From nobody Fri Nov 2 04:31:25 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4A876130DC2 for ; Fri, 2 Nov 2018 04:31:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.77 X-Spam-Level: X-Spam-Status: No, score=-4.77 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.47, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com header.b=GmN1jw8U; dkim=pass (1024-bit key) header.d=ericsson.com header.b=IdHrjQPK Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xgN7vCZKSDgV for ; Fri, 2 Nov 2018 04:31:20 -0700 (PDT) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9006C1292AD for ; Fri, 2 Nov 2018 04:31:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1541158278; x=1543750278; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=bewanTgegyPU13rDe9Tnmh7h2D0YU82AGFVc0twXZ0g=; b=GmN1jw8U2u5Jw5ZaMH7Ivc4yhgCfb7G6FD1YCrm/5AZZUkQRddlwR4BPAkBRndaa 512FLdR5dyjilicSlM6h7jAqdmfL1fvleN8VDdDZSooPfgJ0qfLibYtNDc1GQu4n ZKFoRrjoYkg/3NG0xMspGhQXXfTwx5bGdrmtzx7okFY=; X-AuditID: c1b4fb2d-40dff7000000434d-78-5bdc3586be2e Received: from ESESBMB504.ericsson.se (Unknown_Domain [153.88.183.117]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id A3.8C.17229.6853CDB5; Fri, 2 Nov 2018 12:31:18 +0100 (CET) Received: from ESESBMR504.ericsson.se (153.88.183.139) by ESESBMB504.ericsson.se (153.88.183.187) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Fri, 2 Nov 2018 12:31:18 +0100 Received: from ESESBMB505.ericsson.se (153.88.183.172) by ESESBMR504.ericsson.se (153.88.183.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Fri, 2 Nov 2018 12:31:18 +0100 Received: from EUR03-VE1-obe.outbound.protection.outlook.com (153.88.183.157) by ESESBMB505.ericsson.se (153.88.183.172) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3 via Frontend Transport; Fri, 2 Nov 2018 12:31:17 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=bewanTgegyPU13rDe9Tnmh7h2D0YU82AGFVc0twXZ0g=; b=IdHrjQPKKP7CXelTZUkg/Ozt8IgjllmC+o0GXOJn+VXM0dsKm88lY2die61ueBaOjYAlBmBrEZyMYobvAgjcjk0JUdGs49+rsBJayOkigOIWQqSMO8M4V5nGeIMQt3XJVrdsTo4yGR0krQJ9MkroEVyAkDU3GDcQhdcLorVBY+k= Received: from HE1PR07MB4169.eurprd07.prod.outlook.com (20.176.166.22) by HE1PR07MB3163.eurprd07.prod.outlook.com (10.170.245.25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1294.16; Fri, 2 Nov 2018 11:31:17 +0000 Received: from HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::fcb5:ca45:9e56:1910]) by HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::fcb5:ca45:9e56:1910%2]) with mapi id 15.20.1294.024; Fri, 2 Nov 2018 11:31:16 +0000 From: John Mattsson To: "t2trg@irtf.org" , "ace@ietf.org" Thread-Topic: Minimizing overhead of certificates in constrained IoT Thread-Index: AQHUcp+R17G1j53EqkyuwSM7Na/Fng== Date: Fri, 2 Nov 2018 11:31:16 +0000 Message-ID: <3F7E42DF-7CA9-4765-AB67-A53B4E7D1AC1@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.11.0.180909 x-originating-ip: [82.214.46.143] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; HE1PR07MB3163; 6:MiF+84nTKYossnmwdQVKWEfJ3ueuyZmRHL2tbIMSdttTN+xyM0p3iDVNMGf+GLzPhho6TZ7joiNymXU2tBdHH+Gd9rsbyLSICbXjG/cVO0eXfQwWw1eWax7XreeR3kC6QmhbKziZvMwtaJnt7F8QdU1+NnJX33RS2Cc3llYWsUyGoFdh646TYc2BUmU6cYiUf9eEOBNGRdrlLgcjpGVi9U6kqSpIa6/SVfv0JO5eVI64pawyZ1jhQTD0lYADOVDeaZQ7f3atUhDo0CVpvExx9YfQvsFO0ftM0njrBL21X8vOZ60Bc7arGhW8dupBE8Cyp2KMlLAu4WCT2JWtTuKxyZhjA6nNA8TufPfgQZ5kA7mbLi16lUtmLCeC8LCmkjsieymOMRtRzn+XzlC1ExQTLpUchApiqwvlzYI6aSbKlYT9j1UQ64W56vscvmJigGpzEl/xEss0DbOIUnKEWLlbug==; 5:XE69y1Kzzd60iKd7v3C/InEIKWkpDSLH+PTg2pQHUnjhisxf9BeBotLr5KvOEJTIJW1byYMQPtZybiPSwqkQy6y8fQCjoGbZmTYN2F7rKqqrPnuSSjWDKKkfua5OVisGlHi9DsBzX7RRRTeePjSH0cVGNzNYdLgm7taZyVv0SzY=; 7:ILQvYwM0CstV+i3LQxHdoqrq+FRwPQF1VbxoE1p4sEda6OXvh65wI0d57Q6w8kI+o0Qj6MzJrtjLsee4YRFuBSUV7eqHL2Pp+hG6d9rbfwBplHS/+RwW26mudDyEfVP2QInMjt+S+fkE8qogWYkxtQ== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 3baa10d7-4584-40f4-4e5b-08d640b6b41b x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(2017052603328)(7153060)(7193020); SRVR:HE1PR07MB3163; x-ms-traffictypediagnostic: HE1PR07MB3163: authentication-results: spf=none (sender IP is ) smtp.mailfrom=john.mattsson@ericsson.com; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(165104125076784)(17755550239193)(192374486261705); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3231382)(944501410)(52105095)(3002001)(10201501046)(93006095)(93001095)(148016)(149066)(150057)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123560045)(20161123564045)(20161123558120)(201708071742011)(7699051)(76991095); SRVR:HE1PR07MB3163; BCL:0; PCL:0; RULEID:; SRVR:HE1PR07MB3163; x-forefront-prvs: 08444C7C87 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(396003)(376002)(346002)(366004)(136003)(51444003)(189003)(199004)(44832011)(966005)(5660300001)(7736002)(106356001)(105586002)(2900100001)(14454004)(102836004)(36756003)(99286004)(6506007)(2501003)(6486002)(53936002)(305945005)(8676002)(186003)(2906002)(26005)(6306002)(6512007)(81156014)(81166006)(110136005)(68736007)(82746002)(97736004)(6436002)(25786009)(6116002)(3846002)(2616005)(478600001)(14444005)(256004)(66066001)(71190400001)(476003)(316002)(486006)(58126008)(8936002)(86362001)(33656002)(71200400001)(83716004); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB3163; H:HE1PR07MB4169.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: NJpFgnmFaZiBM410YiwvholAv2zCc9FFWDgRw2Dh/O8D7gE+iykISfCcZMV3VkYstwF4Z6wxvxtFtvi4DhzEAClvt5uRfdY5L4c+ymxjzLbjcTnRJ8WeJboScqTYvTEhpBatUdZOmvxA1ZhNlumEd/w1/qh4zDZpFD+k28TrGblrpBXBwEad5TwqpfLEniu62ukkYj7TiYkYpI3cjhN59nLZ1MpzmuiGjfCeTbv6dY+7eFanHEkIU0JBCOsOl/8saoSTS14zrqWNPdZiYBKDFGwkgBjzSC7nRFUD0yaJ9rkH8Y+vDsSkb4tQAiBwdT0jzA+7YrN8rcPFKPO1UrOJ3A+F4acZaohVZuWqeG5nZgU= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <13EB1E261346F9478FD598E8539A4935@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 3baa10d7-4584-40f4-4e5b-08d640b6b41b X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Nov 2018 11:31:16.7256 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB3163 X-OriginatorOrg: ericsson.com X-Brightmail-Tracker: H4sIAAAAAAAAA02SbUhTURjHPffebdfV8rQ0HxSDDSUSnM6K/BBqGDYiIfoUzrKlFzXnC7sq 6gdRaSN8IfHdmUxowZjDt5TCZtK0lhUKCVpm4Gxa9oKm5GqS5XZn9O33f57//znnORyaFDfy Quic/CJGk69SS/lCquPyg+Io3ckFZcyfrtA411YdGbe2WEclEgqj8RehaBoY518kUoWnMxl1 TgmjiY6/JszuebVMFvZHlPaY7wsq0VB4DfKnAZ8Au87Iq0FCWownEOxU6RAnfiDYsrTz/4ml mWWCE3cJGLd/JT2Cwg0kGN48JTzDxLiRgMl5OedyIBj/9Iz0NPg4BrqslXwPB+KzsDa1QXn4 EE6AkdEB3l59+FEjybEMfo4OIg9TOBzc/TqvR7TrH+4Y9GYRPgyuFxbvwSQOhnmngeA2wmC0 TpMcB8Hqhx1vNghHg2HxFo+rS+DlY5PPEwavDbXepQHP8sG1UuUzRcF6S4vPlAIbY1qKM9kR bFqdAq4RCdWWWYK70RXQatt84VwYqV9CHKeBzVLlG3QEzPUOimM7uRugG5Bc/98SekTv8jHo G4nmygrQOkwExxJornUI9N63OAiTHU6qG/HMKIhlWDYvK/a4jNHkZLBsQb4snykaRLs/5cnQ dtRD1PPljA1hGkn3iy5IFpRinqqELcuzIaBJaaAoee2dUizKVJWVM5qCdE2xmmFtKJSmpMEi mdmaKsZZqiIml2EKGc1el6D9QyqRxRwWkDiXdD2tV9XpLEi6ZFJ22doSPn+v8ANjU9PmRqn1 nGty1g/r96m3W9+uXJWn3hzlVbTfmAoGxdHqVklsdZt7hx6zuUTuOkHjNPW7sw/HL6StRnwk TN9up3dPnJpKPl/rfn4g4J5i/X3kXMrAHedMXH/vUsZCefOmtE9KsdkqeSSpYVV/AVXCxUYl AwAA Archived-At: Subject: [Ace] Minimizing overhead of certificates in constrained IoT X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Nov 2018 11:31:23 -0000 SGksDQoNCldlIHJlY2VudGx5IHN1Ym1pdHRlZCBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwv ZHJhZnQtcmF6YS1hY2UtY2Jvci1jZXJ0aWZpY2F0ZXMtMDAsIHdoaWNoIGJ1aWxkIG9uIHJlc2Vh cmNoIGRvbmUgYnkgUmVzZWFyY2ggSW5zdGl0dXRlcyBvZiBTd2VkZW4sIFJveWFsIEluc3RpdHV0 ZSBvZiBUZWNobm9sb2d5IGluIFN0b2NraG9sbSwgYW5kIE5leHVzOg0KDQpodHRwczovL2t0aC5k aXZhLXBvcnRhbC5vcmcvc21hc2gvZ2V0L2RpdmEyOjExNTM5NTgvRlVMTFRFWFQwMS5wZGYNCmh0 dHBzOi8vZG9pLm9yZy8xMC4xMDA3Lzk3OC0zLTMxOS05Mzc5Ny03XzE0DQoNClRoZSBtZWNoYW5p c20gaW4gdGhlIGRyYWZ0IGFpbXMgdG8gcmVkdWNlIG1lc3NhZ2Ugb3ZlcmhlYWQgd2l0aCB0aGUg YXBwcm9hY2ggdG8gc3RhcnQgd2l0aCBhIGhlYXZpbHkgcHJvZmlsZWQgWC41MDkgY2VydGlmaWNh dGUgYW5kIGVuY29kZSBpdCB0byBDQk9SLCByZXN1bHRpbmcgaW4gYXJvdW5kIDUwJSBzYXZpbmdz IGluIG1lc3NhZ2Ugb3ZlcmhlYWQgYW5kIHN0b3JhZ2UuIEEgbWFqb3IgcmVhc29uIGZvciBzdWJt aXR0aW5nIHRoaXMgZWFybHkgZHJhZnQgaXMgdG8gc3RhcnQgYSBkaXNjdXNzaW9uIG9uIGhvdyB0 byBtaW5pbWl6ZSB0aGUgb3ZlcmhlYWQgKG1lc3NhZ2Ugc2l6ZSwgY29kZSBzaXplLCBtZW1vcnks IHN0b3JhZ2UsIHByb2Nlc3NpbmcsIGV0Yy4pIGNhdXNlZCBieSBjZXJ0aWZpY2F0ZXMgaW4gSW9U IGRlcGxveW1lbnRzLg0KDQpDdXJyZW50IFguNTA5IGNlcnRpZmljYXRlcyBhcmUgZGVtYW5kaW5n IGluIHNldmVyYWwgd2F5cyAobWVzc2FnZSwgY29kZSBzaXplLCBtZW1vcnksIHByb2Nlc3Npbmcs IGV0Yy4gYW5kIGFyZSBub3QgZGVzaWduZWQgZm9yIGNvbnN0cmFpbmVkIElvVCBlbnZpcm9ubWVu dHMuIFRoZSBxdWl0ZSBsYXJnZSBzaXplcyBvZiBldmVuIHdlbGwgcHJvZmlsZWQgWC41MDkgY2Vy dGlmaWNhdGVzIG1lYW4gdGhhdCB0aGV5IHRha2UgdXAgYSBsYXJnZSBwYXJ0IG9mIHRoZSB0b3Rh bCBudW1iZXIgb2YgYnl0ZXMgd2hlbiB1c2VkIGluIHByb3RvY29scy4gVHJhbnNtaXR0aW5nLCBy ZWNlaXZpbmcsIG9yIGV2ZW4gbGlzdGVuaW5nIGZvciByYWRpbyBpcyByZWxhdGl2ZWx5IGV4cGVu c2l2ZSBpbiB0ZXJtcyBvZiBwb3dlciBjb25zdW1wdGlvbiBhbmQgYXMgdGhlIHJhZGlvIHJlc291 cmNlcyBhcmUgb2Z0ZW4gY29uc3RyYWluZWQsIGxhcmdlIG1lc3NhZ2VzIGxlYWQgdG8gaW50ZXJm ZXJlbmNlIGFuZCB0aGVyZWZvcmUgbW9yZSBsYXRlbmN5IHRoYW4ganVzdCB0aGUgbWVzc2FnZSBz aXplcyB3b3VsZCBpbmZlci4NCg0KVGhhdCBmYWN0IHRoYXQgY2VydGlmaWNhdGVzIGFyZSBzZW50 IGVuY3J5cHRlZCBpbiBuZXcgcHJvdG9jb2xzIChUTFMgMS4zLCBEVExTIDEuMywgRURIT0MpIG1l YW5zIHRoYXQgY29tcHJlc3Npb24gaW4gaW50ZXJtZWRpYXJpZXMgd2lsbCBub3Qgd29yayBpbiB0 aGUgZnV0dXJlLiBUTFMgMS4zIGFuZCBEVExTIDEuMyBhcmUgY3VycmVudGx5IGxvb2tpbmcgYXQg Y2VydGlmaWNhdGUgY29tcHJlc3Npb24sIGJ1dCB0aGVzZSBtZWNoYW5pc21zIGFyZSBub3Qgb3B0 aW1hbCBmb3IgY29uc3RyYWluZWQgSW9ULiBUaGUgdXNlIG9mIGdlbmVyYWwgbG9zc2xlc3MgY29t cHJlc3Npb24gYWxnb3JpdGhtcyBhcmUgcXVpdGUgaGVhdnksIGFuZCB0aGV5IGRvIG5vdCBjb21w cmVzcyB0aGluZ3Mgb3B0aW1hbGx5Lg0KDQpXaXRoIHRoZSBzdWJtaXNzaW9uIG9mIHJhZnQtcmF6 YS1hY2UtY2Jvci1jZXJ0aWZpY2F0ZXMgd2Ugd291bGQgbGlrZSB0byBzdGFydCBhIGRpc2N1c3Np b24gb24gaG93IHRvIG1pbmltaXplIHRoZSBvdmVyaGVhZCBjYXVzZWQgYnkgY2VydGlmaWNhdGVz Lg0KDQotIFdoaWNoIGFzcGVjdHMgZG8gdGhlIGNvbW11bml0eSBwcmlvcml0aXNlIHRoZSBtb3N0 PyBpLmUuIG1lc3NhZ2Ugc2l6ZSwgY29kZSBzaXplLCBtZW1vcnksIHByb2Nlc3NpbmcsIGV0Yy4g QW5kIGhvdyBzaG91bGQgdHJhZGUtb2ZmcyBiZXR3ZWVuIHRoZXNlIGFzcGVjdHMgbG9vayBsaWtl Pw0KDQotIEZvciBob3cgbG9uZyB0aW1lIGlzIHBlb3BsZSBwbGFubmluZyB0byB1c2Ugb2xkZXIg cHJvdG9jb2xzIHRoYXQgZG8gbm90IGVuY3J5cHQgY2VydGlmaWNhdGVzPyBJcyBpdCB3b3J0aCBz cGVjaWZ5aW5nIGdhdGV3YXkgdHlwZSBvZiBjb21wcmVzc2lvbiBmb3IgdGhlc2UgcHJvdG9jb2xz Pw0KDQpkcmFmdC1yYXphLWFjZS1jYm9yLWNlcnRpZmljYXRlcyBkb2VzIGN1cnJlbnRseSB0YWtl IHRoZSBhcHByb2FjaGVkIHRvIHN0YXJ0IHdpdGggYSBoZWF2aWx5IHByb2ZpbGVkIFguNTA5IGNl cnRpZmljYXRlIGFuZCBlbmNvZGUgaXQgdG8gQ0JPUi4gQW5vdGhlciBhcHByb2FjaCBpcyB0byBu b3Qgc3RhcnQgd2l0aCBYLjUwOSBhbmQgZG8gY2VydGlmaWNhdGVzIGluIENCT1IgZGlyZWN0bHku IFRoaXMgY2FuIGJlIGV2ZW4gbW9yZSBvcHRpbWFsIGZyb20gYSB0aGVvcmV0aWNhbCBwb2ludCBv ZiB2aWV3IGJ1dCBtYXkgbmV2ZXIgZGVwbG95ZWQuIFByZXZpb3VzIGF0dGVtcHRzIHRvIGludHJv ZHVjZSBuZXcgY2VydGlmaWNhdGUgdHlwZXMgc2VlbSB0byBoYXZlIGZhaWxlZC4gT24gdGhlIG90 aGVyIGhhbmQgdGhlIGN1cnJlbnQgbWVjaGFuaXNtIGluY3JlYXNlcyBjb2RlIHNpemUgYW5kIHBy b2Nlc3NpbmcgZm9yIHRoZSBwYXJ0IHZlcmlmeWluZyB0aGUgY2VydGlmaWNhdGUuDQoNCi0gSG93 IHNob3VsZCBuZXcgSW9UIENCT1IgY2VydGlmaWNhdGVzIGJlIGludHJvZHVjZWQgaW4gcHJvdG9j b2xzPyBBcyBhIG5ldyB0eXBlIG9mIGNlcnRpZmljYXRlIG9yIGEgbmV3IGNvbXByZXNzaW9uL2Vu Y29kaW5nIGFsZ29yaXRobSBmb3IgY2VydGlmaWNhdGVzPyBJcyBjb21wcmVzc2lvbi9lbmNvZGlu ZyBkb25lIGluc2lkZSB0aGUgcHJvdG9jb2wgb3Igb3V0c2lkZSBvZiB0aGUgcHJvdG9jb2w/DQoN Ci0gSXMgQ0JPUiB0aGUgY29ycmVjdCBjaG9pY2UgaWYgYSBuZXcgZW5jb2RpbmcgaXMgc3BlY2lm aWVkPyBXZSBjZXJ0YWlubHkgdGhpbmsgc28uDQoNCi0gV2hhdCBhcmUgcGVvcGxlc+KAmSBvcGlu aW9ucyBvbiBnZW5lcmFsIGxvc3NsZXNzIGNvbXByZXNzaW9uIGFsZ29yaXRobXM/DQoNCi0gV2hp Y2ggcHJvdG9jb2xzIHdvdWxkIHRoZSBJb1QgY29tbXVuaXR5IHdhbnQgdG8gdXNlIHdpdGggbmV3 IGNlcnRpZmljYXRlcy9lbmNvZGluZy9jb21wcmVzc2lvbj8NCg0KSSB0aGluayB0aGF0IGEgZ29v ZCBwbGFjZSB0byBzdGFydCBhIGRpc2N1c3Npb24gYWJvdXQgdGhlc2UgdG9waWNzIHdvdWxkIGJl IGluIFQyVFJHLiBJZiBwZW9wbGUgZmluZCB0aGlzIGludGVyZXN0aW5nLCBJIHN1Z2dlc3QgaGF2 aW5nIGEgcXVpY2sgaW50cm9kdWN0aW9uIG9uIHRoZSBGcmlkYXkgcGxlbmFyeSBzZXNzaW9uIGFu ZCB0aGVuIGZ1cnRoZXIgZGlzY3Vzc2lvbnMgaW4gdGhlIHNlY3VyaXR5IGJyZWFrb3V0Lg0KDQpD aGVlcnMsDQpKb2huDQoNCg== From nobody Fri Nov 2 05:31:24 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BAAD8126F72 for ; Fri, 2 Nov 2018 05:31:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.771 X-Spam-Level: X-Spam-Status: No, score=-4.771 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.47, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com header.b=FQOF9aZF; dkim=pass (1024-bit key) header.d=ericsson.com header.b=AfueUNJN Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T4OwHGxigkdN for ; Fri, 2 Nov 2018 05:31:20 -0700 (PDT) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0403D124C04 for ; Fri, 2 Nov 2018 05:31:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1541161877; x=1543753877; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=asqj5VsIyauaIspZtHKNBZnifIaek7bnZgTGRV5FwUk=; b=FQOF9aZFjIKE1ufe2OTYUoSE/oS9Mur1nzd+AUvQr8SHt+JCKMeOOmaYKmj37T6C kv74srt28uTvIsAQYlIBuq/qnM3t8IXUcCO4PEYfsjeKaMOrtPynwvMj0rC0xFyB Ht4gPUhyGXSmFjQqhAXB7NOkkRYcVqmgSoJXS63EIbY=; X-AuditID: c1b4fb2d-425ff7000000434d-23-5bdc4395a422 Received: from ESESSMB504.ericsson.se (Unknown_Domain [153.88.183.122]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id D4.57.17229.5934CDB5; Fri, 2 Nov 2018 13:31:17 +0100 (CET) Received: from ESESSMB501.ericsson.se (153.88.183.162) by ESESSMB504.ericsson.se (153.88.183.165) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Fri, 2 Nov 2018 13:31:17 +0100 Received: from EUR02-AM5-obe.outbound.protection.outlook.com (153.88.183.157) by ESESSMB501.ericsson.se (153.88.183.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3 via Frontend Transport; Fri, 2 Nov 2018 13:31:17 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=asqj5VsIyauaIspZtHKNBZnifIaek7bnZgTGRV5FwUk=; b=AfueUNJNhXPmcy3laM60j3cUeFRHcJLqbcjkW83U6rRGP3L9VhbESBKncKHcXjUCO+azwLEIuThrAQ8u1AfTYIcNKx9Ovjq8nAVmQ0U6s0PYN6CdvDD0Znvew8Cw299P6olPAK0ifh+d0Y1l8kedhJlgr7EIkgIkER4RzZ+eUOg= Received: from HE1PR07MB4169.eurprd07.prod.outlook.com (20.176.166.22) by HE1PR07MB3483.eurprd07.prod.outlook.com (10.170.247.154) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1294.14; Fri, 2 Nov 2018 12:31:16 +0000 Received: from HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::fcb5:ca45:9e56:1910]) by HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::fcb5:ca45:9e56:1910%2]) with mapi id 15.20.1294.024; Fri, 2 Nov 2018 12:31:16 +0000 From: John Mattsson To: "alvador.p.f@um.es" , "mcr+ietf@sandelman.ca" , "ace@ietf.org" Thread-Topic: [Ace] EDHOC standardization Thread-Index: AQHUcqfzc6iiUOECiUamNJ4vyfghjw== Date: Fri, 2 Nov 2018 12:31:16 +0000 Message-ID: <379B1A31-1F7E-43A6-A518-4398570CBBC7@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.11.0.180909 authentication-results: spf=none (sender IP is ) smtp.mailfrom=john.mattsson@ericsson.com; x-originating-ip: [82.214.46.143] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; HE1PR07MB3483; 6:YbL9CQJvcx/NV+Tih8zUHh554WZf+xPjVBgeNtW8t9TFJg3Gwy1SI6PdwjRWpSTfXYyAHVgzMej3R7aqvV/ev7IdGLdX/fe40fcXgVlHIB3dcpAHMqA/cJDl2vAXcNF+1uLpns7Sk9dQ+DAJr98eVD9jGzDBUrwqZAIffpkyDp/ZNoQ2WzS0Lz0if7+bk2QKzL79NVR3ksaxiA/+otAYE/ljsEUAQ9FrnOT+CfkAqIT/VqWX3yZM33G+SDZxYdOc76MzIFzd+55sabZSxavalaGBBRw8ggWYd1DqgQz2gm91AsEZbt7tb2g9AQn+xchnR8/Fo3vKPRE8A7QGBKieCT8uCfbMuCJpBMV6QtQxYRBXxRmehpdHnQ6WUNIotNC8TlMs/vFS6PPj/NBhdta+6y8NdFbe4Kg4g4yX6hUXlbFQqMBf66G/yhBTEEg70sGQLdk2DmlcIlRDNmkCs+vaDA==; 5:NH35vAGGW0M+RgN4Pxb9PQGm+Gy2RvLq7d8EoPzGAaBiDDYfeoMqZigO682DUXHExz45LkYv2z5yd+y2gId/lFN6fOdxD4gbl6OWCqTEnBBJviMRncuPi4PkD0/we/MSdr3hDQzFcYMIe81WJKRP+S4dWfpA+gnh8VT2hg1swI4=; 7:JvY3sm5MahJRvTQQQHhQ5T/tF1scmzRkZ8veim9y5rTflnNvrd4cqUP7kguf9LsrVVxJTIyvc3lzISueGjf8aPmUHR7PqMi1YMN2i7kSsHLUCnLYZkZSTCdmjercGicts7Wh3t4+SN4iwPk+R/b14A== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 3c71bf24-7fd6-47eb-560d-08d640bf159c x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(5600074)(711020)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:HE1PR07MB3483; x-ms-traffictypediagnostic: HE1PR07MB3483: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(166708455590820)(192374486261705); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3231382)(944501410)(52105095)(93006095)(93001095)(10201501046)(3002001)(148016)(149066)(150057)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123562045)(20161123564045)(20161123560045)(201708071742011)(7699051)(76991095); SRVR:HE1PR07MB3483; BCL:0; PCL:0; RULEID:; SRVR:HE1PR07MB3483; x-forefront-prvs: 08444C7C87 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(376002)(346002)(366004)(136003)(39860400002)(189003)(199004)(51444003)(6512007)(476003)(7736002)(229853002)(486006)(106356001)(6306002)(71200400001)(71190400001)(105586002)(83716004)(99286004)(478600001)(110136005)(2616005)(86362001)(66066001)(6506007)(97736004)(256004)(14444005)(5024004)(305945005)(44832011)(316002)(2900100001)(58126008)(6246003)(102836004)(2501003)(186003)(25786009)(5660300001)(53936002)(26005)(82746002)(14454004)(966005)(81156014)(81166006)(36756003)(8936002)(2906002)(3846002)(6116002)(33656002)(6486002)(68736007)(6436002)(8676002); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB3483; H:HE1PR07MB4169.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: uepLo2+znlsxlzT7YZd3f9AeNCjd3MxF4pXCYls54rQAwKbTIGSttKLm1IoW5+0VDwvG8MLEyi/0FPwWo42wWWxL5fOZOR02ctRdCeLamDrQ4iXt2o7S2KpdF0ZUCoxqIYJV71V4XF1uCSMgHUWD0SUMlH2aF/Rmp4xK/K+Lsy87aW2iGVXxmH56D/pyz7QmobhQ+PLSZCUtvSBn6wRLHF37dAM5W0SK21TtR3Cuh+wrabRhmpw0ucPAJgEqkFaK4aXivzIm6PMkrHsR0EaBUHtaQvN2ITar420Gc3NGgmkrIFKghYfiqAtNaWPGZz6iezFm9XdVnskKHeVdistdt6XHv5dlNE7yBcazBQ8Fij0= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <479C323C8E96A1468B2F900D660C8493@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 3c71bf24-7fd6-47eb-560d-08d640bf159c X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Nov 2018 12:31:16.4261 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB3483 X-OriginatorOrg: ericsson.com X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprNKsWRmVeSWpSXmKPExsUyM2J7le5U5zvRBi0TNSy+f+thtljXfYXV oudQP7sDs8eSJT+ZPFrm7GH2OPeyjSWAOYrLJiU1J7MstUjfLoEr4/eG3ywFk3Qqphxewd7A 2KDdxcjJISFgIjHz1GeWLkYuDiGBI4wSz76eZ4VwvjJKLL26H8pZzCTx9uZkRhCHRWACs8T3 qUeheiYzSbx7PZMJwnnIKDHjdjsjyGQ2AQOJuXsa2EBsEYFaic9bDrOD2MICGhIbu7ayQ8Q1 Jaa++MgEYetJfG87BBZnEVCRuPZwPZjNK2Av8WB9FzOIzSggJvH91BqwemYBcYlbT+YzQXwh ILFkz3lmCFtU4uXjf6wgtqiAvsT8Bx2sEL2xEq2t01khahQlTu9bAVUvK3FpfjcjhH2NTWLN OSUIW1fiw9SpUDW+ErOXXwGHhYTAcUaJDx0roQZpScx7PQfqiGyJ3StWQA3ykdh05yWULSex qvchC1Qzs8TMrqtQCRmJOQ1v2CYwGsxC8tAsRg4gW1Ni/S59CNNDorndBKJCUWJK90P2WeBg EZQ4OfMJywJG1lWMosWpxcW56UbGeqlFmcnFxfl5enmpJZsYgUnm4JbfujsYV792PMQowMGo xMPro3gnWog1say4MvcQowQHs5IIr9v729FCvCmJlVWpRfnxRaU5qcWHGKU5WJTEefVW7YkS EkhPLEnNTk0tSC2CyTJxcEo1MFpP7xcqfhOjuStmDaNCfaP84cVVpa/Cjs6vV8n8urBA9nl/ rRIfo9nTmC9qtY+zjCxdzXvWyb+8JHXKZkn/vMczlBZl1fc6xnSEtshp6a5SMeSQLGm+G8FV lBxavim/5oJU4K03Gv7yr82Sa5+u4I7+/OSr35fgfvOqqxd1f+8qKHF1irivxFKckWioxVxU nAgA6Y5gES4DAAA= Archived-At: Subject: Re: [Ace] EDHOC standardization X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Nov 2018 12:31:23 -0000 SGkgU2FsdmFkb3IsIE1pY2hhZWwsDQoNClJlZ2FyZGluZyB5b3VyIGNvbW1lbnRzIG9uIG5lZ290 aWF0aW9uIGFuZCBvdXQtb2YtYmFuZC4gV2UgaGF2ZSBnb3R0ZW4gc2ltaWxhciBjb21tZW50cyBm cm9tIEtsYXVzIEhhcnRrZSByZWdhcmRpbmcgY2lwaGVyIHN1aXRlcyBhbmQgb3V0LW9mLWJhbmQu IEkgYWRkZWQgeW91ciBjb21tZW50cyB0byB0aGUgb3BlbiBpc3N1ZSBvbiBHaXRIdWINCg0KaHR0 cHM6Ly9naXRodWIuY29tL0VyaWNzc29uUmVzZWFyY2gvRURIT0MvaXNzdWVzLzU3DQoNCldlIGFn cmVlIHdpdGggeW91IGJvdGgsIHRoaXMgY2FuIGFuZCBzaG91bGQgYmUgb3B0aW1pemVkLCBidXQg c29tZSBraW5kIG9mIG5lZ290aWF0aW9uIGlzIHN0aWxsIG5lZWRlZC4gVGhlIGN1cnJlbnQgcGxh biBmb3IgdGhlIG5leHQgdmVyc2lvbiBpcyB0byBpbnRyb2R1Y2UgY2lwaGVyIHN1aXRlcyBhbmQg dG8gbGV0IHRoZSBjaXBoZXIgc3VpdGUgd2l0aCB2YWx1ZSAwIGluZGljYXRlIHRoYXQgYWxnb3Jp dGhtcyBoYXZlIGJlZW4gbmVnb3RpYXRlZCBvdXQtb2YtYmFuZC4gRm9yIHRoZSBjb25zdHJhaW5l ZCBkZXBsb3ltZW50cyB0YXJnZXRlZCBieSBFREhPQywgSSB0aGluayB0aGlzIG1pZ2h0IGJlIHRo ZSBiZXN0IHRyYWRlLW9mZiBiZXR3ZWVuIG5lZ290aWF0aW9uLCBvdmVyaGVhZCwgYW5kIHNpbXBs aWNpdHkuIFdoaWxlIEkgdGhpbmsgVExTIDEuMyBkaWQgdGhlIHJpZ2h0IHRoaW5nIHRvIHNwbGl0 IHVwIHRoZSBjaXBoZXIgc3VpdGVzLCBJIGFncmVlIHRoYXQgZm9yIG1vc3QgY29uc3RyYWluZWQg SW9UIGRlcGxveW1lbnRzLCB0aGUgaW1wbGVtZW50ZWQgYWxnb3JpdGhtKHMpIHdpbGwgb2Z0ZW4g YmUgdGhlIHNhbWUgZm9yIGFsbCBub2RlcyBhbmQgZml4ZWQgZm9yIGxvbmcgcGVyaW9kcyBvZiB0 aW1lLiBBcyB5b3Ugc3RhdGVkIFNhbHZhZG9yLCB0aGlzIHdvdWxkIGJlIGFuIGFuIGltcG9ydGFu dCBvcHRpbWl6YXRpb24uIFRoZSBtZXNzYWdlIHNpemVzIHdvdWxkIGxvb2sgYXMgZm9sbG93czoN Cg0KICAgICAgICAgICAgICAgICBQU0sgICAgICAgUlBLICAgICAgIHg1dCAgICAgeDVjaGFpbg0K ICAgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0NCiAgIG1lc3NhZ2VfMSAgICAgIDQzICAgICAgICAzOCAgICAgICAgMzgg ICAgICAgIDM4DQogICBtZXNzYWdlXzIgICAgICA0NyAgICAgICAxMjEgICAgICAgMTI3ICAgICAg IDExNyArIENlcnRpZmljYXRlIGNoYWluDQogICBtZXNzYWdlXzMgICAgICAxMiAgICAgICAgODYg ICAgICAgIDkyICAgICAgICA4MiArIENlcnRpZmljYXRlIGNoYWluDQogICAtLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0K ICAgVG90YWwgICAgICAgICAxMDIgICAgICAgMjQ1ICAgICAgIDI1NyAgICAgICAyMzcgKyBDZXJ0 aWZpY2F0ZSBjaGFpbnMNCg0KICAgICAgICAgICAgICAgICBGaWd1cmUgNjogVHlwaWNhbCBtZXNz YWdlIHNpemVzIGluIGJ5dGVzDQoNCkNoZWVycywNCkpvaG4NCg0KTWljaGFlbCBSaWNoYXJkc29u IHdyb3RlOg0KDQogICAgPiB3ZSBoYXZlIGltcGxlbWVudGVkIGEgcHJldmlvdXMgdmVyc2lvbiBv ZiBFREhPQw0KICAgID4gKGRyYWZ0LXNlbGFuZGVyLWFjZS1jb3NlLWVjZGhlKSBhbmQgd2FudCB0 byBzaGFyZSBzb21lIGV4cGVyaWVuY2VzLg0KDQpUaGF0J3MgdmVyeSBjb29sLg0KU29tZSBxdWVz dGlvbnMgZm9yIHlvdSENCg0KICAgID4gT3VyIHdvcmsgc28gZmFyIGhhcyBmb2N1c2VkIG9uIGlt cGxlbWVudGF0aW9uIGFuZCBldmFsdWF0aW9uIG9mIHZlcnNpb24NCiAgICA+IC0wOCBvZiBFREhP QyBvdmVyIENvQVAgdXNpbmcgcmVhbCBJb1QgaGFyZHdhcmUuIFRoZSBvYnRhaW5lZCByZXN1bHRz DQogICAgPiBzaG93IGEgc2lnbmlmaWNhbnQgcGVyZm9ybWFuY2UgaW1wcm92ZW1lbnQgY29tcGFy ZWQgdG8gb3RoZXIga2V5DQogICAgPiBlc3RhYmxpc2htZW50IHByb3RvY29scywgc3VjaCBhcyBE VExTIGhhbmRzaGFrZSAodmVyc2lvbiAxLjIpLA0KICAgID4gZXNwZWNpYWxseSB3aXRoIHJlc3Bl Y3QgdG8gbGVuZ3RoIGFuZCBudW1iZXIgb2YgZXhjaGFuZ2VkIG1lc3NhZ2VzLg0KDQpXaGF0IGRp ZCB5b3UgdXNlIGZvciBhdXRoZW50aWNhdGlvbj8gIFJTQT8gRUNEU0E/IEVERFNBPyBQU0s/DQpX ZXJlIHRoZXkgcmF3IHB1YmxpYyBrZXlzLCBvciB3YXMgaXQgaW4gYSBjZXJ0aWZpY2F0ZT8NCkRp ZCB5b3UgdHJ5IGEgY2VydGlmaWNhdGUgaW4gb25lIGRpcmVjdGlvbiBhbmQgYSByYXcgcHVibGlj IGtleSBpbiB0aGUgb3RoZXI/DQpEaWQgeW91IG9mZmVyIG1vcmUgdGhhbiAxIGFsZ29yaXRobSB3 aGVuIHlvdSBuZWdvdGlhdGVkPw0KDQogICAgPiBXZSBoYXZlIHJldmlld2VkIHZlcnNpb24gLTEw IGFuZCBub3RlZCB0aGUgcmVkdWN0aW9uIG9mIG1lc3NhZ2UNCiAgICA+IGxlbmd0aC4gQmFzZWQg b24gb3VyIGV4cGVyaWVuY2UsIHdlIHByb3Bvc2UgdGhhdCBhbHNvIHJlbW92aW5nIHRoZQ0KICAg ID4gb3ZlcmhlYWQgZHVlIHRvIHNlY3VyaXR5IHBhcmFtZXRlciBuZWdvdGlhdGlvbiBjb3VsZCBi ZSBhbiBpbXBvcnRhbnQNCiAgICA+IG9wdGltaXphdGlvbiwgYW5kIHJlbGV2YW50IGluIG1hbnkg dXNlIGNhc2VzIHdoZXJlIHRoZXNlIHBhcmFtZXRlcnMgYXJlDQogICAgPiBhdmFpbGFibGUgdGhy b3VnaCBhbiBvdXQtb2YtYmFuZCBwcm9jZXNzLg0KDQpJZiB0aGUgbGlzdCBvZiB2YWxpZCBhbGdv cml0aG1zIGlzIGF2YWlsYWJsZSBzZWN1cmVseSBieSBvdXQtb2YtYmFuZA0KcHJvY2Vzc2VzLCB0 aGVuIGNvdWxkbid0IHVzZSB0aGlzIG1lY2hhbmlzbSB0byBkbyBrZXkgYWdyZWVtZW50IGluc3Rl YWQsDQpzYXZpbmcgMTAwJSBvZiB0aGUgYnl0ZXMgb24gdGhlIHdpcmU/ICA6LSkNCg0KV2UgbmVl ZCB0byBkbyBzZWN1cml0eSBwYXJhbWV0ZXIgbmVnb3RpYXRpb24gaW4gb3JkZXIgdG8gYmUgYWdp bGUgYWdhaW5zdA0KZnV0dXJlIGFsZ29yaXRobSBhdHRhY2tzLCBhbmQgdGhlcmUgd2lsbCBiZSBh bGdvcml0aG0gYXR0YWNrcyBpbiB0aGUgMjAgdG8NCjQwIHllYXIgbGlmZXNwYW5zIHRoYXQgd2Ug ZXhwZWN0Li4uIGFuZCB3ZSBuZWVkIHRvIGxlYXZlIHNwYWNlIGZvciByZXBsYWNpbmcNCnRoZSBE SCBwcm9jZXNzIHdpdGggc29tZSBRTURIIHByb2Nlc3MuICBUaGUgQ0JPUiBlbmNvZGluZyBpcyBy ZWFsbHkgcmVhbGx5DQp2ZXJ5IG5pY2UgZm9yIHRoaXMsIGFuZCBJIHdpc2ggd2UgaGFkIENCT1Ig d2hlbiB3ZSBkaWQgSUtFdjIuDQoNCiAgICA+IEFjY29yZGluZ2x5IGFuZCB0YWtpbmcgaW50byBh Y2NvdW50IHRoYXQgRURIT0MgcHJvdmlkZXMgYSBiYXNpYw0KICAgID4gc2VjdXJpdHkgZnVuY3Rp b25hbGl0eSBmb3IgYW55IGNvbnRleHQgd2hlcmUgc2VjdXJpdHkgbmVlZHMgdG8gYmUNCiAgICA+ IGVuYWJsZWQsIHdlIGFyZSBjdXJyZW50bHkgY29uc2lkZXJpbmcgdGhlIGFwcGxpY2F0aW9uIG9m IHRoaXMgcHJvdG9jb2wNCiAgICA+IGluIGRpZmZlcmVudCBJb1QgZGVwbG95bWVudHMsIHN1Y2gg YXMgTG9SYVdBTiBuZXR3b3JrcywgT1NDT1JFLWVuYWJsZWQNCiAgICA+IHNjZW5hcmlvcyBvciBp dHMgaW50ZWdyYXRpb24gd2l0aCBjYXBhYmlsaXRpZXMuIFdlIHRoZXJlZm9yZSB3b3VsZCBsaWtl DQogICAgPiB0byBzZWUgdGhlIHByb2dyZXNzIG9mIEVESE9DIGluIHN0YW5kYXJkaXphdGlvbi4N Cg0KSSBkb24ndCBzZWUgaG93IExPUmFXQU4gaGFzIGVub3VnaCBieXRlcyBhdmFpbGFibGUgZm9y IGV2ZW4gRURIT0MuDQpJIHRoaW5rIHRoYXQgTG9SYVdBTiBuZWVkcyBhIGtleSBhZ3JlZW1lbnQg cHJvdG9jb2wgdGhhdCBjYW4gYmUgcnVuIG9uY2UNCndoaWxlIHRoZSBzZW5zb3IgaXMgYXR0YWNo ZWQgdG8gdGhlIGluc3RhbGxlcidzIHNtYXJ0cGhvbmUuICBUaGUgaW1wb3J0YW50DQp0aGluZyBp cyB0aGF0IG9uZSBpcyBhYmxlIHRvIHVzZSB0aGUga2V5IGFncmVtZW50IHByb3RvY29sIG92ZXIg SVBzIEE8LT5CLA0KaW4gb3JkZXIgdG8gc2V0dXAgYSBjb250ZXh0IHRoYXQgY2FuIGJlIHVzZWQg YmV0d2VlbiBJUHMgQzwtLT5ELg0KDQo= From nobody Fri Nov 2 07:56:05 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1BCA3130E14 for ; Fri, 2 Nov 2018 07:56:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.77 X-Spam-Level: X-Spam-Status: No, score=-4.77 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.47, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com header.b=ILnLEmxL; dkim=pass (1024-bit key) header.d=ericsson.com header.b=W73qlYiq Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Y6H_QQC0ZlNp for ; Fri, 2 Nov 2018 07:55:59 -0700 (PDT) Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 03FFB130DFD for ; Fri, 2 Nov 2018 07:55:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1541170557; x=1543762557; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=i7e2ej429xJbMRVb2bfQCs+/WFDBVuUwKxlWEYqM3pA=; b=ILnLEmxLz6F6/BYF5UoIKRhnvAc6j/tzaR+goX2DunvD1RPwpoFWPTae+bo4WvUL 0nceH6YvE/BNBnxqvXHgtsS2hgpGafaaZ3UFAk1SkEpH6WYIWPHeQ/j2rx+vt6+e 5UnoHJjHRBqPcywBb053RbYg2wPW/E3fQ0TCS4LhNq0=; X-AuditID: c1b4fb30-1ebff70000007d19-f2-5bdc657dc8df Received: from ESESSMB503.ericsson.se (Unknown_Domain [153.88.183.121]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id 1F.B8.32025.D756CDB5; Fri, 2 Nov 2018 15:55:57 +0100 (CET) Received: from ESESSMB501.ericsson.se (153.88.183.162) by ESESSMB503.ericsson.se (153.88.183.164) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Fri, 2 Nov 2018 15:55:56 +0100 Received: from EUR02-VE1-obe.outbound.protection.outlook.com (153.88.183.157) by ESESSMB501.ericsson.se (153.88.183.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3 via Frontend Transport; Fri, 2 Nov 2018 15:55:56 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=i7e2ej429xJbMRVb2bfQCs+/WFDBVuUwKxlWEYqM3pA=; b=W73qlYiqFswQTfoJjM19FvsXCZIulj81OZ1cEAR/XqfcKBQOJ80X3zTyTgV8pYkyikol2BTC9CJB2BKr/Qd61oDmPKtiQYuIycsToYvGM0dlh8rYoTN5OzvgzwRyAgo3dV5CRPBQzGuTyBnL41K9WFNeS0hgKfs/csmuatznBTY= Received: from HE1PR07MB4169.eurprd07.prod.outlook.com (20.176.166.22) by HE1PR07MB1659.eurprd07.prod.outlook.com (10.166.124.137) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1294.14; Fri, 2 Nov 2018 14:55:54 +0000 Received: from HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::fcb5:ca45:9e56:1910]) by HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::fcb5:ca45:9e56:1910%2]) with mapi id 15.20.1294.024; Fri, 2 Nov 2018 14:55:54 +0000 From: John Mattsson To: "salvador.p.f@um.es" , "kaduk@mit.edu" , "ace@ietf.org" Thread-Topic: [Ace] EDHOC standardization Thread-Index: AQHUcrwmx6N1o4AsH0uz6RMW3Bvpjw== Date: Fri, 2 Nov 2018 14:55:54 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.11.0.180909 x-originating-ip: [82.214.46.143] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; HE1PR07MB1659; 6:+CSvODjlW1NqmZR+ETWs04bg266tQyciQM907YlwMpj3CYi8bsY82wFWBh97ltBwyi5U4tpbt8JIByo4Um559nXUroHBYN+yX+iuOuvJqsA6AD2aGPVsJ4WUBOf+ixKxdQP5jhCr75JDMmBYU54YLpgIwQ/6f8JIPh7co+WMGSHqPr04ZSYapL6CToLShGl7gH5gYjrcCBthdAjA02+r2HPpwfW06YtvazPMu3rfVJl8d1pUo1A3Ee7nvHme5w7gTZQNe6k3M6lkw8gwmoqhX6jJ3COHhkxYEj7wtgdXfr5XDxxOu9T8266+qgytW7LN0j8HfrEQeytO5J8o7ypIPdwZmkdcyDYdl2+GLdeJUH8nWKYH+aAe4lII9+RyQOj5zxnWjv5oMKTMH2czZuvG9JMVIMUWtzC/7Y9vm5fdQne4GkrXiWY7smXMtJl+EZEP+sKMsG9MkHQsq3wY2AWDGA==; 5:E+Tv3fQQb9ij3FpXjIECWfSIxnvIYh6D+QSgkc06VGFF5MqbZXqLgiKREJpLoO/1saZ99yOO1iVYx4fo+O9AAAG+QF/OKfeIxB3Q+Pm9rHz9SpGCzA/gXyYwIOW/6yfPTQBof02nuOJ6+52JvAwC9MOoVqMFyboC6GOilfwNwuw=; 7:r74yaMmbOQCKvK3MHWtU5bTxZsA/jt8cqiHlbKnXyx2bXChHmrncQdSPiYSYOz5PTbB9QaSKsdm1zbqMow39WS6qU3UxfXmxkJlSjXS7+AjrMKQ5bN/qi4Dh7PN9aSMvSfhCOI1mLj5SZDJJxO2Ttg== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: bab4415c-4753-4f18-b916-08d640d34a09 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(2017052603328)(7153060)(7193020); SRVR:HE1PR07MB1659; x-ms-traffictypediagnostic: HE1PR07MB1659: authentication-results: spf=none (sender IP is ) smtp.mailfrom=john.mattsson@ericsson.com; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(120809045254105)(163750095850)(5213294742642)(192374486261705)(240460790083961); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(10201501046)(3002001)(93006095)(93001095)(3231382)(944501410)(52105095)(148016)(149066)(150057)(6041310)(20161123560045)(20161123562045)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(201708071742011)(7699051)(76991095); SRVR:HE1PR07MB1659; BCL:0; PCL:0; RULEID:; SRVR:HE1PR07MB1659; x-forefront-prvs: 08444C7C87 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(376002)(396003)(136003)(346002)(39860400002)(252514010)(199004)(189003)(52314003)(105586002)(66066001)(106356001)(2201001)(478600001)(71190400001)(110136005)(58126008)(26005)(316002)(966005)(81156014)(8676002)(486006)(81166006)(8936002)(2616005)(186003)(44832011)(82746002)(476003)(14454004)(86362001)(5660300001)(33656002)(2501003)(6436002)(6486002)(6306002)(36756003)(68736007)(6512007)(97736004)(229853002)(256004)(71200400001)(14444005)(53936002)(7736002)(3846002)(6116002)(6246003)(2900100001)(83716004)(2171002)(102836004)(6506007)(53546011)(25786009)(305945005)(99286004)(2906002)(66574009); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB1659; H:HE1PR07MB4169.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: T8EYaxir0to4CnOngHaLxmTNCzZoKKovYD5B6esNHqyXMi7m8KX9F6PR0IPC7VNiMGa27SylBZXFJvacO7PBdwXMMCQGaJt0FVFqp2Qn1KR7Jn9TGK9tTSj+vNH1ebb62sIJPp5P74de3QqrusqdH0SwZfsCgyC0Bj8gPU3qclaPezPtchypZ0Z30Vgjsccn1N2pQSXnblC5g9Ve+pvTjJwTRJUbax/V9gXchVX/KNmt6VpySUvCgV1f5aObnB7ur/21KhWhCqkTpCVMtu4YdN9ozPXwPBFu3WBn7kGkhbowkm/tWsYwMu0Ctr4gHCQ5ZYEG/jthBJod21JnfSgRsbQ7B5iX/kdAp4xcvCQlHiw= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: bab4415c-4753-4f18-b916-08d640d34a09 X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Nov 2018 14:55:54.2351 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB1659 X-OriginatorOrg: ericsson.com X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprJKsWRmVeSWpSXmKPExsUyM2J7pW5t6p1ogwUPmS2+f+thtli+cSaT RfOqq+wOzB5Llvxk8mg6c5TZ49zLNpYA5igum5TUnMyy1CJ9uwSujCPP0wve2FV8O7qZvYFx jm0XIyeHhICJxKdZExm7GLk4hASOMEqc6WhmBUkICXxllGh7mwqRWMwk0bLlPQtIgkVgArPE v3cKEInJTBIff35kgnAeMko87ZgK1s4mYCAxd08DG4gtIpAvMePibmYQW1hAQ2Jj11Z2iLim xNQXIM0gtp7EhF+LmCE2qEicf74WKM7BwStgL3H4dRpImFFATOL7qTVg5cwC4hK3nsxngnhB QGLJnvPMELaoxMvH/8BOEBXQl5j/oIMVIq4ocXrfCqgaWYlL87vBXpYQuMYmsX7SZqgiXYkP U6dCFflKrFr5lx2i6DijxOIjl6GKtCS6d39lhrgoVqK1dTpUPFti84NVUM1VEhenz4C6Tk5i Ve9DFqhBzBK7zh6GapCRmNPwhm0Co8EsJB/NAnqaGRgw63fpQ4Q9JD7OXcgIYStKTOl+yA5i 8woISpyc+YRlASPrKkbR4tTipNx0IyO91KLM5OLi/Dy9vNSSTYzABHNwy2+DHYwvnzseYhTg YFTi4WUJvhMtxJpYVlyZe4hRgoNZSYQ32BcoxJuSWFmVWpQfX1Sak1p8iFGag0VJnNfCb3OU kEB6YklqdmpqQWoRTJaJg1OqgTGknZXj1vRDzW9040WTP17aWvnCZFbchRXJts0vRfcvmFNs f9fb/X1vbYfYvZ0WUxjDrDT1dwuWGetGsp9p9dGO1E2vnG+Rc6KTQ5T3fe2dfvZv1xKFHaWt ovs2Vkz6MTkjPrXIUuzy5D/VN0+2hxyckP4lNIhn57L+c6HBz+W//OdZ6xHHr8RSnJFoqMVc VJwIAB1N5zksAwAA Archived-At: Subject: Re: [Ace] EDHOC standardization X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Nov 2018 14:56:03 -0000 SGkgQmVuamFtaW4sIFNhbHZhZG9yDQoNCldoaWxlIERUTFMgMS4zIGhhdmUgZG9uZSBhIHZlcnkg Z29vZCBqb2Igb2YgbG93ZXJpbmcgdGhlIG92ZXJoZWFkIG9mIHRoZSByZWNvcmQgbGF5ZXIgd2hl biBhcHBsaWNhdGlvbiBkYXRhIGlzIHNlbnQgKHNlZSBlLmcuIGh0dHBzOi8vdG9vbHMuaWV0Zi5v cmcvaHRtbC9kcmFmdC1pZXRmLWx3aWctc2VjdXJpdHktcHJvdG9jb2wtY29tcGFyaXNvbi0wMSBm b3IgYSBjb21wYXJpc29uIGJldHdlZW4gZGlmZmVyZW50IHByb3RvY29scyksIEkgZG8gbm90IHRo aW5rIHRoZSBoYW5kc2hha2UgcHJvdG9jb2wgaXMgbXVjaCBsZWFuZXIgKGlzIGl0IGxlYW5lciBh dCBhbGw/KS4NCg0KV2UgdHJpZWQgdG8gbWFrZSBhbiBmYWlyIGNvbXBhcmlzb24gYmV0d2VlbiBF REhPQyBhbmQgVExTIDEuMyBpbiB0aGUgcHJlc2VudGF0aW9uIGF0IElFVEYgMTAxIChzZWUgaHR0 cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9tZWV0aW5nLzEwMS9tYXRlcmlhbHMvc2xpZGVzLTEw MS1hY2Uta2V5LWV4Y2hhbmdlLXctb3Njb3JlLTAwKS4gU2luY2UgdGhlbiwgd2UgaGF2ZSBzaWdu aWZpY2FudGx5IG9wdGltaXplZCB0aGUgZW5jb2RpbmcgaW4gRURIT0MgYW5kIHRoZSB1cGNvbWlu ZyB2ZXJzaW9uICgtMTEpIGlzIGV4cGVjdGVkIHRvIGhhdmUgdGhlIGZvbGxvd2luZyBtZXNzYWdl IHNpemVzLg0KDQogICBBdXRoLiAgICAgICAgICAgICAgIFBTSyAgICAgICBSUEsgICAgICAgeDV0 ICAgICB4NWNoYWluDQogICAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KICAgRURIT0MgbWVzc2FnZV8xICAgICAgNDMg ICAgICAgIDM4ICAgICAgICAzOCAgICAgICAgMzgNCiAgIEVESE9DIG1lc3NhZ2VfMiAgICAgIDQ3 ICAgICAgIDEyMSAgICAgICAxMjcgICAgICAgMTE3ICsgQ2VydGlmaWNhdGUgY2hhaW4NCiAgIEVE SE9DIG1lc3NhZ2VfMyAgICAgIDEyICAgICAgICA4NiAgICAgICAgOTIgICAgICAgIDgyICsgQ2Vy dGlmaWNhdGUgY2hhaW4NCiAgIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQogICBUb3RhbCAgICAgICAgICAgICAgIDEw MiAgICAgICAyNDUgICAgICAgMjU3ICAgICAgIDIzNyArIENlcnRpZmljYXRlIGNoYWlucw0KDQpB cyBTYWx2YWRvciB3cml0ZXMsIHRoZSBoYW5kc2hha2VzIGluIFRMUyAxLjMgYW5kIERUTFMgMS4z IGFyZSBiYXNpY2FsbHkgdGhlIHNhbWUsIHNvIHRoZSBudW1iZXJzIHByZXNlbnRlZCBhdCBJRVRG IDEwMSBzaG91bGQgYmUgYSBnb29kIGVzdGltYXRlIGFsc28gZm9yIERUTFMgMS4zLg0KDQogICBB dXRoLiAgICAgICAgICAgICAgICBQU0sgICAgICAgUlBLDQogICAtLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KICAgKEQp VExTIG1lc3NhZ2VfMSAgICAgMTQyICAgICAgIDEwNw0KICAgKEQpVExTIG1lc3NhZ2VfMiAgICAg MTM1ICAgICAgIDI2NA0KICAgKEQpVExTIG1lc3NhZ2VfMyAgICAgIDUxICAgICAgIDE2Nw0KICAg LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0NCiAgIFRvdGFsICAgICAgICAgICAgICAgIDMyOCAgICAgICA1MzgNCg0KVGhl IG51bWJlcnMgYWJvdmUgaW5jbHVkZSBFQ0RIRS4gRm9yIGhhbmRzaGFrZSBtZXNzYWdlcywgbXkg dW5kZXJzdGFuZGluZyBpcyB0aGF0IHRoZSBEVExTIDEuMyBhbmQgVExTIDEuMyByZWNvcmQgbGF5 ZXIgaGF2ZSBleGFjdGx5IHRoZSBzYW1lIHNpemUuDQoNCkNoZWVycywNCkpvaG4NCg0KPiBTYWx2 YWRvciBQw6lyZXogd3JvdGU6DQoNCkhpIEJlbmphbWluLA0KDQoJb3VyIHJlc3VsdHMgYXJlIGlu Y2x1ZGVkIGluIGEgcGFwZXIsIHdoaWNoIGlzIHVuZGVyIHJldmlldyBmb3IgaXRzIHB1YmxpY2F0 aW9uLg0KDQpSZWdhcmRpbmcgdGhlIGNvbXBhcmlzb24gYmV0d2VlbiBFREhPQyBhbmQgRFRMUywg d2UgaGF2ZSBlbXBsb3llZCB0aGUgdGlueWR0bHMgbGlicmFyeSBbMV0gc2luY2UgaXQgaXMgd2lk ZWx5IHVzZWQgdG8gZGVwbG95IERUTFMgaW4gZGlmZmVyZW50IElvVCBzY2VuYXJpb3MuIE5vdGUg dGhhdCwgYXQgdGhlIG1vbWVudCBpbiB3aGljaCB0aGUgcGFwZXIgd2FzIHdyaXR0ZW4sIHN1Y2gg bGlicmFyeSBkaWQgbm90IG9mZmVyIHN1cHBvcnQgZm9yIHZlcnNpb24gMS4zLiBBbnl3YXksIERU TFMgMS4zIGlzIGVzc2VudGlhbGx5IHVzaW5nIHRoZSBzYW1lIGhhbmRzaGFrZSBhcyBUTFMgMS4z ICgiRFRMUyAxLjMgcmUtdXNlcyB0aGUgVExTIDEuMyBoYW5kc2hha2UgbWVzc2FnZXMgYW5kIGZs b3dz4oCdIFsyXSkuIE1vcmVvdmVyLCBhdXRob3JzIG9mIEVESE9DIHN0YXRlIHRoYXQgdGhlIG1l c3NhZ2Ugb3ZlcmhlYWQgb2YgVExTIDEuMyBpcyBtdWNoIGhpZ2hlciB0aGFuIEVESE9DICgiQ29t cGFyZWQgdG8gdGhlIFRMUyAxLjMgaGFuZHNoYWtlIHdpdGggRUNESCwgdGhlIG51bWJlciBvZiBi eXRlcyBpbiBFREhPQyBpcyBsZXNzIHRoYW4gMS8zIHdoZW4gUFNLIGF1dGhlbnRpY2F0aW9uIGlz IHVzZWQgYW5kIGxlc3MgdGhhbiAxLzIgd2hlbiBSUEsgYXV0aGVudGljYXRpb24gaXMgdXNlZCwg c2VlIEFwcGVuZGl4IEXigJ0gWzMtNF0pLiBBY2NvcmRpbmdseSwgd2UgY2FuIGNsYWltIHRoYXQg aXQgaXMgZXhwZWN0ZWQgdGhhdCBEVExTIDEuMyBwZXJmb3JtcyB3b3JzZSB0aGFuIEVESE9DIChh dCBsZWFzdCwgcmVnYXJkaW5nIG1lc3NhZ2Ugb3ZlcmhlYWQpIGZvciB0aGUgdHlwZSBvZiBjb25z dHJhaW5lZCBpbXBsZW1lbnRhdGlvbnMgd2UgYXJlIGxvb2tpbmcgYXQuDQoNClsxXSBodHRwczov L3Byb2plY3RzLmVjbGlwc2Uub3JnL3Byb2plY3RzL2lvdC50aW55ZHRscyA8aHR0cHM6Ly9wcm9q ZWN0cy5lY2xpcHNlLm9yZy9wcm9qZWN0cy9pb3QudGlueWR0bHM+DQpbMl0gaHR0cHM6Ly90b29s cy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtdGxzLWR0bHMxMy0yOSNzZWN0aW9uLTUgPGh0dHBz Oi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXRscy1kdGxzMTMtMjkjc2VjdGlvbi01 Pg0KWzNdIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1zZWxhbmRlci1hY2UtY29z ZS1lY2RoZS0xMCNzZWN0aW9uLTEgPGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1z ZWxhbmRlci1hY2UtY29zZS1lY2RoZS0xMCNzZWN0aW9uLTE+DQpbNF0gaHR0cHM6Ly90b29scy5p ZXRmLm9yZy9odG1sL2RyYWZ0LXNlbGFuZGVyLWFjZS1jb3NlLWVjZGhlLTEwI2FwcGVuZGl4LUUu NCA8aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LXNlbGFuZGVyLWFjZS1jb3NlLWVj ZGhlLTEwI2FwcGVuZGl4LUUuND4NCg0KS2luZCByZWdhcmRzLA0KDQotLS0tLS0tLS0tLS0tLS0t LS0tLQ0KU2FsdmFkb3IgUMOpcmV6DQpQaEQgc3R1ZGVudCBpbiAiRnV0dXJlIEludGVybmV0IE5l dHdvcmtzOiBJbmZyYXN0cnVjdHVyZSBhbmQgU2VjdXJpdHnigJ0NCkZhY3VsdHkgb2YgQ29tcHV0 ZXIgU2NpZW5jZSAtIFVuaXZlcnNpdHkgb2YgTXVyY2lhDQpFbWFpbDogc2FsdmFkb3IucC5mQHVt LmVzDQpTa3lwZTogc2FsdmEucGYNCg0KPiBPbiAzMSBPY3QgMjAxOCwgYXQgMTY6NDMsIEJlbmph bWluIEthZHVrIDxrYWR1a0BtaXQuZWR1Pjsgd3JvdGU6DQo+IA0KPiBIaSBTYWx2YWRvciwNCj4g DQo+IE9uIFdlZCwgT2N0IDMxLCAyMDE4IGF0IDEwOjEyOjU0QU0gKzAxMDAsIFNhbHZhZG9yIFDD qXJleiB3cm90ZToNCj4+IEhlbGxvIGF1dGhvcnMgb2YgRURIT0MsDQo+PiANCj4+IAl3ZSBoYXZl IGltcGxlbWVudGVkIGEgcHJldmlvdXMgdmVyc2lvbiBvZiBFREhPQyAoZHJhZnQtc2VsYW5kZXIt YWNlLWNvc2UtZWNkaGUpIGFuZCB3YW50IHRvIHNoYXJlIHNvbWUgZXhwZXJpZW5jZXMuDQo+PiAN Cj4+IE91ciB3b3JrIHNvIGZhciBoYXMgZm9jdXNlZCBvbiBpbXBsZW1lbnRhdGlvbiBhbmQgZXZh bHVhdGlvbiBvZiB2ZXJzaW9uIC0wOCBvZiBFREhPQyBvdmVyIENvQVAgdXNpbmcgcmVhbCBJb1Qg aGFyZHdhcmUuIFRoZSBvYnRhaW5lZCByZXN1bHRzIHNob3cgYSBzaWduaWZpY2FudCBwZXJmb3Jt YW5jZSBpbXByb3ZlbWVudCBjb21wYXJlZCB0byBvdGhlciBrZXkgZXN0YWJsaXNobWVudCBwcm90 b2NvbHMsIHN1Y2ggYXMgRFRMUyBoYW5kc2hha2UgKHZlcnNpb24gMS4yKSwgZXNwZWNpYWxseSB3 aXRoIHJlc3BlY3QgdG8gbGVuZ3RoIGFuZCBudW1iZXIgb2YgZXhjaGFuZ2VkIG1lc3NhZ2VzLg0K PiANCj4gQXJlIHlvdXIgcmVzdWx0cyB3cml0dGVuIHVwIGFueXdoZXJlPyAgSXQgd291bGQgYmUg Z3JlYXQgdG8gc2VlIG1vcmUNCj4gZGV0YWlscyBvZiB0aGUgY29tcGFyaXNvbiBhbmQgdGhlIGFj dHVhbCBudW1iZXJzLg0KPiBVbmZvcnR1bmF0ZWx5LCBJIGRvbid0IHRoaW5rIHRoYXQgRFRMUyAx LjIgaXMgdGhlIGJlc3QgY29tcGFyaXNvbiAtLSBEVExTDQo+IDEuMyBzaG91bGQgYmUgc2VlbiBh cyB0aGUgY3VycmVudCAic3RhdGUgb2YgdGhlIGFydCIgZm9yIERUTFMsIGFuZCBpcw0KPiBleHBl Y3RlZCB0byBpdHNlbGYgYmUgbGVhbmVyIHRoYW4gRFRMUyAxLjIsIHdoaWNoIG1pZ2h0IHdhc2gg b3V0IHNvbWUgb2YNCj4gdGhlIHJlc3VsdHMgeW91J3ZlIHNlZW4gaGVyZS4NCj4gDQo+IFRoYW5r cywNCj4gDQo+IEJlbg0KPiANCj4+IFdlIGhhdmUgcmV2aWV3ZWQgdmVyc2lvbiAtMTAgYW5kIG5v dGVkIHRoZSByZWR1Y3Rpb24gb2YgbWVzc2FnZSBsZW5ndGguIEJhc2VkIG9uIG91ciBleHBlcmll bmNlLCB3ZSBwcm9wb3NlIHRoYXQgYWxzbyByZW1vdmluZyB0aGUgb3ZlcmhlYWQgZHVlIHRvIHNl Y3VyaXR5IHBhcmFtZXRlciBuZWdvdGlhdGlvbiBjb3VsZCBiZSBhbiBpbXBvcnRhbnQgb3B0aW1p emF0aW9uLCBhbmQgcmVsZXZhbnQgaW4gbWFueSB1c2UgY2FzZXMgd2hlcmUgdGhlc2UgcGFyYW1l dGVycyBhcmUgYXZhaWxhYmxlIHRocm91Z2ggYW4gb3V0LW9mLWJhbmQgcHJvY2Vzcy4NCj4+IA0K Pj4gQWNjb3JkaW5nbHkgYW5kIHRha2luZyBpbnRvIGFjY291bnQgdGhhdCBFREhPQyBwcm92aWRl cyBhIGJhc2ljIHNlY3VyaXR5IGZ1bmN0aW9uYWxpdHkgZm9yIGFueSBjb250ZXh0IHdoZXJlIHNl Y3VyaXR5IG5lZWRzIHRvIGJlIGVuYWJsZWQsIHdlIGFyZSBjdXJyZW50bHkgY29uc2lkZXJpbmcg dGhlIGFwcGxpY2F0aW9uIG9mIHRoaXMgcHJvdG9jb2wgaW4gZGlmZmVyZW50IElvVCBkZXBsb3lt ZW50cywgc3VjaCBhcyBMb1JhV0FOIG5ldHdvcmtzLCBPU0NPUkUtZW5hYmxlZCBzY2VuYXJpb3Mg b3IgaXRzIGludGVncmF0aW9uIHdpdGggY2FwYWJpbGl0aWVzLiBXZSB0aGVyZWZvcmUgd291bGQg bGlrZSB0byBzZWUgdGhlIHByb2dyZXNzIG9mIEVESE9DIGluIHN0YW5kYXJkaXphdGlvbi4NCj4+ IA0KPj4gS2luZCByZWdhcmRzLA0KPj4gDQo+PiAtLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPj4gU2Fs dmFkb3IgUMOpcmV6DQo+PiBQaEQgc3R1ZGVudCBpbiAiRnV0dXJlIEludGVybmV0IE5ldHdvcmtz OiBJbmZyYXN0cnVjdHVyZSBhbmQgU2VjdXJpdHnigJ0NCj4+IEZhY3VsdHkgb2YgQ29tcHV0ZXIg U2NpZW5jZSAtIFVuaXZlcnNpdHkgb2YgTXVyY2lhDQo+PiBFbWFpbDogc2FsdmFkb3IucC5mQHVt LmVzDQo+PiBTa3lwZTogc2FsdmEucGYNCj4+IA0KPiANCj4+IF9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+PiBBY2UgbWFpbGluZyBsaXN0DQo+PiBBY2VA aWV0Zi5vcmcNCj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vYWNlDQo+ DQoNCg== From nobody Fri Nov 2 15:52:30 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 27D74128B14 for ; Fri, 2 Nov 2018 15:52:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id opGUvuozx7gt for ; Fri, 2 Nov 2018 15:52:26 -0700 (PDT) Received: from relay.sandelman.ca (relay.cooperix.net [IPv6:2a01:7e00::f03c:91ff:feae:de77]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C0F8C127598 for ; Fri, 2 Nov 2018 15:52:26 -0700 (PDT) Received: from dooku.sandelman.ca (unknown [58.64.45.2]) by relay.sandelman.ca (Postfix) with ESMTPS id 5B8AB1F8BE; Fri, 2 Nov 2018 22:52:22 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 5365268B; Sat, 3 Nov 2018 04:21:55 +0530 (IST) From: Michael Richardson To: John Mattsson cc: "alvador.p.f\@um.es" , "ace\@ietf.org" In-reply-to: <379B1A31-1F7E-43A6-A518-4398570CBBC7@ericsson.com> References: <379B1A31-1F7E-43A6-A518-4398570CBBC7@ericsson.com> Comments: In-reply-to John Mattsson message dated "Fri, 02 Nov 2018 12:31:16 +0000." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Sat, 03 Nov 2018 05:51:55 +0700 Message-ID: <16572.1541199115@dooku.sandelman.ca> Archived-At: Subject: Re: [Ace] EDHOC standardization X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Nov 2018 22:52:29 -0000 --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable John Mattsson wrote: > of negotiation is still needed. The current plan for the next version > is to introduce cipher suites and to let the cipher suite with value 0 > indicate that algorithms have been negotiated out-of-band. I agree with the idea that some common default should be very easy to refer to, but I don't like the idea that the gateway has to remember what the out-of-band "default" is on a per-device basis. I would say that we ne= ed at least 0/1, so that we can say that it's the current vs the "new" default. If you consider the case where the sensor is on very low bandwidth connection (I would say LoRaWAN, but I am not well qualified in that space). The sensor gets visited every two or three years by a technician (if only to make sure that the sensor is still where it is supposed to be). While there new firmware updates are applied, and as a result the algorithm defaults are updated. During the cycle, some devices are updated and some are still old. =2D-=20 ] Never tell me the odds! | ipv6 mesh network= s [=20 ] Michael Richardson, Sandelman Software Works | network architect= [=20 ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails = [=20 =09 --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAlvc1QoACgkQlUzhVv38 QpDR+Qf9F1i5s89mj7RKDdr7XH2E9b02VcdcBf4yFg9Y4x31j1w1NXbVgo0guN56 dZzaYmN28JwqNhiDRh/B5VQ2e6N6jDPsW0eNG7PZ+n+k1kFePERPJAY6dMxL3tN2 oPayVs4JuIuRK4XLCyk/tVOAjzmMOL5/GRXPGxShpRfW83654I6sPtLR4kfUWrFJ e98rH/Kmw/kptIJM7POz3l9yH81j97s+8LtljOdcOH1pVo8TODv66tca6XbJ3i+H pPHfOPqpRJ/8VgodFNb0/e0nE03rjcUpM6RzSrBQlh9t/IDKR5WA9OaLLBOx9Czz IB0MAUy92vIGkCZB/DQdqCJtEPeBuQ== =QrgZ -----END PGP SIGNATURE----- --=-=-=-- From nobody Fri Nov 2 19:54:50 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A373B130E10 for ; Fri, 2 Nov 2018 19:54:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 38fyWN-aAf4B for ; Fri, 2 Nov 2018 19:54:47 -0700 (PDT) Received: from EUR03-DB5-obe.outbound.protection.outlook.com (mail-eopbgr40057.outbound.protection.outlook.com [40.107.4.57]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AC35E12777C for ; Fri, 2 Nov 2018 19:54:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Me3vz47DySBNNXL/MwjcFei6DDDYgkzsmnYafBvvH3k=; b=IGqCJWQdiyISZCLFqEvbwbBDVRl1NEOEhXuCQrGBd3Y3z/RjAqO8vc489Dw5qPXWiBgkFuJiKeTh2uKhbsI5kX5/taMYbUF00SdqOpJ9bTlLDVTf5GfA1h4IJkgIBX1bIZgBEw5Tfi2LVBLpD7Cnr1WU4mNSH+TnQCb8pleicfY= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB2752.eurprd08.prod.outlook.com (10.166.199.156) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1294.26; Sat, 3 Nov 2018 02:54:43 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::7165:6199:a54f:510c]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::7165:6199:a54f:510c%2]) with mapi id 15.20.1294.024; Sat, 3 Nov 2018 02:54:43 +0000 From: Hannes Tschofenig To: John Mattsson , "t2trg@irtf.org" , "ace@ietf.org" Thread-Topic: Minimizing overhead of certificates in constrained IoT Thread-Index: AQHUcp+R17G1j53EqkyuwSM7Na/FnqU9Wtsg Date: Sat, 3 Nov 2018 02:54:42 +0000 Message-ID: References: <3F7E42DF-7CA9-4765-AB67-A53B4E7D1AC1@ericsson.com> In-Reply-To: <3F7E42DF-7CA9-4765-AB67-A53B4E7D1AC1@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [31.133.154.159] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB2752; 6:0bXbWlTKv1s7V6kKvTZJ6eraHLwDv7ThODgj5oA54Ezx5PRN6WdHElLn90guGSsKVRB1klYT0iECXRBaVvmsfeg3x8p+kVHThOWPNOhZLiPGLTZuIFHwj8JkY0R8ifxrsew5Zbohe7Umbh11M8IowyUFoFF7EpfPaIG1NYwruEWXK7jnJTJSBUB8uCTOl9m78EA0cSMYWNN8VfUKr759TuvjZERlsL+HDh9kipoTfSo4uBK4ATadxl8jB6nt4EhRLFC0f2LP6ogDdK2mu/jlKmoz1yvqyYLxV0mYZue5XyLYRTgoGh38SlAhi75/EG6iGKzc1GrhlxtDpjAazPlsz77tiWRSlkRgQwAE0g5ByjdJlwucaadwNgOyYtsRLV2GUwX59bJ2jlsVBGv9WD2rnI4mK5cIJvRa6qwlgV896FBlN9yk/oIZTPsmao8aLD2AxjCowsjjvSdETD25d3t6Ng==; 5:Hif2MgE2ZqVtVe52qADsxmzwE1DDba26khZtwrs5CzmPWV4ZnZIfrC5XHh4xbcYYSIpKIX3gBUyOw01ibj1KofGwdSuTqK5/VgDaF2UGoBpfCFRgTOY+lvRYag0WOJtp4PpMr/WJOfDwyx/7CqCET4o8mLImHcHuJZNW9G5+FaI=; 7:HebwLnGhAdro6EYBJTPmn0tdid6dlFaR+8JxzgKOQsN9TzBIMNqsScw889Day8OpoQTlBDLp6tbdIKUFf1UnGoAWZlndFOyuUPTevcXhUScxE2UR95T9154dIuYloHrKu7bp5RCws21z8nONMFLwZQ== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 096c03ef-72f7-45c8-1830-08d64137b4ba x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(5600074)(711020)(4618075)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB2752; x-ms-traffictypediagnostic: VI1PR0801MB2752: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(165104125076784)(17755550239193)(192374486261705); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3002001)(3231382)(944501410)(52105095)(6055026)(148016)(149066)(150057)(6041310)(20161123564045)(20161123560045)(20161123562045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(201708071742011)(7699051)(76991095); SRVR:VI1PR0801MB2752; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB2752; x-forefront-prvs: 08457955C4 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(136003)(376002)(346002)(366004)(39860400002)(13464003)(51444003)(199004)(189003)(40434004)(53546011)(106356001)(6506007)(5024004)(14444005)(105586002)(256004)(476003)(446003)(11346002)(6116002)(3846002)(97736004)(8936002)(7736002)(6306002)(71190400001)(71200400001)(2201001)(81156014)(81166006)(99286004)(86362001)(53936002)(72206003)(6436002)(478600001)(6246003)(2900100001)(966005)(55016002)(229853002)(9686003)(305945005)(68736007)(110136005)(2906002)(7696005)(33656002)(25786009)(5660300001)(74316002)(66066001)(486006)(2501003)(26005)(8676002)(316002)(14454004)(76176011)(102836004)(186003); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB2752; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: ulY8ti/WAeDh8gWWV8Wfh0KuF4JC0miLzAC3RoXxGZUbdvJbZaclvmZd6fyq0bGa/bgxOcPBTHfYDiaNA+wemnkstZiWXup2nDp76nnK14LYhsAmuqf5Vr3o0KEpAhFeiGR8UV/eITT72ZRzBQUYqmRTdQ4Y7hjcmHCT33hJ5TyIGG0rGOAnMfLN9HHdOjtyTCjFVZR3vW752BpXlt9B7M98jPfzUexdOZXpdEWQIscPcU7uKP87QcOmLY89S8QGBbnN06LxVN7Jqb6qlPVXh4s/SmoI8xfviOqZMgLEjF+qaCZZ5VF7+Kz4JAAtXfEkv+ejjPA4ZwPSEwhnw/xLZ10B4qfKrm9fum/V9UoSOkw= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 096c03ef-72f7-45c8-1830-08d64137b4ba X-MS-Exchange-CrossTenant-originalarrivaltime: 03 Nov 2018 02:54:42.8663 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB2752 Archived-At: Subject: Re: [Ace] Minimizing overhead of certificates in constrained IoT X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Nov 2018 02:54:50 -0000 SGkgSm9obiwNCg0KSSBzZWUgQ1dUIGFzIGEgY29tYmluYXRpb24gb2YgS2VyYmVyb3MgdGlja2V0 IChmb3IgdGhlIHVzZSBvZiBzeW1tZXRyaWMga2V5KSBhbmQgYSBjZXJ0aWZpY2F0ZSBmb3JtYXQg KGZvciB0aGUgYXN5bW1ldHJpYyBrZXkgdXNhZ2UpIGVuY29kZWQgaW4gQ0JPUi4NClRoZSBjbGFp bXMgaW4gdGhlIENXVCBhcmUgZXNzZW50aWFsbHkgdGhlIGF0dHJpYnV0ZXMgeW91IGNhcnJ5IGlu IGEgY2VydGlmaWNhdGUuDQoNCkNpYW8NCkhhbm5lcw0KDQotLS0tLU9yaWdpbmFsIE1lc3NhZ2Ut LS0tLQ0KRnJvbTogQWNlIDxhY2UtYm91bmNlc0BpZXRmLm9yZz4gT24gQmVoYWxmIE9mIEpvaG4g TWF0dHNzb24NClNlbnQ6IEZyaWRheSwgTm92ZW1iZXIgMiwgMjAxOCAxMjozMSBQTQ0KVG86IHQy dHJnQGlydGYub3JnOyBhY2VAaWV0Zi5vcmcNClN1YmplY3Q6IFtBY2VdIE1pbmltaXppbmcgb3Zl cmhlYWQgb2YgY2VydGlmaWNhdGVzIGluIGNvbnN0cmFpbmVkIElvVA0KDQpIaSwNCg0KV2UgcmVj ZW50bHkgc3VibWl0dGVkIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1yYXphLWFj ZS1jYm9yLWNlcnRpZmljYXRlcy0wMCwgd2hpY2ggYnVpbGQgb24gcmVzZWFyY2ggZG9uZSBieSBS ZXNlYXJjaCBJbnN0aXR1dGVzIG9mIFN3ZWRlbiwgUm95YWwgSW5zdGl0dXRlIG9mIFRlY2hub2xv Z3kgaW4gU3RvY2tob2xtLCBhbmQgTmV4dXM6DQoNCmh0dHBzOi8va3RoLmRpdmEtcG9ydGFsLm9y Zy9zbWFzaC9nZXQvZGl2YTI6MTE1Mzk1OC9GVUxMVEVYVDAxLnBkZg0KaHR0cHM6Ly9kb2kub3Jn LzEwLjEwMDcvOTc4LTMtMzE5LTkzNzk3LTdfMTQNCg0KVGhlIG1lY2hhbmlzbSBpbiB0aGUgZHJh ZnQgYWltcyB0byByZWR1Y2UgbWVzc2FnZSBvdmVyaGVhZCB3aXRoIHRoZSBhcHByb2FjaCB0byBz dGFydCB3aXRoIGEgaGVhdmlseSBwcm9maWxlZCBYLjUwOSBjZXJ0aWZpY2F0ZSBhbmQgZW5jb2Rl IGl0IHRvIENCT1IsIHJlc3VsdGluZyBpbiBhcm91bmQgNTAlIHNhdmluZ3MgaW4gbWVzc2FnZSBv dmVyaGVhZCBhbmQgc3RvcmFnZS4gQSBtYWpvciByZWFzb24gZm9yIHN1Ym1pdHRpbmcgdGhpcyBl YXJseSBkcmFmdCBpcyB0byBzdGFydCBhIGRpc2N1c3Npb24gb24gaG93IHRvIG1pbmltaXplIHRo ZSBvdmVyaGVhZCAobWVzc2FnZSBzaXplLCBjb2RlIHNpemUsIG1lbW9yeSwgc3RvcmFnZSwgcHJv Y2Vzc2luZywgZXRjLikgY2F1c2VkIGJ5IGNlcnRpZmljYXRlcyBpbiBJb1QgZGVwbG95bWVudHMu DQoNCkN1cnJlbnQgWC41MDkgY2VydGlmaWNhdGVzIGFyZSBkZW1hbmRpbmcgaW4gc2V2ZXJhbCB3 YXlzIChtZXNzYWdlLCBjb2RlIHNpemUsIG1lbW9yeSwgcHJvY2Vzc2luZywgZXRjLiBhbmQgYXJl IG5vdCBkZXNpZ25lZCBmb3IgY29uc3RyYWluZWQgSW9UIGVudmlyb25tZW50cy4gVGhlIHF1aXRl IGxhcmdlIHNpemVzIG9mIGV2ZW4gd2VsbCBwcm9maWxlZCBYLjUwOSBjZXJ0aWZpY2F0ZXMgbWVh biB0aGF0IHRoZXkgdGFrZSB1cCBhIGxhcmdlIHBhcnQgb2YgdGhlIHRvdGFsIG51bWJlciBvZiBi eXRlcyB3aGVuIHVzZWQgaW4gcHJvdG9jb2xzLiBUcmFuc21pdHRpbmcsIHJlY2VpdmluZywgb3Ig ZXZlbiBsaXN0ZW5pbmcgZm9yIHJhZGlvIGlzIHJlbGF0aXZlbHkgZXhwZW5zaXZlIGluIHRlcm1z IG9mIHBvd2VyIGNvbnN1bXB0aW9uIGFuZCBhcyB0aGUgcmFkaW8gcmVzb3VyY2VzIGFyZSBvZnRl biBjb25zdHJhaW5lZCwgbGFyZ2UgbWVzc2FnZXMgbGVhZCB0byBpbnRlcmZlcmVuY2UgYW5kIHRo ZXJlZm9yZSBtb3JlIGxhdGVuY3kgdGhhbiBqdXN0IHRoZSBtZXNzYWdlIHNpemVzIHdvdWxkIGlu ZmVyLg0KDQpUaGF0IGZhY3QgdGhhdCBjZXJ0aWZpY2F0ZXMgYXJlIHNlbnQgZW5jcnlwdGVkIGlu IG5ldyBwcm90b2NvbHMgKFRMUyAxLjMsIERUTFMgMS4zLCBFREhPQykgbWVhbnMgdGhhdCBjb21w cmVzc2lvbiBpbiBpbnRlcm1lZGlhcmllcyB3aWxsIG5vdCB3b3JrIGluIHRoZSBmdXR1cmUuIFRM UyAxLjMgYW5kIERUTFMgMS4zIGFyZSBjdXJyZW50bHkgbG9va2luZyBhdCBjZXJ0aWZpY2F0ZSBj b21wcmVzc2lvbiwgYnV0IHRoZXNlIG1lY2hhbmlzbXMgYXJlIG5vdCBvcHRpbWFsIGZvciBjb25z dHJhaW5lZCBJb1QuIFRoZSB1c2Ugb2YgZ2VuZXJhbCBsb3NzbGVzcyBjb21wcmVzc2lvbiBhbGdv cml0aG1zIGFyZSBxdWl0ZSBoZWF2eSwgYW5kIHRoZXkgZG8gbm90IGNvbXByZXNzIHRoaW5ncyBv cHRpbWFsbHkuDQoNCldpdGggdGhlIHN1Ym1pc3Npb24gb2YgcmFmdC1yYXphLWFjZS1jYm9yLWNl cnRpZmljYXRlcyB3ZSB3b3VsZCBsaWtlIHRvIHN0YXJ0IGEgZGlzY3Vzc2lvbiBvbiBob3cgdG8g bWluaW1pemUgdGhlIG92ZXJoZWFkIGNhdXNlZCBieSBjZXJ0aWZpY2F0ZXMuDQoNCi0gV2hpY2gg YXNwZWN0cyBkbyB0aGUgY29tbXVuaXR5IHByaW9yaXRpc2UgdGhlIG1vc3Q/IGkuZS4gbWVzc2Fn ZSBzaXplLCBjb2RlIHNpemUsIG1lbW9yeSwgcHJvY2Vzc2luZywgZXRjLiBBbmQgaG93IHNob3Vs ZCB0cmFkZS1vZmZzIGJldHdlZW4gdGhlc2UgYXNwZWN0cyBsb29rIGxpa2U/DQoNCi0gRm9yIGhv dyBsb25nIHRpbWUgaXMgcGVvcGxlIHBsYW5uaW5nIHRvIHVzZSBvbGRlciBwcm90b2NvbHMgdGhh dCBkbyBub3QgZW5jcnlwdCBjZXJ0aWZpY2F0ZXM/IElzIGl0IHdvcnRoIHNwZWNpZnlpbmcgZ2F0 ZXdheSB0eXBlIG9mIGNvbXByZXNzaW9uIGZvciB0aGVzZSBwcm90b2NvbHM/DQoNCmRyYWZ0LXJh emEtYWNlLWNib3ItY2VydGlmaWNhdGVzIGRvZXMgY3VycmVudGx5IHRha2UgdGhlIGFwcHJvYWNo ZWQgdG8gc3RhcnQgd2l0aCBhIGhlYXZpbHkgcHJvZmlsZWQgWC41MDkgY2VydGlmaWNhdGUgYW5k IGVuY29kZSBpdCB0byBDQk9SLiBBbm90aGVyIGFwcHJvYWNoIGlzIHRvIG5vdCBzdGFydCB3aXRo IFguNTA5IGFuZCBkbyBjZXJ0aWZpY2F0ZXMgaW4gQ0JPUiBkaXJlY3RseS4gVGhpcyBjYW4gYmUg ZXZlbiBtb3JlIG9wdGltYWwgZnJvbSBhIHRoZW9yZXRpY2FsIHBvaW50IG9mIHZpZXcgYnV0IG1h eSBuZXZlciBkZXBsb3llZC4gUHJldmlvdXMgYXR0ZW1wdHMgdG8gaW50cm9kdWNlIG5ldyBjZXJ0 aWZpY2F0ZSB0eXBlcyBzZWVtIHRvIGhhdmUgZmFpbGVkLiBPbiB0aGUgb3RoZXIgaGFuZCB0aGUg Y3VycmVudCBtZWNoYW5pc20gaW5jcmVhc2VzIGNvZGUgc2l6ZSBhbmQgcHJvY2Vzc2luZyBmb3Ig dGhlIHBhcnQgdmVyaWZ5aW5nIHRoZSBjZXJ0aWZpY2F0ZS4NCg0KLSBIb3cgc2hvdWxkIG5ldyBJ b1QgQ0JPUiBjZXJ0aWZpY2F0ZXMgYmUgaW50cm9kdWNlZCBpbiBwcm90b2NvbHM/IEFzIGEgbmV3 IHR5cGUgb2YgY2VydGlmaWNhdGUgb3IgYSBuZXcgY29tcHJlc3Npb24vZW5jb2RpbmcgYWxnb3Jp dGhtIGZvciBjZXJ0aWZpY2F0ZXM/IElzIGNvbXByZXNzaW9uL2VuY29kaW5nIGRvbmUgaW5zaWRl IHRoZSBwcm90b2NvbCBvciBvdXRzaWRlIG9mIHRoZSBwcm90b2NvbD8NCg0KLSBJcyBDQk9SIHRo ZSBjb3JyZWN0IGNob2ljZSBpZiBhIG5ldyBlbmNvZGluZyBpcyBzcGVjaWZpZWQ/IFdlIGNlcnRh aW5seSB0aGluayBzby4NCg0KLSBXaGF0IGFyZSBwZW9wbGVz4oCZIG9waW5pb25zIG9uIGdlbmVy YWwgbG9zc2xlc3MgY29tcHJlc3Npb24gYWxnb3JpdGhtcz8NCg0KLSBXaGljaCBwcm90b2NvbHMg d291bGQgdGhlIElvVCBjb21tdW5pdHkgd2FudCB0byB1c2Ugd2l0aCBuZXcgY2VydGlmaWNhdGVz L2VuY29kaW5nL2NvbXByZXNzaW9uPw0KDQpJIHRoaW5rIHRoYXQgYSBnb29kIHBsYWNlIHRvIHN0 YXJ0IGEgZGlzY3Vzc2lvbiBhYm91dCB0aGVzZSB0b3BpY3Mgd291bGQgYmUgaW4gVDJUUkcuIElm IHBlb3BsZSBmaW5kIHRoaXMgaW50ZXJlc3RpbmcsIEkgc3VnZ2VzdCBoYXZpbmcgYSBxdWljayBp bnRyb2R1Y3Rpb24gb24gdGhlIEZyaWRheSBwbGVuYXJ5IHNlc3Npb24gYW5kIHRoZW4gZnVydGhl ciBkaXNjdXNzaW9ucyBpbiB0aGUgc2VjdXJpdHkgYnJlYWtvdXQuDQoNCkNoZWVycywNCkpvaG4N Cg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkFjZSBt YWlsaW5nIGxpc3QNCkFjZUBpZXRmLm9yZw0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9hY2UNCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWls IGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJp dmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5v dGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRl bnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3Jl IG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCg== From nobody Fri Nov 2 23:56:27 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BEDAF12958B; Fri, 2 Nov 2018 23:56:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ow8oMP65mqMW; Fri, 2 Nov 2018 23:56:14 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E2EB3127332; Fri, 2 Nov 2018 23:56:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost2.informatik.uni-bremen.de [IPv6:2001:638:708:30c8:406a:91ff:fe74:f2b7]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id wA36u5pV014479; Sat, 3 Nov 2018 07:56:10 +0100 (CET) Received: from [IPv6:2001:67c:1230:105:15de:f7b0:1a03:10c6] (unknown [IPv6:2001:67c:1230:105:15de:f7b0:1a03:10c6]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 42n8q743gTz1Bqf; Sat, 3 Nov 2018 07:56:03 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Carsten Bormann In-Reply-To: <3F7E42DF-7CA9-4765-AB67-A53B4E7D1AC1@ericsson.com> Date: Sat, 3 Nov 2018 13:55:58 +0700 Cc: "t2trg@irtf.org" , "ace@ietf.org" X-Mao-Original-Outgoing-Id: 562920956.278599-6ab7790c9349491a7bf7601c2e6db6e6 Content-Transfer-Encoding: quoted-printable Message-Id: <1FA4F305-B83D-4E42-8F7A-93B2937C8DA4@tzi.org> References: <3F7E42DF-7CA9-4765-AB67-A53B4E7D1AC1@ericsson.com> To: John Mattsson X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: Re: [Ace] [T2TRG] Minimizing overhead of certificates in constrained IoT X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Nov 2018 06:56:16 -0000 Much of this discussion is less of a technical nature but about framing = things right. If all signed assertions are called certificates, it may be hard to get = rid of X.509, because that is what people think of when they say = =E2=80=9Ccertificate". What signed assertions do we need for constrained IoT, and which of = these really =E2=80=9Cneed=E2=80=9D to be certificates? (A chain of signed assertions might ultimately terminate in an X.509 = certificate, because that=E2=80=99s the way we store public keys with = long-term validity in many places, but how important is it to have the = full X.509 certificate represented in a constrained device?) Gr=C3=BC=C3=9Fe, Carsten From nobody Sat Nov 3 07:40:39 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 41D20124408 for ; Sat, 3 Nov 2018 07:40:38 -0700 (PDT) X-Quarantine-ID: <9NiriCk5prqJ> X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER SECTION, Non-encoded 8-bit data (char 9C hex): Received: ...s kaduk@ATHENA.MIT.EDU)\n\t\234by outgoing.mit[...] X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9NiriCk5prqJ for ; Sat, 3 Nov 2018 07:40:34 -0700 (PDT) Received: from dmz-mailsec-scanner-2.mit.edu (dmz-mailsec-scanner-2.mit.edu [18.9.25.13]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 05F8D1277D2 for ; Sat, 3 Nov 2018 07:40:33 -0700 (PDT) X-AuditID: 1209190d-79bff70000004eb5-4a-5bddb360172d Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-2.mit.edu (Symantec Messaging Gateway) with SMTP id 57.5E.20149.063BDDB5; Sat, 3 Nov 2018 10:40:32 -0400 (EDT) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-1.mit.edu (8.14.7/8.9.2) with ESMTP id wA3EeUCF020210; Sat, 3 Nov 2018 10:40:31 -0400 Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) œby outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id wA3EeQim009750 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sat, 3 Nov 2018 10:40:29 -0400 Date: Sat, 3 Nov 2018 09:40:26 -0500 From: Benjamin Kaduk To: John Mattsson Cc: "t2trg@irtf.org" , "ace@ietf.org" Message-ID: <20181103144026.GD54966@kduck.kaduk.org> References: <3F7E42DF-7CA9-4765-AB67-A53B4E7D1AC1@ericsson.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <3F7E42DF-7CA9-4765-AB67-A53B4E7D1AC1@ericsson.com> User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprBKsWRmVeSWpSXmKPExsUixCmqrJuw+W60wduHKhbfv/UwW5yauZvJ 4v2DHhYHZo9fX6+yeSxZ8pPJY/LGw2wBzFFcNimpOZllqUX6dglcGQeunGItOKZUsaJlEksD 4yuZLkYODgkBE4neXr8uRi4OIYE1TBJn3m5jh3A2MEo8/PQayrnDJPF9wW6WLkZODhYBFYmp s1czgthsQHZD92VmEFtEQE/iVNtLsDizgIvEuUnvmEBsYQFPiZe37oHV8AJtO/lhKhuILSRg L7Hjch8TRFxQ4uTMJywQveoSf+ZdYga5jllAWmL5Pw6IsLxE89bZYGM4BRwkOq8tYQexRQWU Jfb2HWKfwCg4C8mkWUgmzUKYNAvJpAWMLKsYZVNyq3RzEzNzilOTdYuTE/PyUot0jfRyM0v0 UlNKNzGCA12Sdwfjv7tehxgFOBiVeHgNKu9EC7EmlhVX5h5ilORgUhLldeYFCvEl5adUZiQW Z8QXleakFh9ilOBgVhLh/dIKlONNSaysSi3Kh0lJc7AoifNOaFkcLSSQnliSmp2aWpBaBJOV 4eBQkuBdtulutJBgUWp6akVaZk4JQpqJgxNkOA/Q8GMgNbzFBYm5xZnpEPlTjLoc7xb8n84s xJKXn5cqJc4rAlIkAFKUUZoHNweUoCSy99e8YhQHekuYtx2kigeY3OAmvQJawgS0JPrPbZAl JYkIKakGxmfvI2oKXX0cDrR2xd3edCzrFqPG5Lk2MR8zzPMOLlfd/6FxrdhK9cyL2z0WNuWv ydUzqrQqdYv/vKB1nsw0p+Xp0oFv3ORe3HzM/1VR3siutmFmwqV2979VDzqSj+14FnxhnUYF s1zL+Zadl5fcXGck+o/5Qd3JtIWHfu/YvUKdxSO50XzKfyWW4oxEQy3mouJEAPOKz18rAwAA Archived-At: Subject: Re: [Ace] Minimizing overhead of certificates in constrained IoT X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Nov 2018 14:40:38 -0000 On Fri, Nov 02, 2018 at 11:31:16AM +0000, John Mattsson wrote: > Hi, > > We recently submitted https://tools.ietf.org/html/draft-raza-ace-cbor-certificates-00, which build on research done by Research Institutes of Sweden, Royal Institute of Technology in Stockholm, and Nexus: > > https://kth.diva-portal.org/smash/get/diva2:1153958/FULLTEXT01.pdf > https://doi.org/10.1007/978-3-319-93797-7_14 > > The mechanism in the draft aims to reduce message overhead with the approach to start with a heavily profiled X.509 certificate and encode it to CBOR, resulting in around 50% savings in message overhead and storage. A major reason for submitting this early draft is to start a discussion on how to minimize the overhead (message size, code size, memory, storage, processing, etc.) caused by certificates in IoT deployments. > > Current X.509 certificates are demanding in several ways (message, code size, memory, processing, etc. and are not designed for constrained IoT environments. The quite large sizes of even well profiled X.509 certificates mean that they take up a large part of the total number of bytes when used in protocols. Transmitting, receiving, or even listening for radio is relatively expensive in terms of power consumption and as the radio resources are often constrained, large messages lead to interference and therefore more latency than just the message sizes would infer. > > That fact that certificates are sent encrypted in new protocols (TLS 1.3, DTLS 1.3, EDHOC) means that compression in intermediaries will not work in the future. TLS 1.3 and DTLS 1.3 are currently looking at certificate compression, but these mechanisms are not optimal for constrained IoT. The use of general lossless compression algorithms are quite heavy, and they do not compress things optimally. I assume you are not considering lossy compression algorithms, and thus are indicating that this effort could be considered a domain-specific lossless compression algorithm. (Or perhaps you would consider the X.509 profile that removes many things to be "lossy"?) Regardless, the codepoint space for CertificateCompressionAlgorithm (in https://tools.ietf.org/html/draft-ietf-tls-certificate-compression-04) seems large enough to allow for a domain-specific compression algorithm, e.g., one incorporating a custom dictionary that would improve compression efficiency at the cost of storage space on the implementation. Is this an avenue that you have investigated? > With the submission of raft-raza-ace-cbor-certificates we would like to start a discussion on how to minimize the overhead caused by certificates. > > - Which aspects do the community prioritise the most? i.e. message size, code size, memory, processing, etc. And how should trade-offs between these aspects look like? > > - For how long time is people planning to use older protocols that do not encrypt certificates? Is it worth specifying gateway type of compression for these protocols? > > draft-raza-ace-cbor-certificates does currently take the approached to start with a heavily profiled X.509 certificate and encode it to CBOR. Another approach is to not start with X.509 and do certificates in CBOR directly. This can be even more optimal from a theoretical point of view but may never deployed. Previous attempts to introduce new certificate types seem to have failed. On the other hand the current mechanism increases code size and processing for the part verifying the certificate. > > - How should new IoT CBOR certificates be introduced in protocols? As a new type of certificate or a new compression/encoding algorithm for certificates? Is compression/encoding done inside the protocol or outside of the protocol? > > - Is CBOR the correct choice if a new encoding is specified? We certainly think so. > > - What are peoples’ opinions on general lossless compression algorithms? > > - Which protocols would the IoT community want to use with new certificates/encoding/compression? > > I think that a good place to start a discussion about these topics would be in T2TRG. If people find this interesting, I suggest having a quick introduction on the Friday plenary session and then further discussions in the security breakout. There are some good questions here (and I certainly don't have the answers!); it will be interesting to read the rest of this thread. -Ben From nobody Sat Nov 3 07:59:12 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 172961288BD for ; Sat, 3 Nov 2018 07:59:10 -0700 (PDT) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER SECTION, Non-encoded 8-bit data (char 9C hex): Received: ...s kaduk@ATHENA.MIT.EDU)\n\t\234by outgoing.mit[...] X-Spam-Flag: NO X-Spam-Score: -4.198 X-Spam-Level: X-Spam-Status: No, score=-4.198 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DyAtLYD8FMaJ for ; Sat, 3 Nov 2018 07:59:08 -0700 (PDT) Received: from dmz-mailsec-scanner-7.mit.edu (dmz-mailsec-scanner-7.mit.edu [18.7.68.36]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B19731277D2 for ; Sat, 3 Nov 2018 07:59:07 -0700 (PDT) X-AuditID: 12074424-ca3ff70000006ced-b7-5bddb7b8a401 Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-7.mit.edu (Symantec Messaging Gateway) with SMTP id D2.7E.27885.9B7BDDB5; Sat, 3 Nov 2018 10:59:05 -0400 (EDT) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-3.mit.edu (8.14.7/8.9.2) with ESMTP id wA3Ex3XX025838; Sat, 3 Nov 2018 10:59:03 -0400 Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) œby outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id wA3EwvG8013609 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sat, 3 Nov 2018 10:58:59 -0400 Date: Sat, 3 Nov 2018 09:58:57 -0500 From: Benjamin Kaduk To: John Mattsson Cc: "salvador.p.f@um.es" , "ace@ietf.org" Message-ID: <20181103145857.GG54966@kduck.kaduk.org> References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrCIsWRmVeSWpSXmKPExsUixCmqrbtz+91og38bVC2+f+thtjg1czeT RfOqq+wOzB6/vl5l81iy5CeTx7mXbSwBzFFcNimpOZllqUX6dglcGe3/1jAXPBWouPnEroFx HU8XIyeHhICJRGfDM+YuRi4OIYE1TBKrJ79kg3A2MEqcOLiXBcK5wyRxfcdpRpAWFgEViduv v4DZbEB2Q/dlZhBbREBP4lTbS7A4s4CPxIpHS1lAbGEBDYmNXVvZQWxeoHUrPv5jArGFBOwl fu3dywgRF5Q4OfMJC0SvlsSNfy+BajiAbGmJ5f84QMKcAg4St/cdYQOxRQWUJfb2HWKfwCgw C0n3LCTdsxC6FzAyr2KUTcmt0s1NzMwpTk3WLU5OzMtLLdI118vNLNFLTSndxAgKXHYXlR2M 3T3ehxgFOBiVeHgNKu9EC7EmlhVX5h5ilORgUhLldeYFCvEl5adUZiQWZ8QXleakFh9ilOBg VhLh/dIKlONNSaysSi3Kh0lJc7AoifNObFkcLSSQnliSmp2aWpBaBJOV4eBQkuDN3HY3Wkiw KDU9tSItM6cEIc3EwQkynAdo+AGQGt7igsTc4sx0iPwpRkUpcd4JIAkBkERGaR5cLyixSGTv r3nFKA70ijDvSZAqHmBSgut+BTSYCWhw9J/bIINLEhFSUg2Mm+PeMbZOF32ibM7YsIftKm9G 0WkW7rULNjnPrKyUj5NlX83Y5ROctURIoGdOV1mK56/CeNUvt6bZHtKpcHh+rOS5RM1ExU7L CWvtmsqrpuluNkt9y/S1JjnG9/AV/uxHca/rdALbOs6t6UlLznl89MfFTu8zkW/zmT6296/4 q8RVuGKyUr0SS3FGoqEWc1FxIgBTRvM+BwMAAA== Archived-At: Subject: Re: [Ace] EDHOC standardization X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Nov 2018 14:59:10 -0000 On Fri, Nov 02, 2018 at 02:55:54PM +0000, John Mattsson wrote: > Hi Benjamin, Salvador > > While DTLS 1.3 have done a very good job of lowering the overhead of the record layer when application data is sent (see e.g. https://tools.ietf.org/html/draft-ietf-lwig-security-protocol-comparison-01 for a comparison between different protocols), I do not think the handshake protocol is much leaner (is it leaner at all?). (There are some handshake messages that are removed entirely.) > We tried to make an fair comparison between EDHOC and TLS 1.3 in the presentation at IETF 101 (see https://datatracker.ietf.org/meeting/101/materials/slides-101-ace-key-exchange-w-oscore-00). Since then, we have significantly optimized the encoding in EDHOC and the upcoming version (-11) is expected to have the following message sizes. > > Auth. PSK RPK x5t x5chain > -------------------------------------------------------------------- > EDHOC message_1 43 38 38 38 > EDHOC message_2 47 121 127 117 + Certificate chain > EDHOC message_3 12 86 92 82 + Certificate chain > -------------------------------------------------------------------- > Total 102 245 257 237 + Certificate chains > > As Salvador writes, the handshakes in TLS 1.3 and DTLS 1.3 are basically the same, so the numbers presented at IETF 101 should be a good estimate also for DTLS 1.3. > > Auth. PSK RPK > -------------------------------------------------------------------- > (D)TLS message_1 142 107 > (D)TLS message_2 135 264 > (D)TLS message_3 51 167 > -------------------------------------------------------------------- > Total 328 538 Thanks for the numbers! > The numbers above include ECDHE. For handshake messages, my understanding is that the DTLS 1.3 and TLS 1.3 record layer have exactly the same size. The DTLS 1.3 ones will be worse, due to the epoch and sequence number fields. -Ben From nobody Sat Nov 3 08:16:35 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DBD1C1288BD for ; Sat, 3 Nov 2018 08:16:32 -0700 (PDT) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER SECTION, Non-encoded 8-bit data (char 9C hex): Received: ...s kaduk@ATHENA.MIT.EDU)\n\t\234by outgoing.mit[...] X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RJYkA0OgK_sf for ; Sat, 3 Nov 2018 08:16:31 -0700 (PDT) Received: from dmz-mailsec-scanner-1.mit.edu (dmz-mailsec-scanner-1.mit.edu [18.9.25.12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 76B571277D2 for ; Sat, 3 Nov 2018 08:16:31 -0700 (PDT) X-AuditID: 1209190c-17dff70000002f63-a0-5bddbbccf2e1 Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-1.mit.edu (Symantec Messaging Gateway) with SMTP id AF.20.12131.DCBBDDB5; Sat, 3 Nov 2018 11:16:29 -0400 (EDT) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-3.mit.edu (8.14.7/8.9.2) with ESMTP id wA3FGRPQ026772; Sat, 3 Nov 2018 11:16:27 -0400 Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) œby outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id wA3FGLgT017462 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Sat, 3 Nov 2018 11:16:25 -0400 Date: Sat, 3 Nov 2018 10:16:21 -0500 From: Benjamin Kaduk To: Michael Richardson Cc: John Mattsson , "alvador.p.f@um.es" , "ace@ietf.org" Message-ID: <20181103151621.GH54966@kduck.kaduk.org> References: <379B1A31-1F7E-43A6-A518-4398570CBBC7@ericsson.com> <16572.1541199115@dooku.sandelman.ca> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <16572.1541199115@dooku.sandelman.ca> User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrLIsWRmVeSWpSXmKPExsUixCmqrXt2991ogys7BCy+f+thtljXfYXV 4tTM3UwWPYf62R1YPH59vcrmsWTJTyaPljl7mD3OvWxjCWCJ4rJJSc3JLEst0rdL4MpoW/mE teAvZ8X83R9YGhhfs3cxcnJICJhIrF3xgqmLkYtDSGANk8SxJ5NYIJwNjBK75reygVQJCdxh kli5Pq+LkYODRUBFYu0sa5AwG5DZ0H2ZGcQWEdCTWH7kGSOIzSxQL7Fp5wewuLCAhsTGrq1g y3iBljW+aWKBGJku8e5vEyNEXFDi5MwnLBC9WhI3/r1kAlnFLCAtsfwfB0iYU8BI4sSVi2Dl ogLKEnv7DrFPYBSYhaR7FpLuWQjdCxiZVzHKpuRW6eYmZuYUpybrFicn5uWlFuka6uVmluil ppRuYgSHsiTPDsYzb7wOMQpwMCrx8BpU3okWYk0sK67MPcQoycGkJMrrzAsU4kvKT6nMSCzO iC8qzUktPsQowcGsJML7pRUox5uSWFmVWpQPk5LmYFES553Qsjga6N/EktTs1NSC1CKYrAwH h5IEr8muu9FCgkWp6akVaZk5JQhpJg5OkOE8QMOn7ASq4S0uSMwtzkyHyJ9iVJQS560GSQiA JDJK8+B6QalGInt/zStGcaBXhHnng6zgAaYpuO5XQIOZgAZH/7kNMrgkESEl1cConvJbgyNb WTFuckGn09Ptkqe8Oh/NUF3Zu/501RvRK+9zq3pKp3scLm1d9O6wgnXbTV3v8J6bX+o7bEN+ nL3217YgaWXl8aOmqxbG3TWqCvfZsfrfSnfhE6YLfM+LZfJl/pmm1B7+VFf76KbWhd2uky80 L259mjlbLlU2oDP8SpPJVNmTfL5KLMUZiYZazEXFiQABE0diEAMAAA== Archived-At: Subject: Re: [Ace] EDHOC standardization X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Nov 2018 15:16:33 -0000 On Sat, Nov 03, 2018 at 05:51:55AM +0700, Michael Richardson wrote: > > John Mattsson wrote: > > of negotiation is still needed. The current plan for the next version > > is to introduce cipher suites and to let the cipher suite with value 0 > > indicate that algorithms have been negotiated out-of-band. > > I agree with the idea that some common default should be very easy to > refer to, but I don't like the idea that the gateway has to remember what > the out-of-band "default" is on a per-device basis. I would say that we need > at least 0/1, so that we can say that it's the current vs the "new" default. > > If you consider the case where the sensor is on very low bandwidth > connection (I would say LoRaWAN, but I am not well qualified in that space). > The sensor gets visited every two or three years by a technician (if only to > make sure that the sensor is still where it is supposed to be). While there > new firmware updates are applied, and as a result the algorithm defaults are > updated. During the cycle, some devices are updated and some are still old. Are you proposing that the management of the 0/1-to-algorithm mapping be managed on a per-deployment basis or by the IETF? -Ben From nobody Sun Nov 4 01:46:24 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0F944130E08 for ; Sun, 4 Nov 2018 01:46:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DqoIhSDUhMmq for ; Sun, 4 Nov 2018 01:46:13 -0700 (PDT) Received: from veto.sei.cmu.edu (veto.sei.cmu.edu [147.72.252.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B337C130E2A for ; Sun, 4 Nov 2018 01:46:13 -0700 (PDT) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by veto.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id wA48k7Pu008020 for ; Sun, 4 Nov 2018 03:46:07 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 veto.sei.cmu.edu wA48k7Pu008020 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1541321167; bh=UguAKdce5RPwBUbEz3TH8RerYDeNHrQq0KV37XFTCsE=; h=From:To:Subject:Date:From; b=DmwGYyqnfrZvvqR12hH5nVwdbIEeEqUpC3Pu3XWHxGTJAer/0fvrvCVpDmMdkIeBo k+vnWSiBMhIHiPh0Pyajo5q9vmIqMbHnX5tG6JbbNkwGOELOTFdu3F/o+VW2Y84328 NFcNz7GMDou8eHI+ySFwa9NhDVu9YqiMp+VldS8A= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id wA48k6Y7020137 for ; Sun, 4 Nov 2018 03:46:06 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASSINA.ad.sei.cmu.edu ([10.64.28.249]) with mapi id 14.03.0399.000; Sun, 4 Nov 2018 03:46:06 -0500 From: Roman Danyliw To: "ace@ietf.org" Thread-Topic: Summary of WGLC on draft-ietf-ace-{oauth-params, dtls-authorize, authz, oscore-profile} Thread-Index: AdR0GVyskdIPdSk5Tsas/wqaAFduiQ== Date: Sun, 4 Nov 2018 08:46:05 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0181A3A42C@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Ace] Summary of WGLC on draft-ietf-ace-{oauth-params, dtls-authorize, authz, oscore-profile} X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 04 Nov 2018 08:46:23 -0000 Hello!=0A= =0A= There was a variety of feedback and follow-on discussion from the WGLCs on = draft-ietf-ace-{oauth-params, dtls-authorize, authz, oscore-profile}. Belo= w is a summary of the issues raised denoted by the start of the threads tha= t provided the feedback.=0A= =0A= draft-ietf-ace-authz=0A= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=0A= -- 2018-10-10: Stefanie Gerdes | Responses: YES | Resolved: NO=0A= https://www.ietf.org/mail-archive/web/ace/current/msg02996.html=0A= =0A= -- 2018-10-22: Jim Schaad | Responses: YES | Resolved: NO=0A= https://www.ietf.org/mail-archive/web/ace/current/msg03008.html=0A= =0A= -- 2018-10-24: Ben Kaduk | Responses: YES | Resolved: NO=0A= https://www.ietf.org/mail-archive/web/ace/current/msg03020.html=0A= =0A= -- 2018-10-25: Mike Jones | Responses: YES | Resolved: NO=0A= https://www.ietf.org/mail-archive/web/ace/current/msg03030.html=0A= =0A= draft-ietf-ace-oauth-params=0A= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=0A= -- 2018-10-22: Jim Schaad | Responses: YES | Resolved: NO=0A= https://www.ietf.org/mail-archive/web/ace/current/msg03010.html=0A= =0A= -- 2018-10-23: Hannes Tschofenig | Responses: YES | Resolved: NO=0A= https://www.ietf.org/mail-archive/web/ace/current/msg03018.html=0A= =0A= -- 2018-10-24: Mike Jones | Responses: YES | Resolved: NO=0A= https://www.ietf.org/mail-archive/web/ace/current/msg03029.html=0A= =0A= draft-ietf-ace-oscore-profile=0A= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=0A= -- 2018-10-22: Jim Schaad | Responses: YES | Resolved: NO=0A= https://www.ietf.org/mail-archive/web/ace/current/msg03007.html=0A= =0A= draft-ietf-ace-dtls-authorize=0A= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=0A= -- 2018-10-22: Jim Schaad | Responses: NO | Resolved: NO=0A= https://www.ietf.org/mail-archive/web/ace/current/msg03011.html=0A= =0A= Please correct this summary as appropriate.=0A= =0A= Regards,=0A= Roman and Jim = From nobody Sun Nov 4 08:00:45 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B39AE130DCF for ; Sun, 4 Nov 2018 08:00:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.791 X-Spam-Level: X-Spam-Status: No, score=-3.791 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.47, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FROM_EXCESS_BASE64=0.979, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com header.b=QC/8BBc3; dkim=pass (1024-bit key) header.d=ericsson.com header.b=DwI4d+5m Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7end_l0SxFXo for ; Sun, 4 Nov 2018 08:00:41 -0800 (PST) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 80994127332 for ; Sun, 4 Nov 2018 08:00:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1541347239; x=1543939239; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:CC:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=1dF/bkvCz41n3Z9e7PEriThIWo2lqwm+lIpBx90ARSk=; b=QC/8BBc3pP+sDx4mM/ugvZ1yu2nfZvXnSbwKHGz6TFkDhSvUpMoDFxNCYw/q6Lc3 zYI8NWy9DRxUrS+Jos2XCYPDzIok2E7w2aUtZRUPPo2CD4SCFlJkZ+AvWe6mw4dd kmDIILBKil6SvrwvBzSM/GpPciBDOVZf1CttUu92oKE=; X-AuditID: c1b4fb2d-887c49e00000434d-8b-5bdf17a7d4f8 Received: from ESESSMB501.ericsson.se (Unknown_Domain [153.88.183.119]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id D9.3F.17229.7A71FDB5; Sun, 4 Nov 2018 17:00:39 +0100 (CET) Received: from ESESBMB505.ericsson.se (153.88.183.172) by ESESSMB501.ericsson.se (153.88.183.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Sun, 4 Nov 2018 17:00:37 +0100 Received: from EUR02-AM5-obe.outbound.protection.outlook.com (153.88.183.157) by ESESBMB505.ericsson.se (153.88.183.172) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3 via Frontend Transport; Sun, 4 Nov 2018 17:00:37 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=1dF/bkvCz41n3Z9e7PEriThIWo2lqwm+lIpBx90ARSk=; b=DwI4d+5m+3ksY3i/B2GNCSVk0YzQab28tcERoho4kImXz3f4XdioP1Yr6Xr1dSuT13UHRoakLFdUTUIrx3SVeiqOowM8mA0Rsk5MdvR0RYS4W0crKdYYPAnVamCzBJ7DesFrfqht5lP6y4QdXlTDDH+RHIvqbEw8lPLkJUl0DMg= Received: from VI1PR07MB4832.eurprd07.prod.outlook.com (20.178.8.146) by VI1PR07MB5039.eurprd07.prod.outlook.com (20.177.203.19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1294.15; Sun, 4 Nov 2018 16:00:36 +0000 Received: from VI1PR07MB4832.eurprd07.prod.outlook.com ([fe80::65ef:8cb3:711d:3580]) by VI1PR07MB4832.eurprd07.prod.outlook.com ([fe80::65ef:8cb3:711d:3580%3]) with mapi id 15.20.1294.021; Sun, 4 Nov 2018 16:00:35 +0000 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Benjamin Kaduk , Michael Richardson CC: "ace@ietf.org" , John Mattsson , =?utf-8?B?U2FsdmFkb3IgUMOpcmV6?= Thread-Topic: [Ace] EDHOC standardization Thread-Index: AQHUcqfzc6iiUOECiUamNJ4vyfghj6U9F/6AgAETDICAAhQIAA== Date: Sun, 4 Nov 2018 16:00:35 +0000 Message-ID: References: <379B1A31-1F7E-43A6-A518-4398570CBBC7@ericsson.com> <16572.1541199115@dooku.sandelman.ca> <20181103151621.GH54966@kduck.kaduk.org> In-Reply-To: <20181103151621.GH54966@kduck.kaduk.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.12.0.181014 x-originating-ip: [2001:67c:1232:144:49a8:1dea:d17d:7b2c] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR07MB5039; 6:mx9G6oIkJFQqfnR6GPrB/FnuvCmBKKaieasYw6uExv+9Hy5wHqe0YQlpZSdINS6wa2SJTFxiIYxlsluTV4BqLI6CaTKdVM4Af/UfQSJlj4gFx2HE4cUS9UqIvuLRtyF5Vf8jlremFU1XKMk/dS0nvNK1uPRMfb0/ppZ50PSXSK2A1+Xd0l5YLKbm5KSsLTywwIa9+3tizwWK/bC5XH6m/Q0WZyF79y1RNGKug6nLHUpXh8HX/APBn3i2FSqz+CEyy4s2yXV1VnNVbhVsWhM/57kKZTgpgZnkoyvzKAxAyuCAwTmVzYOgn6TNHbHM7Yx8ZrYwXRPQqj0RvzvT0X+zPwufxtlo9FsXByatqfY4QMnsf3TgEpPKIMHX6KognjfQchgCdauSCs3H+u82DztLcGtrn4B85JsbH+yhMgvr8Hi1kt1HvuBWRyQpH+88cuwOaYg6JeqZYqHVPYEyF0m7jA==; 5:EOlAaF9nNBF2Be2LCjUAeJzMorb+VOgjkmCI/g8FhAvGadsLzw4YPZ+RbxiJ/GwSZlnrDQOQSM8l1exD4pqCQj1mcxFytpCkX4ZOtSQp0PoA7/5DSZQDaY0/3LolHqMGAKSrOWiWUt3GAYI7+KWcdA0J0cg68W/A4C1zcQztnzQ=; 7:L4iPUoQfD+Sx23t6GrZv3Vt6kgbBpEJ2qd3xE2hwQMHrE0PuIb/IE3KSoT6F7D4XsWlhnBb2N+L5S20Aq7jXVL79h0otMtr3L4+Sk3CrCj4iQyv4j8nVOaGM0YnWvEoZE9Qn7QcgATYa0IsqXvSiFg== x-ms-exchange-antispam-srfa-diagnostics: SOS;SOR; x-forefront-antispam-report: SFV:SKI; SCL:-1; SFV:NSPM; SFS:(10009020)(376002)(346002)(136003)(39860400002)(366004)(396003)(199004)(189003)(71190400001)(8676002)(2616005)(102836004)(476003)(6436002)(6512007)(86362001)(25786009)(110136005)(54906003)(11346002)(33656002)(2171002)(478600001)(76176011)(85182001)(186003)(36756003)(53936002)(446003)(81156014)(81166006)(6116002)(97736004)(4326008)(58126008)(486006)(316002)(2906002)(6486002)(105586002)(7736002)(305945005)(256004)(5660300001)(8936002)(46003)(106356001)(14454004)(71200400001)(82746002)(6246003)(85202003)(68736007)(99286004)(561944003)(6506007)(83716004)(229853002)(2900100001); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR07MB5039; H:VI1PR07MB4832.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; x-ms-office365-filtering-correlation-id: a36ef8a5-40d2-4ef4-789c-08d6426ea869 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(5600074)(711020)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:VI1PR07MB5039; x-ms-traffictypediagnostic: VI1PR07MB5039: authentication-results: spf=none (sender IP is ) smtp.mailfrom=goran.selander@ericsson.com; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(240460790083961)(248295561703944)(37575265505322); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3231382)(944501410)(52105095)(3002001)(10201501046)(93006095)(93001095)(148016)(149066)(150057)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123560045)(20161123564045)(20161123558120)(201708071742011)(7699051)(76991095); SRVR:VI1PR07MB5039; BCL:0; PCL:0; RULEID:; SRVR:VI1PR07MB5039; x-forefront-prvs: 084674B2CF received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: SCJQheekm1AJyijGlVvuCSlhnqtWrCWumENrfQQIGmc252T2ohTTNn8vL3+jHNTkH4GIcfN6a4haf2rRhR22ViVloDmI2VHkkzHy0gwf9UsWRiQMkAqv+9Ee7xBn4EdOAA3l9Jx+Yzty62d7C7mu92HMpGe8po4lgtTMarPQ4REKd7ETLOvqEMYi61lQAQfw60BlDotVVgJZQja3oWI0W/GXZXiHKf2Wp9kCdWHYYOzM5ncbGK0IR/LxsSpyJgPwxaK0u8pAGCEmM//KEGKMuKEIHhsd7qo4pxA3S2tL0cDd32Z4Cqp+z8osShfu58O0LqqCdnqeKBEyV80GS1/N01mAQbdWD5i4dQnIrn76h2g= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <0097812D3F16734CA909582D6E289A01@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: a36ef8a5-40d2-4ef4-789c-08d6426ea869 X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Nov 2018 16:00:35.7993 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR07MB5039 X-OriginatorOrg: ericsson.com X-Brightmail-Tracker: H4sIAAAAAAAAA01Sa0hTYRjuO+fs7DhafC7NF0PQ0cWkOS9lGpKZSiO6gkQomCMPuryyY5bS j6FmppYrDdmKtNS0GYWWJbbIS+UtlG4mQulUUpMuGmrirZ2dBf173ud53+d93o+PIWV3Ra6M JiWd1aaok+S0hDKceHpWUeMyFO1jsmwNnJ8rIgNr6g1EYFFbsTgwx/RRvJdSVVUtEKrsN69I Ve5NM6nqncyjjlJRkuA4NkmTwWqVe2IlCb8uDNNpS47n6lqKaR1qcSxADgzgHfC5fYAqQBJG hl8iWK6sFgnFLIIPfd2kUFQS0LBqRHxBYT0JpXk37cpVAgxv/9gNLAhyuj+JeGcah8OwboTg sRM+DK39owTfROI8BJ2PyiheWI89ob6gUSw0bYPrE9P2gX3QZxy38RTeBM+bSqzrGEaKQ6C9 1ktYdg3B9MAyyfc44J3weq6D5jHCG2C++77Nh8QuMDhWTginYqgy95ECdobJ0RVbUGeshIqe MjsfBA36QUrAbvCuvNB2M+B+GrpKdXYjX+i494IUhGwaJsqHRXw6wIegf3azwHcg0H1dIATe C2737xLCxUD2Ax0t+CSC5coArUf+xv+yGq0TpPUtHjYrBVoFY71mQsAeUFpoEfNYih2hyzBG VSCRCTlzLMclx/v5e7NazSmOS03xTmHTG5D197Q+XlQ0obqp0DaEGSRfK1U4DkXLROoMLjO5 DQFDyp2kWy5/iZZJ49SZWaw29aT2TBLLtaGNDCV3kXqbzFEyHK9OZxNZNo3V/lMJxsFVh3bX 6Xo8wlIXv3c0G3JHfXQ+noULxxv7PLOqA1Yu4R5MWQI8umqrOPeRb7HHZuNj/BTl+nUTXGi+ xcNoGiZPPzsg3a9fUxPh+jvivXvzamSwxqy6kR82EyT2n1lSRx650znvUqM8+LN3ISd8e8gT r5LEW+SP827yCePUeGvzxSU5xSWofb1ILaf+Czzmj645AwAA Archived-At: Subject: Re: [Ace] EDHOC standardization X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 04 Nov 2018 16:00:44 -0000 SGkgQmVuLA0KDQrvu79PbiAyMDE4LTExLTAzLCAyMjoxNiwgIkFjZSBvbiBiZWhhbGYgb2YgQmVu amFtaW4gS2FkdWsiIDxhY2UtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2Yga2FkdWtAbWl0 LmVkdT4gd3JvdGU6DQoNCiAgICBPbiBTYXQsIE5vdiAwMywgMjAxOCBhdCAwNTo1MTo1NUFNICsw NzAwLCBNaWNoYWVsIFJpY2hhcmRzb24gd3JvdGU6DQogICAgPiANCiAgICA+IEpvaG4gTWF0dHNz b24gPGpvaG4ubWF0dHNzb25AZXJpY3Nzb24uY29tPiB3cm90ZToNCiAgICA+ICAgICA+IG9mIG5l Z290aWF0aW9uIGlzIHN0aWxsIG5lZWRlZC4gVGhlIGN1cnJlbnQgcGxhbiBmb3IgdGhlIG5leHQg dmVyc2lvbg0KICAgID4gICAgID4gaXMgdG8gaW50cm9kdWNlIGNpcGhlciBzdWl0ZXMgYW5kIHRv IGxldCB0aGUgY2lwaGVyIHN1aXRlIHdpdGggdmFsdWUgMA0KICAgID4gICAgID4gaW5kaWNhdGUg dGhhdCBhbGdvcml0aG1zIGhhdmUgYmVlbiBuZWdvdGlhdGVkIG91dC1vZi1iYW5kLg0KICAgID4g DQogICAgPiBJIGFncmVlIHdpdGggdGhlIGlkZWEgdGhhdCBzb21lIGNvbW1vbiBkZWZhdWx0IHNo b3VsZCBiZSB2ZXJ5IGVhc3kgdG8NCiAgICA+IHJlZmVyIHRvLCBidXQgSSBkb24ndCBsaWtlIHRo ZSBpZGVhIHRoYXQgdGhlIGdhdGV3YXkgaGFzIHRvIHJlbWVtYmVyIHdoYXQNCiAgICA+IHRoZSBv dXQtb2YtYmFuZCAiZGVmYXVsdCIgaXMgb24gYSBwZXItZGV2aWNlIGJhc2lzLiAgSSB3b3VsZCBz YXkgdGhhdCB3ZSBuZWVkDQogICAgPiBhdCBsZWFzdCAwLzEsIHNvIHRoYXQgd2UgY2FuIHNheSB0 aGF0IGl0J3MgdGhlIGN1cnJlbnQgdnMgdGhlICJuZXciIGRlZmF1bHQuDQogICAgPiANCiAgICA+ IElmIHlvdSBjb25zaWRlciB0aGUgY2FzZSB3aGVyZSB0aGUgc2Vuc29yIGlzIG9uIHZlcnkgbG93 IGJhbmR3aWR0aA0KICAgID4gY29ubmVjdGlvbiAoSSB3b3VsZCBzYXkgTG9SYVdBTiwgYnV0IEkg YW0gbm90IHdlbGwgcXVhbGlmaWVkIGluIHRoYXQgc3BhY2UpLg0KICAgID4gVGhlIHNlbnNvciBn ZXRzIHZpc2l0ZWQgZXZlcnkgdHdvIG9yIHRocmVlIHllYXJzIGJ5IGEgdGVjaG5pY2lhbiAoaWYg b25seSB0bw0KICAgID4gbWFrZSBzdXJlIHRoYXQgdGhlIHNlbnNvciBpcyBzdGlsbCB3aGVyZSBp dCBpcyBzdXBwb3NlZCB0byBiZSkuICBXaGlsZSB0aGVyZQ0KICAgID4gbmV3IGZpcm13YXJlIHVw ZGF0ZXMgYXJlIGFwcGxpZWQsIGFuZCBhcyBhIHJlc3VsdCB0aGUgYWxnb3JpdGhtIGRlZmF1bHRz IGFyZQ0KICAgID4gdXBkYXRlZC4gIER1cmluZyB0aGUgY3ljbGUsIHNvbWUgZGV2aWNlcyBhcmUg dXBkYXRlZCBhbmQgc29tZSBhcmUgc3RpbGwgb2xkLg0KICAgIA0KICAgIEFyZSB5b3UgcHJvcG9z aW5nIHRoYXQgdGhlIG1hbmFnZW1lbnQgb2YgdGhlIDAvMS10by1hbGdvcml0aG0gbWFwcGluZyBi ZQ0KICAgIG1hbmFnZWQgb24gYSBwZXItZGVwbG95bWVudCBiYXNpcyBvciBieSB0aGUgSUVURj8N CiAgICANCk1pY2hhZWwgbWF5IGdpdmUgaGlzIHZpZXcsIGJ1dCB0aGUgYXV0aG9ycycgcHJvcG9z YWwgaXMgdG8gaGF2ZSBhIElBTkEgcmVnaXN0ZXIgZW51bWVyYXRpbmcgY2lwaGVyc3VpdGVzLCBh bmQgd2hlcmUgdmFsdWUgMCBpcyByZXNlcnZlZCBmb3IgInByZS1lc3RhYmxpc2hlZCBjaXBoZXJz dWl0ZSIuIA0KDQpCUg0KR8O2cmFuDQoNCg0K From nobody Sun Nov 4 18:17:29 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A962129619 for ; Sun, 4 Nov 2018 18:17:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qDsfoe5W3WoP for ; Sun, 4 Nov 2018 18:17:26 -0800 (PST) Received: from relay.sandelman.ca (relay.cooperix.net [IPv6:2a01:7e00::f03c:91ff:feae:de77]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8A0B1127333 for ; Sun, 4 Nov 2018 18:17:26 -0800 (PST) Received: from dooku.sandelman.ca (unknown [IPv6:2001:67c:370:1998:a11:96ff:fe01:81e0]) by relay.sandelman.ca (Postfix) with ESMTPS id 253611F8BD; Mon, 5 Nov 2018 02:17:24 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id 85D82FE7; Mon, 5 Nov 2018 07:46:54 +0530 (IST) From: Michael Richardson To: Benjamin Kaduk cc: John Mattsson , "alvador.p.f\@um.es" , "ace\@ietf.org" In-reply-to: <20181103151621.GH54966@kduck.kaduk.org> References: <379B1A31-1F7E-43A6-A518-4398570CBBC7@ericsson.com> <16572.1541199115@dooku.sandelman.ca> <20181103151621.GH54966@kduck.kaduk.org> Comments: In-reply-to Benjamin Kaduk message dated "Sat, 03 Nov 2018 10:16:21 -0500." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Mon, 05 Nov 2018 09:16:54 +0700 Message-ID: <31833.1541384214@dooku.sandelman.ca> Archived-At: Subject: Re: [Ace] EDHOC standardization X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Nov 2018 02:17:28 -0000 --=-=-= Content-Type: text/plain Benjamin Kaduk wrote: >> John Mattsson wrote: > of negotiation is >> still needed. The current plan for the next version > is to introduce >> cipher suites and to let the cipher suite with value 0 > indicate that >> algorithms have been negotiated out-of-band. >> >> I agree with the idea that some common default should be very easy to >> refer to, but I don't like the idea that the gateway has to remember >> what the out-of-band "default" is on a per-device basis. I would say >> that we need at least 0/1, so that we can say that it's the current vs >> the "new" default. >> >> If you consider the case where the sensor is on very low bandwidth >> connection (I would say LoRaWAN, but I am not well qualified in that >> space). The sensor gets visited every two or three years by a >> technician (if only to make sure that the sensor is still where it is >> supposed to be). While there new firmware updates are applied, and as >> a result the algorithm defaults are updated. During the cycle, some >> devices are updated and some are still old. > Are you proposing that the management of the 0/1-to-algorithm mapping > be managed on a per-deployment basis or by the IETF? I think that the existing proposal was that 0 means "negotiated out-of-band", which implies that it's a per-deployment basis. I'm proposing that instead of having 0 mean "some local default", I'm suggesting that 0 mean, "some local default 0" and 1 mean, "some other local default 1", which lets the default be updated without a flag day. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAlvfqBUACgkQlUzhVv38 QpCERQf9HJS+zMn7WMUp4avcgWTWFqtcyYhbsyGho2L6bJciEBysJcwdIQzYpEwN btinzb6Hak6j0kGzL9ZAXJTw1Mo9mfrI0JUEm4r9E3ZLSaQ4eseY4V6s+DX0jiTj MaHoN1V2AHGMXRFJYNTqccxSok46x80iigt+kDY4GXzBI/ost8JsVrAzIB5GjYqM dBGl7eFo2N7Ur6S+Ih4d0MpKxVCGKB8YBrup5J0VWAj0OW0uBPaDs7f6GA8l6Ubi SbwNXacoqQGUGH2MJcz14JrUFDBug8RT36f8rnGMVNZn6AyCpDX/g8Ag5EhC/IcQ bFfSFJvNaTZY0xuyvbU4P2WwqCV03g== =3f6P -----END PGP SIGNATURE----- --=-=-=-- From nobody Mon Nov 5 01:38:29 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E57C130EB0 for ; Mon, 5 Nov 2018 01:38:20 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER SECTION, Non-encoded 8-bit data (char 9C hex): Received: ...s kaduk@ATHENA.MIT.EDU)\n\t\234by outgoing.mit[...] X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xa9ZEPCcTafT for ; Mon, 5 Nov 2018 01:38:18 -0800 (PST) Received: from dmz-mailsec-scanner-1.mit.edu (dmz-mailsec-scanner-1.mit.edu [18.9.25.12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6ED0130E37 for ; Mon, 5 Nov 2018 01:38:16 -0800 (PST) X-AuditID: 1209190c-06bff700000049b7-9d-5be00f86d9d1 Received: from mailhub-auth-1.mit.edu ( [18.9.21.35]) (using TLS with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-1.mit.edu (Symantec Messaging Gateway) with SMTP id 55.36.18871.78F00EB5; Mon, 5 Nov 2018 04:38:15 -0500 (EST) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-1.mit.edu (8.14.7/8.9.2) with ESMTP id wA59cDgZ023453; Mon, 5 Nov 2018 04:38:13 -0500 Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) œby outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id wA59c8Sb021454 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 5 Nov 2018 04:38:11 -0500 Date: Mon, 5 Nov 2018 03:38:07 -0600 From: Benjamin Kaduk To: Michael Richardson Cc: "alvador.p.f@um.es" , "ace@ietf.org" , John Mattsson Message-ID: <20181105093807.GY54966@kduck.kaduk.org> References: <379B1A31-1F7E-43A6-A518-4398570CBBC7@ericsson.com> <16572.1541199115@dooku.sandelman.ca> <20181103151621.GH54966@kduck.kaduk.org> <31833.1541384214@dooku.sandelman.ca> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <31833.1541384214@dooku.sandelman.ca> User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrHIsWRmVeSWpSXmKPExsUixCmqrNvO/yDa4O5DPovv33qYLdZ1X2G1 ODVzN5NFz6F+dgcWj19fr7J5LFnyk8mjZc4eZo9zL9tYAliiuGxSUnMyy1KL9O0SuDLmPVQr OMlfsbx/A2MD4wPuLkZODgkBE4kN31tYuxi5OIQE1jBJzH7TxQbhbGCUmHvqJpRzh0ni4MqX TCAtLAIqEm23VjCC2GxAdkP3ZWYQW0RAT2L5kWdgcWaBeolLfRvA6oUFNCQ2dm1lB7F5gdbN O9vGAjF0F6PE2oV32CASghInZz5hgWjWkrjxD2QZB5AtLbH8HweIySlgJDFvTzJIhaiAssTe vkPsExgFZiFpnoWkeRZC8wJG5lWMsim5Vbq5iZk5xanJusXJiXl5qUW6hnq5mSV6qSmlmxjB wSzJs4PxzBuvQ4wCHIxKPLwSQfejhVgTy4orcw8xSnIwKYnypl8CCvEl5adUZiQWZ8QXleak Fh9ilOBgVhLhVWJ7EC3Em5JYWZValA+TkuZgURLnndCyOFpIID2xJDU7NbUgtQgmK8PBoSTB KwSMWiHBotT01Iq0zJwShDQTByfIcB6g4TP5QIYXFyTmFmemQ+RPMSpKifPGgyQEQBIZpXlw vaBkI5G9v+YVozjQK8K82SBVPMBEBdf9CmgwE9Dgb3/ugwwuSURISTUwMvq43no1z3K9X9ls xSy5RPuAlVOr+K4tkxPTOldoW87Yf092ecC3G8EFt3XO9/m81F+wVFlqytYZTvISW9flP9Xg Noxe5er2d8nSqATbntTK9fYHtI+ksG3acO+DY941vVu3Xa85N+luZRTj/X9aX+3gp09vt8/I P2Gos/NzAeumP+s3P2E3UGIpzkg01GIuKk4EAHXOyv0RAwAA Archived-At: Subject: Re: [Ace] EDHOC standardization X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Nov 2018 09:38:27 -0000 On Mon, Nov 05, 2018 at 09:16:54AM +0700, Michael Richardson wrote: > > Benjamin Kaduk wrote: > >> John Mattsson wrote: > of negotiation is > >> still needed. The current plan for the next version > is to introduce > >> cipher suites and to let the cipher suite with value 0 > indicate that > >> algorithms have been negotiated out-of-band. > >> > >> I agree with the idea that some common default should be very easy to > >> refer to, but I don't like the idea that the gateway has to remember > >> what the out-of-band "default" is on a per-device basis. I would say > >> that we need at least 0/1, so that we can say that it's the current vs > >> the "new" default. > >> > >> If you consider the case where the sensor is on very low bandwidth > >> connection (I would say LoRaWAN, but I am not well qualified in that > >> space). The sensor gets visited every two or three years by a > >> technician (if only to make sure that the sensor is still where it is > >> supposed to be). While there new firmware updates are applied, and as > >> a result the algorithm defaults are updated. During the cycle, some > >> devices are updated and some are still old. > > > Are you proposing that the management of the 0/1-to-algorithm mapping > > be managed on a per-deployment basis or by the IETF? > > I think that the existing proposal was that 0 means "negotiated out-of-band", > which implies that it's a per-deployment basis. > > I'm proposing that instead of having 0 mean "some local default", > I'm suggesting that 0 mean, "some local default 0" and 1 mean, "some other > local default 1", which lets the default be updated without a flag day. That feels like a potentially awkward provisioning problem. I guess the idea is that any given node is only going to do 1 or 0 and not both? Maybe that helps. Thanks, Ben From nobody Mon Nov 5 07:59:03 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EF846130DE7 for ; Mon, 5 Nov 2018 07:59:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zHay7RErw3Zm for ; Mon, 5 Nov 2018 07:58:58 -0800 (PST) Received: from smtp.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 924C0130DE5 for ; Mon, 5 Nov 2018 07:58:57 -0800 (PST) Received: from wangari.tzi.org (p508A4EFC.dip0.t-ipconnect.de [80.138.78.252]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.uni-bremen.de (Postfix) with ESMTPSA id 8386B286C1; Mon, 5 Nov 2018 16:58:55 +0100 (CET) From: Olaf Bergmann To: Jim Schaad Cc: References: <029e01d46a3e$72bad330$58307990$@augustcellars.com> Date: Mon, 05 Nov 2018 16:58:55 +0100 Message-ID: <87a7mnv7ls.fsf@tzi.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.1 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Archived-At: Subject: Re: [Ace] FW: WGLC comments on draft-ietf-ace-dtls-authorize X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Nov 2018 15:59:01 -0000 Jim, Thank you for this very useful review. Please find our comments inline: Jim Schaad writes: > Section 3 - Am I just missing where you talk about introspection or is it > missing from the text? The role of token introspection for authorization is discussed in draft-ietf-ace-oauth-authz which is referenced here as the governing mechanism. The DTLS profile is completely agnostic in this regard as you may or may not use token introspection on access tokens retrieved via the DTLS profile. > Section 3.2 - looks like you missed a "cnf" in the first paragraph - shou= ld > be req_cnf Fixed. > Section 3.3 - Figure 4 - Where is the 'alg' parameter defined at that lev= el? See next comment. > Section 3.3 - I am always bothered by the fact that PSK should really be = PSS > at this point. The secret value is no longer a key and thus does not > necessarily have a length. There is also a problem of trying to decide w= hat > the length of this value would be based on the algorithm. If the client > offers TLS_PSK_WITH_AES_128_CCM_8 and TLS_PSK_WITH_AES_256_CCM_8 (I may > have gotten these wrong but the intent should be understandable) then what > length is the PSK supposed to be? I think what you are saying is that for the shared secret (k) in the COSE_Key structure in Fig. 4, the AS needs to tell C what to do with that shared secret? This was the intention of the alg parameter (which has a not-so-useful value in this example). > Section 3.3 - Figure 5 - Is this defining a new set of entries for cnf or= is > there a missing layer someplace? This is indeed a new set of entries. An internal discussion between the draft authors led to the opinion that we cannot use a COSE_Key structure in the cnf structure as this would have different semantics as intended here. We came to the conclusion that for key derivation, listing the required fields directly in the cnf structure is the cleanest solution. > Section 3.3 - Should some type of key identifier also be defined so that = the > entire token is not always sent on every DTLS setup? Also so that the key > can be referenced on a second request to the AS. How about adding the following to the paragraph on the cnf in the access information at the end of the second paragraph in Section 3.3: OLD: "AS adds a cnf parameter to the access information carrying a COSE_Key object that informs the client about the symmetric key that is to be used between C and the resource server." NEW: "AS adds a cnf parameter to the access information carrying a COSE_Key object that informs the client about the symmetric key that is to be used between C and the resource server. To enable dynamic updates of the access token, the AS SHOULD add a kid field with a random identifier for the symmetric key that is conveyed by the cnf object." > Section 3.4 - Is it worth while to make it explicit when the DTLS session= is > required to be shutdown and that a simple authorization error is not one = of > them? Looks like it should be - these errors SHOULD NOT cause the DTLS > connection to be closed. How about this: "Unauthorized requests that have been received over a DTLS session should be treated as non-fatal by the RS, i.e., the DTLS session should be kept alive until the associated access token has expired." > Section 4 - The requirement that the "kid" be in a previously issued token > would have problems with this if you were to use the "kid" of an RPK which > can be constant rather than being changed on each newly created token. To solve this we could require that the COSE_Key structure for RS's RPK in the AS-to-Client response must also have a kid. Section 4 does not prevent the kid to be constant. > Section 4 - The term "must associate" is slightly ambiguous - does this m= ean > add to (augment) or replace the previous token. How about: OLD: "A resource server MUST associate the updated authorization information with any existing DTLS session that is identified by this key identifier. NEW: "A resource server MUST replace the authorization information of any existing DTLS session that is identified by this key identifier with the updated authorization information." (Effectively allowing only one access token per session at a time.) > Section 4 - Should a secondary access token have a later expiration date > that the one that contains the actual key value? I suppose yes but this should be solved in general by the framework. > Section 5 - this seems to be a very strange place to define the new > parameter. True. How about moving this parameter to Section 4? > Section 8 - you need to put your kid in the IANA considerations as well Fixed. > Section 9.1 - Having tilicoa-tls-dos-handshake as a normative reference m= ay > cause problems unless this is on a publication track. You are right. After speaking to the main author, we came to the conclusion that we should remove this reference entirely as draft-tilocoa-tls-dos-handshake will not be pursued any more. > Section 9.3 - Can we get these URLs converted over to normal references?= =20=20 This section somehow is generated from the XML by the submission tool (in the gh-pages version [1] you have clickable links in-place which is very convenient for editing). Once the framework document's structure is stable, we will convert them back to normal references. [1] https://ace-wg.github.io/ace-dtls-profile/ Gr=C3=BC=C3=9Fe Olaf From nobody Mon Nov 5 09:07:08 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 742B3130DC2 for ; Mon, 5 Nov 2018 09:07:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.971 X-Spam-Level: X-Spam-Status: No, score=-14.971 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.47, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cisco.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KyZiIk3KB7G8 for ; Mon, 5 Nov 2018 09:07:03 -0800 (PST) Received: from alln-iport-8.cisco.com (alln-iport-8.cisco.com [173.37.142.95]) (using TLSv1.2 with cipher DHE-RSA-SEED-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CF90F127133 for ; Mon, 5 Nov 2018 09:07:02 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=9148; q=dns/txt; s=iport; t=1541437622; x=1542647222; h=from:to:subject:date:message-id:references:in-reply-to: content-transfer-encoding:mime-version; bh=v9OSjbhd9nV23lmTlWjdQ0IB94wYlLViey1Nqk20yUA=; b=m4yMhNz64wQ4cg3nLOEYjlGxipRRNcCGvjuIT7LgBj+VPUG9+dBj+D0C JpHX/qJhBu3uAfxqqBlDbPLbpv86ITw3xVHT6+wPL3Fg/pNJVg2cNmIsj LH5DR0gwEJzxJOY0+CFyhEd/lRmSACUk4Igfuhjmn9YiBMxYysoOSH2QV I=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0AMAADrd+Bb/4UNJK1lDgsBAQEBAQE?= =?us-ascii?q?BAQEBAQEHAQEBAQEBgVEEAQEBAQELAYIEZn8oCoNsiBiMF4INg0CTbRSBZgs?= =?us-ascii?q?BARgNhEcCF4M6IjQNDQEDAQECAQECbRwMhToBAQEBAgEBASEROhAHBAIBCBE?= =?us-ascii?q?EAQEBAgIRFQICAiULFQgIAgQBEgiDGoF5CA+pL4EuhC0BAwIChWaBC4prF4F?= =?us-ascii?q?BP4ERghR+gnckAQECAYEZEgESATYogkWCVwKIdxKWKQkChmyKGyCCIY4/jQi?= =?us-ascii?q?KFwIRFIEmHThkcXAVO4JsCYIbAQIXiF0XhG06bwELi1iBH4EfAQE?= X-IronPort-AV: E=Sophos;i="5.54,468,1534809600"; d="scan'208";a="196056650" Received: from alln-core-11.cisco.com ([173.36.13.133]) by alln-iport-8.cisco.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 05 Nov 2018 17:07:01 +0000 Received: from XCH-RCD-015.cisco.com (xch-rcd-015.cisco.com [173.37.102.25]) by alln-core-11.cisco.com (8.15.2/8.15.2) with ESMTPS id wA5H71Rp003366 (version=TLSv1.2 cipher=AES256-SHA bits=256 verify=FAIL); Mon, 5 Nov 2018 17:07:01 GMT Received: from xch-rcd-012.cisco.com (173.37.102.22) by XCH-RCD-015.cisco.com (173.37.102.25) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 5 Nov 2018 11:07:01 -0600 Received: from xch-rcd-012.cisco.com ([173.37.102.22]) by XCH-RCD-012.cisco.com ([173.37.102.22]) with mapi id 15.00.1395.000; Mon, 5 Nov 2018 11:07:00 -0600 From: "Owen Friel (ofriel)" To: John Mattsson , "salvador.p.f@um.es" , "kaduk@mit.edu" , "ace@ietf.org" Thread-Topic: [Ace] EDHOC standardization Thread-Index: AQHUcrwmU639Sl10oU+b3ygBlbENOKVBZ3Sw Date: Mon, 5 Nov 2018 17:07:00 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [10.61.220.232] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Outbound-SMTP-Client: 173.37.102.25, xch-rcd-015.cisco.com X-Outbound-Node: alln-core-11.cisco.com Archived-At: Subject: Re: [Ace] EDHOC standardization X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Nov 2018 17:07:07 -0000 SGkgSm9obiwgU2FsdmFkb3IsDQpBcyBFREhPQyBpcyB1c2VkIHB1cmVseSBmb3Iga2V5IGRlcml2 YXRpb24gd2l0aCBrZXkgZXhwb3J0aW5nIHRvIHRoZSBhcHBsaWNhdGlvbiBmb3IgY2lwaGVydGV4 dCBleGNoYW5nZSwgZG9lcyB0aGUgbG93ZXIgYnl0ZSBjb3VudCBvdmVyaGVhZCBvZiB0aGUgRURI T0MgaGFuZHNoYWtlIHZzIERUTFMxLjMgcmVhbGx5IG1hdHRlciB0aGF0IG11Y2g/ICBPZiBjb3Vy c2UgdGhhdCBkZXBlbmRzIG9uIHRoZSBhbW91bnQgb2YgYXBwbGljYXRpb24gY2lwaGVydGV4dCwg YnV0IGlmIHRoZXJlIGlzIGEgc3VmZmljaWVudCBudW1iZXIgb2YgY2lwaGVydGV4dCBieXRlcyB0 byBiZSBleGNoYW5nZWQgaW4gb25lIHNlc3Npb24sIHRoZW4gRFRMUyArIGtleSBleHBvcnRpbmcg bWF5IG1ha2UgbW9yZSBzZW5zZSB0aGFuIEVESE9DICsga2V5IGV4cG9ydGluZy4NCk93ZW4NCg0K LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEFjZSA8YWNlLWJvdW5jZXNAaWV0Zi5v cmc+IE9uIEJlaGFsZiBPZiBKb2huIE1hdHRzc29uDQpTZW50OiBGcmlkYXkgMiBOb3ZlbWJlciAy MDE4IDE0OjU2DQpUbzogc2FsdmFkb3IucC5mQHVtLmVzOyBrYWR1a0BtaXQuZWR1OyBhY2VAaWV0 Zi5vcmcNClN1YmplY3Q6IFJlOiBbQWNlXSBFREhPQyBzdGFuZGFyZGl6YXRpb24NCg0KSGkgQmVu amFtaW4sIFNhbHZhZG9yDQoNCldoaWxlIERUTFMgMS4zIGhhdmUgZG9uZSBhIHZlcnkgZ29vZCBq b2Igb2YgbG93ZXJpbmcgdGhlIG92ZXJoZWFkIG9mIHRoZSByZWNvcmQgbGF5ZXIgd2hlbiBhcHBs aWNhdGlvbiBkYXRhIGlzIHNlbnQgKHNlZSBlLmcuIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9kcmFmdC1pZXRmLWx3aWctc2VjdXJpdHktcHJvdG9jb2wtY29tcGFyaXNvbi0wMSBmb3IgYSBj b21wYXJpc29uIGJldHdlZW4gZGlmZmVyZW50IHByb3RvY29scyksIEkgZG8gbm90IHRoaW5rIHRo ZSBoYW5kc2hha2UgcHJvdG9jb2wgaXMgbXVjaCBsZWFuZXIgKGlzIGl0IGxlYW5lciBhdCBhbGw/ KS4NCg0KV2UgdHJpZWQgdG8gbWFrZSBhbiBmYWlyIGNvbXBhcmlzb24gYmV0d2VlbiBFREhPQyBh bmQgVExTIDEuMyBpbiB0aGUgcHJlc2VudGF0aW9uIGF0IElFVEYgMTAxIChzZWUgaHR0cHM6Ly9k YXRhdHJhY2tlci5pZXRmLm9yZy9tZWV0aW5nLzEwMS9tYXRlcmlhbHMvc2xpZGVzLTEwMS1hY2Ut a2V5LWV4Y2hhbmdlLXctb3Njb3JlLTAwKS4gU2luY2UgdGhlbiwgd2UgaGF2ZSBzaWduaWZpY2Fu dGx5IG9wdGltaXplZCB0aGUgZW5jb2RpbmcgaW4gRURIT0MgYW5kIHRoZSB1cGNvbWluZyB2ZXJz aW9uICgtMTEpIGlzIGV4cGVjdGVkIHRvIGhhdmUgdGhlIGZvbGxvd2luZyBtZXNzYWdlIHNpemVz Lg0KDQogICBBdXRoLiAgICAgICAgICAgICAgIFBTSyAgICAgICBSUEsgICAgICAgeDV0ICAgICB4 NWNoYWluDQogICAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KICAgRURIT0MgbWVzc2FnZV8xICAgICAgNDMgICAgICAg IDM4ICAgICAgICAzOCAgICAgICAgMzgNCiAgIEVESE9DIG1lc3NhZ2VfMiAgICAgIDQ3ICAgICAg IDEyMSAgICAgICAxMjcgICAgICAgMTE3ICsgQ2VydGlmaWNhdGUgY2hhaW4NCiAgIEVESE9DIG1l c3NhZ2VfMyAgICAgIDEyICAgICAgICA4NiAgICAgICAgOTIgICAgICAgIDgyICsgQ2VydGlmaWNh dGUgY2hhaW4NCiAgIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQogICBUb3RhbCAgICAgICAgICAgICAgIDEwMiAgICAg ICAyNDUgICAgICAgMjU3ICAgICAgIDIzNyArIENlcnRpZmljYXRlIGNoYWlucw0KDQpBcyBTYWx2 YWRvciB3cml0ZXMsIHRoZSBoYW5kc2hha2VzIGluIFRMUyAxLjMgYW5kIERUTFMgMS4zIGFyZSBi YXNpY2FsbHkgdGhlIHNhbWUsIHNvIHRoZSBudW1iZXJzIHByZXNlbnRlZCBhdCBJRVRGIDEwMSBz aG91bGQgYmUgYSBnb29kIGVzdGltYXRlIGFsc28gZm9yIERUTFMgMS4zLg0KDQogICBBdXRoLiAg ICAgICAgICAgICAgICBQU0sgICAgICAgUlBLDQogICAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KICAgKEQpVExTIG1l c3NhZ2VfMSAgICAgMTQyICAgICAgIDEwNw0KICAgKEQpVExTIG1lc3NhZ2VfMiAgICAgMTM1ICAg ICAgIDI2NA0KICAgKEQpVExTIG1lc3NhZ2VfMyAgICAgIDUxICAgICAgIDE2Nw0KICAgLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0NCiAgIFRvdGFsICAgICAgICAgICAgICAgIDMyOCAgICAgICA1MzgNCg0KVGhlIG51bWJl cnMgYWJvdmUgaW5jbHVkZSBFQ0RIRS4gRm9yIGhhbmRzaGFrZSBtZXNzYWdlcywgbXkgdW5kZXJz dGFuZGluZyBpcyB0aGF0IHRoZSBEVExTIDEuMyBhbmQgVExTIDEuMyByZWNvcmQgbGF5ZXIgaGF2 ZSBleGFjdGx5IHRoZSBzYW1lIHNpemUuDQoNCkNoZWVycywNCkpvaG4NCg0KPiBTYWx2YWRvciBQ w6lyZXogd3JvdGU6DQoNCkhpIEJlbmphbWluLA0KDQoJb3VyIHJlc3VsdHMgYXJlIGluY2x1ZGVk IGluIGEgcGFwZXIsIHdoaWNoIGlzIHVuZGVyIHJldmlldyBmb3IgaXRzIHB1YmxpY2F0aW9uLg0K DQpSZWdhcmRpbmcgdGhlIGNvbXBhcmlzb24gYmV0d2VlbiBFREhPQyBhbmQgRFRMUywgd2UgaGF2 ZSBlbXBsb3llZCB0aGUgdGlueWR0bHMgbGlicmFyeSBbMV0gc2luY2UgaXQgaXMgd2lkZWx5IHVz ZWQgdG8gZGVwbG95IERUTFMgaW4gZGlmZmVyZW50IElvVCBzY2VuYXJpb3MuIE5vdGUgdGhhdCwg YXQgdGhlIG1vbWVudCBpbiB3aGljaCB0aGUgcGFwZXIgd2FzIHdyaXR0ZW4sIHN1Y2ggbGlicmFy eSBkaWQgbm90IG9mZmVyIHN1cHBvcnQgZm9yIHZlcnNpb24gMS4zLiBBbnl3YXksIERUTFMgMS4z IGlzIGVzc2VudGlhbGx5IHVzaW5nIHRoZSBzYW1lIGhhbmRzaGFrZSBhcyBUTFMgMS4zICgiRFRM UyAxLjMgcmUtdXNlcyB0aGUgVExTIDEuMyBoYW5kc2hha2UgbWVzc2FnZXMgYW5kIGZsb3dz4oCd IFsyXSkuIE1vcmVvdmVyLCBhdXRob3JzIG9mIEVESE9DIHN0YXRlIHRoYXQgdGhlIG1lc3NhZ2Ug b3ZlcmhlYWQgb2YgVExTIDEuMyBpcyBtdWNoIGhpZ2hlciB0aGFuIEVESE9DICgiQ29tcGFyZWQg dG8gdGhlIFRMUyAxLjMgaGFuZHNoYWtlIHdpdGggRUNESCwgdGhlIG51bWJlciBvZiBieXRlcyBp biBFREhPQyBpcyBsZXNzIHRoYW4gMS8zIHdoZW4gUFNLIGF1dGhlbnRpY2F0aW9uIGlzIHVzZWQg YW5kIGxlc3MgdGhhbiAxLzIgd2hlbiBSUEsgYXV0aGVudGljYXRpb24gaXMgdXNlZCwgc2VlIEFw cGVuZGl4IEXigJ0gWzMtNF0pLiBBY2NvcmRpbmdseSwgd2UgY2FuIGNsYWltIHRoYXQgaXQgaXMg ZXhwZWN0ZWQgdGhhdCBEVExTIDEuMyBwZXJmb3JtcyB3b3JzZSB0aGFuIEVESE9DIChhdCBsZWFz dCwgcmVnYXJkaW5nIG1lc3NhZ2Ugb3ZlcmhlYWQpIGZvciB0aGUgdHlwZSBvZiBjb25zdHJhaW5l ZCBpbXBsZW1lbnRhdGlvbnMgd2UgYXJlIGxvb2tpbmcgYXQuDQoNClsxXSBodHRwczovL3Byb2pl Y3RzLmVjbGlwc2Uub3JnL3Byb2plY3RzL2lvdC50aW55ZHRscyA8aHR0cHM6Ly9wcm9qZWN0cy5l Y2xpcHNlLm9yZy9wcm9qZWN0cy9pb3QudGlueWR0bHM+DQpbMl0gaHR0cHM6Ly90b29scy5pZXRm Lm9yZy9odG1sL2RyYWZ0LWlldGYtdGxzLWR0bHMxMy0yOSNzZWN0aW9uLTUgPGh0dHBzOi8vdG9v bHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLXRscy1kdGxzMTMtMjkjc2VjdGlvbi01Pg0KWzNd IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1zZWxhbmRlci1hY2UtY29zZS1lY2Ro ZS0xMCNzZWN0aW9uLTEgPGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1zZWxhbmRl ci1hY2UtY29zZS1lY2RoZS0xMCNzZWN0aW9uLTE+DQpbNF0gaHR0cHM6Ly90b29scy5pZXRmLm9y Zy9odG1sL2RyYWZ0LXNlbGFuZGVyLWFjZS1jb3NlLWVjZGhlLTEwI2FwcGVuZGl4LUUuNCA8aHR0 cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LXNlbGFuZGVyLWFjZS1jb3NlLWVjZGhlLTEw I2FwcGVuZGl4LUUuND4NCg0KS2luZCByZWdhcmRzLA0KDQotLS0tLS0tLS0tLS0tLS0tLS0tLQ0K U2FsdmFkb3IgUMOpcmV6DQpQaEQgc3R1ZGVudCBpbiAiRnV0dXJlIEludGVybmV0IE5ldHdvcmtz OiBJbmZyYXN0cnVjdHVyZSBhbmQgU2VjdXJpdHnigJ0NCkZhY3VsdHkgb2YgQ29tcHV0ZXIgU2Np ZW5jZSAtIFVuaXZlcnNpdHkgb2YgTXVyY2lhDQpFbWFpbDogc2FsdmFkb3IucC5mQHVtLmVzDQpT a3lwZTogc2FsdmEucGYNCg0KPiBPbiAzMSBPY3QgMjAxOCwgYXQgMTY6NDMsIEJlbmphbWluIEth ZHVrIDxrYWR1a0BtaXQuZWR1Pjsgd3JvdGU6DQo+IA0KPiBIaSBTYWx2YWRvciwNCj4gDQo+IE9u IFdlZCwgT2N0IDMxLCAyMDE4IGF0IDEwOjEyOjU0QU0gKzAxMDAsIFNhbHZhZG9yIFDDqXJleiB3 cm90ZToNCj4+IEhlbGxvIGF1dGhvcnMgb2YgRURIT0MsDQo+PiANCj4+IAl3ZSBoYXZlIGltcGxl bWVudGVkIGEgcHJldmlvdXMgdmVyc2lvbiBvZiBFREhPQyAoZHJhZnQtc2VsYW5kZXItYWNlLWNv c2UtZWNkaGUpIGFuZCB3YW50IHRvIHNoYXJlIHNvbWUgZXhwZXJpZW5jZXMuDQo+PiANCj4+IE91 ciB3b3JrIHNvIGZhciBoYXMgZm9jdXNlZCBvbiBpbXBsZW1lbnRhdGlvbiBhbmQgZXZhbHVhdGlv biBvZiB2ZXJzaW9uIC0wOCBvZiBFREhPQyBvdmVyIENvQVAgdXNpbmcgcmVhbCBJb1QgaGFyZHdh cmUuIFRoZSBvYnRhaW5lZCByZXN1bHRzIHNob3cgYSBzaWduaWZpY2FudCBwZXJmb3JtYW5jZSBp bXByb3ZlbWVudCBjb21wYXJlZCB0byBvdGhlciBrZXkgZXN0YWJsaXNobWVudCBwcm90b2NvbHMs IHN1Y2ggYXMgRFRMUyBoYW5kc2hha2UgKHZlcnNpb24gMS4yKSwgZXNwZWNpYWxseSB3aXRoIHJl c3BlY3QgdG8gbGVuZ3RoIGFuZCBudW1iZXIgb2YgZXhjaGFuZ2VkIG1lc3NhZ2VzLg0KPiANCj4g QXJlIHlvdXIgcmVzdWx0cyB3cml0dGVuIHVwIGFueXdoZXJlPyAgSXQgd291bGQgYmUgZ3JlYXQg dG8gc2VlIG1vcmUgDQo+IGRldGFpbHMgb2YgdGhlIGNvbXBhcmlzb24gYW5kIHRoZSBhY3R1YWwg bnVtYmVycy4NCj4gVW5mb3J0dW5hdGVseSwgSSBkb24ndCB0aGluayB0aGF0IERUTFMgMS4yIGlz IHRoZSBiZXN0IGNvbXBhcmlzb24gLS0gDQo+IERUTFMNCj4gMS4zIHNob3VsZCBiZSBzZWVuIGFz IHRoZSBjdXJyZW50ICJzdGF0ZSBvZiB0aGUgYXJ0IiBmb3IgRFRMUywgYW5kIGlzIA0KPiBleHBl Y3RlZCB0byBpdHNlbGYgYmUgbGVhbmVyIHRoYW4gRFRMUyAxLjIsIHdoaWNoIG1pZ2h0IHdhc2gg b3V0IHNvbWUgDQo+IG9mIHRoZSByZXN1bHRzIHlvdSd2ZSBzZWVuIGhlcmUuDQo+IA0KPiBUaGFu a3MsDQo+IA0KPiBCZW4NCj4gDQo+PiBXZSBoYXZlIHJldmlld2VkIHZlcnNpb24gLTEwIGFuZCBu b3RlZCB0aGUgcmVkdWN0aW9uIG9mIG1lc3NhZ2UgbGVuZ3RoLiBCYXNlZCBvbiBvdXIgZXhwZXJp ZW5jZSwgd2UgcHJvcG9zZSB0aGF0IGFsc28gcmVtb3ZpbmcgdGhlIG92ZXJoZWFkIGR1ZSB0byBz ZWN1cml0eSBwYXJhbWV0ZXIgbmVnb3RpYXRpb24gY291bGQgYmUgYW4gaW1wb3J0YW50IG9wdGlt aXphdGlvbiwgYW5kIHJlbGV2YW50IGluIG1hbnkgdXNlIGNhc2VzIHdoZXJlIHRoZXNlIHBhcmFt ZXRlcnMgYXJlIGF2YWlsYWJsZSB0aHJvdWdoIGFuIG91dC1vZi1iYW5kIHByb2Nlc3MuDQo+PiAN Cj4+IEFjY29yZGluZ2x5IGFuZCB0YWtpbmcgaW50byBhY2NvdW50IHRoYXQgRURIT0MgcHJvdmlk ZXMgYSBiYXNpYyBzZWN1cml0eSBmdW5jdGlvbmFsaXR5IGZvciBhbnkgY29udGV4dCB3aGVyZSBz ZWN1cml0eSBuZWVkcyB0byBiZSBlbmFibGVkLCB3ZSBhcmUgY3VycmVudGx5IGNvbnNpZGVyaW5n IHRoZSBhcHBsaWNhdGlvbiBvZiB0aGlzIHByb3RvY29sIGluIGRpZmZlcmVudCBJb1QgZGVwbG95 bWVudHMsIHN1Y2ggYXMgTG9SYVdBTiBuZXR3b3JrcywgT1NDT1JFLWVuYWJsZWQgc2NlbmFyaW9z IG9yIGl0cyBpbnRlZ3JhdGlvbiB3aXRoIGNhcGFiaWxpdGllcy4gV2UgdGhlcmVmb3JlIHdvdWxk IGxpa2UgdG8gc2VlIHRoZSBwcm9ncmVzcyBvZiBFREhPQyBpbiBzdGFuZGFyZGl6YXRpb24uDQo+ PiANCj4+IEtpbmQgcmVnYXJkcywNCj4+IA0KPj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4+IFNh bHZhZG9yIFDDqXJleg0KPj4gUGhEIHN0dWRlbnQgaW4gIkZ1dHVyZSBJbnRlcm5ldCBOZXR3b3Jr czogSW5mcmFzdHJ1Y3R1cmUgYW5kIFNlY3VyaXR54oCdDQo+PiBGYWN1bHR5IG9mIENvbXB1dGVy IFNjaWVuY2UgLSBVbml2ZXJzaXR5IG9mIE11cmNpYQ0KPj4gRW1haWw6IHNhbHZhZG9yLnAuZkB1 bS5lcw0KPj4gU2t5cGU6IHNhbHZhLnBmDQo+PiANCj4gDQo+PiBfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPj4gQWNlIG1haWxpbmcgbGlzdA0KPj4gQWNl QGlldGYub3JnDQo+PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2FjZQ0K Pg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KQWNl IG1haWxpbmcgbGlzdA0KQWNlQGlldGYub3JnDQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL2FjZQ0K From nobody Mon Nov 5 19:42:17 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6342212D4EA for ; Mon, 5 Nov 2018 19:42:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xlb6fgYJPGHz for ; Mon, 5 Nov 2018 19:42:13 -0800 (PST) Received: from relay.sandelman.ca (relay.cooperix.net [IPv6:2a01:7e00::f03c:91ff:feae:de77]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 74139127333 for ; Mon, 5 Nov 2018 19:42:13 -0800 (PST) Received: from dooku.sandelman.ca (unknown [IPv6:2001:67c:370:1998:a11:96ff:fe01:81e0]) by relay.sandelman.ca (Postfix) with ESMTPS id 133051F8BC for ; Tue, 6 Nov 2018 03:42:12 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id DFF1EC17; Tue, 6 Nov 2018 09:11:43 +0530 (IST) From: Michael Richardson To: "ace\@ietf.org" In-reply-to: <20181105093807.GY54966@kduck.kaduk.org> References: <379B1A31-1F7E-43A6-A518-4398570CBBC7@ericsson.com> <16572.1541199115@dooku.sandelman.ca> <20181103151621.GH54966@kduck.kaduk.org> <31833.1541384214@dooku.sandelman.ca> <20181105093807.GY54966@kduck.kaduk.org> Comments: In-reply-to Benjamin Kaduk message dated "Mon, 05 Nov 2018 03:38:07 -0600." X-Mailer: MH-E 8.6; nmh 1.6; GNU Emacs 24.5.1 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Date: Tue, 06 Nov 2018 10:41:43 +0700 Message-ID: <25002.1541475703@dooku.sandelman.ca> Archived-At: Subject: Re: [Ace] EDHOC standardization X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Nov 2018 03:42:15 -0000 --=-=-= Content-Type: text/plain Benjamin Kaduk wrote: >> > Are you proposing that the management of the 0/1-to-algorithm mapping >> > be managed on a per-deployment basis or by the IETF? >> >> I think that the existing proposal was that 0 means "negotiated out-of-band", >> which implies that it's a per-deployment basis. >> >> I'm proposing that instead of having 0 mean "some local default", >> I'm suggesting that 0 mean, "some local default 0" and 1 mean, "some other >> local default 1", which lets the default be updated without a flag day. > That feels like a potentially awkward provisioning problem. I guess the > idea is that any given node is only going to do 1 or 0 and not both? Maybe > that helps. I don't think you get it if you think it's awkward! Any firmware implements 0 or 1, correct. [I'm not a fan of such a system. I also don't think it is small enough for LoRAWAN either] When a new choice is hard coded into that closed vertical system (via "out-of-band"), this choice would be baked in at the next firmware update. (There are many ways to do this of course. Throw dip switches if you like) Having both 0 and 1 lets the firmware be incrementally updated, otherwise the operator either has a flag day, or has to keep track of the parameters on an per-device basis. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEERK+9HEcJHTJ9UqTMlUzhVv38QpAFAlvhDXcACgkQlUzhVv38 QpAWHQf/Yoe9/zm6eThFl8eARHqyv/g7Q7k+BvnHufH9mF6lnkdXI14JUvmTHvFX K1/9zLK4Fj39wZiW/ndtORnuuk/Ysh75mBL8EbRZgfz2n2eYYpFmmFutQoJU7NhY 4iN02o5fk/T5q9urIXtqTRzlwuM88vxiFu0CeUG+okIzKb81vPgVGAwg+lZm3wuT 3/FtTqUIXs8nE/hT9Rrt2r/7LTa1Lqr9w34hsNP7gzac5hg4Saiyz+uI09UoCnF3 6iUlV1sKSW9wRY6GMWqO5BZQjhRoXCzJDQM2Zd5lrmXOgqJeEfGv/rduOKcIxVIK FxKUquB9Q15Qz+i6oUMqNOoHrU76yA== =JJrA -----END PGP SIGNATURE----- --=-=-=-- From nobody Tue Nov 6 00:37:29 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 4BECF12D4F1; Tue, 6 Nov 2018 00:37:28 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: internet-drafts@ietf.org To: Cc: ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.87.3 Auto-Submitted: auto-generated Precedence: bulk Reply-To: ace@ietf.org Message-ID: <154149344825.30893.14504174308713730162@ietfa.amsl.com> Date: Tue, 06 Nov 2018 00:37:28 -0800 Archived-At: Subject: [Ace] I-D Action: draft-ietf-ace-cwt-proof-of-possession-04.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Nov 2018 08:37:28 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF. Title : Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs) Authors : Michael B. Jones Ludwig Seitz Göran Selander Samuel Erdtman Hannes Tschofenig Filename : draft-ietf-ace-cwt-proof-of-possession-04.txt Pages : 15 Date : 2018-11-06 Abstract: This specification describes how to declare in a CBOR Web Token (CWT) that the presenter of the CWT possesses a particular proof-of- possession key. Being able to prove possession of a key is also sometimes described as being the holder-of-key. This specification provides equivalent functionality to "Proof-of-Possession Key Semantics for JSON Web Tokens (JWTs)" (RFC 7800), but using CBOR and CWTs rather than JSON and JWTs. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-cwt-proof-of-possession/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possession-04 https://datatracker.ietf.org/doc/html/draft-ietf-ace-cwt-proof-of-possession-04 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-cwt-proof-of-possession-04 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Nov 6 00:42:56 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 95A9D130EDC for ; Tue, 6 Nov 2018 00:42:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.469 X-Spam-Level: X-Spam-Status: No, score=-2.469 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.47, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vmsVQHIhmL6w for ; Tue, 6 Nov 2018 00:42:45 -0800 (PST) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-bl2nam06on0093.outbound.protection.outlook.com [104.47.53.93]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 81673128A6E for ; Tue, 6 Nov 2018 00:42:44 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=oPk602TQIevxRYTxupld2tvRYmKu4GZbuoF7GWqMC1A=; b=fCQVwKEe6YuHMsn5z5jo7Ehe4bIJkvYfQRLbcaQPJk2IyJBnPBff+bSU5OfihK9BS/tg8RZpfCxNPIx4zsmIRQ+vrtuiSG/bmFx9cjiElHbJ0M/WZfcC7SmjuyaIEpl0snu6wskaoookxbhaXRpbfTN0nBTBR+YEvx3oIbVdu4U= Received: from MW2PR00MB0300.namprd00.prod.outlook.com (52.132.148.31) by MW2PR00MB0379.namprd00.prod.outlook.com (52.132.148.155) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1353.0; Tue, 6 Nov 2018 08:42:41 +0000 Received: from MW2PR00MB0300.namprd00.prod.outlook.com ([fe80::f146:e1c1:1158:d0fb]) by MW2PR00MB0300.namprd00.prod.outlook.com ([fe80::f146:e1c1:1158:d0fb%6]) with mapi id 15.20.1354.000; Tue, 6 Nov 2018 08:42:41 +0000 From: Mike Jones To: Roman Danyliw , "ace@ietf.org" CC: Jim Schaad Thread-Topic: Summarizing WGLC discussion of draft-ietf-ace-cwt-proof-of-possession Thread-Index: AdQaB+pCJ/tP7Ud0T+GY5Fn6FrAcuBbeY8wQ Date: Tue, 6 Nov 2018 08:42:40 +0000 Message-ID: References: <359EC4B99E040048A7131E0F4E113AFC014C3FEDA1@marathon> In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC014C3FEDA1@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [31.133.129.171] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; MW2PR00MB0379; 6:8PaPBIMlXnDpdBY7XIR0m3S9mzwkkvZdcuC4QYlbbuqaCJ6mVOy4WGWIWrpxUSSMM5C33Pdg1Q//bGs2UmJ6ky8uEcrj7io/6eUtuhrntsACWMTYv3fj1S0hDATp6aXWuBivu32/d5sSckJBmieBK7rNfJMlKBEWKp9qcTbLTigCpuwdJ2vYUukaJfPAAQpe2jqg9NJHS63Rw8VETDxamPABiFgDeuit28G6lj+HVgRbwkcaqfWn4hx72ZbR5abnLYEVloESzsJBFmmUOukYYXD642iQcefbT147tIikLidJfif9Cw1UCDOq4zvQBWekm1M9EG3MgDbLM+xQIQZHzjHuraUBsq1dFpHT5HEzI/eUlGRHoFNixTTHrUMoxFUEvYpOJgsgzh96OEpKxmMEv2YjqKQvD8cdgiS9UMcekNgxDBo6/J+M6dq17cIVjBDbSHH93ksSyJuNslabK3Tjgw==; 5:7nmo1ozCl97H0bPm7NjhCuDbQTmLN5wv1gT9sQqp2RkswvbSzJ5LORj+BXdxWFf+mnj7EVxa1phchU/Xb/K13SJetWluPndTUUoQ1Wp5lJqymJ/0nZz0dsmen+ZBVN5jA7ANSHZNaOjpzwYuy/NZbiYAAxIQG+IPnlAPE4nAX5Y=; 7:OESmJX3vPvvuV8n5XB4NF2/dXnefR+yHk3bzFN5MSXYbwYGgb+IzTFd304Qjk/d5hmXB3eEU9rgnhRCl10KEabQGEn+oOqU0j44s0EBX7YV+ug3ULUCpl0GNR/GHc/OtPe9UGXqUsr+2YiDoWHQjGg== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 50c15692-a132-478b-a1f0-08d643c3d059 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7193020); SRVR:MW2PR00MB0379; x-ms-traffictypediagnostic: MW2PR00MB0379: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(2017102700009)(2017102701064)(6040522)(8220035)(2401047)(8121501046)(5005006)(2017102702064)(20171027021009)(20171027022009)(20171027023009)(20171027024009)(20171027025009)(20171027026009)(2017102703076)(3002001)(93006095)(93001095)(3231382)(944501410)(52105102)(2018427008)(10201501046)(6055026)(148016)(149066)(150057)(6041310)(20161123558120)(20161123564045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(201708071742011)(7699051)(76991095); SRVR:MW2PR00MB0379; BCL:0; PCL:0; RULEID:; SRVR:MW2PR00MB0379; x-forefront-prvs: 0848C1A6AA x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(346002)(39860400002)(366004)(136003)(396003)(51914003)(51444003)(13464003)(199004)(189003)(476003)(26005)(86362001)(6506007)(186003)(76176011)(7696005)(102836004)(446003)(110136005)(486006)(21615005)(68736007)(316002)(229853002)(11346002)(81166006)(71190400001)(8676002)(5660300001)(22452003)(105586002)(256004)(86612001)(14444005)(99286004)(106356001)(7736002)(53546011)(81156014)(71200400001)(74316002)(8936002)(2501003)(2900100001)(10090500001)(4326008)(25786009)(10290500003)(97736004)(55016002)(6306002)(478600001)(6246003)(54896002)(236005)(9686003)(3846002)(790700001)(6116002)(66066001)(33656002)(606006)(72206003)(2906002)(53936002)(14454004)(8990500004)(966005)(6436002); DIR:OUT; SFP:1102; SCL:1; SRVR:MW2PR00MB0379; H:MW2PR00MB0300.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: 6x+hOZQRyoSH74s86/JQDnHSx/Gn0wH46WhNGZIfq720M3Mdv7g+qJpNJlSnNPN5dhWB57CTEj1bJrp6nF77+u5qrJYi7YroC1wKDLoZyyCAIis8wP6w00ovFh/gYVIUeDXMhAyoJ+fqIPMPOXOJl9cUZ9Eu1UN6cm9sgXbDkBnake5W8U0PpXDecnhHshW+fgsQ6qphr16VP0/Db7Gh70Q8UEXVhuPmqO+1SJlkRHG2QSjQHMO3HaWw4lmV0irpeEE3/9zAczabBfVedpIfcSNVPxIf1yPPfCoj/aJZF5FaOmj0Li3gLze4Skpqk9c5Qfw4Jo2xvVwe1U3VuSMLVF8yCE8Obk2MF5ItTOMzyZE= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_MW2PR00MB030043BAB5054032AE710B0DF5CB0MW2PR00MB0300namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 50c15692-a132-478b-a1f0-08d643c3d059 X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Nov 2018 08:42:41.0421 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: MW2PR00MB0379 Archived-At: Subject: Re: [Ace] Summarizing WGLC discussion of draft-ietf-ace-cwt-proof-of-possession X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Nov 2018 08:42:55 -0000 --_000_MW2PR00MB030043BAB5054032AE710B0DF5CB0MW2PR00MB0300namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Thanks for the useful summary, Roman. Replies are inline below prefixed by= "Mike>". I've just published draft -04, which contains the small number of ch= anges described below. I believe that this completes resolution of the WGL= C feedback. -----Original Message----- From: Ace On Behalf Of Roman Danyliw Sent: Friday, July 13, 2018 12:56 AM To: ace@ietf.org Subject: [Ace] Summarizing WGLC discussion of draft-ietf-ace-cwt-proof-of-p= ossession Hello! This email is intended to summarize the outcome of the WGLC on draft-ietf-a= ce-cwt-proof-of-possession-02 to date. This call was started on May 8 [1] = and discussion occurred around two reviews of this -02 draft: ** Jim Schaad [Schaad], per https://www.ietf.org/mail-archive/web/ace/curre= nt/msg02747.html ** Roman Danyliw [Danyliw], per https://www.ietf.org/mail-archive/web/ace/c= urrent/msg02793.html After discussion on the mailing list, -03 of the draft was produced. Synthesizing the robust mailing list discussion, I see the following previo= usly identified issues as still needing closure. The nature of the resolut= ion varies. Given the volume of the discussion threads, I may have missed = a response or failed to line up a text change in -03 to an issue. Please c= orrect the status of any given point of feedback below. =3D=3D[ -03 contains changes, but ML discussion doesn't indicate closure ]= =3D=3D The following feedback was made about the -02 draft; changes to the = relevant text was made in -03; but follow-up discussions on the mailing lis= t doesn't indicate closure of the issue. If the originator of the feedback= (it looks like only Jim for this section) feels the issue is closed, pleas= e speak up. [Schaad #6] Under what circumstances would a 'sub' claim be present and it= is not the presenter? I can see that a holder of the key may be implicitl= y (or anonymously) named, but putting something in the subject field which= is not identifying the presenter is something that I would reject without = a good presentation of why in the document. Mike> The draft is written as it is to both provide non-normative guidance = for expected simple use cases, while also allowing flexibility for more com= plicated use cases. In particular, in some profiles, the subject of the CW= T and the presenter of the CWT for proof-of-possession purposes may be diff= erent parties. The party presenting the CWT to the recipient would be in p= ossession of the CWT because it communicated with the issuer but the subjec= t can be different than the presenter. That's why the subject language is = written as a suggestion to profile writers, rather than normatively. I'll = note that this also aligned with the treatment in RFC 7800, which this draf= t mirrors, by design. [Schaad #7] I would disagree with the claim that if the 'sub' claim is mis= sing then it would normally be the issuer. For the world of IoT, I would e= xpect that the subject would not be present because there is no need to ide= ntify the subject to the recipient. I.e. it is an anonymous subject. Mike> As with the previous issue, this section of the draft provides non-no= rmative guidance for expected simple use cases, while not precluding profil= ing specifications from using the standard CWT claims in the manner that ma= kes sense for their application. The "iss" language here also intentionall= y parallels the RFC 7800 treatment of this claim. [Schaad #8] It is not clear to me that either of the sub and iss claims wo= uld normally be present. They might be present but neither is needed. The= subject can be anonymous and the issuer is identified by the key used to v= alidate the security on the CWT. Mike> Your points above align with the design in the draft. That's why bot= h "iss" and "sub" are optional. Their usage is profile-dependent, as it is= in RFC 7800 (and CWT and JWT). [Schaad #9] In section 3.1 the first two sentences appear to be contradict= ory. Members are used to identify the POP key. Other things than a POP ke= y can be used than a POP key. If they are used to identify the POP key- wh= y would they not deal with the POP key? I think that you should do a separ= ation and define the 'cnf' file which can hold any number of confirmation m= ethods and then have a section on defining some POP cnf method field holder= s. Mike> The apparently contradictory language in draft -02 was reworded in dr= aft -03 to address this comment. In particular, it now explicitly states t= hat the "cnf" claim is used to carry confirmation methods, some of which id= entify proof-of-possession keys. This aligns both with RFC 7800 and the SA= ML 2.0 SubjectConfirmation element design (both by intentionally, since the= re's no need to reinvent the wheel when an existing design already works we= ll). [Schaad #10] In section 3.1 P1 - I am not sure why you have something here= about confirming the authenticity of the token as oppose to confirming the= identity of the presenter. Why would that type of information be placed h= ere where it is not useful.] Mike> The referenced text was reworked between draft -02 and -03. =3D=3D[ change was proposed, but not made ]=3D=3D The draft editors propose= d a changes on the mailing list to address the issue but it did not appear = in the -03 draft. See the inline text of https://www.ietf.org/mail-archive/web/ace/current/ms= g02788.html for the proposed changes for [Schaad #12, 13, 16, 21]. [Schaad #12] I am unclear why there should be a restriction on the number o= f POP keys that can be in a 'cnf' object. If there are multiple keys, then= any or all of them are of equal value in doing the confirmation. Just lik= e there can be multiple confirmation methods and an application could choos= e to use any one of them. Mike> This was discussed in the working group meeting at IETF 102 in Montre= al and on the list. The consensus appeared to be to stay with the existing= design, which describes how to represent multiple PoP keys in the fourth p= aragraph of https://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possess= ion-03#section-3.1 (which again, is the same mechanism defined in RFC 7800)= . [Schaad #13] Not sure which section this belongs in, but the use of an COS= E_Encrypt0 would be one way to combat tracking of identities based on the k= ey value being used. Different encrypted values could be sent to different= servers and they would not necessarily know about use w/o internal collusi= on between them. Similar effect by using an encrypted CWT. Potentially re= quires use of TLS1.3 to protect the RPKs. YMMV Mike> The Privacy Considerations section talks about a common PoP key being= a potential correlation handle and thus recommends that different PoP keys= be used for different parties. Encrypting a common key could prevent obse= rvers unable to decrypt the messages from learning that they key is shared = but would not prevent correlation by parties that cooperate to compare thei= r PoP keys. So it's not clear to me that the suggestion above solves enoug= h of the correlation problem that it's worth including in the draft. If yo= u disagree, please suggest text for an additional Privacy Considerations pa= ragraph. [Schaad #16] Section 4 - Are audience restrictions not done in CWT? -- sam= e issues as [Danyliw #12] Mike> All claims in CWTs (and JWTs) are optional, including the "aud" (audi= ence) claim. Particular profiles can suggest and require particular claims= , as this profile does. I have deleted the unnecessary middle sentence, wh= ich [Danyliw #12] correctly pointed out broke up the logical flow of the ex= position. Thanks for pointing this out. [Schaad #21] Section 6.2.2 - the value type is not an array for COSE_Encryp= t or COSE_Encyrpt0, these are the values. As written I could put in an arr= ay which is not one of those two structures and be valid. Ditto for COSE_= Key, although w/ slightly less justification. Mike> Thanks. I updated these value type declarations to use the actual re= quired COSE_* types. See the inline text of https://www.ietf.org/mail-archive/web/ace/current/ms= g02802.html for the proposed change for [Danyliw #7]. [Danyliw #7] Page 6, Section 3.3, The sentence "The COSE_Key could, for ins= tance, be encrypted using a COSE_Encrypt0 representation using the AES-CCM-= 16-64-128 algorithm" seems out of place. What is this text explaining rela= tive to the examples? Mike> Thanks. I deleted the confusing and unnecessary sentence. =3D=3D[ face to face discussion required ]=3D=3D Certain issues were deemed= sufficiently complex to required face-to-face discussion at IETF 102. [Schaad #14] I have real problems w/ the use of a KID for POP identificati= on. It may identify the wrong key or, if used for granting access, may hav= e problems w/ identity collisions. These need to be spelt out someplace to= help people tracking down questions of why can't I verify w/ this CWT, I k= now it's right. -- See https://www.ietf.org/mail-archive/web/ace/current/ms= g02853.html for more detailed discussion -- related issue to [Danyliw #8]. Mike> The paragraph sentence of the Operational Considerations section at h= ttps://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possession-03#sectio= n-6 was added in draft -03 to address exactly this issue, after extensive d= iscussion and wordsmithing on the mailing list. Regards, Roman [1] https://www.ietf.org/mail-archive/web/ace/current/msg02744.html _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace Thanks again, -- Mike --_000_MW2PR00MB030043BAB5054032AE710B0DF5CB0MW2PR00MB0300namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Thanks for the usef= ul summary, Roman.  Replies are inline below prefixed by “Mike&g= t;”.  I’ve just published draft -04, which contains the small number of changes described = below.  I believe that this completes resolution of the WGLC feedback.=

