (Nemesis) id 0Ld4xA-1aB9HJ1Zo0-00iC7a for ; Thu, 03 Mar 2016 12:40:45 +0100 To: "Ace@ietf.org" References: <56D7250E.6020300@gmx.net> From: Hannes Tschofenig Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9 X-Enigmail-Draft-Status: N1110 Message-ID: <56D822BB.7080002@gmx.net> Date: Thu, 3 Mar 2016 12:40:43 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <56D7250E.6020300@gmx.net> Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="bBoQqhdXAprb4VoGaFp2RupKV5HqR8P4E" X-Provags-ID: V03:K0:aWzs0zd2aNjgzSBdGS/2QG3VvgFbCPc3aZ9hSnh74tQjOEBGM2X cfUDqO8Qn7mrZt/vBegRa/FPBPJrkGkIsSVIdPbV/k2qfRSk2rDwYCcpX+dJwiVRyRB7h0T IJCpFOcpinQ26678xzKzfJTD266dGmgxhMkSYMFuzF+H2BwV9+a8isqz+WMydiFP9uMD+qR HHf1GldnfWPV1vUD5ZDvw== X-UI-Out-Filterresults: notjunk:1;V01:K0:3nmbMW1BTn0=:fjEASOGjzrTKfea6HebJ4+ oOPzf+2NEBKW+9J+sV7LpjVHYnDdN6Hyk7WZ7ARtJcRM3Obuikk11hofHyOy4ZVJi9RJvvYLi mazLk3il0elurOwWfjPWP6XQ+VQTR1M1C2nDgR6nMEa0c2wnnunBhqOfBs2lVvI+dcSeYweMu WwGZzSkTsaq2JMn1lrrvMr4myFh6gJKjtZstubleu7sRPjSsvp8PgrtuFSyMPzuJLNThsXxXb qT3IT3nXzUtGf43AWuGgchxp3CdeRcbbw7KuZqGVNehHcWiJMcRXKFAiNU7QIcuSPijWLo3jB VoWXCG8bLcaGypjQyzHRc3qN6Thai1okUVEdN270J1iciL7Pek4p/zm3+983Mr4Xbwf1wLruV K3zAO6EsyHahcq3pNPjDovAqO8lZKoIrAJ1P//5n7itun/nchj8IjTYRhIpoW+wWiG5PmhmfQ 2NXNt9J8F8Qas9ARXPSG1g8gEzjRgzjBiuIF8JCh4z0Yarvn+rvrAjeHjaz9CFBGiICWYC1Cn LDaA9ALXcZj76ODLCZMFLuoGQRSUV8J7Hzks9zTipFI+NAIyabpZLKYyEvf+38mGy7InqKbci umS8ehKi+nXOexmajVCpKs2Zb3Jur2MZXIjHqVgV3B7rVlJXOjCFxHSbXHixJoVfSve4g48gy t4+xM4gP4djbY4UNfeHlCUfZ7q1Bb5APnKhWhtZXvFiNHEBG40OZl/N5+S8Lafn8HKie+b2EB 1zaOxLJAtjGIL6w6SgbaZaZC2uJDMd4ryc8xESOxssM+LO48p+WvqnGsBwY= Archived-At: Subject: Re: [Ace] Deployment Options X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2016 11:40:49 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --bBoQqhdXAprb4VoGaFp2RupKV5HqR8P4E Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable -- chair hat off I would merge scenario 6.1 and 6.2 since they are very similar. The point is more that the resource server is offline. When the client is offline it just means that it has to get the token upfront. Scenario 6.3 and 6.4 can also be merged since their main message is that there is token introspection. I focus the description in the document on a scenario where the resource server verifies the tokens locally (because it is offline at the time of resource request or because of some other reasons) and uses the raw public key as a credential. I would describe two scenarios in separate documents, namely * secure group communication (for which there is already a separate document and it is substantially different). * the introspection model I don't believe in the tokenless scenario. Ciao Hannes On 03/02/2016 06:38 PM, Hannes Tschofenig wrote: > Hi all, >=20 > describes 6 deployment options in > Section 6: >=20 > 6. Deployment Scenarios . . . . . . . . . . . . . . . . . . . . 18= > 6.1. Client and Resource Server are Offline . . . . . . . . . 1= 9 > 6.2. Resource Server Offline . . . . . . . . . . . . . . . . . 2= 2 > 6.3. Token Introspection with an Offline Client . . . . . . . 2= 6 > 6.4. Always-On Connectivity . . . . . . . . . . . . . . . . . 3= 0 > 6.5. Token-less Authorization . . . . . . . . . . . . . . . . 3= 1 > 6.6. Securing Group Communication . . . . . . . . . . . . . . 3= 4 >=20 > Describing all 6 deployment options at a level that allows interoperabl= e > implementations in a single document, namely in > draft-ietf-ace-oauth-authz>, make the document longer (obviously), > requires a fair amount of work, and takes longer. >=20 > For this reason we are asking for your priorities. Which of these > deployment options are more important for you than others. >=20 > Please let us know which of them would you include in the WG document, > which of them would you would like to see covered in separate documents= , > and which of them would you drop? >=20 > Here are the slides from the ACE virtual interim meeting providing > further background information: > https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-i= nterim-2016-ace-1-1.pdf >=20 > Deadline: 16th March 2016 >=20 > Ciao > Hannes & Kepeng >=20 >=20 >=20 > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace >=20 --bBoQqhdXAprb4VoGaFp2RupKV5HqR8P4E Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJW2CK8AAoJEGhJURNOOiAtSGoH/0GjAqJ4OnVbHcYv7185+2Qe 6ndytd9FtyxKUXiYpjle4aUEpZuW7xjvshq9Gt/OjSvS79z6MUVKXpizJHgqgnX8 MKuurmVtZmXBJ2TqoSzZ5GAjAKK6dTdZS12/fLDDUtCXMlLK8a8AVQ6TIhQe1WAQ oQ4ytrGRUAf5KjUeaB8aymkBuGCjcpmPSuR+1C44XP0mPwNdZOhK+mNXMYbAcH+H 1+1GMVXyin2i5LOQ/jbmxPVqP9zANBQwIBvLok8pqRc8ErpDWcovTfkWsg5gdQ8j m/yPvwFKyNuBBtJiDc4ed6fLZJRykrfPSMu/ZZTl6PEjmwrgxd3szN+lHkZd2uo= =djue -----END PGP SIGNATURE----- --bBoQqhdXAprb4VoGaFp2RupKV5HqR8P4E-- From nobody Thu Mar 3 05:19:45 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3E50B1ACD35 for ; Thu, 3 Mar 2016 05:19:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.901 X-Spam-Level: X-Spam-Status: No, score=-3.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UZon4QoKbJj7 for ; Thu, 3 Mar 2016 05:19:41 -0800 (PST) Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4C8B41ACD33 for ; Thu, 3 Mar 2016 05:19:40 -0800 (PST) X-AuditID: c1b4fb30-f79d26d000006389-9c-56d839ea934f Received: from ESESSHC019.ericsson.se (Unknown_Domain [153.88.183.75]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id 9D.52.25481.AE938D65; Thu, 3 Mar 2016 14:19:38 +0100 (CET) Received: from ESESSMB303.ericsson.se ([169.254.3.52]) by ESESSHC019.ericsson.se ([153.88.183.75]) with mapi id 14.03.0248.002; Thu, 3 Mar 2016 14:19:37 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Carsten Bormann , "Ace@ietf.org" Thread-Topic: [Ace] DTLS and OSCOAP Thread-Index: AQHRdK1XY01mkeMWy0aLtJOrE1vpmp9HfCaAgAA5KIA= Date: Thu, 3 Mar 2016 13:19:36 +0000 Message-ID: References: <56D72A16.5050607@gmx.net> <56D81805.70508@tzi.org> In-Reply-To: <56D81805.70508@tzi.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.0.151221 x-originating-ip: [153.88.183.148] Content-Type: text/plain; charset="utf-8" Content-ID: <436EE8E26436BD42952455B0F9CF1A76@ericsson.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprDIsWRmVeSWpSXmKPExsUyM2K7t+4ryxthBtNaBCy+f+thtjgy5S6r A5PHkiU/mTymLcoMYIrisklJzcksSy3St0vgynj5/Q57wTahijmTN7A2MP4Q7GLk5JAQMJH4 eHMtE4QtJnHh3no2EFtI4DCjxKq/bl2MXED2IkaJll3vmUESbAIuEg8aHoE1iAg4SpycDNEs LKAksf3IA0aIuLLEjtd7oGqsJM4t/QzWyyKgInFn2TOwBbwCFhKtv1YwQyyzlzhyagULiM0p oCqxecVxsDmMQAd9P7UGbA6zgLjErSfzoQ4VkFiy5zwzhC0q8fLxP9YuRg4OUQE9ia4jFRBh JYnGJU/AwswCmhLrd+lDTLGWmPhxItRERYkp3Q/ZIa4RlDg58wnLBEbxWUiWzULonoWkexaS 7llIuhcwsq5iFC1OLU7KTTcy0kstykwuLs7P08tLLdnECIyzg1t+G+xgfPnc8RCjAAejEg/v hhXXw4RYE8uKK3MPMUpwMCuJ8L5TvBEmxJuSWFmVWpQfX1Sak1p8iFGag0VJnJf10+UwIYH0 xJLU7NTUgtQimCwTB6dUA6Oi1QaRaQqhhellW/9zHXh554Vt6OS7twx3Lngmvj6m4tmLnVyz 0hxMM59F2IZ7OnUUOYhfuHzsmffJrXrqgr5HZRcccpprLxZzmU0uefuBB78WRR22t7UUvD9j s+eWEvWj5SKbLFWnmGa/rTZ7kGb30l7o5yLb4ElqwpOmPvw2afLPM6fONDUosRRnJBpqMRcV JwIAzfwCPa8CAAA= Archived-At: Subject: Re: [Ace] DTLS and OSCOAP X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2016 13:19:43 -0000 DQpIaSBDYXJzdGVuLCBhbGwNCg0KT24gMjAxNi0wMy0wMyAxMTo1NSwgIkFjZSBvbiBiZWhhbGYg b2YgQ2Fyc3RlbiBCb3JtYW5uIg0KPGFjZS1ib3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiBj YWJvQHR6aS5vcmc+IHdyb3RlOg0KDQo+V2UgaGFkIGEgc2xpZ2h0bHkgZGlmZmVyZW50IHNldCBv ZiBvcHRpb25zIHdoZW4gd2UgbG9va2VkIGF0IHRoaXMgaW4gdGhlDQo+cGhvbmUgbWVldGluZy4g DQoNCknigJltIHNvcnJ5IEkgbWlzc2VkIHRoZSBlbmQgb2YgdGhlIG1lZXRpbmcgc2luY2UgSSBo YWQgdG8gbGVhdmUgYWZ0ZXIgb25lDQpob3VyICh3aGVuIGl0IHdhcyBzY2hlZHVsZWQgdG8gZW5k KS4NCg0KPiBXaGF0IEkgc2FpZCAoYW5kIHdoYXQgSSB0aGluayByZWNlaXZlZCBhZ3JlZW1lbnQg aW4gdGhlDQo+cm9vbSkgd2FzIHRvIGRvIHRoZSBEVExTLWJhc2VkIHZlcnNpb24gaW4gdGhlIGlu aXRpYWwgV0cgZG9jdW1lbnQsIGFuZA0KPnRvIGJlIHJlYWR5IHRvIGRvIGFuICJvYmplY3Qgc2Vj dXJpdHkiIHN0eWxlIHNvbHV0aW9uIG9uY2UgdGhlDQo+Zm91bmRhdGlvbiBmb3IgdGhhdCBiZWNv bWVzIGF2YWlsYWJsZSAtLSBwb3NzaWJseSBsYXRlciBpbiBhIHNlcGFyYXRlDQo+ZG9jdW1lbnQg b3IgcG9zc2libHkgcmlnaHQgaW4gdGhlIGluaXRpYWwgV0cgZG9jdW1lbnQuDQo+DQo+U28gdGhp cyB3b3VsZCBiZSB5b3VyIG9wdGlvbiA0LCBidXQgd2l0aCB0aGUgdHdpc3QgdGhhdCB3ZSBhcmUg Y29nbml6YW50DQo+dGhlICJvYmplY3Qgc2VjdXJpdHkiIHNvbHV0aW9uIG1pZ2h0IG5vdCBiZWNv bWUgcmVhZHkgYXQgdGhlIHNhbWUgdGltZS4NCg0KDQpMZXQncyBkaXN0aW5ndWlzaCBiZXR3ZWVu IENPU0UgYW5kIE9TQ09BUDsgQ09TRSB3aWxsIGJlIGZpbmlzaGVkIGJlZm9yZQ0KdGhpcyBkcmFm dC4NCg0KV2hhdCBuZWVkcyB0byBiZSBzcGVjaWZpZWQgaW4gdGhpcyBkcmFmdCBpcyBlc3NlbnRp YWxseSB0aGUgdHJhbnNwb3J0IG9mDQp0aGUgYWNjZXNzIHRva2VuIGFuZCB0aGUga2V5cyB0byB1 c2Ugd2l0aCB0cmFuc3BvcnQgb3IgYXBwbGljYXRpb24gbGF5ZXINCnNlY3VyaXR5LCBhbmQgQ09T RSBpcyBzdWZmaWNpZW50IHRvIHNwZWNpZnkgd2hhdGV2ZXIga2V5cyB0aGF0IGFyZSBuZWVkZWQN CmZvciBhbiBvYmplY3Qgc2VjdXJpdHkgc29sdXRpb24uDQoNCg0KDQpTbyBpZiB3ZSByZXdvcmQg b3B0aW9uIDMgYXMNCg0KIiogT3B0aW9uICMzOiBTcGVjaWZ5IGEgQ09TRS1iYXNlZCBzb2x1dGlv biINCg0KDQp0aGVuIEkgZG9u4oCZdCB0aGluayB0aGVyZSBpcyBhIG5lZWQgdG8gbWFrZSB0aGlz IGRpc2NsYWltZXIsIGlzIHRoZXJlPw0KDQpHw7ZyYW4NCg0KDQo+DQo+R3LDvMOfZSwgQ2Fyc3Rl bg0KPg0KPg0KPkhhbm5lcyBUc2Nob2ZlbmlnIHdyb3RlOg0KPj4gKiBPcHRpb24gIzI6IFNwZWNp ZnkgYSBEVExTLWJhc2VkIHNvbHV0aW9uDQo+PiANCj4+ICogT3B0aW9uICMzOiBTcGVjaWZ5IGFu IGFwcGxpY2F0aW9uIGxheWVyIHNvbHV0aW9uIChmb3IgZXhhbXBsZSB1c2luZw0KPj4gT1NDT0FQ KQ0KPj4gDQo+PiAqKiBPcHRpb24gIzQ6IG9wdGlvbiAjMiArIG9wdGlvbiAjMw0KPg0KPl9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+QWNlIG1haWxpbmcg bGlzdA0KPkFjZUBpZXRmLm9yZw0KPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vYWNlDQoNCg== From nobody Thu Mar 3 05:28:06 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5DC991ACD41 for ; Thu, 3 Mar 2016 05:28:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.9 X-Spam-Level: X-Spam-Status: No, score=-3.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U3ewI573BNqF for ; Thu, 3 Mar 2016 05:28:03 -0800 (PST) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5C96B1AC3EC for ; Thu, 3 Mar 2016 05:28:02 -0800 (PST) X-AuditID: c1b4fb3a-f79ce6d000005138-c1-56d83be05159 Received: from ESESSHC011.ericsson.se (Unknown_Domain [153.88.183.51]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id 33.A7.20792.0EB38D65; Thu, 3 Mar 2016 14:28:00 +0100 (CET) Received: from ESESSMB303.ericsson.se ([169.254.3.52]) by ESESSHC011.ericsson.se ([153.88.183.51]) with mapi id 14.03.0248.002; Thu, 3 Mar 2016 14:27:59 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Hannes Tschofenig , "Ace@ietf.org" Thread-Topic: [Ace] DTLS and OSCOAP Thread-Index: AQHRdK1XY01mkeMWy0aLtJOrE1vpmp9HgisAgAA1eYA= Date: Thu, 3 Mar 2016 13:27:58 +0000 Message-ID: References: <56D72A16.5050607@gmx.net> <56D81D12.4030707@gmx.net> In-Reply-To: <56D81D12.4030707@gmx.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.0.151221 x-originating-ip: [153.88.183.154] Content-Type: text/plain; charset="utf-8" Content-ID: <5CEDF86ED825184AA300B926EBA5137E@ericsson.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprDIsWRmVeSWpSXmKPExsUyM2K7se4D6xthBjf+Cll8/9bDbLF05z1W ByaPxZv2s3ksWfKTKYApissmJTUnsyy1SN8ugSvjwNKdrAUt4hU7m2ayNzDuEOti5OCQEDCR 2PgvpouRE8gUk7hwbz1bFyMXh5DAYUaJZa+fsEI4i4CcOdtYQarYBFwkHjQ8YgKxRQSCJA7c XcAIYgsLKElsP/KAESKuLLHj9R6oGiuJ5p83wWwWARWJba/3MYIs5hWwkJh5RgwkLCTgKLH6 wS+w8ZwC6hLfP98BG8MIdND3U2vAWpkFxCVuPZnPBHGogMSSPeeZIWxRiZeP/7GCjBQV0JPo OlIBEVaSWHT7MxNImFlAU2L9Ln2IKdYSO9d/YYawFSWmdD9kB7F5BQQlTs58wjKBUXwWkmWz ELpnIemehaR7FpLuBYysqxhFi1OLi3PTjYz0Uosyk4uL8/P08lJLNjEC4+zglt9WOxgPPnc8 xCjAwajEw7thxfUwIdbEsuLK3EOMEhzMSiK87xRvhAnxpiRWVqUW5ccXleakFh9ilOZgURLn Zft0OUxIID2xJDU7NbUgtQgmy8TBKdXAWN6Z3vV9TeWfVva/65+cdSs8dcDx5mfdmhcfjmat P6H7rGrdvm9zVHa9evdt4flWeeZc/S0Ln3xl+iQjMk9z5rkHbHxmqZKsfTKPw8T8Lk/QS2Cu KD3ptVCh5nd6+ybFK5PNv8yeHHnnphJ7/2HByfvuZ9XNe3Rrv9Qm+XDmh0djrn+dr36Q7ZIS S3FGoqEWc1FxIgBM7eFjrwIAAA== Archived-At: Subject: Re: [Ace] DTLS and OSCOAP X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2016 13:28:05 -0000 SGkgSGFubmVzLCBhbGwNCg0KT24gMjAxNi0wMy0wMyAxMjoxNiwgIkFjZSBvbiBiZWhhbGYgb2Yg SGFubmVzIFRzY2hvZmVuaWciDQo8YWNlLWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGhh bm5lcy50c2Nob2ZlbmlnQGdteC5uZXQ+IHdyb3RlOg0KDQo+LS0gY2hhaXIgaGF0IG9mZg0KPg0K Pkkgd291bGQgZ28gZm9yIG9wdGlvbiAjMSBzaW1pbGFybHkgdG8gaG93IGl0IHdhcyBkb25lIGlu IHRoZSBPQXV0aCBXRy4NCj5UaGUgRFRMUy1iYXNlZCBzb2x1dGlvbiAoYXMgd2VsbCBhcyB0aGUg YXBwbGljYXRpb24gbGF5ZXIgc29sdXRpb24pDQo+c2hvdWxkIGJlIGRvY3VtZW50ZWQgaW4gc2Vw YXJhdGUgZG9jdW1lbnRzIGlkZWFsbHkgaW4gcGFyYWxsZWwgd2l0aCB0aGUNCj5BQ0UgT0F1dGgg V0cgZG9jdW1lbnQuDQoNCkFzIGZhciBhcyBJIHVuZGVyc3RhbmQsIHdpdGggT0F1dGggdGhlIFRM UyBzZXNzaW9uIGJldHdlZW4gQ2xpZW50IGFuZCBSUw0KaXMgdHlwaWNhbGx5IGluZGVwZW5kZW50 IG9mIHRoZSBrZXkgaW4gdGhlIFBvUCB0b2tlbi4gVGhhdCBpcyBxdWl0ZQ0KZGlmZmVyZW50IGZy b20gdGhlIHNldHRpbmcgaW4gQUNFIHdoZXJlIHRoZSBrZXkocykgaW4gdGhlIFBvUCB0b2tlbi9D bGllbnQNCkluZm9ybWF0aW9uIGlzIHVzZWQgdG8gc2VjdXJlIHRoZSBzdWJzZXF1ZW50IGNvbW11 bmljYXRpb24gYmV0d2VlbiBDbGllbnQNCmFuZCBSUy4NCg0KVGhlcmVmb3JlIHNvbWUgbW9yZSBj b25zaWRlcmF0aW9ucyBhYm91dCBob3cgdHJhbnNwb3J0L2FwcGxpY2F0aW9uIGxheWVyDQpzZWN1 cml0eSBpcyBlc3RhYmxpc2hlZCBpcyBuZWVkZWQgaW4gdGhlIGNvcmUgZG9jdW1lbnQuDQoNCkfD tnJhbg0KDQoNCj4NCj5PbiAwMy8wMi8yMDE2IDA2OjU5IFBNLCBIYW5uZXMgVHNjaG9mZW5pZyB3 cm90ZToNCj4+IEhpIGFsbCwNCj4+IA0KPj4gaW4gc3BlY2lmeWluZyB0aGUgZGV0YWlscyBmb3Ig dGhlIGNvbW11bmljYXRpb24gYmV0d2VlbiB0aGUgY2xpZW50IGFuZA0KPj4gdGhlIFJTIHdlIG5l ZWQgdG8gc2V0dGxlIG9uIGEgc2VjdXJpdHkgbWVjaGFuaXNtLg0KPj4gDQo+PiBUaGVyZSBhcmUg Zm91ciBvcHRpb25zOg0KPj4gDQo+PiAqIE9wdGlvbiAjMTogRG8gbm90IHNwZWNpZnkgYSBzb2x1 dGlvbiBpbiB0aGUgV0cgZG9jdW1lbnQgKDEpDQo+PiANCj4+ICogT3B0aW9uICMyOiBTcGVjaWZ5 IGEgRFRMUy1iYXNlZCBzb2x1dGlvbg0KPj4gDQo+PiAqIE9wdGlvbiAjMzogU3BlY2lmeSBhbiBh cHBsaWNhdGlvbiBsYXllciBzb2x1dGlvbiAoZm9yIGV4YW1wbGUgdXNpbmcNCj4+IE9TQ09BUCkN Cj4+IA0KPj4gKiogT3B0aW9uICM0OiBvcHRpb24gIzIgKyBvcHRpb24gIzMNCj4+IA0KPj4gTm90 ZTogV2UgYXJlIGFza2luZyBmb3IgZmVlZGJhY2sgYWJvdXQgd2hhdCBzaG91bGQgZ28gaW50bw0K Pj4gZHJhZnQtaWV0Zi1hY2Utb2F1dGgtYXV0aHouIFRoZXJlIGlzIGFsd2F5cyB0aGUgcG9zc2li aWxpdHkgdG8gc3BlY2lmeQ0KPj4gb3RoZXIgc29sdXRpb25zIGluIHNlcGFyYXRlIGRvY3VtZW50 cyBpbiBwYXJhbGxlbCBvciBsYXRlci4NCj4+IA0KPj4gSGVyZSBhcmUgdGhlIHNsaWRlcyBmcm9t IHRoZSBBQ0UgdmlydHVhbCBpbnRlcmltIG1lZXRpbmcgcHJvdmlkaW5nDQo+PiBmdXJ0aGVyIGJh Y2tncm91bmQgaW5mb3JtYXRpb246DQo+PiANCj4+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvcHJvY2Vl ZGluZ3MvaW50ZXJpbS8yMDE2LzAzLzAyL2FjZS9zbGlkZXMvc2xpZGVzLWludA0KPj5lcmltLTIw MTYtYWNlLTEtNC5wZGYNCj4+IA0KPj4gRGVhZGxpbmU6IDE2dGggTWFyY2ggMjAxNg0KPj4gDQo+ PiBDaWFvDQo+PiBIYW5uZXMgJiBLZXBlbmcNCj4+IA0KPj4gUFM6ICgxKSBUaGlzIHdhcyB0aGUg YXBwcm9hY2ggdGhhdCB3YXMgc2VsZWN0ZWQgaW4gT0F1dGggd2hlcmUgdGhlDQo+PiBCZWFyZXIg VG9rZW4gc3BlY2lmaWNhdGlvbiB3YXMgcHVibGlzaGVkIGFzIGEgc2VwYXJhdGUgUkZDLg0KPj4g DQo+PiANCj4+IA0KPj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX18NCj4+IEFjZSBtYWlsaW5nIGxpc3QNCj4+IEFjZUBpZXRmLm9yZw0KPj4gaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9hY2UNCj4+IA0KPg0KDQo= From nobody Thu Mar 3 05:46:19 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E60D1A1A7D for ; Thu, 3 Mar 2016 05:46:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.9 X-Spam-Level: X-Spam-Status: No, score=-3.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 833RG-UOxLDC for ; Thu, 3 Mar 2016 05:46:11 -0800 (PST) Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3E4651ACDA8 for ; Thu, 3 Mar 2016 05:46:11 -0800 (PST) X-AuditID: c1b4fb25-f794e6d000003d15-0e-56d84021966b Received: from ESESSHC001.ericsson.se (Unknown_Domain [153.88.183.21]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id 61.D1.15637.12048D65; Thu, 3 Mar 2016 14:46:09 +0100 (CET) Received: from ESESSMB303.ericsson.se ([169.254.3.52]) by ESESSHC001.ericsson.se ([153.88.183.21]) with mapi id 14.03.0248.002; Thu, 3 Mar 2016 14:46:08 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Hannes Tschofenig , "Ace@ietf.org" Thread-Topic: [Ace] Deployment Options Thread-Index: AQHRdKpW2n5qYqA50EqdLwCS8CIhm59HiPGAgAAzywA= Date: Thu, 3 Mar 2016 13:46:07 +0000 Message-ID: References: <56D7250E.6020300@gmx.net> <56D822BB.7080002@gmx.net> In-Reply-To: <56D822BB.7080002@gmx.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.0.151221 x-originating-ip: [153.88.183.149] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprFIsWRmVeSWpSXmKPExsUyM2K7qK6iw40wg8nHxCy+f+thtli68x6r A5PH4k372TyWLPnJFMAUxWWTkpqTWZZapG+XwJXR07SOteCYcsXKSwcYGxgvKHUxcnJICJhI fD/+lhnCFpO4cG89G4gtJHCYUWLVZSkIexGjxJ7lMiA2m4CLxIOGR0wgtohAkMSBuwsYuxg5 OIQFVCVWvK2ECKtJbH6+ggXCtpLYM3UdC0gJi4CKxIolXCBhXgELiSnzj7BCTHeUOPdkPjuI zSmgLvHqdDfYNYxA13w/tQZsE7OAuMStJ/OZIK4UkFiy5zzUxaISLx//YwUZLyqgJ9F1pAIi rCSx9vB2sK3MApoS63fpQ0yxlmj7uYYNwlaUmNL9kB3iGkGJkzOfsExgFJ+FZNkshO5ZSLpn IemehaR7ASPrKkbR4tTipNx0I2O91KLM5OLi/Dy9vNSSTYzAGDu45bfqDsbLbxwPMQpwMCrx 8G5YcT1MiDWxrLgy9xCjBAezkgjvO8UbYUK8KYmVValF+fFFpTmpxYcYpTlYlMR5WT9dDhMS SE8sSc1OTS1ILYLJMnFwSjUwuj53Wn4j3e1oSva1t713l6+pD59nnnOztarrgEmH2u3ufPnT 1mfyVsUbs9Tzm514ZtObrbNhRmfB+jVckiuPOrSzyUZtcvp5pWX+gYokj+hFaRF7Pnswh8fM lMx+6iPo9OVOPkdZdbEr08pjO1gO1kZ2iRwyPZcVczj4Z/opTpHiEG7bBbuVWIozEg21mIuK EwEbUThxrQIAAA== Archived-At: Subject: Re: [Ace] Deployment Options X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2016 13:46:17 -0000 SGkgSGFubmVzLCBhbGwNCg0KT24gMjAxNi0wMy0wMyAxMjo0MCwgIkFjZSBvbiBiZWhhbGYgb2Yg SGFubmVzIFRzY2hvZmVuaWciDQo8YWNlLWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIGhh bm5lcy50c2Nob2ZlbmlnQGdteC5uZXQ+IHdyb3RlOg0KDQo+LS0gY2hhaXIgaGF0IG9mZg0KPg0K Pkkgd291bGQgbWVyZ2Ugc2NlbmFyaW8gNi4xIGFuZCA2LjIgc2luY2UgdGhleSBhcmUgdmVyeSBz aW1pbGFyLiBUaGUNCj5wb2ludCBpcyBtb3JlIHRoYXQgdGhlIHJlc291cmNlIHNlcnZlciBpcyBv ZmZsaW5lLiBXaGVuIHRoZSBjbGllbnQgaXMNCj5vZmZsaW5lIGl0IGp1c3QgbWVhbnMgdGhhdCBp dCBoYXMgdG8gZ2V0IHRoZSB0b2tlbiB1cGZyb250Lg0KPg0KPlNjZW5hcmlvIDYuMyBhbmQgNi40 IGNhbiBhbHNvIGJlIG1lcmdlZCBzaW5jZSB0aGVpciBtYWluIG1lc3NhZ2UgaXMgdGhhdA0KPnRo ZXJlIGlzIHRva2VuIGludHJvc3BlY3Rpb24uDQoNCkFnYWluLCBtYWtpbmcgdGhlIGRpc3RpbmN0 aW9uIGJldHdlZW4g4oCcZXhhbXBsZeKAnSBhbmQg4oCccHJvZmlsZeKAnTogSSBkb27igJl0IHNl ZQ0KdGhlIHByb2JsZW0gdG8gaGF2ZSBtYW55IGV4YW1wbGVzIGUuZy4gaW4gYW4gYXBwZW5kaXgs IG9yIGluIHNlcGFyYXRlDQpkcmFmdHMuIEkgcmVjYWxsIGEgcHJldmlvdXMgZGlzY3Vzc2lvbiBh Ym91dCBhIOKAnGNvb2tib29r4oCdLiBJbiB0ZXJtcyBvZg0KcHJvZmlsaW5nLCB5b3VyIGdyb3Vw aW5nIG1ha2VzIHNlbnNlLiBNeSBjb25jZXJuIGlzIHRoYXQgdGhlIGZyYW1ld29yayBpcw0KYWxp Z25lZCBiZXR3ZWVuIHRoZSBkaWZmZXJlbnQgZGVwbG95bWVudCBvcHRpb25zLg0KDQo+DQo+SSBm b2N1cyB0aGUgZGVzY3JpcHRpb24gaW4gdGhlIGRvY3VtZW50IG9uIGEgc2NlbmFyaW8gd2hlcmUg dGhlIHJlc291cmNlDQo+c2VydmVyIHZlcmlmaWVzIHRoZSB0b2tlbnMgbG9jYWxseSAoYmVjYXVz ZSBpdCBpcyBvZmZsaW5lIGF0IHRoZSB0aW1lIG9mDQo+cmVzb3VyY2UgcmVxdWVzdCBvciBiZWNh dXNlIG9mIHNvbWUgb3RoZXIgcmVhc29ucykgYW5kIHVzZXMgdGhlIHJhdw0KPnB1YmxpYyBrZXkg YXMgYSBjcmVkZW50aWFsLg0KPg0KPkkgd291bGQgZGVzY3JpYmUgdHdvIHNjZW5hcmlvcyBpbiBz ZXBhcmF0ZSBkb2N1bWVudHMsIG5hbWVseQ0KPiAqIHNlY3VyZSBncm91cCBjb21tdW5pY2F0aW9u IChmb3Igd2hpY2ggdGhlcmUgaXMgYWxyZWFkeSBhIHNlcGFyYXRlDQo+ZG9jdW1lbnQgYW5kIGl0 IGlzIHN1YnN0YW50aWFsbHkgZGlmZmVyZW50KS4NCj4gKiB0aGUgaW50cm9zcGVjdGlvbiBtb2Rl bA0KPg0KPkkgZG9uJ3QgYmVsaWV2ZSBpbiB0aGUgdG9rZW5sZXNzIHNjZW5hcmlvLg0KDQpJbnRl cmVzdGluZ2x5LCB0aGlzIGlzIHRoZSBvbmx5IGRlcGxveW1lbnQgc2NlbmFyaW8gd2hpY2ggZ290 IGV4cGxpY2l0DQpzdXBwb3J0IG9uIHRoZSBtYWlsaW5nIGxpc3Qgc28gZmFyOg0KaHR0cDovL21h aWxhcmNoaXZlLmlldGYub3JnL2FyY2gvbXNnL2FjZS9OeDlBa0JLSUlqYks4U3JDbkRzd3I3dGoz MzANCg0KDQoNCkfDtnJhbg0KDQoNCg0KPg0KPkNpYW8NCj5IYW5uZXMNCj4NCj5PbiAwMy8wMi8y MDE2IDA2OjM4IFBNLCBIYW5uZXMgVHNjaG9mZW5pZyB3cm90ZToNCj4+IEhpIGFsbCwNCj4+IA0K Pj4gPGRyYWZ0LWlldGYtYWNlLW9hdXRoLWF1dGh6LTAxPiBkZXNjcmliZXMgNiBkZXBsb3ltZW50 IG9wdGlvbnMgaW4NCj4+IFNlY3Rpb24gNjoNCj4+IA0KPj4gICA2LiAgRGVwbG95bWVudCBTY2Vu YXJpb3MgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTgNCj4+ICAg ICAgNi4xLiAgQ2xpZW50IGFuZCBSZXNvdXJjZSBTZXJ2ZXIgYXJlIE9mZmxpbmUgIC4gLiAuIC4g LiAuIC4gLiAuICAxOQ0KPj4gICAgICA2LjIuICBSZXNvdXJjZSBTZXJ2ZXIgT2ZmbGluZSAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDIyDQo+PiAgICAgIDYuMy4gIFRva2VuIElu dHJvc3BlY3Rpb24gd2l0aCBhbiBPZmZsaW5lIENsaWVudCAgLiAuIC4gLiAuIC4gLiAgMjYNCj4+ ICAgICAgNi40LiAgQWx3YXlzLU9uIENvbm5lY3Rpdml0eSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuICAzMA0KPj4gICAgICA2LjUuICBUb2tlbi1sZXNzIEF1dGhvcml6YXRpb24g IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDMxDQo+PiAgICAgIDYuNi4gIFNlY3Vy aW5nIEdyb3VwIENvbW11bmljYXRpb24gIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMzQN Cj4+IA0KPj4gRGVzY3JpYmluZyBhbGwgNiBkZXBsb3ltZW50IG9wdGlvbnMgYXQgYSBsZXZlbCB0 aGF0IGFsbG93cyBpbnRlcm9wZXJhYmxlDQo+PiBpbXBsZW1lbnRhdGlvbnMgaW4gYSBzaW5nbGUg ZG9jdW1lbnQsIG5hbWVseSBpbg0KPj4gZHJhZnQtaWV0Zi1hY2Utb2F1dGgtYXV0aHo+LCBtYWtl IHRoZSBkb2N1bWVudCBsb25nZXIgKG9idmlvdXNseSksDQo+PiByZXF1aXJlcyBhIGZhaXIgYW1v dW50IG9mIHdvcmssIGFuZCB0YWtlcyBsb25nZXIuDQo+PiANCj4+IEZvciB0aGlzIHJlYXNvbiB3 ZSBhcmUgYXNraW5nIGZvciB5b3VyIHByaW9yaXRpZXMuIFdoaWNoIG9mIHRoZXNlDQo+PiBkZXBs b3ltZW50IG9wdGlvbnMgYXJlIG1vcmUgaW1wb3J0YW50IGZvciB5b3UgdGhhbiBvdGhlcnMuDQo+ PiANCj4+IFBsZWFzZSBsZXQgdXMga25vdyB3aGljaCBvZiB0aGVtIHdvdWxkIHlvdSBpbmNsdWRl IGluIHRoZSBXRyBkb2N1bWVudCwNCj4+IHdoaWNoIG9mIHRoZW0gd291bGQgeW91IHdvdWxkIGxp a2UgdG8gc2VlIGNvdmVyZWQgaW4gc2VwYXJhdGUgZG9jdW1lbnRzLA0KPj4gYW5kIHdoaWNoIG9m IHRoZW0gd291bGQgeW91IGRyb3A/DQo+PiANCj4+IEhlcmUgYXJlIHRoZSBzbGlkZXMgZnJvbSB0 aGUgQUNFIHZpcnR1YWwgaW50ZXJpbSBtZWV0aW5nIHByb3ZpZGluZw0KPj4gZnVydGhlciBiYWNr Z3JvdW5kIGluZm9ybWF0aW9uOg0KPj4gDQo+Pmh0dHBzOi8vd3d3LmlldGYub3JnL3Byb2NlZWRp bmdzL2ludGVyaW0vMjAxNi8wMy8wMi9hY2Uvc2xpZGVzL3NsaWRlcy1pbnQNCj4+ZXJpbS0yMDE2 LWFjZS0xLTEucGRmDQo+PiANCj4+IERlYWRsaW5lOiAxNnRoIE1hcmNoIDIwMTYNCj4+IA0KPj4g Q2lhbw0KPj4gSGFubmVzICYgS2VwZW5nDQo+PiANCj4+IA0KPj4gDQo+PiBfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPj4gQWNlIG1haWxpbmcgbGlzdA0K Pj4gQWNlQGlldGYub3JnDQo+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L2FjZQ0KPj4gDQo+DQoNCg== From nobody Thu Mar 3 09:59:10 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AFBDC1B2B4A for ; Thu, 3 Mar 2016 09:59:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Abj82Hi4db2Y for ; Thu, 3 Mar 2016 09:59:06 -0800 (PST) Received: from mail-qg0-x233.google.com (mail-qg0-x233.google.com [IPv6:2607:f8b0:400d:c04::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E9F3C1B2B4D for ; Thu, 3 Mar 2016 09:59:05 -0800 (PST) Received: by mail-qg0-x233.google.com with SMTP id y89so23235987qge.2 for ; Thu, 03 Mar 2016 09:59:05 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=Ua3AMlzjR7BZYPCgzLrX2xK6ezL/NMuS5gdlyEyN7Bg=; b=Uzy2TEbiYpV7zfLeuqrGjqvzdjpNciQ8FZtN9lMIAqac+aAcRFSz5De0IKuPC+Czpg oiSoeYXd9kpf8Yn8BLDie3DxXEFOLzPUkGke90pp83Y4A/apbwiDsyOtx8mvm10olDb1 YSE5jYdjdjWPWxhx7lstaCvJvqP4F7QKJVGkZlHsjBzuZQieUOgxNJZO6QOqODflfLMB uX8T2PraSLz1XmNBUWKeyyluvWg3eCgETFC7Nl1fBVsvE08Kqzg9QzW9Dow2al7Jh+7s 3gQtVgk80+C1qQeJgQ+4hkBLEp/yMVQzTYiB9maHDCr9uce2tx5Roq6NCzYxdB1/gnIL a/JA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=Ua3AMlzjR7BZYPCgzLrX2xK6ezL/NMuS5gdlyEyN7Bg=; b=hQGeyLVDwZDWzg8OXd+KVb4i36hR4DgyU5UwsQoZiGYe2AUP9p/ahxy281JogMX0Ll JOiBQL4GVenu5sCxznsTJEwN9bR2ncgHALsX63P4EgUt06CG73EkF+/129r6Quan6dC4 gy/rqY9UMb16kf1VTALe+faYbk1Fkqb610wAVPxfElBNHcIEEkmCFxC8rL4ugoG0v1CK 1+J9/1UQK2bREJv3krf30toiQM04/QKywZiLHqQjDFp6yf245F1UhvmAATrcZLRLYzkq HyAXxQ8qsLUyiq8lylW20RNm/Y9t1Uobm7ybfVUOYytAaVKivEGeazjcCtvQLPmiUsJg fiog== X-Gm-Message-State: AD7BkJIgMU3xG6gDKv4hlUyOF6isn8qFM8Chqrb0fxuEHJoLbkMUzwnwiPkbk3XM8/5yz0txpri0BcGum5KUDw== X-Received: by 10.140.18.163 with SMTP id 32mr4720841qgf.11.1457027945067; Thu, 03 Mar 2016 09:59:05 -0800 (PST) MIME-Version: 1.0 Received: by 10.55.148.198 with HTTP; Thu, 3 Mar 2016 09:58:45 -0800 (PST) In-Reply-To: <56D76573.8060804@tzi.org> References: <56D728AD.7050109@gmx.net> <56D76573.8060804@tzi.org> From: Renzo Navas Date: Thu, 3 Mar 2016 18:58:45 +0100 Message-ID: To: Hannes Tschofenig Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: Carsten Bormann , "Ace@ietf.org" Subject: Re: [Ace] RS Synchronized Time X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2016 17:59:07 -0000 HI Hannes, Kepeng, Carsten, All, Sorry I was not present on yesterday's meeting. > Hannes Tschofenig wrote: >> 1) No requirement for real-time clocks and time synchronization at all. >> 2) Requirement for a real-time clock at the RS >> 3) Requirement for a real-time clock at the RS together with the need to >> synchronize time with the AS. Regarding the approaches, I would like to see an ace solution for (1). If here is not the place to discuss and come up with a solution for that type of constrained devices, where would it be? As Carsten said, my understanding of the time limitation of scenario (1) is that the node does not have wallclock time sincronization (notion of absolute time) -he could have internal clock- ; not having wallclock time is enough to make the current PoP token approach (Denning-Sacco shared key-like) to not be feasible (or any timestamp authenticated key establishment approach). One clarification: I see the PoP token as a new fresh shared key between previously unknown parties, hence I treat the base PoP-token problem as an Authenticated Key Establishment-problem. Replying to Hannes request for ideas: In late 2015 I've been working on the authenticated key establishment problem, and I've studied several nonce-based approaches on the third party scenario. * How can I help? Maybe I can make a set of slides with the the nonce-based approaches I studied (I mentioned some here http://www.ietf.org/mail-archive/web/ace/current/msg01554.html), and map it to the REST OAuth Scenario: Client, Resource Server, and AS ? (like on slide 5 of https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-interim-2016-ace-1-5.pdf) then if its worthy a draft with a nonce-based flow oauth pop token? Maybe is better first to have a high level idea of how the different nonce based protocols will map to the pop rest oauth architecture. Regards Renzo From nobody Thu Mar 3 10:21:42 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7ECD51B2C83 for ; Thu, 3 Mar 2016 10:21:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.977 X-Spam-Level: X-Spam-Status: No, score=-0.977 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RBr1KrM3EZ9c for ; Thu, 3 Mar 2016 10:21:39 -0800 (PST) Received: from mail-wm0-x235.google.com (mail-wm0-x235.google.com [IPv6:2a00:1450:400c:c09::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F02701B2C36 for ; Thu, 3 Mar 2016 10:21:38 -0800 (PST) Received: by mail-wm0-x235.google.com with SMTP id n186so2059341wmn.1 for ; Thu, 03 Mar 2016 10:21:38 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wahlstromstekniska-se.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=rKWNFoO9Y1ram8pawNOfe2ruxQuFJlbiKJd6Hl23a9M=; b=aIY8yhtbMImKVMb5b4U4NnM4qJ7TXbHj0A+jw5H9jINzFHIOqhH63hpXTCBSg/UCy7 6uzc/1CV2gzbXau9rxzx2UyvCHNe6dhq+QhTTsNudW0y9krowxnOKjUQcyfi8tyGJ/nr PbzOyR6Yu/mIeqH6N5JXUF5XTF4GO5LgyiwvDsl3A9axBGrcMWkJdwkcDaxmixI/Im1M RtMpPQZF6Mv6tqd5mIoVOhNXu51Wt7qUYgiw/Lh4gHJ2hIQgFO4tAfnylAwcOr1RuNr9 es8tGdlzgIfT0Nq0fGX72nkY2fWSENSMW9ALyGDR814E6h8Kyac44DDqLxB1mLa9nnuE UG7w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=rKWNFoO9Y1ram8pawNOfe2ruxQuFJlbiKJd6Hl23a9M=; b=nGz3OjkWfB/qRvGkUXZQ31AkbznE2vR6R0tBBHb45tKvK87JK7cQTvJpv/wuc3F0pg I3cpFWYLg6nPHb2951DJfTAAApV4tdiKg8uSdcayViMd7kaCqrGRq8CuU8d95IhspVSx apzrdn6EgwdLS8VjsHzF3D8/tjzYST5EDNU1d1S+n3HgmkDmbEY/8OnF2hbnoGTpWnYb /RcqR62nuSNzkl4o2jSpNhqYbGY18yAxPFvVtzvb75C5aoe6dE3zaHk1a34IxF42+hCb jNmKxB1Np26ZCq5DmhigZXhoOsfLYt3SY1S+ucgWxLW0BZtvAroAHzYo3pkaNUp34V7w 72gA== X-Gm-Message-State: AD7BkJJ0reCJ8u9YO55VxxZQgghDpGzc4IYIac+Rfkn1vgBJ58l4cNGvB5fXffqJf+P8A02eDjLey6ca76mJWw== MIME-Version: 1.0 X-Received: by 10.194.121.34 with SMTP id lh2mr4420506wjb.145.1457029297550; Thu, 03 Mar 2016 10:21:37 -0800 (PST) Received: by 10.28.226.132 with HTTP; Thu, 3 Mar 2016 10:21:37 -0800 (PST) X-Originating-IP: [94.234.170.48] In-Reply-To: <56D820E7.2070304@gmx.net> References: <56D723D1.3090204@gmx.net> <56D820E7.2070304@gmx.net> Date: Thu, 3 Mar 2016 19:21:37 +0100 Message-ID: From: =?UTF-8?Q?Erik_Wahlstr=C3=B6m?= To: Hannes Tschofenig Content-Type: multipart/alternative; boundary=089e01227cf0b55c5c052d2911c3 Archived-At: Cc: "Ace@ietf.org" Subject: Re: [Ace] CBOR and/or JSON X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2016 18:21:41 -0000 --089e01227cf0b55c5c052d2911c3 Content-Type: text/plain; charset=UTF-8 Hi, See below. On Thu, Mar 3, 2016 at 12:32 PM, Hannes Tschofenig < hannes.tschofenig@gmx.net> wrote: > -- chair hat off > For the token introspection we already have the HTTP version in OAuth > and no changes are needed there. A part from it needs to be extended with aif and cnf claims. A cnf claim is needed anyway by the oauth http based PoP draft so that will happen anyway. Aif is very ACE-specific to help a device make an authorization decision. > I still believe we need a version that > runs over CoAP as well. > Agree, that''s a part of the code ACE framework. > > For the client I would make a distinction between the type of client: > > * For rich clients, like mobile phones, I would allow them to work with > HTTP and no changes should be needed to the OAuth framework. > The standard oauth http based token response would also need to send csp with information of how C should connect to the RS and also include trust anchors to be able to authenticate RS. > > * For constrained clients, we will have to define a CoAP-based version. > +1 All in all, I think this can all be done by only focusing on CoAP and CBOR in the core ace framework. But I also think that a JSON/HTTP version must also be crafted very soon after with an alternative draft. / Erik > > Ciao > Hannes > > > On 03/02/2016 06:33 PM, Hannes Tschofenig wrote: > > Hi all, > > > > specifying the ACE OAuth solution the following design question turned > > up: Should both CBOR and JSON be supported in the WG document? Or only > > one of them? > > > > What should be described in the WG document: > > * Alternative 1: CBOR and JSON > > * Alternative 2: CBOR only > > * Alternative 3: JSON only > > > > Additionally, there is the question about HTTP and CoAP support. > > > > Should the WG document only describe > > * Option 1: Use of CoAP, > > * Option 2: Use of HTTP, > > * Option 3: Use of HTTP & CoAP > > > > Here are the slides from the ACE virtual interim meeting providing > > further background information: > > > https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-interim-2016-ace-1-3.pdf > > > > Deadline: 16th March 2016 > > > > Ciao > > Hannes & Kepeng > > > > > > > > > > _______________________________________________ > > Ace mailing list > > Ace@ietf.org > > https://www.ietf.org/mailman/listinfo/ace > > > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > > --089e01227cf0b55c5c052d2911c3 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi,
See below.

On Thu, Mar 3, 2016 at 12:32 PM, Hannes Tschofenig <hannes.tschofenig@gmx.net> wrote:
-- chair hat off
For the token introspection we already h= ave the HTTP version in OAuth
and no changes are needed there.

A part fro= m it needs to be extended with aif and cnf claims. A cnf claim is needed an= yway by the oauth http based PoP draft so that will happen anyway. Aif is v= ery ACE-specific to help a device make an authorization decision.
=C2=A0
I still believe we need a versi= on that
runs over CoAP as well.

Agree, that'= ;'s a part of the code ACE framework.
=C2=A0

For the client I would make a distinction between the type of client:

* For rich clients, like mobile phones, I would allow them to work with
HTTP and no changes should be needed to the OAuth framework.

The standard oauth http based token response would al= so need to send csp with information of how C should connect to the RS and = also include trust anchors to be able to authenticate RS.
=C2=A0<= /div>

* For constrained clients, we will have to define a CoAP-based version.
=

+1

All in all, I = think this can all be done by only focusing on CoAP and CBOR in the core ac= e framework. But I also think that a JSON/HTTP version must also be crafted= very soon after with an alternative draft.

/ Erik=

=C2=A0

Ciao
Hannes


On 03/02/2016 06:33 PM, Hannes Tschofenig wrote:
> Hi all,
>
> specifying the ACE OAuth solution the following design question turned=
> up: Should both CBOR and JSON be supported in the WG document? Or only=
> one of them?
>
> What should be described in the WG document:
> * Alternative 1: CBOR and JSON
> * Alternative 2: CBOR only
> * Alternative 3: JSON only
>
> Additionally, there is the question about HTTP and CoAP support.
>
> Should the WG document only describe
> * Option 1: Use of CoAP,
> * Option 2: Use of HTTP,
> * Option 3: Use of HTTP & CoAP
>
> Here are the slides from the ACE virtual interim meeting providing
> further background information:
> h= ttps://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-interi= m-2016-ace-1-3.pdf
>
> Deadline: 16th March 2016
>
> Ciao
> Hannes & Kepeng
>
>
>
>
> __________________= _____________________________
> Ace mailing list
> Ace@ietf.org
> https://www.ietf.org/mailman/listinfo/ace
>


_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace


--089e01227cf0b55c5c052d2911c3-- From nobody Thu Mar 3 17:09:23 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E7B5F1B311C for ; Thu, 3 Mar 2016 17:09:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.399 X-Spam-Level: X-Spam-Status: No, score=-2.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_8BIT_HEADER=0.3, MIME_QP_LONG_LINE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xxbudYduTnF1 for ; Thu, 3 Mar 2016 17:09:20 -0800 (PST) Received: from out4133-18.mail.aliyun.com (out4133-18.mail.aliyun.com [42.120.133.18]) by ietfa.amsl.com (Postfix) with ESMTP id 2A4071B311B for ; Thu, 3 Mar 2016 17:09:17 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alibaba-inc.com; s=default; t=1457053755; h=Date:Subject:From:To:Message-ID:Mime-version:Content-type; bh=rTpmjODtgTIhF+zzBk94TPdGznxaPEqSDC08xaA4+rw=; b=N/cm0PR9fkEzqpGzO38omDlwCw1sWpWYCGAADN8BEN2Ljnb/K4BwyMr8hkDbWYqSGZRLPTuuWG7X3CTQvu0OtJ3vIDl0llOsjNej9cJdMd2Zv3S+GlkqScyGATUV2w+BF9u8j8B7JWf5MSnnoqz4vHGb6/to1mhlR5z4becUT4U= X-Alimail-AntiSpam: AC=PASS; BC=-1|-1; BR=01201311R211e4; FP=0|-1|-1|-1|0|-1|-1|-1; HT=e02c03288; MF=kepeng.lkp@alibaba-inc.com; NM=1; PH=DS; RN=3; SR=0; TI=SMTPD_----4ZdFWaj_1457053746; Received: from 30.10.27.238(mailfrom:kepeng.lkp@alibaba-inc.com ip:42.120.74.102) by smtp.aliyun-inc.com(127.0.0.1); Fri, 04 Mar 2016 09:09:11 +0800 User-Agent: Microsoft-MacOutlook/14.4.8.150116 Date: Fri, 04 Mar 2016 09:09:05 +0800 From: "Kepeng Li" To: =?ISO-8859-1?B?R/ZyYW4=?= Selander , "Ace@ietf.org" , Hannes Tschofenig Message-ID: Thread-Topic: [Ace] Milestones References: <56D71F16.7080303@gmx.net> In-Reply-To: Mime-version: 1.0 Content-type: text/plain; charset="UTF-8" Content-transfer-encoding: quoted-printable Archived-At: Subject: Re: [Ace] Milestones X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 04 Mar 2016 01:09:22 -0000 > I think this time line is too optimistic for any of the above. +1. This is also my personal observation. Kepeng (Individual) =E5=9C=A8 3/3/16 5:19 pm=EF=BC=8C "G=C3=B6ran Selander" =E5=86=99=E5=85= =A5: > > >On 2016-03-02 18:12, "Ace on behalf of Hannes Tschofenig" > wrote: > >> >>** May 2016 Submit "Authentication and Authorization Solution" >>specification to the IESG for publication as a Proposed Standard. >> >>--> Here the question is what we expect to have completed by May. >>Here are possible options: >> >> * Specification completed. >> * Reference implementation available. >> * Interoperability testing done. >> * Formal verification of the security parts. >> >>Also, the amount of specification work depends a bit on your feedback on >>the items we are going to ask feedback for. >> >>It would be good to know whether you have an opinion about these issues. > >I think this time line is too optimistic for any of the above. Considering >that we spent most of last year to determine which of the candidates >solutions we were going to take as a "starting point", and that we have >received many reviews calling for different types of considerations and >extensions, and the ongoing discussion about handling the different >deployment options, I think it is reasonable to give this work item more >time to complete. > > >G=C3=B6ran > >_______________________________________________ >Ace mailing list >Ace@ietf.org >https://www.ietf.org/mailman/listinfo/ace From nobody Sat Mar 5 01:36:45 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E0A21B2B10; Sat, 5 Mar 2016 01:36:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=unavailable Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iL-xWZLn24oc; Sat, 5 Mar 2016 01:36:41 -0800 (PST) Received: from relay3-d.mail.gandi.net (relay3-d.mail.gandi.net [217.70.183.195]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 94C071B2B15; Sat, 5 Mar 2016 01:36:38 -0800 (PST) Received: from mfilter23-d.gandi.net (mfilter23-d.gandi.net [217.70.178.151]) by relay3-d.mail.gandi.net (Postfix) with ESMTP id 1B51AA80D2; Sat, 5 Mar 2016 10:36:37 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at mfilter23-d.gandi.net Received: from relay3-d.mail.gandi.net ([IPv6:::ffff:217.70.183.195]) by mfilter23-d.gandi.net (mfilter23-d.gandi.net [::ffff:10.0.15.180]) (amavisd-new, port 10024) with ESMTP id St7K2TDTDe_m; Sat, 5 Mar 2016 10:36:35 +0100 (CET) X-Originating-IP: 93.204.214.47 Received: from nar.local (p5DCCD62F.dip0.t-ipconnect.de [93.204.214.47]) (Authenticated sender: cabo@cabo.im) by relay3-d.mail.gandi.net (Postfix) with ESMTPSA id 54004A80D1; Sat, 5 Mar 2016 10:36:32 +0100 (CET) Message-ID: <56DAA5D7.5030806@tzi.org> Date: Sat, 05 Mar 2016 10:24:39 +0100 From: Carsten Bormann User-Agent: Postbox 4.0.8 (Macintosh/20151105) MIME-Version: 1.0 To: "ace@ietf.org" , "core@ietf.org WG" , "cose@ietf.org" , "dtls-iot@ietf.org" , "t2trg@irtf.org" X-Enigmail-Version: 1.2.3 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Archived-At: Subject: [Ace] Constrained Node/Network Cluster @ IETF95: DRAFT AGENDA X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Mar 2016 09:36:42 -0000 Here is my usual eclectic condensed agenda based on the DRAFT AGENDA for IETF95. Remember that there is still quite some potential for changes. All times are COT (UTC-0500), which is the same as US CDT (Chicago or Dallas time) during the meeting (the browser timezone function is not yet reinstated on https://datatracker.ietf.org/meeting/agenda-utc, for those who want to listen from remote). Grüße, Carsten MONDAY, April 4, 2016 1000-1230 Morning Session I Atlantico C SEC *** ace Authentication and Authorization for Constrained Environments WG Buen Ayre A SEC tokbind Token Binding WG 1400-1530 Afternoon Session I Atlantico C ART uta Using TLS in Applications WG Buen Ayre B INT *** 6tisch IPv6 over the TSCH mode of IEEE 802.15.4e WG Buen Ayre C OPS v6ops IPv6 Operations WG 1550-1720 Afternoon Session II Buen Ayre A INT dnssd Extensions for Scalable DNS Service Discovery WG Pacifico A IRTF maprg Proposed Measurement and Analysis for Protocols Research Group Buen Ayre C RTG babel Babel routing protocol BOF Buen Ayre B SEC *** cose CBOR Object Signing and Encryption WG 1740-1940 Afternoon Session III Quebracho B ART webpush Web-Based Push Notifications WG Buen Ayre C INT *** lpwan Low-Power Wide Area Networks BOF Buen Ayre B OPS anima Autonomic Networking Integrated Model and Approach WG Buen Ayre A SEC acme Automated Certificate Management Environment WG TUESDAY, April 5, 2016 1000-1230 Morning Session I Atlantico C INT arcing Alternative Resolution Contexts for Internet Naming BOF Buen Ayre C OPS v6ops IPv6 Operations WG Buen Ayre A RTG detnet Deterministic Networking WG Atlantico B SEC tls Transport Layer Security WG 1400-1600 Afternoon Session I Pacifico A INT homenet Home Networking WG Atlantico C SEC lurk Limited Use of Remote Keys BOF Buen Ayre B TSV tsvwg Transport Area Working Group WG 1620-1720 Afternoon Session II Buen Ayre C INT intarea Internet Area Working Group WG Quebracho B RTG *** roll Routing Over Low power and Lossy networks WG Buen Ayre B SEC curdle CURves, Deprecating and a Little more Encryption WG 1730-1900 Afternoon Session III Buen Ayre B ART *** core Constrained RESTful Environments WG Pacifico A TSV tsvarea Transport Area Open Meeting WEDNESDAY, April 6, 2016 1000-1230 Morning Session I Buen Ayre C INT 6man IPv6 Maintenance WG Buen Ayre B SEC oauth Web Authorization Protocol WG Atlantico C SEC openpgp Open Specification for Pretty Good Privacy WG - 11:00 - 12:30 Atlantico B TSV rmcat RTP Media Congestion Avoidance Techniques WG 1400-1600 Afternoon Session I Buen Ayre C INT its Intelligent Transportation Systems BOF Quebracho B RTG bier Bit Indexed Explicit Replication WG 1620-1720 Afternoon Session II Buen Ayre C RTG rtgarea Routing Area Open Meeting Buen Ayre B SEC httpauth Hypertext Transfer Protocol Authentication WG Buen Ayre A TSV tsvwg Transport Area Working Group WG THURSDAY, April 7, 2016 1000-1230 Morning Session I Atlantico C SEC tls Transport Layer Security WG Pacifico A TSV accord Alternatives to Content Classification for Operator Resource Deployment BOF 1400-1600 Afternoon Session I Buen Ayre A ART ice Interactive Connectivity Establishment WG Pacifico A SEC saag Security Area Open Meeting 1620-1820 Afternoon Session II Atlantico C ART httpbis Hypertext Transfer Protocol WG Pacifico A INT *** 6lo IPv6 over Networks of Resource-constrained Nodes WG Buen Ayre C TSV tcpinc TCP Increased Security WG 1830-1930 Afternoon Session III Buen Ayre C IRTF*** t2trg Thing-to-Thing Atlantico B OPS anima Autonomic Networking Integrated Model and Approach WG FRIDAY, April 8, 2016 1000-1200 Morning Session I Quebracho B ART *** core Constrained RESTful Environments WG Buen Ayre B IRTF cfrg Crypto Forum Buen Ayre A TSV taps Transport Services WG From nobody Sat Mar 5 01:49:26 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0192E1B2BA7; Sat, 5 Mar 2016 01:49:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cVckiMGbHFwZ; Sat, 5 Mar 2016 01:49:20 -0800 (PST) Received: from relay5-d.mail.gandi.net (relay5-d.mail.gandi.net [217.70.183.197]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A01261B2BAF; Sat, 5 Mar 2016 01:49:16 -0800 (PST) Received: from mfilter49-d.gandi.net (mfilter49-d.gandi.net [217.70.178.180]) by relay5-d.mail.gandi.net (Postfix) with ESMTP id F1AA141C08D; Sat, 5 Mar 2016 10:49:14 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at mfilter49-d.gandi.net Received: from relay5-d.mail.gandi.net ([IPv6:::ffff:217.70.183.197]) by mfilter49-d.gandi.net (mfilter49-d.gandi.net [::ffff:10.0.15.180]) (amavisd-new, port 10024) with ESMTP id sHBKzp0rPSTR; Sat, 5 Mar 2016 10:49:13 +0100 (CET) X-Originating-IP: 93.204.214.47 Received: from nar.local (p5DCCD62F.dip0.t-ipconnect.de [93.204.214.47]) (Authenticated sender: cabo@cabo.im) by relay5-d.mail.gandi.net (Postfix) with ESMTPSA id 3BAF641C08A; Sat, 5 Mar 2016 10:49:10 +0100 (CET) Message-ID: <56DAAB99.4030309@tzi.org> Date: Sat, 05 Mar 2016 10:49:13 +0100 From: Carsten Bormann User-Agent: Postbox 4.0.8 (Macintosh/20151105) MIME-Version: 1.0 To: "ace@ietf.org" , "core@ietf.org WG" , "cose@ietf.org" , "dtls-iot@ietf.org" , "t2trg@irtf.org" References: <56DAA5D7.5030806@tzi.org> In-Reply-To: <56DAA5D7.5030806@tzi.org> X-Enigmail-Version: 1.2.3 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [Ace] [T2TRG] Constrained Node/Network Cluster @ IETF95: DRAFT AGENDA X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Mar 2016 09:49:22 -0000 Amazing how you find the obvious error only after sending the mail to ten mailing lists... It is of course ART (UTC-0300), which is New Brunswick or Bermuda time. Sorry about that. Carsten Bormann wrote: > All times are COT (UTC-0500), which is the same as US CDT ( Grüße, Carsten From nobody Sat Mar 5 13:17:31 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 49FA81B372D for ; Sat, 5 Mar 2016 13:17:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.277 X-Spam-Level: X-Spam-Status: No, score=-1.277 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NgmryaMTDnEa for ; Sat, 5 Mar 2016 13:17:27 -0800 (PST) Received: from mail-vk0-x236.google.com (mail-vk0-x236.google.com [IPv6:2607:f8b0:400c:c05::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3F3141B3728 for ; Sat, 5 Mar 2016 13:17:26 -0800 (PST) Received: by mail-vk0-x236.google.com with SMTP id c3so85191130vkb.3 for ; Sat, 05 Mar 2016 13:17:26 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=erdtman-se.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=ATkBIhufJCDNcEduYlacy7snuZsNMuqw+R6AbKqUH2w=; b=uxpErJxM1H1BDSlFSSeMR6MOuTBwFmisa9Q1g1mXIJQO025eh1rm+39TftkZBZWZwb iw+JuZ7PqYozGSvvTEDuKLj1ErzDXTL5ON12WrBXAUug3+MOq3c/eUOID9btjzjtxIVD 6bYNXagGo713oUsDwf39Z+qmRn2iXelcrXiHO4/vin5fZ5n3CTNVexlOjGY/+iMcRotW DUyBD0DH9+fWHltepQt7v68P+S18xAjPJjAkFI5x6aZukHhqFIN+lGmC6uEH4+xUmxg6 oy/JuBdKYvIluLYLAM9o4KLqbhfEHZ0Fr0y0vXj58pnXFgNq6RyynLXWT5lJPJFfrLsr zkkA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=ATkBIhufJCDNcEduYlacy7snuZsNMuqw+R6AbKqUH2w=; b=gdV4QSnnf6uXALRbCACKKtQcUCnjcZlhmbELcNrVoZMEJCRTDSc27vpHvlaEJt9VIv ciHyqxatvjoRxiXcMhOnmSlRlffiypOapxVWZxXnxkQ88f7ULlvfP1tElZwX+9av+Zty srlVspXcwfIGqzlNoy2SJ+bHHHMS2VOHfG0h1Z5jiF2nLpcYWG4JUK88Qp2B5u4JtQx4 QCRp9nw7/1OtTjYtsbfMGXos4MvRnbzgCNLJvXBru6JyYqIAkWIAAiA/v3jjt9L8i4Xb Etpxee3StDv8qKrSEdWbljpcIMXjp+DXl84xYop1ux92ZcyNPcYkZvVT3HCHxS8k9OY/ PMKA== X-Gm-Message-State: AD7BkJJh/5jYw+466jdSEDmDt4lnch8WpMpL1MbUX6Gkd1DlmM9AGWD8dyvfxDE/HSw7G9Hun6B2LFl5w+EY6w== MIME-Version: 1.0 X-Received: by 10.31.52.134 with SMTP id b128mr12669065vka.124.1457212646070; Sat, 05 Mar 2016 13:17:26 -0800 (PST) Received: by 10.159.37.102 with HTTP; Sat, 5 Mar 2016 13:17:25 -0800 (PST) In-Reply-To: <56D723D1.3090204@gmx.net> References: <56D723D1.3090204@gmx.net> Date: Sat, 5 Mar 2016 22:17:25 +0100 Message-ID: From: Samuel Erdtman To: Hannes Tschofenig Content-Type: multipart/alternative; boundary=001a114402be21b178052d53c281 Archived-At: Cc: "Ace@ietf.org" Subject: Re: [Ace] CBOR and/or JSON X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Mar 2016 21:17:29 -0000 --001a114402be21b178052d53c281 Content-Type: text/plain; charset=UTF-8 Hi, My first choice is Alternative 1 with option 1. My second choice is Alternative 2 with option 1. My reasoning behind this is that, when mapping and extending OAuth functionality form HTTP and JSON to CoAP and CBOR there will will be cases where we add new parameters e.g csp (communication security protocol) in PoP token response or aif in introspection response. In these cases I think it would be simpler to first register the new parameter in the old OAuth space and then map it to CoAP and CBOR. If doing like this we might end up with a Alternative 1 option 3 solution but I think it would be the most straight forward approach if we want to keep close to OAuth. With that said I think focus in the spec and in the work should be CoAP and CBOR. //Samuel On Wed, Mar 2, 2016 at 6:33 PM, Hannes Tschofenig wrote: > Hi all, > > specifying the ACE OAuth solution the following design question turned > up: Should both CBOR and JSON be supported in the WG document? Or only > one of them? > > What should be described in the WG document: > * Alternative 1: CBOR and JSON > * Alternative 2: CBOR only > * Alternative 3: JSON only > > Additionally, there is the question about HTTP and CoAP support. > > Should the WG document only describe > * Option 1: Use of CoAP, > * Option 2: Use of HTTP, > * Option 3: Use of HTTP & CoAP > > Here are the slides from the ACE virtual interim meeting providing > further background information: > > https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-interim-2016-ace-1-3.pdf > > Deadline: 16th March 2016 > > Ciao > Hannes & Kepeng > > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > > --001a114402be21b178052d53c281 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi,

My first choice is=C2=A0
= Alternative 1 with option 1.
My second choice is=C2=A0
= Alternative 2 with option 1.

My reasoning behi= nd this is that, when mapping and extending OAuth functionality form HTTP a= nd JSON to CoAP and CBOR there will will be cases where we add new paramete= rs e.g csp (communication security protocol) in PoP token response or aif i= n introspection response. In these cases I think it would be simpler to fir= st register the new parameter in the old OAuth space and then map it to CoA= P and CBOR. If doing like this we might end up with a Alternative 1 option = 3 solution but I think it would be the most straight forward approach if we= want to keep close to OAuth.

With that said I thi= nk focus in the spec and in the work should be CoAP and CBOR.
//Samuel






On Wed, Mar 2, 2016 at 6:33 PM, Hannes Tschofenig <hannes.tschofenig@gmx.net> wrote:
Hi all,

specifying the ACE OAuth solution the following design question turned
up: Should both CBOR and JSON be supported in the WG document? Or only
one of them?

What should be described in the WG document:
* Alternative 1: CBOR and JSON
* Alternative 2: CBOR only
* Alternative 3: JSON only

Additionally, there is the question about HTTP and CoAP support.

Should the WG document only describe
* Option 1: Use of CoAP,
* Option 2: Use of HTTP,
* Option 3: Use of HTTP & CoAP

Here are the slides from the ACE virtual interim meeting providing
further background information:
https:= //www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-interim-201= 6-ace-1-3.pdf

Deadline: 16th March 2016

Ciao
Hannes & Kepeng



_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace


--001a114402be21b178052d53c281-- From nobody Sun Mar 6 12:02:10 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F2DD41B322E for ; Sun, 6 Mar 2016 12:02:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.977 X-Spam-Level: X-Spam-Status: No, score=-0.977 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1O2zEyT8xKJU for ; Sun, 6 Mar 2016 12:02:06 -0800 (PST) Received: from mail-vk0-x241.google.com (mail-vk0-x241.google.com [IPv6:2607:f8b0:400c:c05::241]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4506F1B3235 for ; Sun, 6 Mar 2016 12:02:06 -0800 (PST) Received: by mail-vk0-x241.google.com with SMTP id j65so6244124vkg.3 for ; Sun, 06 Mar 2016 12:02:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=erdtman-se.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=bg9RlG5qiE82fOClDRDydp1lClF3WvAoaqB01j8w2qo=; b=GNpS3vmLGBJms8pPCA8cpFH5bsKOA23LKOIeIWp5KmPWWs3iXcaogi94FmBOwlIEHE Dic26YbgrWa1Rp7xOLof0WNboph3ld8XV2BCLR3M1RiiVGgZCCJPUM7pOOyrKm1agpUu joXI1h/6h6+0bZMTcbMxd4kQ6Txqxikywda81/wOjcCf74iRtu0702fNM3tSdCZ2UwOc ZB85N/fxnRYHgrYVYBenND+LZpZCUX8Cc2Pxp45NHVyFr5QaA9Vhv2H4nQLqrT9e8rjh zS1GXhxgUBDYmHoBnskF4fLH+45mmxF1xsCHEKPQkKz53WOlz5vi/diUKDyGVcgBx6zI gWQg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=bg9RlG5qiE82fOClDRDydp1lClF3WvAoaqB01j8w2qo=; b=EujQpmcquO8f4cSf9IUbV1WWBMbdqYAj1kio2rW3HFxi7o+mFK1ei+hsLWOauytreP K6j1007a84wJNod6OgMFuMPKzk1wXBMFdT70IGBCb5jPBrX8IaZ4YNyFisOlprtmI5Ri 14S2UHTBU69fRq/Rqfu+bqTNOFuYn6KtslszEz8pSF66Z+kbm0Fv+mLFxUuGWz0/HFwj Fb9uvizpaxObCNzF6BYvl7XVtukou9+26CNBzIMDXkkedhf7a8EKXGCzoVtvu369Lmmn D/2RFJE/r9kMtZHkIGsaQjXTRmVKz9SQMXezvWf6NhygBWVh8h93gU0Q4OqXJ/iVC3uu etaA== X-Gm-Message-State: AD7BkJLNQN9U9aQEZVMuOmyJP9JcmP2RSSq2ZSZG3bjI6QW9T1LX9JVTRMOYi5NWI4wkZngLrGF/PX7XGKfNnQ== MIME-Version: 1.0 X-Received: by 10.31.6.17 with SMTP id 17mr17008296vkg.75.1457294525243; Sun, 06 Mar 2016 12:02:05 -0800 (PST) Received: by 10.159.37.102 with HTTP; Sun, 6 Mar 2016 12:02:05 -0800 (PST) In-Reply-To: References: <56D7250E.6020300@gmx.net> <56D822BB.7080002@gmx.net> Date: Sun, 6 Mar 2016 21:02:05 +0100 Message-ID: From: Samuel Erdtman To: =?UTF-8?Q?G=C3=B6ran_Selander?= Content-Type: multipart/alternative; boundary=001a1143f24a82bce4052d66d2d9 Archived-At: Cc: Hannes Tschofenig , "Ace@ietf.org" Subject: Re: [Ace] Deployment Options X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 06 Mar 2016 20:02:09 -0000 --001a1143f24a82bce4052d66d2d9 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi, I have always been thinking about these sections as examples to display how the specification can be used. Examples give a good feel for the specification when implementing and selecting wether to implement. As mentioned previously I think they are more suitable for the appendix. I se them as non normative examples and not profiles. //Samuel On Thu, Mar 3, 2016 at 2:46 PM, G=C3=B6ran Selander wrote: > Hi Hannes, all > > On 2016-03-03 12:40, "Ace on behalf of Hannes Tschofenig" > wrote: > > >-- chair hat off > > > >I would merge scenario 6.1 and 6.2 since they are very similar. The > >point is more that the resource server is offline. When the client is > >offline it just means that it has to get the token upfront. > > > >Scenario 6.3 and 6.4 can also be merged since their main message is that > >there is token introspection. > > Again, making the distinction between =E2=80=9Cexample=E2=80=9D and =E2= =80=9Cprofile=E2=80=9D: I don=E2=80=99t see > the problem to have many examples e.g. in an appendix, or in separate > drafts. I recall a previous discussion about a =E2=80=9Ccookbook=E2=80=9D= . In terms of > profiling, your grouping makes sense. My concern is that the framework is > aligned between the different deployment options. > > > > >I focus the description in the document on a scenario where the resource > >server verifies the tokens locally (because it is offline at the time of > >resource request or because of some other reasons) and uses the raw > >public key as a credential. > > > >I would describe two scenarios in separate documents, namely > > * secure group communication (for which there is already a separate > >document and it is substantially different). > > * the introspection model > > > >I don't believe in the tokenless scenario. > > Interestingly, this is the only deployment scenario which got explicit > support on the mailing list so far: > http://mailarchive.ietf.org/arch/msg/ace/Nx9AkBKIIjbK8SrCnDswr7tj330 > > > > G=C3=B6ran > > > > > > >Ciao > >Hannes > > > >On 03/02/2016 06:38 PM, Hannes Tschofenig wrote: > >> Hi all, > >> > >> describes 6 deployment options in > >> Section 6: > >> > >> 6. Deployment Scenarios . . . . . . . . . . . . . . . . . . . . 1= 8 > >> 6.1. Client and Resource Server are Offline . . . . . . . . . = 19 > >> 6.2. Resource Server Offline . . . . . . . . . . . . . . . . . = 22 > >> 6.3. Token Introspection with an Offline Client . . . . . . . = 26 > >> 6.4. Always-On Connectivity . . . . . . . . . . . . . . . . . = 30 > >> 6.5. Token-less Authorization . . . . . . . . . . . . . . . . = 31 > >> 6.6. Securing Group Communication . . . . . . . . . . . . . . = 34 > >> > >> Describing all 6 deployment options at a level that allows interoperab= le > >> implementations in a single document, namely in > >> draft-ietf-ace-oauth-authz>, make the document longer (obviously), > >> requires a fair amount of work, and takes longer. > >> > >> For this reason we are asking for your priorities. Which of these > >> deployment options are more important for you than others. > >> > >> Please let us know which of them would you include in the WG document, > >> which of them would you would like to see covered in separate document= s, > >> and which of them would you drop? > >> > >> Here are the slides from the ACE virtual interim meeting providing > >> further background information: > >> > >> > https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-int > >>erim-2016-ace-1-1.pdf > >> > >> Deadline: 16th March 2016 > >> > >> Ciao > >> Hannes & Kepeng > >> > >> > >> > >> _______________________________________________ > >> Ace mailing list > >> Ace@ietf.org > >> https://www.ietf.org/mailman/listinfo/ace > >> > > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > --001a1143f24a82bce4052d66d2d9 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi,

I have always been thinking about t= hese sections as examples to display how the specification can be used. Exa= mples give a good feel for the specification when implementing and selectin= g wether to implement. As mentioned previously I think they are more suitab= le for the appendix. I se them as non normative examples and not profiles.<= /div>

//Samuel
On Thu, Mar 3, 2016 at 2:46 PM, G=C3=B6ran Sela= nder <goran.selander@ericsson.com> wrote:
Hi Hannes, all

On 2016-03-03 12:40, "Ace on behalf of Hannes Tschofenig"
<ace-bounces@ie= tf.org on behalf of hannes= .tschofenig@gmx.net> wrote:

>-- chair hat off
>
>I would merge scenario 6.1 and 6.2 since they are very similar. The
>point is more that the resource server is offline. When the client is >offline it just means that it has to get the token upfront.
>
>Scenario 6.3 and 6.4 can also be merged since their main message is tha= t
>there is token introspection.

Again, making the distinction between =E2=80=9Cexample=E2=80=9D and = =E2=80=9Cprofile=E2=80=9D: I don=E2=80=99t see
the problem to have many examples e.g. in an appendix, or in separate
drafts. I recall a previous discussion about a =E2=80=9Ccookbook=E2=80=9D. = In terms of
profiling, your grouping makes sense. My concern is that the framework is aligned between the different deployment options.

>
>I focus the description in the document on a scenario where the resourc= e
>server verifies the tokens locally (because it is offline at the time o= f
>resource request or because of some other reasons) and uses the raw
>public key as a credential.
>
>I would describe two scenarios in separate documents, namely
> * secure group communication (for which there is already a separate >document and it is substantially different).
> * the introspection model
>
>I don't believe in the tokenless scenario.

Interestingly, this is the only deployment scenario which got explic= it
support on the mailing list so far:
http://mailarchive.ietf.org/arch= /msg/ace/Nx9AkBKIIjbK8SrCnDswr7tj330



G=C3=B6ran



>
>Ciao
>Hannes
>
>On 03/02/2016 06:38 PM, Hannes Tschofenig wrote:
>> Hi all,
>>
>> <draft-ietf-ace-oauth-authz-01> describes 6 deployment optio= ns in
>> Section 6:
>>
>>=C2=A0 =C2=A06.=C2=A0 Deployment Scenarios=C2=A0 . . . . . . . . . = . . . . . . . . . . .=C2=A0 18
>>=C2=A0 =C2=A0 =C2=A0 6.1.=C2=A0 Client and Resource Server are Offl= ine=C2=A0 . . . . . . . . .=C2=A0 19
>>=C2=A0 =C2=A0 =C2=A0 6.2.=C2=A0 Resource Server Offline . . . . . .= . . . . . . . . . . .=C2=A0 22
>>=C2=A0 =C2=A0 =C2=A0 6.3.=C2=A0 Token Introspection with an Offline= Client=C2=A0 . . . . . . .=C2=A0 26
>>=C2=A0 =C2=A0 =C2=A0 6.4.=C2=A0 Always-On Connectivity=C2=A0 . . . = . . . . . . . . . . . . . .=C2=A0 30
>>=C2=A0 =C2=A0 =C2=A0 6.5.=C2=A0 Token-less Authorization=C2=A0 . . = . . . . . . . . . . . . . .=C2=A0 31
>>=C2=A0 =C2=A0 =C2=A0 6.6.=C2=A0 Securing Group Communication=C2=A0 = . . . . . . . . . . . . . .=C2=A0 34
>>
>> Describing all 6 deployment options at a level that allows interop= erable
>> implementations in a single document, namely in
>> draft-ietf-ace-oauth-authz>, make the document longer (obviousl= y),
>> requires a fair amount of work, and takes longer.
>>
>> For this reason we are asking for your priorities. Which of these<= br> >> deployment options are more important for you than others.
>>
>> Please let us know which of them would you include in the WG docum= ent,
>> which of them would you would like to see covered in separate docu= ments,
>> and which of them would you drop?
>>
>> Here are the slides from the ACE virtual interim meeting providing=
>> further background information:
>>
>>https://www.ietf.or= g/proceedings/interim/2016/03/02/ace/slides/slides-int
>>erim-2016-ace-1-1.pdf
>>
>> Deadline: 16th March 2016
>>
>> Ciao
>> Hannes & Kepeng
>>
>>
>>
>> _______________________________________________
>> Ace mailing list
>> Ace@ietf.org
>> https://www.ietf.org/mailman/listinfo/ace
>>
>

_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace

--001a1143f24a82bce4052d66d2d9-- From nobody Sun Mar 6 13:56:49 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D797C1B3746 for ; Sun, 6 Mar 2016 13:56:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.491 X-Spam-Level: X-Spam-Status: No, score=-1.491 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_DKIM_INVALID=0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TJ7UrI6B9Dlj for ; Sun, 6 Mar 2016 13:56:45 -0800 (PST) Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2on0132.outbound.protection.outlook.com [207.46.100.132]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 50F4C1B30D4 for ; Sun, 6 Mar 2016 13:56:44 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=0jcHiLvGdvIBN+aGW4o8KjIOIJNBIUilroVlW64W2/4=; b=kmrfU5nKO3WHcgvgnnChB8Pcp6GrR3LdKeknSMiYJLS+H079ydUYExJ5nO87tLElykXACy2Caas4PeaLmDL6AuBZaOPiP0vQRwYXk6gFBITkeiv4Mx9zw0dALN3f6np0BS1qARxgGASC1MXDmCjtKc4j4dDJ/PGxVKhU2g7BiuE= Received: from SN1PR0301MB1645.namprd03.prod.outlook.com (10.162.130.139) by SN1PR0301MB1648.namprd03.prod.outlook.com (10.162.130.142) with Microsoft SMTP Server (TLS) id 15.1.427.16; Sun, 6 Mar 2016 21:56:42 +0000 Received: from SN1PR0301MB1645.namprd03.prod.outlook.com ([10.162.130.139]) by SN1PR0301MB1645.namprd03.prod.outlook.com ([10.162.130.139]) with mapi id 15.01.0427.019; Sun, 6 Mar 2016 21:56:42 +0000 From: Mike Jones To: =?utf-8?B?RXJpayBXYWhsc3Ryw7Zt?= , "Hannes Tschofenig" Thread-Topic: [Ace] CBOR and/or JSON Thread-Index: AQHRdKmc5vAxyR04ikWEVMiZ6/h9wJ9GgxiAgAZ4QxA= Date: Sun, 6 Mar 2016 21:56:42 +0000 Message-ID: References: <56D723D1.3090204@gmx.net> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: wahlstromstekniska.se; dkim=none (message not signed) header.d=none; wahlstromstekniska.se; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [12.130.116.66] x-ms-office365-filtering-correlation-id: 92f31edf-adf4-4471-0307-08d3460a3416 x-microsoft-exchange-diagnostics: 1; SN1PR0301MB1648; 5:Z89aqrvvUZeP6ZB1PQgfPC85qfdkh56VEODPUUaLRXIsCmiNVVU42Z57WwOtGH98rjxinQHjz1NKyr+x2DIngNuZH27Mw/fatxgURaxGhlt9N1++BtDmraTG2l/lvpLAsLpwi/tNNyU7hhjop8m/JQ==; 24:Sk9F6IqmHB3MDCL1CA8N9SEOdrfjGLl06mMIgpNwLa4ClZ0TJ8T3tzasIGWdvrPDRcp9tLP+Xrf6vGzdhCiiPTQPeSmDUUbkLHNM1+hm7mo= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:SN1PR0301MB1648; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(61426038)(61427038); SRVR:SN1PR0301MB1648; BCL:0; PCL:0; RULEID:; SRVR:SN1PR0301MB1648; x-forefront-prvs: 087396016C x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(377454003)(51444003)(24454002)(53754006)(76576001)(19609705001)(5002640100001)(99286002)(50986999)(76176999)(54356999)(92566002)(10090500001)(106116001)(16236675004)(11100500001)(5008740100001)(33656002)(102836003)(19580405001)(19580395003)(5005710100001)(86362001)(5004730100002)(19625215002)(19617315012)(87936001)(5003600100002)(66066001)(86612001)(19300405004)(586003)(122556002)(5001770100001)(1096002)(1220700001)(3846002)(10290500002)(10400500002)(3280700002)(3660700001)(790700001)(2900100001)(74316001)(15975445007)(2906002)(40100003)(2950100001)(81166005)(189998001)(77096005); DIR:OUT; SFP:1102; SCL:1; SRVR:SN1PR0301MB1648; H:SN1PR0301MB1645.namprd03.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_SN1PR0301MB16456CB61421DA0502E38527F5B00SN1PR0301MB1645_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Mar 2016 21:56:42.4659 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1PR0301MB1648 Archived-At: Cc: "Ace@ietf.org" Subject: Re: [Ace] CBOR and/or JSON X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 06 Mar 2016 21:56:48 -0000 --_000_SN1PR0301MB16456CB61421DA0502E38527F5B00SN1PR0301MB1645_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Rm9yIHRoZSBmaXJzdCBxdWVzdGlvbiwgSSBzdXBwb3J0IEFsdGVybmF0aXZlIDEg4oCTIHRoZSB1 c2Ugb2YgSlNPTiBhbmQgQ0JPUi4gIEkgYWdyZWUgdGhhdCBFcmlrIHRoYXQgSlNPTiBpcyB0aGUg Z28tdG8gZGF0YSBmb3JtYXQgdG9kYXkgYW5kIHRoYXQgaXQgbXVzdCBiZSBmaXJzdC1jbGFzcyBp biBvdXIgc3BlY2lmaWNhdGlvbnMuICBJIGFtIE9LIHdpdGggYWxzbyBzdXBwb3J0aW5nIENCT1Iu ICBJICphbSBub3QqIE9LIGRvaW5nIHRoZW0gYXQgc2VwYXJhdGUgdGltZXMgaW4gc2VwYXJhdGUg c3BlY3MsIGJlY2F1c2UgdGhhdOKAmXMgYSByZWNpcGUgZm9yIHRoZW0gZ2V0dGluZyBvdXQgb2Yg c3luYyBhbmQgb25lIGJlaW5nIGJldHRlciBzdXBwb3J0ZWQgdGhhbiB0aGUgb3RoZXIuDQoNCkxp a2V3aXNlLCBmb3IgdGhlIHNlY29uZCBxdWVzdGlvbiwgSSBzdXBwb3J0IG9wdGlvbiAzIOKAkyB0 aGUgdXNlIG9mIEhUVFAgYW5kIENvQVAuICBIVFRQIGlzIHRoZSBnby10byBwcm90b2NvbCBmb3Ig bW9zdCBzZXJ2aWNlcyBhbmQgTVVTVCBiZSBmaXJzdC1jbGFzcy4gIENvQVAgc3VwcG9ydCBpcyBP SyB0b28sIGJ1dCBsaWtlIHRoZSBmaXJzdCBxdWVzdGlvbiwgYm90aCBuZWVkIHRvIGJlIHN1cHBv cnRlZCBpbiBvdXIgc3BlY2lmaWNhdGlvbnMgaW4gcGFyYWxsZWwuDQoNCkFsbCB0aGF0IGJlaW5n IHNhaWQsIGlmIHRoZSB3b3JraW5nIGdyb3VwIHdhbnRzIHRvIGdvIHdpdGgganVzdCBKU09OIGFu ZC9vciBqdXN0IEhUVFAsIEkgd291bGQgYWxzbyBiZSBPSyB3aXRoIHRoYXQuDQoNCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAtLSBNaWtl DQoNCkZyb206IEFjZSBbbWFpbHRvOmFjZS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2Yg RXJpayBXYWhsc3Ryw7ZtDQpTZW50OiBXZWRuZXNkYXksIE1hcmNoIDIsIDIwMTYgMTE6MDQgQU0N ClRvOiBIYW5uZXMgVHNjaG9mZW5pZyA8aGFubmVzLnRzY2hvZmVuaWdAZ214Lm5ldD4NCkNjOiBB Y2VAaWV0Zi5vcmcNClN1YmplY3Q6IFJlOiBbQWNlXSBDQk9SIGFuZC9vciBKU09ODQoNCkkgdGhp bmsgdGhhdCB0aGUgb3JpZ2luYWwgc2NvcGUgb2YgQUNFIHNob3VsZCBoYXZlIGJlZW4gbW9yZSB0 aGVuIGp1c3QgY29uc3RyYWluZWQgZGV2aWNlcy4gSXQncyBhIGNvbnRpbnV1bSBiZXR3ZWVuIGxh cmdlciBhbmQgc21hbGxlciBkZXZpY2VzIGFuZCBpdCBzaG91bGQgaGF2ZSBiZWVuIGEgc29sdXRp b24gdGhhdCBmaXRzIGJvdGguIFdlIGFyZSB3aGVyZSB3ZSBhcmUsIHNvIHJpZ2h0IG5vdyB3ZSBh cmUgYnVpbGRpbmcgZm9yIGNvbnN0cmFpbmVkIGRldmljZXMgb25seS4gVGhhdCdzIG9mZiBjb3Vy c2UgdG90YWxseSBhcyBpdCBzaG91bGQgYmUgYmVjYXVzZSB0aGF0J3Mgd2hhdCB0aGUgY2hhcnRl ciBhbmQgbmFtZSBzYXkgc28gSSBkb24ndCBoYXZlIGFueSBwcm9ibGVtIHdpdGggaXQuIEJ1dCB0 aGUgdGhpbmcgaXMgdGhhdCBJIGNhbid0IGltYWdpbmUgdGhhdCB0aGUgaW5kdXN0cnkgaXMgdXNp bmcgQ0JPUiB0byBhIGxhcmdlciBleHRlbnQgdGhlbiB0aGV5IGFyZSB1c2luZyBKU09OLiBKU09O IGlzIHRoZSBkZWZhdWx0IGdvIHRvIHByb3RvY29sLiBBbHRlcm5hdGl2ZSAxIG9wdGlvbiAzICh0 aGF0J3MgYWN0dWFsbHkgYWx0ZXJuYXRpdmUgNCBpbiB0aGUgUFBUKSBtYWtlcyBpdCB3b3JrIHdp dGggYm90aCBDQk9SIGFuZCBKU09OIG92ZXIgYm90aCBDb0FQIGFuZCBIVFRQIGFuZCB0aGF0J3Mg bXkgcHJlZmVycmVkIHdheSBmb3J3YXJkLiBJIGFtIGhvd2V2ZXIgZmluZSB3aXRoIGFsdGVybmF0 aXZlIDIsIG9wdGlvbiAxICh0aGF0J3MgYWx0ZXJuYXRpdmUgMiBpbiB0aGUgUFBUKSwgbWFraW5n IGl0IENCT1Igb3ZlciBDb0FQIG9ubHkgYW5kIGxhdGVyIGV4dGVuZGluZyBpdCB3aXRoIEpTT04u DQovIEVyaWsNCg0KT24gV2VkLCBNYXIgMiwgMjAxNiBhdCA2OjMzIFBNLCBIYW5uZXMgVHNjaG9m ZW5pZyA8aGFubmVzLnRzY2hvZmVuaWdAZ214Lm5ldDxtYWlsdG86aGFubmVzLnRzY2hvZmVuaWdA Z214Lm5ldD4+IHdyb3RlOg0KSGkgYWxsLA0KDQpzcGVjaWZ5aW5nIHRoZSBBQ0UgT0F1dGggc29s dXRpb24gdGhlIGZvbGxvd2luZyBkZXNpZ24gcXVlc3Rpb24gdHVybmVkDQp1cDogU2hvdWxkIGJv dGggQ0JPUiBhbmQgSlNPTiBiZSBzdXBwb3J0ZWQgaW4gdGhlIFdHIGRvY3VtZW50PyBPciBvbmx5 DQpvbmUgb2YgdGhlbT8NCg0KV2hhdCBzaG91bGQgYmUgZGVzY3JpYmVkIGluIHRoZSBXRyBkb2N1 bWVudDoNCiogQWx0ZXJuYXRpdmUgMTogQ0JPUiBhbmQgSlNPTg0KKiBBbHRlcm5hdGl2ZSAyOiBD Qk9SIG9ubHkNCiogQWx0ZXJuYXRpdmUgMzogSlNPTiBvbmx5DQoNCkFkZGl0aW9uYWxseSwgdGhl cmUgaXMgdGhlIHF1ZXN0aW9uIGFib3V0IEhUVFAgYW5kIENvQVAgc3VwcG9ydC4NCg0KU2hvdWxk IHRoZSBXRyBkb2N1bWVudCBvbmx5IGRlc2NyaWJlDQoqIE9wdGlvbiAxOiBVc2Ugb2YgQ29BUCwN CiogT3B0aW9uIDI6IFVzZSBvZiBIVFRQLA0KKiBPcHRpb24gMzogVXNlIG9mIEhUVFAgJiBDb0FQ DQoNCkhlcmUgYXJlIHRoZSBzbGlkZXMgZnJvbSB0aGUgQUNFIHZpcnR1YWwgaW50ZXJpbSBtZWV0 aW5nIHByb3ZpZGluZw0KZnVydGhlciBiYWNrZ3JvdW5kIGluZm9ybWF0aW9uOg0KaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvcHJvY2VlZGluZ3MvaW50ZXJpbS8yMDE2LzAzLzAyL2FjZS9zbGlkZXMvc2xp ZGVzLWludGVyaW0tMjAxNi1hY2UtMS0zLnBkZg0KDQpEZWFkbGluZTogMTZ0aCBNYXJjaCAyMDE2 DQoNCkNpYW8NCkhhbm5lcyAmIEtlcGVuZw0KDQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18NCkFjZSBtYWlsaW5nIGxpc3QNCkFjZUBpZXRmLm9yZzxt YWlsdG86QWNlQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9hY2UNCg0K --_000_SN1PR0301MB16456CB61421DA0502E38527F5B00SN1PR0301MB1645_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6eD0idXJuOnNjaGVtYXMtbWljcm9z b2Z0LWNvbTpvZmZpY2U6ZXhjZWwiIHhtbG5zOm09Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5j b20vb2ZmaWNlLzIwMDQvMTIvb21tbCIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy1o dG1sNDAiPg0KPGhlYWQ+DQo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNvbnRlbnQ9 InRleHQvaHRtbDsgY2hhcnNldD11dGYtOCI+DQo8bWV0YSBuYW1lPSJHZW5lcmF0b3IiIGNvbnRl bnQ9Ik1pY3Jvc29mdCBXb3JkIDE1IChmaWx0ZXJlZCBtZWRpdW0pIj4NCjxzdHlsZT48IS0tDQov KiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlh IE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCi8q IFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNv Tm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6 ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsc2VyaWY7fQ0KYTpsaW5r LCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1 ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBl cmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0K CXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWww LCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdp bi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZh bWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUxOA0KCXttc28t c3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1z ZXJpZjsNCgljb2xvcjojMDAyMDYwO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBl OmV4cG9ydC1vbmx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCkBwYWdl IFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4g MS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQot LT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4 dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3Rl IG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpl eHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+ DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+ DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiMwMDIwNjAiPkZvciB0aGUgZmlyc3QgcXVlc3Rpb24sIEkgc3VwcG9y dCBBbHRlcm5hdGl2ZSAxIOKAkyB0aGUgdXNlIG9mIEpTT04gYW5kIENCT1IuJm5ic3A7IEkgYWdy ZWUgdGhhdCBFcmlrIHRoYXQgSlNPTiBpcyB0aGUgZ28tdG8gZGF0YSBmb3JtYXQgdG9kYXkgYW5k IHRoYXQgaXQgbXVzdCBiZSBmaXJzdC1jbGFzcw0KIGluIG91ciBzcGVjaWZpY2F0aW9ucy4mbmJz cDsgSSBhbSBPSyB3aXRoIGFsc28gc3VwcG9ydGluZyBDQk9SLiZuYnNwOyBJICo8Yj5hbSBub3Q8 L2I+KiBPSyBkb2luZyB0aGVtIGF0IHNlcGFyYXRlIHRpbWVzIGluIHNlcGFyYXRlIHNwZWNzLCBi ZWNhdXNlIHRoYXTigJlzIGEgcmVjaXBlIGZvciB0aGVtIGdldHRpbmcgb3V0IG9mIHN5bmMgYW5k IG9uZSBiZWluZyBiZXR0ZXIgc3VwcG9ydGVkIHRoYW4gdGhlIG90aGVyLjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMDAy MDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzAwMjA2MCI+TGlrZXdpc2UsIGZvciB0aGUgc2Vjb25kIHF1 ZXN0aW9uLCBJIHN1cHBvcnQgb3B0aW9uIDMg4oCTIHRoZSB1c2Ugb2YgSFRUUCBhbmQgQ29BUC4m bmJzcDsgSFRUUCBpcyB0aGUgZ28tdG8gcHJvdG9jb2wgZm9yIG1vc3Qgc2VydmljZXMgYW5kIE1V U1QgYmUgZmlyc3QtY2xhc3MuJm5ic3A7IENvQVANCiBzdXBwb3J0IGlzIE9LIHRvbywgYnV0IGxp a2UgdGhlIGZpcnN0IHF1ZXN0aW9uLCBib3RoIG5lZWQgdG8gYmUgc3VwcG9ydGVkIGluIG91ciBz cGVjaWZpY2F0aW9ucyBpbiBwYXJhbGxlbC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzAwMjA2MCI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2Nv bG9yOiMwMDIwNjAiPkFsbCB0aGF0IGJlaW5nIHNhaWQsIGlmIHRoZSB3b3JraW5nIGdyb3VwIHdh bnRzIHRvIGdvIHdpdGgganVzdCBKU09OIGFuZC9vciBqdXN0IEhUVFAsIEkgd291bGQgYWxzbyBi ZSBPSyB3aXRoIHRoYXQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMwMDIwNjAiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMDAyMDYw Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgLS0gTWlrZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxh IG5hbWU9Il9NYWlsRW5kQ29tcG9zZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMwMDIwNjAiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvYT48L3A+DQo8c3BhbiBzdHlsZT0ibXNvLWJvb2ttYXJr Ol9NYWlsRW5kQ29tcG9zZSI+PC9zcGFuPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4gQWNlIFttYWlsdG86 YWNlLWJvdW5jZXNAaWV0Zi5vcmddDQo8Yj5PbiBCZWhhbGYgT2YgPC9iPkVyaWsgV2FobHN0csO2 bTxicj4NCjxiPlNlbnQ6PC9iPiBXZWRuZXNkYXksIE1hcmNoIDIsIDIwMTYgMTE6MDQgQU08YnI+ DQo8Yj5Ubzo8L2I+IEhhbm5lcyBUc2Nob2ZlbmlnICZsdDtoYW5uZXMudHNjaG9mZW5pZ0BnbXgu bmV0Jmd0Ozxicj4NCjxiPkNjOjwvYj4gQWNlQGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+ IFJlOiBbQWNlXSBDQk9SIGFuZC9vciBKU09OPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+SSB0aGluayB0aGF0IHRoZSBvcmlnaW5hbCBzY29wZSBvZiBBQ0Ugc2hvdWxkIGhh dmUgYmVlbiBtb3JlIHRoZW4ganVzdCBjb25zdHJhaW5lZCBkZXZpY2VzLiBJdCdzIGEgY29udGlu dXVtIGJldHdlZW4gbGFyZ2VyIGFuZCBzbWFsbGVyIGRldmljZXMgYW5kIGl0IHNob3VsZCBoYXZl IGJlZW4gYSBzb2x1dGlvbiB0aGF0IGZpdHMgYm90aC4gV2UgYXJlIHdoZXJlIHdlIGFyZSwgc28g cmlnaHQgbm93IHdlIGFyZQ0KIGJ1aWxkaW5nIGZvciBjb25zdHJhaW5lZCBkZXZpY2VzIG9ubHku IFRoYXQncyBvZmYgY291cnNlIHRvdGFsbHkgYXMgaXQgc2hvdWxkIGJlIGJlY2F1c2UgdGhhdCdz IHdoYXQgdGhlIGNoYXJ0ZXIgYW5kIG5hbWUgc2F5IHNvIEkgZG9uJ3QgaGF2ZSBhbnkgcHJvYmxl bSB3aXRoIGl0LiBCdXQgdGhlIHRoaW5nIGlzIHRoYXQgSSBjYW4ndCBpbWFnaW5lIHRoYXQgdGhl IGluZHVzdHJ5IGlzIHVzaW5nIENCT1IgdG8gYSBsYXJnZXIgZXh0ZW50IHRoZW4NCiB0aGV5IGFy ZSB1c2luZyBKU09OLiBKU09OIGlzIHRoZSBkZWZhdWx0IGdvIHRvIHByb3RvY29sLiBBbHRlcm5h dGl2ZSAxIG9wdGlvbiAzICh0aGF0J3MgYWN0dWFsbHkgYWx0ZXJuYXRpdmUgNCBpbiB0aGUgUFBU KSZuYnNwO21ha2VzIGl0IHdvcmsgd2l0aCBib3RoIENCT1IgYW5kIEpTT04gb3ZlciBib3RoIENv QVAgYW5kIEhUVFAgYW5kIHRoYXQncyBteSBwcmVmZXJyZWQgd2F5IGZvcndhcmQuIEkgYW0gaG93 ZXZlciBmaW5lIHdpdGggYWx0ZXJuYXRpdmUNCiAyLCBvcHRpb24gMSAodGhhdCdzIGFsdGVybmF0 aXZlIDIgaW4gdGhlIFBQVCksIG1ha2luZyBpdCBDQk9SIG92ZXIgQ29BUCBvbmx5IGFuZCBsYXRl ciBleHRlbmRpbmcgaXQgd2l0aCBKU09OLjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPi8gRXJpazxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5PbiBXZWQsIE1hciAyLCAyMDE2IGF0IDY6MzMgUE0sIEhhbm5lcyBU c2Nob2ZlbmlnICZsdDs8YSBocmVmPSJtYWlsdG86aGFubmVzLnRzY2hvZmVuaWdAZ214Lm5ldCIg dGFyZ2V0PSJfYmxhbmsiPmhhbm5lcy50c2Nob2ZlbmlnQGdteC5uZXQ8L2E+Jmd0OyB3cm90ZTo8 bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVm dDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxl ZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWJvdHRvbToxMi4wcHQiPkhpIGFsbCw8YnI+DQo8YnI+DQpzcGVjaWZ5aW5nIHRoZSBB Q0UgT0F1dGggc29sdXRpb24gdGhlIGZvbGxvd2luZyBkZXNpZ24gcXVlc3Rpb24gdHVybmVkPGJy Pg0KdXA6IFNob3VsZCBib3RoIENCT1IgYW5kIEpTT04gYmUgc3VwcG9ydGVkIGluIHRoZSBXRyBk b2N1bWVudD8gT3Igb25seTxicj4NCm9uZSBvZiB0aGVtPzxicj4NCjxicj4NCldoYXQgc2hvdWxk IGJlIGRlc2NyaWJlZCBpbiB0aGUgV0cgZG9jdW1lbnQ6PGJyPg0KKiBBbHRlcm5hdGl2ZSAxOiBD Qk9SIGFuZCBKU09OPGJyPg0KKiBBbHRlcm5hdGl2ZSAyOiBDQk9SIG9ubHk8YnI+DQoqIEFsdGVy bmF0aXZlIDM6IEpTT04gb25seTxicj4NCjxicj4NCkFkZGl0aW9uYWxseSwgdGhlcmUgaXMgdGhl IHF1ZXN0aW9uIGFib3V0IEhUVFAgYW5kIENvQVAgc3VwcG9ydC48YnI+DQo8YnI+DQpTaG91bGQg dGhlIFdHIGRvY3VtZW50IG9ubHkgZGVzY3JpYmU8YnI+DQoqIE9wdGlvbiAxOiBVc2Ugb2YgQ29B UCw8YnI+DQoqIE9wdGlvbiAyOiBVc2Ugb2YgSFRUUCw8YnI+DQoqIE9wdGlvbiAzOiBVc2Ugb2Yg SFRUUCAmYW1wOyBDb0FQPGJyPg0KPGJyPg0KSGVyZSBhcmUgdGhlIHNsaWRlcyBmcm9tIHRoZSBB Q0UgdmlydHVhbCBpbnRlcmltIG1lZXRpbmcgcHJvdmlkaW5nPGJyPg0KZnVydGhlciBiYWNrZ3Jv dW5kIGluZm9ybWF0aW9uOjxicj4NCjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL3Byb2Nl ZWRpbmdzL2ludGVyaW0vMjAxNi8wMy8wMi9hY2Uvc2xpZGVzL3NsaWRlcy1pbnRlcmltLTIwMTYt YWNlLTEtMy5wZGYiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL3d3dy5pZXRmLm9yZy9wcm9jZWVk aW5ncy9pbnRlcmltLzIwMTYvMDMvMDIvYWNlL3NsaWRlcy9zbGlkZXMtaW50ZXJpbS0yMDE2LWFj ZS0xLTMucGRmPC9hPjxicj4NCjxicj4NCkRlYWRsaW5lOiAxNnRoIE1hcmNoIDIwMTY8YnI+DQo8 YnI+DQpDaWFvPGJyPg0KSGFubmVzICZhbXA7IEtlcGVuZzxicj4NCjxicj4NCjxicj4NCjxicj4N Cl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0KQWNl IG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1haWx0bzpBY2VAaWV0Zi5vcmciPkFjZUBpZXRm Lm9yZzwvYT48YnI+DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3Rp bmZvL2FjZSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vYWNlPC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2JvZHk+DQo8L2h0bWw+DQo= --_000_SN1PR0301MB16456CB61421DA0502E38527F5B00SN1PR0301MB1645_-- From jajupoik@student.jyu.fi Mon Mar 7 03:01:06 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 718DC1B3EB1 for ; Mon, 7 Mar 2016 03:01:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.123 X-Spam-Level: X-Spam-Status: No, score=0.123 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iU-oN6AoXEqh for ; Mon, 7 Mar 2016 03:01:05 -0800 (PST) Received: from mail-oi0-x22e.google.com (mail-oi0-x22e.google.com [IPv6:2607:f8b0:4003:c06::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5D76B1B3EAD for ; Mon, 7 Mar 2016 03:01:04 -0800 (PST) Received: by mail-oi0-x22e.google.com with SMTP id r187so76763449oih.3 for ; Mon, 07 Mar 2016 03:01:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=student-jyu-fi.20150623.gappssmtp.com; s=20150623; h=mime-version:sender:date:message-id:subject:from:to; bh=Vpd0hNrUADBaZoSr9VYbs/873Md6ehUr15pY21YPkAQ=; b=SWHwcdvqv3FDZjIiJhlB5FWXS2oOg8HDV4s93rVsexPsugz9W01Szfbme06aV5BmFv PZ6yqh4yDA67JUty1h/2au0SP2iMMdyHJWzhYzxMaJQ2Oi9tvLqoUKD4w1e1kDQOqstz nvALZZ3PJuSO4zC0RPEM9aZoFSmcIotAL3mqfIukt2pF6qz4/wohD/hAQ8KElRxSaHSL 7fqGfl3X8nv6IWq080PzWb3wON3unp7H5xfQSkzrOri4tbjgl06wU3xGpmvt4HiVCImK DoVfjkECP/IFNKFjOurm2YAPjDWF/7FTxDYaBpBGkONxUDBPEmFKzfhytWxzlN79Lmd+ c4ng== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:date:message-id:subject:from :to; bh=Vpd0hNrUADBaZoSr9VYbs/873Md6ehUr15pY21YPkAQ=; b=SwtGtZu2sUEXSf6Dye3LiP15/xDxF1AS4BmGIeMTpih8Sy8LDTJE496FoH9wCeEpzZ K99L8F0W7aB3PPArRcjHKd1nNaWmn7nnuhfvUT8AFmyfhHceegYnbMVBl+HaalOMAFWu uw06MtdBp9f3mtZFvbY5RsGFAyLoa5XxEFCSCQ5I5iqH5OuUWsibAwb1xM763IybBktv t/2MrUaVk3tRwgQPaN/1yF99GYYPQPmiSH0kPK8VTDvPttfNhzOGIcnSWkimWkb8bBCR tqEXFz5cYB28kcxEkMhLyy0uKR8XKsQ4Lt/r9GUkBsLfQeiEmbnYqUTr2zMqOX++jO6p ciVg== X-Gm-Message-State: AD7BkJKGf3zgd6S10hS4wErTI3/k5gOc698mn7mWMg57PPCyIFmPvAG1MjlRhQADxY2xibnmSDhGBtH3FZBS3Hf+ MIME-Version: 1.0 X-Received: by 10.202.59.137 with SMTP id i131mr13284372oia.62.1457348463621; Mon, 07 Mar 2016 03:01:03 -0800 (PST) Sender: jajupoik@student.jyu.fi Received: by 10.76.150.230 with HTTP; Mon, 7 Mar 2016 03:01:03 -0800 (PST) Date: Mon, 7 Mar 2016 13:01:03 +0200 X-Google-Sender-Auth: hj5cSUdx71i1ySPFQrGJQK54_xI Message-ID: From: Janne Poikolainen To: ace@ietf.org Content-Type: multipart/alternative; boundary=001a113cc7f27d0c45052d736129 Archived-At: Subject: [Ace] DCAF implementations? X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Mar 2016 11:05:05 -0000 --001a113cc7f27d0c45052d736129 Content-Type: text/plain; charset=UTF-8 Hello. I am working on my masters thesis and thinking of making a comparative study on authorization methods in constrained environments. I have to do an empirical part too and I was wondering if any DCAF implementations or source code is available anywhere? Regards, Janne Poikolainen --001a113cc7f27d0c45052d736129 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hello.

I am working on my masters t= hesis and thinking of making a comparative study on authorization methods i= n constrained environments. I have to do an empirical part too and I was wo= ndering if any DCAF implementations or source code is available anywhere?
Regards, Janne Poikolainen
--001a113cc7f27d0c45052d736129-- From nobody Mon Mar 7 05:49:50 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EE42E1B4145 for ; Mon, 7 Mar 2016 05:49:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.15 X-Spam-Level: * X-Spam-Status: No, score=1.15 tagged_above=-999 required=5 tests=[BAYES_50=0.8, HELO_EQ_DE=0.35] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YCLywRnCVI0N for ; Mon, 7 Mar 2016 05:49:46 -0800 (PST) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA75F1B4146 for ; Mon, 7 Mar 2016 05:49:45 -0800 (PST) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id u27DnggE017974 for ; Mon, 7 Mar 2016 14:49:42 +0100 (CET) Received: from [192.168.1.109] (pD9F6105A.dip0.t-ipconnect.de [217.246.16.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3qJgyZ1lNMz8Pd6 for ; Mon, 7 Mar 2016 14:49:42 +0100 (CET) To: ace@ietf.org References: From: Stefanie Gerdes Message-ID: <56DD86F0.1080000@tzi.de> Date: Mon, 7 Mar 2016 14:49:36 +0100 User-Agent: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [Ace] DCAF implementations? X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Mar 2016 13:49:48 -0000 Hi Janne, On 03/07/2016 12:01 PM, Janne Poikolainen wrote: > I have to do an > empirical part too and I was wondering if any DCAF implementations or > source code is available anywhere? > There is an implementation from one of our students available at https://gitlab.informatik.uni-bremen.de/bergmann/dcaf/tree/tha If you have any questions, feel free to ask. Regards, Steffi From nobody Tue Mar 8 00:21:14 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 775C612D53F for ; Tue, 8 Mar 2016 00:21:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sics-se.20150623.gappssmtp.com Received: from mail.ietf.org ([127.0.0.1]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Wa64ZXglo7fC for ; Tue, 8 Mar 2016 00:21:10 -0800 (PST) Received: from mail-lb0-x22c.google.com (mail-lb0-x22c.google.com [IPv6:2a00:1450:4010:c04::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4C8DC12D53B for ; Tue, 8 Mar 2016 00:21:09 -0800 (PST) Received: by mail-lb0-x22c.google.com with SMTP id xr8so8932092lbb.1 for ; Tue, 08 Mar 2016 00:21:09 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics-se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to; bh=bsLOyO7yYLqzEy3dnJMT9XzKiP+tYBC7MmizNoesp3o=; b=kS/grNIw1/XrTUOr2CKok9th+pR+ukcGyirB+KlioaY+Q9G+wP+S93qcCrc7kQgZw0 WtZgCu+AgGOmfBYaPNxt0Wl4ess07ojuuLZl8hTkhjaHeaHX1L+7apIaqhtRPDG0c0GT HFziRaccRRa7XT7N7lI/G+aB8SxB0QOU2BPHIe2zO+R+eBlzK/qQCH3cV18y0mam1RKG rVApaVxj9NXJdceGv2h1X7/qhhZFUtfOI4RC6hcpmWdhpO6J7LgOi6W6Soo5M4G6Ejsr DaZ5k5sT2mxx3PWYrw+UusDEGuvuR2hb1VcFcxlyEepwABYn1E6AMoseGSV97djPBB0u L4zQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to; bh=bsLOyO7yYLqzEy3dnJMT9XzKiP+tYBC7MmizNoesp3o=; b=l1jQAfhVwLuNAUEYJ7UGkC2B7T0OFhP331NoNW7m9BJ/pSDo39shuiEJ3Idxmumr5c hdjXdrS7hyG13FRam0jJ/DrXPwo2Gkj9eQiYyV9YpHVzk71vhvukUx7+wx1XiISHZTx/ qdfMm0hrC76qWsnFbSbp1jb9ZiP9w+IrFM6dQZxDRTStrBU5JHlx4wyswc+WP9S5YuON mn+JoZmCGARGDvI81qp40W2fs5kMkT4VK6wlLXguzWzBWXvR0+H2FDym4hKoeiWd7gE3 wKGbRYOX1EtNzaKlrQr3u7jDd1WPrcGsPb1E9b3JcxqHOSXzgSkSGjQlTLy4O7asQWpi FrUA== X-Gm-Message-State: AD7BkJKMlCQ4I3HHPvLmYCTMWx1ymCzDD8Yc6een3nNOtt1n6deR/dYfoVAlskEjttx8ye0G X-Received: by 10.112.140.169 with SMTP id rh9mr7561485lbb.69.1457425267404; Tue, 08 Mar 2016 00:21:07 -0800 (PST) Received: from Hyperion.suse ([85.235.10.186]) by smtp.gmail.com with ESMTPSA id o1sm277469lbc.26.2016.03.08.00.21.06 for (version=TLSv1/SSLv3 cipher=OTHER); Tue, 08 Mar 2016 00:21:06 -0800 (PST) To: ace@ietf.org References: <56D723D1.3090204@gmx.net> From: Ludwig Seitz Message-ID: <56DE8B72.4080002@sics.se> Date: Tue, 8 Mar 2016 09:21:06 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 In-Reply-To: <56D723D1.3090204@gmx.net> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms050506040508040901050106" Archived-At: Subject: Re: [Ace] CBOR and/or JSON X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Mar 2016 08:21:13 -0000 This is a cryptographically signed message in MIME format. --------------ms050506040508040901050106 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: quoted-printable On 03/02/16 18:33, Hannes Tschofenig wrote: > Hi all, > > specifying the ACE OAuth solution the following design question turned > up: Should both CBOR and JSON be supported in the WG document? Or only > one of them? > > What should be described in the WG document: > * Alternative 1: CBOR and JSON > * Alternative 2: CBOR only > * Alternative 3: JSON only > > Additionally, there is the question about HTTP and CoAP support. > > Should the WG document only describe > * Option 1: Use of CoAP, > * Option 2: Use of HTTP, > * Option 3: Use of HTTP & CoAP > I would prefer to keep the document short, easy to read and focused on=20 constrained environments (it's the 'CE' in ACE remember). Therefore I=20 prefer alternative 2 (JSON can be done in a separate document) and=20 option 1 (with HTTP in a separate document as well). /Ludwig --=20 Ludwig Seitz, PhD SICS Swedish ICT AB Ideon Science Park Building Beta 2 Scheelev=E4gen 17 SE-223 70 Lund Phone +46(0)70 349 9251 http://www.sics.se --------------ms050506040508040901050106 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC CtEwggTnMIIDz6ADAgECAhAfP2QWc8z7Bo71GhHCZ7DdMA0GCSqGSIb3DQEBCwUAMHUxCzAJ BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGll bnQgQ0EwHhcNMTYwMTA3MTE1NzM3WhcNMTcwMTA3MTE1NzM3WjA4MRcwFQYDVQQDDA5sdWR3 aWdAc2ljcy5zZTEdMBsGCSqGSIb3DQEJARYObHVkd2lnQHNpY3Muc2UwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQCiG5fxnXbdU0+3qInGZloXB0zZLM6XAu0EmTuCsWOU8eXN lCe37PTURORfLc3te4gCDcG1GrI2AuWR9MvlcYddMZt5y0T5BVWIu534vVJtG3QCuEYRJOTW B6RWQfK+dIPpZsNhgEQkYLjTHYoCu58gP0pfxNie1X7D+RxeQcq+ynNmyFdsxc2mI+dQqBKq 4zTsCNP4/jpSuovXTn8hEbbR8zkVQ2v/Gx+EO8oMIvkIEUYzkMxe3E9A7dq5DwotRDzP+y3g C4DCtI0tfIUtFjx18Pb5UMNUKZjitrOpXfheEz/igxziydri8bYpx4qGU9CNX+MvQG7Ogqju XKfQhUTTAgMBAAGjggGuMIIBqjALBgNVHQ8EBAMCBLAwHQYDVR0lBBYwFAYIKwYBBQUHAwIG CCsGAQUFBwMEMAkGA1UdEwQCMAAwHQYDVR0OBBYEFBMb8zf+BJ13fxqEl9gYiwxZ4hpmMB8G A1UdIwQYMBaAFCSBbDlhvkkPj7cbRivJKLUnSG1oMG8GCCsGAQUFBwEBBGMwYTAkBggrBgEF BQcwAYYYaHR0cDovL29jc3Auc3RhcnRzc2wuY29tMDkGCCsGAQUFBzAChi1odHRwOi8vYWlh LnN0YXJ0c3NsLmNvbS9jZXJ0cy9zY2EuY2xpZW50MS5jcnQwOAYDVR0fBDEwLzAtoCugKYYn aHR0cDovL2NybC5zdGFydHNzbC5jb20vc2NhLWNsaWVudDEuY3JsMBkGA1UdEQQSMBCBDmx1 ZHdpZ0BzaWNzLnNlMCMGA1UdEgQcMBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBGBgNV HSAEPzA9MDsGCysGAQQBgbU3AQIEMCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3RhcnRz c2wuY29tL3BvbGljeTANBgkqhkiG9w0BAQsFAAOCAQEAbgRzIj1s9U5kpXodti5kdj3ztjPb oz4pz8zNwn3qPUW8c3Zd40IFe+R5hRDuIm2aa//fmwop2mLM3+5/LnSnacaDnRfE7pP3NgqX XUuuZf9TtMLU6RUh2Z9JKs0IzWKALPhoLgnCsbtYDrF4QAoVqeNV79Lb6a3r6KdB/xFErbee OkZk/iw9HCr/jnvysYjfFQcBounseJS3JG4RNIuDpfsWPupQSAhl4s0akaakiwqOHCU7x0Ra rbCN+bg+6R5FEtSouIh53Z04JmI7LU3leo/AseQiUpJ6HqQNJYjnsCw8DDbijNhH41ZZKrvB rKMfVvlCH9VqrKW4kPGajKMEJDCCBeIwggPKoAMCAQICEGunin0K14jWUQr5WeTntOEwDQYJ KoZIhvcNAQELBQAwfTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzAp BgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMTIFN0 YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE1MTIxNjAxMDAwNVoXDTMwMTIx NjAxMDAwNVowdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNV BAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENv bSBDbGFzcyAxIENsaWVudCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL19 2vfDon2D9luC/dtbX64eG3XAtRmvmCSsu1d52DXsCR58zJQbCtB2/A5uFqNxWacpXGGtTCRk 9dEDBlmixEd8QiLkUfvHpJX/xKnmVkS6Iye8wUbYzMsDzgnpazlPg19dnSqfhM+Cevdfa89V LnUztRr2cgmCfyO9Otrh7LJDPG+4D8ZnAqDtVB8MKYJL6QgKyVhhaBc4y3bGWxKyXEtx7QIZ ZGxPwSkzK3WIN+VKNdkiwTubW5PIdopmykwvIjLPqbJK7yPwFZYekKE015OsW6FV+s4DIM8U lVS8pkIsoGGJtMuWjLL4tq2hYQuuN0jhrxK1ljz50hH23gA9cbMCAwEAAaOCAWQwggFgMA4G A1UdDwEB/wQEAwIBBjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEgYDVR0TAQH/ BAgwBgEB/wIBADAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9z ZnNjYS5jcmwwZgYIKwYBBQUHAQEEWjBYMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5zdGFy dHNzbC5jb20wMAYIKwYBBQUHMAKGJGh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL2Nh LmNydDAdBgNVHQ4EFgQUJIFsOWG+SQ+PtxtGK8kotSdIbWgwHwYDVR0jBBgwFoAUTgvvGqRA W6UXaYcwyjRoQ9BBrvIwPwYDVR0gBDgwNjA0BgRVHSAAMCwwKgYIKwYBBQUHAgEWHmh0dHA6 Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeTANBgkqhkiG9w0BAQsFAAOCAgEAi+P3h+wBi4St DwECW5zhIycjBL008HACblIf26HY0JdOruKbrWDsXUsiI0j/7Crft9S5oxvPiDtVqspBOB/y 5uzSns1lZwh7sG96bYBZpcGzGxpFNjDmQbcM3yl3WFIRS4WhNrsOY14V7y2IrUGsvetsD+bj yOngCIVeC/GmsmtbuLOzJ606tEc9uRbhjTu/b0x2Fo+/e7UkQvKzNeo7OMhijixaULyINBfC BJb+e29bLafgu6JqjOUJ9eXXj20p6q/CW+uVrZiSW57+q5an2P2i7hP85jQJcy5j4HzA0rSi F3YPhKGAWUxKPMAVGgcYoXzWydOvZ3UDsTDTagXpRDIKQLZo02wrlxY6iMFqvlzsemVf1odh QJmi7Eh5TbxI40kDGcBOBHhwnaOumZhLP+SWJQnjpLpSlUOj95uf1zo9oz9e0NgIJoz/tdfr Bzez76xtDsK0KfUDHt1/q59BvDI7RX6gVr0fQoCyMczNzCTcRXYHY0tq2J0oT+bsb6sH2b4W VWAiJKnSYaWDjdA70qHX4mq9MIjO/ZskmSY8wtAk24orAc0vwXgYanqNsBX5Yv4sN4Z9Vyrw MdLcusP7HJgRdAGKpkR2I9U4zEsNJQJewM7S4Jalo1DyPrLpL2nTET8ZrSl5Utp1UeGp/2de oprGevfnxWB+vHNQiu85o6MxggPMMIIDyAIBATCBiTB1MQswCQYDVQQGEwJJTDEWMBQGA1UE ChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRo b3JpdHkxIzAhBgNVBAMTGlN0YXJ0Q29tIENsYXNzIDEgQ2xpZW50IENBAhAfP2QWc8z7Bo71 GhHCZ7DdMA0GCWCGSAFlAwQCAQUAoIICEzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwG CSqGSIb3DQEJBTEPFw0xNjAzMDgwODIxMDZaMC8GCSqGSIb3DQEJBDEiBCBAaZYn2IS02ZBt mQkN7/BW87d4xSk61TC+NEASDC2hWjBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjAL BglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFA MAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGaBgkrBgEEAYI3EAQxgYwwgYkwdTELMAkGA1UE BhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRp ZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBD QQIQHz9kFnPM+waO9RoRwmew3TCBnAYLKoZIhvcNAQkQAgsxgYyggYkwdTELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmlj YXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQ Hz9kFnPM+waO9RoRwmew3TANBgkqhkiG9w0BAQEFAASCAQAe9ZcQ9Pw3rZMNaeQbT/Q+vlu9 HWtJpHk9JFy+Z8xeEbqlMI/gVNAl+ON+r/+7x+3NstJRZX8+BgIu8vCg91k/oKWNoUI3Fsuu +kMKokDO0GqYOaJ4u7eHz5OAHCLTvZe87F7J7KM68pVMQrr8I2jE3ejOHbu1AWwb+cOAcNml +SVYVQNOURmz6PBtdKQIAwmcY4DBq8BtiwHh3EMsSvmfOFrz5mB/B91a9Hpcf9z02peK+7dz hjgc9TSMeDJqP86CzebEwLvadB9ANFu82auK64S22AipPtVEJ70Djyx5XPFA7O4vNaIvwNao 0kDkMB8G21CMckj0xv1lHzBstgPmAAAAAAAA --------------ms050506040508040901050106-- From nobody Tue Mar 8 00:24:53 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E5C2612D54B for ; Tue, 8 Mar 2016 00:24:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sics-se.20150623.gappssmtp.com Received: from mail.ietf.org ([127.0.0.1]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W85khsrXvqEU for ; Tue, 8 Mar 2016 00:24:49 -0800 (PST) Received: from mail-lb0-x22d.google.com (mail-lb0-x22d.google.com [IPv6:2a00:1450:4010:c04::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 97F7E12D547 for ; Tue, 8 Mar 2016 00:24:48 -0800 (PST) Received: by mail-lb0-x22d.google.com with SMTP id x1so8975119lbj.3 for ; Tue, 08 Mar 2016 00:24:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics-se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to; bh=8FrzXfNATPCwDKxSdA8/8FrvPUzoc+4N4iJiKSOOKo0=; b=BVMTyF9grnsuWeimOXqHTLL0s9UTlJCQfJxl8aO3Q4FjsthHZy6B6gwtRaZAPxf1Xo cLiopyWXRuqGU0g8Hla91rqQMK8rAceR+dMk2Z+EK1SODqqbWpB3/QESRf9Nqlq1CS6U cNQzPKjj4Blig6ZifP0D0VmGGApLPT/2EWJvwqla0F9IbXLkYS13O0j+ANpLFMEiT6iK 8OvAjXYrZSn+bz0paxvDwhtxc5DiF3OoWADcff+Xcd+maKqbYS83rzGJyhYo+qTgZTIM oYc0VJULoL6iijYV4MyqMw1Mtxm/KvHt2Akh9zMpd7dCjnSiEYDpQ5pywc7seafSFPpq ofhQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to; bh=8FrzXfNATPCwDKxSdA8/8FrvPUzoc+4N4iJiKSOOKo0=; b=FtajHTM+AhsS/VIN90UDrzv0OcYDCmsKlDvRwfQRyqFMgFfW9EpQxhrZEvO9zfSY5d AjFgwXgQCB4jGz8M9/wNeAaFsBgNgs7yOgUuxd1WES1/nRDfi31tBokR/uFV/Fc9WPfp d0XwqqAV3Mdwt3CBglLUuOBeHeaCznL/Ut16bkdXMVhQeD68B/HDx57NQMa3i8Bo2Ui6 flGvfq5BsUjjR28ZK2AGNMteaxqLHzuUBFnPENvF/9dczHWOksWftliW3Zn+2FcpsXum dcPWqXx3LOJANibD881+oekoM6tiEr9ahVDAD8lLIhELiABf+6jAY0AghrLVD3UxBiJy 94NQ== X-Gm-Message-State: AD7BkJKJ58pyRjCd0r+D8FiUbdZ5YNwwOhrENnPDhEPJm3MLhcDE6q9QC7/Gt/UbbDRA0Gm3 X-Received: by 10.112.143.68 with SMTP id sc4mr8892002lbb.122.1457425486780; Tue, 08 Mar 2016 00:24:46 -0800 (PST) Received: from Hyperion.suse ([85.235.10.186]) by smtp.gmail.com with ESMTPSA id y7sm283784lba.3.2016.03.08.00.24.45 for (version=TLSv1/SSLv3 cipher=OTHER); Tue, 08 Mar 2016 00:24:46 -0800 (PST) To: ace@ietf.org References: <56D7250E.6020300@gmx.net> From: Ludwig Seitz Message-ID: <56DE8C4D.1020006@sics.se> Date: Tue, 8 Mar 2016 09:24:45 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 In-Reply-To: <56D7250E.6020300@gmx.net> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms000603090208060802030709" Archived-At: Subject: Re: [Ace] Deployment Options X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Mar 2016 08:24:52 -0000 This is a cryptographically signed message in MIME format. --------------ms000603090208060802030709 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: quoted-printable On 03/02/16 18:38, Hannes Tschofenig wrote: > Hi all, > > describes 6 deployment options in > Section 6: > > 6. Deployment Scenarios . . . . . . . . . . . . . . . . . . . . 1= 8 > 6.1. Client and Resource Server are Offline . . . . . . . . . = 19 > 6.2. Resource Server Offline . . . . . . . . . . . . . . . . . = 22 > 6.3. Token Introspection with an Offline Client . . . . . . . = 26 > 6.4. Always-On Connectivity . . . . . . . . . . . . . . . . . = 30 > 6.5. Token-less Authorization . . . . . . . . . . . . . . . . = 31 > 6.6. Securing Group Communication . . . . . . . . . . . . . . = 34 > I would like to have a superficial description of all of these in an=20 appendix to the main document to demonstrate that we can cover a number=20 of different use cases with this design. I would prefer to describe in detail 6.2 and perhaps 6.3 in the main=20 document. If we get enough interest, I would support specifying all of the above=20 in additional documents. /Ludwig --=20 Ludwig Seitz, PhD SICS Swedish ICT AB Ideon Science Park Building Beta 2 Scheelev=E4gen 17 SE-223 70 Lund Phone +46(0)70 349 9251 http://www.sics.se --------------ms000603090208060802030709 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC CtEwggTnMIIDz6ADAgECAhAfP2QWc8z7Bo71GhHCZ7DdMA0GCSqGSIb3DQEBCwUAMHUxCzAJ BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGll bnQgQ0EwHhcNMTYwMTA3MTE1NzM3WhcNMTcwMTA3MTE1NzM3WjA4MRcwFQYDVQQDDA5sdWR3 aWdAc2ljcy5zZTEdMBsGCSqGSIb3DQEJARYObHVkd2lnQHNpY3Muc2UwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQCiG5fxnXbdU0+3qInGZloXB0zZLM6XAu0EmTuCsWOU8eXN lCe37PTURORfLc3te4gCDcG1GrI2AuWR9MvlcYddMZt5y0T5BVWIu534vVJtG3QCuEYRJOTW B6RWQfK+dIPpZsNhgEQkYLjTHYoCu58gP0pfxNie1X7D+RxeQcq+ynNmyFdsxc2mI+dQqBKq 4zTsCNP4/jpSuovXTn8hEbbR8zkVQ2v/Gx+EO8oMIvkIEUYzkMxe3E9A7dq5DwotRDzP+y3g C4DCtI0tfIUtFjx18Pb5UMNUKZjitrOpXfheEz/igxziydri8bYpx4qGU9CNX+MvQG7Ogqju XKfQhUTTAgMBAAGjggGuMIIBqjALBgNVHQ8EBAMCBLAwHQYDVR0lBBYwFAYIKwYBBQUHAwIG CCsGAQUFBwMEMAkGA1UdEwQCMAAwHQYDVR0OBBYEFBMb8zf+BJ13fxqEl9gYiwxZ4hpmMB8G A1UdIwQYMBaAFCSBbDlhvkkPj7cbRivJKLUnSG1oMG8GCCsGAQUFBwEBBGMwYTAkBggrBgEF BQcwAYYYaHR0cDovL29jc3Auc3RhcnRzc2wuY29tMDkGCCsGAQUFBzAChi1odHRwOi8vYWlh LnN0YXJ0c3NsLmNvbS9jZXJ0cy9zY2EuY2xpZW50MS5jcnQwOAYDVR0fBDEwLzAtoCugKYYn aHR0cDovL2NybC5zdGFydHNzbC5jb20vc2NhLWNsaWVudDEuY3JsMBkGA1UdEQQSMBCBDmx1 ZHdpZ0BzaWNzLnNlMCMGA1UdEgQcMBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBGBgNV HSAEPzA9MDsGCysGAQQBgbU3AQIEMCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3RhcnRz c2wuY29tL3BvbGljeTANBgkqhkiG9w0BAQsFAAOCAQEAbgRzIj1s9U5kpXodti5kdj3ztjPb oz4pz8zNwn3qPUW8c3Zd40IFe+R5hRDuIm2aa//fmwop2mLM3+5/LnSnacaDnRfE7pP3NgqX XUuuZf9TtMLU6RUh2Z9JKs0IzWKALPhoLgnCsbtYDrF4QAoVqeNV79Lb6a3r6KdB/xFErbee OkZk/iw9HCr/jnvysYjfFQcBounseJS3JG4RNIuDpfsWPupQSAhl4s0akaakiwqOHCU7x0Ra rbCN+bg+6R5FEtSouIh53Z04JmI7LU3leo/AseQiUpJ6HqQNJYjnsCw8DDbijNhH41ZZKrvB rKMfVvlCH9VqrKW4kPGajKMEJDCCBeIwggPKoAMCAQICEGunin0K14jWUQr5WeTntOEwDQYJ KoZIhvcNAQELBQAwfTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzAp BgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMTIFN0 YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE1MTIxNjAxMDAwNVoXDTMwMTIx NjAxMDAwNVowdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNV BAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENv bSBDbGFzcyAxIENsaWVudCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL19 2vfDon2D9luC/dtbX64eG3XAtRmvmCSsu1d52DXsCR58zJQbCtB2/A5uFqNxWacpXGGtTCRk 9dEDBlmixEd8QiLkUfvHpJX/xKnmVkS6Iye8wUbYzMsDzgnpazlPg19dnSqfhM+Cevdfa89V LnUztRr2cgmCfyO9Otrh7LJDPG+4D8ZnAqDtVB8MKYJL6QgKyVhhaBc4y3bGWxKyXEtx7QIZ ZGxPwSkzK3WIN+VKNdkiwTubW5PIdopmykwvIjLPqbJK7yPwFZYekKE015OsW6FV+s4DIM8U lVS8pkIsoGGJtMuWjLL4tq2hYQuuN0jhrxK1ljz50hH23gA9cbMCAwEAAaOCAWQwggFgMA4G A1UdDwEB/wQEAwIBBjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEgYDVR0TAQH/ BAgwBgEB/wIBADAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9z ZnNjYS5jcmwwZgYIKwYBBQUHAQEEWjBYMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5zdGFy dHNzbC5jb20wMAYIKwYBBQUHMAKGJGh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL2Nh LmNydDAdBgNVHQ4EFgQUJIFsOWG+SQ+PtxtGK8kotSdIbWgwHwYDVR0jBBgwFoAUTgvvGqRA W6UXaYcwyjRoQ9BBrvIwPwYDVR0gBDgwNjA0BgRVHSAAMCwwKgYIKwYBBQUHAgEWHmh0dHA6 Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeTANBgkqhkiG9w0BAQsFAAOCAgEAi+P3h+wBi4St DwECW5zhIycjBL008HACblIf26HY0JdOruKbrWDsXUsiI0j/7Crft9S5oxvPiDtVqspBOB/y 5uzSns1lZwh7sG96bYBZpcGzGxpFNjDmQbcM3yl3WFIRS4WhNrsOY14V7y2IrUGsvetsD+bj yOngCIVeC/GmsmtbuLOzJ606tEc9uRbhjTu/b0x2Fo+/e7UkQvKzNeo7OMhijixaULyINBfC BJb+e29bLafgu6JqjOUJ9eXXj20p6q/CW+uVrZiSW57+q5an2P2i7hP85jQJcy5j4HzA0rSi F3YPhKGAWUxKPMAVGgcYoXzWydOvZ3UDsTDTagXpRDIKQLZo02wrlxY6iMFqvlzsemVf1odh QJmi7Eh5TbxI40kDGcBOBHhwnaOumZhLP+SWJQnjpLpSlUOj95uf1zo9oz9e0NgIJoz/tdfr Bzez76xtDsK0KfUDHt1/q59BvDI7RX6gVr0fQoCyMczNzCTcRXYHY0tq2J0oT+bsb6sH2b4W VWAiJKnSYaWDjdA70qHX4mq9MIjO/ZskmSY8wtAk24orAc0vwXgYanqNsBX5Yv4sN4Z9Vyrw MdLcusP7HJgRdAGKpkR2I9U4zEsNJQJewM7S4Jalo1DyPrLpL2nTET8ZrSl5Utp1UeGp/2de oprGevfnxWB+vHNQiu85o6MxggPMMIIDyAIBATCBiTB1MQswCQYDVQQGEwJJTDEWMBQGA1UE ChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRo b3JpdHkxIzAhBgNVBAMTGlN0YXJ0Q29tIENsYXNzIDEgQ2xpZW50IENBAhAfP2QWc8z7Bo71 GhHCZ7DdMA0GCWCGSAFlAwQCAQUAoIICEzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwG CSqGSIb3DQEJBTEPFw0xNjAzMDgwODI0NDVaMC8GCSqGSIb3DQEJBDEiBCCm+wLaVVPdUdm8 n+lk/l+aBVp7RyGqGIt2wBHyp3PWbDBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjAL BglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFA MAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGaBgkrBgEEAYI3EAQxgYwwgYkwdTELMAkGA1UE BhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRp ZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBD QQIQHz9kFnPM+waO9RoRwmew3TCBnAYLKoZIhvcNAQkQAgsxgYyggYkwdTELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmlj YXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQ Hz9kFnPM+waO9RoRwmew3TANBgkqhkiG9w0BAQEFAASCAQBIfSUiq65usC+sRmHmuzPIl43k zRZqm1rLSr9bRqd3s+V0cpnjtt2Lyty6v2K7SYAeRghSR1bm/uHm2SM7eh/AnZdsuQFvSvkO rA1tqgn1qQ4wgeb1TPyk5WYHsikT4EF94OvDcuZXT1ee9v7gB2ByCu1geBbgAjQHil4jhTpt l7nayv8KGNd89jt5sqh4UWMpEhV5sYDdvVJD/bj215D2zvHpj3FiYy76u304De6F64jPl35p qGWaPnpzAmbpPbRoTtxKclWVsdQrdiCaI46aCQ3wWleFK8tBKAqq0E+QJcShbTr0blrqJIg3 c6wBGtvQXKrW7IbknpVMNBvBODzgAAAAAAAA --------------ms000603090208060802030709-- From nobody Tue Mar 8 00:37:13 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 77CE712D554 for ; Tue, 8 Mar 2016 00:37:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sics-se.20150623.gappssmtp.com Received: from mail.ietf.org ([127.0.0.1]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZqZwFXXxqScz for ; Tue, 8 Mar 2016 00:37:09 -0800 (PST) Received: from mail-lb0-x229.google.com (mail-lb0-x229.google.com [IPv6:2a00:1450:4010:c04::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 92FF112D54E for ; Tue, 8 Mar 2016 00:37:08 -0800 (PST) Received: by mail-lb0-x229.google.com with SMTP id k15so9385596lbg.0 for ; Tue, 08 Mar 2016 00:37:08 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics-se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to; bh=0I4ZQfSBkTAIx9g10I64VzWgd1tUNamr0Y7gYqwPyek=; b=jQ7z6Au+WeCrePBNrJAKvMgG1jmsXiDHklmtol3icCpWyV39f/g7I0PdgCc+ySvE4X MBB91LtNrxb2SnBsiGAnIkR9sCHsJDwPqZOhx3l9jUHVhlnT2E1MSxUXYv4Y65ALb8Kg E1BGWVuo1qNO3M/kC3MayySNIk16AyeWnIAjtyEBtAv9o9t0VNqnSNEU91MPkBRdIe0y 9IMNB4In9AQ/3uiznyaMr6V2Lfh7S4OT/s/OCQKNe0aqHztwi6jGOo6ZdV0etmLO5irM dFZA9tdjwJt5fw2fEIpG2EmBjecyW5c02t4NuJMSzu6patdlwXHCISG5p94CO2KEYaUG FY/g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to; bh=0I4ZQfSBkTAIx9g10I64VzWgd1tUNamr0Y7gYqwPyek=; b=joN5qCKOgUPWCUYnAJWH70kbod0BP/0BT+W9BuYd/fdGEGXSu+dTD/MyyfPV2fRuFV gdlzBWp0d1VInsO0EeZ7BfBodd7mKkgWI4YJ+RsPNtUThSQDA/MzpBkEL+pZQrszbtON C8TkXBI3S9ytH1B3unPi/+95qN3zOex1KtN/MoifCluR2rnuPWTkxjFy+EBMUtCON2Ba xJnM48FyUy1XYoNJIMyVN0/usQpKu+GZirzBmilZtfgHWD6JmfVrbe3E9MhuA/3SgfX7 pmQcC/txu6D9AfjXx5kJ+fqcGr5+58I0I/6Ivkgf9uCvywDbsYimek2tWJX9RWWUSCnE Qzzg== X-Gm-Message-State: AD7BkJJnHulw3vmOYh6nXphurIup1+MS5FiP29jSSl03VD49pEaRwUYx2DOrDL4ifqoOWiAW X-Received: by 10.112.26.79 with SMTP id j15mr9648288lbg.15.1457426226709; Tue, 08 Mar 2016 00:37:06 -0800 (PST) Received: from Hyperion.suse ([85.235.10.186]) by smtp.gmail.com with ESMTPSA id sa9sm280721lbb.38.2016.03.08.00.37.05 for (version=TLSv1/SSLv3 cipher=OTHER); Tue, 08 Mar 2016 00:37:06 -0800 (PST) To: ace@ietf.org References: <56D72A16.5050607@gmx.net> From: Ludwig Seitz Message-ID: <56DE8F31.1080603@sics.se> Date: Tue, 8 Mar 2016 09:37:05 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 In-Reply-To: <56D72A16.5050607@gmx.net> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms060502010102010304060409" Archived-At: Subject: Re: [Ace] DTLS and OSCOAP X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Mar 2016 08:37:11 -0000 This is a cryptographically signed message in MIME format. --------------ms060502010102010304060409 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: quoted-printable On 03/02/16 18:59, Hannes Tschofenig wrote: > Hi all, > > in specifying the details for the communication between the client and > the RS we need to settle on a security mechanism. > > There are four options: > > * Option #1: Do not specify a solution in the WG document (1) > > * Option #2: Specify a DTLS-based solution > > * Option #3: Specify an application layer solution (for example using > OSCOAP) > > ** Option #4: option #2 + option #3 > I think we need to specify at least one of the commSec approaches,=20 otherwise people might just implement it without commSec. I vote for option #3 with COSE in mind. (I also strongly support specifying #2 in a separate document). --=20 Ludwig Seitz, PhD SICS Swedish ICT AB Ideon Science Park Building Beta 2 Scheelev=E4gen 17 SE-223 70 Lund Phone +46(0)70 349 9251 http://www.sics.se --------------ms060502010102010304060409 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC CtEwggTnMIIDz6ADAgECAhAfP2QWc8z7Bo71GhHCZ7DdMA0GCSqGSIb3DQEBCwUAMHUxCzAJ BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGll bnQgQ0EwHhcNMTYwMTA3MTE1NzM3WhcNMTcwMTA3MTE1NzM3WjA4MRcwFQYDVQQDDA5sdWR3 aWdAc2ljcy5zZTEdMBsGCSqGSIb3DQEJARYObHVkd2lnQHNpY3Muc2UwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQCiG5fxnXbdU0+3qInGZloXB0zZLM6XAu0EmTuCsWOU8eXN lCe37PTURORfLc3te4gCDcG1GrI2AuWR9MvlcYddMZt5y0T5BVWIu534vVJtG3QCuEYRJOTW B6RWQfK+dIPpZsNhgEQkYLjTHYoCu58gP0pfxNie1X7D+RxeQcq+ynNmyFdsxc2mI+dQqBKq 4zTsCNP4/jpSuovXTn8hEbbR8zkVQ2v/Gx+EO8oMIvkIEUYzkMxe3E9A7dq5DwotRDzP+y3g C4DCtI0tfIUtFjx18Pb5UMNUKZjitrOpXfheEz/igxziydri8bYpx4qGU9CNX+MvQG7Ogqju XKfQhUTTAgMBAAGjggGuMIIBqjALBgNVHQ8EBAMCBLAwHQYDVR0lBBYwFAYIKwYBBQUHAwIG CCsGAQUFBwMEMAkGA1UdEwQCMAAwHQYDVR0OBBYEFBMb8zf+BJ13fxqEl9gYiwxZ4hpmMB8G A1UdIwQYMBaAFCSBbDlhvkkPj7cbRivJKLUnSG1oMG8GCCsGAQUFBwEBBGMwYTAkBggrBgEF BQcwAYYYaHR0cDovL29jc3Auc3RhcnRzc2wuY29tMDkGCCsGAQUFBzAChi1odHRwOi8vYWlh LnN0YXJ0c3NsLmNvbS9jZXJ0cy9zY2EuY2xpZW50MS5jcnQwOAYDVR0fBDEwLzAtoCugKYYn aHR0cDovL2NybC5zdGFydHNzbC5jb20vc2NhLWNsaWVudDEuY3JsMBkGA1UdEQQSMBCBDmx1 ZHdpZ0BzaWNzLnNlMCMGA1UdEgQcMBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBGBgNV HSAEPzA9MDsGCysGAQQBgbU3AQIEMCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3RhcnRz c2wuY29tL3BvbGljeTANBgkqhkiG9w0BAQsFAAOCAQEAbgRzIj1s9U5kpXodti5kdj3ztjPb oz4pz8zNwn3qPUW8c3Zd40IFe+R5hRDuIm2aa//fmwop2mLM3+5/LnSnacaDnRfE7pP3NgqX XUuuZf9TtMLU6RUh2Z9JKs0IzWKALPhoLgnCsbtYDrF4QAoVqeNV79Lb6a3r6KdB/xFErbee OkZk/iw9HCr/jnvysYjfFQcBounseJS3JG4RNIuDpfsWPupQSAhl4s0akaakiwqOHCU7x0Ra rbCN+bg+6R5FEtSouIh53Z04JmI7LU3leo/AseQiUpJ6HqQNJYjnsCw8DDbijNhH41ZZKrvB rKMfVvlCH9VqrKW4kPGajKMEJDCCBeIwggPKoAMCAQICEGunin0K14jWUQr5WeTntOEwDQYJ KoZIhvcNAQELBQAwfTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzAp BgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMTIFN0 YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE1MTIxNjAxMDAwNVoXDTMwMTIx NjAxMDAwNVowdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNV BAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENv bSBDbGFzcyAxIENsaWVudCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL19 2vfDon2D9luC/dtbX64eG3XAtRmvmCSsu1d52DXsCR58zJQbCtB2/A5uFqNxWacpXGGtTCRk 9dEDBlmixEd8QiLkUfvHpJX/xKnmVkS6Iye8wUbYzMsDzgnpazlPg19dnSqfhM+Cevdfa89V LnUztRr2cgmCfyO9Otrh7LJDPG+4D8ZnAqDtVB8MKYJL6QgKyVhhaBc4y3bGWxKyXEtx7QIZ ZGxPwSkzK3WIN+VKNdkiwTubW5PIdopmykwvIjLPqbJK7yPwFZYekKE015OsW6FV+s4DIM8U lVS8pkIsoGGJtMuWjLL4tq2hYQuuN0jhrxK1ljz50hH23gA9cbMCAwEAAaOCAWQwggFgMA4G A1UdDwEB/wQEAwIBBjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEgYDVR0TAQH/ BAgwBgEB/wIBADAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9z ZnNjYS5jcmwwZgYIKwYBBQUHAQEEWjBYMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5zdGFy dHNzbC5jb20wMAYIKwYBBQUHMAKGJGh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL2Nh LmNydDAdBgNVHQ4EFgQUJIFsOWG+SQ+PtxtGK8kotSdIbWgwHwYDVR0jBBgwFoAUTgvvGqRA W6UXaYcwyjRoQ9BBrvIwPwYDVR0gBDgwNjA0BgRVHSAAMCwwKgYIKwYBBQUHAgEWHmh0dHA6 Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeTANBgkqhkiG9w0BAQsFAAOCAgEAi+P3h+wBi4St DwECW5zhIycjBL008HACblIf26HY0JdOruKbrWDsXUsiI0j/7Crft9S5oxvPiDtVqspBOB/y 5uzSns1lZwh7sG96bYBZpcGzGxpFNjDmQbcM3yl3WFIRS4WhNrsOY14V7y2IrUGsvetsD+bj yOngCIVeC/GmsmtbuLOzJ606tEc9uRbhjTu/b0x2Fo+/e7UkQvKzNeo7OMhijixaULyINBfC BJb+e29bLafgu6JqjOUJ9eXXj20p6q/CW+uVrZiSW57+q5an2P2i7hP85jQJcy5j4HzA0rSi F3YPhKGAWUxKPMAVGgcYoXzWydOvZ3UDsTDTagXpRDIKQLZo02wrlxY6iMFqvlzsemVf1odh QJmi7Eh5TbxI40kDGcBOBHhwnaOumZhLP+SWJQnjpLpSlUOj95uf1zo9oz9e0NgIJoz/tdfr Bzez76xtDsK0KfUDHt1/q59BvDI7RX6gVr0fQoCyMczNzCTcRXYHY0tq2J0oT+bsb6sH2b4W VWAiJKnSYaWDjdA70qHX4mq9MIjO/ZskmSY8wtAk24orAc0vwXgYanqNsBX5Yv4sN4Z9Vyrw MdLcusP7HJgRdAGKpkR2I9U4zEsNJQJewM7S4Jalo1DyPrLpL2nTET8ZrSl5Utp1UeGp/2de oprGevfnxWB+vHNQiu85o6MxggPMMIIDyAIBATCBiTB1MQswCQYDVQQGEwJJTDEWMBQGA1UE ChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRo b3JpdHkxIzAhBgNVBAMTGlN0YXJ0Q29tIENsYXNzIDEgQ2xpZW50IENBAhAfP2QWc8z7Bo71 GhHCZ7DdMA0GCWCGSAFlAwQCAQUAoIICEzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwG CSqGSIb3DQEJBTEPFw0xNjAzMDgwODM3MDVaMC8GCSqGSIb3DQEJBDEiBCAPAVJ950KcsQEe 35zRAZpdc2H7b0d5U5jsRVmnPG/HTDBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjAL BglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFA MAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGaBgkrBgEEAYI3EAQxgYwwgYkwdTELMAkGA1UE BhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRp ZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBD QQIQHz9kFnPM+waO9RoRwmew3TCBnAYLKoZIhvcNAQkQAgsxgYyggYkwdTELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmlj YXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQ Hz9kFnPM+waO9RoRwmew3TANBgkqhkiG9w0BAQEFAASCAQALf9kIhkqPiQVJF+kFtIM7+vZp rwt0kupzV5nbaOqgyjgiMWm3fW8cpqUXKKsU+d1CYVeuwm3nBn4G19xk54fT2cUawzaG3PuE GEuW0+V3Ww4AR7K3+WzrdGBz4vsU0dcVIWNKPMKHC+udFXQLo86lSDMXV2rVoOLl+NJvvLCW y9fe6PzBfncL42wqGnCe99QL6FEU0DCI3v7+20AZfE00dkxL86JtgmrUGzNJe6y0tXytNbez UUXbxWBr0G/LzfA8v28+VX+8ovrutZYQD8B1ZqjPlCmzTCvc33u03nNJaxif8DhnFQWQKGkt mO9K/UpnV/guFGO/cv6vg+eoCC+gAAAAAAAA --------------ms060502010102010304060409-- From nobody Tue Mar 8 11:17:58 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2488712D97C for ; Tue, 8 Mar 2016 11:17:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.911 X-Spam-Level: * X-Spam-Status: No, score=1.911 tagged_above=-999 required=5 tests=[BAYES_50=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, MPART_ALT_DIFF_COUNT=1.112, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=isoc.onmicrosoft.com Received: from mail.ietf.org ([127.0.0.1]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d4rhCt0vp6bz for ; Tue, 8 Mar 2016 11:17:50 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0074.outbound.protection.outlook.com [65.55.169.74]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9460612DA0E for ; Tue, 8 Mar 2016 11:17:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=isoc.onmicrosoft.com; s=selector1-isoc-org; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Edmz/a++i6V/ZtT19vVWc8LPAfL+xlPxvnyKuNlW0Rk=; b=0NHy+gORl4bCU9f79vzKTUf8lg+IzaA4cuLlt8eT07G1q51/PO+fo0t7G73znuNOfaqpKD7ociV0F7CTdonQp3Sgq4aGOwPx9pLjC2qsgm7SBtrgYjqrPBwGOfX6PvNJq4RNvUP3PHemiVWY6rU06BJzTazkU61Maxx49SyP4i0= Received: from SN1PR06MB1839.namprd06.prod.outlook.com (10.162.133.18) by SN1PR06MB1838.namprd06.prod.outlook.com (10.162.133.16) with Microsoft SMTP Server (TLS) id 15.1.427.16; Tue, 8 Mar 2016 19:17:43 +0000 Received: from SN1PR06MB1839.namprd06.prod.outlook.com ([10.162.133.18]) by SN1PR06MB1839.namprd06.prod.outlook.com ([10.162.133.18]) with mapi id 15.01.0427.019; Tue, 8 Mar 2016 19:17:43 +0000 From: Robin Wilton To: "ace@ietf.org" Thread-Topic: Review/comments on draft-ietf-ace-actors-03 Thread-Index: AQHReW8wrFlW0b/6jkyJJvUyLnls7A== Date: Tue, 8 Mar 2016 19:17:43 +0000 Message-ID: <5529D3B9-7B23-4D76-9E69-EEE85F7BA719@isoc.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=isoc.org; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [37.252.230.59] x-ms-office365-filtering-correlation-id: 36aae25c-4308-4b61-3f51-08d34786530c x-microsoft-exchange-diagnostics: 1; SN1PR06MB1838; 5:+tpocnGQU5bq+Fy2EU/DuOqAWH8SIivhfWl7ebBRiutvCkPk7BCUnXYYh2c9iDO9s8UONQYOk211NQPrXqX+MBsH7IT1WniFuFJWVaqx8VrDowzSwL4DhQzk16SFOjnxSKDE/MZL7k1QBAYKk4krVg==; 24:fhdu0YiVNo2K5A+7A6YF80VRiPuZPgdFOJOKFVR51IfkfNXk9rB/S+1Ii0X5FtJQqLRq6BbwTgEmQoLBVQ84W6Q9j/IqKDpOpjHupDrrCbo= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:SN1PR06MB1838; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(102415293)(102615271)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001); SRVR:SN1PR06MB1838; BCL:0; PCL:0; RULEID:; SRVR:SN1PR06MB1838; x-forefront-prvs: 08756AC3C8 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(53754006)(252514010)(229853001)(33656002)(106116001)(99936001)(2351001)(3280700002)(11100500001)(87936001)(230783001)(83716003)(82746002)(19580405001)(16236675004)(19580395003)(50986999)(54356999)(99286002)(189998001)(2501003)(5890100001)(1220700001)(81166005)(102836003)(3660700001)(6116002)(107886002)(2906002)(5008740100001)(1730700002)(110136002)(36756003)(2900100001)(5002640100001)(122556002)(450100001)(5004730100002)(86362001)(77096005)(66066001)(10400500002)(586003)(3846002)(1096002)(92566002)(104396002); DIR:OUT; SFP:1101; SCL:1; SRVR:SN1PR06MB1838; H:SN1PR06MB1839.namprd06.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/signed; boundary="Apple-Mail=_D7C5752B-BD4E-4E74-8894-90D14D177E16"; protocol="application/pgp-signature"; micalg=pgp-sha256 MIME-Version: 1.0 X-OriginatorOrg: isoc.org X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Mar 2016 19:17:43.2154 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 89f84dfb-7285-4810-bc4d-8b9b5794554f X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1PR06MB1838 Archived-At: Subject: [Ace] Review/comments on draft-ietf-ace-actors-03 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Mar 2016 19:17:55 -0000 --Apple-Mail=_D7C5752B-BD4E-4E74-8894-90D14D177E16 Content-Type: multipart/alternative; boundary="Apple-Mail=_F7B54A8E-B2CD-4DA6-919C-5BDCC1F15B58" --Apple-Mail=_F7B54A8E-B2CD-4DA6-919C-5BDCC1F15B58 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 Hi everyone, As promised in Yokohama (and thank you to Hannes for the nudge) here are = some comments on this ID (attached in Microsoft proprietary and .txt = format; I hope that the revision markings and comments survive in at = least one of those formats, but let me know if not. A couple of over-all remarks: I think this is a really good draft and a = useful piece of work. It sets out a clear conceptual model, and should = make it easier to design systems that do a better job of delivering = effective, manageable security mechanisms to constrained devices. That=92s= not to say the problems in doing so will be small, by the way ;^) . In terms of document structure, I note that sections 7 and 8 really give = the high level problem statement and requirements=85 so the detailed = technical architecture comes first, which is interesting. Not = necessarily a problem, but it does mean readers are somewhat thrown in = at the deep end. I have made some =93editorial=94 (as opposed to technical) changes, but = these are mostly just for style and clarity. Generally I found the = document to be very clear and readable=85 certainly immeasurably better = than anything I would be able to achieve in German or Swedish. I also made some technical comments (particularly about PKI and key = management implications). While at Gartner I did some research into PKI = deployments, and much of that had to do with constrained devices = (including where the constraint is simply that the device is bolted to a = telegraph pole, 500 kilometres from anything else, in the middle of = Saskatchewan=85). In general, our finding was that PKIs work best when = they are kept away from the user. However, in insulating them from user = interference, you introduce a requirement for much better remote = management, which most deployments either don=92t provide, or do badly. = I think ACE has an opportunity to lay the foundations for better = solutions to that set of problems. If you have any questions or meta-comments about my comments, please = just let me know. Best wishes, Robin Robin Wilton Technical Outreach Director - Identity and Privacy Internet Society email: wilton@isoc.org Phone: +44 705 005 2931 Twitter: @futureidentity --Apple-Mail=_F7B54A8E-B2CD-4DA6-919C-5BDCC1F15B58 Content-Type: multipart/mixed; boundary="Apple-Mail=_30DCC5D2-F15E-4060-AA17-EF7F84372810" --Apple-Mail=_30DCC5D2-F15E-4060-AA17-EF7F84372810 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=windows-1252 Hi = everyone,

As promised in Yokohama (and thank you to = Hannes for the nudge) here are some comments on this ID (attached in = Microsoft proprietary and .txt format; I hope that the revision markings = and comments survive in at least one of those formats, but let me know = if not.

A couple of over-all remarks: I think = this is a really good draft and a useful piece of work. It sets out a = clear conceptual model, and should make it easier to design systems that = do a better job of delivering effective, manageable security mechanisms = to constrained devices. That=92s not to say the problems in doing so = will be small, by the way ;^)  .

In terms = of document structure, I note that sections 7 and 8 really give the high = level problem statement and requirements=85 so the detailed technical = architecture comes first, which is interesting. Not necessarily a = problem, but it does mean readers are somewhat thrown in at the deep = end. 

I have made some =93editorial=94 (as = opposed to technical) changes, but these are mostly just for style and = clarity. Generally I found the document to be very clear and readable=85 = certainly immeasurably better than anything I would be able to achieve = in German or Swedish.  

I also made some = technical comments (particularly about PKI and key management = implications). While at Gartner I did some research into PKI = deployments, and much of that had to do with constrained devices = (including where the constraint is simply that the device is bolted to a = telegraph pole, 500 kilometres from anything else, in the middle of = Saskatchewan=85). In general, our finding was that PKIs work best when = they are kept away from the user. However, in insulating them from user = interference, you introduce a requirement for much better remote = management, which most deployments either don=92t provide, or do badly. = I think ACE has an opportunity to lay the foundations for better = solutions to that set of problems.

If you have = any questions or meta-comments about my comments, please just let me = know.

Best = wishes,

Robin 

Robin Wilton
Technical = Outreach Director - Identity and Privacy
Internet = Society

email: wilton@isoc.org
Phone: +44 705 = 005 2931
Twitter: @futureidentity


= --Apple-Mail=_30DCC5D2-F15E-4060-AA17-EF7F84372810 Content-Disposition: attachment; filename=draft-ietf-ace-actors-03-rw.docx Content-Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document; name="draft-ietf-ace-actors-03-rw.docx" Content-Transfer-Encoding: base64 UEsDBBQABgAIAAAAIQCLQKs2mQEAAEUGAAATAAgCW0NvbnRlbnRfVHlwZXNdLnhtbCCiBAIooAAC AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0 lU1PwkAQhu8m/odmr6Zd8GCMoXBQPCqJGM/rdgqr3Y/sLAr/3tkCjRKgKHJpQod532dmd6a9wVxX yQd4VNbkrJt1WAJG2kKZSc6ex/fpNUswCFOIyhrI2QKQDfrnZ73xwgEmlG0wZ9MQ3A3nKKegBWbW gaFIab0WgX76CXdCvosJ8MtO54pLawKYkIaowfq9OyjFrArJcE6vlySUzpLb5f+iVc6Ec5WSIhAo j1G+Nc9DhXsSP0yxQZeuyDLKrMVxqhxe7HZ4czDZcFA6llYHiOqR2ulVAclI+PAgNLHzT+sLXlg5 01R3tr+4LYy2LJWEJj+qOW8lINI56SprIloos2bfyYFhUQH+P8VS90D7FxWmw7IESRekvR8a01h0 trT4ltvuBiFQkw4x+Xlt07am40q5FeETXp9ORvFNvBVEWh3v3wl6sVZuRShppMfitYIDDv2X59FI t0IEWlPA62f3aI5aZp8lDefIW4e09vwfyl7vp5id0tQ78EFBs6G2TXnjSDvz6PogLuUCii3evP4I 9L8AAAD//wMAUEsDBBQABgAIAAAAIQDHwie8DAEAAN8CAAALAAgCX3JlbHMvLnJlbHMgogQCKKAA AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA rJLBTsMwDIbvSLxD5PuabiCE0NJdENJuCJUHMInXBtokSjzY3p6ww0qlUU1ix8TOn+/37+Vq13fi k2Ky3imYFyUIctob6xoFr/XT7B5EYnQGO+9IwZ4SrKrrq+ULdcj5UWptSCKruKSgZQ4PUibdUo+p 8IFcrmx87JHzMTYyoP7AhuSiLO9k/K0B1UhTrI2CuDY3IOp9yD//R1v2xGiQUWofaRZiJotssxdR Y2yIFRivn/N1OnQUmRrkaaDb84H8ZmM1PXq97cnxCc+SdkzOkJlGwhCmiOaXJBozD/P58tHIPKSD lSmaxfk0fy/DEBi32/7Noe0GlGNUx1rxHqj5CUyO1rL6BgAA//8DAFBLAwQUAAYACAAAACEA2O2+ /i4BAAA8BAAAHAAIAXdvcmQvX3JlbHMvZG9jdW1lbnQueG1sLnJlbHMgogQBKKAAAQAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAACsk81OwzAQhO9IvEPkO3FSoEWoTi+A1CsEcXaddWIR25G9/OTt cVOFJmoJl1ws7Vqe+WzvrDffuo4+wXllDSNpnJAIjLCFMiUjr/nT1R2JPHJT8NoaYKQFTzbZ5cX6 GWqO4ZCvVOOjoGI8IxVic0+pFxVo7mPbgAk70jrNMZSupA0X77wEukiSJXVDDZKNNKNtwYjbFtck ytsmOP+vbaVUAh6s+NBg8IwF9YAYbuaDJnclICN9Jw6chJ5HuJkT4Qt2LycUg+YUyO2cIMLq/TMN 3qLvTCEs50SQ1mDOdzUc/+O3NQWxmhMCw6wOALqSdms6xZDOyeCxrUOwjlPZ1VP2iz/stRLOeisx Dr9JD4nYJ2E1Dhs9OL4prB6lBDEcg5OtnoOOMp/9AAAA//8DAFBLAwQUAAYACAAAACEAbzzkKbqz AABQHQoAEQAAAHdvcmQvZG9jdW1lbnQueG1s7H1rb9tIlvb3F3j/Q0EfdhLAcnSzZbsnXridpDvY Trdhe6aBaTQWNFWyOOGtScqKgvnx+5wqlkTqZlM2VXSJ2Z22TMuydHjqnPOc2/P3//7mueyBR7ET +O8b7cNWg3HfDgaOf/++8Y/bT82TBosTyx9YbuDz940pjxv/ff7//9/fJ2eDwB573E8YXsKPzyah /b4xSpLw7N272B5xz4oPPceOgjgYJod24L0LhkPH5u8mQTR412m1W+JRGAU2j2P8vUvLf7DiRvpy XvC0V/MsW71wp9U6eedZjj97jeV3FITcx/sdBpFnJfFhEN3jN6Kv47CJdxhaiXPnuE4yxftrHc9e 5uF9Yxz5Z+mnas4+Ff3OGd7A2YPnqifjba9/rpTAmfyifiNa+qAr3qT8lQ+pyMXbexdxF2848OOR E87ltu2rQR4j9ZY2fuDMh52E7d7S35uJ5yk3/UNkTXDv1R+ehEsvt0IYA/lLnivlQAo1V6PFV2y3 nnBH6CVm7+EpbyH/N9U7ySrfZDvRzDVpEuIIPudA/RQF43D2qULnea/22f86ey2yBAXeWetYHPXs R4sLvcCSrbgZWSFvMM8++3zvB5F15+IdQeKMNLJxDut0Fwym9DVkkzNYt8H1+0ar1e/1L1swceml Kxy9Vuuoi/91Zhc/8KE1dpPlp1/RpdZlv39xLP5CeBWJP3CTTF2Ol3yw3PeNKxf255Z/Sxrv6IeR fE78Xf28fSJ/EH+/jBev4cmXI8u/pxdzBvhr9J6scTIK8D6v2e+OmwSwbbC8VoKPCxN63Gx1m62T 23b/rH161mr9S7yxpT/aaS3/UXntXfoW5Vf518//nrkqPiS+D1+5LNu1LF9ML8VZqfXyRc54t9bL F9PLXlVkCaMKKy28Ts7FPNsjHOn+hJOz5Pzi8iP7PYi+ImxjIsRghf7dHLKfeDTgMbmZRDob8d/X 7mKAF6rhrktTv77uT0gK89lPeOTzpIlAf5g8QfX+4TsC4CYWT9iPEQdmZbf/+mya+gGoG65+p7o/ oVI/f8AHlBVJxvEZ++zLZAKAuOU+ro6/HLIb7iTfTVO/dmXQSmnmr60dRJACfvwWOhGH4t3wMOHe HY9Y54ARGNygfDefL2/YzYQPnHjEPl/esosfjVPAysCS8hRQO1qAAlJ+9iwOLRspiBCKyKMH3jjf oHuP/+gnsokuksw8Mk4rzQcl7SqgkhK0Enr7MXLsOA5847TSfKzSrgJYeWGtvDxkP1LhyvcP2MfB oXFaaT6EaVcBw7yQVu4JrkahxHRg3akCsHkhrZxFm1+syB6xVltiI9NsZacyaMeA4mBHO64iIVKp 2ARhmo94OhVHPBc+I+PnJNxOxhFnSFAyWa91vouOIeb4zEbjUBKhWwG5TO4/OFHgUzeXcWWZjvlY p/P6sA5auIZJ0+HJsIlMEv6XBFGMbhbj/HRlMI0JrkU7elJ+urQUb1c72qAaw8UduQY7Me00drUD HaVABpzGbmUgSHmnUTsw2FRwuZxHcE0/GHCGrgj0JX+NEf1lvpmMOL6NAw/X8KyYjawHfM/RFMGN O+Dmg49upcHHDFUkMQsIZEAtY+c7PxD9Epx53Aui6QGb9+sz2wotMXXh8PiAjVFQNE4rzYcg3UpD EId6xoYAGlC8YIKOCdSaoZueN/YdWyLiO1yaOINkxN5cf7pk/U7n5K1xFZZujUZebjyjaz4a6VUB jawtDNyOnJjNphDhUR4cCm9w1D3HD9zgHn6GDjqu+okzhHthyYgz7lILKPxTMrKMQzi9yiCc0oLy nnbcsSkotxZyrz7nA6hawKzBAN1SiHCkolL3vEWPMbrmyeCItPKAkrWmxT897TBKwe7ylFI78Nio lBgiJBuYxjpkFJfqAXhGPEeNxoU+Pe2wSemgAamfnvmAplcFQHN+I4YMWDBkItj5AvRsnHOoMcnL YZKe+ZjkqPqYZGFEDSglHt95TpKg1I7K+3DsulR+F3NDvo1xfwdpB/hf0472kflgRC6O0DkMvynu E1CDVvsgGTtkP15esf6JgMTi4alxQd5RZYCGAUHekXZIoyLm0lDbkXZQsOn05t2IrOpRfY9SByrt JQ42ZbXUk9lH/x49XTzCs4zzJ+bDjqMqwI71GVcr/so+BRFiljefP95+envI2K9BwkUqlQXQw4jd 09apmHnWlFluHDCMnCaRczdOzAtvKoNcyjOQ2vHEJgO5bAyteGYI5X6IGBp6C/PoQgspBrLHUYRM 2PxZptnIY+3wqHSvfawdVmxSSrGWJGYAfVbC0iV5WNhmUUPdVx4dUs+r2DspWmDjd6lGvjMuGD/W XqdRmmhAMH5cGWRTmq851o43Nh1rFV+nbkW02IkTnAnFsQHSGchpC8Q/3xxv7JHPiZ1vzAv8ZGTc bMWxdvykjnh5Wqkdc2zSSqrkUaR9x9k4hJfhgwMW8dBFqxMeYewnuIsDl1Pi8W6aBuhz6AgHZflT 4yIg7RCqfKXUjjw2KWXieBxh9+eEgiDHt0KkIcPIgXZSHwQaPOfRdxosIWyP+BD9yMiGG6eO2iFU 6erY1445NqkjFpsjG4bdbDCH0D8bY5FUbIFrFvkKdIGhZSdmDUKTVJ6Btt5Tp85hwzRV7GsHTkoV 6esr3yjdrwy8KS326WsHHZvOteiIyIflqKSitMrFhjwaP1hakWccyO5rB00mHWnz4Uy/CnDm/DII p5FzP0qoegBOGOMcbWUgiAmOVjvYUSauPEerHSNscrTz0/rGfis3zVLxj91GYxRVKAWBQJqFIJGi RpPZtAV6jMXAhWmH+0Q72ildH0+0A4VN+qgSWGkPO5X4LhD2CYdCiQSxkta89YgnlQEcBjiVE+3Q pvxDrB0abDrE+eE92SL7b+yrohRNplGRPMvc2fwtZr/we8s1zqWYDzxOqgA81jY2XdHwqGyUvRas imixgyIKzfuQki4aV707qVGK9WLkUyeVQSkmeGfteEh5ZwOEeWo+XjmtAl45l7RmBww0U5YLUKL+ pYwty9lo9YT06x9XFrg/23+aFt2cVga4lJbAOdUOJ8B4G2FPeTINiZcFikSUr7BeZiwVPtWOZZRD KE+FtGOAyZlrxck1Jx4ePiBjBLY866sgMn6Ud2++xXXBqslv5TZ2YqkyzrppBzZKNU2IVWpI8nKQ 5LQykKQ8o6kdKGzKcb1J2/8TKpRwPm/9d1Hz9GPedDAD/pZ6jvhwSLkvtCxQwosaOdE4bJqlbLfM RyLtVhWgyNo8Vzi+g+7JjYfoTE+yG9SAWK5cbqE9M+IPDp+QKuIbVW0xLv3VbpmPS9qtCgCT9ZSR NhYV0zYMWtQnasVThg1+NsZFOZsG40jV9KjGjLoe5kjtRGwzEBszcCWE1TTPTJoPdtqtCqCd9XqJ 1P+iabykTcaXgRcGvlgeyb/RQB8NVgyjwMs/nXnw9+apZWWATmnhZLulHX9siicd33bHUMMbxwtd Wmg6YD/efGC/yGgSi0+/IfOIlaipCRXLhm5gIWEyWe/QzJDSfIzTblUa5BBgkZ1gojTPMqVUsWcS 3AOYqKDVvAOx6CoYJ2xiRZHlJ9gQYV5U2d4DkNOuNMjJ2T9Sz9X20rhZgHa7MoDGgFRku60dOqnE bnnxTls71EC8c35rYQk2TcqD0Sah6Nq42LmtHe4oXTLiZO4BEqk2f32b5rv9JAoGYwkv2GHB/2Os a94p3wMwUnUG+/Yh6ebtnAOksF72jNPLPaCwb1ebw74DnbzIUjITNP4ZE5BNFzx8LoFmwQNC+94F O82S1jJmXOdEuzok9uVF2Pq55TdlFBnrCHv5UXEiIQjHOoycqm727EbqpXZUpKL1EvVSOyJ5TC+X bOY/LaxxIeKuzRopf8rYiXl+fA9wT9W57DuHXYF9BHmDqKx8coPJ03SSNJO12+bp5R7gnk6lizCk k6j0jSMHRZXf7miQ0nkA3+FTLGVqL9sd4/SyuwelGP2U9pv9eFfGl/6gmQTNj0A9q9QUHZBfxm7i NH8OQnaD3kh4+kBqL2ublyfqVqZOU1582dVePdmklz3C48ukiHQpiJzvskFyo/VkbfPyRN09wD3d SuOeI9JLOwkibI+Xe3WciN2CdSNmG7Vx7ueZeRM27e4e4J5upTvPGDsSfhwFWnThYkQFzTy/iMxl qq2PaqeRerkHuEc/y/0mP056SXmiK9Bd2U6IJb/FtBK/2u4bh3t6e4B79BPdP6aXhMl/wR7p5lqj Offay49Y27z8ZW8PcI9+rvtNenkMnfwfxx8I2kAUHZPADtwnx5akpUbq5R7gnl6lcQ+qiGviy7mS LtvI7BXWPjXPj+8B7ulVHPdIzaSeossoiGn/IPVr3IzDMIgS6ttITWhWF7OPjdTLPcA9vUrXe0gr CfesiS/narkWl5uol0d7gHuOKj1604dO5nqJ2E3gjkWZfK0mZq0lfr3TMs6PH+0B7jmqdL2Hsb6I L/MFnrzmbf7OSL3cA9xzVHHc0xd+fKEW+URbSRprpF7uAe45qjju6Ys+Nyy88Ma+2hg0a914gn6y jnl9bkd7gHuOKo57+ofUu3EZTcMENI1WOHJs9j98+uQcJuuY1+d2vAe457jSuOcEOnkRx2MvlPup qHnjmv81diIxzfME7TRSL/cA9xxXHPecSNyTnT17gveeYyEj9XIPcM9xxXHPicA92dL4B2ydtJ/c s8465vUFH+8B7jmuOO45EbjnOXjcvL7g4z3APccVxz0nAvfc8OiBR80Y29RE//q8WX3usVc/Yh3z 9LK/B7inX2ncgynbQ+pZv3Qd7G1apZefseI88uRAxSrNZJ0j4+o9/T3APf3K4x7qdVtvL/dSL/cA 9/Qrj3uoRn7NY6w3t+HEbUCeQnO6HfP2wPT3APf0K497KIcpMumUvLx0whGP0OfmJIDkT8gYMRP1 cg9wT7/yuOcUevkrTyZB9JUWhBL2iUQ8ubd6ebIHuOek8rin3TpE/+W9ZU8X1XIVzlm8xjrmzZ2d 7AHuOak07iFbOevSWDCWixq4+nsj9XIPcM9JxXHPqahDXo2mMbqJXHaRJJaNrQZgJrkBFV4QiX0H GCYfW9h+oPx9xsMbqZd7gHtOKo57TkUd8tbxOPsC8ruxathYbR2Xr7KOeXNnJ3uAe04qjXsotvx8 8evFNpGl1FET9fJ0D3DPaaVxTxuDkBf2Vz+YuHxw/9TetqzVNFIvK4N7TGD3ONWOsNT2ZSOkWRns Y4Q0taMspZvlbW481Y5KsMHk/CcegcftgHFQWrrIaqh/H7+FaKqOgRpDMCXcoUbROcAMVPtYPSH9 +seVdc9Z50/jmgtOtQOqHaigdgAyObuLGPRwGvL3jRCq1Hh3TqoUif+G53+fnIX4eYRqxPX7RqvV 7/UvJb29uHQV0cWjLv4nYgNx8QMfWthyu/z0K7rUuuz3L44b4pWv8GfwB26SKXjRJmcPlvu+ceVi 7d4tKF7pneAvy+fE39XP2yfyB/H3y3jxGp58ObJ8HIjJmTN432ifakc/pStRR94OS6x0fd+4Zr87 bhL4DYhgAJKV9w0yGs1Wt9k6uW33z9qnZ63Wv4T4l0QL/hwh86xo5TXSCLoR8quUsfqO7lJyDpYs Hvk8aX6IrGGyYKQYs2zeBI00Lfxc9e+LhcZ9Yd5Ms2OQPt0KnbdHqSB9FecN7+eVHuhOq4YgL2ce O63KQBBopNLKnE95tgvotLQDg02L6trYbjNr0XvgaJga8oj7NB/yhGYUSjgYmGjotMyHH51WFeAH ++a5Z3EI74zoD3CD2u4b5/DQNBgCZ/03djEY4Hr8dH1USTDWNW4wvtOqDCYxwpdrRz8qMirR+2gH IBScL9LYGhdktytTMTHhYLYrA1nKO5ht7UBiU1iYO6DIZfiU6qCMRqddKGRvHc/RvoqvKQnT7vaO 5FTZchrn+SF3uwoh9/lFzJBZtSPnDiQOYF66/nTZ73RODpidky4OLMRLH3qAhadKyoUC0FVSzqGY VPQfOPJbM+G/gJwrEEJCaJSsO78koapv6LHMFuGK+JxK+XJieQEJaA/IyL1myEL8ADrHrIiz2LNc Fxooh/0nTjJiruNhzGDArDvHdRIHT5xgrc8Iyrmoka8+T4MsLW55FbJeJbqQKsR2axGcZ/lTZluE 3EgdPQuj1EnAhmN36EAxLRaH3HaGWCsVO16I/HsC+qVDltPEnOcpxq6+yiZmjF9J9qAS7Ojnv40j FidWlDj+PbNm65KYE7NkZCU5Ec/dT1kJMP3s4+sjnZwo8tr2CuKcTiXinHX6BNeLUyaCxs6rCGc6 FQpnbkkzdx7OVIIU+nzEp2xkPfDc4YQ4Xn1Q0tmDoKTa/M0qAh5Z0WBCYQlyy2JAPGbxGJGwFbMw CmhUnFxnGEx4dMA87gXR9ID5gd80Tif3gLu5U23u5ofAxZgtAuAY7QnUTCUYSSPLjz0HeojJHdtC hYQYx+kn1mAA7Bb4QHdTSit4QbzkgV+9pdwD5uZOtZmbJXIbBLB6ifDGbIzqHBQObTZD1Oskce7A iUPXmsYoA38YC3yXjFDFM89Kao+0Kf6RrWhl4bRqMzbbKsmVoFnVxrr0wIf9g04OWMztcUTmEa47 ZYki106Ka7kTaCfDwJnjTs3TSu2AZQdaWYUM69oklxWGLuZs79y8yctlErqFon49eatKsA+fH4gA x1s8p2l5JFOEKka82+rrKEJVgjj33Jqyewd9XZETC/ccUlbQHrtWhNJA6AZTD/sE3yFXi8CTHjJ7 hMCSo4U5XnMbynI/+klrqZRyuPipX30orZ8oVzkJE1I4vT0IBKtNYZs7oDlH2ysUDmnyClUIZ6g1 ASF0GPiw+IKiGqgNbcBygoIFQ5SJkP+iQDsnbRzg5VaFXrHwZoUvztXk08LchxduVagCzahK5+tp VdBP2rm2VYF/QymYGhNQH77jIscAyiG6gPwWdTFYVCsWmrqoj6/ePevnGVXuubxGBf28nOsrwIyB aDqaDhAou84wTb6OxmiNoS4FaCNMZDSOSRlFD82DFSOt4AXj1HJixs0yL2jUzzK6A63UHspt0srf 0bAVjKFqIbJaYeTAHM4TXR4HTPOd2EMWViz44phr9Jz7UcLuMZ4F5w6lDVzzjGWhPoIyRk13oJaF otgyPuMmtQxgLNPoELVTlz9YyBnAbaOICvv5wKkSQLM7sJqKzVIUrcQ4j/Nd7JM1Ty21B/U7UMtC Yf6u1TJrEJH6h/5FHHwYHCUBPAI/YCz2a+MSNR5SvSCHd8zTSO2toeVrpH42zk2G8lYgaPMiQ/38 oEqz6Ct18L/i/SCdY+1TQEqa5aG/ajN3ykHjNDKhDmnrjsLuyShA243P0AAxQcs0hThyViK4+zel InIeI5eFPC4EK9ZlIT/+2D46FS63jAGpKpNW/mEPD2lWqnfaO13aKpWmH8uqQeknhoRLMbAGpZ+M cgdmrtIB8gImU7M3ookQHYXpigUqA8DyHbA7mEDYwmCYcH82qJOzeUZ43z2IkvVzN26KkuFWSefk nJ5ywjSjRNongFuExOsbwm38m0VjYgfMSTBMNkVq1jh91M9BWb6Z1M/ZuEkf4/EQE4nEsUkRH6ll msgSOQVG3dmojiIuFLvkDlhM/bEMTElIdw0d6o/NR4YmWEn9DJQ70MpCQfuus1s+5wOYQTKCD/DH mPDGatbB2+VUq/TXjo+RAqRimY1nkWZabnxgnrHcg1qAfsLGTcZSdGDHARg9YBMlOiZNTav4buDf N6kkgJEVjK3cc59Hjv0DCyg5i2qVoS58D0oB/UojnQFsY9pMggm/AQb71J6BXJQZszcEcmJMXrkY 9MOg1R3mCYTSmmcq9wDn6Odq3GQqhR1UDjuI5kgH7tyzvsJXY5JFNt5hfCrnuGkmdcLdlynmp211 C9nFzQuz0yeLVPvTF2aj2U1N/xejmGydiG79dBE0XkNs5S6ydbvzXH7E7HsvtgZi5Xvffq01Jr5y +8Q7J4Xi1FSUT7tzKsiWXzMrtkseO6s2oR4OnwhY0ImIJIQn+hfYGzUrTrmLhCjNEAChg4wOeM55 5AoDJ8UaO1qrh1YWjm6ud/b5+6wqwSJ3fpETIhRyeQKoGHVa5iDMSge0DKhkYWp3u3BJ53JCjSbG YxmEi5xvmltDAgPaO+D3EZeZjfHjoi/GDtbK7PtPe7sFkUO5oq8wu9cspUST/TlpZ0qwBZTz7jme 8vSZ9efFP769q0vOgRJfQBzbEXV09JNhrQ8fc7hlKZGzbBtPCwUJbS2O5lR79ma9vGUqg8YmUYNI 5yZpXMbl3zBlvtTSs+IGFPL0miyk9kTF+huQMwMr3b9sjZAH43HOGT3uXz/3T2EJz4EPGJUacNfP kXAuNE1dfx5/Pjte7eont5lvaUPHH9KaHHt7UNOklqGRqFBCpmJBLSl1ZictwSwBzLJB0RPYrfIS VL9cLoLvFmO9eT6C7z6XGCaryIW84er3vn1Ys4jgu8WoRTKWK4XhG8jKSKVSkqzZnz0ntUt/NSuU Yh5KpjXEcVUat5PTXQEflR7fxzaAEL5qOv5gbKPeMQ8WRLU4U0VGLSQ7CUEthnSD0j8ibtYL2Ijr MszBdoF1t6W9WLD6ABTC5pljOMsf7OIA6KeVmOnm2gMga84YlPQwGzRgd5b9VRT8kC7DyvE7nkw4 ktxwhrSAZIKmCjnLK8Lo3er9Lpkfu9XhsCD93ybSeMSK7Faaz8xTzI3Xtq58bkVWW4Dnx7LFmDV2 3YPyGX2glCtMN7rPfRqlsZZG/ETvPGyCai2FXTBu/VpXP83IDpSywnkaRkvuMWZK485D536MlRGk jJiXfsC8H5abDNgAiwGxyBf7rcZYWpnI79BHNd99tZhreP2mslBoX4YZ2YFWVgAYJGsjortpmgZA VXDofIMaig0SsJI2cRoKa5lqrmXTrmk1r48J6jiJRWSUZLDA61fJCmGA0rx3IUBRxrFbn+1jTOSm kJ6ar/9Ds9N8eSW17GFDasAHB1Jjm+E4QlMUlQbVkkAD9RKxINIZT81xlnHPlKmkr689RtfPfaOk mSmk5lD682P0KnPZMPYz+AqwnwNrVCkFjQ3I1I1LszNDKl1hSS3GFoS/odkGcOpio5blRtwaTNNz zvMVWCO0slADV5lnvEStLJTiLuMzbvI9jo85BOIBOxBK6fJ78Begk4r2GSUqQUo9kVBWmlYQxHRp 02OqyU5kXJhejBKpjHu2A2upHYps0stZXzi2az2AfwMrjyltQWvjkbkAprTdcYwmAERKAz50MnBy HhQtdWO8fi+uHVrtQC+145FNeklrBsXmN/Anzjw47XvD8GGazyDnTtsKVe8pfS+ZPs0Dj/oJpcpX SP0kTJsU8gsWadHeN4y7UnhpuWJYQSaCMT2D5Zi0rHUh4oS9bGKJK5lN43y3fj6pHaik9orLJpVc yJuFAVg4wGeM7AXQjuzfo0dozUuQdQPuQV0yRqZY/p55CrkHIKdbaZCTblwVGVwRO/JQrqlIw8n5 YoGc8onyOnJQxJLaLUjA1F4eEMllO9JOnQ9yk3pmiiuSU1zzmmiR4aputwJBveobQGguOBpBKk1i VZfpcaaNpjzg3dUeLK83kn9gh1a/3+v9aV5IWIxRqUzsTH74tedt9XM/lR/NFCOMKkNj1h9Uqs4Q nPMcqmbTmBbqhoTo4FMotBaZBz/A1o/FcSHYO+U7CrJNafIdVeB4Uk7Cir9StLjRbyB+nAm4WIi1 QsAFZrq2dM36yYmg5ecOiGVQObRmyYtcxIOzng7MlFWJrTJ90Yyqcr6welE6r96fFKNhKsPW7sCf VDjwYykATrBXQvgRkehG1gY5xAhNUFjDg60ntnAzWRfD/QcnCnxiATRuiVm3GEvVK1XKSreggDka VWfbJuacH1JyXugkxThOMialS3dCYQMzKtV4cgimaexcIAYo44ykfjYuZSTp62uHMNUh0TJCmtpT v0bpZjHgkFmXsZimq+7owlEVcrPnP/EIIPmAoavEcrGKR/37+C3ETriY3SAny707bGntHLBOq32s npB+/eOK9rt2l5bOv37zqL2JXx3o8lKxRxVIS98RpE2mIX/fCKFKDWxmwQeXmejXr0TaIc8OlKgK jSHnioi3+SGyhsmCkWKIoXlTrJ+Ol35EF75YkT0S5s28oFk7wFEqSF9fe9Csnz/rudL8kJY2262e XFIuuHIeGX6XTxY3b5ttlt2CBFhHz91m2X0uR1SmSlCQimnle982CsWJWdhm2S1GldSWb+dpdy6r WurPCm+c7sIoK/lcZWYlhow8tf9b0ZQlKH/EGMqlBKEXc1oXf7ihvFSQGGl+p1bLeaE1YX4kn9ea oJ9maNaDsGY4EFPUAUAKKFQDzAgCqFCdTxUFyF+r6tQ8cMQVqbjb+Bs9FrJYFLXSyhRqSTl+ZlyQ sZAF6XJWvvcXtJAFGWHm5y41cy+zLaggZ8v8Xez09OvnKZkd3zWnnylKI1FjQXdirsQf29y3IidA BoOswqKtnlMrlGAnHtn18XFuoR9XLCDexcxVodPc155MUsGDuJ+qAaBfLImi6xBUIA2S+rC1hwCj h849jdPACbrBPXjCXTYc+zY1v+ChmgETfWvpa2USKbhCnjDTmtEvlpnoLPdNlt+aUWHOjFtU2sCE AVo1Mjty2/kE7CwRKnWDs1yEgpiFBlGc2ENfzMhBngHLNhLQbeQMmexV8jAXAHvnoX+J8eEQT8Is ldh9gG0cyI6JKl8uRZFJDoobkod1ud5W0oBnWplnxgzzFp3t3X1yjnx1CGZyIeRsB5jsoVm1NSdt nsmof0Hmi+4a9S9V2sUoIMoov6/vvyOtX9MHIUxQdhWHkD65h22C8Uec7E4Xaj2XIuP56q+crBHS 3IMaXzHqkd0e4Q20G92C/CI9LeaxAlFbcn4LYjaOjhviWM05ZhzR1O1kkHJBqpAVcs159JJSQsV4 QsrRWhXDft4A3DKxT04szw90TioR6GTyXrQWMO3wsuyRg5FSuF+xXX+WCWPB3b9lwIgcpdwguqiQ r94DF6NRKUMzlQcuT/cqTMOCSmlaRBVrLWcMllbE2SiIE8BT7BKMEYijGfFNIxMgNt6ms/bmkap2 n8sH83JhYYlKqT1YW49FsNIy5VMlVJIq6IQoKoklUJEEjrgbsmEUeBKtHzA3XSKoxoXMM5YVygmu Tmo/31FXmRJHGUt01b0RuwRzGjY5gwOnnPY1LSm5SawoUVnT02PqgirxMBfL/ZXQXUkjT8Fw6AbW AKtmN8jlI1iQ00nvJakUyHdFN8kULinlxbxMBc+HiN2x6SCV9qeA+umx2zC2HQdxvYeWNM/xg+jn Cz92GvjJiB4s/yRtWZMJfHVX1Yvn3z7CB7S2lXhri5URy7m1a5LYWKVJg/2zFVLIZPuIU4MIRXXa 35NTAxMyHPrJjEqPVnvFKI/KiMg3BQaZCBS6JxqdicAacYITZfOXPsUC6QJIkXz3AmTexWSxaVrZ 00//tAOt1D6NsUkrnfjwrXlqpR0hKLUywHX0WubH7r1irF67dh2/iwKjzO2ye9R1Q1lwXF97p87A yYjDuaBVbcSN4+7otbRn3NURLy2A7rWqgI3WBNBsxhCTaQaxsnFMmmTL596Q6cBCVmTgsNyNGqLM cz3aQc8O9LIKFYm1ejly7snqqYYkFrpWQmPoMTSR8mzNbCCequMP0p5aCZYrsEHAjduf0NPPRFe+ XuqnbNsUaVO+QfWEOlh8R0yzjJS1qVT1gDViHmFDa4PMY8N2g/GgMdffpWaW115C67W1Q6MdKKV2 LLJJKX9F9x9sH9iOZVMnkW1Za5s6MW0SCEuZMaHGefA9YIXrtYv1Qu80NctkjCjcsEjSCkOpGLnn KVtR2aWihWSNo2gSrCkB+g3MU8k9ADvtaoOd+SrHA/QVwH0LhUTP9f+CcuJ/oXQGeufKQBny0lSp ClHAEiPCVG7r9/qXMuMvLuW6rtTzNo8S77Jht9fWDprKj3XQSQ/J6+Rj2xTriLr3ILDH5DQkyyjt ZBUNG8B9VF7FNMsU7Fso9DoDGmMZYie9CHi4ixKsgXv1entA+tarNukbUCBt/MAUCfHbStI3Ecik 3MsHGMIJsf6I9BHRObK5uICcBm0aHjmheamKjnbEtANLqb2msslSpi27Qtc2DPhhAPYhwOaBwQ/U apmM0FRBLB2Yf7WMC8H3gO6t19EOMzYpJSYV0XXuoawQ25ETCqpw5HUZhRtkG22JA5ep7B3fPG3U DpZ2YCK1w49N2pjJgDWpm2fePkYszcRgP+AD8zBhdcjcTMCE+mnjyj/G+rnWcIzP24dttD7fzlGe cS6hW5laihEncw8wSLUJ2a5Ba84jdMICEucOa3apS68g5ZqepS69ClGurW6biPhfY6xYHghJq3FX knqOhW2+s6JXkDhthdwLTEzMh9KK7CHq6WcZWxtAotiKLKQU99J6ivIayvQzhZEvFjU6NrQ8x3Us DGNh3EJkGigHi/OO5CuCaxu7vs1LbemnMSs/4CvIZLbj2rJigsdSIyJY7J32Tv/EugTiiqfxL9bI pxMa6MmR9Qznu8gvNIxjjO/pJ3XbgVJqj+fW+gIMstN0+lBWnCzXSaakdW8GVmK9hWYm/D5Kr3m0 /BUUB3kdhbkccBP1UnuOfAd6WelGHPLFDfQjOsNpw7xcVnV47kjPXnt/Q28PUtL6Seg2eZHrjze3 TAbRmXgGleNgHGGwHD5lVkhOQxkw7diHAmGb2TfX24OeG/1EdJt0EhtIkcRJgmBAI83jGJgXkffP t7dXIvzud7rtPwXkuwwu1KWjzp/ZeYxc8scES1kdsrvyMg1H2rPRm7TScuMAdeQhmLmRcBgMnHRz sTSe8Rh7caGtDe4PwgABuIGxz5F2PKRiayNO9B4glaNKI5XbeWWPSOFzc6hZXuRspidTwjfPx2hv 5VHnu0Qfox1xbPIxA/7gyKg7o2e5VhGKyG0XpQDWxkMRiqN3ZJ6gNE8ptXf07EAptUOOTUpJKe9+ p3Pyp3nZnNfPhleh9fK9giR5JRRxyj+qz+Xlm5eln8Egsboej5rAZ4wFpMiE+ITIM6jRFcBoOZUy DFw3mIipgHn8c2ac3yjIeliiMpoAVgqSNpYozfJCw2qzOF6nKVn25vrtGTaz+uDuQWM7VlhTtQ8J W2xfFeQ8OPSzlC0yZ8kIq5/ukZswr6G9ID/l61TKSuMVuByhfUPQU6NV9nPCPOwmEcRQCVFAYf4s BrCmgQvMqVkJHjxY7hieiK7SojHz/M4e4JXnUm+WGwQJpaTlTaJgRcurP8NCoqYAYxggyYM6F9om 5i1kAjyLbC7UcmicQhYkN32VVrIgY2oJn3ETgIZCSgyNIpWoW8nvUMUycI1qQdrYEm6FAoEmxN36 6W2VNMuLu/VTv246vJfzJS5iAzfF3rlKgczZUoWapuwp4gGf5jA98UZmzQqS4tZH3HLfN9QUAghM L8GmioZMSQvR61em6mKEwdSOl5TBNEKaewBm+lUovpz/xCPB7sCxVNEFZlH/Pn4LMWMVsxuMtnDv DptmOwes02ofqyekX/+4oh7v3p/GwZeCRMclOpvyIqAqECXfEcNVMg3BGRRClYhSCBZMjvK9+j7j 6hAfl6hE2ruzoD/nlGqJwIrU/BBZw2TBSBGhGG+mBHdLP8OFL7TUSpg38+xYZdq9TAhMCvI7l+gV jJBmZSBIieZROzDYlGW4sFEbQWrhYtMabdq4HfJI8hIEPtIMEfPA3M0SK/4am9edo5/Gmw63ZEWk 6Gh5ZaxgQpRPmNc0FNKPv18SGyMKXhvQfyWIutf2k5BLHruJQ3TIqdv2rCkWF2NblVguKaooSH1Z IE327/GsNBtGFb/0knGefA84vHvV5vCGWoYOt0WeNQ6GyQT7Xswzf9Wh5TYhxjnVDo/Kdyan2jHG phhn1sF0I/hq0Mh0Q51MFz6jTZwJcc85QH+jIAaLMU2Rz9qY8K15XkT7aMwO9FE7rtikj/AiSiWp SeQfNGeKjiSE05jzc2J7jCELWdIjeiU8pPBbLuk0UiG1A6QdKKT2esYjComoWgzeS21DKycpIHqX DgSpDX1DxDZYlo0KM32XWepiIC/iHvCPH1Wbfxw2MrfJigygTVzjTeYc8kOplpcXN5SKuLgxr53p qDpk4wYE4Uct7RP+pfuYo5Z2oLHJx1y6DqJt9uZyVehNVKYeVihSBGTZ4pxbiMJTlwS6Botd3xgH tI/2gKv8qNpc5XAzMv5eCL1tqa0TYEJKQAqNJN2cK2UmRDINIh7tAV35UbXpyqGXxMD7SNy9OkQy MRjSDp+U+351wRDeMDo/RU9NuRWlo1YV+tnWVpSuIhq/CS0XmT9p8lE9chBy5Kz35MwOPOLOu6ZO 2ZvEijDdeOYM3jeOwEmO1qTS6sRHleADP/+IYpoTjzYI5SMSpOtEQmvSj7r4nwi3N5Yto5tkirJd Wqa8TKXOh8iDYZ12KupPAVgM8Rwrth3ndgRWw/cNYj6Mfr7wY4foG0f0YPknaROZrJCqW6pePP/2 6YC82H1Vp219JCz79CndJ6kb45DbYG60LRc0rVZ89hZ56Zz0a4sj69qPixZOk8ZCBw7ojMaWO0tl cexsRx71+q8ryhZc/0b/vcMQ6CsHFEogpCDKwr+qvayLH+CFbKt62fVncJ5/Z79NfKjGm+vfCJbC jiDPlPqJmfrAT9gjK0KXc5r7VMC0PqZny60mT5E+jmlKnJBEgRsLN5yCLLQZeU4cE11ofTxl488H PrTQC7PMIn1Fl8qjhVZ3El9fMnJUL7v5eP6FWX3BIHuFEGyKA/rX1dNPaH0wtz+YaZ4udz7hPpH4 ELcEBUiWPsWzvtJCUoSDFEbT+Q0TC7FbLf3tpQ8PA+8Swvrx2v4hHoidgbZFY8pQabB/F2CJDaKU xAUjWKIP4M3FQttK2hjAQ3ShyYOIgm0QQXXqI7j9EcxUthGFCPuWr0QS1YlY24qihCpRyFtURyx7 e2JTn7j64KJOna96LZ3c+sBuf2CV0cv2pDx6cuX9qg/s3h7Y/En9YvmYPRWDMLOu0KVDSv1QtXuV qdntgT9CG2q7tcWSrM3uNbOLWqxAMey47jDfhYyLaDOlXJbYKzO2iUUiZjP6iPxuGSKJ/xtiymwc Wvuo7X2UJ+1LQ7T4cpR2ObrWRBB5fSPOALWyERXApWE6TuCpTkqf09kRZdhNWS9ySalpREd4zkGl yWmc3SG2WCLJQrlojyMv7TsxeGihOvXx3P54kp3b5JRAeODHY1QG7mVVIGcXmVPj7ckzZB+GaLYS KzIpl+iBSJ1ZD5bjWneoD5NNzNwdPI/uU+KkCQ+K0WrF3174M2HK+RJS8Iy0CUXFSD6BGgSxAAZU lN7L2zUIWBzU0t9e+qTclFtXPQAz+crYWLW8Y/wHdn5QRwZ7C1Z/pYBR4FGxu3pBT2h3DXayY9E1 5YFVRP/bBZya2AZ53AdteH1OtzynOKP/+HLB/vjc/HCINoDBvwM/aAZkCZtjz7KxBuNPeCkM7TFY SzrNykiKQ1yLfUuxw/jB/yO0TaUKnIRiEJqmAGFR8EACYexaWI5Bw5GydwC6jxZtHAExyCYm2Grp byl9SJsa3NHxTpwttGGfdBuXZrQupOnEQJlXd9wd2x1joWAt+S0lL6RsUUSQHLC7cUL3QTCAgkdn IMJhkrwt5hOadCLQNEhPBiCsZb6lzHMWGxZGDBiKBUf3HO1hsjVTkRehE0WcjAH6NiF9MkC14LcU vODwwH4fkYqUOh0DAU7VtinJlSBjHiTfBb9t3RdRsb6IV5/iqz8A+gj7vf6lHAmnpptX31r4QnuN j2rctDm1Z872XpWhJ2sg50ZeZPWeelkk/usdtSdqu7OaV1BfX3WJ6NX7j5cvRJ93gBkvMnkpUeT8 GRxtTZc/cJddSXjPMGKH0X+koc2KoWuVePrQ1m0urzDgQLsy7h8FE0pBoOhJYyJCg5AVokTnLMvT vLMAi83SnZc/jWuHYjP4C7tVkwnnSK5BwiixCdCbbcCZ4y85KDWj862lvyX6jXkiRlwowxPHYw/5 HQsP2WhuJtMsKIuVmXzlfMkqGiL7aITv3+FhDdKVlTINItIktLKSDce+yKBYLu2yRF9IdkO3XJ5c lw73tnQIrbmkmgkphTLh82EuyvDL7TbXVGihNUv0ZAsdaq+eI3fR1uzwqKLdUsm6Pnr7fPQuaJ4c k1wHojKsdILKaGK/j49d4nFsRQ52P4ysB9Ry8Hze5N8cMfxaR1ZbRlY4fzG30bAHhxhxV1Ti45ET EpzgFnY9C/NWH819Ppof5VaQdKfD7Ghiw63cDnIgIiwwTmRAUK0xpmsMEldtpK4+ovUEKJh42REM 5TJZZhnllYmqznG3dyG2iS4OYOeXOz2jSuRg9kRtkSq0m7XTPWu1/qWGkPAaOZqb9WNJCnHij2b+ dKGVqZ22+NNiWZT4jywTPIWAR8WisgogFibEjgd2G8JvQeTJ+CDbyEeQP9/Tn4lfafFHepO2fyOr s0K0bwuWEZFIMgmarjXFehwP00DYm0aNJ4vaD2HSO8jKtBAXRHo7xafAzRT69iKf7jx8wlstRIWQ vf0v+lZX34jZHqInfI5CdAflidx9wlsttOw/K/LtFf1cVBzeoFFQEn1gH1wIOEzmXTS1p7k3xIbw 9iKbkvscuzl3aIERKVckc8SAnuX4fPBWJL2feO4K7cjs9Oa27EWV+dzOCQ+Gb4WJKLQpMqsEL/pW V5+7ufSfYOw6LVpCKPvH3jeu2e+OmwQ+XcOWCCwrJMLkZqvbbJ3ctvtn5Qn9CSev0y70Vl/G19HJ e1wfOsUigM5cdbc3CqtvPptbiTjwUmsgjuYcBiybDQsjTFPClqI1c2Zd3i7BhfQozBoLlnd6XV9F dDGNs1784y3ei+XZzHyEV8rynUyw0CkWgLWeG/vNJF+umJcsx7Kc8/1W+duurJy5m9/Of0eMGaC7 2Q1iAbLSRlskbA7YhMb+MgMVlwslDpnNflyV91vEawzcPDMNQQveM4ibkv0cOAQJSDdGxR2RCLvE flpRGpBTrxylgVrkW+Yj8yW6eYFlViV45F68evILhX8VCqev5NxCZeoe84TqeeaaxLXn9ZbmPTJR qWygUnsXZ3nu4O7f6IxxHtJR3QFPMEONlgLHr4/tlsf2hgSKsugRcoJmCbE+f0/vT0MxSfxr5v6p q8tfc09rmqU3mVxIyRH0TK7/YSyVKC7hm3X/8s+rxb6lzVPihTjx/5f0Xyn+edOIGrGVP/iv++QH PAmNI+Lu/KeW/PMlrxT+v9zkB/GY6A/BagDfnhd+M3s2ask/X/If0ynDx0xN5nm12J8p9lTbldIr C7T0Nf88s8ReB2TFA7Kcgnxy7rH+hLXP2GUGK/2yKgH9upFnrSlP1xSCzrnhfkZT+4JdhKEcSOn6 WeOPqAWK7WNAfHd8ZLnopK53Kmwe/0zWZi1ItjMuHVrGAnkjiyEmeXJyR7fNLa1twX4LJncWUWoD K3fMMvA7RE60lgUkaW5wj2S6vA8ctGPJfHkLJXjFgpz5LZJ3qF5liKTk+iaiTds7U+V2KV1+KcR+ LSlT6MLVnMVG0r6tuAO1vm8peWFbMESVvQOAo6T514qgYc7zRd191AI8M07o8wSRTS39LaW/zr++ CVHac+5QGMe+WiuMsa5LTLvhtnhISqNarlLXtei3FH0YuI6NVahv00peTpC5prxONZryVkcL1IQF raDF+6hB2qhZ3E2XKuiLrRMvlH48JyuhYkD0ZSojkrcHaOfBzDokSkSwnWJdg7JfVXRyqCJW7r2n Fz9w9yX6HvE+b/m3dWFZVsriE6ZPPyfNkSTBuLL+vW7fj3JeF1BMb51ffbgB0m9xxGYrbpXRZ5l6 5cRBv8GDFSFcpY13tBbX8qez38mZtRr+Ph3+PnD0UwPNihkXBEixzX0MmwXo8IbA01WNuXHhYFgP mO/tOcWo8G/zJgJSmmkoMmq/YmqOtq5PxdCiCviknyb/CUrlkZX3mPUxffoxhYlMh7ARFL+B8RPT iRMHCZF7tIHH7KsfTNDKIRiI3+Yjow2E9Z3jlEV9ZdjxDFd+nTPI+XeAusgsTlr8+6vjmwoQwUtJ yRDo5fM0degDmWKnYCm9xEWGr8gmGbF05NUb11f/AUqwEj/xCPV9MM1gn7mLJJX69/Fb6KDoDxbY EJvS7jCO1zlgNFeinpB+/eMKDHbsuF5YuTmBWy+sfOLAbL2w8n0jH8PV/mMPu69Xg6IO2gxoMz// RhRs91TicSh56UnmHjFB/QY1twH9xMrFy7Xvy5+qTTU1uLZIFtEwXSfnUUJRRLCoDw5DvIBIwyjw MCc7b4wLfNQcJjTRgnxuLfotawsQvY3NFxZyRhEmCYj+AxV8kB8Q1J81VSAHIBLo8hiADYFWB1zX ud5qAZ6Xj1bX5npXJZDEGUYMq1gdhE0EfxL2Yn2X9hI5SpFHSqu19aHd8tDegKwPAEHQwmC4D/yJ mSy7Suh1VtyPWuJbSlwlQ3N6LMnlxW2oTeHemsIvNE+bWrZVVS9Rlck0yTE52FfP623dgqXm9XLW LJ+fxr75CHtg0kp+v6QM+dFhZ8N7yObIF98B5chPuq0PFx8bmQx9FXLk4p0CvKBN4OXjiTpHDplW KUf+8rd4bciYne9byGnOvk1HP3KHqgbSRYA0JvSA3TbMT9LPUMj9D6g50BnghJbLDJyeqPWati7I xYXhTTIFREhXKF65QPnUO5b6xOLLDVV+dKcyhonYpNTSgtRDqZuLIuv6BRmymgwZzki0Hsysce5B 9hm1fd4SRgqJ1npc1tqzVGH/mVPcVd/8s9bgrTX40fldNatey3hrGcNEiJUMEKXI4mF/cG4lQG4Z g+GDsDsNM2bKLVcyLO9jwA0xU79rmFUEZs2cSjqPToXixXl0sdTXaJRV68zTdYamI2j22QaTIYhh +JAWP1Pc/cf1p8t+v9f7Exc9qUMJDUrJQeo4icSK6NqZbulMB/zBAfuOGPsPhuA8pLswEMMnak4C q/BFGwFqk040HxiVvwOKrFr2W8o+RPcGDaSnOxgSB6uW03IIlrN7Y9+xRUENLR+ooUDSzLpDpgLt 8fMf81r6W0p/gFq8nVCTDHVrUOFdngVsvbAtMkW4FRZzLfsrPcKFCOYISwWGFp2XIM9KUZv6p5v6 gROHYNRAky+GPDxrCpPCh5Bu5hbkVZz6bAI/8IJx7E7rUvLelkiolBygs+OAxpOV55+NLcdCl3wO 7xWPwzCgAqc42Vb8ldDhX2MHKf372l5uaS9H3HqgsxoQWR8EeQDbSBlRD2FZBMZVNNwkQYTue3Gu lamkLiec5tHYs/z4oBb+lsKPx9jVgY5DSBESJlIuckqzfgq1AmEWOGN1AJEopiUsWi40qiOFbbP/ MzkeECBJxpF/kNoTBAKCIAP3BHfEAxShJlGh84gn1F2ptX5Lrb8nay/EOQomgi5M7aggei4xvI2A DOTOdVCwt0HBJzgeRI6I1yNuxYgLaLOUGB1OO8lgJ30wt8U0qIDzGQWDMS1XoZP8FJu4ngUwT6zx MiyAnWL0Vf3XwgQDBGuPnASAC+sp5To2sP7FzWwgJxr/crYyv7ynGF2WFE2uS2v15HWR2dn1Uxpv YI7GFJMmUrfSxOf/sfe1y21bybavgtKPGbmO5MiSZTtKWVUa2T7jOknskjyTqpmbOQWSoIgxCDAA KFqp/DgPcu/LnSe5a/XeGwT4ZWmLpEWqXTOxLNIJ1ejdu3v16tVH0PKIkmz0pPFzoVpckZDPbHoR 7v/J//60+ud8R2++shxHP7rbyrB7OrqW51Pl+enfmMRbrcm6VuLXPaUZ+B7b0qbZRwwdj7NLCFig EVkXThVQA3wyATSM7Cd1PV2BSsgDGn24izA/16FoolrfM1e02iF2UA5ZQITFstkNfby5Tn5cNTV2 ohMrUON7Gh+bmYLgFy7o4TZfKU/LHvItAWDOzcHgk2gcDTIxx+dCbe9p+8l4goncFKXoZ9obDYZs CC1BKVeFJcF3I0rZh3GrDFjD/UkxAOj/emfAhg1my3ZOEe7d6C2xxXaEjVOdu8YcdXlPlzdhhahW hqWIObw4x0NIYsjcy4U7VVWgJmxMWu7iGKj1Pa0v1yaqHJqUgmimSfkEQDBVAOKib5D4FhRF5QrG W1tROYrQW5arABHo7FKt72n9XTfe9eLp4RMcgd0zqqOhzATmUbOvtIxxDtrQyxmGiVGug0iu2t3T 7rAlVfu5SxDgOjwfXAheAWbb4BhrL/BMfqJuJ3AnvAu4FM9ICdNr98MXgDfEFJu2UBe1E3fRMSbm XmHzyPip1ICogyS0ZdlDSC9DDCCnV8mWdT82HtDQHwAjrs3M+h7A2l0wTFreTDUtew346XLE216q eNviQKnibSreVhuL9zn8Gn63L/zOBaYFswB70WFzQir9AdkpEDpkqW1ARNI+JUMKfVJQfAaUz4mu 8ujKKrroBrDFIXn+6ChqANLVZONXXRzPrjKVaiJqbOJ5OtUsnG7WNTOHh92C2fhYs84Rq2rCqhqh mfxCRSBML9P3QGJQXjUgViJfM/cCciOBk65c+7N69T29GrbUyfnVTc7bK7youezEl+4dirB6Iqy0 p7rw6lyY9lXth9XZ115hmICf90svuftdctR9AJkEv4n+QHCGDuTPMkfOr/4R7Ivwg0QR87YfyTE9 rw0LqZaX0bXyW+6rHt7YWemJwc0nEZu4oXfg6mK0S9IkaFgWZpXTzXxR0znPdK5JD5m4Epsvqo19 bUw2X4PZVLOzUP3qL6qZPc1Mo2pUXl1Upn21MlmhfW3iRjvP+aWlyf1KE8YH1aRbGbXkFtCyStJx vnGTGoPr7KtNhz03oXkSfMCUeYhp8vqM6nblStqCNdEddsgN921+w975RVBAdAAiZ3CMspdHkRkn L9jM52ah3Mz5Comik7WHHHoC9ffnrNwyqukaT6mo+pEwgQPJuQIeyZwPYZBhcj/oZCMM7WfBeNQa mwf5Tkw62dp9u47tGk3PYtFQUmhNi4xYjhBoQuPBPsN/rzNZuphvL3BGQlUC9OUkWII7VP5asdGl i7NU9h8zniAGFZkY2IgAIiK5mYJA9K5wJloadXyND92QDiY6GqqK1GTkEIcJPNQKgTjjDyKLCeWG MsRczZ7QSKhf1wuv1fq+1q94cFGaDa96GF4dL5DFM2G/R64FfiGrOGtagBrtPQGtNLrKyhhaJZgF ppwbvR86BDJXCTtzxOY8aEGKt2NWt4l0TvVcVG1p29WWTg+fHiKZPauJ9gR/D/M4TMstmyDUyuj2 ldEnZOaRkXcomoJCo5NOlLh9gkfPdvClaUu83rkIfokTyLfyex1EnNc7hwfPXuwfHO0fvPr07OXJ 4SvRsGoINTW6rPh73An3JkpEv+nt8dt3x/WtgHcZf5DPye1Os/EkM7LZwAHk58QPx790yvsGzEn8 E9+Z/4n9+8Kn0Clr53ELcTdsQfxOpnhrsESYNK68hj7W0eF9zb4M+5anLBqQPcUYyEQpBx1KZLUD rJuUWYOQhZqbSe5Dli2hXFtHpFsxumlyK7mZRKHtGjEHqr/BCHLBlLUYUOwPeuUNK+BxrEhNa9v2 Ma6xnmw8oaafHj0MP32HJCf6EnIoBrqejc879ig4aBXWnt/3c68+rJ2+58+xtnA1O4qmmLlumLP5 +I/va8blhKkrKLY0PuXsh/7ivp92DQ+dIgRxN24vfPYIkZUnv7zvD7WcR5DOsX9ur/zmWJP/rTrb TQO332IPo27SAbhVcnM3gc4HlNyweL61h9xNa3PGT7kcD+nHV70mqli7wmr/ifU4zJrc9bTAqkmk fla4wq2l0I0T3hvRcbwnlUHG5h3EkO8SNXWgsCNYHoXv+y7wD4AeSQZxIwOChJNPf7OHMmvnqHFD LT3KBgHWA1ALfYTVKcPEejMyrnJKr8WpBZ5sl6mRWGy2r+gPMEWsWLNWiz4BfQKekZmuQ8qDupC6 kLqQ3sQTDME1X2TLTzuXJDr2SkXHFnfwVXRMRcf0/tjw+2P54XcOtip0669Onbh54u2q99dr5K+q GWEwBQtIZH5tq7etr9fs6turhg0lhHx96jL4Q6OHJwsQhAoo9nOHK4gvs3/V36J29rSzevJaYsXX J4iDv6sPe/qwS9X4++xQETiVv301sqeROUMM+vV/oPn4x2KJI7wTb2RSpxJHomV5NxboHP4nHFv9 PO6smHfTDB//av6x+SfN7RaDcvP9uGHH//Pf/934c/0PauKlmBgmhZWnzaxCR6OT2wOni9CkutPK 11P2VsGjZd2CYl+3SpVrrmSL5HcTLm6nhDXd80z3xMp2/pFbJO2uzinn1hC9rBAtpq39w4UQtfCq LExjszDXynuVFnZli4bi+4TiWmCY+SVaLVJzn6ug8O9g3K8orZsyvS3Jt8u3lY73rel46+0XTnm1 lZlqePXoBDo7FJK6CNOr6LLE1Kyb2Xp+YIS7lz0bdfp8wSd4i8lcDO91Xu8cT/33a9M3NVpIflne JJELDuf2p4lkWWs7sj/CO6zD4jBaWLTjGEPlfQyF9+M0y/96Bmktzqb1+MX0K9+ZCWyj4OVM5f7l zU+K8yW44NLtdRLgpzL7Zc9ldBmIbcOEerIf0cnGoBBygolJobtNvGyX86wxqp5d6qDQwxKi0dD3 rUOfPgF9ArV07C54MF1HB4WGScnMtimjvOYhCT3E+gT0EG841V4PsR5iPcR6iDWVACRgEDvNRqFj eTGdXjb5dsAxqXd58SbqhpqNfiktaPyIXWj5mNqShqa/16HpxV19HZq+fZP49H1aRnkalftv8rBb TjXMwna0D/XXLK/2dTbe8hNlcgNqC28XoK51xLeuI5YffhfRXC3boeHbE3/YSkLEeq381alpma3B 3DQHUHVsGjnp7QO5eveYpuBA9fV692221erctLecaH0oeiI0uz/W37Jd+Yh6smmToVvW4Dp9TMI4 5ZaIe9er67awzk0frG718nie1IWGyd/H79DB6cXV9PxpRzs4zXtP1gAHZ9h7/7PQ8/jVP4L9P12V P/BlsLX+g6PTOjntg8qOTuY/g7EfT3q4+/P4Herpvp4utmRRMu/XvzTd8JwBaY7qTtgXs73fqWV9 LQseOa2b5fHvYYnVps64alVQ2n1DgR2/dbY0v9OiGCX9bRgV5Xik9Du72zcaj5mqM3s6s9i5HoHV ie/hxGJNV4GoJe9lSZtfwaR6VfkGVYHOzqtCQqOkd5S03rhdFtRu3OPqxpmkqvZPO7Z5XBsDBJpA 5ZkLHQN8WMSlNeKosi/MOEHQC7G3F5tvgyLsY+9VHqfteBBizy2l/fge/MZdfFh3ixFWmSR9qkHy QVHe1ug5tdAiX9YwMgXJ/JO4pllNt/81ddBZuGk/f2n9/Iad1XeXQ5JoGNX8QQWqlhULAu6Rr2TP t+vi/Yb3lrrps1em81/8fk5xk1ooQNFoJyDmd89mnHl8S1XTlnPs6zfTvuZVyzEqUimjVo6CRvvp 1Rm/y5TTon56MyKoBzdC6lI8+LumiaHgrOmAN9w7tuWUWdWw/k3ehaSE5ovqvJ7OO6UbPvblQBC7 BndBzexp5pl8BWdq1RJfUv0wI/oaG+vldt+kwdEUnM/WftdCzd+4NrWtWXPiS/sGDbyegXfMacDu rqmtDtAOF3K0qls7lGZ5FZxzbSGl70+T8GD77ZRuV57E4+ZJWJrEC9Ak2O52ismjuOyh/71dkVx9 /Vv7+sY/geU3bu6r8PLPjyH2Aj87+HW7zurSDa0KL7VG11dqAFV4kRahawcyaqng7kOQOFt6VChP D58ePQ2C92k3y/tm5Oldko2K7Yqmeu8a0M6d6EXtvF+iIM1GAf1hmISloYhi+V8rifpBUeI7XPxC cgpUsPpFkHWFRBqPPWi7fGf5Z26u7kyXJ0+sSY2wuIza5TCP8CjawwITcVmq/NtHy9zGkiGcORw5 SMtxMFUqVLK306wjviF+U7G4gyS6jsDlBpNU6N6/fdzD9hc9mZ7IZJox4l1nyXWcXgEmSIsyh4xK 1LHmp43xMPIIYRN0ebDmo/4gyW5g/CD6Ehcl/poa39P4/Qg0yDQu+khUeAySqCj2p55BfW5hL3A9 PDwUtbun3WeZ2ESTyz0Tf/COMs8SHI0qfdxj5gCfD+H/avqvFJpzM4EBUqu4KBDoJcFqJzFyrmKP kacTM/4zG6jG5vFCWJZ53BqWvAq6gXm/Or6n4zOaV1uuiyi/jnKY+HN0U4j7t/Oog8cRh0khEQlb 1WYcBLW+p/X74Q1nzvKQF2rQibuylLGUuGI2GV4g/uCqTZAf8zrG+5gaYYCtiNtqdk+zNwy3aMHn Mysc5/TfP+ZUil+RMllY3GDRaJnfBAs+X3395+Sn42c7fHv89t3xTm3LxUNY/ymflBW5fK4lW/NU 6oNznAtcF8B17DFxgiu8o8N2G4lUUGZBWEU7XCRpp2FphU5uD51As43VGWyNy5lGbUfxNWoEa3Ux bnAedOM0TBLUBtV7GcHcu9X6ngEMN/YAiVGkIMmjBkkGWWmSs3pVEhhoLURxXvSyUYrXAtv6f2mr yk6ME8jUWg+g5wG0SDCy5TJuh0kQ5jnxzOjLAEeTACbDXPSFLyM+skwx5eMPjITDMFHDexq+Vn6L o3PPcyuuHDpMNCQ+6pDYx/EjS4JBMGB5NQiR+A1TdHXYY0CGMkCxZYrbsjcsgjTC95AYthTB8UZw nG33gupGQs7Xim4A4SA5LJAmJlFw8fbyU9DLBsHupbl9gqOnz57ovvBHe14Dx7Od4JbP/qMyzu87 jfKHED/rMpmzLc3v/kFJJN1H4S0Eq74N0+VLRnrm9hAwEhj8Cz7bgueGwWuHQhQCpNYBa3F4+17N wT1zcBMfTBxpwdp1AztmlRja/uMPjSP3iCOMxdd1cy78Gu9Vv/b2azcbtNDE9kXNR5aQj8CWf9gs 0AVtlxRa+8pv9WE4dW9v9zYh2+5joWFhcwMkzzI6ngx/qcyZb12sOSDP6oA9v4HLBHXT9kea4OD8 5cuzF9KmlXmD7dlchojhug0nDa69Y/yGZQ1z4/itweW2K6xvvN+vsXjLgkWEh8syzEtEj7jzeuf4 +eFqCBmnmAQATjyEOHTZg4Oye5OipQ0sGXQMsqG+qzGhpKq0jmvZBtvlvWt8+AgXs8rHVlSOoghz F3gQdUwZ752mI6vxvTNCGjgGP6Yosja4M2iFzGYco8FJ3fRoHyuMwlYSF72oI/RXtb2/7S1zGNZH UwpBzjaVMZlvCbEMLogz7aiD2RhtbD7aRgluyLP05m43EmmiboJGD6n/Ib39TTSKk6SW2qrR/Y1e u2WEht7HAFJphpBqwRKd5SwZkmEzOzYykIIfdRGmV1GdN2uTyPvUpMdHz//y7nzHVrXrL+keGL9X LGr4vRtf+egPoNIxteN1F+Exuo6qR2ypesR/Rjmmj/eCqAzAMiQybn69/TIAnbYILqMB9AJamOM5 3AsOD569cG8wv1vxnmcq3rMYTlfxHhXv0fC74V2TNQKI7yfEWSJot3CA2KEpDXmRJIw7QTZEBG9l 19Ee0C8VivCmpnSg1UJT/xnw1ZRmjkzdNdbLc8XTGL3V6tizOo7S6zjPUuPjVN8AgiuLK9G96Id5 /DswXNTI3Syhwo6yqx8zaPgJ3ZMaDAhGvumqzOuoRGlnkOEvFKqfwxTEe2uY7WglOIqtm5n9LQTM 67hjXp/suGho9Ld8pRDVinph0nVJQKUVVaUFlavPhg7vgw2+fP7y/ODgG2GDG49erTF1vAvx4GhF xIN5IRq3elD5qHQVRL4AYiFF1EY3EN1X3PKjKNFR0nsEaphQDO2a2syqXMxo8j+E8yGmV8bHfXm/ 9ZykOTIIj98vs338hueSZ8OrnnlvP+rEZOJIeNeI/dhz2kolT04l5AnTAsJJEEUSvcJJmbZ69NTc yj+3qi6eevlwuxPL/e6R7ni9x01V74iDj0hXh4Z1lEOZTcbcx2PsVo4TtQUwGPV3f3+vTG5vfKOK B3li0Quw/E/mDwWrbBjbiooL0Xn2JTWPkWCzy3tVHW8P3h68+UZVB5L2Gmb/EBTHxKIohvC5tCS6 vazX7s+g48OnwYHO4Nlkhg4g1lBgUAgqyyGyY0hlmIugjuZKYqaxxjPWMCoMU+gIiVhQMWz3WNtZ K7eyrCTleRBAx+4KOfEAhq+/n8xcaDar9T2tTwePu1Rxok5dpyMCTgLcsTQE57lgUeiaHU+fbJeh NThOBcfTI7A7LomyxOVN8KH1b6rVXEdbpiivD37qwc+Vl/iEQCDhmA6RVQ5h7knG30bYQE9Ol1Of 3J7FMtfsjt2L7LqdDDtYNpClXXRNRI+aj4Li1exvXfGk4tCedYxiOEP53nbF6TXC4g3DLVJHfr4i TByPLxux6MpSXMkFMk8RbuNzL+OJONz8fG/hEG5UcPLTyeSxKZIeWK0in9TUKmt7zEncj5HWM8Vp DUFshEhlGhQ3BSiMjeev18Ttrwmkitkwx9QoiUWQFuxFyUCwA8hOY8cRttQE4XUYJ2ErTkzAapi6 6crNudfjFR21n+JCguoVW0qoMBofSJ/97Z/9CJycK0QrUITjKy7LaaQA1aAK1icgPYCjgCSNq6vh D2p7zwqulUc4X6Bg7yKOERDFICVXWcTt6MlJ8Dd8WQT9+KoH4YEsSPCcgGugkYo5VkAdWQBET03v afpOWIaShll7Q1hVLhXkZkiLZTORwUubeGgz1NVv7clA93Bvbfmk5tbe+EC58T/A2vImFBlgtTIV tXBd1Ys0ob0RSZCKYnuRS0hfEJw318LrnYvglzgps5TfwyGKXu9wZGT/4Gj/4NWnZy9Pnh+dHBz8 QwRicrwlL+LOBc/C24MXh6/emu9z1IgtJbx+32qLqUpThQMugQ8vmbL77y9p+8lplQxV5dqs6rph SXXQ26ciDkDG0pNsiLFZk21KlAbfPe/sU2zgJoB2PWDPcS4KkEMvQm/WJxAgWVbG7GMMEFlsHpud uHAB6SHaKKKywU00DXa87qIxseyc8bIWzXDwcxPnyrk4kRRbztRIqlHSDCJD48J2gE4edss9VLml bZRzaQPiHRcCqei7t8O7hiBgt0akbqZ2zSr25Yqq2LM7RDpxAm4pwpFsfHC9Ym5/xTB21XIgWQHV iVhwuWW8cTeIUeFyv4KT0ULM60RcpI1lsmp5z4Jr1IvRHra2xupM0k6INgBKkI0+OI6YiDO9+3bI TTR4DHbNYB8Le9XwnoaP+4MsLy0DAmvNgJbhRhn1Mjo5AB3u44qJKHDyDafDPiMMx5kHUzQrYBdt 5jGCbKi8DyPIlgo2e3/0GiViUaYTjZpG8IXGwMbFksqcuenKZQTsKSky9piF8fFcfIanE4li0R7K MlyOqHJQtRlpNU30TxMbCffs03if46ZjPy5TvwsiwTho8vsK5lj1+UOhOwtvsAUy5RClSgPlI3BB H3mNWc7rorteo57X6DVGlDP0xmqj4Jhzqkaag3AwSCy0ZpZ0AZ1Hz4SJzD8v3kE1+fnzX/XsCh74 JkpqiKAD6d5E3XDZCjydKMG/3ijwvroTinksKOZ3Jmg3K/tFZPhvEBUaJxqYbO1H/t7jR24kGY2I Zh9U8+nJ233wXHzOT9GX8hRJfz+ERqQclT0080FdBMwXt2Psu2MT2oB+PbRnxmvGHaeJP7v7F/Fr pEjmO/L7KgTcazD2yvXPa4/yWMZyTSJwCwzeeO+aH+XcvLGGK4KgjYIPrF9QtCUaznl6jQbE8bP7 +nEt3Hg7bHnK+1dUWaKSk6yywRMBHgWV0XsWIe6BZMZCRB/7q3g0bgLWs70Q9/P4JefKNfTV7KB2 et74D9kyOAz+93/+bxv6GMiwcxyO6+h//+f/4V+F4c8CWpJTkhkraoPMe84TgajWQTo+vNMDfLGi DtLpFNfcWqh+0I7u+1HXEDM/LYh7CILuRm18knv4fY0FNCP/JF6NqN14+rwG+R/c2LJk+Vacd2rM /cYjb7Avc93ZE2/hXje3ReUNriU1FBEgZu+2jfi08Y6jP8C3FmFd/tE9XY6C5qEqaC4qnUYnqqBZ 6x8vNhXrJnSk0qjcf8M2cVOyFX8K29E+8PsMDMJZv35iHitir9t1b2v43b7wOzdzsmtI9gL0bC9+ +wj0U5rjZjigGq9hfppHAzMOKZOqoqUVbpfjL//Wm2t2Ny0QXJg5sotLVsK9rCBcA74K8tjgXEBp vOLkHZjWhp+pN6B290SgK4/etxIOMqIBTEJ0ZDAVwy1I5DWjMPgJPTkIxeZ7gX0GOBSZWt7T8k4y gzjlCCN7KMLaJIeQhE8lXsQXM0DjpM2ETJ7h20Z7QA3vaXhTEjvrYk7CUUTd7I9RHqiJmGC3V5z3 RyTVDQfkJ6vtPW1fWf0J3Rz35zWIU8Ewdd1oBBu0uJBfdvOsTww/HgzBEWVQuhBotxQQ3kDym40G bXxWufzsAFoDz3DPYAKGuncchAEpZFJ4gINiP6GnF+//NRsEl+0oZRNV9QgerQxeIxgvINwey2Tx Crx2ottIulvt8gjMql+MQrbzuIUAB/91XKfDp0dBO8+KLfPe5dt4bt3QZyQYgGjYTmJcJfuEsTHQ OAhjCiCC0w7WGGqIxi46CvSbNcsUlVUhvq+gQnNtb7RJTccgqOrms0tpLaLzwLFS5FTgPLOIwH2P smEXfFD2IfjyCPzRxuHVK/H2pHOYM/oS5e0YjCCTwDpbo2v7ZI9lgugioo18bnhaNWFQtbpn/ury 1KkSAafgzGBEc98CQEPt7ml34SCaIMLrFVR/uxS4gAocwoh56XwPvt4fFhxtl+iDqzbExuxChtHU +J7GR6ipKjHKIQKbqOU3e6D9cwqD7JsIdP8IocdCphW4pKb3NL0D5RDFLR9ohMvTbS7BVUvRp4vL 2aXxnGkKlwffh0eh0xRRChq0pYEaiyJ72QZcYo3JO25Mx1Cp0keHECGKAB6i2qRtr4jwpPN85O1m N49GFs/IYslABbq5piZlsOb03Hi1wJ5NLKnlAMUm0mbz7As0xyi+Ohi2tHLyrZyKYSto5dlnIJ1I HH/hzcn7E6l87SnQ0NBHsqkMMqAYD4q3gPZcfO3eHSZdYgHMIWdwZM2UfG3VzN6tp7mPJ6V6lsST nF18G19pxL4m8EXs1F1Ok5+MvOV3x8fPXp3v1PibD0Cm3NjQXKPLv4VORzUUqGE6hR1uDzu4riVP UPSlDeb9FcJUK7rJ4HFgkeKWmALj3PtmZ6n3SUN1ynBDpgx/roT04Ti47Jh9yNQvIUKZZwOhpnb3 2eVGCNTQ3gege6MH1jfPo4D+mCgz9+pDkY9nYcWoOshKPuGE/zbE2g/giWp9T+uP6L/kDTBesikh NLGqeqkq+QpCAYhbX2dAppOihr7pHrs7doFaDUjZJWZiDG72eTDtG7/+hMSzTgRRC6TbLQ08vsan x7ttEiR1SJxnXBmxcxH20bSTwzAj6qOx0R6S9KFxxzPuVMVNd5iKrEZIjeWpYT5l0HzTDHL5Rc7s chFkfWx3/YRzl4rMbwh2J7okI0j49G6I5DiRATcFhskxAXjGOAUzNj2NnqcR9kduNUzF6rhVRjHY zJIRJCHD35eSvduSVDhcRWJ690TU5v423xVC53hDBrripIPU5x9RWsTdG1NmyAOpnQVt13rLIcLh x2psXPoOP6cwm4SaAhWg9K2QZxHcDAn1JygI6fvocyUddXp/p69H811yERBVoHtR3nzHSCO7YZ4o EPNoyZImD0CROYD+rtxDNhxy2bfk4zL4AcAADc4b5gFX4Luz6WwaRno0/Y+mbPJBFATUgh0N2Flv b5/GMX0idxTjYj+DoMdNsDs+t2r8exgfNrfzNM3O8hR9RXBJ3E1j9EDt7m/3ynsdxIIDIMMdgg8Y tm6ZYbamAzKAZfEiW0a7GQelp5M2vvALUjAbufW2f7S3PSYTMqwzgwQv9hQPB9TslbqzKoGaaDOB 0ZrkoIY9z7Dn0Lc9Lkknb6ZaTi94Pp8G8IBqozoiouM1acQjJaH4/dxj8YEbjEVRiWEbjtnwimk4 cZMk0ZDjP36xIjl+EXfjuAnU3RZ8mDpjY/KjPFzGhnzSlTE29OZ6WDfXxhNl9Af41kouG/8Elt+z WZIS2JEqgS3OHFQJTJXAaoRXH13+jY9eG/8DrCD8PufspmuUmMFOFsL8VpbHv8t3Gon7xhtx43+A 5XvBXOLEpUCU+9g4CnZk3SVqW6zR3AzA83McMhT8rDwrOaftcp412h6iWP0xRwx4CYSYMHoEgW2s nsL4XQ+osagy4ZtF1i3lawfz4y/qAvfFGdH8JZJUfDshBfjGcYbo0c60QTZKDahI2kqeYR8GNn9x l7v1eWxZQwhVv/dEsnrZSKGPhwV9rDHqgadXbYakCimOFTkcWFKMpqS7gkwb2R43MmhMb5OS73rs PI8dbStsGZMEVrvMaXcC9xHHIs6wXTXvENQHis+g+J5zs9BMVrN7mh1iWEbj7T8TKGGF+Y3stnr+ /fPvf4U7N58JnsQOjY5US7Qys66a3dPshnxCR2bbnSmsDFthhu+mQN7lYg5TK/MNF2OQdiEOqd09 7d7Gwm2wflEwlNCDG0L3FbDMMHq6A+FDNxbBLHfidZjcjhG9f6O297S9sKvNuuA9Cd7ljduN7lbU UtuAESYN+7I1PSYrjumuZmSPNyODP7iefm2llviJS8gmcwYEVBxZEPtJaU4THZ7wLUXBlHBTqcyG eTYnkgKide7bFWIXVOmbRkvPaIn5oM/Icq8iGDfHhEqeg8WQ3CAJ/kVG+8LPQtkfZ2goSprHQaVK 7sFm6RqIhZ5d8bWKmxR/LpAG4yqb7eHNLYcv77J57vhw9pK8abWQuzRPRifl6dQM83rXCEo+NfZT TLQrPmXX0PowrRqHXPOiR5sXGeEqzHaD0s2KBSesun9Nfl1EZqRxfPZ4R7jKZyoqbPY88hoxQhE5 RWbUj7AiIb2CrpXdxY6bYTDMIXkaYYPR0+ipQVCqpwJkEYrBiH9qet981JkeNi7iFsSOWrV1vZA5 GHs3EqX344S1egaaj3rmo4MMU9HQDYLdr1L4eU0EGFgs6izMjMRYZzoME4te1YOQmt3T7LVqqxG8 jdIyglAxjEvRFcBTGKYxRIMwW4h+OZoWMlutg9TeVYBp/DRct5nfv3oQ+f0c9gTnS0WC+wprxVMI cZtlPhQzBqpsUgPRrjeQ3NSdtKIi4VRT1kebsmIiqnArg24/G/L9imZDRiKGZ71fAP7aQBY7M8My S7N+NiwmAMTmIEt9dmTyoz7c2RH5pKCiQTR7bZkzkSyI7E5FGi08AAfwWXyUpzGfGASWFSI5pLtM S5xN8Okrv5mKGfc+4V55bRt6ZwID7DNqx4MwMTltF3uYAXpTXRA13XUMNlwrSjKuPGIuHLguI5Ue uGFSuXDelhcrg9Embe+xpJ20DqvdkWGQxFc9LB0ZJq0nTG+SrG1bQrKwoZHCKf/29oLDfW4UifsD jC5jzwtdnnOd8PvqiZj44wqOWDu1UP7OwVe+eBN1Q6xHYwbwWGTudrlSwpxRgABUFra4mGkaVhgM 2yfUYHGEVcZMPaKeAIEjBsleaMoEFTivgAD63M2N4wolofxmwB1NE8or4XUYJxY5UOt7Wh+3e5ZG wT8/XJ6fXfxKzJEBEjgwvX9PhAXB0E5I9JrweIZRNbun2Z3TC8EDIBi2qAzbcHFEEkuKn23yiJoQ P6jZPc0OYbIyhpDWDQzez66FvmjWpotsk22U8xIooTiIt5mF3Yz3bKTD9mp6T9OzxYcNniISgx0q 8iRYkVA3zqxYbZi2CVE0tDZeHKwIT3EdyKg5e9L8KDW0ZOqDMFc6Pzp6/uYvD2w3ivmkq0JLTp8+ aTy7jS9QNv4HWBsiFgQfHbJQBLsXv32UA37x4YmMPPA6Y8uYw4+tDOK5DTZSEl1HCULrdvnOGk3P 3aXDBPvrMdzD8Erruhgm6AHSOcJm1Xa8EWjKMYJtejWMi57a3fMqs4hZw9RGldBMNjZe4EwVCC4J sbY6w0Wt72l9kX8cpsigMQEhu8Ebpmze1s3E4dmKEwc5dAs+TT13mPwsDzd3kE+6utzBlpyAWrDf hox3oC6QrgV/Fe1ri7A0bKq38+3xzzrLhRNAtXXXNbqLayFirQ0YSei58ybByAK2sqnlPcOU+HHN xnI1oLLEQ3D3gEyEguM1fTloj9FfyJGEUly6qDFpZzuRC2hFyDDcispHQIiRuvYo8cdPQ27qXnjd FFrUcHP7cCNxg6NvdrS8Fn6Qi/6tfmk7s5s2F9NX9n0xOrpdEWfjvUd/gO1rgC1JM/C5agYupoGr ZqBqBqpm4InS425Nj0PxBT0YQBsymwM2FrkqKegFdehoPLpJbRk3QLVdedMaYVSTq7IXKI3vqjW7 yzU6wKhT7HGt1xKYf3oipQJrDFdVqPU962QpiDkIRRKN6cWyimAlgFkdIhFghEREh8qAT4TLkIml pmpxX4vPiSXCvSljODUICRJV+EjyHNMXlKLgU3Hzf2p7T9vDohGghwzMgrnFsC7Ye7wMxJ/IV+Xy 8H0gtbJDvHnzdzIAWLyX0ogKZuj9AcGCnBnmFjHOi7+sJ9PzZFYKPVzyStkdBEFhDzcsuqi7dLii 7lI3ib5wVHjBB6k3liY/xsNtLMknBb60khGeUwCONW4CFRgtu45izGyWK33Re6hBaLkiKlr0smHS EY0qnpiqv4RkoQb+km4P+iiJd7LDquHKG48wrrFW2bWDPMiXwUlMohCVIr51jb7dVYQN1cwv0gK7 oiRdm9hgzaJFLe95P4w3UQr53wjmFjoL/GiHRc6TGMW/j7R/W/6mMIb0OHoeR/DY2hD8JWoTp+ge YkcidbkQ/9BJxHcBoU2+JsQhh+6o4T0NX8hGiyIg17OqRkYcrsMdD/MLgMnxUlkPbrkkRsEBe8C3 LF6u8eY/u0I9iA0WU0TCYFe67mYXsi1cWDRWzIcnunzdMBgWN+vmT60Xw24XZBEYdI/RRarCBTW6 WXWPfPe3YYy5HtQhn3QTtXepYS7LWdesjOygyKAetsyt8xw4Unm1TidToNjX750HV+Ty6EsbA9S4 W01wr8Wd3ejp1VMZF+wa6aYwASt925DMNYZ7GcOEKkOejXDjBqOoBevOzThF0dVIa3TlFsaj0QzH M8PpDfvAN9AAyX+gFAbUDkuLxdrEnQGeGCypgrYbVY0isyeoxvdnb3LuEjIYpZ0JrDaek7AZ9XEF C7AxwvgKopAdy7SYSJioy3u6fH3mOEaWw8iOBH/LsnUFGm/P5OXcWOM4jU46mNaDfGDn9c7xi6M7 CQe+mhYG/5izL3F8hP8f8t9FyZE3UcJvvjo6eHP2tj5Beze9cHzOT9GXOek84zN/LvumU36N/oP5 ziqkxE45CICESaTDcK80+3lFlgwFuMANbpZEBbsTZmdy68z+/L5mX4Z951iWesFNl4FRV6XByMeI W6JhKvznlGl2S6ZZg33QsOKiDufxijqcjTOx4NPU25yTn2W2Z+eX5Q16JaMTIaKeZ32mEBeRDJe1 I/vjvMMaSp6xsGjH8ace0ozXO/04zfK/nqVFzCPX4xfTrzSMTe3F+r+8OrTySU2YWX4BccqmD27r iCBom5AnlRVsm414HJpyqpFzP/ynjqaJsY2JhYeGuG2NbFlVZs3fGH8jKq2Kkd7wD3w7j+DatS0m +BMYsCC/EIiQh8D0FSBQsItXMv4N1AegsA2whzbaMmmK5UeQOerLAQDMAbolCGnSWpFqi/mLcDRB piBDE9imMJbwRiwGgGDOCbHOcTBqxHK9n2+ffk8EcdFCs219S8WExSMwM+Hw2PHqzoOIR+Ek8B5Q RTp/3LPu+OTYuwTFcIis6XEC9oIW4g16XnItyMgvH4e6vS8OYTrjCDqyI5ebiRuPAlct9BlNq4uy GqJci0NQhIhE7xXp9/X4sNOJWYZi6wuppVFHspqKSWRDDrq6XI7BpzMRd9ThfR3eZC4SryedHXEH +gHCW8SdSpXGZhjic0Dc0eTSO7m0WSTUAthclzaXxHMWVLbZUmb7tXhjvtzHN83L6ve+fg9QjI1x zvz0YgxZiSMj/GD87UoErUBqL7EwkuWTgfmR0VdZv/q8t8+7pu5JE6tbBPu8WA3sM7vwOHOlM1XN Guer+RHrWNDkB3y4WJB80pVhQWD/sC9JyKdgtYAircsbHTdJtW+M1bMOz3kfH+xnC9ufOT+QgQgE naobSf1tZAo6Q8ghYpAUynxFP8aqsSzVJtqjpQiDxFFk6GdLCwjcMSzyljyOEyjBrmUT4DzaDIPf foIsUHhjhLaUw+Fb0IzzCJaJ35G2NzkMIbiJowMH6A8MmZGMR4Yad49iV7fHrkiPsaqvCJJZHxdQ DUFnQrfbaD+5qkZgRrQzdNmM9+0E0tJMhvC/h5gTMoPHUmqaNjSg3ditmYnI7IuLvlL2vI3/12yE QiZHNSmFO03LDCwNLm0dc2RaddWkadb6N1+5NkwmVp4aczzrSV6dRbVSlJw9fAMJ8B6IF3G7JwO9 ZvmYXMLMkE3d2SEzQ+Bbtb2n7aXjhq0tyGns+EEeAcflUCizZDC0UXP0TSZU+T5THqwd0+T4YSXH G5/n6A/wreUKN/4JLL/FviS9xWPVW1xcD6reouotqt6ismDZr8A15NYRnx4D2Dlrl1kOJof0TKM4 Dz6Fxect2+SsV+/tUapPXHJovQGd3yTJRoRGUKBIzzHJss9O9Q4gIRahCnCSo2pkWxLNFa0XPetF 0WEoR1gNVW35QI1YDCwWQgohHo17EFbcDM9K9c1MH7b4/Zxs9dpVX4t1s5uqQQBEFhTZBFU5gJJ2 Hg9qnXWA33mcDYtgBwwfBMkdR2gLa+4u2JX6vKfPJ9kV8MAk6A5TiS/4kuhryX0UFiCRviGIJyXv JdcFUvWA+1H3pwM7umopxtcxP9TN2vB5glSwOukmWTtLYPkhtf/KUWRgwUID/eKia844GELODGdX vO9h4X3LxzrmXkDv0IOVkzbMQUZB3BNaF276Ds4hJ6fQOOF4AW4gGbrHokIzc4BUoMSb9e7xvHvM hcJU19F8RYixhzYVydRtUFZAtepkfRmhsawE+8eKnKDW97S+MaQVjLfyNLtsUFlRiT3qN6bchJzs 4eWi2K+9qN1Y726slPeQLxcuXHyVIvNFM8okuPitneUyYoDvISgBDpg8CDgv6vOePu84psbd9c5/ tHf+z+N9DRZ+43nk9d6OBiJUNOQsSVE6IMadQj169zt6zKcKGWio3SYo/dlzL0i8R8lTr+5lilCy L0z4qPE9jV+pefTjq15p8S3SgZKMA5lC6RxfNDZKmkelcuTA7H0LTYQQLikxwCI8G/wTM7Pciwf1 Wj4ARwWoS5fkFJcJKJDrbXaGFkOzQkS5JPcNsJa1qzkBRU8SMJCD0ivIcNjF6SgqzFolhVZ8PR5i Iy1ZDwJ6IYo4Y95BjJlwRvICVLcRLI/H8p77xLohon51EMwT0iDvGeQreVdIXP7OQAIEtwIP4drg FooGcorDgOqiGIJ+GAbu2ajZPc1e+fR2WVBbtrdv2Z4Z6eVxJwsa8EOZsTJYouudEGW015CR6ByT UON0u9xnjfgtABMz9uYmdtmxRS7VHme0NUI7Rw7NWipS4NXonlHvn+/33zy9imD6Yh+X+L5gub8q orLtiAooS8+QvZ2PceLgR+TMiaUxbdd50jvwDncg+mVC4Ggh9UTyLx21PMN6OExYQKnLaCTvcmPq paUyHWKmLorxxjw45yDkxeV2uc9a70Aj+GQUKfp2sQbgHTPrBS5BUzA8zToswn6hvIXVsVPbe16F nYg7N2BIqBGdC3Pv4rKa+LISl45LY3s6pvMpWAOEEPAIbtT6ntYnjvM1N//UGxZ742fDvzKGiFAL q/E9jQ9IYV4moKngtqeCcwk15y7amb7CmOomYe9ku06b5oi3zxEzFg79/jCVEXRmiZbnAyFsaDNg h6jZF00pIATo+sYe3qvb5ThrzA5BeRzrjiBFdHJlyL/B8EmGRtNS9HOF34sdhbpAFM8HTaSLN1E3 xJAFlbtePn95fnDglkJ85LcOzl++PHshKyEGH2Vd9KAh7P4xAXeNSx+sUpl5z13WRjC+mL+Vg1sv H6mxosJzrGx0Mp8ei2P6d/QQKFJtslrWclyruLtjxQfZXdsBdcxKi5sVl7V1l3pSPRMqnFRwILFa C9kqejSU7nfRUtZWorKw7MicEssMlBfBLjdcYANjnvWD8z9v2ejYesPkIEOgJGh/HUejPSASEyLL k8bnyXBwszr9PZzeXD5w+Ytto5Zqgnj7BBHnzQ4daekw4653CcBDyUk23rX1B9i+tHZJmiYvVNNk MQdMNU1qg86LTVWeCtstjcr9N3mIRbiTv9hBt8SQyZf455/IiA4OD5692K4cU8Pv9oXfuaiwgn9m nee60RzEj6+Df1ASGYDSATIuSjCzSUuRwOYSWEUC7badiw8AAu3CEQUCuSZ4BRgsTq0FAlET40xe Qbhf6AUVUELoiZM6AOvBuKn0woFQVd/drmxhvUhgHVS9uPwz9lQ0kMHzWcCgHVEnKouno9b3xwMd puruIgUGx9vIH+NFdCHHDQtrwSMkPM+MBiGvtFMsRjAiLXDw8D9UUsOQah0o0Lg7oXEQm8t6Lkss Ja4WIr9c5z4hNG50W9QSRvx4O4KHNOCDhGewQwZFEa4bIrkA32YbU4rrBX5QX9o06QXs8z4/fvHq zfP6Rf8QFnjLJ0URLY3nZbeHT8EP/YQcw81G6qzEV0CeuZWvUfo3vURHVTRjqCC5yH7ows6ouiyu IP2lzCH+iNSupeRQX8uPhRwvPlBdgFJPRdwfJHGb0kIIF9EXaD7ZFaPI2bCmZPwMwBNthIyNh6vW mEGPZwFQkFiOc9ALO+OQfHGpFNFHSzE6I8GF9zSiYieT2zrFjHhRQPATu8g+p9koiDDPF5gdHjiZ N4EJma1INCuUtO2dOo2DohO1uX2G/Go1GfKpESNrUpeamXo9Q5v8FA83Q5NPuroMbbuuJ71fb8+U 2b3EIN27+Ap638Grp0/UER4rWZf9Yf7aN7/MH2b/075lf7ucZY1JrTPrH5hjCAL8c3/fge1E3Yts mEPnBmb+01X5A19HdoPfpkak9AH4I8PyDCpn/1NS/oCHYAdHxg8Bb6iOxJb5+8bfkhv/A3yDiOMi T3Xln0xHFZVgYC/2oXFkl+8skOA4BJZVLYRWAQ4A9MrV+DBE88st7mW7rClIwKF30bR10DLRz0rh m4uBtWd9D6XPQe+mkEUqoyxPsN0XiFVwYdgZ3J/yEd0pDLhiiM4IrpuXbcL4YZRGueaEnjnh7sWH J0y+7Zqm5Mb2rWq+bZe+h61sCG1njmy55QKDjK2AqAk8aYJyexwCQQQGhUz9+AlggVBH2DLoygPh rQBbsXzDzZsIX7MX//2KkMYi7Neev8EdF3yoOuw4+ZEIO775/tnzw7OH1hiWTwo3XlFjuGGvjT8t G/8DLD/FnNvK5hQ4UgskC20oKF+JqO85VAQwgCwT4pa3BR7xVIiVYeXzve3ynTWa3uj1YsEeFNOC UY+z3kKK4rg4WAJgwdSmxXEH/gWrc6hMZZvb0m5T43smGfT75kU26x7RhvajbWjTQfpDEBK7w6TL JX5MM5vKRyp89Gi9Q2afoGck7TrSwxGN52mnyD1pKkOzKOVCw8qjdRzM2kymWxeWN4MrHq+OE66m Q7nClt6kt77vrS+mNuhBPfEyVE6Zz/l65qXW97W+6O8ISeyDJl8XRBuaCmQXDSGw7W98zK9KP2ju pc7RT06KAZQUXu8MAEZGEEjbOUXfdCr3QvRu3pU14TpJvsz8M2F7Tb0AcDwkFcSNx+o2/gdYPuK1 JMGelyrYs3hMRgV7VLDHU6mAUYsitBsfvTb+B1h++J2bVdcp5odKMX9gmdDyHQG8siOASj9iCmt/ irKs5MLHQS6cGw3qHpHIxi8rWNcO0yBLMbTnOh9hkMR9CDVgCH/Yb0GlmhyRsPisJJvF+dl8QXZi YNzuSlEDWRwJJUHwzD6TyoexyTK+5jQz8EjpOpVxn7udPmXg5CQxHhW/21cY0hOGFFl1WJ14AJrs /TANwXv4HN2Y7gx8PMqzYTHBesKT6QzxZNIrNbyn4UFnGAyxOS7OsLEY8YWaL9jrTX9mNNkDOG+m gxsWXsApe3mwGk7Z7JjJj59EX3gyF3zAGr9s6uM9WH6Z+aTIpVfDLzPXC9uk5oppmE8z+NuTM6V1 CBkRRKKogyvhDAt32hRGwj5A8hMSpnqIVEWZY00JLmxjeUN0ESlIvEut7xm/ZjGEuL0jLmVOzfKV eYdP2F+eEW9w3QtIvKL4/RzN15MaeMPIY3biLMiZkiIzyRI9XZ5FxQhXQsXDQvWXX8vOvpLRDcKZ Cs6RFUNM86zBwLlkwygPds/PLp/YbrOLgMZ7HKFV46HniTRce0ZA4aKSL4wgB3vzUip4J7WiXph0 RcVNXnsPDbeiiLGNjFzXVC3vaXm2O+Hx3LonXU1YHBVlJ4KGYh8EYRQ2UGiypBakCPZcIB8wKr/K IbrHYNiF9XHCJFA6kqG8VtQOh5AaEyYgFtPiCCBV4z1lbY+aga+1sT2ur7CJdwog816qM/aImUE8 WrpRqr62UkljY17Q392WS1sPW/1uitqbQI2YzXsT4biHtKUd5aLWGZZlHreGZaRLUpG5PyR60BoL CdDKPrSMOzTqiDqZzAwcj51IN3TuGPDK90ZHAVcV8bVperc3OsZ0dxaca3n/mE/lz9FVVsYU/e5H YWqaNFK7R7UBSfQUJiYmzVyl+s7jjeiEhmZjQl+DhFDY9QGgA6xQiMITorioDXuwUzETFPqAV4AJ FcPBIMsBCgGyUHF0f4S8iQoZUK4OCmGXOIunfgwMDk0KInREM/BsDJihzu7p7FMg0MXlHs26AAQK TC6p99PjvZ8UytD5t7kjTpNQhkXuFcpw4KeOT87tiXpDGdiLpzmAZw4wAWVAw449uSaSoa0Ld3rf RN1wmJTTh/gjv3Vw/vLl2QsRYbPbdQeX5U0SOdbIR/TR0k/Rl9Ly/wx3pPjdvf51UIqsM/O3lr1m a9GpvBeUoc6z/c5z+gL12H/FaQfFWReKwFmZtbNky1AIZXzenvH5JrqOsUbpKwTPQQYmNTBSsqqp C9zP8I8BZORyzHDoje55o6OqhyziFJvT7E8E7ROIM8AUOam45rnsiswbMfsesGo8hBtVR/TtDKVZ un+dJSA44dovwHHGkAZi46ceMBWoQSB3kCcw3n1F/UrwzqIc9LK4LW0C9Xxvz0f4cJdPAGZTxwYg cJyEUq6N8gcGW238nao/wJQc1MaXQksSAnmlQiCLb1EVAqnNkiw2VXn6npvmMW+7/yYPuyVQm+Yv 6E3ty7xO0fy+/dNPYY4lpocHz15sV3Kh4XcLw++Lp8+QMp/XKpgfZdBfcYUjLBh6DKul5oKRZ1V+ zyY1i1xwZHPk+eDbtbAFwMyTThe/mCsBKQ9/hUXBdoXANXJNW5B7iCJjY3vZGLYGCDCjXowbhijO 1FOpPQ41vWdpu1tgz+4lNTbg48dPnz1hhJRWDWxvNpJTlWPBbgA1vafpDalOQByEGsxDRXsz4LUx 7pBGJh6JMoo9Mmp8X+PH3S6sjjFZN/dqSY4K5TwwKGeN99B51u+L1JNAfK4yqlIDJAZAwBkOgXUj c8xv8A1AgEgQwsEAQ9dMF/REep7I2m2OoaTrOM/SPs5ngQD5Pg2KDGvNaG3o4iBZCD+zt2AZBdhH IjO+W9YXXKPj59jkGCPdNbY2qkNibJvdtqIUq5ba6KgxIZa1S1GQRqPx0VC393R7k9+iNRnBrkV8 RZkaWYHFcWnZfgGjTzZz0AyvHRe1vaft62GGMR1iAR0drnq0w1Uf5lT5e+Mwh6BnkvCw00Hb1Yga 2B01bT2HnufQXj9y3ZPoU4ttk6nA2y8hZefM2FtVG6nlPS0vkxo0N+EuKnQgnW08DTuyAQG1tEDB VJ0EwKhnH9XsnmbfPa+B0GesHShdAwTGQdFPgn9evDt/eXh8+KtkuUwG3oRleJWHqnT6lZbWXJD3 E52Yk3XBj+ENfBmw1zCn+IGzerD75tOPkMei7V8cPX/5q0UfWfahyFOM9x46QaL3AwZZGiUV5KK5 1qPNteoB0DEIRfpZ8BcnsG2JbqiD0Ie2gRBSxDiPQGH09vG8fWhVENdkv7WRMBfSJiWfBY3GnY// Rbb4pDJxn1EzBFhqlb3U9J6mr2e2VuS8kOZW9IV6qaa2kHwMq3apK9+D9DZgLnlAaQaEYMti5hpB LnfLV+zx+sMwysAFzJ10IH4eDWB6HAIJRCY1U31G70l8xVUeA7kCwzrPDMMmz4CMGG7NpdGyqFLs LcPoN54n9v/Z+9bmto1l27+C0oez5VuirJct26fsWwwlx47jWCUqO3VOKnVrCI5IRCAGGw/J9K+/ q3sGICCJjAzStAV2qhJLFJOIjZl+rF69+rv4X4t5G2hvkIxRwf5QNdzHJoWLVgv0M4VS7uZVMHy9 9ex4/9vsPniDotxEQOJJMw+BWDKfhpkPIRi+SQCaxlgdQv26O+r87pHD4vRm7kLVzF1ffVHdLHH7 4dPQ7Gl3/+VP+zw068TUk9rQLDV70V8818wD8LU7P28Neo44VSr1g+ACi2WwbxXxyyTvukDJtvCT MX1x9yeojeEN3P8KyzFq//H6MaX38aY6vMz6grVFxw132N28micWXydP1Uwq/uvhs4eWCrjtc3Tj fPFJIdVUwqJUQM3yTKYRFO6NWVVi/Ibug4RuoRgNUho1/fENHWq4CUucuuc5tMvSck8ffk+LlDMu J/YmOapprqpdl6NS13FljYMUQI58Bsq36/SsMcnT0TA22GTF17RmRSRq0Fgr0jUuiKwa/Outc++P IMxMRNF1iJTw9RZNlHT2Djt7Ly72X7w6ePlqb+9/bSgvQiaF+O7e3sGzl9UQ/zWaF3MD5o2up524 fPjV1xewZ27tlgGHwM4LAx6SsZYxYC3ncFY90eEq7Irfk9RI3pSsYfocxYv0NbIf+woZtXosjpb9 VKv49bM3WEyA6fXLKUWYyT2yl+44VJ/Hs2V/82//POY0xvAZFz6fpLhytd9w5Vlqxfu6PV30W2U2 q6b/W5FTq2ik67Xf829U+5URZMFvUi1Dbv8e9x/GH6EM4d/UXsTVB4c3LcOoYaeYDmBcXAR6rsdH m7x1AFjfAUqdObuUywqodm8evRkf/QdY/VWfE1IgoluWxIsG6u5AQLYNU0zVtev4rNH6NeAB8d0t GrXLyLh+xuXlzWS2mLaDXrV0rQy8cuofXnrO5HdkqkgW8bhFPI5WfL+v2/HeXVycObbf4Z5l+90i qokbbAgalgS/7ZLW9+zg6PlfPMflCH1YK2+iEbd3gC+isMu0grzTJRNcpeOzBOOPuJQIMx9BNjIY ltvxsCwcWmTo/JTOMTVhTrxXS+cmNIN0+xwXVrptVHQ03A5c29mU5jRCb4cVPtEKEO9GD4pdjF8s veUSzGLNo8XMfj0+eikyQ42tj6zqg04GGq0idu1H+wdw7UQjDoMrDUZd4Xxo0svkGRQqkTq4gw9C WNv6zI8+h5QPcAfyEDm2M2hwevviJ/8hSokcm8ixNewWkNslWXpxv+1zv3Ohw1q5u6jtc/yN2j6o QkAuIYJJZGpMAZphIjQN8BpViMo7ywcY3UOuN4VGBTLoNEtyP8sTbqiVCFr9M1QbRrc/wY/bMOLf FNewDZdxjUDs9tmH90+kHdb2Mbc3xwA6TkOQRYk8yq6h76CNmjeTOLZBcewPV9tjbg7SOTFgFoK+ MOZFlT4EjRz0BT0jhJRLE4bmht5R8NQYlmnZuMQaPe9EMcoy1mGMpR+k7jIMUj+3Sylg8Yl45Q3w yiT4S4CnSQKLc4o75oGDDdw3dgEviwEU3uQxQKgGBm5J5MmU3C7Y/XDJ15roCpZW6U4MThD+1Xad mzX64VlgA5uO7E77arDHxskoVe9mKa4EdNzpK+nhq3ZZ/tFngGs8OtjbiUEPUtxC68p4pQZR7Xoi sqMsn9gmFt7lJkSI3ML/ZruOzxqtjw0PDza6rO3GgwGH4HwD4ypuKYXW4naSaP78C1peZhsWPCXX s2GHH9fT6rAOUTuS/+OJGx356CRHox2nXMWTTwin+pLkW4FO0JvF5s1tXp1ScLpFVrWdBPS4wA++ WHC4ltlUgpRYv7n1afYzVgmWvyOVJx3Iz5Bvk0J+k2NPj/0esr5CmZWKB9QZlLyAdeaGuDgkMbeM 9P5YWElKuqb0JoSe+REe0NoUFZ6vg2taUPqOW2mY+9RhyEgnCnCqsMULNveCSLWGumMuL0vpFJTW xb7dmV/kizHUcWim1JcQj4klVxu/6Mpl685fcl2tqYCGvCJu7q17PUSvImV6rvWYKMdlg/MSXhO6 RwhMvRmkoQYkK1TK/de96m3ri8ts7jIBB1kc99YJr+TlbtuVU78mADIgarqShfFLnPjYgB8zxbIc FeYWotsuyOgoWf0xVUxqpGjswguNj1UXyqdIRl3QLDFi+yVsH2LaAttyCtvD0tbCMK092ikteyPs plj/4m3Z5yWeprmnKcxNaiYAZSioVjEDt96wxMG41aFi1w7Bu8X2zW3vqxgRNYTfxoIIl7IU4tLQ MLb8HG72Sf+f5Eo2GLJ+GyCyh9MdGotCPYrFPzR9A+waRBG6s3GirwNoL3uDPAx1tkO4KQifAJ9A 5smhnS33tPk9vT/PJbsDHXDEndkoNVa9sf61WHxVFq9mvRSJ9BD3ANAqHgCYzXEA9Ib9Z+V9Yvzm xncnutohAzhZApfIEmaHPQsmsD09DGasuSWlYv3m1r9R0xTuPCDuviENySGWvhDhhzIzLO0EMkb5 r04zaSS0PSMAT5tki7rozXEzgEvSdl0uIRg9XK7lAi7gHn5atZNk1/xRgLzBkeFSznV623Vs1kgs ouxvdvuE39d2pzt30A+9iGofonIuNHUaOAuqguWzcwMQnd4g27b/YfR6niI8OrgeNmummFREHuRg qnpVVsn9+UEUpF3o89KiBmSp4gCbJ6WXiZnYDJRWIvgZuOc5enCSgf5YzvDRJ1PyAdo3cPjmZ51g ERw6O+B8hihnir9OP8cB9qtgryn6CROoD3kHOx4pqRdvsH/+ybolECQSB77QgYtuieiWiG6JSF+T ygjiqNvsND+lRjlTldTF/HEBJNQqG60gxsfLrXa8Af4kVBKb0IjELw55oUOeb3oENoJzSx7DIE+D iGgkoRlh1p57G6ZW8NCTGmmINRRalGL75rav1opFnYhTbR+JrWyg8FmUPEkwGkvBI0xUD5pJqHsn Vk/JVylS17l4EL8PNGd4Skvg7+2gQyaXtvmlNSgiuCU2UbEXgKlUXFho8NOq77lwECqO92L5JYh5 HPxZRIwPPYDOGbIJximHq7r1wWXqOWKEHPnmR544YBiDdGwe/VkRJ8wbgJ8a+ck0ZoGeatBCQgEe UIpmRQsbhWvs+Lj0DM7dRBA/hhu/DmhKtSD7susxoJ7cjJELY3k0pW70IK4wSyQg/zIgP4YI6GQL sPxjActrvHxUlnLsuLcaPUcbDUyjMhmoNoWQFATS5Vki0GMPJlac+xxXyiEfW/4grHDHhxYGd0O8 LUKIuSZpePuw/sbKUgn1zUN9ZfSXnsIocXO/CjGdZ1OH+MI+gltRXlzlRrtKWi0N9qWTD6KqqJKd 85AkbwqeTPKoWFRCpPAItdR2D35ULm3zS3vef3JvNEIgguTDNfABSgoh4sYtczvZIde17dcVpM1D RMmeqd65YrVTu67bo2/XrzGvvShV2mfseTXLpHi03Vaa5DKqZ6eA/GWWvWlu64ZFqJJnKU1+FBij QrT0x4YqeXLUBojKRIUo+olmm3jc+Up9HSmw8Vvmt9d48P/QWEqAeWkysbpWQchyN9WjL5zatsfE RZzaPtAzwMidAToqw7K/ycPIiYrS2CSYtVdTJKzFKD5t6uM9Zc8Pj46FFtTUKwLmhCiPTmZNZcpm /TBnrHNWhpL3xEz4JQYJIA2vMK88bVcas0ZnCJsjCGWg0OLI2yld8osAkoHsq5jwfqs7YU+8/uyP VTRiZSpzo2ktpZi+ecHGjoPGGyOTOVgfWpPRsJOZDv6YOR9aAOpN8jALqOMyNnEq8X8JN9OFvZFz lfkXg4v8MCgJ4xoZCYJTQMCBH6ZjdcXK55nxTShnfgnbQ8QJBK5ipteAVvQ5BmoO8JaT3KrYR6E9 oXnrB+kNCGeh+U5b6iLqBPrxONcTPTHJlJG6GH6c5EAxzTJBwYH+OdUamE9JaT0jD11PAs6I2uZz BC14+KgnumBdMCtm+ACpfpjB3zx7o32MhINWRCLKt1MGzikkR2ieI5C2l4qgL0iczJH35/vOyW6K DRAR6Ecd5UPIkp9Cp0Bl/gLWx+geAAT+ibQgl4hWtHMaGlNphs0nWGsPRwn6sZW5iXTG+74jg2kS 60qZmIF3FxcCnlSOfvOjr7DXGxOWl6RTTZLEdRgSO791WNbgMa2STMdP03yQ+kkwECGwJU79NiyN rhxqkd0Rtw7OT72PQZLg/PepkZRYN3RlUmQUHdoKhH+ouIOHAPv/1baNjeutx7v1suR2kOUKBZEW TT1yTpXKUVxNc1dzC0/iHJgKwSIPHmtoRieSAeMqbO6elnfTQRIAlSlWT7qUjKeQiHM5Q40Jorx9 ceFP5YY2v6EqTC25lVIBYn1FQA4sAxkFrfLG9uHAPUJpBqGrxgAXwzc3fHU6iaF3IsSaUaJiIDlE MUbyC3u7XvGQ+OBg/1gdSLF7c7vTRCPiPA431xPaY+kQV9Nh9jHP3EmnOFWS8Zz+sxBPl2F9u5YI 6jwc5rpnL2q7luHvjx4Lkw/wvZU65AnIE1hS72H1hfaKxF72hdWxGE4SsRcRe1ny8kv8+N7x4xu4 3+PdIwKQayXjB5SM7SoMH/3RXf2Tn8uw/COAZg/K1Zhax0R4rp0NghOgFUw9NEuCvqsv3K6js0bL s1JpMcU6AEJWiDML33ljUe3+dDLRWQIg7zr1umn5Xft89BovGphWGDLgm8bwKDcIiFU1o9oSrHcb syNwVRgDSxHc6gZm8hrz9alD8A8iMRJWmkPVlRbBrlcz5M0rIm2Ap39OtPF+hlFfLM4Khq+3nh2/ IGXAtV3LE0NpxQ1JMyHrSPOYD8asl2fHPUg+qPSCtU8iOd7D2YJwgOz44PJKY9pX0BZib8jKTf+3 ZuD6UTmFM5x3UF6jUPrp+PBg/3irUnMm/WwKktDNK67Ee+7YaQyUQJ5Iu7P2Fnsx0SF8pVI/CC6w xk6/3poEkUnedcFBpqVuY/ri7k9qIpbFmS7+4/XfFCclWePBphWU1O/E336oSPwHwaVmWTm6X3V0 C9o558vEsdEqDUh3yaqMVo50pXbBKjx05MTszYOIpaATyw8XEGQbjGVOLQGQlno9HagMZLMpM3Nm LhpDsngn0dbbxs1ZW2CEs/a8T3Ztox2LoYmXShisluhTb4yNjwMd6cuA1F9zzHLQCshITn7zk49z bccyhjoOzZTSJWkvb2xJjtLbOwXnn/nMdBbkajW/Wu/MDWdGxJFh4RvMb2NXLQYpKrG7oDFhh6G1 uh7WU1NJoL4qgeq5CE5mxigKD5Ud7+7TZCWS1Amk2WimAux+TAvRewaYpNDYDoefQ/qCKgc58s2P PAVvOu41AiQitOWT8Zg3aGUhklqQyG3Yh0Qra47g9W5fbN/c9uXZpnEVghnQ5QguMRnnQe4MS1KL jalWuuAywCSFnYeFtisqDTF9c9NjKoUsvW3H5FC1oRQ2fsBLyeFSnqAN+QlCOkAC6XLkOO9WMl1q 5WWYkn+ev+0dHx8d/eVhCI7nrlAUIMRiZFHT+ncrF0FWd8TU2JCENDCKDhcPcuKbn3jUXaPgmgIo 2O/oqkLa38DPXEXmBptW7WpmOutWMRU/w1YrgJ5QjwpFMGUxnWnhqpQ8Co1/5U0hQAspDvIkQ2MS +Jf3FE0xgECOBTq0+MpOZ+nrAG8DmmEfjShyL+NxECkZnqA8scwlefiA5m8sZbvbl/p5Y+vnc31t nGgRHRTe6if7B2z/I/3So+5HhatIzYozblcs9HlFHU3FGQk+h1AeAEYI+45RYcPTKb6PDJlbhJC3 fU9wMaEeoocS55vH+QQH+spqDlDNHJFWMhs6IUVI0h4IQ09BOc3P8C7MbWfIr7AVBQNzYvbmZr/S mtEJ1MjoEGLs0ylv4gIRhY3F6ScBmhLoKKNnERHQcQ0ZlJZBR4J93cG+3ryg+dO0EEzCBcTxONf/ ybE+lgDblsFXcgLunIC57NaiBMCYIMOeoJyw2KwCoZVnOYHyDANMcgKfqx8gcdUNXbXbWskXjzC3 CUn1Ud2L3IPVlS0yYbXNHOAZI6ZSTUajtdw8Fus3tD4r9CD8+cjynAgSIM9USwHW9gIMUXCf4mDi A3zCNcrbpm8hce/hce+CGk6Vk2BZPCkoIgT9Fu0m8sqzgY5sGqN4wc9ZQU2GENruMOYmTRCXBKo3 hpoYgdkFLZ5KWOTVNCrkWvYI7q6LQDEf3XpJtDf5zPRwNvgYcAvE93nrpZmdn3bldBKNHh6NSK22 X3D86XRQ4Km7jqfWryBpRZkALBPZC4m9cCOB+EHtOjzrJZPOZZ5QeXbeMoLJo7+X8gG+99z9o38C q3cvK9JtORDdlsVEB9FtqfRCF5sqe/Oe9hFD9rtzkqjLjOcmqv8gMXZsKzZYYHTfXx+pPvYO9vaf tyu3ePTe69F/gNW737mlOg72/+Hkmha4FEO0THpC8qwCZtajlgfMXp23Rgbe24F6frsO/nrNDsuX xcl9wwu0mwA7CtB+xEo0XiXZI/zkKV7HAxHO2TKcM9iedT9tX8mhDvdUkNL02Gg8SjAHYpJROLWM Mgw32PNwltDI/rND/H1QHdlPv9TJaP+QgC2KSgsxh167Ao8kLA+HAm3C0sPVXJCxgKt9J2E578ua vyXuI+yOgbMblXBKWJk+K6f98Eiov9PztmOD3Qk07U8LLqF5rmU+YclshcSmzvtPKOf+6qyxXb5y 7Ul6NeeWrJGWxVDsPz467u3tkb4O74+pJQTFiyf6UsED3H37Gb20hzmz7nPOHlx6EdcEf85CFUQX +nPmlH5sCvI1GcZ3SFzQqLrDnACb29ykrHNiOcZ6GCgIn9g9c8WstIrQrFJBAv6EXNiG3DXEKMAS CPToFlqyAfKEnVLUxMUv8qGgC2L7E/cKP9PwoqMR9sz5qVi/ufWrjCFQybb75WYlStZgd/qDZugK pAl3Q+zd3N7QLRsEkZNLetIuS0pR9LVF0Z3IMzRwbXTdmEKtMLxtAh+0CCfP4RbheKyU2K7Ds/Ys keFE3pmMEqiy2MlmjPiBQIlthxLBnz5A0COxHAjVBjS6fIKpBNDY2nW3xDE/3DGjHqh2bSj9gVIS xivKI0KZZyEXF5sbnexYAhsQlGgkiNUSiBWJukKlx42OD1DH3wTDbLyDHbAYckF3E56a9oCrEbYT xGj225KBBmAMqgPhr7fdYS9qP6ApnkcQj2PVJ8xo0yHBgYqxuvyWEFchgCNOflM3CduWxJ3jorxQ JTg2UT4ZYMIfczGu51wMlyMKyKHZ7ENDygMGi18hOpRYBYJLBCI5FXIq6FRwnkgLDsBRvDHJFb1Q ylLIIdnsQzKLN3HCE9qkrg4RUBp8IYF1OR+bfT6cjAK0YyFbqq6hlBlB6CbRIY3V1WujIYRM8a5x MBp7XIO26+ysHQwkv51PWKCiXZYU6OfroB9HiaE/4JUJiVckEgNkENftFhDktpQITryxsANNuUL5 rVhXk0dDFAXkS3h7CssP0fYanm+FD59tYqpI34sQ7BKIYVGNBZGfJwlPoWNZ0GcaRA8QQN2+IIXt U/g6UqF0dTaY6mNRnz+c7pedJCDtYNJHAa4MdJm4kl/g62cXlSRuVTgyCcr+iYD7S1xVWL/YVdQ9 FXVgR8PbQMadvYancNJxxhw7koaYQHrGoieuEVvE1Jt7r2u7kvS1lzs1Z1fJRbCGB9LBY+8yj6x4 YnFj+++6nYNnz71t3pXRLus/+hJJPsAdevOj5yuvSH3hUNQXFqcsor4g6guVDcZNhhXE/bbP/S4i miB/JVAHYCCKR6zIJil6SmHffez2XAqb2+yJZsBogGSE6lFgnsWOeOHuC5gcGBpJ3GLBzBMBXDcZ cD3LsZbV510nlcplykqUaJalnhoOAzonKpwJUXrbrpJpV+my3sLxvPsRs1qf8A9He+XdiipkyGwM 7Ayzxlpu5+YiO9QO8U4ufoWSMMDUdExrAILo2oTXuJZpMIqCS5B7eVnLJM4znoLaqXe2BWJdIkwS P9pRpYkPPdZqWA5KoiuVYTSXwG5qUBXzDtLDZEWUje+K0CQa/HsRRe0qD5yV+m12i5fiMgRLOG0+ Ckp1RDKNMzNKVDxGmwmEA2S542CA9AXNS6oefGwUxWCSXFlmholmgd56g2ODvzDt0MPZ4ICa6Q4P hN65rI5QVgu9iMags7SMxr7ePBjm5yhaGVZCXgznuQ3DpjR3MsixCzBJn/DEEg2huGRHKtdNrly7 XurUFQAagTYUaUsrKwhDpcYCeX4wEgIaXsLSwzFW2lE0kGDbPNjqz3Fg+UE5sDoodFb2084XrgMB 1yXIYvvmtueeMac3MwZ8lffubfuXuzRqxYS5vvvz5e6BYAmtxxIwgn9IK8xqt7Jdl+3R94fWmF0B QYJUMgVG1k+uKFhrKEQRB1uDqI9CibcvU9el5rzbdXDWaHektFWBSAKSMHcCHUgnjYIcFhDeJVaJ c6vLNwkmmCAKZfLEl0WTrffSc9uhuK/9YBJgbDqc7kA44/6bS9qvd6+uXNbmKVXN6zW5umL85sYX r0ci4hsMmcPrnWjMk7CwMmpEGiLwFf5BcbN+NR0Ex3g6HKTVuiSNS7mAzS8g4BFEFFamdBBKLVF0 KJzLV7TCzh+DVDER9K3t6BuqySNUk32doP3ZoSk8riwxvfOFm83tunRSWH7VbC8KSx0BRsVw4C0n zXhrub1WlbQhq7OJMfx2nZv11pXVlUgx+FkAX1FVYlcVgiEV8G6XD17DD7metK+fn/YvxO7Ng+RE Q6hoaBXyQuODDVdQQNBPxl3ASngyPwmPUDur8ih4Z4Ec+mUWQJA2fJoPUs2EG97OVsFXJBFpeyKy CDC5wK2b7xQ5rR2T+stAa5YOuEYaYx1mV8ZmNxpqo5PDGhPhlKUO0DQpU1s0Kv0gBe3ZCwCdg3kJ HQRMJkCPAqEW1RJqpnM5Pht/fOroRPXMuNyYPY2clA1Gtyy7rNqG43BUPzmVbAbwM7wLKd8A40fd HVzKrNMSJG6Yn5ub2IiHOpU2ESH6w7LKFahcMtlCCdpUs/JJksofK6l89OiMfIDvPdf66J/A6pGm FekiHIkuwuIQJboIoosgugivYrJBXBQDd/dinstISnUkpVo08AazGVcvyGi4ibAsylmL/NXmtCaC EnZmBO1vjvajaigKNJQLfhigzZJKSfBjlQSrT4cW4czdWCUQ2CPOZnE0uAnOg4VFNYm6sryO6BVV EUW5js2vI3FTVJiyZHQp615vM1cRFDWg5RGzJyGmb276bTJzgAl3Uv3dKQ838PHUTwKWeE9lsGTj gfByFK9KI4OmU7FBrNh3TH3xIVYwjKzvlF3fS7XFbb6XYG2FZCdFVdFeCWDQ8Z7RflXORu+h43nv iY81EWreprOpezNmni1d7GGppaPUxy5E4KKRF2Rl74NGxSRjap4xERkMxHXYlwxeDEfDxqjT8xB2 5hrivI89rOqKiAdONL/oHouYxGIsdaG0IVm+WEhK/bwbDWUA/InFA2RqOEd0VEHec+CJEIEON0Sw CcHz+SIuuwRPHIRNOQwLcZ4qaFObBSQmWKKiFFo0CVBBduN2FBMuP6d15RI2m4fN7gihcsc7y7Ew AZDDWQ7HPdE+pA+DdJJ6f56/7R283Dv6S1DYTUZhqy2RSno1T8Hg1v2V+9n8fkKzgDKowuttl0rc gv5tPPpXryyrUHwVudcRCzQidGLWt5OZDv6QG9n8Rg6wFJuGGpCDUNkD17iNmaRL9IQhyAUd6Wwq V1OuZuKPA5L6J5kfh8Ijj6WhGRqxv8FIA6Rq3fg39rPOMHu5ms2v5my9NExMGy3ojs6dELRBtSeZ 7YZnthQs08zgQqIA8iG0cEuPq5rNymHZ5MPSnQtS0BmCD48T3eFkYAS/P8TBkXG1DZfYmX9k2OUM S5/jTstMfGygJRVongrEBsuzB1AextARoVkjDRj6gvIv/obEAniZTrVqKnXfxPTL8CMgGfA36SrS uFfVYUrslNjpJIxmzcLCC7Kah4uitHcnRPhEA3HGJhStsSX6s8Eu3F/V1ZGWCinYoDpSHlFsAz+H /qX3+/l7EGiZ4ISfUg0lQah5ECL1n8ucGiqkYpNaGRsCARxxeaAJ2634S/pZqiYS+Zc467WYU/Sy /BThH2gAeRgeBHdb35CxB9cBiJEY6AAoE8lpb37anQYWHekZMZ9PezULsK6fNh3a8ZkUymRSJW14 lYTEHPCLC/+V9jOx4HuUSIbGXHl5zAgqrrFdxlCMYsmlbX5p696ymiIU4xyV7KC4s5LJ/1iZ/KMf sZcPICoNSw5qr34scUUqDc9EpWFxNi8qDaLSsOTll/jxvePHN3C/L3aPUbSfFzILXUal2pXrP/pz u/rHvogkXpwF4MIoF0uYEm1W5ZVYm4oiqPgxMbwA3myrR8mIz+JAvHDE5+fTC9DEf6d/fOrjnyen v55enEol+GNVguu9jz9NMVV+qTBeV6jgO0kcBwVWm9loP2R6lIAeWQxAaqGhLnEfiXvqALP7GL6O 3EbYGXRwPe99Vn0Y7Yqiazz0UCgqmQUEToLCCQsPNVE9uVkZh2qKzpm7AOIexT3W3GNsItB/iRlR HJHqtZz5SLmgzSFtN19P3e2H+Eh7hXsVHynGb258HG3iQRbsq7KBc5+LTPk2iI/cZB+J21eh3ZXC RVaB3WqIUwu5SCgrK3xVJPe0+T0t+n7wklasRK7hJl/DytJjuO9CPuzuLbQuu57A8J2Uu9j8LvJw L3k5KpEj2pMkq0varyu2COis8WEK1gUx1Azt57X6cxQ2vcjODs5S3m29O2qZK19veU8Z6zBIfQPn N53tFGTHxwMF3b7M9+KRYC/teatF/16gIvygp+g1oIrsBTFtIevnGOptWRtBelBftYC3SxtIUygS BRH7X2xnpgNCSn5FTm1FVicqUiOcmW0i39PKdH6fLE2nVn/6pYdo9qrCe8ApTM4S+tnCLhTfRXsj 4YctlVtDJXkQBumYaplkGmdmlKh4HPgkP0e877dw6fqzmsShlimSJYyPFBWT0mPuvXqpxvrPjExM I4y8n56J9ZTH8qL6f6VenOO58GNoWUoiPvOrfCbS2VLDjVKquqOsko4h9jbLZWX86OlSzjKdTjB5 lOAGwm0+xS1Vs1fYNbaraJdL+dWX0pWSDl19ikrTNqh8FVk5A0ONTcRVVlOZnR57ntp1fNZbZspV lKVTdumUYV0CGn/KUysEVQwtphPecmMblGWWyzNQkfZ1miogFHDk2+kTuYrNawq0LB3QTdUF9MCp hmArF10neh3vcpmJ+5F0L/eebbrkv8Np51xcnlyUe3uw1ZDd/w9YwJ0b+Z8cxmZwYNGVlnsr9/YB 99YMMkB87OudfiPBSwwDS7BtHmxTRtAZBPBqdrx5ReqN0FA9J7GmfkZr/25eBcPXW8+OX25xIZwU TcFa6tjcubw57y/4FU4R9Of9ArRD9afjw4P946pvS/rZFIpTDtfsuY+jLzHbji1u7jO8Ndhpifeo 1A8CnMOJfr0FiWeTvOtGaUA6AGP64u5PYIIZSFrYqviP139Teh+bBS9zo2ZVBhMYbwMaXy8Bmf8G kWOTXHk99DqgbJxwS0MaX21/+os4CV2v3DZ4E2BLBPMPkGhRO4yOCF6wZ4Y656FRKKVyS3W+NsGQ KEU1Zyto3cPROkwdkMPPowCqXQH0cghDv9uHZJBubiNSrN88a9nuWQS0h/YtdXLZ0kIE+eFUix69 U3n0H2D1KPqKZDieiwzH4ta/yHBU6CiLTZW9eQ+mboKEp3OSqMsM8bn+l/J1R/nQlE/rr7vvPiqs h/AO9vaftysoP3rv9eg/wOrd72pLAqxnRSYb42606+Sv0e7wIfP5M4mO0cQHisZ1gsA1UrBzvUhC ATcqYk12E2fBJPiC0hysrMo2otqhktvZvFis8tmGBsLCNKRRrh3AhI9cS7mW5bUs4TPXZWLKB+hX +vIy8AN48jobRC5m84sJ/sZ1MGR96poidfXCAtCcQM8mAFccQA8k22keyJHHxfbNbU/i6jPL0qrE LCDXSENssDmGTnERLgO7Nwkmd/4S1P5Mi79su7/Emvj9PbSdftUj5U+l65RQg1n2woMaWek6URJb RksalU6oRUnunOF4/TlIM/oO7jxRmNDKefumOI+2O48HIhS14+OSrbu5AHXW7Hx1ZiTeN4/3WKlC nnyorwMwleUStv0SviHWSF/7OSs89oQ2IgEcQOXFGAN9Q+PnROxjWYU8TZH217CmTqJDXkaWqfQq 5YKLwrwbsRYn3NAJ6+g6SExElofBebIh9ZNgAPOPzQ2hf6REyCZ3414TFce2HHO9qyAS6ze0PoGr 1OUrlsBLBGx7BJybhoLK6xHggRGv0hXCLdr9Shij55BZjZ5FkdNG0uUaG2XwZlAfKLTMKOTQU3AM OnKItSiEsrHQkBen19Dp1UMOzrtFXBFTYFwSpvK8T108B+9gd8/78/xt7/nx0cu/xDVurGt8TwM2 8IXwgtwQudFI//ycd0Lyhk70QOiHtqpQ9BKSmTJflAr9H3hKc2PSHddXybg7kYGokWNzk34Oyjp+ Ovv7u89BPRb32NA9ksc7Pnh28NeOt0UVck1Eqh70t3Yq1VIA5SIXt1o2grHGbADAXulRysMOZwI2 PeXqpZOpbB/VsLuBmj+uQBcYM2Yc5Og3PPrXgb6hqYXSzEgIyqegh3WX41kVIPRqOXMQozc0+p/v Oye7I1Shger4JtGdwvqScsHxtFzA8uXuPvzW2XiaInSEXjfLlA90De6ur6OUxKBQAXXRIlOgKRfz fi0LL0LnffiMWc3LLhjGfrH3jYaxCSZxyf+lrQp4AhWxAGd2fqzgvMk2fiU1bSytCStCUoiUvkAe hnewiDFgYHYPdbdQPxyVMfk7R+OHHZO3vyncwzcak2dJJ6znQpZzmUe2eqLsJ8fYh2uJ1u6bOKqH Oyo4BBDGmP+B82m5H5TBx0Wog9sIhx4mDUYKryeOEmKSiZudlSy+KWoQ6wR0SKhVjJA9gCdBqACS jD+AFqCjRKrpaO95yqUa7t3wKczPKZ6PHPyG6XzJS6n5EUFP257KzwXxKGPiGJONE62AZcAv3he+ SyyP1ua+atf9k8j58MgJOuXvUYH8wi3PHMpQZYpOD9WEvI3mvmOUinh608AJKkwQ+WHOwwdaXet0 mJg4toGU9rhGQZyDBOO0PehxiF//sfz6o3c08gFAyTs+Ou7t7RW6JWdUoO71jo+7z1nHLbYbKOKa jttZiDLuQn/OHO5h35N+gbbaAwUDyPL0bz36J7D6ds2KxD2ORdxjcWgScY8H3lVozoq4xwtydfBW vJGnNd5L3O9XlQonOgpU2DGXaBsmNMWBNJWnrQhss/XB0wIg9vKo4Nk51IcWYrWr0lx98Jtb2HO5 4FaBEkMb7Y8kATwfTqUq+LGqgvUeiq4X5ZMBpDZpSs2hrCV3H5ytGs5aKe+VazrIhWwIvdbqd5Ba B1y52yew45GeCkHixfexucEzKr/Vmd+ya7veU/8O5oSk7M6C423DES2iKyOSbbMhDIFNJOe++bmP TZry3lvAg0PMMFAU8oogXzgh/Z88QIJNQ15wTTWAS0DDxZXZwnWXM2AQ/oVBWhzxISdmlk3HiRla cJUVlwLwb2yKAID/PWjFGtrbt6+hI7ky86s4SPb2UuhCSi8+srmPLHoqFsBPp3gEE2qnjIgAMuuy UOFEtkfGgK+s9YVT3JizhKTMNzmoHqhLNS9gNjfQGNIqzROs1aCxV0fuLqgHnhn8jQDWsmxMcI2v wjUqHrIWXmewho201TvqDpoVpRJP2dxTklFv3UbvBqu6x9X4BIaXvcUITewrEz2YitWbW53PrYvz XqymdjsH9fyt7WHwgaafo44S74jqtt2zAXNxx3r+WPOOnDOSFqIl/tmpAfqWQQ/JIW0IWqLUuy+H rCeKLgiVtXdEqLsTstRD8Y/N/aNlss7gDUkbnQ+s7Y0rlsmd6EsFiVTiTnxXOsUaUUgWIrS4S7Uh Zp2fu5eQMJ0xnoscB1iZPUxyPZtfT1u1EbprQV2p3zY2Q0HN38XuOZQREK+y1w8DB6Q0UsDUmPsY q2tKSIo7WEdg5CI2v4j2+u14Kcisdn+AgpwbcBZ6AjNVDq7lSuvzOE7LruwaQw9O/EfMbtNSxZ3b G3OHOiwWv77YJ1KjTQdfb517fwRhZiJ6DZk7VszSsqHO3mFn78XF/otXR3uv9vb+lzmPSRHW74v1 JzqkMH/yfL93/Na+/evpj/gVdEgEyvvrDhaAoVvp3vWGvrZsSbxCa2yDiBbm8irgF7xxfpmPuYrP k71hB1RzJZUjUflf3Gvc5huL77dg/VjAejDYN1n/C/pPvc6oP5vDZY9gxXDNbfTmTrv3G5ljzsMo uRm3jgcOc3mKj5a11Le/rNaMc+/k/W6j+VObY0wKLOihAIqA9rci6VBWzRmNM2ARNyqpH0dBwh+O hCOubCfUt6+Pw9Zv9LNlz+lqbjSyudplmrm46qV6vuwvu4ZLpdk5fe9bFWFOEFJqoHeidp3EGlRD 5HOorzJjQuw8CTHN65s080bBNdZ2FKnc7WcQ03WPixBHj7qOB5zfZ9DzDYQPcNdsF3jHIzLYk3YZ UrzuV3ndLsol3C4aB0wx77fjBSBzgibAQDp4g2MFDewcRW5x7Sr1q2rXyankzDVXsfI0AhfQc5z1 e0iCDLPTdiK0IZG9UY+yUMoq5TtUGGTSg1yivwGN94FJWOcdCR0XfUPenYvmIy3Iw74zUDMQb4g4 A4pthu/4UTDEIOd+CdQG6qmW4zVzKTV71gV9+plKIKvi6u3jb6T2ZN3dgl+jqit0+5e4P6tMamOb PTMhDtC5vtQJpTfuc7w1xAsCUpL6QXAxBk/o9RbY2yZ5143SgDLIMX1x9yeViaiZvYr/eN1cCIjA L1bv3N60DEWTxOGrEoc+o64gtJdLRZn4Rtx3dppDnQYjJBJeasKcpQS4Xw+0llS8kGrUbpsY/6uM n40VlriqiEIVdfpsgCIRDSJ5olSCdDUiFRadUNAi1ILCWrHfUCzfPHwVuYBrNVjGEuFC+jOaPngC QxvfVIPoxoOu38BRf1V0u/1L/LjRrZwL/jbRjdjrclOa3xRDnsdDv20IDEcH/F21sizjBhqkFRpm SVAX2ze3PYy9qMAEtoYyH7Eb1X2V1eWlY4VS30ShFJdLFJd8oG0FWYQDeiDg4wSGZ2FmWArDLDus dGVtP5DRlyUsH2L2lWRjUdOjw0sDgCjf2faFHCegriwxzNmYgVz6s05EIGCZ0Zdt2qezA9AKuScl pYrxEzZ9CV4BzLIxwWnOCvKMXO9H4nY/+iJMPsCdrpeIiimQhmxxvSiw0NFphSqa3IHvfQe+QQX/ s06Ap1G/1lMhBuyLv04/xxBBSLFEI8aQL2mxHOx4RK4r3mD//PNMjbR38EJ06Ra5gJtXoksnunQN u70SP9rLpME2+QM43YsAcPrHykB/uxCqR584rD7uzqGBggPPp4D72HQoWOnMB4bgFDbyRPlT6rlg V6LBqxaHUNi/Dekoz72xXadnjcYvAQX0YoCpZQFlRtRc1J8VdiS67mOmaTUIns1YW+jZi/MBFld6 V1rAzcVp0JzRCOSSdHQDbMEFcQagpe9rLFjJzBVYmTB/anAVLMJD3TG8E8OGuATIKYKhkAV+LKxn jff1ZBqpCS5eMR1udYkA0UKUVYeXGNUi3jeqGAJq1SAgbhvhtmPsf8BtRmM1SOTKNr2yuJiJvjZu 0TyNg7ghffsYhiBeE/ET6kREuKa1SRniWh6kY9AFbiRINWzCzbMy7zMxofhDOKAfCfteoz98i5tW JIsUSUcmQQpDXF/bGKndOYASxlxNVHJVZ0K+JHIg/CoIg//vZ/MTtqlaSmHx7iph8aX9UWU65SUv nXjw4OLh95jP/DFGvkCkIk3jkkwF3hWlk8yoUsIPaRqVeGFipDDxExr/aib8lOaXSC8DdG6hVYEE E5VUxgm9SwYoRYDAsTTJmxq+IkhYJF4sTgh84/2ld97n0+72r84kaJAYdPtEGGGJw5qDEtjg4czN EfD7PKYReKYoUInKfp9ONFwMWJtg3+DPSsIWRKhs7a5QKaE2NmVwVxPclSDKTZ7CObqLjKqJDs8g Zz7wv+iG8u5kyuVxZZFqcEUuV7ZhHp8loLTguqYmT3yAHmztYRJcZhgDZ3EXDk8gYRMcgi4cONhY WwhXST+2/GwxfkPjF1tcMHBPDcyZW0S0KnX4nalRtsJ50nMYWAjQZgxi+4a2T8dArr0QI3A40Rbp SwIoHSBKgcsL9IbhPhQmIwwc7NCCa+uRiuEuydIwo9U0S7OSRipJaI8BVYZ1OKGSFJCHJwBNpyKV urmQQp+g9/uwBLSgcFN99Ek4HsE9ut1YLn2w8YxutDjKho6SxGBspYqeH/NgEYV8lWMMDhc3DbWO PX/qhzp9Qk3kMToi7klBjfFSzN7Q7I5EbCfbMiyhDzKO/NQIJJSA7G81euyMlusyzKKUWL6h5bmf Rz0aiktFow8yEkh7a2GKfU9Z46oBD4Ja+EZK2baXsm/29whS6v7W9XroLgVDDSSP+kztunaCfj0c /eLQNzQ+ppJBiCFhGYwkW7FraMzAbdNpEc/Qfs+wD8/Q9a8icxPq4cguxxG3sKnt0AtifTAnAdAC b1AKA2xQAn4JlYPoyvsUqkvvJ52MgAJFO965Ac0983qJGgXA4/pqkuuwXadnjb3o02SYwa473ocQ FYv3DmI7V2zVaEh1y4ccAM+O94sZR95HyAikpBDWQ786ipTX98eYtsxkpWJTlOejGQO87IOfGOx4 3QFANXXtoZRXifo738HDAJKfehepPzaX2LKI7UP/DhXIOvRaoLJUVok2BtioWDlNgivvDzUOIeJq sCKPUhB0T7IkQDeFYUw7OwxKlJ9j7SidfUhQ4ifibhqWjmMdxlATBCgVo2FFD8G3wlhkbrBFY0D8 Afpb9Cxca5TwEpZmY/BEGv9NnU09xKowNQD3bZxl9VVi9YZMuigTM/eYQLO+Rv02BMYvB7/hwX+X k/4bn3jux6ben+9+/7h/BE6WHnFh/JdUPu2vfGiM6H3B6MAoSKkHKLBI2x/+3FmiO45AnGxDJ1sZ erb+FtXiLkrEsbpUozESanxzrr5g43EfX/3bBKNsx7vAl5SIfGiZ/11jEVmx+x96nIQoILdOysDW GWBTwtDrosQH7kezQzQXRCanl1BLfuFX5NQvf+qL3tf7M2f09xH6LxFYh2jVAH6NRunWjre/n429 96enp2Ly5U1uLcwnGEwNtDqcwC9VM31oocLmhJhMJnnkjj67GzH98qb/TWdQF8QWoJG33T/tffrt X/tHTwBW5Zj6PNzzOvgK9cwhC2Ictcy7P/q+k3wAkamZI1PzUmRqFoM8IlMjMjUiU/NKFj7VtkDM V234833nZHekEqzY6vjY3tkpFDTE0S52tPNNWil5f7aGxVpU9OmiHe8TAAXXNyWY4YM2gB7oqyom gfJXSoDlS4DzXa+PCZ3gCohDX2NalGiJdb4ZEaCJD1rUxGL25c1+L6zATbrOfW6ms/fc26ZSTWy/ vO1xnNGQG0EvJUWxWxF+3Ns/lCJ3c7sIHONZJrSjfN3JVHqVSnxfRXx32qsUwrdqkHXnHGvkaOLz goxNgYZCT5ZABU5LeF+B6U+j6yAxEQsUALh2EebWIe/s7dnoggcgAWb5ADMvujyT6LLZ0WWMBed/ m8h0DHGJOqCGUjEpMWYFjg68WzatbUd/VKEG6/YUAecjREPzUKG++YjvqGl6suv1VKZCFRlh3q7A 9Fu/Q6qy85EVBtCStpPu279/7D7xzhJzGUBMAM3TTxT4vYPdvTIMSahZPtTc71E6+0dlQK/WOr+o KFeiBNmY81zBrGhFgITzzQ7nVwbCNokFhH2j4g70kdN8IPF8BUHlA9vWBu0PmHyNdIQJDxfBf9n1 foFmU6S/oKA8I1HqdNyRcLJ8OOnjAPuY3tDeTwlEqROe6CDst1KWe904hgq4JaEhwGfGNzI+toIj v90z3bMnZXo0x7t09maxXY788ke+Uqz/Zq7dCqC9fanVN1cLiLu9EFZHsYjwTliwGfyt/Uy6vg9a BHfz6kFd374z8I73M5fpmI1Nqfv7C747U6GZDIIIU51vXcz/FY1K7ED+IiX7CkLN1ic+0LCo6/ii QKfo421/6vc+VaNQ7RpIvFk+3txyJZ29w3tL9U9+RmP6tIpOQtEGhyLcx+75XwQ8/Dv34RB9WxJd QExVRf5YK4y5/wQXeY6Z35S/I4d5kg8xo4NySW7s8jf2RE0oLv3qAhEYMz/nwZcvOssQnrb4Ab3y bjlUsfvydu+CDoZd5H6WJ7osRO8lzvTM+bl3bcKWAXLfZwANMnNP94/2jnaPj1++lNGPvWcHtChk U7WF/jx/2zt4uXeEEPRvE4aDRPtjzHxSkt5T4djk8Ixn+OYtpHahvW95mj9jWkuRpjF8pnjC5T3h z4lJYU2qk4YEzeXB3zA7hX18+6tSeCA9fPMOW5ESPcLwqGt1iu2Xtz26xf1YR6Rcv9Xtdusjt97b BAuEiJgJ2A43xaOrgvTr03sx/fKmhwDm/vHRi+Onzgcho81HWCaAomhvTxzLCnCA/wqz/x5nWfzq 6dObm5vd5NLv6GGQmWTXJKOnJJL+FK/Rof6vUfbfLUuvHv0A5RrzQ0oDjvYP9pAG/KbBW0L4oYjz P6g+Sf6BVO/4RaJ4Esfmwy50IvQgT/DGLegTijtc3h2iDQpECNp1bmz7tiBEXyfXga+97X8/oy4S hSN6ZOIoV+AoEdG9ajhiw9rxeASjZ2LjFdj4YcGILC/BaONr0qOXRy8RjPpj7D2ewtkh7myV2FDZ 1vg5ROEExhu0ijQqeCiKHMAzvv0fSc9XcF8Pn7sgg0fBNU/dQ/Krs4T9WHzkCmz+QB8J24uP/PF8 5KOvOOQDiObM/Zozh3tCe13s30VzRjRnRHNGNGe2Hqo5AwDn2cHRc1Q5J4FOrtAAuthlcO0U4JrG SsIkBMmD0DXvAmSQNKZ1o7+qKVhDRQEksNvysNv2xa99nmRjontZSO7vUilJIBs9pFv1j9h9ebu7 419t+ryQGnJxjvEg4u3Dakg61VJD/ng15JqbPs8Pj44RgWbxBsGHGjy/7XofzVAN0ZBFDDrBPPUI rfDbgUj84PJ+sIjl90Qeeji3Ig+8Jr8qll/e8m5cmjjYBzvew9wmGV/cprjNY25PkCoFyFkn6E6c DqlFQcl6qYQwn0skt3f520up+XM8hnscJL9ambA4kLxybXklPRJxkBvvII8PDl4gr/wJW+p4KSmx iU6TNJ+RVzG+AulXN/m/daGTSRCZ0IymNAsgDnJ5B1mZ6e/8ZsAkdrwi2nBCzpMe0S3nKWZf3uww rbXsRzWl1PJIgs/agg8ZXoKPBJ8DtCs9722gwyGvFyL6EBJ0RjYgLkNox5i2ONuk/d00xsJs/Tmz 8Ab2E4kfXN4PFtIx3va7i4uzp/u7+09eeR8hyqxG2utPo0x95ueByVbaJWyDkhh+ecMf4/Tfiusc k+hVXv0kQYl6dGsMSofCaJUpS1zLfQlK5ODjs4SJEsXY7VnyGrSrZ4f4+2CrIYXigaI09walvkaN ir2bKccjlE0Z1nCWRdLhPjtTiUzLR6bqhAVdB4lHD6dMzd2OXBEtfVgLgywvRZIUSQfPDhCP+mMd Dv4/e9e20zYQRH9lxUtbVYlix4kDEhEQEEK0UlTTF/pkkk1iyXgt7wYKX9+za7tJgKLUsQw28+Zb FHl2fOa2cwYNFNcIkXSbnw6LLnGsi8Cj9iqBZ0obayklwsPd8fAlpk32lyYyzdH1UJrc6E4jwe8u eBMPaclSPFQm5d+29qdnk/0h++M6mnUmJX007FsmG3e+NkzIXHjKI6lJI8F/QjC4OwxqG++hCoeG /wSbFzDnAaQ/kkvDxqXnOSAOypmg8SyJfHeRb4zHejIQiz2Z5mQcAHwlFH+WlK/biD+NYNe2gPUJ UqpLiUL45AJ8BBdgmAKe/MSOpyAvA4epbJYZoZbZt26ZpRWgFShYNciLEaRCpEKkQjXv3a39R1x+ 69cwz6ZwxfywvSoVnf2OQawkkX2JVTYTx1BB91eP6KNfY71ZB3XrZvlspQuauB+2L2QOcxqv1mni z9SmwuFMz+PxMR0jkc9u6QvffdDG6321/WbpZO3Rq/YvUDoq/Ltb21N85kcBZyk+N0uTK5Tjzyi4 08R/yoeBO0k4Zkayq2ti/yuayBtjKucMA7VZt9txnA7pZcGEf6aK7LRlD7q9fZJjQTkCHrE176FZ 8iNDaQ22JUkaL0TED9hXZ7/l2FbLtgatfne/0zDfr0KLeXbrB+EBm5sq+5F6DPQkAPq+3tX4HwKI 7QHi23J6H8zTXSTNUuMKQcG7GHnMu8doELlgF6MrdnxCsizosngY2shDfudjUFPELJcEWVCQ35bY ncRsu8tcCkSKBnT6o+ZRs3SQzOP25jFz90JjJY8kepzasmHDemqvDrV/gQo9lXOhGWPg7oXYj0p9 +oWbmM8SQIEUDbMMFSoi5qEKPgctZsQoGVHUO7kMpPIZs/oOG5CPV1SK5ON9bHKBPKUnYBnh3aWW 8YhnCN+eiFvy/ym/d7g3Dv0gugLNUdpNkaQsDPIRNAxb7t7QnmrF3A0jP5GgY8j7kNnndH7tl2ap dIWOC5XM/1/vXyMXoZL59vjxmhypZF6OHKlkrlmEcmqhU+yzWoZK8wu5jjvqdPI7Y32pM3Ld476h HMrsWuyph5DnK1FLi/lyydy2yGIWLERk/vXEvxFUMDccXe/t66p9BpVe4K0BmlaAVoA6wKgD7G3d REIhQiFCoZqjUPnJvJLaOO2GtXHmaCn5RI2TPCh5Huv/eEYwHM89nfa+P9yzbNsxSYEFjnsDHBtq 8HiOPkM8oUSM62iFMXmDYL5AKsEapGmEG6GUuF3dDvls7e6C+9igcLjn2ua3MyHU2ul8qcxp9ncT EUr8m4zR/Jj+JB0inL7ZUIfuN2L6YA6mYrJEn5Ma/gEAAP//AwBQSwMEFAAGAAgAAAAhAD43kkJs EQAAsUoAABEAAAB3b3JkL2NvbW1lbnRzLnhtbOSc3W4bSXbH7wPkHWp1JQMSqW/J9FiGVx4nwmYx hqxgkFwEKDaLZEfdXb1d3aK5V/MOudkFktt9sHmS/M6pblKyaK/b41kkXMCQBbK6qrrOOf/zPx+l 7159yDNz76qQ+uLlzuHgYMe4IvGTtJi93PnX27f7Fzsm1LaY2MwX7uXO0oWdV5f/+A/fLUaJz3NX 1MEwRRFGizJ5uTOv63I0HIZk7nIbBnmaVD74aT1g8NBPp2nihgtfTYZHB4cH+ltZ+cSFwHpXtri3 YaedLvdfNltuk27io4ODi2Fu02I1x9Md+dIV7Hfqq9zWYeCrGU9Ud025zw5LW6fjNEvrJfs7OFtN c/9yp6mKUftW+6u3kmdGbGB0n2fdYLb96bHxBEbxv+6J6smLbthkfOSNTxo5c93esHIZG/ZFmKfl +ty+djbOY95t6bMv/OBlF+XhyZP1VsfzJUJ/U9kFsu8WXpRPpttwGJP4UJ7FcxCFWqvRxzMeHnyB RGSK1R6+ZAuP1+x28lD5Fl93NGtNWpSY4C8xqH+qfFOu3qpMf9ls18Xdai5Bgh47OzhTU3/4aqHX BE+w4v3clm7H5Mnoelb4yo4zdsSJG9HIncs1OpnFKJ283Dl+jjUvRrap5x57uzE/plntAYrFaGJr ngWPzvYPjvcPLm4Pz0eHp6ODg3+Xb9MirVObsd2bH3Xekg9By8nNy52Dg9+eHx8dnss4/eiNm9om qx98Izsp31X63/t6mTmG3tvs5c5VBM9b96HeGV5+N1wN07FVfKTa9MiNm7oKjHbtc+1YWxS+Vjhg QJwxTiVr15fvXMWRBVPPnaldlZuff/rvicvcTB/5+af/MYlvsokZO9MENzFz1hjItmrdHFPJFvUn oCcY9PSQTw/xHj0O+fm2HfLoP571PbKjXnp5tG16Kc5+FEqbYIJl5YKr7t3O5bVpigmcRHiHamxa 1GjcnmrlnklFjfkxcVM1T1+Y4GEpVZrUfGNrk9ZmIeq8Z3D0Ji1kpsTtMcaXqvlpSDysZymKL4vC S4KZVj7nueoOh/TK7KYDN5DB/+YbM7f3rvj5pz/XJkJI+kdsJHdm6djVuKnNtWypuDNLBvtFYazh bXxTJZib7OjaLGxRs9yzgTG9lUQh5svA62J0cLJtdvXeJcJzzOngwCzSLDMAsueAAUJTe3O9/2Yw c9XEhX0Uab+24S68MGGugKaaUrboB7oJdDEX4nO2ylJmSAtE5Myk5VYir8Kslowq5D7YvAS9u4ls QMIALtL1+vQtmJoWPvOzJQoVt7sLq0X+KGMa0FpRioVd7qFTf6rcH5q0YhOVs8K1Ua1nr/qqxUkv uD0+3Da1uDa5XYrHWlS+mEU7zJcmzQVJJKCJSIH1iXwTX0zTWVOpwxNpvE1nA3MqY3Jfyfd5ziMq /U+OP3lh0qmMEZnGaW0AWK4RoAgz+saJCYu0TgCEmY6pF97o2oCMhZQVABMKrNPoUk2FR6+7HTGJ oFEKAA7M9ykjqqg4K+0rTKeQfooeJ/OP3k7BD7TMSo7oTlUw40iMHYOSNql7e/aTwz6e/fh421Tt FgWyYQnxqaul4dAF3//QuFAPb1woicHAhsrXPvEZSOJCdBbBuVwQAk/BTzQVR1TVmegFCpjWwWXT F2aBOqE/UZ9COitS4mRxWLKQ6Md6ZaFlr8x1EFAZu8TC1XTElelc5c17dVZm2hSKQjbLlmaSTpU0 1qbyKIK6UGaw4t5KvxAQzMc2kzVxUXtGnOajNdqNZO7eZUG2hTWJKuGYZf0lag1xFKfdH8WO+qjW ydaRxmtzV/gFpygnjomKa1s7KT3TzhsFc6Fyfv6Yc6weNUnVJEQrpkTLOuUhWJ6iXn8xu2hjnL5l 8AiyMMeDQzQp84tN1BXK38U2D4Ka7qNfHu7EmOLXXoXoLAZBv7eFGq/YVBoC5gudqOei/G4ywRu/ +901rLLM/FIkgJ0kEZkzvLatUozNw/VQf+A3qTEsZuLDtTGEFWDzTYUx/RmJmswnCCW3hZ05mRjj JwabQlYEFmRRO4E9pGJRSnQ64w2w0AJ8SAXhcTQSm1X4K8Fy4ZuzYJrymdqrricKVEBuPn4Ms62W +oDyW3EuBV6rgQplCiXQkLsANX3v6n3hyGP/QWCicrlwnOCK4FmXvShaDGsix3IuCxUO51bd7QXj 6mSAemWczZwsmuACuykrOFAKddrkcn5twf+N1etWRK5IqEbcahgSnvioZ3XVBFC3SEhCcLpRrl3k gADN9RvE3MYZU0KXiegHDgF+smcQotAT38zmoncRc+eWQXgeEiB52HTGnEFr7hsC9pPjXti7dQzy Jp3N4VivCTOhdXduibUiQtw6GaU0zN1k6DpsgPJhwQ1WWzcoNcwuzZGKiI3IAyHhd7FKr2iQ4gnN XGHdY7armSMGTEjdlhnmL7/c+zuQx4u7j3NJMCqGHIHITQbmh1LTvNhfkjUTN+IrHdTOIpCy14LM YyBZWfDjj3lj7DT6dHZXODYQFQvtVIfevVLJO2003c+r1UkvtTraPraI+BYaI1JMqIkbIWMZ8aao R+5eCEx6SXsjdpwILJCIERkgR7KN4pVghP2J1Onf+6mLLxb7BWexzJiWiaHQOjLDZuaVlXqTmFsO tzZ+/J8Ssd+rx6MKgulqFIjDvwOmRY41GMvsxVdETj1yN+ejk63L3Txwb610Zq5wpOpWXmtPEimA kJQBIVliEKVLJAYSc3l99f0LkRTZHonSlVTkAtsSTo1dDZGCcYh0JG0NQ+GDXEMU20zSekhGZoaw h0K5ZhWlPQ3cyL0owxsZNyALoDG9APWaeOGHZVssQtTN0jmzj/G5hN7FpPQS+HQBmCZ41iTQEd0L 9EtEtlBKoDkr3kGTFavpehv4aT9YJRO4VTWMzbni25gJDkmVjiW9ErNr+xMkrPEvFFw0TZSLr/5L NUQeEToNRkBfHbTqCjMvzOv3KjR+I4qWwZGhiV+3mWTqRICMLgkCUADPxLABddeFkANyT22qOeBi VVuFEboPMHsBnC5DEIZUmtHTIgw7VVfer/QhrolOReTS/I0QcI0VYs5TfTTvoGr4qnc6+bSfo9g2 PbpUleH4CMyid7b5mMygb8JIPa8mcCQ1gskGSYgAGW2qWcy5v932qvGcbh3LvlV3HBNUHLviP0VX otCmUm/bZsMVkTlr6WoQ9xwz64S8apUPwmdhrg9DKf2+5cRKtXex2IkaHRUhLetQ5bUtDQeWA2gg +WEZTNR71SWzwPg4DXF1aDR1Bk2/Y/6lht5i9TFwF7yAtU+pSxkdgm3PKpsTxkturx0Fe+AtQkP4 vvIsA/P2UU1KXEU0dYsPIXftcxINJJM97idxVa3ZQKJwXFEbLWjAL7H5PeP09TjGhw6ofYv+mvq8 D4U83bY072YPc625lvCQN8hZQy5QIUscRWGnoZnA5yCIiDBvCvK38i2p2imZfvKtBI8daZG0/LTJ RDMgLhk5VFCHSuRfegP5Wa8C0OnZ3wUhkIPEwNQ8FEYwDdhhrMXSN1EtS4m1YmJVSzCggNmF4q28 t4TN++1Qtee6HU7Nzy0ENQCNh4UZZaWWjKIUbsQWuwWDJgWESD4iEIkvU6GJLhZ30IAYHrKHpzsk 6VilcFhUjZUHm7RkuxJpm83whkKpNe9cleEJEBXhWp3SvoIsAwWzdTqjJWUW5y6xNIcrEV1Jw1Al topfv0VC35dEf8Qhf3TVSIpkImd1EvgNW5YE6zj+r6jVn/WqlJ2eb5lN0ruBMdAIoSYhJEtkhTsU aXHE4jXx6IJ/SYbFROcGVMZ4fUV7YdtSuBoTK075UJ2cxadbcbIYjvBmSysAEVm0OBA5cSXdqNKq oRGlUnXWrvykIdUG+yZrBkRny9550rNeNaotFGphJO8Zs51WSyVCVTIiGwLq6Nk0PY2YaYATm6Mq AHGTJpt9JCk9EWRN6684+l7ByunWBivao2ATThHIQ+2BsaYQq5KuJ7SbryC1YJb4v9h4ItxaM8mF X7UtKS3pr//9IpitE8IjUJN0uUbqMXYHgegqldRtIsZAbLKY0+wuKdz+59wjWcghb905i2OmfSdr 6bP2+wEdlLaELRMAKV+z5qbjcziYQoqb4mYAKF8NpDli1Vgjnqfon0k/49LDl/axXoyOti1g38y/ Xs+IVMQDcOaSEXsgJyJ5mCtGIEmwrsaNIUh4rR7/UbSOiEih0aGQJk1mYV+1S+YSMRESPYrqd2P2 VNppyNVImfxhOJzMJXKCWRByA4mvnulK4wbsk1zfX5lqXx0SuDlu0vaJLLXx8sfjSYFQm+VeCrcZ 7XtKKNf9NJ1fI2ckzf/k/fp28Z31iLlRtu0slkVMhRFWK0IofuwadidBlbTVkshFFMEuY1DX1ilX /QWoiDg7qZDLKJ6JEmn5YSqRVczbk5SRgGzzUG2m88xRmd3fPOsN4Oc9InKEuW0JlMs3Xjugcwce w1DWJFGyqEJHNHWl33T9Y3zT12TOe8RYF6Pjb2Uybd/TO2mF+v714fPfHu5IT8X/gfsd3/y+yGYX 8MPvWvzXEqozM8wIQ8PLQjDJeQiC22KWkTMX2+1aCiT5hULUohEE4GKgV6/fD6+gqRNNr+PAA6mz 9dc3r4dUYNqvY6pVfbrU1Bm8lPzbVJCe2p201mun97rGG8Q3LUcy4Y+Si5lizWxxVX5p6zrcLBMy Da+IRSDJv7ZaiWNo88kSsFIowKVw2+/ptyT8uOEY9rUzkkxvWXpa71YraQ5hg3r3Tdh8A9X7umao b7Dwqv1uXRFbnY+JUItwFS82nd8nhCVa9FAgIiftcX74YexX3ZQG7yuAvoYeT/uzXTLnPYKqb4hi fd+kFd83h5jLH+RChFZ7sDY8Mn1NtOQHc6JE7lRakLSoq8a+6txX/hVrpFZgBMTJ7qTaI/Ve4mKB IqnfqqOR315vGmGuYhkmOiiCBOx7TzJEsA1av5hGGzuFUmgvn2LNI1NfqXB/jtAryDvewo6QDq9b N9JmzwkipC2KIiy4Leb9BHQzuwTJiT8iK4zdkXkpjRukOFaGTxIwegt1C2nRtaPKKK5906C/avEd SnWRSMVS06fjL5GQBX82pUOIAEI6/cRBbQDwz1t2r/jxeNvqMpdtCWa+HFcp7YuvgWbtsPmkSJFC MLf/gtFqsKfSw4eLYB/Vhlv2sJI0wBF1YlfgnzWk1kbnjnKMp6Ny56S78eNpN968+ts4iF97lZXv ff9R779UQi4GF3AfTK4/hPWKWY+37s7GLejUNv2qe1ilBEXntPdX0n+kSSgkFXgsvcYj4akkMijv 7/PHFugJ6IingF1o0trthmcdh5TUBNlEabH3k9gBETW35Ujxe4vfJKyihaFVeulZFECbcAmVUok8 Wde0MATJnuVUxGaplMxemR9lg1NS82NpcPBth7E6PDLJpTRAs9+puRJ7kng59mGs7k/ofqXPDnLd 7QW3u4lrfRYrL3pFzCcHW1Yv+0SgNf+NuZVEG/8IUSQbYVEMCi8FgEg5S2+JIGauMZcabT1yUVh9 y9v1rxS8OTu8On+rsWp9efP26vzo6AL1lTsg0q+wDmpE08S5igNu73wMpd3dkliFHgX+Ugq3X7Rb FslX7Qdtx4yGOl2ifFXHQ+vY+VzyMTCzKXdseVKansGfJ0vgN/j36FUij/4IJtsX6t7xwT2kB6/a JyyPq3xeT3uxtpMvzAl/8zf51dj6reCF3LedOFfibJGfYhywQFkd/SzXaXst+Mr1JiFigpR6W4Fm Fzxv/0sqF73Y1MkX5tT+/5z8P0sv8VgunnW9acqPtM6tnQ/SnSyYX3NHnXIrQQytb3p/9KOuFuBc Ii6909UKBfOvJW+tuXrJ7uhllX3+UALuqm1ZkhsK8Ca5xFSqT3ggVNpoJR8LTsnf6XETGmP0MnQu ER2QxSxyNzqn66/WBgAyuShLNSOr2/1Fh79GP9Z2GS7/VwAAAAD//wMAUEsDBBQABgAIAAAAIQAh WqKEIQcAANsdAAAVAAAAd29yZC90aGVtZS90aGVtZTEueG1s7FlPbxtFFL8j8R1Gey+xEydNojpV 7NgNtGmj2C3qcbw79k4zu7OaGSfxDbVHJCREQRyoxI0DAiq1EpfyaQJFUKR+Bd7M7K534nGTlAAV NIfWO/t7b977vT/zZ69cPUoYOiBCUp42g/p7tQCRNOQRTUfN4Ha/e2k1QFLhNMKMp6QZTIgMrm68 +84VvK5ikhAE8qlcx80gVipbX1iQIQxj+R7PSArvhlwkWMGjGC1EAh+C3oQtLNZqKwsJpmmAUpyA 2lvDIQ0J6muVwUahvMPgMVVSD4RM9LRq4kgYbLRf1wg5kW0m0AFmzQDmifhhnxypADEsFbxoBjXz FyxsXFnA67kQU3NkK3Jd85fL5QLR/qKZU4wG5aT1bmPt8lap3wCYmsV1Op12p17qMwAchuCptaWq s9FdrbcKnRWQ/Tmru11brjVcfEX/0ozNa61Wa3ktt8UqNSD7szGDX62tNDYXHbwBWfzyDL7R2my3 Vxy8AVn8ygy+e3ltpeHiDShmNN2fQeuAdru59hIy5GzbC18F+Goth09RkA1ldukphjxV83Itwfe4 6AJAAxlWNEVqkpEhDiGL25jRgaB6ArxOcOWNHQrlzJCeC8lQ0Ew1gw8yDBUx1ffy2Xcvnz1Bx/ef Ht//8fjBg+P7P1hFjtQ2TkdVqRfffPrHo4/Q70++fvHwcz9eVvG/fP/xzz995gdC+UzNef7F41+f Pn7+5Se/ffvQA98UeFCF92lCJLpJDtEeT8Axw4prORmI80n0Y0yrEpvpSOIU61k8+jsqdtA3J5hh D65FXAbvCGgfPuC18T3H4F4sxiqPt+PZ9ThxgDucsxYXXhau67kqNPfH6cg/uRhXcXsYH/jmbuPU iW9nnEHfpD6V7Zg4Zu4ynCo8IilRSL/j+4R4+LpLqcPrDg0Fl3yo0F2KWph6KenTgZNNU6FtmkBc Jj4DId4ONzt3UIszn9db5MBFQlVg5jG+T5hD4zU8VjjxqezjhFUJv4FV7DOyNxFhFdeRCiI9Ioyj TkSk9MncEuBvJejXoXX4w77DJomLFIru+3TewJxXkVt8vx3jJPNhezSNq9j35T6kKEa7XPngO9yt EP0MccDp3HDfocQJ9+nd4DYdOSZNE0S/GQtPLK8R7uRvb8KGmJhWA03d6dUJTV/VuBPo27njF9e4 oVU+/+qRx+43tWVvAgm+mtk+0ajn4U625zYXEX3zu/MWHqe7BApidol625zfNufgP9+c59Xzxbfk aReGBq23THajbbbdydxd95Ay1lMTRm5Is/GWsPZEXRjUcubEScpTWBbDT13JMIGDGwlsZJDg6kOq 4l6MM9i01wOtZCRz1SOJMi7hsGiGvbo1Hjb+yh41l/UhxHYOidUOj+zwkh4uzhqlGmPVyBxoi4mW tIKzTrZ0OVcKvr3OZHVt1JlnqxvTTFN0Zitd1hSbQzlQXroGgyWbsKlBsBUCllfgzK+nhsMOZiTS vNsYFWExUfh7QpR7bR2JcURsiJzhCpt1E7sihWb80+7ZHDkfmyVrQNrpRpi0mJ8/ZyS5UDAlGQRP VhNLq7XFUnTYDNaWF5cDFOKsGQzhmAs/kwyCJvU2ELMR3BWFStisPbUWTZFOPV7zZ1Udbi7mFIxT xpmQagvL2MbQvMpDxVI9k7V/cbmhk+1iHPA0k7NZsbQKKfKvWQGhdkNLhkMSqmqwKyOaO/uYd0I+ VkT04ugQDdhY7GEIP3Cq/YmohNsKU9D6Aa7WNNvmldtb805TvdAyODuOWRbjvFvqq5mi4izc9JPS BvNUMQ9889punDu/K7riL8qVahr/z1zRywFcHixFOgIh3OwKjHSlNAMuVMyhC2UxDbsC1n3TOyBb 4HoWXgP5cL9s/hfkQP9va87qMGUNZ0C1R0dIUFhOVCwI2YW2ZLLvFGX1fOmxKlmuyGRUxVyZWbMH 5ICwvu6BK7oHByiGVDfdJG8DBncy/9znvIIGI71Hqdab08nKpdPWwD+9cbHFDE6d2Evo/C34L00s V/fp6mfljXixRlYd0S+mu6RGURXO4re2lk/1miacZQGurLW2Y814vLhcGAdRnPUYBsv9TAZXQEj/ A+sfFSGzHyv0gtrne9BbEXx7sPwhyOpLuqtBBukGaX8NYN9jB20yaVWW2nzno1krFusL3qiW854g W1t2lnifk+xyE+VO59TiRZKdM+xwbcfmUg2RPVmiMDQsziEmMOYrV/VDFB/cg0BvwZX/mNlPUzKD J1MH2a4w2TXg0ST/yaRdcG3W6TOMRrJ0jwwRjY6K80fJhC0h+3mk2CIbtBbTiVYKLvkODa5gjtei drUshRdPFy4lzMzQskthc5fmUwAfx/LGrY92gLdN1nqti6tgiqV/hbIzGO+nzHvyOStl9qD4ykC9 BmXq6NWU5UwBebOJB583BYajV8/0X1h0bKablN34EwAA//8DAFBLAwQKAAAAAAAAACEAIib2Gzwi AQA8IgEAFwAAAGRvY1Byb3BzL3RodW1ibmFpbC5qcGVn/9j/4AAQSkZJRgABAQEASABIAAD/4ge4 SUNDX1BST0ZJTEUAAQEAAAeoYXBwbAIgAABtbnRyUkdCIFhZWiAH2QACABkACwAaAAthY3NwQVBQ TAAAAABhcHBsAAAAAAAAAAAAAAAAAAAAAAAA9tYAAQAAAADTLWFwcGwAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtkZXNjAAABCAAAAG9kc2NtAAABeAAABWxj cHJ0AAAG5AAAADh3dHB0AAAHHAAAABRyWFlaAAAHMAAAABRnWFlaAAAHRAAAABRiWFlaAAAHWAAA ABRyVFJDAAAHbAAAAA5jaGFkAAAHfAAAACxiVFJDAAAHbAAAAA5nVFJDAAAHbAAAAA5kZXNjAAAA AAAAABRHZW5lcmljIFJHQiBQcm9maWxlAAAAAAAAAAAAAAAUR2VuZXJpYyBSR0IgUHJvZmlsZQAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbWx1YwAAAAAA AAAeAAAADHNrU0sAAAAoAAABeGhySFIAAAAoAAABoGNhRVMAAAAkAAAByHB0QlIAAAAmAAAB7HVr VUEAAAAqAAACEmZyRlUAAAAoAAACPHpoVFcAAAAWAAACZGl0SVQAAAAoAAACem5iTk8AAAAmAAAC omtvS1IAAAAWAAACyGNzQ1oAAAAiAAAC3mhlSUwAAAAeAAADAGRlREUAAAAsAAADHmh1SFUAAAAo AAADSnN2U0UAAAAmAAAConpoQ04AAAAWAAADcmphSlAAAAAaAAADiHJvUk8AAAAkAAADomVsR1IA AAAiAAADxnB0UE8AAAAmAAAD6G5sTkwAAAAoAAAEDmVzRVMAAAAmAAAD6HRoVEgAAAAkAAAENnRy VFIAAAAiAAAEWmZpRkkAAAAoAAAEfHBsUEwAAAAsAAAEpHJ1UlUAAAAiAAAE0GFyRUcAAAAmAAAE 8mVuVVMAAAAmAAAFGGRhREsAAAAuAAAFPgBWAWEAZQBvAGIAZQBjAG4A/QAgAFIARwBCACAAcABy AG8AZgBpAGwARwBlAG4AZQByAGkBDQBrAGkAIABSAEcAQgAgAHAAcgBvAGYAaQBsAFAAZQByAGYA aQBsACAAUgBHAEIAIABnAGUAbgDoAHIAaQBjAFAAZQByAGYAaQBsACAAUgBHAEIAIABHAGUAbgDp AHIAaQBjAG8EFwQwBDMEMAQ7BEwEPQQ4BDkAIAQ/BEAEPgREBDAEOQQ7ACAAUgBHAEIAUAByAG8A ZgBpAGwAIABnAOkAbgDpAHIAaQBxAHUAZQAgAFIAVgBCkBp1KAAgAFIARwBCACCCcl9pY8+P8ABQ AHIAbwBmAGkAbABvACAAUgBHAEIAIABnAGUAbgBlAHIAaQBjAG8ARwBlAG4AZQByAGkAcwBrACAA UgBHAEIALQBwAHIAbwBmAGkAbMd8vBgAIABSAEcAQgAg1QS4XNMMx3wATwBiAGUAYwBuAP0AIABS AEcAQgAgAHAAcgBvAGYAaQBsBeQF6AXVBeQF2QXcACAAUgBHAEIAIAXbBdwF3AXZAEEAbABsAGcA ZQBtAGUAaQBuAGUAcwAgAFIARwBCAC0AUAByAG8AZgBpAGwAwQBsAHQAYQBsAOEAbgBvAHMAIABS AEcAQgAgAHAAcgBvAGYAaQBsZm6QGgAgAFIARwBCACBjz4/wZYdO9k4AgiwAIABSAEcAQgAgMNcw 7TDVMKEwpDDrAFAAcgBvAGYAaQBsACAAUgBHAEIAIABnAGUAbgBlAHIAaQBjA5MDtQO9A7kDugPM ACADwAPBA78DxgOvA7sAIABSAEcAQgBQAGUAcgBmAGkAbAAgAFIARwBCACAAZwBlAG4A6QByAGkA YwBvAEEAbABnAGUAbQBlAGUAbgAgAFIARwBCAC0AcAByAG8AZgBpAGUAbA5CDhsOIw5EDh8OJQ5M ACAAUgBHAEIAIA4XDjEOSA4nDkQOGwBHAGUAbgBlAGwAIABSAEcAQgAgAFAAcgBvAGYAaQBsAGkA WQBsAGUAaQBuAGUAbgAgAFIARwBCAC0AcAByAG8AZgBpAGkAbABpAFUAbgBpAHcAZQByAHMAYQBs AG4AeQAgAHAAcgBvAGYAaQBsACAAUgBHAEIEHgQxBEkEOAQ5ACAEPwRABD4ERAQ4BDsETAAgAFIA RwBCBkUGRAZBACAGKgY5BjEGSgZBACAAUgBHAEIAIAYnBkQGOQYnBkUARwBlAG4AZQByAGkAYwAg AFIARwBCACAAUAByAG8AZgBpAGwAZQBHAGUAbgBlAHIAZQBsACAAUgBHAEIALQBiAGUAcwBrAHIA aQB2AGUAbABzAGV0ZXh0AAAAAENvcHlyaWdodCAyMDA3IEFwcGxlIEluYy4sIGFsbCByaWdodHMg cmVzZXJ2ZWQuAFhZWiAAAAAAAADzUgABAAAAARbPWFlaIAAAAAAAAHRNAAA97gAAA9BYWVogAAAA AAAAWnUAAKxzAAAXNFhZWiAAAAAAAAAoGgAAFZ8AALg2Y3VydgAAAAAAAAABAc0AAHNmMzIAAAAA AAEMQgAABd7///MmAAAHkgAA/ZH///ui///9owAAA9wAAMBs/+EAdEV4aWYAAE1NACoAAAAIAAQB GgAFAAAAAQAAAD4BGwAFAAAAAQAAAEYBKAADAAAAAQACAACHaQAEAAAAAQAAAE4AAAAAAAAASAAA AAEAAABIAAAAAQACoAIABAAAAAEAAAGLoAMABAAAAAEAAAIAAAAAAP/bAEMAAQEBAQEBAQEBAQEB AQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAf/bAEMB AQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB AQEBAQEBAf/AABEIAgABiwMBEQACEQEDEQH/xAAfAAABBQEBAQEBAQAAAAAAAAAAAQIDBAUGBwgJ Cgv/xAC1EAACAQMDAgQDBQUEBAAAAX0BAgMABBEFEiExQQYTUWEHInEUMoGRoQgjQrHBFVLR8CQz YnKCCQoWFxgZGiUmJygpKjQ1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoOE hYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4eLj5OXm 5+jp6vHy8/T19vf4+fr/xAAfAQADAQEBAQEBAQEBAAAAAAAAAQIDBAUGBwgJCgv/xAC1EQACAQIE BAMEBwUEBAABAncAAQIDEQQFITEGEkFRB2FxEyIygQgUQpGhscEJIzNS8BVictEKFiQ04SXxFxgZ GiYnKCkqNTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqCg4SFhoeIiYqSk5SV lpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2dri4+Tl5ufo6ery8/T19vf4 +fr/2gAMAwEAAhEDEQA/APxU/wCCCf8AwQd+H3/BY7wT+0h4r8a/tEeMvgfP8CvFXw68PWFn4X8C aJ4xi8QxeOdJ8V6lNc3cura/or2Mmnv4cSKKOFLhZ1unZ2jMYDgH9AX/ABA+fAj/AKP9+Lf/AIZH wd/83VAB/wAQPnwI/wCj/fi3/wCGR8Hf/N1QAf8AED58CP8Ao/34t/8AhkfB3/zdUAH/ABA+fAj/ AKP9+Lf/AIZHwd/83VAB/wAQPnwI/wCj/fi3/wCGR8Hf/N1QAf8AED58CP8Ao/34t/8AhkfB3/zd UAH/ABA+fAj/AKP9+Lf/AIZHwd/83VAB/wAQPnwI/wCj/fi3/wCGR8Hf/N1QAf8AED58CP8Ao/34 t/8AhkfB3/zdUAH/ABA+fAj/AKP9+Lf/AIZHwd/83VAB/wAQPnwI/wCj/fi3/wCGR8Hf/N1QAf8A ED58CP8Ao/34t/8AhkfB3/zdUAH/ABA+fAj/AKP9+Lf/AIZHwd/83VAB/wAQPnwI/wCj/fi3/wCG R8Hf/N1QAf8AED58CP8Ao/34t/8AhkfB3/zdUAH/ABA+fAj/AKP9+Lf/AIZHwd/83VAB/wAQPnwI /wCj/fi3/wCGR8Hf/N1QAf8AED58CP8Ao/34t/8AhkfB3/zdUAH/ABA+fAj/AKP9+Lf/AIZHwd/8 3VAB/wAQPnwI/wCj/fi3/wCGR8Hf/N1QAf8AED58CP8Ao/34t/8AhkfB3/zdUAH/ABA+fAj/AKP9 +Lf/AIZHwd/83VAB/wAQPnwI/wCj/fi3/wCGR8Hf/N1QAf8AED58CP8Ao/34t/8AhkfB3/zdUAH/ ABA+fAj/AKP9+Lf/AIZHwd/83VAB/wAQPnwI/wCj/fi3/wCGR8Hf/N1QAf8AED58CP8Ao/34t/8A hkfB3/zdUAH/ABA+fAj/AKP9+Lf/AIZHwd/83VAB/wAQPnwI/wCj/fi3/wCGR8Hf/N1QAf8AED58 CP8Ao/34t/8AhkfB3/zdUAH/ABA+fAj/AKP9+Lf/AIZHwd/83VAB/wAQPnwI/wCj/fi3/wCGR8Hf /N1QAf8AED58CP8Ao/34t/8AhkfB3/zdUAH/ABA+fAj/AKP9+Lf/AIZHwd/83VAB/wAQPnwI/wCj /fi3/wCGR8Hf/N1QAf8AED58CP8Ao/34t/8AhkfB3/zdUAH/ABA+fAj/AKP9+Lf/AIZHwd/83VAB /wAQPnwI/wCj/fi3/wCGR8Hf/N1QAf8AED58CP8Ao/34t/8AhkfB3/zdUAH/ABA+fAj/AKP9+Lf/ AIZHwd/83VAB/wAQPnwI/wCj/fi3/wCGR8Hf/N1QAf8AED58CP8Ao/34t/8AhkfB3/zdUAH/ABA+ fAj/AKP9+Lf/AIZHwd/83VAB/wAQPnwI/wCj/fi3/wCGR8Hf/N1QAf8AED58CP8Ao/34t/8AhkfB 3/zdUAH/ABA+fAj/AKP9+Lf/AIZHwd/83VAB/wAQPnwI/wCj/fi3/wCGR8Hf/N1QB49+0P8A8GZf wS+CPwA+OXxosv25/ipr958Ivg98TPifaaFdfBvwlZW2tXXgHwVrfiuDSbm9i8azy2kGpS6SlnNd RQTSW8czSpFIyBGAP4CaAP8ARH/4MeP+SO/8FCv+yl/s/f8AqLfFCgD+7GgAoAKACgAoAKACgAoA KACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAo AKACgAoAKACgAoA+S/2+v+TFP21P+zS/2jf/AFT3jKgD/C7oA/0R/wDgx4/5I7/wUK/7KX+z9/6i 3xQoA/uxoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKAC gAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKAPkv9vr/AJMU/bU/7NL/AGjf/VPeMqAP8Lug D/RH/wCDHj/kjv8AwUK/7KX+z9/6i3xQoA/uxoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKA CgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKAPkv9vr /kxT9tT/ALNL/aN/9U94yoA/wu6AP9Ef/gx4/wCSO/8ABQr/ALKX+z9/6i3xQoA/uxoAKACgAoAK ACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoA KACgAoAKACgAoAKACgAoAKAPkv8Ab6/5MU/bU/7NL/aN/wDVPeMqAP8AC7oA/wBEf/gx4/5I7/wU K/7KX+z9/wCot8UKAP7saACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoA KACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgD5L/b6/5MU/bU/7NL/aN/8A VPeMqAP8LugD/RH/AODHj/kjv/BQr/spf7P3/qLfFCgD+7GgAoAKACgAoAKACgAoAKACgAoAKACg AoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKAC gAoA+S/2+v8AkxT9tT/s0v8AaN/9U94yoA/wu6AP9Ef/AIMeP+SO/wDBQr/spf7P3/qLfFCgD+7G gAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKA CgAoAKACgAoAKACgAoAKACgAoAKACgAoA+S/2+v+TFP21P8As0v9o3/1T3jKgD/C7oA/0R/+DHj/ AJI7/wAFCv8Aspf7P3/qLfFCgD+7GgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAK ACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoA+S/wBvr/kxT9tT /s0v9o3/ANU94yoA/wALugD/AER/+DHj/kjv/BQr/spf7P3/AKi3xQoA/uxoAKACgAoAKACgD88f j94K/bV8Q/HS81L4N/ETwVonwiufAvg/w1qPw5u/HV54e8Ya1/Zvi5/F/jTxn4c1SLwR4hPgnxRr ujW7fCTS7+CPUre207WJvFz3lhqukabBAAdn+zV8Mv2mPA/xR+Kuq/GPx/qfi74d6tpnhOy+G+l6 p8SI/Gd7oL6X4a8MWWtHVLeL4beC4LjV9T1208Ratd67aHSbeaPUIYx4ecXMf9igHifgP4Q/8FL/ AAXqsr618efhv470e48XJFbw3lxOLy28BaTquiSaa2rtrPw61JbvxDq/heXxvp+snw9LoDP40k+H uuNqM3hvSPEuhaqAacXw1/4KIxxafqN78VPDGs3+s/s2al4O8c6QPE+l6DJa/tBTw/ESXQ/G/hC7 0v4TnQ9I8F6Hd6toVuU0/wAP6P4z1mJtEuNd1vVY/AZ03xQAVPikP+CjumaB8UdX+Gmu+ANQv4vC nhhfBnw90zVPDPiHxT4d8TQ+FfhtZT2Ona14h+HsNrdNrfjaf4l6vrOsfECXWbSTwfp2hQaVB4e1 PUbvV9IAPcv2hdA/aJvtP+B954A8feH/AA2NK1fQ7X4lW+reNE+Ho17xJfa94BOn3sOp2XhjX4df sVsLDx/oLfD6JdMs/Eur+L/D90ZLmLQVsJgDy618If8ABSVPD3g7b8UvhfP4lfwZrEvjCXWYvDc2 lQeO/snjKK3trSPQ/hLps2p+Hb25/wCFcXPha9tpNGu/Dez4gN4vsfHUV14XstPAOj/Z2l/bsuPj Z4yt/j7J4YtPhRomlLFYx2snh7UYda1LWdP0PUNDbwZqmh+CvCurX8/h2aPxBp3jfV/EjaZYXF7N aWXh/wAHxwRrr0gB990AFABQAUAFABQAUAFABQAUAFABQAUAV7m8tLNBJeXVvaIxZVe5nigRmVHl YBpWUErGjyMAchEdz8qkgASe8tLaWzgubq2t59RuHtLCGeeKKW+u47S5v5LazjkZXurhLGyvL14Y Q8i2lpc3LKIYJXUAs0AVby+stOt2u9QvLWxtUeCJ7m8uIrW3WS5njtraNpp3SNXuLmaG3gQtulnl jijDSOqkAsgg8gg8kcHPIJBH1BBB9CCDzQAZGcZGSCQM8kDGTjrgEjJ9x60AfPf7TOj/ABX8YfCP xX4T+AniW08P/FS4uvCzWd//AMJCmg3WnaQPEml3WulryLTdUvbY3+gW+pWcaWp0W+vEmkh07xJo F40Oq2oB3Pw8j+J1v4dfRfiBa+G4NX0bR/C+l6Z4n0bxJqfid/FV/H4J0FvE+v6zp2o+GPC76M8P jqTxDYafYxXusNrOhWGna/d3ejX2sXHh7SAD4B8GfDj/AIKb+G9T8PQXnxQ+Fl94ajvvEVz43Gr6 1eeL/E3iXVD4F8KabBqeiavrHgSw0/wd4c1nxrp3irX/AA54U0rRWtvBrazYLqcGu6Ok3hy0AMHx P4K/4KarfeErzTPjp8JLXW/D/wALy+vR65rejWmnT+L9ZfQn8X3N34S0b4YaVpmtyaY1h4gtPht4 k1e5ttA0HT9S8PjX/C+r6vaeJtZ10A+pf2bLX9ri28Z/EVf2jfHXwq8XeGB4c+GsXgiz+H0VvaX+ m+I4dAcePtR1Kxj0S1u4NO8QauyX2lx6hrWom3jUwWEENoPNlAPsOgAoAKACgAoAKACgAoAKAPkv 9vr/AJMU/bU/7NL/AGjf/VPeMqAP8LugD/RH/wCDHj/kjv8AwUK/7KX+z9/6i3xQoA/uxoAKACgA oAKACgD82f2qvAvwM8R/GW91P4n/ABnh+E+oJ8DNAs9WubvwNeaLYxeAtP8Aj74C8Qz3N98dTDpV hp1v4m8UaZpHw6uPBK+LbO+vrPxbcpbadPPrEDSAHgWvfBL9mvUtI8VWI/4KC6n4WTTviF+z/N8R fEdh8ULHw5qGvfEvRf2e/DvhXw2+veJR4qsHu08e+AINH+K2jQ6Je29rp3i+1uPGLX+sWug/2doo BP4u+H37MMFto2syft03Oiave/tAfEfR4PE/w98dhfEi+Ovip8VPh7fP4XCW3i/W4dKk+F1pMfh1 Z6pNpn9h+BPBHjeR9X07TltY7yYA1vgr8KP2bPDXiz4L+H/A/wC2v4m+IXj74g/D74j/AAt0PWvC /jz/AISrxZ4o0Cy1bxz8SWv9H1eLW/FMPgJvCl5pnjOGPUry2ubHUJ9Km0KwbT7mGSynAF+KfwE/ Zn0D4hfE2/8AGX7X+neGfGF94h+B+m+L7bWdR8NweNIJNSv/AIB6FoWh/FTX/Duo+HfF/iZPiXJ8 JPCOmW76/faVY6Ro/wAQfH32e2Ww8ZtdWwBIvwU/Zw0n4v2X/CW/tk6f4y1OH9sqb4i6L8MvGur6 Prdt4V+J/hf4bfEG2vfhXplrb65bnwrqGn+AfE8GoQyPb2NzFeeDfDWpRWM+pSXsepAH1p+zRrf7 P/wT+H3gH4D+F/2g/AvjaO0s/Ei/D+G48W6DN4gvfCfhezfVL5G2a1qFzrJ8P6PBPqWs66zxW80K 3l/Da6dpkMdpaAH0J4o+L3w58IfDC4+M+qeJYb74YQeH9O8WL4v8J2GrePNPvvDGrx2k+m+INHh8 D2HiLUNd0e9tb61v4NR0Wzv7VtNmGp+aLBJLlQDzrxH+1v8As6+GI1F58UvDuoaifiZ4Z+Dkvh/w /LP4h8UWXxP8XXOp2ui+CtV8N6PDea1o2uyPofiB7yz1eysX01PD2vDUPs8uk30cIBdvP2r/ANmS wgS6vPj/APCC3t5JPEUccz/EHwxsk/4RK1sL/wATyIRqR32+g6fqulajqt0ubaz03VdM1CaVbPUL OecAzbj9sf8AZTt9Ak8UH9ob4RXGgR+G18Ytqmn+OdB1O3bwofF9v4AbxFENOvLqWfRovGt1beGb nUYY5La11ieK0uZIpJFyAddqf7QvwV0K91yz8QfEvwf4dXw9e+EtN1G/1/X9L0fSv7R8c6Hc+JvD Vja6lf3UFrdXGoeHbSfXgkMjCLR4pdTlZbGC4niAI9N/aP8AgFrN3pun6P8AGX4a6tqGs+MNX+Hu j2GneM9BvLzVvHug2Y1DWPBem28F88l54osLRkluNDgD6iu9E8gyOqkA7nwB468O/Ezwb4e8eeE5 7y58O+J7BdR0yTUNM1DRtQERkkhkhvtK1W3tNR0+8triGa3urS8toZ4J4nR04yQDsKACgAoAKACg AoAKAPnf9pP9nfQ/2kvCGh+Etb1ubQI9F17VtUW9h0PRPEDXGn+J/h745+FnivS/sWvW1zaQTaj4 L+IniOHTdUiX7Ro2tjS9WEV9BZT6begHh/hv9htvDmsadcr8afGereH4fiZ40+Ieq+HdYtry7bUb b4geDPF3gLxR4Vsdb/4SVNT8P6Ze6B4ukMM+lNHNp+p6B4a1DTI7N9MeO5APO/8Ah2uLdJTYftSf tA/arv4TeL/hrqNxqfirVLyK61XxfJ4sF149hsNO1nRbCy122t/FFo0Nvb24t4tW8FeBNdspLDUv D/m3YB2OrfsG3Vx4i8beIdA+PPjjw2vivQvg5o+k+Gk099b8I+DJfhDrXgPxHaah4f0fXPEN5PBL rGt+BRcywJqMMMMHiXxHDfDWbi7gvbYATxT+wRNrNzIPDP7QvxS+HemSftF337SBs/CDRW19J4o1 rU31zXdJuNauL+e9m0a71S51K3stOURaLaeH9Uu9LvNE1W/W11u2ANX4FfsK2fwO8TfDHxfB8afi V4/8QfDzT/iLoF1qnxB1LUvEd54l8N/ECTwxdyafM+o67dQ6Ve2OreGE1m41C0t5YdS1PXfEl2un afcajFLZgGL8Xf8Agn1o/wAUvjR8Tvjba/FrxV4M8Q/Erwt4V8J3NloOmJBb2eneHNZ+GGrTxXd9 p+saTqepxaqvwwsrGRobrStStrLWtVsxqlxpxisFAPD4v2BfAfxq8RfE7V/Bn7Vn7Rllp+gfGrXL S80WLUvHWj2vgbxb4W+1hvCfhqTxFd6Za6noPhGPXrXRPDuraPY32kS+F9G8OeH5tU19tA+3MAaG k/s7/C39mD4mfA2w8eftifGG+8ZWniDx9468NReO9R8Wa9H4k0WCLwXP46vvGWsJeX3hnw9osei+ HpU8VeJPEH9i6A+oeMvFOtwQ6Ze6vcJQBW/aP+Hv7FXxv1z4k/GnWPjX8L9C0/xZ+zlb6PrnxH0/ w14L8YWOkaBd/E6x8BL44bxpcveu1697p118LItFPlx6Pei5v7aTT/EumRXNuAfU/wCzL4A+E3gL 4lfGC18BfFf4f+O/FNx4R+BGmeLvC3hbw/4D0PX/AAjpfg74fr4T8Ialro8HtHcvYeL9N0y41PR7 a9srTStPWG5sfD0UdjbtDGAfadABQAUAFABQAUAFABQAUAfJf7fX/Jin7an/AGaX+0b/AOqe8ZUA f4XdAH+iP/wY8f8AJHf+ChX/AGUv9n7/ANRb4oUAf3Y0AFABQAUAFABQB+T/AO1N8f8A9njwT+0l 4m0D4x/CbxN4kuPA3wT8CeLNR8ZeG/ivf2mqT6Bc/Eqbxd4c8L+GfhHB4r8Mr4n8W2Pjj4dWHieG x0H7d4416HT7Cy0HTPELtHoc4B5BbfFz/gm/8SruHwBH8LJbubwd4n/Zr0oaR4s+KOit4f8AD8Hi nSfhT8GvBPi+3fw38Z/F0Fle6f8ADH4meDvDkmq3NnY6l8WPCkE1lZan418J+GfEeseHgB3jrx3/ AME2tO1DSbbx98CPiGtr4u+KHxU8Bxalca7da34a1u/+EfxX8FeE/H1x4ol0L4z6rYyeALb4rP4D aLwv4wt44tVvodF8TReDZdLsV1a3APcP2UJP2EPGXij4E6/8Dfhh4g8EeLdX8HfGDx18PLHWvEWq aZqWm6f8IPFs3wm8YXPirwp/wsrWV13XbSf48a1Y+H9V1TSfE7aN4b8WanYvrHh03un6VcgHmfx8 +P37GPwv+PX7REvxU+DPiq48RSL8PdD8W/ELwL4q8R6l4s8X6/4bt/hR430aw0Ww0LxHo1l8O38C rJ4B1u41KPxZ4T8Rw3+m6Te3GjiPxP4Vv/FABy3gT9oX/gnIPFV5c+CPhf4t0aTWf2g5P+E/8aN8 RdN0uz8M/EXStO+P9pp+veKLmH44XV/ZN4obwj8W/D8fwsa3t/F/ivTNWtBqPw01LRvEXhZNUAPH bT9sr/gmZ8PrPQviL4D+APxSbXfB/wAPPiB4y8Han4r8S3Gi6b4e07UvBGuQ3mmapqPiX4u67f8A h2TxX4NtTpnh/UD4b1TT9E0/VNLtnu/DsNpff2QAfUEv7en7Dfjr4V+JP2f4PCnxT1v4ceCvBPhn wde+H9O1ew0yx1DStH8Z/DT4XWPg/QfirF8XdLtvFb6bqXjjwV9t8V6V8QNR8KeJdDnvryz8beJQ L+GYA9p+Oeh/s6fAO3+E3xF1b4fRaf4t+Kfx9+FNjpej+Jfj34l8CeKJ/iFrXiDx94js5NKlTxZr Phvxb4j8M3vxL+JniXWvCf8AbVr4R1fSbzxVc3uuXOn2OmxTAHdwfs+/sd6f4M+IHjPwnpHhubw/ 4R8L/GP4deL9RtPjH400rwppmjadoVj4D+Jvw88Va3D4xm0nw/4f8Jab8OtI8H3ek6hEbD4WWvhC 3s9E0/QDoQghAPza8F+O/wBiUaf4n8f+Fv2XfDdtdXH7IPxL+MdzrOlftB+I59I1rwPo+rXiajZa XqwuFbTPDHiWDwdpOoaL8TLjStE8QaJ4zg0XwxrHh3wz4w0adNLAPtTwLoP7K37Qfx5/aC+E978N vEN9rvwwsPhTBrGueI/if8U9WPjjR9R+Ftzplje6TbN4gm0y38JP4L+IGq+CdWuP7bab4nWWveLo /EWj6roV9NqGsgH0GP2H/wBlweJfD3jAfC2IeJPCfiNfFvhzVR4v8fCbR/EMep2WsxajZxDxULZD Dqmm2N7DamFrKGa1iMVuijaQD3X4cfDjwh8JfB+leAvAen3uleFdEN5/ZenX+v8AiLxNPai+vbjU LlBq3inVda1maJru6nkjin1CWK3V/Jt0ihVI1AO5oAKACgAoAKACgAoAKACgD4k+Of7aWifBb4o6 18L5fCEOt3uh/BjxF8XLrV7rxppegWPm6N4a+JPiyy8Kzq+n6r/Y1zq2i/CzxReQ6v4mm0Oyngt5 5tCi8Qpo3iY6GAeJeOf+CnXhbwVZeIbl/AGhapd+HNO8OfbNDt/jT4HTxPLrGs/DzwL8VL65sfCE Vpd+Mda+H1l4K8bNqOm/EHw34e12HWW0LUZ5NC0vRJ7HW7gA+kv2kP2s9D/Z3s/hPd3PhHUfGknx V8QW2mWdho+s6ZZanZaU8uiW91qtlplys+pa5Ot54k0TT7SC3s7XRl1DU7GHxD4k8NQXtndXAB8x 2v8AwWI/ZAvrfS9Ssv8AhaFzoWs6bqWpWHiY+D9OtPDrppWlX15eQTarqHiW0t7ZoNZ0fxD4Tu7y 4Mek6XrPh7U9T1nUtO8FyaX4s1IA6bQP+CnHwivPhtqPxP8AEPh++stM074d+D/iAPD3hDxX4L+I XinV4vGfxt8a/A/T9P8ADlrpGtWem66lv4h8KWVzPq1pqg0y7TxBaxaNcarHEl3dgFz9mDVf2aPj 94z+L+seD/h94s8O+KtK+Img/EzVNSvPih4m1rR/GCr8R/Ht14I8d+HIdM8eXtro2n6r4n8GeIbn xL4Kk0TQtIfULVdKvbDxV4ch0nUroA8Z+Jfxt+B37QPjHwjpfj/9nzwV8TfHMV58efA3hfwtrv7R vhjSfDXiWw8F/ETVvgvrml+GtN1rUtA8GfETxnrWv20k914ZutLute8FeE9f0PVV1Bb/AMTWGj3Q BoaL/wAM7aP+xTH+09H+zdrNjpuq/DGTwb4N+D+g/GzxR4tfx14f+KHxDsLzwv4a8K6rofiTUNHv PFvxD8da/o97o2sNpMPjTTvFdxZWrajYTabb3NuAdr+xJ+0L+zd8Xvjt8ddK+C/g3XtK1+Xwl8Nf FOoePNU+JHiPxxF8RvCaeGtD07w9fXWk6/ruqS+Fde0PT73SdJ1i1eFtQudRS+TWNQudYs9RVQD9 QaACgAoAKACgAoAKACgAoA+S/wBvr/kxT9tT/s0v9o3/ANU94yoA/wALugD/AER/+DHj/kjv/BQr /spf7P3/AKi3xQoA/uxoAKACgAoAKACgDxLxZ+zR+zj498aS/Ejx1+z/APBLxp8Q57DS9Km8e+LP hT4E8R+NJtL0PUbTV9F02XxTrGg3muSWGj6tYWOqaXZvfG30/UbK0vbSOG5toZUAPP8ATf2F/wBj jTLXxPYD9mT4Iappni/xJ4V8V6zpHiT4b+FfFWjDWPAehN4Z8BnSNJ8SaZqmneH9N8CaFLeab4I0 PQbbTtF8IQaprI8O6fpra1qrXgB21v8Astfsx2dtp1lafs5/Ai1s9I8b618TdJtLf4RfD+C20v4k eJLJNN8RfEHToI/DyxWXjfXtOjjsNa8V2yx69qlkiWt9fzwKsYAOu8EfBr4QfDOz8Mad8N/hT8Nv h/p/gjRNe8NeDLHwR4G8MeFLPwj4c8VazZeIvFHh/wAMWug6XYQaBoniTxBpmm67r2laUlpY6xrO n2WqahBcXtrBPGAc34m/Zo/Zx8aX3xB1Txj+z/8ABLxZqfxag8MWvxU1HxN8KvAmvX3xMtfBM9pc +DLb4g3eqaDdXHjODwjc6fYXHhiHxHJqUegT2VpLpS2kltCyAGV4a/ZS/Zv8KafqWmaZ8Ffh1dW2 rfFuX486g/iDwvpfiq9uPjKdTuNWsviU2o+JbfVtQHjDQru5kTwrri3IvvCWnpbaT4am0rS7O0s4 ADMH7GP7Hos208fsofs1CweGa3axHwK+F4s2gudY1HxDcQNbf8It5LQz6/rGra5NGUKS6xqmo6m4 a9vbmeUAt6n+x/8Asla1p/8AZOs/sufs66tpf/CHeHvh3/Zup/BL4aX+n/8ACv8Awjq8PiDwn4F+ x3XhmW3/AOEO8Ma9bW+t+HvDHl/2JourwQ6lptjbXkSTKAel+NvhP8LPiXD4VtviN8NPAHj+28C+ JNK8ZeCbfxt4N8O+KofB3i/QlkTRPFfhWLXdOv08PeJNGSaVNK13SFtNU09ZZFtLqEOwIBNpHwz+ H+h+E9d8Cad4P0FPBnijUPHOqeJvDF1p8Oo6L4ivvibr2ueJ/iDNrthqS3cGrjxhrviXXtR1+HUF uINRl1W8jnjaCUxAA4OH9l39me38PN4Rt/2dvgVB4UfwLN8L38MQ/CPwBF4eb4Z3Gvy+K7j4dtoq eH101vAs/imebxLN4SNsdAl1+aXWX09tRke5IB3nhT4X/DTwHqWq6x4H+Hngbwbq+uaP4T8Pa3qv hTwloHh3UtY0DwFps2jeBtD1W+0jT7O61DR/Bej3NxpPhPTLuWay8OabcTWOjwWdrLJEwB3NABQA UAFABQAUAFABQAUAFABQB5H4x/Z/+A/xE8Q6n4t+IHwT+EfjnxXrXga9+GGs+JvGPw38G+JvEOrf DTUbx9Q1D4eanrWtaNe6lf8Aga/v5JL698JXVzLoF1eSPcz6fJM7OQDl9V/ZI/ZT121isdb/AGZP 2e9YsoND8E+GILTVfgx8ONQtYfDfw0eST4ceHore78NzRR6H8P5JZX8E6SiCw8KvJI2hW9gzsSAe k+Mfhb8MfiHqfgvWviB8OfAnjnWfhv4jg8YfDvVvGPhDw/4m1PwF4ttdotvFPgu/1rT7668LeI7c Igg1vQ5bHU4ti+XdLtGADwP45/An4YaX8MNa8Q+A/wBlv4HfELx94E8I+ONO+HPh3VvhR4H1NdP0 /wCIllFofxK0nQrGWx02VrLxd4Ye7h8U+EtK1fQk+I9raxeFtTv0TUEnhAPGvgV+zf8As3+OvCOn 6L8UP2C/gr4f8Tat8L7fTvFF7rf7Jfwn8F+E9a8FR/E3xE/h34fXOhy3HjaeyeCfwb4d+I958PdS 1K9sdGl1XwzrssOn627aXo4B5Lp/jn9oD4OfFb4v33wo/YF8C3un6/8AGjRfBUPjDwR4At/hBf6x 4BXXvijqd94n8XeJrXT9V174hy3+qPp+tWutWHh2TwZoGoeP9R8Sahr1zdazq+iaEAc7FFf/AAzt Phxp/gf/AIJs+B/G0+lfEv8AbA1qTxFYfs+eFfhangm9un8SaD4F8Y+H9I07wtqElprnxu8FxeCf Dnj/AMTWMGm3PivQLm8WW41CbTdR0CxAMbVviJ+0Zo3hjwf8KvDP/BNTwEPhJ4A0vWNQg+Eem+Bb RPhk/irwt8RLG88EeNPBOly+DtP0TwnpfhbULDUPiRonh610F/iHq+qWlvdaHptjeaj4f1ucA+tP 2KfB9j4a1f4o3Ok/sYfBf9kG1vLP4bRX9v8ADT4e2vgzW/Hmpz+BNF8RXraxq2k/D3wRo3ifR/An iPxF4t8C6bNHPqN7Bc6JeanLZ6Nba/b2hAPv2gAoAKACgAoAKACgAoAKAPkv9vr/AJMU/bU/7NL/ AGjf/VPeMqAP8LugD/RH/wCDHj/kjv8AwUK/7KX+z9/6i3xQoA/uxoAKACgAoAKACgAoAKACgAoA KACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAx9O8ReH9YvtX0zSdd0fVNS8P3MV nr+n6dqdlfX2iXk8bSw2ur2ttPLPptzNErSxQXscMskas6KVBNABN4i8P22t2fhq413R4PEeo2k2 oaf4fm1Oyi1u+sLYuLi9s9Kedb+6tICjia5hgeGIo4d1KnABsUAfnLo3wE/bO0j4l+Pdch+O5g8E +Nf2grbxdHaD4mar4g1Lw/8AAon4gtc+BfDHhz4gfBTxr4Y8K6xFdaz4L1AW2gz26X8OlX+gp4s0 exsdKupQDeX4X/txRvZLpnxY8FeHbK11r46aq9raeJbfX5dSm8Y+MfEnij4WS+Ir7xT+z3qkuqab 4b0jWtO8H33hnw3H4DTRF0NPEdv4g8Xx3ieF7EA8n0Twh/wUGs9d0/wp4i/a3+Buo6/Y/CyGHX/C ljceHtN8Yap4iX4pLr994nsBP8Hr2bw1Fc/CZZPBdn4ru/DfibStK1qYa+/gXU3t/NnAPpP9mPw7 +1Dp17q3iL44fGrwF8Y/Bvivwr4Wv/CF74Kj0eLTrbUVsrd7rVtA/sT4f+F4pvD3ia3nk1MXF54k 8UCaU2k2krpenzNaIAfYNABQAUAFABQAUAFABQAUAfJf7fX/ACYp+2p/2aX+0b/6p7xlQB/hd0Af 6I//AAY8f8kd/wCChX/ZS/2fv/UW+KFAH92NABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAU AFABQAUAFABQAUAFABQAUAeVfFv4z+BPglomn+IPH91rNrpupz+Ibe0fRfDeveJ7hn8LeA/F/wAS 9caSz8P6fqN1DFZ+DfAvifVPNliSOeSwSwt2l1C8s7acA42z/as+AmqrDNo3xB0zWrQ+KfGXg7Ub 3ToruS30PXfAHgvxF4+8V2usefBBPbnTPDvhfWJ9sENzNdT2txFZw3C2Opy2IBgx/tt/smSzXdsn x++HBubDw7r/AItvLY62q3MHhrwvDqVzr+tPA8Sy/YNMs9F13UJ5ghDaboHiDUoRJY6Dq9xZgGw/ 7WfwBe41XT9O+IWm6zreiW/w/vNY8PadDdrrulWfxQ1/w74c8F3WqWGoQ2D6Ymq6h4r0FzHqD21z bWeo211cQRxzweaAfN/w31f9mn4RnWL3wv8AtMz+FNK1X9qPV/h9qMmteH/h3ot1rHxAsfFfxD1D XPgLrvjLXvhlbeJfFGhyeOPGHiS7sNe1HXrrX7R4dPs/D/jiFNS1mTxGAedfE7wN+xl+3j8bfhl4 i8PftH65qHjeD4c+N7HwbZ/CLUtONjf6JoFxeWHibUbzxBJ4V1aDMMPxCggu/D+qaqll4i8NaxBJ Bpd5oWtXlxqQB4r8T/gJ+wtZ+L/id8Dfir8fPHWi+K/D3gD4bX3iaTWfC/h7Tl8P+FdK8bW2sWH/ AAh/iWL4btpFho+s+I/i/wCF/DkvhjQpm03SdJg8DeEdCsrKy8E2ttpoBz8Xwu/4J/eDNS1K31b9 vbxfc6pF8Qvh3cLa+I/FXg2/v/CvjrwZ4Q8eeD/Be23/AOECSTQ9Y0jT/EV/pt1f3cFrNZa18PfD ulavNDr/AIM1OKQA+rv2YNY/Zr+HGr/Dr4f/AAO/bF03xX4X8QeNPHlxN4DVPBmun4jeLrD4dfDn wsbGHxNpeiWS+H7DS2tLX4k3EemLbXPjzxd8QbPWYdZudF1Oy0zVgDzf9q3wp+yxN+0T8VPFnxK+ IXxx8LeOofgr4Ul8VJ4Q+Cl34r8G2Hgn4fav/wAJnaS/8JNN8JvFWla1a3rXs8Pjfw/cazd2Wu+H J7zwtrix6Kb/AExwD7K/ZPn8GeH9Gm+EPgfxt8XPFOg/CP4a/AfwxpGlfEz4fQeDrTw34eT4ZaZH 4bl0jU4/h94Kuta1zxPo1taa343sdQutVl8OeIHl0y303wrCDoqAH15QAUAFABQAUAFABQAUAFAH yX+31/yYp+2p/wBml/tG/wDqnvGVAH+F3QB/oj/8GPH/ACR3/goV/wBlL/Z+/wDUW+KFAH92NABQ AUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAcH8Qvhh8P/ivpFloH xG8KaT4u0fTdYttesbDV4XlgttVtba9sFuo/LkjfFxpmpanpGoWzO1rqmi6pqmjanBd6XqV9aTgH A6d+zD8BtI17SfE+l/DjSNO13Q/FUnjjS9Qs7zWbd7XxZLa6rYy655UWprbz3kljrut2LfaYZojY 6xqlmYvs2oXcUoBhP+xv+y61tBZR/BHwLZWtv4I1D4bxQaXpsmkoPA2qXWt3l94bYaZcWhk0+a48 S+I2USl5oU8Qa5DbzRQatfx3ABf179k39nbxRqXiXWtf+Fuh6prXjDTfC2keJtaubrWjrOsab4LO gv4Zs7rVU1RNQ8rTZvC3hu6PlXEbX15oOk3uotd3dhbTRgHwz+3n4s/ZP/Zv134V3fxL/Zy8FfEm b4m+Ntb8dXF/q/i/TPDcfg/U/C/iL4ZaTrPxGvtM1r7V9u0O11Dxvomq+J5tCtZ5pvFUfhye80bV td1611OxAPGfhF+3p/wTtstP8Aar8HfhTa6fdeDtA/aI8d+HdC8N+MvhHYeJPCvhz4dJ4Sh+IGoW vhiX4s22r614f1vRL7wVr1ilnp+qeHvDXhjRtQ1rXv8AhErP4f6jJp4B7D8LPiv+x/8AtdftHeMf BuvfB/wbJ8QvGvw58OePdJ8V2/xS8A+MtT8WeGPD2k/BjxSu1vhz4+1l7GWyTX/hn4j8NeLPB8+q +F/F/g6Pw9qsHijz45dIhAOE8aePf2Nh8Tfi5YfEj9n34F6FPpn7WPwh+DfiDXPHPxEttAufEPjX 49+LvFnhpry+0XUtFt9Nt/iZqsGnf8Lgs/BEN7cT+N/hr8QND+IdxrNvqeuXcc4B9veHPhF+xv4U 8Ean8Ufh34M+FemeG/g1qvxJv4PEUN9eaJ4R8GeJfhX4glsPHUV3qsK3tvomneCvFfw1XSdYa202 +sfDf/CIta2WnNBpaWRAPz58Rftw/s6/Grwr4n+KXjj4UfBbxZpGqfsP+Nvi7e+MLr47+Z4M8SfC zwL8R9c1HTLT+24vDlvZ6Z8N9e8XeD9JKeLL+1tfFPhn4k6rp3w91/wvbazY6h5IB9pfsk/FT4F+ NPjh+0l4L+D/AIC0nwrceANE+AdveeJtG8RN4gs/iH4M1X4a2958N/EljFY3V9o+jeFI/DJi0nwF IZo7rxXoGnSeJrAXGjXNrKgB+glABQAUAFABQAUAFABQAUAfJf7fX/Jin7an/Zpf7Rv/AKp7xlQB /hd0Af6I/wDwY8f8kd/4KFf9lL/Z+/8AUW+KFAH92NABQAUAFABQAUAFABQAUAFABQAUAFABQAUA FABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQBDHb28UAtYoIY7ZUMS28cSJAsZBBjESqIwhBI KBdpBIxzQA6KKKCKOGCOOGGGNIoYokWOKKKNQkcccaAKkaKAqIoCqoAAAFACJBDE88kUMUclzIst xIkaI9xKkUcCyTuoDSyLBDFCryFmEUUcYOxFAAMXwx4V8N+C9IXQPCeh6Z4d0VNQ1vVl0vSLSKys hqniXW9R8SeINQMEKqhvda8QatqmtancsDNe6nqF5eXDvPcSOwBteRB5/wBq8mL7T5XkfaPLTz/I L+YYfOx5nlGQCTy92zeN2N3NADUtraKee5jt4I7m6EQurhIo0nuRArJAJ5VUSTCFGZYvMZvLVmVM AnIBPQAUAFABQAUAFABQAUAFAHyX+31/yYp+2p/2aX+0b/6p7xlQB/hd0Af6I/8AwY8f8kd/4KFf 9lL/AGfv/UW+KFAH92NABQAUAFABQAUAFABQBE88EcsMMk0STXHmeRE8iLLP5S75fJjZg8nlod8m wNsU7mwOaAJaACgDMXWtGeK1nXVtMaC+v5dKsplv7VorzVIZbmCbTrWQSlLi/insryGWziL3Ectp cxvGHglCgGkCGAIIIIBBByCDyCD3B6g96ADIyRkZHJGeRnOCfrg/XBoAWgChe6rpenS6fBqGpWFh Pq14NO0qG9vLe1l1PUDBPdCx0+OeRHvLw21tc3ItbcSTmC3nm2eXFIygF+gAoAqm9sxdxWBu7UX8 1vcXcNkbiIXctpaTW9vd3UVsX86S3tbi7tYLiZUMcM1zbxyMrzRqwBJcXFvaW893dzw2trawy3Fz c3EqQ29vbwo0s0880rLHFDFGrSSyyMqRorO7BQTQA6KWK4ijngljmgmjSWGaJ1kilikUPHLHIhZJ I5EYOjqxVlIZSQc0AQ3N/Y2Zthd3lram9u0sbMXNxDAbu+kWV47O2ErqZ7t1hmZLeLfMyxSsEIRy AC1QBVF7Zteyact3atqENrDey2AuIjexWdxLPBb3clqH89LWee1uYYbhkEUstvPGjs8MgUAtUAFA CZGSMjIAJGeQDnBI64JDYPfB9DQBXury0sYlnvrq2s4XuLS0Wa6nit4mu9Qu4bCwtlkmZEa4vb65 t7K0hBMlzd3ENvCrzSojAFmgCraX1lqCTSWF5a3sdvdXVjcPaXENykF9YzvbXtnM0LuI7qzuY5Le 6t3KzW86PFMiSKygAtUAVoL2zupLyG1u7a5l0+5FnfxQTxTSWN41rbXy2t4kbs1tctZXtneCCYJK bW7trgL5U8TuAWaACgAyDnBzg4PseuD780AFABQAUAFABQAUAFABQAUAFABQAUAfJf7fX/Jin7an /Zpf7Rv/AKp7xlQB/hd0Af6I/wDwY8f8kd/4KFf9lL/Z+/8AUW+KFAH92NABQAUAFABQAUAFABQB 8h/tN/soL+0h4g+FviYfFLxX8N9W+D9x4j1bwdc+FtN0e5lh8SeJzoek6prF3c36G8eG48CW/i/w JPplrcWcNzpPjzWLqWY3dnYGMAl0f9lm50T9mPxN+zZZfF/x0tvrlt4g0/T/AIgSP9q8VaDpPiDV jqlxpFrPqF9e3c9mI5r7TGnOpwatHp+oXH9m6npd/FZX1qAeJj/gnm9x4e1XR9Z/aE+JviHUb7w7 8H/C8Wv6tcas17daT8LPBWneCr618TQWXiyzt9dj8dLpOl+L/EM9mNC1NvH2laT4lk1K8FkbCcA6 fwj+wwfAusWuoeGvjP4qt9Oi+OcvxyutCvtITULG51fU9Q+KcvibS4jLraGwXxRo3xPbQtW1K1RZ 5I/Cugap9nbVVubmUA4aP/gm3b2un/D3RNI/aW+OnhvQPhp8OfFvwx8N6N4Z8RX+i2ceh6/a+JbT TdUult9XYX/iWCHxIF8T6pqS31v4oGg+Gks9P8MpolksYB0i/wDBP6y0+z8Tr4X+MvjLwpqni/wb 4B8P6xqel215crHrXw/8XX3iPT9U0m01fxLqJ07w9f6VqmoeE77wf9quIDossEaasEt/IkAMu7/4 J3tqFraC6/aS+M9vq8HxT8N/Ee81zRNd1vQ73W7Pw34Xg8O2nhbWVs/ExV7S2vVvvFul3eltpMVh 4r1rWdVudN1N73ZEAe/fHr9lzSPjv46+HXjm+8Y6z4S1L4ceDPjR4R0W88PWsSeINOn+MnhfTPDN x4s8M+IJLpX8M+LPCaaZHe+H9VisL8xzXFyjxqHV0APO/h5+zz4Q/Za1vV/jZ8RPjdqGq+H9C8Br 4YV/HN9caL4W8GPe+OvFniMy+GUvPFFxpel2d+/jiHwPo+gXVrqepf2RofgrQ7LWbmbToYroA+Uv Fvg34C/FzxZ8SvjNo/8AwUS1nwXa/F62+EOuQ+HJfFXh3R9O+Hdh41+Ht3onw9tpfDuqalpDaBq/ inwx8S4NX8PDWtP0rWBqR8H67epqt3o0VxeAEGj/AAu/Zh8d/FaPwn4I/a08SeFPF/h/45ftU6b4 LstFW/8ADXiqLxn4o8e/Djx/+0D4V8GeMdZug3iObwbd2X/CHPd2sF7pGl2Ot3MUem3+saRPqtyA dxqP7Nfwo+Hr6npHjX9qrUEF7+zj8ZLCG+8U3jReEvBfh3XPE1n4e1/x/pCTeM4tF0waI/xFt/DO jabq0mrSfb9a1WWy1O2nvlsYwDx/4zeDP2fvFPhz4yeML3/goV4nsUj8I/s0eCPF2o/CN4tQ1LSr 69sfCtv8L9T8NaZ4Y1HVJZNW+Kes6t4c8R6Te+HkydXfS4LzU7zw7Zaxo94AfU3iL4DfDr4czaWb r9p22+Gdp4u/apvPipoo1m40a11a8+JPxC0nxjB4h+H2j6trfiJTbX/iGbxT4hufD9hFafadF+ya XbWmmX19YTXl8Aea/Az4afs8+Hfib8HvEvhb9u62+IOv6Pe+Ibfw34UPxJ0O/wBP8Y22m+G9c0vx TpNjokfiu8SZb61vYPGvieXyNSuNS8W2OreMbB7Cz1KaysQD0r9o7wl8FvFnjr4oTeOv2tPDHwzt Ne+GfwVn8VeCl13RNE1LTPCngD4s3PiDw94qfVl8U6ZrI0zxlreu6n4C1R7aKG11Oy1qx0fzZbg2 0V0AJ451H9nL40fD34T+H5v2yNK+zfBrx14Y8E694mt/HthYx/EHxvY+EbaA22vTW+u6O0/i68sZ B4w8Pa7p+p3lpo+oS3GsrbataxyrGAeH+FfgL8B9U1rwdZ+F/wDgoJreueKb2/8AiZ4Y8IpYfErT b7UNW1dvCPhbRfG66ZZ2fikfbfFVjo+kS63481KNZZ38Z+LPFviCKDw3e6n9gswDO1X4CfBP4X6d 42+Fr/tUfE+bxoP2YItO8a+Jbfw54t8Wa7P4I8FfFLxj8UNO17Qtd8O3gs7PxDoUHivWdNk8P6Zq 914zbwdo+ka9Pdx2Wna1qGrAH0N4V/Y7TXLjXPij8Pv2j/G8vhL4r6j+zh8S/Bei6hobap4U8KaR 8G9Q0zxj4Kj8J6JqeqWFxp9r4k05LLQtba+ij1S+8JpbadrZv9bhuNanAMyb/gnJPL4k07Xrf9qn 9oXRbew8ZeMPGa6P4a8W6notpHqvjO4s7i+v7KRdXuXttY0+PTbPStKurhb7Rrbw/Lq+jN4dlt9X uHQA9U8IfsYQeEv2YviB+zdZ/F/x1Zt4+8QeKvE1z8R/DYTw14o0q/8AFniG28S6jaWJgvby4fSb u8guNO1W3n1R7/VdB1PU9Nk1SCS5W8iAPLv+HcGnzWl9Z3v7Rfxxl/tDQfCehT6hB4p1pNXMXhnQ Pht4Tab7ff69qYke+8L+EvHmkxtcQTXOnTfF7xRrltdt4g0rQNUswD0vVv2MX1vxDNf3vxc8SW/h t/jrf/Gq38L6Rp93o32Rbz4aQfDWLwius2PiaO8u7DTo7DSPGmn3mpRXscfj3SbPxBPpc4jSzQA8 Y1j/AIJnvrGi2elSftP/ABptZrfT7jSJb211C+iU6Xf2E+mazbWloviFY7OXxLE0Gu+I7x5Lq5vf G0useJ7J9MXVzpVqAR6L/wAExbfSI7+zuf2o/wBoHxBpN94e8M+GhpHiDxZrd5ZWmleG/HnhbxoN Nto7bxDZL/Zd9F4XbR5YJ1n1GFPEvi67j1Zo9dnsEAOuuf8Agns76dHpdh+0R8U9Hin+Mfw9+Nuv ajYO39veJPF3hDwhF4a8QjWNRuNXntruw8ZajAniWfTrnTrjS9L1JpE/s/UgLea2AP0foAKACgAo AKACgAoAKACgAoAKACgD5L/b6/5MU/bU/wCzS/2jf/VPeMqAP8LugD/RH/4MeP8Akjv/AAUK/wCy l/s/f+ot8UKAP7saACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKAOM8ffD/wl8T/AAzc+EPG2lya toVzf6Lq3k2+p6vod/Z6v4b1mw8Q6BrGk65oF/peu6Lq+i65pmn6ppmq6RqVjqFle2kM1vcoy8gH z5f/ALC/7LOq+DJfh5qfwxm1HwTLqXg/Vx4bvvHvxLu9Nt9R8BfD6P4U+Fbmxjn8YyPpx034dw23 hKSOwktodT0qzsU1eO/msbOaAA9Ctf2bPg1aXNreReF9Re4s/HHjL4iQSXXjbx7ff8VL8Q7pL/xy syXvie4jufDXiu/ijvtc8DXKS+B9QvY47ufw61wiyAA57xJ+x5+zR4q0/T9E1P4SeHrTw1pPhzXv CmneDvDVzrXgzwLZ6L4m1/R/FetpD4F8IapofhBdRvfFPh3w94l/t06Iddttf8P6DrFpqUGo6Npl zagFhf2TfgJDp8elWPg7U9I02K0+HtoljoHj/wCI/h62B+FWp6NrHw/1AxaH4u09G13w5qHh3Qpb fxE4bX7uLSNPtNS1K9s7WKBQCDx3+x5+zD8SLq3vfFvwT8C3N5D4x/4WBcXOj6a/hSbWfGZvLXUG 8ReKJPCc+ht4t1GS+sbS8lk8UHV0muYEmlR5MsQCjb/sW/svxap4b1m6+Eeia7qXhLQL3wnotz4s 1TxN4y2eFL611OxPhbU4fFet6zb+IPDWn2Gs6tp+g6B4gi1PSfDdhqN5Y+HrTTLS4khYAr6h+xF+ yxf+J38ZR/CDRtD8Sf2LpXh6y1HwfrHirwN/YWl6Hd+GL7SI/Ctn4N17QrDwhdafdeDPC8ttqfhe 10jVE/sa1j+2GMzJKAbesfsj/s96/dXt3q/gBr19R1CLUr2BvFvjiLT7if8A4R6PwnqML6XB4li0 0aZ4n8OwQaV450ZbRdI8f21vb/8ACbWPiCW3hkQAhj/Y/wD2chc+ALu7+G8Osy/C+XxnL4GXxL4m 8Z+KrfRT8Qri5uvGUUln4k8R6raavba5PeXbT2etwalaW6XVzDZQ20M8sbAF5/2T/wBndLm4utJ+ F2h+EpZ/Bdz8PUT4f3WtfDi2sPCd5q0mt3dho1n4D1Pw5Z6DeXWozTtc67osFhr89pc3emy6o+m3 VxaSgHtvhzw7onhDw9oPhPwzptto3hzwvoul+HfD+j2SlLPStE0Wxg03StNtEZmZLaxsLaC1gVmY rFEoLEjJANqgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgD5L/b6/wCTFP21P+zS/wBo 3/1T3jKgD/C7oA/0R/8Agx4/5I7/AMFCv+yl/s/f+ot8UKAP7saACgAoAKACgAoA/Ov9pD9sj4r/ AAY+L194D8IfALxP4+8H2nhn4aXQ8fWvhL4l3+iR+OfE3xJ06z8U+ENQvPCPhLxLLBpOl/Bw6745 bxrpWl67p/h3WtLt9D1fTtRv9Qh0ugDM039u74oa3rVxZW/7H/xZ8O6LoviH4KWXijW/Glt4t099 N8P/ABW8OX+qa5q9ppeg/DnxHd3+oeAdcXRfD+o6Nb+bcXkmqtd3z6BFaTBQDW8Rftz+OPDa6Hct +yh8XfFVp4g+MPxJ+GNpB4EsfFWu63a6N8PtdXw5b+ONT0zVPh74ds9PtPGt5e6PrPhLT7jV1tNR 8H3t94jGvD+wtW0+AA9C+Dn7TvxF+JHjvwX4d8U/ArUfAXhfxz4E8QeJdJ8XtqPj3VYB4i8O+KdZ 0i78MT22r/CPwgNM36FZaZr4vvFU/haWR9UXT9KsdaAt7y5APs+gAoAKACgAoAKACgAoAKACgAoA KACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgD5L/AG+v+TFP21P+ zS/2jf8A1T3jKgD/AAu6AP8ARH/4MeP+SO/8FCv+yl/s/f8AqLfFCgD+7GgAoAKACgAoAKACgAoA KACgCKeeC2jaa5mit4UKhpZ5EijUu6ogaSRlUF3ZUXJ+Z2VRkkAgEtAEccsU28xSxy+XI8Unlur7 JYziSN9pO2RDw6NhlPDAGgBzukaPJI6xxxqzySOwVERQWZ3ZiFVVUFmZiAACScUACsrqroyujqGV 1IZWVhlWVgSGVgQQQSCDkGgB1ABQAxpI0aNXkRGmcxxKzqrSyCN5SkYJBdxFHJKVXLCON3I2oxAA +gAoAKACgAoAYssbtKiSI7wsqTIrqzROyLKqSqCSjNHIkiq4BKOrgbWBIA+gBqSJKiSxuskcirJH IjB0kRwGV0dSVZWUhlZSQwIIJBoAdQAUAFABQBH5sXmiDzI/OMZlEO9fNMSsEaQR53mMOyqXxtDM ATkigB5IUFmIVVBLMTgADkkk8AAcknp1NACI6SIskbK6OqujowZHRhuVlYEhlYEFWBIIOQSDQA6g AoAKACgAoAKACgAoAKACgAoAKACgAoA+S/2+v+TFP21P+zS/2jf/AFT3jKgD/C7oA/0R/wDgx4/5 I7/wUK/7KX+z9/6i3xQoA/uxoAKACgAoAKACgAoA+Tf2uvAHw+8c+EvBM3xM+Jnw9+HXhfw345N9 cQfF230nUvhl4zl1vwl4p8KHw34g0bWPFngmC91eG11261/wbe2+vxXug+KNG07W7ex1D7E9swB8 kp8EtJj8S6X9n/4KS3Ta7D488UWejaVP8S7+W4v/ABPp+reBNR8R6PfaNB8cbaDWvGlt4e0vU9C8 X6PFp1v4Y0m38ax6t4Y+HXgK7gdtZAOW0D4LeAtL8MDQdO/4KTWGs+NW/Zu+IHhzWPiPrHxI1q81 AeBNW+JnjPUtJ+LOhNo37QGiWOkTfD7xPf6x4Vfxbe6jr97GfDun6Umv+H2024t7gA63xT8IdHvN R+JPiPRf29NNk8K+I/Av7P8ApulfD8Xet/E3w/4FTT/GXw7n+H/jHTdNh+N114k1gfEHxLouq6dp Wqane3F34ntvG9zp+ua94yt9Kg80AyfEfwT0bXfG9jaWf/BTbXvDOp67+0D4smtvB3hH4iPJJc/E M614p8Xaz8M7G21b4s+IrnTda8JeF30vwxpHgdY08NaPofhy5/tf4e6vdaygsAD0D4UfsyWui/An 4l/8I3+3N4j1bQPFjfFjVdd+JXgjWfD6+B4da8T+CbDwrqnjHxN4o1XxR45+IbeJPBV/pMvi59Y0 L45+DI7PWhskg07T7NbagDh7P9l5fimfEPgvwf8A8FEtV8YXGoeFnuJPCeh+NNd8Wu3w81fVPDja Lo/iPTNJ+Oza7qPw6stBsTp+ka1p1/4c8a6zrPizXdR8R/ErxL4e1ePwZGAev/sseCvAP7L2o+Pv C3ir9t2w+MF7JffDzwHH4T8c+PfD2nv8NtdsbbxFaaD4UsfDM3jbVbbw/quv2aNo+h6BZ6VoeoXW g+DNLsZodf1DR7zV5QD5+8C/APwh4r8c6b4btv8AgpT428ZW/hnxT4z8Aa78NdP+IfiCzbxd4o1f 4ZeCpfF2i6TqepfFXVtb13WbK11VPE+pR6TeeJ9D8LS+J7rRtJ0nwzrOm312QDoPEP7My/D2WWx8 Tf8ABQrxj4ei+HHwc0PXNa+Fy+J/E0GntY+BLrRtKu/iNr3h4/GC9+MN34T8S+BtKXwJ4p8OaR44 06x1fXdbvvE/h/VdF8W31isAAni79m7wdJLfaL4y/wCCgP2fx54C8ffBLxRFq/ifx9qEPi3wlfeH fhFP8PrDwr4n0XU/jZBZ6HafGbUodS8W+I5vDOj/AA78ZeLLLW/HHh+DxFc/26dc0sA+0vg78DPG nwf8L/Gu08R/tAeLfHd98SPGPjHxzovifxPBMyfCm217TVgttK0CHxF4j8TI+jeG5IV1K3gub610 rejqunWcDzBwD4J8P/Arw9c+GIfBM/8AwVAvfEGraR8EPG+o6V4u0n4k6vaa3Y+Grj4s+Jtdv/ih eTJ8edT8O694a8LWo8TfCHUdT1rT7/UtI8LWdzZWPjXwzrGkWN9p4B9AeNNN+GvjD9n3Qfgnaftz 6XoXiH4P2/gBvGfxgX4nva+Kb2XXfA17J4H1PxVqmlfFLw1q62/i3/hI9A8ZaI2q+LdUsfE8en2E Mza2lzJdKAcPrv7MmkfDzxPoeq/F39vPxIuueMfjbqfjvwBZfEv4i6z4OXUrLXdD8aeFNf8Ah74L 0rTPi/4Oi1G8TTPiRo1n4fudBtzp2hSeGfBQufB2sM12upgHmFj8GPDdrptroN1/wVmu9d8W6z4S 8bwJr2r/ABW0q31i5tLfwl4s8IjWfDeg+F/jJ4Z0i003w1p0djd+MLv+zNV1W61b4bab4j07xL4J 8U/8Jfr2tgGv4n/Z8+HWpaj42Xwf/wAFD9H+H2s/Fj4WfCbw5cw6L8RZ7y+iXRNa8EvpfxI8O3V7 8dT4r1TV/iTeWF94XuNc8U6/4vuL/wAN614W8IaFqsVro2pr4yAPs/4qfAfWvjf8O/gzB4M/aV+I HgdPCsWi3uq/EL4e6wlxH8YfAOp+GoLHxBYalPZ6vFpwTxpbJYa1pnjjS7m51rw27T33hXULWbUZ L2gD4f8AA/7PXgXw5bfCe18J/wDBS+3Twh4cg8YaP4P8G6L8SYV8G+JZovAXg3Q9btdPgg+Ndzqe oR6Dq1pd+KtR0K01q80jw3p3jM6P4c0vwcUtNbuAD1z4LeCfh18KfiZ4N+IOpf8ABQqD4gaNo3wP jsbv4feIPjFHqPhXxHDY3MuleIfjCP8AhJ/i14uvJdN1XxJ9ov8AVL/V5vEf9m+KpLmy03xXp2kR 2vhyzAMfxz8J9C8R+NvjL4zt/wDgo+/hbS/G/jH4f6vbeFbL4jQ22g/DRL/wb410zwnpOny2Xxe0 m6tdQ10a5B488ExxTaL4b1TxB4I0LUtW8G+ONEsbvSpQDifhn+zRD4L+K/gfV7//AIKXfE3XDo3x b1xG+FvivxzrlhZfEHxj4G1bRp/HXhrSrPxP8Ur3UtX/ALPt44fDHiLSdHj1nwrpmmazrVjL4dg1 G9+02gB9G/Fj4caP8bNV1j4/eBP2y18E/DOx8G2XhDWrrwh441C/+F9tb+FL7xrfeKZdc1jw/wDF jw94TsBrt/r/AIZsfGepWMOheNbHRPBcOkaR418O3WpDU9MAPjvxZ+y94S1S+s/F11/wVTm0S8Tw L4e0ix8XD4i2VvrsvhPxongzUtDsI/Er/G2COHwFrmo/D688SeAxokGleJtb1OeXUPFfj74lnSrh r0A+x/g/N8PPgl41+KXhXxv+2NYfFPxB8cvidrtn4U8N+M/EMN7beAfEVnb/AGmf4X2cl/4t8Q2c HiA6V4o0Aw+Ebq68N32s2VlBLoXhlLaO6S2APlrwt+zdpWlaP8G/C+k/t9/FDT/h74W+GXxvh8PW OgWPxG0LQ9b8KeEfB9r8NfHOsR+O5PiHe2tmnw/8Yyaf8Q/D2natq2pw6dPp9mngiwtPCFvrTXwB 7T8F/D/gH4RfErX/AIo6z+3N4t+Jml+F/gN4J1Dxf8K/F/ijUrxdEtfGlh4avbD4nXXhO58T6jqG kweONbs9T17wzol14Zn1TSNR8caj4c0XWjoT6J4ftQDlfHnwCtNX+IXxD1a4/wCCk/iTwW2r/tAe FfENx4D074h2ulW/hG+Nt41h0X4PNHJ8T4dYsL7VYtWtrjRtJtJNDtbq58HWUsngzV7e1S2sQDvb /wDYk8WeGLnQPFjftqfG/SfD/gST4la1rtr4v8W+I7zwxf6BqenWuleEh4jvJPHuiyxQfD7wPoWl aR4h1i/1KaPxddReIvG86eGvFniTU9ZQApfB34Z+Dfg98T/DXjrXf2+rjxvpngv4MPofiL4d+KPi vJdeGtRn0fVbnw34q+K2pJ4r+K3i2/toL3xiZzrs/iCbXn0jxsLjS7DxNpWnR23hezAPvvw18TPh v4z1XUtC8H/EHwR4r1vR7PTtR1fR/DXivQdd1XStP1i1gvtJv9S0/S7+6u7Gz1Syu7W8066uoYoL 21uYLi2klimjdgDt6ACgAoAKACgAoAKACgAoA+S/2+v+TFP21P8As0v9o3/1T3jKgD/C7oA/0R/+ DHj/AJI7/wAFCv8Aspf7P3/qLfFCgD+7GgAoAKACgAoAKACgD5y/aT8P/DrV/D3gDUPiH4Y17xDH p3xd+HWheHbrw54h1/wxf+H9a+KHiG1+EUmpXeq+G9QsNRbQbzSvHmo6Hr+lv9qsNY07VZNPv4be 3nbU9PAPzrtp/wDgn1carBn4RfG7T7Kx1T4oWureIbi4+JVrpHgXw/8ABaHwf8UNQubtbfxxLqFj 8OLI+EdMvPAOmeHtPvrOA6Rren2GjWFnq15FqgBUtJ/2HNN+Cmo2fgj4AftOnwdoX7Mnxq8San4a 0+L4q+BNR1H4QRa3411zxV4b8TXeveNvDrX8niPxHDrk3goXlxf2YXxSt94dvLXTX1GbTQDR8Uav +xNP8QvHsXjv4YfHiw/aL8aeAfhZo/xC8MeD/FPxU1XxFrl1Do3gfxonw98P+KNH8W6NoGoeK/AF p4O8J6z44itrnQbxGhWaQ3134lvbbVAD2f4LWf7EHxc1TX/FHgq0+IHhy+sfjWg0/wAXeNvEXxZ+ Hcfjj4pXut/Gdr6D4c6/4h8QaXH4wbW9Z8WfGTTvEPhvw7cTPqdvPKmraI+jQ+Fp6ADx3r37Ef7H PgHVP2S/E3hHxlo3wu8UeFL3xRrdjaW3jbxZohh8c33iXT9P02XxSNZu/EOl+IvEur+DdRsvD0On T2wtNTgsr5r7TJZ21CgDw/wJ+1L/AME7fgh8TPEuoeEdD+M9j8btHv8Axl4d8XeE5NM+J3jXx7c6 94s8XeAPDni+41bQbnxDr9nrWq+K/ihpemaBc+Jle9gvvG3h3xRcw6rHbXjalrQB9J+Avg5+yj+0 VqfxGn0/4V/Fa1stF8bapd63d+MNQ+JngvQdR1r4hW+qeL/Hfhnw9ot94ptbu28N+Kv+E8v9c+JP gp9E0nQNR1fxbPZ65pT61ZXun6MAfI/gzxL/AMEuPBfjrQ/ivofw9+JllrXw91rxld2HxA16D4re IdE8K2nwy8CeAbvQ5Yn1vxNrUUvge48CTfDW4+D0Wi6ff6Heabc6NcaVFbE6lIgB9L69pf7MXxf8 FeNv2tPiJ8LPiho3ifxzF4x/ZF13QtN8SeLbD4haxpyfHHUvgVb+AbPSPC3ijTNM0vVfG3i7T7Ow eSK9sP7Pg1eW31HW4bdb+/kAPlb4x/EX/gmfqWqPrnxX+GXx68a6z401rwlcyXGrx/FHxBdT618N vBI8DanI9nf+NjFpk/g3RPGs/gj4hj7Narqer+LNYuol1641LWdcIB9GfCn9un9lLxJpPxF8Jaff fH7Wrfxh4q8Xa3ry/ETSPEM161p8Q/EmkeH49O8JXUupo2i+B7S68WaF4X8GaNoX2E6NpqRTGBbq LUtWmAPOdC0n9g2H4W+DdN0T4U/FzRfhrqPwq+J+k2ulDxF8TdE8TahCvxz+HfhpvhnquiWXi0Ta 9rutfFP4xaJqnhqHXtVTRtDbXo7i3ng0281g6OAczr9v/wAE69bttJ+DE3wM+OPiD+y9P/Z20GH4 e2w+IssOhNc2mgfCjwUb1L3x0mjyeMfht4X8d+GPAXj6WW9vvFuneE/E+laM76xZXrbQD3v9pXxD +xx8Rbq38LftH/Dfxbqlr8IvGXjf4c6FpunT+MIrTTfDsPh/4IXXi3xrq9r4X1jRbc+FUb4jfDPS bZ5Jtd1dINXtrjT7OP7R4ht9MAPFLL4Bf8E6b39mPxP+0X4W/Z+8cXPhH4TeH5NV/wCER1PxP8Rf B/i+xtvDMGneONI+w2DeMBbx6umhazoOteGb17p7uSzXw/p93eW1xYeRYgGV408R/sHaz4V+LHwv 0Cw+P1hqPjDwt4Q0z4k2WjaV4r8Xa/qE/hL9oPStG1/wTG3jjVdb0LTfi3o3xb+KsWoeONYsJrLx dpx+Iz/EHSPEcgvLTX7cA9h0D/god+yr8MPF3jtW1H4tx+DfH2oeDdZ8CeK9X03Ur7wRrPiK90/x d8JtF+E3wc8KSpZP4R08al+z/r1j4e8PxaZY2vinx1L4z1INuN1qV2AeI6Ppn7HfwG8KfDzwXqXw 1+NHxO8R6ivxv+C/iqPUPE/iO91i9+Hzalq/7PXiK78dWFtq2heDrlfE9p8A/D/hDwT4W0Ozto9I Tw5p02gXGlG2OqakAenfDT4dfsWfGLxrqfwmvPgd8W9Fl+MPw28G/Gya+8feLfHs9r431jXNVt/i BDr3izPjXUxZ/HDw/qWiabrX9vXzXl9caFbafb2Ouy6VGmjqAcH8fPAX/BP34FW/jy11b9nn4jeJ NH0T4y/Az4deOY/B3izxVHbWfirRPgj4k8eeCnsbN/HVhIujeE/hnqqQajdRLpthDeeKrCS5v7a2 0W91jQgDrfCsvwA+MPxUuvDd/wDsv/Hm91vVPi98XtUutR8dfFV7fwne2Hh743/CfwP8WPHeiWmv /FG2tdc8GW/xE8MfDKSfwp4f027s9R8P6dNp2h6de3d1feGdUAPXPEXg/wCGn7M3wzvv2ZdX8L+I /H/w11bwV8W/2g9a+IHjD4tWfhnVdO1fwV420bxtfXup+IFbTte8M2vhrxTrvgb/AIRnxfZ3s9/o 9ydHW3h1O8026nYA+If2gNE/ZW0n+0PiV4h+AP7Qfh/xJ4d8I/s9eKPG0Xhb4o63qnjW/wBM8S+E oDcfBP4i6ZceINa1XwX4is/Buh3GseKE0hLXxjcaLoOs+LNY1fwn4Z1+98Ra+AfanhH9ln9gq88Y +O4U8H3/AIM13QvjfpPg/UdO134u+N9G0Xxr4+8SfDzw58UfD2jaDpafEFtH8WaVrngfxrZta+D/ ALNPHJbWGo6U+hGx0OLywD6nsf2TvhHpseix2kvxKjOgRfFaLTJm+MXxSluEHxrvZNT+I8lxcS+L Xlvp9b1aVtWtZ717iXQtT23ugPpk6q4AKEn7HHwLfw5qvhRNM8bW2i698LfD3wa12Gy+K3xOsrjW vh/4UllPh7S9WvrXxZFeahqGl2VxdaNbeIrqeTxCNBurnRX1R9Oma3oA4+9/4J6/smahquqa3d/D S4k1bXPiPpHxa1jUB4z8bxXmpePdHvPE+qRa5eXMXiFJ5pLzWvGnizXtTgaTyL7W9f1HUpY/tEiN GAfRWl/Cvw7aeAvE/wAONbvvEvjjw74yufiJL4mbxv4hv9c1TVLL4m654g1rxDoR1LfazWHh6yi8 R3nh/wANaPpf2Gz8NeF7TStE0hLa20632gHzHc/8E4f2RdQe/n1b4ea3rt3qegT+Hry/8Q/Er4l6 /qM1tP8AEUfFs30l/q/iy9updYi+I6p4sttTmlkuLbUY41hKWii3oA+hPhH8Bvhl8DIdftPhno1/ oNh4kfwzJqGmz+IvEGs6bAfCHg/QvAOgLpNjrep6hb6LFZ+EPDHh3RHg0qO0hurbRrB7qOaeESkA 9ioAKACgAoAKACgAoAKACgD5L/b6/wCTFP21P+zS/wBo3/1T3jKgD/C7oA/0R/8Agx4/5I7/AMFC v+yl/s/f+ot8UKAP7saACgAoAKACgAoAKAOM8c/DvwP8TNJtNB8f+F9H8W6NYa3pPiSy03W7RLy0 ttf0G5F7omsQxP8AKmoaTeql7p1yP3lpeRxXUDJPDFIgB57J+zB+zrPCtvcfBL4Y3VuviKLxb9nu /B2iXUDeJYYbq3j1mSG4tJYpb4QXt1G0kquJFlPmBikZUAq2H7Kn7N2lWGoaXpvwT+HNjp2reDta +H2q2Vr4Z0+G21TwT4jv5tT17wvqUSRBb/R9Xv7ia51CzuxNHcvIRLuTCgAq6v8Asjfsv+ILzWNR 134BfCjWdR8QaPovh/XNR1TwVod/qGraL4dj0SHRNN1C9urSW6urXT4fDmhQQxyytmHSrOGQyRxB SAatp+zJ+z9p2t6R4j0v4ReBtH1nQ/H8HxR0280XRLbR/L8fWuh+NPDtl4lnt9NFra315Yad8RfH L6dFfQ3Nnp+q+KNX1+ztoNdun1KgCr43/Ze+BfxM+KVp8YPiJ8PdA8c+MbD4dal8LbE+LLC08QaL Z+EtZudXm1aC10TVILqxtr/U7bXta0i/1KGNLm80TU7zSrhpLSUx0AQ/8MmfsxCG6hT4BfCWI32g af4XvLmHwL4eg1C60DSdb07xNpumXGpw2KajLBZeJdI0zxFbs900qa9Y22siT+0oluQAejeA/hZ8 OPhbBrFr8OPBHhrwPaa/qMWraxZ+F9JtNGsr/UYLG20yC7ls7KOG2WWHTrOzsIfLiRYrO1trZFWG CJFAPLbD9jz9lXS1u49P/Z5+D9pDf3GoXd9bQeAvDyWt7cara6fYai95a/Yfs119t07SdK0y4SeK SN9L0vTdNK/YbC0t4QDtLD4B/BTSvhjN8FtN+Fngax+E1xNd3U3w8tfDmmw+E3vb7xA/iy71H+x0 gFoup3HiuR/FEmpqi358SMddFwNVP2ugDjrn9kD9le7ujeXH7PHwckuPJ0e3Vz8PvDKiO30DR18P aLbwxppyxQW+m6JHFpdrDCiRJZQW8G0pbwCMAq2/7Gn7J1oNI+y/s6fBy3OgXFvd6K8PgHw9HJpl 1aKq2txZyrYiSGW38uJ4XV90csMEyESwQugBrS/spfs2TRQ283wQ+Gslvb6R4g0GC2fwtpjW0Oj+ Kri3vPEenx25h8lLfWb6zsb++VYw01/p+nXxYXen2U0ABUH7IX7LSDVxH+z58IYhr3hvRfB+sCHw H4ehGo+F/Dk3h250LQbnyrFN+maVc+EfC9xZWvEcM/h/SJlHmWFu0YBqT/svfs6XV9NqV38FPhrd 30/i6Dx7Lc3fhPSbp28Y2tta2Vv4iHn20ipqUNpYabbxyoqhYdK0iMLt0nTRagG9a/Ab4LWXw98R /Ca1+FvgaH4Y+L7WSx8VeAR4c0xvCfiKxm0bTfDs1nrOhvA2n6jaTaDo+laNLb3UEsMmm2FrZOjQ QogAONt/2Qv2W7S8g1G0/Z++Elpf2ukaboMF7a+BtAtrqPR9I1PRNa0+wE8Nkkhhg1jwz4b1VtzF 7jUvD2h31y811pNhLbgEdh+x5+ynpl3JfWH7OnwYtruXWvC3iN7hPh14XMh8QeCF1hfB+tAtprbN U8NN4i8RTaLfJtudPufEGvXdvIlzrOpTXQBfh/ZS/Zqg1Pw7ra/Az4YPrHhHxHrvi/wxqtx4Q0i6 1DQfE/ie8i1HxFrul3l1bTXFnqWtajCuoalcwyK93fNPdzFri5uJJQDa8E/s6fAf4batpuveAPhF 8P8AwdrWkWtzZaZqnh3wzpmlX1jaXi3SXUFvc2lvHKkdwl7dpMA37xLiRWJDYoAm179n/wCDXirV /Emt+Kfh54b8T3fi7VLHXfEEHiKyGuaXf67YeBdT+GKa0dH1NrrS4NTufh1q974K1K7t7SKTU/Db ppd+bi3jVaAIov2dfgRD/wAIbs+EXw/J+HnibWvGXgZ5fDGlzyeE/FPiPW4PE+va7oUk1vI+najq /ia0sfEuoT27IbnxFp2ma7KG1XTLC7twDqfG3wt+HHxJtNSsPH/gbwv4xs9Y8O33hHU7fxFotjqq XvhfU9Q03VdQ0Cf7XDKX0q91TRtI1G5s8iGW+0vT7p1M9nbvGAebT/slfsx3KavHcfAX4VTx6/pn hXRdaSbwXoki6ppXgix0bS/Cdheh7Qi4t9D0vw9oWl2SSZxpmkadp0hksrWGBQDsX+CHwnuNSuNZ 1PwJ4e13VZ/ihpvxpiv/ABHYReILnTPilovhLT/AeheNtCk1cXn9g67oXgzS7Lw1ot5owsX0zSY5 ba08oXV204B6rQAUAFABQAUAFABQAUAFABQAUAFABQAUAFAHyX+31/yYp+2p/wBml/tG/wDqnvGV AH+F3QB/oj/8GPH/ACR3/goV/wBlL/Z+/wDUW+KFAH92NABQAUAFABQAUAFAHzf+018Ovip8SPCH hfS/hJ8QfFnw913T/iH4N1HW7/wn4q0zwhc33gkazbW/ja3m1LUfBvjX7ZcQeF5tWutA0hLGytb/ AMSpo51S/TTYLiOQA+fPBvgP9u/wvaeHtN1nxh4Z8bRaL8VvG+uw6jrHj0296fh34g8AeO9H8M+H 9eez+Glvc+Kx4Q8c674V1/TrTU7kzXGm6NeRatqmqXtvoLWIB6v4O0f9se2/ZcGleNPFHw81L9qc S3jy+ItO+y2XhS401/G5ulgs3TwZJpGmeIv+FeNNpWj3l34P17QtP8VDTr/W7HxBpsWoR3YB8ueH PCf/AAUn8N+A7XRNT+N3weuLjwv4e8J+G/EevT+KNI1TxAutwaF4Mt5prTxP4s+Eep21l4vn1uTx DrHi3VfHuk+J9M8V+H9e8L2PhDwt4F1g3WqkA3vF/g//AIKpXetqvgj4qfA7TNI0bxBq81td61Hp l/B4x0eHVrmTQrXXtJg+ESajoNvPpB0+z1y20PxANVS/h1e40/XIY7vTk08AtaD4C/4KeX2i2Om+ MfjX8JbHV77wh4/0XVtY8MaPolrHpniTWvDHjez8IeLLCzvPh5qVxeSeE/GMvgXVNPhS6sLK58Nj ULHxBo2saxaPc6qAe4/Fu6/ap0r9mnwmvgKGa+/aF/4SD4WaV4nk0W+8E6sZdIuvG+iad8RNYGra 54DsvCdqR4Ok1fV5L20+HdxHpN2AmnaDqa26LcgHl8HhP/gpENPnnuviZ8J31+TxtYL9kt4dGi8J weFbfwlaRG90/wA34Wz+Izpd149l1a98R+G9Svp/E994Nh8P6f4Z8c+F9dtda1LWwDTTwR+33p40 uWb4j/DzxjrlrffG20tNRv7xPCvhey06XwHD4Y+B2veIfC/h3wDDc+KNVvvGGn/8LB8b6IdRi0nw uPEureHNAl8QromhamADxXwr4K/4Ko2mjeLY9N+MvwV1awn0zx7/AMIdJql7Z+N/EWn+K9T+M+r6 pBb+I/Ff/CA6HpF3qnhTwdc3XhaKw0vw3YeDtMOlW/hqDw9ZTafHrCgH2j488O/tK6j8Lvg2PCHj TQdN+LPhfXvhxqvxijsbnSLPQPiBYWehy2PxH8NaZq+tfD/xHHpGn6prV8muaffW/hHTNRa00yK2 tf7HkugkYB832nhD/gpxPPqceu/FT4SQI+vfFq80u58HaZoOnQW+nSeHbZ/hBpU1t4p+Hfiu5uNE TxRC8evu08PiWx0m7vTNqniCf7A9kAY/hrRv+ChaaLpGmeJPi58Jtf8AG8ugfFDwfD4z0fxX4c0+ 0Hiu48XfDrWdFuk8CRfCiPw9rfifwd4Z8K/FDQNTF1p0qadDqemSppUVxH4nvLoA6KbwX/wUP1LT 7hPE/iv4c6pJa2/ww1DT7Hwn43vfAclxr3hrxR8JdV8RFtZ0j4Zpfxwa1pmg/GKz8Zafqsut+FPF dv4w8C6bonhnwnY6R4lS+AKPj2y/4KR6XqEEmh+J/BGpaHrPxr8N6e0PhCx8L3fiLQfhnqHjXVJ/ EGuwf8JX4Ft9GtvC+h/DA6baP4Z1afXfHt98QrW71Kx+IMuhXVh4XuwD3b9mnWv2pZfCvw9i+PPh +31bVvFNh8QNe8beJrubwx4Rvvh6ug6j4X8P/DPwiPBHh221Aa5rvxG0g698QfE11Dq40rwHqiap 4Wh1XWrM+HCwBx3xh8P/ALfGr/FTxl/wqHxr8L/C/wAHL3wt4OsPBzXbafP440jxNbeMvA1/4w12 aLW/h14j0x/7Q8Gr8S9Bh0++n1fT47tvA+qWUdpcvry2oBpfs7Wn7Tuh+O/i74r/AGoPHvw6vdFu PDvw30PRNF8GeMBP4W8G+I9P1jx9qus+ToN94U8OT+Gm1vw34z+HNjcXWua34j1vxHq+i3V8k9j4 em8L6XagHi3irwZ/wUQ8UWfhQfDn4gfDDw//AMI78S/jDrV/eap8RNQ8RQap53jvxpdeAdK8b/2T 8ObefXfDnhnQtZ0TwvrHw98PXng2LTtX8I6kLm+1O0n0ay0YAltPAH/BT2/8P6pZ638aPhrY6vd+ Abi10/UdCsPCtncad42s/E9xrum32y5+FurWrXOqeH7XT/BOr3kgu/D0C6hqmv2PhWO8is0iAO08 f/Dz9szxnF4v0zTfE/8Awhmm658Rf2ddbstQ8M/FyKy8Q2/gLwxZ6R/wvHwnYXy/CdLfw/8A8JDf addzWV3odpY6nr8mq3cc+q+HtLMemxAEfiDQf2/bHxWup+GfGfwk8NfDq0+LfxT8SeJB4y1i48Va pqXwuvZvC154AsUu7jwtplj4P0/QNIsvGun3+naW7XNjfXnhbV7nWdbgtPEkepAHceEtM/aq1f8A Za8QfD7xv8W/AGnfti6n4N8aahoPjDwg+gTaZp8l9rGqL4D106PP4SNhDpsVsdN0e/1FfCOr2UM6 TTRtqt8haQA8b8aeBf8AgpguoeNdR+FfxK+F+iWviy58J6jY6T4+1K28byeEJtK8AfDHQdag8LyQ /DjQLKCTxH4xsPHmveI7S6jfw0tgIpPCWi+Hdb8RXd5ZAH038cdJ/atv7v4Kf8KI8XfDTQLKx8WW UvxxXxVo9xeXOveHEOkvcWvhNZYb2O0tZYovEKXsCyWetmW60OfT9YtorHU4b4A+Utf8A/8ABTi2 0bwxovww+Ifwp8JafY2PxIh1NPGPiC8+J/i6a71Xx94v1XwVd3XjjxZ4HvZr+PQ/BGr+DNF09ZdF uWtdS8Pa6uujxBZ6ppE+ngDtF8Df8FW/Lv7LxL8Z/geYv+Ef8M2Onap4d0HSYtY/tOHx14Vm8S61 czar8O7nRxrl14Ht/G1vFAnht/DLTal4YhtdM0/UNO1TV7wA6248J/8ABR+10+OHTfiL8L7nWtT+ MXgDxPqd9q91o8mj6Z8LbnwhG3xF+HPhzToPhTHf20emeM45k0jX9Uv9f1/U9DdLqCfSblZ7aQA9 0/aH8HftG+JdW0ef4J+NrbRfD1z8L/jV4Q8TeHrjW7Hww7eN/Feg6NF8K/Hlrr6eB/FPiKF/BeqW OtK9voWreHblJ9Ysb4y30Npc21AHy5a+Gf8AgpT4m0+6s9E+NnwdfwvH8MfF2g6P430K/wDDWr+K 9V+Jui/Eu7vvCfiS+nT4SyeFbO7vfBOlr4C8bWlppt5oOnapqNxrOn6GdT0+dKAP0y8OnWT4f0M+ I4oofEH9k6d/bcUF7HqUMerfZIf7QSLUIdL0OG9RbvzQt1Do2lQzj95Fp1nGy28YBs0AFABQAUAF ABQAUAFABQB8l/t9f8mKftqf9ml/tG/+qe8ZUAf4XdAH+iP/AMGPH/JHf+ChX/ZS/wBn7/1FvihQ B/djQAUAFABQAUAFABQB8h/toeAvC/xD+GXhjSPF37Q2q/s16XZ/E/wdqVn450rXNL8OTan4jVtQ svC/hk6rql3p4ilu9evbDVbCGC+j+1alo9nBe29/pr3llOAeRfDHWPgJ8CtI+I/guH9rRPE+r/GX VviF4j8PQw65Y+IfEeg+ItN8JL4l8XDwRpr3XidLjV9N0LWdC12z8PS20kDpDpkNno9zHNJbuAfK vhD4S/svWXw/8FtqP/BRODX9In+DHiYeB9c8S/ESx0zVj4f1T4ra/wCOLzxHcWt145tri/0WzlvP FHwo1fQtYs31Nvh7B4l8GxazpU+m6jd2IB1lv8GP2frW0+MF14A/bDP2yXTv2eNO8dLoBg8WQ6Xq F1Y/s4p8EvEj2Nz4nuE1S41y18DaLN4Z1eW+vnnsPiXrdjc6nqUcNpFEAbPif4F/s7614kl03Sv2 7dU8CfYf2qde8VXvhrwR8VNN8PXX/C3/AIo6pea5qfgbUby28Ti8fxTL4h0HxDb+ALNvLh0GyXxR 4YPh3X76TVbggFXwX8E/2cbrwx8N/FfhP9rW+vbbxN8Bv2ghY/Fex1uVdP1f4aalH4Nh8Q+PE1PV /E9zYeE9d8C69L4e1vU9am/dXmvahrUl1p2iz3eLMAl8Pfsv/CP4zR+OfAfhj9ujWPGvjzX/AAN4 Lme48A+MrSDxT4d8OaD8QbjxpfzyaFoHjKVY/CniuXXNG8I+JtOS00u9XQtH8IaPNrcRsIYrkA95 +NNh8CPGmkfCn4Xap+11Y+BfFvwL+IXg/wALfbn+I2n/APCc6x8TH8DahYeEtG8XfbPEdnqN/wCK dThE3jS1s9XN/LrGp6PPqU0F0LC8kiAPmj4X/sdfDLx9L4t1z4fft9ftFeK9N+EPi74leG/F3iDT vibq8+maX4g8Y/Dvwxqdzqlr4hGrPoV34h0nQtY0vWfEHiTT0vfDmtaheaklxoWlX4v3oA3f2fvB f7MH7NXiWD48j9ujRPFfgqw+H/je2/4RxPFPh+L4epY/En4wP441LxNb6VZa9r7QQ6b4s8eWWg2M tso1C2jvLOHXtY1CYTUAanxI8F/s0ePPHfx+u7T9smX4RX2tfFnwNq/xD0JfFNr4autH8cT/AAXt vB+gX2n3mu63pz3GmXvgn+zfiP8ADzVtMgOiaF400QeN5Z/EGn6ANI0sA9d+POl/Cj9o3xx8GY/C n7XviPwJqXw28cfEXwtPafCDxZo0k9/4t0vwneal4w07xTrFrcMdG1vwp4W8IeLLK8h1Jb2DS7jU r9rvSItVtLa4tQD4cu/2Zv2VtD8IWPimT/godY2eiL4Y+PPjrR9csdd8PvaWNprEPxW8E/FDxn4B h03xU+q2MvhrUviVraeIb/TbvVPEUXiXwb4Ua61e1/4R2+sr0A9X+KP7MXwP1LVPifPd/ty+Pfhd oeqeF/gTJewW/wAQZdL8CeFNI1PR1TwdbeEP7U8XDRzpviOP4ba14x0OwvRq8mjSap4q1me/1nSt XvooQD6l/Z++G1hp/jT4qa98Hf2uf+Fn22t/tHaj4w+MWhz3Hhzx+fDumQab44tbj4QaRcJql/N4 KuP+Eo1LQWv9W25t9J8EXPhvRNF0W5nvb21APIfjD4G8FftU/Hrwhq3hz9rC1+HGm+NfgT8QPAng 3wX4V8Y3mm/EbxTrum678UPCuueKdE8Mtq9lY6j4Ysba512a61CyhOtXd34RsxHd2drYG5tADi/i r8Hv2cvB+q/ETR/Ff7ZHjf4ean4H8H/B/QfE2leHvEepW03wp1nxrrnw40HwD441O3v9S11LbwXr Hi/w3HrNto/iNdR0HSde+JXj7UvEWt3OneKYLexAD4j/AAU/Zs8dWni3wCP25fDegeG7/wCM3w9a 28EaZ4u8KaoNH8Sj4caJ8O/CXgrVZNQ8W32peKtd1DTfhzpus+H77W5J5k8UaT4x1Kaw1O9ub9dL AO+0v9nz4d/EDw7P8SvDv7aV1qPhX4V6z+0Ld6r41+GPifRtC0Twjb/E7xFffETxxY6pr2j+JdW0 jSZ/B+na9qqaHrerw3c+h+EtWsr+3j+zLa3d0Ac/o2qfATQf2Jb/AOAPjv8Abh+Hmn6vrei+JfGu v/FDwV4807UNQs/CfjD413+r+VocN5q0+u/8IrYtq1v8KhfWp0m6s9Mgk/ss+HJ7e3XTgDc+PNj8 LPHPwc/Z6+Ddr+2z4L8PXHwu8U6LY+NfiZq3xWsdI+Ini7R/Bfw98a/CPxFqkFzpesRQz/EC08Xa zpvi64vNaaTRdE8WeHf7f1GBn0mNUAPONX+E37Nes+KbbwM/7bWox+J/EvxG+Pd3fTaT4njubK/1 y88beG9b174d6heXniLVfDel+MfAKXkngFdBuFhuLz4Qah498Jv4WtIbXV9c0wA9B+GX7FfhXxt8 H9Btvhj+114r8VeB7j4XePvhVpXxB8DPolzqMmn674y8D6pf2/hvxpp2q3l9pfh3TdW+Fmm6Xq3h Cz1CWyvm1r4hol3pcvieMaOAe1/s6fsQR/s+fFC/+J8Xxz+LHxButT8D2Xge90Dxprup6tos1pYa f4Ws7XUzFqes6rJ/asMnhhJo71ma68rULq2mnmX94wBm2f7CMdp461P4iv8AHL4jaj4lf9oi/wDj 94ZbVyNU0zwc+q6J4z8Oah4P0jTb3UZYbjTW0bxj5FjLqLXWmabN4c8PG18Oizj1Ww1YA4LRP+Cb LaP4ZtNIb9p3413fiO38KfGjwQ3xAOoPD4utvDHxkl0DVr2x0K8/tSWDQptB8UaLea1p93DBcP8A ZfEWs6PZppkK6VcaYAchdf8ABKtbj+0pof2tv2itPvNT8P8Ah3w3dNY+K9aFldaT4eXw7Kuk31rd +JLu5uNDv73w7A13p8OoWl1/Zso0eLU0tIQXAPW9E/4J/Wei6jp+sn44/EvXdV0T4l+Dvipod54p vtT8RfZfE3hWL4qaRcXWoJqHiKQ6tNrnhP4otoN7JPJFC83g7wnqd9aal9n1Gy1AA+ytE8LeMJPB HiHw5478Y2vinXdev/iDs12x8OwaBZaX4e8T6/r9z4R8P22k2l48lyvgvwpqGjeGZdUudROpeI7j RptcvZra61OSG3APgTS/+CaVnoHgXRfAfhv9oD4j+GtK0H4Q6R8KdPi8PwS6PZW8WkpDbnVbaw03 X7X7FBqJibxPqOmWV1BcSfEmV/G1vrNsoXQ1AP0m8N6FZeF/D2h+G9OjjhsNB0nT9Hs4ohOIo7bT rWK0hWJbm5vLhYwkQCLPd3MqrhXuJmBkYA26ACgAoAKACgAoAKACgAoA+S/2+v8AkxT9tT/s0v8A aN/9U94yoA/wu6AP9Ef/AIMeP+SO/wDBQr/spf7P3/qLfFCgD+7GgAoAKACgAoAKACgDyP4y/Aj4 T/tBeG9P8I/GDwhB4z8PaVrUfiLT9On1TXNJFtrEWm6no63i3Xh/VNJvXzpms6nZyW8ty9rLFdv5 sDusbIAcNF+yD+zzbvqslt4Eu7SXW/FGr+MdRls/HPxDs5Zda1/SZ9D1qOGW28WRSWWg6npM7WV5 4SsWtvCk0UdqzaL5llZvAAc9H+wr+yjFq0GvR/CKwXXLa1+xRa0PE3jj+1jbLquqa3BHNqJ8TG8u TZ6nrmtz6fJcTSy6ams6ra2D21pqN5BMAdLL+yR8A5NC1HwzH4Q1ix0HV9B8JeG9T0zSfiN8TtGg vtL8CzaZL4VNwdJ8ZWUsmqaSui6RaJrxk/t670zS7DSL/UrrS7SC0QAo6h+xp+zbqtxoF1qPw5a8 l8KePU+JvhdZvGXj9rfw340j8QQ+LV1PQbT/AISoWmj2n/CVQR+JjoGnw2/h1vEPma02lHUpprmQ Au3X7Iv7P99p+jaPe+CtSvNF8PaJ4w8NaLod18QPiTcaFpvh7x3b2Vr4j0O20Wbxe+lrpMlvpulx 6NYNaNa+Fv7J0lvC0ejPpWntbAG/4B/Zs+C/ww8UP418EeD5dH8UzQ+I4rvWZvFPjHWbrUJfGE/h 278WahqY17xBqcOqa14lvvCmg6lr2vajFda3q2q2cmqX1/PqN/qNzdgHFXn7FH7MV/4i8YeLLn4Y RHX/AB94hfxX4vvofFvjy1Gt6/IvjJHv7iztfFENjECPiF41P2S0tbeyD+JNTkFsJJVZADtvB37N vwW8BeDPHvw88K+DP7P8GfE23uLPxroFx4i8Wavaarp8/g/Tvh+ulW0mta7qN1oej2XgjSNJ8K6R o+gT6XpmiaHpmn6fo9pY29nbpGAee6J+wx+yx4btxa6H8LRp1sPDfiLwmIIfGvxEMQ0fxVr194n1 xtkvi2Rf7auvEGoXOqweJ8f8JNpt19nbTNXs1srNbcAv6x+xZ+zT4gv7vVdc+HM2r6pfx3cN9qWo +OPiLd397BqXh9PCmtW15eTeLXubq08R+F1fw74qtJ5JLbxVol1qGl+IotUstS1CG5AOutv2a/g9 Z/8ACOC10LxFbp4R8feNfif4dhi+JPxNS30zxv8AERdZXxlrEduPGHkTRa0viPxGH0e6jn0Oz/4S HXjp2m2Z1nUvtQB53Y/sH/so6c3h6S3+FEUkvhXwZ4h+H2gzX3jP4h6pPY+D/FNh4x0zXNFafUvF t3NeR3en+P8AxhaQ3d89zqGnxa3ONNu7QwWZtgDqde/ZH+Avii6ur7xH4W8Ra5fXuheHvDdxfap8 UPive3p0fwvpfibQ9Jgju5/G73FvcHRPG3jbRtX1K3ki1PxHpPjXxjpviK81Sy8U69BqAB3vw6+C Pwv+Etz4iuvh34Wj8My+KvLGtLbarrt3bzRw694t8TwwWVnqWqXtpo9rBrvjrxXfw2ujQ2FtE2rP BHEtra2MFqAcd4Z/ZW+BfhDWvDHiLQvCOpx634O1XU9b8OajqXj34i6/cafqms6h4v1XVLtjr/iz U1vmvdS8feMb2aPUVu4Tc+IL+VY1ZozGAb/jT9nz4SfELXtR8TeLPDF3qGsaxZ+E7LVZrTxX4y0S 01KPwL4iTxX4QuL/AErQfEGmaTd6l4f12MXWnavPYvqsMDS6abxtMnms5ADyO1/YC/ZAsreKztPg noVvZw+KPD/jRbOPXPGC2j+JvDA1n+x9UuLb/hI/Iunin8Ra7f3ttcxy2Wsatq+oaxrNtf6rcy3j AHqfgj9m74I/Db4b+K/hD4F8Aad4Y+G/jaDWbXxL4V0y/wBbjs76117QbfwvqVpBcSanJqGlWh8O 2dpo1ja6ReWEGkWFrbQaRHYrBFsAOEtP2Iv2WrDWPEfiG0+Eumxa94t0fXtD8R60PEHjF9V1Wy8S ave67q00+oSeInuk1d9T1C5uLDxBBLFr2jRmC00bUrCztLS3gAIbn9hr9lO71TxXr1x8INKl8QeO pdIl8ZeIzr3jAeI/FB0bwrrfgeKPXfEC+Il1nUrfVfCHiTxB4c8V2t1eyW3jbSdZ1K08Yw67HdzB wDobn9kf9ny8l0G5vPAc13d+FfE/j/xj4Wvrnxl49uNQ8M+IfiprFrrvxFvPDuoS+KHvdDg8Y6ha n+3NL0ue00m8sL/W9IaxGkeINdsdRAOl+F37O/wd+C1v4cs/hh4QPhOx8J6H4q8O6DYWniHxVe2F ppfjbxHpni3xOJ7HVdcv7TUtQ1PxBo9hfDWdUhvdZskS4stOv7TT76+tbkA9roAKACgAoAKACgAo AKACgAoAKACgAoAKACgAoAKAPkv9vr/kxT9tT/s0v9o3/wBU94yoA/wu6AP9Ef8A4MeP+SO/8FCv +yl/s/f+ot8UKAP7saACgAoAKACgAoA+BPj1+1X8aPhd8XfEvgXwF8ANS+J/h7w18J7Lx9Jqdpbe N7IahqsuvC31TTj4h07whrul2kGj+HYrrVIrXSNL8WX+rX0Y0p30fUpLDT9TAMrVv24vG6fELWvC Og/sxfEy88MeGfE3wgsdY+I2s6R8QtH8P3vhT4j6PqFx4k8SeH7CL4W6hrupXPgTXj4a0qXSBpol 1iy8SW2rXE+gx215BbgFrTv24fFuoeO/BXgcfstfGGF/E3xek+Fmu65No/iqHSPB1vaweGVv/F97 dXfgS1g1TRLTUNd1KFrzTrhtDbTPDupa0fEKWsV5Hp4B2H7R37U3xA+DeteK/DHgn9n/AMafEnUd L+EfiXx9oOvWlp4pk8N6r4k0zwp8Qte0zw80nhvwb4l8ywXVfBWi+Fteli1CLxRba/8AEfwDZaF4 T1+11e+1PSADd+L/AMXfjd4D/Zq8L/FLwf4R8E+MviTc23w8l8U6JJYfEyHw9GnitrCw1i98O6Bo XhzxF8QJ4tO1bVLORLDU9NtrvT9CXUdU1mWCTTJbSYA8n8HfthfFia40vQviR8D9W8Ma5F8dbr4a 61qvh7wz8TvEfhjUvBU2o/FvStG8Y+HpX8HWFxab9U+Huh2+o3uqTz6Db6L4u8P+KkvfJ1+00axA O38NftUfELxt+yT48/aH0n9n7xn4W8f+HNM8ZS+Gfgv4ytvEia74l1Xw8xi0S0Eln4Uh1c2niS4a G3+3aXoGpxadKboFr06fcgAHzNF/wUg+PlrZa7a6t+wB8az4q0S41OJrG2udWXRL6WHxxPoFnaad q1n4H1ybUoY9EKSTeI9OsbvQdS8Q6J4ng02ZfDKeHvEuvAH2L+zX+0n4k+P1x4li174FfEb4OLoW l6FqMP8Awndhq9lNPcatqHiHTrjQr5NV8O6BBBrtpFoVr4lht9DuvE1hP4O8VeFNUv8AUtI1jUbv w7pwB9XUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQ AUAFAHyX+31/yYp+2p/2aX+0b/6p7xlQB/hd0Af6I/8AwY8f8kd/4KFf9lL/AGfv/UW+KFAH92NA BQAUAFABQAUAFABQBX+12uLc/abfF3IYrU+dHi5lEUsxjtzu/fSCGCeYpHubyoZZMbY3IALFABQA UAFABQAUARRzwTNMsM0UrW8vkXCxyJI0E/lxymGYKxMUvlSxSeW+1/LkjfG11JADz4fP+zedF9p8 rz/s/mJ5/k7/AC/O8rPmeV5h2eZt2bztzu4oAloAZ5kfmCIyJ5rI0gi3L5jRqyq0gTO4orOiswG0 M6gnLDIAhmhWaO3aWMXEscs0UBkUTSRQNCk8scZO944XuLdZXVSsbTwq5BlTcASUARrLE8kkSyRt LDs82NXVpIvMBaPzEBLJvAJTcBuAJGRmgBIZ4bhPNt5op498sfmQyJKnmQyvDMm9Cy74po5IpVzu jlR0cB1YAADPAJ1tjNELmSKSdLcyIJ3hieNJZliLeY0UbzRJJIFKI8sasQXUEAh+32JYJ9ttN5uz YhPtMO43yxGdrMLvybsQgzG3x5wiBkKbATQBboAa7qis7sqIil3dyFVVUEszMSAqqASSSABkk0AN ilinijngkjmhmjSWGaJ1kilikUPHJHIhKvG6kMjqSrKQwJBzQBJQAUAFAEK3EEhnCTwubWTyroLK jG3l8qO48ufDHyZPImhm2SbW8qWOTGx1YgEiOkiLJGyujqro6MGR0YblZWBIZWBBVgSCDkEg0AIs kbtIqOjvEwSVVYM0bsiyBZACSjGN0kCtglHVgNrAkAfQAUAFABQAUAFABQAUAFABQAUAFABQB8l/ t9f8mKftqf8AZpf7Rv8A6p7xlQB/hd0Af6I//Bjx/wAkd/4KFf8AZS/2fv8A1FvihQB/djQAUAFA BQAUAFABQB8jfti/Cz4OfFrwP4F8P/GXxj8O/BWl2PxX8Da5od98SLiCPS9a1LRtUTVdT8HaRb3X jHwZFLrnjLwzZa34cS7hvL/UtL0nUdXv9L097uJJ4AD5S8KfCL4d/Dq30/TPDv7dnwz0/S/Cfxp+ JXiuLTtU8QJer4b1/wAQ/D7x54P8Y+B9GE3x5gh8MXmhp41vPFradDa+X4Z1zRrPULDQNHWXVTfA HqnhLwx8ONK/ZR8Ufsw+Jf2s/C/xZ1LXPht8ZE1b4y+O73T/ABbZ6f4evdfXSNb1fxIbvxve2f2b wNqPjzRNGs7TXfHVtdGWG1RLlFsp4rUA8s1r4FeBbqPxXczftq6b4d8N6Z4d/Zy8RWlnYeIfF/hP 4QeD30RvhLdfCTUNFj0v47aL4c03wz4wb4OePruDwz4P13w7eazYfFu9u7rWb1rHw7qOogF3wz8F vD0fi59S1P8A4KIXHxAtdR/aQ1LU7zwzqnxQ1W0Fz4mvdO8YabY/A2xHgr44eG4bTUNJ1LxZol7a +EU0yeCd/AXgayvPBc7Wd/PqgBi69+yNB4KfRfDfxZ/4KHfESy0az+EPxS0bUPBWvfEHWvDd74g8 Mal8OvEGmeMvHv2jW/ivqPivUJtFu9Q1fx7rerandeIrDRjouiQaJ/widroM13egG38QPCXw48X/ ALJfhL4jeLP2tL3UfgtqGnfBe40fV/G/w0ufFXwX1ZdA+IvhS/8AC+tSeA/Efm/G7Urnxvc6XY+H LuXxd8ZNftL2LXbvURbOl1ZCAA8Xv9E+FOiaHp+gaR/wUk8Y6HJZ/G74ZeJNO8dO3xQ8SWOp6D4T 8La5a6B8O7vxHefES78CXfh69vPBHjjxB441/wALnw/4Nu9Ts/GOn+NPD5OmW8OigH0To/wO+Hn7 LPxK+GnirxB8ZL3QdW1Hx7+1X42vQPCnxpk8I+N9P+Luq2fxd8T2Xi7UofiZ4h8I6f4p8BaB4Gns /DfiHx5PqFlf+EdJvhpHg+LW9Ji1ixAOn+KHg/R/2jPCviv9oD4e/tWWnwq+Evjj4MW3gFPHNlpX iLw7N4ah8JfFM+INX8WP4r1T4i+CE8POlzpuveCtb0+40DQrpra7uYdZ1S9gs4NPABm/tBXfwz1H 9nrwt4Nuv27LH4aXfwDuvhhqfxK+Kfh/xfbar418RJo/gvUY7Cz8U6N4b8Z2esf2h8RDs8Z2mnXf 9vHWZNN+0WejayES8twDwX42/s5Wngj4meG5fiN/wUH8TfDDXvHMHxX034X3Gp2fjvStc03wrq2o fCaTU9Jt/HUfxgs9FCaMfDPhXQtVk8Q2troOsp4vv59H0DQfGd7o/iLTQDJ+HPws+GvjCGw+BVt+ 3Z4s8d6r47+E3xw+H2iR+K9H+Mll8S7y0+It/pGtRX2h+NvEvxPtdRtbvwdrvwX13W9F0eQya3r3 hj/hM7W2v18OR2V5pQBtftBeAPBfhXVPidpfiv8Abm+JHwI13VbT4L+I/HepaL4e+OlnZNeeFvCk Xga1uPDWuah8QtV08eDdXsIbbxP4gsvCms3finQvEvh+48VfELx9rGhaP4g0wAH3J+zt+zXrfwR8 afGXx1rfxe1v4sah8XpfCzpfeJLHVP7W0yz8K6n49vtKW/1S+8YeILLVJV0/xta6HFF4b0jwR4dt dM8N6abHw5b3N1fXEoBxvw4/ZJ+IPgbxj8LvFV5+0Rr+q2Xw4vPGTXPhPS9I8aaH4W8WaT4y8R/E rxJdadrWiXvxd8R6Tf3llP4+0y1s/EGvaf4i1mKDwVokkVzDcTXMoALnxW/ZD1b4gfFX4k/F/wAN /Fe78AeL/G3w1+F/w50HVtO0nxfdan4Psvh5471fxpqiR3Vh8UvD9jeaD4/h1q40TxToek6T4YvJ orLSb9fED3Ftdx6gAZOn/sfeM7G3mjn+L3hbVb6X42/BD43HWtU+D9xdaxPr/wAI/Avg7wPrEt9f H4nrJdeIfiDB4KsL7VvFq+Rf2X9q+IrKW11eDUomsgD0r46fs8eK/jB4s8P+I9C+Ofj/AOF9povh LxT4d/svwlqPifT/ALNrGu2lzDpvjfRm8PeNPC+kP4k0iW4RZYvHegfELQrmwtYINL0fQNRNxrE4 B8163/wT68e+IvDnxE8Na5+1b4/1fSfiP8NPGHw01DQ9UHxO1Pwvo2k+K77VL6KPQ9HvvjtcXsVn 4d+32ljpEt/reoeLZ9J0yDRtZ8Z6npE9zYyAHYP+xD40GqbrT9pTx1pvhIeKfBGqp4F0qf4l6Joc PhTwrNeG68B2UmgfGnSLrSNFOlXMPhHw3/YL6TbWHhCzhtfHGm/ErxIsXiuEA840P/gnp8avD2ta RqVj+3j8bZ9P0/xbceL73Q9VbxtrVrqVzewSaff6WbvVvjBeaha6HeaPPdac2ircTaTayzJq+n2N nrNpaX8IBvw/sDfFGPRL/RW/bQ+NIZ/CN54Z0LWotW+I51rwzJc6jrF/NcWc198ZL+w1yz1mPWZL LxMfGGneI/FclvYaR/whnjTwK+lWDQAHuHj79mPx74t/Z58AfBrw/wDtMfFTwH468CR6Kv8AwvLR pp9Q8YeIzZaBq/hrWU8RWWr61cprMGvaXrl6SNa1PVbvS9Th0rX7O+PiHR9O1WAA5mX9jzxGdftd ct/jPqCDQvju3xi8LWFzp3xAureLSLz4TW3wi1fwT42cfGWCX4ii+0qwsfEUWqa60Wjw+JTqkl54 P1LRNVl0OIA6H4afsmT+Bf2W/F/7L2r/ABY8XeJtE8ReDda8C6L4tiuPEek+IPBmhaz4A0vwc8Hh +9u/Gev65bCx1e21bxVpcNv4itLXS5dZ/sPS7ey0rTrVCAeK+Jv2BPiDr1z4s1TR/wBq/wAffD7W vG3hjwZ4d8SX3gKy8b6bHq3/AAg8fwztNJub8av8Ydd1O4kuNL8B6zo2qawdXTx5qej+NdR02/8A HNzaWMMVyAfod4Q0O68M+E/C/hu+1zU/E974e8O6Jod54l1qaS41jxDdaTpttYXGuatPLLPLNqer TW739/NLPNJJdXErvLIzFyAdFQAUAFABQAUAFABQAUAFABQAUAFAHyX+31/yYp+2p/2aX+0b/wCq e8ZUAf4XdAH+iP8A8GPH/JHf+ChX/ZS/2fv/AFFvihQB/djQAUAFABQAUAFABQB4B+0D+zp4L/aQ 0rwL4f8AH2oeIIfDng3xvP4xvNG0HU5dHj8X2t/4D8cfDnWfCXiDUbEwawnhrXPDPj/XrPV7bR9R 025v4ZFs7i5ksJru0uADmn/Yz/Z6uBpCX/g7U9Vh0Xxd4u8aW1rqvjXxtqFldan468e6D8VPFGm6 xZXPiCS113wrqXxL8L+HfHP/AAiOsw33hu28Q6Pa3NppkML3VvcAGZefsO/s43nhPRPAv/CKeI7T wb4e8CeLPhvpvhqx+I/xDttIbwt458RaZ4t8VwanaL4nKa5qWt+I9E0TVb3W9b/tDV5JtG0yL7aL W1S3oAW6/Yh/Z4u7O206Xw/4wSw0/wAI+AvA+kWlv8VPidbQ6H4b+Gui+IvDnhK00PyfFqPpNxZ+ H/GPjPRr7UrF4dS1nTvGHia21i7vk1e53AGZb/sCfssWepeF9UtPh5f203gvxlpPj3wxbxeOvHws NI8S6F4j8QeLdIurSwbxK1rHb2OveJ9Xu4rERizaCePTJYX0qCKyUA9T+I/7Nnwg+LHimDxn438P ajqHiGDw9/wjP2uw8V+K9CguNNgsfGen6TLeadoetafp17qnhq3+IvjtvCusXVrLqfhy68VatfaR dWt7JBPAAS+K/wBnX4V+Nvg1pfwE8T6Vreq/DPR7fwhbWWlT+L/FQ1Qw+A9U0vWfCy3niZNYXxFq P9m6loul3DHUNTuftv2OOPUPtURdHAOF0P8AYq/Zz8O2Hg3Q9M8F6p/winw78bW3xC8CeBtT8c+O 9d8BeE/FdtpPibR/7Q0TwVrviTUvDVol1F4y8T399aDTWtb3XNXm125ik1W3sbu1APbvHHwx8EfE gaevjTRjrcOl2fimxsbeTUdUs7eGHxn4Z1Hwb4ik8nT720R7u88MaxrGjQ37g3unWmq6iNNuLSS7 mkYA84/4ZZ+CI+AifszJ4TuIfg2kSxjwxbeI/EtrOSPFf/CbvIddttWh139/4oL6ncwjURaTrJLp 0tu2kyPYEA8ivv8AgnP+yVqGmxaVP4B8SR2cGhQ+GLc2fxW+LFhdQeHo/BFr8NZdHiv7LxrBfCyv vANpH4S1JGuWbUNHeeK6eWW4lmcA9h+M37LvwQ/aE1Lwbqfxh8Gnxs/gO31q18P2N9rviG00gW/i C88N6jq0Oq6Tpmq2VhraXV94Q8OXLDVoLvadN8gf6Jeahb3YBL4N/Zo+EvgjxtovxH0/S/EOt+Ov Dnglvh5ofirx1458afEPWtL8KnWdV1wWVhf+N9d164tLkXOtalZ/2pbvFqb6PONFlu5NLjjtVAND 4nfs7/CD4x2ni2w+JHhKLxRYeO9K8G6B4vsb7UNU+x674e8Ba3rfiLw5oF1axXiQQ6TFq3iPW7nU LayS1/tgahJDqj3cMcEcQB6ToHhbS/Ddx4kudNl1qSTxV4gfxNqiat4k8Q6/bW+oyaRpGiGDQLTX NT1G18LaItlodlJH4a8NQ6T4ei1GTUtXi0xNV1jVry9AOioAKACgAoAKACgAoAKACgAoAKACgAoA KACgAoAKACgAoAKACgAoAKACgAoA+S/2+v8AkxT9tT/s0v8AaN/9U94yoA/wu6AP9Ef/AIMeP+SO /wDBQr/spf7P3/qLfFCgD+7GgAoAKACgAoAKACgDwz9oH4s6p8HPB/h3xLpOk6DrV1rfxO+GngGW z8Qaxrei2sFl498X6Z4Yv9agutC8MeLLmWXw1aajN4ku7a5sLOwk0jSdTkudW08RJIwB8u2v/BQC SbULIT/s8fFODRf+Ez+IPg/WNQhl0y/1SC48K+HG8QeD28P6DZrJN4n1X4nyWOt6R4Z8PwXdhfw6 hpiJeOPtarEAYmh/8FGv+El0DS9a0j9m/wCKiz33gDUfH1zo+sat4R0jUra1tPiJc/Da00+2ik1G c6jc6lrB07UFkjWFdO0W5vr7Vo7I6YYroAjj/wCCkA1NtfGh/sz/ABoNv4X0v4Pa9rereJ10Twpo ltoXxL1n4e6br2qxXl5c3V3c2XgaD4gfaZr6LTzpmsS+DvG8TX+kW+hC9uwD074pftkat4K8S+Dd E8M/BPx1rdvr/jXV/Cd3P4t0nxX4Kudbi02bQ4oNQ+GKW/g/xPZeME1KHV7jUrOfW77wfopsNKuJ LzW7GJ5rmzAPPrf/AIKMWE1j8Nrh/gJ8TIbj4qfDz4qfELw6puNOutK0q2+HfhPxR4j0rSfF+u6f DeWGhan4w1HwZrvhVbWH+073wxrk/hqHxBY248VaQswBjW//AAUN8T+GPhrrHjD4mfs/+IDrekfB /wCD/wAVbDTfh7rkGu2/jVviprdvoWpaN4ag1C0tL2CL4e6he29l4j1G+eSW4uIrlbbToZZLK1uQ D6Y+Nv7VGifBHwP8IfHOq/D34ieJrf4s+MPBPhdNG8N+H7u41vwna+LrL+0L3XPEdpcQQrZxeGLM PNqml3Mlpqk/k3UVlbzXFrPCgB5J4Q/b1h8VfED4X+BT8APi1Z2/xU8ZePvCmleL7Y+HdU8MaRD4 B12Xw1eavrd7DqUDWov9St59Xg0ZVk1qHwTNpniuWzK6kmmQgHQfGH9tdPhF8UvEHwrn+A/xh8S3 mh6NoPij/hNdK0aOH4Znwj4gn0XRI/E+p+OZ86To1jonjHWRonimwuGm17QtG03U/GkmkXHhy2+0 OAeYa/8A8FD9TtLS21zRP2dfiVcaDp/jf4W+GPFsGrfZbbxXpOm/FD4QXHxRbXbjwvp41DUdD0f4 fia1tPH+u60i6bpq6D4ytdPXUdSsLCG7AOvn/bw0/TvFL+HG+Fnjbxci/FT4m/D+7vfAtpHqM2kW PgjxH8PPC3h3UG069nt7nxDe+ONS+I+kz6Za6OY1t7Kw8RTXJQeH7p5wDuPAv7ZGheOv2avEf7Sd j8O/GEWkeHvEviDwu3hOGXTdQ1qe68PeNY/Al9q011bSiz03w5Yao0+qeINWvdn/AAjvhvTdW1nU Lbbp8sBAPnTwx/wUyvNQ8HeH9T1z9mr4rQ+J9S8LeG9W1O3tIbbTPCuk6xq3h7QNduoNa17xF9hf wvoGqXOvf8It8Pde1u38jxz410jXPDVsmnvpxv5gDX8cf8FMtM8F+JJvDSfs1/HbxNe6R4m1rw/4 rh8O6TY3l94fh0DWr7R76/jsZJIRrks6WJ1XStP0q5ml1PS9R0S4gnB1REiAI9L/AOClV14i8O22 seH/ANlX43vqmp+EfiDr2j6Brf8AYOk3t5rvhDwz4z8S6H4WlW3udVurW68Unwbd+HpLhrKSbQPF NxHo13p9272c1+AfRHwk/a30j4t/GOb4Rab8O/GeleR8ItE+Kr+Orlba+8FXEmrt4cWXwrZavYCW GfUbM+I1WK9me1ttXbSdZfSY7u0s/tbgHlnjf9uLxBZeJ7nwR4J+CviE63aftAeA/gvda749um0H wva6Z4l8SfEDRdX8VzNY217drdxWnw5u9b8OeH7iS0fWvC3jb4eeL21C3ste/s1QD2P9or9o3XPg dquk6TY/Di98T23iH4WfGzxlpnin+0vJ0i08a/DDQdG1nw14Au9KtLK71fUL7x2upX72b6cftVrZ 6Dqd3FaXlvbX8+nAHn/wO/bfh+M3xX0v4RzfAn4t+CNXuPCGveINY8T67ZaVJ4I03WPDfiLVfDmq aNp+tpewT+I9Na90e4Sx8TaTYSWVzcz2drLbWxmMyAGf8S/22r74WeM/izoOp/Cq+8Y6P8OPGXgr wzbS+A9Xv77xLdaXr/wo8YfFfxF4j1jSdc8N6Jo9vFoVh4NvtB0zTPD3iLxNea94ivNM0onTbu9j ioAoyft7HTfF/hrwNrv7P/xRtdd1/wCMHxV+Ft9daXJpGq+HfCdj8PfF9n4a0bxd4n12SXT7eyh8 aaRqlh4/sNCt47rVLbwFa694jtv7WtdP00a2AcpL/wAFIorLw3o3ijUf2bPjE9j4i+FGlfFHSLXw 7N4d8U6mv/CQN44k0rwvrNnpV439j6rpth8PvEOoeOriSSe08ERCwh1Brqe8WNAD6D/Z+/aguvjl 4o13w9qHwn8W/C9LXwL8PviF4Zl8Yahpc2peJ9A8beH9N1K+kGmaUbqHTv8AhGtdvLrwzczDU76D UbvT557Z4ytxbWwB866T/wAFDtdi8V+LtB8T/ALxBNp2g/HTxJ8I7DUPAutXfiLUJNA8PeMtV8Ix /EDU9K1bw14dhjstcazstR0XQtJ1PVdbuLee+uLi1tdEj0DX/FAA/Q/+Ck/h/wASaMfElh8KfGNp a2ul/HiSbwtetZzeL9T8RfBnw/4F8Qw+F7KO1nNhpOsa/H4p1vSBZ620clt4h8KappTsvlpdTAFP Xf8AgpxpmiHxHF/wy9+0TqU3hrwjoOv3txYaDozaTLqmq+KPD3hPULO21ObVIjP4X0TVNfnS78ew WsuiOfDfidDFA2n25vgD0rT/ANuOHWLGTWP+FX+I/B+iWvxv+E/wdu7rxje6W+rmX4h2un6trGpn w3oV5fXljD4T03U7W01W6urt7KDVrXxE8T3+m+HJLrUgDnvCP/BRPRPEviD4PeGb/wCB3xS8K6n8 X/iHD8P7CTXf7Fh03SLq+8M+EvGOn3UupJdG31K6/wCEc8X2t9q+iWOdS0ebS9aspVnn0+TIB+jd ABQAUAFABQAUAFABQAUAFABQB8l/t9f8mKftqf8AZpf7Rv8A6p7xlQB/hd0Af6I//Bjx/wAkd/4K Ff8AZS/2fv8A1FvihQB/djQAUAFABQAUAFABQB84ftNaP8e9Y8H+GI/2e/GOseD/ABQnxC8HReIr nRPDvwy8QXU3gXUdatdN8X3ksfxUni0OKDw7oN1f+JUtdMVvEGtahpVhouny20V9dTKAfL7eN/8A gpnqGqNpdz8F/hrpHh+f4t+M9Nutd0nxD4Vl123+Cbab4di8KazpEt98R7myXxzDqFz4unjm1Dw3 LZX/ANg8ONqfhzQo31K2uwD0y2uv22br9i3WI9W0/RdI/bQtfDV3p+nHwwfAV14cvfFFlq9vb2Ot aS/ibWb7wrfaTf6SPtV5P4hj8M3N0z3rJ4Z8NXMlhp8ABy2oav8A8FEPDc+p+G9L0HwF47sdMHgX TNM+I17oHhH+1NdgudY+GkHjLxVJ4ch+Mfw0sL3VbbQ9U+MN9c+HZNP8A6Xpd/4T+HFtoOo+M4vF HiU6MAMufFn/AAUjh8R6FDafDj4Lah4el+Lb6V4qubmGHSpNN+F1trb20Ov+GZovjLq114ig1nww V1W51DWNH8I+KfDviaL+yYfhz4l0a5Op2YB9KfFHVvi3b+OfDGjeCLHVz4P1P4V/G++1fV9A07w7 eavB8TtKi8BR/CjR4rzxUToGkLqdrqfj/UbS51qM6Hd65oOj2Gt3EGnzy298AfAcmn/8FSbzT/FR TxF4u0a5tfgp8OrzwtGmi/si6jfar8ZLbQfBv/CxtImuZbpNMsk1PxPL4oGn3t3ZHwzYaFZ6m1o9 xf3fhtLcA9u8C2/7cXhOLX774geLbzx7c3/7Sfw68H+C9CuPBHwxsol+AkXiuys/iB8QdavvALga RJq3gq/13X7K21W+/tLRta8M6Fo4s2bV7iPVwD7l8MatrusWmpz6/wCFLzwhc2fiTxJpNhZXuq6N q76voek6zeWGh+K4JtEvL2C0s/FelwW2vWel3zwazpVvfJYazZ2mowXECAHw78Xbr/goBpvx716+ +EFh4a174DLoXh0abpetQ/D19Ug1eUaVZ+KrjRrK817wrrviS5hsrrWNZ0LSfEXjP4f6ZH4n0W0s r7xHqHhvxCyeHADndY8Xf8FOtP0fUpNF+GXwV17xPqfiT4Z6ja2l09hY+FPCfhS7+EunyfEXQdPv /wDhbdtr/ivWbL40Wl5aPPq2n6Bbab4H1K41Hw/rPjbUfsWl6QAfSXx2l/aPt/EHgKT4MQWF/wCE bvQ/iTpXxF0+HT/DEnia316/0PTv+Fa+ING1rxZ4x8NafpGn6NrEOsDVmh0rxjc3El5piSeGrqzF 1d2IB8eaTf8A/BTTQfCXhnwF4X+EnwX8NtZfCn4kW2qeOLbTfA2n2SfFO3i8W6n8P9U034e6L8VY 9H0y11+/07wzp2vaZDNf6RPqfjTU9fmvvDtnokulygH2L8VvEX7Slr8H/C2sfCDwRoWo/Fm7k00+ KvDniqHQR/ZsR8NazcXP2XTIfilpvhozTeMoPDmmarDD8UtVj0LwrqfiDV9FvfGes6Npela4AfO+ qan/AMFGLLVNLuLDw/4J12bRviz41m1KwhsvBel+CPFPwh1zUtJbwfosWpXXxNbxnBrXhPSp77zP Gj6Fod9Je6ddW118PPE0N5Z6hKAdh8C/E37fOt+Ivhzb/H/wJ8MfBWhz6b45v/iTc+DLDTddgg1K 0m8PJ4G0DStRf40XGp6bFqQvPF815q8HhHxYstronhZbuDQLvWdaj04Ay/jL8Tf23dM+NXjDwN8H Phh4a1zwPbfDzRvE/g7xNeeD5dTtrrVp/HPwr0PVdO1bxPr3xc+GPhibxDD4e1T4y6zH4It57Cdb Dwl4K1T/AISWWTxDfaPEAVdW8Z/8FFtK1XW4dP8AhX8LPFWjWfiy10vTL+1/sfRb7U/Dran4wgHi SytNR+NLRtpsmgaX4F1XXotVfRfEei+JPFfiXQfD/hrxho3hvT/EepAHM/Az4tf8FEvHup/A3WfH fwV8BeG/hz4m1TWpvixd6not34A8b+HtAHhTw++mmLwR4g+J/iLXtHvYfHU3inTrKO4stS1LWvDW m6Tqms6L4Nu71rWUA6v42+Mf+CiGi/FPx1b/AAQ+F3wo8W/CGPwzZ23ga98QXGl6f4n/AOEqutF0 2W71u/vL34s6LFqOkaPrcupQt4fufDXhubUoLaOOHxFbxyJqMgB6H+zH49/ah8deIviLF8ffBnhj wPo/hSz8BaXpFpo/hfxPpNxq3jbXPBeh+KfiFaabret67qWl+JfCnw/17VbjwJp/irw0NT0Txjfa fe6nZaraNZXOmAA860DxZ+3lqPiwXvjL4S2eh6Ro/wAaviLbaFZeDvE/wzu/D+v/AARvfhd4ng8C 3nxBTW/HD+IrrXdM+Kw8KXC3PhF/DWoXXh/+0JNR0CzbzLKQA1PgN4v/AOCgOreJPh7bftAfC34W eF/Dl3p+rt8Qbzwvf6fdzWEyy/EFtOmtLm2+JGuXNrrIlsvhhaWmgWHh/wAUaDf6RrvjPWdT8caH q+kaR4augDG+Kusft4p8YvGsngbwTDf/AAg0nS9CtPBFn4avPhnb3fieUePvgfq+rapqWr+M/iZo et2+vzeDh8cvDs1m+geHPD+iw2/hq4tZfG1/qom0oA09P8T/ALfl146ubvWfAPgXSPhzpP7Qd7p1 ppeiWvhXV/Ffiz9nu60LxtZ6ZrVxcan8YdN07Qtd0zX4PA+p6pdJdPq9xbajqT2Xgu5TTpNBvQDz q7X9vbTPhH4bt/Cvw18P+GviPq/w1+OWoazofw90T4P+DvCfgn4uX8nh+9+FqXdjrPxs8W2PiO11 DWLHxXe61qWnXc8WqxeKbafV5PDd9b3YjAOhvvFv/BSS/wBP1Sytfhx8NvD99FokGv6R4gt7Dwtq z3c1h8Qfhgn/AAh994bvfjxHbWvjLxB8N4fi3d6naReIJvA+ia9e+EtM0v4pX6Wl5rU4B9BfArxD +1NrfjX4ux/HzwL4E8HeA7TWLP8A4UzL4Xv4r/XdT0KS/wBfSZvFUtv4r8QQf2iuiQ+FbrUIU0/S ILDxHfeIdN0y68RaLaaZrEwB9D3miaLqN/pOq6hpGl32qaDLdz6HqV5p9pdX+jTX9s1nfTaTeTxP cadLeWbNa3clnJC9xbM0ExeIlaANSgAoAKACgAoAKACgAoAKACgAoA+S/wBvr/kxT9tT/s0v9o3/ ANU94yoA/wALugD/AER/+DHj/kjv/BQr/spf7P3/AKi3xQoA/uxoAKACgAoAKACgAoA+OP2z9Ml1 HwX4EFr+1a/7JF5P4/XR08aSXEKWPi+y1zwn4ps9Y8CtBeeIfDljDqt1pS3fiHRfEjXkmoeDrjw7 N4k0gWl/Yx6pYAHgel/AXxhf6vp+m63+3RF470KDxf4zsdW8I33izxYr+Jru+8GXlnp/h/xAmlfG aJb6+t7uFPFXivwMLKHwHcWWkzWHh7wL4T0rVPE51YA87+F3w7HiP4bfD3QPAv8AwUA8H+LrDwn8 EPiH4SX4kjUPFOm/EPxL4Gvfi14U1H/hZVjqdn8Y9KttB0zRD8L77wEvinwZpmmeFL6xvb5dAuNM 0fS9E0mzAPffg94A+MXwf+JVx8VPi1+0oPiZ8DH+DXgjwfod/ea74qlh13x/rl18PNA0/XLPwwuu +IvC8tvdSaBcXWleJLZrnxj4i1n4naxFq2q63aQWVxAAed6f+yD8Z9W+I3xV8W+E/wBubUU1bXvG enjXz4b07W73XfDB0TXNf1bRLbWbZPiteeHT4h8NaDrQ8JaX4O1PwtbfCafSjdatrvws1XVv7Nn0 0Ay2/Z++KniHT/CvgDwh/wAFEfK8Ua54c8VXt/Hpvif4heI/EPie10m28U+ELjxX4NNz+0He+IdM hsNZ8TQ6j4sMF9q2j6V4q8N6Hp/hyLwta2CWsIBw1h+z/wDEfwlffETwv40/4KneKbuTwlbfDnw3 r+k+J/EWs+EdS8EtrvjT4c+IdETUdVX4pab4k+0eNtOLeFdI8WNrw1bVrr4i6joM2p6lBpOlaFZg Ho6/BXx1NG2keHv+Cg9lY38X7RvgvxP4sv4PEWvX2tal4l0nw1baf45+DFxZ3Pxmn0zRdK8SeIGT XdO+H2iaZo6afa3Uem6lYa0UtrxAD3v9pLwP8QvH3jv4O6z8PP2qrj4MaTbX/wARfh43hDRNF1Px DF8RfHXiTwd4jsobTUJNE8V6RD9u8DWuk6v4otodQsLiXw7qfhibUEvdNb7Y6AHnkFt4W1P9ku5/ Zg8YftXeFfG/xM8d/Dn4yaZa/F3x3JrDXd7p+i+L9d0rXPG1zaz+MtN1q5svh1dXcOk6T4gPjHS7 HVrnw/aarpN4unKbaAA53UPgf4g1Txn4h1fSv219K0u18L/Ez4Tala/DjT/Fnje28HeBdf0zw5ot poXw3vNJ0z44abead4e8Y+Htb1DVLLwba3GijxNca14av9Tt/EEOmWwuQDH8IfBTx8NZtdQ1f/go xefEDTb74l/GS3s7WTxfqehTXXiS+gsfC+ieD7BPBXxS0LTJ7z4Y+M7eFtW8Dvpt9oxvZm0az0Lw 42pXsd4AcJ4l+Ani6w8N2Z8Z/wDBTnxKvgjUPhL468L6faaZ4l1gXGqvrF74x0+y8fxa5ZfEvUvG 3ik+HNc8V6H/AGzrX9tzXej2vgLTNL0/XfDmj3muRqAe3/Gr4RXXxS8DaVpet/tleFtOs9Ig8Aa/ c6bqo0F/AOhInhDWdCtfFuharpfjTwz8YZr7X7i7m8W+HNW8d/GjxhYS6zpwvo4rxoYZrIAj1z9n r4z+Hr34fyJ+2r4p0e61j9pux8a6eNRXx/4jHxC8GWcs3iTQfgtNYXPxOm0iy02fw3p/izT/ABPc 6Fpul+HdcsL231y40KyuvCuix0AeVeHf2dbX4a+ENH0fwp+2/wCFfCXiex+EX7TjeJPEMfjXxpc2 2sQ+L/Era9q/x2Ok6n8d7rzfFHww1eM2HiLxl4mufFFtYQqy20vhm6sbXyAD7S/Z61XUPD/wZ+H3 izxN+0F4Y+Knwtg+E/hTyPih4g0bVfDus+KNfbVNXe/+IGteNPE/jO+t5tB1/SL3w3p2maXfaNba jHqOn32sz+I9Rh1+00nSADmP2n/APwn+P+n+CdK1X4seCfD8vwy+Kvg3xBrguvHOqWIOnyX039pe FLiHwp8QfBkumeIvFdlpV7pegarrMmptpRi1afTtHurgT+WAfK/w9+EmtfBfxb8E7HWP+ChGpxeC fhl8SLr4cz/DC5TVrDRfGviOz+H/AIEutV8ENqHiTxj4gur+z0+60/WtTl02W51Pwp4AsvFR8OaD D4d1bQN0oB7X+0JofhbxZN8afidp37RvwU8A+Edd/ZP8VfD3X/EF15+pal4b0m18Uaq9x8S9U8Qe HfiV4fTUfDfhS8u9Y0a20f7DAv8AblzfabNrTi9vdHuADziL4aeJvHut+OPiaf29tJudMm+JXwK8 aeG/COn654v8MeBPhtqem+Fr2+uPAOr6Hp3xi0DXrDR/iXoHjOz1qPwVqGoaPeXcln4fvNYt9Yjj NsgB9HfGSMeNPid4Fn8PftQWnwnh+GPimHQvHHgmW9vtLtPFuuXDeAviQdFjni8W+FdP1bWbvwFb y6BqOk6va+NrHRvCXxIvPEunaXovi7T/AA/rMQBw3gL4ZaH8LP2TdJ/Zu0T9pXwb4c8fWWiX0knx T0/xLqUOp67f2vi271rxd4hvxrXxN1Lx4kvidtO1/R/GWtab8QbXX9JmutevvDuveH9T02xl00A8 v1L4NeOyluIv+CgGnW/g1tO+Fk8tpceOPiDFqkkS3/wym1IW3jq3/aDt9dXR/iFbfDvxppmgX8l1 P4hkj+J3iq4uPEXiLUNJ0y5iAH+I/g7421Ka58WeH/2/fEei6TpP7Uuprrdn4X8QeKfF9i1prnjX S/DXgz4C6pZ3fxB8SyaRr/hTX7y68I3thpNto+ma/wD2483irwqtzoOiXWkgHsvwa/Zb+MPw18Yf DLxX4r/aU8VfE8+CdC8YeF9e07xRdfEi7tPE+k+KdN8ETxahJb6h8VtTsbnxNpni/wAPeJtWs9W8 V2XiyPT9D8Xr4d0W00uLw3pN0QDU+L/7L/jj4ifEfx5488J/FdfhrJ4z8B/CjwTDf+GrTxzpfjTS oPh/8TpPHPiV4fFHhv4keHI4bbx9oFxN4L1NdM0vTdTtbG10y5k1W/itW0+QA8xuf2Nv2jPsqWuk ftp+PtBkuvih4W+JfiHUtPsfFFzqWvyWvgq28P8Ai7wyTrfxD1nTNC8JX3iaB/GOgeFvDel6VoEL zPo3imw8U2sdrc2oBbf9j/8AaI/s3w6unftlfEDQPEWnQ/FRNY8QW03xE8R2+oXXxA1OIeHtTtvD PjT4ra/4eWb4d+GUbRvDWnatZavo0OpBPEsNja6w91PcgHRfCz9lH43+ALmXUNW/a4+IviXWtX+G Np4F1jxHqMN/r+r6Tq2kfEHxp4x0jxJ4R0jx14h8X/DhLptF8XweDdVvfGHw+8W+IbvSPDemyQa9 azXVx5QB9xaNZXmm6RpWn6jq954g1Cx06ys77XtRg0211DW7y2toobnVr610ax0zR7a81GZHvLmD StN0/ToZpnjsrK1tljgQA0qACgAoAKACgAoAKACgAoA+S/2+v+TFP21P+zS/2jf/AFT3jKgD/C7o A/0R/wDgx4/5I7/wUK/7KX+z9/6i3xQoA/uxoAKACgAoAKACgAoA8f8AjP8AA/wR8eNC0Xw149bx EdG0XXLvWxa+HvEOpeHH1RNU8I+KfAWuaJq91pcsN3eaBr/hDxr4l0LV9PSeAz2upO8M8FzFBPGA eF3v7A37Pt/deB764svFy3fw7+MHi/45+F5rXxRcWH2b4heNvGOn+PdY1G9isba2g1WCLxRpwu9N i1KK5m0+wv8AWNAguf8AhH9Y1HS7gAr3P/BPz9ne78F6D4ElsPFg0bQPhNcfBGOePxGU1PVfhuda k8QaXoGu3gscarH4f1We4udHlnh3h7iRtS/tF/LZAD2LWv2cvh7rPwL0D9ndLjxZo/w78M6L4J0D Rzo/ia+h8S22m/D640i78NI3iO7+26hNNbXOh6bNNcSu08724y6g4oAi+Ef7NPww+Cd58W9Q8Dwe IYb/AONvi/U/HHj+71HxHqV3Le+INXm1K4vrvTRHJbR6O8txq+oTtc6ekN/JJNEZryUWVgtqAed/ Bf8AYY+AnwC1HwXq3w1sPFWmal4Gm8dvpd7feKb7VLq+tfiNJo134o0rWZ7xJJr/AEu51fQ7LX4b QPAItbl1C+Z5G1O/S4ANj4gfsZ/A74meMvG3jzxXpOtXXiTx9pljpmt3UOtSxQxDSL74W6vod7p9 q8MsFve6FrXwc8Da1pRlS4tbfUbPU5GtZYtc1aG6APM/iF/wTx+C/j/XdH1C51HxVp+hH4k3nxN8 b+F49Skns/HGt6n8Ntb+Gut+fqW+31bQrjxRp2tSaj4q1XTLr+0tWvoy8E+nvIJogD3/AEb9nP4c +H7641PR18QWOoSav8bPEVndxa3OZdG8TfH7xGPE/j/xNo3mRutjr3243Ft4e1FVeXw/pV/qem2O 221O/W4APEPG3/BOv9mXx3ffbdT0Txdp0f8AwgOjfDc6boPjbXdL0p/DehaZ4c0SxinslnlS5kk0 Twj4b0nULe6abS9UstL26jpt1LqGrS6gAU/EX/BN/wDZl8TeEJPAd/pnji38KTH4aT3ek6b481yw S/1P4TfD2z+FnhDXNTngkF1qet23grTNI06fUdQnuZhf6VZeILL7F4h+06pcAHfD9ir4Ir4msvE8 dr4ngm0zxV8X/GWl6VbeIZbXRtK1345oX+It5pFvb20V3pFxqeovNrOn3+mXtpquh6pKJdJ1C0t7 axtrUA8u0L/gmL+yboHha58FW3hnxRd+F9R8Na94S1rSNS8Yapdwa1ofiXVvGWr6va3cp2XNkLmT 4jfEGycaHNpCSaX4z1mxnjliXTf7PAL8H/BNr9mC21y68TQ6L4qPiC//AOFam/1a78UT6peXzfCi fwLP4S+1vq1rfLPCjfDH4frqVnIpsdQ/4RXT5pbVbmfUp74A958afs5eCvHr2Z8Q+IPiNPb6d8UI vivp9jF461gWOna1F4Sh8Enw/pUEzz/2L4Hl0IagsnhLRnsNL+3674g1ONI77VrqdgDxLwl/wTm/ Zi8CeGLLwn4O8PeIvDumWfhT4meBpJtN8RzxalqXhH4raHpHh7xNoWrag9vJcahaw6boGiLpMsx+ 2Ws2mxz3F1eSXF8boA9U8Qfsp/DXxP4Q0jwPrGq/EG48P+HvDPw58OeH7JfG2qRWeiT/AAt1m+1z wt4q03R4wPD0PjJrm++y63rz6PJLr+lWOlaXqsNzZ6ZZxRAHh3ij/gmx+z/q/g6LwT4e/wCEi8J6 aPib4T+Ist1DqD6xqMcPhnQNI8IS+FLO71JmlfRdV8HaHp3hyUa+3iE2lvC17DG2oyPdEA9I8X/s OfAjxtf+CdX1e18YRaz4FfxDcafq2n+MNUtb7VdR8UeI9Z8X6zq3iFiZYdT1S78U+JPEOuS3Xk25 uLvWbuK7S5sUs7S1AOJu/wDgm5+zLeGBn07xrDJbfAp/2c4mtfGN7bRL8Lpfsn2nSksooF0+G9uz p+nTXN/b2kLyX1imreWNXuL+/vADp/Hv7BX7PvxJXX4fFOn+K5rTxT408D/ETxBZ6b4nutGt9S8b eAvBv/CA6X4lf+y4bWa11a/8LrDYard2E1rK0sC3+mtpl/Ld3NyAdd4h/Y++CHivVtD1vX9E1TUt R0fWviFrdzNcaxPIviKb4neJ9N8YeKLTxHGyFb60/t3QvDkujPbiy1DQrDw3omjaXfW2jWjWEoB5 xpv/AATx/Z503RvFeh7fHmpWfjP4ZeKvhJrs2t+LZNZ1GXwf4z8R6t4o8RRWmp6hYz31hf3+oa9r ML3lpPF/xLtRuLFomhEPlAFTxT/wTb/ZW8Y+J/FfjHWvCest4h8a6dpWn+Ir+012SzN4dL8JaV4J W8ghgtlg025vND0HQftcemx2mnrqWi2GrWNjZais9zOAe2+FP2YfhX4M19te0S11tAfiVqXxfTQ7 nWJLjw7H8RdZ0PXdE1bxONLaILLfX58Ta5rUpuZZ0j8QXkWp26wPpmkJp4B7F4S8MW/g/Q4tCtdW 8S63DFqGuaiNR8W+IdU8U64769rupa9Nay6zrFxdX8un6dNqcmnaHYvMbfRtDtNN0awSKw0+2hQA 6SgAoAKACgAoAKACgAoAKACgAoAKACgAoA+S/wBvr/kxT9tT/s0v9o3/ANU94yoA/wALugD/AER/ +DHj/kjv/BQr/spf7P3/AKi3xQoA/uxoAKACgAoAKACgAoA8Q+PvxiPwR8I+HfFC6b4c1Y6/8Tvh n8ORbeJvGg8DWcB+I3jHS/CI1WDVD4e8S/bZdCOqf25eaULK3M+i6dqt19vt/seJAD5fg/4KMfD6 a/s0f4XfE610YeLfiF4P1rWLi4+Hs8um6j4K8ON4j0Uado2l+ONS1LxRffEeO01nT/A/hfQo7nxr qWoaNd28nhqKR4UcAydE/wCCmfwy8SaDpuvaJ8Jvi7dLf+BL/wCIMmm3dz8I9F1Wz0az+IM/wzgj ex1v4p6dcXk2peJ/sCWl1p0d3pMFjqAudV1HTZbK/t7cArR/8FO/hjqb64nh34S/GLUY/DNh8Ida 8Q6nrFt4E8H+H9M0H4q6z8OdLn1iTxD4m8b2OkGw8HxfEvS59W1V7qLw7qE2ieK4NL16e10C91FQ D034r/ttaF8PfEfgjQ9G+Hfi/wARR+KPGWp+Eru48SaV4u+GF1evptzoFuLr4VW/jHwTBpvxke/T XDe6c/hfW7TQbrT7C4u08R+XJDvAOCj/AOCl/wAKJbP4czj4ffEWC6+LHw9+J/xH8FQXN78NprCX SPht4S8V+Kkg17xDovj7WvD+hXXit/A/inw7pcUupXM+ieIdPtLHxjb+HP7Z0mS7AMa2/wCClGge Hvh1rPjf4p/CPxJ4evNF+Efwf+LUeleDPGfw68dJ4q0/4u6zFoUOn+CnXxNoupa3H4P1O8s7DxPr r6XaaNHfC8srW5lvRp1rqYB9JfGr9rf4c/ArwP8ACPx94t0nxhe6R8YvFngrwroVrouk20+p6R/w mdmNQTWfEEF7f2MNpp2g2Tfatcht7m61VIUnbTtO1BradUAPKPCf/BQr4ceLfiB8Mvh9a/DT4tW9 58V/F/jrwj4Z8QLaeA9b8LJL8P8AxBL4U1rVNR1rwx481yG2tX123uWg0xVl8SweHhZeKtU0LTtE 1TTrm4AGfHr/AIKAeCfgJ8Xb/wCGGteBvE2sweGvA2r+NPFms22r+DdEudsMfhWfQ7DwlpPinxHo cniGHUo/EN1FdeIdQufD/hS31PSb/QbDX9U8Q2Gq6Rp4By3jj/go94Y0TxF4p+HXhf4Y+INQ+Jvh TxV8A/Cuo6Z4x8V+BfBvg6O4+OGqWWn3F1F42Gv6zZamnw9+1hvEMekW17Fqxn0688M3mq6Bdy67 agH078PP2jdD8c+BPi342vPCfiXw3N8GvFnxW8M+K/CBuPD3ivxg8fww1nX7EajZaH4N1rXLxLjx fpehrrfhrw/qcWn6/fW2o2D29jc2F9peqakAfHvhn/gqn8MtW0y6vtW+F3xDgl/t3xPp+nL4d1P4 eeJtNn0zTvEvjHRdA1u712Dxra6NHoc9h4OudV8eeN9NvdX+F/wtTV/Do8Z+PrCDXLS5ABo+OP8A gqf8IfAn9n2d/wDCv4wap4k1C00XUF8KaFP8IdT1ePT9d8J+GPGNnqcdzF8Vhoeo6RLpniq1htNZ 0fV9R0vVb7S/EEOj3eoR6PczUAa3hj/gp58HvF2pWdlpPwy+NkNre/Eay+Hkep65oHg/w3DHLf6r DokPiCax17xxp2rjShqVxbtJaRafLr66Tf6XrY0htN1GGZQDtfhd+314B+JPiz4A+AJfh/498NeN PjvoHijVv7LuLnwV4gsfhzqnhKx1q91Xwx471Pwv4r1U6dritoN7aNZpZvc6fey2VhrlvpOpPeWN iAavxz/bl8FfALXPijoni34YfF3Ul+Ffg7w9441PWNB0bw3caLrujeL9Z8O+GfCQ8PXl74psWnvP EfijVfEnh6wt9Qi05or/AOHfjOfUTY6bFoV9roBlWP7dfga8i1G8z4YTTovjr8GPhXpsy+MdOS// AOEb+NPgXwZ430LxRr2j6gmm32l6xYnxLqmg3/hrThr0kN/4fv7r7a1pZaz/AGQAdz+zx+1nof7Q vgL4u/EfSPCmoeH9A+Gviy70PT7LVdc8NSa3rekwfC3wJ8So9Q1dLPVbjQ/CWr58ZXHh/VPD2q68 134Y1bRL6w8Uy6LrFpq2k6UAfOfhn/gqB4Hf4d6D4w8e/CvxjoWtan8LNL+K+o6H4W8R/DvxRpmn aTr3k32l6VbeI9R8XeF4NQmg0q9sdO1bxRPZaZ4Fs/iAL74aHxL/AMJrbDRpAD6h+Pf7V/gr9m/4 ReEvi/8AEfw14w/s3xVrHhnRB4d8NReH/EevaXea/pd7rl2bi50/X28NX0GhaTpeqXl3caT4gv4N TNmtt4fk1a6vbCG5AMX9of8AbL8Afs2eOfhj4K8ZeEvH2up8TEvbpfEvg+y8Oano3hHTdP1LSdNu dW8TWl74l0zxHLYo+rxXAPhrQvEFy8FvcBLZpxDBMAeBeHf+Cpfwc8ZaKl94d8DfEG0vbv4WfFT4 l2w8VT/D/QtIsZPhZP44s73wpr2qN46n/s7xD4km8FSaj4PtEgnXxR4Yv5vEukyz6X4Z8ZTeHQCP WP8Agqn8E/D3iHxFoOqeBviXd6f4a8M2PiKbx7of/Cvr/wCH+tC+8E2HjOG00TV5fH1tqKz3f9pW Xh7T11vSdIN54jvbLTI8tdJJQB77+z5+2d4D/aKuPi/B4b8E/Efw2Pg/MPt8viPTvDl4vi+wa48R 2yal4Ki8IeJ/FN1qkTyeGrpRZ3sGm6oz3mnRJYvLclIwDivhn+3TpHxj+JfwZ8C+Bfh3qVnpnxNs /inqut+IPGfjDwNpdzoFj8OPDvw6123tfD2jaDr/AInPjrVtbb4naPZahaaHqB/4Q/UvDfj3Q/EX 2bXvBviLT9LANL4w/t0+AvhR41+NXw4uPDHiS48TfBf4RQ/FrVdY1GXw/pPgjUrK51DwrYQ6Jaa5 c66LtNaP/CY6XcRWF3ptrcap5N7ZaKmo6h9gtr8A9P8AhL+1H4G+Mnjf41+B/C+k69Dc/BC80611 jXL668KTeHfFsGrf229jq/gXUdG8Tas2t6EY9EngvNWuYNOtdO1v7d4Xv2t/Evh/xJpWkgHyT4W/ 4Kw/BnxRpR1QfCX456MUtNX1F9P1bTPhyL+407TdOg1CC80dLD4kX0HiIXSyySX8GgXGo3HhHR7S 68VeN4/DfhRE1mQA6u7/AOCi+gTabrF5onwe8YG9sNA8D61pOleJPGPwr0K88U6hrn7QeufALxn4 T0L7N411iK61jwRqWgza7NrSSyeB57PU9DTWfFXhuDWNMvr4A9q/Z0/bH+HH7TXivx14V8CeH/HG ly+BPDfw58UXeqeJ9M0q00zVbH4k6Cdf0230yfS9a1c/2hpEIFprVperavBdti2N1ADMAD62oAKA CgAoAKACgAoAKACgD5L/AG+v+TFP21P+zS/2jf8A1T3jKgD/AAu6AP8ARH/4MeP+SO/8FCv+yl/s /f8AqLfFCgD+7GgAoAKACgAoAKACgD52/aX8bfH7wJ4I0TVf2dPhPpvxg8aXPjPRbHWfDuq6xpui 2ll4ONvqN5rmpJd6l4j8Not/M1nZ6LpkyXN+ljf6vb6lfaVeabZ3oQA+X5Piv/wUE1fxB4W0dPgj 4d0fQG+OehWnibxb4dbwZe3MPwgt/iN4Bj1bTdQ0bXPjBqbaRqU3w0n+IWqa34q09Na1P+0NO0fQ NB8D6VqerW2u24B2v7QfxS/bo8G/FK6074DfALwb8TvhPF4DS6TWtUvdP07xEfH97Dr0UUMct78V PDaXmgaJcw6Bf6vp6eGrbUdRsJb+x0jWW1Ca3ktQDov2bvjB+0p8R/H3inw58ZPhl4W+Hek+Dvhz 8MdX15dPsvEbX8PxP8eeFNC1LxB8P9N1661XUfC/iS3+HetaV43k1vXvDdzqukajoni74YwWWow6 7pvjWyQA8g0v4r/8FHtP8TWWhS/s8eD/ABN4Sk+N3iDRb7xz4l17w14c1u1+E0vxI8TQ6DfW+g+F vHGsWuptD8MF8NaynjSa20G6j1ieXwxqfwzub63u/Ec4B6n+1R8bf2lfhRFquvfBb4Pab8UfBmm/ Dfxh4luNdgtjr1xp/izwr4U+JV+vh+80TSvG+ieJtSOseKtO+GOhaTY+GPDmu3tz/a/i1bu4002E F1aAHzzqfx1/4KZT3Oo6t4f/AGavDF2LL4c+I5vC/hh7/wADW2l+K/EGreMfhjB8P/GXitrn4zy+ LPCs9x4S/wCFqTap8M9Nnubbwnc2Fv8A2h8QvHF3e6dbaSAejXnxb/4KIWKIun/s6eBNfu9R+LWg Ruuo6vpugad4Y+EGveFrbVZIPt9j8SNevPE3i3QPEj3HhjxJ4gXR9D0zSHgXVNM8NeL7C5L2IB6X +zz8Uv2mdT8Ra3on7RPwe8TeHb7xh461yfwZc+H9M8HS+Bfh34F8MfDD4cT6haeIvEmj+PPEl5qI 1b4n6j4v0Pwhqd6F8R+NFtrvxGnhPwn4Vt47DSQCx8cPiD+2B4d8UfEG2+B/wk8I+NvDfh/4e+BN X8Gv4liWxk8W+Nta8b3Wk/EDSo9bh+JemyRR+AfAwsPGGnaNc+D9PPja/nvPDdl4r0m6tIrm7APA PB37Qv7b3jjW/Fekav8ABCXw+Ph38SPgxpeujwFYeHEubq1u9R+FmsfFfQEuPif4xZPGnhZ/B+v/ ABQgj8Y+FtL8Gz6VrXg7w/aeGtU8X3Wv6iuhAHVWHxm/4KIah4m8QWU37LngrQ9AsfHnje18LX9/ 4h0PUD4p8Gaavh+TwXaazd2PxXik8EXutRnximoePItF8aWiXWn+H4IfhvBDrDXcYBh+Gfjf/wAF BU1T4beJPiv+zcugeCdD0P4geLfizoPwlj8MeNPEfie30bwR8YbnQvCuiWes/EU65pPie48UaN8J 7Pw/4f0HT/Eg8W6j4qnubvxh4c0bTNV0sgH158dPGPxz8PfDfSdf+B3w1tPF3jm+1CzGp+FvEE2l TXGiadceHtZvgr2n/Cb+D9L1K8PimDw74W1Oa08ZR2+hadrWqeMLaLxND4dGg6yAV/hD4q/aD1/T PitqPxU8B+HfC+p6P4t8S6V8L/ClkBZf23oGlG8bQtY1XxfB4x8Y2up2viVZNNhiv08N+EbvTTb3 9xeeHD9pgtLMA+NX+Mn/AAU2g1VtUg/Zs8L6nYzfD+9ZPDt1c+DdH0xPGmnadruoGc30Hxn1jXtJ nOtzWHheHTDP4u0vx1o2kaX4lsr74XXWv6nYaeAdPd/FT/goRq/gzxAt98BbPwh4jHwmttc0ifwN deAdW1ZPictt4IubPR7E+M/iNq+gXlhrOvXvjnQNe8Nato+nyeF/CPh618U2vxE1LXvEdhoOkAHU xfFH9vS+8c6u1x8B/Bnh74baJ8b9D0uwFtd6f4n8a+LfgfqVh8SLe41pI7j4meFtE0rxNb3tt8Kd X1K5Fy6eHF8Q+J9GXw54q/4ReW/1MA4rwn8Vf+CkXiXxF8IbPxz+z34Q+G+iXfxUt0+KF74P1vwx 4ujtvh5CNPt9TsLu58QeOLW50uGyub7UZrbxJ4Z0fxRqfjKDSYLmx0bwRG8lrqQB0nx++M/7Y3wi 8ffF7XvBfwpsPHvwU8N+CfCfifwrNfaPFf6lqeu2UTnxV4K8KL4N8VSeNtU8S+Lr1dN8L+F7HX/A I0PSfEHiI+LtX8bWvhDw3qGh3gB7d8XfGn7Tvgv4R+BNY8CfD7wL49+K866dF8SdNt75NO8JaXfn wdq95cnQF8SeNPCs0Wg6n8QbfQvCra5feJNQvfCXh3WrrxhP4e8WHRp9FugDwu8+IX/BQbTPEOky W3wk8MeKrbTfF/xt0nxBo0Vt4Y8NeFvEfhO5+I3gS1+BOq6J4suPiprPiTTNS0/4fX/ijWfFWv3v hw2V2NO1XRZfh8mvDRtSAB2/7PnxJ/bV8Z+K/C1l8evg34L+F3hqTwNq2t+KrvRYf7baXxbH4o17 StK8M6bqsfxQvptDmGgp4e1+7+1eFfEtldxm/gt9btJr2KHSQDivi38TP2/tE+Nnii2+F3wR0bxF 8IdJ0HVrHw7dXH/CG6hDrmpy2XgbUvDviSSW8+LHgzxNfalf67L4y8Faj4e+zeEdI8F6HG3ju6v/ AB9PDpmgXQBBrHxo/wCCgek6Rq2rn9m/wVeXv/CXjQbDwxYahoMjaZp8uvLHaaonizVPjboll400 W78NIsq64ugeBNaXxPqllocfgG4WzuricA8/0j45f8FV2tbWHXP2TPhFHeNoXjW8n1Sz8SQRwT61 aeHr288IabF4fHxZ1NrFX11NKsL9rzxTJFr0Wo6gltdeGP7FF5qwB6DrXxY/4KEaT4f8eapp3wF8 G+I/EKeAvA178O/DcVrpen6XJ42i8fXvhn4jR+JNWf42TX6Wt34Uis/HvhXw/Y2Uxs9Ov49L1Dxf favpl5a3wB7t8afiF+014U+H3wm1j4RfBPS/iF4+17xR4Kg+K3ha813RbG08HeFrrTmvfHcum3tz 4v0m1udVsblG0zQ7m11LX7EXZjkuLXUbSVbgAGv8LfFP7Qr/AAY8Xar8VPA2m3fxq8M3HxBg0fw9 4ftdK8NeHvHUmivqE3gk+H5Ln4g+Lo7ew8TQrp1mNT8Q614dlS6muJL7SdHtoRPKAfHFz+0t/wAF CPCvgTV/HXxA/Zi8JaQnh3wDda1faDo1rfeJdS1rxlpPjPUUi8P6BH4V+JvifWGf4h+CLHS9N8JW Uvhu4Twt478YaddeMte/4Rnw7rpcA/TPwc3ix/CXhl/HqaHH43fQNJfxfF4YS8Tw5F4lexgbW4dC XUbm8v8A+yIdRNxHp7Xl1PcvarE88hkZqAOkoAKACgAoAKACgAoAKACgD5L/AG+v+TFP21P+zS/2 jf8A1T3jKgD/AAu6AP8ARH/4MeP+SO/8FCv+yl/s/f8AqLfFCgD+7GgAoAKACgAoAKACgD5X/av0 jwDq3hv4b3Hjf45+HfgLdeF/iz4Z8ZeEPEfinxjP4T0XxD4i0Wx1m3bwnfwWvj/4b3PiW21PSNT1 OX+wk8RGFrq1tL+807U7OynsLgA+KfiJ8BtI8aeNLLSNO/4KNQ/DLxFqXxi+PeueF9D+Fvia98N6 2/irV5vCPiHxL4N1Ox/4XdqWk+Ldc+FCW6X50nxH4eu4dHh8SiOXwzpmjeTpswB9B/AfXvA3wH8E +ENC8QftveDvjF4e0fwX8VfF2pXXiXxLo3iLxj41tYNbTW08W6DrU/xB8U+IT4Z+G+keF/Hei32j afH4htbye4upvt+jL4YXSZADtP2q7v4S/Ff4QeK/htrPxO8D6DOdQ+EWt63Fq3hOX4p6h4asta8f +GbrwdfeJPhtpGr6X4g0zSvFGpxWmkxa9q7abpWnWt5eahfTrZWd48YB1vw58IeGv2b7rxrZeKvj DpP9nfGL4t+JfFngbTfHfiDUrHUrPxH461e/17UvBug3XjHx9rVvrUEepaiYfDnh7whpHha307Sb e2tG0rUL9rnVrkA+afhh8KNO8LyfDn4/D9t7SPFPwa/Z8sPjPfeNIfB+oTQfCfxBp3ia88a+LtUu PG+pyfFzxvo0UvgGz8XWkx1HV21XVzZ+G9Eu7u9tpf3xAO3+IPwy0j4/fEPxrL4C/ar8OaKPiD8N PgvIvhX4eaxq0vja08K/D/4gX3jm28W6f4i8GfGTw/q8Phn4gWHijUvCup3Wi6Po1hqOkahpry6n qbQGK9APlTXfgH4/i+Ilrp1r/wAFHrzxTd3fxq8A6R8RdDtPGXirSPGHgLXL3wJ8SfCnh7RNA8G+ BPiFq1kPE/ivWZtE1xNE8dWmj+C4JfhgvizxF4f8azWPiK01UAv/AAK+B994g8N+Bn8R/wDBQ2Dx L4j8S6b8bvCGg6d8P/jX4/8AE1vJ47vdG8O+Fo/EHw+13Xvi3Y6h4u8WfDDUvC8/ijUdK8R+DNd8 PWOteK/EMGj+FfCUE1rqUoBzniv4Ia38PvGXxp0b4h/8FFH8DaRpfgH4e3FvYJ8Rvi3c694DsviT 8QtW8PabrGv+DLr4vw3vgD4aWWv32h+HfB/iceNNX8WxzaRY6n4u+KOm+GLDU9B8QAHqPxm+Hvgy 7n8YWWk/8FFvAnwDh8Qav8Br3ThY+MYE8U6I/gHwHq9n4a0668T+Kfjy2s6zbeOkvNL8ZRW0v2Fd dg8P28mqR+K4NU8QX+qAHoGqfs2w/Dj4j/DHWtV/bT8SfD7w3pvxq+K3xY0P4Yan4y1rSbb4jweO PG+m/EfWfCWpXXij4q3l14mt/C0S6n4Ys4dM05PC1l4F8Sanb3HghNcv7zxNfAEfxSf4LfG34j2/ j3wB+2d4e8A3niD9nLR794tO8a62fDXiP4THx5rniLS/Hnh270n4o+BvDj6Nc6n4e8U+EviRrOjL eeKbTwvI+m2niv4b6rNpWuyAHe6p4E0/4p/BTw1+zv8ADr9srzPiv4T8Mafrlz8Q/D/iyHxR441P w/rfhfUdGi8Raz4f8PfELSvE914eutL8cafqvhPVdR8VXhh1G38Fa9fa14mvIBc6oAfMg+Fvhy8+ JekSN/wU18XSah4k/ar8V6hp3g7SPFF3BoF14v8ACerQf2/+z7Ldp8QL1tP1/RRENF0zwlfara2d 7p82r29t8OtYURNpYB9HfGnwV8Lv2kviF4A1HwR+0l8KPDvjFvhb8dfAXgyTwvd6N4h+Jd43jSCx 0TW/Fvw88T+G/iV4a8R6XefDy+8JajBdN4ft7qe1mfxFY3Op6RMbh4QDxrx5+zLpnh+0+Ifh/Uv2 /NU+GHiHU/h18MYfGmq6j471vTvE+h+HvBXxHvpPCus3a+Ivjar6B4S8TaLqVn8Mde1P7PY+J/FV 9aR3o+IaXWq6vouogGx4x/Zs1PwZ4d0TXNe/bD+LUM3ib4xeE9W8MeONL/4XZ4o8xZvh/eeGfCfh /WLHQ/i5rHhlPDA8QtP8S9Z8QXuk6J4A1DW5ZH8W6ZNYSWUluAUPhd8GfBvw/wBe+H2q3/8AwUOu fiF4s0aH4pzWur+LvihFqmsa74P+Kngr4ZeIprvR9HuPitc+FJNZ0XSvB+n/ABL0zXdZ8KeLvBSw eNdY8R2fgKwsb3R7yxAOfPwF+H/xm+KXjG4+Gf7dMuufE7WvhXolhp3i/So9Jb4lalo0N/r2mvrq fEL4Q+J/hRpnjnwhYyDUrK60P4e6foCeGPF2h+GtQ8R62+oae+nawASePP2bfBl/4o+Jul/Eb9s+ zfwXJ8Wv2ZG/4Vf8VbzxMPBXg/xH8MR/wm3hj4eabqGs/GrQ317WPiF4d+xNq1lNf3uq6tp+maRr viSy8S+IbZ9buAD1DU/2ebf4dfE/4Tf2j+2bf+AdNsvjp8W/jH4e+F+teK9dtNX+Kdp498X6d4w1 nwLfv4v+MF7H4m0fwpPe3mi2Q0XwnFpml6Hr0ax+H7HV7vVNY14Azvjf4b8LfHf4gSfEDwB/wUQ0 L4a+GLr4HeLvCg8H+CvHeh32hNpjza2/iD4oLfaD8UvDkUkmg3baa8uttaPNojeHJLNfEFlY6hqV mQDrPEs/wn8Q/s/fDn4Nr+294Gi1XwDY/BvWfE/xRk+K0Nl4k8deFvDV14flmuNcv/Bfxf8ABXiK w0z4s2j2ulX+sDxfcw6hYeJHEcmq3V/a3NAHkEv7N/w+1DxfBN4r/bqtviD/AGb+1rpnxD0Hwv4/ 8bpr0/hfxlb6V8TdF8N/CbQbKH4s6bptt4x0VviBpdx4atrvw7exfa/hv4JOofD7WZbXUXvwCaH9 j/xd4Uk8EfB7Xv23v2hNU8ZeJfAHxr0nwx4sW3+Lsutf29rVh4XlHjq88Sab8RLv4e6bqvgu30vU ZdI0nxtYzjVLvxz4zk8HNoN/PpTaCAdvD+wd8Ureza2T9sf4uXZm8N6L4ev49U1D4mz2WsQ6JqXg bUoYNRjsPjZpep2WnXI8Ma/p15N4U1fwv4yvNJ8YXen33ja6hs5RqYB9Bfs8/s6eLPgf4k+J2t+I fj78S/jHYePbrRptF0Tx/qes6lB4Ht9Jm1qQWmlT6t4k11bgva6rZaKt9Ha6dqV1ovhzQk8Q3fiL WoLnXLsA+qKACgAoAKACgAoAKACgAoAKACgAoA+S/wBvr/kxT9tT/s0v9o3/ANU94yoA/wALugD/ AER/+DHj/kjv/BQr/spf7P3/AKi3xQoA/uxoAKACgAoAKACgAoA8V+Nv7PXwl/aJ0bQ/D/xe8NT+ KdG8Oay+v6VYR6/4i0GKLVn0680r7TO3h7VdKlvQllf3SRw3kk8EckgnSJZ445FAPH9F/YC/ZZ8P 2Or6dpXgHWILPxB4m8Q+K9ejk+I3xJuX1rUfFvhhPBfiu01W5uvFk11faF4n8K29jofiHQLid9I1 uy03Tv7TtLqe1SagDQ8K/sN/s4+CNFvfD3hLwp4h8P6RqPw48T/Cm+s9L+IXj2zS48GeMdau9f8A EVsWh8Ro8erahqF7OW8RwNFr8VqUs4dSjtoo41AK9x+wj+zhc6x4n8Rv4f8AGsfiTxj4U8JeCvEf iO3+LfxUt9d1Lw74Im8GXHh2zfVIfGCXUMtrc+APCtxPe28kV5fTWFy95PMdX1j7eAewfEz4C/DD 4wTeE7n4gaHf6zceDGuF0aa38S+JdFklsr3UPDmsX+kay+iavpx8QaJqOs+D/Cmr6jo+tG+0+91H w7pNzcW8j23zAFnwt8EPhv4Q+EQ+BWmaNd3fww/4RrV/B0vh/Xde17xBNc+GdcgvLTUdHutb1jUb zXrm2lsr+4sonm1J7i2tDHDbzRLDFsAOZ8B/sxfB74ceMoPiB4b0XX5PF1tpE+kRax4h8deN/Fkg W90fwp4c1HVGtvEviDVbJvEGp+G/Angnw5f6+bb+1p9B8KaJpIuksrQwyAGfcfso/BmabUJodN8X aaNS+Jml/F2a20j4lfEPS7GDxxpPijX/ABzb3mn2Nl4mhtdN0qfxx4q8R+MdR8O2EVvoGp+I9Xut R1DTbh1t1hAMGw/Yl/Zr03x94R+Jlv4Amfxh4C17xD4h8Hahe+K/F+o2vhy78Ta1J4l1Kz0jSdQ1 250qw0SLxJPc6/pehW1nFpOkatdXd1ptpbG6uFkAO/8AHf7O/wAK/iR4kvvFnirSNan1nVdH8G6F q76X4x8X+H7DWNP+HnjU/EHwQNX0nQtc0/StSufDPiuS71DTL28s5ruOLUNQ0+SaXT7uS1IB86yf 8Ex/2KZpJpZPhBIXuItFiuSnjv4hxPc/2D4fh8M2Ut1ND4qjuLueXS7W0N/NczSvqGoWsOq3Zl1J WumAPo7xt+z18JviLrfgbxB4w8NXGran8PIbK18PSf8ACQeI7K3msdN8QeGPF+nab4isrDVrWz8V 6dYeL/BXhHxVaWXiWDVLeHXvD2n36pvFwLgA8d1z9gH9lvxNoWk+GvEXgfXtd0PQdA0Pwvoun6v8 SviVqMGl6D4W/wCE2/4RLTLMXniyYx23hT/hYPiU+HYyWGmNLpjQ/NomkNZAHr3wk/Z3+FPwNutY ufhnoWoaAuuaJ4N8PX1jJ4k8RatpaaX4C0OPw74ah0/StX1S+sNKktdKiSG6n023tZdSl3XWoNc3 TvKQDkNf/Y8+Ania/vNQ1fw34hke88bap8RDZ2vxE+IenaVZ+L9c1XTte1vV9J0nT/FFtp2jyaxr ul22talDpltaQXepPc3MkZNxKGAML4ZfsMfs0/B/VfCutfD/AMFazomoeC9Yutf8PSS/EH4g6rFa atfWmu2V9dy2ur+J761vftlv4k1r7VBewz288161zJC1zHDLGAO+Kf7DX7NPxn8YeNPHvxD8D6nr Pin4geGNM8HeKtQh8c+OtMh1Dw7pOr+Ddds9Oj0vTfEVrpNnENW+H3g69l+x2MHnXGirLJmTUNWe /APqPRdE0zw/oek+HNJtjb6NomlWOiaZZyz3N6YNM020isLO2kub6a5u7sxWsMcTz3lxcXM+0yXE 0sru7AHx94b/AOCeX7JHg63itfCXwyvPDdumo3+rSxaT4/8AiNbi+1C8uLK/tp9SZvFkkmojQNY0 6y17wnBePNbeEteh/tfw7Dpt9LPNKAeo+Av2Wvgr8M/GPhz4geDvDmq6b4x8LfDPRPg5pmuzeMfG OpXMvwx8NfaH8PeDtXi1LXbq013SdEuru61HSxrFve3FlqlzcalBOl5PNM4BleO/2Q/gd8S9X8Za 1410bxVrV1481C01TxDA/wASPiFaaa99Y+AvFPwxt5tL0qw8TWun6Ft8E+M/EejOmi29gkpv01CR X1Ozsby3AND4tfszeBPjT8Rvhb8QfG2oeJZl+FOneJ7PSvC+mazd6NoetXev+JPhx4x0/Vdfl0qS z1fULnwr4r+FfhHxDoFnJqJ0hNXsIr6+069uLazktgDz7UP2Cv2cLrw/pWhWvhjXrFvDfgrSPBfh TUW8deONRufDyeE9J8SaJ8PvEsMOo+Irm11Hxj8ONN8W6/Y+CfFOqw3muaHYag9lbXwt4bRLcAw7 b/gnT+y7L8P7T4c+JvC3iPxzo8Gm/DKyuLrxZ438U3t9eXnwn8HXngLwvrYS01Ox03S9Wm8K6prG la5Joen6Zba5BrOpf2hazPcFlAN6H9gP9laDXovEkPw6vI9Wg+Ldp8cIpk8beOVgj+I2n3kuoWOs JZjxGLRbe1vJpZYtMWEaeY3+xSQSaekdogB9T+FfC+meDtGj0HSJtbuLGK/1vUll8ReJfEPi3VTc 6/reo+IL9ZNc8U6prGsy2kd/ql1HpdhLfvY6HpSWWh6Nb2Gi6dp9hbAHRUAFABQAUAFABQAUAFAB QAUAFABQAUAFAHyX+31/yYp+2p/2aX+0b/6p7xlQB/hd0Af6I/8AwY8f8kd/4KFf9lL/AGfv/UW+ KFAH92NABQAUAFABQAUAFAHzj+0z8X/H/wAGPCPhfxD8P/APhnx/f698Q/Bnga8sPFHjXU/BNnYJ 411u18N6dqEN5pHgvxxdXRg1fUbKbUfO06y0/S9Dh1bWr/UYYNPMcoB86+Dv28rrVbXw5H40+F2r eDtZuPiz44+Hmu2aST6rBfaR4d+H/jzxj4b8SeFZHi0+Vk8W6l4Y0bwysGrpANI1zXbDTbxm/tWy vogD1nwl+1XN48/ZG8RftRaJ8ONb8M3eleE/iB4isfh58QZL/RtRurrwPea3ZwWF1f6RomuXPkeI n0hJNLv9G0fWkmTULb7LDenO4A8n1T9vfUNJ/tm1HwK8T65P4bsvhLqeqa/o/iCzh8E3mi+Oj8FG 8a+ItI1jV9MsNVXRvh7bfHDQ7rfrWh6Tc69H4f8AF7NFo8Ph3UrmEAsaL/wUBtvEviifwrpH7P8A 8WbK7/4XRqfwfsLvxi3h/wAHWeoLpWk+MNZuPGAXU7972z0ma08F3BsrG7s49Rv28WfD0WiTHxRc DRgDkLD/AIKT3GuQ6DY+Hv2VPjxqXivxF8PvHXjWx0eW20O00ldU8L+CNV8d6J4QbxIbyaC91nXN OstLsNXj0iy1K68Kav4n0CxurDUXup2twD1Hxp+2pJpHw00zxv4b+FPiee51G0+Gl++reLLXxJpn wms4fHnjHw54T1a2PxL8KeE/Gs2p3/g/+3LrUdSt9G8K6gJ7XRtQmhYW6efQBwz/APBRa207w/ae IvEX7O/xd0iKX4u+Avg/f6TbRWGseIdH1nxToEHiPxLq+qaPZqs+m6R4DsryC11JdWbTtR1jU7PX 7LR7GdtDnecA7H4R/tg+MvG/jzw34X8X/CODw34f8c/Ev9ozwL4e8WaV4rTVbXRR8EvFvh/wt4Xs vEdpNptvPdeIfijaX2s+M9Ig03ybOx8L2MV5C2rWEWo6xbAFz43/ALaM3wk8afFH4dQfBf4latrf gD4Va78V7Hxk2iTH4Za14f07wwLvTxB4mgxb3Ov6j46lh8AW/gaC4TxXeX7JqsNrFoc6amgAzxN+ 2ImieJvGunWi+Er3QvDHj39mDTbHU2i8XCbVfA3x51DStO8RaoPJ0qW2GseDLS7vPFglt5LjSV8P QJHrf9l3AlugAej/AB7/AGn7X4E+OPhN4IuPhf8AEPxs3xUm1+NfE3hqz09PCfhCPQpdDtpJPE+s 6leWsUEsra9Hqr2dsk97H4W0TxVr0MF2+ipp1+AfKek/8FP9G8Q289tZfAb4o6D4gl+Eniv4nwaR 4mTS4tS0L+xIfjCmlaf4z0G0ujrOi2mral8Hr3TzqyxzWCXXjX4eWsNxPP4nJ08A67xz/wAFE9P8 F2XiXU9P+BPxR+I2jeFrX4T/AGjWvA40R11G9+K/g6DxnpksOj6tqFpqOk6LY20Wp6Dd61rDQWEf jI+HvC5uPtOvi6sAD6L+OX7Sdp8Ebf4cXNx8NfiD4xHxDvWto4fDWm281xo2yTQof7OuUedlvPFV 2dfS60nwxayG41TTNA8XahBdrH4fkS5AOQ8L/tb/APCXfsxfED9oe0+F3ifw/qXgXRNZ1KT4deK7 y3stQvb2z8L6R4t0iz/tvTLfVbSK31LTPEGjx31/Hazw6LqR1SwvcnSbqegD5qP/AAVDtdH02N/F v7OvxS0m+h8L/DXWr3WZpNO0LwJcaj8SvF/gvwfpsGj6/wCMf+Ee1K+0O3vvHNg58SRaJLpt7NoH jC20uTUINH03UdeAOq1L/go8dC0d9T1v9l/46299P8SvDvgyw8MWthpU3iS18N+KvBUPjjQfGPi+ 0vLjTbLwdcarZSSaRYeF7/Ubm8u/ENvNpceoB4ppIgDz3wz/AMFUbvW9bsY779lH47WOkXXhbxXr X9i6ZosfiH4g3l34fOiT6d/wjmhWjQad4ltNdsdVv7j7La6nbato9p4b13Vr21k0+1cxgH1F+z1+ 2IP2g/FWmeGtP+D3jTwSlx8OoviFqupeLtX8NQ/2fb3PjLxn4KtNNsdPsL27vdba4uvBw1lr22SG K08P+KPCd5fxWt3qr2FqAbui/tS6Inxc+NXgPxm+h+H/AAt8NvF3wW+H/h/xNEPFf2/XviD8ZL9t F0jwTJpWoeGrNdSv/wC1rzw0INd8K3Gs+GR/wkM+nXWpx3nhXxPLYAG18e/j1rHwg8ZfBLwrofhe 28YXnxV8R+J9KuNGVvEFtrK6b4b8PHWLq+0W/stB1LwzFdxzy2dlDp/iPVtKutc1HUNM0nQ4bk3O qanoIB8xad+3n4/b4dQ+Mr34InUvEF18DPjZ8UtO8FeHtQ8Tpqeta58K/HvhbwppGnWM/iPwloqW fhnxTpfiLUtbfVtXjstWsY/Bvime30bUdKtItRlAPtj4Q/F7RvijoHh6VYtT03xZefDT4c/EbxD4 f1Hw3r+hPo9h8R7LVZdHRn1S3eyNxJeeH9egm0m21fUtT0pLOCTVFhh1DTbi+APYKACgAoAKACgA oAKACgAoAKACgAoAKACgAoAKAPkv9vr/AJMU/bU/7NL/AGjf/VPeMqAP8LugD/RH/wCDHj/kjv8A wUK/7KX+z9/6i3xQoA/uxoAKACgAoAKACgAoAKAEJAxkgEnAyepwTgepwCfoCexoAWgAoAKAEBB5 BB68g55BwfyOQfegBaACgAoAKACgAoAyk0LQ49bn8TJo2lJ4jutLttEufECadaLrdxotndXN9aaR PqohF/Lpdre3t5eW1hJO1pBdXdzcRRLNPK7gGrQAUAFAGVrGg6H4itYrHxBo2la7ZQX1hqkNnrGn Wmp2sOp6VdxX+l6jFb3sM8Ud9pt/BBe2F2iC4s7uGK5t5I5o0cAGrQAUAFAEUsMM3l+dFFN5UqTx ebGsnlTR52TR7wdkqZOyRcOuTgjJoAloAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoA+ S/2+v+TFP21P+zS/2jf/AFT3jKgD/C7oA/0R/wDgx4/5I7/wUK/7KX+z9/6i3xQoA/uxoAKACgAo AKACgD4i+L/7K3jz4gfFLxD8S/DHxiPhW61HRvCVnoHn2Hjz+3vCH/COX0DeIfCnh3xB4O+KXghN L8B/E3Sft9n4vis9Kj8ZWOqajPr/AIe8WWV/baN/Y4B822X7I37bEeqajHqv7VPjzUtNn+KHgXS4 dU074keLdF1G8+EkHhrw3ofxJ8Y3+nSz6to2leLNTsI/Hdv4H8E+E9P0K20Dxf4q0b4h+I/GXi/U fBOg2KAH0ZF+zL8ZoV0GdP2gLuXWtN+NfxZ+JNxr+rwfETxVcWXhLx/4Z+IPhLwj4O8J6T4t+KWt +HvD158MtJ+IGdE1J9K1HR7+78I+H7m78Nxy3uvyakAfOvhD9hD9pTVvD2r3fxH/AGpvFOg+MvFv gbxd8P8AxG/hTxT8W9am/sS51v47ar4ClHiXU/ibYapcX3hW4+JPgO+t7iUXGs6PB4J1vwzofilN J8X3t1AAfWH7Q37NvjP49/Afwt8KF+LNx4A8XaLf+H9TvviH4csfFVxLNeaPoGr6NcG3srvx4ut3 9rfTams2o2XirxV4ig16xjvNO1/+0P7SluoQDzLwh+x/8a/DGt+B9av/ANqvxf4rHw/+IWk+JtL0 XWF+IVv4d1vw5b6R480XV9K8S6PpvxZtobq8vdP8W+GrWx0qyaz+G2nf8K40a/Pw/udV8SeK73UA DNP7Hv7Qz6DY6NZftba34Pm0/wAMfFDR9Nv/AARo3jjTE0XXPHOs/EnWdJ8WRaVffFe/0jxbrGmH x9pVnqNx8SbPxnc/8W+8O6z4TuvCXiLU9e1W7APsr4K+B/FXw3+F/hHwT43+IGsfFLxToNndwav4 717zjquuS3OqX1/B9oe6ur68nTTLS7t9Gtbm/vbzUbqz0+3udQuri9lnmcA9SoAKACgAoAKACgAo AKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgD5L/b6/5MU/bU/7 NL/aN/8AVPeMqAP8LugD/RH/AODHj/kjv/BQr/spf7P3/qLfFCgD+7GgAoAKACgAoAKACgDyD4tf GLTvhQPB9mfCXjHx74n8e63quheEvBvgWDw9Jr+s3eg+E/EHjjW2gm8WeI/Cfh+JbHw34Z1W6SG6 1yC71C7W10/Tre6urlUUA8NuP2/v2are5gtTr3jq4ku7V9VtGsfhH8UdQhufDs2q+HdB0PxZFPZe E54v+EV8X6/4r8P6F4O193TT/Emrailppssrw3JhALmnfty/A7xJoFz4h8FD4geMtPT4ceN/inY3 ui/DPx02i6h4R8Bv4htNXv08Qy6CujW4uNZ8M6loOlRXF2tzqmq+VBp9vdBmZQCh8Qf28fgl8Or/ APsvUrX4g63fWDaLJ4k/4Rf4f+K9a0/QbDU7HwlqOpXsWsR6VFpXiSTwrZ+PvBd/4o0jwxd6trul 6Xr0epSaY0NjqQtAD6A+FHxg8LfGXTPE+r+ErHxXaWHhXxz4u8AXk/ijwtrHhlNS1fwXrl7oGq6h 4ffVbeGPXfD9xfWM507WdPkmt7iLCyi3uVlt4gDz7wl+1Z8L/HeoeGtK8IWXxA8Raj4r0vV9e0yP R/AHiXUtPtdAste8feHNA13xJ4isrO48MeD9J8f6l8M/F6eBLvxZrWijWfsEMFwun3t5bWkgBq+I /wBovwdo/wCzlD+03pOn6t4k8CXvw/8AD3xK0uwt59C0LXdR8OeJbHTdS06OOPxTrGi6bHrL2epw CPRH1L+09Q1LZomkW2o6zdWVhdAHn2iftl+CNe13XNCtPA/xDgm0H4n/AA4+GN7cahbeFrNUufiT 418Y/DOw1+S0fxS2o2+maH8SPAHizwnr2n3FnH4iiewttbsNG1DQL+DUaAPQfgP+0Z4M/aL8CeJP iB8OtO1640vQPFPiHwvDpmqWtvpHiDVZ9FtbLUNOvY9O1O6s00208XaVqWl674Wk1e6sUvvD+saP rFzJZ21/+5APnG4/4KNeAobO4vI/gZ+0PfCz+CPhn4/XkWn6H8LroWngPxXa3+p6eLi9HxZXSl1u 00LStS8Qazpiai/9l6PY3N3POdgVgD3j4L/tMaZ8a/G3xA8C2Pwo+MngPUvhnF4eTxVqHxF8PeGt I0e21vxH4a8OeLLXwtb3ei+MPEUlz4htNH8TWcuo2sVubWzltL+OS94sWvwDzvQf27PhxqN/qum+ I/hn8fPAV5p2v+MNBt4/EXwym1tdT/4QCzttR8Z6qk/w61bx1BoumeHLC8s7rU28WyeHb6Jbu3iS xluZRDQAeKv+Cgv7NvhSANc6v441S9m8JfEPxlpukaL8NPG11qet6X8L7nXIPFtrokdxo1pbalrN nF4d1bUo9JguzdtosNvrUyW+mX+n3V0Ae4/Fz9oH4Y/Av4aRfFr4oarqnhrwdM+kxh5fDfiC719J NXga8WGTwpZadP4lW603TYL/AFbXLIaW19o2l6Vq97f20MWm3ZiAPFvEf7eXwK0S41DStPHj7xH4 k0z4hWnw/u/Dmm/DzxfbXqj/AIWfpfwj1zxut7qukWOkH4deHPGepNpOoeNW1BdBub61ax068u7m 7sVuQD0L4z/tO+DPgnqmr6Frnhn4h+INY0n4P+OPjY0fhXwjqGqaVceFPh/dafaa5p48Q/utFtfE 9xJqVuNG0S+u7aXVJXhtYZReX2nwXYBH8L/2tvgd8YvHt18M/AXiHXNT8Y6f4Zi8Uatp154I8Z6P baLE0GiXV1oes6vq2hWekaZ4s0y28SaFcaj4YvL6LWII9RXbbSvaaitmAcL4i/b9/Zk8J+Km8E+I PFPi3TvFLeNdU8CWOkSfC34mS3Ot6noPiLxJ4T8Rap4c8jwpKniPwt4d8Q+EvEGl634n0R7/AEew urFIpLovf6cLsAfqf7e/7N2gWvhfUfE+veNPCWk+Mrz4jWXh3WfFXwu+ImgaVqL/AAq0e61rxrLb 3uo+G4I5orK30/VINNEHnT+IrvS7+Pw/DqccHnMAQT/t+/s32v8AwlqXmrePrO68DaBqmveK7K6+ EvxKiu9Gk0PXX8O634fuoj4Yx/wlGj6jFcS6pokbvcWGj21z4iumi0CF9TAB7rqXxp8JW/w6+H3x R0kah4h8JfE3VvhFp/ha/wBNs7lhPZ/GjxH4Y8PeE9avVMLSWGml/FemXVzNdRxiISJBK0MkoZQD 5osf+Cj37NV147vfAVzqXjiwv5L61i8KX7/DjxveWHjjRLjStHvT400BdP0K6vE8E/2jrumaFaeK dTtbHRtVvrqO70u7u9JivdQtADtPD37bfwf8Y2Piq+8JaT8UdXh8J/B7V/jRfz3Pwu8baJZnQNH1 bxfos+hSXGr6PaS2XjCW98F6pJbeHb62t768sJ7C9sEu0ndYgCbUP2vvDFl4p8V+HE8A/EK4sfBv hn4G6/rHjH+xmj8IT3fx98U6d4b8JaJo+p/vLjVLnTYtQOseJL+GyTTNJs7aaKe5+0RXK2wBzGr/ APBQj9na2uNZ03w3f+NPHGu6F8RLP4dahpPhv4feMii3I+Imi/DHxH4nh1zUdFsfDk3gzwb4r1uD TfEXiVdX/sy2vPslrHPJJrWhtqQB698WP2ofg38FPFugeBvH+v6rZ+J/E3hfxf4w0nStF8KeJ/Fd zLo3grQNb8T6q08fhnSdVks7y80bw14kuPD1ldpDceI5vD+r2WjJeX1nJb0AR3f7T/wtj+BHhz9o 3SH8VeLfhr4sl8Dx6DL4P8Ja14i8SX//AAn/AIw0bwRojQ+F7C3fWXMGua5apqkKWzXNnBFdOIJp YlglAPKr3/goF+zzoOsax4b8ZXnjfwj4k0r4m6j8MbfQ774eeMdWvtfu7HWvGGkJ4n8Or4c0fWF1 fwk//CDeJJ7/AFW2LPoU+m3Gk63b2OsCGynAPtygAoAKACgAoAKACgAoAKACgAoAKAPkv9vr/kxT 9tT/ALNL/aN/9U94yoA/wu6AP9Ef/gx4/wCSO/8ABQr/ALKX+z9/6i3xQoA/uxoAKACgAoAKACgA oA+Hv29vif8ACz4SfCPR/F/xM+Glx8TrnTvFNzf+ANLi1mDwlBp/jPR/Bni3WDdXPjm41XR28NDU /C9j4k8Nx2unTanrPjF9bPgrTvDfiM6/PpcwB8IXXjn9iHVfiP4S8Q+Fv2efi/p3ijwn4l8eLoWm eHf+FZ6Tol7rd5qXw6v7e8/s/wAXeO1stT8c+CNd0Lwl4n8GfAS0b/hNvh9Jpep+Ib34S2UECfaA Dk9J/av/AGAvhn4X0LwBonwB+N/i7wno3wP1b4M/8JZ4ebwxqVprHgAeMfFVhe+HvEEHg74l6Vuu PF3iay1TxPq/ieDwxZ2Fra6/c6zq+qaPp6arFYgG/L4//Yj1fxH4k+IifszfFPVZ5vh/8DPCuq6Z 4p8RfD3wxoNj8P8AXJPgXpF94i1C4vfidbXkN/4I0L4tfCm08Y+IfHurhdU03w6lloWsy6N4d1DU lAP0E+Jfxc+AX7Fr+B7qz8E+Iy37RnxI0Pw7bQeA4G1W2l1rVWstOg8T6hBrWvWelafpzX+uabNr cujN/aWoTarqPii507Uvs2valAAfGWh/tKfsweHtFsvGXwq+B/ipJvB3wd/aL8RfDzxbq/j3wt4V f+0fAsU/xF1P4MWcsHjHWNQ1LVLeH4q6s/g62fQvFS/DSTUNXtvsmkQW3iG7tQDpNa/az/ZE1P4I r8CfEPwQ+JWo/C/4c+HPh3oNv4K1HU/AunfYbv4c+P8A4V+D/DennxDL8WdJa1h8I+Mtb8KT6V8S bzXrPwV4i1bwj4uTw74v1jWfCmo2bgHqnw28a/sdfEbxt8W/Dt/8KL34Z+JPBfx9+DVl4kvvFksG mweL/jtFqviKw+HEeh6x4Q8W61ba5qOjeLdE1947WS5j0271/UZvEt1a3Wp69fX0oB9aah4X+EP7 N/wj+Lev+H/CmkeD/BdnpXjn4n+NLLSZb/S4L+5g8OvPrN19psheahYF9J0e00vT4tIgYaRYWdhp +hafFDZ2dmoB+Unhv4kfsp6r8NPF/iCL9nbwX4R1jw5+xf4p1TXvhh48+LfjXSvEvh63+HniHxZ8 LfiB8Bdes7yxa60+zshHqHhnwh4utdN/tXWdK1ySxGh6To+rQw3YB+kvjDx/8Jv2afDWjeO/CvhD UPEQ/aF+J3gbRrZfCfijw2zeLfGHivwla6L4W8QS6v8AEPxx4f8ADps5/DnhLRNMkvrHV2uLq0t9 PuIrPUCskoAPizxX+0D+yf4G8S6hq03wbute8df8NDftAeB9Ln0nxfY3/huPx54hl8EeEvGOpeNr vUfHKacsHxFt9a8P3t94T0bRvF2qWXhfR9e1iPwjDJ4b1aGMA858LfGD9inRfB1rrmpfsk+IfDWh r8CfiF4mn0y78W+E/EEc+p/8JB408G/Ej4a6HpN58TpU8V+KxZeMvEOpt4t0u3upbPwh8QZxc6jo P9tXemsAfY/xb8X/ALOXiD9kL4P+KfHXwj1/xx8JfHj/AAnsfBPw61nWtG0bxTZX/wAU7BfDHh6z 1rWfG3j/AMM2kUkWn+Kr/RvGtxe+M7sT+Hr7xGdQbWdJk1FJwD5B1f42fsBT+LDY61+yj8Vjrlh+ 0Za/DA3954Zn+3nxza+PvE2v3HiFLSHx9L4hvtCtfiGmp+LbnSV024uNUu7nwt4tTQrx5PDs9sAe l6v+15+zL+0rpnhvxRrH7Nfxd8a3r/DH43a5a6TqT+AvDHiyD4a+F7Xws3xD06fw9P8AFvQtW8SD W7bVtElsvC9ha67dnVdC8QRta6drHhS8ZQDnNB/bM/ZS+DmteKtY8Afs4fF7wj4rX4baL4viu7+1 0vw14R8QWPxAuvCl54U1DWtY1z4h/wDCM6ZH4jsvFXhC5m+IevW8f2HT7afwPfazF4j8Lx+DEAPo 79nT4Ifsq/EzStR+K2k+FodW+I/jDxPoXxr8ctqPiG/vfFvw28ZfGHwvafGZfAdnr+kw+HL2y8LR ab8Vp9STw4qDTdYs/Ecs2vW2oSzmOEA98f8AZH/Zym03w/o158LNF1TRfDEPiu30bRtZvte1vR4L fxtPdXfiWC70rVtWvbDVYb67vby7gj1a3vk0u6up7nSBYTyvIQCjH+xr+zPDve3+FemWt1Kp83U7 TW/FVrrU1y2rSa8+pz65b69Fq82uTa3LJq1xr8t6+t3Oou15PfyTkvQB6Xr3wW+GPiXwJ4Y+GOq+ FLf/AIQPwZN4PuPC3hrTL/V9BsdDk8AS2c/gv7C+hahpt1HH4auNO0660qFrhoba70+xuhGbi0t5 YwDzPS/2M/2YtD1nUfEOifCLQNG1nVrnULjUr7Sb3X9OkvItTSJLvSpks9Xhhbw4wtrNrfwsIx4b spNP02ay0q3l02we3ANO2/ZM/Z4srGbTbH4Z6ZY2dz4d8SeE7qKw1XxHZNeeG/Fwn/t/R72a11mK e9s7s3d80CXUszaY+papJpbWT6nqDXIAXf7J37P99p+saXdeABJY6/o/w+0DWYR4o8aRnUNK+FUk U3w9tp5ovEaTlvC00Mc+nXKSrdmZfOuZ7iVmcgEGrfshfs365LFLq3wq0S9a38Wy+ObVZb/XxDY+ JbnWofEt5eafbx6ukGnWeoeJ7a08UalollHBoep+J7Oy8R3+m3Ot2dtfRAHSfEn9nH4J/F7xBp3i r4jeAdN8S+I9J0m50PTtYmvdZ0+9ttMurPXtPaBZdI1LT98lvZeKvE9tp15IHvdKi8Ra6umXFp/a 1/54Bvv8GfhhJ8Mx8HW8H6cfhuttFbL4ZEt8sKmHVU16K+XUFuxrC61Hr6J4gXXxqA1sa8o1r+0P 7U/0ugDgY/2Sf2dodTTW4PhlpdvrUep2+sR6xbar4kt9Vjv7fUPFOqGRNSh1mO9SC7vvG3iuXVbJ ZxZaymu31vq1ve27pEgB9GUAFABQAUAFABQAUAFABQAUAFABQB8l/t9f8mKftqf9ml/tG/8AqnvG VAH+F3QB/oj/APBjx/yR3/goV/2Uv9n7/wBRb4oUAf3Y0AFABQAUAFABQAUAFABQAUAFABQAUAFA BQAUAFABQBh6v4Y8N6/d6Hf674f0TWr7wzqf9teG7zVtKsNRuvD+sfZ5rP8AtbRLi8gmm0rU/slz cWov7B4LoW880Pm+XK6sAblABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQA UAFABQAUAFAHyX+31/yYp+2p/wBml/tG/wDqnvGVAH+F3QB/oj/8GPH/ACR3/goV/wBlL/Z+/wDU W+KFAH92NABQAUAFABQAUAFAHyF+2V4Q8MeMvAngbT/E/wAYdN+DMMPxY8DXdvrerfFzxN8ILXxD b2mpfb/E3hCz1fwt4n8LXusa94h8GWfiSw0TTp727tbC4lk8RNp1y+ipsAPD/Bv7Pnx+8EW3h3S7 H9o7wnr2m+Gfi9458a6UPE2q69ql3oWj+Lvhr8QfDo8J6a93Pd+evhu+8UweNtAstUe4ttJj8OTW MKf2ZqV21uAem+D/AAV8adA/Zpi+C/iP9pvR/EX7Q8mneI/EH/C2ZFl8y78OaV8QNO1PWbW6uDM1 3p8EPhrWrLwDc+LLO3sr7w+dVg1/RtKW90u3tyAfNvhP9mr9qrw54Si+Htn+3HYuvg7wH8N9O1C1 sxqmnPc6VcaZomiaC7eJZ7rUtT8HltU8K+LPEWneJ9Jm1HXfiDceIW8PeLY10TStOe4ANzxj+zb+ 2vrevCbw7+3jbeEtJ0fxlqi+Hnh057/UL2eXUp9R8P6F4x0u7nOjazeafpk1lpt9oEC21tqsGmC7 kgSTV7/aAZmnfA39pPS9T8PfCj4i/wDBQ23ufHmvfD/4i6bPosWtab4d8d6xpvirwv8AEfSYfHXh jw3af2Tq0954V12bRfGGh6qgkfw5J4T1vQrLVm0q0t5bEA+n/FGmeKPGH7OviX4EWHxh8Dp8ddN+ GvhJtd8V3mv6vfWWn2PiLUbmHQPGOsTyPHreqab4kt/D+rQrc3AisvEd7aanZSCGzlmhjAL3wU07 4ieB/HPxu8S/F79oLw38RPD/AI++JWhaF8OvBumzeZbfCvV2uNbWbwFBMHTbe3ceq6FZJpUtgmox jQ21bUry4k1ORLIA+XLn9mX9srW/B+teGNR/bX0DxB/wm2ofFvStRmvrPVCINH8WeFV0Dw1pWiy6 RqOmmW98OarqGsandWtvBpsenxy6PbacTf6ZHqbgF/V/gb+1RcAeE7P9qBdC8f8Ahf4J+KLXXvid c+I7LUk0yDxf8bvB/i3wvott4S1FLnxFpu34f+AfGvgbVfjTq62esXqahp99p1trGqeG5l0sAt+I /gr+0D4Gs9J8V/FH9uWKwksvHHwbbw9q3ibxP/wrfwj4z1Kw086FqvgXxFpemDRtGWTxbd3V3LY2 3htluPHep/Yzq2j294kL24B6B8b/AIn+APGvjn4Y6t8MP26Pg58MtY8NP8TPBWq+Gpfix4OvNK8Q 6v4m0vS9OttSuPCCeJorTxX4u+GetaZFeaP4Z1xDZC41O/hv5Lf95b3gBkHSNZ8WfsOfEfSL/wDb B+Huv3WrS6kln+0Lp3xCSPwZ4EsX8RaNcW+kT/E7S9ahv72SxRXgGr6rqEd2bjXLfSLi1u9Jgtra 6APErT9jT4weIPA2kWmpftjv4mW4b4P6rJ8aNG+J/wAUtL8Wf8K8htfCllqmh6NFpvj26+HN5Hq6 +Hb/AFHwN8QL7w/cX+taz4o1a/vrZDPqK6yAfoP8VfhxonxDtvhRpLeM7fT7rwJ8SfBXilNUutdv 18R6ovhKePUP7Ms59K1rSFuNV8R6lZ6Tp+tvfwX8F3oF9r9klitzqUM8IB4R8H/g78Rfgf8AskeN vhTqP7SWiat8TLnTPidq+g/GPxNqF1cWPhUX0V2Brd3LfaxBcJZ+G7mC81e/vo5LePRr2S5l1N9c 1Gy1LWtdAPI2/Zj/AG0tV8O3Xhy7/bWsda1bV/hpoXhrWYvs97DHrdpp/wDwgtjL4jtF04R3/hrU PE1to3jYa74s0Tdeajd+J4khjhW3ZkAPqjWPgn8VW+GX7NHhnw78V7zTPF/wP1L4d3fjXUY7/wAQ adoPxbsvDXgDU/BXiXR/E0dndTateaRq+oanH4uh0/ULi7W61HR7G1v54pZv7WsgDwX4S/srftdf DrX/AIKQX/7XF/q/w1+GuoSf8JJ4HfS5dSufFmiP4V8G6e+k3niLxBb6nquoacNf0rxa+j6ZeTwH wtouvaeNJ1WS/wBLjagDsv2nf2YPi58afE/jHVvAXxOT4fWXiH4SeGPAenXNn4t+JekaxpXiHRvi 1oHjvU9dt7DQtXHhG3OpeF9Lv/C66kdAvNXb+0Db6mdS0A3WjXIB4x/w76+Jl7qVq+ofHjxxp+lX Xjb4N614kh0L41fH+S8vvCvhTwNq2lfE3wzpUniTxtrselHxH4xvbTUPDN7D/p+m+HLeS0udQTxB Hp2vWIB9c/HT4B678U/HPwR8X6F4y8QeHYfhh4h1fVNc06x+IXxI8K23iLT5fD+oLotjLp3g7W9P 0nWJ4fGSeGtZ1KfxVZaxFPouj3+hxW4i1y9egD53b9mb9te08KaDoukftbzLrJ+Fcvh/xfrusnWN Y1C++J503xjp1x4z8PXU9kttpGlaxcax4W1s6XJpEz+F77wu1noPmWupTygA9j+EX7PPxT8Naprc fxm+MOpfGXw54k8D/B2LUrDUtT8UacumfEz4Z6R4ZstW1/w1psWpm10nRvFeueGl8Y6sqXjXuqa1 qNzb6jA9l9o+3AHZfBr4ZfGzwdrfx6v/AIp/FuP4m6P8QfHer658LdBltr2xj+HXhG6m1f7B4Wa9 ha3/ANHisbvSbIpp1nHLbvpdxftqWoXWok2oB8k2X7Lf7dOkaB8PNM0v9rTTvDmmfDr4V6t4KPhr wnoWr65N4u8Qw+D7nT7Txh4k8TfE3Vdf17xL4j8UeKbn+1b2fUdZ0VPBsdjp58O301xcardXABna H+y7+3N4j8Ea3pvxN/aE8M6qPF3wBfwO/gTWj4k1S08KfFW48X6L4p0n4gSeK9HmstT1LWvBdvb6 1pdrf6XPYprMd1oVveJI/hhdb1wA/VSy+2fY7T+0RbDUPs0H28WRlazF55SfahaNOFna2E/meQZl WUxbDIA+RQBZoAKACgAoAKACgAoAKACgAoAKACgD5L/b6/5MU/bU/wCzS/2jf/VPeMqAP8LugD/R H/4MeP8Akjv/AAUK/wCyl/s/f+ot8UKAP7saACgAoAKACgAoAKAPFfjd8BPAP7QWl+DdB+I8ep33 h/wb460/x6uhWdzaQ6V4mu7HQ/EPh2Tw/wCLba6sL3+1/CeqaV4n1S21jRo3s/7SjdIJ7k2xmgmA Pn27/wCCdv7O2pNY/wBsWGs6tFb/ABD+IPxF1SCe08C2UPie9+JfxB0H4n+JdD8R/wBjeCNMkvdH Pivw3pwsr23ks/F0PhiTUvAs/im58EatqXh66AIbj/gnd8Dn8E6X8PLLW/iJpXhSw+G/jv4Y31lZ al4QnvPE+kfEfxjoHjvxVrPinWtW8E6nreseJbrxF4W8PXFtqEmoR2tnb6VFawaesVxfC6AJNT/4 J6/BjVtCHhi68TfEt9Ah8D/CXwFZaVLqPgq+tLTS/gx4f8T+F/B+oTJqngS/Ou61/YXjTxVZ3134 pOvW8cuq22o6NZ6Pqnhnwfe+HgDE07/gmf8As56TrPhPWdOu/iHZt4N+KWkfGDSLK31/RIbeXxpo vinX/FtpfareR+F01zVXmvtfksNS1C91eXX9W0bTNG0/UtZuksA8gB6Z8fv2JPgv+0n4xt/G/wAS pfGzaxZ/D7XPhpZJ4d8THQbO08OeJtN8YaN4hkhS2sXuTqmq6R421jTpb6W6l+ywJZvp0Vlcpcz3 QB57qX/BOP4Jan8N9a+Ekvi34s2/w91/4e+GfhtqXhqw1/wpZWUuieF/iLr/AMULW5xB4IVzf3/i jxT4iOqwSNJodzp+qNaQaLamw0mbTwDr9G/YZ+FPhq3Nr4Z8SePfD0L/ABR+HPxkuH00/D77bfeP /hxpdtpltreoarefD671a/uPFJtY7/xdPd3015fXct7BpV1o2lanqWm3YB5poP8AwTS+Dfgzx/8A Bzxt4J1/xBpEPwo8fyfECXRdS07w7qsWvX8fhHRPDNhaWctppui2PhZje+H9P8R+INa07R7rxD4n 1I3SajqqwzR+QAe6fFX9kD4T/F3xp4i8fa8dZ0rxH4s8I+BfB3iG50K28HFNXsfhl46l+IvgW51P +3/CGvz6p/YfiS4mefQdTnvPBniOwaDT/FvhfX7fT9NWzAOuv/2e/CU/wk+HHwY0nX/Gfhnwn8Lt Q+FWoeHLvR9U0y61+c/B3W9C8ReELTV9S8R6Jr8V7aHWPDej3mqLHZ2094LT7NFcW1nLNbuAeKeH P2APgx4ZuEubLW/HVzInxG8d/E8HUW8AXbN4j+IWj+LtK1qOSf8A4V/Hcyafa3HjTVvEGlRvOb21 8SWuh6rNf3TaHpsVuAer6f8AsvfDfRP2dtK/Zm8Oza/4a8CaLoXhzRLDVtDl0Gz8WJL4Y1DStVsN dlvD4fl0K41241HR7S71G6n8PSWt7I0weyWOQIoB873n/BMD9me8ne4c+OGlYyzBb7UPCniC0lv9 T0jRtD8T3+rab4p8G67pnioeJ7DQ7Z5dG8Y2fiHwz4S1K41DW/hrofgfWryTUKAM3xp/wSs/Zi8f 69e674luviNcGbXtc8RaVpltrnhqysfCt/r+taj4guj4VubbwcmuaObXVNVv59LvE1mXVdNjlgtr bUEttP0yKyAJdA/4JW/sq+HtI0/Qbey8Y3+k2Ph7xd4Ve21fUfDWoS6h4f8AHHhfxX4O8Rabf6hL 4SGpvBf6D4tu4bk297bPfXmm6PquqNf6paTXl0Ae7/C39kD4Y/Cb4t3Pxs0HVfGGo+Obv4YaV8JL h9UufDNloT+FNH/4RsWQj8PeE/CvhjSre9iXwrpEUAtreHTbCCOa30vTbGCYxgA+q6ACgAoAKACg AoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgD5L/b6/wCTFP21P+zS/wBo3/1T3jKgD/C7 oA/0R/8Agx4/5I7/AMFCv+yl/s/f+ot8UKAP7saACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKAC gAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgD5L/b 6/5MU/bU/wCzS/2jf/VPeMqAP8LugD/RH/4MeP8Akjv/AAUK/wCyl/s/f+ot8UKAP7saACgAoAKA CgAoAKACgAoAKACgAoAKACgAoAKACgAoAQEHOCDgkHBzgjqD7+ooAWgAoAKACgAoAKACgAoAKACg AoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgD5L/b6/wCTFP21P+zS/wBo3/1T3jKgD/C7 oA/0R/8Agx4/5I7/AMFCv+yl/s/f+ot8UKAP7saACgAoAKACgAoA/Pn9oL9jv4tfFj4pav8AEn4e /tLaz8JLi/0HSdM0+XTvDN5qnifw7HpiW0OpeGfDPiSPxZpUfhzwd4xiiuLnxD/ZGkW/iiLVtQv9 Rttfnf8AsSPw+Acd49/Yd+O/jzwR4z8H6j+114tum8VxeENKkvNYj+JN5p9x4f0b4N2/w71+11Tw 5pPxf0DSV1LWvH9qnxnN54ej0Czv/ENzf+GfFWmeI/DNyltAAdB4X/ZF/aa0Txd4O1/WP24PiN4p 0nQPjXq3xJ8QaHqWk31tbeK/B13caBNafDu5g03xXZ2Flo62+l6pYyWCWc/hyyfWf7Q0rQLZba60 7VAD6R8XeAPjb8Q/2drvwFqnxW0z4afHHX/DmmQ6x8TfhRo2pwaJoXiGPU7LUtWh8J6frurSa9Fo 15ZwXPhhdTl1ey8Qpp95NrdhNo+sC1SzAOa+AHwC+Ifwe8SeItZ8W/G/xP8AFy18U+Dfh7puqJ4w uPFd1qFv4y8G+FtG8Kan4g0iK88aah4S0nTvE0Oj/wBs6ra6d4QtNcvtd1C5vdT8Q32wrOAeZ6X+ yz8dYfiHP4z8UftFaf4/023/AGkrL43+EtB8WeBNcum+H3hVdD8b+FdV+HXgrUE+Im7RoNT8OeKt OthcxW50S3vdGu7tvDNyuu3cMAB9qeFLXxXZ6JDb+Nda0PxB4iW91iS41Tw54fvfC+ky2E+s6hPo NtFouoeIvFV1DdaboEumabql4+tzx6tqlpe6vbWmkW19DpFgAdHQAUAFAHgX7T3wZ1P9oH4I+L/h Lo/iw+B7/wAUXPhSaLxQtpfXsmnReHfGXh/xRdRRW+natol00mp2miz6SJBqAhgF+Z7q01K1jm06 6APhnxX+xZ+1xa6h4fg+H37Wes6Z4butU8AaLe6JYap8WvDukfC3wr4U+EPijwTqeueCdJf4u60/ i251bxtd+FfHT+C/FOqJow1Hw7ptvPf3miN4p0LxiAe3T/ssfHC68RT30f7SN/4Z0SX4h/Gzx0lp 4J03xxoGqNJ8S9L0ePwWNXl/4Wbc6H4qn+GniHSm12z03xNoGp+ENVtL2bw0vhjS/D4NhKARfBL9 lj9of4bePPhZ4n8c/thePPin4c8EeFvFej+KvB+vWWs/ZPHWsa/qPiu607V9QuLjxfdxF9Ch1zRU 0+bVrHW7+1j8OJYwXK2t5ato4Byvxj/Yo+NnxB+K/wAUfif8P/2rPEfwam8eN4VttPt/CPh/UpdW sdE0PRdA0260W61+88Xtc2dk2paNL4igtPC8Gg6Rd6hcRxX+kEXXi648ZAFHwP8Asl/tPvqp8V+O P2n/ABRZ6xoXxz8W+M/CXh9Nf+IXizw9/wAIFf6l8W9N0qPXVk8eeHrbUNZn8I+OvBP2Xwn/AGVB 8LvDV/8ADPSYX8F+IZta8SavqgB5V4j/AOCcv7U3ijwxF4e1r/gob8UdZb/hGL/w7qDa7pfjO+0r W59SutT+16vq+h6Z8WdCsLm6FreW95pbFf7Q8O6zBHLoWr2dlp2h2ulgHq7fsa/tRmXxTNL+3N8Q b2HXvDPh7RtJ0WSy8Yado/hKbTfHXg/xPqEOkXukfEqz8Y3MT+H/AA5rXg+z8Tar4svviBfad4w1 STxb4q8Sm0tY2APpv46/AjWPiz4V+FHhPRPFGk6HafD/AOJnw78baxqHijSPEXjLxBrGi+A5TdnS 9B8Tr400LxB4c8UavdQ2UV745utQ17VpdJfW7CSJrvXJNWtQD0nTtI+I+rfD7xRo3jm/8Bv4y1qX 4i2elz6No2vXvg3T9A1XW/EMPw8tNZ0y91nTNZ1+60zwhceHbbxu9pqvh2PX9cg1yXRDoFjd2K2g B8BaT/wTy8X6f4Y1LRpvjVo9xf6p+zP40+BE7ReBNetdAh1zxlq3iDVJfEthoSfEdo9K8HaZe682 vaR8OtJnsIND8Q2Onr4d1/RvDNhp/hy0APqj4K/AXxj8Mfiz8dPib4l+Kc3ji2+M83gTUIPDU3h9 bOPwbf8AhTw2mg3tno+tXeqarqknhiYoJNC8Os8VtpAkvbu5k1PW9U1TVrwA+oaACgAoAKACgAoA +AviF+yF4v8Aiz4n12bxH8Qrvwr4cP7VemfHLT7vwtq+vP4s1TwLZfs+aB8LE8E2epm402PwDeWv i+31DxLBd6ZFr8cB0/TtU0ttK1++e/0wA8j1H9j39tiNvB+mWv7b/izVYpvHvxH17xT4tWHxH4bv /CXh/wAU+FdNh0GDw14dHi3xBpnjSbQ/GVje6ppXhjx1JfeENH0nWH0nSbTTF01bnUgD6ksf2evH 8v7JPiz9njxj8YLz4h+OPFXgr4geFJvit410zU9angl8aza2dNurmwPiO21vVIvCFpqttZ6UbnxR Hqc6aTZyT6mkgLKAd58Ovh9428OfFj4oeM/EWo6ZdaJ4t8DfBTw/pkGm6hq7LceJvAln45j8ZeIX 0DUBcWugQ6wfEWgWFkkGr6xqF7aaDG2rXZa2tNwB7zQAUAFABQAUAFABQAUAFAHyX+31/wAmKftq f9ml/tG/+qe8ZUAf4XdAH+iP/wAGPH/JHf8AgoV/2Uv9n7/1FvihQB/djQAUAFABQAUAFABQAUAF ABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUA FABQAUAFABQAUAfJf7fX/Jin7an/AGaX+0b/AOqe8ZUAf4XdAH+iP/wY8f8AJHf+ChX/AGUv9n7/ ANRb4oUAf3Y0AFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUA FABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFAHyX+31/yYp+2p/2aX+0b/wCqe8ZUAf4X dAH+iP8A8GPH/JHf+ChX/ZS/2fv/AFFvihQB/djQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQA UAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAfJf7 fX/Jin7an/Zpf7Rv/qnvGVAH+F3QB/oj/wDBjx/yR3/goV/2Uv8AZ+/9Rb4oUAf3Y0AFABQAUAFA BQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAF ABQAUAFABQAUAFABQAUAFAHyX+31/wAmKftqf9ml/tG/+qe8ZUAf4XdAH+iP/wAGPH/JHf8AgoV/ 2Uv9n7/1FvihQB/djQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAU AFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAfJf7fX/Jin7an/AGaX+0b/AOqe 8ZUAf4XdAH+iP/wY8f8AJHf+ChX/AGUv9n7/ANRb4oUAf3Y0AFABQAUAFABQAUAFABQAUAFABQAU AFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQA UAFAHyX+31/yYp+2p/2aX+0b/wCqe8ZUAf4XdAH+iP8A8GPH/JHf+ChX/ZS/2fv/AFFvihQB/djQ AUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFAB QAUAFABQAUAFABQAUAFABQAUAFABQAUAfJf7fX/Jin7an/Zpf7Rv/qnvGVAH+F3QB/oj/wDBjx/y R3/goV/2Uv8AZ+/9Rb4oUAf3Y0AFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUA FABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFAHyX+31/wAmKftqf9ml /tG/+qe8ZUAf4XdAH+iP/wAGPH/JHf8AgoV/2Uv9n7/1FvihQB/djQAUAFABQAUAFABQAUAFABQA UAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQ AUAFABQAUAfJf7fX/Jin7an/AGaX+0b/AOqe8ZUAf4XdAH+iP/wY8f8AJHf+ChX/AGUv9n7/ANRb 4oUAf3Y0AFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQ AUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFAHyX+31/yYp+2p/2aX+0b/wCqe8ZUAf4XdAH+ iP8A8GPH/JHf+ChX/ZS/2fv/AFFvihQB/djQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFA BQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAfJf7fX/J in7an/Zpf7Rv/qnvGVAH+F3QB/oj/wDBjx/yR3/goV/2Uv8AZ+/9Rb4oUAf3Y0AFABQAUAFABQAU AFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQA UAFABQAUAFABQAUAFAHyX+31/wAmKftqf9ml/tG/+qe8ZUAf4XdAH9Kv/BBP/gvH8Pv+COPgn9pD wp41/Z38ZfHCf46+Kvh14hsLzwv470TwdF4ei8DaT4r02a2u4tW0DWnvpNQfxGksUkL26wLaurrI ZAVAP6Av+I4P4Ef9GBfFv/w93g7/AOYWgA/4jg/gR/0YF8W//D3eDv8A5haAD/iOD+BH/RgXxb/8 Pd4O/wDmFoAP+I4P4Ef9GBfFv/w93g7/AOYWgA/4jg/gR/0YF8W//D3eDv8A5haAD/iOD+BH/RgX xb/8Pd4O/wDmFoAP+I4P4Ef9GBfFv/w93g7/AOYWgA/4jg/gR/0YF8W//D3eDv8A5haAD/iOD+BH /RgXxb/8Pd4O/wDmFoAP+I4P4Ef9GBfFv/w93g7/AOYWgA/4jg/gR/0YF8W//D3eDv8A5haAD/iO D+BH/RgXxb/8Pd4O/wDmFoAP+I4P4Ef9GBfFv/w93g7/AOYWgA/4jg/gR/0YF8W//D3eDv8A5haA D/iOD+BH/RgXxb/8Pd4O/wDmFoAP+I4P4Ef9GBfFv/w93g7/AOYWgA/4jg/gR/0YF8W//D3eDv8A 5haAD/iOD+BH/RgXxb/8Pd4O/wDmFoAP+I4P4Ef9GBfFv/w93g7/AOYWgA/4jg/gR/0YF8W//D3e Dv8A5haAD/iOD+BH/RgXxb/8Pd4O/wDmFoAP+I4P4Ef9GBfFv/w93g7/AOYWgA/4jg/gR/0YF8W/ /D3eDv8A5haAD/iOD+BH/RgXxb/8Pd4O/wDmFoAP+I4P4Ef9GBfFv/w93g7/AOYWgA/4jg/gR/0Y F8W//D3eDv8A5haAD/iOD+BH/RgXxb/8Pd4O/wDmFoAP+I4P4Ef9GBfFv/w93g7/AOYWgA/4jg/g R/0YF8W//D3eDv8A5haAD/iOD+BH/RgXxb/8Pd4O/wDmFoAP+I4P4Ef9GBfFv/w93g7/AOYWgA/4 jg/gR/0YF8W//D3eDv8A5haAD/iOD+BH/RgXxb/8Pd4O/wDmFoAP+I4P4Ef9GBfFv/w93g7/AOYW gA/4jg/gR/0YF8W//D3eDv8A5haAD/iOD+BH/RgXxb/8Pd4O/wDmFoAP+I4P4Ef9GBfFv/w93g7/ AOYWgA/4jg/gR/0YF8W//D3eDv8A5haAD/iOD+BH/RgXxb/8Pd4O/wDmFoAP+I4P4Ef9GBfFv/w9 3g7/AOYWgA/4jg/gR/0YF8W//D3eDv8A5haAD/iOD+BH/RgXxb/8Pd4O/wDmFoAP+I4P4Ef9GBfF v/w93g7/AOYWgA/4jg/gR/0YF8W//D3eDv8A5haAD/iOD+BH/RgXxb/8Pd4O/wDmFoAP+I4P4Ef9 GBfFv/w93g7/AOYWgA/4jg/gR/0YF8W//D3eDv8A5haAPHv2h/8Ag80+CXxu+AHxy+C9l+wz8VNA vPi78HviZ8MLTXbr4yeEr620W68feCtb8KQatc2UXguCW8g06XVkvJrWKeGS4jhaJJY2cOAD+Amg D//Z0N1QSwMEFAAGAAgAAAAhAC2ZyvtXBAAATQsAABEAAAB3b3JkL3NldHRpbmdzLnhtbKRW227b OBB9X2D/wdDzOrpbtlCn8EXaTRBvgzr9AEqibW54EUjKjvv1O6SkOEbUoGifRM2Z+wxn+OnzC6Oj I5aKCD53/BvPGWFeiorw/dz59pSPp85IacQrRAXHc+eMlfP59s8/Pp1ShbUGNjUCFVylrJw7B63r 1HVVecAMqRtRYw7gTkiGNPzKvcuQfG7qcSlYjTQpCCX67AaeN3E6NWLuNJKnnYoxI6UUSuy0EUnF bkdK3H16CfkzdlvJtSgbhrm2Fl2JKfgguDqQWvXa2K9qgxAPvZLjR0EcGe35Tr73EWcX7knI6lXi Z9wzArUUJVYKCsRoGy5DhL+q8aN3il5TfQOpdlvbrlEF4r5nTxfPFX0nP1DttooPpJBItmWGBjBe sDK923MhUUGhqU5+5NxCR30Xgo1OaY1lCUWCdoymjmsALVH5/BUfiWlTZUkV3qGG6idUbLWoQeqI wKUk8FqJ8oBARmO5rVEJSVgJrqWgPV8l/hV6BU0oIUethEJH/CjBBj49klI3Els7bacaJxqF8+wB nUWj3yDb9haAYo4YxNLyd529ERV2AGokeZeuH6bbCNhgICsfGBJwayWpMGSA4q0+U5xDjFvyHS94 dd8oTeCu2P7+DQ8+cgBzY/kL3PGnc41zjEzO4B79crgfGbMFyympN0RKIe94BR3yu8bcU3opL4zA Spk6m8NXIXRfBs9LZnHsdY1l0AvirZJkMWkdv0b8MIqTQZlgEkaLcEgmWCbRbDGIZHGWx0NIFE+m 665Rrj2IQ8+LgyGZOIyW+WoISXw/XyaDSJSshnPw4+wkmZd56yFt09BbL7IhZJbH8WowowvPC+LZ kMwyCQN/0OtVGEbr5ZDMeuKvknwQmflRMFiFzJsE00GvM9+LksGaZgt/tvSH7GRLP551A+66cpAC f2rrAx1qIOhLlpoF8yj7k7nsI9YOihVihSRotDErCEYGSwv5vCS8xwsMKxi/RbZN0YPjcQsohijN YWj2gG1ellZE1Wu8s2rpBsn9RW/HIQepMKDvX3WZeY7l31I0dWvtJFHdXuLenB9FnT7C9QNhPV01 xbaX4rBG3kANr74cpVHoXtID2wJeH3YYPiC+7+8q5uNvWzOcMFJ6oQiaO/+h8f2jkYYxQOXWPFrw BtU1rAvgK/b+3KFkf9C+EdPwV8Hjxf4U+6DDAovBn8HsDypNsMDdHQxDewSu7nChhT0tvNBgNbd8 0YUW97T4Qpv0NHg8ndIDDGFJCX+GTdMfDX0nKBUnXP3TE+fOO1KbBDtjF40W/WLs9mC7cNUB1Rga wWxd6EeRWkK3htXomOIXWNm4IhpejDWpGHqBDe4F9i533NRuzyteo8kw11fUUYU0VMjeG/dKGGoN T89rX05phUsC/bs9s+Ky5G/asChReotreA9oISEhdrf+ZTE/SitR3sFAh5Olh142TbKsHVoGbgO+ Y2iP1zV5y2i71TjTvYNv/wcAAP//AwBQSwMEFAAGAAgAAAAhAOXKs0MFAQAArwEAABQAAAB3b3Jk L3dlYlNldHRpbmdzLnhtbIzQUUvDMBAH8HfB71DyvqaVIVLWDkEmvgxh+gHS9NoGk1zIZYv79t42 FcSXveW43I+7/2r96WxxgEgGfSvqshIFeI2D8VMr3t82iwdRUFJ+UBY9tOIIJNbd7c0qNxn6HaTE P6lgxVPjdCvmlEIjJekZnKISA3hujhidSlzGSToVP/ZhodEFlUxvrElHeVdV9+KbidcoOI5GwxPq vQOfzvMygmURPc0m0I+Wr9EyxiFE1EDE9zh78Zwy/pepl/8gZ3REwjGVfIy8bCRPFI/X1fnlrCic bl4mj1H1lhPM9VJ0HJ+yFvPr9lmeigG3mHbqAI+04wUsbIwF7sg/MXdfAAAA//8DAFBLAwQUAAYA CAAAACEAiaWfI3MJAACLSQAAGgAAAHdvcmQvc3R5bGVzV2l0aEVmZmVjdHMueG1s3FzbcuM2En3f qv0HFt89utgjj1XRpDyynXHVJHEiT+0zRUEW1iTBJSlrnK9Po0GCEC9iw6S3tvZJEgj06RtOQzLa P/38IwycF5akXEQLd/Jh7Dos8sWGR08L9/vj3dkn10kzL9p4gYjYwn1lqfvz53/+46fDPM1eA5Y6 ICBK54fYX7i7LIvno1Hq71jopR9C7iciFdvsgy/Ckdhuuc9GB5FsRtPxZIzv4kT4LE0BbelFL17q 5uJCQZMWen4heDoefxqFHo+0jLpGImYR6LsVSehl6QeRPMGK5Hkfn4GGsZfxNQ949gr6jWdazMvC 3SfRPLfqTFsl18xBgflLGBSTQe32ucoDc/VSrEhqhjYoqZbcCH8fsihD9UYJC0BhEaU7Hpd+e6s0 8MeuUOmkwYaxh3hyUcPT7qEE/SbxDhD7AvgQ18Q1OGOjFoWB8oNMqDKNqhInY0JEpAitA0WFY8xC EzP5Dm9zTZlJhxg2YJ8N9Usi9rG2Kub9pN1Hz1qW5AELzcYz3OqmaamVgBpXrHZezFwn9Of3T5FI vHUAGoHHHZmR7mfgpo3wb9jW2wdZKj8mD0n+Mf+EL3ciylLnMPdSn/NH4CyQEnIQ+PU6SrkLT5iX Ztcp98yHt/mYfL6TE82HeqWfZobAL3zD3ZEETf+CZS9esHCnF8XIUipxNBZ40VMxxqKz7ytTmYWr h9Ygd+F6ydnqWgoboaXFq2FxrO1XsyruASIBWlkpPgfnse034T+zzSqDBwsXagIOfr9/SLhIgCAX 7tVVPrhiIf/KNxsmy0cxMdrxDfvXjkXfU7Ypx/+4Q+LNJfpiH2Xgh8sZhixIN7c/fBZLTgO8yJPh +E0uAHYFxxk4qNCel9qogQoqDv6ngJwobzei7JgnC56D+p8EQqv3vYGm0iLTAJRrpet5fxEX/UV8 7C8CCm1fX1z2FwHHnL5aqNwwspIe1Ez4KvnMnDi/OpGyckUtizpX1JKmc0UtRzpX1FKic0UtAzpX 1ALeuaIW384VtXCeXOF7SFzVLDpHb5A29iPPAihqHUw36Ul1eVFwHrzEe0q8eOfIKlhV+xRZrvbr jKYq0unbyXKVJUKeDTs8MlXb4M2cfBvGOy/lcITuAurp+kd5TnF+STicNTugPqrkq9mER4jGEvYQ eD7biWDDEueR/VARtVj/m3BWsefjYbxDuZ5h/cafdpkDRzhZcjs9MWtxersnlPxvPEUfnKzmsxZT uoSTYjhryct24b+yDd+HhWsIp5GZ4nOLMFcgUMXTLrqQIapv4k4rZAAoJqhyYW8Cyifor4qLvXwZ Y4r+qhS9UT5Bf1W43igf8+N0fK2Z5gZ+MHFI2+vSeu8uRSCS7T4o9kAnPVxa72ANQTPBehNr+SSS uLTewUf06Vz7Pnxzo+SpdSxKHrVAsQ6HQsHNRrfFOigV2ptYWGQdoArW1AKrH9daAFmT7p/shcuf iG2LAbK0Pmt2bufzFg9ACSKdof/Yi6z7DD1t4Twqyn0EP5ekzKGhnbfsPCpank+q3lnEuF/hswDq VwEtgPqVQguglvxoP/PomkgH6V8cLbCsaVlXMUw7MjNfWjOzBrIrAQPVTcL5q2X3tudCvW4SUKwD VK+bBBTr6FRqma6bBKzB6iYBq6VqtMfI5FQbo6zrpgmkTwIEi4YhbwLQMORNABqGvAlA/cm7G2Q4 8iZgWXOD5lSTvAlAOMXmq74GMsmbAGTNDYrt8t+MirqHUk5/uR2AvAko1gGqkzcBxTo6beRNwMIp NplQwdJUR8AahrwJQMOQNwFoGPImAA1D3gSgYcibANSfvLtBhiNvApY1N2hONcmbAGRNDxrIJG8C EE6x4YZG8sZd/+7kTUCxDlCdvAko1tGpEKo+pBKwrANUwdLkTcDCKTbJkGNhctsYNQx5EywahrwJ QMOQNwFoGPImAPUn726Q4cibgGXNDZpTTfImAFnTgwYyyZsAZM0NjeSNm/HdyZuAYh2gOnkTUKyj UyFUzXMELOsAVbA0eROwMF96kzcBCKe8FcjGomHIm2DRMORNABqGvAlA/cm7G2Q48iZgWXOD5lST vAlA1vSggUzyJgBZc0MjeeMeeXfyJqBYB6hO3gQU6+hUCFWTNwHLOkAVLE11BKxhyJsAhInZm7wJ QDjlDUC4i2zCNAx5EywahrwJQP3JuxtkOPImYFlzg+ZUk7wJQNb0oIFM8iYAWXODvGcL90XJ11Mn LUlAvWdQ3GogA05bgkQFzA38k21ZAj2HrPt2SE/AwkILxJb0oJr4RYhnh3ax+7wlQchQfB1wgVe6 X/GWjtGIcH55opPg8fel81U1wNTWYUod37yBHiOzXQh7mmTjEOiZvcbQshMXN8ulNGglkk1YeQsQ dozeQ0NQ3tYjF8s+H5iI7U/5MP7dNkeF94CIC+tQ/g6w/IwlJ6DyC+/6DhJed68Ct9yKR0XKloxC zfx2fHmGUvOO7mie1DuTN8FP6Iw3xU/6yMEpKqp1BaE5C1Xq0hBCtg4eEukNeHMfbcDCQ96dpYK5 +eEpUfB8yYLgV0/NFnH71IBtM/V0MsYKWBG1Flkmwvb1CV4QR02aBEA6mMqoj9KI9jyJ9uGaJfl1 89aUlJUDO9GOU1LddW1JBaqn23U72i56g8B1fh7hPf5qquITdcUfdVp70GL3u+yYq22hgEfPxbgW uIQ905U3x4cwhIEGcZkdiDEeX95czqZ3Sgz0Vkodk6NuyoW7FPuEq52JXZLliErNsg+y2E5/GX2Q OAZOQ+HtzjsiAH+fQl5hF2OVb46tb3epU3qn4tdGGkFLGr3c5eH/TXc25+IXLwiEaM7G/Jl9PhpC S5/3YbJjj17dffy4nJ1M0G97n2886MeBf26AZJynaW3ch27l48FKBk8+KaDUyGA1NlwGV/1VzWEz EH2z2MDqyuNKhfl/CILm4KUI5X9bKE+LVZ97USSgQ1r2Kyf6EIu5QSaP4TL+djK+gFuRCJ9Tctlr 3idDm0khd05jiTL8kslWtCaXmEc9k0ENue/BC6WX+heVqqrV9MifIzf23ZIGVq8tSbH/ZMDhS9u/ mV8/JxkxT/MpTWGv2RFBghTnitrDhsTI8d83N/Jzx2G+VjYsU3wt99N0rKJgMr4aG47xc2+YBrdl WD6nPckMz5aea/fuQCn233Oj5uy8Z7jqqHy4KSPbD3Z1boZWYxRRfjcFE48OxrfXk6sv+YE2Z2Ez h+rZUdBQ+vlvAAAA//8DAFBLAwQUAAYACAAAACEA8vw7hdQIAAApRgAADwAAAHdvcmQvc3R5bGVz LnhtbNxbbVPbOBD+fjP3Hzz+3oaElxSmaQcCXJnpC23o3GfHVogO28rZTin99bdayYpix/EKm5ub +wSRrX20u4+eVUD79v3PJPZ+sCznIp34w9cHvsfSUEQ8vZ/43++uX73xvbwI0iiIRcom/hPL/ffv fv/t7eNZXjzFLPfAQJqfJeHEXxbF6mwwyMMlS4L8tVixFB4uRJYEBXzM7gdJkD2sV69CkayCgs95 zIunwejg4MTXZjKKFbFY8JBdinCdsLTA+YOMxWBRpPmSr/LS2iPF2qPIolUmQpbn4HQSK3tJwFNj ZnhUM5TwMBO5WBSvwZmBWtFAmoLpwwP8LYl9LwnPbu5TkQXzGIL3ODzy30HkIhFeskWwjotcfsxu M/1Rf8If1yItcu/xLMhDzu8gpGAg4WDrw3macx+esCAvznMe2A+v9Jh8vpQv2g/NzDAvLIMXPOL+ QILmv2DajyCe+KOjcmQqF7E1FgfpfTnG0lffZ/ZiJr4ZmoPdiR9kr2bn0tgAPS1/Wh6vjP/qrUp4 ILGQ5pliGwSPLT6K8IFFswIeTHxgLA5+v7nNuMiAURP/9FQPzljCP/AoYpLc5YvpkkfszyVLv+cs 2ox/vUamaouhWKcFxGF8gimL8+jqZ8hWkmOAlwYyHZ/lBMgyBM7CwQWt+WY1aqCCioN/l5BDFe2d KEsWyO3o4fr3AqHX685AI+mR7QDadVrrYXcTR91NHHc3AcrUNRbj7iZAhLuuQnHDYiU9qYUIFfls Thye7qGsnFFjUeuMGmlaZ9Q40jqjRonWGTUGtM6oJbx1Ri2/rTNq6dw7IwxQuKosOsRokDb2HS9i JufvFaBhR6nTRcG7DbLgPgtWS09Wweqy94nlbD0vaEtFOX2+WM6KTKT3rREZqW3wbE2+SlbLIOdw pGkJ/ahj6O/kEcX7I+NRK9SxIl/NJzxC7Cxht3EQsqWII5Z5d+ynyqjD/M/Cm62CEKpg6+I6pvUj v18W3myJJbcV7KQh6M2RUPY/8hxjsHcznTS40maclMOTBl42G//EIr5OytAQTiMnSs8d0lyBwCXu D9GRTFF9E7d6IRNAcUGVC3cX0D5h/aq4uNuXOaasX5WiZ9onrF8VrmfaR37sz6+z0lzCN0yPtL3G znt3KmKRLdZxuQda5WHsvIMNBM0F501s7JNEYuy8g7fk0zsPQ/jmRuGpcy42OuqA4pwOhYKbje6L c1Iqsjd08Mg5QRWskQNWN611AHIW3W/sB5d/wHItBqjS5qzZup0PGyIAJYh0hv66FkX7GXrUoHlU lJsU/lySM4+Gdtiw86homk+q3jnkuFvhcwDqVgEdgLqVQgegBn40n3lMTaSDdC+ODljOsmyqGNKO rMxjZ2U2QG4loKe6STh/NezeZi7U6yYBxTlB9bpJQHHOTqWWmbpJwOqtbhKwGqpGc45sTXVxyrlu 2kDmJEDwqB/xJgD1I94EoH7EmwDUXbzbQfoTbwKWszYYTbXFmwCEr7h81TdAtngTgJy1Qamd/ptR WffQyv4vtz2INwHFOUF18SagOGenSbwJWPiKCxMqWEbqCFj9iDcBqB/xJgD1I94EoH7EmwDUj3gT gLqLdztIf+JNwHLWBqOptngTgJzlwQDZ4k0AwldctGGneOOuf3HxJqA4J6gu3gQU5+xUBNUcUglY zgmqYBnxJmDhKy5k0FhIbhen+hFvgkf9iDcBqB/xJgD1I94EoO7i3Q7Sn3gTsJy1wWiqLd4EIGd5 MEC2eBOAnLVhp3jjZnxx8SagOCeoLt4EFOfsVATV6BwByzlBFSwj3gQs5Etn8SYA4SvPBXLxqB/x JnjUj3gTgPoRbwJQd/FuB+lPvAlYztpgNNUWbwKQszwYIFu8CUDO2rBTvHGPvLh4E1CcE1QXbwKK c3YqgmrEm4DlnKAKlpE6AlY/4k0AQmJ2Fm8CEL7yDCDcRS5p6ke8CR71I94EoO7i3Q7Sn3gTsJy1 wWiqLd4EIGd5MEC2eBOAnLVB3rOF+6Lk66nDBhJQ7xmUtxrIgKOGJFEBtYPf2IJl0BHF2m+HdAQs PXRAbKAH1cULIR482sXuwwaCkKH4POYCr3Q/4S0dqxHhcLynk+Duy9T7oBpgavOQUts3b6DHyG4X wp4m2TgE6yyeVtCysypvlktr0Eokm7B0CxD2s91AQ5Bu65GTZZ8PvIjtT3oY/2+rUeF3QMSJdahw CVhhwbI9UPrCu7mDhNfdq8ANt+JxIZuWjHKZ+nb85gyl3tu6o7l33YW8Cb5nzXhTfG+MPHxFZbW+ QGjOwiW1rRBSNo9vMxkN+OUmjcBD6OjD/5qpZEY/A2UKnk9ZHH8K1Nti1fxqzBaFejo8wApYMTUX RSGS5vkZXhDHlewyAHSwF6M+SieaeZKukznL9N32RkrKyoGdaNuUVHddG6hAjXTz2ra2i9kgcJ2f p3iPv0pVfKKu+OOa5gG02H2RHXO1LRTz9KEcNwansGfaeLN9CEMYaF+V7ECMg4Px5fhkdK3MQG+l XGO21U058adinXG1M7FLcjOiqLnpgyy30y+rDxLHIGhovDl4WwIQrnPgFXYxVvVm2/vmkHqb6FTi ulNG0JOdUW6L8H8znLu5eBHEsRC72aifufPRMrqJeRcl247o6fXx8fRkL0E/rkMeBdCPA63XKMaa prXxMJ/424MVBg/fKKDcYrAa64/B1XhVOWwnoiuLLaw2HlcqzP8hCUaDpyKR3e+b02I15kGaCuiQ lv3KmTnEIjfI4tEf46+GB0dwKxLhtSRves27MHS3KOjg7CxRVlwK2Yq2KyT2Uc9WUMvuS+jCJkrd i0p1qVV66OeojV23pIXVaUtS/N+bcPjS9hcL6+ckK+e5fmVX2mt+pECQ8lxRe7iDGBr/Zbmhzx2P Z3PlwzTHn5v9BK2gesQ6s+BYf4qvo2E73MQw/U4zyazIbiLXHN2eKPbvhdFotu4ZrgZKD+9iZPPB rq7N0GqMJjbfTcHFrYPx1fnw9EIfaLUK2xyqs6OUofzdPwAAAP//AwBQSwMEFAAGAAgAAAAhAKbK 98RzAQAA5wIAABEACAFkb2NQcm9wcy9jb3JlLnhtbCCiBAEooAABAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAJxSwW7CMAy9T9o/VLmXtLAhVLVF2iZOQ5o2JqbdssRARptEiaHw90tbKFTbabfY 7/nZfk46PZRFsAfrpFYZiQcRCUBxLaRaZ+R9MQsnJHDIlGCFVpCRIzgyzW9vUm4Sri28WG3AogQX eCXlEm4yskE0CaWOb6BkbuAZyoMrbUuGPrRrahjfsjXQYRSNaQnIBENGa8HQdIrkJCl4J2l2tmgE BKdQQAkKHY0HMb1wEWzp/ixokCtmKfFo/E6nca+1BW/Bjn1wsiNWVTWoRs0Yfv6Yfsyf35pVQ6lq rziQPBU8QYkF5Cm9PP3L7b6+gWOb7gIPcAsMtc1fg6UsUKum7pys7d7CsdJWOF/ai3ytAMetNOiP 2Ar3Ep5dMIdzf9WVBPFwvOrxG6tbWdjL+kfkw6ZXF/qtGhPbYUEE3pakNfGMLEePT4sZyYdRPA6j URhNFvEkubtPouizXqlXX9vUJsrTcP9WPAu07vS/Zv4DAAD//wMAUEsDBBQABgAIAAAAIQDa9Mqk sQIAAP8JAAASAAAAd29yZC9mb250VGFibGUueG1s1FW7btswFN0L9B8E7okoWU4cI3LguHFRoOhQ uB9A05RNVCQFkorjNdk7d2g/oejQAl3yNway5hd69bQTy7WLwkNpGJIOeQ/Jw3Mvzy9uROxcM224 kiHyjjFymKRqwuU0RB9Gw6MOcowlckJiJVmIFsygi97LF+fzbqSkNQ7ES9MVNEQza5Ou6xo6Y4KY Y5UwCZ2R0oJY+NRTVxD9MU2OqBIJsXzMY24Xro/xCSpp9D4sKoo4Za8UTQWTNo93NYuBUUkz44mp 2Ob7sM2VniRaUWYM7FnEBZ8gXNY0XrBBJDjVyqjIHsNm3GJFbkYF4R7O30SMHEG7b6ZSaTKOQbu5 F6BeKZwz70oiABwQMdac5B0JkcowD/quSRwi7OMAt3EL/gE+gSd8IzdjoDOiDbP1QFzAERE8XlQo Sa0q8IRbOqvgawLTwXqKLsOn0JGaMQ7RFYbmD4eoQLwQBRkS1IgPaypbOab1FKE5Tz7EO8t5AAGe OgpW7xbO2RDi8f7b4/0P5+Hzp4cvXxvlqFjWno1ydBrl0EoQWYyXyo50ykaLhOVyPtEn4jdssilO Oam3Egd38GmGlkgtjlch28QBxxdR+4sz4oIZ5x2bO+/zbWTqbbrFz12SuaUNXmkd3i1+v/YGnPIA tnXaCSqJakHw2W63FDz7CzJQqeZMN/ok07edabxqjT6BQ8iP/x/TppylteaMEnrujNor25yRxeXy 7S/E25TyCXFea6jRbIscl+ALyOPcFf7Bq4gHc/Wv1qpIdhZ9r3bKyhe7EgXEuPzLKtKH4hb/QYYA tl/9Dl5MG9Oj8slKhgOkR1lMl7c/l7e/lnd3y9vvjaLAyTxvjanSXFKFmjD939bUAYk5XL2Nuvh4 uMqWw9+85RlU1li/MYu7eGWW3Tmzu4SUV7Dp/QYAAP//AwBQSwMEFAAGAAgAAAAhAMoYsNaHAQAA 2QIAABAACAFkb2NQcm9wcy9hcHAueG1sIKIEASigAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAnFLBTsQgEL2b+A9N7y5tXXVjZjFmjfGgxmSrnglMWyIFAmjcv3dq3W6NNznNvIHHew/g6rM3 2QeGqJ1d5+WiyDO00ilt23X+XN+erPIsJmGVMM7iOt9hzK/48RE8BecxJI0xIwob13mXkr9kLMoO exEXNLY0aVzoRaI2tMw1jZZ44+R7jzaxqijOGX4mtArViZ8I85Hx8iP9l1Q5OeiLL/XOk2AONfbe iIT8cZBjFsqlHtiEQu2SMLXukZcETw08iRYjP62AjRW8uqAiL8uyIGxsYNOJIGSiEPn5abW6ADZD 4Np7o6VIFDB/0DK46JqUPQipbXKxywYSYPNdQAltUb4HnXa8ADZv4V5bUnRW0S1jSRqDaIPwHela rgalUw9bKQxuKAreCBMR2AGAjeu9sDtOcvcVMb7FZ1+7myGrnyO/wZnbV526rReS9FwsqyUld/A9 m8GW8kFFLvaMBwDu6IGCGa6ls7ZFtd/zdzAk+TL+VDK6KGh957bHyPn0hfgXAAAA//8DAFBLAQIt ABQABgAIAAAAIQCLQKs2mQEAAEUGAAATAAAAAAAAAAAAAAAAAAAAAABbQ29udGVudF9UeXBlc10u eG1sUEsBAi0AFAAGAAgAAAAhAMfCJ7wMAQAA3wIAAAsAAAAAAAAAAAAAAAAA0gMAAF9yZWxzLy5y ZWxzUEsBAi0AFAAGAAgAAAAhANjtvv4uAQAAPAQAABwAAAAAAAAAAAAAAAAADwcAAHdvcmQvX3Jl bHMvZG9jdW1lbnQueG1sLnJlbHNQSwECLQAUAAYACAAAACEAbzzkKbqzAABQHQoAEQAAAAAAAAAA AAAAAAB/CQAAd29yZC9kb2N1bWVudC54bWxQSwECLQAUAAYACAAAACEAPjeSQmwRAACxSgAAEQAA AAAAAAAAAAAAAABovQAAd29yZC9jb21tZW50cy54bWxQSwECLQAUAAYACAAAACEAIVqihCEHAADb HQAAFQAAAAAAAAAAAAAAAAADzwAAd29yZC90aGVtZS90aGVtZTEueG1sUEsBAi0ACgAAAAAAAAAh ACIm9hs8IgEAPCIBABcAAAAAAAAAAAAAAAAAV9YAAGRvY1Byb3BzL3RodW1ibmFpbC5qcGVnUEsB Ai0AFAAGAAgAAAAhAC2ZyvtXBAAATQsAABEAAAAAAAAAAAAAAAAAyPgBAHdvcmQvc2V0dGluZ3Mu eG1sUEsBAi0AFAAGAAgAAAAhAOXKs0MFAQAArwEAABQAAAAAAAAAAAAAAAAATv0BAHdvcmQvd2Vi U2V0dGluZ3MueG1sUEsBAi0AFAAGAAgAAAAhAImlnyNzCQAAi0kAABoAAAAAAAAAAAAAAAAAhf4B AHdvcmQvc3R5bGVzV2l0aEVmZmVjdHMueG1sUEsBAi0AFAAGAAgAAAAhAPL8O4XUCAAAKUYAAA8A AAAAAAAAAAAAAAAAMAgCAHdvcmQvc3R5bGVzLnhtbFBLAQItABQABgAIAAAAIQCmyvfEcwEAAOcC AAARAAAAAAAAAAAAAAAAADERAgBkb2NQcm9wcy9jb3JlLnhtbFBLAQItABQABgAIAAAAIQDa9Mqk sQIAAP8JAAASAAAAAAAAAAAAAAAAANsTAgB3b3JkL2ZvbnRUYWJsZS54bWxQSwECLQAUAAYACAAA ACEAyhiw1ocBAADZAgAAEAAAAAAAAAAAAAAAAAC8FgIAZG9jUHJvcHMvYXBwLnhtbFBLBQYAAAAA DgAOAI0DAAB5GQIAAAA= --Apple-Mail=_30DCC5D2-F15E-4060-AA17-EF7F84372810 Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=us-ascii
--Apple-Mail=_30DCC5D2-F15E-4060-AA17-EF7F84372810 Content-Disposition: attachment; filename=draft-ietf-ace-actors-03-rw.txt Content-Type: text/plain; name="draft-ietf-ace-actors-03-rw.txt" Content-Transfer-Encoding: quoted-printable =0D=0D=0D=0DACE Working Group = S. Gerdes=0DInternet-Draft = Universitaet Bremen TZI=0DIntended status: Informational = L. Seitz=0DExpires: September 2, 2016 = SICS Swedish ICT AB=0D = G. Selander=0D = Ericsson=0D = C. Bormann, Ed.=0D = Universitaet Bremen TZI=0D = March 01, 2016=0D=0D=0D An architecture for = authorization in constrained environments=0D = draft-ietf-ace-actors-03=0D=0DAbstract=0D=0D Constrained-node networks = are networks where some nodes have severe=0D constraints on code size, = state memory, processing capabilities, user=0D interface, power and = communication bandwidth (RFC 7228).=0D=0D This document provides = terminology, and identifies the elements that=0D an architecture needs = to address, providing a problem statement, for=0D authentication and = authorization in these networks.=0D=0DStatus of This Memo=0D=0D This = Internet-Draft is submitted in full conformance with the=0D provisions = of BCP 78 and BCP 79.=0D=0D Internet-Drafts are working documents of = the Internet Engineering=0D Task Force (IETF). Note that other groups = may also distribute=0D working documents as Internet-Drafts. The list = of current Internet-=0D Drafts is at = http://datatracker.ietf.org/drafts/current/.=0D=0D Internet-Drafts are = draft documents valid for a maximum of six months=0D and may be = updated, replaced, or obsoleted by other documents at any=0D time. It = is inappropriate to use Internet-Drafts as reference=0D material or to = cite them other than as "work in progress."=0D=0D This Internet-Draft = will expire on September 2, 2016.=0D=0DCopyright Notice=0D=0D = Copyright (c) 2016 IETF Trust and the persons identified as the=0D = document authors. All rights reserved.=0D=0D This document is subject = to BCP 78 and the IETF Trust's Legal=0D Provisions Relating to IETF = Documents=0D=0D=0D=0DGerdes, et al. Expires September 2, 2016 = [Page 1]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D (http://trustee.ietf.org/license-info) in effect on the = date of=0D publication of this document. Please review these = documents=0D carefully, as they describe your rights and restrictions = with respect=0D to this document. Code Components extracted from this = document must=0D include Simplified BSD License text as described in = Section 4.e of=0D the Trust Legal Provisions and are provided without = warranty as=0D described in the Simplified BSD License.=0D=0DTable of = Contents=0D=0D 1. Introduction . . . . . . . . . . . . . . . . . . . = . . . . . 3=0D 1.1. Terminology . . . . . . . . . . . . . . . . . = . . . . . . 4=0D 2. Architecture and High-level Problem Statement . = . . . . . . . 6=0D 2.1. Elements of an Architecture . . . . . . . = . . . . . . . . 6=0D 2.2. Architecture Variants . . . . . . . . . = . . . . . . . . . 8=0D 2.3. Information Flows . . . . . . . . . . = . . . . . . . . . . 11=0D 3. Security Objectives . . . . . . . . . . = . . . . . . . . . . . 12=0D 3.1. End-to-End Security Objectives in = Multi-Hop Scenarios . . 13=0D 4. Authentication and Authorization . = . . . . . . . . . . . . . 14=0D 5. Actors and their Tasks . . . . . = . . . . . . . . . . . . . . 16=0D 5.1. Constrained Level Actors . = . . . . . . . . . . . . . . . 16=0D 5.2. Principal Level Actors . = . . . . . . . . . . . . . . . . 17=0D 5.3. Less-Constrained Level = Actors . . . . . . . . . . . . . . 18=0D 6. Kinds of Protocols . . = . . . . . . . . . . . . . . . . . . . 18=0D 6.1. Constrained Level = Protocols . . . . . . . . . . . . . . . 19=0D 6.1.1. Cross Level = Support Protocols . . . . . . . . . . . . 19=0D 6.2. = Less-Constrained Level Protocols . . . . . . . . . . . . 19=0D 7. = Elements of a Solution . . . . . . . . . . . . . . . . . . . 20=0D = 7.1. Authorization . . . . . . . . . . . . . . . . . . . . . . 20=0D = 7.2. Authentication . . . . . . . . . . . . . . . . . . . . . 20=0D = 7.3. Communication Security . . . . . . . . . . . . . . . . . 21=0D= 7.4. Cryptographic Keys . . . . . . . . . . . . . . . . . . . 22=0D= 8. Assumptions and Requirements . . . . . . . . . . . . . . . . 22=0D= 8.1. Architecture . . . . . . . . . . . . . . . . . . . . . . 22=0D= 8.2. Constrained Devices . . . . . . . . . . . . . . . . . . . 23=0D= 8.3. Authentication . . . . . . . . . . . . . . . . . . . . . 24=0D= 8.4. Server-side Authorization . . . . . . . . . . . . . . . . 24=0D= 8.5. Client-side Authorization Information . . . . . . . . . . 25=0D= 8.6. Server-side Authorization Information . . . . . . . . . . 25=0D= 8.7. Resource Access . . . . . . . . . . . . . . . . . . . . . 26=0D= 8.8. Keys and Cipher Suites . . . . . . . . . . . . . . . . . 26=0D= 8.9. Network Considerations . . . . . . . . . . . . . . . . . 26=0D= 8.10. Legacy Considerations . . . . . . . . . . . . . . . . . . 27=0D= 9. Security Considerations . . . . . . . . . . . . . . . . . . . 27=0D= 9.1. Physical Attacks on Sensor and Actuator Networks . . . . 27=0D= 9.2. Time Measurements . . . . . . . . . . . . . . . . . . . . 29=0D= 10. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 29=0D= 11. Acknowledgements . . . . . . . . . . . . . . . . . . . . . . 29=0D= =0D=0D=0DGerdes, et al. Expires September 2, 2016 = [Page 2]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D 12. Informative References . . . . . . . . . . . . . . = . . . . . 29=0D Authors' Addresses . . . . . . . . . . . . . . . . . = . . . . . . 31=0D=0D1. Introduction=0D=0D As described in RFC7228, = constrained nodes are small devices with limited abilities which in=0D = many cases are made to fulfill a specific simple task. Our starting = assumption is that they have=0D limited hardware resources such as = processing power, memory, non-=0D volatile storage and transmission = capacity and additionally in most=0D cases do not have user interfaces = and displays. Due to these=0D constraints, commonly used security = protocols are not always easily=0D applicable, and may give rise to = particular deployment/management challenges.=0D=0D As components of = the Internet of things, constrained nodes are expected to be integrated = in all aspects of=0D everyday life and thus will be entrusted with = vast amounts of data.=0D Without appropriate security mechanisms = attackers might gain control=0D over things relevant to our lives. = Authentication and authorization=0D mechanisms are therefore = prerequisites for a secure Internet of=0D Things.=0D=0D = Authorization is about who can do what to which objects [cf. RFC4949].=0D= Authentication specifically addresses the who, but is often specific=0D= to the authorization that is required (for example, it may be=0D = sufficient to authenticate the age of an actor, so no identifier is=0D = needed or even desired). Authentication often involves credentials,=0D = only some of which need to be long-lived and generic; others may be=0D = directed towards specific authorizations (but still possibly long-=0D = lived). Authorization then makes use of these credentials, as well=0D = as other information (such as the time of day). Applications generally = require some degree of authentication and authorization, which gives = rise to complexity. =0D=0D In some cases authentication and = authorization can be addressed by=0D static configuration provisioned = during manufacturing or deployment=0D by means of fixed trust anchors = and static access control lists.=0D This is particularly applicable to = siloed, fixed-purpose deployments.=0D=0D However, as the need for = flexible access to assets already deployed=0D increases, the = legitimate set of authorized entities as well as their=0D specific = privileges cannot be conclusively defined during deployment,=0D = without any need for change during the lifetime of the device.=0D = Moreover, several use cases illustrate the need for fine-grained=0D = access control policies, for which for instance a basic access=0D = control list concept may not be sufficient [RFC7744].=0D=0D The = limitations of the constrained nodes impose a need for security = mechanisms=0D which take the special characteristics of constrained = environments=0D into account; not all constituents may be able to = perform all=0D=0D=0D=0DGerdes, et al. Expires September 2, 2016 = [Page 3]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D necessary tasks by themselves. To put it the other way = round: the security mechanisms which protect constrained nodes must = remain effective and manageable despite the limitations imposed by the = constrained environment.=0D=0D Therefore, in order to be able to = achieve complex security objectives between=0D actors some of which = are hosted on simple ("constrained") devices,=0D some of the actors = will make use of help from other, less constrained=0D actors. (This = offloading[1] is not specific to networks with=0D constrained nodes, = but their constrainedness as the main motivation=0D is.)=0D=0D We = therefore group the logical functional entities by whether they=0D can = be assigned to a constrained device ("constrained level") or need=0D = higher function platforms ("less-constrained level"); the latter does=0D = not necessarily mean high-function, "server" or "cloud" platforms.=0D = Note that assigning a logical functional entity to the constrained=0D = level does not mean that the specific implementation needs to be=0D = constrained, only that it _can_ be.=0D=0D This document provides some = terminology, and identifies the elements=0D an architecture needs to = address, representing the relationships=0D between the logical = functional entities involved; on this basis, a=0D problem description = for authentication and authorization in=0D constrained-node networks = is provided.=0D=0D1.1. Terminology=0D=0D Readers are assumed to be = familiar with the terms and concepts=0D defined in [RFC4949], = including "authentication", "authorization",=0D "confidentiality", = "(data) integrity", "message authentication code",=0D and "verify".=0D=0D= REST terms including "resource", "representation", etc. are to be=0D = understood as used in HTTP [RFC7231] and CoAP [RFC7252]; the latter=0D = also defines additional terms such as "endpoint".=0D=0D Terminology = for constrained environments including "constrained=0D device", = "constrained-node network", "class 1", etc. is defined in=0D = [RFC7228].=0D=0D In addition, this document uses the following = terminology:=0D=0D Resource (R): an item of interest which is = represented through an=0D interface. It might contain sensor or = actuator values or other=0D information. (Intended to coincide = with the definitions of=0D [RFC7252] and [RFC7231].)=0D=0D = Constrained node: a constrained device in the sense of [RFC7228].=0D=0D=0D= =0DGerdes, et al. Expires September 2, 2016 [Page = 4]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D Actor: A logical functional entity that performs one or = more tasks.=0D Multiple actors may be present within a single = device or a single=0D piece of software.=0D=0D Resource Server = (RS): An entity which hosts and represents a=0D Resource. (Used = here to discuss the server that provides a=0D resource that is the = end, not the means, of the authenticated=0D authorization process - = i.e., not CAS or AS.)=0D=0D Client (C): An entity which attempts to = access a resource on a RS.=0D (Used to discuss the client whose = access to a resource is the end,=0D not the means, of the = authenticated authorization process.)=0D=0D Principal: (Used in its = English[2] sense here, and specifically as:) An=0D individual that = is either RqP or RO or both.=0D=0D Resource Owner (RO): The principal = that is in charge of the resource=0D and controls its access = permissions.=0D=0D Requesting Party (RqP): The principal that is in = charge of the=0D Client and controls the requests a Client makes = and its acceptance=0D of responses.=0D=0D Authorization Server = (AS): An entity that prepares and endorses=0D authentication and = authorization data for a Resource Server.=0D=0D Client Authorization = Server (CAS): An entity that prepares and=0D endorses = authentication and authorization data for a Client.=0D=0D = Authorization Manager: An entity that prepares and endorses=0D = authentication and authorization data for a constrained node.=0D = Used in constructions such as "a constrained node's authorization=0D = manager" to denote AS for RS and CAS for C.=0D=0D Authenticated = Authorization: The confluence of mechanisms for=0D authentication = and authorization, ensuring that authorization is=0D applied to and = made available for authenticated entities and that=0D entities = providing authentication services are authorized to do so=0D for = the specific authorization process at hand.=0D=0D Note that other = authorization architectures such as OAuth [RFC6749]=0D or UMA = [I-D.hardjono-oauth-umacore] focus on the authorization=0D problems on = the RS side, in particular what accesses to resources the=0D RS is to = allow. In this document the term authorization includes=0D this = aspect, but is also used for the client-side aspect of=0D = authorization, i.e., more generally allowing RqPs to decide what=0D = interactions clients may perform with other endpoints.=0D=0D=0D=0D=0D= Gerdes, et al. Expires September 2, 2016 [Page 5]=0D= =0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D2. Architecture and High-level Problem Statement=0D=0D = This document deals with how to control and protect resource-based=0D = interaction between potentially constrained endpoints. The following=0D = setting is assumed as a high-level problem statement:=0D=0D o An = endpoint may host functionality of one or more actors.=0D=0D o C in = one endpoint requests to access R on a RS in another=0D endpoint.=0D= =0D o A priori, the endpoints do not necessarily have a pre-existing=0D= security relationship to each other.=0D=0D o Either of the = endpoints, or both, may be constrained.=0D=0D2.1. Elements of an = Architecture=0D=0DIn its simplest form, the architecture starts with a = two-layer model: the principal level (at which components are assumed to = be functionally unconstrained) and the constrained level (at which some = functional constraints are assumed to apply to the components). =0D =0D= Without loss of generality, we focus on the C functionality in one=0D = endpoint, which we therefore also call C, accessing the RS=0D = functionality in another endpoint, which we therefore also call RS.=0D=0D= The constrained level and its security objectives are detailed in=0D = Section 5.1.=0D=0D -------------- = --------------=0D | ------- | | = ------- |=0D | | C | ------ requests resource -----> | RS = | |=0D | ------- <----- provides resource ------ ------- = |=0D | Endpoint | | Endpoint |=0D = -------------- --------------=0D=0D = Figure 1: Constrained Level=0D=0D The = authorization decisions at the endpoints are made on behalf of=0D the = principals that control the endpoints. To reuse OAuth and UMA=0D = terminology, the present document calls the principal that is=0D = controlling C the Requesting Party (RqP), and calls the principal=0D = that is controlling RS the Resource Owner (RO). Each principal makes=0D = authorization decisions (possibly encapsulating them into security=0D = policies) which are then enforced by the endpoint it controls.=0D=0D = The specific security objectives will vary, but for any specific=0D = version of this scenario will include one or more of:=0D=0D o = Objectives of type 1: No entity not authorized by the RO has=0D = access to (or otherwise gains knowledge of) R[3].=0D=0D=0D=0D=0DGerdes, = et al. Expires September 2, 2016 [Page 6]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D o Objectives of type 2: C is exchanging information = with (sending a=0D request to, accepting a response from) a = resource only where it=0D can ascertain that RqP has authorized the = exchange with R.=0D=0D Objectives of type 1 require performing = authorization on the Resource=0D Server side while objectives of type = 2 require performing=0D authorization on the Client side.=0D=0D More = on the security objectives of the principal level in=0D Section = 5.2[4].=0D=0D ------- -------=0D | RqP = | | RO | Principal Level=0D ------- = -------=0D | = |=0D in charge of in charge of=0D | = |=0D V V=0D= ------- -------=0D | C | -- = requests resource --> | RS | Constrained Level=0D ------- <-- = provides resource-- -------=0D=0D Figure 2: Constrained = Level and Principal Level=0D=0D The use cases defined in [RFC7744] = demonstrate that constrained=0D devices are often used for scenarios = where their principals are not=0D present at the time of the = communication, are not able to communicate=0D directly with the device = because of a lack of user interfaces or=0D displays, or may prefer the = device to communicate autonomously.=0D=0D Moreover, constrained = endpoints may need support with tasks requiring=0D heavy processing, = large memory or storage, or interfacing to humans,=0D such as = management of security policies defined by a principal. The=0D = principal, in turn, requires some agent maintaining the policies=0D = governing how its endpoints will interact.=0D=0D For these reasons, = another level of nodes is introduced in the=0D architecture, the = less-constrained level (illustrated in Figure 3, below). =0D=0DUsing = OAuth terminology,=0D AS acts on behalf of the RO to control and = support the RS in handling=0D access requests, employing a = pre-existing security relationship with=0D RS. We complement this = with CAS acting on behalf of RqP to control=0D and support the C in = making resource requests and acting on the=0D responses received, = employing a pre-existing security relationship=0D with C. To further = relieve the constrained level, authorization (and=0D related = authentication) mechanisms may be employed between CAS and AS=0D = (Section 6.2). (Again, both CAS and AS are conceptual entities=0D = controlled by their respective principals. Many of these entities,=0D = often acting for different principals, can be combined into a single=0D=0D= =0D=0DGerdes, et al. Expires September 2, 2016 = [Page 7]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D server implementation; this of course requires proper = segregation of=0D the control information provided by each principal.)=0D= =0D ------- -------=0D | RqP | = | RO | Principal Level=0D ------- = -------=0D | |=0D = controls controls=0D | = |=0D V V=0D = -------- -------=0D | CAS | <- AuthN and = AuthZ -> | AS | Less-Constrained Level=0D -------- = -------=0D | |=0D = controls and supports controls and supports=0D authentication = authentication=0D and authorization and = authorization=0D | |=0D V = V=0D ------- = -------=0D | C | -- requests resource --> | RS | Constrained = Level=0D ------- <-- provides resource-- -------=0D=0D = Figure 3: Overall architecture=0D=0D Figure 3 shows all three = levels considered in this document. Note=0D that the vertical arrows = point down to illustrate exerting control=0D and providing support; = this is complemented by information flows that=0D often are = bidirectional. Note also that not all entities need to be=0D ready to = communicate at any point in time; for instance, RqP may have=0D = provided enough information to CAS that CAS can autonomously=0D = negotiate access to RS with AS for C based on this information.=0D=0D= 2.2. Architecture Variants=0D=0D The elements described above are = architectural; that is, they are parts of a conceptual model, and may be = instantiated in various ways in practice.=0D For example, in a given = scenario, several elements might share a single device or=0D even be = combined in a single piece of software. If C is located on a=0D more = powerful device, it can be combined with CAS:=0D=0D=0D=0D=0D=0D=0D=0D=0D=0D= =0D=0D=0DGerdes, et al. Expires September 2, 2016 = [Page 8]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D ------- --------=0D | = RqP | | RO | Principal Level=0D = ------- --------=0D | = |=0D in charge of in charge of=0D = | |=0D V = V=0D ------------ --------=0D = | CAS + C | <- AuthN and AuthZ -> | AS | Less-Constrained Level=0D = ------------ --------=0D ^ = |=0D \__ |=0D = \___ authentication=0D = \___ and authorization=0D requests resource/ = \___ support=0D provides resource \___ |=0D = \___ |=0D = V V=0D -------=0D = | RS | Constrained Level=0D = -------=0D=0D=0D = Figure 4[5]: Combined C and CAS=0D=0D If RS is located on a more = powerful device, it can be combined with=0D AS:=0D=0D=0D=0D=0D=0D=0D=0D= =0D=0D=0D=0D=0D=0D=0D=0D=0D=0D=0D=0D=0D=0D=0D=0D=0DGerdes, et al. = Expires September 2, 2016 [Page 9]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D ------- -------=0D | = RqP | | RO | Principal Level=0D = ------- -------=0D | = |=0D in charge of in charge of=0D = | |=0D V = V=0D ---------- -----------=0D = | CAS | <- AuthN and AuthZ -> | RS + AS | Less-Constrained Level=0D= ---------- -----------=0D | = ^=0D authentication ___/=0D and = authorization ___/=0D support ___/ request = resource / provides resource=0D | ___/=0D V = ___/=0D ------- /=0D | C | <-=0D -------=0D=0D=0D = Figure 5: Combined AS and RS=0D=0D If C and RS have = the same principal, CAS and AS can be combined.=0D=0D = ------------=0D | RqP =3D RO | Principal Level=0D = ------------=0D |=0D = in charge of=0D |=0D = V=0D --------------=0D | CAS + AS | = Less-Constrained Level=0D --------------=0D = / \=0D / \=0D = authentication authentication=0D and authorization = and authorization=0D support support=0D = / \=0D V = V=0D ------- -------=0D | C | -- = requests resource --> | RS | Constrained Level=0D ------- <-- = provides resource -- -------=0D=0D=0D Figure 6: CAS = combined with AS=0D=0D=0D=0DGerdes, et al. Expires September 2, = 2016 [Page 10]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D2.3. Information Flows=0D=0D We now formulate the = problem statement in terms of the information=0D flows the = architecture focuses on.=0D=0D The interaction with the nodes on the = principal level, RO and RqP, is=0D not involving constrained nodes and = therefore can employ an existing=0D mechanism. The less-constrained = nodes, CAS and AS, support the=0D constrained nodes, C and RS, with = control information, for example=0D permissions of clients, conditions = on resources, attributes of client=0D and resource servers, keys and = credentials. This control information=0D may be rather different for = C and RS, reflecting the intrinsic=0D asymmetry [6]with C initiating = the request for access to a resource, and=0D RS acting on a received = request, and C finally acting on the received=0D response.=0D=0D The = potential information flows are shown in Figure 7. The direction=0D = of the vertical arrows expresses the exertion of control; actual=0D = information flow is bidirectional.=0D=0D The message flow may pass = unprotected paths and thus need to be=0D protected, potentially beyond = a single REST hop (Section 3.1):=0D=0D ------- = -------=0D | CAS | = | AS |=0D ------- -------=0D = a ^ | b a =3D requests for control info a ^ | b=0D | | = b =3D control information | |=0D | v = | v=0D ------- = -------=0D | C | ------ request -------------------> | RS |=0D= | | <----- response ------------------- | |=0D ------- = -------=0D=0D=0D Figure 7: = Information flows that need to be protected=0D=0D o We assume that = the necessary keys/credentials for protecting the=0D control = information between the potentially constrained nodes and=0D their = associated less-constrained nodes are pre-established, for=0D = example as part of the commissioning procedure.=0D=0D o Any necessary = keys/credentials for protecting the interaction=0D between the = potentially constrained nodes will need to be=0D established and = maintained as part of a solution.=0D[7]=0D=0D=0D=0D=0D=0DGerdes, et al. = Expires September 2, 2016 [Page 11]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D In terms of the elements of the architecture laid out = above, this=0D document's problem statement for authorization in = constrained=0D environments can then be summarized as follows:=0D=0D = o The interaction between potentially constrained endpoints is=0D = controlled by control information provided by less-constrained=0D = nodes on behalf of the principals of the endpoints.=0D=0D o The = interaction between the endpoints needs to be secured, as well=0D = as the establishment of the necessary keys for securing the=0D = interaction, potentially end-to-end through intermediary nodes.=0D=0D = o The mechanism for transferring control information needs to be=0D = secured, potentially end-to-end through intermediary nodes. Pre-=0D = established keying material may need to be employed for=0D = establishing the keys used to protect these information flows.=0D[8]=0D = (Note that other aspects relevant to secure constrained node=0D = communication such as secure bootstrap or group communication are not=0D = specifically addressed by the present document.)=0D=0D3. Security = Objectives=0D=0D The security objectives that are addressed by an = authorization=0D solution include confidentiality and integrity. = Additionally,=0D allowing only selected entities[9] limits the burden = on system=0D resources, thus helping to achieve availability. = Misconfigured or=0D wrongly designed authorization solutions can = result in availability=0D breaches (denial of service): Users might no = longer be able to use=0D data and services as they are supposed = to.[10]=0D=0D Authentication mechanisms can help achieve additional = security objectives=0D such as accountability and third-party = verifiability. These=0D additional objectives are not directly = related to authorization and=0D thus are not in scope of this draft, = but may nevertheless be=0D relevant. Accountability and third-party = verifiability may require=0D authentication on a device level, if it = is necessary to determine=0D which device performed an action. In = other cases it may be more=0D important to find out who is responsible = for the device's actions.=0D[11] See also Section 4 for more = discussion about authentication and=0D authorization.=0D=0D The = security objectives and their relative importance differ for the=0D = various constrained environment applications and use cases [RFC7744].=0D=0D= The archietcure is based on the assumption that different parties may = have different security objectives, and that there may be a = =D2collaborative=D3 dimension: to achieve a security objective of one=0D= party, another party may be required to provide a service. For=0D=0D=0D= =0DGerdes, et al. Expires September 2, 2016 [Page = 12]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D example, if RqP requires the integrity of = representations of a=0D resource R that RS is hosting, both C and RS = need to partake in=0D integrity-protecting the transmitted data. = Moreover, RS needs to=0D protect any write access to this resource as = well as to relevant=0D other resources (such as configuration = information, firmware update=0D resources) to prevent unauthorized = users from manipulating R.=0D=0D3.1. End-to-End Security Objectives in = Multi-Hop Scenarios=0D=0D In many cases, the information flows = described in Section 2.3 cross=0D multiple client-server pairings but = still need to be protected end-=0D to-end. For example, AS may not be = connected to RS (or may not want=0D to exercise such a connection), = relying on C for transferring=0D authorization information. As the = authorization information is=0D related to the permissions granted to = C, C must not be in a position=0D to manipulate this information, = which therefore requires integrity=0D protection on the way between AS = and RS.=0D[12]=0D As another example, resource representations sent = between endpoints=0D may be stored in intermediary nodes, such as = caching proxies or pub-=0D sub brokers. Where these intermediaries = cannot be relied on to=0D fulfill the security objectives of the = endpoints, these [13]will need to=0D protect the exchanges beyond a = single client-server exchange.=0D=0D Note that there may also be cases = of intermediary nodes that very=0D much partake in the security = objectives to be achieved. The question=0D what are the pairs of = endpoints between which the communication needs=0D end-to-end = protection (and which aspect of protection) is defined by=0D the = specific use case. Two examples of intermediary nodes executing=0D = security functionality:=0D=0D o To enable a trustworthy publication = service, a pub-sub broker may=0D be untrusted with the plaintext = content of a publication=0D (confidentiality), but required to = verify that the publication is=0D performed by claimed publisher = and is not a replay of an old=0D publication = (authenticity/integrity).=0D=0D o To comply with requirements of = transparency, a gateway may be=0D allowed to read, verify = (authenticity) but not modify (integrity)=0D a resource = representation which therefore also is end-to-end=0D integrity = protected from the server towards a client behind the=0D gateway.=0D= =0D In order to support the required communication and application=0D = security, keying material needs to be established between the=0D = relevant nodes in the architecture[14].=0D=0D=0D=0D=0D=0DGerdes, et al. = Expires September 2, 2016 [Page 13]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D4. Authentication and Authorization=0D=0D Server-side = authorization solutions aim at protecting the access to=0D items of = interest, for instance hardware or software resources or=0D data: They = enable the resource owner to control who can access it and=0D how.=0D=0D= To determine if an entity is authorized to access a resource, an=0D = authentication mechanism is needed. According to the Internet=0D = Security Glossary [RFC4949], authentication is "the process of=0D = verifying a claim that a system entity or system resource has a=0D = certain attribute value." Examples for attribute values are the ID=0D = of a device, the type of the device or the name of its owner.=0D=0D = The security objectives the authorization mechanism aims at can only=0D = be achieved if the authentication and the authorization mechanism=0D = work together correctly. We speak of authenticated authorization to=0D = refer to the required synthesis of mechanisms for authentication and=0D = authorization.=0D=0D Where used for authorization, the set of = authenticated attributes=0D must be meaningful for this purpose, i.e., = authorization decisions=0D must be possible based on these attributes. = If the authorization=0D policy assigns permissions to an individual = entity, the set of=0D authenticated attributes must be suitable to = uniquely identify this=0D entity within a given population or set of = such devices.=0D=0D In scenarios where devices are communicating = autonomously[15] there is=0D often less need to uniquely identify an = individual device: For a=0D principal, the fact that a device belongs = to a certain company or=0D that it has a specific type (such as a = light bulb) or location may be=0D more important than that it has a = unique identifier.=0D=0D (As a special case for the authorization of = read access to a=0D resource, RS may simply make an encrypted = representation available to=0D anyone [OSCAR]. In this case, = controlling read access to that=0D resource can be reduced to = controlling read access to the key;=0D partially removing access also = requires a timely update of the key=0D for RS and all participants = still authorized[16].)=0D=0D Principals (RqP and RO) need to decide = about the required level of=0D granularity for the authorization. For = example, we distinguish=0D device authorization from owner = authorization, and flat authorization=0D from unrestricted = authorization[17]. In the first case different access=0D permissions = are granted to individual devices while in the second=0D case = individual owners are authorized. If flat authorization is=0D used, = all authenticated entities are implicitly authorized and have=0D the = same access permissions. Unrestricted authorization for an item=0D=0D=0D= =0DGerdes, et al. Expires September 2, 2016 [Page = 14]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D of interest means that no authorization mechanism is = used for=0D accessing this resource (not even by authentication) and = all entities=0D are able to access the item as they see fit (note that = an=0D authorization mechanism may still be used to arrive at the = decision=0D to employ unrestricted authorization).=0D=0D More = fine-grained authorization does not necessarily provide more=0D = security but can be more flexible[18]. Principals need to consider that=0D= an entity should only be granted the permissions it really needs=0D = (principle of least privilege), to ensure the confidentiality and=0D = integrity of resources.=0D=0D Client-side authorization solutions aim = at protecting the client from=0D disclosing information to or = ingesting information from resource=0D servers RqP does not want it to = interact with in the given way.=0D Again, flat authorization (the = server can be authenticated) may be=0D sufficient, or more = fine-grained authorization may be required. The=0D client-side = authorization also pertains to the level of protection=0D required for = the exchanges with the server (e.g., confidentiality).=0D In the = browser web, client-side authorization is often left to the=0D human = user; a constrained client may not have that available all the=0D time = but still needs to implement the wishes of the principal=0D = controlling it, the RqP.=0D=0D For cases where an authorization = solution is needed (i.e. all but=0D unrestricted authorization[19]), = the enforcing party needs to be able to=0D authenticate the party that = is to be authorized. Authentication is=0D therefore required for = messages that contain (or otherwise update)=0D representations of an = accessed item. More precisely: The enforcing=0D party needs to make = sure that the receiver of a message containing a=0D representation is = authorized to receive it, both in the case of a=0D client sending a = representation to a server and vice versa. In=0D addition, it needs = to ensure that the actual sender of a message=0D containing a = representation is indeed the one authorized to send this=0D message, = again for both the client-to-server and server-to-client=0D case. To = achieve this, integrity protection of these messages is=0D required: = Authenticity [20]cannot be assured if it is possible for an=0D = attacker to modify the message during transmission.=0D=0D In some = cases, only one side (client or server side) requires the=0D integrity = and / or confidentiality of a resource value. Principals=0D may = decide to omit authentication (unrestricted authorization), or=0D use = flat authorization (just employing an authentication mechanism).=0D = However, as indicated in Section 3, the security objectives of both=0D = sides must be considered, which can often only be achieved when the=0D = other side can be relied on to perform some security service.=0D=0D=0D=0D= =0D=0DGerdes, et al. Expires September 2, 2016 = [Page 15]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D5. Actors and their Tasks=0D=0D This and the following = section look at the resulting architecture=0D from two different = perspectives: This section provides a more=0D detailed description of = the various "actors" in the architecture, the=0D logical functional = entities performing the tasks required. The=0D following section then = will focus on the protocols run between these=0D functional entities.=0D= =0D For the purposes of this document, an actor consists of a set of=0D= tasks and additionally has a security domain (client domain or server=0D= domain) and a level (constrained, principal, less-constrained).=0D = Tasks are assigned to actors according to their security domain and=0D = required level.=0D=0D Note that actors are a concept to understand the = security=0D requirements for constrained devices. The architecture of = an actual=0D solution might differ as long as the security = requirements that=0D derive from the relationship between the = identified actors are=0D considered. Several actors might share a = single device or even be=0D combined in a single piece of software. = Interfaces between actors=0D may be realized as protocols or be = internal to such a piece of=0D software.=0D=0D A more detailed = discussion of the tasks the actors have to perform in=0D order to = achieve specific security objectives is provided in=0D = [I-D.gerdes-ace-tasks].=0D=0D5.1. Constrained Level Actors=0D=0D As = described in the problem statement (see Section 2), either C or RS=0D = or both of them may be located on a constrained node. We therefore=0D = define that C and RS must be able to perform their tasks even if they=0D = are located on a constrained node. Thus, C and RS are considered to=0D= be Constrained Level Actors.=0D=0D C performs the following tasks:=0D= =0D o Communicate in a secure way (provide for confidentiality and=0D = integrity of messages), including access requests.=0D=0D o = Validate that the RqP ("client-side") authorization information=0D = allows C to communicate with RS as a server for R (i.e., from C's=0D = point of view, RS is authorized as a server for the specific=0D = access to R).=0D=0D RS performs the following tasks:=0D=0D=0D=0D=0D= Gerdes, et al. Expires September 2, 2016 [Page 16]=0D= =0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D o Communicate in a secure way (provide for = confidentiality and=0D integrity of messages), including responses = to access requests.=0D=0D o Validate that the RO ("server-side") = authorization information=0D allows RS to grant C access to the = requested resource as requested=0D (i.e., from RS' point of view, C = is authorized as a client for the=0D specific access to R).=0D=0D = R is an item of interest such as a sensor or actuator value. R is=0D = considered to be part of RS and not a separate actor[21]. The device on=0D= which RS is located might contain several resources controlled by=0D = different ROs. For simplicity of exposition, these resources are=0D = described as if they had separate RS.=0D=0D As C and RS do not = necessarily know each other they might belong to=0D different security = domains[22].=0D=0D (See Figure 8.)=0D=0D ------- = --------=0D | C | -- requests resource ---> = | RS | Constrained Level=0D ------- <-- provides = resource--- --------=0D=0D=0D Figure 8: Constrained = Level Actors=0D=0D5.2. Principal Level Actors=0D=0D Our objective is = that C and RS are under control of principals in the=0D physical = world, the Requesting Party (RqP) and the Resource Owner=0D (RO) = respectively. The principals decide about the security policies=0D of = their respective endpoints and belong to the same security domain[23].=0D= =0D RqP is in charge of C, i.e. RqP specifies security policies for C,=0D= such as with whom C is allowed to communicate. By definition, C and=0D= RqP belong to the same security domain.=0D=0D RqP must fulfill the = following task:=0D=0D o Configure for C authorization information for = sources for R.=0D=0D RO is in charge of R and RS. RO specifies = authorization policies for=0D R and decides with whom RS is allowed to = communicate. By definition,=0D R, RS and RO belong to the same = security domain.=0D=0D RO must fulfill the following task:=0D=0D o = Configure for RS authorization information for accessing R.=0D=0D=0D=0D= Gerdes, et al. Expires September 2, 2016 [Page 17]=0D= =0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D (See Figure 2.)=0D=0D5.3. Less-Constrained Level Actors=0D= =0D Constrained level actors can only fulfill a limited number of = tasks=0D and may not have network connectivity all the time. To = relieve them=0D from having to manage keys for numerous endpoints and = conducting=0D computationally intensive tasks, another complexity = [24]level for actors=0D is introduced. An actor on the = less-constrained level belongs to the=0D same security domain as its = respective constrained level actor. They=0D also have the same = principal.=0D=0D The Client Authorization Server (CAS) belongs to the = same security=0D domain as C and RqP. CAS acts on behalf of RqP. It = assists C in=0D authenticating RS and determining if RS is an = authorized server for=0D R. CAS can do that because for C, CAS is the = authority for claims=0D about RS.=0D=0D CAS performs the following = tasks:=0D=0D o Validate on the client side that an entity has certain = attributes.=0D=0D o Obtain authorization information about an entity = from C's=0D principal (RqP) and provide it to C.=0D=0D o = Negotiate means for secure communication to communicate with C.=0D=0D = The Authorization Server (AS) belongs to the same security domain as=0D = R, RS and RO. AS acts on behalf of RO. It supports RS by=0D = authenticating C and determining C's permissions on R. AS can do=0D = that because for RS, AS is the authority for claims about C.=0D=0D AS = performs the following tasks:=0D=0D o Validate on the server side = that an entity has certain attributes.=0D=0D o Obtain authorization = information about an entity from RS'=0D principal (RO) and provide = it to RS.=0D=0D o Negotiate means for secure communication to = communicate with RS.=0D=0D6. Kinds of Protocols=0D=0D Devices on the = less-constrained level potentially are more powerful=0D than = constrained level devices in terms of processing power, memory,=0D = non-volatile storage. This results in different characteristics for=0D = the protocols used on these levels.=0D=0D=0D=0D=0DGerdes, et al. = Expires September 2, 2016 [Page 18]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D6.1. Constrained Level Protocols=0D=0D A protocol is = considered to be on the constrained level if it is used=0D between the = actors C and RS which are considered to be constrained=0D (see Section = 5.1). C and RS might not belong to the same security=0D domain. = Therefore, constrained level protocols need to work between=0D = different security domains.=0D=0D Commonly used Internet protocols can = not in every case be applied to=0D constrained environments. In some = cases, tweaking and profiling is=0D required. In other cases it is = beneficial to define new protocols=0D which were designed with the = special characteristics of constrained=0D environments in mind.=0D=0D = On the constrained level, protocols need to address the specific=0D = requirements of constrained environments. Examples for protocols=0D = that consider these requirements is the transfer protocol CoAP=0D = (Constrained Application Protocol) [RFC7252] and the Datagram=0D = Transport Layer Security Protocol (DTLS) [RFC6347] which can be used=0D = for channel security.=0D=0D Constrained devices have only limited = storage space and thus cannot=0D store large numbers of keys. This is = especially important because=0D constrained networks are expected to = consist of thousands of nodes.=0D Protocols on the constrained level = should keep this limitation in=0D mind.=0D=0D6.1.1. Cross Level = Support Protocols=0D=0D Protocols which operate between a constrained = device on one side and=0D the corresponding less-constrained device on = the other[25] are considered=0D to be (cross level) support protocols. = Protocols used between C and=0D CAS or RS and AS are therefore = support protocols.=0D=0D Support protocols must consider the = limitations of their constrained=0D endpoint and we therefore classify = them as constrained level protocols[26].=0D=0D6.2. Less-Constrained = Level Protocols=0D=0D A protocol is considered to be on the = less-constrained level if it is=0D used between the actors CAS and AS. = CAS and AS might belong to=0D different security domains.=0D=0D On = the less-constrained level, HTTP [RFC7230] and Transport Layer=0D = Security (TLS) [RFC5246] can be used alongside or instead of CoAP and=0D = DTLS. Moreover, existing security solutions for authentication and=0D = authorization such as the OAuth web authorization framework [RFC6749]=0D= and Kerberos [RFC4120] can likely be used without modifications and=0D= =0D=0D=0DGerdes, et al. Expires September 2, 2016 = [Page 19]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D there are no limitations for the use of a Public Key = Infrastructure[27]=0D (PKI).=0D=0D7. Elements of a Solution=0D=0D = Without anticipating specific solutions, the following considerations=0D = may be helpful in discussing them.=0D=0D7.1. Authorization=0D=0D = The core problem we are trying to solve is authorization. The=0D = following problems related to authorization need to be addressed:=0D=0D = o AS needs to transfer authorization information to RS and CAS needs=0D= to transfer authorization information to C.=0D=0D o The = transferred authorization information needs to follow a=0D defined = format and encoding, which must be efficient for=0D constrained = devices, considering size of authorization information=0D and = parser complexity.=0D=0D o C and RS need to be able to verify the = authenticity of the=0D authorization information they receive. = Here as well, there is a=0D trade-off between processing complexity = and deployment complexity.=0D=0D o The RS needs to enforce the = authorization decisions of the AS,=0D while C needs to abide with = the authorization decisions of the=0D CAS. The authorization = information might require additional=0D policy evaluation (such as = matching against local access control=0D lists, evaluating local = conditions). The required "policy=0D evaluation" at the = constrained actors needs to be adapted to the=0D capabilities of = the devices implementing them.=0D=0D o Finally, as is indicated in = the previous bullet, for a particular=0D authorization decision = there may be different kinds of=0D authorization information = needed, and these pieces of information=0D may be transferred to C = and RS at different times and in different=0D ways prior to or = during the client request.=0D=0D7.2. Authentication=0D=0D The = following problems need to be addressed, when considering=0D = authentication:=0D=0D o RS needs to authenticate AS, and C needs to = authenticate CAS, to=0D ensure that the authorization information = and related data comes=0D from the correct source.=0D=0D=0D=0D=0D= Gerdes, et al. Expires September 2, 2016 [Page 20]=0D= =0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D o CAS and AS may need to authenticate each other, both = to perform=0D the required business logic and to ensure that CAS = gets security=0D information related to the resources from the = right source.=0D=0D o In some use cases RS needs to authenticate some = property of C, in=0D order to map it to the relevant authorization = information. In=0D other use cases, authentication and = authorization of C may be=0D implicit, for example by encrypting = the resource representation=0D the RS only providing access to = those who possess the key to=0D decrypt.=0D=0D o C may need to = authenticate RS, in order to ensure that it is=0D interacting with = the right resources. Alternatively C may just=0D verify the = integrity of a received resource representation.=0D=0D o CAS and AS = need to authenticate their communication partner (C or=0D RS), in = order to ensure it serves the correct device.=0D=0D7.3. Communication = Security=0D=0D There are different alternatives to provide = communication security,=0D and the problem here is to choose the = optimal one for each scenario.=0D We list the available alternatives:=0D= =0D o Session-based security at transport layer such as DTLS = [RFC6347]=0D offers security, including integrity and = confidentiality=0D protection, for the whole application layer = exchange. However,=0D DTLS may not provide end-to-end security = over multiple hops.=0D Another problem with DTLS is the cost of the = handshake protocol,=0D which may be too expensive for constrained = devices especially in=0D terms of memory and power consumption for = message transmissions.=0D=0D o An alternative is object security at = application layer, for=0D instance using = [I-D.selander-ace-object-security]. Secure objects=0D can be = stored or cached in network nodes and provide security for=0D a = more flexible communication model such as publish/subscribe=0D = (compare e.g. CoRE Mirror Server [I-D.koster-core-coap-pubsub]).=0D = A problem with object security is that it can not provide=0D = confidentiality for the message headers.=0D=0D o Hybrid solutions = using both session-based and object security are=0D also possible. = An example of a hybrid is where authorization=0D information and = cryptographic keys are provided by AS in the=0D format of secure = data objects, but where the resource access is=0D protected by = session-based security.=0D=0D=0D=0D=0D=0D=0DGerdes, et al. = Expires September 2, 2016 [Page 21]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D7.4. Cryptographic Keys=0D=0D With respect to = cryptographic keys, we see the following problems=0D that need to be = addressed:=0D=0D Symmetric vs Asymmetric Keys=0D We need keys = both for protection of resource access and for=0D protection of = transport of authentication and authorization=0D information. Do = we want to support solutions based on asymmetric=0D keys or = symmetric keys in both cases?[28] There are classes of=0D devices = that can easily perform symmetric cryptography, but=0D consume = considerably more time/battery for asymmetric operations.=0D On the = other hand asymmetric cryptography has benefits such as in=0D terms = of deployment.=0D=0D Key Establishment=0D How are the = corresponding cryptographic keys established?=0D Considering = Section 7.1 there must be a mapping between these keys=0D and the = authorization information, at least in the sense that AS=0D must be = able to specify a unique client identifier which RS can=0D verify = (using an associated key). One of the use cases of=0D [RFC7744] = describes spontaneous change of access policies - such=0D as giving = a hitherto unknown client the right to temporarily=0D unlock your = house door. In this case C is not previously known to=0D RS and a = key must be provisioned by AS.=0D=0D Revocation and Expiration=0D = How are keys replaced and how is a key that has been compromised=0D = revoked in a manner that reaches all affected parties, also=0D = keeping in mind scenarios with intermittent connectivity?=0D=0D8. = Assumptions and Requirements=0D=0D In this section we list a set of = candidate assumptions and=0D requirements to make the problem = description in the previous sections=0D more concise and precise.=0D=0D= 8.1. Architecture=0D=0D The architecture consists of at least the = following types of nodes:=0D=0D o RS hosting resources, and = responding to access requests=0D=0D o C requesting access to = resources=0D=0D o AS supporting the access request/response procedure = by providing=0D authorization information to RS=0D=0D=0D=0D=0D= Gerdes, et al. Expires September 2, 2016 [Page 22]=0D= =0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D * AS may support this by aiding RS in authenticating = C, or=0D providing cryptographic keys or credentials to C and/or = RS to=0D secure the request/response procedure.=0D=0D o CAS = supporting the access request/response procedure by providing=0D = authorization information to C=0D=0D * CAS may support this by = aiding C in authenticating RS,=0D forwarding information between = AS and C (possibly ultimately=0D for RS), or providing = cryptographic keys or credentials to C=0D and/or RS to secure = the request/response procedure.=0D=0D o The architecture allows for = intermediary nodes between any pair of=0D C, RS, AS, and CAS, such = as forward or reverse proxies in the CoRE=0D architecture. = (Solutions may or may not support all=0D combinations.)=0D=0D = * The architecture does not make a choice between session based=0D = security and data object security.=0D=0D8.2. Constrained Devices=0D=0D= o C and/or RS may be constrained in terms of power, processing,=0D = communication bandwidth, memory and storage space, and moreover:=0D=0D= * unable to manage complex authorization policies=0D=0D * = unable to manage a large number of secure connections=0D=0D * = without user interface=0D=0D * without constant network = connectivity=0D=0D * unable to precisely measure time=0D=0D * = required to save on wireless communication due to high power=0D = consumption=0D=0D o CAS and AS are not assumed to be constrained = devices.=0D=0D o All devices under consideration can process = symmetric cryptography=0D without incurring an excessive = performance penalty.=0D=0D * We assume the use of a standardized = symmetric key algorithm,=0D such as AES.=0D=0D * Except = for the most constrained devices we assume the use of a=0D = standardized cryptographic hash function such as SHA-256 (which=0D=0D=0D=0D= Gerdes, et al. Expires September 2, 2016 [Page 23]=0D= =0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D can be used with the HMAC construction for = integrity=0D protection).=0D=0D o Public key cryptography = requires additional resources (such as=0D RAM, ROM, power, = specialized hardware).=0D=0D o A DTLS handshake involves significant = computation, communication,=0D and memory overheads in the context = of constrained devices.=0D=0D * The RAM requirements of DTLS = handshakes with public key=0D cryptography are prohibitive for = certain constrained devices.=0D=0D * Certificate-based DTLS = handshakes require significant volumes=0D of communication, RAM = (message buffers) and computation.=0D=0D o A solution will need to = consider support for a simple scheme for=0D expiring authentication = and authorization information on devices=0D which are unable to = measure time (cf. section Section 9.2).=0D=0D8.3. Authentication=0D=0D = o RS needs to authenticate AS to ensure that the authorization=0D = information and related data comes from the correct source.=0D=0D o = Similarly, C needs to authenticate CAS to ensure that the=0D = authorization information and related data comes from the correct=0D = source.=0D=0D o Depending on use case and authorization = requirements, C, RS, CAS,=0D or AS may need to authenticate = messages from each other.=0D=0D8.4. Server-side Authorization=0D=0D o = RS enforces authorization for access to a resource based on=0D = credentials presented by C, the requested resource, the REST=0D = method, and local context in RS at the time of the request, or on=0D = any subset of this information.=0D=0D o The credentials presented by = C may have been provided by CAS.=0D=0D o The underlying authorization = decision is taken either by AS or RS.=0D=0D o The authorization = decision is enforced by RS.=0D=0D * RS needs to have authorization = information in order to verify=0D that C is allowed to access = the resource as requested.=0D=0D=0D=0D=0D=0DGerdes, et al. = Expires September 2, 2016 [Page 24]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D * RS needs to make sure that it provides resource = access only to=0D authorized clients.=0D=0D o Apart from = authorization for access to a resource, authorization=0D may also = be required for access to information about a resource=0D (for = instance, resource descriptions).=0D=0D o The solution may need to be = able to support the delegation of=0D access rights.=0D=0D8.5. = Client-side Authorization Information=0D=0D o C enforces client-side = authorization by protecting its requests to=0D RS and by = authenticating results from RS, making use of decisions=0D and = policies as well as keying material provided by CAS.=0D=0D8.6. = Server-side Authorization Information=0D=0D o Authorization = information is transferred from AS to RS using=0D Agent, Push or = Pull mechanisms [RFC2904].=0D=0D o RS needs to authenticate that the = authorization information is=0D coming from AS (integrity).=0D=0D = o The authorization information may also be encrypted end-to-end=0D = between AS and RS (confidentiality).=0D=0D o The architecture = supports the case where RS may not be able to=0D communicate with = AS at the time of the request from C.=0D=0D o RS may store or cache = authorization information.=0D=0D o Authorization information may be = pre-configured in RS.=0D=0D o Authorization information stored or = cached in RS needs to be=0D possible to change. The change of such = information needs to be=0D subject to authorization.=0D=0D o = Authorization policies stored on RS may be handled as a resource,=0D = i.e. information located at a particular URI, accessed with=0D = RESTful methods, and the access being subject to the same=0D = authorization mechanics. AS may have special privileges when=0D = requesting access to the authorization policy resources on RS.=0D=0D o = There may be mechanisms for C to look up the AS which provides=0D = authorization information about a particular resource.=0D=0D=0D=0D=0D=0D= Gerdes, et al. Expires September 2, 2016 [Page 25]=0D= =0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D8.7. Resource Access=0D=0D o Resources are accessed in = a RESTful manner using methods such as=0D GET, PUT, POST, DELETE.=0D= =0D o By default, the resource request needs to be integrity = protected=0D and may be encrypted end-to-end from C to RS. It = needs to be=0D possible for RS to detect a replayed request.=0D=0D = o By default, the response to a request needs to be integrity=0D = protected and may be encrypted end-to-end from RS to C. It needs=0D = to be possible for C to detect a replayed response.=0D=0D o RS needs = to be able to verify that the request comes from an=0D authorized = client.=0D=0D o C needs to be able to verify that the response to a = request comes=0D from the intended RS.=0D=0D o There may be = resources whose access need not be protected (e.g.=0D for discovery = of the responsible AS).=0D=0D8.8. Keys and Cipher Suites=0D=0D o A = constrained node and its authorization manager (i.e., RS and AS,=0D = and C and CAS) have established cryptographic keys. For example,=0D = they share a secret key or each have the other's public key.=0D=0D o = The transfer of authorization information is protected with=0D = symmetric and/or asymmetric keys.=0D=0D o The access request/response = can be protected with symmetric and/or=0D asymmetric keys.=0D=0D = o There must be a mechanism for RS to establish the necessary key(s)=0D = to verify and decrypt the request and to protect the response.=0D=0D= o There must be a mechanism for C to establish the necessary key(s)=0D= to protect the request and to verify and decrypt the response.=0D=0D= o There must be a mechanism for C to obtain the supported cipher=0D = suites of a RS[29].=0D=0D8.9. Network Considerations=0D=0D o A = solution will need to consider network overload due to avoidable=0D = communication of a constrained node with its authorization manager=0D = (C with CAS, RS with AS).=0D=0D=0D=0DGerdes, et al. Expires = September 2, 2016 [Page 26]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D o A solution will need to consider network overload by = compact=0D authorization information representation.=0D=0D o A = solution may want to optimize the case where authorization=0D = information does not change often.=0D=0D o A solution may consider = support for an efficient mechanism for=0D providing authorization = information to multiple RSs, for example=0D when multiple entities = need to be configured or change state.=0D=0D8.10. Legacy Considerations=0D= =0D o A solution may consider interworking with existing = infrastructure.=0D=0D o A solution may consider supporting = authorization of access to=0D legacy devices.=0D=0D9. Security = Considerations=0D=0D This document discusses authorization-related = tasks for constrained=0D environments and describes how these tasks = can be mapped to actors in=0D the architecture.=0D=0D The entire = document is about security. Security considerations=0D applicable to = authentication and authorization in RESTful=0D environments are = provided in e.g. OAuth 2.0 [RFC6749].=0D=0D In this section we focus = on specific security aspects related to=0D authorization in = constrained-node networks. Section 11.6 of=0D [RFC7252], "Constrained = node considerations", discusses implications=0D of specific = constraints on the security mechanisms employed. A wider=0D view of = security in constrained-node networks is provided in=0D = [I-D.garcia-core-security].=0D=0D9.1. Physical Attacks on Sensor and = Actuator Networks=0D=0D The focus of this work is on constrained-node = networks consisting of=0D connected sensors and actuators[30]. The = main function of such devices=0D is to interact with the physical = world by gathering information or=0D performing an action. We now = discuss attacks performed with physical=0D access to such devices.=0D=0D= The main threats to sensors and actuator networks are:=0D=0D o = Unauthorized access to data to and from sensors and actuators,=0D = including eavesdropping and manipulation of data.=0D=0D=0D=0D=0D=0D= Gerdes, et al. Expires September 2, 2016 [Page 27]=0D= =0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D o Denial-of-service making the sensor/actuator unable = to perform its=0D intended task correctly.=0D=0D A number of = attacks can be made with physical access to a device=0D including = probing attacks, timing attacks, power attacks, etc.=0D However, = with physical access to a sensor or actuator device it is=0D = possible to directly perform attacks equivalent of eavesdropping,=0D = manipulating data or denial of service. For example:=0D=0D o = Instead of eavesdropping the sensor data or attacking the=0D = authorization system to gain access to the data, the attacker=0D = could make its own measurements on the physical object.=0D=0D o = Instead of manipulating the sensor data the attacker could change=0D = the physical object which the sensor is measuring, thereby=0D = changing the payload data which is being sent.=0D=0D o Instead of = manipulating data for an actuator or attacking the=0D authorization = system, the attacker could perform an unauthorized=0D action = directly on the physical object.=0D=0D o A denial-of-service attack = could be performed physically on the=0D object or device.=0D=0D = All these attacks are possible by having physical access to the=0D = device, since the assets are related to the physical world.=0D = Moreover, these kinds of attack are in many cases straightforward=0D = (requiring no special competence or tools, low cost given physical=0D = access, etc.)=0D=0D As a conclusion, if an attacker has full = physical access to a=0D sensor or actuator device, then much of the = security functionality=0D elaborated in this draft is not effective = to protect the asset=0D during the physical attack[31].=0D=0D = Since it does not make sense to design a solution for a situation=0D = that cannot be protected against we assume there is no need to=0D = protect assets which are exposed during a physical attack[32]. In=0D = other words, either an attacker does not have physical access to=0D = the sensor or actuator device, or if it has, the attack shall only=0D = have effect during the period of physical attack, and shall be=0D = limited in extent to the physical control the attacker exerts=0D = (e.g., must not affect the security of other devices.)=0D=0D=0D=0D=0D=0D=0D= =0D=0DGerdes, et al. Expires September 2, 2016 = [Page 28]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D9.2. Time Measurements=0D=0D Measuring time with certain = accuracy is important to achieve certain=0D security properties, for = example to determine whether a public key=0D certificate, access token = or some other assertion is valid.=0D=0D Dynamic authorization in = itself requires the ability to handle expiry=0D or revocation of = authorization decisions or to distinguish new=0D authorization = decisions from old.=0D=0D For certain categories of device we can = assume that there is an=0D internal clock which is sufficiently = accurate to handle the time=0D measurement requirements. If RS can = connect directly to AS it could=0D get updated in terms of time as = well as revocation information.=0D=0D If RS continuously measures time = but can't connect to AS or other=0D trusted source, time drift may = have to be accepted and it may not be=0D able to manage revocation. = However, it may still be able to handle=0D short lived access rights = within some margins, by measuring the time=0D since arrival of = authorization information or request.=0D=0D Some categories of devices = in scope may be unable measure time with=0D any accuracy (e.g. because = of sleep cycles). This category of=0D devices is not suitable for the = use cases which require measuring=0D validity of assertions and = authorizations in terms of absolute time.=0D=0D10. IANA Considerations=0D= =0D This document has no actions for IANA.=0D=0D11. Acknowledgements=0D= =0D The authors would like to thank Olaf Bergmann, Robert Cragie, = Samuel=0D Erdtman, Klaus Hartke, Sandeep Kumar, John Mattson, Corinna = Schmitt,=0D Mohit Sethi, Abhinav Somaraju, Hannes Tschofenig, Vlasios = Tsiatsis=0D and Erik Wahlstroem for contributing to the discussion, = giving=0D helpful input and commenting on previous forms of this = draft. The=0D authors would also like to specifically acknowledge = input provided by=0D Hummen and others [HUM14delegation].=0D=0D12. = Informative References=0D=0D [HUM14delegation]=0D Hummen, = R., Shafagh, H., Raza, S., Voigt, T., and K.=0D Wehrle, = "Delegation-based Authentication and Authorization=0D for = the IP-based Internet of Things", 11th IEEE=0D = International Conference on Sensing, Communication, and=0D = Networking (SECON'14), June 30 - July 3, 2014.=0D=0D=0D=0DGerdes, et al. = Expires September 2, 2016 [Page 29]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D [I-D.garcia-core-security]=0D = Garcia-Morchon, O., Kumar, S., Keoh, S., Hummen, R., and=0D = R. Struik, "Security Considerations in the IP-based=0D = Internet of Things", draft-garcia-core-security-06 (work=0D = in progress), September 2013.=0D=0D [I-D.gerdes-ace-tasks]=0D = Gerdes, S., "Authorization-Related Tasks in Constrained=0D = Environments", draft-gerdes-ace-tasks-00 (work in=0D = progress), September 2015.=0D=0D [I-D.hardjono-oauth-umacore]=0D = Hardjono, T., Maler, E., Machulak, M., and D. Catalano,=0D = "User-Managed Access (UMA) Profile of OAuth 2.0", draft-=0D = hardjono-oauth-umacore-14 (work in progress), January=0D = 2016.=0D=0D [I-D.koster-core-coap-pubsub]=0D Koster, = M., Keranen, A., and J. Jimenez, "Publish-=0D Subscribe = Broker for the Constrained Application Protocol=0D (CoAP)", = draft-koster-core-coap-pubsub-04 (work in=0D progress), = November 2015.=0D=0D [I-D.selander-ace-object-security]=0D = Selander, G., Mattsson, J., Palombini, F., and L. Seitz,=0D = "Object Security of CoAP (OSCOAP)", draft-selander-ace-=0D = object-security-03 (work in progress), October 2015.=0D=0D [OSCAR] = Vucinic, M., Tourancheau, B., Rousseau, F., Duda, A.,=0D = Damon, L., and R. Guizzetti, "OSCAR: Object Security=0D = Architecture for the Internet of Things", CoRR vol.=0D = abs/1404.7799, 2014.=0D=0D [RFC2904] Vollbrecht, J., Calhoun, P., = Farrell, S., Gommans, L.,=0D Gross, G., de Bruijn, B., de = Laat, C., Holdrege, M., and=0D D. Spence, "AAA = Authorization Framework", RFC 2904, DOI=0D = 10.17487/RFC2904, August 2000,=0D = .=0D=0D [RFC4120] Neuman, C., = Yu, T., Hartman, S., and K. Raeburn, "The=0D Kerberos = Network Authentication Service (V5)", RFC 4120,=0D DOI = 10.17487/RFC4120, July 2005,=0D = .=0D=0D [RFC4949] Shirey, R., = "Internet Security Glossary, Version 2", FYI=0D 36, RFC = 4949, DOI 10.17487/RFC4949, August 2007,=0D = .=0D=0D=0D=0D=0DGerdes, et al. = Expires September 2, 2016 [Page 30]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D [RFC5246] Dierks, T. and E. Rescorla, "The Transport = Layer Security=0D (TLS) Protocol Version 1.2", RFC 5246, = DOI 10.17487/=0D RFC5246, August 2008,=0D = .=0D=0D [RFC6347] Rescorla, = E. and N. Modadugu, "Datagram Transport Layer=0D Security = Version 1.2", RFC 6347, DOI 10.17487/RFC6347,=0D January = 2012, .=0D=0D [RFC6749] = Hardt, D., Ed., "The OAuth 2.0 Authorization Framework",=0D = RFC 6749, DOI 10.17487/RFC6749, October 2012,=0D = .=0D=0D [RFC7228] Bormann, = C., Ersue, M., and A. Keranen, "Terminology for=0D = Constrained-Node Networks", RFC 7228, DOI 10.17487/=0D = RFC7228, May 2014,=0D = .=0D=0D [RFC7230] Fielding, = R., Ed. and J. Reschke, Ed., "Hypertext Transfer=0D = Protocol (HTTP/1.1): Message Syntax and Routing", RFC=0D = 7230, DOI 10.17487/RFC7230, June 2014,=0D = .=0D=0D [RFC7231] Fielding, = R., Ed. and J. Reschke, Ed., "Hypertext Transfer=0D = Protocol (HTTP/1.1): Semantics and Content", RFC 7231, DOI=0D = 10.17487/RFC7231, June 2014,=0D = .=0D=0D [RFC7252] Shelby, Z., = Hartke, K., and C. Bormann, "The Constrained=0D Application = Protocol (CoAP)", RFC 7252, DOI 10.17487/=0D RFC7252, June = 2014,=0D .=0D=0D = [RFC7744] Seitz, L., Ed., Gerdes, S., Ed., Selander, G., Mani, M.,=0D = and S. Kumar, "Use Cases for Authentication and=0D = Authorization in Constrained Environments", RFC 7744, DOI=0D = 10.17487/RFC7744, January 2016,=0D = .=0D=0DAuthors' Addresses=0D=0D=0D= =0D=0D=0D=0D=0D=0D=0D=0D=0DGerdes, et al. Expires September 2, = 2016 [Page 31]=0D=0D =0DInternet-Draft ace-actors March = 2016=0D=0D=0D Stefanie Gerdes=0D Universitaet Bremen TZI=0D = Postfach 330440=0D Bremen D-28359=0D Germany=0D=0D Phone: = +49-421-218-63906=0D Email: gerdes@tzi.org=0D=0D=0D Ludwig Seitz=0D = SICS Swedish ICT AB=0D Scheelevaegen 17=0D Lund 223 70=0D Sweden=0D= =0D Email: ludwig@sics.se=0D=0D=0D Goeran Selander=0D Ericsson=0D = Faroegatan 6=0D Kista 164 80=0D Sweden=0D=0D Email: = goran.selander@ericsson.com=0D=0D=0D Carsten Bormann (editor)=0D = Universitaet Bremen TZI=0D Postfach 330440=0D Bremen D-28359=0D = Germany=0D=0D Phone: +49-421-218-63921=0D Email: cabo@tzi.org=0D=0D=0D= =0D=0D=0D=0D=0D=0D=0D=0D=0D=0D=0D=0D=0DGerdes, et al. Expires = September 2, 2016 [Page 32]=0D=0D[1]Perhaps the term = =D2delegation=D3 could be used here.=0D[2]:^)=0D[3]I understand the = intent, here, is this definition so strict that it would, for instance, = stop =D2discovery=D3 services from working? (i.e. =D2You haven=D5t = authorized me yet, but I think you own a resource that I want=D3). =0D= [4]Section 5.0 will also refer to I-D.gerdes-ace-tasks; should this = perhaps be mentioned earlier in the document than Section 5, for example = perhaps as a note to the Terminology section (since it is, in a way, = =D4required reading=D5)?=0D[5]I may be wrong, but my impression is that = the configuration in Fig. 5 is more common than the configuration in = Fig.4; if that is the case, I=D5d recommend switching the two figures = around, so that the current Fig. 5 comes first. Either way, perhaps an = example of each configuration would help make it less abstract.=0D[6]The = asymmetry of a request/Response protocol doesn=D5t seem to me to be = startling in itself; what=D5s the significance of the asymmetry here? Is = it because the C and the RS have functionally different roles, is it a = =D2power imbalance=D3, or is it because of the levels of constraint they = are under?=0D[7]I know this is also mentioned under Sections 8 and 9, = but I think this is a crucial part of the draft=C9 (see also comments on = 3.1 below)=0D=0DMany of the issues with imbedded PKI deployments, = currently, arise out of exactly these constraints. Either there=D5s a = local management interface to PKI administration functions (in which = case users mess things up), or there is none (in which case everything = works fine, until it breaks). Set-top boxes, remote sensors in = power/telephone network,s etc. all exhibit this principle.=0D=0DThere = are also issues to do with trust anchors, which I think the ID can=D5t = afford to ignore, even though they are hard problems.=0D[8]Right. And if = keys are established/embedded at manufacturing time, the design has to = consider how those keys are managed/replaced/revoked once the device is = deployed. Options include: device replacement, local administration, = remote administration. All of these need thought at the design phase.=0D= [9]This was a little unclear to me; allowing only selected entities = what?=0D[10]These are true, but I would recommend rephrasing them as = objectives, rather than risks, as at present.=0D[11]I think these are = generic problems, not necessarily specific to ACE; therefore this might = be better expressed in terms of audit/logging/integrity requirements: = e.g. if those functions cannot be performed by an endpoint because it is = constrained, how and where will they be performed?=0D[12]This describes = a =D4re-direction=D5 process =D0 in this case, between C, an AS and an = RS =D0 which has already been put into practice in many instances. Are = there existing protocols/patterns/specifications to which it would make = sense to refer at this point? =0D[13]This is a little ambiguous: what = does =D2these=D3 refer to here?=0D[14]True, and this generates further = requirements relating to the use and management of trust anchors and = device keys (as distinct from data keys and session keys). Constrained = devices usually lack any user interface, and often lack programming = interfaces, to such functions. For instance, how would a compromised = root certificate be revoked, or removed from the constrained device?=0D= [15]Is this requirement conditional on autonomous communication? If so, = it might be helpful to explain why=C9 =0D[16]=C9 or removing the = resource encrypted under that key (for instance, re-encrypting it under = a new key). Either way, this assumes the resources has not already been = copied, either in clear or encrypted under the original key. =0D=0DRadia = Perlman investigated some of these practicalities in her paper on =D2The = Ephemerizer: making data disappear=D3. =0D[17]I think this is an = interesting and useful classification, but it would really benefit from = a diagram, especailly as the concepts have not been introduced = previously.=0D[18]In fact, the added complexity might even result in = worse over-all security.=0D[19]This is more accurately =D2unrestricted = access=D3=C9 since there is no authorization.=0D[20]I think this needs = to specify authenticity of whom/what.=0D[21]The implication here seems = to be that a Resource is never an actor. Is that the intent?=0D= [22]Again, this has implications for the management of keys and trust = anchors. In particular: technical trust anchors (where does a PKI = certificate chain terminate?) and business trust anchors (where does a = PKI-secured buisiness liability terminate?) are almost always in = different security domains. =0D[23]This needs clarification=C9 I assume = you=D5re saying that the principles are in the same domain as their = endpoints, not in the same domain as each other (!).=0D[24]Do you mean = =D2complexity=D3 here, or =D2constraint=D3=0D[25][25]OK, this phrase got = me into a real tangle=C9 I thought it meant =D2on the CAS/C side=D3 = versus =D2on the RA/RS side=D3, and that was very confusing. I would = recommend simply: =D2We refer to protocols which operate between a = constrained device and a less-constrained device as cross-level support = protocols=D3. =0D=0DAre there protocols other than =D2support protocols=D3= which operate between the constrained and less constrained levels?=0D=0D= [26]On a related note: Figs 4 and 5 describe configurations in which a = CAS talks directly to an RS, or an RA talks directly to a C. For = completeness, presumably these are also using cross-level protocols.=0D= [27]I would rephrase this as follows: =D2the less-constrained layer is = assumed to impose no constraints that would inhibit the normal = deployment/use of a public key infrastructure=D3=0D[28]=C9 or hybrid. = And if the less-constrained layer uses TLS, does that impose = requirements on the constrained layer (and if so, can the constrained = layer meet those requirements)?=0D=0DSee also comment on 8.8 below.=0D= [29]The design also needs to consider what happens if there is a = mis-match between the suite(s) supported by one node and those supported = by another. Can the risk of downgrade attacks be mitigiated? What = fallback options are acceptable if C cannot use any of the suites = offered by an RS?=0D[30]Oh! This is rather a sudden reduction of scope=C9 = RFC7228 defines constrained nodes as =D2sensors/actuators, smart objects = or smart devices=D3. I think it would be a shame to focus only on = sensors/actuators=C9=C9=0D=0D[31]That may deepnd on what user or = application interfaces the device exposes.=0D[32]How about devices that = have some form of tamper-resistance (for instance, if a remote device = contains keys, the key-store might by set to wipe if the device casing = is opened). I=D5m not sure I=D5m getting your argument, here.=0D= --Apple-Mail=_30DCC5D2-F15E-4060-AA17-EF7F84372810 Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=us-ascii
--Apple-Mail=_30DCC5D2-F15E-4060-AA17-EF7F84372810-- --Apple-Mail=_F7B54A8E-B2CD-4DA6-919C-5BDCC1F15B58-- --Apple-Mail=_D7C5752B-BD4E-4E74-8894-90D14D177E16 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="signature.asc" Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- iF4EAREIAAYFAlbfJTQACgkQ646Z8yy2wEyQLgEAqpqkqf6kdpIM1isPuCx2w6+X k8Ykwl13isPuSsFh2fQA/jvbtdFeGm5QUMAclAqJwYt1RSyBRH3tEvcHiujj3P8R =xgql -----END PGP SIGNATURE----- --Apple-Mail=_D7C5752B-BD4E-4E74-8894-90D14D177E16-- From nobody Tue Mar 8 22:00:17 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF0C712DED9 for ; Tue, 8 Mar 2016 22:00:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=erdtman-se.20150623.gappssmtp.com Received: from mail.ietf.org ([127.0.0.1]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E74LXq9C0mjS for ; Tue, 8 Mar 2016 22:00:14 -0800 (PST) Received: from mail-vk0-x229.google.com (mail-vk0-x229.google.com [IPv6:2607:f8b0:400c:c05::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5F92812DEDD for ; Tue, 8 Mar 2016 22:00:10 -0800 (PST) Received: by mail-vk0-x229.google.com with SMTP id e6so44254385vkh.2 for ; Tue, 08 Mar 2016 22:00:10 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=erdtman-se.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=VOq2AePoFWqcxTTVzlkgMhy5odKHayh7gl+vz/6s6U4=; b=ymthcF+XKCoPrYk9Mm6jjT4AHUax2FlDTkOP6/q5QYYMv3KAHax913MnBFe40oPxIG z+0sXllNi94hSfcjFxXFBYVw+SYqCk2XY0PGGBiql4/LGD3NTDBhqAQRHSDGLlawkmvW MDRWa7t163trv1KNOFy9C+GUGuC9vAMtYqsrtUE9RSmD5FUXGbmGAJx2UgWOV7uDR3zt KdoVw5qM3QmF3XPsB751A/Q2QOrXxDoA8u4CLxLB/X5h3INYfuiVJ10/qzH6zi1lq/6Q 4fnIqHtmB8mfHWljyoEoZ+RzVcPRks13hs8iROBD4dLAYh/W3bdU8x4XDtqNdSE/w5ed WFMQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=VOq2AePoFWqcxTTVzlkgMhy5odKHayh7gl+vz/6s6U4=; b=MJEa2cV4rh2uGCcvsBbFHnDv9rzHOpycz5upRi2bZItaZLGL+5WFWAHd50KNzZ5vDs eFBG3BnSW5BM/j6egn6dkAKKrgoiZzC4Esnlr/QBP8xPw5tvh4DOe4pwcCJkJ90iroou iSfpezF+XMTGdqn7zCcd25H0ndc6ophGVdy7h/GD05MqDnEdS/5/meqdP2R1l9J3B1yz fgIQQr6jXROssorbgcEYyRZExNDNEuncs2hUHD67KO8gYGRwc+zW5hyFNC+WkP0ta3sx cc1Oyk9oZ+P3tkXMNjOre6ZrmfVm2GW2E7OAJXqCn0xTegi94ufmhH11yq4/TU+x6WkK JqxA== X-Gm-Message-State: AD7BkJLtGSFU6lhB74mf5Oa57IPYcaumTtwilfFo7GO4ZMir8YwQrCBsiE9PDiw9yE5XoLMbiEChpkSc3ygSDg== MIME-Version: 1.0 X-Received: by 10.31.167.195 with SMTP id q186mr29173052vke.113.1457503209324; Tue, 08 Mar 2016 22:00:09 -0800 (PST) Received: by 10.159.37.42 with HTTP; Tue, 8 Mar 2016 22:00:09 -0800 (PST) In-Reply-To: References: <56D71F16.7080303@gmx.net> Date: Wed, 9 Mar 2016 07:00:09 +0100 Message-ID: From: Samuel Erdtman To: Kepeng Li Content-Type: multipart/alternative; boundary=001a11425fba0d1cba052d97699f Archived-At: Cc: Hannes Tschofenig , =?UTF-8?Q?G=C3=B6ran_Selander?= , "Ace@ietf.org" Subject: Re: [Ace] Milestones X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Mar 2016 06:00:17 -0000 --001a11425fba0d1cba052d97699f Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable +1 //Samuel On Fri, Mar 4, 2016 at 2:09 AM, Kepeng Li wrote: > > I think this time line is too optimistic for any of the above. > > > +1. This is also my personal observation. > > Kepeng (Individual) > > =E5=9C=A8 3/3/16 5:19 pm=EF=BC=8C "G=C3=B6ran Selander" =E5=86=99=E5=85=A5: > > > > > > >On 2016-03-02 18:12, "Ace on behalf of Hannes Tschofenig" > > wrote: > > > >> > >>** May 2016 Submit "Authentication and Authorization Solution" > >>specification to the IESG for publication as a Proposed Standard. > >> > >>--> Here the question is what we expect to have completed by May. > >>Here are possible options: > >> > >> * Specification completed. > >> * Reference implementation available. > >> * Interoperability testing done. > >> * Formal verification of the security parts. > >> > >>Also, the amount of specification work depends a bit on your feedback o= n > >>the items we are going to ask feedback for. > >> > >>It would be good to know whether you have an opinion about these issues= . > > > >I think this time line is too optimistic for any of the above. Consideri= ng > >that we spent most of last year to determine which of the candidates > >solutions we were going to take as a "starting point", and that we have > >received many reviews calling for different types of considerations and > >extensions, and the ongoing discussion about handling the different > >deployment options, I think it is reasonable to give this work item more > >time to complete. > > > > > >G=C3=B6ran > > > >_______________________________________________ > >Ace mailing list > >Ace@ietf.org > >https://www.ietf.org/mailman/listinfo/ace > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > --001a11425fba0d1cba052d97699f Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
+1