 

-----Original Message-----
From: Ace <ace-bounces@ietf.org> On Behalf Of Roman Danyliw
Sent: Friday, July 13, 2018 12:56 AM
To: ace@ietf.org
Subject: [Ace] Summarizing WGLC discussion of draft-ietf-ace-cwt-proof-of-p= ossession

 

Hello!

 

This email is intended to summarize the outcome o= f the WGLC on draft-ietf-ace-cwt-proof-of-possession-02 to date.  This= call was started on May 8 [1] and discussion occurred around two reviews o= f this -02 draft:

 

** Jim Schaad [Schaad], per https://www.ietf.org/mail-archive/web/= ace/current/msg02747.html

** Roman Danyliw [Danyliw], per https://www.ietf.org/mail-archive/web/= ace/current/msg02793.html

 

After discussion on the mailing list, -03 of the = draft was produced. 

 

Synthesizing the robust mailing list discussion, = I see the following previously identified issues as still needing closure.&= nbsp; The nature of the resolution varies.  Given the volume of the di= scussion threads, I may have missed a response or failed to line up a text change in -03 to an issue.  Please correc= t the status of any given point of feedback below.

 

=3D=3D[ -03 contains changes, but ML discussion d= oesn't indicate closure ]=3D=3D The following feedback was made about the -= 02 draft; changes to the relevant text was made in -03; but follow-up discu= ssions on the mailing list doesn't indicate closure of the issue.  If the originator of the feedback (it looks li= ke only Jim for this section) feels the issue is closed, please speak up.

 

[Schaad #6]  Under what circumstances would = a 'sub' claim be present and it is not the presenter?  I can see that = a holder of the key may be implicitly (or anonymously)  named, but put= ting something in the subject field which is not identifying the presenter is something that I would reject without a good = presentation of why in the  document.

 

Mike> The draft = is written as it is to both provide non-normative guidance for expected sim= ple use cases, while also allowing flexibility for more complicated use cas= es.  In particular, in some profiles, the subject of the CWT and the presenter of the CWT for proof-of-possession pu= rposes may be different parties.  The party presenting the CWT to the = recipient would be in possession of the CWT because it communicated with th= e issuer but the subject can be different than the presenter.  That’s why the subject language is written= as a suggestion to profile writers, rather than normatively.  I’= ;ll note that this also aligned with the treatment in RFC 7800, which this = draft mirrors, by design.

 

[Schaad #7]  I would disagree with the claim= that if the 'sub' claim is missing then it would normally be the issuer.&n= bsp; For the world of IoT, I would expect that the subject would not be pre= sent because there is no need to identify the subject to the recipient.  I.e. it is an anonymous subject.

 

Mike> As with th= e previous issue, this section of the draft provides non-normative guidance= for expected simple use cases, while not precluding profiling specificatio= ns from using the standard CWT claims in the manner that makes sense for their application.  The “iss= 221; language here also intentionally parallels the RFC 7800 treatment of t= his claim.

 

[Schaad #8]  It is not clear to me that eith= er of the sub and iss claims would normally be present.  They might be= present but neither is needed.  The subject can be anonymous and the = issuer is identified by the key used to validate the security on the CWT.

 

Mike> Your point= s above align with the design in the draft.  That’s why both = 220;iss” and “sub” are optional.  Their usage is pro= file-dependent, as it is in RFC 7800 (and CWT and JWT).

 

[Schaad #9]  In section 3.1 the first two se= ntences appear to be contradictory.  Members are used to identify the = POP key.  Other things than a POP key can be used than a POP key. = ; If they are used to identify the POP key- why would they not deal with the POP key?  I think that you should do a separat= ion and define the 'cnf' file which can hold any number of confirmation met= hods and then have a section on defining some POP cnf method field holders.=

 

Mike> The appare= ntly contradictory language in draft -02 was reworded in draft -03 to addre= ss this comment.  In particular, it now explicitly states that the = 220;cnf” claim is used to carry confirmation methods, some of which identify proof-of-possession keys.  This aligns both wi= th RFC 7800 and the SAML 2.0 SubjectConfirmation element design (both by in= tentionally, since there’s no need to reinvent the wheel when an exis= ting design already works well).

 

[Schaad #10]  In section 3.1 P1 - I am not s= ure why you have something here about confirming the authenticity of the to= ken as oppose to confirming the identity of the presenter.  Why would = that type of information be placed here where it is not useful.]

 

Mike> The refere= nced text was reworked between draft -02 and -03.

 

=3D=3D[ change was proposed, but not made ]=3D=3D= The draft editors proposed a changes on the mailing list to address the is= sue but it did not appear in the -03 draft. 

 

See the inline text of https://www.ietf.org/mail-archive/web/= ace/current/msg02788.html for the proposed changes for [Schaad #= 12, 13, 16, 21].

 

[Schaad #12] I am unclear why there should be a r= estriction on the number of POP keys that can be in a 'cnf' object.  I= f there are multiple keys, then any or all of them are of equal value in do= ing the confirmation.  Just like there can be multiple confirmation methods and an application could choose to us= e any one of them.

 

Mike> This was d= iscussed in the working group meeting at IETF 102 in Montreal and on the li= st.  The consensus appeared to be to stay with the existing design, wh= ich describes how to represent multiple PoP keys in the fourth paragraph of https://tools.ie= tf.org/html/draft-ietf-ace-cwt-proof-of-possession-03#section-3.1 (which again, is the same mechanism defined in RFC 7800).

 

[Schaad #13]  Not sure which section this be= longs in, but the use of an COSE_Encrypt0 would be one way to combat tracki= ng of identities based on the key value being used.  Different encrypt= ed values could be sent to different servers and they would not necessarily know about use w/o internal collusion betwe= en them.  Similar effect by using an encrypted CWT.  Potentially = requires use of TLS1.3 to protect the RPKs.  YMMV

 

Mike> The Privac= y Considerations section talks about a common PoP key being a potential cor= relation handle and thus recommends that different PoP keys be used for dif= ferent parties.  Encrypting a common key could prevent observers unable to decrypt the messages from learning that = they key is shared but would not prevent correlation by parties that cooper= ate to compare their PoP keys.  So it’s not clear to me that the= suggestion above solves enough of the correlation problem that it’s worth including in the draft.  If you disagre= e, please suggest text for an additional Privacy Considerations paragraph.<= o:p>

 

[Schaad #16] Section 4 - Are audience restriction= s not done in CWT?  -- same issues as [Danyliw #12]

 

Mike> All claims= in CWTs (and JWTs) are optional, including the “aud” (audience= ) claim.  Particular profiles can suggest and require particular claim= s, as this profile does.  I have deleted the unnecessary middle sentence, which [Danyliw #12] correctly pointed out broke up the lo= gical flow of the exposition.  Thanks for pointing this out.

 

[Schaad #21] Section 6.2.2 - the value type is no= t an array for COSE_Encrypt or COSE_Encyrpt0, these are the values.  A= s written I could put in an array which is not one of those two structures = and be valid.   Ditto for COSE_Key, although w/ slightly less justification.

 

Mike> Thanks.&nb= sp; I updated these value type declarations to use the actual required COSE= _* types.

 

See the inline text of https://www.ietf.org/mail-archive/web/= ace/current/msg02802.html  for the proposed change for [Dan= yliw #7].

 

[Danyliw #7] Page 6, Section 3.3, The sentence &q= uot;The COSE_Key could, for instance, be encrypted using a COSE_Encrypt0 re= presentation using the AES-CCM-16-64-128 algorithm" seems out of place= .  What is this text explaining relative to the examples?

 

Mike> Thanks.&nb= sp; I deleted the confusing and unnecessary sentence.

 

=3D=3D[ face to face discussion required ]=3D=3D = Certain issues were deemed sufficiently complex to required face-to-face di= scussion at IETF 102.

 

[Schaad #14]  I have real problems w/ the us= e of a KID for POP identification.  It may identify the wrong key or, = if used for granting access, may have problems w/ identity collisions. = ; These need to be spelt out someplace to help people tracking down questions of why can't I verify w/ this CWT, I know it's rig= ht. -- See https://www.ietf.org/mail-archive/web= /ace/current/msg02853.html for more detailed discussion -- relat= ed issue to [Danyliw #8].

 

Mike> The paragr= aph sentence of the Operational Considerations section at https://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possession-03#secti= on-6 was added in draft -03 to address exactly this issue, after extens= ive discussion and wordsmithing on the mailing list.

 

Regards,

Roman

 

[1] https://www.ietf.org/mail-archive/web/= ace/current/msg02744.html

 

 

_______________________________________________

Ace mailing list

Ace@ietf.org

https://www.ietf.org/mailman/list= info/ace

 

   &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp; Thanks again,

   &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp; -- Mike

 

--_000_MW2PR00MB030043BAB5054032AE710B0DF5CB0MW2PR00MB0300namp_-- From nobody Tue Nov 6 01:57:11 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 21E65130DFF for ; Tue, 6 Nov 2018 01:57:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.469 X-Spam-Level: X-Spam-Status: No, score=-2.469 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.47, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DRHiGp4Ky3P8 for ; Tue, 6 Nov 2018 01:57:06 -0800 (PST) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-bl2nam06on0705.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe55::705]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1416B1277C8 for ; Tue, 6 Nov 2018 01:57:05 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=YG9g1b95wqpboCJuFLLMrr3qqbZC2QCh6JPI80vHleU=; b=SGA8jIT3wJdyv8bYUQYoNoR3XVPP9sb2PR+Gx2Rrg2IrzRAevMmOGVad24b9yxTeCNQB0nUiYoUCC32ZWazUlnWcN8WrChoOmRoz97NIVcJsVV6H0iN1K9PieXC3cV9LqJNVTQrg3rU0pnRxL93sWGswzuNuwNqP7EdUdE5V4zc= Received: from DM5PR00MB0296.namprd00.prod.outlook.com (52.132.128.37) by DM5PR00MB0424.namprd00.prod.outlook.com (52.132.129.36) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1353.0; Tue, 6 Nov 2018 09:57:01 +0000 Received: from DM5PR00MB0296.namprd00.prod.outlook.com ([fe80::fc3c:9d35:6339:17ae]) by DM5PR00MB0296.namprd00.prod.outlook.com ([fe80::fc3c:9d35:6339:17ae%8]) with mapi id 15.20.1354.000; Tue, 6 Nov 2018 09:57:01 +0000 From: Mike Jones To: Roman Danyliw , "ace@ietf.org" CC: Jim Schaad Thread-Topic: Summarizing WGLC discussion of draft-ietf-ace-cwt-proof-of-possession Thread-Index: AdQaB+pCJ/tP7Ud0T+GY5Fn6FrAcuBbeY8wQAA01yoA= Date: Tue, 6 Nov 2018 09:57:01 +0000 Message-ID: References: <359EC4B99E040048A7131E0F4E113AFC014C3FEDA1@marathon> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [31.133.189.203] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; DM5PR00MB0424; 6:gYIdn1hDwMAaNlFyVMrx1uNkaVzpWWdijykB0/sjLAEim4z8Myt14LUb/cjhAZCotgmL6jacCRrMvGZfqId9VQPIncSO5pWK5LSPnJeJKQxJk+S4VdyNW0Z+8sJbBkvrbEb5kqoaMpnd5/dJHmI4qTs5UCk9ghREjdwuUwSEmoFDbpygX8VWI8GS8iRO83A0I0E2SdvyyDICeeAlnWOB2qZ1NWFWvkldSeUPFrOhBT2tTwM1qu1pGmYjTSVdRGdABpwt3dJeXxY/0iD68bS9fncPHjiCeBGtpZZRLT2wOFVNVup7hJlzJtbQc6RNn850GcqyQ7knK8VLZM7nqFkjKEKUkrg6KK98EAsncMNBenREMCgD0kQH4cSXgtlQ7BJYaXoCIIp1oove8aZUFrf4v0L4/70GDCdfZgVg5Zowe0zBLp5gdDjtQUnLg2xrGQnLGj2MaEmOey+Ye+Ay9V09vg==; 5:zkPu54slwvpWGTuI6Yq2eMA9T9wJ0oogbOniged+dKCkQJkgZiTpqjDHhTHRiDaoUnRjRLUc9XnU+GNfuUuUubHXTbth6sGzQpGbXjgpCck4v0bLkZfLRepc6IUxx+na0kdHcaymPCXaMoY9k0ptRiHAszAtUtgptId72fvBzI8=; 7:tcO9OX/LgUosNqywFJt7Tw0Gb164C2pM8WNUy75L3UMpBGPajF+tiyDDKE3WJttzE4U+ISvrEEH9/GDwEHiTwD+Hxbs9/BBTYtWV7GMJvAzSsee9RASoNrTlZTtDcca545iEF8Y3qiN4gxPKfQCCRw== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 096bc96f-ce8f-47b4-8e90-08d643ce32b1 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7193020); SRVR:DM5PR00MB0424; x-ms-traffictypediagnostic: DM5PR00MB0424: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(2017102700009)(2017102701064)(6040522)(8220035)(2401047)(8121501046)(5005006)(2017102702064)(20171027021009)(20171027022009)(20171027023009)(20171027024009)(20171027025009)(20171027026009)(2017102703076)(3231382)(944501410)(4982022)(52105102)(2018427008)(10201501046)(3002001)(93006095)(93001095)(6055026)(148016)(149066)(150057)(6041310)(20161123560045)(20161123564045)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(201708071742011)(7699051)(76991095); SRVR:DM5PR00MB0424; BCL:0; PCL:0; RULEID:; SRVR:DM5PR00MB0424; x-forefront-prvs: 0848C1A6AA x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(979002)(376002)(346002)(39860400002)(396003)(366004)(136003)(209900001)(51444003)(69234005)(189003)(199004)(51914003)(13464003)(2906002)(68736007)(11346002)(110136005)(3846002)(8990500004)(6116002)(790700001)(76176011)(10290500003)(606006)(446003)(72206003)(25786009)(186003)(478600001)(966005)(7736002)(74316002)(26005)(8936002)(81156014)(8676002)(476003)(86612001)(14454004)(81166006)(86362001)(5660300001)(316002)(486006)(22452003)(33656002)(2900100001)(66066001)(7696005)(256004)(21615005)(2501003)(97736004)(102836004)(10090500001)(14444005)(53546011)(6506007)(6246003)(53936002)(53376002)(229853002)(6436002)(6306002)(54896002)(9686003)(55016002)(236005)(71200400001)(71190400001)(106356001)(105586002)(99286004)(4326008)(6606295002)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1102; SCL:1; SRVR:DM5PR00MB0424; H:DM5PR00MB0296.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: +UpacPTztSepbZFKgXGFznVTwfMxKNkhHDVcvQytLCelsNgotaP0Uz59AQ7lQsRUu2suCUCj7soglouJzifbDgR3eLAxUtpOdVrF8ulmGugnEVYvwCd7Fh1QiFHW3gAyo0tB4dueEEGuh5iGx8pEFbrBZe9C9UaI1GxxILOU+MhVDUbxqSteMiGuQ5kSb9v7sR9gkkoF7rWL2NotuDTVXVd70PE4q73EJR+w1FPRBQGn0NEm+bTrrsJYzIyknKfUojGFVFEDiSBwS4yhQmeclbhJY/NnnJGn4eVYg27wKjqV0teOh57Kk+35PmfpEx6B/Own3HlxXzfXSg0YYuTrRqgmfJ2lg4dDWrrmURRB6gI= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_DM5PR00MB0296B8640133B9F9FBDFC641F5CB0DM5PR00MB0296namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 096bc96f-ce8f-47b4-8e90-08d643ce32b1 X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Nov 2018 09:57:01.0793 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR00MB0424 Archived-At: Subject: Re: [Ace] Summarizing WGLC discussion of draft-ietf-ace-cwt-proof-of-possession X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Nov 2018 09:57:10 -0000 --_000_DM5PR00MB0296B8640133B9F9FBDFC641F5CB0DM5PR00MB0296namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable FYI - I wrote about this new version at http://self-issued.info/?p=3D1933 a= nd as @selfissued. -- Mike From: Ace On Behalf Of Mike Jones Sent: Tuesday, November 6, 2018 3:43 PM To: Roman Danyliw ; ace@ietf.org Cc: Jim Schaad Subject: Re: [Ace] Summarizing WGLC discussion of draft-ietf-ace-cwt-proof-= of-possession Thanks for the useful summary, Roman. Replies are inline below prefixed by= "Mike>". I've just published draft -04, which contains the small number of ch= anges described below. I believe that this completes resolution of the WGL= C feedback. -----Original Message----- From: Ace > On Behalf Of = Roman Danyliw Sent: Friday, July 13, 2018 12:56 AM To: ace@ietf.org Subject: [Ace] Summarizing WGLC discussion of draft-ietf-ace-cwt-proof-of-p= ossession Hello! This email is intended to summarize the outcome of the WGLC on draft-ietf-a= ce-cwt-proof-of-possession-02 to date. This call was started on May 8 [1] = and discussion occurred around two reviews of this -02 draft: ** Jim Schaad [Schaad], per https://www.ietf.org/mail-archive/web/ace/curre= nt/msg02747.html ** Roman Danyliw [Danyliw], per https://www.ietf.org/mail-archive/web/ace/c= urrent/msg02793.html After discussion on the mailing list, -03 of the draft was produced. Synthesizing the robust mailing list discussion, I see the following previo= usly identified issues as still needing closure. The nature of the resolut= ion varies. Given the volume of the discussion threads, I may have missed = a response or failed to line up a text change in -03 to an issue. Please c= orrect the status of any given point of feedback below. =3D=3D[ -03 contains changes, but ML discussion doesn't indicate closure ]= =3D=3D The following feedback was made about the -02 draft; changes to the = relevant text was made in -03; but follow-up discussions on the mailing lis= t doesn't indicate closure of the issue. If the originator of the feedback= (it looks like only Jim for this section) feels the issue is closed, pleas= e speak up. [Schaad #6] Under what circumstances would a 'sub' claim be present and it= is not the presenter? I can see that a holder of the key may be implicitl= y (or anonymously) named, but putting something in the subject field which= is not identifying the presenter is something that I would reject without = a good presentation of why in the document. Mike> The draft is written as it is to both provide non-normative guidance = for expected simple use cases, while also allowing flexibility for more com= plicated use cases. In particular, in some profiles, the subject of the CW= T and the presenter of the CWT for proof-of-possession purposes may be diff= erent parties. The party presenting the CWT to the recipient would be in p= ossession of the CWT because it communicated with the issuer but the subjec= t can be different than the presenter. That's why the subject language is = written as a suggestion to profile writers, rather than normatively. I'll = note that this also aligned with the treatment in RFC 7800, which this draf= t mirrors, by design. [Schaad #7] I would disagree with the claim that if the 'sub' claim is mis= sing then it would normally be the issuer. For the world of IoT, I would e= xpect that the subject would not be present because there is no need to ide= ntify the subject to the recipient. I.e. it is an anonymous subject. Mike> As with the previous issue, this section of the draft provides non-no= rmative guidance for expected simple use cases, while not precluding profil= ing specifications from using the standard CWT claims in the manner that ma= kes sense for their application. The "iss" language here also intentionall= y parallels the RFC 7800 treatment of this claim. [Schaad #8] It is not clear to me that either of the sub and iss claims wo= uld normally be present. They might be present but neither is needed. The= subject can be anonymous and the issuer is identified by the key used to v= alidate the security on the CWT. Mike> Your points above align with the design in the draft. That's why bot= h "iss" and "sub" are optional. Their usage is profile-dependent, as it is= in RFC 7800 (and CWT and JWT). [Schaad #9] In section 3.1 the first two sentences appear to be contradict= ory. Members are used to identify the POP key. Other things than a POP ke= y can be used than a POP key. If they are used to identify the POP key- wh= y would they not deal with the POP key? I think that you should do a separ= ation and define the 'cnf' file which can hold any number of confirmation m= ethods and then have a section on defining some POP cnf method field holder= s. Mike> The apparently contradictory language in draft -02 was reworded in dr= aft -03 to address this comment. In particular, it now explicitly states t= hat the "cnf" claim is used to carry confirmation methods, some of which id= entify proof-of-possession keys. This aligns both with RFC 7800 and the SA= ML 2.0 SubjectConfirmation element design (both by intentionally, since the= re's no need to reinvent the wheel when an existing design already works we= ll). [Schaad #10] In section 3.1 P1 - I am not sure why you have something here= about confirming the authenticity of the token as oppose to confirming the= identity of the presenter. Why would that type of information be placed h= ere where it is not useful.] Mike> The referenced text was reworked between draft -02 and -03. =3D=3D[ change was proposed, but not made ]=3D=3D The draft editors propose= d a changes on the mailing list to address the issue but it did not appear = in the -03 draft. See the inline text of https://www.ietf.org/mail-archive/web/ace/current/ms= g02788.html for the proposed changes for [Schaad #12, 13, 16, 21]. [Schaad #12] I am unclear why there should be a restriction on the number o= f POP keys that can be in a 'cnf' object. If there are multiple keys, then= any or all of them are of equal value in doing the confirmation. Just lik= e there can be multiple confirmation methods and an application could choos= e to use any one of them. Mike> This was discussed in the working group meeting at IETF 102 in Montre= al and on the list. The consensus appeared to be to stay with the existing= design, which describes how to represent multiple PoP keys in the fourth p= aragraph of https://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possess= ion-03#section-3.1 (which again, is the same mechanism defined in RFC 7800)= . [Schaad #13] Not sure which section this belongs in, but the use of an COS= E_Encrypt0 would be one way to combat tracking of identities based on the k= ey value being used. Different encrypted values could be sent to different= servers and they would not necessarily know about use w/o internal collusi= on between them. Similar effect by using an encrypted CWT. Potentially re= quires use of TLS1.3 to protect the RPKs. YMMV Mike> The Privacy Considerations section talks about a common PoP key being= a potential correlation handle and thus recommends that different PoP keys= be used for different parties. Encrypting a common key could prevent obse= rvers unable to decrypt the messages from learning that they key is shared = but would not prevent correlation by parties that cooperate to compare thei= r PoP keys. So it's not clear to me that the suggestion above solves enoug= h of the correlation problem that it's worth including in the draft. If yo= u disagree, please suggest text for an additional Privacy Considerations pa= ragraph. [Schaad #16] Section 4 - Are audience restrictions not done in CWT? -- sam= e issues as [Danyliw #12] Mike> All claims in CWTs (and JWTs) are optional, including the "aud" (audi= ence) claim. Particular profiles can suggest and require particular claims= , as this profile does. I have deleted the unnecessary middle sentence, wh= ich [Danyliw #12] correctly pointed out broke up the logical flow of the ex= position. Thanks for pointing this out. [Schaad #21] Section 6.2.2 - the value type is not an array for COSE_Encryp= t or COSE_Encyrpt0, these are the values. As written I could put in an arr= ay which is not one of those two structures and be valid. Ditto for COSE_= Key, although w/ slightly less justification. Mike> Thanks. I updated these value type declarations to use the actual re= quired COSE_* types. See the inline text of https://www.ietf.org/mail-archive/web/ace/current/ms= g02802.html for the proposed change for [Danyliw #7]. [Danyliw #7] Page 6, Section 3.3, The sentence "The COSE_Key could, for ins= tance, be encrypted using a COSE_Encrypt0 representation using the AES-CCM-= 16-64-128 algorithm" seems out of place.. What is this text explaining rel= ative to the examples? Mike> Thanks. I deleted the confusing and unnecessary sentence. =3D=3D[ face to face discussion required ]=3D=3D Certain issues were deemed= sufficiently complex to required face-to-face discussion at IETF 102. [Schaad #14] I have real problems w/ the use of a KID for POP identificati= on. It may identify the wrong key or, if used for granting access, may hav= e problems w/ identity collisions. These need to be spelt out someplace to= help people tracking down questions of why can't I verify w/ this CWT, I k= now it's right. -- See https://www.ietf.org/mail-archive/web/ace/current/ms= g02853.html for more detailed discussion -- related issue to [Danyliw #8]. Mike> The paragraph sentence of the Operational Considerations section at h= ttps://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possession-03#sectio= n-6 was added in draft -03 to address exactly this issue, after extensive d= iscussion and wordsmithing on the mailing list. Regards, Roman [1] https://www.ietf.org/mail-archive/web/ace/current/msg02744.html _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace Thanks again, -- Mike --_000_DM5PR00MB0296B8640133B9F9FBDFC641F5CB0DM5PR00MB0296namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

FYI – I wrote ab= out this new version at http://self-issued.info/?p=3D= 1933 and as @selfissued.

 

   &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p; -- Mike

 

From: Ace <ace-bounces@ietf.org> On = Behalf Of Mike Jones
Sent: Tuesday, November 6, 2018 3:43 PM
To: Roman Danyliw <rdd@cert.org>; ace@ietf.org
Cc: Jim Schaad <ietf@augustcellars.com>
Subject: Re: [Ace] Summarizing WGLC discussion of draft-ietf-ace-cwt= -proof-of-possession

 

Thanks for the usef= ul summary, Roman.  Replies are inline below prefixed by “Mike&g= t;”.  I’ve just published draft -04, which contains the small number of changes described = below.  I believe that this completes resolution of the WGLC feedback.=

 

-----Original Message-----
From: Ace <ace-bounces@ietf.org<= /a>> On Behalf Of Roman Danyliw
Sent: Friday, July 13, 2018 12:56 AM
To: ace@ietf.org
Subject: [Ace] Summarizing WGLC discussion of draft-ietf-ace-cwt-proof-of-p= ossession

 

Hello!

 

This email is intended to summarize the outcome o= f the WGLC on draft-ietf-ace-cwt-proof-of-possession-02 to date.  This= call was started on May 8 [1] and discussion occurred around two reviews o= f this -02 draft:

 

** Jim Schaad [Schaad], per https://www.ietf.org/mail-archive/web/= ace/current/msg02747.html

** Roman Danyliw [Danyliw], per https://www.ietf.org/mail-archive/web/= ace/current/msg02793.html

 

After discussion on the mailing list, -03 of the = draft was produced. 

 

Synthesizing the robust mailing list discussion, = I see the following previously identified issues as still needing closure.&= nbsp; The nature of the resolution varies.  Given the volume of the di= scussion threads, I may have missed a response or failed to line up a text change in -03 to an issue.  Please correc= t the status of any given point of feedback below.

 

=3D=3D[ -03 contains changes, but ML discussion d= oesn't indicate closure ]=3D=3D The following feedback was made about the -= 02 draft; changes to the relevant text was made in -03; but follow-up discu= ssions on the mailing list doesn't indicate closure of the issue.  If the originator of the feedback (it looks li= ke only Jim for this section) feels the issue is closed, please speak up.

 

[Schaad #6]  Under what circumstances would = a 'sub' claim be present and it is not the presenter?  I can see that = a holder of the key may be implicitly (or anonymously)  named, but put= ting something in the subject field which is not identifying the presenter is something that I would reject without a good = presentation of why in the  document.

 

Mike> The draft = is written as it is to both provide non-normative guidance for expected sim= ple use cases, while also allowing flexibility for more complicated use cas= es.  In particular, in some profiles, the subject of the CWT and the presenter of the CWT for proof-of-possession pu= rposes may be different parties.  The party presenting the CWT to the = recipient would be in possession of the CWT because it communicated with th= e issuer but the subject can be different than the presenter.  That’s why the subject language is written= as a suggestion to profile writers, rather than normatively.  I’= ;ll note that this also aligned with the treatment in RFC 7800, which this = draft mirrors, by design.

 

[Schaad #7]  I would disagree with the claim= that if the 'sub' claim is missing then it would normally be the issuer.&n= bsp; For the world of IoT, I would expect that the subject would not be pre= sent because there is no need to identify the subject to the recipient.  I.e. it is an anonymous subject.

 

Mike> As with th= e previous issue, this section of the draft provides non-normative guidance= for expected simple use cases, while not precluding profiling specificatio= ns from using the standard CWT claims in the manner that makes sense for their application.  The “iss= 221; language here also intentionally parallels the RFC 7800 treatment of t= his claim.

 

[Schaad #8]  It is not clear to me that eith= er of the sub and iss claims would normally be present.  They might be= present but neither is needed.  The subject can be anonymous and the = issuer is identified by the key used to validate the security on the CWT.

 

Mike> Your point= s above align with the design in the draft.  That’s why both = 220;iss” and “sub” are optional.  Their usage is pro= file-dependent, as it is in RFC 7800 (and CWT and JWT).

 

[Schaad #9]  In section 3.1 the first two se= ntences appear to be contradictory.  Members are used to identify the = POP key.  Other things than a POP key can be used than a POP key. = ; If they are used to identify the POP key- why would they not deal with the POP key?  I think that you should do a separat= ion and define the 'cnf' file which can hold any number of confirmation met= hods and then have a section on defining some POP cnf method field holders.=

 

Mike> The appare= ntly contradictory language in draft -02 was reworded in draft -03 to addre= ss this comment.  In particular, it now explicitly states that the = 220;cnf” claim is used to carry confirmation methods, some of which identify proof-of-possession keys.  This aligns both wi= th RFC 7800 and the SAML 2.0 SubjectConfirmation element design (both by in= tentionally, since there’s no need to reinvent the wheel when an exis= ting design already works well).

 

[Schaad #10]  In section 3.1 P1 - I am not s= ure why you have something here about confirming the authenticity of the to= ken as oppose to confirming the identity of the presenter.  Why would = that type of information be placed here where it is not useful.]

 

Mike> The refere= nced text was reworked between draft -02 and -03.

 

=3D=3D[ change was proposed, but not made ]=3D=3D= The draft editors proposed a changes on the mailing list to address the is= sue but it did not appear in the -03 draft. 

 

See the inline text of https://www.ietf.org/mail-archive/web/= ace/current/msg02788.html for the proposed changes for [Schaad #= 12, 13, 16, 21].

 

[Schaad #12] I am unclear why there should be a r= estriction on the number of POP keys that can be in a 'cnf' object.  I= f there are multiple keys, then any or all of them are of equal value in do= ing the confirmation.  Just like there can be multiple confirmation methods and an application could choose to us= e any one of them.

 

Mike> This was d= iscussed in the working group meeting at IETF 102 in Montreal and on the li= st.  The consensus appeared to be to stay with the existing design, wh= ich describes how to represent multiple PoP keys in the fourth paragraph of https://tools.ie= tf.org/html/draft-ietf-ace-cwt-proof-of-possession-03#section-3.1 (which again, is the same mechanism defined in RFC 7800).

 

[Schaad #13]  Not sure which section this be= longs in, but the use of an COSE_Encrypt0 would be one way to combat tracki= ng of identities based on the key value being used.  Different encrypt= ed values could be sent to different servers and they would not necessarily know about use w/o internal collusion betwe= en them.  Similar effect by using an encrypted CWT.  Potentially = requires use of TLS1.3 to protect the RPKs.  YMMV

 

Mike> The Privac= y Considerations section talks about a common PoP key being a potential cor= relation handle and thus recommends that different PoP keys be used for dif= ferent parties.  Encrypting a common key could prevent observers unable to decrypt the messages from learning that = they key is shared but would not prevent correlation by parties that cooper= ate to compare their PoP keys.  So it’s not clear to me that the= suggestion above solves enough of the correlation problem that it’s worth including in the draft.  If you disagre= e, please suggest text for an additional Privacy Considerations paragraph.<= o:p>

 

[Schaad #16] Section 4 - Are audience restriction= s not done in CWT?  -- same issues as [Danyliw #12]

 

Mike> All claims= in CWTs (and JWTs) are optional, including the “aud” (audience= ) claim.  Particular profiles can suggest and require particular claim= s, as this profile does.  I have deleted the unnecessary middle sentence, which [Danyliw #12] correctly pointed out broke up the lo= gical flow of the exposition.  Thanks for pointing this out.

 

[Schaad #21] Section 6.2.2 - the value type is no= t an array for COSE_Encrypt or COSE_Encyrpt0, these are the values.  A= s written I could put in an array which is not one of those two structures = and be valid.   Ditto for COSE_Key, although w/ slightly less justification.

 

Mike> Thanks.&nb= sp; I updated these value type declarations to use the actual required COSE= _* types.

 

See the inline text of https://www.ietf.org/mail-archive/web/= ace/current/msg02802.html  for the proposed change for [Dan= yliw #7].

 

[Danyliw #7] Page 6, Section 3.3, The sentence &q= uot;The COSE_Key could, for instance, be encrypted using a COSE_Encrypt0 re= presentation using the AES-CCM-16-64-128 algorithm" seems out of place= ..  What is this text explaining relative to the examples?

 

Mike> Thanks.&nb= sp; I deleted the confusing and unnecessary sentence.

 

=3D=3D[ face to face discussion required ]=3D=3D = Certain issues were deemed sufficiently complex to required face-to-face di= scussion at IETF 102.

 

[Schaad #14]  I have real problems w/ the us= e of a KID for POP identification.  It may identify the wrong key or, = if used for granting access, may have problems w/ identity collisions. = ; These need to be spelt out someplace to help people tracking down questions of why can't I verify w/ this CWT, I know it's rig= ht. -- See https://www.ietf.org/mail-archive/web= /ace/current/msg02853.html for more detailed discussion -- relat= ed issue to [Danyliw #8].

 

Mike> The paragr= aph sentence of the Operational Considerations section at https://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possession-03#secti= on-6 was added in draft -03 to address exactly this issue, after extens= ive discussion and wordsmithing on the mailing list.

 

Regards,

Roman

 

[1] https://www.ietf.org/mail-archive/web/= ace/current/msg02744.html

 

 

_______________________________________________

Ace mailing list

Ace@ietf.org

https://www.ietf.org/mailman/list= info/ace

 

   &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp; Thanks again,

   &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp; -- Mike

 

--_000_DM5PR00MB0296B8640133B9F9FBDFC641F5CB0DM5PR00MB0296namp_-- From nobody Tue Nov 6 23:56:45 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 50AB412777C for ; Tue, 6 Nov 2018 23:56:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xox6Lq4wNmWg for ; Tue, 6 Nov 2018 23:56:33 -0800 (PST) Received: from veto.sei.cmu.edu (veto.sei.cmu.edu [147.72.252.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A5E1F130E6C for ; Tue, 6 Nov 2018 23:56:33 -0800 (PST) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by veto.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id wA77uG3n046643; Wed, 7 Nov 2018 02:56:16 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 veto.sei.cmu.edu wA77uG3n046643 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1541577377; bh=6jbXvn2k4PI7D1GyGs8T8boRby52Xfj6VL2EN6Y8cho=; h=From:To:CC:Subject:Date:References:In-Reply-To:From; b=bURBdC1v/Lkbl7v840NW3IFGofZBJlGGeLwJUr0iHlH1/YWVPyx4Bw3DGpX14QgXX /N+RKZz2onjctIHtMkT0AH5o9EK09spY0tQm8Gbh3NAc7n1MlaPOjTnHVldJzPbFBu 5Cw9nzL/jngaZM0vJUntmE5+nnPcIMdRbj8aDUag= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id wA77tjjM026652; Wed, 7 Nov 2018 02:55:45 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.03.0415.000; Wed, 7 Nov 2018 02:55:44 -0500 From: Roman Danyliw To: "'Mike Jones'" , "ace@ietf.org" CC: Jim Schaad Thread-Topic: Summarizing WGLC discussion of draft-ietf-ace-cwt-proof-of-possession Thread-Index: AdQaB+pCJ/tP7Ud0T+GY5Fn6FrAcuBbeY8wQADsjz/A= Date: Wed, 7 Nov 2018 07:55:44 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0181A49D1F@marathon> References: <359EC4B99E040048A7131E0F4E113AFC014C3FEDA1@marathon> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Ace] Summarizing WGLC discussion of draft-ietf-ace-cwt-proof-of-possession X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Nov 2018 07:56:40 -0000 Hi Mike! Thanks for publishing -04. The changes made in this version address the la= st of my WGLC comments per [Danyliw #7] and [Danyliw #12]. More details b= elow: > From: Mike Jones [mailto:Michael.Jones@microsoft.com]=20 > Sent: Tuesday, November 6, 2018 3:43 AM > To: Roman Danyliw ; ace@ietf.org > Cc: Jim Schaad > Subject: RE: Summarizing WGLC discussion of draft-ietf-ace-cwt-proof-of-p= ossession > > Thanks for the useful summary, Roman.=A0 Replies are inline below=20 > prefixed by "Mike>".=A0 I've just published draft -04, which contains the= =20 > small number of changes described below.=A0 I believe that this completes= =20 > resolution of the WGLC feedback. > > -----Original Message----- > From: Ace On Behalf Of Roman Danyliw > Sent: Friday, July 13, 2018 12:56 AM > To: ace@ietf.org > Subject: [Ace] Summarizing WGLC discussion of draft-ietf-ace-cwt-proof-of= -possession [snip] > [Schaad #16] Section 4 - Are audience restrictions not done in CWT?=A0 -= - same=20 > issues as [Danyliw #12] > > Mike> All claims in CWTs (and JWTs) are optional, including the "aud" (au= dience)=20 > claim.=A0 Particular profiles can suggest and require particular claims, = as this=20 > profile does.=A0 I have deleted the unnecessary middle sentence, which=20 > [Danyliw #12] correctly pointed out broke up the logical flow of the expo= sition.=A0 > Thanks for pointing this out. This change addresses my concerns. [snip] > [Danyliw #7] Page 6, Section 3.3, The sentence "The COSE_Key could, for=20 > instance, be encrypted using a COSE_Encrypt0 representation using the=20 > AES-CCM-16-64-128 algorithm" seems out of place.=A0 What is this text=20 > explaining relative to the examples? > > Mike> Thanks.=A0 I deleted the confusing and unnecessary sentence. This change addresses my concern. Roman From nobody Wed Nov 7 03:09:58 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D315E128CF2; Wed, 7 Nov 2018 03:09:50 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: internet-drafts@ietf.org To: Cc: ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.87.3 Auto-Submitted: auto-generated Precedence: bulk Reply-To: ace@ietf.org Message-ID: <154158899081.21668.3130304655005483568@ietfa.amsl.com> Date: Wed, 07 Nov 2018 03:09:50 -0800 Archived-At: Subject: [Ace] I-D Action: draft-ietf-ace-oscore-profile-05.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Nov 2018 11:09:51 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF. Title : OSCORE profile of the Authentication and Authorization for Constrained Environments Framework Authors : Francesca Palombini Ludwig Seitz Göran Selander Martin Gunnarsson Filename : draft-ietf-ace-oscore-profile-05.txt Pages : 24 Date : 2018-11-07 Abstract: This memo specifies a profile for the Authentication and Authorization for Constrained Environments (ACE) framework. It utilizes Object Security for Constrained RESTful Environments (OSCORE) to provide communication security, server authentication, and proof-of-possession for a key owned by the client and bound to an OAuth 2.0 access token. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-oscore-profile/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-ace-oscore-profile-05 https://datatracker.ietf.org/doc/html/draft-ietf-ace-oscore-profile-05 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-oscore-profile-05 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Nov 7 03:20:33 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD64D128CF2 for ; Wed, 7 Nov 2018 03:20:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.771 X-Spam-Level: X-Spam-Status: No, score=-4.771 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.47, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com header.b=N8pQmt1F; dkim=pass (1024-bit key) header.d=ericsson.com header.b=evEaOcrL Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ab_X5nPKcd-E for ; Wed, 7 Nov 2018 03:20:29 -0800 (PST) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4DD6C128A5C for ; Wed, 7 Nov 2018 03:20:29 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1541589627; x=1544181627; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=7TGb5Popxj+ch8x+p70BGBIO/NMEkrpFXGIbU+kfp9c=; b=N8pQmt1FOrpFhC8qfki15jcLrgkePzzBfabPwP2OQu+cZ3WUHLA35b1EbB3DFg+z USwlie4TDLF//hvGHxNez/ebhcrbQZN9/zmymFSqPS9tfPsfA4N0inwXXFsNigs5 2jrWt0Iv4skBN4MSqcGvBno4ClgbTaUWMWYnn8Js4sY=; X-AuditID: c1b4fb2d-f61ff70000007af1-72-5be2ca7b974e Received: from ESESSMB504.ericsson.se (Unknown_Domain [153.88.183.122]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id BA.03.31473.B7AC2EB5; Wed, 7 Nov 2018 12:20:27 +0100 (CET) Received: from ESESBMR503.ericsson.se (153.88.183.135) by ESESSMB504.ericsson.se (153.88.183.165) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Wed, 7 Nov 2018 12:20:27 +0100 Received: from ESESBMB503.ericsson.se (153.88.183.170) by ESESBMR503.ericsson.se (153.88.183.135) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Wed, 7 Nov 2018 12:20:27 +0100 Received: from EUR02-AM5-obe.outbound.protection.outlook.com (153.88.183.157) by ESESBMB503.ericsson.se (153.88.183.170) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3 via Frontend Transport; Wed, 7 Nov 2018 12:20:26 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=7TGb5Popxj+ch8x+p70BGBIO/NMEkrpFXGIbU+kfp9c=; b=evEaOcrLL/9jAWhsGK77SRvpc/MlmVeEdW7pSNYdutxVjqpZYGnEbftqRCxWxF4AUax/by9Ul1n5DILwMNjdoteQhXEFv70ZUAi8eev/U4xLDmNUpGqwP+BUNbg3A9y8lJojkvBpImPrjyP9RKndEnSVhdzduPzyFsvJ0Ur6bRA= Received: from HE1PR0701MB2746.eurprd07.prod.outlook.com (10.168.188.140) by HE1PR0701MB2346.eurprd07.prod.outlook.com (10.168.127.146) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1294.15; Wed, 7 Nov 2018 11:20:26 +0000 Received: from HE1PR0701MB2746.eurprd07.prod.outlook.com ([fe80::5d31:ff09:b9ba:29c3]) by HE1PR0701MB2746.eurprd07.prod.outlook.com ([fe80::5d31:ff09:b9ba:29c3%9]) with mapi id 15.20.1294.034; Wed, 7 Nov 2018 11:20:26 +0000 From: Francesca Palombini To: "ace@ietf.org" Thread-Topic: [Ace] I-D Action: draft-ietf-ace-oscore-profile-05.txt Thread-Index: AQHUdoqEUF+1d6boaUqTOiQ3Up9s76VEoAQA Date: Wed, 7 Nov 2018 11:20:25 +0000 Message-ID: <90E615D4-28E1-4B4B-BEB1-91DD41C448FF@ericsson.com> References: <154158899081.21668.3130304655005483568@ietfa.amsl.com> In-Reply-To: <154158899081.21668.3130304655005483568@ietfa.amsl.com> Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [2001:67c:370:128:6160:8f51:50aa:d6] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; HE1PR0701MB2346; 6:pa/fGQouUdxTj07/IqmuDFEIMPSUuWxivSzAyzyno3Vhi+mUwHp4s7cpZgjf/NlwyYmG9Q49iRiHapYoAXE7TwUoi41L/GYx2vJQCQz2Z5Q5Nvegr2yqEH7D655HSORZSPecX8NgRBRsqoZZRK9yD+1Zp8zUMQjTuFT7dR8AYMnS0k1BOEzWMdJwWwDSJi1v2fi8Fa0Lo2qo7LzEa++XLKSLRL+xmXbr0TIiNbdVIHNyhuK/04LLRKrkgyi0db0h3n1K5qFftp137L809hWFF3JlxKgnww6LXOfxoJ7E/05/ViLdyQPbUyqhQgGK+hO/5Nx1CM1BsSdKAMJDlQQHjJJL2aqTOjRsDbySLfeB7AABH1FSGGtnHOk+foHVepcysCXZGh/Jjl/b1JNfyD9Wtm0ron7BS06VPQWOrHRUPaq5kqEZ4RDoe+FJfYKi6bJsf48MHHlyANqnsjYNyLijGA==; 5:CY56pyg9TVulRW+XeXoyoDDmPk7so2oZ4cnaS0ZEGNfogcp12T5xKQGV5nqfMd/vhhFKz1FN6Qi4j4Rmbhj/CeGb+OgrLQgw2byb31HlbFs7G6jqiutp+5RAJoHYvyZWqkHwglJDi7cBfWgXGnNYAdhtDNyqQIihGP06TmnUzo4=; 7:PZ0CZr1xad1PPtq/r+Y34vW8FqH/RATyjScmpBej9HwqC6IAB1SJPpEj+PnQBljnp56A3lGcl3kajrw4iLxltf+cII1trCabg19fl41jwgEZ13Utazn1U/nrufXAD5F9CSEBZFexYFMGDpeD5LmW7g== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: f8dc3cea-80d8-40a1-41de-08d644a30444 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(2017052603328)(7153060)(7193020); SRVR:HE1PR0701MB2346; x-ms-traffictypediagnostic: HE1PR0701MB2346: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(192374486261705)(158342451672863)(120809045254105); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3231382)(944501410)(52105095)(93006095)(93001095)(10201501046)(3002001)(148016)(149066)(150057)(6041310)(20161123560045)(20161123564045)(20161123558120)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(201708071742011)(7699051)(76991095); SRVR:HE1PR0701MB2346; BCL:0; PCL:0; RULEID:; SRVR:HE1PR0701MB2346; x-forefront-prvs: 08497C3D99 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(366004)(346002)(136003)(376002)(39860400002)(53754006)(199004)(189003)(68736007)(44832011)(476003)(1730700003)(2616005)(11346002)(33656002)(5660300001)(8676002)(102836004)(446003)(486006)(99286004)(6436002)(6346003)(6486002)(186003)(6306002)(6512007)(97736004)(5640700003)(53936002)(46003)(82746002)(76176011)(7736002)(25786009)(106356001)(6506007)(229853002)(6116002)(6246003)(2501003)(305945005)(66574009)(86362001)(71200400001)(71190400001)(316002)(2906002)(478600001)(14454004)(105586002)(966005)(83716004)(81156014)(81166006)(2900100001)(6916009)(8936002)(14444005)(256004)(2351001)(36756003); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR0701MB2346; H:HE1PR0701MB2746.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=francesca.palombini@ericsson.com; x-microsoft-antispam-message-info: MK4wcRdTBdQ1uXFjFe6Ogk+4kdosb5fYRmq+WbNk4Ta6uZnxicjF7VJTSaRW6kZJJW5k2D5zBw1X44o/ocVESf7/VgaSfkfb/Yll1Qg/256xFp9YiRM1hFVHth1GEDijDlT/WKy7Xch72LdzZ1g3UKR10Xhem6vPkKdgpAgJeeFuVP/3MahQbJDsvRSyrLMimGkBGHU1F71pXbaxz+OynY3Iqca5orh7huMKpHnljorbtI8xarx2IeADCVFuDgZ/usSwyaO1WWpARhErx4DJ48X6IRoLRvuEi2HNswBguqIM/j7Ay4mdfw+b4OP4C9ud2jrFMe4rJxGFP7K42GLlpU4my3bLocOkjOTPylJZ4EE= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: f8dc3cea-80d8-40a1-41de-08d644a30444 X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Nov 2018 11:20:25.9881 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0701MB2346 X-OriginatorOrg: ericsson.com X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmpmleLIzCtJLcpLzFFi42KZGbG9Srf61KNogz27NCy+f+thdmD0WLLk J1MAYxSXTUpqTmZZapG+XQJXRtuTX6wF3yQr3k3xb2BcINnFyMkhIWAise3TVDYQW0jgCKPE mRWcXYxcQPZXRonJbzcwwzlX77azQDiLmSRW975mA3FYBCYwS8zfe5IJIjODSeJo43Z2COcp o8T8/sfsIJPZBGwkLjx8z9rFyMEhIqAocf1RIkhYWMBZYvm1S0wgtoiAi8TBX28YIWwjifu3 doO1sgioSKxafogFxOYVsJfo/dnCAjJGCKh36yoxkDAnUOumdd9ZQWxGAVmJL42rmUFsZgFx iVtP5jNB/CkgsWTPeWYIW1Ti5eN/rBC2mcSfE7/ZIGxZiUvzuxlBzpcQuMEmceDufahmXYkP U6dCNftKXDu7EKr5JKPErc5qCFtH4sXa2ywQdr7EjTnroepjJS72NUPNkZNY1fsQquY0s8S/ z24TGI1mIbl1FtBrzAKaEut36UOYHhLv/vpAVChKTOl+yD4LHBCCEidnPmFZwMi6ilG0OLW4 ODfdyFgvtSgzubg4P08vL7VkEyMwaRzc8lt3B+Pq146HGAU4GJV4eJuOP4oWYk0sK67MPcQo wcGsJMLbuxooxJuSWFmVWpQfX1Sak1p8iFGag0VJnFdv1Z4oIYH0xJLU7NTUgtQimCwTB6dU A2P3pCzlOxP2CSZLv/8r+YprhqTFUjPN3Evz56R4L/10u6fd3qmhSa4taL9W+DKWx7GyN0s9 nW00P1+2Zp+h+2xNyQo79aqXiezplW6frqgxCzy+uUrBj11ofrFG5uFvvDvKTVrO9J6KOuhZ ybjlbkhUwnmlhnWnbrCqLnl6WYl1fctd2fsG55RYijMSDbWYi4oTAcVPdfIWAwAA Archived-At: Subject: Re: [Ace] I-D Action: draft-ietf-ace-oscore-profile-05.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Nov 2018 11:20:32 -0000 SGkgYWxsLA0KDQpUaGlzIHVwZGF0ZSBpbmNsdWRlcyBhbGwgYnV0IG9uZSBjb21tZW50IGZyb20g dGhlIFdHTEMgcmV2aWV3IGJ5IEppbTogaHR0cHM6Ly9tYWlsYXJjaGl2ZS5pZXRmLm9yZy9hcmNo L21zZy9hY2UvQThrbzRzQW1HOUNPRGJaRFdON0FQenFreXZzIC4NCg0KVGhlIGNvbW1lbnQgbGVm dCB3aWxsIGJlIGRpc2N1c3NlZCB0b21vcnJvdyBpbiB0aGUgYWNlIG1lZXRpbmcsIGFuZCBpcyBh Ym91dCB0aGUgbm9uY2UgbWVjaGFuaXNtIHRoYXQgd2FzIGRpc2N1c3NlZCBpbiB0aGUgdGhyZWFk IGFib3ZlLg0KDQpUaGFua3MsDQpGcmFuY2VzY2ENCg0K77u/T24gMDcvMTEvMjAxOCwgMTg6MTAs ICJBY2Ugb24gYmVoYWxmIG9mIGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZyIgPGFjZS1ib3VuY2Vz QGlldGYub3JnIG9uIGJlaGFsZiBvZiBpbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc+IHdyb3RlOg0K DQogICAgDQogICAgQSBOZXcgSW50ZXJuZXQtRHJhZnQgaXMgYXZhaWxhYmxlIGZyb20gdGhlIG9u LWxpbmUgSW50ZXJuZXQtRHJhZnRzIGRpcmVjdG9yaWVzLg0KICAgIFRoaXMgZHJhZnQgaXMgYSB3 b3JrIGl0ZW0gb2YgdGhlIEF1dGhlbnRpY2F0aW9uIGFuZCBBdXRob3JpemF0aW9uIGZvciBDb25z dHJhaW5lZCBFbnZpcm9ubWVudHMgV0cgb2YgdGhlIElFVEYuDQogICAgDQogICAgICAgICAgICBU aXRsZSAgICAgICAgICAgOiBPU0NPUkUgcHJvZmlsZSBvZiB0aGUgQXV0aGVudGljYXRpb24gYW5k IEF1dGhvcml6YXRpb24gZm9yIENvbnN0cmFpbmVkIEVudmlyb25tZW50cyBGcmFtZXdvcmsNCiAg ICAgICAgICAgIEF1dGhvcnMgICAgICAgICA6IEZyYW5jZXNjYSBQYWxvbWJpbmkNCiAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIEx1ZHdpZyBTZWl0eg0KICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgR8O2cmFuIFNlbGFuZGVyDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICBN YXJ0aW4gR3VubmFyc3Nvbg0KICAgIAlGaWxlbmFtZSAgICAgICAgOiBkcmFmdC1pZXRmLWFjZS1v c2NvcmUtcHJvZmlsZS0wNS50eHQNCiAgICAJUGFnZXMgICAgICAgICAgIDogMjQNCiAgICAJRGF0 ZSAgICAgICAgICAgIDogMjAxOC0xMS0wNw0KICAgIA0KICAgIEFic3RyYWN0Og0KICAgICAgIFRo aXMgbWVtbyBzcGVjaWZpZXMgYSBwcm9maWxlIGZvciB0aGUgQXV0aGVudGljYXRpb24gYW5kDQog ICAgICAgQXV0aG9yaXphdGlvbiBmb3IgQ29uc3RyYWluZWQgRW52aXJvbm1lbnRzIChBQ0UpIGZy YW1ld29yay4gIEl0DQogICAgICAgdXRpbGl6ZXMgT2JqZWN0IFNlY3VyaXR5IGZvciBDb25zdHJh aW5lZCBSRVNUZnVsIEVudmlyb25tZW50cw0KICAgICAgIChPU0NPUkUpIHRvIHByb3ZpZGUgY29t bXVuaWNhdGlvbiBzZWN1cml0eSwgc2VydmVyIGF1dGhlbnRpY2F0aW9uLA0KICAgICAgIGFuZCBw cm9vZi1vZi1wb3NzZXNzaW9uIGZvciBhIGtleSBvd25lZCBieSB0aGUgY2xpZW50IGFuZCBib3Vu ZCB0byBhbg0KICAgICAgIE9BdXRoIDIuMCBhY2Nlc3MgdG9rZW4uDQogICAgDQogICAgDQogICAg VGhlIElFVEYgZGF0YXRyYWNrZXIgc3RhdHVzIHBhZ2UgZm9yIHRoaXMgZHJhZnQgaXM6DQogICAg aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1hY2Utb3Njb3JlLXBy b2ZpbGUvDQogICAgDQogICAgVGhlcmUgYXJlIGFsc28gaHRtbGl6ZWQgdmVyc2lvbnMgYXZhaWxh YmxlIGF0Og0KICAgIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWFjZS1v c2NvcmUtcHJvZmlsZS0wNQ0KICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2h0 bWwvZHJhZnQtaWV0Zi1hY2Utb3Njb3JlLXByb2ZpbGUtMDUNCiAgICANCiAgICBBIGRpZmYgZnJv bSB0aGUgcHJldmlvdXMgdmVyc2lvbiBpcyBhdmFpbGFibGUgYXQ6DQogICAgaHR0cHM6Ly93d3cu aWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LWlldGYtYWNlLW9zY29yZS1wcm9maWxlLTA1DQog ICAgDQogICAgDQogICAgUGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBt aW51dGVzIGZyb20gdGhlIHRpbWUgb2Ygc3VibWlzc2lvbg0KICAgIHVudGlsIHRoZSBodG1saXpl ZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBhdmFpbGFibGUgYXQgdG9vbHMuaWV0Zi5vcmcuDQogICAg DQogICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBhbHNvIGF2YWlsYWJsZSBieSBhbm9ueW1vdXMgRlRQ IGF0Og0KICAgIGZ0cDovL2Z0cC5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvDQogICAgDQogICAg X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCiAgICBBY2Ug bWFpbGluZyBsaXN0DQogICAgQWNlQGlldGYub3JnDQogICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby9hY2UNCiAgICANCg0K From nobody Wed Nov 7 14:56:44 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C133A130DCC for ; Wed, 7 Nov 2018 14:56:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=itron.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BnVqNCPsPd8X for ; Wed, 7 Nov 2018 14:56:39 -0800 (PST) Received: from NAM05-BY2-obe.outbound.protection.outlook.com (mail-eopbgr710074.outbound.protection.outlook.com [40.107.71.74]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 62C231294D7 for ; Wed, 7 Nov 2018 14:56:37 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=itron.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LuRxyYqU5Sf4rfoYdKdDuYjnTrezzBP81ykKcCLYZps=; b=BxvzRIRdd94DIX4YGdPzcJgEXnZfJ5SX3dGO1KwATYaksoXWPCvf/2efbndCiUzhxhMDeDtx7xu7z8tEkjUSs0ZvGAeU/2HAWhNkjrKce2nGAxsh66VQWO1Cz6j++bzAL9HPem9q63zixmAA0qq3xEd/95pSnWBiguNii4v9E0Q= Received: from BYAPR04MB3893.namprd04.prod.outlook.com (52.135.214.156) by BYAPR04MB4725.namprd04.prod.outlook.com (52.135.240.28) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1294.20; Wed, 7 Nov 2018 22:56:35 +0000 Received: from BYAPR04MB3893.namprd04.prod.outlook.com ([fe80::3d0e:7c4:f6d5:ec0f]) by BYAPR04MB3893.namprd04.prod.outlook.com ([fe80::3d0e:7c4:f6d5:ec0f%5]) with mapi id 15.20.1294.034; Wed, 7 Nov 2018 22:56:35 +0000 From: "Damm, Benjamin" To: "ace@ietf.org" Thread-Topic: EDHOC support Thread-Index: AQHUdu0iJWG4NhPtGUuVn8++xowxHg== Date: Wed, 7 Nov 2018 22:56:35 +0000 Message-ID: <20181107225715.GA45413@itron.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-clientproxiedby: BYAPR02CA0058.namprd02.prod.outlook.com (2603:10b6:a03:54::35) To BYAPR04MB3893.namprd04.prod.outlook.com (2603:10b6:a02:ad::28) authentication-results: spf=none (sender IP is ) smtp.mailfrom=Benjamin.Damm@itron.com; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [207.170.195.68] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; BYAPR04MB4725; 6:EjW8C9jvHNKF/CzhRZDiV/VCYYgvlFqXbEv7pwiH53X9YmNXlxzLftb7ngaGNsOl6T83oWH/3ySTcIK9irV12BhZvG/1RBNBgJg+P4pFOASS69LByXwJz8euZZsyinoWeSiFgzaX5xKUxLs36prudqzetqXcer84cYv4nqlLdGybHLCl3FXmXCWPUrn5GRimQuHpkHF+SYe+XOHeQYOmCHajsjXZxUVgM+szXH2EFfLrSO7b6CMrn64taGIh6TiUVrf/LSzfkfo3iM016HZndPkKBHw0HJoOlI5ahggBxVMaDp8fBTa+L5ZhoVlBrQGSXM3q+X5zB71gRSyoZGEZXICvgKPb/uKVviEAAeBK+SUo+xsmOqnpZBHIdfkNCi+oAKAdgVyqdRB9Mx5sJM7LqNulynqZWbltoKLVm+EwlHmTyxOPNxEkP/V//r2iktH7aMnkBySHh16pkXCqt6spwQ==; 5:+Pff4ALChCoyqshN1cR09pxxhDLZY2U6EmZJAFO+DbeQyjWBxQ5mjwFyIGGzrbOhDio0G08/t1Mxr5jTSo5Xj1xPmbpotMkq8D+IE1idAsZUVicK+KHdQptJ0E08Zrb/Bc3vlGgLH6o0oyspalzvOK/Y3KXo5R2ptBaBYQDgoJk=; 7:sO6S/2DKeRRN6NcGkzXkEvdZRvZqAW9y7tS2aeE2NHqHwuZl2fiL9L92nz+qCIoc80wiqOEh6YkeQmm2JWYEHAIWSVsEuTm7e2m9v8gFuaXUjhh4/K03H83obJGjSkwhZSkFvb6DcqEQCTE5MBRRfA== x-ms-office365-filtering-correlation-id: e751e6d4-589b-4caa-b763-08d645044481 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(5600074)(711020)(4618075)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:BYAPR04MB4725; x-ms-traffictypediagnostic: BYAPR04MB4725: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(3231382)(944501410)(52105095)(3002001)(10201501046)(6055026)(148016)(149066)(150057)(6041310)(20161123558120)(20161123564045)(20161123560045)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(201708071742011)(7699051)(76991095); SRVR:BYAPR04MB4725; BCL:0; PCL:0; RULEID:; SRVR:BYAPR04MB4725; x-forefront-prvs: 08497C3D99 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(136003)(366004)(396003)(376002)(346002)(189003)(199004)(81166006)(102836004)(2351001)(1730700003)(26005)(68736007)(81156014)(106356001)(105586002)(8936002)(3480700005)(53936002)(316002)(7116003)(72206003)(8676002)(14454004)(52116002)(386003)(6506007)(6436002)(99286004)(86362001)(33656002)(5640700003)(3846002)(1076002)(6116002)(5660300001)(2906002)(36756003)(2900100001)(256004)(97736004)(6916009)(6486002)(186003)(66066001)(221733001)(14444005)(25786009)(2616005)(2501003)(478600001)(305945005)(7736002)(486006)(476003)(6512007)(71200400001)(71190400001); DIR:OUT; SFP:1101; SCL:1; SRVR:BYAPR04MB4725; H:BYAPR04MB3893.namprd04.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: itron.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: De9Nxf/K6PdLNisqllPytHWsw/I8xGi7VGMGihAdjktiqh9LHld/Bl33/H3POACkNSl5WBZF2WEhyfPDhgOzbPLDvN1D1WL3+fZLJGtWFkRMkCp6rFWziWNP3vOnepZ+yK61KjeuRlwEeB/r0j+NKbnBWgagFhuhSMHjiC5UZ1C2wvszgZ+EuwnP/W2638iYDspmxsel7PQ6rKvIQ3El4qb4wovZCaHq9MvZrZrFISH8KJAjUTzMXgObh/jhuE8Viw7mILfoEW62iEI+sHV2OASa6p8R46sBesRlz6kDOX3kyymN1oD1EFMN+ytl3Fs+EB3cKGmFG5PvAvC6vstqEmRzAN7g5m+7Tv8gzzAQfKs= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <80333F2149B63F4A9B340740E5E77973@namprd04.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: itron.com X-MS-Exchange-CrossTenant-Network-Message-Id: e751e6d4-589b-4caa-b763-08d645044481 X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Nov 2018 22:56:35.5604 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 5818bd20-bf25-47b1-b996-d419d7e6e8ba X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR04MB4725 Archived-At: Subject: [Ace] EDHOC support X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Nov 2018 22:56:42 -0000 DQpIZWxsbyBhY2UsDQoNCldlJ3ZlIGRvbmUgYW4gaW50ZXJuYWwgcmV2aWV3IG9mIEVESE9DIGFu ZCBzdXBwb3J0IGl0cyBtb3ZlbWVudCB0b3dhcmRzDQpSRkMuICBBIGZldyBxdWVzdGlvbnM6DQoN CiogSXQgaXNuJ3QgY2xlYXIgKHRvIHVzKSBob3cgRURIT0MncyBtZXNzYWdlIDIgYWNoaWV2ZXMg cHJvb2Ygb2YNCiAgcG9zc2Vzc2lvbiBwcmlvciB0byB1c2UuIE5JU1QgU1AtODAwLTU2QSBzZWVt cyBmYWlybHkgY2xlYXIgdGhhdCBwcm9vZg0KICBvZiBwb3NzZXNzaW9uIGlzIHJlcXVpcmVkIGJl Zm9yZSBjb25maXJtYXRpb24gb2YgYSBkZXJpdmVkIGtleSwgYnV0DQogIG1lc3NhZ2UgMiBzZWVt cyB0byBmb3JjZSBVIHRvIGRlcml2ZSBhbmQgdXNlIGEga2V5IGJlZm9yZSBQb1AgY2FuIGJlDQog IGRvbmUuICBBIHBvaW50ZXIgdG8gd2h5IHRoaXMgaXMgY29uc2lkZXJlZCBzYWZlIHdvdWxkIGJl IGFwcHJlY2lhdGVkLg0KDQoqIFRoZSByZXF1aXJlbWVudCB0byBzdXBwb3J0IGN1cnZlIHgyNTUx OSBpcyBhbiBvZGQgb25lIGZvciB1cyBiZWNhdXNlDQogIG91ciBkZXZpY2UgZmxlZXQgaXMgdXNp bmcgUC0yNTYuIFRoaXMgaXMgbm90IGEgcmVxdWVzdCB0byByZXF1aXJlDQogIFAtMjU2LCBidXQg cmF0aGVyLCB0aGF0IGEgcmVxdWlyZWQgY3VydmUgaXMgbm90IG5lZWRlZC4gSW5zdGVhZCBvZiBh DQogIE1VU1QgSSdkIGxpa2UgdG8gc2VlIHRoaXMgYmUgYSBTSE9VTEQuDQoNCiogR2l2ZW4gdGhl IHNwZWN0cmUgb2YgUFFDIHdlIHRoaW5rIHByb3ZpZGluZyBmb3Igc29tZSBmbGV4aWJpbGl0eSBp bg0KICBhbGdvcml0aG1zIGEgbXVzdC4gV2UgdXNlIFAtMjU2IHRvZGF5IGJ1dCBtaWdodCB1c2Ug UC0zODQgb3Igb3RoZXINCiAgaGlnaGVyLW9yZGVyIGN1cnZlcyB0b21vcnJvdy4gVHJhbnNpdGlv biBwZXJpb2RzIG1hbmRhdGUgYWxnb3JpdGhtDQogIGZsZXhpYmlsaXR5Lg0KDQpXZSdyZSBsb29r aW5nIGZvcndhcmQgdG8gYXBwbHlpbmcgRURIT0MvT1NDT1JFIHRvIHNlY3VyZSBlbmQtdG8tZW5k IENvQVANCmFwcGxpY2F0aW9uIHRyYWZmaWMgdGhhdCBpcyB0cmFuc2l0aW5nIG11bHRpcGxlIHBy b3hpZXMuDQoNCkJlbg0KDQoNCg== From nobody Wed Nov 7 20:30:09 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 091481276D0 for ; Wed, 7 Nov 2018 20:30:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FYsWFmb__3JG for ; Wed, 7 Nov 2018 20:30:03 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EA28A124C04 for ; Wed, 7 Nov 2018 20:30:02 -0800 (PST) Received: from Jude (31.133.136.100) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 7 Nov 2018 20:25:07 -0800 From: Jim Schaad To: 'Mike Jones' , 'Roman Danyliw' , References: <359EC4B99E040048A7131E0F4E113AFC014C3FEDA1@marathon> In-Reply-To: Date: Thu, 8 Nov 2018 11:29:52 +0700 Message-ID: <002f01d4771b$b3d7be70$1b873b50$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0030_01D47756.603A6700" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQLl5VtG8ywWI2cfgujwss3yFCsDfQKGXvMAow401cA= Content-Language: en-us X-Originating-IP: [31.133.136.100] Archived-At: Subject: Re: [Ace] Summarizing WGLC discussion of draft-ietf-ace-cwt-proof-of-possession X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Nov 2018 04:30:08 -0000 ------=_NextPart_000_0030_01D47756.603A6700 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit I do not believe that the big comment that I have left has been addressed. From: Mike Jones Sent: Tuesday, November 6, 2018 3:43 PM To: Roman Danyliw ; ace@ietf.org Cc: Jim Schaad Subject: RE: Summarizing WGLC discussion of draft-ietf-ace-cwt-proof-of-possession Thanks for the useful summary, Roman. Replies are inline below prefixed by "Mike>". I've just published draft -04 , which contains the small number of changes described below. I believe that this completes resolution of the WGLC feedback. -----Original Message----- From: Ace > On Behalf Of Roman Danyliw Sent: Friday, July 13, 2018 12:56 AM To: ace@ietf.org Subject: [Ace] Summarizing WGLC discussion of draft-ietf-ace-cwt-proof-of-possession Hello! This email is intended to summarize the outcome of the WGLC on draft-ietf-ace-cwt-proof-of-possession-02 to date. This call was started on May 8 [1] and discussion occurred around two reviews of this -02 draft: ** Jim Schaad [Schaad], per https://www.ietf.org/mail-archive/web/ace/current/msg02747.html ** Roman Danyliw [Danyliw], per https://www.ietf.org/mail-archive/web/ace/current/msg02793.html After discussion on the mailing list, -03 of the draft was produced. Synthesizing the robust mailing list discussion, I see the following previously identified issues as still needing closure. The nature of the resolution varies. Given the volume of the discussion threads, I may have missed a response or failed to line up a text change in -03 to an issue. Please correct the status of any given point of feedback below. ==[ -03 contains changes, but ML discussion doesn't indicate closure ]== The following feedback was made about the -02 draft; changes to the relevant text was made in -03; but follow-up discussions on the mailing list doesn't indicate closure of the issue. If the originator of the feedback (it looks like only Jim for this section) feels the issue is closed, please speak up. [Schaad #6] Under what circumstances would a 'sub' claim be present and it is not the presenter? I can see that a holder of the key may be implicitly (or anonymously) named, but putting something in the subject field which is not identifying the presenter is something that I would reject without a good presentation of why in the document. Mike> The draft is written as it is to both provide non-normative guidance for expected simple use cases, while also allowing flexibility for more complicated use cases. In particular, in some profiles, the subject of the CWT and the presenter of the CWT for proof-of-possession purposes may be different parties. The party presenting the CWT to the recipient would be in possession of the CWT because it communicated with the issuer but the subject can be different than the presenter. That's why the subject language is written as a suggestion to profile writers, rather than normatively. I'll note that this also aligned with the treatment in RFC 7800, which this draft mirrors, by design. Jim> I am not going to fight this, but this type of behavior is what makes it really hard to try and do any sort of formal proofs with CWTs. One cannot model that the confirmation key is associated with a specific identity since that identity could be in any one of 3 different fields or implicit and one cannot know which of those is the correct one in the generic case. [Schaad #7] I would disagree with the claim that if the 'sub' claim is missing then it would normally be the issuer. For the world of IoT, I would expect that the subject would not be present because there is no need to identify the subject to the recipient. I.e. it is an anonymous subject. Mike> As with the previous issue, this section of the draft provides non-normative guidance for expected simple use cases, while not precluding profiling specifications from using the standard CWT claims in the manner that makes sense for their application. The "iss" language here also intentionally parallels the RFC 7800 treatment of this claim. Jim > See above [Schaad #8] It is not clear to me that either of the sub and iss claims would normally be present. They might be present but neither is needed. The subject can be anonymous and the issuer is identified by the key used to validate the security on the CWT. Mike> Your points above align with the design in the draft. That's why both "iss" and "sub" are optional. Their usage is profile-dependent, as it is in RFC 7800 (and CWT and JWT). Jim > See above [Schaad #9] In section 3.1 the first two sentences appear to be contradictory. Members are used to identify the POP key. Other things than a POP key can be used than a POP key. If they are used to identify the POP key- why would they not deal with the POP key? I think that you should do a separation and define the 'cnf' file which can hold any number of confirmation methods and then have a section on defining some POP cnf method field holders. Mike> The apparently contradictory language in draft -02 was reworded in draft -03 to address this comment. In particular, it now explicitly states that the "cnf" claim is used to carry confirmation methods, some of which identify proof-of-possession keys. This aligns both with RFC 7800 and the SAML 2.0 SubjectConfirmation element design (both by intentionally, since there's no need to reinvent the wheel when an existing design already works well). [Schaad #10] In section 3.1 P1 - I am not sure why you have something here about confirming the authenticity of the token as oppose to confirming the identity of the presenter. Why would that type of information be placed here where it is not useful.] Mike> The referenced text was reworked between draft -02 and -03. ==[ change was proposed, but not made ]== The draft editors proposed a changes on the mailing list to address the issue but it did not appear in the -03 draft. See the inline text of https://www.ietf.org/mail-archive/web/ace/current/msg02788.html for the proposed changes for [Schaad #12, 13, 16, 21]. [Schaad #12] I am unclear why there should be a restriction on the number of POP keys that can be in a 'cnf' object. If there are multiple keys, then any or all of them are of equal value in doing the confirmation. Just like there can be multiple confirmation methods and an application could choose to use any one of them. Mike> This was discussed in the working group meeting at IETF 102 in Montreal and on the list. The consensus appeared to be to stay with the existing design, which describes how to represent multiple PoP keys in the fourth paragraph of https://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possession-03#sectio n-3.1 (which again, is the same mechanism defined in RFC 7800). Jim> fine. [Schaad #13] Not sure which section this belongs in, but the use of an COSE_Encrypt0 would be one way to combat tracking of identities based on the key value being used. Different encrypted values could be sent to different servers and they would not necessarily know about use w/o internal collusion between them. Similar effect by using an encrypted CWT. Potentially requires use of TLS1.3 to protect the RPKs. YMMV Mike> The Privacy Considerations section talks about a common PoP key being a potential correlation handle and thus recommends that different PoP keys be used for different parties. Encrypting a common key could prevent observers unable to decrypt the messages from learning that they key is shared but would not prevent correlation by parties that cooperate to compare their PoP keys. So it's not clear to me that the suggestion above solves enough of the correlation problem that it's worth including in the draft. If you disagree, please suggest text for an additional Privacy Considerations paragraph. Jim> I'll look at this again, but I am not sure that this is the correct place to put it. [Schaad #16] Section 4 - Are audience restrictions not done in CWT? -- same issues as [Danyliw #12] Mike> All claims in CWTs (and JWTs) are optional, including the "aud" (audience) claim. Particular profiles can suggest and require particular claims, as this profile does. I have deleted the unnecessary middle sentence, which [Danyliw #12] correctly pointed out broke up the logical flow of the exposition. Thanks for pointing this out. [Schaad #21] Section 6.2.2 - the value type is not an array for COSE_Encrypt or COSE_Encyrpt0, these are the values. As written I could put in an array which is not one of those two structures and be valid. Ditto for COSE_Key, although w/ slightly less justification. Mike> Thanks. I updated these value type declarations to use the actual required COSE_* types. See the inline text of https://www.ietf.org/mail-archive/web/ace/current/msg02802.html for the proposed change for [Danyliw #7]. [Danyliw #7] Page 6, Section 3.3, The sentence "The COSE_Key could, for instance, be encrypted using a COSE_Encrypt0 representation using the AES-CCM-16-64-128 algorithm" seems out of place. What is this text explaining relative to the examples? Mike> Thanks. I deleted the confusing and unnecessary sentence. ==[ face to face discussion required ]== Certain issues were deemed sufficiently complex to required face-to-face discussion at IETF 102. [Schaad #14] I have real problems w/ the use of a KID for POP identification. It may identify the wrong key or, if used for granting access, may have problems w/ identity collisions. These need to be spelt out someplace to help people tracking down questions of why can't I verify w/ this CWT, I know it's right. -- See https://www.ietf.org/mail-archive/web/ace/current/msg02853.html for more detailed discussion -- related issue to [Danyliw #8]. Mike> The paragraph sentence of the Operational Considerations section at https://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possession-03#sectio n-6 was added in draft -03 to address exactly this issue, after extensive discussion and wordsmithing on the mailing list. Jim> During the last F2F meeting I sent a paragraph which I consider to be the minimal change which would be required. Regards, Roman [1] https://www.ietf.org/mail-archive/web/ace/current/msg02744.html _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace Thanks again, -- Mike ------=_NextPart_000_0030_01D47756.603A6700 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

I do not believe that the big comment that I have left = has been addressed.

 

From: Mike = Jones <Michael.Jones@microsoft.com>
Sent: Tuesday, = November 6, 2018 3:43 PM
To: Roman Danyliw = <rdd@cert.org>; ace@ietf.org
Cc: Jim Schaad = <ietf@augustcellars.com>
Subject: RE: Summarizing WGLC = discussion of = draft-ietf-ace-cwt-proof-of-possession

 

Thanks for the useful summary, Roman.  = Replies are inline below prefixed by “Mike>”.  = I’ve just published draft -04, which contains the small number of changes = described below.  I believe that this completes resolution of the = WGLC feedback.

 

-----Original Message-----
From: Ace <ace-bounces@ietf.org> On = Behalf Of Roman Danyliw
Sent: Friday, July 13, 2018 12:56 AM
To: = ace@ietf.org
Subject: [Ace] = Summarizing WGLC discussion of = draft-ietf-ace-cwt-proof-of-possession

 

Hello!

 

This = email is intended to summarize the outcome of the WGLC on = draft-ietf-ace-cwt-proof-of-possession-02 to date.  This call was = started on May 8 [1] and discussion occurred around two reviews of this = -02 draft:

 

** Jim Schaad [Schaad], per = https://www.ietf.org/mail-archive/web/ace/= current/msg02747.html

** Roman Danyliw [Danyliw], per = https://www.ietf.org/mail-archive/web/ace/= current/msg02793.html

 

After = discussion on the mailing list, -03 of the draft was produced.  =

 

Synthesizing the robust mailing list discussion, I = see the following previously identified issues as still needing = closure.  The nature of the resolution varies.  Given the = volume of the discussion threads, I may have missed a response or failed = to line up a text change in -03 to an issue.  Please correct the = status of any given point of feedback below.

 

=3D=3D[ -03 contains changes, but ML discussion = doesn't indicate closure ]=3D=3D The following feedback was made about = the -02 draft; changes to the relevant text was made in -03; but = follow-up discussions on the mailing list doesn't indicate closure of = the issue.  If the originator of the feedback (it looks like only = Jim for this section) feels the issue is closed, please speak = up.

 

[Schaad #6]  Under what circumstances would a = 'sub' claim be present and it is not the presenter?  I can see that = a holder of the key may be implicitly (or anonymously)  named, but = putting something in the subject field which is not identifying the = presenter is something that I would reject without a good presentation = of why in the  document.

 

Mike> The draft is = written as it is to both provide non-normative guidance for expected = simple use cases, while also allowing flexibility for more complicated = use cases.  In particular, in some profiles, the subject of the CWT = and the presenter of the CWT for proof-of-possession purposes may be = different parties.  The party presenting the CWT to the recipient = would be in possession of the CWT because it communicated with the = issuer but the subject can be different than the presenter.  = That’s why the subject language is written as a suggestion to = profile writers, rather than normatively.  I’ll note that = this also aligned with the treatment in RFC 7800, which this draft = mirrors, by design.

 

Jim> I am not going to fight this, but this type = of behavior is what makes it really hard to try and do any sort of = formal proofs with CWTs.  One cannot model that the confirmation = key is associated with a specific identity since that identity could be = in any one of 3 different fields or implicit and one cannot know which = of those is the correct one in the generic case.

 

[Schaad #7]  I would disagree with the claim = that if the 'sub' claim is missing then it would normally be the = issuer.  For the world of IoT, I would expect that the subject = would not be present because there is no need to identify the subject to = the recipient.  I.e. it is an anonymous subject.

 

Mike> As with the = previous issue, this section of the draft provides non-normative = guidance for expected simple use cases, while not precluding profiling = specifications from using the standard CWT claims in the manner that = makes sense for their application.  The “iss” language = here also intentionally parallels the RFC 7800 treatment of this = claim.

 

Jim = > See above

 

[Schaad #8]  It is not clear to me that either = of the sub and iss claims would normally be present.  They might be = present but neither is needed.  The subject can be anonymous and = the issuer is identified by the key used to validate the security on the = CWT.

 

Mike> Your points = above align with the design in the draft.  That’s why both = “iss” and “sub” are optional.  Their usage = is profile-dependent, as it is in RFC 7800 (and CWT and = JWT).

 

Jim = > See above

 

[Schaad #9]  In section 3.1 the first two = sentences appear to be contradictory.  Members are used to identify = the POP key.  Other things than a POP key can be used than a POP = key.  If they are used to identify the POP key- why would they not = deal with the POP key?  I think that you should do a separation and = define the 'cnf' file which can hold any number of confirmation methods = and then have a section on defining some POP cnf method field = holders.

 

Mike> The = apparently contradictory language in draft -02 was reworded in draft -03 = to address this comment.  In particular, it now explicitly states = that the “cnf” claim is used to carry confirmation methods, = some of which identify proof-of-possession keys.  This aligns both = with RFC 7800 and the SAML 2.0 SubjectConfirmation element design (both = by intentionally, since there’s no need to reinvent the wheel when = an existing design already works well).

 

[Schaad #10]  In section 3.1 P1 - I am not = sure why you have something here about confirming the authenticity of = the token as oppose to confirming the identity of the presenter.  = Why would that type of information be placed here where it is not = useful.]

 

Mike> The = referenced text was reworked between draft -02 and = -03.

 

=3D=3D[ change was proposed, but not made ]=3D=3D = The draft editors proposed a changes on the mailing list to address the = issue but it did not appear in the -03 draft. 

 

See = the inline text of = https://www.ietf.org/mail-archive/web/ace/= current/msg02788.html for the proposed changes for [Schaad = #12, 13, 16, 21].

 

[Schaad #12] I am unclear why there should be a = restriction on the number of POP keys that can be in a 'cnf' = object.  If there are multiple keys, then any or all of them are of = equal value in doing the confirmation.  Just like there can be = multiple confirmation methods and an application could choose to use any = one of them.

 

Mike> This was = discussed in the working group meeting at IETF 102 in Montreal and on = the list.  The consensus appeared to be to stay with the existing = design, which describes how to represent multiple PoP keys in the fourth = paragraph of https://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of= -possession-03#section-3.1 (which = again, is the same mechanism defined in RFC = 7800).

 

Jim> fine.

 

[Schaad #13]  Not sure which section this = belongs in, but the use of an COSE_Encrypt0 would be one way to combat = tracking of identities based on the key value being used.  = Different encrypted values could be sent to different servers and they = would not necessarily know about use w/o internal collusion between = them.  Similar effect by using an encrypted CWT.  Potentially = requires use of TLS1.3 to protect the RPKs.  YMMV

 

Mike> The Privacy Considerations section = talks about a common PoP key being a potential correlation handle and = thus recommends that different PoP keys be used for different = parties.  Encrypting a common key could prevent observers unable to = decrypt the messages from learning that they key is shared but would not = prevent correlation by parties that cooperate to compare their PoP = keys.  So it’s not clear to me that the suggestion above = solves enough of the correlation problem that it’s worth including = in the draft.  If you disagree, please suggest text for an = additional Privacy Considerations paragraph.

 

Jim> I’ll look at this again, but I am not = sure that this is the correct place to put it.

 

[Schaad #16] Section 4 - Are audience restrictions = not done in CWT?  -- same issues as [Danyliw #12]

 

Mike> All claims in CWTs (and JWTs) are = optional, including the “aud” (audience) claim.  = Particular profiles can suggest and require particular claims, as this = profile does.  I have deleted the unnecessary middle sentence, = which [Danyliw #12] correctly pointed out broke up the logical flow of = the exposition.  Thanks for pointing this = out.

 

[Schaad #21] Section 6.2.2 - the value type is not = an array for COSE_Encrypt or COSE_Encyrpt0, these are the values.  = As written I could put in an array which is not one of those two = structures and be valid.   Ditto for COSE_Key, although w/ = slightly less justification.

 

Mike> Thanks.  I updated these value = type declarations to use the actual required COSE_* = types.

 

See = the inline text of = https://www.ietf.org/mail-archive/web/ace/= current/msg02802.html  for the proposed change for = [Danyliw #7].

 

[Danyliw #7] Page 6, Section 3.3, The sentence = "The COSE_Key could, for instance, be encrypted using a = COSE_Encrypt0 representation using the AES-CCM-16-64-128 algorithm" = seems out of place.  What is this text explaining relative to the = examples?

 

Mike> = Thanks.  I deleted the confusing and unnecessary = sentence.

 

=3D=3D[ face to face discussion required ]=3D=3D = Certain issues were deemed sufficiently complex to required face-to-face = discussion at IETF 102.

 

[Schaad #14]  I have real problems w/ the use = of a KID for POP identification.  It may identify the wrong key or, = if used for granting access, may have problems w/ identity = collisions.  These need to be spelt out someplace to help people = tracking down questions of why can't I verify w/ this CWT, I know it's = right. -- See = https://www.ietf.org/mail-archive/web/ace/= current/msg02853.html for more detailed discussion -- related = issue to [Danyliw #8].

 

Mike> The paragraph sentence of the = Operational Considerations section at https://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-p= ossession-03#section-6 was added in draft -03 to address exactly = this issue, after extensive discussion and wordsmithing on the mailing = list.

 

Jim> During the last F2F meeting I sent a = paragraph which I consider to be the minimal change which would be = required.