//Samuel

On Fri, Mar 4, 2016 at 2:09 AM, K= epeng Li <kepeng.lkp@alibaba-inc.com> wrote:
> I think this time line is= too optimistic for any of the above.


+1. This is also my personal observation.

Kepeng (Individual)

=E5=9C=A8 3/3/16 5:19 pm=EF=BC=8C "G=C3=B6ran Selander" <goran.selander@ericsson.com&g= t; =E5=86=99=E5=85=A5:

>
>
>On 2016-03-02 18:12, "Ace on behalf of Hannes Tschofenig"
><ace-bounces@ietf.org on= behalf of hannes.tschofenig@g= mx.net> wrote:
>
>>
>>** May 2016 Submit "Authentication and Authorization Solution&= quot;
>>specification to the IESG for publication as a Proposed Standard. >>
>>--> Here the question is what we expect to have completed by May= .
>>Here are possible options:
>>
>> * Specification completed.
>> * Reference implementation available.
>> * Interoperability testing done.
>> * Formal verification of the security parts.
>>
>>Also, the amount of specification work depends a bit on your feedba= ck on
>>the items we are going to ask feedback for.
>>
>>It would be good to know whether you have an opinion about these is= sues.
>
>I think this time line is too optimistic for any of the above. Consider= ing
>that we spent most of last year to determine which of the candidates >solutions we were going to take as a "starting point", and th= at we have
>received many reviews calling for different types of considerations and=
>extensions, and the ongoing discussion about handling the different
>deployment options, I think it is reasonable to give this work item mor= e
>time to complete.
>
>
>G=C3=B6ran
>
>_______________________________________________
>Ace mailing list
>Ace@ietf.org
>https://www.ietf.org/mailman/listinfo/ace


_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace

--001a11425fba0d1cba052d97699f-- From nobody Wed Mar 9 10:46:02 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2C32512D537 for ; Wed, 9 Mar 2016 10:46:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([127.0.0.1]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jWWFC1gvbAeD for ; Wed, 9 Mar 2016 10:45:59 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B25C812D55E for ; Wed, 9 Mar 2016 10:45:58 -0800 (PST) Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id EA50B2009E for ; Wed, 9 Mar 2016 13:47:52 -0500 (EST) Received: from obiwan.sandelman.ca (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 987006374E for ; Wed, 9 Mar 2016 13:45:57 -0500 (EST) From: Michael Richardson To: "Ace\@ietf.org" In-Reply-To: <56D72A16.5050607@gmx.net> References: <56D72A16.5050607@gmx.net> X-Mailer: MH-E 8.6; nmh 1.6+dev; GNU Emacs 24.4.2 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Ace] DTLS and OSCOAP X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Mar 2016 18:46:01 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hannes Tschofenig wrote: > There are four options: > * Option #1: Do not specify a solution in the WG document (1) > * Option #2: Specify a DTLS-based solution > * Option #3: Specify an application layer solution (for example using > OSCOAP) > ** Option #4: option #2 + option #3 I'm afraid of OSCOAP because I don't know if it will happen. (It might be like S/MIME or SNMPv3 security...) I'm afraid of #4, because if #3 doesn't happen, its the same as #2. G=C3=B6ran Selander wrote: > So if we reword option 3 as > "* Option #3: Specify a COSE-based solution" I feel that this will succeed. I think that we are better to pick one method here. =2D- Michael Richardson , Sandelman Software Works -=3D IPv6 IoT consulting =3D- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEVAwUBVuBvYoCLcPvd0N1lAQIXHgf+PIFs4VhT4l8Bzx6vUtdzx0y3XDm+Xvoz MbFl/VchGLmpWB9CNV3NCXNoSWEpSGI33HEb9GVorDCeZjPLCprDLQHqkuXWP1sw OHkedZ1Dxyv0wh65BugR+LWd0DNw7H5dtv3mo8nReRQ5g8wpqpLbkNRIfm8Mg0Nd rryeBJ/i1VZFeV/DIpBumh0WQaNkseW6GB+E800od/JluXfN3oWZJXDaIWneol0U 5lB6zG0sZUyAVXStYYw7Bv5+zmhag2aceo9+I+0Yv3WTf2f6/8PSmzAg5TRW5UAL 4BEulRLsWVm0H0y8QdffmnCIUxH05GYO00i+n6ydQNb7FVvKNSY4DA== =QZlh -----END PGP SIGNATURE----- --=-=-=-- From nobody Wed Mar 9 10:55:58 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A0D4912D923 for ; Wed, 9 Mar 2016 10:55:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([127.0.0.1]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8hHRgVVgzXbF for ; Wed, 9 Mar 2016 10:55:54 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 31A8B12D91F for ; Wed, 9 Mar 2016 10:55:43 -0800 (PST) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id BA029200A3; Wed, 9 Mar 2016 13:57:37 -0500 (EST) Received: from obiwan.sandelman.ca (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 5B2576374E; Wed, 9 Mar 2016 13:55:42 -0500 (EST) From: Michael Richardson To: paduffy@cisco.com In-Reply-To: <56D73FFD.9090501@cisco.com> References: <56D723D1.3090204@gmx.net> <56D73FFD.9090501@cisco.com> X-Mailer: MH-E 8.6; nmh 1.6+dev; GNU Emacs 24.4.2 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Cc: ace@ietf.org Subject: Re: [Ace] CBOR and/or JSON X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Mar 2016 18:55:55 -0000 --=-=-= Content-Type: text/plain Paul Duffy wrote: > One of the advantages of the RESTful approach is the potential to swap > in/out transport and payload options to fit the deployment. Use HTTP > and JSON if you can, CoAP and CBOR if you must. Ideally with as > stateless a translation as possible between HTTP/CoAP and JSON/CBOR. This is true only if you ignore security and signatures. So let me suggest that the question is mistated. It's not between JSON and CBOR. It's between JOSE and COSE, and due to the signature, they are not mechanically transcodeable. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEVAwUBVuBxqoCLcPvd0N1lAQIxLQf/bT1SWR9pQajPSEmPhLbGX8CKBM09NopJ Z6IN5J8lZUg0EyfLGlpDicwoaeNv8R6aTS5Iw8YXNf7wav9dGBNAWFPL8untsBRw u3wMNOogLBZbmQEaI7OHydd0UB6UO+3EpkCh6jNxZ2CjGCUee99HlRoAJCu0YemK +hKrKE9hHzWwS+Dgvzm+1gz9fBEgMeCHFXAnzSz8qDNhMX6hr24IjBVDD2YM++4Z LCSR68SpD18cEfkbdHGACdHDGTWsgv5efO+wsoGUK6ybp+DhUTM1LRSXRDIWUSt8 hfZghrJAXaQANr8vpQjrnGr0hkOWgARTjzarqw/pj54JzROBqKVciw== =CbYn -----END PGP SIGNATURE----- --=-=-=-- From nobody Wed Mar 9 10:59:48 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2814612D92B for ; Wed, 9 Mar 2016 10:59:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([127.0.0.1]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JYsvryWmNqsM for ; Wed, 9 Mar 2016 10:59:44 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 007F312D924 for ; Wed, 9 Mar 2016 10:59:43 -0800 (PST) Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id 8EE73203AF for ; Wed, 9 Mar 2016 14:01:38 -0500 (EST) Received: from obiwan.sandelman.ca (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 339266374E for ; Wed, 9 Mar 2016 13:59:43 -0500 (EST) From: Michael Richardson To: "Ace\@ietf.org" In-Reply-To: <56D728AD.7050109@gmx.net> References: <56D728AD.7050109@gmx.net> X-Mailer: MH-E 8.6; nmh 1.6+dev; GNU Emacs 24.4.2 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Ace] RS Synchronized Time X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Mar 2016 18:59:45 -0000 --=-=-= Content-Type: text/plain Hannes Tschofenig wrote: > 1) No requirement for real-time clocks and time synchronization at all. > 2) Requirement for a real-time clock at the RS > 3) Requirement for a > real-time clock at the RS together with the need to synchronize time > with the AS. > At least Carsten was of the opinion that we need to support this > functionality and that it can be accomplished fairly easily. I'd like to hear more about this. I don't understand why you write that we need to "support this functionality", --- it seems that this is functionality that we need to require from the underlying operating system or due without. In this list, I think that having a monotonically, but not necessarily real-time, clock is easily provided, and provides what we need need. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEVAwUBVuBynICLcPvd0N1lAQJShwgAvS6p7VqgtN1TfIStwV0Fhad9VVsTzRVe iyIyuV8KgBmX881nLI6NcfvuQqmTKHW6/u58xspGBpK9V2CgeMWZd5WMep/6Gg2H 1hArLn87R4Lzw3bmQnbq2j05rL51Ay3REd3Vq0YSQbXtJ38WM3RFXoMksV9672/L QJ8oOBrCoxz4tM1rcxK23Of65szSx7ide+y3b+0d73VmcfWIi87hEK8TvACBI3wq smVH29UzqRWWIncw4vXz7vVXzix/L0XHZLDBDjpLL1Knd/VeaHsyMutmZUWf+COh rM+u/gMgBTQXkkOtFHf0M1QtBNWN386mw+Rjq37MxU1OuZzS/+CnOQ== =qTzR -----END PGP SIGNATURE----- --=-=-=-- From nobody Wed Mar 9 11:44:02 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A31A012D858 for ; Wed, 9 Mar 2016 11:44:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([127.0.0.1]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nEiWiCwvAgCS for ; Wed, 9 Mar 2016 11:44:00 -0800 (PST) Received: from relay5-d.mail.gandi.net (relay5-d.mail.gandi.net [217.70.183.197]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9412312D82A for ; Wed, 9 Mar 2016 11:44:00 -0800 (PST) Received: from mfilter38-d.gandi.net (mfilter38-d.gandi.net [217.70.178.169]) by relay5-d.mail.gandi.net (Postfix) with ESMTP id 4A72641C094; Wed, 9 Mar 2016 20:43:59 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at mfilter38-d.gandi.net Received: from relay5-d.mail.gandi.net ([IPv6:::ffff:217.70.183.197]) by mfilter38-d.gandi.net (mfilter38-d.gandi.net [::ffff:10.0.15.180]) (amavisd-new, port 10024) with ESMTP id uPulZNqiz_KM; Wed, 9 Mar 2016 20:43:57 +0100 (CET) X-Originating-IP: 93.204.214.47 Received: from nar.local (p5DCCD62F.dip0.t-ipconnect.de [93.204.214.47]) (Authenticated sender: cabo@cabo.im) by relay5-d.mail.gandi.net (Postfix) with ESMTPSA id 4464C41C08B; Wed, 9 Mar 2016 20:43:57 +0100 (CET) Message-ID: <56E07CFB.7000309@tzi.org> Date: Wed, 09 Mar 2016 20:43:55 +0100 From: Carsten Bormann User-Agent: Postbox 4.0.8 (Macintosh/20151105) MIME-Version: 1.0 To: Michael Richardson References: <56D728AD.7050109@gmx.net> <32050.1457549983@obiwan.sandelman.ca> In-Reply-To: <32050.1457549983@obiwan.sandelman.ca> X-Enigmail-Version: 1.2.3 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: "Ace@ietf.org" Subject: Re: [Ace] RS Synchronized Time X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Mar 2016 19:44:01 -0000 Michael Richardson wrote: > I'd like to hear more about this. https://mailarchive.ietf.org/arch/msg/ace/7UitoDFiRnxrNxOHvOMEmm5TcDs Grüße, Carsten From nobody Wed Mar 9 23:06:10 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4185212D56F for ; Wed, 9 Mar 2016 23:06:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=erdtman-se.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xNQBufQZmZ3q for ; Wed, 9 Mar 2016 23:06:06 -0800 (PST) Received: from mail-vk0-x22d.google.com (mail-vk0-x22d.google.com [IPv6:2607:f8b0:400c:c05::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8729C12D55D for ; Wed, 9 Mar 2016 23:06:06 -0800 (PST) Received: by mail-vk0-x22d.google.com with SMTP id c3so85013824vkb.3 for ; Wed, 09 Mar 2016 23:06:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=erdtman-se.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=3J4ZhMFH0FszhpIKCngpeYLj6U53KgEKgqatcgBxdJo=; b=qN29PUFKv+lttiG3+yyf8to1o8+oPbar8ZxqYUMNx/oGntFyyIH6/330rM+FlWi/6s Yy7cLEg+skr2lSfhOyps9P8eHdg3s29KKj/+sQGTkd6uh6Patphzn8hnF6gRqG+ANnIV uQkPAGhKB1SRqYbV8cR/9f/koXOHZbWcUq844my3OFfRrrmeihiLsesIM35jZrkXzwta d65vtX8/yhjxBdDPBy/zrFxwoCp4vDJmAFIpIjyYNDoBTC4/08gJyMigCGBM8jTYmhSH l5vprGGSBXbb62VPNbGeZK0DILsMLha4dShnvYAoJ/KVl6Tw7+lkmGpRfeXoZCsONo36 lEMQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=3J4ZhMFH0FszhpIKCngpeYLj6U53KgEKgqatcgBxdJo=; b=M2I7SHwk63iTeC+w6vVDlV9II/8vjVPz/FMzzg80HUy0kBA10fPYDpIcJDafclksjW 8tnlpyeRko6qVXTyNVY4UHpdikHCaLG4HHaOdSxSd6SK6QK0tlLHMCBCXVScSyc3qNPF 1TWLAUjDCYYDo2YXu8b9sjgfNlHzoQyk10bvoEaW7ZGrs+1MRv30iDYhRXcx9bh1eUQj Jvyz5q2LyLNJEZ2TEbnCWP9qd+mj60LLNoVzLFfwm3Gyotlo2IAQjLNBdAtqoH0tbPvR f4kO7fFj47xr7ArO4QXuxS58iSxkrT9PsLiNREkhiLcnwui+Uaryhv+nAb998ZJRuAq7 5Vmg== X-Gm-Message-State: AD7BkJKnOz6eiTAHReo6pVeZilNRYFki9DN29h50TEAGfI+rQqptAHVeTaCam4FNJxM5K/hDMvyMf4oAreiGBg== MIME-Version: 1.0 X-Received: by 10.31.167.195 with SMTP id q186mr1939534vke.113.1457593565460; Wed, 09 Mar 2016 23:06:05 -0800 (PST) Received: by 10.159.37.42 with HTTP; Wed, 9 Mar 2016 23:06:05 -0800 (PST) In-Reply-To: <29170.1457549157@obiwan.sandelman.ca> References: <56D72A16.5050607@gmx.net> <29170.1457549157@obiwan.sandelman.ca> Date: Thu, 10 Mar 2016 08:06:05 +0100 Message-ID: From: Samuel Erdtman To: Michael Richardson Content-Type: multipart/alternative; boundary=001a11425fbab24e74052dac7228 Archived-At: Cc: "Ace@ietf.org" Subject: Re: [Ace] DTLS and OSCOAP X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Mar 2016 07:06:09 -0000 --001a11425fbab24e74052dac7228 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi I might be missing something but I don=E2=80=99t see how COSE in it self so= lves the secure transport between C and RS. With DTLS the a secure channel is established and then all content goes through it (we can use the PoP key to establish the channel). COSE enables us to send secure messages with e.g. the PoP key but it is not a secure channel that we will send everything through i.e. we would need a way of binding it to CoAP or some other transport. With DTLS the full transport is wrapped in the secure channel but I don=E2=80=99t think that is how you would use COSE. This is similar t= o the first defined usage of PoP tokens in OAuth where JOSE is used to sign HTTP messages, the whole HTTP message is not wrapped in JOSE messages only specific parts of the message is included in the signature. So I cannot se how we can do a COSE-based solution without specifying something like OSCOAP. So to say COSE-based solution indirectly means that we need to specify something like OSCOAP or Signed HTTP. Even though there is difference between the use of TLS in OAuth and DTLS in ACE I think it is similar enough. In OAuth there is no integration with the TLS layer using PoP keys but it is transport layer security wrapping the full content. //Samuel On Wed, Mar 9, 2016 at 7:45 PM, Michael Richardson wrote: > > Hannes Tschofenig wrote: > > There are four options: > > > * Option #1: Do not specify a solution in the WG document (1) > > > * Option #2: Specify a DTLS-based solution > > > * Option #3: Specify an application layer solution (for example usi= ng > > OSCOAP) > > > ** Option #4: option #2 + option #3 > > I'm afraid of OSCOAP because I don't know if it will happen. > (It might be like S/MIME or SNMPv3 security...) > I'm afraid of #4, because if #3 doesn't happen, its the same as #2. > > G=C3=B6ran Selander wrote: > > So if we reword option 3 as > > > "* Option #3: Specify a COSE-based solution" > > I feel that this will succeed. > I think that we are better to pick one method here. > > -- > Michael Richardson , Sandelman Software Works > -=3D IPv6 IoT consulting =3D- > > > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > > --001a11425fbab24e74052dac7228 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi

I might be missing someth= ing but I don=E2=80=99t see how COSE in it self solves the secure transport= between C and RS. With DTLS the a secure channel is established and then a= ll content goes through it (we can use the PoP key to establish the channel= ). COSE enables us to send secure messages with e.g. the PoP key but it is = not a secure channel that we will send everything through i.e. we would nee= d a way of binding it to CoAP or some other transport.=C2=A0 With DTLS the = full transport is wrapped in the secure channel but I don=E2=80=99t think t= hat is how you would use COSE. This is similar to the first defined usage o= f PoP tokens in OAuth where JOSE is used to sign HTTP messages, the whole H= TTP message is not wrapped in JOSE messages only specific parts of the mess= age is included in the signature.

So I cannot se h= ow we can do a COSE-based solution without specifying something like OSCOAP= . So to say COSE-based solution indirectly means that we need to specify so= mething like OSCOAP or Signed HTTP.

Even though th= ere is difference between the use of TLS in OAuth and DTLS in ACE I think i= t is similar enough. In OAuth there is no integration with the TLS layer us= ing PoP keys but it is transport layer security wrapping the full content.<= /div>

//Samuel
On Wed, Mar 9, 2016 at 7:45 PM, Michael Richard= son <mcr+ietf@sandelman.ca> wrote:

Hannes Tschofenig <hannes.t= schofenig@gmx.net> wrote:
=C2=A0 =C2=A0 > There are four options:

=C2=A0 =C2=A0 > * Option #1: Do not specify a solution in the WG documen= t (1)

=C2=A0 =C2=A0 > * Option #2: Specify a DTLS-based solution

=C2=A0 =C2=A0 > * Option #3: Specify an application layer solution (for = example using
=C2=A0 =C2=A0 > OSCOAP)

=C2=A0 =C2=A0 > ** Option #4: option #2 + option #3

I'm afraid of OSCOAP because I don't know if it will happen.=
(It might be like S/MIME or SNMPv3 security...)
I'm afraid of #4, because if #3 doesn't happen, its the same as #2.=

G=C3=B6ran Selander <gora= n.selander@ericsson.com> wrote:
=C2=A0 =C2=A0 > So if we reword option 3 as

=C2=A0 =C2=A0 > "* Option #3: Specify a COSE-based solution"
I feel that this will succeed.
I think that we are better to pick one method here.

--
Michael Richardson <mcr+IETF@= sandelman.ca>, Sandelman Software Works
=C2=A0-=3D IPv6 IoT consulting =3D-




_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace


--001a11425fbab24e74052dac7228-- From nobody Wed Mar 9 23:11:43 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B625112D567 for ; Wed, 9 Mar 2016 23:11:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.221 X-Spam-Level: X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DvehdDPidUn0 for ; Wed, 9 Mar 2016 23:11:40 -0800 (PST) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8DE3F12D570 for ; Wed, 9 Mar 2016 23:11:39 -0800 (PST) X-AuditID: c1b4fb2d-f79836d000006396-49-56e11e290038 Received: from ESESSHC014.ericsson.se (Unknown_Domain [153.88.183.60]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id 18.EB.25494.92E11E65; Thu, 10 Mar 2016 08:11:37 +0100 (CET) Received: from ESESSMB303.ericsson.se ([169.254.3.52]) by ESESSHC014.ericsson.se ([153.88.183.60]) with mapi id 14.03.0248.002; Thu, 10 Mar 2016 08:11:37 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Michael Richardson , "Ace@ietf.org" Thread-Topic: [Ace] DTLS and OSCOAP Thread-Index: AQHRdK1XY01mkeMWy0aLtJOrE1vpmp9RbbeAgADhGYA= Date: Thu, 10 Mar 2016 07:11:36 +0000 Message-ID: References: <56D72A16.5050607@gmx.net> <29170.1457549157@obiwan.sandelman.ca> In-Reply-To: <29170.1457549157@obiwan.sandelman.ca> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.1.160122 x-originating-ip: [153.88.183.16] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprHIsWRmVeSWpSXmKPExsUyM2K7ja6m3MMwg9sHpCy+f+thtug51M/u wOSxZMlPJo+WOXuYA5iiuGxSUnMyy1KL9O0SuDJebNjBVrBEqOLRn63sDYwvBLsYOTkkBEwk nnesZ4WwxSQu3FvP1sXIxSEkcJhR4uKze+wQzmJGicuzvjODVLEJuEg8aHjEBGKLCPhKTJg1 nxHEFhZQkth+5AEjRFxZYsfrPUA1HEC2lcT3NrAFLAKqEk9unAZr5RWwkDh18hUbiC0ENKb7 UwsLiM0pYCzxdNddsBpGoIO+n1oDZjMLiEvcejKfCeJQAYkle84zQ9iiEi8f/wObLyqgJ3G7 Yy07RFxRYufZdmaQE5gFNCXW79KHGGMtMbPrJAuErSgxpfshO8Q5ghInZz5hmcAoPgvJtlkI 3bOQdM9C0j0LSfcCRtZVjKLFqcXFuelGxnqpRZnJxcX5eXp5qSWbGIGxdnDLb90djKtfOx5i FOBgVOLh/bDqQZgQa2JZcWXuIUYJDmYlEd5/Ig/DhHhTEiurUovy44tKc1KLDzFKc7AoifOy fbocJiSQnliSmp2aWpBaBJNl4uCUamCUVNuyoDDmRwfPAT3Z5Sz/5B//erc+K7Ze0Jk1IizN 6R/H3NoNdo42X8+biP9kfr3RdF/ItIlS2syvL3/oUUi7/rH/AjNjxqUjFtu7r/jUMxh2P126 6OIF5e2xJs9fvyifGVepIdRxYvfCHcvnd1X+Z1A1298vbHetcJlz52a1prV7OxUfJb1WYinO SDTUYi4qTgQAo8VXirECAAA= Archived-At: Subject: Re: [Ace] DTLS and OSCOAP X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Mar 2016 07:11:41 -0000 SGkgTWljaGFlbCwNCg0KT24gMjAxNi0wMy0wOSAxOTo0NSwgIkFjZSBvbiBiZWhhbGYgb2YgTWlj aGFlbCBSaWNoYXJkc29uIg0KPGFjZS1ib3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiBtY3Ir aWV0ZkBzYW5kZWxtYW4uY2E+IHdyb3RlOg0KDQo+DQo+SGFubmVzIFRzY2hvZmVuaWcgPGhhbm5l cy50c2Nob2ZlbmlnQGdteC5uZXQ+IHdyb3RlOg0KPiAgICA+IFRoZXJlIGFyZSBmb3VyIG9wdGlv bnM6DQo+DQo+ICAgID4gKiBPcHRpb24gIzE6IERvIG5vdCBzcGVjaWZ5IGEgc29sdXRpb24gaW4g dGhlIFdHIGRvY3VtZW50ICgxKQ0KPg0KPiAgICA+ICogT3B0aW9uICMyOiBTcGVjaWZ5IGEgRFRM Uy1iYXNlZCBzb2x1dGlvbg0KPg0KPiAgICA+ICogT3B0aW9uICMzOiBTcGVjaWZ5IGFuIGFwcGxp Y2F0aW9uIGxheWVyIHNvbHV0aW9uIChmb3IgZXhhbXBsZQ0KPnVzaW5nDQo+ICAgID4gT1NDT0FQ KQ0KPg0KPiAgICA+ICoqIE9wdGlvbiAjNDogb3B0aW9uICMyICsgb3B0aW9uICMzDQo+DQo+SSdt IGFmcmFpZCBvZiBPU0NPQVAgYmVjYXVzZSBJIGRvbid0IGtub3cgaWYgaXQgd2lsbCBoYXBwZW4u DQo+KEl0IG1pZ2h0IGJlIGxpa2UgUy9NSU1FIG9yIFNOTVB2MyBzZWN1cml0eS4uLikNCg0KWWVz LCB0aGUgZnV0dXJlIGlzIHVuY2VydGFpbi4gQXMgYSBjby1hdXRob3Igb2YgT1NDT0FQIEkgd291 bGQgb2YgY291cnNlDQpsaWtlIHRvIGtub3cgaWYgeW91IGNhbiBzaGFyZSBzb21lIHByb2ZvdW5k IHVuZGVyc3RhbmRpbmcgb3IgaWYgaXQgaXMganVzdA0KYSBmZWVsaW5nLiAgQ291bGQgeW91IHBs ZWFzZSBiZSBtb3JlIHNwZWNpZmljIGJ5IGhpZ2hsaWdodGluZyB3aGljaCBvZiB0aGUNCmNhc2Vz IGJlbG93IHlvdSBmZWFyOg0KDQooYSkgdGhlIHVzZSBjYXNlcyBhZGRyZXNzZWQgYnkgT1NDT0FQ IChlLmcuIGNvbmZpcm1hdGlvbiBvZiBHRVQNCi9hbGFybS1zdGF0dXMsIGNvbmZpcm1hdGlvbiBv ZiBhY3R1YXRvciByZXF1ZXN0IHBhc3NpbmcgdGhyb3VnaCBhIHByb3h5KQ0KYXJlIG5vdCByZWxl dmFudCBvciB0aGUgc2VjdXJpdHkgaXNzdWVzIHdpbGwgYmUgaWdub3JlZCwNCg0KKGIpIG5vIG9u ZSB3aWxsIHVzZSBDb0FQIGZvciB0aGVzZSB1c2UgY2FzZXMsIG9yDQoNCihjKSB0aGUgbWV0aG9k IHByb3ZpZGVkIGJ5IE9TQ09BUCBpcyBub3QgdGhlIHJpZ2h0IHNvbHV0aW9uIHRvIHNlY3VyZSBD b0FQDQpmb3IgdGhlc2UgdXNlIGNhc2VzDQoNCg0KPkknbSBhZnJhaWQgb2YgIzQsIGJlY2F1c2Ug aWYgIzMgZG9lc24ndCBoYXBwZW4sIGl0cyB0aGUgc2FtZSBhcyAjMi4NCj4NCj5Hw7ZyYW4gU2Vs YW5kZXIgPGdvcmFuLnNlbGFuZGVyQGVyaWNzc29uLmNvbT4gd3JvdGU6DQo+ICAgID4gU28gaWYg d2UgcmV3b3JkIG9wdGlvbiAzIGFzDQo+DQo+ICAgID4gIiogT3B0aW9uICMzOiBTcGVjaWZ5IGEg Q09TRS1iYXNlZCBzb2x1dGlvbiINCj4NCj5JIGZlZWwgdGhhdCB0aGlzIHdpbGwgc3VjY2VlZC4N Cj5JIHRoaW5rIHRoYXQgd2UgYXJlIGJldHRlciB0byBwaWNrIG9uZSBtZXRob2QgaGVyZS4NCg0K V2VsbCwgT1NDT0FQIGlzIGEgQ09TRS1iYXNlZCBtZXRob2QuDQoNCkfDtnJhbg0KDQo+DQo+LS0N Cj5NaWNoYWVsIFJpY2hhcmRzb24gPG1jcitJRVRGQHNhbmRlbG1hbi5jYT4sIFNhbmRlbG1hbiBT b2Z0d2FyZSBXb3Jrcw0KPiAtPSBJUHY2IElvVCBjb25zdWx0aW5nID0tDQo+DQo+DQo+DQoNCg== From nobody Thu Mar 10 01:48:04 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0285012D63C for ; Thu, 10 Mar 2016 01:48:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 41PhiVp5SC3t for ; Thu, 10 Mar 2016 01:48:01 -0800 (PST) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3C04912D62E for ; Thu, 10 Mar 2016 01:48:01 -0800 (PST) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id u2A9luwO017412; Thu, 10 Mar 2016 10:47:56 +0100 (CET) Received: from aung.tzi.org (unknown [IPv6:2001:638:708:30da:211:22ff:fedd:aa18]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3qLQSD5RTHz8PNR; Thu, 10 Mar 2016 10:47:56 +0100 (CET) From: Olaf Bergmann To: Samuel Erdtman References: <56D72A16.5050607@gmx.net> <29170.1457549157@obiwan.sandelman.ca> Date: Thu, 10 Mar 2016 10:47:56 +0100 In-Reply-To: (Samuel Erdtman's message of "Thu, 10 Mar 2016 08:06:05 +0100") Message-ID: <87vb4ur7eb.fsf@aung.informatik.uni-bremen.de> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Archived-At: Cc: Michael Richardson , "Ace@ietf.org" Subject: Re: [Ace] DTLS and OSCOAP X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Mar 2016 09:48:03 -0000 Hi, Samuel Erdtman writes: > I might be missing something but I don=E2=80=99t see how COSE in it self > solves the secure transport between C and RS. There are at least two proposals in ACE that show how COSE can be used for secure transport between C and RS: OSCOAP and DCAF-COSE. The details have to be worked on, but the direction is clear. > Even though there is difference between the use of TLS in OAuth and > DTLS in ACE I think it is similar enough. In OAuth there is no > integration with the TLS layer using PoP keys but it is transport > layer security wrapping the full content. I would hope that the usage of DTLS in ACE will be superior than the usage of TLS in OAuth, i.e. the authorization must be bound intrinsically to the secured channel as has been discussed before. Gr=C3=BC=C3=9Fe Olaf From nobody Thu Mar 10 05:47:14 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 75DFB12D837 for ; Thu, 10 Mar 2016 05:47:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iCYYuZCJ01ZE for ; Thu, 10 Mar 2016 05:47:11 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 772EC12D817 for ; Thu, 10 Mar 2016 05:43:52 -0800 (PST) Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id 222CF203BC; Thu, 10 Mar 2016 08:45:49 -0500 (EST) Received: from obiwan.sandelman.ca (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 084FD63755; Thu, 10 Mar 2016 08:43:51 -0500 (EST) From: Michael Richardson To: =?us-ascii?Q?=3D=3Futf-8=3FB=3FR8O2cmFuIFNlbGFuZGVy=3F=3D?= In-Reply-To: References: <56D72A16.5050607@gmx.net> <29170.1457549157@obiwan.sandelman.ca> X-Mailer: MH-E 8.6; nmh 1.6+dev; GNU Emacs 24.4.2 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Cc: "Ace@ietf.org" Subject: Re: [Ace] DTLS and OSCOAP X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Mar 2016 13:47:13 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable G=C3=B6ran Selander wrote: > On 2016-03-09 19:45, "Ace on behalf of Michael Richardson" > wrote: >> >> Hannes Tschofenig wrote: > There are four >> options: >> >> > * Option #1: Do not specify a solution in the WG document (1) >> >> > * Option #2: Specify a DTLS-based solution >> >> > * Option #3: Specify an application layer solution (for example >> using > OSCOAP) >> >> > ** Option #4: option #2 + option #3 >> >> I'm afraid of OSCOAP because I don't know if it will happen. (It >> might be like S/MIME or SNMPv3 security...) > Yes, the future is uncertain. As a co-author of OSCOAP I would of > course like to know if you can share some profound understanding or if > it is just a feeling. Could you please be more specific by > highlighting which of the cases below you fear: > (a) the use cases addressed by OSCOAP (e.g. confirmation of GET > /alarm-status, confirmation of actuator request passing through a > proxy) are not relevant or the security issues will be ignored, > (b) no one will use CoAP for these use cases, or > (c) the method provided by OSCOAP is not the right solution to secure > CoAP for these use cases My concern is that *OpenSSL* (uh, I mean: *SSL*, or maybe I mean *TLS*) is well understood by product marketing people, while all the other acronyms a= re not. So I'm hopeful for option #3: and I don't want #2 or #4, because means it will be transport layer security only. =2D- Michael Richardson , Sandelman Software Works -=3D IPv6 IoT consulting =3D- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEVAwUBVuF6FICLcPvd0N1lAQISZgf/f8L95emJs8DPzEcRY+T3fkThESlYLtVI Pbu+gzi73kDvayrsRvf8H0kwjTqVndpNkn2mRrLnnrUduhY+Ei8HWOWInPLbPpqi wY78b3IHUqYRmTSH8fSPt1qZfRgcbEVAr3nJRpyCGE8G8NdRDuVk6uPDlTdZ+vDZ g41PW3ZDjDrWnPIxcvoPk+0ODImJoB76VU02XEo4yB/I/abKyX5mEenloUGPqoso lkTEUsp+w5C9gni0b/Jvq9K88og8z301RaF7wOfC+g9ErsvEXxsg+dmMPAyHLXeU +vwAFPQfKB7sVLj7aGmDJiVuJH+2EkLm9Xff5/aSzjgzjwM+dgp90A== =4VvP -----END PGP SIGNATURE----- --=-=-=-- From nobody Fri Mar 11 02:12:33 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A32D12D623 for ; Fri, 11 Mar 2016 02:12:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.602 X-Spam-Level: X-Spam-Status: No, score=-2.602 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lh8lLruYpXyt for ; Fri, 11 Mar 2016 02:12:28 -0800 (PST) Received: from mout.gmx.net (mout.gmx.net [212.227.17.20]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D933A12D60F for ; Fri, 11 Mar 2016 02:12:27 -0800 (PST) Received: from [192.168.10.140] ([138.232.236.15]) by mail.gmx.com (mrgmx102) with ESMTPSA (Nemesis) id 0LuJDv-1ZfWND0rKx-011max; Fri, 11 Mar 2016 11:12:16 +0100 To: Samuel Erdtman , Kepeng Li References: <56D71F16.7080303@gmx.net> From: Hannes Tschofenig Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9 Message-ID: <56E299FD.80205@gmx.net> Date: Fri, 11 Mar 2016 11:12:13 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="s5DIq6kTN6AwruDdj0PJGokQO18LFRHqc" X-Provags-ID: V03:K0:/AKw5K35YWjfU0FL7Fv9JtfLpbh5fpQ0EXD8vehKHg/XbGGA6mc wg3fvwSTJlWNyOMO1NCLX3Yjma4YT2vF4yf6oJLb5V7JDhT9wnV2IDoA1+T2+h2dIrTBxyy zzRX4Objz3HOWxrR3xgZAtT1Gp155tPyb4FU8Im36PeCpFN2hyx8+8cFBTV/h634lHcJS3M psia/i+X6mgxM6tCK3ntA== X-UI-Out-Filterresults: notjunk:1;V01:K0:Rd/uFX3HkrU=:PYdOb9I71LALdwqG0Crf/c N8rFLGe9euhUFg8K10W5mzAe84Z8LZOG1utsB00XLW95fyKlqy1C7ymdMSPl3ArPfmrgjc5IM 4dUXOi6tZST6enpM8iG4oygey7FbGkzpDFd8gwfH27QteAUf52C8iHmtm+EX3o3cewYHUfdE6 U/7YcgsRt9MEBCraYy+0dVRU83OpDT8HGk8ZyLkSYxVpeyqoSS0IZWW9xVgeMazTe0IV0E5QP RHW1efOU5QxX5epGl8DyNk76JffOaVAD6grLpzTqqLU2B2TMCMyVsPnHIA66X4yRVBVvUbTcY 1+GPIPV5Vrt1g+XD4xwwE0GHH2yC6c5AtrDeolktk9yUeuLNjzy0CTlBqdUHNM8+QlGkAUiXw 6JlWY3twRJEXakcZNAW7Aa4UuVbbCLbuIOc+oItnKBaEmIXi5uoAZdy8kyyviNfivL5nuQjDv BQjGcm1Rk5BVX7uFuHZDjNMF6Vj0627e0LVUX6AF+qCnEtqT3M6P6cCY5R2ZtxH/r7q3lC0G2 g3FrDtpc4eHjqRqawSyW7KDUAqB7jkG6ikMqxL+TAgyjRzpzV97wWAJwLZIS+nLpLshEuj1Ng wOHfg9xhw0lhj3QNj5/woaEGovBfhuFRuSvSzhvIXhrrRxDkmr5EM12+c9mPk7I35MM1ARuxY D5yuVVKov0v64KsT7s+OsQfclS2JkBBVvUohlW5W5emq3d2siiSw6OshDrMDGEuVoYGmSWjen 4rWx6AvYOP4Xrb/Ckfu/B079C/2N3ZcKQT33Q33FkNiE06LgmynN5k6r+9c= Archived-At: Cc: =?UTF-8?Q?G=c3=b6ran_Selander?= , "Ace@ietf.org" Subject: Re: [Ace] Milestones X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Mar 2016 10:12:31 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --s5DIq6kTN6AwruDdj0PJGokQO18LFRHqc Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Thanks for your feedback. I would, however, also need more specific feedback from you and answers to the other questions as well. In particular, it would be good to know what you consider a precondition for sending the specification to the IESG. I would also like to hear your feedback on what you consider a realistic milestone. Ciao Hannes On 03/09/2016 07:00 AM, Samuel Erdtman wrote: > +1 >=20 > //Samuel >=20 > On Fri, Mar 4, 2016 at 2:09 AM, Kepeng Li > wrote: >=20 > > I think this time line is too optimistic for any of the above. >=20 >=20 > +1. This is also my personal observation. >=20 > Kepeng (Individual) >=20 > =E5=9C=A8 3/3/16 5:19 pm=EF=BC=8C "G=C3=B6ran Selander" > =E5=86=99=E5=85=A5: >=20 > > > > > >On 2016-03-02 18:12, "Ace on behalf of Hannes Tschofenig" > > on behalf of > hannes.tschofenig@gmx.net > wrote= : > > > >> > >>** May 2016 Submit "Authentication and Authorization Solution" > >>specification to the IESG for publication as a Proposed Standard.= > >> > >>--> Here the question is what we expect to have completed by May.= > >>Here are possible options: > >> > >> * Specification completed. > >> * Reference implementation available. > >> * Interoperability testing done. > >> * Formal verification of the security parts. > >> > >>Also, the amount of specification work depends a bit on your > feedback on > >>the items we are going to ask feedback for. > >> > >>It would be good to know whether you have an opinion about these > issues. > > > >I think this time line is too optimistic for any of the above. > Considering > >that we spent most of last year to determine which of the candidat= es > >solutions we were going to take as a "starting point", and that we= have > >received many reviews calling for different types of consideration= s and > >extensions, and the ongoing discussion about handling the differen= t > >deployment options, I think it is reasonable to give this work ite= m > more > >time to complete. > > > > > >G=C3=B6ran > > > >_______________________________________________ > >Ace mailing list > >Ace@ietf.org > >https://www.ietf.org/mailman/listinfo/ace >=20 >=20 > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace >=20 >=20 >=20 >=20 > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace >=20 --s5DIq6kTN6AwruDdj0PJGokQO18LFRHqc Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJW4pn9AAoJEGhJURNOOiAtcJ0IAJWXL8eZRmvxXJ3JdnaZWF5J 13xJXr9Ahlf/uWoep55FQRUkDuW+lfuTKESpDnzYQWvDpjemTBZQ3EPAIUOZZMVe 9u0d94SosGZmnEsWnADVtnTRRvi3Rgaq9lyptjSMCQ2p36aDiXbKVxINT3OagH4+ lSJejPSeiizkREvdKlSputFeGo8D09lNXjygUbrQWb9lYMH8TAPyRdztq+/VIDQB 1/hjRaIkpLSYfRiIlPaLcICNJ6iNTWKQ8c+RcTlWKDEahaRraDoQUDGAzdPe+c4j doSMIe9NTG/Hb3f0Mw4wbvUFbfeKrkLWTRjaUDA/NP47V+OD0o/qKgoBJCC5qqA= =GdsU -----END PGP SIGNATURE----- --s5DIq6kTN6AwruDdj0PJGokQO18LFRHqc-- From nobody Fri Mar 11 22:55:23 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4E60712DAF2; Fri, 11 Mar 2016 22:55:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.92 X-Spam-Level: X-Spam-Status: No, score=-1.92 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jZALcRwo5nZg; Fri, 11 Mar 2016 22:55:04 -0800 (PST) Received: from relay2-d.mail.gandi.net (relay2-d.mail.gandi.net [217.70.183.194]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD72E12D511; Fri, 11 Mar 2016 22:55:04 -0800 (PST) Received: from mfilter35-d.gandi.net (mfilter35-d.gandi.net [217.70.178.166]) by relay2-d.mail.gandi.net (Postfix) with ESMTP id 7EFF4C5A4E; Sat, 12 Mar 2016 07:55:03 +0100 (CET) X-Virus-Scanned: Debian amavisd-new at mfilter35-d.gandi.net Received: from relay2-d.mail.gandi.net ([IPv6:::ffff:217.70.183.194]) by mfilter35-d.gandi.net (mfilter35-d.gandi.net [::ffff:10.0.15.180]) (amavisd-new, port 10024) with ESMTP id hMe2WwyJbewK; Sat, 12 Mar 2016 07:55:01 +0100 (CET) X-Originating-IP: 93.204.214.47 Received: from nar.local (p5DCCD62F.dip0.t-ipconnect.de [93.204.214.47]) (Authenticated sender: cabo@cabo.im) by relay2-d.mail.gandi.net (Postfix) with ESMTPSA id 61C27C5A4F; Sat, 12 Mar 2016 07:54:50 +0100 (CET) Message-ID: <56E3BD3B.7050606@tzi.org> Date: Sat, 12 Mar 2016 07:54:51 +0100 From: Carsten Bormann User-Agent: Postbox 4.0.8 (Macintosh/20151105) MIME-Version: 1.0 To: "ace@ietf.org" , "core@ietf.org WG" , "cose@ietf.org" , "dtls-iot@ietf.org" , "t2trg@irtf.org" X-Enigmail-Version: 1.2.3 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Archived-At: Subject: [Ace] Constrained Node/Network Cluster @ IETF95: Final agenda X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Mar 2016 06:55:07 -0000 Here is my usual eclectic condensed agenda based on the "final" agenda for IETF95. Compared to the draft agenda, this mostly has room changes and small adjustments to the session timings. (Also, taps is now on top of ace and httpbis is on top of cose.) Wednesday is still constrained-free, as are Tuesday and Thursday morning; time to go to, say, tls, homenet, oauth, saag. Remember that late changes still can happen. All times are ART (UTC-0300), which is the same as New Brunswick or Bermuda daylight savings time (ADT) (the browser timezone function is not yet reinstated on https://datatracker.ietf.org/meeting/agenda-utc, for those who want to listen from remote). Grüße, Carsten MONDAY, April 4, 2016 1000-1230 Morning Session I Atlantico C SEC *** ace Authentication and Authorization for Constrained Environments WG Buen Ayre B SEC tokbind Token Binding WG Buen Ayre A TSV taps Transport Services WG 1400-1530 Afternoon Session I Atlantico C ART uta Using TLS in Applications WG Buen Ayre B INT *** 6tisch IPv6 over the TSCH mode of IEEE 802.15.4e WG Buen Ayre C OPS v6ops IPv6 Operations WG 1550-1720 Afternoon Session II Atlantico B ART httpbis Hypertext Transfer Protocol WG Buen Ayre B INT dnssd Extensions for Scalable DNS Service Discovery WG Pacifico A IRTF maprg Proposed Measurement and Analysis for Protocols Research Group Buen Ayre C RTG babel Babel routing protocol BOF Quebracho B SEC *** cose CBOR Object Signing and Encryption WG 1740-1940 Afternoon Session III Quebracho B ART webpush Web-Based Push Notifications WG Buen Ayre C INT *** lpwan Low-Power Wide Area Networks BOF Buen Ayre B OPS anima Autonomic Networking Integrated Model and Approach WG Buen Ayre A SEC acme Automated Certificate Management Environment WG TUESDAY, April 5, 2016 1000-1230 Morning Session I Atlantico C INT arcing Alternative Resolution Contexts for Internet Naming BOF Buen Ayre C OPS v6ops IPv6 Operations WG Buen Ayre A RTG detnet Deterministic Networking WG Atlantico B SEC tls Transport Layer Security WG 1400-1600 Afternoon Session I Pacifico A INT homenet Home Networking WG Atlantico C SEC lurk Limited Use of Remote Keys BOF Buen Ayre B TSV tsvwg Transport Area Working Group WG 1620-1720 Afternoon Session II Buen Ayre C INT intarea Internet Area Working Group WG Quebracho B RTG *** roll Routing Over Low power and Lossy networks WG Buen Ayre B SEC curdle CURves, Deprecating and a Little more Encryption WG 1740-1910 Afternoon Session III Buen Ayre B ART *** core Constrained RESTful Environments WG Pacifico A TSV tsvarea Transport Area Open Meeting WEDNESDAY, April 6, 2016 1000-1230 Morning Session I Buen Ayre C INT 6man IPv6 Maintenance WG Buen Ayre B SEC oauth Web Authorization Protocol WG Atlantico C SEC openpgp Open Specification for Pretty Good Privacy WG - 11:00 - 12:30 Atlantico B TSV rmcat RTP Media Congestion Avoidance Techniques WG 1400-1600 Afternoon Session I Buen Ayre C INT its Intelligent Transportation Systems BOF Quebracho B RTG bier Bit Indexed Explicit Replication WG 1620-1720 Afternoon Session II Atlantico C RTG rtgarea Routing Area Open Meeting Buen Ayre B SEC httpauth Hypertext Transfer Protocol Authentication WG Buen Ayre A TSV tsvwg Transport Area Working Group WG THURSDAY, April 7, 2016 1000-1230 Morning Session I Atlantico C SEC tls Transport Layer Security WG Pacifico A TSV accord Alternatives to Content Classification for Operator Resource Deployment BOF 1400-1600 Afternoon Session I Buen Ayre A ART ice Interactive Connectivity Establishment WG Pacifico A SEC saag Security Area Open Meeting 1620-1720 Afternoon Session II Buen Ayre C IRTF*** t2trg Thing-to-Thing Atlantico C OPS anima Autonomic Networking Integrated Model and Approach WG 1730-1930 Afternoon Session III Atlantico C ART httpbis Hypertext Transfer Protocol WG Pacifico A INT *** 6lo IPv6 over Networks of Resource-constrained Nodes WG Buen Ayre C TSV tcpinc TCP Increased Security WG FRIDAY, April 8, 2016 1000-1200 Morning Session I Buen Ayre B ART *** core Constrained RESTful Environments WG Buen Ayre A IRTF cfrg Crypto Forum From nobody Sat Mar 12 02:04:36 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06B2412D5AA for ; Sat, 12 Mar 2016 02:04:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=erdtman-se.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rn-88u0ZkizI for ; Sat, 12 Mar 2016 02:04:33 -0800 (PST) Received: from mail-vk0-x22c.google.com (mail-vk0-x22c.google.com [IPv6:2607:f8b0:400c:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4C17412D5A8 for ; Sat, 12 Mar 2016 02:04:32 -0800 (PST) Received: by mail-vk0-x22c.google.com with SMTP id c3so161142503vkb.3 for ; Sat, 12 Mar 2016 02:04:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=erdtman-se.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=1/Igy7+MjHRvNNSHk6pZWaZwOsVaAeI5om/CKGSS3jw=; b=gcAB7hxp2ROvy03L9XOh/PXYithDLMB318hUy8dJC/a0CHH9friFBHZXi2ejfhmkFO GBhJbwh5f9RgWhvaTqCAU+HEfP3fEfhZxfo7ktsxKBtOYxWcqlL8yjTDbOFMgIbrLW6p +ohpLoQm3vFLmqPDsaG8cc+uA2qBoJJj0Ezd8gjzLPNa6lou/ZlrP/lZlofdua8HAm48 //d5N9+1bm6S6Nx0+iXHhyz5l31IPTQhhN4TGg05BilSFFg2EHj+NAyrr3mhrCF5Rx8s ZfVSNGbOl5lQJHSWDDZpY5Ydq09EKKChFt1p2JT9A+2dl8MClwC/gv8alGXm3g3x+Duf uAag== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=1/Igy7+MjHRvNNSHk6pZWaZwOsVaAeI5om/CKGSS3jw=; b=iMYKZbtv3f7hYZ1aU28xuPGhrN1sWmCm8KEoFyllW5JjaDKcPWj5Xo3e0clwuBrs9J OsmpuIZ4Luwwy/4JznKyHA1Ta3dQQ+nawamq9KLQDH3or5+zr76f9rJ1jCclk0O8Uisn xbuaJJfuKXogkVUw2NeahgBdfsqQyowr2Z5m/zB7l8hvnxGA7xVRvwRco+m+ZP5N6q9f 9R5YrfH/SLx1tQp4moTDIHM6fCzyPiooTInX9UGxQOesVM77i/D6XvcPQvJK7SGKy9Qm DaXb7BDlVKvw3+2BrN3cDgBWHIHC1WOOLWt+Q5qmuaTyDB8Q22dd++r05ZX5s5Ai2vy8 C/gQ== X-Gm-Message-State: AD7BkJJ4o1acnqQuNNYeZVohSGCeUkxbZwsM5mu4NeM2Rw/pXyWgAX/IleZRXakThNoalFPdKvWHZUL9rhaGug== MIME-Version: 1.0 X-Received: by 10.31.192.78 with SMTP id q75mr15000786vkf.96.1457777071700; Sat, 12 Mar 2016 02:04:31 -0800 (PST) Received: by 10.159.37.42 with HTTP; Sat, 12 Mar 2016 02:04:31 -0800 (PST) In-Reply-To: <034f01d174c3$70541b60$50fc5220$@augustcellars.com> References: <56D72BA7.1030003@gmx.net> <034f01d174c3$70541b60$50fc5220$@augustcellars.com> Date: Sat, 12 Mar 2016 11:04:31 +0100 Message-ID: From: Samuel Erdtman To: Jim Schaad Content-Type: multipart/alternative; boundary=001a1143a0d08555cf052dd72c5a Archived-At: Cc: Hannes Tschofenig , Ace@ietf.org Subject: Re: [Ace] Credential Options X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Mar 2016 10:04:36 -0000 --001a1143a0d08555cf052dd72c5a Content-Type: text/plain; charset=UTF-8 Hi Jim, Sorry for not being more explicit about certificate type, the credential types are more or less taken directly from CoAP ( https://tools.ietf.org/html/rfc7252#section-9) i.e. the certificates referred to are X509 certificates. //Samuel On Wed, Mar 2, 2016 at 9:38 PM, Jim Schaad wrote: > > > > -----Original Message----- > > From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Hannes Tschofenig > > Sent: Wednesday, March 02, 2016 10:07 AM > > To: Ace@ietf.org > > Subject: [Ace] Credential Options > > > > Hi all, > > > > in an attempt to progress the question > arises > > about solutions should be described in enough detail to have them > > interoperable. > > > > There are three types of credentials specified: > > > > * PSK > > * Raw Public Key > > * Certificates > > If you say certificates, do you need to make an additional statement of > what type of certificates we are dealing with? Are these the PKIX X.509 > certificate or something akin to the automotive certificate that was > presented in SAAG a couple of meetings ago? > > Jim > > > > > With regard to asymmetric cryptography we settled with ECC and DTLS/TLS > > profile document makes certain recommendations regarding the crypto. > > > > However, there is still the question about what is > mandatory-to-implement and > > what should be described in the WG document. > > > > What should be mandatory to implement: > > > > * Option 1: Nothing > > * Option 2: PSK, RPK, Certificates > > * Option 3: PSK > > * Option 4: RPK > > * Option 5: Certificates > > > > Which of the three should be described in the document? (Obviously the > MTI > > versions but also others or should they be covered in separate > > documents?) > > > > Here are the slides from the ACE virtual interim meeting providing > further > > background information: > > https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides- > > interim-2016-ace-1-3.pdf > > > > Deadline: 16th March 2016 > > > > Ciao > > Hannes & Kepeng > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > --001a1143a0d08555cf052dd72c5a Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Jim,

Sorry for not being = more explicit about certificate type, the credential types are more or less= taken directly from CoAP (https://tools.ietf.org/html/rfc7252#section-9) i.e. the certi= ficates referred to are X509 certificates.

//Samue= l

On W= ed, Mar 2, 2016 at 9:38 PM, Jim Schaad <ietf@augustcellars.com>= ; wrote:


> -----Original Message-----
> From: Ace [mailto:ace-bounces@= ietf.org] On Behalf Of Hannes Tschofenig
> Sent: Wednesday, March 02, 2016 10:07 AM
> To: Ace@ietf.org
> Subject: [Ace] Credential Options
>
> Hi all,
>
> in an attempt to progress <draft-ietf-ace-oauth-authz> the quest= ion arises
> about solutions should be described in enough detail to have them
> interoperable.
>
> There are three types of credentials specified:
>
> * PSK
> * Raw Public Key
> * Certificates

If you say certificates, do you need to make an additional statement= of what type of certificates we are dealing with?=C2=A0 Are these the PKIX= X.509 certificate or something akin to the automotive certificate that was= presented in SAAG a couple of meetings ago?

Jim

>
> With regard to asymmetric cryptography we settled with ECC and DTLS/TL= S
> profile document makes certain recommendations regarding the crypto. >
> However, there is still the question about what is mandatory-to-implem= ent and
> what should be described in the WG document.
>
> What should be mandatory to implement:
>
> * Option 1: Nothing
> * Option 2: PSK, RPK, Certificates
> * Option 3: PSK
> * Option 4: RPK
> * Option 5: Certificates
>
> Which of the three should be described in the document? (Obviously the= MTI
> versions but also others or should they be covered in separate
> documents?)
>
> Here are the slides from the ACE virtual interim meeting providing fur= ther
> background information:
> https://www.ietf.org/proc= eedings/interim/2016/03/02/ace/slides/slides-
> interim-2016-ace-1-3.pdf
>
> Deadline: 16th March 2016
>
> Ciao
> Hannes & Kepeng


____________________________= ___________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace

--001a1143a0d08555cf052dd72c5a-- From nobody Sat Mar 12 02:08:45 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 74EB212D54D for ; Sat, 12 Mar 2016 02:08:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=erdtman-se.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J-yIqYeRDYuz for ; Sat, 12 Mar 2016 02:08:42 -0800 (PST) Received: from mail-vk0-x22a.google.com (mail-vk0-x22a.google.com [IPv6:2607:f8b0:400c:c05::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 146F312D5A1 for ; Sat, 12 Mar 2016 02:08:42 -0800 (PST) Received: by mail-vk0-x22a.google.com with SMTP id k1so161451348vkb.0 for ; Sat, 12 Mar 2016 02:08:42 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=erdtman-se.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=GAiI7KgHEebjZ0cFRP19+gJFShmcFI4jEQXae79wTjM=; b=oeGQ038WPJJhAqxCk08cmou/qFHg2ncqpcDnOq6N/3iNQWjaSOtscBnvGUYSijDu7p AzoOFcoYOFgrfB2qnYKmiYhOEG4eiURlXGalzIZ1x9qAGoCtsIzMKmnnfzveggM0SE5o ynvrmq7LACS3QKhnccjgFTYWp5Yu9me+lP2kY3UKasUWH2Kvbka+yX33+Ho5OmuWQ0ag j449nLKw0DXTl8ks3sk+2DUZ/Zc2CsLfFeihMcaQkWxhyjy+w6maYCv5/CQEQAutGiT9 LC2sqmZV1TjQB1e0cd9ObEf1e9ZhAk6WLHh5HHtef+YxDwb+4fpdV6LDrMg+28G9B8OW S5rg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=GAiI7KgHEebjZ0cFRP19+gJFShmcFI4jEQXae79wTjM=; b=aP1y41MOgoyToYiTIvW9ts+eNOvSjgzIzuUTA9i/YOKGR/jinDBy1P6B0NBuaGb9Ph ne0Ni3G9T4pFU/UJvvUgtHpL/3qJ9wrbdc1vxLO9TkaAHg5i9ZDFPvQlYzyS79cwlqV6 kVkLK+Iee1QnihRGH9+trht+M26ZKdjsrpz8Orfn/XY+w4KwYH7BnTopfxrukTdg/tZz mUdeiBNGj11BYWHEalpFtf5Gjh6bLOkWivg+7K7oPCLrfnci28pPWeGZpFEZ9D/oJXE4 07CHcG91DfaDgARgqeNoGacIPZITbvlfBd6TPjxnH/z1fkCkDKPgkDshnnoqB8ebf8fz fTcA== X-Gm-Message-State: AD7BkJKgecLDFqaxKQ3M6Zjoz+gHgFF24yeEZD31vbiwf0AkMNrz/ABtYZOhSO70d9TbrgttgjhAX8P/9yj7Yw== MIME-Version: 1.0 X-Received: by 10.31.49.207 with SMTP id x198mr14931893vkx.1.1457777321045; Sat, 12 Mar 2016 02:08:41 -0800 (PST) Received: by 10.159.37.42 with HTTP; Sat, 12 Mar 2016 02:08:40 -0800 (PST) In-Reply-To: References: <56D72BA7.1030003@gmx.net> <034f01d174c3$70541b60$50fc5220$@augustcellars.com> Date: Sat, 12 Mar 2016 11:08:40 +0100 Message-ID: From: Samuel Erdtman To: Jim Schaad Content-Type: multipart/alternative; boundary=001a11430efe622557052dd73bc1 Archived-At: Cc: Hannes Tschofenig , Ace@ietf.org Subject: Re: [Ace] Credential Options X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Mar 2016 10:08:44 -0000 --001a11430efe622557052dd73bc1 Content-Type: text/plain; charset=UTF-8 Hi All A further note on certificate usage The current version of the draft adds the possibility for the AS to return x5c, x5t, or x5t#S256 (defined in https://tools.ietf.org/html/rfc7515) in the token response to indicate what server certificate to expect from the resource server when connecting. There is however currently not text about how to bind a client certificate to a token. If we want to include certificates as one of the credential types that we define in this document we could do this by adding a parameter to the token request, e.g. x5t, that the AS can include int the self contained Access Token or in the introspection response. If client uses a certificate (x509) as client credentials towards the AS when requesting the token the AS could use the client certificate directly in the token response instead of the client explicitly telling the AS what certificate it wants to be referred to in the Access Token. //Samuel On Sat, Mar 12, 2016 at 11:04 AM, Samuel Erdtman wrote: > Hi Jim, > > Sorry for not being more explicit about certificate type, the credential > types are more or less taken directly from CoAP ( > https://tools.ietf.org/html/rfc7252#section-9) i.e. the certificates > referred to are X509 certificates. > > //Samuel > > On Wed, Mar 2, 2016 at 9:38 PM, Jim Schaad wrote: > >> >> >> > -----Original Message----- >> > From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Hannes Tschofenig >> > Sent: Wednesday, March 02, 2016 10:07 AM >> > To: Ace@ietf.org >> > Subject: [Ace] Credential Options >> > >> > Hi all, >> > >> > in an attempt to progress the question >> arises >> > about solutions should be described in enough detail to have them >> > interoperable. >> > >> > There are three types of credentials specified: >> > >> > * PSK >> > * Raw Public Key >> > * Certificates >> >> If you say certificates, do you need to make an additional statement of >> what type of certificates we are dealing with? Are these the PKIX X.509 >> certificate or something akin to the automotive certificate that was >> presented in SAAG a couple of meetings ago? >> >> Jim >> >> > >> > With regard to asymmetric cryptography we settled with ECC and DTLS/TLS >> > profile document makes certain recommendations regarding the crypto. >> > >> > However, there is still the question about what is >> mandatory-to-implement and >> > what should be described in the WG document. >> > >> > What should be mandatory to implement: >> > >> > * Option 1: Nothing >> > * Option 2: PSK, RPK, Certificates >> > * Option 3: PSK >> > * Option 4: RPK >> > * Option 5: Certificates >> > >> > Which of the three should be described in the document? (Obviously the >> MTI >> > versions but also others or should they be covered in separate >> > documents?) >> > >> > Here are the slides from the ACE virtual interim meeting providing >> further >> > background information: >> > https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides- >> > interim-2016-ace-1-3.pdf >> > >> > Deadline: 16th March 2016 >> > >> > Ciao >> > Hannes & Kepeng >> >> >> _______________________________________________ >> Ace mailing list >> Ace@ietf.org >> https://www.ietf.org/mailman/listinfo/ace >> > > --001a11430efe622557052dd73bc1 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi All

A further note on certificate us= age

The current version of the draft adds the= possibility for the AS to return x5c, x5t, or x5t#S256 (defined in https://tools.ietf.org/html/rfc751= 5) in the token response to indicate what server certificate to expect = from the resource server when connecting. There is however currently not te= xt about how to bind a client certificate to a token.
If we want = to include certificates as one of the credential types that we define in th= is document we could do this by adding a parameter to the token request, e.= g. x5t, that the AS can include int the self contained Access Token or in t= he introspection response. If client uses a certificate (x509) as client cr= edentials towards the AS when requesting the token the AS could use the cli= ent certificate directly in the token response instead of the client explic= itly telling the AS what certificate it wants to be referred to in the Acce= ss Token.

//Samuel


On Sat, Mar 12, = 2016 at 11:04 AM, Samuel Erdtman <samuel@erdtman.se> wrote:<= br>
Hi Jim,
<= br>
Sorry for not being more explicit about certificate type, the= credential types are more or less taken directly from CoAP (https://tools= .ietf.org/html/rfc7252#section-9) i.e. the certificates referred to are= X509 certificates.

//Samuel

O= n Wed, Mar 2, 2016 at 9:38 PM, Jim Schaad <ietf@augustcellars.com= > wrote:


> -----Original Message-----
> From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Hannes Tschofenig
> Sent: Wednesday, March 02, 2016 10:07 AM
> To: Ace@ietf.org=
> Subject: [Ace] Credential Options
>
> Hi all,
>
> in an attempt to progress <draft-ietf-ace-oauth-authz> the quest= ion arises
> about solutions should be described in enough detail to have them
> interoperable.
>
> There are three types of credentials specified:
>
> * PSK
> * Raw Public Key
> * Certificates

If you say certificates, do you need to make an additional statement= of what type of certificates we are dealing with?=C2=A0 Are these the PKIX= X.509 certificate or something akin to the automotive certificate that was= presented in SAAG a couple of meetings ago?

Jim

>
> With regard to asymmetric cryptography we settled with ECC and DTLS/TL= S
> profile document makes certain recommendations regarding the crypto. >
> However, there is still the question about what is mandatory-to-implem= ent and
> what should be described in the WG document.
>
> What should be mandatory to implement:
>
> * Option 1: Nothing
> * Option 2: PSK, RPK, Certificates
> * Option 3: PSK
> * Option 4: RPK
> * Option 5: Certificates
>
> Which of the three should be described in the document? (Obviously the= MTI
> versions but also others or should they be covered in separate
> documents?)
>
> Here are the slides from the ACE virtual interim meeting providing fur= ther
> background information:
> https://www.ietf.org/proc= eedings/interim/2016/03/02/ace/slides/slides-
> interim-2016-ace-1-3.pdf
>
> Deadline: 16th March 2016
>
> Ciao
> Hannes & Kepeng


_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace


--001a11430efe622557052dd73bc1-- From nobody Sun Mar 13 08:15:51 2016 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id BAB1212DE3B; Fri, 11 Mar 2016 15:05:36 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , X-Test-IDTracker: no X-IETF-IDTracker: 6.16.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160311230536.15028.85109.idtracker@ietfa.amsl.com> Date: Fri, 11 Mar 2016 15:05:36 -0800 Archived-At: X-Mailman-Approved-At: Sun, 13 Mar 2016 08:15:50 -0700 Cc: Kathleen.Moriarty.ietf@gmail.com, ace@ietf.org Subject: [Ace] ace - Requested session has been scheduled for IETF 95 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Mar 2016 23:05:39 -0000 Dear Kepeng Li, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. ace Session 1 (2:30:00) Monday, Morning Session I 1000-1230 Room Name: Atlantico C size: 225 --------------------------------------------- Request Information: --------------------------------------------------------- Working Group Name: Authentication and Authorization for Constrained Environments Area Name: Security Area Session Requester: Kepeng Li Number of Sessions: 1 Length of Session(s): 2.5 Hours Number of Attendees: 100 Conflicts to Avoid: First Priority: core dice cose oauth saag lwig Special Requests: Avoid entire SEC areas. Please arrange early in the week, because one co-chair and some participants plan to leave early. --------------------------------------------------------- From nobody Mon Mar 14 01:54:54 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DDCBE12D8EE for ; Mon, 14 Mar 2016 01:54:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sics-se.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 02HXa4suVhsA for ; Mon, 14 Mar 2016 01:54:51 -0700 (PDT) Received: from mail-lb0-x231.google.com (mail-lb0-x231.google.com [IPv6:2a00:1450:4010:c04::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F332E12D510 for ; Mon, 14 Mar 2016 01:54:50 -0700 (PDT) Received: by mail-lb0-x231.google.com with SMTP id bc4so229181965lbc.2 for ; Mon, 14 Mar 2016 01:54:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics-se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to:content-transfer-encoding; bh=rbLfzpv++GUEzQ01r6vvKy3+QnGo2vhmYWs3oXpNMag=; b=j7eG5d3qG7ju5ThDKAOgcEMG8NIXkq6BjT/eGyCCg9ZA/GCj9Hoh104PaN43Y5964Y 53KOQ4SQtDNxBevd0XnhlPswLttSSR37aCioUVdx7kgHGQZRlZ+t7CqQ6vGlC+HolQMi MJwlgCEmN+izgzWh6WZotOnidNFi1w8RbSz1TXvLb8g5CBLxijBmHJy+lNEZvR0QDOyE OcCv8+o0w5fgnJGRSEmQm+WIHL9/IaZiQ5ec+Aj3yYP+hIKLENcyK38XszIMzido0+eR bGQLGANNooar+6t1GEGckl2TkFeBd8C41tlhIeckiORHs0uY+ia/T4hHaYGrIGxu8VAC JghQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=rbLfzpv++GUEzQ01r6vvKy3+QnGo2vhmYWs3oXpNMag=; b=KnGC8FA9kIMtPxHAgcfUJKr6q/lrt88KYX0E+E+bh6QlV/Jm5me4eqXzcEViSGPdKt ReWf6LqVsKpbKkoxCjGA6/u3jWnDpnXQumV3MPyuhOUHzj7lCOAne4pdV6dQDfiJEp2K gYVBDSTgDSK9UUb7UoBh4ynKxNCE6ndUIjsyHFitfx629PZ6qunvw4rTV+Dnqnwr+v4f xNQVFFH0ouQv1l61E/eqFBCnM8mt2dzPD6daGo5ZCNa4+aMoyLURNbezOsFI8M56c18I wNh3XT6tqgwxEzR54HyYvQAH7+P/wzEA02uBykr1StXFmsAl6wdiMXq318mPIN+fOuO5 mqgA== X-Gm-Message-State: AD7BkJLJcbmPIse2WjH+PHGpo8GHUMrsOmhocgY610OeIzPBQqGd0ITcpGj8t5K50zP0pFuJ X-Received: by 10.25.43.20 with SMTP id r20mr7426477lfr.30.1457945689125; Mon, 14 Mar 2016 01:54:49 -0700 (PDT) Received: from [192.168.0.167] ([85.235.10.186]) by smtp.gmail.com with ESMTPSA id rh2sm3463472lbb.36.2016.03.14.01.54.48 for (version=TLSv1/SSLv3 cipher=OTHER); Mon, 14 Mar 2016 01:54:48 -0700 (PDT) To: ace@ietf.org References: <56D72BA7.1030003@gmx.net> <034f01d174c3$70541b60$50fc5220$@augustcellars.com> From: Ludwig Seitz Message-ID: <56E67C57.4050405@sics.se> Date: Mon, 14 Mar 2016 09:54:47 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [Ace] Credential Options X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Mar 2016 08:54:53 -0000 On 2016-03-12 11:08, Samuel Erdtman wrote: > Hi All > > A further note on certificate usage > > The current version of the draft adds the possibility for the AS to > return x5c, x5t, or x5t#S256 (defined in > https://tools.ietf.org/html/rfc7515) in the token response to indicate > what server certificate to expect from the resource server when > connecting. There is however currently not text about how to bind a > client certificate to a token. > If we want to include certificates as one of the credential types that > we define in this document we could do this by adding a parameter to the > token request, e.g. x5t, that the AS can include int the self contained > Access Token or in the introspection response. If client uses a > certificate (x509) as client credentials towards the AS when requesting > the token the AS could use the client certificate directly in the token > response instead of the client explicitly telling the AS what > certificate it wants to be referred to in the Access Token. > > //Samuel > I would still prefer it to be explicit, which kind of PoP key client is requesting. There could be instances where the client uses a cert to authenticate towards the AS, but wants/needs to use something else towards the RS. I will add some text to specify has to bind a cert to the token using x5t#S256. /Ludwig -- Ludwig Seitz, PhD SICS Swedish ICT AB Ideon Science Park Building Beta 2 Scheelevägen 17 SE-223 70 Lund Phone +46(0)70-349 92 51 http://www.sics.se From nobody Mon Mar 14 23:13:57 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 29B6012D8CF for ; Mon, 14 Mar 2016 23:13:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=erdtman-se.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Vm0KrQ-bkIAw for ; Mon, 14 Mar 2016 23:13:37 -0700 (PDT) Received: from mail-vk0-x231.google.com (mail-vk0-x231.google.com [IPv6:2607:f8b0:400c:c05::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7686612D8C8 for ; Mon, 14 Mar 2016 23:13:34 -0700 (PDT) Received: by mail-vk0-x231.google.com with SMTP id e185so8512181vkb.1 for ; Mon, 14 Mar 2016 23:13:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=erdtman-se.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=rV4htJukGjlGV1NiGxOO3rkmxoUKbKf5IDY+ndlaiks=; b=SocO6wsX6SJgJYVktu1rAiWq5bNu7/WtTxNscyjUgPew3EpA+jCNDQ/050Ivq98E6t A7oeA4/oRM0iW2YEvUXzkZky0kGQl8kHcmSn50FSoz0vSFKGnZC7nNRoGSGdEHBolACd JYYonph7pnlwDIi0Y4VVc06EpuKBgwl5xUsJF4y7myEUoLiBQK2xlETVzb9wc+f500rQ lMdSAOezESfqMchKPhiREsBMkNrok19tZlMGRAcgcLiAo2d3H8hcDF97/YBLGmisvzY3 1gfCKJJyuyGfHUdzQ1o6fjYHrW96AG0Zk6W6oDl+eF0YMqJ/azLcb6VegmfB/mZq0/g4 94kg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=rV4htJukGjlGV1NiGxOO3rkmxoUKbKf5IDY+ndlaiks=; b=cIeqLiswhn3gEAEWwNzbQAN070nDODr9J0r62WWpkaPRqEhUqK6vh2Yo6ewM7TKdK2 I/hzDtUXx2Z3D2nUrGFtwdfim5loEcd1utu3IUiVmQDPpQdJnwQ8ZU3xLifRtwe1bhWp up5B30m6nNWQpf3JPIsl3y/98+PuT4qWPtX7zCl3rLTbjRO07iFJ0gqETswa9uId16Lv Uxxx1v2CUysymHG87mz5Z8ZbEbMdC4nwldC2pjOeb5HPXtdOrDMx3r0aAvcFKKGCgsnJ psglb5whQ+YgsZwdOqXRzy9YYycz9TMoBNlrCpQRMDS7rvM2Ik0ifOiMm6nXE9wirvZG tAPg== X-Gm-Message-State: AD7BkJKeG67RS0hdbu6OfluwHmJahLqR/5+XPHIa6wBAY6OTd2gunFkVkJMOYJMb2bNLQR6TSJ3pAJvmlho5/w== MIME-Version: 1.0 X-Received: by 10.31.192.78 with SMTP id q75mr29441420vkf.96.1458022413423; Mon, 14 Mar 2016 23:13:33 -0700 (PDT) Received: by 10.159.37.42 with HTTP; Mon, 14 Mar 2016 23:13:33 -0700 (PDT) In-Reply-To: <56D72BA7.1030003@gmx.net> References: <56D72BA7.1030003@gmx.net> Date: Tue, 15 Mar 2016 07:13:33 +0100 Message-ID: From: Samuel Erdtman To: Hannes Tschofenig Content-Type: multipart/alternative; boundary=001a1143a0d006eaaa052e104cb4 Archived-At: Cc: "Ace@ietf.org" Subject: Re: [Ace] Credential Options X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Mar 2016 06:13:50 -0000 --001a1143a0d006eaaa052e104cb4 Content-Type: text/plain; charset=UTF-8 Hi, On the subject mandatory to implement, in the CoAP specification RawPublicKey is the one credential type that is mandatory to implement ( https://tools.ietf.org/html/rfc7252#section-9), maybe that could be enough here too. //Samuel On Wed, Mar 2, 2016 at 7:06 PM, Hannes Tschofenig wrote: > Hi all, > > in an attempt to progress the question > arises about solutions should be described in enough detail to have them > interoperable. > > There are three types of credentials specified: > > * PSK > * Raw Public Key > * Certificates > > With regard to asymmetric cryptography we settled with ECC and DTLS/TLS > profile document makes certain recommendations regarding the crypto. > > However, there is still the question about what is > mandatory-to-implement and what should be described in the WG document. > > What should be mandatory to implement: > > * Option 1: Nothing > * Option 2: PSK, RPK, Certificates > * Option 3: PSK > * Option 4: RPK > * Option 5: Certificates > > Which of the three should be described in the document? (Obviously the > MTI versions but also others or should they be covered in separate > documents?) > > Here are the slides from the ACE virtual interim meeting providing > further background information: > > https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-interim-2016-ace-1-3.pdf > > Deadline: 16th March 2016 > > Ciao > Hannes & Kepeng > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > > --001a1143a0d006eaaa052e104cb4 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi,

On the subject mandatory to impleme= nt, in the CoAP specification=C2=A0RawPublicKey=C2=A0is the one credential type that is ma= ndatory to implement=C2=A0(https://tools.ietf.org/html/rfc7252#section-9), maybe that co= uld be enough here too.

//Samuel

On Wed, Mar 2, 2016 at = 7:06 PM, Hannes Tschofenig <hannes.tschofenig@gmx.net> wrote:
Hi all,

in an attempt to progress <draft-ietf-ace-oauth-authz> the question arises about solutions should be described in enough detail to have them interoperable.

There are three types of credentials specified:

* PSK
* Raw Public Key
* Certificates

With regard to asymmetric cryptography we settled with ECC and DTLS/TLS
profile document makes certain recommendations regarding the crypto.

However, there is still the question about what is
mandatory-to-implement and what should be described in the WG document.

What should be mandatory to implement:

* Option 1: Nothing
* Option 2: PSK, RPK, Certificates
* Option 3: PSK
* Option 4: RPK
* Option 5: Certificates

Which of the three should be described in the document? (Obviously the
MTI versions but also others or should they be covered in separate
documents?)

Here are the slides from the ACE virtual interim meeting providing
further background information:
https:= //www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-interim-201= 6-ace-1-3.pdf

Deadline: 16th March 2016

Ciao
Hannes & Kepeng


_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace


--001a1143a0d006eaaa052e104cb4-- From nobody Tue Mar 15 16:53:42 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 32BC312DEA5 for ; Tue, 15 Mar 2016 16:53:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pGLoZ_Jai1lr for ; Tue, 15 Mar 2016 16:53:40 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1A45012DE9B for ; Tue, 15 Mar 2016 16:53:40 -0700 (PDT) Received: from sandelman.ca (obiwan.sandelman.ca [209.87.249.21]) by tuna.sandelman.ca (Postfix) with ESMTP id A23DE200A7 for ; Tue, 15 Mar 2016 19:55:55 -0400 (EDT) Received: from obiwan.sandelman.ca (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id A6E4663755 for ; Tue, 15 Mar 2016 19:53:38 -0400 (EDT) From: Michael Richardson To: ace@ietf.org X-Attribution: mcr X-Mailer: MH-E 8.6; nmh 1.6+dev; GNU Emacs 24.4.2 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: [Ace] some minor comments/suggestions on draft-ietf-ace-actors-03 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Mar 2016 23:53:42 -0000 --=-=-= Content-Type: text/plain I read -03 this weekend. I think that the document begins very well, but we have a lot of work to do in sections 7/8/9. I start with some detailed suggestions, and then I kind of get bogged down in what to do with the later parts. ===== s/This is particularly applicable to siloed, fixed-purpose deployments./ This is particularly applicable to siloed, fixed-purpose deployments, and is not the subject of this document./ Editorial nit: I think the word "However, " doesn't belong in next paragraph. add to: In order to meet the security requirements in constrained scenarios, the necessary tasks need to be assigned to logical functional entities. .. which is the subject of this document. 1.1 the list of terms is not alphabetical, but is presented in order of sensible intruction, which I think is *correct*. I think that the fact that they aren't alphabetically should be noted. ..this document usees the following terminology; in order of importance: Maybe "importance" is not the correct term. Principal: move the () to the end of the definition: Principal: An individual that is either RqP or RO or both. (Used in its English sense here) btw: what is the alternative sense? Does it have a German meaning I'm missing? 2. in the four points, I suggest one additional point: o the relationship between C/CAS and RS/AS is pre-established, but is out of scope. 2.1: Change o Objectives of type 2: C is exchanging information with (sending a request to, accepting a response from) a resource only where it can ascertain that RqP has authorized the exchange with R. to: o Objectives of type 2: C is exchanging information with (sending a request to, accepting a response from) a resource only where R can ascertain that RqP has authorized the exchange with R. with the (), a person reading might have difficulty linking "it" to C or R. Change: (Section 6.2). (Again, both CAS and AS are conceptual entities controlled by their respective principals. Many of these entities, often acting for different principals, can be combined into a single server implementation; this of course requires proper segregation of the control information provided by each principal.) to: (Section 6.2). Both CAS and AS are conceptual entities: roles. They are controlled by their respective principals. A multitude of CAS and AS roles may be be combined into a single server implementation using segregation of control information provided by each principal. I think it's important enough to remove the (). Change: Note also that not all entities need to be ready to communicate at any point in time; for instance, RqP may have provided enough information to CAS that CAS can autonomously negotiate access to RS with AS for C based on this information. to: Note also that not all communications are concurrent or simultaenous; for instance, RqP may have provided enough information to CAS during provisioning that permits the CAS to autonomously negotiate access to RS with AS for C based on this information. Thank you for including 2.2, architecture variants. I wonder if it would be worth specific references here to Bananas for Munich? I think it might also be worth this because in some flows of that use case, RqP = RO, and sometimes not, and these two situations occur in the same system. I'm concerned that someone might read 2.2 and think that they have to pick *one* of those variants, instead of realizing that they have to support all roles in some place in their system. I think that 2.3 makes this pretty clear, but maybe the first paragraph of 2.3 could be more authoritative? i.e. we standarized flows and messages, not devices :-) The interaction with the nodes on the principal level, RO and RqP, is not involving constrained nodes and therefore can employ an existing mechanism. Would an example or reference be useful here? The message flow may pass unprotected paths and thus need to be protected, potentially beyond a single REST hop (Section 3.1): I think that I know what you mean, but I don't like the wording. o We assume that the necessary keys/credentials for protecting the control information between the potentially constrained nodes and their associated less-constrained nodes are pre-established, for example as part of the commissioning procedure. Yes. I wonder if there is a difference between *provisioning* and *commissioning*, or if these just two words for the same thing, and if so, if we (the IETF) should pick one? o Any necessary keys/credentials for protecting the interaction between the potentially constrained nodes will need to be established and maintained as part of a solution. Yes, but is this part of it in scope, or is it part of provisioning? Or to put it differently, is really part of the previous point? 3.1: change: As another example, resource representations sent between endpoints may be stored in intermediary nodes, such as caching proxies or pub- sub brokers. to: As another example, in order to provide for availability of authorization data even when disconnected, resource representations sent between endpoints may be stored or cached in intermediary nodes, proxies or pub-sub brokers. change: o To comply with requirements of transparency, a gateway may be allowed to read, verify (authenticity) but not modify (integrity) a resource representation which therefore also is end-to-end integrity protected from the server towards a client behind the gateway. to: o To comply with audit requirements, a gateway may be allowed to read, and verify the authenticity of a message, but not modify it. The message must be end-to-end integrity protected (server to client). The ability to verify mid-way but not change implies that asymmetric methods must be supported. section 4, says: Client-side authorization solutions aim at protecting the client from disclosing information to or ingesting information from resource servers RqP does not want it to interact with in the given way. Again, flat authorization (the server can be authenticated) may be sufficient, or more fine-grained authorization may be required. The client-side authorization also pertains to the level of protection required for the exchanges with the server (e.g., confidentiality). In the browser web, client-side authorization is often left to the human user; a constrained client may not have that available all the time but still needs to implement the wishes of the principal controlling it, the RqP. This paragraph is very hard to parse. I think that it should read perhaps read: A client has a diversity of types of information, some of which may be required to make authorization decisions, and some of which may be unnecessary. A client should not divulge more information than the RqP authorizes, and in some cases should not interact at all with a particular Authorization Server at all. In the browser web, client-side authorization is often left to the human user; a constrained client may not have that available all the time but still needs to implement the wishes of the principal controlling it, the RqP. Flat authorization (that is, the server only needs to be authenticated) may be sufficient. In other cases, more fine-grained authorization may be required in order for the client to realize that it is authorized to communicate with the RS. {I think that an example of a client that needs to authorize who is talks to would be a heat/occupancy sensor that is supposed to control the lights. A light bulb would want to subscribe to updates from the switch, but the house owner would not want their neighbour's light bulb to subscribe to updates} Maybe this section would work better if it covered integrity, authentication, authorization seperately. Explaining how clients, resource servers might need each of those services... I suggest that: Note that actors are a concept to understand the security requirements for constrained devices. The architecture of an actual solution might differ as long as the security requirements that derive from the relationship between the identified actors are considered. belongs somewhere in the introduction. Given section 5, I wonder if section 4 is even necessary. Section 5 needs some more work, but I'm not sure how yet. Shouldn't 6.1 mention JOSE/COSE? I didn't get the point of section 6. Section 7.2: can we link the "in other use cases" to the actual use cases in 7744? Section 7.3: is a good discussion, how will we work through the alternatives? Section 8: hard to comment. Section 9: security considerations. Section 9.1: issue should be: 0, steal the device. probably the most important concern is the ability to rapidly de-authorize a device, and further, to be able to determine if "this is the droid you are looking for" 9.2: I suggest that instead of listing might, might, etc. that we list in *security considerations* the specific attacks that are excluded by various kinds of access to clocks. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEVAwUBVuigf4CLcPvd0N1lAQJZLggAvHOIyeaBGuzz1Uqqqs9NyAJOYoWDuDR8 GErEyB4y+IXHK+v6Q35GkngiDaaDmgKYgFc0WR0YTKgvV7VGkPsXEM8M1DcHnvqz MXqgcpiImNPwujX3kxVx7scGYLDQvjWOIF3fxHNBOsLZLEQABqQflrtsdBeYYMdn LyH1KskozbIYWNxW8HRLVhp+2/dfGWhc6SoeL/OsWBzliW/7X4IoyBEpS1PXq8qj pcvhgpII0ggHQmTGOs5uJm2WqHtX/Arj6L7Z72aaDUidU9VZoOzigat+/+L9SOTX 3nxVBuh4lx/kdR0XNoeYV3A0JSM/SbVCysCMDSzlMwhcWgVAj1Ti5A== =gy79 -----END PGP SIGNATURE----- --=-=-=-- From nobody Wed Mar 16 06:29:04 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AAE5412D911 for ; Wed, 16 Mar 2016 06:29:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=wahlstromstekniska-se.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kNR11Ore_Fwa for ; Wed, 16 Mar 2016 06:29:00 -0700 (PDT) Received: from mail-lf0-x22c.google.com (mail-lf0-x22c.google.com [IPv6:2a00:1450:4010:c07::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BC7BA12D596 for ; Wed, 16 Mar 2016 06:28:59 -0700 (PDT) Received: by mail-lf0-x22c.google.com with SMTP id e138so18482427lfe.1 for ; Wed, 16 Mar 2016 06:28:59 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=wahlstromstekniska-se.20150623.gappssmtp.com; s=20150623; h=from:to:cc:references:in-reply-to:subject:date:message-id :mime-version:thread-index:content-language; bh=bwspX+zyZN2ZkVCjRDRXMCxiS1X/pDDKT+uSy/xcRgo=; b=SlaDwz8hRHGrdc+/hgP+oj1k2j9SPx/ZkC3pT6ZaBh3naYTsTqFZh1QwvtUupxjV/U OT+3wZqSLF1uWR8b5GXcnlDCoke+RFEMxXJEQdb2G+nxkaLtZVQ6Qpx//9ajbA22BHPO SYCo/dPEQnCtTFPWzbFHbwVB0zRLamJFZiVMTK6BWxJrveB7r1xzH78CVBJ4kO34P6qh kF5JZ/jV9x1ESQSO3NX9bHTFFTVjR3uOhJFGneaVIhQsuFw2XMPDfQ014HrYOilWhx6l ehhLemLr5ZNglZvJ/QWBUb6NUdakxdL7YWZnXfnjEXNIJyrkvqN6X1pu0f34Ro8FBM5e JLQA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:references:in-reply-to:subject:date :message-id:mime-version:thread-index:content-language; bh=bwspX+zyZN2ZkVCjRDRXMCxiS1X/pDDKT+uSy/xcRgo=; b=Qw/IJZPym96RriBcKN+EWVxOpaRgpls//eVGH++3Gic3bsJtwrfFdLRAXQnGaEaW2q riIS+MQmuS196De30E8XPqDJsr6FKoB4W3T3ReQUM3VG4f9UKrsmtW4kbBCgZoCtL7lY kgINc5tDHPvTNzLJygFybYqnafcbv8EV+ec0JWqkVwQpP567xYSijTun9/sxgy3LVrEW dMIbUMm406gK6IYAyWavf6z/TxNQxCvtqNpOs2dthm3pizqIyX6fxL9zq+Hqgbi5seSQ 7Ykuce0NSjfMMr3xryD2SFonKgxvPZvJsLqLz6wCiNfE158MFrdHF/gQGl75XCIU0ITj BfyQ== X-Gm-Message-State: AD7BkJJ11U8AB9eYbwJPKXhq0bbX7MiIV5yNHCSlXy3/Ewm/FtqTJNPGK0nmNUq/r55FUA== X-Received: by 10.25.157.79 with SMTP id g76mr1522042lfe.93.1458134937372; Wed, 16 Mar 2016 06:28:57 -0700 (PDT) Received: from WAHLEM10249E64 (c-5eeaaab1-74736162.cust.telenor.se. [94.234.170.177]) by smtp.googlemail.com with ESMTPSA id rp10sm553801lbb.13.2016.03.16.06.28.55 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Wed, 16 Mar 2016 06:28:56 -0700 (PDT) From: "=?utf-8?Q?Erik_Wahlstr=C3=B6m?=" X-Google-Original-From: =?utf-8?Q?Erik_Wahlstr=C3=B6m?= To: "'Samuel Erdtman'" , "'Hannes Tschofenig'" References: <56D72BA7.1030003@gmx.net> In-Reply-To: Date: Wed, 16 Mar 2016 13:28:55 -0000 Message-ID: <006101d17f87$ca56be50$5f043af0$@wahlstromstekniska.se> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0062_01D17F87.CA57A8B0" X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQJv+fno2TeTjCYDcMM/3wdFGmH34AGhrw97nhH9fMA= Content-Language: sv Archived-At: Cc: Ace@ietf.org Subject: Re: [Ace] Credential Options X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Mar 2016 13:29:03 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0062_01D17F87.CA57A8B0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable As I mentioned before. I don=E2=80=99t think any method should be MTI. = They all have different security properties and forcing a constrained = device to support a method it does not attend to use is just not the = right thing to do. So, feeling strongly about Option1: nothing. On the other hand I think = all three should be specified in the core framework. / Erik =20 From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Samuel Erdtman Sent: den 15 mars 2016 06:14 To: Hannes Tschofenig Cc: Ace@ietf.org Subject: Re: [Ace] Credential Options =20 Hi, =20 On the subject mandatory to implement, in the CoAP specification = RawPublicKey is the one credential type that is mandatory to implement = (https://tools.ietf.org/html/rfc7252#section-9), maybe that could be = enough here too. =20 //Samuel =20 On Wed, Mar 2, 2016 at 7:06 PM, Hannes Tschofenig = > wrote: Hi all, in an attempt to progress the question arises about solutions should be described in enough detail to have them interoperable. There are three types of credentials specified: * PSK * Raw Public Key * Certificates With regard to asymmetric cryptography we settled with ECC and DTLS/TLS profile document makes certain recommendations regarding the crypto. However, there is still the question about what is mandatory-to-implement and what should be described in the WG document. What should be mandatory to implement: * Option 1: Nothing * Option 2: PSK, RPK, Certificates * Option 3: PSK * Option 4: RPK * Option 5: Certificates Which of the three should be described in the document? (Obviously the MTI versions but also others or should they be covered in separate documents?) Here are the slides from the ACE virtual interim meeting providing further background information: https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-int= erim-2016-ace-1-3.pdf Deadline: 16th March 2016 Ciao Hannes & Kepeng _______________________________________________ Ace mailing list Ace@ietf.org =20 https://www.ietf.org/mailman/listinfo/ace =20 ------=_NextPart_000_0062_01D17F87.CA57A8B0 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

As I mentioned before. I don=E2=80=99t think = any method should be MTI. They all have different security properties = and forcing a constrained device to support a method it does not attend = to use is just not the right thing to do.

So, feeling strongly about Option1: nothing. = On the other hand I think all three should be specified in the core = framework.

/ Erik

 

From:<= /b> Ace = [mailto:ace-bounces@ietf.org] On Behalf Of Samuel = Erdtman
Sent: den 15 mars 2016 06:14
To: Hannes = Tschofenig <hannes.tschofenig@gmx.net>
Cc: = Ace@ietf.org
Subject: Re: [Ace] Credential = Options

 

Hi,

 

On the subject mandatory to implement, in the CoAP = specification RawPublicKey is the = one credential type that is mandatory to implement (https://tools.ietf= .org/html/rfc7252#section-9), maybe that could be enough here = too.

 

//Samuel

 

On Wed, = Mar 2, 2016 at 7:06 PM, Hannes Tschofenig <hannes.tschofenig@gmx.net> = wrote:

Hi all,

in an attempt to progress = <draft-ietf-ace-oauth-authz> the question
arises about = solutions should be described in enough detail to have = them
interoperable.

There are three types of credentials = specified:

* PSK
* Raw Public Key
* = Certificates

With regard to asymmetric cryptography we settled = with ECC and DTLS/TLS
profile document makes certain recommendations = regarding the crypto.

However, there is still the question about = what is
mandatory-to-implement and what should be described in the WG = document.

What should be mandatory to implement:

* Option = 1: Nothing
* Option 2: PSK, RPK, Certificates
* Option 3: PSK
* = Option 4: RPK
* Option 5: Certificates

Which of the three = should be described in the document? (Obviously the
MTI versions but = also others or should they be covered in = separate
documents?)

Here are the slides from the ACE virtual = interim meeting providing
further background information:
https://www.ietf.org/proceedings/interim/2016/03/02/ace= /slides/slides-interim-2016-ace-1-3.pdf

Deadline: 16th March = 2016

Ciao
Hannes & = Kepeng


_______________________________________________
Ace = mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace

 