 

Regards,

Roman

 

[1] = https://www.ietf.org/mail-archive/web/ace/= current/msg02744.html

 

 

_______________________________________________=

Ace mailing list

Ace@ietf.org

https://www.ietf.org/mailman/listinfo/ace<= /span>

 

        &= nbsp;           &n= bsp;           &nb= sp;           &nbs= p;          Thanks = again,

        &= nbsp;           &n= bsp;           &nb= sp;           &nbs= p;          -- = Mike

 

------=_NextPart_000_0030_01D47756.603A6700-- From nobody Wed Nov 7 22:14:16 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF43812D4ED for ; Wed, 7 Nov 2018 22:14:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.77 X-Spam-Level: X-Spam-Status: No, score=-4.77 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.47, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com header.b=gaJjjRZK; dkim=pass (1024-bit key) header.d=ericsson.com header.b=FgvS580u Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id euCRfWjZ7P83 for ; Wed, 7 Nov 2018 22:14:12 -0800 (PST) Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 26BF6130E10 for ; Wed, 7 Nov 2018 22:14:02 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1541657641; x=1544249641; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=q/woTtqoXBSQes3L8soecOucMmB5Unc8DWorxrZhp0Q=; b=gaJjjRZKyhkmQzlA1xGZ8R2ErnnomOREA/gvSBL1qZPDmE3jWFhReVSHdWv12wLA 9ksRw4HPHBkKJr+cl6r1qq2HC2TtXKUUNFI0bAW1XQevCx1o2/xNTSW8MrVL8DQf 7JjVJeyKbd7O1tyd/Q4Sve5D2+JEx+H/F9vciBVO1PQ=; X-AuditID: c1b4fb30-39c4e9e0000043c4-09-5be3d42999fc Received: from ESESSMB501.ericsson.se (Unknown_Domain [153.88.183.119]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id 08.97.17348.924D3EB5; Thu, 8 Nov 2018 07:14:01 +0100 (CET) Received: from ESESBMB502.ericsson.se (153.88.183.169) by ESESSMB501.ericsson.se (153.88.183.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Thu, 8 Nov 2018 07:13:59 +0100 Received: from EUR03-DB5-obe.outbound.protection.outlook.com (153.88.183.157) by ESESBMB502.ericsson.se (153.88.183.169) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3 via Frontend Transport; Thu, 8 Nov 2018 07:13:59 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=q/woTtqoXBSQes3L8soecOucMmB5Unc8DWorxrZhp0Q=; b=FgvS580u8wlvOL5WLHlpoIdWtoCgmwWtt3o6I4gCeEs5IAeL4NWEgmKpK7inzsuhFBsj2IgikbRRPbyHvEYG+2MV1tloPClvtatFaHBxzhOHlk0dMgVW/A+C2gx1DnNtyZWp077Emg3jIAMRlZkt+FTzcXzk2dukEdPFFBRkZNY= Received: from HE1PR07MB4169.eurprd07.prod.outlook.com (20.176.166.22) by HE1PR07MB1658.eurprd07.prod.outlook.com (10.166.124.136) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1294.16; Thu, 8 Nov 2018 06:13:57 +0000 Received: from HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::fcb5:ca45:9e56:1910]) by HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::fcb5:ca45:9e56:1910%2]) with mapi id 15.20.1294.034; Thu, 8 Nov 2018 06:13:57 +0000 From: John Mattsson To: "Owen Friel (ofriel)" , "salvador.p.f@um.es" , "kaduk@mit.edu" , "ace@ietf.org" Thread-Topic: [Ace] EDHOC standardization Thread-Index: AQHUcrwmx6N1o4AsH0uz6RMW3Bvpj6VBbnUAgAQRK4A= Date: Thu, 8 Nov 2018 06:13:57 +0000 Message-ID: <3F39B50B-B273-4411-B828-C504DE6B139B@ericsson.com> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.11.0.180909 authentication-results: spf=none (sender IP is ) smtp.mailfrom=john.mattsson@ericsson.com; x-originating-ip: [90.236.0.52] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; HE1PR07MB1658; 6:42GzKteK9V2tUvoiowbC8VADY00/aI0DqNFSF3fLK/TFt+3QaGcwKecVfdVAXQTNkq643LVkuIEIN9TTLI+j+Kb8HBcJf2JjxXNtZtbowgb8nPDyen2laj+WUKb5/dsdA5dRpvDCN1p3pqDWQWmWuWU6k3ISCjxUBUW+5C5QzyLAJYvhAI8u8fBweFXomkNoZaJvFnwEL2nBd6+peHSvYSiHuuEP5SXBnegq+KGtaDYM0y0UkoNojimoPNoQ8Mam1n8fydiD2Oia4XtaZQcgPZAW36jJND7HfXlQnJ6FYZfHtVLaJEzjt9op2JHzwtZom3kZOogbVMfs3DhOxB+VkYFpyg77vWv2FgcPyQ8S792+VnCuc+daErLycjYaMzNGcjaEGb8rKc+YzZKtBfSDJDcYC6Neh4bMN6pE4Gx9AhN1UewrkLW7hof0lUeO80BzaDornZLVigqwNLzLJwkJeQ==; 5:kpCJ0dtyMQrxGYRhSggKVp5A/debPRhx6tMA4vwJNY4PwUV8yTQUMXrD+/fO+UMaCMNYtmapteGcNOOG9e4tJ0EiQXSAuJIeB4Q7ZAxQmFYW13E3ng/eS3i04I8M6fZdrRVPuvfOa3RjI/u+8b6C/baX4apvlpfCbJGPu0byTmk=; 7:k7A2+RQ5Uxprzvcps/778YYh78WW8r6bG28RRt4QKbYXhEEi2pXfmk4708TV9i2e7UiE3rG3Oc2qdNEM/wemXjEvfbB6dhWsoQDimPWianVvzJYVMgNh2T6AjyOfUd/nBBmYHVNSrqrU4Mj23pV4Kg== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 06b99e30-2f80-4ae3-ded8-08d645415e45 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(5600074)(711020)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:HE1PR07MB1658; x-ms-traffictypediagnostic: HE1PR07MB1658: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(240460790083961)(120809045254105)(163750095850)(5213294742642)(192374486261705)(95692535739014)(248295561703944)(37575265505322); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3231382)(944501410)(52105095)(3002001)(10201501046)(93006095)(93001095)(148016)(149066)(150057)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123564045)(20161123558120)(20161123562045)(201708071742011)(7699051)(76991095); SRVR:HE1PR07MB1658; BCL:0; PCL:0; RULEID:; SRVR:HE1PR07MB1658; x-forefront-prvs: 0850800A29 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(396003)(366004)(136003)(376002)(346002)(13464003)(189003)(199004)(52314003)(252514010)(86362001)(305945005)(81166006)(8676002)(110136005)(8936002)(7736002)(106356001)(81156014)(5660300001)(58126008)(486006)(256004)(3846002)(14444005)(476003)(6306002)(2906002)(2201001)(102836004)(6246003)(2900100001)(53936002)(2171002)(44832011)(6116002)(6512007)(316002)(2616005)(76176011)(11346002)(99286004)(446003)(25786009)(71200400001)(33656002)(2501003)(97736004)(68736007)(478600001)(82746002)(229853002)(83716004)(36756003)(66574009)(71190400001)(966005)(14454004)(66066001)(6486002)(186003)(26005)(105586002)(53546011)(6436002)(6506007); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB1658; H:HE1PR07MB4169.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: nYeG6eDV1SewVTtLrdeUqd+0I3T+yWFmnia04BloYP4cue+YR6/xbQZSpx7LW/hDxD4rBZMmPm4Il7todwxq1IITHugeIJQ7PSeshvolPBuDvd17GezeKXORX2XBa6XLIMHuRGYz3ArrrqUB6JjuyMdUBCsWVRRZmsb5CDD6KL6yyiDOuo/hrCfIAuhsmaggIad3V4qU9CZwzvxybSmXsCQWBH5uXCx9hJUqo+ijAnBiajecpgkrtieT80xg4ITTVbwivuK/qnCk22gIaiXNBmRYYz6ZgKimxOkUG/CPZ9h0iuPzh5A0itv5n8VRn2tzKA9IAcJZQ345EZFB7q7mtR9cPHxGIotSpD5FBrbfOck= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <777D049D4D1F9C4ABB828E37BD686AEF@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 06b99e30-2f80-4ae3-ded8-08d645415e45 X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Nov 2018 06:13:57.4981 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB1658 X-OriginatorOrg: ericsson.com X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrGKsWRmVeSWpSXmKPExsUyM2J7ua7mlcfRBr+/cll8/9bDbLF840wm i1NXprBZNK+6yu7A4jHl90ZWjyVLfjJ5NJ05yuxx7mUbSwBLFJdNSmpOZllqkb5dAlfGtoUL WAreBFVsevWRsYHxTkAXIyeHhICJxIfPz5hAbCGBI4wSXz5adjFyAdlfGSUeP+tih3AWM0ls /buSEcRhEZjALHHv2hUmiMxkJok5S19AOQ8ZJU79Pc8OMoxNwEBi7p4GNpCEiMBsRomLc16D JYQFNCQ2dm0Fs0UENCWmvvjIBGFbSXy51wIWZxFQkVg24RRYnFfAXqJx30s2iAurJO5eXAwW 5xRwlbh09wNYPaOAmMT3U2vA4swC4hK3nsxngvhOQGLJnvPMELaoxMvH/1hBbFEBfYn5DzpY IXpjJVpbp7NC1MhLnDkzF8qWlbg0vxvsZwmBa2wSrdM+QyV0JT5MnQo11Fdiz9k17BBFxxkl 7u/6DJTgAHK0JJZsgzoiW+LulrlQg1YzSsxb1MUOkZCTWNX7kGUCo9EsJIfPAmpnBgbM+l36 EGEPiQ/vTjFC2IoSU7ofss8Ch4ugxMmZT1gWMLKuYhQtTi1Oyk03MtJLLcpMLi7Oz9PLSy3Z xAhMPQe3/DbYwfjyueMhRgEORiUe3nlHHkcLsSaWFVfmHmKU4GBWEuH1OQYU4k1JrKxKLcqP LyrNSS0+xCjNwaIkzmvhtzlKSCA9sSQ1OzW1ILUIJsvEwSnVwNgsX8h0MuA7V/Bzj9tr/q87 +e9ezHO/T2vyHBgmtD1btr7/w6epjvbTXsyaubpNN187aa/de+vrcQmPZ/4TeLBrhXmwcKnm rOyavBOvmJQ139XW7f/V/tRb7qd9YZ1wcO+kEz6OnhoT27mmtXv3eS52eKfGPO/x5orpTfXX 7uSenjx/9f1HkyyVWIozEg21mIuKEwHYWtVjOQMAAA== Archived-At: Subject: Re: [Ace] EDHOC standardization X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Nov 2018 06:14:15 -0000 SGkgT3dlbiwNCg0KSW4gY29uc3RyYWluZWQgcmFkaW8gZGVwbG95bWVudHMgd2hlcmUgdGhyb3Vn aHB1dCBpcyB0aGUgbGltaXRpbmcgZmFjdG9yLCB0aGUgbnVtYmVyIG9mIGJ5dGVzIGluIHRoZSBi b290c3RyYXBwaW5nIGNhbiBtYWtlIGEgaHVnZSBkaWZmZXJlbmNlLg0KDQpUaGUgbnVtYmVyIG9m IGJ5dGVzIGlzIGRpcmVjdGx5IHJlbGF0ZWQgdG8gdGhlIG1pbmltdW0gbnVtYmVyIG9mIGZyYW1l cyAoaW4gNnRpc2NoIGVhY2ggZnJhbWUgY2FuIHR5cGljYWxseSBjYXJyeSBhcm91bmQgODAgYnl0 ZXMgb2YgcGF5bG9hZCkgYW5kIHRoZXJlZm9yZSB0aGUgbnVtYmVyIG9mIHJvdW5kLXRyaXBzIGFu ZCB0aGUgdGltZSB0YWtlbiB0byBib290c3RyYXAgYSBuZXcgZGV2aWNlLg0KDQpJZiB5b3UgaGF2 ZSBtdWx0aXBsZSBkZXZpY2VzIGJvb3RzdHJhcHBpbmcgYXQgdGhlIHNhbWUgdGltZSwgd2hpY2gg aXMgb2Z0ZW4gdGhlIGNhc2UsIHRoZSByZWxhdGlvbiBiZXR3ZWVuIHRoZSBudW1iZXIgb2YgYnl0 ZXMsIHRoZSBudW1iZXIgb2YgZGV2aWNlcywgYW5kIHRoZSBib290c3RyYXBwaW5nIHRpbWUgZm9y IHRoZSB3aG9sZSBzeXN0ZW0gaXMgbm9uLWxpbmVhciBhbmQgZXZlbiB3aXRoIGEgbW9kZXJhdGUg bnVtYmVyIG9mIGRldmljZXMsIHlvdSBxdWlja2x5IHN0YXJ0IHRvIHNlZSBib290c3RyYXBwaW5n IHRha2luZyBmb3JldmVyIG9yIG5vdCBmaW5pc2hpbmcgYXQgYWxsLg0KDQpDaGVlcnMsDQpKb2hu DQoNCu+7vy0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiAiT3dlbiBGcmllbCAob2Zy aWVsKSIgPG9mcmllbEBjaXNjby5jb20+DQpEYXRlOiBNb25kYXksIDUgTm92ZW1iZXIgMjAxOCBh dCAxODowNw0KVG86IEpvaG4gTWF0dHNzb24gPGpvaG4ubWF0dHNzb25AZXJpY3Nzb24uY29tPiwg InNhbHZhZG9yLnAuZkB1bS5lcyIgPHNhbHZhZG9yLnAuZkB1bS5lcz4sICJrYWR1a0BtaXQuZWR1 IiA8a2FkdWtAbWl0LmVkdT4sICJhY2VAaWV0Zi5vcmciIDxhY2VAaWV0Zi5vcmc+DQpTdWJqZWN0 OiBSRTogW0FjZV0gRURIT0Mgc3RhbmRhcmRpemF0aW9uDQoNCkhpIEpvaG4sIFNhbHZhZG9yLA0K QXMgRURIT0MgaXMgdXNlZCBwdXJlbHkgZm9yIGtleSBkZXJpdmF0aW9uIHdpdGgga2V5IGV4cG9y dGluZyB0byB0aGUgYXBwbGljYXRpb24gZm9yIGNpcGhlcnRleHQgZXhjaGFuZ2UsIGRvZXMgdGhl IGxvd2VyIGJ5dGUgY291bnQgb3ZlcmhlYWQgb2YgdGhlIEVESE9DIGhhbmRzaGFrZSB2cyBEVExT MS4zIHJlYWxseSBtYXR0ZXIgdGhhdCBtdWNoPyAgT2YgY291cnNlIHRoYXQgZGVwZW5kcyBvbiB0 aGUgYW1vdW50IG9mIGFwcGxpY2F0aW9uIGNpcGhlcnRleHQsIGJ1dCBpZiB0aGVyZSBpcyBhIHN1 ZmZpY2llbnQgbnVtYmVyIG9mIGNpcGhlcnRleHQgYnl0ZXMgdG8gYmUgZXhjaGFuZ2VkIGluIG9u ZSBzZXNzaW9uLCB0aGVuIERUTFMgKyBrZXkgZXhwb3J0aW5nIG1heSBtYWtlIG1vcmUgc2Vuc2Ug dGhhbiBFREhPQyArIGtleSBleHBvcnRpbmcuDQpPd2VuDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2Fn ZS0tLS0tDQpGcm9tOiBBY2UgPGFjZS1ib3VuY2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YgSm9o biBNYXR0c3Nvbg0KU2VudDogRnJpZGF5IDIgTm92ZW1iZXIgMjAxOCAxNDo1Ng0KVG86IHNhbHZh ZG9yLnAuZkB1bS5lczsga2FkdWtAbWl0LmVkdTsgYWNlQGlldGYub3JnDQpTdWJqZWN0OiBSZTog W0FjZV0gRURIT0Mgc3RhbmRhcmRpemF0aW9uDQoNCkhpIEJlbmphbWluLCBTYWx2YWRvcg0KDQpX aGlsZSBEVExTIDEuMyBoYXZlIGRvbmUgYSB2ZXJ5IGdvb2Qgam9iIG9mIGxvd2VyaW5nIHRoZSBv dmVyaGVhZCBvZiB0aGUgcmVjb3JkIGxheWVyIHdoZW4gYXBwbGljYXRpb24gZGF0YSBpcyBzZW50 IChzZWUgZS5nLiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1sd2lnLXNl Y3VyaXR5LXByb3RvY29sLWNvbXBhcmlzb24tMDEgZm9yIGEgY29tcGFyaXNvbiBiZXR3ZWVuIGRp ZmZlcmVudCBwcm90b2NvbHMpLCBJIGRvIG5vdCB0aGluayB0aGUgaGFuZHNoYWtlIHByb3RvY29s IGlzIG11Y2ggbGVhbmVyIChpcyBpdCBsZWFuZXIgYXQgYWxsPykuDQoNCldlIHRyaWVkIHRvIG1h a2UgYW4gZmFpciBjb21wYXJpc29uIGJldHdlZW4gRURIT0MgYW5kIFRMUyAxLjMgaW4gdGhlIHBy ZXNlbnRhdGlvbiBhdCBJRVRGIDEwMSAoc2VlIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv bWVldGluZy8xMDEvbWF0ZXJpYWxzL3NsaWRlcy0xMDEtYWNlLWtleS1leGNoYW5nZS13LW9zY29y ZS0wMCkuIFNpbmNlIHRoZW4sIHdlIGhhdmUgc2lnbmlmaWNhbnRseSBvcHRpbWl6ZWQgdGhlIGVu Y29kaW5nIGluIEVESE9DIGFuZCB0aGUgdXBjb21pbmcgdmVyc2lvbiAoLTExKSBpcyBleHBlY3Rl ZCB0byBoYXZlIHRoZSBmb2xsb3dpbmcgbWVzc2FnZSBzaXplcy4NCg0KICAgQXV0aC4gICAgICAg ICAgICAgICBQU0sgICAgICAgUlBLICAgICAgIHg1dCAgICAgeDVjaGFpbg0KICAgLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0NCiAgIEVESE9DIG1lc3NhZ2VfMSAgICAgIDQzICAgICAgICAzOCAgICAgICAgMzggICAgICAg IDM4DQogICBFREhPQyBtZXNzYWdlXzIgICAgICA0NyAgICAgICAxMjEgICAgICAgMTI3ICAgICAg IDExNyArIENlcnRpZmljYXRlIGNoYWluDQogICBFREhPQyBtZXNzYWdlXzMgICAgICAxMiAgICAg ICAgODYgICAgICAgIDkyICAgICAgICA4MiArIENlcnRpZmljYXRlIGNoYWluDQogICAtLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLQ0KICAgVG90YWwgICAgICAgICAgICAgICAxMDIgICAgICAgMjQ1ICAgICAgIDI1NyAgICAg ICAyMzcgKyBDZXJ0aWZpY2F0ZSBjaGFpbnMNCg0KQXMgU2FsdmFkb3Igd3JpdGVzLCB0aGUgaGFu ZHNoYWtlcyBpbiBUTFMgMS4zIGFuZCBEVExTIDEuMyBhcmUgYmFzaWNhbGx5IHRoZSBzYW1lLCBz byB0aGUgbnVtYmVycyBwcmVzZW50ZWQgYXQgSUVURiAxMDEgc2hvdWxkIGJlIGEgZ29vZCBlc3Rp bWF0ZSBhbHNvIGZvciBEVExTIDEuMy4NCg0KICAgQXV0aC4gICAgICAgICAgICAgICAgUFNLICAg ICAgIFJQSw0KICAgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiAgIChEKVRMUyBtZXNzYWdlXzEgICAgIDE0MiAgICAg ICAxMDcNCiAgIChEKVRMUyBtZXNzYWdlXzIgICAgIDEzNSAgICAgICAyNjQNCiAgIChEKVRMUyBt ZXNzYWdlXzMgICAgICA1MSAgICAgICAxNjcNCiAgIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQogICBUb3RhbCAgICAg ICAgICAgICAgICAzMjggICAgICAgNTM4DQoNClRoZSBudW1iZXJzIGFib3ZlIGluY2x1ZGUgRUNE SEUuIEZvciBoYW5kc2hha2UgbWVzc2FnZXMsIG15IHVuZGVyc3RhbmRpbmcgaXMgdGhhdCB0aGUg RFRMUyAxLjMgYW5kIFRMUyAxLjMgcmVjb3JkIGxheWVyIGhhdmUgZXhhY3RseSB0aGUgc2FtZSBz aXplLg0KDQpDaGVlcnMsDQpKb2huDQoNCj4gU2FsdmFkb3IgUMOpcmV6IHdyb3RlOg0KDQpIaSBC ZW5qYW1pbiwNCg0KCW91ciByZXN1bHRzIGFyZSBpbmNsdWRlZCBpbiBhIHBhcGVyLCB3aGljaCBp cyB1bmRlciByZXZpZXcgZm9yIGl0cyBwdWJsaWNhdGlvbi4NCg0KUmVnYXJkaW5nIHRoZSBjb21w YXJpc29uIGJldHdlZW4gRURIT0MgYW5kIERUTFMsIHdlIGhhdmUgZW1wbG95ZWQgdGhlIHRpbnlk dGxzIGxpYnJhcnkgWzFdIHNpbmNlIGl0IGlzIHdpZGVseSB1c2VkIHRvIGRlcGxveSBEVExTIGlu IGRpZmZlcmVudCBJb1Qgc2NlbmFyaW9zLiBOb3RlIHRoYXQsIGF0IHRoZSBtb21lbnQgaW4gd2hp Y2ggdGhlIHBhcGVyIHdhcyB3cml0dGVuLCBzdWNoIGxpYnJhcnkgZGlkIG5vdCBvZmZlciBzdXBw b3J0IGZvciB2ZXJzaW9uIDEuMy4gQW55d2F5LCBEVExTIDEuMyBpcyBlc3NlbnRpYWxseSB1c2lu ZyB0aGUgc2FtZSBoYW5kc2hha2UgYXMgVExTIDEuMyAoIkRUTFMgMS4zIHJlLXVzZXMgdGhlIFRM UyAxLjMgaGFuZHNoYWtlIG1lc3NhZ2VzIGFuZCBmbG93c+KAnSBbMl0pLiBNb3Jlb3ZlciwgYXV0 aG9ycyBvZiBFREhPQyBzdGF0ZSB0aGF0IHRoZSBtZXNzYWdlIG92ZXJoZWFkIG9mIFRMUyAxLjMg aXMgbXVjaCBoaWdoZXIgdGhhbiBFREhPQyAoIkNvbXBhcmVkIHRvIHRoZSBUTFMgMS4zIGhhbmRz aGFrZSB3aXRoIEVDREgsIHRoZSBudW1iZXIgb2YgYnl0ZXMgaW4gRURIT0MgaXMgbGVzcyB0aGFu IDEvMyB3aGVuIFBTSyBhdXRoZW50aWNhdGlvbiBpcyB1c2VkIGFuZCBsZXNzIHRoYW4gMS8yIHdo ZW4gUlBLIGF1dGhlbnRpY2F0aW9uIGlzIHVzZWQsIHNlZSBBcHBlbmRpeCBF4oCdIFszLTRdKS4g QWNjb3JkaW5nbHksIHdlIGNhbiBjbGFpbSB0aGF0IGl0IGlzIGV4cGVjdGVkIHRoYXQgRFRMUyAx LjMgcGVyZm9ybXMgd29yc2UgdGhhbiBFREhPQyAoYXQgbGVhc3QsIHJlZ2FyZGluZyBtZXNzYWdl IG92ZXJoZWFkKSBmb3IgdGhlIHR5cGUgb2YgY29uc3RyYWluZWQgaW1wbGVtZW50YXRpb25zIHdl IGFyZSBsb29raW5nIGF0Lg0KDQpbMV0gaHR0cHM6Ly9wcm9qZWN0cy5lY2xpcHNlLm9yZy9wcm9q ZWN0cy9pb3QudGlueWR0bHMgPGh0dHBzOi8vcHJvamVjdHMuZWNsaXBzZS5vcmcvcHJvamVjdHMv aW90LnRpbnlkdGxzPg0KWzJdIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRm LXRscy1kdGxzMTMtMjkjc2VjdGlvbi01IDxodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJh ZnQtaWV0Zi10bHMtZHRsczEzLTI5I3NlY3Rpb24tNT4NClszXSBodHRwczovL3Rvb2xzLmlldGYu b3JnL2h0bWwvZHJhZnQtc2VsYW5kZXItYWNlLWNvc2UtZWNkaGUtMTAjc2VjdGlvbi0xIDxodHRw czovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtc2VsYW5kZXItYWNlLWNvc2UtZWNkaGUtMTAj c2VjdGlvbi0xPg0KWzRdIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1zZWxhbmRl ci1hY2UtY29zZS1lY2RoZS0xMCNhcHBlbmRpeC1FLjQgPGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcv aHRtbC9kcmFmdC1zZWxhbmRlci1hY2UtY29zZS1lY2RoZS0xMCNhcHBlbmRpeC1FLjQ+DQoNCktp bmQgcmVnYXJkcywNCg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0NClNhbHZhZG9yIFDDqXJleg0KUGhE IHN0dWRlbnQgaW4gIkZ1dHVyZSBJbnRlcm5ldCBOZXR3b3JrczogSW5mcmFzdHJ1Y3R1cmUgYW5k IFNlY3VyaXR54oCdDQpGYWN1bHR5IG9mIENvbXB1dGVyIFNjaWVuY2UgLSBVbml2ZXJzaXR5IG9m IE11cmNpYQ0KRW1haWw6IHNhbHZhZG9yLnAuZkB1bS5lcw0KU2t5cGU6IHNhbHZhLnBmDQoNCj4g T24gMzEgT2N0IDIwMTgsIGF0IDE2OjQzLCBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT47 IHdyb3RlOg0KPiANCj4gSGkgU2FsdmFkb3IsDQo+IA0KPiBPbiBXZWQsIE9jdCAzMSwgMjAxOCBh dCAxMDoxMjo1NEFNICswMTAwLCBTYWx2YWRvciBQw6lyZXogd3JvdGU6DQo+PiBIZWxsbyBhdXRo b3JzIG9mIEVESE9DLA0KPj4gDQo+PiAJd2UgaGF2ZSBpbXBsZW1lbnRlZCBhIHByZXZpb3VzIHZl cnNpb24gb2YgRURIT0MgKGRyYWZ0LXNlbGFuZGVyLWFjZS1jb3NlLWVjZGhlKSBhbmQgd2FudCB0 byBzaGFyZSBzb21lIGV4cGVyaWVuY2VzLg0KPj4gDQo+PiBPdXIgd29yayBzbyBmYXIgaGFzIGZv Y3VzZWQgb24gaW1wbGVtZW50YXRpb24gYW5kIGV2YWx1YXRpb24gb2YgdmVyc2lvbiAtMDggb2Yg RURIT0Mgb3ZlciBDb0FQIHVzaW5nIHJlYWwgSW9UIGhhcmR3YXJlLiBUaGUgb2J0YWluZWQgcmVz dWx0cyBzaG93IGEgc2lnbmlmaWNhbnQgcGVyZm9ybWFuY2UgaW1wcm92ZW1lbnQgY29tcGFyZWQg dG8gb3RoZXIga2V5IGVzdGFibGlzaG1lbnQgcHJvdG9jb2xzLCBzdWNoIGFzIERUTFMgaGFuZHNo YWtlICh2ZXJzaW9uIDEuMiksIGVzcGVjaWFsbHkgd2l0aCByZXNwZWN0IHRvIGxlbmd0aCBhbmQg bnVtYmVyIG9mIGV4Y2hhbmdlZCBtZXNzYWdlcy4NCj4gDQo+IEFyZSB5b3VyIHJlc3VsdHMgd3Jp dHRlbiB1cCBhbnl3aGVyZT8gIEl0IHdvdWxkIGJlIGdyZWF0IHRvIHNlZSBtb3JlIA0KPiBkZXRh aWxzIG9mIHRoZSBjb21wYXJpc29uIGFuZCB0aGUgYWN0dWFsIG51bWJlcnMuDQo+IFVuZm9ydHVu YXRlbHksIEkgZG9uJ3QgdGhpbmsgdGhhdCBEVExTIDEuMiBpcyB0aGUgYmVzdCBjb21wYXJpc29u IC0tIA0KPiBEVExTDQo+IDEuMyBzaG91bGQgYmUgc2VlbiBhcyB0aGUgY3VycmVudCAic3RhdGUg b2YgdGhlIGFydCIgZm9yIERUTFMsIGFuZCBpcyANCj4gZXhwZWN0ZWQgdG8gaXRzZWxmIGJlIGxl YW5lciB0aGFuIERUTFMgMS4yLCB3aGljaCBtaWdodCB3YXNoIG91dCBzb21lIA0KPiBvZiB0aGUg cmVzdWx0cyB5b3UndmUgc2VlbiBoZXJlLg0KPiANCj4gVGhhbmtzLA0KPiANCj4gQmVuDQo+IA0K Pj4gV2UgaGF2ZSByZXZpZXdlZCB2ZXJzaW9uIC0xMCBhbmQgbm90ZWQgdGhlIHJlZHVjdGlvbiBv ZiBtZXNzYWdlIGxlbmd0aC4gQmFzZWQgb24gb3VyIGV4cGVyaWVuY2UsIHdlIHByb3Bvc2UgdGhh dCBhbHNvIHJlbW92aW5nIHRoZSBvdmVyaGVhZCBkdWUgdG8gc2VjdXJpdHkgcGFyYW1ldGVyIG5l Z290aWF0aW9uIGNvdWxkIGJlIGFuIGltcG9ydGFudCBvcHRpbWl6YXRpb24sIGFuZCByZWxldmFu dCBpbiBtYW55IHVzZSBjYXNlcyB3aGVyZSB0aGVzZSBwYXJhbWV0ZXJzIGFyZSBhdmFpbGFibGUg dGhyb3VnaCBhbiBvdXQtb2YtYmFuZCBwcm9jZXNzLg0KPj4gDQo+PiBBY2NvcmRpbmdseSBhbmQg dGFraW5nIGludG8gYWNjb3VudCB0aGF0IEVESE9DIHByb3ZpZGVzIGEgYmFzaWMgc2VjdXJpdHkg ZnVuY3Rpb25hbGl0eSBmb3IgYW55IGNvbnRleHQgd2hlcmUgc2VjdXJpdHkgbmVlZHMgdG8gYmUg ZW5hYmxlZCwgd2UgYXJlIGN1cnJlbnRseSBjb25zaWRlcmluZyB0aGUgYXBwbGljYXRpb24gb2Yg dGhpcyBwcm90b2NvbCBpbiBkaWZmZXJlbnQgSW9UIGRlcGxveW1lbnRzLCBzdWNoIGFzIExvUmFX QU4gbmV0d29ya3MsIE9TQ09SRS1lbmFibGVkIHNjZW5hcmlvcyBvciBpdHMgaW50ZWdyYXRpb24g d2l0aCBjYXBhYmlsaXRpZXMuIFdlIHRoZXJlZm9yZSB3b3VsZCBsaWtlIHRvIHNlZSB0aGUgcHJv Z3Jlc3Mgb2YgRURIT0MgaW4gc3RhbmRhcmRpemF0aW9uLg0KPj4gDQo+PiBLaW5kIHJlZ2FyZHMs DQo+PiANCj4+IC0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+PiBTYWx2YWRvciBQw6lyZXoNCj4+IFBo RCBzdHVkZW50IGluICJGdXR1cmUgSW50ZXJuZXQgTmV0d29ya3M6IEluZnJhc3RydWN0dXJlIGFu ZCBTZWN1cml0eeKAnQ0KPj4gRmFjdWx0eSBvZiBDb21wdXRlciBTY2llbmNlIC0gVW5pdmVyc2l0 eSBvZiBNdXJjaWENCj4+IEVtYWlsOiBzYWx2YWRvci5wLmZAdW0uZXMNCj4+IFNreXBlOiBzYWx2 YS5wZg0KPj4gDQo+IA0KPj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX18NCj4+IEFjZSBtYWlsaW5nIGxpc3QNCj4+IEFjZUBpZXRmLm9yZw0KPj4gaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9hY2UNCj4NCg0KX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkFjZSBtYWlsaW5nIGxpc3QNCkFjZUBp ZXRmLm9yZw0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9hY2UNCg0K From nobody Wed Nov 7 23:12:26 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3E175130DC2 for ; Wed, 7 Nov 2018 23:12:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.791 X-Spam-Level: X-Spam-Status: No, score=-3.791 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.47, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FROM_EXCESS_BASE64=0.979, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com header.b=I9HVA7lR; dkim=pass (1024-bit key) header.d=ericsson.com header.b=b7vXr6Ak Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JEw8O4EpApEA for ; Wed, 7 Nov 2018 23:12:23 -0800 (PST) Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5F5551294D7 for ; Wed, 7 Nov 2018 23:12:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1541661140; x=1544253140; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=YdLfthq3BvKKN4ny/x64rB/WQ7u70ctVEZNt1btMONM=; b=I9HVA7lRFTobpV+6M6J/TuKlBAqYKXYNaWYfJ4Rvflx4reZeqqpNmqP6YrKXStrw Oz9MjolVD3vic2dHHrMtjLsjs0g5H1htffVe0nJ1OeEYhwvhJM8V5uouXlLxaNVP 4XIFBdi9Jq9ekmlmC/3RhByvXHxqo2+Zo/PTKj+rqs4=; X-AuditID: c1b4fb25-5e9ff7000000191f-68-5be3e1d4ef69 Received: from ESESBMB501.ericsson.se (Unknown_Domain [153.88.183.114]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id 98.DE.06431.4D1E3EB5; Thu, 8 Nov 2018 08:12:20 +0100 (CET) Received: from ESESBMR502.ericsson.se (153.88.183.134) by ESESBMB501.ericsson.se (153.88.183.114) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Thu, 8 Nov 2018 08:12:20 +0100 Received: from ESESSMB503.ericsson.se (153.88.183.164) by ESESBMR502.ericsson.se (153.88.183.134) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Thu, 8 Nov 2018 08:12:18 +0100 Received: from EUR04-VI1-obe.outbound.protection.outlook.com (153.88.183.157) by ESESSMB503.ericsson.se (153.88.183.164) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3 via Frontend Transport; Thu, 8 Nov 2018 08:12:19 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=YdLfthq3BvKKN4ny/x64rB/WQ7u70ctVEZNt1btMONM=; b=b7vXr6Ak7sV7W+bgM6DDC6Q+/wek8rTeMB5GfLOqSPrnt1khPIYBglEpyCxiBqBjaxJNk3Qrt9qA96IuWHhcnc5ahboKbedvGw5WqXWvmXAgsDbkvvM6xbxJ3YgYtRrjhQnrUzP3hbQibJ+AA4hBKtAI0cidCPedKqeH4+NotPg= Received: from VI1PR07MB4832.eurprd07.prod.outlook.com (20.178.8.146) by VI1PR07MB5293.eurprd07.prod.outlook.com (20.178.10.219) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1294.27; Thu, 8 Nov 2018 07:12:18 +0000 Received: from VI1PR07MB4832.eurprd07.prod.outlook.com ([fe80::65ef:8cb3:711d:3580]) by VI1PR07MB4832.eurprd07.prod.outlook.com ([fe80::65ef:8cb3:711d:3580%3]) with mapi id 15.20.1294.021; Thu, 8 Nov 2018 07:12:18 +0000 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: "Damm, Benjamin" , "ace@ietf.org" Thread-Topic: [Ace] EDHOC support Thread-Index: AQHUdzJiKZEErdfwxEiAGIMFpGKEOg== Date: Thu, 8 Nov 2018 07:12:17 +0000 Message-ID: <6EC9A0C8-5891-4F12-813C-5824537EC5CC@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.12.0.181014 authentication-results: spf=none (sender IP is ) smtp.mailfrom=goran.selander@ericsson.com; x-originating-ip: [31.133.147.186] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR07MB5293; 6:n2mgO2ZOGmWV64ssJzc7CJMBBHQvl7hxVXnLi73v4PBAPY8pl0c0vs0b8W675iyp201NXR6o0V/2zlwpedD3qmMhSmFzGbb2ukYRaSvLtGt/hkR20FtogJ7fp+j6RRAm+fKU/x2/+cIKDb8UX0poCu/L+H7J033ygRdhR5tvRR6ec8F3cy7ysi7N/9OlFrVnYOJqh1NyPANVsnRyBjJbYWmz28Ru0pw/2fQDNRwE9Y4SZ2ImtWWpY8UwpZoRWbMyuxkV4dHYNBdazXVWsALz+4Y3rTFqQKV1+X1mJjHVjFJtHlxojLcaXld/sssHm7AiA/k6GXJvfaTDNTGfdkQGh2L8A49LiHVmtuzQvF4Pa9pq5Tvzb5ppPYbSZ9rGM+6zGBmLtZQ0WC2x4yHQ8FwrdivDO4C3JUeh1jz1EMf64lhC17KTNZUkC09d18Bj2VMEo4vC/+Pe9VrYFaf4JowigQ==; 5:+kXaNxEc2CfmFAxVYarCP5CN3XikX0BlGLWqkOe8fa98nRGRXvqi9RquR8nxRBvssTuiIbZT6pzA5Dzwuq7qpQxK2I+kq/iDibE8f6YVDCMYQrq9ZlsonHRasW5TZzGpJpGnO+jN1S4nTb87w9h1GS/itfWOsQ1vuDg6EpOSAIA=; 7:85T7FogTnj7pgTCOGo+dypLj8voIjeIsOjnqOcg8nOQV5/RFK9kfdwLXUXh8AKZcqazGaEr5au+uxRJ/xFM09WGY7uslvgiD9hSMZiqKUAcMiK99+/OFEq4iRw47p/xacYf+tbq9Sc5tWfQotzzO5Q== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 2c36c261-c9e3-4b11-58ab-08d6454984b8 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(2017052603328)(7153060)(7193020); SRVR:VI1PR07MB5293; x-ms-traffictypediagnostic: VI1PR07MB5293: x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(192374486261705); x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3231382)(944501410)(4982022)(52105095)(3002001)(10201501046)(93006095)(93001095)(148016)(149066)(150057)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123562045)(20161123564045)(20161123560045)(201708071742011)(7699051)(76991095); SRVR:VI1PR07MB5293; BCL:0; PCL:0; RULEID:; SRVR:VI1PR07MB5293; x-forefront-prvs: 0850800A29 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(136003)(396003)(376002)(346002)(366004)(199004)(189003)(6512007)(82746002)(6506007)(66066001)(33656002)(6306002)(102836004)(26005)(229853002)(6486002)(2906002)(6116002)(2501003)(7736002)(68736007)(5660300001)(3846002)(2900100001)(305945005)(106356001)(66574009)(99286004)(25786009)(71200400001)(105586002)(8936002)(83716004)(8676002)(81156014)(966005)(6436002)(81166006)(2616005)(476003)(71190400001)(14454004)(97736004)(478600001)(486006)(14444005)(256004)(36756003)(6246003)(85202003)(58126008)(110136005)(53936002)(86362001)(85182001)(186003)(316002); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR07MB5293; H:VI1PR07MB4832.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: QbG9saAe1AdaxF2dpGS4jg8j6hVTZrB00aTNJL1KZ8dZ/di/HPuyKtnIZd2CgwVKWgxJjIinJOIRh1m/RBYixsVZVteIcTMdW1TMiWN/bGzVA6fNi7P4E175WqQpbCm0CqTGNGrraHrZcODXqejuCB/YrHEGYPfj/AXSSgXYsW9ruK4RDN7T8Y6DmRFYzUlB/4aYUeNr+m/Dr0FVnUJMIKLJ+AcjbxWwcpwUWovUSPHlL0VCOlUzpuItT249+FSCqybMqvqgxuEBHcC2vbj1Nol7KiJQftgcbKm2+TzJ1y3ra+A32rNf3VWcyIq5Jwq/OoN6Hc9kHKin39Hq5DjoIIBFqtvoalYUhljNUHYtPJQ= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <06C346CD4AC6C440937E3C2456B4EB87@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 2c36c261-c9e3-4b11-58ab-08d6454984b8 X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Nov 2018 07:12:17.9495 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR07MB5293 X-OriginatorOrg: ericsson.com X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprIKsWRmVeSWpSXmKPExsUyM2J7ke6Vh4+jDb62q1l8/9bDbDG7bQ6b A5PHkiU/mTzm/D7LGsAUxWWTkpqTWZZapG+XwJXx83pNwSfJipvfTjA3MM6R7GLk5JAQMJGY 9fspSxcjF4eQwBFGiZYra5khnK+MEm+3r2KCcy4+PwOVWcwkcftkP1iGRWACs8SUD7egyiYy SSw9dgiq7CGjxOyuyUwga9gEXCQeNDwCsjk4RAR8JfoPKoGEhQUUJJo2z2ADsUUEFCWeXb/M BGHrSdz/+xnMZhFQkXi76DkjiM0rYC+xaP0XFhCbUUBM4vupNWA1zALiEreezGeC+EhAYsme 88wQtqjEy8f/WEFsUQF9iQWnpzND9MZJNK1rYIOoUZJYf+8tK4QtK3FpfjcjyP0SAtfYJN6t 7YVK6Ep8mDoVaqivRMfXrWwQRccZJXZ+2McM8piEgJbEt5lJEDXZEvdOLWaHsK0lXp7bDTVH TmJV70MWiN4LzBLzt/czTWA0nIXkiVlAo5gFNCXW79KHCHtILFv1gQXCVpSY0v2QfRY4LAQl Ts58wrKAkXUVo2hxanFSbrqRsV5qUWZycXF+nl5easkmRmBCObjlt+oOxstvHA8xCnAwKvHw Zt98HC3EmlhWXJl7iFGCg1lJhPf0XaAQb0piZVVqUX58UWlOavEhRmkOFiVx3ofmm6OEBNIT S1KzU1MLUotgskwcnFINjAk/Q55ohbZz7vqzR6ffap95xbF1B5kl/kX/qrfwlnq1buMRBXHh s2vvTFBZn95WJ62zpeto1qd/M++r6b9/uow17cB8qWjzGnNG9pkXrjP8eBm2Ke7ttaZtc6/W HPULZLp+kCVysd+v3uS7IZ+4whyT+NK6rl38vpV1ylLLe99Wuaa3JW9lMVNiKc5INNRiLipO BADxIj+VJAMAAA== Archived-At: Subject: Re: [Ace] EDHOC support X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Nov 2018 07:12:25 -0000 SGVsbG8gQmVuLA0KDQpUaGFua3MgZm9yIGNvbW1lbnRzIQ0KDQrvu79PbiAyMDE4LTExLTA4LCAw NTo1NiwgIkFjZSBvbiBiZWhhbGYgb2YgRGFtbSwgQmVuamFtaW4iIDxhY2UtYm91bmNlc0BpZXRm Lm9yZyBvbiBiZWhhbGYgb2YgQmVuamFtaW4uRGFtbUBpdHJvbi5jb20+IHdyb3RlOg0KDQogICAg SGVsbG8gYWNlLA0KICAgIA0KICAgIFdlJ3ZlIGRvbmUgYW4gaW50ZXJuYWwgcmV2aWV3IG9mIEVE SE9DIGFuZCBzdXBwb3J0IGl0cyBtb3ZlbWVudCB0b3dhcmRzDQogICAgUkZDLiAgQSBmZXcgcXVl c3Rpb25zOg0KICAgIA0KICAgICogSXQgaXNuJ3QgY2xlYXIgKHRvIHVzKSBob3cgRURIT0MncyBt ZXNzYWdlIDIgYWNoaWV2ZXMgcHJvb2Ygb2YNCiAgICAgIHBvc3Nlc3Npb24gcHJpb3IgdG8gdXNl LiBOSVNUIFNQLTgwMC01NkEgc2VlbXMgZmFpcmx5IGNsZWFyIHRoYXQgcHJvb2YNCiAgICAgIG9m IHBvc3Nlc3Npb24gaXMgcmVxdWlyZWQgYmVmb3JlIGNvbmZpcm1hdGlvbiBvZiBhIGRlcml2ZWQg a2V5LCBidXQNCiAgICAgIG1lc3NhZ2UgMiBzZWVtcyB0byBmb3JjZSBVIHRvIGRlcml2ZSBhbmQg dXNlIGEga2V5IGJlZm9yZSBQb1AgY2FuIGJlDQogICAgICBkb25lLiAgQSBwb2ludGVyIHRvIHdo eSB0aGlzIGlzIGNvbnNpZGVyZWQgc2FmZSB3b3VsZCBiZSBhcHByZWNpYXRlZC4NCiAgICAJDQpJ J20gbm90IHN1cmUgSSB1bmRlcnN0YW5kIHRoZSBjb25jZXJuLiBIYXZpbmcgcmVjZWl2ZWQgbWVz c2FnZSAyLCB0aGUgVSBjYW4gdmVyaWZ5IHRoZSBzaWduYXR1cmUgYnkgViAob3ZlciBlLmcuIHRo ZSBlcGhlbWVyYWwga2V5IG9mIFUpIGFuZCB0aHVzIHByb3ZlIHRoYXQgdGhlIGNvbW11bmljYXRp bmcgcGFydHkgcG9zc2Vzc2VzIHRoZSBwcml2YXRlIGtleS4gSXMgaXQgdGhlIGRlcml2YXRpb24g b2YgdGhlIGVuY3J5cHRpb24ga2V5IG5lZWRlZCB0byBkZWNyeXB0IHRoZSBzaWduYXR1cmUgdGhh dCBpcyB5b3VyIGNvbmNlcm4/IE5vdGUgdGhhdCB0aGlzIGlzIGJ5IGNvbnN0cnVjdGlvbiBvZiB0 aGUgU2lnbWEtSSBwcm90b2NvbCwgc2VlIHBhZ2UgMTkgb2YNCmh0dHA6Ly93ZWJlZS50ZWNobmlv bi5hYy5pbC9+aHVnby9zaWdtYS1wZGYucGRmDQoNCiAgICAqIFRoZSByZXF1aXJlbWVudCB0byBz dXBwb3J0IGN1cnZlIHgyNTUxOSBpcyBhbiBvZGQgb25lIGZvciB1cyBiZWNhdXNlDQogICAgICBv dXIgZGV2aWNlIGZsZWV0IGlzIHVzaW5nIFAtMjU2LiBUaGlzIGlzIG5vdCBhIHJlcXVlc3QgdG8g cmVxdWlyZQ0KICAgICAgUC0yNTYsIGJ1dCByYXRoZXIsIHRoYXQgYSByZXF1aXJlZCBjdXJ2ZSBp cyBub3QgbmVlZGVkLiBJbnN0ZWFkIG9mIGENCiAgICAgIE1VU1QgSSdkIGxpa2UgdG8gc2VlIHRo aXMgYmUgYSBTSE9VTEQuDQoNCkJ5IHNvbWUgQmVzdCBDb21tb24gUHJhY3RpY2UgKFJGQzc2OTYg SSB0aGluaykgd2UgaGF2ZSB0byBzcGVjaWZ5IGF0IGxlYXN0IG9uZSBhbGdvcml0aG0gdGhhdCBh IG1hbmRhdG9yeSB0byBpbXBsZW1lbnQuIEN1cnZlMjU1MTkgaXMgc3VwZXJpb3IgdGVybXMgb2Yg c2VjdXJpdHkgYW5kIHBlcmZvcm1hbmNlIHNvIHRoYXQgc2VlbWVkIGEgbmF0dXJhbCBjaG9pY2Ug IHNpbmNlIHdlIGhhdmUgdG8gcGljayBvbmUgY3VydmUuIElmIG90aGVycyBoYXZlIHRoZSBzYW1l IHByb2JsZW0gd2UgY291bGQgb2YgY291cnNlIGhhdmUgYSBkaXNjdXNzaW9uIGFyb3VuZCB0aGlz Lg0KDQogICAgDQogICAgKiBHaXZlbiB0aGUgc3BlY3RyZSBvZiBQUUMgd2UgdGhpbmsgcHJvdmlk aW5nIGZvciBzb21lIGZsZXhpYmlsaXR5IGluDQogICAgICBhbGdvcml0aG1zIGEgbXVzdC4gV2Ug dXNlIFAtMjU2IHRvZGF5IGJ1dCBtaWdodCB1c2UgUC0zODQgb3Igb3RoZXINCiAgICAgIGhpZ2hl ci1vcmRlciBjdXJ2ZXMgdG9tb3Jyb3cuIFRyYW5zaXRpb24gcGVyaW9kcyBtYW5kYXRlIGFsZ29y aXRobQ0KICAgICAgZmxleGliaWxpdHkuDQoNCg0KV2UgZGVmaW5pdGVseSB3YW50IHRvIGtlZXAg dGhlIGFsZ29yaXRobSBuZWdvdGlhdGlvbiBpbiB0aGUgcHJvdG9jb2wuIFRoZSBjaGFuZ2Ugd2hp Y2ggaXMgcHJvcG9zZWQgaXMgdG8gbW92ZSBmcm9tIG5lZ290aWF0aW5nIGluZGl2aWR1YWwgcHJv dG9jb2xzIHRvIG5lZ290aWF0ZSBjaXBoZXIgc3VpdGVzLCB3aGljaCByZWR1Y2VzIG92ZXJoZWFk IGZ1cnRoZXIsIGFuZCBtYWtlcyB0aGUgcHJvdG9jb2wgZXZlbiBzaW1wbGVyLiANCiAgICANCiAg ICBXZSdyZSBsb29raW5nIGZvcndhcmQgdG8gYXBwbHlpbmcgRURIT0MvT1NDT1JFIHRvIHNlY3Vy ZSBlbmQtdG8tZW5kIENvQVANCiAgICBhcHBsaWNhdGlvbiB0cmFmZmljIHRoYXQgaXMgdHJhbnNp dGluZyBtdWx0aXBsZSBwcm94aWVzLg0KDQpUaGFua3MgZm9yIHlvdXIgc3VwcG9ydCENCg0KR8O2 cmFuDQoNCiAgICANCiAgIA0KICAgIA0KDQo= From nobody Wed Nov 7 23:41:38 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE5C71294D0 for ; Wed, 7 Nov 2018 23:41:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.469 X-Spam-Level: X-Spam-Status: No, score=-2.469 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.47, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jY4iqdK23Ai7 for ; Wed, 7 Nov 2018 23:41:33 -0800 (PST) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-bl2nam06on0130.outbound.protection.outlook.com [104.47.53.130]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3F2DF128DFD for ; Wed, 7 Nov 2018 23:41:33 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=fOo1Bi+34dBx+ZVfxbq91/YkZmFnsi5nTmnlKHeNgtM=; b=dp0m8s1u551eMKSSuyQ5js4gC4FHZHMk/TLOSZyu+oDz79zLLmHF6iwJjSso459kaK7FSCDNJbU+nabM0PeELel88IuLISoM6sp2FaBdJumHvfERv62K0kC5euGFCW/gOJeTrh9C/iX1h3T08oaMvKszJN6WE1kDKzGPZwR2oRM= Received: from SN6PR00MB0304.namprd00.prod.outlook.com (52.132.117.158) by SN6PR00MB0319.namprd00.prod.outlook.com (52.132.118.10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1357.0; Thu, 8 Nov 2018 07:41:30 +0000 Received: from SN6PR00MB0304.namprd00.prod.outlook.com ([fe80::7558:57db:29c8:65d8]) by SN6PR00MB0304.namprd00.prod.outlook.com ([fe80::7558:57db:29c8:65d8%3]) with mapi id 15.20.1359.000; Thu, 8 Nov 2018 07:41:30 +0000 From: Mike Jones To: Jim Schaad , 'Roman Danyliw' , "ace@ietf.org" Thread-Topic: Summarizing WGLC discussion of draft-ietf-ace-cwt-proof-of-possession Thread-Index: AdQaB+pCJ/tP7Ud0T+GY5Fn6FrAcuBbeY8wQAGaN6wAABpdwMA== Date: Thu, 8 Nov 2018 07:41:30 +0000 Message-ID: References: <359EC4B99E040048A7131E0F4E113AFC014C3FEDA1@marathon> <002f01d4771b$b3d7be70$1b873b50$@augustcellars.com> In-Reply-To: <002f01d4771b$b3d7be70$1b873b50$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [2001:67c:370:128:bdde:811e:4a49:7e9] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR00MB0319; 6:kJcSX7Cx8aFxNYzKL+jX12xWhgoe8zcr8uCjo34J0Hk0Jf/N6bRFPcRhE0w+/Ap5ddj4flZ3H2lIP+lh6CAoH/el5j6xAzi0c2zl2WtBucQpKKJEHuvi8MEMdji8zm6fTBK0sjIighEDu1A5Ms2cd9/LfsBPlmIMMylgfpwNbq9Ufkmc4dFetaOlhqObsBrBLucghSxABoz81gvWoXxfyjk1meDZpUQK4g9ZyReKbpG8L+YfJJYrWxzsgx9462VOddd4b97Gu+FrZoxMfH+L2I+mplhDKKH2hvWQN7FdKRNFZbsC4A0Fdbv3YhkDOUzNWfdVMx5jW18lyVXu7f1nmdGY8tvn2wV/IHTAmKVCSnvVkvjTe3HiWnKLYV8sn0TNMzdL+U4xJSin2yey5a1xjX8xvBOU+IIK7cm4eGxPxkdpoWf1aVrNQZoTuRp5Udb4aJgZ7eisE3f40wctke+jSQ==; 5:6qJfRJMsbDy0+BBMc3vdgoK+ZnebboofIxFGdrUGCexUD7qnb7chxSi1ys4xe5vUZjJHY9J/ethqKH9ZoRhOsCRVPVOiScIIs2Umz3KbMjDJVOTCcAsN/Minnb6vz7V7ergEZc4XQmuWJXWHcREwqZ+3UEQZYmBDQUMdXyITxmE=; 7:3aR6ngWUjmMuKqBS+Hrt3x1ui9he4c7uEub6Y8tG9q9yu6DPqcrLwijTwJ/qv6HZubzHEIOCA3fE6qEXSxy2PW7fji+EcU4o+GO+Fv03DyakPXKgcukVR2keb/npYNeTEMGcoxl2E9PDi6XO06WSNw== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 3a11aab8-edba-41ae-2634-08d6454d993a x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7193020); SRVR:SN6PR00MB0319; x-ms-traffictypediagnostic: SN6PR00MB0319: x-ms-exchange-purlcount: 25 authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(2017102700009)(2017102701064)(6040522)(8220035)(2401047)(5005006)(8121501046)(2017102702064)(20171027021009)(20171027022009)(20171027023009)(20171027024009)(20171027025009)(20171027026009)(2017102703076)(10201501046)(3231390)(944501410)(2018427008)(93006095)(93001095)(3002001)(6055026)(148016)(149066)(150057)(6041310)(20161123564045)(20161123562045)(20161123558120)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(201708071742011)(7699051)(76991095); SRVR:SN6PR00MB0319; BCL:0; PCL:0; RULEID:; SRVR:SN6PR00MB0319; x-forefront-prvs: 0850800A29 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(376002)(366004)(346002)(136003)(39860400002)(51914003)(51444003)(189003)(199004)(13464003)(55016002)(5660300001)(68736007)(86612001)(9686003)(7736002)(229853002)(110136005)(97736004)(186003)(8990500004)(99286004)(584604001)(25786009)(606006)(10290500003)(2501003)(54896002)(2900100001)(6306002)(4744004)(81166006)(790700001)(966005)(6246003)(7696005)(71190400001)(102836004)(71200400001)(478600001)(46003)(10090500001)(2906002)(33656002)(6116002)(21615005)(74316002)(76176011)(86362001)(575784001)(486006)(14454004)(22452003)(6436002)(446003)(8936002)(476003)(105586002)(236005)(8676002)(11346002)(72206003)(6506007)(316002)(14444005)(106356001)(53936002)(256004)(53546011)(81156014); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR00MB0319; H:SN6PR00MB0304.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: wfRux75oAHxAcS7Tr2lUaLRvfixcfzQVmaGBuQZnqi2pFm/MNL1hVQT/HYcim92FNrMfapva7fyjOctS2hKchxK/y27Dw5mGnJzqZJZUt4NmHwjYxsRjpoPn2fF603VcTmfLu/Kt59acjnc30G+YaQQJEo+EfMZT9PysqfE5tR9CQMEYIW8f/UHvVyS8WazewXRL98CnTFDv4eXVKDF2ELFWxr6GEifuiuvWqeRaNwoB9DvlMEgZl8+a2SmT5nxsRezaPnk/yVszkAWYONPau1WOJUCWWy38r6aq2bzVm9qsmwIx2tMFVhTL1PsGH1HB0v7mBmK/A5tjjG8nKy9an3HL8KSjwFln1hkQWdfLBT8= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_SN6PR00MB030496605F8FA507E8D53304F5C50SN6PR00MB0304namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 3a11aab8-edba-41ae-2634-08d6454d993a X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Nov 2018 07:41:30.4196 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR00MB0319 Archived-At: Subject: Re: [Ace] Summarizing WGLC discussion of draft-ietf-ace-cwt-proof-of-possession X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Nov 2018 07:41:38 -0000 --_000_SN6PR00MB030496605F8FA507E8D53304F5C50SN6PR00MB0304namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Jim - am I right that the text you were suggesting be added to the "kid" tr= eatment is that in the thread "[Ace] Text for KID in POP" which introduces = the text in https://mailarchive.ietf.org/arch/msg/ace/v_Ci7kRMC0poffGmrSNYb= 5-sjrA and corrects it in https://mailarchive.ietf.org/arch/msg/ace/garcXUm= WNHmEgZNS7FKT-AYBgMI? I'll look at it again now... Thanks, -- Mike From: Jim Schaad Sent: Thursday, November 8, 2018 11:30 AM To: Mike Jones ; 'Roman Danyliw' ; ace@ietf.org Subject: RE: Summarizing WGLC discussion of draft-ietf-ace-cwt-proof-of-pos= session I do not believe that the big comment that I have left has been addressed. From: Mike Jones > Sent: Tuesday, November 6, 2018 3:43 PM To: Roman Danyliw >; ace@ietf.org Cc: Jim Schaad > Subject: RE: Summarizing WGLC discussion of draft-ietf-ace-cwt-proof-of-pos= session Thanks for the useful summary, Roman. Replies are inline below prefixed by= "Mike>". I've just published draft -04, which contains the small number of ch= anges described below. I believe that this completes resolution of the WGL= C feedback. -----Original Message----- From: Ace > On Behalf Of = Roman Danyliw Sent: Friday, July 13, 2018 12:56 AM To: ace@ietf.org Subject: [Ace] Summarizing WGLC discussion of draft-ietf-ace-cwt-proof-of-p= ossession Hello! This email is intended to summarize the outcome of the WGLC on draft-ietf-a= ce-cwt-proof-of-possession-02 to date. This call was started on May 8 [1] = and discussion occurred around two reviews of this -02 draft: ** Jim Schaad [Schaad], per https://www.ietf.org/mail-archive/web/ace/curre= nt/msg02747.html ** Roman Danyliw [Danyliw], per https://www.ietf.org/mail-archive/web/ace/c= urrent/msg02793.html After discussion on the mailing list, -03 of the draft was produced. Synthesizing the robust mailing list discussion, I see the following previo= usly identified issues as still needing closure. The nature of the resolut= ion varies. Given the volume of the discussion threads, I may have missed = a response or failed to line up a text change in -03 to an issue. Please c= orrect the status of any given point of feedback below. =3D=3D[ -03 contains changes, but ML discussion doesn't indicate closure ]= =3D=3D The following feedback was made about the -02 draft; changes to the = relevant text was made in -03; but follow-up discussions on the mailing lis= t doesn't indicate closure of the issue. If the originator of the feedback= (it looks like only Jim for this section) feels the issue is closed, pleas= e speak up. [Schaad #6] Under what circumstances would a 'sub' claim be present and it= is not the presenter? I can see that a holder of the key may be implicitl= y (or anonymously) named, but putting something in the subject field which= is not identifying the presenter is something that I would reject without = a good presentation of why in the document. Mike> The draft is written as it is to both provide non-normative guidance = for expected simple use cases, while also allowing flexibility for more com= plicated use cases. In particular, in some profiles, the subject of the CW= T and the presenter of the CWT for proof-of-possession purposes may be diff= erent parties. The party presenting the CWT to the recipient would be in p= ossession of the CWT because it communicated with the issuer but the subjec= t can be different than the presenter. That's why the subject language is = written as a suggestion to profile writers, rather than normatively. I'll = note that this also aligned with the treatment in RFC 7800, which this draf= t mirrors, by design. Jim> I am not going to fight this, but this type of behavior is what makes = it really hard to try and do any sort of formal proofs with CWTs. One cann= ot model that the confirmation key is associated with a specific identity s= ince that identity could be in any one of 3 different fields or implicit an= d one cannot know which of those is the correct one in the generic case. [Schaad #7] I would disagree with the claim that if the 'sub' claim is mis= sing then it would normally be the issuer. For the world of IoT, I would e= xpect that the subject would not be present because there is no need to ide= ntify the subject to the recipient. I.e. it is an anonymous subject. Mike> As with the previous issue, this section of the draft provides non-no= rmative guidance for expected simple use cases, while not precluding profil= ing specifications from using the standard CWT claims in the manner that ma= kes sense for their application. The "iss" language here also intentionall= y parallels the RFC 7800 treatment of this claim. Jim > See above [Schaad #8] It is not clear to me that either of the sub and iss claims wo= uld normally be present. They might be present but neither is needed. The= subject can be anonymous and the issuer is identified by the key used to v= alidate the security on the CWT. Mike> Your points above align with the design in the draft. That's why bot= h "iss" and "sub" are optional. Their usage is profile-dependent, as it is= in RFC 7800 (and CWT and JWT). Jim > See above [Schaad #9] In section 3.1 the first two sentences appear to be contradict= ory. Members are used to identify the POP key. Other things than a POP ke= y can be used than a POP key. If they are used to identify the POP key- wh= y would they not deal with the POP key? I think that you should do a separ= ation and define the 'cnf' file which can hold any number of confirmation m= ethods and then have a section on defining some POP cnf method field holder= s. Mike> The apparently contradictory language in draft -02 was reworded in dr= aft -03 to address this comment. In particular, it now explicitly states t= hat the "cnf" claim is used to carry confirmation methods, some of which id= entify proof-of-possession keys. This aligns both with RFC 7800 and the SA= ML 2.0 SubjectConfirmation element design (both by intentionally, since the= re's no need to reinvent the wheel when an existing design already works we= ll). [Schaad #10] In section 3.1 P1 - I am not sure why you have something here= about confirming the authenticity of the token as oppose to confirming the= identity of the presenter. Why would that type of information be placed h= ere where it is not useful.] Mike> The referenced text was reworked between draft -02 and -03. =3D=3D[ change was proposed, but not made ]=3D=3D The draft editors propose= d a changes on the mailing list to address the issue but it did not appear = in the -03 draft. See the inline text of https://www.ietf.org/mail-archive/web/ace/current/ms= g02788.html for the proposed changes for [Schaad #12, 13, 16, 21]. [Schaad #12] I am unclear why there should be a restriction on the number o= f POP keys that can be in a 'cnf' object. If there are multiple keys, then= any or all of them are of equal value in doing the confirmation. Just lik= e there can be multiple confirmation methods and an application could choos= e to use any one of them. Mike> This was discussed in the working group meeting at IETF 102 in Montre= al and on the list. The consensus appeared to be to stay with the existing= design, which describes how to represent multiple PoP keys in the fourth p= aragraph of https://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possess= ion-03#section-3.1 (which again, is the same mechanism defined in RFC 7800)= . Jim> fine. [Schaad #13] Not sure which section this belongs in, but the use of an COS= E_Encrypt0 would be one way to combat tracking of identities based on the k= ey value being used. Different encrypted values could be sent to different= servers and they would not necessarily know about use w/o internal collusi= on between them. Similar effect by using an encrypted CWT. Potentially re= quires use of TLS1.3 to protect the RPKs. YMMV Mike> The Privacy Considerations section talks about a common PoP key being= a potential correlation handle and thus recommends that different PoP keys= be used for different parties. Encrypting a common key could prevent obse= rvers unable to decrypt the messages from learning that they key is shared = but would not prevent correlation by parties that cooperate to compare thei= r PoP keys. So it's not clear to me that the suggestion above solves enoug= h of the correlation problem that it's worth including in the draft. If yo= u disagree, please suggest text for an additional Privacy Considerations pa= ragraph. Jim> I'll look at this again, but I am not sure that this is the correct pl= ace to put it. [Schaad #16] Section 4 - Are audience restrictions not done in CWT? -- sam= e issues as [Danyliw #12] Mike> All claims in CWTs (and JWTs) are optional, including the "aud" (audi= ence) claim. Particular profiles can suggest and require particular claims= , as this profile does. I have deleted the unnecessary middle sentence, wh= ich [Danyliw #12] correctly pointed out broke up the logical flow of the ex= position. Thanks for pointing this out. [Schaad #21] Section 6.2.2 - the value type is not an array for COSE_Encryp= t or COSE_Encyrpt0, these are the values. As written I could put in an arr= ay which is not one of those two structures and be valid. Ditto for COSE_= Key, although w/ slightly less justification. Mike> Thanks. I updated these value type declarations to use the actual re= quired COSE_* types. See the inline text of https://www.ietf.org/mail-archive/web/ace/current/ms= g02802.html for the proposed change for [Danyliw #7]. [Danyliw #7] Page 6, Section 3.3, The sentence "The COSE_Key could, for ins= tance, be encrypted using a COSE_Encrypt0 representation using the AES-CCM-= 16-64-128 algorithm" seems out of place. What is this text explaining rela= tive to the examples? Mike> Thanks. I deleted the confusing and unnecessary sentence. =3D=3D[ face to face discussion required ]=3D=3D Certain issues were deemed= sufficiently complex to required face-to-face discussion at IETF 102. [Schaad #14] I have real problems w/ the use of a KID for POP identificati= on. It may identify the wrong key or, if used for granting access, may hav= e problems w/ identity collisions. These need to be spelt out someplace to= help people tracking down questions of why can't I verify w/ this CWT, I k= now it's right. -- See https://www.ietf.org/mail-archive/web/ace/current/ms= g02853.html for more detailed discussion -- related issue to [Danyliw #8]. Mike> The paragraph sentence of the Operational Considerations section at h= ttps://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possession-03#sectio= n-6 was added in draft -03 to address exactly this issue, after extensive d= iscussion and wordsmithing on the mailing list. Jim> During the last F2F meeting I sent a paragraph which I consider to be = the minimal change which would be required. Regards, Roman [1] https://www.ietf.org/mail-archive/web/ace/current/msg02744.html _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace Thanks again, -- Mike --_000_SN6PR00MB030496605F8FA507E8D53304F5C50SN6PR00MB0304namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Jim – am I right= that the text you were suggesting be added to the “kid” treatm= ent is that in the thread “[Ace] Text for KID in POP” which int= roduces the text in https://mailarchive.ietf.org/arch/msg/ace/v_Ci7kRMC0poffGmrSNYb5-sjr= A and corrects it in https://mailarchive.ietf.org/arch/msg/ace/garcXUmWNHmEgZNS7FKT-AYBgM= I?

 

I’ll look at it = again now…

 

   &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p; Thanks,

   &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p; -- Mike

 

From: Jim Schaad <ietf@augustcellars.com&g= t;
Sent: Thursday, November 8, 2018 11:30 AM
To: Mike Jones <Michael.Jones@microsoft.com>; 'Roman Danyliw' = <rdd@cert.org>; ace@ietf.org
Subject: RE: Summarizing WGLC discussion of draft-ietf-ace-cwt-proof= -of-possession

 

I do not believe that the big comment that I have le= ft has been addressed.

 

From: Mike Jones <Michael.Jones@microsoft.com>
Sent: Tuesday, November 6, 2018 3:43 PM
To: Roman Danyliw <rdd@cert.org>; ace@ietf.org
Cc: Jim Schaad <ietf@au= gustcellars.com>
Subject: RE: Summarizing WGLC discussion of draft-ietf-ace-cwt-proof= -of-possession

 

Thanks for the usef= ul summary, Roman.  Replies are inline below prefixed by “Mike&g= t;”.  I’ve just published draft -04, which contains the small number of changes described = below.  I believe that this completes resolution of the WGLC feedback.=

 

-----Original Message-----
From: Ace <ace-bounces@ietf.org<= /a>> On Behalf Of Roman Danyliw
Sent: Friday, July 13, 2018 12:56 AM
To: ace@ietf.org
Subject: [Ace] Summarizing WGLC discussion of draft-ietf-ace-cwt-proof-of-p= ossession

 

Hello!

 

This email is intended to summarize the outcome o= f the WGLC on draft-ietf-ace-cwt-proof-of-possession-02 to date.  This= call was started on May 8 [1] and discussion occurred around two reviews o= f this -02 draft:

 

** Jim Schaad [Schaad], per https://www.ietf.org/mail-archive/web/= ace/current/msg02747.html

** Roman Danyliw [Danyliw], per https://www.ietf.org/mail-archive/web/= ace/current/msg02793.html

 

After discussion on the mailing list, -03 of the = draft was produced. 

 

Synthesizing the robust mailing list discussion, = I see the following previously identified issues as still needing closure.&= nbsp; The nature of the resolution varies.  Given the volume of the di= scussion threads, I may have missed a response or failed to line up a text change in -03 to an issue.  Please correc= t the status of any given point of feedback below.

 

=3D=3D[ -03 contains changes, but ML discussion d= oesn't indicate closure ]=3D=3D The following feedback was made about the -= 02 draft; changes to the relevant text was made in -03; but follow-up discu= ssions on the mailing list doesn't indicate closure of the issue.  If the originator of the feedback (it looks li= ke only Jim for this section) feels the issue is closed, please speak up.

 

[Schaad #6]  Under what circumstances would = a 'sub' claim be present and it is not the presenter?  I can see that = a holder of the key may be implicitly (or anonymously)  named, but put= ting something in the subject field which is not identifying the presenter is something that I would reject without a good = presentation of why in the  document.

 

Mike> The draft = is written as it is to both provide non-normative guidance for expected sim= ple use cases, while also allowing flexibility for more complicated use cas= es.  In particular, in some profiles, the subject of the CWT and the presenter of the CWT for proof-of-possession pu= rposes may be different parties.  The party presenting the CWT to the = recipient would be in possession of the CWT because it communicated with th= e issuer but the subject can be different than the presenter.  That’s why the subject language is written= as a suggestion to profile writers, rather than normatively.  I’= ;ll note that this also aligned with the treatment in RFC 7800, which this = draft mirrors, by design.

 

Jim> I am not going to fight this, but this ty= pe of behavior is what makes it really hard to try and do any sort of forma= l proofs with CWTs.  One cannot model that the confirmation key is ass= ociated with a specific identity since that identity could be in any one of 3 different fields or implicit and one can= not know which of those is the correct one in the generic case.<= /p>

 

[Schaad #7]  I would disagree with the claim= that if the 'sub' claim is missing then it would normally be the issuer.&n= bsp; For the world of IoT, I would expect that the subject would not be pre= sent because there is no need to identify the subject to the recipient.  I.e. it is an anonymous subject.

 

Mike> As with th= e previous issue, this section of the draft provides non-normative guidance= for expected simple use cases, while not precluding profiling specificatio= ns from using the standard CWT claims in the manner that makes sense for their application.  The “iss= 221; language here also intentionally parallels the RFC 7800 treatment of t= his claim.

 

Jim > See above

 

[Schaad #8]  It is not clear to me that eith= er of the sub and iss claims would normally be present.  They might be= present but neither is needed.  The subject can be anonymous and the = issuer is identified by the key used to validate the security on the CWT.

 

Mike> Your point= s above align with the design in the draft.  That’s why both = 220;iss” and “sub” are optional.  Their usage is pro= file-dependent, as it is in RFC 7800 (and CWT and JWT).

 

Jim > See above

 

[Schaad #9]  In section 3.1 the first two se= ntences appear to be contradictory.  Members are used to identify the = POP key.  Other things than a POP key can be used than a POP key. = ; If they are used to identify the POP key- why would they not deal with the POP key?  I think that you should do a separat= ion and define the 'cnf' file which can hold any number of confirmation met= hods and then have a section on defining some POP cnf method field holders.=

 

Mike> The appare= ntly contradictory language in draft -02 was reworded in draft -03 to addre= ss this comment.  In particular, it now explicitly states that the = 220;cnf” claim is used to carry confirmation methods, some of which identify proof-of-possession keys.  This aligns both wi= th RFC 7800 and the SAML 2.0 SubjectConfirmation element design (both by in= tentionally, since there’s no need to reinvent the wheel when an exis= ting design already works well).

 

[Schaad #10]  In section 3.1 P1 - I am not s= ure why you have something here about confirming the authenticity of the to= ken as oppose to confirming the identity of the presenter.  Why would = that type of information be placed here where it is not useful.]

 

Mike> The refere= nced text was reworked between draft -02 and -03.

 

=3D=3D[ change was proposed, but not made ]=3D=3D= The draft editors proposed a changes on the mailing list to address the is= sue but it did not appear in the -03 draft. 

 

See the inline text of https://www.ietf.org/mail-archive/web/= ace/current/msg02788.html for the proposed changes for [Schaad #= 12, 13, 16, 21].

 

[Schaad #12] I am unclear why there should be a r= estriction on the number of POP keys that can be in a 'cnf' object.  I= f there are multiple keys, then any or all of them are of equal value in do= ing the confirmation.  Just like there can be multiple confirmation methods and an application could choose to us= e any one of them.

 

Mike> This was d= iscussed in the working group meeting at IETF 102 in Montreal and on the li= st.  The consensus appeared to be to stay with the existing design, wh= ich describes how to represent multiple PoP keys in the fourth paragraph of https://tools.ie= tf.org/html/draft-ietf-ace-cwt-proof-of-possession-03#section-3.1 (which again, is the same mechanism defined in RFC 7800).

 

Jim> fine.

 

[Schaad #13]  Not sure which section this be= longs in, but the use of an COSE_Encrypt0 would be one way to combat tracki= ng of identities based on the key value being used.  Different encrypt= ed values could be sent to different servers and they would not necessarily know about use w/o internal collusion betwe= en them.  Similar effect by using an encrypted CWT.  Potentially = requires use of TLS1.3 to protect the RPKs.  YMMV

 

Mike> The Privac= y Considerations section talks about a common PoP key being a potential cor= relation handle and thus recommends that different PoP keys be used for dif= ferent parties.  Encrypting a common key could prevent observers unable to decrypt the messages from learning that = they key is shared but would not prevent correlation by parties that cooper= ate to compare their PoP keys.  So it’s not clear to me that the= suggestion above solves enough of the correlation problem that it’s worth including in the draft.  If you disagre= e, please suggest text for an additional Privacy Considerations paragraph.<= o:p>

 

Jim> I’ll look at this again, but I am n= ot sure that this is the correct place to put it.

 

[Schaad #16] Section 4 - Are audience restriction= s not done in CWT?  -- same issues as [Danyliw #12]

 

Mike> All claims= in CWTs (and JWTs) are optional, including the “aud” (audience= ) claim.  Particular profiles can suggest and require particular claim= s, as this profile does.  I have deleted the unnecessary middle sentence, which [Danyliw #12] correctly pointed out broke up the lo= gical flow of the exposition.  Thanks for pointing this out.

 

[Schaad #21] Section 6.2.2 - the value type is no= t an array for COSE_Encrypt or COSE_Encyrpt0, these are the values.  A= s written I could put in an array which is not one of those two structures = and be valid.   Ditto for COSE_Key, although w/ slightly less justification.

 

Mike> Thanks.&nb= sp; I updated these value type declarations to use the actual required COSE= _* types.

 

See the inline text of https://www.ietf.org/mail-archive/web/= ace/current/msg02802.html  for the proposed change for [Dan= yliw #7].

 

[Danyliw #7] Page 6, Section 3.3, The sentence &q= uot;The COSE_Key could, for instance, be encrypted using a COSE_Encrypt0 re= presentation using the AES-CCM-16-64-128 algorithm" seems out of place= .  What is this text explaining relative to the examples?

 

Mike> Thanks.&nb= sp; I deleted the confusing and unnecessary sentence.

 

=3D=3D[ face to face discussion required ]=3D=3D = Certain issues were deemed sufficiently complex to required face-to-face di= scussion at IETF 102.

 

[Schaad #14]  I have real problems w/ the us= e of a KID for POP identification.  It may identify the wrong key or, = if used for granting access, may have problems w/ identity collisions. = ; These need to be spelt out someplace to help people tracking down questions of why can't I verify w/ this CWT, I know it's rig= ht. -- See https://www.ietf.org/mail-archive/web= /ace/current/msg02853.html for more detailed discussion -- relat= ed issue to [Danyliw #8].

 

Mike> The paragr= aph sentence of the Operational Considerations section at https://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possession-03#secti= on-6 was added in draft -03 to address exactly this issue, after extens= ive discussion and wordsmithing on the mailing list.

 

Jim> During the last F2F meeting I sent a para= graph which I consider to be the minimal change which would be required.

 

Regards,

Roman

 

[1] https://www.ietf.org/mail-archive/web/= ace/current/msg02744.html

 

 

_______________________________________________

Ace mailing list

Ace@ietf.org

https://www.ietf.org/mailman/list= info/ace

 

   &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp; Thanks again,

   &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp; -- Mike

 

--_000_SN6PR00MB030496605F8FA507E8D53304F5C50SN6PR00MB0304namp_-- From nobody Fri Nov 9 02:51:49 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id ECC2C130DD3; Fri, 9 Nov 2018 02:51:41 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: internet-drafts@ietf.org To: Cc: ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.87.3 Auto-Submitted: auto-generated Precedence: bulk Reply-To: ace@ietf.org Message-ID: <154176070190.15004.17253180734999430619@ietfa.amsl.com> Date: Fri, 09 Nov 2018 02:51:41 -0800 Archived-At: Subject: [Ace] I-D Action: draft-ietf-ace-cwt-proof-of-possession-05.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Nov 2018 10:51:42 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF. Title : Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs) Authors : Michael B. Jones Ludwig Seitz Göran Selander Samuel Erdtman Hannes Tschofenig Filename : draft-ietf-ace-cwt-proof-of-possession-05.txt Pages : 16 Date : 2018-11-09 Abstract: This specification describes how to declare in a CBOR Web Token (CWT) that the presenter of the CWT possesses a particular proof-of- possession key. Being able to prove possession of a key is also sometimes described as being the holder-of-key. This specification provides equivalent functionality to "Proof-of-Possession Key Semantics for JSON Web Tokens (JWTs)" (RFC 7800), but using CBOR and CWTs rather than JSON and JWTs. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-cwt-proof-of-possession/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possession-05 https://datatracker.ietf.org/doc/html/draft-ietf-ace-cwt-proof-of-possession-05 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-cwt-proof-of-possession-05 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Nov 9 03:10:29 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 93873130DC8 for ; Fri, 9 Nov 2018 03:10:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.47 X-Spam-Level: X-Spam-Status: No, score=-2.47 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.47, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jMXU-pH1Bi9d for ; Fri, 9 Nov 2018 03:10:25 -0800 (PST) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-bl2nam06on0097.outbound.protection.outlook.com [104.47.53.97]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DA307127333 for ; Fri, 9 Nov 2018 03:10:24 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=4XqcIkeJBarg2fUqx/YXYOHl1raWjbXZpk/ctJJB3ZQ=; b=CwsdE6x+sZd32vOk7Z8CN4v97HV1felNQhuV6GS4p9OGQ9OLVZhVXiku8lO6VLPvksROFpwLV2OgvkRCEUKKhXrdxVA+fyvGy6lf0lN1Oulrf6oLCv20Evn1CnnfMsxEIBpKl6J3b5i3747BaUqHisR94NRNue+tcGZxv4myqEA= Received: from DM5PR00MB0296.namprd00.prod.outlook.com (52.132.128.37) by DM5PR00MB0439.namprd00.prod.outlook.com (52.132.129.149) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.1361.0; Fri, 9 Nov 2018 11:10:22 +0000 Received: from DM5PR00MB0296.namprd00.prod.outlook.com ([fe80::ecb8:1407:55a:56b2]) by DM5PR00MB0296.namprd00.prod.outlook.com ([fe80::ecb8:1407:55a:56b2%4]) with mapi id 15.20.1363.000; Fri, 9 Nov 2018 11:10:22 +0000 From: Mike Jones To: "ace@ietf.org" CC: Jim Schaad , Roman Danyliw Thread-Topic: Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs) spec adding Key ID considerations Thread-Index: AdR4GyUcMn00jH1KT0uf/VnRA3FyLg== Date: Fri, 9 Nov 2018 11:10:22 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [31.133.191.113] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; DM5PR00MB0439; 6:knyqvxoHBGOkg7rx3GTByKfhCcAJ7wLQB6BUsVf7UorZqSfS0U3BUP7pj/p9x/kKAyL9pzw5eIS/m70wKhN8/BuZWtUYPTQWq9M5bCV4f4r6Gxf5Ms1IXTjSpV5Q1pi15iYK9fqnPK1xl+IVp10cueZyFWWvzRr4TlGWIGLLyaicjOH53rCOKlWLlrHnUmDjlcdoXieb0ps+GFc8FpMa9WXR4xGWEmd/iZIwJqYccyq+0jITYJrQy+qY+HZk6aEhVzepnttH6BJxuIILLrlAkhmZjq+J/rG8bDEILRjD1VAhk7L7DIaRnHeuKOYFel1Xe+DhsUZI8xPTJdAqbuBFikmZi+2aFymQ8+E8r5EOJb+K8BiE7R6uxluJ//NKwmWrw8MdplSPlNM+PMKRgTw6LAJsI3Gd/LYNd2jEM6jQb0V+W3zJUzDk83KwefpLHDcZ9NnoaAI9TPPhpIBxgVVydg==; 5:OALhrilreY4n3+8h2uqaAHGbVP4eRDwd+Kp3z/B7vOB57EBbtgKrDqrVeiVPmb2tULfUSDDPPrCRJBl5efw0okjngmRwvbWZde4suvtmmln9VsLF2g8jgdziAruLhE6hG4xHCrtzn3JOvCsJCgZUTDprxUhFpKwCsKNsK85jqOg=; 7:RzoGxoSruGqC2s8dvoiV7xpL6VRnkLYqvgQa5/O/UpYXT9b0XBRJLSa7cW0p9H3juQBoCaPo+XV5gub5jQGPpzc2/xi1OoUohLL96nr4qUQBCDGleDD3+IgfBhGsBkh9IEh4Zn2xpdKdc+eR8ZUyXg== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 73ca113d-385b-410d-c552-08d64633f158 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(4652040)(4534185)(4627221)(201703031133081)(201702281549075)(5600074)(711020)(4618075)(2017052603328)(7193020); SRVR:DM5PR00MB0439; x-ms-traffictypediagnostic: DM5PR00MB0439: x-ms-exchange-purlcount: 9 authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(2017102700009)(2017102701064)(6040522)(8220035)(2401047)(5005006)(8121501046)(2017102702064)(20171027021009)(20171027022009)(20171027023009)(20171027024009)(20171027025009)(20171027026009)(2017102703076)(10201501046)(3002001)(93006095)(93001095)(3231390)(944501410)(4982022)(2018427008)(6055026)(148016)(149066)(150057)(6041310)(20161123562045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(20161123560045)(201708071742011)(7699051)(76991095); SRVR:DM5PR00MB0439; BCL:0; PCL:0; RULEID:; SRVR:DM5PR00MB0439; x-forefront-prvs: 08512C5403 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(396003)(39860400002)(136003)(366004)(376002)(346002)(209900001)(189003)(199004)(2501003)(74316002)(6436002)(53936002)(6916009)(10290500003)(97736004)(478600001)(54896002)(9686003)(6306002)(236005)(55016002)(5640700003)(81166006)(7736002)(72206003)(966005)(8676002)(256004)(14444005)(7696005)(8990500004)(1730700003)(81156014)(86362001)(2906002)(8936002)(66066001)(33656002)(14454004)(99286004)(25786009)(53376002)(4326008)(10090500001)(86612001)(606006)(2900100001)(3846002)(102836004)(68736007)(105586002)(22452003)(2351001)(26005)(316002)(71190400001)(54906003)(71200400001)(6506007)(790700001)(6116002)(5660300001)(486006)(21615005)(476003)(186003)(106356001)(6606295002); DIR:OUT; SFP:1102; SCL:1; SRVR:DM5PR00MB0439; H:DM5PR00MB0296.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: IeCIeCud9DEllLZjAHI6ZDuPAN7nyaWdHqGJ9FPlUb7CPUtuAOIhFdU4ced5PDgHr+oU7wYFT+iwrwIbNgmKu3gZwAaiu8OfvkGZQVnS3miI+GaC/Glejg4wiuhwyavKk4j33UQCvPu8QTPHF4ZNsQwC+19y/o2VXkVBcqGy915Xyy22UU/1KbAKm5xKPQfEvwPb10XHq3xmPaFp5TEN4JYbodTC/mQ2O7vPaFwu5ZKPhPVg0tC5j3y/XSTZ3Vv2JUp6nCNX0nHssgcTuZNgw8HPJeNfiKGmQ1KI7m+iMCRP3L13JItj+O9v92wGz5vwv8jpVwBnnVX2c+ZGJktTkh26STcd7PPvmVxoxzF3kig= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_DM5PR00MB0296C6B9E56649EDC42A9C4DF5C60DM5PR00MB0296namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 73ca113d-385b-410d-c552-08d64633f158 X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Nov 2018 11:10:22.3605 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR00MB0439 Archived-At: Subject: [Ace] Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs) spec adding Key ID considerations X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Nov 2018 11:10:28 -0000 --_000_DM5PR00MB0296C6B9E56649EDC42A9C4DF5C60DM5PR00MB0296namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Key ID confirmation method considerations suggested by Jim Schaad have been= added to the Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs) = specification. Per discussions in the working group meeting in Bangkok, it= 's now time for the shepherd review. The specification is available at: * https://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possession-05 An HTML-formatted version is also available at: * http://self-issued.info/docs/draft-ietf-ace-cwt-proof-of-possession-0= 5.html -- Mike P.S. This notice was also posted at http://self-issued.info/?p=3D1938 and = @selfissued. --_000_DM5PR00MB0296C6B9E56649EDC42A9C4DF5C60DM5PR00MB0296namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Key ID confirmation method considerations suggested = by Jim Schaad have been added to the Proof-of-Possession Key Semantics for = CBOR Web Tokens (CWTs) specification.  Per discussions in the working = group meeting in Bangkok, it's now time for the shepherd review.

 

The specification is available at:

 

An HTML-formatted version is also available at:=

 

        &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;        -- Mike

 

P.S.  This notice was also posted at http://self-issued.info/?p=3D1938 and @selfissued.

--_000_DM5PR00MB0296C6B9E56649EDC42A9C4DF5C60DM5PR00MB0296namp_-- From nobody Sun Nov 11 19:54:29 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 660C2127133 for ; Sun, 11 Nov 2018 19:54:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pqVNM2JMH7S1 for ; Sun, 11 Nov 2018 19:54:24 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3127E12007C for ; Sun, 11 Nov 2018 19:54:23 -0800 (PST) Received: from Jude (43.249.105.152) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Sun, 11 Nov 2018 19:49:03 -0800 From: Jim Schaad To: 'Roman Danyliw' CC: References: In-Reply-To: Date: Mon, 12 Nov 2018 10:53:50 +0700 Message-ID: <031e01d47a3b$54763880$fd62a980$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_031F_01D47A76.00D6E540" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQK3t/KwzGW0Jq2VqXtU/YGFoZNUvKOFBjbw Content-Language: en-us X-Originating-IP: [43.249.105.152] Archived-At: Subject: Re: [Ace] Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs) spec adding Key ID considerations X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Nov 2018 03:54:27 -0000 ------=_NextPart_000_031F_01D47A76.00D6E540 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Roman, This version addresses this issue. As I have stated in the past, I am not happy with resolution of a large number of the issues that I have raised, but I am not going to try and hold up this document. Jim From: Mike Jones Sent: Friday, November 9, 2018 6:10 PM To: ace@ietf.org Cc: Jim Schaad ; Roman Danyliw Subject: Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs) spec adding Key ID considerations Key ID confirmation method considerations suggested by Jim Schaad have been added to the Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs) specification. Per discussions in the working group meeting in Bangkok, it's now time for the shepherd review. The specification is available at: * https://tools.ietf.org/html/draft-ietf-ace-cwt-proof-of-possession-05 An HTML-formatted version is also available at: * http://self-issued.info/docs/draft-ietf-ace-cwt-proof-of-possession-05.html -- Mike P.S. This notice was also posted at http://self-issued.info/?p=1938 and @selfissued . ------=_NextPart_000_031F_01D47A76.00D6E540 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Roman,

 

This version = addresses this issue.  As I have stated in the past, I am not happy = with resolution of a large number of the issues that I have raised, but = I am not going to try and hold up this document.

 

Jim

 

 

 

From: Mike = Jones <Michael.Jones@microsoft.com>
Sent: Friday, = November 9, 2018 6:10 PM
To: ace@ietf.org
Cc: Jim = Schaad <ietf@augustcellars.com>; Roman Danyliw = <rdd@cert.org>
Subject: Proof-of-Possession Key = Semantics for CBOR Web Tokens (CWTs) spec adding Key ID = considerations

 

Key ID = confirmation method considerations suggested by Jim Schaad have been = added to the Proof-of-Possession Key Semantics for CBOR Web Tokens = (CWTs) specification.  Per discussions in the working group meeting = in Bangkok, it's now time for the shepherd review.

 

The = specification is available at:

 

An HTML-formatted version is also available = at:

 

         &= nbsp;           &n= bsp;           &nb= sp;           &nbs= p;         -- = Mike

 

P.S.  This notice was also posted at http://self-issued.info/?p=3D1= 938 and @selfissued.

------=_NextPart_000_031F_01D47A76.00D6E540-- From nobody Mon Nov 12 06:31:06 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06F03130E3E for ; Mon, 12 Nov 2018 06:31:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jJHvCqbd6Guq for ; Mon, 12 Nov 2018 06:31:02 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C6208130E30 for ; Mon, 12 Nov 2018 06:31:02 -0800 (PST) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 839D42008C; Mon, 12 Nov 2018 09:30:57 -0500 (EST) Received: by sandelman.ca (Postfix, from userid 179) id 705A0CA1; Mon, 12 Nov 2018 09:31:01 -0500 (EST) Received: from sandelman.ca (localhost [127.0.0.1]) by sandelman.ca (Postfix) with ESMTP id 6D7579DB; Mon, 12 Nov 2018 09:31:01 -0500 (EST) From: Michael Richardson To: Stefanie Gerdes cc: "Ace\@ietf.org" In-Reply-To: <4519f58c-c6f7-5ac0-003c-7ae4f59bccd4@tzi.de> References: <4519f58c-c6f7-5ac0-003c-7ae4f59bccd4@tzi.de> X-Mailer: MH-E 8.6; nmh 1.7+dev; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Ace] ACE Framework Review X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Nov 2018 14:31:05 -0000 --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Thanks for this amazing analysis. It languished in my inbox because it was not bikeshed material, and I had to think about things :-) Stefanie Gerdes wrote: > The minimal security requirements for the communication between two > communication partners should be listed (C-AS, RS-AS, C-RS, > respectively). Which pieces of information do they require prior to t= he > communication? How must the communication be secured? Which keying > material do they need to use? The framework should point out that all > claims that influence the security must stem from claimants that were > approved by the respective human being that is responsible for the > device, i.e., the requesting party for the client and the resource > owner for the AS and RS. Otherwise the solution is not secure. It seems that the answers should start with=20 "which keying material do they need to use" and then move upwards. > Management of the authz-info resource: * The authz-info resource is > vulnerable to DoS attacks: clients may (with or without intention) se= nd > large numbers of access tokens to RS. A constrained RS may soon run o= ut > of memory/storage space if it needs to store large numbers of This seems like a really serious issue, and it seems that we need an additional RTT to really fix it. =2D-=20 ] Never tell me the odds! | ipv6 mesh network= s [=20 ] Michael Richardson, Sandelman Software Works | network architect= [=20 ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails = [=20 =09 --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAlvpjqUACgkQgItw+93Q 3WWwbwgAmBCF8CIa/XCu3/kew/ruNL6gXEOYMmo8dDZX7z3A+AsXNiTOQEaKF4iT YIvwINsjv2qSKDJvcgrmXtOmsCHvz8SUAhngRX4xdoZ+MaxBfMjsfNcEcbv66yOb IRRbwOjLCBNgbmuNADKw304DuCM0m+QTwqnbF1Rh0s6Q3FDbGPKyGXDLeTbQNC7z aqdP+JgZkQSl9rKGdl3+g6lcQ8I0Q6YVe3gLGmmdj9zqbOe9FehJIvKsridhBbXM 89hc0L4dmohOy+0q+00ImV0P6B43y3n/JYp9JLAnvzBfWr2YsRA9Nk06tU5ea4Ql l1b0IkOcJcNoFgYam+SLkUxGQxA8qw== =GM31 -----END PGP SIGNATURE----- --=-=-=-- From nobody Mon Nov 12 06:50:29 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F484130E3E for ; Mon, 12 Nov 2018 06:50:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cn_hzW4trxNZ for ; Mon, 12 Nov 2018 06:50:26 -0800 (PST) Received: from smtp-out10.electric.net (smtp-out10.electric.net [185.38.180.38]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EBA50127333 for ; Mon, 12 Nov 2018 06:50:25 -0800 (PST) Received: from 1gMDXh-000ovP-Uz by out10b.electric.net with emc1-ok (Exim 4.90_1) (envelope-from ) id 1gMDXh-000oxR-Vx for ace@ietf.org; Mon, 12 Nov 2018 06:50:21 -0800 Received: by emcmailer; Mon, 12 Nov 2018 06:50:21 -0800 Received: from [194.218.146.197] (helo=sp-mail-2.sp.se) by out10b.electric.net with esmtps (TLSv1.2:ECDHE-RSA-AES128-SHA256:128) (Exim 4.90_1) (envelope-from ) id 1gMDXh-000ovP-Uz for ace@ietf.org; Mon, 12 Nov 2018 06:50:21 -0800 Received: from [192.168.0.166] (10.116.0.226) by sp-mail-2.sp.se (10.100.0.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1531.3; Mon, 12 Nov 2018 15:50:21 +0100 To: References: <4519f58c-c6f7-5ac0-003c-7ae4f59bccd4@tzi.de> <31652.1542033061@localhost> From: Ludwig Seitz Message-ID: Date: Mon, 12 Nov 2018 15:50:20 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.2.1 MIME-Version: 1.0 In-Reply-To: <31652.1542033061@localhost> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Originating-IP: [10.116.0.226] X-ClientProxiedBy: sp-mail-2.sp.se (10.100.0.162) To sp-mail-2.sp.se (10.100.0.162) X-Outbound-IP: 194.218.146.197 X-Env-From: ludwig.seitz@ri.se X-Proto: esmtps X-Revdns: X-HELO: sp-mail-2.sp.se X-TLS: TLSv1.2:ECDHE-RSA-AES128-SHA256:128 X-Authenticated_ID: X-Virus-Status: Scanned by VirusSMART (c) X-Virus-Status: Scanned by VirusSMART (s) X-PolicySMART: 14510320 Archived-At: Subject: Re: [Ace] ACE Framework Review X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Nov 2018 14:50:28 -0000 On 12/11/2018 15:31, Michael Richardson wrote: > > > Management of the authz-info resource: * The authz-info resource is > > vulnerable to DoS attacks: clients may (with or without intention) send > > large numbers of access tokens to RS. A constrained RS may soon run out > > of memory/storage space if it needs to store large numbers of > > This seems like a really serious issue, and it seems that we need > an additional RTT to really fix it. > Note Steffi's words were: "store large numbers of tokens". In order to have the RS store a large number of tokens, an attacker would need to have a large number of valid tokens for starters (since invalid tokens are not stored but discarded). Furthermore, since the RS checks whether the audience of a token applies, and can safely discard tokens that do not have a matching audience the attacker would need to have a large number of tokens that all match an audience that this RS identifies with. Finally we just learned at IETF 103 that OAuth typically does not use multiple, simultaneous access tokens for the same pair of client-RS. Thus if the token has a subject (sub claim) or some other binding to the client, the RS can safely discard all older tokens bound to the same client. Therefore I propose that an attack that induces the RS to store a large number of tokens is quite hard to pull of. Even so, lets still assume it would be possible, there is this part in the spec: ========================== 5.8.1. The Authorization Information Endpoint ... The RS MUST be prepared to store at least one access token for future use. ... ========================== This means that the RS can limit the total number of tokens it stores for future use based on its memory and storage space, as long as it stores at least one (in total, not per client). Thus I'm curious what additional protections you would suggest are feasible and necessary for the authz-info endpoint? /Ludwig -- Ludwig Seitz, PhD Security Lab, RISE Phone +46(0)70-349 92 51 From nobody Mon Nov 12 07:07:53 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B954130E0A for ; Mon, 12 Nov 2018 07:07:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sD93lSvMHwXq for ; Mon, 12 Nov 2018 07:07:50 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D5A412D4E8 for ; Mon, 12 Nov 2018 07:07:50 -0800 (PST) Received: from Jude (101.51.59.25) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Mon, 12 Nov 2018 07:02:33 -0800 From: Jim Schaad To: 'Ludwig Seitz' , References: <4519f58c-c6f7-5ac0-003c-7ae4f59bccd4@tzi.de> <31652.1542033061@localhost> In-Reply-To: Date: Mon, 12 Nov 2018 22:07:18 +0700 Message-ID: <037701d47a99$6ae451c0$40acf540$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQJDl5Bm99e9zGnxaPJuM5ZpOzU3eQGk5zLLAf9/nLKkUN/0UA== Content-Language: en-us X-Originating-IP: [101.51.59.25] Archived-At: Subject: Re: [Ace] ACE Framework Review X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Nov 2018 15:07:52 -0000 > -----Original Message----- > From: Ace On Behalf Of Ludwig Seitz > Sent: Monday, November 12, 2018 9:50 PM > To: ace@ietf.org > Subject: Re: [Ace] ACE Framework Review > > On 12/11/2018 15:31, Michael Richardson wrote: > > > > > > Management of the authz-info resource: * The authz-info resource is > > > vulnerable to DoS attacks: clients may (with or without intention) send > > > large numbers of access tokens to RS. A constrained RS may soon run > out > > > of memory/storage space if it needs to store large numbers of > > > > This seems like a really serious issue, and it seems that we need an > > additional RTT to really fix it. > > > > Note Steffi's words were: "store large numbers of tokens". > > In order to have the RS store a large number of tokens, an attacker would > need to have a large number of valid tokens for starters (since invalid tokens > are not stored but discarded). > > Furthermore, since the RS checks whether the audience of a token applies, > and can safely discard tokens that do not have a matching audience the > attacker would need to have a large number of tokens that all match an > audience that this RS identifies with. > > Finally we just learned at IETF 103 that OAuth typically does not use multiple, > simultaneous access tokens for the same pair of client-RS. > Thus if the token has a subject (sub claim) or some other binding to the > client, the RS can safely discard all older tokens bound to the same client. Putting the last three "checks" into the text someplace about DoS attacks as well as pointing to the echo option would be a good start to helping people make sure that they think about this problem and that they look at it solidly. I would also suggest that sending the same token over and over should not be a good attack as the RS can look at the AS and the token ID and not process if it is the same. Jim > > Therefore I propose that an attack that induces the RS to store a large > number of tokens is quite hard to pull of. > > Even so, lets still assume it would be possible, there is this part in the spec: > > ========================== > 5.8.1. The Authorization Information Endpoint > > .... > The RS MUST be prepared to store at least one access token for future > use. > .... > ========================== > > > This means that the RS can limit the total number of tokens it stores for > future use based on its memory and storage space, as long as it stores at > least one (in total, not per client). > > Thus I'm curious what additional protections you would suggest are feasible > and necessary for the authz-info endpoint? > > /Ludwig > > > > -- > Ludwig Seitz, PhD > Security Lab, RISE > Phone +46(0)70-349 92 51 > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace From nobody Mon Nov 12 07:22:03 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D610130E4D for ; Mon, 12 Nov 2018 07:22:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AbYXadYNzXAQ for ; Mon, 12 Nov 2018 07:21:59 -0800 (PST) Received: from smtp-out11.electric.net (smtp-out11.electric.net [185.38.181.47]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9BD26128DFD for ; Mon, 12 Nov 2018 07:21:59 -0800 (PST) Received: from 1gME2G-000Fif-Uu by out11a.electric.net with emc1-ok (Exim 4.90_1) (envelope-from ) id 1gME2G-000Fjq-W0 for ace@ietf.org; Mon, 12 Nov 2018 07:21:56 -0800 Received: by emcmailer; Mon, 12 Nov 2018 07:21:56 -0800 Received: from [194.218.146.197] (helo=sp-mail-2.sp.se) by out11a.electric.net with esmtps (TLSv1.2:ECDHE-RSA-AES128-SHA256:128) (Exim 4.90_1) (envelope-from ) id 1gME2G-000Fif-Uu for ace@ietf.org; Mon, 12 Nov 2018 07:21:56 -0800 Received: from [192.168.0.166] (10.116.0.226) by sp-mail-2.sp.se (10.100.0.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1531.3; Mon, 12 Nov 2018 16:21:56 +0100 To: "ace@ietf.org" From: Ludwig Seitz Message-ID: <39e815e5-e602-0253-d324-13fb48f92d3a@ri.se> Date: Mon, 12 Nov 2018 16:21:55 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.2.1 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Originating-IP: [10.116.0.226] X-ClientProxiedBy: sp-mail-2.sp.se (10.100.0.162) To sp-mail-2.sp.se (10.100.0.162) X-Outbound-IP: 194.218.146.197 X-Env-From: ludwig.seitz@ri.se X-Proto: esmtps X-Revdns: X-HELO: sp-mail-2.sp.se X-TLS: TLSv1.2:ECDHE-RSA-AES128-SHA256:128 X-Authenticated_ID: X-Virus-Status: Scanned by VirusSMART (c) X-Virus-Status: Scanned by VirusSMART (s) X-PolicySMART: 14510320 Archived-At: Subject: [Ace] Resume of discussion at IETF 103 meeting on draft-ietf-ace-oauth-authz X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Nov 2018 15:22:02 -0000 Hello ACE, I wanted to post a resume of the in room discussions from the IETF 103 meeting, related to draft-ietf-ace-oauth-authz, for those who missed them and those who want to further comment (sorry for the verbose summary below): During my presentation I put up a 7 issues for discussion as follows: 1. Use of one-byte CBOR abbreviations for parameters and CWT claims. So far there is a consensus between me and Mike Jones on what we think is reasonable. This would be summarized here: https://www.ietf.org/mail-archive/web/ace/current/msg03053.html I was wondering if anyone else wants to weight in on what they consider important parameters & claims for constrained applications that need compact (one-byte) abbreviations in CBOR? 2. Unified registry for CWT claims and token/introspection parameter abbreviations Currently the draft(s) have aligned the CBOR abbreviations for both CWT claims and token/introspection parameters under one singe number space. There were arguments for splitting this up so that we can re-use the same compact one-byte abbreviations in those different "namespaces" i.e. there would be a number range just for CWT claims, and a separate one for introspection and token endpoint parameters. Even here I'm interested in additional input. 3. CWT as format for signed protocol messages As OAuth is currently working on a number of drafts specifying JWT as a format for encoding request (and response?) parameters wrt. the token and the introspection endpoint, the question was raised whether this should also be done for ACE and CWT. My stance here (and I got the impression that the room agreed or at least had no strong opinion against) is that this is absolutely possible, but would best be done in an additional draft in order to not increase the already significant delay of draft-ietf-ace-oauth-authz. 4. Alignment between "req_aud" and "resource" parameters draft-ietf-oauth-resource-indicators proposes a new parameter for the token request called "resource" which specifies the location of the resource or service for which the token is requested. This is supposed to map to the audience claim in the token. draft-ietf-ace-oauth-params has in parallel defined the "req_aud" parameter (for "requested audience") which has a somewhat broader definition, roughly speaking "a value that the RS identifies with". This could be a public key, a group identifier or something else, so the key difference is that it is not specifically bound to the location of the RS. I would argue to keep the "req_aud" as it is currently (since it covers a broader set of use cases than "resource"), but I would be curious to hear additional arguments for or against. 5. Handling of multiple tokens for one pair of client-RS The question was whether an additional token issued for the same client-RS pair would a.) Amend the permissions (i.e. scope) of the older token(s) b.) Replace all older tokens for that client-RS pair My implementation and my current understanding of the draft was a.) but apparently OAuth mostly does b.). I would be strongly in favor of doing b.) (and clarifying the specs to this end) since it greatly simplifies the code on the RS side. Unless someone has a strong argument for approach a. I will implement that change in the next document update. 6. Do we need the expiration mechanism based on sequence numbers? Section 5.8.3 of the draft currently proposes a sequence-number-based mechanism for expiration of access tokens on devices that do not have an internal clock. Since this mechanisms has pretty severe limitations and thus very weak security properties, and since we haven't yet seen a use case involving devices without at least an internal "wall-clock time" I propose to remove that mechanism from the draft, which seemed to be the in-room consensus as well. 7. Symmetric proof-of-possession keys and multi RS audiences Currently the draft does NOT RECOMMEND this, since it allows one RS to impersonate the client towards other RSs that are part of the audience. The in-room consensus seemed to be that this should be a MUST NOT instead and I agree. /Ludwig -- Ludwig Seitz, PhD Security Lab, RISE Phone +46(0)70-349 92 51 From nobody Mon Nov 12 09:47:36 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2A8D0130DE2 for ; Mon, 12 Nov 2018 09:47:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zqgn3DIZtnQC for ; Mon, 12 Nov 2018 09:47:32 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 77695130DC6 for ; Mon, 12 Nov 2018 09:47:32 -0800 (PST) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 4FC542008C; Mon, 12 Nov 2018 12:47:26 -0500 (EST) Received: by sandelman.ca (Postfix, from userid 179) id 3E63ACA1; Mon, 12 Nov 2018 12:47:30 -0500 (EST) Received: from sandelman.ca (localhost [127.0.0.1]) by sandelman.ca (Postfix) with ESMTP id 3C4409DB; Mon, 12 Nov 2018 12:47:30 -0500 (EST) From: Michael Richardson To: Ludwig Seitz cc: "ace\@ietf.org" In-Reply-To: <39e815e5-e602-0253-d324-13fb48f92d3a@ri.se> References: <39e815e5-e602-0253-d324-13fb48f92d3a@ri.se> X-Mailer: MH-E 8.6; nmh 1.7+dev; GNU Emacs 24.5.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Ace] Resume of discussion at IETF 103 meeting on draft-ietf-ace-oauth-authz X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Nov 2018 17:47:35 -0000 --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Ludwig Seitz wrote: > I wanted to post a resume of the in room discussions from the IETF 103 > meeting, related to draft-ietf-ace-oauth-authz, for those who missed > them and those who want to further comment (sorry for the verbose > summary below): > During my presentation I put up a 7 issues for discussion as follows: > 1. Use of one-byte CBOR abbreviations for parameters and CWT claims. > So far there is a consensus between me and Mike Jones on what we think > is reasonable. > This would be summarized here: > https://www.ietf.org/mail-archive/web/ace/current/msg03053.html This message seems to be about which ones get abbreviated. I was thinking more that we need to have some process by which new claim parameters get introduced, and how we observe they become popular, and then then give them an abbreviation. Unless I'm mistaken, a three character claim ("iss", "sub", etc.) will take four bytes to encode. That's not that expensive, but there are naturally a limited number of interesting three letter codes. Since we verify the signature and then interpret, (rather than interpret, t= ry to put it back into canonical order and verify), it seems that we can easily replace longer codes with shorter ones as long as we can be sure our audien= ce knows the new shorter codes. This last part seems the hardest part. > There were arguments for splitting this up so that we can re-use the > same compact one-byte abbreviations in those different "namespaces" > i.e. there would be a number range just for CWT claims, and a separate > one for introspection and token endpoint parameters. > Even here I'm interested in additional input. I see both points of view, and I just don't know. Clearly we need to decide *NOW* if want them to be seperate namespaces so that programs build different tables. If we later merge them, then that's an easy transition. Do they already have different IANA registries? (I should know, but I don'= t) =2D-=20 ] Never tell me the odds! | ipv6 mesh network= s [=20 ] Michael Richardson, Sandelman Software Works | network architect= [=20 ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails = [=20 =09 --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAlvpvLEACgkQgItw+93Q 3WVQ5QgAwyMpIt8RiN5H7/1CL8t9H3jScR/8bhXWj40OtgzxibWVlSXj4pFnDa/l iWVOkKMIK52W9Aocd4ulykN9/jSz/ibrwTfRRocujveBUcrjJG+SHrZie5/ayYPl CwC58NOUpaYIRWMHfrvhjtBACTESHGPZlsjGwOjBqaB+36S0SkSStfxwhpzasddF OGwtEwTgf/00m5UZjnr0ywDecb6iGnejq2YPKLmX8bbLExcEXB/hn+jzMY/9bkjB Etd04fcL72q8c8SIOcE3c1WIICTtlESU67JInGLg5Iq0WUdxYewTHe0Ah3nMkHIs wOROplQNjjyfihC10EXeZJ+z1mTPIA== =D86K -----END PGP SIGNATURE----- --=-=-=-- From nobody Mon Nov 12 20:07:26 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1DD30126F72 for ; Mon, 12 Nov 2018 20:07:25 -0800 (PST) X-Quarantine-ID: X-Virus-Scanned: amavisd-new at amsl.com X-Amavis-Alert: BAD HEADER SECTION, Non-encoded 8-bit data (char 9C hex): Received: ...s kaduk@ATHENA.MIT.EDU)\n\t\234by outgoing.mit[...] X-Spam-Flag: NO X-Spam-Score: -4.2 X-Spam-Level: X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GtE2lq8nPGwb for ; Mon, 12 Nov 2018 20:07:22 -0800 (PST) Received: from dmz-mailsec-scanner-7.mit.edu (dmz-mailsec-scanner-7.mit.edu [18.7.68.36]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DEB50124408 for ; Mon, 12 Nov 2018 20:07:21 -0800 (PST) X-AuditID: 12074424-789ff70000000471-4e-5bea4df64911 Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-7.mit.edu (Symantec Messaging Gateway) with SMTP id 2E.BC.01137.7FD4AEB5; Mon, 12 Nov 2018 23:07:19 -0500 (EST) Received: from outgoing.mit.edu (OUTGOING-AUTH-1.MIT.EDU [18.9.28.11]) by mailhub-auth-3.mit.edu (8.14.7/8.9.2) with ESMTP id wAD47HTG007983; Mon, 12 Nov 2018 23:07:18 -0500 Received: from kduck.kaduk.org (24-107-191-124.dhcp.stls.mo.charter.com [24.107.191.124]) (authenticated bits=56) (User authenticated as kaduk@ATHENA.MIT.EDU) œby outgoing.mit.edu (8.14.7/8.12.4) with ESMTP id wAD47DAe008760 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT); Mon, 12 Nov 2018 23:07:16 -0500 Date: Mon, 12 Nov 2018 22:07:13 -0600 From: Benjamin Kaduk To: Ludwig Seitz Cc: "ace@ietf.org" Message-ID: <20181113040713.GH99562@kduck.kaduk.org> References: <39e815e5-e602-0253-d324-13fb48f92d3a@ri.se> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <39e815e5-e602-0253-d324-13fb48f92d3a@ri.se> User-Agent: Mutt/1.9.1 (2017-09-22) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrBIsWRmVeSWpSXmKPExsUixCmqrfvd91W0wbIWG4vv33qYLV59ns7q wOSxZMlPJo+lTZuZApiiuGxSUnMyy1KL9O0SuDIOTJnIXDBfveLNxA3sDYzd8l2MHBwSAiYS CycadTFycQgJrGGS2LavkRXC2cgosWLnGSYI5y6TxMp5d1i6GDk5WARUJX4sOcEGYrMJqEg0 dF9mBrFFgOInn35hBpnKLKAo8feSKkhYWCBa4tzWpWAlvEDL1i/5AjZGSMBCYtOfHkaIuKDE yZlPwOLMAloSN/69ZIIYIy2x/B8HiMkpYClx+3s6SIWogLLE3r5D7BMYBWYhaZ6FpHkWQvMC RuZVjLIpuVW6uYmZOcWpybrFyYl5ealFuuZ6uZkleqkppZsYQQHK7qKyg7G7x/sQowAHoxIP 74npL6OFWBPLiitzDzFKcjApifJmPgIK8SXlp1RmJBZnxBeV5qQWH2KU4GBWEuHdafIqWog3 JbGyKrUoHyYlzcGiJM77R+RxtJBAemJJanZqakFqEUxWhoNDSYJXDhiJQoJFqempFWmZOSUI aSYOTpDhPEDDz/qADC8uSMwtzkyHyJ9iVJQS590GkhAASWSU5sH1ghKIRPb+mleM4kCvCPNe BqniASYfuO5XQIOZgAaXvHwOMrgkESEl1cC4efaca/tm55xqb/oVVPlp2zPjvKx1jF7i9QGC bLOSDonrLtfl9hdzDGeanfXIcGuLr/bUB6f2HOdpPlqk6vlys2qibe3eFSF2CiYN654r/zQ3 VPhT9S9LSWDh52kCXVdfsp6U7rksJZQq2rqfzV717VylTb8XRnSIzbw8/fnvJXKucxyEHzgq sRRnJBpqMRcVJwIAL1BIJPsCAAA= Archived-At: Subject: Re: [Ace] Resume of discussion at IETF 103 meeting on draft-ietf-ace-oauth-authz X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Nov 2018 04:07:25 -0000 [with no hats] On Mon, Nov 12, 2018 at 04:21:55PM +0100, Ludwig Seitz wrote: > Hello ACE, > > I wanted to post a resume of the in room discussions from the IETF 103 > meeting, related to draft-ietf-ace-oauth-authz, for those who missed > them and those who want to further comment (sorry for the verbose > summary below): > > > During my presentation I put up a 7 issues for discussion as follows: > > > 1. Use of one-byte CBOR abbreviations for parameters and CWT claims. > > So far there is a consensus between me and Mike Jones on what we think > is reasonable. > > This would be summarized here: > https://www.ietf.org/mail-archive/web/ace/current/msg03053.html > > I was wondering if anyone else wants to weight in on what they consider > important parameters & claims for constrained applications that need > compact (one-byte) abbreviations in CBOR? > > > 2. Unified registry for CWT claims and token/introspection parameter > abbreviations > > Currently the draft(s) have aligned the CBOR abbreviations for both CWT > claims and token/introspection parameters under one singe number space. > > There were arguments for splitting this up so that we can re-use the > same compact one-byte abbreviations in those different "namespaces" i.e. > there would be a number range just for CWT claims, and a separate one > for introspection and token endpoint parameters. > > Even here I'm interested in additional input. I have no real data (or argument) here, but my gut feeling is that eventually there would be desire for them to diverge, which would indicate cleanly separating them from the start. > 3. CWT as format for signed protocol messages > > As OAuth is currently working on a number of drafts specifying JWT as a > format for encoding request (and response?) parameters wrt. the token > and the introspection endpoint, the question was raised whether this > should also be done for ACE and CWT. > > My stance here (and I got the impression that the room agreed or at > least had no strong opinion against) is that this is absolutely > possible, but would best be done in an additional draft in order to not > increase the already significant delay of draft-ietf-ace-oauth-authz. I agree. > > 4. Alignment between "req_aud" and "resource" parameters > > draft-ietf-oauth-resource-indicators proposes a new parameter for the > token request called "resource" which specifies the location of the > resource or service for which the token is requested. This is supposed > to map to the audience claim in the token. > > draft-ietf-ace-oauth-params has in parallel defined the "req_aud" > parameter (for "requested audience") which has a somewhat broader > definition, roughly speaking "a value that the RS identifies with". This > could be a public key, a group identifier or something else, so the key > difference is that it is not specifically bound to the location of the RS. > > I would argue to keep the "req_aud" as it is currently (since it covers > a broader set of use cases than "resource"), but I would be curious to > hear additional arguments for or against. > > > 5. Handling of multiple tokens for one pair of client-RS > > The question was whether an additional token issued for the same > client-RS pair would > > a.) Amend the permissions (i.e. scope) of the older token(s) > > b.) Replace all older tokens for that client-RS pair > > My implementation and my current understanding of the draft was a.) but > apparently OAuth mostly does b.). > I would be strongly in favor of doing b.) (and clarifying the specs to > this end) since it greatly simplifies the code on the RS side. Unless > someone has a strong argument for approach a. I will implement that > change in the next document update. > > > 6. Do we need the expiration mechanism based on sequence numbers? > > Section 5.8.3 of the draft currently proposes a sequence-number-based > mechanism for expiration of access tokens on devices that do not have an > internal clock. Since this mechanisms has pretty severe limitations and > thus very weak security properties, and since we haven't yet seen a use > case involving devices without at least an internal "wall-clock time" I > propose to remove that mechanism from the draft, which seemed to be the > in-room consensus as well. Some idea of wall-clock time is common, yes, but it is frequently easy for an attacker to cause it to be wrong. See, e.g., https://www.ietf.org/mail-archive/web/ietf/current/msg110144.html and the document reviewed therein. > > 7. Symmetric proof-of-possession keys and multi RS audiences > > Currently the draft does NOT RECOMMEND this, since it allows one RS to > impersonate the client towards other RSs that are part of the audience. > The in-room consensus seemed to be that this should be a MUST NOT > instead and I agree. No objection here :) -Ben From nobody Mon Nov 12 20:47:24 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6BAE4126F72 for ; Mon, 12 Nov 2018 20:47:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DolT4GmapanY for ; Mon, 12 Nov 2018 20:47:20 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AD8CD124408 for ; Mon, 12 Nov 2018 20:47:19 -0800 (PST) Received: from Jude (210.160.37.27) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Mon, 12 Nov 2018 20:42:23 -0800 From: Jim Schaad To: 'Ludwig Seitz' , References: <39e815e5-e602-0253-d324-13fb48f92d3a@ri.se> In-Reply-To: <39e815e5-e602-0253-d324-13fb48f92d3a@ri.se> Date: Tue, 13 Nov 2018 13:47:10 +0900 Message-ID: <000001d47b0b$f2169550$d643bff0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQIcnhk+orfj/yndowaFI/EG3efuz6S814tQ Content-Language: en-us X-Originating-IP: [210.160.37.27] Archived-At: Subject: Re: [Ace] Resume of discussion at IETF 103 meeting on draft-ietf-ace-oauth-authz X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 13 Nov 2018 04:47:23 -0000 Most of this is a restatement of previous positions. > -----Original Message----- > From: Ace On Behalf Of Ludwig Seitz > Sent: Tuesday, November 13, 2018 12:22 AM > To: ace@ietf.org > Subject: [Ace] Resume of discussion at IETF 103 meeting on draft-ietf-ace- > oauth-authz > > Hello ACE, > > I wanted to post a resume of the in room discussions from the IETF 103 > meeting, related to draft-ietf-ace-oauth-authz, for those who missed them > and those who want to further comment (sorry for the verbose summary > below): > > > During my presentation I put up a 7 issues for discussion as follows: > > > 1. Use of one-byte CBOR abbreviations for parameters and CWT claims. > > So far there is a consensus between me and Mike Jones on what we think is > reasonable. > > This would be summarized here: > https://www.ietf.org/mail-archive/web/ace/current/msg03053.html > > I was wondering if anyone else wants to weight in on what they consider > important parameters & claims for constrained applications that need > compact (one-byte) abbreviations in CBOR? I have already weighted in where I care. > > > 2. Unified registry for CWT claims and token/introspection parameter > abbreviations > > Currently the draft(s) have aligned the CBOR abbreviations for both CWT > claims and token/introspection parameters under one singe number space. > > There were arguments for splitting this up so that we can re-use the same > compact one-byte abbreviations in those different "namespaces" i.e. > there would be a number range just for CWT claims, and a separate one for > introspection and token endpoint parameters. > > Even here I'm interested in additional input. Especially after having gone to the RATS BOF, I really want to get these separated and set an example for how things are done in the future. Having a CWT claim which identifies a namespace allows for a maximum number of groups to define a new claim and then control the assignment within that namespace in order to minimize size of those values. Trying to go through this process for the CWT claim experts does not make any sense. > > 3. CWT as format for signed protocol messages > > As OAuth is currently working on a number of drafts specifying JWT as a > format for encoding request (and response?) parameters wrt. the token and > the introspection endpoint, the question was raised whether this should also > be done for ACE and CWT. > > My stance here (and I got the impression that the room agreed or at least > had no strong opinion against) is that this is absolutely possible, but would > best be done in an additional draft in order to not increase the already > significant delay of draft-ietf-ace-oauth-authz. This is trivial to do and should definitely be in a different document, but I would like to know that people are going to really implement it before publishing a document. One thing is that we already have this ability w/ the OSCORE wrappers so the set of use cases may be very different. > > > 4. Alignment between "req_aud" and "resource" parameters > > draft-ietf-oauth-resource-indicators proposes a new parameter for the > token request called "resource" which specifies the location of the resource > or service for which the token is requested. This is supposed to map to the > audience claim in the token. > > draft-ietf-ace-oauth-params has in parallel defined the "req_aud" > parameter (for "requested audience") which has a somewhat broader > definition, roughly speaking "a value that the RS identifies with". This could > be a public key, a group identifier or something else, so the key difference is > that it is not specifically bound to the location of the RS. > > I would argue to keep the "req_aud" as it is currently (since it covers a > broader set of use cases than "resource"), but I would be curious to hear > additional arguments for or against. I agree with this. We still need to get Hannes to clear his head and figure out if he agrees with this after the discussions in Bangkok. > > > 5. Handling of multiple tokens for one pair of client-RS > > The question was whether an additional token issued for the same client-RS > pair would > > a.) Amend the permissions (i.e. scope) of the older token(s) > > b.) Replace all older tokens for that client-RS pair > > My implementation and my current understanding of the draft was a.) but > apparently OAuth mostly does b.). > I would be strongly in favor of doing b.) (and clarifying the specs to this end) > since it greatly simplifies the code on the RS side. Unless someone has a > strong argument for approach a. I will implement that change in the next > document update. I am not a big fan of this as I think that it may lead to more tokens being issued. Have a long term token for doing reads and a very short term token for doing writes without having to have different authentication seems to be a problem that I am not sure how it would be solved. > > > 6. Do we need the expiration mechanism based on sequence numbers? > > Section 5.8.3 of the draft currently proposes a sequence-number-based > mechanism for expiration of access tokens on devices that do not have an > internal clock. Since this mechanisms has pretty severe limitations and thus > very weak security properties, and since we haven't yet seen a use case > involving devices without at least an internal "wall-clock time" I propose to > remove that mechanism from the draft, which seemed to be the in-room > consensus as well. Not having something like an internal I have been running for clock is just not something that I would worry about. This does not mean that a wall clock exists so you would need to look at how the exp in a CWT is specified. You many need some type of good for n time rather than a wall time. > > > 7. Symmetric proof-of-possession keys and multi RS audiences > > Currently the draft does NOT RECOMMEND this, since it allows one RS to > impersonate the client towards other RSs that are part of the audience. > The in-room consensus seemed to be that this should be a MUST NOT > instead and I agree. I think this should remain at NOT RECOMMENDED because in the future I think it might be desired. Jim > > /Ludwig > > > > -- > Ludwig Seitz, PhD > Security Lab, RISE > Phone +46(0)70-349 92 51 > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace From nobody Mon Nov 19 18:32:51 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 531C2124BE5 for ; Mon, 19 Nov 2018 18:32:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3nOw014-Iaef for ; Mon, 19 Nov 2018 18:32:47 -0800 (PST) Received: from veto.sei.cmu.edu (veto.sei.cmu.edu [147.72.252.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8F0CE124BAA for ; Mon, 19 Nov 2018 18:32:47 -0800 (PST) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by veto.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id wAK2WkpL011444 for ; Mon, 19 Nov 2018 21:32:46 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 veto.sei.cmu.edu wAK2WkpL011444 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1542681166; bh=PvQTj+OJ+0FUEJrE8SoFKkvLkYEoJZ7MkgkTAVYOKl0=; h=From:To:Subject:Date:From; b=Rxf58iN8Csk4jdgpDrVT/Zfytz4wHnY8/D5T+eKv+ZOY0ZTs7vr9dpBtjvsmftTcw oMwQ5435CC6bXdN5zqEtgSXFPxXMirDc/mMisCmVar7HhqY9gXzzSWbpCshnRhfcL5 TPOd0q57V24F6gPgqL0k4HSNS1ubiwRHu9RxTq+Q= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id wAK2WhMJ040743 for ; Mon, 19 Nov 2018 21:32:43 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASSINA.ad.sei.cmu.edu ([10.64.28.249]) with mapi id 14.03.0415.000; Mon, 19 Nov 2018 21:32:42 -0500 From: Roman Danyliw To: "ace@ietf.org" Thread-Topic: Draft IETF 103 minutes available Thread-Index: AdSAeTnJPOj6BgAiSiucT8Tqizdfzg== Date: Tue, 20 Nov 2018 02:32:42 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0184C4376E@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Ace] Draft IETF 103 minutes available X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Nov 2018 02:32:49 -0000 Hello! Thanks to Ivaylo Petrov, a preliminary version of the minutes from the Bang= kok meeting is available at: https://datatracker.ietf.org/meeting/103/materials/minutes-103-ace-00 If you have corrections or revisions, please provide it to the chairs. Regards, Roman and Jim From nobody Wed Nov 21 07:03:10 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DA133130E33 for ; Wed, 21 Nov 2018 07:03:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.861 X-Spam-Level: X-Spam-Status: No, score=-3.861 tagged_above=-999 required=5 tests=[DKIMWL_WL_HIGH=-1.46, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com header.b=c7j5RQwz; dkim=pass (1024-bit key) header.d=ericsson.com header.b=JinS5a5t Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oG6DUNw1kTWE for ; Wed, 21 Nov 2018 07:03:02 -0800 (PST) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A80C512E7C1 for ; Wed, 21 Nov 2018 07:02:59 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1542812575; x=1545404575; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:CC:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=vsZIq9w+gy8WWAdL1/fz9uBTXA9RFp2K+6shkX5vy9Y=; b=c7j5RQwznBS8uAexjvxyKh+y8euodXXFWTSltJbXG+ylbCJL7BktA1KUGGBGqqiD 7cV9lMLYkEahkpftbkNsv6lEe4WD1EhneimimUqYc2Vs1Uo6oaksmLqnL3xOh2gK QjNaQmdFAjEgSm4S+wUUXt7zrbILg8U+T1xPP1DUtTM=; X-AuditID: c1b4fb3a-477ff70000002747-38-5bf5739f459c Received: from ESESSMB505.ericsson.se (Unknown_Domain [153.88.183.123]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id B1.FE.10055.F9375FB5; Wed, 21 Nov 2018 16:02:55 +0100 (CET) Received: from ESESBMB502.ericsson.se (153.88.183.169) by ESESSMB505.ericsson.se (153.88.183.166) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Wed, 21 Nov 2018 16:02:55 +0100 Received: from EUR02-HE1-obe.outbound.protection.outlook.com (153.88.183.157) by ESESBMB502.ericsson.se (153.88.183.169) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3 via Frontend Transport; Wed, 21 Nov 2018 16:02:55 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=vsZIq9w+gy8WWAdL1/fz9uBTXA9RFp2K+6shkX5vy9Y=; b=JinS5a5tSMU/bWedNtnTI5IQ967GwI15fEoP2y8ZoV4IZxU5JqNxMik66QevR5b83pP6NjaVlwfIvcw4MMPXkVhlwYlaLPnZRJX3OxGUsDxNg3jpVvrPW/eBNyhfxFUN8Db0BuVMBUBqSdBxL27dmGnTph1x5gDCTYwRNNsysnU= Received: from HE1PR07MB4169.eurprd07.prod.outlook.com (20.176.166.22) by HE1PR07MB3211.eurprd07.prod.outlook.com (10.170.246.14) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1361.12; Wed, 21 Nov 2018 15:02:53 +0000 Received: from HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::18ff:fb34:36ea:bd64]) by HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::18ff:fb34:36ea:bd64%4]) with mapi id 15.20.1361.013; Wed, 21 Nov 2018 15:02:53 +0000 From: John Mattsson To: "ace@ietf.org" , "lwip@ietf.org" CC: Benjamin Kaduk , "salvador.p.f@um.es" Thread-Topic: [Ace] EDHOC standardization Thread-Index: AQHUcrwmx6N1o4AsH0uz6RMW3Bvpj6U+JgWAgBxb0gA= Date: Wed, 21 Nov 2018 15:02:53 +0000 Message-ID: <7F78CC92-5C48-4BFC-8087-E25D4D95A74F@ericsson.com> References: <20181103145857.GG54966@kduck.kaduk.org> In-Reply-To: <20181103145857.GG54966@kduck.kaduk.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.11.0.180909 x-originating-ip: [192.176.1.83] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; HE1PR07MB3211; 6:yeZp81piXg8WLiKecWn6APvGLF0u35/WrQSoPIrXWMWHefepw52dE6vadlawnSDlbHi6MNIkOsUXXcxmRHmJf1bNTjUredqyV0HyhrsR/zEB5WseVaUxYsDOYqaixSb0lMUIayZ22+UrL3lcOAp3xf9vY0J+54YKQYv3SRCcaxVCw2HyHSvgjPwZOs4PcHJOZkicGZ+UqR9TKkW4LF6tI35rJ1Dg5i7cQAkbWd3uweOfoB1ulYOCipfoYnqDpx9Vi7eGL6eulq7CJJC6Ex63tDWPnXbaK8kMAVIZH398F3KZ9dZpObYtLiMF9RVrZ0XS3Go2YOMS8K/WSf24vP7otsmBkaBwxjB6hUaKztmFuNHDEeYlcDxq1/rT7MuKJwU1Da+05DFWVp7wlq9RAVGMX6bK/sElBA3fmjRwS3g1Q15LIlpjSar2mbKsQTKQlnr3XoDjbwy7dMVOwC8ji/iDJw==; 5:AEKHKTIvl+8iSSSkaoY9QUd8H65v/3/w8RHUrdeSZ/JJWs05GUkB6d0+hDQ1W+SLfG+o3wnSOYCMOCiypf7eLxm6tHBJGOYoD1IpnVtIHBd8+3aWnfmfnPr+2I4L9Iq1C/Rg+a6hwktml09fejpIzQOwD6So/OKdpnq8iq+JbVM=; 7:Nu5Qr9ocPWgsiWWlxtEQOCgMXbtE/PKRZMYJO5sYuhdK8oBa5n7ZxbkAGPcd+13AJiqRP7+0tGgJPdwh2fK9C6ryYRLl54cBsKLyrrGxU1ocgjdGEgCkJLN+WpInFYq8/YecPfznvdwi/+eUulFkWg== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 2aa08f2c-fece-440b-c252-08d64fc269c5 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390098)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(2017052603328)(7153060)(7193020); SRVR:HE1PR07MB3211; x-ms-traffictypediagnostic: HE1PR07MB3211: authentication-results: spf=none (sender IP is ) smtp.mailfrom=john.mattsson@ericsson.com; x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(3002001)(93006095)(93001095)(3231442)(944501410)(52105112)(10201501046)(148016)(149066)(150057)(6041310)(20161123562045)(20161123560045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(201708071742011)(7699051)(76991095); SRVR:HE1PR07MB3211; BCL:0; PCL:0; RULEID:; SRVR:HE1PR07MB3211; x-forefront-prvs: 08635C03D4 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(366004)(376002)(346002)(136003)(396003)(53754006)(13464003)(199004)(189003)(51914003)(6306002)(106356001)(68736007)(44832011)(105586002)(26005)(25786009)(66066001)(4326008)(3846002)(6116002)(53936002)(82746002)(6246003)(83716004)(102836004)(6506007)(966005)(71190400001)(6436002)(478600001)(256004)(7736002)(305945005)(86362001)(4744004)(6486002)(486006)(76176011)(81156014)(81166006)(11346002)(8936002)(2616005)(2906002)(476003)(36756003)(229853002)(99286004)(97736004)(316002)(53946003)(54906003)(6512007)(186003)(58126008)(33656002)(53546011)(8676002)(2900100001)(71200400001)(14454004)(5660300001)(110136005)(446003)(14444005)(2501003); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB3211; H:HE1PR07MB4169.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: JCY4KttXnCvusM/6CuBPixSLBQ02bybYFo69m482DB9XUQf074+f3U5pdfsJxmjQyrxbBX2q2dBUZIR4d/ucI574xY5QEGzszkw+w8a6SOqG2yEw0wjGF/sFj4nZMv/gYqEbqUdZRsfJTm3ZPgze1ESKJ+9EJRiVR8X7b+vILeHK1qjmmziDvsvqGH9vm1W4/pU82sVpzDw6xDvl7ZSAmkGMppUiM5Mgd4i5vJ+eEF9+qBsDzxKQVWvv/F94BB6oGd65l7gUFTdmdMtvsUDx4H0C1uiBdpBKFz2WmCC7fVnlF02yYazShBw1JJoIlSGcAi5/oaSEMU2vJ0HqHr14uAl1+1Le2SNScVAxKGJ22CE= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <65B3EED7F61B8D4485F3C1F591F5612F@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 2aa08f2c-fece-440b-c252-08d64fc269c5 X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Nov 2018 15:02:53.5071 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB3211 X-OriginatorOrg: ericsson.com X-Brightmail-Tracker: H4sIAAAAAAAAA02Sa0hTYRjHec85c8fp6G1qPmpZrgJTvLRKhomXRbAvUl8CUbqsPKl531FJ /SKZZt6y3EinbYkjwzIz1IWo6SjponkhRcsPaoqXoC1hminStrOgb7//c/k/z/Py0qSoiedN p2TkMMoMRZrYSUDVxxkKg3SsJSG0atlPurlRSUpbOuoJqbbfTVrcOsmPpuR6/RYhvzX8jpR/ Xi2lzpPxgohEJi0lj1GGRF4RJI/PNBJZaz3o5uT6KFmEbnejcuRMAz4Jv6s1/HIkoEX4LQLD rpnkxAYCtWqI4oSegEqVlrAJCteQsGVadGRqCRhY1DnEAoLpqSK+zdkJh8Kj3iInG7tjGRia X9iZxLEw21VC2dgN+0NHeRefqzkG6pVfBMfhMNe1Za+n8FEwPa3l2ViIo2BNNWnvFeEbYJ5u IG3sjE9B+502exzhfbD58TnBzfKEr4s6grsUg753lOTYA1a/79o9PXAI6ObKeFz8EMyq2/gc H4AJXQWyHQZ4yglmhuodRkFgVqsdRrFQ/mCd4IrGEAxY7ludaKsIgI3xEG6hi1BS8tAxIBW2 J+ocvb7QWjVP1SCJ5r9dNdZu0voW7T0hXFgOxS+HeRz7gapinq+xP8Ve+FC/SD1GvFbkwTIs m54kkQQzypRrLJuZEZzB5LxC1o8z2Lkd/hoNLscYEaaR2FX4JsmSIOIp8tj8dCMCmhS7C8vi rSFhoiK/gFFmXlbmpjGsEfnQlNhTKLsujRfhJEUOk8owWYzyX5agnb2LENH9RSIlTshX0rxa QkVPGna1Bc+0dQZZYbYrddD/9KW6Myb2nEX5s87SZFmLCuz7Eem20Jh/RNb5596eb2GSu4ah 3NKRq17VHn3NLkRYoO69UZ8ds2UM0/j2fzJHL8WR6xL3ksYW44WlsYjDZstkv8/+KPlZr+WR nR0XnqefSUyxyYrjAaSSVfwFUTme0DQDAAA= Archived-At: Subject: Re: [Ace] EDHOC standardization X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Nov 2018 15:03:09 -0000 SGkgYWxsLA0KDQpJbnNwaXJlZCBieSB0aGUgZGlzY3Vzc2lvbiBpbiB0aGlzIHRocmVhZCwgSSBk aWQgbW9yZSBkZXRhaWxlZCBjYWxjdWxhdGlvbnMgb2YgdGhlIG51bWJlciBvZiBieXRlcyB3aGVu IERUTFMgMS4zIGlzIHVzZWQgZm9yIHR5cGljYWwgSW9UIHVzZSBjYXNlcyAoUFNLLCBSUEssIENv bm5lY3Rpb24gSUQpLiBUaGUgcGxhbiBpcyB0byBhZGQgdGhpcyBpbmZvcm1hdGlvbiB0byBkcmFm dC1pZXRmLWx3aWctc2VjdXJpdHktcHJvdG9jb2wtY29tcGFyaXNvbiBhcyB0aGlzIGhhcyBiZWVu IHJlcXVlc3RlZCBieSBzZXZlcmFsIHBlb3BsZS4gSSB0aGluayBzb21lIGJ5dGVzIHdlcmUgbWlz c2luZyBpbiB0aGUgZWFybGllciBlc3RpbWF0ZXMgZm9yIFRMUyAxLjMsIGFuZCBhcyBCZW4gY29t bWVudGVkLCBEVExTIDEuMyBhZGRzIHNvbWUgYnl0ZXMgY29tcGFyZWQgdG8gVExTIDEuMy4NCg0K PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09DQpGbGlnaHQgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICMxICAgICAgICAgIzIgICAgICAgICMzICAgICAgIFRvdGFsICAgICANCi0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLQ0KRFRMUyAxLjMgUlBLICsgRUNESEUgICAgICAgICAgICAgICAgIDE0OSAgICAg ICAgMzczICAgICAgIDIxMyAgICAgICAgNzM1ICAgICAgDQpEVExTIDEuMyBQU0sgKyBFQ0RIRSAg ICAgICAgICAgICAgICAgMTg2ICAgICAgICAxOTAgICAgICAgIDU3ICAgICAgICA0MzMgICAgICAN CkRUTFMgMS4zIFBTSyAgICAgICAgICAgICAgICAgICAgICAgICAxMzYgICAgICAgIDE1MCAgICAg ICAgNTcgICAgICAgIDM0MyAgICAgIA0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpFREhPQyAgICBS UEsgKyBFQ0RIRSAgICAgICAgICAgICAgICAgIDM4ICAgICAgICAxMjEgICAgICAgIDg2ICAgICAg ICAyNDUgICAgICANCkVESE9DICAgIFBTSyArIEVDREhFICAgICAgICAgICAgICAgICAgNDMgICAg ICAgICA0NyAgICAgICAgMTIgICAgICAgIDEwMiAgICAgIA0KPT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBOdW1iZXIgb2YgYnl0ZXMNCg0KQXNz dW1wdGlvbnM6DQotIE1pbmltdW0gbnVtYmVyIG9mIGFsZ29yaXRobXMgYW5kIGNpcGhlciBzdWl0 ZXMgb2ZmZXJlZCANCi0gQ3VydmUyNTUxOSwgRUNEU0Egd2l0aCBQLTI1NiwgQUVTLUNDTV84LCBT SEEtMjU2DQotIExlbmd0aCBvZiBrZXkgaWRlbnRpZmllcnM6IDQgYnl0ZXMNCi0gQ29ubmVjdGlv biBpZGVudGlmaWVyczogMSBieXRlDQotIFRoZSBEVExTIFJQS3MgdXNlIHBvaW50IGNvbXByZXNz aW9uIChzYXZlcyAzMiBieXRlcykNCi0gTm8gRFRMUyBoYW5kc2hha2UgbWVzc2FnZSBmcmFnbWVu dGF0aW9uDQotIE9ubHkgbWFuZGF0b3J5IERUTFMgZXh0ZW50aW9ucywgZXhjZXB0IGZvciBjb25u ZWN0aW9uIElEDQotIFZlcnNpb24gMzAgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0 LWlldGYtdGxzLWR0bHMxMy0zMA0KDQooRURIT0MgbnVtYmVycyBhcmUgZm9yIHRoZSBzb29uIHRv IGJlIHB1Ymxpc2hlZCAtMTEgdmVyc2lvbiB3aXRoIGNpcGhlciBzdWl0ZXMpDQoNCkkgaG9wZSB0 aGlzIGluZm9ybWF0aW9uIGlzIHVzZWZ1bCBmb3IgcGVvcGxlLiBQbGVhc2UgY29tbWVudCBpZiBJ IG1pc3NlZCBzb21ldGhpbmcgb3IgaWYgeW91IGhhdmUgYW55IHN1Z2dlc3Rpb24gb2YgdGhpbmdz IHRvIGFkZCBvciBob3cgdG8gcHJlc2VudCB0aGluZ3MuIEkgZG8gbm90IGtub3cgY3VycmVudGx5 IGhvdyB0aGVzZSBudW1iZXJzIGNvbXBhcmUgdG8gRFRMUyAxLjIuDQoNCkJlbG93IGlzIGRldGFp bGVkIGluZm9ybWF0aW9uIGFib3V0IHdoZXJlIHRoZSBieXRlIGluIGRpZmZlcmVudCBmbGlnaHRz IGFzIHdlbGwgYXMgdGhlIFJQS3MgKFN1YmplY3RQdWJsaWNLZXlJbmZvKS4gTW9zdCBvZiB0aGUg Ynl0ZXMgc2hvdWxkIGhhdmUgdGhlIGNvcnJlY3QgdmFsdWUsIGJ1dCBtb3N0IG9mIHRoZSBsZW5n dGggZmllbGRzIGFyZSBqdXN0IHdyaXR0ZW4gYXMgTEwgTEwgTEwuIEJlbG93IGlzIGFsc28gaW5m b3JtYXRpb24gYWJvdXQgaG93IHJlc3VtcHRpb24sIGNhY2hlZCBpbmZvcm1hdGlvbiBbUkZDIDc5 MjRdLCBhbmQgbm90IHVzaW5nIENvbm5lY3Rpb24gSUQgYWZmZWN0cyB0aGUgbnVtYmVyIG9mIGJ5 dGVzLg0KDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PQ0KRFRMUyAxLjMgRmxpZ2h0ICMxIFJQSyArIEVDREhFDQo9PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NCg0KUmVjb3JkIEhlYWRlciAt IERUTFNQbGFpbnRleHQgKDEzIGJ5dGVzKQ0KMTYgZmUgZmQgRUUgRUUgU1MgU1MgU1MgU1MgU1Mg U1MgTEwgTEwNCg0KCUhhbmRzaGFrZSBIZWFkZXIgLSBDbGllbnQgSGVsbG8gKDEwIGJ5dGVzKQ0K CTAxIExMIExMIExMIFNTIFNTIDAwIDAwIDAwIExMIExMIExMDQoNCgkJTGVnYWN5IFZlcnNpb24g KDIgYnl0ZXMpDQoJCWZlIGZkDQoNCgkJQ2xpZW50IFJhbmRvbSAoMzIgYnl0ZXMpDQoJCTAwIDAx IDAyIDAzIDA0IDA1IDA2IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBlIDBmIDEwIDExIDEyIDEzIDE0 IDE1IDE2IDE3IDE4IDE5IDFhIDFiIDFjIDFkIDFlIDFmDQoNCgkJTGVnYWN5IFNlc3Npb24gSUQg KDEgYnl0ZXMpDQoJCTAwDQoNCgkJQ2lwaGVyIFN1aXRlcyAoVExTX0FFU18xMjhfQ0NNXzhfU0hB MjU2KSAoNCBieXRlcykNCgkJMDAgMDIgMTMgMDUNCg0KCQlDb21wcmVzc2lvbiBNZXRob2RzIChu dWxsKSAoMiBieXRlcykNCgkJMDEgMDANCg0KCQlFeHRlbnNpb25zIExlbmd0aCAoMiBieXRlcykN CgkJTEwgTEwNCg0KCQkJRXh0ZW5zaW9uIC0gU3VwcG9ydGVkIEdyb3VwcyAoeDI1NTE5KSAoOCBi eXRlcykNCgkJCTAwIDBhIDAwIDA0IDAwIDAyIDAwIDFkDQoNCgkJCUV4dGVuc2lvbiAtIFNpZ25h dHVyZSBBbGdvcml0aG1zIChlY2RzYV9zZWNwMjU2cjFfc2hhMjU2KSAoOCBieXRlcykNCgkJCTAw IDBkIDAwIDA0IDAwIDAyIDA4IDA3DQoNCgkJCUV4dGVuc2lvbiAtIEtleSBTaGFyZSAoNDIgYnl0 ZXMpDQoJCQkwMCAzMyAwMCAyNiAwMCAyNCAwMCAxZCAwMCAyMA0KCQkJMDAgMDEgMDIgMDMgMDQg MDUgMDYgMDcgMDggMDkgMGEgMGIgMGMgMGQgMGUgMGYgMTAgMTEgMTIgMTMgMTQgMTUgMTYgMTcg MTggMTkgMWEgMWIgMWMgMWQgMWUgMWYNCg0KCQkJRXh0ZW5zaW9uIC0gU3VwcG9ydGVkIFZlcnNp b25zICgxLjMpICg3IGJ5dGVzKQ0KCQkJMDAgMmIgMDAgMDMgMDIgMDMgMDQgDQoNCgkJCUV4dGVu c2lvbiAtIENsaWVudCBDZXJ0aWZpY2F0ZSBUeXBlIChSYXcgUHVibGljIEtleSkgKDYgYnl0ZXMp DQoJCQkwMCAxMyAwMCAwMSAwMSAwMiANCg0KCQkJRXh0ZW5zaW9uIC0gU2VydmVyIENlcnRpZmlj YXRlIFR5cGUgKFJhdyBQdWJsaWMgS2V5KSAoNiBieXRlcykNCgkJCTAwIDE0IDAwIDAxIDAxIDAy DQoNCgkJCUV4dGVuc2lvbiAtIENvbm5lY3Rpb24gSWRlbnRpZmllciAoNDMpICg2IGJ5dGVzKQ0K CQkJWFggWFggMDAgMDIgMDEgNDINCg0KMTMgKyAxMCArIDIgKyAzMiArIDEgKyA0ICsgMiArIDIg KyA4ICsgOCArIDQyICsgNyArIDYgKyA2ICsgNiA9IDE0OSBieXRlcw0KDQotLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkRUTFMgMS4zIEZsaWdo dCAjMSBQU0sgKyBFQ0RIRQ0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tDQoNCkRpZmZlcmVuY2VzIGNvbXBhcmVkIHRvIFJQSyArIEVDREhFDQoN CisgRXh0ZW5zaW9uIC0gUFNLIEtleSBFeGNoYW5nZSBNb2RlcyAoNiBieXRlcykNCiAgMDAgMmQg MDAgMDIgMDEgMDENCg0KKyBFeHRlbnNpb24gLSBQcmUgU2hhcmVkIEtleSAoNTEgYnl0ZXMpDQog IDAwIDI5IDAwIDJGDQogIDAwIDBhIDAwIDA0IElEIElEIElEIElEIDAwIDAwIDAwIDAwDQogIDAw IDIxIDIwIDAwIDAxIDAyIDAzIDA0IDA1IDA2IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBlIDBmIDEw IDExIDEyIDEzIDE0IDE1IDE2IDE3IDE4IDE5IDFhIDFiIDFjIDFkIDFlIDFmDQoNCi0gRXh0ZW5z aW9uIC0gU2lnbmF0dXJlIEFsZ29yaXRobXMgKGVjZHNhX3NlY3AyNTZyMV9zaGEyNTYpICg4IGJ5 dGVzKQ0KDQotIEV4dGVuc2lvbiAtIENsaWVudCBDZXJ0aWZpY2F0ZSBUeXBlIChSYXcgUHVibGlj IEtleSkgKDYgYnl0ZXMpDQoNCi0gRXh0ZW5zaW9uIC0gU2VydmVyIENlcnRpZmljYXRlIFR5cGUg KFJhdyBQdWJsaWMgS2V5KSAoNiBieXRlcykNCg0KMTQ5ICsgNiArIDUxIC0gOCAtIDYgLSA2ID0g MTg2IGJ5dGVzDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLQ0KRFRMUyAxLjMgRmxpZ2h0ICMxIFBTSw0KLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCkRpZmZlcmVuY2VzIGNvbXBhcmVk IHRvIFBTSyArIEVDREhFDQoNCi0gRXh0ZW5zaW9uIC0gU3VwcG9ydGVkIEdyb3VwcyAoeDI1NTE5 KSAoOCBieXRlcykNCg0KLSBFeHRlbnNpb24gLSBLZXkgU2hhcmUgKDQyIGJ5dGVzKQ0KDQoxODYg LSA4IC0gNDIgPSAxMzYgYnl0ZXMNCg0KDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PQ0KRFRMUyAxLjMgRmxpZ2h0ICMyICBSUEsgKyBFQ0RI RQ0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 DQoNClJlY29yZCBIZWFkZXIgLSBEVExTUGxhaW50ZXh0ICgxMyBieXRlcykNCjE2IGZlIGZkIEVF IEVFIFNTIFNTIFNTIFNTIFNTIFNTIExMIExMDQoNCglIYW5kc2hha2UgSGVhZGVyIC0gU2VydmVy IEhlbGxvICgxMCBieXRlcykNCgkwMiBMTCBMTCBMTCBTUyBTUyAwMCAwMCAwMCBMTCBMTCBMTA0K DQoJCUxlZ2FjeSBWZXJzaW9uICgyIGJ5dGVzKQ0KCQlmZSBmZA0KDQoJCVNlcnZlciBSYW5kb20g KDMyIGJ5dGVzKQ0KCQkwMCAwMSAwMiAwMyAwNCAwNSAwNiAwNyAwOCAwOSAwYSAwYiAwYyAwZCAw ZSAwZiAxMCAxMSAxMiAxMyAxNCAxNSAxNiAxNyAxOCAxOSAxYSAxYiAxYyAxZCAxZSAxZg0KDQoJ CUxlZ2FjeSBTZXNzaW9uIElEICgxIGJ5dGVzKQ0KCQkwMA0KDQoJCUNpcGhlciBTdWl0ZSAoVExT X0FFU18xMjhfQ0NNXzhfU0hBMjU2KSAoMiBieXRlcykNCgkJMTMgMDUNCg0KCQlDb21wcmVzc2lv biBNZXRob2QgKG51bGwpICgxIGJ5dGVzKQ0KCQkwMA0KDQoJCUV4dGVuc2lvbnMgTGVuZ3RoICgy IGJ5dGVzKQ0KCQlMTCBMTA0KDQoJCQlFeHRlbnNpb24gLSBLZXkgU2hhcmUgKDQwIGJ5dGVzKQ0K CQkJMDAgMzMgMDAgMjQgMDAgMWQgMDAgMjANCgkJCTAwIDAxIDAyIDAzIDA0IDA1IDA2IDA3IDA4 IDA5IDBhIDBiIDBjIDBkIDBlIDBmIDEwIDExIDEyIDEzIDE0IDE1IDE2IDE3IDE4IDE5IDFhIDFi IDFjIDFkIDFlIDFmDQoNCgkJCUV4dGVuc2lvbiAtIFN1cHBvcnRlZCBWZXJzaW9ucyAoMS4zKSAo NiBieXRlcykNCgkJCTAwIDJiIDAwIDAyIDAzIDA0DQoNCgkJCUV4dGVuc2lvbiAtIENvbm5lY3Rp b24gSWRlbnRpZmllciAoNDMpICg2IGJ5dGVzKQ0KCQkJWFggWFggMDAgMDIgMDEgNDMNCg0KUmVj b3JkIEhlYWRlciAtIERUTFNDaXBoZXJ0ZXh0LCBGdWxsICg2IGJ5dGVzKQ0KSEggRVMgU1MgNDMg TEwgTEwNCg0KCUhhbmRzaGFrZSBIZWFkZXIgLSBFbmNyeXB0ZWQgRXh0ZW5zaW9ucyAoMTAgYnl0 ZXMpDQoJMDggTEwgTEwgTEwgU1MgU1MgMDAgMDAgMDAgTEwgTEwgTEwNCg0KCQlFeHRlbnNpb25z IExlbmd0aCAoMiBieXRlcykNCgkJTEwgTEwNCg0KCQkJRXh0ZW5zaW9uIC0gQ2xpZW50IENlcnRp ZmljYXRlIFR5cGUgKFJhdyBQdWJsaWMgS2V5KSAoNiBieXRlcykNCgkJCTAwIDEzIDAwIDAxIDAx IDAyIA0KDQoJCQlFeHRlbnNpb24gLSBTZXJ2ZXIgQ2VydGlmaWNhdGUgVHlwZSAoUmF3IFB1Ymxp YyBLZXkpICg2IGJ5dGVzKQ0KCQkJMDAgMTQgMDAgMDEgMDEgMDINCg0KCUhhbmRzaGFrZSBIZWFk ZXIgLSBDZXJ0aWZpY2F0ZSBSZXF1ZXN0ICgxMCBieXRlcykNCgkwZCBMTCBMTCBMTCBTUyBTUyAw MCAwMCAwMCBMTCBMTCBMTA0KDQoJCVJlcXVlc3QgQ29udGV4dCAoMSBieXRlcykNCgkJMDANCg0K CQlFeHRlbnNpb25zIExlbmd0aCAoMiBieXRlcykNCgkJTEwgTEwNCg0KCQkJRXh0ZW5zaW9uIC0g U2lnbmF0dXJlIEFsZ29yaXRobXMgKGVjZHNhX3NlY3AyNTZyMV9zaGEyNTYpICg4IGJ5dGVzKQ0K CQkJMDAgMGQgMDAgMDQgMDAgMDIgMDggMDcNCg0KCUhhbmRzaGFrZSBIZWFkZXIgLSBDZXJ0aWZp Y2F0ZSAoMTAgYnl0ZXMpDQoJMGIgTEwgTEwgTEwgU1MgU1MgMDAgMDAgMDAgTEwgTEwgTEwNCg0K CQlSZXF1ZXN0IENvbnRleHQgKDEgYnl0ZXMpDQoJCTAwDQoNCgkJQ2VydGlmaWNhdGUgTGlzdCBM ZW5ndGggKDMgYnl0ZXMpDQoJCUxMIExMIExMDQoNCgkJQ2VydGlmaWNhdGUgTGVuZ3RoICgzIGJ5 dGVzKQ0KCQlMTCBMTCBMTA0KDQoJCUNlcnRpZmljYXRlICg1OSBieXRlcykgLy8gUG9pbnQgY29t cHJlc3Npb24NCgkJLi4uLg0KDQoJCUNlcnRpZmljYXRlIEV4dGVuc2lvbnMgKDIgYnl0ZXMpDQoJ CTAwIDAwDQoNCglIYW5kc2hha2UgSGVhZGVyIC0gQ2VydGlmaWNhdGUgVmVyaWZ5ICgxMCBieXRl cykNCgkwZiBMTCBMTCBMTCBTUyBTUyAwMCAwMCAwMCBMTCBMTCBMTA0KDQoJCVNpZ25hdHVyZSAg KDY4IGJ5dGVzKQ0KCQlaWiBaWiAwMCA0MCAuLi4uDQoNCglIYW5kc2hha2UgSGVhZGVyIC0gRmlu aXNoZWQgKDEwIGJ5dGVzKQ0KCTE0IExMIExMIExMIFNTIFNTIDAwIDAwIDAwIExMIExMIExMDQoN CgkJVmVyaWZ5IERhdGEgKDMyIGJ5dGVzKQ0KCQkwMCAwMSAwMiAwMyAwNCAwNSAwNiAwNyAwOCAw OSAwYSAwYiAwYyAwZCAwZSAwZiAxMCAxMSAxMiAxMyAxNCAxNSAxNiAxNyAxOCAxOSAxYSAxYiAx YyAxZCAxZSAxZg0KDQoJUmVjb3JkIFR5cGUgKDEgYnl0ZSkNCgkxNg0KDQpBdXRoIFRhZyAoOCBi eXRlcykNCmUwIDhiIDBlIDQ1IDVhIDM1IDBhIGU1DQoNCjEzICsgMTAyICsgNiArIDI0ICsgMjEg KyA3OCArIDc4ICsgNDIgKyAxICsgOCA9IDM3MyBieXRlcw0KDQotLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkRUTFMgMS4zIEZsaWdodCAjMiBQ U0sgKyBFQ0RIRQ0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tDQoNCkRpZmZlcmVuY2VzIGNvbXBhcmVkIHRvIFJQSyArIEVDREhFDQoNCi0gSGFu ZHNoYWtlIE1lc3NhZ2UgQ2VydGlmaWNhdGUgKDc4IGJ5dGVzKQ0KDQotIEhhbmRzaGFrZSBNZXNz YWdlIENlcnRpZmljYXRlVmVyaWZ5ICg3OCBieXRlcykNCg0KLSBIYW5kc2hha2UgTWVzc2FnZSBD ZXJ0aWZpY2F0ZVJlcXVlc3QgKDIxIGJ5dGVzKQ0KDQotIEV4dGVuc2lvbiAtIENsaWVudCBDZXJ0 aWZpY2F0ZSBUeXBlIChSYXcgUHVibGljIEtleSkgKDYgYnl0ZXMpDQoNCi0gRXh0ZW5zaW9uIC0g U2VydmVyIENlcnRpZmljYXRlIFR5cGUgKFJhdyBQdWJsaWMgS2V5KSAoNiBieXRlcykNCg0KKyBF eHRlbnNpb24gLSBQcmUgU2hhcmVkIEtleSAoNiBieXRlcykNCiAgMDAgMjkgMDAgMDIgMDAgMDAN Cg0KMzczIC0gNzggLSA3OCAtIDIxIC0gNiAtIDYgICsgNiA9IDE5MCBieXRlcw0KDQotLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkRUTFMgMS4z IEZsaWdodCAjMiBQU0sNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLQ0KDQpEaWZmZXJlbmNlcyBjb21wYXJlZCB0byBQU0sgKyBFQ0RIRQ0KDQot IEV4dGVuc2lvbiAtIEtleSBTaGFyZSAoNDAgYnl0ZXMpDQoNCjE5MCAtIDQwID0gMTUwIGJ5dGVz DQoNCg0KDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT0NCkRUTFMgMS4zIEZsaWdodCAjMyBSUEsgKyBFQ0RIRQ0KPT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQoNClJlY29yZCBIZWFkZXIgKDYg Ynl0ZXMpIC8vIERUTFNDaXBoZXJ0ZXh0LCBGdWxsDQpaWiBFUyBTUyA0MiBMTCBMTA0KDQoJSGFu ZHNoYWtlIEhlYWRlciAtIENlcnRpZmljYXRlICgxMCBieXRlcykNCgkwYiBMTCBMTCBMTCBTUyBT UyBYWCBYWCBYWCBMTCBMTCBMTA0KDQoJCVJlcXVlc3QgQ29udGV4dCAoMSBieXRlcykNCgkJMDAN Cg0KCQlDZXJ0aWZpY2F0ZSBMaXN0IExlbmd0aCAoMyBieXRlcykNCgkJTEwgTEwgTEwNCg0KCQlD ZXJ0aWZpY2F0ZSBMZW5ndGggKDMgYnl0ZXMpDQoJCUxMIExMIExMDQoJDQoJCUNlcnRpZmljYXRl ICg1OSBieXRlcykgLy8gUG9pbnQgY29tcHJlc3Npb24NCgkJLi4uLg0KDQoJCUNlcnRpZmljYXRl IEV4dGVuc2lvbnMgKDIgYnl0ZXMpDQoJCTAwIDAwDQoNCglIYW5kc2hha2UgSGVhZGVyIC0gQ2Vy dGlmaWNhdGUgVmVyaWZ5ICgxMCBieXRlcykgDQoJMGYgTEwgTEwgTEwgU1MgU1MgMDAgMDAgMDAg TEwgTEwgTEwNCg0KCQlTaWduYXR1cmUgICg2OCBieXRlcykNCgkJMDQgMDMgTEwgTEwgLy9lY2Rz YV9zZWNwMjU2cjFfc2hhMjU2DQoJCTAwIDAxIDAyIDAzIDA0IDA1IDA2IDA3IDA4IDA5IDBhIDBi IDBjIDBkIDBlIDBmIDEwIDExIDEyIDEzIDE0IDE1IDE2IDE3IDE4IDE5IDFhIDFiIDFjIDFkIDFl IDFmDQoJCTAwIDAxIDAyIDAzIDA0IDA1IDA2IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBlIDBmIDEw IDExIDEyIDEzIDE0IDE1IDE2IDE3IDE4IDE5IDFhIDFiIDFjIDFkIDFlIDFmDQoNCglIYW5kc2hh a2UgSGVhZGVyIC0gRmluaXNoZWQgKDEwIGJ5dGVzKQ0KCTE0IExMIExMIExMIFNTIFNTIDAwIDAw IDAwIExMIExMIExMDQoNCgkJVmVyaWZ5IERhdGEgKDMyIGJ5dGVzKSAvLyBTSEEtMjU2DQoJCTAw IDAxIDAyIDAzIDA0IDA1IDA2IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBlIDBmIDEwIDExIDEyIDEz IDE0IDE1IDE2IDE3IDE4IDE5IDFhIDFiIDFjIDFkIDFlIDFmDQoNCglSZWNvcmQgVHlwZSAoMSBi eXRlKQ0KCTE2DQoNCkF1dGggVGFnICg4IGJ5dGVzKSAvLyBBRVMtQ0NNXzgNCjAwIDAxIDAyIDAz IDA0IDA1IDA2IDA3DQoNCjYgKyA3OCArIDc4ICsgNDIgKyAxICsgOCA9IDIxMyBieXRlcw0KDQot LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkRU TFMgMS4zIEZsaWdodCAjMyBQU0sgKyBFQ0RIRQ0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KRGlmZmVyZW5jZXMgY29tcGFyZWQgdG8gUlBL ICsgRUNESEUNCg0KLSBIYW5kc2hha2UgTWVzc2FnZSBDZXJ0aWZpY2F0ZSAoNzggYnl0ZXMpDQoN Ci0gSGFuZHNoYWtlIE1lc3NhZ2UgQ2VydGlmaWNhdGUgVmVyaWZ5ICg3OCBieXRlcykNCg0KMjEz IC0gNzggLSA3OCA9IDU3IGJ5dGVzDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KRFRMUyAxLjMgRmxpZ2h0ICMzIFBTSw0KLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KRGlmZmVyZW5j ZXMgY29tcGFyZWQgdG8gUFNLICsgRUNESEUNCg0KTm9uZQ0KDQo1NyBieXRlcw0KDQoNCg0KDQoN Cg0KDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT0NCkRUTFMgMS4zIC0gQ2FjaGVkIGluZm9ybWF0aW9uIFtSRkMgNzkyNF0gDQo9PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NCg0KLSBDYWNoZWQg aW5mb3JtYXRpb24gdG9nZXRoZXIgd2l0aCBzZXJ2ZXIgWC41MDkgY2FuIGJlIHVzZWQgdG8gbW92 ZSBieXRlcyBmcm9tIGZsaWdodCAjMiB0byBmbGlnaHQgIzENCiAgKGNhY2hlZCBSUEsgaW5jcmVh c2VzIHRoZSBudW1iZXIgb2YgYnl0ZXMgY29tcGFyZWQgdG8gY2FjaGVkIFguNTA5KQ0KDQpEaWZm ZXJlbmNlcyBjb21wYXJlZCB0byBSUEsgKyBFQ0RIRQ0KDQpGbGlnaHQgIzENCg0KLSBFeHRlbnNp b24gLSBTZXJ2ZXIgQ2VydGlmaWNhdGUgVHlwZSAoUmF3IFB1YmxpYyBLZXkpICg2IGJ5dGVzKQ0K DQorIEV4dGVuc2lvbiAtIENsaWVudCBDYXNoZWQgSW5mb3JtYXRpb24gKDM5IGJ5dGVzKQ0KICAw MCAxOSBMTCBMTCBMTCBMTA0KICAwMSAwMCAwMSAwMiAwMyAwNCAwNSAwNiAwNyAwOCAwOSAwYSAw YiAwYyAwZCAwZSAwZiAxMCAxMSAxMiAxMyAxNCAxNSAxNiAxNyAxOCAxOSAxYSAxYiAxYyAxZCAx ZSAxZg0KDQoxNDkgKyAzMyA9IDE4MiBieXRlcw0KDQpGbGlnaHQgIzINCg0KLSBFeHRlbnNpb24g LSBTZXJ2ZXIgQ2VydGlmaWNhdGUgVHlwZSAoUmF3IFB1YmxpYyBLZXkpICg2IGJ5dGVzKQ0KDQor IEV4dGVuc2lvbiAtIFNlcnZlciBDYXNoZWQgSW5mb3JtYXRpb24gKDcgYnl0ZXMpDQogIDAwIDE5 IExMIExMIExMIExMIDAxDQoNCi0gU2VydmVyIENlcnRpZmljYXRlICg1OSBieXRlcyAtPiAzMiBi eXRlcykgDQoNCjM3MyAtIDI2ID0gMzQ3IGJ5dGVzDQoNCj09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0K RmxpZ2h0ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAjMSAgICAgICAgICMyICAgICAg ICAjMyAgICAgICBUb3RhbCAgICAgDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkRUTFMgMS4zIENh Y2hlZCBYLjUwOS9SUEsgKyBFQ0RIRSAgICAxODIgICAgICAgIDM0NyAgICAgICAyMTMgICAgICAg IDc0MiAgICAgIA0KRFRMUyAxLjMgUlBLICsgRUNESEUgICAgICAgICAgICAgICAgIDE0OSAgICAg ICAgMzczICAgICAgIDIxMyAgICAgICAgNzM1ICAgICAgDQo9PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0N Cg0KDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PQ0KRFRMUyAxLjMgLSBSZXN1bXB0aW9uDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT0NCg0KVG8gZW5hYmxlIHJlc3VtcHRpb24sIGEgNHRo IGZsaWdodCAoTmV3IFNlc3Npb24gVGlja2V0KSBpcyBhZGRlZA0KDQpGbGlnaHQgIzQgLSBOZXcg U2Vzc2lvbiBUaWNrZXQNCg0KUmVjb3JkIEhlYWRlciAtIERUTFNDaXBoZXJ0ZXh0LCBGdWxsICg2 IGJ5dGVzKQ0KSEggRVMgU1MgNDMgTEwgTEwNCg0KCUhhbmRzaGFrZSBIZWFkZXIgLSBOZXcgU2Vz c2lvbiBUaWNrZXQgKDEwIGJ5dGVzKQ0KCTA0IExMIExMIExMIFNTIFNTIDAwIDAwIDAwIExMIExM IExMDQoNCgkJVGlja2V0IExpZmV0aW1lICg0IGJ5dGVzKQ0KCQkwMCAwMSAwMiAwMw0KDQoJCVRp Y2tldCBBZ2UgQWRkICg0IGJ5dGVzKQ0KCQkwMCAwMSAwMiAwMw0KDQoJCVRpY2tldCBOb25jZSAo MiBieXRlcykNCgkJMDEgMDANCg0KCQlUaWNrZXQgKDYgYnl0ZXMpDQoJCTAwIDA0IElEIElEIElE IElEDQoNCgkJRXh0ZW5zaW9ucyAoMiBieXRlcykNCgkJMDAgMDANCg0KQXV0aCBUYWcgKDggYnl0 ZXMpIC8vIEFFUy1DQ01fOA0KMDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcNCg0KNiArIDEwICsgNCAr IDQgKyAyICsgNiArIDIgKyA4ID0gNDIgYnl0ZXMNCg0KVGhlIHJlc3VtcHRpb24gaGFuZHNoYWtl IGlzIGp1c3QgYSBQU0sgaGFuZHNoYWtlIHdpdGggMTM2ICsgMTUwICsgNTcgPSAzNDMgYnl0ZXMN Cg0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09DQpGbGlnaHQgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICMxICAgICAjMiAgICAgIzMgICAgICM0ICAgIFRvdGFsICAgICANCi0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLQ0KRFRMUyAxLjMgUlBLICsgRUNESEUgKyBOZXdTZXNzaW9uVGlja2V0 ICAgIDE0OSAgICAzNzMgICAgMjEzICAgICA0MiAgICAgIDc3NyAgICAgIA0KRFRMUyAxLjMgUFNL IChyZXN1bXB0aW9uKSAgICAgICAgICAgICAgICAgIDEzNiAgICAxNTAgICAgIDU3ICAgICAgICAg ICAgIDM0MyAgICAgIA0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQoNCg0KDQo9PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NCkRUTFMgMS4zIC0gQ29u bmVjdGlvbiBJRA0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09DQoNCldpdGhvdXQgYSBDb25uZWN0aW9uIElEIHRoZSBEVExTIDEuMyBmbGlnaHQg c2l6ZXMgY2hhbmdlcyBhcyBmb2xsb3dzDQoNCkRUTFMgMS4zIEZsaWdodCAjMTogICAtNiBieXRl cw0KRFRMUyAxLjMgRmxpZ2h0ICMyOiAgIC03IGJ5dGVzDQpEVExTIDEuMyBGbGlnaHQgIzM6ICAg LTEgYnl0ZQ0KDQoNCg0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQpGbGlnaHQgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICMxICAgICAgICAgIzIgICAgICAgICMzICAgICAgIFRvdGFsICAg ICANCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KRFRMUyAxLjMgUlBLICsgRUNESEUgKG5vIGNpZCkg ICAgICAgIDE0MyAgICAgICAgMzY0ICAgICAgIDIxMiAgICAgICAgNzIxICAgICAgDQpEVExTIDEu MyBQU0sgKyBFQ0RIRSAobm8gY2lkKSAgICAgICAgMTgwICAgICAgICAxODMgICAgICAgIDU2ICAg ICAgICA0MTkgICAgICANCkRUTFMgMS4zIFBTSyAobm8gY2lkKSAgICAgICAgICAgICAgICAxMzAg ICAgICAgIDE0MyAgICAgICAgNTYgICAgICAgIDMyOSAgICAgIA0KPT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09DQoNCg0KDQoNCg0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09DQpEVExTIFJhdyBQdWJsaWMgS2V5cw0KPT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQoNClN1YmplY3RQdWJsaWNLZXlJbmZv IHdpdGhvdXQgcG9pbnQgY29tcHJlc3Npb24NCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCjB4MzAgLy8gU2VxdWVuY2UNCjB4NTkgLy8gU2l6 ZSA4OQ0KDQoweDMwIC8vIFNlcXVlbmNlDQoweDEzIC8vIFNpemUgMTkNCjB4MDYgMHgwNyAweDJB IDB4ODYgMHg0OCAweENFIDB4M0QgMHgwMiAweDAxLiAgICAgLy8gT0lEIDEuMi44NDAuMTAwNDUu Mi4xIChlY1B1YmxpY0tleSkNCjB4MDYgMHgwOCAweDJBIDB4ODYgMHg0OCAweENFIDB4M0QgMHgw MyAweDAxIDB4MDcgLy8gT0lEIDEuMi44NDAuMTAwNDUuMy4xLjcgKHNlY3AyNTZyMSkNCg0KMHgw MyAvLyBCaXQgc3RyaW5nDQoweDQyIC8vIFNpemUgNjYNCjB4MDAgLy8gVW51c2VkIGJpdHMgMA0K MHgwNCAvLyBVbmNvbXByZXNzZWQNCi4uLi4uLiA2NCBieXRlcyBYIGFuZCBZDQoNClRvdGFsIG9m IDkxIGJ5dGVzDQoNClN1YmplY3RQdWJsaWNLZXlJbmZvIHdpdGggcG9pbnQgY29tcHJlc3Npb24N Ci0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoN CjB4MzAgLy8gU2VxdWVuY2UNCjB4NTkgLy8gU2l6ZSA4OQ0KDQoweDMwIC8vIFNlcXVlbmNlDQow eDEzIC8vIFNpemUgMTkNCjB4MDYgMHgwNyAweDJBIDB4ODYgMHg0OCAweENFIDB4M0QgMHgwMiAw eDAxLiAgICAgLy8gT0lEIDEuMi44NDAuMTAwNDUuMi4xIChlY1B1YmxpY0tleSkNCjB4MDYgMHgw OCAweDJBIDB4ODYgMHg0OCAweENFIDB4M0QgMHgwMyAweDAxIDB4MDcgLy8gT0lEIDEuMi44NDAu MTAwNDUuMy4xLjcgKHNlY3AyNTZyMSkNCg0KMHgwMyAvLyBCaXQgc3RyaW5nDQoweDQyIC8vIFNp emUgNjYNCjB4MDAgLy8gVW51c2VkIGJpdHMgMA0KMHgwMyAvLyBDb21wcmVzc2VkDQouLi4uLi4g MzIgYnl0ZXMgWA0KDQpUb3RhbCBvZiA1OSBieXRlcw0KDQoNCj09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KSGVscGZ1bCBTb3VyY2VzIG9mIElu Zm9ybWF0aW9uDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT0NCg0KSW4gYWRkaXRpb24gdG8gcmVsZXZhbnQgUkZDcyBhbmQgdGhlIGVzdGltYXRl cyBkb25lIGJ5IEppbSwgdGhlIGZvbGxvd2luZw0KcmVmZXJlbmNlcyB3ZXJlIGhlbHBmdWw6DQoN CkV2ZXJ5IEJ5dGUgRXhwbGFpbmVkOiBUaGUgSWxsdXN0cmF0ZWQgVExTIDEuMyBDb25uZWN0aW9u DQpodHRwczovL3RsczEzLnVsZmhlaW0ubmV0Lw0KDQpEaWdpdGFsIENlcnRpZmljYXRlcyBmb3Ig dGhlIEludGVybmV0IG9mIFRoaW5ncw0KaHR0cHM6Ly9rdGguZGl2YS1wb3J0YWwub3JnL3NtYXNo L2dldC9kaXZhMjoxMTUzOTU4L0ZVTExURVhUMDEucGRmDQoNCi9Kb2huDQoNCg0KDQoNCu+7vy0t LS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0 LmVkdT4NCkRhdGU6IFNhdHVyZGF5LCAzIE5vdmVtYmVyIDIwMTggYXQgMTU6NTkNClRvOiBKb2hu IE1hdHRzc29uIDxqb2huLm1hdHRzc29uQGVyaWNzc29uLmNvbT4NCkNjOiAic2FsdmFkb3IucC5m QHVtLmVzIiA8c2FsdmFkb3IucC5mQHVtLmVzPiwgImFjZUBpZXRmLm9yZyIgPGFjZUBpZXRmLm9y Zz4NClN1YmplY3Q6IFJlOiBbQWNlXSBFREhPQyBzdGFuZGFyZGl6YXRpb24NCg0KT24gRnJpLCBO b3YgMDIsIDIwMTggYXQgMDI6NTU6NTRQTSArMDAwMCwgSm9obiBNYXR0c3NvbiB3cm90ZToNCj4g SGkgQmVuamFtaW4sIFNhbHZhZG9yDQo+IA0KPiBXaGlsZSBEVExTIDEuMyBoYXZlIGRvbmUgYSB2 ZXJ5IGdvb2Qgam9iIG9mIGxvd2VyaW5nIHRoZSBvdmVyaGVhZCBvZiB0aGUgcmVjb3JkIGxheWVy IHdoZW4gYXBwbGljYXRpb24gZGF0YSBpcyBzZW50IChzZWUgZS5nLiBodHRwczovL3Rvb2xzLmll dGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1sd2lnLXNlY3VyaXR5LXByb3RvY29sLWNvbXBhcmlzb24t MDEgZm9yIGEgY29tcGFyaXNvbiBiZXR3ZWVuIGRpZmZlcmVudCBwcm90b2NvbHMpLCBJIGRvIG5v dCB0aGluayB0aGUgaGFuZHNoYWtlIHByb3RvY29sIGlzIG11Y2ggbGVhbmVyIChpcyBpdCBsZWFu ZXIgYXQgYWxsPykuDQoNCihUaGVyZSBhcmUgc29tZSBoYW5kc2hha2UgbWVzc2FnZXMgdGhhdCBh cmUgcmVtb3ZlZCBlbnRpcmVseS4pDQoNCj4gV2UgdHJpZWQgdG8gbWFrZSBhbiBmYWlyIGNvbXBh cmlzb24gYmV0d2VlbiBFREhPQyBhbmQgVExTIDEuMyBpbiB0aGUgcHJlc2VudGF0aW9uIGF0IElF VEYgMTAxIChzZWUgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9tZWV0aW5nLzEwMS9tYXRl cmlhbHMvc2xpZGVzLTEwMS1hY2Uta2V5LWV4Y2hhbmdlLXctb3Njb3JlLTAwKS4gU2luY2UgdGhl biwgd2UgaGF2ZSBzaWduaWZpY2FudGx5IG9wdGltaXplZCB0aGUgZW5jb2RpbmcgaW4gRURIT0Mg YW5kIHRoZSB1cGNvbWluZyB2ZXJzaW9uICgtMTEpIGlzIGV4cGVjdGVkIHRvIGhhdmUgdGhlIGZv bGxvd2luZyBtZXNzYWdlIHNpemVzLg0KPiANCj4gICAgQXV0aC4gICAgICAgICAgICAgICBQU0sg ICAgICAgUlBLICAgICAgIHg1dCAgICAgeDVjaGFpbg0KPiAgICAtLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiAgICBF REhPQyBtZXNzYWdlXzEgICAgICA0MyAgICAgICAgMzggICAgICAgIDM4ICAgICAgICAzOA0KPiAg ICBFREhPQyBtZXNzYWdlXzIgICAgICA0NyAgICAgICAxMjEgICAgICAgMTI3ICAgICAgIDExNyAr IENlcnRpZmljYXRlIGNoYWluDQo+ICAgIEVESE9DIG1lc3NhZ2VfMyAgICAgIDEyICAgICAgICA4 NiAgICAgICAgOTIgICAgICAgIDgyICsgQ2VydGlmaWNhdGUgY2hhaW4NCj4gICAgLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0NCj4gICAgVG90YWwgICAgICAgICAgICAgICAxMDIgICAgICAgMjQ1ICAgICAgIDI1NyAgICAg ICAyMzcgKyBDZXJ0aWZpY2F0ZSBjaGFpbnMNCj4gDQo+IEFzIFNhbHZhZG9yIHdyaXRlcywgdGhl IGhhbmRzaGFrZXMgaW4gVExTIDEuMyBhbmQgRFRMUyAxLjMgYXJlIGJhc2ljYWxseSB0aGUgc2Ft ZSwgc28gdGhlIG51bWJlcnMgcHJlc2VudGVkIGF0IElFVEYgMTAxIHNob3VsZCBiZSBhIGdvb2Qg ZXN0aW1hdGUgYWxzbyBmb3IgRFRMUyAxLjMuDQo+IA0KPiAgICBBdXRoLiAgICAgICAgICAgICAg ICBQU0sgICAgICAgUlBLDQo+ICAgIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+ICAgIChEKVRMUyBtZXNzYWdlXzEg ICAgIDE0MiAgICAgICAxMDcNCj4gICAgKEQpVExTIG1lc3NhZ2VfMiAgICAgMTM1ICAgICAgIDI2 NA0KPiAgICAoRClUTFMgbWVzc2FnZV8zICAgICAgNTEgICAgICAgMTY3DQo+ICAgIC0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tDQo+ICAgIFRvdGFsICAgICAgICAgICAgICAgIDMyOCAgICAgICA1MzgNCg0KVGhhbmtzIGZv ciB0aGUgbnVtYmVycyENCg0KPiBUaGUgbnVtYmVycyBhYm92ZSBpbmNsdWRlIEVDREhFLiBGb3Ig aGFuZHNoYWtlIG1lc3NhZ2VzLCBteSB1bmRlcnN0YW5kaW5nIGlzIHRoYXQgdGhlIERUTFMgMS4z IGFuZCBUTFMgMS4zIHJlY29yZCBsYXllciBoYXZlIGV4YWN0bHkgdGhlIHNhbWUgc2l6ZS4NCg0K VGhlIERUTFMgMS4zIG9uZXMgd2lsbCBiZSB3b3JzZSwgZHVlIHRvIHRoZSBlcG9jaCBhbmQgc2Vx dWVuY2UgbnVtYmVyDQpmaWVsZHMuDQoNCi1CZW4NCg0K From nobody Wed Nov 21 07:17:00 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4E4C112426E; Wed, 21 Nov 2018 07:16:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.46 X-Spam-Level: X-Spam-Status: No, score=-1.46 tagged_above=-999 required=5 tests=[DKIMWL_WL_MED=-1.459, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S56qDlHSzsNB; Wed, 21 Nov 2018 07:16:47 -0800 (PST) Received: from EUR02-HE1-obe.outbound.protection.outlook.com (mail-eopbgr10046.outbound.protection.outlook.com [40.107.1.46]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 463A7126BED; Wed, 21 Nov 2018 07:16:47 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=F5S5YtaWtMiY5ThmLZ7WPlcdhaymPAZX4Pb8MJWclBc=; b=NyB45VYVGfRptSMRXzwm7NyuZpajMA5HLbXq735TEuLDUYtc1sps9z/IJudPfa2qnsJrhKvohQHUAUi3LG9E8MYuwVpvr/cht9hms40X2R1I7K9pQoLxMoFeGX8ScQgSEACoePPROFZznhtVwE+s0m2Gf03sUrK+kIKL4mdzCfQ= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1632.eurprd08.prod.outlook.com (10.168.66.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1339.23; Wed, 21 Nov 2018 15:16:44 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::2056:1db1:e01:4670]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::2056:1db1:e01:4670%2]) with mapi id 15.20.1339.027; Wed, 21 Nov 2018 15:16:43 +0000 From: Hannes Tschofenig To: John Mattsson , "ace@ietf.org" , "lwip@ietf.org" CC: Benjamin Kaduk , "salvador.p.f@um.es" Thread-Topic: [Ace] EDHOC standardization Thread-Index: AQHUcrwmx6N1o4AsH0uz6RMW3Bvpj6U+JgWAgBxb0gD///JFkA== Date: Wed, 21 Nov 2018 15:16:43 +0000 Message-ID: References: <20181103145857.GG54966@kduck.kaduk.org> <7F78CC92-5C48-4BFC-8087-E25D4D95A74F@ericsson.com> In-Reply-To: <7F78CC92-5C48-4BFC-8087-E25D4D95A74F@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.122.87] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1632; 6:QTYMARr54Bh2EMKEsabWa6wVSY+spq5GwT3DAcOMRywIaeFP3e68REx/3tFpeNY0t27pyirUQkWcXjCZkNi8CJVdlptz8v/L3gHWh2h1ldaZi+lMB6dx4aF62kurjkAnO9XsBDauU6JyxUNqb9n+ltCvc6L8rlVH61DDbWJbiJjlaklDNWlYim3DIUj6QUs0bcA+pDB5VtbMxk4AKMNJMSEvVZ2kxEgOpAR0xelpHbGyB281o8LQehpgxcspURCRZ+Rxsq2yfnivqDnrdzVVGEKWKLOrQ/c1w8MYqOonrYPdXw8ofD42rwE/Ye0OtxOMmN/Giaj66K7uzT3KN8dEFFf1pdi52IIwSS/xX4QfENz94cWg2gVQfGGSPlaTBfDYafLZcOla+jpuj/sThifedAeaTBraRCN79wRNUswLrpMpBm/kJMakAn3BjSsB2iLzd2O9zemW7k47ZPNrLCX2mA==; 5:sHkuqMCYMydUFRrLoGdrWLzYlF8Ml9tHRvzM6bB8NFeiHb52FcDGXldfBtXZVWWQixK4Fe9+HldIa3lxhBLIMCHdIShxrPScDl/hBq7ibE3NAyIl7IcsY/3YwqHsJPQSKM9LIVZIGZ9PUdPUF3QkwAQDO7868RuSuxXaIC1uz9M=; 7:P1ZgUrC712oqzr460yoprfCtoKKaplNhBMiPmnO9UiShpswHW4VGW0DDTVWRwFqxdW9g/RJtbbMNw+iLAkzUMyD11lO3s6RiVbcBvL/+ipS9OtUSyheozenzlULlKe9ZElyudYGqc77OFd346Vt9hg== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: b99b0b80-936e-489f-86a0-08d64fc458ae x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390098)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1632; x-ms-traffictypediagnostic: VI1PR0801MB1632: x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(93006095)(93001095)(10201501046)(3002001)(3231442)(944501410)(52105112)(6055026)(148016)(149066)(150057)(6041310)(20161123558120)(20161123562045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123564045)(201708071742011)(7699051)(76991095); SRVR:VI1PR0801MB1632; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1632; x-forefront-prvs: 08635C03D4 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(39860400002)(346002)(376002)(136003)(366004)(396003)(199004)(189003)(40434004)(53754006)(13464003)(51914003)(9686003)(25786009)(2501003)(229853002)(6436002)(68736007)(74316002)(72206003)(3846002)(186003)(99286004)(33656002)(7736002)(6306002)(478600001)(6116002)(305945005)(53946003)(55016002)(14454004)(54906003)(5660300001)(6506007)(476003)(2900100001)(97736004)(8676002)(66066001)(7696005)(110136005)(2906002)(486006)(71200400001)(71190400001)(8936002)(102836004)(6246003)(4744004)(81166006)(53546011)(446003)(2201001)(105586002)(53936002)(11346002)(26005)(966005)(106356001)(316002)(76176011)(4326008)(86362001)(5024004)(14444005)(256004)(81156014); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1632; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: KHsIAHJsD9bvJXPDocDjox/TSjkfMyHJOjwWEDPJbD4JgtAnNWodfGvo1oTLSrjIB7tQ+yn9Y5V6Z7TW9j+5di17hiA4WPNPy9GXz3XJ9bh2luwTuSV6oa5hUPITnbUjnsJoXpFO+iKeFza8XQLEngt1J8GyYFk/Q8Kkx41htXnY7M56bcdEXdYlPqtkdFBYz2wG7/QJBCGh/N0adl4NGos46dc+8nyjKAC0fZIKTrs+6/jM6jjZgx65xUh92u94dFNl9VeEAo6o6lw7CfsfVw0LUrPTCaZgziPZ/rSY2t7h8uPP3pLfkIAJvNM3tdRihKTIPjmTmt49RMfcynDj11Kzy/fozmRH5El9BRh1rUc= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: b99b0b80-936e-489f-86a0-08d64fc458ae X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Nov 2018 15:16:43.8114 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1632 Archived-At: Subject: Re: [Ace] EDHOC standardization X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Nov 2018 15:16:51 -0000 SGkgSm9obiwNCg0KRnJvbSBvdXIgZXhwZXJpZW5jZSBuZWl0aGVyIFBTSytFQ0RIRSBub3IgUlBL IHVzYWdlIGlzIGNvbW1vbiBpbiBJb1QgZGVwbG95bWVudHMgYW1vbmcgdGhlIGJpZ2dlciBJb1Qg cHJvdmlkZXJzLg0KVG9kYXksIG1vc3QgY29tcGFuaWVzIHVzZSBjZXJ0aWZpY2F0ZS1iYXNlZCBh dXRoZW50aWNhdGlvbiBpbiBhbG1vc3QgYWxsIGNhc2VzLiBJbiBzb21lIGNhc2VzIHBsYWluIFBT SyBpcyB1c2VkIGZvciB0aG9zZSBjYXNlcyB3aGVyZSBkZXZpY2VzIGFyZSBwYXJ0aWN1bGFybHkg Y29uc3RyYWludC4NCg0KQ2lhbw0KSGFubmVzDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0t DQpGcm9tOiBBY2UgPGFjZS1ib3VuY2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YgSm9obiBNYXR0 c3Nvbg0KU2VudDogV2VkbmVzZGF5LCBOb3ZlbWJlciAyMSwgMjAxOCA0OjAzIFBNDQpUbzogYWNl QGlldGYub3JnOyBsd2lwQGlldGYub3JnDQpDYzogQmVuamFtaW4gS2FkdWsgPGthZHVrQG1pdC5l ZHU+OyBzYWx2YWRvci5wLmZAdW0uZXMNClN1YmplY3Q6IFJlOiBbQWNlXSBFREhPQyBzdGFuZGFy ZGl6YXRpb24NCg0KSGkgYWxsLA0KDQpJbnNwaXJlZCBieSB0aGUgZGlzY3Vzc2lvbiBpbiB0aGlz IHRocmVhZCwgSSBkaWQgbW9yZSBkZXRhaWxlZCBjYWxjdWxhdGlvbnMgb2YgdGhlIG51bWJlciBv ZiBieXRlcyB3aGVuIERUTFMgMS4zIGlzIHVzZWQgZm9yIHR5cGljYWwgSW9UIHVzZSBjYXNlcyAo UFNLLCBSUEssIENvbm5lY3Rpb24gSUQpLiBUaGUgcGxhbiBpcyB0byBhZGQgdGhpcyBpbmZvcm1h dGlvbiB0byBkcmFmdC1pZXRmLWx3aWctc2VjdXJpdHktcHJvdG9jb2wtY29tcGFyaXNvbiBhcyB0 aGlzIGhhcyBiZWVuIHJlcXVlc3RlZCBieSBzZXZlcmFsIHBlb3BsZS4gSSB0aGluayBzb21lIGJ5 dGVzIHdlcmUgbWlzc2luZyBpbiB0aGUgZWFybGllciBlc3RpbWF0ZXMgZm9yIFRMUyAxLjMsIGFu ZCBhcyBCZW4gY29tbWVudGVkLCBEVExTIDEuMyBhZGRzIHNvbWUgYnl0ZXMgY29tcGFyZWQgdG8g VExTIDEuMy4NCg0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQpGbGlnaHQgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICMxICAgICAgICAgIzIgICAgICAgICMzICAgICAgIFRvdGFsDQotLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0NCkRUTFMgMS4zIFJQSyArIEVDREhFICAgICAgICAgICAgICAgICAx NDkgICAgICAgIDM3MyAgICAgICAyMTMgICAgICAgIDczNQ0KRFRMUyAxLjMgUFNLICsgRUNESEUg ICAgICAgICAgICAgICAgIDE4NiAgICAgICAgMTkwICAgICAgICA1NyAgICAgICAgNDMzDQpEVExT IDEuMyBQU0sgICAgICAgICAgICAgICAgICAgICAgICAgMTM2ICAgICAgICAxNTAgICAgICAgIDU3 ICAgICAgICAzNDMNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KRURIT0MgICAgUlBLICsgRUNESEUg ICAgICAgICAgICAgICAgICAzOCAgICAgICAgMTIxICAgICAgICA4NiAgICAgICAgMjQ1DQpFREhP QyAgICBQU0sgKyBFQ0RIRSAgICAgICAgICAgICAgICAgIDQzICAgICAgICAgNDcgICAgICAgIDEy ICAgICAgICAxMDINCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgTnVtYmVyIG9mIGJ5dGVzDQoNCkFzc3VtcHRpb25zOg0KLSBNaW5pbXVtIG51 bWJlciBvZiBhbGdvcml0aG1zIGFuZCBjaXBoZXIgc3VpdGVzIG9mZmVyZWQNCi0gQ3VydmUyNTUx OSwgRUNEU0Egd2l0aCBQLTI1NiwgQUVTLUNDTV84LCBTSEEtMjU2DQotIExlbmd0aCBvZiBrZXkg aWRlbnRpZmllcnM6IDQgYnl0ZXMNCi0gQ29ubmVjdGlvbiBpZGVudGlmaWVyczogMSBieXRlDQot IFRoZSBEVExTIFJQS3MgdXNlIHBvaW50IGNvbXByZXNzaW9uIChzYXZlcyAzMiBieXRlcykNCi0g Tm8gRFRMUyBoYW5kc2hha2UgbWVzc2FnZSBmcmFnbWVudGF0aW9uDQotIE9ubHkgbWFuZGF0b3J5 IERUTFMgZXh0ZW50aW9ucywgZXhjZXB0IGZvciBjb25uZWN0aW9uIElEDQotIFZlcnNpb24gMzAg aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtdGxzLWR0bHMxMy0zMA0KDQoo RURIT0MgbnVtYmVycyBhcmUgZm9yIHRoZSBzb29uIHRvIGJlIHB1Ymxpc2hlZCAtMTEgdmVyc2lv biB3aXRoIGNpcGhlciBzdWl0ZXMpDQoNCkkgaG9wZSB0aGlzIGluZm9ybWF0aW9uIGlzIHVzZWZ1 bCBmb3IgcGVvcGxlLiBQbGVhc2UgY29tbWVudCBpZiBJIG1pc3NlZCBzb21ldGhpbmcgb3IgaWYg eW91IGhhdmUgYW55IHN1Z2dlc3Rpb24gb2YgdGhpbmdzIHRvIGFkZCBvciBob3cgdG8gcHJlc2Vu dCB0aGluZ3MuIEkgZG8gbm90IGtub3cgY3VycmVudGx5IGhvdyB0aGVzZSBudW1iZXJzIGNvbXBh cmUgdG8gRFRMUyAxLjIuDQoNCkJlbG93IGlzIGRldGFpbGVkIGluZm9ybWF0aW9uIGFib3V0IHdo ZXJlIHRoZSBieXRlIGluIGRpZmZlcmVudCBmbGlnaHRzIGFzIHdlbGwgYXMgdGhlIFJQS3MgKFN1 YmplY3RQdWJsaWNLZXlJbmZvKS4gTW9zdCBvZiB0aGUgYnl0ZXMgc2hvdWxkIGhhdmUgdGhlIGNv cnJlY3QgdmFsdWUsIGJ1dCBtb3N0IG9mIHRoZSBsZW5ndGggZmllbGRzIGFyZSBqdXN0IHdyaXR0 ZW4gYXMgTEwgTEwgTEwuIEJlbG93IGlzIGFsc28gaW5mb3JtYXRpb24gYWJvdXQgaG93IHJlc3Vt cHRpb24sIGNhY2hlZCBpbmZvcm1hdGlvbiBbUkZDIDc5MjRdLCBhbmQgbm90IHVzaW5nIENvbm5l Y3Rpb24gSUQgYWZmZWN0cyB0aGUgbnVtYmVyIG9mIGJ5dGVzLg0KDQoNCj09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KRFRMUyAxLjMgRmxpZ2h0 ICMxIFJQSyArIEVDREhFDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT0NCg0KUmVjb3JkIEhlYWRlciAtIERUTFNQbGFpbnRleHQgKDEzIGJ5dGVz KQ0KMTYgZmUgZmQgRUUgRUUgU1MgU1MgU1MgU1MgU1MgU1MgTEwgTEwNCg0KSGFuZHNoYWtlIEhl YWRlciAtIENsaWVudCBIZWxsbyAoMTAgYnl0ZXMpDQowMSBMTCBMTCBMTCBTUyBTUyAwMCAwMCAw MCBMTCBMTCBMTA0KDQpMZWdhY3kgVmVyc2lvbiAoMiBieXRlcykNCmZlIGZkDQoNCkNsaWVudCBS YW5kb20gKDMyIGJ5dGVzKQ0KMDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcgMDggMDkgMGEgMGIgMGMg MGQgMGUgMGYgMTAgMTEgMTIgMTMgMTQgMTUgMTYgMTcgMTggMTkgMWEgMWIgMWMgMWQgMWUgMWYN Cg0KTGVnYWN5IFNlc3Npb24gSUQgKDEgYnl0ZXMpDQowMA0KDQpDaXBoZXIgU3VpdGVzIChUTFNf QUVTXzEyOF9DQ01fOF9TSEEyNTYpICg0IGJ5dGVzKQ0KMDAgMDIgMTMgMDUNCg0KQ29tcHJlc3Np b24gTWV0aG9kcyAobnVsbCkgKDIgYnl0ZXMpDQowMSAwMA0KDQpFeHRlbnNpb25zIExlbmd0aCAo MiBieXRlcykNCkxMIExMDQoNCkV4dGVuc2lvbiAtIFN1cHBvcnRlZCBHcm91cHMgKHgyNTUxOSkg KDggYnl0ZXMpDQowMCAwYSAwMCAwNCAwMCAwMiAwMCAxZA0KDQpFeHRlbnNpb24gLSBTaWduYXR1 cmUgQWxnb3JpdGhtcyAoZWNkc2Ffc2VjcDI1NnIxX3NoYTI1NikgKDggYnl0ZXMpDQowMCAwZCAw MCAwNCAwMCAwMiAwOCAwNw0KDQpFeHRlbnNpb24gLSBLZXkgU2hhcmUgKDQyIGJ5dGVzKQ0KMDAg MzMgMDAgMjYgMDAgMjQgMDAgMWQgMDAgMjANCjAwIDAxIDAyIDAzIDA0IDA1IDA2IDA3IDA4IDA5 IDBhIDBiIDBjIDBkIDBlIDBmIDEwIDExIDEyIDEzIDE0IDE1IDE2IDE3IDE4IDE5IDFhIDFiIDFj IDFkIDFlIDFmDQoNCkV4dGVuc2lvbiAtIFN1cHBvcnRlZCBWZXJzaW9ucyAoMS4zKSAoNyBieXRl cykNCjAwIDJiIDAwIDAzIDAyIDAzIDA0DQoNCkV4dGVuc2lvbiAtIENsaWVudCBDZXJ0aWZpY2F0 ZSBUeXBlIChSYXcgUHVibGljIEtleSkgKDYgYnl0ZXMpDQowMCAxMyAwMCAwMSAwMSAwMg0KDQpF eHRlbnNpb24gLSBTZXJ2ZXIgQ2VydGlmaWNhdGUgVHlwZSAoUmF3IFB1YmxpYyBLZXkpICg2IGJ5 dGVzKQ0KMDAgMTQgMDAgMDEgMDEgMDINCg0KRXh0ZW5zaW9uIC0gQ29ubmVjdGlvbiBJZGVudGlm aWVyICg0MykgKDYgYnl0ZXMpDQpYWCBYWCAwMCAwMiAwMSA0Mg0KDQoxMyArIDEwICsgMiArIDMy ICsgMSArIDQgKyAyICsgMiArIDggKyA4ICsgNDIgKyA3ICsgNiArIDYgKyA2ID0gMTQ5IGJ5dGVz DQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LQ0KRFRMUyAxLjMgRmxpZ2h0ICMxIFBTSyArIEVDREhFDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KRGlmZmVyZW5jZXMgY29tcGFyZWQg dG8gUlBLICsgRUNESEUNCg0KKyBFeHRlbnNpb24gLSBQU0sgS2V5IEV4Y2hhbmdlIE1vZGVzICg2 IGJ5dGVzKQ0KICAwMCAyZCAwMCAwMiAwMSAwMQ0KDQorIEV4dGVuc2lvbiAtIFByZSBTaGFyZWQg S2V5ICg1MSBieXRlcykNCiAgMDAgMjkgMDAgMkYNCiAgMDAgMGEgMDAgMDQgSUQgSUQgSUQgSUQg MDAgMDAgMDAgMDANCiAgMDAgMjEgMjAgMDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcgMDggMDkgMGEg MGIgMGMgMGQgMGUgMGYgMTAgMTEgMTIgMTMgMTQgMTUgMTYgMTcgMTggMTkgMWEgMWIgMWMgMWQg MWUgMWYNCg0KLSBFeHRlbnNpb24gLSBTaWduYXR1cmUgQWxnb3JpdGhtcyAoZWNkc2Ffc2VjcDI1 NnIxX3NoYTI1NikgKDggYnl0ZXMpDQoNCi0gRXh0ZW5zaW9uIC0gQ2xpZW50IENlcnRpZmljYXRl IFR5cGUgKFJhdyBQdWJsaWMgS2V5KSAoNiBieXRlcykNCg0KLSBFeHRlbnNpb24gLSBTZXJ2ZXIg Q2VydGlmaWNhdGUgVHlwZSAoUmF3IFB1YmxpYyBLZXkpICg2IGJ5dGVzKQ0KDQoxNDkgKyA2ICsg NTEgLSA4IC0gNiAtIDYgPSAxODYgYnl0ZXMNCg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpEVExTIDEuMyBGbGlnaHQgIzEgUFNLDQotLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KRGlm ZmVyZW5jZXMgY29tcGFyZWQgdG8gUFNLICsgRUNESEUNCg0KLSBFeHRlbnNpb24gLSBTdXBwb3J0 ZWQgR3JvdXBzICh4MjU1MTkpICg4IGJ5dGVzKQ0KDQotIEV4dGVuc2lvbiAtIEtleSBTaGFyZSAo NDIgYnl0ZXMpDQoNCjE4NiAtIDggLSA0MiA9IDEzNiBieXRlcw0KDQoNCg0KPT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQpEVExTIDEuMyBGbGln aHQgIzIgIFJQSyArIEVDREhFDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT0NCg0KUmVjb3JkIEhlYWRlciAtIERUTFNQbGFpbnRleHQgKDEzIGJ5 dGVzKQ0KMTYgZmUgZmQgRUUgRUUgU1MgU1MgU1MgU1MgU1MgU1MgTEwgTEwNCg0KSGFuZHNoYWtl IEhlYWRlciAtIFNlcnZlciBIZWxsbyAoMTAgYnl0ZXMpDQowMiBMTCBMTCBMTCBTUyBTUyAwMCAw MCAwMCBMTCBMTCBMTA0KDQpMZWdhY3kgVmVyc2lvbiAoMiBieXRlcykNCmZlIGZkDQoNClNlcnZl ciBSYW5kb20gKDMyIGJ5dGVzKQ0KMDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcgMDggMDkgMGEgMGIg MGMgMGQgMGUgMGYgMTAgMTEgMTIgMTMgMTQgMTUgMTYgMTcgMTggMTkgMWEgMWIgMWMgMWQgMWUg MWYNCg0KTGVnYWN5IFNlc3Npb24gSUQgKDEgYnl0ZXMpDQowMA0KDQpDaXBoZXIgU3VpdGUgKFRM U19BRVNfMTI4X0NDTV84X1NIQTI1NikgKDIgYnl0ZXMpDQoxMyAwNQ0KDQpDb21wcmVzc2lvbiBN ZXRob2QgKG51bGwpICgxIGJ5dGVzKQ0KMDANCg0KRXh0ZW5zaW9ucyBMZW5ndGggKDIgYnl0ZXMp DQpMTCBMTA0KDQpFeHRlbnNpb24gLSBLZXkgU2hhcmUgKDQwIGJ5dGVzKQ0KMDAgMzMgMDAgMjQg MDAgMWQgMDAgMjANCjAwIDAxIDAyIDAzIDA0IDA1IDA2IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBl IDBmIDEwIDExIDEyIDEzIDE0IDE1IDE2IDE3IDE4IDE5IDFhIDFiIDFjIDFkIDFlIDFmDQoNCkV4 dGVuc2lvbiAtIFN1cHBvcnRlZCBWZXJzaW9ucyAoMS4zKSAoNiBieXRlcykNCjAwIDJiIDAwIDAy IDAzIDA0DQoNCkV4dGVuc2lvbiAtIENvbm5lY3Rpb24gSWRlbnRpZmllciAoNDMpICg2IGJ5dGVz KQ0KWFggWFggMDAgMDIgMDEgNDMNCg0KUmVjb3JkIEhlYWRlciAtIERUTFNDaXBoZXJ0ZXh0LCBG dWxsICg2IGJ5dGVzKSBISCBFUyBTUyA0MyBMTCBMTA0KDQpIYW5kc2hha2UgSGVhZGVyIC0gRW5j cnlwdGVkIEV4dGVuc2lvbnMgKDEwIGJ5dGVzKQ0KMDggTEwgTEwgTEwgU1MgU1MgMDAgMDAgMDAg TEwgTEwgTEwNCg0KRXh0ZW5zaW9ucyBMZW5ndGggKDIgYnl0ZXMpDQpMTCBMTA0KDQpFeHRlbnNp b24gLSBDbGllbnQgQ2VydGlmaWNhdGUgVHlwZSAoUmF3IFB1YmxpYyBLZXkpICg2IGJ5dGVzKQ0K MDAgMTMgMDAgMDEgMDEgMDINCg0KRXh0ZW5zaW9uIC0gU2VydmVyIENlcnRpZmljYXRlIFR5cGUg KFJhdyBQdWJsaWMgS2V5KSAoNiBieXRlcykNCjAwIDE0IDAwIDAxIDAxIDAyDQoNCkhhbmRzaGFr ZSBIZWFkZXIgLSBDZXJ0aWZpY2F0ZSBSZXF1ZXN0ICgxMCBieXRlcykNCjBkIExMIExMIExMIFNT IFNTIDAwIDAwIDAwIExMIExMIExMDQoNClJlcXVlc3QgQ29udGV4dCAoMSBieXRlcykNCjAwDQoN CkV4dGVuc2lvbnMgTGVuZ3RoICgyIGJ5dGVzKQ0KTEwgTEwNCg0KRXh0ZW5zaW9uIC0gU2lnbmF0 dXJlIEFsZ29yaXRobXMgKGVjZHNhX3NlY3AyNTZyMV9zaGEyNTYpICg4IGJ5dGVzKQ0KMDAgMGQg MDAgMDQgMDAgMDIgMDggMDcNCg0KSGFuZHNoYWtlIEhlYWRlciAtIENlcnRpZmljYXRlICgxMCBi eXRlcykNCjBiIExMIExMIExMIFNTIFNTIDAwIDAwIDAwIExMIExMIExMDQoNClJlcXVlc3QgQ29u dGV4dCAoMSBieXRlcykNCjAwDQoNCkNlcnRpZmljYXRlIExpc3QgTGVuZ3RoICgzIGJ5dGVzKQ0K TEwgTEwgTEwNCg0KQ2VydGlmaWNhdGUgTGVuZ3RoICgzIGJ5dGVzKQ0KTEwgTEwgTEwNCg0KQ2Vy dGlmaWNhdGUgKDU5IGJ5dGVzKSAvLyBQb2ludCBjb21wcmVzc2lvbg0KLi4uLg0KDQpDZXJ0aWZp Y2F0ZSBFeHRlbnNpb25zICgyIGJ5dGVzKQ0KMDAgMDANCg0KSGFuZHNoYWtlIEhlYWRlciAtIENl cnRpZmljYXRlIFZlcmlmeSAoMTAgYnl0ZXMpDQowZiBMTCBMTCBMTCBTUyBTUyAwMCAwMCAwMCBM TCBMTCBMTA0KDQpTaWduYXR1cmUgICg2OCBieXRlcykNClpaIFpaIDAwIDQwIC4uLi4NCg0KSGFu ZHNoYWtlIEhlYWRlciAtIEZpbmlzaGVkICgxMCBieXRlcykNCjE0IExMIExMIExMIFNTIFNTIDAw IDAwIDAwIExMIExMIExMDQoNClZlcmlmeSBEYXRhICgzMiBieXRlcykNCjAwIDAxIDAyIDAzIDA0 IDA1IDA2IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBlIDBmIDEwIDExIDEyIDEzIDE0IDE1IDE2IDE3 IDE4IDE5IDFhIDFiIDFjIDFkIDFlIDFmDQoNClJlY29yZCBUeXBlICgxIGJ5dGUpDQoxNg0KDQpB dXRoIFRhZyAoOCBieXRlcykNCmUwIDhiIDBlIDQ1IDVhIDM1IDBhIGU1DQoNCjEzICsgMTAyICsg NiArIDI0ICsgMjEgKyA3OCArIDc4ICsgNDIgKyAxICsgOCA9IDM3MyBieXRlcw0KDQotLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkRUTFMgMS4z IEZsaWdodCAjMiBQU0sgKyBFQ0RIRQ0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCkRpZmZlcmVuY2VzIGNvbXBhcmVkIHRvIFJQSyArIEVD REhFDQoNCi0gSGFuZHNoYWtlIE1lc3NhZ2UgQ2VydGlmaWNhdGUgKDc4IGJ5dGVzKQ0KDQotIEhh bmRzaGFrZSBNZXNzYWdlIENlcnRpZmljYXRlVmVyaWZ5ICg3OCBieXRlcykNCg0KLSBIYW5kc2hh a2UgTWVzc2FnZSBDZXJ0aWZpY2F0ZVJlcXVlc3QgKDIxIGJ5dGVzKQ0KDQotIEV4dGVuc2lvbiAt IENsaWVudCBDZXJ0aWZpY2F0ZSBUeXBlIChSYXcgUHVibGljIEtleSkgKDYgYnl0ZXMpDQoNCi0g RXh0ZW5zaW9uIC0gU2VydmVyIENlcnRpZmljYXRlIFR5cGUgKFJhdyBQdWJsaWMgS2V5KSAoNiBi eXRlcykNCg0KKyBFeHRlbnNpb24gLSBQcmUgU2hhcmVkIEtleSAoNiBieXRlcykNCiAgMDAgMjkg MDAgMDIgMDAgMDANCg0KMzczIC0gNzggLSA3OCAtIDIxIC0gNiAtIDYgICsgNiA9IDE5MCBieXRl cw0KDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0NCkRUTFMgMS4zIEZsaWdodCAjMiBQU0sNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQpEaWZmZXJlbmNlcyBjb21wYXJlZCB0byBQU0sg KyBFQ0RIRQ0KDQotIEV4dGVuc2lvbiAtIEtleSBTaGFyZSAoNDAgYnl0ZXMpDQoNCjE5MCAtIDQw ID0gMTUwIGJ5dGVzDQoNCg0KDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT0NCkRUTFMgMS4zIEZsaWdodCAjMyBSUEsgKyBFQ0RIRQ0KPT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQoNClJlY29y ZCBIZWFkZXIgKDYgYnl0ZXMpIC8vIERUTFNDaXBoZXJ0ZXh0LCBGdWxsIFpaIEVTIFNTIDQyIExM IExMDQoNCkhhbmRzaGFrZSBIZWFkZXIgLSBDZXJ0aWZpY2F0ZSAoMTAgYnl0ZXMpDQowYiBMTCBM TCBMTCBTUyBTUyBYWCBYWCBYWCBMTCBMTCBMTA0KDQpSZXF1ZXN0IENvbnRleHQgKDEgYnl0ZXMp DQowMA0KDQpDZXJ0aWZpY2F0ZSBMaXN0IExlbmd0aCAoMyBieXRlcykNCkxMIExMIExMDQoNCkNl cnRpZmljYXRlIExlbmd0aCAoMyBieXRlcykNCkxMIExMIExMDQoNCkNlcnRpZmljYXRlICg1OSBi eXRlcykgLy8gUG9pbnQgY29tcHJlc3Npb24NCi4uLi4NCg0KQ2VydGlmaWNhdGUgRXh0ZW5zaW9u cyAoMiBieXRlcykNCjAwIDAwDQoNCkhhbmRzaGFrZSBIZWFkZXIgLSBDZXJ0aWZpY2F0ZSBWZXJp ZnkgKDEwIGJ5dGVzKQ0KMGYgTEwgTEwgTEwgU1MgU1MgMDAgMDAgMDAgTEwgTEwgTEwNCg0KU2ln bmF0dXJlICAoNjggYnl0ZXMpDQowNCAwMyBMTCBMTCAvL2VjZHNhX3NlY3AyNTZyMV9zaGEyNTYN CjAwIDAxIDAyIDAzIDA0IDA1IDA2IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBlIDBmIDEwIDExIDEy IDEzIDE0IDE1IDE2IDE3IDE4IDE5IDFhIDFiIDFjIDFkIDFlIDFmDQowMCAwMSAwMiAwMyAwNCAw NSAwNiAwNyAwOCAwOSAwYSAwYiAwYyAwZCAwZSAwZiAxMCAxMSAxMiAxMyAxNCAxNSAxNiAxNyAx OCAxOSAxYSAxYiAxYyAxZCAxZSAxZg0KDQpIYW5kc2hha2UgSGVhZGVyIC0gRmluaXNoZWQgKDEw IGJ5dGVzKQ0KMTQgTEwgTEwgTEwgU1MgU1MgMDAgMDAgMDAgTEwgTEwgTEwNCg0KVmVyaWZ5IERh dGEgKDMyIGJ5dGVzKSAvLyBTSEEtMjU2DQowMCAwMSAwMiAwMyAwNCAwNSAwNiAwNyAwOCAwOSAw YSAwYiAwYyAwZCAwZSAwZiAxMCAxMSAxMiAxMyAxNCAxNSAxNiAxNyAxOCAxOSAxYSAxYiAxYyAx ZCAxZSAxZg0KDQpSZWNvcmQgVHlwZSAoMSBieXRlKQ0KMTYNCg0KQXV0aCBUYWcgKDggYnl0ZXMp IC8vIEFFUy1DQ01fOA0KMDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcNCg0KNiArIDc4ICsgNzggKyA0 MiArIDEgKyA4ID0gMjEzIGJ5dGVzDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KRFRMUyAxLjMgRmxpZ2h0ICMzIFBTSyArIEVDREhFDQot LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQpE aWZmZXJlbmNlcyBjb21wYXJlZCB0byBSUEsgKyBFQ0RIRQ0KDQotIEhhbmRzaGFrZSBNZXNzYWdl IENlcnRpZmljYXRlICg3OCBieXRlcykNCg0KLSBIYW5kc2hha2UgTWVzc2FnZSBDZXJ0aWZpY2F0 ZSBWZXJpZnkgKDc4IGJ5dGVzKQ0KDQoyMTMgLSA3OCAtIDc4ID0gNTcgYnl0ZXMNCg0KLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpEVExTIDEu MyBGbGlnaHQgIzMgUFNLDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLQ0KDQpEaWZmZXJlbmNlcyBjb21wYXJlZCB0byBQU0sgKyBFQ0RIRQ0KDQpO b25lDQoNCjU3IGJ5dGVzDQoNCg0KDQoNCg0KDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KRFRMUyAxLjMgLSBDYWNoZWQgaW5mb3JtYXRp b24gW1JGQyA3OTI0XSA9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT0NCg0KLSBDYWNoZWQgaW5mb3JtYXRpb24gdG9nZXRoZXIgd2l0aCBzZXJ2ZXIg WC41MDkgY2FuIGJlIHVzZWQgdG8gbW92ZSBieXRlcyBmcm9tIGZsaWdodCAjMiB0byBmbGlnaHQg IzENCiAgKGNhY2hlZCBSUEsgaW5jcmVhc2VzIHRoZSBudW1iZXIgb2YgYnl0ZXMgY29tcGFyZWQg dG8gY2FjaGVkIFguNTA5KQ0KDQpEaWZmZXJlbmNlcyBjb21wYXJlZCB0byBSUEsgKyBFQ0RIRQ0K DQpGbGlnaHQgIzENCg0KLSBFeHRlbnNpb24gLSBTZXJ2ZXIgQ2VydGlmaWNhdGUgVHlwZSAoUmF3 IFB1YmxpYyBLZXkpICg2IGJ5dGVzKQ0KDQorIEV4dGVuc2lvbiAtIENsaWVudCBDYXNoZWQgSW5m b3JtYXRpb24gKDM5IGJ5dGVzKQ0KICAwMCAxOSBMTCBMTCBMTCBMTA0KICAwMSAwMCAwMSAwMiAw MyAwNCAwNSAwNiAwNyAwOCAwOSAwYSAwYiAwYyAwZCAwZSAwZiAxMCAxMSAxMiAxMyAxNCAxNSAx NiAxNyAxOCAxOSAxYSAxYiAxYyAxZCAxZSAxZg0KDQoxNDkgKyAzMyA9IDE4MiBieXRlcw0KDQpG bGlnaHQgIzINCg0KLSBFeHRlbnNpb24gLSBTZXJ2ZXIgQ2VydGlmaWNhdGUgVHlwZSAoUmF3IFB1 YmxpYyBLZXkpICg2IGJ5dGVzKQ0KDQorIEV4dGVuc2lvbiAtIFNlcnZlciBDYXNoZWQgSW5mb3Jt YXRpb24gKDcgYnl0ZXMpDQogIDAwIDE5IExMIExMIExMIExMIDAxDQoNCi0gU2VydmVyIENlcnRp ZmljYXRlICg1OSBieXRlcyAtPiAzMiBieXRlcykNCg0KMzczIC0gMjYgPSAzNDcgYnl0ZXMNCg0K PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09DQpGbGlnaHQgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICMxICAgICAgICAgIzIgICAgICAgICMzICAgICAgIFRvdGFsDQotLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0NCkRUTFMgMS4zIENhY2hlZCBYLjUwOS9SUEsgKyBFQ0RIRSAgICAxODIgICAgICAgIDM0 NyAgICAgICAyMTMgICAgICAgIDc0Mg0KRFRMUyAxLjMgUlBLICsgRUNESEUgICAgICAgICAgICAg ICAgIDE0OSAgICAgICAgMzczICAgICAgIDIxMyAgICAgICAgNzM1DQo9PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT0NCg0KDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PQ0KRFRMUyAxLjMgLSBSZXN1bXB0aW9uDQo9PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NCg0KVG8gZW5hYmxlIHJlc3VtcHRpb24s IGEgNHRoIGZsaWdodCAoTmV3IFNlc3Npb24gVGlja2V0KSBpcyBhZGRlZA0KDQpGbGlnaHQgIzQg LSBOZXcgU2Vzc2lvbiBUaWNrZXQNCg0KUmVjb3JkIEhlYWRlciAtIERUTFNDaXBoZXJ0ZXh0LCBG dWxsICg2IGJ5dGVzKSBISCBFUyBTUyA0MyBMTCBMTA0KDQpIYW5kc2hha2UgSGVhZGVyIC0gTmV3 IFNlc3Npb24gVGlja2V0ICgxMCBieXRlcykNCjA0IExMIExMIExMIFNTIFNTIDAwIDAwIDAwIExM IExMIExMDQoNClRpY2tldCBMaWZldGltZSAoNCBieXRlcykNCjAwIDAxIDAyIDAzDQoNClRpY2tl dCBBZ2UgQWRkICg0IGJ5dGVzKQ0KMDAgMDEgMDIgMDMNCg0KVGlja2V0IE5vbmNlICgyIGJ5dGVz KQ0KMDEgMDANCg0KVGlja2V0ICg2IGJ5dGVzKQ0KMDAgMDQgSUQgSUQgSUQgSUQNCg0KRXh0ZW5z aW9ucyAoMiBieXRlcykNCjAwIDAwDQoNCkF1dGggVGFnICg4IGJ5dGVzKSAvLyBBRVMtQ0NNXzgN CjAwIDAxIDAyIDAzIDA0IDA1IDA2IDA3DQoNCjYgKyAxMCArIDQgKyA0ICsgMiArIDYgKyAyICsg OCA9IDQyIGJ5dGVzDQoNClRoZSByZXN1bXB0aW9uIGhhbmRzaGFrZSBpcyBqdXN0IGEgUFNLIGhh bmRzaGFrZSB3aXRoIDEzNiArIDE1MCArIDU3ID0gMzQzIGJ5dGVzDQoNCj09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PQ0KRmxpZ2h0ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAjMSAg ICAgIzIgICAgICMzICAgICAjNCAgICBUb3RhbA0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpEVExT IDEuMyBSUEsgKyBFQ0RIRSArIE5ld1Nlc3Npb25UaWNrZXQgICAgMTQ5ICAgIDM3MyAgICAyMTMg ICAgIDQyICAgICAgNzc3DQpEVExTIDEuMyBQU0sgKHJlc3VtcHRpb24pICAgICAgICAgICAgICAg ICAgMTM2ICAgIDE1MCAgICAgNTcgICAgICAgICAgICAgMzQzDQo9PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT0NCg0KDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PQ0KRFRMUyAxLjMgLSBDb25uZWN0aW9uIElEDQo9PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NCg0KV2l0aG91dCBhIENvbm5lY3Rpb24g SUQgdGhlIERUTFMgMS4zIGZsaWdodCBzaXplcyBjaGFuZ2VzIGFzIGZvbGxvd3MNCg0KRFRMUyAx LjMgRmxpZ2h0ICMxOiAgIC02IGJ5dGVzDQpEVExTIDEuMyBGbGlnaHQgIzI6ICAgLTcgYnl0ZXMN CkRUTFMgMS4zIEZsaWdodCAjMzogICAtMSBieXRlDQoNCg0KDQo9PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT0NCkZsaWdodCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIzEgICAgICAgICAjMiAg ICAgICAgIzMgICAgICAgVG90YWwNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KRFRMUyAxLjMgUlBL ICsgRUNESEUgKG5vIGNpZCkgICAgICAgIDE0MyAgICAgICAgMzY0ICAgICAgIDIxMiAgICAgICAg NzIxDQpEVExTIDEuMyBQU0sgKyBFQ0RIRSAobm8gY2lkKSAgICAgICAgMTgwICAgICAgICAxODMg ICAgICAgIDU2ICAgICAgICA0MTkNCkRUTFMgMS4zIFBTSyAobm8gY2lkKSAgICAgICAgICAgICAg