------=_NextPart_000_0062_01D17F87.CA57A8B0-- From nobody Thu Mar 17 07:43:54 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 08D4712D947 for ; Thu, 17 Mar 2016 07:43:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.69 X-Spam-Level: X-Spam-Status: No, score=-2.69 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_FREEMAIL_DOC_PDF=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kiwTKk3O5ZmN for ; Thu, 17 Mar 2016 07:43:44 -0700 (PDT) Received: from mail-qk0-x235.google.com (mail-qk0-x235.google.com [IPv6:2607:f8b0:400d:c09::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 646C012D665 for ; Thu, 17 Mar 2016 07:43:37 -0700 (PDT) Received: by mail-qk0-x235.google.com with SMTP id s68so36003257qkh.3 for ; Thu, 17 Mar 2016 07:43:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=DIIFV9hCe7FxE5ZSIe7fR2qBz4WRyrs1WFgIp7FlDmo=; b=JWClpt0eht7qvf0z52D6PKJ/uaHSRWt9tanOgVtsLSBL0V+uUwnzqDPU61vfDX6+/R L7op6mfStcN6wyJtgrsX9agnk5lGIka/wJZfEJ+D+iTLUyzH5tmBNd3LS+TisddJTxG5 TN7Tc12wLqdlnsKkK+6A+nyeFCkBznSaLnH01dpuh2Uxr5fAKVill4YtlMvnRIUM7UZ+ +BVk0Hc+sq1Vh0lo8JqO3r4LGR9KFPhfSrVI0NQf+RrYg51BG6dOKZNWpZ/Qar5qFo2j LJJ050pRn1RCSCGUtl63tdhzwz4gNz8AV7Tfe1Yb6U4PweL5UU48VxG+AZCEajj9/hHe X0/Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=DIIFV9hCe7FxE5ZSIe7fR2qBz4WRyrs1WFgIp7FlDmo=; b=O6BUKW6ffEVrtbGCOsP4Qhk/ilGyj7HVxH7gnRfLLuy+Xts7EW2IgrnSH3nVZ/5heu pot3iTf1lrD12dJKd1wc0Tf1zZGobetEo68uDhbJ9ya1Q7OKdlpH29QdQV0Jis/JTFVT 9dUDcggSVZohN9sPLP93zXFDPwx7PD+UimM32NARIrwd74x647riG0eZgciShq3AyHZT 6zWiy5tRO4YIasCeYerbhX/8dLwRpWhD3qp43OGLSjqOegQ/yYjUWuMI/NnVE60S3LW3 6Z/hyLCFsKI51O8yd52wfMzt8atutvVZfNMUlBqEnPJuISIHxi5JToDr+5Yke0bzpqZ2 cUcA== X-Gm-Message-State: AD7BkJJmZO2B3kKUlKumkddT2WyZRIAuL103Cv8dAP5yCCb5QtxZGoSvDxMtRABbt74qOUTXKG6JMYBv93jT+g== X-Received: by 10.55.75.212 with SMTP id y203mr15187965qka.3.1458225816419; Thu, 17 Mar 2016 07:43:36 -0700 (PDT) MIME-Version: 1.0 Received: by 10.55.148.198 with HTTP; Thu, 17 Mar 2016 07:43:16 -0700 (PDT) In-Reply-To: <56E07CFB.7000309@tzi.org> References: <56D728AD.7050109@gmx.net> <32050.1457549983@obiwan.sandelman.ca> <56E07CFB.7000309@tzi.org> From: Renzo Navas Date: Thu, 17 Mar 2016 15:43:16 +0100 Message-ID: To: "Ace@ietf.org" Content-Type: multipart/mixed; boundary=001a114a980cca7941052e3fa714 Archived-At: Subject: Re: [Ace] RS Synchronized Time X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Mar 2016 14:43:52 -0000 --001a114a980cca7941052e3fa714 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi All, I have mapped some nonce-based three party authenticated key establishment protocols for a REST/OAuth-like Scenario. I focused on the flows of messages, and not on the crypto content. The messages/protocols do have any timestamp and the nodes do not need to have absolute time (wall clock) awareness. In the literature is known that timestamp based authkey protocols have a theoretical lower bound (of nr of messages exchanged) of one less message that nonce-based solutions. In the REST mappings I present here the Req/Response model always introduce an overhead of at least one message. Some fine-tunning can be done (for not having let's call it "REST overhead") but I have not dealt with that. I did the mapping on the like of the last slide from the last's ACE interim meeting ( https://www.ietf.org/proceedings/interim/2016/03/02/ace/slides/slides-inter= im-2016-ace-1-5.pdf ) -appropiate acknoledgment, thank you!- , but not adding so much REST detail. At the end of the document there is a r=C3=A9sum=C3=A9 of the nr (and type = of) messages each entity will have to send or receive. On a first look, I see that some protocols are too burdensome for a constrained REST-like implementation (e.g: "Yahalom"), burdersome for me is too much messages that will consume energy mostly for the Constrained RS. But others seems to map well (there are two rest-variations for each auth key protocol), like "Otway-Rees/BBF (A=3DRS)"; "3PKD" (both variations) and "Boyd (A=3DC)". I do not deal with the Crypto content (quantity of encryption/decryption or MAC operations. but on these kind of protocols there are only three cryptoprimiotives encryption, decryption and mac calculation operations). BUT a security aspect (VERY important) not mentioned is that not all protocols have a formal proof of security; Notably 3PKD ( a modified version by Kim-Kwang Raymond Choo) have been proven provably secure on the CK (Canetti-Krawczyk) 2001 Model (the strongest). Boyd and Yahalom has been proven secure on the Bellare-Rogway 93' model (weaker than CK2001). I may be put more effort on actually mapping one of these solution for a OAuth-PoP profile document. Another idea to add flexibility (without putting burden on the RS) If C first contacts the AS, he can learn which PoP-token the RS supports. Regards to all, and I hope that this is on the interest of anyone, I am open to discussion Have a good Thursday, Renzo --001a114a980cca7941052e3fa714 Content-Type: application/pdf; name="3PartyNonceBasedAKE-ForOAuthPoP.pdf" Content-Disposition: attachment; filename="3PartyNonceBasedAKE-ForOAuthPoP.pdf" Content-Transfer-Encoding: base64 X-Attachment-Id: f_ilwc3i840 JVBERi0xLjUNCiW1tbW1DQoxIDAgb2JqDQo8PC9UeXBlL0NhdGFsb2cvUGFnZXMgMiAwIFIvTGFu Zyhlbi1VUykgL1N0cnVjdFRyZWVSb290IDczIDAgUi9NYXJrSW5mbzw8L01hcmtlZCB0cnVlPj4+ Pg0KZW5kb2JqDQoyIDAgb2JqDQo8PC9UeXBlL1BhZ2VzL0NvdW50IDE1L0tpZHNbIDMgMCBSIDgg MCBSIDEwIDAgUiAxNyAwIFIgMTkgMCBSIDMzIDAgUiAzNSAwIFIgMzcgMCBSIDM5IDAgUiA0MSAw IFIgNDMgMCBSIDQ1IDAgUiA0NyAwIFIgNDkgMCBSIDUxIDAgUl0gPj4NCmVuZG9iag0KMyAwIG9i ag0KPDwvVHlwZS9QYWdlL1BhcmVudCAyIDAgUi9SZXNvdXJjZXM8PC9FeHRHU3RhdGU8PC9HUzUg NSAwIFI+Pi9Gb250PDwvRjEgNiAwIFI+Pi9Qcm9jU2V0Wy9QREYvVGV4dC9JbWFnZUIvSW1hZ2VD L0ltYWdlSV0gPj4vTWVkaWFCb3hbIDAgMCA3MjAgNTQwXSAvQ29udGVudHMgNCAwIFIvR3JvdXA8 PC9UeXBlL0dyb3VwL1MvVHJhbnNwYXJlbmN5L0NTL0RldmljZVJHQj4+L1RhYnMvUy9TdHJ1Y3RQ YXJlbnRzIDA+Pg0KZW5kb2JqDQo0IDAgb2JqDQo8PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3Ro IDUyMT4+DQpzdHJlYW0NCnicjVPLbtswELwL0D/skQxgmsuXSCAI0Dh20IdbJzbQg9GD4soP1JFS Wznk70OpeYhOafhC8DA7s7uzA/0JnJ/3x4PPV8AvLuDyagB/04QDZ5xzFIJnkAkOWnHYFWny8wzK NOlfTzWs9mmCsHoDc26QqwC9PEuTmzSB4XgA0FHC/re8XAFZ7nqjW/oieznzxCME6ZizCmbLht5z AwKiZCoDqSyzDmb3jWYrfJ0mczLOHx425Yr+gtmXNBl6mobqtVbojFnTrZ0TiGGN+YD9XpWLIoKX GTKjQnwvhrWSWRti7/J98TuCV5YzI07rW1nHdAiVEajmjmX2tJa1EIwftDChQpB8Vz9Fagw3TMvj bb+6bAKTnfAeezXO3ys/PdbrgvYEKakl9WZBHcmbH0Uk0c1JIZk+IIptTkrB0ITYrxQtKaghT0Al Ge4bsVYxv9tu9uv7oqTISR2b6uB2hVUMlT9D0ZzWyxJ3FDNS1dQ/Cz9Ptd13yD7ERXQS8ma51Mwe 0MIxEnk0c97ow8j5k3Ig/GKk/Bc572vWxq79tNEbUZSk2kEOt8NmKVO/tVk8Xcic6lLOyY+myrtM NVnHLFKambAq6qaWzRwBdkLRkWoSSw73V2fDilgcFAomRYit2wX8oVIRfxaxdOomcidNoFzrZ4Cd VtvHelOVx9xV/zkR40kUxnVbkmcbCTWSDQplbmRzdHJlYW0NCmVuZG9iag0KNSAwIG9iag0KPDwv VHlwZS9FeHRHU3RhdGUvQk0vTm9ybWFsL2NhIDE+Pg0KZW5kb2JqDQo2IDAgb2JqDQo8PC9UeXBl L0ZvbnQvU3VidHlwZS9UcnVlVHlwZS9OYW1lL0YxL0Jhc2VGb250L0FCQ0RFRStDYWxpYnJpL0Vu Y29kaW5nL1dpbkFuc2lFbmNvZGluZy9Gb250RGVzY3JpcHRvciA3IDAgUi9GaXJzdENoYXIgMzIv TGFzdENoYXIgMTg3L1dpZHRocyA4MjYgMCBSPj4NCmVuZG9iag0KNyAwIG9iag0KPDwvVHlwZS9G b250RGVzY3JpcHRvci9Gb250TmFtZS9BQkNERUUrQ2FsaWJyaS9GbGFncyAzMi9JdGFsaWNBbmds ZSAwL0FzY2VudCA3NTAvRGVzY2VudCAtMjUwL0NhcEhlaWdodCA3NTAvQXZnV2lkdGggNTIxL01h eFdpZHRoIDE3NDMvRm9udFdlaWdodCA0MDAvWEhlaWdodCAyNTAvU3RlbVYgNTIvRm9udEJCb3hb IC01MDMgLTI1MCAxMjQwIDc1MF0gL0ZvbnRGaWxlMiA4MjQgMCBSPj4NCmVuZG9iag0KOCAwIG9i ag0KPDwvVHlwZS9QYWdlL1BhcmVudCAyIDAgUi9SZXNvdXJjZXM8PC9FeHRHU3RhdGU8PC9HUzUg NSAwIFI+Pi9Gb250PDwvRjEgNiAwIFI+Pi9Qcm9jU2V0Wy9QREYvVGV4dC9JbWFnZUIvSW1hZ2VD L0ltYWdlSV0gPj4vTWVkaWFCb3hbIDAgMCA3MjAgNTQwXSAvQ29udGVudHMgOSAwIFIvR3JvdXA8 PC9UeXBlL0dyb3VwL1MvVHJhbnNwYXJlbmN5L0NTL0RldmljZVJHQj4+L1RhYnMvUy9TdHJ1Y3RQ YXJlbnRzIDE+Pg0KZW5kb2JqDQo5IDAgb2JqDQo8PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3Ro IDUxOTU+Pg0Kc3RyZWFtDQp4nN1cS48cOY6+F+D/EMfMBhwOvSVgMEC7H4PZ3tntnTGwWLT3UF1d fuxmuWbKbgz875cfSWVIkRGZZe/JPrS7yJAoikFJ/EhlDM9+Hv7wh2d/+e7P3w/TH/84PP/+u+Ef T66mYRqnaTLWTmlIdhqCn4aH2ydX//nN8O7J1bM//S0Mr98/uTLD62PjaYpm8l3rV988ufqPJ1fD D3/5bhiakcyzf71+93rYvXp4+uNf9zrs8xck+EczuDKW7IcXryCeZA9mMCGMxgw+u7GY4cUdxuSB //Tk6pfdv92/u7nd//fw4l+eXP1AQiCo9rSBpLUdf9k93Wqa7Gh83/bX6/e3v220dzGPOffth622 KY0p9m1fvHnYG7u73VLdJzOGx4n3eVo2/Xlvze764cPHZZ9q4thZ2PvRTjQZF2YR3/7+Yf/U7d7c vtvH3Ye3N/uyu96n3Ye9MbtNq9gURht7QVtqWyjcN/1pb/Ludh92H4cf3u+Nk9Guf90/tbvD273f vX9zJ/oML3ff/vTDy30j+8TPbONaddBICuayreCJEKdCzPBPdTn683+GKxenwRtPhicZIKwjJ/XD 4cnV355cXZH8MNjoR+fQIGY/010TN43ONE2EbptEM9q5AVP1cWxVWGhAzeenIFYUpOezZL/U3o2x fa60NDmxk1+sY5N7D0tjKHaw3o056hrm5fvvH+i1/nNvAnmXKbuPG85SSAPT9d9eymaiHcn1bf+6 tw6LjTz6/bPn+6c03O9E+d3DlhCac4yPHLBMI823a/tcpVu7e3//bmsJ+Gks/nGDWB9Hv1DoR95C 3t4+0DpJu+vXW/vPFMa0GGZzr5rKmPqmL3fPn/+IJdgtt3+wz5lELh0HZz1t03DN+ZjopPo8+ryt wdoxEVaWry+nBvuvfaS5v7nGuz3s3e7+bmNqIbjR2m0lTjSIKxoYM42JFKF/6bhr3zXGxn/XD/Dm rX3d0AJ2oe+/6Vcxjjn1bdmR719jo7ymjfDyyrHOwG86IZtbMi38uGj7cudoUj/TKv3p+84B+r08 wLSbg5yYNq2YNkxuTHlh2nsa+COOgq0jh6KN0eVPGDrr0NOYA0cw9EYMnX5uymOIvN8pw3pMik4M CoOcizgxih0t7WNK3ZAatF7CkWFok/THnpUSwWgsDJJAJ5/2tHR626NgpaitDKu0aiQde32p6RuJ tXhH/Spms3bAlK2osTpCTuNEcY2bLBRZhonfnnMJM63IK3RkuU7eBccyZulZvL+75l1UhljUBo9g RK3NEWj7Mmwuo/OV4Wh1HHsqcbSZ0GJQ7aa2Vqnzm9BB62NRSHt26i4d6yuYzJpfGXvJsWxMo0lb jvX8rEu4NXkEByb3KY7ll44FSETow2Vw8C4qo0SKk+jgKCPCP1qTtG6xMJISsNlEVi9KW5NHG2q/ SolYtFVGDGgrHV0gvatUIbAZyJD6ULXhbr2uS6/60mey6lLhHMIlRSa7QLjJUXhMOJG8+RThvtg/ JRT04uezLrIWq1gKhHuxlxytHss8fLPhF18XvCmVcegY9L9D10UYZCHrPA5oZ+zoSrtvyMo8zC3o rSRfGZbpSMvZEU5MQhWmslD0P7xYYqTIMe4U5LFlytIJgx2H/qRxb3hcHjQX1Z0pW0ckDc1xfJFC DAZOMgJNAGeYKkCUDVWBIgwPbVl1EGXop66uv2b3GpNYT76HjTErKrTk256ExwmzOwgDxiNGFF3D NEqPo8FJbeyxFO6mUIVgM6Y+mbGlNRGWdaFgYspgnycGzYGokpkKXqjAFBnpRhojaiCGkcYJXUmB wlQQyZOu0TJG6U0ieSieCpTx8iLIOmRd2sknd6Qzq58h3rIPExUtU06ooLpYmJtoYCNMXHoGpY5m OGP8Uo1PK5NUctmMgnttMghInUtjTKwaMRzTk6pOa9nwhiCeDOvT9kG6OO9hAZbSHoXoFT3m4lyu YojhhYHTjSibmXJCkSuACmJQMDwzkjyGvYkiTAMqyTMy3Y0oHFnhFOoEsGCJYYURMx4572oLYsD6 xCjIWGS2AE3GRKbg6UgXifVprkYYDudkYW/HY6FmO2yb39bYC47MMSKvUJwEhpZ0roxDxzBH39cu wniDLWjC6U8xgPMixUsEwQY8HBtk3k6YNiLVw9FAYS54HJjyQolBwQiCdyYjj4OgH8+UTUzJQoG+ Vmfk6wSUYY5jg1FMowwkEiMPdTCaCy2Nqgti66qKE9pJW42pPVRpjHDG9mdTsYsUjrG00HX3D/Mh NTxF/pfw9M0vOzOezcetJeQMHQbY4GapxIassweVdReDNoK9iC2tYMJWS3teS78mjby4zMIeo+Fm DHCUaQofMqlgUcnp7LbwteUjt2t7fhar8QCdVKEXcn4O6bKVI2/SyAKd2Nmf1zCvyaMFDY+f5T3G 1GUZHvspSshQsEfezQxLS5MCSCsBCDZgorDtxkrRYvEU5rl8fBwFuGhXpUQyGgvDFtrm4qBdLR0h 7ihZKTSWgetjUap27XRehslfy4zWwmU3XXIzT447CWqM6dOgvTNr8uh0o122kXepCmCXLhYyeX7z PpQWm0YKvNPxBUSTOCw5vo7ogCbqUy9nqPZU6mgzZahJpadaW+XOL0OHVYZopB07dZfO9eXPZdWt Lp4R0bhx06vO4nq3dkhEa3mTfrxXhROvmgyHY9nC3+9mRuEQNFD8gOQzhdCO7OAs1p5SZIhAu6eJ x8cUDCLu1K5KiWQ0VkaMyEdrVw6zj5KVQmMZuD5WpbRrp/OJb30lM1r1sHjJwwKd8QjPU4B3rwF7 ewHYu9VMuY8LsZc8LbfAvm75QGKlLvgpVsZhZkzc8DB3OTLeoNGEsNcZBmN3iz3xMDeYggbwYEyC 1SmSDEnALh4HphKoiGAXb4gYURgEJ5gqTFF8y10TU4IDAwXdjMppAC9DCQMKy9jahQBjPjIgkTBs HYpmYt1RE6K8qZpkYRBCqJMgihBCb4TtUNvVICUUmjxtkYzrYTQcsAD0BtM8CCMzzXg5lCiHOY+q lg8E6BJj5iKLCn9Jp8KNQkT2CiC72EpLGoEmDyLL0ySEJAeCrCLLYT7RVppGJkxgwguRZXUGrhYg he+q6kUYkpwIIXN0jxscuTKCF81JOh4Hpmg6oKxkApKIz5KYY7iMOWdta4beAttm9xVdBvIM4Fqa AoFrBFDIoDi2q8/i4ga+gzeTGQoHw5CKZxPU8j46dhrHWUYVQ+8NvSSV4mNi+7masfEYVt4e/Vnf JfkZU0E08BJ5MY4FgwaEIIRPjrM2LFa6Zmk78WsjOviqvhHHKkUYUpp17D/KgLUdb3L8OMtMElNG 5hUlsCMGQi5i4OpKdJIJiZh9b4QzxjeNzxvgUbbJbDVlHGYG0v3i9dKj0rzdFIlEg2aK0YZjz6Lp mdqiAOYobZlE0JAlNOV1Cgr5EqL0oCFGEgY5Kj+2UkjAEhcoLTnfgLQIBgqqJ2aho9GDWIcWCUS7 MlTpmV9FHTzz7q2DF0kcYGxWOnPJvp/zGUtfLGL4xBsAcmKuAe9kf8D8i9jdrxUyPM2HdshG6GPg mvcXT82UeGFQGGnCJ8J3v3ZtIJCfcVp1FvgYRS8e755eT46yAYYLEN6XXLfoY9vzM9mqkWP/bKWc n0S+OAmkEC1f3dJy1ONBvC+rrpbHXt4jjB2mZSwckZsPgzH5eIlKGMi3l4GCM0s6GgqFaIMtdJzS caUU594iJ/CEYbClmtq1UiIZjZUxWewk2jUjTVKqZKWosQ6sjKqUdO11PinNfyUzWouFw2YqsbnC ZZEllcLJJ4H4sJo5nPiGViPvkou5pYtZzxHG/EIqQ6xqoyRexeKWokAbmhdiKTKj0EEZCD2ReZWu lTqarTLEqtpVLa6S5xeiA9fHqpR27XQ+LdJ/HTNadbGLBwfnDe2Wi51F9GHt3EDe33ySi8WlixmK lSbLVwQjJ1eUYQFryNSJS20oJFEEYLBGKnEjlTzUFIVhLVcytadSKhiNlUE2KFL9oq4G8W4VrAS2 Bxm2PlUdpWev8Um9/quYz6p7bWa7t6r2BP0oRsNN0eA/q2ofVnPgU1qIveR0pQX3zVGQZANIWFZC Hxo6IbY9NB0qA0VMz5UnYy3CjLvlTnmYW/ANY6WdZxr3Mw1u7DOBK6vyZ/Rahcd1MaIRH4PAApPi vefKKygjpXXS1cieE0NVXhh1TCN1t1CvI0Aa0VFvAzGRvehAs9GitOpnUUqrmoNgZZuZb0fccS5b cpbbIAPKwJKL63pzxUqVmC+YmDQhWuayZWJfpi4CXLhoX4A+4azBVjHYnKlXkNlaB8gLucFVBjt9 we1sy8kvECgKEjUVpoxclLKcOjWo4A7omBMTQCWW85VMlVrfT9JZr0PQBExhVbRqbPgRlE2lMrJl RuTCVhIC2EVSYEyJKoZzSGBYx4+NNhZqtsIZ61dkiU2CUDwWt2RCLAWfheSRo3hRnhg4puhMy3LX QVAAuriKLS3tHyj+Boa5LKY9GrVyniLLVTH4gUYQBg48Ls4az17AVGDKllqH54OVbxhwVT4xhfst RGWlpG1m4+LKvK0zwIolxqQMTqhB2zAzrKgvP8IoQgEe09Tg63pfgigHQtSMEMANlTra4IztazCG 3TbL7ffCsUaBE4iNxNFxE1+tKH6iL51tb2rBHlFAkNkEFeNtbmxvUEgqLNdGYaRR3jF2eyKcjhqE EutJopcZ0jhLY2wZeE/EhGCl9P7rxHV9yEp1Bk50kStPZmJHhbbWVQbePK6gQOLxcfRMGZlakrCc 5oodKvD9IlBJGicNpI52OGP/zbrGWtEewZuVHTR/TtE+rlU62Lqt0McgvHi5Io4rLwg4I/KJn4b7 42rBO/CO3wp8jKKXy95W9vyM30oo7P/1vHpb1W7SqxVzXrGLd6BxpNCJ2yl2fVaxtHb12SAznB+v WDq5+ay13xmHVIaACS0b6xLXqvKMQ7ToXB9L7aF2VeqIFipDwIR2VaChkmccogPXx6qUdu103qjA f/EzWgt90+X0oVTgPwe8p9XUoVTgH4+s0skdaKk2ze9DabGplo/V3lpdnl+H1J7rUylL155KHW1W GZoP4Z41VSJy55ehwypDNZKOnbrrFfgveS6rbnVxx5cK/Ofg9bS232sF/hO8Kp14ldR+Z3yrDEWp WjZWBKtV5RngatG5PpaCdO0q1IxDK0NgqnZVCKuSZ4SrA9fHqqV27XTeqMB/8TNa9bDN7PYGZteC /P8Ds6e1lLcW5B+P2fPUYnZPyGrKM2af11eq1fjcAPRj8waxewT9Csfv5iPkiNf1ucBapiODUkG9 XmAB42H83aFlMIKpSJofhwqyQSEGZwh+I6rZVAH6TCl+r80F4SuDzwFOANSRJDlQFTmmDlRLySrU CXDCoZ39duSca5iCQ9Ql3jNdqkvCBQ549HLAxJVzOGBgoOJdEqgQtbwKm5csb71etO/dFr2KRz0R DLmW4Itg9sI/UQYFHJC55MyUZ0rnC4Zo5dGYb8iDorUHykpjgZgY20hMml2dgozkpPxbkkjzsJsy cK6Q+viSAR57pvATUJraJFMLUg8mBn4EmPkHHqC8NA7SeLbDGftX5Ih9woUGtePwib5B7WCY1KD2 EFnLDrVH8hpnG9Ten40shn9lMKN2MBhbMmoHVdFgFio1qJ0bm4raWVYF7SDijNkxsI8NZgdjCg1m j4ZvMcyYHYwQKmaP4uSK2UHhXQhmxzSnI2gHZUMF7b0Jzpi+BmFaWC9YkVmq6LZhHGYGmXLKTS1+ ZmgxnpZDIybHhnGYGbMY7dKL4Vv4rRjTMA4zoxHje8YbuaDjO21SbBiHmTGL0S69GL+wjfxcohVj FrbRLp2YmBe2iWFhG2XMYrRLL8YtbIMbK502ymjEuFPbhLywDeGJ3jbKmMVol16MW9gmTAvbKKMR 405t49PCNrhZ32mjjFmMdunF2IVtXFnYRhmNGHtqG5cWtnF+YRtlzGK0Sy/GLmxjy8I2ymjE2FPb 2LiwDRK8nTbKmMXYeGobaxa2wfHbaaOMRow5tY2JC9vgPlynjTJmMSae2saYhW3kt4GNGGU0Ysyp baawsM1kF7ZRxixmCqe2mabeNjj1OttURiNmOrGNL6G3jZef3bRibG+K2qUXM/W28Tn1tqmMRsx0 YhuffW8bT3tmZ5vKmMVkf2Ibn8rCNikubKOMWUwqp7ZJfmEb5L47bZTRiPGntollYZsYF7ZRxiwm llPbRLewTZwWtlFGI8atnFN8D6vgAl1p7p4hKNJoS1oAIBtTGZLixe1VueHFT0O9AGYoYlOQJffD wEil3j4DFSLfPsOfPtbbZ9AsFD2ZeSZyMRQtcVRXiqUQY6IIREcouGhpqwL4qE7xzQ00zI/1g+oF MdrxCppO/UyEsVmdX/sckM2IpQL/SvczstJ59eMwtMMDFs1SH5PtzZcvcZNfIXRD3SheuOUVtHjT tj0/k9VbXtkxHGuEnJ/DxUteiDhSaDK6j8+s51XAmxiTNPIeYepy+Yc+tKbJ5wFRbMXRflz7iJmx vUNlvvnRdXy527vdn18N9O9Pezvtbvd593EgiD/tvrt/tw+7V/hsz9uHO/muGf4m9tO0O/9ZsbL2 iyJcNw/98OdNsZlxXVstuIpLOwGBmurXBAjk3X2z9S2fIJ9DaTrRG/fkx+j17YeNXskRbOmHOnmv XXs6n1zb/pfdhze3ZOS8u32HLzL9xn/fvxqIDZrIuPvt/ub3u1t8Ugqv4cPm54jk58wL4Q974zc/ r4TvAhBMbbtsf+kq0yJrW+qXm1hjfMnpLf337n/JOd4P0PUD+c/9pjQc+KET99vtnr9gF3bXbw/7 uP3VPB8M/wLiEUr7EIErF8Pgq2Y3D6rx32HSt/TP/bv3anHjujew4TCFrym0ov/Otr7/sC+7+5s9 rZv7Az7Cd9ax17L9MWJ1bM2PZfwfUZPyYA0KZW5kc3RyZWFtDQplbmRvYmoNCjEwIDAgb2JqDQo8 PC9UeXBlL1BhZ2UvUGFyZW50IDIgMCBSL1Jlc291cmNlczw8L0V4dEdTdGF0ZTw8L0dTNSA1IDAg Uj4+L0ZvbnQ8PC9GMSA2IDAgUi9GMiAxMiAwIFI+Pi9Qcm9jU2V0Wy9QREYvVGV4dC9JbWFnZUIv SW1hZ2VDL0ltYWdlSV0gPj4vTWVkaWFCb3hbIDAgMCA3MjAgNTQwXSAvQ29udGVudHMgMTEgMCBS L0dyb3VwPDwvVHlwZS9Hcm91cC9TL1RyYW5zcGFyZW5jeS9DUy9EZXZpY2VSR0I+Pi9UYWJzL1Mv U3RydWN0UGFyZW50cyAyPj4NCmVuZG9iag0KMTEgMCBvYmoNCjw8L0ZpbHRlci9GbGF0ZURlY29k ZS9MZW5ndGggMTUwMD4+DQpzdHJlYW0NCnicnVjNbttIDL4b8DvMUSrgyfxKGiBbIHHTotsW3U0C 9NDuQXHkRIAjZS2nQZ6pj5CXW3JsJxpFVJW95Yf8SA7Jj6TYwV/s8PDgy/zjOybevmXH7+bs3+lE MMGFEFIpkbJUCWaNYOtiOvn2hlXTycGHM8uumulEsqsnYSESKUwgvXwznfw9nbCTL3PGWpbkwee8 umLRcj17fxrvzB6fA/B7yYzhIjHsfInwgM0kUyrhjhmbcevY+Q2a9HY/TCffo3kdz1RUNeVlEc90 tI6li/I4jTZlXTXxP+z8z+nk5LzHC9UyvLdknOZKtU19j9gQiKZDUUyl3CVBJAbgmc5SbrMt+qEQ Wfr22cD+FV6qpgI8M4FydFJurosYgw4R9jpSA0yowihReHedhbKnsZTRGavXbE6pKS140jGxgNfP K0oB4jBynE8qTXiatmXZDGpNQ2YW36OLglDTwnKtAzXhNSg7WkqedXy6yW9vi0tCwYAFo8cFYaQC l0PZTeyimlQwiqvXR23gYbPXRG3SlOtOQUE5UeJWSZ6ExRs1RXUJ5VdQ9Wede1FUFH4iEt7JQb1k m+vYRC982ndIZnpbxEJgcoexLOMdKTSxNNGGxTMT3RRNA7j5FVRq4f8CpkAOwz/6dELWiRVc2xD/ dh0rGdU+o1j49YpMq+WJDpXJ1FjFpWzLIscakfmE/oh+kSk13HX0hmsgk9yo0KkjStalvgDGBGCF 4TIUfWRIz2UVW9CaWf/Wn2KZRAX85YHKcD8Hwn9gMO04EPKqoKOkjvKLVQlgzfVNUeHvG5q1Es9a bRyvimmEalZ6O0Lu1lsHiXKARgX1AOVHPFA7tmNycLKYwcnSKXzn30U58/TeMFiOZd9gCTWlkDzN 2ppINthXUDXfqMilBvFAabjMpHY8DdyL7ssV1Sky1ViUgTiJnGYhMjaK2roPFE7lX0Hm7CsCUJA2 rUOXLmogJ2pwaS7TcREoiMB2ZPPVthArXG1y+HFT/sQqLxoGRbqMlYhgKFN9qiGlMgQsckRaUP4a 8EEk4/w1mcaxEcgOcKb1u1sgDZQJTAyUCREBZ0pBk2YiMuSccaWwK+Uk49o9k+bvOFPCXMN42mrD xQwRoU/PCvAAf8wp6cTiCAyk6WKGZSoJZR9xLuXVJaP8V8BCwGWjDCgDeXZd108xBWeUCrA+7GCj 4LXQvq1aTzl7TsEjzY3QjokckYItgW0bvIfE4CWMHcOt9hXc6ld2JQW+wvDK3ruMtDWjjxXDsTfP G9g6/NJxigPmDLu6qulxBXuwciHUdY5N9LOsrsjpBA7YUIlMHO4maSi7iLOorqpiAdxTbh4oNkgM N+k4KyaBKdDx6L4kSdRKINFxyFZmvsnaskdn+MRDC22W+G5rK9XVioo0UWBDjfNnl3uZGZ7tC/K2 bqCTm/JiVbCmhh9Xd3iiYnv7Pddfr3RnKe50CNjgdba5uyzJM0Wn/kwJtEgLmcCpEbrcQ9QNOUKg B904W3h5yI5sSQI72IVp3Be9nfSe9XBVhBjHx+9xJDJ8RJilX7FW7jHEHG+FhyELaY+FRDkgutDE bAgk6wHZl43NMNlPNzgcWL44msG4XQ8gzja4pgJAnCUe1LNOvsBX2ACNMMxyPmxDih4jCheCNDTy axBF9qE4izMgQBn2pe/7jYZJIDooR4Moug9FGt9t430xfSgK0tnx5XEQxfahaD/UXuFL0vmg1jMw 94UG2K7vLn8Jmr52YuJM1v9nYLYUo68VvezhZ8JAeHNNcgjeH9gHLemh72AuFL2sF3c3hf/KiARB j2njeOZaqrj97G6Re+qUwvU/k22l31wiwDBKBv5t74HFXcNqYLHtirFc1XDA3rN6CfOF4feO/Aqd hwsCCYCccTDNw+AH1pJdwlJccM3TAKUzBnelCqXRU//RpNrd8OBgBXvH5gA/qizW8SyNHm79bU9+ LlNO4P0U4O4G122x3pQ+cVRhaCdxJQmU+WAj9PG2xh25g/Kinf4D0zC/kA0KZW5kc3RyZWFtDQpl bmRvYmoNCjEyIDAgb2JqDQo8PC9UeXBlL0ZvbnQvU3VidHlwZS9UeXBlMC9CYXNlRm9udC9Bcmlh bC9FbmNvZGluZy9JZGVudGl0eS1IL0Rlc2NlbmRhbnRGb250cyAxMyAwIFIvVG9Vbmljb2RlIDgy NyAwIFI+Pg0KZW5kb2JqDQoxMyAwIG9iag0KWyAxNCAwIFJdIA0KZW5kb2JqDQoxNCAwIG9iag0K PDwvQmFzZUZvbnQvQXJpYWwvU3VidHlwZS9DSURGb250VHlwZTIvVHlwZS9Gb250L0NJRFRvR0lE TWFwL0lkZW50aXR5L0RXIDEwMDAvQ0lEU3lzdGVtSW5mbyAxNSAwIFIvRm9udERlc2NyaXB0b3Ig MTYgMCBSL1cgODI5IDAgUj4+DQplbmRvYmoNCjE1IDAgb2JqDQo8PC9PcmRlcmluZyhJZGVudGl0 eSkgL1JlZ2lzdHJ5KEFkb2JlKSAvU3VwcGxlbWVudCAwPj4NCmVuZG9iag0KMTYgMCBvYmoNCjw8 L1R5cGUvRm9udERlc2NyaXB0b3IvRm9udE5hbWUvQXJpYWwvRmxhZ3MgMzIvSXRhbGljQW5nbGUg MC9Bc2NlbnQgOTA1L0Rlc2NlbnQgLTIxMC9DYXBIZWlnaHQgNzI4L0F2Z1dpZHRoIDQ0MS9NYXhX aWR0aCAyNjY1L0ZvbnRXZWlnaHQgNDAwL1hIZWlnaHQgMjUwL0xlYWRpbmcgMzMvU3RlbVYgNDQv Rm9udEJCb3hbIC02NjUgLTIxMCAyMDAwIDcyOF0gL0ZvbnRGaWxlMiA4MjggMCBSPj4NCmVuZG9i ag0KMTcgMCBvYmoNCjw8L1R5cGUvUGFnZS9QYXJlbnQgMiAwIFIvUmVzb3VyY2VzPDwvRXh0R1N0 YXRlPDwvR1M1IDUgMCBSPj4vRm9udDw8L0YxIDYgMCBSL0YyIDEyIDAgUj4+L1Byb2NTZXRbL1BE Ri9UZXh0L0ltYWdlQi9JbWFnZUMvSW1hZ2VJXSA+Pi9NZWRpYUJveFsgMCAwIDcyMCA1NDBdIC9D b250ZW50cyAxOCAwIFIvR3JvdXA8PC9UeXBlL0dyb3VwL1MvVHJhbnNwYXJlbmN5L0NTL0Rldmlj ZVJHQj4+L1RhYnMvUy9TdHJ1Y3RQYXJlbnRzIDM+Pg0KZW5kb2JqDQoxOCAwIG9iag0KPDwvRmls dGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCAxMTA1Pj4NCnN0cmVhbQ0KeJyNV9tuIkkMfUfiH+qxeiQq db9IUaTJZUa72uzOJkj7EO1DDzQEbWgITXaUvx9XEzIYcOg3hHxcto997GZn39j5+dnt1W/XTF5c sMvrK/bc70kmhZRSaS0DC1oyZyVbVf3eP59Y3e+dfb13bNr0e4pN342l9EpaZD351O/93e+xm9sr xnZeUmd/lPWU8clq8OWueHv2cgiOvyhmrZDesuEkuwffTDEto/CeWReFS2w4z2+2D3/t9x74ddUU A8Nn05oV/7Lh7/3eDbjK7rZ4Y6KIcRf/wL+tZvVotnwC8C/QQaR6J7itN6eUsB57Yx85MXS6mhkt JM7WGgF/RylM3Hg/lzKGC5xartQhNEihtd0FswGQY4Jhw9EDv6IKlKxwEeNkiyiffhRK87JQkb8W gTeEAxWVMMgBrgm2hcLt2TZVPaZ8a2+ETN18a6iAM9h2/VixyWxVaA3hK8PXrBhYfneTE7svPB8W zvAzwqF1OrOMHP5VKMk/v6wLxx8JmDNeaN8tZgeER8w4n1dNUxheTiG+isB554XT9BsHfWhP9aE/ 1ojGCh1ON6I/3ok7aH6bk3I5qcCrhuX8VpmEisG/mQ+z4YMcY22ET9jnXaESr55fYIyV52uKRQ0C YDCSZNwqoY6+0iwh5EXdUIQ474TFFaNJD1qEvfp8fiosh3lTed4SzFsk5817Lbylnzrg3n3EvQ4i eUxfaunTSYuU3sm/VEfIPwQrqUSICMzvF3OqbArK5jU2J7UjKJH2XM/L5XIGlaunpIJELVTo9oIG dYoJ246gYcua7EpYTqqbc2NclrId240+p1Zsv1MVMqCAHsX/Js/kOzB+yuGYZnPo3iXIoOQL+PV/ FrFqTA1BiMJ0y8lGK/bqNZuQbS+9ULiveEO3hvMRlKVbHC7YvFaQLYiKA02JtKZse9UlYdKvaXd5 2ttRN+QMaq2EVhhKdlWeEoNts/gZED96lwVhAsaMq6wRZQ7wtY2SItB4L2ToFpwBLbL7wdVjknDI Ozhs3g7gtBgkPn39Xo7+I9eiFR2DclmG94iZ1UDlJC/yxWpewu/1bFEDQ6fI1U6ErUquH8sikYtC 2ZjvGIQgvTub9zayhQgtAAauvTrIZvACLjIEhMGE/VXBHZT1nwrPKFjJrlt4RiUR92xPS6U1WY+6 vWDhyAl7L2ybOl8vORfZnluw9BtW5iv9BFUqtUq9PQqX4E7DmQD6uwbWKJnQUmaZQGCy+KBA1mHb zcA/Uwibcn4IQR0P2sP9GY55f5MTalpTntZOCZgA5U7YdlnCffvWeIsJy9cjXFn5VUHLZcybFLn5 c0FZexUF3AOYnpcRdf562D9Gd8tny3z+nHofo2O7av42G/R3gs96jBzR2qqzHiPbH/kshfa1ZJ8Z nQ5Q9Kr3OXdkOy/HpChY6EvYW8j+sdqoAvlt0l61CCIoWziy0gfFOTgY/d5nOX3jKxAlOHsJnz8B lt5NzQ0KZW5kc3RyZWFtDQplbmRvYmoNCjE5IDAgb2JqDQo8PC9UeXBlL1BhZ2UvUGFyZW50IDIg MCBSL1Jlc291cmNlczw8L0V4dEdTdGF0ZTw8L0dTNSA1IDAgUj4+L0ZvbnQ8PC9GMSA2IDAgUi9G MiAxMiAwIFIvRjMgMjEgMCBSL0Y0IDI2IDAgUi9GNSAzMSAwIFI+Pi9Qcm9jU2V0Wy9QREYvVGV4 dC9JbWFnZUIvSW1hZ2VDL0ltYWdlSV0gPj4vTWVkaWFCb3hbIDAgMCA3MjAgNTQwXSAvQ29udGVu dHMgMjAgMCBSL0dyb3VwPDwvVHlwZS9Hcm91cC9TL1RyYW5zcGFyZW5jeS9DUy9EZXZpY2VSR0I+ Pi9UYWJzL1MvU3RydWN0UGFyZW50cyA0Pj4NCmVuZG9iag0KMjAgMCBvYmoNCjw8L0ZpbHRlci9G bGF0ZURlY29kZS9MZW5ndGggMTU1ND4+DQpzdHJlYW0NCnicnVnNbhs3EL4L0DvwuBvANIf/2wYG EkcJmjSpawvIwelBVdaSmlhyvDLSPlMfoS/XmZVki1pytZuLYMszH2eG35Dz0ez0gj1/fvr+/JdX TJydsZevztm34UAwwYUQIKVwzEnBjBbsvhwOPj5jy+Hg9M2VYbNqOAA2ezQWwoLQgfXNs+Hg9+GA jd6fM7a3Epz+OlnOWHZzf/L6Mt8u+3KMwK+Bac2F1Wx8Q/CIzYABfmcM08ZzU7DxLa1ZL/xmOLjO Pqxuy+X06yQvsvXDfQ4qK08/rNY5yGySA2TrxWqZ/8HGb4eD0TgSjdwLYLeicYYbvb/idcbaQNQW RHBn2HcCwtgQ6C82UBbhuJWGWe2ZMpYrX5fnKoKj06WRTIZl0YpLprzjhd4WherxXAjvzp5C3dX1 wNkJLvGrPffr7H1ZVZNZDiIrK7a6YbnK1vOSvXg3yk9Uxi7wd6yvzjbFXU3JcvU1D9faLaBMwaUK F2gtoWlNXTRY4YpNBrhHQm0WwNxfQiz3pjcI4M4H3tloSXk+3Ja5xkSlIP5I4g8mvkykiR3ChQlx WMoWgOsitL3FtSZ3d+XnlI/z3BYd8b3ioELbSfXToTlVBNDkgBEKRCO6f1ObCwV3qltUSiruIbSF lK2SvOiKq9xBtnQQATg2nl5n/zWzVtGsDWbtQhQCQCqd2wiVYhDWc4B00A2m24DcOorpJIfigNzS ybMWWHdwksZgveSqhU0NTB85HJW3dCoGID+z/EQHdGlAFREoLTT3LfvdvDpEFKUg9wBFtqJADAXr BS2d3ESJ3RxayvrY68DKJqAKdjDKV60Mtx342gTXx+mhjeKqD5PBHKeyxttPNamsW4O1HYK1lhd9 uAwutl8OuHC9yQyxxtC+4Er3iSjaE4Wi2SNAUa0DTKwnjJDc2h6xyFhPGGG50z/GZimPs9ngzQz+ B9gs1XGCGLwgvOxTAn2czUYDb5K5PVbTIVZd0JjUI1Yb2y6Dw7PsTWYZawyDN5DsRaBYSxhnGy2h W1FiLWG84bpPLCraEtieYUt0J7OC42S22HLFj5BZyeMEsdgptg9BlIqUwEq8b3uhdGgJKz0vZKMn XGvKHXrCKs97xRprCatx4ulFHXdMh8RliKzlzlEZElchT87sBPfZ2ZqSH8vE6AtU8cCrJlpyVAal 6i7cizG7ndyj9PiSdMG8zIFLLQbpNNkKwpQM0Sh3IXS9Q+Hon4SjbtGNYLgvQu+0tBBcqYO8SL1V FcmqGX6gkqWIF8umHjCRDaHxzQeIm7/cz3Y/XdaPDpcj1ISvIsIqAomKXweQ+68XPJGatlDrki5l 2LFImLhtk+O+7zODxDHJmUd693hh2PfMfltOS3aBXDAHjwgs99l8UiUpZYB0YYB1s1guqnlSOFPl tAld0lJS88KFtn+u1vOUuRdEkm7QKJbkge05I3YuP7NLeq26YrnJJpuHK4Y8vVtVyK2qrKrNwwOj XqPXmFjFG4fmruq6FtJPfZukjqdbPjC/yCVuzEXKQxsOocNJytRIrmVoO84LBP+SK8w2/aZSUFsH fuk3FbzRTGhLpW3JWRYGr/3Q5UVFtZ5O8xOZLSbEyXX9DpZilxaCG+gWoha1ZAtsb+oeKKsUxTRO cihuuuHbZiwXV+840orlltgW9zPS0Hwc+E2xDyepfTEGh9RuMRlr+MEOVuV0+zz79Z+El0VuFbZ9 hZaTBqkAO7fF8mkTcVWXTeq9Xbew2vgQItkzRpAoCmy/L5KnBRT0ot0RuqgVZGC7OSQ4y102ni/o bKhPhJK+/ptu1el8QqktZ/TaXdLZwj5lyePIc6siC5TfHkqCreon8yTTHHfQLRWN+sG70JYaM0UY vPZRukQCq+5Wyyo1Cdnt+fXkRjO99vU49ClPrUbTtDtwq12wvgkPenfR3VLf8hFQtahH9s9X2Frf U60FeAPhUbnnQoNgfbjTXJfkC9JWhm7bPBrzzqOL9cTePRc8PZzCsnmw+KlA19NO89vN5PPmcjSi iepD6nTFQuFduo+fGHeaY0lM+0kS3C4sZutwo8WBtFCyMZLRSAMILJP/3PkfIYNp0g0KZW5kc3Ry ZWFtDQplbmRvYmoNCjIxIDAgb2JqDQo8PC9UeXBlL0ZvbnQvU3VidHlwZS9UeXBlMC9CYXNlRm9u dC9BQkNERUUrV2luZ2RpbmdzL0VuY29kaW5nL0lkZW50aXR5LUgvRGVzY2VuZGFudEZvbnRzIDIy IDAgUi9Ub1VuaWNvZGUgODMwIDAgUj4+DQplbmRvYmoNCjIyIDAgb2JqDQpbIDIzIDAgUl0gDQpl bmRvYmoNCjIzIDAgb2JqDQo8PC9CYXNlRm9udC9BQkNERUUrV2luZ2RpbmdzL1N1YnR5cGUvQ0lE Rm9udFR5cGUyL1R5cGUvRm9udC9DSURUb0dJRE1hcC9JZGVudGl0eS9EVyAxMDAwL0NJRFN5c3Rl bUluZm8gMjQgMCBSL0ZvbnREZXNjcmlwdG9yIDI1IDAgUi9XIDgzMiAwIFI+Pg0KZW5kb2JqDQoy NCAwIG9iag0KPDwvT3JkZXJpbmcoSWRlbnRpdHkpIC9SZWdpc3RyeShBZG9iZSkgL1N1cHBsZW1l bnQgMD4+DQplbmRvYmoNCjI1IDAgb2JqDQo8PC9UeXBlL0ZvbnREZXNjcmlwdG9yL0ZvbnROYW1l L0FCQ0RFRStXaW5nZGluZ3MvRmxhZ3MgMzIvSXRhbGljQW5nbGUgMC9Bc2NlbnQgODk5L0Rlc2Nl bnQgMjA1L0NhcEhlaWdodCA3NzEvQXZnV2lkdGggODkwL01heFdpZHRoIDEzNTkvRm9udFdlaWdo dCA0MDAvWEhlaWdodCAyNTAvU3RlbVYgODkvRm9udEJCb3hbIDAgMjA1IDEzNTkgNzcxXSAvRm9u dEZpbGUyIDgzMSAwIFI+Pg0KZW5kb2JqDQoyNiAwIG9iag0KPDwvVHlwZS9Gb250L1N1YnR5cGUv VHlwZTAvQmFzZUZvbnQvQUJDREVFK0NhbGlicmkvRW5jb2RpbmcvSWRlbnRpdHktSC9EZXNjZW5k YW50Rm9udHMgMjcgMCBSL1RvVW5pY29kZSA4MjMgMCBSPj4NCmVuZG9iag0KMjcgMCBvYmoNClsg MjggMCBSXSANCmVuZG9iag0KMjggMCBvYmoNCjw8L0Jhc2VGb250L0FCQ0RFRStDYWxpYnJpL1N1 YnR5cGUvQ0lERm9udFR5cGUyL1R5cGUvRm9udC9DSURUb0dJRE1hcC9JZGVudGl0eS9EVyAxMDAw L0NJRFN5c3RlbUluZm8gMjkgMCBSL0ZvbnREZXNjcmlwdG9yIDMwIDAgUi9XIDgyNSAwIFI+Pg0K ZW5kb2JqDQoyOSAwIG9iag0KPDwvT3JkZXJpbmcoSWRlbnRpdHkpIC9SZWdpc3RyeShBZG9iZSkg L1N1cHBsZW1lbnQgMD4+DQplbmRvYmoNCjMwIDAgb2JqDQo8PC9UeXBlL0ZvbnREZXNjcmlwdG9y L0ZvbnROYW1lL0FCQ0RFRStDYWxpYnJpL0ZsYWdzIDMyL0l0YWxpY0FuZ2xlIDAvQXNjZW50IDc1 MC9EZXNjZW50IC0yNTAvQ2FwSGVpZ2h0IDc1MC9BdmdXaWR0aCA1MjEvTWF4V2lkdGggMTc0My9G b250V2VpZ2h0IDQwMC9YSGVpZ2h0IDI1MC9TdGVtViA1Mi9Gb250QkJveFsgLTUwMyAtMjUwIDEy NDAgNzUwXSAvRm9udEZpbGUyIDgyNCAwIFI+Pg0KZW5kb2JqDQozMSAwIG9iag0KPDwvVHlwZS9G b250L1N1YnR5cGUvVHJ1ZVR5cGUvTmFtZS9GNS9CYXNlRm9udC9BQkNERUUrQ2FsaWJyaSxCb2xk L0VuY29kaW5nL1dpbkFuc2lFbmNvZGluZy9Gb250RGVzY3JpcHRvciAzMiAwIFIvRmlyc3RDaGFy IDMyL0xhc3RDaGFyIDExMS9XaWR0aHMgODMzIDAgUj4+DQplbmRvYmoNCjMyIDAgb2JqDQo8PC9U eXBlL0ZvbnREZXNjcmlwdG9yL0ZvbnROYW1lL0FCQ0RFRStDYWxpYnJpLEJvbGQvRmxhZ3MgMzIv SXRhbGljQW5nbGUgMC9Bc2NlbnQgNzUwL0Rlc2NlbnQgLTI1MC9DYXBIZWlnaHQgNzUwL0F2Z1dp ZHRoIDUzNi9NYXhXaWR0aCAxNzU5L0ZvbnRXZWlnaHQgNzAwL1hIZWlnaHQgMjUwL1N0ZW1WIDUz L0ZvbnRCQm94WyAtNTE5IC0yNTAgMTI0MCA3NTBdIC9Gb250RmlsZTIgODM0IDAgUj4+DQplbmRv YmoNCjMzIDAgb2JqDQo8PC9UeXBlL1BhZ2UvUGFyZW50IDIgMCBSL1Jlc291cmNlczw8L0V4dEdT dGF0ZTw8L0dTNSA1IDAgUj4+L0ZvbnQ8PC9GMSA2IDAgUi9GNCAyNiAwIFI+Pi9Qcm9jU2V0Wy9Q REYvVGV4dC9JbWFnZUIvSW1hZ2VDL0ltYWdlSV0gPj4vTWVkaWFCb3hbIDAgMCA3MjAgNTQwXSAv Q29udGVudHMgMzQgMCBSL0dyb3VwPDwvVHlwZS9Hcm91cC9TL1RyYW5zcGFyZW5jeS9DUy9EZXZp Y2VSR0I+Pi9UYWJzL1MvU3RydWN0UGFyZW50cyA1Pj4NCmVuZG9iag0KMzQgMCBvYmoNCjw8L0Zp bHRlci9GbGF0ZURlY29kZS9MZW5ndGggMTgxND4+DQpzdHJlYW0NCniclVhdax03EH2/cP+DHu8N WNaMvsENxM4HLQ1tbUMfnD4EYycUJ9CkEPrve0Za7Wrt6137xcnMSqOjozOj0VXHv6uTk+P3Zz+/ VublS3X6+kz9s90YZbQxhphNVJGN8s6obzfbzZ8v1Nft5vjdhVefvm83pD6Ng40JZNxs9O2L7eaP 7Ua9eX+mVLcSDSudXiLWW1LOaROcuryViAinSJFjbbNyPmmf1eUXWaas9W67udr99u+PPdndxz3l 3X/7v9TlL9vNGwSTgC0C+6h9H+Bqd/TY0Gh0dvOx53uKu5ub78en+yPenb5V+7xTj8x3wWiaT/+w e/VTCXHxYf/ILB+jjvNZ/QIPWOOBNaMtQmhvAv5GR+obiLGEMF5ZC9qiyvhAWcUMI49HweoHGNTM EiJ4iYHZ52AUaP5WqzEuDoCyx79+/PpJ7W6/Hb093987V0qzM7XeaW+VDUEbLjsu+iE5U9GQDL++ 2r26WGLBdWuMgaPV7PvAcEuoRT79Ep/EpFNQHDRlq3LQNmVFOenoRz4PUrk68xCLYZlF7OpedgSv OSiirF28x+TV7mxp1/EAfxSdQO7CrVCXlqjzVrJh2D8ZRm4/jbmViYeIy48RNyUZxGwPM6WOAAEF TpRyvig6ModCI0NM7kM/RXXUil+pZ4zDhXLZWAmFEJ6jTqk57jqH0cmJY5zSHJ9lEOmQ4Qs6xRKm UmlI51CjlAGUoza+OcjDEXBuyrPRLhQrc7HKtyjOawzGFrGWOHIun5FmcjIhFcvL4FxGAq3Fuqxx hHeTbWRisctoNm4cUIKxgaCBoy4kFj4POGRXIPi6DgYiuZQG/PivpqTm+78unNweIr/V0HqGk1op oXQkYY5ljdgcd53D6lQhDzOa/VnGBB3AX8qSR1/GQ6KEffoaZRiB7dZjBDMgEeU1giA55FysjGPj JJ8w1HnZjNieiiOn8lUUnbDlWGcWox4AgwkjC3s5ybvOYWXysLDMiOOAIR4WtWpcK8nnhiQPQmg4 4cBywxaQBiRAegoWjsAOR9AoYot7ppP+4LjrHCTLT9KfHJP0CWNdnqSP1kX71EufovDVSR8OG0bp w/JulL7U3NRLH45Ao/ThtKPyYQSexC/4vZ/EL2gDdeIn9uOAGg4OcNaWApH43JAghsmd+MURuOmf ymHOOVjg3vW1ZyAKORN74Re70z1S1flO96Pd6Z4wNPW6RwL72OseFSCETvewrR91D8vbpjYULRN7 3cMRRtmjtHBusocBajvZA7x3veyBNnSqN2n8PoRLOvlR9SbL5wEHNlU10FDCEaipHkbMak7AAvNT s+GR7yjdFMrt6UoRGmhzklapy4XBMeWCQ8voUpcLk2PKBY8ESjzlgsMeo+1ywaEWBNflAhzBU8sF J5VtvAbQnNuQu1yAIxvfcsHhpLNryQArmzglg5MZXTIAbjZ9Mng0SzZ3yeAZi3JLBljJUYOCjdnY 3wRwZHItGdBemuzVnIWFMwnDmVSW0PXm1F8Bg2NKBQyLNk2pMNlTKlhkD7ieUsFKN2i7VMDf7Lsr QLyOWirAStwKr1Dmc5cKZcyYC+JLQxKJkXLqcgHwk/VdLgBuaiVfZlg0fZy7ZLBe49nVkgFWsu0y wrZs6JMBjmzckAwWNUpa3hkFC8THB7cwhfLmYHZyl3yR90yUQ7S4hkOh2FKQftDKNVXYoyAtJ6Z4 HXk4BBkEIeDBokONkjR2hA5cSopEQYaXKNKWV0cSIYmD5USTJvyTRNTFYsHghst1HOzkbVpipWIV drMgFYuL6mQHlPulCEhlRBwAW4J8ISvc6zQ6Ehf4SAEUhxIgJmkKxErFiKGG99oVO8hQkEN1aFYz FhaOoXXxMp6BI0Cqwpr0BvVobRGu3OnSo3HBf1e3VjRgROGV+tIxQIxQleMaJdQGxcnbWsKguxwk E7g5Qm1+Yq7NZ21vHBcrifqybOx6GOyKA0W4xKqfs/StXhfhZgl0XXdQL4la5mQHRctBV8VTRsXA 0tbKRgYHpwo/l55GGjHJiGLY8n/2NTiWKbatrRDuZ7HkJp+RsEB9e7fc3B29u/fgc/efzSxFNdU3 H9//KeTEcOSXS78amOVHOfsgHXQXfe1nCHoGdgpW3iG4MnBoJbgAdouAeRkw4UUXZyFX8NrncC3X DpTkpKJNgMMiYLfCsFTMMIu5gtg/Sx2hdI24Z6hDHBcRh3VNoAHoY64gjmvv8EasPPzqscnr26AW y4uZZj+SPQyfDkVEklk3i/iE5zev/mLA0r+HPiF6pLyM1B76oYBteU30EZ+A1NIaUkJhkDcwihiH B0jtClI+FNHnUrO7iE9B+uiPgCMDaNTTY0DdCtBDv/ixPN742UD9+uE7eQF0yu+R+hWk4eDhl46j j/gUpOsJVZGiU3mIM6zgPJxOBecU7xGU/wMLPLYDDQplbmRzdHJlYW0NCmVuZG9iag0KMzUgMCBv YmoNCjw8L1R5cGUvUGFnZS9QYXJlbnQgMiAwIFIvUmVzb3VyY2VzPDwvRXh0R1N0YXRlPDwvR1M1 IDUgMCBSPj4vRm9udDw8L0YxIDYgMCBSL0Y0IDI2IDAgUj4+L1Byb2NTZXRbL1BERi9UZXh0L0lt YWdlQi9JbWFnZUMvSW1hZ2VJXSA+Pi9NZWRpYUJveFsgMCAwIDcyMCA1NDBdIC9Db250ZW50cyAz NiAwIFIvR3JvdXA8PC9UeXBlL0dyb3VwL1MvVHJhbnNwYXJlbmN5L0NTL0RldmljZVJHQj4+L1Rh YnMvUy9TdHJ1Y3RQYXJlbnRzIDY+Pg0KZW5kb2JqDQozNiAwIG9iag0KPDwvRmlsdGVyL0ZsYXRl RGVjb2RlL0xlbmd0aCAxOTYwPj4NCnN0cmVhbQ0KeJyVWNtu3DYQfV9g/4GPuwGW5m14KdIUtdME LRq0tV30IelD4PjSwknbOEXQv+8ZUpQor1bavKw9o9Hh4ZkZkqI4+Vk8fXry6uz750I9eyZOn5+J f9YrJZRUSmljVBDBKEFOiY/X69VvT8SH9erk5QWJ24f1SovbPlgpr5UbRd88Wa9+Wa/Ed6/OhGhG 0t1Ip5fAeqGFc1J5Jy5vGBFwQgtNQdokHEVJSVy+52HyWC/Xq9ebnz593mqzebvVcfPf9ndx+cN6 9R3AGLAimGAktQCvN7tDoZFkcuPY860Om+vrh+3Obk5OT1+ILW3ebA4AuBCl82OAb78+e7M9EE/e yDAOF03onmCmE0xJCwhJyuM3OC0+QhOrAUPCWiNtEAkPdBIhwUh9Foz4DPGkMQzhiTHw9jnEBJs/ xSLGxQQpe/Lj2w+3YnPzcffifPsopTqO0mnJSbLCei+VyTPOpaM5nVw+HH4FzS7mVHDNGD1wsNJQ Cww3Q83qSXN6aqNl9MJ4qZMVyUsbk9ApykC9npNSLr45paKfVxGzetQYnqTxQuskXXik5OvN2dys w4R+Ojim3MAtSBfnpCOrpK7z18qgrY9TbuHFKeHSIeH6JsMCYO20UmIHCljbuFLOZ4tOqylodIhK LfQxVafruldgWDCDDKN8jbKMBxwyQcZYHfeNQ8no2NG/Uh13HKSlT/B5GUOGKXoqLZMvKDlApyAV VYcmODySJ8goXr/YSiZb+Vlg5xWCMU+MxY6U8mP0GqfHx2wRB6ccCbYW4xqJPN4PtuIXs52jjXJ9 QAYzClUNHmUgtvC448GzgspXJRiMeFPq+ONfqaMYz/8qa3IzlYF+IRV9teqIpSOyaIbhQ3XcNw4r Y2HbvVHtO47x0kO6mLiP3vf50RFTpILSRWCmJYMQBfpheQ3QhvObspWQMRP5EUId8TzYJp0dKean XNERsw3lzWwU7Q1EUDwwcRLvG4fll7uB+Y3QB3R4GNSKfqzIjyuT1NVA5QkHhuumgDbQTKSVYEZ9 26lfJUK6QlP0xb5vbMcyDDU/OIaa1xpaxaHmNWqHQlvzKD7v25qHw1Jf87CorzWNjlGhrXk4fF/y qGuT+pKH5fVQ9Uyf3FD1zNY3Ra9V7J93cFFGEv1IiR9XIpgWinAoenZgtDoHWCGJsQYzyru9ladT y1hs9W3xF0dT/BjC+ab4e7spfszXpbb4Dc5esS1+Hbhkh+KHbX1f/LAw9a7keNOLbfHD4XVf/FDL 1trH/960tQ/2RG3ts0C6qX1DfUCBg4O37G4osOXlqRDBGyq1tY8/3tTaz3hjAWYSMJw4CE2PpVv7 vIW6dhtw3Fux6YjOMbSEC1iuY9MSg2NoCUIKoxlawqHMgm1awmFB8K5pCTg86doSjpe3fhvA4dz6 1LQEHElR7QkHQZOrPQErdf2Te8DxGzT0BOgmpZumIJyYbGqaggwGNbUpYEWnKxVMzIZ2J4AjaVeb AmdMlUiMVZjJie9yUlTC0TfFdh/oHEMrICzYOLTCYA+tYLGEQeuhFSwfCW3TCvhN1OwD7HW6tgKs aOrqy5JRalohx/jaCuyL1PUCjJhi0wugH23bC6Ab67rPb1ic/ExqesGS1M7UXoAVbd2RMC3rY9ML cCTlul6waJTcRK0EM8KH/dUIG5xlOMeJhHqO1z9gpfxBcs8OZNXBUTcz4o2P2RKfEksSOAgTww5o cw4c1lTDKI5PORkFZ8qCaorNqwnb2MfYYP5J51KGxTJgj0t5L86xlB2WH0fGtGU/ZEu7/Ax/rgp/ KiOVswRTS4W/6yaEmYRMNnVcMHlb2KOvNNcvLMdfijB0MaiDzwssO1CBGduXWCtGIsxkoZ7ks9T8 CYVpl1XDeWlLRdrSq86Vowp1e4PDzoVVB8XZcb8rQYQiQFlZKjA4m+mc01QWGxvquaUUJjtUcXBz 8+7P5aZNNrplOeQezqEMllicjGSyxUdQ251fEu/kHIxlKGZYX+k7m8vTmOIwfLlgLCT21cEIzB2r isvisoUEkcvam9wdBT1nhh04NzB2CSUxlmBG+vrtcn2/e/noo889/nQ2zAZHJvSwfXwR8lSZYJ7N XRyo+e9yQ3wR0YAvXUToeeZ7n6vkc3sal3OTR2DSbpa0Wf4MpkCscYu7wNx+KXM+SHIyPRd9z9zP MndHMEcvj2EXiNMXFIvD8gLSGrsOP6mkwyxpP18jxN+iboS5wDgsfprz4oZtA33SAf764d31dmc2 D398zBdv7w7dnOHrBOeC4VW+PcKizR/f33x14CXPFwrjl/a+1ifo5d4o9J6I8612mwux3YXN3duH 7c5txKdt3Pwl/v6Xrwgf7vi3c50tALOSHfDBK0U+AOlR6PsHFuj2ULx7HC8FjS4g9/MUD9ya8JbZ AM0ne/EehjcAPt3zjljqh29flCpJ0/Mc7dT1i7GJDwct4hHXL1YvMy3d45U0YY+pWWBqJpnmj5kW 8RimB69WhzbAHs/whqXtmfL/V1xUdhZ+6iKV+LrSjhCPYUrHtTrvvXqCp5sF91N4fB41LeAxNJdX JMUHQV7jONt7PGkWfbKPUEv4/GgRjyG6fKuZieJwp+IETz97fz55lVl4NoAHaP4Pt4gb0Q0KZW5k c3RyZWFtDQplbmRvYmoNCjM3IDAgb2JqDQo8PC9UeXBlL1BhZ2UvUGFyZW50IDIgMCBSL1Jlc291 cmNlczw8L0V4dEdTdGF0ZTw8L0dTNSA1IDAgUj4+L0ZvbnQ8PC9GMSA2IDAgUi9GNCAyNiAwIFI+ Pi9Qcm9jU2V0Wy9QREYvVGV4dC9JbWFnZUIvSW1hZ2VDL0ltYWdlSV0gPj4vTWVkaWFCb3hbIDAg MCA3MjAgNTQwXSAvQ29udGVudHMgMzggMCBSL0dyb3VwPDwvVHlwZS9Hcm91cC9TL1RyYW5zcGFy ZW5jeS9DUy9EZXZpY2VSR0I+Pi9UYWJzL1MvU3RydWN0UGFyZW50cyA3Pj4NCmVuZG9iag0KMzgg MCBvYmoNCjw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGggMjMzNj4+DQpzdHJlYW0NCniclVld bx25DX034P+gx3sDeCLqW0WaopvdDVo0QJukKIpsH4JsPlo42TbZon+/51CjuRp7PNd+sUGORB2R PBSlax7/2Tx58vjFsz98b+zTp+a775+Z/1xeWGMna604Z7PJzpoYrPn6/vLib4/Ml8uLx89fRfPx 2+WFmI/LYGuT2LAa/eHR5cVfLi/MDy+eGTOsJI//9PbLR3P48PXqx5fHednvXsPwj2JCmGwK5vUH modtI8ZJnWowIZYpVvP6M9fUhZ9fXrw5/P2Y4uHtp7fXv3w+/sO8/uPlxQ8wRXN9vs9uCmWc/+Zg hrG3ALoB02KkwEhYG/npsGfFb1mpccppbeX3v315lHR4tWcrbNgKJU35JqLjnpW4YSVahC89wDlp NmInDxtTxGQLHGK+IiZe3FSK8b5MSIaKD1JNrpPPdUkJZ/6H4E3O0USKtIHZLxFMwPmXOWvj1Qao vJdSUlbp5EOZSkJWyJTajjWPhenEXObwdwjLbkDKVnBTnmIZDUNNU7v+rHv+FEkTdu8FiL2pafKl GqllynHx56Yrz87c8qLYu9zYtyixTsmIi5OkG657c3i2t02RLXOpTm40d8ZX4vacFV2Ygu9bFuuY 2Pdy1rmZm87y55wVU5rSHd4yV0CCosb0eLmbabLF/VgAeOW5+6Sa9AKg9dOBZ0hXZwtL0mf6zyEa s3x9ktMUhfIyoSs+YQzSzGIQP4VmRF2Jk2OCK69PI+DU7JoishxTAf9HCROITQn1h5J+85N4846D wyRZFXAlJR8h6T9KpaiUsg52wkW5g3kDs6xxuG7WOEPstMi0B7k2KFxLMGtBgo1J6EgIFAqs1jfB WkUkoxfeqWc+bAWgF88WxyFppQqT7TO9DIxdvl7kUqfY9tTGdxkr4ZieKskdp+ibCQ2UoHYmdXkf UXD6tFDCM9GrIhjHODsVGF5I+gn1w3EvVJSgCrCGEpO65Mm3qeJVgpKD4Rff4COc1ycF8Ka2n3lK 9X3EbBGKavpiNfBrx4KdtXToUKHAlL4LSIVYRjfsBCFvsEDwz+cTC2b5+iRbuuN6mNAVJxZozY0D CwSp5MLAAkEqej+wgAro5+Si5HrqUchhIIGAUy53ElCqqZNAkPOuDCTgBpwMLCBglwcWCP7NI2aL +Bddp4EAoJMFDCTk44kH3CsW7NuAFJJZ+2EnBOVOHrjKdDnxoMknHrjMVBiIsCgGJnjPsjgwwcE7 cWSC80zfgQlQWL9QARL23tMPUtt7z04s7cpCBUg1L1RASXZ1pAJ24NxIBSB2ZaQCzp15xGzRK6a+ mldMHQyknEYuYLOuLlyAFLJZO2InEKfuI2aPv0WSHq5BgzK7L5Jt5USOWV7IEbGmlIEcJ8WJHOgc ArLrRI6IbAvjERFQInwYyAGFd8sRASnahR0RnZqvAzsitxA7OyJcimvEnOqQYh6PCOwAawzsAOKY ZWBHRC9n68AOKIpb2MF2WRZ2YG825IEdUOCI7uyAlNNySsyOuDsorl/FeluC4ywOnJjlhRMe3LNl 4MRJceJE4PVlPB08NthK0TwCiZXcyAkovEjnBKRQlzREYtk5zVuWQhG1JGsGexAkxs4JSDGVgRPY QbRx4AQQx+QGTgSL1cbjITA3XedEAEC7EBR7s74MnIAi5tA5ASnHZNaO2HG/3CpOggSytFd52n9u 9xx014FtiTraC9tJKOJcU4XJC1qCyr6HgoPAXY9uPOZuBrkWeAg0M5ZuVLutXnn0RbUpcBenlOgc vYtSKrgHWqFL3s2Dqyowm7bg02C1ufFWqz2/iY4VvaXQcDvnCM5xpUC9Ll2IxdfMbnhWMLuq1npK pd1oCxerbEj1fuuafctkp4LJJtqKUEKpXPthJxJuPKnpLCSNz0BR6T3BpdChTGouqs8LkqT5vDlP PPsdnxNXbTHgmITMQT5JaFZ0m86rXq1k3g9pNs5msWJUBY5FCBm1HzntvUpJhaoppUNh3UfOpSUd qy6iJFWl1q4Sf274W9mTIizXDlTrG9IIO1/nBpYK3BqI3hEL8jyqVChJ+yYNiWiDBqZog8Zrko7M 0ax9sOP//oQRoyJi/mctRMySQNqGOTeQwpBib/FZTr0GIvQuNbRrg0cdlWZCG0CPS5LXfAuIFhhO mz51RfaqQJgDCy8v2V4pgG+1qGQ136jgrT455iEl1yTLwY7NJ6V2GpKmttnKdYaPo0Z34HxTFK1j QJtzV7DMET4ZW9pmEgMQ2Io5lfxsPzM7qMBZQeO5jTUrL+x4PtyqQXQ5AoprPOnMY7ToZZbZUtup iUzOTr3u5qDo7cQjKV1vkTiIdRQpVdqRXjRDTvmPc1DvAV6TSxVWGxweEDwYbfvstRmFlFUorfuE XLwyAiSlqeBU0iNVo0GpdTARBEi1meobmGtmnleOjDLBtnaCCl7CvCZiBLGl5TFvkplupjAbz9oX MeWJJJOiOpSoRyfshCHOd/z311fPb7wrhZvvSoTNvpkeKDefKZ9Yl93TvTfHtP9qRSL7lfVzj5j5 AdglCY8vl07WiTjsIi77iAXBl7XNM4jrAxAHtPR8JQQJwglw2gPs7T7ggC6END6Z3Mfr5SF4+QSH +DH5B8B5F7DbB4weSg+WweYZxOffrNgPwK24v6MeNpN//fLz++OVO3z759ej5MP7n+94Zyer4jiV r6koonyX+t1v7prEh471pFsPWVsAU2WtawAfmZdHCYdX5niVD5/efjtehYP59VgOv5h///d45Q/f PvHvrHp203TzLM6RcMO7baWAWrH14L9GpV3BOPbFt493DWb1CqvBk8mrp/v1MyIK/Gr0fozDA97C eYGQ9gAWG0f5MGltC5rs/5zgt35PcOBlyiuL93iZ9OlcYs5IWf8k3ELqziDNdyMdLd4HaTn7Rh6i +jRoQ3ITqT+DtN716p5XFu+BNJx/zUdrzwqN65i7BTTsAw1b7/n6dJpGg/fB6fYT9hYx2UPxFoFG Gk3WghvdsC6WzgDf+l0u4KaIfmU0eR/kD6FaED0Hx0o3eDueAb1FteD4ertfOm9bOss01jLcRgWn oQzuje3Hip8Oedf8FtP4SpRWBu8D9CzR5gKN/YdSNoCWXfNbRIuCLnFl8A6g/weOXRdUDQplbmRz dHJlYW0NCmVuZG9iag0KMzkgMCBvYmoNCjw8L1R5cGUvUGFnZS9QYXJlbnQgMiAwIFIvUmVzb3Vy Y2VzPDwvRXh0R1N0YXRlPDwvR1M1IDUgMCBSPj4vRm9udDw8L0YxIDYgMCBSL0Y0IDI2IDAgUj4+ L1Byb2NTZXRbL1BERi9UZXh0L0ltYWdlQi9JbWFnZUMvSW1hZ2VJXSA+Pi9NZWRpYUJveFsgMCAw IDcyMCA1NDBdIC9Db250ZW50cyA0MCAwIFIvR3JvdXA8PC9UeXBlL0dyb3VwL1MvVHJhbnNwYXJl bmN5L0NTL0RldmljZVJHQj4+L1RhYnMvUy9TdHJ1Y3RQYXJlbnRzIDg+Pg0KZW5kb2JqDQo0MCAw IG9iag0KPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCAyMTcyPj4NCnN0cmVhbQ0KeJyVWV2P XLcNfV9g/4MedwOsLOpbgGug2SRGiwZobQNFYOfBMGIHxWyKug/9+z2Hurqj2b17Z/xigxyJOqR4 SF6tefF38/Lli5/v//KDca9eme9/uDf/ub5yxlnnnHjviinemRSd+frb9dU/vzN/XF+9eP02mS// vb4S82Vd7FwWF09Wf/7u+uof11fmx5/vjZlOkhd/+/jHF3Pz+evdT29ul2O/fwfDP4mJ0boczbvP NA/bRowPOMGbmKpNzbx74Jl68Ovrq/c3v9zmePPx94+Hf9/e+ZuH21/Nu79eX/0IczQ5bITqbcqz jfc3Zlr7BKSfcK1GGoz4UyMfbvashA0r0SVb46mVP//p/sPtnqG4Zag5K9/gUlpsOBtgwiaX8W+J Yr4imkG8rdWEUC2uEZaLNFOaDaWtl+nN/xB26z1N5EQb2P0G1wA0/zJnbbzdAJX3kkHqSSKEWG3N JhSxuXusGShMBGYhl39CMN/uRaFsXWwuNtXZMNQ0tRvPuhdPkWzhfRAgDqZlG2oz0qotaY3nZijP 7tyKYnsuisNDSc1mIz5ZyY8i9/7mfs9LcVvmcrN+NncmVCJ7sUo+2hiGx+I8SsBlsTq3cytW4s8F K+Vs8zPRMndA0qJmx5vdRJMt8qcKwCeRuyTTZNC/m2HMPLiGlPUOvmbzwCB6XMkiH45ytkkorxuG 4nesQaqhsupPsRvReKLuW8TzcFyByBbfFcnGqgpcQpJoQW5KqEGU9LdgJZhPXBytFFUgnpRCgqT/ UapVpVx0sRceSg8WBxZZL+PQrXGHOLvKtAe5dSg8S7BrRQLHJA4kBAoFThtOsF4RyRyFTxqZz1u3 sBZQc0xaacJke2CAAW/Ih1WuzabuTl8/ZByC/mobuZ1sCt2E3pGgdGaN9lhRE2ppVwjXUhGN5xV7 FXizkPQnlA9PN6hAo6ECrKHEpK7Fhr5VgkpQcjFCEjp83OThqADe3P1ZtrQwViwWoWhmHNYifx1Y 4FnPhAEVCmwZXjTthKdh2Il/fo4F4huxrixY5MNRLsRxmDYMxZEFEgI5eWSB+Gp9mlggPjB2RxZQ 4cJgASUvI/coIRGOLBBY9XWwgFIrgwWsB75NLKAH3k80IGJfJxoIit6yYrEYNKjjtKABH2AglTwR gc76NohAKRZzGoidiyhbREBkQ5mI0OUjEUBT8TMTVsVEBfa+NFMBdPZxpgLKQQgzFVxn75JgkPya fhBKnKmAuubLSgVILa9UQN1BgCcqAIGXmQoA7MtMBTi2rFgsQpH8ygVsw88DDKSeDwMqfPV15QKk mM1pHHau4Dh8pBLwb5WszTXOvEhk28SLRV55kXDtUideHBVHXmByiHDqyIsEJ+PcHSJKxAkvoAh+ 7Q6QkltTMWFQC23iRaILafAi4b4x/y9JDimVuTvAA5wx8QKIUy+NYwtGOdcmXkBRFybwNEzLspIU vrlYJl5AgRY9eAGp5LVBLIHYuZS2XMoYS9DJUj1SYpFXSgRcuasTJY6KIyUiGm2cu0OAg4MBugLc zoMjmktQBJFBCUixrZwAt12vNEuWQpFyHpwIyOiUBicgpTxzAh4klyZOAHEarUq3RIfT5vYQmZsr JyIAupUT8M2FOnECilTi4ASkklZOLIF4PvzezWWJXdHRk8ZzH/iFg85MxMgK4gusP/A/Jw4BB+5g 9uNzU2xoyyVwEcIVkERI6If+nRShwIiopSBw2EmQ0QRjV8CHrkDmUvKiEs+CpEEbk4YuRtSz2IY9 tNVUyqKS4lXYn7oDvvajWj+q6fcQPOgJEVDDRMF2SoRe4agQGqxsXyHpBEipdSnkjqUpcCiYNYxO l7I5jcLODciTDk3QmLgCvmP6NYha9MxDxShgpA8a9Zj7vaDLYoN2xH4LXIOLifzeVRNJB8HgGCfa QATURiDhF0XtCjBWcFkcDZHOcIm/IX6Uej3WxcjQkBgeStJUQuoLsiWrkNRxYSj7QSv61HOm1X6y hsqHtkxJVHCkJngUdkj4RKFU9aMsJhVa7NYrc9GDJY4/V/Y+/lzMHIKdCxjPFmAR4Wv2M2TR9QLT /JLbfIUA4oB5zfWuXPJ6D2MyiuymuPealvEqOh3+uKtotkdclitqN9ahyF0RSPdIEgYOxeCzcFKk 0AdUyphKAsZdPqtIZ1LTxIvSadTcMhjRA+YrDIt0Dzo4zqOLojKcoeYhoTIFnZRjb+4BX1/gUuTn TZeydNuFAacicrG24nXxHIOd0Ie5+hBtaP1hQVsnLg5tzaMY9zxJSBAmAotNDxxKQe3VaKR9Qrlt eueu91/kRYxT3qfgO5N6N+bVqYxEo+C6VFWQnvL9a4inJqa1/tR6hmNag0HWI0qd6MQtnUh99CGm UhR3x5nQAkrQhF+GAvaE0mGzP2fL7kP/eVrRAUmbQkdSmQxKAR5fmVe62JsT93cCH5fv+d8Od68f PSHFx09IKesUhh7HIvfoLfGl8yW+2nsUTPsPVJhjNK5H6+deGfM+dnj+6C0ULGUXx0FuOYGo8y7q 8gT1U7tIdlzabPcM8voNUV/qpyAXkEwr6rKLuu3H2seok/Jkcx9xcN+CmJOIPi2gba+A/R7gIGcA J4wzJybP4D37TuWlaeOCScyF+ph0x8f4rC9Ksv+iHLaep1gh+DowWbzgeSrEC5FKcWzcj5H6M0jT 80hni5cgffa5+UhhbQUetccfgab+4PfhJuxa33pbTk10gljtXQKznoWJRhxqr8t5A2fcNd+2LEph tZ0MXgA0urM33/pHCwaRvAU075qXDYscauXE4CVAz5NpAYr/XNwAmnbNb5FpAToZvAToBVzqYywK H2bFx1wqZ/6OtMklXzmzzRYvQXqWSwtSECAuHH1/U5/5A533OmGcrD3jyhbbFldOzDzx4v/W3KGI DQplbmRzdHJlYW0NCmVuZG9iag0KNDEgMCBvYmoNCjw8L1R5cGUvUGFnZS9QYXJlbnQgMiAwIFIv UmVzb3VyY2VzPDwvRXh0R1N0YXRlPDwvR1M1IDUgMCBSPj4vRm9udDw8L0YxIDYgMCBSL0Y0IDI2 IDAgUj4+L1Byb2NTZXRbL1BERi9UZXh0L0ltYWdlQi9JbWFnZUMvSW1hZ2VJXSA+Pi9NZWRpYUJv eFsgMCAwIDcyMCA1NDBdIC9Db250ZW50cyA0MiAwIFIvR3JvdXA8PC9UeXBlL0dyb3VwL1MvVHJh bnNwYXJlbmN5L0NTL0RldmljZVJHQj4+L1RhYnMvUy9TdHJ1Y3RQYXJlbnRzIDk+Pg0KZW5kb2Jq DQo0MiAwIG9iag0KPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCAxODg5Pj4NCnN0cmVhbQ0K eJyVWMuOFTcQ3Y80/+DlEAnj8tsSQQqQoLykBEbKArKIEBBFQ6SQRX4/55TbfX2Hnu5hM6Oqax/X 61TZbR79Yh4/fvTzs++fG/fkiXn6/Jn55/LCGWedc+K9K6Z4Z1J05tO7y4vfvjJ/X148evEqmQ// Xl6I+bAudi6Li2er3391efHr5YX59udnxkwnyaOf/vj7g7l6/+nhdy8fLMc+vQbwd2JitC5Hc/2e 8MA2YnystkQTU7WpmeuPPFMPfnF58foq/PLjc/Pgd3P9w+XFt9cbx/nphAEZUrAlz5Cvr95cffP1 yweSrl69ebCHFzbwYhEb6jnerlFxAXE2AMMml/G3RDGf4FkQb2s1IVSLkDb8IM2UZkNpa2C9+Q8h sN4TIidiYPdLhATm/GUOMV5tGJX2EiP1LCkBSanZBDieu8daDcKksCK4/O3rq29e7UUhb6UmF5vq DAw1oXbjWfbiKZItvA8Ci4NpGalqRhqqKq3x3Azl4c6tKNa7ojg8lNRsNuKTlXwrcq+vnu152bbQ crN+RjuIlLi9UCUfbQzDYXEebLxfqI52boVK7mwFw7uUs813BMs8hCUtanG83K0z2eoBqcLgs8jd p9Bk0F97kAfLUKzeVbaTj4yfRzYW+eYkZ5uE8rphKP7EGhSZwyL+FDuIhhLd1yKUN6cVCGrxXZFs rKpA/JNEC1pTQvehpL8FK8G85eJopagCoaQUEiT9R6lWlXLRxV54KD1YHFhkzcNNR+MOcXaViQe5 dVN4lmDXagkckzgsoaFQ4LThBDsVLZmj8FYj834rAaN19jxORStNWGwfGWXYOOSbVa7Npu5TXz9k nIRRZxupnWwKHUITJeicWUM+VtSEVtoVwrVUROOZZ68C0wtJf0L38PSFihpVAdZQYlHXYkPfKkEl KLkYcQndfKTz5qSAvbn7s2xpYaxYEKFoZhzWIn8dtsCzXg7DVCiwZXgBqdKWOQw7SUhrE0kl4G+V rA0lakKW4CWeUE+0WOSVFhjCUepEi5PiRAs0y5j8RIsEt+JMi4iwII4nWkAR/EoLSIk4vRgTZlNo Ey0SXUiDFkmsx/VjKXJIqcy0gAc4Y+IFLE69HMYWTC/XJmJAUb0fxOAFQWQ1pmE4l4kZUKAtDWZA KnllxhKInaSMcTpaMSic6okPi7zyIWQbXZ0IcVKcGBHRYeLMiAAHQ5gYEVB6Pk6MgCLAx6XOIMXm RxmGAFfaRAkokpahFnCI1qc0KAEpoV5OlIAHyaWJErA4DXrqluhw2kyJyNr0gxMRBjoZxsA3F+rE CShSiYMTkErK5jwQO+EvnzUmSdmiGfrGsz/2ix0yGZpnZdxQAdIghOStVpGgwnDp9hijoS2Z4KJI 55P1ZcCgZAMIXjTwAa1dYQDfcTkpqBC9BHJMRJV8VinTCLf0m3Wx48gmFmYKLjqcNQGDwXWpatqQ WZv8fBSsQ7bpQrc4YHQEtbasMjhDBa9SkLgfw5fF5Jomumr9qS04tis8712OHZISi+MsDjuJqEsi gs4oXiijxk2qENz38pUadHAh1HHxpBdsTrb5JfZc5NHQUUZgdcfAFuD2dCFmgekKNHdRtKyKmLWF B66P3E0JDZJSr2pdzN2JZyhWVCn34VSSSlGzJBXWqfGEXOzPUe1vuSt0rQ9oIqsiixovWWcTeEoJ PU0Y06BS8x0fRlIhenEDOC5H/Dk3cx6Fnci3+XKU8JZjLFj+2sAjSsuxzTQO/BsqIg3kXb+nIMXM 6a85GSngokKqg8HSYTQSoWi6CMPbRum4XfasEMqZnPf8RwmHU2IR5bpUHBUhaJVU/ixa9r1mKEl/ kmQNEj1IHauHmMY1eoAwxq7ItqHaM+LX5dIhYL3hjyWrIF2SLrkFPRE2ZN6hjUJH/RnD7DwKd6fA u8+6ELeiSAOHul6P0OPoj0drRvkx7CWsXWex2jNn2pdGHhLiXXp5tT7Uy1Jvgw2JzKmKW8tQhKo1 ywEGic0XEicnJEnKBt+vqVCARFTU/nPr1OivgCQqOSUDPZAO5XvhDOOErVYV5D6NDWnIvFPTeg5l x2iyoBOGMl/vpTMjdXhRYnZyEJsXqbF4DsNOIsbb5t3Nwxe3XtPx9mtaWYe3HLDx79YnjsfOF/9k 7wuH33+re95qztAPHjk+fIHtAnZ4HpJYropOi+OuxXHfYimZZT5jHlicvsDiiIpldZfGLK8W512L t75VxLB8BJmBQnq6C1T2Xcclg+NzgjzwvH5JnfnAzuOTPsDu6Xk7qC5wDn14xty3OLijV78XHRm8 5OGuoE/zh/zKmPV9Lgff52QLEV2Fw3VCvMdjP/h7WiroJ7ho3bbUH1i69SlxsXRGvI+l8fCrE0ar YxfTkdtx18904cDQtPnhyfUbxAR4D0PzYUid9nAPbuFq2OspTpDn4V+uW9PaA1fKZhazDbdg9r04 /Mg37iRNp8XtwkgHRm596Iu+f4ucEO8R73hINt5Q+CwI+pWmO5/viHdkoOr52n1X4hYbIx5Y5RbM Z178D35eyxQNCmVuZHN0cmVhbQ0KZW5kb2JqDQo0MyAwIG9iag0KPDwvVHlwZS9QYWdlL1BhcmVu dCAyIDAgUi9SZXNvdXJjZXM8PC9FeHRHU3RhdGU8PC9HUzUgNSAwIFI+Pi9Gb250PDwvRjEgNiAw IFIvRjQgMjYgMCBSPj4vUHJvY1NldFsvUERGL1RleHQvSW1hZ2VCL0ltYWdlQy9JbWFnZUldID4+ L01lZGlhQm94WyAwIDAgNzIwIDU0MF0gL0NvbnRlbnRzIDQ0IDAgUi9Hcm91cDw8L1R5cGUvR3Jv dXAvUy9UcmFuc3BhcmVuY3kvQ1MvRGV2aWNlUkdCPj4vVGFicy9TL1N0cnVjdFBhcmVudHMgMTA+ Pg0KZW5kb2JqDQo0NCAwIG9iag0KPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCAxOTAwPj4N CnN0cmVhbQ0KeJyVWMuOHLcO3Q8w/6DlOIBlUdQTcAxcjxMjDwOJPcBd2HcRDGIbF+MAcRb5/ZxD VVVXz9RUdzbdIEtFHVI8JFXu2S/u+fNnb65/eOXCixfu5atr9+flRXDBhxAkxlBdjcHlFNzX3y8v /vuN++Py4tnrd9l9+uvyQtynZXEIRUI6Wv3xm8uLXy8v3Hdvrp1b7STPfv7tj0/u6uPXp9+/fTJt +/IGhr8Xl5IPJbmbjzQP205czM1Xl/Cbu7v5wi1t39eXF++v9JefXrkn/3M3P15efHezsVtcbTBb 1KK+xrXJ91cfrvas6JaVWj1cPrLyn2+vPzzZM5Q2DKUiXo/t7LqUJxvBK0z4HAp+axL3FXFRib41 p9oIruOBdFe719qXU4nubwTQx0gTJdMG3n6LgALN/91JG+82QJW9U5V2dKKamm8FARRfhseWSsIj ZTpx+S2C+W4vCnXzYKvPbW0YaprajWfbi6dI8fBeBYjV9eK1dScdKZmXeG6G8uSbW1Hsj0Vx9lBy 98VJzF7Kvci9v7re81LClrnSfVybOxEqkb1Y5Zh80tljCRFcPi9Wp97cipXEU8HKpfjySLTcUyDp ybLj7W6iyRb5cwPgo8idk2ky03+YYcwiuIaUjQG+FveFQYw4kkm+O8jFZ6G8vDArPmMNUi1gER+l YcTiiQLuEc+7wwpEFpXPFNmnZgocQpbkQW5KqEGU7Jl6UXfLxclLNQXiSUkzJPuj1JpJpdriKNyU HkwOTLIdxt2wxjck+EWmPch9QOFegrcWJHBM0oyEQKHAbrMTrFdEso7CrUXm49YpLAXUHZJWujDZ vjDAgDfLd4vcus/DnbF+lrEJGqXv5Hb2WYcJOyNB6SwW7XlFy6ilQyFcS0VykUccTeDJQrJHKB+R blDRkinAGkpM6la9jldFTYKSixESHfBxkncHBfCW4c/0Std5xWQRiu7mzXri0xkLPBuZMEOFAq/M XkBqxLIOw078y1JEclX8NilWUNKaEZk7tAMjJnlhRFYkblsx4qA4MALVMuW4YkSGW2nNiISwII4H RkChcWEEpEw7Iw8zmpP2FSMyXcgzI7L4iOFlym9Iua4ZAQ+wx4oSQJxHOsyvoH2FvuIEFC3GmROc EEQWMB3dua5IAQXK0kwKSLUspJgCsXMocz+dSzHYm9uBD5O88EGLT6GtCHFQHBiRUFzSmhEKB1VX jFCkXkwrRkCh8HHKM0ipxzkNVeFKX1ECimxpaAmsycecZ0pAysiXAyXgQQ55RQkgzjM97ZUUsNua Eom5GWdOJAAMMoOBb0HbihNQ5JpmTkCqubjjQOyEv03N7Pe7p6/vzU/p/vwUE3sXCl3xiN29kfh5 iDW+2GtCfX86i5lhWFs/0dVi2MeOQzue6HMBj7ADyaVjB6JOe6ijPEC9Ybdz7lvbPYE8/puoY96v JAbn4QPqsot6a3aI7AL1niHNL3cNpROHhlaDqrW2ecL1/C9cT2jNdiGwNnym62UfMWq1B7XXNk8g rg+GJ0FFRA5EzI3JercKK4JTtjKbLVBLfMehsScZ1SWjiyJeowp9HjZQlckp5CRnRNRpjicauJCv lDx2Ua+z3IaMOivFxvyIeiMmsERAsMq8LM0krBmKJqFNSEmcDiilafFaYVirFxkbDyTsANH87WMF mARPoiLjFwUnIniDhkFJRr2oze4Ow9FunYDWyBbxuOdbKLs9BYWOg/J42YptPUpp6JzblU7bLCtI R4sNLrhWV6VhwmcJ7QyLnQ/2YylOk4ufhxmkhML7qONUhUOqIrjmpPJ+kO2lEIfCEoD3esyBlMYl H69TiCBbiey4t9PaZIrAx5HeK67ghBFGIym8h9hiwBODN7ZpRlz4p3koiu/ZkNZF0UwW4qg8BEXG YR6lVJtJY4SgNR2KyMXN+iHTE6w4CsFO/PsDTmC8wUV9xNz6d5qCUy2Id1SouV6VucoOnhLdiKBi XwYomIkjdcIYoFKmkwdaZPRPjZadYUxUatMtFcJxzKJEaQjZaDGmeB3jIyccWInVkl6LSW1I2Px2 QEuDa7EOrNiumXttTErM32QUmAa7ZMXKkHPgE4bQ8jqb1IbUJvvRLkokBQYsGh9pj0M4DsHjh6Dz zRrtn7cSy24ZoU88bO2VR2yhz9xHcbNtYxKsdvpWweIU+oQkYvqMkv5lHFimmT6FPsk4QdpdFMhR KkDAxNTphafOB6QEJ/RMH2xlN0VM9hjR1G7jZ8KQlpo9C5Z1xI8rGW2NckpoceAfQ3NiEkfD2mbZ TAC7o8BJjFclzECh2hAHKcVhvVhthiJy1iosAZTg5HEMdmL/6NfEpTMKTiM+GJZ4/w+IFe/ssv/N Tre+ITKXef86mD3nA4DqmXClWhKb3RXSeALp1ufFCena4jlI88mvK/z+SSZaH1+Q5vFN5cOV7pov WxY77/xrg+cArSeBIg0NqDLPHgJNu+bblkVeD44MngP05Me92MclCX91C2je/bK89X3PWtCRwTOA ptOcmoAis4psAC275jc/yQ+gK4OPAP0Hc8bQYQ0KZW5kc3RyZWFtDQplbmRvYmoNCjQ1IDAgb2Jq DQo8PC9UeXBlL1BhZ2UvUGFyZW50IDIgMCBSL1Jlc291cmNlczw8L0V4dEdTdGF0ZTw8L0dTNSA1 IDAgUj4+L0ZvbnQ8PC9GMSA2IDAgUi9GNCAyNiAwIFI+Pi9Qcm9jU2V0Wy9QREYvVGV4dC9JbWFn ZUIvSW1hZ2VDL0ltYWdlSV0gPj4vTWVkaWFCb3hbIDAgMCA3MjAgNTQwXSAvQ29udGVudHMgNDYg MCBSL0dyb3VwPDwvVHlwZS9Hcm91cC9TL1RyYW5zcGFyZW5jeS9DUy9EZXZpY2VSR0I+Pi9UYWJz L1MvU3RydWN0UGFyZW50cyAxMT4+DQplbmRvYmoNCjQ2IDAgb2JqDQo8PC9GaWx0ZXIvRmxhdGVE ZWNvZGUvTGVuZ3RoIDIxODA+Pg0Kc3RyZWFtDQp4nJVZTY8cuQ29DzD/QceeBSyLoj4Bx0Ds3TUS ZIHEHiAHO4dgsvYiaG8Q5xDk3+eRkqrUMzVVvZcZkKWiHik+kqo2L/9sXr16+dPbP3xv3OvX5s33 b82/b2+ccdY5R967bLJ3JgZnvv18e/PX78yvtzcv332I5st/bm/IfFkWO5fIhYvVn7+7vfnL7Y35 4ae3xkw70cs//f3XL+b0+duLH9/f9W3f3MPwj2RCsC4Fc/9ZzMO2IeMj2WhCLDZWc/9VttR9393e fDy9+dcdn/53R/70D3P3N3P/x9ubH+43NvXTPsMwR2dLmS1/PH067VnhLSspWH9p5Pe/e39H6fTh 092esbBhLKRy6evH065bsdtwlmHCRpfwNwcy3xAiJi/+MReLo6l4QNXkajnX5YC8+S9iab0XEymK Dbz9HrEFmn+aQxsfNkClvQOmcnG4HIotyXAmm5rHmlUkpyuZJcsfENEPe1HIm8eSbSyzYajF1G48 y148iZKF90xAzKYmy6UaqsXmuMRzM5SHb25FsT4XxeEhxWqTIR8tpUeR+3h6u+cluS1zqSKPJ3MH oSLai1X0wQYeHpPzoPV1sTp6cytW5I+CFVOy6ZlomRdAUoNmx/vdRKOtAhALAF9E7ppMo0H/ZkZi 5sE1pCx50KuYrxJEr0ei8nmVsyUWeXlhKH7BGqSawyJmQfN1OQnyxfqoVvoKz5ZDU0Qbiiocm0jB gtwieVKpP0P8H2RxsJShQNUr+pijSjWrVIpGwldd7ME+Vg9w1OdJkeXtczMnr+C4+4puEYrYwMhu 7OXxAAMppwFGsMJZbDj8gBQEzByIBw3O562DGDV0BApB5SyR84JtyOdVdpa6M/2FocAO6Jm2ApEQ PjYj7YwIDmq0xwqHKtBO0aurogBe79VVkZrQH+UgPoiiBCgQv6yPJakh1aQSyeIisZXFiAc3B3CS 50nh5O1zMyevwLG+oluEIrbtZTe8hscDDKSWCgMqfMWGww1IQcDMcdiJflqqSMyMv4WSVpQwUyJG oJoo0eWFEhEnTmWixKpYKYFyGeDUSokIJwNPlAgoqBeUgII7CZBmkKJbshDDg+M6USKKC3FQAkOL xyDT81tGmJwnSsAD7DFRAohjpokSEf3L1YkSUJROAtkNIwIt/IRvLuSJElCgLg1KQMopmstA7BxK vqQEmn+KZaVElxdKMI7clYkSq2KlRPA24NFKCYaDgwG6ArROgyOaS1Aw0aAEpFAXToDWrhWZnqVQ oMgPTjAyOsbBCUgxzZyAB9HFiRNAHJOfOBEcdqsTJ4Lk5sKJAIBu4QR8c1wmTkARwdjuB6QcF070 QOyEvzxpDYTjRmg8qmLQssIk7hquLNQ/i4Jshac1CnPP8go6HhDy6AxiAynn4QjySjogkhCJ5tnJ QnklxbYLOsOQS5OlriYdYjyCSSqI/xA07ZalWvrVkFcJHCBMyKlJoS+eFYoVHYzaxg2JpLdXf2tb kZyUS8/I60UBUOKNNAhIYgBSLjoZNUerprlYA3CcGS40GsqqTzEYXgZl50zqqFMyNrCrMpWwOK1N loprsSHLmjRUML9IflQJi54P9it6W2gu/tLMoNAxvPfcThXnK7Mr6r2+JNNP1JecbwpNAE5sC/5B IhXwugio6py8lJOHvjaowsljL95zIoXhGkuSTFm6WJqYwmvbYNzK6h/Hpki2RkWaF0VRmQRHlkNg ZFwMKuWiUquPYo2bwsviomSX9ASpL0LwfPz9GFlRsaUda6S1JIUekqyhO4tC5xjOLBkqRQmXSoD3 KCB16QlBxxs999YTgra1lQwRJYG95qRrTQLpmluSknQYjY1ITYhKBu3SIkopkqINK9KpZXVSqTQJ mz80aKExrHVkweWKulda8ZesDZr4vVcFvbUqculhJIHTbI4qlSaVbt/La0qFrLFzLdkR+ssQ7ISe npQj1DabcstuaocQ5LC55j5kBhdlR8bcXlqby3r6WsHGsBScTgeMa6XvZlguvlxrP4RA7SzF7qJA jooCBAySOrhO4fzlgVAC9a/owKErqyp80MeIK1ftrQEdKBR95jTrBH8ltdXKqUDzDX+bCIIksVes ZchqwsntH4K0mVIFfnBZOxSk4Jv1pLUZCi+NJEkJEAlOXsZg5xTGFefn84t3j27VKLG4nvvLzyYx aUmTryfoRI++m7xyPvvXe99L+Mm9/ekO2WklXXc4uPP4sO/D5Wcf5BguZZyrJJJaF9RhF3Xc/9rg S9AKNdk8QJx+C+JQhIsEQqF3LYjTLuJ8gDhqHs42DxCX34gYKvmsE8KKOO8irkeIsxS/2eY+YnZz a+3DoZcOlNaJv8vnVUavoWniXxXrxK+PwjTxezAzzRO/Rx/Mfpr4RRGWiV+kWMeQ7VGdiKeJXxRw tc/n3vXBX0uMSGme+MWDNA38AjilaeD3MiFM877Ilca87zEapAUJHKMwjfuiSHmM+yKVZdzvUXi+ tDA9ugFXkla43oCbvN6ApczNF+AhT/dfGUPnYZ+q9pzp/lu0m073XyjCcv2FIIfar5wlyQ17uv9C keJy/y1ZivS4zBbNv+n+C/ixzvdfqbxxvv9WHiu6RRmrl+svekasCxZ41pJgQK2t2XcvapuDL8Kw E/rDD1ee0GPlEOMoAEoT+Wbl0AHlOxPtf2fmrY9WMqtIzFaz13y04nAlXMo6pKjdCak/QBqfRzpb vAbpsx+h1+6V26RV5JawII3tO+CnE++a3/rkHKtQdDZ4DdByCBSFQ4GyTA9PgYZd83XLomT5hcEr gAZ3ePa13eurfp57CjTumqcNi3qxuDB4DdBjTnWgyCxMYE+Bpl3zmz8CNaCTwWuAXsEm/XWEcG1A zXnMpnzw+9I2m1hL4GTxGqSHbOpIwYCwwftygHSLTR3pbPEZpP8HrqmZBQ0KZW5kc3RyZWFtDQpl bmRvYmoNCjQ3IDAgb2JqDQo8PC9UeXBlL1BhZ2UvUGFyZW50IDIgMCBSL1Jlc291cmNlczw8L0V4 dEdTdGF0ZTw8L0dTNSA1IDAgUj4+L0ZvbnQ8PC9GMSA2IDAgUi9GNCAyNiAwIFI+Pi9Qcm9jU2V0 Wy9QREYvVGV4dC9JbWFnZUIvSW1hZ2VDL0ltYWdlSV0gPj4vTWVkaWFCb3hbIDAgMCA3MjAgNTQw XSAvQ29udGVudHMgNDggMCBSL0dyb3VwPDwvVHlwZS9Hcm91cC9TL1RyYW5zcGFyZW5jeS9DUy9E ZXZpY2VSR0I+Pi9UYWJzL1MvU3RydWN0UGFyZW50cyAxMj4+DQplbmRvYmoNCjQ4IDAgb2JqDQo8 PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDIwMzc+Pg0Kc3RyZWFtDQp4nJVZ224dtxV9F6B/ 4OM5BkTzfilcF7WSGAliILFV9MHuQ+CL3EB2UqtB0L/vWpucEUcazcgvEvYecnFx37jJox7/pJ48 efzi/PtvlHn6VD375lz95/TEKKONMdY5k1V2RsVg1Jf3pyf/fKQ+n548fv4qqsvr0xOrLufBxiRr wmL0h0enJz+fnqhvX5wrNaxkH//4y+dLdfjw5ey7l8e+7LMLAH9nVQjapKAuPhAe2Moql5z2VYVY dKzq4hPXlIWfn568Pjz77X9HGw7v1PFf6uKH05NvL1aWdMMqE6xPVucywr4+vDlsofg1lBy1XYL8 /a/nb45bOGEFJ8SqfVgCbW4pdhCjPTB0NAl/c7DqC2zjrdOlKO+LhlMqPtiqMlbIdXaNU3/CiNo5 QqRIDMx+CaOCzq9qF+PVCqm05VpbFm71oeiSYECrU9uxxJOlWxlTHP4W1ny1ZYW86tisYxmBoSbU pj3Llj2tTRq79xaMvapJ+1KVrUXnONtz1ZS7M9esWO+z4rRDi2BJyjqEXrpludeH861dWrMGl6p2 I9yOqazdslV0QQc/7dgah4R+mK32Zq7Zyro9Y8WUdLrHWuoMTGqQ6Hi5GWh2LfljAeGF5R4SaXbK /wZDmzkbdIEjHNKrqE+zEbvialBkbT0V85RJ8RE6Z3RFeDnPWvKJgxxTwbqiXZRZfYT3ZCwKq6MX RcjKOUfPUHJVJPnmdE7qLQejJARRYBQlGtYLAiXrRcI3DraR3EnQlca4KypHXDU4ToH5sFpXiKuC ro0MV4MEgIkM9oZw6GTIFQqHQ6LvA5IhmdEQb8U4H9ZcMVXRSDAENk6aPBquKa4GhdHWNYe0GZOM FSJy3UBnkOV+9KKFTYJM6iNYFGJTRB2KKEJSET5FdaWEHVOSb7HvmAqbRYEdU/IRUtDRiVSKSPjG wTAIswgEXW6Eu8JxxFWD4xRTuoMmRJN1bWS4GiQATGSwtxwmMuQKBVeP01dDabTDhvXTXEdi9vhb bJKaEnpSiMljREz0pKDJuzy7ICJybRl8dKO48QkKZoCVbnwSYbXgB58ElFQfBp9A4buZsU9I0bjJ DBHnE1qSG59EbiFOPonwN5qYbmBIMefBJ9hB7O7vCo8Ro08iTjBTB59AUZybfMImwdqZTMUBnQef QIHKNDkFUk5RLQ2x4ZQ8p0SrxkWnWFpOgNskX80yIteMJepGcVORgtMh+CGxPDbo/VCRUFJSy5Ge yVB4a6eKBClUNxUBlCfj6lCRoECZnyqSRw7EOFUkSBHxclORsINo4lCRwDimsSIFg9XGihQYm26q SAEEjZ3IYG/Gl6EiQRGRI30fkHJMammIDfOXO4eDjcg5AFSu/ak1d/Ckr46RcUWFYYPsq9dVosgi wtC6O9RiX7snOChw85Hp3GEQsr4GZjRhjG8wgG+4OIEzFVYaQUPuIrkkUiIJQ/u8HQYbntrEwrGO ZkdnjDLo6ptUxG3wLIvWsBTrqJUtNMYeVckL2zzLyBkq2E5B4nycvwwmU8XRReJPuGDZpnDsvQxP AUoMjoUdNhxRp+KkLhu/JJ1lEOPZYrmCazFsi6craO/Qt9OiNkVdp9OBg3iOIZaQ2g0DU4DbfAbD efrM98OQCpRhKgLbIMtmyyGaTRUJVZJSC20ZzNmRawhWEIkVn06IIgVxlS1gJ+QJ2fmnIPxragoZ 6zwqyawAT5JHjaaEZKWEwmZpWC9SdQ0/yCGMPGEDB3A0SfyMdnxphfvN76ZGNeJGSDMw/KWAByNH vEfTWsTYAdGVrPT7zfoxIKHbdsJkfQ7KTHXHrklgxAg+u96NBMRkyg23yY4RQjkx5x3/UcLilBhE qfSIo8J7CZDCz1bCvoULJduuJUnswx3EhtWsS3KVO4AFQ1MkXRHtCaZrcm4QYK/4MScRbJNsk0xH j4Tl9bawcgVi8jMOs6UVNqxv71QhnNAaZV1qSpkMWJiyhf/6LjwJGaY+/ZAl4xyKd53PY9i7NveL G3Bqtkib8oDtOjbC4DRdESV+2LLi6INkokjYCCUnadAqMGWfRFHb154UPEIBHJtk29ENerZB9Q4J 3HLbYmknGhwiWV57IFFBDNLHWZol4iWycdxmqWmUGheg2SaDhGC3lME+F1bYcMN0uXl/dfb81n06 3L5Ps+gzq6M0fLeeSZ4Yl93TrRcSv31bt/TCAn3nluPCV3APdCcLNu/HDZ2MwybjuM0Y56yk5IC5 wzh9DWPC8vKTePTMjNMm47zDGEdxWEDuEC5fT5jvODjFZ8J5k3DdIxzZk4yY24y92X3aYK4xgwtT S67UZ3xgTHKvttsPa96uPpZ4FoMR8QGXdL/7ruBMlnsvcO8SdTtE114T2D5KaZsBH8Iz7PGczrUq t/jmJD9ALsaiS811OXZnJ3FtSdcevUaY7V3c+3A4Q/IailMNZ4kNd8wddkiuPRMGJ++/I+JD7F12 35vYRpcxjYVpbK9Mbw5xE76uIVpcyBeADyAadlMtsqF3Y/YuiaZN+LVU4x2zLurBg5juP+E1k/Lq 4V2Pp398fvf+eOYO1//+crT58P7dPSEdM64K41S+LacWNn/7y32TMDwvJ93ZxxrBJNedRvCReskf Jl6p41k+fPzl+ngWDuq/x3L4Tf3+x/HMH64/8m9Xnd+GbuUWbcbyx5BppYDr0NqPFktWRSJ8GPvi +vK+wSi8aFDGwVrFRV4tX1XZwYyj7/j4/9TpJfANCmVuZHN0cmVhbQ0KZW5kb2JqDQo0OSAwIG9i ag0KPDwvVHlwZS9QYWdlL1BhcmVudCAyIDAgUi9SZXNvdXJjZXM8PC9FeHRHU3RhdGU8PC9HUzUg NSAwIFI+Pi9Gb250PDwvRjEgNiAwIFIvRjUgMzEgMCBSL0Y0IDI2IDAgUj4+L1Byb2NTZXRbL1BE Ri9UZXh0L0ltYWdlQi9JbWFnZUMvSW1hZ2VJXSA+Pi9NZWRpYUJveFsgMCAwIDcyMCA1NDBdIC9D b250ZW50cyA1MCAwIFIvR3JvdXA8PC9UeXBlL0dyb3VwL1MvVHJhbnNwYXJlbmN5L0NTL0Rldmlj ZVJHQj4+L1RhYnMvUy9TdHJ1Y3RQYXJlbnRzIDEzPj4NCmVuZG9iag0KNTAgMCBvYmoNCjw8L0Zp bHRlci9GbGF0ZURlY29kZS9MZW5ndGggMzUwOD4+DQpzdHJlYW0NCnictVzbbhw3En0XoH/oxx4D onlnc5EE8EU2slnHXstAsLD3YaKMZG10sTVyDO/XbxW7qSG7STZ75H2InJ4pnioWWaeKl57m8Zvm hx8ev3r28/OG/vRT8/T5s+bz4QFtKKGUMs6paQynjZK0ud0cHvz2qLk+PHj88kQ159vDA9ac3wtT qhmVkfTZo8ODfx4eNMevnjVNoIk9/sf6+rxpz26PXrxdDWqfvgPgF6yRklAtm3dnCA/YDWsYl8So RqqOKNu8u0KdTvHLw4P37a+3K0ZZS5rXZ82rzXa7OhLt+nxl2s22ebPirN3cNqt/N+/+fnhwDDpQ jweWlhElQ+D37fE1NL27uPsWtJn0gAdGezBlFREjsKYEIgYQSjrlPMkZI4I3opOkaxg1xPCGW8Lv nSmYJeDjvIDkGj2VF1BCEmkawTgKSEGoAjkWSFBiKQebDFfuL3wTmObaKQEWdzDUQaNevAPr4K/t +kZaEdYVGqU0+T4u0iQMSNuFmryzFmmSHSWalTRJi+JauHG1ofd4J4j2jVIDmxcYbM0LeBUKxreo IivgVWQFvAqu4MOSiqyAV5EVGFQwW3RT7usBPve1B9d6N3RJ+KyAV5AV8CqEKQ90XsCryAp4FbQr D3RewKvICgwqjC2Pc/b7QUG+ffN1YG+gzf80Xp9kkqjmaqe/I6a5PDw4QY6FFvd80gHROrn+OZBz yN6+ezxv7xjPs4bHG54neEN/7vF8/8Z4nhs83vA8wRtI+B5veJ7ap4jncieliDXDc9RdJ+YICcQ0 wFDP1BO0nkB2Yv3zBK0ngUDMPU/RXCAHYu55goYBuRPCpwlSH1KBkHueIrmwCMTc8xTNTe1AzD33 YgdCBzNDh14HcUNUMBGH51DE4YNAgI5P4bdu3u++do/995MSQOYrIehFF1VBXMH4w+yygkBAxVVQ c0QJM1A1nb5v356Uig6VqFy4kUTYEBk+Rqhi+aJLVdzIdqHBFZGG9+2zErhJmClgNPQIpGhhl7Pw vv4zUPnouOOEou3Q+SdFP9oUXGcJlAkL/cjonJlKGYcL/8CE7Tv++ncoU7cbLHZv8c9fK8bb9UpD 6bpS7c31tqiSJbRoiHGojCItZcN5yvDPu0IBo67PMGA85RCCuzVENP+4IBYGVsM0NIPmJ78ch8ph GbEPMBA/A2DJifHAr7bnqyPebmPwaefEA/oDLuQiVtvM6UtSwec+yS3RDbEsR758e7xirD2ByfFu 6tJl8IJaYkbwiXFaarNbh+w1TGpvTwkYVcYWjlKS9D4PJQasqDjHSgOUG8wyELY6p10wSCrzU345 MBQne05585D+QE+sXOjNbpI1IGHGa38hleM+DoMlq1jJ5oYIqzsZdAnmR7JLqfzVcZha1UH1EFUo J7u5CHtYZygO5z5ThNPv408JI90tmyw8lbOEtWhD/ezguZzlanq+Z2+ERcqZD+aHKZFEy/1GTXyn fsKI66XDJlOFEhIKXzJsKjdsuMTaszdYrcn6oH6AKoXrIj4X0w/qS0f2S6BcfxdnKphWaiH981SR r6jB4nnB1OgCStIw1znGIjOq34iRk/zvrFfYqzi8sHawcqf19R367+uqg7KaifZb3Js8Eqz+cSM8 wjrKbEBb6hJeJPt2xUy72axku338FGr5py9WAlxwxG37oX3yI3zuJE4+rDKgzBpiuhi07MJkyswt QwXELvxjOe529+i8uM1NU0tOmCidiFHKm+XZQ4N7yA5mjokhZREytYvPrZ50r2yYWLIOloxItcTG FH0KRSc9LduYpM84keKeVYSoi4g6RetUTnpXtsvMrtClxS2+BbOtS+abbty7sl3ZgNjRlHBb3dV2 yVQUKMYJ0wsMk8WjM1jQ0Lh6VlA9476chXKLe345yR2HKXCT1LH0H0A+F7eb07vLb7lWYD0dtcpq AE4SMpa9W1/+uc3Ia+YSZxW2hlSlYtGb1ZFqr6EHWeO1gHCvxBcdrkQi2a8Xdx9z4uBMW4msmZue gWhxc0ymiEtr00dKRuEURcSJE2Y0zMU9E2e/+vs+iTPEmkucoex84nxWyJkUy44Ir+y9wtbthPZ9 ztRil5GLtC+T27RDzgxRyjZmt2jHOTOELPK+TNVsPmfWGza7M+sTZQhZ5tfUhqxPlNWGqdm92CFR Vo+kSi1bfaKstyu5bE0lymqHKZFPlPV2ZaNgnCjr7UpNfZ8o6w0rn07ISaJUzJE7HjvpHZ+IFpIl o+1HII/1FrhEt3f4fNN8gk++INV8RIYZPs3xO4yNkjF4NhcoWGPrWLaYDFQqIrWmhOUVTkGSAdkn BqYxFfi8oPxdkZnNCkwKwHpWDOr/tdKmXX9c41nFJfDyzVUmLcRAjLpzxhCp3JEUDTDctI5BMCHA +OrRMmp6yJUq25gyY7zySdn82mVIECGkKEIm1y5Dgqg3LLt2GSeIELKYIHRqweITRL1h8wuWIUHU eyy1YvEJot6w2RXLkCDqHZZcsAwJot6u2RWLTxAhZJGITWrqDwmi2i4zO/V9ggghixnVJC/fDQmi 3rDysj2bIPDCgfp/JYgQfC5BhLLlo/RURA4JIqdwCpLbgMUEIWCRVpEhJmc7fZaAqW74Lkt0mCUu 8+lhgjKkiBCm3JUUEQwpIgT50EKaevLjs3KCMKn0y4bxrLdptiD2GSKELPKdSWVCnyGqDetmC2Kf IULIIuF1qYrYZ4h6w2YrYp8hqj3WpSpinyHqDZstiYcMUe+wVEXsM0S9XbOLQZ8hQshihuhSc3/I EPV2zU59nyFCyGKG6FJT32eIasNscuoPlEfd7kWB8iKOQznF/Bx8s1LtL8/d3kT5gMSmIqXTMEgy hhyoCvKRmitobSp74m4PjHyEWfZNIXuqFEkP9BVpKM4tm6wje/paYOdsHTnQVwRZnFw2lT4G+lpg WLaOzN6DcGwWz6SihlRdObDZAjtn68qezer9x2iyruzprN4wRmcry4HP6l3GaCo4ekJbYtnsqmpg tCVOS4XDQGlLTCuUcQZv3O6xzGdSEyF25CaB3GZv/lA9mfLxXvDAciH2h/lqjNFkOca1uwUcgs34 qbYeiztfxiwUZAtMy18XTR3WDuwWwpcnWvJqqKe3BVZmy7P8qWgEX0wOjBVKtSVWVtZqS/xXKNaW WFZbrS2YgCxfri2xrLZeW+K0QsG2wDReqNikwdtT1QUbM4T5KvHpDXDaN1zr/zHLa8lbap0gFh0S gtZuQDKeLtgYsTHgjGvmd/oGQgsxy/MpebXLE9oC06prtBCzuGJivFSkLTBtfrdvoK4FXivVZQtM qy3M6p2WvKjjqavesvmbOp66Qswy3yev6gzUtcCy6sIsxCxTV/KCjqeuBaaV9tc6fCGjlrogVuxe 1JW80jNQVwRaU4eJdB0GFDMCm3FLbR0WYZYDUBTqsAWmyT3qsAi+PK9koQ5bYuUeddgCX8pCHbbE yso6bIn/CnXYEstq67AIs0xmyTsUPZktsay2DlvitEIdtsC0/C2K4tmKZUSL+1tq3/lsJQKfOVuJ ZItnKyx5vaM/XMlqTKD49OZ+BkLAQpzJBlbAzFqwnxIDlhEJVXDw2wQKX3dlzUv3RmuxQerFU6bK 51/Ta14wajALFL7zkXr7lPKOuXcdH+VvFxKtIgRsp2X/1upvm0wzAzlUxM2mL1X2dsvUpTIWNn3/ A2XsCWXmOfynqVBPKbNPfhoDpRwAKzsSm5+fRwzfOxzJnq5se/PlGt/QxDk7TGf4v4+b5kM76YtK mYC33rpoDIjUpkG61fCXC+V+bmL66Vv3Sykv36K+4+NfJ9pSHYZ2eBu0qsNcWLwDmpwdUDCsoLey xR9nWZ+7+3nNzRl81N07IAMrlMbj3MiEk80pRv+tu+z3R6ahpB2+yV9lu8Q35VUs218l/JxrIVw2 j1o8zslCUaZtCn37KdfESDyVzRqfCObZ/DmELxRLOgi+XdBmo1aj+XHDPvz6F5AzrTr3eteuzfv2 b83P7jJug7+u40cdQqB/lyEbSMq4N45CJBdIl1/wItHVdc4A3ietqGF28sLcN93YN7COcf38miMm LqR7M3HimXyQ4O8IRCZdrW//XInCRMbCUdf2A3/NKBa9QE9fT5kyxS6CAtPGzX/Hi1oIcTm2L00Z Am9TyzprhUSaimXn6ACSGtBB7MGL6wsklyug1kw4cZz7dUZJbvANrUj2L9ylWV+iki+bbePO2q4L PynV/8BSZOP2PJcTOXVvvofSwJZnK87bm1vguXwyZbgSiBpu1qe5y+iq41AO1PlAdZpQkY+5HFFw RexYAwR402Rd1XMS1IMya5SbZ3yUiHW/vRg0c4Py81mWRrgN5V14d+Xoxt/GipTMBDduU/Iutuor nseur2EY73KtjHsVt+iCnezIIowX1cdntg2MpRxZBRGDTHxxdfHfFZNtnt4osXWW4Rpc8rFpEC8f 8U82nDlkODWybXueZXQsBCvtMe53OCJZ56YztKdZ6fvVRYZngAnFxNW+Pxc5C0X/lmeViQKIxoxU 9N66/IRRk9Wh3AW3Oh1QPbnzkLEbrr0bKgZJWPztsxjkFILNtXJoF/iYm0WS8/7ko8Jeif5j+WHD 3/XLc8m0r1vHVxcYJOvfccpfZq3sppqzmjAjj0bgExoIFant7b0Py1OcZn0CzSaAjuiR3TNba+kL 8oITbvI9cDD/A6cpYLgNCmVuZHN0cmVhbQ0KZW5kb2JqDQo1MSAwIG9iag0KPDwvVHlwZS9QYWdl L1BhcmVudCAyIDAgUi9SZXNvdXJjZXM8PC9FeHRHU3RhdGU8PC9HUzUgNSAwIFI+Pi9Gb250PDwv RjEgNiAwIFIvRjIgMTIgMCBSPj4vUHJvY1NldFsvUERGL1RleHQvSW1hZ2VCL0ltYWdlQy9JbWFn ZUldID4+L0Fubm90c1sgNTMgMCBSIDU0IDAgUiA1NSAwIFIgNTYgMCBSIDU3IDAgUiA1OCAwIFIg NTkgMCBSIDYwIDAgUiA2MSAwIFIgNjIgMCBSIDYzIDAgUiA2NCAwIFIgNjUgMCBSIDY2IDAgUiA2 NyAwIFIgNjggMCBSIDY5IDAgUiA3MCAwIFIgNzEgMCBSXSAvTWVkaWFCb3hbIDAgMCA3MjAgNTQw XSAvQ29udGVudHMgNTIgMCBSL0dyb3VwPDwvVHlwZS9Hcm91cC9TL1RyYW5zcGFyZW5jeS9DUy9E ZXZpY2VSR0I+Pi9UYWJzL1MvU3RydWN0UGFyZW50cyAxND4+DQplbmRvYmoNCjUyIDAgb2JqDQo8 PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDE2ODc+Pg0Kc3RyZWFtDQp4nL1YbW/bNhD+bsD/ QR+pAqV4fFfQZWjSZui6bFkSdBjSIfAcJzHgxKmd1Mi/350UyaItyuo67IMN83z3HHk8Pndkkp0k b95kx4cf3iVifz85eHeYfBkORCK4EAKkFC5xUiRGi2QxGQ7+eJXcDwfZT2cmuVkOB5Dc1MpCWBA6 0L5+NRz8Phwk748Pk6ThCbJfRvc3CbtevD46TV/cHpwj8BEkWnNhdXJ+TfCInUACSnEwiTaemzw5 vyOfheOfhoML9vbj+yT9Kzn/eTh4jxiEUxlKQMOm3QU7WaRg2fwxBcHm49Sz+WwZsVZecOlD85gn laOuDnVPU3Bsgi6uU6nZBB3j9/140vS3FRvZCEcFbrzlXsYnsgWi4gGWiZJchPHViqPYay5lif5G CO/2w5XS3mybOlw2rrtpzH57XKUg2SgFz56TU4r3ZLKM7pHMuYUQYS+mqzwHFep2BkJ3BQLcVqa5 vFyOcdzldSwOYH/Lx9nD6L52Y7oSusUNCODON92U8sVN9eu0SO3b1LBHiuXjw/YqgxnY2AzWZ0jw PFwZ28uyHbBuJ6z23IWoq9UqdYLxWarZknLga+ot4xNcyz1+YqdN4iGXEEK97sgDteGWzvJofDtK XeGGp1LgtLOz+XWqGGZkjgnp2YImNMlSyNnyYb4gJRpJZIQVJeoolZI9n9L/mLMcwW6L+N91ZZnf FSUjPR3gYL/XBNbM4HUeFDli0cbwXCZoIokZfSWYDQcKaUE3xuTFyTaB5l43LapxDVkJaqeV4LZk 8a0l5z1JBXJuYL3if8Esa4QLdjB6QhptzwnQlueheix9wFjuNqEnRTIs5/exnEN839OBJAcq1D1K QbHJFN1YOtOKjW5itcRKDhBa73XlH4iWnFMYQLsxh06uhI6yXJJlK1fKXNFse3MlyF1k2cqVDTcx rtQUV8Cv15I9FOSDP/bwCO+kOYgWzHXKGA7BLC7YFeHPCq5B4hjfoUuOlOLZDf7hWUb5NJ4+Fszj ymlNUXt+z8fXqHuHvPTjNH2tEEizH5AclFOdGxStZusupOgQgli180zTSgs8fC5c22cWVXZcqlD5 1wmtYoLx0FF61wa42LCLTgjpB3M20H2LYTw8jlrkwL0NLc6e/l6OF1Pcj4ciNerwRzCMc9zojTCk MWUvuYuvZovGJU4QDwvRuBEcdCUgUqZNk20CVLQFTVcmlaAGrQQxmoaOziRK2pLYX30PaTcQLtif qdVsdDuaze/SbQws+cFp98AhtI81g+ALFg90uwnO9uY0LJz6WzjN9aaxNXI/Gtvh2MdbveYierR6 kEfbuwBpRfNa4SxXqXXU5amwy9PYfsVp4KXLCxB3dHmBbt3lmcJNo8t7LOeFkSO2rfs8X5YBogDk ZrqQZTR+Lpo9CvaIGHx+x2/roBMxzzrvaG311uCeaxlucM8eT0rLjS17vOLK+SIgLnDYOTbG5EXJ NoHh2jctqnENWQlqp5UgRh4Sep8XgS2nCxlj56GRsvehacL/17VfqtZyr6lhbzi+YJMHqm8LBJ8W 2Ve5o+o/pYQcY34JVfQAYKgJUIZlUgj832XgPa8md0W2150Zptuqu5FFWdwI9o7qrrAXpYLdXMpn epswjK5kX6fLsngn9EjxKdWWXiryMoBlvYwWQe003WcC6O5EF5pDeZmRjni+HFPW4tq0bhMoSorZ 2qIa15CVIJrGpl/ZA+u4zb+n7DUQ6EIxoxvwaEH3x0mshlnB1YZh9NaCXrAFDXSLi+r8hniNWO+F /ujdJcap3hA9BSDRl5lccmlC3c9MnXx8F0s1B9QOhQax5KHXNazb0Zls72Pv8g0aW6lveL6Rvct3 A7kfExELZcVzwxZ9+FJnWXHIF/zrqepUSTC5esLv4nJB8gykEhlkqYKyG/5AB/cMC+LJ5RFpUiGj z+Wn1EDx3mgRXb+c4svoIc65ClYWT0HtNbXIge7lLn5ta1E0Ns7ChkBCXR6Xzy+XSJqG1l2Spd7B lW2Ni8Vrr9jYr57VGFROzEMkpaCYZSkgUqLj2hRon3PbFFjwPG8VeLJsmlSCGrQS1G4rQT2xShCj OiV6Uh3e+HL/XVS3RkCqm+MePVPWX8W4S5kiyZpW3S/YvXsPh52Q1/0Pu+rddjSQ///DrrUEOux4 xOnnJcIAf7jC/zsPg2rrZjTmIN69g/X0PAxU4cvO1OR0wy7HlMYYtrxlrLgt284X/Wpc4VXjaArr je2RBW7L9mjJrWwspyWj/gEdAHK4DQplbmRzdHJlYW0NCmVuZG9iag0KNTMgMCBvYmoNCjw8L1N1 YnR5cGUvTGluay9SZWN0WyAxMDEuNzggMzUzLjIzIDEzMC45NCAzNzQuMDJdIC9CUzw8L1cgMD4+ L0YgNC9BPDwvVHlwZS9BY3Rpb24vUy9VUkkvVVJJKGh0dHA6Ly93d3cubHN2LmVucy1jYWNoYW4u ZnIvU29mdHdhcmUvc3BvcmUvb3R3YXlSZWVzLmh0bSkgPj4vU3RydWN0UGFyZW50IDE1Pj4NCmVu ZG9iag0KNTQgMCBvYmoNCjw8L1N1YnR5cGUvTGluay9SZWN0WyAxMzAuOTQgMzUzLjIzIDE0OC43 IDM3NC4wMl0gL0JTPDwvVyAwPj4vRiA0L0E8PC9UeXBlL0FjdGlvbi9TL1VSSS9VUkkoaHR0cDov L3d3dy5sc3YuZW5zLWNhY2hhbi5mci9Tb2Z0d2FyZS9zcG9yZS9vdHdheVJlZXMuaHRtKSA+Pi9T dHJ1Y3RQYXJlbnQgMTY+Pg0KZW5kb2JqDQo1NSAwIG9iag0KPDwvU3VidHlwZS9MaW5rL1JlY3Rb IDE0OC43IDM1My4yMyAyMzMuMjEgMzc0LjAyXSAvQlM8PC9XIDA+Pi9GIDQvQTw8L1R5cGUvQWN0 aW9uL1MvVVJJL1VSSShodHRwOi8vd3d3Lmxzdi5lbnMtY2FjaGFuLmZyL1NvZnR3YXJlL3Nwb3Jl L290d2F5UmVlcy5odG0pID4+L1N0cnVjdFBhcmVudCAxNz4+DQplbmRvYmoNCjU2IDAgb2JqDQo8 PC9TdWJ0eXBlL0xpbmsvUmVjdFsgMjMzLjIxIDM1My4yMyAyMzguMzcgMzc0LjAyXSAvQlM8PC9X IDA+Pi9GIDQvQTw8L1R5cGUvQWN0aW9uL1MvVVJJL1VSSShodHRwOi8vd3d3Lmxzdi5lbnMtY2Fj aGFuLmZyL1NvZnR3YXJlL3Nwb3JlL290d2F5UmVlcy5odG0pID4+L1N0cnVjdFBhcmVudCAxOD4+ DQplbmRvYmoNCjU3IDAgb2JqDQo8PC9TdWJ0eXBlL0xpbmsvUmVjdFsgMjM4LjM3IDM1My4yMyA1 MjguODIgMzc0LjAyXSAvQlM8PC9XIDA+Pi9GIDQvQTw8L1R5cGUvQWN0aW9uL1MvVVJJL1VSSSho dHRwOi8vd3d3Lmxzdi5lbnMtY2FjaGFuLmZyL1NvZnR3YXJlL3Nwb3JlL290d2F5UmVlcy5odG0p ID4+L1N0cnVjdFBhcmVudCAxOT4+DQplbmRvYmoNCjU4IDAgb2JqDQo8PC9TdWJ0eXBlL0xpbmsv UmVjdFsgMTAxLjc4IDI4OC41NSAxNTUuMTggMzA5LjMxXSAvQlM8PC9XIDA+Pi9GIDQvQTw8L1R5 cGUvQWN0aW9uL1MvVVJJL1VSSShodHRwczovL2RsLmFjbS5vcmcvY2l0YXRpb24uY2ZtP2lkPTM1 NzM3MykgPj4vU3RydWN0UGFyZW50IDIwPj4NCmVuZG9iag0KNTkgMCBvYmoNCjw8L1N1YnR5cGUv TGluay9SZWN0WyAxNTUuMTggMjg4LjU1IDM5OC41OSAzMDkuMzFdIC9CUzw8L1cgMD4+L0YgNC9B PDwvVHlwZS9BY3Rpb24vUy9VUkkvVVJJKGh0dHBzOi8vZGwuYWNtLm9yZy9jaXRhdGlvbi5jZm0/ aWQ9MzU3MzczKSA+Pi9TdHJ1Y3RQYXJlbnQgMjE+Pg0KZW5kb2JqDQo2MCAwIG9iag0KPDwvU3Vi dHlwZS9MaW5rL1JlY3RbIDEwMS43OCAyMjMuODUgMTMwLjk0IDI0NC42MV0gL0JTPDwvVyAwPj4v RiA0L0E8PC9UeXBlL0FjdGlvbi9TL1VSSS9VUkkoaHR0cDovL3d3dy5sc3YuZW5zLWNhY2hhbi5m ci9Tb2Z0d2FyZS9zcG9yZS95YWhhbG9tLmh0bWwpID4+L1N0cnVjdFBhcmVudCAyMj4+DQplbmRv YmoNCjYxIDAgb2JqDQo8PC9TdWJ0eXBlL0xpbmsvUmVjdFsgMTMwLjk0IDIyMy44NSAxNDguNyAy NDQuNjFdIC9CUzw8L1cgMD4+L0YgNC9BPDwvVHlwZS9BY3Rpb24vUy9VUkkvVVJJKGh0dHA6Ly93 d3cubHN2LmVucy1jYWNoYW4uZnIvU29mdHdhcmUvc3BvcmUveWFoYWxvbS5odG1sKSA+Pi9TdHJ1 Y3RQYXJlbnQgMjM+Pg0KZW5kb2JqDQo2MiAwIG9iag0KPDwvU3VidHlwZS9MaW5rL1JlY3RbIDE0 OC43IDIyMy44NSAyMzMuMjEgMjQ0LjYxXSAvQlM8PC9XIDA+Pi9GIDQvQTw8L1R5cGUvQWN0aW9u L1MvVVJJL1VSSShodHRwOi8vd3d3Lmxzdi5lbnMtY2FjaGFuLmZyL1NvZnR3YXJlL3Nwb3JlL3lh aGFsb20uaHRtbCkgPj4vU3RydWN0UGFyZW50IDI0Pj4NCmVuZG9iag0KNjMgMCBvYmoNCjw8L1N1 YnR5cGUvTGluay9SZWN0WyAyMzMuMjEgMjIzLjg1IDIzOC4zNyAyNDQuNjFdIC9CUzw8L1cgMD4+ L0YgNC9BPDwvVHlwZS9BY3Rpb24vUy9VUkkvVVJJKGh0dHA6Ly93d3cubHN2LmVucy1jYWNoYW4u ZnIvU29mdHdhcmUvc3BvcmUveWFoYWxvbS5odG1sKSA+Pi9TdHJ1Y3RQYXJlbnQgMjU+Pg0KZW5k b2JqDQo2NCAwIG9iag0KPDwvU3VidHlwZS9MaW5rL1JlY3RbIDIzOC4zNyAyMjMuODUgNTE3LjQy IDI0NC42MV0gL0JTPDwvVyAwPj4vRiA0L0E8PC9UeXBlL0FjdGlvbi9TL1VSSS9VUkkoaHR0cDov L3d3dy5sc3YuZW5zLWNhY2hhbi5mci9Tb2Z0d2FyZS9zcG9yZS95YWhhbG9tLmh0bWwpID4+L1N0 cnVjdFBhcmVudCAyNj4+DQplbmRvYmoNCjY1IDAgb2JqDQo8PC9TdWJ0eXBlL0xpbmsvUmVjdFsg MTAxLjc4IDIwMS40MSAxNTQuODIgMjIyLjE3XSAvQlM8PC9XIDA+Pi9GIDQvQTw8L1R5cGUvQWN0 aW9uL1MvVVJJL1VSSShodHRwczovL2VwcmludC5pYWNyLm9yZy8yMDA3LzE4OC5wZGYpID4+L1N0 cnVjdFBhcmVudCAyNz4+DQplbmRvYmoNCjY2IDAgb2JqDQo8PC9TdWJ0eXBlL0xpbmsvUmVjdFsg MTU0LjgyIDIwMS40MSAzNTIuNTEgMjIyLjE3XSAvQlM8PC9XIDA+Pi9GIDQvQTw8L1R5cGUvQWN0 aW9uL1MvVVJJL1VSSShodHRwczovL2VwcmludC5pYWNyLm9yZy8yMDA3LzE4OC5wZGYpID4+L1N0 cnVjdFBhcmVudCAyOD4+DQplbmRvYmoNCjY3IDAgb2JqDQo8PC9TdWJ0eXBlL0xpbmsvUmVjdFsg MTAxLjc4IDEzNi43IDQ3OS4zOCAxNTcuNDldIC9CUzw8L1cgMD4+L0YgNC9BPDwvVHlwZS9BY3Rp b24vUy9VUkkvVVJJKGh0dHA6Ly9lcHJpbnRzLnF1dC5lZHUuYXUvMTIzMC8xL0FDSVNQX0Z1bGxf VmVyc2lvbl8tXzAzX01heV8yMDA1LnBkZikgPj4vU3RydWN0UGFyZW50IDI5Pj4NCmVuZG9iag0K NjggMCBvYmoNCjw8L1N1YnR5cGUvTGluay9SZWN0WyA0NzkuMzggMTM2LjcgNDg0LjU0IDE1Ny40 OV0gL0JTPDwvVyAwPj4vRiA0L0E8PC9UeXBlL0FjdGlvbi9TL1VSSS9VUkkoaHR0cDovL2Vwcmlu dHMucXV0LmVkdS5hdS8xMjMwLzEvQUNJU1BfRnVsbF9WZXJzaW9uXy1fMDNfTWF5XzIwMDUucGRm KSA+Pi9TdHJ1Y3RQYXJlbnQgMzA+Pg0KZW5kb2JqDQo2OSAwIG9iag0KPDwvU3VidHlwZS9MaW5r L1JlY3RbIDQ4NC41NCAxMzYuNyA0OTMuMDYgMTU3LjQ5XSAvQlM8PC9XIDA+Pi9GIDQvQTw8L1R5 cGUvQWN0aW9uL1MvVVJJL1VSSShodHRwOi8vZXByaW50cy5xdXQuZWR1LmF1LzEyMzAvMS9BQ0lT UF9GdWxsX1ZlcnNpb25fLV8wM19NYXlfMjAwNS5wZGYpID4+L1N0cnVjdFBhcmVudCAzMT4+DQpl bmRvYmoNCjcwIDAgb2JqDQo8PC9TdWJ0eXBlL0xpbmsvUmVjdFsgNDkzLjA2IDEzNi43IDYxOS4w OCAxNTcuNDldIC9CUzw8L1cgMD4+L0YgNC9BPDwvVHlwZS9BY3Rpb24vUy9VUkkvVVJJKGh0dHA6 Ly9lcHJpbnRzLnF1dC5lZHUuYXUvMTIzMC8xL0FDSVNQX0Z1bGxfVmVyc2lvbl8tXzAzX01heV8y MDA1LnBkZikgPj4vU3RydWN0UGFyZW50IDMyPj4NCmVuZG9iag0KNzEgMCBvYmoNCjw8L1N1YnR5 cGUvTGluay9SZWN0WyAxMDEuNzggNzIuMDI0IDQxOC4wMyA5Mi43ODRdIC9CUzw8L1cgMD4+L0Yg NC9BPDwvVHlwZS9BY3Rpb24vUy9VUkkvVVJJKGh0dHA6Ly9lcHJpbnRzLnF1dC5lZHUuYXUvNDQy MS8xLzQ0MjFfMS5wZGYpID4+L1N0cnVjdFBhcmVudCAzMz4+DQplbmRvYmoNCjcyIDAgb2JqDQo8 PC9UaXRsZSj+/wBQAHIAZQBzAGUAbgB0AGEAYwBpAPMAbgAgAGQAZQAgAFAAbwB3AGUAcgBQAG8A aQBuAHQpIC9BdXRob3IocmVuem8pIC9DcmVhdGlvbkRhdGUoRDoyMDE2MDMxNzE0NDQwMyswMScw MCcpIC9Nb2REYXRlKEQ6MjAxNjAzMTcxNDQ0MDMrMDEnMDAnKSAvUHJvZHVjZXIo/v8ATQBpAGMA cgBvAHMAbwBmAHQArgAgAFAAbwB3AGUAcgBQAG8AaQBuAHQArgAgADIAMAAxADApIC9DcmVhdG9y KP7/AE0AaQBjAHIAbwBzAG8AZgB0AK4AIABQAG8AdwBlAHIAUABvAGkAbgB0AK4AIAAyADAAMQAw KSA+Pg0KZW5kb2JqDQo3OSAwIG9iag0KPDwvVHlwZS9PYmpTdG0vTiA1MDAvRmlyc3QgNDgwMC9G aWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDYxOTM+Pg0Kc3RyZWFtDQp4nK1dS8ssyXHdG/wfammv blVGRj5ACGxsg5EWw4x2xgvJGoRgbAkxAunf+5ys6O683Z1R1Vl34E7V113xyMh4nHxV57ysS9kW 3ZayLtsalyLLltJSwhK2uuS0BHxddBHVpZQlrvguL1HrUtdFw7bUsGgOS5UlBVy2JfGvtGRJS9Ul 4+lalhLjUvNS8EnFnQYIo8At8X/4B5m1LtvWPoi4KXwEygSJ/Bo3ELGtumwS8b8VX0fqC6KYySov m0KtbS1owcZP8EfiVxsEZCi38dOc8f2GP0rExxt4FjLeIKUqBesS1o3PoO0rtdgybBGhAQwSAnng 6xASddqWIAFywoobmAnqLiFGkENeULYkgKEmaBfiElJgk8A5FZKDTxY+DBG58mGIKIqHBQwrWyAQ UdkKkUVWtkICbtgKWEY2tkLQP6GZJuEmkSovgv9wU3ADy8NYCwxHqorOZHMj+GjmV9siiQ+jkySh 77YIWZmdBFNLgUlgY9ywFTCEVLYCjZTKVugKt2ArYsUNWwF3ihtbARYxsBUquGErYOIo7FL4UwQ9 btISY4IsKBc1kCEdjJZHd8bE3k5gmOkECbIyH05gWAK/gogCH90SOFe0gO4bK1uRdNGVrYDeyo7d YBrlX1sqcF62ItOL2Qp4rQpbkREOwlZkWTSyFTkuSlffMhgqexlxoQnNhTfB++lEGZxzJhU4F/Te hoDS5lpoiTbXgpZppf+UiJvMrxA17HN+sFU6ZWL88KbiBvI2BF1q/BhhjB8+l1oEMcpWujLjbGW3 Q+1MfhsMm0m6oetzgF4B4Zab4RFmWRqfbclReYOvlE1H03JC0AVEV05Ql06Vs5AcnDOUYm/movwE IipCK+Bfrpk3yCUrfRreVdbCG0F2iYyfgJSCEOW/wtAJTCQSKQL5hWklIOBKhCWYeIoKqZA4FM0N CK+S0BUBMVQy5LDvSk78BAwL4weeUyqMGgJzk/Cm4AatDPCTSqcMwnzF6IVBKyIOXzF1ISQQxshM UDwwp8VE5UGl1BDtr4kioFNNhaGObJUpAlarGcYOCK9amghIr2wOKGszS2TeWhn9saU9iqWfroy3 0JIZuykwxaxB+W1m7mPiYCZZhW2gt610R2QV5kEmGmXmVPZKS6hJmWooLTMxsWtX5t9A51uZgpGI mBdXUpBzzcxSmZmRmYfpc2MEh8TcyEAMifmOPRoS02QzGgMQ+YhpTJk60YUhMXcywbTEuDX9EtOo Fj5HGSnyM8rIK/uA/DIthH/IoLQnIwielZgXmV7ZM4yCQAcMmTmT+gamLfQm8yezrzQuTKSRyZW1 DAbDZ8wiaH5sZQyJF1EQSkvB0DwUSsvMsC11Z/bCnpfR1lAoo7aMTM61koK5dU3MyUzJLXEzboXh GSpzMfun1SoR1hJGmgh0C8wpEoWfJeZs6sIEKEppzNGSWEdYByWx5rIySmaiZbGUsvKzltSRtoQl EKkYibml/lpZF2Iri0jxzJaRZU1YECMzlbBGRrpzS8WRkoT5KGriHZM6i7gwpyAEhOWFqZ8asDDH Ao2klYMCT5KN/BBQC3sCd5kFidl+Zf1hxlTGH2oTawK5MLUp04Iw+Sp7TwKrAYs6PR4FYiMFy0Ck zqHVdRak0IrFSgrKSPALYWLUzAImlFbWVvd4B/8RaTUEz4iQM3uwpcDEqkD/RWHZSNEgQ+FzrA2M c0FAo8isfI44Qthexm+KbG9sBQe9Kozu1PRrhSqtfK5VocTPyC8HPkdpmb3KSEb3sh5TbqXOjOnE aBRGcl5Z0RndeWWvMn4zo1EY3Tm0XmX1afZjTGeFfwvjNyfCAkZ3TvBCSQ3z4G9hTOdC6zJ+kRjA mVGbK+wuqRUxcmFMl5V1nlFbCNSEMV2aBozpwrQpjOTC2BB6U6GWjENUN/S35AaxEE3SCp3S4ozu AkMTXPCukIKcM63BmEYlJwU5I6svjBviM7SSMV1X+LcwppFhCUg2VrHAz1jYWDSF0V2ZS4WRXIXt ZXRXai6M6RoJpUorl5XPsUwqLMs8i6JK/RjdtXkYIxmOvRL18A5x2tABoA/0YyTXZr9WUSt1ZjmA onyOBY9wlugZd4kAaWUxJXxphRZwBHeBd5mfsbAmIdAmRYJGrTauRGORWXNlFoitlBaiobXVZGjA uMEdbBdZIFE2wHkjjifCjog53MFqrchtzL6R+YmJDXesv+z5uKNdIUWr5JUUldWQOrOuIEAqYR3v YONIpAsHBAVrHNwEQIzZH93KO3JmD0bWs43ALBIjBGbR2Ao38XQMDVyj9ygb/oUejNIK/crPWM7Z g1EIB8irZVJkediAGQ1ZHpqyJqF4sRfIjz0YhdIqYjqymKO5oIgs4syTETGNQkKdWSWkWYh1Sujj ETGNO454iGKEWQFglXdsR2QVi2xHJIJQ2DMy+wNWE8sSDSRwBaoldkCvRCXnDJ8n8AJ6gPRIMAV3 hC6sbGBMCgKIFdaODQ+wIrbaGom/I/odJkB/UzbuaGd4I5AG9UttCLLyOeKLiEiMRFyRGC+y7oEp NCXGwRekIPrI6HmOpHBXSEG5hf3WMEyFZ0aiK4QMn2ujm8DPiDnWwueIL5p+xG7a9MsNfdCzCZuU 8D4SQTQYHYkwNXH8UBoOYU8X4ppMGxRyLtSKoLBldOYToBS2g/BSWfNiaSiFfUkklFpfoo9Dy+gN BaTmTQSSibUtslYn5pbYsA57PrK6J2Uf1YZr2Ee1oRn2ESM5JfYR/SpRP22oh9CzVfJUCj9rCAe6 KGM6r+gFbchl5bCCMZ05NlPGbwbkwR2xDlGWrm00CM+mFhwXYiTB6M70QmUkZ36jjPOsbUzTMBEi QhndQOwc3lBGhk8pIznTfswxuOMwhpGcGY26Yyd6cRvkMxo5xgE6gmcqI7kw3zQcV+ghyvgFLoe0 hrHYgxoaYoJ1teEkWkgZ3cjo+JbxizQOnRm1pWnQ0BbSMkdbvIMGyvhFRucIjOiI42JlJFcOaNpI oDYLMZIrsYESF1ZmZGUkV8aGMpIrNW+gvbIisi4DbVE/RjLG0dCPcV5z4mfkXKgLY7oWWpyRDKDA sV/DXbQ4qxNwO0d/xFgcVCuiG3eVn7EaN/1YQ1aiIiVaWFmpVInZIi2uDamtHEwSn7UeZF1Gw2l7 ymA+1UTOVdsQk/iMOhNLAOCDNhF3cYynrGdtnkSJBttEyY7jiFI5JwNER0/MxGesLNrwGbMCaw1w 3MZvyU/b8FWJ8oRyM+/YM0Q4gAoc01IGXGLhs7hDRHCMDrynvGsoD/6orOkoV7wjouP8hRJJBo4u EcTEgLQucUMg+uT4QJgoMUpeiQbpYQ01Mp45ukFMoB+VaIbhjTvKSGj/L37x5TtOUq3L919++PLD n3/7f19+8/c///jlh5//8tf/+fnff/rxf79894dF2ve/WtZf/vIf/6GRoDE7yXcvz//qvxZ4z38v d8I70V3Ob37828+/+9Pf3pHCDnjmHTVs5YhEapsWKSORWW6G+emPv//xHW3m/N/3Zg5T8a3y8cDE 5dXE+ZSJy3s5XnvLQ8sn6npSS7mT1O0m8N/eyHon5HOKu1q/+f5de2qzOidQB81CjnEsGd+SRE9J Ts+OZLm9pjOyjrtrYBfd7ZKHutaP++5jigMdOTaikkTYAy05ie2YNL2nCa5NOaQYinO9Jc+JG/rL oX3E7KNDDnf3+e3vfnqbpOpu4z3wzN2sK2+qu4yPskH5KP1wGu6SuG17GH7z6xAneGbTJFc9rlpm i5+J5ASIK/A//viHv/7lxy//8tPP//TPy1sWbx30A/pykb5eow9vfYMDXKefCbunyyFXpUa5ILju 1ZaqpsWGccYLLtThMML3ElfssExyHsgTy5HKvNjj/HUUTKF2qrpllhOW27yq44J7VlUJH4nkdJrv SIcC9WEb8YEypwenbSND7zkf4nIxxcjFFBP98nNMP+1anAh5W4+4TONBVE5oTfdZXIcRHzdXLOc2 5sUOgQVXxz2xnFaaFztEdqeDSddO1eSpqpx3mFd1iMzPqyqdqq4PcUJr3od06EPnVU0fiWyTItcC VS8minQxUSQ/URzTv3UtLiI5/ZxkSfOgRI9rn0OedEnvx2PJBVIpL2keWqQxkEpuKUx1yX4Xu2KP S+FRSORuJJP8YWdY8vxIJo2Hn6dVjZ2qLhjP3AMzr+oQjJ9XNT9UzW6By9yBM61qPh45H4Z4uZhi ysUUU/zqdUw/7ZR4prytR9wA5vRZ4f7J+T47di9/5rS89ZetuH5W16XOj0fKGEgVF0hVbs2aFzsE UsfT4mWfeiw2O36basp2LXa1zzebA9yCXW3Oa4t2VbsmuxqfzfgEow9GH4wu2PPBng8mT+x52exq dGJ0YvLE6MXoxeSJ8YlGH03faHTR6KI9H+15tefV5KnRqclVo1ejV5OrRp9M72T0yeiS0SV7Ppnc bM9nk5tNXja6bHTZ5NlihgVg24C5X42+jKcOyq16jZKzTdT1CxxbcQP9vsKxk76R5XpvF+jPDOoN Ffz6X//0+7+/HWIOCG9R/uv/fD/3JY5QPRIaB4TxQGhyhN4Vfk+qDmk+0hdgb8lwBE7oLtwiztnW hRveHtOYH1uwOBrVI424na5MCebu3rHg1beihaNNrJvlbvpe8OG6DRkcp2DuhN6j1qK5jlsY1pt1 huGbX8I3rO504SN880CW0/TQL3e8MChHfiADwnzgA3Us9L7QcBi+HwrtVxlehMqRUL2tf72QhgOx 0THwXeX3pOKQJpfUKr9Z86blFT/JQwbHIRL2ta+bJ9+0Hxj0sMLV1xDxly0eIVIHsrym98sWQwaH yj7mj0I49Lb4Xlo48LUQx5qGdCTULzN7zifbtp9y4V5KLsvsqyT7osUS6r4ksPDkD+faF24PTgON 9KA12WnNcWrKk1Kd3n7Y/z3pXghCv67xzEIO0xvPQdW5/pfN0d1FKOaTN/Pc9Dxg9X5Web0Qazay CBKG4k+kGxu/WFZoh3L2q2MfubMd7c163ZwVxJ20tpGoyECSZwjpnH/I4FDV0BG5k9aPXV0zyvYL H/PKPlbWQvSnE2+bQ+aUlW+hbPlM6mMvxlDk8Yr/kT8dcwiXOchlDkeOdsxBL3NIlzkceeDp/R/P HNQH+/W+cWPK+VVPOL8Lhu4bQF4Ud1dLui0cc4qXi4o/9nI8k/tLJt1ujCm5/aLJi2R/+wnB1BXJ TqJLrpc1AHdF8kUv67ZpvCju70d5oM05xS96GY/jvXeWE6jFZkUNVLQTu/t1n5UMNgtqxbGdzN2v BtlsNjTsq93tRO5+NXo1FGSzo8FmR4PNjlrmaSdv96vxsVlRi5Ob1958qJ2i3a/2fL+y9GzEfIu1 YYHVV5R1t52LsnQgyevv3A2YhgwOVQ2fSX1grWmJHVTyF3EeUGnKPPVbmKeDSgerNw+QNKPtV4cC RgzOo6x5DuEyB7nM4cjFzqOseQ7pMocj5z2Psp44VNcRe5Q144n1jCeeRFnPivtbRzuUNaW4XlS8 Q1nPivvwsENZU4qXi4p3WOtrcr7Q4CRUmpAr/XGMF8n+/tIOJE1JFkeyDw87lDUl+aKX9SjrWXEf Htb77NSc4mMvO4HvbHXY4Ex7W8h+Nfxkq8JW0du7Qfar0RWjK4a7bO0/2PpTsE0AodzoDbfZqRTL ee2NH/vV+FSjt+W0YAdWzPFvbnhziva+jv2ah9aQ9eiAm7yuc8nm+jtyIqHT7WiX5IFErwP7FZUh g0OVU6eyv5lsKVeUTd9C2fqZ1Db1f1Xm9kDE4p/saAsMF2zUz+gOGZzHOvMc0mUO+TKHI2c7faZo nsMdNs1zOPK+Yw7hMge5zGHg1HL2wNFUNIiT3uTsmaM5yXoiDk/ir2fF/ZLe4a8pxYtjMn/J5MhJ PLFfrZg8MfDPirQ11SuSw7We6o41vSjuo8bHuuac4o6L+YdH+KqZo6ziSs6OZHf6pTuHNCe5Xuus 7jzTM7mePZE0pbg6XqZnDyXNSY5DyccYXWy/jEHR9la5/ap2zXYtdjWsbCvMYuvXYsvpYjtkxZbV xbYIiO2UlWB8bMes2I5ZsR2zVi9u2bu9CW6/Gr3NDVvOaO9426/2vM0Jm5u2t7ftV3tenYqhR3tb 5HUjjujRRpxu+rMO5Lnd20fEiMGhwvqZ1Mcs6rTExySoJH8v+WMSdMY+KX4L+3Qn/yX5exweJ//n 9M0n9D0/3TnPQS9zSJc5HHnZ+SHAPId6lUM4ct/zQ4B5DuEyh4FT+8stbTvchWjIZ7Kbu4AJJP+e 3F96aXv3Lij+1drLs2Q333WvEJiT7CS84s7OtD2KVySna53VI/lnxV0v6yH4lOKOl1V/trvD8DOS +432L5LdoXGP4acky7XO6pH8s+L+W686CD6luONl/ppKj+GnJJeh5BNI2nYRGCBsb/fdr4Y8bReB oaH2Lt/9anTpRmcI185Yic2iSzZ6m00XO2slNqsuNqsuNqtuibu9nXe/Gh+bVbdc0d67u1/teZs9 N/dsb9Tdr/Z8dQDM/SDNCHDZUL9H0NFf9WkIepe2E7+R5rlxv+ozZHCobvxM6v3wxLzE3BnI9fqy 1CvmKd/CPFvXnQcvztru2wWm9O0PtQwZnN5vcIFDvMxBL3M4crLTAPwCh3KZw5H7ngbgTxziwTu2 HnsOpjwxnPFEd8f7fdL8RXEXQN7On1zRPQ51j8Gt7h1unpOcHMlnX701J/lMpnOX3u7o+Vlx8THk A/ZOKS5jR4v+8kqHm+ckj2tn9JdXOtw8J1mvdVaHnp/Ij5EcfweASMeASXvz/35Vuya7ZrvuiM0q X3uz/34Vuxq9zalGO60TbW412txqtLlVy1vt7f371fjYnKrFSXsvf7vaHKo5w61r2hv3x913i7Vh bX89/RPj0buZH3OdUQby3Mn73tNHDA4V1k5h/wWvt1nOOWXjt1C2dMq6846PadI5bfO30LabJj0l tpssHQo9D7XmOehlDukyh4GvHRx/KQ98NNPt/fGXF8muv7VDr1ckOw7nr5ncDtpeEV5PePu5bZ3z PR6Osssxh3KZw5HzHL8Tc5B1/LeKdbsUpjqwf6/Yi2QfJj52ic5JLo5kf3/EY5folOS8XnPabpfo M3n2YeJjl+ic4jJWPLvpLfJ3hq5IHqe3EzjPzhsZrGm/N7RfDW/ZOSMrzO03hfar4S5bW462thzt fFG080WW2m+J9pb22m8E7Vejs5nBaDOD0c4ZWYjdHP7mfu1Xf/ar0WUHiRz+Akd8PX8Us+vnX+M8 Hcjzuq30nj5icKiwfib1gfamJXZgrbh+3YG1Kfvot7BPD9YOfvKjg2lT+pYT+p7HefMc9DKHdJnD kZedn1Kb51CvcghH7nt6TfuZw8GxmHBfiJ7yxHrGE92XJdzXs5/I+UtinuLdjNyEXO2PxbxI9vfQ djNyU5LlhMnOw8R5Du8dRld3mNLPyk21Pl9zmH5y71lxHy12c3Mzim/jGqqbv6G2m5ubkhwcyf5W x25WbkpyvNZZ3Zr2i+L+htrHmvac4mMvU/9NXt2a9pzkOpR8AiHbWrIBwvarkPvVkKetJRsaar8B uV+Nzk5kRVtTjnYiK9racrSTWdHWmKOtMUc7oWXFov2yI6+Wg28Zsf1+435Vuya7Frsa3R4QN/ds v8S4X+35bVw29L6KNARcrye71F/B+RpB54E8r1u/WsAZMThUWD+T+kDQ0xJLR+T6fYegp+xTv4V9 OgSt4h+g7hD0jL4STuh7HkHPc9DLHNJlDkdedh5Bz3OoVzmEI/c9j6CfOPjHZXoEPeOJ8YwnnkTQ z4r7J7I6BD2luI4V95dWegQ9JTk7kv2Njd2a9pTkM2nu5Jr2E7l/XKaHvTOKq+Nl/nGZHjdPSXYq 532X4CFunpKcrnVWj56fFT84lHVF67GLHQNIDQa8bAlbbQlb7ViQ2lK2gYH2s9T71ejE6GxJW+0F +mrHgtSOBanc6A3w2ZSu5cr2Y9P71fjYlK6FZ/sZ6f1qz9sUrnlE+4Ho/VqG1tB0iCtejw+pfzbm /h7fWAeyvK7rj8a8MDg6GnNXVjqi+5z8+EdaXwS5o+D72w1eyFxR7Xe1h23zf5rlgWI/FRkckW43 PrZofirS6cHsJqvutQYfC00n3Ob9j8qqbWK2Xr91xc0+N6UHDZrwroOVig6VfySs/ab6UFH/ZEl7 f/SkUMfD/EMl7XXVU4RlUlVLpMXp0OIfpHu8c+ozwjDw60OVLYd/tVrxLNn1px5bf0YY51S2eRPt j5E88/CPkfQ7GT4jfHGn/wee195wDQplbmRzdHJlYW0NCmVuZG9iag0KNTk1IDAgb2JqDQo8PC9U eXBlL09ialN0bS9OIDI0OC9GaXJzdCAyMjk0L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGggNDQ3 Mj4+DQpzdHJlYW0NCnic5VxNj+S2Eb0HyH/QPxiRLH4BgYEkdhDHjmPsGsgh8GFsd9Yb784Y4zEQ //vUox5bLW6T6lGcUy77atQiq1j1ikWR0vpsp3nyMU4hTT6nycSgGCfr5inM82Sz/pzz5ERvme0k M9BMEkRRJm+BbvLJKIYpCNBPQfsKc5qiB8YpGb1m5ilFxTlP2Vn920xZDfA5TGb2qtDIZEzQXoyb jLW4oj/ZBMFPxjlVbtRIlyHEyYhX9Xqf8do0mKxCVAOsnUxwEIwKSU1QM00UCNpzgoFWe04Bgvac tUWw2nNOEHT8s8vaoVVBR4++rMUQ1C3WYgzOqY8cBL3H6SiC/mHFQ5DJ+hmttB8fIITJQmHQTm1I ENJko7jiLx0fBO05BR2pXrUZYxftOSM04ic3Y+wiKmQMWSNiMHYdkrMRN8fJOQRN/ehcxhVEDWFT m5xH3LxRAYHTlg4uCd6pgND5MLmI2HnVFRE8DZxLiJ7XnjPGrsap41XwWXmAAAYlwoyxS5jEqHVB exeLUQQ3icMoNJziEEH1tQhGoVQTQQRDnMRjFDoAQfCDOksCIhiVahER1D8kJvVh1J6TQNCes1Ir KFUlBwh+8rMGLaiz/JzQs7LKIIKq2FsdU4h58k65EzTA3kUIZvLFnqQ0LvYk5bFXTyBCHtQLSXtG 9+CQjwi39u4jQoDESDBejfNZCRsKlSME5AD8kx3IrgL0Ff8o1UPxTy7UcUuiuAShBNhOcS5RRPOM wBi9Al9bCAbum1WA1wSCw9iyCsVcCMg+HWmEj3KEEHEf/sHP0KMDiEadGZXh0WpkouZidJoBelmF BMFNEfyJ6ogI/kQlQfQaz4jeweeoORjhpKiRjlHQj3aa1LqoGRVTgKA9Zx1pVMIpsyC4SW8pmnVi mCF4FTBSTBGaaep1vYJ8jxrXJBiycj55DUFUlutAcSVNCTT3ARMLFKrTU4K9el9KyqaoyZgyNCsb Uk64kqY8K2GRftnMELwKcJ1ezSbjikzaCFf0ZocxCeYsj5/ilAWO1GzKEiHYKfviJO0Q+R6VFhmz obpNBdUTlYIZI4g6bI2JmqrJlpMSFlHMGSPVRMsZ2j3mwxnK1CVmNuhb80klTZSoPlWfIR7KcpXg toAWzkGKkAICpPOaetkiQpAypBkzLQavw9WxO1dmaJWUqjHiVwwnBvyqoUFQIUFvhI7iyggdGXo1 NYyapUFRR6gEKmisjDHQq9xTSdthwHoJejX+KoEFCZN9CXFCLzr9qKTjNQIuagqqpFyNES28hzb0 Ekov0AbKx4wWGJdyDBJaZFiQ0CJDRy4MhI6sY40ZtWUG8VF37IxgKN+NNQ49R1Qe0FVnHpVgKeqi 1Sl0Qu86DE2spKzFgCCpDut1vCgrKqln04yeUcXSjBaYlDHJq6T9J2WPsRgXPKzOAOln6EC+JAO9 Gbydi5SgQ+9zGpoJqW6cAb1RI5WaaKG2ODVBpYgqaSDhPqe8SCiPTudrvYbSKUqzhLroPFILpdKh eiNt1AOlZ9Ra5FNCQXaFrg49J8EsEUoBxjXtRcrEoqZo1NQ8vV8wzYIYZW4HByQjZQMEUAwu9pgW LFzik95iYbjPKI9qgNEKrLUP4dYyhFKHMo4a7dR4o1muhQPOiZibRFuhpEcUCpVEnY9wqJ6M6Vul jLk3omTPWDr87nd3X5ZFzzy9unt999XHd1/98uPp7vXz08/fPn/y7vT+7rN/6FTu8LuiAL+e7r58 o/UG8kcf/fY3Sx+aY+zj1dU+1KDSR8wLqp8XZN/qlAX5e1mOdXTlau+X11TZ1GkVdkaZBhrzUKMG Zj6kFAvLnlIsLgdKlXLOHlTa9y1WsCOlukqSg0r75MEyeaRUF2LhoNIwUDpkkeayO0YkLPb7SodE clhOHlNq+kTaa6tTmXSYtJfVSybW/KiUrSyqga2+rsMvzztdF5khA8V1Wtkd/wzoZ4b00wlT/EGl A/qZIf3wGBEPKh3Qzwzpp0s8yceU2sE8ZofzmC4IvDmodDCP2SGLPB59DiodEMkOiaRrAH+QSHZA JDskkq6d/UEi2UFB3JkYmMQ1tSrbKwErJ2qYqufqYK7b6+bhQLFtozNMx0l5PFY3mJCcHekN2Fw5 qNQNlMpQKbZJDir1A6VhqBQ7HweVjsKahkqxG3FQae4rlSGX8OR6kEgyIJIMiaRPWfEgkWRAJBkS KWJr46DSPpF2p4cllWtqVbZXAlZO1DBVz9XBdAY6nAfxxKgPtZ2pUHZWVzKoqTKsqdh16tTUPaV+ UFP9sKYmfcjs1NRdpYOa6oc1VZ+NU6em7iodhNUPa2rSh/5OTd1VOqipfsglfVZNB4nkB0TyQyJh 8+MgkcKASOO2x7JbWOyFxd6z2HsWe89i73mf531hMHeGIffyPGUz5c70GXYWOmFAvzCkX3ZT7kyf u0oH9AtD+mU/5U4d3lU6oF8Y0k+f9HKnDu8pjQP6xeE8hi2+uVOId7UOJrI4JJPBhtp8kEtxwKU4 5JLBHuB8kE1xxKZh22MpHpjKgakcmMqBqRyZ8pH3Rd4XBwvBOCSgwZ4ydpPnztQb09hFaUDDNKSh wZb03Jl8d9UOeJjGPDTl/OCg2gEP05iH2EQ3nUq+q3bAwzSc1Uw58u7U8l21g3ktjWmFzX5zkFJ5 QKk8phROIMxBSg32xnfaHkt27tkzSyptK49qYKun69DLoW/fPWMO4qjGlmOnTnPZcdGAh+PjA4P3 ImxnGt5VO+Dh+AzB4OUL2ynrO2pxTt5TG8enCMbiVK5T2HfV9nkYx+cIxuJQrlPZd9X2p7Y4Pkkw OKfrnJrsq+1TKo7PEozDAeUxSsXRacK47bFkz0xqbu2TtpVHNbDV03Xo5Y2KrnvMmIM46Cxnqden 4WjmsYvMgIfj0wTjyjtUB9UOeDg+UjAy45j4oNoBD8eHCkYsDqUPqu3zMI6PFXDkbDpHKLtqBwcL cXywYATn7AcpNThaiOOjBSPlnP+g2gGlxocLxpd3/w6q7VNqb75gbtdEq8yvVKzcqMGq3qvD6eg8 23v/zbvT9WMNvi/ABw++w1DPOuvhRt3FrPsc9WGorpPqFFpdtGPO6x/vHz6w5tzg7jONgL0I2HBj 23QOoHabaTJ1jpEu/Hb69/M3j/++HmwGxA0yqzL89bu333X8z/c3+CBImpSX1BYcTBfO7PiTu5uf TfNFo+E+tplY1ZemV3SNXHJ5JvJBBzUcn//h8btfrp7adxrWufjzT68rzX2l55OCXQ8JG5V7/vaH v7y6+9s3/5q4U3utZ7m1Z3/FnM/fPvxwdTDC8EvoDKqxT7r2xVvtCy+yL9G+ntMb+3zPPr83F5zt i9d7Dld7bm6KXffsjpSbrXHZyC+vYi4ovwbd0kWjmlndxIhC3cJJlhvDdGJ5F7RvU3V0J33E9tuu qXe9qek39WFvVNiTPJbxPvb17taYcwiMuc6Z1ONMuDm6xl4xqMs0Tv0x9JjVGJi7BvqbDXQvMjDQ wF/H73LBkrzHksgCSe/XQZZXkPvkS2MCXR7kvJDzflBtwu5o6r7cSxkfBwavi4xdz4erhGLornV9 O6HiFYO6hIokVOwRqjHQdA1MNxuYXmQg13ap5/fGQNsz8Lwhvm9gvt719RVIc1N3GbA/1MS84mZk TKwxaVBTbqecvVh5xnPN7SZ7pHIeczC+1Y3lHf6+Uec62skh12+bbuaRvV41Qnehk2+eGK29YlA3 btwcjrlXvxsDr6+XvixfL9xqoHuRgYxlHhDpBX6/qBrnA5A+kbiFTu/XQZYPNA4TKA0qzk7ViDXJ BhU0747KHqweuW94mm+eoGynevTW2Gm+nVjX1/jh+lKsuam3HFqH1qNoWnbAy2c2CwbibXUp9gpn mm/ndXqRwQutk+mvB14S0XzRat5jX1qOKWpc6yDL50V9Up+XRFepSWOP5BQtvu4Ds1tq3LFnj2T6 VSSZcKvn3fUqEnsLnWRuJpSzVwzqEoq7ismOnHn7sNyhVnLRyu/SkBuidEn58mzB/oNsMrIT1UFZ 2KGhGe15hVFTbonVR/T6zFwfX+rzRC1MtULUpKosr6P7b/btBmVpdwsz8uVT7izWUfdmz6XxV0+n 06vHx+e7V4/vTn+9/3GKXMLeP50eyq8THz7K89oyzqV/w+Nyy5M0y51yu7wGPtllWsZ37QvyNTlH t8ky2knYrV+4X3d9q8tg/9mYL9R5n51+Wan6J7X94fH5dPcF/vnk4bv1j+ro16dvn+/+fLr/7vS0 yGhT5U8f3r19OL3+/h4ewYXfP2gP989vHx/499Pz23/eq1D++vvj0w/fPD7+cPfx47c/v1ejypWf vj+dnmHl891f7799erz4+4/f678Xf3/89v7d45uLC0s413sXPXrbm6f793d/evvm56cTx/rFz+9/ +oe6hItxM/Ebw/JB5OLa8uFlcWr58LK4s3x4CSmUDy+La8uHlyWW5cNLSLl8eFk6nsuXl0Us3+gv oi3fXhbRlY8vi7h8fVlEf94YM+G8N4bvyLk9Vj4epZjPIr4vZ2f4mpfbCuUj48qn8/OHlfMjiPWr GFYxnpeaNp1Xm/i+nH5x8yqaVbTnKupcndG+nuB3LBqZ3RtwF/D1hPuYDildAo3hKU6mK7neMVzn GJ45mzk1WKNgGqTzeUa1IvtlJhrD/kkFY/IWOWWv6Br0DbI/mxpkf3wNfkX2WxlyRtpJYhq+Jm84 IxhOyGfkxLyibVAaZL+Vg2dkf5WFZ6Sd3GNesTKb/XIGMywQxqcG8xa5Z7aia7CmS2iQ9oa8Rc6o hmm8IvvjY7th5hjOrCbGBvMW09ygbVAucaG74exjUt4ik86Q86aS/n+Edp4vcTHOco1sZ9/gYqQ1 tWbJJbIx08aavEUWKGvZiGeD/79IvzDNV7QXzmSuW+a2dXUqnxtkY56xrMj2zOkVGSTmtpXaL42q 5cXXekFGMKctc3nF0GBqMG8xmAZdg77B0GBqMF8inRdrWaMTaklkYq9IJzChz5hqLbQN0kgmtq1L ubqi4HrCsopZ5rattTXbBl2DvsHQYGowb9BxJbKia9A3GBpMl7g40xmuR427EYUYGuRiiw8+K9J4 VtMVLbEuNtgvq6pjVXVMK8eq6phejtXUMb0cq+iKvsHQYNoiM86xeq7oGvQNxgbzFplxK9oG5RIZ FKab83mMfChwTLcV2TlL6Yo0mqV0RTqB6ebqQwozzbGkOpZUx8xzzDzHjHPMOBfzFplxK9oGpcHQ YGwwb5HbzSu6BqXB0GC6xCUIMi/GSn14+ACF6BsMxNQgn/BYZVe0RPbLDBOuV4UZJswwYWYJM0uY USvaBqWDocHUYN4iM21F16BvMFwincp0Exa2PtJ4FroV2TnTbcXab94i005Y8IRpJyx4wkK3Ymww X0dm3orsn5knLHjCzBMWuBXTFplxK5oGXYP+Eulcpp8wzfrITpl+K7JzFr4VaTQL34p0BgugMP2E BVCYfsK0ExY+YdoJ027FvEHPQreia1CInhgbTFtkrVvRNigN+gZjg/kSlyB4pqFnmvWRndrQIDtn 2p2RBc872yCdwSWlZ/p5pp/nEtMz8zw3MTwLnmemrega9A3GBvMWmXEr2galwdBgbPDSuecXEqVB Nmb6rGgblAbDFpkhK9oGpUE6hYVpRTqbmbEi7T//Z1ub/3Sr/vdU9X+MukDboDQYGkxbJONXNA2y HxMaTFvkw96KtkFpMDSYtsha8iG6Bn2DscG8RZaRFV2DvsF0HUniFW2D0mBoMG2R5WJF6WBoMG2R /F7RNigNhi2S3x+ibVAaDA2mLZLnK9oGQwfTBvmt0wXaBqXB0GDaImf4D1EaDA2mLZL3K9oGpcHQ YH1xevN69vqadtladfXIwjfIRucXLtkpZ971ZVDe7+MWzy+r0bhQr3NwJNP6ngt/JznWl3Co9/wa A/WyvPM1hnqyf3E0y71gTkKp7rZz4Xs+O6NzPzg7++1v/gOHdao8DQplbmRzdHJlYW0NCmVuZG9i ag0KODIzIDAgb2JqDQo8PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDI4NT4+DQpzdHJlYW0N CnicXZHdaoQwEIXv8xS53F4smrhdKYiwP13woj/U9gE0GW2gxhDjhW/fSeJuywYUPuacmclJcqrO lVaOJu92FDU42iktLUzjbAXQFnqlCeNUKuFWCn8xNIYkaK6XycFQ6W4kRUGTDyxOzi50c5BjCw8k ebMSrNI93XydauR6NuYHBtCOpqQsqYQOG7005rUZgCbBtq0k1pVbtuj5U3wuBigPzOIyYpQwmUaA bXQPpEjxlLS44CkJaHlX30dX24nvxqKasQOq03S/Kz3l+0jPkc6RLoGeojIPSp5zT9mRRdpF4mHm 2p1dZ11X47E9z/OozlZ1rLO71bLHI8o4Dv7f1F/JJ3/LS8zWYlTheUJGPh2l4faCZjTe5b9fcbeV ww0KZW5kc3RyZWFtDQplbmRvYmoNCjgyNCAwIG9iag0KPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xl bmd0aCA5NTA3OS9MZW5ndGgxIDE5ODk2OD4+DQpzdHJlYW0NCnic7HwHQJRX2u453zfMDFOYGZiB YQaYgREQQVGxYImMUuyFMgooCoItduxGjekJxlTTey+aZBhjJDHFJKb3rEl2k03blM3uxsRsyiYm wH3O985BNGWT/7/35t97OfDM85z3lO+c95TvJWAYZ4y58KFj00oqx491j36/gymfzWLM8+fSMSVV lzyha2Lsc+Td2aVjJhWv1ac8wthfnYwZx40tKS376+Nfcab8fQlj6mdjp02tXNQ04lTGDaczfrVl bGVojKrmfMeUmy5grOzNqZX5A7/78xtfMMb/iKfWNy5tWDGyKPMFxnIsGMD+xrWr/eGrDrzKWO23 jMWkzF+xYOk330xGWd/nGYv1LGhYtYKlsACer0N7+4IlG+YPqph8HbrCeKYcXDivoenwum1PoX+M lw1ZCIP1LoyF8R3I91q4dPX63Em+PzGmFDKWdXDxvOZlV44/r42xF5C3LFmyvLHhb9eyjxm7+xPG 0qYtbVi/In1Ir3+gPeow/7KGpfM8u1ZuYexPNzNmHbVi+arVnV52JmMffyjKVzTPW7H4HqUDj0b7 XnYmfBvzwPtDPnqobI5t5Ncs2chE2vePTc8Lfml17FvfH2nfFvup4T5kY5nCKKGdnnUwfsB0/fdH jlwf+6nWU7ekKxYWWzarZzFsPFPR0s7y2TzGHBdoz+VM1eXyC1BqjLkipgBdphGrL7MzFWZkii1G URSdqujeY0pnkO3qpOcyNrnS72dBTCeZxmC4VsnyM36dKFP3xsSJmaL3uKOj4S9hRDeIdfltSVfL dulKWMNPln3KdnXPq58cm/+5pN7FdsVY2MxfqqPofl1fx4yn9y+30b+B5/b56Toxk1jjb3pWxtF+ dNXH+eEuNvan2qgfM9sxz8xgd/7q57WwDEMaO+Fn+k37tf30pP//kvoam/Vb2+gGsSvUuaz2V9at P+Z537O6X9NOWckyf+u4/m8m9QAb/GvqCV9JzV9nZ/yXn3fTMf1c8VN19E3siu7P+9FYCn/dmnXV j/Yl1lB59th+1XRW/mv6UO5m6b/lmf+dhHHu+LV11WtYRkzbj9dQXcdy1OtYxo/sOazmvzu+ntST /ncnvPu1+EsXpPOpXsTcuv6/65B6Uk/6fyYpV3GT1Oqef//+VnqxccA+JYZdJm28k/X5rc/VJbM1 wF1dz046/mfI6PNWsdJf6kf9ofO7Y+ovZWcAG3/reI72x679t3UGs23/1f7/pyX8nLw4yhW/8zjG AXcDzcACoD8wT4wPaPy9x/efmLCXZ//eY+hJPakn9aSe1JN6Uk/qST2pJ/WkntSTelJP6kk9qSf1 pJ70q5IaRQr9toSvRw5KbWI67W8KBzI/07F4KCvLYH1YIRvBTmBFbCwbzyayaWwGq2Fz2CK2kV3P drK72D71Xr/dn9zZqfVuReverC8brrUZrbWZzCq0Ng1scVeb1mgb3vm1HJhOp8Yx1vlx5xdaNl31 CupsVB5SnlDuZuyDuR+Mif6Gpx9GOYRN0vQE7bOCVWs8my3rmunpcsbqBPUydYt6snqe2qxWq0vU T9VD6mfq5+ph9Qv1n+qX6lfqDHU6Zu3AvN3wTBbLZiWsFGOfwWrRZxNbyFax1VzhNm7nHp7Ge/Np vJbX8SV8OV/D1/LN/By+jZ/LL+BX8j18P3+UP8mf4s8rzcpqZa2yjun5p9pYvvjR76g4U6J/Famw X0786Gy6Lac2L039zNxQImbHdKOhJgtHHzNPxvKBkYCcMes+Z+S6/SZMhf6xF2D7N374NzP73ZK6 UF3E6Dz8uOwX/8LyF1LPOfo/do6CY5vmzK6bNbO2pjpUVVlRPm3qlMmTJk4YP25sWWlJ8ZjRwaJR J4wcMXxY4dAhg/P79c3rnZXZK5DhczsddpvVbIo1GvQxOlXhLK80UFbvD2fVh3VZgXHj+op8oAGG hm6G+rAfprJj64T99Vo1/7E1g6g5/7iaQaoZ7KrJ7f6RbGTfPH9pwB9+oSTgb+O15dXQ20sCNf7w IU1P1rQuS8tYkUlPRwt/qXthiT/M6/2l4bK1C1tK60vQX6vZVBwonmfqm8daTWZIM1S4d2BFK+89 imtC6V06vFVhRqt4bFjNLG1oCk8rry4t8aan12g2Vqz1FdYXhw1aX/5FYsxsm781b3/LuW12Nrc+ 19IUaGqYVR1WG9CoRS1taTkr7MgN5wRKwjkbP3RjyvPCeYGS0nBuAJ1NrOh6AA/HZNoD/pavGQYf OPTpsZaGqEWfaf+aCSmm2OUmlEvNMDaMEPNLTxdj2dYWZHORCW8tr6a8n831RlgwP7cmrNSLkv2y xBUSJVtlSVfz+kC6WKrS+uj32oXu8Na5/r558L72nYlvlPvDalb93MaFghvmtQRKSshvVdXhYAlE sCE619LW/vmo31CPSSwSbiivDucHVoSdgTFUAQa/WINFldVak2izsLM4zOobo63C+aUlYlz+0pb6 Ehqg6CtQXn0/K+h8r3WQ37u7gA1iNWIc4cRiLEpWaUt10/ywr97bhP0531/tTQ8Ha+C+mkD1vBqx SgF7OOc9PC5de6LWCnM7rrasLGZuyDT6qxWvWiNWCwZ/GT4CY0aiwI7l0rJiRceM9FdzL5PV8JRo DaGO6QcZNbN4nChSRdPicd70mnRKvzAkb3RMMZlhY7e+7DB0jYme87NDo9piQDn+0nkl3QZ4TKcx 0QFGe/vpcSrCF9EHo4VRLOc4WaRm4uTCpqAbzSRW0e0Ps2n+6sC8QE0Aeyg4rVrMTfhaW9+JlYGJ 5bXV2mpHd0nVMTkqL6RcmKWjWGaUYuzBslyvXFYtP1bLd2XHHVc8Xhb7W4yBiZUtovNAtEPmxwnC pPVZ4xu2FcYPwtEsw+0WKGsI4EVT1tLQ1rl1bktrMNiyorR+4XDRR2B8U0ugsnqkVxtrRfVm70bx qHg2kU+sGtM3D3fPmNYAP7u8NcjPrqytvt/OmP/squqIwpXi+jE1rb1QVn2/n7GgZlWEVRhFxi8y oqcKZIxafe/9Qca2aqU6zaDlG9s402xGaeOssU0hm13aFNh0ZAtqNpGwSO6FcDGu21J/k1ieTTUL W+prxOFiiVhKfPMwD4xiYSUwqpUrekvYFJg3JmwOjBH2ImEvIrte2A3YGDyRwzniTmqpD+Cewoaq Zl5OW1EVXfrbOjurqtNf8B6qScdWmwXUVodjc3H3x2ROQL2xAvUwjw1vbWwQ42ChatHWkDm+sQbb VnaIKuPDseghNtoDapRpbcR2RKNGrA0WUGu/FZnw1ppwTa54aPWiGm0728NsXGA4lp36jMkSD8qv aYkPDNTOJo6CKfMsQbEYG6usJosXWTyshpxksGDkjQEUNdb74W0da6zEVqe71OQlyzxcibqseRpM 3mghE9NSM81WUzi2HzrEt9DmfuJIxmQaampo8FrurGgFPNseNmNEWd1cGW0A76BovBgLvs/CUEXV R0U35W2sIrAeN4sYtNaTAcVha+b4Blz+1N4MS6BQNjaKO8Ic7eMAWQ1i5hb4Xc2sauu8LbAhvVvq mxcQLwexMZn3fmxsVtNyvCE8M7dvnvF4q1Uzt7QYrT/dgPxltHaxMPpL8dZgLBKr+tuU0++NdfMJ EKdJcaoUp0ixVYqTpdgixWYpNklxkhQbpdggxXop1kmxVoo1UqyWYpUUK6VYIcVyKZZJsVSKJVIs luJEKRZJsVCKBVLMl2KeFE1SNEoxV4oGKeqlmCPFbCnqpJglxUwpaqWokaJaihlSTJciJEWVFJVS VEhRLsU0KaZKMUWKyVJMkmKiFBOkGC/FOCnGSlEmRakUJVIUSzFGitFSBKUokmKUFCdIMVKKEVIM l2KYFIVSDJViiBSDpRgkRYEUA6UYIEV/KfKl6CdFXynypMiVoo8UOVL0liJbiiwpMqXoJUVAigwp 0qXwS+GTIk2KVClSpPBK4ZEiWQq3FElSJErhksIpRYIU8VI4pLBLYZMiTgqrFBYpzFKYpIiVwiiF QQq9FDFS6KRQpVCk4FKwqOCdUnRI0S7FD1J8L8URKb6T4lsp/iXFN1J8LcVXUnwpxT+l+EKKw1J8 LsVnUhyS4lMp/iHF36X4mxSfSPFXKT6W4iMpPpTiAyn+IsX7UrwnxbtSvCPF21L8WYq3pHhTij9J 8Ucp3pDidSlek+KgFH+Q4lUpXpHiZSlekuJFKV6Q4nkpnpPiWSmekeJpKZ6S4kkpnpDigBSPS/GY FI9KsV+KR6R4WIqHpHhQin1SPCDF/VK0SbFXivuk2CPFvVLsliIiRasUYSnukeJuKe6SYpcUO6W4 U4o7pLhditukuFWKW6S4WYqbpLhRihukuF6K66S4VoprpLhaiqukuFKKK6S4XIrLpLhUikuk2CHF xVJcJMWFUlwgxflSnCfFdinOlWKbFC1SnCPF2VKcJcWZUpwhhQx7uAx7uAx7uAx7uAx7uAx7uAx7 uAx7uAx7uAx7uAx7uAx7uAx7uAx7uAx7uAx7uAx7uAx7eLMUMv7hMv7hMv7hMv7hMv7hMv7hMv7h Mv7hMv7hMv7hMv7hMv7hMv7hMv7hMv7hMv7hMv7hMv7hMv7hMv7hMv7hMv7hMv7hMv7hMv7hMv7h Mv7hMv7hMv7hMv7hMv7hMv7hMuzhMuzhMuzhMtrhMtrhMtrhMtrhMtrhMtrhMtrhMtrhMtrhxbuF QNQcSRvlQ8wcSXOBTqXcKZG04aCtlDuZaEskzQLaTLlNRCcRbSTaEEkdDVofSS0GrSNaS7SGylZT bhVRMxlXRlLHgFYQLSdaRlWWEi0hWhxJKQWdSLSIaCHRAqL5kZQS0DzKNRE1Es0laiCqJ5pDNJva 1VFuFtFMolqiGqJqohlE04lCRFVElUQVROVE04imEk0hmkw0iWgi0YSIdzxoPNG4iHcCaCxRWcQ7 EVQa8U4ClRAVE42hstHULkhURO1GEZ1ANJJqjiAaTs2HERUSDSUaQjSYOhtEVEC9DCQaQNSfOssn 6kft+hLlEeUS9SHKIepNlE1dZxFlUp+9iAJEGdR1OpGf2vmI0ohSiVKIvESeiGcKKJnIHfFMBSUR JZLRReQkYwJRPJGDyuxENjLGEVmJLFRmJjIRxVKZkchApI8kTwPFRJLLQToilYwK5TgR04h3EnVo VXg75X4g+p7oCJV9R7lvif5F9A3R1xF3FeiriLsS9CXl/kn0BdFhKvuccp8RHSL6lMr+QfR3Mv6N 6BOivxJ9TFU+otyHlPuAcn8hep/oPSp7l+gdMr5N9Geit4jepCp/otwfid6IJM0AvR5Jmg56jegg Gf9A9CrRK0QvU5WXiF4k4wtEzxM9R/QsVXmG6GkyPkX0JNETRAeIHqeaj1HuUaL9RI9Q2cNED5Hx QaJ9RA8Q3U/URjX3Uu4+oj1E9xLtjiQWgSKRxJmgVqIw0T1EdxPdRbSLaCfRnZFE3Nf8DurldqLb qOxWoluIbia6iehGohuIrie6jjq7lnq5huhqKruK6EqiK4gupwaXUe5SokuIdlDZxdTLRUQXUtkF ROcTnUe0nehcqrmNci1E5xCdTXQW0ZkRVwPojIhrLuh0otMirvmgU4lOibhCoK0RFy5jfnLENQS0 hWgzNd9E7U4i2hhxNYE2UPP1ROuI1hKtIVpNtIq6bqbmK4lWRFyNoOXU2TKquZRoCdFiohOJFlG7 hUQLaGTzqfk8oiaq2Ug0l6iBqJ5oDtFsmnQdjWwW0UyadC11XUMPqiaaQcOdTg8KUS9VRJVEFUTl EWcQNC3iFE+YGnGK7T0l4jwNNDni7AuaRFUmEk2IOBEX8PGUG0c0loxlEecWUGnEeRaoJOI8GVQc cW4FjYnEl4FGEwWJiohGReLxfucnUG5kxFEDGkE0POIQW2MYUWHEMRY0NOKoBg2JOGpBg6lsEFFB xJEHGkg1B0QcYmL9Iw5xNvOJ+lHzvvSEPKJc6qwPUQ511psomyiLKDPiEF7qRRSgPjOoz3TqzE+9 +IjSqF0qUQqRl8hDlByx14HcEftsUFLEPgeUSOQichIlEMVTAwc1sJPRRhRHZCWyUE0z1TSRMZbI SGQg0lPNGKqpI6NKpBBxIhbstM31CXTYGn3ttibfD9DfA0eA72D7FrZ/Ad8AXwNfwf4l8E+UfYH8 YeBz4DPgEOyfAv9A2d+R/xvwCfBX4OO4Bb6P4hb6PgQ+AP4CvA/be+B3gXeAt5H/M/gt4E3gT8Af rYt9b1gH+F4Hv2Zd4jtozfL9AXgV+hVrru9l4CXgRZS/ANvz1qW+56CfhX4G+mnrib6nrIt8T1oX +p6wLvAdQNvH0d9jwKNAsHM/Ph8BHgYesqz0PWhp9u2zrPI9YFntux9oA/bCfh+wB2X3omw3bBGg FQgD95g3+O42b/TdZd7k22Xe7Ntp3uK7E7gDuB24DbgVuMXc13cz+CbgRrS5AXy9ebHvOuhroa8B roa+Cn1dib6uQF+Xw3YZcClwCbADuBi4CO0uRH8XmKb4zjdN9Z1nWuDbbrrFd67pNt8ZaqbvdLXQ dxov9J0a2ho6ZefW0MmhzaEtOzeHzJu5ebN388TNJ23eufmtzcF4vWlTaGPopJ0bQxtC60Lrd64L PaCcyeYrZwRHhtbuXBPSrXGuWb1G/WoN37mGl6zh/ddwha2xr/GvUS2rQ82hVTubQ6x5WvPW5nCz bkS4+b1mhTVzU1vn/t3N3rQycHBTs9VetjK0PLRi5/LQsvlLQydigIsKF4QW7lwQml/YFJq3synU WDg31FBYH5pTWBeavbMuNKuwNjRzZ22oprA6NAP1pxdWhUI7q0KVheWhip3loamFU0JTYJ9cODE0 aefE0ITCcaHxO8eFxhaWhUoxeZZiT/GnqHYxgCkpGAnz8jH9vUHve97DXh3zhr37vWq8zePzKDm2 ZF48NZkvTz45+fxk1eZ+ya0E3Tl5Zbakl5LeTfo8SZcQTMrpV8YS7Yn+RNUl5pY4uapM46IS4gGD tblOTgxkldlc3ObyuZRSn4szx3uOww7V9Yj9Jbtis3GbrdOmBG2obovzxSniozNODcYNGFpms/qs ivjotKqJQSssosdsy7SqMpvZZ1ZCReapZiVoLiouC5r79i9jKvdzzrgdpBrFKLjLV4ZzvTuRx3C8 z1urKnNzJ7YZWcXEsHHazDA/O5xZKT6D5bVh/dlhFqqdWd3K+Xk1rVwprgo7xW9stfwZ27ezMakT w6mV1eHrU2smhrdCBIXohGCprYlsTE3u7FVrVuXmrp6Nj9mrVudq38jxNSKXK4zie9Vq5MXXGi3P cn8xUTXQnFVIq6Vx9S+3+p+e+O89gP/81MrEHxmM7lROZ03KacCpwCnAVuBkYAuwGdgEnARsBDYA 64F1wFpgDbAaWAWsBFYAy4FlwFJgCbAYOBFYBCwEFgDzgXlAE9AIzAUagHpgDjAbqANmATOBWqAG qAZmANOBEFAFVAIVQDkwDZgKTAEmA5OAicAEYDwwDhgLlAGlQAlQDIwBRgNBoAgYBZwAjARGAMOB YUAhMBQYAgwGBgEFwEBgANAfyAf6AX2BPCAX6APkAL2BbCALyAR6AQEgA0gH/IAPSANSgRTAC3iA ZMANJAGJgAtwAglAPOAA7IANiAOsgAUwAyYgFjACBkAPxAC60Z34VAEF4ABjTRw23gG0Az8A3wNH gO+Ab4F/Ad8AXwNfAV8C/wS+AA4DnwOfAYeAT4F/AH8H/gZ8AvwV+Bj4CPgQ+AD4C/A+8B7wLvAO 8DbwZ+At4E3gT8AfgTeA14HXgIPAH4BXgVeAl4GXgBeBF4DngeeAZ4FngKeBp4AngSeAA8DjwGPA o8B+4BHgYeAh4EFgH/AAcD/QBuwF7gP2APcCu4EI0AqEgXuAu4G7gF3ATuBO4A7gduA24FbgFuBm 4CbgRuAG4HrgOuBa4BrgauAq4ErgCuBy4DLgUuASYAdwMXARcCFwAXA+cB6wHTgX2Aa0AOcAZwNn AWcCZ7Cm0Vs5zj/H+ec4/xznn+P8c5x/jvPPcf45zj/H+ec4/xznn+P8c5x/jvPPcf45zj/H+efN AO4AjjuA4w7guAM47gCOO4DjDuC4AzjuAI47gOMO4LgDOO4AjjuA4w7guAM47gCOO4DjDuC4Azju AI47gOMO4LgDOO4AjjuA4w7guAM47gCOO4DjDuC4AzjOP8f55zj/HGef4+xznH2Os89x9jnOPsfZ 5zj7HGef4+z/3vfwf3iq+b0H8B+e3HNmM2a4lrGOi4/52/Rp7ES2im3F15lsO7uYPcLeYnPZaVBX sOvZrewOFmaPsmfYG//Fv33/ydSxIWYps6h7mZ4lMNZ5pPNQx61AW0xcN8vFyCXo/EctnfbOz46z fdZxcae9o00fz0xaW6vyKqxf8vbOI3i/It85ROSVs6BtWosvDNd23NNx23E+KGe1bCabxepYPWvA /MXfpS+CZxazJWwpW6bllqFsAT7nIyf+5h53iaaP1lrOVgDNbDVbw9biawX0qmhOlK3U8mvYOnyt ZxvYRnYS28Q2Rz/XaZZNKNmo5dcDW9jJWJlT2KmakkyW09jp7Ays2lnsbHbOL+bO6VItbBs7F+t8 Hjv/Z/X2Y3IX4OtCdhH2ww52CbuUXY59cRW7+jjrZZr9SnYtuw57RpRdAst1mhKlD7In2R52N7uH 3af5shFeI49Iv8zXfLgCPtiEGZ7WbcTkv3Vd3tqCuYu5tURnuh72U7u1WBv1o6h5GmpSL7QOopfN x3niAsyB9NEZUe4Sbf5Hrd298ktW6Y+ru3nmKi0n1PHWn9OXsmtwAm/Ap/CqUDdCk7pO093t13bV vV7L38RuZrdgLW7TlGSy3Ap9G7sdZ/tOtpPtwtdR3V0R383u0lYuzFpZhO1m92Il72N7WZtm/6Wy n7LvjtojXZb72QNsH3bIw2w/bprH8CUtD8H2SNR6QLNR/jH2OPKiFuWeZE/hhnqWPceeZy+xJ5B7 Uft8GrmX2avsD+wNboV6hf0Nn+3s5ZgPWRwbLf5H9fDz1Ww2vmJwK61SX8UtojIDG8Ymsyls5oPM itd9IhvO9+xxlZQY+xoexqtcYX4EA0bGeXHQplOsez2eosDewfrtqmN8G+97b5FhO8LcovZ32l/M b3/nUPyw/EM8/+3333nf/sWLjmH5Be8ffH9Af+5Id2hwxikGg1MfyOinDM7OGlJQMHCUMnhQViAj TtFsg4YMHaUWDExTVKe0jFJEnquv/lCrTm3XK1sCRdMLYtI8NqdVH6OkuOP7jsy0V87MHNkv1aAa 9GqM0dB76JiMiUtKM940OFJdianxRmN8aqIr1WFofysm7sg/Y+K+L9Yt+X6Hqh8xq6iXernJqOj0 +rY0d3KfEenjp9sS7Dpzgt2RaDTEOyy9S2a1n+lKEX2kuFzUV/tkuCXQeUS3JcbJMlgWu+Z+1qvz k3stdj4p0BYVWW2dh+81Q5ilMEEEPUJl2sWnVfu0aJ/B3jxTFOeZ+eRegazMryxmizsjNWCy8kSd hVnsFuWewCOBlwJqwBKwxKdWxIdiQqyoqCh+2LD8/Lo6R9IwB6SjwH5ooKMAHs+to1chy83NTEzU ay7PVtPVODWQkZU1ZCgnPycZAmq6bo2R2zN9vsyEWN3y9o9PVE0JgZTUTBs38ojOmpyd5u/jidOd xN/lj52Q6I3TqQZLLB/R8UysNVYXE+dN1EXMcUZVNdrM29tPEv+ebJf4Z2DYXWkslxWyp4Men9vO J/vsNvFhxYfbgg8/5ip+Rxzs7XEFUe4KotzlMueJynmicp6onCcq54nKeQ/gZ0LWuX8PNMsqgKd3 oyb48G5blK0af7PbovEnu82CFXvQer15v1kxe7K/GjDA0Ev7r9Llg9q4udVQxYoOFWn7dhjPr3tf c9rAg7kkYM7NHUYaTnXG6QLpGVmDHYOGFKTDey6xn9NUPqifEgg4xGZOOCp13Fc4tXHl+I67k3Jy knjW6h2NAxNzR/cZPKu0d0e7p7B2QuRAccWQ5CmZYxeXv3hkRHVxFl91woKKUX1cvmzdqdm+vKqN k/tVjS2MNw2uWKbw/EmDUzrqAiOmtr89vHqkr6MwZWgF46yh87DOEpOGUzx3dwobkRv1Sm7UK+BP hVfAnwmv5Ea9kvswfsaOY26ez9JZFs+LJFTq9vE+bDDrz/u1xk7HkT54SIDn0/Ttrx8Y0D/TGafv diz1rugxFQfY5UxTxLzFttJZlBijMzjnpPFbnjt/cuWlr5xceGJtmdcYo+qMZmPcwKkrp07f3jR0 cOMFMyevKh9kM5j06l67Oz7OmZPtrbr5i2tu+OGeWS5/H29cgifemZIQm52fXXrmo5tOeujk0Vn5 WXpHGk6g2GXnY5fFMx9bF0wtSucJYuckiJ2T4MScE+Ix4QQ3ZpuwT+wc5iHfeKK+8UR3jCe6YzxR 33j24ef+WPjGEokr97bxrNYY2iXSFwfljqgTN9oxW8LQbQOcP/2Ww7d2fKYtf+btn1xTvmfQ8jvP vKd1053Nw5Qrb//+lgpa6Bk3fXLFoj2nT/jBMWrro+JfumJm6ibMLI+tbfVkR1c0Ozrq7Oios6Oj zo6OOrtNcQRjYxP8CX4M3tPGjUHr1iy+P4u/nMWzsvTJ4hc01vJsUKu+a9fXrWzGtPK1a8Qe3f3a Ois/2umBdMdxUt2kM1mN7ReLGSrzjVZjTAw+OvQ8YsTVoIuFnqJwo9WkGxvvjTfSbI3xXme812Hs ODHWnpIQ77EbOgYYHV5t3p1H1CrMO5vNajUkROedEJ13QnTeCdF5J0TnnYB577GmsrRUA6a2OyEh Wd/Ge+/OKE8WF2T0jZR/wDGsa3b8R5ORbxs5XbUKEzN0wHsGDF7TQaPT73FnOI2YaplmPZCQglmM M9i9rgSvI7b9I4PVEBODD93dYpapYkYzOz/TrY/xsyJ2YzA1JcXmFjvULXaoW9xtbpNFKMzCLVbP yh7J5v7sYHZ9tppti87fFp2/LXqSbdGTbIvO3yb+Ojx/EB/kbuOmezMyhuWP2sdNeMebeE5kWKWz jee15k8X643T7CB3RO+5g3V1B7ouuqhfjjnNQ4Y6xC4Qp13zlkPcgEfPv063Xme0GCyFs0+rXXzn 2qLSjXfMG3nS4I6DDocuFu+Iq8yJ8ab44bPmNg249NObptfdceiCCafOK/WYdLMTUhOMWf2yprQ8 vHzT/tNLUlP5hoxecKPRaE+J70jwZKVmuC11uw7vuPJIuMETyPFk0P7g1Xjnuti0vUVJU5PuSVJZ 1Ess6iUW3SUsuktY1EvsAZxpU+f+vS4+2WSv0F6ePD+36yBnHt0CdIW5eLXRmZ4sVjzWlZ6UnO40 ejBXLLDFqHtTKrlrv8WoCtjcoGOAWMz+4s7JFyrdFB2fKTo+U3R8puj4TNHxmcT6W1zZFekmu7fC fvTtXiQvHWxcfNI4s7KyueNHI3ZEX+oup97AeWKi+q3BmeEN5CUaOnrJuRidGW4xF/6s3p6U7vH4 EwzW+I5K/qLDkCIOsN5uUs5q39C1lbtm2v6oUhRrMehiYLB6kto726/0JNDs9bk4syPZrqC9ftSK UYq1f/+k/HxTP7fb0/YrL1wx+bReAywWkzgfJnE+TOJ8mMT5MAlvmsT64d0fTBaL2WtIudmdZM13 D+in9/Uu94VkOFQUj0CoAD6Tb3BEQ/Yu5Rh2Qn5BgYiPuq13gIuYCNERDxxzD2jhES8QPtWcqs81 On3JSekJRqWjQDW7Up2uNKdZ6RjLcTMku+HIPO9Cf/9e7li+Loafafb4spKX2rwJlqPbZsH3Owwm g6rD6w4B6BVd9lv79LJ4ent/mKHemtYn2RybkOoizyLCdLAT2Bm7s202Z9SZGtuibNX4sHCmM+pM p+bMNFO/fgOFMwe6beIDFQfaLUKhykBRxc7SCitM/WzZumRxV4pXguY+4bwf+S6/IPpSIE9h/wUS E10/4a80NakgK+vontRtsbo81qGe7EDA1bHQPzpFURRjgs/t9sUb8zwVqdm+VAcfnjpk4AA3x6si wZec6I83jnUi4janDsxW3hu2ecS4Syf88GXXjryzd4YpKcfX/vSgxvq6/Kk7pyoPIx7F28ZiEP8X icbOQ7pPYtJZAt4im4Iep/CBU2wopwgJnCIkcLrJTQXBWD/rz7YiYk2LOjctulPTopdtWvSyTYs6 N20fwiYTS8bVaqsMtPHc1pjpx4YGdd2ixWN+hNEig25xku6TCRe/s+Oi17aVTNjxzo7zD24v3ZM9 8/IVKy6fk5NVe1nzyitn91YuveaH1jkzbv3m+iuO3DNn+i1f3rHsoW1Tqs7dt6B5/7bJVec/KKIg 3D5P4fylsBy2vrWXPjoRfXQi+uiR00ePnD46Eb3YAkmOVOGeVOGeVLvFyielijg7VfxRJ3Nk4n2y W6+3YJrm3a5yS7fXKW0Q+7Fv1MDxr1Fdt2BIfSq47q71F8cmpCeL66ePh7v6TF60dFLOnhEz6vKu u2rKgrJe6sUNVy8b2dGv61xgqQ1JRbM2zJh64qC49u96j21kNGOdGTMewkrYhcE0ez/HUCNGPVTM Yqg2i6FiVkPFKg/FKu/NET9d5BQ5hCugHFHXOKKucURd44i6xiH+2PN/UfYlcG5UZ5716lSpdNQh qXTfZ6vV6kMttfpS9d3qw+1u38bdvm1sgw9sY8AEjG1ICGEChGQGwoQkZCDJTgjGV9tOJsxvyWQz s2ZJBkzIAEN+88tyZL0zzOyGcLS871WV1O22mWTbWFV6aon3vvcd///3fU/2NvAQQZ3ZqwBFkbug BE6HJmXdyai4CdGFa9hCUbcSlWw1ENeIxCH7CZ00yJLDAXLxRDxehYscbYv63SEbRx6yZ7qXd+yv CgvCR6mpxz26f0ki0ruuGMxlkrYDFkNlrn+pq9Ty8Hf7N/cGoJMxQBuAJt6UW1WKzL1eEyIEIxRh blu5p69n+0S7zZLuXNJU+Zeoj7h3bIfM0JWxUMdS6G2GrlwmNkO7KWPvnMN6IIm1Qlrao4uoRxdd j+5renRR9czi9Uq6WZFsYKxZESB3bY42mzxO9F4PcuAenkcP8C0etB2e83gT8uInPWpkfuGkS7/a tOsZqwDGMFPDBZDAChDAxBVOCBZAQeFMYExAnQZGdFcQCoKjE6K90z0eKrXMMQtSuh3CLbgsICyb Tk/zl3mkqmhnavuDXlhkoGTVQLVkRAP9GeSGJjb3HfrWdM+eVR0yB2GPwdKydN9I23RftHlqx+4b p1o6djy8PL1qvFOiSZygOYbL9k+355fm3M3Ldu7euawF7LrhzyAFDIadsYDDJzLhZMRfWNpSWNLR 1NK9fN/E5N0rM1ZXQOIEpyRCzuON+HyNvbH8ks7mlq5l++AeWaGtvwY1P4xtPetUEH4UkNROIbzz Jxs+CqQCJNFI82kRQWWfbtvNEBB9oArnp2n+xXQNKNd0OFR1ZypGfk0F+I9WkQW80wkAcVyF/yo+ /uQbNUXcZBC8kqSlUBBu+j701LdD3JTGHlN8GzIgiKw2iKw4iFQniGJ/EGkNOs2nCJgCoRumSOgB ahrm0Bfs0Bfs0Bfs0Bfs0BfsOI/zCPmdtKto6wWFhR9hjE/xU555vUFYUFeMV9LzKjINrgVZuvte EOJuHzgye3DXc3f1axRBMtQvO1gePTiZVkUTkljw1q3njvR2337mEBGpiuPTf19735pM/eqjqwh5 IZoMQ+92I5RKFNut+KLIsSWjwI2ucTdIyiBuBvUuUO8ErlndSNUb5Pac1RF0o4hoyOV0OeOxwJST EjXMKxZLggg0Q0ArxKanwfT0dHo6HVNhEImCez6/APw0Oxw0g58lLa6EzxFyCiaGqKwxADEZ9oZE lgT7AdhBGKDrCkTNhMGPUkEAokTOQD6vJosg/fvkJ2QJjaNkEVpjF8SMb8M1dmLbT8Y7QfPslT8o fciwY1AFDegmmQUxXh2JgbAT3aTCwBlEN5kmkGkEmSjIREBhqm4q0sgRCxNiEMGU4M7BH5QE0//E ahiPqN4tXubVC6aOkbw35Q+kvRay8gH+MWFxp4Kheq+VqHyfBkI8GIhKDA4iANgI1hbze0M2lgAp HPgIWor4/BEeUHGLgHCJYCF+8Wm2ek/+F9mNpGLhPnmRbOes0GsbrNwnf0d2GOE9ZXHLSEJ+Narb sDpszTnoMP90imOCii6DcRNSdKgA46bYlIcWp2h978FC/zdv2PPCgFFJbsnnC1Jt58saZbAbKo9w lDUR8sccHHXS1ezG5SbXKYKTwu5oiqc48GGlptzgTfzXaJkkJMqVL7Ue6CjuK4BbjRYGLdABY/g6 GG1KxN9DzqRgzylBa2+gN9tLcKycM8EV5ZD955Dp53ikz7lZ8KFiwRIJKwZMGPIQWLseidp1FNyu C6G9agPts7hBsQnyT7Ecn8M7XsgBDHLkXENP3SzwKNaXwyAcJn3vN4x0vWEaJ7FsNR+iUuTpfTPT VUj3YnpmuqjnRpphgJ+B3AHlUyHKbaXns2EtrTq+00dI1TcwWvBwICpNlHivxx2wdDw8ObR/MtN9 4Ls77nQ0LSl2bSw3mQwQwjKe3pXbchu/sDz+nQf7t/QG1izt2dPlNJkgBjOtLQ3GBrf1jO0diQ3m lrZ6fBGfgXdZXT53xCfVr7hr+YtyppQaXNbbD6X7GJTuq9Q+qD2QO5yGzs0YyuvKkteVJ6/LCz1X 5ZWfBX9QPPY0AsjpIMoYIvmnkU9O82oiETcqLGY35ltDJNU4C6gz8RHPID9WhLcnqHHVi0IRysUa f5iXWc2PJuzXOlTN+KrwmBEcDhUwvtqy+aHpdHlwMGEQPXZICGhGCjpdkB0kR4eHk5seWJV81p5b qQS7lYFE/5193asLLvDOwQvHB4V4e2o3VEWofiYD1aYiI/gw99tUW4Rfcuy5gwNHt3SJdb3NlceW rercfBja21oosSDxc6wVu/+EV0UkmsG9rRvau6eQgV0nFfe/r07BXXlfS83hnGLOWoDF9U5AMZqH A9FZgJ+SRojfNaF4zZqHm+pnAX2CHUd51vRl9aGWlnmxloRblGylNThCL0y1EkGcYlydo6uzG7+2 tbVn32Nr0pP9rU6WxkWzNdG5ov3Q3SFlurO4spQ2IfL5bcElmF0xn6gcPnnw3p/c0cG7w06L5BQT gVAydPbZVcdWp6PpiEHyIay9AcrlCepmLI4VsQeUQKkDcJ4iss4iis5FhO6KSDuKSFmKFwD6t6Sy mtSyurCyurCyusVmdWFlkUIZpdAgV0x4SEsdagd3jkBTJ09axqkxBEhUdSotyrqq+lSj7wtNEMLr mlYR8fhCslUgnmAErw0VcoYeu2Hzl1Ylmzc9vH7imMLYAkin2Kf7PtdfghoENaon1KUMJlxVBTo0 vnL82IlNBy4cHxrow7kqD50bgLqz6U6l/+hWqEt9TUha01Baj0GvlsZy2LNKXTZfyu/JExKyJimI UphSqB5h4XokLa24ofo3qAsfne5PfyeNo7T9aWRtOVJXPlLXMfU5p141B0ci+YVC9T87Qj5E4i+Q 4GUSkKQ3+0Z8xPn+BsteC25h3/eqCja9MNerGeWbaU3Z1AqHaqB0JLRArexXKx9uT+RVgTLEYwnX 3PP+wb2TypZy1sRwNIETDJdfuU/Z88wt7Z37vrl551c3ZJ4mbj/Uta47DOl+IjR628oGu9vOWFyi WbKaOJdT6r5j9o4D5+4Z6N//9dXS0UcbxrYWUNyLXfkYv4+6DSKDLc87eGSAquF5dK/lqXorj+7O PLoyedDBt8a62OyVlxWRhyQiZrycH3LHLzcOB8f4YZW1NSOWnn6x5QPNxlpeXJTxtOu5s4WsLaJn P1uqGU/8PohtaMbuT3liuaDl5waOpUTrzw3QNTmDkuFunkeu5u7I8M0jkd6oCWIeqyRbKJZjnS2T 7ZsYwS1Fg5/+DsEjVAoh7MGo5BaY6ZnPr0yZrSbJg+pnrZWvEPcT/w3rxpZg67GXFbuYGUJWNmSA Sx4K8hIYG2opQdSERFDS7Qte3z6DXioxE/BWMVtFMDbhIa2NRAvDIO3hVXm9oJjhTaaF8XiYlgyJ ZKzkkJBXo//F6iAP37a6LqZw8BqzNjJE28ivTcvetds3tBHvdQ7XBXtfbxu54fXghF5CKGlJ5Uua 60+3XETClSHARBBTgIP8xTT8L119QFKHMnY4tFAQT9DQnzlknRlXda4Aw2surz5qlg3JM8jFa+EU ldriiYSF0J8R90vWeyLe5ukjSwqbPaLck/9d396phtyup/fd/Nimej7UFGzKNscC0dy6e8ZSQwHA C0KlsnW6cSgrb72haTgrL1s/+V4w5WSP3zq6tdtDHIgEoquyS25bVu9ziA3+SANuxENdazq6965o iilrcqHuthaXa6y+a0M8Nt07fsfyDGsIVT5Ytz3YVk6u2RYoDM/NtJdwgyuTStp7+nyN3Ui/H4O4 7pswMjdjt58q5UDdfBFDV+wF1Q292gHDsuznkLvlkMfgkO/gVLfBodeMmIIwoL/OxcOIcjYzEh10 januU01UgKye5NaCcfHqVLcaTZjrZJI1NGgnvmkQtZjrbCg3dt/ZD5+qqc5qKB56qLz28FjIVdVn 3Do+0x9dvWLugerIwvg7Wu7adv9G5CnvvfIxmKSymB0LYV86W4pMRPZECIeO5a5icJJ6fXsR09OY 3QV8H+bF7Jqk7Pq77Pqr9qpI7VBMZ4wBVF1GR8BOufiyKp9Ll9O6N9Qjy/XrABIKu0gZoRaC7sUC kOo72tPob00ExHFGWzADGtvrUkX4t7rzd8Kdz2FfVUylPEg1gSZFBOMQELysTrNJd/hNCESY1Kvq 8Jsu4AnI+E36aky6Ypj05Zr05ZqQMrgdmQyGFqophSPMUcmyd1CoKoRYhAoB4QXEs6oXbH67uu7a wv+kwsKdBoj6PRGnla4cXywRsNwguiBjCNtZs7VyHuw2c2pyimDMLPj3ivlaxfj0l5AbmFkChhHW 5OQr5ysxwa7LDHRDmdkxRa337FHrPdcnP9XdxtBX5Bj5QXXF+v5ev75zzV66rp2aPgvqZRjVl2Lv Kx4RVXXUmnJc5acJlZzunQKD19YltZzZgvrl+zWL9vsdKLvsb9YqHGqtQy1zqIZthNHs7FKU5Vja fW2ZV/vYa8rBF8AfoFvhAf386AiEm7Ri7hnpHsy0lTNjrgX7vzBZXdQzl0KxWglD/kE9/PKfOYnP 8hp2nUPqykK9rDkPyWCr728o7h9AQVIOSYyjvq+heKDmS2jRKzt8PDP25XLbmv5GPjM5OhRddWs5 MO9VIsVFXuXaEeI4DMUEwXKGQysm3NmeZFN/nQTdzVjV68IdbMYeVazaDqIH3QEv3qXPqDIjeuTn EOLV/DCKlppbVj0yfP2s7oqRI1aMmZE6V7RcFT2KkzVfXM2c69L+Exyy/Y855JoQ/3z8jzjkqwQF BbQB+WPEf96CEkJVk+8q3lIKJEWQElC2KW4CcQOIM6BOzW9cp1Ly9nUrJQie+rNGYFxQggleXYI5 jxtRNvisFRvfC7fJhU59WkcikCvphBJxIl1k2VphZbr688cqLMRb7ft/cMuev9qdL+7/6/3wWnjW 071zoryjP+Qp7ZwY3tkfBL/dfe6+0d67Tt0CryPwemf56KZibv3R8ZGjG4u5maOITVceJV6FskFs +ghi06H8daq4mveZL+eisG3XiLRKqdWcuMapr8uky/zEZzLp6xHp6+jIZxPpR2aS/T1KdIGy2Owe kUmNjU9mNn0REekWlUgPJvrv6OteU3CD92790bEhPpyLVLqrvpB8D+oMQUDtub2uO2UfO/7DgwP3 bOmUUn1NlceXre7ccqfKGKG0ntCldZ/igeIKcGlkMGmjqZpUUJ1cGrHFOqxFU5sFXVzv611c1e6u ahcXZIv2WJnrSgdIvgGxRfdIG2KL/Dg18Vls8SqZtQpa7q+qL3LrZ7NFFplZwMakRobLCSSi5s0P r08ODgzVoUZAm1dgrmGMlVNVSYGLqWLEWmWNQqwjdXNVdJX/q9FGLQUBaaPqnfBn1FzY5lN7W0Hc qivVfIOHrlxWXeusSLnEBalwpGWYG+pcTGHTI3GrPVi2j2G6u1cDfrqG/hZSnus5GlWJaPwZnGYN BtkXtbsaW9sji91MrKe96DOHoj4TSQBik8MvsCxrsDWMFeaeu9bRHMv3J6yEwWhkLWqfz+SVy/hL cMVl7CXFlB0tjU6M3j36w1FqQbnp93qZSVWKHpSQkRaVodTyE3hDCWg1J7XahFRMLzkhUoh8juc8 +L3aOGBEsMikcHpyNA4/r2T6oQk3NbxZMP5OWCpsEPYKhFZa+idUVxpxvKsZY62opJeUplGRYEFJ aR49/v+WlPCXWmaOLmlcNdDoMJKoZJQurWyr62/2JJSlKyaVRGrq8FR0uD1lZwiIjow0G86Xs3VK yp5UplYsUxLAMnAT3G/ZZYsGJDfPeIIeMZKPxXPJQDjdvbKzdWO53iTaeZPVwQsunnG4HFKk0Zto TQbDdZ3L0V6ErvwrfjP5A6wdW3cqhQmRjC7zjL4XGX0vMrpBZnStzCAlNMnmzOXIsM98WR5ugrZ4 gtHc9kWkdi16vubii1oyi7w+pb6aeDuqCQj8ZgMfTDXIg1sU311WEdWVPlcFau+gbKlofacwJEe9 NgPFUuQNvjBvYenY6P4luEXj1JeqbQGXNNZdMU6vZ40sZXGidT+KMlvEjyAmeEQJQCTAJZAGJZAG JVC1JaE6qQSvQi7w0RnN0gK6VAK6VOD1D6ptopuTakOrbqwBXUch5fhIYaVMOcFRrjIEZtR8emth e09Npa6b3lpUfsoX5hNdTzCizy77BHr8a2roZ2xaKkLODjd2Hx5gbAFouSJbQwSHVizp3H7/Jjxc tc65/zOxvi+2egV+sDqi16GIw1A+9di/nMMiV2A0Q0A3oFZnYgHg1278wKGv065fbfPwV72Ktar6 lX9TCqgkD1GFABI8SFIgnIQDXWEQDYMQui2FQDQEgupoEESDIGEFt4ZACKV1WME+HApCqw2h6hYL VTGEcmroGdqJEPp8E2q5SpZDnLvMjc1XPNKoD3paRQ5p7T9U89I7pFF9KK12ptcagRaECEnWSiF+ nDgMcAKvXCTN7qTfn3RZyMpLJIVaVmRfRGLJCkl8ghulkEf2CwzxJMkaTcyn30NlL9JgMRKrTCJL QFKIwwd2zm0y4f+TNRkI3MAhabdCjnEcSnsAe+scNgTdUxdcWhtK96TaQAFdYw0gHgLxIIgHQNwP 4j6Q8IIkCVIEaO8AHe2gIwM60b+xYAfjvE6Y0VUxQnXlg/ATeKs+jK5qcciKhq09ZfX3kDBL/AS/ h7+bJ3lFdAzzLeVYuf2helCPXqtHXpOXHMPb6w/V4wNwVB5jkZBfRZKcfrFUugglqcl7vriolRe1 H03QdE3ORIJZUI27jsgX3FLHSaryIWGWk/5AnctE/BjHf0iY3Sl/IAGfVT6iSMguZG9YNBCv4/jP cFaEah8QDfhrOLiEs1LI7fShbWFs1vlNwR9k2bn981tktTEsB3cIMtU5N8vCHTJDx4ua35zVZ7jB iPYrBa1jFO5XFrvvHNYEBSOgjDbyGw3IY3Q0ACfUxzOoguUEsu4bHNUhB2CRttYh3ore04mBtgjI c4ALInqBdoXjmhpT5Qgn+MpCjUJotdtsrW6LlFfT33TMYas2+c/3+C8o69XqeYDoM0iJgD9i58hf vUZy9rDXFxMAC5yVDw1ASgR9EZuRvPgyaRQCHl9MxNnKR/UWyURBds6ArZWvwwtBmSQLOAuesUhm kqCNTOUEmKBRZxtns1ZmkPeAKPBOKJ8oNnUO88C1tiLL94CUBzhV8uwEcUvegidY4EYhud0NXG1I cC4QKLuMUtk4Sk5gozppRfXctGa0yHhDhLbUgoT6IOO5Wh1XUlOFDhuDt9xGNzW7gwJO38nyROUn Bj7q94dtLAUA8QdaCAe9UYGunOYFymSzgCIpGol1dqeFIgxW81wDfkniKBgnRLiSNRDUvkacxdJY xzmMhytxoLp6XO0zysLXc2w/i7MxAZKWk65ha0IlL3DiKN3cDLHCxWnUt1lrqFZzm+Cqplq1IQig W/w12mAxzF2ye5A+ggcrd/MSyZpZnOQEE4PGKgfB0wYzSw9KHoHxhsIWh8PF4ztDMRE+py0OIWhx ym5+7msM70FofOOVy+RGiLT64TqGnzcF8wh0D2Ax8KPTA45sFptAsNrqqCsHTcLIZc/I8svCeAda gh7IUQpRjVEvFrNi8Tf8b/QWJzWWJxbB6W6iUM0TWUjGT1RDOVjEy1rJjYzZGY3aYoOFOC11Tmwo bPmzNXW57V/brOxd2cYKEgzohFFwCciCjaLbFxaBGIjbRb8s0BRN4ZXPJZRlmdKaotuWW9HbcUNX cDzgNxkZSsyMtqeHW30jR5/fduD88aHU0kOQ5w0lSJwikedl+L4bdu3ZUb9iexGCWYayuMCRmftW JDo339U7dGxrV37jsXFM53xvUbdDfjKJTZ3K5TBzGeVXXFgJN56KRyIuSOICCoe54u3/a8TY1ET1 Q+56yj8kTYwvIHGo6AKxo8rj0C2UX7OwsNM6cXUTZbX0QkPhab1zVayk4UhNilVe91bzjd/amxgu 5WXILHR83rbtoVXrPr8qtX56YMdQ9Dlf99bhlYJAQU5i651ud9syI7nCVKuncEdn/+ZuP/iL1V8/ 0MfZfKK/L1j5qEpfKNe2J29uL8zc1rPzySirbDg80bF5OBmMim7ekBpY25Re0h5Oju7qm2Ma0gnU kwcwZ+UviGFo73ms82QdZYxdwEOYDzOCD0/abL4sgkBmzNdcrqOCZeuEjPxZix6dVclAwQhIs4DW GzdfCGig0TExpFx+AuqXmoWFoXi4bt3D2ymGBCgboqbwTIIr1lpuNgc6vFEHR+ZGmp1kz4ZSINno 8gs08Zf7f/Pb3x3OrFo+ETFwNEHQnKH8uVv3H3n05K+PhuyImH3xvfP3J9ecOnt+Aw+pign9q1gQ If6Uuk0/Hzd9DsviPoU1l4Ii/GNsv4B7MQzrh2OyMSeXMDNlnlhSbs9ScixWrntDHipDlajmMeCu o/NZcMnqMS3UO4gWXlRPXvxmYbOoWGggPoMuGJBOqCUPzY4A8dOOvX+1c99TNzY/9ZV0W9hSN3mg XLhxZYvIQmWHdMGQn9hSiOehq5NC+Ym7do7EfyB37ZgqQLjnKW0dKa4fSHz6Ljg/88xdIz0Hntr0 FGDGfW3tHaHW1aUIL9vNZt4p8E4LI/tk3hOziYFAJNO2auuB4xs7tm7YWPCMb7qt3Lt/ZVN6Yi++ EsOB8crvwRvUDGbHUpjlNBXzjPOD0IW/+dKCBRLxWl590RG/HzPoiJ1XZARgsEe8nojdYGFdyUAg BaOvMxUIJF0sOFhVUuK8STRRtEkwfVIMpT0c50mHQhkXx7kyan3h98QqOJMcNozFFUs0GmBtJymq ke1vR4gcnGgcRPvyJjqjqNavdN2rHk5UZ7nQ6hZ2dSzOOxGrmtfeNc5EEna/aKABK3pFR8+6ojuo bOxtX6WkjAyE3rStOLkxt+vxLY2VF+Fq/EG4Gri6oB+ujvjn1V/YkKc+sFoR2AAQzUtMqn9dM9yg uMvvpAWfw+mSAm6x68Yvfdpx7WqHK/8MHiS+ikkQj4RORG0X8AksDt3Y4dPGQLqRsmLZi/wrF1Wd +7trG5MFdeGaLy9Ite14EMk+mESyTwaR7GmzLHyBMosuUZCNgDxmkqMuZ1TmiGCwHs2oPhjOoGtm bjyQa8i4/rvByJDItIBwxBPkaZoPwrleuPKhPtcE5jmB2Wbxw2eN/ohrjLIOY6WLpYuIODZff5ZX qcs181v8/Np5JUPaABQdBODuDPJcfw7nsxt7G+Mw+QRqonzhDGqWZAnoouBU0n+Lwt2CAtDubHdn A/p781C2YQD+RZ9RRxwE+6Gn8GDs85w8BN9ZVadrpLqftsjC/ZRZckmqFO/lnFG3C0qRigdashnn S4xJhZwskO52B0WaFoMoHh3EthK7iO9jbqwVM520NVIhLNui8up53BfPVcEyBGjS/KHP6jgCRsRW 2hpwyV7RSP+TxXqJ4kSvwxWwAvq1ysOv0sDsdzs8Ike9aba+Dl/zOFx+C/0to8VIAdrAgqX2hAOU GY4GFGc1Vv4SrzxgFMw0ThsNYKOcdIAbDEb4zMRzaM4/gHN+qjbneiFIVedcBagSsaDvzKbxgjia LlEDdWgcv0BxApynH87z1Us0sPhdcJZG+g2Lde4cZRS9sjtgZV57Ay7N7fAJHAWXdrc+EyO4FRys TrLypJyUK+cMRgpHCwCbwQ64NhqluirPwbWhvQSVdwgj9TfQhxlO8HDG0DPI+i7qVTDmu6TZ5rO7 QiJJ49OkWfLbXUGRpD4wWw0kY5bM9GGzlYV7aDPDzxsAp/AGvAuzYpZTGMNdJjHUQK9XwUOaXqnY r0EUKjMi/AHfhgiPAh8l/IF43E8Lbgxc+ajyFRK74sTMmPU0xhjfI1H1/dqPcZAYL3zaJYiiQPxX XqhcigT9kXA4COdxb+UZ8B/UA1gECyt2ApEUAqXHCBXIEvYAdy9WykLb01oDaRhvRLmmQ1pI0tEd +Nf10+tvoIDF5xLdkonIT7V5A8WpFsDyXofs5XFq088ray69Vln7Dya4GThtoLb94ldv7tv3xuu/ 3E7SNCQMPJL0HXBG78AZhbCWc5ioZQ9EPfuErqfRzES1LZxT85vaDNPNte5tpqpIebE1hyf0yCI7 RPCOt20yT5gkNwSPZkCtm5mZIXHeK9u9ggHffhB37XvzV7/YRhloqAiC6e/BM69dAs/8nOWNcHY0 ebEyAef3DfwJGEO+AH2qU7H4k4FEVmasPG3kIhxUC1FGeAUSKppOJCQHchEFCClRQ3+hkEBzyssy gcCLgyEKeQcUJsMQZQsuyz7Tq14i2NAQJLyvmPyyDCwffGABsuw3vVIdf9Xkk2Xc8gHxDB1JJEX2 65WPrTzcL/rrrJhMROhdO2G4SYjs44Di4U/lk8fheDzC7IR29wCxDX+cOliNwp74EA9dUuniQqdK VEsmi0YcdvwYzcui6LTSstEWkp0hGwsqn79qrDFO3FdLdf+P6l2l6eoxnodz2QUx1I+poBqHHzuH jUCmLFvx8Q0jIH2wBLaVQF8J5EogWgKlWbxPsZm8XtMdrWBnKxhtBe2tIN0KWuELZ/ZiACkxSmBo HbDvnoUfgzWagGn2yseKET4xtV9pbKTiswB7XloD4bj9BLW+drYbqs30K5ArT/9GzUSIqKFTvWtG 1HJB2pZcjLuYRVWVam3px7mbnt43eee6rhgvNkwcenp3bEyptzAkDhiO5eL58Zbp+1akCHfP+Mqm HQ+tiT8r59f2xkYGSu5QaaakzHT7wFMrnry9nBy56YvfmVn2/W88sL2TtYqc2SpZENC2CJaxI99b Z/U7rcWt929oX98bNcsB8Z5nd2QaJ7eiLqEpKNvzMBCgoxJD4Og5LI9SjwJq5YQ3yHhaZ/WR1upI rjqSq46ohRdhvgBTVo9hwC0qg8bq7zRWk5oLR9TmhMZZ3KW4bEnViyTVlKl+jw4SJWdxp+L2WyN+ PzqFZlMf/Da/sU39nTaU1rP7wHib+kZ9EL2x7TzeB/H3KyfRJs9veu2ciN6d+YLeCfCC2iTWi3Iq RvQZvY3wQ3urk+6tTrpXn3QvUjXBiPIOxtYuKjPnWjMwV1OWYu1Y6CtagvCqwyPwwi+oySHtqX1Z 5ELIMo/iq98SQORqvZtyPi9VoTxqDSbOd+57eteWb+xuT47uHuhcp4SaNj+2bdOXp+tR6+bQntHE r3xty1pv2uMprurcelNdeGB7f2l9V+De40eOgbHlx9Y21E3dNt61beVoODAwuS7ff2h1S3Zyd6ll Znk5GBlZsR5fX9ff6Nq0ItHXWQzk7pr7dsNoT1co0N1brt+4cxdCkFCXfqaemktj7yuuRcXfWLX4 m0E5wBjSjgxYUNZFvQw2lDm3oc2zoS9sgBgUwissqBUNgrpyBfXqXlBPn8PruwhvRYMA/btVCmtE B/IUjFC/K4NFXaPGCSOOqflf9VCophAvqBaPGTFjpt6DvmrYugydVqsexps/4TCdnoaGvrDmrm7Z f1JBJhdkKkjiZ9mbn7vnjme2pRtveu7IYXh9zuJJd443rtjZ5fD3bB1uW9EFESf+xa/+/sTGVd/7 8JuPfqhe/3rj47euKLiWfulHNz38D0fao30zt9wL3dez0GyfpGSsAfutEo36QdQHol4Q8YCoG0Rd ACXFZJBSZS+iTGCj2q2HxN0IMCRaLKVXYVK6QFN6PSKlCzSlpxpT6Hifxe9Eb3Jy6JETdDuCV9Wu BN2OFoy/oB+Dg6KH7/imAARJnAWlk5GpFD8LGO1rA5pLcxfVGhj6uYgaKatnhjRjmM/3TutZr+qh IQHGSi3PW4jpiSJB5U9P0kYzM7eOMXE0zZoNwPIx6pmEJJ0FdaRJdIpOiITfh2yQ6kdVLoZ3S6Jb YIlffdVImv2y4ORN9E8IkgQkxKaffJmFkAlK+xYo7SegTndjjyrmVB6k/SDlQ7lzZbYahhTgQFrs UD2PI6jmaPHMmZYY/IMVdVkXz+N3Y5wmHA5lyjnU+SG0FYPBIlS+hjMtDrphGV+cBcmqhLSKYVZz JtCBXKx9vYIqIzUnfpVwEEJfRDXpmu9g1ONWT1CslZ1rtditDGG0mj5ZtaMoeluX5tTjAwwHIw9l cHas2dUx8+B0g2Povj0X8RaDlaNG0Fkyhvc7bBBqmIFx3SO3bUqnx9vD4WTYIPrtVgdvsUcjztZ1 dwx0H/7yD2+5xIpqlXY79AmPQPmtBtQ5bC0UmReJbC1oMkChNCHDb1Ll1oTk1jSLtyrGJcviS5Y4 JTCuoBpNHP5KHJUOFDgaVwiLx8BXq7LqOz1BtXVXU1kPlPxpNR2u9tsj+7boqmnRtd2CNk6C22Dp QE1uHYqahO0AqurqKqxFgA6hQ3DkZwGnGMvL6v8jGKTK6JggVzsmmL1c5GsnBaHrzmr+Xvf1avsq aowSi/N+XncWtJ6EqmUH5o+AXJsvmN9EO4wAj3Qf+P6unn2r260GmrCY2dZle/p7t/SH08tuHz8M 94qhOQu7r3dHOeHOTba2bxxrNqJsO0TQUvuKPcraL9yQCXav7ejbszQDblnz5W0Fuy9gsUAuEvUG Y8Fw94rmwmolDM3DLrmsTFhZU0iW84FIMkJZPQ6rLFgkuM8Nyw8Ode2YLHI407oU+f7GKx8T/6ie NWrAPlHaUaEpAxL1IJoA0TiIeUHcAyKqg4o5QUwGcQeI20HcBuI8gFscpUCUBGkPUL2VqHmrjMMJ bxxBXu/e1Lo23z6Lujq9DQ387JVPFR/8DR6ZHwK28AHVqVAQ4RE54dF3sCQwUvNVJAwA1SZ4xYi6 4MnGbMLToG4wmQ7xvDE0ZdTOOEGra7nc3KxXStJ6FRodZr+oXuctcNEPuLr1u2aaYN5XOUAEhIh/ tImPVM/8z71v4s2Q4xgZ8EtK8tf7Q01+/hHBXvkWXrkBPAP2huKVf6uWXgFP836n5P9/7H0NfFTV mfc59873TMIkfIUIYQSEqDREoEox4qARkaCOtAKGF5ohky/JxzAzCSESGCPSIKmdWouU1S6y1lrr utYWqq3tOxF2gjZ1qaVKEW1KFZVFTSnFrJty3//z3DuTCUSX7nbfd9/fL/eB/5zP5zznf87znHsz k8y4sRlqNv0My4wnvf7EZOX9v8wlj6uAx203ZyJidXozpl0lp13JH71SOWLt1QPWVUZUuor/rBT9 sjP92lc+qM9HaT75RX7mrTMbZm6aqc4c+te7f6LM4t8pM87SPfx50ZHP0Qex6BPII3PgONO9rulz T3vot6TM02/LGeQ6Kz8g15lxuXS/ZnjM/pWHdOfRySV2B7xl0Ech6BZo8qA/LIPHV+Pjxur2BdEf 1BbVfunKERazotqcVsdlN9YsvD54W8G02zYsvWb51PE5Eyco19hGOMyjss9OmHxTYcPjDV+Qu6p3 N8zNGpeT6crKzc66KMs2bkKup7hq0bwvXzvRlXuJMuJijx1BcEr+2W+alc/779O05HOJYlFfFsR8 OXzgn8D8RPH68yILscuRdbFcnOV2G78WPvjXxd8zzsk+3osRfkPb/Vyyl9utv/XKvdxGL6520nvm jW5yHIvxdvnFyZW9WKbd2B7mG9rRxomc9olm1onXnj3oM9qc9Zz83A9zb3Omfn2Xj2RehcuN97eT b3MPvMPNbw2mvwOl/pNqtlvOFphHjJ2SO2lqlmKRJ/7yjZEjzY5Mu3Iqc7TTYtqfPeGicZn//opr hF21ZIzMMC3KnzIS54olezzYNJ5EwGa3oJ/8rJJz1EfUm0SGuEhM+JHItI52viAdwiSygDmCfllA zpilP5Cm//Qia1BOfWTsiL+4RowZlaWczh6VnlbV/IkT86dMmnR2Gb0Vf8mkSfSXLR/VRc74VHlH WZ0m/6KLWjKE/Mi04hx5/NPEfMk58qqlLk3eGVqsq0hsdkPeGBD7dYb8cihxXOs4OCBO77AMko8+ TVztGaOGkO/rkrl4CPmXv62MeOF8cXtZnv8syfoiy/YByV430jZItg8toz4HSYy+Vpcx5iHk7v+M jM0aUg7k7ErKuMJx30zJ6WH5W0luLDd2UT7kgfGXD8v/BxJkefdcmXDNhHsnfJfl8KdJ3sy8r7Ls SZPD58i/6TLxuokPfKZ8eK54Zv9fkWOeY5Ns/0X56eTQlOxLLJf8Ymp0avu0adNm/I+VO4dlWIZl WIZlWIZlWIZlWIZlWIZlWIZlWIZlWIZlWIblf7rwpwKEq1pIZYRLCLsoFSaRrf0ROI2xRHsfGNDK gNVaDzCsfRcY0Z4Btmh3CpPcqXUD49oRYJf2ujCpN2svAJcLF3CF9iwwBG1ZwqSdBAa0g8Cw9i4w or0HbNG6RJbMp1poI4wzJqgXdJ4U2bDnQ2AJY0A4RLa6QtwhcqDzGDAAO3Og8z1gRDsFbNF+K3LU 5RgrBy1VMR4tTwCz0WY8tBGWYEbjxSroHy8V7S2gW3sbmAud42We9gYwX4sDWzm9jct3Ul9YeBDY yb26KI05viOmYpSvArNh51S2eSrbPBWj/EFMxSgvAWmUqRjlJDAPOqdCP5Vs45KY9qaYCsuvBZLl U9Va7X+LaZjjGWCYMaJ9DGxB32mw5A/ATsxuGhg7BexCeRFseBY4DStVBBv+HrgKlhRhHf8AjMDy Ip51Eew5DMzVfgekWRdh1u8CG8FPkWxibOXyrZzexi07OB0jneDkCHAPl8S1vwN2ao8Cu7TviyIw 85YoATPvAwNgoIRXvwQ2nAC2UAksPw3sxuxKMPdjwBXYP8vQqwYYwHyX8dyXof2fxTJYfgjo1n4D zIX+ZbD8dWA+9YK1lN7G5TFYtUzu5PIuQnX52X8HrhCFwFrtQWBI24e9T6tWCsY+AJZgLUrB2DvA AKfDWKNS2ExtiPlSjHgU2Kq9Boxrx4GdYKYUswZi/zvEKtj/R2AA67IKGggjXNICnavQ631gp/YR sAucrIK/oA3s+Ri73AS/C8Cq14DTtH8GlmgJ4CrwEICMFwHwQN967Nbou4tzNfrW5DyNvrfYp9E3 Jjdq9L3MTYytXL6V09u4ZQenYxp9p/IeTsc1+lbpTo2+czqh0TdNd2n0HdPdWkgE1KXa/cBlWgtw ufZ5IHEYAIffBIZgSTVs/rWoRu1REUZ6F5BYDcP+d4El4DMM+08Dw4g3Ydh/P9CtfQuYq30PmKft BPq0h4GN2ivAJsZWWBWG/ZTexi07OB2DnWHYT+ku+E4Y1j4twrD2QeAy7cfA5dos4ArxeWCtth0Y wi6NwMJ/AGZjH0ZgIWEJIzEcgW3PA93wowhsew6Yp+0B+rSXgY3afmATI9kWgW2U3sYtOzgdw+gR 2EbpOHZjBBb+QkRgWwC4XJsJXCEygSHtCdECe6qB2drPgNMYS7SfA1dhh7TAnhagW/MDc7VWYB7W sQXe+iLQhzVqkSux21tg225gE2Mr1rcFtlF6G/fq4HQMkaoFnnsIuIdL4tpPgZ2sLaH9BNiFyNMC Ph8WLbC5CbhMqwQu10YCV4hcYK12DzCkbZMKLDkN3Kl9AMR8gZ3aKWCCS7q0I3IE2nwEjGlngDu1 j4FxTncyJrTXgV2c7tbelm7M+iNgKzAPfT8E7tT+DKReedwrD71+D+zS/gTs1k7KfPQ6DHRrvwbm ar8A5mm/BOZzrU/bD2zVfgPcxrUx7R1gXGQAO4UF2CUcQNaG+TYDV4g6YEh7CbhJ5EkfRjkCdGPW PozyATAPdvqkT4wEtmLuPuin8p2w0AcNXwTWiptkKXNVylyVMlelzFUpc1XKXK1E+zGyFqO8CXRr B4G52gFgnvZzYKv2U+A2LomhVy20nQHu0Y7LWtj5Q9nIozTyKI08SiOP0sijNPIoTdymids0cZsm btPEbZq4TSvKPwZ2an3ABLhtRfmfgd3gbSuv6VZe0628plt5dbby6mzlNd3Ka7qV13Qb+HHIDszr NaBbOwbMRXkH5vUO0MfpVu13wG2cxpkIjIPVDqyOE0ir00EeBFwhVgBDWNMYLPkAuFN7HxgH5zG2 IQYbTgC7tDeA3dhFOzH6u0A3Yy7a78ToJ4CtWPGdGJdKdmp/kDuh/0ZgSOuUcfQ6BqRecTrBgXmM +bAqzpbHoeED4DYuj4GNOE4fBzAuXMBOxi7GbqxUHLNYDlxBZydG+ZXsxCjvA93Q0IlRPgTmMeZj Z3ZiFErTKJ0YhdIxxp24A+vkUToxig3YxelurE4nRsH68SidGOU3MoFR3gC6tVeBudohYJ72MrAV OzwBzVQSw95IQLMFuAf2JKBhFjCkvSi7oOH3QDdm0QUN7wHzwEwX7HQAfVzeyuXbGGmXdjEbXWxn F9vZxavZxXZ2wc71wBViHjAE/+2muxSgm9O5sLYboxDmY2W7McpHwFau3cblMaxjN6yl2jiY6aa7 I2AXpaF5vBJSmrR/A67TjisRpD9RmpA+o96M2sk4uU3CBczWjgCnMeJcAAa0KmC19iEwrNUAI1oQ 2KIVq8thz2GgT4wBIq4C49oPgZ3aC8AuTncLh7ocp/ydwJD2NYxnOtsHzEabFRjrh8ASxoAYAWwR GeoKMLAG6NZqgblaAzCP0afhVJMrhQ3YqP0a2MTYyi23cnobt+zgdEy7B7iH03HtHWAnY0L7FbBL +w2wW3tXXYFVuAZxyqQ9r1L8eUOl+EOYx+jT3lQp/hDGtN+qOHm0v1NDFJ+BccYEeAvR3bu6kfwd zxqfU+gjrCp/Q3uAUeUnkEzOqfyp2kzVZKRVMUXNNtKmtDZm3NFfaaQtaeVW0aTeYqRt4jLU6Gm7 8Kj7jbRD2ZVq7xRL1beNtEtcZpprpDOUHaZkm0xRa+mnZyS+ZlqrjbQUVutOI60Iq+2EkVZFtu2P RtqU1sYsXHbVSFvSyq3iavsII20To60NRtou3PZFRtohfan2TnG5vdRIu8Ro+71GOkMutifbZIor HcdhiTTZDZ71tM6zntZ51tM6z3ralNZG51lPW9LKdZ71tM6zntZ51tM6z3pa51lP6zzraZ1nPa3z /D3hETNxR3mFmI3Uzfyt8iHRgDvFBlGJuzKPuB6pkAgy+lFSg1S9KEDNfFEL8YglKKvCfWgEvShX gdcKtG4CBtDyevSrRZvVKKtBixpu58f/OugKcNt65MIoq+c6vX8NLPDgvx/taqBhPXLrkIpgLGrT CI0RlFcgRzY3oncA9fWwhrQ0GFojaFFnjEktPJhjA49Jo4R5LjfxXCtR4ufvuA/xLDz86udZ0rj6 PMpRM50113FJLWv0gyO9PDlKHfTUMmNBw8p6lNTxqLpOmmckzQIaMchz0flOsq3bTiM1gAEP5q8z TlbVoa0f40c4RzOOpNZD50wfxcO21xvzamBuV3PLAYvTZ0SsNXM/fdZrkC/g/ZC+mtNYWx1rWM88 NBorn843rZg+/wq2n+avr0uIdwO96iPSWnugI5iajW5jldEmjFyLoT2CWegr1JRaJT/vET9K6wbN K7mby2GJn8cvN8Yv4B1bxWtFNef7wNzzZr3U2Dk1xh77PLRcJWZ9xk6P8JgB3ok0yprUGiS5Gcr3 qox9HUy1pp2rr3g92lfw3lmMFuUinzm9FG0CrO9G7tvA+iOQIOYxA7KOpYB9avB4BYb2GUiv5x1Y xVYHoWE9SomxSp4x7dTBWpPl5K367Nek9N3Bc9B3yXpe3TBbGOF9HGa/03t7eA7kAxW8gjU8RgWv 4Wrum2TrBnE75j3f6BtKq9H9J8CcDPjEOh6rnH1mqHH1PLUtxwo2MoeB1B4LcH2Qd8j6tH0V5JnW GztL11XBSJ5y7rypXvfIfPSilaLdsDo10lBW1Z+n+cI5GtCejIoeI65F2O7yQfHl/Lkno8m5dl2d xgDNRJ+LHmWT50QoFbEDHLPqOXb5P3WmOs/+QZzqHt9goD4rPd3IO6+RewbY/2k2FSk91LKWveaz Vuhv5RcDPjGDrSEf0CN/Aa9VUDR/zzOz8IrZnptrykMN4YbKiOf6hlCwIeSP1DTUF3jm19Z6ltRU VUfCniUV4YpQU0Wg4Hp/bc3qUI2nJuzxe+oaAhWhek/YXx/2oL6m0lPpr6upXe9ZVxOp9oQbV0dq Kzyhhsb6QE19VdjTgKaRijr0rA94yhtC9RWhcIHnpoinssIfaQxVhD2hCn+tpyaCMcrD0z3hOj8s KPcHkaYudY21kZogVNY31lWE0DJcEWEFYU8w1AC7yWxor61tWOephuGemrqgvzziqan3RGgesAxd PLU19RirodKzuqaKFesDRSqaI+hcs6aiwGNMc1rYU+evX+8pb8Tkdbsj1Ri/Yp0n5MdcQjWYNjr6 6zyNQRoGGqtQEq5pQfNIAybURFPye9b5Q3X6WERzebU/BMMqQgVLKqoaa/2h1ArMTQ69FORgOp7P F1w1axDpkZA/UFHnD62hGZA1A6tXBa6DVFzegInX11SECxY3luf7w5d6AhWeG0MNDZHqSCQ4d8aM devWFdQl+xWg+YzI+mBDVcgfrF4/ozxS2VAfCRtNKV3px/BrqN0dDY2gZL2nMVyBwWEQVXv8WIGK UF1NJFIR8Kxez2bdcPvi+agNcQbrE2jUV2JddU15dVpfvNbUl9c2BtAVjAVqwsFaDEBcBUM1aFCO VhX1kQJPcuyGeixkfs2lnoq61dRpQFV9svGQFnFz2opYlnAkVFOu75fU6LRNkrquZgPyazAKtiz5 RIg2dqBhXX1tgz99UNjs1y3FwmO64JgSjZFgYwS0N9WUV1Cb6ora4DkTupC14JWYEaio9GPzF/jD webUcxP9faQtYqhLogXuvMVIYdU0MQL3+PrThsDTuJCF+ns9n3GZTPNdLok2yvILbZ+RQe3V9gtt P2IEtTc9d6Ht3W5qb37vQttnZVF7a86Fth85Eu3xKujpy8Tt6elzAWOWyBDZIlfk4L5yPJ5IpuKE nyZuQVxdQe+iiGLE1RtEmygRXxPLxMOiFM8vq8ReRN19qD2IWPsmou4J3CFqUpEuOUKOlW45RebK GTJPFsl8eaP0yS/JUumXK2W9rJV3yQbZLhvlN2WT3CVb5fflVrlXbpP7ZIc8KGPyDblTHpd75CkZ l3+RnYpNJpRxskuZIruVK9RFSpF6s3KTulRZqi5TytXlSr26Qomo1coGtUbZotYqMTWk7FJblMfV jcpT6iblp+r9ysvqQ8oh9aRyVP1AeV/9UDmjfqSqaq/qVv+oTlBPqZepf1KvUk+rxab56m1Y6zsG 86Wu/Cv5ug98PQS+HgNfPwBfPwdfv0DtYfD1Dvg6JVqkFXyNAl8TwdfnwNcc8LUAfN0Gvr4MvmrB VwvwK+Drm+DrH8DX0+DrefC1H3z9Cny9Bb7oJ3in5R5FyrjiAl9jwVc++JoFvrzgqwR83QG+qsBX BHxtAl/3gq+vgq+HwNej4OsH4OvH4Otn4OuX4OtN8PUu+PoIfPWrH6p28DUGfE0GX4Xg6xrwtQh8 LQNfePZW6wbzZXk5ja+x4OsS8DULfM0HX7eCr5Xgaw34Wg++vgK+vg2+ngJfPwFfB8AXvRf0Nvg6 JcJQF5FjwVcB+CoCXwvB1zLwVQ6+QuBrI/j6Kvh6GHx9H3w9D74OgK/XwdcJ8HVGblUUuU3Jkh2K R8aU6XKnMgd8LQBfS8DXKvC1Fny1gq8O8LUDfH0XfO0FX/vB10Hw9Tr46gFf/wq+zqgh1aa2qJnq RnWUukmdqt6vzlEfUq9TT6ol6gfqHeCrCnw1gq97wNfXwdffg69/BF8/BV8vga9XB/PleDiNr3Hg Kx98XQW+FoCv2+ldUfAVBl9t9D3p4OtJ8PU8+HoVfP0efPWihSaqZSb4mgC+rgRft4KvVeDrTvDV Ar62gK/t4Gs3+HqWfg4Pvn4Fvn4Hvj4CX5psUrJlq5IHvi4DX18AXwvB15fAVxn4qgdfLeBrC/j6 Fvj6Dvj6EfiKg6+D4KsHfH0Ivj5RV6hSrVYdag32TK06CXzNBl9zwZcXfH0RfFWCr7XgqwV8bQVf O8DXd8HXXvD1z+DrEPj6A/g6ZZpvoljqGMxX5uNpfF0Evi4HX1fTe93gawX4WkN/zRt8bQdfj4Ov TtQcBV8fi1JpFauwnwJyGvi6CnwtAV/0/lI7+NoBvr4DvvaCr33g6xD4+j34OiVLsYdWKiNlrTJJ NsC3GpVi8HUH+KoEX2HwdQ/4+gb42gW+/hF8vQC+XgJfr4GvfwVffbIb+2aROlq9GXtmKeLNMnWB uhx8rFBLwVc5+GoAX3eBr/vBzIPgayf4ehq5F8HXL8HXa+DrOPhC/DJZ1F7TGPWPpqlg6Ur1T6YF 6mnTUvBVCb4aBvM1cnQaXxPAVwH4KgFf1eBrPfi6D3x9F3w9B75eAl/HRYlUxTLpAV9XgK9bwNeX wVcQfH0VfD1J75qBr7fB1ynpVkwyF3snDzE6X5kpfeCmVLkdfFWBr/Xgaxv4egR8/Qh8vQi+DoKv 34OvUzKmCrlTzZR71DwZV6fLTvV6mVBLZZdaDb7uBV/fAF/fAV8/Bl8HwNdr4OtN8PUu+Dqt1pqk GjKNVVtME9SNpinqJtMX1PtNt6gPmUrVk6aA+oGpUf3QtAV8PQS+ngBf2F+m18DXu+CrzzTfbMfZ m033ETYr/rnd+fnFG9rabGZps/bEYr3t7e29lLEE26O42oM2i7TZets340KNCTW90Sj+RQdlotxs TnE0+vDm4jk2KW2mqHGxtvbYrviuWKzdZpM2x75938H1rW9xn/37H3vswQc7OjjTvJmvZu7DthgK rJyJtbfzoGWxqNfjjpXZzMJm6fPoFyvYnFRAk2trKy7Oz3e7bU5hc272bPYs8i7y3gbxRD1R7tve 7vNRX4tZWqy9tub2dh7aikm104AWk7SYgzSLIJfbqAkacftge1802mwzCZup0NvrpQuNLJbmWKws GtRphKZnDlAXnRJhUEKTiEaJk12xQWRZbNLi2PvSVlw8ht7ZGA4XmWGx6sYxMxarbpHNZlGlxdSj a4HZlmA0XujusZqE1aRbV8hqqPWOaotZWMz67C12YbG3R9ujtyP2ToLodajxtdsGmnm9NIC5B4lo T5rNQp9Nj9td5vUKr00RFtVLt2JoZ5HSokYpE5W41KiqCJuKCjMZ6Nu1a5ePU7t8Pt8up1nYzTab 2+2hwaJReKTJ1CMtQrP0OxSMR4V0eb2cpQRd0aiZltLzRPAJj6pKmxlqeXGZMKYMmbJdvEn6jBqM 4/GmMkGbzWhWWOjzxfqwZXhn0SZP1szx8p7QM31sJq23Pg4NFVTNwmzpE32f4VjYolZykmgUTvK3 cCxryrHs0ubsjHZGd0MehNCKDnYwq7TZ5xS34YKilE/9rRzMdaEOZjdLuzWa7mEW3cO4wpZyMaoo i/VShUnY4WJD+VhS2RBOZjdJO5zM8DK7lPYUc/8lN6OQ8Ez8HDfjKOAd2s8sn+FnlgE/swzhZ+lW C31GZbEL9TQ7exrZsjAWiy3kVGzhwoWxz/I0p4IRk54GD+N80tV0X7OnfM2u+xp2z4CvITPga1yT 9DU9Y/gaMgO+hsyAr5GLpHyNalK+po/DvmYiwvqE6LPbhd1uE6MgxOl8sYmX326Rdhvp6MNm7bNb kSu6jqd0XRHl7H2byRHaUEc7qC+qe9tAro+1UEvqd39bG/oN2kI8wmbd/do32x3S7orjetT7qPcB lg6I3Sbtjs5HH/361q333nsP54quu5suqCMFbF5KHefaERLYDDqBmS27VditZ93GxUa16VfxHJ4/ KZiPuRMDxIRN2J3SnkEeeZ/hk1dEySdZk+G0brfVLK20JM3YqA6LdNig5rn9sGH/c1Sl3wK0B7nK ZDJFOlDVEbFapJUO6v5odIPDJBzmlGd60dJq3UDrE0WD5kE6MSnmz/DOqMMsHeS5BoMOKR0D5Eat dml1/VB0cxjThcc1VCVt2KyPYpTvf470UtYwFUZbTdJquGuU0hRrytzuHoop5qThhayP1WF+xAr5 IpzR6hBWZ7G32HtZlCQL95N6NSp9vnZHWlPsUNbf6yaf6nVIxWFOea4+W3KFQo9HeDx2hU5lL/uu N2qV0oq5k/NG8VyrIG1SQAfVWciyKXDghVM4iVfkMizCaTGZBvmwNJl7cLd/1no2Q5UOsyfNiT1c Qgn90uOCw8p+bDJJhwUBImZsOsOTOWd4sqfPqOMBvQM5fXti61pz8vMXLmzvt9mSHgRvthla4M66 P3PLfjYbdqfG0z3aKizWs0KcddiFAx494NObsLN5x1ilw84uQr7b77AhO2++Psf58yjr6G9j57ob tbT3+pOO3M/8p/w6yo2579fuvht9B28+7rs5ebJudjilIyNeFi9DsNv1dc/X4VP3eci3WAt5t+7e Drt0OOcZxiav+WKeYH1kuO7qqXnA1zdvbjO2Bm1LYsxhFQ5bytndPMbdxnVdEZNzvrvbBBmZudmT PIQHXJ71pVzebXiOaQN2utMineSf6U5vNZye60xDe73TJJzk9Sm3t6JuI/liFHc8GwarPdfvnWbp JL9POr5TSmca9/9Nnk8za+Zw2vvf7flOqTiTnk+z5gmTs/wVvu9k37fSDdcUHNgLF07hNCUWfob3 28RZm5apSmea95PXc9GA+1Ml7lGcNvi/HgCcHAB4nxqPYESvWXHYPKkQYNTyuB5vfyrbDK6NWJ+T igKc3YBJpNUWeY0toWdTccCbGpfHbkYksNooEjgdwulw4fmd5GKIN7opCiXeqNdplU7DhzgYOG3I 5/n1SXv9eZR39G3Rw0Hblj7ekxQOjHgwkO/Xd6VdOp0TRVnUK7Bm4mu6nmhZdKI4d4Py0G2pk7/N mSGdI+I58Zxd+bvyY1gsCp/32u61tdlYazy6CxKDtEc3Q9ogd+sDjhflg8LFfOTHC2NufHeSGpDy erxoY9ubN8O+QhuR67QKZ1rEcLPq6HkXRSJmlPjDv+jFzClx64LwNNpg9A1uXfJpPrvor7zxAHyv rw9gPKojhsBpXFbpsuveTnck+58b9JDDtQquuQuodsFc43GG4ghqzcJlnjMQSGhZbQORpG3DOcrb 2vRInaLMZZEuW1ow2eyS0pW+WFGbU9oyn48nPJvThB+FkioHPRc5B2o4pnA+aTumwU9HRlCJGnek FLgRtxHGLV5vnz6ROaxVHwCTxsOSbciHpWRs0Z/lKJoguDjTm8NBkrfBcJVon0sqLktqesLgINgO PzMCDD0dm73Gk4E3apOKzRzVnw3SQozLCDGKzZ4WYuxGiMm0CpdVUZJBxogx5mSMGaFKF8WYZJBB ysNlnEoGGY4yroEo47JSlOHtrPOdpNxpL/TFjN17lvPNm0G2iQLNQB6RRlGw3cnVXaNGTSku3qxh 1lyvhxqF6ymvx5oB/WeNqWAuqfGLdUiFG5dTuJyZIlNcxHJF9IpoWXwTDn46+1026XL0JxKJ/f2J ffv2JfpddhRMFMFomYinSRlKJgqXQ7pcZ8U+PI/H067O6L7oWcGb+izl+7n07EDBWb0dd58YDXp1 3V1G97J4MD4x6lKwAdK1smn7Et3dh3sPH+5OJPa5MqXL3TO+Z3xv0cHph2sP1x5Y3N29v6OrY59r n4t198R74wfjhyHdkATkxfi+eGfc5ZSujIlirTHppJTF18YxKZ0Cnr0+MFHQLxJiH0tCUFrPdUZ5 UkWV8XhP8/hMi6W72WUTLruWM3CxJfEhLn/0WsGLoY9NQouhLwstkGuEdGV1Wjot+7aUd5R3VHZX dl95ePbyouacwpxCl0Nz2f1Rf3SWIMmDuFLCD08bEhbLxkTilaYMm8xw0IhHj++j6/hR/Umxks2o LOJ6FdfVVVxfdTU9wmFWiQRWanVRhkVmWIrKysr6yozLRfWbsE0SG+Ib0WPjuUPs25ehyAxTPC5E ar4ZVplhp0QCS9h7uLs7YbRJu+wuaR9xtOfdwsQg4UfKlGr9AbOS05VFrrS640f1jWJ3pKaCafEd +OGe5BD0CNq8nxbM1dFMty2WgZnNYd3GOOCBHjvpx03lguRKyHiIPRP/aJeV51TtCOyY/UxRb05Z Thlu5+22fZWVRTlFlZX7XEP3zYEUCjai35WTU4iV789QlIy0vS4Mrpo7LBaLa05hYaEoLHTRzyHK yvjtXxgaj+K8sZuJYEEc0+GDnFmVGWauttFEZlVWdndXVs7iDCWoIMsqMq1Q7MLwOVBeSO3j0iTN ll5pF2ftWtRtworr5YZPlpUVciGnjIvqrTaRYc8p1XK00hwz9omtmy72IWOFkovkcsxpPpx0Co0L NiSwOrAELAwUWIosKE1sYLfLxLYeA+amikqxAE6nRS2ChFtvpBXbYLSmgjxmMzEwoqYSg/o8UzZV smGVRSbcz9spIurvtjvEbmW5UMvXh2rFqKpQxRoxt9YfqReLUSO/uOQ6DxZOaBq/32IRGXgg0XNS gE8xmsv1EgUPKiNg9hih3uTzLRRTltx6s0cUfmlJiQc3J3ob+ryDW4zlnIoRslLa8dSBe5VxRg63 DmKkyBUXlQfDQfEY45OMzzDuZXyB8cU1FaF6cYDxFcZDjEcYexiPM56kj+OIU4TSwpjLWMB4HeNS xjvr1tStkRsZtzDez7id8duMjzM+nfrUwn+E8gLRBiZVcGABw3At8PL/rkzBOmT81a+0felzsfRJ zjbxgNgtnhUvilfFMXFKKsLOM7UZsz0p6DPpKvqNQpiQ9N6VnKu/tm/RXx/pS+uD/fbh7kF56eof nM+cOjiflT04P3Ln4PwlZwfn88+pvyx3cH42ApmSnj+dVm8R8saiwfnF9+HVgT2dL3z0OX70aQNV hYpPbFIeU14Xu9RH1EfEIVPE9Kj4jfnXlnapOr7o8MvnHV/B88kBl9t1g3K9a4Xr28r6jEDGncrP MjZldCj7M5VMm/Jq5seZHyu/FTJ6hrixvJaxd0g5CDmS8XaanDDk4BByOnNSSvIhcyHFkDtZdpwr GQczd2f+yL3dkF1p8iQJ3QQPIY4sX0ruy3owJWd0yR4/hBRAZo/amSaP6cI158ioZ0cdSMkro3sg x0nGmIaS7IIx2WPyx96XJg+yvDikHBz7SVJyRuXkpqTYkEVDio9lqfE6WKIGUrsEy6GU6L3fyukd d9m4wLhvj3uC5Fzt454eSnTt454bd8yQtL/cTKOM+4THitL/CYsnz03J4slLUhIw5E5IdPKdU2ZC vJcUXFI8+U5gwSUvTj0w7TWW0/mlkOClUyHTLz12aR/+H7v07GUHLv82yaXHLn/h8hOXn5hump45 fdT0n0AOFcyD+ApKZzxsyM+viM6aOuu92Q9cORsy76qcq0qvap7zrCEvzEnMOTT3MsicuVuuPnqN hSV2zYss/fOunPeUIXuv6Uf+qXm9nOu9VrlWmffUtdO993tfmF9ww3LIWzdWXxPTW+O1V2910zxq d9PiRZMWFS6at+iJkqksvpI7WZpLtpQ8DGwueRnSs7hlcXTxWzcHIdtvKUMr3y2v3PJKycvAo5SC HLvl5C2f3BplefzWbpa3bj2J/2/desZnuvUM6k/6Sn1Hfcdui0AeWOJBu8dvPaPXLGm59cySt5d8 eLtvaWL58pXZK8evnFplqiqtOlz1SfK1ejrk2Xp3/aRgc7AtGA8eC54MnllrWjtzbfHayrXBtS1r 29duX/vU2r1r9699NRQMPRB6InQqLMLZ4YXh1eEXwq9FZkdWRx5uXNrY3vjzxtNNlqbpTQuanmo6 vq543SfN45sXNJc1h5ofbn66+fD6Sev/1/q96w+v/6TF1TKmZU7LdS2BlsdbDt912V3Fd626a8dd T9519K4zG7wbWja80Gpp9baGWp9pTbT2b8zdWL3x8Y0nN83d1Lzp6ajvU2LV3nPj0eBoE20aEIoj /CMYQ/QI8im+t+hcjxvsJ/pOHzLqJCNPmgyOHdHEgFB0iB4aED0uUAx1P5mTGPsg4vCReb2ImhyD +RXxNsuH+Lojc7d7e8bBVMxE26wzkwPUN2Nv5o6B2KmzhOhczPFXbzUpc3eSPSqlWMxtj1A9tzcY hN69GW8jku9GjyOs7SCs247XIywDp8OJc06F4rRzYOAk2E12nxf9nzwv+juMmH8fx3uO8qwHvTOL kd6RjIRYjyeM9UJs0uOPHt+MdURMRASkVQukomNyRRHjchZFj1GPgTWevCR6LHoM2qjVadT5xh2b vOT8PYE4eCgtog4RZ9Pj6vkx1YjcCd5NehRdnIyfFNdRglGjJ8c9gZIlOb4rZ9/yyhiTfo7xK86s sZ+M7sGuyk6ePslTJXv8GNPACaTvSjrbuLWJWqDvi2OyqYZKqBWVZ4/POJjcqTm52eNxAmZTf0rr pQPnaPpJSrbwqWmcm2knZzY0nHtOPjjodDxonIyjktaj/hN9dBq/xDe6J6cY9gxin1gjjrFSaR6b 5Fj3RGJT3ymTA+B7Ea0mMZHjG7WT1/sJWps0r5477mnMNXnCHtK1Rk/mRKMndaER6HXyEloVSuk7 jV6jJy8pmDJT/6+fcFNm8qmUJnTC6acbn4//SeEzNU3Ob8EnbZoYJ25Kzu9BJ+1fJ3wWX7CkTuxP kXOZIkmd458ifLJfsPDdxgXKuezwPUqanM8f37ukCe17faX/Ojlf839s3YWJzjPdu2TuvsayaNI1 /RlH6K6HJcYlFrrT4Vxs0SS6BzLqILiD+j+83Xl4nHW99/E7M2mSJhOg7FCwhH2RfVPKrlQWLZsg ggcim4ZNBMqiFlrCIrJURaCIR1B2kILEHkUlFihQUgJJm6QhqQ1tOiQZJmmSZibTsvye1z30cJ3j uZ7ref55novrzT1zb/P7fj7f7/d336X+/FL81PTZ3rj3x5/if4pPR2cVn6ziZ6jhI4eLz0eejnx6 9YifF59OZn3+FBP/88TJs6YvP3lW/ART/PbEhueczz4/4SloVbwnfqKJr5u+4Z/iE881xWcj5xaP PhH/e5t5zn4ifprSLXadvrz43HX9hn9OKe7ZNX7qKn47ZfryuC9tOOYfT277eVaLn9Di624rfvJP 8TntyuLznHOLT2qfP6+ddMpRiaIiH8danHrNZ0ocUVaMx4g/G+lJTcV7x790W/Fexfv+90r8n47+ 1zzYreOzb1FZvApXvPpW8oxo43j9rXjdrWRjdGgUr8bSUlyhKv6UTZ4RVkcl/j0eJfz7reI6WVXR s+HjaGH4uKQ22qzku9FpJedH25RcENWUXBhNKrk0muTMg+J1qYrrUZUU150qdW7KuZOcm3JuZfF+ aWcNRRNLzo22c3wnx89wfHvHd3KvXdyrJl4lqrguVJVPLxrvpORPjGNm+LPxHpbsDQ8kV0f7JdPR Acm+aK/kQGhNZrztxndvKa4PVepTIl7JKV7Bqbh+0/XRxtGJ0SY4LNojmooLQ2t0ES5GvOLUNWEs moFrcR2uxw1RKvpRWBL9GD/BTNyIetffgltxG27HT3EHfoY7cRdeio6N/oqCz58iRHuURCjBKdHU klNxGk7HN1EXnVzyRjRFxHXJM6PDk+dEFcnzcFn003hNmeTsaIdkffSF0ofDktJH8DssifYoXYo2 tKMDy9CJ99CFbizHP6M9JmwSWie8H5ZM+DBKTcj6PIjhsKRsQnRi2R62B0Z7lB1ie1loLbscV+AH mBH6yq4FbcpoU0absh+BNmXPR1PLXsCfMR5NLd8zmlK+F86L9iivxfn4Ia7CDZiF2aBR+c/xCzyM 30XHlj9rO4ghDGMEoxgHDSsuwIW4CDOiKROjaOrEzaMpxdz9oLiuVvxpoLhK1haytkHWNsi2XWXb MbLtZtl2umw7X7adINuOjte1ki/7xCtYxetXxatXxatWxWtWJRvDE8leeZaOkskP5OBAdE4xz1YX V7Ga9HlVnBvt+1/uf7z7X+v+x7n/oc4+O15vKl5tKl5rKl5jKl5hyv3+7n5nRhu5yxp3WeMum7jL bu5yhbvs6y77uste7hKv5LbCnXaPV4eKV7YprgkVR/qWT89HW7vHP9zjH+6xe8l54a/us6/7nOc+ B7nP6e5zVEldeNe99i2ZG/4Sr+fkfqXxyk3xuk3xqk3xak3xWk3JVWHM6JqS/ap1INo7mdlQsZPc dU93rXPXQ931OHfd2R13d7el8XosxfX9/ix/qzZ0mE90krizPBjVh2x0C27FbbgdP8Ud+Bni9e3u QlMoRIvxNprxDt5FC1qxBEvRhnZ04p8hRCvQg/exEqvQGxZHq5HGaOiO1qrzMeSQxzgKuts6x9fj I3yMT/CpsYSQLYlQUuyKvcmzZdh3wprkuba1YU3pkpAtXYo2tKMDy9CJ99CFbizHP9EfCqUDyOBD ZDGIIazBMEYwirUYg7GUfooQFk/YNCwuPzoUyo/DiTgJ00Nf+Tdtz8DZjp+Dc3FeyJbX4nxc6tgP ba/CNT5fh+txg+8/sZ1lOxu3+Xw7+FA+x/bntr/AvT7/Cvfhfjzg/g/b/3ufH/P5WZ+f9/lv4FE5 j8p5VM6j8u4QypeDR+U8KudR+fuuWYlV4FH5QOguz+BDsWQxGFrKh7DGsWH3HsEoxnznXXnedtx3 HlVcgAtxEb8S0T3R5sWZKxndI3fPkMPx7DXBt+d8O9G3E2T5wuS70V5Rib356Ksys1tmdsvMbpnZ LTO7ZWa3zOyWmd0ys1tmdju7T6YVZFpBphVkWkGmFWRaQRZlZUxexuRlTF7G5P1evHpTd/LfognJ 7+J8GXRB6JU13bKmW9Z0y5puWdMta7plTbes6ZY13bKmW9Z0y5puTuY5medknovdXOzmXJ5r3Vzr 5laeU3lOdXOlmxvdVC9QvUD1AtULVC9QNUvVLEXzFM1TNE/FbirmqdhNxW4qdhcrtisqp+UxKrnC 3PuyuXd+ssVc22oWMtsU9c2IsFWEK4v6/sS3eE3N7eh7szssi84yT9aYJ2vMkzXmyRrzZI15ssY8 WWOerDFP1pgna/zSIebKnc2VO6vZNjXbpmbb1OxKNZtTszk1m1OzOTWbM59uqmbTajatZtNqNq1m +R2dZN48SJ2uVKc96nSlOu1Jnh/tmrwgXiszusU8OsU8OsU8OtncWWPurDF31pg7a8ydNebOGnNn jbmzxtxZY+6sMXfWmDtr1GJaLabVYlottqm9nJprU3Ntai5tjqsxx9WY32rMbzXmtRq1kja31Zjb dlYrafNbjfxvk/9t8r9N/rfJ/5Xyf6X8z8n/nPlvU/PfpvI/Lefb5HxOzqfNgTXmvxrzX435rybO 9zBK61HPZ/eEWzlwvH6+Uj+fwYnjOfG4o3fJ9uOSSzxJtYVPk+3R+UX3up3d5axOM+Y94Ubfznft Etcutfdo197j2jdde6Jr21z37ahsQx19y5ntzmxz5onF56s4Z54s3ukix49y/B3HOxyf6k53OPqC Ox3rTk3utF/x/PeKz4kriv/OR5UlG0dTSs7GZbgcP8CV+CGuwjX4mZl+UrwSn1+5OV55L15xr/hs 9Ei0VfJv0cHJV/i/KtrJrH26p8RNzdzbekrcKdmvMwwYQca+D6ODzedXhVdcsaVnyh3jOd31l0Un mMHOjlfMik5Inlt8+joh2sjIJhvZZCObbGSTjWyykU02sslGNtnIJhvZZFdu7sorXLm5K68oXlnt ympXVruy2pXVrqx2ZbUrq11Z7cpqV8brue7vyl1duX/xypQrU65MuTLlypQrU65MuTLlypQrUxuu PGjDlQeJ5JxoT5/2LGrcUHxGGKdWd7xWFE7FaTgd34wqPbtVenar9OxW6dmtcmL832lL49X0XHPK hieNhUWPVkZtJbuHVSV7YE/shS9ib+yDfbEf9scBOBAH4WAcgkPxJXwZh2EqDscROBJH4Wgcg2Px FXwVx2EavobjcQJOxEn4Or6B6TgZv8ZD+A1+i4fxCH6H3+NRPIbH8QSexFN4Gs/gWfwBz2EenscL +CNeRAP+hPme1hbYvhK6Sl7Fa1iI1/GG/W+G9pJFeAtNWIx4Pb9mvIN3PUGc7W3l3NBS+roniTfw JhbhLTRhMd5Gc2gvfQfvhvYJk8KqCZtjC2yJrbA1tgmryubgQdCg7Lfhg7InwpqyJ/EUnsYz+JP9 r9l62ix73eeW0F621PmdPufDqvLt8QVMwQ6oCWvKd8RO2Bm7YNfQXr4bdg9d5XtALpTLhXK+lx/g +4GOTQ0flB9ue1pYU5EIqyqSKMUElKEcFZiISlQhhWpshI2xCcRbsSk2g7grxF0h7gpxV4i7QtwV 22IytoPxVxh/hfFXGH9FDXbETtgZu2BXYzogfFBxIL4c2isOw1T7jsY0fA3nOe9824sd+57zvo86 XIIZjs3EjbgJszDH/ked/6TznwpdFU/7/gxG7cuFVRNLINaJm4X2ieKYuEX4YOIOcujHxTUjqVNC nRLqlFCnhDol1ClxRQl1SqhTQpniypKTsCk2w+bYAltiK2yNbRCvPRmvPDkFO6AGO2In7IxdsCt2 i9cv9Za9B/bEXvgi9sY+2Bf7YX8cgANxEA7GITgUX8KXcRim4nAcgSNxFI7GMTgWX8FXcRym4Ws4 HifgRJyEr0fx//F3Vcl0nIx41cxTcRpOxzdxhnGfiW/hLHwb8YqXN+ImzMJs3Ix63IJbcRtux08R r8AZr7/5C/wS9+JXuA/34wHEa1E+hN/gt3gYj+B3+D0exWN4HE/ADFjyFJ7GM3gWf8BzmAe9tkSv LfkjXkQD/hSv/hmvxIlX8RoW4vV4BUwswltowmL8axc5I3w3XiPUPBCvCHm4eWBj3T9eV7u1VMcr 1fFKdbxSHa9UxyvV8Up1vFIdr1THK9XxSnW8Uh2vdJ53lOfxAv6IF9GAP2E+/hIGS1/CX/E3/B0v oxH/wAK8glfxGhaiOUqVvoN3o9SESVHlhM2jqglbYEtsha2xTVRVdlcYLLs7ZMvm+Hy/z3NDX9mD 5iQeFLvZI46Jpexxx4y5zJjLjLlMly57PqwuewEvOtaAuMv9h/P/bN9Ljv8Vf/P97zDOMuMsdr83 fW9ybLHt2/Y14x28i5YoVbbUb3u3K/NuV9Zh37IwXuyUXcbmfa6sz7XeWcqyPnu6LvN0XbYG3lnK vLOUeWcpW4sx5JAX23hYXb5RGCzfGJtgErYO4+XbYFtMxnbYPqos/wKmYAfsGqXKd8Pu2AP723eA 7YEwy5abXT/rulGqIhFVVSRRigkoQ/x3ryswEZWoQgrV2AgbYxNMwqbYDJtHlRVbYEtsha2xDbbF ZGwH46wwzgrjrDDOihrsiJ2wM3bBbmGwYi/vaF/E3tjHd08KFfv7/J+d+CCfD8Gh+BK+LI7D8HWf vwHvuRUnu+6UsLDiVJyGb4fxivOM82Ln/WuX9r5b4X234jrMNIYbcRNmOf8Ov63+i137ftu57vsg fo2H8KT7PYX/7OLP2sfDipxrPwrjE6OwemJJ/L8uCtmJ9JxYaTvJ/s2iVLGzm6EmbmXf1tgG+vHE 7eI/l4wrfcNz1cx4nd3iM9qrn++/Il7ftvjnKPHz1lA0IXF8+E7yG+E1T6eV8Z9tOTYYfTGxX8gk DsKhOArHh9bECWFx4iR8w1P5GWGFp4vlni6WV54VFleejdtDpvKnuAM/w524C3fDu1zlHPwcv8Av cS9+hftwPx7AXDyIX+Mh/Ab/jt/iYTyC3+H3eBSPhUxqr5CJkkaaT5zlnfgq79BTjT9n/LnEYSFt /LnEV2zvCCsTP/Puck60t/61tzMXV54e0pXfxJn4Di4IKysvwWW4AlfiGtwecmLLiS0ntpzYcmLL iS0ntpzYcmLLiS0ntpzYcmLLiS0ntpzYcmLLiS0ntpzYcmLLiS0ntpzYcmLLiS0ntpzYcmLLVZ0Y VladhK/jG5iOk3EKTg0rxZ7j4aFhGYfeThR9DIuKf3I4RexPifupxDlhXuJCXI47wgIaxOs8d4n9 KbE/JfanxP6U2BeIfYHYF4h9gdgXiH1B5fVhXuUN+DFm49Ywz7gWGNcC41pgXAuMa4FxLTCuBca1 IDqGA3UcqDO2Xg7UGd+4DBqTQWPG2WMknUbSmTzj07HkWZ/mzC7VnNnX7FLNnX03vOMvlF1jsmvM 6DqNrtPoOo2u0+g6ja6TM3WcqeNMHWfqOFPHmTrO1HGmjjN1nKnjTB1n6jhTx5k6ztRxpo4zdZyp 40wdZ+o4U8eZOs7UcaaOM3WcqeNMHWfqOFPHmToKdFKgkwKdFOikQCcFOinQSYFOztRFX6FCLRVq efEWFWr58Vbi+Gh70U8X/fQNf95654b36T2psGW8wjUVtqTCgRv+lPjbvHqLV2/x6i1evUWN6dSY To3p1JhOjenUmE6NWmrUUqOWGrXUqKVGLTVqqVFLjVpq1FKjlhq11KilRi01aqlRS41aatRSo5Ya tdSopUYtNWqpUUuNWmrUUqOWGrXUqKVGLTWmU2M6NaZTYzo1plNjOjWmU2M6NWqjcrkwJuKUiH8h 4mtFvKkIbxThddE2NFpIn4W06aBNR7wqNQ02dfRe8S8U/0LxLxT/QvF3iL9D/B3i7xB/h/g7jKPD ODqMo8M4Ooyjwzg6jKPDODrUSl148l/63Vi0d+JUPe4s1Olzl+hxl+IyuLcRv/95r5upZ9wUFlf9 OGSqfoKZuBE3YRZm42bU4xbcitugN1bpjVV6Y5XeWKU3VumNVXpjld5YpTdW6Y1V+mKVvlilL1bp i1X6YpW+WKUvVumLG01EJar0vLizZ4pjz6nxtBpPq/E03eL39F0dXaJ202o3rXbTajetdtPGnjP2 nLHnjD1n7Dljzxl7zthzxp4z9pyx54w9Z+w5Y88Ze87Yc8aeM/acseeMPWfsOWPPGXvO2HPGnjP2 nLHnjD1n7Dljzxl7zthzxh73rLPCe9R+m8KvfN6z4oh6ogNE1OD4KsfHufExNz7mxsfO7XFuhXOr VEqlSPdRKZWi3WfDnwG9waGPOfSxKBtE2SDKBlE2iLJBlA2ibBBlgygbRNkgygZRNoiyQZQNomwQ ZYMoG0TZIMoGUTaIskGUDaJsEGWDKBtE2SDKBlE2iLJBlA2ibBBlgygbooNFUs+bRbxZlKiLtuPP IhFcoALWqYC8SG4RyVYb/mRmq/hPZkTyQPynWbxbxLtFvFvEu0W8WySqelHVi6peVPWiqhdVvajq RVUvqnpR1YuqXlT1oqoXVb2o6kVVL6p6UdWLql5U9aKqF1W9qOpFVS+qelHVi6peVPWiqhdVvajq RVUvqnp1fFaxjr8kinc3/DenaUZ9r1G/GFWJt1m8zWJtFtcWYtrCkfvE0yyeZvE0i6dZPM1RWWIG X+PV8OO18G+RF3eHocR98Z+0F9fFvyXkoxL/XhftEa+Qn7heRtyAW0J74raoInG7q+8K/Yn74/W8 w0eJB8NHVZ5vqzzfVm2PL2AKdkANdsSFzrkIF+N7+D7qcAkuxWW4HFfgB7gSP8RVuBrXYAauxXW4 HjfgR+GjYjzrjbQ3MTP0iWV14ldhTcKbXnR24irZfjVm2Hu9KG/ATaElMQuzcTNuibZI3BaeT8xx 3s/D+4lf4Je4F3PDS+J7qSoR3q5KohQTUIZyVGAiKlGFFKqxETbGJpiETbEZNscW2BJbYWtsg20x OQzRcIiGQzQcouEQDYdoOETDoarDQkvVVByOI3AkjsLROAbH4iv4Ko7DNHwNx+MEXCiOi3Axvofv ow6X4FJchstxBX6AK/FDXIWrcQ1m4Fpch+txA34UXopKZc4KKi6l4srE/WFELt0SRuXJeHQKFwpc KHBgPQfiDFtpxsmbcfLOyFO5QOWCGSZvhsmbYfJmmLwZJm+GyVO/QP0C9QvUL1C/QP0C9QvUL1C/ QP0C9QvUL1C/QP0C9QvUL1C/QP0C9QvUL1C/QP0C9QvUL1C/QP311F9P/fXUX0/99dRfT/311F9v lsub5fJmubxZLm+Wy5vl8ma5vFkuT90CdQvULVC3QN0CdQvULVC3QN0CdQvULVC3QN0CdQvULVC3 QN0CdQvULVC3QN0CdQvULai5a2V3XIszaXqj7L4l2ojavdReRe010ZU0bqRxo0zvd+YiWvfSujfx I99nhgFXjcr8rMzPyvyszM/y4RM+NPKhkQ8jiXvCmypgmQpYpgKWqYBlaultveENHrXzqJ1HjTxq 5FEjjxp51MijRh418qiRR408auRRI48aedTIo0YeNfKokUeNPGrkUSOPGnnUyKNGHjXyqJFHjTxq 5FEjjxp51MijRh418qiXR7086uVRL496edTLo14e9aqQrArJqpCsCsmqkKwKyaqQrArJqpCsCsmq kKwKyaqQrArJqpCsCsnyuJHHjTxu5HEjjxt53MjjRh438ridx+08budxO4/bedzO43Yet/O4ncft PG7ncTuP23nczuN2HrfzuJ3H7Txu53E7j9t53M7j9qiOg2kOpjm4lt+vcnEN57o49yHnhjg3xLkh zg3xP8X/F7mX5V42cad9d3N6TniOg/0c7OdgPwf7OTjIwRF58jIXe7jYw8UsF7NczHIxy8UsF7Nc THMxzcU0F9NcTHMxzcU0F9NcTHMxzcU0F9NcTHMxzcU0F9NcTHMxzcU0F9NcTHMxzcU0F9NcTHNp iEtDXBri0hCXhrg0xKUhLg1xaYhLQ1wa4tIQl4a4NMSlIS4NcSnLpSyXslzKcinLpSyXslzKcqmH Sz1c6uFSD5d6uNTDpR4u9XCph0s9XOrhUg+XerjUw6UeLvVwqYdLPVzq4VIPl3q41MOlnmg/LuW5 lC9W42cujHFhhAsjHMhzIH5vGqHuCHVHqDtC3RHqjlA3T908dfPUzVM3T908dfPUzVM3T908dfPU zVM3T908dfPUzVM3T908dfPUzVM3T908dfPUzVM3T50R6oxQZ4Q6I9QZoc4IdUaoMxLtqTN8rDN8 rPqz5vPKxJ2iuEsUxdH7fD/mmu8fNG9P9lS3HbbHFzAFO6AGO+JC51yEi/E9fB+eIGk9TutxWo/T epzW47Qep/U4rcdpPU7rcVqP03qc1uO0Hqf1OK3HaT0efZ/W/bTuN+KsEWdVQUYVZFRBRhVkivr/ ZwXQ/X9kvif4RPwnG//7bO/nRz8/+vnRz49+fvTzo58f/fzo50c/P/r50c+Pfn7086OfH/386OdH Pz/6+dHPj35+9POjnx/9/OinYJaCWQpmKZilYJaCWQpmKZhVDRnVkFENGdWQUQ0Z1ZBRDRnVkFEN GdWQUQ0Z1ZBRDRnVkFENGdWQ+b+ohgyHMhzKcCjDoQyHMhzKcCjDoQyHMhzKcCjDoQyHMhzKcCjD oQyHMhzKcCjDoQyHMhzKFOf44eJ/hTyEV1leZXWbrG6Tpn2W9rHGWRpnaZylcZbGWRpnaZylcZbG WRpnaZylcZbGWRpnaZylcZbGWRpnaZylcZbGWRpnaZylcZbGcYxZMWbFmBVjVoxZMWbFmBVjVoxZ MWbFmBVjVoxZMWbFmBVjtirOhRm4FtdBvokxWxX/PzZuohfn/nvNyLQ7i5We11Pz/6ca8ex+rWdU b6aqLaXaylTbSpW2hUqrjKZ/3lFmmI1n4kbv5bf4rTvCsMwednZBbQ6bncdctQ+F8xQe+y9PTcOy e1h2D8vuYdk9LLuH/z91m2HZNyz7hmXfsOwbln3Dsm9Y9g3/P30qit9WCpR68/P3lrEouWFfgUsf RWfQtom2Tfwb5N8gbeM3my5OTKBvH337iv1vju+/8o5wnyelufY9GPro2kfXPrr20bWPrn107aNr E12b6NpE1ya6NtG1ia5NdG2iaxNdm+jaRNcmujbRtYmuTXRtomsTXZvo2kTXJro20bWJrk10baJr k5walFODcmpQTg3KqUE5NSinBuXUIN376N5H9z6699G9j+59dO+jex/d++jeR/c+uvfRvY/ufXTv o3sf3fvo3kf3Prr30b2P7n1076N7X1Uc5wxci+twPW7Aj0JfUeN1GyqhEG2WmB9tmXjFE+er8vK1 MCvxZngqsdZzRi7MSawLLUmdM7m3t9d9w/PJg0L687+tfGa0SfJbxf/XtfjvFPanusM7HHvMfefh VRXwWmhLLJTpr+NNv7nIdnHoTrzjTbfNr7XbdqA/mpgYUKk5z7h5T0LjWB9GklF4P1mOCmzj7X/f 0JvcP6xNHoADcXDIJ6eGVanakE1dFJpTl0KPSP3A9srQnfoh9ITUj21n2t4Iz9CpepgxU3dDVabm OH6vfXpf6gHf5+I37vFYWJd62v2fxwthbeqPeNG+Bt9fshVTqsW+VizBMt870e3zcrzvvMHwfmot xsP71ZuHoeotsCW8HVZ7O6ze2f5LQnO1Z/pq46q+PYxV3x3WVt+HB/FoGIpO3KBqF58KVF1G1UGq DlL1Y6qupmonVZdRdS1Vl1F1GTXz1Byl5iglRyk5SslRKq6jYo6KOSrmKDhIwS4KLqPgMgp2UXAZ BTsp2EnBLgp2/ouCXRQcpOAgBQcp2EnBLgp2UXCQgoMUXEa9QeoNUi9HvRzlBimWo1iOYjlK5SiV o9QgpUYpNUqpUUqNUmqUUqOUGqXUKKVGKbVsg1JdlBqkVI5SOUrlKDUa7Zh4Jvw4MT+8QKlGOfgR hZ6gyoeJFeF78mxGYiA8LLvPTIx50l4XjpRnbySTYWGyLNyTTIUrZHt7cvNQk5wSXZzcJVwj83dM 7hOOpdqjsn+anHsoeWS4MXlMOGfD387qSX4rPJI8K1ySrAsvx39/SVR/1ZNeMUu8hjfDP/3iB/xY 4RfTfmHAXYfdcZU7rlFLU9XSEd4In+HYK6HVVXG9vF2skf7oC65e4sq3XLna2NLGVuUObcV6OCi0 ufKV8JarPnDVf7hiM1es9Hs9xfr1Vl2s4SnqdG/f9w0rXPW+US6MtpdZa4tXLpRZr2ORjFns6ndk VZunyHbbjrBadqyWHatlxmqZsVJmrJQVK2XFWlmxVlaslREFGVGQEQUZsVImFGRCQSas5txqzq3l Wtz5+6ONjKfMyB/ze8/43b+I9SUsCuvpupye6dT1Ie/+o+4/6v6jqQd9/23Iu89oVOqqMSO/yhWr 4rz3JPyMXjJfLK+FFnu7E636SKzhipChW6v7LnPfZdFZfnWOs2epqd5itvwlzPTrM105Qon1lFjv Dr2UCJQY21BXY5QYS3SGee7YIJNaElnZU4nNw0XJLbmxFbbGTuHq5M7YJXyY3J3Pe2Bv7tE9eZTj xxT/7vL+RrO/2uul7hh1x9ReL4XHKBwoHNReLxVmUjpQYg4l5lBijvrrpfZ6aq+n9npqB/XXq/56 qb6e6uupNZPyYxSbmXpOJ5qHv4WrUwtt30Yz3sF76MI/HeuxXekeq8LV1VF4o3pCmFddhnLU+L4r LtGhZoc5arCXm+ur7w+rqh/AXPwa/x7mRVUyclQ2ruL0gbrPJ7rPJ7rPJ1w/VKV/otI/UemfqOpP ou34EXuZp/0w7YddVaZHjehRI3rUiNjHxD4m9jFxD4t7WNzDYh0W67D+MqK/jOgtI3rLiN4yIr9H 9JYRYx0zzmG9YkSvGNErRkoq/eJsGXA/9xdw/5fc/2XiZY424pXwZmKhWfF1vBkelQUfJZbY3ya3 OsOMxHvh74kudGM5/okV4fZEj+0q9Lrnats0+tAfzZYtDYmMzx8iK/MGbYewJlydGMaIz6NYG+r0 phadu1Pn7lTBZ+pR7yQ+cuxjfBJeTnxqG8zCJUgg7l+lsm2Cz2X6VGWYlazyORUuL/azjW03wSRs is3DVNl6vGw9XrYeb269LbltuC452bHtMCX6drLGdkfspOftjF3Cd5K7+r4bdvd9D+zp8xexd/iK HvldneU5rs3m2myuzZbt39Av704e4pxD8aVwc/LLtodhargpebjtETgy/JuqOD55tM/HhKtUxpkb /sbscyrkuuTZ0dbJc1EX3tVf/5CqCy2pS3Bl+EiVfKRCfqlCPpIls2XJbFkyOzXb8ZvxU9yBn+Gu aMvU3bgHc5x/n3334wHf5+JB93nI99/aPhwuT/0Oj+KxcFvq8XCd2eym1DO+P4s/4LkwTVVNM8Pd JANny8DZng9uM8vdlPpTuDk1H//hvJfs+5vz/u7zy2i0f6Hvb9q/yH2b7FuMt+1rxjtoca9WLMFS 5y9zbifec6wLurfsnq1qp6VWhL+r3Glm0ZtU7/Gqd1qq1z45mJKDqQ8gD1P9GAgLUvIwJQ9TWcjB 1BoMY0QHGEXe50J4ObUO633+BHIuJed0hVnV8q5a3lUnw8vVpbYTwgxdYoYuMaO6wveJukcl5GB1 KiyorsZGPm+MTeyfhE2xmf2bh04zfaeZvrN6K/fb2jnbYFtMxnbY3rlTHN8BNX5/R/t0WN1oVvVN oUWFz66+PdqymtfVvK7mdfWduAt3O3ZvuE7lz9appulU03SqabrAbN1qWvVD7vPvxv2wez7q/o/5 /jiewJPh6qhGl7hKl/hjcWZ+tTifv64T9Kn4OSr731T2fFX7vKp9y5ybU7H/ULG9qrJVNTapwpdV 4VJVd5zKOlclPa9i7lYxr6uYPlVynypZqgoaZf/jsv9k2b9A9sf/S4VDZPy70fn61dNG8gcz1pLE 82ap+XrCX+x7Ca+a515zbGHo0D07zFwL9KxBM9d8c+Cg0Q6YveabvebrX48Z+ev61ICRv6MXLTTq Tv1mlX6zysj79Os2I1+jZ7fp2W36yUKjf04veE4veM4oPzLK0+JnHrPXktR3ddqLwnwz2Hwz2BIz 2Hy1Oag2B81gS9Tn0+pzUH0+rT6fVp9Pm8GWpG5x3a24E3eFDl29Q1fvUJuDZrMlZrMlOnyHDt+h Np82m81Xm0+rpefk/XPy/Dk5PWA+aTOftMnbAXNKm1wdkKcL5eVj8vIxefmYXByQa6vk2iq5tkpu DcitAXm1Sl6tklcLzUVtcmqhGW6+nHraDLfEzNEhPx6THwPyY5UnyJflQSNe8YT2ZvgLpVebHVrl wrG6+XLdfLl8WEzV96naQtUWOfFnnXsFZRfp1Mspu4iyi+TGh3LjA914qW68VDdeKke+KEfGddku XbZLrrwnT9I6a7PO2qyzNsuZdt30PV20U+dcqiO26oitVF9N9dXUXq0DtuqArTpgqw7YqgO2Una1 rteq67XqdK06Wqcu1qWLdelinbpYsy7WrIN16mDv6WDv6Vbv6VZdulOX7tSlO3XpTs26U7Pu1Kw7 vacrdelKXRu6UrNu1KUbdepGS7mzSGdZrrMs59IiDi3SXVboLit0kBW6xXLdYrnOsFxnWK4zLOdU C6daONWiK6zQAZZzqoVTLSp/OacWqfxWFd+q4ltVfKuKb1XxrSq+WbU3q/Yu1d6l2rtUe7Nq71Lt y7nYosqXq/Llqny5Kl/unbjf03H8XH1Q+Dg6WJXF71mXqqi5KmquinqVz7NUzTq+PsHXBr42qJYM X3v5Oo+n83g6T0UUVEGBF7N4MUsFFPgxS8YXZPlcWT5Xls/lxSxZXpDlBVk+V5bPlc3r6DWPTvNk 8zpazaNVL616ZfU6evXK5HX0aaBPA30a6NMrm9fJ5nU0aqBRA33myd6C7J0rc9eJuUGMr4W7Zey4 CF72ba2x58IzcnNFtK3I1vqWFtmAyAZENiyqZn0gI7JmkTUb3Vqjaza6ZqNba3TNRrXWiNYa0YAR DRjRgNGsNZq1RjNgNANG02wU8bvsQDTFL+X80nt+Ke2X0n6pn4bxO2qLXxvzay1+rcWv5fxai19r 8Ws5v9ZCi1Fa/C/izgU8iur8/2fmzM7Mzg73EK5yv3vhImpFEWtTLxWwVLEIClhQBBMEBYSEgFqV KpabCshFsCBEaQWJVbkoKqV445oFhg3BCATIJkwEExJI3PP7zJr2b/vv79en/fV5fg/P55md2TPn vOc9Z973++4Tds8xagW+OMfIFYxcxMhFjFyEL84xegWjVzB6EaMXMfpeRg/qwyJqhKPEy2/VHma9 h5HLGfEIsWwTEfcQETeoD95LRlyTVuW1NVS89v8wdZdDRK+k5wp55wjvFCbPgtquOunHUO1d5zgr pf+D9H8WNeyhaUvx8EXm6eAJASE0qQkWtOW8EyxX39DH0eTK7KN1PlkksLFcdKKPHbzzPv47R1+b aXHyL/V9Mt8I4osFNjhqM7MaxGxG4cdz+PEofjyKH4P6+ij+O4cNm7FhBzbswIYd+PJv6+4W0PIH 9Xdb2nfgWezEcTntV3AtqLk15uyLJth3FpvOYlMJNpXUfoJThvXF2FWGXWXYUYYdZdhQxthnGfss Y59l3BLGLWHcEsYrYbwSxipjnLOMUSI60PsWZv9nZv7pD6JsFD//gZHOJ6Oqk/xLkWdq1/Iwsx8b /EXPX6IPM/6UUbcw6hZG3fIPI08QadrSLogynTgGEWM5bf8+YoSTWfRbdMAFamuTdR2sJtT+dcce Rr4n+RejvbD7KC3fY9V2URccxP5teGn9DyJIkBk8PLWctQ7y7km8tRxvLWc+2+h1Nr29xSruQrsd xIPL8eByVnIXXlzOE+HxRHis6C7mt42nwmOOR5njUeZ4lFXdhQY7iAY7iN46+HeRw2OVd7HKu/4a OdrSRwe1nLlvY95HWeVdyejRAq/n4/X85KcRFUSRC2o7Vp/B8/lYfAaLg89wzuDtfLydj5VnsPAM Xs7Hy/l4OR8v5+PlfLycj4fzGekMHs7Hu/l4Nx/v5uPdfJ6qCqLuRbIfu4cdVqG2CZ0seBGldEFI 1MhOzs5ydkq05cynhqlCn/joE59MWUmmrCRTVtZ+RhhHs3yDjq8i48XJdHEyXSWZrhK9XkW2i6PR q9AVPpq8iuxWSXarJLtVorur0N1VZLZKMlslusMns8XRHj6ZppJMU0l2qRRhcvkFLFlG7vbJ2YGu O8moPiu4ihVclYwqYbJ9uUwhklyuSplBMa1K5VWiHhGGmkf0ZBxPGPRzgn6Cz1yrghkwYzf5CUI8 aI8nUnierlJVXA8+laUF9x0TjTkLZl/O7MuZfXly5kPRCsPVgR/MvJyZlydnvZfjPtgP+XAEmB0z K2dm5cysXLRhtN34twL/HsK/h35YmTN2KaMU4dsKRihihKK/VuMbk5/4FeHbCnx7CN9W/E2Ffohz L/kpYLJSx7eHGL0I3x76YbUuNGZeITrIOrxKUStQSz5qyUct+dj0Lja9i7cqUEzFKKbg07Uz+KkE ZeSzAjWswDpWYB11ZEPqyOCvIwPVU4zqKcaud1E3xaibYtRNMeqmGDVTjJopxp53UTLFqBgfm95F URSjKIpRFMWoiWJhYc3bjPwtI1Yx4reMdoHRvmC0L0R73v0av53CxsPYeJiW52s/w/5/K3QVyu46 9vWP8cNqdQofXsSHF/+6Shu5lsv5Jo5bUFo7Of5w1Q5x7sFfVq+ANoW0P6YO/80qpuK1QrxWiNcK 8VQhnirE7q9qP5MqxCOFeKQQbxTijUK8UYg3CvFGId4oxBOFeKIQLxTihUK8UIgXCkVz5lnAHAuY YwFzLGOOUeaYxxzzmGMeSjXYdXnMJw9VGUdVxplLAcoy2IF5zCWPueShJOPMI4955DGPAuZQwBzy mEMec8hL/i/K9nKEaC8Wi9HqFfEAPAiPqZUiU80XWTAdsmEGHFeLxQkognO0uaDmiYtQDTXwnZqn dVF7ta7QDS6Fy+ByuAK6Qw/oCb3gSugNV8HVcA38CK6FPnAdXA994QboBzfCj+Em+AmkwU/hZrgF boXb4GdwO/SHATAQ7oCxoon2kdqmfaze0z6B7fAn2AE71Qfap/AZfA5fqA+MFWq+sRJeg12c74Y9 wFyNBCg1L1RfvRJqqBaHUNkhVHYIlR1qAk2hGRSq+aFS2pyBb9R8sytcDenqFTMDxsMjMFmtNKcA fjfnqr3mXvWBScVjdVIfWJ2hi3rP6gq94ErOr4eharE1DIaredYiWA2FnH8Nx4A1s4rVSisOZbxX zvl5Nc/W1V5bggEhMAGlaKMU7TA4EAEX6kBdqAf1oQE0hEZwrfrA7gMjeP0gxyc4ruWYo96zK9Te MH2FG6GP7xMN1W7RCIh+ojGkQhPoDF2gK3SDS+F26A8DYCDcAT+HQfALuBPuhntgtFrGzl3Gzl3G zp0hJqnlYjJMgcdhKmSqHHZzDrs5h92cw27OMZ5Xu43Z8AL8FubAXJgH82EBvAgvwcuwEFZw30p4 TeWw6stCh9Tu0BEogK+gkOsnOZ6CUt4/A99w7Tu12zTBgjA40BSaQUfoBPjBxA/sjhyzN8erOV7H 8Ra4D4bDCBgJ6WoZO2cZO2cZO2cZO2cGO2eGyXxN5ssOyrEfCXwj5qu9YgG8CC/By7AQ1sBayIE3 4E34HL6AL2EX7IY9sBf2wX7IgygcAA+Oq43EhI3EhI3EhM/Et1AOFXAeKuGCWk+cWE+cWE+cWE+c WG+cVnuNYohDCZQC1YnhQxl8A2fhHFCxGOUQ3JcApdbzvG20iAUWz77Fs27xrFs859ZA9Zl1F8fB MJQ2w2C4Wm89zPkkmAyPw1SYDs/CLOB5s/CRhY8sfGThI56n9dbvOK7muJ7jFsAPFn6w8IOFH3jW NvKsbeRZ28iztpFn7TOetc+sEiiFMu4t5zr+4Llbr10hDNFAhMAMfiUn+DULCEPw7d0RcJO/I91A 1IU+IlVcB6NVFns8iz2exR6fzB4fxx4fxx4fxx4fxx4fJ6bRQ6bKYJ9nsM8z2OcZ7PMM8WtRTzwN z8CzMAt+A8/B8zAbXoBNopXYDMdVJiuayYpmsqIvsaI5rGgOK5rDiuawojki+AbpCyqbVc1mVbNZ 1WxWNVtbog5oS2EZvAorYCW8Br+DVbAaXoc1sBZy4A14E9bB7+EP8Bashw3wNmyEXHhHHdB7iHp6 T5Gq9+bYD25VWfpt6jH9dhjE+Vj1pD5OpesPQ7pKR7PdLoepSei22+UIjpPU53Ky2if3ipDcJ1Jk Hqr3AFX5QeHI4ypHnkCLFIku8iTHU8F3A3EsEQ2NSaKBMRmmwOMwFaZBJmTBdMiGGTATVqgM4kUG 8SLD2C/qGXkQhQNwEA6BB4chBvlwBAoAf7Lbs9nt2cSarFADdYBdn0mMyQiVCIf4kkV8ySK+ZISq RQNTAnvLbAiNoD10VRlmN4494UqRSkzJMK/hdbrKIn5kET+yiB9ZxI/JxI/JxI9xxI9xJnvJzAT2 kvmKOmAuSf4P+gPWJdAKWkMb6AkDVQ5PWiZPWiZPWrY1UdSzHoUn4EmYD4u4voLja6IVT1O2tY7X hbT/Go4Be44n5yWenJd4cnJ4cnKsMyJs+VBG+3LeZ//xBGVblaKenaIO2I0hFZpAU2gGzaEFtARs tbHVxlYbW+220A7aQwfoCKPoazQ8ANmcz4CZ6kBYUwecIeoxZyhkq3RnJvDcODw3Ds+Nw3Pj8Nw4 PDfOb2EOzIV5wHydBfAivAQvw0JYBIvhFVgCS2EZLIdXAf84K+E1+B2sgtWiXiQLpkM2zICZgG8j +DbyFPB8R3i+IzzfEZ7vCHZGsDOCnRHsjGBnBDsj2BnBzgh2RrAzgo0RbIxgYwQbI9gYwcYINkaw 0b1U1KsbBgcixAdd7uFJOU40Cl4F3z3SRH+caOYmf13ABAvs4HdDwAl+Jan2d0TqQF1oqGIogBgK IIYCiKEAYiiAGAoghgKIoQBiKIAYCiBG5GtE5GuEEoijBOIogThKII4SiKME4iiBOEogjhKIowTi KIE4UXIMUXIMUXKMeEj5YiyMg4chHTJgPDwCE2AiPAqPqbFE1AlE1AlE1AlE1AlE1AlE0zSiaRrR NI1omkY0TSOaOkRTh2jqEE0doqlDNHWIpg7R1CGaOkRTh7x7hLx7hLx7hLx7hLx7hLx7hLx7RASf d+TAG/AmbBLNiLzNyL8++dcn//rkX5/865N/ffKvT/71yb8++dcn//rkX5/86xOtJxKtJxKtJ4pT 1LKnoRjiUAKlcAZ8KINv4CycU4uI7GuI7GuI7GuI7GuI7GuI6tOI6tOI6tOI6tOI6tPQ9B6a3kPT e2h6D03voek9NL2HpvfQ9B6a3kPTe2h6D03voek9NL2HpvfQ9B6a3kPTe2h6D03voek9NL2HpvfQ 9B6a3kPTe2h6D03voek9NL2HpvfQ9B6a3kPTe2h6D03voek9NL2Hpve0n4tUbRD8Au6Eu2CJipKJ omSiKJkoSiaKkomiZKIomShKJoqSiaJkoiiZKEomipKJomSiKJkoSiaKkomiZKIomShKJoqSiaJk oiiZKEomipKJotQSudQSW6kltlJLbKWW2EotsZVaIpdaIpdaIpdaIpdaIlf7UjjaLtgNe4RDFnPJ Yi5ZzNX7BP9HleNPON6qZpLNBpLNBiaz2TBVqo+GsWS3H2Q1PUOVktn6ktnGkdn6ktnGUYvPlY+p P8gt6hP5oagrPyb77aGe30ednieakOXiZDkpD1Hff5/pQmS6DsnvmIxzvYTMM0m4ZDmXLOeS5Vyy nEuWc8lyLlnOJcu5ZDmXLOeS5VyUdBwlHUdJx1HScZR0HCUdR0nHUdJxlHQcJR1HScdR0nGUdNxY pHxjMbwCS2ApLIPl8CqsUGlkzjQyZxp1Vy51Vy51Vy5Z1CGLOmRRhyzqkEUdsqhDFnXIog5Z1CGL OmRRhyzqoDN9dKaPzvTRmT4600dn+uhMH53pozN9dKaPzvTRmT460zcqVKlxHiqhCi7ARaiGGuCZ IDNPIzNPIzOPITNHycwTqf886j+P+s+j/vOo/zzqP48qIUaVEKNKiFMlxMjgaaETyqdSiFEpxMjk Y8jkY0LYFMImMnoaGd2laoiFEpwr5ZsCNNBBCpdM71JRxKgoYlQUMSqKGJnfJfO7VBYxKouY2ZK2 l0B7rnXkvBMQa6kyYiiDNJSBa/bgffYg6qARVUcMhZCGQnCpPGJUHjEqjxiVR4zKI0blEUM5jEE5 jEE5jEE5jDGJoyZx1CSOmo/BJJisxqImxqImJqAmJqAi0qhnPZREFCURNV9NfiNTqrkB3kl+K1Oq uYPjXpWLyoiarCV1r2dWilQURxTFEUVxRFEcUWrhXGrhXGrhrdTCW1EgUerhrdTDudZ1wqEmzqUu 8KkLfOoCn7rApy44gkpZQ13gUxf4qJWJqJWJ1r2q1LoPhqtp1Ae+lc5rnilrPDwCE2AifT4KzIva 4Qi1g0/t4FM7+CgcB4XjUEP41BC+9TztZye/VdBH9TjUEz71hE894VNP+KigaaggBxXUjLrCRwlN Qwk51BY+tYVPbeFTW/jUFj61hY9CmohCmohCmohCmmidoO8iOAnEeotYj2pahGpahGpag2pag1qa hlqaiFpag1qahlpyqPU9an2PWt+j1veo9T1qfY9a36PW96j1PWp9j1rfo9b3qPU9an2PWt+j1veo 9T1qfQ/VFUV1RVFdUVRXFNUVRXVFUV1RVFcU1RVFdUVRXVFUVxTVFUV1RVFdUVRXFNUVRXVF7V7Y dCVcq3LtPjCCvkdxPhoegAe5NobjQzAWxsEjKo5Ci6LQoii0qP0E98zl+lra5qit9hu8fhMqlBcW IhUFFw0zt3AjlRtuLBznTnXcuQvuhiFqIMpuoHMvr6eqUmcaZMFflN6TvH4GZgkXxeei+FwUn4vi c1F8LorPRfG5KD4Xxeei+FwUn4vic1F8LorPRfG5KD4Xxeei+FwUn4vic1F8LorPRfG5KD4Xxeei +FwUn4vic1F87v+h4nP/RvE1FnPU9dpwMUAbKe7U7hdTtV+Jn2qjxPXaaPFL/VYxRB8r7paD1U1y iPqx3KzWyA/VAHlMfYY2TJFEOHlSzZen1U5ZLFrIOPVWiTovWos5ie1indov/qT20/sNtd8GezW9 X0rvl9L7jdpYdZ7cWsQoVHNUZYNVH0bpyyiT5Va1RX4AHyZK5Ufqj+S4Q/ITtUNuV3MY/WlGrpJF 6hSj92H0uYwuGf1VRt8ubLlbrZZ7sYlKXu5Xo2Se2iSj3HVQ5ZMVC9Cp69Sfse3PtLyH3Lmb1oto nSX3JxK0fo3Wt5FH/8gdj3PHkuR3O3bH2myy+SVk79v0AWTysWqsPl5I/U108nb1K32nWqwfFVfp FWTkFFFPdlevy63CJUt3ZwZvM9JO6lEp91NrHlDvkKVD9J5gRlEydVZtppa1NalkZqdkMbOKc71E ndF+KQy1SYTABAtsCIMDEXChDtSFemqLqA99VL64Dn6tNoin4Rl4FmbBb+A5eB5mwwswBx9uUvvE ZrVP01W+JsGAEJhggQ1hcCACdaA+NICG0AhSoDGkQhNoCs2gFbSGNtAW2kF76AAdoRN0hp+rAm0Q /ALuhLsgG2bATHgCnoSn4NfwNDwDz8Is+A3MU4e1+bAAXoSX4GVYCIvUYb2H2qD3hn4wSL2vP6di +vMqxi4fzKqUss9q2GMbWIlS9tgd7LEaeT5xWlbyRFQpS15IVMqLiXxZrUxZkzglv1P9ZILrSjUz QonThqluMixlGXai0ggn8g1HmUYkccpwVT+jDtfr0m6S2mRMhinwOEyFaZAJWTAdsmEGzITfqXxj FayG12ENrIUceAPehHXwe/gDvAXrYQO8DRshF96BP8L7qsDYBJthC2yFD+BD2AYfwcfwCWyHP8F+ tcHIgygcgINwCDw4DDHIhyNQoDaEqtUmUwL71wypLWZDjo2gPXSDnnClyjev4fiCKjAXwmLOmaf5 Oq+Zj8l8TOZjMh9zPdc2wEbIhfdgE9c3wxbYCthuYrv5Oa+/gC95vQt2wx44CIfUYTPGe6egBM7C OfgWyqECKlWBVRfqQX1oAE3VYasZNIcW0BJ6q3zrGpioNliPwhPwJMyHFfCa2met41ipNtidVYF9 qcq3r+DYg+NAuIPX96jD9ijeHw0PwHNcX8z1V2AJLIV1UK0Oh4UqCDfgyPMV5rkKN4eWKt8ZpWLO OEiH8TABJgHPu8Pz7vC8OzzvDs+7w/Pu/BbmwFyYB9jrLIAX4SV4GRbCIlgMr8ASWArLYDm8CszR WQmvwe9gFaxWGyI/U7HI7dAfBsBAuAN+DoMgS70fmQ7ZMANmwhPwJDwFv4an4Rl4FmbBb+A5eB5m wwvwW5gDc2EeLIAX4SV4GRbCIlgMr6j33UvVhrph9X5dByLqfWGQKzYQ+ePygLiCuFwjXhaZaqnI gumQDTPggopRP8eon2PUzzHq5xj1s0/97FM/+9TPPvWzT/3sUz/71M8+9bNP/exTP/vUzz71s0/9 7FM/+9TPPvWzT/3sUz/71M8+9bNP/exTP/vUzz71s0/97FM/+9TPPvWzT/3sUz/71M8+9bNP/exT P/vUzz71s0/97FM/+9TPfvAtXNqfsXOnKqVmLaVmLaVmLaVmLaUOXUwdupi6M4+6M4+6M09frU4n /z7y+786+lqvVF+TzTyy2FK5R7QmXxaSwV6ghltKDbeUGm4pNVwpNVwpNVxQP8Won2LUTzFqJp+a yadm8qmZfGomn5rJp0ZaSh20lDplKTXJUmqIpdQQPjVCKbWBTx1QSh1QanVTMevS5PdxlqL9Ay0f Q2fH0NYxtHAMDRxD//roXx/966N/ffSvj/710b8++tdH//roXx/966N/ffSvj/710b8++tdH//ro Xx+9WopeLUWv+mjUUnsyfT/B67XBt6YpH73pozdLwyk8T0PUYjTmYjRlHpoyz81Wp90ZMFOdrpOi vq7TGFKhNbSBJ7m+Sn0tdLLK78nr6Di5WVwrt4j75DbRW34kmuLf9+QnKKntorPcLQbi64HU9SEU ww3U9g1lVPTC71+hHFqhc45x9bjohl4YiF7oJE+Lm+n3k9rPsi9lpI/VOtq/mBxzA++NQ1VsEXW5 9hlne4Lvpfz/v0tXGyv6/ePv08Wenjwd1zNqf/Lhbdjw/ZWeZMtKrt5EttxCtownv6O4JPg1Sq62 5OyG5GeKTWjbERuC3yI4KS6nxRWc7RH9mGEK77VirsG3vg1Ru+Qk0Qf7PzH6otd0rnzK2Re0Jjeh Ccs4K+AsXdTh7CJnn4rOwhD9RAhMsMCGMDgQARfqQF1GHCway6FovOGQzpy2oAM/Qmd+rPYZk0Q/ YzJMgcdhKkyDTMiC6ZANM2Cm6Ect34+avR81ez9q9H7U6P2oyftRf/ej9u5Hvd0v+fsXdVC35YxU wCxOym2sZPBrJh+rd1G3Jcx9Ej7ZjF0f0IrZMvc6oqG2V7TX9okeeGY4fviJHEqrYWKYHJ78jrlh Ml19HHwrkZyijsmF4mq5SFzDOD4r3REl85Zxrehl9BE98NYw0Yo7WjFOb1ZzkmjDSGeC8ZMj1an9 XZOd8l7uvo/2Iznez3ESO2yvOoxGLkUfX0jun4PC5i4pzOCXUGidSstUWoZp6dOiTKSK40RRNJQo Qjc9ykjBmk5ReejuUla9HhF3X7K/KCt4gLvoM1DEoYaqhhq+hhq+hhq5hhq5hhq5hhq5htq3hjEH q9PB/3iix248KVaytwOqXDT5mzHvJWaNhAzmNgklvkedxboy5uGz4xozdgV37WDcCONW/dNxI4x7 LPhtFnpryLgheqygx1J6LKfHML2drZ1FDc/ZYK4G3xd4L0p+JDzKO5NEM+4MY7HJnee5s4Y762BL IvAad1bzVBwXt4gTUAQX2NkXoRpq4Duiw2AqlyGqh7yXaHGfGCFHcryfYwa1z6PYM0WtktPZFwvF j9gP1+PxvYzYJ7k2+9Xy5GhRdZBnLoUq52LtHull0LeRACU6hxqKW6yhMAyGi87WIlgNhZx/DccA O60yrpVzPI9twfc/lmHZBeZ8Acu6Me8LWNaNeTdn3kHEsJmvw1xPyUOifnLXbeWOT7jjBHc0544T 3NGcO35E6/rYfDK58/arauyu4s4Tybuiyd8lGMp4w9jJwzmO4DiZqHhMtCPilRFjHCJjMyJjA+Ld 1uQv6gTrF6OV5EoZ6zCYV0OSz0bwbXip8jF21ePku5PYfZoRi5Wf3G+F3HeC+xx6t+lZ552YaCZG q7PiAXgQHmP1B7OeQ7FrOExmZwatj7NLTuLpU9hUTH0Zp5cS8mRf0SRUX50NlcIZddZMhwwYD4/A ZJhCv3VrfxPIo+cYPcfkY8xqMjH/GOt4nF10gicoOVvi8Gl8VKy+TNbiTbCvGvuqsa+6dvbBZ8pH 6eUovej00g0b69NLJb0k6CX4pnmbHr4Ofo8I+6qxrxr7qrGvGvuqsa8a+6rF5WK06C8egAchU6SJ LJgO2TBDpDFiPUa8jJgVwsODiFkhvDyImLUWT2/E0x+wT3eyT29jn/aXb6r5zOkLMkSn760hbwXW nEZNXCv6sEf7GH2VZ6wQacZKeE2kheqL/qFCjqUcz8A3Is3sCldDuuhvZsB4eAQC+2ysOl+7b/Ta faMn1yrwYLE6lfw04i3sXlPbKrW2VSp2+7TslfwEoljlsTPSE9upBc9Q+xVS652htis0uiSK2Gvp CZ+rZVwpM7qoG+g1PXFUnsfP1dxdQ2z4Tu02QqqSurDKiKhyWu6m5c3Jez/m3X1c2ccVJ3mvLy8y XjVe+U4doMZMGGFhcm+CVgeoJRO07EdcSk+cZJQEVWo5lpXKCxyrGbWGnfn9nTWMmqA6LcfiUsPm 6GBFhOvf91TDDCrYdenUtZVCo5cyeknQi6KH08mxTaFxdxl3J7hbcefpWhu6Bn5KzMOGY9zdnrvz ufu8vMgTG1hfwz7+jh2XQCco9R22HKO39vSWT2/njbCKJmcVYZ1dUZ9KOU7P32HTH4IsqnR6rMKO ApkQOndVMXaBUYfXXVTboEViDy1OMV7gqRgtTtFn4KUYfXyDd/9uvVj92nXi7n+yPsm2yXWh7T9Z D+b4v1wH4um/6H+izH/Y78zxv/F38p1/6GdR10gRYaMx9jUVjtGc3lpwT0s0wyW8bsV7rXmvHe91 4Lwj73Xivc7kA8NIZYQWvNuGY0fWxDVSOKOGMJowfnNGaMFIQV+tuN6a62253oHrHblOP6xC0DoY uUVti2CkoK+G2KXzbpGRypUm0FS0wr6GtCyiz1bYp2Ofzl1FRhvebwvtuN6BNh251onXnYNfJaeX AmwNZqgbzbC1uQjV9hLcXYD9wQx1oz3vdeC97+/WmW8KNGbvpWJzU/ptzlxasPotGeuSYF6835r3 2/B+O97vwLWOvN+J9zszP2bB2jSm31SuNoGm6iA2JPDOMaMla3kJc25Fm9a0acP7baEdbdrTpgNt OtGmM5ktWCc36demIgU7Ao9VYUcKdkSww036th3nHZIerMKGFGyIBKsiZHLuzWv9/L31gfdkct7f 31FWa7Uu6v27e4Kn1sd/f7cveNq7izr/6t7grh7C+u/2B+92FI3+U3uE3i5j1v/mPuHuLqLB/3av 0Mu1wYz+M/uFlfg8uY7/1p5J5oY6/+q+SUb1LvJ8ophIOpKI05KoNkBeTJQR1X4qaxJxos9oolob olofI5QoJqKOJBq1JKoNMMKJMqLaT41IIk5kGk1Ua0NU62OkJM7jkcvxSFc80tVoynkzdRkeqYtV PfFKJ7zS0WjF9da0a0ObttCO8/a060C7jrTrRLvO7JowlZtLzdVPBr/rs100Qu2moHQ7oCp+hFbY gdqrl/xtoc3acHGdNlLcrN0vZmu/4jiKyn2wWibvphb5pdqM8liW/KW6rv9Dqx3JVsFvIB1KXv3L 2Ya/nulU8h9qH6kNyVfBr9sd41U9quTLhRB9qEm7iR/zr4e4Xdwpeoq7xS+5eg9a7nrxkHhB/EzM EW+KR8Rm8SFnH/FvvvhcHBQLhMe/FaKA6mSlOEWPb2gttBZiv9ZKu1zkaf21AeK4dod2lyjShmr3 ihJthDZC+Nr92mhRpqVr48W32mRtsTivLeFfc20Z/1por/KvpfaG9qZ2ifaRtkdrrffQe2nd9d76 NVovvY/eR7tav0Hvp12j/0RP067Vb9Zv1q7Tb9Vv167XB+gDtBv1Qfqd2o/1u/UhWpo+TB+m3aKP 0Edot+qj9Qe02/Qx+hjtdn2sPl7rrz+qT9F+oU/VZ2m/1J/Tf6uN0efqC7V0fbH+ijZJX62/rU3R c/Ud2tP6Tv2gtkj39OPaWr1YL9Fy9TL9G+1d/Zxeqb2vX9CrtQ91JYX2sdSl1LZLS9bRdsh6sqH2 pUyRKdpemSqba/tkW9lOOyg7yI6aJzvLrlpMXiYv1wpkd9ld+0r2lL20QtlbXq0dk33kdVqR7Ctv 0E7JG+WNWrG8Sd6kxWWaTNNK5AB5h1Yq75JDtDI5VI7SymW6zNAS8lH5uC7kdDldN+UMOUO35EK5 SLflW/It3ZHvyHf0iHxPvqe7cpPcrteRu+Uhvak8Jkv0dvK8VPplRsioq19tpBhd9BuNvkZffbAx yZil3208b/xRH2e8b3yoLzR2GXv05cZ+o0hfaZw2lP5OyAk5+pchN+Tqu0L1Qw313aG80GF9X+hI qFD3QsdDx/WC0MnQSf1o6HSoWP8qVBL6Rv86dC50Tj8VqghV6qdDF0IX9JJQdahaLw19Z4b0M6Zl 1tXPm/XN+nrCbGg21pXZ1GwlpdnWvFI65lXmVfIS8xrzFtnKvMMcLLub95lPyavNp81n5b3mc+Zs OcKca86VvzLnmwvkKPNl82X5gLnIXCYfNFeaK2W6ucpcJTPM183X5XhznZkrHzHfNbfKqeY28xM5 0/yzuVP+2vzMPCCfMQ+ZnlxgxsyYfMk8an4lXzZPmXG5yDxr1sillrB0udayrDbyTauT1Vv+ybrW 6ivzrButG6Vn/cS6RR62fmYNlEetQdYgedy6y7pLnrDutu6WRdZQa4Q8aY2yRstSa6w1VvrWw9ZU WWZlWjPkd9YT1pOGbj1rzTIM63lrtmFac63Fhm0tsZYYDa1l1jKjkfWqtcJIsVZbq41Ua521xWhi bbc+M7pY+6yDRncr3zpnXGWVWxeNAVaNpYy77E52J2OI3cXuZtxjX2F3N+61e9u9jeH2tXYfY4R9 vd3XuN++0b7RGGXfav/MGG33t/sbY+yB9h3GQ/ad9mBjnH2PfY+RYY+yxxjj7UfsicZjdqadaUyx s+1s43H7CfspY6o9y37OyLJn2y8YM+y59lzjCXuBvcB40l5oLzWestfaOcZv7HX2OuN5+y37LWO2 fc7+1njBrrArjDl2lV1lzA0T+Ix5YSNsGAvCVtgxXgy74SbGonCzcDNjVbhFuJWxOtwm3MbIce50 hhpvOCOdkcbbzmhntLHRecgZa+Q6DzsPG390MpzxxrvOBGeC8b4zxZlibHIynUxjszPdmWlscWY5 vze2OR85nxpFzgHniOE7R50i47xzIdLcSETaR+aF2kQWRF4LzYm8G/kw9GpkT+RcaK1ruU1DX7iX uj8NFbhD3IdCVe7D7gQz7D7qTjLruVPcqWZDN9PNNBu7/0Xdd8BJUeTff7t6urpnpnozsIElZxCX tCBBBQEVVDByp6KY4M4sYgYxnIqKgqKAJxIE9RQFIygYTzBHUBCUrBJFJCuh/u/7ndl1111Y0unv 3/OZ2urqSjNT9eq9Dm8Hmjt0ZTPE3K9rmOFmuK5vHjQP6QZmpBmvG5vHzeO60Ewyz+rWZqp5WR9t ppuZuqt5w7yhu5u3zFv6BPOO+UCfaD4xc/Tp5ivzlT7bzDPf6N5moVmi+5hlZoPuazaZ7fpa85vZ qQea3SHpwaEKlb4tjIRa3x4GYajvDNPCynpomB1m6xFhblhVPxRWC+voUWG9sJ4eGw4OB+tx4a3h HXp8OCS8Tz8RPhCO0JPDh8ORekr4SPiIfj58NHxUvxA+Fk7QL4YTw6f09BSVkqJfT8lIqaI/TMlL ydefp2xL+U3PIRUDfycyndJ7UgOqQYdoszPsCvsjFdhViH9bbo7d9lE7Fa+f7T3Y62nPQpnZiK1K Hl9l1yBcltzbWqY8H11jN+P1+zG/nHY24f1Qhf29Ce83SqUsRguVuZU9blBeyLfA7kDcYCU/m0Ls ryjdx6JPU06bn9ildr39FDUsx6ddWVEf92ELUOvIZO3f23V2tv0hubexTOtr8V5kl9i5drvtRlF8 d42oZonjuytqzG7Bb7cZNfzec3z/YCyJo0/YJ8jgXfwb/qH0T3j/YBeijsXY9cCz6tGRiFWXo7Ps Z3Yexg/GDnR7+e0/Yx+3Y/F3CN5H2ab2GjsAsRLfY9GnR2xdmdK77Xt2JUbQe/Zj9AO/A397pUsV 5/2kgq+CoFOJUiR2fzJlPer+tGhslhwVyZTN+OQb8d1/azeB76ciqSV+heLW7Vr5hdYW5S5Tfp1d jTm2vugb5zOj8ve7knkq6ncy38JSe1eV2vtg3+rA1kzyJ0eanY/fL7DzK2h5W4m53YzaVJD7Wfsf ntH2vX3uU+nyP/Lo4DFb5sjX+1Aan8zeKbFpf5zP9vx9KI8xYl8W3FrMv9v+bvZpQdOn8b2W3YJ9 quFnO0NQcx/HRTk1bNz3UVVO6STC2jkHVPp5CeczchzyrcU+tP9jYi2zOzCONu13C2avR+vjfYq0 UrTiLUu8kserl1OmIV7V8WpYqpdPJv9+nnjtpXyzcssnv12Mki1Apy176jDw8yf7CxBsqcwpHtXb JX2EHK5m37Zv2q94Rd9D+Z0l4vdSDvC/F/XgGZJMW4S1YWZZLC4us6NEfDhWnlQ6nvogPiWZtgLf 3pd7XlWL2pcR/QjKR4E+/ZNIzukv2qnk2ul7LP/HUeiBPfVD+n3J4x/Y9/H9f5TcK4vfv5WI34PS OXQiMRM6Kpn2hn0NNTy3x/a/Lz99N34xxkd7sj3JXmh7JHOPK1P+NqDYE/Y5+4X9qkSyot50Ow1F 7H4axs/M0LMYuVNoOtjhTHqTmstZhUJ6l+ZRa1pAP1B3Wuk49Denj9OHroaiP4UGsJana1nF03Xq YnUZ3QA9/g0NUt+qFXSzWqVW0V1qjVpLQ1ib0z1qq9pGQ9UOtYPuZ21Ow1ib0wPQ5nEa4VZ3q9No 92y3Nz3i9nHPo0cj0yLTiFWtpbFehpdBn+hX9Cv0qX5Dv0mf6W/1d/SFttrSHNZ0NJc1HX3j9/RP pkWs6WgJNF0vWsqajpazpqNVrOloDWs6Wsuajn5lTUe7oenudQhq7gFH+yP80U6UNZ2TyprOSWNN 56T7E/1JTiZrOqcSazqnHjTdRucwqDnr9AjcwHPOCoIg5pwTmCDFOS9IDzKdC4NKQRWnX5AbVHUu DqoFNZzLgtpBXefK4MjgKOdqqLaLnGugzoY410Od3evcyPrLuYk1kTOQNZEzKH5TfLhzKysdZ5RJ M9nOTPOsedaZZVaYDc5s1hrOXNYazgLWGs53rDWcJaw1nKWsNZwVrDWc1aw1nA2sNZxfWGs4m1lr ODtYRzg7WUc4u1hHKJUSTYkrP6VSShUVS9me8pviawrzZcQ4MmIURsxIKIpR9G+M6UdpElKewMun J+kZrFKTMZ60jCeN8fQ6Zt0bGFUxGVUxjKoPkf4RfUVx+hovhVE2D6x6AX0HdrWIlmOOrcCYq0kr 6RfM+I141aJNtI1q03a86tCvtIvq0m6MyHQZkfkyIl0ZkUZGpMGIvJTS1GUYl0bGZQbG5SKqrBar xZSplqhlVEUtV8spW63AeK0q4zVPxmu2jNdKMl5zZbxmKqssZbqg/5SFUasQYqNKGLs+4vjxKceN YhxnyTjOwzg+m+q5vTGa62M090H8PIzp+jKm8zGmF5ETWRz5gVTkx8hK0pFVkfUUj/wc2UzVIlsi Wyk1si2yk6pHdmH015XRX1NGf76M/nwZ/fky+vMx+o+hLL+z35nifhe/C0X8rpgPHuZDN6R097sj 5QT/BPL9E/0TKfBPwjypjXnSE2VPxmyJymyJ8xkQCv1emDMpmDNnUU3/bL83pfrn+OdQXf9czKJ0 mUXpMosczKJLUOpS/0rkucrvj5Sr/atJ+QP8a9DKtf61qPk6zLQ4ZtpNKDXQH4j0Qf4g5L8Zcy+U uefw+RTkGeLfjXbv8e/F0WH+MKQM94ej1AP+A8gzwh+JlFH+KPRktD8aKZifFOP5iXrG+mNRapw/ DukT/YmoZ5I/CTkn+5OR8qw/BWWn+lPxPTzvv4xv5hX/NfRzhj8D38lMfyZ69a4/G719z/8QdX7p Y2T6X/sYk/58fyFq+9ZfQjX8pf4KfCff+6vQ1mp/DdXy1/rr8E3+5K+nOv7P/s9ocYO/EX3e7G9G zi3+Fhzd6m9F+jZ/G3qy3f8V9f/m/4aad/g7UPNOfydl+rv8XWh9t78bZa1v+f+rBh7lM5ogBJog BJogBJogBJogBJogBJogBJogBJqQAzS5C+GQYAgpxhSKMKaQw5hCBpgyEOGg2GBKY2QhF8gyj0x8 fvwbCuML4hspjVGGXEYZygHKrKBM8735nrLMD+YHCs2P5keqbFaalTi6yqyibLParKaqZo35CfH1 Zj3y/2x+Rp4NZgPybDKbEN9stlCu2Wq2Is82sx15fjO/4egOs5PiZrexlB2ytM5k/EIYCSMIvVBT BlAsoCphNIxRpTAexpHThCFVBa5lIiUrrEy5jG5UGeiWizAvrIo81cLqlBXWCGugnpphLcRrh7WR v05YB3FgH9KBfUh5LByLVsaF41FqQjgBNU8MJ6HOJ8KnqBKjIbmMhpTGaEhpQKwXkmg4HC9X0NAD Go5G/FHgoCs4qIGCzyI+hV5F+BphtAEN30b8v8BAl2YDB13g4NdAzHnAV1fO3weCg67gYCXBwcqC gzHBwSqCg9mCgzmCg7mCg8ZJdVIpdM50zkR4qXMZwiuc/ggHOAMQ3uPcQyFQ8mRSgpJRoOSFCBkl 44KSUUHJFMHELLVOraN0wcEMwcFMtUvtolRBwDQ34kYoA9gXIB5zY5TunumeSVXds+RONsa+fMG+ 6u457jlIP1fubmMczBccrO6e715AecU4uJJcIOBmCoB9OykmqJcrqFeZz9pifnb0O2L2dvI7kSsY F/jHAuMiwLjuiDO6uYJuWtAt2+/h90AKo5vrn+qfivA0/3TkZIyLCLpVFnSLCbrlAt36kPHP989H eIF/AfJf5F+EsJ/fDyEjXSBIF0si3QB/AFKuAdJpwbjAv8G/AWVv9G9E/iKkG4x4AuNu829HnJEu EKRzBeli/lB/KErd59+PFEa9QFDPJFHvQf9BpDP2BYJ9uYJ6rqBexH8MqOcmUW+8Px7xCf4EINrj /uPIzzjoCg7mlsBBV3AwAA7OQDyBfa/77yD+rv8FQsa+ANi3EHFGvUqCepUF9WKCelUE9bIF9XIE 9XIF9Yy/yd+EUox9lQX7sgX7cpPYtxMY5wrGmcAJHHITaBW7PnYDRWM3xW5COCg2iOKxwcCmeOzW 2K1IuSN2B0UFp1T8wfgjpARxssxPwJo084vZSBmCL2mCLFlAlm2Ibze/UiowZTfmOWNKeuiGLqUC TXxKERzJEBzJAoJkIM4IkhlWCasgD2NHVpgf5iO9ehI7aqIGxo4MwY40wY50wY4MYMdjqHNcOA6l JoYTkX8SUCNDUEORar6Bz7y2/vGYQupGf9sTz///Y7Or7Gp+J/eWlqe7+DyPnOvb37q/5zNcorzf lv1vi9qU8Iuk+lzH+lO06EK73K4sfUan4naLztDZK/e/h4d2s92hPPnvHrV3mRKroLTfP/DzMsX1 rPvjnv1FwmQ6tOJmfLPL7Xq8i8/slVCiWSVKL0Sub4jPe1RBLHmGsUhd/0lbrLg3Jds19HdJW1ve 2QW7puy5ObvRLrMLcKTMVYgD3YrOkpfe4/mTHNUlzheg725xfN2efmW7pOxZzUO1lX8Fp8JSk+wE +btTzoZ/wG8+P2SfRuzDZJ6ikcUzeIv9vCh9v9r5Xsbo8t/3+SyYXVQix31yPojPlS+R2PfoTUmE Sn6/+/r7ylnr5RXn2/8NI61EvXar3Yn3b3yuy+4qlW9v16X+j21/8pzfh82OOYjCPcupbzk1wBis dhC17n1rQIKtjKeCqeVuwIZ9voZ48GvFH+or1auSc28fy79o37TPJ68PZNlx9k1JXcGre8nV+4D4 wzfAxqXCH1YKNxE04zXJLsXfyclc6+V620d4z8ZrZekz14JkOVR0bnYW1oIP7Zd4j0FqNzvXfizp XyVYhFzR/vv+97RMz1eX2pM11L5QIuViO9FeZu/ms/y2f3FqO6S9yvOu7FVH4muuZa+FrrFv47Ms PHQztWg88DoGBCvihR9S8vpsyT4Al4uvjfA1lgpq/vRQ9fFAN3xLofx9gK83lzk6wM4qlTfxdxFW txU8Qg6gva951Avfku+JY1jflia/NYT2n/Yz+b23kVvOGhZSQZk612Me/JS8uuQCOYquOm1LHD34 9e3369Clr1cWsRTmXrJuf4/X+jLcc4lwz3JmO2bzIcau8rY/4NncMsd3/jElmX5V+em0P9fR93uz ffezQOIeiyH2Dvn7syDAS/xG7D92WiImx4r4mVzvxC/12gH07kX7KhDzleTeLPsM8f1B0zmON5AT KDYLKFHEgn8G+n6cxInE9bOUMnW+b1+xbyXrzOK9ZHopdLB2/3sr5TBL7YLivSLtsoxjRboywcQF 0T7k8ZG4RyQ5fzYKIve2PWXvLeKreVfifR1iw+1orHXXJWspcW8LvoGZ9sYD6O15dpB93F6G2H8x qx+3/QQf7sNq9Di+57fsGPsPrK0/8zVA+WQz7BQ7PtFyctXItf/9Q50r7TyoysTMbVUcS/JO+2vi ve+MuVTdm2W+F98VVHqVknW6WPkK810q9z2UvOOiaek7Vv6srfRVXLmD6aeKeyKfqMz9V3/GVlrJ 8reKMbypIvyUX+eQKd392UryD8wGVlnz8XcPV7qLc645+P7ax+xA+y87SuKfY7xP4DtlkutQgi9u sS/j/ebBtSM1FSTuZDmoOlbYH7ESyvqI3/RHjMNizp341e0GcI4N5THA/W7rADh3idIfJ35V9IVx 8NPk3pLk/En2+q+Zz+Vttq+9yL5up5GSvUH2WqB1nwQjsNPtduwNtVfZI2xt4GhLe53950G0leCP NQ6qv0lMSmja4vsNJ5Q+eig3O+kQ1MGjd14C1cFvy/z6cny5nfP7KvzXbujNt5hzcs4TY5iVYrFS STBdHH0f7z3cq/pnb+jv/SVnLvjVjL+yP3veMNsGMHdK3OlqrwY7+gqzL3HsLQm/ta/Zs+zdiA2z 3yXSDrCt9w++v/vZ4uaS93n9392KOe7Gg7+7srx73Q/llmCH4N8/YNU7BGcsKrpHea9l93FE2aly bn/tgbdUYss5JLXs0wYudNDM1T5wKHpSQRtJpAO7Pejz8ofoV6qolRVgtv/jmXLoNrCezYfsm8k4 iH4civn+J16POJDRCN6zPFEy+WRH0XmRz+Q6w2d7LXx5Mu/z+9/un70dyDMQZerY49WQvZSRs/V8 piihhBNndIqvBcf2po/l3G4OXUZ6/9uV8gfwlJddKWvH78+SFZ2T21dtF6dj97/Vv3SrfKAF9//K E/FdDXxduljZ25kS/gR8rvBqxP+1Dbx/y56fmSiRb/v/vi/7tu0bQh7oql7us1IVtiV3EPz+7KBc sSgeWbFyCxXl5XNVVekszLm/YCvN3ROoAfVUAc7KlZi/4Hyf/eUQ1rWMkmeUy33iqKE85cRX0D8v 52hFdfNzVMuKShbF5Az/smRKUZvtpK0/9KvE3l2/11nUF35eq0yv+KmsZnyV5kBUux1jn7Qzip8D S8aYESTPaX5e3I9mZfr75P63V6r8AdwpZOfIVYmPivflHiDwTb3PV/r24em9PbRd7rPJFZT5Uc5a 8UouWCB7szD3EsgQ2xu/lBUllY7ct+c1yyl/IPc/zOXnLeW9NbEvYfKs+d7RIflZqpa+3wjj6xf7 pbzHUBVw0tXJq0lLE3NaxtrF+9/TCj5H4gpbCbVu+9jr7FN2rPgGFN/TY7vbF/ez5ll/DmPmPu65 Hbu7vKvKiSuKf0j7peKrOAe6yT0ySWS2G8EnNoIffWMX/o5Edh3S+JpxG3uG7L+EETDP9razed++ ZR+y7/EZczk2olTdi4rS96tHPexl9lbbLbknMYzAfhJ/0k60/TEOxoCtzcDKyzmm2Vfsy8lVm8/O V6YCueZ8vb1U0hL3I44Fr36Mfw92SSi+C6jUuSD7a9HT/PvV30fs09Bq/07ufSZtjxGc/0y+A776 +rzdbN+RDImn9pN3GCRHcav9b/Wv2v4nT2OXbWVZEWIlrjv/VduBXKfCL/0TlTjrUOyQsC9rTybx /TunSrwqtYT2rCFlfwDr+EFWkzxqYb/GDOXXIrvYHoH50o+MTazrSZ2K2ZnQVFWS+y8mr1QoKn5i WtKf3cvnkHsr7I1Y55JnIG1Hey7e3W1fyrSJNbjIQ2MQ3l1sO3u6TT7ZYD+w38ndEjxj12BNWpbU r42pgaycjSXX3s9ulN+vCXYiwqeL92ewlit1Z8VpychZdAq1oebiE1NXjpT87LHdc2x89zZZKV+3 l9iXeA2zN9vbOYZa7ynVbOIesEsOoL+X2ivw+a+QnQCxSwU3b5eV+kv8lit3J56kny6uIEWbfLP2 6mQd+6Dxym17dcV5ypRZJ3cEME+Q0SSjeRb2I3LY7JXvcKlUao/eK5pbgY/dmUkfu9voeEc5lehC cae7Xtzphog73T3OmU5vGu780/knPSS+dA871zj30GhnqDOKprA7Hc1gdzqaye509Dq709EbzjvO 5/SWKlDN6DPVUhXSF+xOR3PVUeoo+ord6ehrdbzqTvNVf3U1LVTXqxvoOzVcjaDFapKaRMvVU2oK rVDT1HRaq15Tr9FP6nX1Jq1Xs9Rs+kV9qD6kTepT9RltVl+oL2mrmqvm0nY1T82jX13jhvSbm+Zm 0E52mCMrDnMkDnOeW8et4/jiMBeIq1zcLXQLnVBc5VLEVS5NXOUyxE8u0z3TPcvJcs9xz3Uq87Ny Tja7vjm57PrmNI1Mj7zpnMmub8757PTmXMROb05fL81Ld/p5WV6O80/2e3Ou8L7zljnXst+bM5D9 3pxB7Pfm3Mx+b84t7Pfm3Olt8XY4d7HHm3M/e7w5o9jjzRnHHm/OePZ4cyaxx5szmT3enDfZ4815 iz3enC90b32nM5/d3ZTD7m4qwu5uymN3N+Wzu5sK9Hg9UaWwr5vKYF83lcm+bqoq+7qp2uzrpurr D/U3qiE7uqkj2NFNtdUr9VrVnh3dVEd2dFMnsqOb6smObupidnRTN/DzcermQAVKDQ504KtbgngQ V7cFqUGauj3ICrLUHUF2kKPuDPKDfDUkqBnUUnez45q6lx3X1FB2XFPDgmZBM/UA+66pB9l3TY1g 3zX1cHB00FGNYt819Qj7rqkx7LumHmPfNTWOfdfU40HfoJ+ayL5r6olgQDBA/Yfd19TT7L6mnmH3 NTU5uDu4W00JhgZD1dRgWDBcPc/ua+pFdl9TL7H7mnqN3dfUzOCl4E31evB2MFd9EMwL5qvvggXB t2pxsChYqZYFq4NNah27sqlt7Mqmtgc26qhf2ZVN7WRXNrWLXdlcJ5oTreaG7MfmZkZrRRu4WdHG 0aZuXrR5tLlbPdoq2sqtEW0dbefWjHaIdnLrRTtHO7tNol2jx7mHRbtFu7sF0ROjPdzm0V7Rv7mt opdH+7utYzViddz27O7mdmR3N/d4dmtzu7Fbm3slu7W5N7Bbm3sru7W5d8dPi1/gTuan9tyZ7Nbm vmt8k+p+wj5t7tfmLPMPdwP7tLm72actEmGftojPPm2RGPu0ReLs0xapxD5tkars0xbJZ5+2SA32 aYs0NpPM5EgT9mmLtGSftkhb9mmLHMU+bZGj2act0pF92iLHs09bpCf7tEVOZp+2yGlmmVkeOZNd 1iJns8tapDe7rEXOZ5e1yD/YZS1yCbusRS5LUSlB5PIUk5ISuSYlIyUrcj07q0VuStmWsi1ycyql OpHBpJzlQL0UKL5USiOH0vFyKQPrcISysXZ7WNXrIr0eXj7VxyoYUBOgZBR42I4M8JD/z8OR8h8w GDFTBDFTgZhnoFQvvNKBm71R4zl0AR1NFwJDOwJD+4M5XI1XJxpA11MlugGvynQj3YyWBwNhs4Gw hnKc0EmhXHlCOM9JA+YeBsytj5QGTgMqcBo6jZDe2GmMeBNgcY5gcTNgcQ+EPYHIXcQvNMfpDVxu LrjcXHC5BXB5INIHOXdRS2eIMwR13g2kzgNSD6NCZ7jzMLV2RgK1mwlqNxPUbiaoXQDUfhrxZ4Dd BcDu2VgP3nPeo3bO+87H1N75BGjeQdBcAc1bImwFTNeC6WmC6UowPU0wPUsw/RjB9MMF09sIplcF pj9N1dUz6hnKV5PVc1RTTQHK1xKUryUoXwMo/zrCN4D11QTr6wjW5wPrP0X4GRC/BhD/C4RfAver Ce5XE9yvDdw3VNcNgf71BP0bCPrXB/pnUyM3x82hxm6um0udeSVAHCsBNcRKUB9hA7chSmE9oCa8 HqBUW7ctwnZuOxzt4HZAeKR7JPJgbUCItQEp/Kz1sfKs9XHyfPWx8nz1cfJMdVesE4PpyMgtkbvI wWoxnFIjD0RG0hGRUZHRlBl5JDKW2kbGRSZQlcjjkecoJzIl8grlYkWZTs3ZTZRa8rpC7XldIcPr CsI0L406euleOjXj1YWaY3X5ilzva+9rquHN8+ZRqjffm08R7xtvAXlYdb5DyiJvEVIWe4vJ95Z4 SyjwlnpLqZK3zFtGcV6TKOQ1CTlXeaso3VvtraYMrExryfHWeT+hxfXez5TpbfA2UBVeq9DiFm8L ZXtbva3UwdvmbUPftnvb0Z9fvV8R/837DfEd3g460tvl7ULNu7WiTO3qCB2pPe2RgxXOJywWOqBQ R3WMUnVcx8nVRhvK1qEOqYNO0SnIg1WQ/6u7zkTZLF0JZbN1DvLn6jzK0FV1PmqupqsRO6DWRFhL 10INtXVt5K+j6yB/Xd0A+RvqhlRFN9KNkN5YN6aIbqKbUIo+TDdF/Yfrw1G2QBegtma6GfI0181R toVuQYZXXLTVWrdGehvdFjnb6Xaoob0+mjzdUXdBzq66K/n6WH0s+txDn4zPdYo+HfX31n3Q+nn6 fLRyge6LevrpS+hofam+gjrqK/UAtHiNvpY66es00EPfoG+kyvomfRN6O1DfjM8yWN+Cem7Vt6KG 2/RtqOF2fTvF9b/0v9DKHfoO5LlT34lWwAAojxkAFYABPEAt9YP6QWrBPIBywANG4ehoPZpy9SMa OKAf1Y9Sez1Gj8G3PV6PRzhBP07N2QMW+cEVUMNkPRnhsxqjVE/RU1B2qn6euugX9Auo+UX9Eo5O 09NQdrqejvRX9QzknKlfR8639Ns4+o7+LxWCYbyH9Pf1+9QUPOND5P9If4SUj/XHyPmJ/hw5v9Bf oD9f6jnIM1fPRQ+/0l+jz/P0PDpMz9fzqbX+Rn+DsuAoKLVYL0bNS/QSlFqpV6K2VXoN8q/Va5H/ F70Febbqrfg2tult6Nt2vZNymMdQC/CYEPEUP51a+hl+JuX5WX4VKvSz/arU2s/3a1AzsJz61N5v 4Dek4/1GfmNq5zfxmyDlMP9w6uAX+AWooZnfDDmb+82Rp4XfAkdb+tCO4EZHUCu/rd8WbbXz2yF/ e789jnbwO6At9hRwmDNRc+ZMCMGZEIIzIQRnQgjOhBCcCSE4E0JwJsplzkR5zJkQgjPRYcyZEAdn ovbMmSiHvWqpadAx6IhSYE5IAXNCHjAnhGBOVMjMiVqDOUEJBP2CftQB/OkKSg2uDK5CHrAolAWL QjpYFHLeEtyCem4NbkX8tuA2pINRoT9gVMg/LBhGLYPhwXCUAq+iFuBVI5EyKsCoC0YHjyL+VPAU 2vpP8B86npkWUsC0KMZMCyGYFkIwLYRgWghXB7/QUcHGYCNa2RRsQj1gXVTArAtxG1j+31tRoi5R J+pQDjMwygMD8xEG0YBaRbFRQTQWjSFuoikIU6NYf6Np0TQqjKZHM5CSGc2k9tGsaBa1iFaKVqIO 0crRKkjPieZQy2huNJcOi+ZF8xCvGq2KVvKj+ThaLVoNKeB2iIPboSfgdgjB7RCC2yEEt0MIbocQ 3A4huB1CcDuE4HYIwe0QgttRjLkdHQVudyqlxU6LnUY6dnrsdMTPiJ2BeK9YL8T/FjuTspj5IeWu 2CRSsSdizyIO/oc4+B/ygP8hz69xh1RcxXPpGGaB1Cbh3cAskBSzQIRggQjPMmdRvjnbnE01TG/T m9LNOeYcqm7ONedSbdPH9KFa5jxzHrnmfHMR4n1NX+TvZ/ohzz/MP5DnEnMJ4peay6iOudxcjjxX mCuRp7/pj6NXmwFUDczyOqRfb65HOvglwoFmIMJB5maqagabW6imudXchpy3m9uR81/mDrQ4xNyL lKHmftQMDopWHjQPIhxhHkKekWYU+jzajEY9j5h/I/6oeRT5x5gxiD9mHkOdY81YHB1nxlF9M96M p4bMXKkBmOskamyeME9QZ/OkeRrxZ8wzyDPZTMbRqWYqwufNC9TEvGhexNGXzMs4Ot28So3Ma2YG UmaamUgB30UIvovwHfNfqmveNbOQZ7Z5j+qZ9837yPmB+QCtfGI+R8oXZg7qBBtG/fPMPITzzTfI s9B8i6Pfme9QzyKzGPElZgm1BEtehtqWm+VUn7kyVQNXvo2qhreH/6Ja4R0hviXw5iHUJLw7xHcV Dg2HUvXwvvA+pDwQPkiNwxHhCOrMfBop4NPUhPk0ZTGfJsV8GiH4NELwacpiPk3NweyOFj7dVfi0 Eiad4M1FjJn5cYrw4xT6O14pwoyPE2bcTZhxhjDjE4QZVxZmXEWYcbYw45wS/j2e+PcE4t/jiX+P J/49MfHv8cS/xxP/nlD8ezzx7/HEv8cT/55U8e/xxL8nVfx7PPHvOV78e7qLf0+m+PecKP49J4l/ Tw/x7+kp/j25YOpx8ObQCYWj51ArJ9fJBYdmpt4GTL0HtRUufqpzuvN3pDMXb+f0dfqCYV/jXIPw WudG8OaBYOStwciHUAdw8bsRv9e5F/mZkbcGIx9FR4OLj6GOYOEvI3zFeYU6OdOct3CUWXgvYeHH CAvvLCy8C1h4AbnCwt0S/NsF/z5G+Pfx4N/dhYWzw1BEHIbSxWEoXRyGKonDULpw9JOFox+h7lb3 0JHs7E+nJZk68/LGaqqaSg3Vq+DltYWR1xVGXl99rD4G/2YuXlPNUXOQ/jX4d01xLcpXC9QiMPIl aglCdjBqIq5ujdT36gekrFQrEbK3WzVxNqqjflLrEWd/o3rqF7URcXY5aqB2qJ2Is9dRdbVbWaom jke1XMdViLPvUT3Xcz3E2f2olrgf1XHjbhwpqWD/TYX3Nxfe31J4/ylunlsV6cz+m7q1wf4Pd+uB /TcV9l/gNnIbId7EbYKwmduCWkAJtEa8jduGDnOPgB5oKnqgmdseeqCpe5R7FOpnPdBUlMDpogTO ECVwuiiBM0QDdAX7H0kp4P1jKUMYf7Yw/jxh/G0i08D424Hxz6IOkdmRT6iT8P7OJTyZPPFkShVP pkzxZOopSqCbKIGO4s/UXfRAW+iBuaRFA/jeAmgALRrAFw2QIuzfF/af7X3vfQ+W/6O3EinM+7Uw /irC+LsJ488Qxp8tjD/H2+xtRsicvqtwel84fYZw+q7C6ZXW4PS+sHlf2HyOsPauwtd9YeoZwtRz hJ13FV7uCy/PFl7eFVwculc3BSPXwsUzhIt3TbLwlrol8hfqQuRnLt5VWHiCc/vCs33h1scJt+4m 3DpDuPUJwq0rC7euItw6W7h1jrDnHD1UDwWnvE/fBzbJ7LmtMOb2eqQeiXRmzK2EMXfUY/VY8Ejm yoX6cXDl9sKV84Qrd9BP6mfA4yeDJecJSz5V+HEH/bJ+GaWYJRcKSz4VLPlVlH0NXDlPuHIb4cod 9Lt6FmqYrWcjP3PlQmHJecKS2whL7iAsubOeA5bcXlhyR2HJhcKSOwhLPlpYchdhya30Ir0IR5kf J5hxK71Ob0AK8+M2wo/bCj8+Ve/Wu8FQmRm3F2bcAcy4CuLMiY8WTtzRr+nXpU7CjDsLM+4lzPgY 4cEdhQf3Eh7cWXhwnt/ab42QGXAXYcCd/aP8o1AnO4qlipeYJ15iqeIiliouYp64iMXERewkcRHz xEXM80/xT0Hr7CXmiZdYqriIdRcXsUxxEespLmK54iKWKy5inriIeeIi5omLWKq4iGWWcBFLFRex mLiIpYqLWK64iHniIpYqLmJeCRcxT1zEUsVFzBMXsUxxEcsVFzFPXMRSxUUst4SLmCcuYqniItZT XMQ88Q/zSviHeeIfFop/WKr4h3niH9azhH+YJ/5hqeIf5ol/WKr4h3niH+aJf1iq+Id54h92vPiH dRf/sEzxDztR/MNOEv+wHuIf1lP8w3LFP8wT/7Du4h92kviH9SzhH+aJf1iu+Id50DCZ1BaKpS51 FH3SKagf1Ic2aBA0ANdvHDSmNkGT4DDojaZBU6QXBAVJ3VIYNA9aUBdRL4VBYdAGIWuYzkG7oB3q YQ3TKegaHIvwuKA7ajshOBF5TgpOolZBDyiZDkHP4BQohF5BLxxlPXN0cG5wLvpzfnA+SiWcGFnh dIbCuRhtscJJCa4K+qOeq4OrUeqa4Bo6JrguuA4pg4LB+BSsc9qKtskT58ZCUTjtg/uD+xGyzuki Oqd98HAAlBCdUygKp0MwLhiHlInBRLTOaqezqJ1ewdPBMyjFmqdD8FzwHPJMDZ5H+BKUTzxYHKxA +AM0T1w0z7GieToFm4PNqJk1T9tgR7ADn441T1w0z6mieTqK5mkvaqdQ1E5bUTuF0RAKpz0UTjod LQqnsyicY0ThdIHCqQwVVCWajZw5UDhtRNvkiZ7pBD1TH600gp6JQ8+0RFgYbYuwAzRMXDRMHBqm B0JWL3FRL3FRL8dCvZyWVCysVf4GHXKmKJazY2cj5YLYBXRk7OLYxQgvjV2K8PLY5QivjF2JcEBs AEL2oksXL7p08aKrJF50lcSLLl286NJF+biibU6O58Vr0RHxbvGT6cj4hfEb6TRxqouI2olA4TSG imAN01g0TENzETRMTfNPczGYOuuWmqJYGkOxXIH4leYqKIdrzbVIYa1S29xkbkLKIDMYKoX1SV3R J41FnzSEPrkHKfdCpTQUlVLfDDPDkJ/1SWPzsBmJo6OgT+pDnzyC2lif1BV9klAmtUWZNDUTzASE E81EhKxMWooyOcU8DWXSDMrkWaQ/Z6ZQgSiTZqJMWogyaQll8hJSXjav0GFmmpmGnK+Z15DO+uRw 8zr0SVPzpnkTR2dBmRSIJmkpmuQU85H5GEc/MZ8hnZVJCzPXzEVO1iQtzQKzEOnfQpO0gCZZhNoW Q5lUE2VSYJaapWiX9Ulz0SeHmxUGHE/cAZuIH2kjs8asQwo7BdYy680GxNkvsJ74BdYSv8Am4hdY S/wCq4sfaTWzy+xCyN6BTYw1YIDiIFgHxBwMUHwEq4s3aTVxE8wXb9Jq4ilYTzwFm4g3aaMwJUxF OvsL1gszw0yksMtgA3EZrB5mh7k4yl6DTcRrsJ54DTYQr8E6Ya2wFo6y42A9cRysJY6DdcKLw4up piixulBit4oSw3gI7wrvgkIbAvVVV9RXC9Fdp0B3PYz4yHA0FYj6ahH+O/w34uxcWE+cC/PFubCJ OBc2EOfCeuJcGCEnb2PVW0B+jXsPLSHqcybeffDui/elePfH+/riv87/Y+/7g9rI7jxfC1loCGEY hmE4QghhCEMIYQkhhGNZQghDCGEISwjLEoKEkIRQt1qtVqslhGj9RCYORzGs12F9xPGxnM9FHIp1 +bwO5zjE52NZL0UownKci6MISxHiowhHCMsRitz3PQkG20lmtmr/u6tXn08/Xr9+/d7r7/t+v+9L N3BjcJQAAcAlwADgCmAYMAK4CRgH3AFMAqYA04BZwAJgGbCKZJ7HBEi9QSDzzAOWIP8UsAs4ABwj 1CoDKAExgHhAEiA11IfWjN9zzA611ZoXBr6mEFBCzqHWckBVqL/kmpHQGFtrAQ2A5lB5+CjzrBBQ 3ATgLuTXz8pC2ALshPNLgP1w/igELwpDAYgGxAESASmhut50Uh+1agCG0Dy1smdzHqqbReqhVgHg BHgAwfAY+kL38+aGxzoIGAJcC58fDZ8vCKMYyuA5tuLx3Ac8PBtLaMx3AfcBDwEzgDnAIuAJYA2w GT5unzue1t8DHIaPT8LXHZ47f4KQRg6IAsQCEgDJ7x7x89OkATLf91HmLXv3WeGxaXLCz/pfiqRn QeT7Uug+RK6SQvXIfc8jH1D07vGsjVC7Mm8llJcCKsLyB+c01e8eNXWARvkrLWumqu55dcCMCCsI RwNfMscBD5gTga+YU4CHzenAI+as7nl8lbtZfdOc69a0bJpqu5datk0N3SvqcXMB4eKz/B1zWfcK Pus2tOyZmrvX1ZPmyu71UD7MhyZN95Z6ylxDuB54muSnSX7W3AS8YFYDL5v1wKtmpnsLX+VmgQ2Q PzGx3TvqDTMP/NTsAN41S907uNwtqOQmoXtffWAOAB+bL7mdqiiTs/uoVWYeIHyF8DCwsrUcOMY8 AhxvvgmcZB4HTjXf6T7CV7k9rRnmSWlYFWvySDCz5ikJqRJMQUmB2R1UJZv6pOjWPPM0cKF5VorG Je6+UHmY00yDUpwq0zQkJbaWmBfOuNy8LCXicvdgmHNM16SU1irzKuEN4FqSbzA/BW427wJrzAfA BvPxGbOczD3UKnBK9zVVvmlUSm91cjFSOmktK1zi4eJPGZe4R1VFpjEptzXIJRFOPc3jcveYqtQ0 IRW09nEZUgHOuydUpVw25CtMd6Xi1kEuj3DhWX6IKwG+xpUDj3JVwGNcLfAE10DyzVIxvtZ9V1Vt ui+VqepMD6XK1ruc5ozvcxr3/daHnEGqVDWaZqQaVYtpjvSBJSyc5Wc4J/REa1qU6lvnOM8ZL3JB qV5lND2RmjqmOj2Eg4T7gKc7B4FnO4eAFzqvAS93jgKvdo5JTfiqHmfHRudEj0fFmdYktUo0bUr6 jqedd4F3O+8TxvmDzoeSHp/tCapcpm1J0XHcOSMpjDLTdk9fiFU+057EGJWdc4QXgWNIPobk4zuf ACd1rgGndm4CZ3RuSwy+qmcQ+BDyvaYTiTdmd+4B53UeAhd2Qgku7xlS9bNyyWEscWIud0b1XFNd ZqMkyVjljMVsDJJ8AnCtMxm4wZkG3OzMBNY4c4ANznxJwlf1jBpZZ1HPmOqqal0KGAVnqRRQXWdj pUuYvemqG2yCNGB0OiuAPc5qaQCX9EyEysN8i02Wrqhus2nSsDHorDvjPmcjrB0o77kb5ntspjRi HHS2ENae5YecRuBrTg541CkCjzldwBNOH/BdZ2/PfeN9Z79bo3rA5kg3jQ+dl3sektbGwyUzzqvA c5hxSc+M6hGbL90xLjqvE75xmsflPXOqx2yRNGl84rwlTeJ8z6JxzXm754lqni2VpoybMPPAzntn +W3nA+A95yPgQ+dj4BPnvDRFy51LwFHOFWkKX9uzplpiK6Rp1QpbLc3Ssc715zjBuSXNqtbZOmlB tcU2Sst0snOH8P5ZPs15JC2rdtgWaZXO7EJnnNOlkFZV+6xW2mh9wvURHgReI/lNbgh4m7sGvMeN Ah9yY8An3IS0ga9yP9TIubvuGdURa5SeqhHLSbuaKO4+cCzhBMLJ3ENpF591z6kVrCgdqBXcDGac 16Rxc+4YdTTrko41mdwi4SfP5XO4NeB8bhO4iNsGLuX2pGN8lXtRHcf63DJ1ItvrVmoquEPgau4E uM4iB260RLmV6hS23x2jaSGstcS6n6jT2cvueI3RkkA4mXCaO16dbsmEPGfJARYt+cAuSxEuh/pr Gp+lFEp6LRXuTXUWe9WdpOm3VANfttS5k9S57HVpAbN7W3PV0ujeUxewN6D+dUsLtFBg0WKGkrVQ eZiL2VvuVHUZexv6dsNiBL5F+LaFg5nB5YeaexYRrCfJqyvZe+4MzQOLi7DvjB9ZeoEfW/qB5y2X gZcsV4FXLNeB1y033CeaLcstjxzaeeDOVqdYbgOXsY+Aa9jH0M8dyz3gfcykZE1dz8678zRHlgfP Mi73wLbV8sid0aawPPbEqpvYJXdhW7Rl3l2I854EdZMFStRqdoWMK8Trp/m2OMsWcKJlBzjFsg+c bjkCzuIRcC6vgLHjaw/VenbdXaJm2C13eVsBH/0cF/Nx7nI1z+64q9QOdt9d21bGDWLmE8+4kk9x 16ol9sjd0FbDpwPXE27is4DVfK4nGfsknrQ2PV8A/gn4Bp7MNoYv7t5q4/kyYAdfGbLgnhxsBz35 bRJfI6W0Bfh6KQVbIk9R2yW+CVslXg0MtsZT2jbA66WCtis8A/YF1ounom2Y56UNLLee6rYR3iEd t93kJeBxPhCSMU8dfr6exrY7/CV3hrqSHwCGefC0tE3yV/Cc8MPAoZFO8SPA0/xNdy2xOJt0flc0 WB+s+bfpoq44iaFLuxKBK7pSwvp5D2u5nkO6uitdGlHd68oCxnrmhK7rysU6p6sAGDRJUE43dhWD 9mjpKpOWieSvtc3y4x5t2wJ/x2NsW+YnPVzbKj/lEds2+Onulban/Gz3etsuv+BxQZ1lqHPAr3p8 bcf8hqdXK+Ofevq1Sn7Xc1kbwx9076iq+WOpTBtvlXmuapOsSs91VaM1RqrRplrjPTdUmdYkzy1V jjVVStFmWDPcM9psa7bntjbPmue5F/I3tIXWQs8DbYm1pHseexSeR9pya7nnsbbKWoWfgrX21LJr a60NhJuBG6Bv89pmq8azpNVYDZ4VrcHKeta1rFXwbGkFq9Ozo3VaPZ79kE/bKrMGwYsL+VHES9F6 rH3guxK/URu0DgL3WYfAi8OycdSqsQJrB62jXqQdso55Fdpr1glvtHYU11TJrXe797Vj1vveuJDn ph62Puye105YZ2CNEx9Ve9c6173VmmRd7D7S3rc+gbsbrGswDw+tm8Az1m0pXTtn3QMfbMx6CP1Z tJ4APxHknn71gRAF7a8Jsd5E7aaQ4JnHM+BN0W4LySHZ9qZr94Q0aOdQyJQKtCdCjjdLJxfyvbkh D1MXJRR5C3SxQqm3GK8Lb5kuQagALx18dW9liHXJQnXIA/fWnON6wk3kLmrCel2aUNe9pcsUGrt3 dDlCS/c+9qi9jC5f0IbzPGEHXl9eKTyT4A97A4Qv4V55B3RFgtE7EMoTvqIrFTgpTlchiOAPg1fs HdZVC66QD+wdOcc3wVMVpHRdneADbsSMvVbveIh1LUJvyFP13tFphX4pV2cULgNDOZRwwtWQ1+op fZe9k3jVe6cIT4dYJwrXwRcFj9Q7q3MJN8DzBL/Uu6DzCbekGl2vcBuYE+6BzzknPADfEj+X5RDr +oVH3lVNmvAYVjfWzDG6y8I8WM80YQnyV4UV74Y6RVjHFkHY8j7VXRd23Hu6G8K+d1d3SzjyHuhu 25D3WHfPpvDJwrqdaG91ky3ap9Q9sMWBNnbYEn0xIU2oe2RL8cXrHtvSfUm6eUuFL1W3ZMvyZYR8 AI3Rlgu2gFgZ3QrW2yEbrVu3FfiydVu2Yl+ebgdbW92+rQysHmgtX6Fm3lbpK9QdcYu+Es1lW407 SY9s9b6ksF2+YWtyx+gVNjX2JWx6aUMfbWOwTbfx0rE+zuZwx+sTbRLcd8UWwPbLBjpQn2IbgPJ0 2xV3fFuubfjUUuizbCO+cn2u7Sb0DXwJb5y+wDbumcej81Xpi213QprWvagvs01CO5W2KbACYHN9 tfoa9ravAdspX7O+3jbt0+ibbLM+g15tW/CxeN58AmnHqdfbln0ePWNbhT0O6HBfMOTtYPa0hPjU q2FFXx/mUIlvkPAQ7oPvGuFRPW/bcMv0DttTt1IvYW8EeyaeFn3AthvKg70DhqvAFvjGsNb1jekv 2Q5CfoVvIswwCk+dfsB2DPaC5Mm4xvRXRJk7VT8sKsGjAL/Cd1c/IsaEvAjo1Rn7hjQ3xHh3tv6m mAQ8LqaGLD60A+y7r78jZoSsvO+hflLMdufpp8Q8YCiHkmmxMGTlfTPneA7bKd8i4SHCT/SzYgnY brDgvjX9glgOlhrsuG9TvyxWuav0q2It8IbYAFasRmx2N5A53ya8F56Zp6LGXajfFQ3ucv2ByLpr 9ceiIG20y0Sn75DWdlUGo2hjV02ghua66oHFriZpgHZ1qSU97evSSwq6t4sJxkIdHs72dzmCCfTl LgnOXu0KBJPp612Xgmn0ja4B2A1d77oiXaJvdQ0HM1WXu0Ykib7ddTOYQ9/rGg/m0w+67gSLwGJO SiP0o64pfy/9uGs6WErPd80GK0K7A9XjrgVpkl7qWg5W0yvO28E6er1rNdhIb3VtwD5uq+vpmR++ 07UbbKH3uw4gf9R17L/NIJcsqGUULmXQyES7YoIcE+eKD4pMoisp6GJSXKlBX2gHaqxyZcCeK7TT IXsKJt2VHewN7fKYLCjhmVxXHuy5wNYH+42jrsJgP53pKgleZgpc5cGrTLGrKmg0ZuOaqn5XreRg ylwNweuhfVbHlKv5dD8b2mMylWRfWWXcxDs+l+bs7mMuAzDZKzE1LhZ2TKE9zgnsMaeY+q5db7Gx xCVA+00uZ/AGo3Z5YJ8FMxC8xehdwbCvMsgwrj5phOFdg9Iy43ANBW8zkuta8F5oP8gEXKPBB8wl 11jwEfZzgo+ZAdcE7KlhZx2cJ7zEXHHdBasBO2iwF8DBFcxusqcOruO7BLdCzAy77sOIRmDPxTM3 XQ8lB97/BneYcddMOL9P+Aj7SxdReCZh93pREWbo1cVo5o5r7mJ0KE84jpl0LUpXmCnXE9i9wh72 YiIz7VoL7VgvppzjdOOMaxNmbNa1DbyAGe8xPY0hZpZde6F95cUsZtV1KN1hNlwnwFAOJU+75aE9 5sXcc1yAvbiLxYTLQszsdkfBzhH2jxcrmYPuWNgnwi7yYg1z3J0gLZhk3cnAyu40adkU050ZbMHP 5WI94SZVf3dOcMcU350vTZqSuoukWVNqdynUzOiukJralaLHd0L2DsQeEd0Fe5b2GDHol7fHi33+ KLVCHPTGtSeJQ9h2iNf8se2pmCE/6k9ozxDH/MnAE2ecLd71p7Xniff9me2FcJUytKdrLxEf+nPa y8UZf357lTjnL2qvFRf9pe1JWH8SPmxvEJ94d7G29FcQrtb4xDV3fHuzuOmva9eI2/5GdYG4515r N4iH/pZ2VjzxawkbsZ70c+G9FbBfbBfscr8rtM9qd9qj/L52jz3W39setCf4+9v77Mn+y+2D9jTg IXum/yrWmf7rhG+0X7Pn+G8B57tl7aP2Iv/t9jF7qf92yKa0T9gr/Pfa79qr/Q/a79vr/I/aH9ob /Y/bZ+wt3mKiRZXtc3atpG9ftBv98+1P7Jx/qX3NLvpX1Izd5S5v37T73CXt2/Ze6U7IQmH2r6sl sIaQt/f7nCHPTRdrv+zfat+zX/XvqJH9un+//dB+w3/UfmK/5Ttpz7bf9qcZ5PZ7/hxDlP1BABli 7Y8CCkOC/XEg2pBsn5cGDGniUCDufGuGTPtSINGQY18JpBjy7euBdEORfSuQZSi17wRyDRX2/UCB odp+FCg21DlQoMzQ6FAEKg0tjuhAjUHriAM2OhIDcWHmHCnShkF0pAfqDS5Hlt9n8DlyA02GXkdB QG3odxQH9IbLjrIAY7jqqAzwhuuOmoADP9+AZLihdgQChluO+sAlQ7IDdL7htkMdGAg9O8M9hz5w xfDAwXj6DY8cfGDY8NjhAJ53SIERwxJcetOw4rjki1dXOmCHZVh3XAHecgwHxg07jpHAHcO+4ybw kb0oMNmBHOPe1Q6F446k6Ih2TAamOuIcU4HpjkTHtMR0pDhmA7Md6Y6FwEJHlmM5sNyRy857izsK HKv+oo5ix0ZgFWo+hZpljt3ARuguHZWOg8DTjhrHsWe+o75TFthVKwyZ0kFHU6cycKAu7oxxp3ao O+MDxx36zqQeWQfTmdqj7OANrh6lur4TrHOHozO7B3y5zjx3Q4fUWdgT3xHoLOlJ6rjUWd6T2jHQ WdWT0Z7XWevdxdyTHdr1d1zpbOjJ6xjubO4pxN5LTwn2UnrKcRSlpyq04kgEoy8cqXh2dTwIxwpI ZKCntmOkU+PPxPa9pwHvwXuasTT2aELRIaIfDjtuikPQPvHEOsY7De7F9oxO1r0Yjt6QuErHHZbr MbTvdQo9bGjX3zHZ6ewR8LP21CEZep3apf43QtSvqQMko46o3yA59VsZhRSyCzIFekn2AVk0+oAs VvYK+qDsNVkCelmWJPsQekWWJnsDvSrLlH0cvSb7juw76PWIyogvocQLFRe+iJIu8BesKPnCjy/8 GKXEQEIfiUmNeRulxtTGNKOaGFVMD/p6zDsxP0K+mJmYbfQ3MTsxB2gJevOnSE7++0EMehm9hF5B 9egDqAFp0FeQFn0LNaN/h/pRAA2gn6Ig+kf0M/QY/RMVhf47FU19EP2Wepl6jaIo/I2TEr83Sb1O NVHtVDLVQQWpLKqXukxVUkPUd6ivUf+Z+gn19YjvR3yfEuWC3EbZ5R65j+qU98q/Rbnk78jfoTzy b8v/ivLKvyv/ayogH5dPUN+U35X/gOqT/0j+I2pA/t/kf0e9Q77HvCxfkP+U+rZ8Vb5G/ZV8U/4L alj+S/kvqevyX8v/mfoP+C06avTCqxdepf7ThZ9eOKFuKi4o0qlFxZuKN6l9xccVOdSvFZ9VFFG/ wV94UL9VfEFRLpMrKhRvyxSKryiaZTGKVoVWlqzQK3hZqsKmkGSfVHxT0S/7rGJAMSz7E8V3FTdk VfjLCVmdYlzxD7KvKuYUczKLYl6xLOMVK4oVWZdiTbEmcyl+rngq68bvY8m8il8p9mVBxYHiRNYb iSI/KHsnMi7yNdl3I1+PfEP215EZkZ+RTUR+PpKRTUVaIwdl25F/GfmXEdGR344cjvhg5PcixyNe xf9XNeL1yL+NvBeRHDkZ+eOIFPw+UERG5D9GLkfkRz6J3IwojPxF5D9HvKXMUN6OqFf+6qWPRvws 5jcxv5Hj7+UY1AscjVLw18ZlE2EoAdkog9FUHjKG8sovLZXnMiwjMM7KNcbDBMuZ2gHmLnOfeVg+ ycwwc8wi84RZYzaro6rTmL5qkRl8q+otAzPEXGNGmTFmojrtrXKQKjnI+C6R8V8jivot9VskA4mO RRFw7sPkTVQk+57se4iSfV/2fTg3IfsbFCH7oeyH6AJ5E1Uh+4nsJ0hJvgR7SfZT2SKKIu+gRpO3 Tz8o+5nsZyiGvHf6suyXsl/C6sBvlsZFUBHU2X8NvhChQAnky7HEiISIBPRvIhIjElESeVP0QxGZ EZnow+SrsJSI4ohilEq+AftoRGnE51Ea+Somnbyz8THofzQVR2YOM6IfIRf9iH5Mz9NL9Aq9Tm/R O/Q+fcQgep9RMNFMHJNIkMKkM1n0DpPLFDDFTBlTydQw9UwTo2b0DMPwjIORmABziRlgrjDDzAjB TWacucNMMlPMNDPLLDDL55OpgVllNpinzO5ZOmCOTTKT8lyKMcWbkkypUJrxTGo2ZUDdbFOeqZA5 Pk2mElO5qQoYp1qThtk1GaAua9KYBJPT5DEFTX3QZoZp0DRkumYahfFTLzFhrYG/WX+FzEkipAiU DEmOMtCb6ALKhhSJ/giSEhVBegkVQ4pCJZA+gMrRW+Tt8i+D1sHfXb6M/hw1oVjUAikO9I4WvYoM kOKRFQnki0sn+dbSTd4o96Mk0EfvoA+hb0P6MPr3kFLQf0Q30EfQ9yB9FI1DSkM/gPQG+i+Q0tEP IX0M/Vf0CPr3GFIm+W/YH0fL6H+gLPQ/IWWjf4L0SfRzSDloD/0K+n6I/g/6FDqB9GlKRkWifCoK dF8ReX/8j0H3xaJi8v54CZVCfRR9jnqDegN9gXzvWQ7asJZ80dmEKqhvUGr0RUpDadCXybvk1eTr zrcphmJQDWWmzOgrlI0SUS3VTflQHejOIGoE7flN9OfUt6g+9HVqgBpA3yBfd7aAJr2HVNQkNYna qCnqx0hLTVN/h/TU31N/jwzUP1CzqIPILw1aIBMxyixlFjKTt/M45aeUechC3sizKouURUhQlihL kI18SSSS9+/sSrWyFXUq25RtqAue7SY6ILJfgP+yhPEOYBIwBZgGzIaxEMYyYBX9mXHSOGWcNs4a F4zLxlXjhvGpcdd4AHxMy2glpBg6nk6iU+kMOpvOowvpErqcrqJr6Qa6mdbQBpqlBdpJe+gg3UcP 0kP0NXoU0hg9Qd+l79MP6Rl6jl6kn9Br9Ca9Te/Rh/QJ08vImSgmlklgkpk0JpPJYfKZIqYUUgVT zdQxjZBaGC1jZDhGZFyMD1I/c5m5iv+D6AXNhQ4wgt+IaSF/X+GtfzX5fhvSy0TKY4mUv0Kk/FUi 5fFEyl8jUp5ApDyRSHkSkfIPESlPJlKeQqT8I0TKU4mUpxEpf4NIeTqR8o8RKc8gUv4mkfKPo1lI WUTWP0FkPZvIeg6R9T8isp5LZP1TRNY/TWT9MyDrMlRA5PuzRL7/LfVhKgXkHkt2MZHsPyGSXUK+ j/gckeZSIs2fJ9JcRqT5CyDN3bAG3JQb1gD+SuKLRJoriTRXUX9B/QWsByzT1eT7iLeJNNcQaa6l ZkGO66g5ag59Vfk15ddQvbJJ2YS+puxQduDvtWM9sZfgOUXD3H8AUZYWkLs8QCGgBFAeLqsC1AIa AM24TP6KMd9SQC/8YZA6y/yischSbCy1lNGrzwKXGSsslfQG4Cn/BMNYbamhd/8wcB1jnaXe2Ghp og/eBf7Z2GJR08cWNSPj14xai55R/mGQOjH8ptFoYZh4C2PkLDyBaHEwSYBUniX5DH6byeb3jC6L ZPRZAkzeuyA/F/KHxl7LJabkPVDOnzBVVrmx3zJAcNlyxXjVMszUhoDzeGxMw7sgY71uGWGaLSP4 SHDDcpPRvDdwPeMty7jxtuUOY3gWxnuWydN2z8P4wDLFsO/C+Mgy/X7AtYhXjY8ts8Z5y8LvxJJl GYPTitcxjCuW1feFdcuGccvy9AXsWHYxOKO137hvOXg/4DjxhvHIcoxBI15GoOCVGJwo3sJHM2sb o9W8ho7mY+g4Pv55cC7xNp3IJ70XOJ94j7SRwqcSpPMZdBaf/Qxy+bwXUMAXPoNivuR9o4wvpyv5 qhdQw9fS9XzDC2jim58BHvf7ACNYo2g9b6AZnv2dgHOM0xrLeKwJpB7PC+8LDt5JS7znBeD2goA+ azId4IPvB8ygNY2+xPedYYAfPAM+PwS4Zs0k+VFrDjNmzaev8EOkv8+BmbAWkfwwf+29wNy1ljL3 rRXPtDHCjz6Dm/zYC8DXPrRW0+P8BDNjrSPHOWvj7+rP78Ud/i49yd9/AVP8Q3qan3kBs/zceTCL 1pZT3X5eF5/qyjMd98SqPdNBa1bjeT1yJifnn+vpczmdo00rdza321bxfJ+ILukFnQJrn+sP6QDu cmj9knV1lU8idgPknbsOuCE+OJVn7hYc4T74PLNndTGHVh9zYu01ya392L6YoqyXcTkemynWetWU YL2O9asp2XoD60lTmvWWKdN6G9sAU471HtbtZMwg76Z864NT/Wwqsj4ylVof43GbKqzzeC5M1dYl rDtxmwR11hVTo3Xd1GLdMmmtOyajdd/EWY9MooDw/BIbhOcS5tDkAjsZtmcmH9if8DybeqGdfkGB 2yDnLgvRpqtCHLY7Z7b23DM6axMjbFNObQHuE7aNputCIunbDSHl9DmT+lj3w7MndhlsHhnbLSEd l5lugw0vCgHbazy/z6A6ZJexvSL2GO5zaovxkQDkh4ztORtL7gUw3bNIGNjGntrVU5geWAYwzmwk tplh23jeVj5jI8N28hSmR2AH4RkT2wf20PTYMolB5BbbuQchnOksgGleyCLHJSHXtCIUkHLQH6Z1 odi0JZSZdoRK075QQ8rxGsa2BK9bWEd4PZmOhHoWCU1YF7EKQU3Wxek6COtFIlvQDtZzbDTopvAa Ic8L9Ba+/lQHvrC2nltXZ/rltP/QBtabbJygx8+cTRSYs+txfVhvbIrAs+mCA/ebzRIkNlcIEB2O xwNjYAuES2yxMECuey/9E+4XWxbW46drPHiuTrjPZKzP6eOz8WA9fIrfd6/fo0/ZyvCxhp/AYzrD 83ryvK7E+vFUR57XiVCXtIPr4HMwB2y9tZq7LT7i7omPMbBvg5838WseiPOkDHQWu2CL4R6JS6f+ C/dYXGEDwhTRY+B3cPPiOvEpQKex48JTVhImT30CbkncIjoN23/sN2BdtyLuYBvNrYv73JZ4xE4J x9yOHXH7dgV3ZI+2IHucRWFPtETbU4hPFtaX5Frsm4X9JuLznPoouK1wG/icJc6ejvUl7teZb3fq h+2/q4MJTn2YsO+B28L+mCXRnoX9HUuKPff0elIfxkN+hvki6wTGZkm3F5Ay7DeeIuwnPoPnfcGw 7/cMwvP6vF93BuyLneJ5v+7UR/sdvpklK4T39M2w73Xe/8I+16nfdc7Hwn0l1+I64Tl5YW3B+mOb hCsvrCu1MHzqY7F6YYRlhJtYF53WY3lhHMs16xDuEHk61QO4Dl5zIH/keEmYZgeEWZK/Iiyww8Iy xvn1xo4Iq1hHsDeFDSKfd4TdF/wYADspHBCAPGKQdYj11rRNRo6zNuXpGsRrgl22xbOrtqSz9Yd1 0IYtleiap7YMdteWzR7Y8rDtOQUeL95jkfUHY2aPbYVmma2EtA36w6y0lZNxhuubY2xV5nhbrTnJ 1mBOtTVjXWTOsGnM2TaDOc/GmgttArZ/xAZi/QQ+gbnE5jSX2zxYH5urbEGyZwFbaK619ZkbbIPm ZtsQni+zxnbNbLCN4n2CWbBN4HkyO213cX2zx3bfHLQ9NPfZZrAPiPX/qW42D9rmzEO2RQJoD9sZ LNvma7YneN7No7Y185htE8uZecK2TXQYPEfzXdseOXffdkjaeGg7wbrcPCPKzXNilHlRjDU/ERPM a2KyeVNMM2+LmeY9MQfPr/lQzCd6DI//RCzCR04ulmJ54KLECi5WrOYSxDouWWw8kx/wwbH/waWJ LVymqOVyRCMpD+tcLl/kuCJRJM8P1glXKrq4CtHHVYu9Z7J6ug84tVGQ5+rEflyHaxQv4zIkQ1RM MGYAof//G5T/h36Dso323v09gPYAMbokXaouQ5ety9MV6krq5bpyXZWuFrhB16w9CCVdKoZOozNo j0NJx+oEnVPn0QV1fbpB3ZDumm5UN6abqO/X3dXdr3+ge6ib0c3pYsJpkGBR90QXH05ruk3dtm5P d6g70cv1UfpYfYI+WZ+mz9Tn6PP1RfpSfYVOdpqgRrW+Tt+ob9EpQ0mv1Rv1HNQTSQ9xj3BNfA7f D+6A4/wfHAPZ/tK/Shz0bVgbX4H0ComDxpE46KskDvoaiYMmIAMyotcRAymJREM/RKKhHybR0I+Q aGgqiYZ+lERD3yDR0HQSDf0YiYa+SaKhmSQa+nESDc0i0dBPkGhoNqy5WZSD5iB9ikRD80g09NMk GvoZEg0tQD9Hv0CfRf8LUhGJif4xiYn+CYmJfo7EREtJTPTzJCb6BSqFSkHlJCb6FomJVpCY6BdJ TLSSxES/RGKiVSQm+mUSE62muik3qqG8lBf9KYmJ1pGY6FdJTPRrJBraACv9b9GfUT+gfoCaSEz0 6yQm+g0SE1XJL8m/hdTkLw1q5PfkP0BaWNfTSC/fkv8CGWD9HsBcUsiBpHdltQ1G3LbUttK23rbV tgNpv+0IJl6hjdbGaRO1KSTptYyW1zq0EqSA9pJ2QHtFO6wd0d7UjpOUrs3S5moLtMUklRGu1NYA 12ubtGqcsNzIPgFy88mw3MSR+2OJkcEzehOkB8uKHOY/D6QHy4qCyMr/Ze9coKwujvx/7+9xZ0S4 IpkgjMiOE0XkoTgQgsiCMchj7gMkqIQQGee+r0gmSBAJSxDRjAQRWCQEBQkhOE6AIEECOCCyvCQE gSCgISyLBFnAkQhBwsKwVZ/+DYwjOTFnz/+c/zm7p099f0V1df26q6uru++9jjkSKfdKDOln5ldJ dAyWGNL4uJr4aMjn5I1kXI9IJGk0NJZYmCbxpHHQRKJgocSTRkCe7zUpXyYCmhIB18n8b5C41c/D m8ucvycRprN+PbPegs/Ab5CZP+ZryRwX+BvLHN/I7BYyr19hRm/yD/WX+G5mRm+RGS3ztfaPkhlt w6fcbf2TZRbbMYvtmcXb+Ez7dv9v/Ct9HXz+3M653erMRxvn2lib+iU+Jj4+1iHWubbEW8W6eeWe +iX+TKxPLGpKfHJsYGxgfLpI6pX4rPjc2GApJVKSWuILeA6Ljagt8crY6M+X+FIsjI6N88pEU+Ir YpNik+JVglM/X+LrYzNjL10q81XXKxVeWVK/ZJZklseWx1bXluTJ2DqvbKpfMqtj22rflVkX2yVl vkjqlUSn2JnYPin6vgNa0q3jQXkepgUlUf1567FN6V5Y2FTr2dgxUzKbYidjJzMVgmc+XzLbZHzn L5Vo3LpUck25gqe2xLfHg/G8S2V3PJ/y/mVP1Jb4wXhBvFVtYcaPxNvVKyeEPokXUbpIOevJaxKO YPdLI4rGxiUaxHt+viQax4sTTeP94w9oSbSIDzElURgfLpLSeGmidby0jp1LJXFb7Fg8fakMj4+s Lcb7sQMyIxLfia7Ebp/E3YleGmOJsHoiMUDjIzFIuIcYbbtEPJGlR1nGaixppOxilrZl9mUOEA2H 8f4xPH0iUSZrp4P4r3OsW2JUrCIxVrwcTEyQ/pUnpkgslyRmSLyPTsyOW4l5EstTS8sTC+Nd5L1T JE4miu6ixLLEytj5xNrEhsRW6bHG/9TEDkZZIjO2JTYxsUc0oon9iUNiS1ctI0LTrBWd3YmxgYmj 0v9qGfNpkU8Svc6y6iYlzgnXIfFQ0hfrlgwkGyabJJslWyZvYi0PNCXZJtlB12uyc7KblHuSfWS1 DjMrNhlNDuRt8qbk4NjEZImuyaRYFs1hyRHJ0clxyYmxmclJ3vrTFViRnJocJrEWJN7ypXZmvDje JflSPD85P1mRXBIfklwu8yuzlZiSXJ1cl9wknmsX7yl9mhnfntyW3CXa+6QciBclVxOBOkrmSvWk SMSol5KHhY7Fe8oanpo8I/KRyfMpK3kglZuSd6fyUvmpglSrVDvxdTZVpPGe6pLqnuqZKk711xgX zzLnqQcSrSXauqSGJIelSqWkU8Pj3bVI3chUUWqMjKA4/oDUjI8PST2jcSpYmpqcmp6alZqbvCm1 IHYsVRlPp5ZKPA7XsaVWpKrknaUSoSN1fJmTseWZM+m4ZIZ1mfMyPwdkPD0lXqZmrWyuZIGKbFAy xabkzNSJbF6sWWx16dZU/2x+tkDXtcSMeCvbKtsuW5SsyHbJdpcI1cxxRrKZeqciszqz2mjEpqZ3 ZHuKLc13RDCaJstIBIutXdni2Mxs/9iS7AOxTXFL9FZLf05mhwi3PDUkWxpbl+iaKkp3zaazw7Mj yYJeJsuOyZBZU10yuzK7suOzz0ieO2xyXXZydjpvkzdlZ8WOZedqNhM8mZ2bXZCtzC5NN81KRk8N MZmL3JWbOZatyk6OD8mu156k1ss8aewMSW1Jbdf4MSUxRfq9KbVbc1LqfZnjg/H+MjtHJK7aST5o lzohvl6Q+iTePXU2VROLpp205J3Y4XTjdNPSraVb0y1kBhdI3JyMjU4Xplunb0t3SndN3x0vTR5Q v8eWx7uke6XDsZPpAelBycPph2T1TJIEk40Pl/cfkP3xSPpuWcFByVmlUlOWHpUeG89PT0iXp6ek Z8TGxXPTs9Pz0gtju9KL0svSK+PB9FqxGkxvSG+N7RPLB9I7pE9B6cue9P70ofTRdHX6tPRxm9jO jZ0UzXMZXyYQm5RpKNmmiaylqMRNM2nTTmKlS6alxO+JzE2xJenWqROpE4kpqYOxA8ldmTaZDpmb xA9WpnOmW+ae5LZMn0w0MzAzOFOSSWb6xIvlOSx5JjMiM1q0x6WnpLZnJmYmxUdmpmZmZl7KzE9P yVQk4pym2v/fDfN/0Q0z7SvjVw1N9f8mU1Lh8z9s+fJKFkiplLJUygopVSVVg6WUrC9ZP3Tf0H0l W6RsL9mObLeU96Wo7KCUI1Kk3aDqQdUlJ6R8UqJ3WCsYDfaTdzTmRuPjRmNxl7E58zrcZVxuMQHO vDncYnK5xVzFzeVqbi4NOfMGOfNew5m3MXeWa7mtfMnnbxxvPJwx8bvDkk4+f0lYnl3lOcC5ts/C kl5fhIqL5blIaNnfoJWGiocY6rP2C9IGoa1XoB2GikfKc88Xo+Lx8tzv0SGPjhrqe8A8i2cJzRW+ Wuj056m4Up7n/j4VrxCqErs+jwJCDT9LjK0e9W1Sj5r9A9RS6KYrUJsr2FXqUI86fzGKit/7dhO6 529QH0PRPYb6Rr8gDRQafAUqMRSVeeub/GIUlbntO8yjER6NNhQ9ap6Rg/LcJTROaOLnKSox0HfS 36foac/GVI9mCr1Uj+ZfgSrq0ZJ/gJYLrb4CrRPadAXaVo92fTEqPiLPfSWsjyuS1BWfEPrE0zv8 BemY0Mkr0D7PZo08z3wxCjnyPH+Ziq3LdEmnsfdsKtRC6nIvv6suhQq99wf/PoVaC9322fbFefUo /wqkbTvJs0CeXb3n3Vfuz9+i4lZC7a5ARUJdrkDdP0uhXnXyd918W5svvTwWCpdcyi+hASWfzR+1 cVJ3Xj1/X/LRoDq+feizfbqUU+rmgNo17K0t3TNqY75fs3oxfcbUh+JCWaEykyN0fwmNNXIdU2iC ULnJryU6X5InQzOEZps9IDTPy+/nTLyHxCe1+Tkke1pomRlvaKXnB7Gp+VJtQmpX5jMkeTEkvgtJ H0Jq96jnX8+f2pZ9snYPO1THz2In7DM2tC4s+0W4odev+vNUb44u7Sm181Ru9sZwE9O3cLM67c+Z sfDvZd7eJ/8Ot/Rki+rQyitQ/X15xxVoT539tc4ee4mq61C9/fXSfvk/2Sdblnx2L2xTcnkPrLPf XcpZQuF7vKfsW+Got8Ykf4RlTwrLHhSW/Sec9OSyhnX/YN32MuspLPtMeITJReHR3rrw1kFtXtTY Ujua58hPtWuk3OQtbX8pB9ZfW/XWVW1+ubS2yr3+T/TmfNLl9ujLegvL3hSeafodlj0prHvQAS8n 6RhkDwov8dr9vRxUP49fSae2z1fIx5fqci/T38x1fy+fFnyWPpcn6+bKojo5sk4+RLfA0+lifKA5 up/ET782hvRso/OtZ5p+HTyZxEqkp/Cax7zzSz85G4XPeHlM5rSfxtZEk88i6nv1l3cm6NfHy2W6 /8/08pzGn+zR/cReP7EXkf72k7jpJ/b6SZz1U5sSY/3GefmzNl8u8c5mteemEZfzKLY8G/RxosmX 9Kt+Hq6Xgy+dYWrzsI5TbWmdxFS/qXXaT/LG09n4izOXjK3fTE/WrQ71uQLVPwuWXIE8v9Y/112i cXWo/rmu9oz2PzmbLS/57PlrXcnlc1fdM1aJ13Z1HZ/UX1uy/sLbSj63rsK7Si6dscK6rg+YXHQp Xx02cR0+5sVTrVx1znjxp0/JKxFv3UVkjUWChuqut0ieyRGRfBOfkVZXOMcIRdp5VGSIPKj2u3jP 7pfXoK6JiOx1kf511p/oRR4w6y0ie3SkVCht9p5aIh9VGj/pmCPDhUZ6tmUckTHeOD39iNzpIs8I TRaaXkIuiswSkjtcZIFQpdn/lMiTciaILBVaYfJxpMrEqe6FkfVCW4S2e/7aLfS+uSdEjhg/RU4Y /YjsHZGzQjXmDKj5vzY3R2UPiDYwpPbYZyS2o42N36NyBo22MHEWLTR+1HmMtvbqbvNsdDK5PCpn xKicD6Oae+Q8FpVzWFTOVVE5T0Xjxr/RrJfHZPzRMu85ysRDVM5CUTkDRWWPiE65HD+au/U8EJWz UFTOQtF5ntzLuVE5D0QXGfu6TqLio6icAaJr68Rq7T2gdo8SPrrB6ES3Gpn+GqPR+kYb/+/XGP+b Pitz2jgb9BtVa6vvVz5fToFQK6F2QkVCXYS613n2FCoW6i/0gNAQoVKhtNBwoZFCY4TGCz0jNFlo utAsoblCC4QqPVoqtEKoSmi90Bah7UK7hd4XOih0xHvnib/x/ETorEeqX+Pz5TpGnttAqLHXtxPe U8aQ21SohVChkV96tha6zfQ1t9PlMed2FbpbqJdQ2NjJHWDelztI6CGhuCfPCpUJjTJ2c8cKTRAq F5oiNENottA8oYVCi7znsjrPWv2VQmu95zyv3do69RuEtgrtENojtF/o0OWn+if3qFD1P/Cs9cVp 48d/lJiDutTfkNpnvg56ukfr0Tnzv52vfda2r7V7VUCooTffIr+qyeXnVc2EWvp+FeoTioYGhgaH SkJJaFhoRGh0aFxoYmhSaGpoZuil0PxQRWhJaHlodWhdaFNoW2iXlH2hA6HDoWOhk6EzofNhK5wb DobzwvlQQbgV/24npSjcRah7uGe4ONw//EBoanhIqCJcGk6Hh0Mjw2PC48PPhCeHp4dnheeGF4Qr w0vl3yvCVeH14S3h7eHd4ffDB8NHwifCn4TPhmsiTqRBpHGkaaRFpDDSOnJbpFOka+TuSK9IWOtF PiAyKPJQJB7JRsoioyJjIxOg8siUyIwr0uzIvMjC0LDIIq8sk3IlfqWUtZENka3C7/DKnsh+6JCU o1KqI6cj56K+aABqGG0ie0LzK/7FBZ/3Fxdy+YsLDfiLCw35iwtB/uJCY/7iQhP+4kIef3GhKX9x 4Tr+1kLzYEHwDt/1wY7Bnr72wVgw7esRHBb8nu/e4MjgE75QcFzwh777ghODT/u+GZwWfMN3f3BN cK1vfHBL8LhvAn99YeH/xz3z+5v4y/i9ymr9v8kXFnkkmaWwu0c9PSquwyvJqil8wONVb4jHl3qU 9kiybqFk3ULJuoWSdQuf8XQne/oqm17n37O851yPFtR5Z6X376W+tsVbpewo3lO8v/iQlKPgoeJq KaeLz4V8oUCooSnFW0NNQs1CLUM3ibSNyFuGOoQ6Fx8KdQvdI2uSVVl8WtZlNFQic3UNf2nDx9/Y sPgbG3awKFjkc4L3Bnv53GDfYMSXw9/baBgcGiyVecgEH/HdEBwRfMxXEBwT/BdfYXBC8Clfq2BV sMrXOvhm8E3frcETwRO+Nv+Prftrvu18Q3CwRIe/5mr4BvB3wN8B39HpI9jJHYm8FPlP4CcLFrmv wfeBN23vgO9P29sFb0PeyRmOHW1bhP0hTkdF99v62yd3jPB5zj2K7vcFl6Hzsr73AvyFNfRhAvJH 4DvCd4TvZHrr4Rjwe+iIzQv/4bQVPOiNqC2136ZXjNS5k3Fl6HlaeXsffC61Plq9iuRR2oaQXAPf g7aPY+0aetIDdNHpjE5SsAN8B/gipyvyLHxnLCAHO1JbRO3XnLsU3UfoSVc0le9of4KO8cNkrFVh TefidqcCucEu4AB04thcgU3xhnWfvtFq75YIPu3K6rZGwfcA97kjBMepjt8CX0Cfflo+RTuJ5gtu THAhNq9ViX+v8v5T1E5D/170n4fPw9op8CD655zfitxyNgoOcHbrW5T3f4wk6ewV7KY6vjOK/mLw r+AaRdtGsy927ld9/wdYqIBfTG1v9C+i3wb+CLgefB394853RTPs/pvwZzVurYD7pvA1KveXulsF DzkSCVa+6viOu08K/kXRf8STCNpF2MkHW9A2AU4Dr3MuUvuw8O8oWvvhq8Ad4AvOEJ2jwHFwBVgJ loPVijnN5F2dzAyi+XRA/4ZKKXwPsJGHlWA5qG2vQ3MDtUuR7EMyDsk8M+/KC64AK8FysBpU/b5o jqWVz6D7U40K+Bfo+UL41eBCT1IJloPVYE8Zyzq3nChKK/L2veAp2k7zcAVYCZaDamEa3nhedexZ 4PP0+RR4EDsHtc/+4+42wdPgcXcOWAYOBYkE94RYuI75OovmQfCYh08SA+s1NpDUYKEGCzVYqCEq DlF7CMkhT7Ja0GYsN7obiJltYBk4FNypSCQcNDGmvESaWtsJf1zO9NoHkVhdPZSxWJs1Sq0WSFog acHqbqGWBTeCq4nMRTLGMSY+sTwVnOa11XXxGDF/nf6fuOVdc8AycCi4ETwBqs39tN2PN3ZgbQf8 C/Ave6je20o/78tRa40MmkiDX2jQfYOZLWMetfYU/PHAP6uHDWqvfEjkTquYj3wHM7sDyTLWSCuw gCx0B/nt6UBrwR8i/5BcdBp+uu4g/j+R0xqZfKia/gZuSvBLZLOJ4HV4Ywk67VgL78LfB1Z4OVD2 Fz/2rRzFwE6d/cCP1RsuudQpUZ8EViofaKe8fZTYriBOiojebbRa6S7Tts4SeqW1WZPPA5o52yrK 2tzNmtrNOtLVcTP8NGr/5I3xMfqTpO0v0f8lfibDuEfVP4qSqxXNfLUPyP5ojUK/EfwG9Md52aOS PFCuuwNrMIn8BfBa8Gbeshe8mNNHZzNnEe/V2nt1lmXlKp/nodr8qpeT5wrfjJjciaQAfD9wvc4v +fZl4vlB8vZyzaLuLmJyh2q6rYm9XJXI3GkM52k+928zq1juyrIjMC+71MOSB1YTY6tZlQY3sl5W gxvZQTRX52tb8eebtHqSFfQkcahv+b72yu6rtXZfk1UcOav4b2CN30OrlYFPyQ+q30V7K5GskiO6 0iXC39WdhZ4XefnnSTT1LQvAaeD6wC3KB55j5fbTXYaVu5/aKg/NClV+YKAttSeQnKD/6uHOgZ2a 6+jtHN0N/b9jT8yntxeQv4bPb4AvYCyH9KRk9XfU/nYnKHhUT49Wc0WZryfJKjprsxnjXF1r9h3s g7cq2gWOSKy3sfwimqew/O/w/w7fG/vb1POCarmYPg9X9C2FPwY+6Dbw6blC7d/FTLXBwnaz/+o5 Ss4JD5P9NMIncXo55mQZhcbbV6idTc938q41WMvXkTq/V2+4+MT5lPkdpfu73VSt2e8q79wF34vx VjOKT8kVn7IS8+kn2d6q0h7anRj7VV5vtSeF8O0cObv6NzPq3zhyGvTfTd+20JZot7o6w3SN02qg noGtgfZHgjOce8Vyd+ZxuRPX+LReFH431j70UK29jJ2vYrPIcQQ/UJSou8GnpzLxgJ2DH16h1Qhw KjFw1FHvLcFCa/An2InCf5+xz8HP9zDGLK0+BPeDGfWYnLJ0FBP01Cr8VRoV7EGPYq2Ufg7ETsCd qRnAi0Yd3Rv051zgJkX3FPguuAZ5IVisOcGcOVXT6gB2dfeyjyjfy5xCsbMT3IydzdjZjJ0/oJ9E P6kSqwxJNyRRc2pV3ndGeyL4LrgGeSG86jcyJ1vessYg56i+2Omrba374e83vNoRXIO8ELwBSQvi h/MGNj/A2mmwAlwMLnJ0B+yNzd7Y7I3N3tjsjc3eeKm3WrbbqKbdBg+sx8J6+NfhX9dRiFfn0n/F X5vxKi99m4udubQ6hQWVdKGfn3q4lZWlfRjg3s5q1dl50tHT5jrvdqBv2ejsYc1yO1BNnznJH+Zs 35xbQB/wbaw1x/4ZcA+4iLaDwF60XYn8Q3CbI1EaKNRxBSoVnazqONvdVbLSeVdghKv71BB8VYYH /op+UL0aqGRd30FvdxInH4BTvXvKXmZnEzG5l1nbi2eIT11l4oFWOlPudYIvcSey0GyJ5k74iby9 m4k35uJVldg2M2Uj74v+B+CnYAW4iZN8ReAIb1HJRZ0XmV/lj3jIXMOvNJGjEomEYmawmBmXe7Rv ov17uVdG3asVA3JvvfCOrsQL77gyy/aLnJS2qk+cO3XfcRLK26+B/4q8Qs9jzstkRfTlbKznon+i bYhz0SNovqX3TWezZmmb+6N9v96XncbU/ppWv1DMuR55UyycBxehX0KcjNO5sF9X39oH4HuDHRWd Ap0jp5DYKEf/TSLqPUV3ATodiYp81bSfZWY/gs9Seyu1zYiWnlgwd9VFYB/e1YNTwcvsgL3UY/YH 7CDl5MYN7Bqb9Hxiz+NEOoU9aD7nw7FInuZUU42dteBu8F3wPewcBreDj7M3vcc+u1LRfQt+HLiK 7HqGPehHen5z2nKKe8/jV4CVYDlYrbV683KP4f++aDYE7wx8S9DcyLgh2qs8rATLQbXwGpqjafW6 SgRV0l8l7kNExRDOuo+DIbCMk+EIzp+9uJNygnVaET9v8C407XLNpQ4SQR3FUSzf7OEKsBIsB8Wa e6veSQNvEjOb3abS6mqszQNjIPdTJ4+xPwG/wsMVYCVYTq2O6wn1lbNG+ZwbAj8FB6l9Wjkeqn+4 I9iL1A92D059Yz2cA5aBQ0FiSU9ugQbM+3fQ7KW50b3Z3Sz8x+5bgj9FvsfDMnAouBG8XeON2k1I NiF5Vs+69q90hfr/hbN0S/Cfwcc5WxZwD7qTs2s7TsVTiKjHidgpeg60emH51/BPcHtdTt/+iPyP ascJ0f8DKnGu93AOWAYOBXV93aK9cv5J77CBV0zM64qwDmPtanAeJ4TxrKM8zg/fI/5fovY9D+eA ZeBQcCM64k/nRn2L+5Z+riioOqtotQo+Dw+cwUvvu5WshZZaa5Ab6xG9sTpHVeKu0Z44K+A/hneI Ewf9se5xZsGg3l7f0dureEOjYrsznr5pxPrgV9HzVdSaLNodvNrNE/TpfLnNA/cJP1/l7o1E8h/B J7xcqpmnilw6DZ1J6L/KivuIdXQ1GbULGXg2/BuagSWupJW7jnnZhE1ur/Z0LD+KtbbwK/T+Kzdc rS1Ds0oxd41GeK6P29ZPsMxnJjkm2/+W2005K/QYK+h1VsdXQW7H9mIsvII1n/O0tKrCzm+0bw6f UznciGUudA9NcBd+THmxUA3uZl1Xg7tZrdXgbnr7a+Gf440r8dJ5PQPYL5KdNoMOfXtD78jOz8GR ijafnNhbA8/ofscqngb/Ovov0/Y5Vnq5SgJpzQaBR5C/hf5B8H5wXuCMYs5g3enQ+YVGTs718E3B jlg7j/4M+txAdweniX5O5dzu5hM/ylvaN/eEzr7ThLUz1tw3iYdF7haNE5U7H3h3av3EspI7zp2s 6966R+T0Ye7eZabuUj7QwG0ktWfZs1bpjViiV3NCT63N6cPOMk9Xk+Sr1eBG8tJqUPfQYj5Haov8 APIDyD9Gfhj5e8iHYO2PvMXcvMayM+4GV+l73YM6ogCfx9rLuHHPZ4+bpfrWv+n9WrLcUDz8KX3W vHSn3rUDjVj11azutYriyW3kmdvpieJ2aq/mXHS1nnwkH15gLcwhY2jtOLDcyx7aai954029d4vO bOSz6T/5KvBD4VfQ53ud6wV/pugU4P+ljPQPzM4odB70NFXSknvQ2zpG51q9I9t8qmybW9s+bm1b yMk/wA8tmPf23Mt+SrQ0cyUXBXJp9SknhF/pfdzNOnKzcKaQY4fTdjhtJ8NX6Lusr/HGUublZW79 cUb0I264u1kRDpLn9FbutKWf30b/JG+kV+5E+LF6N7e/C290HsVCZ/A7el6Sc6OuylXOdbov0MMP iXNzm/46kdCbsd9uV8m4BqudwEhwjKIzz1lM5tQV8Q3l3dHuaHql/hyIjvm+Yw3ZzNVa+zHdxVw/ dhrj/1X08Bd677bfh/9Yb+v2HfC99bZu/5KxXKM9cVlBzoNOc5HMpf/j7Y8Ff2hLJDjH9FuewM85 Ez6st3UZnfbner2z25Ow+ZiH6sNG4IN6T3dXgd/Se4T9Xzr2QFM8UMwd/BCtSvSebn8Zfi21p+nP f9LDZcj/zHcZBeqZQGve3h0cyniHgZ29s6Xuqs1ptU1v7tbv9eZu/wj/NOfzw4P08GGwmNl5lnkM 6axJ9Apai5G0oJ+zucVMA3sYnhvKNNbaNG460/RWJbVyE3Fv4US9Ds2nwNfdp8mHygfBkEEshLAQ wkJvNKu567VVidMWyV4ksx2ZcT9trZvAZ7gvf5P78je5hd3J/e6neleSSBB9K43me7yxKefP9lhr r22dnvBPGkTypFoTXIO8ELyBnV084+5kdFlHboX2S9i8E/tmdN3BH+jdU/rPKLDZFpttGWk1I61W XzkPquVAT3cX+JRGERaWGsQ/pfB98EOPQBhfKfbj/v6+3t9lFGH97MvZyXvDrKA/YOEU1sK6W2mv JPMovujcLPiQM0Hko8mo3Jflfq21z4ItkHR3Jgpf5mjf2iMh3zo3MBcfgX9WtLcqutsVnfbgk9rW vY23fBmbfcGu4AKslRtfYeFjsDUefgJ8VDNezmb1QG4Uf57l3vcIn9I/qnxOgF3vYa11b8HDW9Hs CZ9QPmezWsuN6snEreE+eCfjMrHRhVnuyby8BJ+HhW7o/FI/H7BL1P9OPrOwlNi4UXcx+4iOzl4M 3xh+HDoHwPa0KgTzmM2m2tadrzPuLkDeEc1XmOVnlbc+QnJnoDM4Q+MNzeY6mxInT5MDFXdgcxH8 zfQ5Dx/+QOWieZbenmWF8k39xVd9fp998W34xfpdNlh08RX4W8Fy/Zbcq30VnI/+GHiDzcBpyE3b JfBLsLYI/COSP8LvQ0fk1n0X9RPR9uDT4CiwB7gPHKfotxR9p5EUgT5FOwn/ArgQvNbj9VuDvbQ9 hWQaeC+tnofPo/YgeA4Jb7EGIPkY3tjvxtvPgO9R+1dwDdZsdPqC9yP/wOO1DxVIFiPpDX+RVm3g j4DrwdfB42iG4c/CB+BrwGbgoZo2ejKkP+j7/qIS23imBZivEj+j9j8IvoN8P3wVuAMd4737ar4u FjqZuVDe6gHOBeeZWYAvAn3gC+DCGj2drjP+V4n/V+Apan+H5VlmdPDXGc+jU4POjWYsSA7SqyPw O72xfJ1x5UrbMbQdqxIf/vH/EM2imiijmE3PZ9Pb2fRNcRqSU+BxJDcq+gzfAswHD/PGVmABeAf4 Ie8yETgd/k9gfs09ggPhv8TMTjQxqXJrCXy7Gr19vwvfFTlRYeUoBoi0wOOKziosXFAPBB5V3t3K XC80nrn4on7biP6PTWxgbTp9+BSdv+Kr+3RVyppqRvwrTjWzfOETXXGMdJSHFlggeB3YAxxH7Tis jVOJ+FPlvZAXgT4PC3RfgH/BQ9WM4u29nucLmIW5oPL3qtx+ntrTtPoqPTQRfpoR4X//+2ZGGOnL Jp7h4+gsx0u7TPZQXzm78ZhZv3nwLfDMevTX19ytn0rBj8LO9+HnKNqsYrsvEXgWv02jltn034D8 uPrQf54+B/BePiPKxUs1ihJXhtcx4iv/j0EThw97WEDbudhR/XewuYvaV0H86TvJqI+Bc8DfXfyS 4AXG2ADJa/A3wBcwa/3ht9Pzo9Q2V14yRoVI7qb2MXA2tXPxANFu3wFvVnq+esy6FblZEW+DL2I5 gYUElvd4XlLeZLZtrOsNrNYPmQWyit/B83dhx2TC7eB/XuyonoTfanIgmpPQ/IrJgbxlJ3JWnzOe tbMZ/tOLvaWfZh+ZT7Z5V33l3AXfC3k1dj6FJxNaV4FtwUKzZtHZDP7Gy05fFWSn8G9BZ7lZ0SAZ wJqBl7qjsxs0eYO4tdgXxKtyp7BZ+/5XwBGgyRWtwZ+A30c+Ev4eMEsEPoH8VW8v0Hie4PHqAbN3 DEGfHGKVmj2F2Qzg/2bgNPAdsAokn/tfY74uwr8BnqPtDjNf8HjS/zF8EozipTPwjahdA98XvL/m jPYQ+QfYnAouBhd569e8SyN/M5F/hhVxP9gb+Xr4Lug/iTX2Hf9G3l5DbLAz+snkdnM01xAt8P4z ZOM98IuQD4I3eZXZD1QSUY3Bp8gwnE8CLbFmMtL99Pb1iy/pd0xYuFjzY8Yr6N8EniMPDyCTLAYf QvMcebghYzH7VJ6XVwuIbc0M3ZB0w3vdyCpnkDfCD2s81Nxro9nXQ7VQQe1iDwvYd4bhwwL6qXmp gNpt4Ou07c9njKf5DL8FnzS2CPxaNBt6v67RX6d04Tc5F/hs+Vb9laP/HUWrku9/N3L35BMq/58c /WXOOm5kfNti9QxcrSudb3C2K2+9Bf+Js4+7Kt956fncN9hqpfOin0jYbZyMvt35uZ4xlLeqnT9r NCranzgLffr5kmj69iv607Tqo+hW8plGALzNGatrEwsVjpx77SFYOK+1gYG0GgB24vcJZ8FcJ19n 3P6BeszeoDrKW+P1v3CxhinaZfYBrImmb4uiv9C0QrJL0TmhKKNQnG8/p6PATk/9VMHaZOxQO0jR nYCFs+ABcBK4zNbPc9ooWlW23u4L9F5vnUXSxB1MP/VXZA1V4tulvG+/ougrv0X13W7YKaBVB1t/ v9fKnqWzb8+nb4v0M21aLQO7Immt+u5aWh32eqK1g5DMtcdotkHe3UP9HZHjWZuvXqJvK5T3H6Q/ tuVXdE/rX72BtyxLJf611OovkDv6D/GLWf1VW39rkmB7/dTFqrKe16xr/Uh7bv1C17Xy1jPWM4Lj LP1221J9/zRwgKL9CDovWPzW0ZoqeLv9rOBr8O3sV7AjvP8UmrS17qXt8/BfwtopjVL/v/P2c9aX dC1bGhWDrGb0s7HGv8W3/FZAJF+3rtG1bN2ia1n1/VHwPkXfXxRtGwt9sHa/1VxzpvUONpU/Y32g uwb8IjTDWKih7T/BHwHf8quHl9OHY/6viOZtfv2EU/KiSM779VvmC/7TuhdYHTSvWuP51l7/suxx /0Htj6L/61ZTlVgrdefy/0n3XLAFeJuiWBP0fQA/FWziP4DmAV3p8Pv9Y3Q3weY7/gWCM/x/0P1I e+L7EAt/0Z5Y530+/RW6c1IxkAf/H/CN+HX61fBfQ/4rJGLH+VlAbDqDwZ7gCUX7KLhY0W2I/Lyi 5YDPIWmNzncUA3vRbAOGqS2EL4UfhOYRJMidSYo5LeFvofZN8DQS3mL/Fj4BPx7sj2QCOFrRT2+t 7tS+DX+Q/gTQmQZWUrsR/jX4j8B+4LeQMyL7Am2NtW3gU2AGfBfNTvCMy/4v3vg9+A30Zw94DMnP sRanVRc0tyK/EX4J/Bx8shL+cfBl8FZa/SxHdp/A9WZ2lHdOgBfNHCnvNkRyHv5uM0dIppuZUt7+ DlgKlmHtITNftMoxswaPTwIfm1lDfzF4hNpCxZyWSN6kb7ejORnMGv/w9m/Qw3XGJyqRPVF54zH8 7MwHu/FGvO3/M7V40qrCAlHnzgA3oT8P3AVGQEbtmEibQz/HoX8zFvC5G6QPxI/Viti7Cv3D6PwS vgeaJsbuAYOKub/Utrlfpp82Or2x8BswD/n1jLo1ntmK/gvUskac3bS6iXfhW3uGWXf4cC9t8a0z CbwFO79GpwP28af1ddouR84qc02spnmXWYktTexh53fwaFrP0uo4Ov8KmgjBe/YIE8m890Z8tUTR /2ckL/IuE4dfBe8C76PtDviOWCgCPwT/ivwZ3hWD/yZ2GJfL293OaE7Bzix4PG+RH5wF4CjwfnTM G38Pmgh5g9pHQObFbs4bvwvi+RwkzineOAa5yWmsQcesblauew2SJiCZwSYqbKxZJlORVayT6NPW GQm+ClYgN7kR3n4HyWb4A7yduLJZO9YntCLqXLOazIjWoNMA/ZeQmHlfi3wAmA/SZ5ucGSjHpukV UeH8AWRNOcSGn54HfkirH6B/Dp6V6IwF9yFnTm387w5BTo5yyFoO8WCR1Z0kuBr908TMeOLH5KtK kFzkso7sp5CYzFlNWzOnzLvNTAWIJfvbIGvNngoSvTnbFXOJCpf9yyXaA3g7h7EHqHXQt8lR9p1g P327z6d3EOdnNfpt0WCwJ3hC0T4KLlZ0GyI/r2g54HNIWqPzHcXAXjTbgGFqC+FL4QeheQQJcmeS Yk5L+FuofRM8jYS32L+FT8CPB/sjmQCOVvTTW6s7tW/DH6Q/AXSmgZXUboR/Df4jsB/4LeSMyL5A W2NtG/gUmAHfRbMTPOOy/4s3fg9+A/3ZAx5D8nOsxWnVBc2tyG+EXwI/B5+shH8cfBm8lbbX0/Yi OnfDT6e2DP4h5DkgYwl8DN5O7WQwC36DVut4bwt6aHrOeJ35YDfaMmr/n6llRFYVbZl9dwa4Cf15 4C4wApoe/jd73wFeVbG1vWZm7zMne+8zhBBaKNKlCQnESBMFAWkiRBSkKb0YECEERAREkCIiSpEO Ik1FbKgIgjQBkSYivffeQQwk+Wbes/WSXP9f7/X7vud//uc+58k7a9asmT2zZs1as+fssxOe8fC4 BgKLowWM3VZoE/PIS8AGIiB/HDIfgn4IkuG5rglErSBKgznRTwGZR9HCV8BolE4ADcu0dkCmGFqG ZgT6Lz5HaSzagWZ4DfAXgw/rtcM20AWthS08bKubwYcMHwnOOZSOA2J2OPQgegGnorXwPN4PrAps gtJtoCuiVgXgKeCv4L+GNtuDfgLtoOc2rmInQHIM2pkEGrriWFnWHGAK8EnIhK/4EzA8p8tQ+hwQ mhR5ccXngdCeBMe6hiv2Bz/sDWC9VnhdwObtbOBEAbGmBOZRoDUeXuNYj/wy5FHXSga+D1wAftir gBZbwVkP+iCuDksQsHB+FbVgJ3bY5sMjWg4ZB/LTwAnP7ArwE4ExQPRZwNsERqDNcK8w79Y+IFaB hdln6HlgEGq9BPlU0Fg71gDgbvAxpwL6t1uBj9VtwRI4PKHVCbgUMrBqK+xJLoIOzxRmU0D/AViI aAmEzYuxQNie3AL7x1zb8Oc2bDUAHUqMKIBSC/IC/kFUNkj7+B4ypyJbdGmx8DmGGKM5dXHf3cmc NojZOEmoh9IZ5rexopB5Pk1MwlkKNxx+Bvwxhm8esCDzawvDaWXQ3m7QKgf+ddTtidLTBgO9QHcC 1kVrF8OSuG5z/zSjGJkzCnNvOAOcYf6JRzn8ts6cotTH+UkqzkOicTayEPw5pi7fBk4nlE4EzdHC RWAKcAHG7hnkg6GBpuaEhK/DqUU86HjxlalrZCgD5xU5/PMTjXTEyNgV0E4iatXCCUkVw2E5rGma n8s/G1mIM5CFOA/RmP52hjmnapyxxfhe0M3NvS3fZmhWG3QLlNYCvRz0bkgOAB0EXQWla1DrLDhR 4dbAOZpu7vTLQiYKtWKB7VC6M4wojQGditLJaKEY+HPBTwBdGqUB0J1BDw/3wdBsT7gPKO1n6PTE jJvaEkqA8xnl1bgX9AxDi2y4l88wKKoDr4KTCnoSJA8ZtLcbtBj4HLgQpUGD7Droi8BYyBNkxgBL A4eiNAV9GA+6HegFuOI5yPQHvQGlSWjHQfurgXP8npuedANnCTjfAEcBMVJRF6UKnMHpy/Bf2E3L K9LNSWAhtNzD74Ph7zdzJKobpP2ouwg4Fq3hxIMfB6epkbFKpJtn1R5CaY30+RrTqaHmR0ImznD4 5XCf0fJs04dAAXCWG5qNBT8x/VNjn0beWovSnaZUj93MjoeWE8HPgzbfRP/zZaTqfg5Bb2+gb3tN LbsnxnIS/FmwuoGmFkvAtfqDLoJ2YtPv4BuEO0afwFEG9W7K4GFw8kPmJOgog+IR9Coes7YO1+qH ljuhh4cNBizotmTYQjKeNFZnZHiU4Zj372gPiVVmRZqxBPJA/qSh7TqQ8cBpEbZDaDs/ruJBM1FG Y+w1jLp5ujmbTUIPF4B20psZG0s3p505gI1w9XXQRm3Q7Ywku45asaBvQnIdWhgLejT4O6GNTeCX AOcaSt8CZy9aewuchyB5yaD2OJivsB2i/w0xliPow2FYQtiSx5tR67uAg9AS5h04GDN1HfLpaKEc rlUFpbGwn8PgVzKo/buZl3q+jMHjsIHtaHlbWP++NkzPa2Esh6GrXOCHgM0hmeRf9w7WxR3Y3lVY QljS6K2gobVtX4UlG5k2wLHgNINkDK4VA8ktqLUOMlOAS1DayF+/FfRYAujzYoxxM/j5gd+iP13C khhvj/CojaS2Ipxaw6ICvlZnw6qhDaMZ1gUtT4QfWAHtrfavZdqpgJnKFfZUqHURtVZDMh3WHgvJ xbDMaEMHilA2WNoyzLjp/7TwivbXiGmtFeaoGPBZ9PC87/HyItaYq2zy1+wkXfpJeC2b1rS3nIhe VUCtsF81LQ/FKfFF6gC76mBiekYTTT8FqzsLGfgBEV5Ho1G3Ef8Blr8Ms2nGuDLsGyE5CPym0Px4 g9ovLYOvMF4lPCMLgEGUFsKoa2K8B4FjgHfQci3M18PAIsD6vozxcgP9eTSebZzxmdoelmE1zYdV 3ME3uXdgq3dgz3cwF4a+Bb0N9qNYXnDMqKdgpNXCUQw+5yJm5xuDElYkEWXEaUh2ACLG0WVjh3oP fAA+8Cp8oPEwTdHPKrDSWNjwNlg1fJGWnA1JI/8x+EmQrAu6Afhz0POdoBeCXyd9B7AnVt9Vsyc3 V0mflHEU85VoVivm9DGMq0g4rqWvwff1OU1v0fMhGEshSCamY8+DuvmpoG4zxp9ZTad9ZFomwnve yDK/0/FPGg2SA75j+ESGk97SPGWd3sI8CZ+O34OkO6DjQMeBrmie006PN8/Sa35P8D8A/Yx5fsw8 ma/p70BfBH3e0OZXPLruUvOWG/DjzdOAup0P8W6WG3i/zTcGze8IiMzv3NOjza850qPN70HSPwsk mbfcyFfMW24Mnbbc0OlDAm+at9zIy6b9wHGD8hLofaZ9eRr0bdBhmSbAipBsC+xg3ntj+pZ2ONzn wDuQnw06XOss+nwd/GLgRxqUD2N05YCXMN6hKF0MlOA/AMmauNZ58DeizQrgVIFmwpxUlLaE/Chc cSO0lAochKvXgGQZ1DWSsaBjQVcIbAD/FugyaCfML4GePAW6FOin0c4ug0EJGm/yCQZR2hKckWjt a/MOHLTwAFqIAx0HuqL5vbyW/xF0LmBO1KqNPldAn9thlqdjpDdQir4F5oHzDPA74HWU5tZYXn4M +hO0uQL0aMh8DhwH/mLQ20FfMz00b+HQvTV2WBHfy4u0DNDQm/kmPT0u7YzpTxrmwnzzrjlXTWna cqPJMCd9ELAQELXQQlzaWkiibhpGnTYd9HG0uQb0TtAXUQqLStsDzim0Y57AIXLYiOBZEu1f7JVE 0Z17dXyOBia1Te5Bn5G+83sisWYh0ncWGRmUkzwKUH4qSlFUju6nyvQw1adm1Fq30YReoleoPXWl 56kPDfflQySpABWjHFSeEnQrNagBNac2+qqJNICGaM/RjXpSCo3A/xgM11EU1D6jOEVTLD1AVamm 9s5P0zPE6Ql6mV6ljvQcvUB9aSTlIlGvceO6VD/x8ccKUbumiQ0K0SS0khvvDL1H++YSusU4qkaP 0KP0GLWgZ0lQaWpKA2kodaIk6kX9aBTqRFAhupdMpHuQalEjKkOvg5+HIrUeClMMldTtVqRKVJ1q U116nFpSW93vsvQkDaJh1Jm6U296kUb7PchOLhWhfFRKtxBPD1EdqkeNqRW1I5vuo6doML1GXagH JVN/8y7T9hV6txdPAdsAOwF7AFOAA9u3TUoWrwHHAqcA5wAXAZe0b9u7o1gN3ADcAtwB3As83L59 957iJPC6QYsDI4EFgWWBVTokde1s1QE2BCZ26PF8d6s5sA2wA7AbsCcwBTigU6+27a0hwNHAicBZ wA+Ai4ErdMNtrQ3ALcAdwL1JPfp0tw4DTwLPA68CbwHTDdpW0vPtk2wHGAnMAyyoC3vZxYClgbHA BGA1YE1g3edNO42ATYEtgM8COwGTgL2e79Whh90POBA4tKfhjwKOBU4ETgPOBi4ALuqt58heDFwK XA3cANwC3Nm7a49O9n7gUeBp4EXgdWBq7+7tewYI6ACjgQWBJYEVeveOjQtUA9YCNgQ2BbYCdtBY IZAETAYOAA4FjgaO11gxMA04B7gQuBj4DXCtxvjAJuB24G7gQeBx4Nnefdr1DlwG3gTeMSg5MAhU vfv07C2jgTHAQsASwLLACslak7ISsDqwFrA+sDHwKaDZjXPte6L/hVTodZ6P8v9bFMOLQ//vaGuP YWsvKin435azkAvTTHu9rBj6iyi0n3PxzuW/QzHtvf8Yo/4ycswI162aHE57THwwu8S/jNn/Mhb4 J4z8y1gIPRVI2V1oRnA3T/0pCh2pclGef5HKDYrr+FTkX0qLUrF/KS1OJf6FlOlI+uf45zphOoL/ OWb7SxindxvJOuqPpzm0mNbSDjpO15nFolkxFs9qsaasA0tmQ9l4NoctZmvZDnacXecWL8gb8v58 FJ/CP+BL+Ua+l5/lqcIRMaK0qCLqixaim+gvRokp4gO9Bs21gmGbFY2y5NtlyY/Okh9zV97KUh7Q y3w3SXZX3onPnPdmZ66vbmZuP7pF5nxOytx+zugs+RJZ5OtmybfKks8ynpx7M+dzlcySb5wl3y9z //PPylxe4JvM+eJls+TL3ZXX6694bJbyIchz7R+iwiO8t3E4LRkeuaVtLpf2VSV87jY/3eunx/30 8h9Jl4730+p+WtdPm2buRelRmUdZJiFzvlx6ZvnyzTPn47LMQoUKWfLxWfLbsuS3Z8mfz5K/mDlf MeouK9NEQnSWfEJm+YRKWfJZy+tnyTfMkm+UeRYr19eotGbaswnUiU2Dt22nP6RX6nhidqSdHbEi igJePbXOq6vWqpVqteYE2AV2QctdZpeJsavsKnF2g90goWqoGmSpR9QjOm4ae+CitjDzxXkUz6k5 5hdEyvRHhHTNcjqfS9+N9KJptI4OUyqL1n0I6l5Fe02Ie3W9RI31vCc0mtFFap9cSN8txOp7nmrq NAkeqft0Buk6pe+0eE6dP4d0ndpJXOd2a1yn9mrcoMdqLDSGiqjDuq8rdekRpOvUUZ2u1vljSNfd JXnclzzhS570JU/5kr/1twH62xD9fQz9/a2kEUoeR0nju0vURvRwE3q4BT38rWQbSrajZAdKOEmu P3qZudw8uR3JI7VWc2qtCq+O96jW+kq1kgK6T6u1pgSZiM8ETpj0X0ldf4ge1RCdzcay0SAWwwrQ YPw/y6GsBWtFw1gS604j8D8sR7EXWDK9zkaxUfQmm8Qm01h2hV2ht9lNdpPGsdvsNo03pkETeIAH aCL3uEfv8Ow8O03iuXgumszz8Xw0hRflRWkqL8VL0TQeyxvTdJ7M+9AK3pf3pZXa+/enVfxlPpBW 86F8KK3lw/lw+o6P5+NpHX+Hv0Pr+Ry+izaIkLaaOyJexFO6qClqUYaoJ+oxLqaL6UxYyda7zLLb 2+1ZBbuj3ZFVtDvbnVm83dXuyu63e9u9WYLdx+7DHrD72n1ZJfunwAhW2XnCacsuOcNdxtK9SK82 f9Fr6c3gH4c6hLrxa6FBodE8VXEVFEFVWBUW2VRRVVREquKquMiu7lX3iihVSpUSOVQZVUZEq/vU fSKnKq/Ki1wqTsWJ3CpexYs8KkEliLyqkqokYlQVVUXkU9VUNZFfVVfVRQH1sHpYFFQ1VU1xj6ql aolCqq6qKwqrNqqNKGL+pbAoqjqpTqKY6qK6iOKqu+ouSqjn1fPiXvWCekGUVH1UH1FK9VV9RWn1 onpRlFGD1CBRVr2iXhH3qWFqmCinRqgRorwapUaJWPWGekPEqTfVm6KCelu9LSqq8Wq8iFcT1URx v5qkJokENUVNEQ+oaWqaqKRmqBmispqlZokqaraaLaqqOWqOqKbmqXniQbVALRDV1QfqA/GQWqgW iofVIrVI1FCfqk9FTfW5+lw8or5QX4ha6iv1laitvlZfizpqmVomHlUr1ApRV61Sq0Q9tUatEfXV d+o70UCtV+tFQ/W9+l48pn5QP4hGarPaLB5XW9VW0Vj9qH4UTdRP6ieRqH5WP4sn1C61SzRVe9Qe 8aTap/aJp9QhdUg0UxfUBdFcXVaXxdPqqroqWqjr6rpoqW6qX0Qrbbxt4b8InouxVJaqvVgGy9De w+b6PgDrzMY6C2CdSR7DYyjIi/AiFMFL8pLkiLrau7l2O7sdeXYHuwOF7E52J1J2F7sLZbN72b0o 0k62kym7nWKnUJQqpApRDlVEFdFrvJgqRjlVCVWCcqmSqiTlVqVVacqjyqqylFeVU+UoRsWqWLyn viLlV/er+6mAekA9QAVVZVWZ7lFVVVUqpB5UD1Jh9ZB6SHsr43+Lwv8WU4+qR6m4aq1aUwnVXrWn e1VH1ZFKqs6qM5VSSSqJSqseqgeVUT1VTyqrklUy3adSVAqVU/1UPyqvBqqBFKsGq8EUp4aqoVRB DVfDqaIaqUZSvBqtRtP9aowaQwnqLfUWPaDGqXFUSU1QE6iyeke9Q1XUZDWZqqqpaqr219PVdHpQ zVQzqbp6V71LD6n31Hv0sJqr5lINNV/Np5rqffU+PaI+VB9SLfWR+ohqq0/UJ1RHfaY+o0fVYrWY 6qov1ZdUTy1RS6i+WqqWUgO1XC2nhvB/j8H/NdK+cy09rn3nOmqsNmjv2URt1N42UW3S3vYJtUV7 26Zqm/ayT6rt2ss+pXZoL9tM7dQxo7narWPG02qvjhkt1EF1kFriHfGt1CV1iVqrK+oKtVHX1DV6 Rt1QN3DuFb6/YhQPX1tK25bNWrPWmt2RdSRmfWV9RTyQFkgjEawerK798H+P9Wkf+B/r+4/1+dYX A+srbXZbrGtg339s7D829t9kY8zupvfzkawIjxd1rOaUn6pQTapPidRC3y900/v3/npnOYrepik0 mz6gz2gpraaNtJ320lE6S1f1zp5YgHkR/UhE9I5IjngRaZ+I/khTIl5C2jfiZZ0ma2og0uSIQUj7 RAxGmhLxCtK+Ea/qtI+WG4o0OWIY0j4RryFNiRiOtG/ESJ2maLlRSJMjXkfaJ2I00pSIN5D2jXhT p3213FikyRFvIe0T8TbSlIhxSPtGDCCuS4do7BMxQmNKxBiNff+GRiZg5L0jJvqaecfXzCRfM5N9 zUzxNTPV18g0XyPTfY3M9DUyy9fIu75GZvsaec/XyFxfI/N8jcz3NbLA18j7vkY+9DWy0NfIR75G Fvka+djXyHg9/t4RM6CROdDIB39TI5/6GvnM18jnvkYW+xr5wtfIV75Glvi28rWvmaW+Zpb5mvnG 18xyXzMrfI1862tkla+R1b5G1vgaWetr5DtfI+t9jWzwNfK9r5GNvkZ+8DXyCTTyJSxlJTSy7m9q ZLOvkS2+Rrb6Gtnma+RHXyM/+RrZ4WvkZ18jO32N7PI1ssfXyF5fI/t8W9nva+aAr5mDvmYO+Zo5 7GvmiK+RY75GjvsaOeFr5KSvkVO+RjZBI9uhkd2wlKN/UyNnfI2c9TVyztfIeV8jF3yNXPI1ctnX yBVfI1d9jVzzNXLD18hNXyO/+Bq55WvkV18jt32N3PE1kuZrJN23lYywZhwKa8ZhYc04PKwZR/ia OQ2NXIRGrkMjqcZSzP9pNP3GaVpzKsW285mioXhcdBKdRTfxnOgt+oi+4kXxshghRopR4nUxWryh 74KPimPiuDghTopT4rQ4I86Kc+K8uCAuikvisrgiropr4rq4EUow/0eJbWPb9AVmmF/nigaiAXHR SDQiITqIjmSJLqIrBUQv0YuCIlkkU4RIESl6J9BP9CNXDBADyBMDxasUElPFVMohlorNFB26P3Q/ ThliyLEKWvdYhazCVhGrqFXMKm6VsO41I9M9uoHT9fB+Jb9/NlHGlOk64bNrJpJ+lyjpS5Q1Z1Mi SZeQFW2ZN4CVtEqSe1e98HWjrZxWLiu3lcfKa8WYd99p2X9cl1MxymZFWTks2wpY0gpaEZZjuZZn hSxlZbMiLXPeZemxDdKdNHW49aBVnTyrhlWDlC5LoDxinlggFoqPxVrxnVgn1osN4nuxUfwgNonN f6Rxc1om5oq5usX55nfN4kPxodb3IqH9qNbcGn29o+Lc763P1VIf6tKlYpn4RiwXK8S3YqVYJVaL NX80x2h9npinW18gFpgnMsVC3frHQntn3cPNunUzDtN6OYr+w1b/YBzQ2VFfZ6beX7Qu1DPWoOvZ PfhiepWG0jB6jYbTCBqp1/XrNBr/XfRNGktv6VU+jsbTBJpI79AkmqzX/FSaRtNpBs2kWfSu9gDv 0RyaS/NoPi2g97U/+JAW0ke0iD6mT+hT7R0+p8X0BX1JX9ES+lr7imX0DS2nFfQtraRV2nOsobX0 Ha2j9bSBvtd+5AfaRJtpC22lbfSj9io/0Q76mXbSLtpNe7SP2Uf76QAdpEN0mI5oj3OMjtMJOkmn 6DSd0f7nHJ2nC3SRLtFluqK90TW6TjfoJv1Ct+hXSqXbdIfSKJ0ytBkz3oQn8id4U/4kf4o34835 07wFb8lb8da8DX+GP8vb8na8Pe/AO/JOvDPvwrvybvw5nsS78x78ed6Tv8Bn8d18D9/L9/H9/AA/ yA/xw/wIP8qP8eP8BD/JT/HT/Aw/y8/x88LhF/hF4fJL/DK/wq/ya/w6v8Fv8l/4Lf4rT+W3+R2e xtN5hnZB5ml7ISxhi4CQIigiRBORKJ4QTUUr0Vo8K9qK7uIFMVQME6+J4WKcmCymiU/Ep+JzsVgs EV+LLWKr2CZ+FNvFT2KH+FnsFLvEbrFH7BX7xH5xQBwUh8RhccSqalUz/7fV2mH9bO20dlm7rT3W Xmuftd86YB20DlmHrSPWUeuYddw6YZ20TlmnrTPWWeucdd66YF20LlmXrSvWVeuadd26Yd20frFu Wb9aqdZt646VZqVbGXbIjpI1ZE35iKwla8s68lFZV9aT9WUD2VA+JhvJx2Vj2UQmyidkU/mkfEo2 k83l07KFbClbydayjXxGPivbynayvf501J/O+tNVdpPPySTZXfaQz8ue8gXZS/aWybKPTJF9ZT/5 ouyvPwPky3KgHCQHy1fkEPmqHCqHydfkcDlCjpSj5OtytHxDjpFvyrHyLfm2HCfHywlyonxHTpKT 5RQ5VU6T0+UMOVPOku/K2fI9OUd+KBfKj+Qi+bH8RH4qP5Ofy8XyC/ml+d+v8mu5VC6T38jlcoX8 Vq6Uq+RquUauld/JdXK93CC/lxvlD3KT3Cy3yK1ym/xRbpc/yR3yZ7lT7pK75R65V+6T++UBeVAe koflEXlUHpPH5Ql5Up6Sp+UZeVaek+flBXlRXpKX5RV5Vd6Sv8pUeVvekWkyXWYEKcjkXDlPzpcL 5PvyA3lNXpc35E35i9PPedHp77zkDHBedgY6g5zBzivOEOdVZ6gzzHnNfckd4L7sDnQHuYPdV9wh 7qvuUPc1d7g7wh3pjnJfd0e7b7hj3Dfdse4Ud6o7zZ3uznBnurPcd93Z7nvuHHeuO8+d7y5w33c/ cD90P3IXuR+7n7ifup+5n7uL3S/cb92V7ip3tbvGXet+565zN7o/uJvdLe5Wd5v7o7vd/cnd4f7s 7nR3u0fcY+4J95R7xj3nXnKvuNfc6+4N96b7i3vL/dVNdW+7d9x0N8Mjj3ncE57l2V7AO+Yd9054 J71T3mnvjHfWO+ed9y54F71L3mXvinfVu+Zd9254N71fvFver16qd9u746V56V5GiEIsxEMiZIXs UCAkQ8FQRMgJuSEvFAqpULZQZCh7KCqUIxQdyhnKFcodyhPKG4oJ5QvlDxUIFQzdEyoUKhwqEioa KhYqHioRmhqaFpoemhGaGZoVejc0O/ReaE5obmheaH5oAb59xtk+ztgH8Zlce1CcnL8r6uv4/rN4 TMf3XaKFaEl7RBvxDO1DND0geoqedFBHvFfokHhbvE3HxCQxiY4jsp9A3DqJuHUKces04tYZ8aX4 is4iQpy3KltVGOEEntuO7bBYO9KOZHE4Y68QOBI4yU7LWBnPLuK8/Zoz3JnKuTPX+Zbndr53bvEK OHVvh/P2eTraX6UIykNFdMxvpHdAU3QEWKG9s76EO4y4+h7UQlDmO5pIykX53fU6v8vdoHGP+73G fe6m32V3aWoVBfV+Ig8V1DuA0uFvj9w9hu/u0/iDe0DjZveQxq3uBVNT5TQtqlymRZXbtIi20tDq b9/RROjcd8rRuF65mUqyoSQSJdkzleRBSV6UxKCEU4SetVg9d5W4+W9JVXlV4rwOr0OC1+P1yOKP 88fJdsY54yjgfOV8RdK57FzW7XF7Af/xfyjGZo6w/3/H1/+dCGti6F+Nm/+TMTNKdpCdZBf5ko5A JnLW1jGzIaJZEx2ZxiBONtcx0kTHcGzs+Bej4oA/iYf/HA0n6zj4jwh4d3T5fy0a/h7tdFycpOP3 3VGxht59mL1HeOdh9h2N9c7jV3/fcVvvOp7WO44Z2HPM1DuOVG21T2lLfcbY5W+xk3fPHDe9SC+7 F+Xl8KK9nF4uL7eXx8vrxXj5vPxeAa+gd49XyCvsFfGKesW84l4J716vpFfKK/2H0XbYH8dbFaEc 5f6lqLvwn+OuyqYiVfZ/ir7r3Q3u94jBm/4wCu/ScXiPu8894B76LR6rXCo3YvKF/2NUTvvnuKzy qLwq5t+Kzplis5f2vxCdGzHOcupb2RhWkqJZY9aUiuI795KsDetIZVhn1pkqsq6sK8Wz51h3up89 z/pTJTaATaBabAqbTm3YF2wrteO9eDK9zFP4yzSYD+Kv0Aj+Kh9Or/OR/A0ay9/kb9MEfHs+mU/k 2tvjHn+G8EQUzRTRIprmiVyiNM0XZUV5+kbEiVq0EhF/ByL+z7h722nNtrbSWTu7nZ3lsW/aN1le +5Z9i8XYqXYqyxfQ6mL5AyMDb7ACgTcD41iRwITAJHZvYEpgOisTmBn4gJUPLAwsZlUDXwbWsVqB DYFt7MnAzsBO1iawJ7CPPRM4EDjE2um9QRrrGMjQe4MhMkFWZUvkg/IhtiJYKliarQqWDZZna4Jx wTi2PpgQTGAbgpWDldn35vsztjH4cPBh9kOwZrAm2xSsE6zDNgfrBeuxLcGGwYZsa7BpsCnbFmwW bMZ+DLYItmDbg88E27Ofgl2DXdnuCH3bz/Y47Zz2bK/T0enC9jvdnGR22ElxUtg5HWensvM6zn7L bug4e4ulu9xtyaXb2u3P23ozvaN8UOiN0BS+Jvx8i74bXYRvXFqzTj7ny7s4jKpQwN97lNB7mnhd Pld/DC7Su4K5SE1uuZ9brnMH9Mc8ZVOGldFWU46V0+GuEquk23yUPaqDSwPWgCw2iU3CUzYbqK0d Y+ez89sF7IL2PXYhu7BdxC5qF7OL2yXse+2Sdim7tF3GLmvfZ5ezy9uxdpxdwa7IfmI72M9sJ9vF drM9bC/bx/azA+wgO8QOsyPsKDvGjrMT7CQ7xU6zM+wsO8fOW8KyxE3xi7glfhWp4ra4I9JEusj4 OzxLD8XiOGmw8GuF7Dj7yaM/gvLrj6U1d68eaVkyz6WV15+g1moVvU+spj8OVdcfl2pRbfKogf4o aqY/2ehpaqH3h230J4o66E8O6qI/0dSbkiknvUj9KTcN0p+8enVyimHZWCTl02s0hgqwgqwgFcTT Mffo9dqYCun12oIK41vdIlipRVkSS6JieF6mOOvDUqgEe5m9rNf0SDaSSrHX2WgqzcaysVRWr+Ap dJ9ewV9QObaSraLybB1bT3FsE9tEFXHeFI+Vl4A9dX2cOrXBqdOzv5+FrfXPwu7TmirA43ic3jEm 8ATz2zBeS+8Y6/P6eseYyBP1jrEZb0a23vd0pIDe8Tynd4wjnFEUdEY7Y8l15jnzKdJ531lIUc5O ZxflcvY4+ymPc8g5pvfSA9yBVFhHj6FUzEQGKqUjw7tUxvhxKq/9+E6K0977AN2vPfghStA+/Bg9 oP34Caqk761OUWXty89QFe3Pz1FV7dMv6Dkyz39V5a1+H8tGfyzl9FgKZhpLZV5Zy5oRCd5Y38tY GJGNEQX0/q4FSYwrqHdvL1AExuVgXCGMKwrjinYWOZ/oEX3mfEn5MMZCGGMR55Rzhko455xLelxm pOUw0jiMNAEjraTj31x9fzBf32U8hFHXxqgf1XHpJjXQUSlN35mYEdXj3fxvX82vHDtgROXNGFki 1j39ziGcZXLWhT38O4+zpqyszkX/LqdXwB/oohqvpnVhNGJhjm3oJQC9SOglCL1E6H1va3KgHRez 7kFHIedp52lS+s58IGXTd19v67kf70yl/Poe7Esq5ixxvqUEfSd2iao7V5xb1FHvIYZTd71bGEv9 9e5gIQ3Rsf8LmqBj/R6ajrlfgrn/WkfwI7QUFrAMFvANLGA5LGAFLOBbWMBKHdkv0Sod3a/Qah3h 02iNjucB2qL3OHlop97XFKaDei9Tmk7qXYlLF/XuIjtd0TE+Rt8BaE+o75BeIDJ3kFTTnDJQE/Pc Fj3hvuTVpi26TgE2GU85in/MCLWDXmNhdY3vmpHYf8wINaXqv/M4PYxvz6N/l+MknGnOHH3llc4G bW2/usZ+NRf32eH+FEZPYv2rc32VmH/Hs+qaOeGHCH6IwQ8J+CELfsiGHwrAD0n4oSD8UAT8kAM/ 5MIPefBDCn4oG/xQJPxQFPxQDvihaPihnPBDueGHzO+KV+sReLyuWKo18Wffw3DmsCjdyyKsNKvA qrCarD5L1L1rx7qxnixF712GsBFsDBuvrzqLzWML2WdsCVvB1rKNbJvWzX6th9PsIrvOUrXzD3CP R/E8vOB/tfcdUFEkW9hdPQwME5owJEmCIHmgh4yC5KhkBEEMZFCQIFF0lVHRVVgTKJIkKioICK5i XHXNWTGsGBEVxYCKIiLwVxcG9Lnv7Xvnf/+e/5xnHetWdc80Xffe+u53u3q6cXVcB2rXFOjA0WtB XfCQDILRj5LTgAWS08E4JGeA8UjOBJZIhgArJEPBBCTDgDWS4XDmUTIC2CIZCRyQjAFOSMbCiErJ eOCJZCFdlpJCv9LlkNxNH0VJop/BoiSdy2BTUriKwUHyAINA8iBDDMkBhjiSgwwJJIcYkpSE7IWL pLUYQH9nFtCGSCAG4zwOe3qwDoLRnuIOEA/gKKEPwjHyYT0TGMI6BBjBOhRAHgHHZgLrcGAK6whg ButIYEfd+wHsYT0bOMI6FvIFHI7KBdYJwBXWicAN1klgEqwLgTusi4EHrIvoUhgOxysN69106spH PwMaBo4UejUcpxCsDzAg34BjFKbuZmKIwHqQwYD1EEMUw+HYIPthWGPacFYFw3gbC+PsfGwJloPl YcVYFVaLNWP7YRw7i7Vit2Dm/wzO7U/redCT5KCvq0NfIoEpsITe5AI8IEIGwXFHwlFsg9oqhBra juQ0UIvkdFCH5AywA8mZoB7JUNCAZBhoRDIE7EQyHDQhGQGakYxkKFESjlGZknCUo5E8wFBB8iBD FckBxhgkBxlqSA4x1CkJRzwWSWtQiuy3CVmuDFmuHFmuAlmuEtmsCtmsGllxM7LcFmS5GmS5rZQ9 GFJI49JI4zJI47JI43JI46OQxuWRxhWQxhWRxgEmJIahu7ppCCswNNOBGPUTDepJvh7onnotzBDG 4k9XooAM8jVZ5CNy1N+mjgJGfWlFU55EYS/Ek/XIV1BNrZABcYhQGJCGOQ1ASIQjfKFimhz2M5gM AkAgmAL8QTRzCow+QcPXhfEU/Cd8OZ5PK6Rtpe0kPhIDxCAxBPG1hFnK3MQsY5YzK5iVzCqItYeZ R5hHmb8zjzGPM08wTxK9BE7QCCGCTggTIgSD2cf8wOxnfmQOMAeZQywIe6w1rLWsdaw8Vj5rPWsD q4C1kfUrazdrD6uFtZe1j7WfdYB1kHWTdYt1h3WP1c7qYD1idbKesp6xXrC6Wa/ZImwGW5TNZLPY bDaHTbDF2LpsPTaPrc82YJNsPtuQbcQ2ZpuwTdlmbHO2BXscezzbkm3FnsC2Ztuwbdl2bHu2A9uR YBMcgiAkCS4hRbwn+ogPhAKhSFBrkBoo68NQpkeHzGEijGmz8FgYtZNhRsfGF8CMjoPufiZQ/iaG sjJxdO1VgtZIa8QkheuFGzCu8G7h3Zi0cK9wL+RtMFfBZKlcBfKbO8yHmDaVsUA2sxzG7nEwZ9+F 2cNs+w9sEsy42zB3FLs9UOz2RLHbC8VubxS7fVDs9kWx2w/F7skodvuj2B2AYvcU1iCM2oFscRip Q1GkXoAi9SJCGkbqxXCce7Ggv2LR/8yC/xU7fbYQE2kTQ9oURXqURHpUQHpURyPnoZGbopF7o5H7 IY4SMJz50dGb/mDbDaOu69phyiP9/3sv/nN/HPYdeAQJ5CkY8hQasrAwsieB7CmG7CmO7CmB7CmJ 7MlF9pRC9pRG9pRB9pRF9pRD9hyF7CkP7SaLKXw6exadGHH2BOSbn2YsNeeRn2LITwHyUxz5Ke3T d9l0sRHflYOs5AsKfJ7pCDnQLECeTEeeLII8mTGcxYJX4B3o/8QGJHAZXAFXw7VprvQwegQ9ih5D n0tPoacRqoQaMZbQJLQJXYJHGBB8wpgwJcyJcYQlMYGwIewIB8KFmE6EE5FENBFHxBOJRAqRRmQQ C4ksYimxnFhB5BKriLVEHrGeKCAKiWKilCgjKogqYjNRQ2wjaokdRCPRROwidhMtxD7iIHGYOEoc I04Qp4gzxDniAnGJuEJcJa4TfxBtxF3iOdFNvCZ6iHf/u6v8f/dc/l+65xLHxCHnj6RziX4Y863/ 0j3lcCaCWcK3RtwBzKDulfl0V80/vUfmy3008Bi4FT79S84+vGUiRKDPOS8OerBeyNFNcHP4CXu4 zRP3xv3xQDwYD4dYlQBRbwG1pvWjQq1jjSzwKN8W838s1KrXyEKtkf2w2H9XnKgVtG+K5z8WajVt ZIFj+ZMC48E3BY752xL4owLjxzcFaunbMh2Vr/3w70oULLP+pCT8qLAGvy0wan1bRn1XxnxbPo1v +HzREf53beJPrk0A7A6Mn5Yw1rtAlu2HnoPy+ekn1JNQVmCrsfUw+6nAarAdMP/Zi/2GHYcZ0GXs BtQfidZ6/93a/D+qPf+T+ofXP4avjrChWE/lPZgtlQvAWCeDsgdqjQMAbZhH4zDa58P2erABtgsA 9fbuUph54WAXeEk9ARa8gvnKa/QOjLfgHWz3gj4UM/th+yMYhO0hnHoDCY4LQZ+j48KwLYJTT01l 4TD/xjnofR7iOMyxcUlcCralcRnYlqXezwHjqgJsK+KqsD0Gh5kbrk69+QPGWG3Y1sF1YFsX14Vt PVwPo95owoNtfZx6E08RXgTbxXgxbJfgJbBdSnNGT3F1xWg0NzqXek4cHY6XLk93pJ5sSHfGaHQX egj1nG56DGzPot4KDGN1GmynU0+Moi+lL4XtbPpvGPWG48OwfYQBkZmBwywSZ2iIzsaAaKwoZHqi cZytGOBs48Csl7Odcxi2j3COwfZxyFQBoQx5Bg2yySGU4UFUFsPFNIZ/44wsg2Ohn36Z+5WDAMRB AOIgYMQvSAHiIABxEIA4CEAcBKDffQDEQQDiIABxEIA4CEAcBCAOAhAHGT5DHDERgJgIQEwEICYC EBMBiIkAxEQAYiIAMRGAmAhATAQgJgIQEwGIiQDERABiIgAxEYCYCEBMBCAmAhATAYiJAMREAGIi ADERgJgIQEwEICYCEBMBiIkAxEQAYiIAMRGAmAhATAQgJgIQEwGIiQDERABiIgAxEYCYCEBMBCAm AhATAYiJAMREAGIiADERgJgIQEwEICYCEBMBiIkAxEQAYiIAMRGAmAhATAQgJgIQEwGIiQDERABi IgAxEYCYCEBMBCAmAhATAYiJAMREAGIiADERgJgIQEwEICYCEBMBiIl8fj7Il6eFyJ+AUgptxeQP kQL5fcKiOtku2b0cIIKXCeRr4aYaHAA+ixQVpusSNFyejpEhwkxdYSAEBGY4ECrzJb1JvRFbFCuU Fymi5RxLzBMLxeZi8RBEI7Bk+J9a3plAqo44mJCU2aRBIW5FVlLs7EzHoLZXM9ppLVFlAmkBKRA6 Sgpo28toOMBxrhE8xUnlne5nm5Mzx6MTnkRyvpwtoMPzSkOnSZssJMzFJ/vyuaQE1WFwmQEhc6Nj 5kQlx8/hi5MEtVGEK+ITER4XPyecr0wqUluYXGn3mLCk+Lnxkckq9vFJCfFJIckx8Buq5GhqP40r 93W/X0xcBM83OSQuQcXL3pZUluXwjfjwn6EhHzaCYNeENPzSJbOa/itnxiFZ1H4WV8jd08uHr0mO He4qz7GPSYiOSFJx8HVUcfT1GGdPOhnzjEhzU56Do5M5fyypNjwixR+OyDciKTUmLIIUgDEjNUy9 dEoAUQpuZ+ICALDGGx8UhHXTajryps0XezRv89oXK/yUqvqWpCzdcPZM8PqL11N4fzD6p15+wRt7 3GzC2+0/yfs+DDg4u/PQ6fXMW06vgpQn4Jd33tP4BQvPPGi57v0Uw4xll+Wnqe0v9v5dTPyD0JRd Mqlznu0//vDgx7raw7Zt285nvFXcudF2y7yxukPb0zlTxjVO97oTPuneaWmdu5ufDFZFGkwVFxXV UG215hjEXX6ftpoWe0dKsjrnsenonmXVDbay8Q/ckyOPDFQkOpl4n50t6x32QTpvbeGMiVp7H8k4 uj7R2zW4cln9x+o4+1ubyQ/aWi+LOHrBi+9I5s5qbkt8GSwVpKOmNZSVEPAqR6SQe0PHF6fBeVQp AKJQI3RSCapUiYB0XKqFU9fk3nNzk/xOTY3JHBWHGwXtPciHlNSE5EiZRVJqxu//8HFKYD636U/t b9JtOGrSJEb6UR8YLeROTiRdy5zLHLPto5OTE8YZGIQlxerHfbaTflh8nEHC7Bhqq0FCUnx4Sljy XIMvZqSsiIwIvVIffoScIsyAE5NOFwFAaBLpRrp87pN4tuWnP5CWlvajPxCR9E+OnExyqfMdK8Qm mZ8PSWN8NyFplJeIrvAQru98LrigJPLTdZ0t6ixefeFU9YV5iezJy9XlfaTD2le7090K3Ir772+J i54saNF+GrN159UH7JuXrs0ba5Yepcjub9MOkt9grmPh79RvktXSYeUU9EvHxxSzKYGuKz3aLKVL 5vpM7MpkjzvCO9xU5MO7Z3Ks5XBAU6dVuaXDazUZZea2QDPNi/k+02sWWvt1Z92/VXgg4mr6u95J Fvtu37tmRqwpXJYz93FiuE/vBNqN4+eS9hgbF0zNufKWsbkr/bh3GYeI75ltaSM/U0Zvq7BPiSJ3 9fl4XPlpZnHTu/cbZr6OuHRp9LJxh1O67XLnPc9J2pnZr7eieY2zX7t+zFkZP/lACGPPIIy1joCx Bol65sqL4zfdRjDc8D2MZfxXwEKNVB2e9PIj94dHqPjGRM2BR/0KZCTf0NjQ0MjIyIICMmPS+EuX zFr8/wLIPn2c9icf/5fA1FkfXKHCea81fz89c2Hdi67UWi1f63FtNguafjF6FGBd7S1t7Fd9oXnl Vusas/s8r+cmMh4v3ee1cVOXN+h1BwZv7bp/XTulQ2GpZtGb97xSW1Ndlk3/wfF7W4JT1sn4TDxt dMys4U3XTzVvbaWDGRFKqmbdenvHsMQbxUvSxixdMt+zRWF1w9vKwZU97EKPsrenmKrt2x4AU+cB A8GsLNrbrSa38gJK+ie2EoI281WSgw+uzUteHn4/9Pex+jo7SuRGE8q/HqlXbya89t9RXBfsujlj 169t5/sSMrXAkj062hcObaXT798TS3QfqAtWW6zddeKY28lOzSVXfjpuz8rH6I2eEYnHPgPTTKiR 4B9NVNoItApM3Bxk5H6zQGTR0BLlg8v6kgxtX5Pe1G4JIYgXVU6kw/f2gR5CdelcHSO+iYWJrnFk SCQZasbnhYQbmfGMQ0KMeCGmsGtmGhpGmhgaGRuHhH8DgGckOk9fbpaZAk6Z6RvJyLRMKmSOJv2H AdCThBBYBiEw2/HfAkDoy9CToRPPIM15RnyeIcknEQQGjYBADxKC4AgInPDXIPBPjp38I7zjX5+j IxlglHW15HhX37hWB3dG6Yvpd2dN3Z1xAS/enxpdurq8mHV0YUXOK/e9+Rb9nHv3i3qmqYsp5C6X Hje/re5806nYvRZ6jgvUJfw0SA5nyPkpTeRhR+Q0vcwSpa3iHxQbkl97xswu3aq+5Obz9WV351a9 nCVfOzG09NX836QWupxz3+nQ1225Ls7uRuf8R7JlRdHRolp9+IaXErS9UT51h580zd18OeycW/uE jjceA0Pl9/bh3PHTVO5Mtq7csdqGb56iNV1oq1Pco7fzMmwOjD7X6Xh1R/u0CW9TTjyKDJt59mrh kmW56mTvS+OLYUqNdlFuxMRD44iXv+aP22LeMXYtY/PySEjb6Psh3lUN4x0zxEhDHrE1/vcwNwOh B1N0rcbP617rhYNRMjSoeP4oUvabjaJf7MLnkbrDuKD+FRd84uMhOEBDxUTGhIUkR6jYpiRHxyfF JGcgMCNJcyOKhlkYGUIwM/zUNaS6fyfO/isE25kUGDyKDD+kVDhTRcVuY6pv7ASFa/Fnz7x6Ontw g4z4vbvjkhfL7zYoM3w2dOeInYfa1SSszSSA+fPpHSquPd3Rte4Tc6sPZExMLHIWuTkw9m5JyvIL 2+Y6LLye1fbmwGvTqlPBjrfq66zuaUVvkN9SnTTX/5VsXseASV5S2bXUGcppjouXmstcnDuVDl0m t3pnjMHNUazBtcna7akGfrelyMD3l3NDB86cmuHE92rR5HbYkBeStMW1xpww87AqM7Rafa7cXHhp sIe/QEuHbrh74nXPsMeXeaGvHK0e1zKwd07lpZem5mj4ds7b5vba6YKZpXlpc1pwtWxp7hmJVf6W h2tFZ9CufEaw6VAjQaQYhQxc6nW2dJIGxQj0+iGSUGClJCYkBD0wm5QUFv2UmkgDITo6MKS/X7bh 1FEGLvE9rmisyL9fMHN8DT9+s+X+Gzxy1JcPSeFCbGUm5oulwHTGHrP9BsuIWsFMG3/NDQ/Hcj/q 3Gf65gd2VJFew1jmSjqTjmX2ZbbZ1n8dy77sToKuTUEQQjG/ESjmQkJQHoFi5v8OkaMmjP3wUf8R v3CABVpMWKjhVN8Vb9NouGtWF2Ewp8a1t2tGyvNJ43nX7etYg2ee8PiVamfnexUsUp1Wa2UwaW9F jX/xg4R9e5rfZ+xyTeqd8NR24en7bNmYM9XFKrwPLK/f/c/xHrhd3p/wuIZTQav2v7dnxcSA1/l2 xa/evHzxIHu0seUe/8JuX7WlOlUCxXXteSJKr9s93ueUn+7kVq/xOKlweVVSvk5iXJH8e8Vu32tR Z8cMBSudq8g5oLkzI8zfocL7XN+Tyin+t4twRweDGT03d7QKDOd8rMrndnTFPN5aoXfwpK44EfHL xra3FR8kNUQjzPNezRvttu/Sff/Oi+nr5YJPmcjMuL1OyfUX3sE6YwfFF+LS8ti02yZTVc8XnBB9 sZTI8YwjuB5W87VdipMuvYk9ffhZQmXA2oAFebllCi60oN4LlVHM5GrT5zwD2ZOPkswke+IbLaME fT47c41kIpSJFbfF74T3xJ93ar0i+yTjd6HmK/16d0evKK1l9nM1beo6+u5vXei0T2Smc8RMG48G u2cez5tSM24wjUXjFBfxR7cTfrcflvc/dBavCy8Y8pLRn3+IrjqvPd9WM+boulX5p3JvFKnu4AQX d1fsyI5ezJ7F25c6G1NaX/daJvOdzGL1luUXZtU48w0Kbz1ItLqO/RTqfOn88lN75D4QSbmHK63q cZtZQzFF69vFa8SbzbwY145akQJhEYjfLz/jt0y0McJvxb8Dv0kz0piEiG1iRFJk1JCPukYk1f37 0v1/hd6bymMb77a5rNWZP1t/1P0D7Q+ObfRW86o7f1vOQ13sxaUtlybVJZMqEl0iV/3ypV3zFOzW 7igIJjVuYrM7Mw88+1lErJcQKuj++ezoM0bqy0pe90Qp6n3MfLxc6eljj8ryw2q+p3M/OF4QvTi9 /mKDnVBF3+bYdVHXtW45+TZkX3yo5aSvWZvtOdmH3UHT65+1ejU5Z9mbQLLkw0/XNjR1qm746f1l 7hvGbt84n2bH1ZtcMDfnSAlN7ciaDR1XhLPcKvqWbJFwlhIVbFryfHL6IChU8mIsxcRJp+e776g5 7fud57epXjndlp92tuju+MXrykPwXUqcxo+9RTvB+TET/Yb66EePqLA+o/d2qJEt/wy9f5gIf4Pe 4iPRm3q5NZlVMAy+WavJrNwfw295WFXIf909BeIZdTLlbmXVdZPmTukR4epH/H+D+n8pdYe6Ft+w 4mgwzcH09pPmurS28xne7qBRPzlxahybu/38wcxVe/RbJSty4kL3BOBnPFS4Xhtvz7NpD9hXP6VQ 8b4SyK7dl/565cVn48GL9oOrmPSTuS7t3b7Stz23r+14nDvr6qLDj/JeCxsspT1Zo6M+JqH/3ceO 9I36nF6R9oT9ch4lv8xmJuXvKbcojuId8yaehgZbyxSsVLFuF5E37DvLd0vlW+kmsU4+TbAaWsrk 3j3CDPml+/oe2S6PlQuPmehOrzzUtX8Byy6z1TdJ9QV5el96RPBUIMuUIi7flCp4a9kSOaWJZ/C4 b2n2WW//zpKEvNhai0mt7zIObZObF6r9sqJI21g4TT70lJVy3GhBN+uE3r4L9k0P+54t2PWgqibZ ZI/HsUQ1SY1UlqVPTmKQk73U/qamBveok5vshhZlqC4qlSYjO+0kp8ufLB2jetH+ie6TfT0uZ/Va bxgumqSh46I+I+ip/8vNdzaWnB4XfyBLM1lY4kWq6qEiwWFNv18bZ1n9XJ4a0jynnLv50Dbnbsn4 gRWGsTsH73qfzFE7FXmgRGmZZDhuxasPXLWnQ/XhrobTYc3pfvRWW32v2ryG6vTtTWXrU+T/WLuM mzLGwLCGMadsas7YQ2Uvl5xWvdal7Hmq8IXrvV4QEf8za8HJmJOP5jzdsuE8X3uIODY1+Ia7QvmN Dwal1vqTZWaf4lYO8AVCcAoLbcEBIOF0+/v48o8vm3y9iFyW9TtF1z75ryiNzx55hRqewNcei0+Q I/dKU2Tw8xeF+BCU1gzKq9VfT8jalfab4YniGzpt7rsayfARX2Hz/Um/Mp1FWpg7FoOFYUlYPLrI HYklYyqYH5aBJcBeFNweAlvRWEa5xiL1P52syRkJ8VFJIQnRGSrfBRUhAcCcfpvBFfbzdx24M0ps rxHe2qW7Jey8fv5H8XTNJ9JGzan6zsmPfHdc7pmjJiuR3Tuz86ljn+TsYO7Hh/wjWYHcevkWoyxJ TOl2ZQ9bu9Dwkv+NoOxTb5hHBdxEu5O5mTvSQjfdMrESiZ37681V849U2L+0CmYJFML83u3mx/xx v2aME9MpXCZn1IHdlrs4V1b4aVanVTYKN5xPMu3iXFgW4db08IpIcOfp9P35nHCe6h+eTtEW/ekS 263l/I9JRHVEzsxsLr/UyKmwXDFFyrAnbmnCeqMdpamcO84OJ8PTZ8Y/957Ossgf5TxFK7By4uZr D1p9z4Zffh51b0FqwZh5xYqCAx/PLUssF+BapABX/2ojYb4Al4abJJBX/vK3sYAfr0iM8MlppNxI l2R9XVkB8I9/2UPniw1fZeOb8c1MzI3Mg/7BI08mP4tsjs9TlHe9q3fkkmFEWFOk6Xd4TflKVlH5 uU10fUsH850mo1v2rq7LGmQ2qg70dqw7Zn3kdsQyhTF3tBTI0ilzW6MyKq/+4VnXmRiT2HDsoHbS A7GHi05DVS27JpByPLxSoebARdXfwq+3yOlmtzV2lC7WubzsgUVhg0jEu8Almjc+yJo8Kn0ZN5Y5 Wa21Za7Uu+64Fp5L+Zn0m6O91Pbn95UoPShOLGUN+XsfKVZ4wFjIZEfmLuwpbak6uvmDjeySiBnH LVqFVJ8XT7QIEMs8aMXTOSLumHbw4xKn32N0cyLXKEj0ehWvPOK89wrf1Kkp0q1o7BJXQeDa0gWP 38Q+FXujGb2mWidq50bfk877B85mxDDE18xn7rbJD1fxxv4PUcAz6Q0KZW5kc3RyZWFtDQplbmRv YmoNCjgyNSAwIG9iag0KWyAwWyA1MDddICAzWyAyMjYgNTc5XSAgMTdbIDU0NCA1MzNdICAyNFsg NjE1XSAgMjhbIDQ4OF0gIDM4WyA0NTkgNjMxXSAgNDdbIDI1Ml0gIDYwWyA1MjBdICA2OFsgODU1 IDY0Nl0gIDc1WyA2NjJdICA4N1sgNTE3XSAgOTBbIDU0M10gIDk0WyA0NTldICAxMDBbIDQ4N10g IDEwNFsgNjQyXSAgMTE1WyA1NjcgODkwXSAgMTIyWyA0ODddICAyNThbIDQ3OV0gIDI3MVsgNTI1 IDQyM10gIDI4MlsgNTI1XSAgMjg2WyA0OThdICAyOTZbIDMwNV0gIDMzNlsgNDcxXSAgMzQ2WyA1 MjVdICAzNDlbIDIzMF0gIDM2NFsgNDU1XSAgMzY3WyAyMzBdICAzNzNbIDc5OSA1MjVdICAzODFb IDUyN10gIDM5M1sgNTI1XSAgMzk1WyA1MjUgMzQ5XSAgNDAwWyAzOTFdICA0MTBbIDMzNV0gIDQz N1sgNTI1XSAgNDQ4WyA0NTIgNzE1XSAgNDU0WyA0MzMgNDUzXSAgNDYwWyAzOTVdICA2MjZbIDU2 N10gIDYyOFsgNTMxXSAgNjMwWyA0NDYgNTIzXSAgODQ1WyA0NjNdICA4NTRbIDI2OCAyNjggMjUy XSAgODU5WyAyNTBdICA4NzJbIDUxMiA1MTJdICA4NzZbIDM4Nl0gIDg4MlsgMzA2XSAgODkwWyA0 OThdICA4OTRbIDMwMyAzMDNdICA5MTBbIDQ5OF0gIDEwMDRbIDUwNyA1MDcgNTA3IDUwNyA1MDcg NTA3IDUwNyA1MDcgNTA3XSAgMTA4OVsgNDk4XSBdIA0KZW5kb2JqDQo4MjYgMCBvYmoNClsgMjI2 IDAgMCAwIDAgMCAwIDAgMzAzIDMwMyA0OTggMCAwIDMwNiAyNTIgMzg2IDUwNyA1MDcgNTA3IDUw NyA1MDcgNTA3IDUwNyA1MDcgNTA3IDAgMjY4IDI2OCAwIDQ5OCAwIDQ2MyAwIDU3OSA1NDQgNTMz IDYxNSA0ODggNDU5IDYzMSAwIDI1MiAwIDUyMCAwIDg1NSA2NDYgNjYyIDUxNyAwIDU0MyA0NTkg NDg3IDY0MiA1NjcgODkwIDAgNDg3IDAgMCAwIDAgMCA0OTggMCA0NzkgNTI1IDQyMyA1MjUgNDk4 IDMwNSA0NzEgNTI1IDIzMCAwIDQ1NSAyMzAgNzk5IDUyNSA1MjcgNTI1IDUyNSAzNDkgMzkxIDMz NSA1MjUgNDUyIDcxNSA0MzMgNDUzIDM5NSAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCA1MTIgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgNTEyXSANCmVuZG9iag0K ODI3IDAgb2JqDQo8PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDIzND4+DQpzdHJlYW0NCnic XZBNasQwDIX3PoWW08XgxF20i2BopxSy6A9NewDHVlJDYxvFWeT2lT3DFCqw4aH3iSfJU//UB59B vlO0A2aYfHCEa9zIIow4+yDaBpy3+aLqbxeThGR42NeMSx+mKLoO5Ac310w7HB5cHPFGyDdySD7M cPg6DayHLaUfXDBkaITW4HDiQS8mvZoFQVbs2Dvu+7wfmflzfO4JQVXdnsPY6HBNxiKZMKPoGi4N 3TOXFhjcv746U+Nkvw0V9/0du1WjlC7qsa2qva3sxVWmlGWvEe1GxOnqRWqsEsgHvB4txVSo8n4B ilBx3w0KZW5kc3RyZWFtDQplbmRvYmoNCjgyOCAwIG9iag0KPDwvRmlsdGVyL0ZsYXRlRGVjb2Rl L0xlbmd0aCA0MTEyMC9MZW5ndGgxIDE3NzEzNj4+DQpzdHJlYW0NCnic7J0JYBRF2vefqu6eeyYz IXeGTCdDomSAQA6OEJPJCRiRIwETIJAAkYAiRwDxJKwiGg/UVRZwV7zFk0mC7CToworrKnKpiLdE QPFYBH09OdLfUz1DJO8mS0aW5POlfkX96+5+urq6pirJNEAAIBxFhLl5RSOGLb16bBXQ1SEAUR8N y8svuO34nSOA7LwegL48bPSoouvGP7MWyJtugGejhhWNy/kkp3wM0BsmAUSvuriouGB24kwN0FXf 41FjLikuGt47xHILQPxBAPOUUUVJydbkG1YDkJ+xvHx07iXFJ6/LzMXj52F64Pi8kSWj7531A0AK pm33TZtdMfepgRcfAbKsGdu8PG3RAvlh+7tfA1m9B0BTfPncGbO3X1O6BsjyxzB91YyK6rkQAXo8 XioezzrjymsuT/ru3e1AHroQQPdV1fTZi7868eZOgLz3gGTrqiorph9Ml77FY1/Pzl+FGcEpZmxL NmC6V9XsBYtzIim79hIA5x1XzplWUbJ1wodAnmL9451dsXhu8FyTGeu/h/XlqypmV44feSQdyNbt AIbhc+dUL1ASYSXaE8LK586vnBu/d+RmIHdh2vg3YH0vpaQcCfn60JSgjB900TpgPHLggkQW7lpY 4Ty2/uQMK+hMmNSr9RkYajNbLoVcKxxbf+xaK7SW+BGvYDnmiRADVM2gYIUkGI8lz+J5GYJwK7kb JNBJa6QUPEC0LxTehMtpsE6iRo1IGWIzJCpbYHGuagFSPDJXBjfEynHS2y1jSIo2k9S7gSiKgkdP kDaxKwVR4zeJDoFToYe+C5Phd4LmaVh1ro4tVkPBb2lHn4Zl/21bugO6A2Z3tw2dQaxWTnS3DRwO h8PhcDhdBVmnNHW3DZ1Fiv792MrhcDjdCQGlSYfeCnze5HA4HA6Hw+FwOBwOh8P5v4F5opYQeEbT +RYL2892tkkFcLyAWwR+bA6nFXLmKr+hKucMEMJ7k8PhcDgczvmBAAJhSIJAKK6BIqR/GbfAzzoF dKBTWkAPeuUkGMCAagQjqglMqGYwo1pUDQILqhWCUG2oJyAYbKg9IBg1BHqghqIehzAIQQ2HUNQI 1GMQCeEYj4JIjEdDFKpd1Z4QjRoDduUXcKgqQ0/UWHCgxoGM6kT9GXpBLGo8xKEmoP4EF4AT9ULo hdobElATVXXBBcqP0AcuRO2raj9IRE0CF2p/6Is6APUHSIZ+qCmQhJoK/ZXvIU3VgTAAdRCkoA6G VOV/YIiq6ZCGOlTVDBiIehEMQs2EwahZMET5DtyQjpoNQ1FzIAM1F/VbyIOLUPMhE7UAspSjMAzc qMMhG3UE5KBerGoh5KJeAnmoI6FAOQKXqjoKhqGOhuGoY2CE8g2MVbUILkYthkLlMIyDkajjVb0M LkUtgVHKv6AURqNOQD0ME2EMxidBEWoZFKNOVnUKjFO+hnIYj1oBl6FORf0KpkEp6nSYgFoJE1Ev h0nKlzBD1SooQ50Jk5UvYBaUY/wKVa+ECtTZMBXzr4JpqHNUnQvTlUMwDypR58MM1GpVF0CV8jlu 62eiLoJZqFejfgaL4QrUa2A26rVwFep1ql4Pc1BvgLmoN8I85SAsUbUGqlGXwgLUP8BC5QDcBItQ b1Z1GVyt7IdbYDHqcrgG9Va4FvU2uE75FGrhetTb4QbMuQP1U7gTbkS9C5agroClqHejNsM98AfU e+Em1D/Czco+uE/V+2EZ6kpYjvonuBVLV6Hug9VwG+oaqFU+gQfgdtQ/wx2of1H1QbgLdS2sQH0I 7kZ9GPVjeATuQX0U7kV9DP6I+jjcp3wET8D9yofwJKxEXQd/Qn1K1adhFeozsBr1WXgA9TlVn4c/ o66Hv6B64EHUOtQPoB7WojbAQ6gb4BHlfXgBHlXeg42q/hUeQ/XC46iN8ARqk6qbYB3qi/CU8i68 BE+j/k3VzfAM6hZ4FvXv8Bzqy/A86lZYr+yFV8CD+g+oU96BV1X9J9SjvgYNyh54HTagboMXUN+A jajb4a+oO8CLuhMaUXepuhuaUN+EF1HfgpeUt+Ft1LdgD/wN9R3YjLoXtihvwruqvgcvo74PW1E/ gFdQP1T1I/gH6sfwKuon8E9lN+xTtRleV3bBp7ANdT+8gXpA1YOwHfUz2IH6OexEPQS7lZ3whapf wpuoX8Fbyg74Gt5G/Zeqh2EP6jewV9kOR+Bd1KOqfgvvoX4H76P+D3yA+r2qP8BHyhvwI3yM+hN8 gvoz6jb4BfahHoNm1OPwKeoJVU/CAeV1aIGDqAp8hsrn9HM/p3/7O5/Tv+70nP5lB3P6l/82p3/R wZx+6N/m9M87MacfbJ3T57eZ0w90MKcfUOf0A/82p+9X5/T9p83p+9U5fb86p+8/bU7/9N/m9GZ1 Tm9W5/Tm3+Gc/n43zel7+JzO5/Tf3Zz+e1+n/37n9I7W6XxO53N6+3P6a/8H5nTAGRfM5cYwHQhA xc7/KEfXfnbb30cHcLyAW/DffHPOAtr5qtpzZ8V5BzGGdbcJHA6Hw+FwOF2BKULPfvkdwH5I3352 27Xoudxf8VUv5ywIYH/VwY8SOL8BaorobhM4HA6Hw+FwugJzlAG3NoLU+RbG9rPPdn/VeQv4/opz Fgidr8r3V/89qDmqu03gcDgcDofD6QqCYoy4GZLOfn/Vdi0awPECbsFXvZyzIID9leHcWXHeQYNi utsEDofD4XA4nK7AKpvY/iqA7zSZ289u+2eDge+vOm9BB3+gyOF0Br6/6haoVe5uEzgcDofD4XC6 AlucGTdD//X91bn8nx34/opzFgTwp6sd/KqW8xugtrjuNoHD4XA4HA6nK+iRYMH9lSaA7zQFtZ/d di0a+P6q8xbwVS/nLAhgf2U6d1acd9AeCd1tAofD4XA4HE5XEJpoxc1QIPsrW/vZbXc9gb+DovMt +KqXcxYEsL/q4Fe1nN+AEJrY3SZwOBwOh8PhdAUR/YNxa6ML4G/uerSfbWmTCvwdFJ1vwVe9nLMg gK8GdvCrWs5vQIjo390mcDgcDofD4XQF0QND2H8dH8A3+cPbz267Fg38O1Kdb8FXvZyzIIA/Xe3g V7Wc34AQPbC7TeBwOBwOh8PpCnqmh+H+Sn/2+ytrm1Tgb17rfAvrGWtwOB0SwP6qg1/Vcn4DYs/0 7jaBw+FwOBwOpyuQ3RGgB2MA74yIbj+77c/6A38HRedbBAd8bA6nlQC+Ghhy7qw47xBld3ebwOFw OBwOh9MVxOZEsv1VAO+M6GB/1XbXE/j+qvMW8P0V5ywIYH8Veu6sOO8QY3O62wQOh8PhcDicriD+ YjsYwBjAOyMc7We3XYsG/o6/zlvAV72csyCAV69EnDsrzjuk+Iu72wQOh8PhcDicriCxWMbNkCWA d0Y4289u+7UsS/uV/gOdt6CDL4BxOJ0hgFevdPCrWs5vQEos7m4TOBwOh8PhcLqCfpOcYAaLtfMt 4tvPjmqTCvwdf523IOrMVTicjgjg1Ss9z50V5x2afpO62wQOh8PhcDicriB5egJYwBrAd5p6t59t b5MK/M3WnbfAfuYqHE5HBLC/ks+ZEecfmuTp3W0Ch8PhcDgcTlcw8MreEAS2AN5E3bf97Jg2qcDf QdF5C2LOXIXD6YgAXr0Sd+6sOO/QDryyu03gcDgcDofD6QrSF/QBK/QI4J0RSe1ny21Sgf/PQZ1/ F7Z8xhocTocE8OqVDv4UlvMb0KYv6G4TOBwOh8PhcLqC3FuScTMUFsCb0ga1n912LRoWsCGdf2sF X/VyzoIAXr3iOndWnHfocm/pbhM4HA6Hw+FwuoLClYMhFMIDeFPaRe1nJ7ZJRQZsSOffWpF45ioc TkdYO1+1/7my4TxEX7iyu03gcDgcDofD6QqKnsiEcIgM4E1p+e1n92uTCvwdFJ23oN+Zq3A4HRHA q1fSzp0V5x2Goie62wQOh8PhcDicrmCSNx+iICq28y0K289OaZPq4D8h/g/Ina6ZcuYqHE5HBPDV wKHnzorzDtMkb3ebwOFwOBwOh9MVTH+tEOxg79X5FkXtZw9ukwpgv+ang/+2+Ixn4nACIoBXubjP mRHnH+bpr3W3CRwOh8PhcDhdhOD3diBq+kpMYYzMBxFGA/vCilUtj4ORMB3ma9xyDzlOUYDtotrk KAd87oSn+cHmSv/R2kA00JpNKAWg/7sCelHqvO39288e1iY1rvPHO8XyzletC/TY//VedeeOK852 Z2VelDE0fcjgQWmpKckD+if169vHldj7wgsS4ns542JlR0xPe3RUZER4WGhIj2CbNchiNhkNep1W I4kCJdAn31lQLnsSyj1ignP48L4s7azAjIrTMso9MmYVtK3jkcvVanLbmm6sefn/qun21XS31iRW OQMy+vaR852yZ0eeU/aSCWNKMH5nnrNU9hxW4yPV+N1q3Izx2FhsIOdHVOXJHlIu53sKFlXV5pfn 4eHqjIZcZ26loW8fqDMYMWrEmCfcObeOhGcSNULD89PrKOjMaJQnypmX74l05jELPEJ8fsV0z+gx Jfl50bGxpX37eEjuNOdUDzhzPEEutQrkqqfxaHI9WvU08kx2NXC7XNdnS+0dXitMLXeZpjunV0wq 8QgVpewcNheeN88Tfu3BiF+TePDg3JLlp5dGC7X5ETNllqytXS57HhpTcnppLNPSUjwGtqXxBeW1 BXjqO7ATC4tkPBtdVlriIcvwlDK7EnZVvuurdOaznPJZskfvzHFW1c4qx1sTVeuBsdfE1kdFuRuV ZojKl2uLS5yxnqxoZ2lFnr0uBGrHXtMQ6ZYj25b07VNntfk6ts4S5I+YzKdHKlvL1JhancUKx7b2 LGEWOUfggPDI02S0pMSJ1zSYSeVgqJ02GKshpQRbeabjHZnp0eeW11rTWT5r75HirU659gfAEeA8 /K+2ORX+HE289QdgUTZOWocalp+Ke1wuT2IiGyLaXLynaGOmmk7r22eRlzqdc60yBth9MBr7tqI0 PQm7PzaW3eDbvW6YiglPzZgSX1qGqdH14E5ylXpoOSvZcqokdBwrqTlV0tq83IkjeYP6SId6dAmt /4KsYT3yq9I9JOw/FFf6yguLnIVjJpTI+bXl/r4tLG6T8pUPbi3zxzw9ckuEaOqP0WhBLcVBOam1 MkuUmDxiPP7TqIN6ulerw1Gp5hC5wGMtH+7TUkNsbCcbeZWjrJUa/NrMb6Yn3dU2PbRNuo15ploB DRYTaGHxhNpaQ5syHGq+E47wBzjiobgkVs71wDh8MuPxn1fZMpj50miPG7ssl1XA8efL8ifbVIz2 x0sRNjr79inAia62tsApF9SW11Z4lZqpTtnqrG2kL9OXa+fml58aOF6l6fZoT8EdpdhXVSQdHwoK OXVOcuuYOje5tWhCSaMVQL61uKSeEppbnlNa1wvLShplnNzVXMpyWSZLyCwBhQQvsp7q1PrRjW6A GrVUVDPU9DQvATVPdyqPwDQv9eVZT+VRzBN9eW41j8HmmNziktNHj/pIlvYFaIRi4cKGhAjH7heF 3tCMngq96109HY3CBULP+qEOt1dwNgSHJgdl9xVkPGeSqjLqHPTr0W9GL8IUIQbzrahL0NegX49+ M/rd6HGtgMpKZfRz0K9F38xKhJ6CvV52WLMvECKxbSReQ5AQDkfQK+gFcKAmoR+Ffgr6FejXoteo 9VjOHPRL0G9Gf1QtcQvh9femoO3h9berQcOsK5PVZIUvOalMTTZcVuoLR47xhXkjfNXSfdUGpPqy ++X4wgv6+MLg+OQaFhrMyVuyw4QwvMgwNHwuKqGvQBAh4ICHhFDwoKeCxp/jFoIbeiUkr90siEAE KhBcHDiULQKpN9uSsw1UoUcgGBz0G3rYV0IPN1hsyWuzL6b7YT36zegFuh/dp/RTWEKbWZ+jZqFf i34z+l3oj6DX0GZ0+9B9Qj+BIPoxJKHPQj8F/Vr0m9EfQa+lH6Na6UdsflKVxbPQU/oRqpV+iJf1 IWoQ/QBjH9AP0LS36wcNSW5UI64kf8QR74+ER/sjwWHJXvpW/S+9cUQl4J3GEbVJiINMSBHi6uMH OLxCRH3GTIeXHmiQXY6HsvvTPeBBzxaUe/DMe0BGPxp9Ofq56DUY24uxvVCD/m70D6H3oMdRhmpF L9Nt6Lej3wv90bvRj0avo7vr8TReuqs+IceRHUZ30n9COPb4DvqaGm6nr6rhG/Qfavg6hjEYbqOv 1sc4INuI5YBtrBhaMUzCcon+vaFXsEPJttHN2HcO1CT0WehHoZ+CfgV6Dd1M4+qnO4LxIJtgmw6w Zj18qYZPwCM6cM9yuBNycQDKTBLSL8IYylp5bQJ1J6xcjUkmCXfdizEmCTffgTEmCdcuxRiThCsX YYxJwvRZGGOSMGEKxpgkjCrGGIqXPvjXXhc4Bo26gsjZQfRq7KWrsZeuxl66GkR6NXPwi8hse6A+ MRF7bI3b1TvRUdNEal4kNWNJzSOkppLU3EhqlpKaDFIzmdS4SI2d1MSQGjep2UQGY1fUEPeGNskh 7ghSs43UPEdqqklNAqmJJzW9SI1MBrm9NLZ+RIoa5KtBQzZ76DC8KBNnnyAaiz0ai2M+FueEzai7 0Ctqyo2V5Dhf5cgYFsY1JGb50v3Sk+dkD6dbseFWvA1bYR96EW/QVhxGW/EgW/EAQahZ6Keg34L+ CHoFvQZrx6HhK1QNQk1Cn4V+Cvol6I+g16jmHEFPYY7fxPWqYUl+o0exFN2KLg5dLI1197TarS7r cGGFnQTFkFExSgwdBGHsVYLBNp3NS8wbfzL//JMZ9Nl6ehddAT3xRtztD1fU/9LT4SWr6hM2ObJD yZ8gRsRRR4ZAAonHcDBUq+k0sOtYmAp2+gyGyfX28dgsqD6hj6OJWFirjY5f7AcdX9q9FKNf2Dc5 3pW9Iql3vIM5z2x07LHf5ng9yavDnBcTvASDJlmt2mgf7Hhum1p1KRasqXfcyIKNjhvswxxX2NWC Sl/B5GpMuYMcYxMmOIbj8fLsUx3uajzmRkeWfbIjw1crjbXZ6OiPJrh80UQ0trddPakzRj3guEFe UuXuo12pLdGO0g7UJmv7aGO1Dm1PbbQ2RBess+osOpPOoNPpNDpRR3WgC/EqzW4X24mGaKws0IhM RTVupUzZppVNekRH4WLw9BAKaWFRDin0bJkGhVNlz49FTi8x4GpFcuYQT3AhFBbneAa7Cr1aZaxn kKvQox09saSOkLtKMddDb8VP6eISL1FY1rJoti9oBEJsy+6MZuGFy+4sLYWIsEVZEVnBmbYhBXnt SLlfXb8S0Sbe07OysKjE83TPUk8yiyg9Sws9f2Qbh0byHTman9dIvmVBaUmjkEm+yx/L8oXMvNLS Qi8Zr9YDmXyL9XDEfKvW0+EHM6sHsi7GV2+Nr148tsd6vViA9fR6iFfrxev1aj2RsHp11b3y8+p6 9VLrhMtQrdapDpdPr7MtHuvEx6t1wmpgm1pnW1gNq+PJVKvY7Vglxq5WIVFgV6vYSZRaZfyvVZL8 VW5rrXKbeiaB/FrH7qtjbj5Vx9yMdVydpTLH5SINQ0unTWKbrnJnfiX6cs/ti6oiPDVTZbluWql/ N5ZQPnVaFQsrKj2lzso8zzRnnlw3dFI7xZNY8VBnXh1Myi8uqZvkrsyrH+oemu+syCttGDY6dVCb c93Weq7U0e0cbDQ7WCo717BB7RQPYsXD2LkGsXMNYuca5h6mngvUMT66pE4HOaW4xlfDBmo04Hgt j44tzQmzzs1UB+/Q2Igbo5twtbIOjLjlMeH22YyeFfXN7pvNivCZYkUWtrP2F0XcODQ2uoms8xdZ MdvmzAHXgoXVCyEif2ae7181glkLFrIO96mruiOwLB83yXnVCwAKPYlFhZ4sXM3WabWYW84uyZN+ Ks9ozMe1vS+zH2ams0xBaK3I8jJYnl7vr/jv93+hP8xlT0EN3dRA3DFkAVSXCp6YwmKKU0GxfwvT hGsp9vFQXYoXWE1cpPrUMfxmu1zgSwO75lN+wUJ/zN8XC/yhryU2qT7VJa2wznK19tgCPCBITRCJ Pkp6EiLFBIgAUA6h/4KFLTOVL1g5C+lXONF5/R5gHTxHZsJzsBleJkex1XrcCGwAtgTKgz/D9XAf LMePtQmYcxuMRSdh/n0kUtkASfAwfrA9DDuw7mVwIzRBGIlQvoQlsEx4G1stAzPEQTaMhjlwJ7lE WQiTYJ94EwyCS+AqmEtqlBLlLuVe5TF4HBqF15STYIQomIZuh/KN9J7yEfTFFvfDathH7tW/AG48 Sw3W/AvMhzVCmUiUGcoxtCAWrkYbRBgJO8gW6sKjV8IhEkGuF3LxKI8qHuUVrGWHMqiCNdBE0sgw GitNUkYqOyAMz7EYj7oa6mEjOi+8BB8Qk3RUeUw5CpHQB0bg9WyAnWSL0HJyaUsW9piEvdQbhmDJ HPgb/BN2Eyf5O50jmaRkyS1dq+yBEBgA49DaJ7Hl5+QneiO6JcKrYoGSAxbsl3tYb8M/4FMSRZLI KDKe9qZz6IPCfNDhGQegmw4zsb9X4dE/wWG0kZroLuFR8RnxuKZnS7NiwTuSAA/AX+DvxIxXKpNq 8geylxyguXQKfYDuF+4TnxLf0lbgVU+G2XAnPAM/kWAymIwhE0kVuZ4sJ/eQ1WQH2U2+oNm0mF5B jwhVwjzhJTEHXZFYLd4k3SLdrvmipaTllZY3W35SkpVbYAyOh6Vo/f3wIF5ZI+yC99Htg/1EIkZi QSeTWDKOXIfuRnIneYSsI0+RDXiW3WQ/+RI/kn4gxyl+0lINjcbFD1sCOel8XGHeR/9Md6HbTf9F fxHChTjBJaQJGUKpMAetWi7cje4F4VMxStwlKtjPydJKaa20TnpGelk6qjFp/4Cf8dtPPHoy8eQn LdBya8vKlvqWDcqnEIr3ED89cMOVgdZXoJuF93sljrj18DYxYd9FkUSSSS7BnplCZpF5ZDH25M1k DXlctf158iL20rvkCNpspnbV5n40jebQUegm00o6Dxdj99INdC89JmgFoxAkhAqJwjChTKgUFgjX CCsFj7Bd+FjYL/wonECniAbRIcaJCaJLHCZOEReKD4qHxEPSJOkN6TONQTNbc4vGq/kWVzWZ2tHa Mdoy7QrtRu0eXTmOzq3wAvz19J8Rk2ZhqZAvvAB30RQxErcwO3E8T4HpwkiKI5WuI7fSG8gG2kta rBlKh5JL4aiYgH39Kl1Lf6RDhZGkkBTBLDrAdzRNiPg0BhniVjgsvojXthOPvFhjIjfSIxoT1OMa aQie8x9Cf9ElvAEfCPuIVnwYPhQNJJwcpk8Ko3EUvCRmSiUQK/wZnhfmkRvgBZoPYDiuuwPH8aXk aZwXikky+VlQcBl8KY6iQcIBuAmuoO/BYXyOb4U/keniDLgLUsj1cAiewKeit3SVJlETSl6nM8Va 2oNsACo+hVc3hPQighQCN5MyYY3mCH0fFsIu0QCfCM+i9bvo88JI8ag0llThE3AD3ALzlKVwjVQi vkVmgEDGQ7zYjLPb9UKyGIvhEpxVJuGcthGf7iacB7KFkZgTgSPnEhwX43CGWINuFc4TIo6gmfiM X4az2E7YoCmmXpghWQjOOgDiGy1jYYLyBKxWZsBVyr3QF+eD5cr1eMR18BmsgHVkWct1MBe3ku/j s32JVEB3SQVKX1pL36dFdGXb+4u9HU8i4Ct0z2MiU9oEteK7UARZyh3KOzi6L8QZdjVMxQXrQbzK b/AMw4UtkNJyKa1TCoS5eL37YIzypOIgBqhSroRR8CI8rpWgQuvCe+whb+H1XgeVdKyyQKhsmYn9 sAJ7wY29tRDnn9twNaxOeBL7XZIWINYWa4tHwZUznJCFLSfcEhwHWdzCfufjQWtX4KeMBHq4oU7D ftBUT0Hy0vVuoy5DY9CnixmadEKSDp48CFknP8+KrrOrpQlYSkFjML4h6NOlwWIGDMZ6QgalMiHk DYPBuDT24VW48r3U+n1ZxkjrYetBPMRB6zeQlTXSevJzXPk2SLgwIdYMa0Zp6YD+PQRbik0Q0lJC Dw3al/roLnKloCf5LZtO/NRy344dzNbJQgO9WrXVCAsb8SPy54a4+FTJq/zsjkvonWrUGLCTcO8k SRrjN3qdThAoaHUZhiB9jZ7qcaXgDjUHpeo/IYKYQYnbbEslkaZ5T0YwE10ZI09mWE+6yjJOZkBW BjPqZAYKsQUPGcL8gP7E5erBzBNSVL07eUffjwfs6C80kPCjR1u+9CnbjqzCpzII7bTSg3WU9Wgj 6JQf3UaTiY7TWcw2Oo56lW82sAga/437QhYzBbNiKcgk6IFQnd5oAZ2eGowaq5WOM1rNZlSvcmwj q2W0glf5fAMrwcjPG4KC1MiJDawWJOHiYocq2NVbtlh3795iCw4f4nKpl+CCaN9tdju0stGoGadR VVBVVFVSVedVvnM7WYya1BoakwnjFqZ6E1ODqlpmgdmsNvjZ7WCxBImYZENwapAqkkkAYjGCTkeo gV04O5oaUQ+yiY6HYOyr8W4zqCcC9URw6rBA2LV8n/Q9mp6VkZWR4buYMt/VnLY+i3YvARqkC6HR OnGR6RbTa9iVphGmEUFCbzHe3MdSIkwUF5kXW5abdUYq6YaYB1pG0UIhT+vWjTTnWAyr6GphpXal bp3wpFYTTIMslv4SDZEkqjOZzf0lHUZ1prFBY4mbUKrT6Q1Go9lssVjZfSoPrgmmwU10HZjJgHpJ 1nnJALfBpDfIbtMSIzE24UVaiBFLqJcY3fogAnLQXCuxeun4v8pSuVQjCfhYrWuwDS2NcEXiI4MP TQSOyMNRkdbDGI9qTRwsg4isrAx1iJ5yUdbDh5dL/VzLb3hleb8IFgzojwtlIy6UY3Ch/BKYlOM4 BvcCVfYOHjy4FDfIJiy7EMsawaz8XGcxsFx1sWxW9myMHWLpEzvE7MXooCGW5EFq9IW+mNt3iK/L S+fPK4N5ZaSstDQFp5aw8IGDSKzNacNllW0VzvET+4dFpuGns7SpZfz6lhKp6fh39wwf/YBw4liB +MbxNLH5uIxPdIHyhbAPnxQb9CTj3I8ZqGiON6ea88xSWkia/TJabBgbUmSfQadLlfppIeX2LY49 0js9Po78rMdnIUfCv478rGezQ3GEORyuqIywjKjCqLmOux3afrSXuV9YOk0zF9J8c0HICPtlhvHm GebPNIfCjpHvLVYSKliM1iCIthu1NjCE2gVjRAqBeFtQvNW620asNret3FZjEx1uo5GOc7jZc2UL Zs+bzat877axB86msVhQI9Qy9qwY2eC1WaxWDUv7RreNPRM5bBjbFgT32qzdpd2nVbSiQ5ulHaUV tDHs8NoI9kxrY9iBtOoToDWxFtoo9fGKjEkd7ZuiVMrmjTx88tc9Rdk8HBbWkxk4OR/GpwO9jU1X ePvLCLtDsWkaZ1xCQlpq8MCU5LBwnGJJSFhK8sC01ARnnEYYXPnKkncWztpzU/nKpIaT8rMLFz2+ 7rrFD9/y4B3HH11LhNox2dRyrIAGb9/291c/2P4Km92W4VT8qpiJ9+x199CkHsQqEqeYKubiAvRy cYGo0dt0ep3e3MOmN4OgI0a7Rks0YNBfeLeO6OLkHqQHjbPFE2DzsTVlYOpR9gMcGXZDM34+sYf+ 1LTmtrEOBpH1DmhYT6lzHOtfYHchLCiodbLQqTPFpcHDXolwWX/8tXNcGScPWsu+n4/dk5V12IZT +ZAh6pQO1teXW9THpGw+KUuxpYQOxA4K17Je0WpCbcseyZyZNXFyZk7O0MkhMWLCw/OGpz95wbCs 8vkn97BemE120ypcTxnB0YgLkyK3Ra/ZLkN/HNQLTZc9yawoOwxJh/FzLZX1fGgIuw+z76+aef/9 M6vupztn3nffTIzjsZQTZJs4h07ET+sYdxBJAxolsV/SRIoN17Ibf7DM+jkkjcRDCWmxoaJYTbbd cw9r14TrjHXkbWwX8RJQegQ/N77Gm3O0TiJJVjYgcIqMTYsl61qCyTck/nl/Gyn6zG2k6GNrpYpf 2xDoqM1nv54HWppIwa9tdJ1oo4OfmnSntbF2oo0VjjRZfW0YoX53Be7PzoHDfVYATuj3H1xdF7h3 z4H7H+6444677nCi+Zy4C7jj7v9Dly1OFBdyxx133HHHHXfccccdd9xxxx133HH3e3cAkE7/Br5v ewPMUlVQ/5jdoKZYnIIFvoJT3wqfDNv9cfG0OhJEkER/XAMWkuOPa2Fqax0d9Ff/K3kW10MtGe2P m+nT5IPWbzGniTf74wQksdEfp6AVf/HHBUgSv/LHxdPqSGCSIv1xDWileH9cCwNa6+ggQrzdH9dD vtTHHzeTcdI89i13UcBzmTSvqnEJ41bNXjWuUfM/V+NaNf87Na77f7x9DXhUV7X2OufMORmYk0BT BEr5mcaYBgppCJTSyIcUIyKGlKZxzJzmS/OfSQj5mZz5ycwwmYm5iNxAMSJWRERujDQXEXMjRoyU IkXAWilpkRbEQpE/kVJKKaXI3HfvMxOmtfX7Hr/7fJ3n3fs9+6y19tprrb3PGRMi4wki58OiMTS4 EUODGzE0uBFDg5viZIwYGtyIocGNGBrciKHBjRga3Igh48Pj/Ldw35I5V+PGkxhPSOF8JPMtIYvz u8GTE+ZxPipO/lN8vQYfHTd+D9fN5/xePpdhc0KczKQ4nsrlSzifwnk959M4DzBujvPfHDeXGjeu xtbyLFkpCxGZTjPBCshBlegXUwPVAzq1UCMf+TyunOCsLcV4DZfIwJ1HqQ4fK+VjrBr6OjXzq0r0 lZB2o62A5KPgNdBlsjVcphTQub0KyCxD76SlGGugqn/Jl49KZn9oTuZRNbnA2TzZZOPeNUe1rfQQ LEynWWDpsFRD5bjbgPvMG50mf6w8i9ydORbD53/0tmCI5XB/PZCuhydWegyWq/hM7O407mMDKrWG 28/jdxwYYR4301SMLeHrdfI7NTx+T6B1Qb4i6p0Va3iEZsMzOzRduGZxbUHv4vlgEXdE41/FfdX5 WAPaCj7eyOdr4flhdq0YcXKfmGR5VKcyel3KLTXy2ZdBSuf3mFYZt6FHs1gXXWf9kBeGRswPZ5xs I498BTwu53MY8fBwv1lEPn4NxjWTLcdsLh6RCl6hH40E06jjLB3yk9Gz6iuL+v3xtuv/H9Z+x3rF UO6dfH/Echmr4Y9bQWz2f/Trs3E5Yisx1qLz+WK7g9k31lqBEQ9feQPfcf+sEko/lPVKnp2GaGus yuAuXDXy1sq9dQ9Vs2GHSdZB4p/VUMaz1qzM6TOtBY5K6+KG+ga9pbHS+vkGZ2ODs1SvaajPsD5a V2fNr6l26M3W/MrmSqe7siLjUWdNaZ21ptlaatWdpRWVy0qdS60NVZ9sJTaYbWjmV1a76kqd2bZK ZzNuWx/KmD7Lmr64ptzZ0NxQpU++M56VyTUWFwyZLWBNjrPUU1NfbX2sqqqmvNI6zZrfUFZTb82r KXc01JU2T7UuKdWdNeU1pdYnSl31FTBnnf7I7Cx7g8u6rLTF6mqutOoO+F/VUK9b9QZrRU1zYx1u lNZXWBudNRgsx51K9KXN1sZK57IaXa+ssJa1QK3SWoc565kJ3GA2nHy00dlQ4SrXrfDD44AjcTOg r6kvr3NVIHbWmBMN9XUt1vSaydbKZWWwHSdd/09n5+IVbPXOyma2ShbhOxMw9SFbn+UrSq/BLHrl MpYOZw1mrWjw1Nc1lFZ8OAilxtIrnVasqAFToXXpjS7dWlHpZmGGjKOyrvHDEcrAWdnA9yA7hetR 7ewUbRESUWG1uL7AT+TY/SdQc8auYbujQtog/Uz6tfQc8Etpl7QtzlYpP7Vi16e47coPzVX5IWvc nmmiabrpy6Yvmv4X2kcgXYpdwfab8VRwCDuEH+KVjZ0C7Mnh5Kc3s2G8P1Lkfvqk/09lidib0l0k RCLGXxNaLD6XIj5iSiOa97q8C9dWo7hj/0XwH30ucvvR/Nz8zMzon7Zkb2squivCDVjDG6TYQYK4 WvwuSeIGcQP498TvgW8UN4J/X9wE/gPxCvjb4g3w9yV4ICVLeCeS7pYWgH9R+jJ4rhQEb5VaSZRC 0jXwd6Vb4H+XboNH2L84MJGpGe8qukkHd5lawH0mH7jf9E3wTtO3wNeZ1oF/2/Rt8PVyFgnyDHkm SfJD8sPgs+XPgs9RckhQvqBgXiVXWQyepzwBXsB+yVixKV8FL1QKwe3Kk+BFig7uUlzgbsUD7lX+ jURlhfJ18JXKN8BXJXSRkPCjhB+RlNCd8HPwneZHSTTPN+OtyrzcjNWZW80bwb9vvgz+lvka+LvD MMsw+zAPScO8FryxWoZbEkmyJFnSwSdbZoDPtPwYfKvlp+A7LM+D77XsA3/B8jvwFy2/J9HykuUC +EXL3zB+2fIO+DXLdfD3LO+B37Ag8pb3LTfBP0DyJFVQf4O3uH3qb8EPqFfB31Gvkai+mziShMS7 Eu8hKXFcosb+kW005yLdxyNvxNyIdjTOWGM+VlRgRtzMhWasyKyZi8FLzeVoq8yNaN3mFrQ+RIPF IYy2zdyGka+Zvwbebl4B/nXzN8BXmf8dfC1ixaJ0NRoTEdF4AHyq5UGsJdOSydf7V/BLlkt8LS+g 3a/i/VT9LdbFVjEa7ZjEMVjL2MSx4PewdUXXM5zWCwMklzpLy8ha3uKso7nVzsqllOeoLHNScV2p Xo/dP5yEr+TnWGkUdlYEMTCRJcrwXYfHhvhuYt93EuOuBXxnSBq6FrDzYCm3YKGVRkclRHx7GBHl Eu6OpLuWVjrrycHbet7qvPWxhxOFeLuSt2t5u563Pbx9ibenly1dtpSu8/Y2awWFt0m8Hc3biURD 3+4+2orRf0gd6wX2lxjgu8y+zcHf4Vi9yr9BwltKprsRl09hRWNoLP+XWvfSeJrA/swC/3+++Ti9 jxtj39xMH+pHwP4n9ZPxRlyE87AOp16A2qmD1tFG6qJt1EcDtA/f616hE3SGLtE1uiWYBFUYJ6QL s4QcIVcoEIoEp9ApbBC2CD1Cr7BL2CscEo7AspkEYQVmF0hIzoSP6Cc44Cl6Kxn9fWeMvZDSbvSz bhv9w4eN/pEMo8826kL44nWjX3jS6L+01+gft5KJ/ZP1x3tIYX/S7akAKSggofSMMX/5JuYNCRXs b70loN9kjFf0G31lhtFXj+ZyppqMmvk1tpra6NWxmku1VDvKuKo9Wnux9vbSZONqaWjpuqVblw4Y +nVBo19Wa/T1OVzK3DCxIathYUNxg96wqmFzw04+mti4sXFH477GY42XmqhpVFN605ymJU0VTd6m DsNbJ/u7EKwvNqw5q4y+eZ7R631G77poyHmKo30VrzbBs4aEEY08QjV0QlCQtyxhnlAsNAptwoui KM4UnWJAXCWuAzaJXWKveEC8iK2TJFmBRVKj5JYOSEfwjBhnKjQ5TStNW0zb5Cx5s3RAPqRYlVql UelWTkhJCUrCKGjgkzA/oTChOKEioSfhjDnbvM2833zYfHPY+GFZw+YNqxq2btj14TOH91pyLfWW Dst6y2ZLj+WMmqzmqDZ1nXo0kRKHJ2Ymzk9sTNyQ2JXYm/hK4vUkc1JWkp7UmdSfdCjpWNLpEaYR KSOmjliEak+NPE0PR47TnMhx4e3I08L7wAeRp0UBGBY5Lg4HRuC+QKMiDuwPics76BEgO9IHPQfZ cV8DioCduJZoRGQC3QUw6wnQ6YvTcXCdIoztxF0T7h6nEbdv0F1AKu6YuD+PANmGX9jRXAb2RkKD 2Z0ATOT2HZSFezngC4CFQC4s56P/Cnob+kL0GvSKgERYyYlayYGVPljp41ZygIUYz4W1fPRMm2ky P1VoPQ2t49B6GlrHoXUcWn3Q6oMW0zgOjePQYFG4jBMhtqqRmIetbAI0J0b8cXPlRD3NoSdwXYC+ EDJ2QKQvsUjSZ3gkn+az7qRcdtJA8i5AHBoX6OeQlXiMbTz+x0kWp0VKxFlALvB4ZEAsiAxgP4yI TILOJLwhdSHPOchzDvKcI46LbBXvp0KSMXoco8cxyjK/G5nfTRJGXxi6MglZkTfF8ZHXxNTIQbEj 8iYNFzIibwoPAtOBGbg7EhgDWIEUIA14AJLDhKmRV4VpsCZHXkV1OWDVAasOcTTmQ0xhk/0lIMxF oyC7GrKrYX0BLC+A5QXwvAfeOOCjAz46YGe1mBjZJCaD3x3pE8eiH4f+XvQTAGtkAVZWJk6OLCAR dl/GbC/jhGdVjEr9v/JHYdJMMir1jZgUjcDo89B/Gj6eQwTOwc9z8PMcJJ9HFM4hCufEe4BJgBVI AyYDD0TO/YPdodmH8vDqh/KgRGvqJurpZnwUSERONiEXm+i+6E7heUbNTULNTcIcx+HlcXg5ScgE pgMzeB0MfCSaxxHN4/B8kgh9cVQkD5HIQ1RreVQnoJ+Ic8GKe5+OLEF0nhY/g7H7aUBMh9xkjE+J 5OF5G/N0JOIOb6PV//Qn5PSjXnw4p6PBPz6vLTyvrP56Ef1eWOyFxV7434uovwapXkS8F1K9iHgv 3gng1/94XSXDkgfz98GaB5nogUUPfPBA+zi874H2cfizCRaOwwKrrB5Y8MA3Dyx44JsH2etB5WNf UeI/VNPHVVLKR6qJaZ2C1ilonYIWy+IpSJ+C9ClIv4yM/QEap6BxCln6A7RO8dgdhNZBaB2E1kFo HcRcB6F5EJoHoXkQGgdxCsT2Pdvzlk/Ui+mkGXqY5SDeW0ZEFFSkQs9GPNQD9EYGcXLtjJTw1oO3 tp2I+FzKER+NXBC/QNPEhZFB8UvgX0bPTrHFkW4xDyfZ4+BfxZhGY8Q69MsgUw/uoWmUJGZjhFlY yDUvQLMLmi9D84L4GO49jmuchbBwQbQDlcAy+PIpaA6IcyExj1sYEL/ArQzAygCseGBlgM//GPww rKyGhQGxGHJVQB0486UBaAJviVzAW+fHrBszeTCTB7MMYpbV4gL4txD9l2GVWdTAi4BiyDwFlIFX AlVANeDAWC36Zehd6N2AF2iBfUVcjFjk8ZXuEksRTweulyE2Ip9vKbwaHo3QoBEh3F+MeBcALKZP oZ4cPCoXyByNQiyWg4jCBR7Lx8ERPzxp4qNtzL2L/Rt8XD3JZx5Dw6IaFwz7APNpqXEXsbqA3I0h C89dLANs3sXoH0NMjLkGEY9Bni9EGO/1I24vx8myHCfLIE6WQUR39VBk50HqTnTj1sqrYTBaDV3c qsZzWIJ1d2Pd3aIHYy14Wo4Y8odXJKRilnLBF/NKWB19tu7i9cRWV4IoYkX4phF7A3o20g3fuqOZ ZzU2IM6DpGF1EBa7eF0ZvnQh893wZTWy3i1WAJUYq+K+lYg16Fnml/Lsr0YkusVmwAW4AS/QEllN aYjOFUTnylB0DC+64MWFaJS6ohEa4FWex/eEEecnAVZ//xsyRmQ8Ygnul3KvusRy8Ar0lRivQl8N sJqsQV8LLAVvQN8IOIFmwAuw+jRHozrAZ86FxcVDGd4FiwOUwP2K7TzDr13RihxEFS/ke5/Vsxar bHaCsJ2Db204UeLqaCAa5V3I3WC0Clj+ZkTrqiR6DnSh+nheUPuxbD8GLaPqBpDVMcw3vs/Zvlaj meyO1mpX3B5ZHbXNqqormr0L+GZVys8I47xqwkpGINsvc5mnMFIClPL6ZvJ8n7L1ivW83gf4iaID Hu7BII2ENnYYwM6fOxbYifYy95NFbOnQnIalJljXo2fT8NjZBEuDUT8GoxYGoc18GOSSInQG+R4d Fp1xMM7fgbiTb5D5ibU+Gbe3dWTIMqT31JCXdzzkJ3j01MRMOJ+QX9iYxs+KUhb7uDOjLmqb+SPy URZNic/ALLMTxxzno7GeWOQbotFnEi9H7+766F2+ahPPuiPuhBoe29M89qwueNxxxhoRi64GkiMh OQOSM6gH+lr0LLyjMYZrGFk6hz1jaLIYeKIVljAUsXjvY74NG8p+LJ53sh2L5SBW8JG7iNJT0atl PHp12AFNfFfy3LBox/Iffbo2DPkTi2jM89hdNpM4tN6EoSfenZOnBCdPCX/iD+PfFP5P3xJEeoj/ b09Eo/ARKJXYT4cn4yPRg/iYaAY+MqQewjvxw/gk0COUje83c/AZTl/Cx0JfwUclO2n4zleEzwj6 Ob5DjaR9+CQLDwjT6G7hQeFBGo3v8zNojPC28DbdI7wrvEfjhPeF92mC8IHwAU0U2R8rmSTKokz3 iQnicEoRVTGR0sQR4ghKF8eIY2iyeI94D00R7xXH0wPiJPE+VG6qmEqZYpqYRtPFyeJkyhIfEB+g GWKGmEEzxZkifBezxUfpYTFHXECfExeKC2m+uEhcQp8Xn8CzeJFoEwspV9RQ/4+JFWIVfVV0ICua WCs20pNis9iMt0+36KVycYW4gqrEleJKqhY7xA5ykKBUKD3sJ+F0kmYSNW4EtpDgPIF+K7Ad/DT6 PmAXsCeK/cCLURwhanKgPwacBM5A5zz6i8AV4DpwCzIiYAaSgFHAOMAKpAFToXMZfRYwm98TnNf4 fcF5E/1cIAdYBCwBbCQ0I+1NRUAZkasb2Ab0kuDqR78b2CeUNm5xZjtNzcHGPc78qmJnReNFZyPH Lae7yezcDL6tqahZ5X1Zs9p0yRkAVjZudc5r3A70OedVZzrnNb3UXNCoOBc07nIuGJI55izE2DyM zTPsV69t6nIWN/U4ixv3O/P5/RfRn0R/Z95AHC9uvIIeaBKhlwTZ68At52Zcb26yOru5X6w/5tyG OXbj+vBQf915lOOW8wTHRedp4HxTmvNE01RgtvM0cB76p5uWNCscOc6bMR5be1Vx80SGJl/zFI4V zbMQt/ymDucGtoamHfBzC/zb2UxNA81zWCxiMWi61KwBJWzt0RhDHvYZrM6bsfjFgHjlshjG4sZt vXLHXuMRrP9MXNz2OAt53vbDh2PV64fGP3o/Lo6ISSMD8lscF+u2+Nx/goy7aRTWneRcA6wDX8fy Ab6Bj8cwzsgPy1M8eM7MRt7gU2+074/mrx++7vto/pqykCeWr7nI0dxorhh2NLdzWBHzJegZMN68 qllhiMqs5YgfZ/ldBExFvWyJ1jVyDNtGfduMHuMnMJ4cq3veO3h/E9dj0a9Bnxwbb6pHfYRQGwzx XL/DUUOpqJ9Mjg7E85iztqkTsXsG4NfV65s2oabu5Gol3y9FLAfN82PgNREDq43Xo/wN4Gx87cX2 IfYdu3epuQrXbvR1gLPpqvNy041mb9PtaG/koRfxP8TXdWefXAausbpHPBcibnnsPsdG50y+J1kd iNEcH0BO9mIfRPvGPc1BXv+8Jvk+iNVsIeZjfQrz0RhHHzsb4ms2WoOsHpGjRlZzvKaie1+/wWwA V7DHrzjP67ex348B141rlwnrWHLn2qgPVwpHXK3E1sVrwWzknV+b2TXsx67F5mQG5HSWKx1r52dC c7Cpw5XB1uKaCf+wT13Z6E+ydbHzw5nCIcadX/AdTxcL/8kp8Z+ZmvlPS4fxn2km8Z9mjuQ/xxzF f4J5L//Z5X38p5af5j8xTOM/78uAld+Ib4l4nkiTpEkkSvdJ95Ek3S9NJpP0gPQAJUjTpGmw/qD0 IA2TpkvTabg0Q5pBFukhaRapUlj6N0qSvi79O90trZaeprHSN6Vv0r3St6Rv03jpO9J3aJL0Xem7 ZJW+J32P7pO+L/2AUqQfSv9Bn5F+JP2Y0qVnpWfpAek/pf+kqdJPpJ/QNOmn0k+J/y0MelD6L+m/ KFP6ufRzmi79QvoFZUm/lH5JM6RfSb+imdKvpV/TQ9Jz0nM0S3peep4ell6QXqDZ0kHpZXpEGpRe pfnSH6XX6AvScek4LZT+JJ2iL0lvSm9SnvQX6S/0mHROOkdLpAvS3+hx6S3pHbLJ6fJUelKeI+dQ ibxAXkA18kJ5EdXKuXIuLZPz5Dyql5fIS6hBzpfzqVEukAuoSbbJNnLKhXIhNcuarJEuF8lF5JKL 5WJyyyVyCXnkMrmMvHKFXEEtcpXsIJ9cK9fRcrlebqSQ7JR1+prslr20QvbJAfqGHJSD1CGH5BCt ltvkNlojt8vt9LS8Ql5Ba+WV8kr6prxKXkWdcofcQd+S18hraJ28Vl5L35Y75U5aL6+T19F35PXy enpGxoe+K2+QN9AGeaO8kb4nb5I30UZ5s7yZvi9vkbfQJrlL7qIfyN1yN22Wt8pb6Ydyj9xDW+Rt 8jb6D3m7vJ265B3yDvqR3Cv3UrfcJ/fRj+Wd8q9oq/xr+TnaLj8v/4Z+Jr8g/5b65IPy7+gX8u/l P9Au+WX5Zfq1PCgP0m75VflVek7+o/xH2iO/Jr9Gz8vH5eO0V/6T/Cf6jfxn+c+0Tz4ln6IX5Dfl N2m//Bf5L/Rb+Zx8jg7IF+QLdFD+q/xXOiT/Tf4b/U5+S36LXpTflt+m38vvyO/QS/K78rv0B/k9 +T06LL8vv08vyx/IH9AR+e9yhAYVQZHoqCIrCfSaMkyx0AklUUmkPysjlBH0hnKXchedUu5W7qbT yqeUT9GbyhhlDJ1R7lHupb8oE5QUOq+kKql0WUlT0ugtJV1JpyvKFGUKva1MVabSVSVDyaB3lEwl k64pWcoseleZrcymm0q28ln6QJmrfJ7+rhQpRYKkFCvFgkkpUUoEWSlTygQFb43VQoJSo9QIFmWp UieoilNpFpIswyzDhJGWn1n6hbtUvP4K96gm1SSMUxVVEe5VzapZGK8OV4cLE1T8J0xUk9QkYZI6 Uh0pWNVkNVm4Tx2ljhJS1NHqaOHT6lh1rJCqjlPHCZ9Rx6vjhTR1omoV7ldT1FRhipqmpgnT1HQ1 XchQp6hThAfVqepUIVPNUDOE6WqmOkfIUueq84TPqfPVJcJ8NV/NFx5XC9QCIV+1qTbhCbVQLRQK VE3VhK+oRWqRYFOL1WLhq2qJWiIUqmVqmWBXK9QKQVOrVIfwpFqr1grFap1aJzyl1qv1QgkJ4mwx eOf9uRLvo5VlJFTjPboS78SV9eBb0OuADwhFsQLoiKKTqCod/TPAJqALOnj3ruwBdgA7gQFgL3AA eAl4BXgdeAM4C1yCznb0V4Eb/J5Q3cfvC9V4b6+8jTlMwHBgJDAa43iPrxoPpBDVVgF1gJOEWi/6 INBO99JsWkBL8M2I/faOl9qog9bTZnxX7aPddICO0Ak6S1fopmASkoSxQoowU1jAfp9Y2/lkijbw ZLq290mc3Noq7aS2UTsDFtLe0Dq1s2Bu7ZDWph0Gq9Ne1LzaEbAybafm0F4CK9T6tWLtEFietkUr 0LaC5Whd2iIN31a0bG2NtkBbB5aprdXmaOvB0rRN2lStE2y8FtBStDVgyVqVNlarAzPDbpJWDzZa y9dMWiGYqhXYb2oamKjNtV/Rcki039Dm2c9qC8Aua1PsJ7RMsDPaVPsRLQtsL+4e0MaD9Wtz7Lu1 iWSyn9QWQWIJJGz2Y7BhQrsIo0swarNf1Iogvcp+0r7WjvU7dtjfsK9w7PwfeybK/PeNiP+mkfE7 PcP479OM4b8Ncw8JyEobvhmryNdUojLUURnqqAx1VIY6KkMdlaGOyt6IArVUdikK1FL5SvTwsgz1 U476KUf9lKN+ykcDqJ1y1E45arc8A0D9l2cD84AFQC6QDxTGjRcDFUAt0Ai4gQDQRlSN75TV+D5Z je+T1fgeWX2GptrT7RnATCC7Osm+wJ5rH20fb0+xH7JX2OfZa+359kJ7o91tL7YH0LbZV+Kzxr7O vsG+GSPd9m349Nr7wXfb91Uvql5SbWOM/RYZ4o8VitfEd0kU30MuTDwXCs9FAs+Filw8gox8digj dyEjj9NY5QnkZTzPywRFUzSahLxsI6tlO7LzGcsHlr/T/ZYIcjTl/+NMAs0jnec6g8z/PE84L8yF eqGvMFS4orCjsLPwmSr22ylm8R3xHZDr4nUS5Gw5m0QlX8knCbVnJ5PyJCpQtvzE8hNSLLcttynh X9IRki/fzX7fXxV2E84cB3x1JAGjgHEkhlBrDiuQBqBmHVnR69nAXCAner0oiiVRGRtQNATBoZMY NpGIc1EMD+c9OcrAR4Lvj8MujI0GxhtgYyhRMZxi6HOkR5ERlZ8JYKXhecCCIfk7PuHsd9QDOPcd Pm6D+cx1ovOSA88BxwouJ4Zzo2Md/wLw/HA8Ewc8QxxdPB5iWYjEp1YMgRw9xlgZm3sH9437x693 fiKM+wOsF/9kW+XZ07pZX+jytXbb1rf0t27T81xJrb16Qcvu1n49r2Uf7moY2a2XoN2nV7Ucaj2k 1+ne1sN8pF93thxuPap7W462ntBLWk5Ahsmfhu7u1vN6EPwyt3ZNL8As5/WF4DcheRqSBS3nQ2Tb 6t0UUvR2V1JI5SPJ+qqWy63d+tqWa6Gx+vqWw2g3uhxot7h8oYm2/S03Q6n6Vvfl0BR9o49Cmfp2 yEzU+zxVoVn6LrRz9D18ZL/3Umi+/qJPCS3Uj/hUjBxDO9a235cMrY2+saE8/aRvYmiW7YwvNVSg n/FNCWkYT4bkRV9mqES/At0q8GTwi75ZoTrbMd+ckFO/7psfIrQL4T/iFvLqt3x5rf0u0VfQus9l 9mmtp8FLsMb1vu1sFXHtdl8f52hdS/gIW91GjO/Cuv6hddl8e0Kaq8i3H+ut8r0Y2oL2SOsh23Xf sdBEV5nvJOx8Qqvv8Z0JbeUtk0Srb+HtduimupJ8VaGgrvnq4K3DdzG03VWP8T7dGxheuts1yucM kWucz4vW7AtCxue7HnrRFfLdCh1x6ZDcZWv3i63nl5b42iFj5REwtNJ8eaH26MhU36rQKlcW2rWu 2b61aOf61ofWu3K4zfh2kW8jorfIt4W3jK/wXkW9bffsCR3Td+lbQyddHX5zSHV1+pNCJa5nMEsf VrQrdIbXWy9f1x7kYmso2fBQz/NdQdWx8f2uTf5RrSds1/3jQhddWX4rYriqZXfoiu0Y4n/d1eVP C92yHfFPRfR6GHftYNx2pGV3WNRv+bNQnyx3x1w7/bPDZteAb1Y4ybUXnve6DqDOu/ne6Xe95J8b HuUa8Ofg7iv+Ra39yNSZsOh63b8Eum/4baH5rrP+Iqyoz7aKcdTqMX2/qxN8EeK5D/K7QmOXrmfc dclfBn+u+h3YU9v99cjpLb8I32x+PTzONYrzG74Xw1ZEPi+cZrvl94XOuG639Ienuk3+UDjLPRxZ 6AZfEZ7tHslsukf7O0KpBtf3+DtRCUx3rnu8/xnoGjyFcdt6/6bWXne6v6v0sDvD39N6ntVDOM09 k63InQ0L2+BVGfg8/44hvsC/EycDi1UqVgSO2gN35zLuzue8ECs64S6GnRx3BezwvIRzdM0/EF7k rvV3YLyRe+v27w1NdAf8A/B2u/8AeFvL+NAq90r/S62HXLP9r7Qecq/0vcj565xjd7jXuDpLd+NM aA8vca/zvxG2uTf4z4aL3Jthv0zfbusLO9zdOEkmshMsnMQl69ksYV0/4r8UzsG+Po9T64gvM5zj MsOT0+6ZPBc5UX41NNa9zZUULnP3erylKdgFqHbbLd/2sE93snpAzG+ENHd/NM5X4flug7M9aMSf 79OJ7n1sXtseXzJWfch/O3TEfThgwtqPQmYzcnq1dKXL5h0Vmu8+tLwupLhPLHeGqsC9nAc5vzN+ NBBApnRfZulKXQuMROUcC4xG5ZQEtmFFx/w9oVTPEc+etm7PsZZrbduWlrCngOfk8va2XvflQHdb Pztj23a7rIHu1n7PmeWrkEfObdfZ2eu5uHxt2z7PleXrQ/M91z3tbYcQvWDbYXbytx3F6aq2nXDl gJ+G7sbQHs+tltNt5zE+q+2yux8n/zWMb0ENbPMPtF3zisu3hja6jyLam71mjEc5/J8V2ri0JCii qo/4+sJnPReDZsy7MZiEys8JjsKJUcbOMffI4Disaw/jtvWB8djFmIudn4EUVOMJVM5u92k8m3pd nYH01qPu04EMVPX5wExE/nIgO9TuvhaY17rNfTOwAFHKC2SH0xC3XNTk9kA+TpWFkExlT41wyLYq UMhHisNzIVkRXuGhQC0q+XSgMdzhUQLucCc7qcLPeFRvWeshT3IgEFLdxYE29oRyp8PzTo8S3uQZ G1gJyRL/QOiWZ6KPwl2YcQ0y5Q2saz3tSQ1swJNufWAz9tTCQBuqYlugO9yjt7OnKp5BqaESzxSc Xaon03UWlWzSN4Z3oJJP4BTaqpeEdzIeHsDsuYjG2pbz4b2eWYHe8AFXWWBb+CVEoz/8CuzMCr+O k7M//AZODJyE+h7mpycYtLaPw3qp3ertCKa1p3k7g1Pbp3qfCWa1Z3k3BWe3z/Z2Bee2z/X26N62 bO+OYE57jndncFH7Iu9AcEn7Etv+wOVQqndv0NZu8x7wXWwvwr7ehDcEPK+xlsJgEfgWtt+9Schd v/elYNnXNF3zbA8vYvUTvoH8OsKLWH7B9wbr28v0PUEd58P+oK/d4X0lGIJXr8Oreu8b8Er3ng2O ip0htu3BFaFb7InQ7oPuuFA7TlQ8bTFXB+qqE3wP6gqc1VVoD2Q6Q+1G/biPcs6fj56LeFptca8M JoVWxbhvT9s+dz+rPXdx8Bl2GjCubwdPhZ1Nrde8l4Jd7SGXlXF9a7ArNMudG+yJ1Sd0h7juDHa2 r3Cb3DfbO/Qtnj1hh/fq8ontnd40/472Z7w3gjtQA9txwozy3sabT59nK56DqSx37ZtY7tq72O4w VhE+677c0v+1tWzn8ugZu+NkKLXFFNyJmrmFlW70TPT3hM/qGwP94UueOcjFJX0h3qBSPfNRCVdx /swKix68DYZvYO8EWM0HdvN2H2TyAofCtz3zA4faTEwebQHa4a4VgcOlIyGfjewcCxxlLXbfWI/m o7aRtiuBE603WS1hnM/F2rbRep9+EadHiSc41FbpC9vGG62+y9XZloLKPx3u8tQFzrel8zaDtzP5 fnFw/x1GpWFGwozOwLXWEx5v4CY7n1lleoLLqW2ep13PQxv0pJaO108uV9oW8DaFtaFZnlVfNYdt qMxZbKWIj0+/uFxty4UnBW35nrX/Td63QEWVXYmeeynqw8+yIEgjkqJEmtA0TXhQAawgi7oxcquK EAeqCmNomxBDiCG04f8AaT7G5zM+YgjpGKcfYzvG9Bjj+IjPMMbQtsMQlssQ2vb5iDFoEx7LGBdx GMZFDLy99723uFWNbSczL+utNeusvc+ufffZZ5999tnn3EsVt25Xha2xH1Y0rKk200uLjccaezu9 ddONvS8tgidvdMR79G0x4E/wxistjSVt8aBhri2xY3fjNljpLQ0nwc4WnK+OBcSd5XXH/vMbnZWY hzsrG3tBxt1QjjMLdu4ASyag92rpVAbaUmR7ahuPt6XDSOF02tnQeMrdD70D/6UDjUVt1s5W90Jr 6ytCY7f71Cvu+grYJRMbz7TZOjvrI9oKOg80DrZt6zzcqG1Lf+VI41BbEXhvuK2ksw/wjs6jdTva dkGW6G/bvW8eMmRnx3TjSGtn5wDtEYvuq83zXawpAk7vi5AlxmFdR9W3dJ5sim0e79LCTtfSFYYn 8C7Tl/COYKChHK4O4Hm+KwbprniiE+srkMYdsyvFvQAy1ch/JapuGOhKzGxd6XU3mxe7GNLAJ7r+ Mt6DNJnxtF8vtLZ2WWHtsM7KBiP0NV8/ifbgGumyNZ4CGwqakpDflOrjbyN+EdElSHdWNxxuHnvJ gvcLnVvrzSA/25QBMjsaHsCeNY9jgX0K6K5dREMGRg11g033O8ebsoHe3ZTnPti1h/i7kd+1l+gm ktnaJLQe6GpvEtvOdJxpEtoGiR4CWmwb7upuKm4bAZwEe/Q87afDsMu0dh2sm4A99xbRNqIvEd1L dHV9VNtV2NNnIDeeUNMNN8CHSU1ujOSGAbC5v2lnm7brGNHbiD4O8hOQYyvqq7pOuQ+2TXQlNlUB fQb5XYNNNY3arlPvoYdIfrgpou0mzHuGe6JrBOL/ZtfVut3uq10TKvom0beR7rSAzbld0xCl6Z3R RJcgjTlZobvu4fkEzpCWtrBXJmFfa4UzQF1bWNdcwxjeCcIZ5nbHbvdg02tdC7CObnc9hvPALZSv 74A58qfpnFDf0XEM4uQSnnnqO2hHu9TNN/H1Hd16pLuuEh3hXmjUwqkmo226O6qppe1ex+6mjrY5 yIq32xZemWna3/a4w9rT0NPa09ncus/YUdDcsM/Ykw8rqxOiETISxAzeRc5hxu7Y0XgVVpMo4eaQ 9ovdbzQb2y93n22Obtnbfb45rn20+2Kzpf1a92XpHrk5uaWoexTvNLuv4V1k9/XmtPbrcCqQ7nDp 3la+q1Xdscr3qnSX2pzZPul/ryrdjTbntk91Tzbnt890TzVvbb/fPdPsbH/Yfb95e/uj7ofN3vZH 0Ir0NJe3L3XENFfu03Q/wn67l6jfdOy3RyPfTeO9czreO/eEoCU9RrIkfcWSnmhpFFKGxDvlnji8 R+6Jk8aFd+6gme6vMS9hW4jzEdxBeiy4g/QkI6cnDddgT3RzdX1VT6as7RjZWbsvpCe3uXNfdGer 9HRCemLQfKBxuGdrXQmccy40H94X1+OUn0XQXX9z3z5Lz/bmo/uSe7zyMwfym/xUge7fm8/t29pT LT+1kJ4PSLT0vAJadW1rHtiX1nmp+eS+zK7jzdX7cnvKm0/vy++pxP9oQb86ZKpfHfL0q0ONvkDv ZcH0S8M4+qVhAv3SMFHfoG9lL+j36f8rs9KvCO30K8Li0I+EprOS0Huh99lO+uXji/Q7x89BHxks kX2cMSawz7JYVsFeYZn0/qQS1su+wUrZAPsb5mEnoZSx0+ws28F+zIbYi2yEvcNeYlPsN+xl9n/Y fdbIFtgya+N4LoV9jTvIHWJnuX7uHfY/uF9x0+yfNdWaL7M/aE5ovseWNRc1b3JBmquatzmDZlbz W26tZiE4iPtQcGLwJm6j9qD2IrdJO6x9k/Nq39K+xe3Qjmp/wX1G+790Wu7zOoNuHfct3QZdPHdC l6Dbx5007DPs54MN/8VwhA83fNtwlF9n+GvDaX694YeGMf45w9uGSf6Thl8ZFvhPGf4QEsV/Ef/S xHeFRoSu4btDTaHr+P2hvw6d5Q+F1Ya9xveH/Us4z/9j+Prw9fzb4RvCN/LXw1PCU/hfhj8f/jy9 VbqEVdOT0nj8vZa9H+AYwHGAUyzWfsx+3H7KfsY+aB+yDwM1Yr9qn7DftN+2T9vv2eegXrA/FnhB L0QIUUKsYBaS8Ld/NLdMb9fbGa8X9SL9RtLEp/KpjPHZfDbj+Fw+l/H8Fn4LC+ILeDvT0Pe5tLyL dzEdX8qXMj3v4XcwA/8i/yIL5yv4z7EI+j6Xkf8y/2W2lq/n60FnI9/CIun7XOvA34ksRvsL7S/w eT+7yW7TyEz4i0h7JauwV9qr7bX2BnurvdN+wH7Y3mc/ah+wn7Sftp+zX7Bfsl+xj9nH7Tfst+x3 7bNQP7DP2xcFJmiFMMEkxAjxQqKQIqQLVsEmFAjbgGcSioQSYYewS9gt7BH2Ck0CHObtiyuFZLDM CQtUTL7yWC4HhV6h/xO8cAyACceFU3DtDFCDwpAwLNwTRoSr8GlCuCncFqbx93W6vwVvRvvFOf4/ hUxWC1Gby5oh5gsozh0Q32eZCyL8x6wI4vsd9il6g1kx+ejTuo26TWy77lnds6xU95zuOebWPa9L Yx5dui6dlemsOivbocvV5bLP6Gw6G9up+6RuG/us7jO6nexFXbmuHNYLx47BSkIvW/DVZBAzzH4G YBBgCGCY2exT9hn7fftD+yP7kqCxPxJCBKMQLcQJFvtDIVlIEzKFXCFf2Co4AW8H8ArlQqVQLdRC aRBahU7hgHBY6AN8VBgQTgLvNPDOCReEVvuk/ZpwyX4NyijQ1wFfs5+1n7dftF/G3yLqX9bX069N Q/y81Qwlk/0cShZ7F4oVVv1v2MfYLJRsXbGumOXoSnWlLFdXqatkmxkXNh9O/zGHpeC710oiAKIY 556DOhbADPQCwOOgjBK9e5ogwn2PAOko91xJrHuBPpvdj0uSPDzxUz36kgxPBPHxOvIUOaWdQmd7 ony6kY9tEVCXQqNuhc7zxBLgdayxH+WaAoLHTNeVdkhjf1grIEJ/ojwe7LsYajfYiHWgvtVsUtum hie1DQQc605PEvmlypPqG7tiF9qC19E/il/FVaAC+lQDtlMAx6KAYhv6DNuhzhroU/GN0rd6DlGH PMb8EE+Gnx+L5RqvK/JKjdfqPNk+3yq6sW6RbUC6w5NH9X6P4PO7Uit942ecT6VWbER/4ZhwDIc8 4nvaK2NT6iOe4pJXPe6S1zw7/exUjyXQVjHAD0odq7INx6P4LzAWKlS0Omb18hgU/yFP0XHCU+HX h1JHPGH8yngjAsavfMb4QVppB325tRIvsPbJvOGpKjnrqSl55DlbsuQ5/0S/rFa3fMDrT5P7U/qp kP2r+Dk2YL7er25Z+ewOk8b9pNrnlwBfu02Sn55W++ZdXKVWj0Md+1if99T58sZFT0vJZU8H0Uqt 5GRlfY569vuuXfMcon4x7pV8fd1zpGTS86rPZ/qV2KB6yvOab4woP+M5UXIfZB563vCtc7lNqcZz sTTEc5n0KDEJdanRM4o6SqM913zxqtRyritN9kyVxnmukw9TvBfc6d5Lbqv3itvmHcO87i7wjhNv m/eGu8h7i+RKICdivgycY/ChOwb0B/Jh/ZcOeLdT3O9Y6cM357u8d3EMPl8/LfYqAtZ2YEwF5qvA vCT7CG1y7/bOKjnEvcf7wL3XO+9u8i76fKX0GZiPlbhZbX8K4JdaPJPkZ4Q0z0xppue+ep8qzfU8 LM33PCrd6lny06XsswClTq+mdLs3hGiv10h7rgKKnnJvNNWV3rjSaq+ltNabTON/ApQ2eNMQlLgr bfVmUt3pzVXvpaUHvPmlh71b1XtPaZ/XSfVR0AF+pPlV7+1JUhyUnvR6cbw0xtPe8tJz3kpqd8Fb rfZX6SVvbekVb0PpmLe1dNzbWXrDe6D0lvdw6V1vX+ms92jpA+9A6bz3ZOmi9/R7cuFqe5+yp6jz 8JPqwPgK1KfwcR+rUMXbanm/ZRX9Sk5UzgfKOlHWvF4VSyiHsRgv7895K7U7UZpvpfbB08b5hFzr F8vqWlk3EQHrKHD/U+VSGo+q9u37ATnJr36SvcUB/gzoz7dXBu6rgXWNKt+pa2VOlHydKvn7K3Vf aVHWm7u9jOE6cHeXad0Hy8LczHuOoLfMhOA7hyv6FN1oX39ZjG8NYz/q87Gy/pSzsdye8jfsE+5j ZfG+dY98WHe4/tT63MfLElc9e8t63afKUvzWYUCOUnKR+0xZut+ZCK9hThwss5boy2wlEWUF7qGy bUSnlhWVJJWVlOSV7XAPl+2iz3C9RCjbTdfhmvtqWRPxQYZqWQfR5rI9JDNSthfv4vVf1/83xkI/ Sv+56nehv2P4X1uT/rLPV4KD2DI9R3mRnqO8pB3WvsX10ROUV+kJynF6gjJBT1Du0BOUdw37QqL4 AnoucpOei/xvei7yS3oucoeei/wWn4sExeJzkaBkfC4S9BF8LhKUjs9Fgj4Kd7Qn2BsrTw+sPNtm zbMKVtFabHVbd1pTrRXWKmuNtQ5wC9C8tcO633rIesT6qlVvzbC+BldOWN+wRlA5C3DeagZ8Ecpl 66j1mvW6NSKz0zppnbLOWO9bo6A8tD6yLn1MY42lYrYmQS9YMkgjfoolyAbZDCu+TJTTl+H3JwPu bVtgRtrYPrirPQMlh+5zc9kv2ATcyV6H8nHuZ9wYy9OMa95m+fi8ClpyzMvKVeM1M4tsQQb0J408 Qx67MvIW1ZgPwYhxvGdhnG9AOQ9SFdaLZCM++VtHv0hkED1JwEuGwsO9NP5/3lQoGpbGXmDB7KMs A+6vs1g2M4BNAgtnW6FEsG1Q1jARipE5oaxlRexTYOmn2XYWBTHnZdH0HzdjWQOU9awdShzrgLKB XYUSD2N/m32Yi+AiWAJ9O7R9ZayF14IyCq/Z5gqvF04WTuUdLpwpvJ81tmW48H7hw8JHhUuF10VN 4UMxRDRmeUWjbVqMFuPyqkUL8JLznNZE2z3bYzFNzMwaEHMRW7VWlucU88WtWQN51bYRKxOdhTN5 rS9UitsLrxVeE72FU6TVCPp9RawFPVS2lNgeZ42JDahFKVYmlaxZsRxatuY5HTGoC+gD4uEXKvOq gZ4imBIrxWpor4HxXMdeqPQVPgT7jGg3WDG5pT+vGlodFjsLZ8Q0kD4qDhRez3MiZM2CnofiSfF0 4aQ1sXBSPCdeKJyy3UMNPliyMgKQF0NAc4h4ibRfEceyvLYR0QijRoDeZBgXb6BepRfSqADYgCDe gvo+aAUQ+8QGLOgJ8a44u2VYzN0MNoqZIPdAnAcLFx1M0SaGOLTYv1/fAI4wh0mMBu/DaMFKoBRA DrUEKbLrT4EpxzE/+/3AcSxrLGvAcdxxynHGMegbrwpW4yPPMbRiud8ogO8YxlmWAG3APnz2X7fd E5Md8XmtgBMhKltJ62ThdUdK1qwj3WHNq3XYCmccBY5tjqKsscL7FKfMUVK45NgBUrscu/P6xE7H HprDRcdeRxN60tHu6IbYyYTIhTl0HHT0QnR4Hf1ivqvW1eBqdXW6DrgOu/pcR10DWfmufLG1cMZ1 kmYTenCddp1DcBx0nRRzpRZ4zXXhhXKKHZ83Jc+JfbYJnPGVORU1EFt9sO5mAeYxtlyXXFdI95hr PK/WNpdVS7F6VKzFFugb2z1rYlY+FK/zDedZhaaS7zwPsZMG9UWAyzB+ltWHZcuZLWeco85rzuvO SeeUNdE5A/7Jd953PnQ+2jKyZcS5JHaKd7MGPl7j5POcLs3mZFeIy+isckW74qiHWmuiywKr85Ir GWId+nClfZzPy3fspfUEPbsyXbmOXvDdjo/X2K668l1bXU5x0bW9cMnlxVlylYuZOBLbHMzgiOOq Y8JxU/TCqGAFOm4DTDtuOmBk4tHNnT5/HXXMORYcj3H0eYdtjxW/F9538lItZjr1zghnlDMWV5HC 2zwAuhedZgRnUnq7M9WZUfjIqvUBrW1HtzMb+ixYyQu+edFAbkOgde/MAxCcYno7xo6z2OmmGJJp iqKbkMB2Oisce51VjgJnjbPO2eLscO5XohsyqhNkD0kr03kEsmsrAs6mlDucvPNV52vOE7aRwhmI /odZfS+OY7Z13YB5uOG65ap0VbvuilsxH4KND2HuUx0FeUfFZMjOj2FMTMzPGpCyMc6Pa1Y86rLg zIv50Huy64Fr3rUophWxIm1RWJFJzH+h3HGwKKYovihR9BalFKUXWYtsRQVF27Lyi4qKSop2FKUU Pszrg9kyYs6FnA3ZqWhX0W70Cdpd1CRlSoxgmNWRoj1Fe2kv/Px/oBNUFaulZ+b4f+dZWgPjAKLS 9kJpgtIOZReUbigH066m9ULph5IC5RiUg1COQzkFBXlnoAxCGYJSAmUYykjaCP53S/2L+l30Xzw/ wT4Jfi2EhR3EXHA60LK/Au+Fgp8/yyIZFzYb9pAsor915QwyzmaDegjqgqCMnDM5jwkGZUB6CGBY /jwCcFXmTwDclPnDMm84oJ1C35ZrhT8hw1UVPaKip2W4Ktc3VdcUuCdfH1HpGpRrBdTjUWrFxkB9 q9mktk0NT2obCDjWObnPBdXYFbuG5eu3A+wNhMD+h1UwqALFtmm53VW5T8U3Eyq+MofDqjE+DvCj Uk+o5JUaruXyKt+qryk2QJ2rl+sIlQ2DAX0PyvOp1GrbR6Q6N2qV9kM5fmPMjQUwAyT52+k3lkBb A/0QWAf2GTgXalDHrDIGxX/TKzpyU9+nr9XGH2hDYH1bNQ9K/wovsJZlcjMAsgE6APa/j1/+f6kV /yr1k+brKbVv3E+pA32s+Olptd/6CqwnVrFf0Z+X41s7uQKAKNOiSk4Vy7nFKhm3pJ/iXs7XuTsB KlQ+U8cGzn9Vjt86zK0BqANoUfldiZVDAEdyfGvRtyZflW15Lcc/1wzl+HJd7lmAExK9+TBAH8BR gIEcyuubT8q80wDn5L4xJy6sMofKGAL50NfmZGls6j6U65svSGPwy4FPi7XAfPt++Wq1vDQi2bT5 0gp/8xWAMYBxla+elIeUsa62PwXwc9+Q/YxwHuBijt8+lXsZYBTgWoCu6RXIvQ4wKdNT0tz4QNEz I9f3AR4CPJLH/wTIXZJAibvNGrkOyfHbSzcbAaJz/PL05ji5tsh+TFaNXQHw1eY0abw4xs2ZALly u3x/f23eCuAE2A7gBSgHqASoBqgFaABoBej8APGh3lPeLy9/0HhTamVtPWnveVKtzo3qtR5YK3P+ pPrmE+Bp/T8t967mv8D1s9r+/7RalYtWrf+U+VHrfcKeuWr/q9UTqv5Vfvco84Rr4Ia0DjbfArgL cECGWQl851WlvaIbY/lBzsoaHsnxPx8r6085G8vtMX/jPrF5fsUGWnvR0vpT69u8mLP62VvWa2M5 /uswIEcpucimzfE/E01I69gWtjI+m0kVF7KcLSYgTmR/2xJXfOmbN/UaQJn4nMf4vSd6ywL7j3Ov yfXif+FnYVwEvtgkZRhgBOAqwATATYDbANMA9+TPcwALAI+lz8/xMuglmeciAKJUEKuSMQMkAaQC ZMjtswHyZL7wZ4AIUKwCN8BO2Y4KgCqpL4Ka94E6lp/SlNKe0p1yMKX3mZaU/mfqsKT0qsoxhXrm SMrxlFPPHJKvHwc480xxymDK4LOJiLGWqSHpE0geJzlsO5xyKmUkZQQkrqoKvoPB9N5v+tKbRTT0 TpEP0btDoundIc/QW0Pi6H0hG+g7vmb6ju/z9I6Qj9LbQTLpvSBZ9F4QK70RJJveCJJD7wLZ8hfv j+NMnPSt2SH2HGPPQiw9uxAAj2UokOpkiJtkiK3kCBVAXCVDXCWbZeBlSJLr1BVdJAtzn5wtAfEL VgCvWUafCs892/tsf0A59h7O+/NXKfjGQfomN6M3x0jvjAmmb3KH0De5w+mdMTH0npg4ekPMBno3 jJneAWOht78k0RtfkuktLx+h97uk/D/Ty7EzbHDlb0Ab+phr0+SGC1g2TW3wbprZdH/Tw0336fMj rAmWNlxI0iSFyFIXkozIx5IUjbwkCxSjVDZNYlE0JsWBRp8+wkuSJkXPBi9pCAGZk9gO+VLPGy7g k0MefazlB/ifQFp/k/9HFs//Ez/DNmobtY3MjtmTCaE/Dh1mn6A31sQAmOR3wST42mug/Qlof5If YsH8RdAVS23iQCKasOyP9WmMQ8C3PiHGtxmxbJankohhppiJmIn18ZYaS936+PWJ61PWF0GJWZ8e c3u9FcC2vmD9NtLxKn4Dl/8e/z3o+wf8D4DzQ/6HjOfP8edYEP8j/kdg2T+ANcEwplGmp9GEgGU/ YaGhPwX7jLDiDnCj9OxuO1sLkdzB2IfdElj2r9BqsBxanQ/AWR4yl8VpuWCetlwyp1uuYP1MpeVc gt4y9uFkyzjSyufYFMsNlLFst9xCnsVruYt8823LLMlEWG5Zyi0PsEZZBEulZZ7agKyl2rJoqd3I FKC26RsLEFAngXejFqDEB2CbAmAb9L8xUbZx3nJ4Y4pEb7RacjfaoL8r1Fcf6QmT7bog2/RAZc8N 0l29cYfl6Mb02JSN8ZaBjdssJzcWKeN/xgl2NGwMs7RuNNG4OmG8Cn1gYwzNI74TjNEbtDjDDsNn GW940bCLaQ2VhkqmN+w2fIEZDF80fJGFGr5i+AoLM+w1fJWFGxoMjWzNB45hjjtN7yQLYw1wbmEJ kA0TzstwEeCyDJDVEq4BXAeYlGDDbqhnpFoNCfdX6PjJFYDPnCWaaJc525wdPx4THR+XcG4dUOuK 1xXHz0O5tCEKqMV1xWb6nOCMif7w7vi4deehFCdcMAvmioQDcGUsfgxlQGoxJnrdeWhxPiYuJjom OuFSwmHgzsZEm4X4u2b3uqr4cfNOH5BO8yGE+HPxiwhmYV22WUgY90H2SpFsjH8g2WguhnYtCQNI J1xIOGlOSnDC1TjJPrRNtisbehdBs4gWgXbZHtCN9syb94OdV8CKMbQ7flwaP8hVJfSZK8xV0Bu0 jZ8FTUAnHIVPdWZ8r0oY/3UecjT/bf7bzMB/h/8OCzGUGcogAsoN5RABnzN8DiKg2lDDIgwvG15m kfTWs6jQ+dB5ti50IXSBxdB7zZ75k3KcF6AYoIaynIV+Y7KDvstgkzMfvT+XtdA3Dji2VSWXwXbj 23l8chxko+9CRPOQj6h/6i2eesN37uop0hlFuoYiXUuRrqNIN1Ckh1Ckh0KkN7Bw0oRjYDSGYBrD JrKnX7b7NPW9kXidZDXHhlW8a7LdarkhsppjtTIP/3vWv8X36PWYJ45aS5oYaeJIE0+agkiTnnTg 25iD32sD9RJK+iOe6Aue3vmF3pDmIZHG2CT7otbH49lOeRbVcrtlX2yTeX/OLD1t3p9kdz+7oLJb 4g2xE6rYk3g18iyqeUfkWVR4/15z+EFm4d8yy6v5gmPn2VU6FcTifx+P2u4DV5QIJTaqOModtRNw BXzaSbwqwhItwlUxqgZKRVQdfUZalEsHFDFqvwyiSqMeikig6FM0qfXUUI1XWqj/KukzjsXwkuEl GHOtAaLMUG/ACPjAexM7RzMo/2UzshzgJHNFHodSQPiUrz7uK6ciz/joQSiATedMh021WFSSw6Zz BMpnSdMZqlc0nPFpkvQ0RIZJHJMX4Iqp0nQlcihyCLHpCka54fOGqj93hKYHAPPMZZozLZgeR/KR +siIyCjAWMdGmiOTiE6NzADMR2ZH5gHPHClEikAXR7qpVIBkbGQVlGy5YBu9T2NNZB3h2MgWkEFt ellTh6ynwrQA15Cjp9YIAl3ZSSOsMNT9CfsHD+f/G5RdpXWYhP8/n8vgstll+PyqHzeZS6Ms3OnH jecSKZfv8eNGcbGsAz67/bghnJF+Z5nvx2WclpXA5xQVl2cLdM6O8vFWxvb0FW7ij/Ovg8Tf8ich s32f/z6crE/zp6HlWf4s+OYCf4HpwDdvMj1/BTxk4H/Oj0P+meDfZuH8O/w7bA1/k7/JjPwkP8nW 8lP8FOh8l38Xcs5Q6BDknJ/AqfxDcCr/KcQGnu2/QfjrhL/zHvobKvqIiu5T0d+SaRg7Z+ZgvJzy ntJniRfDxcOnOT+ekcPeb/nx9FwEfBr146GHOZhpFY89YkvwacCPNwde52AvUvNm2QPajdS8KTYD nyr9eNLvTIv9eOMUWzY/3qjfXiDxhtmIaq6fpXs0nFdGOZmjnIzZeA/teH5eNVS/x6tHVPxvEl2h ostVnv+6yvPfWKFlmW+p2n5LpVOiv+Q3axKNY7HQtzrxPlIaTfKKNNgv3YMiPgc4hAXDaS/Ex/XL N2FLjIVrmCuchWvDwwBM4THh8YCxToTPKeHpUGLCrYBt4QXA3wbFBPyi8BKQwLJHrhOpnbrEg5wJ 2mrD94KOJqhRJky+agNoD99B16TWCDuopIfvArwrfLfq3PBB72ciuBIa4V4YNzOFABhVAPcfJvCb yQIAEWJKk/koNxAAJ+X6tEyfA8gEyAXIlz4b+5krpHvt1NpiwDNr7699uPYRlPtrl0yakG4sppC1 S1gbt62dMhnXzpiMpmiTEaQfYjGFmCwmC8kZpSK1UjSaklEjYNJnSkNdqGlFjykT9GrWToWKQMeF pobsCTlmigPcHbLn3+3E80F3s7uULcLou8QsNB3ACmCTa4QCgG1yXSRfQ7kSGXaAP9tDk2AcB0Mz QrND80IFKGJoccjBkHYsQItUCyCVASUp1B26kz5DgboYZPH6TqnIrVY01qj1oS5Zk6InOzQJJJNQ V0hTSG9Ib2hFaBXU7SG9f+b9yZ8VuWtgbRohPxshMo0QoUaIXCNErhEi1wiRa4TINWbKck4AOA0a vQBwSjJC3jRWA9TK1xoAIGqN+TLA54x25tKNrUmK6AecuiYbSh6U7DVTa0TdGJY1xWsEqvPWJK1x g4x7zc41bvqMpWZN1Zoquu6WitzKX2M2SJE+1EWaVvRkwycRIA/oCv1e3Tnd3TUVgMd05/7ikYvv 411UnQDwfke7VPvHaaU8ZcdAeY5mD3Pw6HK2kpODurW9QM9ocW5ndAcJe5Gvu8g4TXvwLcjMD7S4 iy0GXWdc8C0t3CVrYpFvSAuaZZwuTuMEzl3tfoiR8mCGbZdxh5tBDBKQ/zmRdoGZpVqkEQd1Iyeo +4+TKINY044c/iJJLiKGPgBrPk/8B4h1e5aOA79pGXbzoO2IudTlajwpaO8h1p0inECcEsK9hNH+ W1r87uWctgyxbpwke3CH0k4B7tfinVyGTk/8PSSDeIAwC8b7U4ZXQb6MOPQcIXiQONiWae4SHUH8 WyT/GmHSIPd1gzB6e5FaLeKI2CKOAujreHUpj3AmYbr7XYJ5W45EzUu/Iv0GzU+px/PgmR/oBMCv E+7TwkzzbxJ+QHgS+UHrkQ4aJs440T8nnEKc5zRvARYIF0oY+dwS0eOIuXtEv0m4gXCuJEN6wkjP FuQv/57/PXDMwTA6zWENnJeDUzWwq2t+h7Tmp8RvRBz8Gc0bQC8hzbUgDiqiq98ljiv4H+DYZiJJ jvCXScNl0uklHE6cFtLzNyQTQjgSsU4kbe8SlvQfDzqOYyf834Mg2oPeCT6HnkEOvz14DOhpzUbA /xM5XKoGz6EvIA6yEp2E8lqTrOHvAL+FfH6fZgPQnw0Ce7h/0WQB/RNq9U3EwV8lejfhY4T/HrG2 nPQ8Rqydoh5rkK/REv8eSW4nOob6MhPdTZKbNclkIa6U3yMOmkCsIQ7/MtEdQTfxLegkWU4yY4RP I2brOTdGEWEDYT0HK3H5Af8j+s8s6bhmObwPuhW0Hi3H+xxuikc/LCEOWg/rkuPTkeZfI7onaBvG A9EPCP8aOfzrhMeRw20g/iPEkFXwF0yLSAftJpxCV8c1sTheSQ/S/Cmiv0B4kiTHiH6dsJfwcxxk S76I7HmOcC5ZqyEa3ykGI9KcRUz0HYmDNkDvKLOFsJf4c9R2nji/Rrw8p8kArzqDawCfxbUf9CWa kXqydjfR3yT6OGKQqaGYB0nNNcT869QqhTixeDVolmTqZM4gRfIgeokkw4jThTj4q0Rnk/wRwm7S MEx0NV7VrSOZI4Q/Qhq+SdqWKFMtk21hiNkd0vkW2dwixRX5+Qua/wS0jmIsMvhFkPkYtcqRxkh4 G+Llu3jC51+jPB+9/HvK3pj/zUhzG+jq63iV9xL9DtHnCB8k+T0yH+XniZNOWCBsWtqp3N3BVdxT Jkg+iTQkUat7hBtJZonwJwhL945vEca3NcA6wieKMNNfBHyY9DxYOo9jJ5lbtKfUIh1MvYA8SnZj foZ7aZh3WAm0uyHWfJjoesItJFml+S5IfgZ3Ac7N5yDNbwcv/YjvIPwjwtPkjTuApymuwnnIQjxH q2k74Vcp6hya3+J+r3kXOH+NmoPMpN9L9Cxibp44F4nTTXg7Yk0s8ZOIc57wzwl/CXFwMsl8m+go os8S3UQ6LxPHSfKvEq5FzBY1+FRzlPDXEHMxRA8gBquQvkP4EnHiSFsvWaKXNSCHNPPpRKcSvkr4 AvH7CO8h3EH8cmrL5N6RJjvZLcJvEJ6TZRD3Ez5EuAbx8i6iKwnbUE9QJmmm+eJOUF/jNNLr5Iet krZl2sEhxvE882P0xvJZHBfhB4iBj5lkEDGcQ5Bznq5eJCwQv5fwFGKNk2S2EzYTDiM8S/Kvk8xd 0jlKreYJxxBuJZmDJF9LMo81kKu5DM0vgP7n4GqilwCbg40Y+Rg/XDDSXFRwPODQ4DCkNXiOvKPF Zyk3g/FMck8bRt4TAT+POw5br3kBMO13bAvRBtzdln9DMiZNB8knEUb+vyIG2kk4inA2nXPSCX+I TkQvEbYQvgKtLmBsA43v5FhHe6g3OAg9hmdIdofOWgOE70gnMbSZTwqmDBA8ihhPd3wSnle5cm0q 4XnExLmMktxl4l8m/jxx5okzT5zLwZWI8azLzSMGGySZXpIfJb6kbZT09JIM9u4lmVRJP8n0Et1L mnuRwxZpLKOEF+mkvShZi/7ht9BYtmj+FTG2AowaUqmvXkk/2XOCcIlM49USlITdhHIs2fM62fY6 jgjoVMr5NBbsC84MtUQfQ3sgh0H8sE/j7NNfXu4x/CUsY1bCaK2B/R3hesxjyz+Ett+nvBoJ2RQ0 LNHuQLiXOIuIuVSJxvM8nGbP41WkuVQJSyd2apVK9wK9dHrvxXMvYMy0ScjnvSQzTzrLSaYc71mC 6QlZcBTqAVxNuXQHtiLJeerlMtFHCV+mHo8Snied5WThHF1tlDC1aqSrv6S+fkn23yHJO5JOPIFz 5ZKd5J9FiSNfxTP8KLUaRT5czSM6j0Yahuv9j6eQI/VOelJxxtkctWL0DGwrYbb8M8BRyxOA44kT RZz45T/A+X8YOdAe8XnEPD1n4/VkFT31hDEiJ53oVGn3pKv0vJLvIzwu7dR0tVUakbS3Ev1DxOBx WMvLdsTQF9KxiEEb9ttA+GXCNYghX/0MZwQth3kJIZp2f7ScrySZC4R7ZVqyGTPGIcIzhCcIDxC+ Qz1WEX2L0V0G7pjsaxzdt+oqKNuQDykTMimr0Ld6nkfO8gPkQGbA1RSjw2+tTJDnGa4ayE6UkbQx 5PlYmh2KasoMvTh3/BZcs7A2ezFXS/fL8l2ttFLQV8fIe4Lsw348rxIdTngL4Wny9j2iD0onEMJe lIfzBl79lDyb/Ux+1s2dIA59i4crleRBB/SFmJsn3IuYLRL9fcKXSSaJ8CnipBIdTngL4Wni3yP6 IuGDhB8gDtpOV/+JcCvhT1EvcySTSxyR8In/y951h1V1bPs5e87sc4ANFlARAVFRUYqHohQbNlRE NIiKhhhRQFEUBOzGgiXGFqPGGKOINTawlxhrYom9gSb23rC3WOHN/GbnXO+9ue2P9973vu99+fLb a69Ze82aNWutPbP35ghcACxGayEwFZxYWB6LGY8VEWKIAt0OdDsRG3zUMvLFfc0XXq2kR6AY73rE 6jusu5pC2wZguP6EeTbyXUiGgX8EeAC4QK4wIVkOd/amQDtgS2AI1gljQatArKBIZWBpffUi7sKR kNwk8H2bEtTMkonAecA+QD/gJqBYtTKdnwUUVZcUPwC9FzhSaMNal7x/hVZOF59l/G7+/ry4Oxc/ Uu04PhDII3wl8DDi1h20fBrwEjgKFkoZ8U1Eik7DHvoM9DbE/33QP4N/F/Qx4EKgqFQEuz9ihP3C AyX3hX7ihF6egCbG7kCMxcjHWHzNxGfk/Q1TmLBc3Ls5B89A1HDgI+AOYAZQrO6IkOdWYf3A3oDf DzgC2Aw4BvffXOAefhfoZA7ieECg8bpANVSgAjQSYCb4KwWapgo0QF4BxwwZk5sZz1sgX4TWjsDV Ain47CpoaDAWgnMQmi+AbgyaAcuAEw56GOSzgMXoSwN6oPUpJDuDtgFKzR9DHq3UDpy3aPUD5yY4 d0GvAm0P+VLAIUAF+AijyAH2B2cmMBXaOgBhuTEZKEftBDwMzhRgd6AXMBYYD8QYjX1hibStPka3 BYhWs7R/A1rTQO9Gv66gI4GwnF6DthBwRgm0xRzZYL7MiUDw6TzonwY93uBHgD8S1y6DnjPACeDA /wxzoTzGtc5oXQoNrdG6ERrAZ0Ggc0HHAW8BLeAjQko+FnHIkcehMgo4ApGZIJ4RGb5XS4n4FJHP Dgg0XheohgpUgEY8GzRmgr9SoGmqQAPkFXB4hM9BhM9BbM8RESs1CNrkJjUL2lgktQla6QiZ1QIp 5BlW0RT6jYXgHES/F0A3Bs2AZcAJBz0M8lnAYlioAT3Q+hSSnUHbAKXmjyGPVmoHzlu0+oFzE5y7 oFeBtod8KeAQoAJE9VBygP3BmQlMhbYOQFhuTAbKUTsBD4MzBdgd6AWMBcYDMUZjX1gibauP0W0B otUs7d+A1jTQu9GvK+hIICynqHLGEHBGydnErF0AFmKOiECDnM2VAm2BNphxcyIQ19J50DANfXmD T6Q86AjIjERfy9DvGeAEcDBfDHOn4Dm2yRmtS6GtNVo3QgP4LAg0nnWzOOAtoAV8xFXJx2IvXNKx hMd5SRTuqquK23K8DhwgkLoKNAAVAgwFvyNwv0ACeQM4RsjQaeBL+YForQ3sBBwN/mPQ0KD0Ad7A tf1BLwCtAM3g5IJuCDoMOAqcCcDpwKFAI1DqzAOCbxgP+j1aK4DzFJznoAtBQ5tiAjYAGoCDIdMO GAxOa2A9aKsFrAxOIFCO1xaYBE4E0AJ0AvoBPYB1IfkNcD60nQdi1EYGmd/QugX0FbQ6gF4K/Byt T0DL+dolkMl5wRwZA4CNIXkMGg4Ay4FfDXxcpZwG9gU2A24D7oDMEFw1BZwY0J6gz6FV8ueCPiFW Pjyu4hFXAlcDQ4FYFxHJfyaQR1E84k1w5oB+ARmvkpfiuSvWjZsRq6+wesTXOEYViBU7xXc/bCU4 E7FKvAUOdsE0HnR/tC4DukDbfuB2vMlKxlVLi4eJnQU46djbXoGGRsAgwTFhj2aoCpT7gjhIOqAX +YXJKWG/CXs6Jtf/znK/hn1xc4GsgUCjClwL/iu8J9oon8cWtxIrdoHKeGEVPS6fW6Kv3sBw2S80 /IrWO3I/CB/GCqSrMZYCSOaLPRGVe8Yg+AEVgGecaL0OyzdiFh7Cwq7ggK/Cfu4T3sp+EWiMAs4T u2BlEnpcAv1B6HcR5DX0rkHnIKlBPMXlN6Hd2FnvxqgFlgVuB44GDgJadH4B/CxwFjjLQY+G31KB D/HkAe8WKb74MupPtovHYde/CP0uwuyIa/frlqdjtyg1FIjdATBWIPek7EVwjujyBahmBdApozod kotAL8KIBN8Mn1wRksaGcv8CDYnA+cBfZDTq8b8IsRGPWZYzmI6xw+eIpY2YlyGY8dKgJ0PDXrm7 hHyYfCYDDc4YdQYisDc8n4GrImS0yKjQc8SG0xPEVSqeM7ApolU9A809hB7jfeg/hx6nwqopAm0Q e+anAk14LqFu1TUMw4xwNGHXrHYTNCPgL4ffDkmd6CtH7prxnOeeQOM4GT+wcDfGEi6+/GbyGUia 4QLnu0FmDsbiDDoec/oGI70AziJwZqOvG+DEwIcjgX2ALsAotG6G5HK8LzgDzUZogE/YUUT+aFnN YBsynVaDVQPwFnUScDHeq3qALsSb1qqg3wIHoTUGaAJnOXCA6saxCt7PVgGnBuiy0DAdnOYCSRHw qpQBfQHakuW7XaAFb36XAB2h4Tn4l4Gz9PfOYo1RiLfMHgKZE3TO0lduQma7vh5rLp5CYH1bVcfm wttYY3joegS2xrv73ujRCG0W2DYO/aYCzYJjjAJ/Myz0AX85ND+X3oDmRsDaQKzTlAponQsMxlWT wA9nj8QdB/yd4smSgrUQwfpHiQO/LnqshV4ywEmF90pAj4bkOaC9GIUi34xTjOWknF98U+ENPVjl 0jqQ3w5f7QcdjdZWoF1BY73KZ0rofAZ6uPQqNNeEPc6Slm/kYfkp9HgDWBYjXQ+ZEaAfQsND9HtO fhUAzl3Irwd9WY5Lvt9nJcJOPeomC3vEbp2GCpqOg2YfSL6CzEzQcehrsfSzKr4kCkfrMLRGY+6O oNUeGq5IGvzXeDpRBLqbjHlB075AE/g/ScQsPAZ9HvRs4C0Z8yxb2C9othL4lYxn8dyP3oGMK3y7 Hb3ngOOkfwsxAlnD0YDdFtcJWv/KoqeIRj0mheQg+G08Wjugl3xwTgCxW1GaAwcg/ouQO9hD0Xg5 1xjFGFw7BvQj0I8kjWsperwLS54Dp2NfgGg3wX41UqAJ8cl+gT15As3r0Po1+A2A2DHRdOkT6IEl JnhD7Q1vY49gGCErCXqvAUt6SM3QMAX2T5H1QR0C/wxBnExGdRJ0jBrCNXwLmVAmKvZ48WaK15yH Yh8nZMh1QfN5x9cFwAggnlYpfmi9gNi4Cp9sFXqUBXp9E++JnqmDhX69Erqjggn+HCa+8HmBvq6h hqwFjsS4BsP+Q/CPA/iot4wAfcH5BjKL4JPjAo0uAtkbcC6BYwcMAacScKCMUvaM0w/AuQN8Asko 8WSMx2E47BmCfsNRS8PRO0cT7g5sCHq/A5kogVxG0C7w7STgdiHPa8UQXCswEegrkC5Czt4BHme4 1zCZ3Yhn4HaBRk/IXAJtJ1BdwhAtAk1bECEVMPaOsOEY9A9k0k5YxWSWid4j0LoZOl+Dfg1/oioa FfghD/xDGIWrlMd43zGZs0PwVYOw8AT0zAQdB69WEmgMgbWd0FqAq3LlfU3eL3RrwzH7Q0ALfkv0 9U5WS6lf96TocSzoMOh8h1l7ABlv0aPpS+i5gH6zEDlnoHMs+tqJ3i8BkXfGecBamM1gyB8B7SWj SNKQuSj1AGdAEh5j2aAR7dyrTph9wakHDnJQzQedCZ2JoG2BP6O1C67qBJ8HAq9hXPORL67g1AJe BLZEHQgHbQDtAM3IQaUX8D007JZ6ZGaB9sBVL0HPwVUR8l4g0DQe2lDnTanSHlmlIfkVOPdBoxpz b4tW3BFMuCuxndC8iNVEPNfE3aoD5qsmorcmor0m8m6GeE6FHnGXVGNBtwDtjL6OwfJdwPvQnwtr 90ta6gHuRl+9IBmCjJsETNXjPxyzI/J6lNBg21XQNjMEbQ4CKugXqwgbP2QTvqljWImZFkNDe8Sq C+iVen0QaNAjn6NtJuTxXZ8xSY9tgSqTMRaO7BB0G/BbopcAQauo3moPeLgnov0X8caBXmQFHDPg k0xjI07bGZeLCDdO4pJYbRoOCJpnxCTxnA0YL9DQDTPSQFxlzBRe4hEbIp7vGcVeIENwDIWiFyPq uVHeX1Dt30fr71PGcCwFupT+JgXvpkvwpqNkLDAV2B7PjopATxFvJYR8ycuSAnBmiLu50KMMEEjL g54E3A5OKOhCgYaqwCPgxKE1BugBzizQGuiHwEHA5eAfB70Y+C3QAqwBbA7NNpLz/jdxd8PohoC+ Cg3JaG0sOHwXI+S7AYvBvwz6imhVpA2FgjYGgj6BVh+gMzS/Ad+MN9Q1QXuhl3jQqZB8Dm1h0kJo i4LMZnAwdnJBSoJjD/lJ0HkF3+6apM1y7IKjxAC34732LWj4Ga3r5SyI9+CGbsDp4PTSfSK0eUBz C/lWHde2gbaHwMbQuQZ0IdBe+hnyVcEZDT3jcO1Z6QE5m2hdjx2ZI+RHgP8K/D0Ydbr0ttSDVgqM Bqe1pOUs6B4Tes6LaDScFMhnXNCvIe+K1i6Qj4VVrdBLK9DSS96QiYS1RXJEGONs8P3RS9kST4Fo DdN7FHxvaN4qkH0l0PhWtHLaU9QHcFykJTLmxdcISg1gXRn/oC34SsEN2tzw3cJVgbQ8Wr1Be5R8 JXyOvS0FPwe4XHpGIjijgWGyFegKnAVcD8nD8EAjGbfSHuBDYA/gZUiWlZEDTipsOwsskk9voKez jGrI7AeewLXnMK5IYDfgI4zxJmS2QPOX4F8B9pYZDbon4qQeJAdJbUAK/7+GT45LO4G9cFUxaDPo DPR1BjN7S1xlDhK0CXmqxgLDMXcdRasJNUqtiS/h72Me3TGuYbCqA6IiEZKoWqrUbwT/sbT8/SBk lsCfpM0y0/G8iOKp1BTonIIszhFxwuuhJ+LWE9XMU1QeWWGAoahF46EnDPUBNYpcBydCzz4hYyPr mECaLOsb+MXA88CT0Nm8uDZHAtoPkkNg7QKZU/DhMzy9DAXiDbsyB+N9IUeNb0u6G29wewYZowWN aN+D/Uh3PJ3eg7d73oTo3wjYkhzDSsISMhJ6EI+eQzNSSWyvjKS+pFvvpB4ZpE9qQlZ/MkTo7RjT 3IO48ztHifg3/ogNsSNliCOxF2ecZybir9Y0UoqUJU7EgZ+LL01FC7FSBvHXGDqtEJVQoTcqtpWH +C0WtBv1NkZKk3I9e/ZLJ6OBE4BTgLOBOcDliakpvcj65JT+CWQrcGdK/5Qsshd4KCUzLZWcAJ7h ggnkAvBaalrPVHIH+LBfUmIKeQ58k8GbDQSIZ+HEaEUKSjycEtapf8X5C2UgeGYtv33R0e4DNH+A 9h+gCSj12H6Amo5liCfxIUGkAWlOokgsiSeJJJVkkRH4hYBZZB5ZQlTxWQKZKG02lJVHVX6/ZjCL 33QWv7DtqR9nEfGXnwbbaIK/gLHdCHsNtsf04wV5LO0uj47r+XX8WCFCHp17Sz3Ou3lfXL/zCf38 hj4K8T0RviDCr5oo3Oq24ksGUxjO/od/j4r1ERFlqKoE0QhjHHElYaQpiSQxpCvpQfqQDDKMZHPP TSdzSC5ZTtaSzWQn2U+OkTPkErlB7pPn5B2/dWimzYSaVpvyTFtwzDdtxXGN6Qcc15q28WMep37E Mc+0Hcd80w4c15h24rjWtIso/Libn+Vz6T045pl+wjHf9DOOa0x7cVxr2sel8037+dkaLn0AxzzT Lzjmmw7iuMZ0CMe1psNceo3pCD9by6WP4phnOoZjvuk4jmtMJ3BcazrJpdf+jUfEL5MPIaP/LY+c wshXm07rninQPVOoe+aM7pmzvJ/Vpl91//ym++Wc7pfzul8u6B65qHvkku6Ry7pHrugeuQqPXNM9 cl33yA3dIzd1j9zSPXIbHrmje+Su7pF7ukeKdI/c1z3y4F94ZDbJIctI/j/0yEPdI490jzzWPfJE 98hT3SPP4JHnukde6BHzUvfM77pnXumeeY2IeaP7563un3e6X97rfinWPVIiPcILDTxiNkiPmBXp ETMVHjEbpUfMTHrErEqPmE3SI2az9IjZ5j/wyF5yhBSQC9wj98hT8sagGGzNttIjZjvpEbMmPWK2 lx4xO0iPmEsJj5hLS4+Yy0iPmMtKj5gdpUfMTtIj5nLCI+by0iPmCtIjZmcZMeaK0jNmF+kZcyUR MWZX6R+zm+4fd90/lXW/VBcjNXvofqmi+6Wq7pdqul88pV/+Y4/ct3qkhu6RmrpHvHSP1NI9Ulv3 iDc84qN7xFf3iJ/ukTq6Ryy6R/zhkQDdI4G6R4J0j9TVPVJP90gwPBKieyRU90iY7pH6esQ00D3T EBHTSPdMY90z4bpnmkjPiN/WFHbjDjSD3wk00l98PMbvBq6kBrFwfzUn0SROO80rfTPzR8YZWoFO zdQKQcVw3hmdmqmd5VQLyP2qUzO130AJuXM6NRO/r+JJ/EgIn48o0ol051U9i4wkE7Xz1p4uWHu6 aO3pkrWny9aerlh7umrt6dofPWlFnGppbsZ593VqpvYAVAvOe6hT/8yi61aLblgtumm16JbVottW i+5YLbprteie1aJHVoseWy16YrXoqdUinvsGP4MfX8C4KC58PVhNqYZ7MV+52QdhFZBFxK9FqX81 W3z1Q1sSRfkdVCsr1dpKRVqpNqAYfgPPma8VPXHlU1z1DFc8h/QLSL4U0aI85VeIaJlFKv69r8hc vq7JJ1vJKZ4/r3jmaIbyBg9DbUOQoZGhlUF872y0+4nr+hbUz1Zq7x+UcpRTc0Ads1LHrdQJK3US lFiVasopQSvXOc5G22mrVIGVKgRFufcciJNyBlcIS6YqwoqvIXP2A5nyirBptrKPUC45W/nVquk3 K3XOSp23Uhes1EUrdclKXbZSV0CZ+LrZmXjw2fMj9UgDha8NlPm8v4Podb5ygEvNV/hKQcnh54fA zVF+4dwc5apV1zXdFyZlmjKdx0uusoxLLldWE1slX8knpZS1yjpSWtmgbCRllc3KNr7ip1gZO/Go Eb/iItZ9pfVfVFzIG1Ypq7jOjVyeKjuUHXytyCNPmYW/FBe/lyfikN91xL+Rzle+vM4qc5W5xE2Z p8wj7lzHLlIZf/ndGH/5HY5fvqPq5+oERewWKEX31JbaiudQVIM+LkHvqm5URL5BraxWERYa4skq eo9Wpl7Um/rRAFqPZtNxdDydSCfRafRLOot+Tb+lOXQRXUZX0FU0j66h6+gm+gPdQffQffQQPUZP 0kL6G71Ir9KbXNd9+oA+pk+ZF/NhDVlj1oQ1Y81ZBGvNIlk0i2GdWFfWjfVgvVhflsYy2WA2nI1k o1k2G8cmsIlsEpvCprHpbAabxWazOWwum8dyWC5bwpaz1Wwt28i2sG3sR7aL/cwOsMPsODvJCtiv 7Dy7zK6zO+w+e8yes1fsLStRqWpS7dRSahnVUa2guqjufNweahW1quqp1lC91Nqqj+qnWtRAta4a otZXG6tN1GZqvNpdTVIz7dbbbbTbrCmaqtlqDlpZrbzmolXWqmk1NC+ttuaj+Wt1tVCtgRautdBa a2219lqsFqfFa921RE38asX31EzFkqMyrcznoSatSRTuZW8+D77Ul9cHf+pPGK1L6xKVjqFjiImO pWOJmXt/PLGhn9PPiS39gn5B7OhUOpVofDa+JPZ0Jp9BBz4rX5NSfGa+JaXpfDqflKEL6UJSli6l S4kjn6kVxInP1ipSjs9YHinPZ20NqcBnbh1x5rO3iVTkM/gDceGzuINU4jO5h7jy2dxH3OhBepC4 06P0KKnMZ/Yk8eCzW0iq8Bn+jVTls3yRVOMzfZVXs5v0JqlO79K7pAYtokWkJp/5B8SLPqKPSC36 hD4htXkUeBFvHgk+xIc1YA2IL2vEGhE/Fs7CSR3WlDUlFh4dzYk/j5AIEsBasVYkkEdKJAni0RJN 6vKIiSH1eNR0IsE8crqSEB493Ugoj6AeJIwls2RSn/XhO5oGrD/rTxqyDJZBGrFBbBBpzIaxYSSc R9dI0oRH2GjSlEdZNmnGI20cac6jbQJpwSNuIongUTeJtOSRN4W04tE3jbTmETidRPIonEHa8Eic RaJ4NM4mbXlEziHRPCrnknY8MueR9jw6c8hHPEJzSQyP0iWkA4/U5SSWR+tq0pFH7FrSiUftRtKZ bWabSZyIXtKFx+8u8jGP4Z9JPI/jA+QTHsuHSTcez8fJpzymT5Lu7DQ7TRLYWXaW9ODxfZ705DF+ mSTyOL9OkthtdpsksyJWRHqxR+wR6c2esWckhf3Ofid9ePy/JX1ZCSshqTwPKOnHc8FE+vN8sCNp PCdKkXSeF2XIAJ4bjiSD50cFkqlWVCuSLNVNdSMDea5UJYN4pniSYTxbapDhPGO8yAieNbXJZ6r4 i7aRPHv8yCieQRYyWg1QA8gYNUgNItk8m0LIWDVMDSPj1EZqIzJeDVfDyQS1qdqUfM4zLJ5M5FnW nXyhJqqJZJKaoWaQyXbr7NaRKXYb7DaQqXab7DaRaTz7FPIlz0CVTOdZaEu+4pnoQGbwbCxLZvKM LE9m8ax0IV9r7po7ma1V1aqSb3iG1iBzeJZ6kW95ptYmc3m2+pDvNItmIfO0IC2IzNdCtBCSw7O3 AVnAMzic5GrNteZkodZKa0UWaVFaFFnMM7o9WcKzOpYs5ZkdR5bx7I4n3/MM706W8yxPJCu0VJ7r K3m23yeZtAqtRS00iD6jk+lX9Bv6HV1AF9Pv6Qa6hf5Id6FiHqEnaAH9lZ6nV+h1epvXy/usFn3G ajFvOplFsfYslsWxeNadJbLeLJWlsyw2hI1gi9gytpLls/U8ln5g3mwn+4ntZ4fYMVrAj2fYOXaR XWU32T32kD1lL9kbVqwqqqraqvb0NotSy9GqaiU1Va3HYjnVTe2h9mJX7bZqRs2saVppzUlz1lw1 D81T89MCtWCtvtZYa6a11Npo7bQYrZPWVeum9dCStf58rBmoaQQ1zYBqpqCaUVQzI6oWQ71SUalM qFRmVCobVCpbVCo7VCQNFckeFckBFakUKlJpVKQyqEhlUZEcUZGcUJHKoSKVR0WqgIrkjIpUERXJ BRWpEmqRK2qRG2qRO2pRZdQZD9SZKqgzVVFnqqHOeKLOVEedqYE6UxN1xgt1phbqTG3UGW/UGR/U GV9UAD9UgDqoABZUAH9UgABUgEBUgCBUgLqoAMGoACGoAKGoAGGoAPVRARqgAjREBWiECtAYFSAc FaAJKkBTVIBmqADNUQFaoAJEoAK0RAVohQrQGhUgEhWgDSpAFCpAW1SAaFSAdqgA7XnuVyYfIZdj kMUdkMWxyNyOyNxOyNzOyNw4ZGsXZGtXZOvHyNZ4ZOsnyNZuyNZPka3dka0JyNYeyM2eyM1E5GYS cjMZudkLudkbuZmC3OyD3OyL3ExFbvZDbvZHbqYhN9ORmwOQmxkf5GYdGvhPc/MwPU5P07M8Ny8j N3kM6blZ+9/Oza2sNtvB9rB97CA7Sk/zYyH7Tc/Nu+wBe8JesNfsvWpQmWpjzc0qPDf7IjerIDeT eW5u+dPcDNDqaWFaI62pFqFFatH/n5v/n5v/h3PTYBD/IrUr6UZy+V10I9lJfsHu9hZ5jOck2DeT 2nwfxfdv9AWP5Wz6O8dx9DXHifQtx2nqRKKwhuoQjo3VYRybqCM4NvsTDS+h4RU0vIGGd9DwBTQM hYbh0PAZNPD9nzpSSIAaZaVGW6kxVirbSo21UuOs1HhQ2FFrzwStPf+Dw6vNFULYe1ZMFF4X+D6R 1waVqLw+2BIzz+tk/N1rJJ4g1SBB0FLa7gjPZn4lvfcHxeNC7PaP8rNnfPd2EXIOdBTPfd4mj/Qe dohiR0GwNzDwKy+LPSHeUZix473Nd6OrxTMQJVfuHEmhXSk7h797cyFsEu+mqhIf7t1w/XnBYexl j1j3/TfErx+Cummlbv1BqYOF9D/dG+ONDd7IaXjTxF2lPKaVjL2MvY0p+ps7g5QixEX8Pa8TuMRl lyXb5UfVpvaEVhN+tzeYlNxsl9WctVwxGPztLDYq83agigsjlgTV1ls1GA3ZwYrBmNvB8pHF5wOO 6yL30a6kAf5rR3qQTJJGUkkSyeL/NxL/Wap8oMzoNPTil48XzXjcxPa0a2q3HMum+ClNa+Zml8u2 ZBt/tmTTVblUMSiKYyA3McjTP/xg7p6hU2FwkMXeaq2BcbsGw0za0ag6Kh07+DtayogTs6Nt54TM 3in9e2Wl9fcvbXEQTJOjKSYpsV9a/0R/d4ur4Ng6lmub0jMjLTMtOcujWVpGelpGQlYKv6KKpbJo p47Of2mPTemX5NshK6Ffukf7Zk0s7hXs/QMtgQHBARZLSEDdrvw0yFLPemoZs+G/xTJ7i51ot3M0 tm3XPsa/pqW6PHXv3ywlvXdShkfzDi08WnSIDmsa0qKZb6ClSZBvsH9QkH91SzU5Itc/HVGHpIxB KT2TLNmGqh962MAIzTaUIpxvq2QbDOSmiynPdrZPweagxMNBHk+3G+OyJ2+yuRBTkL7gWrzP7Rd9 lrzY7LduzIQuhvutU2sZ3V+ETO7s/GJ3gP2DoOn397e4+eMk2+orHy0c/vmvT9J7RR7tc+HWGvZV wwcsvajJ8VXrqif/uGrRFufXQxyHDDw6OTD+swe99j6g771Wx3XfM3zH6KmBMxN6mNd9+VHZpC+b jNxbWP2ub3KT082C3nwz5tW7zxc+CI2p/Opuo5Juow+q9Uznz//Q50Dw8QmbXNpEFlR/euCXqWsS ek0616HOsyj3sT49D+WWjimzbUxcZtNx14PWP7w3c2dU9onPZtu1G1XneOlPXFokr1KefOpJIvbs 6XhqbEbTqhPCluyc2d6giB8ZXpxtsOEeYRY37lI3B2N5o9OnbZpe0n4IyS1Irje109usLq2Tx3gj htyqGZ0t5Uc7VQt69VtMRLrtg/C3g95u8F77c90NpSyxQqCysa2ljaV1bsvcFhOa9c7KSg+rU6dn Rqpfvz/mya9nWr866X1TBLdOekZa4sCeWZl1rNMoZhGTyKPSj4tY4lQzT0zGTAaDMcoSaWn1x7lF mdBA72Dw4MF/1kFSxj/RnGVxFPZWN2oW2z9UUvPfJCQVUVKqafvcQve8Co0r2y7zDp7UK853naVd /Uc/dU65n3Q6al/7jKeZ1V/eGKfsG+g6IK7ZqicHV067fCgtrsEXt+scHVb3fvLZwm7bpi3oPGFW 6dyij4LzOr+sObxau4q/Xuk3yFjdklA2b+m0xTU2t7rZ4WmL6H1bv6hZev6K68er3R2amj+zd5jL M8e9TpuHheU0Ofdtp5wTp6+Unz09I2qN4XdP9W1F7znrOx4ZtuDOjLC+/sNHP3PI6Tx5yy22ObT6 3G+ya9WbHJKfP9ll9cPb9/12tfFbaqo75pmjx72NkTNzds0b22lUXrk68bUG2M3qFfLOsivp9ovQ S/eqPvh8yqr19TcZfsq78m5a9XJa1Z0LtAduvIzd52Ws4IMytrbMGtvJJ+ovuIgyvPZvy9jQ/5Zi Uc1SRSa9y4ftiUkeHVJ69edaPyhk/gFBAQGBgYGhspAFWU8tY8b+TxQyXZz+A/F/WZjurIlf5GH/ ymvEdjZ8VN7DokGrvTo0Djsf/tmGaYG3Ojde+lG5oNilxzdOXtF4efBV3/YP6paPftR22HnHQRPX +jzuEr+i6OrZWgNvVBpf87tnr3xzmtTztgt/u7P+th/iB84sH9PmUOC+4LXPikYuf9GkXLw5ya1K 8GOfbVXtSq8rPX9w1fHjRrT7odL0tS8WF09+rs2Nzn1x0LbKtZXXDfVavq+T3WcMfbGi7oVZnee/ bVPgkH0+5MuyxdfPDMuamHi1x97qfrXz5ztXdnDf/NMaz40O7bdfcp0Z33rZ0E2bzx97nT7cyzBu a+1ax3etYOzqlVID2r7Pi682tlbRgX2Rv9ypOe70yP3N7L4mbF27pAH7/ihM3blH4v8sUekH1arL gGVdA9uem2MaXTLOfefnrzMCmjy1fCSayxh5vVgSYWn+t/PDI0ScMsfagf51Q+t6ByUnJFt6BPv7 JiQGBvsGJSQE+ibU46fB9Xr0tNQNCAwKSkj8qwJ4uMydQ6c2lo8zHAz2Cyxf/oeoubaVLZ1kAWxn 4SUwl5fACS3+owLIY5lHMg/iTy0hvoH+vgEWfwtKYNcPSmC0hRfBD0pgo3+vBP4D3Vl/Vu/8z/av XbZz4JjC+fuLXocVNG9rznnY7XKfj7cMPa7M2z6od870hfPsfh61aMqTttu+Dn1rf+Xqd88/8SxV aerEcmEjzucd23AwdVuoT4vPPMvE1rDY25e0vEdNN28kf+IzfL7bitJvXNdmPW2X0jdnhee4cw9m 517OXPKoj8vqNj1ynozY7TSq1dG265u/ftxgZr+mv94ZcatC7ne9e9t4vVa+eVSGbusVk7fn7obM Zad6Ho281ujGs+j3JQuv/Kg41v/E41LHxovzp4f7hwz06mZcEdHv1othQ8N3VD56p0Vh/rVPGr0Y eOBWcs/uRwrnjvt8qqfl90dBJ3q6rWvaK9Khza4wh0ebvw77PuRG9RnmZROT+bKNbef1bomsd7YJ gTVcsFrz/9sy9ymqh63NjBpfzHzqk2ioWJ5yx/tXtFT4K6aNdV78fS3esi54/qUuxKSl8eLAJyol OaVnQlaSR5OBWb3TMlKyhqKY8QVYoH9AgH9oYAAvZgH6aYA4/d+ss/+qgq3P6BJf0ZK4y21udw+P pt8O6pDaqNKZtCOHn9zrW/xN+dJXLodljXXZUic34H7JpZ+aRlcrzCDn63a2/eJQvkfr5497r27b ZurSHUPbDPiupenc++qX5w+ceHxlZvNRZ8ecf7bjab0lB+NbXFiT1/CKV+9vXL5fmpHZ6UmFWTfe 152VkXtm0Kfug1uMHR9S/kTmx4yHzNSl61PqnKtoVzwjq9a1QXViLzpZurw6NbXH+8MHP43wb/9D Tccb4ZbjGbVKe1U9EBzdMDeg4fSjC0PU8fHRnbK9arOALW3Otut5+5RvjyctGt5ebSYvIxbmnPx4 So0Od4atjHwacTy4QUjOxsHxSyvkTD1c5stODfastvmUnv6jgnXjHulqKSUqg6PBUGJkFsoPH1Sv P60koli5lTIaeQROsJRVbfStSTmDkUExX/5aeYrQ8v6kf/TpGpO+vjqne/3l/mnLGmz/1ddS0Srk pBg1d1vSgQzk25lmpMlf1TKH1dndwzvV/OZmdcd3ta/advi6y40llvaylrW2tLS0yG2W22RC43+/ llmbM3hoixKEKhb7QRVrZeFF+YMqFvKfLOREwjSTWv++fikG0iW00agaEWuK0sLXBWzqU+RQp//y 1r8XfTrwQVR937PN8uyKD9/19V9c7ciI9nNGV/lkdcM6UdsWLe8073r6j1s3vhq6qXXG743uNRl1 6KpWIeXw0nkevm/s2u/tdNT3euSp7em3l9v/V3XmHdV0lsXxX2ihGQOhLRIggDQpvyC2UYYqTYg0 kYEIUkMvkRYskAgISEClCASEBCkKSNUJB4FhlDUUEaTIoIgEkA4RQQwWJjrrys665Z89nv3vd+87 77zfee97P+/e+2jcJY4v6ClHjq9kGeW/er28NJEop3uI7pjHsldMUL9OkslgZkKRK0zM21Rq5wyi 5DKGseNxOj5LPSyIIv1WhmU/hOtW2MQiH9JSm1XqCJ6OJjTbh+zZYifHUQrXYRNtt9WRWwMkneD3 17MQk/N+0zdoGi2MXXCYd1ru0zXahqiygPf+zFcxcpZNfeOOM73R2VLYjj0SbqMZSIs0zZYqXROZ Jbi4NHBidI8LqifngcBSAiz1aBAMgdE7o2aej+97HdjZthBafPzK8bOZ5KId5tzO64+KcYLhJXsX NbUlGS/x+0RXQ2oP4UhsuzrybglvWVjKKPy512pIj+lAv+Qs4T5PQ/87jTG5lGuVgu8QKgZVk+zx G7GmTdCTZt4nDTA1RguYxfpIwrCgrkCQTBxajglzGJ2ivpsyg1d55WzaSGidaeVFxTCzDFX87mWk Z3WQhymoW9uw+SzarUTf88L+mk2RAQAyu2pF4vQbifNKjUmP/MvN0Np5zybC9J4A5zzM+nqSOuhS GzA8ua1Yr5rLwH/Tj5LNhJfDG/bZ8A/d0wNJfFAOv5e/8FvCV/czv2W+B7/BfaAuyCH2nt3gp2RU B/3Z5JTaHPP7lfv/id6F1MDasafmV9TPBGj9ZbyZOdGea6toU9UzKoVR2r7UV9ZnVRUOyovMQwcd ssQtMncYXbmVgwWVR4CAmdPNC8nQ7eswnhxWcrdc126lCwUrqzgZjfenp5OQc9OYYmqbon0neePw I4Fe1+reGiMeGrs0MAP3RPWZqX1NYu+UqqmWSmXi0WN2wpPcGu/8L10Cgy+8/gks2Dg3dLV+BnX1 3NvHiNf8P9sH2TUcvlRoDlia+YioqPmUX53s5yNa0tjxZSJmYgKkwvjFY9EfIXlIG/4EAA6aLv78 XNG06b6mQ2G1bLQhOqqbMnbwfAbVnes2clvt+3VKHaRH4YjDJpv33q/yQl/oXcHZkbJ/R+9vFsL/ QG/4VnpzPABIzPkDvsRLIJH8bfxSPa+7/8/lSYITqiSolkUlVVannFahCC3v/xvq/1elO2ev4VdT 7mG5TfaOzjZURT3tIdhaQ2q1wsNcgoQRFT0tp9PpWgOitNQgD/pxri6MPMImdzTGgHm8qdopT2Yc CUmsbIpeudi7cBCyxGxJF+RlkM2ZLHvx0aMVVyanyf6DcW0vM1f4tBO4Zy+rKymEvnvzfjI6V2vb OpQZelcKU5AWIIjPolMP5OM0221hcx5YfYmci/L6TKi0DrsbbRmJ1tuFF2LMheptJggixn4VdE9j PaFLzmMuxrbv2eVa3Dp/96yQ0ekBezxqCexsivbGukAkBcVgj0fEctYONfo41WtqT7MTErttHWcK QjMDKw9YDbwhtN6UivFQW6ZR1HT5oqQ9OvRkg+RILKEHGk2PjOun2Atnb09cLw/fQ8e0hymKKkcK HbJLDXM2NRa7W19fY41jFBptxhFQcdfEQZ8ZI1FXacY1BVSv8eyu2aZV826NgWGdOCtldXMlN+c5 x+XS57kFnT+ENBNVwvlEliJRrRRSm4rDnVp/vWRqpHtDMBVR2nrTjCUa8iFFJ7Du45gtI1Wxw6e5 AHlB1ItLT7P6p3T6JGrqdk2nZ0O0A++AoZZNZWZNSXRFfVF2hPRvVy4gIhS0dcr5g4tcUne2Fi3H d6KG5mWPduQtWbxYh3iHJAudZfgxXgbPlV3tQattwtpdsMPWO6jDG9rX9LWOSQR0IIo/oEk8nBDm KeOCQEBOuH2/fPnbbZOvTeQi4v1P6drf9CvAjRbe2qHm/MBXSwgNA7eOin9KBr9M5EFzoNReWojL 5y8VMKzLCszoDM/f2Rg7CHptmSKMdgQditTjVAFrwA/wBPBAyOcmtw8QDsgDDgABCOVYOI7fnfPl CxCoynFK/zJYwwmhITi8e6gvQftPlwoPCQKYhODO9FsnwBPc3RMPhz038F1umfbojhMhGqodW+s5 NRjkGZiZO66J91pPziev4eFVrT9GtEElGgVWwkt+47IAUcmuYvOTludji7ARP5o1EiLPgvSxhGzr eFdtyCpjHHmbHjheWJ0u6Rk2CXuLkiXwOKeoPbFP7yOI7988dUF/iU2TpbqfkLdzOapYBV3J9zCb ey32NHv0UF9UtmgdGzd3R4M2QU6SAiIML1sH1fbvfPjmQTnR2GwvHnLAIKyBSmQJtZg16bMk+bfb 3EVpCQ9G/TIsv3cY+gi6UWYywS/laYeLzUhmlpk0Sdn02quux2ugxB2rRw82Mi5FT+zaeGFEJXGp giQupa9nxIcmcYlzXCKfVZn23bKAb79IbNHkCVBqqySFvr6sQDiL/32EF739jy4bej96/24QBJ3/ SZFrh2zi7gDlbZ1ujErW7FQwuS+e9idef9LK4/w7f02co2wb7yr29ULGx2Bd21zapEUtgr2SZsiW +2MiDZo1PLtgVnYbubLlqre0IgMMikVjPwxWxPQ8O8LGVAiP7KDofIAZXzxwsJS02ynKdmhk2y98 r278sG6kPZvV4dT1xLjrHlEMV/jSwYoScu3iPhIRqicyFRHoJeQq8gPvuRWn++8HK/yMES1Y8bs5 gsrIE09H6m7GRyjjTY9ouM0inS329hcuDvq51sPC1MlYOpfGQpB+fUYhC5ftGKwoNz6XhIvbOMC7 L6h3GK90Ul9o7ZVrr9jix5Mf84JvdKMVBgYG1NrKcxuGKAR1tzQ3wHAIvgAjEhsVXvo8+OAj/YwN /A7KDLQBDQplbmRzdHJlYW0NCmVuZG9iag0KODI5IDAgb2JqDQpbIDBbIDc1MF0gIDEzNVsgMzUw XSAgMTc3WyA1NTZdIF0gDQplbmRvYmoNCjgzMCAwIG9iag0KPDwvRmlsdGVyL0ZsYXRlRGVjb2Rl L0xlbmd0aCAyMjQ+Pg0Kc3RyZWFtDQp4nF2QzUrFMBCF93mKWV4Xl+S6cFUKUhW68AerD5Am0xqw kzBNF317J7FcwYEEJud8w8norn/oKWTQbxzdgBmmQJ5xjRs7hBHnQOpiwAeXj67ebrFJaYGHfc24 9DRF1TSg30VcM+9wuvdxxBulX9kjB5rh9NkN0g9bSt+4IGUwqm3B4ySDnm16sQuCrti596KHvJ+F +XN87AnhtvaX3zAuelyTdciWZlSNkWqheZJqFZL/px/UOLkvy8Xd3RW3eTTVfbwXrnzvGsptzJKn 7qAGKREC4XVNKaZClfMDFjJvVg0KZW5kc3RyZWFtDQplbmRvYmoNCjgzMSAwIG9iag0KPDwvRmls dGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCAxMzE1Ni9MZW5ndGgxIDI4MzA4Pj4NCnN0cmVhbQ0KeJzk fAl8k0X6/zPvm6v3fUA43jS0FHokaekFBVraclUQKEeLKE2TtIlNk5ikLfVAQAQsuLIr6sKugrei YAAPYFWUFUVdr/VYERUPPNe6uKuyHm3+z8z7pk0pDeXH/o7P5z8v8515Z5555rlm3nnTBCAAEI8g A6GyZtaMqW/9NR6gphRAXXvRwpqZMp77FEC+EKk+v7hGl2d49WQzAHkA7xcvrpxT2/Jy62IABdLL PzK1GF31k07PBdCsRZqlpjavsFv34IMA47dg/8RGV1PLc99P8gGkfYQTLm8yelwqLYTjfJnIL7HJ 3tE4d9+L5QC615HnUau5ZcXlPdfEAESOAEiyWi1G8zHywpfIOxvpC2lDfEK4F+/NeD/G2uJdMe1+ 2SEADm/5hXanyagryHkESX+PNM+3GFe4+DTZaaxvQALBYWyxLKpb/ipAcT3A8PtdTo/XPwmQV42K 9rvcFtfFL4xdDjC2jPIDais5wMHFo/+wPKb0B5WakgHcu+vmHlo+O+0rK0DPvPATSgPeRjJ6mrBU GnrmAURsAvC/Fn6ityeQjrKWT+BSUEEY1jmIBR2U4NBvZMvxHi/lKLIZZ1fJXpWhxHxyoAQzL0RS sQZJc2oEAcpOCac+UmSRe8CgNBDfqt5eGQC7UUj3qikwOywTtgzK7v9YUn0Ku/6n5lL+9n9urv8r San5/1Dnd2AXzRfA4hNCcMmeucpDpBCk58HlPz34nKOpklTVSPi3yo97l9Lfg/uXCjEcwvzdEAHh WI+ECKxHQSRiNMMYiEKMhWjEOIjx/wrxEIuYAHGIiRCPmAQJiMmQ6P8FUiAJMZXhMEhGHA4piGpI 9f8MI2AY4kgYjjgK1IijYYT/JxBgJKKGYRqMQtTCaMQxIPj/DemgQcyANMSxoEXMhDGI4yDdfxrG M8yCDMRsGIuYA5mIuTDO/yPuzeMR9ZCFaIBsxDzI8f8A+QwnQC5iAegQC0GPWAQG//dQDHmIJZCP OBEmIE6CAsRSKPT/CyYznAJFiFOhGLEMSvz/hHKYiDgNJiFWQCliJUxGrIIp/u9gOsMZMBVxJpQh zoJyxNkwzX8KqqEC8SKoRJwD0xHnMrwY8R8wD2YgzoeZiAtgFmINzPZ/CwuhGnERXIS4GOYgLoG5 iLWIXVAHFyMuhXmIl8B8xGWwAPFSqPF/A5fBQsTlsAixHhYjGhk2wBL/38EEtYhmqEO0wFLERrjE /zU0wTJEK1yKaIPLEC+H5YjNiF+BHeoRW8CI6IAGRCeYEF1g9n8JV4AF0Q2NiB5oQvQybAWr/wto AxtiO1yOuAKaETvA7v8croQWxKvAgXg1OBGvYbgSXP7P4Fq4AnEVuBFXgwdxDXgRr4NW/0lYC22I 10M74jqG62EF4gbo8H8KN8CViJ1wFeJGuBpxE1zj/wRuhJWIv4FrEW+CVYibGf4WVvs/ht/BGsSb 4TrELXA94i0Mb4V1/o/gNliP+HvYgLiV4Ta4AfEP0Ok/AX+EjYi3wybEO+BGxO3wG/+HsANuQrwT NiPexfBu+C3iPfA7/wdwL9yMeB9sQbwfbkF8AG5FfBBu878PO+H3iA8xfBi2Iu6CPyLuRjwOj8Dt iD64A3EPbEfcCzv878E+uBPxUbgL8TG4G/FxuAfxCbjXfwz2MzwA9yEehPsR/wQPID4JD/rfhadg J+LT8BDiIXgY8RnY5f8bPAu7EQ8z/DM8gvgc+BCPwB7/O/A87EV8AfYhHoVHEV+ExxBfgsf9b8PL DP8CTyC+AvsRX4UDiK/BQf9b8Dr8CfENeBLxr/AU4pvwtP9NeAsOIb7N8B14BhGlQHwXDvv/Csfg z4jvwXOIx+F5xPcZfgAv+N+AD+Eo4gmGH8GLiB/DS4ifwMv+1+FT+AviSXgF8TN4FfFzeM3/GnwB ryN+CW8gfsXwa/gr4t/hTf+r8A28hdgFbyN+C+8g/gP+hngK3vW/At/BMcR/wnuI/2L4PRxH/AHe 9/8FfoQPEE/Dh4j/hhOIP8FH/pfhZ/gY8Rf4BPFX+BSxm2EPnPS/BH74DBFwxwU4GRGlwK09Imro D47IwbvCh87lPzw4IiJEZ2S0Ah9ckdFDZxfCHKEmOme6oMGRISwPUTFKtGBUzNDZhTBHqInOmS5o cFSoQIyJw0hFHDq7EKTnEQ0D03ksl4EpJpSTYuNVaMHY+KGzC0F6HtEwMF2QgWJjQ3TGJYShBeMT hs4uBGmoic6ZLshAcaECMSE5HC2YmDx0dkmDd51HNAxM57FcBqaEUE5KSo1A8yenDp1dyuBdiUPn MjCdRygNTEkhLA+p6kg0/zD10NmFIA2h/rlTKCnPmVJDOUk9GiMVRoweOrtRg3cNHzqXgek8Quks M4eaeqQmBl83R2mGzk4YvOs8omFguiADjRgRolNIj0ULatKHzm7M4F0hXHzuNPJCBo8OFYiajDgY BmkZQ2cXwhznEfED0wXpKAghOtPHJ8AIyBg/dHbjBu/SDp3LwHQey2VgGhMiumC8PglXWJZ+6Ox0 g3dlDp3LwHQey2VgGhfC8pBbkILm1xUMnV3+4F3ZQ+cyMIWS8pwpJydEZ17JMMiACSVDZ1c8eFcI F587hZLynMlgCNFZOEWNFiyeMnR2pYN3hXDxuZP+QgYXhArEidNGYoiVThs6u7LBu4qGzmVgmnAh g0tCBWLFnDTIg6o5Q2c3e/CuqUPnMjCFiI9zp2mhnFS9OANX2JzFQ2dXM3jXjKFzGZgqLmTwrFkh OmuWj4cpsHj50NktG7zr4qFzGZhCxMe50/z5ITqX2XKhCpbbhs6ucfCuJUPnMjAtuJDBS5eG6DS7 86AamtxDZ+ccvOs8omFgqruQwQ0Nofs56Q91icDTguALAFFA8BcIBv4pj97LBv+7/4CkP3tzdb+7 DUPnd+HpyPPnopCxR0gkqNBCslNpp+acMp9yn/rI7wc4pZHuTvj9MZ/i9UVscsznZ1qprKi4aEJ+ nkGvy83Jzho/LnNsRvoYbZpGGD1q5Aj18GGpKclJiQnxcbEx0VGREeFhKqVCLuM5AtlV2un1gi+j 3ifL0M6cmUPvtUZsMAY11PsEbJren8Yn1DMyoT9lGVI2nkFZJlKW9VKSWKEUSnOyhSqt4HulUivs J0vn12L9xkptneDrYvU5rC7LYDdReKPR4AihKtVaKfhIvVDlm95m7ayqr0R+eyLCK7QVlvCcbNgT HoHVCKz5pmtde8j0KYRVuOlVE/dwoIpCqXyztZVVvlnaSiqCj0+vMpp98+bXVlWqNZq6nGwfqTBp G3ygneaLyWIkUMGm8SkqfEo2jWCj6sBGYU/2M52b9sdCQ31WpFlrNi6r9fHGOjpHXJZvhrbSN+PK k6k52fvJfQtrfWEV+wksrD0As/2r9sxaVVlZR2eLr6hdz8hTkDzlypNqvrMq1SbQ287O9YJvx/za 4F4Nxbo6ZJqTXb2gVoNSa6s2CVSNBbVMA2RKUnUoJG2jaooKW7RVtKX+csEXpp2mtXZeXo/OGt7p gwUdmr3DZ5cd8H8Es6uEzoW1Wo1vqlpbZ6wcsScROhd07JtVJszq35OTvSc2TrT0nugYqRIZFVyx 9PaxGiOnNZQ6YGpCJdLOwhDxCSYBJanV+rj0YgqWYug0FSMZpjqCFrWh/eo7YydSR8jTY7VC5w+A gaDt+qZ/i1FqUaTH/gC0SsOlN+SwP1D3ZWX5xo+nkaKsQNeiZFPYfUFOdpuvWuuKFXzVaDKYV4uD 6ibq0OQaDfXyxv1l0IA3vlXza8V7ARrUe6FMl1Xn4+ppzzOBnqRFtGdVoKd3eL0Ww/lRtpCTfKqM 3n8xsckJVdaJPpIcotsi9uPyqRL2yOTpnfNqM4ydG9UZ9Z2b6tA103EpdnZO1wrTO+s7jfv9qxq0 Qqy2c091daerqj6g0n7/MxvVvrJNdVaCRvXli9bwJVTU8mquTqxxar4uB8oiYfp0FCU+TlU2U9jP Fe6dmYfFdawgD4vFQ2LxoFg8IBb3i8XdYnGnWGwXi1liMVMsZojFNLEoE4spYlEqFiVioRALmVjw YkHKLsbyfczHMb+H+R3Mf8b8OObHMD+CeRfmhzE/gPl+zNsx34H5dsybMF+H2YR5OeP5iMh6l1js FIv7xOJesbhHLO4Qi0qxKBeLyWJRLBZKsZCLBScWUFaG5THMb2M+ivkFzM9jPoL5CcyPYt6HeTfm HZh/h7kDs3lmXmJYYljR5v2krWyWcvOdys03KzffqNzsVG62Kzc3KjdblJuXKTcvVW6uU26uVY5R pakE1SjVCNVwVaoqWZWoilfFqqJVkapwlUqlUMlUnAofQL4EvpqrrplGqn3PmKC6QfD9WKPdT8Ln L/XJtdOIL74aqhdOS/UVZ/m4DWw320/8ewj5zfVqupEdAEL819+olsq6OkjOGphS+91Vz+t4EkaT IlAi5u9Tjn5OSVtrsHUza91MWzez1lSydx7kVRs31o+EszDuSyRkbz/KKhtVd17tHhVMq6tYJpb7 uIhw1KderamblhzrmsKUm6RJXak+KKNfDI3A9RyJD4gozLQrpzynnHbJgHVF02eH1JW6cpJGfZA8 IHXFYnMcmvI/f9C4wPTGoD0GvEykllvNLcXaH6ABcRtmM+atsAW2cPtEGnynN4EPa7PhC/lRfMV0 s/Z8uBqxEv6NhlvHWkqhAfsbkPoIllOwzySn3w6lPLaQTay8BtYi7++4fdxh7jDrnYp8Z1MK8eL2 yY9iO+V3HeyGD8kzSHMV3Ix9B+ANOgo5b4FdcJpk4rWRfEa6uHnYSuj8yKcZqbegvE/DMfgXSSRT SCd5EmniudVMFnG2VUhzBK83GBd6zSF24iRucgPyPMnxXAFydXIbuB2cjzvM18mmyI8q4hVFSjv7 TiuHp9041JBym4svmQ14XdHLVbxeJxyZTxYSK7mV7EAZjpAuvL7ncripaHV63cLXyyJlX8qb5Xfh dVSxSHm7SoG85aCA4SBAOkxArapwjvkosxkuhyvZdRVeV6Mt18B22AF3woOwBw7Cs3ROOA4fwmm0 TgxeVK8iUkKW4FWHl5usJGvRHhuDrhvJH8k+chDle5m8zY1GrcXLjtqLUl7HbeMe5V7m/sKd4E5y X3Pf8cCH8cv5Bt7D38vv5F/jX5PNlO2Q3Sl7X/a+nMh9zFLxikTFpYqNeG1ShimblWuVv1Xernw8 PBdSUK9s1Gs2vrmZoAM1uRoP753Ma3vwehQew+sofE31wMsvaUKvElJJppNFeNWRpXgCaCEesqJX o3vIfeQB8ijq8jZe75Lj5GPyd/Itu05zCi6Zy+rVbx5Xwy3hmrlbua3cH7mHMCL3cU9y73Ifoo4n uR9Qxwg+nk/iR/FV/HS8FvKX8Cv46/hd/GH+ON+FfouUTZZNkS2SXYq6Py87KfsSPcnJeXm6vEA+ ES+r3CFfKd8ovwMjukvepYhkVolXJCgmKdYrtiv2KY4pupVJymRlGl65SoOyRmlXtil3Kk8qv1A9 HFYeZgtzh2fDTnz/eeKM1fsY/S4Pd6lCB8PJcYyGK/gYpBLo2uMilfYwG7ePSqesIZnoqQ/gNB8G 1bLnYQl/CdjlDXyE8ht4gHhkq8lD/HR4GO5VtpEn+Xq+i79Xnq6YJNqT28bvVHYo65VfoKTf8zfL rcpcUi7fSB7gpuKKdpP58CP5AS7Dmb3ceHgeboANpA0fOFtUD5MoXGtHuNFko/wufq9sB18lX0nG oQfV8qP89VAASfhulAlpGOtyfHekL4Mc/T43vwpXP48PCG1ZjPItInuL3I3vUn6Q+/kD5DMAXU9X bBdM/RbRoM+P08Sla+I0q3joXsVBD8iP/ly8SnaUfil8tv+48nt5F3KOQP7DQQuT4J6yTJlCFRYR n5g6XKON4KLjkibxJSnqCXyeXBiTnpGjyIK8NZGkxBq9nyvYm5XF7SfXl2UDFzRINiojSRdLIsek T5ikKARBnekdlRMX6y2Up3h1N43az03YW1goO0AElLWrRNfd3VUS21XCclx8CmaxFDuxsYu1ppSw vpQSgz6FkOQEzCnpGWNJYX5ekpJgJTmJIb7ysduU9MKCCRnaNGX/YjaZLV/+TdLPt/Mtt6UTov3D L3FxEZmEn6wRujW5fHmMuluREB/Fl0ZG/xJTQooqo6JHzihNSk6ZMTUyKic/nfwiS5nR8/MvX8ma 5+3+8/6KX6fJMsK5q4ZFdxdH6LmVmuHdAomLjVZzHVnCr5/MXFY6MjJCW5KRkJBWOC4iYiy1+xYA 1Rb0YQo+ISbCDFgIy+CusujiKQWkblFh8UR+7oTURWjdJ2qAGzZyirxuP1e0T61bNwtPoGXC3HXj K9aFq2vCV42HJcNGTiiYuASNfMlYMiYvlZsffQmeJcsS8xJWRK8oG7Ni7E3zpyurV5TNz+MLDxAN 5Oi6UkrQpLquLvZPtDX7l1Kig6nMDbHdP3ZROrR/ieQPnc6gJ8qxGWPHZhRMQIvTF2ulUpGUmJKc wlMXpBAFvU9KSUlWKrRpSFVE7S8vIniHzkjOz2P2xyGEjsN77NampedRTErkfTdWJ7a+/veOxVdd ukxGOHdiwgzZ5SOHd67/5eLipOTFHK/ctm3nYsdDZLKVVGzj37zKlTPhZ7Vh2rh5W+oK5pC5n9nK ytb2TM0gFoNBzzctzinNv6Tp9/NdNTUOlS4lOWLmhPCIntPcs7Ki7hkalUqoCRtm2LBq9ZKKJc3P l09QGJZ1v5qnkkHqaNeCztn5i3795qZphszMV5tn/l2HCVfsLv9x1VZcLZmQBbm4cidAEXpvMtxe lqMeNz5bL9PFQ2S0emxWriEvf0JEekpBYXHJpFKFgkQUTZwsF9akpK+Jj0/R0fUyShExUqendIVF xSUTIwpyxo3PmlQ6WZHNR0SH8QfJxXiQzCuLGHtTdO7IbG9OTnTBAW4RhOmY6zB3f3+SuU1cESif 2EO9FpfS145OS5LFJYI2DQpi0wsKi0TnUW8U0XWTSJ0zFt2SlEyKEhLyeZJC5ClyokxPUPL82ATe Thp7Xnz/eM+LpDFv9jrjdQcKnukYNzksJrdl+i0flNxVu6acS8j8sTQ/lcwc1/MlqVb1vEdqU3se ydfPfld3v8y64Xc929/veYkUYvPtG4ZHJjXduD33XkGePrb0oH7DfdHkIk3Pk6Sy5zhJH93znkKn 7vl23Mc9B+PIiJ5r4oiX7ni7YIviJNvxRsPlj8nik5JlyvJwcgcuJDViFFqK1qM4eVkYJPKxClxd 4QdJCYwik/bK42PLI7CeSiZBErEgEzlFzkS3Hgz073HrwSwuAWpE3DSpEQ36ogJNEknSFGgwlCE/ DzDeNXhbGIjiXYqiX6d0byQHVpBhhw+TYSvI/u6Ndx6+ft2zW7Zs4aZ3brlq69Mkvufbp7detaXT +sjaQ4fWPsK0AUUr0yYMJpWFq/CUtAbWyOS4jc4ui1KskqEq/E3cTbIwoK+IqrtkOrY9dseVwFRW o2vWoE+P0yQo44o0cUr5nF8OE9MROX/EJJv8y+EGrPzcfYR+gohzKcfjXCpYslepUOzn1qOFVIlo H47nxTuSSAlVeBywAU/uAQWxoVBAOF6hVCnkB+hvqag9cO7urjicd708N+ua2OfW56bSIoFoCFqF aHZxJ0lK97Vy/udubnXPV/SA0H3t893X+v29UsyAI8q/ATwj/t0oQ7o+IU/9d1xcx3/p+uh/6+KT /9euOt78X7vYKSudHO79VDYPAp9jE4zuQqnOgVL+pVTnQS3/UKrLgmjkECn/SaorIE4hl+pKWKVI luoqSFTcKtXD5Q/jbGI9AvIUO6V6FJmjeJ9+yi6j7wiRqnGsrqS/uFMVsHoYUplVVVKdQLxqj1Tn IDoxSarzUJhIpLosiEYOqYlFUl0BaYkXS3UlgcQrpLoKMpMC9fCIWtWDUj0CzElbpXoUty2pm9XD qZypt7F6BJUz9V5Wjwxqj6WySfUErMenPsbqiUE0ajb2BVYfGdQ+ho39G62rkvvaI6V5HxTy9PpC YY7N5HZ6nI1eocLpdjndRq/N6cgVyu12YYGtyer1CAssHou7zWLOXWi1CEtsjiYzZo/Q6HRgZ7vF bRHMFo+tyWExCw0dQrXb5hFmOu0tFo9gdJiFCqvRbcf6NFuTxe5sF2wOwVBSomd9WDHkClHhUeGU dRBDp9vWZHMY7fYO9mNOs3BRq8lmNgqzTE6HJ1sod7ud7VhSHjVeo9sjeJ2CydnisltaLA6v4EVu 0givZYWXcRYajS025Ici0m4Psg3I7fbkopJsomzBbXG6m4wO25X0hk7gttgtRg/KIEqeJxg9QUbr tUc2Y+u1ui0BTVxuZ5vNbBGMApqgxemwOVs9KECvsTwWr+BsFGxUJ5zF5UY7O7zIi3FCdXAM08rp sFB+SOtCWZ1oF9bc6rW4BU+Hx2tpEU1Nh1lEEzDqJrfRZbWZkLwVPYjy44BGo8ni6bU5mtqIWRSh 0ekW5lVkC1RUr9OdLTRbOhqcRreZNiEH1NBtNDU3oFuyqUpmwey2tWGz2eZptni9lMDoQsmNHo94 63KzObPR9iuyBYvXlJtNrdduweDCsm/aRpudWs1uRv2Qn9PUypTAiY02u4gNzhUWbGi3OczM9ya7 zSVJR3VvN6IdGoxUkFxhlkMwms02GsnZQRFrc5jsrWh+aeJ2m9cqNDgRUC+RGk1FmfVZFz1la0QT OkyojqfVZGXyu22im5xOu2h5K4KHxo6RziQ02akJJCFdtMVjsnk8Tqpcg4War8HZ0oDdVoupWZA0 CzJMixOdEiyUrcXYhHL3CmAxoq9F8di0dlwu6CKMhpYGlIky87qddmcT875EZnGYbG6THSPPgeZ1 GxkdRqHdYqLT0IgxttAIo8owtZj33M4GI4tvlx1nQGpcHbiacC0jKSPDeiuuemsgsOY5bWIcizzM KIR4i1o1ui1XtNI12tjqYNNStwRFal+Qor2dtC/gSbrGjeg0XFH9ZHYFZpOc4D3LLoW6OpG2EW1m ZHsHZWxCeRpb7XRys1EUBdm1W+iux0Q32+gIKqzZ5rZI0tIOj7fDTpWdjqHbZnTbLN4OUdcWl9Hk pR5qaLXbLV7RERa0TbO0WznddJthob2EWoaK2Ccc1kV+vZtDk8XZYvG6bSZB9B21yhWtKDj1h9Pe 0cT2Q9wCm8TZmHC4Ieb2WWCBpanVbnRPFObUTGRb/mKciNquIFev7yXLkciCVgs628bCzIgR1mSj iqBgNCwtLUZ3M+qCPUG3jWd/llBTU58swl3FwvZrr/ho0CEDJ5vA5Gx1oJLUpH0sFna4nCwuOqxe r2uiTtfe3p7bEujOxTWq87pb0fQui455WdcekF1X52zFTaOD7ns4t00MA+oXDO8Wm9crPqqoVFWL LipnWxC9wR3b3IoORInbMRytQWNtvduHmQYibnkuu1H0OtvlUAeMXAduPkJgcqcDd/tM2zjB0tJA R/XxcgSozyoSI2f7CLqZ+j6wTKTpmT0lXpOYBJk2nAUfA9TkbvqQwy3SYXcagydlq0fakIVeyztb vbjT4TOpzWayUBqrxe46QyNwgBPc9GeaYIca8GLpADOiG/FBEPA4pserEGtzwAYmbHeCB3Mj0gpQ wUa7GBqxxYY1B75GC1CO/OxYLsC2JrBin4fdWbC0IHUbohkpF2KfBXuWIJ0DKc1SSakbGTdxZDsb RSnNjAfl6mA8BGiADsRq7Lcx2pk4zo46WdidqBGV1cr0skvt0xgPC947kbvA5hXAACV46YPGiS0G plUU/S0W5oDUZ5fQySRpYhyNzA5UPlpvkSS+CFrRljZmaQFmYZ3y8UA2s5ybWbldug/IIXrHzeby Yr/ARrWg9alGlLOD+cQrydZ/Di+2rWD9AZlpjUpkk+QTrRgY7ZGkPdPedP5cyZN9GlE5qe5U8yYm sQ2u7O0JaOBm1rbgvUeyQ7DN8xilZ5BIGxgf2UHS0pJyP9MnLsaljVnBwvgLUhS0MCoar61IKVpg YGRROb3Mo41M2oCfRF1cDD2S5UW5+mQSvSPO0+crJ+MdkE/k65Ls6pTipY+6lfnNzSTpwOxlng6O 6sBsln5R0Me7ia1MF1JR6UXurdIaFO0vzkBjwcS0GRjnbsl2YhlshUbmcQHm4eqi/ghY1cvaaUsz junA2HJKe0qASpRB9KGbzd2MVOJqye71kpl5ha6mNonazNZ4M/OLt5eDkdlQYBp6JK8Fel1sfEDP bCnuV7AapTOhxtm9sdfOLGnvvT+bto1szQRizc7ixi1FpJn+zB216/OEqLGRjQmuU5usYBbPZvPa mEf71r0JaWwofX/bBfzezuSjOjWwmmiRXLabOBidmdkqsCdnD7LH0hqdqVWK/v4atzMOVrY7OKWa 6K9g3kbJXqJkZ4tdcU3ZmOVMjNIkecfDdilrkP3dEufAanIyGwfHvFWqeXr3HWOvTjTi7b1R0N+S rl4aD9sZPWzNBTzXIHk+W9K2BVEcTdcAjU/hDJ+dPWJaGE9LCEvZWAw0SfYeaAELe5Zaz7Ben7Z2 6ekiriJxb2hhstmDJPOyvY8+3ZqC1n5/bhbmCRtSmlhEm9lzSoxeNxsR4CfuhXZmiYA2gT3GyPwt roGAZ/q81bf2qDwNrD2wf7tY5Hl69y/x2SE+m8TnskV64gW4ie2t0rPeOmDHmoe9tn77cbAcZskS wb1uaSXT8grkbOmVoJVZJ6BtYLWcfU89204qxrezd9yZazLwHDdKK80sPXkHs7NrgG79V4J3iGcp 0a9OiW+jFGfGoHNHQGKTZB9qC3uv5uags17fk4b6KnDW67O6ma36RukpIlrWzCLOcoZtAyNo5HZI pzTq2enSrtvGZLGxfa6jn19p9BkZt8AaamDy2hlt8IqwSHHTfMbZis4QOM307dpLemMmYMWzWc4j ebBPvoEnhyZ2NmphbW4WNUK/dReIFRp/RulUkS15nJ5NmoLOh+IpsKmfbn2WM0ontLPFwAK2wlrZ /uiGiUBPWjWsDJzyF0saBeKuADnRnoHccs7gdvZni7iybUG7mVHaw5pYr1eKC3PQbmlhu6Ob7bfO 3jFn722E83kvCUR1YJ0sks4qlqDztReC3xp0kgTOIA1MbP9xSJ4MROnZpFiInnOx/TewX3Sw1eHF +kTkrcM1Q69cdgrvPzpXeo7q2DytUtTTXVYXtJZ10rkh2O46qGMSiicNulLEs5aot63fbhBYL+Lu 3cKsEbBH//eBKvpfC+G7Sd8pKNAjnrHN7Cnm7bVxu7Q7WgeZ13aW04e5d0cUT3kuFlvBa73vLCdI pxSvtGKpD4QBmlMK8WyfiePGsWhsYU9686ByOQbwHrqV+rj3nUfE1RxY92c+Tfpr3xef/eWaFGQD qomoi/g2EIhyd++bnHiKdLAnpXFQTfuePf1PyMJZYt7JTnPimU58T2pj2lh6+VjZU8t1Dh/Nhb5P GyxBd0Z2pgn+/EE88QYoPsZ+BxthZPusGejnFuLvLgD8xWAe5Lt+MvYrhBFAVEhNf4HA/opF2N+V MKsrofd/KFCX6teoixVh49fNXHc6iii5HWvU47ApnSPEEKEPU8izonluuBz0RkV4loLIyJoijsh2 1Ojn67ODWkbcNWrVCChl18UYDR62h1uYFabQS68JYiZLXLSz44nPbttKHsp8Qr+z8Q83pF11TLVj TdIJ/Rr+Ocw5O3iOcFzsjEPDbjlx44LpFaePt8yMMtyjj+oVlchRqNUbmZD8IpkigVtabkjSJ9Ab VULkEgv9eM8hVBhdFkOiPp42KxMiKlvdDUZHm81utxhikBu2hicoFlqN7V6LYaReTRsiEhLFBqHC 4vayT8vpB1aG0fqRtJtPSJa6F9pacBZjC/tAvKJcPyolSp9vyNNP0LO0NCXKQG/z8/ILSgpKlupr goRdVGNI0SeJ80cvtrhtNbYmR7Ywy2HKNWTpx4kTpQU62FT0k0ZxrhqLm3685aGTriFpwVYhcuDX kBjA9nBuDSHw4Et77/nLK8Ij4dfc8PD61lOPzv3uxLMxh5qMT91tHvHen356Kf+htfobalduOt78 QeEdMYfe+GbFP9vvW+ksPXTzI1EHrd/bt7z01IKch2ZO/uHxty9drua2/6xrHnXP6bu33Tf8KPfx tRct+DS6/puyESsPRH049YVHT6x/avmVlxty+a2rEx6YIbxq8EQtyXllxYT8W+K3xh/40Krb+fmn hzs3jf/zRs36xqeuq13ibD1UujNj/aUvxSaVbl/79cJnwx3P9RyZ/cEBZdxtaVcfnzL2jVErvtlu ePG7z9OGHX9u34yKbcOX7xi1+eRlP3x79XfXPNRAbvphTsSHr6ctfuCWV3ZvaNv97cGof52cc2zH L9YduxMn7Vv/7J84HgP/7tXH9avf1U9QqDBi5XIlIbJMfYZ+TOBeT9alSh/KOk0eV24b/Ygb7U4/ lGWxMzKBEL9MpVdgwRHQl9O20bKJ+mJ94Y4JO/LW6aXhJre932idGCvBoVJRnotULFJHpssi9eEB KXiVPpo2xtC56G97FCgh3sfJMDLvGaZPCcQ3nxC5sKYcA604x5BTkH/GquBXr4bZzT99XXu4coTh ho6tWbceWvMweWfERa/4OmsdJ1Tj7r7s6Es3J3whWxD1jxljdVDsO/nizXO3vZXWkHR6apHmYpdh 1Xcbi9fv+/LL26DntUW3zh3z1wfHzr1y9xPG8n+Nf/WLF49d9sGfsq6f8tjtjx37eIn/6UePrPzh tcg7Tt3Wk/XmpAVqdfHY01Nn4xr269dwX0jrOOqrrFNvvTtuQ2qePOyybW0bzlzH/y0rY+By1BcH L8clQ5xUp88RJ80416Q17I+v51ySe+dlzvzgTeuVa1MrG1svXfnc/u2mDP/kij9eHVccm77Ic6x1 rK177gFh2ZvhP+1Qj+9atFhjfHfU8ZNP5je/8I8P7i6y/EZ9c+TjNaOWXd1YsFzeWdXTNvdEzaq7 Vgu3796w7C7V6f9XvXlHNZXscTyB0GGRDlKkRqToDcWghl4UEekdkRakKL2jSKLSRBAwVIUkGCBU ESlKkSggICgKoiALunSkSFVE4SXAKrvq23feOe/t2b9y5k7uzcyd3+8z3+/MZARYmRGFH9NgfDLY vKuxx2wCpVphnCNTAA6dxxdcUVzLHj3hTpOt7DF0P6Vhrd1+RW2MDqv1DmXkSZCar4zdITmd0E+L jTTMCDtKzwIItu3I8vgwYVkCIaql35YcT+AuQgyZeOl1Kd6o8HIWLE+RqVEeC3l3JnSFexRaXDqb blKlJoOpDilY6zYu3OMfrjF1QAjvzj1qVSPu+goUobkjKsJjKyXbANSj/zIlmb+mJBVZqctvJqMM IAVIYqFY8UjRnyWjv5+frJPDRvpxb6Qf5RH/JgNpG/6jDFT4cwZSRjkq2LvvuDFY2OZNSCsaaPxy ly+lLhH0sK6jo3nxl1frK/oN8o4AW9OSP3930sDJ68IcZWe16w07LoxF8FzI2518ikNnta06TZ26 PdPIhuby+XyvBX5DfvG9825XTot+qGnjxkwz+ze4BvW+S3eMIvld/RjjHypWmJMWllr2IWGPj/7e AP4j6n3vK1iETXuCsKloJ7cvDE9j3wfUMGT2rrCZQTMc5OpDqW6FRdbjH14WlQl+phhYm+Rnu3J3 9BgXo1j78PNuhb26alwIVvtQ8WaCy2zKU+93KmOLLOH9z87mBPq4ka4bHAYURcrwpTsdEdK98QVS dGGveMttw367QfBaQ8QUA2gIOxkBnzYRwAoigS4jENFsz1SWnaYG1ba/MQiZAN6/5zYTh6iml3eI 78ampaTTHsoRBfifNuL2woQAgc0vc/1wiw4mAuzaHCbeb/XGXl7+wuoB/q5evm7+IRQ8HIADMBgA wLfwIEc5xQjbKv4NLfrLqZyqjuQ9emj+OL9kdmqwHTCJJ16ROPlxDXMsp2rtBl5Y5awRPhOfYC/n 8UzDOWSmKLDVtG/+3fVIgYTsiy7lTR6hjmI9gogBVnDSeErjfVmXjAxXaHrnQZn7zBWWUJLOGKOK UooMUfJA/pTuBY2hi6w1GafNHIrQZ3H2skHHJtLvOB/KMBSA0YtzZhPHEqV5R5XTnDjtLWmQ2YJw 46gPebPXqJr5u+6baZfHRNw/OGV67XjJl7zQM/7HS3nbUxgkRUAWV+3d4DV67HQI83Wb1ZsujPS5 z1HmFrOVh+y4UUGQvuX6kgjM2q2O8z15O31tEW217+lzRIFy2kut5cJBHJcGt7iRD6AIAApPyUsw BJUBoFIjdth0es+6+WaJGYVz3taPX3+M8/3/jx/6L2J8gwqYcaaGKwupvIrT1WDxV0FsC7b2ctlZ TI9VaBKjE1oPjorMv7dIlqnAHm5xnP38sv3QIWviflO3NfEzqq3tBQM0Z3+FXVHO3uHtXrPGbsDr 1vC5U3OIzVrYYNIxrLSAr0UaLiFbj8Sxx0qwOuV8MBVYEWnt4VowLvLUlKP7gub5OHLqNIvRct2c 8aO6sUbgszCMIVoQs2en/gtBKsJcxBvqOzaLZb+2WMwgdR8Zm1beoZZkX7/a854+Ibw6takQLjMc OpwfNBSIBXW6q5Ke7499o86er+jO7/5a8W23AGQ4XxvSYi2v5KkvwOJYxYiP63phqqrTIWCW6/2a /WBUckB23nMsmQoPyeKgdEsYuDOlGzSABAvZ+hqpcC677/1uEgT/LiQA+8l6QQEGV1CAKVAEPBnx cvt/RwIq94+SgQNg27QbjBYOfq5kKeBP/p0dG1MI2WzQGSOdz3h5Ov/eMsaftexn3ZQj/+h33RQD RDa7sXN7jTNyQ3xQ1IjhhikQ/p4kLBSS0G+Q5GG78JXawXUVw5nQB93iEsuBT0TWO6TMj7ddr0Lf VgyRBTXm079waq0iLE+QSD1lcSl4uk+slWjjjHfo5rodTfkNMx4X4034aww/OYNjSNzdaFeQWrDW ErvS8VUnozeflO+OwMsGnejEDvmoKRxe9CjRWdrtJyT6WINPyKjSOKMrp5OjmU/Vh/bMPEZE66TG dENrurNwNUnhM15rNOy24L7q3IFF3GCmCOuaJUzdTCm81HJseMoqRKLwg9Q+NlWlYBWN83muw+Gi rjyjR5Mag7WMD+MMLsYkZzacCptkWI2kPrec7oOQznNJax+U/U2aaierwhHkEoK9dC5KQBBq7NVO jj3qHDRYivw+oD/S4dT/DLyw0zJsGXAuMl+oqKlBkA2LKvgLhBvCKfFRWu9Ei69p8cgyVoqHe5W0 YoIC+L7ewkkFYRZiBJmAAsh2XROkDjBtCJ8N36EDsH4VWDQANfljW15uYMxp6M0CTfWtSSYmhWdo mEqMo/YL+rwVB2TLXupPSkfUn1bM777QNdRkbpJfwfekfXQOu2JeeeTaYfER4q7+0O5l7lD21wtX +afoT5Rfuno3zrJGoB3Thbkmv5g4sB6daaena3gAelCY3xT++ZwtV/LDfoH49w7GiBG6aZfZkKmE JxZOSAyvLjZ0EFk1CC1Za2GvbMa3N5+87L3Q9roQ7UnXj+S7m78c+YBBI20OWuQWWkaSzrvlsotQ GkXvkcpRfWt/uhBNDodSTkMRoHJP5CWQ2+bILlBqcWVkLpTtnh2CGT6XTEqKPg6xprF99LSH2Pv2 XGLw7tU7noQEWnnLMjspNlYATSNPRhn/JsYYHXSyHlP+NwpCfrdC8U9Bxjf2HVCQV9hPcUtwsjYi FxUpRcD/f9KPrXrqn9T/pSTqQKUoldji50mDA52FmCs9iBu7Lj88Ebn3xPsy36XComj3ir4y0TCm lhaCXqKdKMfEypLYjYpFz8CS2ZmbiEeNDVa2qoXlfvLQXEeUQwjOcdEzGtPp+euj7Oc3jdgCHe55 xyJxKdwxeSdQnVouI6/Ns9TaPvcHiu/VAkAjPefCMGwvLAVzxg2YWqP78T0m6afbnNrS3TOS7I7p s43v67KxsTtpnOMnS6i5qM0Sx8cV+Ji+LyPXm2tcf8rty4nbHgnTe4zgSpebdXS5rhmm3Vp0vfly gMHnlH9WUJzgJY/UybGT2u1vRn1YnjmBksNgafFMdzjqyjtn5gZFZoj2DjNwTeWHm5IIDU4iv5H4 77zLNxjM9HoQA0w6DGb4j/PRCuVcL3x67ctPyEekXBWDoHAAKivihxTB+d/8O/j3vVjQ2zR+WoAG oIZVwSIiD24zfn88Weft4Ua5um/rRJzfPkoCUOKfHPtyG4bQYJsT1QTUAdWvTpQqUv6nJ/Y2nov0 /f6B/j/yhEq9sxilTNs0zhOmnm6DVC1j5atdD/SL9xWeN2Xpk6v86D7KsiqyM0iF4Bp6BxMeazuv 2XghE3ku2tDoLJpz6YLfS3y9bRuV9xPoaZ5aY05CTEPVMK4dF3Aj0UeZv8EcZF7x8SK0z05+tUci 1C6jL3d1cV59Z5GZTvGR/kQlDksG3bkFWNSuWki8DTuSeoLJqBPHHJte10vK76TnkhCpqLSIEXhm E6lIaPtSEDVFhKtWaXoMCc9p14aXTMyZ3cYdqUXWmyj0to7TOkFogz0N14/UZE5qWke9LmaMWLJq khkeOW9zdEQuZEb0UhKzbLmhTfMDNUvLwucdQ/tIHVNnsuEhMDTkMRmbj6jAYABV8Y+B4x8A/20Z G4saBzi/TqiSYBgdNc3G8jxlmt0aegZqGPP2lXNy07+VmGC/ANtruQCxbzdCYOS8VcDcdos4v2CA S3vaqiaNUq+tzG0AfLfdwgxzBhyxShH7f7gZp/N14+Mnm5w4aIT4z0+jfj2w+mc1CUGDQYDSweev ra4qG7rFJloIlzr09kyAuhw4b4iROtTMB+yCHU0fPNOc8LfIY1z75f6E1anrrFH1H30sXzXfFMrv F3W4IPwovozIdnHXEevlC+16NytloNYZieIyNV6fmn7FYQuoOXN82JZ0hNt3qY84EnReTK0zBD/n iTrbND8+Hb0a3uRSprWcdUwmLSc2bWKIN+jD3Zrp9Izy0kn9AgEDz1Jh1VsvjRJY70vwyhZ71Y5H FxgmjRXFzaLv8Z4MmUiNvANrCK/URq5oNBBp6W2KdMz2eZoO8I2El77IgreUAET75DSfLxNxa0gw Pu6Jhfh6t/twZJX0uSf7jSrdW1/28b592JSIQ5NlERq8+m3EaGFo8BT50jglvE/9TxY1f7CUykxL v9kAKjJlsFYA7/bYY/q2tQMmh97XGhoYK2W+J0/wcnLycjC5A9Zk/m4LPXbIjpFiAvYoB/1B55vB lbbebxV+EAI+zp+4eT4tjIxQc5SqzGs9DZYdqieIWE/+tjpupC1P8Kg8+6A/7eKdj5JcusTpCTnD xWq1LF09dAR7TtnlLoIe86m4hAleR9VhzMJwncXkSwyPIu5A3QpcCNc3Pn/SCvtqkpR1nZ3FWSGg LCheprwvoXvRPWYcOT5L9CqyJrAku0Jf5A6VFa6jB5UFm9oN6vpF4vgDocY8d605mDWskiSqA9Z2 LhdZsAau2k8kvms9z2bHh2/m6Y19j3hL0NX2G6YiPpZ1LSzVFWF2qnzaEt9x6Xq61BRYy/FoWnfA 7d+6leLjM8ygU8181LavWluu0p6fqFis7WxMvVy8KsFBjM9QzfwXvfrUnw0KZW5kc3RyZWFtDQpl bmRvYmoNCjgzMiAwIG9iag0KWyAwWyA1MDBdICAxOThbIDk3OV0gXSANCmVuZG9iag0KODMzIDAg b2JqDQpbIDIyNiAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgNTA3IDAgNTA3IDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDYzMCA0ODggMCA2MzcgMCAwIDAgMCAwIDAgNjU5 IDAgMCAwIDU2MyA0NzMgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDUzNyAwIDUzNyAwIDAg MCAwIDAgMCAwIDI0NiAwIDAgNTM4XSANCmVuZG9iag0KODM0IDAgb2JqDQo8PC9GaWx0ZXIvRmxh dGVEZWNvZGUvTGVuZ3RoIDc5NTExL0xlbmd0aDEgMTcwNTI4Pj4NCnN0cmVhbQ0KeJzsnAlgU1XW +M99L0uzNUnbdEuXpGnTJW3SnRaQhtKWllKgtMGWtaUtFAVau7ApirtTwX13FBwdl0ElDYhFGGUU dWZcZ8ZxHLfBZVyp4sI4gm3+576TlILL+Pl3tu/LvT3vd++5+zn33fdCS4ABgAkvMphT0VAz3deU chsI51QAxL9aWV7ReNknvz0V4Op7AeSHKstnTnv37ItLAK7oAxBLpldUVr372OcMhDMbMf/R9Dmz G95uZtcB3HgDsJten97gKRflmcdAKFwHUPXy7AZX/lfqh3YBsJdw1Ja2Va3duT3pdQAZK7F9Rdua PourpqgGYEYLgCJsWffyVbd9UI5jO7wAqsjlrb3dEAs2HL8d2xuWr1y/bDT3wJUAczoBIt/r7Ght P9x0KfbNFmJ5cScqdFuUcZi/BvOpnav61lUvUeYBCLgGe/7pHT2rFc3yqwHO24bl1Su72loVWi2m 2+cAJM1Z1bquOwGiE7D9EJZbVreu6ni9uv4irP8egG5hd1dvn98MmL+igpd393R0P3m4zwlQeACN +lPgtpU/9MZbr+iblugnH4G4MOBh74dnPc35XJ/qlWMvj2xRHVI+jnVVIAAFbKeAUWAH1NuOvXz0 ItUhqadxQfyUa/TpMBvkkkIAA7gAraZtw3GlKrIZwj4sDZPfKC/ALpOI4vPwkABhIOiVgiiTiYLs IAh+N9zrp3EB6hosFrBgYhvNQXmrYLcA2yp1ul8ezleKvYcfnw17Dn70INfAlhNW/O6J+e9sGwc1 P/6MvjsoRmGLvPL7z/H7Btm5J9nh11D2Y48RCqHwrwyyWjj7f1C39p85l/+LgX3x/e0/PsjqoPqH jim89MPGDIVQCIVQCIVQ+G8Mws3wzr97Dv9tQTwP1v+75/C/NeDn9qYAU//dcwmFUAiFUAiFUAiF UAiFUAiFUAiFUAiFUAiFUAiFUAiF/zVBDEhC4C/aHsIcpoQ7QQa3Av/LMgumeNBBCuRDIVTCdJgF DbAU2mEldEEPbPP7AzUsUo0KrFEHc0+qwfxHcKh94j4A/0H/F1j/PtjNRBbO4v1tgdETxl3jT56p OEO8HmKxdD4sBgU7JGk/Ofkv8TAvBP5uT4DvDmxcv99tpI9QDv+D3mKleaeP01SgrSjwGX/XRPQo J62XdUnXjdJ18z8Y+z8tiD9qb//RO9FdtWTxooUL5jc3eRob5tbPmT2rbmbtjJrq6VWVFdPKp7rL ppwyedLE0pIJxUUuZ052hj0t1ZaSHBtlNOh1GrUqTKmQy0SBQXalrarF4rW3eGV2W3V1Ds/bWlHR Ok7R4rWgqurEOl5Li1TNcmJNN9ZcdlJNN9V0j9VkBstkmJyTbam0WbzPVNgsQ2x+fROmt1TYmi3e YSldJ6Vldimjw4zVii0slbGdFRYva7FUeqvWdA5UtlRgf4Ma9TTbtA51TjYMqjWY1GDKm2HrHmQZ U5iUEDIqJw4KEKbjw3rFtMrWdu+c+qbKCrPV2izpYJrUl1cxzauU+rKs4HOGSy2D2fsHNg8ZYGmL Q9tua29d2OQVW7HRgFg5MHCx1+jwZtoqvJkb3o7FJXd4s20VlV6HDTurnTs2APPK0ww2y8ARwMnb hg+dqGkNaBRphiPAk3yJY2bC8mAacG44Q1yf1crncumQG5ZixrupvonyFlhq9oHb5Wj2Ci28ZH+w xOThJZuCJWPNW2xW7qrKlsDPms5Y76allpxstL70k4Y/WG7xivaWpW2dnK0dA7aKCrJbY5PXXYEJ d2tgrZWDuS6s39qCi1jBzVDf5HXZur1RtnKqgAoL98GKhiapSaCZN2qaF1raAq28rsoKPi9L5UBL BU2Q92Wrb9oDBf6Dg4UW884CvN2a+Ty80dPQKfbKgab2Zd7kFnM77s9lliaz1etuRvM125o6mrmX bAZv5kEcziqNKLXCtZ1UO1iZr1yZFmZpEsxiM/cWKixVeLGVT8YCA7pLynKPlk+2NDEzBKvhKIEa PHVCP5gR06ZV8yKRN51WbbY2Wyl8x5TMgTnJ07xh4/oyoGJsTjTOt06NavMJZVoqOyrGTfCETuWB CQZ6++Z5CtwWgYGxRRh3Z3WwSEzDOxd1AnYjqbgXYy1emGNpsnXYmm24h9xzmvjauK0l/9Y22Grr 5zdJ3g7sksYTclReQjkvWLE4mBGm4R6scpiDbpXy06X8WLb6pOKaYLFlIMxW2zDAO7cFOgQL3kG4 aIW9pvXSkohCvDWr8HSzVbXaLAZL1UDrkH/T0oFBt3ugu7KlcyLvw1bTPmBraJpsluY6t2mjeQMf KgJqWW1jeU42nj3lgzZ2Sf2gm13SML9pjwEfLpc0NvkEJkxrKW8eTMWypj0WALekFbiWK3nGwjO8 p7mYCZPqm/e4ATZJpTJJIeXbhhhIurCgjkHbkEA6Q1AnoE5GOrek4wGdFNuJJsbjttLSzt1zVnPn QEszv7kgGl2JP8zLbFPAK9imDDJBofWqbR3lXo2tnOvLuL6M9AquV+LGYNEMjcPPpIEWG55TuKGa wMxoK4q8S8uQ39/YZH3GPNxsxa22EGV+k1flwLNfnjYD603n0oLq6d5Nba18HuBp4m2VaTVtzbht gx1ilRqvCntQBXrAGlVSG74dsVEb+gYdKLXfhBnvpmZvs4MP2rSiWdrOBi9U2yai26lPuZ0P5Goe iLDlS/cm3grqtIs5VDg3aGgijRmzOFgzGUmpxZm32bCorcWC1pZBWwNudTpL1WbSdOCRKLN3SKI2 BwqBL0tM0+jUXpUTO8QfntY4+S0pT1M2N9PkpdzFgQo4tsGrwRnZx5ky0ACtg0U1fC74czFOlVf9 Fe+mfgjm2tbhycInLfWkxGKvLq2mFQ9/aq9Bja0k2DiMnxGaQB8HSKvkK9ei3cW0xiH/Xbb11nEh J9vGHw58Y4J5D25saB44WeFd4MjJDjtZq5PUAwNhum9uQPYK040RlTCoEoeEL31JiclDwt99SQ7E F76kbMTfCEcIn1PZZ5T7lPAJ4TDhY8JHVHOYcIiUHxI+ILxPeI/wLuEdwl8Jb/uSVIi3KPcm4Q1f YgTioC8xDvEXX6IL8TrhNcKrhFeoysuU+zPhJcKfCC8S/kh4gfAHwu8JvyM8T3iO8CxN4hnC04Sn CL+lYX9DNX9NeJLwBOFxwgHCY4RHCb8i7Cc8Qn0+TPglKfcR9hIeIuwhDBEeJOwmPEDYRdhJ8BEG fQn5CC9hhy+hAHE/4T7CvYTthF/4EvIQ9xDupnZ3Ee4k/JxwB+F2ws+o+W2EbYSthFsJtxB+Sl3f TLiJmt9IuIFwPeE6wrXU7hrC1YSrCFcSriBcTriMut5CzTcTLiUMEH5CuIQaXEy4iHAh4QLC+YTz fOZCxLmETYRzCGcTNhLOIpxJ2EBYT1hHWEtYQ+gn9BF6CT2EMwjdhC5ffBFiNWEVYSXhdMJphBWE TsJywjJCB6Gd0EZYSmgltBCWEBYTFhEWEhYQ5hOafXETEE2EUwnzCB5CI6GBMJdQT5hDmE2YRagj zCTUEmYQagjVhOmEKkIloYIwjVBOmEpwE8oIUwinECYTJhEmEkp9saWIEsIEQjGhiFBIKCDkE/II uRJE5ot1Ys5FSichh5BNcBCyCJmEDEI6wU5I88VMQqQSbL4YvqFTfDETEVZSWgjJhCRCIiGBYCbE E+IIsYQYQjTBRCNE0QiRpIwgGAkGgp4QTtARtAQNQU1QUZ9hBCUpFQQ5QUYQCQKBEUAC8xNGCSOE rwjHCEcJXxL+TvhCGpb9TVoRO0LKzwmfET4lfEI4TPiY8BFhmHCI8CHhA8L7hPcI79J47/iibYi/ Et72ReMGY28R3vRFlyDeIBz0RU9D/MUXXYF4nfAa4VVfdCXiFV90FeJlwp8JL1HXfyK8SJ39kTp7 gfAHwu+ps99Ru+cJzxGeJTxDeJrwFLX7LXX9G8KvafJPEp6g8R73RZcjDlCDx2igR2nWv6LO9hMe ITxM+CVhH2Ev4SHqeg91PURdP0hd7yY8QNhFA+0k+AiDNKyXsINwP3V9H+FewnbCLwj3+Ex47rK7 faapiLsId/pMdYif+0yzEHf4TLMRt/tMcxE/85nciNuoyjaqspWq3EpVbqGyn1LNmyl3E9W8kXAD NbiecJ3PNAdxLTW/hnA14Sqa0pVU8wqqeTnhMp+pHrGFam4mXEoY8EU1IX7ii2pGXOKLWoi42Be1 CHGRL2oG4kJf1ALEBVR2PtU8j6qc696BPKyvTP44vDr5oHZW8qMov0LZj/KIZl6yD2UQxYuyA+V+ lPtQ7kXZjvILlHtQ7ka5C+VOlJ+j3IFyO8rPUG5D2YayFeVWdWfyTSg3otyAcj3KdSjXolyDcjXK VShXolyh6ky+HOUylC0om1GmqoSvhKMwD5KFY8hOSGbn+CL57Xi2L4JvrT5Cr8/It1YP4QxCN6GL sJqwirCScDrhNMJkwiSfgWMioZRQQphAKCYUEQoJBYR8n57v0zxCLiGCYCQYCHpCOEHnQ6cMMS1B Q1ATVIQwgtKn465WuBcgP0IZRjmE8iHKByjvozv/gvI6ymsor6K8gvIyyp/RLS+h/AnlYZRfouxD 2YvyEMot6IqfogyxTWTpDT4j3/LryTjrCGsJawj9hGmEcrLDVIKbUEaYQjiFlmwiRBEiOfaIoij4 3Ml3PCwKsAvlAIooAs3lTEIDeX0uzayeMIcwmzCLUEeYSaglzCDUEKoJ0wlVhEpCBSGFYKXJWwjJ hCRCIiGBYCbEE+IIsbTMGEK0+2bkCMpXKMdQjqJ8iQ7+O8oXKH9DOYLyOcpn6NVPUT5BeRflHZS/ oryN8hbKmyhvoHefQXka5SmU36L8BuXXKE+iPIHyOMoBlMdQhlAeRI/vRnkAZRfKTpSbufeFEbLx RsJZhBU+I74KsU7CcjLLMkIHoZ3QRlhKaCW0EJYQFhMWERYSFhDmE5oJTYRTCfMIHkIjwUVwkqlz CNkEByGLkEnIIKQT7IQ08k0qwUaQE2QEkSAQGN2R4P4Z0o8yivIeGvZFlD+ivIDyB5Tfo/wO5XmU 51CeRUPvQblQTEu+QHQmn8+cyedVb/Kcu32T55zqjZ6zt2/0aDZO2li7UdRsNCPO3Lh94ysbFWdV b/CcuX2DR7YhaoOgXl+91rNu+1qPZi3Trqnu9zT2v93/eb8Y1d/Y397f139N/wuoUN7Rv6v/QL84 5N/vjugvmVS1qf+KfiEKywXoZ3qutvZrwqv6qns8vdt7PLKewh5h0uc97GAPE3J72Jyelh4Ba+3s Sc2o4rWLeqLjqww9uT3uHvGM6i5P9/Yuz+yurq5zurZ2PdIlP6fr8i5hB6YEd5dKV7W6epXnL6sY 7BP8YEDZL/h9orprrzAKDD4WRt1+djoa4DQ0xArnck/n9uWeZc52T8f2dk+bc6mn1dniWeJc5Fm8 fZFnoXO+Z8H2+Z5mZ5PnVKw/z9no8Wxv9DQ46z1zt9d7ZjtneWahvs5Z65m5vdYzw1ntqdle7ZlT zaY7qzyVYnEyPkEgCX+6kzYlHU6SaVoSuxOF7sSDiYcTxe6EwwnCOWamjz8n/vJ4UY8XgS5xyXGX x22N2xEn10sJUdsdsSlC6DZuMgq5RrfxeeNBowyM24yC/nL9Vv0OvThbv0T/sd6vl+3Qsx3hj4Q/ Fy7ODl8S3hUu6sN5XjS4w515VXpdss493aUTJ7t0ZbrZOvFyHXPrnPlVbl1qelWZdrZ2iVbcqmVu rT2z6mO1Xy241VjwscqvEvwqBiKzMAbMgBDDuI+YKbkK9+POaCZn+Gox2NjgcNQOKf1za71hcxZ4 2SXetAZ+ddfP9you8YJn/oKmQcYuax5kwrRGbxT/h2Mpf+GWLVCeWOtNbGjybktsrvVuwoSbJ/yY gMTBaChvdizu7e/t7XP0OvCCsrgXNX39+COB4RXZ38dL+noBqzi+JfAavRz9UqXe/iX92AcWoLpX UvPcYqnKt/XxLw3fupJ/RWD/zsH/b4fYJYsBlLcCjF497vfZ52L8KWyHB+Ah+BX8Fv4AnzE1tMCF 8Ai8BR/Ap3AMb1MlM7EElvmj/EZfCqPny1eBTtwPCogB8B/1vz96j/99AHn4OM3VmIuR2Y9r/BH+ 4ZN1o1ePDo0+q9CAQWprEJ5C7WE27D8qlPG8v5jnhYt5WmpxWHnr6I7RrSdMpxt6oB/WwXrYAGfC RjgbzoHz4SK4GC6Bn6AtzsH0pbAZtsBlcDlcAVfCVXA1XAPXwnVwPdwAN8JNcDPa8Ra4FbYGynj+ VozXSaW85GdwJ9wD9yJvhzvg53AX3I35X6D174X7UUcayt+Hmm1wG2rvRC2vxXU7MHphEHywE3ah zygfzA3BftgNDyL3oDf3wj74JTyMftyPnn1U0nFNMP/tNen6GByAx+EJeBJ+Db/BnfEUPA3PwLPw 3A8qeXxMw3PPw+/g97jXXoA/wovwJ/gzvAKvw1/gILyJu+7Q18pfwhovY53XArXewFp/hfex5jDW pHpU51Wp9D2phxew7UF4m4XBESbAMfBjinvvOslDN0p+5N7j3rlDsjP3xw7Mcw/dNeab+9DG96E/ eY6nbwp4436sO4gWDNrvm632bMA7ZO99WIfbgpc8E7DFkwFP8H4eHmv7lFTmk9o9OtbrcYvSCv84 zjqvjrPhX+EdyTJkPSo9bj1e422sw63M+zjRtm9iW7I+b8v149vwspcx/z6eDofQ0pwfSp74EN4d S78bKB+Gj+BjOCJdD8MneJ58Bp9j/m+oOYy5r2tP1nyB8e/wJRxFD34FI+NyIyeVjMAo+hgYYwIT YfR46rhWEhm+YijwTAtjKqZmWqZj4UyPryLKk0o0YyXGr5Vov6FMJWkiWCSLwvMyhsWyeGbGczOR JbFkZmUp48rixkosWGJjqSwtUBYttYwba5uMNWLG1c1kuWwtXh3MyVyYzmOFrIhNYKWoycF8PuYn YlmuxHKYA0thJRyVvyc8jf1H4akyyL+nbrRXfAVPTBGUUAp1MAsa94GO3YLH6kT21K6KirAc5cOY FcDCnoIwNN8t7kiZoDOby2xFis1ivbGmTLlZaISykddfewIvz0SUup5hrteGXxw2jDxhLHUNvzCc l8uMVqMkUeGCUqlQ2FKcQlG6vbigIH+KUFRot6WEC5KusHjCFLEgP0kQo4KaKQLPM/GVr2aLlSOp wnrrpIY8OXOkxSRHhoWJyUm6tAKLvrbOVpwRL5eFKUR5mDK9uNzmWTsj5Vl1bHpCYnqsGpmYgBx5 VB5+9FN5+LFTZRXH9gnvlTZNSVWs12kEuSrslowkU2pewim1Or1OHm6OiU9QhhnD1VnVrSM3xqfF qNUxafEJabyvtJFJaJEtADL+3XsRkAxn8NdPT9MjECncjA+SeOEqUEGs/71dGj2bGYuf69yq8Hpz LM+Z+Wc+t7wRYsvi64YdZcMORkYy7/neLfJym7kpbdYUe5GxsLjAihaSFzoFm83ILSrbv+j+L+8d fcqak2NlM+/75OfzRg87lly7/sKfrLymLU+4yTeyrTY9W9aZnV6/9YPbF97aN/WrK0rOuBs/z+Ca xM24pmzw0ooG49OHhKvcelWkJdKCa4qP1eGM4h/CtwC7/73dOlZntyvihgLzjpPmratPl+adzj/P uhXj5o2bw8HX64ooLXW5DMP5uOrdP0aXaJC0kw1ikhTGk5K4PLVeNbKG20a4SBWulsvV4arRfHax Ss/TetXoevZ7nl6OG0dDZlLHpSfh9tGMHtDE4Iayx6hHr9bEpvO/H63xfyC7WZ4KZfAKWWxnQoI+ lv+qENL1e4UboZB7daee1cXiknbqJB7eqeVk6btSUkpdU/YyF96L6sCK1UNsgVtV2hAlrTiK/3uD 2zUvuOIRxwvDRlz0ML7L8Y1zYBgzwc3zzxkmuNvwduQ3qikqCW/J4glGGxqb356ShY1R4bJxN6wM jaLSqXQTWy5sWnzDyomTTrt2fva8tCMRUdzc7AFDXKTaNLVl+Yqim4/8Yn6L98sbGweWV5i1ssrE rDh1albq1LV3dXTd0zMxKopl5xQn2GM0mujkqJGRpJz4hCh18z2f3bR1ZHBxjNWeUMD3rf+o4gzc t5Phz+QFt0aXmxvjcqmdsbHxQ0L7rtQ8rVaNiQchtbg+TquJ3ctywA1O/+FdBpswMw+t5bbwVIyB X3V0jXHl5jkVyRn1yZ4Ij9yD1sEQEVPK36TRTvn5+WXM9cJwvrHAwC/G0lNcBQXGAvTHAz/uKMEN zi1stLFwkafSmc04pizkp2mSEMMKGB6hPGlSnKFJzE1LzU3QCqM/kUUk56ak5CZHiKPXCZokF+oT NcU59zrLcy1aFitjKbrkzJK0QXN6nC5VbVArFHiRJR57W2dUi3KNQSNLOPbWmP7cgmK9rTTrqxGR ZU1M1YdjKyA/yIbkEXAKPEB+2J2uVzv1+ij+m8okZz5iFySVzM3khojQ24WZmRnOFK2Bp7QahX6I bXwQ77aU+jiPk//j3ditjvYoLR02lpY6cFeWOsjqaHOXkczt+xH6DNqYTGu3p9uio01fN3BkkhhT YOfnDD2aTLIhgzktsttW4MiIG304YWKMIJNpzM5UmzNePSFji70wMzXyq2hHhj2CiaI2wZma4oxT L4xJjdWEp5XlC4uKN06qvnzmyAK1QaNQaNC4l7pcuqSi9NF0R0PDnIyqGyqFJWqDVi7XGtT8uYM2 rsO9XgwVcAtZeZfBacxU7xWewGfPBOFmX2aZUfqbBacheIwahljaTrc75pSg4pQhlrnbba2PCW44 fttLN3wpHiv5LwxL938pmnbwh/Uybsemi07RduJWteZHxySJ/FxWojljoqNZoT3dbg8+wOrCkibm Z+UnamV9pow8d9ZcXVJ+ur0gSYsPtNkF5eZZG091Wt2LJycW5GRErtKrR++bWB5VkLPmopLGkoQU jV6NHjBqmTVvZkH8aOTYrr0+O10maopPXVs39fTGKZHhGaU1Tr/dJra7myLkitErzXkVfBeX+d/H x0Qa1MBesu8emCpc/0Bqfmq+1sz/lgS0Tn5jTwA1y9ltnIAxenLQJJOHWI5bO9Usz2yIlo7WaP4P wG752NHKN53DSA9AwzDfyNLTkL8B7APnj9Tt8TNbFnyFonctpyKQV5hOPNMV4uaZ593fNq23aVK8 RoYPwPCCOV01uTOLEnLrlnYurcut7N/a7Fw4Z0qUUi6ISp1Gk1u1cILD7TC5Zrd3ts/KZRcsu2l5 YXRySnyeMzkrXmPNsMZkTbFnl+U5ck/x9NUv2rLIGR6bFBUeY4tPzIjXJljNprTCRAeV9+LOPtv/ vgzk3ZCF58d1ZHmf2lq8V2gBEziEC9wqMKmLi6wyeW7QLLlDrNats88wVxlmlkp2KeW/IHHL64J2 KeMvCTGl3M54XvANvfuH9jHuQZhuOr6bA8eAkd5cpfcwNKnSGB0t7WUoXHr5gpxZ0ytTNXFZScmZ cWotnsppuYnalIqK6oy2gVMzRo8Zs6YVxOUWFCcVtRblVeREsUNrH76o2mifmNkq7Wa1XiO3BQ+I 0Ug8x8NnX7Szv/S0uXnhKcUZoy9VTM+fswxtWIt792n5KrDj+/y1ARtqzKV7Bf7fT1xCj1sdaa3S lKabZeFZQQNkDbEatyp2RqG0+ELM7XKH18ln8js6+JoVU1omvadKFnSrfmgf459jRYEPApIBo2PG DCna7cffM6YIE8Sn1bGZSZaMOE3l9QuXbWnOKFh61ZLaDZM1khkTtEeL24rzpjtMEZkVhfF5BcWW lKDJ2mbMRSu1cVOeMom9FbTfSGFFdd7cjqKS0xry9SkTMvg9f7b/KNuAe88EZYE3CL3OxDQaplEz HTCNDIaElgfcakMVrYm5cFV5uUsWL8Jg3hlUn/CcDi6IbQh6fMzzanrZVB93KvquGve/TPwTREL6 8U8UUUI/ei4Jr2qIO/5SHO9W6WfYJGPb+O/txu3W8Z8ovm+LcVs7eF4EN3LQDzLZ5A1DZ6719pWc suHBM9d5e0tGR0z5DWUljcXm6LzGKaWNxfHs/Z59l8woP3toTc8vL54x9eyhc8u75jozZ3dNR+Zk zuoiSwt7cZUF0B34jGHXo23dWojXq5PVLrWoE9X8JVbD6vAltcGtdjtm2PUmS41JMjEedNKs0fTM dWC4VFqn+h/XP+k1Vmn8mp9M0h2sEPbKwnTqsKi4pAhTVk5eQtBp6vjMZEtWjNo2paQkQZdkidXI ZYJYm4qPeWWY0pg6OXvkhaBfxbOCqa78qXa9qFSptaYs9PE7/k8EkHfiPsuE5H0QLQyBBUzCZbs1 8jRznaEKyspeezbgv+BrnhicYOTJn4rfYOo4B04qTs3itclFGRmFyTq5zlqcmTnBotNZJmRmFlt1 7O7gHhM366J0CqUuUndsdmZJil6fUpKZVWrT46sc/79y68V24WX52uDcTIICNGAVFLsz5Wb7dMN0 nNsz+Ti3F/ncglMZm9zY0SjapRvaJDymMqXEm21RqlitOdtiyTarR1eqomzx5hRTGIthXDk1T7ws +Hhmj+A85XJ+wE09UWcy4b5p4v9jC5/KU1hE4A4Nl2UzmYOpJjJVKdO4h/z7d+uFOnCz6CHho90F aRih9CHhI9D4P3CreZGG6UUNHlUrdhtLSi2WUnNgn5mDxxh+1l7h1hVEK5wNhrFnQfO4j5z59KDF Jy3/EIuPb9yGjuFn6Lmbl7vIAXgiMDwS3JEnzA5npRd/zJHRBTh0YLTgp1/aGhMmTBGLAndvYLso CgIfg5VK6VPwPjkadyQ22hKlUhjiog5Om+s0mjKnZE1aUOnEj21hclGhjpu2dI274/r2vNiZAz3X s1G1Uas4PTEzXhMWk22zutJspsNVvUvmpFonZcclpSVrE1wpMckxxtg0W2zBgo3VZRu2bD/jZm1c Ju6sVP9R8W15FD7ZnfBZwHtRSidTOpgigSkNTBnOFDqmyeW/n9VwT+WiuZxWw5CwfFe6TAY5Dwkq iPZ/6tZhYbTZOfbPAfN2yQwGtWOIdexyW+eqPYHnDb6DFow4DuBu5c5xFeCHKOmwdkjnNXdPcbqe pTtZuoPZE1i6gaWHM7uOfcOcpKl8/xHJL4FhAgEPHoXNNvbKUDTmKEbvDCZ8641mNmYV3zZF9GqT cu2peYmaUWN4tF6Jr1pqdpU81lHuKqh2RPUaYkZXCKPb2amsr6Dog+Ap84EyzpVucdlTIoXH8XO3 jH9g++pInnDByH38Nxu3/s8iCwvE274pCu0/NIoZ4svfN8oupSifHor/5Pj+N0XFhf818clvj8qJ 3xn3hGIohuK/I4Yp/2PjvP+mqCrE+HkohmIohmIohmIohmIohmIohmIohmIohmIohmIohmIohuL/ bwT63uQKvKogF0RQQAKk+9/E62L/IUhg8TzNNvpfh/moP8y/Ixf181HzKtuMpe/idaP/XewjR0iB 4HcFt0tXUeo9XMrxtABhYhYEv6XaKcoCaRnEivGBtBzT+YG0AtMzAmklrBGXBtJhkIW9UloFFvGl QFotbBsbSwPzxL8H0lrIks0KpHXCDbJ1gXQ4rFQaxr5xOl95ViDNQKm8P5AWQKYyBr9bGmLCRgNp GWhVqkBajmlTIK3AtDWQVsIkVU4gHQYm5fmBtAoMqs5AWs3mjI2lAYdqXSCtBZPq9kBax2aqhgLp cCjWyPi3estUATtTmuxMabIzpcnOlCY7U5rsTGmyM6XJzpQmO1Oa7ExpsjOlyc6UJjtTmuxMabLz PdK3OOdCHhRiqg5WQBv0QBf0oiyDPtRNk77TuVu6tqJmBaZWgxNLpsJKjBaYi7rl0IllvVKuA9mB tdfgtR1rTsN2K7HOUtStwBorpHqtKKuwr3ap7mrM9aJutVRG7VfgDCworVhvBfawHnNrMdWHY/E6 /dhjH+o7MMfn3I+t27F8Nc6G99IV6LUPa6wKjMlrWHCNXdKYfJReaS010lqXoYavsR/1HVKLHkmz Upp1X2AdbViSLfW8StKslHpsRRuRPjjKKuxnpWSx7sAsV6NmlTQq9cnX2TduBnzEbmktZO+gtWnu K6Xv116L6c6AxfmsVmHdVhy/T8rxFfeN+YNsRqNYpLmvDqyrS7LtUqnm8RmPXxG32jqpHa36dMw7 pf0w3pvpUm+rpB7WS3boD3h+vL25x2j9HdL8+frJLz3SbuCkEbmvLdhH99hqaI7LA3V6Mbch0Hsf roI8tGbMS63SHmlF7aoT1hXczW04k1Zp/LbA+M5v2PUTv7ZOC5Rj2UrsbV5g16wI7K8i7GECFJxU P2es/rfv/j5pHu3S7uRzOn3ML0F7fdP9uDyw17vHavPdTLtgNdbvkPbTTKzRBhmSnTOxTrvU33Sp bZfUfx/GblypC+NaKTql++zE8ZyB3l2YXi/tyuXSrLuxh/Wo5VZcJlmC794Tew3q+R1Mqz99rL9m aQ20c9ZLHu+VZtgn7e1e6V6k1hZpDfy+6JC8ukIao0Py61KpbdBaleDBdU8NtO0ZV0L3VLtkk+P3 yVpprDbpPvqmcSnP67ahB/slG7aP7bt2qZzf2bSC4F7rlla6OrDbqK8O6crvnpPXzcvpLs3AVtxT fDcsHRvpm2a1+ms9f38bHe89eFL+P+LOBS7KMv379zMzzBlQGxXMbNIOWIpmlqyS2cnKI1q5Wv/N QUBBEXAYRsZQqMwOa2WuW9Z2sHa2k7tmbbv7r3ZbyEQRFTZlglb9IxZmOxLYI5r68rzf554Bwexd 9/28n8/Lvd/neN/XXNf1u09DW7ijc51P+p3RY875ceydM8y5fo3rlgE9kkgskZm3c+3wds3imXIe y5PzWfpPRhrJc3qPnEZmgfzoMRJV5LpI9rwi2TJTzgl6NFlddvSauXLU/J8U+n81Ls6OiRHSG30M RFaDZKlVgSh+2z1q5LWj3VNzMrz5hfnzfe5b870F+d50X05+XrL75txc98ycBdm+QvfMrMIsrz8r M/nW9Nyced4cd06hO929OD8zy5vnLkzPK3TzPme+e3764pzcgHtpji/bXVg0z5eb5fbmF+Vl5uQt KHTnU9WXtZiWeZnujHxvXpa3MNl9l889PyvdV+TNKnR7s9Jz3Tk+PiOjcJi7cHE6HmSkF3CtN1lc lOvLKcBkXtHiLC81C7N80kChu8Cbj9+621jPzc1f6s7GcXfO4oL0DJ87J8/t0+PAM5q4c3Py+Kz8 +e55OQuk4cgH+bKKfTTOWZSV7I6GeVWhe3F6XsCdUUTwEb992Xx+1lK3N51YvDmETcP0xe6iAv1j sLiAJ4U5y6juyycgvx5Suntpundx5LP0NGdkp3txLMub3JX6sZ2f6b4lPzdzFqkhGPf1yWOuiz4f rj/vkX6fNz0za3G6d5Eei+7XWR0XkPUC/XFGPinIy8kqTJ5SlJGUXjjUnZnlvsObn+/L9vkKxo4Y sXTp0uTFne2SqT7CFyjIX+BNL8gOjMjwzc/P8xVGq+rX89P5+EV6vTn5RSQn4C4qzOLDcUh/7U5H iyzv4hyfLyvTPS8g3br93ik389Yrb1AqsyiiydLsnIzsbm055+Rl5BZl0pTcZeYUFuTyAXrWCrw5 VMigVlaeL9nd+dn5eUialDPUnbV4nt7orKm8zsrn9UhW1zslAhX6vDkZkZ7T9el6h+m0NU46kJTD p9B59dHh1bt4Zv7SvNz89O4fis/pEU/pAoRLjvWLIl9BkY+0+3MysvQ62Vm5BecEdCFaSCVGZGbN T2cYJKcXFhR3/v0VLUGsOu9/ekWhBrtyES8smsbREP0mIpQkzrOF6PqOc/6fBGOr06lQRym70Pqx sbJ+/YXWj4/X6xtGXmj9Xr1k/ccvtH7v3rJ+44XWv+gi6ifIvwJk5XuRXl//NtpLJAj978TEstsc wLfiq1jpU/nOe5d4QMxS4kWGMkAUKPliubJcPKmsFr/me9MG4/PiD8YW8SesfUrrmnPs7rlAu0uw W4rdp7C7Hru/xe572P0Qa5XSTg+7yhvd7MZhcSB2r8buzdidjt1fYHcRdpdh9wnsrsduELubsft3 7G7HWojWX/W0a3iym9147A7C7nDsTsTuXOzmYXc5dp/C7svY/QN2P8TuVuzWYfcA1o7S+kxPu8ZV 3exejN1rsDsRu+nYLcHuauy+hN0/YPcT7NZgdx92j2D3lLFFMRpblYuIe0hPu6a3u9m9BLvJ2J2M 3WzsPord17H7R+xuxe4X2D2C3RPGSUqM8XmlP3Yvw+4o7N6qjxurRVitJ3dW8rPzpDVGWM0ny8v5 X/lJ+abk0/Ly3ZWVJVa+HNsryg5RTpTVle0vq6LIGpXNzaHQ7t2VVjO2Tu7cebJ+586d0lDB9vLW 4oT1BfKmvLy1np9WeZOQUKzfFFv1L+7l0R9zjDCbC/TnBWajMJsa5VOrQbGa5JUoLzcaFWvMhg0b IubXJySM9OAnH2xOSZk9e/2ZhASrWdHDkT+Eo3QLR39T/Fl5+b6dOwlHsTp+HI5itZ0NR/mJcGxm YbPoFuVnyDun01mi35XYDMLWFVC52SzMlmL9RbHZJMwxrfKpzaDYIhHJkGKEzUzMMn3Fq51OYjoj bzpDslkUmy2iUKX+eYrNcqY8EtQZm1Wx2cenl5fXbNmSMd7mUGyxjfy0Nf7D80/KDs9uiqy05dD3 e/5ZXbNti25AZkhGZovBHJE1FqQQmt2s2K2doe08KW87Y9tZYjcodlNXcOUWs2Kxyuh2FltMiiUa XrleLaa8K0BTjGK36KrKTEUjxHP9LqEzRrtVsdvPdGzbws+2jjPyg88Q5UmiPHNGvh1ferC8pmbL