ICAxMzAgICAgICAgIDE0MyAgICAgICAgNTYgICAgICAgIDMyOQ0KPT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09DQoNCg0KDQoNCg0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09DQpEVExTIFJhdyBQdWJsaWMgS2V5cw0KPT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQoNClN1YmplY3RQdWJsaWNLZXlJbmZv IHdpdGhvdXQgcG9pbnQgY29tcHJlc3Npb24NCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCjB4MzAgLy8gU2VxdWVuY2UNCjB4NTkgLy8gU2l6 ZSA4OQ0KDQoweDMwIC8vIFNlcXVlbmNlDQoweDEzIC8vIFNpemUgMTkNCjB4MDYgMHgwNyAweDJB IDB4ODYgMHg0OCAweENFIDB4M0QgMHgwMiAweDAxLiAgICAgLy8gT0lEIDEuMi44NDAuMTAwNDUu Mi4xIChlY1B1YmxpY0tleSkNCjB4MDYgMHgwOCAweDJBIDB4ODYgMHg0OCAweENFIDB4M0QgMHgw MyAweDAxIDB4MDcgLy8gT0lEIDEuMi44NDAuMTAwNDUuMy4xLjcgKHNlY3AyNTZyMSkNCg0KMHgw MyAvLyBCaXQgc3RyaW5nDQoweDQyIC8vIFNpemUgNjYNCjB4MDAgLy8gVW51c2VkIGJpdHMgMA0K MHgwNCAvLyBVbmNvbXByZXNzZWQNCi4uLi4uLiA2NCBieXRlcyBYIGFuZCBZDQoNClRvdGFsIG9m IDkxIGJ5dGVzDQoNClN1YmplY3RQdWJsaWNLZXlJbmZvIHdpdGggcG9pbnQgY29tcHJlc3Npb24N Ci0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoN CjB4MzAgLy8gU2VxdWVuY2UNCjB4NTkgLy8gU2l6ZSA4OQ0KDQoweDMwIC8vIFNlcXVlbmNlDQow eDEzIC8vIFNpemUgMTkNCjB4MDYgMHgwNyAweDJBIDB4ODYgMHg0OCAweENFIDB4M0QgMHgwMiAw eDAxLiAgICAgLy8gT0lEIDEuMi44NDAuMTAwNDUuMi4xIChlY1B1YmxpY0tleSkNCjB4MDYgMHgw OCAweDJBIDB4ODYgMHg0OCAweENFIDB4M0QgMHgwMyAweDAxIDB4MDcgLy8gT0lEIDEuMi44NDAu MTAwNDUuMy4xLjcgKHNlY3AyNTZyMSkNCg0KMHgwMyAvLyBCaXQgc3RyaW5nDQoweDQyIC8vIFNp emUgNjYNCjB4MDAgLy8gVW51c2VkIGJpdHMgMA0KMHgwMyAvLyBDb21wcmVzc2VkDQouLi4uLi4g MzIgYnl0ZXMgWA0KDQpUb3RhbCBvZiA1OSBieXRlcw0KDQoNCj09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KSGVscGZ1bCBTb3VyY2VzIG9mIElu Zm9ybWF0aW9uDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT0NCg0KSW4gYWRkaXRpb24gdG8gcmVsZXZhbnQgUkZDcyBhbmQgdGhlIGVzdGltYXRl cyBkb25lIGJ5IEppbSwgdGhlIGZvbGxvd2luZyByZWZlcmVuY2VzIHdlcmUgaGVscGZ1bDoNCg0K RXZlcnkgQnl0ZSBFeHBsYWluZWQ6IFRoZSBJbGx1c3RyYXRlZCBUTFMgMS4zIENvbm5lY3Rpb24g aHR0cHM6Ly90bHMxMy51bGZoZWltLm5ldC8NCg0KRGlnaXRhbCBDZXJ0aWZpY2F0ZXMgZm9yIHRo ZSBJbnRlcm5ldCBvZiBUaGluZ3MgaHR0cHM6Ly9rdGguZGl2YS1wb3J0YWwub3JnL3NtYXNoL2dl dC9kaXZhMjoxMTUzOTU4L0ZVTExURVhUMDEucGRmDQoNCi9Kb2huDQoNCg0KDQoNCu+7vy0tLS0t T3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVk dT4NCkRhdGU6IFNhdHVyZGF5LCAzIE5vdmVtYmVyIDIwMTggYXQgMTU6NTkNClRvOiBKb2huIE1h dHRzc29uIDxqb2huLm1hdHRzc29uQGVyaWNzc29uLmNvbT4NCkNjOiAic2FsdmFkb3IucC5mQHVt LmVzIiA8c2FsdmFkb3IucC5mQHVtLmVzPiwgImFjZUBpZXRmLm9yZyIgPGFjZUBpZXRmLm9yZz4N ClN1YmplY3Q6IFJlOiBbQWNlXSBFREhPQyBzdGFuZGFyZGl6YXRpb24NCg0KT24gRnJpLCBOb3Yg MDIsIDIwMTggYXQgMDI6NTU6NTRQTSArMDAwMCwgSm9obiBNYXR0c3NvbiB3cm90ZToNCj4gSGkg QmVuamFtaW4sIFNhbHZhZG9yDQo+DQo+IFdoaWxlIERUTFMgMS4zIGhhdmUgZG9uZSBhIHZlcnkg Z29vZCBqb2Igb2YgbG93ZXJpbmcgdGhlIG92ZXJoZWFkIG9mIHRoZSByZWNvcmQgbGF5ZXIgd2hl biBhcHBsaWNhdGlvbiBkYXRhIGlzIHNlbnQgKHNlZSBlLmcuIGh0dHBzOi8vdG9vbHMuaWV0Zi5v cmcvaHRtbC9kcmFmdC1pZXRmLWx3aWctc2VjdXJpdHktcHJvdG9jb2wtY29tcGFyaXNvbi0wMSBm b3IgYSBjb21wYXJpc29uIGJldHdlZW4gZGlmZmVyZW50IHByb3RvY29scyksIEkgZG8gbm90IHRo aW5rIHRoZSBoYW5kc2hha2UgcHJvdG9jb2wgaXMgbXVjaCBsZWFuZXIgKGlzIGl0IGxlYW5lciBh dCBhbGw/KS4NCg0KKFRoZXJlIGFyZSBzb21lIGhhbmRzaGFrZSBtZXNzYWdlcyB0aGF0IGFyZSBy ZW1vdmVkIGVudGlyZWx5LikNCg0KPiBXZSB0cmllZCB0byBtYWtlIGFuIGZhaXIgY29tcGFyaXNv biBiZXR3ZWVuIEVESE9DIGFuZCBUTFMgMS4zIGluIHRoZSBwcmVzZW50YXRpb24gYXQgSUVURiAx MDEgKHNlZSBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL21lZXRpbmcvMTAxL21hdGVyaWFs cy9zbGlkZXMtMTAxLWFjZS1rZXktZXhjaGFuZ2Utdy1vc2NvcmUtMDApLiBTaW5jZSB0aGVuLCB3 ZSBoYXZlIHNpZ25pZmljYW50bHkgb3B0aW1pemVkIHRoZSBlbmNvZGluZyBpbiBFREhPQyBhbmQg dGhlIHVwY29taW5nIHZlcnNpb24gKC0xMSkgaXMgZXhwZWN0ZWQgdG8gaGF2ZSB0aGUgZm9sbG93 aW5nIG1lc3NhZ2Ugc2l6ZXMuDQo+DQo+ICAgIEF1dGguICAgICAgICAgICAgICAgUFNLICAgICAg IFJQSyAgICAgICB4NXQgICAgIHg1Y2hhaW4NCj4gICAgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gICAgRURIT0Mg bWVzc2FnZV8xICAgICAgNDMgICAgICAgIDM4ICAgICAgICAzOCAgICAgICAgMzgNCj4gICAgRURI T0MgbWVzc2FnZV8yICAgICAgNDcgICAgICAgMTIxICAgICAgIDEyNyAgICAgICAxMTcgKyBDZXJ0 aWZpY2F0ZSBjaGFpbg0KPiAgICBFREhPQyBtZXNzYWdlXzMgICAgICAxMiAgICAgICAgODYgICAg ICAgIDkyICAgICAgICA4MiArIENlcnRpZmljYXRlIGNoYWluDQo+ICAgIC0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+ ICAgIFRvdGFsICAgICAgICAgICAgICAgMTAyICAgICAgIDI0NSAgICAgICAyNTcgICAgICAgMjM3 ICsgQ2VydGlmaWNhdGUgY2hhaW5zDQo+DQo+IEFzIFNhbHZhZG9yIHdyaXRlcywgdGhlIGhhbmRz aGFrZXMgaW4gVExTIDEuMyBhbmQgRFRMUyAxLjMgYXJlIGJhc2ljYWxseSB0aGUgc2FtZSwgc28g dGhlIG51bWJlcnMgcHJlc2VudGVkIGF0IElFVEYgMTAxIHNob3VsZCBiZSBhIGdvb2QgZXN0aW1h dGUgYWxzbyBmb3IgRFRMUyAxLjMuDQo+DQo+ICAgIEF1dGguICAgICAgICAgICAgICAgIFBTSyAg ICAgICBSUEsNCj4gICAgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gICAgKEQpVExTIG1lc3NhZ2VfMSAgICAgMTQy ICAgICAgIDEwNw0KPiAgICAoRClUTFMgbWVzc2FnZV8yICAgICAxMzUgICAgICAgMjY0DQo+ICAg IChEKVRMUyBtZXNzYWdlXzMgICAgICA1MSAgICAgICAxNjcNCj4gICAgLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4g ICAgVG90YWwgICAgICAgICAgICAgICAgMzI4ICAgICAgIDUzOA0KDQpUaGFua3MgZm9yIHRoZSBu dW1iZXJzIQ0KDQo+IFRoZSBudW1iZXJzIGFib3ZlIGluY2x1ZGUgRUNESEUuIEZvciBoYW5kc2hh a2UgbWVzc2FnZXMsIG15IHVuZGVyc3RhbmRpbmcgaXMgdGhhdCB0aGUgRFRMUyAxLjMgYW5kIFRM UyAxLjMgcmVjb3JkIGxheWVyIGhhdmUgZXhhY3RseSB0aGUgc2FtZSBzaXplLg0KDQpUaGUgRFRM UyAxLjMgb25lcyB3aWxsIGJlIHdvcnNlLCBkdWUgdG8gdGhlIGVwb2NoIGFuZCBzZXF1ZW5jZSBu dW1iZXIgZmllbGRzLg0KDQotQmVuDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fDQpBY2UgbWFpbGluZyBsaXN0DQpBY2VAaWV0Zi5vcmcNCmh0dHBzOi8v d3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vYWNlDQpJTVBPUlRBTlQgTk9USUNFOiBUaGUg Y29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRp YWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRl ZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8g bm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9y IGFueSBwdXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVk aXVtLiBUaGFuayB5b3UuDQo= From nobody Wed Nov 21 07:22:10 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D6331277CC; Wed, 21 Nov 2018 07:22:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.46 X-Spam-Level: X-Spam-Status: No, score=-1.46 tagged_above=-999 required=5 tests=[DKIMWL_WL_MED=-1.459, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CRP01_ep2g54; Wed, 21 Nov 2018 07:22:04 -0800 (PST) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-eopbgr140077.outbound.protection.outlook.com [40.107.14.77]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 38C5012426E; Wed, 21 Nov 2018 07:22:04 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=imSp1+76hsUeIlsX6gsIG5WmC5QasB5Ln0J4kFqvssg=; b=fczNMAcvNcYz+Lb9/1NsQMuEbcU9ZW3JzUeC//oqBOZnpqFR8+n2Z2qg/DLZNhw25TIlr8jmPhzCZ97fE8vyMRvqFAO0V1iaTdqSwGUalX30PCPQGN4DGr4vrHA1OWfD8f//SWZKCVdO8RkfkpI5LUHzrj/GNH6uo7ZAd90VA08= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1389.eurprd08.prod.outlook.com (10.167.198.17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1339.26; Wed, 21 Nov 2018 15:22:00 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::2056:1db1:e01:4670]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::2056:1db1:e01:4670%2]) with mapi id 15.20.1339.027; Wed, 21 Nov 2018 15:22:00 +0000 From: Hannes Tschofenig To: John Mattsson , "ace@ietf.org" , "lwip@ietf.org" CC: Benjamin Kaduk , "salvador.p.f@um.es" Thread-Topic: [Ace] EDHOC standardization Thread-Index: AQHUcrwmx6N1o4AsH0uz6RMW3Bvpj6U+JgWAgBxb0gD///PTYA== Date: Wed, 21 Nov 2018 15:22:00 +0000 Message-ID: References: <20181103145857.GG54966@kduck.kaduk.org> <7F78CC92-5C48-4BFC-8087-E25D4D95A74F@ericsson.com> In-Reply-To: <7F78CC92-5C48-4BFC-8087-E25D4D95A74F@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [80.92.122.87] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1389; 6:FYQ70VkOpPKBuHTgqCfBI2eSH31wHJDQQRolU1v0/4CkKt21YzwBhCB2neqi+cXNW4gTCJpB8R37fRvmqpfVKs/hpHRkBwvAllrUDfnhs+ifgFSMl18CIeC7ek6qnO1Abbo7VHOrPewhIVm21D0uwEZbTAB7D0pTUe47hHxfrOmzIzeL2Q6Su20Aq5VjEt+REbv7w7B2AjVaSh0qTJchrGZ8tZttvbTNqoCGFnVGWLxcHPlkE7gAVleIdZ1GF0H7gNI4T09YiklYm1zPj55BxiPD5hOkaFj1FBtIAfyJxng2huKhdZqnUb+9f1jm7cCm4uJCqi/lb/QSWo/tGWbGVgRBhUEhONamnluyspugPtVSLlOYJNC3JFZLlvsB9CetmdDsqLT6eZDyAWUTVgzYYIovAiNksQF/Ri9Bpn6uyIPZPhwjuhs2la90kNGPtBYQsM0bOjsNwTS0eioejkxsMg==; 5:k8JWMrUfOW501LDc+dhF4hMpbdiumzOo/wfWk19U+G1WqicF/3N3iEMDZ1Va0JIgiu/IwP3CZ5FSBlU4A76Se78j/uMOgg1adFgSxiX6/X7dDRtYCFwP2fWIZk9lgGHXdGS8Lah5THCXwHfUBGRJVIdSCrywYEL6lo6p+aC+jTw=; 7:t9w1Wl65ls+vHxVI/vG+GgP2x4OXCrFoq5s2L4x4nqhCmtTPlkvhx3haO3KNAaX889eE6OJKKviM7CR8NfJMCmLx1TYrVvwGO/J6cgVh3XvV3MSYgg5XT+7eTy6it2tUopmKb/+OdVD5mqY8igvdKw== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 995765b8-483c-4398-cdf5-08d64fc51527 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390098)(7020095)(4652040)(8989299)(5600074)(711020)(4618075)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1389; x-ms-traffictypediagnostic: VI1PR0801MB1389: x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(10201501046)(3231442)(944501410)(52105112)(3002001)(6055026)(148016)(149066)(150057)(6041310)(20161123564045)(20161123560045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123558120)(20161123562045)(201708071742011)(7699051)(76991095); SRVR:VI1PR0801MB1389; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1389; x-forefront-prvs: 08635C03D4 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(366004)(39860400002)(396003)(346002)(376002)(136003)(199004)(51914003)(13464003)(189003)(40434004)(53754006)(229853002)(55016002)(476003)(6246003)(5660300001)(53936002)(33656002)(14444005)(53946003)(9686003)(256004)(6116002)(3846002)(446003)(97736004)(110136005)(74316002)(2501003)(4326008)(54906003)(316002)(7696005)(6306002)(76176011)(6436002)(305945005)(2201001)(5024004)(26005)(81156014)(478600001)(7736002)(2900100001)(8676002)(99286004)(105586002)(186003)(6506007)(25786009)(53546011)(102836004)(106356001)(66066001)(68736007)(2906002)(71200400001)(14454004)(8936002)(71190400001)(966005)(486006)(4744004)(72206003)(11346002)(81166006)(86362001); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1389; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: X7Z+5wRiZUJynbMlJixjUj8u7lsjIZSLa5WADM6dBY6LOy16UzS7kJR1KKyaSY4IuHoqiouvPc/2pbb5QiqkqinOUoqbaE1yc8u0w71Snpi32sUa7jmHEdVr8zuOM48TStvu2cFj3fsRfC+c7OzcdWfMkY6X4syALnU8NydgBmpiT1SvwKQlX19dySHG52JyqzLCCA5WFyQwjAWZOuN1ctitpVA8O5EvjQzsbshUK8RZP4oVejpjjY30r59g5mT8xwQ/PNexwEMX6CihLFd0l5Tsb/SLGoi1NjZny3rEW3ShDYSQXcpFE/MjBB2XSlpsJC2LgttxNgjDOHNTDVO22r1rJe7l9kXiMvQP5bMLrJ0= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: 995765b8-483c-4398-cdf5-08d64fc51527 X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Nov 2018 15:22:00.0491 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1389 Archived-At: Subject: Re: [Ace] EDHOC standardization X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Nov 2018 15:22:08 -0000 Sm9obiwgY291bGQgeW91IGFsc28gYWRkIHRoZSBkZXRhaWxlZCBkYXRhIGZvciBFREhPQyBhcyB3 ZWxsPw0KKEFuZCB0aGFua3MgZm9yIHRoZSBkZXRhaWxzIHJlZ2FyZGluZyB0aGUgRFRMUyBudW1i ZXJzLikNCg0KQ2lhbw0KSGFubmVzDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9t OiBBY2UgPGFjZS1ib3VuY2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YgSm9obiBNYXR0c3Nvbg0K U2VudDogV2VkbmVzZGF5LCBOb3ZlbWJlciAyMSwgMjAxOCA0OjAzIFBNDQpUbzogYWNlQGlldGYu b3JnOyBsd2lwQGlldGYub3JnDQpDYzogQmVuamFtaW4gS2FkdWsgPGthZHVrQG1pdC5lZHU+OyBz YWx2YWRvci5wLmZAdW0uZXMNClN1YmplY3Q6IFJlOiBbQWNlXSBFREhPQyBzdGFuZGFyZGl6YXRp b24NCg0KSGkgYWxsLA0KDQpJbnNwaXJlZCBieSB0aGUgZGlzY3Vzc2lvbiBpbiB0aGlzIHRocmVh ZCwgSSBkaWQgbW9yZSBkZXRhaWxlZCBjYWxjdWxhdGlvbnMgb2YgdGhlIG51bWJlciBvZiBieXRl cyB3aGVuIERUTFMgMS4zIGlzIHVzZWQgZm9yIHR5cGljYWwgSW9UIHVzZSBjYXNlcyAoUFNLLCBS UEssIENvbm5lY3Rpb24gSUQpLiBUaGUgcGxhbiBpcyB0byBhZGQgdGhpcyBpbmZvcm1hdGlvbiB0 byBkcmFmdC1pZXRmLWx3aWctc2VjdXJpdHktcHJvdG9jb2wtY29tcGFyaXNvbiBhcyB0aGlzIGhh cyBiZWVuIHJlcXVlc3RlZCBieSBzZXZlcmFsIHBlb3BsZS4gSSB0aGluayBzb21lIGJ5dGVzIHdl cmUgbWlzc2luZyBpbiB0aGUgZWFybGllciBlc3RpbWF0ZXMgZm9yIFRMUyAxLjMsIGFuZCBhcyBC ZW4gY29tbWVudGVkLCBEVExTIDEuMyBhZGRzIHNvbWUgYnl0ZXMgY29tcGFyZWQgdG8gVExTIDEu My4NCg0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09DQpGbGlnaHQgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICMxICAgICAgICAgIzIgICAgICAgICMzICAgICAgIFRvdGFsDQotLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0NCkRUTFMgMS4zIFJQSyArIEVDREhFICAgICAgICAgICAgICAgICAxNDkgICAg ICAgIDM3MyAgICAgICAyMTMgICAgICAgIDczNQ0KRFRMUyAxLjMgUFNLICsgRUNESEUgICAgICAg ICAgICAgICAgIDE4NiAgICAgICAgMTkwICAgICAgICA1NyAgICAgICAgNDMzDQpEVExTIDEuMyBQ U0sgICAgICAgICAgICAgICAgICAgICAgICAgMTM2ICAgICAgICAxNTAgICAgICAgIDU3ICAgICAg ICAzNDMNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KRURIT0MgICAgUlBLICsgRUNESEUgICAgICAg ICAgICAgICAgICAzOCAgICAgICAgMTIxICAgICAgICA4NiAgICAgICAgMjQ1DQpFREhPQyAgICBQ U0sgKyBFQ0RIRSAgICAgICAgICAgICAgICAgIDQzICAgICAgICAgNDcgICAgICAgIDEyICAgICAg ICAxMDINCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgTnVtYmVyIG9mIGJ5dGVzDQoNCkFzc3VtcHRpb25zOg0KLSBNaW5pbXVtIG51bWJlciBv ZiBhbGdvcml0aG1zIGFuZCBjaXBoZXIgc3VpdGVzIG9mZmVyZWQNCi0gQ3VydmUyNTUxOSwgRUNE U0Egd2l0aCBQLTI1NiwgQUVTLUNDTV84LCBTSEEtMjU2DQotIExlbmd0aCBvZiBrZXkgaWRlbnRp ZmllcnM6IDQgYnl0ZXMNCi0gQ29ubmVjdGlvbiBpZGVudGlmaWVyczogMSBieXRlDQotIFRoZSBE VExTIFJQS3MgdXNlIHBvaW50IGNvbXByZXNzaW9uIChzYXZlcyAzMiBieXRlcykNCi0gTm8gRFRM UyBoYW5kc2hha2UgbWVzc2FnZSBmcmFnbWVudGF0aW9uDQotIE9ubHkgbWFuZGF0b3J5IERUTFMg ZXh0ZW50aW9ucywgZXhjZXB0IGZvciBjb25uZWN0aW9uIElEDQotIFZlcnNpb24gMzAgaHR0cHM6 Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtdGxzLWR0bHMxMy0zMA0KDQooRURIT0Mg bnVtYmVycyBhcmUgZm9yIHRoZSBzb29uIHRvIGJlIHB1Ymxpc2hlZCAtMTEgdmVyc2lvbiB3aXRo IGNpcGhlciBzdWl0ZXMpDQoNCkkgaG9wZSB0aGlzIGluZm9ybWF0aW9uIGlzIHVzZWZ1bCBmb3Ig cGVvcGxlLiBQbGVhc2UgY29tbWVudCBpZiBJIG1pc3NlZCBzb21ldGhpbmcgb3IgaWYgeW91IGhh dmUgYW55IHN1Z2dlc3Rpb24gb2YgdGhpbmdzIHRvIGFkZCBvciBob3cgdG8gcHJlc2VudCB0aGlu Z3MuIEkgZG8gbm90IGtub3cgY3VycmVudGx5IGhvdyB0aGVzZSBudW1iZXJzIGNvbXBhcmUgdG8g RFRMUyAxLjIuDQoNCkJlbG93IGlzIGRldGFpbGVkIGluZm9ybWF0aW9uIGFib3V0IHdoZXJlIHRo ZSBieXRlIGluIGRpZmZlcmVudCBmbGlnaHRzIGFzIHdlbGwgYXMgdGhlIFJQS3MgKFN1YmplY3RQ dWJsaWNLZXlJbmZvKS4gTW9zdCBvZiB0aGUgYnl0ZXMgc2hvdWxkIGhhdmUgdGhlIGNvcnJlY3Qg dmFsdWUsIGJ1dCBtb3N0IG9mIHRoZSBsZW5ndGggZmllbGRzIGFyZSBqdXN0IHdyaXR0ZW4gYXMg TEwgTEwgTEwuIEJlbG93IGlzIGFsc28gaW5mb3JtYXRpb24gYWJvdXQgaG93IHJlc3VtcHRpb24s IGNhY2hlZCBpbmZvcm1hdGlvbiBbUkZDIDc5MjRdLCBhbmQgbm90IHVzaW5nIENvbm5lY3Rpb24g SUQgYWZmZWN0cyB0aGUgbnVtYmVyIG9mIGJ5dGVzLg0KDQoNCj09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KRFRMUyAxLjMgRmxpZ2h0ICMxIFJQ SyArIEVDREhFDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT0NCg0KUmVjb3JkIEhlYWRlciAtIERUTFNQbGFpbnRleHQgKDEzIGJ5dGVzKQ0KMTYg ZmUgZmQgRUUgRUUgU1MgU1MgU1MgU1MgU1MgU1MgTEwgTEwNCg0KSGFuZHNoYWtlIEhlYWRlciAt IENsaWVudCBIZWxsbyAoMTAgYnl0ZXMpDQowMSBMTCBMTCBMTCBTUyBTUyAwMCAwMCAwMCBMTCBM TCBMTA0KDQpMZWdhY3kgVmVyc2lvbiAoMiBieXRlcykNCmZlIGZkDQoNCkNsaWVudCBSYW5kb20g KDMyIGJ5dGVzKQ0KMDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcgMDggMDkgMGEgMGIgMGMgMGQgMGUg MGYgMTAgMTEgMTIgMTMgMTQgMTUgMTYgMTcgMTggMTkgMWEgMWIgMWMgMWQgMWUgMWYNCg0KTGVn YWN5IFNlc3Npb24gSUQgKDEgYnl0ZXMpDQowMA0KDQpDaXBoZXIgU3VpdGVzIChUTFNfQUVTXzEy OF9DQ01fOF9TSEEyNTYpICg0IGJ5dGVzKQ0KMDAgMDIgMTMgMDUNCg0KQ29tcHJlc3Npb24gTWV0 aG9kcyAobnVsbCkgKDIgYnl0ZXMpDQowMSAwMA0KDQpFeHRlbnNpb25zIExlbmd0aCAoMiBieXRl cykNCkxMIExMDQoNCkV4dGVuc2lvbiAtIFN1cHBvcnRlZCBHcm91cHMgKHgyNTUxOSkgKDggYnl0 ZXMpDQowMCAwYSAwMCAwNCAwMCAwMiAwMCAxZA0KDQpFeHRlbnNpb24gLSBTaWduYXR1cmUgQWxn b3JpdGhtcyAoZWNkc2Ffc2VjcDI1NnIxX3NoYTI1NikgKDggYnl0ZXMpDQowMCAwZCAwMCAwNCAw MCAwMiAwOCAwNw0KDQpFeHRlbnNpb24gLSBLZXkgU2hhcmUgKDQyIGJ5dGVzKQ0KMDAgMzMgMDAg MjYgMDAgMjQgMDAgMWQgMDAgMjANCjAwIDAxIDAyIDAzIDA0IDA1IDA2IDA3IDA4IDA5IDBhIDBi IDBjIDBkIDBlIDBmIDEwIDExIDEyIDEzIDE0IDE1IDE2IDE3IDE4IDE5IDFhIDFiIDFjIDFkIDFl IDFmDQoNCkV4dGVuc2lvbiAtIFN1cHBvcnRlZCBWZXJzaW9ucyAoMS4zKSAoNyBieXRlcykNCjAw IDJiIDAwIDAzIDAyIDAzIDA0DQoNCkV4dGVuc2lvbiAtIENsaWVudCBDZXJ0aWZpY2F0ZSBUeXBl IChSYXcgUHVibGljIEtleSkgKDYgYnl0ZXMpDQowMCAxMyAwMCAwMSAwMSAwMg0KDQpFeHRlbnNp b24gLSBTZXJ2ZXIgQ2VydGlmaWNhdGUgVHlwZSAoUmF3IFB1YmxpYyBLZXkpICg2IGJ5dGVzKQ0K MDAgMTQgMDAgMDEgMDEgMDINCg0KRXh0ZW5zaW9uIC0gQ29ubmVjdGlvbiBJZGVudGlmaWVyICg0 MykgKDYgYnl0ZXMpDQpYWCBYWCAwMCAwMiAwMSA0Mg0KDQoxMyArIDEwICsgMiArIDMyICsgMSAr IDQgKyAyICsgMiArIDggKyA4ICsgNDIgKyA3ICsgNiArIDYgKyA2ID0gMTQ5IGJ5dGVzDQoNCi0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KRFRM UyAxLjMgRmxpZ2h0ICMxIFBTSyArIEVDREhFDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KRGlmZmVyZW5jZXMgY29tcGFyZWQgdG8gUlBL ICsgRUNESEUNCg0KKyBFeHRlbnNpb24gLSBQU0sgS2V5IEV4Y2hhbmdlIE1vZGVzICg2IGJ5dGVz KQ0KICAwMCAyZCAwMCAwMiAwMSAwMQ0KDQorIEV4dGVuc2lvbiAtIFByZSBTaGFyZWQgS2V5ICg1 MSBieXRlcykNCiAgMDAgMjkgMDAgMkYNCiAgMDAgMGEgMDAgMDQgSUQgSUQgSUQgSUQgMDAgMDAg MDAgMDANCiAgMDAgMjEgMjAgMDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcgMDggMDkgMGEgMGIgMGMg MGQgMGUgMGYgMTAgMTEgMTIgMTMgMTQgMTUgMTYgMTcgMTggMTkgMWEgMWIgMWMgMWQgMWUgMWYN Cg0KLSBFeHRlbnNpb24gLSBTaWduYXR1cmUgQWxnb3JpdGhtcyAoZWNkc2Ffc2VjcDI1NnIxX3No YTI1NikgKDggYnl0ZXMpDQoNCi0gRXh0ZW5zaW9uIC0gQ2xpZW50IENlcnRpZmljYXRlIFR5cGUg KFJhdyBQdWJsaWMgS2V5KSAoNiBieXRlcykNCg0KLSBFeHRlbnNpb24gLSBTZXJ2ZXIgQ2VydGlm aWNhdGUgVHlwZSAoUmF3IFB1YmxpYyBLZXkpICg2IGJ5dGVzKQ0KDQoxNDkgKyA2ICsgNTEgLSA4 IC0gNiAtIDYgPSAxODYgYnl0ZXMNCg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpEVExTIDEuMyBGbGlnaHQgIzEgUFNLDQotLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KRGlmZmVyZW5j ZXMgY29tcGFyZWQgdG8gUFNLICsgRUNESEUNCg0KLSBFeHRlbnNpb24gLSBTdXBwb3J0ZWQgR3Jv dXBzICh4MjU1MTkpICg4IGJ5dGVzKQ0KDQotIEV4dGVuc2lvbiAtIEtleSBTaGFyZSAoNDIgYnl0 ZXMpDQoNCjE4NiAtIDggLSA0MiA9IDEzNiBieXRlcw0KDQoNCg0KPT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQpEVExTIDEuMyBGbGlnaHQgIzIg IFJQSyArIEVDREhFDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT0NCg0KUmVjb3JkIEhlYWRlciAtIERUTFNQbGFpbnRleHQgKDEzIGJ5dGVzKQ0K MTYgZmUgZmQgRUUgRUUgU1MgU1MgU1MgU1MgU1MgU1MgTEwgTEwNCg0KSGFuZHNoYWtlIEhlYWRl ciAtIFNlcnZlciBIZWxsbyAoMTAgYnl0ZXMpDQowMiBMTCBMTCBMTCBTUyBTUyAwMCAwMCAwMCBM TCBMTCBMTA0KDQpMZWdhY3kgVmVyc2lvbiAoMiBieXRlcykNCmZlIGZkDQoNClNlcnZlciBSYW5k b20gKDMyIGJ5dGVzKQ0KMDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcgMDggMDkgMGEgMGIgMGMgMGQg MGUgMGYgMTAgMTEgMTIgMTMgMTQgMTUgMTYgMTcgMTggMTkgMWEgMWIgMWMgMWQgMWUgMWYNCg0K TGVnYWN5IFNlc3Npb24gSUQgKDEgYnl0ZXMpDQowMA0KDQpDaXBoZXIgU3VpdGUgKFRMU19BRVNf MTI4X0NDTV84X1NIQTI1NikgKDIgYnl0ZXMpDQoxMyAwNQ0KDQpDb21wcmVzc2lvbiBNZXRob2Qg KG51bGwpICgxIGJ5dGVzKQ0KMDANCg0KRXh0ZW5zaW9ucyBMZW5ndGggKDIgYnl0ZXMpDQpMTCBM TA0KDQpFeHRlbnNpb24gLSBLZXkgU2hhcmUgKDQwIGJ5dGVzKQ0KMDAgMzMgMDAgMjQgMDAgMWQg MDAgMjANCjAwIDAxIDAyIDAzIDA0IDA1IDA2IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBlIDBmIDEw IDExIDEyIDEzIDE0IDE1IDE2IDE3IDE4IDE5IDFhIDFiIDFjIDFkIDFlIDFmDQoNCkV4dGVuc2lv biAtIFN1cHBvcnRlZCBWZXJzaW9ucyAoMS4zKSAoNiBieXRlcykNCjAwIDJiIDAwIDAyIDAzIDA0 DQoNCkV4dGVuc2lvbiAtIENvbm5lY3Rpb24gSWRlbnRpZmllciAoNDMpICg2IGJ5dGVzKQ0KWFgg WFggMDAgMDIgMDEgNDMNCg0KUmVjb3JkIEhlYWRlciAtIERUTFNDaXBoZXJ0ZXh0LCBGdWxsICg2 IGJ5dGVzKSBISCBFUyBTUyA0MyBMTCBMTA0KDQpIYW5kc2hha2UgSGVhZGVyIC0gRW5jcnlwdGVk IEV4dGVuc2lvbnMgKDEwIGJ5dGVzKQ0KMDggTEwgTEwgTEwgU1MgU1MgMDAgMDAgMDAgTEwgTEwg TEwNCg0KRXh0ZW5zaW9ucyBMZW5ndGggKDIgYnl0ZXMpDQpMTCBMTA0KDQpFeHRlbnNpb24gLSBD bGllbnQgQ2VydGlmaWNhdGUgVHlwZSAoUmF3IFB1YmxpYyBLZXkpICg2IGJ5dGVzKQ0KMDAgMTMg MDAgMDEgMDEgMDINCg0KRXh0ZW5zaW9uIC0gU2VydmVyIENlcnRpZmljYXRlIFR5cGUgKFJhdyBQ dWJsaWMgS2V5KSAoNiBieXRlcykNCjAwIDE0IDAwIDAxIDAxIDAyDQoNCkhhbmRzaGFrZSBIZWFk ZXIgLSBDZXJ0aWZpY2F0ZSBSZXF1ZXN0ICgxMCBieXRlcykNCjBkIExMIExMIExMIFNTIFNTIDAw IDAwIDAwIExMIExMIExMDQoNClJlcXVlc3QgQ29udGV4dCAoMSBieXRlcykNCjAwDQoNCkV4dGVu c2lvbnMgTGVuZ3RoICgyIGJ5dGVzKQ0KTEwgTEwNCg0KRXh0ZW5zaW9uIC0gU2lnbmF0dXJlIEFs Z29yaXRobXMgKGVjZHNhX3NlY3AyNTZyMV9zaGEyNTYpICg4IGJ5dGVzKQ0KMDAgMGQgMDAgMDQg MDAgMDIgMDggMDcNCg0KSGFuZHNoYWtlIEhlYWRlciAtIENlcnRpZmljYXRlICgxMCBieXRlcykN CjBiIExMIExMIExMIFNTIFNTIDAwIDAwIDAwIExMIExMIExMDQoNClJlcXVlc3QgQ29udGV4dCAo MSBieXRlcykNCjAwDQoNCkNlcnRpZmljYXRlIExpc3QgTGVuZ3RoICgzIGJ5dGVzKQ0KTEwgTEwg TEwNCg0KQ2VydGlmaWNhdGUgTGVuZ3RoICgzIGJ5dGVzKQ0KTEwgTEwgTEwNCg0KQ2VydGlmaWNh dGUgKDU5IGJ5dGVzKSAvLyBQb2ludCBjb21wcmVzc2lvbg0KLi4uLg0KDQpDZXJ0aWZpY2F0ZSBF eHRlbnNpb25zICgyIGJ5dGVzKQ0KMDAgMDANCg0KSGFuZHNoYWtlIEhlYWRlciAtIENlcnRpZmlj YXRlIFZlcmlmeSAoMTAgYnl0ZXMpDQowZiBMTCBMTCBMTCBTUyBTUyAwMCAwMCAwMCBMTCBMTCBM TA0KDQpTaWduYXR1cmUgICg2OCBieXRlcykNClpaIFpaIDAwIDQwIC4uLi4NCg0KSGFuZHNoYWtl IEhlYWRlciAtIEZpbmlzaGVkICgxMCBieXRlcykNCjE0IExMIExMIExMIFNTIFNTIDAwIDAwIDAw IExMIExMIExMDQoNClZlcmlmeSBEYXRhICgzMiBieXRlcykNCjAwIDAxIDAyIDAzIDA0IDA1IDA2 IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBlIDBmIDEwIDExIDEyIDEzIDE0IDE1IDE2IDE3IDE4IDE5 IDFhIDFiIDFjIDFkIDFlIDFmDQoNClJlY29yZCBUeXBlICgxIGJ5dGUpDQoxNg0KDQpBdXRoIFRh ZyAoOCBieXRlcykNCmUwIDhiIDBlIDQ1IDVhIDM1IDBhIGU1DQoNCjEzICsgMTAyICsgNiArIDI0 ICsgMjEgKyA3OCArIDc4ICsgNDIgKyAxICsgOCA9IDM3MyBieXRlcw0KDQotLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkRUTFMgMS4zIEZsaWdo dCAjMiBQU0sgKyBFQ0RIRQ0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tDQoNCkRpZmZlcmVuY2VzIGNvbXBhcmVkIHRvIFJQSyArIEVDREhFDQoN Ci0gSGFuZHNoYWtlIE1lc3NhZ2UgQ2VydGlmaWNhdGUgKDc4IGJ5dGVzKQ0KDQotIEhhbmRzaGFr ZSBNZXNzYWdlIENlcnRpZmljYXRlVmVyaWZ5ICg3OCBieXRlcykNCg0KLSBIYW5kc2hha2UgTWVz c2FnZSBDZXJ0aWZpY2F0ZVJlcXVlc3QgKDIxIGJ5dGVzKQ0KDQotIEV4dGVuc2lvbiAtIENsaWVu dCBDZXJ0aWZpY2F0ZSBUeXBlIChSYXcgUHVibGljIEtleSkgKDYgYnl0ZXMpDQoNCi0gRXh0ZW5z aW9uIC0gU2VydmVyIENlcnRpZmljYXRlIFR5cGUgKFJhdyBQdWJsaWMgS2V5KSAoNiBieXRlcykN Cg0KKyBFeHRlbnNpb24gLSBQcmUgU2hhcmVkIEtleSAoNiBieXRlcykNCiAgMDAgMjkgMDAgMDIg MDAgMDANCg0KMzczIC0gNzggLSA3OCAtIDIxIC0gNiAtIDYgICsgNiA9IDE5MCBieXRlcw0KDQot LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkRU TFMgMS4zIEZsaWdodCAjMiBQU0sNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQpEaWZmZXJlbmNlcyBjb21wYXJlZCB0byBQU0sgKyBFQ0RI RQ0KDQotIEV4dGVuc2lvbiAtIEtleSBTaGFyZSAoNDAgYnl0ZXMpDQoNCjE5MCAtIDQwID0gMTUw IGJ5dGVzDQoNCg0KDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT0NCkRUTFMgMS4zIEZsaWdodCAjMyBSUEsgKyBFQ0RIRQ0KPT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQoNClJlY29yZCBIZWFk ZXIgKDYgYnl0ZXMpIC8vIERUTFNDaXBoZXJ0ZXh0LCBGdWxsIFpaIEVTIFNTIDQyIExMIExMDQoN CkhhbmRzaGFrZSBIZWFkZXIgLSBDZXJ0aWZpY2F0ZSAoMTAgYnl0ZXMpDQowYiBMTCBMTCBMTCBT UyBTUyBYWCBYWCBYWCBMTCBMTCBMTA0KDQpSZXF1ZXN0IENvbnRleHQgKDEgYnl0ZXMpDQowMA0K DQpDZXJ0aWZpY2F0ZSBMaXN0IExlbmd0aCAoMyBieXRlcykNCkxMIExMIExMDQoNCkNlcnRpZmlj YXRlIExlbmd0aCAoMyBieXRlcykNCkxMIExMIExMDQoNCkNlcnRpZmljYXRlICg1OSBieXRlcykg Ly8gUG9pbnQgY29tcHJlc3Npb24NCi4uLi4NCg0KQ2VydGlmaWNhdGUgRXh0ZW5zaW9ucyAoMiBi eXRlcykNCjAwIDAwDQoNCkhhbmRzaGFrZSBIZWFkZXIgLSBDZXJ0aWZpY2F0ZSBWZXJpZnkgKDEw IGJ5dGVzKQ0KMGYgTEwgTEwgTEwgU1MgU1MgMDAgMDAgMDAgTEwgTEwgTEwNCg0KU2lnbmF0dXJl ICAoNjggYnl0ZXMpDQowNCAwMyBMTCBMTCAvL2VjZHNhX3NlY3AyNTZyMV9zaGEyNTYNCjAwIDAx IDAyIDAzIDA0IDA1IDA2IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBlIDBmIDEwIDExIDEyIDEzIDE0 IDE1IDE2IDE3IDE4IDE5IDFhIDFiIDFjIDFkIDFlIDFmDQowMCAwMSAwMiAwMyAwNCAwNSAwNiAw NyAwOCAwOSAwYSAwYiAwYyAwZCAwZSAwZiAxMCAxMSAxMiAxMyAxNCAxNSAxNiAxNyAxOCAxOSAx YSAxYiAxYyAxZCAxZSAxZg0KDQpIYW5kc2hha2UgSGVhZGVyIC0gRmluaXNoZWQgKDEwIGJ5dGVz KQ0KMTQgTEwgTEwgTEwgU1MgU1MgMDAgMDAgMDAgTEwgTEwgTEwNCg0KVmVyaWZ5IERhdGEgKDMy IGJ5dGVzKSAvLyBTSEEtMjU2DQowMCAwMSAwMiAwMyAwNCAwNSAwNiAwNyAwOCAwOSAwYSAwYiAw YyAwZCAwZSAwZiAxMCAxMSAxMiAxMyAxNCAxNSAxNiAxNyAxOCAxOSAxYSAxYiAxYyAxZCAxZSAx Zg0KDQpSZWNvcmQgVHlwZSAoMSBieXRlKQ0KMTYNCg0KQXV0aCBUYWcgKDggYnl0ZXMpIC8vIEFF Uy1DQ01fOA0KMDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcNCg0KNiArIDc4ICsgNzggKyA0MiArIDEg KyA4ID0gMjEzIGJ5dGVzDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLQ0KRFRMUyAxLjMgRmxpZ2h0ICMzIFBTSyArIEVDREhFDQotLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQpEaWZmZXJl bmNlcyBjb21wYXJlZCB0byBSUEsgKyBFQ0RIRQ0KDQotIEhhbmRzaGFrZSBNZXNzYWdlIENlcnRp ZmljYXRlICg3OCBieXRlcykNCg0KLSBIYW5kc2hha2UgTWVzc2FnZSBDZXJ0aWZpY2F0ZSBWZXJp ZnkgKDc4IGJ5dGVzKQ0KDQoyMTMgLSA3OCAtIDc4ID0gNTcgYnl0ZXMNCg0KLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpEVExTIDEuMyBGbGln aHQgIzMgUFNLDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLQ0KDQpEaWZmZXJlbmNlcyBjb21wYXJlZCB0byBQU0sgKyBFQ0RIRQ0KDQpOb25lDQoN CjU3IGJ5dGVzDQoNCg0KDQoNCg0KDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PQ0KRFRMUyAxLjMgLSBDYWNoZWQgaW5mb3JtYXRpb24gW1JG QyA3OTI0XSA9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT0NCg0KLSBDYWNoZWQgaW5mb3JtYXRpb24gdG9nZXRoZXIgd2l0aCBzZXJ2ZXIgWC41MDkg Y2FuIGJlIHVzZWQgdG8gbW92ZSBieXRlcyBmcm9tIGZsaWdodCAjMiB0byBmbGlnaHQgIzENCiAg KGNhY2hlZCBSUEsgaW5jcmVhc2VzIHRoZSBudW1iZXIgb2YgYnl0ZXMgY29tcGFyZWQgdG8gY2Fj aGVkIFguNTA5KQ0KDQpEaWZmZXJlbmNlcyBjb21wYXJlZCB0byBSUEsgKyBFQ0RIRQ0KDQpGbGln aHQgIzENCg0KLSBFeHRlbnNpb24gLSBTZXJ2ZXIgQ2VydGlmaWNhdGUgVHlwZSAoUmF3IFB1Ymxp YyBLZXkpICg2IGJ5dGVzKQ0KDQorIEV4dGVuc2lvbiAtIENsaWVudCBDYXNoZWQgSW5mb3JtYXRp b24gKDM5IGJ5dGVzKQ0KICAwMCAxOSBMTCBMTCBMTCBMTA0KICAwMSAwMCAwMSAwMiAwMyAwNCAw NSAwNiAwNyAwOCAwOSAwYSAwYiAwYyAwZCAwZSAwZiAxMCAxMSAxMiAxMyAxNCAxNSAxNiAxNyAx OCAxOSAxYSAxYiAxYyAxZCAxZSAxZg0KDQoxNDkgKyAzMyA9IDE4MiBieXRlcw0KDQpGbGlnaHQg IzINCg0KLSBFeHRlbnNpb24gLSBTZXJ2ZXIgQ2VydGlmaWNhdGUgVHlwZSAoUmF3IFB1YmxpYyBL ZXkpICg2IGJ5dGVzKQ0KDQorIEV4dGVuc2lvbiAtIFNlcnZlciBDYXNoZWQgSW5mb3JtYXRpb24g KDcgYnl0ZXMpDQogIDAwIDE5IExMIExMIExMIExMIDAxDQoNCi0gU2VydmVyIENlcnRpZmljYXRl ICg1OSBieXRlcyAtPiAzMiBieXRlcykNCg0KMzczIC0gMjYgPSAzNDcgYnl0ZXMNCg0KPT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09DQpGbGlnaHQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICMx ICAgICAgICAgIzIgICAgICAgICMzICAgICAgIFRvdGFsDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0N CkRUTFMgMS4zIENhY2hlZCBYLjUwOS9SUEsgKyBFQ0RIRSAgICAxODIgICAgICAgIDM0NyAgICAg ICAyMTMgICAgICAgIDc0Mg0KRFRMUyAxLjMgUlBLICsgRUNESEUgICAgICAgICAgICAgICAgIDE0 OSAgICAgICAgMzczICAgICAgIDIxMyAgICAgICAgNzM1DQo9PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0N Cg0KDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PQ0KRFRMUyAxLjMgLSBSZXN1bXB0aW9uDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT0NCg0KVG8gZW5hYmxlIHJlc3VtcHRpb24sIGEgNHRo IGZsaWdodCAoTmV3IFNlc3Npb24gVGlja2V0KSBpcyBhZGRlZA0KDQpGbGlnaHQgIzQgLSBOZXcg U2Vzc2lvbiBUaWNrZXQNCg0KUmVjb3JkIEhlYWRlciAtIERUTFNDaXBoZXJ0ZXh0LCBGdWxsICg2 IGJ5dGVzKSBISCBFUyBTUyA0MyBMTCBMTA0KDQpIYW5kc2hha2UgSGVhZGVyIC0gTmV3IFNlc3Np b24gVGlja2V0ICgxMCBieXRlcykNCjA0IExMIExMIExMIFNTIFNTIDAwIDAwIDAwIExMIExMIExM DQoNClRpY2tldCBMaWZldGltZSAoNCBieXRlcykNCjAwIDAxIDAyIDAzDQoNClRpY2tldCBBZ2Ug QWRkICg0IGJ5dGVzKQ0KMDAgMDEgMDIgMDMNCg0KVGlja2V0IE5vbmNlICgyIGJ5dGVzKQ0KMDEg MDANCg0KVGlja2V0ICg2IGJ5dGVzKQ0KMDAgMDQgSUQgSUQgSUQgSUQNCg0KRXh0ZW5zaW9ucyAo MiBieXRlcykNCjAwIDAwDQoNCkF1dGggVGFnICg4IGJ5dGVzKSAvLyBBRVMtQ0NNXzgNCjAwIDAx IDAyIDAzIDA0IDA1IDA2IDA3DQoNCjYgKyAxMCArIDQgKyA0ICsgMiArIDYgKyAyICsgOCA9IDQy IGJ5dGVzDQoNClRoZSByZXN1bXB0aW9uIGhhbmRzaGFrZSBpcyBqdXN0IGEgUFNLIGhhbmRzaGFr ZSB3aXRoIDEzNiArIDE1MCArIDU3ID0gMzQzIGJ5dGVzDQoNCj09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PQ0KRmxpZ2h0ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAjMSAgICAgIzIg ICAgICMzICAgICAjNCAgICBUb3RhbA0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpEVExTIDEuMyBS UEsgKyBFQ0RIRSArIE5ld1Nlc3Npb25UaWNrZXQgICAgMTQ5ICAgIDM3MyAgICAyMTMgICAgIDQy ICAgICAgNzc3DQpEVExTIDEuMyBQU0sgKHJlc3VtcHRpb24pICAgICAgICAgICAgICAgICAgMTM2 ICAgIDE1MCAgICAgNTcgICAgICAgICAgICAgMzQzDQo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NCg0K DQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PQ0KRFRMUyAxLjMgLSBDb25uZWN0aW9uIElEDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT0NCg0KV2l0aG91dCBhIENvbm5lY3Rpb24gSUQgdGhl IERUTFMgMS4zIGZsaWdodCBzaXplcyBjaGFuZ2VzIGFzIGZvbGxvd3MNCg0KRFRMUyAxLjMgRmxp Z2h0ICMxOiAgIC02IGJ5dGVzDQpEVExTIDEuMyBGbGlnaHQgIzI6ICAgLTcgYnl0ZXMNCkRUTFMg MS4zIEZsaWdodCAjMzogICAtMSBieXRlDQoNCg0KDQo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NCkZs aWdodCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIzEgICAgICAgICAjMiAgICAgICAg IzMgICAgICAgVG90YWwNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KRFRMUyAxLjMgUlBLICsgRUNE SEUgKG5vIGNpZCkgICAgICAgIDE0MyAgICAgICAgMzY0ICAgICAgIDIxMiAgICAgICAgNzIxDQpE VExTIDEuMyBQU0sgKyBFQ0RIRSAobm8gY2lkKSAgICAgICAgMTgwICAgICAgICAxODMgICAgICAg IDU2ICAgICAgICA0MTkNCkRUTFMgMS4zIFBTSyAobm8gY2lkKSAgICAgICAgICAgICAgICAxMzAg ICAgICAgIDE0MyAgICAgICAgNTYgICAgICAgIDMyOQ0KPT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQoN Cg0KDQoNCg0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09DQpEVExTIFJhdyBQdWJsaWMgS2V5cw0KPT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09DQoNClN1YmplY3RQdWJsaWNLZXlJbmZvIHdpdGhv dXQgcG9pbnQgY29tcHJlc3Npb24NCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tDQoNCjB4MzAgLy8gU2VxdWVuY2UNCjB4NTkgLy8gU2l6ZSA4OQ0K DQoweDMwIC8vIFNlcXVlbmNlDQoweDEzIC8vIFNpemUgMTkNCjB4MDYgMHgwNyAweDJBIDB4ODYg MHg0OCAweENFIDB4M0QgMHgwMiAweDAxLiAgICAgLy8gT0lEIDEuMi44NDAuMTAwNDUuMi4xIChl Y1B1YmxpY0tleSkNCjB4MDYgMHgwOCAweDJBIDB4ODYgMHg0OCAweENFIDB4M0QgMHgwMyAweDAx IDB4MDcgLy8gT0lEIDEuMi44NDAuMTAwNDUuMy4xLjcgKHNlY3AyNTZyMSkNCg0KMHgwMyAvLyBC aXQgc3RyaW5nDQoweDQyIC8vIFNpemUgNjYNCjB4MDAgLy8gVW51c2VkIGJpdHMgMA0KMHgwNCAv LyBVbmNvbXByZXNzZWQNCi4uLi4uLiA2NCBieXRlcyBYIGFuZCBZDQoNClRvdGFsIG9mIDkxIGJ5 dGVzDQoNClN1YmplY3RQdWJsaWNLZXlJbmZvIHdpdGggcG9pbnQgY29tcHJlc3Npb24NCi0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCjB4MzAg Ly8gU2VxdWVuY2UNCjB4NTkgLy8gU2l6ZSA4OQ0KDQoweDMwIC8vIFNlcXVlbmNlDQoweDEzIC8v IFNpemUgMTkNCjB4MDYgMHgwNyAweDJBIDB4ODYgMHg0OCAweENFIDB4M0QgMHgwMiAweDAxLiAg ICAgLy8gT0lEIDEuMi44NDAuMTAwNDUuMi4xIChlY1B1YmxpY0tleSkNCjB4MDYgMHgwOCAweDJB IDB4ODYgMHg0OCAweENFIDB4M0QgMHgwMyAweDAxIDB4MDcgLy8gT0lEIDEuMi44NDAuMTAwNDUu My4xLjcgKHNlY3AyNTZyMSkNCg0KMHgwMyAvLyBCaXQgc3RyaW5nDQoweDQyIC8vIFNpemUgNjYN CjB4MDAgLy8gVW51c2VkIGJpdHMgMA0KMHgwMyAvLyBDb21wcmVzc2VkDQouLi4uLi4gMzIgYnl0 ZXMgWA0KDQpUb3RhbCBvZiA1OSBieXRlcw0KDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KSGVscGZ1bCBTb3VyY2VzIG9mIEluZm9ybWF0 aW9uDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT0NCg0KSW4gYWRkaXRpb24gdG8gcmVsZXZhbnQgUkZDcyBhbmQgdGhlIGVzdGltYXRlcyBkb25l IGJ5IEppbSwgdGhlIGZvbGxvd2luZyByZWZlcmVuY2VzIHdlcmUgaGVscGZ1bDoNCg0KRXZlcnkg Qnl0ZSBFeHBsYWluZWQ6IFRoZSBJbGx1c3RyYXRlZCBUTFMgMS4zIENvbm5lY3Rpb24gaHR0cHM6 Ly90bHMxMy51bGZoZWltLm5ldC8NCg0KRGlnaXRhbCBDZXJ0aWZpY2F0ZXMgZm9yIHRoZSBJbnRl cm5ldCBvZiBUaGluZ3MgaHR0cHM6Ly9rdGguZGl2YS1wb3J0YWwub3JnL3NtYXNoL2dldC9kaXZh MjoxMTUzOTU4L0ZVTExURVhUMDEucGRmDQoNCi9Kb2huDQoNCg0KDQoNCu+7vy0tLS0tT3JpZ2lu YWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT4NCkRh dGU6IFNhdHVyZGF5LCAzIE5vdmVtYmVyIDIwMTggYXQgMTU6NTkNClRvOiBKb2huIE1hdHRzc29u IDxqb2huLm1hdHRzc29uQGVyaWNzc29uLmNvbT4NCkNjOiAic2FsdmFkb3IucC5mQHVtLmVzIiA8 c2FsdmFkb3IucC5mQHVtLmVzPiwgImFjZUBpZXRmLm9yZyIgPGFjZUBpZXRmLm9yZz4NClN1Ympl Y3Q6IFJlOiBbQWNlXSBFREhPQyBzdGFuZGFyZGl6YXRpb24NCg0KT24gRnJpLCBOb3YgMDIsIDIw MTggYXQgMDI6NTU6NTRQTSArMDAwMCwgSm9obiBNYXR0c3NvbiB3cm90ZToNCj4gSGkgQmVuamFt aW4sIFNhbHZhZG9yDQo+DQo+IFdoaWxlIERUTFMgMS4zIGhhdmUgZG9uZSBhIHZlcnkgZ29vZCBq b2Igb2YgbG93ZXJpbmcgdGhlIG92ZXJoZWFkIG9mIHRoZSByZWNvcmQgbGF5ZXIgd2hlbiBhcHBs aWNhdGlvbiBkYXRhIGlzIHNlbnQgKHNlZSBlLmcuIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9kcmFmdC1pZXRmLWx3aWctc2VjdXJpdHktcHJvdG9jb2wtY29tcGFyaXNvbi0wMSBmb3IgYSBj b21wYXJpc29uIGJldHdlZW4gZGlmZmVyZW50IHByb3RvY29scyksIEkgZG8gbm90IHRoaW5rIHRo ZSBoYW5kc2hha2UgcHJvdG9jb2wgaXMgbXVjaCBsZWFuZXIgKGlzIGl0IGxlYW5lciBhdCBhbGw/ KS4NCg0KKFRoZXJlIGFyZSBzb21lIGhhbmRzaGFrZSBtZXNzYWdlcyB0aGF0IGFyZSByZW1vdmVk IGVudGlyZWx5LikNCg0KPiBXZSB0cmllZCB0byBtYWtlIGFuIGZhaXIgY29tcGFyaXNvbiBiZXR3 ZWVuIEVESE9DIGFuZCBUTFMgMS4zIGluIHRoZSBwcmVzZW50YXRpb24gYXQgSUVURiAxMDEgKHNl ZSBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL21lZXRpbmcvMTAxL21hdGVyaWFscy9zbGlk ZXMtMTAxLWFjZS1rZXktZXhjaGFuZ2Utdy1vc2NvcmUtMDApLiBTaW5jZSB0aGVuLCB3ZSBoYXZl IHNpZ25pZmljYW50bHkgb3B0aW1pemVkIHRoZSBlbmNvZGluZyBpbiBFREhPQyBhbmQgdGhlIHVw Y29taW5nIHZlcnNpb24gKC0xMSkgaXMgZXhwZWN0ZWQgdG8gaGF2ZSB0aGUgZm9sbG93aW5nIG1l c3NhZ2Ugc2l6ZXMuDQo+DQo+ICAgIEF1dGguICAgICAgICAgICAgICAgUFNLICAgICAgIFJQSyAg ICAgICB4NXQgICAgIHg1Y2hhaW4NCj4gICAgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gICAgRURIT0MgbWVzc2Fn ZV8xICAgICAgNDMgICAgICAgIDM4ICAgICAgICAzOCAgICAgICAgMzgNCj4gICAgRURIT0MgbWVz c2FnZV8yICAgICAgNDcgICAgICAgMTIxICAgICAgIDEyNyAgICAgICAxMTcgKyBDZXJ0aWZpY2F0 ZSBjaGFpbg0KPiAgICBFREhPQyBtZXNzYWdlXzMgICAgICAxMiAgICAgICAgODYgICAgICAgIDky ICAgICAgICA4MiArIENlcnRpZmljYXRlIGNoYWluDQo+ICAgIC0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+ICAgIFRv dGFsICAgICAgICAgICAgICAgMTAyICAgICAgIDI0NSAgICAgICAyNTcgICAgICAgMjM3ICsgQ2Vy dGlmaWNhdGUgY2hhaW5zDQo+DQo+IEFzIFNhbHZhZG9yIHdyaXRlcywgdGhlIGhhbmRzaGFrZXMg aW4gVExTIDEuMyBhbmQgRFRMUyAxLjMgYXJlIGJhc2ljYWxseSB0aGUgc2FtZSwgc28gdGhlIG51 bWJlcnMgcHJlc2VudGVkIGF0IElFVEYgMTAxIHNob3VsZCBiZSBhIGdvb2QgZXN0aW1hdGUgYWxz byBmb3IgRFRMUyAxLjMuDQo+DQo+ICAgIEF1dGguICAgICAgICAgICAgICAgIFBTSyAgICAgICBS UEsNCj4gICAgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gICAgKEQpVExTIG1lc3NhZ2VfMSAgICAgMTQyICAgICAg IDEwNw0KPiAgICAoRClUTFMgbWVzc2FnZV8yICAgICAxMzUgICAgICAgMjY0DQo+ICAgIChEKVRM UyBtZXNzYWdlXzMgICAgICA1MSAgICAgICAxNjcNCj4gICAgLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gICAgVG90 YWwgICAgICAgICAgICAgICAgMzI4ICAgICAgIDUzOA0KDQpUaGFua3MgZm9yIHRoZSBudW1iZXJz IQ0KDQo+IFRoZSBudW1iZXJzIGFib3ZlIGluY2x1ZGUgRUNESEUuIEZvciBoYW5kc2hha2UgbWVz c2FnZXMsIG15IHVuZGVyc3RhbmRpbmcgaXMgdGhhdCB0aGUgRFRMUyAxLjMgYW5kIFRMUyAxLjMg cmVjb3JkIGxheWVyIGhhdmUgZXhhY3RseSB0aGUgc2FtZSBzaXplLg0KDQpUaGUgRFRMUyAxLjMg b25lcyB3aWxsIGJlIHdvcnNlLCBkdWUgdG8gdGhlIGVwb2NoIGFuZCBzZXF1ZW5jZSBudW1iZXIg ZmllbGRzLg0KDQotQmVuDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fDQpBY2UgbWFpbGluZyBsaXN0DQpBY2VAaWV0Zi5vcmcNCmh0dHBzOi8vd3d3Lmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vYWNlDQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVu dHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5k IG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNp cGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRp c2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBw dXJwb3NlLCBvciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBU aGFuayB5b3UuDQo= From nobody Wed Nov 21 07:25:04 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A3F71127B4C; Wed, 21 Nov 2018 07:25:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.001 X-Spam-Level: X-Spam-Status: No, score=-0.001 tagged_above=-999 required=5 tests=[RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WSerR98-1fGO; Wed, 21 Nov 2018 07:24:57 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F231812426E; Wed, 21 Nov 2018 07:24:56 -0800 (PST) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 21 Nov 2018 07:19:56 -0800 From: Jim Schaad To: 'John Mattsson' , , CC: 'Benjamin Kaduk' , References: <20181103145857.GG54966@kduck.kaduk.org> <7F78CC92-5C48-4BFC-8087-E25D4D95A74F@ericsson.com> In-Reply-To: <7F78CC92-5C48-4BFC-8087-E25D4D95A74F@ericsson.com> Date: Wed, 21 Nov 2018 07:24:46 -0800 Message-ID: <000001d481ae$57cd4530$0767cf90$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQIp9wF581pJeZw9hZqduP10JmMEPAI3UqO1AhtGV/ykjNlxIA== Content-Language: en-us X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [Ace] EDHOC standardization X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Nov 2018 15:25:03 -0000 John, In the analysis that I did I very deliberately used TLS not DTLS. The = main reason for using DTLS is because one is operating in the UDP = environment and one cannot have reliable in order delivery. Since EDHOC = is being built on top of CoAP, one can use CoAP to create reliable in = order delivery. Thus the extra bytes that DTLS has to deal with this = are not needed. Jim > -----Original Message----- > From: Ace On Behalf Of John Mattsson > Sent: Wednesday, November 21, 2018 7:03 AM > To: ace@ietf.org; lwip@ietf.org > Cc: Benjamin Kaduk ; salvador.p.f@um.es > Subject: Re: [Ace] EDHOC standardization >=20 > Hi all, >=20 > Inspired by the discussion in this thread, I did more detailed = calculations of the > number of bytes when DTLS 1.3 is used for typical IoT use cases (PSK, = RPK, > Connection ID). The plan is to add this information to = draft-ietf-lwig-security- > protocol-comparison as this has been requested by several people. I = think some > bytes were missing in the earlier estimates for TLS 1.3, and as Ben = commented, > DTLS 1.3 adds some bytes compared to TLS 1.3. >=20 > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > Flight #1 #2 #3 = Total > = -------------------------------------------------------------------------= ----- > DTLS 1.3 RPK + ECDHE 149 373 213 = 735 > DTLS 1.3 PSK + ECDHE 186 190 57 = 433 > DTLS 1.3 PSK 136 150 57 = 343 > = -------------------------------------------------------------------------= ----- > EDHOC RPK + ECDHE 38 121 86 = 245 > EDHOC PSK + ECDHE 43 47 12 = 102 > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > Number of bytes >=20 > Assumptions: > - Minimum number of algorithms and cipher suites offered > - Curve25519, ECDSA with P-256, AES-CCM_8, SHA-256 > - Length of key identifiers: 4 bytes > - Connection identifiers: 1 byte > - The DTLS RPKs use point compression (saves 32 bytes) > - No DTLS handshake message fragmentation > - Only mandatory DTLS extentions, except for connection ID > - Version 30 https://tools.ietf.org/html/draft-ietf-tls-dtls13-30 >=20 > (EDHOC numbers are for the soon to be published -11 version with = cipher > suites) >=20 > I hope this information is useful for people. Please comment if I = missed > something or if you have any suggestion of things to add or how to = present > things. I do not know currently how these numbers compare to DTLS 1.2. >=20 > Below is detailed information about where the byte in different = flights as well > as the RPKs (SubjectPublicKeyInfo). Most of the bytes should have the = correct > value, but most of the length fields are just written as LL LL LL. = Below is also > information about how resumption, cached information [RFC 7924], and = not > using Connection ID affects the number of bytes. >=20 >=20 > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D > DTLS 1.3 Flight #1 RPK + ECDHE > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D >=20 > Record Header - DTLSPlaintext (13 bytes) > 16 fe fd EE EE SS SS SS SS SS SS LL LL >=20 > Handshake Header - Client Hello (10 bytes) > 01 LL LL LL SS SS 00 00 00 LL LL LL >=20 > Legacy Version (2 bytes) > fe fd >=20 > Client Random (32 bytes) > 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 > 15 16 17 18 19 1a 1b 1c 1d 1e 1f >=20 > Legacy Session ID (1 bytes) > 00 >=20 > Cipher Suites (TLS_AES_128_CCM_8_SHA256) (4 bytes) > 00 02 13 05 >=20 > Compression Methods (null) (2 bytes) > 01 00 >=20 > Extensions Length (2 bytes) > LL LL >=20 > Extension - Supported Groups (x25519) (8 bytes) > 00 0a 00 04 00 02 00 1d >=20 > Extension - Signature Algorithms > (ecdsa_secp256r1_sha256) (8 bytes) > 00 0d 00 04 00 02 08 07 >=20 > Extension - Key Share (42 bytes) > 00 33 00 26 00 24 00 1d 00 20 > 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 > 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f >=20 > Extension - Supported Versions (1.3) (7 bytes) > 00 2b 00 03 02 03 04 >=20 > Extension - Client Certificate Type (Raw Public Key) (6 > bytes) > 00 13 00 01 01 02 >=20 > Extension - Server Certificate Type (Raw Public Key) (6 > bytes) > 00 14 00 01 01 02 >=20 > Extension - Connection Identifier (43) (6 bytes) > XX XX 00 02 01 42 >=20 > 13 + 10 + 2 + 32 + 1 + 4 + 2 + 2 + 8 + 8 + 42 + 7 + 6 + 6 + 6 =3D 149 = bytes >=20 > ------------------------------------------------------ > DTLS 1.3 Flight #1 PSK + ECDHE > ------------------------------------------------------ >=20 > Differences compared to RPK + ECDHE >=20 > + Extension - PSK Key Exchange Modes (6 bytes) > 00 2d 00 02 01 01 >=20 > + Extension - Pre Shared Key (51 bytes) > 00 29 00 2F > 00 0a 00 04 ID ID ID ID 00 00 00 00 > 00 21 20 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 = 14 15 > 16 17 18 19 1a 1b 1c 1d 1e 1f >=20 > - Extension - Signature Algorithms (ecdsa_secp256r1_sha256) (8 bytes) >=20 > - Extension - Client Certificate Type (Raw Public Key) (6 bytes) >=20 > - Extension - Server Certificate Type (Raw Public Key) (6 bytes) >=20 > 149 + 6 + 51 - 8 - 6 - 6 =3D 186 bytes >=20 > ------------------------------------------------------ > DTLS 1.3 Flight #1 PSK > ------------------------------------------------------ >=20 > Differences compared to PSK + ECDHE >=20 > - Extension - Supported Groups (x25519) (8 bytes) >=20 > - Extension - Key Share (42 bytes) >=20 > 186 - 8 - 42 =3D 136 bytes >=20 >=20 >=20 > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D > DTLS 1.3 Flight #2 RPK + ECDHE > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D >=20 > Record Header - DTLSPlaintext (13 bytes) > 16 fe fd EE EE SS SS SS SS SS SS LL LL >=20 > Handshake Header - Server Hello (10 bytes) > 02 LL LL LL SS SS 00 00 00 LL LL LL >=20 > Legacy Version (2 bytes) > fe fd >=20 > Server Random (32 bytes) > 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 > 15 16 17 18 19 1a 1b 1c 1d 1e 1f >=20 > Legacy Session ID (1 bytes) > 00 >=20 > Cipher Suite (TLS_AES_128_CCM_8_SHA256) (2 bytes) > 13 05 >=20 > Compression Method (null) (1 bytes) > 00 >=20 > Extensions Length (2 bytes) > LL LL >=20 > Extension - Key Share (40 bytes) > 00 33 00 24 00 1d 00 20 > 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 > 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f >=20 > Extension - Supported Versions (1.3) (6 bytes) > 00 2b 00 02 03 04 >=20 > Extension - Connection Identifier (43) (6 bytes) > XX XX 00 02 01 43 >=20 > Record Header - DTLSCiphertext, Full (6 bytes) HH ES SS 43 LL LL >=20 > Handshake Header - Encrypted Extensions (10 bytes) > 08 LL LL LL SS SS 00 00 00 LL LL LL >=20 > Extensions Length (2 bytes) > LL LL >=20 > Extension - Client Certificate Type (Raw Public Key) (6 > bytes) > 00 13 00 01 01 02 >=20 > Extension - Server Certificate Type (Raw Public Key) (6 > bytes) > 00 14 00 01 01 02 >=20 > Handshake Header - Certificate Request (10 bytes) > 0d LL LL LL SS SS 00 00 00 LL LL LL >=20 > Request Context (1 bytes) > 00 >=20 > Extensions Length (2 bytes) > LL LL >=20 > Extension - Signature Algorithms > (ecdsa_secp256r1_sha256) (8 bytes) > 00 0d 00 04 00 02 08 07 >=20 > Handshake Header - Certificate (10 bytes) > 0b LL LL LL SS SS 00 00 00 LL LL LL >=20 > Request Context (1 bytes) > 00 >=20 > Certificate List Length (3 bytes) > LL LL LL >=20 > Certificate Length (3 bytes) > LL LL LL >=20 > Certificate (59 bytes) // Point compression > .... >=20 > Certificate Extensions (2 bytes) > 00 00 >=20 > Handshake Header - Certificate Verify (10 bytes) > 0f LL LL LL SS SS 00 00 00 LL LL LL >=20 > Signature (68 bytes) > ZZ ZZ 00 40 .... >=20 > Handshake Header - Finished (10 bytes) > 14 LL LL LL SS SS 00 00 00 LL LL LL >=20 > Verify Data (32 bytes) > 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 > 15 16 17 18 19 1a 1b 1c 1d 1e 1f >=20 > Record Type (1 byte) > 16 >=20 > Auth Tag (8 bytes) > e0 8b 0e 45 5a 35 0a e5 >=20 > 13 + 102 + 6 + 24 + 21 + 78 + 78 + 42 + 1 + 8 =3D 373 bytes >=20 > ------------------------------------------------------ > DTLS 1.3 Flight #2 PSK + ECDHE > ------------------------------------------------------ >=20 > Differences compared to RPK + ECDHE >=20 > - Handshake Message Certificate (78 bytes) >=20 > - Handshake Message CertificateVerify (78 bytes) >=20 > - Handshake Message CertificateRequest (21 bytes) >=20 > - Extension - Client Certificate Type (Raw Public Key) (6 bytes) >=20 > - Extension - Server Certificate Type (Raw Public Key) (6 bytes) >=20 > + Extension - Pre Shared Key (6 bytes) > 00 29 00 02 00 00 >=20 > 373 - 78 - 78 - 21 - 6 - 6 + 6 =3D 190 bytes >=20 > ------------------------------------------------------ > DTLS 1.3 Flight #2 PSK > ------------------------------------------------------ >=20 > Differences compared to PSK + ECDHE >=20 > - Extension - Key Share (40 bytes) >=20 > 190 - 40 =3D 150 bytes >=20 >=20 >=20 > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D > DTLS 1.3 Flight #3 RPK + ECDHE > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D >=20 > Record Header (6 bytes) // DTLSCiphertext, Full ZZ ES SS 42 LL LL >=20 > Handshake Header - Certificate (10 bytes) > 0b LL LL LL SS SS XX XX XX LL LL LL >=20 > Request Context (1 bytes) > 00 >=20 > Certificate List Length (3 bytes) > LL LL LL >=20 > Certificate Length (3 bytes) > LL LL LL >=20 > Certificate (59 bytes) // Point compression > .... >=20 > Certificate Extensions (2 bytes) > 00 00 >=20 > Handshake Header - Certificate Verify (10 bytes) > 0f LL LL LL SS SS 00 00 00 LL LL LL >=20 > Signature (68 bytes) > 04 03 LL LL //ecdsa_secp256r1_sha256 > 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 > 15 16 17 18 19 1a 1b 1c 1d 1e 1f > 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 > 15 16 17 18 19 1a 1b 1c 1d 1e 1f >=20 > Handshake Header - Finished (10 bytes) > 14 LL LL LL SS SS 00 00 00 LL LL LL >=20 > Verify Data (32 bytes) // SHA-256 > 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 > 15 16 17 18 19 1a 1b 1c 1d 1e 1f >=20 > Record Type (1 byte) > 16 >=20 > Auth Tag (8 bytes) // AES-CCM_8 > 00 01 02 03 04 05 06 07 >=20 > 6 + 78 + 78 + 42 + 1 + 8 =3D 213 bytes >=20 > ------------------------------------------------------ > DTLS 1.3 Flight #3 PSK + ECDHE > ----------------------------------------------------- >=20 > Differences compared to RPK + ECDHE >=20 > - Handshake Message Certificate (78 bytes) >=20 > - Handshake Message Certificate Verify (78 bytes) >=20 > 213 - 78 - 78 =3D 57 bytes >=20 > ------------------------------------------------------ > DTLS 1.3 Flight #3 PSK > ----------------------------------------------------- >=20 > Differences compared to PSK + ECDHE >=20 > None >=20 > 57 bytes >=20 >=20 >=20 >=20 >=20 >=20 >=20 > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D > DTLS 1.3 - Cached information [RFC 7924] > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D >=20 > - Cached information together with server X.509 can be used to move = bytes > from flight #2 to flight #1 > (cached RPK increases the number of bytes compared to cached X.509) >=20 > Differences compared to RPK + ECDHE >=20 > Flight #1 >=20 > - Extension - Server Certificate Type (Raw Public Key) (6 bytes) >=20 > + Extension - Client Cashed Information (39 bytes) > 00 19 LL LL LL LL > 01 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 = 16 17 > 18 19 1a 1b 1c 1d 1e 1f >=20 > 149 + 33 =3D 182 bytes >=20 > Flight #2 >=20 > - Extension - Server Certificate Type (Raw Public Key) (6 bytes) >=20 > + Extension - Server Cashed Information (7 bytes) > 00 19 LL LL LL LL 01 >=20 > - Server Certificate (59 bytes -> 32 bytes) >=20 > 373 - 26 =3D 347 bytes >=20 > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > Flight #1 #2 #3 = Total > = -------------------------------------------------------------------------= ----- > DTLS 1.3 Cached X.509/RPK + ECDHE 182 347 213 = 742 > DTLS 1.3 RPK + ECDHE 149 373 213 = 735 > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >=20 >=20 >=20 > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D > DTLS 1.3 - Resumption > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D >=20 > To enable resumption, a 4th flight (New Session Ticket) is added >=20 > Flight #4 - New Session Ticket >=20 > Record Header - DTLSCiphertext, Full (6 bytes) HH ES SS 43 LL LL >=20 > Handshake Header - New Session Ticket (10 bytes) > 04 LL LL LL SS SS 00 00 00 LL LL LL >=20 > Ticket Lifetime (4 bytes) > 00 01 02 03 >=20 > Ticket Age Add (4 bytes) > 00 01 02 03 >=20 > Ticket Nonce (2 bytes) > 01 00 >=20 > Ticket (6 bytes) > 00 04 ID ID ID ID >=20 > Extensions (2 bytes) > 00 00 >=20 > Auth Tag (8 bytes) // AES-CCM_8 > 00 01 02 03 04 05 06 07 >=20 > 6 + 10 + 4 + 4 + 2 + 6 + 2 + 8 =3D 42 bytes >=20 > The resumption handshake is just a PSK handshake with 136 + 150 + 57 = =3D 343 > bytes >=20 > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > Flight #1 #2 #3 #4 = Total > = -------------------------------------------------------------------------= ----- > DTLS 1.3 RPK + ECDHE + NewSessionTicket 149 373 213 42 = 777 > DTLS 1.3 PSK (resumption) 136 150 57 = 343 > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >=20 >=20 >=20 > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D > DTLS 1.3 - Connection ID > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D >=20 > Without a Connection ID the DTLS 1.3 flight sizes changes as follows >=20 > DTLS 1.3 Flight #1: -6 bytes > DTLS 1.3 Flight #2: -7 bytes > DTLS 1.3 Flight #3: -1 byte >=20 >=20 >=20 > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > Flight #1 #2 #3 = Total > = -------------------------------------------------------------------------= ----- > DTLS 1.3 RPK + ECDHE (no cid) 143 364 212 = 721 > DTLS 1.3 PSK + ECDHE (no cid) 180 183 56 = 419 > DTLS 1.3 PSK (no cid) 130 143 56 = 329 > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >=20 >=20 >=20 >=20 >=20 > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D > DTLS Raw Public Keys > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D >=20 > SubjectPublicKeyInfo without point compression > ----------------------------------------------------- >=20 > 0x30 // Sequence > 0x59 // Size 89 >=20 > 0x30 // Sequence > 0x13 // Size 19 > 0x06 0x07 0x2A 0x86 0x48 0xCE 0x3D 0x02 0x01. // OID = 1.2.840.10045.2.1 > (ecPublicKey) > 0x06 0x08 0x2A 0x86 0x48 0xCE 0x3D 0x03 0x01 0x07 // OID > 1.2.840.10045.3.1.7 (secp256r1) >=20 > 0x03 // Bit string > 0x42 // Size 66 > 0x00 // Unused bits 0 > 0x04 // Uncompressed > ...... 64 bytes X and Y >=20 > Total of 91 bytes >=20 > SubjectPublicKeyInfo with point compression > ----------------------------------------------------- >=20 > 0x30 // Sequence > 0x59 // Size 89 >=20 > 0x30 // Sequence > 0x13 // Size 19 > 0x06 0x07 0x2A 0x86 0x48 0xCE 0x3D 0x02 0x01. // OID = 1.2.840.10045.2.1 > (ecPublicKey) > 0x06 0x08 0x2A 0x86 0x48 0xCE 0x3D 0x03 0x01 0x07 // OID > 1.2.840.10045.3.1.7 (secp256r1) >=20 > 0x03 // Bit string > 0x42 // Size 66 > 0x00 // Unused bits 0 > 0x03 // Compressed > ...... 32 bytes X >=20 > Total of 59 bytes >=20 >=20 > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D > Helpful Sources of Information > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D >=20 > In addition to relevant RFCs and the estimates done by Jim, the = following > references were helpful: >=20 > Every Byte Explained: The Illustrated TLS 1.3 Connection > https://tls13.ulfheim.net/ >=20 > Digital Certificates for the Internet of Things https://kth.diva- > portal.org/smash/get/diva2:1153958/FULLTEXT01.pdf >=20 > /John >=20 >=20 >=20 >=20 > =EF=BB=BF-----Original Message----- > From: Benjamin Kaduk > Date: Saturday, 3 November 2018 at 15:59 > To: John Mattsson > Cc: "salvador.p.f@um.es" , "ace@ietf.org" > > Subject: Re: [Ace] EDHOC standardization >=20 > On Fri, Nov 02, 2018 at 02:55:54PM +0000, John Mattsson wrote: > > Hi Benjamin, Salvador > > > > While DTLS 1.3 have done a very good job of lowering the overhead of = the > record layer when application data is sent (see e.g. > = https://tools.ietf.org/html/draft-ietf-lwig-security-protocol-comparison-= 01 for a > comparison between different protocols), I do not think the handshake = protocol > is much leaner (is it leaner at all?). >=20 > (There are some handshake messages that are removed entirely.) >=20 > > We tried to make an fair comparison between EDHOC and TLS 1.3 in the > presentation at IETF 101 (see > https://datatracker.ietf.org/meeting/101/materials/slides-101-ace-key- > exchange-w-oscore-00). Since then, we have significantly optimized the > encoding in EDHOC and the upcoming version (-11) is expected to have = the > following message sizes. > > > > Auth. PSK RPK x5t x5chain > > = -------------------------------------------------------------------- > > EDHOC message_1 43 38 38 38 > > EDHOC message_2 47 121 127 117 + = Certificate chain > > EDHOC message_3 12 86 92 82 + = Certificate chain > > = -------------------------------------------------------------------- > > Total 102 245 257 237 + = Certificate chains > > > > As Salvador writes, the handshakes in TLS 1.3 and DTLS 1.3 are = basically the > same, so the numbers presented at IETF 101 should be a good estimate = also for > DTLS 1.3. > > > > Auth. PSK RPK > > = -------------------------------------------------------------------- > > (D)TLS message_1 142 107 > > (D)TLS message_2 135 264 > > (D)TLS message_3 51 167 > > = -------------------------------------------------------------------- > > Total 328 538 >=20 > Thanks for the numbers! >=20 > > The numbers above include ECDHE. For handshake messages, my > understanding is that the DTLS 1.3 and TLS 1.3 record layer have = exactly the > same size. >=20 > The DTLS 1.3 ones will be worse, due to the epoch and sequence number = fields. >=20 > -Ben >=20 > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace From nobody Wed Nov 21 07:28:44 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF28C12426E for ; Wed, 21 Nov 2018 07:28:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.861 X-Spam-Level: X-Spam-Status: No, score=-3.861 tagged_above=-999 required=5 tests=[DKIMWL_WL_HIGH=-1.46, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com header.b=E+7a40RE; dkim=pass (1024-bit key) header.d=ericsson.com header.b=IJu5wRX3 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8TkYa0sGd6DL for ; Wed, 21 Nov 2018 07:28:32 -0800 (PST) Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 34E9C1277CC for ; Wed, 21 Nov 2018 07:28:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1542814109; x=1545406109; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:CC:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=RW4Fdckdy30OxaRfVdSKqL7EJqQRphDBvXnqLg6OwVo=; b=E+7a40RE7e9AMAQtKxdD/KOD1eGDpKQbC/FuQJXTcNrBspDkEFeAhi7xPcYqERG3 7OCrXCSkQZiD6GjjHJnuVzFCy53EzWkmfLVuYv8l7qd0LiDz8zuRiEgZmr2lmFOz UI2YxJFxz927M4rUpYb7Dgmnnkebq3bWM1j055/xC7Y=; X-AuditID: c1b4fb30-f2dff700000043c4-64-5bf5799dd3c8 Received: from ESESBMB505.ericsson.se (Unknown_Domain [153.88.183.118]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id 00.4A.17348.D9975FB5; Wed, 21 Nov 2018 16:28:29 +0100 (CET) Received: from ESESSMR504.ericsson.se (153.88.183.126) by ESESBMB505.ericsson.se (153.88.183.118) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Wed, 21 Nov 2018 16:28:28 +0100 Received: from ESESBMB503.ericsson.se (153.88.183.170) by ESESSMR504.ericsson.se (153.88.183.126) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Wed, 21 Nov 2018 16:28:27 +0100 Received: from EUR03-DB5-obe.outbound.protection.outlook.com (153.88.183.157) by ESESBMB503.ericsson.se (153.88.183.170) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3 via Frontend Transport; Wed, 21 Nov 2018 16:28:27 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=RW4Fdckdy30OxaRfVdSKqL7EJqQRphDBvXnqLg6OwVo=; b=IJu5wRX3ItYPUIy3F2cUPjFuilfX/bVQR6sqDkwQYVSxUA7ISA5U8mNJ5QN+W/IBh/3xlhtCr1xAcZG0ZjBf2naDFYkThHcMc7jfu9fYSugeYVt5Y3h8Yc9/v1vA+6SMIN2PG6of1Ckl9ogumgkM/ez4iVjoW/kdsGGaxUcch7s= Received: from HE1PR07MB4169.eurprd07.prod.outlook.com (20.176.166.22) by HE1PR07MB0940.eurprd07.prod.outlook.com (10.162.27.146) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1361.14; Wed, 21 Nov 2018 15:28:25 +0000 Received: from HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::18ff:fb34:36ea:bd64]) by HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::18ff:fb34:36ea:bd64%4]) with mapi id 15.20.1361.013; Wed, 21 Nov 2018 15:28:25 +0000 From: John Mattsson To: Hannes Tschofenig , "ace@ietf.org" , "lwip@ietf.org" CC: Benjamin Kaduk , "salvador.p.f@um.es" Thread-Topic: [Ace] EDHOC standardization Thread-Index: AQHUcrwmx6N1o4AsH0uz6RMW3Bvpj6U+JgWAgBxb0gD///PTYIAAE0+A Date: Wed, 21 Nov 2018 15:28:25 +0000 Message-ID: <70EF4B8F-BE24-474B-9877-0E2A11826561@ericsson.com> References: <20181103145857.GG54966@kduck.kaduk.org> <7F78CC92-5C48-4BFC-8087-E25D4D95A74F@ericsson.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.11.0.180909 authentication-results: spf=none (sender IP is ) smtp.mailfrom=john.mattsson@ericsson.com; x-originating-ip: [192.176.1.83] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; HE1PR07MB0940; 6:D7r5YGBeUt483tz0s3auvTeSLtgEUJVGMrHkmWbsVtgd/QQ7Z2EKe6PkErSVsqBAjIUFMkOtHUBC4E64QbzMRc5sY77FfyW8WKt8aRECmA/UPOc5sAsv5S+lz9fs0CSZR91uPHxWcE+/d9gbAQjIM2nrTCtTmVNQ6wWQss753Q8MkvQCiDWTFZH4P1Leq9OAnYYJFP2W4Zu/NSlTzpzVSYtWfMscVeXJzIgHVmexKyCRrJsdUrqGDSY/wHX0U2fO4PLBnARp3VnO5joE9m1p8EnJOuqYh96KzCJj/7z23AJj8URKN9ULtHwFypXWNigdF7cCv54p4ywNEjaEdGHFAmX+ehMU0b1lX2NLVCPzSYo/eo4FkcpjS1/n0fiOlrgHVhgIVhhO5axHcA0Vvy9Uv7IQWTLwzD9/agBa5WZwFJ8lF4S1swL96JJ/GJbv96Nx9PbqAm9epKwQ0G8h1uJ7Tw==; 5:jhQc2NHLxovY6ffBdu+E1/z37z/H01pbGoqV5TKGq0WcLdV8qKGNZnyzcnCQbvifq0xhVNDCfRLWA5tfX//RoJCvVLzXwYrHl03glc324B7iJt6l4ku9Oh/1W7aQlXJmTRkwhAClgycTon5xQXwSD+Fey/SOo7BysUHfOyXbf/g=; 7:dPRsESmsKNJRkThfHk/hiE5t5Bi0OefOcVThC8mJfh68/cbDMmyyyXeV8qttB+3YNwK1U+gKzbS09slLFGy/53grGD7xv9IGnlLUcDWujZyF9he/D8Pw/1jGM5s4KXO680ysza9R5x52JUUxsjBJFQ== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 95362361-0cec-4aa7-3cb8-08d64fc5faf7 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390098)(7020095)(4652040)(8989299)(5600074)(711020)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:HE1PR07MB0940; x-ms-traffictypediagnostic: HE1PR07MB0940: x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(8121501046)(5005006)(3002001)(10201501046)(93006095)(93001095)(3231442)(944501410)(52105112)(148016)(149066)(150057)(6041310)(20161123560045)(20161123564045)(20161123558120)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(201708071742011)(7699051)(76991095); SRVR:HE1PR07MB0940; BCL:0; PCL:0; RULEID:; SRVR:HE1PR07MB0940; x-forefront-prvs: 08635C03D4 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(346002)(366004)(39860400002)(376002)(396003)(136003)(51914003)(40434004)(13464003)(189003)(199004)(53754006)(105586002)(478600001)(966005)(106356001)(5660300001)(2501003)(33656002)(25786009)(14454004)(97736004)(2201001)(86362001)(14444005)(5024004)(256004)(81156014)(53946003)(4326008)(53936002)(8676002)(44832011)(81166006)(2616005)(8936002)(6306002)(54906003)(93886005)(6512007)(82746002)(66066001)(6436002)(6116002)(2906002)(71200400001)(3846002)(71190400001)(83716004)(6246003)(53546011)(36756003)(486006)(6506007)(186003)(26005)(229853002)(110136005)(58126008)(102836004)(4744004)(6486002)(2900100001)(11346002)(76176011)(68736007)(476003)(316002)(7736002)(305945005)(446003)(99286004); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB0940; H:HE1PR07MB4169.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: xk7zv3B/TuNxt98qHJU5mTTAG9Ze+4BPOfN0kPCsvR+Q9arkWbENCTENstyF4ne4TOwwBdRL1kZW/XCVfpUQ99DGBYjY4y/+Za8A2tK0AjQkaXew0IciB91J21klZGUkEH0FiQo71IGEpyjNfPbnQq/HoL5p1JQqlTXah64+cM3ERIEVV5UIOxhSqQMsRQK4z0mBHGsJ6bnh31CaMBs/ZjBfo7c0YKXtyPBoZRKh7+HLu2EnsHmAiDO/x00OPLLJFw9fmNlcr0B/S0KvrxoNe9aodWjeHUZT4tmxivQvbJNLLx2MMHjDox66EEYki+BCrE+MKTcEEg86Wf7FWEm4dd+OwR0Z5fUWHkAtdvPu9z4= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <760C23E733FA304AA73B4B699F7BC158@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 95362361-0cec-4aa7-3cb8-08d64fc5faf7 X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Nov 2018 15:28:25.5912 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB0940 X-OriginatorOrg: ericsson.com X-Brightmail-Tracker: H4sIAAAAAAAAA02Sa0hTYRjHe885285Wg7d5ezDCXEoqeckilkoXhBxRGfTBmKnNPKmp03ZU sgyl0rxVVk5zoZOYSaaYqWihI0Uxl5cSFRpC3kiXIPODigrWtrOgb7/n+f+fGzw0KXnHc6eT VZmMWqVMlfJFVPWVzmz/mpy16KDSpd2yjfUyUvbjpZGQNbRWE7Jag5PsQeOk4DRP3lTbhOR6 /SYhvz88QMpHzYXUJUohCktgUpOzGXXgyWuipKq1p2TGzBC6rZlaRvnoSz8qQUIa8DFon7Dw SpCIluB+BG2b26RNkOB1BO+fJ3CClQcMYwIu0BPQul6PbAGFy0kwjHchTnlBwM+VYpIL5hBU a9coWzM+DoKa7ny+jZ0xC4M1/YSNSXwBpjsK7B4n7AOtJR0CzuMLmqVVguOzMFKot29LYW/Y mp+z58X4FCw3bPG5YRsIRuor7QOEWAmPOod5NkbYFTaMTY5hbmBa0BHc2Rj03WMkxy5gnt+x +11wIOhmihy1MVBQUMXjPAdgWtMs4Hg/jOtK7ScDnuJD5ehjPif4g0WjcTS9ACbNgqPgGwLd ZCzHfmAuW3XkU2DGNMUvR0e1/+2nRbSVfaHlUyCHcjDVhXIOT6gonRVo7efvhaHqBaoO8RqR C8uw8WmJwcEBjDr5OsumqwJUTOYHZH2h3vbtoC5kXjzThzCNpHvEkdZ3kvCU2WxOWh8CmpQ6 i4sU1pQ4QZlzh1Gnx6mzUhm2D+2jKambWHaxTSHBicpMJoVhMhj1P5Wghe75KFKoenLv4PmQ bpVTau7qx0N5kTEBg/oZL+Mfn7E1MnIwfFoQ21K85OUb8d1I3KAuv3nV2zMRs+n8+fDNcz1+ iyFff23c4ilyoyzHmz3io81ZohOeYSttrOvv8AiDx87bUN9dK7NXk3RRli7C0JH3jFTF+Xmb Xq8+DFRW3M0RK4RSik1SHvEj1azyLyBMjB0+AwAA Archived-At: Subject: Re: [Ace] EDHOC standardization X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Nov 2018 15:28:36 -0000 SGkgSGFubmVzLA0KDQpHb29kIHBvaW50LCBkZXRhaWxlZCBkYXRhIGZvciBFREhPQyBpcyBhdmFp bGFibGUgaW4gQXBwZW5kaXggRSBvZiBkcmFmdC1zZWxhbmRlci1hY2UtY29zZS1lY2RoZS0xMC4N Cg0KaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LXNlbGFuZGVyLWFjZS1jb3NlLWVj ZGhlLTEwI3BhZ2UtNDANCg0KVGhlIGFzc3VtcHRpb25zIHRoZXJlIGFyZSB0aGUgc2FtZToNCi0g TWluaW11bSBudW1iZXIgb2YgYWxnb3JpdGhtcyBhbmQgY2lwaGVyIHN1aXRlcyBvZmZlcmVkDQot IEN1cnZlMjU1MTksIEFFUy1DQ01fOCwgU0hBLTI1NiwgRWREU0EgKHNhbWUgc2lnbmF0dXJlIHNp emUgYXMgRUNEU0EpDQotIExlbmd0aCBvZiBrZXkgaWRlbnRpZmllcnM6IDQgYnl0ZXMNCi0gQ29u bmVjdGlvbiBpZGVudGlmaWVyczogMSBieXRlDQoNCmRyYWZ0LXNlbGFuZGVyLWFjZS1jb3NlLWVj ZGhlLTExIHdpbGwgY29udGFpbiBzaW1pbGFyIGluZm9ybWF0aW9uIGJ1dCB3aXRoIGNpcGhlciBz dWl0ZXMuDQoNCkNoZWVycywNCkpvaG4NCg0K77u/LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0N CkZyb206IEhhbm5lcyBUc2Nob2ZlbmlnIDxIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPg0KRGF0 ZTogV2VkbmVzZGF5LCAyMSBOb3ZlbWJlciAyMDE4IGF0IDE2OjIyDQpUbzogSm9obiBNYXR0c3Nv biA8am9obi5tYXR0c3NvbkBlcmljc3Nvbi5jb20+LCAiYWNlQGlldGYub3JnIiA8YWNlQGlldGYu b3JnPiwgImx3aXBAaWV0Zi5vcmciIDxsd2lwQGlldGYub3JnPg0KQ2M6IEJlbmphbWluIEthZHVr IDxrYWR1a0BtaXQuZWR1PiwgInNhbHZhZG9yLnAuZkB1bS5lcyIgPHNhbHZhZG9yLnAuZkB1bS5l cz4NClN1YmplY3Q6IFJFOiBbQWNlXSBFREhPQyBzdGFuZGFyZGl6YXRpb24NCg0KSm9obiwgY291 bGQgeW91IGFsc28gYWRkIHRoZSBkZXRhaWxlZCBkYXRhIGZvciBFREhPQyBhcyB3ZWxsPw0KKEFu ZCB0aGFua3MgZm9yIHRoZSBkZXRhaWxzIHJlZ2FyZGluZyB0aGUgRFRMUyBudW1iZXJzLikNCg0K Q2lhbw0KSGFubmVzDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBBY2UgPGFj ZS1ib3VuY2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YgSm9obiBNYXR0c3Nvbg0KU2VudDogV2Vk bmVzZGF5LCBOb3ZlbWJlciAyMSwgMjAxOCA0OjAzIFBNDQpUbzogYWNlQGlldGYub3JnOyBsd2lw QGlldGYub3JnDQpDYzogQmVuamFtaW4gS2FkdWsgPGthZHVrQG1pdC5lZHU+OyBzYWx2YWRvci5w LmZAdW0uZXMNClN1YmplY3Q6IFJlOiBbQWNlXSBFREhPQyBzdGFuZGFyZGl6YXRpb24NCg0KSGkg YWxsLA0KDQpJbnNwaXJlZCBieSB0aGUgZGlzY3Vzc2lvbiBpbiB0aGlzIHRocmVhZCwgSSBkaWQg bW9yZSBkZXRhaWxlZCBjYWxjdWxhdGlvbnMgb2YgdGhlIG51bWJlciBvZiBieXRlcyB3aGVuIERU TFMgMS4zIGlzIHVzZWQgZm9yIHR5cGljYWwgSW9UIHVzZSBjYXNlcyAoUFNLLCBSUEssIENvbm5l Y3Rpb24gSUQpLiBUaGUgcGxhbiBpcyB0byBhZGQgdGhpcyBpbmZvcm1hdGlvbiB0byBkcmFmdC1p ZXRmLWx3aWctc2VjdXJpdHktcHJvdG9jb2wtY29tcGFyaXNvbiBhcyB0aGlzIGhhcyBiZWVuIHJl cXVlc3RlZCBieSBzZXZlcmFsIHBlb3BsZS4gSSB0aGluayBzb21lIGJ5dGVzIHdlcmUgbWlzc2lu ZyBpbiB0aGUgZWFybGllciBlc3RpbWF0ZXMgZm9yIFRMUyAxLjMsIGFuZCBhcyBCZW4gY29tbWVu dGVkLCBEVExTIDEuMyBhZGRzIHNvbWUgYnl0ZXMgY29tcGFyZWQgdG8gVExTIDEuMy4NCg0KPT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09DQpGbGlnaHQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICMxICAgICAgICAgIzIgICAgICAgICMzICAgICAgIFRvdGFsDQotLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0NCkRUTFMgMS4zIFJQSyArIEVDREhFICAgICAgICAgICAgICAgICAxNDkgICAgICAgIDM3MyAg ICAgICAyMTMgICAgICAgIDczNQ0KRFRMUyAxLjMgUFNLICsgRUNESEUgICAgICAgICAgICAgICAg IDE4NiAgICAgICAgMTkwICAgICAgICA1NyAgICAgICAgNDMzDQpEVExTIDEuMyBQU0sgICAgICAg ICAgICAgICAgICAgICAgICAgMTM2ICAgICAgICAxNTAgICAgICAgIDU3ICAgICAgICAzNDMNCi0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLQ0KRURIT0MgICAgUlBLICsgRUNESEUgICAgICAgICAgICAgICAg ICAzOCAgICAgICAgMTIxICAgICAgICA4NiAgICAgICAgMjQ1DQpFREhPQyAgICBQU0sgKyBFQ0RI RSAgICAgICAgICAgICAgICAgIDQzICAgICAgICAgNDcgICAgICAgIDEyICAgICAgICAxMDINCj09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTnVt YmVyIG9mIGJ5dGVzDQoNCkFzc3VtcHRpb25zOg0KLSBNaW5pbXVtIG51bWJlciBvZiBhbGdvcml0 aG1zIGFuZCBjaXBoZXIgc3VpdGVzIG9mZmVyZWQNCi0gQ3VydmUyNTUxOSwgRUNEU0Egd2l0aCBQ LTI1NiwgQUVTLUNDTV84LCBTSEEtMjU2DQotIExlbmd0aCBvZiBrZXkgaWRlbnRpZmllcnM6IDQg Ynl0ZXMNCi0gQ29ubmVjdGlvbiBpZGVudGlmaWVyczogMSBieXRlDQotIFRoZSBEVExTIFJQS3Mg dXNlIHBvaW50IGNvbXByZXNzaW9uIChzYXZlcyAzMiBieXRlcykNCi0gTm8gRFRMUyBoYW5kc2hh a2UgbWVzc2FnZSBmcmFnbWVudGF0aW9uDQotIE9ubHkgbWFuZGF0b3J5IERUTFMgZXh0ZW50aW9u cywgZXhjZXB0IGZvciBjb25uZWN0aW9uIElEDQotIFZlcnNpb24gMzAgaHR0cHM6Ly90b29scy5p ZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtdGxzLWR0bHMxMy0zMA0KDQooRURIT0MgbnVtYmVycyBh cmUgZm9yIHRoZSBzb29uIHRvIGJlIHB1Ymxpc2hlZCAtMTEgdmVyc2lvbiB3aXRoIGNpcGhlciBz dWl0ZXMpDQoNCkkgaG9wZSB0aGlzIGluZm9ybWF0aW9uIGlzIHVzZWZ1bCBmb3IgcGVvcGxlLiBQ bGVhc2UgY29tbWVudCBpZiBJIG1pc3NlZCBzb21ldGhpbmcgb3IgaWYgeW91IGhhdmUgYW55IHN1 Z2dlc3Rpb24gb2YgdGhpbmdzIHRvIGFkZCBvciBob3cgdG8gcHJlc2VudCB0aGluZ3MuIEkgZG8g bm90IGtub3cgY3VycmVudGx5IGhvdyB0aGVzZSBudW1iZXJzIGNvbXBhcmUgdG8gRFRMUyAxLjIu DQoNCkJlbG93IGlzIGRldGFpbGVkIGluZm9ybWF0aW9uIGFib3V0IHdoZXJlIHRoZSBieXRlIGlu IGRpZmZlcmVudCBmbGlnaHRzIGFzIHdlbGwgYXMgdGhlIFJQS3MgKFN1YmplY3RQdWJsaWNLZXlJ bmZvKS4gTW9zdCBvZiB0aGUgYnl0ZXMgc2hvdWxkIGhhdmUgdGhlIGNvcnJlY3QgdmFsdWUsIGJ1 dCBtb3N0IG9mIHRoZSBsZW5ndGggZmllbGRzIGFyZSBqdXN0IHdyaXR0ZW4gYXMgTEwgTEwgTEwu IEJlbG93IGlzIGFsc28gaW5mb3JtYXRpb24gYWJvdXQgaG93IHJlc3VtcHRpb24sIGNhY2hlZCBp bmZvcm1hdGlvbiBbUkZDIDc5MjRdLCBhbmQgbm90IHVzaW5nIENvbm5lY3Rpb24gSUQgYWZmZWN0 cyB0aGUgbnVtYmVyIG9mIGJ5dGVzLg0KDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PQ0KRFRMUyAxLjMgRmxpZ2h0ICMxIFJQSyArIEVDREhF DQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0N Cg0KUmVjb3JkIEhlYWRlciAtIERUTFNQbGFpbnRleHQgKDEzIGJ5dGVzKQ0KMTYgZmUgZmQgRUUg RUUgU1MgU1MgU1MgU1MgU1MgU1MgTEwgTEwNCg0KSGFuZHNoYWtlIEhlYWRlciAtIENsaWVudCBI ZWxsbyAoMTAgYnl0ZXMpDQowMSBMTCBMTCBMTCBTUyBTUyAwMCAwMCAwMCBMTCBMTCBMTA0KDQpM ZWdhY3kgVmVyc2lvbiAoMiBieXRlcykNCmZlIGZkDQoNCkNsaWVudCBSYW5kb20gKDMyIGJ5dGVz KQ0KMDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcgMDggMDkgMGEgMGIgMGMgMGQgMGUgMGYgMTAgMTEg MTIgMTMgMTQgMTUgMTYgMTcgMTggMTkgMWEgMWIgMWMgMWQgMWUgMWYNCg0KTGVnYWN5IFNlc3Np b24gSUQgKDEgYnl0ZXMpDQowMA0KDQpDaXBoZXIgU3VpdGVzIChUTFNfQUVTXzEyOF9DQ01fOF9T SEEyNTYpICg0IGJ5dGVzKQ0KMDAgMDIgMTMgMDUNCg0KQ29tcHJlc3Npb24gTWV0aG9kcyAobnVs bCkgKDIgYnl0ZXMpDQowMSAwMA0KDQpFeHRlbnNpb25zIExlbmd0aCAoMiBieXRlcykNCkxMIExM DQoNCkV4dGVuc2lvbiAtIFN1cHBvcnRlZCBHcm91cHMgKHgyNTUxOSkgKDggYnl0ZXMpDQowMCAw YSAwMCAwNCAwMCAwMiAwMCAxZA0KDQpFeHRlbnNpb24gLSBTaWduYXR1cmUgQWxnb3JpdGhtcyAo ZWNkc2Ffc2VjcDI1NnIxX3NoYTI1NikgKDggYnl0ZXMpDQowMCAwZCAwMCAwNCAwMCAwMiAwOCAw Nw0KDQpFeHRlbnNpb24gLSBLZXkgU2hhcmUgKDQyIGJ5dGVzKQ0KMDAgMzMgMDAgMjYgMDAgMjQg MDAgMWQgMDAgMjANCjAwIDAxIDAyIDAzIDA0IDA1IDA2IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBl IDBmIDEwIDExIDEyIDEzIDE0IDE1IDE2IDE3IDE4IDE5IDFhIDFiIDFjIDFkIDFlIDFmDQoNCkV4 dGVuc2lvbiAtIFN1cHBvcnRlZCBWZXJzaW9ucyAoMS4zKSAoNyBieXRlcykNCjAwIDJiIDAwIDAz IDAyIDAzIDA0DQoNCkV4dGVuc2lvbiAtIENsaWVudCBDZXJ0aWZpY2F0ZSBUeXBlIChSYXcgUHVi bGljIEtleSkgKDYgYnl0ZXMpDQowMCAxMyAwMCAwMSAwMSAwMg0KDQpFeHRlbnNpb24gLSBTZXJ2 ZXIgQ2VydGlmaWNhdGUgVHlwZSAoUmF3IFB1YmxpYyBLZXkpICg2IGJ5dGVzKQ0KMDAgMTQgMDAg MDEgMDEgMDINCg0KRXh0ZW5zaW9uIC0gQ29ubmVjdGlvbiBJZGVudGlmaWVyICg0MykgKDYgYnl0 ZXMpDQpYWCBYWCAwMCAwMiAwMSA0Mg0KDQoxMyArIDEwICsgMiArIDMyICsgMSArIDQgKyAyICsg MiArIDggKyA4ICsgNDIgKyA3ICsgNiArIDYgKyA2ID0gMTQ5IGJ5dGVzDQoNCi0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KRFRMUyAxLjMgRmxp Z2h0ICMxIFBTSyArIEVDREhFDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0NCg0KRGlmZmVyZW5jZXMgY29tcGFyZWQgdG8gUlBLICsgRUNESEUN Cg0KKyBFeHRlbnNpb24gLSBQU0sgS2V5IEV4Y2hhbmdlIE1vZGVzICg2IGJ5dGVzKQ0KICAwMCAy ZCAwMCAwMiAwMSAwMQ0KDQorIEV4dGVuc2lvbiAtIFByZSBTaGFyZWQgS2V5ICg1MSBieXRlcykN CiAgMDAgMjkgMDAgMkYNCiAgMDAgMGEgMDAgMDQgSUQgSUQgSUQgSUQgMDAgMDAgMDAgMDANCiAg MDAgMjEgMjAgMDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcgMDggMDkgMGEgMGIgMGMgMGQgMGUgMGYg MTAgMTEgMTIgMTMgMTQgMTUgMTYgMTcgMTggMTkgMWEgMWIgMWMgMWQgMWUgMWYNCg0KLSBFeHRl bnNpb24gLSBTaWduYXR1cmUgQWxnb3JpdGhtcyAoZWNkc2Ffc2VjcDI1NnIxX3NoYTI1NikgKDgg Ynl0ZXMpDQoNCi0gRXh0ZW5zaW9uIC0gQ2xpZW50IENlcnRpZmljYXRlIFR5cGUgKFJhdyBQdWJs aWMgS2V5KSAoNiBieXRlcykNCg0KLSBFeHRlbnNpb24gLSBTZXJ2ZXIgQ2VydGlmaWNhdGUgVHlw ZSAoUmF3IFB1YmxpYyBLZXkpICg2IGJ5dGVzKQ0KDQoxNDkgKyA2ICsgNTEgLSA4IC0gNiAtIDYg PSAxODYgYnl0ZXMNCg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tDQpEVExTIDEuMyBGbGlnaHQgIzEgUFNLDQotLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KRGlmZmVyZW5jZXMgY29tcGFy ZWQgdG8gUFNLICsgRUNESEUNCg0KLSBFeHRlbnNpb24gLSBTdXBwb3J0ZWQgR3JvdXBzICh4MjU1 MTkpICg4IGJ5dGVzKQ0KDQotIEV4dGVuc2lvbiAtIEtleSBTaGFyZSAoNDIgYnl0ZXMpDQoNCjE4 NiAtIDggLSA0MiA9IDEzNiBieXRlcw0KDQoNCg0KPT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09DQpEVExTIDEuMyBGbGlnaHQgIzIgIFJQSyArIEVD REhFDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT0NCg0KUmVjb3JkIEhlYWRlciAtIERUTFNQbGFpbnRleHQgKDEzIGJ5dGVzKQ0KMTYgZmUgZmQg RUUgRUUgU1MgU1MgU1MgU1MgU1MgU1MgTEwgTEwNCg0KSGFuZHNoYWtlIEhlYWRlciAtIFNlcnZl ciBIZWxsbyAoMTAgYnl0ZXMpDQowMiBMTCBMTCBMTCBTUyBTUyAwMCAwMCAwMCBMTCBMTCBMTA0K DQpMZWdhY3kgVmVyc2lvbiAoMiBieXRlcykNCmZlIGZkDQoNClNlcnZlciBSYW5kb20gKDMyIGJ5 dGVzKQ0KMDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcgMDggMDkgMGEgMGIgMGMgMGQgMGUgMGYgMTAg MTEgMTIgMTMgMTQgMTUgMTYgMTcgMTggMTkgMWEgMWIgMWMgMWQgMWUgMWYNCg0KTGVnYWN5IFNl c3Npb24gSUQgKDEgYnl0ZXMpDQowMA0KDQpDaXBoZXIgU3VpdGUgKFRMU19BRVNfMTI4X0NDTV84 X1NIQTI1NikgKDIgYnl0ZXMpDQoxMyAwNQ0KDQpDb21wcmVzc2lvbiBNZXRob2QgKG51bGwpICgx IGJ5dGVzKQ0KMDANCg0KRXh0ZW5zaW9ucyBMZW5ndGggKDIgYnl0ZXMpDQpMTCBMTA0KDQpFeHRl bnNpb24gLSBLZXkgU2hhcmUgKDQwIGJ5dGVzKQ0KMDAgMzMgMDAgMjQgMDAgMWQgMDAgMjANCjAw IDAxIDAyIDAzIDA0IDA1IDA2IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBlIDBmIDEwIDExIDEyIDEz IDE0IDE1IDE2IDE3IDE4IDE5IDFhIDFiIDFjIDFkIDFlIDFmDQoNCkV4dGVuc2lvbiAtIFN1cHBv cnRlZCBWZXJzaW9ucyAoMS4zKSAoNiBieXRlcykNCjAwIDJiIDAwIDAyIDAzIDA0DQoNCkV4dGVu c2lvbiAtIENvbm5lY3Rpb24gSWRlbnRpZmllciAoNDMpICg2IGJ5dGVzKQ0KWFggWFggMDAgMDIg MDEgNDMNCg0KUmVjb3JkIEhlYWRlciAtIERUTFNDaXBoZXJ0ZXh0LCBGdWxsICg2IGJ5dGVzKSBI SCBFUyBTUyA0MyBMTCBMTA0KDQpIYW5kc2hha2UgSGVhZGVyIC0gRW5jcnlwdGVkIEV4dGVuc2lv bnMgKDEwIGJ5dGVzKQ0KMDggTEwgTEwgTEwgU1MgU1MgMDAgMDAgMDAgTEwgTEwgTEwNCg0KRXh0 ZW5zaW9ucyBMZW5ndGggKDIgYnl0ZXMpDQpMTCBMTA0KDQpFeHRlbnNpb24gLSBDbGllbnQgQ2Vy dGlmaWNhdGUgVHlwZSAoUmF3IFB1YmxpYyBLZXkpICg2IGJ5dGVzKQ0KMDAgMTMgMDAgMDEgMDEg MDINCg0KRXh0ZW5zaW9uIC0gU2VydmVyIENlcnRpZmljYXRlIFR5cGUgKFJhdyBQdWJsaWMgS2V5 KSAoNiBieXRlcykNCjAwIDE0IDAwIDAxIDAxIDAyDQoNCkhhbmRzaGFrZSBIZWFkZXIgLSBDZXJ0 aWZpY2F0ZSBSZXF1ZXN0ICgxMCBieXRlcykNCjBkIExMIExMIExMIFNTIFNTIDAwIDAwIDAwIExM IExMIExMDQoNClJlcXVlc3QgQ29udGV4dCAoMSBieXRlcykNCjAwDQoNCkV4dGVuc2lvbnMgTGVu Z3RoICgyIGJ5dGVzKQ0KTEwgTEwNCg0KRXh0ZW5zaW9uIC0gU2lnbmF0dXJlIEFsZ29yaXRobXMg KGVjZHNhX3NlY3AyNTZyMV9zaGEyNTYpICg4IGJ5dGVzKQ0KMDAgMGQgMDAgMDQgMDAgMDIgMDgg MDcNCg0KSGFuZHNoYWtlIEhlYWRlciAtIENlcnRpZmljYXRlICgxMCBieXRlcykNCjBiIExMIExM IExMIFNTIFNTIDAwIDAwIDAwIExMIExMIExMDQoNClJlcXVlc3QgQ29udGV4dCAoMSBieXRlcykN CjAwDQoNCkNlcnRpZmljYXRlIExpc3QgTGVuZ3RoICgzIGJ5dGVzKQ0KTEwgTEwgTEwNCg0KQ2Vy dGlmaWNhdGUgTGVuZ3RoICgzIGJ5dGVzKQ0KTEwgTEwgTEwNCg0KQ2VydGlmaWNhdGUgKDU5IGJ5 dGVzKSAvLyBQb2ludCBjb21wcmVzc2lvbg0KLi4uLg0KDQpDZXJ0aWZpY2F0ZSBFeHRlbnNpb25z ICgyIGJ5dGVzKQ0KMDAgMDANCg0KSGFuZHNoYWtlIEhlYWRlciAtIENlcnRpZmljYXRlIFZlcmlm eSAoMTAgYnl0ZXMpDQowZiBMTCBMTCBMTCBTUyBTUyAwMCAwMCAwMCBMTCBMTCBMTA0KDQpTaWdu YXR1cmUgICg2OCBieXRlcykNClpaIFpaIDAwIDQwIC4uLi4NCg0KSGFuZHNoYWtlIEhlYWRlciAt IEZpbmlzaGVkICgxMCBieXRlcykNCjE0IExMIExMIExMIFNTIFNTIDAwIDAwIDAwIExMIExMIExM DQoNClZlcmlmeSBEYXRhICgzMiBieXRlcykNCjAwIDAxIDAyIDAzIDA0IDA1IDA2IDA3IDA4IDA5 IDBhIDBiIDBjIDBkIDBlIDBmIDEwIDExIDEyIDEzIDE0IDE1IDE2IDE3IDE4IDE5IDFhIDFiIDFj IDFkIDFlIDFmDQoNClJlY29yZCBUeXBlICgxIGJ5dGUpDQoxNg0KDQpBdXRoIFRhZyAoOCBieXRl cykNCmUwIDhiIDBlIDQ1IDVhIDM1IDBhIGU1DQoNCjEzICsgMTAyICsgNiArIDI0ICsgMjEgKyA3 OCArIDc4ICsgNDIgKyAxICsgOCA9IDM3MyBieXRlcw0KDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkRUTFMgMS4zIEZsaWdodCAjMiBQU0sg KyBFQ0RIRQ0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tDQoNCkRpZmZlcmVuY2VzIGNvbXBhcmVkIHRvIFJQSyArIEVDREhFDQoNCi0gSGFuZHNo YWtlIE1lc3NhZ2UgQ2VydGlmaWNhdGUgKDc4IGJ5dGVzKQ0KDQotIEhhbmRzaGFrZSBNZXNzYWdl IENlcnRpZmljYXRlVmVyaWZ5ICg3OCBieXRlcykNCg0KLSBIYW5kc2hha2UgTWVzc2FnZSBDZXJ0 aWZpY2F0ZVJlcXVlc3QgKDIxIGJ5dGVzKQ0KDQotIEV4dGVuc2lvbiAtIENsaWVudCBDZXJ0aWZp Y2F0ZSBUeXBlIChSYXcgUHVibGljIEtleSkgKDYgYnl0ZXMpDQoNCi0gRXh0ZW5zaW9uIC0gU2Vy dmVyIENlcnRpZmljYXRlIFR5cGUgKFJhdyBQdWJsaWMgS2V5KSAoNiBieXRlcykNCg0KKyBFeHRl bnNpb24gLSBQcmUgU2hhcmVkIEtleSAoNiBieXRlcykNCiAgMDAgMjkgMDAgMDIgMDAgMDANCg0K MzczIC0gNzggLSA3OCAtIDIxIC0gNiAtIDYgICsgNiA9IDE5MCBieXRlcw0KDQotLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkRUTFMgMS4zIEZs aWdodCAjMiBQU0sNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLQ0KDQpEaWZmZXJlbmNlcyBjb21wYXJlZCB0byBQU0sgKyBFQ0RIRQ0KDQotIEV4 dGVuc2lvbiAtIEtleSBTaGFyZSAoNDAgYnl0ZXMpDQoNCjE5MCAtIDQwID0gMTUwIGJ5dGVzDQoN Cg0KDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT0NCkRUTFMgMS4zIEZsaWdodCAjMyBSUEsgKyBFQ0RIRQ0KPT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQoNClJlY29yZCBIZWFkZXIgKDYgYnl0 ZXMpIC8vIERUTFNDaXBoZXJ0ZXh0LCBGdWxsIFpaIEVTIFNTIDQyIExMIExMDQoNCkhhbmRzaGFr ZSBIZWFkZXIgLSBDZXJ0aWZpY2F0ZSAoMTAgYnl0ZXMpDQowYiBMTCBMTCBMTCBTUyBTUyBYWCBY WCBYWCBMTCBMTCBMTA0KDQpSZXF1ZXN0IENvbnRleHQgKDEgYnl0ZXMpDQowMA0KDQpDZXJ0aWZp Y2F0ZSBMaXN0IExlbmd0aCAoMyBieXRlcykNCkxMIExMIExMDQoNCkNlcnRpZmljYXRlIExlbmd0 aCAoMyBieXRlcykNCkxMIExMIExMDQoNCkNlcnRpZmljYXRlICg1OSBieXRlcykgLy8gUG9pbnQg Y29tcHJlc3Npb24NCi4uLi4NCg0KQ2VydGlmaWNhdGUgRXh0ZW5zaW9ucyAoMiBieXRlcykNCjAw IDAwDQoNCkhhbmRzaGFrZSBIZWFkZXIgLSBDZXJ0aWZpY2F0ZSBWZXJpZnkgKDEwIGJ5dGVzKQ0K MGYgTEwgTEwgTEwgU1MgU1MgMDAgMDAgMDAgTEwgTEwgTEwNCg0KU2lnbmF0dXJlICAoNjggYnl0 ZXMpDQowNCAwMyBMTCBMTCAvL2VjZHNhX3NlY3AyNTZyMV9zaGEyNTYNCjAwIDAxIDAyIDAzIDA0 IDA1IDA2IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBlIDBmIDEwIDExIDEyIDEzIDE0IDE1IDE2IDE3 IDE4IDE5IDFhIDFiIDFjIDFkIDFlIDFmDQowMCAwMSAwMiAwMyAwNCAwNSAwNiAwNyAwOCAwOSAw YSAwYiAwYyAwZCAwZSAwZiAxMCAxMSAxMiAxMyAxNCAxNSAxNiAxNyAxOCAxOSAxYSAxYiAxYyAx ZCAxZSAxZg0KDQpIYW5kc2hha2UgSGVhZGVyIC0gRmluaXNoZWQgKDEwIGJ5dGVzKQ0KMTQgTEwg TEwgTEwgU1MgU1MgMDAgMDAgMDAgTEwgTEwgTEwNCg0KVmVyaWZ5IERhdGEgKDMyIGJ5dGVzKSAv LyBTSEEtMjU2DQowMCAwMSAwMiAwMyAwNCAwNSAwNiAwNyAwOCAwOSAwYSAwYiAwYyAwZCAwZSAw ZiAxMCAxMSAxMiAxMyAxNCAxNSAxNiAxNyAxOCAxOSAxYSAxYiAxYyAxZCAxZSAxZg0KDQpSZWNv cmQgVHlwZSAoMSBieXRlKQ0KMTYNCg0KQXV0aCBUYWcgKDggYnl0ZXMpIC8vIEFFUy1DQ01fOA0K MDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcNCg0KNiArIDc4ICsgNzggKyA0MiArIDEgKyA4ID0gMjEz IGJ5dGVzDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLQ0KRFRMUyAxLjMgRmxpZ2h0ICMzIFBTSyArIEVDREhFDQotLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQpEaWZmZXJlbmNlcyBjb21w YXJlZCB0byBSUEsgKyBFQ0RIRQ0KDQotIEhhbmRzaGFrZSBNZXNzYWdlIENlcnRpZmljYXRlICg3 OCBieXRlcykNCg0KLSBIYW5kc2hha2UgTWVzc2FnZSBDZXJ0aWZpY2F0ZSBWZXJpZnkgKDc4IGJ5 dGVzKQ0KDQoyMTMgLSA3OCAtIDc4ID0gNTcgYnl0ZXMNCg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpEVExTIDEuMyBGbGlnaHQgIzMgUFNL DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0K DQpEaWZmZXJlbmNlcyBjb21wYXJlZCB0byBQU0sgKyBFQ0RIRQ0KDQpOb25lDQoNCjU3IGJ5dGVz DQoNCg0KDQoNCg0KDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PQ0KRFRMUyAxLjMgLSBDYWNoZWQgaW5mb3JtYXRpb24gW1JGQyA3OTI0XSA9 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NCg0K LSBDYWNoZWQgaW5mb3JtYXRpb24gdG9nZXRoZXIgd2l0aCBzZXJ2ZXIgWC41MDkgY2FuIGJlIHVz ZWQgdG8gbW92ZSBieXRlcyBmcm9tIGZsaWdodCAjMiB0byBmbGlnaHQgIzENCiAgKGNhY2hlZCBS UEsgaW5jcmVhc2VzIHRoZSBudW1iZXIgb2YgYnl0ZXMgY29tcGFyZWQgdG8gY2FjaGVkIFguNTA5 KQ0KDQpEaWZmZXJlbmNlcyBjb21wYXJlZCB0byBSUEsgKyBFQ0RIRQ0KDQpGbGlnaHQgIzENCg0K LSBFeHRlbnNpb24gLSBTZXJ2ZXIgQ2VydGlmaWNhdGUgVHlwZSAoUmF3IFB1YmxpYyBLZXkpICg2 IGJ5dGVzKQ0KDQorIEV4dGVuc2lvbiAtIENsaWVudCBDYXNoZWQgSW5mb3JtYXRpb24gKDM5IGJ5 dGVzKQ0KICAwMCAxOSBMTCBMTCBMTCBMTA0KICAwMSAwMCAwMSAwMiAwMyAwNCAwNSAwNiAwNyAw OCAwOSAwYSAwYiAwYyAwZCAwZSAwZiAxMCAxMSAxMiAxMyAxNCAxNSAxNiAxNyAxOCAxOSAxYSAx YiAxYyAxZCAxZSAxZg0KDQoxNDkgKyAzMyA9IDE4MiBieXRlcw0KDQpGbGlnaHQgIzINCg0KLSBF eHRlbnNpb24gLSBTZXJ2ZXIgQ2VydGlmaWNhdGUgVHlwZSAoUmF3IFB1YmxpYyBLZXkpICg2IGJ5 dGVzKQ0KDQorIEV4dGVuc2lvbiAtIFNlcnZlciBDYXNoZWQgSW5mb3JtYXRpb24gKDcgYnl0ZXMp DQogIDAwIDE5IExMIExMIExMIExMIDAxDQoNCi0gU2VydmVyIENlcnRpZmljYXRlICg1OSBieXRl cyAtPiAzMiBieXRlcykNCg0KMzczIC0gMjYgPSAzNDcgYnl0ZXMNCg0KPT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09DQpGbGlnaHQgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICMxICAgICAgICAg IzIgICAgICAgICMzICAgICAgIFRvdGFsDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkRUTFMgMS4z IENhY2hlZCBYLjUwOS9SUEsgKyBFQ0RIRSAgICAxODIgICAgICAgIDM0NyAgICAgICAyMTMgICAg ICAgIDc0Mg0KRFRMUyAxLjMgUlBLICsgRUNESEUgICAgICAgICAgICAgICAgIDE0OSAgICAgICAg MzczICAgICAgIDIxMyAgICAgICAgNzM1DQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NCg0KDQoNCj09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KRFRM UyAxLjMgLSBSZXN1bXB0aW9uDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT0NCg0KVG8gZW5hYmxlIHJlc3VtcHRpb24sIGEgNHRoIGZsaWdodCAo TmV3IFNlc3Npb24gVGlja2V0KSBpcyBhZGRlZA0KDQpGbGlnaHQgIzQgLSBOZXcgU2Vzc2lvbiBU aWNrZXQNCg0KUmVjb3JkIEhlYWRlciAtIERUTFNDaXBoZXJ0ZXh0LCBGdWxsICg2IGJ5dGVzKSBI SCBFUyBTUyA0MyBMTCBMTA0KDQpIYW5kc2hha2UgSGVhZGVyIC0gTmV3IFNlc3Npb24gVGlja2V0 ICgxMCBieXRlcykNCjA0IExMIExMIExMIFNTIFNTIDAwIDAwIDAwIExMIExMIExMDQoNClRpY2tl dCBMaWZldGltZSAoNCBieXRlcykNCjAwIDAxIDAyIDAzDQoNClRpY2tldCBBZ2UgQWRkICg0IGJ5 dGVzKQ0KMDAgMDEgMDIgMDMNCg0KVGlja2V0IE5vbmNlICgyIGJ5dGVzKQ0KMDEgMDANCg0KVGlj a2V0ICg2IGJ5dGVzKQ0KMDAgMDQgSUQgSUQgSUQgSUQNCg0KRXh0ZW5zaW9ucyAoMiBieXRlcykN CjAwIDAwDQoNCkF1dGggVGFnICg4IGJ5dGVzKSAvLyBBRVMtQ0NNXzgNCjAwIDAxIDAyIDAzIDA0 IDA1IDA2IDA3DQoNCjYgKyAxMCArIDQgKyA0ICsgMiArIDYgKyAyICsgOCA9IDQyIGJ5dGVzDQoN ClRoZSByZXN1bXB0aW9uIGhhbmRzaGFrZSBpcyBqdXN0IGEgUFNLIGhhbmRzaGFrZSB3aXRoIDEz NiArIDE1MCArIDU3ID0gMzQzIGJ5dGVzDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KRmxpZ2h0 ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAjMSAgICAgIzIgICAgICMzICAg ICAjNCAgICBUb3RhbA0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpEVExTIDEuMyBSUEsgKyBFQ0RI RSArIE5ld1Nlc3Npb25UaWNrZXQgICAgMTQ5ICAgIDM3MyAgICAyMTMgICAgIDQyICAgICAgNzc3 DQpEVExTIDEuMyBQU0sgKHJlc3VtcHRpb24pICAgICAgICAgICAgICAgICAgMTM2ICAgIDE1MCAg ICAgNTcgICAgICAgICAgICAgMzQzDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NCg0KDQoNCj09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KRFRMUyAx LjMgLSBDb25uZWN0aW9uIElEDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT0NCg0KV2l0aG91dCBhIENvbm5lY3Rpb24gSUQgdGhlIERUTFMgMS4z IGZsaWdodCBzaXplcyBjaGFuZ2VzIGFzIGZvbGxvd3MNCg0KRFRMUyAxLjMgRmxpZ2h0ICMxOiAg IC02IGJ5dGVzDQpEVExTIDEuMyBGbGlnaHQgIzI6ICAgLTcgYnl0ZXMNCkRUTFMgMS4zIEZsaWdo dCAjMzogICAtMSBieXRlDQoNCg0KDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NCkZsaWdodCAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIzEgICAgICAgICAjMiAgICAgICAgIzMgICAgICAg VG90YWwNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KRFRMUyAxLjMgUlBLICsgRUNESEUgKG5vIGNp ZCkgICAgICAgIDE0MyAgICAgICAgMzY0ICAgICAgIDIxMiAgICAgICAgNzIxDQpEVExTIDEuMyBQ U0sgKyBFQ0RIRSAobm8gY2lkKSAgICAgICAgMTgwICAgICAgICAxODMgICAgICAgIDU2ICAgICAg ICA0MTkNCkRUTFMgMS4zIFBTSyAobm8gY2lkKSAgICAgICAgICAgICAgICAxMzAgICAgICAgIDE0 MyAgICAgICAgNTYgICAgICAgIDMyOQ0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQoNCg0KDQoNCg0K PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQpE VExTIFJhdyBQdWJsaWMgS2V5cw0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09DQoNClN1YmplY3RQdWJsaWNLZXlJbmZvIHdpdGhvdXQgcG9pbnQg Y29tcHJlc3Npb24NCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tDQoNCjB4MzAgLy8gU2VxdWVuY2UNCjB4NTkgLy8gU2l6ZSA4OQ0KDQoweDMwIC8v IFNlcXVlbmNlDQoweDEzIC8vIFNpemUgMTkNCjB4MDYgMHgwNyAweDJBIDB4ODYgMHg0OCAweENF IDB4M0QgMHgwMiAweDAxLiAgICAgLy8gT0lEIDEuMi44NDAuMTAwNDUuMi4xIChlY1B1YmxpY0tl eSkNCjB4MDYgMHgwOCAweDJBIDB4ODYgMHg0OCAweENFIDB4M0QgMHgwMyAweDAxIDB4MDcgLy8g T0lEIDEuMi44NDAuMTAwNDUuMy4xLjcgKHNlY3AyNTZyMSkNCg0KMHgwMyAvLyBCaXQgc3RyaW5n DQoweDQyIC8vIFNpemUgNjYNCjB4MDAgLy8gVW51c2VkIGJpdHMgMA0KMHgwNCAvLyBVbmNvbXBy ZXNzZWQNCi4uLi4uLiA2NCBieXRlcyBYIGFuZCBZDQoNClRvdGFsIG9mIDkxIGJ5dGVzDQoNClN1 YmplY3RQdWJsaWNLZXlJbmZvIHdpdGggcG9pbnQgY29tcHJlc3Npb24NCi0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCjB4MzAgLy8gU2VxdWVu Y2UNCjB4NTkgLy8gU2l6ZSA4OQ0KDQoweDMwIC8vIFNlcXVlbmNlDQoweDEzIC8vIFNpemUgMTkN CjB4MDYgMHgwNyAweDJBIDB4ODYgMHg0OCAweENFIDB4M0QgMHgwMiAweDAxLiAgICAgLy8gT0lE IDEuMi44NDAuMTAwNDUuMi4xIChlY1B1YmxpY0tleSkNCjB4MDYgMHgwOCAweDJBIDB4ODYgMHg0 OCAweENFIDB4M0QgMHgwMyAweDAxIDB4MDcgLy8gT0lEIDEuMi44NDAuMTAwNDUuMy4xLjcgKHNl Y3AyNTZyMSkNCg0KMHgwMyAvLyBCaXQgc3RyaW5nDQoweDQyIC8vIFNpemUgNjYNCjB4MDAgLy8g VW51c2VkIGJpdHMgMA0KMHgwMyAvLyBDb21wcmVzc2VkDQouLi4uLi4gMzIgYnl0ZXMgWA0KDQpU b3RhbCBvZiA1OSBieXRlcw0KDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PQ0KSGVscGZ1bCBTb3VyY2VzIG9mIEluZm9ybWF0aW9uDQo9PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NCg0KSW4g YWRkaXRpb24gdG8gcmVsZXZhbnQgUkZDcyBhbmQgdGhlIGVzdGltYXRlcyBkb25lIGJ5IEppbSwg dGhlIGZvbGxvd2luZyByZWZlcmVuY2VzIHdlcmUgaGVscGZ1bDoNCg0KRXZlcnkgQnl0ZSBFeHBs YWluZWQ6IFRoZSBJbGx1c3RyYXRlZCBUTFMgMS4zIENvbm5lY3Rpb24gaHR0cHM6Ly90bHMxMy51 bGZoZWltLm5ldC8NCg0KRGlnaXRhbCBDZXJ0aWZpY2F0ZXMgZm9yIHRoZSBJbnRlcm5ldCBvZiBU aGluZ3MgaHR0cHM6Ly9rdGguZGl2YS1wb3J0YWwub3JnL3NtYXNoL2dldC9kaXZhMjoxMTUzOTU4 L0ZVTExURVhUMDEucGRmDQoNCi9Kb2huDQoNCg0KDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0t LS0tDQpGcm9tOiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT4NCkRhdGU6IFNhdHVyZGF5 LCAzIE5vdmVtYmVyIDIwMTggYXQgMTU6NTkNClRvOiBKb2huIE1hdHRzc29uIDxqb2huLm1hdHRz c29uQGVyaWNzc29uLmNvbT4NCkNjOiAic2FsdmFkb3IucC5mQHVtLmVzIiA8c2FsdmFkb3IucC5m QHVtLmVzPiwgImFjZUBpZXRmLm9yZyIgPGFjZUBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbQWNl XSBFREhPQyBzdGFuZGFyZGl6YXRpb24NCg0KT24gRnJpLCBOb3YgMDIsIDIwMTggYXQgMDI6NTU6 NTRQTSArMDAwMCwgSm9obiBNYXR0c3NvbiB3cm90ZToNCj4gSGkgQmVuamFtaW4sIFNhbHZhZG9y DQo+DQo+IFdoaWxlIERUTFMgMS4zIGhhdmUgZG9uZSBhIHZlcnkgZ29vZCBqb2Igb2YgbG93ZXJp bmcgdGhlIG92ZXJoZWFkIG9mIHRoZSByZWNvcmQgbGF5ZXIgd2hlbiBhcHBsaWNhdGlvbiBkYXRh IGlzIHNlbnQgKHNlZSBlLmcuIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRm LWx3aWctc2VjdXJpdHktcHJvdG9jb2wtY29tcGFyaXNvbi0wMSBmb3IgYSBjb21wYXJpc29uIGJl dHdlZW4gZGlmZmVyZW50IHByb3RvY29scyksIEkgZG8gbm90IHRoaW5rIHRoZSBoYW5kc2hha2Ug cHJvdG9jb2wgaXMgbXVjaCBsZWFuZXIgKGlzIGl0IGxlYW5lciBhdCBhbGw/KS4NCg0KKFRoZXJl IGFyZSBzb21lIGhhbmRzaGFrZSBtZXNzYWdlcyB0aGF0IGFyZSByZW1vdmVkIGVudGlyZWx5LikN Cg0KPiBXZSB0cmllZCB0byBtYWtlIGFuIGZhaXIgY29tcGFyaXNvbiBiZXR3ZWVuIEVESE9DIGFu ZCBUTFMgMS4zIGluIHRoZSBwcmVzZW50YXRpb24gYXQgSUVURiAxMDEgKHNlZSBodHRwczovL2Rh dGF0cmFja2VyLmlldGYub3JnL21lZXRpbmcvMTAxL21hdGVyaWFscy9zbGlkZXMtMTAxLWFjZS1r ZXktZXhjaGFuZ2Utdy1vc2NvcmUtMDApLiBTaW5jZSB0aGVuLCB3ZSBoYXZlIHNpZ25pZmljYW50 bHkgb3B0aW1pemVkIHRoZSBlbmNvZGluZyBpbiBFREhPQyBhbmQgdGhlIHVwY29taW5nIHZlcnNp b24gKC0xMSkgaXMgZXhwZWN0ZWQgdG8gaGF2ZSB0aGUgZm9sbG93aW5nIG1lc3NhZ2Ugc2l6ZXMu DQo+DQo+ICAgIEF1dGguICAgICAgICAgICAgICAgUFNLICAgICAgIFJQSyAgICAgICB4NXQgICAg IHg1Y2hhaW4NCj4gICAgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gICAgRURIT0MgbWVzc2FnZV8xICAgICAgNDMg ICAgICAgIDM4ICAgICAgICAzOCAgICAgICAgMzgNCj4gICAgRURIT0MgbWVzc2FnZV8yICAgICAg NDcgICAgICAgMTIxICAgICAgIDEyNyAgICAgICAxMTcgKyBDZXJ0aWZpY2F0ZSBjaGFpbg0KPiAg ICBFREhPQyBtZXNzYWdlXzMgICAgICAxMiAgICAgICAgODYgICAgICAgIDkyICAgICAgICA4MiAr IENlcnRpZmljYXRlIGNoYWluDQo+ICAgIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+ICAgIFRvdGFsICAgICAgICAg ICAgICAgMTAyICAgICAgIDI0NSAgICAgICAyNTcgICAgICAgMjM3ICsgQ2VydGlmaWNhdGUgY2hh aW5zDQo+DQo+IEFzIFNhbHZhZG9yIHdyaXRlcywgdGhlIGhhbmRzaGFrZXMgaW4gVExTIDEuMyBh bmQgRFRMUyAxLjMgYXJlIGJhc2ljYWxseSB0aGUgc2FtZSwgc28gdGhlIG51bWJlcnMgcHJlc2Vu dGVkIGF0IElFVEYgMTAxIHNob3VsZCBiZSBhIGdvb2QgZXN0aW1hdGUgYWxzbyBmb3IgRFRMUyAx LjMuDQo+DQo+ICAgIEF1dGguICAgICAgICAgICAgICAgIFBTSyAgICAgICBSUEsNCj4gICAgLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0NCj4gICAgKEQpVExTIG1lc3NhZ2VfMSAgICAgMTQyICAgICAgIDEwNw0KPiAgICAo RClUTFMgbWVzc2FnZV8yICAgICAxMzUgICAgICAgMjY0DQo+ICAgIChEKVRMUyBtZXNzYWdlXzMg ICAgICA1MSAgICAgICAxNjcNCj4gICAgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gICAgVG90YWwgICAgICAgICAg ICAgICAgMzI4ICAgICAgIDUzOA0KDQpUaGFua3MgZm9yIHRoZSBudW1iZXJzIQ0KDQo+IFRoZSBu dW1iZXJzIGFib3ZlIGluY2x1ZGUgRUNESEUuIEZvciBoYW5kc2hha2UgbWVzc2FnZXMsIG15IHVu ZGVyc3RhbmRpbmcgaXMgdGhhdCB0aGUgRFRMUyAxLjMgYW5kIFRMUyAxLjMgcmVjb3JkIGxheWVy IGhhdmUgZXhhY3RseSB0aGUgc2FtZSBzaXplLg0KDQpUaGUgRFRMUyAxLjMgb25lcyB3aWxsIGJl IHdvcnNlLCBkdWUgdG8gdGhlIGVwb2NoIGFuZCBzZXF1ZW5jZSBudW1iZXIgZmllbGRzLg0KDQot QmVuDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpB Y2UgbWFpbGluZyBsaXN0DQpBY2VAaWV0Zi5vcmcNCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vYWNlDQpJTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBl bWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJl IHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFz ZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBj b250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBvciBz dG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3UuDQoN Cg== From nobody Thu Nov 22 04:23:40 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F423912D4E8 for ; Thu, 22 Nov 2018 04:23:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.76 X-Spam-Level: X-Spam-Status: No, score=-5.76 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.46, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com header.b=C74OiP4A; dkim=pass (1024-bit key) header.d=ericsson.com header.b=BC7ZmLZV Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 18rRpme-GrGj for ; Thu, 22 Nov 2018 04:23:26 -0800 (PST) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CE988129AB8 for ; Thu, 22 Nov 2018 04:23:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1542889404; x=1545481404; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:CC:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=8bFBw7s6zNbkf1l/P0aO5ek83tOvjQa5GBDwFkyD540=; b=C74OiP4AW0ACqWq2wS0hRHy8IaE2p5CcKOmxQGJQtLr1F31enffU1A2HXCjbWCEk BvYYYFtP3UaPMIOrEN9MCUTizUpmVge+V2Jns9aglLz9X/SCddqDxCQfUAMwgfAN B96wL0k2V3Wi7Zp/dMxBjPYi3qzsTFfabE1XjUdWU3o=; X-AuditID: c1b4fb2d-f61ff70000007af1-f2-5bf69fbb6cca Received: from ESESSMB504.ericsson.se (Unknown_Domain [153.88.183.122]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id D2.B0.31473.BBF96FB5; Thu, 22 Nov 2018 13:23:24 +0100 (CET) Received: from ESESSMR505.ericsson.se (153.88.183.127) by ESESSMB504.ericsson.se (153.88.183.122) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Thu, 22 Nov 2018 13:23:23 +0100 Received: from ESESSMB505.ericsson.se (153.88.183.166) by ESESSMR505.ericsson.se (153.88.183.127) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Thu, 22 Nov 2018 13:23:23 +0100 Received: from EUR01-VE1-obe.outbound.protection.outlook.com (153.88.183.157) by ESESSMB505.ericsson.se (153.88.183.166) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3 via Frontend Transport; Thu, 22 Nov 2018 13:23:23 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=8bFBw7s6zNbkf1l/P0aO5ek83tOvjQa5GBDwFkyD540=; b=BC7ZmLZVwuk82ID832y80TOPyrMs6QfV6esEM5uuPrvewsB9lntzfHAdZMib3SMK/VOglBX7xuds58e25LK7o+vShM7jiOC+SI34bgVZVspzbCDd5ah5DTaoLnRVaQ3DBtOvLKDpPgpVy7VsQINCL1lo30WbQaa+NtnfDeqsMkQ= Received: from HE1PR07MB4169.eurprd07.prod.outlook.com (20.176.166.22) by HE1PR07MB4396.eurprd07.prod.outlook.com (20.176.167.33) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1361.11; Thu, 22 Nov 2018 12:23:21 +0000 Received: from HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::18ff:fb34:36ea:bd64]) by HE1PR07MB4169.eurprd07.prod.outlook.com ([fe80::18ff:fb34:36ea:bd64%4]) with mapi id 15.20.1361.016; Thu, 22 Nov 2018 12:23:21 +0000 From: John Mattsson To: Jim Schaad , "ace@ietf.org" , "lwip@ietf.org" CC: 'Benjamin Kaduk' , "salvador.p.f@um.es" Thread-Topic: [Ace] EDHOC standardization Thread-Index: AQHUcrwmx6N1o4AsH0uz6RMW3Bvpj6U+JgWAgBxb0gD///VbAIABcGgA Date: Thu, 22 Nov 2018 12:23:21 +0000 Message-ID: References: <20181103145857.GG54966@kduck.kaduk.org> <7F78CC92-5C48-4BFC-8087-E25D4D95A74F@ericsson.com> <000001d481ae$57cd4530$0767cf90$@augustcellars.com> In-Reply-To: <000001d481ae$57cd4530$0767cf90$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.11.0.180909 x-originating-ip: [192.176.1.81] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; HE1PR07MB4396; 6:w6AnllJi/4HRjNDJiKMu46QVrdmXnE7Vft0j78Sdy9F5YOPZW4oH+bU5BMfsDphx1PuSeGmL/u8ZCDkGcDWcwau4Q/BXMsTICp3Cblzg4mKspZiKq0+MNNN2e+WTknatPglbC9GeRszZvChum/5EAZSy1LBTTgu8h73nWdb9WGtCTS5RiOiLKEjCzHpw9ieU8Cs+K4p4J8fSOVWTTd04Eq9IQC87g1wBSg4cDH+gnlmh9qaIdSnCJoYDd0xWhwAZZqM9gB6q0vMG4IQF2DOwIhjrbA8BmJVlmPbL9nDILvqhLxDVlZXWvF+iX076b4wPFQ1/X/+3mK8LZcp0t+dO4nkNiZawNdb8xWwfFySRZwcOTxGJlvyglewc8rhWnFV3nWQdTJUZmpIIdbeFCnCw0ic05XPpl00/I/ri6u4/YGAtyKS6g4ZajzajVDrdS10zBeYB2YuWFksrd8EGJ6aQdw==; 5:bcJEgUpHEpvSEPpyFD//38nDp+nQPakPgHlmkeAsDeX32EM9Q+N4kuJvDHL/fd0MRjs3fnVKJKT6yEwSaAzK7KRdCWWWBiMyiRCiKVSL7tXiffA3x6xcm1P+edPFSp8nadYdv80gvCZZQ70KKlIAumOM2ifYe7dPbS3A3nJaAx8=; 7:M5GvVNEdw70F1HLw+jfj0L9LuLP1NfXf9Wt/z3PShsaFDHPYwZtkjNyivezo9115iHSIxaFOE18mrafHyv2sX9DJ+aYLtnmN27gTFf15hWkahk/Rf/NzQa+ajaaiqAhw5BDtC7xDGLjky/fluSNDSg== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 465f1361-e998-44fc-e4d1-08d650754ae9 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390098)(7020095)(4652040)(8989299)(5600074)(711020)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:HE1PR07MB4396; x-ms-traffictypediagnostic: HE1PR07MB4396: authentication-results: spf=none (sender IP is ) smtp.mailfrom=john.mattsson@ericsson.com; x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(3231442)(944501410)(52105112)(3002001)(10201501046)(148016)(149066)(150057)(6041310)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123562045)(20161123560045)(20161123558120)(20161123564045)(201708071742011)(7699051)(76991095); SRVR:HE1PR07MB4396; BCL:0; PCL:0; RULEID:; SRVR:HE1PR07MB4396; x-forefront-prvs: 0864A36BBF x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(136003)(366004)(39860400002)(346002)(376002)(53754006)(51914003)(199004)(189003)(13464003)(82746002)(11346002)(6436002)(446003)(2900100001)(186003)(476003)(2616005)(3846002)(6116002)(97736004)(6512007)(6306002)(26005)(14454004)(486006)(83716004)(105586002)(71190400001)(6506007)(6486002)(53546011)(53936002)(102836004)(14444005)(6246003)(44832011)(4326008)(36756003)(76176011)(106356001)(53946003)(256004)(2906002)(58126008)(229853002)(966005)(25786009)(66066001)(68736007)(2201001)(4744004)(316002)(99286004)(478600001)(81156014)(71200400001)(110136005)(54906003)(7736002)(86362001)(81166006)(2501003)(8936002)(33656002)(305945005)(93886005)(5660300001)(8676002)(559001)(579004); DIR:OUT; SFP:1101; SCL:1; SRVR:HE1PR07MB4396; H:HE1PR07MB4169.