odLxdqdij2ssaOWnYbNeakbWjKyk2G2K3XGwrI3SQNlF2UbZUma3KHbbmY7KyjNEVlkpzRef+az8 ZIlz9Zlih0Vx2HRv91GjsmOfvDfz45f3fodBcXSLu9xiUSy2EvmuxBKjWMz1J+VzvV5n4NHIHTJy u0XYrSUdq8x66B0d8nZgampu7s6ODqfTYVMcjg6hiS1lFV1lS5kmOoTuibWjQ88BJjs6ZNWbRGlZ YxkfIGrKaqh6sKy07CbhiFUc8Y0pjSmtxa1ycO1av2t9zfptCdsSZKuzaanqlhiHVXHY9cRUnjlT Wblli8PMB+qZaSweqKfGaVGcZ1NDbuSDrtyQHKdBcXZPTrkcRSWRtyVyBNafjAxlp8HgNJf3TJBT JkhmXE9QNEO6W7a4QTfcMH9+pabx1K44naSIaLt/VEWZVtYhpEt6kjqzJGtfWlZa7pmgZ2lb+TZZ 21NeWn5pmTNOcfZuHNg4sDW1NbU+tz5X77/bVm9bvcW5BS0UZ2yjp5VS79nn2emp9GzzbPFUNFY0 ljc6bYozopMsHcz3lfJK10s6kbriUxKXGmdedaY41qrE2iOZO0ynPtyxTz4x8jOuVD4pHRdrUGJj ugdULodq6gr5fkWqHJyd2SuPNRhiz6ZPz19MjBJr1fNX77QqTnskgXoGNU0+iBvUrzODZrky28Xr htnCmBHw5grXAm/WIjE2N92Xxzd7u1DunnmLW19V2FHpOwMza7creqcICytu38jfr5NPmLhZK/tR jHelpd0pLp85fapbjLxn5mS3GB+to+/Resn/xp3GtV307rJuEg7RRyRG72KEU1zELuHijILCAhGU x3fkcbM8/lke/yqPny7ii5nYLo+75XGvPH4pj43y2CyPYf0LhDimHxWzPA6Qx2R5vEUeZ8njwsWL Fi9SVsjjKnl8Wh6fk8dX5PENedzUtdP6d0flAo9WMmkkB2YybBX6b5f//z0zoEPsf3yOY7+ULP9G oVc8LNaK18X77Ao/F03imMJqKCO1RqMNC/137EbaueRf7GT/oYyNnB/fGzm//GK3NvS3wwN63Csx vp735ld63tue7Hnv7NPzfpC/5/1l57wfvLbn/bC3hM3Q7X54brf3jKqbPuh5f7uBs50+nSTSiCeO Ng/r3wMMaaLUEDR8we75ZePLYq/JZ3pN1MXsMT+uGO1329OVD+2PORRlu7OX83bDrc77na8YArGZ sQsNf4stjV1t+CzOEGc1fB53Iu6EoUEoD6XpuTHvid183rKDsjf2QLfyVbTsOE9piRvYVQZTRlPG UzJlWXtuid0R91Lcpl5rouXFbiUoy6nzld6m3pO6ysreT3eV1kjp0+88JYmS7FrXrbwSKfLNOcX1 e9enXWV73y8pjbJ0nK/0Sern7De4/8poebJbWSfLp+cttf1PdZYEV8KArnJbtEw6b0mTZVb03LOU RY96vUpZ9naVSOsDCa2JVydmJr6S+JZezrWeuOl8JWI98b8Tm6JFPVv0T0k8JT+rTOeSKUOSu8qE IRO7yuxoeYDiG/LA5VdSRl8x+IqUIQ9wHHzFn6/861U7ZPkmaRolc+gAintoaGgYQkOPXf3Xa9bq ZWjoms3XHKCcHGYYZh22ibI9eRTltuRpI9ZEy/vX+q4bcN2+0atuSKKMGuMcM21Mbsob0bI55aOU 7WMHUYaN9Y/bmdqulxtLbtwkyzfjB41fFy2v3PgN9+vG18u7+vHfUtbd5JrgnxC8ud/tEyiVd6Td WBKpzbk+UuuuK/V6d42eZCepV05aMzlOlpTJM2VRpximJEwZPFnlKo0yf6qYap6aObV9avu0gdOa qZcy/Z7p90xJ4zhPv6JkT/dOL0szyzIsbZosnrQ88KQVpz2cVsx7b1r9jPtmeGYcm3FsZq+Zr1Bv GO/km5kn04rvnnd37r27f37b7NAv1vzixV8EFzy8oD57VnZx5zn7nex3ckbmPZ23oaB9iVgyfoln ycIlviUPL9m85NMlXy1pWXLSa/a6vFd7R3tv8aZ5Wwp7FV5ZWFC4onBNYWVho2+s7x7f+77GogFF e4tO+Uf65/uL/S/6P1g6YOk9S98vzi5+sviD4t3FjQF7YGBgYmBNYMeyy5dNXJa9bNmylcveWLZ5 2ecPuh6c+OD6B99/cGeJuSShZFJJZsmmkm+WX73ct3zT8sYVg1aMXrFwxeMrQqWu0vtK3yptLhtY 9slPzFqbz52Zes47ZV+dLfqM8lDc2RKZS35i9E06d8z1HCmRvn7e+adzDupWes4iD40+W/T54aFb zpbIzKDPpr2CCZX91zEj7x1fz/wpZ2N5ZubtPYmZdm3cS73WxO7onD17Px27t3frkNl629jNcWvP zqKRLDFPj5czcaTWwLiXOrOnP5Wzsl53r/5e1o9mELubYw8wp79Ei73S2g68W8N5ryxn14mvzlkf xndbEc6uCS/pfv9oHQieuw4w95ui8/7Kzhlf2qF13Hiu13bOhejxVlQvZqfIDBSZ4aI6MisyB+qq ze6aHzsVZZZLmKTXP6vwkInY0d+rPE9LbOL+R72BOXBvt9n0PHNs9zn1x/NpdNaulP0oMoNO6Jw7 9TmdJxN1u9xPTEi7IWn6PX07IiuZPLNq9T/FWtXRz8k6FF15OleUPv36dpxdfSL9UV/f9Pp9O/Qa tP60n1N/oz+RaxlP9Hd9+sXu6OynCQN438gnYKP/Snknn59dUbuvqbpPcv3sXEG71lDWTOd51sx1 P1ozayMrJWukqzMW3p+K+CE9WTk5pe+XCbfhWw819CyeO3I7Mx4ZkXpuIz1myGyyP0nXVs9LQppr nVT+LV2pbqM7OXFTn35da+3eqNWySH/QdYn0r8RNVwy+/MoIkVXt8ivlStSt6KtaZEWTa+L/ZZHr aLfy4xpyde1WoqtsV/lxC7m6/kdFrr8XXLpW6Z8o52ZKL11r908UuZpfcJE7jAss52ZH7ku6lR/n T+5XuhW9p0eU/s/Kjy3/e+8urETyrO9X4l5KbZ9kv/Gb2L36TkeWEv1Jaru+u9HvbiyZZNf3PZF3 emHXNEzfKUWeyrXo20iRO6IJcjel75vqx9fLPZG+b6qnRYncj5i79i16GZZmnj4vzazvWeTdsOjO JnI9jH1Ptv5E7m5op5/1otenhVla88i3w/Rj4iZqD9P3T/2ck+Omz9P3Wvo+S5YU+SRO32fJu5Tp 8/SZKPqOok8T+o5M7tAMcm9G0evTQt/BUVPfjZ3dn01OGf+tzMc3eiZmHIvkIbVdRoO/ET+npOmW 5X7PoNuK2O05Dn+sZ/decNWOyJ0wK+XabuNU7ffGe0WicbaIN3q1w8ZPxFBh4E01d/XyKmy8Vzss FI4/CAPHPcbZ2h6+m2/U2sVnWrviEUOUdHGvMo9zhkhSMsUgZZEYRM0Z1JxrzNWqhIKdr4WJuvHU HUTdeOrapb0wtdqETXlADOD9cN7P5f0I3g/H1ihsJdH6TemPg6v38XeQsUSrMC7XXsXf64yHtNeM X4nhxq/FKONh3h3R6o3f8m2309smYeLqUq4G4c1GLO0RxSJeXC96wVhxmRgHmdjPgvlQqO0XPrwq Aj8shWII8A13mbZVPAglsBxWwCMiUayER2EVPAaPwxPwJPwSVsOHfAP/CE5y3QGaSFQEKJAmUpQZ MBPuhnsgR0xXKkV/Ip5rnCVSjfcLp3Eu5Io8YymRPiSGGB8Rg0yvaltNG+A1+FwkmvbAXqiDEHwB 9dAAX8I/YR/sF4kxvbT6mEZta8y/hCkmzPVRaNW2mmPE9eahnK8Tl5lv4Jyr1ZsXQx7kQ5G23+wH cmMmN2ZyY14G5Mb8rkgxb4a/wAmRYrla9LdcA3NFosUD82AJeCEAZfAQkCPLGngWXoXXRJJlI+ej 0AKt0AbH4ASQQ2sGZEIWFIn+NiFSbC7RX/bdFvq1XV4dQfWToi+9dge9dge9bQi9bTK97WF62330 trn0tjR6253ULqe/3GKcRV/5ufYO/eZe+s3jWPAZP9FeNB6in30t7MZm7e/GI2Ky7GeHqdUseneN igdEajf7c7FfiP17sX8ztedFbX9GqxuxvQHbG6P20kRcNyt2rIzBSh5WUrGSGh0TY/DyMJbuxtKz WEnDwt9lpH+RVwnY+Bs2/oaNJGWu9hF2UrGTg53J2LkPOxOVHO1zbKUq67U/0fJj7PXBXgDPCrE5 AM8CWFtrbNLa8O4z4zeMrCP0uW+jIza224gdjtVR0dGvj9g6Wu5n5E3VXqb/OiIzjP47XZ43iBfE I1pYrIRHYRU8Bo/DE/Ak/BJWww7ttKiGnbALdkMN1MI/4HPYA3uhDuphv9YhDsD/QCMchCY4pNWK r+BrOKZ9Ib7XDgoVjkM7nICTWp34gTF9Ck7DGfhf0IEvmhZWBChyVmw23qe1Gv9Lazc+wNmjtZs+ 18KmPbAX6iAEX0A9NMCX8E/YB/vhG+206Qh8C/+CMByFFvgOWqENjsH3oAK+mDpAY8z20WotE7TT ltthEkyGadpByz2c74X7eH8/PKBttczVwhYPzINFvFvC2Qs+rpdCMQS4L+FcxvkhWMX1Y4AOlmc4 r+H8LPyK63Xwa3gOnsf+qzx/nesg1xu5fpfrjwGNLGhkQSMLGln+qXVY9gEaWdDIgkaWRnw8CE2A RpYj2heWb+FfxBKGo1qdpQW+w3YrttvgGKjURTtLO89PcI9G1gzIhCz0MoinhQulTgmjeFpr6Fq9 Yrj7kLvV3C2nl9cba8RgofC0XdxGzwzRM0P0zBA9M0TPDNEzQ/TMED0zRM8M0TND1D5ATztNTztN TztNTztNTztNTztNLwrTY9rpMe30mHZ6TDuft4vPazT+gpGQDvO0r40Z2tf0mhC9JkSvCdFrQvSa EL0mRK8J0WtC9JoQvSZErwnRa0Io2Y6S7SjZjoohVAyhXDuqhVAthFrtKNWOUiFUCaFGiKyfJuun yfppsn6arJ8mq2GyGiaj7WS0nYy2k8UQWWwniyGyGCKLITlidwkLuUxhJJtZe19m7V1vrBWXGf8h +hhZbWR+D0fze1Dm9wnufsbdreS3WN9biNmsky7WSRfrpIt10sU66WKddLFOulgnXayTLtZJF580 nLVyAGvlAMbsAcbsAcbsAcbsfsbsccbsccbsccbsccbscdbTeMZsA2O2gTHbwJhtYMyiN7PtLJHE OD3KOA0zTo8yTsPGeWKYMQNyRWZ0Hb2UddTF2uli7XSxdrpYO12snS7WThdrp4u108Xa6WLtdLF2 ulg7XYzFBsZiA2OxgbF4gLF3nDF3gDF3gDHXwBrnYo1zsb65WN9crGsuxkoDa5uLtW0AY6WB9c1F /z9A/z9A/z9A/z9A/99P/99P/z9O/z/O+hfP+hdP/2+gzx+gzx+nzzewBrpY/1ysfy7WPxdKzdaO 6r2eGBnb7NKeZva+l7VrlnaAWf03vH8cPf7E2zfo86OMn3PNqDTWsY7pGn5B7f3UqmemflpbwV2A tg201Z9mRtfBXbQdTtvdtJsozNR8g5rLqdlEzf+h5kK5y9J7zjvS0v28n8r73bzX+8gtWFrN29ew lISlz7A0TNYPy93iIXlsZ/2LZy94H+TCYsiHAlgCXvDBk2KE6K2Uy7H+EtbX6p8uld0AH4vRxgpo Yp97SExkrxjP+u1ir5ho/IbzEXZW3/LsX+zMjLTcTYt+7CwT9ZWd9rkilXXsPvZd94s04wNyD8Yq jWdJeJaEZ0l4loRnSXiWhGdJeJaEZ0l4Ru/jM+5nx/YA57kiT7Z00dJFSxctXbR00dJFSxctXbR0 0dJFy1G0vJmWo2h5s2wZT8t4WsbTMp6W8bSMp2U8LeNpGU/L+GjLydGW+h7lfhSby7jSc/yR3Cmc IltN+r/7wlo+A2bC3XCPsLGDs7GDs7GDs7GDs9n0f1/GRIb70GYhGZ4i9+O6Rl+JvUqSdkgZClfD NTAMhkMyjICRcC2MgutgNFwPN8AYSIGfwVgYB6lwI4yHm2AC3Ay3wK1wG9wOE+EOuBPugkkwGabA VJgG0+FFrUn5DbwEr8CrsAFeg9fhtxCE38Eb8Ca8BW/DO7ARfg9/gE3wLmyG9+B9+CN8AH/Svicj TUqFtl/5FLbAZ7AVKnm+TQsp26EKdkA17GQ/sQt2Qw3j9j567gPaHtNW7XtTJWyD7VAFO6AadsIu VoPdUKOFYnprTTEu7VBMX+gH/SEBErVD5mfgBa3JTA7Mr2hh8xva9+Y34S14G96BD3i+hfNnsJXr Wi1k3kN99i3mdu2Q5RKtyTIILgU3XKZ9bxkMQ+ByuAKuZOW4CpKYt4bC1dS7Bq6FUdxfx7txrDap nGdq31sN2iGrEUwQA2awgBVsYAcHOCEW4iAeekFv6AMXgUtrsvaFftAfEiARBsDFMBDw34r/Vvy3 4r/1MhgMQ+ByuAKuxKdR7Buug5+x8o2FcTybABPhDpjL583jPJ93C6iXDTmwEIqwsRxWQCmUUfcZ nv+W+m9S/y1tv/Vt7t+BYzw7rh2yKVqTjVhtF2khG3HY+mphm5s+VKwY6C1GMEEMmMECVrCBHRwQ C720w0pv6AMXgQv6Qj/oDwmQCAPoYYO0o8ql4IbLYDAMgcvhCrgSroIk5pqhcDVcA8NgOCTDCBgJ 18IouA5Gw/VwA4yBFPgZjIVxkAo3wni4CSaAPp/dArfCbXA7TIQ74E64CybBZJgCU2EaTIc07Ygy A2bC3XAP3Et8s+DnMBvmwHJiWQGlUAYPwcPwCKyER2EVPAaPA986lDXaKeVZWAu/gnXwa3gOnocX mTN/Ay/BK/AqbIDX4HX4LQThd/AGvAlvwdvAaqhshN/DH2ATvAub4T14H/4IH0A5c3kFfApb4DPY CttgO1TBDqiGnVoLs0gLs0gLs0gLs/RjzNL5rAOJzPyprAOJzP6pzNpfmJjxTMx4JmY8EzOeiRnP xIxnYsYzMeOZmPFMzHgmZjwTM55pk3bU9C5shvfgffgjfAB/gv+GD+Ej+Bj+Cn+DT+DvUA4V8Cls gc9gl4g37YYaER/TW9hjXCIupi/0g/6QAIkizrxaO2p+ilnoGa6f43q9dtj8grCb0YDZrMW8gXfE Yv4d7/DZjM9mfDYzS5vf1Y6YNwP+mvGXWa7F/Gfq/4VnH/L+I8BfM/6a8dOMn8x+LeZt1NnBu2ru d8Iu2A01UCvizXv4bL7hmfmGZw7x7AvtFDNli/lLfONbnfkwbf/FdZhr9thm9tjm74BvLuY26h+D 70GF49BObCe0I5Y47aglHnpBb0jQTlkSYQBcDAPhEmG3DIJLwQ1Xsiu8CpJgKFzLs1Gcr4PRzLxj YJzWYkkV8VaDiLMawQQxYAYLWMEGdnCAE2IhDuKhF/SGPnARuITd2hf6QX9IgEQYABfr/zdCwE8r flrx04qf1stgMAyBy+EKYJ6xXgPDmBGHQzLXI5k5r+V6lNbCTNxiHc31DTAGUvSZmTjGwhSup8I0 7bB1Ou3maKesc/FtPu8W0C4bcmAh8E3Xyr7SuhSW87kroBTKqP8En8eYZ6ZusT7HeT22XoAX4Tfw Jvbegrd5/w5s5JlKveO0Pa2dsgntiE0RdpuVmZsc2uyce/P8IhHPbN5iY1Wy9edZAiRqR20DYKD+ G0l9dEf3Uk8wKpvkvuzvXc9X8vwR+RsUfY/VJmIMd2qzjFP130wJu/5bLflumGGk1mwYDWO0w4ab ON+p7TXcpW01TIapWi2W6tlRNLOjaLbP1rba74PHuH4cnoAn4ZewGp6Cp+EZWAPPwlr4FayDX8Nz 8DyshxfgRfgNvAQvwyvwKmyA1+B1+C0EtWbnNVqzMOJpu2E234Z1/8fhv4r/qmGsVo//quFWzk9o Bw1PageZt9zMWW5qbrXfrdXb74FZ8F+QoR20L4RcyIMC8MFjmkpsKrGpxKYSm0psKrGpxKYSm0ps KrGpxKYSm0psKrGpxKYSm0psKrGpxKYSm0psKrGpxKYSm0psKrGpxKYSm0psqmOSdtAxGabAVJgG 0yENZmgHiV1FwzHaFyhUb5A6ah/L30VcSuwbiXuj4X7tY0MmLIYntCpyUKV/GyH2jcS+kdg3EvtG Yq8i9ipiryL2KmKvIvYqe7H2sT0AD8JD8Kj2MX5V4VcVflXhVxV+VeFXFX5V4VeVuBkF/Cjgx7dm FPDj3yl6UBs9qA0/v8STJjxpMt7bcQJ/46PfZoZHv80Mj/6OsJ7e1UbvasO7JrxrwrsmvGvCuya8 a0IZP8r4UcaPMn6U8aOMH2X8KONHGT/K+FHGjzJ+lPGjjB9l/CjjRxk/yvhRxo8yfpTxo4wfZfwo 40cZP8r4UcaPMn6U8aOMnww0kYEmMtBEBprIQBMZaCIDTWSgCWX84lay4CELHrSoIQse9Kgx3CkG EP0cop+DWsl8e30t+h36uui6OiK6ro6Ifi/2oFUNWtWgVQ1a1ZCNOWRjDtmYQzbmkI05ZGMO2fCQ DQ/Z8JAND9nwkA0P2fCQDQ/Z8JAND9nwkA0P2fCQDQ/Z8JAND9nwkA0P2fCQDQ/Z8JAND9nwkA0P 2fCQDQ/Z8JAND9nwkA0P2ZhDNuaQjTlkYw7ZmEM25pCNOWRjDtnwCAt9oY2IhxLxCiJeTsR9iTCf CO8XieToPfLzHrmpJTe15CGeHOj//Ogd4n+P+N8j/veI/z3iryX+WuKvJf5a4q8l/lr8qMWPWvyo xY9a/KjFj1r8qMWPWsZKDpnuOd8dE8MNM+ils5nrcpjnFjLHLYJcyNPq5G8uOue65cwZpdpWx4Na s6MElsMKKIUyeAgehkdgJTwKq4C50cHc6GBudDA3OpgbHcyNDuZGB3Ojg7nRwdzoYF50MC86mBcd zIsO5kUH86KDedHBvBhnAzs4mPMU+dsv3XeVMd7AGG9gjDeQNwd5c8jRU6w1MHYbGLsNjN0Gxm4D vqv4ruK7iu8qvqv4ruK7iu8qvqv4ruK7iu8qvqv4ruK7iu8qvqv4ruK7iu8qvqv4ruK7iu8qvqv4 ruK7iu8qvqv4ruK7iu8qvutz1mxtH9muJ8Mfd81ZekT7xCgiCvL+a96fQo121GhHjXbqfkndkdRN ZaTYiTSJkWIn2iT60VP63I9C7SjUTpRBogwSZZAog0QZJMogUQaJMkiUQaIMEmWQKINEGSTKIFEG iTJIlEGiDBJlkCiDRBkkyiBRBokySJRBogwSZZAog0QZJMogUQaJMkiUQXE9kQTQZhfa7DLkiH7o s4sIshgBYUbAISJ5ikgGEsnVRDKQSK4mkqeJZDPa7UK7XWi3C+12od0uogoQVYCoAkQVIKoAUQWI KkBUAaIKEFWAqAJEFSCqAFEFiCpAVAGiChBVgKgCRBUgqgBRBYgqQFQBogoQVYCoAkQVIKoAUQWI KkBUAaIKMI5ny3GcQhSfE8UH0X8eq+8r3hAO4q0i3ipirSKuvsTUlzfvEk8V8VQRTxXxVBFPlTAb itDYTw9eqh0xrKT1U6wPv9Z/x87THwwrtXahcDwhhlLjhKGYZwH5vMawStgMj9GavbzhOdHLsJ7n L2g/OC6GgXAJDIJLwQ2XwWDIhCyYDwsgG3JgISyCXFgMeZAPBbAEvFAIPigC/HMsBXxy4JNjmfaD jOcHPG02LNe+I5bDhnVai+F5/L/P4GVeK4QinhYTZQBKtc8NZfAQPAwrxSWGVdonhmeot0bbb3gW 1sKvYL22nfi2OwzMZUYwQQyYwQJWsIEdHOCEWIiDeOgFvaEPXAQu6Av9oD8kQCIMgIu1NnLYRg7b yGEbOWwjh23ksI0ctjnGap87xkEq3Ajj4SaYADfDLXAr3Aa3w0S4A+6EuyCTOLJgPiyAbMiBhbAI cmEx5EE+FMAS8EIh+KAI/LAUiiEAy7TtwkTPOUgWG8niEcNz2mn60krtW/rJCZGGCioqqN16Uh0r TgsrTgs1WsiyatB3aRlaCytMCytMCytMCytMCytMC9lXyb5K9lWyr5J9leyrZF8l+yrZV8m+SvZV sq+SfZXsq2RfJfsq2VfJvkr2VbKvkn2V7KtkXyX7KtlX/20PnoQfk2EKTIVpMB3SYAZkYiML5sMC yIYcWAiLIBcWQx7kQwEsAXJDdlWyq5JdleyqZFcluyrZVcmuKqxk93/o4e308LBhBX14pXCR7Say 3US220QBOa4gxxX09GZq7ibXzeS62bCMkbocJVbQslRrpee30vNb6fmtWDGjQzU6VKPDd4anmTHX aIcYAYcYAYcYAYcYS3uZG6rQqA6N6tCoGo2q0agajarRqBqNqtGoAo0q0KgCjSrQqAKNKtCoAo0q 0KgCjSrQqAKNKtCoAo0q0KgCjSrQqAKNKtCoAo0q0KgCjSrQqAKNKtCoAo2a0agZjZrRqBmNmtGo GY2a0aiZEdLKCGllhLQyQloZIa2MkFZGSCsjpJUR0soIaWWEtDJCWhkhrYyQVkZIKyOkFY2r0bga javRuBqNq9G4Go2r0bgajevQuA6N69C4Do3r0LgOjevQuA6N69C4Do3r0LgOjevQuA6N69C4Do3r 0LgOjevQuA6N69C4Do3rRA4KhlEwjIIqen+MiirK7UO571CuDeXaUK4N5XT9+6P/h6gXRr2w4Zc8 ewqln9E2oeBRFDyKgkdR8CgKtqLg9/STPaj4DSp+g4phVAyjYhgVw6gYRsUwKoZRMYyKYVQMo2IY FcOoGEbFMCqGUTGMimFUDKNiGBXDqBhGxTAqhlExjIphVAyjYhgVw6gYRsUwKoZRqQ2V2lCpDZXa UKkNldpQqQ2V2lCpDZXaUKkNldpQqQ2V2lCpDZXaUCmMSmFUCqNSGJX+N3H3Hid1fd97/Lc7w+4y zDKJolFjNBbjLTXeTROTpranpakx0aRJqWlM2mAajNVcwHjDG3jBC4gCYvACEVFZqtaIKUsCIop4 G1YWlyFh2AXJXNxhx98uLLJEvuc5I/GYnPZxTh+P8+j54/X4zcz+5vf7ft+f+8iMFVaqsFKFlSqs VGKlEiuVWKnESiVWKrFSiZVKrFRipRIrlVipxEolViqxUomVSqxUYqUSK5VYqcRKJVYqsVIpOpGV BllpsB6NU6IMK8SsMMAKAywwyAK1uWmAugPUHaDuAHUHqDtA3UHqDlJ3kLqD1B2k7iB1B6k7SN1B 6g5Sd5C6g9QdpO4gdQepO0jdQeoOUneQuoPUHaTuIHUHqTtI3UHqDFBngDoD1BmgzgB1BqgzQJ2B 6DiZYUhmGJKFt6nnqcZb7eK2uv9YvcezMcff7wlDIm5IxA2JuCERNyTihkTckIgbEnFDtB6i9RCt h2g9ROshWg/ReojWQ7QeovUQrYdoPUTrIVoP0XqI1kO0HqL1EK2HaD1E6yFaD9F6KPourXto3WPF FSuu5a+iKCiKgqIoKNb1/10ETOfld8iGM3An7oIOvrH2ycZ/7u097NHDHj3s0cMePezRwx497NHD Hj3s0cMePezRwx497NHDHj3s0cMePezRwx497NHDHj3s0cMePezRwx49FKxQsELBCgUrFKxQsELB CgVr0VAUDUXRUBQNRdFQFA1F0VAUDUXRUBQNRdFQFA1F0VAUDUXRUBQNxf+LaCiwUIGFCixUYKEC CxVYqMBCBRYqsFCBhQosVGChAgsVWKjAQgUWKrBQgYUKLFRgoQILFVioUK/xVV3pluj097LXTBlH L0n7Cu3/ezLKOFyA7+Cf8V2MB5vbY8UeK/ZYsceKPVbssWKPFXus2GNlRM0XJuJS/Bj8zR4r9ljR 415qR/8rZioifod8W4v0QTl18P8UI3r3S/XYU/jxjfz1Vo9v0ytNN33PjvaLvki5Psr11bvySbja WVMcp8r7t8DcJzZr1Tn2rmPr3e0sj+eEfgr38+4q767y7irvrvLuKu+uUr6P8n2U76N8H+X7KN9H +T7K91G+j/J9lO+jfB/l+yjfR/k+yvdRvo/yfZTvo3wf5fso30f5Psr3Ub6P91V5X5X3VXlflfdV eV+V91V5X5Vl+lmmn2X6WaafZfpZpp9l+lmmn2X6WaafZfpZpp9l+lmmn2X6WaafZfpZpp9l+lmm n2X6WaafZfrr08ouSr383twSR4n6XGOSZqU90Vdp20XbLvarsl9VLd3pr5tYYgR9S/Qt1fPfdFaa KaPM0inN0cHeE8p0LdG1RNcSXUt0LaVqtaExdNG1i65ddO2iaxddu+jaRdcuunbRtYuuXXTtomsX Xbvo2kXXLrp20bWLrl107aJrF1276NpF1y66dvGpKp+q8qkqn6ryqSqfqvKpKp+q0r1E9xLdS3Qv 0b1E9xLdS3Qv0b1M9zLdy3Qv071M9zLdy3Qv071M9zLdy3Qv071M9zLdy3Qv071M9zLdy3Qv071M 9zLdy3WNa7r30vjtaL/GJTx5ZXi+8Vl+uSpMaHwhPNg4EH7VuDPc0rg7vJZoDVsTx4fexAnhkcSp oee9f6f8teiQxN9FmX3/Xnkray1gjcdE2LO8f5Ue9jmWeB4viLQ1LPOyx1m96HqWfN2xC6XogMay KrbT+wa9fxeG3C0K3YlmtEBtdPdi4iSvn4xTcFp4K3FGeCP9rVBJXxBeTH8P8kP6EkdqpKmRlg/S VzpOCqX01bgGk712m9duxzSYd9J3eW0m7vaY96TvdY0FYTD9qOs/jidCb/rf8KTXfub5Ukd7Snd4 7TWswwbPc/i1x5vQ47ztoTs9gF2hu3VUKLUegANxOD6KI71+YXix9TqPrav1plBuvT30ts7CPXhQ x/I3+1TdwkZ7qLqBqnmq5qn6DlU3UbVI1Q1U7afqBqpuoGYfNSvUrFCyQskKJStU3EXFmIoxFWMK Vim4hYIbKLiBglsouIGCRQoWKbiFgsU/UHALBfMUzFMwT8EiBbdQcAsF8xTMU3AD9arUq1Ivpl5M uSrFYorFFIspFVMqplSVUhVKVShVoVSFUhVKVShVoVSFUhVKbdin1BZK5SkVUyqmVEypSnRE46Iw vnFJWEyp1XzwtxR6jCqlxs3hh/zs2sZyWMizxzfuCO08+zx+lk8kQi7RFOYm0uHmuqePCickDo8u THws3MTr/zzxifBtqj3L87/A55Yl/jQ8mDgzjNv3iVR+379KvjAxPqwQBcuitLt3sVOXu7/ibtvY IutuW1294ooDrtblarEYOkMMnRmNtO5B71rnXbu9qxYfg9Z7snfn9kVgybq2W9ehrtDlCgVXeD1q re90lc7phfCEd5ziHVvcb5N3ddrRHu/c4l2H73tXzru6o4/wqKp39fGkAZ40wIt6edEOXlR27528 qMyLyryizCvKPKLMI3bwiB28YQdvqPKGKm+o8oQBnjDAEwZ4wg4eMMADBnhAmcXKLFZlrQE5vhQd aS2t9rtAX7fIff/dGpZiTXi7/m94x/KAy0Kf6xdcv+D6hfQ9nt8f+lynECW9a7eVf8c7Xq9ZVt5Y FF5i826vvu7VbCPvquu3Wb4YRbuvhtdd9/VorLtOc/a1YqngHU+4+yR3n+SduyixkxI7XWFD48tm 86z7rKfI645dyIU2V1zCg9Y1VnhDCqPCZQk1NaGmJtTUxOgwOXEkPsbGx3h+LI7XX53K7p/z+Myw w2o+bzWfF3MF6u6m7m4xV6Dw7vT3o1HpH0CnRoVJ6Ss9nhSmUWIaJaaJuwK1d1J7J7V3pqf7+11e m4m7PZ+De7zvXte63/FfKfcYloXJ6eccX8GryGIjfoW8v3U7bsHWMLk1Cs+2DgttrU1oxhGeH4UL w24WmCb2Cqy5s3U2i9yNOfgJ7gttKvLKuiduZem/knX2yjp7ZZ29rP4XInyvCN8rwveK5r3RoewR 075C+wLtC97V+v7cZO+xvcf2Htt3wb4L9l3ba8FeC+/llf8gp1hrbJ2F9+eIhpQ7TuQBN7B+O+tP Zv3Jjb9k0eVYKVqfiw5sfB4vyCEv89N1Xq/lj5yquNH0/Sv8GpuQx+ZwU2O341a8wf+2Of4GRZSi 63jLk41vetyLimtsd+xD1X3fQuxxPwbCZXJSp4xdlLGLond8LTc17vHab/FOWN+41zGI6gY0opa3 krxtmMdN4XEeOSExoh7114j6nkQmzEx8AB/EfhgVzuSt5/HW83jreWrq4sQhYV7iw/52KA6PvpE4 wvGPMDqczZPP5slXJ47y/GgcE8by6LGJ4zz+Yxwfviw3TpBVXmW1Ray2iNUW8fZz5Mn2xOnO+ST+ JPws8SnHT+OMsCDxGcfP4k/DNFFxXuLPPD4zXCsyviOfbpFPa/8y+4rEedFhifMxPqytfUaeHh/W pS/E96ORomSkCJksQkbykom8ZCIvmZi+zt+vx82YiltwW3Rg+nZMw3Tnz/LabNzt+Rzc4zpzPb/f 8YEwMz0fD2JBWJx+KMxTxRakF3nehsX41zBWVI1V2RbwwEU8cJG+YLHqtiD9VPhZegmedt5Sry0L Z6d/4fEvsdzrz3kf30qvcd2XvPYyXvHaq8iiw7Vewzp0On+Dc3PY6G+/wq+9vgl5190cOkXuWNVz geg9T/SenX7Da3wwzQfTBfDDdAnl8HqaH6b5YboCPpiu4i3E9t2PQY/fDuvTuzHk8Tvgc2k+JytM aOV3rfyuNRHWtyYdh3mtCc1o8Xy47JECH2xNh9dbWzHS4ww+4PUPYj/s7/VRoajCF1X4YuuHXO8g 5xyMQ/BhHIqPOPdwf/8ojnCPP/KaDCsbTWi9JqwT4RNbb4oObGXrVrZuZevWW3Ebbg+LWu8K80T+ IplqrEw1VqYaKwsskq3Gts51nftc5wHXfND1F3j+EBbi4TC53kl8V5b4mazwok6iW0b4pUzwaxE/ VWT/SGS3idrFonalertDxP5cxG4TlRtE43Oi8AlRuE7UfV5kXSCSHhQxt4qYn4mYLaLkVlHysihY zvvn7vuO09O8/+n6f9P+YVgb/ZN8tdBKFqpYaxofV6OXhJflrQflrQetqpY9/132XCV7rlK5Ht1X w1eqgSWr3aZ6rVS9Vspfj1r58/JUwcqztQpm1UX5Zpt8s83KN8vXeSsflLPzcnZ+X4V7WC54VC54 1Cp3WuUltW9pqF5r0v+ox70grFTBVqpga1Swle/1CJd6fll4cF+vsFB8LhSfC1WwNWlzR/oG3Irb wipZfZWsvqreO9zl7zNxt+dzcI9r3Ou69zsuC4/y+0f5+aN8uqCe5NWTPL8tqCl5vlrYV70e5ZeP 8stH+WKBr23ja9v42ja+VeBbBX61jV9tq1e3I3WS71a4lXxqoQq3RuVYxT8e5R8F/rEtmqhKrFYl VvOHFXzhIUpXVYfVfOFLsnmnbF7L4s9TNU/VdVRdxyeelLm7KdshU3dStoOyHXwjrmfoA8N62Xi9 bLyej5zMR3bLshtl2Y37+rUOmXWZzLpMZl3GZ9bKpq/JomtkzvUy4moZcTXVq1SvUrsqA66WAVfL gKtlwNUy4GrKVmW91bLeaplutYy2RhbbKIttlMXWyGLLZLFlMtgaGew1Gew12eo12Wqj7LRRdtoo O22UnZbJTstkp2Wy02uy0kZZaaOstExWWiYbbZSN1shG61mnQ2bplFk6WamDhTpkl27ZpVsG6ZYt OmWLWmbolBk6ZYZOllrHUutYap2s0C0DdLLUOpZaJ/I7WapD5K8W8atF/GoRv1rErxbxq0X8MtG+ TLRvFO0bRftG0b5MtG8U7bUoXyfKO0V5pyjvFOWd5uCSzrjWU58ahqLTRNkOEfUtETVLRM0SUS+w 8wJRs4tdF7LrQnZdKFqK7NrHrm1s2sambSJihyjYwRYL2GKBCKh1ygt4/A5ePouXz+Lls9hiAS/f wctrnfIsXj6LN++iVxud2njzLlq10aqPVn28ehe9+njyLvospM9C+iykTx9v3sWbd9FoIY0W0qeN 9+7gvbN47i57XmiPq8KNPHanHTzu2YC17wz3881cdIidVT3baGfddtZtZwW7ekkeKNrZS3b2ktXV prOXrO4lq6ta3UtWVbWiqhV1W1G3FXVbTdVqqlbTbTXdVvOSVVStojs63J0G6nPJoLvtwpAu8R19 clTvXmJ363S3WrUacLeaz3S624C71arSAC0G3HWAFgPuPODOG915oztvpMWAuw+4+4C7b3T3je7e 6e4D7r7RjLA53Gvna+16rTvH7liQy34q426QcTfIaffJuC9HTc4a3Dc/xfu+sXR8Ymw0OjpGlBdF edEZ3c7Y9rvp2pnddjJoJ1lRXtMtaydZu8iKgKIIKNpN1k6ydjJoJ4N2MSgCiiKgKAKKIqAoAoq/ N/l+yDkf8drvJuDRHh8Zsry5WJt2eXORNxd5c5E3F+u2/bWVvV237TDP+uufqezGkEzSVPs2kq7q dF3V6Xr1nD1UwnZ/q8j12+XO7XLnNrlzm9xZy43b5cXt8uA2V9tc95v19Ssl6grG0VGuscRflrJu r2u1O+Ot93TRQ9Cklx699Oh1j/Z9/8byclbupU8vXXpZuZc2vazbaw3t1rDEGpZYwxKW7v09TT7s +aH4nSZHOP9Iz49yvM/5D9Q/M6lEDXYfRx+yvt59dW6TNW2qRa41bbX631jXVuvaah1brWOrNWx1 71737nXv2n03ue8m993kfpvcb5N7bXWf2j02RUe6+sN2327ny95XA2qzfrs79dVzfqr+L3Xu2udp m+qd7Q/lx3250Y6XuevD7vqwuz78H+bFWh48wnm1HHiUYy2f3efcP8xnw63m51awuf5pQ1P9e7EX uvNad16773tCq6OTrTvnzFWsljW1FKx/DZVWUKmdSrW1/xuPrin1FFvXuoI+aj1FrafsZ42rzne1 dlbM6ixrlfgpCj7FkjUvf4qXF3l5kUWz9reGtxftMWePOXvMsWpWh1jQIRZ0g7UK3U7pdkq38/oi K2dZOUv1dqq32/sayj9l72vsO8fKWRZojz5M9Q6qd9jzi3ZQte9nrLqmfIcV91lxn9X1UbuD2h1W 2WeFfVTuoHIHlTuo3EHlDip3ULjDnfoo3EHdDup2ULeDuh3ia2e4kzbr6FHmYSqCeDpBzT4tvB0l 9Eqv1j9dOy1sjo7wbGf9U8vRctyROCn0q+P96ni/MwbV8F4dVXXfp4y96nCvOtyvDvfv+5Sxt/4p 4zJ5791PGvvV3n61t/99nzT2q7v9uqIBdbdXZzSgDvarg/1qX380XKexy0ru1VnE9U9wTw0ld619 I+ERFnyk/qlti14kToyy5uPrnw++Uf+84jTv/mr0l/LfYVHSNd6oX+OEsKf2uavdsp/ztzp3CxVG 2dFpYVddj+Ue9UUHeBT/wSeNfYnzdL7nhy123GfHfe/7ZLDvP/lksO/9E3z0UXeqfRq8na7b6Lrt Dz4RLrnLdppud4ft7rD9fZ/cbneX7TTdTtNtNN3+B5/ebqfp9vc+vc07p8fzrTLh+z6RjRrsekd0 ZKK1bvGH9HADergBPdyANT1tTU9Tapc+rqqPqzq7v/5Z3+f8/cz6t/yWUH6JPPxRebj276mLerGq XqxqXU/ruap6rqqeq6rnquqxqnqsqvU8rb+q6q0GrOlpfU5Vn1PV51T1ONWo2WqedOcd9U8YaxY8 052/Gla628potL9uodtma9xkjZucWftE/U36lelXpl+Zfj3021X7nIqGm2m4i4a7aFimYZmGm2m4 i4abrXUTDTfTsEzDMg3LNNxMw800LNOwbM2baLjLejfRsEzDMg3L0YFU66ZaN9W6KZWnVN66N1l3 jlLdFMlTJE+NPDXy1MhTI0+NPDXylMhTopsKeSrkqZCnQj46xD5L9liyx1JdjRNc+SQV+WScgj8R L0/IU/+GpzxegmWhpN/tt5esvWTtJau/7bePrH1k7aNkDyV7yNpD1h6y9e9w1v618cHRnGicTHAB voMfhUeiK8Id0ZW4CpNwNd4ID0Xb8Bv0O2d3mB4NYQ9+i3fC9IZjQmfDsTgOH8cf43h8AifgRJyE k3EKTsVpOB2fxJ/gU/g0zsBn8Fn8KT6HP8OZ+HP8Bf4H/hJ/hTH4a3wef4Oz8AWcjS/iSxgfHdbw THixYWV4ruFZrMJzeB4vYA1exEt4OTyXfCDckZyH+XjV8yzWwl6TexHC9GEfCAuH7RceGjYqdA47 AAfiQzgIB6Mn3DGs4pzteCvc0XQsTsdFYWHTv+BiXIKJ4ZGmS0H3pumhs6kjPNc0GDqbjwrPNR+N Y3AsTsYp+AzOCw81fx3nh+nNd2MBejzfgq1gs+ZyeKT5TVT9bYfng2F6S2PobElAfW8ZhiboX1v0 ry3qd4v63TICabRiJDJQ01vU9BY1vWV/fCo81/JpfNPj7zhe6/iw4yPYGTqHu9bw/cNz0Tei/Xjc /hiFA3AgPoSjcQyOxXH4OM7CF3A2vogv4Ryciy/jK/ga/h7jwmKeu5jnLua5t0QTzAgTcSl+jMtw RXiMNz/Gmx/jzY/x5seSt4Rs8lbcBlGRnIbpuAMzcCfuwkyImORsPOB98zA/PMbqi4dtCNlhomtY Ht3o8XrBsYiKv2/HW157J2SbmqCvbhqOFA7CwfgYjgIdmujAOx5rOtXxdMczHMfgGzgf38S3cFFY zHMW85zFPGcxz7mF59zSZL9N9suDHmu5pKZNNENPdSfuwkzMwmzot6Jav/UIHsUivISX8QpeRRZr 0YHXsA6dWI/XkcMbYYmcsEROWCIndEZmnmgH2D7iu5HZR55YIU+skCdWyBMr5IkVyVLoTJbxJnpR gZkp2Qd9aFIfmtRfJl0z6ZpJ10zW3rcXIawQb0ua5YJmsd8s1pvFerM4bxbnzX+Lr+I853wd54cV zd/zfAIm4se4DFfhRtwE8dZMo2YaNdOomUbiaUXzTx0XOD7uuAx0aKZDMx2a6SDWloi1JWJtiVhb ItY6xVpnsz0125OYWyHmljTTQ9ytaPhElNSNDEMTmtGC4UhhBNJoRe03pz8dHR+dgXFhLh+fy8fn 8vG5fHweH5/Hx+fx8Xl8fF50ebQfP5/Cz6fw8yn8fAo/n/Jf+C2pk6N2vBFms+hsFp3Nom0supxF l7PochZdzqLLo7ejD7LqNFadxqrTWHUaq0777/pefOOJ0cGNJ0XHN57q+Dn8dZjb+Pkwu/EsnBsd 1Dg+LGq8MFzf+D1cFK7Xs12c+Hq4Wd92ceKbjhNMMhPV6Y4ok3gtGpXoxOuqbFd0WOKNsCKxzfPf RMckCvVfdRideNOxN8okJ0SHJSfiUvwYl+FyXIErcRUm4WpcU/8drSnyxRT5Ysp/9Xe0ePs03j6N t0+Ta+bWv5O/X5gtx0wZ1hvtJ7/MlV/myi9Thu2JDmtKgG817Yf9MRrHhilNxzmehFOi4+WUKU2f 9PiiMFf+mCt/zJU/5sofc+WPufLHPPljXhNfaroCfOm97/p3hq3/2/f2a9/F/2JYLtJmi7TZIm3a e7/D9bvf4Kr99tbdXn/397dOFk3T6r/B1eP8LdgKPidy2kROm8hZLnKWN2+PPtjch6rzd/g7/xNB 02q/0/X/7Dv67/+tr/d91772PfrU2DA7ZV+pSeH61DUQNylxkxI3KXGTEjcpcZO6HdMwHXfAflN3 4i7MxCzMxt2Yg3vwE8zFvbgP94M+qXmYj5/iQSyIDh5xZXTQiKswCVfjGlyL63A9JmMKbsCNuAk3 Yypuwa24DbdjGqbjDtyJuzATszAbd2MO7okOSn88Onjk8OigkSmMiA7SLa4VBW/Uf8Vkbf2XTw5r /LFslpHNMrJZRjbL1P+PCcNR+/9WjUAarRiJ/XS3+2MUDsCB+BCOhg5aB5DXAeR1AHmZb7TMN1on UNQJFHUCRZ1AUSdQ1AkUdQJFnUBRJ1DUCRR1AkVZcoIsOUGWnBB916Q1Hhfie7gI/4KLcUnt36rj B/ghfhQu/w8z6hVhjGw6RjYdI5uOkU3HyKYp2TQlm6Zk05RsmpJNU7JpSjZNyaYp2TSl7hbU3YK6 W1B3C+puQd0tqLsFdbeg7hbU3YK6W5B5R8u8o9XfWP2N1d9Y/Y3V31j9jdXfWP2N1d9Y/Y3V31j9 jdXfWLaeIVvPkK1nRMVQiUoo4030ooLt6EMVbyFGf3hSZl8qsy+V2ZfK7Etl9qWy+mRZfbKsPllW nyyrT9bT5/T0OT19Tk+f09Pn9PQ5PX1OT5/T0+f09Dk9fU5Pn9PT5/T0OT19Tk+f09Pn9PQ5PX1O T5/T0+f09Dk9fU5Pn9PT5/T0OT19Tk+f09Pn9PQ5PX1OT5/T0+f09Dk9fU5Pn9PT5/T0OT19Tk+f azgnOrjhXHwZX8Hf4ichqxJlVaKsSpRVibIqUVYlyqpEWZUoqxJlVaKsSpRVibIqUVYlyqpEWZUo qxJlVaKsSpRVibIqUVYlyqpEWZUoqxJlzRLtZokVZokVZokVZokVZokVZol2s0S7WaLdLNFulmhv eCVKNbyKLNZGKVUso4qNVMUyjeYdlSzTaKZRzZaqZuNUs3H1avb1UGkch/Hh7vdXtcZ/qf+6yxiV 7UKVbYzKVvuVpMcTPwoPJ5apYsuj1sTKcFNibXhClcuocilVrqjKpRIbwlaVrm3fbxcdVv+dyze9 3hsNU+UyqlxGlcuochlVLqPKZVS5jCqXUeUyqlxGlcuochmddFEnXdRJF3XSRZ10USdd1EkXddJF nXRRJ13USRd10kWddDF5d4iTc3APfoK5uBf34X48EMaonGNUzjHmrnZzV7u5q10VTamiKVU0pYqm VNGUKppSRVOqaEoVTamiKVU0pYqm9JmxPjPWZ8b6zFifGeszY31mrM+M9ZmxPjPWZ8b6zFifGSd3 hkpyELvwNnZjCHvwW4gJlXmyyjxZZZ6gMmdV5hnmv5z5L2f+y5n/cua/nPkvZ0rImxLypoSiKSGv go8Zti3EJoW8SSGvkk9QyScMs6Zh1qSij1HRM6aG/LC9nocQN0VoQCMSUUalz5go8iaKvIkib6LI q/wZlT9jssibLPJNhzr3IxjttY95fhTkWlNGXmcwRmeQaTrR309yPCUaberI6xDG6BAyJo+8ySNv 8sibPPImj7zJI69zmKBzmKBzmKBzmNAkjzbJo03yaNOPMAETw+W6icvf6ybkUPNsTieR1Ulkm+6P Uk2PRwc3PYGnPP654/OOHaFdl5FtYktzb66p9oucHwlZHUdWx5HVcWTNwu1m4Xaz8Aqz8AodSNY8 vMI83N58RpQyE7ebC2JzQWwuiM0FsbmgoEtZai6IzQWxbmWGbmVG8z+ESvM3cH6YbD6Imy/yWEw1 X4xL8H38wDV/CPsyOxTMDrHZITY7xDqclA4nZYaIzRBx8y3Ov7X+y4axridlnojNE7F5IjZPxLqg ybqglC5otLki1glN1gmlzBax2SI2W8Rmi9hsEZstYh3SDB3SDB3SDB3SjOZtrv0bFCDXN8v1uqYn dU1P6pqW6pqW6pYm65Zm6JaW6pYm65ZSZv2cWT9n1s+Z9XNm/ZxZP2fWz5n1c2b9nFk/Z9bPmfVz Zv2cWT9n1s+Z9XNm/ZxZP6fryuq6srqurK4rq+vK6rqyuq6sriur68rqurK6rqyuK6vryuq6srqu rK4rq+vK6rqyLSdb0yn4VGhv+TS+6drf9nwcLsB3vPbPjt/FeFyIS0JRh5bVoWV1aNmWa71nutcf du4jYUXLox4vws6QGx5FB+vgssPtbfj+oX34AVEq9ZXQmTIXpr6GsWGczm5c6h88vixUUpfjSvyu 07vO4xtwU5TR8WV0fBkdX0bHl9HxZXR8GR1fRseX0fFldHwZHV9Gx5fR8WV0fBkdX0bHl9HxZXR8 GR1fRseX0fFldHwZHV9Gx5fR8WV0fBkdX0bHl9HxZf4/dnyZ3+v4Doimhb9qOD86r+Fb+MfosoZ/ iv6x4dvROQ3jonGNfx39eeP46DOJr4avJcaGcxPtoT2xPIxLbA2desNRiW3133idnyiFbKJslnrT vNUbBqPDo2l7S1Fb2BY9F7a5+mf3/SLtOa5+pqufue+XZAdrvxXtLge7S8pdPusuY9zljsQvwkuJ X2J5SCWecVwZ3kg86+qrwgPuPt+d9yR+U7/7l9z9XndPufsSd++MWhJZZ3RYk0k+sc7aO8OLifVe 61IRNzgjbW0vW9vLzvyW2pl19nxn3+zsA5zd5uyvqaMrvONq75gcHVH7fUmrnaea/7HqPb7xbJV8 fLit8eLav+2MjmhcFSY2vhDmN26OzmjcaR4dpX8+ITyd+IXquzw60Q7WuFO7eTSVWFefRbOqdMbV 99hRj0p9875Kndo3k6bsLE6U7ar+S4Oh2vB3UTIsjIahCc1owXCkat/ORhqtGImMyf4D+HTIRmdg cpgaTcENuBE34WZMxS24FbdhWngmWhqeitrDUw2N+p8EkhiGJjSjBcORwgi04gNQJxv2w/6QSxrk kga5pEEuaZBLGuSSBrmjQe5okDsa5I4GuaNB7miQOxrkjoajcDTOCZ0N5+LLENsNYrthEq7GNbgW 1+F6TMYU3IAbcRNuxh3hxYYZuBN3YSZmYTbuDi82nhimNp6Kz+Fc1psaso23sMzy8GVWqfCzQT72 BEtU3v3NR88H9z6b2BVGJd7em0/s3tuZGNq7KLFnby7x271LE++EEYm9Xg97K8lhe59NNoVRyea9 +WTL3s7k8L2Lkqm9ueSIvUuT6TAi2er1kc6bEBYmJ+JS/BiX4XJcgStxFSbhalwDvW1Sb5vU2yb1 tkm9bVJvm9TbJvW2Sb1tUm+b1Nsm9bZJvW1Sb5vU2yb1tkm9bVJvm9TbJpfg30NncinasQy/wC+x HCvwDFbiWazCc1gXpiY7sR6vowsbkMNG/Aq/xibkw9Rhe8LCpgT4b9Ow0Na0n+P+GI3jcBJO0Rd8 0vG20Nk0G3M8t8+mhzy2nyb7abKfJvtpetxrT+BJ/Aw/x1Kvt2MZfgFrb7L2ppc8fhmvePwqsliL LmwILzb9yt+K6EWMfgxgB3ZiV+hsHokMPoAP4qDwYvPBOAQfxqE4VZ/ySfwgTG3+Ia7FdZiBBzA/ PNXc5rgrTG05OnS2fFyN+4TjiY5fxJc8/vvwYsu3/X0cLgB/bJnj9XvwE8xFG/aEF4dHoXP4Bx3F 13BxNVyNHq4+p76NC3ERLsb3MQHiPSXeU+I9Jd5T4j0l3lO3Yxqm4w5Yb+pO3IWZmIXZuBtzcA9+ grm4F/fhfthjah7m46d4EAvC1BF/E7IjzsIXcDbsdcSXcA7OxZVh/oirMAlX4xpci+twPSZjCm7A jbgJN2MqbsGtuA23Yxqm4w7cibswE7MwG3djDu4J89MfD1NHDg/zR6YwIsyPkrL/EzJ/MfG6WrZB HZsVXSF/XomrMAlXY7dcOoQ9+C3ekauOCbH5OTY/x+bn2Pwcm59j83Nsfo7Nz7H5OTY/x+bn2Pwc m59j83Nsfo7Nz7H5OTY/x+bn2Pwcm59j83Nsfo7Nz7H5OTY/x+bn2Pwcm59j83Nsfo7Nz7H5OTY/ x+bn2Pwcm59j83Nsfo5rvwfWsDrkzawVM2vFzFoxs1bMrBVz6EPm0IfMnXlzZ97cmW9cELaqaAtV slLjYNjeuCtsr3+zaaW5c61q1BHyKthCM1ybGa7NDNdmhquY4SpmuNr8lDU/Zc1PWTNTbGaKzUyx mSk2M8VmptiM1GYOajOntJlJ2swQbWaI2IxQ+wXR2BxQMQdUmo8L+eaP138NtPZLoLVePqvPzuqt s3rhrB44q/+N9b+x/jfW/8b631j/G+t/Y/1vrP+N9b+x/jfW/8b631j/G+t/Y/1vrP+N9b+xfrWi X63oV2M9au0XOvP60FgPWtF3xvrNWL9ZGT4q5PWYD+kxH9JT5vWU+fSksDV9Na4JW1tHhe2tB+BA HI6P4jqvP1j/103bwkJ1XY+ZaI9OSSyLvp1YER2ZeCY6hL6vJJ6NDkisio5OZKOzaH1Wfa5fF51p ts8k1kcn071S+xRbn7PVq29Ex+sXzqp/hl37PkNZ1/LuZ9knu9PKsNT5S+v3fMLfro4S7neM1zpr Z0YjGs6JUg3n4sv4Cv4W46OTTW8p01ttckuZ0lLDa//X1aT1HCY6PlP/TWT10BrefeUw1bLo1WNU yzbVsrPeD5rG3fkNnVA5OrP+mWLt3JOtofb/QyhY8bu/n1z/VelaT1T77yb1358bG15LTKDNSj70 2SjjvWPDOs82OfuXesFnwk7Ptnp2kfc9E3Z7ti46Okq6+jA0oRktGP4/qfsS8CqKrO1TVd1VnXu7 b0IIJGEJ+6aiElFGEHeZGZdxHJdxQBEVxAUHh01AEHVEQFEWFVBQQVA/BdFREWXVQRFcWGURCUsC hGBYAiQsgdT3Vt1LCEuABOT//r5PdVdXnzp1uurUW3Wqu89FCCGEEXyEACGCEm+nCqK1/k60ReiE Wpyul4PTWnBa5HSjdKc7Qg+ExxF6IvRC6I3wBEIfhL4ITyL0o3TY8umw2dNhs6fDRk+HjZ4Omzwd 9nc6bO902NuQxco6DXO66airmXq9mI1e9JX+BSVOx+x2G+69G50LnaiAq3lGF3DvSZTIFlF1tpjq xd5L6yBagyrqqflc46lZdLLfdP0gemB+O4IaiZEI03QOWro2ZjKfOJfSOU5zqofaakMR5IignAvQ mt3QAjP1NpT0gy0pQAm/oYQF4i6UfzdmoO1wvBfHbihlkV6NOXIu5scHrP4sJxe5QiTNv7GAOhWU qaBMBWUeKPKpMmUBRTGHoo1R7322xB44AifQ6i4QdyX47Qbq5iNHnuFpZsRuoi6ADV8AG74ANnIB bOQC2MgFsJELYPsWoMzbca93gks3tNwC5DLczIpp8hFl3gX+7RAeJWbLXoiaX4T0xShvCep5KTRn GWbmyyl8SuWGY+Vmgls87qIQHDPBMRcc88BRxlbfXDt+RECdJ+60cmRAjgzRxbZxHUishPHcHJWl ADnDkKUQuY2FkkfnUxY1ow0IGxH2UX3aj1CIcADhINUH53bWWroL/exuul20w/FeHB+FJdMFnHvo OaIPWnIENH0keixmPaijurZtluhPbGk/6xXoc0mwcg5AR9KhI+kOeDtFCJrqu4nUTLVGaIPQluqr kQgTENbhfD1CJgLkVNuRthvHAsgWB8kKIFFjSNMY95oUax2MrugBpo1XQGeMps2G/LNRM9mgTkLt ZCNHEnKkgzoOcm5FzeyCrHmQda+pV5trgdVPtBF0uQ76bgH0uY7oDiTMpOTofB36mo3WMd9p5eg5 9p98TJtlgCqElHzIcchDXOztGNEVOvI4+v9m6EMO6l/GfNpnIw+wDXewCSFHZ1AqtYckHRAeQOhq /8GgAPIsgCwLQJ1kqbNQorXicC0HiGjXXTEutqQ0N0Fnu7kIW3W27ITwKMI/ETojdEfoAb6R2P8i GE+cGeCcIbrijrrjTjPRbll6C+50X/RO9R5IXYhS5lvbOxny5UG+PMiXV9xLWoNTW4SukK072iUT ObMgu7Gjo9amubt15j+QIF8e5MuDfHmQLw/y5UG+PGmeqTQmWO7UAeEBhN44fwKhD0JfhCfBOfqv SY2AUZGYH3qDOFcBo0ailqeglr+BXk6DXl4GvWwlPoC+ZkKyLNyblQbjVDbabLPOgE42g042c1rq lc5b1NgZizCOGrsJ1Mpdh2MujlsRdlBj2cg8+0ToRK3kowj/ROiMYOTzYm1kdMaN6Yxr22qT1Yg8 u/owEXK/G6NKjVGlQu48UKZb2Uz7S9Gp6D2xV2+HrZfhKL0dtlyG07BoHmTuVLQOqQVIKXAa6vPA tVPRClGAlipE7gPgdFBnOq7e54R0oYP5CCgzQdnE5p2MqyuRshLc8m3eBWI/cMLkPQht0MgTR8rm 9WGDRXBsqNMoEZTzUEohrNI8SJYrzFvhhSj1gN6PnIuRswClFsIazYPEuQ5mReCyDxLsB6fF4AR5 i9ajpTrBjo1yyQeXQnApMjLbsqO585G7ELmLrOxRGVyqjJydIEOm2IM624vjPtQfZsmxO18pDqJP F+mN4LQPsmQ6klLBLRPcCpw4jPLRGsH9U5wT6I3gvA8yvWhGzaJMcDR1kC2KMOYoe//ZToB4Q02W 4iPbIvstVbRV4iyVaZklqN2j2gvziVg7IfdJ2sfS2nYB7UnagxJOtx3IL2v9Q4vPcL1Dx0upb3vl uPVMESeJPKcSuKZQyKmCUBV5qiF/dcQxW3Vq4FptxOsi1MO1+rjWwMwqncrgURVXa+JYz9SBk4Qz 2AxOMmiq2Kt5llca0msgXgvxupY6z/AhaalTbKn5lqK2LSWfEiGXi6u5TmWkJCOkUBrkiwdlLnim QT7wRaiB85q4XguhNtLrgqYe0uoj3gBlRMAlG7KaO3SdVJRehUSMi8mdDfnNHbpOHVyri2vR3C4l QIYQcm+1d5oCvlVAVRW1Vw3p0fJD4LDV1kBtXK+LtHq4Xh/ppmzcBfhXwtXKeoeTbO4VGmdlQFtW Q7nVkZYGmhpIqwmaWqYOQGNlAU190DQA0pl2irf1mkJJsXYqhBxJkCMCOeJt3dbGebSdCiFDEmSI mFaxtefGcu0+Qnpz39Ecu4ulji+vTqDX/ozYUXqB3l6DgrLqBnLVQS8tRT9wlVPFM6Uj4FYJKeXU E+T2qcLp6gq4VDZ3dGb0BS0xwbZjuXTG3lFQVr1BmXsxmy0oWgwsbAzEcYBqTcT+ollAtariQNEc oM+loqioEKiW4LhFi4GNjYFGDlCtiRNXNAuoVtUJF80BMl3qBEWFQDX0waJfUCNVUCMBaiRwUorm oUYqOVWKNkGquqgVB7XCnTTQ1QBdTdDUQqgNujqgqwu6eqCrD7oG0Jo4WGrxsLFaCfMvQnPsrD4J s9w0zCrSzbo9Znup9p+MprG21IK1o1bsXnqB3Yfj/chl/nfoDv2t+DtmQ3fqMfbf8RqdgOpbS3Xo H5fGFJ99XHzGWQALuDERNacr6BzY3FfRhXQD3UpN6A76O1L/gXnbZfQgDabr6SX6gDrTNJqFs6/w G0bf03IaTithc7xF2SyePmRVWVVaztJYY1rBbmQ3IfVmdhvlsNbsLtrO7mH30E52L2tPu1gn9k/a w7qzUbSfvY5fGhuDXw32Jn412fvsA1aLfcUWsjr8Qp7OLuJNeTN2CW/Om7Pm/HJ+BWvBr+HXspa8 FW/FruB/4jewK/lN/CZ2Lb+F38qu43fwO9mfeBveht3A7+H3sBt5e96B3cQ78o7sZv4Q/yf7K+/C e7A7eE8+gLXhg/iL7BE+hI9gj/FR/DXWk0/g/2G9+af8WzaQf8eXs9F8Jc9iE/lm/hubyrfzHWw6 38n3sJl8Hy9kc7gWxOYKLgSbJ5QI2PciXiSyxSJJJLFlorKowpaLWqI2+1XUFfVYhmggGrG14jzR mGWKC8QFbINoItLZRtFUXMKyRXPRgm0RLcXlLFdcKa5k28TV4mq2XVwrrmU7xE3iZpYnbhN3st2i tbif7ROdxKMouot4nLuij+jDw+JJ8ST3xQgxkgdispjM48Vn4jOeIKaKqbyC+FLM4YligVjBq4tM 8RtvIAqE5k0c14nwFk6S05Bf57R0WvLWTjdnAG/jPO9M4Z2dL5xZfLTzk7OQv+0scTbyd5zNjuZf uiE3xBe7vuvzJW6Cm8iXukvdX/hyd7W7jme4WW4Wz3Q3uZt4lrvZzeEb3N/cHXyTu9PdyXPdfHcP 3+ruc/fxHW6hW8jz3IPS5TulkhFeKBNkghAyUVYSjkyRacKTteRFIl5eLC8WtWUz+UdRR94sbxdN 5d3yGdFCPiufE/fKQfIF0V4OkUNERzlMDhcPylflq+JhOVKOEY/IsXKs+JccL8eLLvId+Y7oKifK T0U3+bmcIfrK2fK/4lk5V84VA+V8uUgMkkvlMjFMrpArxStylVwlRsg1cq0YKbPlFvGazJMHxBuK FBfvK6Vqikmqvmoq5qrmqqVYpq5UV4pf1DXqj2KVul79RaxVt6hbxAZ1m7pNbFR3qL+LTaq1ukds Vver9mKbekg9JHaoR1RPkad6qyeFVk+ppx1HPadecKQaokY5vnpdve5UVmPUGCdZvaneclLUeDXB qaImqulONTVHzXcaq8Vqp9NU7QbI3eHV9+o793kNvXOc+73zvQucB7ymXlPnQe9Sr7nzkHeZ19J5 xPuTd73zqHejd6PzmPcX72bnX96t3u1OV+8f3j+cHt79Xkfnca+z9y+nj9fb6+308/p6fZ2nvKe8 Z5ynvQHeIOdZ7wVvsDPAG+INcQZ5w73hzvPeCG+084L3nvc/zjBvojfRedmb7E12XvF2erucV718 L98Z6e319jqj4gBmzmtxTpzjjI5TccoZE4fNeSMuPi7BeTOuYlwlZ2xcalyqMz6ualw1Z0JcWlya 827o1lBr571Qu1A756NQ+1B75+PQg6GHnP+EHgk94nwaejT0T+ez0GOhx5zPQz1CPZypod6h3s4X oT6hfs6XoQGhSc7M0FeheU5WaFlotZMbWhPa6OwO7QtXcQ6E64SHumnh4eFx7uDw5+FZ7pjwwvBO 9x1f+SnufP9c/zr3V/9O/0G3wH/Ef0wqv4vfTQZ+D7+nTPB7+71lRb+P318m+QP9l2SaP9QfKuv5 w/1XZH1/hD9WNvLf9t+WTf0J/iR5sf+R/5m83J/qT5fX+jP9mfLP/mx/trze/9qfJ2/wf/SXyFv9 n/2fZWt/ub9StvFX+WtlW3+9v0O293f5e2U3f79/QPb2iwKSfQMecPlU4ARSPh3EBYF8NkgIKstB QUqQIocGVYJqcliQFtSVrwT1g/pydNAv6CfHBE8H/eUbwcDgRfl2MCx4Wf5P8GowQk4MXgtekx8G o4PRcnLwRjBOfhSMD96Tn0V4JCK/jCRGkuXcSNVIdfljZE9kv1xIPO4ZjCgUnpYwgxpQDTojm16j 11JjWFakFx/3eqF+SU/Gr0D3xNk9uoOepKcglmmvZups7NfHaAuOyW2uZus8/A5fSzqGajvCsyeV dCDCf0qcrwT3SqaEUreQ3m+k07sQN+/I/pHq4zyjmMPm4ljmccpbrFfrHP0Dfpl6B2brp7slg+dY yzlL5+r5h0rXuceUnGtrLVdnoPbvpaqosUZG8tjVwpMVpPP1Nr1Tb9Ybi5MqInWbvfYZWi9ef47Y huPmBZXeitILdA6ZWkujOnRlVHpcWa6XQ1vWmlgpZb+px5i71N0R/qKv1k/rAYitLb7+W8m7PCpv Iep6Dcr+Wn+Lu89DS7mxK78cRTn3pHWwm2KapofafZ7eDu4xLSxRM4fo81FjO/VevQx019u7bYGa j0mpt+gt2OfEaPcek3s76myT0ZFYvyigKva4tPS7LUXujCPOHikRn3FqHLCdf7hEtNhScvWyk5Rq euCW2Mk51PSEtO/q142eGB0q+6Y3mjuEdq0+5sr6k+bdgfBvG5t0dAsadDpJ7iyEaRaRVh3u+ae6 Qavz7X7pcS7GnxKHnQjrylpuLO9XseOUcuR9w+7nmvs/w1vzk5a9Odqueh+wdFsZuZ+4Vpsh3G7L WB/dR3+xq8cbHRvhVwO/RkdI+K7dL4z+TpC7yXFzb7L7rXo3sGt3aaLimkG1LfpX0w9NniiGR8c8 oN03+nv9Xam5S4yqehDVAiLfRDcj/r5NWYpxaoZeWWruEuOWHo5xIJWug+WJHmRTfkVf+OYwOpdW thlBoUcmd1NYrbF0/aWeijG2VFw6jPWxLR711xrpvezVmfoL/ZWeFaPdekzuEiM7airejkNmVLnR pnyD0qfpaaWWXcq8oMjMCH7Q/9C36Ef07THaY5BMD0K9ztM/6bVH4AyntvRvWOgEe32I+eqEJpFP k2kqNaTpsN3Tre1+Cc2B7d6MfoHtfgOsdEZ3snasHXWF9fw36mbsZuphLGZ6nD/MH6VesH1XUl/+ K19DT/JMnkXPwA7eTM/yLfw36m+sYRrAC/geGsQLeSG9YKxhGmysYXoJ1nCYhgrjk+hVcZe4m0aI duJeGuV87nxOr8OO1DTaTXQTab6cIqfQ93KmnEU/yF/lavpJaqlpobGfaJGxn2iZ+qu6hVYZ+4lW G/uJMoz9RGuN/UQbjf1E2cZ+os3GfqICYz9RobGf6CDsp2FMqJfVKCaNFcV8Y0WxwFhRLGKsKJZg rCiWaKwoVsdYUewcY0WxGz3huexOz/NCrI3nexHW1qvgVWT3epW8ZNbeq+JVYx29NK8me9ir49Vj j3qXe1ewx2A5dWBdYCENZN1hIb3AHjc2EOtpbBHWy9girHf4ifBQ9qSxMNgrfoKfwr7wJ/mT2Nd+ lr+D/dfM8dkiM8dny80cn/1i5vhstZnjswwzx2frzByfbTRzfJZr5vhsq5njsx1mjs/2mPk722vm 72yfmb+zokhcJMxFpFIkmcvI3sh+Hge9WWb1hlm94dCbEZjJj6TXMb8ZTROQ8g5+it6lD8ijidAq abVKQqtmUBzNhG6FrG6FoFvzkf49/UxhcF2GvMvxC6BtqylCGZSJPpYFzatJ2ZSHXrMTv1q0i/ZQ bdqLXx3aRwepLhVBLytYvaxm9VJYvfStXvrQy06UwB+FdvpWOxOhnRlUma+BjlaEjmZSMs+Cpla1 mlrFamqy1dRKVlNTraZW5JprqigI+poEfeXYY6NK0FqFOJqdUkQcNDjJanAVaPBdVE/cDT2uDz1u h/i90Ob6VpurQZsziDlrnI3EnU1ONklns7ONws52ZzdVd/KdAop39jgHKM05CL2va/W+ptX7albv q1m9r2b1vhr0/hpKUteqaymsrlPXkaNaoSe46AnXI+UGdQNSblQ3klI3qZvIU39BD6mNHvJX5L0F /STO9pMw+skdFKi/o7dE0FvaUE11l7qb4lVb1ZbqqnvQfyrY/lPB9h+G/vMIcnVSj4HmX6oLUrqq rsRVN9UdpfRQPcD5cfSxMPrYE8jVR/VBel/VF/RPotcFttcx9LoBoBmoBqHc59ED49EDhyBlqBqK XMPUMNC8rEYgZaQaCUlGqVFIQc+kkOmZZHrmm8j1lnoL6ePVePCZoCaAcqKaiJRJajLyfqQ+Qj18 rD5DzUxRX0LOaWoa6mS6mg6p5qhvIe1cNR88FyvopFqmoI1qhVoFbr+qtVRDrVNZqJMNajPKylFb qJb6TeWiJreqbVRHbVfbUeIOtRMy71a7QZmv8nG1QBUgfY/aA0n2qn3gv1/tB+dCVQjOB9QBqqgO qoMovUgVIa9WmsIGR6iawRHsgSPYA0ewB45gDxzBHjiCPXAEe+AI9sARYsCRAdgP9AYSN2hCjkET YgZNyAea9MG+b6gfJRhMIQFMWU5+eEV4JQXhX8I7KcHgCwmDL5QCfMmiiv4GfwMl+Rv9jRT4m/xN VNnP9rNxdbO/mZL9HD+Hqvpb/K2Ib/O3gX67vx00O/wdoNnl70J8t59PqX6BXwCaPf5e0Oz39+Nq oX+Awn6Rryk5QPeniga5sHcCB3s3kJQI/ApRpSAchEHjBwFVBZZVREpSUJlSDaJRZSBaFeyrBtVA kxbUoKSgZlATHGoFtRGvE9QBfd2gLuLAO6QD75DyRvAm+L8VjEWuccE4cB4fTADPd4L3qJJBQLII SAkGASkBKPVhDAGH4ieKEXAU4qOBfcJinwvkm4T4ZPoC+y9pmkXArxD/L3BP0LfAPgHsWwasXE4r EF+Jn7LYJyz2JVnsq2SxL85iX2WLfckW+1Is9qVa7AuzeBZPPmvNWmPfiQHpWGfWBfturBv2z7Pn gX238FuIW2T0gIztsTfIGLLI6FlkDCwaVuS53PxvhEHAChYBE/lBfpAiFvvihSMcqgDU8xAPiRAl iNaiNVUVbUQbqm5Rr5pFvTTRVrRF+j3iHqQbBKxmETBN3CfupyrFCJhNAti3mxRQ7wDFWbxLtXhX yayKon9era4mYXFNAdFuwN5gmbBY5losS1Y3q5uRYrBMqFvVrdjfpm4HpUGxShbF4iyKpQLF2qFv 36fuw/5+dT8oO6gO2HdUHbE3iKYsosXFEK2b6oaU7kA012KZUr1UL4tovUFvEE0B0fohHsWyZ9S/ ETeIpiyiCYtocWqwGoxcL6qXkGLQTVl0C8fQbbgaTsJinLIYl2rRTag3gGsihmtj1VjEx6lxJNXb 6m1QGqQTFulSSyCdsEingHTTEDfoptQM9TXic9Qi7A26KaDbKsQNriVZXKtkcS3O4lpli2vJFtdS LK6lWlwLq11qF3IZdKtk0S3ZoltqDN0OAMWERbGwxzxGIopHoZ6hXuSFngg9gX3fUF8KhfoBfUKh p0NPI6V/qD95Fol4eHj4NeIWUyr6W4Em8X6eDzy1CBJvsaMisGMP4nv9fRQBahShJxvUSAhEICgC vFAUWLyoYPGiIpAiEXGDFIlBcpAMGoMRFYPqQXWk1wBGJAIjaoGDwYgKFiPiLUYkWIyoAIx4Azzf Ct5CrvHBeNBPADpUsOjAiTe+06xmNtl/2bOwSG4rbR7/f3nTO3WmCTaed+TKTTFNgd54wjXK0nib Fdk1CPPt2ZpDacZ6sauDhWaFLLpeBCnyjlzBLN0ejF1fEjs+UHbJztSm2+gx9rjzlKgz9QJj7Z3q OlqpfHKPjJt11uK1sp2w+jJ1hqlNvaKY6nDrxVaubZ0bbwBpFG+obdoxa9+/6xaKSVKy1Hi63Kat O7r19bZj17ugPT/p+XpPeXTz5JteFDtmxTR5R4lruw5Jb6U4Tnvq1cfvS2dEsjJz1mP1SHss0Iug GQsRJutX9JJYuxfLb1cWF0GH5pWrv+dSiacQ0ecmJa4O1juAI7mxGt1sJCmR+ZA25J9COXvpuE87 TndDSx6WfjfqahuCWTXacwTVlmNz/l/bite8ck5NV04XkU7I+3irzaVTz9VT9Df6Y4NTiEdXNpfG 1ihziqk2Hca2MvD+1axfxrBvi30ClAcEMU9FJkf543wOjt+ZgPgR65l6Ihl8Sj90V0DdpUCpK6iW XhF9EqCz9AJ7fOnQCt/pbSWfbkWfHukPi8/f0A/rQbqdno34XcWpV+tO+ks70hxV68dDKdzBND0b Ol7q2mk55d5pkSYmvZHE1njJUSuv5Mq4XnVCbvPOrHRl2YBGsedvuttRV77R/YvjxSMYNMLgxQaM rCe8p1JKM4hp2sLWjdXPLbF6wl53t+Uo+zz46JE6yb6lVZKXmQGswZgVMpxic4N9sWt5J6vzU5D1 MFKWeAp2CBuj8xFgfLYt6wjNs/0t+5jxPbe8z5XKu0VnpSXOS539lHyCWSJ1+pmVpwTn28tAbJ/z 6IGxZ4oF6NGbzBNC/bGeGH1SeMT4nhfTss/1J+WQawbmBVNj8XnAaPs81/RPowOYY2TGnqkUWGRd GZtdRFE0OIrXbIs9UyzOz44+A9HfH0FxsOwSxnIuoRJP22PIucRi0GwbBxZa3Pw6qgXRJ5LR3hG7 cp2+1p7N1A+gJh9GeEa/iOOnNvWbI0r7FLXeTf+tHHJ21mMMduP+1yPWBrGnYSGM0R9gDByqb9HD jcWAVGMzfKTHR/uM7mgzJx16nhrjtRS9HTN/amjjUSsrNvsyT/Xs+yNGP8rxDojVmuIn29GxOBbP oJjtc9iOoyPnZjWPfu/h999KziHNMzm91Yz6J8xx1Pz+7GxHPNe0T9b11hPPxGwtn10rjUrWJ/Rn r51H5Z/YPrAYUw45S3/+XAYeZ7V+9Jv6Wf2S7mHjmbBG39Wvxa7k6p/tcSuQeOvhmVu5Srlav3ma cv4K22tBbCVmg16ufyzxDpmdV8PiWah3Fb8/UL5STrJmc8K8WWbujWMRwo+Yn8dGA/u+gXm3x874 S3tn6+xtQO122vg0TrFnj+O8KywVazmbGtCFeqoepptjDFkADB9bvpbTo+yhzmlJGm3XObGzmBUb XQmgEtbU6W9leK+rNA47bA0aHM7BfPWYVsb1VcbqO9O2Slk3zKxyIEXUHt0CPd1R4podZaDHP6KH fX/c7Gdtg5wTS767Alya8/9OmuNtuoO+yyCksWewfwnnH+ufbDxm8UEPpuq/6sFk7K915dOxs90O 0I59Z7fEsm2HUF//duz7o2Xg8ruugcVmlLkYs7af3jpfedcOzPOJU6T8yL5tfPRbYmXdap1m/lPe MMafxlqfHnbmJCmlhBi+622n0/JncmwrtYwMvf9sr1mUfdNfWJvhdOujwRkR5nfbTvfLBow05Xha Y9eSi1e/7DvCh/pWqPReZufIdag1qXKUmFse1Datf9hei60Fntrb4759R/n/hy21PJnMGn45ci0p ObKY7zgwThX8Pk8hf48N89fdJx+x9IFycF5anjf07cw/54izQ3UZd4JcRoNT6Qbo6FnejDVaHM+x dsD6EyOQXQ8/y+s2JaU8LT7rY+HbYy41in1LkFTiu4OycF6Ielt4qBQTs+HQtxCHymthSzpCnhJn Aw5zi4V3o8cSm/nmoYk56mnR9zXKKOe7yPduLG5jdu17WuweDknQ5Cg53y17ScV51x3/S8aT5Pql 5J0bDsc+fSl1K9dKA1pp08mpjsmVE+vv9pm/fR506H2K0Am+QDH3kUpXlae/600nWwE+bq5VsRB9 qmFWt7dR7OnGCXJFV0tTj+x/eqXebL/2bETVcLTPRjH62FmH1aZ/lF2+E8r+td0X2/y6t26nx+mR 9unw4T7TRr9tj4XHvndxnC8E8/TW32c1374REn1WtRJznKWwTldifl38ZYx9YmNW8q/Ud9jz73UX UD2s5+GOpurHYuuaRzzTsuNIB/2XckjTCVxvjsVtzH43PFJP0V/pV/U9+hurEan2yfaSQxaVftSk UT3zdEh31Z1tWgHqfK0ei3uZoj/W78ee4ByxhmXHhiH65XLIOUHPLV7Nm6vHYf9BbD6SpT/RLyNt R4w0roTlH0XAumUv72xvZ+OJjNWq6PsKx+j7WSg9o1zP43KoxApMTPtOzqcCQiK1svG6mNfXodrm /tGzzD/8/IEaAo8yEbLR+7LRc24ETsTriyx9uLi0vrpVLBp98vxN8fecKvr2S4zui1JkjyLeSOC9 HXF0P32L/hdCf6qtW1iSGL7bL7Bb6qt1R303YjNNgHxj9Qd6vn33JlpaTapPERztt+XQ+IknrYdj Zfo4GmJn03BPJZ5jxN6uScdMswaZ/+I79B35rBI0lYt2al9fozcAl2brzuAxSr+E+5qmXyxZK3To e+5novhQRjl7QV+i3wi7iHXWD+kXrQ6ttG98BlHML2EJ2S/Po28GnPI84MgStxz7TeMp5MqL9V1r 4dpnN7tI2kvxJxjfTY5Uugztz+nbk/gdah3zO/QM/ZlxVonaW59CPa1PoYHWp9DzrDW7m4ayh9hD 9Ir1JvQq686ep1FsMBtJk41PIZpmfArRdONTiGYYn0I0k33NFtJsfiFvQgt4U34JLTI+hWgpv4Jf QT8bn0K0jP+Z30AreBfelVbxnrwXreZD+cu0hk/gEyiTv8cnUxb/nE+l3/iX/EvaymfwWbSNf8O/ pTw+n8+nXfwnvoB280V8MRXwpXwp7eXL+XLaJ3wR0H6RIBLpgPELRNr6BSLrF8gVdUVdpqxfIM/6 AgqLS8QlLLC+gCLWF1CC9QWUaL0AVRStRRuWJNqKe1hl8+0FSzG+elgV46uHne9MdWax1sZXD7vP +OdhHYx/HvaAm+BWYB3dJDeVPWS89LDOxksP62G89LAnjJce1sd46WF9jZce1s946WH93Xy3kD1n PPOwF41nHjbCeOZhbxrPPOwt45mHjTeeedgHxjMPm2k887BZxjMPW2g887DlxjMPO2A88zBtPPNw bjzzcGE883DXeObhUo6V47lvfPLwBOOTh1cwPnl4FeOTh9cyPnl4PeOTh9eXS+VKfr7xxsObGm88 /GKZLX/jzYw3Hn6Z8cbD/2S88fAbjDce3sF44+HdzNcYvKfHPc57edJTvLcX9sK8jxfvJfC+XpKX xPt5KV4qf8qr7lXnz3i1vNr838Z/Du9v/Ofw54z/HD7Ia+I14S8YLzp8sPGiw180XnT4EO8q7yo+ zPjS4cONLx3+qvGlw0cYXzp8lPGlw0d7D3gd+RjjS4e/6XXzuvFxxqMOf9t41OHjjUcdPsEb5A3i 73mDvcH8f7wh3lD+vvGowycajzp8kvGowz8xHnX4Z8aXDp9ifOnwqcaXDv/C+NLhXxpfOny68aXD ZxhfOnym8aXDZxlfOvyruNS4anyO8aLDvzNedPg840WHLzJecfhi4xWH7zFecQQZrzjCM15xREL4 tvD9It18ySGuNl5xxPW+8uPFrcYfjrjLb+M/KB43/nBEf+MPR7xg/OGIl4w/HDHM+MMRw40/HDHG +MMR440/HDHB+MMR7xl/OOITf4I/UXxq/OGI6cYfjvja+MMRc40/HPGd8Ycj5hl/OGKR8YcjVhh/ OGKl8YcjfvXX+5livfFmI7KMNxuxwXizETnGm43YbrzZiJ3Gm43YHeERT+RH/EhEHIgkRpKENh5s HB7ZE9njuPEUzxxJnH0NhIoAieIpgRjG1gokMLomIzWFqgJ5q1E9pNfHT1EDOpc8Og+IFoccLTD2 XUYtMaZeDnTzLbr5Ft0CoNsdyPV3/OKBcXeDd1u6Hznax/CuC8rpil9L6kY9qSL1wi+JetOTVIn6 AQ0rAw19SmYBi1CK/ToslSUAH6sAHxsgpSFrSI1ZI3YO0s9l5yJ+HnAz2eLm+cDNm7H/K9DzSuuR LZndDQy9wGLoBRZDLwSG9kF6XzaAmrCBbCB4DgKqpgJVh1A6G8pepYvYCCDs+RZhz7cIe75F2MZA 2PcR/wA42xg4+y1dy+ayudSMfcd+oD+wH4G8l1rk5UDepthfDPyVFn8jFn+5xd+Ixd9Ei7+XW/w9 z+JvU4u/VYG/71Ma/4B/QNX4RP4h1eSTgci1LCLXsohcA4g8A/uZwOXqFpfrWFyuBlz+CfsFQOca QOdF2C8GRle3GF3dYnRtYLRPdUUApK5nkbqBRer6QOoUaiRSRSqdI6qIKnSFQW3EgdrUEKjdAPuG ohFyAbvpXIPdyNVcNMe+hWiBqy1FS+wvF5eDBjiOPXAcKeY7u6vtd3bX2G/rrrbf1l1jv6e7Cpje j5o7TzkDiAHZh1LgDHNG0MXOSGcUVXBec96kS5y3nHFUyXnb+ZCSncnOFEoB+k+lC4y/NmpixgD6 gxkDKGTGAOwT3AS6zK3gVqDzzUhAF2Ak+JmEu8xdRjXc5e5yCtwV7gpy3JXuL+RihFiNlAw3Aylr 3DWk3LXuWvLcde46qmhGDgqbkQM0m93NFO/muDmUgPHjN2JurrsVZW1zt1MFd4e7gyqZEQVl5bv5 VNktcAvoUnePuwdS7XX3QpJ97j7E97v7ES90C6m5e9A9CM5FklMFKaRDzaUrXWIYhxQBxqVHYRkn QxTIsAyTkL70qbIMZECXyoiMgAZjFcVjrKqIvEmyEvKmyFTQV5FVKUFWk9XBOU2mIW8tWQv72rI2 ONSRdUBfV9YFfT3ZEPSNZCOqJM+R5yD9XHkuOfI8eR75srE8H/wvkBcg74XyQnBrIpuAJl2mI+9F 8iIKmXERZTWTzZD+B9kclC1kC3C4TF5JrrxKXgfKVrIVKflH+UfIfLO8Bff1N3k7+N8t26H0e+V9 KOV++QD4dJSPUAvZSXamy+RjshtK7C57UEv5uARuyF6yNyXJJ+QTkLaPfBL30k8+BT5Py6fB4Rn5 DDg8K58F//6yP64+J58Df4zNlGrGZmqMsXkYNZHD5XC60IzQlIwReiSujpKjKEW+JtH35Wg5mv4g x8gxqOexciz24+TbdIHxrAd6jOLgMFFOxH6ShGbKyXIy8n4kP6Yr5X/kf8D5E/kprn4uP0feqXIq 0r+Q00A5Xc4A5Wz5Fa5+Lf9L6WbsR/r8/6XsjOOaOs++f+ckOQl4oFQtIlJGKaUUlVJklKFFtI5a S6m1zjnnIwFCCDGchBBCCCE5CSGJljnLHGXOWWedc9YyxsN8rHPOOed4qR/nhzrHfKx1ztf6+Pg6 H8ecj/Wh7+++gszt/evt+Vy/XL3OnTsnJ+Hc3yuf5Kf4vzByRBxB/qH4IcacEn+LMWfEMziSj8SP cFRnxd/hOM+J51iq+Hvx92yBOCaO4V5gBYy/KF7EbJ+In2D8p+KnmOeaeB3j/1P8T4z/L/GvGHNH vIMz8Dfxbzieu+J9NovzBMsHTyQgT9Q9yp7TTdfNYLN1M3WzWIEuRZfGFuge12WwPNDG06xYl6N7 hi3T5ermsud183TzUJmve5Z9SZevy8cMz+mew8gCXQHGLNAtwN5CXSHqJboSPMpC3UKMXKRbhPoL uhfwKPw3pCpOLexZTi1QUAsU1AIFtUBBLVBQCxTUAgW1sBROLWw2pxYoqIWlcmpBDmphxZxa2CxO LRgPakEOasFeUAsU1MIKOLWwBaAWE8bX6+vZl8AuNpagt+ubMAYEg/uCYFAHwWCkolcwT0AfQB7U B1EHzeBIQDMY/039N9lz+q36rbgXmIblg2l6UXlbj3eXvk//XeQ/1P8Qj7VPv48t45SDym39bczw F/1fMAasw+Zz1mGz4/gHH2VxqjgVm8WJBxUQDxT/sfkgHqyPcUlxSawA3DODFcfNjJvJ8uMei3uM fYn7CbLn4lLjUllq3Jy4OcjT4tIwD6iIPQcqeoMlxq+OX83E+K/EfwX5mvg1yL8a/1Xka+PXsemc mVCJxO9hQvwP4g8gBzkhBzlhDMgJY/57mooJ04RpqayU8xMrjP0SlvMTEzg/QcFP0K9LX2dp0npp PfuC9C/Sv7BHpA3SBpYuVUlVLFMySAb2hFQtVTO1VCPVITdJJoyvl+oxxiyZMWajtBG5VWpkT0qy JGOMTbJjjENyYG+z5GSPg8laUXdLbtRBZlCv5IV2SD42R/JLCsuQAlIQIzulTowMSV14xKj0Jird 0hbMDHrDo/RIPdBvSdswpld6G8fcJ/Vhnu9I25F/V/ouxu+QdiD/nvQ9zLlT2om970jvsGxpl7SL 5XDmY0+D+fawXOkH0g/YYmmv9CPk+6X9GPOe9B72/lj6MXRA+gmbKw1Kg9j7r9IQ9v6bdIg9I30g HUblZ9LPUAEpQkGK0F9Kx1mW9CvpBMb8WjrJnpJ+I/0GI4elYTzKKem3qJyRRjEnOBLzn5POQX8v jWHMeenfsfeCdAHzfCxdRP6J9Al7Dnz5R8x2WbrMsjllssdBmUE2J6EzIcSeSOhKwFkCcUbZ3IRN CThXCd0J3Sw94RsJ30DlrYQelpvwrYRvscWcRFEBibK5nETZdE6iTOAkCgWJMiJRNp2TKHsWTDSP SPRFIlGBGDRGnDHWnPYQWSawr2FLIKb8MjHlSw8x5cvElDOJKR8jpkwmpkx5yPVAS64HIrkeaMn1 QDvp+MJdD7TkeqAl14N4cj3QkuuBllwPtOR6IJHrgZZcDyRyPdCS68Eycj0oJ9eDJHI9WE6uByvI 9eAVcj2oINeDWWDcaSDOBFUC0e1s0C02VkiMWwTGfQ00ySn2NdVXVF9DnVPsl1QmlYl9EfzaAnWp PKxE5QXLfhEsG2ULQbGbkL+pehPjOct+ESz7NnsBFLuDlYJfh6A/Vf2ULVYdVP0Cezm/vkH8Wkb8 uoT4dSn4NZ9piF81RK6PELlqQK54hUCuL7MZwivg1xnkyxBzrEkkX4ZE8mWYTr4MiUS3rxLdPi9s EjazRdx1mK0kxk0jop0r/Fj4MXtGOASifZJY9ili2aeFD4UPQa6cYp8QRoVR1H8Hcn2CvB7mCH8Q PgbLfiJ8AuW+D7nkgpMjXBH+NyqfCp9CuRfO4+QHkSn8H+Emcu4KkSX8l3AbOfeGyBY+E+4j5w4R 6cKE8Dl7nHwiMtQqtYCcu0VkqbVqLXLuGZFBnhGZ6mnqaag8Am6eT8T8HBHzAiLmSvUcdRrqnJvn q58EN+eps8HN84mbn1XnqnORz1OjkwJDL2AFYOjnkReri9k89ZdA0vOJpPPVi0DS89WL1YsxPyfp +cTQrxNDryKGfp0YehXR84vg5l5w89tg5UeJlZOJlWcTKxdpDoKVvwRWPsEWan6tOcUWEzEvecjJ QktOFhI5WSSRk0UFMfRLxNCl5GpRTiRdTNysI2LWETEnECvriJWTtVe0V8DBV7WfosL5+DHi45ce 4uNk4uMU7bh2HMoJ+EUiYN1DBPwiEbAgiiBgHbGvjtg3hRj3RaJb3UNcm0Is+yJRrI4oNpko9kWQ 63zs/Tuzvki0Ok0sFAsxskgswkjOrC8SrcbYVEc8qiMG/TIx6EsPMejLxKAziUEfIwZNJgZNIdZM EbvFbpDrN8RvsEJizWLiyxKxV+xFnfNlKvFlqbhT3MmWElkWirtBliVElrOJLBeKe8X9bDH4sh8V zpSvEU0uFIfEIdyLM2UhMeVrYMpDuO8HIMvZRJZFRJYLxV+JJzDDr8VfY/xvxN9gPCfL2USWRUSW C4ksl4ij4ihm4HxZSnxZSHy5kPjyBeLLpcSXqeLH4sfYy8nyAVPeEG+hwsmyiMiymMjyNXFCnGAl xJQlxJQLwZSzkHOafIFoslT3hO4ptpiYcgkx5RvElGVEkKVEkG8QQS4hgpyte173PJQT5FIiyCW6 xbrFmJP7rUjkt6IlvxWJ/FYk8lvRPuQdtYL8VrTkt6LVrdKtwqNz1xUtua5I5LpSTq4rSeS6UkGu K7PIdWUWua5oyXVFS64rWnJdkch1Jekh1xWJXFf05LoikevKLHJd0ZLrikSuK9qHXFe05LoikeuK llxXksh1ZRa5rmjJdUUi15VZD7muaMl1RSLXlQpyXdGS64r2IdcVLbmuxJPrikSuK1pyXal4yHVF S64rErmuaMl1RSLXFS25rmjJdUUi1xUtua4sI9eVcnJdSSLXleXkurKCXFdeIdeVCnJdmUWuK1py XSkn15UV5LpS8ZDripZcV2aR64oWPQAoFsT/FCslvl+sf1r/NFsIys9hJfq5+rmsSD9PP58Vgvjz UM/X509yf6G+QL+ALSX6L9QX6YuhvAdYol+oX4h5yvRl0HL9S9Dl+lcwW4X+VYyp1FeiZ3gN/cBC /Vf1X0Wd9wMv6Kv0VTiSGn0Nxse8qXiHsAQdggWPEusQmvQOzNCsb8a9WvQtrEzfqm9FpUPvx/Hz PqGYeoPZ5GVVSB1CiX6LfguU9wlLqU8o0X9bj+sD9QmF1CEs1L+jfweVd/Xv4tF5t7CEuoU39D/S 78e9eM+wUP++/n2M+bF+AMr7h8X6cf04ZuD9Q7H+M/1n7AXqH16j/qGU+oeSOH2cnhVS/1AcFx8X jzwB/UNJ3KNxj2I87yKWUBdRRl3E0rjkuGT0GLPiUjByNnqJIuoiZsdlxGWwxegiVrNHqHN4BD3D WjYjfh06hxnx6+PXo1IbX8sWxVviLVBrvBUqx8tQe7wd6ox3QrnDTiI57CSSw850ctiZTg47ieSw k0gdiIZ6jFenzZmWyZ6ftmLa62zRNOM0D1s56QTGuw41Oo25TEO9xFzqJZ6R6qiXaJAsIF3ePzxB ncNcdA425HapCQTvklyo8J7hSaldakelQ/KD5nmf8BT1CXOpT3gGfcJmVN5Et/AMdQtPS9+Uvonx vE+YK31b6sXet9EnPI0+4TuYjfcJT1Gf8AR1CE9ShzBf+r70fei70rtQ3iEsoA6hUvoROoR8dAgH UH9f6mfPUoeQTx1CAXUIC9Ah/CsqQ9JP2TzpoHQQIz+QPkCd9wl50hH0CfOlo9JR7D2BDuFZ6g0W UG9QKY1IH2LvKek06rxDKJA+kj7CSN4bLJD+IJ1H/d/RGxSgN/gYs11Eh/A4dQjPSpekS3hc3ic8 R31CnvQnCaxFnke55KOWI12XbqDC/Y8ypJvSLeTcBSmLXJAyyAUpl1yQMsgFKZ181B6X/kf6Hyh3 RMqVPpdAYuSLlAlABomRO1I6eao9Th5JcxL0CXrk3Ckpi5yScslZLSchMeER1LlrUlbCjIQZqHDv pGzyTkpPSElIxV7uoJRLDkpZ5KCUTQ5KmQnYsJf7KGWRj1IG+ShlJlgSLOh/eEf0FDqiAEtDR4T3 Q0IkIcKeRkfUjTrvggqo/6lE//Nt5L0JfexZ6oIKErYnbEfO/ZiyyI9pDvkx5ZIfUzb5MWXF3NqY as7tNAW3knoz+4QxwzqEAWFCWBEOhHvqVtW0F7e+yVoIsRmxFdGL2IHYjdiH6EcMIQ4jjiFOIk4h RhFjTAjKFMxwkUIIOhEe5FcQ1xG3EHcQ9xmrFhB6RGLssatnIlIRGQ/dZj/0//Nic1UXIIoRpYhl D92uQKxErJm8D79dj6hBmBE4rmrn1K0QVChUTQcQg8jDU7VYdCN6JnMPom8y3zkZeyZjP2IAcRBx BHF8cuwwjWfV/Jj5bRjRjeih44qNPU3jWHUfYidiD2I/YgBxcPLxziI/gjiO4GNPI3jt/OT+85Nx CTUeV/F8DiGOTj0XVn0DcRtxFzHBWI0GEY9Iip33mmRE2uRt5t9vp8bnxN4D/JbGJ8X+f2p/HqIQ UYIoQ5QjKv5+y1+/mlWItQ/dbkAYH7q1IOxTt0Lwauy4a1yx51bjnZwn+P8X9L5+OEKx4MfxD/Ot +qeIIrZM3kb/n3mEID+2bYjtsdemZhdi70O3BxCDmkerSuRyv9Nw0Xafq10g1UOv2BOh1+0zobfs qdA79gzofXu238nvpYxXC/Z5yr2qMrnC76kql1f5lWq9vYC0eCpPtJf6Fb43wKoq5LX+cPVM+zJ/ OJZP6ip5g7+7OtW+gnTlP+UZ9jXQbPt66Dx7DbTAbvZ383sFxKq1stHfU7VBtvj7qovtMrTU7oQu s3v8fbwekKqMst2/s3qFXYGutIcD06ssssu/p3qNvZu0h7QPut6+E1pj3wM12/dDZfsA1Gk/CPXI rkBKtWI/Ekivsste//7qsP24f3+VSw76B6q75WAgq8orR/0Hq3vsw9A++2noTjkayK3eQ/WdXKuC 8hb/kaqovM1/vHq//eyUDtjP+4/zeiB/UrfI2/3D1Qexl+ulqfyI/Sr0uP0GdNh+G3rafndKz9on AkXV55s0gUVV2+Rd/tPVl5ri/adptrOTlatNSdAbXHklsLRqu7zXf776Ns451xUPcl4PLK/aJR/w X6q+25Tsv8TzQGX1RFMa8r3yoP9qjaYpkzRnKo9vyoMmNRVCk5tKoGlNZdDMpnLKK6A58mBgddUB +ZD/RtWgfNR/uyavaVVg3T9oYdPawLqqQ/IJ/92qo/KIf6KmpGkDqXEqL2uy+CeqTshnFE1NeZN9 SiuaXIqmakQ+p8RbBjw3ScdJ70EPtjPokXYRerxdgg63T4eebk9R4vm9QpWWs+3pkX1VZ+QLSlLV Ofmykmw5354FvdSeS8rzq+35SjLfG+mvuiBf8w9YbrQX+Qdi+aRelm8qaZbb7YtIl/5Tfrd9OXSi vVJJ26hpXw2Nb1+npPF7RYaqrsnjSmbVTfmekrMxqd0ATW43QdParUoOr0cOV43bmJK3MbPdAc1p d0eOVd2ziUrhxrx2H2mIdDO0sH0rtKS9F1rWvgNa3r4bWtG+Tynk94qc3LiqvT982cAMy5WSjWvb h5QSg2iTlDKukVMGyTZdKd+4of0w1Nh+TCnnlchorD6p020pSoUhxZaurNpoaT85pfb2U8oqXo+M TWq6LUtZu9HVPko6NpV72y9Cg+1XoNH269At7beg29rvQLe3349c3LjLK0SuGLJsucqGjXu9emUD zWacrBzwJj5QXolcN+Ta8hXLxkG8dlDvzAc5r0duGfJtRfx5eVNx/MgjoxsPeTOQF9kWKfaNR73Z pPOm8hPeAuiItxh6xlsKPeddBr3gXQG97F2p2Pl9I3cMi2xLFZdhqW254t14zbtmSm+SjnvXK16c 20qc4eW21Upw4z1vDan5QW5lXlkJVl2zrVMyraLXOaWS16NkGiptBiVas6rJSxqcytc2RaEbmrZA jU3boJam7VB70y4lyu8VMNS4mvYGTIbVNpOyxbDOZlW21XibDkCDpFHSLU2Dyja+N2A1GGwOZbvB 0HSIK89rtjUdVQ4YTDa3v6dme9MJ0pF/ync1nYHubToHPdB0ATrYdNnfw+8VcBisNp+yy+CwhZS9 NYearkGPNt2Enmgah4403VP2Gty2zcqBmjOk5xws4Db4bFuVwZoLDpFUIp2uDBp8jhTklx3p0GuO LOhNRy6v27YGfDXjjnxU7jmKAiFDyNarHKpljkVQ0bFUOWTYbNuhHK2VbDsCm2unO5YrRw1bbbuV wdoURyU03bEa86AS8JFuje019Nr2KScMO2z9yoHaLMe6Kc11GHBmUA/01uY7TIEdsdyw2zakjNQW Oaykjild5HBDlzp80OWOELTSsRm62rEVus7RG9hda3DsCOzDPIeVM7Umx27lDPJj0H22kzhCq2Mf aT+OChUcZ7/tlHKu1uEY+kfl9UB/rdtxODBU63McUwoNQ7ZR5UJtyHFSucDzwGHDkOMU8sO2MXpG o6R/z3MdF6GbHVegWx3Xob2OW9Adjjt4jbY57uO54754vsdsF/3nDSdtV5TLtbubhSndR9rfrFcu G07ZrivXDKO2W/w90JxIOvOB1g41p+I9MGa7o9ysPdycMaXHmrOhJ5vnBY7VnpLLAydrR5sLwCec DU7VjjUX+7trLzaXQq80L5tcwUf5OhgYq73evMI/XHureaV/mFaii7V3mtfwVal5vf9q7X15JHDF KDTX+CeM+mazf4L+Xq4bE5tl/O3w9+0t48xmp7/HmNrsgWY0K5PvsTv89Q3cN2Y3h5URw+7mbijO Q1Awzmvu4eekuQ9Kz9RY0LwTWty8R9nLV5zIfet0r4LVB1f+qGBN8YaVNGu6txua5e2JXZ+jen6V iyZac719ylprvnenspZfZ6IzrUXePfya490PxZUkmmpd5B3A1WOp96AS5O/8gM9Y2rxfqTAuax4I 6o0rmg8GE40rm4/4LxnXNB/3K8b1zcP+sLGm+XRwJsacxRhz8/lgqlFuvhSYbnQ2X1W2GT3NN4IZ RqX5tr/PGG6+679h7G6eCGYbe5ya4DxjnzPeP2Dc6UwKFhj3OJODxcb9zjT/sHHAmRksNR505gSX GY8484IrYrxhPO4sDK40DjtLgms4UQQqjaedZcH1xrPOcv4qOCuCNbGV3XjeuQp6ybkWetW5IWg2 3nAag7LxttMSdBrvOu1Bj3HC6QoqdRqnNxiui3cGg90xpq1e44zi1Sd2ilFKXZJzS3CKG53b/H11 yc7tWKnx3gj2VQ87dwX76tKce4M76zKdB4J76nKcg0FnXR6NLHQe8h+vK3EeDe6vK3OeQF7uHPE7 6yqcZ6CrnOf83XVrnRegG5yX/XvqjM5rUIvzpn+4zu4ch7qc9/yn67wtDBpsEXE80RYJuqVlenCg ekVLin9n3baW9ODBuu0tWWAPnIHgkbpdLbmT721D3d6WfMxzoKXIP1E32LIoeLzuUMvS4HDdUU6Y dSdalgdP1420VAbP8r+L4Pm6My2rQelg9eAl0qt151rWxQg8eIP0Nuld0gn+KJ2amNZdaDH4e+ou t5jw3K+1WHFsN2V7Z3zdeItjMk8iTeZ/X51pdff4meQ83JlJmsO5tzPPxFrcnXmUF5KWmMQWn/+I SWoJgYdBxZ1lpuktm2MM3FlOWkG6qvpqy1b/aVNKSy80nSun1s61pBtMWS07YqTaaTTltuz2nzfl t+yDoo5KUUt/jFo7LaR2Uhf/q+/0kgZjalrUMuS/YVoqH+qMmpa3HPbfNlXKRzu3mFa3HPPfNa1r OQk1tJzyT5hMLaNgS7wundtIt5usLWPBxFpTC66KJkfLlc5dJnfL9c69qOCqaPK13MGRh1rudx4w bXYJnYOmrS69ctTU60rsPGTa4ZrZeRT11M4Tpt2ujM4R0z5XNq7qdPU29bvmdZ4xDbkKcDUedRV3 notdCU2HXaWdF0zHXMs6L5tOulZ0XjOdcq3svGkaJQa44FqDtSC2ytB1O7ZGm8Zc67HiY7XtHDdd 5Kut6YqrBisdrlqd92qXu8yd90zXXXKImW65nMoh0x2Xp/NybF2uzXIpeC73XWHOEq5uJVovuHr4 mu7q8/fU6107H6y29YmuPXz9cu1XRupnugZQSXUdhGa4jjxYKeqzXcdDYv081zDyAtfpkFRf7Dob ms6fXSilvtR1fvJK66hf5rqEeVa4rip761e6boTS69e4boeycGbuhnLr17smQvn1Na2aUFG9uTU+ tIift9BSmmd5LWtNUg7Vy63JoUp+DQ+tnqQdaGgdqeEB1dgcIRMpcU7IQermxxDykYbqna1pyq76 Fa2ZOBIPp5F6xbY5KNSHW3NieWgz6Va+FoR6+VU31FvfTWcYdBHaQbqb+OFOfU9rHtYL5KF9pL31 fa2Fyon6na0lIApwRai/fk9rWYwiggLX0BDp1tqs1nLlDPZWQPe3rppc8e9wDR2uH2hdG1vlQ8fq D7ZuUM7VH2k1QlFH5XirJbbKh06SniId5etUaIx0K+nF+uFWO9ZurOCdxvrTrS6s1FjHQ1fqz7Z6 lWv151uDyrWaE61RvDcOt25RbtI5v056i87DUP2l1m3KhfqrrduVy/U3WndhTScKrb/dulcptC73 HolmWCu9x0P3rau9w9Fs6zrv6a5hq8F7NjrPavKe9w9Yrd5LNOYqxji8N8C9bu/taIHV570bLbaG vBPRUuvmDk10mXVrRzxm6O1Iiq6w7uhIjq607u5IU8qs+zoyo2us/R050fXWoY48rJuHOwqjNdZj HSX+G9aTHWVRc6w7sJ7qKFfKraMdFVHZesqbERm1jnWsijqtFzvW8lW1Y0PUM8nhVzqMpBbo9Q57 VLHe6nBFw9Y7Hd5ot/V+RzDa0yh0RKN9jfqOLdGdjYkd26J7Yh3oxryO7ei5Yp0O9RSNMzt2RffH urzG1I690IyOA+gI+Fo/sDHaMRgdsIodh6IHG7M7jkbDjfM6TkS7NybRyIKOkfBgY3HHmeiRWJ9l GehAz9tY2nEB/eztjstKWuOyjmvoK/M6biqFjSs6xh88euPKjns4BuqSGtf4GDqm2PGs94nQGp8U Pb4x0zddyWs0+1Kiw42yL93fw89A9HSj05cVY5XIUKPHl4vZFF++EmwM+4qiZxu7fYui52P9YGOP b2n0UmOfb3n0Kuec6I3Gnb5KrGvorKO3Se827vGtjvXL0QmunTlcA1lcN2n4o2yix9qUZJV8OP+N +33ohRsHfCYlj/e/m5IbD/qsk3kaaSbnpU0PziS61015pIX8qDaVNB7xOTaVUF5GWt543OdWKhqH fT50r+hhN1U0nvaFYh3rppiuJUVf6duMM3bWt/WB8h4zcJ/rJmPjeV9vrK/cZGm85NuhWBqv+nZD UUflhm9frMfEo3MtI6VOcxP1jJtcpN7G275+dI7oHzcFG+/6htAnoovcFG2c8B1WymSN7xg03ncS jCf6TimZ/HXZtIV0W9W4b3TTdjnJN6aUy8m+i4pXTvNdUYJypu+6El9/t/WAEjVtbh3EVWui9RAY 1Y2r4gGzpvVo5wVzfOuJ0B1zUutIoNec3Hom4DantaJ3m9ILofvmzNbLXQL0GulNaE7reJfenNd6 ryvRXNh6BsROPZ1ps5th5hK32DXTXOaWulLN5e7pXRmmffz6yRWPUuFO6co2r3Lkd80zr4UW1Iy7 0cGZN7izuorNRnduV6nZ4s7vWma2u4u6Vphd7kXKCa5dK/l1smvNZG9Fava6l/rvmoO2oa715qh7 eVeNeYu7ssts3uZe3SWbt7vXdTnNu9wG6Ha3qctj3uu2dimkYfMBt6OrG+qGDrp9wQFoKDjAr6Vd PeZD7s1dfeaj7q1dO80n3L1de8wj7h1d+81n3Lu7BvhVtOug+Zx7X9cR8wV3v2I3X3YPdR03X3Mf 9p8333QfwzVwhftk17B53H2q63RsheLaddYw5jredd4w5h7tuhQjt7oR91jXVfM998WuGw3MfaXr dtUW93X/cIPovtV1t0Fy3+nSN0x33++aaEhpE4JrGtLb9GFNQ1ZbYji+IbdtZjipIb8tNZz88GwN RW0Z4TRodjizYVHbvHBOw9K2gnBew/K24nBhQ2VbabikYXXbsnBZw7q2FeHyBkPbynBFg6ltTXhV g7VtfXhtg6OtJrwBag4bG9xtctjS4Gtzhu0NoTZPwNSwuU0Juxq2toXD3obetu5wcFJ3tPWEo7F3 S814W194S8Putp3hbQ372vaEtzf0t+0P72oYahsI72043HYwfKDhWNuR8CDmOY55TrYNhw81nGo7 HT7aMNp2NnyiYaztfGBfw8W2S+GR+om2q8pIw5W2G9DrbbfDZxputd31X4JOQO94NOFzDfc98eEL FsGTFL5s0XuSw9csiZ608E3LTE9meNyS6skJ37NkePIUiyXbUxhhlnmeEuWcpcBT1nXXUuwpj4iW Uk9FcMCyzLMKx0aPYlnhWRuRLCs9GyLTDas9xkiKweCxKNstazz2SLqh1+OKZBl2eLyRXGhQOWNZ 74lG8qFbIvmGfs+2SJGlxrNdyTSMeXZFFlnMnr2RpRbZcyCy3OL0DEYqLR7Pocjqht2eozhL0Mi6 WNdvUTwnIgZL2DMSoc9tIsQqEYel2+aLuGN/cZwxArmTn1T841/H4dhnBbFPBrp6LD2eMxEfX98j Id6DRzZPvifp0yH+2UKg19LnORfZGiMxy07PBegez+WAY/LTG/pcxayxWSO9/K8jsiPW9Vv2e65F dlPXeYcJbJbqluq/GFP9VYX/U91TfcY0qs8FFRMFrSCyOGGaILFpQpLwKEsQHhOS2SNCqjCHPSpk Ck+yGUKO8Ax7TPie8D02S71c/TJL0ZZrX2KpWoe2maVpf6n9JUtPxMa+kJiR+CrLSFyZuJ5VJlYl drGvJ76V+AsWTBxOvMF+kngz8Q47h6N5nWno96uJ7BEWxx5lq9k0tobVsNeYkb3J1rNvsC0sxLay j1iY/Y79kY2wP6ni2e9VkiqBfa56RPWYSqVKVeWo9Pz7i6pZqnWqelWaqkEVVuWqoqptquWqPtX3 VF9R/VT1W9XX1e+r31e5NE5Ni6pVo2iCqjZNVPOmyqt5S/OWStG8rfmOKqB5R/OuKqTp1wyoNmkO aj5QdWt+ofmFaqvm15rfqN6iX/9t04xqPlK9rbmouaT6juaq5j9UOzR/1vxZtUvzV83fVN/n32ZT 7dHO0M5Q/VD7kXZCtU/Uilmqs+LT4tOqcfEZMU/1V/F5sUT1Gf+lgupz8UVxmaARy8VXBVF8TVwv JIrVolFIE02iQ8gQW0SfMF/cJG4Rnhe3ijuEF8R3xL3CCv47AGGV2C9+KLwhnhZPC03iGXFMcIgX xAtCu3hJvCR4xU/F60IH/76UEBD/Io4LYfGOOCFEdUyXILylm657THhHN0v3pPCuLlv3RWFAt0Rn FY7pmnU9wg3dt3XfVvPv+uxQJ+je0/WrZ/B/D049S/dvukPqNN1h3S/V6fz7Oups3e90Y+pC3Xnd VXWx7j90f1N/WZ+tH1Sv1v8l7gn1HxM/S/xMw3/xZWVRqMTS+S+Cl9xC3GdsaQEim2XLu1+2yPvk fnno5QPyYfmYfFI+JY/KYzb9605bom2mLfX1g7YMW7Ztnq3AVmwrrbj3avpLuyuPyBdfZfIV+bp8 S74j37cJr6a/0o13lQbv8Vv0Hv8rU6k+V33OBLyjk5ga+x6nb4Qy4T3hPaYS3hfex74B4SdMLfxc +DnT0jdCReG3wm+Znn7LFCd8JJxl8fRdUIm+BZog/FH4I0uk738+IvxZ+PODf/1LrVKrpv61Q61a ZMn026cUdbI6mc1Wp6hTWCp9Y3OOOkedwx6n3zWlqxepF7EM+hXTE+oy9RKWSb/xyKLvbDyF45dU 0+nMcWVyGgM/yJlyjpwnF8olcplcLlfIq+S10A2yUbbIdoRL9spBOYp9W+Rt8nZ5l7xXPiAPyofk o/IJeUQ+I5+TL8iXodfkm/I49o3L92zMBiqzgbdsoF0bqOkftmM2sJAN3DO1VdpW29bZDA9tJpvV 5rC5bT6M/ft20nYKGrJttm219dp2TG27bfts/bYh2g5jvlHUimxjyC7ariC7bruFOYtsd2z37YJt M56/Ks46edXgvyt/lM5JCjY1S8OmYdnsaaZl87Dp2LPY9KwEWxxbhC2elWKbxpaxL9PvB1/BVSf2 y8GvsXX0y8ENmM+IbQYzY5vJmpmTPcbamIfNYn5ss1kntlRcj95ic9jb2B5n38WWzn7A9rIvsPew PcH6sWWyD7A9yX6GLYv9HNtT7FfsBI5vBFsO/fudz7Ax9geWyz7GNo/9Cdt89im2PHab/QXHfpf9 N3uOTWBboBJUOlaoise1r4S+x70Q174ktoi+x12qSlc9wRarnlQ9yV6kXywu+7/sfQ10E9e17kga yY7rKo7rECCOQ4jjUocYYohDXOpQ4lBKjCzJjkOoocRQaTTSjMay/k0IdanLpSweoZS4lEd4LMLl 8SihlDqEEkq4hLiURynxpZTHJS6X+hFCCaWUusRx397fjGxhnIaue+9ab612nfV9c3Rmnz3nZ+99 zhlkQdHQKTyJ/+dummmOaZ7wJVODqUF4Ct/prsLfJ840BUwBwWEKmoJCtSliigpO0/OmFsFNsbNV mEXR85+EZ03fNi0XvmJaaVopzMHfJ86lSLpb+Kppj2mPMN+03/SmsMB0yPS24DH9zPQzQTL93HRE 8MF+/RQFxgiBzOLMYiGIb89pmQ9nlgqN+MZcU2Z5ZrkQzqzIrBAi+HuZKL4fF8ucl/mckMicnzlf aKa57RauwfbL+PdulFzCcEIBoZBQbGC8gTLCZOEZZbhSoBQqxcp4pUyZrExVpisOpVaZrcxTPEqA UogQVxYpS5RlykpljbJO2ahsUbYru5Q9yn7lkHJEOa6cVM4o55QLymXlmtKrmillqnY1Tx2pjlKL 1LFqqTpJrVAOqZXqDNWp1qldar3aoEqqqobVpLpYbVWXq6vUNkrr1U3qVnUHpXZ1r3pA7VCPqp3q KUrd6kX1Cv+/aNYGq48WwTn2uWSxZrLP/yz7nknpdlh5Dqz8Dlj5Z2DlebDyO2Hlw2Dlw2HlI2Hl d8PK82HlBbDye2Hlo2Dlo2Hl98PKC2HlD8DKi2Dln4WVf044QqkYtv4gbH0sbL0Etj4Otj4etv4w bH0CbP0RsnWzUAb7fhT2/ZjpHlMB2T1b9mRY9hdg2RX4O4XHYc1TYM1fhDVPhTU/Qdb8PPnAC6YX yAf4rxW+BGueDmueYfqO6TvkD2zTVfg7hZmwZges2Wk6QnbsNh01HRVqMp/OfFqozZydOVt4OtOX 6eO/OM5ZnLOM5imbxv5Tgim8UxACywgrCWsI66hsN103ErYQthN2Udk+8Y7A8vAatfCvAzLF0ZLA qvC6QFt4ozr+RnBZYH14i1pGmBydyAhsCm9Xp/51sExga3hXYEd4jzp9APw50B7erzoItdHywN7w IXX2Xwdk5kWnBA6Ej6ie8JFAR/g4cDR8Ug0QQtFpyMejVeqiqDvQGT4TOBU+py4ZAD4vi84KdIUv qCs/AWuic6GjO3wZuBi+FrgS7lXX6eB8oCdiVjcOgD8H+iKZ6pZIJl8Zihixq9s/GSynZEXylJzI SHXXjVCGRUYp+ZEidc+NUEZHxqr7B6CMiZTeCppWJ48oJZFJysRIxZAoj1QymtYmjzOUKZEZt4Rp EadSFan7ODRtSJ5U3JH6W0FoU+K0MivSAMyNSMCCiMpo2pw8w9dQZzK7aVvynCJHwooWSQ5GaEfi vBKNLP4kNO1MXmjanbysLIy0Ai2R5crSyKobsCLSdhNWR9bfgLWRTbeMDZGtyubIjpuwLdKu7Izs vQmDx3p35MCtQD0UXaDsi3QoByNHhwTdU49EZfV4VIPc4UjnLeFY5NSQtsP6ThLORKPKiUjXrUA9 F12onI509+Ns5GI/+P4FwuVoC/LXokvV3ugK5XzkCto7CEFzdDXylyI9n4RgZnRt0B7dcIOOq5G+ G3A9Kg5GMC+6OTgyuk0VolnBUdGduBZFdw/Vno+DaovmqNnRYTchN5qvDo+OvgkF0THpCI6N7kvF 9htisRErUzEuWBo9mIpBwUnRw+lxpN9O0uc1NS+pMaqIHusf28roifQ2IZbso5hC9th0ULfLpsOG D7NfHSOcSF5je286TTib7E3Zc9N5utJzgjOip4PO6NlgXfR8sD56KdgQvcrrS1CKXudy9I3WiKAa E3gtCYZjtmAylh1cHMsNtsaGB5fHCoKrYoUc27nPwbZYcXB9bDzH5+CmWFlwa2xycEdsKuIyxXQe i2B7bDrHzuDemIP1Bg/EaoMdsdnBo7F5wc6YJ3gqFgh2xULB7lgcaySvQbwm8BhejJYEr8QW8ToW 7KH1JzXOfTGHJsaWsA6+p2XFlmk5sZVYe1Jrbdoc9etkGGtKai3gdvHaqA2LrdHyY+u00bGN/fPM 8jR3PPfamNgWrSS2XZsY26WVx/agbAqt4at08HrN6/YN2KSvy9q08C6sx/Sc1FrMV4DsB30btMby laFVhc8weH1MraspaO7wZUb/GslrprE2pq+V6Wtkap1MQZtF6yCthVj7aD3U5kZGMWC3vM6N1qEt iO1nu9Tk2CFNix1BPho7ri2MnYTNUvzQWmJntKWxc7i3InYB19Wxy9ra2DX2W21DrJf9Cf3aHDdr 2+KZ2s64HX6R8gMjLnIs1XbH8zjOafsoNhk+oh2Mj+S4xfVTMfAm3xrkV/3xxfAt1sFxUzscvaod i4/iNvbXJ3n2N+1EvEg7HR+rnY2Xaufjk7RL8QpuN8ck7oN2NV6pXY/ra8MnxSCjXY2CEcdTcelk mozRZvR1UDzu7w/H4RQ+7lkfE08bbcY1O5rFc5HCTXEyPVZyfEzFyLR4yLLQwzIcm2gMGnOj25ou NZt5jpuuNmdyP5uuN9vDQnNe2NY8kssRs7TklnB28yjsX8juWDac21yE/QbtO8LDm8diT0ExLVzQ XIp9mrEnCBc2TwoXN1fw+h8e31zJsS5c1oxYGJ7c7GSwj4anNteFpzfXhx3NDRyHw7XNUnh2s4o9 GcXL8LzmMOp6mpP9eybe8xh7FOgydPC9cKB5cZM7uQztSu3tUnsD90AMBlJ7GGPvwbqgI9TcGhqZ cKNOqj7Lc4zmz2wXPAbct3jzcpTxvjEFY594A25lL8htS+3p0vZ1/eD9XAqD93WpPdoQe7PwIh2f uDfjvVf6/ov3XKl9V/oei9vKdVkmNSaGbzUOjztxLYjXNRbG62GrvOdJ+VVxvKFxfFwCyuJq4+R4 uHFqPNk4Pb640RFvBWrjyxtnx1el23vjvHgb4ImvZ/9qDMQ3NYbiWxvj8R2Ni+LtQ/obnQ8al8T3 Ni6LH2hcGe9oXBM/mvK3xnXxzv78xvgpYEu8iwHf2x7vbtwVv4jrnviVlA827o/3NB6K9zUeSYj9 /kd+1Xg8kYX2nEzkcMxqPJMYxmtPCrynbDyXyG+8kBiNPl9OjGm8lijh2MXxo7E3MZHXlJR8yJwo D2UmpoTsiWmhvEQV22NoVGJWqCgxNzQ2sSBUmpB5XxCalNBYD49fqCIRDVUmFmJvS/MfmpFoCTkT S4G6xAoecx67UH1idaghsTYkJTaE1MRmjt2hcGIb5JOJnaHFid2h1sQ+3gOGlicOpmJzaFXicGpd CrUljoXWJ07weSS0NXGWzxSh9sSl0N7E1dCBxPVQR1LgcQwdTdr4PMJrd+hUMpd1hLqSw3meQ93J Avar0MVkYehKsjjUkxwf6kuWNYnJyU1Zyam8vvO9ppzkdPY5yFG7m4YlHU35ydqm0cnZ3PamMcl5 TSVJD89508RkoKk8GeJ+NU1JxpumJRc1VSWXICYYMZfjZNOs5EpeK5vmJtc0LUiua5KTGzneNUWT 25sWJnex7fJ4cb6pJbkH9ky20LQ0ub9pRfIQj6NgFkz2VvtKQfjHv6D8Hf0LykXhysC/A/iqhIBP 80V9C30tvqW+Fb7VvrW+Db7Nvm3EO327fVVGigL7fAd9biMd9h3znfCd9p31na/b67vku+q7Lguy ra5bzpZznxkmD6/rkgt8C/REEgS5UC72yXqq63gmRx4vl9W1y5PlqfJ02SHXyrPlebJHDsghOS4v kpf4ZqUSSSyTV8pr5HW+uXqSN8pb5O0ktwvt4xaxJN/jJ9IT+D3/p7eSbX/5P+U96EzyjWpKd+A9 aC7eg34G70HvxHvQYYIkyMJdQoDSSLwNvRtvQ+/B29B78TZ0FN6G3oe3offjbWgh3oY+gLehn8Xb 0DF4G/o5vA0txtvQB/E2dCz53BGhRDhK6WG8DS3F29AJeBv6CN6Glgn/V3hPeFR4n1I53ol+Hu9E v4B3oo/jnegUvBP9It6JPmEqMBUIlXgn+iTeiU7DO9Ev4Z3odLwT/TLeic7AO9Gn8E60yvS86QXB Yfq66euCC+9E3XgnWoN3ok/jbWgdefprwjOm102vC7PxTvQreCc6B+9EvyouE78tzMNv5TWIu8XX hQXk14cEj3hefE+QyH+vCTx/cWHRgK1KeUKplCeNlEZJRdJYSqXSJKlCqpRmSE6pTqpHWiW1Seul TdJWSjukdmmvdEDqkI5KndIppAZJklQpjPpjpSR4sdRK3EBpOSe2G/ODZDcPGXaTi+ezxZhpjj5L 1sO2ItL4l5L1sK3YYCsZZClPkg3xO/PbyDpmkw2xfXwK9pGN9+Sfpn75yZLYGnLIFl4ke2I7yCUr 2Ez2xBaQJ/yQ0p2wgGGwgLto/g+S3fL78BE0578mC+NZvxuzno934PfQzF8QCjDHo0w5NMf3YXZH Y17vx4wWmr5qmic8gBn9LM2oJowxRWlGi/GW+0HTcprFsZjFh4zfkeR32uNMr5l2C+MFU2ZZ5uSB +fDWiXd46wYnqUVa6q33NniX60la4a2XVnPySoOTtNaresN6kjZ4k96ktJlKBiVpm3e9dzGlVkq6 zp24rvK2pZK0m2RuStI+7ybSsNW7w0jtepIOgg8T7705Sce8B7wd/anVcyiV+jW3Dk7B/f4V3qPe zlQKHvKeMlLX4BQ8Qq3q1lPwuPei96KURSWDUvBk8Iz3SvCct4dSH6fgBfWYt08SpaxUCl6WcgYn Gp2l3k2+yd5OaZiePMf1FLwm5Uv5wQtS/kA701rc61kpjU4lb480JpVIo667RDoxKJ2WztJzJvan 81I5J8/Km3stXfKOlKb0J5YbJk0blK4SrktVSG7J7RP0cp/Nl03XWbp2Tr5c33Bp7s3JVyAt8BVK Muxlsa+Ye8zJN95X5pvs6fVN9U33OQb0pGms9RxPsydNivpm60laqCffPLZvnwe2q/oCvhDbgi/O NuNbxPbhWyKd8C1Db6f5VvrWoEVroH2dFJWibCmaGeOxScvU7DyqWh6PvjaSR9q30bfFt923y7fH t99b7ztE9Y6Q7uO+k96w74zvnO+Ct9V3mdq33nfN1yub5UzZLufJI+VRcpE81rves18ulSfJFXKl PEN2ynVyPbVYpVbulRvgZa2yJKtyWE7Kld6wvFhuJV3stegRJNfDT6hH8nJvUl4lt8nrvXXyJtJ9 iOQayJfa5a2Uq5d3yO3Ee+UDcod8VO6UT8GXk3qSu+Ru7q18Ub4i98h9fpG8lVObP8uf4x8GG6cn +fO97f7R7I3+MYQS/0R/uX+Kf5q/ynvA7/Z2+GexFvY8/1z/At1SpYl+2a/5o/6Fktvf4g37l/pX SAukfP9q/1oa5YX+Df7N/m3+nWSv02gGyv27/fv8B8nm3P7DlI5JVf4TsMASqUSfK8jNZYvhufKf Jpz1n/dfkkr8V+lO1H+dFnVbIDuQK00MDJfXBwoChYFib2dgfKCMawQmB6YGplNywMbLfctQWhuY HZgnuQOeQCAQohQPLCIb5lQeWBJYFlhJrV7gXRxYE1gn5Qc2sp0GtgS2B3YF9gT2Bw4FjgTIawMn vW2BM2SPGvctcC5wIXDZN5UsNCqVBK759tPYtPumksed0kZR7JqrHtOKtLHebq2U7LnP26NNokiR o1X4zmmV5MudnkPaDPWYeoz92lupOaUxWp1WrzXIM3wFwWwa7U1slRTNOD718GNJiiToU4emUqTi eAcL1iU5wmBeKr0XtbBnpZYkG19M5WNIrpPiVb7GNY5qy7VV1MY2bb22Sduq7dDaEQUvans5AmoH tA562lFtldaJdIrinKjHOrldw9PYgrU2z3Gtm6OZ1k2aWfKidkXr0fq8B7TleuRC7MrRzJTaaExH c0v85wO9Cv/EW6ZiV/IoQm1RRiojPVvIVjYoo5QijkneBmWsHFZKpXJlklLhb1EqpWnKDMWp1Cn1 0iylQZHojqqE/eeVpLJYaWWPVZYrq5Q272L/WmW9sknZquxQ2pU2Za9yQOlQjiqdyimfoHQRupWL yhWlR+lTRXmsmqXmeLcqp/znvXvVYSRd7+3yL8UdfCfHG+Zv5fh3+rbwN3O86/u/mzNXXeDtUmV8 O8f4bo63j7+bo3T6zhnfz1nhPTDkd3TOq5eUTvUq+VqPL5u/pePLDtrITt1krw6a+R1SNJhLsXGM 59DAN3d8tFoEy6Sc4HB/jvGtHePbOtKCYK1aYnxTpwDf1Rn4Zk7qGzl7AiHsph76xwnz7+iEKQka vtUwjFjwnBNM3lIhz9NFqdvTPad+Tr3nIqU2TxvyVzxX5nTN6fL0UOrz9HGZV6SU5c3isvpF9Yu8 OZSGeYfNnTh3ojef0mjvaHqO2e6wV9MzcnCiEXCiMeMsY8GeV8RZxopTjA173gycYjJxirkNJ5dP 4eSSjT2vHXve27HnzcGZ5Q6cVj4jmHIW5KjoE7536FkgmDxL6UpnFM8K8Y4ZfZ6WW0HVOk/LUyIh 62OQo6Nqu46nht0i8gmjh8AYHVWH6Fpya6g6TteJBsoNTNHhmatfqy4QLlN+GqHqZlT10tX9yZiZ aeiYZYD1LxgEeQhogxD9G7CQ0DIElhJWDIHVg7D21uC20XUDYfPHYJsOd7aOp3beInYT9n083Ll0 PXhrcLHtHDZwzMAJHe7h+tVF8+MuoPxpwtmb4WI7O//JcBcSiil/ycBVwvUbUSUMAdsgZP8NoLGo Gj4EqD9VhTdj8FhXFd8aZk6i63hC2ceA7s2sIFQacpNvEVOHth3oYJ1Ouk6/Ncyso6sDWIprbRpS Mg3GVSKolJ898Kx0zAwb+XmfjJlJwuJBOjyDELgZM1sJyykforizQL/ObBu6PR+LOGHREFhCWDYE Vt6ImesHYvcN8TYVL1NxbNNAfJm59cb40W8n6fOampfUGO1IG9v2G9vUH1PSbTPlwynfYl2Gzbtr B9k1z+dewgFCB+Gop6Wa20Dry8xTejn3ideImV0erCUeirEzLxKuEHoI1H8Hr1tVen8dtFY5eK2i eXFQXQfVcXAc0IyYTuPgGKPHS0eJrtdB64mH7jto/XBQTHGQLgfrmmWMb2o8qS6vkw6O/ayzfGCc WZcjquvgew6K5Y4WvV03zdOgOepfT4x5Yl28Njoo7jtonhyr0+q79bnjzw4aewfFcQf5nWObISOm IWcIDF6XxwyBEs/A+pq2xvZjWhoGr7Gp9fI/sk4u9Ny4Fi71DKyBaeud44Rulw6K/46zRp5sznHJ sFmyNwfFcsd1/XO1YFwpVldn635bnav7E/ermuJvNcXf6kLDL1J+YMRFjqXVxUacqx3wkeoyPX5x /f4YONi3BvlVf3wxfKvaiMVs/9VT9Tb215+n+1s11a/m59Czqyn+Vc/T2424RH2oJn3VAaPeJ8Wf QXF8SJlUm4eIx/2YnYaPe9YnxFOehxswOE6mx8olaTEyPSaON+ouMu4V6zHaPU+fY7dH76ebnucm OXdcL+eY5SLbcVM97F8W6rJuegb2G7TvcHOsO2vEs5WGbRp7AvcaAsUEXv/dG404t0XX696ug33U vYuwh7Bfj8NuimnuI0b8pHjpPm7UPekZ2DMdS4uj2wd0YC91htp90GjX4Dg8KAb372FScXi7oeOc p8W53KiTqn9ej834vFkfA/TtglG2IQ3bhsCt7AUPegb2dMc8/fu6fpxOw+B9XWqP9h/Zm+V6btx/ FXj69103rGX7jLrDB8Yk5VvVy4wr+90az8Cex/CrarKJ6o0GyB6qacyraf6qaf6q9xsgG6g+cqO9 Vx83cFL3r2qa52qap2oa/+rLQ/sbx8bqawQ62zjNhMwBf3Pa0/J5BkbqYN9zjiIUGdexAz7oLCVQ vHNWpPkf9dlZqbfHOUOPWU6nvvakwHtKJ+3nnPV6n520b3NKeuzi+OFU9TUlJe+k/ZqT9mFO2oc5 W3V7dK4i0H7KSXsc5yZ9X+Dcauih8XPSnsTZrsdjnn8n7SGcBwx06GPOY+fkep0E2ks4u/TY7ew2 5GkP4aQ9hLNH3wM6+zz9sdklDqxLLtpPuHL084grXz9TuGiNdNEa6aJ9g6tcH0fXFP08wmu3q0rX 4XLr8+yapfuVi86QLloPXbT+uVg3rXWuhfr6jnstus9xntvtonl10ZrnWq233UX259qgz7mL5bbp /XJxDCN/c+3TY0J/zKUY5jqsr5Uu8jMXn5lO6/HOxe25pNsujxfnXVd1e2ZbcNG4ugV9HPnbGJ8+ 8Om3/vFtjL+nd2VisXiQ/0XVfFh4VRAyRhGKCGMJpYRJhIq0a6VxnUFwEuoI9YQGgkRQCWFCkrCY 0EpYTlhFaCOsJ2wysJWwg9BO2Es4QOggHCV0Gs86RegidKddL6Z9vkLoIfQJQqZIyEq75hCGEfJ1 eb5mjiaMIZQQJhLK065TCNMIVQQ3YZYhP5ewgCATNEKUsJDQQlhKWEFYTVhL2EDYTNhG2EnYTdhH OEg4TDhGOKH3K/M04axxPZ92Tclf0scU11NGPSnt/lXCdfwX38JtNgL56225A1cen9uGEwrSroWE 4rTreELZwJXbfNtkwlSj/vS/DZizdMzQwc+/Qd/wQXAQao2r42Y9t80mzNPH+zYPIZB2DRHiwquu Za6VrjWuda6Nri0MW9y13bXLtce133XIdcR13HXSdcYWcJ1zXXBddl1z9brN7kxKdneee6R7lLvI PdZd6p7krnBXume4nUCdux6fG9ySW3WHgaR7sbvVvdx1xL3KFnC3ude7NwFb3Tvc7e697gPuDvdR d6f7FNXrcne7L7qvuHvcfTViTVZNTs2wmvya0TVj3OGakpqJNeU1U2qm1VTVuGtm1cytWVAj12iE KNepWVjTUrO0ZkXN6pq1NRtqNtdsq9kJ7K7ZV3MQOFxzDDhRcxo4W3O+5pItXnPVSNf7c5y/XisY yUYp291Tm0vlp/VUO7y2gDC8tpBSMaXxtWW1k2uu1k5l1E6vddCaMGLIX1wQjF9cyMQvLmThFxey 8YsLdvziQo6Zf3EhF7+4kIdfXBiGX1y4C7+1MMI+yv6wcLd9gr1SeMg+3y4Jj9sD9kbhSXvYnhCe si+yvyC47Evs3xRq7C/afyI8bX/Dvk9YbO+wvy+04NcXNv9/3DKTKdek4fsqe4QHBeH+EwbI0+8/ a+C8gUtpeQZ59/3XjfxZ/o/b9XyhzUC2AfL0QvKgQvLuQhIqLNZlC8cb8lxWlvZ5snGdamD6wDML HfrnwlrhQZeNUrYr1zXcVUCp0FWMNN5V5prsmuqa7nK4apFmu+a5PK6AK+SKU+ki1xLKLaMaxYY3 6v7InrjRtYfm6nb80oaA39gw4zc2LPZSe6kg2p+0TxOs9i/bZwoZ+L2NbPtX7Q00Dz67X7jHHrI3 CaPsSfvzwmh7i/0bQpF9r32vMMb+U/tPhc/ZL9ovCsX/xdpNfV8RP0882yoTfwr5LOQnIj8R+QnI Pyw6mK2LkQ8Tl1pfQv7zyMvIP4j8U6g1lrjE0FYDbYv4LuTrxTHMVjd/68mapHyeWMhsjRDvhMzL XPcj5D96A3paUO7XW2W0rQKam5CfjnLkrc8x215C+RdQMp/0/IZb+FGXdRZaW4Ee6XUfhMxX0NpH oHM+8o8h70PLn0DvJNTl/MOWv6DkIeR/Aw2fwt3pKFeg+QmUNyJ/O/KPQ6YET6/HU27HUx5H/gnk dfkyyHuIxyM/HvlSsRxcBg0oAU9A+aMYpUetfjylHDKcn2BpQ61DkAxD80bkNyB/FPnlyO/lNvRN gXwFyh8BLyEeB56A+ZogPgl+DLUW4Lk+8OuCyRywriCusC4l/qaVnm6OIn8X2AI+aV1L3MqSpjvA a1GrFCwwW16A5Ebrt4l3Wb9PfB+XmM5x3vQh7q6D/BzIb0B+IjgPOt+DzP3iz4nzxbeI3WInP4Xz pl+C30a5R/wVsYMlTZnguahlRv4NZkshJOejXGF5Ux80vIb8G7hbh7sjIf8k6naD/ywGqbzKypI9 okp5m/UdHg0uNzVYDxP/ViTLMT/AMsKH1jeoxA5+3yghtnwReh4AF6FuANwGvs/6Wdx9jkeJ2fwh 8ifAvwW/JNbzHGXcAzYz23rBnSh5ADyHnrVIn0FIftP2Ec8j8nfpjFp3odZdqHUXZHbg7g6UnERJ K0r+B1uC6Q7OE5uZWQNxJ0oeQP4j2APZp3kB5BeibilKBOQF61kwl4wBb0T5RvRlF/K79DxauAst 3IX27LJR9LD8Av26DxZ4H+QfQavOgT/U2bqKrQt310HbOmhbB23roG0djxJZILXBguda9CfmoVYe evcetL2Hfv2Zljti6zlwB/hVcC/ukq9ZRmAeeyB5CnwJ3GM9Dtu4xjbDJeRHHeBXwb3g4zzLkP8t dP5WL+Fapk+jVeM5L3zIMmRRHeBXwb3MIkUDs0m3Pc6b7ND2vvVfmLlE+DBjNuR/w+1BSx7gHpl7 0YYilBShpAgtLEILi/S7aH+ReIl6+lXdkq1X2YbxlDbUnYSWy+D7bFHIdIBfBffiuY+wbbO8xaoz xvO34Jeg7SWM2GH2LIpIG2HV+2CrOsMCkd+lMzSvQz4P8nmY9zwuodlRMPJg7h2NoYL+wmeZ6enn MP5csg328xj4y4iBI6z/TPyerYp4Bcr/wGwCk3f8M2b5f7K3ouQkJOfAC/LAE6GnlNmyAvmN1jVo OdWyPAL9/w11p0D+N8iXgF/X7RmR8zVE0XfhBRlcbrvOtmHbwuNmvYfrin4ePdu7nLc5OG/ZDcuf Bnv+V+YMkftrWy12cWthXUswbk3cHvJHB8Z8HHgExnwceARGfhx4BMZ/HHgE/HEceATmYhyY5f+I 9r8IzfnoewCxZRc4T49dtgcRqSYSF3BLTB9y3vQmZrYi43McwSBvQf4karXqMQotb4X/lupxhu9a XoBfvwCZjeD7wI/Do8/pnPFjZjqr8xP57hxYzhxEhg1cQmsT65+OuxP1KIG672U8AwshLzCPA5eL v0Z0YpkvoOQB8V344J+Ip8Bfrtho5TX/C5eTR/wJkZ88wjQf+R9yhLd2wy8ElrfWIg58gJIRiDlv w9duy6B4aPop/EXE7F/n2aSI9AHs/AN4+gfw3A/YTw2GDyLfKcI3WY9Zsf6e+HZm0nActfT4wxHm EvqyiNtscVh/Slytxzqsjwr61ZBBOyjzC3qvOeaQ5i9z31k/RZ4HeAVEL75oxMPjaA9zm86274Cv InpswG6BY9GHuHvCYI4SNbZvIIY8Ap9lfiJjNFbqdxGj3sVI0kptOiiewbN+j/j5Jx4Z3P0xJO9G vhiRc5z1W5S/IM4gviz6MXccRR/Bcx9BPgP8HfT3KNhs/SP1KNOqYX1nPROxSynEWFXiKe+Aj0D+ 59Dwcz1y4ulO8B95LkxjEDnnIJ6/hfwq8Hwr7TDNs6C/DrM2CnrOoQSR33QK3Az5bdxr03WxCX1s Ji4WT3A8gcwr6NH73E7TemjYwH23PsKjZC1itrzENklxibRZPuC8GEM+xi23uDDLIxCp/mREKrar z7A2y73cQloNude56Ne/iacp/7D4M8rvQEkZWvJ78PNowyn0qxz5WtR9UtxJXCnySr2a87Tu8Fid hmSR5U7K/w7aPgRvRfkT0PCo2Er8e/BTVvJxs4i23YMnvgb57eLbbG/QeR3civI/QkM5tB1H/jmU H7KeQZvZ8r/JuzXalcWI13Akp/JK0v+MbQLJN4rsUzIz7Q+51pMYn83Wn8HvmmGBzG/x7t18v+0Z 8OfBxeAs8LPgF4n1va4bkhPBbttYjnicN/3S4GJwFvhZMMt4IL8C2lagxIGSeVaOsZmom8lPJy4G Z4GfBbP8o5CcC8k3dMZebj70zEfLFeQVI18MzgI/C65DnJlLo/Q49t590NkHba/pOsWtbOHQUwc9 ddBTBz110FOH0ahjbZYnWdJSDX4WLe+Gnm7k30b+bbT/fts7GA2d9Z6+g1aBrdnQ+Q7qfh7M5c1W OvGZ7eA76UzP8fAJRDmKEuZqlH+P2fQ28j5rJbybeRtKTkDyTvQ0X9xBvIjzZjOzZTry88EK17Lc wUyrD9fNRa03oP8iSjT2RHOddRJsmMdwJY+YbQr31HaQWfzvXEv8E++Qre9z3rYEu45HMYZJjK0Z 8lNQ9yT8twxnHyefZ2ms5mOU5mOU5mOU5mOm5mOUOP8W2vMc5C3I349xVphp9GC91mq2Uj65Uy94 LfieuJ9K8g271S0zC9ao22QxrCuLz2uY00KUz4fOPvBrBvNK91pGFPIsM5JnjexhLHqns24PYyFT jLsvouRFtDZCMXaJhfyxz2H5A7P1PsH00S/4vcdHv7B+neS/zyd0y2HrPBrPxzjCi1/jvOWH4O+g fIs1RPwyS5ogT6s/sXgv6j7FbPND8k1+OyG+ze8uLF3Q8DS/DxFzcPdHqPUKc8bdKB8GDb3gbZCf h5PpIp53y485elvOIP8l8ARmcRSfZ8XRWJeXQv6nmNlfM1s3QWYC58WRLGn5J0SV3yEv4+7ncHc4 s60SGvQT9DbwdDzrcY6Blpf5jYdlGq+zln/HrmApzgUHed9uOcQnYto7kYxpBY+naSNGdSFKvsk7 BOsl6NkH7gT/K/jX0HMOfBQcE/+C8ud4N8tsfRP5ReDXcV6+htPxj3jXJz6Ovd9PjLyZmXduxJ0o eQB3aWWxPYrxVyCZDX7MliDeDw3Lwb/TmTUQd6KENfwQkt9HrV4uEXtRgp2n9btYH7+LHelBcDP4 FHaYv8RO8iD2sS/jBN3Hu0qyJd4hd+OJteAfc6S1joDOEVzXmkQ+qedZD3EnSkiP9Rt8Us4wo18W 6zDimdBzAe18iv1d/AE02A1mPXbosWN8foC+/IDHx/oY5zMitu+B42wb0JPQGaN6G/Rv475botjj /Upn3r8Rd4BfBfdChuKY7QnMdQskp1npxGF9yXYvafsCnzQt7Vwu3qUzayB+FdwLdnDvcBcnaMsh LrFsRN3z7JWm09gnPw9eAz6A/eRinEm/hTPp17FfWoG9Ac7ppku8AzRvgObhyB/jU7OlwtrHvoPy CaxHPMvtF7H3Fr+mM8q/htZ+Da39Glq7glslNvHZ2fa/UUvAjjEffce521ID3o19wo/QozU4Qb+I ndgR6H9IZzzlITzlITzlIcgf4VEVv8XPsk20LgR34M0G17pTZ5RUYzSuYcR6rO/CF8ph1TqzfZbw 2ZnsjUpsmhW2gbwPPUrApxKQ/5X1PcyIzjzCBXyOFkUusTaIe9FCzi9G/k60/06U5MIa28CzrHmk 7Ryfha1ftK2gkne43LoOd59ktvwE+T+wjHgHzs4HIdPJ8tYs+M694GdxFv4BTsGXma0jeJ9mTXIt WwWeMgU6f4b18d+g+YfQ1gK284lbbMfdV+BNeeDP8N3b8KYoczZOXn/hKG2dz/Et403E8GmcN/8f nM0fhU/1wl9e1r0YJTZo+JB1Zs4W11OtO7AK/JlbSCPPs/MRn6MpXo3AvIwD8/l6Pc7X/4vzJDkO PAKePg48AvM1Dsx1X7FxHOhCG/CmQqy15fMah3j1NjiBGFLIJ3HxN3z6Fncy0zrI1nXY9grsnH38 IPK96MXLqNuF2PhjLrEd51hh86P8TfACxIcu1H0a/LuMh8GtvAJyiTWDLSrjbsgPA78CnYioli18 1ha/xOcO8TlwHlbkZ6wvw7quIk/ytlkofw7nr5/gxDcfvvbvthFY+6jcipMs+SCfj97CnuoDlhS/ jjiwhHf7GWvhjz08j7YqzOZ3ucT2hJXHJ59PtWThHNPwrs/8MnPGWl6DLMfZ+yxRPmUTcy/akW+H dy/l/P9j79zjfKrWx7/2XnvvuRjLpSFJrmNCiDGuSRJyC02aI6EYJjTuY0YS6shlkighUY6ckqRI KrcjFdJNmiSVJElE5ZaUz3zX8977/H6Z7/f1PZ3vOX+eV6/e+9nPetbaaz3rWc/ae38+82HrhpTS epRWYWWF8l3SB6+RXMXurfaJzGvJc9knvM8pFNoV9AI76Sn2UHliypex+O/LDhv0ILv+xJ3AEp5i BvHU9os8p3u8e9SL5QndnSoZPhgiffaPkxM2kV374YGPRXYPwvcpvSkoBUfIFSWK7FwclB2Z0gnw OHnmNWrxFlRfLM/sNiOtouerJMsFNua9ksxFPdifWRvvSb59CxYx9m+YncrY8HSvZ8Pp8Eb0mTzB FcpIvY5oaiA39j6gfXnuw2/OZ3gjCW9cxpP4ZHmK9+72vrc9HEitznJ/5R8mWt70biUXyXjXU3c9 dTsTLZXw/FE4jf6sY+4u5fnxQWb8NXaZZcx1KzQvyHOEx9Ootwn79rT2ktD/CHkNuT1AnsAzddhC C3ifPON7X7CWL5K7Vq+79NP3/YWSMejnAqJlHfeKE/VWqz8ongw+lii1O5FwitD72pN5+St5/m6R /e982etfZrf6EptBZMJz5Mn+lJYV6sdkl/QLpIfBDXjgC3q7R576vRLy1K9H8wR9jF51ZdRVGFc7 6ZX/Dh74E/rVMgq9xbNPDd4i+cTNW6g/pQ9WDj6h/d3YD2SWB8p7ABvncsUP0ddAfjyykTZnyHuA QAm9xfI2wMsQfZBPH2ZjX0neBrg/0n5fmIH+K1roLrL/CHLN8Cq8navHqmR/DD7DV+sgd8J6ORwP w/VYjvvYjfhTe59ZuY7sSvpNvDeP959luUoX2BqP7SAznCebncU/0+H1xFh9npXWwSaRfBWsAxPh LZTaZx//Qe7hv8fyAfiyv8y23wK5HpwZsQ5MhNLC9VhW5klzomi8iWjKoznOE24Bz5iL4S1wJ8/y 9Md9hie+h3m3cEqezuxas7Xcp7E8xXXvkTtebwltLpG63v3IhyJeBevARCg9+UneCdgn377Wk/UY 4yvyibb+ljbrwNvh6/Lk69WitekRr4J1YCKlt0DrMe8DaTnYLJ/6WT5tW3iDWikRxUurabmDeMP6 uRseEz7E2CvL+wQ7Cqvxv5C3DfYqIn+OnMLVU0TjraRvLYX6pGefr/VI72+yLvwZZDYpPUvpaTgE zT3yZK1XwjtF47fFfiy+rQJPCW1meFF2Z+Ql8JDU8s8Lvd20mSV6PZWWq8LvyQ/TvTWWvShtjIcX w9liE58qHojHD/5DPG+eZPfcLXLccPbQlZQ+iIcn4r2r4f3E2FxaSJU241fLHVHwME+j6731tnRs FNv2OVq/EMVnFs9QEjlTRbbtZDHjWXhY5MbydsLL5ypPSDv2vrG+RAJxWxGm0J8nudYAv4xlmlB3 xZ8TmNN98E7sJ2JfHTmf2b9ZNEGKRIi/FH0jWIF+ThfZPUYLDwS94QmZO2zukdkP2lK6EU1L2lyB 5kZ6no/PXxd9sDkoSZ9L4g359kWjIrsLKF30NvLz8v0BmFb0DHJtOE2+jRCVPgv5LkHROOSQFeBs 9GHdlcgraW0F/ALNF8h7sLF6N6dI3nm2gvfDPHgx1HAPnCJ0yghVDE0aVEI9EXkJXAOrhXJM3lcf pO6vaBbCPtRajJwOk7H5DrkGrAQz0H8It6HJhl3RxNOfY2hcNBtpOQVNFhyKPuzzUPrzCnImrIh9 O2wOwV/Qd0E+ixwg14XfxCQf1uS6jMgxonGO0s612KfCmujnYxP2JLTfDeehyYk1lVgN/S+yezHc A/8S+hx5QOhzZAWXwDUxWcsfhD4XjTMH/krpQtpfE44L+RLk1ZRq2CAcC7ITjoUWSkWjEP1X4bhi 79kWbqOFbPTNwtFhnxarajX9Y5mMIpOeZ9LDTHoiTEb/C3I1ob1uJi1nci1hc67VEX9eSvsnYUWu EsYJMaNnwtqMqzG1HoKtY/b+xAn7XB++BkvDOGFcBWEwR+i9B5vL2IOn0MeLrF+NYrgpkTlQPoEN IzMmn1udRp4dS7HymVgTZvMQ83gI/wvvDmf5/F5ZZYyuVWykrDLkvFA+vwO5BH4TTqF0SuwmWAJP ir47+jRqKWQVySVkDaJZEnEklFo3oblJNM5B/P9rxJGwBLPTHorcR0r1Ymy+iyitXYnnTzGiq8O1 E5M3YK3Rn4iixXrGfSOMivO/WjmfiFolGv8cNutE41dgHXU8z/cW8PC8WGm52481k3V6Xu7ViUBn kfjWWYtmgtC2LE9PZADdjfbP4u35WM4jMmvQ5i/n5ROB+jHZa7owigBvBKGM5ysy6pJQw5qxjrAE 8SmaBPxwVGop/KavjSJWfHgbnI/NvTALTX7Umvj2UuTQ8/Miis2bMbunuIaRvox/wpivQ/+P4JMf I982tzJxbilv0Ylk5xH4PnQZ+xbxoe1hcyga8qFuSzsfwXdpjfzvfCo26jiRXCNWw7I7+vno3xKN Ooy+FExiFh6N1r7MV0/arBpmSLgXHon9xkibQfm8hh3EeR2uQB9GRZgnM2j5KD15An0DiTGP+PEO ir2fWmR9osP8+aH0R/8gPvTykfMZ6Y2Uhrnu5zAPyHgtpbcXYVMFfVlsvkBuiPxilA9tb50maH6C YQ5hXG4L2AOyd7ihb8knzueQXclZjv462BTSmts5Zu+UXPKJvgzLlZB91t0F+8Fp6GdhGfZhPZrZ 8Df4drQ3yezMDfsssvc88nhqjYRDwt2NqAiIsbowoO5B5N2UNkZeFcWAyNANd+GqaD5E0wrezrXi 0e+FG9GzO9idd6ftP1ndiVF6N/rMaLVm0lomLWSSNzIpFc0h5HDXLgfD+43BtPYODPfEUcjcOTjr 8FgHLL9gjygTzrjsDm5l5BFYfgn3k/kHQe55vDshe6uP5wPulHQ4j0MZxbaibFZ3O/FPOGuhPhqX 7AgZZKeN8Bpsapw/zD6SCUeS1UVuT7b/Bn5IxuiKvmvsGlgC/5TA/6KvQw7ZiJc2RrLsBVdSmhVx JL0twWoSm1ci37aHor8dViTzd6O1bRGl7nUwh09GTvIJyOO8rX08Tnb8BsgNgqO2bkPky7kHfobv DnXhk8oWfpGMi/c534jsfor8N57Zw293xPgORg0+P93GU2dPPmPtGdwsOQH9UZHdUD7pt5Ocxmev l8jTgUpzW1i5wJc3V+neYHnG956y3CGyu9OT75OsFuoTnjwPFoqlOiR0BlGrg9DfJPQCWN+Tt4Id aC2DdpbxbqQV7fwmNkEP6maE1xW6e2Fbr6LlWX03tHfdOhs5D31PoR6h94leZLVL6NSldK/QT8Zm MlyhH7R0aaGt5zAW0Y+DtObPDa8I98FJcLWWt6l1hO4c5Kp+LysfFNk5Jd8otj20TwQ6STRqu7ZP jupzobtB9Gq72PvtqVs+bEH0brxeL2tKr5Vsr5egl1rHpdRPxGYZPI4+VWj10kK60F9Mr87CFnCS tOP2jPps7R1P6O0R6gy4gh5q1xHKWx3lIruuKxpnE6U8ZzkH+Nb09xLDboHkK3eqjMuVz5SfENk5 6cr39Ha78m55hjvBcopr87NTRuyduXAB1EI9kRaWuNMt17gS4dW0fPuotZ4uWVQ0zq/YLOSKfai1 GDkdJrvx1uY7bGq4Eu2V3ItkZl35tLGDyM42uEL+DUe3q5sIy0sGgKPgLGiEOoUWskR2h7qVZU25 Nlbd4SK7Zd0vZO2j34hlJpYVqdvOkTsxl9YOOc/JvZOTajU1nSNWLnTs6nbLOPLNQy2yU9dtQA/t WNQ5L1l2TCl1fFjgNhGN+6ptuTN1a8LUSN5rGSdUp2ltPmxA+zWdr/Gh9Y/7qzNe5gXNN7Q8D5s4 oToutdTP0hP3U6X4G4eGwqCPUL4/bzUvIr+NfBp5MPKjNqI+DZZajocthX4Jof4WrkBzCUwSutXh 09jfjk1/YRDDph0cTGkb5HuQ78VyOzyDvjn69cK41siDYC1sPkK+HjZD8w7ybOSHYE80C+lPaRhe 10f+jV51QLMN7qXWeeR9sCaa4fBuNIzXa0zdAmSP0vfgSTSdkW9BjuNa04TOz8ih9z6hhfuwuQH9 HvQNkbciv40f8IZ+Hu6A9an1aVyOfO4QzovIfgl4WTg7yJfAJHhdODsie2+HcySy7g9HwjxamxDO FLWqhfOFPCqcKSy3wzPomwvjWtNyLfQf0bdG2DMW78HQM9j0Q9ahT0TjjqY/leh5WHoO9sJLm5BH YFMGHqbWbuzDeawML6a3zLWPl/wwBsKePwLDXn1Gz8MY/gnL0fRtHe1nwzDeBhCB9C0YgiXX0h/A Ldj0hgPRHEU2wvh90mY8kRzUpu5QWsMmrjv6dHpSO1wveO8otd7CJhn9IerWQKY1/T1ye+T7kROR w4gaTzsrmIUY42oD18NB8GEsb6PWWmQiJBjG2MP1eJDrTkVugf4Ylngj7i5kl1qZyLlhbHP1Z0M/ wyrUXYrMfLl4L1gEn0QT5orZ4XqhhYbM8lZYhj53wSYLsqb8FGTmxesGm9LCzch9YSdsCuF+Su+E of5ySA5xWcvec7Aj7b8On4HzsSEfuoupdYQYPo6GuXAZi7cKsma9a7FcAz+GK2mtHvJpbHrAPmjI sQH2Abko7lbsyategMxVAvKqdwqyRvQPyIzIz0dD/vSw1HjYJQL1AWRWmf8yNstgmNOmow8z7WuQ edShV6dAsqL/NfI8mECvrsKSKNKsC00PNbuDN4ZaYSR8iR4/xJEB/Az0G9CzBvXVkLUfvECfcyCR 4zEKj5n18KobjiKcX3aHgEzrhfNFXY/MoMNrvQp3wTCKwgwTZsJwP3qAvrGneOG+RlToksjlICsl CDPz9UTvQ8RtaeJ2L2ucdjxWpY+f9XuUkuG9K2CYB5hfn3jWc+nPWNqfBYkEPQ6Gu/NXyL9AWo4n u8bTZ/8larHi4sKcthw9sxNQ6r1BXXKjHi69UqqoBawAn5cdJyaf7o2HLYV+CaH+Fq5AcwlMErrV 4dPY345Nf2EQw6YdHExpG+R7kO/Fcjs8g745+vXCuNbIg2AtbD5Cvh42Q/MO8mzkh2BPNAvpT2kY XtdH/o1edUCzDe6l1nnkfbAmmuHwbjSM12tM3QJkj9L34Ek0nZFvQY7jWtOEzs/Iofc+oYX7sLkB /R70DZG3Ir+NH/CGfh7ugPWpm07pZfA62sFej4R5aCZQWg2OolYj9LTvPQj7Qc11R8NKtBDqz8Fe 1N2EPAKbMvAw3I196M/K8GKuiM99euuHc0EfvEdg2JPPKA1j6Sdk+uCto+VsGM77ACKBvgVDsORa +gO4BZvecCCao8hGGM9sxhNRQW3qDqU1bOK6o0Ef/xaaZOoeQl8Dmbr6e+T2yPcjJyKH8/gwvA3N WmTmJRjGKMIIP0ibU5FboD+GJeOKuwvZpVYmci6WzyJXwX4pMt52GXuwCD6JJlxxrAKvC3IWJAL9 FGS853WDTal1M3Jf2AmbQrif0jthqL8csuJcIt97Dnak/dfhM3A+NmQPdzG1jgid42jwoUufvVWQ CPeuxXIN/BiupLV6yKex6QH7oCEjBdgHrNy4W7EnC3kBMlcJyELeKUgk6x+QGZGfj4Zs42Gp8aRL nOgDyKwF/2VslsEwA0xHH+al1yBRrUOvToHkEP9r5HkwgV5dhSURooleTQ81udQbQ61wxr9Ejx/i WCN+BvoN6Fkp+mrICg1eoM85kAjxGIXHzHp41Q1HEc4vuTQgL3nhfFHXY/3q8Fqvwl0wjKIwD4TZ JszeD9A3MrAX7gJEhS6JXA6yCoIwM4T2oSfJdd4VkPXoMXc+sarncq2x1J0FmWU9Dob71FfIv0Da jCezxdMf/yVqsWriwqyyHD2eDyj13qAu2Ul9oLWSd2Ly3ZUUP5G3MfL33R14I5St5VPvJbxH6kjp E76v5A1SsuV83qS5onG/Qz9T9F4glnYT8uXNCfreQn+X0KuP/hQtjKD0sDAYhZwNO9Dm8dCSqxfI 38LrJHlj5j6B5v7ofZe8/TvN27NOvEk7F74xQ7NUark70bjYH4fLGGOS0J3ESHvwTmwrb6vSkdP1 K1JLbFSR6J2Lordkluor3oml0U4Gtdry5qqFaJyLvIVK3pWtkFVD6ROwpzA2okj+Mrd7kXxTaEOR vJnsKW8w3J0iO3WRe1HaFnkj8h4sx4vsxGghldI3qLUbuWzYGpoDsSVopG4D2B99TCydc2gewz6F un+ltAlyHUoD5DuQp2LZgqt/iuURSseKHMuQ/nhdwlEo+b7rWZF1Ka5VHXmE4s0qGg/NDuz3CgNP SWzQE10HmwrILtyHZTxyEnJXoY0hkZdxxdXIc5CXYVkeLuHt0CHkbGzyqNtLrqjXRn2W0nFc9136 uQf5VHRFicYGyL2x7x9bL2/eRK92xeQtbgfanEvpJOomiP9txuO9KJpZzEgO7XeJPUMfxL6fyO5W 6bmuK7KN6aayG1KrnWhs3UW2dFFsrfUVEeK8GpO3oyul1OauZxivjKgOLRxQibzDX0sOlL/TrB5e Rb4FYXsrPV+OvgKeL8cYd0qb/ljaN7FHrc0abGbFJPIvpU1D6RbYUHrlLAi9J6NzpsA0sXdTY5u5 7g6ZHZHdDcipMB42ENprbUDezLWelDjkipNVsqwdua67QZWSN5N47DhXzEB/EG5llhdTawV92w9b E13Ekj8ATUzs9b4i+TShUtH3lidpMye8SjhfrK+z0SoTzxQgxwnlt79sdiWKvGmwjcRA0ERK/U+k D373onPMxSq4gpUodS8NeyKy9Yz46nTRd9wdzWGFcl18VUnmzplC39qiyZO5cwvw2zLkFrFW4p9Y NjbZlE5mFJOl/fM/oDnM527SQhJsKxq3tnyy4zXDw8fRbI2Nk+iVsThHmIv92MfDmjH5FQKfz4MW St90cuwprjWCFVEonxHQW0UPL4vJp0LZRfJNgHjG+CKjTpC4cjoRq9niAe/FcL7k6s6rYXSJZUCM 2dFtZmcXH6aQZw6EeUPWoB2d+PCUlAYr5SpOIW12oVc98WdZ6jZgLZQVvX1q4xMHoZ8oPdTdWJs9 Zb7UOfGA9ckKZuEGLGVEXWOfwK+4Yh0iWdq5O/YQdcXno8Qnls9Tdx91DxPhEucVxSdOhRif41B6 a+w0snwW4+HzLdisxH5pSHyygO8vzaP0UVpozoimc63m0Xc8NnNnJe2sDr/vRPtZ9Dken/+JGVkm dGbhn3dVhvVJafJDAzSThGq7eMN6bCZ57FFZa+Sc1tKOnaNf6ZvP7iN8F/vj4kl/MUxj7iqSnW4X e+ttiYSAq+zF53PIb57Ev81pZDPmtyfZZopoFN8lU5/DNfhqJasylTicif2GsBZXGUB/jjDeVlEG bolv5SobiZlZ4ShoJ170dofy+aaKrOL2ct3gYfkFJxvh8nd2b6lW8gzIVQ6yukcQaSm0v0KuayP8 V+KzFFkrmb0mmV2JnYX4N8SJRxbqi/0ZstlMerJXpZH3ZtBnkefbHcnGOd6oQKy60r7ujf9fDbNT lBXbsws3JYM1Y7+W9hdieQpv3EkLk6NRWDkI8/mscK1Fu5v8jeEk9x1k2RG246smjLQw9gFZeger bz1+kL9s7SH0f+Q7aWtpYQ4RnoOmFT6cJq3ZtbwKv8lcH4Yziavx6Euz7iYRFeNEVj+zo72PZjz2 hdGKXsGeFeb8NMkqxEOS+Fx9zrj6hrPPfr00LCWv7mZ1VCCLToI5aGLsj+W5i2jBnrIJDTnfX06E pOHJcXyan0cMV2JH4G4tjvsZu4NzX8G1KoivdGEU7YVkj7XkQMUowkxeSB4Q9sVmc2yBks/oR9Ar yTM30UJXbJYRw4PQpGL/bsQRzMsIor2QkY5gdGvZhZfQZ6uJ/VJ0gEjIYLzDrOWz4Y5JrVHRXVl4 5yZx+BZ1J6nKVt7MGNfR/y+FsYbSWtEZ+S0sy/7WZiTv9w7zRo63oPF89qQSxcayP5/WiUbRwq2+ fDe1V3BaficNORG5IXJD5PRgL5rFaAqRp8r3WoMVyIXI5yktKXJcY/mFNDTpdvakhY+x8fhttE+E wVnpQ5y0kxy0E8bNlV9Ik7/miz0Zt0x+IU3k8xtFjt0XLJBfSIv7QT5ZjrsYnuWX0L6R9kNZft3C yr+g59fP4p5FboM8SH4nzd8mv5MWjjE4KPbxZUWOS8TyN3rbiHb6YVOR0g6Mqxn8hVHPpHQD8ln0 qWjeh/K30mnx1WizJVcfwmfihcguNn+m5VV4qZArulx9OvIr1G0h30YOKf23Ptwv+niD3IIWQn0a fbgduTnyHbTwFfal6A+kP2lhf4I59GeL/LIZo24ajboRLffD5lbspyM3g3HUugaZ36CLuxOZ8cZ1 YxRylXRFT/jVtUaBT2lPZI+rHMMnU9E0otTOTuxK2ChOwxnYfAM/wrIIfUP6vI4+M3d8e1CfP47c FGbKVc5vlT6c/wD5S2GsP+yF5rBYnl8jHo70Y2AJWI52yiHfDZtSax21vkbehh7/nH+Sa72G/h2R Yy4tMONRH05gs49a1cJP0VWiMy3+iNJZd43KUcl3jBp4p5qQ0y93mFotO9BNGW2qKpsXi4pUOZWk AlVJ1VBlVX3V2Pq3teqk/qT62DZuVHere1WWGqyGqzFqamRfUsWpy1SKukhdqZrYVq5VnVVP1dde NUONV/epAWqIGqHy1DT+/dqwjlHxNuPUtBm9gd3XrlJtVBd1i7pNueomdY/6sxqo7lQjVb6arsor 3bF79w6qU0a3G6qq/j0yOldV82nlYn6PuorN6am2xYb2TuA6db26QfVStyttd/geaoKarLJVjhql xqoC6iSoqupy22aaulq1VV3VFeoB9BVUaeuHaqqiqmXbbaSa2buCdqqD6qZuVf1sv+uqm9VEdb+6 Qw1Vo9Vddh8Pe1BGlVDV1aWqtm0hXV1jd+qOqrvqrfrbvaSeylST1BQ1yGbhXDVOfic7K210ls6E fWE2HAbz4ISsfjm5egqcBRfApXAlfDWr3+iBegvcDt+HhXAv3J+VNXSEPgRPCT0XloaVYV3YYkDO 4Du89rALzBgwbPhQryfsCwfAIXAEzIPjs0f1y/LugzPgXLgYLodr4CbbcD9vO3wfFsK9OcPGDPX2 w0Pwe3gCnoUxoe/lDM/K8RNhaVgBVraFo/wUWAc2gE1gS9gGdhgu7XSFPWAveDvMhjlw1PBRA4b5 Y+EEOHmE6AvgLDgXLoRL4DK4crSdI38NXAe3wO3wfbh79OBh2f7n8AA8DI/DU/Dc6KFZIwIFE2Ey rAxrwbTRoxs0DFrCtrAL7AF7wwGWaUEOzIXj4WQ4A86xbBQshEvhCrgGboBvWqYH78JdcA/cBw/C I6PH9B8d/AjPwN+EcS6Mh2b0mBGj45JhRVgVpsK6MC3XejKuGWwF28JOsDvMhPLmxrW5J/mfOGq7 zi9Vlf5PksOPbP/v9JW89wpsXoz/t515nIWyo6r8N5b8g9Q2z5Xg9/z/Fcmx2ft/Ztk/TJcZcW2r cuZE+5Qw8Q+zzB/mZf+Npf8wq9JTzdH5HWUEv9eZf0htd6ryqsI/KV2M5Nr9qfo/dazBzz//8WNN lfpPHB27k/5j/mOfOHYH/8cs9YfY0N5t5Npdf45aqtaoN1WhOqhOOZ6T7KQ46U5bp4czwMl1Jjtz nKXOGudNp9A56JxyPbey28Ud5xa4C9zl7jp3h7vXPeKe04m6oq6jW+hOupceosfpAr1AL7drUK4V H8as7lrsvH+x8xnFzmf+7twrVh7YZb5HxTm/O09Mv/A8acmF9c2ZC9tP7nXheTl1Yfvlkoudpxaz 71DsvHex82LjKbf3wvPytYqddy92PvbC/ldafGH5ZRsuPK9Zt9h5/d+d2/VXs0Gx8vs4d21+KBuO 8PLu4bFWOHLPxlx5m6tSI+3O6Lg3Oh6Mjj/+T9Z10qNjq+jYITr2uLAXdQouHOUVTS48rx+70P7K nheeNyw2C2lpxc7Ti53vLHa+q9j598XOj1943qjs76LMCk2Si503udC+SbNi58XLOxU771LsvOuF s9i8k6WxnslyHlXZzkKybX/7n7IrdY58I8Mvw15RVgVJHc3WpA7mTbPZbLGawDnmHLN2Pzo/Ksc5 4ZxQrnPaOa20udZcqzxznbnO7psSD65up2W+XLesW85q7LW1kf7okrZmfXte3j6NjFIL1Va1X51z km0f4m2vkpNuVG5Sh6QMy45JN1nK6ErbnFzVPi00sM88Lc1hpd3Stk/fcdxq7JOWW86eH+W41exW rj3bY7nV7LXcrjwitKKqbvbbvm62pV9x3GoO2OMWe/41x62/szwYWX4TWR6KLL+NLP/e3870twv9 vYH+/r2kKyXdKOn++xKzgx6+Sw/fp4d/L9lJyS5KCilxVZxr/7PLrIQrf2VS2i1tvVrOelUntU+6 3np9s9msAtunLdZT9ilb1qLm80L7fy1b/z47qvvsaSmnlJroVHQuU5P4t5InO72c3up+J8cZqqbx 7yMXOCOdXPWAU+AUqIec+c5japbzk/OTetg545xRjzi/Or+qORIa6lE3cAM1101yk9Q8t4xbRs13 y7vl1WPupe6laoFbw62hHndru7XVQreB210tcnPdMWqTm+/mq802+49Tr7v3uBPUFneyO1m96U51 p6q33DnuHLXVnefOU9vcpe4narsuaaPmN52u01VMt9FtVZHuqDs6rl6kFznay/X+4nh+lp/lpPkD /YFOI/8O/w4n3R/sD3Ya+6P90U4Tf4w/xmnq5/v5TjP/o2Ca0zzxpsR+zg+JU0s4TiypdFI7966k W5OecF8oOaDkEPdkyYklZ7jnjGvidbypZqrpUqaGqaFLm5qmpi5jLjeX67KmtqmtLzJXmCt0sqln 6uly5kpzpS5vGpqG+mKTbtJ1BdPENNGXmGamma5oWpgW+lLT0rTUlUwr00pfZlqb1rqyaWPa6Cqm rWmrq5oOpoOuZvqavrq6GWAG6Bom22TrFDPIDNI1zVAzVKea4Wa4vtyMNCN1LTPGjNG1Tb7J13XM XeYufYWZaCbquuZec6+uZ+439+v6ZpqZpq80BaZANzAPmgd1Q/OQeUinmYfNw7qRmWPm6HQz18zV jc18M183MQvMAt3ULDQLdTPzhHlCNzeLzWLdwiwxS/RVZqlZqluap83T+mqzzCzTrcxys1xfY1aY Fbq1WWlW6mvNKrNKtzEvmZf0deZl87Jua14xr+h25jXzmm5v1pv1+nqzyWzSHczr5nXd0bxh3tCd zFvmLd3ZbDPbdBfztnlb32DeMe/oruY9857uZj4wH+ju5kPzob7RfGQ+0hnmY/Oxvsl8Yj7RPcyn 5lN9s/nMfKYzzZfmS/0nc8wc0z3Nj+ZHfYs5YU7oXuaUOaVvNWfMz7q3Dd5+5C9F5nKcc845m8WK nCKbPXzXPgewznzWWcA6i3MruhVVvFvdra4S3FpuLZUoUahK+P39/irJH+APUCX9bD9bGX+QP0iV 8kf5o1RpP9fPVWX8PD9PlTVVTVV1kaluqts1nmJSVDmTalJVeVPL1FIXmzqmjqpg6pq66hJT39RX FU0D04B/A6WRqmQam8bqMtPUNFWVTXPTXFUxV5mrVFVztblaVTPXmGtstpL8W4P8m2KuN9ermqaP 6aNSTZbJUpebgWagqmXuMHeo2ibH5Kg6ZpgZpq4wI8wIVdfkmlxVz+SZPFXfjDVj1ZVmgpmgGphJ ZpJqaCabySrNTDVTVSMz3UxX6WaGmaEam5lmpmpiZpvZqql5xDyimplHzaOquZln5qkW5jHzmLrK PG4et/l6kVmkrjZPmidVK/MX8xd1jXnKPKVam7+av6przTPmGdXGPGueVdeZ58xzqq153jyv2pkX zYuqvVltVqvrzRqzRnUwa81a1dG8al5Vncw6s051NhvNRtWF/HcD+a+rzZ1vqm42d25V3c12mz1v NDtsts0w79pse5N532bbHmanzbI3m102y2aaQptl/2R22z2jp9lj94xbzF67Z/Qy+8w+dSv//khv 84P5QfUxP5mfVF9z0pxUt5nT5jTvvcLnK0elk2tr29jynT5OH6se6AxUjveK94pyg/PBeaXjW8W3 snn4P9H3n+j7d0dfRaKvjtxtOYODz/4TY/+JsX9TjDn+EHs/X9qp7qbr9l5PVUm1UG1UJ5Whetnn hSH2/n2cvbMsUA+rBWqJWq5Wq3Vqi9qhdqm96oA6ok7YO3vlBE5SwlilE0Yn5CbcxXFMwjiOeQl3 c8xPuMcec600gWNuwkSOYxImccxLuJdjfsKf7XGMtZvMMTfhfo5jEqZwzEuYyjE/Ybo95lm7Ao65 CQ9wHJMwg2NewoMc8xMessd8azeLY27CbI5jEh7mmJfwCMf8hPHKtaX3WY5JmGaZlzDTMv9f8Mij jHx0wtzIM/Miz8yPPPNY5JkFkWcejzyyMPLIosgjT0YeWRx55C+RR5ZEHnkq8shfI488HXnkmcgj yyKPPBt55LnIIysijzwfeWRl5JEXIo/MseMfnfAEHlmKR5b/ix5ZFXlkdeSRlyKPrIk88nLkkVci j7waxcprkWfWRZ5ZH3lmQ+SZjZFnNkUe+Vvkkdcjj2yJPPJG5JE3I4+8FXlkW+SR7ZFH3o48siPy yDuRR17EI2uJlM14ZOu/6JH3Io+8H3nkg8gjOyOPfBh55KPII4WRRz6OPLI78sgnkUc+jTyyN/LI Z1GsfB555ovIM/siz3wZeWZ/5JmvIo98HXnkYOSRbyKPHIo88m3kkXfxyC48sodIOfAveuS7yCNH Io8cjTzyfeSRY5FHfog88mPkkZ8ij5yIPHIy8sjpyCNnIo/8HHnkbOSRXyKP/Bp55LfII+cjj8Si WCkKPZOoQs8kOqFnEt3QM4k68sxhPHIcj5zCI+ckUuTfAJZ+8zatp6rt7HKf1F10N52t79BD9J16 tB6j8/Vd+h49TU/XBfoBPUM/aJ+CD+iv9UH9jT6kv9WH9Xf6iD6qv9fH9HH9g/5R/6RP6JP6lD5d son8G33OTmenvcAT8rf5urPurFzdVXdVWg/QA5WnB+nBKtCj9CgVr3N1rkrQeTrP3gmM1WNVCT1e j1dJeoL+syqpH9ePq4v0Ov2eSi7ZuGRj3jJUVIleZa+KV9Wr5lX3angpXk0v1btcRmZ7dJq36+H9 SqXo3cQVUmbrhO+uHZ3z/yxqRRZ15d2UzrElykv25Hd8a3m1VInf1Quvm+yV88p7F3sVvEu8it6l XiVr+/+v66oUVcor6130X+x9B1jVytruzCRZs0iyQi/SBMSGIosiYhcLKioWsGOhqdhQRN0qNuzd bUURxYKigr333hV7Q8XesReKyP0yoBv3dp+zz7l3n3Pvff5nHmYmyVpDvvlm3vf9JlkJL/AanvJa 3oAXeYmXeR2v8Ia8Ea+ud/Fg20g4SfU7hK/J10Iy78v7IgWOeSMrbiWXwqVy67kj3FHuGHecO8Gd 5E5xp7kz3Nmf9bi6WsYlc8nQ4ipOvd9qLbcW+nsdBzgKPXcY/t997sX31pPhU2vh6C5uN7eH28vt 4/ZzB7iD3CHu8M98zFpfya2E1lM49WkhqVwqtL6eA3SGMzwLrat2qK1XQmY/bfUndrA+u1/UZ+r3 /uLoYt9TRwN8T+hLtqAxaCwah8ajCWgimgTzegqayt5cPQPNRL/CLJ+N5qC5aB6aj+LRApjzCWgR SkSL0RKUhJYCAixHK1AyWolWoRS0GvBgLUpFaWgdWo82oI2ADpvRFrQVbUPb0Q60E7BiN9qD9qJ9 aD86gA4CchxGR9BRdAwdRyfQScCR0+gMOovOoXR0Hl0AVLmELqMr6Cq6hq6jG4AxGegWuo3uoEx0 F90DxHmAHqJH6DF6gp6iZ4A/L9BLlIVeodfoDXoLaPQefUAf0Sf0GWWjHJSL8tAXlI++ogIYxpi0 JK1IIAkirUkb0pa0I+1JB9KRBJNOpDPpQrqSEBJKwkg4iSDdSHfSg0SSnqQX6U36kL4kivQj/UkS uU5ukJskg9wit8kdkknuknvkPnlAHpJH5DF5Qp6SZ+Q5eUFeciLJIq84ibwmb8hb8o68Jx/IR/KJ fCbZJIfkkjzyheSTr6QAIEj9LQbH8ZzAaTjKaTkDriXXigvkgrhgrhPXlQvh+nD9ubHcOG48N4Gb zS3gFnEbuI3cZm4Lt4PbyZ3j0rnz3AXuIneJu8xd4a5y17jr3A3uJpfB3eJuc3e4TO4ud4+vztdQ 3wnOX+av8Ff5a/x1/gZ/k8/gb/G3+Tt8Jn+Xv8ff5x/wD/lH/GP+Cf+Uf8Y/51/wL/ks/hX/mn/D v+Xf8e/5D/xH/hP/mc/mc/hcPo//wufzX/kCQSeYUF9al9aj9WkD6kcb0ka0MfWnTWhT2owG0Oa0 BW1JW9FAGkRb0za0LW1H29MOtCMNpp1oZ9qFdqUhNJSGQYqA1B1SJO1Je9HetA/tS6NoP9qfRtMB NIYOpIPoYPoLHUKHQoqlw+kIOpKOoqNpHB1Dx9JxdDydQCfSSXQynUKn0ml0Op1BZ9Jf6Sw6m86h c+k8Op/G0wV0IU2gi2giXUyX0CS6lC6jy+kKupam0jS6jq6nG+hGuoluplvoVrpNfa843Ul30d10 D91L99H99AA9SA/Rw/QIPUqP0eP0BD1JT9HT9Aw9S8/RdHqeXqAX6SV6mV6hV+k1ep3eoDdpBr1F b9M7NJPepffoffqAPqSP6GP6hD6lz+hz+oK+pFn0FX1N39C39B3Npjk0l+bRLzSffqUFWqTFNJmu pKtoCl1N19D39AP9SD/Rz+Iv4hBxqDhMjBWHiyPEkeIocbQYJ44Rx4rjxPHSMClWGi6NkEZKo6TR Upw0RhorjZcmSBOlSdJkaYo0VZomTZdmSDOlhVKCtEhKlBZLS6Qkaam0TFourZCSpZXSKilFWi2t kdZKadI6ab20QdoobZI2S1ukrdJ+6YB0UDokHZaOSEelY9Ip6bR0VjonpUvnpQvSRemSdFm6Il2V rkv3pAfSI+mJ9Ex6Ib2W3krvpQ/SR+mT9FnKlnKkXClP+iJ9lQpkJGOZyJzMy4KskR/ID+VH8mP5 ifxUfiY/l1/IL+Us+ZX8Wn4jv5Xfye/lD/JH+ZP8Wc6Wc+RcOU/+IufLX+UCHdJhHdFxOl4n6DQ6 qtPqDHSiTtLJOp1O0RnqjHTGOhOdqc5MZ66z0FnqrHQldNY6G52tzk5nryupc9A56px0pXTOutK6 MroE3SJdom6xbokuSbdUt0y3XLdCl6xbqVulS2FXn9naPltjH0mWEEBQtnK+lPMHfr/CNQN+v8Z1 4DqiG1xnrgvKYGx6m+vH9UN3gPFGo0xuFjcLPeDiuXj0kDH7I8ZbjxlvPWG89ZTx1jNuG7cdPWcM 8ZKvylfDiK3AE0EURKwXjAQj7M7W2D009zSP8VOqp174FVtvfy9OEBMIEZPF/cRSPClmEw+26h7K 1ttXAtu/QwbICjkB5weAAloIDLAP0Bn+hTQOEeUkq6WymnqNxghZIFvpOGxfk05AfkM6CXmGdOb7 Z69B7SDSgp6wQvagAFwKrx5JN9T9Ugbkp6XbkJ+VMiFPl7LUbyrmaouKhdqiYqm2yNrKZ61+u0Zj AFtHFRHy44r0wxFDdsSIHTH+4YgVO1KCHbFmRwgyAK/pwXc+RL3PvDqpjgjxI36II41JY8ST5qQ5 EsTZ4mykEbeL2xEV34hvoD0ipJALfxPH/siw/3/z63+GYVUO/au8+XdypgkNp91oDzoMGEhlzgbA mU0Zm7UEZprOeLIdcKTKjoXcGPEXWTH2n/DhH9lwAfDgbwxYnF3+b2PD72wHvBgP/F2cFX1Bfaja o1B5qLqjBSiPnCLdkQeqoz0ojsVMcywBxZELo7YNjNQu6rj8xp2kz4+8KRvJxrKJbCqbyeayhWwp W8klZGvZRraV7WR7uaTsIDvKTnIp2VkuLZeRy8rl5PKyy0/ZdtzP+VYxUERF+kusm/pH3lUMFSPF +A/se1w6IZ1kHHzmpyx8DXj4hpQh3ZYyv/GxYqFYMk7O+lNWzv8jLytWSgnF+t9i5x+4Wc7/D7Bz ACbYHEJZa1wOmeEWOAiVYtfcy+HOOAJVwN1xd+SJI3Ek8sK9cB9UGUfhocgHx+K5qD5eiBNRZ7wV p6NQEk1i0HAyiAxHo8hIMhpNJGPIBDSFTCLT0Ewyg8xCc9nV8wVkHgG0ZzH+Yk7mTNASzowzQys5 C84FreIqcm5oD+fO1UcHGONfZox/hUVvV/llfDp6LhgLxthK+CR8wiWEbCEbWwu5Qi620UB3YVvN JM00bKeZoZmNnTRzNfG4rGahJhFX0CzRrMFumlTNFlxds01zDNfXnNCcx601VzVXcWfNDU0G7qK5 rcnEoaAN8nGEpgC0QRz1ptXxDlqT1sb7tOW1LvigtqLWDR/Wumvd8XGtt9Ybn9BW1VbFJ9XrZ/iU to62Dj6trauti89o/bR++Ky2sbYxPqdtqm2K07VB2iB8XttW2xZf0HbQdsAXtV20YfiSNlIbia8b QNiPb4ihYhi+KUaIPfAtsacYg++Kg8RB+AXwbAJ+CTy7H38Ens3GXyUidSRU6iQNJSHyEvk+Gamb pltIDhfe3wLR6Dp2xaUT7la0Z1uxPRhVQ5oi7VEGNI0XHE+GpObrQBUks1Ld2lu0tRe2bkNS77Kp gCvAqKmE1bcg+mAfaLMhbgjk0gQ3QTyOx/HsLpsTKESwFmwEW8FOsBdKCg6Co+AklBKchdJCGaGs UE4oL7gIFYSKgqtQSXAT9IK74CF44kv4Mr6Cr+Jr+Dq+gW/iDHwL38Z3cCa+i+/h+/gBfogf4cf4 CX6Kn+Hn+AV+yXM8z33iPnPZXA6Xy+VxX7h87itX8L+zjwdTeMJWGnj2awVjtvZjBYlDtpB46Lmy YGlFpN6X5gZJC71aDXRiDUgiqgVJQvVRAySjJpAU1BaSIWqPOoA+7AzJBIVDMkU9IJmhASgGmaMh aCiyRCMhlYDZSZA1NsRGyAbmqDWyw/bYHtmzu2NKwnxtgRxgvnZAjuyqrhObqaVwb9wbObP7ZUrj gXgQKoOH4+EwpyfhSag8noKnIhc8E89EFWEGL0SuMIO3okr4AD6I3PAxfBy54zP4DPJk601ebOZ5 M03tz1adOrNVp67f18KOFK2FuUJP2RF34g6K0Vt9PiSpT+qDYvQn/qAYW5FWoBjbkrZIAN0TgTSg eHqBYpwoTkZacao4E0niSnEVMhJXi6nIRLwqXkMW4g3xFrISM8UHoKVjpRHIEdhjLHJWmQGVB2ZY iiqoOI7cAMevIndA79uoMiB4JvIGDH+AqgCOP0I+EFs9QVUBy5+haoDnL1B1wPQs9deicH7VSfB3 W04V2VIJbLH/wZaqpCp8VrWIIy0gluGZRQKzSAP6rgOizC4tqLf+yIDZJTK7dMwuE2aXmbhO3AAW bRK3IRtmowOz0Ul8Ij5DZcQX4muwS7W0ErPUnVnqzSz1Af5LhvhgFUQZtZnVDZjVDYGXPqEmwEr5 EJmoFjUmPYuuvjaF+RnOLHJTbcSt2LxH3/cgtpZJcA9c5/s+goNwRdgy+/45mAE/6YsapAb0hdoj PPOxwPpFw/qFsn7Rsn4xAN3bCYmsdyTmdZn1kU5sL7ZHCkTmI5AhRF+zwPdzxARkCzHYNuQs7hD3 I2+IxF6jWuJbMRtFgIaYgPqAWpiJhoI6SEVxwP1b0Vzg+hsokfl+B/P9TmDwe2gXGwG72QjYw0bA XjYC9rERsJ+NgAPA7K/RQWD3t+gQMHw+Ogx8rkHnQONYoaugaxzRHdAyLugxqBIJvQJ1YYzeAsdb QwQASAgRUn+E1AgS1VVXGVBL9b4tFCgNkxugc/AdO7yA3eXI/eYRxH4VCdGeOupaFPOI/jePoCD1 l8hF+wiqw66em33/HEGcuEhcAf/5gHgCRluOpI5f2Mvi7MLzcWRnoi/67wT+i/W/g6zwTXOGQ4jh EGY4xDEc4hkOCQyHNAyHKMMhLcMhA4ZDIsMhieGQzHBIYThkyHDIiOGQCcMhU4ZDZgyHzBkOWTIc Up+YcQgskEkjbhf0xD+7DkOwiE3gLJ2wC/bA1XBd7I9bwdmF4p64Hx4E2iUOT8TT8Rz4r0l4JU7F m/AOvA8fwafweeibW9APT/Er/AHnAvhriExMiBWxJ87EBXrXG7uA9eWgL1xZ2QHYTy074aqs7Iyr sbILrs7KrrgGK0NwTVaG4lqsDMO1WRkOM08tI7AvK7vh+qyMxH6s7A2MqpZRuDkrFwqWaslvE6xY uV0ooZZKnlZSS8FUK6ulZoVWx8q9WoWV+7SGrMzXGrHyq9aYlQVaE7UE9WLKytqGmP2fnrg8IIEh 8DyBrYqQdwC2V7UD4AFYCWMQbHSHvCv2gDwEe0IeikFHgG2VIQ/H3pBH4CqQd8N11Xs/cD3Ie+EG kPcGvUDAqkaQ98ONIe+P/SGPxk0hX4ibQb4IB0CeIJghAvaaQ75dUFc+8rTgGLAURjXYyUO+Vwt6 A2zUqHczaSnkX7VayAu0BoiAbaB+tLVReZhVwcC3vYFnY5H6+/s5aBFagVLRFrQHeOwMuoxuQeT/ EuZ20fU8GElWMNadYSzpsTeuAaOpEQ4AhOwAdncDK9ZAby2EHlrLyk44lZWdcRoru+B1rOyK17My FG9gZRjeyMoQvImV4XgzKyPwFlZ209qpJdhor5ZgZUlW7tU6sHKf1pGV+VonVn7VlmJlgdZZLcHi 0qysjRcz/y1hnktinlvKPLeMeW4589kK5rNk5sWVzHOrmOdSmOdWq/7QmrEeN2c9bsF63JL1uBXr 8RKsx61Zj9uwHrdlPY4Rb4jYXd0cwwrEZjo2VH+ioT7HO4DdU18OeQAXF61EYQs21izZGLFS/7fa Ci7xvdZDHUkq9gKezGNjheXqFTJsBAiFsDlW30KvIhFh+KJymhWahFvjtrg9bofb4B5iO2CfDoXr wmQgGUEmkrncQm41t0n5ouQrX5UCwNdEcbG4REwSl4rLxOXiCsDag+Ih8bB4RDwqHhOPiyeUzwpR OIVXBEWjUEUr5oi5Yp74RcwXv4oFEsCe9Ks0S5otzZHmSvOk+VK8tEDaJm2Xdkg7pV3SbmmPtFfa J92Ubkl3pLvSfemh9Fh6Kj2XXkqvpDfSO5nKWtlAFmVJlmWdrMiGcgW5ouwqV5LdZL3sLnvInrKX XFn2lqvIPnJVuZpcXa4h15RrybXlOrKvXFeuJ9eXGyiyolMUxUQxVcyUbCVHyVVsFFtFvQZZhkV9 iEV6AiiHJsBpPUlvYO0YiOhkMhwiOh27+1lh8Zshi8qM2NqrMbeR24hMNOs1G5CpZrtmOzLXfNZ8 Bt0GsQqyVGMV0Dd3xEeovBqxgJqZCNxdDWL2rageRNs3UFOIuDNQM8bdAYy7mzPubsG4uyXj7laM uwMZdwcx7m7NuLsN4+62jLvbSV+BtdvLRsDUoYyphzOmHqWYA1OPATt3oQ5/xaP/ngf/Fj9985DI ehOx3jRg/WjC+tGG9aMzs9yVWe7NLG/JLA9iGqVtYeQniIKOzUJ/pK7r1kX2xcf/70fxn4/HwrED LRizkYLYSOGYhzXMnwrzpyHzpxHzpzHzpwnzpynzpxnzpznzpwXzpyXzpxXzZwnmT2vwmyWyKTp7 SVCKnb0CerNoxqpzno1TxMYpZuOUsHHKFX1XFgyLfdcKVMl3FPg20xlysFnARrLARjJlI1lbGMXi t/gTzitSA8bEgtiQUqQ811gIEyKE7kKkMEAYKAxWHJVSSmmlrFJeqaC4Km6Ku+KleCs+SjWlhlJL qaPUVeorjZTOSrjSTemh9FGilP7KQGWwMkQZqYxWxikTlcnKNGWGMkuZo8xT4pWFyiJlsZKkLFNW KCuVFGWNkqqsUzYqm5WtynZlp7Jb2accVA4rR5XjyknltHJWSVcuKJeUK8o15YaSoWQqWcob5Z3y Qfn0P/dc/s89l/+H7rkkyAg0fzfBVMkDzq/9l+4ph5mIe2puFbsDWKveK1N0V80/vEfm+3000Aap STp/j9kL9zQBBPoW8xL8QX1bBKlMfOAT9WBfc9KStCHtSTAJB6zqB6g3XL2m9bOkXscqnqCVH5PP H5N61at4Uq+R/TTV+13yU6+g/ZCa/zGpV9OKJ7DlTxLwwQ8JbP4xtf9ZAv74IUEv/Zg6s/Tbdvjv UndIPf8k9ftZkr7+mIC1fkwlfpecfkxF9hWeL2vhf9Ym/mRtAqM7wJ81gOsbgcoOYs9B+fb0E/VJ KJPRTDQPop9lKAWtg/hnFzqAjkEEdBFdh/7Ts2u9/2ru82/lzf+d/KfrH4WrIzIU89S4B/mqsQBw nQWLHtRrHBiXhziaANurzyech+dDPR6rz7dcDJEXwVvxa6i/wW8hXnkHaIKBLT9B/TPOYZyZB/Uv +CvUC4j6/iFCePV5iUQDdcre4CMRiL+JjhiyX0JCjE1MiPp0OHNiAXVLoj5zzJrYQN2WOELdiUDk RpxJWaiXI+Wh7sLeFlSBVIB6RVIR6q7EFeqViPqssASSAPVFZBHUE0ki1BdzDdmzfBsjjvMXTNUn pgpgr2Ctvj9L8BMaIk5oJIRAPVSIhHpP9U30wNWDof6LMBbq44RxUB8vHFCffS0chPohLSCzlkAU SbRlDHohbNDbAJSeQR/daoR1a3QQ9erW6g5C/ZDuKNSPgVLFij3oDA7UZAGL8ACVDYlhmcLfODPP EBRa9Mvc3zQIZhoEMw2Ci/2CFDMNgpkGwUyDYKZBMNMgmGkQzDQIZhoEMw2CmQbBTINgpkEKz5Aw JYKZEsFMiWCmRDBTIpgpEcyUCGZKBDMlgpkSwUyJYKZEMFMimCkRzJQIZkoEMyWCmRLBTIlgpkQw UyKYKRHMlAhmSgQzJYKZEsFMiWCmRDBTIpgpEcyUCGZKBDMlgpkSwUyJYKZEMFMimCkRzJQIZkoE MyWCmRLBTIlgpkQwUyKYKRHMlAhmSgQzJYKZEsFMiWCmRDBTIpgpEcyUCGZKBDMlgpkSwUyJYKZE MFMimCkRzJQIZkoEMyWCmRLBTIlgpkQwUyKYKRHMlAhmSgQzJYKZEsFMiWCmRDBTIpgpkW/PB/n+ tBDr41Casb3Ier8+znq3xsBlfKPxn3WYkqQ461TYlUIwdpf0BhqhgsIRawHpQzRiBQ3mcVwVgvmk QH1LfcVie2yX2Y+yZZdzaqDmKBQNQFEAohEoBv7Uyzu19I7FGuPNhg9Krba24+Dw81tyOy6vvO98 /H1+TVKceZw+jj+sj+PWJnEEE2LqCafo+ajs+OWKv8sodsKeet33s8UCnNdgdppca15jSloHupvq jdUNranYNmRAj8i+3WOi+rob6RV1JzWlrSLC+0T1DXe319uqe0RT82aRYdFRA6K6xTjUi4ruFxUd EhMJ33DUl1SPc6ZWvx0PiuwT4RoYE9Knn0OLer56e0udu6fe06OKh17v4+HZATa99N7fN/WjN/8t Z6bTS+pxyZRv1rxFK/ey+tKFm/Z960X26xER7VA/sIFDg8CAan6VPXxcPatUqeLq41vF2720vlSh RbY/tSgwInpQZFiEPg47Fe9hLCAuDlAK9oskDmN06s6pEoYl57WJ63K9rsdlbZ9tiQcOZcX6rG3n mdZrdIsdEx3FTuvnu87scPxwpU1NL4fFtMvPPDop6Lx0Jn/RWOMhqcsdnfp43l13p3SdBrMCdGHa ClOq3G5Oe95ySTfqMKNtp8SauZZh5Fi/Wrudsjpu/Oyx62H/PUMKsk8/a1s7Ztjjd8Nj27ZzS72o pNyYeKNOyWpOvvcNypCkM49Kn5vafUymX/a4ZodvdrM/PmBE9S2DLFcmJyXFtE551NXKN9TneITf Wt6iW5vnOStP103vFBTuNjo73QcZGvW6N6bStFqNXjZu4/9yYeSH04ZGedTLP7Q3ntb3uMPYU8EX whbYT+/00jDZotGaXncc3QgH82h5HDaAHhH0dtCldgrIcTPUzqZW1tG3mtn73Gt6b0mVOnm8Gc3G kF0p3kpvMcqslFf2jVZ+/cSsOnmD8jZX2HC48mZDfZD6gZJ8M30TfeOkhkkNxtfrERPTr5qbW1h0 70p9vvmpUlhUH7d+vSLVvW79oqPCB4bFDHD77kbVi8yJMCorwUf07TRamJiCQDHmm+r99Y2+bevJ +BpF/2Dw4ME/+wcR0f+g5Ri9qXq+pXlZL35rktP+bkJy6ighBQ+mcs9fj/DZuTN2SfVWY1bklvK5 zO3o2X7r87tRE7kPUS17zq02cNxT21v0aECiTco554Zmzs0rD964aE/ZYTM6Nf+imTJ/fk75hM91 7FqNnj6oETfiXYLl9nU3Ojr9Glbdo0vlvGO/1jjzWlkwqpbmVx/ToXLTfZ4Z+7PSfI/F2jjHmt4S vzSZ7CDYGUz6tSoNcAy40zu23+61bx2mZ8f/0vXWlDnpEfvmzTRMWjQ2K3hrrG9SiOveet0jrF3i Lq+a3P6zx4PlT45O2+S0e1a56xumBs7o0bDh0ut4w9sQ8yOWS10fVOvdPGp9zVd3ym+of/rwrO67 0DnD6cavL5A498Zz4hNbNvolze5qnW0AYy8Bxi4Xg7ENxuvFKeerL7nNYHjD72FsyN8CFqX0joWT 3rr48fAIh8DI7n2h1WJA5u7h5eHh6elZtRDIvL5v6keP+U8AWdHHuT/5+D8Fpqfrg5c56LLLxe4R ho1Me/ViUGq5wNrVMuoM3zzd83Hb2sktzb2CktO3TFldO6XKPdcWWZUtAl43G5phOmjihopv2gev fnHvWvmBD23GlU14n+262Ne7glQnb1/1XTuDB862aNXklOfRKhvevxiR8tHXPFgbYedY5U3FXU6S 0UajxMFO48bGNt9pM3PDx+Vfp3yQFwYkfTwpOt5f8wB7N8x3i+s5mvu4uvKtOW0T85pcVuIyfGaY fH1wdWjMxPB7oUdKV3JZl2hVUrHfdmi98xalxZ47trODG68csnVbxrmcfsPK4bE7XMqn718tCPfu GvZvlp8WXGpM+RfHj/qfeFp27KURx+pJc5GwsXlE/6PfgKkr9EjwzyYqVwyt2vdf2cGz2c14Oqpg rP2+CTnRHr7v9C3Vw8Y84MUKP3393/sHRoi6KZi6eLpXrlq5gle3kG760CruriHhnlVcvUJCPF1D vGGzindomL6yh6eXV0j4DwB42vjpqYtbLNrhk1UqeVpY7Gy6UCypb1MIgM31AIFJAIHjG/xLAAhj GUYyDOIueuA6d1cPvbueQWCHYhAYoAcQLAaBtf4aBP5J2zE/wzv3a31dTNp6jr6SeOxFTrXL9Ztp F7/qnNmz4/Yh6WTRnkE9Fs9cukg6PHLZ1LfNds2tmqe7ey/hQydnQ5tpE82rxWakndt8sveuqhUb DHc2Diqj1+kKGj7n6KOH3TpVHJZot9oo13ZDzLvmkb0Wr3YeezNrXlLmgBWve1qnNgld/Db2gNnI Rmebbaqf86bG7D51rz+NfWyZlNCjh0G5HDL/tTG3q3urtIPPNg9YeTHsrP/9Wg/fB+QXLL27m5hW 7+Rwp3Xt5etm1nH3GViuM7/ar8/jj0OH1Nlb8uzTBlfW3e9U6+PA44+7hXU9c2Xh2AnTnPWfX3ud D7PbWLe7v9JkfzXl9ba51Vb5PCw9S7tyYjeQbcIewLsVhXgnhniWsWZqzf33MNeFoYdoMKvMpNnv KobjEhYcdLx7Cb3lDzsNvvvF3VVfoRAXnH/DhVZRUQAO4KjIbpFhITERDr4DY3pERUfGDGFgBgLM 093Dw72qpweAmUfRpoe6+d/E2X+GYJui2weX0Ifvt1vY1cGh7oJBgb1r2VyNOnP67fNeX+dbGN3N rBYzxnq7W5LHy4I7h+oGlLoSjTIqtxUnnVrn0PjDmx6pzZpMS947pEn/hIb0Zn7pzMSBE9PXDKg/ 8trojPd733mvOBnc4Nb6tJp3y/WYb70qOXpAm7eWcx7mV54TnXR1UBf7wQ3GjPOxOD+gowBDZlry pki3myWkr7Niyt8f5BZ020zfPvvitND80ye7+Lm32FnW9GEdfXp0eaNyTserBNRM8qg58+xSH824 4IA2ceVcBI/tTa41D3ty0TX0bYOaT1K16JPf0sUXOk4tE/h06Br/d37pVWr4LN4yODjZcvG008Yz 2tQ4mGrQhbv0DcE6Q4900BuqyGAKYS8v6DkoiqHXT5FEBSs7Q56HETheb6IxKApNzDEvsIZB/n7f R9RW8i+4B1wqM3nuvfiu1VPco1bW2HPdVV/i+4fMCC/biygQDYRwph7y/QHLlNS4rnXalJ3/qLTp F5d7YuDc9g9X6FsUYlljfUN9g6R6Sb7ja/91LPt+OBqGtgpBDMWCiqFYIz2AcjEU8/lXhJw6YeoV tvpH/CIYta9aa2QZv/Uvoups9Nja84Xi1jel8ecXXQZmNa3ueq1emvT19DNX9+WlzsS2iB/l2Cm1 plvTXctS2ix60G/3ji3ZQ7Y2jv5c67nvyFP3ZMvI08mLHFxzpRZH2px1feB/cU+/Jym6ZVxym7s7 Jjdp+25u3UVv379+9WB8Sa8aO9osfBNYapzLijjb2ffnULt39wOypy499dQ0+deAEzYXZ0TPdenf J8E62/ZN4NXuZ5wKgu3OLpu6t+ymIWFt6i9reTbn2fJ2bW4nkAb13bp8uLnucpxH3y8r5po+fBH5 ZPWyivtOVDBSIqYvyPi4LNekjEGEz5y3Q0v6775wr83T87/Mswo+Wdmiy+3Zdo2nu+5L86pv+8rI 3Bp1ul25o+O5+OMGr8YpU5v3UUwDasaWb7Qo+sL73qcOvuy3vO2stsPnTEuyacR1+Jy+vLsYk+yd 5epmeeJxdBWTD1Eba3SPy2m1aZqnRYS9Mvm20Z3wD1Hn/C5fsnw25Ai/5VJexcySkxeninmmZeuk Pcy5t3qk327atWFE1zoBG+q+DMjaPGjIddHLoI/tKPeS95Wg24+W5j1qaJQWHl/QwqJS7H7Bcej9 ub5lIw/PnjH35LTrCY7rdMGL3ixbN77HGLmn6+5BvZDdvLR3FsM+WYxx3jkxvWdKQ3e3hbce9K95 DY0IbXjh3MSTO6xylehpB5fXXE/q9CyITJh33yjFaEuVFtqrh2vq4zQU8Pv1N/y26OHF8Nv2v4Hf +ip6Lz0gdmVPvSpGPdzZJoTasPnfC/f/GXovWdp7Y2ZGo1kusb0qlbi39/6DowtalmqRdu62VYCz 4asLqy40TYvROxi/oFeC5po3nmNTd9a6+GB9mZuo19Nhe19OooafFT7+zaQzJU97Ok9IfPehu23F L8OeTLR7/iRg+dKDpQJPTcttkG5wvvP68xvq8styVvae3f1auVt+gRvGn39Uzq9S2dTxzVu3kh9y FfN6zpyp7zvhfXt9Yu6Iq/M3P3WcPyL7oul77fbAPq22NJi5pBHyb9jNuGz5binzH17SjPZfljN2 lXFDM4O4JWOzWv/yFS+0a6Edh4z0flnb75Ty233ENWjJevtffN0Hn0nIrD5m9tIQstVOt/HL54RN +JxTk6CCHOHwIQfpG3qvhR5Z9Y/Q+6eB8A/obVQcvdVX2+tHxxeC7+iZ+tHTfg6/S8NWhPztwzPO aEiaxVL/pOS0pgPafaCmlSL+n0H9vxS6Q18bzZ98OJir73372Za0wRnnhrRshjdWiunfsY9suvbc vmEzdlS6bLLsf60nN2lHONNpPwXhgJl3qxwehe9eHzFL5qEsY9ua3RWfui+8sWZ892hfPxfriV6P Rx+CRe/6r5705Hlv1tWGg8+mfGLTb2V+OVFLRang97c/Typm6vF+Z39UsEfCb25fNlfR1B0LLeek 6x4N5HuVFGMvNqNbwf4Ru5TRzzOGXmWGttpF3CdeFdj+b+USvn+IK7Hvw/Ud4q/9uuuPmmrHLd7/ ek8tt1P1leAixXcGp3ZXpMZEM4pzifBduiUy46vNzrSIzbr6z3+2tp0JDHsxt2BKzhpLnyvfKvev kqhK0ny/aLamCVu5VNJJW7lc+aYP3Md1dp933vz055varY+XrCgx3eF3tFBZSK2M2yaopzDKzVlk z+bNG3zTT8x3+t9QqdgwT9Qg7YWTUJzUiXlKihecX2q/3P3F44zOlRtGDT5qWh4q8VGvwt4vuzdz 7imr/L2N6iVsgu/KFPfPbjqoHrJtY5Zt58KyxC15C4WX7V/l/kEo/2+XUc6mf/cDT/Qon0zbO1e2 XSiFyVZ3fWT/jieKT7duOJW8pSKE9YqjXsCaKRuWVqzevGBaqdTNSe3CpUr6Ris48hZE96juX/C+ 5ZTitddy/idnvfN88J0xNb+Tu/ZE5olnea+WTz9nqPmf72h0zA1f6YU3funPs9cLFcs+Kbz4r2ET CzALsyxnYmQ0AGa3gWsvYx82QQwiL2g8AmquQdMvJ7MhD/IINdABCB63IZ8BsqwoqDEI08hiCCyU lle3bDG54n/+gszqS6LTF81o0JzXZpCCpIXHMMwgZIFWgwaDL0MmQzJDEUM+eJA7jaGEQYEhhKGS oQDISweKJwJZGQyVC9UaVHBm1pLKgvz0osSCjEoFtEqFpYmR4U6Not2dzyW8E9pz66ZX6KtVcbDP sDbPshD92njZkTXokg0rI7NJhViH6Gfr4BeXZ6gkq9faC1eU/ApwKH6y+N2jBjPfPgHGa7v/bZr8 697nBUfL3hZVyeu1ror/Lvviw22LlU5Pwy/NPlLSJxSvv48rjXvBiqw92UaPD9/X1M97ZbL0W8Tq kqkpG4y62dxtvBJbD35fLLgjOffy6zMr/7ILsaqeXHqq51zqvcbIpFP3bC3rFtyr/u/6vNbEUdFI bIecltpP2/kWTO7fajeENHxdGMzm9nTB66Wzos9+fxG0+ny/5SZPg4P3jV9Mz+tR+/XLg4P//7Vn HoZvf0Uo+RSwea/V3bS9Q++Xp7XtwiYmDYMmJhVEHLEZNjGJAoUEwamyb8BaAdhnJJDSZKyBBHKS 5EbMrDACLYfLsBryQ0bZDM0NzU0tjC2iMFJk6qH8wNcmJ79Hr8zeLJXslyVjnlODVl6D0krUo54l UfciDS/bfhZXzVvwZPtJ98/H7GwYHIqsZz6z+JYdKSS3d82d6SoutW/DzvV7POA593+ZZGfX84dh q+fGH477+TTFWb6n9mbFDktpL4HwunLh2Yd2bondoKKxhjXt+yO2WKU13gaHOjenWDMVFW9gsNdY oXv8UIa+2dmrd//qiewMmuTA/mnubVd9HYbpjvbPWxw6prvFHPkbsmfWo2ZeLV7Hi+W7Fq06y/h2 t2eYR+pN+X+N/x7evRmzsVKua73HpOMbHujHVMs4bPq/03ymb+xOv2+lMf1TnXfenVZZ327h9PLZ xUnPmTMDVTlEVaNv7XW7ZZsYNHPV64TYV0VGd5bFV/65XVd/9QcDADXgAQQNCmVuZHN0cmVhbQ0K ZW5kb2JqDQo4MzUgMCBvYmoNCjw8L1R5cGUvWFJlZi9TaXplIDgzNS9XWyAxIDQgMl0gL1Jvb3Qg MSAwIFIvSW5mbyA3MiAwIFIvSURbPDVGQzgwODdFNjcyNkQ2NEFBNDI3OTBFMzlDMTAyRjBBPjw1 RkM4MDg3RTY3MjZENjRBQTQyNzkwRTM5QzEwMkYwQT5dIC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVu Z3RoIDE2ODE+Pg0Kc3RyZWFtDQp4nDXYCdxVYwLH8fffYs1SZAvRSpGthSyJhEohZUt2RbYoUllr LGNPKtqkTdlS9mTf9yXZaULGbAwzY8ygeXu+Z97P/bzfz3M/995zznPPPb/73Jqa2r9Vq1L7v2FN zWouLmTTQp3GhXqDMbVQv3thjY6FNdsXmrxa2HJpodkvheYjMKHQoh3c2XJIodXwQttGhR06F3ad VNitKfbG8kL7NoUOm8EudVhc6DgAcwqdJhZ2P7Cwh1fpbNR1XmG/RYUecws9Hyj026rQv3Vh4HeF 438uDPLSgz3y3NMLQ4cVRnYrjOpTGHNTYezswjiM71KY3AwrClNmFKaeUJi2DRztdK9yx75YVZix pHDnqMJMczbTDs6aVZhtJ+Zsga8LcxcU7vK8eTvWvr+1t741K/EN/lhLTZ+a+qge8m3tE+afXEa1 d9ZBUA91cTrW8Lw/Ga2FNbEF1kYDrIN10RDrYz1siA2wMRphI2yOTdAYm2FTNMGW2ApNsTW2wbZo huZogZZojVbYHtuhLdpgR+yAdtgZO2EX7Ird0AHt0RGdsDv2QGfshT2xD/bGvuiCrtgf+6EbuuMA HIiDcDB6oCd6oTcOQR8chkPRF4fjCPRHPxyJo3EUjsEAHIvjMBDH4wSciJNxEk7BaTgVgzEII3CG U/jPRmdiCC7EBTgbZ2EozsU5OB/nYTiG4Xe4yPb+YjQKIzEWY3AxRuNSXIIrcDkuwwRcaQt/Nboa V+Ea3IpbcC1+j5twPa7DjbgB43AzxuNxTLT1vxndhkm4HVMwGVMxHdNwB2bgTszELMzGHMzFXZiH uzEf9+A+3Iv78QAWYBEW4iE8iIfxKB7BY1iOxabgO6MleAJP4ik8jWfxDJ7DC3geL+IlvIxX8Cpe w+t4A2/hTbyNd/EO3sP7WIpl+BAf4GN8hE/xCT7DF/i8kOqS/gcT8r3Rl1iBr7ASX+MbVJH6FtVH tIpN9QGqzvLqdKumvNrQ3/EDfsQ/8E/8hH/hZ/wb/8Ev+C9+w6+OryrlKiOljERGPqOwkc9oY9aA YEYUo5RRykhkXPyzvhl0RJHISGRUNBIZiYwoRj6jlJHISGRUNDodwYxgRjCjlNHNCGYEM4IZpYxu RjAjmBHMCGYEM4IZwYxSRikjnxHMCGaUMroZwYxgRjCjlNHNqEX2MGfe/ihl5DPyGcGMfEY3o5vR zehmdDO6GcGMfEY3o5vRzehmdDNKGfmMfEYpI59RyqhoBDMqGsGMYEZFo5vRzShl5DPyGSXJQDPh ExDdjIpGPiOfkc/IZ+Qz8hndjIrGN8CcAcGMfEYpo5SRyEhktDHyGcGMREYwo7dR31wEuY5gRjAj kZHIaGPUMIIZpYxSxsU/Y02Ia0GuhEBHKaObEcxIZCQyohg1jFJGIiOf0cYoZYQ2Shn1jVxHGzMR ghltjGBGIqObkcgIZiQyghmljERGMCOREcxIZAQzShmljFJGGyOYEYbcb85cOCOYEcwoZXQzShml jHxGKaOUkc/4zpDFkMgIZpQyShmljERGIqObkchIZHQzEhnBjERGMKOUkcgIZpQyShltjGBGMKON ec9MVCfDMiMJiWDmA3dWp5RgRviiopHPyGeqYKpofJGImEYpU1W0qoxuRjejmxHMyGcEM/IZ3YxS Rj4jn6m6Ip/53obELdX188fateGzv/5/pdgQdVEH9VEPa6JaIq6NtbAu1sF6aIANUBVvQzTDRmiE xtgYm2ITbI7N0ARbYCtsiabYGttiG+yGFmiOVmiJ7dAabbA9dkBbtMOO2Bk7YVfsgv3RAe3RCR1R xW137InO2Bt7oQv2QVfsi/3QFwegGw5EdxyMg9ATPXAIeqEPeuMwHIrDcTL64Qgcif44GkfhWByD 4zAAx6Nq3Ik4ASfhfJyKUzAIp+F0DMYQVGvDs3AmzsHZGIpzcR6qvAzHMFyIC1AtA0dgFEbiYozG pbgEl+MyjMEVqBZ+1+AqXI2vcS1+wvW4Dl/hS9yIGzAd0zAVN+EW3IxxmIDxuBWTUS0RJ+E23I4p mIE7cA/uxnzcidmYiVm4C3MwF/NwH+7Fy1iCJ1ClbiEW4AE8hEV4EI/jYTyCR/EYqkXhS3gRT+IZ PIWn8TyexXN4Aa/iFVSxqUL0Pl7D23gdb+BNvIUqZ+/gXSzFR/gQK1CFaDk+xmf4BJ/ic3xR246l X5TfI5cdtJo6PRoUepXfMev0Hl3os7Dw/f1YWfih0WrqtnwXvxVavV1T8z+cNKurDQplbmRzdHJl YW0NCmVuZG9iag0KeHJlZg0KMCA4MzYNCjAwMDAwMDAwNzMgNjU1MzUgZg0KMDAwMDAwMDAxNyAw MDAwMCBuDQowMDAwMDAwMTI1IDAwMDAwIG4NCjAwMDAwMDAyNzkgMDAwMDAgbg0KMDAwMDAwMDUz MyAwMDAwMCBuDQowMDAwMDAxMTI4IDAwMDAwIG4NCjAwMDAwMDExODEgMDAwMDAgbg0KMDAwMDAw MTM1MCAwMDAwMCBuDQowMDAwMDAxNTkwIDAwMDAwIG4NCjAwMDAwMDE4NDQgMDAwMDAgbg0KMDAw MDAwNzExNCAwMDAwMCBuDQowMDAwMDA3MzgwIDAwMDAwIG4NCjAwMDAwMDg5NTYgMDAwMDAgbg0K MDAwMDAwOTA4MCAwMDAwMCBuDQowMDAwMDA5MTEwIDAwMDAwIG4NCjAwMDAwMDkyNjIgMDAwMDAg bg0KMDAwMDAwOTMzNiAwMDAwMCBuDQowMDAwMDA5NTc5IDAwMDAwIG4NCjAwMDAwMDk4NDUgMDAw MDAgbg0KMDAwMDAxMTAyNiAwMDAwMCBuDQowMDAwMDExMzIyIDAwMDAwIG4NCjAwMDAwMTI5NTIg MDAwMDAgbg0KMDAwMDAxMzA4NyAwMDAwMCBuDQowMDAwMDEzMTE3IDAwMDAwIG4NCjAwMDAwMTMy ODAgMDAwMDAgbg0KMDAwMDAxMzM1NCAwMDAwMCBuDQowMDAwMDEzNTkyIDAwMDAwIG4NCjAwMDAw MTM3MjUgMDAwMDAgbg0KMDAwMDAxMzc1NSAwMDAwMCBuDQowMDAwMDEzOTE2IDAwMDAwIG4NCjAw MDAwMTM5OTAgMDAwMDAgbg0KMDAwMDAxNDIzMSAwMDAwMCBuDQowMDAwMDE0NDA3IDAwMDAwIG4N CjAwMDAwMTQ2NTMgMDAwMDAgbg0KMDAwMDAxNDkxOSAwMDAwMCBuDQowMDAwMDE2ODA5IDAwMDAw IG4NCjAwMDAwMTcwNzUgMDAwMDAgbg0KMDAwMDAxOTExMSAwMDAwMCBuDQowMDAwMDE5Mzc3IDAw MDAwIG4NCjAwMDAwMjE3ODkgMDAwMDAgbg0KMDAwMDAyMjA1NSAwMDAwMCBuDQowMDAwMDI0MzAz IDAwMDAwIG4NCjAwMDAwMjQ1NjkgMDAwMDAgbg0KMDAwMDAyNjUzNCAwMDAwMCBuDQowMDAwMDI2 ODAxIDAwMDAwIG4NCjAwMDAwMjg3NzcgMDAwMDAgbg0KMDAwMDAyOTA0NCAwMDAwMCBuDQowMDAw MDMxMzAwIDAwMDAwIG4NCjAwMDAwMzE1NjcgMDAwMDAgbg0KMDAwMDAzMzY4MCAwMDAwMCBuDQow MDAwMDMzOTU3IDAwMDAwIG4NCjAwMDAwMzc1NDEgMDAwMDAgbg0KMDAwMDAzNzk1MSAwMDAwMCBu DQowMDAwMDM5NzE0IDAwMDAwIG4NCjAwMDAwMzk5MDYgMDAwMDAgbg0KMDAwMDA0MDA5NyAwMDAw MCBuDQowMDAwMDQwMjg4IDAwMDAwIG4NCjAwMDAwNDA0ODAgMDAwMDAgbg0KMDAwMDA0MDY3MiAw MDAwMCBuDQowMDAwMDQwODQ4IDAwMDAwIG4NCjAwMDAwNDEwMjQgMDAwMDAgbg0KMDAwMDA0MTIx NSAwMDAwMCBuDQowMDAwMDQxNDA1IDAwMDAwIG4NCjAwMDAwNDE1OTUgMDAwMDAgbg0KMDAwMDA0 MTc4NiAwMDAwMCBuDQowMDAwMDQxOTc3IDAwMDAwIG4NCjAwMDAwNDIxNDggMDAwMDAgbg0KMDAw MDA0MjMxOSAwMDAwMCBuDQowMDAwMDQyNTIyIDAwMDAwIG4NCjAwMDAwNDI3MjUgMDAwMDAgbg0K MDAwMDA0MjkyOCAwMDAwMCBuDQowMDAwMDQzMTMxIDAwMDAwIG4NCjAwMDAwNDMzMDkgMDAwMDAg bg0KMDAwMDAwMDA3NCA2NTUzNSBmDQowMDAwMDAwMDc1IDY1NTM1IGYNCjAwMDAwMDAwNzYgNjU1 MzUgZg0KMDAwMDAwMDA3NyA2NTUzNSBmDQowMDAwMDAwMDc4IDY1NTM1IGYNCjAwMDAwMDAwNzkg NjU1MzUgZg0KMDAwMDAwMDA4MCA2NTUzNSBmDQowMDAwMDAwMDgxIDY1NTM1IGYNCjAwMDAwMDAw ODIgNjU1MzUgZg0KMDAwMDAwMDA4MyA2NTUzNSBmDQowMDAwMDAwMDg0IDY1NTM1IGYNCjAwMDAw MDAwODUgNjU1MzUgZg0KMDAwMDAwMDA4NiA2NTUzNSBmDQowMDAwMDAwMDg3IDY1NTM1IGYNCjAw MDAwMDAwODggNjU1MzUgZg0KMDAwMDAwMDA4OSA2NTUzNSBmDQowMDAwMDAwMDkwIDY1NTM1IGYN CjAwMDAwMDAwOTEgNjU1MzUgZg0KMDAwMDAwMDA5MiA2NTUzNSBmDQowMDAwMDAwMDkzIDY1NTM1 IGYNCjAwMDAwMDAwOTQgNjU1MzUgZg0KMDAwMDAwMDA5NSA2NTUzNSBmDQowMDAwMDAwMDk2IDY1 NTM1IGYNCjAwMDAwMDAwOTcgNjU1MzUgZg0KMDAwMDAwMDA5OCA2NTUzNSBmDQowMDAwMDAwMDk5 IDY1NTM1IGYNCjAwMDAwMDAxMDAgNjU1MzUgZg0KMDAwMDAwMDEwMSA2NTUzNSBmDQowMDAwMDAw MTAyIDY1NTM1IGYNCjAwMDAwMDAxMDMgNjU1MzUgZg0KMDAwMDAwMDEwNCA2NTUzNSBmDQowMDAw MDAwMTA1IDY1NTM1IGYNCjAwMDAwMDAxMDYgNjU1MzUgZg0KMDAwMDAwMDEwNyA2NTUzNSBmDQow MDAwMDAwMTA4IDY1NTM1IGYNCjAwMDAwMDAxMDkgNjU1MzUgZg0KMDAwMDAwMDExMCA2NTUzNSBm DQowMDAwMDAwMTExIDY1NTM1IGYNCjAwMDAwMDAxMTIgNjU1MzUgZg0KMDAwMDAwMDExMyA2NTUz NSBmDQowMDAwMDAwMTE0IDY1NTM1IGYNCjAwMDAwMDAxMTUgNjU1MzUgZg0KMDAwMDAwMDExNiA2 NTUzNSBmDQowMDAwMDAwMTE3IDY1NTM1IGYNCjAwMDAwMDAxMTggNjU1MzUgZg0KMDAwMDAwMDEx OSA2NTUzNSBmDQowMDAwMDAwMTIwIDY1NTM1IGYNCjAwMDAwMDAxMjEgNjU1MzUgZg0KMDAwMDAw MDEyMiA2NTUzNSBmDQowMDAwMDAwMTIzIDY1NTM1IGYNCjAwMDAwMDAxMjQgNjU1MzUgZg0KMDAw MDAwMDEyNSA2NTUzNSBmDQowMDAwMDAwMTI2IDY1NTM1IGYNCjAwMDAwMDAxMjcgNjU1MzUgZg0K MDAwMDAwMDEyOCA2NTUzNSBmDQowMDAwMDAwMTI5IDY1NTM1IGYNCjAwMDAwMDAxMzAgNjU1MzUg Zg0KMDAwMDAwMDEzMSA2NTUzNSBmDQowMDAwMDAwMTMyIDY1NTM1IGYNCjAwMDAwMDAxMzMgNjU1 MzUgZg0KMDAwMDAwMDEzNCA2NTUzNSBmDQowMDAwMDAwMTM1IDY1NTM1IGYNCjAwMDAwMDAxMzYg NjU1MzUgZg0KMDAwMDAwMDEzNyA2NTUzNSBmDQowMDAwMDAwMTM4IDY1NTM1IGYNCjAwMDAwMDAx MzkgNjU1MzUgZg0KMDAwMDAwMDE0MCA2NTUzNSBmDQowMDAwMDAwMTQxIDY1NTM1IGYNCjAwMDAw MDAxNDIgNjU1MzUgZg0KMDAwMDAwMDE0MyA2NTUzNSBmDQowMDAwMDAwMTQ0IDY1NTM1IGYNCjAw MDAwMDAxNDUgNjU1MzUgZg0KMDAwMDAwMDE0NiA2NTUzNSBmDQowMDAwMDAwMTQ3IDY1NTM1IGYN CjAwMDAwMDAxNDggNjU1MzUgZg0KMDAwMDAwMDE0OSA2NTUzNSBmDQowMDAwMDAwMTUwIDY1NTM1 IGYNCjAwMDAwMDAxNTEgNjU1MzUgZg0KMDAwMDAwMDE1MiA2NTUzNSBmDQowMDAwMDAwMTUzIDY1 NTM1IGYNCjAwMDAwMDAxNTQgNjU1MzUgZg0KMDAwMDAwMDE1NSA2NTUzNSBmDQowMDAwMDAwMTU2 IDY1NTM1IGYNCjAwMDAwMDAxNTcgNjU1MzUgZg0KMDAwMDAwMDE1OCA2NTUzNSBmDQowMDAwMDAw MTU5IDY1NTM1IGYNCjAwMDAwMDAxNjAgNjU1MzUgZg0KMDAwMDAwMDE2MSA2NTUzNSBmDQowMDAw MDAwMTYyIDY1NTM1IGYNCjAwMDAwMDAxNjMgNjU1MzUgZg0KMDAwMDAwMDE2NCA2NTUzNSBmDQow MDAwMDAwMTY1IDY1NTM1IGYNCjAwMDAwMDAxNjYgNjU1MzUgZg0KMDAwMDAwMDE2NyA2NTUzNSBm DQowMDAwMDAwMTY4IDY1NTM1IGYNCjAwMDAwMDAxNjkgNjU1MzUgZg0KMDAwMDAwMDE3MCA2NTUz NSBmDQowMDAwMDAwMTcxIDY1NTM1IGYNCjAwMDAwMDAxNzIgNjU1MzUgZg0KMDAwMDAwMDE3MyA2 NTUzNSBmDQowMDAwMDAwMTc0IDY1NTM1IGYNCjAwMDAwMDAxNzUgNjU1MzUgZg0KMDAwMDAwMDE3 NiA2NTUzNSBmDQowMDAwMDAwMTc3IDY1NTM1IGYNCjAwMDAwMDAxNzggNjU1MzUgZg0KMDAwMDAw MDE3OSA2NTUzNSBmDQowMDAwMDAwMTgwIDY1NTM1IGYNCjAwMDAwMDAxODEgNjU1MzUgZg0KMDAw MDAwMDE4MiA2NTUzNSBmDQowMDAwMDAwMTgzIDY1NTM1IGYNCjAwMDAwMDAxODQgNjU1MzUgZg0K MDAwMDAwMDE4NSA2NTUzNSBmDQowMDAwMDAwMTg2IDY1NTM1IGYNCjAwMDAwMDAxODcgNjU1MzUg Zg0KMDAwMDAwMDE4OCA2NTUzNSBmDQowMDAwMDAwMTg5IDY1NTM1IGYNCjAwMDAwMDAxOTAgNjU1 MzUgZg0KMDAwMDAwMDE5MSA2NTUzNSBmDQowMDAwMDAwMTkyIDY1NTM1IGYNCjAwMDAwMDAxOTMg NjU1MzUgZg0KMDAwMDAwMDE5NCA2NTUzNSBmDQowMDAwMDAwMTk1IDY1NTM1IGYNCjAwMDAwMDAx OTYgNjU1MzUgZg0KMDAwMDAwMDE5NyA2NTUzNSBmDQowMDAwMDAwMTk4IDY1NTM1IGYNCjAwMDAw MDAxOTkgNjU1MzUgZg0KMDAwMDAwMDIwMCA2NTUzNSBmDQowMDAwMDAwMjAxIDY1NTM1IGYNCjAw MDAwMDAyMDIgNjU1MzUgZg0KMDAwMDAwMDIwMyA2NTUzNSBmDQowMDAwMDAwMjA0IDY1NTM1IGYN CjAwMDAwMDAyMDUgNjU1MzUgZg0KMDAwMDAwMDIwNiA2NTUzNSBmDQowMDAwMDAwMjA3IDY1NTM1 IGYNCjAwMDAwMDAyMDggNjU1MzUgZg0KMDAwMDAwMDIwOSA2NTUzNSBmDQowMDAwMDAwMjEwIDY1 NTM1IGYNCjAwMDAwMDAyMTEgNjU1MzUgZg0KMDAwMDAwMDIxMiA2NTUzNSBmDQowMDAwMDAwMjEz IDY1NTM1IGYNCjAwMDAwMDAyMTQgNjU1MzUgZg0KMDAwMDAwMDIxNSA2NTUzNSBmDQowMDAwMDAw MjE2IDY1NTM1IGYNCjAwMDAwMDAyMTcgNjU1MzUgZg0KMDAwMDAwMDIxOCA2NTUzNSBmDQowMDAw MDAwMjE5IDY1NTM1IGYNCjAwMDAwMDAyMjAgNjU1MzUgZg0KMDAwMDAwMDIyMSA2NTUzNSBmDQow MDAwMDAwMjIyIDY1NTM1IGYNCjAwMDAwMDAyMjMgNjU1MzUgZg0KMDAwMDAwMDIyNCA2NTUzNSBm DQowMDAwMDAwMjI1IDY1NTM1IGYNCjAwMDAwMDAyMjYgNjU1MzUgZg0KMDAwMDAwMDIyNyA2NTUz NSBmDQowMDAwMDAwMjI4IDY1NTM1IGYNCjAwMDAwMDAyMjkgNjU1MzUgZg0KMDAwMDAwMDIzMCA2 NTUzNSBmDQowMDAwMDAwMjMxIDY1NTM1IGYNCjAwMDAwMDAyMzIgNjU1MzUgZg0KMDAwMDAwMDIz MyA2NTUzNSBmDQowMDAwMDAwMjM0IDY1NTM1IGYNCjAwMDAwMDAyMzUgNjU1MzUgZg0KMDAwMDAw MDIzNiA2NTUzNSBmDQowMDAwMDAwMjM3IDY1NTM1IGYNCjAwMDAwMDAyMzggNjU1MzUgZg0KMDAw MDAwMDIzOSA2NTUzNSBmDQowMDAwMDAwMjQwIDY1NTM1IGYNCjAwMDAwMDAyNDEgNjU1MzUgZg0K MDAwMDAwMDI0MiA2NTUzNSBmDQowMDAwMDAwMjQzIDY1NTM1IGYNCjAwMDAwMDAyNDQgNjU1MzUg Zg0KMDAwMDAwMDI0NSA2NTUzNSBmDQowMDAwMDAwMjQ2IDY1NTM1IGYNCjAwMDAwMDAyNDcgNjU1 MzUgZg0KMDAwMDAwMDI0OCA2NTUzNSBmDQowMDAwMDAwMjQ5IDY1NTM1IGYNCjAwMDAwMDAyNTAg NjU1MzUgZg0KMDAwMDAwMDI1MSA2NTUzNSBmDQowMDAwMDAwMjUyIDY1NTM1IGYNCjAwMDAwMDAy NTMgNjU1MzUgZg0KMDAwMDAwMDI1NCA2NTUzNSBmDQowMDAwMDAwMjU1IDY1NTM1IGYNCjAwMDAw MDAyNTYgNjU1MzUgZg0KMDAwMDAwMDI1NyA2NTUzNSBmDQowMDAwMDAwMjU4IDY1NTM1IGYNCjAw MDAwMDAyNTkgNjU1MzUgZg0KMDAwMDAwMDI2MCA2NTUzNSBmDQowMDAwMDAwMjYxIDY1NTM1IGYN CjAwMDAwMDAyNjIgNjU1MzUgZg0KMDAwMDAwMDI2MyA2NTUzNSBmDQowMDAwMDAwMjY0IDY1NTM1 IGYNCjAwMDAwMDAyNjUgNjU1MzUgZg0KMDAwMDAwMDI2NiA2NTUzNSBmDQowMDAwMDAwMjY3IDY1 NTM1IGYNCjAwMDAwMDAyNjggNjU1MzUgZg0KMDAwMDAwMDI2OSA2NTUzNSBmDQowMDAwMDAwMjcw IDY1NTM1IGYNCjAwMDAwMDAyNzEgNjU1MzUgZg0KMDAwMDAwMDI3MiA2NTUzNSBmDQowMDAwMDAw MjczIDY1NTM1IGYNCjAwMDAwMDAyNzQgNjU1MzUgZg0KMDAwMDAwMDI3NSA2NTUzNSBmDQowMDAw MDAwMjc2IDY1NTM1IGYNCjAwMDAwMDAyNzcgNjU1MzUgZg0KMDAwMDAwMDI3OCA2NTUzNSBmDQow MDAwMDAwMjc5IDY1NTM1IGYNCjAwMDAwMDAyODAgNjU1MzUgZg0KMDAwMDAwMDI4MSA2NTUzNSBm DQowMDAwMDAwMjgyIDY1NTM1IGYNCjAwMDAwMDAyODMgNjU1MzUgZg0KMDAwMDAwMDI4NCA2NTUz NSBmDQowMDAwMDAwMjg1IDY1NTM1IGYNCjAwMDAwMDAyODYgNjU1MzUgZg0KMDAwMDAwMDI4NyA2 NTUzNSBmDQowMDAwMDAwMjg4IDY1NTM1IGYNCjAwMDAwMDAyODkgNjU1MzUgZg0KMDAwMDAwMDI5 MCA2NTUzNSBmDQowMDAwMDAwMjkxIDY1NTM1IGYNCjAwMDAwMDAyOTIgNjU1MzUgZg0KMDAwMDAw MDI5MyA2NTUzNSBmDQowMDAwMDAwMjk0IDY1NTM1IGYNCjAwMDAwMDAyOTUgNjU1MzUgZg0KMDAw MDAwMDI5NiA2NTUzNSBmDQowMDAwMDAwMjk3IDY1NTM1IGYNCjAwMDAwMDAyOTggNjU1MzUgZg0K MDAwMDAwMDI5OSA2NTUzNSBmDQowMDAwMDAwMzAwIDY1NTM1IGYNCjAwMDAwMDAzMDEgNjU1MzUg Zg0KMDAwMDAwMDMwMiA2NTUzNSBmDQowMDAwMDAwMzAzIDY1NTM1IGYNCjAwMDAwMDAzMDQgNjU1 MzUgZg0KMDAwMDAwMDMwNSA2NTUzNSBmDQowMDAwMDAwMzA2IDY1NTM1IGYNCjAwMDAwMDAzMDcg NjU1MzUgZg0KMDAwMDAwMDMwOCA2NTUzNSBmDQowMDAwMDAwMzA5IDY1NTM1IGYNCjAwMDAwMDAz MTAgNjU1MzUgZg0KMDAwMDAwMDMxMSA2NTUzNSBmDQowMDAwMDAwMzEyIDY1NTM1IGYNCjAwMDAw MDAzMTMgNjU1MzUgZg0KMDAwMDAwMDMxNCA2NTUzNSBmDQowMDAwMDAwMzE1IDY1NTM1IGYNCjAw MDAwMDAzMTYgNjU1MzUgZg0KMDAwMDAwMDMxNyA2NTUzNSBmDQowMDAwMDAwMzE4IDY1NTM1IGYN CjAwMDAwMDAzMTkgNjU1MzUgZg0KMDAwMDAwMDMyMCA2NTUzNSBmDQowMDAwMDAwMzIxIDY1NTM1 IGYNCjAwMDAwMDAzMjIgNjU1MzUgZg0KMDAwMDAwMDMyMyA2NTUzNSBmDQowMDAwMDAwMzI0IDY1 NTM1IGYNCjAwMDAwMDAzMjUgNjU1MzUgZg0KMDAwMDAwMDMyNiA2NTUzNSBmDQowMDAwMDAwMzI3 IDY1NTM1IGYNCjAwMDAwMDAzMjggNjU1MzUgZg0KMDAwMDAwMDMyOSA2NTUzNSBmDQowMDAwMDAw MzMwIDY1NTM1IGYNCjAwMDAwMDAzMzEgNjU1MzUgZg0KMDAwMDAwMDMzMiA2NTUzNSBmDQowMDAw MDAwMzMzIDY1NTM1IGYNCjAwMDAwMDAzMzQgNjU1MzUgZg0KMDAwMDAwMDMzNSA2NTUzNSBmDQow MDAwMDAwMzM2IDY1NTM1IGYNCjAwMDAwMDAzMzcgNjU1MzUgZg0KMDAwMDAwMDMzOCA2NTUzNSBm DQowMDAwMDAwMzM5IDY1NTM1IGYNCjAwMDAwMDAzNDAgNjU1MzUgZg0KMDAwMDAwMDM0MSA2NTUz NSBmDQowMDAwMDAwMzQyIDY1NTM1IGYNCjAwMDAwMDAzNDMgNjU1MzUgZg0KMDAwMDAwMDM0NCA2 NTUzNSBmDQowMDAwMDAwMzQ1IDY1NTM1IGYNCjAwMDAwMDAzNDYgNjU1MzUgZg0KMDAwMDAwMDM0 NyA2NTUzNSBmDQowMDAwMDAwMzQ4IDY1NTM1IGYNCjAwMDAwMDAzNDkgNjU1MzUgZg0KMDAwMDAw MDM1MCA2NTUzNSBmDQowMDAwMDAwMzUxIDY1NTM1IGYNCjAwMDAwMDAzNTIgNjU1MzUgZg0KMDAw MDAwMDM1MyA2NTUzNSBmDQowMDAwMDAwMzU0IDY1NTM1IGYNCjAwMDAwMDAzNTUgNjU1MzUgZg0K MDAwMDAwMDM1NiA2NTUzNSBmDQowMDAwMDAwMzU3IDY1NTM1IGYNCjAwMDAwMDAzNTggNjU1MzUg Zg0KMDAwMDAwMDM1OSA2NTUzNSBmDQowMDAwMDAwMzYwIDY1NTM1IGYNCjAwMDAwMDAzNjEgNjU1 MzUgZg0KMDAwMDAwMDM2MiA2NTUzNSBmDQowMDAwMDAwMzYzIDY1NTM1IGYNCjAwMDAwMDAzNjQg NjU1MzUgZg0KMDAwMDAwMDM2NSA2NTUzNSBmDQowMDAwMDAwMzY2IDY1NTM1IGYNCjAwMDAwMDAz NjcgNjU1MzUgZg0KMDAwMDAwMDM2OCA2NTUzNSBmDQowMDAwMDAwMzY5IDY1NTM1IGYNCjAwMDAw MDAzNzAgNjU1MzUgZg0KMDAwMDAwMDM3MSA2NTUzNSBmDQowMDAwMDAwMzcyIDY1NTM1IGYNCjAw MDAwMDAzNzMgNjU1MzUgZg0KMDAwMDAwMDM3NCA2NTUzNSBmDQowMDAwMDAwMzc1IDY1NTM1IGYN CjAwMDAwMDAzNzYgNjU1MzUgZg0KMDAwMDAwMDM3NyA2NTUzNSBmDQowMDAwMDAwMzc4IDY1NTM1 IGYNCjAwMDAwMDAzNzkgNjU1MzUgZg0KMDAwMDAwMDM4MCA2NTUzNSBmDQowMDAwMDAwMzgxIDY1 NTM1IGYNCjAwMDAwMDAzODIgNjU1MzUgZg0KMDAwMDAwMDM4MyA2NTUzNSBmDQowMDAwMDAwMzg0 IDY1NTM1IGYNCjAwMDAwMDAzODUgNjU1MzUgZg0KMDAwMDAwMDM4NiA2NTUzNSBmDQowMDAwMDAw Mzg3IDY1NTM1IGYNCjAwMDAwMDAzODggNjU1MzUgZg0KMDAwMDAwMDM4OSA2NTUzNSBmDQowMDAw MDAwMzkwIDY1NTM1IGYNCjAwMDAwMDAzOTEgNjU1MzUgZg0KMDAwMDAwMDM5MiA2NTUzNSBmDQow MDAwMDAwMzkzIDY1NTM1IGYNCjAwMDAwMDAzOTQgNjU1MzUgZg0KMDAwMDAwMDM5NSA2NTUzNSBm DQowMDAwMDAwMzk2IDY1NTM1IGYNCjAwMDAwMDAzOTcgNjU1MzUgZg0KMDAwMDAwMDM5OCA2NTUz NSBmDQowMDAwMDAwMzk5IDY1NTM1IGYNCjAwMDAwMDA0MDAgNjU1MzUgZg0KMDAwMDAwMDQwMSA2 NTUzNSBmDQowMDAwMDAwNDAyIDY1NTM1IGYNCjAwMDAwMDA0MDMgNjU1MzUgZg0KMDAwMDAwMDQw NCA2NTUzNSBmDQowMDAwMDAwNDA1IDY1NTM1IGYNCjAwMDAwMDA0MDYgNjU1MzUgZg0KMDAwMDAw MDQwNyA2NTUzNSBmDQowMDAwMDAwNDA4IDY1NTM1IGYNCjAwMDAwMDA0MDkgNjU1MzUgZg0KMDAw MDAwMDQxMCA2NTUzNSBmDQowMDAwMDAwNDExIDY1NTM1IGYNCjAwMDAwMDA0MTIgNjU1MzUgZg0K MDAwMDAwMDQxMyA2NTUzNSBmDQowMDAwMDAwNDE0IDY1NTM1IGYNCjAwMDAwMDA0MTUgNjU1MzUg Zg0KMDAwMDAwMDQxNiA2NTUzNSBmDQowMDAwMDAwNDE3IDY1NTM1IGYNCjAwMDAwMDA0MTggNjU1 MzUgZg0KMDAwMDAwMDQxOSA2NTUzNSBmDQowMDAwMDAwNDIwIDY1NTM1IGYNCjAwMDAwMDA0MjEg NjU1MzUgZg0KMDAwMDAwMDQyMiA2NTUzNSBmDQowMDAwMDAwNDIzIDY1NTM1IGYNCjAwMDAwMDA0 MjQgNjU1MzUgZg0KMDAwMDAwMDQyNSA2NTUzNSBmDQowMDAwMDAwNDI2IDY1NTM1IGYNCjAwMDAw MDA0MjcgNjU1MzUgZg0KMDAwMDAwMDQyOCA2NTUzNSBmDQowMDAwMDAwNDI5IDY1NTM1IGYNCjAw MDAwMDA0MzAgNjU1MzUgZg0KMDAwMDAwMDQzMSA2NTUzNSBmDQowMDAwMDAwNDMyIDY1NTM1IGYN CjAwMDAwMDA0MzMgNjU1MzUgZg0KMDAwMDAwMDQzNCA2NTUzNSBmDQowMDAwMDAwNDM1IDY1NTM1 IGYNCjAwMDAwMDA0MzYgNjU1MzUgZg0KMDAwMDAwMDQzNyA2NTUzNSBmDQowMDAwMDAwNDM4IDY1 NTM1IGYNCjAwMDAwMDA0MzkgNjU1MzUgZg0KMDAwMDAwMDQ0MCA2NTUzNSBmDQowMDAwMDAwNDQx IDY1NTM1IGYNCjAwMDAwMDA0NDIgNjU1MzUgZg0KMDAwMDAwMDQ0MyA2NTUzNSBmDQowMDAwMDAw NDQ0IDY1NTM1IGYNCjAwMDAwMDA0NDUgNjU1MzUgZg0KMDAwMDAwMDQ0NiA2NTUzNSBmDQowMDAw MDAwNDQ3IDY1NTM1IGYNCjAwMDAwMDA0NDggNjU1MzUgZg0KMDAwMDAwMDQ0OSA2NTUzNSBmDQow MDAwMDAwNDUwIDY1NTM1IGYNCjAwMDAwMDA0NTEgNjU1MzUgZg0KMDAwMDAwMDQ1MiA2NTUzNSBm DQowMDAwMDAwNDUzIDY1NTM1IGYNCjAwMDAwMDA0NTQgNjU1MzUgZg0KMDAwMDAwMDQ1NSA2NTUz NSBmDQowMDAwMDAwNDU2IDY1NTM1IGYNCjAwMDAwMDA0NTcgNjU1MzUgZg0KMDAwMDAwMDQ1OCA2 NTUzNSBmDQowMDAwMDAwNDU5IDY1NTM1IGYNCjAwMDAwMDA0NjAgNjU1MzUgZg0KMDAwMDAwMDQ2 MSA2NTUzNSBmDQowMDAwMDAwNDYyIDY1NTM1IGYNCjAwMDAwMDA0NjMgNjU1MzUgZg0KMDAwMDAw MDQ2NCA2NTUzNSBmDQowMDAwMDAwNDY1IDY1NTM1IGYNCjAwMDAwMDA0NjYgNjU1MzUgZg0KMDAw MDAwMDQ2NyA2NTUzNSBmDQowMDAwMDAwNDY4IDY1NTM1IGYNCjAwMDAwMDA0NjkgNjU1MzUgZg0K MDAwMDAwMDQ3MCA2NTUzNSBmDQowMDAwMDAwNDcxIDY1NTM1IGYNCjAwMDAwMDA0NzIgNjU1MzUg Zg0KMDAwMDAwMDQ3MyA2NTUzNSBmDQowMDAwMDAwNDc0IDY1NTM1IGYNCjAwMDAwMDA0NzUgNjU1 MzUgZg0KMDAwMDAwMDQ3NiA2NTUzNSBmDQowMDAwMDAwNDc3IDY1NTM1IGYNCjAwMDAwMDA0Nzgg NjU1MzUgZg0KMDAwMDAwMDQ3OSA2NTUzNSBmDQowMDAwMDAwNDgwIDY1NTM1IGYNCjAwMDAwMDA0 ODEgNjU1MzUgZg0KMDAwMDAwMDQ4MiA2NTUzNSBmDQowMDAwMDAwNDgzIDY1NTM1IGYNCjAwMDAw MDA0ODQgNjU1MzUgZg0KMDAwMDAwMDQ4NSA2NTUzNSBmDQowMDAwMDAwNDg2IDY1NTM1IGYNCjAw MDAwMDA0ODcgNjU1MzUgZg0KMDAwMDAwMDQ4OCA2NTUzNSBmDQowMDAwMDAwNDg5IDY1NTM1IGYN CjAwMDAwMDA0OTAgNjU1MzUgZg0KMDAwMDAwMDQ5MSA2NTUzNSBmDQowMDAwMDAwNDkyIDY1NTM1 IGYNCjAwMDAwMDA0OTMgNjU1MzUgZg0KMDAwMDAwMDQ5NCA2NTUzNSBmDQowMDAwMDAwNDk1IDY1 NTM1IGYNCjAwMDAwMDA0OTYgNjU1MzUgZg0KMDAwMDAwMDQ5NyA2NTUzNSBmDQowMDAwMDAwNDk4 IDY1NTM1IGYNCjAwMDAwMDA0OTkgNjU1MzUgZg0KMDAwMDAwMDUwMCA2NTUzNSBmDQowMDAwMDAw NTAxIDY1NTM1IGYNCjAwMDAwMDA1MDIgNjU1MzUgZg0KMDAwMDAwMDUwMyA2NTUzNSBmDQowMDAw MDAwNTA0IDY1NTM1IGYNCjAwMDAwMDA1MDUgNjU1MzUgZg0KMDAwMDAwMDUwNiA2NTUzNSBmDQow MDAwMDAwNTA3IDY1NTM1IGYNCjAwMDAwMDA1MDggNjU1MzUgZg0KMDAwMDAwMDUwOSA2NTUzNSBm DQowMDAwMDAwNTEwIDY1NTM1IGYNCjAwMDAwMDA1MTEgNjU1MzUgZg0KMDAwMDAwMDUxMiA2NTUz NSBmDQowMDAwMDAwNTEzIDY1NTM1IGYNCjAwMDAwMDA1MTQgNjU1MzUgZg0KMDAwMDAwMDUxNSA2 NTUzNSBmDQowMDAwMDAwNTE2IDY1NTM1IGYNCjAwMDAwMDA1MTcgNjU1MzUgZg0KMDAwMDAwMDUx OCA2NTUzNSBmDQowMDAwMDAwNTE5IDY1NTM1IGYNCjAwMDAwMDA1MjAgNjU1MzUgZg0KMDAwMDAw MDUyMSA2NTUzNSBmDQowMDAwMDAwNTIyIDY1NTM1IGYNCjAwMDAwMDA1MjMgNjU1MzUgZg0KMDAw MDAwMDUyNCA2NTUzNSBmDQowMDAwMDAwNTI1IDY1NTM1IGYNCjAwMDAwMDA1MjYgNjU1MzUgZg0K MDAwMDAwMDUyNyA2NTUzNSBmDQowMDAwMDAwNTI4IDY1NTM1IGYNCjAwMDAwMDA1MjkgNjU1MzUg Zg0KMDAwMDAwMDUzMCA2NTUzNSBmDQowMDAwMDAwNTMxIDY1NTM1IGYNCjAwMDAwMDA1MzIgNjU1 MzUgZg0KMDAwMDAwMDUzMyA2NTUzNSBmDQowMDAwMDAwNTM0IDY1NTM1IGYNCjAwMDAwMDA1MzUg NjU1MzUgZg0KMDAwMDAwMDUzNiA2NTUzNSBmDQowMDAwMDAwNTM3IDY1NTM1IGYNCjAwMDAwMDA1 MzggNjU1MzUgZg0KMDAwMDAwMDUzOSA2NTUzNSBmDQowMDAwMDAwNTQwIDY1NTM1IGYNCjAwMDAw MDA1NDEgNjU1MzUgZg0KMDAwMDAwMDU0MiA2NTUzNSBmDQowMDAwMDAwNTQzIDY1NTM1IGYNCjAw MDAwMDA1NDQgNjU1MzUgZg0KMDAwMDAwMDU0NSA2NTUzNSBmDQowMDAwMDAwNTQ2IDY1NTM1IGYN CjAwMDAwMDA1NDcgNjU1MzUgZg0KMDAwMDAwMDU0OCA2NTUzNSBmDQowMDAwMDAwNTQ5IDY1NTM1 IGYNCjAwMDAwMDA1NTAgNjU1MzUgZg0KMDAwMDAwMDU1MSA2NTUzNSBmDQowMDAwMDAwNTUyIDY1 NTM1IGYNCjAwMDAwMDA1NTMgNjU1MzUgZg0KMDAwMDAwMDU1NCA2NTUzNSBmDQowMDAwMDAwNTU1 IDY1NTM1IGYNCjAwMDAwMDA1NTYgNjU1MzUgZg0KMDAwMDAwMDU1NyA2NTUzNSBmDQowMDAwMDAw NTU4IDY1NTM1IGYNCjAwMDAwMDA1NTkgNjU1MzUgZg0KMDAwMDAwMDU2MCA2NTUzNSBmDQowMDAw MDAwNTYxIDY1NTM1IGYNCjAwMDAwMDA1NjIgNjU1MzUgZg0KMDAwMDAwMDU2MyA2NTUzNSBmDQow MDAwMDAwNTY0IDY1NTM1IGYNCjAwMDAwMDA1NjUgNjU1MzUgZg0KMDAwMDAwMDU2NiA2NTUzNSBm DQowMDAwMDAwNTY3IDY1NTM1IGYNCjAwMDAwMDA1NjggNjU1MzUgZg0KMDAwMDAwMDU2OSA2NTUz NSBmDQowMDAwMDAwNTcwIDY1NTM1IGYNCjAwMDAwMDA1NzEgNjU1MzUgZg0KMDAwMDAwMDU3MiA2 NTUzNSBmDQowMDAwMDAwNTczIDY1NTM1IGYNCjAwMDAwMDA1NzQgNjU1MzUgZg0KMDAwMDAwMDU3 NSA2NTUzNSBmDQowMDAwMDAwNTc2IDY1NTM1IGYNCjAwMDAwMDA1NzcgNjU1MzUgZg0KMDAwMDAw MDU3OCA2NTUzNSBmDQowMDAwMDAwNTc5IDY1NTM1IGYNCjAwMDAwMDA1ODAgNjU1MzUgZg0KMDAw MDAwMDU4MSA2NTUzNSBmDQowMDAwMDAwNTgyIDY1NTM1IGYNCjAwMDAwMDA1ODMgNjU1MzUgZg0K MDAwMDAwMDU4NCA2NTUzNSBmDQowMDAwMDAwNTg1IDY1NTM1IGYNCjAwMDAwMDA1ODYgNjU1MzUg Zg0KMDAwMDAwMDU4NyA2NTUzNSBmDQowMDAwMDAwNTg4IDY1NTM1IGYNCjAwMDAwMDA1ODkgNjU1 MzUgZg0KMDAwMDAwMDU5MCA2NTUzNSBmDQowMDAwMDAwNTkxIDY1NTM1IGYNCjAwMDAwMDA1OTIg NjU1MzUgZg0KMDAwMDAwMDU5MyA2NTUzNSBmDQowMDAwMDAwNTk0IDY1NTM1IGYNCjAwMDAwMDA1 OTUgNjU1MzUgZg0KMDAwMDAwMDU5NiA2NTUzNSBmDQowMDAwMDAwNTk3IDY1NTM1IGYNCjAwMDAw MDA1OTggNjU1MzUgZg0KMDAwMDAwMDU5OSA2NTUzNSBmDQowMDAwMDAwNjAwIDY1NTM1IGYNCjAw MDAwMDA2MDEgNjU1MzUgZg0KMDAwMDAwMDYwMiA2NTUzNSBmDQowMDAwMDAwNjAzIDY1NTM1IGYN CjAwMDAwMDA2MDQgNjU1MzUgZg0KMDAwMDAwMDYwNSA2NTUzNSBmDQowMDAwMDAwNjA2IDY1NTM1 IGYNCjAwMDAwMDA2MDcgNjU1MzUgZg0KMDAwMDAwMDYwOCA2NTUzNSBmDQowMDAwMDAwNjA5IDY1 NTM1IGYNCjAwMDAwMDA2MTAgNjU1MzUgZg0KMDAwMDAwMDYxMSA2NTUzNSBmDQowMDAwMDAwNjEy IDY1NTM1IGYNCjAwMDAwMDA2MTMgNjU1MzUgZg0KMDAwMDAwMDYxNCA2NTUzNSBmDQowMDAwMDAw NjE1IDY1NTM1IGYNCjAwMDAwMDA2MTYgNjU1MzUgZg0KMDAwMDAwMDYxNyA2NTUzNSBmDQowMDAw MDAwNjE4IDY1NTM1IGYNCjAwMDAwMDA2MTkgNjU1MzUgZg0KMDAwMDAwMDYyMCA2NTUzNSBmDQow MDAwMDAwNjIxIDY1NTM1IGYNCjAwMDAwMDA2MjIgNjU1MzUgZg0KMDAwMDAwMDYyMyA2NTUzNSBm DQowMDAwMDAwNjI0IDY1NTM1IGYNCjAwMDAwMDA2MjUgNjU1MzUgZg0KMDAwMDAwMDYyNiA2NTUz NSBmDQowMDAwMDAwNjI3IDY1NTM1IGYNCjAwMDAwMDA2MjggNjU1MzUgZg0KMDAwMDAwMDYyOSA2 NTUzNSBmDQowMDAwMDAwNjMwIDY1NTM1IGYNCjAwMDAwMDA2MzEgNjU1MzUgZg0KMDAwMDAwMDYz MiA2NTUzNSBmDQowMDAwMDAwNjMzIDY1NTM1IGYNCjAwMDAwMDA2MzQgNjU1MzUgZg0KMDAwMDAw MDYzNSA2NTUzNSBmDQowMDAwMDAwNjM2IDY1NTM1IGYNCjAwMDAwMDA2MzcgNjU1MzUgZg0KMDAw MDAwMDYzOCA2NTUzNSBmDQowMDAwMDAwNjM5IDY1NTM1IGYNCjAwMDAwMDA2NDAgNjU1MzUgZg0K MDAwMDAwMDY0MSA2NTUzNSBmDQowMDAwMDAwNjQyIDY1NTM1IGYNCjAwMDAwMDA2NDMgNjU1MzUg Zg0KMDAwMDAwMDY0NCA2NTUzNSBmDQowMDAwMDAwNjQ1IDY1NTM1IGYNCjAwMDAwMDA2NDYgNjU1 MzUgZg0KMDAwMDAwMDY0NyA2NTUzNSBmDQowMDAwMDAwNjQ4IDY1NTM1IGYNCjAwMDAwMDA2NDkg NjU1MzUgZg0KMDAwMDAwMDY1MCA2NTUzNSBmDQowMDAwMDAwNjUxIDY1NTM1IGYNCjAwMDAwMDA2 NTIgNjU1MzUgZg0KMDAwMDAwMDY1MyA2NTUzNSBmDQowMDAwMDAwNjU0IDY1NTM1IGYNCjAwMDAw MDA2NTUgNjU1MzUgZg0KMDAwMDAwMDY1NiA2NTUzNSBmDQowMDAwMDAwNjU3IDY1NTM1IGYNCjAw MDAwMDA2NTggNjU1MzUgZg0KMDAwMDAwMDY1OSA2NTUzNSBmDQowMDAwMDAwNjYwIDY1NTM1IGYN CjAwMDAwMDA2NjEgNjU1MzUgZg0KMDAwMDAwMDY2MiA2NTUzNSBmDQowMDAwMDAwNjYzIDY1NTM1 IGYNCjAwMDAwMDA2NjQgNjU1MzUgZg0KMDAwMDAwMDY2NSA2NTUzNSBmDQowMDAwMDAwNjY2IDY1 NTM1IGYNCjAwMDAwMDA2NjcgNjU1MzUgZg0KMDAwMDAwMDY2OCA2NTUzNSBmDQowMDAwMDAwNjY5 IDY1NTM1IGYNCjAwMDAwMDA2NzAgNjU1MzUgZg0KMDAwMDAwMDY3MSA2NTUzNSBmDQowMDAwMDAw NjcyIDY1NTM1IGYNCjAwMDAwMDA2NzMgNjU1MzUgZg0KMDAwMDAwMDY3NCA2NTUzNSBmDQowMDAw MDAwNjc1IDY1NTM1IGYNCjAwMDAwMDA2NzYgNjU1MzUgZg0KMDAwMDAwMDY3NyA2NTUzNSBmDQow MDAwMDAwNjc4IDY1NTM1IGYNCjAwMDAwMDA2NzkgNjU1MzUgZg0KMDAwMDAwMDY4MCA2NTUzNSBm DQowMDAwMDAwNjgxIDY1NTM1IGYNCjAwMDAwMDA2ODIgNjU1MzUgZg0KMDAwMDAwMDY4MyA2NTUz NSBmDQowMDAwMDAwNjg0IDY1NTM1IGYNCjAwMDAwMDA2ODUgNjU1MzUgZg0KMDAwMDAwMDY4NiA2 NTUzNSBmDQowMDAwMDAwNjg3IDY1NTM1IGYNCjAwMDAwMDA2ODggNjU1MzUgZg0KMDAwMDAwMDY4 OSA2NTUzNSBmDQowMDAwMDAwNjkwIDY1NTM1IGYNCjAwMDAwMDA2OTEgNjU1MzUgZg0KMDAwMDAw MDY5MiA2NTUzNSBmDQowMDAwMDAwNjkzIDY1NTM1IGYNCjAwMDAwMDA2OTQgNjU1MzUgZg0KMDAw MDAwMDY5NSA2NTUzNSBmDQowMDAwMDAwNjk2IDY1NTM1IGYNCjAwMDAwMDA2OTcgNjU1MzUgZg0K MDAwMDAwMDY5OCA2NTUzNSBmDQowMDAwMDAwNjk5IDY1NTM1IGYNCjAwMDAwMDA3MDAgNjU1MzUg Zg0KMDAwMDAwMDcwMSA2NTUzNSBmDQowMDAwMDAwNzAyIDY1NTM1IGYNCjAwMDAwMDA3MDMgNjU1 MzUgZg0KMDAwMDAwMDcwNCA2NTUzNSBmDQowMDAwMDAwNzA1IDY1NTM1IGYNCjAwMDAwMDA3MDYg NjU1MzUgZg0KMDAwMDAwMDcwNyA2NTUzNSBmDQowMDAwMDAwNzA4IDY1NTM1IGYNCjAwMDAwMDA3 MDkgNjU1MzUgZg0KMDAwMDAwMDcxMCA2NTUzNSBmDQowMDAwMDAwNzExIDY1NTM1IGYNCjAwMDAw MDA3MTIgNjU1MzUgZg0KMDAwMDAwMDcxMyA2NTUzNSBmDQowMDAwMDAwNzE0IDY1NTM1IGYNCjAw MDAwMDA3MTUgNjU1MzUgZg0KMDAwMDAwMDcxNiA2NTUzNSBmDQowMDAwMDAwNzE3IDY1NTM1IGYN CjAwMDAwMDA3MTggNjU1MzUgZg0KMDAwMDAwMDcxOSA2NTUzNSBmDQowMDAwMDAwNzIwIDY1NTM1 IGYNCjAwMDAwMDA3MjEgNjU1MzUgZg0KMDAwMDAwMDcyMiA2NTUzNSBmDQowMDAwMDAwNzIzIDY1 NTM1IGYNCjAwMDAwMDA3MjQgNjU1MzUgZg0KMDAwMDAwMDcyNSA2NTUzNSBmDQowMDAwMDAwNzI2 IDY1NTM1IGYNCjAwMDAwMDA3MjcgNjU1MzUgZg0KMDAwMDAwMDcyOCA2NTUzNSBmDQowMDAwMDAw NzI5IDY1NTM1IGYNCjAwMDAwMDA3MzAgNjU1MzUgZg0KMDAwMDAwMDczMSA2NTUzNSBmDQowMDAw MDAwNzMyIDY1NTM1IGYNCjAwMDAwMDA3MzMgNjU1MzUgZg0KMDAwMDAwMDczNCA2NTUzNSBmDQow MDAwMDAwNzM1IDY1NTM1IGYNCjAwMDAwMDA3MzYgNjU1MzUgZg0KMDAwMDAwMDczNyA2NTUzNSBm DQowMDAwMDAwNzM4IDY1NTM1IGYNCjAwMDAwMDA3MzkgNjU1MzUgZg0KMDAwMDAwMDc0MCA2NTUz NSBmDQowMDAwMDAwNzQxIDY1NTM1IGYNCjAwMDAwMDA3NDIgNjU1MzUgZg0KMDAwMDAwMDc0MyA2 NTUzNSBmDQowMDAwMDAwNzQ0IDY1NTM1IGYNCjAwMDAwMDA3NDUgNjU1MzUgZg0KMDAwMDAwMDc0 NiA2NTUzNSBmDQowMDAwMDAwNzQ3IDY1NTM1IGYNCjAwMDAwMDA3NDggNjU1MzUgZg0KMDAwMDAw MDc0OSA2NTUzNSBmDQowMDAwMDAwNzUwIDY1NTM1IGYNCjAwMDAwMDA3NTEgNjU1MzUgZg0KMDAw MDAwMDc1MiA2NTUzNSBmDQowMDAwMDAwNzUzIDY1NTM1IGYNCjAwMDAwMDA3NTQgNjU1MzUgZg0K MDAwMDAwMDc1NSA2NTUzNSBmDQowMDAwMDAwNzU2IDY1NTM1IGYNCjAwMDAwMDA3NTcgNjU1MzUg Zg0KMDAwMDAwMDc1OCA2NTUzNSBmDQowMDAwMDAwNzU5IDY1NTM1IGYNCjAwMDAwMDA3NjAgNjU1 MzUgZg0KMDAwMDAwMDc2MSA2NTUzNSBmDQowMDAwMDAwNzYyIDY1NTM1IGYNCjAwMDAwMDA3NjMg NjU1MzUgZg0KMDAwMDAwMDc2NCA2NTUzNSBmDQowMDAwMDAwNzY1IDY1NTM1IGYNCjAwMDAwMDA3 NjYgNjU1MzUgZg0KMDAwMDAwMDc2NyA2NTUzNSBmDQowMDAwMDAwNzY4IDY1NTM1IGYNCjAwMDAw MDA3NjkgNjU1MzUgZg0KMDAwMDAwMDc3MCA2NTUzNSBmDQowMDAwMDAwNzcxIDY1NTM1IGYNCjAw MDAwMDA3NzIgNjU1MzUgZg0KMDAwMDAwMDc3MyA2NTUzNSBmDQowMDAwMDAwNzc0IDY1NTM1IGYN CjAwMDAwMDA3NzUgNjU1MzUgZg0KMDAwMDAwMDc3NiA2NTUzNSBmDQowMDAwMDAwNzc3IDY1NTM1 IGYNCjAwMDAwMDA3NzggNjU1MzUgZg0KMDAwMDAwMDc3OSA2NTUzNSBmDQowMDAwMDAwNzgwIDY1 NTM1IGYNCjAwMDAwMDA3ODEgNjU1MzUgZg0KMDAwMDAwMDc4MiA2NTUzNSBmDQowMDAwMDAwNzgz IDY1NTM1IGYNCjAwMDAwMDA3ODQgNjU1MzUgZg0KMDAwMDAwMDc4NSA2NTUzNSBmDQowMDAwMDAw Nzg2IDY1NTM1IGYNCjAwMDAwMDA3ODcgNjU1MzUgZg0KMDAwMDAwMDc4OCA2NTUzNSBmDQowMDAw MDAwNzg5IDY1NTM1IGYNCjAwMDAwMDA3OTAgNjU1MzUgZg0KMDAwMDAwMDc5MSA2NTUzNSBmDQow MDAwMDAwNzkyIDY1NTM1IGYNCjAwMDAwMDA3OTMgNjU1MzUgZg0KMDAwMDAwMDc5NCA2NTUzNSBm DQowMDAwMDAwNzk1IDY1NTM1IGYNCjAwMDAwMDA3OTYgNjU1MzUgZg0KMDAwMDAwMDc5NyA2NTUz NSBmDQowMDAwMDAwNzk4IDY1NTM1IGYNCjAwMDAwMDA3OTkgNjU1MzUgZg0KMDAwMDAwMDgwMCA2 NTUzNSBmDQowMDAwMDAwODAxIDY1NTM1IGYNCjAwMDAwMDA4MDIgNjU1MzUgZg0KMDAwMDAwMDgw MyA2NTUzNSBmDQowMDAwMDAwODA0IDY1NTM1IGYNCjAwMDAwMDA4MDUgNjU1MzUgZg0KMDAwMDAw MDgwNiA2NTUzNSBmDQowMDAwMDAwODA3IDY1NTM1IGYNCjAwMDAwMDA4MDggNjU1MzUgZg0KMDAw MDAwMDgwOSA2NTUzNSBmDQowMDAwMDAwODEwIDY1NTM1IGYNCjAwMDAwMDA4MTEgNjU1MzUgZg0K MDAwMDAwMDgxMiA2NTUzNSBmDQowMDAwMDAwODEzIDY1NTM1IGYNCjAwMDAwMDA4MTQgNjU1MzUg Zg0KMDAwMDAwMDgxNSA2NTUzNSBmDQowMDAwMDAwODE2IDY1NTM1IGYNCjAwMDAwMDA4MTcgNjU1 MzUgZg0KMDAwMDAwMDgxOCA2NTUzNSBmDQowMDAwMDAwODE5IDY1NTM1IGYNCjAwMDAwMDA4MjAg NjU1MzUgZg0KMDAwMDAwMDgyMSA2NTUzNSBmDQowMDAwMDAwODIyIDY1NTM1IGYNCjAwMDAwMDAw MDAgNjU1MzUgZg0KMDAwMDA1NDQ5NSAwMDAwMCBuDQowMDAwMDU0ODU2IDAwMDAwIG4NCjAwMDAx NTAwMjggMDAwMDAgbg0KMDAwMDE1MDY5MiAwMDAwMCBuDQowMDAwMTUxMTY0IDAwMDAwIG4NCjAw MDAxNTE0NzQgMDAwMDAgbg0KMDAwMDE5MjY4NyAwMDAwMCBuDQowMDAwMTkyNzQyIDAwMDAwIG4N CjAwMDAxOTMwNDIgMDAwMDAgbg0KMDAwMDIwNjI5MCAwMDAwMCBuDQowMDAwMjA2MzM0IDAwMDAw IG4NCjAwMDAyMDY1NDQgMDAwMDAgbg0KMDAwMDI4NjE0OCAwMDAwMCBuDQp0cmFpbGVyDQo8PC9T aXplIDgzNi9Sb290IDEgMCBSL0luZm8gNzIgMCBSL0lEWzw1RkM4MDg3RTY3MjZENjRBQTQyNzkw RTM5QzEwMkYwQT48NUZDODA4N0U2NzI2RDY0QUE0Mjc5MEUzOUMxMDJGMEE+XSA+Pg0Kc3RhcnR4 cmVmDQoyODgwMzMNCiUlRU9GDQp4cmVmDQowIDANCnRyYWlsZXINCjw8L1NpemUgODM2L1Jvb3Qg MSAwIFIvSW5mbyA3MiAwIFIvSURbPDVGQzgwODdFNjcyNkQ2NEFBNDI3OTBFMzlDMTAyRjBBPjw1 RkM4MDg3RTY3MjZENjRBQTQyNzkwRTM5QzEwMkYwQT5dIC9QcmV2IDI4ODAzMy9YUmVmU3RtIDI4 NjE0OD4+DQpzdGFydHhyZWYNCjMwNDkxMw0KJSVFT0Y= --001a114a980cca7941052e3fa714-- From nobody Thu Mar 17 22:53:47 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA4BC12DDAB for ; Thu, 17 Mar 2016 22:53:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.22 X-Spam-Level: X-Spam-Status: No, score=-4.22 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gsvf9Q1aeBiK for ; Thu, 17 Mar 2016 22:53:42 -0700 (PDT) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DBEF412DB3E for ; Thu, 17 Mar 2016 22:53:41 -0700 (PDT) X-AuditID: c1b4fb2d-f79c06d000005960-9e-56eb97e31daa Received: from ESESSHC024.ericsson.se (Unknown_Domain [153.88.183.90]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id 20.2E.22880.3E79BE65; Fri, 18 Mar 2016 06:53:39 +0100 (CET) Received: from ESESSMB303.ericsson.se ([169.254.3.52]) by ESESSHC024.ericsson.se ([153.88.183.90]) with mapi id 14.03.0248.002; Fri, 18 Mar 2016 06:53:31 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: =?utf-8?B?RXJpayBXYWhsc3Ryw7Zt?= , "'Samuel Erdtman'" , 'Hannes Tschofenig' Thread-Topic: [Ace] Credential Options Thread-Index: AQHRdK5pZj9RqeUWsUujZjST0vRtXp9aCXqAgAIL+ICAArYugA== Date: Fri, 18 Mar 2016 05:53:31 +0000 Message-ID: References: <56D72BA7.1030003@gmx.net> <006101d17f87$ca56be50$5f043af0$@wahlstromstekniska.se> In-Reply-To: <006101d17f87$ca56be50$5f043af0$@wahlstromstekniska.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.1.160122 x-originating-ip: [153.88.183.150] Content-Type: multipart/alternative; boundary="_000_D31123C0502CDgoranselanderericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrHIsWRmVeSWpSXmKPExsUyM2J7lO7j6a/DDOZ8trH4/q2H2eLrhCZW i6U777Fa/F96ismBxePFvz2MHos37WfzWLLkJ5PHmmkzWAJYorhsUlJzMstSi/TtErgydm3c xlzwt5ex4vD7WUwNjFO6GLsYOTkkBEwkznz6wQphi0lcuLeerYuRi0NI4DCjREfjQ1YIZzGj RN+BB2wgVWwCLhIPGh4xgSREBOYxSix4doUJJMEsoCixe9ZZdhBbWEBV4sOxh2C2iICaxMq2 Y0DrOIBsJ4lTt7xBwixAJccntoK18gpYSHxdPhfMFhJYzihx964HiM0JtOvC2jlglzICXff9 1BqoVeISt57MZ4K4WkBiyZ7zzBC2qMTLx//AvhEV0JO43bGWHSKuJLFi+yVGiN5YiVkfP7FD 7BWUODnzCcsERrFZSMbOQlI2C0nZLKAPmAU0Jdbv0p8F9fCU7ofsELaGROucuVC2tcSDo5uY kdUsYORYxShanFpcnJtuZKyXWpSZXFycn6eXl1qyiREYywe3/Nbdwbj6teMhRgEORiUe3oKn L8OEWBPLiitzDzFKcDArifBytr0OE+JNSaysSi3Kjy8qzUktPsQozcGiJM7L9ulymJBAemJJ anZqakFqEUyWiYNTqoFR2X6p4NNwmWuas1N3PnPhknld4qan8Hj/hjLZqIlhaeXT3SbL16ze LT/3ZRhXRFZz45OiDcf0JsVs7n+hqsyfcZVdq3z6Y7Vty7P0pHQq3pR+nvBO+e65O8UdD72q N6aH3vp2LP7ysu+p/C6PhGd5XReesyLyfF1T3XP/ts3iX896L2ZpsP6ixFKckWioxVxUnAgA CNofi+ECAAA= Archived-At: Cc: "Ace@ietf.org" Subject: Re: [Ace] Credential Options X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Mar 2016 05:53:46 -0000 --_000_D31123C0502CDgoranselanderericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNClNvcnJ5IGZvciBtaXNzaW5nIHRoZSBkZWFkbGluZS4gSSBhZ3JlZSB3aXRoIEVyaWsg aW4gdGhlIGZvbGxvd2luZyBzZW5zZS4NCg0KSeKAmW0gZm9yIG9wdGlvbiAxIG9uIE1USS4NCg0K QXMgZm9yIHNwZWNpZnlpbmcgdGhlIHVzZSwgdGhlcmUgYXJlIHR3byBhc3BlY3RzOg0KDQogIDEu ICBUcmFuc3BvcnQgb2Yga2V5L2NyZWRlbnRpYWwgZnJvbSBBUyB0byBDIGFuZCBSUw0KICAyLiAg QmluZGluZyBvZiBrZXkvY3JlZGVudGlhbCB0byBhY2Nlc3MgdG9rZW4vcmlnaHRzDQoNCkluIGNh c2Ugb2YgdGhlIGZpcnN0IHRpbWUgYWNjZXNzIHJpZ2h0cyB0aGVyZSBpcyBubyBtYWpvciBkaWZm ZXJlbmNlIGJldHdlZW4gdGhlc2UuIEJ1dCBmb3IgZXhhbXBsZSBpbiB0aGUgY2FzZSBvZiBhIGNs aWVudCBhY3F1aXJpbmcgZXh0ZW5kZWQgb3IgYWRkaXRpb25hbCByaWdodHMsIHRoZXJlIG5lZWRz IHRvIGJlIGEgd2F5IHRvIGJpbmQgYWNjZXNzIHJpZ2h0cyB0byBhbiBleGlzdGluZyBrZXkvY3Jl ZGVudGlhbCB3aXRob3V0IHRyYW5zcG9ydGluZyB0aGUga2V5LiBBbmQgdGhpcyBuZWVkcyB0byBi ZSBzcGVjaWZpZWQgaW4gdGhlIGZyYW1ld29yaywgZS5nLiBob3cgYSBjbGllbnQgaW4gdGhlIHRv a2VuIHJlcXVlc3Qgc2VuZHMgYSByZWZlcmVuY2UgdG8gaXRzIGtleS9jcmVkZW50aWFsIHJhdGhl ciB0aGFuIHRoZSBhY3R1YWwga2V5L2NyZWRlbnRpYWwsIGV0Yy4gQW5kIGluIHRoZSBjYXNlIG9m IGNlcnRpZmljYXRlcywgIHNlbmRpbmcgYW4gaWRlbnRpZmllciBvZiB0aGUgY2VydGlmaWNhdGUg cmF0aGVyIHRoYW4gdGhlIGNlcnRpZmljYXRlIGl0c2VsZiBvZiBjb3Vyc2UgaGFzIGFuIGltcGFj dCBmb3IgY29uc3RyYWluZWQgZGV2aWNlcywgd2hlcmUgY2VydGlmaWNhdGVzIG1heSBiZSBwcmUt Y29uZmlndXJlZCBidXQgaGVhdnkgdG8gdHJhbnNwb3J0Lg0KDQpTbyBJ4oCZbSBmb3Igc3BlY2lm eWluZyB0aGUgdXNlIGluIHRoZSBzZW5zZSBvZiBzcGVjaWZ5aW5nIGhvdyB0byByZWZlcmVuY2Uv YmluZCB3aGljaCBjcmVkZW50aWFsIHRvIHVzZSBpbiBhbGwgdGhyZWUgY2FzZXMgKHdoaWxlIGhv dyBpdCBpcyB1c2VkIG1heSBiZSBsZWZ0IGZvciBkaWZmZXJlbnQgcHJvZmlsZXMpLiBBbmQgSeKA mW0gZm9yIHNwZWNpZnlpbmcgaG93IHRvIHRyYW5zcG9ydCBhdCBsZWFzdCBQU0sgYW5kIFJQSy4N Cg0KR8O2cmFuDQoNCg0KDQpGcm9tOiBBY2UgPGFjZS1ib3VuY2VzQGlldGYub3JnPG1haWx0bzph Y2UtYm91bmNlc0BpZXRmLm9yZz4+IG9uIGJlaGFsZiBvZiBFcmlrIFdhaGxzdHLDtm0gPGVyaWtA d2FobHN0cm9tc3Rla25pc2thLnNlPG1haWx0bzplcmlrQHdhaGxzdHJvbXN0ZWtuaXNrYS5zZT4+ DQpEYXRlOiBXZWRuZXNkYXkgMTYgTWFyY2ggMjAxNiBhdCAxNDoyOA0KVG86ICdTYW11ZWwgRXJk dG1hbicgPHNhbXVlbEBlcmR0bWFuLnNlPG1haWx0bzpzYW11ZWxAZXJkdG1hbi5zZT4+LCAnSGFu bmVzIFRzY2hvZmVuaWcnIDxoYW5uZXMudHNjaG9mZW5pZ0BnbXgubmV0PG1haWx0bzpoYW5uZXMu dHNjaG9mZW5pZ0BnbXgubmV0Pj4NCkNjOiAiQWNlQGlldGYub3JnPG1haWx0bzpBY2VAaWV0Zi5v cmc+IiA8QWNlQGlldGYub3JnPG1haWx0bzpBY2VAaWV0Zi5vcmc+Pg0KU3ViamVjdDogUmU6IFtB Y2VdIENyZWRlbnRpYWwgT3B0aW9ucw0KDQpBcyBJIG1lbnRpb25lZCBiZWZvcmUuIEkgZG9u4oCZ dCB0aGluayBhbnkgbWV0aG9kIHNob3VsZCBiZSBNVEkuIFRoZXkgYWxsIGhhdmUgZGlmZmVyZW50 IHNlY3VyaXR5IHByb3BlcnRpZXMgYW5kIGZvcmNpbmcgYSBjb25zdHJhaW5lZCBkZXZpY2UgdG8g c3VwcG9ydCBhIG1ldGhvZCBpdCBkb2VzIG5vdCBhdHRlbmQgdG8gdXNlIGlzIGp1c3Qgbm90IHRo ZSByaWdodCB0aGluZyB0byBkby4NClNvLCBmZWVsaW5nIHN0cm9uZ2x5IGFib3V0IE9wdGlvbjE6 IG5vdGhpbmcuIE9uIHRoZSBvdGhlciBoYW5kIEkgdGhpbmsgYWxsIHRocmVlIHNob3VsZCBiZSBz cGVjaWZpZWQgaW4gdGhlIGNvcmUgZnJhbWV3b3JrLg0KLyBFcmlrDQoNCkZyb206IEFjZSBbbWFp bHRvOmFjZS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgU2FtdWVsIEVyZHRtYW4NClNl bnQ6IGRlbiAxNSBtYXJzIDIwMTYgMDY6MTQNClRvOiBIYW5uZXMgVHNjaG9mZW5pZyA8aGFubmVz LnRzY2hvZmVuaWdAZ214Lm5ldDxtYWlsdG86aGFubmVzLnRzY2hvZmVuaWdAZ214Lm5ldD4+DQpD YzogQWNlQGlldGYub3JnPG1haWx0bzpBY2VAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW0FjZV0g Q3JlZGVudGlhbCBPcHRpb25zDQoNCkhpLA0KDQpPbiB0aGUgc3ViamVjdCBtYW5kYXRvcnkgdG8g aW1wbGVtZW50LCBpbiB0aGUgQ29BUCBzcGVjaWZpY2F0aW9uIFJhd1B1YmxpY0tleSBpcyB0aGUg b25lIGNyZWRlbnRpYWwgdHlwZSB0aGF0IGlzIG1hbmRhdG9yeSB0byBpbXBsZW1lbnQgKGh0dHBz Oi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM3MjUyI3NlY3Rpb24tOSksIG1heWJlIHRoYXQgY291 bGQgYmUgZW5vdWdoIGhlcmUgdG9vLg0KDQovL1NhbXVlbA0KDQpPbiBXZWQsIE1hciAyLCAyMDE2 IGF0IDc6MDYgUE0sIEhhbm5lcyBUc2Nob2ZlbmlnIDxoYW5uZXMudHNjaG9mZW5pZ0BnbXgubmV0 PG1haWx0bzpoYW5uZXMudHNjaG9mZW5pZ0BnbXgubmV0Pj4gd3JvdGU6DQpIaSBhbGwsDQoNCmlu IGFuIGF0dGVtcHQgdG8gcHJvZ3Jlc3MgPGRyYWZ0LWlldGYtYWNlLW9hdXRoLWF1dGh6PiB0aGUg cXVlc3Rpb24NCmFyaXNlcyBhYm91dCBzb2x1dGlvbnMgc2hvdWxkIGJlIGRlc2NyaWJlZCBpbiBl bm91Z2ggZGV0YWlsIHRvIGhhdmUgdGhlbQ0KaW50ZXJvcGVyYWJsZS4NCg0KVGhlcmUgYXJlIHRo cmVlIHR5cGVzIG9mIGNyZWRlbnRpYWxzIHNwZWNpZmllZDoNCg0KKiBQU0sNCiogUmF3IFB1Ymxp YyBLZXkNCiogQ2VydGlmaWNhdGVzDQoNCldpdGggcmVnYXJkIHRvIGFzeW1tZXRyaWMgY3J5cHRv Z3JhcGh5IHdlIHNldHRsZWQgd2l0aCBFQ0MgYW5kIERUTFMvVExTDQpwcm9maWxlIGRvY3VtZW50 IG1ha2VzIGNlcnRhaW4gcmVjb21tZW5kYXRpb25zIHJlZ2FyZGluZyB0aGUgY3J5cHRvLg0KDQpI b3dldmVyLCB0aGVyZSBpcyBzdGlsbCB0aGUgcXVlc3Rpb24gYWJvdXQgd2hhdCBpcw0KbWFuZGF0 b3J5LXRvLWltcGxlbWVudCBhbmQgd2hhdCBzaG91bGQgYmUgZGVzY3JpYmVkIGluIHRoZSBXRyBk b2N1bWVudC4NCg0KV2hhdCBzaG91bGQgYmUgbWFuZGF0b3J5IHRvIGltcGxlbWVudDoNCg0KKiBP cHRpb24gMTogTm90aGluZw0KKiBPcHRpb24gMjogUFNLLCBSUEssIENlcnRpZmljYXRlcw0KKiBP cHRpb24gMzogUFNLDQoqIE9wdGlvbiA0OiBSUEsNCiogT3B0aW9uIDU6IENlcnRpZmljYXRlcw0K DQpXaGljaCBvZiB0aGUgdGhyZWUgc2hvdWxkIGJlIGRlc2NyaWJlZCBpbiB0aGUgZG9jdW1lbnQ/ IChPYnZpb3VzbHkgdGhlDQpNVEkgdmVyc2lvbnMgYnV0IGFsc28gb3RoZXJzIG9yIHNob3VsZCB0 aGV5IGJlIGNvdmVyZWQgaW4gc2VwYXJhdGUNCmRvY3VtZW50cz8pDQoNCkhlcmUgYXJlIHRoZSBz bGlkZXMgZnJvbSB0aGUgQUNFIHZpcnR1YWwgaW50ZXJpbSBtZWV0aW5nIHByb3ZpZGluZw0KZnVy dGhlciBiYWNrZ3JvdW5kIGluZm9ybWF0aW9uOg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcHJvY2Vl ZGluZ3MvaW50ZXJpbS8yMDE2LzAzLzAyL2FjZS9zbGlkZXMvc2xpZGVzLWludGVyaW0tMjAxNi1h Y2UtMS0zLnBkZg0KDQpEZWFkbGluZTogMTZ0aCBNYXJjaCAyMDE2DQoNCkNpYW8NCkhhbm5lcyAm IEtlcGVuZw0KDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fDQpBY2UgbWFpbGluZyBsaXN0DQpBY2VAaWV0Zi5vcmc8bWFpbHRvOkFjZUBpZXRmLm9yZz4N Cmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vYWNlDQoNCg== --_000_D31123C0502CDgoranselanderericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1zaXplOiAx NHB4OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiPg0KPGRpdj5IaSw8L2Rpdj4N CjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PlNvcnJ5IGZvciBtaXNzaW5nIHRoZSBkZWFkbGluZS4g SSBhZ3JlZSB3aXRoIEVyaWsgaW4gdGhlIGZvbGxvd2luZyBzZW5zZS48L2Rpdj4NCjxkaXY+PGJy Pg0KPC9kaXY+DQo8ZGl2PknigJltIGZvciBvcHRpb24gMSBvbiBNVEkuPC9kaXY+DQo8ZGl2Pjxi cj4NCjwvZGl2Pg0KPGRpdj5BcyBmb3Igc3BlY2lmeWluZyB0aGUgdXNlLCB0aGVyZSBhcmUgdHdv IGFzcGVjdHM6PC9kaXY+DQo8b2w+DQo8bGk+VHJhbnNwb3J0IG9mIGtleS9jcmVkZW50aWFsIGZy b20gQVMgdG8gQyBhbmQgUlM8L2xpPjxsaT5CaW5kaW5nIG9mIGtleS9jcmVkZW50aWFsIHRvIGFj Y2VzcyB0b2tlbi9yaWdodHM8L2xpPjwvb2w+DQo8ZGl2PkluIGNhc2Ugb2YgdGhlIGZpcnN0IHRp bWUgYWNjZXNzIHJpZ2h0cyB0aGVyZSBpcyBubyBtYWpvciBkaWZmZXJlbmNlIGJldHdlZW4gdGhl c2UuIEJ1dCBmb3IgZXhhbXBsZSBpbiB0aGUgY2FzZSBvZiBhIGNsaWVudCBhY3F1aXJpbmcgZXh0 ZW5kZWQgb3IgYWRkaXRpb25hbCByaWdodHMsIHRoZXJlIG5lZWRzIHRvIGJlIGEgd2F5IHRvIGJp bmQgYWNjZXNzIHJpZ2h0cyB0byBhbiBleGlzdGluZyBrZXkvY3JlZGVudGlhbCB3aXRob3V0IHRy YW5zcG9ydGluZw0KIHRoZSBrZXkuIEFuZCB0aGlzIG5lZWRzIHRvIGJlIHNwZWNpZmllZCBpbiB0 aGUgZnJhbWV3b3JrLCBlLmcuIGhvdyBhIGNsaWVudCBpbiB0aGUgdG9rZW4gcmVxdWVzdCBzZW5k cyBhIHJlZmVyZW5jZSB0byBpdHMga2V5L2NyZWRlbnRpYWwgcmF0aGVyIHRoYW4gdGhlIGFjdHVh bCBrZXkvY3JlZGVudGlhbCwgZXRjLiBBbmQgaW4gdGhlIGNhc2Ugb2YgY2VydGlmaWNhdGVzLCAm bmJzcDtzZW5kaW5nIGFuIGlkZW50aWZpZXIgb2YgdGhlIGNlcnRpZmljYXRlDQogcmF0aGVyIHRo YW4gdGhlIGNlcnRpZmljYXRlIGl0c2VsZiBvZiBjb3Vyc2UgaGFzIGFuIGltcGFjdCBmb3IgY29u c3RyYWluZWQgZGV2aWNlcywgd2hlcmUgY2VydGlmaWNhdGVzIG1heSBiZSBwcmUtY29uZmlndXJl ZCBidXQgaGVhdnkgdG8gdHJhbnNwb3J0LjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+ U28gSeKAmW0gZm9yIHNwZWNpZnlpbmcgdGhlIHVzZSBpbiB0aGUgc2Vuc2Ugb2Ygc3BlY2lmeWlu ZyA8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6IGJvbGQ7Ij4NCmhvdyB0byByZWZlcmVuY2UvYmlu ZDwvc3Bhbj4gd2hpY2ggY3JlZGVudGlhbCB0byB1c2UgaW4gYWxsIHRocmVlIGNhc2VzICh3aGls ZSZuYnNwOzxzcGFuIHN0eWxlPSJmb250LXdlaWdodDogYm9sZDsiPmhvdyBpdCBpcyB1c2VkPC9z cGFuPiZuYnNwO21heSBiZSBsZWZ0IGZvciBkaWZmZXJlbnQgcHJvZmlsZXMpLiBBbmQgSeKAmW0g Zm9yIHNwZWNpZnlpbmcgaG93IHRvIHRyYW5zcG9ydCBhdCBsZWFzdCBQU0sgYW5kIFJQSy48L2Rp dj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PkfDtnJhbjwvZGl2Pg0KPGRpdj4mbmJzcDs8L2Rp dj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPHNwYW4gaWQ9Ik9MS19T UkNfQk9EWV9TRUNUSU9OIj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmk7IGZvbnQt c2l6ZToxMXB0OyB0ZXh0LWFsaWduOmxlZnQ7IGNvbG9yOmJsYWNrOyBCT1JERVItQk9UVE9NOiBt ZWRpdW0gbm9uZTsgQk9SREVSLUxFRlQ6IG1lZGl1bSBub25lOyBQQURESU5HLUJPVFRPTTogMGlu OyBQQURESU5HLUxFRlQ6IDBpbjsgUEFERElORy1SSUdIVDogMGluOyBCT1JERVItVE9QOiAjYjVj NGRmIDFwdCBzb2xpZDsgQk9SREVSLVJJR0hUOiBtZWRpdW0gbm9uZTsgUEFERElORy1UT1A6IDNw dCI+DQo8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCI+RnJvbTogPC9zcGFuPkFjZSAmbHQ7 PGEgaHJlZj0ibWFpbHRvOmFjZS1ib3VuY2VzQGlldGYub3JnIj5hY2UtYm91bmNlc0BpZXRmLm9y ZzwvYT4mZ3Q7IG9uIGJlaGFsZiBvZiBFcmlrIFdhaGxzdHLDtm0gJmx0OzxhIGhyZWY9Im1haWx0 bzplcmlrQHdhaGxzdHJvbXN0ZWtuaXNrYS5zZSI+ZXJpa0B3YWhsc3Ryb21zdGVrbmlza2Euc2U8 L2E+Jmd0Ozxicj4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpib2xkIj5EYXRlOiA8L3NwYW4+ V2VkbmVzZGF5IDE2IE1hcmNoIDIwMTYgYXQgMTQ6Mjg8YnI+DQo8c3BhbiBzdHlsZT0iZm9udC13 ZWlnaHQ6Ym9sZCI+VG86IDwvc3Bhbj4nU2FtdWVsIEVyZHRtYW4nICZsdDs8YSBocmVmPSJtYWls dG86c2FtdWVsQGVyZHRtYW4uc2UiPnNhbXVlbEBlcmR0bWFuLnNlPC9hPiZndDssICdIYW5uZXMg VHNjaG9mZW5pZycgJmx0OzxhIGhyZWY9Im1haWx0bzpoYW5uZXMudHNjaG9mZW5pZ0BnbXgubmV0 Ij5oYW5uZXMudHNjaG9mZW5pZ0BnbXgubmV0PC9hPiZndDs8YnI+DQo8c3BhbiBzdHlsZT0iZm9u dC13ZWlnaHQ6Ym9sZCI+Q2M6IDwvc3Bhbj4mcXVvdDs8YSBocmVmPSJtYWlsdG86QWNlQGlldGYu b3JnIj5BY2VAaWV0Zi5vcmc8L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86QWNlQGlldGYu b3JnIj5BY2VAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpi b2xkIj5TdWJqZWN0OiA8L3NwYW4+UmU6IFtBY2VdIENyZWRlbnRpYWwgT3B0aW9uczxicj4NCjwv ZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIGlkPSJNQUNfT1VUTE9PS19BVFRS SUJVVElPTl9CTE9DS1FVT1RFIiBzdHlsZT0iQk9SREVSLUxFRlQ6ICNiNWM0ZGYgNSBzb2xpZDsg UEFERElORzowIDAgMCA1OyBNQVJHSU46MCAwIDAgNTsiPg0KPGRpdiB4bWxuczp2PSJ1cm46c2No ZW1hcy1taWNyb3NvZnQtY29tOnZtbCIgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNv bTpvZmZpY2U6b2ZmaWNlIiB4bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmlj ZTp3b3JkIiB4bWxuczptPSJodHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0 LzEyL29tbWwiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxtZXRh IG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1l ZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAx NSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFs LCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsNCgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3 IFJvbWFuIixzZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0K YTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFu LkVtYWlsU3R5bGUxNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZh bWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZh dWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmOw0KCW1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTO30NCkBwYWdlIFdvcmRT ZWN0aW9uMQ0KCXtzaXplOjYxMi4wcHQgNzkyLjBwdDsNCgltYXJnaW46NzAuODVwdCA3MC44NXB0 IDcwLjg1cHQgNzAuODVwdDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24x O30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRz IHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtp ZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1h cCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRp Zl0tLT4NCjxkaXYgbGFuZz0iU1YiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBj bGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+ QXMgSSBtZW50aW9uZWQgYmVmb3JlLiBJIGRvbuKAmXQgdGhpbmsgYW55IG1ldGhvZCBzaG91bGQg YmUgTVRJLiBUaGV5IGFsbCBoYXZlIGRpZmZlcmVudCBzZWN1cml0eSBwcm9wZXJ0aWVzIGFuZCBm b3JjaW5nDQogYSBjb25zdHJhaW5lZCBkZXZpY2UgdG8gc3VwcG9ydCBhIG1ldGhvZCBpdCBkb2Vz IG5vdCBhdHRlbmQgdG8gdXNlIGlzIGp1c3Qgbm90IHRoZSByaWdodCB0aGluZyB0byBkby48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1V UyIgc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0Q7bXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPlNv LCBmZWVsaW5nIHN0cm9uZ2x5IGFib3V0IE9wdGlvbjE6IG5vdGhpbmcuIE9uIHRoZSBvdGhlciBo YW5kIEkgdGhpbmsgYWxsIHRocmVlIHNob3VsZCBiZSBzcGVjaWZpZWQgaW4gdGhlIGNvcmUgZnJh bWV3b3JrLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IGxhbmc9IkVOLVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RDttc28tZmFyZWFzdC1sYW5ndWFn ZTpFTi1VUyI+LyBFcmlrPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNw YW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIGxhbmc9IkVO LVVTIiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWYiPiBBY2UgWzxhIGhyZWY9Im1haWx0bzphY2UtYm91bmNlc0BpZXRmLm9y ZyI+bWFpbHRvOmFjZS1ib3VuY2VzQGlldGYub3JnPC9hPl0NCjxiPk9uIEJlaGFsZiBPZiA8L2I+ U2FtdWVsIEVyZHRtYW48YnI+DQo8Yj5TZW50OjwvYj4gZGVuIDE1IG1hcnMgMjAxNiAwNjoxNDxi cj4NCjxiPlRvOjwvYj4gSGFubmVzIFRzY2hvZmVuaWcgJmx0OzxhIGhyZWY9Im1haWx0bzpoYW5u ZXMudHNjaG9mZW5pZ0BnbXgubmV0Ij5oYW5uZXMudHNjaG9mZW5pZ0BnbXgubmV0PC9hPiZndDs8 YnI+DQo8Yj5DYzo8L2I+IDxhIGhyZWY9Im1haWx0bzpBY2VAaWV0Zi5vcmciPkFjZUBpZXRmLm9y ZzwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtBY2VdIENyZWRlbnRpYWwgT3B0aW9uczxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhpLDxvOnA+PC9vOnA+PC9wPg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gdGhlIHN1YmplY3QgbWFuZGF0b3J5IHRv IGltcGxlbWVudCwgaW4gdGhlIENvQVAgc3BlY2lmaWNhdGlvbiZuYnNwOzxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2NvbG9yOmJsYWNrIj5SYXdQdWJsaWNLZXk8L3NwYW4+Jm5ic3A7aXMg dGhlIG9uZSBjcmVkZW50aWFsIHR5cGUgdGhhdCBpcyBtYW5kYXRvcnkgdG8gaW1wbGVtZW50Jm5i c3A7KDxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM3MjUyI3NlY3Rpb24t OSI+aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzcyNTIjc2VjdGlvbi05PC9hPiksDQog bWF5YmUgdGhhdCBjb3VsZCBiZSBlbm91Z2ggaGVyZSB0b28uPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPi8vU2FtdWVsPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIFdlZCwgTWFyIDIsIDIw MTYgYXQgNzowNiBQTSwgSGFubmVzIFRzY2hvZmVuaWcgJmx0OzxhIGhyZWY9Im1haWx0bzpoYW5u ZXMudHNjaG9mZW5pZ0BnbXgubmV0IiB0YXJnZXQ9Il9ibGFuayI+aGFubmVzLnRzY2hvZmVuaWdA Z214Lm5ldDwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9 ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFkZGluZzowY20g MGNtIDBjbSA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGNtIj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+SGkgYWxsLDxicj4N Cjxicj4NCmluIGFuIGF0dGVtcHQgdG8gcHJvZ3Jlc3MgJmx0O2RyYWZ0LWlldGYtYWNlLW9hdXRo LWF1dGh6Jmd0OyB0aGUgcXVlc3Rpb248YnI+DQphcmlzZXMgYWJvdXQgc29sdXRpb25zIHNob3Vs ZCBiZSBkZXNjcmliZWQgaW4gZW5vdWdoIGRldGFpbCB0byBoYXZlIHRoZW08YnI+DQppbnRlcm9w ZXJhYmxlLjxicj4NCjxicj4NClRoZXJlIGFyZSB0aHJlZSB0eXBlcyBvZiBjcmVkZW50aWFscyBz cGVjaWZpZWQ6PGJyPg0KPGJyPg0KKiBQU0s8YnI+DQoqIFJhdyBQdWJsaWMgS2V5PGJyPg0KKiBD ZXJ0aWZpY2F0ZXM8YnI+DQo8YnI+DQpXaXRoIHJlZ2FyZCB0byBhc3ltbWV0cmljIGNyeXB0b2dy YXBoeSB3ZSBzZXR0bGVkIHdpdGggRUNDIGFuZCBEVExTL1RMUzxicj4NCnByb2ZpbGUgZG9jdW1l bnQgbWFrZXMgY2VydGFpbiByZWNvbW1lbmRhdGlvbnMgcmVnYXJkaW5nIHRoZSBjcnlwdG8uPGJy Pg0KPGJyPg0KSG93ZXZlciwgdGhlcmUgaXMgc3RpbGwgdGhlIHF1ZXN0aW9uIGFib3V0IHdoYXQg aXM8YnI+DQptYW5kYXRvcnktdG8taW1wbGVtZW50IGFuZCB3aGF0IHNob3VsZCBiZSBkZXNjcmli ZWQgaW4gdGhlIFdHIGRvY3VtZW50Ljxicj4NCjxicj4NCldoYXQgc2hvdWxkIGJlIG1hbmRhdG9y eSB0byBpbXBsZW1lbnQ6PGJyPg0KPGJyPg0KKiBPcHRpb24gMTogTm90aGluZzxicj4NCiogT3B0 aW9uIDI6IFBTSywgUlBLLCBDZXJ0aWZpY2F0ZXM8YnI+DQoqIE9wdGlvbiAzOiBQU0s8YnI+DQoq IE9wdGlvbiA0OiBSUEs8YnI+DQoqIE9wdGlvbiA1OiBDZXJ0aWZpY2F0ZXM8YnI+DQo8YnI+DQpX aGljaCBvZiB0aGUgdGhyZWUgc2hvdWxkIGJlIGRlc2NyaWJlZCBpbiB0aGUgZG9jdW1lbnQ/IChP YnZpb3VzbHkgdGhlPGJyPg0KTVRJIHZlcnNpb25zIGJ1dCBhbHNvIG90aGVycyBvciBzaG91bGQg dGhleSBiZSBjb3ZlcmVkIGluIHNlcGFyYXRlPGJyPg0KZG9jdW1lbnRzPyk8YnI+DQo8YnI+DQpI ZXJlIGFyZSB0aGUgc2xpZGVzIGZyb20gdGhlIEFDRSB2aXJ0dWFsIGludGVyaW0gbWVldGluZyBw cm92aWRpbmc8YnI+DQpmdXJ0aGVyIGJhY2tncm91bmQgaW5mb3JtYXRpb246PGJyPg0KPGEgaHJl Zj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcHJvY2VlZGluZ3MvaW50ZXJpbS8yMDE2LzAzLzAyL2Fj ZS9zbGlkZXMvc2xpZGVzLWludGVyaW0tMjAxNi1hY2UtMS0zLnBkZiIgdGFyZ2V0PSJfYmxhbmsi Pmh0dHBzOi8vd3d3LmlldGYub3JnL3Byb2NlZWRpbmdzL2ludGVyaW0vMjAxNi8wMy8wMi9hY2Uv c2xpZGVzL3NsaWRlcy1pbnRlcmltLTIwMTYtYWNlLTEtMy5wZGY8L2E+PGJyPg0KPGJyPg0KRGVh ZGxpbmU6IDE2dGggTWFyY2ggMjAxNjxicj4NCjxicj4NCkNpYW88YnI+DQpIYW5uZXMgJmFtcDsg S2VwZW5nPGJyPg0KPGJyPg0KPGJyPg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX188YnI+DQpBY2UgbWFpbGluZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRv OkFjZUBpZXRmLm9yZyI+QWNlQGlldGYub3JnPC9hPjxicj4NCjxhIGhyZWY9Imh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vYWNlIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9hY2U8L2E+PG86cD48L286cD48L3A+DQo8L2Js b2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L3Nw YW4+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_D31123C0502CDgoranselanderericssoncom_-- From nobody Thu Mar 17 22:56:08 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 05CB112DB41 for ; Thu, 17 Mar 2016 22:56:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.221 X-Spam-Level: X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ezeR8A0AUG5I for ; Thu, 17 Mar 2016 22:56:04 -0700 (PDT) Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 70BA512D810 for ; Thu, 17 Mar 2016 22:56:04 -0700 (PDT) X-AuditID: c1b4fb25-f79f86d00000400a-32-56eb9872496d Received: from ESESSHC005.ericsson.se (Unknown_Domain [153.88.183.33]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id C8.B2.16394.2789BE65; Fri, 18 Mar 2016 06:56:02 +0100 (CET) Received: from ESESSMB303.ericsson.se ([169.254.3.52]) by ESESSHC005.ericsson.se ([153.88.183.33]) with mapi id 14.03.0248.002; Fri, 18 Mar 2016 06:55:24 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Hannes Tschofenig , Samuel Erdtman , Kepeng Li Thread-Topic: [Ace] Milestones Thread-Index: AQHRdKbIL/Nmd6l3gE2M3YNRQhHvJp9HcioAgAD4qYCACCz7gIADaxaAgArJVIA= Date: Fri, 18 Mar 2016 05:55:23 +0000 Message-ID: References: <56D71F16.7080303@gmx.net> <56E299FD.80205@gmx.net> In-Reply-To: <56E299FD.80205@gmx.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.1.160122 x-originating-ip: [153.88.183.150] Content-Type: text/plain; charset="utf-8" Content-ID: <56A5086A7FF529499D2934C621D1D67E@ericsson.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrDIsWRmVeSWpSXmKPExsUyM2K7om7RjNdhBg1nZC2+f+thtli68x6r xeX5RRb/l55icmDxmPj2I4vHi397GD0Wb9rP5rFkyU+mAJYoLpuU1JzMstQifbsEroyfy3qZ ClZoV0yb+ZWtgXGGVhcjB4eEgInE2eOiXYycQKaYxIV769lAbCGBw4wSf96XQ9iLGSUaFzuB 2GwCLhIPGh4xgdgiAvUSTbuesIDYzAKKErtnnWUHsYUFZCUW/lnKClEjJ3FuXTuU7Sex/+tX sBoWAVWJhW9mgcV5BSwkVl64xtjFyAW06ymjxM3FXYwgCU6goksz5oAtYwQ67vupNUwQy8Ql bj2ZzwRxtIDEkj3nmSFsUYmXj/+BDRUV0JO43bGWHSKuJLFi+yVGkH+ZBTQl1u/ShxhjLTH1 6k24+6d0P2SHuEdQ4uTMJywTGCVmIdk2C6F7FpLuWUi6ZyHpXsDIuopRtDi1OCk33chYL7Uo M7m4OD9PLy+1ZBMjME4PbvmtuoPx8hvHQ4wCHIxKPLwFT1+GCbEmlhVX5h5ilOBgVhLh5Wx7 HSbEm5JYWZValB9fVJqTWnyIUZqDRUmcl/XT5TAhgfTEktTs1NSC1CKYLBMHp1QDI8P54Lim Q5PPR/Q8F5w75VTIbwOrGkGt5TwrhdVv203cNOnomjkb5CotP25RPJogeOvmucKGpp7alXUG haFR6f12ZZN28/6Y5f/82l1GOx29Ay6LVWSu3dfxXXXzzZH9cis3r7x9eMInm8ave98t4do8 66+/aVz/Zu+K5zPu3885PsVr2dHn9yOUWIozEg21mIuKEwFNq7RSzwIAAA== Archived-At: Cc: "Ace@ietf.org" Subject: Re: [Ace] Milestones X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Mar 2016 05:56:08 -0000 SGkgSGFubmVzLA0KDQpUaW1lIHBsYW5zIGFyZSBhbHdheXMgdHJpY2t5IGJ1dCBoZXJlIGlzIGFu IGF0dGVtcHQuDQoNClRoZXJlIGlzIHN0aWxsIGEgZGlzY3Vzc2lvbiBvbiB0aGUgZXhhY3Qgc2Nv cGUgb2YgdGhlIHdvcmsuIEFzc3VtZSB0aGUgV0cNCmFncmVlcyBvbiB0aGUgbmVlZCBmb3IgYSBz cGVjaWZpY2F0aW9uIG9mIGEgZnJhbWV3b3JrIGFuZCAoYXQgbGVhc3QpDQp0d2/igJxwcm9maWxl c+KAnSAtIG1hcHBpbmcgdG8gaW1wbGVtZW50YWJsZSBzcGVjaWZpY2F0aW9ucyBvZiBvbmUgb3Ig bW9yZQ0KZGVwbG95bWVudCBleGFtcGxlcyAod2hpY2ggbWF5IGJlIGluIHRoZSBzYW1lIG9yIHNl cGFyYXRlIGRvY3VtZW50cyBmcm9tDQp0aGUgZnJhbWV3b3JrKS4gVGhlIHVwY29taW5nIGYyZiBt ZWV0aW5nIHNob3VsZCBob3BlZnVsbHkgYmUgYWJsZSB0bw0KcHJvZ3Jlc3MgdGhpcyBkaXNjdXNz aW9uIHNvIHRoZSBXRyBjYW4gbmFpbCBkb3duIHRoZSBkZXRhaWxlZCBzY29wZSBhDQptb250aCBv ciBzbyBhZnRlciB0aGUgbWVldGluZy4gVGhlbiBkcmFmdHMgcmVmbGVjdGluZyB0aGlzIGRlY2lz aW9uIHNob3VsZA0KYmUgb24gdGhlIHRhYmxlIGJlZm9yZSBJRVRGIDk2LiBXaXRoIHNvbWUgYWN0 aXZlIHJldmlld2luZyB0aGV5IGNvdWxkIGJlDQppbiBhIHNoYXBlIHRoYXQgaXQgd291bGQgYmUg aW50ZXJlc3RpbmcgZm9yIG90aGVycyB0aGFuIHRoZSBhdXRob3JzIHRvDQpzdGFydCBpbXBsZW1l bnRpbmcgYWZ0ZXIgc3VtbWVyIHZhY2F0aW9uLiBBZnRlciB0aGF0IGlzIGJlY29tZXMgbW9yZSBo YXp5DQphbmQgZGVwZW5kZW50IG9uIHdoYXQgaXMgdGhlbiBvbiB0aGUgdGFibGUuIFNvbWUgc29y dCBvZiBpbnRlcm9wZXJhYmlsaXR5DQp0ZXN0aW5nIGF0IElFVEYgOTcgSGFja2F0aG9uPyBEb2Vz IE5vdmVtYmVyIHNvdW5kIGxpa2UgYSByZWFzb25hYmxlIHRpbWUNCmZvciBXR0xDPw0KDQpHw7Zy YW4NCg0KDQpPbiAyMDE2LTAzLTExIDExOjEyLCAiSGFubmVzIFRzY2hvZmVuaWciIDxoYW5uZXMu dHNjaG9mZW5pZ0BnbXgubmV0PiB3cm90ZToNCg0KPlRoYW5rcyBmb3IgeW91ciBmZWVkYmFjay4N Cj4NCj5JIHdvdWxkLCBob3dldmVyLCBhbHNvIG5lZWQgbW9yZSBzcGVjaWZpYyBmZWVkYmFjayBm cm9tIHlvdSBhbmQgYW5zd2Vycw0KPnRvIHRoZSBvdGhlciBxdWVzdGlvbnMgYXMgd2VsbC4NCj4N Cj5JbiBwYXJ0aWN1bGFyLCBpdCB3b3VsZCBiZSBnb29kIHRvIGtub3cgd2hhdCB5b3UgY29uc2lk ZXIgYSBwcmVjb25kaXRpb24NCj5mb3Igc2VuZGluZyB0aGUgc3BlY2lmaWNhdGlvbiB0byB0aGUg SUVTRy4NCj4NCj5JIHdvdWxkIGFsc28gbGlrZSB0byBoZWFyIHlvdXIgZmVlZGJhY2sgb24gd2hh dCB5b3UgY29uc2lkZXIgYSByZWFsaXN0aWMNCj5taWxlc3RvbmUuDQo+DQo+Q2lhbw0KPkhhbm5l cw0KPg0KPg0KPk9uIDAzLzA5LzIwMTYgMDc6MDAgQU0sIFNhbXVlbCBFcmR0bWFuIHdyb3RlOg0K Pj4gKzENCj4+IA0KPj4gLy9TYW11ZWwNCj4+IA0KPj4gT24gRnJpLCBNYXIgNCwgMjAxNiBhdCAy OjA5IEFNLCBLZXBlbmcgTGkgPGtlcGVuZy5sa3BAYWxpYmFiYS1pbmMuY29tDQo+PiA8bWFpbHRv OmtlcGVuZy5sa3BAYWxpYmFiYS1pbmMuY29tPj4gd3JvdGU6DQo+PiANCj4+ICAgICA+IEkgdGhp bmsgdGhpcyB0aW1lIGxpbmUgaXMgdG9vIG9wdGltaXN0aWMgZm9yIGFueSBvZiB0aGUgYWJvdmUu DQo+PiANCj4+IA0KPj4gICAgICsxLiBUaGlzIGlzIGFsc28gbXkgcGVyc29uYWwgb2JzZXJ2YXRp b24uDQo+PiANCj4+ICAgICBLZXBlbmcgKEluZGl2aWR1YWwpDQo+PiANCj4+ICAgICDlnKggMy8z LzE2IDU6MTkgcG3vvIwgIkfDtnJhbiBTZWxhbmRlciIgPGdvcmFuLnNlbGFuZGVyQGVyaWNzc29u LmNvbQ0KPj4gICAgIDxtYWlsdG86Z29yYW4uc2VsYW5kZXJAZXJpY3Nzb24uY29tPj4g5YaZ5YWl Og0KPj4gDQo+PiAgICAgPg0KPj4gICAgID4NCj4+ICAgICA+T24gMjAxNi0wMy0wMiAxODoxMiwg IkFjZSBvbiBiZWhhbGYgb2YgSGFubmVzIFRzY2hvZmVuaWciDQo+PiAgICAgPjxhY2UtYm91bmNl c0BpZXRmLm9yZyA8bWFpbHRvOmFjZS1ib3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2YNCj4+ ICAgICBoYW5uZXMudHNjaG9mZW5pZ0BnbXgubmV0IDxtYWlsdG86aGFubmVzLnRzY2hvZmVuaWdA Z214Lm5ldD4+IHdyb3RlOg0KPj4gICAgID4NCj4+ICAgICA+Pg0KPj4gICAgID4+KiogTWF5IDIw MTYgU3VibWl0ICJBdXRoZW50aWNhdGlvbiBhbmQgQXV0aG9yaXphdGlvbiBTb2x1dGlvbiINCj4+ ICAgICA+PnNwZWNpZmljYXRpb24gdG8gdGhlIElFU0cgZm9yIHB1YmxpY2F0aW9uIGFzIGEgUHJv cG9zZWQgU3RhbmRhcmQuDQo+PiAgICAgPj4NCj4+ICAgICA+Pi0tPiBIZXJlIHRoZSBxdWVzdGlv biBpcyB3aGF0IHdlIGV4cGVjdCB0byBoYXZlIGNvbXBsZXRlZCBieSBNYXkuDQo+PiAgICAgPj5I ZXJlIGFyZSBwb3NzaWJsZSBvcHRpb25zOg0KPj4gICAgID4+DQo+PiAgICAgPj4gKiBTcGVjaWZp Y2F0aW9uIGNvbXBsZXRlZC4NCj4+ICAgICA+PiAqIFJlZmVyZW5jZSBpbXBsZW1lbnRhdGlvbiBh dmFpbGFibGUuDQo+PiAgICAgPj4gKiBJbnRlcm9wZXJhYmlsaXR5IHRlc3RpbmcgZG9uZS4NCj4+ ICAgICA+PiAqIEZvcm1hbCB2ZXJpZmljYXRpb24gb2YgdGhlIHNlY3VyaXR5IHBhcnRzLg0KPj4g ICAgID4+DQo+PiAgICAgPj5BbHNvLCB0aGUgYW1vdW50IG9mIHNwZWNpZmljYXRpb24gd29yayBk ZXBlbmRzIGEgYml0IG9uIHlvdXINCj4+ICAgICBmZWVkYmFjayBvbg0KPj4gICAgID4+dGhlIGl0 ZW1zIHdlIGFyZSBnb2luZyB0byBhc2sgZmVlZGJhY2sgZm9yLg0KPj4gICAgID4+DQo+PiAgICAg Pj5JdCB3b3VsZCBiZSBnb29kIHRvIGtub3cgd2hldGhlciB5b3UgaGF2ZSBhbiBvcGluaW9uIGFi b3V0IHRoZXNlDQo+PiAgICAgaXNzdWVzLg0KPj4gICAgID4NCj4+ICAgICA+SSB0aGluayB0aGlz IHRpbWUgbGluZSBpcyB0b28gb3B0aW1pc3RpYyBmb3IgYW55IG9mIHRoZSBhYm92ZS4NCj4+ICAg ICBDb25zaWRlcmluZw0KPj4gICAgID50aGF0IHdlIHNwZW50IG1vc3Qgb2YgbGFzdCB5ZWFyIHRv IGRldGVybWluZSB3aGljaCBvZiB0aGUNCj4+Y2FuZGlkYXRlcw0KPj4gICAgID5zb2x1dGlvbnMg d2Ugd2VyZSBnb2luZyB0byB0YWtlIGFzIGEgInN0YXJ0aW5nIHBvaW50IiwgYW5kIHRoYXQgd2UN Cj4+aGF2ZQ0KPj4gICAgID5yZWNlaXZlZCBtYW55IHJldmlld3MgY2FsbGluZyBmb3IgZGlmZmVy ZW50IHR5cGVzIG9mDQo+PmNvbnNpZGVyYXRpb25zIGFuZA0KPj4gICAgID5leHRlbnNpb25zLCBh bmQgdGhlIG9uZ29pbmcgZGlzY3Vzc2lvbiBhYm91dCBoYW5kbGluZyB0aGUgZGlmZmVyZW50DQo+ PiAgICAgPmRlcGxveW1lbnQgb3B0aW9ucywgSSB0aGluayBpdCBpcyByZWFzb25hYmxlIHRvIGdp dmUgdGhpcyB3b3JrIGl0ZW0NCj4+ICAgICBtb3JlDQo+PiAgICAgPnRpbWUgdG8gY29tcGxldGUu DQo+PiAgICAgPg0KPj4gICAgID4NCj4+ICAgICA+R8O2cmFuDQo+PiAgICAgPg0KPj4gICAgID5f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPj4gICAgID5B Y2UgbWFpbGluZyBsaXN0DQo+PiAgICAgPkFjZUBpZXRmLm9yZyA8bWFpbHRvOkFjZUBpZXRmLm9y Zz4NCj4+ICAgICA+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9hY2UNCj4+ IA0KPj4gDQo+PiAgICAgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX18NCj4+ICAgICBBY2UgbWFpbGluZyBsaXN0DQo+PiAgICAgQWNlQGlldGYub3JnIDxtYWls dG86QWNlQGlldGYub3JnPg0KPj4gICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vYWNlDQo+PiANCj4+IA0KPj4gDQo+PiANCj4+IF9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fDQo+PiBBY2UgbWFpbGluZyBsaXN0DQo+PiBBY2VAaWV0 Zi5vcmcNCj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vYWNlDQo+PiAN Cg0K From nobody Sun Mar 20 14:47:27 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DB80A12D5BB for ; Sun, 20 Mar 2016 14:47:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=erdtman-se.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Egy3WdCx6SjN for ; Sun, 20 Mar 2016 14:47:20 -0700 (PDT) Received: from mail-vk0-x22a.google.com (mail-vk0-x22a.google.com [IPv6:2607:f8b0:400c:c05::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3D95B12D59B for ; Sun, 20 Mar 2016 14:47:20 -0700 (PDT) Received: by mail-vk0-x22a.google.com with SMTP id k1so196969360vkb.0 for ; Sun, 20 Mar 2016 14:47:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=erdtman-se.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:date:message-id:subject:from:to; bh=LqaS7yTLnBRefCjsJ0UjPXgfAnGwKVnmFpQ+uThqMjY=; b=Ik7YOoWvN8ivyhPycOgZbQdVSSWmOu+r+UjL0EwFUeTTmsDR7fw5ZSOQTbJytNyrjL AINDIqpIMbUtcjO6dY/km2TThGWtImbwWBvAS1rraNSu2bFu6l3CBHrA+L3ylI0RVZ4U eo4C/OYzwAA7s1ytj5ttq/jTSpAU1UgYWYlFse9g9Wg7HeqGaq6Uc5k3QVsPSrHBi5wn eUe4B/my9yx90qtG2jKybEXWhCp1E/LSdAmBRYjOPzSXaBs8X5UkNiSDtj0CSgPdEzZv 3uVZ4i57HyD54//mXIgFgjm3JWiILWH/X3EP/LDkpJk4RaU+GzVGEhO3PjcDE/uX+bpz mxDg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to; bh=LqaS7yTLnBRefCjsJ0UjPXgfAnGwKVnmFpQ+uThqMjY=; b=dFHFNbdVfduBQFmNpFoJkGHAzX7q6mjB4e6jqvdeAA5OqTHbaPQvIi4IQ3/mVHYxHc jmQ57tGuiavGLjj5ZZe0tDsmueIf7eQ8Mg8UVP+qrzXlyc0lIRpgmBH0DDgr3eTHVqMD nTzF8nB3c5t2h6Ru72Vnz4aen+S43Rf7ZDp146NP/5rKaLzij7yVKNj+90SVYrpmMJJb ZeXYDWGUPN1/1bu8A6lmuQFs9ycnV0u4qDLKkIVyfbrTmFQ9BFlb6l2C11luhA86ManF RVK7TJRxMVSjx1Do4RlVEfbKTZi7qXiTHJJJR002kjDjbpOLXvhPaWuXJmINbgX0pOry 5DWQ== X-Gm-Message-State: AD7BkJLtaqFeEPFj2vXeu7DVwioXOc6zbIgg7FcGFcYfjSd2E5tKgIljsHn3GtFRH0QypSN5IYvzDlk8P02Myw== MIME-Version: 1.0 X-Received: by 10.31.52.134 with SMTP id b128mr28455390vka.124.1458510439277; Sun, 20 Mar 2016 14:47:19 -0700 (PDT) Received: by 10.159.37.42 with HTTP; Sun, 20 Mar 2016 14:47:19 -0700 (PDT) In-Reply-To: <56DE8C4D.1020006@sics.se> References: <56D7250E.6020300@gmx.net> <56DE8C4D.1020006@sics.se> Date: Sun, 20 Mar 2016 22:47:19 +0100 Message-ID: From: Samuel Erdtman To: ace@ietf.org Content-Type: multipart/mixed; boundary=001a114402bea29aaf052e81ec3a Archived-At: Subject: Re: [Ace] Deployment Options X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Mar 2016 21:47:26 -0000 --001a114402bea29aaf052e81ec3a Content-Type: multipart/alternative; boundary=001a114402bea29aa9052e81ec38 --001a114402bea29aa9052e81ec38 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi To make some progress here I have created a branch in the git repository ( https://github.com/LudwigSeitz/ace-oauth/tree/deployment_examples), where the working copy of the document is located. In this branch I have merged 6.1 and 6.2 and renamed them to =E2=80=9CLocal token validation=E2=80=9D, s= ince the key aspect here is that the RS must be able to validate the token without interaction with other systems in realtime. Then I have merged 6.3 and 6.4 and renamed them to =E2=80=9CIntrospection aided token validation=E2=80=9D = to highlight the fact that introspection is an option to get up to date keys and authorisation information to the RS when the client cannot provide that. 6.5 and 6.6 has been excluded, not because those could not be supported, but because they are more of corner cases. 6.6 might also need to define some extensions to the core framework, i.e. it seemed reasonable to take it out for now and introducing it in a more focused draft. Finally I have moved the whole section to an appendix and renamed it to Deployment examples. Thoughts? //Samuel On Tue, Mar 8, 2016 at 9:24 AM, Ludwig Seitz wrote: > On 03/02/16 18:38, Hannes Tschofenig wrote: > >> Hi all, >> >> describes 6 deployment options in >> Section 6: >> >> 6. Deployment Scenarios . . . . . . . . . . . . . . . . . . . . 18 >> 6.1. Client and Resource Server are Offline . . . . . . . . . 1= 9 >> 6.2. Resource Server Offline . . . . . . . . . . . . . . . . . 2= 2 >> 6.3. Token Introspection with an Offline Client . . . . . . . 2= 6 >> 6.4. Always-On Connectivity . . . . . . . . . . . . . . . . . 3= 0 >> 6.5. Token-less Authorization . . . . . . . . . . . . . . . . 3= 1 >> 6.6. Securing Group Communication . . . . . . . . . . . . . . 3= 4 >> >> > I would like to have a superficial description of all of these in an > appendix to the main document to demonstrate that we can cover a number o= f > different use cases with this design. > I would prefer to describe in detail 6.2 and perhaps 6.3 in the main > document. > > If we get enough interest, I would support specifying all of the above in > additional documents. > > /Ludwig > > -- > Ludwig Seitz, PhD > SICS Swedish ICT AB > Ideon Science Park > Building Beta 2 > Scheelev=C3=A4gen 17 > SE-223 70 Lund > > Phone +46(0)70 349 9251 > http://www.sics.se > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > > --001a114402bea29aa9052e81ec38 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi