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: nUxK+VN4M4qxWJt5SiXC26K8T1SuS26Vpm7GCb2aFq2v9Bggvk/kn6gwDNRZvXFseHWqmZMiL2tvQgc0s4IoCTXdZ3LH5yMx4I9snhfT6zWCIO/Bos5H31hD2mv5NekyBzcIC1wDfMy99odxajlDvo+fOeNkOtiOFGxElQW69zY91b+buzGPA+2IGzKqDO4AzJ8xl0REyBrKaELsT4dJTEpp6+FfSB+2IO7GZWSz3pISRjRLheNLsIB/pwmf5AznoEaiEG0Le9JO6gDvXJRwDAozoOwL7iWbY/G26hgj2EK0HyusWjeJ2ESdvjIP/VecwAhiPKHD9pcazxl9VqCTqeOJW3LyzT+xvtdAv1N9OzQ= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <05F42C19788F664EBDD6CE9A896CFC51@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 465f1361-e998-44fc-e4d1-08d650754ae9 X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Nov 2018 12:23:21.6491 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB4396 X-OriginatorOrg: ericsson.com X-Brightmail-Tracker: H4sIAAAAAAAAA02SbUhTYRTHe+69u5ur1c35cjIkXYQ18C0DJ0SpH2yBQVJJKFIjL26oU3bV UvxgLsumgfmSm6RbOjRnkEaS5FK0DJ2vpYkpkS8Tm5YYxiTMaNtd0bffOed/zv+ch4eHe5o4 fjyFModWKWUZIpJP6C6/KAg26+3JYYNaTLJlL8clbbVbpKSlQ4dJGnqEErXpAzeaI+14WEtK jcafmLR4ZACXjtluE+eJJP7JVDpDkUerQk9d5cu77cVY9sxr7IbF2swtQu3dmAZ58IA6ATpL I+5kT+oNgk2djwbxHWxH8K25lvwXDI9WIVZlxGB0NdHJBFWBg6ZVzoqqMDC/ayXYYBHBaFOn y4OkwqDeXEQ62YtSwNjEHa6TcSoBurZXOU4WUkehQ9PJZTXHoObLd4zlOFie2cFYtyNQWb/s 2kJAnYaeFQuXNZtG0K4ecjV7UNHwYGrONRRRPrBleYKxZr4wa9W7j6bAaB7HWfYG29Jvl96b CgX9fCmHzQfAW63zGif7w3t9GXKaATVNgkHT6xYFw0ZNjXvQOWhYKcdZ0QSCqc8/HCKeIxDD wqcgdqEUKCmpdfemw/3KTVSBIur+26/O0YE7HuDpy1A2LQXbr36S5UCoLlvg1rnu3w9DOith QBwT8mZohslMOx4RQqsU1xgmSxmipHOeIccP6nu+HdyF2tZi+hHFQ6I9gt679mRPjiyPyc/s R8DDRV6CyRhHSpAqyy+gVVlXVLkZNNOPDvIIka8gxGRO8qTSZDl0Ok1n06q/VYzn4VeE+AGR DaWNBjGjmSv0H1wcbloTr2ecjUqq11YQA+E28XhD18VLG7Ft8caU2F2mV/Rq4U6qLVE9Wy2J OhA3sBEZv8/aggo/JkyFXlgPfOQ1PhIX2Kffzf0qr8wNOiScuNk3Wemr3TuvFj6OEGg6OTvG 9utJS2cmyHtig+GWFTssIhi5LFyMqxjZH82CuTc9AwAA Archived-At: Subject: Re: [Ace] EDHOC standardization X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Nov 2018 12:23:32 -0000 SGkgSmltLA0KDQo+IEluIHRoZSBhbmFseXNpcyB0aGF0IEkgZGlkIEkgdmVyeSBkZWxpYmVyYXRl bHkgdXNlZCBUTFMgbm90IERUTFMuICBUaGUgbWFpbiByZWFzb24gZm9yIHVzaW5nIERUTFMgaXMg YmVjYXVzZSBvbmUgaXMgb3BlcmF0aW5nIGluIHRoZSBVRFAgZW52aXJvbm1lbnQgYW5kIG9uZSBj YW5ub3QgaGF2ZSByZWxpYWJsZSBpbiBvcmRlciBkZWxpdmVyeS4gIFNpbmNlIEVESE9DIGlzIGJl aW5nIGJ1aWx0IG9uIHRvcCBvZiBDb0FQLCBvbmUgY2FuIHVzZSBDb0FQIHRvIGNyZWF0ZSByZWxp YWJsZSBpbiBvcmRlciBkZWxpdmVyeS4gIFRodXMsIHRoZSBleHRyYSBieXRlcyB0aGF0IERUTFMg aGFzIHRvIGRlYWwgd2l0aCB0aGlzIGFyZSBub3QgbmVlZGVkLg0KDQpJIHN0YXJ0ZWQgd2l0aCBE VExTIGFzIHRoYXQgd2FzIHdoYXQgd2FzIGRpc2N1c3Npb24gYmV0d2VlbiBTYWx2YWRvciBhbmQg QmVuamFtaW4uIEJlbG93IGFyZSBudW1iZXJzIGZvciBUTFMgMS4zLiBDaGFuZ2VzIGNvbXBhcmVk IHRvIERUTFMgMS4zIGFyZSB0aGF0IHRoZSByZWNvcmQgaGVhZGVyIGlzIHNtYWxsZXIsIGhhbmRz aGFrZSBoZWFkZXJzIGFyZSBzbWFsbGVyLCBhbmQgdGhhdCBDb25uZWN0aW9uIElEIGlzIG5vdCBz dXBwb3J0ZWQgaW4gVExTIDEuMy4gVGhlIG51bWJlcnMgSSBnZXQgZm9yIFRMUyAxLjMgYXJlIG92 ZXJhbGwgc2xpZ2h0bHkgYmlnZ2VyIHRoYW4gdGhlIG51bWJlcnMgaW4geW91ciBlc3RpbWF0ZSAo YnV0IGZvciBQU0sgRmxpZ2h0ICMzIEkgZ2V0IHNsaWdodGx5IHNtYWxsZXIgbnVtYmVycykuIEkg dGhpbmsgdGhlIGRpZmZlcmVuY2UgaXMgZHVlIHRvIG1hbnkgc21hbGxlciB0aGluZ3MgbGlrZSBo YW5kc2hha2UgaGVhZGVycyBhbmQgZmllbGRzIGluIHRoZSBjZXJ0aWZpY2F0ZSBzdHJ1Y3R1cmUg dGhhdCBhZGRzIHVwLiBJIHBsYW4gdG8gYWRkIFRMUyAxLjMgbnVtYmVycyB0byBkcmFmdC1pZXRm LWx3aWctc2VjdXJpdHktcHJvdG9jb2wtY29tcGFyaXNvbiBhcyB3ZWxsLg0KDQpJIGFncmVlIHdp dGggeW91ciBjb21tZW50IEppbS4gSnVzdCBub3csIEkgYW0ganVzdCB0cnlpbmcgdG8gY291bnQg dGhlIG51bWJlciBvZiBieXRlcyBvZiB0aGUgc2VjdXJpdHkgcHJvdG9jb2wuIFRvIGRvIGEgZmFp ciBjb21wYXJpc29uLCB5b3UgaGF2ZSB0byBjaG9vc2UgYSBzcGVjaWZpYyBkZXBsb3ltZW50IGFu ZCBsb29rIGF0IHRoZSB0b3BvbG9neSwgdGhlIHdob2xlIHByb3RvY29sIHN0YWNrLCBmcmFtZSBz aXplcyAoZS5nLiAxMjggYnl0ZXMpLCBob3cgYW5kIHdoZXJlIGluIHRoZSBwcm90b2NvbCBzdGFj ayBmcmFnbWVudGF0aW9uIGlzIGRvbmUsIGFuZCB0aGUgZXhwZWN0ZWQgcGFja2V0IGxvc3MuIFRo ZXJlIGlzIG9uZ29pbmcgd29yayBvbiBzdWNoIHNpbXVsYXRpb25zIGZvciA2dGlzY2guIEZyYWdt ZW50YXRpb24gYW5kL29yIHBhY2tldCBsb3NzIGxlYWQgdG8gdGhlIHRvdGFsIG51bWJlciBvZiBi eXRlcyBpbiB0aGUgdGFibGUgYmVsb3cgaGFzIHRvIGJlIG11bHRpcGxpZWQgYnkgc29tZSBsaW5l YXIgZmFjdG9yLiBBbmQgYXMgbW9yZSBieXRlcyBvZnRlbiBsZWFkIHRvIGluY3JlYXNlZCBwYWNr ZXQgbG9zcywgeW91IG9mdGVuIHNlZSBhIG5vbi1saW5lYXIgcmVsYXRpb24gYmV0d2VlbiBsb2dp Y2FsIG51bWJlciBvZiBieXRlcyBvbiB0aGUgdHJhbnNwb3J0L2FwcGxpY2F0aW9uIGxheWVyIGFz IHNob3duIGluIHRoZSB0YWJsZSBiZWxvdyBhbmQgcGh5c2ljYWwgbnVtYmVyIG9mIGJ5dGVzIGFu ZC9vciB0aW1lIGZyb20gY29tcGxldGlvbiBvZiB0aGUgcHJvdG9jb2wuIEFueSByZWFsaXN0aWMg Y29tcGFyaXNvbiBvdmVyIGNvbnN0cmFpbmVkIHJhZGlvIHdvdWxkIG1ha2UgdGhlIGRpZmZlcmVu Y2UgYmV0d2VlbiBUTFMgMS4zIGFuZCBFREhPQyBsYXJnZXIuIEEgcHJvYmxlbSB3aXRoIFRMUyBp cyB0aGF0IGl0IGRvZXMgbm90IHN1cHBvcnQgQ29ubmVjdGlvbiBJRC4NCg0KVExTIEFzc3VtcHRp b25zOg0KLSBNaW5pbXVtIG51bWJlciBvZiBhbGdvcml0aG1zIGFuZCBjaXBoZXIgc3VpdGVzIG9m ZmVyZWQgDQotIEN1cnZlMjU1MTksIEVDRFNBIHdpdGggUC0yNTYsIEFFUy1DQ01fOCwgU0hBLTI1 Ng0KLSBMZW5ndGggb2Yga2V5IGlkZW50aWZpZXJzOiA0IGJ5dGVzDQotIFRMUyBSUEsgd2l0aCBw b2ludCBjb21wcmVzc2lvbiAoc2F2ZXMgMzIgYnl0ZXMpDQotIE9ubHkgbWFuZGF0b3J5IFRMUyBl eHRlbnRpb25zDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KRmxpZ2h0ICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAjMSAgICAgICAgICMyICAgICAgICAjMyAgICAgICBUb3RhbCAgICAg DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkRUTFMgMS4zIFJQSyArIEVDREhFICAgICAgICAgICAg ICAgICAxNDMgICAgICAgIDM2NCAgICAgICAyMTIgICAgICAgIDcyMSAgICAgIA0KVExTIDEuMyAg UlBLICsgRUNESEUgICAgICAgICAgICAgICAgIDEyOSAgICAgICAgMzIyICAgICAgIDE5NCAgICAg ICAgNjQ1ICAgICAgDQpFREhPQyAgICBSUEsgKyBFQ0RIRSAgICAgICAgICAgICAgICAgIDM3ICAg ICAgICAxMjAgICAgICAgIDg1ICAgICAgICAyNDIgICAgICANCi0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LQ0KRFRMUyAxLjMgUFNLICsgRUNESEUgICAgICAgICAgICAgICAgIDE4MCAgICAgICAgMTgzICAg ICAgICA1NiAgICAgICAgNDE5ICAgICAgDQpUTFMgMS4zICBQU0sgKyBFQ0RIRSAgICAgICAgICAg ICAgICAgMTY2ICAgICAgICAxNTcgICAgICAgIDUwICAgICAgICAzNzMgICAgICANCkVESE9DICAg IFBTSyArIEVDREhFICAgICAgICAgICAgICAgICAgNDIgICAgICAgICA0NiAgICAgICAgMTEgICAg ICAgICA5OSAgICAgIA0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpEVExTIDEuMyBQU0sgICAgICAg ICAgICAgICAgICAgICAgICAgMTMwICAgICAgICAxNDMgICAgICAgIDU2ICAgICAgICAzMjkgICAg ICANClRMUyAxLjMgIFBTSyAgICAgICAgICAgICAgICAgICAgICAgICAxMTYgICAgICAgIDExNyAg ICAgICAgNTAgICAgICAgIDI4MyAgICAgIA0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQogICAgICAg ICAgICAgICAgICAgICAgICBOdW1iZXIgb2YgYnl0ZXMgKE5vIGNvbm5lY3Rpb24gSUQpDQoNCkJl bG93IGlzIGRldGFpbGVkIGluZm9ybWF0aW9uIGFib3V0IHRoZSBkaWZmZXJlbnQgZmxpZ2h0czoN Cg0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 DQpUTFMgMS4zIEZsaWdodCAjMSBSUEsgKyBFQ0RIRQ0KPT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQoNClJlY29yZCBIZWFkZXIgLSBUTFNQbGFp bnRleHQgKDUgYnl0ZXMpDQoxNiAwMyAwMyBMTCBMTA0KDQoJSGFuZHNoYWtlIEhlYWRlciAtIENs aWVudCBIZWxsbyAoNCBieXRlcykNCgkwMSBMTCBMTCBMTA0KDQoJCUxlZ2FjeSBWZXJzaW9uICgy IGJ5dGVzKQ0KCQkwMyAwMw0KDQoJCUNsaWVudCBSYW5kb20gKDMyIGJ5dGVzKQ0KCQkwMCAwMSAw MiAwMyAwNCAwNSAwNiAwNyAwOCAwOSAwYSAwYiAwYyAwZCAwZSAwZiAxMCAxMSAxMiAxMyAxNCAx NSAxNiAxNyAxOCAxOSAxYSAxYiAxYyAxZCAxZSAxZg0KDQoJCUxlZ2FjeSBTZXNzaW9uIElEICgx IGJ5dGVzKQ0KCQkwMA0KDQoJCUNpcGhlciBTdWl0ZXMgKFRMU19BRVNfMTI4X0NDTV84X1NIQTI1 NikgKDQgYnl0ZXMpDQoJCTAwIDAyIDEzIDA1DQoNCgkJQ29tcHJlc3Npb24gTWV0aG9kcyAobnVs bCkgKDIgYnl0ZXMpDQoJCTAxIDAwDQoNCgkJRXh0ZW5zaW9ucyBMZW5ndGggKDIgYnl0ZXMpDQoJ CUxMIExMDQoNCgkJCUV4dGVuc2lvbiAtIFN1cHBvcnRlZCBHcm91cHMgKHgyNTUxOSkgKDggYnl0 ZXMpDQoJCQkwMCAwYSAwMCAwNCAwMCAwMiAwMCAxZA0KDQoJCQlFeHRlbnNpb24gLSBTaWduYXR1 cmUgQWxnb3JpdGhtcyAoZWNkc2Ffc2VjcDI1NnIxX3NoYTI1NikgKDggYnl0ZXMpDQoJCQkwMCAw ZCAwMCAwNCAwMCAwMiAwOCAwNw0KDQoJCQlFeHRlbnNpb24gLSBLZXkgU2hhcmUgKDQyIGJ5dGVz KQ0KCQkJMDAgMzMgMDAgMjYgMDAgMjQgMDAgMWQgMDAgMjANCgkJCTAwIDAxIDAyIDAzIDA0IDA1 IDA2IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBlIDBmIDEwIDExIDEyIDEzIDE0IDE1IDE2IDE3IDE4 IDE5IDFhIDFiIDFjIDFkIDFlIDFmDQoNCgkJCUV4dGVuc2lvbiAtIFN1cHBvcnRlZCBWZXJzaW9u cyAoMS4zKSAoNyBieXRlcykNCgkJCTAwIDJiIDAwIDAzIDAyIDAzIDA0IA0KDQoJCQlFeHRlbnNp b24gLSBDbGllbnQgQ2VydGlmaWNhdGUgVHlwZSAoUmF3IFB1YmxpYyBLZXkpICg2IGJ5dGVzKQ0K CQkJMDAgMTMgMDAgMDEgMDEgMDIgDQoNCgkJCUV4dGVuc2lvbiAtIFNlcnZlciBDZXJ0aWZpY2F0 ZSBUeXBlIChSYXcgUHVibGljIEtleSkgKDYgYnl0ZXMpDQoJCQkwMCAxNCAwMCAwMSAwMSAwMg0K DQo1ICsgNCArIDIgKyAzMiArIDEgKyA0ICsgMiArIDIgKyA4ICsgOCArIDQyICsgNyArIDYgKyA2 ID0gMTI5IGJ5dGVzDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLQ0KVExTIDEuMyBGbGlnaHQgIzEgUFNLICsgRUNESEUNCi0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQpEaWZmZXJlbmNl cyBjb21wYXJlZCB0byBSUEsgKyBFQ0RIRQ0KDQorIEV4dGVuc2lvbiAtIFBTSyBLZXkgRXhjaGFu Z2UgTW9kZXMgKDYgYnl0ZXMpDQogIDAwIDJkIDAwIDAyIDAxIDAxDQoNCisgRXh0ZW5zaW9uIC0g UHJlIFNoYXJlZCBLZXkgKDUxIGJ5dGVzKQ0KICAwMCAyOSAwMCAyRg0KICAwMCAwYSAwMCAwNCBJ RCBJRCBJRCBJRCAwMCAwMCAwMCAwMA0KICAwMCAyMSAyMCAwMCAwMSAwMiAwMyAwNCAwNSAwNiAw NyAwOCAwOSAwYSAwYiAwYyAwZCAwZSAwZiAxMCAxMSAxMiAxMyAxNCAxNSAxNiAxNyAxOCAxOSAx YSAxYiAxYyAxZCAxZSAxZg0KDQotIEV4dGVuc2lvbiAtIFNpZ25hdHVyZSBBbGdvcml0aG1zIChl Y2RzYV9zZWNwMjU2cjFfc2hhMjU2KSAoOCBieXRlcykNCg0KLSBFeHRlbnNpb24gLSBDbGllbnQg Q2VydGlmaWNhdGUgVHlwZSAoUmF3IFB1YmxpYyBLZXkpICg2IGJ5dGVzKQ0KDQotIEV4dGVuc2lv biAtIFNlcnZlciBDZXJ0aWZpY2F0ZSBUeXBlIChSYXcgUHVibGljIEtleSkgKDYgYnl0ZXMpDQoN CjEyOSArIDYgKyA1MSAtIDggLSA2IC0gNiA9IDE2NiBieXRlcw0KDQotLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NClRMUyAxLjMgRmxpZ2h0ICMx IFBTSw0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tDQoNCkRpZmZlcmVuY2VzIGNvbXBhcmVkIHRvIFBTSyArIEVDREhFDQoNCi0gRXh0ZW5zaW9u IC0gU3VwcG9ydGVkIEdyb3VwcyAoeDI1NTE5KSAoOCBieXRlcykNCg0KLSBFeHRlbnNpb24gLSBL ZXkgU2hhcmUgKDQyIGJ5dGVzKQ0KDQoxNjYgLSA4IC0gNDIgPSAxMTYgYnl0ZXMNCg0KDQoNCj09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KVExT IDEuMyBGbGlnaHQgIzIgIFJQSyArIEVDREhFDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT0NCg0KUmVjb3JkIEhlYWRlciAtIFRMU1BsYWludGV4 dCAoNSBieXRlcykNCjE2IDAzIDAzIExMIExMDQoNCglIYW5kc2hha2UgSGVhZGVyIC0gU2VydmVy IEhlbGxvICg0IGJ5dGVzKQ0KCTAyIExMIExMIExMDQoNCgkJTGVnYWN5IFZlcnNpb24gKDIgYnl0 ZXMpDQoJCWZlIGZkDQoNCgkJU2VydmVyIFJhbmRvbSAoMzIgYnl0ZXMpDQoJCTAwIDAxIDAyIDAz IDA0IDA1IDA2IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBlIDBmIDEwIDExIDEyIDEzIDE0IDE1IDE2 IDE3IDE4IDE5IDFhIDFiIDFjIDFkIDFlIDFmDQoNCgkJTGVnYWN5IFNlc3Npb24gSUQgKDEgYnl0 ZXMpDQoJCTAwDQoNCgkJQ2lwaGVyIFN1aXRlIChUTFNfQUVTXzEyOF9DQ01fOF9TSEEyNTYpICgy IGJ5dGVzKQ0KCQkxMyAwNQ0KDQoJCUNvbXByZXNzaW9uIE1ldGhvZCAobnVsbCkgKDEgYnl0ZXMp DQoJCTAwDQoNCgkJRXh0ZW5zaW9ucyBMZW5ndGggKDIgYnl0ZXMpDQoJCUxMIExMDQoNCgkJCUV4 dGVuc2lvbiAtIEtleSBTaGFyZSAoNDAgYnl0ZXMpDQoJCQkwMCAzMyAwMCAyNCAwMCAxZCAwMCAy MA0KCQkJMDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcgMDggMDkgMGEgMGIgMGMgMGQgMGUgMGYgMTAg MTEgMTIgMTMgMTQgMTUgMTYgMTcgMTggMTkgMWEgMWIgMWMgMWQgMWUgMWYNCg0KCQkJRXh0ZW5z aW9uIC0gU3VwcG9ydGVkIFZlcnNpb25zICgxLjMpICg2IGJ5dGVzKQ0KCQkJMDAgMmIgMDAgMDIg MDMgMDQNCg0KUmVjb3JkIEhlYWRlciAtIFRMU0NpcGhlcnRleHQgKDUgYnl0ZXMpDQoxNyAwMyAw MyBMTCBMTA0KDQoJSGFuZHNoYWtlIEhlYWRlciAtIEVuY3J5cHRlZCBFeHRlbnNpb25zICg0IGJ5 dGVzKQ0KCTA4IExMIExMIExMDQoNCgkJRXh0ZW5zaW9ucyBMZW5ndGggKDIgYnl0ZXMpDQoJCUxM IExMDQoNCgkJCUV4dGVuc2lvbiAtIENsaWVudCBDZXJ0aWZpY2F0ZSBUeXBlIChSYXcgUHVibGlj IEtleSkgKDYgYnl0ZXMpDQoJCQkwMCAxMyAwMCAwMSAwMSAwMiANCg0KCQkJRXh0ZW5zaW9uIC0g U2VydmVyIENlcnRpZmljYXRlIFR5cGUgKFJhdyBQdWJsaWMgS2V5KSAoNiBieXRlcykNCgkJCTAw IDE0IDAwIDAxIDAxIDAyDQoNCglIYW5kc2hha2UgSGVhZGVyIC0gQ2VydGlmaWNhdGUgUmVxdWVz dCAoNCBieXRlcykNCgkwZCBMTCBMTCBMTA0KDQoJCVJlcXVlc3QgQ29udGV4dCAoMSBieXRlcykN CgkJMDANCg0KCQlFeHRlbnNpb25zIExlbmd0aCAoMiBieXRlcykNCgkJTEwgTEwNCg0KCQkJRXh0 ZW5zaW9uIC0gU2lnbmF0dXJlIEFsZ29yaXRobXMgKGVjZHNhX3NlY3AyNTZyMV9zaGEyNTYpICg4 IGJ5dGVzKQ0KCQkJMDAgMGQgMDAgMDQgMDAgMDIgMDggMDcNCg0KCUhhbmRzaGFrZSBIZWFkZXIg LSBDZXJ0aWZpY2F0ZSAoNCBieXRlcykNCgkwYiBMTCBMTCBMTA0KDQoJCVJlcXVlc3QgQ29udGV4 dCAoMSBieXRlcykNCgkJMDANCg0KCQlDZXJ0aWZpY2F0ZSBMaXN0IExlbmd0aCAoMyBieXRlcykN CgkJTEwgTEwgTEwNCg0KCQlDZXJ0aWZpY2F0ZSBMZW5ndGggKDMgYnl0ZXMpDQoJCUxMIExMIExM DQoNCgkJQ2VydGlmaWNhdGUgKDU5IGJ5dGVzKSAvLyBQb2ludCBjb21wcmVzc2lvbg0KCQkuLi4u DQoNCgkJQ2VydGlmaWNhdGUgRXh0ZW5zaW9ucyAoMiBieXRlcykNCgkJMDAgMDANCg0KCUhhbmRz aGFrZSBIZWFkZXIgLSBDZXJ0aWZpY2F0ZSBWZXJpZnkgKDQgYnl0ZXMpDQoJMGYgTEwgTEwgTEwN Cg0KCQlTaWduYXR1cmUgICg2OCBieXRlcykNCgkJWlogWlogMDAgNDAgLi4uLg0KDQoJSGFuZHNo YWtlIEhlYWRlciAtIEZpbmlzaGVkICg0IGJ5dGVzKQ0KCTE0IExMIExMIExMDQoNCgkJVmVyaWZ5 IERhdGEgKDMyIGJ5dGVzKQ0KCQkwMCAwMSAwMiAwMyAwNCAwNSAwNiAwNyAwOCAwOSAwYSAwYiAw YyAwZCAwZSAwZiAxMCAxMSAxMiAxMyAxNCAxNSAxNiAxNyAxOCAxOSAxYSAxYiAxYyAxZCAxZSAx Zg0KDQoJUmVjb3JkIFR5cGUgKDEgYnl0ZSkNCgkxNg0KDQpBdXRoIFRhZyAoOCBieXRlcykNCmUw IDhiIDBlIDQ1IDVhIDM1IDBhIGU1DQoNCjUgKyA5MCArIDUgKyAxOCArIDE1ICsgNzIgKyA3MiAr IDM2ICsgMSArIDggPSAzMjIgYnl0ZXMNCg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpUTFMgMS4zIEZsaWdodCAjMiBQU0sgKyBFQ0RIRQ0K LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoN CkRpZmZlcmVuY2VzIGNvbXBhcmVkIHRvIFJQSyArIEVDREhFDQoNCi0gSGFuZHNoYWtlIE1lc3Nh Z2UgQ2VydGlmaWNhdGUgKDcyIGJ5dGVzKQ0KDQotIEhhbmRzaGFrZSBNZXNzYWdlIENlcnRpZmlj YXRlVmVyaWZ5ICg3MiBieXRlcykNCg0KLSBIYW5kc2hha2UgTWVzc2FnZSBDZXJ0aWZpY2F0ZVJl cXVlc3QgKDE1IGJ5dGVzKQ0KDQotIEV4dGVuc2lvbiAtIENsaWVudCBDZXJ0aWZpY2F0ZSBUeXBl IChSYXcgUHVibGljIEtleSkgKDYgYnl0ZXMpDQoNCi0gRXh0ZW5zaW9uIC0gU2VydmVyIENlcnRp ZmljYXRlIFR5cGUgKFJhdyBQdWJsaWMgS2V5KSAoNiBieXRlcykNCg0KKyBFeHRlbnNpb24gLSBQ cmUgU2hhcmVkIEtleSAoNiBieXRlcykNCiAgMDAgMjkgMDAgMDIgMDAgMDANCg0KMzIyIC0gNzIg LSA3MiAtIDE1IC0gNiAtIDYgICsgNiA9IDE1NyBieXRlcw0KDQotLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NClRMUyAxLjMgRmxpZ2h0ICMyIFBT Sw0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t DQoNCkRpZmZlcmVuY2VzIGNvbXBhcmVkIHRvIFBTSyArIEVDREhFDQoNCi0gRXh0ZW5zaW9uIC0g S2V5IFNoYXJlICg0MCBieXRlcykNCg0KMTU3IC0gNDAgPSAxMTcgYnl0ZXMNCg0KDQoNCj09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KVExTIDEu MyBGbGlnaHQgIzMgUlBLICsgRUNESEUNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PQ0KDQpSZWNvcmQgSGVhZGVyIC0gVExTQ2lwaGVydGV4dCAo NSBieXRlcykNCjE3IDAzIDAzIExMIExMDQoNCglIYW5kc2hha2UgSGVhZGVyIC0gQ2VydGlmaWNh dGUgKDQgYnl0ZXMpDQoJMGIgTEwgTEwgTEwNCg0KCQlSZXF1ZXN0IENvbnRleHQgKDEgYnl0ZXMp DQoJCTAwDQoNCgkJQ2VydGlmaWNhdGUgTGlzdCBMZW5ndGggKDMgYnl0ZXMpDQoJCUxMIExMIExM DQoNCgkJQ2VydGlmaWNhdGUgTGVuZ3RoICgzIGJ5dGVzKQ0KCQlMTCBMTCBMTA0KCQ0KCQlDZXJ0 aWZpY2F0ZSAoNTkgYnl0ZXMpIC8vIFBvaW50IGNvbXByZXNzaW9uDQoJCS4uLi4NCg0KCQlDZXJ0 aWZpY2F0ZSBFeHRlbnNpb25zICgyIGJ5dGVzKQ0KCQkwMCAwMA0KDQoJSGFuZHNoYWtlIEhlYWRl ciAtIENlcnRpZmljYXRlIFZlcmlmeSAoNCBieXRlcykgDQoJMGYgTEwgTEwgTEwNCg0KCQlTaWdu YXR1cmUgICg2OCBieXRlcykNCgkJMDQgMDMgTEwgTEwgLy9lY2RzYV9zZWNwMjU2cjFfc2hhMjU2 DQoJCTAwIDAxIDAyIDAzIDA0IDA1IDA2IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBlIDBmIDEwIDEx IDEyIDEzIDE0IDE1IDE2IDE3IDE4IDE5IDFhIDFiIDFjIDFkIDFlIDFmDQoJCTAwIDAxIDAyIDAz IDA0IDA1IDA2IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBlIDBmIDEwIDExIDEyIDEzIDE0IDE1IDE2 IDE3IDE4IDE5IDFhIDFiIDFjIDFkIDFlIDFmDQoNCglIYW5kc2hha2UgSGVhZGVyIC0gRmluaXNo ZWQgKDQgYnl0ZXMpDQoJMTQgTEwgTEwgTEwNCg0KCQlWZXJpZnkgRGF0YSAoMzIgYnl0ZXMpIC8v IFNIQS0yNTYNCgkJMDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcgMDggMDkgMGEgMGIgMGMgMGQgMGUg MGYgMTAgMTEgMTIgMTMgMTQgMTUgMTYgMTcgMTggMTkgMWEgMWIgMWMgMWQgMWUgMWYNCg0KCVJl Y29yZCBUeXBlICgxIGJ5dGUpDQoJMTYNCg0KQXV0aCBUYWcgKDggYnl0ZXMpIC8vIEFFUy1DQ01f OA0KMDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcNCg0KNSArIDcyICsgNzIgKyAzNiArIDEgKyA4ID0g MTk0IGJ5dGVzDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLQ0KVExTIDEuMyBGbGlnaHQgIzMgUFNLICsgRUNESEUNCi0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCkRpZmZlcmVuY2VzIGNv bXBhcmVkIHRvIFJQSyArIEVDREhFDQoNCi0gSGFuZHNoYWtlIE1lc3NhZ2UgQ2VydGlmaWNhdGUg KDcyIGJ5dGVzKQ0KDQotIEhhbmRzaGFrZSBNZXNzYWdlIENlcnRpZmljYXRlIFZlcmlmeSAoNzIg Ynl0ZXMpDQoNCjE5NCAtIDcyIC0gNzIgPSA1MCBieXRlcw0KDQotLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NClRMUyAxLjMgRmxpZ2h0ICMzIFBT Sw0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0N Cg0KRGlmZmVyZW5jZXMgY29tcGFyZWQgdG8gUFNLICsgRUNESEUNCg0KTm9uZQ0KDQo1MCBieXRl cw0KDQoNCu+7vy0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBKaW0gU2NoYWFkIDxp ZXRmQGF1Z3VzdGNlbGxhcnMuY29tPg0KRGF0ZTogV2VkbmVzZGF5LCAyMSBOb3ZlbWJlciAyMDE4 IGF0IDE2OjI1DQpUbzogSm9obiBNYXR0c3NvbiA8am9obi5tYXR0c3NvbkBlcmljc3Nvbi5jb20+ LCAiYWNlQGlldGYub3JnIiA8YWNlQGlldGYub3JnPiwgImx3aXBAaWV0Zi5vcmciIDxsd2lwQGll dGYub3JnPg0KQ2M6ICdCZW5qYW1pbiBLYWR1aycgPGthZHVrQG1pdC5lZHU+LCAic2FsdmFkb3Iu cC5mQHVtLmVzIiA8c2FsdmFkb3IucC5mQHVtLmVzPg0KU3ViamVjdDogUkU6IFtBY2VdIEVESE9D IHN0YW5kYXJkaXphdGlvbg0KDQpKb2huLA0KDQpJbiB0aGUgYW5hbHlzaXMgdGhhdCBJIGRpZCBJ IHZlcnkgZGVsaWJlcmF0ZWx5IHVzZWQgVExTIG5vdCBEVExTLiAgVGhlIG1haW4gcmVhc29uIGZv ciB1c2luZyBEVExTIGlzIGJlY2F1c2Ugb25lIGlzIG9wZXJhdGluZyBpbiB0aGUgVURQIGVudmly b25tZW50IGFuZCBvbmUgY2Fubm90IGhhdmUgcmVsaWFibGUgaW4gb3JkZXIgZGVsaXZlcnkuICBT aW5jZSBFREhPQyBpcyBiZWluZyBidWlsdCBvbiB0b3Agb2YgQ29BUCwgb25lIGNhbiB1c2UgQ29B UCB0byBjcmVhdGUgcmVsaWFibGUgaW4gb3JkZXIgZGVsaXZlcnkuICBUaHVzIHRoZSBleHRyYSBi eXRlcyB0aGF0IERUTFMgaGFzIHRvIGRlYWwgd2l0aCB0aGlzIGFyZSBub3QgbmVlZGVkLg0KDQpK aW0NCg0KDQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IEFjZSA8YWNlLWJv dW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZiBKb2huIE1hdHRzc29uDQo+IFNlbnQ6IFdlZG5l c2RheSwgTm92ZW1iZXIgMjEsIDIwMTggNzowMyBBTQ0KPiBUbzogYWNlQGlldGYub3JnOyBsd2lw QGlldGYub3JnDQo+IENjOiBCZW5qYW1pbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT47IHNhbHZhZG9y LnAuZkB1bS5lcw0KPiBTdWJqZWN0OiBSZTogW0FjZV0gRURIT0Mgc3RhbmRhcmRpemF0aW9uDQo+ IA0KPiBIaSBhbGwsDQo+IA0KPiBJbnNwaXJlZCBieSB0aGUgZGlzY3Vzc2lvbiBpbiB0aGlzIHRo cmVhZCwgSSBkaWQgbW9yZSBkZXRhaWxlZCBjYWxjdWxhdGlvbnMgb2YgdGhlDQo+IG51bWJlciBv ZiBieXRlcyB3aGVuIERUTFMgMS4zIGlzIHVzZWQgZm9yIHR5cGljYWwgSW9UIHVzZSBjYXNlcyAo UFNLLCBSUEssDQo+IENvbm5lY3Rpb24gSUQpLiBUaGUgcGxhbiBpcyB0byBhZGQgdGhpcyBpbmZv cm1hdGlvbiB0byBkcmFmdC1pZXRmLWx3aWctc2VjdXJpdHktDQo+IHByb3RvY29sLWNvbXBhcmlz b24gYXMgdGhpcyBoYXMgYmVlbiByZXF1ZXN0ZWQgYnkgc2V2ZXJhbCBwZW9wbGUuIEkgdGhpbmsg c29tZQ0KPiBieXRlcyB3ZXJlIG1pc3NpbmcgaW4gdGhlIGVhcmxpZXIgZXN0aW1hdGVzIGZvciBU TFMgMS4zLCBhbmQgYXMgQmVuIGNvbW1lbnRlZCwNCj4gRFRMUyAxLjMgYWRkcyBzb21lIGJ5dGVz IGNvbXBhcmVkIHRvIFRMUyAxLjMuDQo+IA0KPiA9PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQo+ID09PT09PT09PT09PT09DQo+ IEZsaWdodCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIzEgICAgICAgICAjMiAgICAg ICAgIzMgICAgICAgVG90YWwNCj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+IERUTFMgMS4zIFJQ SyArIEVDREhFICAgICAgICAgICAgICAgICAxNDkgICAgICAgIDM3MyAgICAgICAyMTMgICAgICAg IDczNQ0KPiBEVExTIDEuMyBQU0sgKyBFQ0RIRSAgICAgICAgICAgICAgICAgMTg2ICAgICAgICAx OTAgICAgICAgIDU3ICAgICAgICA0MzMNCj4gRFRMUyAxLjMgUFNLICAgICAgICAgICAgICAgICAg ICAgICAgIDEzNiAgICAgICAgMTUwICAgICAgICA1NyAgICAgICAgMzQzDQo+IC0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLQ0KPiBFREhPQyAgICBSUEsgKyBFQ0RIRSAgICAgICAgICAgICAgICAgIDM4ICAg ICAgICAxMjEgICAgICAgIDg2ICAgICAgICAyNDUNCj4gRURIT0MgICAgUFNLICsgRUNESEUgICAg ICAgICAgICAgICAgICA0MyAgICAgICAgIDQ3ICAgICAgICAxMiAgICAgICAgMTAyDQo+ID09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT0NCj4gPT09PT09PT09PT09PT0NCj4gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg TnVtYmVyIG9mIGJ5dGVzDQo+IA0KPiBBc3N1bXB0aW9uczoNCj4gLSBNaW5pbXVtIG51bWJlciBv ZiBhbGdvcml0aG1zIGFuZCBjaXBoZXIgc3VpdGVzIG9mZmVyZWQNCj4gLSBDdXJ2ZTI1NTE5LCBF Q0RTQSB3aXRoIFAtMjU2LCBBRVMtQ0NNXzgsIFNIQS0yNTYNCj4gLSBMZW5ndGggb2Yga2V5IGlk ZW50aWZpZXJzOiA0IGJ5dGVzDQo+IC0gQ29ubmVjdGlvbiBpZGVudGlmaWVyczogMSBieXRlDQo+ IC0gVGhlIERUTFMgUlBLcyB1c2UgcG9pbnQgY29tcHJlc3Npb24gKHNhdmVzIDMyIGJ5dGVzKQ0K PiAtIE5vIERUTFMgaGFuZHNoYWtlIG1lc3NhZ2UgZnJhZ21lbnRhdGlvbg0KPiAtIE9ubHkgbWFu ZGF0b3J5IERUTFMgZXh0ZW50aW9ucywgZXhjZXB0IGZvciBjb25uZWN0aW9uIElEDQo+IC0gVmVy c2lvbiAzMCBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi10bHMtZHRsczEz LTMwDQo+IA0KPiAoRURIT0MgbnVtYmVycyBhcmUgZm9yIHRoZSBzb29uIHRvIGJlIHB1Ymxpc2hl ZCAtMTEgdmVyc2lvbiB3aXRoIGNpcGhlcg0KPiBzdWl0ZXMpDQo+IA0KPiBJIGhvcGUgdGhpcyBp bmZvcm1hdGlvbiBpcyB1c2VmdWwgZm9yIHBlb3BsZS4gUGxlYXNlIGNvbW1lbnQgaWYgSSBtaXNz ZWQNCj4gc29tZXRoaW5nIG9yIGlmIHlvdSBoYXZlIGFueSBzdWdnZXN0aW9uIG9mIHRoaW5ncyB0 byBhZGQgb3IgaG93IHRvIHByZXNlbnQNCj4gdGhpbmdzLiBJIGRvIG5vdCBrbm93IGN1cnJlbnRs eSBob3cgdGhlc2UgbnVtYmVycyBjb21wYXJlIHRvIERUTFMgMS4yLg0KPiANCj4gQmVsb3cgaXMg ZGV0YWlsZWQgaW5mb3JtYXRpb24gYWJvdXQgd2hlcmUgdGhlIGJ5dGUgaW4gZGlmZmVyZW50IGZs aWdodHMgYXMgd2VsbA0KPiBhcyB0aGUgUlBLcyAoU3ViamVjdFB1YmxpY0tleUluZm8pLiBNb3N0 IG9mIHRoZSBieXRlcyBzaG91bGQgaGF2ZSB0aGUgY29ycmVjdA0KPiB2YWx1ZSwgYnV0IG1vc3Qg b2YgdGhlIGxlbmd0aCBmaWVsZHMgYXJlIGp1c3Qgd3JpdHRlbiBhcyBMTCBMTCBMTC4gQmVsb3cg aXMgYWxzbw0KPiBpbmZvcm1hdGlvbiBhYm91dCBob3cgcmVzdW1wdGlvbiwgY2FjaGVkIGluZm9y bWF0aW9uIFtSRkMgNzkyNF0sIGFuZCBub3QNCj4gdXNpbmcgQ29ubmVjdGlvbiBJRCBhZmZlY3Rz IHRoZSBudW1iZXIgb2YgYnl0ZXMuDQo+IA0KPiANCj4gPT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQo+IERUTFMgMS4zIEZsaWdodCAjMSBSUEsg KyBFQ0RIRQ0KPiA9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT0NCj4gDQo+IFJlY29yZCBIZWFkZXIgLSBEVExTUGxhaW50ZXh0ICgxMyBieXRlcykN Cj4gMTYgZmUgZmQgRUUgRUUgU1MgU1MgU1MgU1MgU1MgU1MgTEwgTEwNCj4gDQo+IAlIYW5kc2hh a2UgSGVhZGVyIC0gQ2xpZW50IEhlbGxvICgxMCBieXRlcykNCj4gCTAxIExMIExMIExMIFNTIFNT IDAwIDAwIDAwIExMIExMIExMDQo+IA0KPiAJCUxlZ2FjeSBWZXJzaW9uICgyIGJ5dGVzKQ0KPiAJ CWZlIGZkDQo+IA0KPiAJCUNsaWVudCBSYW5kb20gKDMyIGJ5dGVzKQ0KPiAJCTAwIDAxIDAyIDAz IDA0IDA1IDA2IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBlIDBmIDEwIDExIDEyIDEzIDE0DQo+IDE1 IDE2IDE3IDE4IDE5IDFhIDFiIDFjIDFkIDFlIDFmDQo+IA0KPiAJCUxlZ2FjeSBTZXNzaW9uIElE ICgxIGJ5dGVzKQ0KPiAJCTAwDQo+IA0KPiAJCUNpcGhlciBTdWl0ZXMgKFRMU19BRVNfMTI4X0ND TV84X1NIQTI1NikgKDQgYnl0ZXMpDQo+IAkJMDAgMDIgMTMgMDUNCj4gDQo+IAkJQ29tcHJlc3Np b24gTWV0aG9kcyAobnVsbCkgKDIgYnl0ZXMpDQo+IAkJMDEgMDANCj4gDQo+IAkJRXh0ZW5zaW9u cyBMZW5ndGggKDIgYnl0ZXMpDQo+IAkJTEwgTEwNCj4gDQo+IAkJCUV4dGVuc2lvbiAtIFN1cHBv cnRlZCBHcm91cHMgKHgyNTUxOSkgKDggYnl0ZXMpDQo+IAkJCTAwIDBhIDAwIDA0IDAwIDAyIDAw IDFkDQo+IA0KPiAJCQlFeHRlbnNpb24gLSBTaWduYXR1cmUgQWxnb3JpdGhtcw0KPiAoZWNkc2Ff c2VjcDI1NnIxX3NoYTI1NikgKDggYnl0ZXMpDQo+IAkJCTAwIDBkIDAwIDA0IDAwIDAyIDA4IDA3 DQo+IA0KPiAJCQlFeHRlbnNpb24gLSBLZXkgU2hhcmUgKDQyIGJ5dGVzKQ0KPiAJCQkwMCAzMyAw MCAyNiAwMCAyNCAwMCAxZCAwMCAyMA0KPiAJCQkwMCAwMSAwMiAwMyAwNCAwNSAwNiAwNyAwOCAw OSAwYSAwYiAwYyAwZCAwZSAwZiAxMCAxMQ0KPiAxMiAxMyAxNCAxNSAxNiAxNyAxOCAxOSAxYSAx YiAxYyAxZCAxZSAxZg0KPiANCj4gCQkJRXh0ZW5zaW9uIC0gU3VwcG9ydGVkIFZlcnNpb25zICgx LjMpICg3IGJ5dGVzKQ0KPiAJCQkwMCAyYiAwMCAwMyAwMiAwMyAwNA0KPiANCj4gCQkJRXh0ZW5z aW9uIC0gQ2xpZW50IENlcnRpZmljYXRlIFR5cGUgKFJhdyBQdWJsaWMgS2V5KSAoNg0KPiBieXRl cykNCj4gCQkJMDAgMTMgMDAgMDEgMDEgMDINCj4gDQo+IAkJCUV4dGVuc2lvbiAtIFNlcnZlciBD ZXJ0aWZpY2F0ZSBUeXBlIChSYXcgUHVibGljIEtleSkgKDYNCj4gYnl0ZXMpDQo+IAkJCTAwIDE0 IDAwIDAxIDAxIDAyDQo+IA0KPiAJCQlFeHRlbnNpb24gLSBDb25uZWN0aW9uIElkZW50aWZpZXIg KDQzKSAoNiBieXRlcykNCj4gCQkJWFggWFggMDAgMDIgMDEgNDINCj4gDQo+IDEzICsgMTAgKyAy ICsgMzIgKyAxICsgNCArIDIgKyAyICsgOCArIDggKyA0MiArIDcgKyA2ICsgNiArIDYgPSAxNDkg Ynl0ZXMNCj4gDQo+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLQ0KPiBEVExTIDEuMyBGbGlnaHQgIzEgUFNLICsgRUNESEUNCj4gLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+IA0KPiBEaWZm ZXJlbmNlcyBjb21wYXJlZCB0byBSUEsgKyBFQ0RIRQ0KPiANCj4gKyBFeHRlbnNpb24gLSBQU0sg S2V5IEV4Y2hhbmdlIE1vZGVzICg2IGJ5dGVzKQ0KPiAgIDAwIDJkIDAwIDAyIDAxIDAxDQo+IA0K PiArIEV4dGVuc2lvbiAtIFByZSBTaGFyZWQgS2V5ICg1MSBieXRlcykNCj4gICAwMCAyOSAwMCAy Rg0KPiAgIDAwIDBhIDAwIDA0IElEIElEIElEIElEIDAwIDAwIDAwIDAwDQo+ICAgMDAgMjEgMjAg MDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcgMDggMDkgMGEgMGIgMGMgMGQgMGUgMGYgMTAgMTEgMTIg MTMgMTQgMTUNCj4gMTYgMTcgMTggMTkgMWEgMWIgMWMgMWQgMWUgMWYNCj4gDQo+IC0gRXh0ZW5z aW9uIC0gU2lnbmF0dXJlIEFsZ29yaXRobXMgKGVjZHNhX3NlY3AyNTZyMV9zaGEyNTYpICg4IGJ5 dGVzKQ0KPiANCj4gLSBFeHRlbnNpb24gLSBDbGllbnQgQ2VydGlmaWNhdGUgVHlwZSAoUmF3IFB1 YmxpYyBLZXkpICg2IGJ5dGVzKQ0KPiANCj4gLSBFeHRlbnNpb24gLSBTZXJ2ZXIgQ2VydGlmaWNh dGUgVHlwZSAoUmF3IFB1YmxpYyBLZXkpICg2IGJ5dGVzKQ0KPiANCj4gMTQ5ICsgNiArIDUxIC0g OCAtIDYgLSA2ID0gMTg2IGJ5dGVzDQo+IA0KPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gRFRMUyAxLjMgRmxpZ2h0ICMxIFBTSw0KPiAt LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4g DQo+IERpZmZlcmVuY2VzIGNvbXBhcmVkIHRvIFBTSyArIEVDREhFDQo+IA0KPiAtIEV4dGVuc2lv biAtIFN1cHBvcnRlZCBHcm91cHMgKHgyNTUxOSkgKDggYnl0ZXMpDQo+IA0KPiAtIEV4dGVuc2lv biAtIEtleSBTaGFyZSAoNDIgYnl0ZXMpDQo+IA0KPiAxODYgLSA4IC0gNDIgPSAxMzYgYnl0ZXMN Cj4gDQo+IA0KPiANCj4gPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09DQo+IERUTFMgMS4zIEZsaWdodCAjMiAgUlBLICsgRUNESEUNCj4gPT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQo+IA0KPiBS ZWNvcmQgSGVhZGVyIC0gRFRMU1BsYWludGV4dCAoMTMgYnl0ZXMpDQo+IDE2IGZlIGZkIEVFIEVF IFNTIFNTIFNTIFNTIFNTIFNTIExMIExMDQo+IA0KPiAJSGFuZHNoYWtlIEhlYWRlciAtIFNlcnZl ciBIZWxsbyAoMTAgYnl0ZXMpDQo+IAkwMiBMTCBMTCBMTCBTUyBTUyAwMCAwMCAwMCBMTCBMTCBM TA0KPiANCj4gCQlMZWdhY3kgVmVyc2lvbiAoMiBieXRlcykNCj4gCQlmZSBmZA0KPiANCj4gCQlT ZXJ2ZXIgUmFuZG9tICgzMiBieXRlcykNCj4gCQkwMCAwMSAwMiAwMyAwNCAwNSAwNiAwNyAwOCAw OSAwYSAwYiAwYyAwZCAwZSAwZiAxMCAxMSAxMiAxMyAxNA0KPiAxNSAxNiAxNyAxOCAxOSAxYSAx YiAxYyAxZCAxZSAxZg0KPiANCj4gCQlMZWdhY3kgU2Vzc2lvbiBJRCAoMSBieXRlcykNCj4gCQkw MA0KPiANCj4gCQlDaXBoZXIgU3VpdGUgKFRMU19BRVNfMTI4X0NDTV84X1NIQTI1NikgKDIgYnl0 ZXMpDQo+IAkJMTMgMDUNCj4gDQo+IAkJQ29tcHJlc3Npb24gTWV0aG9kIChudWxsKSAoMSBieXRl cykNCj4gCQkwMA0KPiANCj4gCQlFeHRlbnNpb25zIExlbmd0aCAoMiBieXRlcykNCj4gCQlMTCBM TA0KPiANCj4gCQkJRXh0ZW5zaW9uIC0gS2V5IFNoYXJlICg0MCBieXRlcykNCj4gCQkJMDAgMzMg MDAgMjQgMDAgMWQgMDAgMjANCj4gCQkJMDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcgMDggMDkgMGEg MGIgMGMgMGQgMGUgMGYgMTAgMTENCj4gMTIgMTMgMTQgMTUgMTYgMTcgMTggMTkgMWEgMWIgMWMg MWQgMWUgMWYNCj4gDQo+IAkJCUV4dGVuc2lvbiAtIFN1cHBvcnRlZCBWZXJzaW9ucyAoMS4zKSAo NiBieXRlcykNCj4gCQkJMDAgMmIgMDAgMDIgMDMgMDQNCj4gDQo+IAkJCUV4dGVuc2lvbiAtIENv bm5lY3Rpb24gSWRlbnRpZmllciAoNDMpICg2IGJ5dGVzKQ0KPiAJCQlYWCBYWCAwMCAwMiAwMSA0 Mw0KPiANCj4gUmVjb3JkIEhlYWRlciAtIERUTFNDaXBoZXJ0ZXh0LCBGdWxsICg2IGJ5dGVzKSBI SCBFUyBTUyA0MyBMTCBMTA0KPiANCj4gCUhhbmRzaGFrZSBIZWFkZXIgLSBFbmNyeXB0ZWQgRXh0 ZW5zaW9ucyAoMTAgYnl0ZXMpDQo+IAkwOCBMTCBMTCBMTCBTUyBTUyAwMCAwMCAwMCBMTCBMTCBM TA0KPiANCj4gCQlFeHRlbnNpb25zIExlbmd0aCAoMiBieXRlcykNCj4gCQlMTCBMTA0KPiANCj4g CQkJRXh0ZW5zaW9uIC0gQ2xpZW50IENlcnRpZmljYXRlIFR5cGUgKFJhdyBQdWJsaWMgS2V5KSAo Ng0KPiBieXRlcykNCj4gCQkJMDAgMTMgMDAgMDEgMDEgMDINCj4gDQo+IAkJCUV4dGVuc2lvbiAt IFNlcnZlciBDZXJ0aWZpY2F0ZSBUeXBlIChSYXcgUHVibGljIEtleSkgKDYNCj4gYnl0ZXMpDQo+ IAkJCTAwIDE0IDAwIDAxIDAxIDAyDQo+IA0KPiAJSGFuZHNoYWtlIEhlYWRlciAtIENlcnRpZmlj YXRlIFJlcXVlc3QgKDEwIGJ5dGVzKQ0KPiAJMGQgTEwgTEwgTEwgU1MgU1MgMDAgMDAgMDAgTEwg TEwgTEwNCj4gDQo+IAkJUmVxdWVzdCBDb250ZXh0ICgxIGJ5dGVzKQ0KPiAJCTAwDQo+IA0KPiAJ CUV4dGVuc2lvbnMgTGVuZ3RoICgyIGJ5dGVzKQ0KPiAJCUxMIExMDQo+IA0KPiAJCQlFeHRlbnNp b24gLSBTaWduYXR1cmUgQWxnb3JpdGhtcw0KPiAoZWNkc2Ffc2VjcDI1NnIxX3NoYTI1NikgKDgg Ynl0ZXMpDQo+IAkJCTAwIDBkIDAwIDA0IDAwIDAyIDA4IDA3DQo+IA0KPiAJSGFuZHNoYWtlIEhl YWRlciAtIENlcnRpZmljYXRlICgxMCBieXRlcykNCj4gCTBiIExMIExMIExMIFNTIFNTIDAwIDAw IDAwIExMIExMIExMDQo+IA0KPiAJCVJlcXVlc3QgQ29udGV4dCAoMSBieXRlcykNCj4gCQkwMA0K PiANCj4gCQlDZXJ0aWZpY2F0ZSBMaXN0IExlbmd0aCAoMyBieXRlcykNCj4gCQlMTCBMTCBMTA0K PiANCj4gCQlDZXJ0aWZpY2F0ZSBMZW5ndGggKDMgYnl0ZXMpDQo+IAkJTEwgTEwgTEwNCj4gDQo+ IAkJQ2VydGlmaWNhdGUgKDU5IGJ5dGVzKSAvLyBQb2ludCBjb21wcmVzc2lvbg0KPiAJCS4uLi4N Cj4gDQo+IAkJQ2VydGlmaWNhdGUgRXh0ZW5zaW9ucyAoMiBieXRlcykNCj4gCQkwMCAwMA0KPiAN Cj4gCUhhbmRzaGFrZSBIZWFkZXIgLSBDZXJ0aWZpY2F0ZSBWZXJpZnkgKDEwIGJ5dGVzKQ0KPiAJ MGYgTEwgTEwgTEwgU1MgU1MgMDAgMDAgMDAgTEwgTEwgTEwNCj4gDQo+IAkJU2lnbmF0dXJlICAo NjggYnl0ZXMpDQo+IAkJWlogWlogMDAgNDAgLi4uLg0KPiANCj4gCUhhbmRzaGFrZSBIZWFkZXIg LSBGaW5pc2hlZCAoMTAgYnl0ZXMpDQo+IAkxNCBMTCBMTCBMTCBTUyBTUyAwMCAwMCAwMCBMTCBM TCBMTA0KPiANCj4gCQlWZXJpZnkgRGF0YSAoMzIgYnl0ZXMpDQo+IAkJMDAgMDEgMDIgMDMgMDQg MDUgMDYgMDcgMDggMDkgMGEgMGIgMGMgMGQgMGUgMGYgMTAgMTEgMTIgMTMgMTQNCj4gMTUgMTYg MTcgMTggMTkgMWEgMWIgMWMgMWQgMWUgMWYNCj4gDQo+IAlSZWNvcmQgVHlwZSAoMSBieXRlKQ0K PiAJMTYNCj4gDQo+IEF1dGggVGFnICg4IGJ5dGVzKQ0KPiBlMCA4YiAwZSA0NSA1YSAzNSAwYSBl NQ0KPiANCj4gMTMgKyAxMDIgKyA2ICsgMjQgKyAyMSArIDc4ICsgNzggKyA0MiArIDEgKyA4ID0g MzczIGJ5dGVzDQo+IA0KPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0NCj4gRFRMUyAxLjMgRmxpZ2h0ICMyIFBTSyArIEVDREhFDQo+IC0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiANCj4g RGlmZmVyZW5jZXMgY29tcGFyZWQgdG8gUlBLICsgRUNESEUNCj4gDQo+IC0gSGFuZHNoYWtlIE1l c3NhZ2UgQ2VydGlmaWNhdGUgKDc4IGJ5dGVzKQ0KPiANCj4gLSBIYW5kc2hha2UgTWVzc2FnZSBD ZXJ0aWZpY2F0ZVZlcmlmeSAoNzggYnl0ZXMpDQo+IA0KPiAtIEhhbmRzaGFrZSBNZXNzYWdlIENl cnRpZmljYXRlUmVxdWVzdCAoMjEgYnl0ZXMpDQo+IA0KPiAtIEV4dGVuc2lvbiAtIENsaWVudCBD ZXJ0aWZpY2F0ZSBUeXBlIChSYXcgUHVibGljIEtleSkgKDYgYnl0ZXMpDQo+IA0KPiAtIEV4dGVu c2lvbiAtIFNlcnZlciBDZXJ0aWZpY2F0ZSBUeXBlIChSYXcgUHVibGljIEtleSkgKDYgYnl0ZXMp DQo+IA0KPiArIEV4dGVuc2lvbiAtIFByZSBTaGFyZWQgS2V5ICg2IGJ5dGVzKQ0KPiAgIDAwIDI5 IDAwIDAyIDAwIDAwDQo+IA0KPiAzNzMgLSA3OCAtIDc4IC0gMjEgLSA2IC0gNiAgKyA2ID0gMTkw IGJ5dGVzDQo+IA0KPiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0NCj4gRFRMUyAxLjMgRmxpZ2h0ICMyIFBTSw0KPiAtLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gDQo+IERpZmZlcmVuY2Vz IGNvbXBhcmVkIHRvIFBTSyArIEVDREhFDQo+IA0KPiAtIEV4dGVuc2lvbiAtIEtleSBTaGFyZSAo NDAgYnl0ZXMpDQo+IA0KPiAxOTAgLSA0MCA9IDE1MCBieXRlcw0KPiANCj4gDQo+IA0KPiA9PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NCj4gRFRM UyAxLjMgRmxpZ2h0ICMzIFJQSyArIEVDREhFDQo+ID09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KPiANCj4gUmVjb3JkIEhlYWRlciAoNiBieXRl cykgLy8gRFRMU0NpcGhlcnRleHQsIEZ1bGwgWlogRVMgU1MgNDIgTEwgTEwNCj4gDQo+IAlIYW5k c2hha2UgSGVhZGVyIC0gQ2VydGlmaWNhdGUgKDEwIGJ5dGVzKQ0KPiAJMGIgTEwgTEwgTEwgU1Mg U1MgWFggWFggWFggTEwgTEwgTEwNCj4gDQo+IAkJUmVxdWVzdCBDb250ZXh0ICgxIGJ5dGVzKQ0K PiAJCTAwDQo+IA0KPiAJCUNlcnRpZmljYXRlIExpc3QgTGVuZ3RoICgzIGJ5dGVzKQ0KPiAJCUxM IExMIExMDQo+IA0KPiAJCUNlcnRpZmljYXRlIExlbmd0aCAoMyBieXRlcykNCj4gCQlMTCBMTCBM TA0KPiANCj4gCQlDZXJ0aWZpY2F0ZSAoNTkgYnl0ZXMpIC8vIFBvaW50IGNvbXByZXNzaW9uDQo+ IAkJLi4uLg0KPiANCj4gCQlDZXJ0aWZpY2F0ZSBFeHRlbnNpb25zICgyIGJ5dGVzKQ0KPiAJCTAw IDAwDQo+IA0KPiAJSGFuZHNoYWtlIEhlYWRlciAtIENlcnRpZmljYXRlIFZlcmlmeSAoMTAgYnl0 ZXMpDQo+IAkwZiBMTCBMTCBMTCBTUyBTUyAwMCAwMCAwMCBMTCBMTCBMTA0KPiANCj4gCQlTaWdu YXR1cmUgICg2OCBieXRlcykNCj4gCQkwNCAwMyBMTCBMTCAvL2VjZHNhX3NlY3AyNTZyMV9zaGEy NTYNCj4gCQkwMCAwMSAwMiAwMyAwNCAwNSAwNiAwNyAwOCAwOSAwYSAwYiAwYyAwZCAwZSAwZiAx MCAxMSAxMiAxMyAxNA0KPiAxNSAxNiAxNyAxOCAxOSAxYSAxYiAxYyAxZCAxZSAxZg0KPiAJCTAw IDAxIDAyIDAzIDA0IDA1IDA2IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBlIDBmIDEwIDExIDEyIDEz IDE0DQo+IDE1IDE2IDE3IDE4IDE5IDFhIDFiIDFjIDFkIDFlIDFmDQo+IA0KPiAJSGFuZHNoYWtl IEhlYWRlciAtIEZpbmlzaGVkICgxMCBieXRlcykNCj4gCTE0IExMIExMIExMIFNTIFNTIDAwIDAw IDAwIExMIExMIExMDQo+IA0KPiAJCVZlcmlmeSBEYXRhICgzMiBieXRlcykgLy8gU0hBLTI1Ng0K PiAJCTAwIDAxIDAyIDAzIDA0IDA1IDA2IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBlIDBmIDEwIDEx IDEyIDEzIDE0DQo+IDE1IDE2IDE3IDE4IDE5IDFhIDFiIDFjIDFkIDFlIDFmDQo+IA0KPiAJUmVj b3JkIFR5cGUgKDEgYnl0ZSkNCj4gCTE2DQo+IA0KPiBBdXRoIFRhZyAoOCBieXRlcykgLy8gQUVT LUNDTV84DQo+IDAwIDAxIDAyIDAzIDA0IDA1IDA2IDA3DQo+IA0KPiA2ICsgNzggKyA3OCArIDQy ICsgMSArIDggPSAyMTMgYnl0ZXMNCj4gDQo+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiBEVExTIDEuMyBGbGlnaHQgIzMgUFNLICsgRUNE SEUNCj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0NCj4gDQo+IERpZmZlcmVuY2VzIGNvbXBhcmVkIHRvIFJQSyArIEVDREhFDQo+IA0KPiAtIEhh bmRzaGFrZSBNZXNzYWdlIENlcnRpZmljYXRlICg3OCBieXRlcykNCj4gDQo+IC0gSGFuZHNoYWtl IE1lc3NhZ2UgQ2VydGlmaWNhdGUgVmVyaWZ5ICg3OCBieXRlcykNCj4gDQo+IDIxMyAtIDc4IC0g NzggPSA1NyBieXRlcw0KPiANCj4gLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tDQo+IERUTFMgMS4zIEZsaWdodCAjMyBQU0sNCj4gLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gDQo+IERpZmZl cmVuY2VzIGNvbXBhcmVkIHRvIFBTSyArIEVDREhFDQo+IA0KPiBOb25lDQo+IA0KPiA1NyBieXRl cw0KPiANCj4gDQo+IA0KPiANCj4gDQo+IA0KPiANCj4gPT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQo+IERUTFMgMS4zIC0gQ2FjaGVkIGluZm9y bWF0aW9uIFtSRkMgNzkyNF0NCj4gPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09DQo+IA0KPiAtIENhY2hlZCBpbmZvcm1hdGlvbiB0b2dldGhlciB3 aXRoIHNlcnZlciBYLjUwOSBjYW4gYmUgdXNlZCB0byBtb3ZlIGJ5dGVzDQo+IGZyb20gZmxpZ2h0 ICMyIHRvIGZsaWdodCAjMQ0KPiAgIChjYWNoZWQgUlBLIGluY3JlYXNlcyB0aGUgbnVtYmVyIG9m IGJ5dGVzIGNvbXBhcmVkIHRvIGNhY2hlZCBYLjUwOSkNCj4gDQo+IERpZmZlcmVuY2VzIGNvbXBh cmVkIHRvIFJQSyArIEVDREhFDQo+IA0KPiBGbGlnaHQgIzENCj4gDQo+IC0gRXh0ZW5zaW9uIC0g U2VydmVyIENlcnRpZmljYXRlIFR5cGUgKFJhdyBQdWJsaWMgS2V5KSAoNiBieXRlcykNCj4gDQo+ ICsgRXh0ZW5zaW9uIC0gQ2xpZW50IENhc2hlZCBJbmZvcm1hdGlvbiAoMzkgYnl0ZXMpDQo+ICAg MDAgMTkgTEwgTEwgTEwgTEwNCj4gICAwMSAwMCAwMSAwMiAwMyAwNCAwNSAwNiAwNyAwOCAwOSAw YSAwYiAwYyAwZCAwZSAwZiAxMCAxMSAxMiAxMyAxNCAxNSAxNiAxNw0KPiAxOCAxOSAxYSAxYiAx YyAxZCAxZSAxZg0KPiANCj4gMTQ5ICsgMzMgPSAxODIgYnl0ZXMNCj4gDQo+IEZsaWdodCAjMg0K PiANCj4gLSBFeHRlbnNpb24gLSBTZXJ2ZXIgQ2VydGlmaWNhdGUgVHlwZSAoUmF3IFB1YmxpYyBL ZXkpICg2IGJ5dGVzKQ0KPiANCj4gKyBFeHRlbnNpb24gLSBTZXJ2ZXIgQ2FzaGVkIEluZm9ybWF0 aW9uICg3IGJ5dGVzKQ0KPiAgIDAwIDE5IExMIExMIExMIExMIDAxDQo+IA0KPiAtIFNlcnZlciBD ZXJ0aWZpY2F0ZSAoNTkgYnl0ZXMgLT4gMzIgYnl0ZXMpDQo+IA0KPiAzNzMgLSAyNiA9IDM0NyBi eXRlcw0KPiANCj4gPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PQ0KPiA9PT09PT09PT09PT09PQ0KPiBGbGlnaHQgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICMxICAgICAgICAgIzIgICAgICAgICMzICAgICAgIFRvdGFs DQo+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiBEVExTIDEuMyBDYWNoZWQgWC41MDkvUlBLICsg RUNESEUgICAgMTgyICAgICAgICAzNDcgICAgICAgMjEzICAgICAgICA3NDINCj4gRFRMUyAxLjMg UlBLICsgRUNESEUgICAgICAgICAgICAgICAgIDE0OSAgICAgICAgMzczICAgICAgIDIxMyAgICAg ICAgNzM1DQo+ID09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT0NCj4gPT09PT09PT09PT09PT0NCj4gDQo+IA0KPiANCj4gPT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQo+IERUTFMg MS4zIC0gUmVzdW1wdGlvbg0KPiA9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT0NCj4gDQo+IFRvIGVuYWJsZSByZXN1bXB0aW9uLCBhIDR0aCBmbGln aHQgKE5ldyBTZXNzaW9uIFRpY2tldCkgaXMgYWRkZWQNCj4gDQo+IEZsaWdodCAjNCAtIE5ldyBT ZXNzaW9uIFRpY2tldA0KPiANCj4gUmVjb3JkIEhlYWRlciAtIERUTFNDaXBoZXJ0ZXh0LCBGdWxs ICg2IGJ5dGVzKSBISCBFUyBTUyA0MyBMTCBMTA0KPiANCj4gCUhhbmRzaGFrZSBIZWFkZXIgLSBO ZXcgU2Vzc2lvbiBUaWNrZXQgKDEwIGJ5dGVzKQ0KPiAJMDQgTEwgTEwgTEwgU1MgU1MgMDAgMDAg MDAgTEwgTEwgTEwNCj4gDQo+IAkJVGlja2V0IExpZmV0aW1lICg0IGJ5dGVzKQ0KPiAJCTAwIDAx IDAyIDAzDQo+IA0KPiAJCVRpY2tldCBBZ2UgQWRkICg0IGJ5dGVzKQ0KPiAJCTAwIDAxIDAyIDAz DQo+IA0KPiAJCVRpY2tldCBOb25jZSAoMiBieXRlcykNCj4gCQkwMSAwMA0KPiANCj4gCQlUaWNr ZXQgKDYgYnl0ZXMpDQo+IAkJMDAgMDQgSUQgSUQgSUQgSUQNCj4gDQo+IAkJRXh0ZW5zaW9ucyAo MiBieXRlcykNCj4gCQkwMCAwMA0KPiANCj4gQXV0aCBUYWcgKDggYnl0ZXMpIC8vIEFFUy1DQ01f OA0KPiAwMCAwMSAwMiAwMyAwNCAwNSAwNiAwNw0KPiANCj4gNiArIDEwICsgNCArIDQgKyAyICsg NiArIDIgKyA4ID0gNDIgYnl0ZXMNCj4gDQo+IFRoZSByZXN1bXB0aW9uIGhhbmRzaGFrZSBpcyBq dXN0IGEgUFNLIGhhbmRzaGFrZSB3aXRoIDEzNiArIDE1MCArIDU3ID0gMzQzDQo+IGJ5dGVzDQo+ IA0KPiA9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09DQo+ID09PT09PT09PT09PT09DQo+IEZsaWdodCAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIzEgICAgICMyICAgICAjMyAgICAgIzQgICAgVG90YWwNCj4g LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+IERUTFMgMS4zIFJQSyArIEVDREhFICsgTmV3U2Vzc2lv blRpY2tldCAgICAxNDkgICAgMzczICAgIDIxMyAgICAgNDIgICAgICA3NzcNCj4gRFRMUyAxLjMg UFNLIChyZXN1bXB0aW9uKSAgICAgICAgICAgICAgICAgIDEzNiAgICAxNTAgICAgIDU3ICAgICAg ICAgICAgIDM0Mw0KPiA9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09DQo+ID09PT09PT09PT09PT09DQo+IA0KPiANCj4gDQo+ID09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KPiBE VExTIDEuMyAtIENvbm5lY3Rpb24gSUQNCj4gPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09DQo+IA0KPiBXaXRob3V0IGEgQ29ubmVjdGlvbiBJRCB0 aGUgRFRMUyAxLjMgZmxpZ2h0IHNpemVzIGNoYW5nZXMgYXMgZm9sbG93cw0KPiANCj4gRFRMUyAx LjMgRmxpZ2h0ICMxOiAgIC02IGJ5dGVzDQo+IERUTFMgMS4zIEZsaWdodCAjMjogICAtNyBieXRl cw0KPiBEVExTIDEuMyBGbGlnaHQgIzM6ICAgLTEgYnl0ZQ0KPiANCj4gDQo+IA0KPiA9PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 DQo+ID09PT09PT09PT09PT09DQo+IEZsaWdodCAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIzEgICAgICAgICAjMiAgICAgICAgIzMgICAgICAgVG90YWwNCj4gLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tDQo+IERUTFMgMS4zIFJQSyArIEVDREhFIChubyBjaWQpICAgICAgICAxNDMgICAgICAg IDM2NCAgICAgICAyMTIgICAgICAgIDcyMQ0KPiBEVExTIDEuMyBQU0sgKyBFQ0RIRSAobm8gY2lk KSAgICAgICAgMTgwICAgICAgICAxODMgICAgICAgIDU2ICAgICAgICA0MTkNCj4gRFRMUyAxLjMg UFNLIChubyBjaWQpICAgICAgICAgICAgICAgIDEzMCAgICAgICAgMTQzICAgICAgICA1NiAgICAg ICAgMzI5DQo+ID09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT0NCj4gPT09PT09PT09PT09PT0NCj4gDQo+IA0KPiANCj4gDQo+IA0K PiA9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0N Cj4gRFRMUyBSYXcgUHVibGljIEtleXMNCj4gPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09DQo+IA0KPiBTdWJqZWN0UHVibGljS2V5SW5mbyB3aXRo b3V0IHBvaW50IGNvbXByZXNzaW9uDQo+IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+IA0KPiAweDMwIC8vIFNlcXVlbmNlDQo+IDB4NTkgLy8g U2l6ZSA4OQ0KPiANCj4gMHgzMCAvLyBTZXF1ZW5jZQ0KPiAweDEzIC8vIFNpemUgMTkNCj4gMHgw NiAweDA3IDB4MkEgMHg4NiAweDQ4IDB4Q0UgMHgzRCAweDAyIDB4MDEuICAgICAvLyBPSUQgMS4y Ljg0MC4xMDA0NS4yLjENCj4gKGVjUHVibGljS2V5KQ0KPiAweDA2IDB4MDggMHgyQSAweDg2IDB4 NDggMHhDRSAweDNEIDB4MDMgMHgwMSAweDA3IC8vIE9JRA0KPiAxLjIuODQwLjEwMDQ1LjMuMS43 IChzZWNwMjU2cjEpDQo+IA0KPiAweDAzIC8vIEJpdCBzdHJpbmcNCj4gMHg0MiAvLyBTaXplIDY2 DQo+IDB4MDAgLy8gVW51c2VkIGJpdHMgMA0KPiAweDA0IC8vIFVuY29tcHJlc3NlZA0KPiAuLi4u Li4gNjQgYnl0ZXMgWCBhbmQgWQ0KPiANCj4gVG90YWwgb2YgOTEgYnl0ZXMNCj4gDQo+IFN1Ympl Y3RQdWJsaWNLZXlJbmZvIHdpdGggcG9pbnQgY29tcHJlc3Npb24NCj4gLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCj4gDQo+IDB4MzAgLy8gU2Vx dWVuY2UNCj4gMHg1OSAvLyBTaXplIDg5DQo+IA0KPiAweDMwIC8vIFNlcXVlbmNlDQo+IDB4MTMg Ly8gU2l6ZSAxOQ0KPiAweDA2IDB4MDcgMHgyQSAweDg2IDB4NDggMHhDRSAweDNEIDB4MDIgMHgw MS4gICAgIC8vIE9JRCAxLjIuODQwLjEwMDQ1LjIuMQ0KPiAoZWNQdWJsaWNLZXkpDQo+IDB4MDYg MHgwOCAweDJBIDB4ODYgMHg0OCAweENFIDB4M0QgMHgwMyAweDAxIDB4MDcgLy8gT0lEDQo+IDEu Mi44NDAuMTAwNDUuMy4xLjcgKHNlY3AyNTZyMSkNCj4gDQo+IDB4MDMgLy8gQml0IHN0cmluZw0K PiAweDQyIC8vIFNpemUgNjYNCj4gMHgwMCAvLyBVbnVzZWQgYml0cyAwDQo+IDB4MDMgLy8gQ29t cHJlc3NlZA0KPiAuLi4uLi4gMzIgYnl0ZXMgWA0KPiANCj4gVG90YWwgb2YgNTkgYnl0ZXMNCj4g DQo+IA0KPiA9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT0NCj4gSGVscGZ1bCBTb3VyY2VzIG9mIEluZm9ybWF0aW9uDQo+ID09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KPiANCj4gSW4gYWRkaXRp b24gdG8gcmVsZXZhbnQgUkZDcyBhbmQgdGhlIGVzdGltYXRlcyBkb25lIGJ5IEppbSwgdGhlIGZv bGxvd2luZw0KPiByZWZlcmVuY2VzIHdlcmUgaGVscGZ1bDoNCj4gDQo+IEV2ZXJ5IEJ5dGUgRXhw bGFpbmVkOiBUaGUgSWxsdXN0cmF0ZWQgVExTIDEuMyBDb25uZWN0aW9uDQo+IGh0dHBzOi8vdGxz MTMudWxmaGVpbS5uZXQvDQo+IA0KPiBEaWdpdGFsIENlcnRpZmljYXRlcyBmb3IgdGhlIEludGVy bmV0IG9mIFRoaW5ncyBodHRwczovL2t0aC5kaXZhLQ0KPiBwb3J0YWwub3JnL3NtYXNoL2dldC9k aXZhMjoxMTUzOTU4L0ZVTExURVhUMDEucGRmDQo+IA0KPiAvSm9obg0KPiANCj4gDQo+IA0KPiAN Cj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogQmVuamFtaW4gS2FkdWsgPGth ZHVrQG1pdC5lZHU+DQo+IERhdGU6IFNhdHVyZGF5LCAzIE5vdmVtYmVyIDIwMTggYXQgMTU6NTkN Cj4gVG86IEpvaG4gTWF0dHNzb24gPGpvaG4ubWF0dHNzb25AZXJpY3Nzb24uY29tPg0KPiBDYzog InNhbHZhZG9yLnAuZkB1bS5lcyIgPHNhbHZhZG9yLnAuZkB1bS5lcz4sICJhY2VAaWV0Zi5vcmci DQo+IDxhY2VAaWV0Zi5vcmc+DQo+IFN1YmplY3Q6IFJlOiBbQWNlXSBFREhPQyBzdGFuZGFyZGl6 YXRpb24NCj4gDQo+IE9uIEZyaSwgTm92IDAyLCAyMDE4IGF0IDAyOjU1OjU0UE0gKzAwMDAsIEpv aG4gTWF0dHNzb24gd3JvdGU6DQo+ID4gSGkgQmVuamFtaW4sIFNhbHZhZG9yDQo+ID4NCj4gPiBX aGlsZSBEVExTIDEuMyBoYXZlIGRvbmUgYSB2ZXJ5IGdvb2Qgam9iIG9mIGxvd2VyaW5nIHRoZSBv dmVyaGVhZCBvZiB0aGUNCj4gcmVjb3JkIGxheWVyIHdoZW4gYXBwbGljYXRpb24gZGF0YSBpcyBz ZW50IChzZWUgZS5nLg0KPiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1s d2lnLXNlY3VyaXR5LXByb3RvY29sLWNvbXBhcmlzb24tMDEgZm9yIGENCj4gY29tcGFyaXNvbiBi ZXR3ZWVuIGRpZmZlcmVudCBwcm90b2NvbHMpLCBJIGRvIG5vdCB0aGluayB0aGUgaGFuZHNoYWtl IHByb3RvY29sDQo+IGlzIG11Y2ggbGVhbmVyIChpcyBpdCBsZWFuZXIgYXQgYWxsPykuDQo+IA0K PiAoVGhlcmUgYXJlIHNvbWUgaGFuZHNoYWtlIG1lc3NhZ2VzIHRoYXQgYXJlIHJlbW92ZWQgZW50 aXJlbHkuKQ0KPiANCj4gPiBXZSB0cmllZCB0byBtYWtlIGFuIGZhaXIgY29tcGFyaXNvbiBiZXR3 ZWVuIEVESE9DIGFuZCBUTFMgMS4zIGluIHRoZQ0KPiBwcmVzZW50YXRpb24gYXQgSUVURiAxMDEg KHNlZQ0KPiBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL21lZXRpbmcvMTAxL21hdGVyaWFs cy9zbGlkZXMtMTAxLWFjZS1rZXktDQo+IGV4Y2hhbmdlLXctb3Njb3JlLTAwKS4gU2luY2UgdGhl biwgd2UgaGF2ZSBzaWduaWZpY2FudGx5IG9wdGltaXplZCB0aGUNCj4gZW5jb2RpbmcgaW4gRURI T0MgYW5kIHRoZSB1cGNvbWluZyB2ZXJzaW9uICgtMTEpIGlzIGV4cGVjdGVkIHRvIGhhdmUgdGhl DQo+IGZvbGxvd2luZyBtZXNzYWdlIHNpemVzLg0KPiA+DQo+ID4gICAgQXV0aC4gICAgICAgICAg ICAgICBQU0sgICAgICAgUlBLICAgICAgIHg1dCAgICAgeDVjaGFpbg0KPiA+ICAgIC0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tDQo+ID4gICAgRURIT0MgbWVzc2FnZV8xICAgICAgNDMgICAgICAgIDM4ICAgICAgICAzOCAg ICAgICAgMzgNCj4gPiAgICBFREhPQyBtZXNzYWdlXzIgICAgICA0NyAgICAgICAxMjEgICAgICAg MTI3ICAgICAgIDExNyArIENlcnRpZmljYXRlIGNoYWluDQo+ID4gICAgRURIT0MgbWVzc2FnZV8z ICAgICAgMTIgICAgICAgIDg2ICAgICAgICA5MiAgICAgICAgODIgKyBDZXJ0aWZpY2F0ZSBjaGFp bg0KPiA+ICAgIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tDQo+ID4gICAgVG90YWwgICAgICAgICAgICAgICAxMDIgICAg ICAgMjQ1ICAgICAgIDI1NyAgICAgICAyMzcgKyBDZXJ0aWZpY2F0ZSBjaGFpbnMNCj4gPg0KPiA+ IEFzIFNhbHZhZG9yIHdyaXRlcywgdGhlIGhhbmRzaGFrZXMgaW4gVExTIDEuMyBhbmQgRFRMUyAx LjMgYXJlIGJhc2ljYWxseSB0aGUNCj4gc2FtZSwgc28gdGhlIG51bWJlcnMgcHJlc2VudGVkIGF0 IElFVEYgMTAxIHNob3VsZCBiZSBhIGdvb2QgZXN0aW1hdGUgYWxzbyBmb3INCj4gRFRMUyAxLjMu DQo+ID4NCj4gPiAgICBBdXRoLiAgICAgICAgICAgICAgICBQU0sgICAgICAgUlBLDQo+ID4gICAg LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0NCj4gPiAgICAoRClUTFMgbWVzc2FnZV8xICAgICAxNDIgICAgICAgMTA3DQo+ ID4gICAgKEQpVExTIG1lc3NhZ2VfMiAgICAgMTM1ICAgICAgIDI2NA0KPiA+ICAgIChEKVRMUyBt ZXNzYWdlXzMgICAgICA1MSAgICAgICAxNjcNCj4gPiAgICAtLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KPiA+ICAgIFRv dGFsICAgICAgICAgICAgICAgIDMyOCAgICAgICA1MzgNCj4gDQo+IFRoYW5rcyBmb3IgdGhlIG51 bWJlcnMhDQo+IA0KPiA+IFRoZSBudW1iZXJzIGFib3ZlIGluY2x1ZGUgRUNESEUuIEZvciBoYW5k c2hha2UgbWVzc2FnZXMsIG15DQo+IHVuZGVyc3RhbmRpbmcgaXMgdGhhdCB0aGUgRFRMUyAxLjMg YW5kIFRMUyAxLjMgcmVjb3JkIGxheWVyIGhhdmUgZXhhY3RseSB0aGUNCj4gc2FtZSBzaXplLg0K PiANCj4gVGhlIERUTFMgMS4zIG9uZXMgd2lsbCBiZSB3b3JzZSwgZHVlIHRvIHRoZSBlcG9jaCBh bmQgc2VxdWVuY2UgbnVtYmVyIGZpZWxkcy4NCj4gDQo+IC1CZW4NCj4gDQo+IF9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IEFjZSBtYWlsaW5nIGxpc3QN Cj4gQWNlQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8v YWNlDQoNCg0K From nobody Thu Nov 22 07:43:31 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1573129A87; Thu, 22 Nov 2018 07:43:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.988 X-Spam-Level: X-Spam-Status: No, score=-1.988 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_FREEMAIL_DOC_PDF=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tyZfHFLwsY0s; Thu, 22 Nov 2018 07:43:16 -0800 (PST) Received: from mail-it1-x132.google.com (mail-it1-x132.google.com [IPv6:2607:f8b0:4864:20::132]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2B0581292AD; Thu, 22 Nov 2018 07:43:13 -0800 (PST) Received: by mail-it1-x132.google.com with SMTP id b5so14389332iti.2; Thu, 22 Nov 2018 07:43:13 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=subject:to:cc:references:from:message-id:date:user-agent :mime-version:in-reply-to:content-language; bh=+arMHzU4pI14pJti5dYKi5juYxUkL/B3uRXYOxlBM9Q=; b=AkYHSfzxlFCkY18lxncLjvZpsB5TSzSMuSCBd6MqfK9nSOjqx3yTgg/Zcv+LvU4dyR 5KtkzYA+pXtJxMzjNiA68UlukBfJA72hSvofB/x4KQ85T1H+CheNIAfl6VrFcVCm2G+q xYOZRkAwEMLCMV/x0UJN+J0VpFKwBDeT7bU682vg7ZDTOL61SGqTxaVCovl50cCTFTXh lufjolylvp2Sa/ht6p2Id7TvTehRgyuEbD+IUHSaH8zfDS/cWyC4IXXZ148Xs0EWRdX/ ueSpSj4ziy6A9uXwomqKctVEtWEfav3k4UXkj3qAxeofnVJ/6fEbzokPgmpd8oTpUvCg 1hxg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:cc:references:from:message-id:date :user-agent:mime-version:in-reply-to:content-language; bh=+arMHzU4pI14pJti5dYKi5juYxUkL/B3uRXYOxlBM9Q=; b=qBqbpdlorRhd9DP0tlqLRrc6RMTZgwEEaIXKBkqrCxoLhP1g+Jro2rrmmqYpbzs4mw g1hZU/83ySDuUWV6Oj/9qyA67dZ7+OUrZEIvtOrGYC2lLggtCz5sdqyumKUZ/QP8KDuc 8+5z8qhrvB6DTQLmlFQhDOkjXMKBISyN1fUMW0CQFcstgMxDBBhoG42XZXak6C438N4n QgMSTk9yM8/qfWwqVG319hmpiu2mgTHp15n4ambAeg98U0oD5n7g5fF884dsqTCHkUU5 QhWF8bmKWXZSFWmZu6UbzLGkDSuv44ITBuq2uVaEkG9//g4wgv7scJMervtrfh9aG7Ae DDzw== X-Gm-Message-State: AA+aEWZKRuWnyMrReW1eIVVDV+wfK/bNAGIvveFNlvzqpw4QNtuenwAd UafHS2wmeglOpxlkxsCjzgY= X-Google-Smtp-Source: AJdET5fD6/kP5ZFTbEdAuNGWx5bFSRwuN04YMZn9ZY3GnhivA9O292/f5y0GDuYxFwHO4vDZ+Ju+Zw== X-Received: by 2002:a24:2716:: with SMTP id g22mr9137266ita.40.1542901390716; Thu, 22 Nov 2018 07:43:10 -0800 (PST) Received: from ?IPv6:2607:fea8:69f:f5eb:fc5f:12b:d173:619a? ([2607:fea8:69f:f5eb:fc5f:12b:d173:619a]) by smtp.gmail.com with ESMTPSA id o69-v6sm2082081itb.4.2018.11.22.07.43.08 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 22 Nov 2018 07:43:09 -0800 (PST) To: John Mattsson , Jim Schaad , "ace@ietf.org" , "lwip@ietf.org" Cc: 'Benjamin Kaduk' , "salvador.p.f@um.es" References: <20181103145857.GG54966@kduck.kaduk.org> <7F78CC92-5C48-4BFC-8087-E25D4D95A74F@ericsson.com> <000001d481ae$57cd4530$0767cf90$@augustcellars.com> From: Rene Struik Message-ID: <8155ccb8-6b44-cd49-caae-8915ef0cef7d@gmail.com> Date: Thu, 22 Nov 2018 10:43:05 -0500 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.9.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/mixed; boundary="------------E2024E14D7CE370FAF0DB3B9" Content-Language: en-US Archived-At: Subject: [Ace] (protocol flows) Re: [Lwip] EDHOC standardization X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Nov 2018 15:43:23 -0000 This is a multi-part message in MIME format. --------------E2024E14D7CE370FAF0DB3B9 Content-Type: multipart/alternative; boundary="------------7DC32BE31B967D5CF3F7C49C" --------------7DC32BE31B967D5CF3F7C49C Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Hi John: When comparing protocols, it would be useful to protocol flows optimization, as follows: a) optimized for parallelized online computations; b) optimized for minimization of message flows. See also slide 6 of my CFRG-83 presentation of March 30, 2012 (slides-83-cfrg-05 attached; I could not find CFRG records online). The current draft-selander-ace-cose-ecdhe-10 document considers optimization b), which minimizes the number of message flows, but does require each party to compute the shared key consecutively, rather than in parallel (as in optimization a). With option a), if one really wishes to squeeze as much info into a 128-octet datagram, one can already send A's ephemeral ECDSA signature key in message flow 1, thereby cutting down the size of the second message flow of the Sigma protocol depicted in Fig. 1 (https://tools.ietf.org/html/draft-selander-ace-cose-ecdhe-10#page-11) by 32 octets. This tackles the 120-octet byte count for the second flow of Fig. 1 quite simply, while leading to a 4-pass protocol flow (with roughly 70/70/55/55 bytes in flows 1/2/3/4). Obviously, this presents a trade-off, but quite well be worth it in settings where online key computations are quite slow on some platforms and where scheduling (e.g., with TSCH) can now be done with less consideration of the individual computational capabilities of devices (since now one does not need to build-in a worst-case 2 x "key computation back-off" for least capable devices, but can just use the 1x contingency for this). The parallel version is depicted below. Party U Party V | C_U, X_U, ALG_1, UAD_1, R_Sig(U;...) | +--------------------------------------------------------------------->| | message_1 | | | | C_U, C_V, X_V, ALG_2, R_Sig(V; ...) | |<---------------------------------------------------------------------+ | message_2 | | | | S_U, AEAD(K_3; ID_CRED_U, s_Sig(U; CRED_U, aad_3), PAD_3) | +--------------------------------------------------------------------->+ | message_3 | | | | S_V, AEAD(K_2; ID_CRED_V, s_Sig(V; CRED_V, aad_2), UAD_2)| | +<---------------------------------------------------------------------| | message_4 | ============================================================================== Flight #1 #2 #3 #4 Total ------------------------------------------------------------------------------ DTLS 1.3 RPK + ECDHE 143 364 212 - 721 TLS 1.3 RPK + ECDHE 129 322 194 - 645 EDHOC RPK + ECDHE 37 120 85 - 242 --> EDHOC parallel flow 70 70 55 55 250 On 11/22/2018 7:23 AM, John Mattsson wrote: > Hi Jim, > >> In the analysis that I did I very deliberately used TLS not DTLS. The main reason for using DTLS is because one is operating in the UDP environment and one cannot have reliable in order delivery. Since EDHOC is being built on top of CoAP, one can use CoAP to create reliable in order delivery. Thus, the extra bytes that DTLS has to deal with this are not needed. > I started with DTLS as that was what was discussion between Salvador and Benjamin. Below are numbers for TLS 1.3. Changes compared to DTLS 1.3 are that the record header is smaller, handshake headers are smaller, and that Connection ID is not supported in TLS 1.3. The numbers I get for TLS 1.3 are overall slightly bigger than the numbers in your estimate (but for PSK Flight #3 I get slightly smaller numbers). I think the difference is due to many smaller things like handshake headers and fields in the certificate structure that adds up. I plan to add TLS 1.3 numbers to draft-ietf-lwig-security-protocol-comparison as well. > > I agree with your comment Jim. Just now, I am just trying to count the number of bytes of the security protocol. To do a fair comparison, you have to choose a specific deployment and look at the topology, the whole protocol stack, frame sizes (e.g. 128 bytes), how and where in the protocol stack fragmentation is done, and the expected packet loss. There is ongoing work on such simulations for 6tisch. Fragmentation and/or packet loss lead to the total number of bytes in the table below has to be multiplied by some linear factor. And as more bytes often lead to increased packet loss, you often see a non-linear relation between logical number of bytes on the transport/application layer as shown in the table below and physical number of bytes and/or time from completion of the protocol. Any realistic comparison over constrained radio would make the difference between TLS 1.3 and EDHOC larger. A problem with TLS is that it does not support Connection ID. > > TLS Assumptions: > - Minimum number of algorithms and cipher suites offered > - Curve25519, ECDSA with P-256, AES-CCM_8, SHA-256 > - Length of key identifiers: 4 bytes > - TLS RPK with point compression (saves 32 bytes) > - Only mandatory TLS extentions > > ============================================================================== > Flight #1 #2 #3 Total > ------------------------------------------------------------------------------ > DTLS 1.3 RPK + ECDHE 143 364 212 721 > TLS 1.3 RPK + ECDHE 129 322 194 645 > EDHOC RPK + ECDHE 37 120 85 242 > ------------------------------------------------------------------------------ > DTLS 1.3 PSK + ECDHE 180 183 56 419 > TLS 1.3 PSK + ECDHE 166 157 50 373 > EDHOC PSK + ECDHE 42 46 11 99 > ------------------------------------------------------------------------------ > DTLS 1.3 PSK 130 143 56 329 > TLS 1.3 PSK 116 117 50 283 > ============================================================================== > Number of bytes (No connection ID) > > Below is detailed information about the different flights: > > ====================================================== > TLS 1.3 Flight #1 RPK + ECDHE > ====================================================== > > Record Header - TLSPlaintext (5 bytes) > 16 03 03 LL LL > > Handshake Header - Client Hello (4 bytes) > 01 LL LL LL > > Legacy Version (2 bytes) > 03 03 > > Client Random (32 bytes) > 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f > > Legacy Session ID (1 bytes) > 00 > > Cipher Suites (TLS_AES_128_CCM_8_SHA256) (4 bytes) > 00 02 13 05 > > Compression Methods (null) (2 bytes) > 01 00 > > Extensions Length (2 bytes) > LL LL > > Extension - Supported Groups (x25519) (8 bytes) > 00 0a 00 04 00 02 00 1d > > Extension - Signature Algorithms (ecdsa_secp256r1_sha256) (8 bytes) > 00 0d 00 04 00 02 08 07 > > Extension - Key Share (42 bytes) > 00 33 00 26 00 24 00 1d 00 20 > 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f > > Extension - Supported Versions (1.3) (7 bytes) > 00 2b 00 03 02 03 04 > > Extension - Client Certificate Type (Raw Public Key) (6 bytes) > 00 13 00 01 01 02 > > Extension - Server Certificate Type (Raw Public Key) (6 bytes) > 00 14 00 01 01 02 > > 5 + 4 + 2 + 32 + 1 + 4 + 2 + 2 + 8 + 8 + 42 + 7 + 6 + 6 = 129 bytes > > ------------------------------------------------------ > TLS 1.3 Flight #1 PSK + ECDHE > ------------------------------------------------------ > > Differences compared to RPK + ECDHE > > + Extension - PSK Key Exchange Modes (6 bytes) > 00 2d 00 02 01 01 > > + Extension - Pre Shared Key (51 bytes) > 00 29 00 2F > 00 0a 00 04 ID ID ID ID 00 00 00 00 > 00 21 20 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f > > - Extension - Signature Algorithms (ecdsa_secp256r1_sha256) (8 bytes) > > - Extension - Client Certificate Type (Raw Public Key) (6 bytes) > > - Extension - Server Certificate Type (Raw Public Key) (6 bytes) > > 129 + 6 + 51 - 8 - 6 - 6 = 166 bytes > > ------------------------------------------------------ > TLS 1.3 Flight #1 PSK > ------------------------------------------------------ > > Differences compared to PSK + ECDHE > > - Extension - Supported Groups (x25519) (8 bytes) > > - Extension - Key Share (42 bytes) > > 166 - 8 - 42 = 116 bytes > > > > ====================================================== > TLS 1.3 Flight #2 RPK + ECDHE > ====================================================== > > Record Header - TLSPlaintext (5 bytes) > 16 03 03 LL LL > > Handshake Header - Server Hello (4 bytes) > 02 LL LL LL > > Legacy Version (2 bytes) > fe fd > > Server Random (32 bytes) > 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f > > Legacy Session ID (1 bytes) > 00 > > Cipher Suite (TLS_AES_128_CCM_8_SHA256) (2 bytes) > 13 05 > > Compression Method (null) (1 bytes) > 00 > > Extensions Length (2 bytes) > LL LL > > Extension - Key Share (40 bytes) > 00 33 00 24 00 1d 00 20 > 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f > > Extension - Supported Versions (1.3) (6 bytes) > 00 2b 00 02 03 04 > > Record Header - TLSCiphertext (5 bytes) > 17 03 03 LL LL > > Handshake Header - Encrypted Extensions (4 bytes) > 08 LL LL LL > > Extensions Length (2 bytes) > LL LL > > Extension - Client Certificate Type (Raw Public Key) (6 bytes) > 00 13 00 01 01 02 > > Extension - Server Certificate Type (Raw Public Key) (6 bytes) > 00 14 00 01 01 02 > > Handshake Header - Certificate Request (4 bytes) > 0d LL LL LL > > Request Context (1 bytes) > 00 > > Extensions Length (2 bytes) > LL LL > > Extension - Signature Algorithms (ecdsa_secp256r1_sha256) (8 bytes) > 00 0d 00 04 00 02 08 07 > > Handshake Header - Certificate (4 bytes) > 0b LL LL LL > > Request Context (1 bytes) > 00 > > Certificate List Length (3 bytes) > LL LL LL > > Certificate Length (3 bytes) > LL LL LL > > Certificate (59 bytes) // Point compression > .... > > Certificate Extensions (2 bytes) > 00 00 > > Handshake Header - Certificate Verify (4 bytes) > 0f LL LL LL > > Signature (68 bytes) > ZZ ZZ 00 40 .... > > Handshake Header - Finished (4 bytes) > 14 LL LL LL > > Verify Data (32 bytes) > 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f > > Record Type (1 byte) > 16 > > Auth Tag (8 bytes) > e0 8b 0e 45 5a 35 0a e5 > > 5 + 90 + 5 + 18 + 15 + 72 + 72 + 36 + 1 + 8 = 322 bytes > > ------------------------------------------------------ > TLS 1.3 Flight #2 PSK + ECDHE > ------------------------------------------------------ > > Differences compared to RPK + ECDHE > > - Handshake Message Certificate (72 bytes) > > - Handshake Message CertificateVerify (72 bytes) > > - Handshake Message CertificateRequest (15 bytes) > > - Extension - Client Certificate Type (Raw Public Key) (6 bytes) > > - Extension - Server Certificate Type (Raw Public Key) (6 bytes) > > + Extension - Pre Shared Key (6 bytes) > 00 29 00 02 00 00 > > 322 - 72 - 72 - 15 - 6 - 6 + 6 = 157 bytes > > ------------------------------------------------------ > TLS 1.3 Flight #2 PSK > ------------------------------------------------------ > > Differences compared to PSK + ECDHE > > - Extension - Key Share (40 bytes) > > 157 - 40 = 117 bytes > > > > ====================================================== > TLS 1.3 Flight #3 RPK + ECDHE > ====================================================== > > Record Header - TLSCiphertext (5 bytes) > 17 03 03 LL LL > > Handshake Header - Certificate (4 bytes) > 0b LL LL LL > > Request Context (1 bytes) > 00 > > Certificate List Length (3 bytes) > LL LL LL > > Certificate Length (3 bytes) > LL LL LL > > Certificate (59 bytes) // Point compression > .... > > Certificate Extensions (2 bytes) > 00 00 > > Handshake Header - Certificate Verify (4 bytes) > 0f LL LL LL > > Signature (68 bytes) > 04 03 LL LL //ecdsa_secp256r1_sha256 > 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f > 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f > > Handshake Header - Finished (4 bytes) > 14 LL LL LL > > Verify Data (32 bytes) // SHA-256 > 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f > > Record Type (1 byte) > 16 > > Auth Tag (8 bytes) // AES-CCM_8 > 00 01 02 03 04 05 06 07 > > 5 + 72 + 72 + 36 + 1 + 8 = 194 bytes > > ------------------------------------------------------ > TLS 1.3 Flight #3 PSK + ECDHE > ----------------------------------------------------- > > Differences compared to RPK + ECDHE > > - Handshake Message Certificate (72 bytes) > > - Handshake Message Certificate Verify (72 bytes) > > 194 - 72 - 72 = 50 bytes > > ------------------------------------------------------ > TLS 1.3 Flight #3 PSK > ----------------------------------------------------- > > Differences compared to PSK + ECDHE > > None > > 50 bytes > > > -----Original Message----- > From: Jim Schaad > Date: Wednesday, 21 November 2018 at 16:25 > To: John Mattsson , "ace@ietf.org" , "lwip@ietf.org" > Cc: 'Benjamin Kaduk' , "salvador.p.f@um.es" > Subject: RE: [Ace] EDHOC standardization > > John, > > In the analysis that I did I very deliberately used TLS not DTLS. The main reason for using DTLS is because one is operating in the UDP environment and one cannot have reliable in order delivery. Since EDHOC is being built on top of CoAP, one can use CoAP to create reliable in order delivery. Thus the extra bytes that DTLS has to deal with this are not needed. > > Jim > > >> -----Original Message----- >> From: Ace On Behalf Of John Mattsson >> Sent: Wednesday, November 21, 2018 7:03 AM >> To: ace@ietf.org; lwip@ietf.org >> Cc: Benjamin Kaduk ; salvador.p.f@um.es >> Subject: Re: [Ace] EDHOC standardization >> >> Hi all, >> >> Inspired by the discussion in this thread, I did more detailed calculations of the >> number of bytes when DTLS 1.3 is used for typical IoT use cases (PSK, RPK, >> Connection ID). The plan is to add this information to draft-ietf-lwig-security- >> protocol-comparison as this has been requested by several people. I think some >> bytes were missing in the earlier estimates for TLS 1.3, and as Ben commented, >> DTLS 1.3 adds some bytes compared to TLS 1.3. >> >> ================================================================ >> ============== >> Flight #1 #2 #3 Total >> ------------------------------------------------------------------------------ >> DTLS 1.3 RPK + ECDHE 149 373 213 735 >> DTLS 1.3 PSK + ECDHE 186 190 57 433 >> DTLS 1.3 PSK 136 150 57 343 >> ------------------------------------------------------------------------------ >> EDHOC RPK + ECDHE 38 121 86 245 >> EDHOC PSK + ECDHE 43 47 12 102 >> ================================================================ >> ============== >> Number of bytes >> >> Assumptions: >> - Minimum number of algorithms and cipher suites offered >> - Curve25519, ECDSA with P-256, AES-CCM_8, SHA-256 >> - Length of key identifiers: 4 bytes >> - Connection identifiers: 1 byte >> - The DTLS RPKs use point compression (saves 32 bytes) >> - No DTLS handshake message fragmentation >> - Only mandatory DTLS extentions, except for connection ID >> - Version 30 https://tools.ietf.org/html/draft-ietf-tls-dtls13-30 >> >> (EDHOC numbers are for the soon to be published -11 version with cipher >> suites) >> >> I hope this information is useful for people. Please comment if I missed >> something or if you have any suggestion of things to add or how to present >> things. I do not know currently how these numbers compare to DTLS 1.2. >> >> Below is detailed information about where the byte in different flights as well >> as the RPKs (SubjectPublicKeyInfo). Most of the bytes should have the correct >> value, but most of the length fields are just written as LL LL LL. Below is also >> information about how resumption, cached information [RFC 7924], and not >> using Connection ID affects the number of bytes. >> >> >> ====================================================== >> DTLS 1.3 Flight #1 RPK + ECDHE >> ====================================================== >> >> Record Header - DTLSPlaintext (13 bytes) >> 16 fe fd EE EE SS SS SS SS SS SS LL LL >> >> Handshake Header - Client Hello (10 bytes) >> 01 LL LL LL SS SS 00 00 00 LL LL LL >> >> Legacy Version (2 bytes) >> fe fd >> >> Client Random (32 bytes) >> 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 >> 15 16 17 18 19 1a 1b 1c 1d 1e 1f >> >> Legacy Session ID (1 bytes) >> 00 >> >> Cipher Suites (TLS_AES_128_CCM_8_SHA256) (4 bytes) >> 00 02 13 05 >> >> Compression Methods (null) (2 bytes) >> 01 00 >> >> Extensions Length (2 bytes) >> LL LL >> >> Extension - Supported Groups (x25519) (8 bytes) >> 00 0a 00 04 00 02 00 1d >> >> Extension - Signature Algorithms >> (ecdsa_secp256r1_sha256) (8 bytes) >> 00 0d 00 04 00 02 08 07 >> >> Extension - Key Share (42 bytes) >> 00 33 00 26 00 24 00 1d 00 20 >> 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 >> 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f >> >> Extension - Supported Versions (1.3) (7 bytes) >> 00 2b 00 03 02 03 04 >> >> Extension - Client Certificate Type (Raw Public Key) (6 >> bytes) >> 00 13 00 01 01 02 >> >> Extension - Server Certificate Type (Raw Public Key) (6 >> bytes) >> 00 14 00 01 01 02 >> >> Extension - Connection Identifier (43) (6 bytes) >> XX XX 00 02 01 42 >> >> 13 + 10 + 2 + 32 + 1 + 4 + 2 + 2 + 8 + 8 + 42 + 7 + 6 + 6 + 6 = 149 bytes >> >> ------------------------------------------------------ >> DTLS 1.3 Flight #1 PSK + ECDHE >> ------------------------------------------------------ >> >> Differences compared to RPK + ECDHE >> >> + Extension - PSK Key Exchange Modes (6 bytes) >> 00 2d 00 02 01 01 >> >> + Extension - Pre Shared Key (51 bytes) >> 00 29 00 2F >> 00 0a 00 04 ID ID ID ID 00 00 00 00 >> 00 21 20 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 >> 16 17 18 19 1a 1b 1c 1d 1e 1f >> >> - Extension - Signature Algorithms (ecdsa_secp256r1_sha256) (8 bytes) >> >> - Extension - Client Certificate Type (Raw Public Key) (6 bytes) >> >> - Extension - Server Certificate Type (Raw Public Key) (6 bytes) >> >> 149 + 6 + 51 - 8 - 6 - 6 = 186 bytes >> >> ------------------------------------------------------ >> DTLS 1.3 Flight #1 PSK >> ------------------------------------------------------ >> >> Differences compared to PSK + ECDHE >> >> - Extension - Supported Groups (x25519) (8 bytes) >> >> - Extension - Key Share (42 bytes) >> >> 186 - 8 - 42 = 136 bytes >> >> >> >> ====================================================== >> DTLS 1.3 Flight #2 RPK + ECDHE >> ====================================================== >> >> Record Header - DTLSPlaintext (13 bytes) >> 16 fe fd EE EE SS SS SS SS SS SS LL LL >> >> Handshake Header - Server Hello (10 bytes) >> 02 LL LL LL SS SS 00 00 00 LL LL LL >> >> Legacy Version (2 bytes) >> fe fd >> >> Server Random (32 bytes) >> 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 >> 15 16 17 18 19 1a 1b 1c 1d 1e 1f >> >> Legacy Session ID (1 bytes) >> 00 >> >> Cipher Suite (TLS_AES_128_CCM_8_SHA256) (2 bytes) >> 13 05 >> >> Compression Method (null) (1 bytes) >> 00 >> >> Extensions Length (2 bytes) >> LL LL >> >> Extension - Key Share (40 bytes) >> 00 33 00 24 00 1d 00 20 >> 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 >> 12 13 14 15 16 17 18 19 1a 1b 1c 1d 1e 1f >> >> Extension - Supported Versions (1.3) (6 bytes) >> 00 2b 00 02 03 04 >> >> Extension - Connection Identifier (43) (6 bytes) >> XX XX 00 02 01 43 >> >> Record Header - DTLSCiphertext, Full (6 bytes) HH ES SS 43 LL LL >> >> Handshake Header - Encrypted Extensions (10 bytes) >> 08 LL LL LL SS SS 00 00 00 LL LL LL >> >> Extensions Length (2 bytes) >> LL LL >> >> Extension - Client Certificate Type (Raw Public Key) (6 >> bytes) >> 00 13 00 01 01 02 >> >> Extension - Server Certificate Type (Raw Public Key) (6 >> bytes) >> 00 14 00 01 01 02 >> >> Handshake Header - Certificate Request (10 bytes) >> 0d LL LL LL SS SS 00 00 00 LL LL LL >> >> Request Context (1 bytes) >> 00 >> >> Extensions Length (2 bytes) >> LL LL >> >> Extension - Signature Algorithms >> (ecdsa_secp256r1_sha256) (8 bytes) >> 00 0d 00 04 00 02 08 07 >> >> Handshake Header - Certificate (10 bytes) >> 0b LL LL LL SS SS 00 00 00 LL LL LL >> >> Request Context (1 bytes) >> 00 >> >> Certificate List Length (3 bytes) >> LL LL LL >> >> Certificate Length (3 bytes) >> LL LL LL >> >> Certificate (59 bytes) // Point compression >> .... >> >> Certificate Extensions (2 bytes) >> 00 00 >> >> Handshake Header - Certificate Verify (10 bytes) >> 0f LL LL LL SS SS 00 00 00 LL LL LL >> >> Signature (68 bytes) >> ZZ ZZ 00 40 .... >> >> Handshake Header - Finished (10 bytes) >> 14 LL LL LL SS SS 00 00 00 LL LL LL >> >> Verify Data (32 bytes) >> 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 >> 15 16 17 18 19 1a 1b 1c 1d 1e 1f >> >> Record Type (1 byte) >> 16 >> >> Auth Tag (8 bytes) >> e0 8b 0e 45 5a 35 0a e5 >> >> 13 + 102 + 6 + 24 + 21 + 78 + 78 + 42 + 1 + 8 = 373 bytes >> >> ------------------------------------------------------ >> DTLS 1.3 Flight #2 PSK + ECDHE >> ------------------------------------------------------ >> >> Differences compared to RPK + ECDHE >> >> - Handshake Message Certificate (78 bytes) >> >> - Handshake Message CertificateVerify (78 bytes) >> >> - Handshake Message CertificateRequest (21 bytes) >> >> - Extension - Client Certificate Type (Raw Public Key) (6 bytes) >> >> - Extension - Server Certificate Type (Raw Public Key) (6 bytes) >> >> + Extension - Pre Shared Key (6 bytes) >> 00 29 00 02 00 00 >> >> 373 - 78 - 78 - 21 - 6 - 6 + 6 = 190 bytes >> >> ------------------------------------------------------ >> DTLS 1.3 Flight #2 PSK >> ------------------------------------------------------ >> >> Differences compared to PSK + ECDHE >> >> - Extension - Key Share (40 bytes) >> >> 190 - 40 = 150 bytes >> >> >> >> ====================================================== >> DTLS 1.3 Flight #3 RPK + ECDHE >> ====================================================== >> >> Record Header (6 bytes) // DTLSCiphertext, Full ZZ ES SS 42 LL LL >> >> Handshake Header - Certificate (10 bytes) >> 0b LL LL LL SS SS XX XX XX LL LL LL >> >> Request Context (1 bytes) >> 00 >> >> Certificate List Length (3 bytes) >> LL LL LL >> >> Certificate Length (3 bytes) >> LL LL LL >> >> Certificate (59 bytes) // Point compression >> .... >> >> Certificate Extensions (2 bytes) >> 00 00 >> >> Handshake Header - Certificate Verify (10 bytes) >> 0f LL LL LL SS SS 00 00 00 LL LL LL >> >> Signature (68 bytes) >> 04 03 LL LL //ecdsa_secp256r1_sha256 >> 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 >> 15 16 17 18 19 1a 1b 1c 1d 1e 1f >> 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 >> 15 16 17 18 19 1a 1b 1c 1d 1e 1f >> >> Handshake Header - Finished (10 bytes) >> 14 LL LL LL SS SS 00 00 00 LL LL LL >> >> Verify Data (32 bytes) // SHA-256 >> 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 >> 15 16 17 18 19 1a 1b 1c 1d 1e 1f >> >> Record Type (1 byte) >> 16 >> >> Auth Tag (8 bytes) // AES-CCM_8 >> 00 01 02 03 04 05 06 07 >> >> 6 + 78 + 78 + 42 + 1 + 8 = 213 bytes >> >> ------------------------------------------------------ >> DTLS 1.3 Flight #3 PSK + ECDHE >> ----------------------------------------------------- >> >> Differences compared to RPK + ECDHE >> >> - Handshake Message Certificate (78 bytes) >> >> - Handshake Message Certificate Verify (78 bytes) >> >> 213 - 78 - 78 = 57 bytes >> >> ------------------------------------------------------ >> DTLS 1.3 Flight #3 PSK >> ----------------------------------------------------- >> >> Differences compared to PSK + ECDHE >> >> None >> >> 57 bytes >> >> >> >> >> >> >> >> ====================================================== >> DTLS 1.3 - Cached information [RFC 7924] >> ====================================================== >> >> - Cached information together with server X.509 can be used to move bytes >> from flight #2 to flight #1 >> (cached RPK increases the number of bytes compared to cached X.509) >> >> Differences compared to RPK + ECDHE >> >> Flight #1 >> >> - Extension - Server Certificate Type (Raw Public Key) (6 bytes) >> >> + Extension - Client Cashed Information (39 bytes) >> 00 19 LL LL LL LL >> 01 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f 10 11 12 13 14 15 16 17 >> 18 19 1a 1b 1c 1d 1e 1f >> >> 149 + 33 = 182 bytes >> >> Flight #2 >> >> - Extension - Server Certificate Type (Raw Public Key) (6 bytes) >> >> + Extension - Server Cashed Information (7 bytes) >> 00 19 LL LL LL LL 01 >> >> - Server Certificate (59 bytes -> 32 bytes) >> >> 373 - 26 = 347 bytes >> >> ================================================================ >> ============== >> Flight #1 #2 #3 Total >> ------------------------------------------------------------------------------ >> DTLS 1.3 Cached X.509/RPK + ECDHE 182 347 213 742 >> DTLS 1.3 RPK + ECDHE 149 373 213 735 >> ================================================================ >> ============== >> >> >> >> ====================================================== >> DTLS 1.3 - Resumption >> ====================================================== >> >> To enable resumption, a 4th flight (New Session Ticket) is added >> >> Flight #4 - New Session Ticket >> >> Record Header - DTLSCiphertext, Full (6 bytes) HH ES SS 43 LL LL >> >> Handshake Header - New Session Ticket (10 bytes) >> 04 LL LL LL SS SS 00 00 00 LL LL LL >> >> Ticket Lifetime (4 bytes) >> 00 01 02 03 >> >> Ticket Age Add (4 bytes) >> 00 01 02 03 >> >> Ticket Nonce (2 bytes) >> 01 00 >> >> Ticket (6 bytes) >> 00 04 ID ID ID ID >> >> Extensions (2 bytes) >> 00 00 >> >> Auth Tag (8 bytes) // AES-CCM_8 >> 00 01 02 03 04 05 06 07 >> >> 6 + 10 + 4 + 4 + 2 + 6 + 2 + 8 = 42 bytes >> >> The resumption handshake is just a PSK handshake with 136 + 150 + 57 = 343 >> bytes >> >> ================================================================ >> ============== >> Flight #1 #2 #3 #4 Total >> ------------------------------------------------------------------------------ >> DTLS 1.3 RPK + ECDHE + NewSessionTicket 149 373 213 42 777 >> DTLS 1.3 PSK (resumption) 136 150 57 343 >> ================================================================ >> ============== >> >> >> >> ====================================================== >> DTLS 1.3 - Connection ID >> ====================================================== >> >> Without a Connection ID the DTLS 1.3 flight sizes changes as follows >> >> DTLS 1.3 Flight #1: -6 bytes >> DTLS 1.3 Flight #2: -7 bytes >> DTLS 1.3 Flight #3: -1 byte >> >> >> >> ================================================================ >> ============== >> Flight #1 #2 #3 Total >> ------------------------------------------------------------------------------ >> DTLS 1.3 RPK + ECDHE (no cid) 143 364 212 721 >> DTLS 1.3 PSK + ECDHE (no cid) 180 183 56 419 >> DTLS 1.3 PSK (no cid) 130 143 56 329 >> ================================================================ >> ============== >> >> >> >> >> >> ====================================================== >> DTLS Raw Public Keys >> ====================================================== >> >> SubjectPublicKeyInfo without point compression >> ----------------------------------------------------- >> >> 0x30 // Sequence >> 0x59 // Size 89 >> >> 0x30 // Sequence >> 0x13 // Size 19 >> 0x06 0x07 0x2A 0x86 0x48 0xCE 0x3D 0x02 0x01. // OID 1.2.840.10045.2.1 >> (ecPublicKey) >> 0x06 0x08 0x2A 0x86 0x48 0xCE 0x3D 0x03 0x01 0x07 // OID >> 1.2.840.10045.3.1.7 (secp256r1) >> >> 0x03 // Bit string >> 0x42 // Size 66 >> 0x00 // Unused bits 0 >> 0x04 // Uncompressed >> ...... 64 bytes X and Y >> >> Total of 91 bytes >> >> SubjectPublicKeyInfo with point compression >> ----------------------------------------------------- >> >> 0x30 // Sequence >> 0x59 // Size 89 >> >> 0x30 // Sequence >> 0x13 // Size 19 >> 0x06 0x07 0x2A 0x86 0x48 0xCE 0x3D 0x02 0x01. // OID 1.2.840.10045.2.1 >> (ecPublicKey) >> 0x06 0x08 0x2A 0x86 0x48 0xCE 0x3D 0x03 0x01 0x07 // OID >> 1.2.840.10045.3.1.7 (secp256r1) >> >> 0x03 // Bit string >> 0x42 // Size 66 >> 0x00 // Unused bits 0 >> 0x03 // Compressed >> ...... 32 bytes X >> >> Total of 59 bytes >> >> >> ====================================================== >> Helpful Sources of Information >> ====================================================== >> >> In addition to relevant RFCs and the estimates done by Jim, the following >> references were helpful: >> >> Every Byte Explained: The Illustrated TLS 1.3 Connection >> https://tls13.ulfheim.net/ >> >> Digital Certificates for the Internet of Things https://kth.diva- >> portal.org/smash/get/diva2:1153958/FULLTEXT01.pdf >> >> /John >> >> >> >> >> -----Original Message----- >> From: Benjamin Kaduk >> Date: Saturday, 3 November 2018 at 15:59 >> To: John Mattsson >> Cc: "salvador.p.f@um.es" , "ace@ietf.org" >> >> Subject: Re: [Ace] EDHOC standardization >> >> On Fri, Nov 02, 2018 at 02:55:54PM +0000, John Mattsson wrote: >>> Hi Benjamin, Salvador >>> >>> While DTLS 1.3 have done a very good job of lowering the overhead of the >> record layer when application data is sent (see e.g. >> https://tools.ietf.org/html/draft-ietf-lwig-security-protocol-comparison-01 for a >> comparison between different protocols), I do not think the handshake protocol >> is much leaner (is it leaner at all?). >> >> (There are some handshake messages that are removed entirely.) >> >>> We tried to make an fair comparison between EDHOC and TLS 1.3 in the >> presentation at IETF 101 (see >> https://datatracker.ietf.org/meeting/101/materials/slides-101-ace-key- >> exchange-w-oscore-00). Since then, we have significantly optimized the >> encoding in EDHOC and the upcoming version (-11) is expected to have the >> following message sizes. >>> Auth. PSK RPK x5t x5chain >>> -------------------------------------------------------------------- >>> EDHOC message_1 43 38 38 38 >>> EDHOC message_2 47 121 127 117 + Certificate chain >>> EDHOC message_3 12 86 92 82 + Certificate chain >>> -------------------------------------------------------------------- >>> Total 102 245 257 237 + Certificate chains >>> >>> As Salvador writes, the handshakes in TLS 1.3 and DTLS 1.3 are basically the >> same, so the numbers presented at IETF 101 should be a good estimate also for >> DTLS 1.3. >>> Auth. PSK RPK >>> -------------------------------------------------------------------- >>> (D)TLS message_1 142 107 >>> (D)TLS message_2 135 264 >>> (D)TLS message_3 51 167 >>> -------------------------------------------------------------------- >>> Total 328 538 >> Thanks for the numbers! >> >>> The numbers above include ECDHE. For handshake messages, my >> understanding is that the DTLS 1.3 and TLS 1.3 record layer have exactly the >> same size. >> >> The DTLS 1.3 ones will be worse, due to the epoch and sequence number fields. >> >> -Ben >> >> _______________________________________________ >> Ace mailing list >> Ace@ietf.org >> https://www.ietf.org/mailman/listinfo/ace > > _______________________________________________ > Lwip mailing list > Lwip@ietf.org > https://www.ietf.org/mailman/listinfo/lwip -- email: rstruik.ext@gmail.com | Skype: rstruik cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 --------------7DC32BE31B967D5CF3F7C49C Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: base64 PGh0bWw+DQogIDxoZWFkPg0KICAgIDxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCiAgPC9oZWFkPg0KICA8Ym9k eSB0ZXh0PSIjMDAwMDAwIiBiZ2NvbG9yPSIjRkZGRkZGIj4NCiAgICA8ZGl2IGNsYXNzPSJt b3otY2l0ZS1wcmVmaXgiPkhpIEpvaG46PGJyPg0KICAgICAgPGJyPg0KICAgICAgV2hlbiBj b21wYXJpbmcgcHJvdG9jb2xzLCBpdCB3b3VsZCBiZSB1c2VmdWwgdG8gcHJvdG9jb2wgZmxv d3MNCiAgICAgIG9wdGltaXphdGlvbiwgYXMgZm9sbG93czo8YnI+DQogICAgICBhKSBvcHRp bWl6ZWQgZm9yIHBhcmFsbGVsaXplZCBvbmxpbmUgY29tcHV0YXRpb25zOzxicj4NCiAgICAg IGIpIG9wdGltaXplZCBmb3IgbWluaW1pemF0aW9uIG9mIG1lc3NhZ2UgZmxvd3MuPGJyPg0K ICAgICAgU2VlIGFsc28gc2xpZGUgNiBvZiBteSBDRlJHLTgzIHByZXNlbnRhdGlvbiBvZiBN YXJjaCAzMCwgMjAxMg0KICAgICAgKHNsaWRlcy04My1jZnJnLTA1IGF0dGFjaGVkOyBJIGNv dWxkIG5vdCBmaW5kIENGUkcgcmVjb3Jkcw0KICAgICAgb25saW5lKS4gPGJyPg0KICAgICAg PGJyPg0KICAgICAgVGhlIGN1cnJlbnQgZHJhZnQtc2VsYW5kZXItYWNlLWNvc2UtZWNkaGUt MTAgZG9jdW1lbnQgY29uc2lkZXJzDQogICAgICBvcHRpbWl6YXRpb24gYiksIHdoaWNoIG1p bmltaXplcyB0aGUgbnVtYmVyIG9mIG1lc3NhZ2UgZmxvd3MsIGJ1dA0KICAgICAgZG9lcyBy ZXF1aXJlIGVhY2ggcGFydHkgdG8gY29tcHV0ZSB0aGUgc2hhcmVkIGtleSBjb25zZWN1dGl2 ZWx5LA0KICAgICAgcmF0aGVyIHRoYW4gaW4gcGFyYWxsZWwgKGFzIGluIG9wdGltaXphdGlv biBhKS48YnI+DQogICAgICA8YnI+DQogICAgICBXaXRoIG9wdGlvbiBhKSwgaWYgb25lIHJl YWxseSB3aXNoZXMgdG8gc3F1ZWV6ZSBhcyBtdWNoIGluZm8gaW50bw0KICAgICAgYSAxMjgt b2N0ZXQgZGF0YWdyYW0sIG9uZSBjYW4gYWxyZWFkeSBzZW5kIEEncyBlcGhlbWVyYWwgRUNE U0ENCiAgICAgIHNpZ25hdHVyZSBrZXkgaW4gbWVzc2FnZSBmbG93IDEsIHRoZXJlYnkgY3V0 dGluZyBkb3duIHRoZSA8YnI+DQogICAgICBzaXplIG9mIHRoZSBzZWNvbmQgbWVzc2FnZSBm bG93IG9mIHRoZSBTaWdtYSBwcm90b2NvbCBkZXBpY3RlZCBpbg0KICAgICAgRmlnLiAxDQog ICAgICAoPGEgY2xhc3M9Im1vei10eHQtbGluay1mcmVldGV4dCIgaHJlZj0iaHR0cHM6Ly90 b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LXNlbGFuZGVyLWFjZS1jb3NlLWVjZGhlLTEwI3Bh Z2UtMTEiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1zZWxhbmRlci1hY2Ut Y29zZS1lY2RoZS0xMCNwYWdlLTExPC9hPikNCiAgICAgIGJ5IDMyIG9jdGV0cy4gVGhpcyB0 YWNrbGVzIHRoZSAxMjAtb2N0ZXQgYnl0ZSBjb3VudCBmb3IgdGhlIHNlY29uZA0KICAgICAg ZmxvdyBvZiBGaWcuIDEgcXVpdGUgc2ltcGx5LCB3aGlsZSBsZWFkaW5nIHRvIGEgNC1wYXNz IHByb3RvY29sDQogICAgICBmbG93ICh3aXRoIHJvdWdobHkgNzAvNzAvNTUvNTUgYnl0ZXMg aW4gZmxvd3MgMS8yLzMvNCkuPGJyPg0KICAgICAgPGJyPg0KICAgICAgT2J2aW91c2x5LCB0 aGlzIHByZXNlbnRzIGEgdHJhZGUtb2ZmLCBidXQgcXVpdGUgd2VsbCBiZSB3b3J0aCBpdA0K ICAgICAgaW4gc2V0dGluZ3Mgd2hlcmUgb25saW5lIGtleSBjb21wdXRhdGlvbnMgYXJlIHF1 aXRlIHNsb3cgb24gc29tZQ0KICAgICAgcGxhdGZvcm1zIGFuZCB3aGVyZSBzY2hlZHVsaW5n IChlLmcuLCB3aXRoIFRTQ0gpIGNhbiBub3cgYmUgZG9uZQ0KICAgICAgd2l0aCBsZXNzIGNv bnNpZGVyYXRpb24gb2YgdGhlIGluZGl2aWR1YWwgY29tcHV0YXRpb25hbA0KICAgICAgY2Fw YWJpbGl0aWVzIG9mIGRldmljZXMgKHNpbmNlIG5vdyBvbmUgZG9lcyBub3QgbmVlZCB0byBi dWlsZC1pbiBhDQogICAgICB3b3JzdC1jYXNlIDIgeCAia2V5IGNvbXB1dGF0aW9uIGJhY2st b2ZmIiBmb3IgbGVhc3QgY2FwYWJsZQ0KICAgICAgZGV2aWNlcywgYnV0IGNhbiBqdXN0IHVz ZSB0aGUgMXggY29udGluZ2VuY3kgZm9yIHRoaXMpLjxicj4NCiAgICAgIDxicj4NCiAgICAg IFRoZSBwYXJhbGxlbCB2ZXJzaW9uIGlzIGRlcGljdGVkIGJlbG93Ljxicj4NCiAgICAgIDxi cj4NCiAgICAgIDxzcGFuIHN0eWxlPSJjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZhbWls eTogbW9ub3NwYWNlOyBmb250LXNpemU6IDEzLjMzMzNweDsgZm9udC1zdHlsZTogbm9ybWFs OyBmb250LXZhcmlhbnQtbGlnYXR1cmVzOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiA0MDA7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9ycGhh bnM6IDI7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IHByZTsgd2lkb3dzOiAyOyB3b3JkLXNwYWNpbmc6 IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb24t c3R5bGU6IGluaXRpYWw7IHRleHQtZGVjb3JhdGlvbi1jb2xvcjogaW5pdGlhbDsgZGlzcGxh eTogaW5saW5lICFpbXBvcnRhbnQ7IGZsb2F0OiBub25lOyI+UGFydHkgVSAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBQYXJ0eSBW DQp8ICAgICAgICAgICAgICAgICAgICAgICAgQ19VLCBYX1UsIEFMR18xLCBVQURfMSwgUl9T aWcoVTsuLi4pICAgICAgICAgIHwNCistLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0mZ3Q7fA0KfCAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBtZXNzYWdlXzEgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICB8DQp8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwNCnwJCQlDX1UsIENfViwgWF9WLCBBTEdf MiwgUl9TaWcoVjsgLi4uKSAJICAgICAgIHwNCnwmbHQ7LS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tKw0KfCAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBtZXNzYWdlXzIgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICB8DQp8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwNCnwgICAgICAgICBTX1UsIEFF QUQoS18zOyBJRF9DUkVEX1UsIHNfU2lnKFU7IENSRURfVSwgYWFkXzMpLCBQQURfMykgICAg fA0KKy0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLSZndDsrDQp8ICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIG1lc3NhZ2VfMyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHw8L3NwYW4+PGJy Pg0KICAgICAgPHNwYW4gc3R5bGU9ImNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5 OiBtb25vc3BhY2U7IGZvbnQtc2l6ZTogMTMuMzMzM3B4OyBmb250LXN0eWxlOiBub3JtYWw7 IGZvbnQtdmFyaWFudC1saWdhdHVyZXM6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5v cm1hbDsgZm9udC13ZWlnaHQ6IDQwMDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3JwaGFu czogMjsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNm b3JtOiBub25lOyB3aGl0ZS1zcGFjZTogcHJlOyB3aWRvd3M6IDI7IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbi1z dHlsZTogaW5pdGlhbDsgdGV4dC1kZWNvcmF0aW9uLWNvbG9yOiBpbml0aWFsOyBkaXNwbGF5 OiBpbmxpbmUgIWltcG9ydGFudDsgZmxvYXQ6IG5vbmU7Ij48c3BhbiBzdHlsZT0iY29sb3I6 IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgZm9udC1zaXplOiAxMy4z MzMzcHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWxpZ2F0dXJlczogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogNDAwOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyBvcnBoYW5zOiAyOyB0ZXh0LWFsaWduOiBzdGFydDsgdGV4 dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBwcmU7 IHdpZG93czogMjsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJva2Utd2lk dGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uLXN0eWxlOiBpbml0aWFsOyB0ZXh0LWRlY29yYXRp b24tY29sb3I6IGluaXRpYWw7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyBmbG9hdDog bm9uZTsiPnwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgfA0KfCAgICAgICAgIFNfViwgPC9zcGFuPjwvc3Bh bj48c3BhbiBzdHlsZT0iY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IG1vbm9z cGFjZTsgZm9udC1zaXplOiAxMy4zMzMzcHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12 YXJpYW50LWxpZ2F0dXJlczogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBm b250LXdlaWdodDogNDAwOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBvcnBoYW5zOiAyOyB0 ZXh0LWFsaWduOiBzdGFydDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5v bmU7IHdoaXRlLXNwYWNlOiBwcmU7IHdpZG93czogMjsgd29yZC1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uLXN0eWxlOiBp bml0aWFsOyB0ZXh0LWRlY29yYXRpb24tY29sb3I6IGluaXRpYWw7IGRpc3BsYXk6IGlubGlu ZSAhaW1wb3J0YW50OyBmbG9hdDogbm9uZTsiPjxzcGFuIHN0eWxlPSJjb2xvcjogcmdiKDAs IDAsIDApOyBmb250LWZhbWlseTogbW9ub3NwYWNlOyBmb250LXNpemU6IDEzLjMzMzNweDsg Zm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtbGlnYXR1cmVzOiBub3JtYWw7IGZv bnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiA0MDA7IGxldHRlci1zcGFj aW5nOiBub3JtYWw7IG9ycGhhbnM6IDI7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVu dDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IHByZTsgd2lkb3dz OiAyOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyB0ZXh0LWRlY29yYXRpb24tc3R5bGU6IGluaXRpYWw7IHRleHQtZGVjb3JhdGlvbi1jb2xv cjogaW5pdGlhbDsgZGlzcGxheTogaW5saW5lICFpbXBvcnRhbnQ7IGZsb2F0OiBub25lOyI+ PHNwYW4gc3R5bGU9ImNvbG9yOiByZ2IoMCwgMCwgMCk7IGZvbnQtZmFtaWx5OiBtb25vc3Bh Y2U7IGZvbnQtc2l6ZTogMTMuMzMzM3B4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1saWdhdHVyZXM6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IDQwMDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3JwaGFuczogMjsgdGV4 dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogcHJlOyB3aWRvd3M6IDI7IHdvcmQtc3BhY2luZzogMHB4OyAtd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IHRleHQtZGVjb3JhdGlvbi1zdHlsZTogaW5p dGlhbDsgdGV4dC1kZWNvcmF0aW9uLWNvbG9yOiBpbml0aWFsOyBkaXNwbGF5OiBpbmxpbmUg IWltcG9ydGFudDsgZmxvYXQ6IG5vbmU7Ij5BRUFEKEtfMjsgSURfQ1JFRF9WLCBzX1NpZyhW OyBDUkVEX1YsIGFhZF8yKSwgVUFEXzIpfDwvc3Bhbj4gICB8DQorJmx0Oy0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLXwNCnwgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgbWVzc2FnZV80ICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgfA0KDQo8L3NwYW4+PC9zcGFuPj09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PQ0KICAgICAgPHByZSB3cmFwPSIiPkZsaWdodCAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIzEgICAgICAgICAjMiAgICAgICAgIzMgICAgIzQgCVRvdGFs ICAgICANCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KRFRMUyAxLjMgUlBLICsgRUNESEUg ICAgICAgICAgICAgICAgIDE0MyAgICAgICAgMzY0ICAgICAgIDIxMiAgICAgLSAgIAk3MjEg ICAgICANClRMUyAxLjMgIFJQSyArIEVDREhFICAgICAgICAgICAgICAgICAxMjkgICAgICAg IDMyMiAgICAgICAxOTQgICAgIC0gICAJNjQ1ICAgICAgDQpFREhPQyAgICBSUEsgKyBFQ0RI RSAgICAgICAgICAgICAgICAgIDM3ICAgICAgICAxMjAgICAgICAgIDg1ICAgICAtICAgCTI0 MiAgICANCi0tJmd0OyBFREhPQyBwYXJhbGxlbCBmbG93CQkgICAgICA3MCAgICAgICAgIDcw ICAgICAgICA1NSAgICAgNTUgICAgMjUwIA0KPC9wcmU+DQogICAgICA8c3BhbiBzdHlsZT0i Y29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1mYW1pbHk6IG1vbm9zcGFjZTsgZm9udC1zaXpl OiAxMy4zMzMzcHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWxpZ2F0dXJl czogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogNDAw OyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBvcnBoYW5zOiAyOyB0ZXh0LWFsaWduOiBzdGFy dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNl OiBwcmU7IHdpZG93czogMjsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsgdGV4dC1kZWNvcmF0aW9uLXN0eWxlOiBpbml0aWFsOyB0ZXh0LWRl Y29yYXRpb24tY29sb3I6IGluaXRpYWw7IGRpc3BsYXk6IGlubGluZSAhaW1wb3J0YW50OyBm bG9hdDogbm9uZTsiPjxzcGFuIHN0eWxlPSJjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LWZh bWlseTogbW9ub3NwYWNlOyBmb250LXNpemU6IDEzLjMzMzNweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtbGlnYXR1cmVzOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiA0MDA7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9y cGhhbnM6IDI7IHRleHQtYWxpZ246IHN0YXJ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRy YW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IHByZTsgd2lkb3dzOiAyOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRp b24tc3R5bGU6IGluaXRpYWw7IHRleHQtZGVjb3JhdGlvbi1jb2xvcjogaW5pdGlhbDsgZGlz cGxheTogaW5saW5lICFpbXBvcnRhbnQ7IGZsb2F0OiBub25lOyI+DQoNCjwvc3Bhbj48L3Nw YW4+T24gMTEvMjIvMjAxOCA3OjIzIEFNLCBKb2huIE1hdHRzc29uIHdyb3RlOjxicj4NCiAg ICA8L2Rpdj4NCiAgICA8YmxvY2txdW90ZSB0eXBlPSJjaXRlIg0KICAgICAgY2l0ZT0ibWlk OkIxMTlBMUQ4LTA4QjUtNDMxRS1CQjE2LTM1RDg0QUE2RjZDQkBlcmljc3Nvbi5jb20iPg0K ICAgICAgPHByZSB3cmFwPSIiPkhpIEppbSwNCg0KPC9wcmU+DQogICAgICA8YmxvY2txdW90 ZSB0eXBlPSJjaXRlIj4NCiAgICAgICAgPHByZSB3cmFwPSIiPkluIHRoZSBhbmFseXNpcyB0 aGF0IEkgZGlkIEkgdmVyeSBkZWxpYmVyYXRlbHkgdXNlZCBUTFMgbm90IERUTFMuICBUaGUg bWFpbiByZWFzb24gZm9yIHVzaW5nIERUTFMgaXMgYmVjYXVzZSBvbmUgaXMgb3BlcmF0aW5n IGluIHRoZSBVRFAgZW52aXJvbm1lbnQgYW5kIG9uZSBjYW5ub3QgaGF2ZSByZWxpYWJsZSBp biBvcmRlciBkZWxpdmVyeS4gIFNpbmNlIEVESE9DIGlzIGJlaW5nIGJ1aWx0IG9uIHRvcCBv ZiBDb0FQLCBvbmUgY2FuIHVzZSBDb0FQIHRvIGNyZWF0ZSByZWxpYWJsZSBpbiBvcmRlciBk ZWxpdmVyeS4gIFRodXMsIHRoZSBleHRyYSBieXRlcyB0aGF0IERUTFMgaGFzIHRvIGRlYWwg d2l0aCB0aGlzIGFyZSBub3QgbmVlZGVkLg0KPC9wcmU+DQogICAgICA8L2Jsb2NrcXVvdGU+ DQogICAgICA8cHJlIHdyYXA9IiI+DQpJIHN0YXJ0ZWQgd2l0aCBEVExTIGFzIHRoYXQgd2Fz IHdoYXQgd2FzIGRpc2N1c3Npb24gYmV0d2VlbiBTYWx2YWRvciBhbmQgQmVuamFtaW4uIEJl bG93IGFyZSBudW1iZXJzIGZvciBUTFMgMS4zLiBDaGFuZ2VzIGNvbXBhcmVkIHRvIERUTFMg MS4zIGFyZSB0aGF0IHRoZSByZWNvcmQgaGVhZGVyIGlzIHNtYWxsZXIsIGhhbmRzaGFrZSBo ZWFkZXJzIGFyZSBzbWFsbGVyLCBhbmQgdGhhdCBDb25uZWN0aW9uIElEIGlzIG5vdCBzdXBw b3J0ZWQgaW4gVExTIDEuMy4gVGhlIG51bWJlcnMgSSBnZXQgZm9yIFRMUyAxLjMgYXJlIG92 ZXJhbGwgc2xpZ2h0bHkgYmlnZ2VyIHRoYW4gdGhlIG51bWJlcnMgaW4geW91ciBlc3RpbWF0 ZSAoYnV0IGZvciBQU0sgRmxpZ2h0ICMzIEkgZ2V0IHNsaWdodGx5IHNtYWxsZXIgbnVtYmVy cykuIEkgdGhpbmsgdGhlIGRpZmZlcmVuY2UgaXMgZHVlIHRvIG1hbnkgc21hbGxlciB0aGlu Z3MgbGlrZSBoYW5kc2hha2UgaGVhZGVycyBhbmQgZmllbGRzIGluIHRoZSBjZXJ0aWZpY2F0 ZSBzdHJ1Y3R1cmUgdGhhdCBhZGRzIHVwLiBJIHBsYW4gdG8gYWRkIFRMUyAxLjMgbnVtYmVy cyB0byBkcmFmdC1pZXRmLWx3aWctc2VjdXJpdHktcHJvdG9jb2wtY29tcGFyaXNvbiBhcyB3 ZWxsLg0KDQpJIGFncmVlIHdpdGggeW91ciBjb21tZW50IEppbS4gSnVzdCBub3csIEkgYW0g anVzdCB0cnlpbmcgdG8gY291bnQgdGhlIG51bWJlciBvZiBieXRlcyBvZiB0aGUgc2VjdXJp dHkgcHJvdG9jb2wuIFRvIGRvIGEgZmFpciBjb21wYXJpc29uLCB5b3UgaGF2ZSB0byBjaG9v c2UgYSBzcGVjaWZpYyBkZXBsb3ltZW50IGFuZCBsb29rIGF0IHRoZSB0b3BvbG9neSwgdGhl IHdob2xlIHByb3RvY29sIHN0YWNrLCBmcmFtZSBzaXplcyAoZS5nLiAxMjggYnl0ZXMpLCBo b3cgYW5kIHdoZXJlIGluIHRoZSBwcm90b2NvbCBzdGFjayBmcmFnbWVudGF0aW9uIGlzIGRv bmUsIGFuZCB0aGUgZXhwZWN0ZWQgcGFja2V0IGxvc3MuIFRoZXJlIGlzIG9uZ29pbmcgd29y ayBvbiBzdWNoIHNpbXVsYXRpb25zIGZvciA2dGlzY2guIEZyYWdtZW50YXRpb24gYW5kL29y IHBhY2tldCBsb3NzIGxlYWQgdG8gdGhlIHRvdGFsIG51bWJlciBvZiBieXRlcyBpbiB0aGUg dGFibGUgYmVsb3cgaGFzIHRvIGJlIG11bHRpcGxpZWQgYnkgc29tZSBsaW5lYXIgZmFjdG9y LiBBbmQgYXMgbW9yZSBieXRlcyBvZnRlbiBsZWFkIHRvIGluY3JlYXNlZCBwYWNrZXQgbG9z cywgeW91IG9mdGVuIHNlZSBhIG5vbi1saW5lYXIgcmVsYXRpb24gYmV0d2VlbiBsb2dpY2Fs IG51bWJlciBvZiBieXRlcyBvbiB0aGUgdHJhbnNwb3J0L2FwcGxpY2F0aW9uIGxheWVyIGFz IHNob3duIGluIHRoZSB0YWJsZSBiZWxvdyBhbmQgcGh5c2ljYWwgbnVtYmVyIG9mIGJ5dGVz IGFuZC9vciB0aW1lIGZyb20gY29tcGxldGlvbiBvZiB0aGUgcHJvdG9jb2wuIEFueSByZWFs aXN0aWMgY29tcGFyaXNvbiBvdmVyIGNvbnN0cmFpbmVkIHJhZGlvIHdvdWxkIG1ha2UgdGhl IGRpZmZlcmVuY2UgYmV0d2VlbiBUTFMgMS4zIGFuZCBFREhPQyBsYXJnZXIuIEEgcHJvYmxl bSB3aXRoIFRMUyBpcyB0aGF0IGl0IGRvZXMgbm90IHN1cHBvcnQgQ29ubmVjdGlvbiBJRC4N Cg0KVExTIEFzc3VtcHRpb25zOg0KLSBNaW5pbXVtIG51bWJlciBvZiBhbGdvcml0aG1zIGFu ZCBjaXBoZXIgc3VpdGVzIG9mZmVyZWQgDQotIEN1cnZlMjU1MTksIEVDRFNBIHdpdGggUC0y NTYsIEFFUy1DQ01fOCwgU0hBLTI1Ng0KLSBMZW5ndGggb2Yga2V5IGlkZW50aWZpZXJzOiA0 IGJ5dGVzDQotIFRMUyBSUEsgd2l0aCBwb2ludCBjb21wcmVzc2lvbiAoc2F2ZXMgMzIgYnl0 ZXMpDQotIE9ubHkgbWFuZGF0b3J5IFRMUyBleHRlbnRpb25zDQoNCj09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PQ0KRmxpZ2h0ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAjMSAg ICAgICAgICMyICAgICAgICAjMyAgICAgICBUb3RhbCAgICAgDQotLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0NCkRUTFMgMS4zIFJQSyArIEVDREhFICAgICAgICAgICAgICAgICAxNDMgICAg ICAgIDM2NCAgICAgICAyMTIgICAgICAgIDcyMSAgICAgIA0KVExTIDEuMyAgUlBLICsgRUNE SEUgICAgICAgICAgICAgICAgIDEyOSAgICAgICAgMzIyICAgICAgIDE5NCAgICAgICAgNjQ1 ICAgICAgDQpFREhPQyAgICBSUEsgKyBFQ0RIRSAgICAgICAgICAgICAgICAgIDM3ICAgICAg ICAxMjAgICAgICAgIDg1ICAgICAgICAyNDIgICAgICANCi0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLQ0KRFRMUyAxLjMgUFNLICsgRUNESEUgICAgICAgICAgICAgICAgIDE4MCAgICAgICAg MTgzICAgICAgICA1NiAgICAgICAgNDE5ICAgICAgDQpUTFMgMS4zICBQU0sgKyBFQ0RIRSAg ICAgICAgICAgICAgICAgMTY2ICAgICAgICAxNTcgICAgICAgIDUwICAgICAgICAzNzMgICAg ICANCkVESE9DICAgIFBTSyArIEVDREhFICAgICAgICAgICAgICAgICAgNDIgICAgICAgICA0 NiAgICAgICAgMTEgICAgICAgICA5OSAgICAgIA0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t DQpEVExTIDEuMyBQU0sgICAgICAgICAgICAgICAgICAgICAgICAgMTMwICAgICAgICAxNDMg ICAgICAgIDU2ICAgICAgICAzMjkgICAgICANClRMUyAxLjMgIFBTSyAgICAgICAgICAgICAg ICAgICAgICAgICAxMTYgICAgICAgIDExNyAgICAgICAgNTAgICAgICAgIDI4MyAgICAgIA0K PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09DQogICAgICAgICAgICAgICAgICAgICAgICBOdW1i ZXIgb2YgYnl0ZXMgKE5vIGNvbm5lY3Rpb24gSUQpDQoNCkJlbG93IGlzIGRldGFpbGVkIGlu Zm9ybWF0aW9uIGFib3V0IHRoZSBkaWZmZXJlbnQgZmxpZ2h0czoNCg0KPT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQpUTFMgMS4zIEZs aWdodCAjMSBSUEsgKyBFQ0RIRQ0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09DQoNClJlY29yZCBIZWFkZXIgLSBUTFNQbGFpbnRleHQg KDUgYnl0ZXMpDQoxNiAwMyAwMyBMTCBMTA0KDQoJSGFuZHNoYWtlIEhlYWRlciAtIENsaWVu dCBIZWxsbyAoNCBieXRlcykNCgkwMSBMTCBMTCBMTA0KDQoJCUxlZ2FjeSBWZXJzaW9uICgy IGJ5dGVzKQ0KCQkwMyAwMw0KDQoJCUNsaWVudCBSYW5kb20gKDMyIGJ5dGVzKQ0KCQkwMCAw MSAwMiAwMyAwNCAwNSAwNiAwNyAwOCAwOSAwYSAwYiAwYyAwZCAwZSAwZiAxMCAxMSAxMiAx MyAxNCAxNSAxNiAxNyAxOCAxOSAxYSAxYiAxYyAxZCAxZSAxZg0KDQoJCUxlZ2FjeSBTZXNz aW9uIElEICgxIGJ5dGVzKQ0KCQkwMA0KDQoJCUNpcGhlciBTdWl0ZXMgKFRMU19BRVNfMTI4 X0NDTV84X1NIQTI1NikgKDQgYnl0ZXMpDQoJCTAwIDAyIDEzIDA1DQoNCgkJQ29tcHJlc3Np b24gTWV0aG9kcyAobnVsbCkgKDIgYnl0ZXMpDQoJCTAxIDAwDQoNCgkJRXh0ZW5zaW9ucyBM ZW5ndGggKDIgYnl0ZXMpDQoJCUxMIExMDQoNCgkJCUV4dGVuc2lvbiAtIFN1cHBvcnRlZCBH cm91cHMgKHgyNTUxOSkgKDggYnl0ZXMpDQoJCQkwMCAwYSAwMCAwNCAwMCAwMiAwMCAxZA0K DQoJCQlFeHRlbnNpb24gLSBTaWduYXR1cmUgQWxnb3JpdGhtcyAoZWNkc2Ffc2VjcDI1NnIx X3NoYTI1NikgKDggYnl0ZXMpDQoJCQkwMCAwZCAwMCAwNCAwMCAwMiAwOCAwNw0KDQoJCQlF eHRlbnNpb24gLSBLZXkgU2hhcmUgKDQyIGJ5dGVzKQ0KCQkJMDAgMzMgMDAgMjYgMDAgMjQg MDAgMWQgMDAgMjANCgkJCTAwIDAxIDAyIDAzIDA0IDA1IDA2IDA3IDA4IDA5IDBhIDBiIDBj IDBkIDBlIDBmIDEwIDExIDEyIDEzIDE0IDE1IDE2IDE3IDE4IDE5IDFhIDFiIDFjIDFkIDFl IDFmDQoNCgkJCUV4dGVuc2lvbiAtIFN1cHBvcnRlZCBWZXJzaW9ucyAoMS4zKSAoNyBieXRl cykNCgkJCTAwIDJiIDAwIDAzIDAyIDAzIDA0IA0KDQoJCQlFeHRlbnNpb24gLSBDbGllbnQg Q2VydGlmaWNhdGUgVHlwZSAoUmF3IFB1YmxpYyBLZXkpICg2IGJ5dGVzKQ0KCQkJMDAgMTMg MDAgMDEgMDEgMDIgDQoNCgkJCUV4dGVuc2lvbiAtIFNlcnZlciBDZXJ0aWZpY2F0ZSBUeXBl IChSYXcgUHVibGljIEtleSkgKDYgYnl0ZXMpDQoJCQkwMCAxNCAwMCAwMSAwMSAwMg0KDQo1 ICsgNCArIDIgKyAzMiArIDEgKyA0ICsgMiArIDIgKyA4ICsgOCArIDQyICsgNyArIDYgKyA2 ID0gMTI5IGJ5dGVzDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLQ0KVExTIDEuMyBGbGlnaHQgIzEgUFNLICsgRUNESEUNCi0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQpE aWZmZXJlbmNlcyBjb21wYXJlZCB0byBSUEsgKyBFQ0RIRQ0KDQorIEV4dGVuc2lvbiAtIFBT SyBLZXkgRXhjaGFuZ2UgTW9kZXMgKDYgYnl0ZXMpDQogIDAwIDJkIDAwIDAyIDAxIDAxDQoN CisgRXh0ZW5zaW9uIC0gUHJlIFNoYXJlZCBLZXkgKDUxIGJ5dGVzKQ0KICAwMCAyOSAwMCAy Rg0KICAwMCAwYSAwMCAwNCBJRCBJRCBJRCBJRCAwMCAwMCAwMCAwMA0KICAwMCAyMSAyMCAw MCAwMSAwMiAwMyAwNCAwNSAwNiAwNyAwOCAwOSAwYSAwYiAwYyAwZCAwZSAwZiAxMCAxMSAx MiAxMyAxNCAxNSAxNiAxNyAxOCAxOSAxYSAxYiAxYyAxZCAxZSAxZg0KDQotIEV4dGVuc2lv biAtIFNpZ25hdHVyZSBBbGdvcml0aG1zIChlY2RzYV9zZWNwMjU2cjFfc2hhMjU2KSAoOCBi eXRlcykNCg0KLSBFeHRlbnNpb24gLSBDbGllbnQgQ2VydGlmaWNhdGUgVHlwZSAoUmF3IFB1 YmxpYyBLZXkpICg2IGJ5dGVzKQ0KDQotIEV4dGVuc2lvbiAtIFNlcnZlciBDZXJ0aWZpY2F0 ZSBUeXBlIChSYXcgUHVibGljIEtleSkgKDYgYnl0ZXMpDQoNCjEyOSArIDYgKyA1MSAtIDgg LSA2IC0gNiA9IDE2NiBieXRlcw0KDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NClRMUyAxLjMgRmxpZ2h0ICMxIFBTSw0KLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCkRp ZmZlcmVuY2VzIGNvbXBhcmVkIHRvIFBTSyArIEVDREhFDQoNCi0gRXh0ZW5zaW9uIC0gU3Vw cG9ydGVkIEdyb3VwcyAoeDI1NTE5KSAoOCBieXRlcykNCg0KLSBFeHRlbnNpb24gLSBLZXkg U2hhcmUgKDQyIGJ5dGVzKQ0KDQoxNjYgLSA4IC0gNDIgPSAxMTYgYnl0ZXMNCg0KDQoNCj09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0K VExTIDEuMyBGbGlnaHQgIzIgIFJQSyArIEVDREhFDQo9PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NCg0KUmVjb3JkIEhlYWRlciAtIFRM U1BsYWludGV4dCAoNSBieXRlcykNCjE2IDAzIDAzIExMIExMDQoNCglIYW5kc2hha2UgSGVh ZGVyIC0gU2VydmVyIEhlbGxvICg0IGJ5dGVzKQ0KCTAyIExMIExMIExMDQoNCgkJTGVnYWN5 IFZlcnNpb24gKDIgYnl0ZXMpDQoJCWZlIGZkDQoNCgkJU2VydmVyIFJhbmRvbSAoMzIgYnl0 ZXMpDQoJCTAwIDAxIDAyIDAzIDA0IDA1IDA2IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBlIDBm IDEwIDExIDEyIDEzIDE0IDE1IDE2IDE3IDE4IDE5IDFhIDFiIDFjIDFkIDFlIDFmDQoNCgkJ TGVnYWN5IFNlc3Npb24gSUQgKDEgYnl0ZXMpDQoJCTAwDQoNCgkJQ2lwaGVyIFN1aXRlIChU TFNfQUVTXzEyOF9DQ01fOF9TSEEyNTYpICgyIGJ5dGVzKQ0KCQkxMyAwNQ0KDQoJCUNvbXBy ZXNzaW9uIE1ldGhvZCAobnVsbCkgKDEgYnl0ZXMpDQoJCTAwDQoNCgkJRXh0ZW5zaW9ucyBM ZW5ndGggKDIgYnl0ZXMpDQoJCUxMIExMDQoNCgkJCUV4dGVuc2lvbiAtIEtleSBTaGFyZSAo NDAgYnl0ZXMpDQoJCQkwMCAzMyAwMCAyNCAwMCAxZCAwMCAyMA0KCQkJMDAgMDEgMDIgMDMg MDQgMDUgMDYgMDcgMDggMDkgMGEgMGIgMGMgMGQgMGUgMGYgMTAgMTEgMTIgMTMgMTQgMTUg MTYgMTcgMTggMTkgMWEgMWIgMWMgMWQgMWUgMWYNCg0KCQkJRXh0ZW5zaW9uIC0gU3VwcG9y dGVkIFZlcnNpb25zICgxLjMpICg2IGJ5dGVzKQ0KCQkJMDAgMmIgMDAgMDIgMDMgMDQNCg0K UmVjb3JkIEhlYWRlciAtIFRMU0NpcGhlcnRleHQgKDUgYnl0ZXMpDQoxNyAwMyAwMyBMTCBM TA0KDQoJSGFuZHNoYWtlIEhlYWRlciAtIEVuY3J5cHRlZCBFeHRlbnNpb25zICg0IGJ5dGVz KQ0KCTA4IExMIExMIExMDQoNCgkJRXh0ZW5zaW9ucyBMZW5ndGggKDIgYnl0ZXMpDQoJCUxM IExMDQoNCgkJCUV4dGVuc2lvbiAtIENsaWVudCBDZXJ0aWZpY2F0ZSBUeXBlIChSYXcgUHVi bGljIEtleSkgKDYgYnl0ZXMpDQoJCQkwMCAxMyAwMCAwMSAwMSAwMiANCg0KCQkJRXh0ZW5z aW9uIC0gU2VydmVyIENlcnRpZmljYXRlIFR5cGUgKFJhdyBQdWJsaWMgS2V5KSAoNiBieXRl cykNCgkJCTAwIDE0IDAwIDAxIDAxIDAyDQoNCglIYW5kc2hha2UgSGVhZGVyIC0gQ2VydGlm aWNhdGUgUmVxdWVzdCAoNCBieXRlcykNCgkwZCBMTCBMTCBMTA0KDQoJCVJlcXVlc3QgQ29u dGV4dCAoMSBieXRlcykNCgkJMDANCg0KCQlFeHRlbnNpb25zIExlbmd0aCAoMiBieXRlcykN CgkJTEwgTEwNCg0KCQkJRXh0ZW5zaW9uIC0gU2lnbmF0dXJlIEFsZ29yaXRobXMgKGVjZHNh X3NlY3AyNTZyMV9zaGEyNTYpICg4IGJ5dGVzKQ0KCQkJMDAgMGQgMDAgMDQgMDAgMDIgMDgg MDcNCg0KCUhhbmRzaGFrZSBIZWFkZXIgLSBDZXJ0aWZpY2F0ZSAoNCBieXRlcykNCgkwYiBM TCBMTCBMTA0KDQoJCVJlcXVlc3QgQ29udGV4dCAoMSBieXRlcykNCgkJMDANCg0KCQlDZXJ0 aWZpY2F0ZSBMaXN0IExlbmd0aCAoMyBieXRlcykNCgkJTEwgTEwgTEwNCg0KCQlDZXJ0aWZp Y2F0ZSBMZW5ndGggKDMgYnl0ZXMpDQoJCUxMIExMIExMDQoNCgkJQ2VydGlmaWNhdGUgKDU5 IGJ5dGVzKSAvLyBQb2ludCBjb21wcmVzc2lvbg0KCQkuLi4uDQoNCgkJQ2VydGlmaWNhdGUg RXh0ZW5zaW9ucyAoMiBieXRlcykNCgkJMDAgMDANCg0KCUhhbmRzaGFrZSBIZWFkZXIgLSBD ZXJ0aWZpY2F0ZSBWZXJpZnkgKDQgYnl0ZXMpDQoJMGYgTEwgTEwgTEwNCg0KCQlTaWduYXR1 cmUgICg2OCBieXRlcykNCgkJWlogWlogMDAgNDAgLi4uLg0KDQoJSGFuZHNoYWtlIEhlYWRl ciAtIEZpbmlzaGVkICg0IGJ5dGVzKQ0KCTE0IExMIExMIExMDQoNCgkJVmVyaWZ5IERhdGEg KDMyIGJ5dGVzKQ0KCQkwMCAwMSAwMiAwMyAwNCAwNSAwNiAwNyAwOCAwOSAwYSAwYiAwYyAw ZCAwZSAwZiAxMCAxMSAxMiAxMyAxNCAxNSAxNiAxNyAxOCAxOSAxYSAxYiAxYyAxZCAxZSAx Zg0KDQoJUmVjb3JkIFR5cGUgKDEgYnl0ZSkNCgkxNg0KDQpBdXRoIFRhZyAoOCBieXRlcykN CmUwIDhiIDBlIDQ1IDVhIDM1IDBhIGU1DQoNCjUgKyA5MCArIDUgKyAxOCArIDE1ICsgNzIg KyA3MiArIDM2ICsgMSArIDggPSAzMjIgYnl0ZXMNCg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpUTFMgMS4zIEZsaWdodCAjMiBQ U0sgKyBFQ0RIRQ0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tDQoNCkRpZmZlcmVuY2VzIGNvbXBhcmVkIHRvIFJQSyArIEVDREhFDQoN Ci0gSGFuZHNoYWtlIE1lc3NhZ2UgQ2VydGlmaWNhdGUgKDcyIGJ5dGVzKQ0KDQotIEhhbmRz aGFrZSBNZXNzYWdlIENlcnRpZmljYXRlVmVyaWZ5ICg3MiBieXRlcykNCg0KLSBIYW5kc2hh a2UgTWVzc2FnZSBDZXJ0aWZpY2F0ZVJlcXVlc3QgKDE1IGJ5dGVzKQ0KDQotIEV4dGVuc2lv biAtIENsaWVudCBDZXJ0aWZpY2F0ZSBUeXBlIChSYXcgUHVibGljIEtleSkgKDYgYnl0ZXMp DQoNCi0gRXh0ZW5zaW9uIC0gU2VydmVyIENlcnRpZmljYXRlIFR5cGUgKFJhdyBQdWJsaWMg S2V5KSAoNiBieXRlcykNCg0KKyBFeHRlbnNpb24gLSBQcmUgU2hhcmVkIEtleSAoNiBieXRl cykNCiAgMDAgMjkgMDAgMDIgMDAgMDANCg0KMzIyIC0gNzIgLSA3MiAtIDE1IC0gNiAtIDYg ICsgNiA9IDE1NyBieXRlcw0KDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0NClRMUyAxLjMgRmxpZ2h0ICMyIFBTSw0KLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCkRpZmZl cmVuY2VzIGNvbXBhcmVkIHRvIFBTSyArIEVDREhFDQoNCi0gRXh0ZW5zaW9uIC0gS2V5IFNo YXJlICg0MCBieXRlcykNCg0KMTU3IC0gNDAgPSAxMTcgYnl0ZXMNCg0KDQoNCj09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KVExTIDEu MyBGbGlnaHQgIzMgUlBLICsgRUNESEUNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PQ0KDQpSZWNvcmQgSGVhZGVyIC0gVExTQ2lwaGVy dGV4dCAoNSBieXRlcykNCjE3IDAzIDAzIExMIExMDQoNCglIYW5kc2hha2UgSGVhZGVyIC0g Q2VydGlmaWNhdGUgKDQgYnl0ZXMpDQoJMGIgTEwgTEwgTEwNCg0KCQlSZXF1ZXN0IENvbnRl eHQgKDEgYnl0ZXMpDQoJCTAwDQoNCgkJQ2VydGlmaWNhdGUgTGlzdCBMZW5ndGggKDMgYnl0 ZXMpDQoJCUxMIExMIExMDQoNCgkJQ2VydGlmaWNhdGUgTGVuZ3RoICgzIGJ5dGVzKQ0KCQlM TCBMTCBMTA0KCQ0KCQlDZXJ0aWZpY2F0ZSAoNTkgYnl0ZXMpIC8vIFBvaW50IGNvbXByZXNz aW9uDQoJCS4uLi4NCg0KCQlDZXJ0aWZpY2F0ZSBFeHRlbnNpb25zICgyIGJ5dGVzKQ0KCQkw MCAwMA0KDQoJSGFuZHNoYWtlIEhlYWRlciAtIENlcnRpZmljYXRlIFZlcmlmeSAoNCBieXRl cykgDQoJMGYgTEwgTEwgTEwNCg0KCQlTaWduYXR1cmUgICg2OCBieXRlcykNCgkJMDQgMDMg TEwgTEwgLy9lY2RzYV9zZWNwMjU2cjFfc2hhMjU2DQoJCTAwIDAxIDAyIDAzIDA0IDA1IDA2 IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBlIDBmIDEwIDExIDEyIDEzIDE0IDE1IDE2IDE3IDE4 IDE5IDFhIDFiIDFjIDFkIDFlIDFmDQoJCTAwIDAxIDAyIDAzIDA0IDA1IDA2IDA3IDA4IDA5 IDBhIDBiIDBjIDBkIDBlIDBmIDEwIDExIDEyIDEzIDE0IDE1IDE2IDE3IDE4IDE5IDFhIDFi IDFjIDFkIDFlIDFmDQoNCglIYW5kc2hha2UgSGVhZGVyIC0gRmluaXNoZWQgKDQgYnl0ZXMp DQoJMTQgTEwgTEwgTEwNCg0KCQlWZXJpZnkgRGF0YSAoMzIgYnl0ZXMpIC8vIFNIQS0yNTYN CgkJMDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcgMDggMDkgMGEgMGIgMGMgMGQgMGUgMGYgMTAg MTEgMTIgMTMgMTQgMTUgMTYgMTcgMTggMTkgMWEgMWIgMWMgMWQgMWUgMWYNCg0KCVJlY29y ZCBUeXBlICgxIGJ5dGUpDQoJMTYNCg0KQXV0aCBUYWcgKDggYnl0ZXMpIC8vIEFFUy1DQ01f OA0KMDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcNCg0KNSArIDcyICsgNzIgKyAzNiArIDEgKyA4 ID0gMTk0IGJ5dGVzDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLQ0KVExTIDEuMyBGbGlnaHQgIzMgUFNLICsgRUNESEUNCi0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCkRp ZmZlcmVuY2VzIGNvbXBhcmVkIHRvIFJQSyArIEVDREhFDQoNCi0gSGFuZHNoYWtlIE1lc3Nh Z2UgQ2VydGlmaWNhdGUgKDcyIGJ5dGVzKQ0KDQotIEhhbmRzaGFrZSBNZXNzYWdlIENlcnRp ZmljYXRlIFZlcmlmeSAoNzIgYnl0ZXMpDQoNCjE5NCAtIDcyIC0gNzIgPSA1MCBieXRlcw0K DQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0NClRMUyAxLjMgRmxpZ2h0ICMzIFBTSw0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KRGlmZmVyZW5jZXMgY29tcGFyZWQgdG8g UFNLICsgRUNESEUNCg0KTm9uZQ0KDQo1MCBieXRlcw0KDQoNCu+7vy0tLS0tT3JpZ2luYWwg TWVzc2FnZS0tLS0tDQpGcm9tOiBKaW0gU2NoYWFkIDxhIGNsYXNzPSJtb3otdHh0LWxpbmst cmZjMjM5NkUiIGhyZWY9Im1haWx0bzppZXRmQGF1Z3VzdGNlbGxhcnMuY29tIj4mbHQ7aWV0 ZkBhdWd1c3RjZWxsYXJzLmNvbSZndDs8L2E+DQpEYXRlOiBXZWRuZXNkYXksIDIxIE5vdmVt YmVyIDIwMTggYXQgMTY6MjUNClRvOiBKb2huIE1hdHRzc29uIDxhIGNsYXNzPSJtb3otdHh0 LWxpbmstcmZjMjM5NkUiIGhyZWY9Im1haWx0bzpqb2huLm1hdHRzc29uQGVyaWNzc29uLmNv bSI+Jmx0O2pvaG4ubWF0dHNzb25AZXJpY3Nzb24uY29tJmd0OzwvYT4sIDxhIGNsYXNzPSJt b3otdHh0LWxpbmstcmZjMjM5NkUiIGhyZWY9Im1haWx0bzphY2VAaWV0Zi5vcmciPiJhY2VA aWV0Zi5vcmciPC9hPiA8YSBjbGFzcz0ibW96LXR4dC1saW5rLXJmYzIzOTZFIiBocmVmPSJt YWlsdG86YWNlQGlldGYub3JnIj4mbHQ7YWNlQGlldGYub3JnJmd0OzwvYT4sIDxhIGNsYXNz PSJtb3otdHh0LWxpbmstcmZjMjM5NkUiIGhyZWY9Im1haWx0bzpsd2lwQGlldGYub3JnIj4i bHdpcEBpZXRmLm9yZyI8L2E+IDxhIGNsYXNzPSJtb3otdHh0LWxpbmstcmZjMjM5NkUiIGhy ZWY9Im1haWx0bzpsd2lwQGlldGYub3JnIj4mbHQ7bHdpcEBpZXRmLm9yZyZndDs8L2E+DQpD YzogJ0JlbmphbWluIEthZHVrJyA8YSBjbGFzcz0ibW96LXR4dC1saW5rLXJmYzIzOTZFIiBo cmVmPSJtYWlsdG86a2FkdWtAbWl0LmVkdSI+Jmx0O2thZHVrQG1pdC5lZHUmZ3Q7PC9hPiwg PGEgY2xhc3M9Im1vei10eHQtbGluay1yZmMyMzk2RSIgaHJlZj0ibWFpbHRvOnNhbHZhZG9y LnAuZkB1bS5lcyI+InNhbHZhZG9yLnAuZkB1bS5lcyI8L2E+IDxhIGNsYXNzPSJtb3otdHh0 LWxpbmstcmZjMjM5NkUiIGhyZWY9Im1haWx0bzpzYWx2YWRvci5wLmZAdW0uZXMiPiZsdDtz YWx2YWRvci5wLmZAdW0uZXMmZ3Q7PC9hPg0KU3ViamVjdDogUkU6IFtBY2VdIEVESE9DIHN0 YW5kYXJkaXphdGlvbg0KDQpKb2huLA0KDQpJbiB0aGUgYW5hbHlzaXMgdGhhdCBJIGRpZCBJ IHZlcnkgZGVsaWJlcmF0ZWx5IHVzZWQgVExTIG5vdCBEVExTLiAgVGhlIG1haW4gcmVhc29u IGZvciB1c2luZyBEVExTIGlzIGJlY2F1c2Ugb25lIGlzIG9wZXJhdGluZyBpbiB0aGUgVURQ IGVudmlyb25tZW50IGFuZCBvbmUgY2Fubm90IGhhdmUgcmVsaWFibGUgaW4gb3JkZXIgZGVs aXZlcnkuICBTaW5jZSBFREhPQyBpcyBiZWluZyBidWlsdCBvbiB0b3Agb2YgQ29BUCwgb25l IGNhbiB1c2UgQ29BUCB0byBjcmVhdGUgcmVsaWFibGUgaW4gb3JkZXIgZGVsaXZlcnkuICBU aHVzIHRoZSBleHRyYSBieXRlcyB0aGF0IERUTFMgaGFzIHRvIGRlYWwgd2l0aCB0aGlzIGFy ZSBub3QgbmVlZGVkLg0KDQpKaW0NCg0KDQo8L3ByZT4NCiAgICAgIDxibG9ja3F1b3RlIHR5 cGU9ImNpdGUiPg0KICAgICAgICA8cHJlIHdyYXA9IiI+LS0tLS1PcmlnaW5hbCBNZXNzYWdl LS0tLS0NCkZyb206IEFjZSA8YSBjbGFzcz0ibW96LXR4dC1saW5rLXJmYzIzOTZFIiBocmVm PSJtYWlsdG86YWNlLWJvdW5jZXNAaWV0Zi5vcmciPiZsdDthY2UtYm91bmNlc0BpZXRmLm9y ZyZndDs8L2E+IE9uIEJlaGFsZiBPZiBKb2huIE1hdHRzc29uDQpTZW50OiBXZWRuZXNkYXks IE5vdmVtYmVyIDIxLCAyMDE4IDc6MDMgQU0NClRvOiA8YSBjbGFzcz0ibW96LXR4dC1saW5r LWFiYnJldmlhdGVkIiBocmVmPSJtYWlsdG86YWNlQGlldGYub3JnIj5hY2VAaWV0Zi5vcmc8 L2E+OyA8YSBjbGFzcz0ibW96LXR4dC1saW5rLWFiYnJldmlhdGVkIiBocmVmPSJtYWlsdG86 bHdpcEBpZXRmLm9yZyI+bHdpcEBpZXRmLm9yZzwvYT4NCkNjOiBCZW5qYW1pbiBLYWR1ayA8 YSBjbGFzcz0ibW96LXR4dC1saW5rLXJmYzIzOTZFIiBocmVmPSJtYWlsdG86a2FkdWtAbWl0 LmVkdSI+Jmx0O2thZHVrQG1pdC5lZHUmZ3Q7PC9hPjsgPGEgY2xhc3M9Im1vei10eHQtbGlu ay1hYmJyZXZpYXRlZCIgaHJlZj0ibWFpbHRvOnNhbHZhZG9yLnAuZkB1bS5lcyI+c2FsdmFk b3IucC5mQHVtLmVzPC9hPg0KU3ViamVjdDogUmU6IFtBY2VdIEVESE9DIHN0YW5kYXJkaXph dGlvbg0KDQpIaSBhbGwsDQoNCkluc3BpcmVkIGJ5IHRoZSBkaXNjdXNzaW9uIGluIHRoaXMg dGhyZWFkLCBJIGRpZCBtb3JlIGRldGFpbGVkIGNhbGN1bGF0aW9ucyBvZiB0aGUNCm51bWJl ciBvZiBieXRlcyB3aGVuIERUTFMgMS4zIGlzIHVzZWQgZm9yIHR5cGljYWwgSW9UIHVzZSBj YXNlcyAoUFNLLCBSUEssDQpDb25uZWN0aW9uIElEKS4gVGhlIHBsYW4gaXMgdG8gYWRkIHRo aXMgaW5mb3JtYXRpb24gdG8gZHJhZnQtaWV0Zi1sd2lnLXNlY3VyaXR5LQ0KcHJvdG9jb2wt Y29tcGFyaXNvbiBhcyB0aGlzIGhhcyBiZWVuIHJlcXVlc3RlZCBieSBzZXZlcmFsIHBlb3Bs ZS4gSSB0aGluayBzb21lDQpieXRlcyB3ZXJlIG1pc3NpbmcgaW4gdGhlIGVhcmxpZXIgZXN0 aW1hdGVzIGZvciBUTFMgMS4zLCBhbmQgYXMgQmVuIGNvbW1lbnRlZCwNCkRUTFMgMS4zIGFk ZHMgc29tZSBieXRlcyBjb21wYXJlZCB0byBUTFMgMS4zLg0KDQo9PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQo9PT09 PT09PT09PT09PQ0KRmxpZ2h0ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAjMSAg ICAgICAgICMyICAgICAgICAjMyAgICAgICBUb3RhbA0KLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tDQpEVExTIDEuMyBSUEsgKyBFQ0RIRSAgICAgICAgICAgICAgICAgMTQ5ICAgICAgICAz NzMgICAgICAgMjEzICAgICAgICA3MzUNCkRUTFMgMS4zIFBTSyArIEVDREhFICAgICAgICAg ICAgICAgICAxODYgICAgICAgIDE5MCAgICAgICAgNTcgICAgICAgIDQzMw0KRFRMUyAxLjMg UFNLICAgICAgICAgICAgICAgICAgICAgICAgIDEzNiAgICAgICAgMTUwICAgICAgICA1NyAg ICAgICAgMzQzDQotLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkVESE9DICAgIFJQSyArIEVD REhFICAgICAgICAgICAgICAgICAgMzggICAgICAgIDEyMSAgICAgICAgODYgICAgICAgIDI0 NQ0KRURIT0MgICAgUFNLICsgRUNESEUgICAgICAgICAgICAgICAgICA0MyAgICAgICAgIDQ3 ICAgICAgICAxMiAgICAgICAgMTAyDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQo9PT09PT09PT09PT09PQ0KICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgTnVtYmVyIG9mIGJ5dGVzDQoNCkFzc3Vt cHRpb25zOg0KLSBNaW5pbXVtIG51bWJlciBvZiBhbGdvcml0aG1zIGFuZCBjaXBoZXIgc3Vp dGVzIG9mZmVyZWQNCi0gQ3VydmUyNTUxOSwgRUNEU0Egd2l0aCBQLTI1NiwgQUVTLUNDTV84 LCBTSEEtMjU2DQotIExlbmd0aCBvZiBrZXkgaWRlbnRpZmllcnM6IDQgYnl0ZXMNCi0gQ29u bmVjdGlvbiBpZGVudGlmaWVyczogMSBieXRlDQotIFRoZSBEVExTIFJQS3MgdXNlIHBvaW50 IGNvbXByZXNzaW9uIChzYXZlcyAzMiBieXRlcykNCi0gTm8gRFRMUyBoYW5kc2hha2UgbWVz c2FnZSBmcmFnbWVudGF0aW9uDQotIE9ubHkgbWFuZGF0b3J5IERUTFMgZXh0ZW50aW9ucywg ZXhjZXB0IGZvciBjb25uZWN0aW9uIElEDQotIFZlcnNpb24gMzAgPGEgY2xhc3M9Im1vei10 eHQtbGluay1mcmVldGV4dCIgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2Ry YWZ0LWlldGYtdGxzLWR0bHMxMy0zMCI+aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2Ry YWZ0LWlldGYtdGxzLWR0bHMxMy0zMDwvYT4NCg0KKEVESE9DIG51bWJlcnMgYXJlIGZvciB0 aGUgc29vbiB0byBiZSBwdWJsaXNoZWQgLTExIHZlcnNpb24gd2l0aCBjaXBoZXINCnN1aXRl cykNCg0KSSBob3BlIHRoaXMgaW5mb3JtYXRpb24gaXMgdXNlZnVsIGZvciBwZW9wbGUuIFBs ZWFzZSBjb21tZW50IGlmIEkgbWlzc2VkDQpzb21ldGhpbmcgb3IgaWYgeW91IGhhdmUgYW55 IHN1Z2dlc3Rpb24gb2YgdGhpbmdzIHRvIGFkZCBvciBob3cgdG8gcHJlc2VudA0KdGhpbmdz LiBJIGRvIG5vdCBrbm93IGN1cnJlbnRseSBob3cgdGhlc2UgbnVtYmVycyBjb21wYXJlIHRv IERUTFMgMS4yLg0KDQpCZWxvdyBpcyBkZXRhaWxlZCBpbmZvcm1hdGlvbiBhYm91dCB3aGVy ZSB0aGUgYnl0ZSBpbiBkaWZmZXJlbnQgZmxpZ2h0cyBhcyB3ZWxsDQphcyB0aGUgUlBLcyAo U3ViamVjdFB1YmxpY0tleUluZm8pLiBNb3N0IG9mIHRoZSBieXRlcyBzaG91bGQgaGF2ZSB0 aGUgY29ycmVjdA0KdmFsdWUsIGJ1dCBtb3N0IG9mIHRoZSBsZW5ndGggZmllbGRzIGFyZSBq dXN0IHdyaXR0ZW4gYXMgTEwgTEwgTEwuIEJlbG93IGlzIGFsc28NCmluZm9ybWF0aW9uIGFi b3V0IGhvdyByZXN1bXB0aW9uLCBjYWNoZWQgaW5mb3JtYXRpb24gW1JGQyA3OTI0XSwgYW5k IG5vdA0KdXNpbmcgQ29ubmVjdGlvbiBJRCBhZmZlY3RzIHRoZSBudW1iZXIgb2YgYnl0ZXMu DQoNCg0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09DQpEVExTIDEuMyBGbGlnaHQgIzEgUlBLICsgRUNESEUNCj09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KDQpSZWNvcmQgSGVh ZGVyIC0gRFRMU1BsYWludGV4dCAoMTMgYnl0ZXMpDQoxNiBmZSBmZCBFRSBFRSBTUyBTUyBT UyBTUyBTUyBTUyBMTCBMTA0KDQoJSGFuZHNoYWtlIEhlYWRlciAtIENsaWVudCBIZWxsbyAo MTAgYnl0ZXMpDQoJMDEgTEwgTEwgTEwgU1MgU1MgMDAgMDAgMDAgTEwgTEwgTEwNCg0KCQlM ZWdhY3kgVmVyc2lvbiAoMiBieXRlcykNCgkJZmUgZmQNCg0KCQlDbGllbnQgUmFuZG9tICgz MiBieXRlcykNCgkJMDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcgMDggMDkgMGEgMGIgMGMgMGQg MGUgMGYgMTAgMTEgMTIgMTMgMTQNCjE1IDE2IDE3IDE4IDE5IDFhIDFiIDFjIDFkIDFlIDFm DQoNCgkJTGVnYWN5IFNlc3Npb24gSUQgKDEgYnl0ZXMpDQoJCTAwDQoNCgkJQ2lwaGVyIFN1 aXRlcyAoVExTX0FFU18xMjhfQ0NNXzhfU0hBMjU2KSAoNCBieXRlcykNCgkJMDAgMDIgMTMg MDUNCg0KCQlDb21wcmVzc2lvbiBNZXRob2RzIChudWxsKSAoMiBieXRlcykNCgkJMDEgMDAN Cg0KCQlFeHRlbnNpb25zIExlbmd0aCAoMiBieXRlcykNCgkJTEwgTEwNCg0KCQkJRXh0ZW5z aW9uIC0gU3VwcG9ydGVkIEdyb3VwcyAoeDI1NTE5KSAoOCBieXRlcykNCgkJCTAwIDBhIDAw IDA0IDAwIDAyIDAwIDFkDQoNCgkJCUV4dGVuc2lvbiAtIFNpZ25hdHVyZSBBbGdvcml0aG1z DQooZWNkc2Ffc2VjcDI1NnIxX3NoYTI1NikgKDggYnl0ZXMpDQoJCQkwMCAwZCAwMCAwNCAw MCAwMiAwOCAwNw0KDQoJCQlFeHRlbnNpb24gLSBLZXkgU2hhcmUgKDQyIGJ5dGVzKQ0KCQkJ MDAgMzMgMDAgMjYgMDAgMjQgMDAgMWQgMDAgMjANCgkJCTAwIDAxIDAyIDAzIDA0IDA1IDA2 IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBlIDBmIDEwIDExDQoxMiAxMyAxNCAxNSAxNiAxNyAx OCAxOSAxYSAxYiAxYyAxZCAxZSAxZg0KDQoJCQlFeHRlbnNpb24gLSBTdXBwb3J0ZWQgVmVy c2lvbnMgKDEuMykgKDcgYnl0ZXMpDQoJCQkwMCAyYiAwMCAwMyAwMiAwMyAwNA0KDQoJCQlF eHRlbnNpb24gLSBDbGllbnQgQ2VydGlmaWNhdGUgVHlwZSAoUmF3IFB1YmxpYyBLZXkpICg2 DQpieXRlcykNCgkJCTAwIDEzIDAwIDAxIDAxIDAyDQoNCgkJCUV4dGVuc2lvbiAtIFNlcnZl ciBDZXJ0aWZpY2F0ZSBUeXBlIChSYXcgUHVibGljIEtleSkgKDYNCmJ5dGVzKQ0KCQkJMDAg MTQgMDAgMDEgMDEgMDINCg0KCQkJRXh0ZW5zaW9uIC0gQ29ubmVjdGlvbiBJZGVudGlmaWVy ICg0MykgKDYgYnl0ZXMpDQoJCQlYWCBYWCAwMCAwMiAwMSA0Mg0KDQoxMyArIDEwICsgMiAr IDMyICsgMSArIDQgKyAyICsgMiArIDggKyA4ICsgNDIgKyA3ICsgNiArIDYgKyA2ID0gMTQ5 IGJ5dGVzDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLQ0KRFRMUyAxLjMgRmxpZ2h0ICMxIFBTSyArIEVDREhFDQotLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KRGlmZmVy ZW5jZXMgY29tcGFyZWQgdG8gUlBLICsgRUNESEUNCg0KKyBFeHRlbnNpb24gLSBQU0sgS2V5 IEV4Y2hhbmdlIE1vZGVzICg2IGJ5dGVzKQ0KICAwMCAyZCAwMCAwMiAwMSAwMQ0KDQorIEV4 dGVuc2lvbiAtIFByZSBTaGFyZWQgS2V5ICg1MSBieXRlcykNCiAgMDAgMjkgMDAgMkYNCiAg MDAgMGEgMDAgMDQgSUQgSUQgSUQgSUQgMDAgMDAgMDAgMDANCiAgMDAgMjEgMjAgMDAgMDEg MDIgMDMgMDQgMDUgMDYgMDcgMDggMDkgMGEgMGIgMGMgMGQgMGUgMGYgMTAgMTEgMTIgMTMg MTQgMTUNCjE2IDE3IDE4IDE5IDFhIDFiIDFjIDFkIDFlIDFmDQoNCi0gRXh0ZW5zaW9uIC0g U2lnbmF0dXJlIEFsZ29yaXRobXMgKGVjZHNhX3NlY3AyNTZyMV9zaGEyNTYpICg4IGJ5dGVz KQ0KDQotIEV4dGVuc2lvbiAtIENsaWVudCBDZXJ0aWZpY2F0ZSBUeXBlIChSYXcgUHVibGlj IEtleSkgKDYgYnl0ZXMpDQoNCi0gRXh0ZW5zaW9uIC0gU2VydmVyIENlcnRpZmljYXRlIFR5 cGUgKFJhdyBQdWJsaWMgS2V5KSAoNiBieXRlcykNCg0KMTQ5ICsgNiArIDUxIC0gOCAtIDYg LSA2ID0gMTg2IGJ5dGVzDQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLQ0KRFRMUyAxLjMgRmxpZ2h0ICMxIFBTSw0KLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCkRpZmZl cmVuY2VzIGNvbXBhcmVkIHRvIFBTSyArIEVDREhFDQoNCi0gRXh0ZW5zaW9uIC0gU3VwcG9y dGVkIEdyb3VwcyAoeDI1NTE5KSAoOCBieXRlcykNCg0KLSBFeHRlbnNpb24gLSBLZXkgU2hh cmUgKDQyIGJ5dGVzKQ0KDQoxODYgLSA4IC0gNDIgPSAxMzYgYnl0ZXMNCg0KDQoNCj09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KRFRM UyAxLjMgRmxpZ2h0ICMyICBSUEsgKyBFQ0RIRQ0KPT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQoNClJlY29yZCBIZWFkZXIgLSBEVExT UGxhaW50ZXh0ICgxMyBieXRlcykNCjE2IGZlIGZkIEVFIEVFIFNTIFNTIFNTIFNTIFNTIFNT IExMIExMDQoNCglIYW5kc2hha2UgSGVhZGVyIC0gU2VydmVyIEhlbGxvICgxMCBieXRlcykN CgkwMiBMTCBMTCBMTCBTUyBTUyAwMCAwMCAwMCBMTCBMTCBMTA0KDQoJCUxlZ2FjeSBWZXJz aW9uICgyIGJ5dGVzKQ0KCQlmZSBmZA0KDQoJCVNlcnZlciBSYW5kb20gKDMyIGJ5dGVzKQ0K CQkwMCAwMSAwMiAwMyAwNCAwNSAwNiAwNyAwOCAwOSAwYSAwYiAwYyAwZCAwZSAwZiAxMCAx MSAxMiAxMyAxNA0KMTUgMTYgMTcgMTggMTkgMWEgMWIgMWMgMWQgMWUgMWYNCg0KCQlMZWdh Y3kgU2Vzc2lvbiBJRCAoMSBieXRlcykNCgkJMDANCg0KCQlDaXBoZXIgU3VpdGUgKFRMU19B RVNfMTI4X0NDTV84X1NIQTI1NikgKDIgYnl0ZXMpDQoJCTEzIDA1DQoNCgkJQ29tcHJlc3Np b24gTWV0aG9kIChudWxsKSAoMSBieXRlcykNCgkJMDANCg0KCQlFeHRlbnNpb25zIExlbmd0 aCAoMiBieXRlcykNCgkJTEwgTEwNCg0KCQkJRXh0ZW5zaW9uIC0gS2V5IFNoYXJlICg0MCBi eXRlcykNCgkJCTAwIDMzIDAwIDI0IDAwIDFkIDAwIDIwDQoJCQkwMCAwMSAwMiAwMyAwNCAw NSAwNiAwNyAwOCAwOSAwYSAwYiAwYyAwZCAwZSAwZiAxMCAxMQ0KMTIgMTMgMTQgMTUgMTYg MTcgMTggMTkgMWEgMWIgMWMgMWQgMWUgMWYNCg0KCQkJRXh0ZW5zaW9uIC0gU3VwcG9ydGVk IFZlcnNpb25zICgxLjMpICg2IGJ5dGVzKQ0KCQkJMDAgMmIgMDAgMDIgMDMgMDQNCg0KCQkJ RXh0ZW5zaW9uIC0gQ29ubmVjdGlvbiBJZGVudGlmaWVyICg0MykgKDYgYnl0ZXMpDQoJCQlY WCBYWCAwMCAwMiAwMSA0Mw0KDQpSZWNvcmQgSGVhZGVyIC0gRFRMU0NpcGhlcnRleHQsIEZ1 bGwgKDYgYnl0ZXMpIEhIIEVTIFNTIDQzIExMIExMDQoNCglIYW5kc2hha2UgSGVhZGVyIC0g RW5jcnlwdGVkIEV4dGVuc2lvbnMgKDEwIGJ5dGVzKQ0KCTA4IExMIExMIExMIFNTIFNTIDAw IDAwIDAwIExMIExMIExMDQoNCgkJRXh0ZW5zaW9ucyBMZW5ndGggKDIgYnl0ZXMpDQoJCUxM IExMDQoNCgkJCUV4dGVuc2lvbiAtIENsaWVudCBDZXJ0aWZpY2F0ZSBUeXBlIChSYXcgUHVi bGljIEtleSkgKDYNCmJ5dGVzKQ0KCQkJMDAgMTMgMDAgMDEgMDEgMDINCg0KCQkJRXh0ZW5z aW9uIC0gU2VydmVyIENlcnRpZmljYXRlIFR5cGUgKFJhdyBQdWJsaWMgS2V5KSAoNg0KYnl0 ZXMpDQoJCQkwMCAxNCAwMCAwMSAwMSAwMg0KDQoJSGFuZHNoYWtlIEhlYWRlciAtIENlcnRp ZmljYXRlIFJlcXVlc3QgKDEwIGJ5dGVzKQ0KCTBkIExMIExMIExMIFNTIFNTIDAwIDAwIDAw IExMIExMIExMDQoNCgkJUmVxdWVzdCBDb250ZXh0ICgxIGJ5dGVzKQ0KCQkwMA0KDQoJCUV4 dGVuc2lvbnMgTGVuZ3RoICgyIGJ5dGVzKQ0KCQlMTCBMTA0KDQoJCQlFeHRlbnNpb24gLSBT aWduYXR1cmUgQWxnb3JpdGhtcw0KKGVjZHNhX3NlY3AyNTZyMV9zaGEyNTYpICg4IGJ5dGVz KQ0KCQkJMDAgMGQgMDAgMDQgMDAgMDIgMDggMDcNCg0KCUhhbmRzaGFrZSBIZWFkZXIgLSBD ZXJ0aWZpY2F0ZSAoMTAgYnl0ZXMpDQoJMGIgTEwgTEwgTEwgU1MgU1MgMDAgMDAgMDAgTEwg TEwgTEwNCg0KCQlSZXF1ZXN0IENvbnRleHQgKDEgYnl0ZXMpDQoJCTAwDQoNCgkJQ2VydGlm aWNhdGUgTGlzdCBMZW5ndGggKDMgYnl0ZXMpDQoJCUxMIExMIExMDQoNCgkJQ2VydGlmaWNh dGUgTGVuZ3RoICgzIGJ5dGVzKQ0KCQlMTCBMTCBMTA0KDQoJCUNlcnRpZmljYXRlICg1OSBi eXRlcykgLy8gUG9pbnQgY29tcHJlc3Npb24NCgkJLi4uLg0KDQoJCUNlcnRpZmljYXRlIEV4 dGVuc2lvbnMgKDIgYnl0ZXMpDQoJCTAwIDAwDQoNCglIYW5kc2hha2UgSGVhZGVyIC0gQ2Vy dGlmaWNhdGUgVmVyaWZ5ICgxMCBieXRlcykNCgkwZiBMTCBMTCBMTCBTUyBTUyAwMCAwMCAw MCBMTCBMTCBMTA0KDQoJCVNpZ25hdHVyZSAgKDY4IGJ5dGVzKQ0KCQlaWiBaWiAwMCA0MCAu Li4uDQoNCglIYW5kc2hha2UgSGVhZGVyIC0gRmluaXNoZWQgKDEwIGJ5dGVzKQ0KCTE0IExM IExMIExMIFNTIFNTIDAwIDAwIDAwIExMIExMIExMDQoNCgkJVmVyaWZ5IERhdGEgKDMyIGJ5 dGVzKQ0KCQkwMCAwMSAwMiAwMyAwNCAwNSAwNiAwNyAwOCAwOSAwYSAwYiAwYyAwZCAwZSAw ZiAxMCAxMSAxMiAxMyAxNA0KMTUgMTYgMTcgMTggMTkgMWEgMWIgMWMgMWQgMWUgMWYNCg0K CVJlY29yZCBUeXBlICgxIGJ5dGUpDQoJMTYNCg0KQXV0aCBUYWcgKDggYnl0ZXMpDQplMCA4 YiAwZSA0NSA1YSAzNSAwYSBlNQ0KDQoxMyArIDEwMiArIDYgKyAyNCArIDIxICsgNzggKyA3 OCArIDQyICsgMSArIDggPSAzNzMgYnl0ZXMNCg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpEVExTIDEuMyBGbGlnaHQgIzIgUFNL ICsgRUNESEUNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLQ0KDQpEaWZmZXJlbmNlcyBjb21wYXJlZCB0byBSUEsgKyBFQ0RIRQ0KDQot IEhhbmRzaGFrZSBNZXNzYWdlIENlcnRpZmljYXRlICg3OCBieXRlcykNCg0KLSBIYW5kc2hh a2UgTWVzc2FnZSBDZXJ0aWZpY2F0ZVZlcmlmeSAoNzggYnl0ZXMpDQoNCi0gSGFuZHNoYWtl IE1lc3NhZ2UgQ2VydGlmaWNhdGVSZXF1ZXN0ICgyMSBieXRlcykNCg0KLSBFeHRlbnNpb24g LSBDbGllbnQgQ2VydGlmaWNhdGUgVHlwZSAoUmF3IFB1YmxpYyBLZXkpICg2IGJ5dGVzKQ0K DQotIEV4dGVuc2lvbiAtIFNlcnZlciBDZXJ0aWZpY2F0ZSBUeXBlIChSYXcgUHVibGljIEtl eSkgKDYgYnl0ZXMpDQoNCisgRXh0ZW5zaW9uIC0gUHJlIFNoYXJlZCBLZXkgKDYgYnl0ZXMp DQogIDAwIDI5IDAwIDAyIDAwIDAwDQoNCjM3MyAtIDc4IC0gNzggLSAyMSAtIDYgLSA2ICAr IDYgPSAxOTAgYnl0ZXMNCg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tDQpEVExTIDEuMyBGbGlnaHQgIzIgUFNLDQotLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KRGlmZmVy ZW5jZXMgY29tcGFyZWQgdG8gUFNLICsgRUNESEUNCg0KLSBFeHRlbnNpb24gLSBLZXkgU2hh cmUgKDQwIGJ5dGVzKQ0KDQoxOTAgLSA0MCA9IDE1MCBieXRlcw0KDQoNCg0KPT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQpEVExTIDEu MyBGbGlnaHQgIzMgUlBLICsgRUNESEUNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PQ0KDQpSZWNvcmQgSGVhZGVyICg2IGJ5dGVzKSAv LyBEVExTQ2lwaGVydGV4dCwgRnVsbCBaWiBFUyBTUyA0MiBMTCBMTA0KDQoJSGFuZHNoYWtl IEhlYWRlciAtIENlcnRpZmljYXRlICgxMCBieXRlcykNCgkwYiBMTCBMTCBMTCBTUyBTUyBY WCBYWCBYWCBMTCBMTCBMTA0KDQoJCVJlcXVlc3QgQ29udGV4dCAoMSBieXRlcykNCgkJMDAN Cg0KCQlDZXJ0aWZpY2F0ZSBMaXN0IExlbmd0aCAoMyBieXRlcykNCgkJTEwgTEwgTEwNCg0K CQlDZXJ0aWZpY2F0ZSBMZW5ndGggKDMgYnl0ZXMpDQoJCUxMIExMIExMDQoNCgkJQ2VydGlm aWNhdGUgKDU5IGJ5dGVzKSAvLyBQb2ludCBjb21wcmVzc2lvbg0KCQkuLi4uDQoNCgkJQ2Vy dGlmaWNhdGUgRXh0ZW5zaW9ucyAoMiBieXRlcykNCgkJMDAgMDANCg0KCUhhbmRzaGFrZSBI ZWFkZXIgLSBDZXJ0aWZpY2F0ZSBWZXJpZnkgKDEwIGJ5dGVzKQ0KCTBmIExMIExMIExMIFNT IFNTIDAwIDAwIDAwIExMIExMIExMDQoNCgkJU2lnbmF0dXJlICAoNjggYnl0ZXMpDQoJCTA0 IDAzIExMIExMIC8vZWNkc2Ffc2VjcDI1NnIxX3NoYTI1Ng0KCQkwMCAwMSAwMiAwMyAwNCAw NSAwNiAwNyAwOCAwOSAwYSAwYiAwYyAwZCAwZSAwZiAxMCAxMSAxMiAxMyAxNA0KMTUgMTYg MTcgMTggMTkgMWEgMWIgMWMgMWQgMWUgMWYNCgkJMDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcg MDggMDkgMGEgMGIgMGMgMGQgMGUgMGYgMTAgMTEgMTIgMTMgMTQNCjE1IDE2IDE3IDE4IDE5 IDFhIDFiIDFjIDFkIDFlIDFmDQoNCglIYW5kc2hha2UgSGVhZGVyIC0gRmluaXNoZWQgKDEw IGJ5dGVzKQ0KCTE0IExMIExMIExMIFNTIFNTIDAwIDAwIDAwIExMIExMIExMDQoNCgkJVmVy aWZ5IERhdGEgKDMyIGJ5dGVzKSAvLyBTSEEtMjU2DQoJCTAwIDAxIDAyIDAzIDA0IDA1IDA2 IDA3IDA4IDA5IDBhIDBiIDBjIDBkIDBlIDBmIDEwIDExIDEyIDEzIDE0DQoxNSAxNiAxNyAx OCAxOSAxYSAxYiAxYyAxZCAxZSAxZg0KDQoJUmVjb3JkIFR5cGUgKDEgYnl0ZSkNCgkxNg0K DQpBdXRoIFRhZyAoOCBieXRlcykgLy8gQUVTLUNDTV84DQowMCAwMSAwMiAwMyAwNCAwNSAw NiAwNw0KDQo2ICsgNzggKyA3OCArIDQyICsgMSArIDggPSAyMTMgYnl0ZXMNCg0KLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpEVExT IDEuMyBGbGlnaHQgIzMgUFNLICsgRUNESEUNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCkRpZmZlcmVuY2VzIGNvbXBhcmVkIHRv IFJQSyArIEVDREhFDQoNCi0gSGFuZHNoYWtlIE1lc3NhZ2UgQ2VydGlmaWNhdGUgKDc4IGJ5 dGVzKQ0KDQotIEhhbmRzaGFrZSBNZXNzYWdlIENlcnRpZmljYXRlIFZlcmlmeSAoNzggYnl0 ZXMpDQoNCjIxMyAtIDc4IC0gNzggPSA1NyBieXRlcw0KDQotLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCkRUTFMgMS4zIEZsaWdodCAj MyBQU0sNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tDQoNCkRpZmZlcmVuY2VzIGNvbXBhcmVkIHRvIFBTSyArIEVDREhFDQoNCk5vbmUN Cg0KNTcgYnl0ZXMNCg0KDQoNCg0KDQoNCg0KPT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09DQpEVExTIDEuMyAtIENhY2hlZCBpbmZvcm1h dGlvbiBbUkZDIDc5MjRdDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT0NCg0KLSBDYWNoZWQgaW5mb3JtYXRpb24gdG9nZXRoZXIgd2l0 aCBzZXJ2ZXIgWC41MDkgY2FuIGJlIHVzZWQgdG8gbW92ZSBieXRlcw0KZnJvbSBmbGlnaHQg IzIgdG8gZmxpZ2h0ICMxDQogIChjYWNoZWQgUlBLIGluY3JlYXNlcyB0aGUgbnVtYmVyIG9m IGJ5dGVzIGNvbXBhcmVkIHRvIGNhY2hlZCBYLjUwOSkNCg0KRGlmZmVyZW5jZXMgY29tcGFy ZWQgdG8gUlBLICsgRUNESEUNCg0KRmxpZ2h0ICMxDQoNCi0gRXh0ZW5zaW9uIC0gU2VydmVy IENlcnRpZmljYXRlIFR5cGUgKFJhdyBQdWJsaWMgS2V5KSAoNiBieXRlcykNCg0KKyBFeHRl bnNpb24gLSBDbGllbnQgQ2FzaGVkIEluZm9ybWF0aW9uICgzOSBieXRlcykNCiAgMDAgMTkg TEwgTEwgTEwgTEwNCiAgMDEgMDAgMDEgMDIgMDMgMDQgMDUgMDYgMDcgMDggMDkgMGEgMGIg MGMgMGQgMGUgMGYgMTAgMTEgMTIgMTMgMTQgMTUgMTYgMTcNCjE4IDE5IDFhIDFiIDFjIDFk IDFlIDFmDQoNCjE0OSArIDMzID0gMTgyIGJ5dGVzDQoNCkZsaWdodCAjMg0KDQotIEV4dGVu c2lvbiAtIFNlcnZlciBDZXJ0aWZpY2F0ZSBUeXBlIChSYXcgUHVibGljIEtleSkgKDYgYnl0 ZXMpDQoNCisgRXh0ZW5zaW9uIC0gU2VydmVyIENhc2hlZCBJbmZvcm1hdGlvbiAoNyBieXRl cykNCiAgMDAgMTkgTEwgTEwgTEwgTEwgMDENCg0KLSBTZXJ2ZXIgQ2VydGlmaWNhdGUgKDU5 IGJ5dGVzIC0mZ3Q7IDMyIGJ5dGVzKQ0KDQozNzMgLSAyNiA9IDM0NyBieXRlcw0KDQo9PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09DQo9PT09PT09PT09PT09PQ0KRmxpZ2h0ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAjMSAgICAgICAgICMyICAgICAgICAjMyAgICAgICBUb3RhbA0KLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tDQpEVExTIDEuMyBDYWNoZWQgWC41MDkvUlBLICsgRUNESEUgICAg MTgyICAgICAgICAzNDcgICAgICAgMjEzICAgICAgICA3NDINCkRUTFMgMS4zIFJQSyArIEVD REhFICAgICAgICAgICAgICAgICAxNDkgICAgICAgIDM3MyAgICAgICAyMTMgICAgICAgIDcz NQ0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PQ0KPT09PT09PT09PT09PT0NCg0KDQoNCj09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KRFRMUyAxLjMgLSBSZXN1 bXB0aW9uDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT0NCg0KVG8gZW5hYmxlIHJlc3VtcHRpb24sIGEgNHRoIGZsaWdodCAoTmV3IFNl c3Npb24gVGlja2V0KSBpcyBhZGRlZA0KDQpGbGlnaHQgIzQgLSBOZXcgU2Vzc2lvbiBUaWNr ZXQNCg0KUmVjb3JkIEhlYWRlciAtIERUTFNDaXBoZXJ0ZXh0LCBGdWxsICg2IGJ5dGVzKSBI SCBFUyBTUyA0MyBMTCBMTA0KDQoJSGFuZHNoYWtlIEhlYWRlciAtIE5ldyBTZXNzaW9uIFRp Y2tldCAoMTAgYnl0ZXMpDQoJMDQgTEwgTEwgTEwgU1MgU1MgMDAgMDAgMDAgTEwgTEwgTEwN Cg0KCQlUaWNrZXQgTGlmZXRpbWUgKDQgYnl0ZXMpDQoJCTAwIDAxIDAyIDAzDQoNCgkJVGlj a2V0IEFnZSBBZGQgKDQgYnl0ZXMpDQoJCTAwIDAxIDAyIDAzDQoNCgkJVGlja2V0IE5vbmNl ICgyIGJ5dGVzKQ0KCQkwMSAwMA0KDQoJCVRpY2tldCAoNiBieXRlcykNCgkJMDAgMDQgSUQg SUQgSUQgSUQNCg0KCQlFeHRlbnNpb25zICgyIGJ5dGVzKQ0KCQkwMCAwMA0KDQpBdXRoIFRh ZyAoOCBieXRlcykgLy8gQUVTLUNDTV84DQowMCAwMSAwMiAwMyAwNCAwNSAwNiAwNw0KDQo2 ICsgMTAgKyA0ICsgNCArIDIgKyA2ICsgMiArIDggPSA0MiBieXRlcw0KDQpUaGUgcmVzdW1w dGlvbiBoYW5kc2hha2UgaXMganVzdCBhIFBTSyBoYW5kc2hha2Ugd2l0aCAxMzYgKyAxNTAg KyA1NyA9IDM0Mw0KYnl0ZXMNCg0KPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KPT09PT09PT09PT09PT0NCkZsaWdo dCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIzEgICAgICMyICAgICAj MyAgICAgIzQgICAgVG90YWwNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KRFRMUyAxLjMg UlBLICsgRUNESEUgKyBOZXdTZXNzaW9uVGlja2V0ICAgIDE0OSAgICAzNzMgICAgMjEzICAg ICA0MiAgICAgIDc3Nw0KRFRMUyAxLjMgUFNLIChyZXN1bXB0aW9uKSAgICAgICAgICAgICAg ICAgIDEzNiAgICAxNTAgICAgIDU3ICAgICAgICAgICAgIDM0Mw0KPT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KPT09 PT09PT09PT09PT0NCg0KDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PQ0KRFRMUyAxLjMgLSBDb25uZWN0aW9uIElEDQo9PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NCg0KV2l0 aG91dCBhIENvbm5lY3Rpb24gSUQgdGhlIERUTFMgMS4zIGZsaWdodCBzaXplcyBjaGFuZ2Vz IGFzIGZvbGxvd3MNCg0KRFRMUyAxLjMgRmxpZ2h0ICMxOiAgIC02IGJ5dGVzDQpEVExTIDEu MyBGbGlnaHQgIzI6ICAgLTcgYnl0ZXMNCkRUTFMgMS4zIEZsaWdodCAjMzogICAtMSBieXRl DQoNCg0KDQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09DQo9PT09PT09PT09PT09PQ0KRmxpZ2h0ICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAjMSAgICAgICAgICMyICAgICAgICAjMyAgICAgICBUb3Rh bA0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpEVExTIDEuMyBSUEsgKyBFQ0RIRSAobm8g Y2lkKSAgICAgICAgMTQzICAgICAgICAzNjQgICAgICAgMjEyICAgICAgICA3MjENCkRUTFMg MS4zIFBTSyArIEVDREhFIChubyBjaWQpICAgICAgICAxODAgICAgICAgIDE4MyAgICAgICAg NTYgICAgICAgIDQxOQ0KRFRMUyAxLjMgUFNLIChubyBjaWQpICAgICAgICAgICAgICAgIDEz MCAgICAgICAgMTQzICAgICAgICA1NiAgICAgICAgMzI5DQo9PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQo9PT09PT09 PT09PT09PQ0KDQoNCg0KDQoNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PQ0KRFRMUyBSYXcgUHVibGljIEtleXMNCj09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KDQpTdWJqZWN0 UHVibGljS2V5SW5mbyB3aXRob3V0IHBvaW50IGNvbXByZXNzaW9uDQotLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQoweDMwIC8vIFNl cXVlbmNlDQoweDU5IC8vIFNpemUgODkNCg0KMHgzMCAvLyBTZXF1ZW5jZQ0KMHgxMyAvLyBT aXplIDE5DQoweDA2IDB4MDcgMHgyQSAweDg2IDB4NDggMHhDRSAweDNEIDB4MDIgMHgwMS4g ICAgIC8vIE9JRCAxLjIuODQwLjEwMDQ1LjIuMQ0KKGVjUHVibGljS2V5KQ0KMHgwNiAweDA4 IDB4MkEgMHg4NiAweDQ4IDB4Q0UgMHgzRCAweDAzIDB4MDEgMHgwNyAvLyBPSUQNCjEuMi44 NDAuMTAwNDUuMy4xLjcgKHNlY3AyNTZyMSkNCg0KMHgwMyAvLyBCaXQgc3RyaW5nDQoweDQy IC8vIFNpemUgNjYNCjB4MDAgLy8gVW51c2VkIGJpdHMgMA0KMHgwNCAvLyBVbmNvbXByZXNz ZWQNCi4uLi4uLiA2NCBieXRlcyBYIGFuZCBZDQoNClRvdGFsIG9mIDkxIGJ5dGVzDQoNClN1 YmplY3RQdWJsaWNLZXlJbmZvIHdpdGggcG9pbnQgY29tcHJlc3Npb24NCi0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNCjB4MzAgLy8g U2VxdWVuY2UNCjB4NTkgLy8gU2l6ZSA4OQ0KDQoweDMwIC8vIFNlcXVlbmNlDQoweDEzIC8v IFNpemUgMTkNCjB4MDYgMHgwNyAweDJBIDB4ODYgMHg0OCAweENFIDB4M0QgMHgwMiAweDAx LiAgICAgLy8gT0lEIDEuMi44NDAuMTAwNDUuMi4xDQooZWNQdWJsaWNLZXkpDQoweDA2IDB4 MDggMHgyQSAweDg2IDB4NDggMHhDRSAweDNEIDB4MDMgMHgwMSAweDA3IC8vIE9JRA0KMS4y Ljg0MC4xMDA0NS4zLjEuNyAoc2VjcDI1NnIxKQ0KDQoweDAzIC8vIEJpdCBzdHJpbmcNCjB4 NDIgLy8gU2l6ZSA2Ng0KMHgwMCAvLyBVbnVzZWQgYml0cyAwDQoweDAzIC8vIENvbXByZXNz ZWQNCi4uLi4uLiAzMiBieXRlcyBYDQoNClRvdGFsIG9mIDU5IGJ5dGVzDQoNCg0KPT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQpIZWxw ZnVsIFNvdXJjZXMgb2YgSW5mb3JtYXRpb24NCj09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PQ0KDQpJbiBhZGRpdGlvbiB0byByZWxldmFu dCBSRkNzIGFuZCB0aGUgZXN0aW1hdGVzIGRvbmUgYnkgSmltLCB0aGUgZm9sbG93aW5nDQpy ZWZlcmVuY2VzIHdlcmUgaGVscGZ1bDoNCg0KRXZlcnkgQnl0ZSBFeHBsYWluZWQ6IFRoZSBJ bGx1c3RyYXRlZCBUTFMgMS4zIENvbm5lY3Rpb24NCjxhIGNsYXNzPSJtb3otdHh0LWxpbmst ZnJlZXRleHQiIGhyZWY9Imh0dHBzOi8vdGxzMTMudWxmaGVpbS5uZXQvIj5odHRwczovL3Rs czEzLnVsZmhlaW0ubmV0LzwvYT4NCg0KRGlnaXRhbCBDZXJ0aWZpY2F0ZXMgZm9yIHRoZSBJ bnRlcm5ldCBvZiBUaGluZ3MgPGEgY2xhc3M9Im1vei10eHQtbGluay1mcmVldGV4dCIgaHJl Zj0iaHR0cHM6Ly9rdGguZGl2YSI+aHR0cHM6Ly9rdGguZGl2YTwvYT4tDQpwb3J0YWwub3Jn L3NtYXNoL2dldC9kaXZhMjoxMTUzOTU4L0ZVTExURVhUMDEucGRmDQoNCi9Kb2huDQoNCg0K DQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBCZW5qYW1pbiBLYWR1ayA8 YSBjbGFzcz0ibW96LXR4dC1saW5rLXJmYzIzOTZFIiBocmVmPSJtYWlsdG86a2FkdWtAbWl0 LmVkdSI+Jmx0O2thZHVrQG1pdC5lZHUmZ3Q7PC9hPg0KRGF0ZTogU2F0dXJkYXksIDMgTm92 ZW1iZXIgMjAxOCBhdCAxNTo1OQ0KVG86IEpvaG4gTWF0dHNzb24gPGEgY2xhc3M9Im1vei10 eHQtbGluay1yZmMyMzk2RSIgaHJlZj0ibWFpbHRvOmpvaG4ubWF0dHNzb25AZXJpY3Nzb24u Y29tIj4mbHQ7am9obi5tYXR0c3NvbkBlcmljc3Nvbi5jb20mZ3Q7PC9hPg0KQ2M6IDxhIGNs YXNzPSJtb3otdHh0LWxpbmstcmZjMjM5NkUiIGhyZWY9Im1haWx0bzpzYWx2YWRvci5wLmZA dW0uZXMiPiJzYWx2YWRvci5wLmZAdW0uZXMiPC9hPiA8YSBjbGFzcz0ibW96LXR4dC1saW5r LXJmYzIzOTZFIiBocmVmPSJtYWlsdG86c2FsdmFkb3IucC5mQHVtLmVzIj4mbHQ7c2FsdmFk b3IucC5mQHVtLmVzJmd0OzwvYT4sIDxhIGNsYXNzPSJtb3otdHh0LWxpbmstcmZjMjM5NkUi IGhyZWY9Im1haWx0bzphY2VAaWV0Zi5vcmciPiJhY2VAaWV0Zi5vcmciPC9hPg0KPGEgY2xh c3M9Im1vei10eHQtbGluay1yZmMyMzk2RSIgaHJlZj0ibWFpbHRvOmFjZUBpZXRmLm9yZyI+ Jmx0O2FjZUBpZXRmLm9yZyZndDs8L2E+DQpTdWJqZWN0OiBSZTogW0FjZV0gRURIT0Mgc3Rh bmRhcmRpemF0aW9uDQoNCk9uIEZyaSwgTm92IDAyLCAyMDE4IGF0IDAyOjU1OjU0UE0gKzAw MDAsIEpvaG4gTWF0dHNzb24gd3JvdGU6DQo8L3ByZT4NCiAgICAgICAgPGJsb2NrcXVvdGUg dHlwZT0iY2l0ZSI+DQogICAgICAgICAgPHByZSB3cmFwPSIiPkhpIEJlbmphbWluLCBTYWx2 YWRvcg0KDQpXaGlsZSBEVExTIDEuMyBoYXZlIGRvbmUgYSB2ZXJ5IGdvb2Qgam9iIG9mIGxv d2VyaW5nIHRoZSBvdmVyaGVhZCBvZiB0aGUNCjwvcHJlPg0KICAgICAgICA8L2Jsb2NrcXVv dGU+DQogICAgICAgIDxwcmUgd3JhcD0iIj5yZWNvcmQgbGF5ZXIgd2hlbiBhcHBsaWNhdGlv biBkYXRhIGlzIHNlbnQgKHNlZSBlLmcuDQo8YSBjbGFzcz0ibW96LXR4dC1saW5rLWZyZWV0 ZXh0IiBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1sd2ln LXNlY3VyaXR5LXByb3RvY29sLWNvbXBhcmlzb24tMDEiPmh0dHBzOi8vdG9vbHMuaWV0Zi5v cmcvaHRtbC9kcmFmdC1pZXRmLWx3aWctc2VjdXJpdHktcHJvdG9jb2wtY29tcGFyaXNvbi0w MTwvYT4gZm9yIGENCmNvbXBhcmlzb24gYmV0d2VlbiBkaWZmZXJlbnQgcHJvdG9jb2xzKSwg SSBkbyBub3QgdGhpbmsgdGhlIGhhbmRzaGFrZSBwcm90b2NvbA0KaXMgbXVjaCBsZWFuZXIg KGlzIGl0IGxlYW5lciBhdCBhbGw/KS4NCg0KKFRoZXJlIGFyZSBzb21lIGhhbmRzaGFrZSBt ZXNzYWdlcyB0aGF0IGFyZSByZW1vdmVkIGVudGlyZWx5LikNCg0KPC9wcmU+DQogICAgICAg IDxibG9ja3F1b3RlIHR5cGU9ImNpdGUiPg0KICAgICAgICAgIDxwcmUgd3JhcD0iIj5XZSB0 cmllZCB0byBtYWtlIGFuIGZhaXIgY29tcGFyaXNvbiBiZXR3ZWVuIEVESE9DIGFuZCBUTFMg MS4zIGluIHRoZQ0KPC9wcmU+DQogICAgICAgIDwvYmxvY2txdW90ZT4NCiAgICAgICAgPHBy ZSB3cmFwPSIiPnByZXNlbnRhdGlvbiBhdCBJRVRGIDEwMSAoc2VlDQo8YSBjbGFzcz0ibW96 LXR4dC1saW5rLWZyZWV0ZXh0IiBocmVmPSJodHRwczovL2RhdGF0cmFja2VyLmlldGYub3Jn L21lZXRpbmcvMTAxL21hdGVyaWFscy9zbGlkZXMtMTAxLWFjZS1rZXkiPmh0dHBzOi8vZGF0 YXRyYWNrZXIuaWV0Zi5vcmcvbWVldGluZy8xMDEvbWF0ZXJpYWxzL3NsaWRlcy0xMDEtYWNl LWtleTwvYT4tDQpleGNoYW5nZS13LW9zY29yZS0wMCkuIFNpbmNlIHRoZW4sIHdlIGhhdmUg c2lnbmlmaWNhbnRseSBvcHRpbWl6ZWQgdGhlDQplbmNvZGluZyBpbiBFREhPQyBhbmQgdGhl IHVwY29taW5nIHZlcnNpb24gKC0xMSkgaXMgZXhwZWN0ZWQgdG8gaGF2ZSB0aGUNCmZvbGxv d2luZyBtZXNzYWdlIHNpemVzLg0KPC9wcmU+DQogICAgICAgIDxibG9ja3F1b3RlIHR5cGU9 ImNpdGUiPg0KICAgICAgICAgIDxwcmUgd3JhcD0iIj4NCiAgIEF1dGguICAgICAgICAgICAg ICAgUFNLICAgICAgIFJQSyAgICAgICB4NXQgICAgIHg1Y2hhaW4NCiAgIC0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tDQogICBFREhPQyBtZXNzYWdlXzEgICAgICA0MyAgICAgICAgMzggICAgICAgIDM4ICAg ICAgICAzOA0KICAgRURIT0MgbWVzc2FnZV8yICAgICAgNDcgICAgICAgMTIxICAgICAgIDEy NyAgICAgICAxMTcgKyBDZXJ0aWZpY2F0ZSBjaGFpbg0KICAgRURIT0MgbWVzc2FnZV8zICAg ICAgMTIgICAgICAgIDg2ICAgICAgICA5MiAgICAgICAgODIgKyBDZXJ0aWZpY2F0ZSBjaGFp bg0KICAgLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0NCiAgIFRvdGFsICAgICAgICAgICAgICAgMTAyICAgICAg IDI0NSAgICAgICAyNTcgICAgICAgMjM3ICsgQ2VydGlmaWNhdGUgY2hhaW5zDQoNCkFzIFNh bHZhZG9yIHdyaXRlcywgdGhlIGhhbmRzaGFrZXMgaW4gVExTIDEuMyBhbmQgRFRMUyAxLjMg YXJlIGJhc2ljYWxseSB0aGUNCjwvcHJlPg0KICAgICAgICA8L2Jsb2NrcXVvdGU+DQogICAg ICAgIDxwcmUgd3JhcD0iIj5zYW1lLCBzbyB0aGUgbnVtYmVycyBwcmVzZW50ZWQgYXQgSUVU RiAxMDEgc2hvdWxkIGJlIGEgZ29vZCBlc3RpbWF0ZSBhbHNvIGZvcg0KRFRMUyAxLjMuDQo8 L3ByZT4NCiAgICAgICAgPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSI+DQogICAgICAgICAgPHBy ZSB3cmFwPSIiPg0KICAgQXV0aC4gICAgICAgICAgICAgICAgUFNLICAgICAgIFJQSw0KICAg LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0NCiAgIChEKVRMUyBtZXNzYWdlXzEgICAgIDE0MiAgICAgICAxMDcN CiAgIChEKVRMUyBtZXNzYWdlXzIgICAgIDEzNSAgICAgICAyNjQNCiAgIChEKVRMUyBtZXNz YWdlXzMgICAgICA1MSAgICAgICAxNjcNCiAgIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQogICBUb3RhbCAg ICAgICAgICAgICAgICAzMjggICAgICAgNTM4DQo8L3ByZT4NCiAgICAgICAgPC9ibG9ja3F1 b3RlPg0KICAgICAgICA8cHJlIHdyYXA9IiI+DQpUaGFua3MgZm9yIHRoZSBudW1iZXJzIQ0K DQo8L3ByZT4NCiAgICAgICAgPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSI+DQogICAgICAgICAg PHByZSB3cmFwPSIiPlRoZSBudW1iZXJzIGFib3ZlIGluY2x1ZGUgRUNESEUuIEZvciBoYW5k c2hha2UgbWVzc2FnZXMsIG15DQo8L3ByZT4NCiAgICAgICAgPC9ibG9ja3F1b3RlPg0KICAg ICAgICA8cHJlIHdyYXA9IiI+dW5kZXJzdGFuZGluZyBpcyB0aGF0IHRoZSBEVExTIDEuMyBh bmQgVExTIDEuMyByZWNvcmQgbGF5ZXIgaGF2ZSBleGFjdGx5IHRoZQ0Kc2FtZSBzaXplLg0K DQpUaGUgRFRMUyAxLjMgb25lcyB3aWxsIGJlIHdvcnNlLCBkdWUgdG8gdGhlIGVwb2NoIGFu ZCBzZXF1ZW5jZSBudW1iZXIgZmllbGRzLg0KDQotQmVuDQoNCl9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpBY2UgbWFpbGluZyBsaXN0DQo8YSBj bGFzcz0ibW96LXR4dC1saW5rLWFiYnJldmlhdGVkIiBocmVmPSJtYWlsdG86QWNlQGlldGYu b3JnIj5BY2VAaWV0Zi5vcmc8L2E+DQo8YSBjbGFzcz0ibW96LXR4dC1saW5rLWZyZWV0ZXh0 IiBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2FjZSI+aHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9hY2U8L2E+DQo8L3ByZT4NCiAg ICAgIDwvYmxvY2txdW90ZT4NCiAgICAgIDxwcmUgd3JhcD0iIj4NCg0KX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkx3aXAgbWFpbGluZyBsaXN0 DQo8YSBjbGFzcz0ibW96LXR4dC1saW5rLWFiYnJldmlhdGVkIiBocmVmPSJtYWlsdG86THdp cEBpZXRmLm9yZyI+THdpcEBpZXRmLm9yZzwvYT4NCjxhIGNsYXNzPSJtb3otdHh0LWxpbmst ZnJlZXRleHQiIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8v bHdpcCI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9sd2lwPC9hPg0K PC9wcmU+DQogICAgPC9ibG9ja3F1b3RlPg0KICAgIDxwPjxicj4NCiAgICA8L3A+DQogICAg PHByZSBjbGFzcz0ibW96LXNpZ25hdHVyZSIgY29scz0iNzIiPi0tIA0KZW1haWw6IDxhIGNs YXNzPSJtb3otdHh0LWxpbmstYWJicmV2aWF0ZWQiIGhyZWY9Im1haWx0bzpyc3RydWlrLmV4 dEBnbWFpbC5jb20iPnJzdHJ1aWsuZXh0QGdtYWlsLmNvbTwvYT4gfCBTa3lwZTogcnN0cnVp aw0KY2VsbDogKzEgKDY0NykgODY3LTU2NTggfCBVUzogKzEgKDQxNSkgNjkwLTczNjM8L3By ZT4NCiAgPC9ib2R5Pg0KPC9odG1sPg0K --------------7DC32BE31B967D5CF3F7C49C-- --------------E2024E14D7CE370FAF0DB3B9 Content-Type: application/pdf; name="slides-83-cfrg-5.pdf.pdf" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="slides-83-cfrg-5.pdf.pdf" JVBERi0xLjQKJcfsj6IKNSAwIG9iago8PC9MZW5ndGggNiAwIFIvRmlsdGVyIC9GbGF0ZURl Y29kZT4+CnN0cmVhbQp4nKVUy24TMRTdz1d4aVeMsa/frBCoIJBYtIzEgrKIkr7UJlXTRoJP 7l9wrjMzmZBKvGaS0fX1ffsc3wujLQnD7yDMl819Q1REMEkXIrGsq7hdituGfDpYDra3zVXz 5UisGiv4XV/uRfLBGBENPuvz5uKoOWmMuES2rB0/Nf1Uni/Fm655eZqE9dp40V3AwYoWPyMS afIiFKt9sqJbNl/lB9V6baPJJI+V4UA5ZtntxHdquy9b1Y7KzF6UXJBulF4o0tbFFKRQlHRK KU+jnyqXkd343wZ/C6UJ5GjcZu9B914h8LfuY3Pc1WHwi5lFCqKE7cwwPdsP7L+mZVllsVNC P61PyulMBU3Mxr7XykYdfYlyzk14PNHKKzWKQlmjY3Z5Mizz7NgGO3rGzo4SKWCCJ8B1u8hF W5+0z6i7eJQiugVq3R4nZR8w0dbW6dJUFAp140lT5d2Km4A2oMkH6OW1qnvGysVk61yN4non zh77c4yhTByHoMnZjKAul/EA7/fJsPyVKj7RwfLfmdODxfu0j5bwV2jJArzfg0rwiOKCTqUH yqlqSZeSTcCkvFw94SM+4wjlI+8YYwsjZ7DZXO+0N+JMjht/6lLtONMc/83OamKEKJZlkj+U Mzj91hs++cH0blWPe3O75zKIM+6Cg1fnM6UALXbkg2xtijpFTKgCr9bCUWp2ueCyGNuA8Ba1 RVClGjCRQTDcC4ziRR0boQsrV/g/wTkVRKNaB1rHZ6MYkISOccfkMZzpydvGwjdcS2WkwTlD L+dQyPMtQxqUyF4uK2iDTZXKo8V1pS2VSOiARWeKl68wz4A7pXLU60Cx1HL6WA/bIXog/XG0 nOxvnk9ws3PTo9u03O/qMOxr3EAG92CQlxPLvW6CtoZsnwm5fN9KFWsmX0DP+S793V6ow8uV CvjiXCUM+EIDXU6an9J0dN9lbmRzdHJlYW0KZW5kb2JqCjYgMCBvYmoKNzA1CmVuZG9iagox MiAwIG9iago8PC9MZW5ndGggMTMgMCBSL0ZpbHRlciAvRmxhdGVEZWNvZGU+PgpzdHJlYW0K eJztWFlvGzcQft9fwcdl0GV5H31sEbcpELR1BfTB6YNh+VAjyY4TpchP7r/okHtwdpey5QNu HirZAskdDuf4ZoazHwhnQhIev/3gbFN9qKQMxHDHgpRkk2a2nZJ1JbWbTXvadXVV/fGKbCtB 4vf2csRJG86J5fBze15dvKp+qzi5hNM8U/GTjsfjsw35flF9e+yI0IxrsriADYI08MeJk0xq YoJg2gmy2FQn9RvaaCYs97J+TXlk5K2vF3l4RNvndUObYdHHXdIpU6th9A2VTCjrTE2odMw5 5zH3Y6o8nM71vcx/gEVupJLD47i7X/uRAuM/Fz9XrxfJGPELNrPSkGBam4H1RGewJ1lLxCUB T4LprPWWKuZlACVOB71vqbDM6mDrs6iEho8V9RUdhoQKzqxXHhmLF83W08kCnRhGkgImogWi 3DIJLa2LWGyUYJIsliDpL7SR9Y6K+lMcrOPPKv5sYemcgmAtA08k7xSHzSrCs1EgkG25wKGS haC5qBltBNeKaQEOkkzJIEH1Jo2Mq7/QnvAm7/kEiwZ8YerrvHiZh2j/KdjLexOkBgb986tM mvkDuiTTwBYU6tlvW0IlPTzWTAfBZf1TXGyfZ0p0OuK+Hp7jc8AdEKidut5rrMU2Dz9Gt0v4 CIk07nRz4E6k20zkyOA8P1/m1axnDMyOP9r1OQ9X01P3C7uhQjCj1OjU7cRlOpgwUus7iGiI rRBa1AidYaMsaSIIlxUE8eKvMabgIW+R1GEGPH1dEiaPdkWxs4ZnWWxk12z3VQlzW2zWzq2n Rf2XBcoiALLECPC7EvZnYsoRdstiok0ZnCSmGm2dSOHdLX4uAgkB4apIcLoHdP0Jb+FU54Sf iZ/AkUejMyGvzhHSHAiRXyPgxuJP8FLMJwgQ16WIhjjykIqV+Jow2OeoI6TzurTr7+ToWUAO 2NzrpsQoj0puapzsHXMSa1Mh1bepR2iPLbouKFrM+kWLZYhlfyCDI8+XkT0OS8XVvAxJs0eg O8tQjJVRGSpVii+5+D4pC75g6VxRD7AO3I290FeX3xEEkZkR7dw70VSrAsr2WOfQDIBFyeyX +2AwgxFSupzdy0V3lGBbbB0PKR/R4QDM4pXLf/l8ZFR0CXuMqd5k/xcr0boU+QcV/3LNOrC0 jlwyqZgTQ6FbPDRPykji7dA9xSnkvK5BSv3SZNoTp/YJuqf7L/nYzPmWrzjEAYF8x0R7y2/N nuRqJXNALNJpSbI4Nc6iTm467YgPl8zfIZjmvWAnD0uYHbwminSi9opYuOwjySfTQa/nUMQH JtV+C3dHd4JJHxSSZDLNcj6HYMHkBg9noBtsTcu8U2FUyHI4XEBbaKGtDvsqXp9rC1ecSZDc FDMUoi2F4yhHKR/GfscvGzbTVxHaydn08W8mumZcazfuxs2DunFPoJcdeQouQMQow1zo/HTc mskn5SGH/QM/BJynU7/LOAevgtV6mt0qr74n7+rhwaFbEl086Qz+d5kKEQEXEccSqqDi4PRG c4jYQc7rLSRAuFuuR1v64WnUIjJPm99RuKOljemeJiAOHa6SGnX0yyhWLFy1pDij4iS5maVQ Y+x0+mIZFSfJzSyFGuNn0680o2LJN7MUmiSfTF8oo2JJNrMUGiWZTP/PqA/IqI8zjYS7EbEe sMdtaxp9X8uV0ZlHkFcENI9u7x239AYD3RYR+0UeHlHIAM/Q1jyskVPQBisRBXGQB+ML42Iv 9MSr8qPbzLv6i3Kn9B7fdjvYvJDQFtJBfI3eE3S37eTd3BaWxZ7Gndd7e/f/IO6+qrdJHync Qqw12BY77PVs9eK73stRdM7apXKrXUboNDH9Cx4bfQllbmRzdHJlYW0KZW5kb2JqCjEzIDAg b2JqCjEzODIKZW5kb2JqCjE3IDAgb2JqCjw8L0xlbmd0aCAxOCAwIFIvRmlsdGVyIC9GbGF0 ZURlY29kZT4+CnN0cmVhbQp4nKVV23LTMBB991foDamDVd0lv9Ipt4GBBs/w0PLQSdqmkKT0 kjL9ZP6CXdmW5NQMFOI2s9bez55VrongUhGBzyDM19V1pVRDrPC8UYqs45vrXsmqUsY/eh1s V9Wy+rxHNpUk+NxcjCIZKwRxAr5uzqrzveqoEuQCsgWu8RPTl/J8TV601f7ME2m4MKQ9BwdJ avgTxCuuDLGN5MZL0q6rY/qG1YZLJ4Kih0xgoOACbbP4knV6WrM6HQb0Ul5bqpP0nCkutfOW EqY8996HMvqM6QDZhflj8AM4FFZpldToPZy9YhD4S/u2OmwjGPgAZk5Z0tgOM0BP9oD9F1oS jyRoGtuj9Z5pHlQDTZymvm+YdNyZxtE5NmHg4yRdsiQSJgV3QYcCLDEJ22CnJuxkkhQDTiQE rsdsWu9yzXj16PXfqdejbYwfw22fBHcgsDgjrK2BKNpy3/RIz1iteNMEYekZM3TzE77IJ8CA 3qFGCNkg9IPN9jKffiMnNCn+1iXaYaY5/G+zVWEEUSTKij4wLWBctRFA1lTn1eYWLOh2NXIZ xFPsAoNH5xPGtI6OOMhaese9A4TaBfQea8EoMTtdYFlIDuAPWiN+SvR09RYvIekCd53zAZSu VQgGWq0H8SH2Y4Sk37t6UbyDQwubApXnw4ssdv5aaKhd8BBsowz4D+pltszhYfUVNxCVnifv q6mQBLfGOC/pazyD+dsG2h2koowizyrpy4ywNUD5rvGdfJss3uJyKvhI1XUe40z2mMso/M+y fpFPoV8bdxHu1fZd1e4dx2u0z1O432fxMuFeTGhU9CCtmZTcaunK7JudCcZCb+F2bTpySJPZ AffqszFfdGJZJkqRO2fM0nYSzwzSPNdWgJhry5bTk9lP+qkR5joK6m6nMHhK8kfzw8l9iEyM k7mfHHxmy3JSf1pypL+kxwOpAf8aubLA2bRffzecj8jWUdbdSd1NNVaM4mpqbaDdAD9LulzP 1VSgH3kpE7Xiz81R9QvGyN3BZW5kc3RyZWFtCmVuZG9iagoxOCAwIG9iago3NTcKZW5kb2Jq CjIxIDAgb2JqCjw8L0xlbmd0aCAyMiAwIFIvRmlsdGVyIC9GbGF0ZURlY29kZT4+CnN0cmVh bQp4nKWYy27cNhSG93oKLskgo/B+WfbiFi1QoHEEZNFkEUzsOOjQru160UfuW/SQHEmHZGC2 6Yw94OF/eD6RQ+sXfU/4LCTh6b02jnG6n6QMxHA3BylJzJEtITlNUrsuXHNP08309gW5nQRJ 74dPVSVtOCeWw8fD1XT9Yno9cfIJaH5W6ZXxuH2M5NtlenXpiNAz12S5hgGCHOCHEydnqYkJ YtZOkCVOv9Gf2EHPwnIv6QXjqZC3ni578wdWdHpgh63Tp1HSKUPV1nrJ5CyUdYYSJt3snPO4 +iVTHuhcD4t/B53cSCU3OY1e+35kUPj98vN0seTFSG9YMysNCaasGayeOC/Y/1otkboEKMGc V+sXpmYvA0ziwzbvBybsbHWw9JgmoeFlBb1hW5MwwWfrlUeLxb+4bGue/EKe2FqSwZ7YVuB+ skoS4S1PeyvmSAdpyk5z3jfRmpm3Hey6e1gGxa2HSRubp42SYGO/upSKfH8HpMTCYmyqB62b aMjCSYWldxYWY1NdpC+4CYe0KqvgzI6r1NgRJNRowjEQZxWgRUCsxo6ghWzDMRBnFaBDQKzG jmCsb8MxEGcVoEdArMaO4KRuwzEQZxVgQECsxo7gPW/DMRBnZaDiCIjV2BIkV7YNh8AqqwDF DqzU2BFEkG04BuKsApQIiNXYEZT2bTgG4qwCRLeYSo0dIVlnEz4DhJkkoO6+Q3Sfqdw4tl6t nezCr7fus1tp7Wq7Mv/JrmB9ZO1VRkMVZWYXzk51yQ5yDsFzQ6+Yprd/wwd5Ax5C/0wK5yIk 61pznj7vvb+Td3QT/u2QnJdIR/h92rNQElQRqS3pX0xxsLuD5mD223Xe3T5CBn06VUPW5oc0 i1Q8D37HmFJ5YDLCg3B2dhZWaPkIc8/XkqpkOv2YLiuZK9UM2Wa1dWK3saz0bfjcxi77DGeV fYYMplJjR3Bet+H4LwlnFSAymEqNHSFo3oZjIM4qQGQwlRpbguLBtuEQWGUVIDKYSo0dQRrZ hmMgzipAZDCVGjuC5r4Nx0CclYEaGUylxo5grG7DMRBnFSAymEqNHcFJ3oZjIM4qQGQwlRo7 gne2DcdAnFWAyGAqNbYEzasH6BwOgVVWASKDqdTYEUT1FJ3DMVC0T+ka3WkqNXYEVT1K53AM VO2jukZ3mkqNHUF724bPAGFsAupuhuhOM3LI9AjRn+gMdFgh4Bh1dsllO2DebK2rfHKTqpzI FBQRjv66n1kf9jPt3TYogi6EBPlzkstR9XGvVBWVYjbeOzT8Gh1/CfTqoG2gbxn4pXIa10R0 VPO0J6DeR9w0xqx2CcsTzk8QcPa0aclnWOzsnQtLZ9fs5Yfsmi6NEvRi9+njXZJu00duxXSZ IMFlrmb9iIz75d6EqZ3LfbOX+yPVwA8Ma/aJ7ePcWU0n4/zfh7psJfPtw8GsbUrabP/19A/s zZVIZW5kc3RyZWFtCmVuZG9iagoyMiAwIG9iagoxMDgxCmVuZG9iago1MyAwIG9iago8PC9M ZW5ndGggNTQgMCBSL0ZpbHRlciAvRmxhdGVEZWNvZGU+PgpzdHJlYW0KeJzsvV2zJElynnff v+JcdsM0zYjw+Mi8JClIJspoFKGRUWY0XqwN0Gia9gDcJUST/j0rPbLS/fHKrDqtGVBGchbA 4rxd+RHxeoR/hUfkn97S11ze0vY/9z9+ef/0p0+lrG8tja9rKW/vivqEb3/8VOp4gPdr//jp +6d/8xdvf/cpv23/8+e/xZNqS+mtp9t//flvPn37i0//+lN6+9vb25avsv1HX+///uX97Z/9 /Omf/NV4y/Vrqm8/f7vdkN9+uv1vehvla6lvbc1f68hvP79/+ref/5cvP9WvuaelfP7LL2l7 0NKXzz/bn//Tl/n755++/HT847LdVYa0z3L89T98KV+z9NE+v30p4+sYY/FP/6svstzenurL h//z2z+mVqQcP2933//tf/5ye/C/+/lffPrLn5WM7X9unPXS3tY2Obuxl3fCfgu5pK9rXUte 3x7/2ISVl/HWasnbI8bttTm130ZYefunfPtlbbuw/uUX+bqU9cbhHw7a//wl96+9rv3zLxuH 9fafnj9//3L8+fYlp699kcXJKp1K7X5dObkuH3+VL7chuQlga3fRRt/EvdS3nyR/LW8///Wt of/8S/n89+9ffiqf9b/+7y/589/d/u/fb+DWzPz5D/+w/an477dftpd//sP2118r+qm5Z/yH 2z9tj9B7eOdNEuvSbq36wx+3f3n7V9t//6e/2V7x5+2/vt9uU/SHv76/5V9uNN3v0ofpf+33 3Dg7BtdvMXbu4zOvy212Z6nb1Tl1eVvmAHVjuGQZm8DTds37Dvsq+wsk5we4X7y9r0jSu5f9 bkmywXq/fIN9WQ+4PXtpO8y1EHZ/sUJ7lF68v+iPty6kr0tKY+vf2/Gndmc+VJ+Se3srq+wT I3R5f/G9y+vSfR8DPFp57/JOyftJH2W7u/gur2PxvfCw+4sfGCiO+2/3ho7FtfumCZpraID2 qnu79369nzRUtruza3fJY7imAHZ/8UM3iiPw2ycnofS1rWtP6yGq+1M2UWVp9VRW9zfvfZYm q+tkgNbM7/duHJJ+6KRsdzfX5xtMrhuA3V/8QEFx5H87Gtpdu2sexTU0wPvFR7tvbPh236Bv d819uHbfoLimAHZ/8exGzehkPdr9bFrdn6LTqi2norq/+N7lWrxsIjxa+f3ei0nJ+0kfZbvb i6ru9u/eZQ+7v/iBgeK4n9YvWSdrNt1R83kna/a6o/Zefa8C3C+2TtZSfSf3F9472XvynezN q0vA7i+efc4rGakXndzv2zpZ20Un91ftnWw5e80SoLXr3smdhPeTXsl2t1c0N8/JCwew+4sf +lwc29+Ohnpb1mTx0ohwv/ho9+0fvC1r6gpZu2Xxwmkyum+3h91fvHejopP5sGW/hR+/mfrb G8ujqb+NYvHmrqbmze6Eh4WfF69uXq7d3y3L4u+e0PwDvdjfvSTcPTLuHvQu9GJ/d0fLpaHl E9rdPba8suXClgtbXmPLhS0vbHlhyyW2nJwLORdyLpHzQs4LOS/kvETOCzkv5LyQ8xI5L+S8 kPNCzkvkvJDzQs4LOS+R80LOCzkv5LxEzgs5L+S8kPMSOc/kPJPzTM5z5DyT80zOMznPkfNM zjM5z+Q8R84zOc/kPJPzHDnP5DyT80zOc+Q8k/NMzjM5z5HzRM4TOU/kPEXOEzlP5DyR8xQ5 T+Q8kfNEzlPkPJHzRM4TOU+R80TOEzlP5DxFzhM5T+Q8kfMUOM8rOL/ZDd/yHd4v3y/2d4Pz W3yRcTc43y+2AOY3sHM3k3HrXm6Hm7jB29A4LIg8wP1ipa7msv2ejrtXhKubnPZfFeqz9e77 b20HywbU2v+yGaK0wTF/a+X47QbkuOuXoz1m/pqHaon3ixV2e1BNi72i5uRfv3eq7b+JNdp3 95c97v9Ibmh5W5kXKmv+Krfm1P413xNDP3/J+fN//FK2+9ctg6bJtN5W/+c//XLzE29/j8// 6kv5/O1Llvlfdt/ffKmf/+FLcfm13zIFMjnukvx46cvwAyRCcS6hztwZX97HS18PCW309iP6 nK6TDKO+z9TLFFgXuQtsE2aXXUapH7/tzpgc42XQbVgEsMlxscJiD9IheX+FDld7/d6puv/W rNG+u3O8fGisfL1pCQ6XIVtybpuINz93Dpctw3pryFrdX//0yyjlH0fu48akyxv0FfmMCQ8m 58Uux9OXFXffFJm/W+Fx97zY3z0K7u4Vdyu0u0cJdze2vLLlFS2fF/u7hS0XtlzYcoktL2x5 ZsszW15iy8l5I+eNnPfIeSPnjZw3ct4i542cN3LeyHmLnDdy3sh5I+ctct7IeSPnjZy3yHkj 542cN3LeIueNnFdyXsl5i5xXcl7JeSXnNXJeyXkl55Wc18h5JeeVnFdyXiPnlZxXcl7JeY2c V3JeyXkl5zVyXsm5kHMh5zVyLuRcyLmQc4mcCzkXci7kXCLnQs6FnAs5l8i5kHMh50LOJXIu 5FzIuZBziZwLOS/kvJBziZwXcl7IeSHnJXJeyHkh54Wcl8h5IeeFnBdyXiLnhZwXcl7IeYmc F3JeyHkh5yVyXsh5JueZnJfIeSbnmZxncp4j55mcZ3KeyXmOnGdynmtYzUDLc+Q8k/NMzjM5 z5HzTM4zOc/kPEfOMzlP5DyR8xw5T+Q8kfNEzlPkPJHzRM4TOU+R80TOEzlP5DxFzhM5T+Q8 kfMUOU/kPJHzRM5T5DyB81vQ61u+Q8TX/u5blLvibnC+Qxdfr+FucJ7XvuBuhS6+DqtMdV18 NKywHsuLbQstAvTRcJPmo+GWio+Ga199NFz74gLL+dsecm5RvwtHh7hQdcbnexA7uo+GN2/E h7+zL+bpDB8Nt7Lag5pke0UT8a/fO9X237o12nf3l4O9pYljr9g60UZXgPeLpxfQN1Hm1bF3 k5y5ee34VeH2sDyOhpR9AUWbX/a1AW3+toSZ9xYXfYXsYBx3/XK0lq7dATeqi63RbGI4HrQJ 6HjFJjz3+r1Tu2B19O2N9t3d2LvZWFsufb/Burrl0jtc77D5ddvv2+8Jd0vB3RMed8+L3d2l 4u7ccPeEx93zYnd38i0v6+pbfofH3Yktv/2ecPeCZeIdrsfDUrh7VNzdG+7uDXePGu5ubHll y8H5/WJ3d2XLhS0XtrzGlhe2PLPlmS0vseXkfCHny8qWR84Xcr6Q84WcL5HzhZwv5Hwh50vk fCHnCzlfyPkSOV/I+ULOF3K+RM4Xcr6Q84WcL5HzhZwPcj7I+RI5H+R8kPNBzkfkfJDzQc4H OR+R80HOBzkf5HxEzgc5H+R8kPMROR/kfJDzQc5H5HyQ807OOzkfkfNOzjs57+S8R847Oe/k vJPzHjnv5LyT807Oe+S8k/NOzjs575HzTs47Oe/kvEfOOzlv5LyR8x45b+S8kfNGzlvkvJHz Rs4bOW+R80bOGzlv5LxFzhs5b+S8kfMWOW/kvJHzRs5b5LyR80rOKzlvkfNKzis5r+S8Rs4r Oa/kvJLzGjmv5LyS80rOa+S8kvNKzis5r5HzSs4rOa/kvEbOKzkXci7kvEbOhZwLORdyLpFz IedCzoWcS+RcyLmQcyHnEjkXci7kXMi5RM6FnAs5F3Iu4PxXr4DcHvc152PB7KebY32bC/L5 /9zqgZc1l74Vruevaany+X+7/Z6+bqp1K7XOX28mts3S5f3P/+tL/3pzZmd18f5v/4hLZ+MW Nrt6vm2RxNUVTniUMM6LhwWX2xKLu3tbJHF3T3jcPS/2d9/CZn/3QE3jhHa3Xuzv7mj5tkji 725o+bzY313ZcmHLhS2vseXClhe2vLDlEltOzjs57+S8R84bOW/kvJHzFjlv5LyR80bOW+S8 kfNGzhs5b5HzRs4bOW/kvEXOGzlv5LyR8xY5b+S8kfNGzlvkvJLzSs4rOa+R80rOKzmv5LxG zis5r+S8kvMaOa/kvJLzSs5r5LyS80rOKzmvkfNKzis5r+S8Rs6FnAs5F3IukXMh50LOhZxL 5FzIuZBzIecSORdyLuRcyLlEzoWcCzkXci6RcyHnQs6FnEvkvJDzQs4LOS+R80LOCzkv5LxE zgs5L+S8kPMSOS/kvJDzQs5L5LyQ80LOCzkvkfNCzgs5L+S8RM4zOc/kPJPzHDnP5DyT80zO c+Q8k/NMzjM5z5HzXMNeALacnOfIeSbnmZxncp4j55mcZ3KeyXmOnCdynsh5Iucpcp7IeSLn iZynyHki54mcJ3KeIueJnCdynsh5ipwncp7IeSLnKXKeyHki54mcp8C5LrHY3bpIYnfv8H75 frG/G5zfpkHH3QrtbnD+bXdcba+DurW2y2LCY0PHvPgO716u3a1urd094XH3vNjfvTXG3T2w w2NCu1sv9nd3tFzdWnd3Q8vnxf7uypYLWy5seY0tF7a8sOWFLZfYcnLeyXkn5z1y3sh5I+eN nLfIeSPnjZw3ct4i542cN3LeyHmLnDdy3sh5I+ctct7IeSPnjZy3yHkj542cN3LeIueVnFdy Xsl5jZxXcl7JeSXnNXJeyXkl55Wc18h5JeeVnFdyXiPnlZxXcl7JeY2cV3JeyXkl5zVyLuRc yLmQc4mcCzkXci7kXCLnQs6FnAs5l8i5kHMh50LOJXIu5FzIuZBziZwLORdyLuRcIueFnBdy Xsh5iZwXcl7IeSHnJXJeyHkh54Wcl8h5IeeFnBdyXiLnhZwXcl7IeYmcF3JeyHkh5yVynsl5 JueZnOfIeSbnmZxncp4j55mcZ3KeyXmOnGdynsl5Juc5cp7JeSbnmZznyHkm55mcZ3KeI+eJ nCdynsh5ipwncp7IeSLnKXKeyHki54mcp8h5IueJnCdyniLniZwncp7IeYqcJ3KeyHki5ylw Ph3X4+7p1h537/B++X6xvxucT7fW3a3Q7gbne7GGbVvW6gzbmLzD+27h/eJyvFvrL/zdUnC3 FNytF/u7S8XdueFuhXa3XuzvTthwvVVn2N07tLsTW671F/7upeDuxbd8v9jfPSru7g1394a7 Rw13N7a8suXgfL/Y313ZcmHLhS2vseWFLc9seWbLS2w5OV/I+bKy5ZHzhZwv5Hwh50vkfCHn CzlfyPkSOV/I+ULOF3K+RM4Xcr6Q84WcL5HzhZwv5Hwh50vkfCHng5wPcr5Ezgc5H+R8kPMR OR/kfJDzQc5H5HyQ80HOBzkfkfNBzgc5H+R8RM4HOR/kfJDzETkf5LyT807OR+S8k/NOzjs5 75HzTs47Oe/kvEfOOznv5LyT8x457+S8k/NOznvkvJPzTs47Oe+R807OGzlv5LxHzhs5b+S8 kfMWOW/kvJHzRs5b5LyR80bOGzlvkfNGzhs5b+S8Rc4bOW/kvJHzFjlv5LyS80rOW+S8kvNK zis5r5HzSs4rOa/kvEbOKzmv5LyS8xo5r+S8kvNKzmvkvJLzSs4rOa+R80rOhZwLOa+RcyHn Qs6FnEvkXMi5kHMh5xI5F3Iu5FzIuUTOhZwLORdyLpFzIedCzoWcS+RcAudg9dvcTyut2srf Dfbsd/9GuF+8Z3O2QpM1H3dr1Yrx0o9fFW6vWvfduPO3toNlA/qaffP4DS7zt1aO33R/7/2u X472HO+bfTmGY2rHxQq7PWjbb3y8YtuL7F6/d6rtv4k12nf3BzYDP24cvz2n3mhydTDYOP5X ulv8Fmzlz//Pl/613/4z7vvGt/KXqnUv85//xy95O0Zv6K7xP25VMIr+8OWndbu6L5//3/tJ gf84W8lrOwr+FfaW3XCJsGVfxLRFaEnc6HFHGW1k339VuD0s5UMQ9WYYD/HVXZb7VvJqcu4e tOOuX+6trStaa7DJcbHCYg/aBqiBuvjXa6fuTduG/NFo391fNXqW+rbRuMg+eo6R8W/07Mhe 821A9Zy/piSPR3TOfqd5EtPydgur57FI+9p6vU9mpS6vhz7W08mWxfOR71P92/0f5uXv98uP Q9Xmw5xmGO5h3z5+BsNJVVnSw1R7+TrWnY+/0t30o457UVktqXx++7J+TTdl1ja+blOw3bfd bxf+r1/GdlbaOja+ftoaKv3tJ9kmqp6k+R++/LQXmv15O4HzNgBYc2a/uzq180vfvtyem7b9 OJ//4cu95O3vj/utmee3u+I396///njSf7KKuP0QzZ9KXr5uOaPtXNHZnXvdXVs/57t2aOvX cevzVnnHi4bYYaO3CH87DvV2Va0PV9X7VT/dnpVvz0pf6+OzxA4u3bZPbeL86eZ3bFT/JMM9 Vzay5UZo/fx3/3E7FvT9OHLUnxdat6tEnIK7DaztqIdy30GmcLRjB9m2ASvA/WJTcfdTGW+0 3lzJLtthsznd/pqniJbFv2AV/4gb3I7DLMsdVm3NesBCWLcDJvIB+3FKhUI7p2KD8wyLI6c1 z7foB9RHHe9t26PuJ5Pe4PaoeryobQd31ONRfTunph6P6tuT6/Govj25HY/ajqbs7WhV3/pr ibdtW1xvdu/2on68d2xdcGvR23v78d6xvbcf5Gwb57qtVE9oGb6tVWMBdDsD9aSQBXDlvSvu Han5F420AObsGzly9V0YefgOjpJ890cpnpxRmqdu2FDZiB2SPO3DpL8JZUjzIhsyvEAHxT3q 8d5tMAwT9zZURj0etQ2kmx70w2xUG6Lbo0z62xAdzUbs9igbDNvwHu14UU2A29QYNlREp+Ih /W3fooect2Uh5DQuvHc7McrBvOC9uaNVuRIW9Cgn9DcNsJE6uEoVTKYCnlPyUlhWyGhZu5fg sjYv32UVL/1lLX5sbElDN3KWZfXjalkw6pZl+DG5LN2P2GVpfjwvS/WjfVkwFyZM9qLi59Gy HZs6UvawL8VfbPNXH2Wze4fFN8M0gzbS9IZ2wbSKdtB0jnbfNJKSY/pKqTNtpsSarlPaTROq UExPqsg6Bep07CZup4FTgX5OFdo72RlE92HmNH+204vuQ9RZjW0AO5uyDW8PF9gjPUytYFod cHNLjxPw99/uGwV2O2fqSe2cNUJWmq5MKOhPtWOdFA5wUdfjCCbVR9mdKnWDQsO2dZ6azhm2 afbMRq40bJmGTWVvyrrSsKnZs53oOubsXh1zUPS9271qBc2ibOIciZBGcdAojtXDkWh+Es1P ToTimzFy940cefFdGCX7Do5SffdH6Z6cYYNsGqfsiXWmS42TiVuNk5Pv9iInX9Wh5qlsKqba ozJUalWzZyNnQP9uw8xbMqEly9Ds2wAeJv1pqww2WIVpjQxm2gw+KvNRueG9ma3KmRZloUUZ 6G9qNDDkKmXP5LZM5Xie5scZmE4D02hgxMt3mp9ij8p+bExrVMxmrH5cTWuUTR0PPyanNcqm ypsfzxMmGqdUCWGczMlbcFjcblEWGphBAzM6ofhG2vzd7Q3Mrc39aW968eSY3lDqTKvs5qd5 2k0jTfPjjFOncYKuU3E7TZgy9GSiFp3n7NmoG9DA83w+c6cytHembs+NtmoQrrAaao3MpjiL M09fl1TSzXA+/nEYqH0mvR9OIJ7tJ9ZKODDPdFKaZdBJadNuTsru6XHudKLGSpkTa+FMapw6 Bb7ZivBhnyuN0Mbs1oxkY3abOokzyc2GxtnQOBv0ENQwwId/UR/VN6MP+lc2/FeEePuIpgfV 6DI5d5pxaKJtn6Ny9UJxg3QOw+4F6gfpgH81hyH0t4eCMVsWQCmEFfdKJ1zw3sqpU9nmmQ0w 87XQ8Sn0dOCLTk/H+TLZ87zqeb0NkaYLwzsU2HRehhnz1Ut/h/A4+kJfJhyA68JwPQ+34eIV bpFzbdRbSZ1w9Y20uTCdlwxnzYfh8oa4O8N5aZihSqx3Twpmt4bDNvc1/nUOCPWGuhimVWSB zpEOjSSVsFCbLQ6qalzXdWrE8IeqRpXhWu6qUeFCb3XQtTV/VB1f57wWeLrqQ1tsrQ63OTfT HbcslE5oOvo2hHW8mxHSVJlFSHMmdc+Hhwkzac5Rg52QwVZJVBUd79XoypnGhUqooUcJqbJp dBtieuNqWSttf4GjsCIqmH7DgO43Ce6QIe/SAdfhLx6JViWJf5EL4lfEDNNAmbu2qt8vvoOj DN99FwYkpqzUW3UR8IKJpXkXm1iapDGeS8LEKkxZlYp5pnPFTbtCyCSNzkI3ZRMDjMrpPhic ZPRIQxcX53SwoVGQRd4aMhXTwZXBWGPkNryMpvJL4uE+2bU2cjf299n/u7H/3dj/buwddf91 GfvfA5sfDmzuuvCDIWS1EJI9VqYrqXU6qWLsKJfO2nGgJS7uqGk0Y6BLA86sKh/GZQdbyrQl 4dUkGz2aqknFy8G5AgoXXNwXPMqZAtXfg95MZ77BSuwTEhvTMWrIVLlFw0QFptrdDdIKbafq 3Eal6m/LchXajUJ3TahHNYddqbDd/C54r2aprVWVbVbX1nqkaWnnFjc6zeSqMR+s+tsWOtXh dmeeQkbTO1864IqLTfrTyXBqNfuRMz0S06MNo26qxoIOuhE7XZ/kyRlM8Lu5oMuCNlNUNdo8 0txqpS6s1IXVBT43RbtVlDz+YRNaFkxo89AKV011YZBuxHB+Q+EMXjmD1fXFeo6zOnN+Yy3I e9HKtDlGas+Q13PLaDrdE+foyphi4ZRdOGVtkW1V3w5qxq23zxnM0MaWNNQ/a6vvvp/fK2aD xlAux60ziUtSznunIzgnNCM7g8KIUugYCZ+sHphbAKholUajbu06BLYF/dXA1tjQsNe4agNM 6vy2FZ2evBTmdF+KhyZfvdgVI8w5mvyLXPWBhhiZAYiNugYbPBdLXGXK4AxmuYF6MzYXhDNF 6DYJ4yA3B+cHT48lRR1EdjSBgzbibExlT+qMrZ01UsfV5sFAfDyhzbDuXdMJV9zrZ9jC+Udf NHFNTSe6ranpEozp0EQdmlj/obUFhb6ZCUQjYJc5p4YtlE+hwp0SsFkihO1Etib5hPdO3c1h 4gqYkACYZsA6qKUkVv4yx6ONZeXKLEqjNerw+Rt8wmmrUruCqjIrXmThsrbKbGRFdmTWYK3U GSvSA3016jTRAq/e2eaiI/Z4lCalBvWcWX3VgpaEUx3ZzVINTA1VqKZ+1GHqMFwesugKk04/ cXsvcot/TIPaDxm+3zthfKR6AhN6vBgBg3BBvKhsGZzfhDM5NPChUjI+Ki2Zen0rncCVJmSl 8ioWMdjnwoutqN19CW+nMmzNNGoLJORMHg3iNJcs94jOsimRYIiT7/quFqn4BhXfYEbGuQfB tQiOB8Mw1YNO8SXM3ujwqOJDB324s0KJTEeLC+TODaMuCy5cYTGBMCYT3huM2jR5pgg6VRvz derwFuoUZ2pRNrWbadM4C5XXCm01LT6KJ8w47d7C8Bc752F6Got/kUvfqFtiOqWhbGqGLM6l yRh1wR3SCddAnXel6GgJ54KqxYoJ5+eRX7f+fvxDvU+7ebmpXCbghRU+lZFkZenq9Pisx1r7 hTpIlzebHp9JOHh81DinHt+gDBngOZEiRD/3B1HC5P1BRBLn/mCwv8E6B3+QlZ3RHwTtfp4x tT/9QSh6DyshncfMJ2c6NqcxmWmdD8RkpvzWpzFZZ0zW3pBkYanJymKSmTdBac1l1DX1d4y6 su+CG5Mz6mq++248ZxQv7iYIxD6YLy6RuSSLz4x8u/+DHJ57YSJ85tRDxt2g5uMb2uWibvtM pEJ9FFaJ/GqcNhMlTr7mBSmah/UH8Qpult4cXtJep2NJxwXRxgLFui+ScM3ELc49LrD4hOXw 3ugOu3+Rz32GzOjKQZrfkCcUb6IeMrIhIUk7OnO9WPV0pWSZZXczi8y8SYWv6lPOWqPH6V6p DGzMzsx3yIszax5y6rQ67r2VS4YaxzhDwRr4yv42Jn7jKgGZVA3taiEhhX0lz35lAD8hNwi4 dY+zVRErFKXfMFdjUOzpl/y5ktPpKMyCACywOOM2V5DC+tLqu+88g7A2FVeumLytnN2Ve1g0 HyuMvYS5HmeRWEE9V+oM2sdgD/V2h4fPIUeUM+8ufLaljbmgWKn8qqBdldqusrRu1jo/X/ZD Lsh5WZ0Z6E5T0VEUv4uU23RcBlpHx9Uq4CxQ7oBuFZDOzcgPo9LXKysc/kVxvIfZ4Nb5Bpyb jo0Le0Vy2B+DqhXn+Tf6K3HZb6VuYNFtpbabq4A2ZqnehItzp6uAVoLMVcC5AwYrGx52wrM1 QkvAnqwR0lHwS4bs0dT9jN3ikqF5JGHJMHmeZ0QpZqCql9GrJUO6a3EFEXp0N7lhBdHMNdJD +5IhK4PXcgWxsWyHtPyubrifeA1XtRQLHMFXpRXVz/0Z9buq8QS98by0InG7xfS/gncWfLfg 2aHw/cErPC+t+HZ3fe+7hgGnUtZurIm/23BZTqAxsnq4PyrAdLxqEuheNR6fvdBlv4J89h1i Ed2lpuav5byZZOTeRSwb+Yt9mzeXvaFPM4C1dk1oHs8gXE5g4sXn8Pv9H5b1eDPoe3jYCoIm LE8bwgTHWtknaHl/b3skwLXKJye/3VVZPtIQDu6jU/8h83eTsyBOn8sEAQovRob2AWb35sw3 58dnu/UKeQor7w2wsU8N5vm0mZV9quzxJcx8lF+n1qFcD835fkAsJHhYTiAX6h2sJ9Bx3WxP 8vv9bpf2qYQspG2onzh/FbdzR4iA5AGyi92NXbXo5VgFd3D2SktXypHZzvSdsjyF5bjX4ODF KOV4gC7Xl83mvx+w8mHcqXsNG5vZTt5MHydkoCNsxme16o73A6K84QnMb0ikZrjplUnHKifQ 8eUe9n7A8GZGIhGitPUBhjevbPV62qd7emjYXtHCteUJuXvOwfUEsv6DW4QOqJGbLZO+H5Bv NsHq3deQFR7qfwvd8djMynYZ7CewOL40c2d8MWjWhbIIGbxeQ+YE3Yt8dv1QaIUxZYC6CNcS YXh2aEhlq0GBv7jzvYuD3z7d15kPxVC9hvq+j0+nwSp1VA2VD/kEMjNUMPIfYJiC/s1cF6rU YFWeQurdWk/evPLJKzsRoJuR2ab3+67w3GyPkNV6mUopUynlegKdaHLhm8vJmyvvrqcP28ON 1gnDm8Maa4BOietqSDJTbnA39eb83E29X2kpJ5DVcRm2/QF6BznzVSfPdsuFdNnQ7vDs+0Jk WJcMDeEiZq7s0yWkj9a816n+snlh6pXSC0v0Z5I8hSyNSHT33Ise4N099g3Jjw3pcIAjHHCA XV4stZN2yRUUOHSpPIX079BmVlBZwPhO+McjYMyEIRQN8CJi3uF5oKqzaUFDJrRxN04gy2Ej vAxFzyLTcgrvw9BNrRiHhSgthDDyFNaT8Kfw4vP4z0IY46tiZMUQpp7AyxDmLKIpp/BuGLzL HTz0D/jvl5FBvYbmRR9RyQsvWk7gD7nNVoDoPc53QnPlCmFwQC/90XBx8GWXa2huYPbt6twG 4t3A9QQyuxadsXJ18epedBfNx90pOYELL/6QO3XmpwTn4uOux6NT4389HIB8jIJGXRDtfT2B H7L3Z8YwmJUzSxFgsDIBZl58bgy/+aPs4h+bNdkzisdGwZhSXU8gzzeKpidAFj1E6K1JpzUJ ucqzfKMJbjmBhRebpPoJfDAfllsLWv0DJiCUBgeYeHGAPuVVaC9CUkuewmBcgkUI9qKcwAd7 EXJFl/YiwJAcCqmjD5gPpylOcx+WV/k15iOfQJ/dMAPx/unRXgQlP07gef7i0bicWROfNhi0 FyFPsJxAPOwBBvNxaU3GCcwUzbAjMWO8/WvMR4A+dDfzgdH5xHyUE8ilrgvzgRfZBN0n/1kM J09hMD3PjUs5gUFlOU0RrUk5gR+KpR5tTbBE3k5ttqauy/aFocc/XDU1fR23zYtrlIXHFYUt gHODoImGRZ9hc2Hcehg2JobzmLBR72HLY9gQqQSEvZU8JCvhYl9BGDZxhi2emphEpOa3kYTN o2FrKdXR3JbaPXW+2pJbWmdxFoTysBWvXMCwb2/u6jPIGtC5q8SmdUMjw27CsNcw7kTsIKeR Oi3OcjUk3AEZ90eG3ZO69D8AF1zs92WGXZthT2fyA+lhPygPE4x7SVnnE/ahxl2qBVMj7HCd xdNXu2MxJS1XzCw1N2p2Ctw/WzPJwnZVtpqnH1g2ePaYIWw8cobLya7QSZlmcbWTg05Z7p69 3lvr95I/wsfR4ceODiWe9uHGnY5KnOfgN0bx6MVGj2vOBp5RICDWlSrOecZyJCfBMEfLyfyW K1h5ccKjZg2oVRhVNEM3vrnaU5QFTa86nCJjp9lq2bYrch2eul2tsk7baVkI5UFDY1/QhG6r fNDuGEj7znlWgPfhG+lreVYM4GiRKgZ/YmmPbuZytbaVhnFg0ulBR05GlSbXT+eTjU/m757Z ZuE7g23mYYHRNjOh2hj52hmrL2wzj12MtrnSNquy5qkICy33iotDdf8Ty43DSMLRDQ+W22c/ Pma5GQ+5Oq0zy528qK820e/7M6KpNq1wZqp5qKorbw2mGidR76YapyJ4Uz3AVTiO4COmOnsY d9hcGuNw/MLcvM2qoWiMcTr6gzHOnpwHYxx2pwdjLF4oVwdZmDE+/OcX1pevCl7BmfX98MkW wVehJxP8nP+/Trb4Mfsa/MkPnGyBrIPf+LT8sH2Fdh7Usq8MKmt03WniYavHB86eQZGhN6j9 tUGFjYxnz0STOfyj/gueLhNMJg8Li6fLPDeZLvGhGZqMagqn0bRewrZyBqgZGBvg+mwHB2Hn vQFSk6IZ34832/YG7q0OO6/jvuxBGPZ0M1Nb6CNHyORrYbnm7DEP/nBwBZSwEd8no7VKw4bT O+GhAPu4gJMe7Ga8hnjyvS507+Q7oTFSr2C4uD6S66gnDHvv8d6jUKpYMNcwgtT1MnoVRqFf wuG9qX38DAhuCVzTFNk8rzydbm7VT4QYA4eq+u+gix/IsXHsxeH0dOyFgXo6nKgX7xe/Po62 2N0n7QrPjodIPB31cYr4R6Fwws3x9xMNEPRDf5RRPJriCuLJHxDZoAUJmvxRzz+ofZyg8QBX Xrx+WGT2qmOp4dpY0ZS9tnu+meMBHhe/XMH0Fuad8Mw6nZ1Hcmn3np5HEuxPsE7RdgXLFuxe sIo8wfBPc5dRyccYUVjMvxnrA8xm/D/0SbObZ+pesKWJ7BHq5JZs7nOtG7SYp2/QTtFYNugD whv0NWU3aDsa9VE+trhBnyUt2X0Qa3uU+AjgBv2u1Bv0ubsbtEBk3KC5z317soVeY3uyuYQj b9BOPd1e5PjdXmTO5ti6YMtEY3uv5XbG1iP3/bOtGWYKJrQXba2y5ZYJK+TqzmLdoA1tvdjG 1ITDv6jYGUcTim9ksVhq60KxAsOtg8UWubfuF4vSN3KK+/7ZjbpiQ2UjtrhDjpcN+g2dNzi8 yIoT9/YiiruIDzRv0Ed4N2gjZ+sRvilTiju2eXuU22W7PcrFytujXKy8PQr7xm/Q51c93CZO cQefDEK9159SBJgAC+8tjVDw3pIA84I2544e5Yr+ZrKRE7hKC5hMHTynCikkyihlL8Et7enk uyXOnPS3+M+NjS3L5kbOFju6cbVFlm7UbalaNya3rZNuxG4bK9143rZdutG+bcp0c2GHx4uW 7ufRDv3OUTcHJxy82O3+7H5264ts7u+w+kZm9w2z1WsV7WB2n4nJXiMpOdmdgiFemymxpuuU dtOEKpTsvkK3QotuAs0Ud0be3uvnbahkJDe9bs8Jmj/TLuQKq5E7bEpeYHFKgj3apoazVsVs 533SZfOC8MEz/c2OOlMr6AxbRiOqoIm1oQN1oHtVH+VTTLBz+ii/i+xGnK+d9bS2lWYv0ewV mr1Ks6eyN5WqsrdHLTB7fXuR6SO1kbYsoTbS6vanjTQzsPXI0jVqI91nP7dmdJpM93U0zJMd wpLlJREOXOyMokIYtmxH+007V3wjC74CeoOL72BxXwFVjQMHorgvq20ax51UoGYve9q9UWw0 ilsz3EdBC41iglFsqlJ9Qv0G/TGIN2ijTmgjty64szdW6P06YBWqmh8Mfm8yM+C0ghbDDsIK 4zStoI8VPCy8d1pBg2xGYTPyijZn9ig39DcL2MiZdm4Fk4k8pwYpTKNoepASTMnLdxpFZ/YW mr3uR840ivgYhxt100biyx1uxE4bic98uNG+20iYTJsp0xrZeakTmtnDHNxhwsXOKMLHnS/C GQhOM0w759ZNs9cqu53zq3ZOIyk5Gd9Oc9psN3vD057dlzxX6MmUoEUTdew0ez4XDaNI7Z1W 6Pacofmz0EY2WI1Mm5JXWJySYY+mFfRBpbdlztJ95JT8OUd9+byfWKVjYs1J6dcxMM9WzrNB 2DDt1DXFsgbmmSpOv4x+g/5cTEydQY8RQc2cOigMuEF/zNYNYia5yaGD1B0mrND8SYRpEw7M wjw43t2SiI73ldAvtmByCDzGFWHp9Ota9uTkSkcO3zjCAF8wotVVc0O4cQgPDmE6PnOQmnYX ws4RvQAKMwlzCPvzngD5KOGjKptR2YzKaVfZo+nK+ROb4Kx1cNXoP3fyPN0x8xoWL6Pd4WJS wmUSIP3d4eqECOHzKIT0v9yX1BHUzItXpjtWvsi5VOJnynSa8LFaN8t2p6n47rtMwnSL/PK/ m93T8XFS6PSDqDfUtXHFhtQ507UxKPSDMrSZLIQdmtDpyY+kWJW85ThhZEJKeCyE9L87uMz4 /rB3x9XRd1821ojQL9L7MECzbjj77jaEGboIkiXOvGlq0K2dJ0wdYXpvTtnhyfMwUXMwfCyV MOG9Gi+6A4WFJnlFjzROddZdwIaGvPjIKryKThekeSnsKhlWxWv3DdqxU9ME+UI2n6VQR9A5 c4tPeMxES0EXijt8uftEy+7L0vF1RUcdU0cTSwLaXTZoWn5fEAq4cGIl3KuJNDcpF7xXgxN8 psm3WbN9LnGY0d+OXNEMt1xZ0cJALr0h95nfkCiFjCZcoO188GnTef8M2+rn9++2/3fb/7vt 99Puv13b/3uM9GtjpLse/WBwKocX5eAhB0Ec7HIzSrzTZwtSNcp0IdPuOHElz9dp39jy1Tg+ I6jEu52iickYzb743bEgb1NC7ti/7o3QhIMXu+8/LDQjml/xVXU+TaumAIXo3mvUTIar5FYz 4k+Q8epNLYMbswt0YeE6giYnhLpfqOyF2t3BFfdWrgLr2rRQfzvXlm1uWBmZeXfnJTP/3cmV JtqNSdXuriq2QyV3yGjqfvtMjMKFF698lCld1ZTuS7DVj6upOJ2WZZa6ccSqj4WPBfjRrnrU WcKOmaKK0x2VtWKWCTU0ZujrL7qJ5U/3Ekv/5kIFVwqn7ApHMWONcbq+1uMcvGjaJPWiM5O8 mS63uZHqkCdM97xiumectHITOEOMpV7BldN9xVDSF7n9m/AaZ2iDL7rdhvDiO+hWdBI9kow4 aIZUbvZjFXF6fq5qVmewr+CCMmA4Nqe7/7IEIJ2qyier94bPt/pWaejq5jejYPXeGkIMx8ac /XTmOgPqTmUwqAzcdG+c7t3L9wE2PzYmXDHdbVzNwAcl8n5MztnvC/f9eFYvyn3AhjGUhmOs 8fG6oWGWVc5BobsmrPJwszuedLQcPvA7oY1WG7wNHrIObWfnVD52MVMpOksG5q5bYdQptdQr mCEfha6wUcPH4ZvhPOTEBUdVMAmRl9PdWpaRYW7dCqOWdBR6jFwgL1waKIy8nPQKVaYEYQZI yQsLejTid7FVsCgVrVLP3C2vwzWdA9DZKuForSBnjmWzZIMDf0UkotPCfYgafuyc6OtyATXE W2FQXbZAi9vcacR6L6qO8kpdtVCT2V4YDVoXRCJOhcg2vG3FXINlG+3qTtlqe0GOaobhVq+m nlmD/XR5RHXj3IEJnZCVcJiwr78zJyphc+MTItFEeib0W6dAT4Catclgy8EKqGJxm4sDpN4X KmuBZz4nRzY/x/ZXiq0g3l0abxAbzWWhK821yWh5teDD77588Nnd7stBgTWq1OAtFPoSwdMI yawTL8VpSYR/Oxz+Rd53Cp4VixNn1CW+g87DzdQaU0uCOqeApq/YPe1O00U/Mxg1rvFHyHuD QQzmchpTfxSCb2QwxFMP0oWPDr6ZeNTB7ZoOlUMFZx94oXRmgs7cEufSMMcU3SEOJF19cF+h WzEIG4eohmjOSQsuXMbgD+5fZfFT5bSajiXmrpuSbsLuG6r0H47qeAcPRRCdVvhHD05rYqsL ++TPAvA1WtNphU/34LQOEp8hFvdFmPbUae1vj04rotA4OpzRrD/slvqTMR4MfXRL/WbcR7cU sUKchW6OdkawBXBmkQzShy18cmaofBp0msJOr4NOVFgWnPQP1Zg8z3uUeRl0wqBOeBVW7pDK Hp+se/C9G7rwEFYm3303njMX36ZxK55YN1NOw0ouGMaw0h3fJFZxevgbcf3BjAH3KRQuVc6F DhO43ruiEy6pqA0p4IOlZK5PXJzZl278sRJY2GneHXtYFFJoIoUWPl1ucotRJ0tVbihp0MNq ZDfuyhsSw/KGtHFIKjfvue8J6Yt09Z7MZhVegYvoclAzTY6EhU+is8o9JOAL1zULdxOE1L6w nD4sGlRm+iurDuNyBHcxhKWMxh7NZRBWhrqP0pGruMACnvfyVZQa+KWbsLAD+e6LQguhLTed LCi5xSjxo+5hIYt+w4RYX/LGbUVo0jFT9sU3GsZKF8RtHumYoY3zV1PKApG5uT+XE80ECfRG WIqc65YGKzSS01fOBSkWMK1vfhF0Ppt58bjMaXCwXdRns+TDH4jxZNVz1qP7Uxt8Ru501RO7 heKqp7mCU+DchnW9CFo5dsIiaOO4o/sSlzkVhmVOboeKs4HboTI6+GrVE0lFFwjMym9/hoVf 5pq13ajSKVz38IrkbBE06KSgsSzUZlH1XATFWk3BV2QBWUQ+F0ENcrU1sx79dBEUhbMFx2Gg XHsBV4ne2yyeCUYGFT4v1kTdV4Ih/X1NNCyR0qheLpEudNdm7chlsUh6tN7RtnN7kKuiFj/L HmpHEGA81I5kzO5EDyzWjmTojVmUBYF6H4oaaXpY5n+dlZIww3VRLLKfl3nPrb0THgc43JNL 7wdEPuIJLG8+MTVh48UG6wl0JzbMu4/9SIl5rMQ8VqonkGU9rl3t5M1cJ3KwPIWZj8onBNh+ /BnuW58cPKyH+4ZtwrM7X9XLCSy8uBib8x+O85M62Yx3CxsiJ69iCmPpbPUVVO/CHjVh6HHg I/NF7viZZHsZ3wn3EaT/IPzdhDOYaQuw82KFjRcH2K9+XU6gH+iNzWwnDbmEA/5nhAsvDgSs J7A+bXV/2mMG7u7XABuf7Bfx929r3DX2+wGxnvEEdvhFE1ZebKNvOYFOMM22r1tDuEYaUncR hmdzrcTBfgKZ9sMJbY9dDAS4STLzMUcBgYP794pst57+vhzwjwfEJpwnsPNehaiP9Kt0C+H6 CLNLOWbzRN4P2NmQzlZfwpWtZlyduV1xtvoSdrbau0t6MrimMw9yK4tqJvSnsDyDjfdiR9e8 uDEQcwfzDf66PMLquHavej9gaBejpwgHn03o2hWa2R7hvV33pFVxO5QVYhnsASKAdPGEyAlk jU5x1lNsDfn9gOFV5QoWDJkIWYUTYeWLKvt01gluLY1L2YON7Fcw8UV+Cf3b/qpcIQmXQtAV yAgZyld04gF66svhZb8fv+fTy/esQRXC+vRVne3qbHW/6kTikxPfe0ZA5ouciq6mZN8J9/lo Ovmd8D7jnDqr/QRyfS3AwpSbg+MpXKDe0arvfNX7AUO7OjtxCWmF6nLSrsxOZHYxnxLwbdf3 u4Z63xW8T8lTY8+UPCE+LP8IYVgeYFjYXgmZVOcJJwf8zlZbJzovv4Qrn70+bXV/hJEtZ/+a OaDvhLuHRQ/dwbuX5NzXCOmhN3robZzAfvXrcgKDI+ib2U/axe05ETIzHWF4c7+C9LIb3epI QIM739oJW87pTuZHaxBCrzLRI030o9NyAoUXl1N4D39evTnz2QHaxSvfHOq9z5rZ2a7O915C nuHhuhDL+DS3cDgOSHI8pk/qCfyh9Ikz0TNKP97cmZqJmYdyAn8o8+AzTAOTPgbWIQgNYeaP B9b16snjBLpczAzJDoIaR22MK5cTyGL5F3GlI8gFVWch1/oIr8Om50HV8+htuYbfPiFqsODl MjwZJxD7GyNsMOBPgpfnsYyHd9e0uJXtM8/+3NF/vPjMoQ4wOOONDcl2bET0VIPLLCfwh1xm oeC85/XcQRxPYfA1g88XPMLX7uMzzyv4OMEDCv5R8J6ClzKewpN7L3yY8Ku5NMf4OnVZLj2Y cHFwO/4/uyxnBjxY3WCTgykcT6HXXxfm/dzavz7ANNFKxQWE56sNwZg+N5flBHpzmdCQmIoP 5vLMegrhpfVMJ9Bbz7OkNQ7UeWIfQ5Y65LDPEt7BEPs0rOVO3w94aR/PzKUQXprLfgIfzCUz lNcWMMCQgwwZyg8YRKewTvNi2BT2wiC+sHFYk/bJvYdEmB1xYDYupLouM1/h13wCP2ouw69n 1tMnjTINosFfbRDzCRQKzuXAYxKkn8Cn9vHa5Pl8itk4jN0nGYKQP+iPsGLsPsBzs4Vm2OTe 1YpFtM8D72C2fhsr1k9gUIZOB0VLFOxUP4Hnceej2Tqzj26T5vNTzN0m3f0Ybr/0H/b7ht3A ca8wp0HYZxx3IYc9ytyVy/3NYffzw97o7cmu5jXsqw67rreLVz5qRfmsNyzY7f2wFzzsFB/Q 12GXediDHneoa6FL8rT7ze48prCwKibsmxfWF81qaau0Fjw57gZmAXTYSRz3GbO/YY9y3MEc 9jeH3c9hb/TiZbRvs77ckx12bIf93BxXYS942Cke95FzPIc96HGHOvevz50D51vhbRuCGZR+ QH1Ywt3z2Y1vtlyaXowddi5jP/sUzogKe+OtTEFLirj/w/ZQda5Ia2lmp9Dsc7UdG4kmXC4l PCh/qvQ4doQjK+yNp4s1x6x4cvyBJLo4hJVIt1kgzpV0Ms/oqvAoBA8b7g3ze85+HM7jdyXQ CZp6hdUdbhvCD51eAWu4q0YqTqcpG/Uodg7tSpePcho6GD/uzZu6n+lAt9eNvsO0KjzXqII6 NxemveJBRhRK5oEjmYcdHPBkE6CZzIWPCWdiFDThIxaUSeDKNK+51nPXHyNMZ0HDkas/ZEHH iQWtV3C8tq8X56Xspy1wm7Wd8KXVNZkB44/ZV8ZD4bCJuCvIzO0CkzlnNgtnHeSJGeE8jelj cyOAO038x+0rUteOq47tGOf21TQoZPRwbslCzY2x8cr6yg9bX56ebqO9cS58xPqGfXvNi+xH jLGf+Y9307KfnlvDgnxnm8N+heBvnNnmcsXl83NrzmwzBX5tfX/NyTRMskbry/H+kZNpiqf9 YRZe+cDBQ47+85n1/aGzo2h9f6Ozo4L1DXo0RDEhxjnR37/R2VFn1rd5cuLZUS+sbzg7Kljf MEddHkTMNrwT6uWaQF2uoEDBzWMFDGbCxHsDzHyvb8b3482W3mJtdzzBQBuSrmDmxekEssbH TrScjxp87yA93K/kjr+cEUU/ck6NA0Z1Wlsv4HxYuoKNnSDEi+5V0HvC+Z1Qh8yKbkQYLlYo vDhfwPkirkDcH3XU1OVjwaKEUxIG2J4wCC5dwQzjq3KM54VcwcozPwJs3IU1qS9XED7eDhsv DhCj69B6v7P1I2x94KODtgnBuDTlzTEfh/F6Ak0B++0NH/jK4AJF5+DDwx5geHNo1/OpGeex fy8/G2l66f1RTQWdFuBzNfVcxeFFH8i/Ztq1YF8erc+DMbKGyAnMvDh/VL7uVceKx7UJDQb2 pTX2zcwP8Lj49SKscO0zGslgQp/b26fHC0WbGSxqsLfBGgdbzXXTP02Prabj868K3dkxt/8X YbIPBH/oO5G1+Rds490eodruBv1ZJTfolzYA1w36PVQ36PcN36BP9NZsx3LfQo0b9Ju9b9D2 7+YN2pZc2aDfznuDtqv41qrsduguGzyUyNiebNHysj3ZVsKWssFjvC7bky3wXrY2m8u/bC+y oH3ZumDhwrK912KLZXuvOblr2uAKaP7yurXKvGmF5npvYnZpMYWd93beayeJ6Yss4JtwQSNt aGsXTKVqB220avdtbis5dhiaUmcjR4m1waC0ux3Yt/f6HdjLBqsXaKG4/We8boPBb8jOG7Qw dHty9hFt9bmStkEMUbdo2vVRZhm2R7kE8tYqd5zd1iqctVr9OTYNUBbChntF8GTJeG9Z0aoy 0OZS0aMi6G/JYCOv4CoPMJkbeM4CKeQCGeUECaYV8k0D0k8dYyNx5KSKcZUEoy4VjMmUMWIT xvMW4FYeeuPmwpaCrO5LVQor73VfVVwxQxPnrzZD2Eh3ZLdAM2gH3dcbqFWUHBxC7TWSEuvK ORK0WS7QdZvIMgXq9GQe0KJ5hY4tGRq4CPRzqdDeZUC3lxWaXzLsggishjTCBRan0h45a/Xw rcf527Fztg68tbJN05L5snPfgaaN8BlW2KpCW6VcmMbp4LFvo8p9g1Af5U+TuEF/EgVMV6Pp UsNmanHBUJiGzdTx9mRTIqp/zVNYthfZ0tG0c1TllqtWRW8ZmGnnaPYqzV6l2bPc7YIZOC8e fPLgky0um/aGxthCB+2C+ZLaQTtscpofATnuDBvVVosn1n8xpNM4NRonqkU1P844JajUbTD4 3Pz25OwTqrBVhbZKH+UTql7RqzUyM6DWyJmuAlhpyaZxMpgA1Va5r612wor3SqH5WdHmQutb Gvo7TZdpnAKuCpnMC40TXYRMGU3T5VeEvHxVh64+k+nHRlowcqYlM1XeMeoSx+S0ZH4hzo9n NRI22tWEuHO/szdO0964OqAEj1AvrrRGbrWwYIZOazTQSKExtrk/rRENeekgp1RQ5zYSJ2ik aZz8wXBem2XqukwnPi/Qk4VatBTo2GmcfJLf6+fCSKOs0O1SoPmlwi5Ih9WYxsmfAgmL0xx8 /dELnYWuwJ2+qE5KI084++ek9HlbQCoSSZx2C6dd5bRTfeaXSzGxGmeSallfkHCD/hwHOHKN nlvj5Nhk6E7w1qlDh8o+laYD3K1jFE4O4eQQTo7tRZXNEE5od5YfQ7w53ul9ueGvI9qXyN2g X2vCiK5wxsqCISwJQ1jogEgl7BzRC+Acs74MF3AFbBn3NiFseG8LITzb3BnCz/Dfn08HP6iA q0Em1fFxrk2CFNTUuzC8QoIL5as+RaWnUxnwOudlYFyp82JhuELbxacX9+DaJLzIxvOEHY0c zEIsdOVcGJ4wy5QcfCC78utnfv5qdIziALgnme4J9UajMW+N7okQZugrdUBQfwxd1xx8nZBU ttqhOBValbCSZ3HbHB1GXoa1U0fQIrPBUGx65+bbaerI/DMN1EJUsHouM0qG/WyYE0s8W27q VBowWQkH7hWh8VupVxq1TkGbM3Nj0wYjAZDxbRVEsSv9hgGe1Y3AJ+m8jBQ2xseNGrrTQem8 d9AhG1TYCxW2+WfaBXPmtIMWemr3zfZn5qjUPU30ZRMiYGbcfaJFBmZSZVamMmczZ4NBTrvK /NacdmGOQgf7aISJNM2NuUg1M+wRsDGYwpkRlKm3DJ6nxqJKHlTJTjXadD7OTPPz+3fr/rt1 /926G3X/VVv33+OcXx3neD/pdYCZLMBkpkptkhGg1NoM1jWIRC6dLSQ9hWs96lU4s8oMiupR Y0tt8IJUjVuf0oyC0aOwM3ODkzK8G6EXVz7KfWVF9cqKZgiTE64SkFkQ7WBB4iq79RpVb8NT 59Ieok5k8bQ7h2z6dqa/aVUq8/kRMmXSCmHDi9qKZmiGO1Odu2WyBR3UlLZ1X7V7gYpy1A3m klWfGe3qRjgNTZGpV9GYxO282AaDPsqGir5o0H1ZkNN1g1C7sLKDqIr2w7tz8GvWFmfhVJ5Y 46eV5mVt0lUmNd2E/chXFeflRwXQnN9YV3EN0SVHFzVoQ5gUM0ehdPS40E9WX2dlEGEpUZ0r C2eSuYKZ6k+n3eDsN5FmClyhfYZCL66cwW47iDqC1Dpu+6J6fgVdcJsCMlyQwjhIyeHyrJsr 6sw5m9Q4++k1ViqDypRoZSFDoxfV+OS24L2dZQ4anOJ76r5HnY6vxrnGhgYCxpUWXxiTOrGM 5zEgBZ2FJqOBBdh5sTvSnW6TvshGjjbDxpU20n2+iCa5M1rR7rsZzGIEXVlxji9nSqOPNacs gzV3goWtThZj8Z3wGHGoPMfw7DROjaZLh3YHbAxq3SwRzqEKB0OfbMtzmcF05nrcnOhm9hJ0 qFpBW8UvXOPXJPzKCMgtGDPWFGpYoXwqFe6UgM0S1iW0ciJbC3kG3qtGMQ4Tm1LUgmoj3Ygb 6L6OR6v7UoviBq9yZU6+0FYxXFZbNcoVLJCgvsh9AmpgwnWmUrRHnToD5wxXXxipw8zWH2mb a8eYrKqMTUYZ41k42lVHuoJ/VTCwVG6mCBN4qn3ddmlG9DoIo153BZnPP2eonVisblRAT6Fx UuiKiHUW9iuoXEKJeDgAO2tLVGgO0rBV9YGRAHClYmpRrM0KF+PDNjZOS2T7oGi2olFTw9Qh ElegFMylWqLgOwfP2jTOQF+nWqTiq1R8lekb5x4UKr7geAS3pMP0RJeGc7vQeSysg5uuFMlx mo4r00JdNhUfvAVvidqJYbLZm2nFgpZkxcPUdH5ftW9zNKbL24Oz7DRdoaYLRrzRxHfqsgEZ DY5WhWbYpqex4lGVStO5JcFp4ZSaAc2KDhZ2v3D+FVLn6jAWzIXopGXMIzfLjtNm70Ha+31+ upiNxV6t4WGNceaZA+i2kH7AAUTBpXcAqXF+zAFkiD7WRwm/cA8HmhFs6MIuRPeQJVvOslcO /0wngbmPU/fQdPeZe9iv4FnEhtDhIWLzW5ORguHaxYzYUAbquq/epovYOqjLJHZqSlOchYqT VSsxYtOqleUK0oXIrGmZ+pt+7HU8198e3Gn34dfX8Zyrr2WVnTAzIpx0whBtxnP+mGaD3+7/ kI7tdCGXPzP9l+sAms8x26D5eEGrYwnMAAGhuMY6kZntiesezMdrBZBbM1Hi7deT9Ra3GlMh 0sQ45mxhx6VC1UJzydDlTWlXJlzQSOzpQwaSGfeZ68Vs8JlgmuSQRZ4FbskLxa8CJiSkZ/Ya bq9PZnfCBZnvuYII99In4NtJPj5k60MuP2T6wzqAPwgLiwYrlxRCKT7Z0FpIfIPQMxlXNgak EFZF4ppJWFGpkP7CsXG2VmPD7Gydx60RdQzRCSteVNkMtzYVVq7CuhZnmXbf5uDgDA3raeqv OJ4598NKXeNGm7nKR5/ChcssAg/rh06bmfuyF8/tG+1QY525GCmEXOZUb+Z69bGgE531f5MA s+7a44Xk0ZuJi5Fc13aLkWo5uJJnVmfh6vLp2qQ9Wf2ky7VJuk1zMTLUSfNRH159VOvOXTvm rmsHzZlf6DecLkZmT2wh7TznC4uRlaqCunCuTfrjMKCi+onGQmKi4MMSj4uR6xXk2uRUuigG 9WuTZ4uRfmsfSp8Xrk12dP90bRIZdUdsrqB91rSEtUnuJnF7qjvEnTgYplGlBb5eqiw0yGGp Uh3BDOgOdgolHeXEEeCaaKXlvy7poCM4y5e5mcZVeGRMdk0C4HNMXlHMCg/su/IlyNwEMt0x M/UfKPiAG+grkrk1ZRZ8YDwfUM/q7Afx74THRzbuearj98Z8cICWApwPu4T6ZOZu7o/6fqe3 db6ZbEeI5XkfOQR48ubYTNbxOFh5cXXN2PgcFXxpmGntUtiZZriGDc0c5Nq96AF+P/7hoG/e 3a8e1kFQhCcNia1mYN2h5f3Fhc2I9BXbrvdOOHul/zAW/G6umy4xuNhzfQq54jshFy/iWkbC i65hxr1o5He++f2AoZmdfep8WIDMLTo+ymNDQjPd+QgJMK9P4YJHgUudBpp2t2mQDni39RG6 lFAizI9Q3EDvtnHaXtV5ecjk0TN25QUnr4rt4hb0CBG9uCdPGAhw415V/GqnERjcT0JRq20J djpawnAnwEITX1huI+kEWhyZT6DLQLpnvx/wqiERsrpWWCYwKaANdM08a1fni65g4QauCBe8 qHB7F7jcj9C/Z3vfD4jqjidwefOZ4sbNUo3OR08n0Eli3n1IorFKcl5+CTPa1fPrN3e2OkAk AHyfxkmPHZsaIq6H2qhch68VMX9lCqD2B+jvbddQY1FbUj4W7/jmzJ1bT2B4M1OtdTyFevF6 1SdGUJWevUYj7mK/SP7t/mz3xT0mCSoDW+1xJgHcEfoEMkPq3uuXLRobQvoiRHIqM1zLeXn2 5hetzlddlEcY6eEIuEdv3+5TyPRi9/r6+30Sud+pGdt6Aqk2IqTaiJCTd62Erl2zwoFaJL7q eTMTn00dE2FoV4CdT76EC+6NfIwT6FSOmO57v9uKQmMZISqIc6EVitCRW2z762HEeYxHLrR/ hfYvPpsWrvSLZkZIO1NohU577NYkhjmg74R73GEe6eGODTo+AS70sBb6XwEO7/kteNXZs93a Mf1otDs8+14lwxzgdbvoOPf1KaTj3L3vrwGQecr7l6u93xihepXLFdSLGcJUxiwBCkOFCAcv PodHgOM6EarVVsCSTyAjGlmu4EkzYxcZwkTIECZAMcFYod7MHlj0xlg5JkjGCVxxccg8xIyI D6oa3uygDsOQEGgncMXFIYaPqQb3ZhdYvxMetA8KxUWdnNQfiKRj6HweSd8v/mD0j18tRDU2 Oe5CxBp/PYsMnwawIcgUR64L5iy2o425hhnW7UVcmE/gQyxzBKHPY5nwawgSPhK82NmL3pU/ PEJ6wZk5zAcY3G3AJzGDh+YjWxjAHa4vXObwaz+B3JsRfNHoMge4BElF95GSWhnsRUhJXcJn /uKZ9xQ8oI/7Rw+eF341x+Mor4wWm5M//npmsZ+6HXelc2KTo4UKNoiTP1qZEyMc7o1Wd7mC 1FDBNXhmol8fjplpaWKav5/AkF2/hMHGBQvYHiEsoNAChuz6k5T4o7k8s56X9lEe4aN9vExL nxjEj9rHmIdeTiA9vguTF8ylahFzEA//+YcsoDNqTy1gpycKaBYwZDcvU5JUSSGdGZKdH8lA UuXY4XFI0L0T/lqDGGFI/fkXHWZppVmKFpCL1M7G1Qf4Ki8W0lHn8Nv9Yc5chqTRB+zjZeqm PcLCTrhf6xvto8sBnKUx1hMY7CPleJlPidkWn3sw+8iRfW0fCWfozZH9MXOJ97q5PjjXf8h6 Ds71hZM7wEfraRubaOPO7KNQv70IcD9k8j5mTN1Wj+dnb7uttPetlJlbpd1W2rlnl+scrk6A ddhxNzD3CoedxHGfsdY2cIOD26McdjCriuZmaHyuA3W6Oj64GdqZnbAnW6tEuDS/sgtOX3Mv eNwpzlrqsMs87kHnDvWwfx2bZXPcShs22sZtuNykG7bwxg2+3P4bNgcPnjsZNxaHbcdhUzK3 LIcNzXG7M6ulw1bpsJE6brMOm7A5rgbPBg3bu8Pm77g1nOXRYVv53KKQvFD8dvYFswzb2Y9l hWTrG8ubr2ucDzOBdzx7NiSzmdw05b5QucD6DKreSE8gb5DaFWpo4aRUGV7vb/fHOzzCk+Fg 33VaOKHnyOJOirj7nUUs7sgRemtz+LOOL4FYvxtiRamaVupRZA9TNrg5OPvAwakMTCVXPHkq ErO0g1XaXFebuyFodeIpUKwPMq5UUzrVyMAgqNWpdK36jPuZFLYrhR2Pq6B5m7qfm92doeg0 I2EFIGO0F6586Q5KV6SeMY+Eh5xNw7h4kbkZ6ubv2fbCZDsrM5/KeuZ4REZGAwv3vT83t4Wq bZpbVrsJJW+VhdHc6lSuFBfNbZBt2BYTNs1cG2OeKfvcGGsHXXUDz60pjCs+YozD5qRgjLnj 4IVtDmog2GZ44M9ts/9C3UAHB7sfj/Wov51tPrO+l4eccI/M3IvIgrpC98JZ3/Ha+jJ4iSdE hO2DyQvl4WyZNVpfc4lprE9Pl0lsyI+cLpPXCwJ+zPoG4ukU/SOeLnNmXzu68FueLsPdOT92 usxzc4uQ59XpUMHc/pc4HeoD5jaEPMHcLlfwRGG/MMa/3dlRzhgH8zUwcU7PjkpeZA9nR517 10cKyr4fptAdDdAI5Smsx6P+yCfvqoQrrJVrqJWF4BNeno0QTk44O2bBnkwPOkLmgCvrnCur oCcf5QqyxDxC1qNXn0DXsgcbP++Eh/J05z0QzofVK7iQLUK86CjGtq89OnjQ53oVoGpTjr4o iX4Bw9kZeO9Ry7dYIFhAvvo81hCFcYRUiDVCjvpr2HFv58EkE/I4YAmSgGqOI+QeZPz31+MP 5Oc4MuuPjMwwjM8GWxi394tfH0U9h/ly0a7w7HhEzNM5ESeQvSiUrziF8H6iLoIykRMZXemH 57oFL/qABM1GvBNeGZRoX6wh/QTSQnz865XuVUelQucECHCpV+3yrX69JuvM0TvhmSn7oQOE +gnslCMLcN1cem7KnpvBYDPlBHLS2oj+06e5D7CtRz3lBoflLdb+ANs9T/PRbx+ueMF2pFVz 9a76RPjazYLJrcDVQ9kgYprmyizGBi3BqI+ycEEfhQP2uttH2zaIQ3G6+/zQukHb3Zs2iJxh N5dw293bLSDc9v529ynEvsFjIGybjLvb+ry9yBzV7cOB3daytq8MdjthY93ea6Zg3Xpkambd mmErNwptiWjdWmXO9YTdi7nb6XYKOy/unXDFi+yskgk7GmmrYNoFq+vUDppW0e67jdEbOe74 840697WprZHu8IKtVe5TiLdmDAuPNpENE/cm0EFxD/e1qbFB1DwM9/kw2aCNnLxBG7Hbo/j5 guFy4PooC0P1UZb11Uchuz74ZcThCu9XwgIovFcGniwN7xVBqySjzYU9KgP9LQ1sFAFXmzF2 TGbyvC1MOilsCVUno0wJbvGfk++Wv3PS32JHNzYSR84WhnZ889qPum03c+dR0p1HSbvxnDja t23Tbi5MaBcXzCOF7oMMgjk4oeBF3JDtZrc20n1eqkMzaAcLonCnVRJ1jlLnFksL9JXS7j5e QV2XOzThJtBOcTstug0Gp2OLQAOXBv1cBrR3oW6XDM0vArsgDVZDBmyK0OLUAntUaa2cLXv8 MuJ6vEbtXMZbp9lDrUpjhaA3XdoI0wsVve0dXHRlGZkub8k2+bkTXzaBuc9PbAJzx8MMCEzN njNsm8Bsbk+zh2M6vGFTs4dTW7r7xq+OSDsBQ0ckFb0dIKBmwCIgNRKW2Z1WkEax0ihaklih M2wbGxZ5KTRnSS92Zo9zW1/k7JxCmmor/piWjGbeffJX9VEHOe4ji2rYMoh1Zk/1YIdQbKgs GUpzGjZ4Od7sdZq9SrOnJhMZ4+HWehfo/W2IDn5zcfCbi4PfXHQGpi0wP2rnHKywVWr2HAy/ FtxbEw3bgvdKR6uEbZaCHkminVvARungqpDJUsDzNIo46NKbvUGz1yHf3CD9aRSxqOVGTs4Y V6ro3RcUOCanjTR7MzCe1cAMmkxnBekRTkhL1mnJXBK40Sg2zF99kTvbrGPuayPdsSQL9Eai Vpl2boAc00hKnfsMk0CbKe3OKHYaxQE9malFp9nDYHAauFA/lw7tXRbodknQ/FJgF4RWQzps iiywODXBHlVaqzpgy5yl+9AnMdZjnt0z0YMFjW7aVSFMnIULIdXMnLLY7ecn5cpJub3XMc2I QIXm5plOOyz9dzt3OjNs0ZHlPMaVU2eTofsCqUK6ap0junOeWeifGKbpxZVubeWL3NTRycFG ut1lanKx9uIcSO1+CV4fihG7q8VTNyF72v14X+EESuEArxzgdHzmEMYhPW68VyFsGP5zCJtV EcKGe6ezZv5Xov/FadfZ5t7Ro87+ziyE+V8dXA0yOR0uHITmpLDQyVefwiS4UL7TpaKHVRmG O6cpY1ytDFsUdnpnnX6QjWd9kY32CSsaOZgbcYeoMUxbOAen48OMDT+k5h0fwdzv1AzTeUGK fXBdffCLToNfhPCQyq1RuTVG1k5PfiSJquTZ2UQTUuAtA9pJzUqtOxdP7SjOVHSWUl1Mdx4f A8RtVb67s/zUNKIapKcQq2Dd3c2GnjFXmkYj2XPpJlZdCYUw414Z1CtCrZOokzrarIGpy3Ak 9DczgaeegTvsTOhzFPCsWtbF9JRRogRVYTf6Z436u9PXYeVxZ7FTZ+Wx8/y0C85N1DQblsGc x6kJHp6IPHgEm/N0NbHEcgeXHKoZ86wyk1SZZ5pzxapumHVrzMm1wRmc8V5NwrkzExdGQQU9 0uRf4uB30VcCVzpxXCDXwLNOukGFPTh/Xe0T5TsnO/X3fbFBv+bYoRt+dxR+dxR+dxQcOf8N OQq/B1S/dUDlPbDXgW2ywLbBcmjyibW8g5+GGzyd1NtRslW4tqVJAmeSQ15HEzmo9XOJHCXe fXSlgS2VQ2c+yR3bKfBI9OLKR7mTQdSnHGgGP/7W+bEAl33RDhak07r7uI1qu+apc+kWUQc0 edqdM1fVbkDZO7VauUIRYKMObh2P6omerqAZqt0ztbt1Qb1k981zdn8wWT5InWbl3XnYBbSr C8Lj0Z3I1CNpTC13XmyDQR9lQ0Vf5E68zhhmg4NwMKU9OIAHF+86B79qWWcnBROnc+lWs8WJ epQCPeAHvvW4Hr7fvVrTuYKVCk6XWPkF6e5cEC5XasTB4xL9hG7QhhqAuG++KdOcSTyB1WlD nXaDs9/N78753Zz6e4SqHAtg5fy2j49pM7jJ1AU+2gX3xTCNkrB90fkrhRGWUsfF6s4vOLhg TVZMu0oXs3K5sjJR21jW0ehyNT65F7y3s+hDw143v0MELeivRtBub8IAV4NMasQhVAaVysBk pLAxPGn9ChYqg0JlkDGuFvpng2Nyzn5U6ndW6rvRPhhDKXVON7CsQ2l33zPgHGx05hpDOTe7 41ck26Fh3wmP0eoGL2P6ObRReN95XJZzmHWWVM5dN8MG51+AC+fuAsdGX2RLMIUJgMLVyalg GHmZ7i4qPQZiPHDWLTlpIOaW3gfEVRM0u+ZseELRYILHwcb6D00OUfLeZmQOE7ZKjbGrKqP2 1QHoxmNG9+doxb4iP7TVu7J7B2zkYIg/Z0m6gh0S1Be5rTEZ01FNpvuopHq51EaduqohaO1W uNjoE7SEEVtVzZuMGkZ75VxQ7eu+Iqk2gRbS5pEw6ah63U06Pwc/8BVJG7P3JSdHQKGfo5AV uJ0VuJ3V/S4N15h13QI1Bzud3glxqKFjS93LhkyDa6RaI1e77fZ1rodhupe0OjsVLOC0jxUs uyXwDDs1LS/d8OikY9en65xqHJfqXOkP6DASQq6nBk/DaTqGcNHDWWGJpuLjaqtNV+2CTWbt oPO7qBempiN1zqPjwrxQeU1fEY6HM0x1PbFTBjuNGp/cWfAR7eNAm4NtVb97oYpxqq1TtS20 6eQ5+gNM7pz5Es4PYdpoQmpJGznaDLf5kJVug2NSO1jYfXdg98Bonz4barA6D1lw8yh4g24O 7ntJNHQ8NlvP0HHl3YnPznxzYbuCL4ljZV75kqhkfeJLZjA9ncdLX5K5gEUeJdzpS4bR4b61 vD4azYVdCN6i29dJ96MzHz9nw+KJ9S7EmbfINYToLdYr2E5CQ0QhITR0zZiKxDRHWGAZ6KDa qpWRUwwNTa2S2KkpTXH2t2ehIW1kplcQg7+OoTJzPT8U/GG7vA/+xttj8DdAXQz+EJH7Ocp4 bqZ+Vi/QA377dE/8206RsEqQn60waEP4hWG/GBkqXfXNOEwh1gdlBhCZMnQrKhX6bhYxcRXQ Mv1hJWdCnJvhRDqhJVlPVpBcVlVjEdYbu4wsLceEXFByY1ZN1GWemI58yDEXGt2Yn165GMlK 9VkSzymb4cn6xUiuPs6MO3VDhj/p8/Esp5+Z/rAOEFYJDHJNdK4wYNOqX44QLlZwF0MnG2Hd Y9AFCWsmc0XFVpDCekuHBONaDaW/cGycrQK5NaKTFSS3+sTAZcKCFwmbYXMhrol1zKOFsyys to2Q2g0rdYLZ3Tn3O3chde5RUr/AeX5cXWyskA8rk06bmYOy1//dHRRXDthYLDjXNQffDLP6 al0ThcK+PF2z5kJ6Osljlikuc3J5/cUyJyuwTcJzmTOsenKgXa960jFSeL2umR9HdBzvrIN3 VeNakssaerfMSc8gLHPOygScjjJIu695SFzmXKgqqAvnqmfQOlbSc7bqiaOqBr+K+7DMOa5g WPUshAkvOl3mNMguCBXnLPU2f2U5WfU094We3yyeCfbKrBl92bNVT/edSA6GaVQvF0EHTW5Y BO0013TmYjnIwOBPTOxPGJwI7iUSdtD5I4xVMlf5lLpYHZI87X4v0QI1ItwDM4tFcJ7Wq2IR U5yJ5SDcmTOLRTBiD3g/tnOv03kntMMf9tST/c4kboTm3qSnUJ88CN3xIPNhlW+mj34NC9o1 YXhVaAgz0e7o6vUEhoT4IAx8VGN7LGBTA0m7fEILnBe8aqwnsPFiR9/8h4O+sYKgABeKdcLx 9M0r38zgOEJUr3R+kPKBgMonO/qK7XR8J9wHazt8NfudRQkOyglcePElbNBt7r17QwobUk5e xTSlg+0EMgPoPgzZTxoSmrnyRVy1jZBhXYROcWjWQ2wo1wPe7fUDNLFXqOj5qAD9ULZ94+/H 75WXh3wbvdsXr+KqvzsoLEDhxaFPBXYmwjM+3MgWixPfCfcPQ9oWu3dCtQj0rISr81If4RqS OwGybDFC4XsvYee9vs3f+eb3O7xudXsKOzvRT9pV2Yl61Sc5gckkpRGQfd3Lwe1yDS3cwXzy FBbeyx1d8+IAhS/iAlphRrY4ruezD647I0J92DVsbLXCynZdwsJmFveoew5rX/e8HyfolkEn RIjoYEsnsPFip0WqrfQeK27OMTp7c+XDKl9VL96sS2xrJxxPW80kn4PLCTQ+wtq1h9/uz7YP MDp4vCrXK7jwYtaHzIvZiQg99Xq5lSkZtMvrFcxoyITj6ZtDM9crGPoU4MCLJgx81CvoO3go DVN13evr7ye/U0V3qsIuj3ClUlmpVFZqkZVaJEJqkQh9qwtbXdiQ0MzQifYIX7SLOuYaMtmH Vn27WwNThUKNHaFARQt1slAJSzuBtH8R0oSXdAq/31+VD9dXeHiB9EcYG8J14QhJwP1Rh6M3 6H3d3dPvxz/QERz0dCKkIzjojkUYHUH3KvrRg340GvoIuT989NcNoSMYoV1c2EVWoYIPjWnM cdZQgY5ioc9Z6lPIWpfS+Kh6DY+YxTWknDSEUUmEDFKkX8GzZoY+rVcw8FFOoJHrCuY0xreA zKDex/AXqYjHRMVZVmNcXexfpLNpRUOeRfGPv4Y4fHkK17fHGN4nfmyensXKIcA9i4bH1cU+ Gn4Muz20QNIY4VCKcWU7gSF+u4Qcd+69zjC4eCQEVSHkCsFNCH0+ECdR4z6PdBCA1MOOHL7C dYhRn8IQvIQgIoQYzwOQ6u49nE9bnW4sGoB3/uhBhyrMJ36/+bkdr4p+7pXbGy4+dSADDM5n gD1I6tqre+4fhYvbCaSkIqTgXvhWT/yj4JgEtyU4Ne0Ecla8cJcuHTH/q7klRzg3qL+iF9JO IPXENfTa7cxiB9sXrNuZxR5XF3uV9Nxif+DjjrQ0IVUfTd6ZBWTVTrSAVwYxZsij4RkD7Yo5 8A9YwMsMeYAhnT5CQ06zxcHkXVpAOYGXmeYAvX28f+6y24dHY67wAxbwMrMaYEhZemgW0LKM z41aSA3KCeRsfm7yQv7SzrBDouyd8KMm79KKhSRbOYGuIdP0HJJ6bqditiZkmNZnMJhL9949 b2ZnWhx5sxepnWDjAuQOwwhDkmQQ9iAp98XikIwIqYoTCxiyHtdWLECf5jArxqF8bYkCDFF+ yAE8MUx4r5vcg5P7x+zUZbQcYAitPTzUnfu8cbBEwU7JCfxQKPloxbyG+sCJ4Lal9b5luXPL stvhKjy/M+6sZZly2JUb9+yGHb3htDVuaY17hcNO4q0ZbktV2IUc9iiHHcxhf7OOAFa1ulLE sHOaW1rDruu4Jzvs2KbuCru9415w7hQP+8jjLvMVMGx4Ddthw2bZuJU2bLRlm8Mm3biFN2zw JVdhc3DcOhw2Fodtxw0SjFuWw4bmsN05bIbmVumwkTpus+aIDVu0wwbuuL07bP5OmEdz4zg3 +lxsOretBLbOIG++ZHA+rF+8qnPfQQ/FiFwLmF1kBO92FoQjWxPIi7vQBUpqSokydELrFCm3 +0z5DzzKDRbhUNKBltFIt6NlwCIOhnlzgKMIzi0OdZbAdu4OmBOLdW1xUrKQjZ9x87Dg3qkM rJCtcWdBKHHmgtZUQjir6eHYCCu9WcDVVH6s/3eqkVKYWtY0NLf7KAwqufJRlS8S6mBnChaM unhsBF3VaYIGyOGBrn6fXMNMCaZvGkYcseLmoJuhZ3vz3NdUG2Z+OIwiHFUxzW1me21jxA+Z W/W0WThVKHlXtHdmbgvFRekF2bZ+BeuvMMY8jzYa43JijLlxkV+39zv3PmCMw86eYIwxEF7Z 5qAkgm2GB/7KNnMVZKXpct+W7U9tc/oVtpkCnba5X0EOlVPLfXmMCbeuDA5g7WCha/JjlpuB j9slwUNdwpEv4UAYN9m95UaNfadv5s9CPLHcP3Z+TLDcv835McFyB6EFZyy4aieD5Tc6P+bM cjeQE8+PeW65f+j8mOeGnBXpL85/ujTkYSdTiCbODDlTgh8+/ykY8qCSQ/QUYqsTU/Abnf/E nEA05Bz8Hzn/KRhyiOzK9z4yUstRWuOgjo4MevRufm3tCVz4KP/k7/dnWx63sQI7HDugb3aQ ZxScHmhgNsufefYIWWBcWX5cWZw8CUgXsLHyu+UT6MIed3bC+10BCuyhg/PuS1jAR4A4pOGo c7ZvhDloBK1XUC/m+Ipc1wsYzqHAe48SO3481NGrPk/jyn4cA4WCC5ADORwBEmGQBA2VmeZ5 xkWQRLuCdBfjgRjh2JLyOH7i909/Z+sjbH0ga9gxI8KYDxMkDuN+Am2CdHfvBz4caC7lO+HD wx5geHNo1/OpGeexfy8/DGl66T3qlgf4XC8912lQgB+QoJmbd8Ir2xRNlTUknUDanjv8gEDt VUftqjv0Jj+FbEhoJjrxgQ9Dmt17JzyzmU/PBArW+PSIIBbguolJI/ncokbzO05gmA3d+FhS Gjev+56rKOpjT5+zpvR289D+/Dfb4N5+yOn+wzh+SG9/++lPn5avsv1HH+P//uX97Z/9/Omf /NXylsvbz9vV+e2n2//e/n9LX28e+80H/Nolv/38/unffv4/vpTPf/eHL/XzH7/8VOZ//f0v N7j90z9s6G9uf/z12+2v9Pl///LTft3f/8OXMpZ/9/O/+PSXP3/61y7vUtb1bXP9dmmKvu7w RXd4p3G/2BwA6fVtOx1kv7ve3F77/fbrBt1JEcfk1wvzdC7z7Rk3WW5E/YVrWM1pu6Qej97g MaLbcgLvIcOtYW2TRD6OemrD3vfHO2wGt4uPgTYb5+DwF0+YBi7O+aqP7XUfG/pYMjoV4NGs o4+dfWzoY0noY0noo4fDX/zQZXFkP/SxvJZjoRwLBRdhlGOhHAvlWCjHQjkWyrFQjoVyLJdy LK/lWChHoeACLFGOhXIslKNQjkI5CuUolGOhHMulHOW1HIVyFAouwihHoRyFchTKUShHoRyF chTKUS7lKK/lKJRjpeAClChHoRyFcqyUY6UcK+VYKUehHOVSjvW1HCvlWCm4CKMcK+VYKcdK OVbKsVKOlXKslGO9lGN9LcdKOTYKLsAa5Vgpx0o5NsqxUY6NcmyUY6Uc66Uc22s5NsqxUXAR Rjk2yrFRjo1ybJRjoxwb5dgox3Ypx/Zajo1y7BRcgC3KsVGOjXLslGOnHDvl2CnHRjk270D3 dZS+nZEd/zg63l8Lt1O4ndKMMAq3U7idwu0UbqdwO4XbKdxO4fZL4fbXwu0U7qA0A+xRuJ3C 7RTuoHAHhTso3EHhdgq3X07S8VqOg3IcFFyEUY6DchyU46AcB+U4KMdBOQ7KcVzKcbyW46Ac FwouwBHlOCjHQTkulONCOS6U40I5DspxeDmmr/kWXrd89MPe9ayrC8W5UH4RRnEuFOdCcS4U 50JxLhTnQnEuFOdyKc7ltTgXinOl/AJcojgXinOhOFeKc6U4V4pzpTgXinO5nJbrazmulONK wUUY5bhSjivluFKOK+W4Uo4r5bhSjuulHNfXclwhx5IguACtWUcfKccVciwJcrxB30fA4S9+ 6LI4smMf7/c96eP9TUcfO/sYYJDjnYP3k05tsLGPjX1s7CPkiC6LI/uxjy/leH/TvY+Zcgww tdjHzj5SjplyzJRjphxzGlddFkf2Qx9f53oKcz2FyZ0HGOXIXE9hrqcw11OY6ynM9biLH7os jmxNlC5jWTdLEv+wjr8WLhNAhRmfCGMCqDABhJ7eIBNAhQmgwgRQYQIIPIiTwINwXyeAChNA hRmfBxiFywRQYQKoMAFUmAAqTAAVJoAKE0DlMgFUXieAChNAhRmfCGMCqDABVJgAKkwAFSaA ChNAhQmgwgRQcQmg9Ga5bZ/i3x/6ssdMBxXmfx5glCrTQYXpoMJ0UGE6qDAdVJgOKkwHlct0 UHmdDipMBxXmfyKM6aDCdFBhOqgwHVSYDipMBxWmgwrTQeUyHVRep4MK00GF+Z8HGOXIdFBh OqgwHVSYDipMBxWmgwrTQeUyHVRep4MK00GF+Z8IYzqoMB1UmA4qTAcVpoMK00GF6aDCdFC5 TAeV1+mgwnRQYf7nAUY5Mh1UmA4qTAcVpoMK00GF6aDCdFC5TAeV1+mgwnRQYf4nwpgOKkwH FaaDCtNBhemgwnRQYTqoMB1U2qUcX2d+CjM/hameBxjlyMxPYeanMPNTmPkpzPwUZn4KMz/l MvNTXmd+CjM/hameCGPmpzDzU5j5Kcz8FGZ+CjM/hZmfwsxPwbr4YSv3P1yPX+eBCvNAhYmf BxilyjxQYR6oMA9UmAcqzAMV5oEK80DlMg9UXueBCvNAhYmfCGMeqDAPVJgHKswDFeaBCvNA hXmgwjxQGZez83UCqDABVJjxeYBRjkwAFSaAChNAhQmgwgRQYQKoMAFULhNA5XUCqDABVJjx iTAmgAoTQIUJoMIEUGECqDABVJgAKkwAlcsEUHmdACpMABVmfB5glCMTQIUJoMIEUGECqDAB VJgAKkwAlcsEUHmdACpMAAkzPgGWmAAqTAAVJoCECSBhAkiYABImgAoTQOUyASSvE0DCBJAw 4/MAgxyFCSBhAkiYABImgIQJIGECSJgAkssEkLxOAAkTQMKMT4QxASRMAAkTQMIEkDABJEwA CRNAwgSQJG8t9+I1l2g/evw6HSRMBwnzPw8wSpXpIGE6SJgOEqaDhOkgd/EDAeKof5Dq68yP MPMjTPVEGDM/wswPOnWDzPwIMz/CzI8w84MuiyP7oY+vMz/CzI8w1fMAoxyZ+RFmfoSZH2Hm R5j5EWZ+hJkfucz8yOvMjzDzI0z1RBgzP8LMjzDzI8z8CDM/wsyPMPMjzPzIZemPvM71CHM9 wuTOA4xyZK5HmOsR5nqEuR5hrkeY6xHmeuQy1yOvcz3CXI8wuRNhzPUIcz3CXI8w1yPM9Qhz PcJcjzDXI5e5Hnmd6xHmeoTJnQcY5chcjzDXI8z1CHM9wlyPMNcjzPWIy/VYPfSJJXmd+RFm foSpnghj5keY+RFmfoSZH2HmR5j5EWZ+hJkfucz8yOvMjzDzI0z1PMAoVWZ+hJkfYeZHmPkR Zn6EmR9h5kcuMz/yOvMjzPwIUz0RxsyPMPMjzPwIMz/CzI8w8yPM/AgzP3KZ+ZHXmR9h5keY 6nmAUY7M/AgzP8LMjzDzI8z8CDM/wsyPXGZ+5HXmR5j5EaZ6IoyZH2HmR5j5EWZ+hJkfYeZH mPkRZn7ksuZHXud6hLkeYXLnAUY5MtcjzPUIcz3CXI8w1yPM9QhzPXKZ65HXuR5hrkeY3Ikw 5nqEuR5hrkeY6xHmeoS5HmGuR5jrkeFjklsQ1pdl21qTxiJdl2yL5JJc11+ngIQpIGHO5wFG 8TIFJEwBCVNAwhSQMAUkTAEJU0BymQKS1ykgYQpImPOJMKaAhCkgYQpImAISpoCEKSBhCkiY ApL/3N7bLXuym+d95/sq1kmSWYpnqfHZaCY+kGVV2bJTkZhdpVRJOaA3ORyJs0iZomTpmnKa s1xR7iINoLvx/N7u/q81m5tVdnmzJHI98we6gQfA+wXg7dsQUHg7BBQYAgqM+ZygHUeGgAJD QIEhoMAQUGAIKDAEFBgCCrchoPB2CCgwBBQZ8zEw2BBQYAgoMAQUGQKKDAFFhoAiQ0CBIaCA EJDcPNtC7XuP41VAaOvZxI5mdtRAM5iRcaDIOFBkHCgyDhQZB4qMA0XGgeJtHCi+HQeKjANF Bn4stHGgyDhQZBwoMg4UGQeKjANFxoEi40Dx9iBQfDvyExn5iQz1nKAdR0Z+IiM/kZGfyMhP ZORHCp+6HITscx/fHkdGfiJDPRbayE9k5AedWiEjP5GRn8jIT2TkB10OQvapj29HfiIjP5Gh nhO048jIT2TkJzLyExn5iYz8REZ+IiM/8TbyE9+O/ERGfiJDPRbayE9k5Ccy8hMZ+YmM/ERG fiIjP5GRn3gb+YlvR34iIz+RoZ4TtOPIyE9k5Ccy8hMZ+YmM/ERGfiIjP/E28hPfjvxERn4i Qz0W2shPZOQnMvITGfmJjPxERn4iIz+RkZ94G/mJb0d+IiM/kaGeE7TjyMhPZOQnMvITGfmJ jPxERn4iIz/RnPKZpI9vjyNjPZHBHQttrCcy1hMZ64mM9UTGeiJjPZGxnshYT7yN9cS3Yz2R sZ7I4M4J2nFkrCcy1hMZ64mM9UTGeiJjPZGxnngb64lvx3oiYz2RwR0LbawnMtYTGeuJjPVE xnoiYz2RsZ7IWE+8jfXEt2M9kbGeyODOCdpxZKwnMtYTGeuJjPVExnoiYz2RsZ54G+uJb8d6 ImM9kcEdC22sJzLWExnriYz1RMZ6ImM9kbGeyFhPvI31xLdjPZGxnsjgzgnacWSsJzLWExnr iYz1RMZ6ImM9kbGeeBvriW/HeiJjPZHBHQttrCcy1hMZ64mM9UTGeiJjPZGxnshYT0SsZ7/d Nf6wvuTbkZ7ISE9kaOcE7eAy0hMZ6YmM9ERGeiIjPZGRnshIT7yN9MS3Iz2RkZ7I0I6FNtIT GemJjPRERnoiIz2RkZ7ISE9kpCfeRnri25GeyEhPZGjnBO04MtITGemJjPRERnoiIz2RkZ7I SE+8jfTEtyM9kZGexNCOgdFGeiIjPZGRnsRIT2KkJzHSkxjpiYz0xNvDPuntwz6JQZ7EqM4J mnFMDPIkBnkSgzyJQZ7EIE9ikCcxyJNugzzp7SBPYpAnMapjoQ3yJAZ5EoM8iUGexCBPYpAn MciTGORJt0GeLpse9rFLyqOPfWkfnbJwK3z0sUu7o4/7+7Y+drFx9LELrKPZgLMWbnCaUdjt DTn1Mb3dx4Q+Lg6dMnA0a+9jZh8T+rhM6OMyoY+AsxY+dTkI2dbhWt4ex4XjuHDgLLTjuHAc F47jwnFcOI4Lx3HhOC4cx+V2HJe3x3HhODpzbZZwseO4cBwXjqOjXHWUq45y1VGuLhzHJd/1 0b0tVx3lqqMgPUEjVx3lqqNcdZSrjnLVUa46ylVHuepu5ap7W646ylVHQWqhlauOctVRrjrK VUe56ihXHeWqo1x1t3L1x4xpW6c4jv8NZEx7hzPyYxq1rVMc3P8W0qiltTvzJoxfO0zuyEGe ymLhfEju2u5Qfy/+aPdqaY2XZRePX9vLcpvUcU+5mFtG9yMPeW7J4QWWo3B72TwtdZ7u6R5z ibo0c1pkFn+u/+CPWEl7GcIK86SZc79/mkvv8kvI9Xzqi0tbmkukrlz/++nZTx8+PYcPv13/ v+a6fN1zXT49fwzTh5oC81+e2x8fc6+4/hhjTXm51Kfn9BKfvv35+ug/efY/UPLMMNVz2cen zEI7hn18f6zDI2XxVtgd5Iacj6PWbbon+b2l1hyHzeX2GWWHD+sQp9gHYSXP1X/mulqLxFpk S2nbYY5bmlUfYzjBmI786j7W+RnzNj9XmI73fdng8V3sXvj4BFtvnMDaxlG4wfGo3pPsv3Y6 rY/LZkKVlaKnmrV5Xrb59K/XgXzxOS51Ki0vU8gurUO+lluin/w6rT7GlxDnOK+T4aN7mYtP /sOvn/PL5KP78A/P4SWmZa3z+lw/kJFz+vC3o/bvLv+UAseDfrn/sU6y5F5WIV0+/P06Zfs/ yqu/G3/+aq/zi/FvbUq+TFM4pqW7vszv/UrBynIjPa3LvfjTBPFlrkW2DOAd5niMWlxOMKYj f/j6D3VG5GN6xfG+Lxs8PnbQCx9fLeqNU5i0cIPjUb0nOfwAE6R/EqLOkGm+nyFOp8UvLsdG /lWG+58uRkweVQXM/OKmEj/85hj7Xz+naTpG8z/X7j6ladcqFeVjh8XH+QTTNJTKX/3R069l fNvPQwA0OFZ8CuUEVQCkUMXHrljXrrSH7a9ucKzpVnis+FgC4Qxp0efdrIVla6yxsGqzp7Tp nNcOc/BBeSBMh4JaeVhp+H4zpBoDVYSsJkF6JEJ+3wnyloxYuVoNivwDyYi/fBcbfnqZoslE HeKqPnNZGzPlTsefrS333sXiPvxzZWZZ4lRbt/anZF+WKindSwp+ro3ff//y7F9SWl2etaG1 ZFp8/PCTG/3q2szs03odjBXtkut9C/+2I9UkSm4b139fWxfqlUTt058+7//4VBmNy7y2Po+O +PHnMv5M4083/lyNF7+qj+Q+/M2H/rKyLv3/Uv/sXPzxwcq/G//4J+PPnz6vatFPi/vwbWvh 2kb/4W+en9cuV9qGUZWcf6k5uV9y6cbOv12fPE2r+XnYOAJrz6Z1Ctd2lulUpBpDPxmwm0V+ Ndx/9Z/+flWIZanvdpXPb//jN9/+0V9/+N/W57WH/HN7cLPZ5Hl/O/585Vt6Q/7usujvLv+s tUbDT610T/KGo61//NPVmu5Effj4/D8Jb/klrzOnMfaf6qP/ofZEXvckDfr103db+nWhslVo /8W2rN1aB+yyNR/rSz92/uqL/6IanL/5L8/v6OL61NU5kof+1fPSbd06DH/2vGqTrXarvoqU ZhuzabE2Lfhd7Qg5qwgunY51oL79O/A0+52oP19759apezyzmdJmjKoMmmsbeo/Ly+pRSJ// 47N3V9Pu182M/5fa0VOjL5u8KhHn325zG6Gva3J4We3lj768lMN92ApXnpuX8PEYJeeLHaj/ tc5vn9bFkGyj57RPu/s2r0O7/rLbBKroX60ZEGd/gier4PDI1b6IK6FPeZp2n1yEcIxzOkKN 1VPdHPcfpjXTy7LqU1cP+to/ahNdMxD6563mqUXltInfz91M1YAN4hv8tEvqMm1z7/+rI9YG VmbGWIn/KLLgV0+rRN9/eG+VVq6+qU6+fxylKPRc/dt3p7ZP/D8d7fzNr9tM/scvl8LxZ30F bR5x0xP+mNBuXifXIe2Gl1vf/uHnXRqv0zY9H5olblr042o114DCaq77XvvbVZa9hDQttfZa LPngq96fX1bHttk+08vqhK82XV158cXl1Yavr9vL/qb+6efQmr//4/r+5cWHqawqsv7b5IM+ X0p+Pqo/Pc+r17Muv3V97nW+k9f/6ij56+Ov8fLxHmmbtv7nR9FfHn9d//70vJrO0ZUi5Py2 llwnZsmlmm9HrdEUYWfQJ32W37c/p4ICv5H+GT/iB1ilh0VWPz7oqg1Vo3hTDk9l+/RJ/WH1 HLz94X0Wp12iq9H04qvFt1K1+2dNq/28zc3ffMKMDjW+I0rlXSZHWz+yfH4DsU9DNPgpHb17 /aZe+j/glx0u21dStsI7/PxNvV60/sPuQIVprrDkvXb9Va+7fk+xVk9s+hruq66JRtFaYOtn zRwIHTw1AkMXBy/pRF6XBUeE7aDqNhK2emBjXlSCwnzALzvcP1m6FY5+EBRT3RIIO0FLhaHs tduvw+33c1WgLk6bS9jgcjiVpcwnuBVu7mwpNTYftxCoL3ONeca4F5/bJ27SUbt90WYPSMyu AHqvhRscj2qFtxc9iuBtD009Mp5qDrhThGbro5Mur8oxSR8NHK38fPRi0S5LH1e41nbSZe/m WXqhcO2jFLYM9K4sYy67owPlqPeok/ur9k7G4LSTBh7t+ry3e/+M3alXFUY/ayfjETdorRNY OzkK2z73rqSbTm71aiedm8p1L7d3bb0MCdPVwNGwvZfxmAi2WysMCbN3hZM0XOHaLSlsO936 Eg6xtDc0S7tj9DocBu6Fj3aHFHV0VqijE6PL0u4VemmKwmqwjsK9G9Ghk/EYnbuw6PbQZR+r vJzjor2PLkmXk3O6zAzcCx9dXimJ0uX9hVuXx1meVnict2mtU+i9Ft4YWMDP/k3YT3tDJ11I q8KJ2m4D3cSFtPfr9dzQCsP+ldxeOMxZ2y2wtnsUtt1onXTHUP0gtoqfV/UrUiQvKic2eIjK Xnh8DNPnsqB2zYsltRs8avfCWnv2qJ0jamdI7V5Yaye2PLLlES3vhbV2YMsDWx7Y8mBb7tly x5ZT3/TCWpucJ3KeyHm2nCdynsh5IufJcp7IeSLniZwny3ki54mcJ3KeLOeJnCdynsh5spwn cp7IeSLnyXKeyHkk55GcJ8t5JOeRnEdyHi3nkZxHch7JebScR3IeyXkk59FyHsl5JOeRnEfL eSTnkZxHch4t55GcB3IeyHm0nAdyHsh5IOfBch7IeSDngZwHy3kg54GcB3IeLOeBnAdyHsh5 sJwHch7IeSDnwXIeyLkn556cB8u5J+eenHty7i3nnpx7cu7Jubece3Luybkn595y7sm5J+ee nHvLuSfnnpx7cu4t556cO3LuyLm3nDty7si5I+fOcu7IuSPnjpw7y7kj546cO3LuLOeOnDty 7si5s5w7cu7IuSPnznLuyPlEzidy7iznEzmfyPlEzifL+UTOJ3I+kfPJcj6R84mcT+R8spxP 5Hwi5xM5nyznEzmfyPlEzifL+QTO3QLONzhqG87dAs5XOKE2ON8Ka21w7pZcUDsX1Abnn6p+ r8GFdJzKqTDO+1GauklroUtHwGU1RVI9tbdHUNKEwEXMy/FrgzXYNLXa+2+pg9lV0Kz976qi H8cKfd022H9bQT5qfdetkbU9h6LsfRmWznwU/tIPGBwPSsGNV6QQ9PVbp9L2Wx6N1u5+14KS 7z46Yk8F5LrN5Oblxe9xyW+fXQ3K+lp/KR3+83N+yet/5g//+7P/8OnZhf5fo9i+0VT+QJHa TmoZZz6WOp/yLDPCwL1wN3Ryna1ukQmyTs5hyabj1wbrw9x8cO03p66NUBV8xwi5CrdB8e0V YQPzUeu7o7W0Xg9YZ5MfjnedaceD6hw8XlHnp7x+69Q2d9sC2xqt3a0TpOa1PUIlNSIZF4mc 7HDZYdKYzef6+4TawaN2h0ftXlhq+4ja9Vyg1O7wqO2jqT1py/2yaMt3eNSe2PL19wm1i0ft oi3fC0vtOaJ2TqidE2rP0dRObHlky8H5XlhqR7Y8sOWBLY+25Z4td2y5Y8u9bTk5L+S8LGy5 5byQ80LOCzkvlvNCzgs5L+S8WM4LOS/kvJDzYjkv5LyQ80LOi+W8kPNCzgs5L5bzQs5ncj6T 82I5n8n5TM5ncj5bzmdyPpPzmZzPlvOZnM/kfCbns+V8JuczOZ/J+Ww5n8n5TM5ncj5bzmdy nsl5Juez5TyT80zOMznPlvNMzjM5z+Q8W84zOc/kPJPzbDnP5DyT80zOs+U8k/NMzjM5z5bz TM4TOU/kPFvOEzlP5DyR82Q5T+Q8kfNEzpPlPJHzRM4TOU+W80TOEzlP5DxZzhM5T+Q8kfNk OU/kPJLzSM6T5TyS80jOIzmPlvNIziM5j+Q8Ws4jOY/kPJLzaDmP5DyS80jOo+U8kvNIziM5 j5bzSM4DOQ/kPFrOAzkP5DyQ82A5D+Q8kPNAzoPlPJDzQM4DOQ+W80DOAzkP5DxYzgM5D+Q8 kPMAzt97NuPibPT6iFyzkr/kcByhivWoS3Qf/s96vqUszmc5Jf0X9SDkSxWsX3t8ubpHq+ex n0es7tbH1YJfF13YX9UOTz89e/cylRg+/Ek9duxS/PCnz/vJ7P/wPNedyWX+QzlbbaPQHVcg 6q5SPE4sbHAe25lR4Oe+JyW1666S1O7wqN0La+2eFfGoXS+ESe0GR+1WWGtntLzuKmnthJb3 wlo7suWBLQ9sebQtD2y5Z8s9Wx5sy8l5JueZnGfLeSLniZwncp4s54mcJ3KeyHmynCdynsh5 IufJcp7IeSLniZwny3ki54mcJ3KeLOeJnCdynsh5spxHch7JeSTn0XIeyXkk55GcR8t5JOeR nEdyHi3nkZxHch7JebScR3IeyXkk59FyHsl5JOeRnEfLeSDngZwHch4s54GcB3IeyHmwnAdy Hsh5IOfBch7IeSDngZwHy3kg54GcB3IeLOeBnAdyHsh5sJx7cu7JuSfn3nLuybkn556ce8u5 J+eenHty7i3nnpx7cu7Jubece3Luybkn595y7sm5J+eenHvLuSPnjpw7cu4s546cO3LuyLmz nDty7si5I+fOcu7IuSPnjpw7y7kj546cO3LuLOeOnDty7si5s5xP5Hwi5xM5nyznEzmfyPlE zifL+UTOJ3I+kfPJcj6R84mcT+R8spxP5Hwi5xM5nyznEzmfyPlEzifDeduTGrXbrtKovcG9 +FZYa4PzdRlk1G5w1Abn27Gy1QE9jsPVpuZj26bDPE6/RoG7lTtqN7N21O7wqN0La+2eIPKo 3dIejNo9C8JRuyfQlNoZLW9mrdROaHkvrLUjWx7Y8sCWR9vywJZ7ttyz5cG2nJxncp7Jebac J3KeyHki58lynsh5IueJnCfLeSLniZwncp4s54mcJ3KeyHmynCdynsh5IufJcp7IeSLniZwn y3kk55GcR3IeLeeRnEdyHsl5tJxHch7JeSTn0XIeyXkk55GcR8t5JOeRnEdyHi3nkZxHch7J ebScB3IeyHkg58FyHsh5IOeBnAfLeSDngZwHch4s54GcB3IeyHmwnAdyHsh5IOfBch7IeSDn gZwHy7kn556ce3LuLeeenHty7sm5t5x7cu7JuSfn3nLuybkn556ce8u5J+eenHty7i3nnpx7 cu7JubecO3LuyLkj585y7si5I+eOnDvLuSPnjpw7cu4s546cO3LuyLmznDty7si5I+fOcu7I uSPnjpw7y/lEzidyPpHzyXI+kfOJnE/kfLKcT+R8IucTOZ8s5xM5n8j5RM4ny/lEzidyPpHz yXI+kfOJnE/kfDKcd8P1qN3N2qP2BvfiW2GtDc67WSu1Gxy1wfl29GNc+mhnPca1jg3udy22 wv54dzvNobWDR+0GR+1WWGv7iNouoXaDo3YrrLUnbXk76zFqb3DUntjydppDaxeP2kVbvhXW 2jOuytSzHlo7J9Seo6md2PLIloPzrbDWjmx5YMsDWx5tyz1b7thyx5Z723JyXsh5Wdhyy3kh 54WcF3JeLOeFnBdyXsh5sZwXcl7IeSHnxXJeyHkh54WcF8t5IeeFnBdyXiznhZzP5Hwm58Vy PpPzmZzP5Hy2nM/kfCbnMzmfLeczOZ/J+UzOZ8v5TM5ncj6T89lyPpPzmZzP5Hy2nM/kPJPz TM5ny3km55mcZ3KeLeeZnGdynsl5tpxncp7JeSbn2XKeyXkm55mcZ8t5JueZnGdyni3nmZwn cp7IebacJ3KeyHki58lynsh5IueJnCfLeSLniZwncp4s54mcJ3KeyHmynCdynsh5IufJcp7I