To make some progress her= e I have created a branch in the git repository (https://github.com/Ludw= igSeitz/ace-oauth/tree/deployment_examples), where the working copy of = the document is located. In this branch I have merged 6.1 and 6.2 and renam= ed them to =E2=80=9CLocal token validation=E2=80=9D, since the key aspect h= ere is that the RS must be able to validate the token without interaction w= ith other systems in realtime. Then I have merged 6.3 and 6.4 and renamed t= hem to =E2=80=9CIntrospection aided token validation=E2=80=9D to highlight = the fact that introspection is an option to get up to date keys and authori= sation information to the RS when the client cannot provide that.

6.5 and 6.6 has been excluded, not because those could not = be supported, but because they are more of corner cases. 6.6 might also nee= d to define some extensions to the core framework, i.e. it seemed reasonabl= e to take it out for now and introducing it in a more focused draft.
<= div>
Finally I have moved the whole section to an appendix an= d renamed it to Deployment examples.

Thoughts?

//Samuel


On Tue, Mar 8, 2016 at 9:24 AM, Lud= wig Seitz <ludwig@sics.se> wrote:
On 03/02/16 18:38, Hannes Tschofenig wrote:
Hi all,

<draft-ietf-ace-oauth-authz-01> describes 6 deployment options in
Section 6:

=C2=A0 =C2=A06.=C2=A0 Deployment Scenarios=C2=A0 . . . . . . . . . . . . . = . . . . . . .=C2=A0 18
=C2=A0 =C2=A0 =C2=A0 6.1.=C2=A0 Client and Resource Server are Offline=C2= =A0 . . . . . . . . .=C2=A0 19
=C2=A0 =C2=A0 =C2=A0 6.2.=C2=A0 Resource Server Offline . . . . . . . . . .= . . . . . . .=C2=A0 22
=C2=A0 =C2=A0 =C2=A0 6.3.=C2=A0 Token Introspection with an Offline Client= =C2=A0 . . . . . . .=C2=A0 26
=C2=A0 =C2=A0 =C2=A0 6.4.=C2=A0 Always-On Connectivity=C2=A0 . . . . . . . = . . . . . . . . . .=C2=A0 30
=C2=A0 =C2=A0 =C2=A0 6.5.=C2=A0 Token-less Authorization=C2=A0 . . . . . . = . . . . . . . . . .=C2=A0 31
=C2=A0 =C2=A0 =C2=A0 6.6.=C2=A0 Securing Group Communication=C2=A0 . . . . = . . . . . . . . . .=C2=A0 34


 I would like to have a superficial description of all of these in an append= ix to the main document to demonstrate that we can cover a number of differ= ent use cases with this design.
I would prefer to describe in detail 6.2 and perhaps 6.3 in the main docume= nt.

If we get enough interest, I would support specifying all of the above in a= dditional documents.

/Ludwig

--
Ludwig Seitz, PhD
SICS Swedish ICT AB
Ideon Science Park
Building Beta 2
Scheelev=C3=A4gen 17
SE-223 70 Lund

Phone +46(0)70 349 9251
http://= www.sics.se


_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace


--001a114402bea29aa9052e81ec38-- --001a114402bea29aaf052e81ec3a Content-Type: text/plain; charset=US-ASCII; name="draft-ietf-ace-oauth-authz.txt" Content-Disposition: attachment; filename="draft-ietf-ace-oauth-authz.txt" Content-Transfer-Encoding: base64 X-Attachment-Id: f_im13g55i1 CgoKCkFDRSBXb3JraW5nIEdyb3VwICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBMLiBTZWl0egpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFNJQ1MKSW50ZW5kZWQgc3RhdHVzOiBTdGFu ZGFyZHMgVHJhY2sgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEcuIFNlbGFuZGVyCkV4cGly ZXM6IFNlcHRlbWJlciAyMSwgMjAxNiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBFcmljc3NvbgogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIEUuIFdhaGxzdHJvZW0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBTLiBFcmR0bWFuCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTmV4dXMgVGVjaG5vbG9n eQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIEguIFRzY2hvZmVuaWcKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIEFSTSBMdGQuCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBNYXJjaCAyMCwgMjAxNgoKCiAgICAg ICAgQXV0aG9yaXphdGlvbiBmb3IgdGhlIEludGVybmV0IG9mIFRoaW5ncyB1c2luZyBPQXV0aCAy LjAKICAgICAgICAgICAgICAgICAgICAgZHJhZnQtaWV0Zi1hY2Utb2F1dGgtYXV0aHotMDEKCkFi c3RyYWN0CgogICBUaGlzIG1lbW8gZGVmaW5lcyBob3cgdG8gdXNlIE9BdXRoIDIuMCBhcyBhbiBh dXRob3JpemF0aW9uIGZyYW1ld29yawogICB3aXRoIEludGVybmV0IG9mIFRoaW5ncyAoSW9UKSBk ZXBsb3ltZW50cywgdGh1cyBicmluZ2luZyBhIHdlbGwta25vd24KICAgYW5kIHdpZGVseSB1c2Vk IHNlY3VyaXR5IHNvbHV0aW9uIHRvIElvVCBkZXZpY2VzLiAgV2hlcmUgcG9zc2libGUKICAgdmFu aWxsYSBPQXV0aCAyLjAgaXMgdXNlZCwgYnV0IHdoZXJlIHRoZSBsaW1pdGF0aW9ucyBvZiBJb1Qg ZGV2aWNlcwogICByZXF1aXJlIGl0LCBwcm9maWxlcyBhbmQgZXh0ZW5zaW9ucyBhcmUgcHJvdmlk ZWQuCgpTdGF0dXMgb2YgVGhpcyBNZW1vCgogICBUaGlzIEludGVybmV0LURyYWZ0IGlzIHN1Ym1p dHRlZCBpbiBmdWxsIGNvbmZvcm1hbmNlIHdpdGggdGhlCiAgIHByb3Zpc2lvbnMgb2YgQkNQIDc4 IGFuZCBCQ1AgNzkuCgogICBJbnRlcm5ldC1EcmFmdHMgYXJlIHdvcmtpbmcgZG9jdW1lbnRzIG9m IHRoZSBJbnRlcm5ldCBFbmdpbmVlcmluZwogICBUYXNrIEZvcmNlIChJRVRGKS4gIE5vdGUgdGhh dCBvdGhlciBncm91cHMgbWF5IGFsc28gZGlzdHJpYnV0ZQogICB3b3JraW5nIGRvY3VtZW50cyBh cyBJbnRlcm5ldC1EcmFmdHMuICBUaGUgbGlzdCBvZiBjdXJyZW50IEludGVybmV0LQogICBEcmFm dHMgaXMgYXQgaHR0cDovL2RhdGF0cmFja2VyLmlldGYub3JnL2RyYWZ0cy9jdXJyZW50Ly4KCiAg IEludGVybmV0LURyYWZ0cyBhcmUgZHJhZnQgZG9jdW1lbnRzIHZhbGlkIGZvciBhIG1heGltdW0g b2Ygc2l4IG1vbnRocwogICBhbmQgbWF5IGJlIHVwZGF0ZWQsIHJlcGxhY2VkLCBvciBvYnNvbGV0 ZWQgYnkgb3RoZXIgZG9jdW1lbnRzIGF0IGFueQogICB0aW1lLiAgSXQgaXMgaW5hcHByb3ByaWF0 ZSB0byB1c2UgSW50ZXJuZXQtRHJhZnRzIGFzIHJlZmVyZW5jZQogICBtYXRlcmlhbCBvciB0byBj aXRlIHRoZW0gb3RoZXIgdGhhbiBhcyAid29yayBpbiBwcm9ncmVzcy4iCgogICBUaGlzIEludGVy bmV0LURyYWZ0IHdpbGwgZXhwaXJlIG9uIFNlcHRlbWJlciAyMSwgMjAxNi4KCkNvcHlyaWdodCBO b3RpY2UKCiAgIENvcHlyaWdodCAoYykgMjAxNiBJRVRGIFRydXN0IGFuZCB0aGUgcGVyc29ucyBp ZGVudGlmaWVkIGFzIHRoZQogICBkb2N1bWVudCBhdXRob3JzLiAgQWxsIHJpZ2h0cyByZXNlcnZl ZC4KCiAgIFRoaXMgZG9jdW1lbnQgaXMgc3ViamVjdCB0byBCQ1AgNzggYW5kIHRoZSBJRVRGIFRy dXN0J3MgTGVnYWwKICAgUHJvdmlzaW9ucyBSZWxhdGluZyB0byBJRVRGIERvY3VtZW50cwogICAo aHR0cDovL3RydXN0ZWUuaWV0Zi5vcmcvbGljZW5zZS1pbmZvKSBpbiBlZmZlY3Qgb24gdGhlIGRh dGUgb2YKCgoKU2VpdHosIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIFNlcHRlbWJlciAyMSwgMjAx NiAgICAgICAgICAgICAgIFtQYWdlIDFdCgwKSW50ZXJuZXQtRHJhZnQgICAgICAgICBPQXV0aCAy LjAgSW9UIEF1dGhvcml6YXRpb24gICAgICAgICAgICBNYXJjaCAyMDE2CgoKICAgcHVibGljYXRp b24gb2YgdGhpcyBkb2N1bWVudC4gIFBsZWFzZSByZXZpZXcgdGhlc2UgZG9jdW1lbnRzCiAgIGNh cmVmdWxseSwgYXMgdGhleSBkZXNjcmliZSB5b3VyIHJpZ2h0cyBhbmQgcmVzdHJpY3Rpb25zIHdp dGggcmVzcGVjdAogICB0byB0aGlzIGRvY3VtZW50LiAgQ29kZSBDb21wb25lbnRzIGV4dHJhY3Rl ZCBmcm9tIHRoaXMgZG9jdW1lbnQgbXVzdAogICBpbmNsdWRlIFNpbXBsaWZpZWQgQlNEIExpY2Vu c2UgdGV4dCBhcyBkZXNjcmliZWQgaW4gU2VjdGlvbiA0LmUgb2YKICAgdGhlIFRydXN0IExlZ2Fs IFByb3Zpc2lvbnMgYW5kIGFyZSBwcm92aWRlZCB3aXRob3V0IHdhcnJhbnR5IGFzCiAgIGRlc2Ny aWJlZCBpbiB0aGUgU2ltcGxpZmllZCBCU0QgTGljZW5zZS4KClRhYmxlIG9mIENvbnRlbnRzCgog ICAxLiAgSW50cm9kdWN0aW9uICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAgIDMKICAgMi4gIFRlcm1pbm9sb2d5IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gICAzCiAgIDMuICBPdmVydmlldyAgLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNAogICAgIDMuMS4g IE9BdXRoIDIuMCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAgIDUKICAgICAzLjIuICBDb0FQICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gICA3CiAgICAgMy4zLiAgT2JqZWN0IFNlY3VyaXR5IC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgOAogICA0LiAgUHJvdG9jb2wgSW50 ZXJhY3Rpb25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDkKICAg NS4gIE9BdXRoIDIuMCBQcm9maWxpbmcgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gIDEyCiAgICAgNS4xLiAgQ2xpZW50IEluZm9ybWF0aW9uICAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxMgogICAgIDUuMi4gIENvQVAgQWNjZXNzLVRva2Vu IE9wdGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTUKICAgICA1LjMuICBB dXRob3JpemF0aW9uIEluZm9ybWF0aW9uIFJlc291cmNlIGF0IHRoZSBSZXNvdXJjZSBTZXJ2ZXIg IDE1CiAgICAgICA1LjMuMS4gIEF1dGhvcml6YXRpb24gSW5mb3JtYXRpb24gUmVxdWVzdCAuIC4g LiAuIC4gLiAuIC4gLiAuICAxNQogICAgICAgNS4zLjIuICBBdXRob3JpemF0aW9uIEluZm9ybWF0 aW9uIFJlc3BvbnNlICAuIC4gLiAuIC4gLiAuIC4gLiAgMTYKICAgICAgICAgNS4zLjIuMS4gIFN1 Y2Nlc3MgUmVzcG9uc2UgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE2CiAgICAg ICAgIDUuMy4yLjIuICBFcnJvciBSZXNwb25zZSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuICAxNgogICAgIDUuNC4gIEF1dGhvcml6YXRpb24gSW5mb3JtYXRpb24gRm9ybWF0ICAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTcKICAgICA1LjUuICBDQk9SIERhdGEgRm9ybWF0cyAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE3CiAgICAgNS42LiAgVG9r ZW4gRXhwaXJhdGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAx NwogICA2LiAgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAgMTgKICAgNy4gIElBTkEgQ29uc2lkZXJhdGlvbnMgLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE4CiAgICAgNy4xLiAgQ29BUCBPcHRpb24g TnVtYmVyIFJlZ2lzdHJhdGlvbiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxOQogICA4LiAg QWNrbm93bGVkZ21lbnRzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAgMTkKICAgOS4gIFJlZmVyZW5jZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gIDIwCiAgICAgOS4xLiAgTm9ybWF0aXZlIFJlZmVyZW5jZXMg IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAyMAogICAgIDkuMi4gIEluZm9y bWF0aXZlIFJlZmVyZW5jZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMjEK ICAgQXBwZW5kaXggQS4gIERlc2lnbiBKdXN0aWZpY2F0aW9uIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gIDIzCiAgIEFwcGVuZGl4IEIuICBSb2xlcyBhbmQgICAgICAgUmVzcG9uc2li aWxpdGVzIC0tIGEgQ2hlY2tsaXN0IC4gLiAuICAyNQogICBBcHBlbmRpeCBDLiAgQ29BUCBhbmQg Q0JPUiBwcm9maWxlcyBmb3IgT0F1dGggMi4wIC4gLiAuIC4gLiAuIC4gLiAgMjcKICAgICBDLjEu ICBQcm9maWxlIGZvciBUb2tlbiByZXNvdXJjZSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gIDI3CiAgICAgICBDLjEuMS4gIFRva2VuIFJlcXVlc3QgLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuICAyOAogICAgICAgQy4xLjIuICBUb2tlbiBSZXNwb25zZSAgLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMjkKICAgICBDLjIuICBDb0FQIFBy b2ZpbGUgZm9yIE9BdXRoIEludHJvc3BlY3Rpb24gIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDMwCiAg ICAgICBDLjIuMS4gIEludHJvc3BlY3Rpb24gUmVxdWVzdCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuICAzMAogICAgICAgQy4yLjIuICBJbnRyb3NwZWN0aW9uIFJlc3BvbnNlICAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMzEKICAgQXBwZW5kaXggRC4gIERlcGxveW1lbnQg RXhhbXBsZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDMzCiAgICAgRC4xLiAg TG9jYWwgVG9rZW4gVmFsaWRhdGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu ICAzNAogICAgIEQuMi4gIEludHJvc3BlY3Rpb24gQWlkZWQgVG9rZW4gVmFsaWRhdGlvbiAgLiAu IC4gLiAuIC4gLiAuIC4gLiAgMzcKICAgQXBwZW5kaXggRS4gIERvY3VtZW50IFVwZGF0ZXMgLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDQyCiAgICAgRS4xLiAgVmVyc2lvbiAt MDAgdG8gLTAxICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA0MgoKCgpT ZWl0eiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgU2VwdGVtYmVyIDIxLCAyMDE2ICAgICAgICAg ICAgICAgW1BhZ2UgMl0KDApJbnRlcm5ldC1EcmFmdCAgICAgICAgIE9BdXRoIDIuMCBJb1QgQXV0 aG9yaXphdGlvbiAgICAgICAgICAgIE1hcmNoIDIwMTYKCgogICBBdXRob3JzJyBBZGRyZXNzZXMg IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNDMKCjEuICBJ bnRyb2R1Y3Rpb24KCiAgIEF1dGhvcml6YXRpb24gaXMgdGhlIHByb2Nlc3MgZm9yIGdyYW50aW5n IGFwcHJvdmFsIHRvIGFuIGVudGl0eSB0bwogICBhY2Nlc3MgYSByZXNvdXJjZSBbUkZDNDk0OV0u ICBNYW5hZ2luZyBhdXRob3JpemF0aW9uIGluZm9ybWF0aW9uIGZvcgogICBhIGxhcmdlIG51bWJl ciBvZiBkZXZpY2VzIGFuZCB1c2VycyBpcyBvZnRlbiBhIGNvbXBsZXggdGFzayB3aGVyZQogICBk ZWRpY2F0ZWQgc2VydmVycyBhcmUgdXNlZC4KCiAgIE1hbmFnaW5nIGF1dGhvcml6YXRpb24gb2Yg dXNlcnMsIHNlcnZpY2VzIGFuZCB0aGVpciBkZXZpY2VzIHdpdGggdGhlCiAgIGhlbHAgb2YgZGVk aWNhdGVkIGF1dGhvcml6YXRpb24gc2VydmVycyAoQVMpIGlzIGEgY29tbW9uIHRhc2ssIGZvdW5k CiAgIGluIGVudGVycHJpc2UgbmV0d29ya3MgYXMgd2VsbCBhcyBvbiB0aGUgV2ViLiAgSW4gaXRz IHNpbXBsZXN0IGZvcm0KICAgdGhlIGF1dGhvcml6YXRpb24gdGFzayBjYW4gYmUgZGVzY3JpYmVk IGFzIGdyYW50aW5nIGFjY2VzcyB0byBhCiAgIHJlcXVlc3RpbmcgY2xpZW50LCBmb3IgYSByZXNv dXJjZSBob3N0ZWQgb24gYSBkZXZpY2UsIHRoZSByZXNvdXJjZQogICBzZXJ2ZXIgKFJTKS4gIFRo aXMgZXhjaGFuZ2UgaXMgbWVkaWF0ZWQgYnkgb25lIG9yIG11bHRpcGxlCiAgIGF1dGhvcml6YXRp b24gc2VydmVycy4KCiAgIFdlIGVudmlzaW9uIHRoYXQgZW5kIGNvbnN1bWVycyBhbmQgZW50ZXJw cmlzZXMgd2lsbCB3YW50IHRvIG1hbmFnZQogICBhY2Nlc3MtY29udHJvbCBhbmQgYXV0aG9yaXph dGlvbiBmb3IgdGhlaXIgSW50ZXJuZXQgb2YgVGhpbmdzIChJb1QpCiAgIGRldmljZXMgaW4gdGhl IHNhbWUgc3R5bGUgYW5kIHRoaXMgZGVzaXJlIHdpbGwgaW5jcmVhc2Ugd2l0aCB0aGUKICAgbnVt YmVyIG9mIGV4cG9zZWQgc2VydmljZXMgYW5kIGNhcGFiaWxpdGllcyBwcm92aWRlZCBieSBhcHBs aWNhdGlvbnMKICAgaG9zdGVkIG9uIHRoZSBJb1QgZGV2aWNlcy4gIFRoZSBJb1QgZGV2aWNlcyBt YXkgYmUgY29uc3RyYWluZWQgaW4KICAgdmFyaW91cyB3YXlzIGluY2x1ZGluZyBwcm9jZXNzaW5n LCBtZW1vcnksIGNvZGUtc2l6ZSwgZW5lcmd5LCBldGMuLAogICBhcyBkZWZpbmVkIGluIFtSRkM3 MjI4XSwgYW5kIHRoZSBkaWZmZXJlbnQgSW9UIGRlcGxveW1lbnRzIHByZXNlbnQgYQogICBjb250 aW51b3VzIHJhbmdlIG9mIGRldmljZSBhbmQgbmV0d29yayBjYXBhYmlsaXRpZXMuICBUYWtpbmcg ZW5lcmd5CiAgIGNvbnN1bXB0aW9uIGFzIGFuIGV4YW1wbGU6IEF0IG9uZSBlbmQgdGhlcmUgYXJl IGVuZXJneS1oYXJ2ZXN0aW5nIG9yCiAgIGJhdHRlcnkgcG93ZXJlZCBkZXZpY2VzIHdoaWNoIGhh dmUgYSB0aWdodCBwb3dlciBidWRnZXQsIG9uIHRoZSBvdGhlcgogICBlbmQgdGhlcmUgYXJlIGRl dmljZXMgY29ubmVjdGVkIHRvIGEgY29udGludW91cyBwb3dlciBzdXBwbHkgd2hpY2gKICAgYXJl IG5vdCBjb25zdHJhaW5lZCBpbiB0ZXJtcyBvZiBwb3dlciwgYW5kIGFsbCBsZXZlbHMgaW4gYmV0 d2Vlbi4KICAgVGh1cyBJb1QgZGV2aWNlcyBhcmUgdmVyeSBkaWZmZXJlbnQgaW4gdGVybXMgb2Yg YXZhaWxhYmxlIHByb2Nlc3NpbmcKICAgYW5kIG1lc3NhZ2UgZXhjaGFuZ2UgY2FwYWJpbGl0aWVz LgoKICAgVGhpcyBtZW1vIGRlc2NyaWJlcyBob3cgdG8gcmUtdXNlIE9BdXRoIDIuMCBbUkZDNjc0 OV0gdG8gZXh0ZW5kCiAgIGF1dGhvcml6YXRpb24gdG8gSW50ZXJuZXQgb2YgVGhpbmdzIGRldmlj ZXMgd2l0aCBkaWZmZXJlbnQga2luZHMgb2YKICAgY29uc3RyYWludHMuICBBdCB0aGUgdGltZSBv ZiB3cml0aW5nLCBPQXV0aCAyLjAgaXMgYWxyZWFkeSB1c2VkIHdpdGgKICAgY2VydGFpbiB0eXBl cyBvZiBJb1QgZGV2aWNlcyBhbmQgdGhpcyBkb2N1bWVudCB3aWxsIHByb3ZpZGUKICAgaW1wbGVt ZW50ZXJzIGFkZGl0aW9uYWwgZ3VpZGFuY2UgZm9yIHVzaW5nIGl0IGluIGEgc2VjdXJlIGFuZAog ICBwcml2YWN5LWZyaWVuZGx5IHdheS4gIFdoZXJlIHBvc3NpYmxlIHRoZSBiYXNpYyBPQXV0aCAy LjAgbWVjaGFuaXNtcwogICBhcmUgdXNlZDsgaW4gc29tZSBjaXJjdW1zdGFuY2VzIHByb2ZpbGVz IGFyZSBkZWZpbmVkLCBmb3IgZXhhbXBsZSB0bwogICBzdXBwb3J0IHNtYWxsZXIgdGhlIG92ZXIt dGhlLXdpcmUgbWVzc2FnZSBzaXplIGFuZCBzbWFsbGVyIGNvZGUgc2l6ZS4KCjIuICBUZXJtaW5v bG9neQoKICAgVGhlIGtleSB3b3JkcyAiTVVTVCIsICJNVVNUIE5PVCIsICJSRVFVSVJFRCIsICJT SEFMTCIsICJTSEFMTCBOT1QiLAogICAiU0hPVUxEIiwgIlNIT1VMRCBOT1QiLCAiUkVDT01NRU5E RUQiLCAiTUFZIiwgYW5kICJPUFRJT05BTCIgaW4gdGhpcwogICBkb2N1bWVudCBhcmUgdG8gYmUg aW50ZXJwcmV0ZWQgYXMgZGVzY3JpYmVkIGluIFtSRkMyMTE5XS4KCgoKCgpTZWl0eiwgZXQgYWwu ICAgICAgICAgIEV4cGlyZXMgU2VwdGVtYmVyIDIxLCAyMDE2ICAgICAgICAgICAgICAgW1BhZ2Ug M10KDApJbnRlcm5ldC1EcmFmdCAgICAgICAgIE9BdXRoIDIuMCBJb1QgQXV0aG9yaXphdGlvbiAg ICAgICAgICAgIE1hcmNoIDIwMTYKCgogICBDZXJ0YWluIHNlY3VyaXR5LXJlbGF0ZWQgdGVybXMg c3VjaCBhcyAiYXV0aGVudGljYXRpb24iLAogICAiYXV0aG9yaXphdGlvbiIsICJjb25maWRlbnRp YWxpdHkiLCAiKGRhdGEpIGludGVncml0eSIsICJtZXNzYWdlCiAgIGF1dGhlbnRpY2F0aW9uIGNv ZGUiLCBhbmQgInZlcmlmeSIgYXJlIHRha2VuIGZyb20gW1JGQzQ5NDldLgoKICAgU2luY2Ugd2Ug ZGVzY3JpYmUgZXhjaGFuZ2VzIGFzIFJFU1RmdWwgcHJvdG9jb2wgaW50ZXJhY3Rpb25zIEhUVFAK ICAgW1JGQzcyMzFdIG9mZmVycyB1c2VmdWwgdGVybWlub2xvZ3kuCgogICBUZXJtaW5vbG9neSBm b3IgZW50aXRpZXMgaW4gdGhlIGFyY2hpdGVjdHVyZSBpcyBkZWZpbmVkIGluIE9BdXRoIDIuMAog ICBbUkZDNjc0OV0gYW5kIFtJLUQuaWV0Zi1hY2UtYWN0b3JzXSwgc3VjaCBhcyBjbGllbnQgKEMp LCByZXNvdXJjZQogICBzZXJ2ZXIgKFJTKSwgYW5kIGF1dGhvcml6YXRpb24gc2VydmVyIChBUyku ICBPQXV0aCAyLjAgdXNlcyB0aGUgdGVybQogICAiZW5kcG9pbnQiIHRvIGRlbm90ZSBIVFRQIHJl c291cmNlcyBzdWNoIGFzIC90b2tlbiBhbmQgL2F1dGhvcml6ZSBhdAogICB0aGUgQVMsIGJ1dCB3 ZSB3aWxsIHVzZSB0aGUgdGVybSAicmVzb3VyY2UiIGluIHRoaXMgbWVtbyB0byBhdm9pZAogICBj b25mdXNpb24gd2l0aCB0aGUgQ29BUCBbUkZDNzI1Ml0gdGVybSAiZW5kcG9pbnQiLgoKICAgU2lu Y2UgdGhpcyBkcmFmdCBmb2N1c2VzIG9uIHRoZSBwcm9ibGVtIG9mIGFjY2VzcyBjb250cm9sIHRv CiAgIHJlc291cmNlcywgd2Ugc2ltcGxpZnkgdGhlIGFjdG9ycyBieSBhc3N1bWluZyB0aGF0IHRo ZSBjbGllbnQKICAgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgKENBUykgZnVuY3Rpb25hbGl0eSBpcyBu b3Qgc3RhbmQtYWxvbmUgYnV0CiAgIHN1YnN1bWVkIGJ5IGVpdGhlciB0aGUgYXV0aG9yaXphdGlv biBzZXJ2ZXIgb3IgdGhlIGNsaWVudCAoc2VlCiAgIHNlY3Rpb24gMi4yIGluIFtJLUQuaWV0Zi1h Y2UtYWN0b3JzXSkuCgozLiAgT3ZlcnZpZXcKCiAgIFRoaXMgc3BlY2lmaWNhdGlvbiBkZXNjcmli ZXMgYSBmcmFtZXdvcmsgZm9yIGF1dGhvcml6YXRpb24gaW4gdGhlCiAgIEludGVybmV0IG9mIFRo aW5ncyBjb25zaXN0aW5nIG9mIGEgc2V0IG9mIGJ1aWxkaW5nIGJsb2Nrcy4KCiAgIFRoZSBiYXNp YyBibG9jayBpcyB0aGUgT0F1dGggMi4wIFtSRkM2NzQ5XSBmcmFtZXdvcmssIHdoaWNoIGVuam95 cwogICB3aWRlc3ByZWFkIGRlcGxveW1lbnQuICBNYW55IElvVCBkZXZpY2VzIGNhbiBzdXBwb3J0 IE9BdXRoIDIuMAogICB3aXRob3V0IGFueSBhZGRpdGlvbmFsIGV4dGVuc2lvbnMsIGJ1dCBmb3Ig Y2VydGFpbiBjb25zdHJhaW5lZAogICBzZXR0aW5ncyBhZGRpdGlvbmFsIHByb2ZpbGluZyBpcyBu ZWVkZWQuCgogICBBbm90aGVyIGJ1aWxkaW5nIGJsb2NrIGlzIHRoZSBsaWdodHdlaWdodCB3ZWIg dHJhbnNmZXIgcHJvdG9jb2wgQ29BUAogICBbUkZDNzI1Ml0gZm9yIHRob3NlIGNvbW11bmljYXRp b24gZW52aXJvbm1lbnRzIHdoZXJlIEhUVFAgaXMgbm90CiAgIGFwcHJvcHJpYXRlLiAgQ29BUCB0 eXBpY2FsbHkgcnVucyBvbiB0b3Agb2YgVURQIHdoaWNoIGZ1cnRoZXIgcmVkdWNlcwogICBvdmVy aGVhZCBhbmQgbWVzc2FnZSBleGNoYW5nZXMuICBUcmFuc3BvcnQgbGF5ZXIgc2VjdXJpdHkgY2Fu IGJlCiAgIHByb3ZpZGVkIGVpdGhlciBieSBEVExTIDEuMiBbUkZDNjM0N10gb3IgVExTIDEuMiBb UkZDNTI0Nl0uCgogICBBIHRoaXJkIGJ1aWxkaW5nIGJsb2NrIGlzIENCT1IgW1JGQzcwNDldIGZv ciBlbmNvZGluZ3Mgd2hlcmUgSlNPTgogICBbUkZDNzE1OV0gaXMgbm90IHN1ZmZpY2llbnRseSBj b21wYWN0LiAgQ0JPUiBpcyBhIGJpbmFyeSBlbmNvZGluZwogICBkZXNpZ25lZCBmb3IgZXh0cmVt ZWx5IHNtYWxsIGNvZGUgc2l6ZSBhbmQgZmFpcmx5IHNtYWxsIG1lc3NhZ2Ugc2l6ZS4KICAgT0F1 dGggMi4wIGFsbG93cyBhY2Nlc3MgdG9rZW5zIHRvIHVzZSBkaWZmZXJlbnQgZW5jb2RpbmdzIGFu ZCB0aGlzCiAgIGRvY3VtZW50IGRlZmluZXMgc3VjaCBhbiBhbHRlcm5hdGl2ZSBlbmNvZGluZy4g IFRoZSBDT1NFIG1lc3NhZ2UKICAgZm9ybWF0IFtJLUQuaWV0Zi1jb3NlLW1zZ10gaXMgYWxzbyBi YXNlZCBvbiBDQk9SLgoKICAgQSBmb3VydGggYnVpbGRpbmcgYmxvY2sgaXMgYXBwbGljYXRpb24g bGF5ZXIgc2VjdXJpdHksIHdoaWNoIGlzIHVzZWQKICAgd2hlcmUgdHJhbnNwb3J0IGxheWVyIHNl Y3VyaXR5IGlzIGluc3VmZmljaWVudC4gIEF0IHRoZSB0aW1lIG9mCiAgIHdyaXRpbmcgdGhlIHBy ZWZlcnJlZCBhcHByb2FjaCBmb3Igc2VjdXJpbmcgQ29BUCBhdCB0aGUgYXBwbGljYXRpb24KICAg bGF5ZXIgaXMgdmlhIHRoZSB1c2Ugb2YgQ09TRSBbSS1ELmlldGYtY29zZS1tc2ddLCB3aGljaCBh ZGRzIG9iamVjdAoKCgoKU2VpdHosIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIFNlcHRlbWJlciAy MSwgMjAxNiAgICAgICAgICAgICAgIFtQYWdlIDRdCgwKSW50ZXJuZXQtRHJhZnQgICAgICAgICBP QXV0aCAyLjAgSW9UIEF1dGhvcml6YXRpb24gICAgICAgICAgICBNYXJjaCAyMDE2CgoKICAgc2Vj dXJpdHkgdG8gQ0JPUi1lbmNvZGVkIGRhdGEuICBNb3JlIGRldGFpbHMgYWJvdXQgYXBwbHlpbmcg Q09TRSB0bwogICBDb0FQIGNhbiBiZSBmb3VuZCBpbiBPU0NPQVAgW0ktRC5zZWxhbmRlci1hY2Ut b2JqZWN0LXNlY3VyaXR5XS4KCiAgIFdpdGggdGhlIGJ1aWxkaW5nIGJsb2NrcyBsaXN0ZWQgYWJv dmUsIHNvbHV0aW9ucyBzYXRpc2Z5aW5nIHZhcmlvdXMKICAgSW9UIGRldmljZSBhbmQgbmV0d29y ayBjb25zdHJhaW50cyBhcmUgcG9zc2libGUuICBBIGxpc3Qgb2YKICAgY29uc3RyYWludHMgaXMg ZGVzY3JpYmVkIGluIGRldGFpbCBpbiBSRkMgNzIyOCBbUkZDNzIyOF0gYW5kIGEKICAgZGVzY3Jp cHRpb24gb2YgaG93IHRoZSBidWlsZGluZyBibG9ja3MgbWVudGlvbmVkIGFib3ZlIHJlbGF0ZSB0 byB0aGUKICAgdmFyaW91cyBjb25zdHJhaW50cyBjYW4gYmUgZm91bmQgaW4gQXBwZW5kaXggQS4K CiAgIEx1Y2tpbHksIG5vdCBldmVyeSBJb1QgZGV2aWNlIHN1ZmZlcnMgZnJvbSBhbGwgY29uc3Ry YWludHMuICBUaGUKICAgZGVzY3JpYmVkIGZyYW1ld29yayBuZXZlcnRoZWxlc3MgdGFrZXMgYWxs IHRoZXNlIGFzcGVjdHMgaW50byBhY2NvdW50CiAgIGFuZCBhbGxvd3Mgc2V2ZXJhbCBkaWZmZXJl bnQgZGVwbG95bWVudCB2YXJpYW50cyB0byBjby1leGlzdCByYXRoZXIKICAgdGhhbiBtYW5kYXRp bmcgYSBvbmUtc2l6ZS1maXRzLWFsbCBzb2x1dGlvbi4gIFdlIGJlbGlldmUgdGhpcyBpcwogICBp bXBvcnRhbnQgdG8gY292ZXIgdGhlIHdpZGUgcmFuZ2Ugb2YgcG9zc2libGUgaW50ZXJ3b3JraW5n IHVzZSBjYXNlcwogICBhbmQgdGhlIGRpZmZlcmVudCByZXF1aXJlbWVudHMgZnJvbSBhIHNlY3Vy aXR5IHBvaW50IG9mIHZpZXcuICBPbmNlCiAgIElvVCBkZXBsb3ltZW50cyBtYXR1cmUsIHBvcHVs YXIgZGVwbG95bWVudCB2YXJpYW50cyB3aWxsIGJlCiAgIGRvY3VtZW50ZWQgaW4gZm9ybSBvZiBw cm9maWxlcy4KCiAgIEluIHRoZSBzdWJzZWN0aW9ucyBiZWxvdyB3ZSBwcm92aWRlIGZ1cnRoZXIg ZGV0YWlscyBhYm91dCB0aGUKICAgZGlmZmVyZW50IGJ1aWxkaW5nIGJsb2Nrcy4KCjMuMS4gIE9B dXRoIDIuMAoKICAgVGhlIE9BdXRoIDIuMCBhdXRob3JpemF0aW9uIGZyYW1ld29yayBlbmFibGVz IGEgY2xpZW50IHRvIG9idGFpbgogICBsaW1pdGVkIGFjY2VzcyB0byBhIHJlc291cmNlIHdpdGgg dGhlIHBlcm1pc3Npb24gb2YgYSByZXNvdXJjZSBvd25lci4KICAgQXV0aG9yaXphdGlvbiByZWxh dGVkIGluZm9ybWF0aW9uIGlzIHBhc3NlZCBiZXR3ZWVuIHRoZSBub2RlcyB1c2luZwogICBhY2Nl c3MgdG9rZW5zLiAgVGhlc2UgYWNjZXNzIHRva2VucyBhcmUgaXNzdWVkIHRvIGNsaWVudHMgYnkg YW4KICAgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgd2l0aCB0aGUgYXBwcm92YWwgb2YgdGhlIHJlc291 cmNlIG93bmVyLiAgVGhlCiAgIGNsaWVudCB1c2VzIHRoZSBhY2Nlc3MgdG9rZW4gdG8gYWNjZXNz IHRoZSBwcm90ZWN0ZWQgcmVzb3VyY2VzIGhvc3RlZAogICBieSB0aGUgcmVzb3VyY2Ugc2VydmVy LgoKICAgQSBudW1iZXIgb2YgT0F1dGggMi4wIHRlcm1zIGFyZSB1c2VkIHdpdGhpbiB0aGlzIG1l bW86CgogICBBY2Nlc3MgVG9rZW5zOgoKICAgICAgQWNjZXNzIHRva2VucyBhcmUgY3JlZGVudGlh bHMgdXNlZCB0byBhY2Nlc3MgcHJvdGVjdGVkIHJlc291cmNlcy4KICAgICAgQW4gYWNjZXNzIHRv a2VuIGlzIGEgZGF0YSBzdHJ1Y3R1cmUgcmVwcmVzZW50aW5nIGF1dGhvcml6YXRpb24KICAgICAg cGVybWlzc2lvbnMgaXNzdWVkIHRvIHRoZSBjbGllbnQuICBBY2Nlc3MgdG9rZW5zIGFyZSBnZW5l cmF0ZWQgYnkKICAgICAgdGhlIGF1dGhvcml6YXRpb24gc2VydmVyIGFuZCBjb25zdW1lZCBieSB0 aGUgcmVzb3VyY2Ugc2VydmVyLiAgVGhlCiAgICAgIGFjY2VzcyB0b2tlbiBpcyBvcGFxdWUgdG8g dGhlIGNsaWVudC4KCiAgICAgIEFjY2VzcyB0b2tlbnMgY2FuIGhhdmUgZGlmZmVyZW50IGZvcm1h dHMsIGFuZCB2YXJpb3VzIG1ldGhvZHMgb2YKICAgICAgdXRpbGl6YXRpb24gKGUuZy4sIGNyeXB0 b2dyYXBoaWMgcHJvcGVydGllcykgYmFzZWQgb24gdGhlIHNlY3VyaXR5CiAgICAgIHJlcXVpcmVt ZW50cyBvZiB0aGUgZ2l2ZW4gZGVwbG95bWVudC4KCiAgIFByb29mIG9mIFBvc3Nlc3Npb24gVG9r ZW5zOgoKCgoKClNlaXR6LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBTZXB0ZW1iZXIgMjEsIDIw MTYgICAgICAgICAgICAgICBbUGFnZSA1XQoMCkludGVybmV0LURyYWZ0ICAgICAgICAgT0F1dGgg Mi4wIElvVCBBdXRob3JpemF0aW9uICAgICAgICAgICAgTWFyY2ggMjAxNgoKCiAgICAgIEFuIGFj Y2VzcyB0b2tlbiBtYXkgYmUgYm91bmQgdG8gYSBjcnlwdG9ncmFwaGljIGtleSwgd2hpY2ggaXMg dGhlbgogICAgICB1c2VkIGJ5IGFuIFJTIHRvIGF1dGhlbnRpY2F0ZSByZXF1ZXN0cyBmcm9tIGEg Y2xpZW50LiAgU3VjaCB0b2tlbnMKICAgICAgYXJlIGNhbGxlZCBwcm9vZi1vZi1wb3NzZXNzaW9u IHRva2VucyAob3IgUG9QIHRva2VucykKICAgICAgW0ktRC5pZXRmLW9hdXRoLXBvcC1hcmNoaXRl Y3R1cmVdLgoKICAgICAgVGhlIHByb29mLW9mLXBvc3Nlc3Npb24gKFBvUCkgc2VjdXJpdHkgY29u Y2VwdCBhc3N1bWVzIHRoYXQgdGhlIEFTCiAgICAgIGFjdHMgYXMgYSB0cnVzdGVkIHRoaXJkIHBh cnR5IHRoYXQgYmluZHMga2V5cyB0byBhY2Nlc3MgdG9rZW5zLgogICAgICBUaGVzZSBzbyBjYWxs ZWQgUG9QIGtleXMgYXJlIHRoZW4gdXNlZCBieSB0aGUgY2xpZW50IHRvCiAgICAgIGRlbW9uc3Ry YXRlIHRoZSBwb3NzZXNzaW9uIG9mIHRoZSBzZWNyZXQgdG8gdGhlIFJTIHdoZW4gYWNjZXNzaW5n CiAgICAgIHRoZSByZXNvdXJjZS4gIFRoZSBSUywgd2hlbiByZWNlaXZpbmcgYW4gYWNjZXNzIHRv a2VuLCBuZWVkcyB0bwogICAgICB2ZXJpZnkgdGhhdCB0aGUga2V5IHVzZWQgYnkgdGhlIGNsaWVu dCBtYXRjaGVzIHRoZSBvbmUgaW5jbHVkZWQgaW4KICAgICAgdGhlIGFjY2VzcyB0b2tlbi4gIFdo ZW4gdGhpcyBtZW1vIHVzZXMgdGhlIHRlcm0gImFjY2VzcyB0b2tlbiIgaXQKICAgICAgaXMgYXNz dW1lZCB0byBiZSBhIFBvUCB0b2tlbiB1bmxlc3Mgc3BlY2lmaWNhbGx5IHN0YXRlZCBvdGhlcndp c2UuCgogICAgICBUaGUga2V5IGJvdW5kIHRvIHRoZSBhY2Nlc3MgdG9rZW4gKGFrYSBQb1Aga2V5 KSBtYXkgYmUgYmFzZWQgb24KICAgICAgc3ltbWV0cmljIGFzIHdlbGwgYXMgb24gYXN5bW1ldHJp YyBjcnlwdG9ncmFwaHkuICBUaGUgYXBwcm9wcmlhdGUKICAgICAgY2hvaWNlIG9mIHNlY3VyaXR5 IGRlcGVuZHMgb24gdGhlIGNvbnN0cmFpbnRzIG9mIHRoZSBJb1QgZGV2aWNlcwogICAgICBhcyB3 ZWxsIGFzIG9uIHRoZSBzZWN1cml0eSByZXF1aXJlbWVudHMgb2YgdGhlIHVzZSBjYXNlLgoKICAg ICAgU3ltbWV0cmljIFBvUCBrZXk6CgogICAgICAgICBUaGUgQVMgZ2VuZXJhdGVzIGEgcmFuZG9t IHN5bW1ldHJpYyBQb1Aga2V5LCBlbmNyeXB0cyBpdCBmb3IKICAgICAgICAgdGhlIFJTIGFuZCBp bmNsdWRlcyBpdCBpbnNpZGUgYW4gYWNjZXNzIHRva2VuLiAgVGhlIFBvUCBrZXkgaXMKICAgICAg ICAgYWxzbyBlbmNyeXB0ZWQgZm9yIHRoZSBjbGllbnQgYW5kIHNlbnQgdG9nZXRoZXIgd2l0aCB0 aGUgYWNjZXNzCiAgICAgICAgIHRva2VuIHRvIHRoZSBjbGllbnQuCgogICAgICBBc3ltbWV0cmlj IFBvUCBrZXk6CgogICAgICAgICBBbiBhc3ltbWV0cmljIGtleSBwYWlyIGlzIGdlbmVyYXRlZCBv biB0aGUgY2xpZW50IGFuZCB0aGUKICAgICAgICAgcHVibGljIGtleSBpcyBzZW50IHRvIHRoZSBB UyAoaWYgaXQgZG9lcyBub3QgYWxyZWFkeSBoYXZlCiAgICAgICAgIGtub3dsZWRnZSBvZiB0aGUg Y2xpZW50J3MgcHVibGljIGtleSkuICBJbmZvcm1hdGlvbiBhYm91dCB0aGUKICAgICAgICAgcHVi bGljIGtleSwgd2hpY2ggaXMgdGhlIFBvUCBrZXkgaW4gdGhpcyBjYXNlLCBpcyB0aGVuIGluY2x1 ZGVkCiAgICAgICAgIGluc2lkZSB0aGUgYWNjZXNzIHRva2VuIGFuZCBzZW50IGJhY2sgdG8gdGhl IHJlcXVlc3RpbmcgY2xpZW50LgogICAgICAgICBUaGUgUlMgY2FuIGlkZW50aWZ5IHRoZSBjbGll bnQncyBwdWJsaWMga2V5IGZyb20gdGhlCiAgICAgICAgIGluZm9ybWF0aW9uIGluIHRoZSB0b2tl biwgd2hpY2ggYWxsb3dzIHRoZSBjbGllbnQgdG8gdXNlIHRoZQogICAgICAgICBjb3JyZXNwb25k aW5nIHByaXZhdGUga2V5IGZvciB0aGUgcHJvb2Ygb2YgcG9zc2Vzc2lvbi4KCiAgICAgIFRoZSBh Y2Nlc3MgdG9rZW4gaXMgcHJvdGVjdGVkIGFnYWluc3QgbW9kaWZpY2F0aW9ucyB1c2luZyBhIE1B QyBvcgogICAgICBhIGRpZ2l0YWwgc2lnbmF0dXJlIG9mIHRoZSBBUy4gIFRoZSBjaG9pY2Ugb2Yg UG9QIGtleSBkb2VzIG5vdAogICAgICBuZWNlc3NhcmlseSBpbXBseSBhIHNwZWNpZmljIGNyZWRl bnRpYWwgdHlwZSBmb3IgdGhlIGludGVncml0eQogICAgICBwcm90ZWN0aW9uIG9mIHRoZSB0b2tl bi4gIE1vcmUgaW5mb3JtYXRpb24gYWJvdXQgUG9QIHRva2VucyBjYW4gYmUKICAgICAgZm91bmQg aW4gW0ktRC5pZXRmLW9hdXRoLXBvcC1hcmNoaXRlY3R1cmVdLgoKICAgU2NvcGVzIGFuZCBQZXJt aXNzaW9uczoKCiAgICAgIEluIE9BdXRoIDIuMCwgdGhlIGNsaWVudCBzcGVjaWZpZXMgdGhlIHR5 cGUgb2YgcGVybWlzc2lvbnMgaXQgaXMKICAgICAgc2Vla2luZyB0byBvYnRhaW4gKHZpYSB0aGUg c2NvcGUgcGFyYW1ldGVyKSBpbiB0aGUgYWNjZXNzIHJlcXVlc3QuCiAgICAgIEluIHR1cm4sIHRo ZSBBUyBtYXkgdXNlIHRoZSAic2NvcGUiIHJlc3BvbnNlIHBhcmFtZXRlciB0byBpbmZvcm0KCgoK U2VpdHosIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIFNlcHRlbWJlciAyMSwgMjAxNiAgICAgICAg ICAgICAgIFtQYWdlIDZdCgwKSW50ZXJuZXQtRHJhZnQgICAgICAgICBPQXV0aCAyLjAgSW9UIEF1 dGhvcml6YXRpb24gICAgICAgICAgICBNYXJjaCAyMDE2CgoKICAgICAgdGhlIGNsaWVudCBvZiB0 aGUgc2NvcGUgb2YgdGhlIGFjY2VzcyB0b2tlbiBpc3N1ZWQuICBBcyB0aGUgY2xpZW50CiAgICAg IGNvdWxkIGJlIGEgY29uc3RyYWluZWQgZGV2aWNlIGFzIHdlbGwsIHRoaXMgbWVtbyB1c2VzIENC T1IgZW5jb2RlZAogICAgICBtZXNzYWdlcyBkZWZpbmVkIGluIEFwcGVuZGl4IEMgdG8gcmVxdWVz dCBzY29wZXMgYW5kIHRvIGJlCiAgICAgIGluZm9ybWVkIHdoYXQgc2NvcGVzIHRoZSBhY2Nlc3Mg dG9rZW4gd2FzIGFjdHVhbGx5IGF1dGhvcml6ZWQgZm9yCiAgICAgIGJ5IHRoZSBBUy4KCiAgICAg IFRoZSB2YWx1ZXMgb2YgdGhlIHNjb3BlIHBhcmFtZXRlciBhcmUgZXhwcmVzc2VkIGFzIGEgbGlz dCBvZgogICAgICBzcGFjZS0gZGVsaW1pdGVkLCBjYXNlLXNlbnNpdGl2ZSBzdHJpbmdzLCB3aXRo IGEgc2VtYW50aWMgdGhhdCBpcwogICAgICB3ZWxsLWtub3duIHRvIHRoZSBBUyBhbmQgdGhlIFJT LiAgTW9yZSBkZXRhaWxzIGFib3V0IHRoZSBjb25jZXB0CiAgICAgIG9mIHNjb3BlcyBpcyBmb3Vu ZCB1bmRlciBTZWN0aW9uIDMuMyBpbiBbUkZDNjc0OV0uCgogICBDbGFpbXM6CgogICAgICBUaGUg aW5mb3JtYXRpb24gY2FycmllZCBpbiB0aGUgYWNjZXNzIHRva2VuIGluIHRoZSBmb3JtIG9mIHR5 cGUtCiAgICAgIHZhbHVlIHBhaXJzIGlzIGNhbGxlZCBjbGFpbXMuICBBbiBhY2Nlc3MgdG9rZW4g bWF5IGZvciBleGFtcGxlCiAgICAgIGluY2x1ZGUgYSBjbGFpbSBhYm91dCB0aGUgQVMgdGhhdCBp c3N1ZWQgdGhlIHRva2VuICh0aGUgImlzcyIKICAgICAgY2xhaW0pIGFuZCB3aGF0IGF1ZGllbmNl IHRoZSBhY2Nlc3MgdG9rZW4gaXMgaW50ZW5kZWQgZm9yICh0aGUKICAgICAgImF1ZCIgY2xhaW0p LiAgVGhlIGF1ZGllbmNlIG9mIGFuIGFjY2VzcyB0b2tlbiBjYW4gYmUgYSBzcGVjaWZpYwogICAg ICByZXNvdXJjZSBvciBvbmUgb3IgbWFueSByZXNvdXJjZSBzZXJ2ZXJzLiAgVGhlIHJlc291cmNl IG93bmVyCiAgICAgIHBvbGljaWVzIGluZmx1ZW5jZSB0aGUgd2hhdCBjbGFpbXMgYXJlIHB1dCBp bnRvIHRoZSBhY2Nlc3MgdG9rZW4KICAgICAgYnkgdGhlIGF1dGhvcml6YXRpb24gc2VydmVyLgoK ICAgICAgV2hpbGUgdGhlIHN0cnVjdHVyZSBhbmQgZW5jb2Rpbmcgb2YgdGhlIGFjY2VzcyB0b2tl biB2YXJpZXMKICAgICAgdGhyb3VnaG91dCBkZXBsb3ltZW50cywgYSBzdGFuZGFyZGl6ZWQgZm9y bWF0IGhhcyBiZWVuIGRlZmluZWQKICAgICAgd2l0aCB0aGUgSlNPTiBXZWIgVG9rZW4gKEpXVCkg W1JGQzc1MTldIHdoZXJlIGNsYWltcyBhcmUgZW5jb2RlZAogICAgICBhcyBhIEpTT04gb2JqZWN0 LiAgSW4gW0ktRC53YWhsc3Ryb2VtLWFjZS1jYm9yLXdlYi10b2tlbl0gYW4KICAgICAgZXF1aXZh bGVudCBmb3JtYXQgdXNpbmcgQ0JPUiBlbmNvZGluZyAoQ1dUKSBoYXMgYmVlbiBkZWZpbmVkLgoK ICAgSW50cm9zcGVjdGlvbjoKCiAgICAgIEludHJvc3BlY3Rpb24gaXMgYSBtZXRob2QgZm9yIGEg cmVzb3VyY2Ugc2VydmVyIHRvIHF1ZXJ5IHRoZQogICAgICBhdXRob3JpemF0aW9uIHNlcnZlciBm b3IgdGhlIGFjdGl2ZSBzdGF0ZSBhbmQgY29udGVudCBvZiBhCiAgICAgIHJlY2VpdmVkIGFjY2Vz cyB0b2tlbi4gIFRoaXMgaXMgcGFydGljdWxhcmx5IHVzZWZ1bCBpbiB0aG9zZSBjYXNlcwogICAg ICB3aGVyZSB0aGUgYXV0aG9yaXphdGlvbiBkZWNpc2lvbnMgYXJlIHZlcnkgZHluYW1pYyBhbmQv b3Igd2hlcmUKICAgICAgdGhlIHJlY2VpdmVkIGFjY2VzcyB0b2tlbiBpdHNlbGYgaXMgYSByZWZl cmVuY2UgcmF0aGVyIHRoYW4gYQogICAgICBzZWxmLWNvbnRhaW5lZCB0b2tlbi4gIE1vcmUgaW5m b3JtYXRpb24gYWJvdXQgaW50cm9zcGVjdGlvbiBpbgogICAgICBPQXV0aCAyLjAgY2FuIGJlIGZv dW5kIGluIFtJLUQuaWV0Zi1vYXV0aC1pbnRyb3NwZWN0aW9uXS4KCjMuMi4gIENvQVAKCiAgIENv QVAgaXMgYW4gYXBwbGljYXRpb24gbGF5ZXIgcHJvdG9jb2wgc2ltaWxhciB0byBIVFRQLCBidXQK ICAgc3BlY2lmaWNhbGx5IGRlc2lnbmVkIGZvciBjb25zdHJhaW5lZCBlbnZpcm9ubWVudHMuICBD b0FQIHR5cGljYWxseQogICB1c2VzIGRhdGFncmFtLW9yaWVudGVkIHRyYW5zcG9ydCwgc3VjaCBh cyBVRFAsIHdoZXJlIHJlb3JkZXJpbmcgYW5kCiAgIGxvc3Mgb2YgcGFja2V0cyBjYW4gb2NjdXIu ICBBIHNlY3VyaXR5IHNvbHV0aW9uIG5lZWQgdG8gdGFrZSB0aGUKICAgbGF0dGVyIGFzcGVjdHMg aW50byBhY2NvdW50LgoKCgoKCgpTZWl0eiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgU2VwdGVt YmVyIDIxLCAyMDE2ICAgICAgICAgICAgICAgW1BhZ2UgN10KDApJbnRlcm5ldC1EcmFmdCAgICAg ICAgIE9BdXRoIDIuMCBJb1QgQXV0aG9yaXphdGlvbiAgICAgICAgICAgIE1hcmNoIDIwMTYKCgog ICBXaGlsZSBIVFRQIHVzZXMgaGVhZGVycyBhbmQgcXVlcnktc3RyaW5ncyB0byBjb252ZXkgYWRk aXRpb25hbAogICBpbmZvcm1hdGlvbiBhYm91dCBhIHJlcXVlc3QsIENvQVAgZW5jb2RlcyBzdWNo IGluZm9ybWF0aW9uIGluIHNvLQogICBjYWxsZWQgJ29wdGlvbnMnLgoKICAgQ29BUCBzdXBwb3J0 cyBhcHBsaWNhdGlvbi1sYXllciBmcmFnbWVudGF0aW9uIG9mIHRoZSBDb0FQIHBheWxvYWRzCiAg IHRocm91Z2ggYmxvY2t3aXNlIHRyYW5zZmVycyBbSS1ELmlldGYtY29yZS1ibG9ja10uICBIb3dl dmVyLCB0aGlzCiAgIG1ldGhvZCBkb2VzIG5vdCBhbGxvdyB0aGUgZnJhZ21lbnRhdGlvbiBvZiBs YXJnZSBDb0FQIG9wdGlvbnMsCiAgIHRoZXJlZm9yZSBkYXRhIGVuY29kZWQgaW4gb3B0aW9ucyBo YXMgdG8gYmUga2VwdCBzbWFsbC4KCjMuMy4gIE9iamVjdCBTZWN1cml0eQoKICAgVHJhbnNwb3J0 IGxheWVyIHNlY3VyaXR5IGlzIG5vdCBhbHdheXMgc3VmZmljaWVudCBhbmQgYXBwbGljYXRpb24K ICAgbGF5ZXIgc2VjdXJpdHkgaGFzIHRvIGJlIHByb3ZpZGVkLiAgQ09TRSBbSS1ELmlldGYtY29z ZS1tc2ddIGRlZmluZXMKICAgYSBtZXNzYWdlIGZvcm1hdCBmb3IgY3J5cHRvZ3JhcGhpYyBwcm90 ZWN0aW9uIG9mIGRhdGEgdXNpbmcgQ0JPUgogICBlbmNvZGluZy4gIFRoZXJlIGFyZSB0d28gbWFp biBhcHByb2FjaGVzIGZvciBhcHBsaWNhdGlvbiBsYXllcgogICBzZWN1cml0eToKCiAgIE9iamVj dCBTZWN1cml0eSBvZiBDb0FQIChPU0NPQVApCgogICAgICBPU0NPQVAgW0ktRC5zZWxhbmRlci1h Y2Utb2JqZWN0LXNlY3VyaXR5XSBpcyBhIG1ldGhvZCBmb3IKICAgICAgcHJvdGVjdGluZyBDb0FQ IHJlcXVlc3QvcmVzcG9uc2UgbWVzc2FnZSBleGNoYW5nZXMsIGluY2x1ZGluZyBDb0FQCiAgICAg IHBheWxvYWRzLCBDb0FQIGhlYWRlciBmaWVsZHMgYXMgd2VsbCBhcyBDb0FQIG9wdGlvbnMuICBP U0NPQVAKICAgICAgcHJvdmlkZXMgZW5kLXRvLWVuZCBjb25maWRlbnRpYWxpdHksIGludGVncml0 eSBhbmQgcmVwbGF5CiAgICAgIHByb3RlY3Rpb24sIGFuZCBhIHNlY3VyZSBiaW5kaW5nIGJldHdl ZW4gQ29BUCByZXF1ZXN0IGFuZCByZXNwb25zZQogICAgICBtZXNzYWdlcy4KCiAgICAgIEEgQ29B UCBtZXNzYWdlIHByb3RlY3RlZCB3aXRoIE9TQ09BUCBjb250YWlucyB0aGUgQ29BUCBvcHRpb24K ICAgICAgIk9iamVjdC1TZWN1cml0eSIgd2hpY2ggc2lnbmFscyB0aGF0IHRoZSBDb0FQIG1lc3Nh Z2UgY2FycmllcyBhCiAgICAgIENPU0UgbWVzc2FnZSAoW0ktRC5pZXRmLWNvc2UtbXNnXSkuICBP U0NPQVAgZGVmaW5lcyBhIHByb2ZpbGUgb2YKICAgICAgQ09TRSB3aGljaCBpbmNsdWRlcyByZXBs YXkgcHJvdGVjdGlvbi4KCiAgIE9iamVjdCBTZWN1cml0eSBvZiBDb250ZW50IChPU0NPTikKCiAg ICAgIEZvciB0aGUgY2FzZSBvZiB3cmFwcGluZyBvZiBhcHBsaWNhdGlvbiBsYXllciBwYXlsb2Fk IGRhdGEKICAgICAgKCJjb250ZW50Iikgb25seSwgc3VjaCBhcyByZXNvdXJjZSByZXByZXNlbnRh dGlvbnMgb3IgY2xhaW1zIG9mCiAgICAgIGFjY2VzcyB0b2tlbnMsIHRoZSBzYW1lIENPU0UgcHJv ZmlsZSBjYW4gYmUgYXBwbGllZCB0byBvYnRhaW4gZW5kLQogICAgICB0by1lbmQgY29uZmlkZW50 aWFsaXR5LCBpbnRlZ3JpdHkgYW5kIHJlcGxheSBwcm90ZWN0aW9uLgogICAgICBbSS1ELnNlbGFu ZGVyLWFjZS1vYmplY3Qtc2VjdXJpdHldIGRlZmluZXMgdGhpcyBmdW5jdGlvbmFsaXR5IGFzCiAg ICAgIE9iamVjdCBTZWN1cml0eSBvZiBDb250ZW50IChPU0NPTikuCgogICAgICBJbiB0aGlzIGNh c2UsIHRoZSBtZXNzYWdlIGlzIG5vdCBib3VuZCB0byB0aGUgdW5kZXJseWluZwogICAgICBhcHBs aWNhdGlvbiBsYXllciBwcm90b2NvbCBhbmQgY2FuIHRoZXJlZm9yZSBiZSB1c2VkIHdpdGggSFRU UCwKICAgICAgQ29BUCwgQmx1ZXRvb3RoIFNtYXJ0LCBldGMuICBXaGlsZSBPU0NPQVAgaW50ZWdy aXR5IHByb3RlY3RzCiAgICAgIHNwZWNpZmljIENvQVAgbWVzc2FnZSBtZXRhLWRhdGEgbGlrZSBy ZXF1ZXN0L3Jlc3BvbnNlIGNvZGUsIGFuZAogICAgICBiaW5kcyBhIHJlc3BvbnNlIHRvIGEgc3Bl Y2lmaWMgcmVxdWVzdCwgT1NDT04gcHJvdGVjdHMgb25seQogICAgICBwYXlsb2FkL2NvbnRlbnQs IHRoZXJlZm9yZSB0aG9zZSBzZWN1cml0eSBmZWF0dXJlcyBhcmUgbG9zdC4gIFRoZQogICAgICBh ZHZhbnRhZ2VzIGFyZSB0aGF0IGFuIE9TQ09OIG1lc3NhZ2UgY2FuIGJlIHBhc3NlZCBhY3Jvc3MK CgoKClNlaXR6LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBTZXB0ZW1iZXIgMjEsIDIwMTYgICAg ICAgICAgICAgICBbUGFnZSA4XQoMCkludGVybmV0LURyYWZ0ICAgICAgICAgT0F1dGggMi4wIElv VCBBdXRob3JpemF0aW9uICAgICAgICAgICAgTWFyY2ggMjAxNgoKCiAgICAgIGRpZmZlcmVudCBw cm90b2NvbHMsIGZyb20gcmVxdWVzdCB0byByZXNwb25zZSwgYW5kIHVzZWQgdG8gc2VjdXJlCiAg ICAgIGdyb3VwIGNvbW11bmljYXRpb25zLgoKNC4gIFByb3RvY29sIEludGVyYWN0aW9ucwoKICAg VGhpcyBmcmFtZXdvcmsgaXMgYmFzZWQgb24gdGhlIHNhbWUgcHJvdG9jb2wgaW50ZXJhY3Rpb25z IGFzIE9BdXRoCiAgIDIuMDogQSBjbGllbnQgb2J0YWlucyBhbiBhY2Nlc3MgdG9rZW4gZnJvbSBh biBBUyBhbmQgcHJlc2VudHMgdGhlCiAgIHRva2VuIHRvIGFuIFJTIHRvIGdhaW4gYWNjZXNzIHRv IGEgcHJvdGVjdGVkIHJlc291cmNlLiAgVGhlc2UKICAgaW50ZXJhY3Rpb25zIGFyZSBzaG93biBp biBGaWd1cmUgMS4gIEFuIG92ZXJ2aWV3IG9mIHZhcmlvdXMgT0F1dGgKICAgY29uY2VwdHMgaXMg cHJvdmlkZWQgaW4gU2VjdGlvbiAzLjEuCgogICBUaGUgY29uc2VudCBvZiB0aGUgcmVzb3VyY2Ug b3duZXIsIGZvciBnaXZpbmcgYSBjbGllbnQgYWNjZXNzIHRvIGEKICAgcHJvdGVjdGVkIHJlc291 cmNlLCBjYW4gYmUgcHJlLWNvbmZpZ3VyZWQgYXV0aG9yaXphdGlvbiBwb2xpY2llcyBvcgogICBk eW5hbWljYWxseSBhdCB0aGUgdGltZSB3aGVuIHRoZSByZXF1ZXN0IGlzIHNlbnQuICBUaGUgcmVz b3VyY2Ugb3duZXIKICAgYW5kIHRoZSByZXF1ZXN0aW5nIHBhcnR5ICg9IGNsaWVudCBvd25lcikg YXJlIG5vdCBzaG93biBpbiBGaWd1cmUgMS4KCiAgIEZvciB0aGUgZGVzY3JpcHRpb24gaW4gdGhp cyBkb2N1bWVudCB3ZSBhc3N1bWUgdGhhdCB0aGUgY2xpZW50IGhhcwogICBiZWVuIHJlZ2lzdGVy ZWQgdG8gYW4gQVMuICBSZWdpc3RyYXRpb24gbWVhbnMgdGhhdCB0aGUgdHdvIHNoYXJlCiAgIGNy ZWRlbnRpYWxzLCBjb25maWd1cmF0aW9uIHBhcmFtZXRlcnMgYW5kIHRoYXQgc29tZSBmb3JtIG9m CiAgIGF1dGhvcml6YXRpb24gaGFzIHRha2VuIHBsYWNlLiAgVGhlc2UgY3JlZGVudGlhbHMgYXJl IHVzZWQgdG8gcHJvdGVjdAogICB0aGUgdG9rZW4gcmVxdWVzdCBieSB0aGUgY2xpZW50IGFuZCB0 aGUgdHJhbnNwb3J0IG9mIGFjY2VzcyB0b2tlbnMKICAgYW5kIGNsaWVudCBpbmZvcm1hdGlvbiBm cm9tIEFTIHRvIHRoZSBjbGllbnQuCgogICBJdCBpcyBhbHNvIGFzc3VtZWQgdGhhdCB0aGUgUlMg aGFzIGJlZW4gcmVnaXN0ZXJlZCB3aXRoIHRoZSBBUy4KICAgRXN0YWJsaXNoZWQga2V5aW5nIG1h dGVyaWFsIGJldHdlZW4gdGhlIEFTIGFuZCB0aGUgUlMgYWxsb3dzIHRoZSBBUwogICB0byBhcHBs eSBjcnlwdG9ncmFwaGljIHByb3RlY3Rpb24gdG8gdGhlIGFjY2VzcyB0b2tlbiB0byBlbnN1cmUg dGhhdAogICB0aGUgY29udGVudCBjYW5ub3QgYmUgbW9kaWZpZWQsIGFuZCBpZiBuZWVkZWQsIHRo YXQgdGhlIGNvbnRlbnQgaXMKICAgY29uZmlkZW50aWFsaXR5IHByb3RlY3RlZC4KCiAgIFRoZSBr ZXlpbmcgbWF0ZXJpYWwgbmVjZXNzYXJ5IGZvciBlc3RhYmxpc2hpbmcgY29tbXVuaWNhdGlvbiBz ZWN1cml0eQogICBiZXR3ZWVuIEMgYW5kIFJTIGlzIGR5bmFtaWNhbGx5IGVzdGFibGlzaGVkIGFz IHBhcnQgb2YgdGhlIHByb3RvY29sCiAgIGRlc2NyaWJlZCBpbiB0aGlzIGRvY3VtZW50LgoKICAg QXQgdGhlIHN0YXJ0IG9mIHRoZSBwcm90b2NvbCB0aGVyZSBpcyBhbiBvcHRpb25hbCBkaXNjb3Zl cnkgc3RlcAogICB3aGVyZSB0aGUgY2xpZW50IGRpc2NvdmVycyB0aGUgcmVzb3VyY2Ugc2VydmVy IGFuZCB0aGUgcmVzb3VyY2VzIHRoaXMKICAgc2VydmVyIGhvc3RzLiAgSW4gdGhpcyBzdGVwIHRo ZSBjbGllbnQgbWlnaHQgYWxzbyBkZXRlcm1pbmUgd2hhdAogICBwZXJtaXNzaW9ucyBhcmUgbmVl ZGVkIHRvIGFjY2VzcyB0aGUgcHJvdGVjdGVkIHJlc291cmNlLiAgVGhlIGV4YWN0CiAgIHByb2Nl ZHVyZSBkZXBlbmRzIG9uIHRoZSBwcm90b2NvbHMgYmVpbmcgdXNlZCBhbmQgdGhlIHNwZWNpZmlj CiAgIGRlcGxveW1lbnQgZW52aXJvbm1lbnQuICBJbiBCbHVldG9vdGggU21hcnQsIGZvciBleGFt cGxlLAogICBhZHZlcnRpc2VtZW50cyBhcmUgYnJvYWRjYXN0ZWQgYnkgYSBwZXJpcGhlcmFsLCBp bmNsdWRpbmcgaW5mb3JtYXRpb24KICAgYWJvdXQgdGhlIHN1cHBvcnRlZCBzZXJ2aWNlcy4gIElu IENvQVAsIGFzIGEgc2Vjb25kIGV4YW1wbGUsIGEgY2xpZW50CiAgIGNhbiBtYWtlcyBhIHJlcXVl c3QgdG8gIi8ud2VsbC1rbm93bi9jb3JlIiB0byBvYnRhaW4gaW5mb3JtYXRpb24KICAgYWJvdXQg YXZhaWxhYmxlIHJlc291cmNlcywgd2hpY2ggYXJlIHJldHVybmVkIGluIGEgc3RhbmRhcmRpemVk CiAgIGZvcm1hdCBhcyBkZXNjcmliZWQgaW4gW1JGQzY2OTBdLgoKCgoKCgoKU2VpdHosIGV0IGFs LiAgICAgICAgICBFeHBpcmVzIFNlcHRlbWJlciAyMSwgMjAxNiAgICAgICAgICAgICAgIFtQYWdl IDldCgwKSW50ZXJuZXQtRHJhZnQgICAgICAgICBPQXV0aCAyLjAgSW9UIEF1dGhvcml6YXRpb24g ICAgICAgICAgICBNYXJjaCAyMDE2CgoKICAgKy0tLS0tLS0tKyAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tKwogICB8ICAgICAgICB8LS0tKEEpLS0g VG9rZW4gUmVxdWVzdCAtLS0tLS0tLS0tLS0tPnwgICAgICAgICAgICAgICB8CiAgIHwgICAgICAg IHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCBBdXRob3JpemF0aW9uIHwK ICAgfCAgICAgICAgfDwtLShCKS0tIEFjY2VzcyBUb2tlbiAtLS0tLS0tLS0tLS0tLS18ICAgIFNl cnZlciAgICAgfAogICB8ICAgICAgICB8ICAgICAgICsgQ2xpZW50IEluZm9ybWF0aW9uICAgICAg ICAgIHwgICAgICAgICAgICAgICB8CiAgIHwgICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0tLSsKICAgfCAgICAgICAgfCAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXiB8CiAgIHwgICAgICAgIHwgICAgICAg IEludHJvc3BlY3Rpb24gUmVxdWVzdCAmIFJlc3BvbnNlIChEKXwgfChFKQogICB8IENsaWVudCB8 ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8IHYKICAgfCAgICAg ICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0r CiAgIHwgICAgICAgIHwtLS0oQyktLSBUb2tlbiArIFJlcXVlc3QgLS0tLS0tLS0tLS0+fCAgICAg ICAgICAgICAgfAogICB8ICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIHwgICBSZXNvdXJjZSAgIHwKICAgfCAgICAgICAgfDwtLShGKS0tIFByb3RlY3RlZCBSZXNv dXJjZSAtLS0tLS0tLS18ICAgIFNlcnZlciAgICB8CiAgIHwgICAgICAgIHwgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgfAogICArLS0tLS0tLS0rICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICstLS0tLS0tLS0tLS0tLSsKCiAgICAg ICAgICAgICAgIEZpZ3VyZSAxOiBPdmVydmlldyBvZiB0aGUgYmFzaWMgcHJvdG9jb2wgZmxvdwoK ICAgUmVxdWVzdGluZyBhbiBBY2Nlc3MgVG9rZW4gKEEpOgoKICAgICAgVGhlIGNsaWVudCBtYWtl cyBhbiBhY2Nlc3MgdG9rZW4gcmVxdWVzdCB0byB0aGUgQVMuICBUaGlzIG1lbW8KICAgICAgYXNz dW1lcyB0aGUgdXNlIG9mIFBvUCB0b2tlbnMgKHNlZSBTZWN0aW9uIDMuMSBmb3IgYSBzaG9ydAog ICAgICBkZXNjcmlwdGlvbikgd2hlcmVpbiB0aGUgQVMgYmluZHMgYSBrZXkgdG8gYW4gYWNjZXNz IHRva2VuLiAgVGhlCiAgICAgIGNsaWVudCBtYXkgaW5jbHVkZSBwZXJtaXNzaW9ucyBpdCBzZWVr cyB0byBvYnRhaW4sIGFuZCBpbmZvcm1hdGlvbgogICAgICBhYm91dCB0aGUgdHlwZSBvZiBjcmVk ZW50aWFscyBpdCB3YW50cyB0byB1c2UgKGkuZS4sIHN5bW1ldHJpYyBvcgogICAgICBhc3ltbWV0 cmljIGNyeXB0b2dyYXBoeSkuCgogICBBY2Nlc3MgVG9rZW4gUmVzcG9uc2UgKEIpOgoKICAgICAg SWYgdGhlIEFTIHN1Y2Nlc3NmdWxseSBwcm9jZXNzZXMgdGhlIHJlcXVlc3QgZnJvbSB0aGUgY2xp ZW50LCBpdAogICAgICByZXR1cm5zIGFuIGFjY2VzcyB0b2tlbi4gIEl0IGFsc28gaW5jbHVkZXMg dmFyaW91cyBwYXJhbWV0ZXJzLAogICAgICB3aGljaCB3ZSBjYWxsICJDbGllbnQgSW5mb3JtYXRp b24iLiAgSW4gYWRkaXRpb24gdG8gdGhlIHJlc3BvbnNlCiAgICAgIHBhcmFtZXRlcnMgZGVmaW5l ZCBieSBPQXV0aCAyLjAgYW5kIHRoZSBQb1AgdG9rZW4gZXh0ZW5zaW9uLCB3ZQogICAgICBjb25z aWRlciBuZXcga2luZHMgb2YgcmVzcG9uc2UgcGFyYW1ldGVycyBpbiBTZWN0aW9uIDUsIGluY2x1 ZGluZwogICAgICBpbmZvcm1hdGlvbiBvbiB3aGljaCBzZWN1cml0eSBwcm90b2NvbCB0aGUgY2xp ZW50IHNob3VsZCB1c2Ugd2l0aAogICAgICB0aGUgcmVzb3VyY2Ugc2VydmVyKHMpIHRoYXQgaXQg aGFzIGp1c3QgYmVlbiBhdXRob3JpemVkIHRvIGFjY2Vzcy4KICAgICAgQ29tbXVuaWNhdGlvbiBz ZWN1cml0eSBiZXR3ZWVuIGNsaWVudCBhbmQgUlMgbWF5IGJlIGJhc2VkIG9uIHByZS0KICAgICAg cHJvdmlzaW9uZWQga2V5cy9zZWN1cml0eSBjb250ZXh0cyBvciBkeW5hbWljYWxseSBlc3RhYmxp c2hlZC4KICAgICAgVGhlIFJTIGF1dGhlbnRpY2F0ZXMgdGhlIGNsaWVudCB2aWEgdGhlIFBvUCB0 b2tlbjsgYW5kIHRoZSBjbGllbnQKICAgICAgYXV0aGVudGljYXRlcyB0aGUgUlMgdmlhIHRoZSBj bGllbnQgaW5mb3JtYXRpb24gYXMgZGVzY3JpYmVkIGluCiAgICAgIFNlY3Rpb24gNS4xLgoKICAg UmVzb3VyY2UgUmVxdWVzdCAoQyk6CgogICAgICBUaGUgY2xpZW50IGludGVyYWN0cyB3aXRoIHRo ZSBSUyB0byByZXF1ZXN0IGFjY2VzcyB0byB0aGUKICAgICAgcHJvdGVjdGVkIHJlc291cmNlIGFu ZCBwcm92aWRlcyB0aGUgYWNjZXNzIHRva2VuLiAgVGhlIHByb3RvY29sIHRvCiAgICAgIHVzZSBi ZXR3ZWVuIHRoZSBjbGllbnQgYW5kIHRoZSBSUyBpcyBub3QgcmVzdHJpY3RlZCB0byBDb0FQOyBI VFRQLAogICAgICBIVFRQLzIsIEJsdWV0b290aCBTbWFydCBldGMuLCBhcmUgYWxzbyBwb3NzaWJs ZSBjYW5kaWRhdGVzLgoKCgpTZWl0eiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgU2VwdGVtYmVy IDIxLCAyMDE2ICAgICAgICAgICAgICBbUGFnZSAxMF0KDApJbnRlcm5ldC1EcmFmdCAgICAgICAg IE9BdXRoIDIuMCBJb1QgQXV0aG9yaXphdGlvbiAgICAgICAgICAgIE1hcmNoIDIwMTYKCgogICAg ICBEZXBlbmRpbmcgb24gdGhlIGRldmljZSBsaW1pdGF0aW9ucyBhbmQgdGhlIHNlbGVjdGVkIHBy b3RvY29sIHRoaXMKICAgICAgZXhjaGFuZ2UgbWF5IGJlIHNwbGl0IHVwIGludG8gdHdvIHBoYXNl czoKCiAgICAgICAgICgxKSB0aGUgY2xpZW50IHNlbmRzIHRoZSBhY2Nlc3MgdG9rZW4gdG8gYSBu ZXdseSBkZWZpbmVkCiAgICAgICAgIGF1dGhvcml6YXRpb24gZW5kcG9pbnQgYXQgdGhlIFJTIChz ZWUgU2VjdGlvbiA1LjMpICwgd2hpY2gKICAgICAgICAgY29udmV5cyBhdXRob3JpemF0aW9uIGlu Zm9ybWF0aW9uIHRvIHRoZSBSUyB0aGF0IG1heSBiZSB1c2VkIGJ5CiAgICAgICAgIHRoZSBjbGll bnQgZm9yIHN1YnNlcXVlbnQgcmVzb3VyY2UgcmVxdWVzdHMsIGFuZAoKICAgICAgICAgKDIpIHRo ZSBjbGllbnQgbWFrZXMgdGhlIHJlc291cmNlIGFjY2VzcyByZXF1ZXN0LCB1c2luZyB0aGUKICAg ICAgICAgY29tbXVuaWNhdGlvbiBzZWN1cml0eSBwcm90b2NvbCBhbmQgb3RoZXIgY2xpZW50IGlu Zm9ybWF0aW9uCiAgICAgICAgIG9idGFpbmVkIGZyb20gdGhlIEFTLgoKICAgICAgVGhlIFJTIHZl cmlmaWVzIHRoYXQgdGhlIHRva2VuIGlzIGludGVncml0eSBwcm90ZWN0ZWQgYnkgdGhlIEFTCiAg ICAgIGFuZCBjb21wYXJlcyB0aGUgY2xhaW1zIGNvbnRhaW5lZCBpbiB0aGUgYWNjZXNzIHRva2Vu IHdpdGggdGhlCiAgICAgIHJlc291cmNlIHJlcXVlc3QuICBJZiB0aGUgUlMgaXMgb25saW5lLCB2 YWxpZGF0aW9uIGNhbiBiZSBoYW5kZWQKICAgICAgb3ZlciB0byB0aGUgQVMgdXNpbmcgdG9rZW4g aW50cm9zcGVjdGlvbiAoc2VlIG1lc3NhZ2VzIEQgYW5kIEUpCiAgICAgIG92ZXIgSFRUUCBvciBD b0FQLCBpbiB3aGljaCBjYXNlIHRoZSBkaWZmZXJlbnQgcGFydHMgb2Ygc3RlcCBDIG1heQogICAg ICBiZSBpbnRlcmxlYXZlZCB3aXRoIGludHJvc3BlY3Rpb24uCgogICBUb2tlbiBJbnRyb3NwZWN0 aW9uIFJlcXVlc3QgKEQpOgoKICAgICAgQSByZXNvdXJjZSBzZXJ2ZXIgbWF5IGJlIGNvbmZpZ3Vy ZWQgdG8gdXNlIHRva2VuIGludHJvc3BlY3Rpb24gdG8KICAgICAgaW50ZXJhY3Qgd2l0aCB0aGUg QVMgdG8gb2J0YWluIHRoZSBtb3N0IHJlY2VudCBjbGFpbXMsIHN1Y2ggYXMKICAgICAgc2NvcGUs IGF1ZGllbmNlLCB2YWxpZGl0eSBldGMuICBhc3NvY2lhdGVkIHdpdGggYSBzcGVjaWZpYyBhY2Nl c3MKICAgICAgdG9rZW4uICBUb2tlbiBpbnRyb3NwZWN0aW9uIG92ZXIgQ29BUCBpcyBkZWZpbmVk IGluCiAgICAgIFtJLUQud2FobHN0cm9lbS1hY2Utb2F1dGgtaW50cm9zcGVjdGlvbl0gYW5kIGZv ciBIVFRQIGluCiAgICAgIFtJLUQuaWV0Zi1vYXV0aC1pbnRyb3NwZWN0aW9uXS4KCiAgICAgIE5v dGUgdGhhdCB0b2tlbiBpbnRyb3NwZWN0aW9uIGlzIGFuIG9wdGlvbmFsIHN0ZXAgYW5kIGNhbiBi ZQogICAgICBvbWl0dGVkIGlmIHRoZSB0b2tlbiBpcyBzZWxmLWNvbnRhaW5lZCBhbmQgdGhlIHJl c291cmNlIHNlcnZlciBpcwogICAgICBwcmVwYXJlZCB0byBwZXJmb3JtIHRoZSB0b2tlbiB2YWxp ZGF0aW9uIG9uIGl0cyBvd24uCgogICBUb2tlbiBJbnRyb3NwZWN0aW9uIFJlc3BvbnNlIChFKToK CiAgICAgIFRoZSBBUyB2YWxpZGF0ZXMgdGhlIHRva2VuIGFuZCByZXR1cm5zIHRoZSBjbGFpbXMg YXNzb2NpYXRlZCB3aXRoCiAgICAgIGl0IGJhY2sgdG8gdGhlIFJTLiAgVGhlIFJTIHRoZW4gdXNl cyB0aGUgcmVjZWl2ZWQgY2xhaW1zIHRvCiAgICAgIHByb2Nlc3MgdGhlIHJlcXVlc3QgdG8gZWl0 aGVyIGFjY2VwdCBvciB0byBkZW55IGl0LgoKICAgUHJvdGVjdGVkIFJlc291cmNlIChGKToKCiAg ICAgIElmIHRoZSByZXF1ZXN0IGZyb20gdGhlIGNsaWVudCBpcyBhdXRob3JpemVkLCB0aGUgUlMg ZnVsZmlsbHMgdGhlCiAgICAgIHJlcXVlc3QgYW5kIHJldHVybnMgYSByZXNwb25zZSB3aXRoIHRo ZSBhcHByb3ByaWF0ZSByZXNwb25zZSBjb2RlLgogICAgICBUaGUgUlMgdXNlcyB0aGUgZHluYW1p Y2FsbHkgZXN0YWJsaXNoZWQga2V5cyB0byBwcm90ZWN0IHRoZQogICAgICByZXNwb25zZSwgYWNj b3JkaW5nIHRvIHVzZWQgY29tbXVuaWNhdGlvbiBzZWN1cml0eSBwcm90b2NvbC4KCgoKCgoKClNl aXR6LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBTZXB0ZW1iZXIgMjEsIDIwMTYgICAgICAgICAg ICAgIFtQYWdlIDExXQoMCkludGVybmV0LURyYWZ0ICAgICAgICAgT0F1dGggMi4wIElvVCBBdXRo b3JpemF0aW9uICAgICAgICAgICAgTWFyY2ggMjAxNgoKCjUuICBPQXV0aCAyLjAgUHJvZmlsaW5n CgogICBUaGlzIHNlY3Rpb24gZGVzY3JpYmVzIHByb2ZpbGVzIG9mIE9BdXRoIDIuMCBhZGp1c3Rp bmcgaXQgdG8KICAgY29uc3RyYWluZWQgZW52aXJvbm1lbnRzIGZvciB1c2UgY2FzZXMgd2hlcmUg dGhpcyBpcyBuZWNlc3NhcnkuCiAgIFByb2ZpbGluZyBmb3IgSlNPTiBXZWIgVG9rZW5zIChKV1Qp IGlzIHByb3ZpZGVkIGluCiAgIFtJLUQud2FobHN0cm9lbS1hY2UtY2Jvci13ZWItdG9rZW5dLgoK NS4xLiAgQ2xpZW50IEluZm9ybWF0aW9uCgogICBPQXV0aCAyLjAgdXNpbmcgYmVhcmVyIHRva2Vu cywgYXMgZGVzY3JpYmVkIGluIFtSRkM2NzQ5XSBhbmQgaW4KICAgW1JGQzY3NTBdLCByZXF1aXJl cyBUTFMgZm9yIGFsbCBjb21tdW5pY2F0aW9uIGludGVyYWN0aW9ucyBiZXR3ZWVuCiAgIGNsaWVu dCwgYXV0aG9yaXphdGlvbiBzZXJ2ZXIsIGFuZCByZXNvdXJjZSBzZXJ2ZXIuICBUaGlzIGlzIHBv c3NpYmxlCiAgIGluIHRoZSBzY29wZSB3aGVyZSBPQXV0aCAyLjAgd2FzIG9yaWdpbmFsbHkgZGV2 ZWxvcGVkOiB3ZWIgYW5kIG1vYmlsZQogICBhcHBsaWNhdGlvbnMuICBJbiB0aGVzZSBlbnZpcm9u bWVudHMgcmVzb3VyY2VzIGxpa2UgY29tcHV0YXRpb25hbAogICBwb3dlciBhbmQgYmFuZHdpZHRo IGFyZSBub3Qgc2NhcmNlIGFuZCBvcGVyYXRpbmcgc3lzdGVtcyBhcyB3ZWxsIGFzCiAgIGJyb3dz ZXIgcGxhdGZvcm1zIGFyZSBwcmUtcHJvdmlzaW9uZWQgd2l0aCB0cnVzdCBhbmNob3JzIHRoYXQg ZW5hYmxlCiAgIGNsaWVudHMgdG8gYXV0aGVudGljYXRlIHNlcnZlcnMgYmFzZWQgb24gdGhlIFdl YiBQS0kuICBJbiBhIG1vcmUKICAgaGV0ZXJvZ2VuZW91cyBJb1QgZW52aXJvbm1lbnQgYSB3aWRl ciByYW5nZSBvZiB1c2UgY2FzZXMgbmVlZHMgdG8gYmUKICAgc3VwcG9ydGVkLiAgVGhlcmVmb3Jl LCB0aGlzIGRvY3VtZW50IHN1Z2dlc3RzIGV4dGVuc2lvbnMgdG8gT0F1dGggMi4wCiAgIHRoYXQg ZW5hYmxlcyB0aGUgQVMgdG8gaW5mb3JtIHRoZSBjbGllbnQgb24gaG93IHRvIGNvbW11bmljYXRl CiAgIHNlY3VyZWx5IHdpdGggYSBSUyBhbmQgdGhhdCBhbGxvd3MgdGhlIGNsaWVudCB0byBpbmRp Y2F0ZQogICBjb21tdW5pY2F0aW9uIHNlY3VyaXR5IHByZWZlcmVuY2VzIHRvIHRoZSBBUy4KCiAg IEluIHRoZSBPQXV0aCBtZW1vIGRlZmluaW5nIHRoZSBrZXkgZGlzdHJpYnV0aW9uIGZvciBwcm9v Zi1vZi0KICAgcG9zc2Vzc2lvbiAoUG9QKSB0b2tlbnMgW0ktRC5pZXRmLW9hdXRoLXBvcC1rZXkt ZGlzdHJpYnV0aW9uXSwgdGhlCiAgIGF1dGhvcnMgc3VnZ2VzdCB0byB1c2UgVXJpLXF1ZXJ5IHBh cmFtZXRlcnMgaW4gb3JkZXIgdG8gc3VibWl0IHRoZQogICBwYXJhbWV0ZXJzIG9mIHRoZSBjbGll bnQncyB0b2tlbiByZXF1ZXN0LiAgVG8gYXZvaWQgbGFyZ2UgaGVhZGVycyBpZgogICB0aGUgY2xp ZW50IHVzZXMgQ29BUCB0byBjb21tdW5pY2F0ZSB3aXRoIHRoZSBBUywgdGhpcyBtZW1vIHNwZWNp ZmllcwogICB0aGUgZm9sbG93aW5nIGFsdGVybmF0aXZlIGZvciBzdWJtaXR0aW5nIGNsaWVudCBy ZXF1ZXN0IHBhcmFtZXRlcnMgdG8KICAgdGhlIEFTOiBUaGUgY2xpZW50IGVuY29kZXMgdGhlIHBh cmFtZXRlcnMgb2YgaXRzIHJlcXVlc3QgYXMgYSBDQk9SCiAgIG1hcCBhbmQgc3VibWl0cyB0aGF0 IG1hcCBhcyB0aGUgcGF5bG9hZCBvZiB0aGUgY2xpZW50IHJlcXVlc3QuICBUaGUKICAgQ29udGVu dC1mb3JtYXQgTVVTVCBiZSBhcHBsaWNhdGlvbi9jYm9yIGluIHRoYXQgY2FzZS4KCiAgIFRoZSBP QXV0aCBtZW1vIGZ1cnRoZXIgc3BlY2lmaWVzIHRoYXQgdGhlIEFTIFNIQUxMIHVzZSBhIEpTT04K ICAgc3RydWN0dXJlIGluIHRoZSBwYXlsb2FkIG9mIHRoZSByZXNwb25zZSB0byBlbmNvZGUgdGhl IHJlc3BvbnNlCiAgIHBhcmFtZXRlcnMuICBUaGVzZSBwYXJhbWV0ZXJzIGluY2x1ZGUgdGhlIGFj Y2VzcyB0b2tlbiwgZGVzdGluZWQgZm9yCiAgIHRoZSBSUyBhbmQgYWRkaXRpb25hbCBpbmZvcm1h dGlvbiBmb3IgdGhlIGNsaWVudCwgc3VjaCBhcyBlLmcuIHRoZQogICBQb1Aga2V5LiAgV2UgY2Fs bCB0aGlzIGluZm9ybWF0aW9uICJjbGllbnQgaW5mb3JtYXRpb24iLiAgSWYgdGhlCiAgIGNsaWVu dCBpcyB1c2luZyBDb0FQIHRvIGNvbW11bmljYXRlIHdpdGggdGhlIEFTIHRoZSBBUyBTSE9VTEQg dXNlCiAgIENCT1IgaW5zdGVhZCBvZiBKU09OIGZvciBlbmNvZGluZyBpdHMgcmVzcG9uc2UuICBU aGUgY2xpZW50IGNhbgogICBleHBsaWNpdGx5IHJlcXVlc3QgdGhpcyBlbmNvZGluZyBieSBzZXR0 aW5nIHRoZSBDb0FQIEFjY2VwdCBvcHRpb24gaW4KICAgdGhlIGFjY2VzcyB0b2tlbiByZXF1ZXN0 IHRvICJhcHBsaWNhdGlvbi9jYm9yIi4KCiAgIElmIHRoZSBjaGFubmVsIGJldHdlZW4gY2xpZW50 IGFuZCBBUyBpcyBub3Qgc2VjdXJlLCB0aGUgd2hvbGUKICAgbWVzc2FnZXMgZnJvbSBjbGllbnQg dG8gQVMgYW5kIHZpY2UtdmVyc2EgTVVTVCBiZSB3cmFwcGVkIGluIEpXRXMKICAgW1JGQzc1MTZd IG9yIENPU0VfRW5jcnlwdGVkIHN0cnVjdHVyZXMgW0ktRC5pZXRmLWNvc2UtbXNnXS4gIFRoZQog ICBjbGllbnQgY2FuIGV4cGxpY2l0bHkgcmVxdWVzdCBDT1NFIHdyYXBwaW5nIGJ5IHNldHRpbmcg dGhlIENvQVAKICAgQWNjZXB0IG9wdGlvbiB0byAiYXBwbGljYXRpb24vY29zZSIuCgoKClNlaXR6 LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBTZXB0ZW1iZXIgMjEsIDIwMTYgICAgICAgICAgICAg IFtQYWdlIDEyXQoMCkludGVybmV0LURyYWZ0ICAgICAgICAgT0F1dGggMi4wIElvVCBBdXRob3Jp emF0aW9uICAgICAgICAgICAgTWFyY2ggMjAxNgoKCiAgIFRoZSBjbGllbnQgbWF5IGJlIGEgY29u c3RyYWluZWQgZGV2aWNlIGFuZCBjb3VsZCB0aGVyZWZvcmUgYmUgbGltaXRlZAogICBpbiB0aGUg Y29tbXVuaWNhdGlvbiBzZWN1cml0eSBwcm90b2NvbHMgaXQgc3VwcG9ydHMuICBJdCBjYW4KICAg dGhlcmVmb3JlIHNpZ25hbCB0byB0aGUgQVMgd2hpY2ggcHJvdG9jb2xzIGl0IGNhbiBzdXBwb3J0 IGZvcgogICBzZWN1cmluZyB0aGVpciBtdXR1YWwgY29tbXVuaWNhdGlvbi4gIFRoaXMgaXMgZG9u ZSBieSB1c2luZyB0aGUgImNzcCIKICAgcGFyYW1ldGVyIGRlZmluZWQgYmVsb3cgaW4gdGhlIFRv a2VuIFJlcXVlc3QgbWVzc2FnZSBzZW50IHRvIHRoZSBBUy4KCiAgIE5vdGUgdGhhdCBUaGUgT0F1 dGgga2V5IGRpc3RyaWJ1dGlvbiBzcGVjaWZpY2F0aW9uCiAgIFtJLUQuaWV0Zi1vYXV0aC1wb3At a2V5LWRpc3RyaWJ1dGlvbl0gZGVzY3JpYmVzIGluIHNlY3Rpb24gNiBob3cgdGhlCiAgIGNsaWVu dCBjYW4gcmVxdWVzdCBzcGVjaWZpYyB0eXBlcyBvZiBrZXlzIChzeW1tZXRyaWMgdnMuICBhc3lt bWV0cmljKQogICBhbmQgcHJvb2Ytb2YtcG9zc2Vzc2lvbiBhbGdvcml0aG1zIGluIHRoZSBQb1Ag dG9rZW4gcmVxdWVzdC4gIFRoZXNlCiAgIGFyZSB1c2VkIGFzIHdlbGwgaW4gdGhpcyBzcGVjaWZp Y2F0aW9uLgoKICAgVGhlIGNsaWVudCBhbmQgdGhlIFJTIG1pZ2h0IG5vdCBoYXZlIGFueSBwcmlv ciBrbm93bGVkZ2UgYWJvdXQgZWFjaAogICBvdGhlciwgdGhlcmVmb3JlIHRoZSBBUyBuZWVkcyB0 byBoZWxwIHRoZW0gdG8gZXN0YWJsaXNoIGEgc2VjdXJpdHkKICAgY29udGV4dCBvciBhdCBsZWFz dCBhIGNvbW1vbiBrZXkuICBUaGUgQVMgZG9lcyB0aGlzIGJ5IGluZGljYXRpbmcgdGhlCiAgIGNv bW11bmljYXRpb24gc2VjdXJpdHkgcHJvdG9jb2wgcGFyYW1ldGVyICJjc3AiIGFuZCBhZGRpdGlv bmFsIGtleQogICBwYXJhbWV0ZXJzIGluIHRoZSBjbGllbnQgaW5mb3JtYXRpb24uCgogICBUaGUg Y3NwIHBhcmFtZXRlciBzcGVjaWZpZXMgaG93IGNsaWVudCBhbmQgUlMgY29tbXVuaWNhdGlvbiBp cyBnb2luZwogICB0byBiZSBzZWN1cmVkIGJhc2VkIG9uIHRoZSBrZXlzIHByb3ZpZGVkIGJ5IHRo ZSBBUy4gIEN1cnJlbnRseQogICBkZWZpbmVkIHZhbHVlcyBhcmUgIlRMUyIsICJEVExTIiwgIk9i amVjdFNlY3VyaXR5IiB3aXRoIHRoZSBlbmNvZGluZ3MKICAgc3BlY2lmaWVkIGluIEZpZ3VyZSAy LiAgRGVwZW5kaW5nIG9uIHRoZSB2YWx1ZSBkaWZmZXJlbnQgYWRkaXRpb25hbAogICBwYXJhbWV0 ZXJzIGJlY29tZSBtYW5kYXRvcnkuCgogICAgICAgICAgLy0tLS0tLS0tLS0tKy0tLS0tLS0tLS0t LS0tKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tXAogICAgICAgICAgfCBWYWx1ZSAgICAgfCBNYWpv ciBUeXBlICAgfCBLZXkgICAgICAgICAgICAgICAgICAgfAogICAgICAgICAgfC0tLS0tLS0tLS0t Ky0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tfAogICAgICAgICAgfCAwICAg ICAgICAgfCAwICAgICAgICAgICAgfCBUTFMgICAgICAgICAgICAgICAgICAgfAogICAgICAgICAg fCAxICAgICAgICAgfCAwICAgICAgICAgICAgfCBEVExTICAgICAgICAgICAgICAgICAgfAogICAg ICAgICAgfCAyICAgICAgICAgfCAwICAgICAgICAgICAgfCBPYmplY3RTZWN1cml0eSAgICAgICAg fAogICAgICAgICAgXC0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLwoKICAgICAgIEZpZ3VyZSAyOiBUYWJsZSBvZiAnY3NwJyBwYXJhbWV0ZXIgdmFsdWUg ZW5jb2RpbmdzIGZvciBDbGllbnQKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEluZm9y bWF0aW9uLgoKICAgQ29BUCBzcGVjaWZpZXMgdGhyZWUgc2VjdXJpdHkgbW9kZXMgb2YgRFRMUzog UHJlU2hhcmVkS2V5LAogICBSYXdQdWJsaWNLZXkgYW5kIENlcnRpZmljYXRlLiAgVGhlIHNhbWUg bW9kZXMgY2FuIGJlIHVzZWQgd2l0aCBUTFMuCiAgIFRoZSBjbGllbnQgaXMgdG8gaW5mZXIgZnJv bSB0aGUgdHlwZSBvZiBrZXkgcHJvdmlkZWQsIHdoaWNoIChEKVRMUwogICBtb2RlIHRoZSBSUyBz dXBwb3J0cyBhcyBmb2xsb3dzLgoKICAgSWYgUHJlU2hhcmVkS2V5IG1vZGUgaXMgdXNlZCwgdGhl IEFTIE1VU1QgcHJvdmlkZSB0aGUgY2xpZW50IHdpdGggdGhlCiAgIHByZS1zaGFyZWQga2V5IHRv IGJlIHVzZWQgd2l0aCB0aGUgUlMuICBUaGlzIGtleSBNVVNUIGJlIHRoZSBzYW1lIGFzCiAgIHRo ZSBQb1Aga2V5IChpLmUuIGEgc3ltbWV0cmljIGtleSBhcyBpbiBzZWN0aW9uIDQgb2YKICAgW0kt RC5pZXRmLW9hdXRoLXBvcC1rZXktZGlzdHJpYnV0aW9uXSkuCgogICBUaGUgY2xpZW50IE1VU1Qg dXNlIHRoZSBQb1Aga2V5IGFzIERUTFMgcHJlLXNoYXJlZCBrZXkuICBUaGUgY2xpZW50CiAgIE1V U1QgZnVydGhlcm1vcmUgdXNlIHRoZSAia2lkIiBwYXJhbWV0ZXIgcHJvdmlkZWQgYXMgcGFydCBv ZiB0aGUgSldLLwogICBDT1NFX0tleSBhcyB0aGUgcHNrX2lkZW50aXR5IGluIHRoZSBEVExTIGhh bmRzaGFrZSBbUkZDNDI3OV0uICBIb3cKCgoKU2VpdHosIGV0IGFsLiAgICAgICAgICBFeHBpcmVz IFNlcHRlbWJlciAyMSwgMjAxNiAgICAgICAgICAgICAgW1BhZ2UgMTNdCgwKSW50ZXJuZXQtRHJh ZnQgICAgICAgICBPQXV0aCAyLjAgSW9UIEF1dGhvcml6YXRpb24gICAgICAgICAgICBNYXJjaCAy MDE2CgoKICAgdGhlIEFTIGFuZCB0aGUgUlMgZGV0ZXJtaW5lIHRoZSB2YWx1ZXMgb2YgdGhlIGtp ZCBwYXJhbWV0ZXIgaXMgb3V0IG9mCiAgIHNjb3BlIGZvciB0aGlzIHNwZWNpZmljYXRpb24sIGJ1 dCB0aGUgQVMgTVVTVCB1c2UgYSBraWQgdGhhdCBtYWtlcyBpdAogICBwb3NzaWJsZSBmb3IgdGhl IFJTIHRvIHNlbGVjdCB0aGUgY29ycmVjdCBrZXkuCgogICBJZiBSYXdQdWJsaWNLZXkgbW9kZSBp cyB1c2VkLCB0aGUgQVMgTVVTVCBwcm92aWRlIHRoZSBjbGllbnQgd2l0aCB0aGUKICAgUlMncyBy YXcgcHVibGljIGtleSB1c2luZyB0aGUgInJwayIgcGFyYW1ldGVyIGRlZmluZWQgaW4gdGhlCiAg IGZvbGxvd2luZy4gIFRoaXMgcGFyYW1ldGVyIE1VU1QgY29udGFpbiBhIEpXSyBvciBhIENPU0Vf S2V5LiAgVGhlCiAgIGNsaWVudCBNVVNUIHByb3ZpZGUgYSByYXcgcHVibGljIGtleSB0byB0aGUg QVMsIGFuZCB0aGUgQVMgTVVTVCB1c2UKICAgdGhpcyBrZXkgYXMgUG9QIGtleSBpbiB0aGUgdG9r ZW4uICBUaGUgdG9rZW4gTVVTVCB0aHVzIHVzZSBhc3ltbWV0cmljCiAgIGtleXMgZm9yIHRoZSBw cm9vZi1vZi1wb3NzZXNzaW9uLiAgTm90ZSB0aGF0IHRoZSBQb1Aga2V5IGRpc3RyaWJ1dGlvbgog ICBzcGVjaWZpY2F0aW9uIFtJLUQuaWV0Zi1vYXV0aC1wb3Ata2V5LWRpc3RyaWJ1dGlvbl0gZGVm aW5lcyBob3cgdGhlCiAgIGNsaWVudCBjYW4gdHJhbnNmZXIgaXRzIGtleSBhcyBhIEpXSyBkYXRh c3RydWN0dXJlLiAgVGhpcwogICBzcGVjaWZpY2F0aW9uIFJFQ09NTUVORFMgdG8gdXNlIGEgQ09T RV9LZXkgc3RydWN0dXJlIGluc3RlYWQuICBUaGlzCiAgIHNwZWNpZmljYXRpb24gcmVmZXJzIHRv IHNlY3Rpb24gOS4xLjMuMi4xLiBvZiBDb0FQIFtSRkM3MjUyXSBmb3IKICAgcmVjb21tZW5kYXRp b25zIG9uIGhvdyB0byBnZW5lcmF0ZSB0aGUga2lkIGZvciBhIHJhdyBwdWJsaWMga2V5LgoKICAg SW4gb3JkZXIgdG8gZ2V0IHRoZSBwcm9vZi1vZi1wb3NzZXNzaW9uIGEgUlMgY29uZmlndXJlZCB0 byB1c2UgdGhpcwogICBtb2RlIHRvZ2V0aGVyIHdpdGggUG9QIHRva2VucyBNVVNUIHJlcXVpcmUg Y2xpZW50IGF1dGhlbnRpY2F0aW9uIGluCiAgIHRoZSBEVExTIGhhbmRzaGFrZS4gIFRoZSBjbGll bnQgTVVTVCB1c2UgdGhlIHJhdyBwdWJsaWMga2V5IGJvdW5kIHRvCiAgIHRoZSBQb1AgdG9rZW4g Zm9yIGNsaWVudCBhdXRoZW50aWNhdGlvbiBpbiBEVExTLgoKICAgVExTIG9yIERUTFMgd2l0aCBj ZXJ0aWZpY2F0ZXMgTUFZIG1ha2UgdXNlIG9mIHByZS1lc3RhYmxpc2hlZCB0cnVzdAogICBhbmNo b3JzIG9yIE1BWSBiZSBjb25maWd1cmVkIG1vcmUgdGlnaHRseSB3aXRoIGFkZGl0aW9uYWwgY2xp ZW50CiAgIGluZm9ybWF0aW9uIHBhcmFtZXRlcnMsIHN1Y2ggYXMgeDVjLCB4NXQsIG9yIHg1dCNT MjU2LiAgQW4gb3ZlcnZpZXcKICAgb2YgdGhlc2UgcGFyYW1ldGVycyBpcyBnaXZlbiBiZWxvdy4K CiAgIEZvciB3aGVuIGNvbW11bmljYXRpb24gc2VjdXJpdHkgaXMgYmFzZWQgb24gY2VydGlmaWNh dGVzIHRoaXMKICAgYXR0cmlidXRlIGNhbiBiZSB1c2VkIHRvIGRlZmluZSB0aGUgc2VydmVyIGNl cnRpZmljYXRlIG9yIENBCiAgIGNlcnRpZmljYXRlLiAgU2VtYW50aWNzIGZvciB0aGlzIGF0dHJp YnV0ZSBpcyBkZWZpbmVkIGJ5IFtSRkM3NTE3XSBvcgogICBDT1NFX0tleSBbSS1ELmlldGYtY29z ZS1tc2ddLgoKICAgRm9yIHdoZW4gY29tbXVuaWNhdGlvbiBzZWN1cml0eSBpcyBiYXNlZCBvbiBj ZXJ0aWZpY2F0ZXMgdGhpcwogICBhdHRyaWJ1dGUgY2FuIGJlIHVzZWQgdG8gZGVmaW5lIHRoZSBz cGVjaWZpYyBzZXJ2ZXIgY2VydGlmaWNhdGUgdG8KICAgZXhwZWN0IG9yIHRoZSBDQSBjZXJ0aWZp Y2F0ZS4gIFNlbWFudGljcyBmb3IgdGhpcyBhdHRyaWJ1dGUgaXMKICAgZGVmaW5lZCBieSBKV0sv Q09TRV9LZXkuCgogICBUbyB1c2Ugb2JqZWN0IHNlY3VyaXR5IChzdWNoIGFzIE9TQ09BUCBhbmQg T1NDT04pIHJlcXVpcmVzIHNlY3VyaXR5CiAgIGNvbnRleHQgdG8gYmUgZXN0YWJsaXNoZWQsIHdo aWNoIGNhbiBiZSBwcm92aXNpb25lZCB3aXRoIFBvUCB0b2tlbgogICBhbmQgY2xpZW50IGluZm9y bWF0aW9uLCBvciBkZXJpdmVkIGZyb20gdGhhdCBpbmZvcm1hdGlvbi4gIE9iamVjdAogICBzZWN1 cml0eSBzcGVjaWZpY2F0aW9ucyBkZXNpZ25lZCB0byBiZSB1c2VkIHdpdGggdGhpcyBwcm90b2Nv bCBNVVNUCiAgIHNwZWNpZnkgdGhlIHBhcmFtZXRlcnMgdGhhdCBhbiBBUyBoYXMgdG8gcHJvdmlk ZSB0byB0aGUgY2xpZW50IGluCiAgIG9yZGVyIHRvIHNldCB1cCB0aGUgbmVjZXNzYXJ5IHNlY3Vy aXR5IGNvbnRleHQuCgogICBUYWJsZSBGaWd1cmUgMyBzdW1tYXJpemVzIHRoZSBhZGRpdGlvbmFs IHBhcmFtZXRlcnMgZGVmaW5lZCBoZXJlIGZvcgogICB1c2UgYnkgdGhlIGNsaWVudCBvciB0aGUg QVMgaW4gdGhlIFBvUCB0b2tlbiByZXF1ZXN0IHByb3RvY29sLgoKCgoKCgpTZWl0eiwgZXQgYWwu ICAgICAgICAgIEV4cGlyZXMgU2VwdGVtYmVyIDIxLCAyMDE2ICAgICAgICAgICAgICBbUGFnZSAx NF0KDApJbnRlcm5ldC1EcmFmdCAgICAgICAgIE9BdXRoIDIuMCBJb1QgQXV0aG9yaXphdGlvbiAg ICAgICAgICAgIE1hcmNoIDIwMTYKCgogICAgICAvLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tLS0r LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLVwKICAgICAgfCBQYXJhbWV0ZXIgfCBV c2VkIGJ5ICAgICAgfCBEZXNjcmlwdGlvbiAgICAgICAgICAgICAgICAgICAgICB8CiAgICAgIHwt LS0tLS0tLS0tLSstLS0tLS0tLS0tLS0tLSstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tfAogICAgICB8IGNzcCAgICAgICB8IGNsaWVudCBvciBBUyB8IENvbW11bmljYXRpb24gc2Vj dXJpdHkgcHJvdG9jb2wgIHwKICAgICAgfCBycGsgICAgICAgfCBBUyAgICAgICAgICAgfCBSUydz IHJhdyBwdWJsaWMga2V5ICAgICAgICAgICAgICB8CiAgICAgIHwgeDVjICAgICAgIHwgQVMgICAg ICAgICAgIHwgUlMncyBYLjUwOSBjZXJ0aWZpY2F0ZSBjaGFpbiAgICAgfAogICAgICB8IHg1dCAg ICAgICB8IEFTICAgICAgICAgICB8IFJTJ3MgU0hBLTEgY2VydCB0aHVtYiBwcmludCAgICAgIHwK ICAgICAgfCB4NXQjUzI1NiAgfCBBUyAgICAgICAgICAgfCBSUydzIFNIQS0yNTYgY2VydCB0aHVt YiBwcmludCAgICB8CiAgICAgIFwtLS0tLS0tLS0tLSstLS0tLS0tLS0tLS0tLSstLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLwoKICAgICAgIEZpZ3VyZSAzOiBUYWJsZSBvZiBhZGRp dGlvbmFsIHBhcmFtZXRlcnMgZGVmaW5lZCBmb3IgdGhlIFBvUAogICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICBwcm90b2NvbC4KCjUuMi4gIENvQVAgQWNjZXNzLVRva2VuIE9wdGlvbgoK ICAgT0F1dGggMi4wIGFjY2VzcyB0b2tlbnMgYXJlIHVzdWFsbHkgdHJhbnNmZXJyZWQgYXMgYXV0 aG9yaXphdGlvbgogICBoZWFkZXIuICBDb0FQIGhhcyBubyBhdXRob3JpemF0aW9uIGhlYWRlciBl cXVpdmFsZW5jZS4gIFRoaXMgZG9jdW1lbnQKICAgdGhlcmVmb3IgcmVnaXN0ZXIgdGhlIG9wdGlv biBBY2Nlc3MtVG9rZW4uICBUaGUgQWNjZXNzLVRva2VuIG9wdGlvbgogICBpcyBhbiBhbHRlcm5h dGl2ZSBmb3IgdHJhbnNmZXJyaW5nIHRoZSBhY2Nlc3MgdG9rZW4gd2hlbiBpdCBpcwogICBzbWFs bGVyIHRoZW4gMjU1IGJ5dGVzLiAgSWYgdG9rZW4gaXMgbGFyZ2VyIHRoZSAyNTUgYnl0ZXMgbGFn ZXIKICAgYXV0aG9yaXphdGlvbiBpbmZvcm1hdGlvbiByZXNvdXJjZXMgTVVTVCBhdCB0aGUgUlMg YmUgdXNlciB3aGVuIENvQVAuCgo1LjMuICBBdXRob3JpemF0aW9uIEluZm9ybWF0aW9uIFJlc291 cmNlIGF0IHRoZSBSZXNvdXJjZSBTZXJ2ZXIKCiAgIEEgY29uc2VxdWVuY2Ugb2YgYWxsb3dpbmcg dGhlIHVzZSBvZiBDb0FQIGFzIHdlYiB0cmFuc2ZlciBwcm90b2NvbCBpcwogICB0aGF0IHdlIGNh bm5vdCByZWx5IG9uIEhUVFAgc3BlY2lmaWMgbWVjaGFuaXNtcywgc3VjaCBhcyB0cmFuc2ZlcnJp bmcKICAgaW5mb3JtYXRpb24gZWxlbWVudHMgaW4gSFRUUCBoZWFkZXJzIHNpbmNlIHRob3NlIGFy ZSBub3QgbmVjZXNzYXJpbHkKICAgZ3JhY2VmdWxseSBtYXBwZWQgdG8gQ29BUC4gIEluIGNhc2Ug dGhlIGFjY2VzcyB0b2tlbiBpcyBsYXJnZXIgdGhhbgogICAyNTUgYnl0ZXMgaXQgc2hvdWxkIG5v dCBiZSBzZW50IGFzIGEgQ29BUCBvcHRpb24uCgogICBGb3IgY29udmV5aW5nIGF1dGhvcml6YXRp b24gaW5mb3JtYXRpb24gdG8gdGhlIFJTIGEgbmV3IHJlc291cmNlIGlzCiAgIGludHJvZHVjZWQg dG8gd2hpY2ggdGhlIFBvUCB0b2tlbnMgY2FuIGJlIHNlbnQgdG8gY29udmV5CiAgIGF1dGhvcml6 YXRpb24gaW5mb3JtYXRpb24gYmVmb3JlIHRoZSBmaXJzdCByZXNvdXJjZSByZXF1ZXN0IGlzIG1h ZGUKICAgYnkgdGhlIGNsaWVudC4gIFRoaXMgc3BlY2lmaWNhdGlvbiBjYWxscyB0aGlzIHJlc291 cmNlICIvYXV0aHotaW5mbyI7CiAgIHRoZSBVUkkgbWF5LCBob3dldmVyLCB2YXJ5IGluIGRlcGxv eW1lbnRzLgoKICAgVGhlIFJTIG5lZWRzIHRvIHN0b3JlIHRoZSBQb1AgdG9rZW4gZm9yIHdoZW4g bGF0ZXIgYXV0aG9yaXppbmcKICAgcmVxdWVzdHMgZnJvbSB0aGUgY2xpZW50LiAgVGhlIFJTIGlz IG5vdCBtYW5kYXRlZCB0byBiZSBhYmxlIHRvCiAgIG1hbmFnZSBtdWx0aXBsZSBjbGllbnQgYXQg b25jZS4gaG93IHRoZSBSUyBtYW5hZ2VzIGNsaWVudHMgaXMgb3V0IG9mCiAgIHNjb3BlIGZvciB0 aGlzIHNwZWNpZmljYXRpb24uCgo1LjMuMS4gIEF1dGhvcml6YXRpb24gSW5mb3JtYXRpb24gUmVx dWVzdAoKICAgVGhlIGNsaWVudCBtYWtlcyBhIFBPU1QgcmVxdWVzdCB0byB0aGUgYXV0aG9yaXph dGlvbiBpbmZvcm1hdGlvbgogICByZXNvdXJjZSBieSBzZW5kaW5nIGl0cyBQb1AgdG9rZW4gYXMg cmVxdWVzdCBkYXRhLgoKICAgQ2xpZW50IE1VU1Qgc2VuZCB0aGUgQ29udGVudC1Gb3JtYXQgb3B0 aW9uIGluZGljYXRlIHRva2VuIGZvcm1hdAoKCgoKU2VpdHosIGV0IGFsLiAgICAgICAgICBFeHBp cmVzIFNlcHRlbWJlciAyMSwgMjAxNiAgICAgICAgICAgICAgW1BhZ2UgMTVdCgwKSW50ZXJuZXQt RHJhZnQgICAgICAgICBPQXV0aCAyLjAgSW9UIEF1dGhvcml6YXRpb24gICAgICAgICAgICBNYXJj aCAyMDE2CgoKNS4zLjIuICBBdXRob3JpemF0aW9uIEluZm9ybWF0aW9uIFJlc3BvbnNlCgogICBU aGUgUlMgTVVTVCByZXNvbmRlIHRvIGEgcmVxdWVzdHMgdG8gdGhlIGF1dGhvcml6YXRpb24gaW5m b3JtYXRpb24KICAgcmVzb3VyY2UuICBUaGUgcmVzcG9uc2UgTVVTVCBtYXRjaCBDb0FQIHJlc3Bv bnNlIGNvZGVzIGFjY29yZGluZyB0bwogICBzdWNjZXNzIG9yIGVycm9yIHJlc3BvbnNlIHNlY3Rp b24KCjUuMy4yLjEuICBTdWNjZXNzIFJlc3BvbnNlCgogICBTdWNjZXNzZnVsIHJlcXVlc3RzIE1V U1QgYmUgYW5zd2VyZWQgd2l0aCAyLjAxIENyZWF0ZWQgdG8gaW5kaWNhdGUKICAgdGhhdCBhICJz ZXNzaW9uIiBmb3IgdGhlIFBvUCBUb2tlbiBoYXMgYmVlbiBjcmVhdGVkLiAgTm8gbG9jYXRpb24K ICAgcGF0aCBpcyByZXF1aXJlZCB0byBiZSByZXR1cm5lZC4KCiAgICAgICAgICAgICBSZXNvdXJj ZQogICAgIENsaWVudCAgIFNlcnZlcgogICAgICAgfCAgICAgICAgIHwKICAgICAgIHwgICAgICAg ICB8CiAgIEE6ICArLS0tLS0tLS0+fCBIZWFkZXI6IFBPU1QgKENvZGU9MC4wMikKICAgICAgIHwg UE9TVCAgICB8IFVyaS1QYXRoOiAiL2F1dGh6LWluZm8iCiAgICAgICB8ICAgICAgICAgfCBDb250 ZW50LUZvcm1hdDogImFwcGxpY2F0aW9uL2N3dCIKICAgICAgIHwgICAgICAgICB8IFBheWxvYWQ6 IDxQb1AgVG9rZW4+CiAgICAgICB8ICAgICAgICAgfAogICBCOiAgfDwtLS0tLS0tLSsgSGVhZGVy OiAyLjAxIENyZWF0ZWQKICAgICAgIHwgMi4wMSAgICB8CiAgICAgICB8ICAgICAgICAgfAoKCiAg ICAgICBGaWd1cmUgNDogQXV0aG9yaXphdGlvbiBJbmZvcm1hdGlvbiBSZXNvdXJjZSBTdWNjZXNz IFJlc3BvbnNlCgo1LjMuMi4yLiAgRXJyb3IgUmVzcG9uc2UKCiAgIFRoZSByZXNvdXJjZSBzZXJ2 ZXIgTVVTVCB1c2VyIGFwcHJvcHJpYXRlIENvQVAgcmVzcG9uc2UgY29kZSB0bwogICBjb252ZXkg dGhlIGVycm9yIHRvIHRoZSBDbGllbnQuICBGb3IgcmVxdWVzdCB0aGF0IGFyZSBub3QgdmFsaWQs IGUuZy4KICAgdW5rbm93biBDb250ZW50LUZvcm1hdCwgNC4wMCBCYWQgUmVxdWVzdCBNVVNUIGJl IHJldHVybmVkLiAgSWYgdG9rZW4KICAgaXMgbm90IHZhbGlkLCBlLmcuIHdyb25nIGF1ZGllbmNl LCB0aGUgUlMgTVVTVCByZXR1cm4gNC4wMQogICBVbmF1dGhvcml6ZWQuCgoKCgoKCgoKCgoKCgoK CgpTZWl0eiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgU2VwdGVtYmVyIDIxLCAyMDE2ICAgICAg ICAgICAgICBbUGFnZSAxNl0KDApJbnRlcm5ldC1EcmFmdCAgICAgICAgIE9BdXRoIDIuMCBJb1Qg QXV0aG9yaXphdGlvbiAgICAgICAgICAgIE1hcmNoIDIwMTYKCgogICAgICAgICAgICAgUmVzb3Vy Y2UKICAgICBDbGllbnQgICBTZXJ2ZXIKICAgICAgIHwgICAgICAgICB8CiAgICAgICB8ICAgICAg ICAgfAogICBBOiAgKy0tLS0tLS0tPnwgSGVhZGVyOiBQT1NUIChDb2RlPTAuMDIpCiAgICAgICB8 IFBPU1QgICAgfCBVcmktUGF0aDogIi9hdXRoei1pbmZvIgogICAgICAgfCAgICAgICAgIHwgQ29u dGVudC1Gb3JtYXQ6ICJhcHBsaWNhdGlvbi9jd3QiCiAgICAgICB8ICAgICAgICAgfCBQYXlsb2Fk OiA8UG9QIFRva2VuPgogICAgICAgfCAgICAgICAgIHwKICAgQjogIHw8LS0tLS0tLS0rIEhlYWRl cjogNC4wMSBVbmF1dGhvcml6ZWQKICAgICAgIHwgMi4wMSAgICB8CiAgICAgICB8ICAgICAgICAg fAoKCiAgICAgICAgRmlndXJlIDU6IEF1dGhvcml6YXRpb24gSW5mb3JtYXRpb24gUmVzb3VyY2Ug RXJyb3IgUmVzcG9uc2UKCjUuNC4gIEF1dGhvcml6YXRpb24gSW5mb3JtYXRpb24gRm9ybWF0Cgog ICBXZSBpbnRyb2R1Y2UgYSBuZXcgY2xhaW0gZm9yIGRlc2NyaWJpbmcgYWNjZXNzIHJpZ2h0cyB3 aXRoIGEgc3BlY2lmaWMKICAgZm9ybWF0LCB0aGUgImFpZiIgY2xhaW0uICBJbiB0aGlzIG1lbW8g d2UgcHJvcG9zZSB0byB1c2UgdGhlIGNvbXBhY3QKICAgZm9ybWF0IHByb3ZpZGVkIGJ5IEFJRiBb SS1ELmJvcm1hbm4tY29yZS1hY2UtYWlmXS4gIEFjY2VzcyByaWdodHMgbWF5CiAgIGJlIHNwZWNp ZmllZCBhcyBhIGxpc3Qgb2YgVVJJcyBvZiByZXNvdXJjZXMgdG9nZXRoZXIgd2l0aCBhbGxvd2Vk CiAgIGFjdGlvbnMgKEdFVCwgUE9TVCwgUFVULCBQQVRDSCwgb3IgREVMRVRFKS4gIE90aGVyIGZv cm1hdHMgbWF5IGJlCiAgIG1hbmRhdGVkIGJ5IHNwZWNpZmljIGFwcGxpY2F0aW9ucyBvciByZXF1 aXJlbWVudHMgKGUuZy4gc3BlY2lmeWluZwogICBsb2NhbCBjb25kaXRpb25zIG9uIGFjY2Vzcyku Cgo1LjUuICBDQk9SIERhdGEgRm9ybWF0cwoKICAgVGhlIC90b2tlbiByZXNvdXJjZSAoY2FsbGVk ICJlbmRwb2ludCIgaW4gT0F1dGggMi4wKSwgZGVmaW5lZCBpbgogICBTZWN0aW9uIDMuMiBvZiBb UkZDNjc0OV0sIGlzIHVzZWQgYnkgdGhlIGNsaWVudCB0byBvYnRhaW4gYW4gYWNjZXNzCiAgIHRv a2VuLiAgUmVxdWVzdHMgc2VudCB0byB0aGUgL3Rva2VuIHJlc291cmNlIHVzZSB0aGUgSFRUUCBQ T1NUIG1ldGhvZAogICBhbmQgdGhlIHBheWxvYWQgaW5jbHVkZXMgYSBxdWVyeSBjb21wb25lbnQs IHdoaWNoIGlzIGZvcm1hdHRlZCBhcwogICBhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29k ZWQuICBDb0FQIHBheWxvYWRzIGNhbm5vdCBiZSBmb3JtYXR0ZWQKICAgaW4gdGhlIHNhbWUgd2F5 IHdoaWNoIHJlcXVpcmVzIHRoZSAvdG9rZW4gcmVzb3VyY2Ugb24gdGhlIEFTIHRvIGJlCiAgIHBy b2ZpbGVkLiAgQXBwZW5kaXggQyBkZWZpbmVzIGEgQ0JPUi1iYXNlZCBmb3JtYXQgZm9yIHNlbmRp bmcKICAgcGFyYW1ldGVycyB0byB0aGUgL3Rva2VuIHJlc291cmNlLgoKNS42LiAgVG9rZW4gRXhw aXJhdGlvbgoKICAgRGVwZW5kaW5nIG9uIHRoZSBjYXBhYmlsaXRpZXMgb2YgdGhlIFJTLCB0aGVy ZSBhcmUgdmFyaW91cyB3YXlzIGluCiAgIHdoaWNoIGl0IGNhbiB2ZXJpZnkgdGhlIHZhbGlkaXR5 IG9mIGEgcmVjZWl2ZWQgYWNjZXNzIHRva2VuLiAgV2UgbGlzdAogICB0aGUgcG9zc2liaWxpdGll cyBoZXJlIGluY2x1ZGluZyB3aGF0IGZ1bmN0aW9uYWxpdHkgdGhleSByZXF1aXJlIG9mCiAgIHRo ZSBSUy4KCiAgIG8gIFRoZSB0b2tlbiBpcyBhIENXVC9KV1QgYW5kIGluY2x1ZGVzIGEgJ2V4cCcg Y2xhaW0gYW5kIHBvc3NpYmx5IHRoZQogICAgICAnbmJmJyBjbGFpbS4gIFRoZSBSUyB2ZXJpZmll cyB0aGVzZSBieSBjb21wYXJpbmcgdGhlbSB0byB2YWx1ZXMKICAgICAgZnJvbSBpdHMgaW50ZXJu YWwgY2xvY2sgYXMgZGVmaW5lZCBpbiBbUkZDNzUxOV0uICBJbiB0aGlzIGNhc2UgdGhlCgoKCgpT ZWl0eiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgU2VwdGVtYmVyIDIxLCAyMDE2ICAgICAgICAg ICAgICBbUGFnZSAxN10KDApJbnRlcm5ldC1EcmFmdCAgICAgICAgIE9BdXRoIDIuMCBJb1QgQXV0 aG9yaXphdGlvbiAgICAgICAgICAgIE1hcmNoIDIwMTYKCgogICAgICBSUyBtdXN0IGhhdmUgYSBy ZWFsIHRpbWUgY2hpcCAoUlRDKSBvciBzb21lIG90aGVyIHdheSBvZiByZWxpYWJseQogICAgICBt ZWFzdXJpbmcgdGltZS4KCiAgIG8gIFRoZSBSUyB2ZXJpZmllcyB0aGUgdmFsaWRpdHkgb2YgdGhl IHRva2VuIGJ5IHBlcmZvcm1pbmcgYW4KICAgICAgaW50cm9zcGVjdGlvbiByZXF1ZXN0IGFzIHNw ZWNpZmllZCBpbiBBcHBlbmRpeCBDLjIuICBUaGlzIHJlcXVpcmVzCiAgICAgIHRoZSBSUyB0byBo YXZlIGEgcmVsaWFibGUgbmV0d29yayBjb25uZWN0aW9uIHRvIHRoZSBBUyBhbmQgdG8gYmUKICAg ICAgYWJsZSB0byBoYW5kbGUgdHdvIHNlY3VyZSBzZXNzaW9ucyBpbiBwYXJhbGxlbCAoQyB0byBS UyBhbmQgQVMgdG8KICAgICAgUlMpLgoKICAgbyAgVGhlIFJTIGFuZCB0aGUgQVMgYm90aCBzdG9y ZSBhIHNlcXVlbmNlIG51bWJlciBsaW5rZWQgdG8gdGhlaXIKICAgICAgY29tbW9uIHNlY3VyaXR5 IGFzc29jaWF0aW9uLiAgVGhlIEFTIGluY3JlbWVudHMgdGhpcyBudW1iZXIgZm9yCiAgICAgIGVh Y2ggYWNjZXNzIHRva2VuIGl0IGlzc3VlcyBhbmQgaW5jbHVkZXMgaXQgaW4gdGhlIGFjY2VzcyB0 b2tlbiwKICAgICAgd2hpY2ggaXMgYSBDV1QvSldULiAgVGhlIFJTIGtlZXBzIHRyYWNrIG9mIHRo ZSBtb3N0IHJlY2VudGx5CiAgICAgIHJlY2VpdmVkIHNlcXVlbmNlIG51bWJlciwgYW5kIG9ubHkg YWNjZXB0cyB0b2tlbnMgYXMgdmFsaWQsIHRoYXQKICAgICAgYXJlIGluIGEgY2VydGFpbiByYW5n ZSBhcm91bmQgdGhpcyBudW1iZXIuICBUaGlzIG1ldGhvZCBkb2VzIG9ubHkKICAgICAgcmVxdWly ZSB0aGUgUlMgdG8ga2VlcCB0cmFjayBvZiB0aGUgc2VxdWVuY2UgbnVtYmVyLiAgVGhlIG1ldGhv ZAogICAgICBkb2VzIG5vdCBwcm92aWRlIHRpbWVseSBleHBpcmF0aW9uLCBidXQgaXQgbWFrZXMg c3VyZSB0aGF0IG9sZGVyCiAgICAgIHRva2VucyBjZWFzZSB0byBiZSB2YWxpZCBhZnRlciBhIHNw ZWNpZmllZCBudW1iZXIgb2YgbmV3ZXIgb25lcwogICAgICBnb3QgaXNzdWVkLiAgRm9yIGEgY29u c3RyYWluZWQgUlMgd2l0aCBubyBuZXR3b3JrIGNvbm5lY3Rpdml0eSBhbmQKICAgICAgbm8gbWVh bnMgb2YgcmVsaWFibHkgbWVhc3VyaW5nIHRpbWUsIHRoaXMgaXMgdGhlIGJlc3QgdGhhdCBjYW4g YmUKICAgICAgYWNoaWV2ZWQuCgo2LiAgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMKCiAgIFRoZSBl bnRpcmUgZG9jdW1lbnQgaXMgYWJvdXQgc2VjdXJpdHkuICBTZWN1cml0eSBjb25zaWRlcmF0aW9u cwogICBhcHBsaWNhYmxlIHRvIGF1dGhlbnRpY2F0aW9uIGFuZCBhdXRob3JpemF0aW9uIGluIFJF U1RmdWwKICAgZW52aXJvbm1lbnRzIHByb3ZpZGVkIGluIE9BdXRoIDIuMCBbUkZDNjc0OV0gYXBw bHkgdG8gdGhpcyB3b3JrLCBhcwogICB3ZWxsIGFzIHRoZSBzZWN1cml0eSBjb25zaWRlcmF0aW9u cyBmcm9tIFtJLUQuaWV0Zi1hY2UtYWN0b3JzXS4KICAgRnVydGhlcm1vcmUgW1JGQzY4MTldIHBy b3ZpZGVzIGFkZGl0aW9uYWwgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgZm9yCiAgIE9BdXRoIHdo aWNoIGFwcGx5IHRvIElvVCBkZXBsb3ltZW50cyBhcyB3ZWxsLiAgRmluYWxseQogICBbSS1ELmll dGYtb2F1dGgtcG9wLWFyY2hpdGVjdHVyZV0gZGlzY3Vzc2VzIHNlY3VyaXR5IGFuZCBwcml2YWN5 CiAgIHRocmVhdHMgYXMgd2VsbCBhcyBtaXRpZ2F0aW9uIG1lYXN1cmVzIGZvciBQcm9vZi1vZi1Q b3NzZXNzaW9uCiAgIHRva2Vucy4KCjcuICBJQU5BIENvbnNpZGVyYXRpb25zCgogICBUQkQKCiAg IEZJWE1FOiBBZGQgcmVnaXN0cnkgb3ZlciAnY3NwJyB2YWx1ZXMgZnJvbSBGaWd1cmUgMgoKICAg RklYTUU6IEFkZCByZWdpc3RyeSBvZiAncnBrJyBwYXJhbWV0ZXIgZnJvbSBzZWN0aW9uIDUuMQoK ICAgRklYTUU6IEFkZCByZWdpc3RyeSBvZiAndGt0bicgdmFsdWVzIGZyb20gRmlndXJlIDMKCgoK CgoKCgpTZWl0eiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgU2VwdGVtYmVyIDIxLCAyMDE2ICAg ICAgICAgICAgICBbUGFnZSAxOF0KDApJbnRlcm5ldC1EcmFmdCAgICAgICAgIE9BdXRoIDIuMCBJ b1QgQXV0aG9yaXphdGlvbiAgICAgICAgICAgIE1hcmNoIDIwMTYKCgo3LjEuICBDb0FQIE9wdGlv biBOdW1iZXIgUmVnaXN0cmF0aW9uCgogICBUaGlzIHNlY3Rpb24gcmVnaXN0ZXJzIHRoZSAiQWNj ZXNzLVRva2VuIiBDb0FQIE9wdGlvbiBOdW1iZXIKICAgW1JGQzIwNDZdIGluICJDb1JFIFBhcmFt ZXRlcnMiIHN1Yi1yZWdpc3RyeSAiQ29BUCBPcHRpb24gTnVtYmVycyIgaW4KICAgdGhlIG1hbm5l ciBkZXNjcmliZWQgaW4gW1JGQzcyNTJdLgoKICAgTmFtZQoKICAgICAgQWNjZXNzLVRva2VuCgog ICBOdW1iZXIKCiAgICAgIFRCRAoKICAgUmVmZXJlbmNlCgogICAgICBbZHJhZnQtaWV0Zi1hY2Ut b2F1dGgtYXV0aHpdCgogICBNZWFuaW5nIGluIFJlcXVlc3QKCiAgICAgIENvbnRhaW5zIGFuIEFj Y2VzcyBUb2tlbiBhY2NvcmRpbmcgdG8gW2RyYWZ0LWlldGYtYWNlLW9hdXRoLWF1dGh6XQogICAg ICBjb250YWluaW5nIGFjY2VzcyBwZXJtaXNzaW9ucyBvZiB0aGUgY2xpZW50LgoKICAgTWVhbmlu ZyBpbiBSZXNwb25zZQoKICAgICAgTm90IHVzZWQgaW4gcmVzcG9uc2UKCiAgIFNhZmUtdG8tRm9y d2FyZAoKICAgICAgVEJECgogICBGb3JtYXQKCiAgICAgIEJhc2VkIG9uIHRoZSBvYnNlcnZlciB0 aGUgZm9ybWF0IGlzIHBlcnNldmVkIGRpZmZlcmVudGx5LiAgT3BhcXVlCiAgICAgIGRhdGEgdG8g dGhlIGNsaWVudCBhbmQgQ1dUIG9yIHJlZmVyZW5jZSB0b2tlbiB0byB0aGUgUlMuCgogICBMZW5n dGgKCiAgICAgIExlc3MgdGhlbiAyNTUgYnl0ZXMKCjguICBBY2tub3dsZWRnbWVudHMKCiAgIFdl IHdvdWxkIGxpa2UgdG8gdGhhbmsgRXZlIE1hbGVyIGZvciBoZXIgY29udHJpYnV0aW9ucyB0byB0 aGUgdXNlIG9mCiAgIE9BdXRoIDIuMCBhbmQgVU1BIGluIElvVCBzY2VuYXJpb3MsIFJvYmVydCBU YXlsb3IgZm9yIGhpcyBkaXNjdXNzaW9uCiAgIGlucHV0LCBhbmQgTWFsaXNhIFZ1Y2luaWMgZm9y IGhpcyBpbnB1dCBvbiB0aGUgQUNSRSBwcm9wb3NhbAogICBbSS1ELnNlaXR6LWFjZS1jb3JlLWF1 dGh6XSB3aGljaCB3YXMgb25lIHNvdXJjZSBvZiBpbnNwaXJhdGlvbiBmb3IKICAgdGhpcyB3b3Jr LiAgRmluYWxseSwgd2Ugd291bGQgbGlrZSB0byB0aGFuayB0aGUgQUNFIHdvcmtpbmcgZ3JvdXAg aW4KICAgZ2VuZXJhbCBmb3IgdGhlaXIgZmVlZGJhY2suCgoKClNlaXR6LCBldCBhbC4gICAgICAg ICAgRXhwaXJlcyBTZXB0ZW1iZXIgMjEsIDIwMTYgICAgICAgICAgICAgIFtQYWdlIDE5XQoMCklu dGVybmV0LURyYWZ0ICAgICAgICAgT0F1dGggMi4wIElvVCBBdXRob3JpemF0aW9uICAgICAgICAg ICAgTWFyY2ggMjAxNgoKCjkuICBSZWZlcmVuY2VzCgo5LjEuICBOb3JtYXRpdmUgUmVmZXJlbmNl cwoKICAgW0ktRC5ib3JtYW5uLWNvcmUtYWNlLWFpZl0KICAgICAgICAgICAgICBCb3JtYW5uLCBD LiwgIkFuIEF1dGhvcml6YXRpb24gSW5mb3JtYXRpb24gRm9ybWF0IChBSUYpCiAgICAgICAgICAg ICAgZm9yIEFDRSIsIGRyYWZ0LWJvcm1hbm4tY29yZS1hY2UtYWlmLTAzICh3b3JrIGluCiAgICAg ICAgICAgICAgcHJvZ3Jlc3MpLCBKdWx5IDIwMTUuCgogICBbSS1ELmlldGYtY29zZS1tc2ddCiAg ICAgICAgICAgICAgU2NoYWFkLCBKLiwgIkNCT1IgRW5jb2RlZCBNZXNzYWdlIFN5bnRheCIsIGRy YWZ0LWlldGYtCiAgICAgICAgICAgICAgY29zZS1tc2ctMTAgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBG ZWJydWFyeSAyMDE2LgoKICAgW0ktRC5pZXRmLW9hdXRoLWludHJvc3BlY3Rpb25dCiAgICAgICAg ICAgICAgUmljaGVyLCBKLiwgIk9BdXRoIDIuMCBUb2tlbiBJbnRyb3NwZWN0aW9uIiwgZHJhZnQt aWV0Zi0KICAgICAgICAgICAgICBvYXV0aC1pbnRyb3NwZWN0aW9uLTExICh3b3JrIGluIHByb2dy ZXNzKSwgSnVseSAyMDE1LgoKICAgW0ktRC5pZXRmLW9hdXRoLXBvcC1hcmNoaXRlY3R1cmVdCiAg ICAgICAgICAgICAgSHVudCwgUC4sIFJpY2hlciwgSi4sIE1pbGxzLCBXLiwgTWlzaHJhLCBQLiwg YW5kIEguCiAgICAgICAgICAgICAgVHNjaG9mZW5pZywgIk9BdXRoIDIuMCBQcm9vZi1vZi1Qb3Nz ZXNzaW9uIChQb1ApIFNlY3VyaXR5CiAgICAgICAgICAgICAgQXJjaGl0ZWN0dXJlIiwgZHJhZnQt aWV0Zi1vYXV0aC1wb3AtYXJjaGl0ZWN0dXJlLTA3ICh3b3JrCiAgICAgICAgICAgICAgaW4gcHJv Z3Jlc3MpLCBEZWNlbWJlciAyMDE1LgoKICAgW0ktRC5pZXRmLW9hdXRoLXBvcC1rZXktZGlzdHJp YnV0aW9uXQogICAgICAgICAgICAgIEJyYWRsZXksIEouLCBIdW50LCBQLiwgSm9uZXMsIE0uLCBh bmQgSC4gVHNjaG9mZW5pZywKICAgICAgICAgICAgICAiT0F1dGggMi4wIFByb29mLW9mLVBvc3Nl c3Npb246IEF1dGhvcml6YXRpb24gU2VydmVyIHRvCiAgICAgICAgICAgICAgQ2xpZW50IEtleSBE aXN0cmlidXRpb24iLCBkcmFmdC1pZXRmLW9hdXRoLXBvcC1rZXktCiAgICAgICAgICAgICAgZGlz dHJpYnV0aW9uLTAyICh3b3JrIGluIHByb2dyZXNzKSwgT2N0b2JlciAyMDE1LgoKICAgW0ktRC5z ZWxhbmRlci1hY2Utb2JqZWN0LXNlY3VyaXR5XQogICAgICAgICAgICAgIFNlbGFuZGVyLCBHLiwg TWF0dHNzb24sIEouLCBQYWxvbWJpbmksIEYuLCBhbmQgTC4gU2VpdHosCiAgICAgICAgICAgICAg Ik9iamVjdCBTZWN1cml0eSBvZiBDb0FQIChPU0NPQVApIiwgZHJhZnQtc2VsYW5kZXItYWNlLQog ICAgICAgICAgICAgIG9iamVjdC1zZWN1cml0eS0wMyAod29yayBpbiBwcm9ncmVzcyksIE9jdG9i ZXIgMjAxNS4KCiAgIFtJLUQud2FobHN0cm9lbS1hY2UtY2Jvci13ZWItdG9rZW5dCiAgICAgICAg ICAgICAgV2FobHN0cm9lbSwgRS4sIEpvbmVzLCBNLiwgYW5kIEguIFRzY2hvZmVuaWcsICJDQk9S IFdlYgogICAgICAgICAgICAgIFRva2VuIChDV1QpIiwgZHJhZnQtd2FobHN0cm9lbS1hY2UtY2Jv ci13ZWItdG9rZW4tMDAgKHdvcmsKICAgICAgICAgICAgICBpbiBwcm9ncmVzcyksIERlY2VtYmVy IDIwMTUuCgogICBbSS1ELndhaGxzdHJvZW0tYWNlLW9hdXRoLWludHJvc3BlY3Rpb25dCiAgICAg ICAgICAgICAgV2FobHN0cm9lbSwgRS4sICJPQXV0aCAyLjAgSW50cm9zcGVjdGlvbiBvdmVyIHRo ZQogICAgICAgICAgICAgIENvbnN0cmFpbmVkIEFwcGxpY2F0aW9uIFByb3RvY29sIChDb0FQKSIs IGRyYWZ0LQogICAgICAgICAgICAgIHdhaGxzdHJvZW0tYWNlLW9hdXRoLWludHJvc3BlY3Rpb24t MDEgKHdvcmsgaW4gcHJvZ3Jlc3MpLAogICAgICAgICAgICAgIE1hcmNoIDIwMTUuCgoKCgoKCgpT ZWl0eiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgU2VwdGVtYmVyIDIxLCAyMDE2ICAgICAgICAg ICAgICBbUGFnZSAyMF0KDApJbnRlcm5ldC1EcmFmdCAgICAgICAgIE9BdXRoIDIuMCBJb1QgQXV0 aG9yaXphdGlvbiAgICAgICAgICAgIE1hcmNoIDIwMTYKCgogICBbUkZDMjExOV0gIEJyYWRuZXIs IFMuLCAiS2V5IHdvcmRzIGZvciB1c2UgaW4gUkZDcyB0byBJbmRpY2F0ZQogICAgICAgICAgICAg IFJlcXVpcmVtZW50IExldmVscyIsIEJDUCAxNCwgUkZDIDIxMTksCiAgICAgICAgICAgICAgRE9J IDEwLjE3NDg3L1JGQzIxMTksIE1hcmNoIDE5OTcsCiAgICAgICAgICAgICAgPGh0dHA6Ly93d3cu cmZjLWVkaXRvci5vcmcvaW5mby9yZmMyMTE5Pi4KCiAgIFtSRkM0Mjc5XSAgRXJvbmVuLCBQLiwg RWQuIGFuZCBILiBUc2Nob2ZlbmlnLCBFZC4sICJQcmUtU2hhcmVkIEtleQogICAgICAgICAgICAg IENpcGhlcnN1aXRlcyBmb3IgVHJhbnNwb3J0IExheWVyIFNlY3VyaXR5IChUTFMpIiwKICAgICAg ICAgICAgICBSRkMgNDI3OSwgRE9JIDEwLjE3NDg3L1JGQzQyNzksIERlY2VtYmVyIDIwMDUsCiAg ICAgICAgICAgICAgPGh0dHA6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM0Mjc5Pi4KCiAg IFtSRkM2MzQ3XSAgUmVzY29ybGEsIEUuIGFuZCBOLiBNb2RhZHVndSwgIkRhdGFncmFtIFRyYW5z cG9ydCBMYXllcgogICAgICAgICAgICAgIFNlY3VyaXR5IFZlcnNpb24gMS4yIiwgUkZDIDYzNDcs IERPSSAxMC4xNzQ4Ny9SRkM2MzQ3LAogICAgICAgICAgICAgIEphbnVhcnkgMjAxMiwgPGh0dHA6 Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM2MzQ3Pi4KCiAgIFtSRkM3MjUyXSAgU2hlbGJ5 LCBaLiwgSGFydGtlLCBLLiwgYW5kIEMuIEJvcm1hbm4sICJUaGUgQ29uc3RyYWluZWQKICAgICAg ICAgICAgICBBcHBsaWNhdGlvbiBQcm90b2NvbCAoQ29BUCkiLCBSRkMgNzI1MiwKICAgICAgICAg ICAgICBET0kgMTAuMTc0ODcvUkZDNzI1MiwgSnVuZSAyMDE0LAogICAgICAgICAgICAgIDxodHRw Oi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjNzI1Mj4uCgogICBbUkZDNzUxNl0gIEpvbmVz LCBNLiBhbmQgSi4gSGlsZGVicmFuZCwgIkpTT04gV2ViIEVuY3J5cHRpb24gKEpXRSkiLAogICAg ICAgICAgICAgIFJGQyA3NTE2LCBET0kgMTAuMTc0ODcvUkZDNzUxNiwgTWF5IDIwMTUsCiAgICAg ICAgICAgICAgPGh0dHA6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM3NTE2Pi4KCiAgIFtS RkM3NTE3XSAgSm9uZXMsIE0uLCAiSlNPTiBXZWIgS2V5IChKV0spIiwgUkZDIDc1MTcsCiAgICAg ICAgICAgICAgRE9JIDEwLjE3NDg3L1JGQzc1MTcsIE1heSAyMDE1LAogICAgICAgICAgICAgIDxo dHRwOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjNzUxNz4uCgo5LjIuICBJbmZvcm1hdGl2 ZSBSZWZlcmVuY2VzCgogICBbSS1ELmlldGYtYWNlLWFjdG9yc10KICAgICAgICAgICAgICBHZXJk ZXMsIFMuLCBTZWl0eiwgTC4sIFNlbGFuZGVyLCBHLiwgYW5kIEMuIEJvcm1hbm4sICJBbgogICAg ICAgICAgICAgIGFyY2hpdGVjdHVyZSBmb3IgYXV0aG9yaXphdGlvbiBpbiBjb25zdHJhaW5lZAog ICAgICAgICAgICAgIGVudmlyb25tZW50cyIsIGRyYWZ0LWlldGYtYWNlLWFjdG9ycy0wMyAod29y ayBpbgogICAgICAgICAgICAgIHByb2dyZXNzKSwgTWFyY2ggMjAxNi4KCiAgIFtJLUQuaWV0Zi1j b3JlLWJsb2NrXQogICAgICAgICAgICAgIEJvcm1hbm4sIEMuIGFuZCBaLiBTaGVsYnksICJCbG9j ay13aXNlIHRyYW5zZmVycyBpbiBDb0FQIiwKICAgICAgICAgICAgICBkcmFmdC1pZXRmLWNvcmUt YmxvY2stMTggKHdvcmsgaW4gcHJvZ3Jlc3MpLCBTZXB0ZW1iZXIKICAgICAgICAgICAgICAyMDE1 LgoKICAgW0ktRC5zZWl0ei1hY2UtY29yZS1hdXRoel0KICAgICAgICAgICAgICBTZWl0eiwgTC4s IFNlbGFuZGVyLCBHLiwgYW5kIE0uIFZ1Y2luaWMsICJBdXRob3JpemF0aW9uCiAgICAgICAgICAg ICAgZm9yIENvbnN0cmFpbmVkIFJFU1RmdWwgRW52aXJvbm1lbnRzIiwgZHJhZnQtc2VpdHotYWNl LQogICAgICAgICAgICAgIGNvcmUtYXV0aHotMDAgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBKdW5lIDIw MTUuCgoKCgoKCgpTZWl0eiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgU2VwdGVtYmVyIDIxLCAy MDE2ICAgICAgICAgICAgICBbUGFnZSAyMV0KDApJbnRlcm5ldC1EcmFmdCAgICAgICAgIE9BdXRo IDIuMCBJb1QgQXV0aG9yaXphdGlvbiAgICAgICAgICAgIE1hcmNoIDIwMTYKCgogICBbSS1ELnNv bWFyYWp1LWFjZS1tdWx0aWNhc3RdCiAgICAgICAgICAgICAgU29tYXJhanUsIEEuLCBLdW1hciwg Uy4sIFRzY2hvZmVuaWcsIEguLCBhbmQgVy4gV2VybmVyLAogICAgICAgICAgICAgICJTZWN1cml0 eSBmb3IgTG93LUxhdGVuY3kgR3JvdXAgQ29tbXVuaWNhdGlvbiIsIGRyYWZ0LQogICAgICAgICAg ICAgIHNvbWFyYWp1LWFjZS1tdWx0aWNhc3QtMDEgKHdvcmsgaW4gcHJvZ3Jlc3MpLCBKYW51YXJ5 CiAgICAgICAgICAgICAgMjAxNi4KCiAgIFtSRkM0OTQ5XSAgU2hpcmV5LCBSLiwgIkludGVybmV0 IFNlY3VyaXR5IEdsb3NzYXJ5LCBWZXJzaW9uIDIiLAogICAgICAgICAgICAgIEZZSSAzNiwgUkZD IDQ5NDksIERPSSAxMC4xNzQ4Ny9SRkM0OTQ5LCBBdWd1c3QgMjAwNywKICAgICAgICAgICAgICA8 aHR0cDovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzQ5NDk+LgoKICAgW1JGQzUyNDZdICBE aWVya3MsIFQuIGFuZCBFLiBSZXNjb3JsYSwgIlRoZSBUcmFuc3BvcnQgTGF5ZXIgU2VjdXJpdHkK ICAgICAgICAgICAgICAoVExTKSBQcm90b2NvbCBWZXJzaW9uIDEuMiIsIFJGQyA1MjQ2LAogICAg ICAgICAgICAgIERPSSAxMC4xNzQ4Ny9SRkM1MjQ2LCBBdWd1c3QgMjAwOCwKICAgICAgICAgICAg ICA8aHR0cDovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzUyNDY+LgoKICAgW1JGQzY2OTBd ICBTaGVsYnksIFouLCAiQ29uc3RyYWluZWQgUkVTVGZ1bCBFbnZpcm9ubWVudHMgKENvUkUpIExp bmsKICAgICAgICAgICAgICBGb3JtYXQiLCBSRkMgNjY5MCwgRE9JIDEwLjE3NDg3L1JGQzY2OTAs IEF1Z3VzdCAyMDEyLAogICAgICAgICAgICAgIDxodHRwOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2lu Zm8vcmZjNjY5MD4uCgogICBbUkZDNjc0OV0gIEhhcmR0LCBELiwgRWQuLCAiVGhlIE9BdXRoIDIu MCBBdXRob3JpemF0aW9uIEZyYW1ld29yayIsCiAgICAgICAgICAgICAgUkZDIDY3NDksIERPSSAx MC4xNzQ4Ny9SRkM2NzQ5LCBPY3RvYmVyIDIwMTIsCiAgICAgICAgICAgICAgPGh0dHA6Ly93d3cu cmZjLWVkaXRvci5vcmcvaW5mby9yZmM2NzQ5Pi4KCiAgIFtSRkM2NzUwXSAgSm9uZXMsIE0uIGFu ZCBELiBIYXJkdCwgIlRoZSBPQXV0aCAyLjAgQXV0aG9yaXphdGlvbgogICAgICAgICAgICAgIEZy YW1ld29yazogQmVhcmVyIFRva2VuIFVzYWdlIiwgUkZDIDY3NTAsCiAgICAgICAgICAgICAgRE9J IDEwLjE3NDg3L1JGQzY3NTAsIE9jdG9iZXIgMjAxMiwKICAgICAgICAgICAgICA8aHR0cDovL3d3 dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzY3NTA+LgoKICAgW1JGQzY4MTldICBMb2RkZXJzdGVk dCwgVC4sIEVkLiwgTWNHbG9pbiwgTS4sIGFuZCBQLiBIdW50LCAiT0F1dGggMi4wCiAgICAgICAg ICAgICAgVGhyZWF0IE1vZGVsIGFuZCBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyIsIFJGQyA2ODE5 LAogICAgICAgICAgICAgIERPSSAxMC4xNzQ4Ny9SRkM2ODE5LCBKYW51YXJ5IDIwMTMsCiAgICAg ICAgICAgICAgPGh0dHA6Ly93d3cucmZjLWVkaXRvci5vcmcvaW5mby9yZmM2ODE5Pi4KCiAgIFtS RkM3MDQ5XSAgQm9ybWFubiwgQy4gYW5kIFAuIEhvZmZtYW4sICJDb25jaXNlIEJpbmFyeSBPYmpl Y3QKICAgICAgICAgICAgICBSZXByZXNlbnRhdGlvbiAoQ0JPUikiLCBSRkMgNzA0OSwgRE9JIDEw LjE3NDg3L1JGQzcwNDksCiAgICAgICAgICAgICAgT2N0b2JlciAyMDEzLCA8aHR0cDovL3d3dy5y ZmMtZWRpdG9yLm9yZy9pbmZvL3JmYzcwNDk+LgoKICAgW1JGQzcxNTldICBCcmF5LCBULiwgRWQu LCAiVGhlIEphdmFTY3JpcHQgT2JqZWN0IE5vdGF0aW9uIChKU09OKSBEYXRhCiAgICAgICAgICAg ICAgSW50ZXJjaGFuZ2UgRm9ybWF0IiwgUkZDIDcxNTksIERPSSAxMC4xNzQ4Ny9SRkM3MTU5LCBN YXJjaAogICAgICAgICAgICAgIDIwMTQsIDxodHRwOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8v cmZjNzE1OT4uCgogICBbUkZDNzIyOF0gIEJvcm1hbm4sIEMuLCBFcnN1ZSwgTS4sIGFuZCBBLiBL ZXJhbmVuLCAiVGVybWlub2xvZ3kgZm9yCiAgICAgICAgICAgICAgQ29uc3RyYWluZWQtTm9kZSBO ZXR3b3JrcyIsIFJGQyA3MjI4LAogICAgICAgICAgICAgIERPSSAxMC4xNzQ4Ny9SRkM3MjI4LCBN YXkgMjAxNCwKICAgICAgICAgICAgICA8aHR0cDovL3d3dy5yZmMtZWRpdG9yLm9yZy9pbmZvL3Jm YzcyMjg+LgoKCgoKCgpTZWl0eiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgU2VwdGVtYmVyIDIx LCAyMDE2ICAgICAgICAgICAgICBbUGFnZSAyMl0KDApJbnRlcm5ldC1EcmFmdCAgICAgICAgIE9B dXRoIDIuMCBJb1QgQXV0aG9yaXphdGlvbiAgICAgICAgICAgIE1hcmNoIDIwMTYKCgogICBbUkZD NzIzMV0gIEZpZWxkaW5nLCBSLiwgRWQuIGFuZCBKLiBSZXNjaGtlLCBFZC4sICJIeXBlcnRleHQg VHJhbnNmZXIKICAgICAgICAgICAgICBQcm90b2NvbCAoSFRUUC8xLjEpOiBTZW1hbnRpY3MgYW5k IENvbnRlbnQiLCBSRkMgNzIzMSwKICAgICAgICAgICAgICBET0kgMTAuMTc0ODcvUkZDNzIzMSwg SnVuZSAyMDE0LAogICAgICAgICAgICAgIDxodHRwOi8vd3d3LnJmYy1lZGl0b3Iub3JnL2luZm8v cmZjNzIzMT4uCgogICBbUkZDNzUxOV0gIEpvbmVzLCBNLiwgQnJhZGxleSwgSi4sIGFuZCBOLiBT YWtpbXVyYSwgIkpTT04gV2ViIFRva2VuCiAgICAgICAgICAgICAgKEpXVCkiLCBSRkMgNzUxOSwg RE9JIDEwLjE3NDg3L1JGQzc1MTksIE1heSAyMDE1LAogICAgICAgICAgICAgIDxodHRwOi8vd3d3 LnJmYy1lZGl0b3Iub3JnL2luZm8vcmZjNzUxOT4uCgpBcHBlbmRpeCBBLiAgRGVzaWduIEp1c3Rp ZmljYXRpb24KCiAgIFRoaXMgc2VjdGlvbiBwcm92aWRlcyBmdXJ0aGVyIGluc2lnaHQgaW50byB0 aGUgZGVzaWduIGRlY2lzaW9ucyBvZgogICB0aGUgc29sdXRpb24gZG9jdW1lbnRlZCBpbiB0aGlz IGRvY3VtZW50LiAgU2VjdGlvbiAzIGxpc3RzIHNldmVyYWwKICAgYnVpbGRpbmcgYmxvY2tzIGFu ZCBicmllZmx5IHN1bW1hcml6ZXMgdGhlaXIgaW1wb3J0YW5jZS4gIFRoZQogICBqdXN0aWZpY2F0 aW9uIGZvciBvZmZlcmluZyBzb21lIG9mIHRob3NlIGJ1aWxkaW5nIGJsb2NrcywgYXMgb3Bwb3Nl ZAogICB0byB1c2luZyBPQXV0aCAyLjAgYXMgaXMsIGlzIGdpdmVuIGJlbG93LgoKICAgQ29tbW9u IElvVCBjb25zdHJhaW50cyBhcmU6CgogICBMb3cgUG93ZXIgUmFkaW86CgogICAgICBNYW55IElv VCBkZXZpY2VzIGFyZSBlcXVpcHBlZCB3aXRoIGEgc21hbGwgYmF0dGVyeSB3aGljaCBuZWVkcyB0 bwogICAgICBsYXN0IGZvciBhIGxvbmcgdGltZS4gIEZvciBtYW55IGNvbnN0cmFpbmVkIHdpcmVs ZXNzIGRldmljZXMgdGhlCiAgICAgIGhpZ2hlc3QgZW5lcmd5IGNvc3QgaXMgYXNzb2NpYXRlZCB0 byB0cmFuc21pdHRpbmcgb3IgcmVjZWl2aW5nCiAgICAgIG1lc3NhZ2VzLiAgSXQgaXMgdGhlcmVm b3JlIGltcG9ydGFudCB0byBrZWVwIHRoZSB0b3RhbAogICAgICBjb21tdW5pY2F0aW9uIG92ZXJo ZWFkIGxvdywgaW5jbHVkaW5nIG1pbmltaXppbmcgdGhlIG51bWJlciBhbmQKICAgICAgc2l6ZSBv ZiBtZXNzYWdlcyBzZW50IGFuZCByZWNlaXZlZCwgd2hpY2ggaGFzIGFuIGltcGFjdCBvZiBjaG9p Y2UKICAgICAgb24gdGhlIG1lc3NhZ2UgZm9ybWF0IGFuZCBwcm90b2NvbC4gIEJ5IHVzaW5nIENv QVAgb3ZlciBVRFAsIGFuZAogICAgICBDQk9SIGVuY29kZWQgbWVzc2FnZXMgc29tZSBvZiB0aGVz ZSBhc3BlY3RzIGFyZSBhZGRyZXNzZWQuCiAgICAgIFNlY3VyaXR5IHByb3RvY29scyBjb250cmli dXRlIHRvIHRoZSBjb21tdW5pY2F0aW9uIG92ZXJoZWFkIGFuZAogICAgICBjYW4gaW4gc29tZSBj YXNlcyBiZSBvcHRpbWl6ZWQuICBGb3IgZXhhbXBsZSBhdXRoZW50aWNhdGlvbiBhbmQKICAgICAg a2V5IGVzdGFibGlzaG1lbnQgbWF5IGluIGNlcnRhaW4gY2FzZXMgd2hlcmUgc2VjdXJpdHkgcmVx dWlyZW1lbnRzCiAgICAgIHNvIGFsbG93cyBiZSByZXBsYWNlZCBieSBwcm92aXNpb25pbmcgb2Yg c2VjdXJpdHkgY29udGV4dCBieSBhCiAgICAgIHRydXN0ZWQgdGhpcmQgcGFydHksIHVzaW5nIHRy YW5zcG9ydCBvciBhcHBsaWNhdGlvbiBsYXllcgogICAgICBzZWN1cml0eS4KCiAgIExvdyBDUFUg U3BlZWQ6CgogICAgICBTb21lIElvVCBkZXZpY2VzIGFyZSBlcXVpcHBlZCB3aXRoIHByb2Nlc3Nv cnMgdGhhdCBhcmUKICAgICAgc2lnbmlmaWNhbnRseSBzbG93ZXIgdGhhbiB0aG9zZSBmb3VuZCBp biBtb3N0IGN1cnJlbnQgZGV2aWNlcyBvbgogICAgICB0aGUgSW50ZXJuZXQuICBUaGlzIHR5cGlj YWxseSBoYXMgaW1wbGljYXRpb25zIG9uIHdoYXQgdGltZWx5CiAgICAgIGNyeXB0b2dyYXBoaWMg b3BlcmF0aW9ucyBhIGRldmljZSBpcyBjYXBhYmxlIHRvIHBlcmZvcm0sIHdoaWNoIGluCiAgICAg IHR1cm4gaW1wYWN0cyBlLmcuIHByb3RvY29sIGxhdGVuY3kuICBTeW1tZXRyaWMga2V5IGNyeXB0 b2dyYXBoeQogICAgICBtYXkgYmUgdXNlZCBpbnN0ZWFkIG9mIHRoZSBjb21wdXRhdGlvbmFsbHkg bW9yZSBleHBlbnNpdmUgcHVibGljCiAgICAgIGtleSBjcnlwdG9ncmFwaHkgd2hlcmUgdGhlIHNl Y3VyaXR5IHJlcXVpcmVtZW50cyBzbyBhbGxvd3MsIGJ1dAogICAgICB0aGlzIG1heSBhbHNvIHJl cXVpcmUgc3VwcG9ydCBmb3IgdHJ1c3RlZCB0aGlyZCBwYXJ0eSBhc3Npc3RlZAogICAgICBzZWNy ZXQga2V5IGVzdGFibGlzaG1lbnQgdXNpbmcgdHJhbnNwb3J0IG9yIGFwcGxpY2F0aW9uIGxheWVy CiAgICAgIHNlY3VyaXR5LgoKCgpTZWl0eiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgU2VwdGVt YmVyIDIxLCAyMDE2ICAgICAgICAgICAgICBbUGFnZSAyM10KDApJbnRlcm5ldC1EcmFmdCAgICAg ICAgIE9BdXRoIDIuMCBJb1QgQXV0aG9yaXphdGlvbiAgICAgICAgICAgIE1hcmNoIDIwMTYKCgog ICBTbWFsbCBBbW91bnQgb2YgTWVtb3J5OgoKICAgICAgTWljcm9jb250cm9sbGVycyBlbWJlZGRl ZCBpbiBJb1QgZGV2aWNlcyBhcmUgb2Z0ZW4gZXF1aXBwZWQgd2l0aAogICAgICBzbWFsbCBhbW91 bnQgb2YgUkFNIGFuZCBmbGFzaCBtZW1vcnksIHdoaWNoIHBsYWNlcyBsaW1pdGF0aW9ucwogICAg ICB3aGF0IGtpbmQgb2YgcHJvY2Vzc2luZyBjYW4gYmUgcGVyZm9ybWVkIGFuZCBob3cgbXVjaCBj b2RlIGNhbiBiZQogICAgICBwdXQgb24gdGhvc2UgZGV2aWNlcy4gIFRvIHJlZHVjZSBjb2RlIHNp emUgZmV3ZXIgYW5kIHNtYWxsZXIKICAgICAgcHJvdG9jb2wgaW1wbGVtZW50YXRpb25zIGNhbiBi ZSBwdXQgb24gdGhlIGZpcm13YXJlIG9mIHN1Y2ggYQogICAgICBkZXZpY2UuICBJbiB0aGlzIGNh c2UsIENvQVAgbWF5IGJlIHVzZWQgaW5zdGVhZCBvZiBIVFRQLCBzeW1tZXRyaWMKICAgICAga2V5 IGNyeXB0b2dyYXBoeSBpbnN0ZWFkIG9mIHB1YmxpYyBrZXkgY3J5cHRvZ3JhcGh5LCBhbmQgQ0JP UgogICAgICBpbnN0ZWFkIG9mIEpTT04uICBBdXRoZW50aWNhdGlvbiBhbmQga2V5IGVzdGFibGlz aG1lbnQgcHJvdG9jb2wsCiAgICAgIGUuZy4gdGhlIERUTFMgaGFuZHNoYWtlLCBpbiBjb21wYXJp c29uIHdpdGggYXNzaXN0ZWQga2V5CiAgICAgIGVzdGFibGlzaG1lbnQgYWxzbyBoYXMgYW4gaW1w YWN0IG9uIG1lbW9yeSBhbmQgY29kZS4KCiAgIFVzZXIgSW50ZXJmYWNlIExpbWl0YXRpb25zOgoK ICAgICAgUHJvdGVjdGluZyBhY2Nlc3MgdG8gcmVzb3VyY2VzIGlzIGJvdGggYW4gaW1wb3J0YW50 IHNlY3VyaXR5IGFzCiAgICAgIHdlbGwgYXMgcHJpdmFjeSBmZWF0dXJlLiAgRW5kIHVzZXJzIGFu ZCBlbnRlcnByaXNlIGN1c3RvbWVycyBkbwogICAgICBub3Qgd2FudCB0byBnaXZlIGFjY2VzcyB0 byB0aGUgZGF0YSBjb2xsZWN0ZWQgYnkgdGhlaXIgSW9UIGRldmljZQogICAgICBvciB0byBmdW5j dGlvbnMgaXQgbWF5IG9mZmVyIHRvIHRoaXJkIHBhcnRpZXMuICBTaW5jZSB0aGUKICAgICAgY2xh c3NpY2FsIGFwcHJvYWNoIG9mIHJlcXVlc3RpbmcgcGVybWlzc2lvbnMgZnJvbSBlbmQgdXNlcnMg dmlhIGEKICAgICAgcmljaCB1c2VyIGludGVyZmFjZSBkb2VzIG5vdCB3b3JrIGluIG1hbnkgSW9U IGRlcGxveW1lbnQgc2NlbmFyaW9zCiAgICAgIHRoZXNlIGZ1bmN0aW9ucyBuZWVkIHRvIGJlIGRl bGVnYXRlZCB0byB1c2VyIGNvbnRyb2xsZWQgZGV2aWNlcwogICAgICB0aGF0IGFyZSBiZXR0ZXIg c3VpdGFibGUgZm9yIHN1Y2ggdGFza3MsIHN1Y2ggYXMgc21hcnQgcGhvbmVzIGFuZAogICAgICB0 YWJsZXRzLgoKICAgQ29tbXVuaWNhdGlvbiBDb25zdHJhaW50czoKCiAgICAgIEluIGNlcnRhaW4g Y29uc3RyYWluZWQgc2V0dGluZ3MgYW4gSW9UIGRldmljZSBtYXkgbm90IGJlIGFibGUgdG8KICAg ICAgY29tbXVuaWNhdGUgd2l0aCBhIGdpdmVuIGRldmljZSBhdCBhbGwgdGltZXMuICBEZXZpY2Vz IG1heSBiZQogICAgICBzbGVlcGluZywgb3IganVzdCBkaXNjb25uZWN0ZWQgZnJvbSB0aGUgSW50 ZXJuZXQgYmVjYXVzZSBvZgogICAgICBnZW5lcmFsIGxhY2sgb2YgY29ubmVjdGl2aXR5IGluIHRo ZSBhcmVhLCBmb3IgY29zdCByZWFzb25zLCBvciBmb3IKICAgICAgc2VjdXJpdHkgcmVhc29ucywg ZS5nLiB0byBhdm9pZCBhbiBlbnRyeSBwb2ludCBmb3IgRGVuaWFsLW9mLQogICAgICBTZXJ2aWNl IGF0dGFja3MuCgogICAgICBUaGUgY29tbXVuaWNhdGlvbiBpbnRlcmFjdGlvbnMgdGhpcyBmcmFt ZXdvcmsgYnVpbGRzIHVwb24gKGFzCiAgICAgIHNob3duIGdyYXBoaWNhbGx5IGluIEZpZ3VyZSAx KSBtYXkgYmUgYWNjb21wbGlzaGVkIHVzaW5nIGEgdmFyaWV0eQogICAgICBvZiBkaWZmZXJlbnQg cHJvdG9jb2xzLCBhbmQgbm90IGFsbCBwYXJ0cyBvZiB0aGUgbWVzc2FnZSBmbG93IGFyZQogICAg ICB1c2VkIGluIGFsbCBhcHBsaWNhdGlvbnMgZHVlIHRvIHRoZSBjb21tdW5pY2F0aW9uIGNvbnN0 cmFpbnRzLgogICAgICBXaGlsZSB3ZSBlbnZpc2lvbiBkZXBsb3ltZW50cyB0byBtYWtlIHVzZSBv ZiBDb0FQIHdlIGV4cGxpY2l0bHkKICAgICAgd2FudCB0byBzdXBwb3J0IEhUVFAsIEhUVFAvMiBv ciBzcGVjaWZpYyBwcm90b2NvbHMsIHN1Y2ggYXMKICAgICAgQmx1ZXRvb3RoIFNtYXJ0IGNvbW11 bmljYXRpb24sIHdoaWNoIGRvZXMgbm90IG5lY2Vzc2FyaWx5IHVzZSBJUC4KICAgICAgVGhlIGxh dHRlciByYWlzZXMgdGhlIG5lZWQgZm9yIGFwcGxpY2F0aW9uIGxheWVyIHNlY3VyaXR5IG92ZXIg dGhlCiAgICAgIHZhcmlvdXMgaW50ZXJmYWNlcy4KCgoKCgoKCgpTZWl0eiwgZXQgYWwuICAgICAg ICAgIEV4cGlyZXMgU2VwdGVtYmVyIDIxLCAyMDE2ICAgICAgICAgICAgICBbUGFnZSAyNF0KDApJ bnRlcm5ldC1EcmFmdCAgICAgICAgIE9BdXRoIDIuMCBJb1QgQXV0aG9yaXphdGlvbiAgICAgICAg ICAgIE1hcmNoIDIwMTYKCgpBcHBlbmRpeCBCLiAgUm9sZXMgYW5kIFJlc3BvbnNpYmlsaXRlcyAt LSBhIENoZWNrbGlzdAoKICAgUmVzb3VyY2UgT3duZXIKCiAgICAgICogIE1ha2Ugc3VyZSB0aGF0 IHRoZSBSUyBpcyByZWdpc3RlcmVkIGF0IHRoZSBBUy4KCiAgICAgICogIE1ha2Ugc3VyZSB0aGF0 IGNsaWVudHMgY2FuIGRpc2NvdmVyIHRoZSBBUyB3aGljaCBpcyBpbiBjaGFyZ2UKICAgICAgICAg b2YgdGhlIFJTLgoKICAgICAgKiAgTWFrZSBzdXJlIHRoYXQgdGhlIEFTIGhhcyB0aGUgbmVjZXNz YXJ5LCB1cC10by1kYXRlLCBhY2Nlc3MKICAgICAgICAgY29udHJvbCBwb2xpY2llcyBmb3IgdGhl IFJTLgoKICAgUmVxdWVzdGluZyBQYXJ0eQoKICAgICAgKiAgTWFrZSBzdXJlIHRoYXQgdGhlIGNs aWVudCBpcyBwcm92aXNpb25lZCB0aGUgbmVjZXNzYXJ5CiAgICAgICAgIGNyZWRlbnRpYWxzIHRv IGF1dGhlbnRpY2F0ZSB0byB0aGUgQVMuCgogICAgICAqICBNYWtlIHN1cmUgdGhhdCB0aGUgY2xp ZW50IGlzIGNvbmZpZ3VyZWQgdG8gZm9sbG93IHRoZSBzZWN1cml0eQogICAgICAgICByZXF1aXJl bWVudHMgb2YgdGhlIFJlcXVlc3RpbmcgUGFydHksIHdoZW4gaXNzdWluZyByZXF1ZXN0cwogICAg ICAgICAoZS5nLiBtaW5pbXVtIGNvbW11bmljYXRpb24gc2VjdXJpdHkgcmVxdWlyZW1lbnRzLCB0 cnVzdAogICAgICAgICBhbmNob3JzKS4KCiAgICAgICogIFJlZ2lzdGVyIHRoZSBjbGllbnQgYXQg dGhlIEFTLgoKICAgQXV0aG9yaXphdGlvbiBTZXJ2ZXIKCiAgICAgICogIFJlZ2lzdGVyIFJTIGFu ZCBtYW5hZ2UgY29ycmVzcG9uZGluZyBzZWN1cml0eSBjb250ZXh0cy4KCiAgICAgICogIFJlZ2lz dGVyIGNsaWVudHMgYW5kIGluY2x1ZGluZyBhdXRoZW50aWNhdGlvbiBjcmVkZW50aWFscy4KCiAg ICAgICogIEFsbG93IFJlc291cmNlIE9ud2VycyB0byBjb25maWd1cmUgYW5kIHVwZGF0ZSBhY2Nl c3MgY29udHJvbAogICAgICAgICBwb2xpY2llcyByZWxhdGVkIHRvIHRoZWlyIHJlZ2lzdGVyZWQg UlMnCgogICAgICAqICBFeHBvc2UgYSBzZXJ2aWNlIHRoYXQgYWxsb3dzIGNsaWVudHMgdG8gcmVx dWVzdCB0b2tlbnMuCgogICAgICAqICBBdXRoZW50aWNhdGUgY2xpZW50cyB0aGF0IHdpc2hlcyB0 byByZXF1ZXN0IGEgdG9rZW4uCgogICAgICAqICBQcm9jZXNzIGEgdG9rZW4gcmVxdWVzdHMgYWdh aW5zdCB0aGUgYXV0aG9yaXphdGlvbiBwb2xpY2llcwogICAgICAgICBjb25maWd1cmVkIGZvciB0 aGUgUlMuCgogICAgICAqICBFeHBvc2UgYSBzZXJ2aWNlIHRoYXQgYWxsb3dzIFJTJ3MgdG8gc3Vi bWl0IHRva2VuIGludHJvc3BlY3Rpb24KICAgICAgICAgcmVxdWVzdHMuCgogICAgICAqICBBdXRo ZW50aWNhdGUgUlMncyB0aGF0IHdpc2hlcyB0byBnZXQgYW4gaW50cm9zcGVjdGlvbiByZXNwb25z ZS4KCiAgICAgICogIFByb2Nlc3MgdG9rZW4gaW50cm9zcGVjdGlvbiByZXF1ZXN0cy4KCiAgICAg ICogIE9wdGlvbmFsbHk6IEhhbmRsZSB0b2tlbiByZXZvY2F0aW9uLgoKCgpTZWl0eiwgZXQgYWwu ICAgICAgICAgIEV4cGlyZXMgU2VwdGVtYmVyIDIxLCAyMDE2ICAgICAgICAgICAgICBbUGFnZSAy NV0KDApJbnRlcm5ldC1EcmFmdCAgICAgICAgIE9BdXRoIDIuMCBJb1QgQXV0aG9yaXphdGlvbiAg ICAgICAgICAgIE1hcmNoIDIwMTYKCgogICBDbGllbnQKCiAgICAgICogIERpc2NvdmVyIHRoZSBB UyBpbiBjaGFyZ2Ugb2YgdGhlIFJTIHRoYXQgaXMgdG8gYmUgdGFyZ2V0ZWQgd2l0aAogICAgICAg ICBhIHJlcXVlc3QuCgogICAgICAqICBTdWJtaXQgdGhlIHRva2VuIHJlcXVlc3QgKEEpLgoKICAg ICAgICAgKyAgQXV0aGVudGljYXRlIHRvd2FyZHMgdGhlIEFTLgoKICAgICAgICAgKyAgU3BlY2lm eSB3aGljaCBSUywgd2hpY2ggcmVzb3VyY2UocyksIGFuZCB3aGljaCBhY3Rpb24ocykgdGhlCiAg ICAgICAgICAgIHJlcXVlc3Qocykgd2lsbCB0YXJnZXQuCgogICAgICAgICArICBTcGVjaWZ5IHBy ZWZlcmVuY2VzIGZvciBjb21tdW5pY2F0aW9uIHNlY3VyaXR5CgogICAgICAgICArICBJZiByYXcg cHVibGljIGtleSAocnBrKSBvciBjZXJ0aWZpY2F0ZSBpcyB1c2VkLCBtYWtlIHN1cmUKICAgICAg ICAgICAgdGhlIEFTIGhhcyB0aGUgcmlnaHQgcnBrIG9yIGNlcnRpZmljYXRlIGZvciB0aGlzIGNs aWVudC4KCiAgICAgICogIFByb2Nlc3MgdGhlIGFjY2VzcyB0b2tlbiBhbmQgY2xpZW50IGluZm9y bWF0aW9uIChCKQoKICAgICAgICAgKyAgQ2hlY2sgdGhhdCB0aGUgdG9rZW4gaGFzIHRoZSByaWdo dCBmb3JtYXQgKGUuZy4gIENXVCkuCgogICAgICAgICArICBDaGVjayB0aGF0IHRoZSBjbGllbnQg aW5mb3JtYXRpb24gcHJvdmlkZXMgdGhlIG5lY2Vzc2FyeQogICAgICAgICAgICBzZWN1cml0eSBw YXJhbWV0ZXJzIChlLmcuICBQb1Aga2V5LCBpbmZvcm1hdGlvbiBvbgogICAgICAgICAgICBjb21t dW5pY2F0aW9uIHNlY3VyaXR5IHByb3RvY29scyBzdXBwb3J0ZWQgYnkgdGhlIFJTKS4KCiAgICAg ICogIFNlbmQgdGhlIHRva2VuIGFuZCByZXF1ZXN0IHRvIHRoZSBSUyAoQykKCiAgICAgICAgICsg IEF1dGhlbnRpY2F0ZSB0b3dhcmRzIHRoZSBSUyAodGhpcyBjb3VsZCBjb2luY2lkZSB3aXRoIHRo ZQogICAgICAgICAgICBwcm9vZiBvZiBwb3NzZXNzaW9uIHByb2Nlc3MpLgoKICAgICAgICAgKyAg VHJhbnNtaXQgdGhlIHRva2VuIGFzIHNwZWNpZmllZCBieSB0aGUgQVMgKGRlZmF1bHQgaXMgdG8g YW4KICAgICAgICAgICAgYXV0aG9yaXphdGlvbiBpbmZvcm1hdGlvbiByZXNvdXJjZSwgYWx0ZXJu YXRpdmUgb3B0aW9ucyBhcmUKICAgICAgICAgICAgYXMgYSBDb0FQIG9wdGlvbiBvciBpbiB0aGUg RFRMUyBoYW5kc2hha2UpLgoKICAgICAgICAgKyAgUGVyZm9ybSB0aGUgcHJvb2Ytb2YtcG9zc2Vz c2lvbiBwcm9jZWR1cmUgYXMgc3BlY2lmaWVkIGZvcgogICAgICAgICAgICB0aGUgdHlwZSBvZiB1 c2VkIHRva2VuICh0aGlzIG1heSBhbHJlYWR5IGhhdmUgYmVlbiB0YWtlbgogICAgICAgICAgICBj YXJlIG9mIHRocm91Z2ggdGhlIGF1dGhlbnRpY2F0aW9uIHByb2NlZHVyZSkuCgogICAgICAqICBQ cm9jZXNzIHRoZSBSUyByZXNwb25zZSAoRikgcmVxdWlyZW1lbnRzIG9mIHRoZSBSZXF1ZXN0aW5n CiAgICAgICAgIFBhcnR5LCB3aGVuIGlzc3VpbmcgcmVxdWVzdHMgKGUuZy4gbWluaW11bSBjb21t dW5pY2F0aW9uCiAgICAgICAgIHNlY3VyaXR5IHJlcXVpcmVtZW50cywgdHJ1c3QgYW5jaG9ycyku CgogICAgICAqICBSZWdpc3RlciB0aGUgY2xpZW50IGF0IHRoZSBBUy4KCiAgIFJlc291cmNlIFNl cnZlcgoKICAgICAgKiAgRXhwb3NlIGEgd2F5IHRvIHN1Ym1pdCBhY2Nlc3MgdG9rZW5zLgoKCgoK U2VpdHosIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIFNlcHRlbWJlciAyMSwgMjAxNiAgICAgICAg ICAgICAgW1BhZ2UgMjZdCgwKSW50ZXJuZXQtRHJhZnQgICAgICAgICBPQXV0aCAyLjAgSW9UIEF1 dGhvcml6YXRpb24gICAgICAgICAgICBNYXJjaCAyMDE2CgoKICAgICAgKiAgUHJvY2VzcyBhbiBh Y2Nlc3MgdG9rZW4uCgogICAgICAgICArICBWZXJpZnkgdGhlIHRva2VuIGlzIGZyb20gdGhlIHJp Z2h0IEFTLgoKICAgICAgICAgKyAgVmVyaWZ5IHRoYXQgdGhlIHRva2VuIGFwcGxpZXMgdG8gdGhp cyBSUy4KCiAgICAgICAgICsgIENoZWNrIHRoYXQgdGhlIHRva2VuIGhhcyBub3QgZXhwaXJlZCAo aWYgdGhlIHRva2VuIHByb3ZpZGVzCiAgICAgICAgICAgIGV4cGlyYXRpb24gaW5mb3JtYXRpb24p LgoKICAgICAgICAgKyAgQ2hlY2sgdGhlIHRva2VuJ3MgaW50ZWdyaXR5LgoKICAgICAgICAgKyAg U3RvcmUgdGhlIHRva2VuIHNvIHRoYXQgaXQgY2FuIGJlIHJldHJpZXZlZCBpbiB0aGUgY29udGV4 dAogICAgICAgICAgICBvZiBhIG1hdGNoaW5nIHJlcXVlc3QuCgogICAgICAqICBQcm9jZXNzIGEg cmVxdWVzdC4KCiAgICAgICAgICsgIFNldCB1cCBjb21tdW5pY2F0aW9uIHNlY3VyaXR5IHdpdGgg dGhlIGNsaWVudC4KCiAgICAgICAgICsgIEF1dGhlbnRpY2F0ZSB0aGUgY2xpZW50LgoKICAgICAg ICAgKyAgTWF0Y2ggdGhlIGNsaWVudCBhZ2FpbnN0IGV4aXN0aW5nIHRva2Vucy4KCiAgICAgICAg ICsgIENoZWNrIHRoYXQgdG9rZW5zIGJlbG9uZ2luZyB0byB0aGUgY2xpZW50IGFjdHVhbGx5IGF1 dGhvcml6ZQogICAgICAgICAgICB0aGUgcmVxdWVzdGVkIGFjdGlvbi4KCiAgICAgICAgICsgIE9w dGlvbmFsbHk6IENoZWNrIHRoYXQgdGhlIG1hdGNoaW5nIHRva2VucyBhcmUgc3RpbGwgdmFsaWQK ICAgICAgICAgICAgKGlmIHRoaXMgaXMgcG9zc2libGUuCgogICAgICAqICBTZW5kIGEgcmVzcG9u c2UgZm9sbG93aW5nIHRoZSBhZ3JlZWQgdXBvbiBjb21tdW5pY2F0aW9uCiAgICAgICAgIHNlY3Vy aXR5LgoKQXBwZW5kaXggQy4gIENvQVAgYW5kIENCT1IgcHJvZmlsZXMgZm9yIE9BdXRoIDIuMAoK ICAgTWFueSBJb1QgZGV2aWNlcyBjYW4gc3VwcG9ydCBPQXV0aCAyLjAgd2l0aG91dCBhbnkgYWRk aXRpb25hbAogICBleHRlbnNpb25zLCBidXQgZm9yIGNlcnRhaW4gY29uc3RyYWluZWQgc2V0dGlu Z3MgYWRkaXRpb25hbCBwcm9maWxpbmcKICAgaXMgbmVlZGVkLiAgSW4gdGhpcyBhcHBlbmRpeCB3 ZSBkZWZpbmUgQ29BUCByZXNvdXJjZXMgZm9yIHRoZSBIVFRQCiAgIGJhc2VkIHRva2VuIGFuZCBp bnRyb3NwZWN0aW9uIGVuZHBvaW50cyB1c2VkIGluIHZhbmlsbGEgT0F1dGggMi4wLgogICBXZSBh bHNvIGRlZmluZSBhIENCT1IgYWx0ZXJuYXRpdmUgdG8gdGhlIEpTT04gYW5kIGZvcm0gYmFzZWQg UE9TVAogICBzdHJ1Y3R1cmVzIHVzZWQgaW4gSFRUUC4KCkMuMS4gIFByb2ZpbGUgZm9yIFRva2Vu IHJlc291cmNlCgogICBUaGUgdG9rZW4gcmVzb3VyY2UgaXMgdXNlZCBieSB0aGUgY2xpZW50IHRv IG9idGFpbiBhbiBhY2Nlc3MgdG9rZW4gYnkKICAgcHJlc2VudGluZyBpdHMgYXV0aG9yaXphdGlv biBncmFudCBvciBjbGllbnQgY3JlZGVudGlhbHMgdG8gdGhlCiAgIC90b2tlbiByZXNvdXJjZSB0 aGUgQVMuCgoKCgoKClNlaXR6LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBTZXB0ZW1iZXIgMjEs IDIwMTYgICAgICAgICAgICAgIFtQYWdlIDI3XQoMCkludGVybmV0LURyYWZ0ICAgICAgICAgT0F1 dGggMi4wIElvVCBBdXRob3JpemF0aW9uICAgICAgICAgICAgTWFyY2ggMjAxNgoKCkMuMS4xLiAg VG9rZW4gUmVxdWVzdAoKICAgVGhlIGNsaWVudCBtYWtlcyBhIHJlcXVlc3QgdG8gdGhlIHRva2Vu IHJlc291cmNlIGJ5IHNlbmRpbmcgYSBDQk9SCiAgIHN0cnVjdHVyZSB3aXRoIHRoZSBmb2xsb3dp bmcgYXR0cmlidXRlcy4KCiAgIGdyYW50X3R5cGU6CgogICAgICBSRVFVSVJFRC4gIFRoZSBncmFu dCB0eXBlLCAiY29kZSIsICJjbGllbnRfY3JlZGVudGlhbHMiLAogICAgICAicGFzc3dvcmQiIG9y IG90aGVycy4KCiAgIGNsaWVudF9pZDoKCiAgICAgIE9QVElPTkFMLiAgVGhlIGNsaWVudCBpZGVu dGlmaWVyIGlzc3VlZCB0byB0aGUgaG9sZGVyIG9mIHRoZSB0b2tlbgogICAgICAoY2xpZW50IG9y IFJTKSBkdXJpbmcgdGhlIHJlZ2lzdHJhdGlvbiBwcm9jZXNzLgoKICAgY2xpZW50X3NlY3JldDoK CiAgICAgIE9QVElPTkFMLiAgVGhlIGNsaWVudCBzZWNyZXQuCgogICBzY29wZToKCiAgICAgIE9Q VElPTkFMLiAgVGhlIHNjb3BlIG9mIHRoZSBhY2Nlc3MgcmVxdWVzdCBhcyBkZXNjcmliZWQgYnkK ICAgICAgU2VjdGlvbiAzLjEuCgogICBhdWQ6CgogICAgICBPUFRJT05BTC4gIFNlcnZpY2Utc3Bl Y2lmaWMgc3RyaW5nIGlkZW50aWZpZXIgb3IgbGlzdCBvZiBzdHJpbmcKICAgICAgaWRlbnRpZmll cnMgcmVwcmVzZW50aW5nIHRoZSBpbnRlbmRlZCBhdWRpZW5jZSBmb3IgdGhpcyB0b2tlbiwgYXMK ICAgICAgZGVmaW5lZCBpbiBbSS1ELndhaGxzdHJvZW0tYWNlLWNib3Itd2ViLXRva2VuXS4KCiAg IGFsZzoKCiAgICAgIE9QVElPTkFMLiAgVGhlIHZhbHVlIGluIHRoZSAnYWxnJyBwYXJhbWV0ZXIg dG9nZXRoZXIgd2l0aCB2YWx1ZQogICAgICBmcm9tIHRoZSAndG9rZW5fdHlwZScgcGFyYW1ldGVy IGFsbG93IHRoZSBjbGllbnQgdG8gaW5kaWNhdGUgdGhlCiAgICAgIHN1cHBvcnRlZCBhbGdvcml0 aG1zIGZvciBhIGdpdmVuIHRva2VuIHR5cGUuCgogICBrZXk6CgogICAgICBPUFRJT05BTC4gIFRo aXMgZmllbGQgY29udGFpbnMgaW5mb3JtYXRpb24gYWJvdXQgdGhlIHB1YmxpYyBrZXkKICAgICAg dGhlIGNsaWVudCB3b3VsZCBsaWtlIHRvIGJpbmQgdG8gdGhlIGFjY2VzcyB0b2tlbiBpbiB0aGUg Q09TRSBLZXkKICAgICAgU3RydWN0dXJlIGZvcm1hdC4KCiAgIFRoZSBwYXJhbWV0ZXJzIGRlZmlu ZWQgYWJvdmUgdXNlIHRoZSBmb2xsb3dpbmcgQ0JPUiBtYWpvciB0eXBlcy4KCgoKCgoKCgpTZWl0 eiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgU2VwdGVtYmVyIDIxLCAyMDE2ICAgICAgICAgICAg ICBbUGFnZSAyOF0KDApJbnRlcm5ldC1EcmFmdCAgICAgICAgIE9BdXRoIDIuMCBJb1QgQXV0aG9y aXphdGlvbiAgICAgICAgICAgIE1hcmNoIDIwMTYKCgogICAgICAgIC8tLS0tLS0tLS0tLSstLS0t LS0tLS0tLS0tLSstLS0tLS0tLS0tLS0tLS0tLS0tLS0tLVwKICAgICAgICB8IFZhbHVlICAgICB8 IE1ham9yIFR5cGUgICB8IEtleSAgICAgICAgICAgICAgICAgICB8CiAgICAgICAgfC0tLS0tLS0t LS0tKy0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tfAogICAgICAgIHwgMCAg ICAgICAgIHwgMCAgICAgICAgICAgIHwgZ3JhbnRfdHlwZSAgICAgICAgICAgIHwKICAgICAgICB8 IDEgICAgICAgICB8IDAgICAgICAgICAgICB8IGNsaWVudF9pZCAgICAgICAgICAgICB8CiAgICAg ICAgfCAyICAgICAgICAgfCAwICAgICAgICAgICAgfCBjbGllbnRfc2VjcmV0ICAgICAgICAgfAog ICAgICAgIHwgMyAgICAgICAgIHwgMCAgICAgICAgICAgIHwgc2NvcGUgICAgICAgICAgICAgICAg IHwKICAgICAgICB8IDQgICAgICAgICB8IDAgICAgICAgICAgICB8IGF1ZCAgICAgICAgICAgICAg ICAgICB8CiAgICAgICAgfCA1ICAgICAgICAgfCAwICAgICAgICAgICAgfCBhbGcgICAgICAgICAg ICAgICAgICAgfAogICAgICAgIHwgNiAgICAgICAgIHwgMCAgICAgICAgICAgIHwga2V5ICAgICAg ICAgICAgICAgICAgIHwKICAgICAgICBcLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tLS0rLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0vCgogICAgICAgICAgICAgIEZpZ3VyZSA2OiBDQk9SIG1hcHBpbmdz IHVzZWQgaW4gdG9rZW4gcmVxdWVzdHMKCkMuMS4yLiAgVG9rZW4gUmVzcG9uc2UKCiAgIFRoZSBB UyByZXNwb25kcyBieSBzZW5kaW5nIGEgQ0JPUiBzdHJ1Y3R1cmUgd2l0aCB0aGUgZm9sbG93aW5n CiAgIGF0dHJpYnV0ZXMuCgogICBhY2Nlc3NfdG9rZW46CgogICAgICBSRVFVSVJFRC4gIFRoZSBh Y2Nlc3MgdG9rZW4gaXNzdWVkIGJ5IHRoZSBhdXRob3JpemF0aW9uIHNlcnZlci4KCiAgIHRva2Vu X3R5cGU6CgogICAgICBSRVFVSVJFRC4gIFRoZSB0eXBlIG9mIHRoZSB0b2tlbiBpc3N1ZWQuICJw b3AiIGlzIHJlY29tbWVuZGVkLgoKICAga2V5OgoKICAgICAgUkVRVUlSRUQsIGlmIHN5bW1ldHJp YyBrZXkgY3J5cHRvZ3JhcGh5IGlzIHVzZWQuICBBIENPU0UgS2V5CiAgICAgIFN0cnVjdHVyZSBj b250YWluaW5nIHRoZSBzeW1tZXRyaWMgcHJvb2Ygb2YgcG9zc2Vzc2lvbiBrZXkuICBUaGUKICAg ICAgbWVtYmVycyBvZiB0aGUgc3RydWN0dXJlIGNhbiBiZSBmb3VuZCBpbiBzZWN0aW9uIDcuMSBv ZgogICAgICBbSS1ELmlldGYtY29zZS1tc2ddLgoKICAgY3NwOgoKICAgICAgUkVRVUlSRUQuICBJ bmZvcm1hdGlvbiBvbiB3aGF0IGNvbW11bmljYXRpb24gcHJvdG9jb2wgdG8gdXNlIGluCiAgICAg IHRoZSBjb21tdW5pY2F0aW9uIGJldHdlZW4gdGhlIGNsaWVudCBhbmQgdGhlIFJTLiAgRGV0YWls cyBvbgogICAgICBwb3NzaWJsZSB2YWx1ZXMgY2FuIGJlIGZvdW5kIGluIFNlY3Rpb24gNS4xLgoK ICAgc2NvcGU6CgogICAgICBPUFRJT05BTCwgaWYgaWRlbnRpY2FsIHRvIHRoZSBzY29wZSByZXF1 ZXN0ZWQgYnkgdGhlIGNsaWVudDsKICAgICAgb3RoZXJ3aXNlLCBSRVFVSVJFRC4KCiAgIGFsZzoK CgoKCgpTZWl0eiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgU2VwdGVtYmVyIDIxLCAyMDE2ICAg ICAgICAgICAgICBbUGFnZSAyOV0KDApJbnRlcm5ldC1EcmFmdCAgICAgICAgIE9BdXRoIDIuMCBJ b1QgQXV0aG9yaXphdGlvbiAgICAgICAgICAgIE1hcmNoIDIwMTYKCgogICAgICBPUFRJT05BTC4g IFRoZSAnYWxnJyBwYXJhbWV0ZXIgcHJvdmlkZXMgZnVydGhlciBpbmZvcm1hdGlvbiBhYm91dAog ICAgICB0aGUgYWxnb3JpdGhtLCBzdWNoIGFzIHdoZXRoZXIgYSBzeW1tZXRyaWMgb3IgYW4gYXN5 bW1ldHJpYwogICAgICBjcnlwdG8tc3lzdGVtIGlzIHVzZWQuCgogICBUaGUgcGFyYW1ldGVycyBk ZWZpbmVkIGFib3ZlIHVzZSB0aGUgZm9sbG93aW5nIENCT1IgbWFqb3IgdHlwZXMuCgogICAgICAg ICAvLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS1cCiAg ICAgICAgIHwgVmFsdWUgICAgIHwgTWFqb3IgVHlwZSAgIHwgS2V5ICAgICAgICAgICAgICAgICAg IHwKICAgICAgICAgfC0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tfAogICAgICAgICB8IDAgICAgICAgICB8IDAgICAgICAgICAgICB8IGFjY2Vzc190b2tl biAgICAgICAgICB8CiAgICAgICAgIHwgMSAgICAgICAgIHwgMCAgICAgICAgICAgIHwgdG9rZW5f dHlwZSAgICAgICAgICAgIHwKICAgICAgICAgfCAyICAgICAgICAgfCAwICAgICAgICAgICAgfCBr ZXkgICAgICAgICAgICAgICAgICAgfAogICAgICAgICB8IDMgICAgICAgICB8IDAgICAgICAgICAg ICB8IGNzcCAgICAgICAgICAgICAgICAgICB8CiAgICAgICAgIHwgNCAgICAgICAgIHwgMCAgICAg ICAgICAgIHwgc2NvcGUgICAgICAgICAgICAgICAgIHwKICAgICAgICAgfCA1ICAgICAgICAgfCAw ICAgICAgICAgICAgfCBhbGcgICAgICAgICAgICAgICAgICAgfAogICAgICAgICBcLS0tLS0tLS0t LS0rLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0vCgogICAgICAgICAgICAg IEZpZ3VyZSA3OiBDQk9SIG1hcHBpbmdzIHVzZWQgaW4gdG9rZW4gcmVzcG9uc2VzCgpDLjIuICBD b0FQIFByb2ZpbGUgZm9yIE9BdXRoIEludHJvc3BlY3Rpb24KCiAgIFRoaXMgc2VjdGlvbiBkZWZp bmVzIGEgd2F5IGZvciBhIGhvbGRlciBvZiBhY2Nlc3MgdG9rZW5zLCBtYWlubHkKICAgY2xpZW50 cyBhbmQgUlMncywgdG8gZ2V0IG1ldGFkYXRhIGxpa2UgdmFsaWRpdHkgc3RhdHVzLCBjbGFpbXMg YW5kCiAgIHNjb3BlcyBmb3VuZCBpbiBhY2Nlc3MgdG9rZW4uICBUaGUgT0F1dGggVG9rZW4gSW50 cm9zcGVjdGlvbgogICBzcGVjaWZpY2F0aW9uIFtJLUQuaWV0Zi1vYXV0aC1pbnRyb3NwZWN0aW9u XSBkZWZpbmVzIGEgd2F5IHRvCiAgIHZhbGlkYXRlIHRoZSB0b2tlbiB1c2luZyBIVFRQIFBPU1Qg b3IgSFRUUCBHRVQuICBUaGlzIGRvY3VtZW50IHJldXNlcwogICB0aGUgd29yayBkb25lIGluIHRo ZSBPQXV0aCBUb2tlbiBJbnRyb3NwZWN0aW9uIGFuZCBkZWZpbmVzIGEgbWFwcGluZwogICBvZiB0 aGUgcmVxdWVzdCBhbmQgcmVzcG9uc2UgdG8gQ29BUCBbUkZDNzI1Ml0gdG8gYmUgdXNlZCBieQog ICBjb25zdHJhaW5lZCBkZXZpY2VzLgoKQy4yLjEuICBJbnRyb3NwZWN0aW9uIFJlcXVlc3QKCiAg IFRoZSB0b2tlbiBob2xkZXIgbWFrZXMgYSByZXF1ZXN0IHRvIHRoZSBJbnRyb3NwZWN0aW9uIENv QVAgcmVzb3VyY2UKICAgYnkgc2VuZGluZyBhIENCT1Igc3RydWN0dXJlIHdpdGggdGhlIGZvbGxv d2luZyBhdHRyaWJ1dGVzLgoKICAgdG9rZW46CgogICAgICBSRVFVSVJFRC4gIFRoZSBzdHJpbmcg dmFsdWUgb2YgdGhlIHRva2VuLgoKICAgcmVzb3VyY2VfaWQ6CgogICAgICBPUFRJT05BTC4gIEEg c2VydmljZS1zcGVjaWZpYyBzdHJpbmcgaWRlbnRpZnlpbmcgdGhlIHJlc291cmNlIHRoYXQKICAg ICAgdGhlIGNsaWVudCBkb2luZyB0aGUgaW50cm9zcGVjdGlvbiBpcyBhc2tpbmcgYWJvdXQuCgog ICBjbGllbnRfaWQ6CgogICAgICBPUFRJT05BTC4gIFRoZSBjbGllbnQgaWRlbnRpZmllciBpc3N1 ZWQgdG8gdGhlIGhvbGRlciBvZiB0aGUgdG9rZW4KICAgICAgKGNsaWVudCBvciBSUykgZHVyaW5n IHRoZSByZWdpc3RyYXRpb24gcHJvY2Vzcy4KCgoKU2VpdHosIGV0IGFsLiAgICAgICAgICBFeHBp cmVzIFNlcHRlbWJlciAyMSwgMjAxNiAgICAgICAgICAgICAgW1BhZ2UgMzBdCgwKSW50ZXJuZXQt RHJhZnQgICAgICAgICBPQXV0aCAyLjAgSW9UIEF1dGhvcml6YXRpb24gICAgICAgICAgICBNYXJj aCAyMDE2CgoKICAgY2xpZW50X3NlY3JldDoKCiAgICAgIE9QVElPTkFMLiAgVGhlIGNsaWVudCBz ZWNyZXQuCgogICBUaGUgcGFyYW1ldGVycyBkZWZpbmVkIGFib3ZlIHVzZSB0aGUgZm9sbG93aW5n IENCT1IgbWFqb3IgdHlwZXM6CgogICAgICAgICAgLy0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0t Ky0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tXAogICAgICAgICAgfCBWYWx1ZSAgICAgfCBNYWpvciBU eXBlICAgfCBLZXkgICAgICAgICAgICAgICAgICAgfAogICAgICAgICAgfC0tLS0tLS0tLS0tKy0t LS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tfAogICAgICAgICAgfCAwICAgICAg ICAgfCAwICAgICAgICAgICAgfCB0b2tlbiAgICAgICAgICAgICAgICAgfAogICAgICAgICAgfCAx ICAgICAgICAgfCAwICAgICAgICAgICAgfCByZXNvdXJjZV9pZCAgICAgICAgICAgfAogICAgICAg ICAgfCAyICAgICAgICAgfCAwICAgICAgICAgICAgfCBjbGllbnRfaWQgICAgICAgICAgICAgfAog ICAgICAgICAgfCAzICAgICAgICAgfCAwICAgICAgICAgICAgfCBjbGllbnRfc2VjcmV0ICAgICAg ICAgfAogICAgICAgICAgXC0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLwoKICAgIEZpZ3VyZSA4OiBDQk9SIE1hcHBpbmdzIHRvIFRva2VuIEludHJvc3Bl Y3Rpb24gUmVxdWVzdCBQYXJhbWV0ZXJzLgoKQy4yLjIuICBJbnRyb3NwZWN0aW9uIFJlc3BvbnNl CgogICBJZiB0aGUgaW50cm9zcGVjdGlvbiByZXF1ZXN0IGlzIHZhbGlkIGFuZCBhdXRob3JpemVk LCB0aGUKICAgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgcmV0dXJucyBhIENvQVAgbWVzc2FnZSB3aXRo IHRoZSByZXNwb25zZSBlbmNvZGVkCiAgIGFzIGEgQ0JPUiBzdHJ1Y3R1cmUgaW4gdGhlIHBheWxv YWQgb2YgdGhlIG1lc3NhZ2UuICBJZiB0aGUgcmVxdWVzdAogICBmYWlsZWQgY2xpZW50IGF1dGhl bnRpY2F0aW9uIG9yIGlzIGludmFsaWQsIHRoZSBhdXRob3JpemF0aW9uIHNlcnZlcgogICByZXR1 cm5zIGFuIGVycm9yIHJlc3BvbnNlIHVzaW5nIHRoZSBDb0FQIDQuMDAgJ0JhZCBSZXF1ZXN0JyBy ZXNwb25zZQogICBjb2RlLgoKICAgVGhlIEpTT04gc3RydWN0dXJlIGluIHRoZSBwYXlsb2FkIHJl c3BvbnNlIGluY2x1ZGVzIHRoZSB0b3AtbGV2ZWwKICAgbWVtYmVycyBkZWZpbmVkIGluIFNlY3Rp b24gMi4yIGluIHRoZSBPQXV0aCBUb2tlbiBJbnRyb3NwZWN0aW9uCiAgIHNwZWNpZmljYXRpb24g W0ktRC5pZXRmLW9hdXRoLWludHJvc3BlY3Rpb25dLiAgSXQgaXMgUkVDT01NRU5ERUQgdG8KICAg b25seSByZXR1cm4gdGhlICdhY3RpdmUnIGF0dHJpYnV0ZSBjb25zaWRlcmluZyBjb25zdHJhaW5l ZCBuYXR1cmUgb2YKICAgQ29BUCBjbGllbnQgYW5kIHNlcnZlciBuZXR3b3Jrcy4KCiAgIEludHJv c3BlY3Rpb24gcmVzcG9uc2VzIGluIENCT1IgdXNlIHRoZSBmb2xsb3dpbmcgbWFwcGluZ3M6Cgog ICBhY3RpdmU6CgogICAgICBSRVFVSVJFRC4gIFRoZSBhY3RpdmUga2V5IGlzIGFuIGluZGljYXRv ciBvZiB3aGV0aGVyIG9yIG5vdCB0aGUKICAgICAgcHJlc2VudGVkIHRva2VuIGlzIGN1cnJlbnRs eSBhY3RpdmUuICBUaGUgc3BlY2lmaWNzIG9mIGEgdG9rZW4ncwogICAgICAiYWN0aXZlIiBzdGF0 ZSB3aWxsIHZhcnkgZGVwZW5kaW5nIG9uIHRoZSBpbXBsZW1lbnRhdGlvbiBvZiB0aGUKICAgICAg YXV0aG9yaXphdGlvbiBzZXJ2ZXIsIGFuZCB0aGUgaW5mb3JtYXRpb24gaXQga2VlcHMgYWJvdXQg aXRzCiAgICAgIHRva2VucywgYnV0IGEgInRydWUiIHZhbHVlIHJldHVybiBmb3IgdGhlICJhY3Rp dmUiIHByb3BlcnR5IHdpbGwKICAgICAgZ2VuZXJhbGx5IGluZGljYXRlIHRoYXQgYSBnaXZlbiB0 b2tlbiBoYXMgYmVlbiBpc3N1ZWQgYnkgdGhpcwogICAgICBhdXRob3JpemF0aW9uIHNlcnZlciwg aGFzIG5vdCBiZWVuIHJldm9rZWQgYnkgdGhlIHJlc291cmNlIG93bmVyLAogICAgICBhbmQgaXMg d2l0aGluIGl0cyBnaXZlbiB0aW1lIHdpbmRvdyBvZiB2YWxpZGl0eSAoZS5nLiwgYWZ0ZXIgaXRz CiAgICAgIGlzc3VhbmNlIHRpbWUgYW5kIGJlZm9yZSBpdHMgZXhwaXJhdGlvbiB0aW1lKS4KCiAg IHNjb3BlOgoKCgoKU2VpdHosIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIFNlcHRlbWJlciAyMSwg MjAxNiAgICAgICAgICAgICAgW1BhZ2UgMzFdCgwKSW50ZXJuZXQtRHJhZnQgICAgICAgICBPQXV0 aCAyLjAgSW9UIEF1dGhvcml6YXRpb24gICAgICAgICAgICBNYXJjaCAyMDE2CgoKICAgICAgT1BU SU9OQUwuICBBIHN0cmluZyBjb250YWluaW5nIGEgc3BhY2Utc2VwYXJhdGVkIGxpc3Qgb2Ygc2Nv cGVzCiAgICAgIGFzc29jaWF0ZWQgd2l0aCB0aGlzIHRva2VuLCBpbiB0aGUgZm9ybWF0IGRlc2Ny aWJlZCBpbiBTZWN0aW9uIDMuMwogICAgICBvZiBPQXV0aCAyLjAgW1JGQzY3NDldLgoKICAgY2xp ZW50X2lkOgoKICAgICAgT1BUSU9OQUwuICBDbGllbnQgaWRlbnRpZmllciBmb3IgdGhlIGNsaWVu dCB0aGF0IHJlcXVlc3RlZCB0aGlzCiAgICAgIHRva2VuLgoKICAgdXNlcm5hbWU6CgogICAgICBP UFRJT05BTC4gIEh1bWFuLXJlYWRhYmxlIGlkZW50aWZpZXIgZm9yIHRoZSByZXNvdXJjZSBvd25l ciB3aG8KICAgICAgYXV0aG9yaXplZCB0aGlzIHRva2VuLgoKICAgdG9rZW5fdHlwZToKCiAgICAg IE9QVElPTkFMLiAgVHlwZSBvZiB0aGUgdG9rZW4gYXMgZGVmaW5lZCBpbiBTZWN0aW9uIDUuMSBv ZiBPQXV0aAogICAgICAyLjAgW1JGQzY3NDldIG9yIFBvUCB0b2tlbi4KCiAgIGV4cDoKCiAgICAg IE9QVElPTkFMLiAgSW50ZWdlciB0aW1lc3RhbXAsIG1lYXN1cmVkIGluIHRoZSBudW1iZXIgb2Yg c2Vjb25kcwogICAgICBzaW5jZSBKYW51YXJ5IDEgMTk3MCBVVEMsIGluZGljYXRpbmcgd2hlbiB0 aGlzIHRva2VuIHdpbGwgZXhwaXJlLAogICAgICBhcyBkZWZpbmVkIGluIENXVCBbSS1ELndhaGxz dHJvZW0tYWNlLWNib3Itd2ViLXRva2VuXS4KCiAgIGlhdDoKCiAgICAgIE9QVElPTkFMLiAgSW50 ZWdlciB0aW1lc3RhbXAsIG1lYXN1cmVkIGluIHRoZSBudW1iZXIgb2Ygc2Vjb25kcwogICAgICBz aW5jZSBKYW51YXJ5IDEgMTk3MCBVVEMsIGluZGljYXRpbmcgd2hlbiB0aGlzIHRva2VuIHdpbGwg ZXhwaXJlLAogICAgICBhcyBkZWZpbmVkIGluIENXVCBbSS1ELndhaGxzdHJvZW0tYWNlLWNib3It d2ViLXRva2VuXS4KCiAgIG5iZjoKCiAgICAgIE9QVElPTkFMLiAgSW50ZWdlciB0aW1lc3RhbXAs IG1lYXN1cmVkIGluIHRoZSBudW1iZXIgb2Ygc2Vjb25kcwogICAgICBzaW5jZSBKYW51YXJ5IDEg MTk3MCBVVEMsIGluZGljYXRpbmcgd2hlbiB0aGlzIHRva2VuIHdpbGwgZXhwaXJlLAogICAgICBh cyBkZWZpbmVkIGluIENXVCBbSS1ELndhaGxzdHJvZW0tYWNlLWNib3Itd2ViLXRva2VuXS4KCiAg IHN1YjoKCiAgICAgIE9QVElPTkFMLiAgU3ViamVjdCBvZiB0aGUgdG9rZW4sIGFzIGRlZmluZWQg aW4gQ1dUCiAgICAgIFtJLUQud2FobHN0cm9lbS1hY2UtY2Jvci13ZWItdG9rZW5dLiAgVXN1YWxs eSBhIG1hY2hpbmUtcmVhZGFibGUKICAgICAgaWRlbnRpZmllciBvZiB0aGUgcmVzb3VyY2Ugb3du ZXIgd2hvIGF1dGhvcml6ZWQgdGhpcyB0b2tlbi4KCiAgIGF1ZDoKCiAgICAgIE9QVElPTkFMLiAg U2VydmljZS1zcGVjaWZpYyBzdHJpbmcgaWRlbnRpZmllciBvciBsaXN0IG9mIHN0cmluZwogICAg ICBpZGVudGlmaWVycyByZXByZXNlbnRpbmcgdGhlIGludGVuZGVkIGF1ZGllbmNlIGZvciB0aGlz IHRva2VuLCBhcwogICAgICBkZWZpbmVkIGluIENXVCBbSS1ELndhaGxzdHJvZW0tYWNlLWNib3It d2ViLXRva2VuXS4KCgoKU2VpdHosIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIFNlcHRlbWJlciAy MSwgMjAxNiAgICAgICAgICAgICAgW1BhZ2UgMzJdCgwKSW50ZXJuZXQtRHJhZnQgICAgICAgICBP QXV0aCAyLjAgSW9UIEF1dGhvcml6YXRpb24gICAgICAgICAgICBNYXJjaCAyMDE2CgoKICAgaXNz OgoKICAgICAgT1BUSU9OQUwuICBTdHJpbmcgcmVwcmVzZW50aW5nIHRoZSBpc3N1ZXIgb2YgdGhp cyB0b2tlbiwgYXMKICAgICAgZGVmaW5lZCBpbiBDV1QgW0ktRC53YWhsc3Ryb2VtLWFjZS1jYm9y LXdlYi10b2tlbl0uCgogICBjdGk6CgogICAgICBPUFRJT05BTC4gIFN0cmluZyBpZGVudGlmaWVy IGZvciB0aGUgdG9rZW4sIGFzIGRlZmluZWQgaW4gQ1dUCiAgICAgIFtJLUQud2FobHN0cm9lbS1h Y2UtY2Jvci13ZWItdG9rZW5dCgogICBUaGUgcGFyYW1ldGVycyBkZWZpbmVkIGFib3ZlIHVzZSB0 aGUgZm9sbG93aW5nIENCT1IgbWFqb3IgdHlwZXM6CgogICAvLS0tLS0tLS0tLS0rLS0tLS0tLS0t LS0tLS0rLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS1cCiAgIHwgVmFsdWUgICAgIHwgTWFqb3IgVHlw ZSAgIHwgS2V5ICAgICAgICAgICAgICAgICAgIHwKICAgfC0tLS0tLS0tLS0tKy0tLS0tLS0tLS0t LS0tKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tfAogICB8IDAgICAgICAgICB8IDAgICAgICAgICAg ICB8IGFjdGl2ZSAgICAgICAgICAgICAgICB8CiAgIHwgMSAgICAgICAgIHwgMCAgICAgICAgICAg IHwgc2NvcGVzICAgICAgICAgICAgICAgIHwKICAgfCAyICAgICAgICAgfCAwICAgICAgICAgICAg fCBjbGllbnRfaWQgICAgICAgICAgICAgfAogICB8IDMgICAgICAgICB8IDAgICAgICAgICAgICB8 IHVzZXJuYW1lICAgICAgICAgICAgICB8CiAgIHwgNCAgICAgICAgIHwgMCAgICAgICAgICAgIHwg dG9rZW5fdHlwZSAgICAgICAgICAgIHwKICAgfCA1ICAgICAgICAgfCAwICAgICAgICAgICAgfCBl eHAgICAgICAgICAgICAgICAgICAgfAogICB8IDYgICAgICAgICB8IDAgICAgICAgICAgICB8IGlh dCAgICAgICAgICAgICAgICAgICB8CiAgIHwgNyAgICAgICAgIHwgMCAgICAgICAgICAgIHwgbmJm ICAgICAgICAgICAgICAgICAgIHwKICAgfCA4ICAgICAgICAgfCAwICAgICAgICAgICAgfCBzdWIg ICAgICAgICAgICAgICAgICAgfAogICB8IDkgICAgICAgICB8IDAgICAgICAgICAgICB8IGF1ZCAg ICAgICAgICAgICAgICAgICB8CiAgIHwgMTAgICAgICAgIHwgMCAgICAgICAgICAgIHwgaXNzICAg ICAgICAgICAgICAgICAgIHwKICAgfCAxMSAgICAgICAgfCAwICAgICAgICAgICAgfCBjdGkgICAg ICAgICAgICAgICAgICAgfAogICBcLS0tLS0tLS0tLS0rLS0tLS0tLS0tLS0tLS0rLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0vCgogICAgRmlndXJlIDk6IENCT1IgTWFwcGluZ3MgdG8gVG9rZW4gSW50 cm9zcGVjdGlvbiBSZXNwb25zZSBQYXJhbWV0ZXJzLgoKQXBwZW5kaXggRC4gIERlcGxveW1lbnQg RXhhbXBsZXMKCiAgIFRoZXJlIGlzIGEgbGFyZ2UgdmFyaWV0eSBvZiBJb1QgZGVwbG95bWVudHMs IGFzIGlzIGluZGljYXRlZCBpbgogICBBcHBlbmRpeCBBLCBhbmQgdGhpcyBzZWN0aW9uIGhpZ2hs aWdodHMgYSBmZXcgY29tbW9uIHZhcmlhbnRzLiAgVGhpcwogICBzZWN0aW9uIGlzIG5vdCBub3Jt YXRpdmUgYnV0IGlsbHVzdHJhdGVzIGhvdyB0aGUgZnJhbWV3b3JrIGNhbiBiZQogICBhcHBsaWVk LgoKICAgRm9yIGVhY2ggb2YgdGhlIGRlcGxveW1lbnQgdmFyaWFudHMgdGhlcmUgYXJlIGEgbnVt YmVyIG9mIHBvc3NpYmxlCiAgIHNlY3VyaXR5IHNldHVwcyBiZXR3ZWVuIGNsaWVudHMsIHJlc291 cmNlIHNlcnZlcnMgYW5kIGF1dGhvcml6YXRpb24KICAgc2VydmVycy4gIFRoZSBtYWluIGZvY3Vz IGluIHRoZSBmb2xsb3dpbmcgc3Vic2VjdGlvbnMgaXMgb24gaG93CiAgIGF1dGhvcml6YXRpb24g b2YgYSBjbGllbnQgcmVxdWVzdCBmb3IgYSByZXNvdXJjZSBob3N0ZWQgYnkgYSBSUyBpcwogICBw ZXJmb3JtZWQuICBUaGlzIHJlcXVpcmVzIHRoZSB0aGUgc2VjdXJpdHkgb2YgdGhlIHJlcXVlc3Rz IGFuZAogICByZXNwb25zZXMgYmV0d2VlbiB0aGUgY2xpZW50cyBhbmQgdGhlIFJTIHRvIGNvbnNp ZGVyLgoKICAgTm90ZTogQ0JPUiBkaWFnbm9zdGljIG5vdGF0aW9uIGlzIHVzZWQgZm9yIGV4YW1w bGVzIG9mIHJlcXVlc3RzIGFuZAogICByZXNwb25zZXMuCgoKCgpTZWl0eiwgZXQgYWwuICAgICAg ICAgIEV4cGlyZXMgU2VwdGVtYmVyIDIxLCAyMDE2ICAgICAgICAgICAgICBbUGFnZSAzM10KDApJ bnRlcm5ldC1EcmFmdCAgICAgICAgIE9BdXRoIDIuMCBJb1QgQXV0aG9yaXphdGlvbiAgICAgICAg ICAgIE1hcmNoIDIwMTYKCgpELjEuICBMb2NhbCBUb2tlbiBWYWxpZGF0aW9uCgogICBJbiB0aGlz IHNjZW5hcmlvIHdlIGNvbnNpZGVyIHRoZSBjYXNlIHdoZXJlIHRoZSByZXNvdXJjZSBzZXJ2ZXIg aXMKICAgb2ZmbGluZSwgaS5lLiBpdCBpcyBub3QgY29ubmVjdGVkIHRvIHRoZSBBUyBhdCB0aGUg dGltZSBvZiB0aGUgYWNjZXNzCiAgIHJlcXVlc3QuICBUaGlzIGFjY2VzcyBwcm9jZWR1cmUgaW52 b2x2ZXMgc3RlcHMgQSwgQiwgQywgYW5kIEYgb2YKICAgRmlndXJlIDEuCgogICBTaW5jZSB0aGUg cmVzb3VyY2Ugc2VydmVyIG11c3QgYmUgYWJsZSB0byB2ZXJpZnkgdGhlIGFjY2VzcyB0b2tlbgog ICBsb2NhbGx5LCBzZWxmLWNvbnRhaW5lZCBhY2Nlc3MgdG9rZW5zIG11c3QgYmUgdXNlZC4KCiAg IFRoaXMgZXhhbXBsZSBzaG93cyB0aGUgaW50ZXJhY3Rpb25zIGJldHdlZW4gYSBjbGllbnQsIHRo ZQogICBhdXRob3JpemF0aW9uIHNlcnZlciBhbmQgYSB0ZW1wZXJhdHVyZSBzZW5zb3IgYWN0aW5n IGFzIGEgcmVzb3VyY2UKICAgc2VydmVyLiAgTWVzc2FnZSBleGNoYW5nZXMgQSBhbmQgQiBhcmUg c2hvd24gaW4gRmlndXJlIDEwLgoKICAgICAgQTogVGhlIGNsaWVudCBmaXJzdCBnZW5lcmF0ZXMg YSBwdWJsaWMtcHJpdmF0ZSBrZXkgcGFpciB1c2VkIGZvcgogICAgICBjb21tdW5pY2F0aW9uIHNl Y3VyaXR5IHdpdGggdGhlIFJTLgoKICAgICAgVGhlIGNsaWVudCBzZW5kcyB0aGUgUE9TVCByZXF1 ZXN0IHRvIC90b2tlbiBhdCB0aGUgQVMuICBUaGUKICAgICAgcmVxdWVzdCBjb250YWlucyB0aGUg cHVibGljIGtleSBvZiB0aGUgY2xpZW50IGFuZCB0aGUgQXVkaWVuY2UKICAgICAgcGFyYW1ldGVy IHNldCB0byAidGVtcFNlbnNvckluTGl2aW5nUm9vbSIsIGEgdmFsdWUgdGhhdCB0aGUKICAgICAg dGVtcGVyYXR1cmUgc2Vuc29yIGlkZW50aWZpZXMgaXRzZWxmIHdpdGguICBUaGUgQVMgZXZhbHVh dGVzIHRoZQogICAgICByZXF1ZXN0IGFuZCBhdXRob3JpemVzIHRoZSBjbGllbnQgdG8gYWNjZXNz IHRoZSByZXNvdXJjZS4KCiAgICAgIEI6IFRoZSBBUyByZXNwb25kcyB3aXRoIGEgUG9QIHRva2Vu IGFuZCBjbGllbnQgaW5mb3JtYXRpb24uICBUaGUKICAgICAgUG9QIHRva2VuIGNvbnRhaW5zIHRo ZSBwdWJsaWMga2V5IG9mIHRoZSBjbGllbnQsIGFuZCB0aGUgY2xpZW50CiAgICAgIGluZm9ybWF0 aW9uIGNvbnRhaW5zIHRoZSBwdWJsaWMga2V5IG9mIHRoZSBSUy4gIEZvciBjb21tdW5pY2F0aW9u CiAgICAgIHNlY3VyaXR5IHRoaXMgZXhhbXBsZSB1c2VzIERUTFMgUmF3UHVibGljS2V5IGJldHdl ZW4gdGhlIGNsaWVudAogICAgICBhbmQgdGhlIFJTLiAgVGhlIGlzc3VlZCB0b2tlbiB3aWxsIGhh dmUgYSBzaG9ydCB2YWxpZGl0eSB0aW1lLAogICAgICBpLmUuICdleHAnIGNsb3NlIHRvICdpYXQn LCB0byBwcm90ZWN0IHRoZSBSUyBmcm9tIHJlcGxheSBhdHRhY2tzCiAgICAgIHNpbmNlIGl0LCB0 aGF0IGNhbm5vdCBkbyBpbnRyb3NwZWN0aW9uIHRvIGNoZWNrIHRoZSB0b2tlbnMgY3VycmVudAog ICAgICB2YWxpZGl0eS4gIFRoZSB0b2tlbiBpbmNsdWRlcyB0aGUgY2xhaW0gImFpZiIgd2l0aCB0 aGUgYXV0aG9yaXplZAogICAgICBhY2Nlc3MgdGhhdCBhbiBvd25lciBvZiB0aGUgdGVtcGVyYXR1 cmUgZGV2aWNlIGNhbiBlbmpveS4gIFRoZQogICAgICAnYWlmJyBjbGFpbSwgaXNzdWVkIGJ5IHRo ZSBBUywgaW5mb3JtcyB0aGUgUlMgdGhhdCB0aGUgb3duZXIgb2YKICAgICAgdGhlIHRva2VuLCB0 aGF0IGNhbiBwcm92ZSB0aGUgcG9zc2Vzc2lvbiBvZiBhIGtleSBpcyBhdXRob3JpemVkIHRvCiAg ICAgIG1ha2UgYSBHRVQgcmVxdWVzdCBhZ2FpbnN0IHRoZSAvdGVtcGVyYXR1cmUgcmVzb3VyY2Ug YW5kIGEgUE9TVAogICAgICByZXF1ZXN0IG9uIHRoZSAvZmlybXdhcmUgcmVzb3VyY2UuCgogICAg ICBOb3RlOiBJbiB0aGlzIGV4YW1wbGUgd2UgYXNzdW1lIHRoYXQgdGhlIGNsaWVudCBrbm93cyB3 aGF0CiAgICAgIHJlc291cmNlIGl0IHdhbnRzIHRvIGFjY2VzcywgYW5kIGlzIHRoZXJlZm9yZSBh YmxlIHRvIHJlcXVlc3QKICAgICAgc3BlY2lmaWMgYXVkaWVuY2UgYW5kIHNjb3BlIGNsYWltcyBm b3IgdGhlIGFjY2VzcyB0b2tlbi4KCgoKCgoKCgoKCgpTZWl0eiwgZXQgYWwuICAgICAgICAgIEV4 cGlyZXMgU2VwdGVtYmVyIDIxLCAyMDE2ICAgICAgICAgICAgICBbUGFnZSAzNF0KDApJbnRlcm5l dC1EcmFmdCAgICAgICAgIE9BdXRoIDIuMCBJb1QgQXV0aG9yaXphdGlvbiAgICAgICAgICAgIE1h cmNoIDIwMTYKCgogICAgICAgICAgICBBdXRob3JpemF0aW9uCiAgICAgQ2xpZW50ICAgIFNlcnZl cgogICAgICAgfCAgICAgICAgIHwKICAgICAgIHwgICAgICAgICB8CiAgIEE6ICArLS0tLS0tLS0+ fCBIZWFkZXI6IFBPU1QgKENvZGU9MC4wMikKICAgICAgIHwgIFBPU1QgICB8IFVyaS1QYXRoOiJ0 b2tlbiIKICAgICAgIHwgICAgICAgICB8IENvbnRlbnQtVHlwZTogYXBwbGljYXRpb24vY2Jvcgog ICAgICAgfCAgICAgICAgIHwgUGF5bG9hZDogPFJlcXVlc3QtUGF5bG9hZD4KICAgICAgIHwgICAg ICAgICB8CiAgIEI6ICB8PC0tLS0tLS0tKyBIZWFkZXI6IDIuMDUgQ29udGVudAogICAgICAgfCAg Mi4wNSAgIHwgQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi9jYm9yCiAgICAgICB8ICAgICAgICAg fCBQYXlsb2FkOiA8UmVzcG9uc2UtUGF5bG9hZD4KICAgICAgIHwgICAgICAgICB8CgogICAgICBG aWd1cmUgMTA6IFRva2VuIFJlcXVlc3QgYW5kIFJlc3BvbnNlIFVzaW5nIENsaWVudCBDcmVkZW50 aWFscy4KCiAgIFRoZSBpbmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhlIFJlcXVlc3QtUGF5bG9h ZCBhbmQgdGhlIFJlc3BvbnNlLQogICBQYXlsb2FkIGlzIHNob3duIGluIEZpZ3VyZSAxMS4KCiAg IFJlcXVlc3QtUGF5bG9hZCA6CiAgIHsKICAgICAiZ3JhbnRfdHlwZSIgOiAiY2xpZW50X2NyZWRl bnRpYWxzIiwKICAgICAiYXVkIiA6ICJ0ZW1wU2Vuc29ySW5MaXZpbmdSb29tIiwKICAgICAiY2xp ZW50X2lkIiA6ICJteWNsaWVudCIsCiAgICAgImNsaWVudF9zZWNyZXQiIDogInF3ZXJ0eSIKICAg fQoKICAgUmVzcG9uc2UtUGF5bG9hZCA6CiAgIHsKICAgICAiYWNjZXNzX3Rva2VuIiA6IGI2NCdT bEFWMzJoa0tHIC4uLicsCiAgICAgInRva2VuX3R5cGUiIDogInBvcCIsCiAgICAgImNzcCIgOiAi RFRMUyIsCiAgICAgImtleSIgOiBiNjQnZXlKaGJHY2lPaUpTVTBFeFh6VWkgLi4uJwogICAgICJy cGsiIDogYjY0J1pYbEthR0pIWTJsUGFVcFRWVEJGIC4uLicKICAgfQoKICAgICAgICAgICAgIEZp Z3VyZSAxMTogUmVxdWVzdCBhbmQgUmVzcG9uc2UgUGF5bG9hZCBEZXRhaWxzLgoKICAgVGhlIGNv bnRlbnQgb2YgdGhlICJrZXkiIHBhcmFtZXRlciBhbmQgdGhlIGFjY2VzcyB0b2tlbiBhcmUgc2hv d24gaW4KICAgRmlndXJlIDEyIGFuZCBGaWd1cmUgMTMuCgoKCgoKCgoKCgoKU2VpdHosIGV0IGFs LiAgICAgICAgICBFeHBpcmVzIFNlcHRlbWJlciAyMSwgMjAxNiAgICAgICAgICAgICAgW1BhZ2Ug MzVdCgwKSW50ZXJuZXQtRHJhZnQgICAgICAgICBPQXV0aCAyLjAgSW9UIEF1dGhvcml6YXRpb24g ICAgICAgICAgICBNYXJjaCAyMDE2CgoKICAgewogICAgICJraWQiIDogYjY0J2MyOXRaU0J3ZFdK c2FXTWdhMlY1SUdsaycsCiAgICAgImt0eSIgOiAiRUMiLAogICAgICJjcnYiIDogIlAtMjU2IiwK ICAgICAieCIgICA6IGI2NCdNS0JDVE5JY0tVU0RpaTExeVNzMzUyNmlEWjhBaVRvN1R1NktQQXF2 N0Q0JywKICAgICAieSIgICA6IGI2NCc0RXRsNlNSVzJZaUxVck41dmZ2Vkh1aHA3eDhQeGx0bVdX bGJiTTRJRnlNJwogICB9CgogICAgICAgICAgICAgICAgICAgICBGaWd1cmUgMTI6IFB1YmxpYyBL ZXkgb2YgdGhlIFJTLgoKICAgewogICAgICJhdWQiIDogInRlbXBTZW5zb3JJbkxpdmluZ1Jvb20i LAogICAgICJpYXQiIDogIjEzNjAxODkyMjQiLAogICAgICJleHAiIDogIjEzNjAyODkyMjQiLAog ICAgICJhaWYiIDogIFtbIi90ZW1wZXJhdHVyZSIsIDBdLCBbIi9maXJtd2FyZSIsIDJdXSwKICAg ICAiY25mIiA6IHsKICAgICAgICJqd2siIDogewogICAgICAgICAia2lkIiA6IGI2NCcxQmc4dnVi OXRMZTFnSE16Vjc2ZTgnLAogICAgICAgICAia3R5IiA6ICJFQyIsCiAgICAgICAgICJjcnYiIDog IlAtMjU2IiwKICAgICAgICAgIngiIDogYjY0J2Y4M09KM0QyeEYxQmc4dnViOXRMZTFnSE16Vjc2 ZThUdXM5dVBIdlJWRVUnLAogICAgICAgICAieSIgOiBiNjQneF9GRXpSdTltMzZITE5fdHVlNjU5 TE5wWFc2cEN5U3Rpa1lqS0lXSTVhMCcKICAgICAgIH0KICAgICB9CiAgIH0KCiAgICAgICAgRmln dXJlIDEzOiBBY2Nlc3MgVG9rZW4gaW5jbHVkaW5nIFB1YmxpYyBLZXkgb2YgdGhlIENsaWVudC4K CiAgIE1lc3NhZ2VzIEMgYW5kIEYgYXJlIHNob3duIGluIEZpZ3VyZSAxNCAtIEZpZ3VyZSAxNS4K CiAgICAgIEM6IFRoZSBjbGllbnQgdGhlbiBzZW5kcyB0aGUgUG9QIHRva2VuIHRvIHRoZSAvYXV0 aHotaW5mbyByZXNvdXJjZQogICAgICBhdCB0aGUgUlMuICBUaGlzIGlzIGEgcGxhaW4gQ29BUCBy ZXF1ZXN0LCBpLmUuIG5vIHRyYW5zcG9ydCBvcgogICAgICBhcHBsaWNhdGlvbiBsYXllciBzZWN1 cml0eSBiZXR3ZWVuIGNsaWVudCBhbmQgUlMsIHNpbmNlIHRoZSB0b2tlbgogICAgICBpcyBpbnRl Z3JpdHkgcHJvdGVjdGVkIGJldHdlZW4gQVMgYW5kIFJTLiAgVGhlIFJTIHZlcmlmaWVzIHRoYXQK ICAgICAgdGhlIFBvUCB0b2tlbiB3YXMgY3JlYXRlZCBieSBhIGtub3duIGFuZCB0cnVzdGVkIEFT LCBpcyB2YWxpZCwgYW5kCiAgICAgIHJlc3BvbmRzIHRvIHRoZSBjbGllbnQuICBUaGUgUlMgY2Fj aGVzIHRoZSBzZWN1cml0eSBjb250ZXh0CiAgICAgIHRvZ2V0aGVyIHdpdGggYXV0aG9yaXphdGlv biBpbmZvcm1hdGlvbiBhYm91dCB0aGlzIGNsaWVudAogICAgICBjb250YWluZWQgaW4gdGhlIFBv UCB0b2tlbi4KCgoKCgoKCgoKCgoKClNlaXR6LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBTZXB0 ZW1iZXIgMjEsIDIwMTYgICAgICAgICAgICAgIFtQYWdlIDM2XQoMCkludGVybmV0LURyYWZ0ICAg ICAgICAgT0F1dGggMi4wIElvVCBBdXRob3JpemF0aW9uICAgICAgICAgICAgTWFyY2ggMjAxNgoK CiAgICAgICAgICAgICAgUmVzb3VyY2UKICAgIENsaWVudCAgICAgU2VydmVyCiAgICAgICB8ICAg ICAgICAgfAogICBDOiAgKy0tLS0tLS0tPnwgSGVhZGVyOiBQT1NUIChDb2RlPTAuMDIpCiAgICAg ICB8ICBQT1NUICAgfCBVcmktUGF0aDoiYXV0aHotaW5mbyIKICAgICAgIHwgICAgICAgICB8IFBh eWxvYWQ6IFNsQVYzMmhrS0cgLi4uCiAgICAgICB8ICAgICAgICAgfAogICAgICAgfDwtLS0tLS0t LSsgSGVhZGVyOiAyLjAxIENyZWF0ZWQKICAgICAgIHwgIDIuMDEgICB8CiAgICAgICB8ICAgICAg ICAgfAoKICAgICAgICAgICAgICAgIEZpZ3VyZSAxNDogQWNjZXNzIFRva2VuIHByb3Zpc2lvbmlu ZyB0byBSUwoKICAgICAgVGhlIGNsaWVudCBhbmQgdGhlIFJTIHJ1bnMgdGhlIERUTFMgaGFuZHNo YWtlIHVzaW5nIHRoZSByYXcgcHVibGljCiAgICAgIGtleXMgZXN0YWJsaXNoZWQgaW4gc3RlcCBC IGFuZCBDLgoKICAgICAgVGhlIGNsaWVudCBzZW5kcyB0aGUgQ29BUCByZXF1ZXN0IEdFVCB0byAv dGVtcGVyYXR1cmUgb24gUlMgb3ZlcgogICAgICBEVExTLiAgVGhlIFJTIHZlcmlmaWVzIHRoYXQg dGhlIHJlcXVlc3QgaXMgYXV0aG9yaXplZCwgYmFzZWQgb24KICAgICAgcHJldmlvdXNseSBlc3Rh Ymxpc2hlZCBzZWN1cml0eSBjb250ZXh0LgoKICAgICAgRjogVGhlIFJTIHJlc3BvbmRzIHdpdGgg YSByZXNvdXJjZSByZXByZXNlbnRhdGlvbiBvdmVyIERUTFMuCgogICAgICAgICAgICAgIFJlc291 cmNlCiAgICBDbGllbnQgICAgIFNlcnZlcgogICAgICAgfCAgICAgICAgIHwKICAgICAgIHw8PT09 PT09PT58IERUTFMgQ29ubmVjdGlvbiBFc3RhYmxpc2htZW50CiAgICAgICB8ICAgICAgICAgfCAg IHVzaW5nIFJhdyBQdWJsaWMgS2V5cwogICAgICAgfCAgICAgICAgIHwKICAgICAgICstLS0tLS0t LT58IEhlYWRlcjogR0VUIChDb2RlPTAuMDEpCiAgICAgICB8IEdFVCAgICAgfCBVcmktUGF0aDog InRlbXBlcmF0dXJlIgogICAgICAgfCAgICAgICAgIHwKICAgICAgIHwgICAgICAgICB8CiAgICAg ICB8ICAgICAgICAgfAogICBGOiAgfDwtLS0tLS0tLSsgSGVhZGVyOiAyLjA1IENvbnRlbnQKICAg ICAgIHwgMi4wNSAgICB8IFBheWxvYWQ6IDxzZW5zb3IgdmFsdWU+CiAgICAgICB8ICAgICAgICAg fAoKICAgICAgICBGaWd1cmUgMTU6IFJlc291cmNlIFJlcXVlc3QgYW5kIFJlc3BvbnNlIHByb3Rl Y3RlZCBieSBEVExTLgoKRC4yLiAgSW50cm9zcGVjdGlvbiBBaWRlZCBUb2tlbiBWYWxpZGF0aW9u CgogICBJbiB0aGlzIGRlcGxveW1lbnQgc2NlbmFyaW8gd2UgYXNzdW1lIHRoYXQgYSBjbGllbnQg aXMgbm90IGJlIGFibGUgdG8KICAgYWNjZXNzIHRoZSBBUyBhdCB0aGUgdGltZSBvZiB0aGUgYWNj ZXNzIHJlcXVlc3QuICBTaW5jZSB0aGUgUlMgaXMsCiAgIGhvd2V2ZXIsIGNvbm5lY3RlZCB0byB0 aGUgYmFjay1lbmQgaW5mcmFzdHJ1Y3R1cmUgaXQgY2FuIG1ha2UgdXNlIG9mCiAgIHRva2VuIGlu dHJvc3BlY3Rpb24uICBUaGlzIGFjY2VzcyBwcm9jZWR1cmUgaW52b2x2ZXMgc3RlcHMgQS1GIG9m CiAgIEZpZ3VyZSAxLCBidXQgYXNzdW1lcyBzdGVwcyBBIGFuZCBCIGhhdmUgYmVlbiBjYXJyaWVk IG91dCBkdXJpbmcgYQogICBwaGFzZSB3aGVuIHRoZSBjbGllbnQgaGFkIGNvbm5lY3Rpdml0eSB0 byBBUy4KCgoKClNlaXR6LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBTZXB0ZW1iZXIgMjEsIDIw MTYgICAgICAgICAgICAgIFtQYWdlIDM3XQoMCkludGVybmV0LURyYWZ0ICAgICAgICAgT0F1dGgg Mi4wIElvVCBBdXRob3JpemF0aW9uICAgICAgICAgICAgTWFyY2ggMjAxNgoKCiAgIFNpbmNlIHRo ZSBjbGllbnQgaXMgYXNzdW1lZCB0byBiZSBvZmZsaW5lLCBhdCBsZWFzdCBmb3IgYSBjZXJ0YWlu CiAgIHBlcmlvZCBvZiB0aW1lLCBhIHByZS1wcm92aXNpb25lZCBhY2Nlc3MgdG9rZW4gaGFzIHRv IGJlIGxvbmctbGl2ZWQuCiAgIFRoZSByZXNvdXJjZSBzZXJ2ZXIgbWF5IHVzZSBpdHMgb25saW5l IGNvbm5lY3Rpdml0eSB0byB2YWxpZGF0ZSB0aGUKICAgYWNjZXNzIHRva2VuIHdpdGggdGhlIGF1 dGhvcml6YXRpb24gc2VydmVyLCB3aGljaCBpcyBzaG93biBpbiB0aGUKICAgZXhhbXBsZSBiZWxv dy4KCiAgIEluIHRoZSBleGFtcGxlIHdlIHNob3cgdGhlIGludGVyYWN0aW9ucyBiZXR3ZWVuIGFu IG9mZmxpbmUgY2xpZW50CiAgIChrZXkgZm9iKSwgYSByZXNvdXJjZSBzZXJ2ZXIgKG9ubGluZSBs b2NrKSwgYW5kIGFuIGF1dGhvcml6YXRpb24KICAgc2VydmVyLiAgV2UgYXNzdW1lIHRoYXQgdGhl cmUgaXMgYSBwcm92aXNpb25pbmcgc3RlcCB3aGVyZSB0aGUgY2xpZW50CiAgIGhhcyBhY2Nlc3Mg dG8gdGhlIEFTLiAgVGhpcyBjb3JyZXNwb25kcyB0byBtZXNzYWdlIGV4Y2hhbmdlcyBBIGFuZCBC CiAgIHdoaWNoIGFyZSBzaG93biBpbiBGaWd1cmUgMTYuCgogICBBdXRob3JpemF0aW9uIGNvbnNl bnQgZnJvbSB0aGUgcmVzb3VyY2Ugb3duZXIgY2FuIGJlIHByZS1jb25maWd1cmVkLAogICBidXQg aXQgY2FuIGFsc28gYmUgcHJvdmlkZWQgdmlhIGFuIGludGVyYWN0aXZlIGZsb3cgd2l0aCB0aGUg cmVzb3VyY2UKICAgb3duZXIuICBBbiBleGFtcGxlIG9mIHRoaXMgZm9yIHRoZSBrZXkgZm9iIGNh c2UgY291bGQgYmUgdGhhdCB0aGUKICAgcmVzb3VyY2Ugb3duZXIgaGFzIGEgY29ubmVjdGVkIGNh ciwgaGUgYnV5cyBhIGdlbmVyaWMga2V5IHRoYXQgaGUKICAgd2FudHMgdG8gdXNlIHdpdGggdGhl IGNhci4gIFRvIGF1dGhvcml6ZSB0aGUga2V5IGZvYiBoZSBjb25uZWN0cyBpdAogICB0byBoaXMg Y29tcHV0ZXIgdGhhdCB0aGVuIHByb3ZpZGVzIHRoZSBVSSBmb3IgdGhlIGRldmljZS4gIEFmdGVy IHRoYXQKICAgT0F1dGggMi4wIGltcGxpY2l0IGZsb3cgY2FuIHVzZWQgdG8gYXV0aG9yaXplIHRo ZSBrZXkgZm9yIGhpcyBjYXIgYXQKICAgdGhlIHRoZSBjYXIgbWFudWZhY3R1cmVycyBBUy4KCiAg IE5vdGU6IEluIHRoaXMgZXhhbXBsZSB0aGUgY2xpZW50IGRvZXMgbm90IGtub3cgdGhlIGV4YWN0 IGRvb3IgaXQgd2lsbAogICBiZSB1c2VkIHRvIGFjY2VzcyBzaW5jZSB0aGUgdG9rZW4gcmVxdWVz dCBpcyBub3Qgc2VuZCBhdCB0aGUgdGltZSBvZgogICBhY2Nlc3MuICBTbyB0aGUgc2NvcGUgYW5k IGF1ZGllbmNlIGNsYWltcyBpcyBzZXQgcXVpdGUgd2lkZSB0byBzdGFydAogICB3aXRoIGFuZCBu ZXcgdmFsdWVzIGRpZmZlcmVudCBmb3JtIHRoZSBvcmlnaW5hbCBvbmNlIGNhbiBiZSByZXR1cm5l ZAogICBmcm9tIGludHJvc3BlY3Rpb24gbGF0ZXIgb24uCgogICAgICBBOiBUaGUgY2xpZW50IHNl bmRzIHRoZSByZXF1ZXN0IHVzaW5nIFBPU1QgdG8gL3Rva2VuIGF0IEFTLiAgVGhlCiAgICAgIHJl cXVlc3QgY29udGFpbnMgdGhlIEF1ZGllbmNlIHBhcmFtZXRlciBzZXQgdG8gIlBBQ1MxMzM3IiAo UEFDUywKICAgICAgUGh5c2ljYWwgQWNjZXNzIFN5c3RlbSksIGEgdmFsdWUgdGhlIHRoYXQgdGhl IG9ubGluZSBkb29yIGluCiAgICAgIHF1ZXN0aW9uIGlkZW50aWZpZXMgaXRzZWxmIHdpdGguICBU aGUgQVMgZ2VuZXJhdGVzIGFuIGFjY2VzcyB0b2tlbgogICAgICBhcyBvbiBvcGFxdWUgc3RyaW5n LCB3aGljaCBpdCBjYW4gbWF0Y2ggdG8gdGhlIHNwZWNpZmljIGNsaWVudCwgYQogICAgICB0YXJn ZXRlZCBhdWRpZW5jZSBhbmQgYSBzeW1tZXRyaWMga2V5LgoKICAgICAgQjogVGhlIEFTIHJlc3Bv bmRzIHdpdGggdGhlIGFuIGFjY2VzcyB0b2tlbiBhbmQgY2xpZW50CiAgICAgIGluZm9ybWF0aW9u LCB0aGUgbGF0dGVyIGNvbnRhaW5pbmcgYSBzeW1tZXRyaWMga2V5LiAgQ29tbXVuaWNhdGlvbgog ICAgICBzZWN1cml0eSBiZXR3ZWVuIEMgYW5kIFJTIHdpbGwgYmUgRFRMUyBhbmQgUHJlU2hhcmVk S2V5LiAgVGhlIFBvUAogICAgICBrZXkgYmVpbmcgdXNlZCBhcyB0aGUgUHJlU2hhcmVkS2V5LgoK CgoKCgoKCgoKCgoKU2VpdHosIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIFNlcHRlbWJlciAyMSwg MjAxNiAgICAgICAgICAgICAgW1BhZ2UgMzhdCgwKSW50ZXJuZXQtRHJhZnQgICAgICAgICBPQXV0 aCAyLjAgSW9UIEF1dGhvcml6YXRpb24gICAgICAgICAgICBNYXJjaCAyMDE2CgoKICAgICAgICAg ICAgQXV0aG9yaXphdGlvbgogICAgQ2xpZW50ICAgICBTZXJ2ZXIKICAgICAgIHwgICAgICAgICB8 CiAgICAgICB8ICAgICAgICAgfAogICBBOiAgKy0tLS0tLS0tPnwgSGVhZGVyOiBQT1NUIChDb2Rl PTAuMDIpCiAgICAgICB8ICBQT1NUICAgfCBVcmktUGF0aDoidG9rZW4iCiAgICAgICB8ICAgICAg ICAgfCBDb250ZW50LVR5cGU6IGFwcGxpY2F0aW9uL2Nib3IKICAgICAgIHwgICAgICAgICB8IFBh eWxvYWQ6IDxSZXF1ZXN0LVBheWxvYWQ+CiAgICAgICB8ICAgICAgICAgfAogICBCOiAgfDwtLS0t LS0tLSsgSGVhZGVyOiAyLjA1IENvbnRlbnQKICAgICAgIHwgICAgICAgICB8IENvbnRlbnQtVHlw ZTogYXBwbGljYXRpb24vY2JvcgogICAgICAgfCAgMi4wNSAgIHwgUGF5bG9hZDogPFJlc3BvbnNl LVBheWxvYWQ+CiAgICAgICB8ICAgICAgICAgfAoKICAgICAgRmlndXJlIDE2OiBUb2tlbiBSZXF1 ZXN0IGFuZCBSZXNwb25zZSB1c2luZyBDbGllbnQgQ3JlZGVudGlhbHMuCgogICBUaGUgaW5mb3Jt YXRpb24gY29udGFpbmVkIGluIHRoZSBSZXF1ZXN0LVBheWxvYWQgYW5kIHRoZSBSZXNwb25zZS0K ICAgUGF5bG9hZCBpcyBzaG93biBpbiBGaWd1cmUgMTcuCgogICBSZXF1ZXN0LVBheWxvYWQ6CiAg IHsKICAgICAiZ3JhbnRfdHlwZSIgOiAiY2xpZW50X2NyZWRlbnRpYWxzIiwKICAgICAiYXVkIiA6 ICJsb2NrT2ZEb29yNDcxMSIsCiAgICAgImNsaWVudF9pZCIgOiAia2V5Zm9iIiwKICAgICAiY2xp ZW50X3NlY3JldCIgOiAicXdlcnR5IgogICB9CgogICBSZXNwb25zZS1QYXlsb2FkOgogICB7CiAg ICAgImFjY2Vzc190b2tlbiIgOiBiNjQnU2xBVjMyaGtLRyAuLi4nCiAgICAgInRva2VuX3R5cGUi IDogInBvcCIsCiAgICAgImNzcCIgOiAiRFRMUyIsCiAgICAgImtleSIgOiBiNjQnZXlKaGJHY2lP aUpTVTBFeFh6VWkgLi4uJwogICB9CgogICAgICAgICAgIEZpZ3VyZSAxNzogUmVxdWVzdCBhbmQg UmVzcG9uc2UgUGF5bG9hZCBmb3IgQyBvZmZsaW5lCgogICBUaGUgYWNjZXNzIHRva2VuIGluIHRo aXMgY2FzZSBpcyBqdXN0IGFuIG9wYXF1ZSBzdHJpbmcgcmVmZXJlbmNpbmcKICAgdGhlIGF1dGhv cml6YXRpb24gaW5mb3JtYXRpb24gYXQgdGhlIEFTLgoKICAgICAgQzogTmV4dCwgdGhlIGNsaWVu dCBQT1NUcyB0aGUgYWNjZXNzIHRva2VuIHRvIHRoZSAvYXV0aHotaW5mbwogICAgICByZXNvdXJj ZSBpbiB0aGUgUlMuICBUaGlzIGlzIGEgcGxhaW4gQ29BUCByZXF1ZXN0LCBpLmUuIG5vIERUTFMK ICAgICAgYmV0d2VlbiBjbGllbnQgYW5kIFJTLiAgU2luY2UgdGhlIHRva2VuIGlzIGFuIG9wYXF1 ZSBzdHJpbmcsIHRoZQogICAgICBSUyBjYW5ub3QgdmVyaWZ5IGl0IG9uIGl0cyBvd24sIGFuZCB0 aHVzIGRlZmVycyB0byByZXNwb25kIHRoZQogICAgICBjbGllbnQgd2l0aCBhIHN0YXR1cyBjb2Rl IHVudGlsIGFmdGVyIHN0ZXAgRS4KCiAgICAgIEQ6IFRoZSBSUyBmb3J3YXJkcyB0aGUgdG9rZW4g dG8gdGhlIC9pbnRyb3NwZWN0IHJlc291cmNlIG9uIHRoZQogICAgICBBUy4gIEludHJvc3BlY3Rp b24gYXNzdW1lcyBhIHNlY3VyZSBjb25uZWN0aW9uIGJldHdlZW4gdGhlIEFTIGFuZAoKCgpTZWl0 eiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgU2VwdGVtYmVyIDIxLCAyMDE2ICAgICAgICAgICAg ICBbUGFnZSAzOV0KDApJbnRlcm5ldC1EcmFmdCAgICAgICAgIE9BdXRoIDIuMCBJb1QgQXV0aG9y aXphdGlvbiAgICAgICAgICAgIE1hcmNoIDIwMTYKCgogICAgICB0aGUgUlMsIGUuZy4gdXNpbmcg dHJhbnNwb3J0IG9mIGFwcGxpY2F0aW9uIGxheWVyIHNlY3VyaXR5LCB3aGljaAogICAgICBpcyBu b3QgZGV0YWlsZWQgaW4gdGhpcyBleGFtcGxlLgoKICAgICAgRTogVGhlIEFTIHByb3ZpZGVzIHRo ZSBpbnRyb3NwZWN0aW9uIHJlc3BvbnNlIGNvbnRhaW5pbmcgY2xhaW1zCiAgICAgIGFib3V0IHRo ZSB0b2tlbi4gIFRoaXMgaW5jbHVkZXMgdGhlIGNvbmZpcm1hdGlvbiBrZXkgKGNuZikgY2xhaW0K ICAgICAgdGhhdCBhbGxvd3MgdGhlIFJTIHRvIHZlcmlmeSB0aGUgY2xpZW50J3MgcHJvb2Ygb2Yg cG9zc2Vzc2lvbiBpbgogICAgICBzdGVwIEYuCgogICAgICBBZnRlciByZWNlaXZpbmcgbWVzc2Fn ZSBFLCB0aGUgUlMgcmVzcG9uZHMgdG8gdGhlIGNsaWVudCdzIFBPU1QgaW4KICAgICAgc3RlcCBD IHdpdGggQ29kZSAyLjAxIENyZWF0ZWQuCgoKCiAgICAgICAgICAgICAgUmVzb3VyY2UKICAgICBD bGllbnQgICAgU2VydmVyCiAgICAgICB8ICAgICAgICAgfAogICBDOiAgKy0tLS0tLS0tPnwgSGVh ZGVyOiBQT1NUIChUPUNPTiwgQ29kZT0wLjAyKQogICAgICAgfCAgUE9TVCAgIHwgVXJpLVBhdGg6 ImF1dGh6LWluZm8iCiAgICAgICB8ICAgICAgICAgfCBDb250ZW50LVR5cGU6ICJhcHBsaWNhdGlv bi9jYm9yIgogICAgICAgfCAgICAgICAgIHwgUGF5bG9hZDogYjY0J1NsQVYzMmhrS0cgLi4uJycK ICAgICAgIHwgICAgICAgICB8CiAgICAgICB8ICAgICAgICAgfCAgICAgQXV0aG9yaXphdGlvbgog ICAgICAgfCAgICAgICAgIHwgICAgICAgU2VydmVyCiAgICAgICB8ICAgICAgICAgfCAgICAgICAg ICB8CiAgIEQ6ICB8ICAgICAgICAgKy0tLS0tLS0tLT58IEhlYWRlcjogUE9TVCAoQ29kZT0wLjAy KQogICAgICAgfCAgICAgICAgIHwgIFBPU1QgICAgfCBVcmktUGF0aDogImludHJvc3BlY3QiCiAg ICAgICB8ICAgICAgICAgfCAgICAgICAgICB8IENvbnRlbnQtVHlwZTogImFwcGxpY2F0aW9uL2Ni b3IiCiAgICAgICB8ICAgICAgICAgfCAgICAgICAgICB8IFBheWxvYWQ6IDxSZXF1ZXN0LVBheWxv YWQ+CiAgICAgICB8ICAgICAgICAgfCAgICAgICAgICB8CiAgIEU6ICB8ICAgICAgICAgfDwtLS0t LS0tLS0rIEhlYWRlcjogMi4wNSBDb250ZW50CiAgICAgICB8ICAgICAgICAgfCAgMi4wNSAgICB8 IENvbnRlbnQtVHlwZTogImFwcGxpY2F0aW9uL2Nib3IiCiAgICAgICB8ICAgICAgICAgfCAgICAg ICAgICB8IFBheWxvYWQ6IDxSZXNwb25zZS1QYXlsb2FkPgogICAgICAgfCAgICAgICAgIHwgICAg ICAgICAgfAogICAgICAgfCAgICAgICAgIHwKICAgQzogIHw8LS0tLS0tLS0rIEhlYWRlcjogMi4w MSBDcmVhdGVkCiAgICAgICB8ICAyLjAxICAgfAogICAgICAgfCAgICAgICAgIHwKCiAgICAgICAg ICAgICAgIEZpZ3VyZSAxODogVG9rZW4gSW50cm9zcGVjdGlvbiBmb3IgQyBvZmZsaW5lCgogICAg ICBUaGUgaW5mb3JtYXRpb24gY29udGFpbmVkIGluIHRoZSBSZXF1ZXN0LVBheWxvYWQgYW5kIHRo ZSBSZXNwb25zZS0KICAgICAgUGF5bG9hZCBpcyBzaG93biBpbiBGaWd1cmUgMTkuCgoKCgoKCgoK ClNlaXR6LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBTZXB0ZW1iZXIgMjEsIDIwMTYgICAgICAg ICAgICAgIFtQYWdlIDQwXQoMCkludGVybmV0LURyYWZ0ICAgICAgICAgT0F1dGggMi4wIElvVCBB dXRob3JpemF0aW9uICAgICAgICAgICAgTWFyY2ggMjAxNgoKCiAgIFJlcXVlc3QtUGF5bG9hZDoK ICAgewogICAgICJ0b2tlbiIgOiBiNjQnU2xBVjMyaGtLRy4uLicsCiAgICAgImNsaWVudF9pZCIg OiAiRnJvbnREb29yIiwKICAgICAiY2xpZW50X3NlY3JldCIgOiAieXRyZXdxIgogICB9CgogICBS ZXNwb25zZS1QYXlsb2FkOgogICB7CiAgICAgImFjdGl2ZSIgOiB0cnVlLAogICAgICJhdWQiIDog ImxvY2tPZkRvb3I0NzExIiwKICAgICAic2NvcGUiIDogIm9wZW4sIGNsb3NlIiwKICAgICAiaWF0 IiA6IDEzMTEyODA5NzAsCiAgICAgImNuZiIgOiB7CiAgICAgICAiY2siIDogYjY0J0pETFVoVE1q VTJJaXdpWTNSNUlqb2kgLi4uJwogICAgIH0KICAgfQoKICAgICAgICAgRmlndXJlIDE5OiBSZXF1 ZXN0IGFuZCBSZXNwb25zZSBQYXlsb2FkIGZvciBJbnRyb3NwZWN0aW9uCgogICAgICBUaGUgY2xp ZW50IHVzZXMgdGhlIHN5bW1ldHJpYyBQb1Aga2V5IHRvIGVzdGFibGlzaCBhIERUTFMKICAgICAg UHJlU2hhcmVkS2V5IHNlY3VyZSBjb25uZWN0aW9uIHRvIHRoZSBSUy4gIFRoZSBDb0FQIHJlcXVl c3QgUFVUIGlzCiAgICAgIHNlbnQgdG8gdGhlIHVyaS1wYXRoIC9zdGF0ZSBvbiBSUyBjaGFuZ2lu ZyBzdGF0ZSBvZiB0aGUgZG9vciB0bwogICAgICBsb2NrZWQuCgogICAgICBGOiBUaGUgUlMgcmVz cG9uZHMgd2l0aCBhIGFwcHJvcHJpYXRlIG92ZXIgdGhlIHNlY3VyZSBEVExTCiAgICAgIGNoYW5u ZWwuCgogICAgICAgICAgICAgIFJlc291cmNlCiAgICAgQ2xpZW50ICAgIFNlcnZlcgogICAgICAg fCAgICAgICAgIHwKICAgICAgIHw8PT09PT09PT58IERUTFMgQ29ubmVjdGlvbiBFc3RhYmxpc2ht ZW50CiAgICAgICB8ICAgICAgICAgfCAgIHVzaW5nIFByZSBTaGFyZWQgS2V5CiAgICAgICB8ICAg ICAgICAgfAogICAgICAgKy0tLS0tLS0tPnwgSGVhZGVyOiBQVVQgKENvZGU9MC4wMykKICAgICAg IHwgUFVUICAgICB8IFVyaS1QYXRoOiAic3RhdGUiCiAgICAgICB8ICAgICAgICAgfCBQYXlsb2Fk OiA8bmV3IHN0YXRlIGZvciB0aGUgbG9jaz4KICAgICAgIHwgICAgICAgICB8CiAgIEY6ICB8PC0t LS0tLS0tKyBIZWFkZXI6IDIuMDQgQ2hhbmdlZAogICAgICAgfCAyLjA0ICAgIHwgUGF5bG9hZDog PG5ldyBzdGF0ZSBmb3IgdGhlIGxvY2s+CiAgICAgICB8ICAgICAgICAgfAoKICAgICAgIEZpZ3Vy ZSAyMDogUmVzb3VyY2UgcmVxdWVzdCBhbmQgcmVzcG9uc2UgcHJvdGVjdGVkIGJ5IE9TQ09BUAoK CgoKCgoKClNlaXR6LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBTZXB0ZW1iZXIgMjEsIDIwMTYg ICAgICAgICAgICAgIFtQYWdlIDQxXQoMCkludGVybmV0LURyYWZ0ICAgICAgICAgT0F1dGggMi4w IElvVCBBdXRob3JpemF0aW9uICAgICAgICAgICAgTWFyY2ggMjAxNgoKCkFwcGVuZGl4IEUuICBE b2N1bWVudCBVcGRhdGVzCgpFLjEuICBWZXJzaW9uIC0wMCB0byAtMDEKCiAgIG8gIENoYW5nZWQg NS4xLiBmcm9tICJDb21tdW5pY2F0aW9uIFNlY3VyaXR5IFByb3RvY29sIiB0byAiQ2xpZW50CiAg ICAgIEluZm9ybWF0aW9uIi4KCiAgIG8gIE1ham9yIHJld3JpdGUgb2YgNS4xIHRvIGNsYXJpZnkg dGhlIGluZm9ybWF0aW9uIGV4Y2hhbmdlZCBiZXR3ZWVuCiAgICAgIEMgYW5kIEFTIGluIHRoZSBQ b1AgdG9rZW4gcmVxdWVzdCBwcm9maWxlIGZvciBJb1QuCgogICAgICAqICBBbGxvdyB0aGUgY2xp ZW50IHRvIGluZGljYXRlIHByZWZlcmVuY2VzIGZvciB0aGUgY29tbXVuaWNhdGlvbgogICAgICAg ICBzZWN1cml0eSBwcm90b2NvbC4KCiAgICAgICogIERlZmluZWQgdGhlIHRlcm0gIkNsaWVudCBJ bmZvcm1hdGlvbiIgZm9yIHRoZSBhZGRpdGlvbmFsCiAgICAgICAgIGluZm9ybWF0aW9uIHJldHVy bmVkIHRvIHRoZSBjbGllbnQgaW4gYWRkaXRpb24gdG8gdGhlIGFjY2VzcwogICAgICAgICB0b2tl bi4KCiAgICAgICogIFJlcXVpcmUgdGhhdCB0aGUgbWVzc2FnZXMgYmV0d2VlbiBBUyBhbmQgY2xp ZW50IGFyZSBzZWN1cmVkLAogICAgICAgICBlaXRoZXIgd2l0aCAoRClUTFMgb3Igd2l0aCBDT1NF X0VuY3J5cHRlZCB3cmFwcGVycy4KCiAgICAgICogIFJlbW92ZWQgZGVwZW5kZW5jeSBvbiBPU0Nv QVAgYW5kIGFkZGVkIGdlbmVyaWMgdGV4dCBhYm91dAogICAgICAgICBvYmplY3Qgc2VjdXJpdHkg aW5zdGVhZC4KCiAgICAgICogIERlZmluZWQgdGhlICJycGsiIHBhcmFtZXRlciBpbiB0aGUgY2xp ZW50IGluZm9ybWF0aW9uIHRvCiAgICAgICAgIHRyYW5zbWl0IHRoZSByYXcgcHVibGljIGtleSBv ZiB0aGUgUlMgZnJvbSBBUyB0byBjbGllbnQuCgogICAgICAqICAoRClUTFMgTVVTVCB1c2UgdGhl IFBvUCBrZXkgaW4gdGhlIGhhbmRzaGFrZSAoZWl0aGVyIGFzIFBTSyBvcgogICAgICAgICBhcyBj bGllbnQgUlBLIHdpdGggY2xpZW50IGF1dGhlbnRpY2F0aW9uKS4KCiAgICAgICogIERlZmluZWQg dGhlIHVzZSBvZiB4NWMsIHg1dCBhbmQgeDV0UzI1NiBwYXJhbWV0ZXJzIHdoZW4gYQogICAgICAg ICBjbGllbnQgY2VydGlmaWNhdGUgaXMgdXNlZCBmb3IgcHJvb2Ygb2YgcG9zc2Vzc2lvbi4KCiAg ICAgICogIERlZmluZWQgInRrdG4iIHBhcmFtZXRlciBmb3Igc2lnbmFsaW5nIGZvciBob3cgdG8g dHJhbmZlciB0aGUKICAgICAgICAgYWNjZXNzIHRva2VuLgoKICAgbyAgQWRkZWQgNS4yLiB0aGUg Q29BUCBBY2Nlc3MtVG9rZW4gb3B0aW9uIGZvciB0cmFuc2ZlcmluZyBhY2Nlc3MKICAgICAgdG9r ZW5zIGluIG1lc3NhZ2VzIHRoYXQgZG8gbm90IGhhdmUgcGF5bG9hZC4KCiAgIG8gIDUuMy4yLiAg RGVmaW5lZCBzdWNjZXNzIGFuZCBlcnJvciByZXNwb25zZXMgZnJvbSB0aGUgUlMgd2hlbgogICAg ICByZWNlaXZpbmcgYW4gYWNjZXNzIHRva2VuLgoKICAgbyAgNS42LjpBZGRlZCBzZWN0aW9uIGdp dmluZyBndWlkYW5jZSBvbiBob3cgdG8gaGFuZGxlIHRva2VuCiAgICAgIGV4cGlyYXRpb24gaW4g dGhlIGFic2VuY2Ugb2YgcmVsaWFibGUgdGltZS4KCiAgIG8gIEFwcGVuZGl4IEIgQWRkZWQgbGlz dCBvZiByb2xlcyBhbmQgcmVzcG9uc2liaWxpdGllcyBmb3IgQywgQVMgYW5kCiAgICAgIFJTLgoK CgoKClNlaXR6LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBTZXB0ZW1iZXIgMjEsIDIwMTYgICAg ICAgICAgICAgIFtQYWdlIDQyXQoMCkludGVybmV0LURyYWZ0ICAgICAgICAgT0F1dGggMi4wIElv VCBBdXRob3JpemF0aW9uICAgICAgICAgICAgTWFyY2ggMjAxNgoKCkF1dGhvcnMnIEFkZHJlc3Nl cwoKICAgTHVkd2lnIFNlaXR6CiAgIFNJQ1MKICAgU2NoZWVsZXZhZWdlbiAxNwogICBMdW5kICAy MjMgNzAKICAgU1dFREVOCgogICBFbWFpbDogbHVkd2lnQHNpY3Muc2UKCgogICBHb2VyYW4gU2Vs YW5kZXIKICAgRXJpY3Nzb24KICAgRmFyb2VnYXRhbiA2CiAgIEtpc3RhICAxNjQgODAKICAgU1dF REVOCgogICBFbWFpbDogZ29yYW4uc2VsYW5kZXJAZXJpY3Nzb24uY29tCgoKICAgRXJpayBXYWhs c3Ryb2VtCiAgIE5leHVzIFRlY2hub2xvZ3kKICAgVGVsZWZvbnZhZ2VuIDI2CiAgIEhhZ2Vyc3Rl biAgMTI2IDI2CiAgIFN3ZWRlbgoKICAgRW1haWw6IGVyaWsud2FobHN0cm9tQG5leHVzZ3JvdXAu Y29tCgoKICAgU2FtdWVsIEVyZHRtYW4KICAgTmV4dXMgVGVjaG5vbG9neQogICBUZWxlZm9udmFn ZW4gMjYKICAgSGFnZXJzdGVuICAxMjYgMjYKICAgU3dlZGVuCgogICBFbWFpbDogc2FtdWVsLmVy ZHRtYW5AbmV4dXNncm91cC5jb20KCgogICBIYW5uZXMgVHNjaG9mZW5pZwogICBBUk0gTHRkLgog ICBIYWxsIGluIFRpcm9sICA2MDYwCiAgIEF1c3RyaWEKCiAgIEVtYWlsOiBIYW5uZXMuVHNjaG9m ZW5pZ0Bhcm0uY29tCgoKCgoKCgpTZWl0eiwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgU2VwdGVt YmVyIDIxLCAyMDE2ICAgICAgICAgICAgICBbUGFnZSA0M10K --001a114402bea29aaf052e81ec3a-- From nobody Mon Mar 21 13:05:16 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 820F112DB19 for ; Mon, 21 Mar 2016 13:05:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.602 X-Spam-Level: X-Spam-Status: No, score=-2.602 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H2=-0.001, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4xiGEKyZ3ktM for ; Mon, 21 Mar 2016 13:05:13 -0700 (PDT) Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 795B212DB17 for ; Mon, 21 Mar 2016 13:05:12 -0700 (PDT) Received: from [192.168.10.140] ([94.79.182.6]) by mail.gmx.com (mrgmx002) with ESMTPSA (Nemesis) id 0MNq4h-1agi5v3UJX-007Qum for ; Mon, 21 Mar 2016 21:05:10 +0100 To: "Ace@ietf.org" From: Hannes Tschofenig Openpgp: id=071A97A9ECBADCA8E31E678554D9CEEF4D776BC9 Message-ID: <56F053F4.1080601@gmx.net> Date: Mon, 21 Mar 2016 21:05:08 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="hA4p1MNi2TWTbnDuv5Lu7HC0ogIsdOTMH" X-Provags-ID: V03:K0:S6eBBM9sdRzG7IiO0lvlMHXmwQc5/YiCv0vkfnX10AXGIUe4Beo KU6HPrttjrLj+4Bd67LJv8l6dhxbOdy4YAr4fpxAmhrK9easOBX8lBv0Zpqyfu3QBFP5U/B 7lbDLS33mmF4u6mF4Rl/YTwbb2kpeXmXNXKqwCouLf8y+rfM8H7pPnegWU2qwIc6PdwPoD6 T2mfvLe4tnpCxSzIdXNPQ== X-UI-Out-Filterresults: notjunk:1;V01:K0:6M9O9sthdb8=:n8QSfqcdbAvgAM6cUUBfaF 91iMsHkEPcvR14ho7/PEKf1j9ST6pE0uLPbQW+FDhrwvn1VfcR3IAkFtcRtuRnaoVgjAx5bmv eMndotCC4RtaaDyf3hD2Gtlpj1MS1235VDeIMxlignsx8VXiFsQBcX+tbvse9GptgOWMT4D2l /gFyWHbQfC182ORd5pN0xTOSGuMUv7U9TUYevKC8CzTkFRtJfDWXBJq5aEBLkBgQftcg66Ckk dyr58kWfn474PKJbxhVdHepO20VrV9VMYCb5aUgURuCUWdSJmABTcBlKe60mZ8qA/9SxNswLY UdWswhRWp6gZco5L0XDWOb7PhxZSK/Ld3nrAJy+DWUNFYlnSU3opQUr225LULmXN1/dHNXrKy 0zM9GWQ9vMCglhp9SJHPSmYaFHmAIIkdJ/4rOaGv4zNlt5ddLf042IU5ahdom/YmHD+//OpVw +glYGDAosvrHzpuu3bedh5TxAoQ3fYy8Ax61mAlJLDNaTB4sKpzXlN/eXviKdBhvY69CsM0ns bn5rAcWq1twLawf+Rt0ODVsuBxr+12GMoj8dlqKr2wMKFKzX0RgjLQ97+kveHmfzUgmWlkuJm Jo/iehqEMDtcxGCXtRMB8f43KylOJH9+cDm9aukg1QX7ftch5cORkpZvkDNSXvraqZ/e+MPwp fMrSV39TTNzpAx/lZb0IMRqkR0dRQ3pWavI1wlpH7n14VA8g0JVezzusxqWciQ/KdtD7E3b7Z tcb7rr6AvR1MDfAhlu9qMG2YtMlxrXXI6MEwV44oyD0YB3W9wQXy34E7VlE= Archived-At: Subject: [Ace] Agenda Proposal X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Mar 2016 20:05:14 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --hA4p1MNi2TWTbnDuv5Lu7HC0ogIsdOTMH Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi all, here is a proposal for the agenda of the upcoming meeting: ------- IETF 95 ACE Meeting Agenda Monday, 10:00-12:30=09 Chairs: Kepeng Li/Hannes Tschofenig * Status Update (Hannes, 5 min) * Actors (Carsten Bormann, 15 min) http://datatracker.ietf.org/doc/draft-ietf-ace-actors/ * Authorization for the Internet of Things using OAuth 2.0 (Goeran, 80 mi= n) * CBOR Web Token (Mike, 15 min) https://datatracker.ietf.org/doc/draft-wahlstroem-ace-cbor-web-token/ * Security for Low-Latency Group Communication (Sandeep, 30 min) https://datatracker.ietf.org/doc/draft-somaraju-ace-multicast/ * Wrap-up (Hannes, 5 min) ------- The latest version can be found at: https://www.ietf.org/proceedings/95/agenda/agenda-95-ace Ciao Hannes & Kepeng --hA4p1MNi2TWTbnDuv5Lu7HC0ogIsdOTMH Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJW8FP0AAoJEGhJURNOOiAtBVsH/j/W/KpD/4k3l7VG0w9DAng7 vh6JWBasvUI/SAbcUMfvia/WgmMr6aLUcVB0ZsfWB56wZ19fuhUor7BgjSqaNyn8 SVX+9Ox4fK+wTQ2FOaO5JqmCHuS9K96Dnfu1kbiz1fRcJF93WnaFGB15eI/qTh54 JfL50OyzPbqU+fOkIebSytKtiADE+E58pxZ78/H6Oh2ZnIlOUzmujXmqewLS7HsE KFpXFJG/95KN1VylXRYkIgJ/GBw3dx1XWmEyzDTtAtQnWChAHNKZsZ9dNW1E8oAB 0TONz0xqthiKfhdiq7AH7gu1jwS1e3cJKRslph5m+KdPIcxQsb4C11v2kjjdyMQ= =x1qr -----END PGP SIGNATURE----- --hA4p1MNi2TWTbnDuv5Lu7HC0ogIsdOTMH-- From nobody Wed Mar 23 00:25:47 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7BE5512D695; Wed, 23 Mar 2016 00:25:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.221 X-Spam-Level: X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DZLlZoYjKdhV; Wed, 23 Mar 2016 00:25:42 -0700 (PDT) Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 56BEE12D691; Wed, 23 Mar 2016 00:25:41 -0700 (PDT) X-AuditID: c1b4fb25-f79f86d00000400a-a8-56f244f3d44d Received: from ESESSHC009.ericsson.se (Unknown_Domain [153.88.183.45]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id 98.61.16394.3F442F65; Wed, 23 Mar 2016 08:25:39 +0100 (CET) Received: from ESESSMB303.ericsson.se ([169.254.3.117]) by ESESSHC009.ericsson.se ([153.88.183.45]) with mapi id 14.03.0248.002; Wed, 23 Mar 2016 08:25:39 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: "core@ietf.org" , "cose@ietf.org" , "Ace@ietf.org" Thread-Topic: New Version Notification for draft-selander-ace-object-security-04.txt Thread-Index: AQHRg6KwEZzPkdXlwU+r10cfDXqI5p9moxoA Date: Wed, 23 Mar 2016 07:25:38 +0000 Message-ID: References: <20160321185131.12223.78205.idtracker@ietfa.amsl.com> In-Reply-To: <20160321185131.12223.78205.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.1.160122 x-originating-ip: [153.88.183.147] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprLIsWRmVeSWpSXmKPExsUyM2K7ru5nl09hBh/v6Fp8/9bDbLHv7Xpm i2lbp7I6MHssWfKTKYAxissmJTUnsyy1SN8ugStjwvEfjAVrJCqW7jjL3sB4R7yLkZNDQsBE ovHLASYIW0ziwr31bF2MXBxCAocZJdbP/8cOkhASWMIo0XNMBMRmE3CReNDwCKxBRCBV4sWF zYwgtrBAqMTf39fZIeJhEn8O7YaqMZJo3HgcrIZFQFXiyK7lrCA2r4CFxI8F3WwQ8x0lLt7e wwJicwo4SVx6dxeshhHooO+n1oDNYRYQl7j1ZD7UoQISS/acZ4awRSVePv4HVi8qoCdxu2Mt 0A0cQHEliWlb00BMZgFNifW79CGmWEvsf76JGcJWlJjS/ZAd4hpBiZMzn7BMYBSfhWTZLITu WUi6ZyHpnoWkewEj6ypG0eLU4qTcdCNjvdSizOTi4vw8vbzUkk2MwEg7uOW36g7Gy28cDzEK cDAq8fAWnPsYJsSaWFZcmXuIUYKDWUmEN0r1U5gQb0piZVVqUX58UWlOavEhRmkOFiVxXtZP l8OEBNITS1KzU1MLUotgskwcnFINjHaX1S5fXrm8+ZLhyuznPleXdMqU3RR96WZeN9/DrMVT Rcc2SO+lh0XtRnNOo2WXtr2MFAl97fK9ZZPvRjbG+E0/8lg+nvRNdqjUeff21ILnd4WW/FT4 4Xp3RYbrDZXFLWHXGL2PJ1XyGwtec5RheFeZJ+03g1ng9upLtecZdaYa/0018eZcpMRSnJFo qMVcVJwIAPWRihOwAgAA Archived-At: Subject: [Ace] FW: New Version Notification for draft-selander-ace-object-security-04.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Mar 2016 07:25:43 -0000 RGVhciBDb1JFLCBDT1NFIGFuZCBBQ0UgV0dzLA0KDQpXZSBoYXZlIHN1Ym1pdHRlZCBhbiB1cGRh dGVkIHZlcnNpb24gb2YgT1NDT0FQLg0KDQpGb3IgdGhvc2Ugd2hvIGRvbuKAmXQga25vdywgT1ND T0FQIGlzIGFuIGFwcGxpY2F0aW9uIGxheWVyIHNlY3VyaXR5IHByb3RvY29sDQpmb3IgQ29BUCwg YmFzZWQgb24gd3JhcHBpbmcgcmVxdWVzdCBhbmQgcmVzcG9uc2UgbWVzc2FnZXMgaW4gQ09TRSBv YmplY3RzDQp3aGljaCBhcmUgc2VudCBpbiBhIENvQVAgbWVzc2FnZSBleGNoYW5nZS4NCg0KVGhl IGRyYWZ0IGlzIGVzc2VudGlhbGx5IHJld3JpdHRlbiBidXQgbWFueSBjb21wb25lbnRzIGFyZSB1 bmNoYW5nZWQgc2luY2UNCi0wMy4gVGhlIHJlcXVpcmVtZW50cyBmb3IgZW5kLXRvLWVuZCBzZWN1 cml0eSBhcmUgcmVwbGFjZWQgYnkgdGhlIHJlY2VudGx5DQphbm5vdW5jZWQgZHJhZnQgb24gdGhl IENvUkUgbGlzdCBbMV0uIFRoZSBhZG9wdGlvbiBvZiBDT1NFIGlzIG5vdw0KY29tcGxldGVkLg0K DQpXZSB3b3VsZCBsaWtlIHByZXNlbnQgdGhpcyBhdCB0aGUgQ29SRSBXRyBtZWV0aW5nLCBhbmQg YWxzbyBhIHNob3J0IHNsb3QNCmF0IHRoZSBDT1NFIFdHIG1lZXRpbmcuDQoNClJlZ2FyZHMsDQpH w7ZyYW4NCg0KDQpbMV0gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWhhcnRrZS1j b3JlLWUyZS1zZWN1cml0eS1yZXFzDQoNCg0KDQpPbiAyMDE2LTAzLTIxIDE5OjUxLCAiaW50ZXJu ZXQtZHJhZnRzQGlldGYub3JnIiA8aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnPg0Kd3JvdGU6DQoN Cj4NCj5BIG5ldyB2ZXJzaW9uIG9mIEktRCwgZHJhZnQtc2VsYW5kZXItYWNlLW9iamVjdC1zZWN1 cml0eS0wNC50eHQNCj5oYXMgYmVlbiBzdWNjZXNzZnVsbHkgc3VibWl0dGVkIGJ5IEdvZXJhbiBT ZWxhbmRlciBhbmQgcG9zdGVkIHRvIHRoZQ0KPklFVEYgcmVwb3NpdG9yeS4NCj4NCj5OYW1lOgkJ ZHJhZnQtc2VsYW5kZXItYWNlLW9iamVjdC1zZWN1cml0eQ0KPlJldmlzaW9uOgkwNA0KPlRpdGxl OgkJT2JqZWN0IFNlY3VyaXR5IG9mIENvQVAgKE9TQ09BUCkNCj5Eb2N1bWVudCBkYXRlOgkyMDE2 LTAzLTIxDQo+R3JvdXA6CQlJbmRpdmlkdWFsIFN1Ym1pc3Npb24NCj5QYWdlczoJCTM0DQo+VVJM OiAgICAgICAgICAgIA0KPmh0dHBzOi8vd3d3LmlldGYub3JnL2ludGVybmV0LWRyYWZ0cy9kcmFm dC1zZWxhbmRlci1hY2Utb2JqZWN0LXNlY3VyaXR5LTA0DQo+LnR4dA0KPlN0YXR1czogICAgICAg ICANCj5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1zZWxhbmRlci1hY2Ut b2JqZWN0LXNlY3VyaXR5Lw0KPkh0bWxpemVkOiAgICAgICANCj5odHRwczovL3Rvb2xzLmlldGYu b3JnL2h0bWwvZHJhZnQtc2VsYW5kZXItYWNlLW9iamVjdC1zZWN1cml0eS0wNA0KPkRpZmY6ICAg ICAgICAgICANCj5odHRwczovL3d3dy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtc2VsYW5k ZXItYWNlLW9iamVjdC1zZWN1cml0eS0wNA0KPg0KPkFic3RyYWN0Og0KPiAgIFRoaXMgbWVtbyBk ZWZpbmVzIE9iamVjdCBTZWN1cml0eSBvZiBDb0FQIChPU0NPQVApLCBhIG1ldGhvZCBmb3INCj4g ICBhcHBsaWNhdGlvbiBsYXllciBwcm90ZWN0aW9uIG9mIG1lc3NhZ2UgZXhjaGFuZ2VzIHdpdGgg dGhlDQo+ICAgQ29uc3RyYWluZWQgQXBwbGljYXRpb24gUHJvdG9jb2wgKENvQVApLCB1c2luZyB0 aGUgQ0JPUiBFbmNvZGVkDQo+ICAgTWVzc2FnZSBTeW50YXguICBPU0NPQVAgcHJvdmlkZXMgZW5k LXRvLWVuZCBlbmNyeXB0aW9uLCBpbnRlZ3JpdHkgYW5kDQo+ICAgcmVwbGF5IHByb3RlY3Rpb24g dG8gQ29BUCBwYXlsb2FkLCBvcHRpb25zLCBhbmQgaGVhZGVyIGZpZWxkcywgYXMNCj4gICB3ZWxs IGFzIGEgc2VjdXJlIGJpbmRpbmcgYmV0d2VlbiBDb0FQIHJlcXVlc3QgYW5kIHJlc3BvbnNlIG1l c3NhZ2VzLg0KPiAgIFRoZSB1c2Ugb2YgT1NDT0FQIGlzIHNpZ25hbGVkIHdpdGggdGhlIENvQVAg b3B0aW9uIE9iamVjdC1TZWN1cml0eSwNCj4gICBhbHNvIGRlZmluZWQgaW4gdGhpcyBtZW1vLg0K Pg0KPiAgICAgICAgICAgICAgICAgIA0KPiAgICAgICAgDQo+DQo+DQo+UGxlYXNlIG5vdGUgdGhh dCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51dGVzIGZyb20gdGhlIHRpbWUgb2YNCj5zdWJt aXNzaW9uDQo+dW50aWwgdGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJs ZSBhdCB0b29scy5pZXRmLm9yZy4NCj4NCj5UaGUgSUVURiBTZWNyZXRhcmlhdA0KPg0KDQo= From nobody Wed Mar 23 00:32:13 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2015D12D6E7; Wed, 23 Mar 2016 00:32:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RI5DVwZDwuDC; Wed, 23 Mar 2016 00:32:11 -0700 (PDT) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A8E8A12D67A; Wed, 23 Mar 2016 00:32:09 -0700 (PDT) X-AuditID: c1b4fb3a-f79d86d000005b69-19-56f246773aa5 Received: from ESESSHC021.ericsson.se (Unknown_Domain [153.88.183.81]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id 8D.39.23401.77642F65; Wed, 23 Mar 2016 08:32:08 +0100 (CET) Received: from ESESSMB303.ericsson.se ([169.254.3.117]) by ESESSHC021.ericsson.se ([153.88.183.81]) with mapi id 14.03.0248.002; Wed, 23 Mar 2016 08:32:07 +0100 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: "cose@ietf.org" , "Ace@ietf.org" Thread-Topic: New Version Notification for draft-selander-ace-cose-ecdhe-00.txt Thread-Index: AQHRg5LDTDZH2vOr70ybhzVuK54fPp9mpQyA Date: Wed, 23 Mar 2016 07:32:06 +0000 Message-ID: References: <20160321165731.31915.97138.idtracker@ietfa.amsl.com> In-Reply-To: <20160321165731.31915.97138.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.6.1.160122 x-originating-ip: [153.88.183.18] Content-Type: text/plain; charset="utf-8" Content-ID: <06D7EE3C7615FE4FAB357F234D03C6CA@ericsson.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprJIsWRmVeSWpSXmKPExsUyM2J7oG6F26cwgyPL2C2+f+thtpi2dSqr A5PHkiU/mQIYo7hsUlJzMstSi/TtErgyWj9/ZSn4JFzRs/sCWwPjBuEuRk4OCQETiZPPJjFC 2GISF+6tZ+ti5OIQEjjMKDG3/QQLhLOEUWLCy8WsIFVsAi4SDxoeMXUxcnCICDhJ/D2rCxIW FgiQmPTqHxOILSIQKPFx8yJ2CNtI4mjHdrBWFgFViXmbF4Mt4xWwkJj1cyKYLSTgKLHn0Ec2 EJsTaOSM9TfA4oxAB30/tQZsJrOAuMStJ/OZIA4VkFiy5zwzhC0q8fLxP7D5ogJ6Erc71rJD xBUlPr7axwhyJrOApsT6XfoQY6wlNkydCTVSUWJK90N2iHMEJU7OfMIygVF8FpJtsxC6ZyHp noWkexaS7gWMrKsYRYtTi4tz042M9FKLMpOLi/Pz9PJSSzYxAiPs4JbfVjsYDz53PMQowMGo xMNbcO5jmBBrYllxZe4hRgkOZiUR3ijVT2FCvCmJlVWpRfnxRaU5qcWHGKU5WJTEedk+XQ4T EkhPLEnNTk0tSC2CyTJxcEo1MLqwrAtuasqY7fEz49oNAd2b6cUr3+/tZWnxbd4jdiRuy93X Lv8m/ReyfqBzqYdz5vPbQownGR7d8Xtxrvp0hDdDTvPO9knxvy8FTc2xci9SZFoSIOOwzPzC 9OCUs5p3Zax61yuF/v0R8N1X7Kfnr3j5k5nMFz4/Ya4yEWS4dEcrrC7d1ig/VYmlOCPRUIu5 qDgRAO9tKvusAgAA Archived-At: Subject: [Ace] FW: New Version Notification for draft-selander-ace-cose-ecdhe-00.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Mar 2016 07:32:13 -0000 RGVhciBDT1NFIGFuZCBBQ0UsDQoNCldlIGhhdmUgc3VibWl0dGVkIGEgZHJhZnQgb24gZXBoZW1l cmFsLWVwaGVtZXJhbCBEaWZmaWUtSGVsbG1hbiBrZXkNCmV4Y2hhbmdlIGVtYmVkZGVkIGluIENP U0Ugb2JqZWN0cy4NCg0KVHdvIHZlcnNpb25zIGFyZSBwcmVzZW50ZWQsIG9uZSBhdXRoZW50aWNh dGVkIHdpdGggcHJlLXNoYXJlZCBrZXlzLCBhbmQNCm9uZSBhdXRoZW50aWNhdGVkIHdpdGggc3Rh dGljIEVDREggcHVibGljIGtleXMuIFRoZSBrZXlzIHVzZWQgdG8NCmF1dGhlbnRpY2F0ZSB0aGUg REgtZXhjaGFuZ2UgY2FuIGJlIG9idGFpbmVkIGFzIGRlZmluZWQgaW4gdGhlIEFDRQ0Kc29sdXRp b24uIA0KDQpJbiB0aGUgYXBwZW5kaWNlcyB3ZSBpbmRpY2F0ZSBob3cgdGhlIERIIGtleSBleGNo YW5nZSBjYW4gYmUgZW1iZWRkZWQgaW4gYQ0KQ29BUCByZXF1ZXN0LXJlc3BvbnNlLCBhbmQgaW4g cGFydGljdWxhciBpbiB0aGUgc2FtZSBDb0FQIG1lc3NhZ2UgZXhjaGFuZ2UNCndoaWNoIHByb3Zp ZGVzIHRoZSBhY2Nlc3MgdG9rZW4gdG8gdGhlIHJlc291cmNlIHNlcnZlciBpbiB0aGUgQUNFDQpz b2x1dGlvbi4gV2UgYWxzbyBzaG93IGhvdyB0byBkZXJpdmUgT1NDT0FQIHNlY3VyaXR5IGNvbnRl eHQgZnJvbSB0aGUgREgNCnNoYXJlZCBzZWNyZXQuDQoNCldlIHdvdWxkIGxpa2UgdG8gZGlzY3Vz cyB0aGUgQ09TRSBhc3BlY3RzIG9mIHRoaXMgZHJhZnQgaW4gdGhlIENPU0UgV0cNCm1lZXRpbmcu DQoNCg0KUmVnYXJkcw0KR8O2cmFuDQoNCg0KDQoNCg0KT24gMjAxNi0wMy0yMSAxNzo1NywgImlu dGVybmV0LWRyYWZ0c0BpZXRmLm9yZyIgPGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZz4NCndyb3Rl Og0KDQo+DQo+QSBuZXcgdmVyc2lvbiBvZiBJLUQsIGRyYWZ0LXNlbGFuZGVyLWFjZS1jb3NlLWVj ZGhlLTAwLnR4dA0KPmhhcyBiZWVuIHN1Y2Nlc3NmdWxseSBzdWJtaXR0ZWQgYnkgR29lcmFuIFNl bGFuZGVyIGFuZCBwb3N0ZWQgdG8gdGhlDQo+SUVURiByZXBvc2l0b3J5Lg0KPg0KPk5hbWU6CQlk cmFmdC1zZWxhbmRlci1hY2UtY29zZS1lY2RoZQ0KPlJldmlzaW9uOgkwMA0KPlRpdGxlOgkJRXBo ZW1lcmFsIERpZmZpZS1IZWxsbWFuIE92ZXIgQ09TRSAoRURIT0MpDQo+RG9jdW1lbnQgZGF0ZToJ MjAxNi0wMy0yMQ0KPkdyb3VwOgkJSW5kaXZpZHVhbCBTdWJtaXNzaW9uDQo+UGFnZXM6CQkxOQ0K PlVSTDogICAgICAgICAgICANCj5odHRwczovL3d3dy5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMv ZHJhZnQtc2VsYW5kZXItYWNlLWNvc2UtZWNkaGUtMDAudHh0DQo+U3RhdHVzOiAgICAgICAgIA0K Pmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LXNlbGFuZGVyLWFjZS1jb3Nl LWVjZGhlLw0KPkh0bWxpemVkOiAgICAgICANCj5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwv ZHJhZnQtc2VsYW5kZXItYWNlLWNvc2UtZWNkaGUtMDANCj4NCj4NCj5BYnN0cmFjdDoNCj4gICBU aGlzIGRvY3VtZW50IHNwZWNpZmllcyB0aGUgRGlmZmllLUhlbGxtYW4ga2V5IGV4Y2hhbmdlIHdp dGgNCj4gICBlcGhlbWVyYWwga2V5cyBlbWJlZGRlZCBpbiBtZXNzYWdlcyBlbmNvZGVkIHdpdGgg dGhlIENCT1IgRW5jb2RlZA0KPiAgIE1lc3NhZ2UgU3ludGF4Lg0KPg0KPiAgICAgICAgICAgICAg ICAgIA0KPiAgICAgICAgDQo+DQo+DQo+UGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNv dXBsZSBvZiBtaW51dGVzIGZyb20gdGhlIHRpbWUgb2YNCj5zdWJtaXNzaW9uDQo+dW50aWwgdGhl IGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0b29scy5pZXRmLm9y Zy4NCj4NCj5UaGUgSUVURiBTZWNyZXRhcmlhdA0KPg0KDQo= From nobody Sun Mar 27 03:53:31 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2986112D154 for ; Sun, 27 Mar 2016 03:53:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=erdtman-se.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id giOHURApss90 for ; Sun, 27 Mar 2016 03:53:27 -0700 (PDT) Received: from mail-vk0-x232.google.com (mail-vk0-x232.google.com [IPv6:2607:f8b0:400c:c05::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B948A12D158 for ; Sun, 27 Mar 2016 03:53:27 -0700 (PDT) Received: by mail-vk0-x232.google.com with SMTP id e6so129489752vkh.2 for ; Sun, 27 Mar 2016 03:53:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=erdtman-se.20150623.gappssmtp.com; s=20150623; h=mime-version:date:message-id:subject:from:to; bh=bf5pr4cW6x5jSKkUISF1XCv6GiiMItf3ucQXd8hQJrk=; b=tGrDLmq3ISyPXuQ459oYERg0JSVAIaBGdQzZS8f+Of9gPTcl5FR+A64Gy2YAJPLJws fCSavb6MYMQsHJZ7HMJMk5e7Fcu/au/Nct9jbZ4D2uOGFvCCEJRYXhcH5XJYgdVQ9Evf KwdY4Ewaj+ETX8Qb1RPKLZ6y8izhwyZl6b0J1pIC8G7B1DVywbQ2fvRLTFvB/HCCutm0 0zPx0L0UxFVHvfQPCIiWEKtB/K9i9DQJZpBFfi2Hm86Jo8dEWcKmEugWb8qKe8/z5Idn X4xJjBvZai8MisHYK3OyVaUnbqwIFevENbjW31H/y0pK2Y+8dCTGgi1MX9ot/LIKqCSq JpmA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:date:message-id:subject:from:to; bh=bf5pr4cW6x5jSKkUISF1XCv6GiiMItf3ucQXd8hQJrk=; b=g+pZCKce6NttY98NVBBfuvwE9iHfVUjc8oXjchRCGTFM4hUNRS+f3zEaNPELkzGMJq hClYQGxKa7fxlS5FlKDHtGUEz4SmpFnW4lf2jXi1AVeGe2PH+rtmcgJ9CZRy2haf2CUn DxvSP5W14RjzJ7NeED8uvX77C0Hn635Pdhvq2Y+2cq+5tKus22+SPbNMChe5j1m5G8ft gGB+tuAVm3h71Qi5wOYROiXrS/rJAPT6LQn8dABYHVC/1kO9smHUoHPlAxLsPexSWyVq SNWduhVDAkNnxIAbQJsedwOM3+O8jlpN6RgVscWlaZdPgy+VCmn+qrhAz8pByTCoftrJ rQqQ== X-Gm-Message-State: AD7BkJKpghk/nvdynWIBjFkyp+7NpCgpv0v17rVZK7K2Jvoemid91Sl099xoMvbVFZn/tAcl9d70qDSYvrlnEA== MIME-Version: 1.0 X-Received: by 10.176.0.20 with SMTP id 20mr11334636uai.17.1459076006435; Sun, 27 Mar 2016 03:53:26 -0700 (PDT) Received: by 10.176.1.182 with HTTP; Sun, 27 Mar 2016 03:53:26 -0700 (PDT) Date: Sun, 27 Mar 2016 12:53:26 +0200 Message-ID: From: Samuel Erdtman To: Ace@ietf.org, Michael Jones , =?UTF-8?Q?Erik_Wahlstr=C3=B6m?= Content-Type: multipart/alternative; boundary=001a113d0f3210743d052f059b19 Archived-At: Subject: [Ace] CWT registry for claim keys X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Mar 2016 10:53:30 -0000 --001a113d0f3210743d052f059b19 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi, CWT (https://tools.ietf.org/html/draft-wahlstroem-ace-cbor-web-token-00) does a great job of mapping JWT from JSON and JOSE to CBOR and COSE. I=C2=B4m currently working on an extension for the ACE framework and need t= o define new JWT claims and there CWT key values. Key values (labels in cose) are defined for the original JWT claims. I think a section for under IANA considerations that requests a new IANA registry for CWT key values is needed. Then to a more philosophical question. Should CWT have its own claims registry or should I always first request a new JWT claim and then request the CWT CBOR key value. IMHO CWT should not have its own claims registry. If possible one might want to extend the JWT claims registration parameters (template) to also have the option to register a CBOR key value. Best regards //Samuel --001a113d0f3210743d052f059b19 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi,
CWT (https://tools.ietf.org/html/draft-wahlstr= oem-ace-cbor-web-token-00) does a great job of mapping JWT from JSON an= d JOSE to CBOR and COSE.

I=C2=B4m currently workin= g on an extension for the ACE framework and need to define new JWT claims a= nd there CWT key values.=C2=A0

Key values=C2=A0(la= bels in cose) are defined for the original JWT claims. I think a section fo= r under IANA considerations that requests a new IANA registry for CWT key v= alues is needed.

Then to a more philosophical ques= tion. Should CWT have its own claims registry or should I always first requ= est a new JWT claim and then request the CWT CBOR key value.=C2=A0
IMHO CWT should not have its own claims registry. If possible one might w= ant to extend the JWT claims registration parameters (template) to also hav= e the option to register a CBOR key value.

Best re= gards
//Samuel
--001a113d0f3210743d052f059b19-- From nobody Mon Mar 28 11:13:53 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C5FFA12DB24 for ; Mon, 28 Mar 2016 11:13:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.197 X-Spam-Level: X-Spam-Status: No, score=0.197 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, T_DKIM_INVALID=0.01] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=fail (1024-bit key) reason="fail (message has been altered)" header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uDxZHHyBr6eP for ; Mon, 28 Mar 2016 11:13:42 -0700 (PDT) Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2on0121.outbound.protection.outlook.com [207.46.100.121]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 241B712D904 for ; Mon, 28 Mar 2016 11:13:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=r+eyPcmh5gWJDa2VLLTyp5thywCXeNaqn/3rK2MVdF0=; b=Bo/9E8c54u9fUpK4ZPgjc9Ey0AtdqDgAUBEAQ7hOywk/OJeOZ1gfzqiDmfBt7ob8uQDEQxbhIvv9ixjb232ZAadKMXs2JbToMeh22NsZxSufHaC4QldWb3sHyN147Xm64P2EA4sH2Wbds5iX/DA+t6HHHFWLLj9vKDJlC3ENDjc= Received: from BN3PR0301MB1234.namprd03.prod.outlook.com (10.161.207.22) by BY2PR0301MB1639.namprd03.prod.outlook.com (10.163.28.141) with Microsoft SMTP Server (TLS) id 15.1.447.15; Mon, 28 Mar 2016 18:13:34 +0000 Received: from BN3PR0301MB1234.namprd03.prod.outlook.com ([10.161.207.22]) by BN3PR0301MB1234.namprd03.prod.outlook.com ([10.161.207.22]) with mapi id 15.01.0447.023; Mon, 28 Mar 2016 18:13:34 +0000 From: Anthony Nadalin To: Samuel Erdtman , "Ace@ietf.org" , "Mike Jones" , =?utf-8?B?RXJpayBXYWhsc3Ryw7Zt?= Thread-Topic: [Ace] CWT registry for claim keys Thread-Index: AQHRiBbqLxqA/yQTakGzn9mq0kY4P59vKqUw Date: Mon, 28 Mar 2016 18:13:34 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: erdtman.se; dkim=none (message not signed) header.d=none;erdtman.se; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [2001:4898:80e8:2::334] x-ms-office365-filtering-correlation-id: 85091df1-6363-4df5-2913-08d35734ad3d x-microsoft-exchange-diagnostics: 1; BY2PR0301MB1639; 5:FDTUgYygFeP/FjLEuiQTRam8LL4N5AsRYzjntx6HcP3EfozId2ZiIg8Q6srYsxOtFHhUuH22LppHbHgDh+SrbZ8cZGZzWduRr7DDE+8kKnoKfXTumbUlyaHrGS4141EwpfQ0XUExiq0G7mJjz8B3hg==; 24:jmKby6Jn10xtK6UD7dCrT9UyUTYZJTk9cXus99WLb0eML7gguJSTXPW9b6r4Msp1kY6TMoEsnmkebrzCWpAUhflrq2dwaQ6RC+wK4TYq3Ys= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR0301MB1639; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(61426038)(61427038); SRVR:BY2PR0301MB1639; BCL:0; PCL:0; RULEID:; SRVR:BY2PR0301MB1639; x-forefront-prvs: 0895DF8FFD x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(377454003)(19300405004)(2421001)(19609705001)(19617315012)(2561002)(86612001)(106116001)(76176999)(19580405001)(19580395003)(99286002)(76576001)(16236675004)(5002640100001)(19625215002)(33656002)(54356999)(50986999)(122556002)(87936001)(10090500001)(5003600100002)(5004730100002)(8990500004)(10400500002)(5005710100001)(2906002)(5001770100001)(2900100001)(2950100001)(92566002)(77096005)(15975445007)(3660700001)(11100500001)(3280700002)(5008740100001)(1096002)(6116002)(1220700001)(790700001)(81166005)(102836003)(74316001)(586003)(107886002)(189998001)(86362001)(2501003)(3826002)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR0301MB1639; H:BN3PR0301MB1234.namprd03.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BN3PR0301MB12345C2115A34CE216A47796A6860BN3PR0301MB1234_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Mar 2016 18:13:34.4035 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR0301MB1639 Archived-At: Subject: Re: [Ace] CWT registry for claim keys X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Mar 2016 18:13:45 -0000 --_000_BN3PR0301MB12345C2115A34CE216A47796A6860BN3PR0301MB1234_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSB3b3VsZCBhZ3JlZSB0aGF0IENXVCBzaG91bGQgbm90IGhhdmUgaXRzIG93biBjbGFpbSByZWdp c3RyeSwgdXNlIHRoZSBKV1QgY2xhaW1zIHJlZ2lzdHJ5DQoNCkZyb206IEFjZSBbbWFpbHRvOmFj ZS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgU2FtdWVsIEVyZHRtYW4NClNlbnQ6IFN1 bmRheSwgTWFyY2ggMjcsIDIwMTYgMzo1MyBBTQ0KVG86IEFjZUBpZXRmLm9yZzsgTWlrZSBKb25l cyA8TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPjsgRXJpayBXYWhsc3Ryw7ZtIDxlcmlrQHdh aGxzdHJvbXN0ZWtuaXNrYS5zZT4NClN1YmplY3Q6IFtBY2VdIENXVCByZWdpc3RyeSBmb3IgY2xh aW0ga2V5cw0KDQpIaSwNCkNXVCAoaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LXdh aGxzdHJvZW0tYWNlLWNib3Itd2ViLXRva2VuLTAwPGh0dHBzOi8vbmEwMS5zYWZlbGlua3MucHJv dGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNhJTJmJTJmdG9vbHMuaWV0Zi5vcmclMmZo dG1sJTJmZHJhZnQtd2FobHN0cm9lbS1hY2UtY2Jvci13ZWItdG9rZW4tMDAmZGF0YT0wMSU3YzAx JTdjdG9ueW5hZCU0MG1pY3Jvc29mdC5jb20lN2MwY2RkNjZiNTFmZGI0NzM3YjQyMjA4ZDM1NjJl MGFhNiU3YzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdjMSZzZGF0YT1nNkVBbm9m elROMGRtSjVqVTNubmdXQmJGRzRBR1dCV001NGtCaWo2RGFnJTNkPikgZG9lcyBhIGdyZWF0IGpv YiBvZiBtYXBwaW5nIEpXVCBmcm9tIEpTT04gYW5kIEpPU0UgdG8gQ0JPUiBhbmQgQ09TRS4NCg0K ScK0bSBjdXJyZW50bHkgd29ya2luZyBvbiBhbiBleHRlbnNpb24gZm9yIHRoZSBBQ0UgZnJhbWV3 b3JrIGFuZCBuZWVkIHRvIGRlZmluZSBuZXcgSldUIGNsYWltcyBhbmQgdGhlcmUgQ1dUIGtleSB2 YWx1ZXMuDQoNCktleSB2YWx1ZXMgKGxhYmVscyBpbiBjb3NlKSBhcmUgZGVmaW5lZCBmb3IgdGhl IG9yaWdpbmFsIEpXVCBjbGFpbXMuIEkgdGhpbmsgYSBzZWN0aW9uIGZvciB1bmRlciBJQU5BIGNv bnNpZGVyYXRpb25zIHRoYXQgcmVxdWVzdHMgYSBuZXcgSUFOQSByZWdpc3RyeSBmb3IgQ1dUIGtl eSB2YWx1ZXMgaXMgbmVlZGVkLg0KDQpUaGVuIHRvIGEgbW9yZSBwaGlsb3NvcGhpY2FsIHF1ZXN0 aW9uLiBTaG91bGQgQ1dUIGhhdmUgaXRzIG93biBjbGFpbXMgcmVnaXN0cnkgb3Igc2hvdWxkIEkg YWx3YXlzIGZpcnN0IHJlcXVlc3QgYSBuZXcgSldUIGNsYWltIGFuZCB0aGVuIHJlcXVlc3QgdGhl IENXVCBDQk9SIGtleSB2YWx1ZS4NCklNSE8gQ1dUIHNob3VsZCBub3QgaGF2ZSBpdHMgb3duIGNs YWltcyByZWdpc3RyeS4gSWYgcG9zc2libGUgb25lIG1pZ2h0IHdhbnQgdG8gZXh0ZW5kIHRoZSBK V1QgY2xhaW1zIHJlZ2lzdHJhdGlvbiBwYXJhbWV0ZXJzICh0ZW1wbGF0ZSkgdG8gYWxzbyBoYXZl IHRoZSBvcHRpb24gdG8gcmVnaXN0ZXIgYSBDQk9SIGtleSB2YWx1ZS4NCg0KQmVzdCByZWdhcmRz DQovL1NhbXVlbA0K --_000_BN3PR0301MB12345C2115A34CE216A47796A6860BN3PR0301MB1234_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9 DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglj b2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpw dXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1z b25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCglt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTIuMHB0Ow0K CWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTE4 DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNv LXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2Vy aWY7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjox LjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNl Y3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRl ZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+ PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8 bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48 IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGlu az0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkkgd291bGQgYWdyZWUgdGhhdCBDV1Qgc2hvdWxkIG5vdCBo YXZlIGl0cyBvd24gY2xhaW0gcmVnaXN0cnksIHVzZSB0aGUgSldUIGNsYWltcyByZWdpc3RyeSAm bmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YSBuYW1l PSJfTWFpbEVuZENvbXBvc2UiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9hPjwvcD4NCjxzcGFuIHN0eWxlPSJtc28tYm9va21hcms6X01haWxFbmRDb21wb3NlIj48 L3NwYW4+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkZyb206PC9z cGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiBBY2UgW21haWx0bzphY2UtYm91bmNlc0BpZXRmLm9y Z10NCjxiPk9uIEJlaGFsZiBPZiA8L2I+U2FtdWVsIEVyZHRtYW48YnI+DQo8Yj5TZW50OjwvYj4g U3VuZGF5LCBNYXJjaCAyNywgMjAxNiAzOjUzIEFNPGJyPg0KPGI+VG86PC9iPiBBY2VAaWV0Zi5v cmc7IE1pa2UgSm9uZXMgJmx0O01pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbSZndDs7IEVyaWsg V2FobHN0csO2bSAmbHQ7ZXJpa0B3YWhsc3Ryb21zdGVrbmlza2Euc2UmZ3Q7PGJyPg0KPGI+U3Vi amVjdDo8L2I+IFtBY2VdIENXVCByZWdpc3RyeSBmb3IgY2xhaW0ga2V5czxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhpLDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPkNXVCAoPGEgaHJlZj0iaHR0cHM6Ly9uYTAxLnNhZmVsaW5rcy5wcm90 ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM2ElMmYlMmZ0b29scy5pZXRmLm9yZyUyZmh0 bWwlMmZkcmFmdC13YWhsc3Ryb2VtLWFjZS1jYm9yLXdlYi10b2tlbi0wMCZhbXA7ZGF0YT0wMSU3 YzAxJTdjdG9ueW5hZCU0MG1pY3Jvc29mdC5jb20lN2MwY2RkNjZiNTFmZGI0NzM3YjQyMjA4ZDM1 NjJlMGFhNiU3YzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdjMSZhbXA7c2RhdGE9 ZzZFQW5vZnpUTjBkbUo1alUzbm5nV0JiRkc0QUdXQldNNTRrQmlqNkRhZyUzZCI+aHR0cHM6Ly90 b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LXdhaGxzdHJvZW0tYWNlLWNib3Itd2ViLXRva2VuLTAw PC9hPikNCiBkb2VzIGEgZ3JlYXQgam9iIG9mIG1hcHBpbmcgSldUIGZyb20gSlNPTiBhbmQgSk9T RSB0byBDQk9SIGFuZCBDT1NFLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5JwrRtIGN1cnJlbnRseSB3b3JraW5nIG9uIGFuIGV4dGVuc2lvbiBm b3IgdGhlIEFDRSBmcmFtZXdvcmsgYW5kIG5lZWQgdG8gZGVmaW5lIG5ldyBKV1QgY2xhaW1zIGFu ZCB0aGVyZSBDV1Qga2V5IHZhbHVlcy4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+S2V5IHZhbHVlcyZuYnNwOyhsYWJlbHMgaW4gY29z ZSkgYXJlIGRlZmluZWQgZm9yIHRoZSBvcmlnaW5hbCBKV1QgY2xhaW1zLiBJIHRoaW5rIGEgc2Vj dGlvbiBmb3IgdW5kZXIgSUFOQSBjb25zaWRlcmF0aW9ucyB0aGF0IHJlcXVlc3RzIGEgbmV3IElB TkEgcmVnaXN0cnkgZm9yIENXVCBrZXkgdmFsdWVzIGlzIG5lZWRlZC48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhlbiB0byBhIG1vcmUgcGhp bG9zb3BoaWNhbCBxdWVzdGlvbi4gU2hvdWxkIENXVCBoYXZlIGl0cyBvd24gY2xhaW1zIHJlZ2lz dHJ5IG9yIHNob3VsZCBJIGFsd2F5cyBmaXJzdCByZXF1ZXN0IGEgbmV3IEpXVCBjbGFpbSBhbmQg dGhlbiByZXF1ZXN0IHRoZSBDV1QgQ0JPUiBrZXkgdmFsdWUuJm5ic3A7PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JTUhPIENXVCBzaG91bGQgbm90 IGhhdmUgaXRzIG93biBjbGFpbXMgcmVnaXN0cnkuIElmIHBvc3NpYmxlIG9uZSBtaWdodCB3YW50 IHRvIGV4dGVuZCB0aGUgSldUIGNsYWltcyByZWdpc3RyYXRpb24gcGFyYW1ldGVycyAodGVtcGxh dGUpIHRvIGFsc28gaGF2ZSB0aGUgb3B0aW9uIHRvIHJlZ2lzdGVyIGEgQ0JPUiBrZXkgdmFsdWUu PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkJl c3QgcmVnYXJkczxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+Ly9TYW11ZWw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv Ym9keT4NCjwvaHRtbD4NCg== --_000_BN3PR0301MB12345C2115A34CE216A47796A6860BN3PR0301MB1234_-- From nobody Mon Mar 28 11:23:58 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 384B312D1D3 for ; Mon, 28 Mar 2016 11:23:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.611 X-Spam-Level: X-Spam-Status: No, score=-0.611 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ve7jtb-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NGpz2pLyv9ga for ; Mon, 28 Mar 2016 11:23:50 -0700 (PDT) Received: from mail-qk0-x230.google.com (mail-qk0-x230.google.com [IPv6:2607:f8b0:400d:c09::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B530D12DC21 for ; Mon, 28 Mar 2016 11:23:50 -0700 (PDT) Received: by mail-qk0-x230.google.com with SMTP id x64so83103705qkd.1 for ; Mon, 28 Mar 2016 11:23:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ve7jtb-com.20150623.gappssmtp.com; s=20150623; h=mime-version:subject:from:in-reply-to:date:cc:message-id:references :to; bh=pTrfrtZyef/0aRSXxqnlcTeNi5ddKFx6WPuYmdGevMU=; b=tu3rzQYWne3dlRSTiM4WIJHKyMo+oLqa0MuOZmwawqa5g3vt8QlrjpE8TEteo5Jpdn /UZ3ecRUTzu+FYMcCdh3p2jazaL82Bm8XmENs+YtF5RFcLYaDYL0vxL9RyB6RnQWjPo9 6SksqbSGr2Inma0Efhc+UtyOcEoRoHOhWvFXI/n0B4wIkwIA1tpefPVzBBWd74KobNd2 RktXuE0Ym+EK4zYZ+HdB2E9DUa25wfD1fqANxO5NzSYx5RJTQil88d85nua6uYlTXxVp XTCtJPDLqSbeGGPwoshH3b7Fi29plVPJ+HPwggssL8AAkftqJGAVQ1uxqTd8kTervijT TJ7Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to; bh=pTrfrtZyef/0aRSXxqnlcTeNi5ddKFx6WPuYmdGevMU=; b=OsErMx3ySVdME9zgbrFZzpxunfDOECp/KeOGJ970huEAsyY8ck4nBD7Iq2WY3U/y5A NSm0aLl1O8pr6hqKQOEEK1BNQqnEdWm0qV10b4taIRgBH5iCEvaYdg5P7dxxvT0MLRhu o/ffnB6Ikse7ahjVXcphOVk+PtP1rYMJgi8XjXNrXwfsTitYzMyCjn4MWos+cuNooA6c E1GHXMywdrgoyTVYVfP8uDtqZ3I/pAZThLwdjeRI3RlihoKExeTg0KAan+34YFEWKY12 ALz1XHxzezbtfHHVKFP87jCVZ4wm8y5vNZNyPuewbKhrAiwymNXNld5Vau9eOibNp7ME oKgQ== X-Gm-Message-State: AD7BkJJqXBRAbLabJ7baXG+IL3B8eTK4fedWQSQ2Iqak+xlf94AMKC61lvyHGxoQrGq9iw== X-Received: by 10.55.215.208 with SMTP id t77mr37447553qkt.23.1459189429620; Mon, 28 Mar 2016 11:23:49 -0700 (PDT) Received: from [192.168.1.68] ([191.115.34.54]) by smtp.gmail.com with ESMTPSA id a207sm6870995qkb.28.2016.03.28.11.23.42 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Mon, 28 Mar 2016 11:23:49 -0700 (PDT) Content-Type: multipart/alternative; boundary="Apple-Mail=_45978A80-F3E0-4E33-8B6D-275AF09D9953" Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) From: John Bradley In-Reply-To: Date: Mon, 28 Mar 2016 15:23:38 -0300 Message-Id: <7D6EC121-A1D8-419E-9044-8B97F4303042@ve7jtb.com> References: To: Anthony Nadalin X-Mailer: Apple Mail (2.3124) Archived-At: Cc: Samuel Erdtman , Michael Jones , =?utf-8?Q?Erik_Wahlstr=C3=B6m?= , "Ace@ietf.org" Subject: Re: [Ace] CWT registry for claim keys X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Mar 2016 18:23:53 -0000 --Apple-Mail=_45978A80-F3E0-4E33-8B6D-275AF09D9953 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 +1 > On Mar 28, 2016, at 3:13 PM, Anthony Nadalin = wrote: >=20 > I would agree that CWT should not have its own claim registry, use the = JWT claims registry =20 > =C2=A0 <> > From: Ace [mailto:ace-bounces@ietf.org] On Behalf Of Samuel Erdtman > Sent: Sunday, March 27, 2016 3:53 AM > To: Ace@ietf.org; Mike Jones ; Erik = Wahlstr=C3=B6m > Subject: [Ace] CWT registry for claim keys > =20 > Hi, > CWT = (https://tools.ietf.org/html/draft-wahlstroem-ace-cbor-web-token-00 = ) does a great job of mapping JWT from JSON and JOSE to CBOR and = COSE. > =20 > I=C2=B4m currently working on an extension for the ACE framework and = need to define new JWT claims and there CWT key values.=20 > =20 > Key values (labels in cose) are defined for the original JWT claims. I = think a section for under IANA considerations that requests a new IANA = registry for CWT key values is needed. > =20 > Then to a more philosophical question. Should CWT have its own claims = registry or should I always first request a new JWT claim and then = request the CWT CBOR key value.=20 > IMHO CWT should not have its own claims registry. If possible one = might want to extend the JWT claims registration parameters (template) = to also have the option to register a CBOR key value. > =20 > Best regards > //Samuel > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace --Apple-Mail=_45978A80-F3E0-4E33-8B6D-275AF09D9953 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 +1
On Mar 28, 2016, at 3:13 PM, Anthony Nadalin <tonynad@microsoft.com> wrote:

I = would agree that CWT should not have its own claim registry, use the JWT = claims registry  
 
From: Ace [mailto:ace-bounces@ietf.org] On Behalf = Of Samuel = Erdtman
Sent: Sunday, March 27, 2016 3:53 = AM
To: Ace@ietf.org; Mike Jones = <Michael.Jones@microsoft.com>; Erik Wahlstr=C3=B6m = <erik@wahlstromstekniska.se>
Subject: [Ace] CWT registry for = claim keys
 
Hi,
CWT (https://tools.ietf.org/html/draft-wahlstroem-ace-cbor-web-token= -00) does a great job of mapping JWT from JSON and JOSE to CBOR and = COSE.
 
I=C2=B4m currently working on an extension for the = ACE framework and need to define new JWT claims and there CWT key = values. 
 
Key values (labels in cose) are defined for the = original JWT claims. I think a section for under IANA considerations = that requests a new IANA registry for CWT key values is needed.
 
Then to a more philosophical question. = Should CWT have its own claims registry or should I always first request = a new JWT claim and then request the CWT CBOR key value. 
IMHO CWT should not have its own claims registry. If possible = one might want to extend the JWT claims registration parameters = (template) to also have the option to register a CBOR key value.
 
Best regards
//Samuel
_______________________________________________
Ace mailing = list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace

= --Apple-Mail=_45978A80-F3E0-4E33-8B6D-275AF09D9953-- From nobody Mon Mar 28 12:04:08 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8397512DBDB for ; Mon, 28 Mar 2016 12:04:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.013 X-Spam-Level: X-Spam-Status: No, score=-0.013 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=1.989, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5AiOgtwuhJ_M for ; Mon, 28 Mar 2016 12:04:05 -0700 (PDT) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0125.outbound.protection.outlook.com [65.55.169.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1FB0E12DBD2 for ; Mon, 28 Mar 2016 12:04:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=+Wfq3hUKZ0oyKqYtb/Qq8ifAp/RuL9uxjV07za/jG0s=; b=CLx306uywcGYU60hyEqrQDty2syToi/7hmy1zhvT1CG5mzbn1Y1uYWYLqN9nm1JgjOvzEUfubJ6RoIxKHWyIiPfY0L1cGf8yFXKj7mmE9cxlBmxpJ7vk/d05frDlswuUUdkO4k3AvU1a9ExZ8YsXsE5qK6/OEip3145FLI+gA1k= Received: from SN1PR0301MB1645.namprd03.prod.outlook.com (10.162.130.139) by BN3PR0301MB1234.namprd03.prod.outlook.com (10.161.207.22) with Microsoft SMTP Server (TLS) id 15.1.447.15; Mon, 28 Mar 2016 19:04:02 +0000 Received: from SN1PR0301MB1645.namprd03.prod.outlook.com ([10.162.130.139]) by SN1PR0301MB1645.namprd03.prod.outlook.com ([10.162.130.139]) with mapi id 15.01.0443.016; Mon, 28 Mar 2016 19:04:01 +0000 From: Mike Jones To: John Bradley , Anthony Nadalin Thread-Topic: [Ace] CWT registry for claim keys Thread-Index: AQHRiBblOe7csqFyjEatPC3NX+2SJp9vKucAgAAC0ACAAAtJYA== Date: Mon, 28 Mar 2016 19:04:01 +0000 Message-ID: References: , <7D6EC121-A1D8-419E-9044-8B97F4303042@ve7jtb.com> In-Reply-To: <7D6EC121-A1D8-419E-9044-8B97F4303042@ve7jtb.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: ve7jtb.com; dkim=none (message not signed) header.d=none;ve7jtb.com; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [50.47.90.97] x-ms-office365-filtering-correlation-id: 81a9d84a-353c-42e4-a4eb-08d3573bb9b3 x-microsoft-exchange-diagnostics: 1; BN3PR0301MB1234; 5:xdcveoB7LFGYQuUx8BEC/vFVBSEGY8tDGI7mYr4HRr5dhY2zqw/FAmvbrQYrAaMD/DXpz3W/tuSrefAGlL3faQbhKZ/kPsWSa4ziIVHbnlpRDUdYsB3yhss7LkSgCuxVbscIqPL6P0TqYKTAaA/08Q==; 24:8lxLhGqzvW4o8RswT5f3048a95MTu6LIZ+vKsrBxfWOWBAmWEcG36upiN4qkMOzcP44TCfxEspB4V8p9jm+nL0u1i0HfLbUeBV/AINL9y7s= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN3PR0301MB1234; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(61426038)(61427038); SRVR:BN3PR0301MB1234; BCL:0; PCL:0; RULEID:; SRVR:BN3PR0301MB1234; x-forefront-prvs: 0895DF8FFD x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(979002)(24454002)(377454003)(86612001)(5004730100002)(1220700001)(2950100001)(10290500002)(10400500002)(5005710100001)(2900100001)(2561002)(68736007)(15975445007)(10090500001)(102836003)(586003)(5008740100001)(50986999)(5003600100002)(6116002)(8990500004)(4001450100002)(3846002)(5002640100001)(19580395003)(19580405001)(77096005)(1096002)(74316001)(76176999)(54356999)(5001770100001)(189998001)(106116001)(97736004)(3660700001)(76576001)(92566002)(81166005)(87936001)(4326007)(2906002)(3900700001)(16236675004)(3280700002)(99286002)(86362001)(2421001)(66066001)(122556002)(19617315012)(1511001)(33656002)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR0301MB1234; H:SN1PR0301MB1645.namprd03.prod.outlook.com; FPR:; SPF:None; MLV:ovrnspm; PTR:InfoNoRecords; LANG:en; Content-Type: multipart/alternative; boundary="_000_SN1PR0301MB1645A1970C66FCB1F1D24AA3F5860SN1PR0301MB1645_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Mar 2016 19:04:01.7585 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR0301MB1234 Archived-At: Cc: Samuel Erdtman , =?utf-8?B?RXJpayBXYWhsc3Ryw7Zt?= , "Ace@ietf.org" Subject: Re: [Ace] CWT registry for claim keys X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Mar 2016 19:04:07 -0000 --_000_SN1PR0301MB1645A1970C66FCB1F1D24AA3F5860SN1PR0301MB1645_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 KzENCg0KSSdsbCB3b3JrIG9uIGFwcHJvcHJpYXRlIGVkaXRzIHdpdGggRXJpay4NCg0KLS0gTWlr ZQ0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkZyb206IEpvaG4gQnJhZGxleTxt YWlsdG86dmU3anRiQHZlN2p0Yi5jb20+DQpTZW50OiDigI4zL+KAjjI4L+KAjjIwMTYgMTE6MjMg QU0NClRvOiBBbnRob255IE5hZGFsaW48bWFpbHRvOnRvbnluYWRAbWljcm9zb2Z0LmNvbT4NCkNj OiBTYW11ZWwgRXJkdG1hbjxtYWlsdG86c2FtdWVsQGVyZHRtYW4uc2U+OyBBY2VAaWV0Zi5vcmc8 bWFpbHRvOkFjZUBpZXRmLm9yZz47IE1pa2UgSm9uZXM8bWFpbHRvOk1pY2hhZWwuSm9uZXNAbWlj cm9zb2Z0LmNvbT47IEVyaWsgV2FobHN0csO2bTxtYWlsdG86ZXJpa0B3YWhsc3Ryb21zdGVrbmlz a2Euc2U+DQpTdWJqZWN0OiBSZTogW0FjZV0gQ1dUIHJlZ2lzdHJ5IGZvciBjbGFpbSBrZXlzDQoN CisxDQpPbiBNYXIgMjgsIDIwMTYsIGF0IDM6MTMgUE0sIEFudGhvbnkgTmFkYWxpbiA8dG9ueW5h ZEBtaWNyb3NvZnQuY29tPG1haWx0bzp0b255bmFkQG1pY3Jvc29mdC5jb20+PiB3cm90ZToNCg0K SSB3b3VsZCBhZ3JlZSB0aGF0IENXVCBzaG91bGQgbm90IGhhdmUgaXRzIG93biBjbGFpbSByZWdp c3RyeSwgdXNlIHRoZSBKV1QgY2xhaW1zIHJlZ2lzdHJ5DQoNCkZyb206IEFjZSBbbWFpbHRvOmFj ZS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgU2FtdWVsIEVyZHRtYW4NClNlbnQ6IFN1 bmRheSwgTWFyY2ggMjcsIDIwMTYgMzo1MyBBTQ0KVG86IEFjZUBpZXRmLm9yZzxtYWlsdG86QWNl QGlldGYub3JnPjsgTWlrZSBKb25lcyA8TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPG1haWx0 bzpNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20+PjsgRXJpayBXYWhsc3Ryw7ZtIDxlcmlrQHdh aGxzdHJvbXN0ZWtuaXNrYS5zZTxtYWlsdG86ZXJpa0B3YWhsc3Ryb21zdGVrbmlza2Euc2U+Pg0K U3ViamVjdDogW0FjZV0gQ1dUIHJlZ2lzdHJ5IGZvciBjbGFpbSBrZXlzDQoNCkhpLA0KQ1dUICho dHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtd2FobHN0cm9lbS1hY2UtY2Jvci13ZWIt dG9rZW4tMDA8aHR0cHM6Ly9uYTAxLnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91 cmw9aHR0cHMlM2ElMmYlMmZ0b29scy5pZXRmLm9yZyUyZmh0bWwlMmZkcmFmdC13YWhsc3Ryb2Vt LWFjZS1jYm9yLXdlYi10b2tlbi0wMCZkYXRhPTAxJTdjMDElN2N0b255bmFkJTQwbWljcm9zb2Z0 LmNvbSU3YzBjZGQ2NmI1MWZkYjQ3MzdiNDIyMDhkMzU2MmUwYWE2JTdjNzJmOTg4YmY4NmYxNDFh ZjkxYWIyZDdjZDAxMWRiNDclN2MxJnNkYXRhPWc2RUFub2Z6VE4wZG1KNWpVM25uZ1dCYkZHNEFH V0JXTTU0a0JpajZEYWclM2Q+KSBkb2VzIGEgZ3JlYXQgam9iIG9mIG1hcHBpbmcgSldUIGZyb20g SlNPTiBhbmQgSk9TRSB0byBDQk9SIGFuZCBDT1NFLg0KDQpJwrRtIGN1cnJlbnRseSB3b3JraW5n IG9uIGFuIGV4dGVuc2lvbiBmb3IgdGhlIEFDRSBmcmFtZXdvcmsgYW5kIG5lZWQgdG8gZGVmaW5l IG5ldyBKV1QgY2xhaW1zIGFuZCB0aGVyZSBDV1Qga2V5IHZhbHVlcy4NCg0KS2V5IHZhbHVlcyAo bGFiZWxzIGluIGNvc2UpIGFyZSBkZWZpbmVkIGZvciB0aGUgb3JpZ2luYWwgSldUIGNsYWltcy4g SSB0aGluayBhIHNlY3Rpb24gZm9yIHVuZGVyIElBTkEgY29uc2lkZXJhdGlvbnMgdGhhdCByZXF1 ZXN0cyBhIG5ldyBJQU5BIHJlZ2lzdHJ5IGZvciBDV1Qga2V5IHZhbHVlcyBpcyBuZWVkZWQuDQoN ClRoZW4gdG8gYSBtb3JlIHBoaWxvc29waGljYWwgcXVlc3Rpb24uIFNob3VsZCBDV1QgaGF2ZSBp dHMgb3duIGNsYWltcyByZWdpc3RyeSBvciBzaG91bGQgSSBhbHdheXMgZmlyc3QgcmVxdWVzdCBh IG5ldyBKV1QgY2xhaW0gYW5kIHRoZW4gcmVxdWVzdCB0aGUgQ1dUIENCT1Iga2V5IHZhbHVlLg0K SU1ITyBDV1Qgc2hvdWxkIG5vdCBoYXZlIGl0cyBvd24gY2xhaW1zIHJlZ2lzdHJ5LiBJZiBwb3Nz aWJsZSBvbmUgbWlnaHQgd2FudCB0byBleHRlbmQgdGhlIEpXVCBjbGFpbXMgcmVnaXN0cmF0aW9u IHBhcmFtZXRlcnMgKHRlbXBsYXRlKSB0byBhbHNvIGhhdmUgdGhlIG9wdGlvbiB0byByZWdpc3Rl ciBhIENCT1Iga2V5IHZhbHVlLg0KDQpCZXN0IHJlZ2FyZHMNCi8vU2FtdWVsDQpfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KQWNlIG1haWxpbmcgbGlzdA0K QWNlQGlldGYub3JnPG1haWx0bzpBY2VAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9t YWlsbWFuL2xpc3RpbmZvL2FjZQ0KDQo= --_000_SN1PR0301MB1645A1970C66FCB1F1D24AA3F5860SN1PR0301MB1645_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIGNvbnRlbnQ9InRleHQvaHRtbDsgY2hh cnNldD11dGYtOCI+DQo8L2hlYWQ+DQo8Ym9keSBjbGFzcz0iIiBzdHlsZT0id29yZC13cmFwOmJy ZWFrLXdvcmQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmksc2Fucy1z ZXJpZjsgZm9udC1zaXplOjExcHQiPiYjNDM7MTxicj4NCjxicj4NCkknbGwgd29yayBvbiBhcHBy b3ByaWF0ZSBlZGl0cyB3aXRoIEVyaWsuPGJyPg0KPGJyPg0KLS0gTWlrZTwvZGl2Pg0KPC9kaXY+ DQo8ZGl2IGRpcj0ibHRyIj4NCjxocj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJp LHNhbnMtc2VyaWY7IGZvbnQtc2l6ZToxMXB0OyBmb250LXdlaWdodDpib2xkIj5Gcm9tOg0KPC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpLHNhbnMtc2VyaWY7IGZvbnQtc2l6 ZToxMXB0Ij48YSBocmVmPSJtYWlsdG86dmU3anRiQHZlN2p0Yi5jb20iPkpvaG4gQnJhZGxleTwv YT48L3NwYW4+PGJyPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmksc2Fucy1zZXJp ZjsgZm9udC1zaXplOjExcHQ7IGZvbnQtd2VpZ2h0OmJvbGQiPlNlbnQ6DQo8L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmksc2Fucy1zZXJpZjsgZm9udC1zaXplOjExcHQiPuKA jjMv4oCOMjgv4oCOMjAxNiAxMToyMyBBTTwvc3Bhbj48YnI+DQo8c3BhbiBzdHlsZT0iZm9udC1m YW1pbHk6Q2FsaWJyaSxzYW5zLXNlcmlmOyBmb250LXNpemU6MTFwdDsgZm9udC13ZWlnaHQ6Ym9s ZCI+VG86DQo8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNhbGlicmksc2Fucy1zZXJp ZjsgZm9udC1zaXplOjExcHQiPjxhIGhyZWY9Im1haWx0bzp0b255bmFkQG1pY3Jvc29mdC5jb20i PkFudGhvbnkgTmFkYWxpbjwvYT48L3NwYW4+PGJyPg0KPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5 OkNhbGlicmksc2Fucy1zZXJpZjsgZm9udC1zaXplOjExcHQ7IGZvbnQtd2VpZ2h0OmJvbGQiPkNj Og0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDYWxpYnJpLHNhbnMtc2VyaWY7IGZv bnQtc2l6ZToxMXB0Ij48YSBocmVmPSJtYWlsdG86c2FtdWVsQGVyZHRtYW4uc2UiPlNhbXVlbCBF cmR0bWFuPC9hPjsNCjxhIGhyZWY9Im1haWx0bzpBY2VAaWV0Zi5vcmciPkFjZUBpZXRmLm9yZzwv YT47IDxhIGhyZWY9Im1haWx0bzpNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20iPg0KTWlrZSBK b25lczwvYT47IDxhIGhyZWY9Im1haWx0bzplcmlrQHdhaGxzdHJvbXN0ZWtuaXNrYS5zZSI+RXJp ayBXYWhsc3Ryw7ZtPC9hPjwvc3Bhbj48YnI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2Fs aWJyaSxzYW5zLXNlcmlmOyBmb250LXNpemU6MTFwdDsgZm9udC13ZWlnaHQ6Ym9sZCI+U3ViamVj dDoNCjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q2FsaWJyaSxzYW5zLXNlcmlmOyBm b250LXNpemU6MTFwdCI+UmU6IFtBY2VdIENXVCByZWdpc3RyeSBmb3IgY2xhaW0ga2V5czwvc3Bh bj48YnI+DQo8YnI+DQo8L2Rpdj4NCjxkaXY+JiM0MzsxPGJyIGNsYXNzPSIiPg0KPGRpdj4NCjxi bG9ja3F1b3RlIHR5cGU9ImNpdGUiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5PbiBNYXIgMjgs IDIwMTYsIGF0IDM6MTMgUE0sIEFudGhvbnkgTmFkYWxpbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOnRv bnluYWRAbWljcm9zb2Z0LmNvbSIgY2xhc3M9IiI+dG9ueW5hZEBtaWNyb3NvZnQuY29tPC9hPiZn dDsgd3JvdGU6PC9kaXY+DQo8YnIgY2xhc3M9IkFwcGxlLWludGVyY2hhbmdlLW5ld2xpbmUiPg0K PGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSIgc3R5bGU9ImZvbnQtZmFt aWx5OkhlbHZldGljYTsgZm9udC1zaXplOjEycHg7IGZvbnQtc3R5bGU6bm9ybWFsOyBmb250LXdl aWdodDpub3JtYWw7IGxldHRlci1zcGFjaW5nOm5vcm1hbDsgb3JwaGFuczphdXRvOyB0ZXh0LWFs aWduOnN0YXJ0OyB0ZXh0LWluZGVudDowcHg7IHRleHQtdHJhbnNmb3JtOm5vbmU7IHdoaXRlLXNw YWNlOm5vcm1hbDsgd2lkb3dzOmF1dG87IHdvcmQtc3BhY2luZzowcHgiPg0KPGRpdiBjbGFzcz0i IiBzdHlsZT0ibWFyZ2luOjBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZToxMnB0OyBmb250LWZh bWlseTonVGltZXMgTmV3IFJvbWFuJyxzZXJpZiI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9u dC1zaXplOjExcHQ7IGZvbnQtZmFtaWx5OkNhbGlicmksc2Fucy1zZXJpZiI+SSB3b3VsZCBhZ3Jl ZSB0aGF0IENXVCBzaG91bGQgbm90IGhhdmUgaXRzIG93biBjbGFpbSByZWdpc3RyeSwgdXNlIHRo ZSBKV1QgY2xhaW1zIHJlZ2lzdHJ5ICZuYnNwOzwvc3Bhbj48L2Rpdj4NCjxkaXYgY2xhc3M9IiIg c3R5bGU9Im1hcmdpbjowaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6MTJwdDsgZm9udC1mYW1p bHk6J1RpbWVzIE5ldyBSb21hbicsc2VyaWYiPg0KPGEgbmFtZT0iX01haWxFbmRDb21wb3NlIiBj bGFzcz0iIj48c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1zaXplOjExcHQ7IGZvbnQtZmFtaWx5 OkNhbGlicmksc2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFuPjwvYT48L2Rpdj4NCjxzcGFuIGNsYXNz PSIiPjwvc3Bhbj4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9Im1hcmdpbjowaW4gMGluIDAuMDAwMXB0 OyBmb250LXNpemU6MTJwdDsgZm9udC1mYW1pbHk6J1RpbWVzIE5ldyBSb21hbicsc2VyaWYiPg0K PGIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtc2l6ZToxMXB0OyBmb250LWZh bWlseTpDYWxpYnJpLHNhbnMtc2VyaWYiPkZyb206PC9zcGFuPjwvYj48c3BhbiBjbGFzcz0iIiBz dHlsZT0iZm9udC1zaXplOjExcHQ7IGZvbnQtZmFtaWx5OkNhbGlicmksc2Fucy1zZXJpZiI+PHNw YW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPkFjZSBbPGEgaHJl Zj0ibWFpbHRvOmFjZS1ib3VuY2VzQGlldGYub3JnIiBjbGFzcz0iIj5tYWlsdG86YWNlLWJvdW5j ZXNAaWV0Zi5vcmc8L2E+XTxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNw Ozwvc3Bhbj48YiBjbGFzcz0iIj5Pbg0KIEJlaGFsZiBPZjxzcGFuIGNsYXNzPSJBcHBsZS1jb252 ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L2I+U2FtdWVsIEVyZHRtYW48YnIgY2xhc3M9IiI+ DQo8YiBjbGFzcz0iIj5TZW50OjwvYj48c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNl Ij4mbmJzcDs8L3NwYW4+U3VuZGF5LCBNYXJjaCAyNywgMjAxNiAzOjUzIEFNPGJyIGNsYXNzPSIi Pg0KPGIgY2xhc3M9IiI+VG86PC9iPjxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PiZuYnNwOzwvc3Bhbj48YSBocmVmPSJtYWlsdG86QWNlQGlldGYub3JnIiBjbGFzcz0iIj5BY2VA aWV0Zi5vcmc8L2E+OyBNaWtlIEpvbmVzICZsdDs8YSBocmVmPSJtYWlsdG86TWljaGFlbC5Kb25l c0BtaWNyb3NvZnQuY29tIiBjbGFzcz0iIj5NaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb208L2E+ Jmd0OzsgRXJpayBXYWhsc3Ryw7ZtICZsdDs8YSBocmVmPSJtYWlsdG86ZXJpa0B3YWhsc3Ryb21z dGVrbmlza2Euc2UiIGNsYXNzPSIiPmVyaWtAd2FobHN0cm9tc3Rla25pc2thLnNlPC9hPiZndDs8 YnIgY2xhc3M9IiI+DQo8YiBjbGFzcz0iIj5TdWJqZWN0OjwvYj48c3BhbiBjbGFzcz0iQXBwbGUt Y29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+W0FjZV0gQ1dUIHJlZ2lzdHJ5IGZvciBjbGFp bSBrZXlzPC9zcGFuPjwvZGl2Pg0KPGRpdiBjbGFzcz0iIiBzdHlsZT0ibWFyZ2luOjBpbiAwaW4g MC4wMDAxcHQ7IGZvbnQtc2l6ZToxMnB0OyBmb250LWZhbWlseTonVGltZXMgTmV3IFJvbWFuJyxz ZXJpZiI+DQombmJzcDs8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiIHN0eWxl PSJtYXJnaW46MGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOjEycHQ7IGZvbnQtZmFtaWx5OidU aW1lcyBOZXcgUm9tYW4nLHNlcmlmIj4NCkhpLDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYg Y2xhc3M9IiIgc3R5bGU9Im1hcmdpbjowaW4gMGluIDAuMDAwMXB0OyBmb250LXNpemU6MTJwdDsg Zm9udC1mYW1pbHk6J1RpbWVzIE5ldyBSb21hbicsc2VyaWYiPg0KQ1dUICg8YSBocmVmPSJodHRw czovL25hMDEuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzYSUy ZiUyZnRvb2xzLmlldGYub3JnJTJmaHRtbCUyZmRyYWZ0LXdhaGxzdHJvZW0tYWNlLWNib3Itd2Vi LXRva2VuLTAwJmFtcDtkYXRhPTAxJTdjMDElN2N0b255bmFkJTQwbWljcm9zb2Z0LmNvbSU3YzBj ZGQ2NmI1MWZkYjQ3MzdiNDIyMDhkMzU2MmUwYWE2JTdjNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdj ZDAxMWRiNDclN2MxJmFtcDtzZGF0YT1nNkVBbm9melROMGRtSjVqVTNubmdXQmJGRzRBR1dCV001 NGtCaWo2RGFnJTNkIiBjbGFzcz0iIiBzdHlsZT0iY29sb3I6cHVycGxlOyB0ZXh0LWRlY29yYXRp b246dW5kZXJsaW5lIj5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtd2FobHN0cm9l bS1hY2UtY2Jvci13ZWItdG9rZW4tMDA8L2E+KQ0KIGRvZXMgYSBncmVhdCBqb2Igb2YgbWFwcGlu ZyBKV1QgZnJvbSBKU09OIGFuZCBKT1NFIHRvIENCT1IgYW5kIENPU0UuPC9kaXY+DQo8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJtYXJnaW46MGluIDBpbiAwLjAw MDFwdDsgZm9udC1zaXplOjEycHQ7IGZvbnQtZmFtaWx5OidUaW1lcyBOZXcgUm9tYW4nLHNlcmlm Ij4NCiZuYnNwOzwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIiBz dHlsZT0ibWFyZ2luOjBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZToxMnB0OyBmb250LWZhbWls eTonVGltZXMgTmV3IFJvbWFuJyxzZXJpZiI+DQpJwrRtIGN1cnJlbnRseSB3b3JraW5nIG9uIGFu IGV4dGVuc2lvbiBmb3IgdGhlIEFDRSBmcmFtZXdvcmsgYW5kIG5lZWQgdG8gZGVmaW5lIG5ldyBK V1QgY2xhaW1zIGFuZCB0aGVyZSBDV1Qga2V5IHZhbHVlcy4mbmJzcDs8L2Rpdj4NCjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9Im1hcmdpbjowaW4gMGluIDAuMDAw MXB0OyBmb250LXNpemU6MTJwdDsgZm9udC1mYW1pbHk6J1RpbWVzIE5ldyBSb21hbicsc2VyaWYi Pg0KJm5ic3A7PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiIHN0 eWxlPSJtYXJnaW46MGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOjEycHQ7IGZvbnQtZmFtaWx5 OidUaW1lcyBOZXcgUm9tYW4nLHNlcmlmIj4NCktleSB2YWx1ZXMmbmJzcDsobGFiZWxzIGluIGNv c2UpIGFyZSBkZWZpbmVkIGZvciB0aGUgb3JpZ2luYWwgSldUIGNsYWltcy4gSSB0aGluayBhIHNl Y3Rpb24gZm9yIHVuZGVyIElBTkEgY29uc2lkZXJhdGlvbnMgdGhhdCByZXF1ZXN0cyBhIG5ldyBJ QU5BIHJlZ2lzdHJ5IGZvciBDV1Qga2V5IHZhbHVlcyBpcyBuZWVkZWQuPC9kaXY+DQo8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiIHN0eWxlPSJtYXJnaW46MGluIDBpbiAwLjAw MDFwdDsgZm9udC1zaXplOjEycHQ7IGZvbnQtZmFtaWx5OidUaW1lcyBOZXcgUm9tYW4nLHNlcmlm Ij4NCiZuYnNwOzwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIiBz dHlsZT0ibWFyZ2luOjBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZToxMnB0OyBmb250LWZhbWls eTonVGltZXMgTmV3IFJvbWFuJyxzZXJpZiI+DQpUaGVuIHRvIGEgbW9yZSBwaGlsb3NvcGhpY2Fs IHF1ZXN0aW9uLiBTaG91bGQgQ1dUIGhhdmUgaXRzIG93biBjbGFpbXMgcmVnaXN0cnkgb3Igc2hv dWxkIEkgYWx3YXlzIGZpcnN0IHJlcXVlc3QgYSBuZXcgSldUIGNsYWltIGFuZCB0aGVuIHJlcXVl c3QgdGhlIENXVCBDQk9SIGtleSB2YWx1ZS4mbmJzcDs8L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9Im1hcmdpbjowaW4gMGluIDAuMDAwMXB0OyBmb250 LXNpemU6MTJwdDsgZm9udC1mYW1pbHk6J1RpbWVzIE5ldyBSb21hbicsc2VyaWYiPg0KSU1ITyBD V1Qgc2hvdWxkIG5vdCBoYXZlIGl0cyBvd24gY2xhaW1zIHJlZ2lzdHJ5LiBJZiBwb3NzaWJsZSBv bmUgbWlnaHQgd2FudCB0byBleHRlbmQgdGhlIEpXVCBjbGFpbXMgcmVnaXN0cmF0aW9uIHBhcmFt ZXRlcnMgKHRlbXBsYXRlKSB0byBhbHNvIGhhdmUgdGhlIG9wdGlvbiB0byByZWdpc3RlciBhIENC T1Iga2V5IHZhbHVlLjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0i IiBzdHlsZT0ibWFyZ2luOjBpbiAwaW4gMC4wMDAxcHQ7IGZvbnQtc2l6ZToxMnB0OyBmb250LWZh bWlseTonVGltZXMgTmV3IFJvbWFuJyxzZXJpZiI+DQombmJzcDs8L2Rpdj4NCjwvZGl2Pg0KPGRp diBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiIgc3R5bGU9Im1hcmdpbjowaW4gMGluIDAuMDAwMXB0 OyBmb250LXNpemU6MTJwdDsgZm9udC1mYW1pbHk6J1RpbWVzIE5ldyBSb21hbicsc2VyaWYiPg0K QmVzdCByZWdhcmRzPC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIi IHN0eWxlPSJtYXJnaW46MGluIDBpbiAwLjAwMDFwdDsgZm9udC1zaXplOjEycHQ7IGZvbnQtZmFt aWx5OidUaW1lcyBOZXcgUm9tYW4nLHNlcmlmIj4NCi8vU2FtdWVsPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6SGVsdmV0aWNh OyBmb250LXNpemU6MTJweDsgZm9udC1zdHlsZTpub3JtYWw7IGZvbnQtd2VpZ2h0Om5vcm1hbDsg bGV0dGVyLXNwYWNpbmc6bm9ybWFsOyBvcnBoYW5zOmF1dG87IHRleHQtYWxpZ246c3RhcnQ7IHRl eHQtaW5kZW50OjBweDsgdGV4dC10cmFuc2Zvcm06bm9uZTsgd2hpdGUtc3BhY2U6bm9ybWFsOyB3 aWRvd3M6YXV0bzsgd29yZC1zcGFjaW5nOjBweDsgZmxvYXQ6bm9uZTsgZGlzcGxheTppbmxpbmUh aW1wb3J0YW50Ij5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f Xzwvc3Bhbj48YnIgY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5OkhlbHZldGljYTsgZm9udC1z aXplOjEycHg7IGZvbnQtc3R5bGU6bm9ybWFsOyBmb250LXdlaWdodDpub3JtYWw7IGxldHRlci1z cGFjaW5nOm5vcm1hbDsgb3JwaGFuczphdXRvOyB0ZXh0LWFsaWduOnN0YXJ0OyB0ZXh0LWluZGVu dDowcHg7IHRleHQtdHJhbnNmb3JtOm5vbmU7IHdoaXRlLXNwYWNlOm5vcm1hbDsgd2lkb3dzOmF1 dG87IHdvcmQtc3BhY2luZzowcHgiPg0KPHNwYW4gY2xhc3M9IiIgc3R5bGU9ImZvbnQtZmFtaWx5 OkhlbHZldGljYTsgZm9udC1zaXplOjEycHg7IGZvbnQtc3R5bGU6bm9ybWFsOyBmb250LXdlaWdo dDpub3JtYWw7IGxldHRlci1zcGFjaW5nOm5vcm1hbDsgb3JwaGFuczphdXRvOyB0ZXh0LWFsaWdu OnN0YXJ0OyB0ZXh0LWluZGVudDowcHg7IHRleHQtdHJhbnNmb3JtOm5vbmU7IHdoaXRlLXNwYWNl Om5vcm1hbDsgd2lkb3dzOmF1dG87IHdvcmQtc3BhY2luZzowcHg7IGZsb2F0Om5vbmU7IGRpc3Bs YXk6aW5saW5lIWltcG9ydGFudCI+QWNlDQogbWFpbGluZyBsaXN0PC9zcGFuPjxiciBjbGFzcz0i IiBzdHlsZT0iZm9udC1mYW1pbHk6SGVsdmV0aWNhOyBmb250LXNpemU6MTJweDsgZm9udC1zdHls ZTpub3JtYWw7IGZvbnQtd2VpZ2h0Om5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6bm9ybWFsOyBvcnBo YW5zOmF1dG87IHRleHQtYWxpZ246c3RhcnQ7IHRleHQtaW5kZW50OjBweDsgdGV4dC10cmFuc2Zv cm06bm9uZTsgd2hpdGUtc3BhY2U6bm9ybWFsOyB3aWRvd3M6YXV0bzsgd29yZC1zcGFjaW5nOjBw eCI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6SGVsdmV0aWNhOyBmb250LXNp emU6MTJweDsgZm9udC1zdHlsZTpub3JtYWw7IGZvbnQtd2VpZ2h0Om5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6bm9ybWFsOyBvcnBoYW5zOmF1dG87IHRleHQtYWxpZ246c3RhcnQ7IHRleHQtaW5kZW50 OjBweDsgdGV4dC10cmFuc2Zvcm06bm9uZTsgd2hpdGUtc3BhY2U6bm9ybWFsOyB3aWRvd3M6YXV0 bzsgd29yZC1zcGFjaW5nOjBweDsgZmxvYXQ6bm9uZTsgZGlzcGxheTppbmxpbmUhaW1wb3J0YW50 Ij48YSBocmVmPSJtYWlsdG86QWNlQGlldGYub3JnIiBjbGFzcz0iIj5BY2VAaWV0Zi5vcmc8L2E+ PC9zcGFuPjxiciBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6SGVsdmV0aWNhOyBmb250LXNp emU6MTJweDsgZm9udC1zdHlsZTpub3JtYWw7IGZvbnQtd2VpZ2h0Om5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6bm9ybWFsOyBvcnBoYW5zOmF1dG87IHRleHQtYWxpZ246c3RhcnQ7IHRleHQtaW5kZW50 OjBweDsgdGV4dC10cmFuc2Zvcm06bm9uZTsgd2hpdGUtc3BhY2U6bm9ybWFsOyB3aWRvd3M6YXV0 bzsgd29yZC1zcGFjaW5nOjBweCI+DQo8c3BhbiBjbGFzcz0iIiBzdHlsZT0iZm9udC1mYW1pbHk6 SGVsdmV0aWNhOyBmb250LXNpemU6MTJweDsgZm9udC1zdHlsZTpub3JtYWw7IGZvbnQtd2VpZ2h0 Om5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6bm9ybWFsOyBvcnBoYW5zOmF1dG87IHRleHQtYWxpZ246 c3RhcnQ7IHRleHQtaW5kZW50OjBweDsgdGV4dC10cmFuc2Zvcm06bm9uZTsgd2hpdGUtc3BhY2U6 bm9ybWFsOyB3aWRvd3M6YXV0bzsgd29yZC1zcGFjaW5nOjBweDsgZmxvYXQ6bm9uZTsgZGlzcGxh eTppbmxpbmUhaW1wb3J0YW50Ij48YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL2FjZSIgY2xhc3M9IiI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9hY2U8L2E+PC9zcGFuPjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_SN1PR0301MB1645A1970C66FCB1F1D24AA3F5860SN1PR0301MB1645_-- From nobody Mon Mar 28 12:56:23 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E110A12D871 for ; Mon, 28 Mar 2016 12:56:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.71 X-Spam-Level: X-Spam-Status: No, score=-2.71 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=google.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pibB9ieo4cSG for ; Mon, 28 Mar 2016 12:56:19 -0700 (PDT) Received: from mail-oi0-x235.google.com (mail-oi0-x235.google.com [IPv6:2607:f8b0:4003:c06::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A1BD912D93A for ; Mon, 28 Mar 2016 12:56:19 -0700 (PDT) Received: by mail-oi0-x235.google.com with SMTP id d205so184810823oia.0 for ; Mon, 28 Mar 2016 12:56:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=l0KADAF2uQzO/ukF0Vp7aIY8svCu7VzdGOvvyEp878I=; b=RmRvmi+GyYBvTiLjjDBn7ep8NpS35DN0jzZE8VKFWrmCZvzBosxe6AKXBD71T5qmcZ BFYuwTGp2ZL3POEQySuZL/sskzHrMScckPbHy7lHZQ/kRElEAknQoibwgofpjqRaiFg5 FvwnKJwhD0WkgRTtdwUaGS7yyTDvJLtsmKqFJtI5uRvsInYYTE/8KTz644cB1Glg8le6 5hy6y1dr61KtU588XTSbsyVFxWE18Kjty2v6NCXwKvBXz8aCv3KfTBPRL+/s88H4fHWW T6LuVzX/GNjW1hxDZiUNgg++Ul3UWVRlAtTNIVRo3R9rbQ+UWB7gkxuMGxfpnRJnEEdh bwDA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=l0KADAF2uQzO/ukF0Vp7aIY8svCu7VzdGOvvyEp878I=; b=OmJD63m6wsMt83C49KD3+KE3U7lXh/u6mejC5AuZ1O2booVpUqMP0uuxUKmwAAqZ0m wdTuC3QJD9bMQ9n5YiA7tJ5I4Sux2IDNFKujGkzJ+YU52ncwRpLEGRzWgSWn5DgaE3oz uSTGbQ6x0bUoYpTibRARi5OesuBMTXjd+yOPU2PG7/9SWtbVQimoVD46HIB0oZPjY1KQ X3FRmpyNCYZ//m/nzvZdAYZ3OB5wmTA1HfqyhqbP893YdfW79ofQ8p3VE8SjShE8jKUK 8I7boBTfRJi9S6tu36vvpCYkBfYJEmGxomaxxDs4oDX3/OE7npsoYQmnskZGPRK4yCTQ Um2w== X-Gm-Message-State: AD7BkJJOA0YIWdjG1fjNMhkI6Y0SZZPoWgN2hsXJMXdCJNc56umGOEdd2vezYQ4DymEz9G7rt/IgBTFNV8X3sXAZ X-Received: by 10.202.69.134 with SMTP id s128mr12269076oia.97.1459194978755; Mon, 28 Mar 2016 12:56:18 -0700 (PDT) MIME-Version: 1.0 References: <7D6EC121-A1D8-419E-9044-8B97F4303042@ve7jtb.com> In-Reply-To: From: William Denniss Date: Mon, 28 Mar 2016 19:56:09 +0000 Message-ID: To: Mike Jones , John Bradley , Anthony Nadalin Content-Type: multipart/alternative; boundary=001a113dc9a25e4834052f214e1f Archived-At: Cc: Samuel Erdtman , "Ace@ietf.org" , =?UTF-8?Q?Erik_Wahlstr=C3=B6m?= Subject: Re: [Ace] CWT registry for claim keys X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Mar 2016 19:56:22 -0000 --001a113dc9a25e4834052f214e1f Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable +1 On Mon, Mar 28, 2016 at 12:04 PM Mike Jones wrote: > +1 > > I'll work on appropriate edits with Erik. > > -- Mike > ------------------------------ > From: John Bradley > Sent: =E2=80=8E3/=E2=80=8E28/=E2=80=8E2016 11:23 AM > To: Anthony Nadalin > Cc: Samuel Erdtman ; Ace@ietf.org; Mike Jones > ; Erik Wahlstr=C3=B6m > Subject: Re: [Ace] CWT registry for claim keys > > +1 > > On Mar 28, 2016, at 3:13 PM, Anthony Nadalin > wrote: > > I would agree that CWT should not have its own claim registry, use the JW= T > claims registry > > *From:* Ace [mailto:ace-bounces@ietf.org ] *On > Behalf Of *Samuel Erdtman > *Sent:* Sunday, March 27, 2016 3:53 AM > *To:* Ace@ietf.org; Mike Jones ; Erik > Wahlstr=C3=B6m > *Subject:* [Ace] CWT registry for claim keys > > Hi, > CWT (https://tools.ietf.org/html/draft-wahlstroem-ace-cbor-web-token-00 > ) > does a great job of mapping JWT from JSON and JOSE to CBOR and COSE. > > I=C2=B4m currently working on an extension for the ACE framework and need= to > define new JWT claims and there CWT key values. > > Key values (labels in cose) are defined for the original JWT claims. I > think a section for under IANA considerations that requests a new IANA > registry for CWT key values is needed. > > Then to a more philosophical question. Should CWT have its own claims > registry or should I always first request a new JWT claim and then reques= t > the CWT CBOR key value. > IMHO CWT should not have its own claims registry. If possible one might > want to extend the JWT claims registration parameters (template) to also > have the option to register a CBOR key value. > > Best regards > //Samuel > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > --001a113dc9a25e4834052f214e1f Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable +1
On Mon, Mar 28, 2016 at 1= 2:04 PM Mike Jones <Micha= el.Jones@microsoft.com> wrote:
+1

I'll work on appropriate edits with Erik.

-- Mike
From: John Bradley Sent: =E2=80= =8E3/=E2=80=8E28/=E2=80=8E2016 11:23 AM
To: Anthony Nadalin
Cc: Samuel Erdtman; Ace@ietf.org; Mike Jones; Erik Wahlstr=C3=B6m
Subject: Re: [A= ce] CWT registry for claim keys

+1
On Mar 28, 2016, at 3:13 PM, Anthony Nadalin <tonynad@microsoft.com> wrote:<= /div>
I would agree= that CWT should not have its own claim registry, use the JWT claims regist= ry =C2=A0
From:= =C2=A0Ace [mailto:ace-bounces@ietf.org]=C2=A0On Behalf Of=C2=A0Samuel Erdtman
Sent:=C2=A0Sunday, March 27, 2016 3:53 AM
To:=C2=A0Ace@ietf.org; Mike Jones <Michael.Jones@microsoft.com>; Erik Wahlst= r=C3=B6m <erik@wahlstromstekniska.se>
Subject:=C2=A0[Ace] CWT registry for claim keys<= /div>
=C2=A0
Hi,
CWT (https://tools.ietf.org/html/draft-wahlstroem-ace-cbor-web-= token-00) does a great job of mapping JWT from JSON and JOSE to CBOR and COSE.
=C2=A0
I=C2=B4m currently working on an extension for the ACE framework and need t= o define new JWT claims and there CWT key values.=C2=A0
=C2=A0
Key values=C2=A0(labels in cose) are defined for the original JWT claims. I= think a section for under IANA considerations that requests a new IANA reg= istry for CWT key values is needed.
=C2=A0
Then to a more philosophical question. Should CWT have its own claims regis= try or should I always first request a new JWT claim and then request the C= WT CBOR key value.=C2=A0
IMHO CWT should not have its own claims registry. If possible one might wan= t to extend the JWT claims registration parameters (template) to also have = the option to register a CBOR key value.
=C2=A0
Best regards
//Samuel
_______________________________________________
Ace mailing list
Ace@ietf.org<= /a>
https://www.ietf.org/mailman/listinfo/ace

_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace
--001a113dc9a25e4834052f214e1f-- From nobody Tue Mar 29 01:31:05 2016 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A615C12D57E for ; Tue, 29 Mar 2016 01:31:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sics-se.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3edOz1hBx6-4 for ; Tue, 29 Mar 2016 01:31:01 -0700 (PDT) Received: from mail-lb0-x234.google.com (mail-lb0-x234.google.com [IPv6:2a00:1450:4010:c04::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 68D8412D578 for ; Tue, 29 Mar 2016 01:31:00 -0700 (PDT) Received: by mail-lb0-x234.google.com with SMTP id qe11so5516413lbc.3 for ; Tue, 29 Mar 2016 01:31:00 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sics-se.20150623.gappssmtp.com; s=20150623; h=subject:to:references:from:message-id:date:user-agent:mime-version :in-reply-to; bh=0aUwP4Mx9Ijo623rMry6BIJXqoqFCQKO+BbbTWeL8LQ=; b=MhIHw1UYG+3uklgCV1YWGwLwJ/OqSmOWebTAC7WQ2+PCJs/hClb5XZYgpBzMuMEvNq 3zt0dqsW5QITi68SHoiJtsI5m6+Oi3e1GgMAnXlAek+/HZb0udcWgpMKVo1HygYXigAI kVnTabdhY/XyZPOx3/pxfJE+MgwYulBmX8gFJqDe9ZD6/g8s7c39jJ0og9Vw8v2LNyYF ybcJsRbIEHUVtLIb33RFr3TDdVAfaM9JpFc7aqL17qXLqYivDQ/bxG+V+AnqGffxRE4m kloEOskQb+i+hoHcUXlX/j5oDBtxv3HNKcMApWxVe9SFkGcX3hmxPAXoA0qZ/jlC+3AD 4G5w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:from:message-id:date :user-agent:mime-version:in-reply-to; bh=0aUwP4Mx9Ijo623rMry6BIJXqoqFCQKO+BbbTWeL8LQ=; b=dbm6XncGo91Z06WNAYCz0bQYhJcq1dAGIY5Udo3yjQb3Tti2PgUepgajSHx+jquQ3e +QZzAK0Z6hYx4UFjRNLoUc4pwEg5TCzrosIdHlWNLU/vYQQYG3efnZfNySRL6vrvY8uf w/TYYIaIitoTJXlfLuUspVLNxULZtkwOWwmg1JXdqjf4L2d5g1uzD7V8Cy+4DNXOUmtd KtEgSL93KFDioJuiqhUf1WE1okF5SPTGAiv8TWrBeSzmFnvdB8vNBmabY3OseZtTKM5p c+jdhOc8qTnX/WoGHPRpoGewtyc20evR2wGMV+G7ysP6lW1dNPgxeb3DWhNjt6e5r4zs aUIw== X-Gm-Message-State: AD7BkJKJc42lpNrskTfUsiU8+9Yn536crjDU5AgNFykzBQK+nfHxiCLSZRPynwqe442qY5Ph X-Received: by 10.112.160.232 with SMTP id xn8mr446646lbb.22.1459240258472; Tue, 29 Mar 2016 01:30:58 -0700 (PDT) Received: from [192.168.0.166] ([85.235.10.186]) by smtp.gmail.com with ESMTPSA id qn2sm5159049lbb.49.2016.03.29.01.30.57 for (version=TLSv1/SSLv3 cipher=OTHER); Tue, 29 Mar 2016 01:30:57 -0700 (PDT) To: ace@ietf.org References: <56D7250E.6020300@gmx.net> <56DE8C4D.1020006@sics.se> From: Ludwig Seitz Message-ID: <56FA3D40.1040500@sics.se> Date: Tue, 29 Mar 2016 10:30:56 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms000604080900060002070907" Archived-At: Subject: Re: [Ace] Deployment Options X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Mar 2016 08:31:03 -0000 This is a cryptographically signed message in MIME format. --------------ms000604080900060002070907 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: quoted-printable On 2016-03-20 22:47, Samuel Erdtman wrote: > Hi > > To make some progress here I have created a branch in the git repositor= y ( > https://github.com/LudwigSeitz/ace-oauth/tree/deployment_examples), whe= re > the working copy of the document is located. In this branch I have merg= ed > 6.1 and 6.2 and renamed them to =93Local token validation=94, since the= key > aspect here is that the RS must be able to validate the token without > interaction with other systems in realtime. Then I have merged 6.3 and = 6.4 > and renamed them to =93Introspection aided token validation=94 to highl= ight the > fact that introspection is an option to get up to date keys and > authorisation information to the RS when the client cannot provide that= =2E > > 6.5 and 6.6 has been excluded, not because those could not be supported= , > but because they are more of corner cases. 6.6 might also need to defin= e > some extensions to the core framework, i.e. it seemed reasonable to tak= e it > out for now and introducing it in a more focused draft. > > Finally I have moved the whole section to an appendix and renamed it to= > Deployment examples. > > Thoughts? > > //Samuel > > Sounds reasonable. We can describe the (marginal) differences between=20 6.1 and 6.2 as well as 6.3 and 6.4 in a short paragraph. I think it=20 boils down to the lifetime of the token that the client is given in both = cases. Does that have any more implications? /Ludwig --=20 Ludwig Seitz, PhD SICS Swedish ICT AB Ideon Science Park Building Beta 2 Scheelev=E4gen 17 SE-223 70 Lund Phone +46(0)70-349 92 51 http://www.sics.se --------------ms000604080900060002070907 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC CtQwggTqMIID0qADAgECAhAU4QcxMULaotNy8Yzm2pESMA0GCSqGSIb3DQEBCwUAMHUxCzAJ BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGll bnQgQ0EwHhcNMTYwMzE0MDkzNDMyWhcNMTcwMzE0MDkzNDMyWjA4MRcwFQYDVQQDDA5sdWR3 aWdAc2ljcy5zZTEdMBsGCSqGSIb3DQEJARYObHVkd2lnQHNpY3Muc2UwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQC9kgmm82Op78D9DXYNJrQW5bUdSxElnOC/CzAK/enHn+uF B/RLo8alI6Ukd35qsAtcje0I3e/RtbkRnkEuhKneH+aDRofy7YaWQO61CjIlcdndTx8FEmXK /swcafYX5PbyzQFGgApwtWFkVXcq3R87CDB3VbkHzTHIBmfwZ4hhDeEyuJoSuWEVWQppfTji /GpVLiDx6s+Zqm3qI5EkjvhQ+jX3tJxXqUf4w1BY6/sBLfvr7TOPGPoAmi6B2UOgyDSfX3c0 +jzlYFLNb6Eqc7uGvaQi7VN39kAJXz9f+qL/wokaNjboK3/JyTG/ikxsWymzO9E0/U9apn2Y z5SVUGSDAgMBAAGjggGxMIIBrTAOBgNVHQ8BAf8EBAMCBLAwHQYDVR0lBBYwFAYIKwYBBQUH AwIGCCsGAQUFBwMEMAkGA1UdEwQCMAAwHQYDVR0OBBYEFN37NX1Db3Xp23cbQI1MpYPUMw84 MB8GA1UdIwQYMBaAFCSBbDlhvkkPj7cbRivJKLUnSG1oMG8GCCsGAQUFBwEBBGMwYTAkBggr BgEFBQcwAYYYaHR0cDovL29jc3Auc3RhcnRzc2wuY29tMDkGCCsGAQUFBzAChi1odHRwOi8v YWlhLnN0YXJ0c3NsLmNvbS9jZXJ0cy9zY2EuY2xpZW50MS5jcnQwOAYDVR0fBDEwLzAtoCug KYYnaHR0cDovL2NybC5zdGFydHNzbC5jb20vc2NhLWNsaWVudDEuY3JsMBkGA1UdEQQSMBCB Dmx1ZHdpZ0BzaWNzLnNlMCMGA1UdEgQcMBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBG BgNVHSAEPzA9MDsGCysGAQQBgbU3AQIEMCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3Rh cnRzc2wuY29tL3BvbGljeTANBgkqhkiG9w0BAQsFAAOCAQEAUy78MN+soYHwIz+6m9mMkzPF KfgIq7sLupWnis7K5U66U9zfKOVDReyfUvPmar7P7Tb9uNNrUlkk3lSISplqU30TMnVbtK5D I0mxdpa1hZxIAa8uWQnAh/oYJJYaMziKxpZgsUjel6/ZnD0z/QsuHo763I1boi2ghe4Knj0f qFO79ErRr9aJJBfQlFVwQ4gRoYtMz18/usC3eqGxFz8a/LCeRMWeZJagGJ/St1WW1HUBmMFd vRFweeUdCvDbzK+WjqbxhXyi7b0sH65lWIjINCBVQ0AvqOwm/aXEWcIQlAIJjr2kEC6c0VY6 V1aP16BAKooEgGGOTrmcDGeteXZRyjCCBeIwggPKoAMCAQICEGunin0K14jWUQr5WeTntOEw DQYJKoZIhvcNAQELBQAwfTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4x KzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMT IFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTE1MTIxNjAxMDAwNVoXDTMw MTIxNjAxMDAwNVowdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAn BgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFy dENvbSBDbGFzcyAxIENsaWVudCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AL192vfDon2D9luC/dtbX64eG3XAtRmvmCSsu1d52DXsCR58zJQbCtB2/A5uFqNxWacpXGGt TCRk9dEDBlmixEd8QiLkUfvHpJX/xKnmVkS6Iye8wUbYzMsDzgnpazlPg19dnSqfhM+Cevdf a89VLnUztRr2cgmCfyO9Otrh7LJDPG+4D8ZnAqDtVB8MKYJL6QgKyVhhaBc4y3bGWxKyXEtx 7QIZZGxPwSkzK3WIN+VKNdkiwTubW5PIdopmykwvIjLPqbJK7yPwFZYekKE015OsW6FV+s4D IM8UlVS8pkIsoGGJtMuWjLL4tq2hYQuuN0jhrxK1ljz50hH23gA9cbMCAwEAAaOCAWQwggFg MA4GA1UdDwEB/wQEAwIBBjAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEgYDVR0T AQH/BAgwBgEB/wIBADAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNv bS9zZnNjYS5jcmwwZgYIKwYBBQUHAQEEWjBYMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5z dGFydHNzbC5jb20wMAYIKwYBBQUHMAKGJGh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRz L2NhLmNydDAdBgNVHQ4EFgQUJIFsOWG+SQ+PtxtGK8kotSdIbWgwHwYDVR0jBBgwFoAUTgvv GqRAW6UXaYcwyjRoQ9BBrvIwPwYDVR0gBDgwNjA0BgRVHSAAMCwwKgYIKwYBBQUHAgEWHmh0 dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeTANBgkqhkiG9w0BAQsFAAOCAgEAi+P3h+wB i4StDwECW5zhIycjBL008HACblIf26HY0JdOruKbrWDsXUsiI0j/7Crft9S5oxvPiDtVqspB OB/y5uzSns1lZwh7sG96bYBZpcGzGxpFNjDmQbcM3yl3WFIRS4WhNrsOY14V7y2IrUGsvets D+bjyOngCIVeC/GmsmtbuLOzJ606tEc9uRbhjTu/b0x2Fo+/e7UkQvKzNeo7OMhijixaULyI NBfCBJb+e29bLafgu6JqjOUJ9eXXj20p6q/CW+uVrZiSW57+q5an2P2i7hP85jQJcy5j4HzA 0rSiF3YPhKGAWUxKPMAVGgcYoXzWydOvZ3UDsTDTagXpRDIKQLZo02wrlxY6iMFqvlzsemVf 1odhQJmi7Eh5TbxI40kDGcBOBHhwnaOumZhLP+SWJQnjpLpSlUOj95uf1zo9oz9e0NgIJoz/ tdfrBzez76xtDsK0KfUDHt1/q59BvDI7RX6gVr0fQoCyMczNzCTcRXYHY0tq2J0oT+bsb6sH 2b4WVWAiJKnSYaWDjdA70qHX4mq9MIjO/ZskmSY8wtAk24orAc0vwXgYanqNsBX5Yv4sN4Z9 VyrwMdLcusP7HJgRdAGKpkR2I9U4zEsNJQJewM7S4Jalo1DyPrLpL2nTET8ZrSl5Utp1UeGp /2deoprGevfnxWB+vHNQiu85o6MxggPMMIIDyAIBATCBiTB1MQswCQYDVQQGEwJJTDEWMBQG A1UEChMNU3RhcnRDb20gTHRkLjEpMCcGA1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBB dXRob3JpdHkxIzAhBgNVBAMTGlN0YXJ0Q29tIENsYXNzIDEgQ2xpZW50IENBAhAU4QcxMULa otNy8Yzm2pESMA0GCWCGSAFlAwQCAQUAoIICEzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcB MBwGCSqGSIb3DQEJBTEPFw0xNjAzMjkwODMwNTZaMC8GCSqGSIb3DQEJBDEiBCBwb1xDEgjT ul8XaiwTqp6i3cEI1RgshSgvR/ybuTc+DTBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQB KjALBglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMC AgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGaBgkrBgEEAYI3EAQxgYwwgYkwdTELMAkG A1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENl cnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVu dCBDQQIQFOEHMTFC2qLTcvGM5tqREjCBnAYLKoZIhvcNAQkQAgsxgYyggYkwdTELMAkGA1UE BhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRp ZmljYXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBD QQIQFOEHMTFC2qLTcvGM5tqREjANBgkqhkiG9w0BAQEFAASCAQB94LvhTRE36dY/Rg48ZhP9 M+GUzvNTuJM+S4Iu+mRLeDSwP8XeoZN0Ar9qtInT4XptwA0ygcgtUASPtyf5HWJbc3uknRZh +viuoiPVxuWQHuUiFhrAdofZCpvJ4imVgy/NmtH2y/weIq7P0l8m6mP2Iv9zf2cgkC21EXRD SC8bjD2E9eUKiPKVjxtP48s8M3kseF8kJ/SG6ADYc5vkbHxExSKI29pvvzjQ2VxrC8faUSNZ 0MsM3Ey92eydHsxPIhDQw482pDmTPbH8itb0ebPJ+oE5CrwEFQkyWDZIqZp8xSzfuNUsB+bT ExnbggEkb/u0cgRToyDd0unzJPredLnXAAAAAAAA --------------ms000604080900060002070907--