eSTnkZwny3kk55GcR3IeLeeRnEdyHsl5tJxHch7JeSTn0XIeyXkk55GcR8t5JOeRnEdyHi3n kZwHch7IebScB3IeyHkg58FyHsh5IOeBnAfLeSDngZwHch4s54GcB3IeyHmwnAdyHsh5IOfB ch4M52D1E3I7TPUo/ZF7YDU7NbvADo8Txb2wnEd2C2o7h9odHrV7YT3N7DXvwbJEzb+wwXGa 2aP2arRm1J5n1J6RKGIrLLXzgtrZoXZ2qJ0XUzux5ZEtj8hZsRWW2oEt92y5Z8uDbbljyx1b 7thyZ1tOzgs5Lwtbbjkv5HzLNaG3x5GcQ1tena+oyRHabBrpDzY4Jk/UBBHNfSqo7RbUblAm bjG1V1609hRQewqo3QpLjo06FyWtQ51NklGiQ0xc1p4LaucFtfOC2nMxtbND7YTkFh1i4rJ2 ZMsDWx7Y8mhb7tlyx5Y7ttzblju2fGLLJ7bccl7IOZNlnBKGgPNPlYiWSXs+OK/ZIX0+aCon uBXexrvmlVniUTtKzpqVNXf82mB91dLvMG2/LRvwcjVphTU33OS232YF5ahVC+ZZMnvvfRmy bDkKb976eNASFCS8vndqa1q7lrU3Wrr73dfk3jVHB3PLN1RT4x9nB80Fqp8+t1xZOS3f6xrV OJRXOakxcBlfP5JmtAt2Bm6FNwm8TrYwOxlfyY7SrgZuvzZYa+floGoF80FwNSMOgkOFcftt On5rQ7bX+u5o7fG+PAOGchRucJYHrVNovGKdXvr61qm9aWGSRkt3f6/x9TVZXMtfv6fXq4c/ 57Vy/PBXz25aB3QO65hn527GzM09Z1Kp37PvWcQ2FSehrXXarkN2yOapwiGjqoKbDq2y/UMu h2Sfjod92R82UZvKtxu+d5bpEP1LXNdQkixmI4/vljl4FUt66PUyz+910Zod+GWqNx63pOP1 zO3IJ33KUWyqP8pRXJ8kOay3PPqnsWqZdobOWuHsjjtTcz7BtCeZbpZdPZu8DNsMyYhWm+D4 dZvvKwzbVG2/bbN9HdoVHMsm1jRDS9l+y8dvK5iPWt8d7RkBygVwKUfhL99st+b6g5qVub+i WQXj9Xun0vZbPhqN7v6e66uG+VdF5Ny7LqD+yfM60VdfoiWb/NXxz//2uR6ILnOToF/q+De0 TrplLZ2WmjtS8why2GO9ATuGPYYxcDW6buBWeBOrq0+0moEy7DHEYWSl49cGc4XpYHAF4eB9 Be7g3Vc4bWJ1OX5rI7nX+q6P89q8wNYesO6BbIUbzPKgGOQV66wbr987tU/PcjQa3f2qYb86 dL8Oe6kJoa8lSTt9P5b/9fIe3zEYf4kc+X5Zxo9D+P9qz3FbcxP2lNCXrXyfvLNF3y3v7tq+ zeePfqrJfD+upuCWxnTcXnB7oZRrqtOeHdGUOdIPr299OTIL//S4bRBGeuI9S+PH9lmLdTbV 1J97+Y/hSAJb/7flXPynnrZ5S864XVVY/Z7V+Cp53vVXhcty5EesJqSBJR+W6pZnd0t9tvKW XMqh5tl10/pXd/FLwgsWfcQK62cjhrZd6mXxfHjd63JzZd7vJ68PrdAdMFR4pMqsN//LHA5Y O7bfK19he9SRGdO1Rx0dq9/dKeV4UU2JWCQJZ23VntVshfX6+0iyWZ3cUo5H+frk5WhkzWJY lqNVvj55GQk6a5sHv77aB9OoWwdjOt5bU3AeH/Wsn38R22KD7mhzaIbI8aLqGCxuAfQJw+w5 6iGh8MiZ2WBMeFEsaEZyhOxCmtHBPKH7OSg5S05K3TDMGrHLmAyV9mWMfos8jNFvySNluOuL ONyLDHdNaSnDXZ88hrtOpOXQI22arQa2TsJlGTO2PmoZU7Q+6pgMbXovuyfXJ/+yWwZ9aShs S3FvRj0cULenD5gIJ8C5oO6c8OQ5EDq0qkWfRpvzrD2qBwOkv1P2ysZUTe7B1ZQWZbJucAvP 9ciBjMKUgo7R1MJYxwjWZN0yvnXrXEa/HjiQuTHFDJM+Yl5NMeism6LXOdnhMWOnZu4f87nu sstsr+ceZC1scOzQ11E4UtV26D0KHyt0gxkvOlb3BDdka+Q0E0Z0cHLa/SFzGjlDIjXqhrxq xA5p1mgfsq4NSpEBDSon24AWGdBZZWybDEMCt6ky5HObSEN6t2k2ZHubhEPytyk69EKbwENr tOktOmVO0Dh1aYg+Em3Vg9VHUvvtt/lInlGgnKYFyqkrNoEZLW4ZVERXtc4fEmdC590Uobpa QpV5CKD2qEMAuYmazFGTYYScS9RkGZqs6bkhy5qeG7Ks67khnZueG5K9zbkh2auYmEbd5haP uk3tDcleV6+jFnRDKxQotg6pBb0HjA6FI7VRpDZKE2FAIxM095IWdDA7dD9HJWfJWalb8qLE iibruirooCxiuCRqMkjJTVeNRzX5O6ZZfXIZ8ypTsTUteDx5gihvU1QE/dI0Cqa3aIWuuo7l WqhCWg7poWC66hrQE06oO2fCiPd21XW0qquuoZygqqectL81sbwqp67JhgACk1MqyvOUYE90 TSa6KugIbppsPGqirlp0bkw1yDNmTldseUh2jSe1TQuZkxscdYPO502xDT3ndC1scDy5NjIU QJ9Q2FM5ieryun57MxzbPBXChA5OHt2fJiVnyJxNVyUldsirrqvGZOi6quiQqSaDxd+GWzRZ hozddNWYV0Hlc5tmqtjglmyq63hRV12Y3qI15kw9VwDLBH0k2qqniA+Tr8GM8x+Hclv2mNm+ 7PAqWUl9FU7aTFlYM43AeeI6K1xnEUZghgDr62xw2RdW1CHVtbLQroNz0a2+NH5ti8MDxvGo wNUQVG/0GS2Lo3lPnOB+AnQzXuQiIWwztevgAG4TfNHul4XmlkxweKmN2DIEWDeoFh0UmbMz jbGZxliflWPOZkKYNtusHNBjRvdJOiDtum5hDXeJi2MJeO+SCLnOFrr/PZIwbKgEG6rFCoba dLByu9EkZlHRUaif3JAx6ppfXPj4BJ890dLJOjc2SPPE0zyJLCy2TNb5vFkrHs1IsN3UDZ90 HXV7RKwVrMFGziJMLjBAmjs87M0JrnT3f4dkWKif296JwEADxAF2E2PIwiSwCb9lWbrMM39U 4dfpCdt23gY9jVdHttz41anG6mwNw9fBu+r297ChHdypHrIqtPuH7T5R6/QJXpQeWbJlIeRq 6MtuwEDouPpnwkC/baEupM/XVOOwohJCZV3LLvD4xRNNjsp+oWUw6yh0Q0GO0mMEu5QVCd2E PTXD2ChojxpOfHtRggwWG6s1cgQPmqmX0cFlyLOEoFQ3MWdjj9J4HYpxpnnaDhiNyMrMlVRo 2ra1UjBVpG5fdkM0TlyykQt61jZ3B0PCbEH7212XDH9Sw3vuCR6Uf0KkMD4hrIgx0gW73Y3w uoJ/VMk/quQfVfJ/xSr5Rwfjqx2MXdq905U7viincNfuQkBXJA5MDyHUAiozqRVftrE1BFib dwjwLiOymhi6aEwP8priTIyRjLh6i5EMtjr0GJaAMMDiWXgEJxocsr+9yMEEkWhEa+QQ9onh h2bNLIgYSeQ8U/Y3cT4maXP0RZ1HxBuayTU0Q0EQt0togQxOLB51mwweT25CV5S9pwFKOdpC y2PvslmrYst6Wrrgquv+ibp/7E62kKfIUYxRtwz8DBhYOPJRQ8q2F439R8eorcOs610YYdpm zeRZu7/I7jNme4+PzhScYo4nrKPFY5UVhg+xQj+1L9e6OOWn8x9jfc/HkbPCNTpTorW9PtoN C8NPuoIzVnCmNdtEZ4YxL8HHtjgSl84wm1OThlzukct9yLtmVAc6Ap5L1nPJuoIXOYqZ4Sb0 FZzRhRFebAbZMOYy/ZGcub65M9YMMtFJbdlhA1aWe1/QdMcEFsCFomLhk9tOkoTpefqguZBj BU/0Rvv6HmaEUza6MT+NpROVyb6whmHkZh2FvgrHgm5wbMO0wjHjUWPfpb1oOAKtGamgkWOj pa3RYRhN9Dia88LzIzLb2x6G2KNcKc2aGeuo4ASBrsH+KcBjl7Ctkuk46i9wzLgxAVu0YLgP mdqoTd5RuHmxE+GY6c3H4aZDYF1ZYc2dSnjvME4Sdr56m4dublshQ3M3rZ+h9mTDou25yG7r BAHTpdGIb9P6mjk+Xc4ljkC+gzPHlscFmjimn6LzYkarFm7PTdy8ayc8MtwWnY+zktNNcVE/ E6d2M3roTA8HwcGA7Jos5jvYBGrEe4f33Fo1NGhrc5zQowCJItZVIycM6tqVHboAQ1S3Ozjj TEP7VuyYz80FGBtDbbiHqG6TYZxpaIbpRD02okFtXg1DLdNJb3NyrEEsyfbx3P3cmv2jq9s2 wsOcbsY4zi0IPR069HjQY2FbwYOeRDgr7PbGOP3VRmnivHP0vYInhIKRNjeYh/kxrueVsSu2 WxpqtBbquEQLl/ttGacHNmU6RihS1TL014XmkEdGiWeqeGMAGPOAgSFreASKRWO0ZJo0TUry cNMwh7qxhA6KM2QNrYVykOLJmnA08IrRU9x7tpB1jY6zGrBoM3pgUI5bBurW/HSyna1lPQwA HKo6afxEeyDroGzGA22JMARf0Yl/grOKpw3ypIXYMOkJFo6xf/wTrKNJp2jv/gRy1O4KiE9N 3KhecOxms/cQy5VFV4xhqdvYn49/iMcKpjdoLU1G6y8tzWFbOfqKETsbvcc8fbvQiLOWZgLx IyLXhyVg0O4tzYUjjNDAV9qh6elNO9RrB9+yQ2lCWDsUBr4uSh587CuYOkOgA5xptM58cg/u DKGLc0ebiBry7LEvqCpkl5S3vmCgWPVP8AV58iTR/Gjhm+DvoPEUeS6lx3poIQ/zIzHO37ow sYPWU8TZITl5krmvlbmge+gHg3LyFLkXZz3F4y79Hq0/vI0eyzeRfrMPYHYJzB7CgJ4bDhO2 I/ruxCAgcReQOxuJhoLdFfEgLyFa3w9AyX5Lxii1mKsci73ayWGQ1ewCDXMLQdYzDLCgbLw2 YgrbWC8i/b0LEiduS2fS7uvCYgQ60VMx0ese28ZerJxZM3HxmWeze0x9zEoTcc+EjNYXHHq3 +wB9u/F2D2HGexdzut6cvUePtvOMVMlj38MxXteE/fDbzI6K3W8xuzGI5W+bkeNRGWqkQx5f Hbcn+pYRCw8TxO4v0QTpBxG4ZSQ7V2Zfi7teboZCtjtmXldoDwwJz1jd204dhkwkw8LjAguP Giw8atD3D4c9wtNwfe9xSLMk8DBu5sMz6w/zfNXQstwTXSALtxPYiV3E0Vi5LXS5N+nJJZke ATq7NwlFsh2bDhxhnjmWc9KPtypnTiWzVVk478p5zkY+ymxkyjnpdF4cdumwg3JOGmbEdvSZ Fpjd1yxKu9za6bIBh2dUcjjKFW4ZNgtMZBJ3H/s25zjrzEPGfZsTmzMKJ8CZx6b7Nic338RQ eMc2Jz1Ku+tpji/jKoYeUI7KczebhnN6uevJuzXD1HtjE5SWn90ERdBq08DjyY4a2J21t8+E twc+woWZYA584H6MRBv6+Q9zP6YodXr+I2JTIOF813aMGFep9PxHpoVVLswxY6wNy+7qOAgC bXcHPj7tpm84fEaBXeymkTHolfDLUZxn4S0MLMzIjoWSRieNaOMr4fFsTwv+Hs6sazqBuMEJ XjUzsk/c+bLwOJa9xRWOPnU3MwwRGPRVW+EB0wV0LDxdws/7P/jleDOikdvDprtnZ2XkBK/a xUhKoFi3kARIq7SRn3bJlo7JKrBPmWYTJ8ffh1c7QSD1nQ4DOSmSv4OtcLiBaNcOGZFOnlDn fUEnOnzY6uF9tFfdQ4e6HT5uNTeAxa0vF/A4grtFTNzeCYVf9gDaCK815W5hYOEB3QUc9PXa 05jo0xPiSwa6p1Ocz0L/8M3cdrmHBXWncu7xJBO9WQMj0YzAPkdaNCcfsfqZAZqZbmVeLiB3 6QS6CygxRnnY6/nZ/WHxDppm+gto3kyDaMC8XECaS3kmzJd8fDpisjubCmvxhTeNLCwsXGAi LMsFxDU78Qfw3s989usBTUPiNdweRh/HQvNmXv8bOzLNTReIgwQnOLPHDc6XbO0hrUWu2Q7Y rBWEUjfIu4T3sIU0AyFP4Vg41GXfvBveZgkX7WJIZExG24l8Acebuf9s4VUnHhOQ7tgKF1AM wZKPIMGxebCgxydIZ31BM09QyR1e8ivhqfgOwZeEW0u+gKZdka0GBVo4nLtYMKgH/LQ7mYcg VLjpoUlF9AaxeB9ACqwOGTbLWLwnqFJkhq4QOJ6d7uCiAnx7toEQKido2rXwyQvfu9z1eIY8 Rxc+bcphk26vB4S8P0HoP5FfFjL23yEds2UM+vZsaEeR2L04739aSC9PXuUv2nULKcANzLzG YPjIvGebywV56RIedl8aDo5anJ93+ysNuxAmebeDLKQhKHt0E391F5AWZ1IzEVb2Bh82JNKI vIewsk/Qs13+otXxYY8TGxnvYMGTJ2Ohd/veDfcaNvgG6Q05fwdhsG9PvoUOdTM8g62wgaI6 UmGry7nVE92fewjbf4ORfbqFMOfZDBwQ7OGCw44Q2OqNHMcD3oYpTCAiX0ATtRjqfXPLj1uP l9GD22CCKWwc/ngBTXRA7Azxwq98dHcBcRf/5LEaLzzewMu6d241fh3+7KAPk3hzUe/cW+tk Gjdyegj1RZ++gQ81PL/v48yd3ER4Z8Mt2p3Qa7foxksyhY2nY/wg4yWx8HASxr4390UL711a +MDQP/+aL2BgYWNuB2nmsEVfL0zTRDvW2NdXRu+tfX1lbl+bxPs4nixR3mXIGLgT/D6m561d hgmnFo4xta7ssnJX+IFdZuAnmg6v39xYEv4OQmBZC8b+6i6gMWjeZd9caGyrKt0FpOR0FJVv aGxjC0w3vwJ+0gyR9o+uEKGHTjsG+QIaDWi0p4E84mOhKsRAhWhC8VfhdKMBDeThbQvHKIcL eNKPJob9WMfRDnkjaO0Ir1We0cufjoDmwZeJ2VqVZxSiUZdX2pPn5i08aUAT+7zTgDYweBWu vIVGXSqsDbHhuUcK0fz6Lv34PnV5CjmeQmxDIb5+c6Mfb3Vc5K8mHvcOZXqtlz99s0djRrtM hCldQDz7QRTI6Md4AT3HUYLtNvjyKFJjlOljdXmKaijcZ7ZMqEuF+E79aJ365UI/3qrLK708 JtTmaFISfJ1CfKxb7xSiCQdIM1Q/HhPqscqz8B0OLiXnGwpRLnjGpdSTBOc/5NrFWAbuSc8J mMvB9uow72iYa8f2UjKvLJsLzfa6czsXwVO8clWaxoW5Zt3vZPPGdmThyGO7opTM1fAWWadH nKn9ZJuHV9LthXUevDaX3fsRyElp1zu77UARZSbvZC+8ky11+xFIbqbIuSZcLD5dOzZHpCbt bzcd5NoFuDpdhjZXpXmR2lyztpewcdLaXuA217vt5W9zNRzzarsMgA6erqzyZKJcQsB1dnPZ /XQVnhflzTV6XLIfOxQjQV454HjYGPCMZ/eGJDaTqU7kCm9RzdUzuNoMUjylMQ4MtkOuQu0C 4j0W5TaG7m5IcQD6BC+mQ+SL5E6+iuWtkfd38s0UNlsGRQ2KbXFEJVavTrSFxWN9HLLTkqXV wxQMArswGCIZSZK2W64jqjijVZmbcM0rm6lITAYpEW+Rws9TNDI0ZsSqEbqRlwAb9EZgMwGH o4QWYe+pCqLOyS3L16IdNFf9CvOJyxZby5Yph9QnXUeb6sOgFCY6KUyycMCLW45D3aaLx/Dw nKjbyBa9Q/sOf5zJotpxwLHL8nXa16QxcRwuSGebIMWkTzHJVfp1nNvELE03JzRSkqPh9vN2 cfyrdDMdL7m6ZNLU4CKATXHTl/Jd8o0uBnDdTmXGou/dBMwQ5EY3zw91My7Kb5ceectNLn/P F7o5E1LcmgQp5g7cvW6eH+rmSN1sUr5gxvb0hXLcBLP9XbrZ3EQ09xQZ7HykmxNXPjX78o4E Oem61V+ZIMdYMsbOMara2EgcpT9ggpyvUsac0ZfKOCh1byTIkWV3lSDn1rqm7X2Vwkrsdlr1 XRk/TmFllPH3TGFlvJjHypgyOPK8sYUX8vs+wZVR1X+4BFcz1vfMi4vfI8GVbEy3QFEap4Na WHdces4gr00WgZGQeVEsZAZ1ee8maLh3W3iIvPCIuYXteHq5gyYXBC8nFs8XNRjYCUboJNtD IswXEFeu9MkaXm9nJMb8eSU8lvw0X8MtoUW5g4U9BuSLjnPd4dgAFHhICOkVL4v0wtzm3+t+ 3unNQ514zJGe4oNXa8xISa/8xShzqpp0Kd7Ql+4gE+f3nB4TYQLX+6Wd/w66+I4YG+ePmTBm Ol1OGKqjvfCbyaa34p5vDjfPNm82E7loYT1kokvv9WJhmmUbzjzfrcTHq5gvescoDHn7Sngn nK2sHg3JF3Bh4eXdYzRedbTrXsPkC5jv2hXPMOTRrsdbpYVpjq1aMErjKr3Qrf55rLuMojNa wugQo2GM/jHayeguo9mY+XT7YKEPx0Z9g3Gks60fJTYwpEO0v/eDhfqC9vHksZ+6tCdq/ivA XKHuDK1QL6GuUFfhCtW3WOHQeO3Dy8O4bt9w1gMJ+5eYv3Q7fYWaq2+Fw7eorRK/tH7heVb/ YIXjwm77WrOGAVc4LpnXJ49Lt762edDt64tGYNPXLgxvqX6hPcinEOt75VOIDR4vql+QjiNF TP2GdByaocGxmdxGfWTob3AENlthz7pjp769aFw/8+2r8jNgRBeipCGvkw83/1e4KDkRGZ5X GJXYmNSHW+GigxJHepk6ZFGGu76Iwx1luOun7WW465Mlb1N9soRMaxcQ0VghpmiUrYn2KA2O rItt+HC1VRJYqa2C262wtLrq0gNOgHNB3TkRBrx3dmhVXtDm9rVzcQej9re6OMLG1L6ULhej F2WyekvCc/WlZBSqpyVjVANnMoLVS5PxrT6cjH5VjzI36hVkmTn1grLMq3qbWWZdvfosc3KD 476y0/lcP+Qks71+dFDWwgYPYuuX4ePQGA0Oq6EVHglzOvT6oiBZXZyu/dbIIB8d9Co3WgeH VGndHzKnkTMkUqNuyKtGbJD83pPKujYoYVbnWORkG9AgAzqrjG2TIWSN3op8bhMpSDa4qLK9 TcIh+dsUHXqhTeChNdr0Fp0yJ2icujQE1oUj2kp02dXnDPfXDD2n6U+1TV3PDZjRgaVQdTUu dFcOmqwppyGPMjTZVB8lGSHao0bwylGxYcBq8AqKram9ITSb2tMYKhRbffLIkt/U3siA4tsU HIK+aUEI+iCf/K3vlRQfTQtCKcaJGkUyfjQIpRjxjd91Bc4oPDRZh3hvHJnxOtSkNasggCKP I8le01Xy9Y0qYiTjR1NdQamLErpeoNi66tI9aCi2RMUGodlVlwx3E5q6UbrK3zGvMvVcpJ6D ZG9TNCLVoaqBpskkVhmp9qgFC7Vg12QDToBNk8nGRSaMeG/TZKKcFrQ5Q3PXcJzqqhygq7pi 00sUwmQ92wLVBfNiU2y69aSqqyu2ITQnqq5F50aNZMrM2fTcEPRZZ13NyyFzcoNUe4Fqb3hd Tc8NTdaghExrI0fq5AbxcV1ZdBuEcooTlZN8gzDq2t+gJksRudF11dgDqeQMmdNVV9EAsiq2 rrqyDkoQSwWSsA2oKrYCxZYhYzfVNeZVoJ5LKr27JhM9t6jk3zQZprdojTlT7RXArsk0s+WA 7/oGxr50Xo9lN+ubZSX1Zaf36nRhzTQCc3vUUPQRRmBuEmtWpiN2DLBWmhzNOuBx7BhEOBfd 6pNvgkRO/8jp3xZHIBxz1nM1eM73oCpogwEvkunfJrim/1mh5gqCIddmNK2vQnNLZjS81EZs kNv9EcZYLrC+5gmTdKYx1qahwMw5C1tmm3eQ/QoD6i4JT164OFo0QAwfB4++uf9ybHTR/tad V5g24KqbNiNBm5+U527LiBsedYw242Wo+kzzJNM8mWmezDqveuFxjr1DzV4GAyTqfO42hbjS k66FbkRglxI2BXyr7uEiJbu6w92H1aNZuroXKtUl0UwIhNTPInPe+dHBVescWykNjhBto2ei PSrBEgeLs4//MLngEm1WMqwoife0ONNsrHO9v6PrrM/oqHzIsmuLYyy7QlUxL4Qzl6xRMwvX N12xpqKwTQuvLmt/u2qU3GeO3uRCDT0/wTHNOgpdBk9Q9tFBFqpYrYUlQ1lbDRCN6ogvsHWS g2HUTC654tHiAUW7LwZZM/Uy7UJcd1B9NdNMnGcsjpmLo9DE7NMfkyHiKwowxyeuQoasWhSK Xp86CUH7212IBL9OnRP3BE/GPyGAF3UU+qLzcOTiniH4864ajzX6o6b8UVP+qCl/aE35o3X+ tnW+y6R3Oj7j5lJBBKXL90FAoxbX2ZSPxqXoFdKTSU9TQnLtkJ59o1ZOkbaQNUMIOIGq9DQ4 ws5tHDy85OhYWM43TRDJTY7KUeQAZ72JVclLTu+8GRmSTZsiuRkoSI+u7njzg0XLRpgv3RLS TX21dQpNn0LfffGo28TqTDkqOthrq7oclb0eisZmJuKLqxoBdeCqW5wLQ61ySWGhaMQYdYXt GE30LDzOF7RHyVXZojOnWwaRwUV8FEkNhWZkIBuKCs6JgrOFD8daaLJQ7OCEdbR4rLLC6FpR g+xdX/vbTaNXwn2ySENmSrS2USbKvrULwRrZdMrNrBpTmDZnE524KayhurbcIyXpMG4TxV9b /YGrHx9t0PWdMDt64QkrOMr5RZpcfUHrfbYV6g2+dUYX7aCYXJleQ24+hSZI0uXezKaZWzT4 7IKu/kJhULhkLWTdhXUXvqhtwyCJOdZ31C70fRdJn11gCbWNlnHuubmQcicpwht1tITcrIPS 16jk1yw63L0wEsmqJdR2tof13hyBkZe8bQ+MXYq+grkfIFdFo07vbtyIeVqwNBYunIWrrHCV YUnabwHu8d5XwmMCynws8AiaFyu6KlGTRbgeiZ5oWxb4BhaWFP3U9mRkHFI/NWHbaFv3eqVD 9XqzCSS5LDeq24aF7Fxyp6AJJwkO09qYOT5d7HmOwIAzhfXEsfUXQz0ckxnNWJaLWTNWWKAK SZyAs7LRjW05hz9xLns1IPtMH1+NcHRbm2IL/g56HdD+XjlJO0OhtjbLgcw2VSBCZOY0ckZa 9bYvNo6aLxTVJWOKliaqxxjxQECTkXLBPMEyawbTAj0mC6f5sAvUWsC5dMCENYgl+a5vAe5D up2/032ktho8F8egp9V1+Q42LvXQHOCssBtycgs2EFLttf1J+Qhjmw567VHb3GAcfOCW3K56 XgmHUsOBHYVGIXLvqivToYgzLetIu9tdWOV64wwiNdMAMOaBMR6MaWHMEmO0GJMm0+Ax5hBW /mZKoYPiOXUzDOSoWORu60zB16WknoI/66k7LdZ1nF6LggzlLn6L5snRxfAE2zk/nS1r2t0i Bz3loNH4ifZApqSbz7aEp3OAL8UBziqtNqNlwYvEhkm0cIz9A3m0eU44piCeU7e7uHYLiJW1 sODMysne46IrXHRYoZ9pWr4exaEWT6ZlYEOGMeUQVXvDtEQw89q01MRJGnN7j2lJ51CGdDlP B8/xvzc8Ec/ZDE90QQ3PRe2cbfrrLYaTCSH2BoMs1vDkqcG+ZKkkhttpoUPhN1xDGlQZy/3a NRyukoOZ16Jq4hpmpW5zDfUCMeSop5R1OmQn13DSBX2CxnF0TwgMecr+8HR2HI0prplPv7/j yAXdA0MYlJMWNTr22lP8tP9DH7T9zING61vw/ja03+JINKnkNGN7lDkDAn1mT5fIN+oYGetb GTzVMshrR2BkGyRjHCIC8NsGC2Ousv1ysTkzDCpEVc+wWcEOUAK0Tfdzn0eCu0kt9+1Mk9MO aiAUwfst5My1kkGsLFkTzO7hWUw03dhrYXJGgvC9IMTUM2F71JArnpCxfAvnp/M+gNklMHsI A85oZN9/GIrTHGtH97vNkWlkyO0JsysyQ2CbHRW732J2Y6IO97Z1wxsBZp9Hzm82e4UHNiVb S4ZFYveXkk7+bauqEN7ua3HXy826JLcdM1AXkH9Ij9xOEAXbTh2GTM8HzBAydg8wEDqILxFu Ys2ksdGxPOFE8sXuo0BuZDbjRg4oY0/0tPsYtYsbAZqAGweUrzYjB/FmM7IpkjEdAszIPqS8 eWP3JsfMMnuTM+eO2ZtkgM6X8yQNfNS7dy7Tea1EdFAcAQ8z4noj0ymxp41MBjV4pkVFBfY1 t5MJQ+pQ2i3cjOwSiyEPfG0d53cLYUbdy33NAdkqu6+Js87bNqc53cvgPHIIafyrHzUx25y4 TiGua9dmvIlyv+tJ287uenoqVYZS+oFdB2i1twe8P4dB266fw+BtEjExMgII/YQub5OMqyf9 KBG2OfQY0gzrrZ+yxcUjPWWLWxDf55QGDb3EyJqc0pggJ0WKHh//24l/JTw+/rcHtY7fJdtE gzw57hhpHuHD/uxb2F60EM7SkHi86vV4FQMyLt21a76APBYgjoSBF+16o0/ujoB4hnurPu2x kKOLCr/sPqkk8gn6sF74HibtxAZnFLYwH9Rv/5Du2pUuILdoJQpj4EW73uiTuyPAn6Elj/tM +3T5tIvQePhSAo/0E/vG8/G7nGBYHsKiJuMGucNiN1yGJz6dYUA0+wR1zYw3vx7QNDPz2ZkP I3zcLvHylwtIv8bAMERSDxgtRy6DFl4bpk6HPA0mOal4q7jFHpHACr+6Czjo2x52rEeB42Hp Drqnc8iQRvbDhphWi+nfbJ/xq4U8ijGVC7aGyNl24eI+QwQeXxnczYNXwsNoGe6sgZmmRYdm O9BAzf+GX/W9n/ns1wPeNaTDiQ9zd9Czi/6iIaaZNOJuYebdKAsLXpR5cwpcftqdlrJnLdgg zqsoLBeQXpukQJsuoGTLkYe9HpBHkAp9q3voGDh2bzcksxMGIpagXZylE4aPPZS2BTy3/B8a /2yQrqnCfIZSN93D7SuD+87K6wEZbBGYLyBjL2LqGdgKL3ethru19XjAwMJ6PnvL17WHEF4J 92dLDLTEC8hTxTOaeYJK3/CwXwlH8XxZuxMkey8WXryZtz4VhjO0XUzs4jA+tlMG+4pSeHxH EL9PTyqhFsq+hVK3ubcWMsbG/CW6kwERzfdunxVUIXz5KvewmWaD0d1BhgrsqYzpAdxelO9g YWFDzwwhLP09Pm6jojBT6mYe6p8Z+p7dBWRAvhiFF0bKyxnX10/Q82H+4lWZr7qDphMW8gqr hVd8jA2MbuccWZcUHl8KFKO7WzoBpp7uHE8PISzlDfJsTlDLr/DNRW3hrSGZtTOfne9e5dUZ 2HbD2UzbCXcDDQFTOcP9vbuLM6zZ7TQaD1Ys8Flk68VCWNndvp/gDMiv2V1AXkaWb02qdf/5 ePOIP5SLVifWTpcP299Mj4atjsiFqZtNpoupkIAinbAf/9MLRQJbvcfRFPPrfAEXFDaBCBtN UR8rabsUfnkjIHD+NV3ABYWND28DEWJJZCx5erRnf3c6w8gRfMOTvnPZ8evwSQdfmMRvuKjw K8/O3nSCb3mswtelf3brVL3fx9oL37p6Wnj4I7sj+dgfMb8aQ9/4I9fuSRwUiDl+HJg3dq61 ghnAFws6n+G93a9wWMHDlOe11MJ9cWsUG9PUGJ/vMIoLx0LtMmMRwhAz1qSx+a4NxHhdmI+6 sI+sjWMsoOkhxGbZQ3PJwE+Hit7PcSocKrrcQUiKkz43hsWFFbL/OpQw4oiq/YxuNJpzOsGT wrqDF3VV29MWsHpTC7/r835QeWZP4B06rtxBo9SMykv81aiWLQQ8RLgJp79Dx5U7aJSaUXmB v4anxyrvoRaz0eJyAXlR/EapXeg4iZ2OcOetUjMqzyjEK/2Ik/F38HsqNSQSOMHHAUsIpDu4 fSVOYm4K36vjbmJuJ2gCdPqiXdNo0OhKqUF5qNqKZ/i+cNVjZbp9zw8a0ER60gU0Ku82/GI0 YLyAhSMlYW0bmXikEM2v79KPt+rShBMU7hNdJpTVcQ8VYubetPG1rUK80rxjQm0eLZb+nXt8 oxAfa887/WhdWJVuQ12OC1XUYhcq7+SUPXZhH2tA45XKrZE3v+e3b/3vd7ID72TLFd5+ORib E3qKgBeL7bVjJOu1V5btheZ28gG3IfQyNG0Nc5G6nRIZp2n7nWyexJUL3JgBp8vf7QwJ9+IT 9ZtseyBp7ulKOs9Sm+vs9rI7r8Kbi/K4pBvsFd6FF3zt9V9cDjZXh08Xi4v2yF5Kdky8aC80 m+vO0Pb2qrS5SG2vWeO0tL2ibS5w2+vd5vI35lU/319oJxRznHBRcgI+t4T7DrjOvl1RmHRQ 9Bo9L8rjGv2xU5DHHkV50jPN/WFjwDOe3Rvi2Ezev5LLEeyi4x6XpceQN5PaBWaUx6LsY3h/ rx5HnE/wYjp4vkhu3S+caDOnYZukPJeCr73CReT0v7x1zwwk8t3dzFXoL5assXqQZEFgFwZD JEc8uZmFclZrRqsyDah+G4KBJJu6aYQRo3LVz3/j22sQnBSrRuhGXuRr0N0JbJsXg35mT5OB A4OqKDLViAnqO6igTJOvXcaUY+iTrqPtIBsGRVewwwqV9Xt1UzGPS5qOT8UB5lMuDl6pyrhR f6luC31qq25x+E0vkTR1ywxPom4dxwfi2OY8MRlRTL6UPomYQEHinG8rY7nPDeVkM8BkuhmZ N7YvlbG5nGSuLtHreEM3GzGAK3MxM2BldfMQ5OhCvyqdoLpUN+Oy+3Zx8VY3z7SRqZsdlvKm qqmMzbW2e908X+jmpI3Uy3Zep+hJN886va91Mz1WuS+YsKyaOpXPwheq6iRw6OZhMFOVL1c5 byY2xLOZJufNrW4mAV+nm41RxGH5wXPePNa+POdoc958lfalW/xD5Lw5Gdtfl5WKyR0us1Ld at+vykr1VdqXMjjyzLCFF/L7Dd2MjDe/V84q0c2Mv3Td/Dhn1aRD9s6cVUeAKo5jORlstdkh MDyEzAouTz4+0afh5sJd0sJwc+ExcZt1weRkMBkbPJ/c4MJWM6w2DoL3Hvs7yFPjhXHtwo3e ojHx7RN9+wx5JTzkoeSKANweFu9gIR+AfNFxRtqPjTjHbjiwmS/gXvjzTm8c7poHYz3zBi/A SEM9u2FgxGrsc4BZTJzhy91BZn/vBGVAGVa9WvPfQRff9U2+fWZfTJh8Ae38oX+3w3d9kw9C gw/LV5DGqoWH7OM3+fa19nqxEs06DRc83yy9x8uWL3rXN/kgq428vZDGVjiPhuQLSPG6w3d9 k29/1bGv7zmJDYzxrl3a6nd9dQ+zwwj+r0rkky9g5sDxAK/MaaMHjJZ4rFKM/jHayeguphyt X92L7imGcSC6wjhyeIR8gmEcan7fV/cWvGCJ8ogW6on83lDUL+e1xg23Lawwq98S9XbvXKEm J4n8rl7Uzw+1R6kHEPV2b32UfH6oPmp4HqsVH8Xz8L5CvUYeJSm7r0+Wzw/V/srnh2p/5fND 9UVCd33RkNChdmEIklDfOzZmw9ojOU8UYoWB8HhRSBUugOOCeht1+epehcNraYVHfpUOE140 nJgGx0nG1siILkhEsXZQfJraff0a0VKhXm6OkqmoEisOf6Vd8gLUQZE05HXI5FZxHdDI4ZZb xXUyyPeG6lSJs/phUb6rV6dZlLB3fVTBFI1FdwxiRMagKJ+4nNpS1C1GwLYyh5dWOzhiUmUh NL961J0XPHmeCZO2quaVj/oBP6c9qpuT0t/qecQIvyTqZ4+CMlm1b+Q3+aJ+k6/oGNVYZdSb 0Bjf6kvJ6FdPK+rF6ElnTvXSot6TLjrrqvKM/JJR1GvTSedzvYIceW06asaQoCtlg3rXOarf 6XUN9sJyMTro+u0vknvSWPu9kRO6oPekZ5Uqrfv62QRIpEaduqFOpVmjXVPAQBK2IWNy+xg4 3Mx1LxK4TRW9Y51UerdppleuIfnbFNU71kG1Rpveesd6Vo3TloZeqvaE1GWi6c7f5FuO1xxa UPJUZLSpaUGkrYBi81BsU3vUkBoZem4q1HPtUXpGPWqG/TZgI4iYofa6UtQtK6i9iWqvPlky YASqvaYUhzhuSvFolW8zctRtM3Jo3/reEfjsOnLom7rUxxXKpmAm6hvRglhFHY6TYU11jeNc DcrHZgOVYlvMfNGICnc9N6GR42OzTc9FGAH6sdkmj5ySox+brfJIPjZbl/owmHygUmxqL+qQ 6Tf5FijFrvaGUsxUipWNsTNaJ5J8hM9N0JFTk93DqsvUkU05aXASKnOCgulacESjM2GErupa UJ0DQI+6ZaJiK3jvnKHYZrS53rtRPTdP2t+6YQI9l5WrupEWNQGIh9rrSlFPTUQmAIn6Pb+s 47spRd2YkrlR94uiBlSdzqtNR0IN6Kdoi87YriPlU7RZZ3uHgSpTPuDXIFWmaMGoS7IXFi0I K7a/SLRg1rXfGylJxYrKja7nZNduUpnT9ZwEY73Kq03tJaVdlWJWSdiGTJUipOim9kZI3FMp Qj63iRSQGExke5uEoiNnDx05Q2u06a0qs0BllgnqqWlBXCFVXSaa7l2ftRgW4+uxKJ2+mR/Z jPzIZuRHNnXZ9UU5rM0F5mW3RZ0yrQtr4UpqC0tPVEXN5ga3pS8d+bplWzpjzhYujsLFMXNx zFwcmYsjc3HUwo6Gq+OL5AtXhYtjweLo0183rdVE7PNdT2dHzZ2zYL5nzwleNb9IuwVmXp+k ul+EKZw5hQumcJ+kkO4yowttwiUR4lGbwaVhNphUaNVmcOllRYQOgvZ3M6mgctVK8spkjyRI njAY6ptZNH7FCHabQgyfSUe/GyCO9siIEzdrRewgOCa9cHCEfJEYPhMMH4+10E0b+aIXXK3u syfjs9NJl+8Lwx/cvHK9QKkufDdAZh1QNU+gzLsBIt8ILpBIS6K8Uv/3HV8KrMX9cd+7QedA zwQrWVO/JdjBzcJGJkANLLkWZ9K9ZDXWmxsw02dAAkad0S0mJ3v2M5bsQs+sL7sBA6Hjcp/x 5OaoiWyYqAuztrk7iGJyTdrf7mvigGzkAVnofqc8d3E+UZw7GkaOwQNHO8mzrmfgAZ9DinrF ozkJELpigaVm6AftoIQ0crPsvZITkZIs6hG5CRZnC/DIbvEM47U4KNUSoHLb9Jck14lw5rJz dBIS12jRVnUHQzzVpD1q01tO4noEeLoXlOB8qn+Vlee+6ALFamAMcg++fz5U8nGD5UeV/KNK /lEl/9erkn90ML7awdil3TtdOXxIRPVKI17O4xYqoQR6GrUS4G1saZJUZaupN7k7YiIZC8lr sQqGTCSBXQJbLYIiWetbzA9+v15pbbEKj0cN6d5eJIe/ZoQfmoQe4jwz3tCMmxFvyNhD7AKb sSixhFp8W7LPMureRDK+LKE2VmFMfgmEGXJ04q5o26udKZJlQVPKNgNUjmdG7W8PPC8QMyp0 GQBuMkmOZwZIWY8x6qbAuPzboGfhsdHZHjXkaHuRpEBmENdh1vVgqnzZOOqM3YwbvRyne5dN NIpyCxCrTRbKmdmMVbYErkHdU3vHFwqX49mvhO1h3IIrFHBtU5GGgh4L5wZdM0Hl+4XGmk2Q hn25M0IaKVjFbKY0bKs/cPXjC2mR30+LctLCwszVn7n6W7SxoBkTZZLc2W/LPWsHJfjY7LPC MB+yOKkwmLkF1+wzUWBtQWMfmKkp1KXqq39sOHtC7uYteHK3z3D7Sw9BNAdTlrvxVWHLdl9V vsEzK1fd8p/g9oqN5Z2OQl+ysvo9V3/Q8T1BT9ngYXK1F0m2dNpYrZHyJaRZZ2z3ZSQ9OnR/ 30qREzFFV0p3mkRUeKyyhWtw4YJduGCxuvmxwzYCx/ksgWO2jsnr4ae01Slqr038DChfN2ze M9cuckRg/RnYXG3sLuvKbm6c5otSVztjP64LmAj/SL/q1UQ5tK9mAnUQXTO3YJozzbh6pH+k HwGiyCwcTAMXx5GfLyYCT5bIhjIa2fWNHLoq0FVNOcn0dMrGNnnHxI+c6c3YGnXbOtBbrup5 Nw0a8h3MOqD9RXKTwkFztzaPLx20Uzgewkk/lFjrjnz1zbnwdC7ky4hN3uiRbZ3ezQIek7+N 75D6TRiPcxjNMlvoWeO7iRqjamJePqPIaECzCGWF6oJ9x6cQ50Meve7QUxkPHdmhAwE40Q7I 6FgjT6BT2I/zSb5nA6lBFwjrDerNsSj5PfRG4dh+ez00oF4EUHXZtWfBCIndHRBy7Hp5DEk5 m/DGwJcB8xSpE/raZahefYGlwZDTlZUiFg7dP2sdLbCdWjOGZdUc2mF3dasMe5NMcqwuWrf3 QJ1e7+c2trEku5TUex+A3CA3cGHdhXWpLjdlqhfMIDRn7cKmpmnRW3sfB2tULBrzALR3W0JM C8Z6rswSMWkYRerWUcGL8M09NaVcpqEVdYp2j21B98Vja4u1gDrNkIOzQZvpqDfyddEtxkbV /fLPtFJfj9qJzzZmaWG7NGMDzNJ2uI0nhgustpNZmpRajQQas9Q/PTJLw9PZLDWGJ83Se8Nz efr+hicsmWvDE/FYJso4r7MxwkEszbNbmQiv3MohSOAbb4JkSA7jVs5PP5hbOUM0dj/SuJXG caRbee845rM4p+NorGtNg3rlOBbtPrMMnR3HSYlVXXflOF57ip/2f8jjRsfMwH+62BYwmwZm SyGhXZlmkUyH9qjR49YuBz540kq/X8gwWt9CMYd6cHhKt1+4OdO3bjwhTtjabR/ZFLrYMpIA bbOR+Sj5ENOiFrQNDJuwcT//NWkHNeQMJ2ALV/OQWqYRKId1W5Qp6KDo9694CLyH2MdEYwC+ MNLfg/c0LwWaSD9hMy/tLsGAPKneBJjEL9wTtiN45n/ijYAJ3d/2PXiOUk7gMtbXxLmc3zT7 LVmH7LRXU3S4t53LcXyVZkSHY4/oYgdJdp+mJ+xNcefK04zopxawoaSaMDN4a/bTPFWuiRLD MrD7eBMW+3Y5CEPGzxmqGGlmAr1nhZRXLQyOz2vf7moeBko+3Kl+1BvnWfUw99U254BR23Xa 5izocT/qvZAtTy7H3JkQr7O7nlAk264n7zANQ9HT9OmT5XYT1GEq2U1Q/3TaBL3f5mzwbpuz Q+7j26WDDuqR62YoZCVHLP9+ijopsaddT6+DEnnSJnKT5Os2QUWAFUo7nlduJtdwTrto1CuF gFdbpNy4o6Hw7i3SGefCt4PRmoTndPRZdkyL8ny9Y4qLKZqNaYIxFzH6245pIKRCvt9A5Q5C P/9xe+BjPmt+axfw5g3y9GlMoJ//MDdveNVGzn8UXd3bIWPQzkSEeqq4HyPGgJ6OgxjrbNjf V8dBEA7TQ8aLwC0l5B6IeyU8shBE+aChwC9HcQZNLIwsfAvbkwOhGw2RZ7+eX5UZ5bLQsbCB nn3yFw25a7XpooUFj+rQXbL1aY8NHF3sjqQkPp712VvhW7jomzfoWHi6hJ/3fzgyCSgcD5tu YJPU41Udmobctnp+CDMfldmnK7bYxZHQYBODccx7vWL4+fgHx9/HHImQXhYGFsZ13K3wLUwQ k3jv5312Srv8xZtv25UuIIOJw5Hp0DTkcSfSXY/9BdQP16RDJr8ekNsb9zCoPN9gYGEDx4RK /DXJoz4fDxvrMZwaohmr0gmaON8JmjfHu2aGC8hLYcMT6NDwMV3CT7thMVJfC9w+WJgPjf+6 u5WJXqbkDo8XkGEjC2cWLnwydgFOUOKT8uzXA5qGRD473nUiX0CeoEo0xO5hYKuVgE+791T2 pA0Kv+x+yNiw71DTBZ0houonSDfNwoUvMuFbA0faHX3V6wFNu+hbWZj4bAPZrhEMn8IZSmF/ AQf1Wzh0XIhC3HWDw6RaHsG2wSZHahkOlRed4JZva9/wOPYBbUMYe5ELzdNDyPv4HZpmmk6Y bfDEZqQ7emY8WXq0ZY+fjgDDfsBJP+5XLiAd/YJWn+AkbC6HDf66/y7xpgmvajEFhq7eelVk uyJbHe86MV9A94gACcYtAnehMUSdwm09mt8hhDeI5XmC3JuzkPE5gfEhTCrtL1rt2Wr/djMj XxXvupguoGnmwicv7PFyycenTRtsAut1E/8a+4cA32L/M2FhYQOhdk7Q7JEbyOi9hZLxT1o9 OhFZ/BYyft/hw1aP7fg5EvJyxRwuuBybH91kisM2U9P28/EPtCnl038wjE8wsHBQS3grHO9g YmFjv+uzD5vyviGJMF9A86p4B2Ghb++Nd9DzyQ36S3o+7db/YSd361/OXcJe3QrTc5joZlhI t0uerPBwjh42RLf1ImFiYQMzG5LV6L5udbzrcXgIPR+lp5l4XrDFJQ7D4TIwcxensYVN6OUq ThPuCo9mbAtz0XZdRx5uAxGmsAliXEU8wl3hhe1SX/iV8Bgy8YWNF37l7RrX2N89Kl5ADfqk YyoN55eCaqJAsPDWvTXO75W3KwSJH3Tl6uULeOuuPXbmHnuN6R5+onvyekCc21cXIl5AXIZU h8t4OsYPMg7GY6dJ4fA3jr36S5+BGwdiuU8XMLCwcU7CePMyLukeJjG3b9Ukni7gnTF+aZv7 S7gP3MkwvTXx4gXkLVYLuaPzdXbqA5vOWE/5AvIakIWIDjyAV3UzCyf+ejKH9vl1be7cWj+m sLFgrsydcFn4yhYwGtvoc6M34wX8fSyFa8PhHd9chA673Guw0CjTx7r1TtUm6DBtxjbK8xN0 60WM20KjTB/r1ltVO/PX+cno1qtgORLqPFCmgb+a2PlVoN2oaY0kD1tzRGxvlemVbuUyuI8k h3s4lKmJm97qRwNNZNTETeMFfKw9NeRoonUmbHilPU0E8rFCxD76CYqYFZV3oRChxc46rlzA d0XcTqoW8NM3ezRmxONMcGZ5BI1uNQrRas9yAT1HakTmT7GYcAEfa89bhahhnaEBMXcfRCZM 3CJcQG5kv6HUruMWx+KOQ/oZL/3KpTdK7bGOu1V5xv8fzRDpdwidt7SY8YaNi3rl4Bp1ea09 35GYvEUScXE88OK4flqKN5jt/WbefjZ3o+3NaXOv2mR5awcwcORXb2zTz27HJ+W2dzvDzYvj gYUDTwDLHXRzQ71duKKDnDhocvc9Q6SYe/PmVr29c99O40xKu9wktrf5F0Bzz5i3kLd8DdgQ 0RvM5n4zT0T2u9FcS3LPwtyrBlf9+oMk1jQ3ts197qhjdLoLXqFjYXNkX05EcuPTO5059v66 vd0e4fmZm/Hm3ry9VW/u3ONGvrmvb2/z467/2LA4LKde3PFhnq8KbAgPKsq5Nt04OHXRQdZ2 euQ2MK62WWr7OHiM0mTGcPyaOaT5POCBj5LJopL2NNHeuPzPOL+Z4JO5qsnjwhOuTmwLi4f+ 7KKkqcJcDwod6nZhMA79JX1vv+Uq579p9VghxL1mm56jQLxZ4Ud73QpOI1ZxF6pDdyuSjcDW mNNZ2BeddV1RyI18mKonJcNds3ZVU05EJl0pm3LDoOgaTViDskIvrzUOhbpcPIbn8EShFrbo Sr+Ori+wKzPPHWbIsk2/4pCZ6tdyoV8Dx+c210o4D7VnYXMdx1zWEe2LQ/XbvR8e10u0oKz2 5T0Iq33pAMlJSubD6dp30iGLHPlTlg8jBnC/TmVGoETBLfNr7UvTVbRvVja2e4y89CZnrK+0 79DNRvvGszD2/g7Gr9bNuBKpurlQN2edsde6OSp1muQCqTeMbt4uJppsGrxiQMn9SDdDEHyv PD1GVb83T8+Fqr7P02NUtbGRjKo2Y2isL2ObXcyd+zw9X6+qTZ6ex6r6YZ4eWZTvz9Nztr0v MmlJwj5j1V9l0nqsqn+YTFqPVfVjZWx8q6/PlXWrjOkPXubKMsqY9xTfyJUlW88tfhNx4EcU STvzNNKVWDhBgbXpILAQzqhrYeF7tRmfjzePaBcPoJsUDa0hApnP4Y3kD5pM7gwRx90g42gj j2rnI5GtRC4j4RCeWyaJEb7C7OoCcJmv4ZajotxBDz4I+aLjIPe44NAZiSRowESCGnQszM0M C+UIeRkXnMabx5qJ4LNBM8qjzxYWWGJ9wjBdyh3cuE53cIEUaOTKRDUwYHZ1GFg4EnL+7HeH fmTra9h6R6hv3JS4mPOYqOdpnC/gWBEK3/HRwWFDvhKeHnZ6lWlIeQzNStUX8SuSQ9S8Xggi I6bm8/jeSZ7HUosvescIDoXySvhOZWQU2biWt0wXkMpmh+8Y3/GqI3eh51ryFOuPtXEsN61G n97xycnMeXelBm9VqNG31MZX6ZRkjRutSJ1pNKrVt0YbG12tXahhiF9+85+/KS+h/qeFJPTv 716f/s233/zxT8vT2tD89G0t754+rv83PYV1TuannPKLS+7p29dv/vrDnzw7t6L44a+eP84v ZV15/sO3z7leqVyW/+vbP//mz7795i/bI1rkw8cSntJmwa7PcKvN9ttffPPpj9YW+TgvT6kZ mZX6BnPajc7VvD7BvfD41OUeYenP2lzf7Vkp7xsxPoVygoef/Ln+Q1z/YT/j75NfjkZ/2WDe b+73wnlPddZ7qHDWwg2OR3U68iGd//LgYZ5maXsO/mhsnizcCzceGg3fe4Sn+FKecvWZ9xH+ 188f/YvPcfEfnp6Xlylklz789vljfAlxjvOHXzx/dC9zWVn58N34U/71b5+nl7KsM91/+Kfn /DL56PTffr3/2y/3P56eP658uZTzh79//rj9488uX/OrvY6873fPfvUYpikc0+8vfx9Ggnvx 68RbJ3fYGPmL9V3TSkmab2e9n59ceInx6dufX1Po1vIfXXpZp3D48A/Pa9m0rLwey+lPn3d+ /8Pzx4Mred3PLgn+3fhTni8FXp+rXsk5rYytQrK2dRXLee2sr//zlc0VJr5mfP6w/anjuIrV KdaB/JhXg2z986Nz+WUbjm+fV69wmufy4V+eV6m4xMnVibb/+bfrP6bkprR2ZH1Pyb4sa/OO P78cvz89r71fl+eHT7V28MvKw2/Hn71OWnyszXQvaZ1LazOPf/yJPCiuKtyt/cm9HcGXD9No 0vj9N+MfvxtP+t3xpF9c/eM/1Cnk1/84/+Gl8hyXuT11a/6fPtcmlxL18VppPOonpvNl/cuP Sv9qPN2Nf5UC03Oapj5KLo5hWvmqq2WqA7SS9e3fcRRX8rYf/xrtWtuwjmqe3Tpn13WzCsNS pcfeBLz3rSakpf7xPVrQOfybD33gK4tjhvzt5RhcDtevRwv/5rk9K0xhff6quONa+MP/fNVD d0n98jXUu1VV5d+D+a3jtbH5zZetcj3sL/t/rl42HW8L2onrSTO9uK9vOcktLzU7xJvTR3h+ uSywPipdNHFOL/49k+rDn9cfP+bFr9Ph6aPfJFVfmAuW/SZK/Cx//eP4+df3gqxNs59dCYhR 8jenJ1VRdMxyedBZVLhYnDz0qKTsy+v/6aql0vxfXssilUD72ii9qE/phxSV41E6PfZ/k8FP 4898M+/T7yFahji5HLxrGSJdHlpu9MNfTui3O1LV6DpD39OXP39LXAyJJssrjj//h7ULOYcZ 9a97K//62+fVTMghFJ1Ag4LLJ3066nw6WtfmZFwSJv34x69gfZU4q6VZufwYl/CS373AxSiR Ff67x9Ph0Vquf0qlL6elVL5yhe+LYdd+1ew5Lea0WrHHZP539d/6z6v1t9rpS7UuN6HctKcu 8DlXKzisdvHHnfg/ez5m1f/RTOMyz+vAfRwPuLY8ypvCOqwzI+9z+/89z+1UnYNtck+X6+dO Ua1a4KuXzP9yFqT/Zpstd70V/Ru0txdy+FojfDmm9890QQ19uT1pm6Iu67wclX93/DXWy99f FdRleTkkbpmHjn9jSN5hZb7bYNCB+Hj0/1rk37wsxpf5618mPKSkbsy8/rkKjji9pLy7MSms bu5K429ldf5sNOznVj5mt7ov29RpMmf/+dMx18ZfP1m9vJxKVD0rrZO+LOuzj8789HmXAyIh f34pyGQOXpcdsvpaKg2vavz1hzSF6Io9lJTGzr+Z3qtnfEiG//s0R3p8b+P1348Vf61vfjsK /OKyj9qyO773gX7It8uPNJMVH1fC4H2aqRV9q00nvrdaRjPV5fs/1qL1dPb6BBpX923+Xmp+ Czr9/x+IqBVlbmRzdHJlYW0KZW5kb2JqCjU0IDAgb2JqCjUwNzI2CmVuZG9iago1OCAwIG9i ago8PC9MZW5ndGggNTkgMCBSL0ZpbHRlciAvRmxhdGVEZWNvZGU+PgpzdHJlYW0KeJzVWltz HbcNnr6eX7Fv3fVktwR4f+oknqTTTi+xe2baTtIHRbIsN+cc2Yo1bvKP8y8KkMsl9milo3sa K1aIJQgQAAl+JPyhUQNgo/inNI63qw8rxNhY5YeI2GwT5TLZbFZo/BWy8G5WZ6t/vGh2K2j4 5+LtTJKxSjVO0a+LN6vTF6tXK9W8JW1h0PwnqZft423zxXr1u9e+ATMo06xPaQA0Pf2nGo8D msZGGIyHZr1dfdP+sevNAE4FbL/sFAsKLrTr2vyqy/1t3/XTx8Cj0Gvb6qn1WYcDaOdt23To B+99kNJfdzqQdmUOCn9JH5VFjVM3jy7f/tCR4H+v/7T6cp2cwT/kM4e2iTb7jLwHo8Me5C3g T0A90Y7e+kunh4CRjDia7L7owA3ORNcesxGG/jhoz7qp2XSgBhd0EM5Si24rfLjAB1MLO1oT 7AGeN6ZJg4UBm17z7/UJTfRlh+35tuuxTb8uO2h39PcdEzRNaI8+cjPR59zDysnf0G7Sp0+d b39gvqbrLZk9jUi/3jB90ZF5eRqhQTW6r4cYaCJkk8sz+ZwGDJYCwp6ipsbIAtQQgsMQs9W0 H9pPlTF324iGus1gIii2gfpjNAp4ZmpABBPYpDJqVxne1mbD4THOA029cJ7lbo1hWVWZqPVC vJB5VptJqIk2CkXHVeZ55dx2AIPVWraETePs0VqhU0g6qs1qSOU8vyJpND479zRbFIKhAC+M Ec4fnUvuxfb3JcZpswFlPG8hWp33HGhKY3FMVEg7zuiSpqZ9STyOeMyYFhMJ2kBOhGCD3icL M+dFsKwBoIy2SVjJm4kErX0ZTcxEmpHUe2RSNTHrpGoSpYWiza3zhrUNHQGzrAGBnIT0OQ4e UtqgLbD+T/bgI5wS1bPJXIDI3MAnhM8pL2VFSiTRcKCGaMAoN8ULHSb5N8WLeJLXxnhp5WSA 9sjCPMULnYZxtM3CaoBYmJXxIlLGS5JJlZXxEqK0UPQY8dLaDTDG64unixcGvRyvkcfzigbE 0X9MYlDF3Z59MCcLc/K+t6ZBH+toVmjGfjK09rLLaAXA1L/NJIAr/o/R7pNV2BmxI2v3RVmk vF8nA9HX3qQMAYRliaymEOn3SWkZQojCMk79YjKIOs4su91iCFfWAlLwyP9enPivu15T7jXt 7iSfpwRurJL4YzC0FkNIuVHHvNPutRKzdjJ1oHWdFuI/p4X4MIsQbbGI8AbJFPodjR8hA1n6 hiy94NO9woPTqXVMnUcjADBP74jg+ERKk36VJx1IQoYZ5CPT0JFF6mjyIsPe21F0TnDa9pbM +AVin9UjZfOShf5VbB7jNASTQ5VDeAdrb9BHCXQ8pf6vFsA4O1oBGm63Ap4mZ6NBToK0KHLe YRKD1WWwxn2yMKesxQcwQNDTaE6RemJXtXeTzoF7LVw6jHmHE6KE6ZZC8fucbgAvO+d8gejF cXSEarfvuSq5p35DEJ4Odb5bnNxZXt2Li3hRe3UQfxCPxB8EYCTg2CML84Q/tAeJP4rCEX8Y mOFFIiX+kGRSNcOLQpQWih4DfxhnnwMv6nhXvGjNYbxIPDJeNswA4j5p9vCiNTO8WBSO8bJh hheJlPGSZFI1w4tClBaKHiNejqDNM+BF6w7jRR1neNG6GUDcIwvzhBetneFF62Z4sfRmvIgw 9W8zqWMBiKjA7pNVGONFw9r9NBqCmAzBx9r7cAhHF9kZhONrbqC7rTjMB4K70T45irG0Ph8b zlneT7eAc8Xq2Zk+2v2uNk8Xv05n/Ug/B+RziM8K+YiPMm809ej8pdZKnoql/0F8FviX9Vma eazw79e0YLIFTtlBx7tCxAeuGEdn6HRJ+OyRbLxeG4orSYFio48TIKM23hXkRZJJ3TTXOcS7 q1y5CwtmRlSc2QtmZpIOoXIuIPp9sjDnm36MfOq4abThY8QVdlN7+Zj4MD9Ft/tnrPF4hbxv 4cUYP68x2DvVGK4G2LIx2tYt+Hq+BXc/8xb6e9cbuREvusJzKXbf98237dRx2yGJjzXx3r2s XIKJpAC3sf2x04rLAUbJVHG+S2WCy81sSGmmHMrC0+Bvu07rNJCXVQ/eDX46r9JcNtNV8ySn D1Ct6/IipCRQqwwY+TW8oRAMY53h624qCVx07FTlvHzh/rj07H1c6xDia30hp72Ng6E25bzy 7Zr381IwqFWE81pleL80j/p4v62v7/XjT6LIcZTHW+MPP/7Xt/8yd9F9w0RwzimqCD90OsQc BKdqEPh6+OdV+5vut/MSkJ5i+rdq10EPlJKIdMBU8RBVmpPrqxvsfmGBqOLs12acs0u1GXBy npdLU75XGUYMkmvr+noRV4FkHeajXJH5tFm/+CZVUscVIkpSdTayTlbVLc7mllWhUdTeEt8z d5Tlw3JxblZyK5P6frH/R7Gai85D1bWbIshr/L6FtCtVxHPZXWb33TV2ln7x8b+LrMK8/emn MuO1W2Gc37uULg2RDEHyPtwtzfT94vrMm0YrfWWZJO2bpXnQR0+nYlzIEb2xCSv0+S2JksWI Q34d2WJXU/jllbVG2WI52he12DopFZpOF7qrRUKOzACynSPjdZgVpWfLrQeKsp8rO7zFxzRf njIejqwOFytvqIrdB1Jpg+kZnwAjlPs/AaP8jM/4o22+ZqBxlG44+XMCHZvyql0hCB3ALn06 IX9qld/HcyHg/WV6BefR8t9R9CTxq84lye+KwN3JhjEU5bLxn208lXuX3vZueER6gHv5eQV1 da+8MpOTC9mwLwQwPP/U1at0T9DurxN9Ka7Z3+XrJyYxbT+Jy55dwKjCyyNSlZ5+tfofk+Ox QGVuZHN0cmVhbQplbmRvYmoKNTkgMCBvYmoKMjExMwplbmRvYmoKNjQgMCBvYmoKPDwvTGVu Z3RoIDY1IDAgUi9GaWx0ZXIgL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCnic7VbNbhMxEL77KXzD rlhjj/+voIKKQIKyEgfKoUrSNpCkaUqQyhvzFow3WdvbLqKUHtlNotnx/HzzecbZKyqFAirT 3QuTJbkiAJFa6UUEoMvuye0e6YKA8Xcee9sFuSAfD+iKKJruzfkgkrFSUifxZzMjZwfkPZH0 HLMFodPVpa/lyZI+b8mzY0+VEdLQ9gwdFG3wI6kHAYbaqITxirZL8okd8cYI5WQAdshlChRc YG0RX/LdOmt4k5UheYHXluksPeUglHbeMsrBC+99qKMfcx0wuzR/DP4CldKChrycvHvdK46B P7evyWHbkZFu5MyBpdHuOEP21J6wf2JLJZXClWj3bL3lWgSIWMRprnvDlRPORMcmqQiDl1Ps gmeRciWFCzpUZMlR2no7GLFTWQKOPZEZuBp20/J2rxkPdx4f3np7to3xQ7rtX9EdKA7OgGtr MIq2wsc908e8ARFjkJbNuGGrn/hDPyAH7FtakVLFRH1vs50X7Vd6wvLCfV06u5Rpgt9tsaqM MIpKMrAbriVuV2MkNmvGebm6Rgu2XQxcevE0VZGCd84nnGvdOaaNbJR3wjtkqJ1i7R2WFKXL zqYJVmoO5nmyTvyB3Lert+kQUi4It3NOUwx4KcAQICyOgq2keZbWO+RGKoR5d3mCcUKwEbrc ThjnFVYLuJ1Ss21x3iSxU34vylnxvsbBjzvcyhTgeBC1bwgO/pNhQbqmIQcpCE9L5FXJNy1i ZVCgVetzHoTVHgfzR7Gs8FameJAFnGL9qIU3WGGTqp+m6tsvvyu/Swkh9GV04g3vE93ePhNt ZJdFeT4GtOJmnSNdjHEz2H4AYZD9wY5UhVa2o/TMM76C9KY/xB5GzlGhZMmVQtDK1ZQscqIK Z7GcjTZRQVfxVJTzMZpXdbf0Y/Kfp/vxlKeqMrxO3O0PMIzp8T8mPsoU3W9ynQoxvY3s1+ud XNe2TgSv4+CYLHWf4WuCs95DpRsdqHdV+AKqYmM9erIU0zHWx46g7lXhPfkFTzI672VuZHN0 cmVhbQplbmRvYmoKNjUgMCBvYmoKNzY1CmVuZG9iago2OCAwIG9iago8PC9MZW5ndGggNjkg MCBSL0ZpbHRlciAvRmxhdGVEZWNvZGU+PgpzdHJlYW0KeJzlWNtuGzcQRV/3K/jWpZFleSe3 LwXSukVvQeIKyIPTh9SyYzeSnMhWgOaP+xed2RtnJcq6OO1DaiULcpc8nDk8HHL4nkmhNJP4 6wsX8+J9oXXNnAyi1prNm5pvq2xWaBs2qn3bWXFdvDxhi0Ix/C3fjJCsk5J5CY/lZXF1Urwo JHsDo0Vh8K8ZnpYv5uzppPjqLDBlhbRscgUdFKvgn2RBC22Zq5WwQbHJvDgvf+SVFcrLqMtT LhEo+lhOUvF73n4vK14NLyP20sG40gylJ1wLZXxwJeM6iBBCpOhn3EQYXdqd4N/CS+m00cNn 7N2/+4ED8O+Tn4rTSUMG/oAzrx2rXcsZsKc6wh7FlsJXCr7UrmPrV25E1DU48Xrwe8mVF97W vrxAJyz8eVVe86HIuJLCRxMJWTJLW99OZ9qpoaQ5aAIZQLt1YzQoRsjIKqOEZpMpWHrKdTnj Vfe4wcc7rsr7oQbGomlaAt+6XMG3Jb75cInPO5isehhCdtRUOjgRcRgw2bfj/IY+x+h1rBtw YXStkR0t6tpKVS5IgykpkyZLjm9drW3foinf8CicqWUoP3IvYjC1Ky/zTRnOgfVBgTMA65w0 6FNqQIb4kAYmaMTjmDxGdn8pJifn5bMWV0mHou7cpM5PuI0QD1wovwb5xxbKy4RVfsG/HKMb DxJsWHxOgJYD/A3vh5xzpYALMzKZwZqwtZI4l8PLFaW1BQKTtvkMo2qtbFRodDcWaEILC+Vk VfC4QHswlcDqVNSp+AQkBJYFqcjEZMBitLQbKdotYA9YtgbmUtEfB2ZSt/hoy1zWTZVWMlVK BcKoUHpTFM3kz22qOePDchvmdJHQp6l4m4pJSk28gZ2o/CN9TZIjQASeaOov3nwPNgFt6tDZ 0PdBGh7UIShRj3TYS+dp52ekjKrsBJsdKsxC6Wz/x0LF46GMNFRoMrvgtiChnGDfEYNKEiQR YdgtQhthN9pLh735R6hHEhn+nEIs0SsR52yATwPdD6WPfGM7iP+WIjtTZe0fL8k81mGa7KPP Tqw9RLkV63BVNlrEM0nspdKCwmFJ76/LCmhCiE6KRG9pq2xF1uyfWRG+y8bC25y2gIEIRzej Pp+NvCEMme7MCxIOVTuFK3cIt50G7L9l0zvuoLAT9rAjwzGwBxwe1qklqPjWUFub5eCkqAe5 7EXxXuh7HFH2BCXOK2p9txqbtAuyXQMZpPNDuotVb02X0bb57rjaN27yXUh3d2dldNGltMxI oJ55OGw76TEta/emxq7OMoCjlkHfGA1Jvdeq8WDL4nbDlISctc8XP9HO+KnDgkszOTDWc9Ix pr2pCUVr1UTgvow5t50yrb2Q/YUE4YeE53u6CbekTLM+X2XOCItsy+lI0Q0P9Fpmvn5pY4Pe qB5/h9NdW1gbxvcW7qB7i8iUHjMKeytzxolQd3yetc5Hickz5Ad/w4NB4mrbdF1KVeMdRt9m dZPevmWvyuHDvl2adjjSBfxfpVakEaAoLGvQupEwo5WVbeLeNr1d3OElxGo26tIXX6MXCN50 fsW5MU3H5qigghdhCK+NLekCZIpmoX4gWtJQRqPTfCN2OZDuWvU/C2U0Os03Ypdzcb36vw9l lKL5RuxCitaqn2coO9IHOJyM9HhevkhJ2Wp97OaUS2fmPmMx8ZwYP55PsG7zmN3evT102H7J qyggP1F43Zq5wiBaI9/T+T5v2hbVDZN1n3MtHeG7TAPOlHlL3qZO33BI1I+//vkumy9n7Lze 6dwoGen6X6U1mUu3k8dk7acsapZpOE3UkAFJajbLUZuCSDZ5Wjy4svINuxgD65+4Ri4F8sLY f/g7Dhuwd5FMcbcy/wH5/UxJZW5kc3RyZWFtCmVuZG9iago2OSAwIG9iagoxMzg5CmVuZG9i ago3MiAwIG9iago8PC9MZW5ndGggNzMgMCBSL0ZpbHRlciAvRmxhdGVEZWNvZGU+PgpzdHJl YW0KeJzNWUty3DYQrWznFNyFcIUwAAIkuI2j/MpJ2fJUZSF7Ic9YlmKNNJYtOXIql8gdss0m d8kdcot0kyDQJJsaSc4iGnsKAwKNRn9ef/g2U1KbTOGnH6w2i7cLY5rMqVo2xmSb9lfV/cxO F8bWk5/92tPF8eKnB9nZQmf4uXg9oGSdUlml4Ovi1eLoweLpQmWv4TQvS/xrj6fj1Sb7crl4 uF9n2kpls+URbNBZAf9UVhtpbOYaLW2ts+VmcZB/JwordaW8yfeEQkK+8vkyDb8W3fO8EEWc 9LjL1KXLyzj6Qhipy6p2eSZMLeu69pT6vig9nK7sTuKPYFI5U5r4GHf3c98IIPxi+f1ib9kK Az8gs8q4rHGdzEB6Ogjsk6SlcUrDk8YFaf0gSulNA5c4jPe+ELqSlW2qfIWXsPBX6fxYxGEm tJKVLz0RlmLF1q8zzDodR0aATaAEkG/TMg0WI5XPilJLky3XwOmeMPmpKMLXCX5thc7fx1/A LLJmFMjb5Jfw7AJnrl7h9ztQVhOPUEE0hamd9HgMsFx15zwCWtKBvFEQCp5Wxjf5Nc42jVUa Ti3iNJ4uS9OY/DwteJ2GHQXXGJTviEA7eyyc1MpouEJ/6qo7tXIWb2Okhen8GdnzKhFdpeEl WUGOTXQDr95buE0UuE/SQMk/XiwfHLQGbYy2HtUeL5NIvcOzwoIMrcVWdSvuIAzC4WncdJgm 38dJsnJEFKytbshKIuAMfMc2ILZ83U3CrQh3R0I7WZUWRx1Hrp7It5dZT/OUyAlGtnGo9HRi f0nCxlESaOQ3XAKuMTCJRP2qmzTOEZbOWONJ2v8q2eRjEek/EaUD1RlDBLKlthfZI5y85Jgi WtgIraUrS6KD57lAW7EKyFWAMa2bEG0S7oM+qsYCDBSAyk09kN6MeMKhuqKcJD10gjJuZiEl Ojg1Djv5tbS+TcNbya9U5U3iawlNxQcMPhdxvxTGte5WBBkW1ndS/DEpdmDfQfJTbYJzHbLu nxyFtfRDziOTXtaclwc/cob6EbnrBTtLrIGcP6OuZOIfkiROhq7Yjo4Z6UwdGb2KmP1V2kTO 5/YT8uecKAY3gSDYYWelKHhi7gT4mX8mPh/ianKaZyR0bFnmyDDqpMJkopc0gaytmCLFFJ5w U7zyExIkWHhi4ZqIlBjK78KBqQPOzmiU7OLFm8wvgc7Y/8fKJ9vXlFLvv8Q/KXr3j4NMakhJ drnR+cT3AtAHngeKYDiZUEJQzHokeLivLbGQporQmv8tlj8PDUi3eVuwIUDjHldI3uQcWV5J H2htprSsdCbSShjFwvWHBJbHrLkmjBw4WLwkZauGfNjM89VAdtnzdRKhdWhajJbT0hQvisgV 3Z5WfmT9LbJdOOMlIHRhSkwOqdQRf4/iaGoinbP1HjBmcxzrpy6G+7msg89ZyKarlAjNQC3o GoqEKXAVGI8w9VsjdI3VkrDrCcEunnE2xrBJxikTrD6ywYoLa0TsZ/MQiKKYQqAv+4sABrj/ DQYCK/8dBt4jlHIKOWM9fiCSLi1UWKkFK2ET4buHOvTdOYDtZUuA8IhL1RI2JT8am2gLB2mU ZHiTwyFJPrXg/a2t698OeySbcQfF1mby8/4NldBDsLYeNhHcnZoIPsOUhnYQQEyZg6y5bkL/ YL+Tg2/9G5K/f+ArgzTHduWmUrrBlKxfc3mSZt9koMH+wW23tOvwpBX8v0yryCKgonFsAElL hWWAVV1V3y09P3uHHYHL08GWfniIt0Di7eZWie3GNjDoupI1zeYs6UaskS20/7wRk9q6MA1a SQa2IUOjYV8MquUWWFdpSGaJJyY3jp5G3J0PSG8Yhx9gaMTL+JhFgTVr879MwMxVOyuPXTU4 mQw+pWpyZTZAvOdgmxzEieEle6Ud8WeuWv/EHLsFU6i4XDQwUk2HQKMRWMH9Kuf1JMwgLs1G mY63cf0MgakmidNckAlpZhHYC+nCAWNFw5veroHShedp3synnLyNszEzqKz2t6iEe1Gyamb7 VSS2z4QA2NZ1du9RKt7Fq4eds/tU1GzC3lgZK4VNIjZTw0ACnyz3T1huK0xn8j+mYFg2/bpB 1cEzIZtIdcuyPGDCUQ4csGx4BroXHffggRfEXCGzYu02pXpb1uEmVctIdcTchmVb5+SsLxBO ZOJ7UAgY375NuU0xcCPfrR12Jytf0+bFXuorD7KqUgKgWbR0pnWUHic42VLfLAx4FPzAtwz9 rEpDnYaGGtCobX2DH8+3iWk3PKT+Pdm+YhzRlUlhJHiQWbYQP0i06rTrRSuZBoJCKORHLQoC dURgW+42FKlZHygdEO3VzyPzMFFm6u4RNtLubjsaoPSQyVGifs12G6gXKiuryO/O+oC9svFj /AtFwi78y/+atjccwRDeTvkhGzjHwXbytiJ1MiwmrLST8SuIDnyxMWWwj3GKub7j4RP7YWoo fjvFixSr+TSTeClfanOZGltTk/cCt4RnbCuzfQyS+3I4fS0qL0G+5S1iDNghiUlESIQxkk9Q VFbYrAobZ8puPiPe0RRnX9CM0WP8AmQsklFrLtnJb8J6Fcvjp4t/AYpfwmBlbmRzdHJlYW0K ZW5kb2JqCjczIDAgb2JqCjE5MzEKZW5kb2JqCjc2IDAgb2JqCjw8L0xlbmd0aCA3NyAwIFIv RmlsdGVyIC9GbGF0ZURlY29kZT4+CnN0cmVhbQp4nO1bS3IcxxENb+cUvexmcNr172oupaBk 2pYskYjwQvYCBEGAJmYAgYAo6Rg+iLc+gQ7jWziruz5ZVTkfgEPQtizaiK6e+rzMym911vcN 67lomPsXHk5Wi+8XQoyNZkM/CtGsppaZm83FQqihaoa+F4vzxZ8fNesFb9y/67NsJqUZawyD P9eni9ePFt8uWHMGq9leuv+m5fHzyar57Gjx2+dDw1XPVHP0GgbwZgn/Y80geqEaPfJeDbw5 Wi2+a591S9Vzw6xon3bMTWSNbY/S4xfd/Hu77JbxpXWjxCB1K+PT4070XJpBt00nhn4YBotn f95JC6sztXPyz+El00KK+LMbHd592cHEfz36/eLp0cQM9w94ZoRuRj3zDLjHPcM+iFvcveLw y6g9t77qZG/FCEQcR7qvO256o0bTnjgiFPxneHvexcem46w3VlrELEayLfQTRD8en0QHMuE4 4HCLCTRITM9ss5S8F83RK0D6tBPtRbf0f964P1cdb29iC8A6aIIBv0V7C79duzc/nLq/72Cz xrgE86xZikH31i0DkM28zjNHsxBcWd6ugGZjgGgJa8Fra42wIyAQvYYd0e1pF1+ivvNbPQrV rudh07OD2ksBmwrMFv04Ksbxyzed7bUc2dBeupfjKIWFCXTPmZgoE72CZdsXaE601El6vJ17 DNK63Yyv30TcflVrVftTYr5NnHG78MfF0aPvJuH27DifYTnYaap3iF+Nkxxlhon1E1kCI0x8 O+4QV3JmTi+LSUHyhhH1vExAGtAjNQKHwpKOpg0z0aBvKFTreQWtBsxXNG8iFY06S7iOKbav 0+8eARs0AhBJ9b8CQoGGv0rDZyRqEIOzNIFuBPWchIIArMvJ/BYFGUzyRo8/7pzQyNH0g/MZ k+6kDf6pKwhNpKhR5wRGqumFXuHN9j1fTzRLJvGY29TxIi50E5+oZW6IfsekSr2ttm7C3ndC T9qz9JxYKjvz4ms3oBLXUton0/EE3AvhATjob6PN7AJsI8HDzS5zPxeAtDm5AMFAasEFGMDj XcDdFDxo267faQ1Loy6IpzT6B1I4r5OtTPIVt3XVcQ6yKzkWBFojGnAJsNKQK0dafk0qD953 2ij4cUKTSn1cUVLYKtThcUIYx79PEoUteXg6p4wireXo0WuXGRXWrlm1NYiK12wkwtdR95IN 9Lznhu6Y2c1IGObnJaW7M5VClzbAL5qMABpd6lqaaHpC/DhLjk9rFBOAC3dBZVTkF5RSVKZ4 UuSEDUKQ2f1ldpgyvpvsMBIfP+fzLrLr3g6uXLZycED9lmDgK5hqGITOWI54UZrg0q0iDU7+ hfSPZFhwRvIKKRPpldGiO/QmifFp4SMKrTvBAu21powKS5V+m4xD7v2Crr5OdNCmgjB1lbqV NiVNT1JMu9y40EtK9qsgQHHR22ApEIzZSHM2Uo476WQp9tNLyutXXInzTEYi6fteW1pYBrSl zh+D1x3H6JMhGZbg3IMzXs1No6RPeOd0OG+GzlM6DNnwbo9tGOWyJQOIsJjtuWbG+ez2N93R 32ZgHhpvLIYGafdgOErNi6a9MzQymPDIOIOkNiSU36A8KSUBSXiS6JJC+prSVdIuIgHBxu4J Mpw+NMsZxQdtHCsCo+xgMKOKpu+8P6OwK6k4JYB2JT2nfsT011C1jGBWc1MwhTexaCbk+0Ll ahtUoXsxQ23/UYubYFYiLgpuRwytaPrOh+Kihp/Ccc91ZkpJNgY0gY3C4C0umxH6YdhowGHO kXb7T4KNYMEwG5WQGEvR9J0PxUawcZGNO4QRYQtQLc/YVjQj8kMYGDECuID0L21yMKQfzDwH TYoHG0gZGcPYi2ak7CBcl9L2zOvVmhAIv7iHJpXFJ6xFMyE9BJdh8p7zwOUucXlHLnK+Kyg7 3Slbga5AtR6x3JfNyISDbIji1hGynzVB4DxWNQgsLUUzQT/EDil3Ghr0oIr1i2jymowm6XOV Sypeorb9ggra6hi3PCXZwEo1cJ2xclQZK4vm3PlA267B6utZ2sH4VXqorMQmQoPnwF868mbo fJhd1palIMFbOxfonpAcT4FweopHujlNAXWkaeQZTUVT3pHd22iCcLCXntvLmtthbY/MQFf8 mSlvJqAHQQZkssBtfKJQn2K87yRsjFUb+P8KHUkRR6f3OmoEMwzE5FuJP7Wtyg9xYH+q5v2/ y/mDSKWG/FuUvtO3KNtwkfMeqG80MH4IZ5DPZ5LtFOyDlfoX/GledEv/0YQxProvGaHP7Zv0 9m0DOhJ+2HfI1M+tdAL/v029UCeYhbtnAeokmTu3Uu7LUsR5uX7nPizdXmRDwuOxo8JNPg2e tnEaOB0V82HsBxMS5glL+qj1ysFyBrflLNPjsPUm3/qUdGptyubD5aA4rVxVSafWVfPXmoPi tHJVpm4zo4rmJ8tBMbZVlXRqPZTNh8tBcVq5KjO3iW1l89PloBhcwJqSzomNRfPBclCcVq7K 1G3mW9H8ZDkoxrYqU7MZW9H8j81BMfZVmcrN2Ivmg+WgGMuqSjodlqL5P5GDYjJXZeY2U100 P10OisGtqqTTgSua/89Bt7ES5aBF0jmzsmg+VA6K08pVlXQ6LEXzvyAHxUSsylzO01Q0HygH xVBCXJ2STgelaP7Kc9B7JhHCkElExhwZ86LPuipwp+sytpeFfIxoPtdrzmOZBBXC5NEZn2zx 1H2OafO5hELlVKQnKKYTsX/7CzEdCyUcs4HJWG1d6aNfKjO0wXx/qIPNsRjZ2wDmugKDCNns VyLGD3MsEKvljsXXDOz5Bb/2LIFhaKk1EQEWYmMYkBBIft95Fb7BH5+nESAysjhAARJ6pRqt VXQgv6tYWmmeNipEV86oV9KSSvl2SIuPzHwN0KxnyEuQhTlU2dDngei5roTb9k+TyE2G6UXI 4gfjaxwLD5S+3V9TP6NalDeE3cM7mExcbruW2smLaZaQSdipHGirxfoo1THoZV22Vcx6Uph6 zQeLlKkWT1f+8ziKb1r0LqVmtHCPo2PcLEzrWtt14NmaVNSbDSco8UhSjBKmM3qKD+BJqw+v jZTaWUupxp6Hc0kECVXnkGW6V6SFLMW13PKszitzWG4hurpnkxXLaoMgeEbLYL+4HHplNejK HQJp0j3QMpjXSKPK7WklsnIbVXtuLvEpg5U1KfZkhTZ6+eOuXbothLCoErqcC56Yu/mRRNiH ukujZS8smAs1/3JFErZBjwJa8ue6yDQLcsKBhLMS5PiN9fq4ssoYrTDmq2QkkpySQVRRzp1X he5XphYFbEOZv0Pqzt3nsNANp4MAMlq8Iq1MWXRa1Fvep2Bu8x0Fa9nYfu3FxyDP/yzKOb7Y cdSNzkLxEXxfbV5dwhBiqavauqreROmkZTspF11qvck75pWyI6p3/yKVkR+ThuGCcCRlces0 /GDFrck2TJK9q7h1n4Sj+KZA5Bvb+D3p51aGF9do0C0Runw7qRjSIDKOxTtKR6/4LYK+u+zd a1de9p6Y+JKSgTxf8GHHjhs+e96KyX3PIe7EzEWuDEXAhMHTBsfAmyLfGRTtcOmrMnNfd9mH mmmHayVrYt+nIJv0t2kQCvSf5HlJFiZ73ni/tzVG/jJFlpekmdhVcvz3Tg/wlg2FyggLGZHc 4GjJO171cYe7cEfGN5fJE272elWRcu1Kcx0grMcODUCahrzf3l82t9omN9NuZ5BsE/4Igjr3 yQ6hcn301seSwG002TfeMQ4uT/WikpI+kSbS6dFkZ1ShbxaqBsPykhQ14m7YlnQk77hN79o/ JAW7JCW7uONSpKY/Q0dpeyP1vb13vO2a66mSjr/76OkL9A09yRfa0Tz68dt4F2NLX+Ygb3BU igxp7VZFdoqaxJ6MQ7FQp/lp5aRui21TbpHdatmpSfspfaGqH1/paRmSZi/5eR6CKTrNovMZ 4tIcOr7dctWzDivpq56kM5iCQ1qGSAufJGP/A2XSlZ1lKjRPXmcqztjvuCJFi9WOw4sLSurQ wU/sSCdvdNhV38VS3AdQ7j5hSkvuFJnup3abL/Sg8d4Iu0tJ5PlHoZWbI6syTimvF5KRVebx a5t5HxPvP8r8G8dB50tlbmRzdHJlYW0KZW5kb2JqCjc3IDAgb2JqCjMwNjMKZW5kb2JqCjgw IDAgb2JqCjw8L0xlbmd0aCA4MSAwIFIvRmlsdGVyIC9GbGF0ZURlY29kZT4+CnN0cmVhbQp4 nO1a224eNRAWt/9T7B27Vdf4bG8RFxwCatUiCL/ERdqLNGeaTWjaFMFz8VK8BWOvvTO76/xJ 6U8QUpNm5eN4Dt/Y43FfV5wJWfHwmwsH/er1SsquMtyxTsqqjzU7VKvzldRuUc1jz1enq58f VBcrUYXfq5MJJW04ryyHz9XR6vjB6scVr05gNc9U+InL0/JBX321Xn226yqhGdfV+hgmiKqF f7xykkldmU4w7US17ld79eOm1UxY7mW90/BAyFtfr7H4bTP0123Tjo0+zJJOmVqNpYeNZEJZ Z+qqkY455zylvtsoD6tzfSvxr6GRG6nk2B1m57bvGiD8Yv1ktbOOygi/oDMrTdWZQWegPZEU 9kHaEqFJQE9nkraeNYp52YEQ+6PcV42wzOrO1gdBCA0/VtSnzVisGsGZ9coTZfGi2vI4WRgn xpJsABNBA4FvGZkGxDDuq1YJJqv1IXC608j6vGnT5yx8fm1E/XasAbOBNclB37K+hr6r0PLu KHzfgLG6cQmeVNNKZ5gPywDLdljncZBZSqG9qHuQ2VoQWsFa0Oy9lb4DDiQzYBFTHzVjIxk7 tJpO6vpimBbLgVWmJBgVlC1Z12kuaONZ45lRHXf1ZWjsOiU9EDBMcBklk0zDsiBem9dPAwOh N4Tvtw3gYZDWo7RBs09X6wd7EbBp6ClSOBvForSqgAZtXVRnZFVSAVEX+w2RdKqg2DgjCmhy HRlJRKnAN3QHUuducDzCJ6GJI49Rj4QSKQ6kuNDBNcNQ73Wwau6/wlY0xMV8fuD04bgo2mS3 yZO/ROs8g0bnhIdxLexQnZsuQ+R4jetclwxSntU3QgCjSswQt2Q56R60L4H9kRnk/6gJcNGw R0sP20j0BJx+gORZI0301TYNbrUfhj9FUO2jWxxg8RW1cLI/MRCx4Nh9iN1FeO2XoEBoXqAj jTSXNh+cL9MsajVS952xVBfXRfS8KyKVWuDzcS10rpfDLGkMYeWiKD5Z6/dmodEt8Idc/YZg Rq5Q/afUoln9E/oRVUDNyIyqBfeCd8h93E50ZybIGLiIrbjM2TgyGUwbaloktHQYYTc5TJw0 R1tsPCsxd1FA9QBlxdWmvSgSWoAxTMJ1prw5iAa6bnC+Qaej832DhiLON3eU2FhyBMJbEX2L nWR2NBQnoa1O0Q2XOA7edzg39ty7UTkTp8zb1x6CSiGpFxDcWAgOKWye1zj0GIuX6H4EoAv3 nCoomVELeqRQR8KhfyDXUwFMCnyMwYNaSRVKyWF6VMgXDYRVy3Pdh1ApjRbIaIdFicXnDfL6 CDDlB3qWk7BIGRFuAm2IGA5X9SfN+pfpksrm9X4gcREGCHfZTaM5Nu5WARkbd6sZCsnYNIBD FMroeZegn8xptPuvdtsUjsaYH65aCq4v3o53rVAVenK7mlXz4HjZgrvW7VcCYj68Eiguwz4i ONxL8p2AHNkoMRF0Hv7eHN2pHNhHMQdBjRpF6XO16yaCzqpZ7rsKKvQmSa3Pt5/6z4BrwlpU +rB4soHixhNeZlXkdCs2cF04DQcbTIK07CzlQ+uIYlUYZsNJeIL9E9QmTyHWLB9ldBcjwEZv JocHHg7oSzcdkHnD1mVkZAUnZChhOFX/rDpaYyvIgCsr4+5GZOTFEzI0xPWEl1kVOd0GMpTz TIhNyCgf5eQoPSpuaFsDBERUc0DcMWLKgCDn1njFmBogqzgbwINyiAFm1dEe2zCAsZbJBA01 gwbANK/d52qnJ5zNqpnRraDWOMtUeT+jObl+nrHTTi6q/zyBl3JWWrtp0sq8V9LKVxB0TIQE 7FRGGebyvrg7wMRHSMM2+Bd8qp+aNmVXOBddiODymOszbH1VQeyXO+46JY4LKx3A3zWOIoOA ighlCTut4uGur/mQoxmGXl68CRmo6/PJlFzcD1IE4nEyBGdKxYkxyg9HAt6cIi+Y/ToMbIWj FnxHhw/dUV9Po4R+EUMYs6j+X0MKKlm/iCGMccvqfYUUlJd+EUMEpc+qH0OKbYYUVN/9IoYI UJhX7y2koLz0ixgiQGFW/RhSbDekoBrvFzFENMCsel8hBWWlX8QQAaaL6j2FFLeRpUkEQlbG XBXskgBhG8luyijsYB75X9mSpg8lGc2PaE52OGpI1p5ASdOU8pi+oQoVSodHpSgOoHkuKaB7 zO08mWRdx+VokqqYeXqPVAXN96BvLFMlkQdW2gnMQvjkZx8kPMgOnS0wxoytWu3CtP9BLpNk lsqPF0h/UyozDiWgviEVN7zZgb98epO7fI+LTJ7QkmK2cMAvMl23OlOe5KleUK8nmH0rJ80m qcJsF6LCd0X44wLFR0niSPNw0ylP32Ko+93wQJmUgsEL1VjrmPaGK/ridVEEKEFIMQQmefGk NNtN1JO8OyTGJ6f48O7ihv/PEXFCxL+eOUN6WUkykdeWy+IcfFpJ7E1ecF4WUVZ8ncOk/uEN 0Mz9ySKhSLercF1i1jgXn2I901qJpVeGWRU+Ww5aSbntvWxC6ShWToqGKz2BEb2UhUBYFZ/a yUrklWSihPSWn07hvwGdPlG/ZW5kc3RyZWFtCmVuZG9iago4MSAwIG9iagoxOTA5CmVuZG9i ago4NCAwIG9iago8PC9MZW5ndGggODUgMCBSL0ZpbHRlciAvRmxhdGVEZWNvZGU+PgpzdHJl YW0KeJztWMmSFDcQvfdX6FgiXLL2hZsh8Ba2A8Yd4QNwGHo2zPQw08wA/gD/jv/Lf+GUqlTK UqkZMOMIH5iGDi2pzJep3FpXhDMhCY+fPNhsV1crKQMx3LEgJdmmmR2m5HwltVtMM+356mz1 2z1ysRIkfnanM07acE4sh6/d8erk3urJipNTkOaZin9JPB5vtuTBevX1gSNCM67J+gQOCNLD P06cZFITEwTTTpD1dvW0+4H2mgnLveweUR4Zeeu7dRl+S4f9rqf9tOjjKemU6dQ0+opKJpR1 piNUOuac85j7AVUepHN9K/OHsMiNVHLajqfz2ncUGD9f/7h6tE7GiB+wmZWGBDPYDKwnRoN9 lrVEXBKwE8xorZ+pYl4GUOJw0ntHhWVWB9ttohIa/qzozug0JFRwZr3yyFi8abZMJxt0YhpJ Cj4RLRBxywQaPIZxT3olmCTrI0D6iMrunPbj18v4dUlFdz3NAGyEJjnYW3Y3sLeLK2+P4/cb uKwwieCjaXrpDPNRDEC2g5yHwIsZsLcBHqC+91b6ALym4dtIEYLmojseVgWs9nFVSbgyEAbn pBTaC8CYeJgg9UidhpsyfEmzvBO4DGu8NmgNEYJukmlY7h7TiT9clmfedK8LqD0id2V4PWD1 HktHpMhavlgr3sxPq/W96DUSwkEahcXuRgPIbJVoKxJ9SVsn5uyLfRCD6xaUXTHrHqNkAZcD J1ALH5rbZX5vtYACIInSwYQGbAAuuz/pYB5jin20z/b5vvjQYRGK1T4ry0Wti7J4WoZw7R4i T+2hLKBf4zMQeZCTsaVuZvaZkLylLWe5TyGjNDwgFohRyQd0vO4mrEOKQic7xh/0IwBiX4JL WUTbwoWKC4xCrdGQJTKod/gyJgYFypyVZjoILjFpYXXesjXiP2mFkJ5QYZhVRsIoKeUgHzZd uRmKzZsuGj8tkWwL5fOUSIIISKGjph0/FHOR6ZYKwYza53xl8U0KCM1DbAj4kEqreNofume1 3yzirY6XFJvLeBE8qiwNX0Yn9AjWD8i693T9O2wLXbZ9rAPD7l/DLj4Mju/1uP1k2EZhAQXV jEp3z7rlacucnEv2LcFPu2c0WV5xBVW0h6YmuCEBDAr1xhrIBKSXKh5KRy6XQYMjcrw/6aqk /B8EXyOrx1xTPKjpdguoqiUq+QApJkHOPMt62dnhFiYXflEIRiWlMc1gumhynVEOdjsp3JcF MK5OlI+HWuxi0PdlX5ZTpgwtViXX+g/eUeTVviNwpamnhFZeOU6i94y9fJwGl9v11L1X00yc mnno5W9vOZFPl5ZTcVCDWM+E4XZoOX8p+fIDxT856n1k+jEGkkKTSoKLlHBGlYSEFrf8IKmn I/GdqCTgflQYu+i241zktrbCPKLKmCE4MchqOqlwF5iNhEqUMIMzQiKqgI2iR2BWCGy9alpw 3gmwwFT+SfLphSpmqk8oVIa51CLcWp5yCBbeqDqhxHvZktNu5ub5rGpdK//BtHhcZKDUNrQm 0syMNi8iozbLfFhnuZxFm3rjHq53THsXZkCOsQUzJwz/pq3hptmHXmKEqcOAGDZTh1F6gdoU dfNe9L+etpulY2HpRHpU+osZ02UhbfcyFzgttGwFoGMCDmGeMPC7yrZ+ddFOLqb//hFmfHfQ 2s0fHswnPTx4En8h4BAHAxKjIOhytjwYDOBTLINp/oYv8ivtx9+lHNJ0fITINDcvy+orApU9 b3zskUQXJW3g/02hQkTARcRx/ImiePRszYeXgIH09cWb+Ipwcz47koeHUYvIPB2GyqtUOph6 NuEC5JvssAlLecE4irCiF3VCzqrF1bwKbxc12hhfT//nJXvyMGlUBDtg90SL7IVX8zq9XVTx qGU9rYr6x3rpHRd2DHS7qOQJaDWtCvvn495f3DGa7aKaRzTVtC7udwDuS4H/UuC/FPiqwH9O XElbZ+lvSpYul11G6EVuU4av2u+TxXXzT+kYg0gdVjwPeT9anblmZja+lXGFnbxAPGvd12XT 3vti512zVKGfy1P2sZAm8zPZC3qLCKT5EYqP7HKvmleOI6nxrnjaxHfcDJPm40jzbTC1Hwo5 2T+T2b5nZW5kc3RyZWFtCmVuZG9iago4NSAwIG9iagoxNTY5CmVuZG9iago4OCAwIG9iago8 PC9MZW5ndGggODkgMCBSL0ZpbHRlciAvRmxhdGVEZWNvZGU+PgpzdHJlYW0KeJztWs2S3LYR rlznKXgL6fIwxC9B5ZCKXbIjx3bZylT5oOQwmtXubDSzK629cpTHyOv4ifIWaYAkugE2h7Mr xVWpitaeAkH8NLr76z/wbdHUQhaN/xsbu+Pq7UrKrjBNW3dSFsfwZPvH4rCSup08jmMPq/3q h0+Km5Uo/N/dVbKSNk1T2AZ+7l6tLj9Zfb9qiivYzdXK/wvb0/buWHy2Wf3ueVsIXTe62FzC BFGs4b+maGUtdWE6UetWFJvj6kX5rFrrWtjGyfJp1fiFnHXlBptfVP37cl2tY6fzs2SrTKli 69NK1kLZ1pRFJdu6bVtHV39eKQe7N3px8c+hszFSyfjazx77vqxg4b9tvlo93QRm+D/gmZWm 6EzPM+CeGBj2QdwSvkvAm84M3PqmUrWTHRxiG899VwlbW93ZcucPoeGfFeW+is2iEk1tnXKE WQ3LtnGcZMaJ2JIV6ITngKdbBqJBY+rGFWslallsLoDSp5UsD9V6+Ln2P28qUf4Un4BYT5ps gN+yvId3d77n3Sv/+yMIq+u3cIVsBtasZWtq57cBkm2/zx9hrdoAvz0joKlkJ8tXcHjnrHRd fyhQ9/JnHNi/Np3U8FrXuhONpwDed51u/O7ARymFdgJoHWfd4IArbBae+9q2/mjjyH3/WknH bzUSalqyPFlzj82wqO5MRzba4ZqE6GFR53T5DnvJ/sOp4Fyy/EMFqtHz1zbIYC/Mr1flb6rf poxXFnQ1sPsLv8jA2meR39/1vWGbv5A20iyQJI3NZmxaD8CRJ5JyV8paA4PoQcjxtth7iJy8 Z9+jeJDntzjyhhMpZdk9K/6rRVbjvrQXD8Ye4VgJURulBCWRXxXVasoiaRJlJyryvhpX5XmQ 6O3IjsswXzWKTkq00auUBluACkOJvo7KPIelkSlzgpFmMDzGoHZaNW72JoEDs+8xGIHQTE/Y 24hZZMWl3uGIRN7RXFE4rY10nhVrj6sLj6vN3+eAtanAOTbeZ5F1CT17liOoymQoq1EoxQMD BFSnqbp4SPZLWmsojibGx2sGqzi/Bo4m5tcrP4v/GTWS1rvRUR4vOSbfUMvC6sd77vgfQa2I zviAQEY6t7m8JkIYzcNLlsXoYLA10QG/JmcGrunkFoKfLpC71jDU+2nteiLRUwyGTbYUq4dM +4J3QRNIyCECQHk+2Mh7x8xKZ2psQwyAqz6BYzLBn+iUK4ztoz8HsRzEQn24fF74R6SL4Z80 ILnCulqYxvbh39dVpGmLnNph83XixXqjRg51iYiOry8WvOWW06VZnvZrvsktQxbrsLINq7vO 2I8R4PyeMXwv0S7MQPq0p1x2E+fTh1SRuJSzx3sq0ZH9yfrB58JqRo42YUK9aEggfIigJVL8 GR0jbkP9ZhCYNhPY5gZjGCnsKdiGSbm2hc5rjrgbRqvZWOSW22eijKnlSmlDI5a58oHD4Mp9 0r3kzT+rBntHwloSAltsKi78ocZnybFPtTaBN0LtPpNcpmiofKxlpjCI7lNo4pZa54sLgQHl LxPeCFN3kT0kwm8wmaSrQUMMw+EIk8VEHR3gVwRVa1R8soVZ3E3run34biivv5a4MWtaojj+ hGj/oVq7uumsgPlVBS4h+pW3K6naJjqUY/8oVSdI+SZ7HAeHak5x81inoxqZO53PR10m6GLd +H2Gvsc559m0bmS3m/HYqOknQosw6R9cbPcTo+qpuw+CoZWzY15X062cPD6+zDYEF1q3aWnJ PKi0BOGITGUMdq8wytRtN1SVnvf8cIFLYK3/DT8F5PE6lGvqphGdr66MY+6vsfd1Abo/vjh3 Shjnd9rB//c4igyCVYRv+4haNSD7tfaFokjn7c2Pvk50f0imjM2tP4VfPEwO6AoTQ3Aq2i6i /UVPM9aoLjxZHq2lUKOtGDFJYXacgBAUM3/8PyZ/BUxGnEiTBuEOkqQPDsKVtDnvv0UTTtIV EsZFY8+6Aj6xIK6biGz3uMxGulprlW6Vp3w0kw4DMOwbvZknhkyrAXAwok2zddL7KTYxvH2G npFN3l7laiXBn/6rMqA2VqUxM+A4roW+F1WMaCjJg5IMIxK4nN6fmQtcUs/v1dKbABVD8cnx /D4k5UJGsYl8kmAPrf0EXmmwnQXTgaE7LonjsxTcnDktGXdZQUhnlXJsPYBsiJ2zGQEpHQzs G0pmL8ZycsDYNcfBtNaf5PShc88K9Ya1cay04uHvcliEehh/WcCjnCdgh4sRAmZKDTIrNdgY MnyIlWsnpYaYwZyAR+Av3ro8NFP2jDyZKQ92KasiNm1iNaa5pxIU6ay3oWYlTctHcMyULGn3 jiXiDVYZOJtNDA9LGVfQvKX2giPwBDBmC9yPxkVfb/AdXI1/EJexoxvJUvSkoDgxKlteRLkJ AWvbciuh6WNZxtpQUvlgTTBOGvyP73xyslIQeHNO0f9LDBoIwUTdltwUOMoWeps2g8wYAbCR HmuPiGa8prHEyDuiWAOpRrcnqlu9QLYTXPgFFgsMVJzzCCBIIz76nCpjmP5Rq3i0AvCImAm4 TRb7rscYpIZY01tH3eMrG6SkRPQ0CclGw/KSVbXkprnn/81E5jMDF3D3Z4TYLavbhzRkyQKe fz7kpm44+Jzs+Hs6wMpQ3FuELB+PEOGyF8kPsbv8VRgbKE4w3brTmPaYRbk84JaZx2lUrjNx 7kPR6yV/zH1RcQr/GWr/+/jndejMe176AcWWpYArzp4n/SWLnqefEU0o01w6ISqdZC5ejc74 MGZyGUTEyE6fu+MdDz+9ymoVuXY6cPqSJObM/RUROB88kQFoQx8ZVU5xYjvf7BNH57Vl0BPO JPJXAawdZS3HgpmeBBserqdy4pkk8QNt81qr8C1cTAFJzZzkHVSR9wt6xX5jsqCBt4wqT0/m g6TFdGYmlVNZKqfERyhY6e5/IZXbcsZlGb7LVYjMBeRliByxrOSRzAuMMNn6GW8l0O+wDJ8U CTJXy1KPNPHxA11qGQ19eOnIZyRsoEhMFFeSYqtPJCg4qTHecJ8TYLOf6gjhSI1tNkylKRp1 xqBFjpnMf3h1hn1fKN2hVX6P14/0OGvtTLB4StR2+GTm22rEVR5655r3ZLw7TA6puzoy6Hlc i1B6wWkJ6xd4vFwtaBlfoiEw4T/jIjAmxHKQ4r5j48u2eJSHfGyRhi/eBhDucPEwr4eIEtSI /C4lzabY2ikqFg8rLnHivXRfvxEE/KRSM1P24vMXNirlA59wYaWUlL0y+q36O6xWk9SW/0Qi ux3/fvUfRsAooWVuZHN0cmVhbQplbmRvYmoKODkgMCBvYmoKMjQ0OQplbmRvYmoKOTIgMCBv YmoKPDwvTGVuZ3RoIDkzIDAgUi9GaWx0ZXIgL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCnicvVXb bhMxEH3fr/AbdsUaz/j+CmoRCCRaVuKB8lAlvdGkl6RB4pP5C8Z7s7eJgFLEbhKNx3M5czye 3DElAZlK7yDMltVdhRiZVV5GRLZsV65bskWFxm8tB9tFdVF92mPXFbD0rs4nkYxVijlFP6vT 6myvOqwUO6dsQer0tOlLebZkL5vqxZFnYKQyrDkjB2A1fRTzKNEwG0EaD6xZVp/5G1EbCU4F 5PtCpUDBBd5k8UB0+7wW9agMyQu9tlyP0nOBErTzljOBXnrvQxn9SOhA2ZX5bfBXpFQWNY7b yXvQvRYU+EvzttpvWjLSS5w5tCzajjNiD3rCnsQWJBXQTrQ9W++FlgEjFXEy1r0S4KQz0fFZ KsLQ44BfiFFkApR0QYeCLLWTtsEOd9jBKKGgnhgZuJt20/JhrxmPW8u/b72ebWP8lG77KLoD o4sz4doaiqKt9LFn+kjUKGMMyvJTYfj1D/phH4kDfp92lIKYqB9sNpdZe8WO+bjxpy6tXco0 o+8mWxVGFAWSjPy70IqOqzaKmnXEeXO9Jgu+WUxcBvEkVZGCt87HQmjdOqaDrMFH6R0x1Myp 9hZLitJm5/MEKzUHBzMcfeIQVd+yPqRBBC5I1wVINxnpASR8KDWGYAqJkNMEiF4BoVIyBBuR wHWVGNLOs9g2JXVUusrkr5UuozdZPBDWug4amIyN5k3zrqL7/WyKWY/VZlybnHY1ZvuWlacZ LBPaSKMBCAJNNeWDJWIHw9vShy7hNqya8tcJ2zxha77+Y3A0EYzz0Lknw4udhrMsXmWDNU3K +P8gOwgxzd9+f52GWH+mt+LXoC9pn26ujfyMBqOz3mOhm5WMIEpjLfAPKXyvzaBuMqjbnUxl 0/sxfs5UGD6RvG14LZMFvpy/UBalFtrFaLoWNNqcDVAwsSlPPHOeqyou5PnkQj5srke05khP +99xWP0ExyjQU2VuZHN0cmVhbQplbmRvYmoKOTMgMCBvYmoKNzE3CmVuZG9iago5NiAwIG9i ago8PC9MZW5ndGggOTcgMCBSL0ZpbHRlciAvRmxhdGVEZWNvZGU+PgpzdHJlYW0KeJztWs1y HDUQvu9TzHGUYib6l4Yj4EAoKILZKg6Bg+PfVGwnOHGAB+BheQtampG6Z6bXa4cccog3dmm0 Uqv16etudU/+aGSvdCPTpzSOrzZ/bLQeGidDP2jdXOUnPz42lxttw+qxjL3cXGx+fdRcb1ST PjfnM0nWSdl4CX9uTjdnjzY/b2RzDqvF3qSfvDxtH181X203jw9Do2wvbbM9gwmq6eCfbILu tW3coHobVLO92jxvn4rO9srLqNsDIZOg6GO7xeYTMX7fdqKrnTHN0sG41tTWF0L3yvjg2kbo 0IcQIpV+KEyE1aXdK/xr6JROG12/TrNL37cCBP++/X5zsM1gpA9g5rVrBjdiBuipCbD/hZZK XQq+GdyE1o/C9FEPsImjuu8boXzv7eDb47QJCz9etReiNhuhZO+jiQQsycJWxmlmnKotLYAT CYGkt85KawBcx6YzqtfN9gQ0PRAagBx/G9G59uhaqPZEqPEJDkblMVuRYPYK9ipVFSonMDod AJckGJT0o+RvRKd7Bwi79qUorbdp61orGxXAIPsYvY5De5u6pzYdQtso5HWSPAxWqvZ6nOgG bROddG9hSPtM1FlkLAoos9Rg2ndpgNHACVjNxGHcW8S9JeR+2GwfPU/QFlk94CKt6a1KyKX5 Om2ifH2DQt9j76kguhrbW6MUAAvWJpMR/C3KwDc75miXz9P4pktanYx2OS1/gJveYvPJDCAg DriU9krAOTpjZvBQrN9VqC5rC9VrwMjsoKRuz3H6JMnoSHWehIJYjcv/yTEDl7xAobjSmxW4 MVoyHbc0Q6xMH7kWTHTMMSVJ/DFR9b+AIwdpIasFpmx9UHQrFxzTjlHWbFsTElQ+WZY0p30p n+yxrJ8PxQ5u2KXrW5F4Yk0KO5kmiAQddrtQOYt8V1tHKPwFjlwuDugFgshZxtRIQ7l1Uztx IIFmbtALQmZNUSkURdRD7a/Zczyh2E9W1CV4qh2dsPPe7znTNfzZfHCTREei2QlDBSQwmTPZ XEhU7kJvo4N9T2fhAHaW62fIaiKKcP1uP0AGsuIZAmnnZt08QsSE0dgR1iXFcudMgwLqOy4S 1E1xPuHNHtloZaf0wLIR6dgHX+yINQ7sRB7ylEYUl9OddoqXTsB8RY1jilWd9TYpWJmsP2aU KpBP02HkBTtyj5KfTsR6tVTfe8exNFkXG7xo50tm0VPW4lG9KmgfQwikxMz2hizWwT7s0HbF vFFv3lPSWcTaFvF9GbNo2MjGBqc8VGM7WiEwjz8osirHWuU9zUrJgcCPcQaNmm7yVbldd9aG pHQluPkoBugV3IU7ejlFsr8Rd58mon4GiYh30To+ftErM1odUYuQlL+UEj5yTn3GkMkZ5IQM 8mATIMnyNRFOj05rS1Pf+WMZnDNhSIT352vkGo/5mpGw5wbOpVclXyO5yunSMS86CTjolGap xZr7vKPacSLFIi7wQn20srMs6gJdFavAOXUr5aDJjZUc7tK+8vfcNeXFkgX5Ts16LSL+NSe+ yuTv9h9GPerzy5Z33BdA5RjlzB/9Rdcco78kDgldzzKtXPujh16Hn9a+MSw6SPansJj9zRPh nK/mkw2IVoeulrUjG/Tq8cNLSVP1BFzdvHziHlQ+iY3Sc1sEuBpnXB+GyRIPR5RiNjoIof/C n+YX0dkxUZdSDSkIljG3L7H3VfNbW7+475Q8Lq10DL+3OIoMAikqtTWQy8h0E7cS3HnV8/X1 21Qlub2cTSnNo7SLJDxP/k0IY/LEHDpUGMjlMuuSpOTV25OkVjKSVrkSbIrvpO7wauUsnYvL x8++87Pv/Ow7q+/8MPJrWK/xEbgv/Uh+y971npFyZuG8pptgUeWP/5JYAvjJnK7g8RDu8bXS NaWTUSwTu8SDh9XFPlZit+bv4tr5QVAhQBMSIa6rAcn276oGzGuJbDK3yuLnvmlXipf2HudO YmZdU4Xq8aFzpA4dTB9qQe+anQpKjC89Zgw2abkyka8OvWfFzWtGE2PIifHlJdKLRs+WLC+p 0Y98WOXntA62Kz8mKmMlh+h5uzi7BxdwSqpnIPDpT5Lxa+cQ18eTPCRb09vJpmW4WZ7tovix TJ+XwWhpbjTJTUNpgo1njvbIWiaqyb4ZOOY2DDfFOvSY2xObwi59QCZKV6Gdqu7S9K6GvVXM TQPfc/n7TU7VQ9DtP/mWaKYi9ZCkdWDAWV5RHDj3E95G2Jcnp4IJQnsiO1u6mV+x9hJBxkAL F+w656yZ37GNdQ1bx95aYMJznj5sCOQL03VT9zaDA7xbYAAtFZ64i9H8VWxH3eZuJv+eyTKo of1yIp2Cr/BtT3nHYQaVkoDqsRjno3ec/6zQWpzLzncq02HsuI+wTocscDY7WC76KaPg7jXt 74aIPkIpfwrvwzr6+fG/Xyz3T1RlXz3czf99cYqtHVOv8x1a71PsfQZDfR+HgXvdSLhGsDus nQfQ6VSvg6eAsu73XvXeKeAvDTR7PYJJj5PAcRUfhz5sunT/BwWBQ9plbmRzdHJlYW0KZW5k b2JqCjk3IDAgb2JqCjE4ODMKZW5kb2JqCjQgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94 IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSA5MC9QYXJlbnQgMyAwIFIKL1Jlc291cmNlczw8L1By b2NTZXRbL1BERiAvVGV4dF0KL0ZvbnQgMTAgMCBSCj4+Ci9Db250ZW50cyA1IDAgUgo+Pgpl bmRvYmoKMTEgMCBvYmoKPDwvVHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1Jv dGF0ZSA5MC9QYXJlbnQgMyAwIFIKL1Jlc291cmNlczw8L1Byb2NTZXRbL1BERiAvVGV4dF0K L0ZvbnQgMTUgMCBSCj4+Ci9Db250ZW50cyAxMiAwIFIKPj4KZW5kb2JqCjE2IDAgb2JqCjw8 L1R5cGUvUGFnZS9NZWRpYUJveCBbMCAwIDU5NSA4NDJdCi9Sb3RhdGUgOTAvUGFyZW50IDMg MCBSCi9SZXNvdXJjZXM8PC9Qcm9jU2V0Wy9QREYgL1RleHRdCi9Gb250IDE5IDAgUgo+Pgov Q29udGVudHMgMTcgMCBSCj4+CmVuZG9iagoyMCAwIG9iago8PC9UeXBlL1BhZ2UvTWVkaWFC b3ggWzAgMCA1OTUgODQyXQovUm90YXRlIDkwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwv UHJvY1NldFsvUERGIC9JbWFnZUMgL1RleHRdCi9YT2JqZWN0IDUwIDAgUgovRm9udCA1MSAw IFIKPj4KL0NvbnRlbnRzIDIxIDAgUgo+PgplbmRvYmoKNTIgMCBvYmoKPDwvVHlwZS9QYWdl L01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSA5MC9QYXJlbnQgMyAwIFIKL1Jlc291 cmNlczw8L1Byb2NTZXRbL1BERiAvVGV4dF0KL0ZvbnQgNTYgMCBSCj4+Ci9Db250ZW50cyA1 MyAwIFIKPj4KZW5kb2JqCjU3IDAgb2JqCjw8L1R5cGUvUGFnZS9NZWRpYUJveCBbMCAwIDU5 NSA4NDJdCi9Sb3RhdGUgOTAvUGFyZW50IDMgMCBSCi9SZXNvdXJjZXM8PC9Qcm9jU2V0Wy9Q REYgL1RleHRdCi9Gb250IDYyIDAgUgo+PgovQ29udGVudHMgNTggMCBSCj4+CmVuZG9iago2 MyAwIG9iago8PC9UeXBlL1BhZ2UvTWVkaWFCb3ggWzAgMCA1OTUgODQyXQovUm90YXRlIDkw L1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRm9udCA2 NiAwIFIKPj4KL0NvbnRlbnRzIDY0IDAgUgo+PgplbmRvYmoKNjcgMCBvYmoKPDwvVHlwZS9Q YWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSA5MC9QYXJlbnQgMyAwIFIKL1Jl c291cmNlczw8L1Byb2NTZXRbL1BERiAvVGV4dF0KL0ZvbnQgNzAgMCBSCj4+Ci9Db250ZW50 cyA2OCAwIFIKPj4KZW5kb2JqCjcxIDAgb2JqCjw8L1R5cGUvUGFnZS9NZWRpYUJveCBbMCAw IDU5NSA4NDJdCi9Sb3RhdGUgOTAvUGFyZW50IDMgMCBSCi9SZXNvdXJjZXM8PC9Qcm9jU2V0 Wy9QREYgL1RleHRdCi9Gb250IDc0IDAgUgo+PgovQ29udGVudHMgNzIgMCBSCj4+CmVuZG9i ago3NSAwIG9iago8PC9UeXBlL1BhZ2UvTWVkaWFCb3ggWzAgMCA1OTUgODQyXQovUm90YXRl IDkwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQovRm9u dCA3OCAwIFIKPj4KL0NvbnRlbnRzIDc2IDAgUgo+PgplbmRvYmoKNzkgMCBvYmoKPDwvVHlw ZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSA5MC9QYXJlbnQgMyAwIFIK L1Jlc291cmNlczw8L1Byb2NTZXRbL1BERiAvVGV4dF0KL0ZvbnQgODIgMCBSCj4+Ci9Db250 ZW50cyA4MCAwIFIKPj4KZW5kb2JqCjgzIDAgb2JqCjw8L1R5cGUvUGFnZS9NZWRpYUJveCBb MCAwIDU5NSA4NDJdCi9Sb3RhdGUgOTAvUGFyZW50IDMgMCBSCi9SZXNvdXJjZXM8PC9Qcm9j U2V0Wy9QREYgL1RleHRdCi9Gb250IDg2IDAgUgo+PgovQ29udGVudHMgODQgMCBSCj4+CmVu ZG9iago4NyAwIG9iago8PC9UeXBlL1BhZ2UvTWVkaWFCb3ggWzAgMCA1OTUgODQyXQovUm90 YXRlIDkwL1BhcmVudCAzIDAgUgovUmVzb3VyY2VzPDwvUHJvY1NldFsvUERGIC9UZXh0XQov Rm9udCA5MCAwIFIKPj4KL0NvbnRlbnRzIDg4IDAgUgo+PgplbmRvYmoKOTEgMCBvYmoKPDwv VHlwZS9QYWdlL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KL1JvdGF0ZSA5MC9QYXJlbnQgMyAw IFIKL1Jlc291cmNlczw8L1Byb2NTZXRbL1BERiAvVGV4dF0KL0ZvbnQgOTQgMCBSCj4+Ci9D b250ZW50cyA5MiAwIFIKPj4KZW5kb2JqCjk1IDAgb2JqCjw8L1R5cGUvUGFnZS9NZWRpYUJv eCBbMCAwIDU5NSA4NDJdCi9Sb3RhdGUgOTAvUGFyZW50IDMgMCBSCi9SZXNvdXJjZXM8PC9Q cm9jU2V0Wy9QREYgL1RleHRdCi9Gb250IDk4IDAgUgo+PgovQ29udGVudHMgOTYgMCBSCj4+ CmVuZG9iagozIDAgb2JqCjw8IC9UeXBlIC9QYWdlcyAvS2lkcyBbCjQgMCBSCjExIDAgUgox NiAwIFIKMjAgMCBSCjUyIDAgUgo1NyAwIFIKNjMgMCBSCjY3IDAgUgo3MSAwIFIKNzUgMCBS Cjc5IDAgUgo4MyAwIFIKODcgMCBSCjkxIDAgUgo5NSAwIFIKXSAvQ291bnQgMTUKPj4KZW5k b2JqCjEgMCBvYmoKPDwvVHlwZSAvQ2F0YWxvZyAvUGFnZXMgMyAwIFIKL01ldGFkYXRhIDEw MiAwIFIKPj4KZW5kb2JqCjEwIDAgb2JqCjw8L1I3CjcgMCBSL1I4CjggMCBSL1I5CjkgMCBS Pj4KZW5kb2JqCjE1IDAgb2JqCjw8L1I3CjcgMCBSL1IxNAoxNCAwIFIvUjgKOCAwIFI+Pgpl bmRvYmoKMTkgMCBvYmoKPDwvUjcKNyAwIFIvUjE0CjE0IDAgUi9SOAo4IDAgUj4+CmVuZG9i ago1MCAwIG9iago8PC9SNDcKNDcgMCBSL1I0Ngo0NiAwIFIvUjQ1CjQ1IDAgUi9SNDQKNDQg MCBSL1I0Mwo0MyAwIFIvUjQyCjQyIDAgUi9SNDEKNDEgMCBSL1I0MAo0MCAwIFIvUjM5CjM5 IDAgUi9SMzgKMzggMCBSL1IzNwozNyAwIFIvUjM2CjM2IDAgUi9SMzUKMzUgMCBSL1IzNAoz NCAwIFIvUjMzCjMzIDAgUi9SMzIKMzIgMCBSL1IzMQozMSAwIFIvUjMwCjMwIDAgUi9SMjkK MjkgMCBSL1IyOAoyOCAwIFIvUjI3CjI3IDAgUi9SMjYKMjYgMCBSL1IyNQoyNSAwIFIvUjI0 CjI0IDAgUi9SMjMKMjMgMCBSPj4KZW5kb2JqCjQ3IDAgb2JqCjw8L1N1YnR5cGUvSW1hZ2UK L0NvbG9yU3BhY2UvRGV2aWNlUkdCCi9XaWR0aCA3NjcKL0hlaWdodCAzNgovQml0c1BlckNv bXBvbmVudCA4Ci9GaWx0ZXIvRENURGVjb2RlL0xlbmd0aCAxNzYxPj5zdHJlYW0K/9j/7gAO QWRvYmUAZAAAAAAB/9sAQwAOCgsNCwkODQwNEA8OERYkFxYUFBYsICEaJDQuNzYzLjIyOkFT Rjo9Tj4yMkhiSU5WWF1eXThFZm1lWmxTW11Z/9sAQwEPEBAWExYqFxcqWTsyO1lZWVlZWVlZ WVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZ/8AAEQgAJAL/AwEi AAIRAQMRAf/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkKC//EALUQAAIBAwMCBAMF BQQEAAABfQECAwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHwJDNicoIJChYXGBkaJSYn KCkqNDU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6g4SFhoeIiYqSk5SV lpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2drh4uPk5ebn6Onq8fLz 9PX29/j5+v/EAB8BAAMBAQEBAQEBAQEAAAAAAAABAgMEBQYHCAkKC//EALURAAIBAgQEAwQH BQQEAAECdwABAgMRBAUhMQYSQVEHYXETIjKBCBRCkaGxwQkjM1LwFWJy0QoWJDThJfEXGBka JicoKSo1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoKDhIWGh4iJipKT lJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uLj5OXm5+jp6vLz 9PX29/j5+v/aAAwDAQACEQMRAD8Ark80hNBFBFeQd4gzxRS45ooAO2KBRS8UAFOFJSikA4UC kFLnmkA7tSikBo7GkBInf1pWGBTU+71xkc085pDI6D1pT1pMUxCUGlxSdqAEoIoxml7UANNF KaTtQMO9JS0nemIQ0UtJQA2kNOIpppgNopaKYCUfWlNFACUooooAWg0d6DQAvagUtA70gEI5 pQKKX0oAbijFOxSUANxzShSTS8ZoHXigBNtIVpwpSAO1FwG44xRtyaUc0hoATbSbfenYoxQA 3oDQRk0pFJimAtJS44pKAFFKeepptLxSAMD1pTj1pBRigAPNLgbfek7UUAICVFKQD0o7UgNM AK+hpQOck/hRwaXFABkdjQOnNNxxSjk0AO2jHWlxx1po5p3NIAI7ZpwUEdaQ0DAIoAcV6Uba XdmlJqQGbaAop2faigBuOaUClpRzmmA2m81JSYpAM5oxUmARQQBincCM0hqXHtSEUXAZzj1p uT6H8qmHApCM0XAiOe2aCS1SbR2HNGOKLgREelGeKkxTdgPWncBp5HXmk64zTyppNvNADGxS kfIKVkzmjb8oFMBoHyk0npxTwuBihVI6UAIMYI70w1LtOc00o2eDxQA3mlOaMjPWgkUAFA60 gagN6DpQA/HNIetJk5zSEmgBy5A5pQeaTmnADNAB3oHU0EYOKVRSAcKUdPekAxTlpAKvNPwc Uxc55pxY0mAUmKUmkpAFNNO9cmkpgIKO1FJQAUhoxRQAUlBpKYBSUtJ3pgIaTqKXvSZoAMUU E0d6AEIoNKaTrTAU9KMcUGl7UgAdaDSAAEUv8VAAKXuTRijvQACg0UlACg0UUnegApaQ0tAB 3pcnNJQKAF/KkxzQRQOlAAOaO1Ao6UAJzn2oPtRQeDQAEUlKT1puaAFpKWimAD3pcUUvWkAl JS4ooAO1IKWk70AFLR3o70AJQOlH4UCmA4U89KZ3px6UgE4px7YpKBSAXBJpRnHakzThQAUA UGjFIBpB9acMYOKMcUDigBRSUe9FABmlJzSYoFAC5pDRRQACl7009aWgAopM0maYC0UlFAAa TtR3oIoEB6CkPWl64oPWmAlKM+uKX8qAMUgA/d96QClAzR04oAgYAYpG4NFFUMQ8GnH71FFM BR1xRRRSAVfu/jT8UUUmCDaCaUf0oooAXr7UvSiikA4dTSnlaKKQ0J1FB7UUUCE7mg0UUAIO lJRRTAO9ITzRRQAhooooAQ0UUUwEpp70UUAA6CiiimAUooooACcGjNFFAC44pO9FFAh3aiii kMBSd6KKAA0jnpRRQA5eRQaKKAFP3aQdRRRQArH+dID1oooAFpKKKAFFJ1NFFAB601uooopg LS0UUAC9aUjg0UUgDPBpWGMUUUANxxSUUUAFFFFMApGOFNFFAh4Hyj6U4cgUUUmMU8UmaKKQ B3p3cUUUMAI+Y0vaiikAopueaKKAHdqRu1FFABmiiigAoHSiigBD0FKaKKAE70UUUwDtRRRQ AHpR2oooAbml70UUCFpT0oopDGiloopgf//ZCmVuZHN0cmVhbQplbmRvYmoKNDYgMCBvYmoK PDwvU3VidHlwZS9JbWFnZQovQ29sb3JTcGFjZS9EZXZpY2VSR0IKL1dpZHRoIDc2NwovSGVp Z2h0IDM5Ci9CaXRzUGVyQ29tcG9uZW50IDgKL0ZpbHRlci9EQ1REZWNvZGUvTGVuZ3RoIDIx MjA+PnN0cmVhbQr/2P/uAA5BZG9iZQBkAAAAAAH/2wBDAA4KCw0LCQ4NDA0QDw4RFiQXFhQU FiwgIRokNC43NjMuMjI6QVNGOj1OPjIySGJJTlZYXV5dOEVmbWVabFNbXVn/2wBDAQ8QEBYT FioXFypZOzI7WVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZ WVlZWVn/wAARCAAnAv8DASIAAhEBAxEB/8QAHwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcI CQoL/8QAtRAAAgEDAwIEAwUFBAQAAAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS 0fAkM2JyggkKFhcYGRolJicoKSo0NTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1 dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW 19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEAAwEBAQEBAQEBAQAAAAAAAAECAwQFBgcI CQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSExBhJBUQdhcRMiMoEIFEKRobHBCSMz UvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0 dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU 1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwCvmjNRZYdgR9aQM5UEgDn1 ryLHoXJec0MTgHtUZLnoBn60Avt+bb6UWFclJ4oJIHFRqDjk07uBmgB3pTgaZjJOKcFpAPBo 6EUmKX+ICkAo6mlxSgYNHegYmKD1pcZpcUgGHrTTnNTfhTT9KLgQ5NB4FS9uRQQCvSncRXDZ GRQuc4qYKAMYpABn3p3AjPSjk81KQOlIcDjFFwIsHOcUvJOMdqf0HSkBb0FADdpKk8UgVsU8 E7cYFIS3rTAQA559KGU47GlBJ4oYkHr1oAZjjkUoHOKaS3PP5UmCOppgKwCkE/SlVssR6Uh6 89qByc0CF47UnfFGeaUHNAxQKMZNAPNGcc0gF20YINAJ70oOSORQA3FKBRQetACkUEUhNN3E 0AEjCNWYngCgMHUEdCKQE5OelKAcGmAdCaM0hzke9I3DfWgBxINJzj8aSlzQA484pO2BQKQN zQA4cDJozikPSkBoAeCOtGeKaO9A6YpALmgGkHQ0elADgcGkI96AOOKUZznFABSHmlzlyByK afvcdKAFPandMUnHWjPyjNADgaM9qbnBpcg5pAL3pCOaSj8aAF6UoJxTaXNAC5opM0AmgB1L TQc5pQeKAClpM0oNABTegYe1LnPWk5xzQAufkx3oIwmR1pO1LnigBrNsG49AMmhDvjR+gYZF B547UgwoAHSmA8gkUgGKM0BuPWkA3HJoOOtLnBJoY5FMBOqj2pCMjp1pecUUAB6cCkGaWgAG gBCfegdOtHHNGaAEBNLzRRQAuaBSAUvagBaTJopeKAGAc0rdh2HNB60YweehoAQCnAUgpR6U ALjHpShO+aT8KUUgHBQDSgc9KQEYpaQDwB/kUBcgknGOlIKPagY7HSjFAOKWkIMGjGKBSmkA 2g0tJTASiig9KAEpP4hSikoACf0pCcmg+9GaYA2SfwpKCaKAEPFFBHNIR6UwFIAHbNMfmnjj g03Hv2oAbTMYNPIz16U3FMA/Gk6HIPNL2pM4IpgA6j/Gl52k9qXIzSbsAigBy92pvUkdSOTT kGRig8NnuaADt6Ug6kZ6UEAj60DAIzQFhR+dH1oGBk4pOPWkApGRmkxjNKBk8GlYgN1oAZ04 o3YoZlz1puRjrTHYdk54P0ppPPPWlDrtBzntSN6jmgLC5y1HaoxJ1+U0/OUBxTsFh2cKOM0g zuyKN3ygbf1pAGLEDpSCw8ggYHWk6c/nQy88mkAwScGgBQTS+9KO2MUoGKQgAOcYowR1pw5N O/WkAwLSEcfSn8+lIehNADRwaTqT1pcgUDrxzTAaACKWjpRk7unFAC9DTTTiMLSd6AAUtApB 160AFID7U7vSUAANAP1pw9aXigBBRS8UuRSAbk+lLzRQTQAtN606igBKMUvakoAQ57UmPenG lJ6UANNApTzzSd6AEYE96COMZp4GepwPemdfpTABke4pMHHQU/pQDQBHilHHFO70vHpQAw5p oqRhzSbffFADc0Z96cVxRgY6UANH1px460m3njFKRxg0DEHSjNBXA4pOcdKAH47ntSOvQ0UU CFGKKKKADPNGaKKAFB4pcmiikAopc0UUgHdaATkYoooAkVc0h9KKKkBKKKKYCGkoooAKD1oo oAQikxRRQAhHNHFFFMBDSUUUwAnIxSHpRRQAw9KTpRRVAGCcUm2iigA2k4o2nJOaKKLgABXv zSlSw680UUAOCcc0bOcmiilcBdtJjPGBRRQAoUA9KQqCaKKQC+WMUgjHpRRTuAeWB2oKrRRQ AbVxxQqDFFFFwF2gdqTGDxRRQAp5ag4FFFACe9LmiigB6HNOJxRRSATNNIywoooAYy549RSc pyD04NFFUmIkxuHFMH05BxRRSGDHtS444oooAaP1pcEjiiigAwQKB6UUUALjilFFFIBSKWii gAINJ1NFFCAKUUUUAJzS0UUAIaO9FFAAQaTGeKKKAHBeeaMUUUAIRRxRRQAd+KM0UUwFPNNz RRSAQsaD0oopgAxSjmiigAOAKbRRQgP/2QplbmRzdHJlYW0KZW5kb2JqCjQ1IDAgb2JqCjw8 L1N1YnR5cGUvSW1hZ2UKL0NvbG9yU3BhY2UvRGV2aWNlUkdCCi9XaWR0aCA3NjcKL0hlaWdo dCAzOQovQml0c1BlckNvbXBvbmVudCA4Ci9GaWx0ZXIvRENURGVjb2RlL0xlbmd0aCAyNzA0 Pj5zdHJlYW0K/9j/7gAOQWRvYmUAZAAAAAAB/9sAQwAOCgsNCwkODQwNEA8OERYkFxYUFBYs ICEaJDQuNzYzLjIyOkFTRjo9Tj4yMkhiSU5WWF1eXThFZm1lWmxTW11Z/9sAQwEPEBAWExYq FxcqWTsyO1lZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZ WVlZ/8AAEQgAJwL/AwEiAAIRAQMRAf/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkK C//EALUQAAIBAwMCBAMFBQQEAAABfQECAwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHw JDNicoIJChYXGBkaJSYnKCkqNDU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3 eHl6g4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY 2drh4uPk5ebn6Onq8fLz9PX29/j5+v/EAB8BAAMBAQEBAQEBAQEAAAAAAAABAgMEBQYHCAkK C//EALURAAIBAgQEAwQHBQQEAAECdwABAgMRBAUhMQYSQVEHYXETIjKBCBRCkaGxwQkjM1Lw FWJy0QoWJDThJfEXGBkaJicoKSo1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2 d3h5eoKDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW 19jZ2uLj5OXm5+jp6vLz9PX29/j5+v/aAAwDAQACEQMRAD8AXdSbs1GT70Bj614tj0bkue1G 6og1Lnj3osBIGoJqMHjOaXg96LAOzgUZ5pmeKUnvQA8YxRimZzS7jkUASj3FJSZ4zSdaQDuP WlPFMoyTQA7ijim0vtQA7ikJ5ptJQMfmjIqOloC4p+tB+tNFKcCmAlLmjIz0pvfpQIdu5pRJ jrzTKTtQO4/zKRn5qPtSGnYLkpakJ71GD3pc+hosIlU5pwaoFbHOadn3pNATZoB4qHeM0rN8 3alYCUntWPqUESxySiAh853FuPyrT3ccVg6jCQZXCP6+1b0FaaZM1oznmGXYZ4yaZkAdKUnc 5+tKAfTI9q9ZHCAJ9cimk57Yp5wrDj8KRyN/HSqYF2wCxX9uxwUOTgnjoa7C0nSSIbAo9Qp4 FcTZugukZzhVNdVp2p2qwlJJAGA6BeAK8/FR5tUjpotJGpuGaMjGKpf2nZM2Ek/EipVmWQZV gR61wuDW6Nros54oquJOaXzKVgJ6M1AZeaXzAc+1FgJc0ZqBpCBx3oV8nrT5QLFFAORyQKQ4 9akYoFFJnFJuoEOxRQDmg0DAUUhNIGANAh9Jmgn3pCfegYuaXOe1R5560ueRnmiwE4xFEzsg dQM5U5Irjdd1E3MhWOd2i7Iwxg1uanK6wTCPdyMjjj864+ZJmJZkfjuQa7sJTSvJnNWb2INw 3ZI/Lil5IznNJtbjI61NDESSGyBXopo5yIHIzjpSyOrAfezT2GxsAbvaiOIszZGKHIeo1W29 DxV/TZpXnSIbyO6rzx3GKoGMgkAE7au2m+1zJHy5A59Kynqi4aM7S2aNox5aFVHGCMYqQ5PY Y+lc9b6tcKQrQ5B6HB5rTt7t5SA0brnrkcV5U6Uo6nYpplvIzSgjrUZPNLketZ2AkGD060Zp gPNAPNFgHZFLmmZoBGaAJMj1ozx9Kj3DpRu+lFhj80cY461Hu5603cfXAosFydepIIzXOahq wUulxGTMhK7Bwn4+ta7XDvmOKIhTw0j8Ee4rnNdgjWZWjffuGCSc8124RKMtdznrNuOhm3V/ cXICySHyx0ReFH4CqopT15pK9A5QxRRQaADrRxRRQAvBNKVIpuKM0AKPQ0YpDRQMkhfypVbG cHNddpwaXTWaNItjNnDZOee9ccKsx3TxQsgkYEH5QDxWVWHOtC4Ss9TtzSnim5oavKO4cKB+ lNHSgHnFADzjFKKYelC8ikIf9aXOeKYD3pR96gBc80vfNNHGc0voaAJCeKQUHoKOwpALSA03 NOoAUUnc0Cmg/MaAFpSaQ9PwpDwKACgnAoPNGeKAFBoJxTM/rSmmAE80A0hIyBikzQApNNJx Rmm57UwHZz+NIehHpSZppJHHNADiflJpM84pCOCaAaYDsYGTyKd0Yc5zTM5GKAQKQDmX5sdj SYO4ikJozTAdyp9aSWITRMjjKsOcUZNSA8Ur21Ay30SxYg7HB9AeKeui2a/MEIPs1aPGaM1f tZ9yOSPYypdEtJGyQ+f96mDQLTPPmY/3q180maftp9w5I9jLGh2aj7rn/gVTDTLcOWCkH0zV 0mkJo9pN9R8qXQrrZQIOIx1zU4XaoxwPSlpCaltvcdg6H60hPJxzQMZ64pOhpDHgZPNKCCCD wQKYDRnv+dAEmMqCetJxjNNBozSAlDfXFKGqIGnA8cUrAPLGmlzSE00nnFFgJQ3FO3e9Rbsd fzpcjjNFgHFqZvGe4oJ5ppYbsUWESBvWnbutRZpwOeBRYY7NL6ZphpQeaAHEfjTWUNwVGKXd SZBOOaBEZtos8xJ+VRm0gBA8pfyqdjg49aDnPc4p8z7hZFY2VuW3eUmfXFOFtDx+7X8qnz2p MU+Z9xWRX+w22WPkpk1ItvEowsaj8KlFANDk31HYRQowAAAPanA5pD1ozUgLxS96QUA8+9AC 803JGc0pNJnmgBc8UZpgJzS5osMdmikDAnHel4oAOaTJpaTPNADHVAGeRjkDjJ+UVk30du0M hCkuwyGA4z7VryxrKjIeQ1UhZ7HeRne4KcYkPyrW9KVtTOSOPkXa9NIrQ1OApMW2hVf5lA6Y rOPWvTTurnG1Z2Cikpc0AFFKoLNgdTUj2syD54yKdhEXfml4J4pXjaP7wxTM0AOIxSCk5NLj ApDFFSFBvAzUeD2pxUgjPXFMDvKOSaKK8U9AOaXHFFFAA33MUsfCmiigAzjPvQvH40UUAPHf 6YpB2FFFIB3t6Up7YoooAaOQQacT0AFFFACdM+9NHBNFFADiaaTmiigQmeKTNFFMAzQTRRQA mc0E0UUANyaTJJoopgHU0jcUUUAIDzSjFFFMBCeRSmiigApaKKQCilzjiiigBc8UmaKKAEzS 5oooAQmg0UUAJR2oooAbnrS9ulFFMAPI5oXpRRQAUuRRRSAM04HmiigAyc0detFFIApQaKKA EBzSe5oopgGfWl3ce1FFAC7s0obg0UUrAJ3zS5NFFAASexpDyaKKAAU78aKKQDaU57UUUxgK U9aKKQhR3pO1FFAwP3aaBxRRTEAA6mlBzRRQAmTilHX6UUUAHI603JzRRQAueDTPJR5Mtyfc 8flRRTvYGZ+qWbXS7VKjZ904/Ss4eHZNvzTKG+lFFbqtKMbIzcIyd2O/4R5v+ei/iKd/wj3y 8zKD7LRRS9vPuP2cewn/AAjpzxOPxWhtAkbrODj2ooo9vU7h7OPYX/hHRkbp+O/FWF8P2oHM kh/Kiik6031D2cew8aFagYLSH8v8KVdEtQMFnP5UUVPtZ9x8q7CjQ7UdGkH5f4U1tFt/OjAL kYPJIoooVWfcHFH/2QplbmRzdHJlYW0KZW5kb2JqCjQ0IDAgb2JqCjw8L1N1YnR5cGUvSW1h Z2UKL0NvbG9yU3BhY2UvRGV2aWNlUkdCCi9XaWR0aCA3NjcKL0hlaWdodCAzOQovQml0c1Bl ckNvbXBvbmVudCA4Ci9GaWx0ZXIvRENURGVjb2RlL0xlbmd0aCAzNjcxPj5zdHJlYW0K/9j/ 7gAOQWRvYmUAZAAAAAAB/9sAQwAOCgsNCwkODQwNEA8OERYkFxYUFBYsICEaJDQuNzYzLjIy OkFTRjo9Tj4yMkhiSU5WWF1eXThFZm1lWmxTW11Z/9sAQwEPEBAWExYqFxcqWTsyO1lZWVlZ WVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZ/8AAEQgAJwL/ AwEiAAIRAQMRAf/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkKC//EALUQAAIBAwMC BAMFBQQEAAABfQECAwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHwJDNicoIJChYXGBka JSYnKCkqNDU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6g4SFhoeIiYqS k5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2drh4uPk5ebn6Onq 8fLz9PX29/j5+v/EAB8BAAMBAQEBAQEBAQEAAAAAAAABAgMEBQYHCAkKC//EALURAAIBAgQE AwQHBQQEAAECdwABAgMRBAUhMQYSQVEHYXETIjKBCBRCkaGxwQkjM1LwFWJy0QoWJDThJfEX GBkaJicoKSo1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoKDhIWGh4iJ ipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uLj5OXm5+jp 6vLz9PX29/j5+v/aAAwDAQACEQMRAD8AqXzMu7axHy/3c/rXIXILSkeldleIdrHdPt2/wkYr j52IlK4AHqa58HblZviN0VeMcU9dq44powcDmpDGAuc12HOWUmDxGOT5lPQ+lLpLrHdM7J5g Cn5T+FVVLKvBGGGCDVzSXWK93M5jUoRkDNRV1iy6fxI7K1fzLdH8sxgjhT2qUnFRJcQ+WpEy nI7kA07zYznDqfowrw2nfY9C5IKD0oyOOeKO9SMbgA04ZoApcccUAJ71gX5YxPln4JIBj210 FZOo2V3OGWORWQ/w5x/Ot8PJRndkTV4tHHMAwz3zzRsIGfWtkaBdqxxGDnp8wNMbQNRAwqLj r94da9T21J9Ti9nNdDU8Pbfs8YLgNuPy7c/rW92rmrXTdVtowsbqmM/xjFXY7HU+r3ij6Amv NqxjKTakjrg2klY1sU053VXjtZ1A3Xbse/ygVPHGUbLSO5Prj/CsHZdTQXGOKUUpFFSAUmKW ikFhrdKBSkU2mAuaKMU6gBtGMUuKO9ADcUtOyKSgBuKXFGKKYCUtJS4oAKSjGaM/SgQucECl zTOfSlpAOptKKM0BcKQjmlA7UH2oASijIzSdcYpiFoopRSArSWNtJP5zRAyZzmh7C2fZuiUi P7vtVnvSqM/jVc8u4rIqHTrYs7GIZcEN7g9aSTTrV1w0QOTu/HGP6VbYFcjPSgk45p+0l3Dl XYgNpAUVSg2qpUD0FMFjbb1fyhuAx+FWeg+tA6Uc8u4WRV/sy0Mezyhtzu6ng06Cxt7eQPFG FYDaDk9KsZpc0OctrhyrsVfsFtvD+Su7dvz703+zLMBh5Iw3Xk+uf51bJ5HtTifk96OeXcOV diodPtjKz+WNz8nk+uf5ipPssO9vkHJLH6mps5YnAFJgls0ueXcdkZb6Sft8cytGsSEHaAd3 FanQZNGDk81FcnEIXoWIFU5OdkwhBXsiB2Mx3MxSIfrU1uVKHapUds1HKAXLY+WPAA9T/k01 rhYHw7MzHqOwp2urI2cbqyLfQ0ucmkGDyOQeadjn2rMyDHFHbmkz09KUnv2oAXNHTk0maCcj BpAO7Y96QcGmjg8ZpSevpRYLjn5UGs6e7dJLpCP9UAQfrRez3SeYkcIaPafmD4IrnbrVpE3x eVEcgAsQSx/Wuyhh+dNtmVSpytaHSreA/ZRjmYdPSkN5tt7iUjPlvtwPTI/xrlhrUwcMsUQK jC4B4/Wozq9yVZS4wxyRzyc59a2eDXcz9v5HYy3BRpMjhY9w/Wo47vzHg2nKuCSBXLvq0zqx MxLEbSCOo+uaZb6pcpKgR9oHAwO1J4Sy3GqyfQ7kdOlKBUFvJJJHmSMxnHTINWBjivOatodC EpD2pzYFNxnPNIbDPQdqrXcZkkiGMqDzVnrR1FUnZ3CLs7lOcb7yJOdo5olX7Re+Xn5EAOKu YBOccimrGodmA5Yc1XPYtTsUnvUjfaijA61cjYSKHXoaoSae4Y7SNvuavQIscICMDx17VU1G y5SqnJZcpKKUgnO0ZPbBqvKzRo0cxUybScKcBqpWlyqXUltnERHmRsT932qVTbVzn5i5dyeX HvJOFznB79qzb4m9sFuE4liPzD0qG61iON5o9oljZcAKf4u5zWJ/aU8KyKjhPM4bHJrsp0JW uZOqkdlZ3aTW0R3gOy4wepPenyTCMDgsT6V5+0zs4kB+cc7s81vaULe5tFlu7iQsrHdHu4P1 9qVTDKHvXCNXm0OkRhIgYEEHuDmnAdKqafcQTKyW6kInTA+X86u1xyXK7Gyd0QSRsScKvIIz muRk0W9d3wh6nqa7LNBxWtOtKnewpwUtzi10e+icN5JYdxTns58lfKdT7DpXZDpS1ssZMz9h E4NtNuWY7UckeoNSR6ZdDPySbxjOPSu370EDJP60fW5dg9hE5aHSr5wowUA9WxVtNEuMjdOo x6ZNbwpR1rJ4ibLVNIpWNg9s+57hpB/d7Vez1pM0ZrGTcndlrQdnmjvSUuakYZoz7UmaKAFo zSUUALmlBpKSgBc0E9KSkNAC5opMijNABmjNJRTAXNApKSgB9FNzS59qAFpuaMmigBaPWkox zSEKKTPIpaD6UAJ+NGeaMEUjOsY3OQozjJprXYGxTQBWZLPOkCn+MzEL7irIuf8ASZgSojRR gk9TWrozXQnmXct4oCkis37dhrYeYnzff56UtxqKxIWSQMRJjA9KXsZ9g5l3NDng9jQTVWC5 SSZwJBjau0Z785q1USi4uzHuLSUdqOtSMXbxmk6HpTs8EetN680AHejmig0AB5pRxSUUABOT 9aKTHNLQIDRQc0YoGApaTFFAAO9BPFGOlBpiAdKUDikpce9IBAOlI6B8A9jmlo7UxjWjXnP8 XJqKW3SSUFhz9Ksio5igUkSAEDJDVUW76D5mtSKe6gtpFjkcKxXIz0qrbX7mCaZ4/wB0GyDn n6Vm6xeolsE3CR3zn2HasWC+mjRk3nYf4SeDXesIuXfU5VXu9VoduLiLYku7AccLUxNcvban b3NzCbkiMIMDHStWyvWM1xLlXhAOM1zVKDibRkpbGn2pRUFtcxzwCQHH94HtUynkDoSOlc7T W5Q70pce1J3pSe4pDMbVFhedyyyq4X+FeDxxXK3fNw+MCur1KHfMWzOMjoBwa5C4fdM31r1c K/dOavuiM4H1pME8gcUFSzYAyfalKSKOQQK6jnY2poVI2OOhYCouCOalRhwueAc0mNHe2Egd CRGU5xyeauDGKwtLvIEkxJJEo65Dda0hqNpuwLiP868apTlzaI71JFluSTQBnpUSXEMg+SVG +hp+fSsrMdxR1A9eKTvSEgKSTjHJpokSSPMbBiRke9OwEo9ajmbZC7gZ2gnFVZJ1kgVDJtkk yhA/hNVoNQK3CpdttyPLZSOPY/jWipMjnRoTFjG0RdRKyb1296pjUUW8TcdiumGGehHeqN1J svUdZREkXAL+n0rKvr+LzGeNjNKf4iOB9BXZDCtr3tmYyqpbas0tQu2kvxLA/nBMck/KPrWJ d3JeVyz7ixzhTwPpVSS4llJLOcHtUfQ11whGCsjGU3Lce8hbHajoMEdaZSnrVkig4X65FaGk TwQ3Ki5TchBHTNZw6gU5WIOQeamS5lYcXZ3O+gmiZAlqgUD0GFH1q6vIB6/Suc0yb7WgnupV WJPlC5xk/SuhSYMgaNcKBgACvIqw5XY7Yu4nXvR0PWiisjQKKKKACj1oooAT3ozzRRTAUUZo opAOBpN1FFFgDNANFFAATSZoooAM0pNFFACZoJ+lFFMBM0ZNFFABu560bvSiiiwBu9aXNFFA Big0UUhsSm55oopiFBp2aKKTEFHvRRSAcSCoHfNYuo+eI5D9pDJnOwjn86KK6MP8aIn8LOXl u5y/M0h2njLHio2uJmXmVzk+tFFewcNgWWQEEsdv1p7XLEcFgfrRRQwLOkvI2oxbSC5Y4LdB xXbR52jJyaKK8zGfEjro/COz60vQ8UUVxmomOKQUUUgFoNFFABiiiimAdqOtFFIA70ZoopgG aMUUUAFB60UUgCl7ZoooGFHsKKKBihXZgqkBves7xDdtDbojxKWOQT3/ADoorbD61EmY1Xoz imYu7FiSBTRg/hRRXtROQbtO7C1NDcyRNwxGeDjv9aKKckGxtW2qGW3W1dQgP8Y+vpWza3Jg lkcfPEiAc9TRRXBiKcVsdNGTktS9HKJIlkXuM4NO3e1FFee1Zm41sMpB6EYNZ0miafIB+5Kn 1VsUUVUZOOzJaT3FGh6cMbYSCP8AaNMm0K0mXDGQfRqKKr21RfaFyRfQq/8ACM2uR+9lx9RU 8Xh2xQkt5jA9ielFFN16j6i9nHsTtollwEDptHY1Kml2iEkIWJ9TRRWbqT7lKK7E628Ma4VM fQ08Kq9M/nRRSuykLwVxjr61QvmaGJWIKiFwyFT/AAnqDRRWlL4kiZ7XIZikztLCRHEOXkIz z6getYN3qixysLUFn6ec/wB78B2oor2IwUEkjz3JyeplSzSSuXkcsT1JNRjmiigBTRRRQAvH pRnPWiimAfSloooGaGjSRJckSswGMjHPNdTBeukOHCq+crnnj3oorkrxTeptBtI//9kKZW5k c3RyZWFtCmVuZG9iago0MyAwIG9iago8PC9TdWJ0eXBlL0ltYWdlCi9Db2xvclNwYWNlL0Rl dmljZVJHQgovV2lkdGggNzY3Ci9IZWlnaHQgMzkKL0JpdHNQZXJDb21wb25lbnQgOAovRmls dGVyL0RDVERlY29kZS9MZW5ndGggMzIxND4+c3RyZWFtCv/Y/+4ADkFkb2JlAGQAAAAAAf/b AEMADgoLDQsJDg0MDRAPDhEWJBcWFBQWLCAhGiQ0Ljc2My4yMjpBU0Y6PU4+MjJIYklOVlhd Xl04RWZtZVpsU1tdWf/bAEMBDxAQFhMWKhcXKlk7MjtZWVlZWVlZWVlZWVlZWVlZWVlZWVlZ WVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWf/AABEIACcC/wMBIgACEQEDEQH/xAAfAAAB BQEBAQEBAQAAAAAAAAAAAQIDBAUGBwgJCgv/xAC1EAACAQMDAgQDBQUEBAAAAX0BAgMABBEF EiExQQYTUWEHInEUMoGRoQgjQrHBFVLR8CQzYnKCCQoWFxgZGiUmJygpKjQ1Njc4OTpDREVG R0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmq srO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4eLj5OXm5+jp6vHy8/T19vf4+fr/xAAfAQAD AQEBAQEBAQEBAAAAAAAAAQIDBAUGBwgJCgv/xAC1EQACAQIEBAMEBwUEBAABAncAAQIDEQQF ITEGEkFRB2FxEyIygQgUQpGhscEJIzNS8BVictEKFiQ04SXxFxgZGiYnKCkqNTY3ODk6Q0RF RkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqCg4SFhoeIiYqSk5SVlpeYmZqio6Slpqeo qaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2dri4+Tl5ufo6ery8/T19vf4+fr/2gAMAwEA AhEDEQA/AJM0mTTc4FLmvEPRF3e9G/mm0UWAfuo3UwUE0WAeDTs1EDgVIOQaVgFHIpD90+tK DSZ60guUbrUnsRsWMZfkSBcsPoKqwzPLE7WsM/mk4MrgZFazKCMkZpwH4V2rFuMeVIwdBSld sxrbTrkyE3E0hiJyUZs7q0rWwt7NmaCPaX6nNWKWuedac92axpxjsHfFL1pO9GcVkWO4FGcU 3NGaQhd1ITTSaCc07ALuozTKKdgHFqaeTijHNNI5FAC5NITzRSdqYBSGg0UwCjA9aMUgoAXg GsTUdH82UywAkseVGPzrbpRVwm4O6JcU9zlF0i6jcMsbqexGK3o7vUVRVMG49Nx71fC8daB2 pzrOfxIShbYpG51M8iAfpTHuNUJyIsD2ArS6AetO/hzUc67IdvMzEl1NgcqF9MgU7/iZE8Mo 9+K0DSUc/kh2K8f23aA8qce1W0LgfMQ1RilJ4qHqMl3UE5qHcRThJilYCXdRu68VF5gzRuGT SsBJnjtRuqLdShqLAShqCc0wHijPNFgHA0bqaTTc+tFgJM+tHrTRzj3oB+99aAHZApM0zOPw pw5P1oAXNY/iEHZbsc4yQa2Men0ps0Mc67JV3LV05cskxSV1Y5qWdWgi2nkcGqhnAzWtL4fD TMUkAXOcHtUT6ARwpDfjXaqlPuYckjJMysrZ4z79aidxwOGHvWm2gTdFVf8AvuoJtIlikKMp 6dc8Vopw6Mnll2GWmr3NoQI3yg/5Zscqa17bxPE+BcxlM/xJyKxTp7YJ9O26iKxdnwicjgZN TKFKW5Sc0dbaanbXYZoXyB1zxU/nLngj864+K3kgjbh17dKXNwMcyYrB0I30Zoqj6o7ASDtz S7645WuRyDL+tTK15sJDSH2qfYeY/aeR1e8il3/SuZR9RL5VpQPcVYSa/UkMWI65IqHR8x8/ kb+7jtSbsD3rJhlu9hyNzdzVqPzz95qh07Fp3Le84pCxpiE4+cgn2p+amwxd5xR5hxTc0tIA 3dKQtg0tMYpjBI46800gHFzmnGSmKwdcqQw9QaKLAP3epp24ioQQxOCDjg+1OJ5B9KLCHljm lZuBUZOaUcgc0rATKwxzxS71x1qux5ptHKBZLD1pNwqsZFX7zAZ9aUHIyDxT5QJy/IpC/NRY pKVgCeFZ42QswVhg4OKyR4Yt/MDefLx9K11HvSkkcZrSNScdIslxi9zL/wCEdtsY+0zY9OP8 KsDRbDaAyFiBjJarWfeim6k31DliVW0Wwb+A/TcafHpdlESUhAJHrVjNJmlzz7hyrsEVtbxg bI1GOlS7qizRUPXcqxGKWhRk1HLcQx/Lu+fr7AetWk3sS3Ykoqml+jJCxAzIxGAfSnS3yCOV o1JMZHWq5JdguWqQVTF6xMo2cqu4Y71bicOoIxyM49KTi1uAuOKeKTrSr8x9hUjFzgUvbIpv enZ6j1pAJ0X60ooZemKKAAmjk0mDml60AL+NIeR1oxRjFAwHJpe9IKdjNIQ2kxzTscZpp4Ye lMBAPzpaTrSZoAdSYpM0pOKAExQRQTRzimAmKQilyaSgAxRiloFACEdKMYNLnNL2oARiSfal xyOaTtjvSigBwFOA96QfWncetSAhHBpvennpTQDjJoASg0pFGKYDcUYGKTntQM0wDFJijBpR 60AAFKBjmkFOzxjrSYDu1JQOBSdqQAelNp+OKZ0zTELu/SlB+nJpuKO4xQA/rSg+namjjqKF OckUDHhsGkz70h5J9qBSAM89aSlA5oNACUh5+8M0tB4NMBnlR4/1aZPsKURxqMCNB9AKXmlw cjgigBCAVAIBFJ0PAFKR260KOTQMd93FNBJxTnHANIPSgAJGKUYx0pvbNLkUAOPXtTR7Upww 4OD1pucUAOBpc0zNLmiwDs0maTOKTNFgHBuaoXdnALaY7ZCWBzsyzckE4H4D8qug0VUZOLuh NJnOsNQCQhI5Y4xnBSIgnnqVA44qSNb8KzZuCzBxgg8emK3smjNb+3/uoz9n5mOqzLpF4YFn EjSZTcp3nhe1ReXfxyy+U1w3EgXf04I2/pmt4cUnX8qlVrX0G4eZk27Xn9lXGPMM38AYEMPz FVil69qvzXAYI7ABWByMYHIroMYxS7dx4oVe3QXJfqc+w1Frifd5w/dttAU4PyjHbGc1BdPL HffZzcTAkgKS3GNvc+ua6g5AxnmqsthbSy+a8e6Q8ZJNVGur6oTp9mZ+lxrqEEkt2rNtOxcn jjqa11aNOCyqoHAziqvyW6C3s0APcDtS/Z027rqU5PbOBUTfM7vY3p07L3idLmNjtBBzU5AK jjmqiGz3oIiM/jVwHt071lJW2HJJbDeN2cUvAyT+VJjryKDzk1JIhxzS4BGD2oYcjpQe/PWg BrY7UuPlzSdfrmlLZOO1ADBmjmlA96UjnrTAo3c7xkgEflXOz6vNFIVEcRHqVoor1MJpFnJX 3RSfUZm/hjHphelILyVzj5Rmiiuq5hYfNLcxYLEAH0q3ody63rFnIVlooqKqvFpl0t0dWoJj Ug596kKkA4oorxW9TvsPHQUjDqRRRUgCtml60UU2AmKq3E6PCyo3zNlQeeKKK3w8FOaTM6jc YtoypruKNyXldmWPb361Xh1ZIFiG6RiCS/PBoor0nQhtY5VWm+praVdJNATk5dyRmtPFFFeV XiozaR2Rd0IfSmk0UVkigxjmlIFFFAhCBmgrzRRQAhWiiigYFaQLRRTEG3mjGaKKADAFBFFF ACGjBIoopgL70cjvRRQA8NxQG7UUUgDORRxiiikAm3g4pPpRRQMMcUUUUxMTFA4/CiigQufS q95FPLGoglERDZJx146fnRRQnZ3QPVGOt1NHeMJpZW8qQRAK2AeByfXNTtqk6gFkj+55nGeR nGPrRRXo8kXZtHPzNXHSanIsTMqLxG74P+ziojqU8geHaiyfN83OMBQfz5oopKnHsDmyUXk0 VnbFAjEwlyXz2pp1pxPtWAbFXLc88jNFFEacJboHJrZjY9XnniChERpM4bnGAufzp2lX8zvB byAYaIMG6ljgUUUTpxUXZBGTbWpEdcl84xeUu7dsznjP/wCqmPq9zM4SPYg8xcMAeRuxzRRV +ygtbE88u5M2szGWYLCu1SVUk+jAc1Il1cIJQu1n8xgdxJHAzxRRUOnFaJFKTfUQanNMwVFj QMUQ5znLdxV+zt5oM+dO0uQAM9sCiiuetaHuxNKeurLJpFIbJHaiiuc16AOaAOcUUUAgC80Y 5oooAUDn2pdvNFFIYhWnYoooENYYNGKKKLgGKQUUUwFx7UY4zRRSEAGaco60UUDDHNAIAooo AOtQXkvlRZXqTgUUVUFeSKgryVyIAWtvvIy7d6b5I2+dcHcD0FFFaJ9e5qnfXux8E6ySgJFg etWlPNFFTUVnYmqkpWQ/HNJjtRRWRmI2agnuktmQOCd5xx2oorSEVJ2Ym7ImxnmjbwaKKgYn QCiiimB//9kKZW5kc3RyZWFtCmVuZG9iago0MiAwIG9iago8PC9TdWJ0eXBlL0ltYWdlCi9D b2xvclNwYWNlL0RldmljZVJHQgovV2lkdGggNzY3Ci9IZWlnaHQgMzkKL0JpdHNQZXJDb21w b25lbnQgOAovRmlsdGVyL0RDVERlY29kZS9MZW5ndGggMzA5Mz4+c3RyZWFtCv/Y/+4ADkFk b2JlAGQAAAAAAf/bAEMADgoLDQsJDg0MDRAPDhEWJBcWFBQWLCAhGiQ0Ljc2My4yMjpBU0Y6 PU4+MjJIYklOVlhdXl04RWZtZVpsU1tdWf/bAEMBDxAQFhMWKhcXKlk7MjtZWVlZWVlZWVlZ WVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWf/AABEIACcC/wMBIgAC EQEDEQH/xAAfAAABBQEBAQEBAQAAAAAAAAAAAQIDBAUGBwgJCgv/xAC1EAACAQMDAgQDBQUE BAAAAX0BAgMABBEFEiExQQYTUWEHInEUMoGRoQgjQrHBFVLR8CQzYnKCCQoWFxgZGiUmJygp KjQ1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoOEhYaHiImKkpOUlZaX mJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4eLj5OXm5+jp6vHy8/T1 9vf4+fr/xAAfAQADAQEBAQEBAQEBAAAAAAAAAQIDBAUGBwgJCgv/xAC1EQACAQIEBAMEBwUE BAABAncAAQIDEQQFITEGEkFRB2FxEyIygQgUQpGhscEJIzNS8BVictEKFiQ04SXxFxgZGiYn KCkqNTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqCg4SFhoeIiYqSk5SV lpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2dri4+Tl5ufo6ery8/T1 9vf4+fr/2gAMAwEAAhEDEQA/ALGaM03tRmvBPRHZoptHvRYB5oplG7FFgH0tNB4pMnNADu9K DTO9Ozz1oAdRSUgPpSGPqKSFZE2npnNOzSmmroE7bFG7IjUGbJycADpVm1ZWgUrkCknEbL+9 ClR69qjF1AiAKGC9BhcCtlGU42ihzqxUUnuW80m7moYrqKWTYpIbGcEVNWUouLs0SmnqgyaQ UuaPSpGGaQmlNJQIOcUnelHSjFMBDSU40YwKAE7UhHFKKKAGyMscZdjhVGTWbHd3d9KUtIws fQM3JP4dq0Z41miaNhlWGKxbG8n0q8MDdB0J7iuijGMr33M6jaWhabTUtQ013I8svbd/ICs2 9vS5GDnsB2q3qd8bqbceF6LWJcvyc9fWuuEerMGyvJJsU5OTXS+HtLWKJbuYZlYZX2Hr9awN LtvtmpwRNyM7m+gru+BgAYA4AFZYmpyrkXU0pRu7sU0nvSE5pe1eedAlAwUz6nFAwKVACopg JmkJyaVunSkoATnNAGDS1FPMsanLqG6DJ7+lUk27ITdtx+2kxis65ublS3llexxx+NRS6rsB 3Hb8wwQO351v9WqdiPaR7mtkE8UtZtjqkV3KscbKXOSRyMAVpe4rGUHF2ZaaewoPPFHuKB0F GM1ABupAcg07AxzSdBTAD2NIBwKXqKOlACdTjtXP61osbK1xbgq45Kjoa6EUoxu55FaU6kqb uhSXMrHK6Rb26MpmTfu4x1xV3UIl80FV+RhggZ4puoQ/Yb9ZFGI5BnHoasTFGhVQmMDOOtdn NzNSRzNW0Zy13EIZyF6VNo8xg1S3cf3wp+h4qTVEw4deneqURxKjDqOfyrqXvRsyNmeknrQK arB41YdGGRTu1eEzuFFFJRzSAWkopTQAUUCigBQaQ07AC5NNoAKSl70UAFFFKKAAUuTSCj8a AFBxSZpB70poATNFIaM0ALmjNJ2opiDNFJRQAvelpKDQMTApGUEEetLRQBUS0JQxMfkU/Ke9 TiBRzk5PepaCapybG5NjCmVIya4iUCPTGTrmRhnHPeu4c4jb6GuDlctpyemeuPeu3B9fkceI 6HV6KC+lWzdPkrQC4qloYxo9t3+Sr9clV++/U6IfCgooorMoKTFLRQBW60maUijFaAJniinY xSgcUANoHv1pxGaTGKAEJ54pc0Y5o70DExmnd8UnSgdD60ALRUZpQ2OtFirD6CeOoqvJP8+0 Z6daiW+aUC3jgViDnzK6qGGdTV6I56tVQ0W5dfy4sEssrt69FrCv7C6vrkFbhY4vc1YuNXgs btoJo33gegIH5msqXV7u9DiF44lB7DnFet7sFZHAuaTuXrtYbCKCGKXLp1JPzE1tWz+ZAjnI yM4PauSsrKee6LO/mOe5zXWwrsiC5yQOTXm4ycZWsdlCLW5IetFIKO9eedItFNJozQA7FApM 0Z5oEOo7U3dSF6LAOOKTvTd9IW5p2ACao6nZfarclOJl5U+vtVwnIozzVxbi7oTV9Dk1kaRD FJlXXjB9aqz5djnrir+vR+Tfo69JFyfrVNiGVema9ODTSaOVqzsbHhK3zNczlfugIDXSnrWP 4XP/ABLHx/z0Na3avNxDbqM6afwgSKSjil7ViWIelLn5eO1IT8tOB+UD2oAaTxmk/hzS9Rj3 oxkHFMBBkgVj6xKcPGCwwc4Kj+dbK59KpX2n/apclh83Xj+ta0ZKM02TJXTRw07v5rb2J555 pj9OMk109x4WeSVminUKTzuFVZPCtyu4rPH7Dn/CvUWJpvqcfspdipoILXhAID7TjJx3FdpG GEYD9e9YFn4duITvjnUHpk5zV1bG/Riv2rPPXn/CuLESjUldM6aacVZo1MAUVWtoZo/9bN5h +lWa5GrGoUho6UUgClNJ3ooAPelpKKBFfULb7TaOuMsOV+tYlqxIwT04rpQc8Vz1zGbbU3VR wx38e9dVCWjiZVV1Keoxs0ZBTAHNYvRhiuu1GANYCQAkr1wK5ORdpIPUdK76bujnZ3mjTedp ds+c4Tafw4q8a5XwteFJWtDna4LJzwCOtdUeBmvKrw5JtHVCV4hRSUtYlhnmlpKKBi96PekF FAC5yaKaDS0ALRQKSgBaKSlxQIq3l8tm0YZSQ5xkdqrS6xGhTAG0kq3PIrH1yV4pAzAj5SBk e5/xrnGldgdzH6Z616dLBwlBSZzzrOMmrHpkUqyxK6EEY7Gn1zfhSRRbsjN85PAJ6/hXR1wV afJNxNou6uFJS0mKzKCkpaSgApaKKAEpaKAKACiijNABiijNAoAiuW228reik1wBJ+xxr6mu /usC1lJ6bD/KvPWcG3hHevQwWzOXEbo7fQlK6PahupTNaFU9IB/sm0z/AM8l/lV2uKo7zZ0R 0ihMUUUVBQYope1FAFXnnmjNFFaAAp3vRRSATjNIaKKBiUZzRRTEL2oHTrRRQMjdhxVe5lNv IiyHLN0RRz+fSiivRwlKElzNHNiJyjoiO6T7Pbma9Y7Ovkx9fxNZQ1Oa7l2WX+jQp0C9T+NF FdlSTjHQ5oJN6luDRRKTJeOZGbnk5J/GtG30+1tgRFCik98Z/nRRXjTqzluzvUIrZFpFVBgK APbil70UVkUHeiiikAUYoopgHamk0UUIBM00t6CiiqsA3dTSSQaKKYBkil3c0UUxFLVbQXlo VU4kX5k/wrklkOWVu386KK7cM200Y1VszofDF7Goa1wQzNuznrXR0UVzYqKU7o0pfCOBFIcZ zRRXKaBkYPFKeh6dKKKABeuQKCdvGKKKAEXOetBOG4Ax70UUAODGkzzmiigBNx9aQAjvyaKK AEYdx1pATnmiimApBNB5xRRQAhNFFFMBBzRRRQA4HmsPxF+7lt5RncQVPuKKK1ofxERU+Fj1 umjiRSAy45U81jTQLISR+A7Ciiu1abHMVYRNaTrNCQGjOQDXS2PiSG4k8ueIwMehB3A/pRRV TpxqL3hxk4vQ3AeAfWjNFFeSzqE3c4pN1FFFhgWpC9FFNIA3e9LmiiiwC5oB4oopAG6lLADm iigDOutJtLpTuUrnuprPk8L2xUbJnBHqAaKK2jWqR0TJcU90SWuitanMVyFK8g+X/wDXrVij nR13XAkXuCmD+eaKKmdSUtykktifPNBNFFZgGaXtRRQAhOKO1FFAC0d6KKQB3ozRRTEGeaM8 0UUAV759tlOSM4Q/yrz9jxEnIOKKK9HBfCzmr7o6W18RJHbIn2V8IAv3xVg+JbZR88EwPtg/ 1ooqnh6bew1OVizFrlnIm7c6+zL/AIVYj1K1kOFlyfTaf8KKKxlh4LYtTZOsyOMqc/hT80UV xyVman//2QplbmRzdHJlYW0KZW5kb2JqCjQxIDAgb2JqCjw8L1N1YnR5cGUvSW1hZ2UKL0Nv bG9yU3BhY2UvRGV2aWNlUkdCCi9XaWR0aCA3NjcKL0hlaWdodCAzOQovQml0c1BlckNvbXBv bmVudCA4Ci9GaWx0ZXIvRENURGVjb2RlL0xlbmd0aCAzODUxPj5zdHJlYW0K/9j/7gAOQWRv YmUAZAAAAAAB/9sAQwAOCgsNCwkODQwNEA8OERYkFxYUFBYsICEaJDQuNzYzLjIyOkFTRjo9 Tj4yMkhiSU5WWF1eXThFZm1lWmxTW11Z/9sAQwEPEBAWExYqFxcqWTsyO1lZWVlZWVlZWVlZ WVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZ/8AAEQgAJwL/AwEiAAIR AQMRAf/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkKC//EALUQAAIBAwMCBAMFBQQE AAABfQECAwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHwJDNicoIJChYXGBkaJSYnKCkq NDU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6g4SFhoeIiYqSk5SVlpeY mZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2drh4uPk5ebn6Onq8fLz9PX2 9/j5+v/EAB8BAAMBAQEBAQEBAQEAAAAAAAABAgMEBQYHCAkKC//EALURAAIBAgQEAwQHBQQE AAECdwABAgMRBAUhMQYSQVEHYXETIjKBCBRCkaGxwQkjM1LwFWJy0QoWJDThJfEXGBkaJico KSo1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoKDhIWGh4iJipKTlJWW l5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uLj5OXm5+jp6vLz9PX2 9/j5+v/aAAwDAQACEQMRAD8Av0tJzmivnT0RaKTNAoAxtZTZJs3lUmUjaBwTXLbdjHIwR1Fd vqUH2izcYG9fmUntXMX9oyhJ0V2V1yzY4DV6mEqLlszmrwvqijFIY5Q65GDXd2Miy2kTKcjH euOtdNkmYbvkBGQOpNdfp0Bt7GKPGCBz9anHSjJKz1HQUle6LdJSUZHrXmnQLmjtmkpeO5oA UUU0EFcg5poYMDhgcdcUWAkzRkUygniiwDyRUFxbQ3Kr5yK+OmR0p4YMMggj2ozVK8XdBuU2 0yBjxx9KBpNtggjP1FW849qUHmq559xWRRbR7U9Bj6CiPSLZTyAw9CKu5oBo9pPuHKiudNtM 8QoPwpV0+1U/6lPyqfNGaXNLuOwLFEg+WNR+FOKr6DH0pu6lzU6jHAAdhS5xTAaCwxSsIfuo L1HmgmiwD9/FOV6hzRnAp2AmkdY0LscBRk1x4mN7fSXLElC3y57AVr67dYtltUOZZuOOwqjF YSw2vJG0CvTwMYU3zz6mNSWtiOWXHINZ00hyfWm3NyMYB/xqnJKWHWvZckQ3YdJIB05NVzlj k0EgdatWml3t6w8mFlRud7jC4+tZTqKKu2TuVS3HXAqxZ2NzfOFtoiQerngCur07QLWzUNKB PKepYcD6CtZVWNNsahFHZRivNq49bQRqqT6mVpOhQ6epeYrNOf4iPu/StY9qTr1pR615s5ym 7yZskkrIQ9aCMEUHrnvQakYmPk5PSkGT+FO4xRjincBB0pwPNNxR39qQCnpXK+IrBrW6W+hA EbH5wvY11RPFRyok0TRuNysMEVtQqulPmRMo8ysYNtOJEV1Gc8/SrHn7t4A3BR196xismk3z QOGELH5CR1FaUDjYWyCpPY19HCSnFSRzDbmXCln4B4NY95Hy2B15FbDlWAPbrhqp3Q3liMU2 tAMQglSKaOnqKllGJCOlRdDwOtZSINTw5MIdYiJOA/y131eYwP5cgbOMHOa9Hsp1ubGCZTks gz9e/wCteTj4aqRvRfQnoopK843HVHKR5Emf7pp9NkGYnHqCKa3A5bdkR4AIA5GetQTQNGhS dufvKgPFTL9pCSxwWxkY99mSKjuIzFEJNspm6YYcLXrpO4nJGJclivy4UKSCM967LwqcaUFH Zq42eOUghoieeo6mtrRNUawgETpwX5PU08TByp2Rzwkua52XekNYsOvxO6K64J6n0rUt7gTp uCso9xXkypyjujoUk9ic0U3NGagY7NIKTNGaAHdKKTNB4oAWkNGaKAFopM1SvHvQ3+irHs2n JY96cY8zsJuxdoIxWHa6ldi1kup1V4VbYqpwSd+KtWeqC5ufJeB42wx5IP3W2n9a1dCSv5Eq aZod6Wsg64ig5hYPu2qpYAn6jPFKmtB5VX7M4GVBJI43HA4p+wqdg54msO/elA5rFbVyzo2x owu8tGcEkBSefTpS/wBvAnaLaTzSwCpkc5GetDw9TsHtIm0B1qvf7vsFwFBLGNsY65xRZ3P2 m1SYIU3joe1SljWSTjLXoVujiNQZ5xGkMMgCjoVPHpXVaXZR21lFiNRIygscck1a6HI/OlLH 1rrr4p1Va1jKFJQdzO1+AyaXIEQFgQeB71zF0kGY5IZNxHDDHpXbM3ynJ7VwTTTGB/mwquQV 2j/Oa6cDU91xZlXWqZd0/ddalAsQ3BWy30rtDxkdu1YXhhFXTVlwA7kgkD3rb5x1rlxdTnnb sa0Y2jfuO70Z7Ug607iuQ1E7U4GmjGaCRmkA3NGaZmiqsA/NANR596XNFgH59eaa6pJGUdAy nselJmjNMBI4YokVUQAKMD2qTPvTPxooeoD8+9YuoWHk2012J5GliHmJu6Aht3/1q2KRgGUq wBB6g1UJuDuhSimjm7e7uLPy1WVWZ9rGMjmQtySPpVrT9Smu3ljkkVgISSABwc4rZEUeVbYu 5RgHHShIo0JKooLdSB1reVaMl8OpCg11OctdQuYvsFtEwVSq9dvOWIPXnj2pdBR472JftDYl hL7TgAncR+fFdD5UWVPlrlPunHSl2Rphtqrt4Bx0pyrxaaUdxKm7rU59dQvykchuFIbnbsHT djrVjTtRubnUZYZNvl/N8pxlcdO+fzrSaS3HAUHHotLE0BkJVAHPfHJpSqRafuFqlNa3OftL 25s7N9jhkKOyrtGU/e4zn8e9Sf2pfeQriRfljLHCqd2GwOhwK6AQxgY2LgjHTt1pViiUYEag YxjHam68G7uJHJLuY1gj6rE0tzKcrlFKleQfXGea3BwMDoKakaRrhFCj0ApawqT53psaRjZB ml3UlFZlC5prAMMEZHvS0maBC9qM0UmaADvRnmik70xiil4FJnFITQIdx26VHLKIo2duFUZN BPvWPqc7XLmzizgEb2H8q0pw5pWJk7K5HYI19eNeydM/KPQCpNUu8AxqRj3pzyraWwgiOGA5 9qwbmYEtzlRxmu+MeZ36HM2VZ8Mx45qKKOSeVYol3O3AAqa3t576fy4lJya6zS9FhsSsrfNM B17CtJ11SXmOEXIg0rw7DbbZrvE0p52/wr/jW7x2oPpR0FeVOpKo7yZ0qKWwlFFFQUFGaO1I TQAE0U0mgk0wFzTu1NBFHfFADs8e9JRR3pANoH86U+lIKYitqFlHf2rQygbv4W7g+tclHLLZ ytBMMMjbWGcZHqK7frxWVrWlLforxsEnj6H+97V3YTE+yfLLYznG+qMoyKRuTpULOucE49ag iuWgd7e4XaynpRI6NnJ4Ne2pJq6MCCdQ3TGc5qoRyfSrsoywI5qtKu05HQ9qiSExiKCwBOAa 7jww+7SsZyY3IrhyCCDXUeEp/nuIexAcfy/rXDjI81J+RpTep1DcE0hoBpDXiHSGaKMUUwGs it95QfqM1GYIicmJCfpU1FUpNdRNJlNtNs3bcYBk9wTUR0axMit5PA7bjg/WtGgU/aT7i5V2 K0NlbW5Jht40PqBViloAqW29xiUUuKKQw7Ud6WjFABjFGM0YpwFIBMUh4pSKTPIoGMd0jG6R 1RR3Y4FN86I7h5iHH3vmHAqtqFk1zNbuNrLExLI3RuKzk0OUFvnQZVhwPvZ9fpW8IQau5Gbc k9EXy2np5doPLKzMSqg5BIOf51IiWSt5yPCCNw3bh3OSPzqkNIeO4jki8sbJGZQRwMqB/Pmo odDkUnzWRgXDkY4+7g/rWnLB/bJvLsTzW2nRkBbaOSOVgDsOSD69elWUttPVG2+UAuC3z9Md M81nW+hzQ+X86YVlYgd8DmpE0eSNX2NGN6hW46/Nn+VU+XbnEr/ykjjS7cuqRK7hN+1Dksp+ Xjn60+8sLWeMqjQRPwX3DdgYwO4xVOLQ5Y4nXchLR7M9x85b+RpX0aVnlO9fnLHOOWyQcH6Y p+6ndTFr2LUd5baZaRW+5pgq/ejAPT8a0g25QQPwNUdPsBa+cGCkO+5QB0FXHcLGzegJrnqc rfumsUyJ5QZhGu7JGTjoKmK8DBqim5YQAcSTd/Sp4rhFVlOQsfBY9zRKPY2lDsTMvykmuDIx Yux6u2c/jXcGdHhdkYNgHiuKkXOlF8dHrrwl1e/kcGJWyOi8Mr/xKumBvPfrWxg4HNZfhsEa ShPQk4+ma1etctZ/vJG9P4UJRS0DrWRoFJSmjtQBECcDPWl70UVQCUvaiikIKM0UUAAozRRQ AUtFFAwooooAWqkp8133H9yn6miiqgXAEeQjKhVTtU0IcktIF9iKKKcmOTJe9FFFZmYZoJ4o ooASjNFFMApD1oopiEzSbjmiigBCSaQ0UUwHE8Uh9KKKQFPULv7NDhT+9fheKowr9mjZ3HzN 09z60UV200lFeZhUeplXMrl3y3J61QIeedYk6kgY9TRRXVHRGR3GnWEdjbKqj5yPnb1NW6KK 8dycndnYlbRAORmjNFFIYdqQ0UUwCm0UUANJ5pSc0UUxAPWloooAXrR2oopAA5FKRlPeiigB p4NJ3z60UUwMfXNLW5jM8QAmjHXPUVyayEEg/iKKK9XBTbTT6GFVLcc0pLfLnFWksnMDtIeS PlGaKK6Kk2tDEpbSWxnvW14XfZq4UdHRh/X+lFFZ1dacvQqHxI7McE/WncHrRRXhHYH0pKKK ACkoopgHeloooAMUYoopCDGKKKKBhS0UUAFLiiikMAOaCOaKKAEoNFFMBKO9FFMQUvFFFIBp pDRRTAYDzzUdwMwSAdCpH6UUVa3BblbeC1rIOmDUZUyLNAPvBt1FFbbf15m7dr2/rUdBbPFC 5bAyDn34rmCQ2iNyc7s/yoorpwsm738jzsU+aSbOm0MbNJgHqua0FPFFFcdX42bw+FDqUUUV kUJRRRQM/9kKZW5kc3RyZWFtCmVuZG9iago0MCAwIG9iago8PC9TdWJ0eXBlL0ltYWdlCi9D b2xvclNwYWNlL0RldmljZVJHQgovV2lkdGggNzY3Ci9IZWlnaHQgMzkKL0JpdHNQZXJDb21w b25lbnQgOAovRmlsdGVyL0RDVERlY29kZS9MZW5ndGggNDMwOT4+c3RyZWFtCv/Y/+4ADkFk b2JlAGQAAAAAAf/bAEMADgoLDQsJDg0MDRAPDhEWJBcWFBQWLCAhGiQ0Ljc2My4yMjpBU0Y6 PU4+MjJIYklOVlhdXl04RWZtZVpsU1tdWf/bAEMBDxAQFhMWKhcXKlk7MjtZWVlZWVlZWVlZ WVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWf/AABEIACcC/wMBIgAC EQEDEQH/xAAfAAABBQEBAQEBAQAAAAAAAAAAAQIDBAUGBwgJCgv/xAC1EAACAQMDAgQDBQUE BAAAAX0BAgMABBEFEiExQQYTUWEHInEUMoGRoQgjQrHBFVLR8CQzYnKCCQoWFxgZGiUmJygp KjQ1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoOEhYaHiImKkpOUlZaX mJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4eLj5OXm5+jp6vHy8/T1 9vf4+fr/xAAfAQADAQEBAQEBAQEBAAAAAAAAAQIDBAUGBwgJCgv/xAC1EQACAQIEBAMEBwUE BAABAncAAQIDEQQFITEGEkFRB2FxEyIygQgUQpGhscEJIzNS8BVictEKFiQ04SXxFxgZGiYn KCkqNTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqCg4SFhoeIiYqSk5SV lpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2dri4+Tl5ufo6ery8/T1 9vf4+fr/2gAMAwEAAhEDEQA/ANaop5lhjLM6qewZsA1DZ3i3VsZEIfBI+XvXO61f/aWEKNle rAjBQ+leHSoSqT5TvlNRV2Qarftey7I3cJ/GpbK59qzADayrLGx3A9amJWNM8DH61LYWUt9c JlT5Oc5r21GFGFuhwtyqSujq9In8+3DmYykgZyuMVo1Ws7VLZcKFU+g6CrPbrmvn6jTk3HY7 1tqAoJA5JAqpfXsdiiPIQA7bc+lc/c+IHYt5ahsjBHY+4rSnh51NUhSnGO51lFYWkaybuTyn IVlHOe/0xW4DkZrOpTlTfLIcZKSuhaKKKzKClFJS0AKKKKKQBWde4bULNTjALEZ/CtGsrVSy Xto4HHzD+VdeC/jIyrfAzUbUVh+Vl/FaoS6ixZ8MSDwBms66uuG+b6iqCXoLckZzxXvJHAy3 qCrdQEufm/hI6iuWkd432uhBHXNdAJ8v83NQXFrBcNuZefWqWgrmKssjkBQc+1bNqn2e3G45 Zvmb29qZFaQwNlV+YdMmiaeNF5YFvSh6gQXTNPIsKAsSeAPWuv0fT0060VQP3rDLt3rm/DkT XepmZgCkfJPbPau0OK8rMKz0pL5nXQj9oCfSjNJRXlHSLRSZpc0AFFGaKAA0UUUDCigdeaoa hqcdmpUDzJz0jH9auEJTfLFaibsTXd7BaRlpXGQMhQeT+FcvdXdxqcuZCyQfwwgnH1NTNBcX kpnuj1H4AegpzokIIXn1PrxXvYXBRpe9LVmMp30RAiLGgGACKhkY846GlaQsaid8H3r0SCI/ WoJHBznoOKfJKFBHc1VlbcABnpzUSYmR4yxHQVEy88CpCcEn8KQnuOo5qGSiNCV9xnpU6yFR kNzUDcNnAGat2Onz6hMI4RhQeX7KKlzUFdh6Fi3vJI0G45HT3rTjuFf7pBOOvenXfht41DWk hfA5Vu59qx1MtpcFZVMb45U8UUsRCr8LNGmtzb5LNgcdeO9MdDjoMHrxTIJ/3a8l/XFWDnqP TpW5JTkhG35R+lZl1Fgkjvz9K2mBIOAQD3rPu4zgkDpQwMhue3WmFfUVPKpBPp1qInJ/GsGi GFrPJa3KSxOUdDkEHH+c9K9O069jv7OO4j4DjJGeh9K8tI9eRXV+DL4K0tk7Dn5o/r3rgxtL nhzLdF0pWdjsaKTIAwaCa8Q6h1J0pu40ZzRYB2arXrNsVFJBdgMj8/6VYqOWIOyMxxtOf0I/ rVR0ZUWk7sptty7YHlx4VU7Mff8AOpIZkgbZLIu5v4QMBaYzWqIVa4UEvu61Wkit7m83R3Ks xP3RXQoN6NP7jRTpvRs15pBFCz5ztGfrWTLMskSucsyAlm9T3/wqfUbhFtXRW+YY4PXrWYJH ZPIjQsX4Y46c134CnyxcnuediJapGho0fyGZup6VqZqvaRCCBU6ECrFediZ89VtHRSjyxSDN LmkpOK5zQSWNZQA+aqT3yWnyi2uXA/uJmrtIapS6PYLvYyn1+FRlrW7HsYiKgk8RWcg2vbzn 6r0rZeGOT76K31qL7BaE5NvF/wB81pGVNa2f3i16GfbXEVyGktt8WDghhgmm3Wum1uPI+ySy 7QPnB6/pWqttCn3YkH4Uj20LNlokJ9SKt1YS3RTk2jOm1p0dRFYXEisM5AIx7dKfFqs8kpBs JlUDOTn/AArSCgDAUAe1Lms+aP8AL+JJgDXL7ec6ZJtzwef8Ktw6pdum46fICeAM/wD1q1OM 8UZ5pucX9kCO3ed0zPGsbeitmpaQNxzRu71kwFOcUnakDZFJuyKBj80n403NGe5osA6j8aaG zQxoAdSFwv3mA+prCudfNvKwKxkK5XZk7vrVZ9QiubKaeWaXzvNIjjRiNi461208DUl8WiMZ Voo6gfWlrkrPxI1vbBJkaVgcBye3vW7p+oi93YTG0A5ByDWVXC1Kaba0KjUjLY0M0ZpmaXNc 1ix+aKZmjdRYDm9BQPZvFho2b+MZBNVtQ0p4fnQfPnBP8JH+NX9CikhUqy8Yz1P8j/MVrsod cMAR713yrOnVbiZKCcEmclbaNPcuBMDGOCoI4IrqLO1W2iC7U3dyowKmHHelrKtiJ1dyoQUF ZDs0Zpv4U1nVFLOwVVGSfSuexZla3ZebFuB475NcgVKuyscYPWvRGxIjKCORjNcjrFhLFNvS GTbnDOSDn8q9PBVre5I568LrmRm2szQzJIrEdjjjiu+snL2kTbcZUcVzGnaS4dWdQ5ZdwA6M PrXU28fkwKmc7RgfSoxs4ztbcdCMorUmzzQaTNGa843Fpc0maM0DFJ9KAaaTRniiwD81n6lI GeGHGT95m/ugVczWNq7kJJDjYZSBvJ6CuvBQTq3fQxrO0THlZ7yc21rlmY9e1Z13aT2cwSYb Xxng129hYw2UASIAkjl+7Vz/AImt/L1GOYjKOoBz6ivSo4znq8i2MJUeWN3uYyXMqKCQWB74 qX7e442kketdxbW8CWyJGibMZGBxS/ZLY9YYv++BWbzGN/hH9X03OPWV5LIvtO8nAx1qjNZ3 ELLJOjKrE7cjrXR3GxNYiRQFj84DA4FQ+LCftNr6BW/pXTGu3OMUt1cz9mkm30NbQLVbbTIj tw8g3NWnVfTlCafbruDYQcjvVivCrScqkm+52wVopBmjNFGRWRQlLzRS0DCgHmiikAUZ70lJ JIsUbSOcKgLMfQCnYRS1TUlsVVVG+eThEH8z7VmWdo0haec75G5Y1UtWe6uJbyYYZzhQf4Vr QkuUitwiHLY5NfR4XDKjHzZzzldjbqVUjCqeKzZpN5z2pruST6VWmnVQQBmu61hWsK8mOlVp ZcZx1psko9aqu/GPepbC455M9ajLce9N5HXrSZzmobJuKTuJ9qaX6gUAFuFycnjA5Jre0rw5 JK6zXqGOIHPlH7zf4VjUrRpq7YJN6IztL0q51KTKgLEvV36V29hZx2NqsEQwF6nualCLFEkc ShEAwABwKeeOhrxa+IlV06HRCCj6js1la7pqXtoXUYmiBZTjr7VpZ4zSkZrGEnCSki2rqzOB s5sMFOcdR710MLBlGRWLr9k9jqBdFxBKdyY7eoq/YTB41PX3r6SjUU4po5dnYvsmBwOKpTx/ lWjHhl5HNV5Y2wxI6nFbAc3dIwyOmKqgEKf6VqXsJU/eyO+RziswjaSD0FZyRLGVLZ3BtLuO dQSUbPFRsMHtj2ppyOn6Vk1dWZJ6jbXCXNvHOv3ZFyKlFc54QuvN0+SBmyYm4z6GuiFfO1qf s5uJ2xlzK4tGcU0nmjNZ2KH5qteKZLSRQTnGeDUvvUF67JZSug5A6GrhpJWFJXTRSiTT44lE sMjt3biq0hslw8EMkbepbGPpUCPcbQZWiRe25sE1QurqRHbcCOte0qsnpc890KiI73UMsw5Y jj5jW/4YnN1YySOvIkIDeo4riLglpGzkA/MAa7XwkAukEZ6uW/lWeMk/ZF0Ivm1N0dTS54pt HbFeMdw7dSZpBS5pAG40ZNHFHFAC7qTfSEUlOwDi2aTdxSUYoAN9IXC9TSU7H50wANkZHSgt 0pcAUhHFIBN3HNLu9qjz82KdTAcCBSZpKKAFzQTTaU9aAFBpc4Oe9RMxUcKzHsqjJrNvLy7j +75UA/2/mNb08PUq6xREpxjuaJhg8wyGJN55LFRmuO11EgvX+zsWWQbzjoCc5rQfVLodZ43B IBAjI4/Orc2oW39utAwh+yrDhcjHP/169PC4edJtyZy1aikrJFjSLS0SwCoFlDctnB5rRiij hTZEgRPQCubi1B7fUiYo/MSUfdBxyO9b1rdR3UXmR5AzgqeoNcOKpThJt6pm9KUZKy3LOaXd UdFcdjYeWpN1NoosAihVQBRgDinUUUCCjrRRQBm6nqCxWspj3FoyAccYrmZtVndwIyQBnG45 +X096KK9fC0oct2jkrVJJ2RpaFqU7yC3dsqBwOn9K6bhh9aKK5MbFRnoa0JNx1CONY0CoAo7 AU7FFFcZsHTikBPfrRRSGOzRRRQAUUUUAJXP+KJSghVc/MDRRXXgv4yMa3wM17SYfZIt7fNs GeKzfEDw3Fi21/3sZDLwaKKdKNqvMu45fDYk0vVYRYQrM7eYo2ng1YOs2g7uf+A0UVpUoQc2 KMnyowry7ibVklUt5e4P07ik1q8j1BoZI0YNGSME9R/kUUV1JWcH2RnbRo07fWQkKRiBiVXH 3qlfVZhGHSAc9MtRRXHKnG97GybGpql25x5KZPvVyKW9kbGIlC9Se9FFY1Eo7ItF0Zxz1pc0 UVzAFFFFABWD4iu2DRWSHAkG5z6jpiiiuvBRUqyTJm9Cpny0VAOBVaSQZwOPpRRX0yMClNL8 +0Eg+tUncL9aKKhslsiLsw9qaKKKliEJwcYyTwBW7aeGLiUJJcyKkZ52pyaKK4MZWnTS5S6c VJu50FnpVpYnMMQL/wB5uTV0nBz3ooryHJyd5M6UktgzgL6ZoHHBooqQClGSTRRQBU1OyXUL J4X6nlT6GuO0x2Sd7ZyflORz3FFFepl0ndx6GNVapnRW555Yg4qVj8oDcg/zoor1zMyr1CXk GB8grEuFw3aiipkJkJ+6DTSO4oorJkG74OldNSeMfcdOfwrts0UV4uNX735HTR+ESiiiuM2H CoLsb7WUH+6aKKcfiQI5yMFoy7gNhSBmqN6jGBJmO7PHHBFFFetH4hy2ZmT4AJILHGFbp2rr /Co/4lKN7kUUUsX/AAvmc8PjZudaDxRRXkG4lLRRQAhozRRQAA5ooooAKKKKACg0UUAGaQnr RRTAbijJoopgLmjNFFIAxmkYhEZz0UZooppXdgZj3Gutb2QmiQebKMrnnb6VgebLeO7TyPI3 XauBRRX0llCNo9DzfiepFKqxlT+8A3jrj/GiVs6gjdcYoopxd0D0ZJMxSaJlzkE966jRIDDY ksu0u5bGaKK4MfJ8iRvQXvXL9PA4ooryGdY0DijFFFAH/9kKZW5kc3RyZWFtCmVuZG9iagoz OSAwIG9iago8PC9TdWJ0eXBlL0ltYWdlCi9Db2xvclNwYWNlL0RldmljZVJHQgovV2lkdGgg NzY3Ci9IZWlnaHQgMzkKL0JpdHNQZXJDb21wb25lbnQgOAovRmlsdGVyL0RDVERlY29kZS9M ZW5ndGggMzY3Mz4+c3RyZWFtCv/Y/+4ADkFkb2JlAGQAAAAAAf/bAEMADgoLDQsJDg0MDRAP DhEWJBcWFBQWLCAhGiQ0Ljc2My4yMjpBU0Y6PU4+MjJIYklOVlhdXl04RWZtZVpsU1tdWf/b AEMBDxAQFhMWKhcXKlk7MjtZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZ WVlZWVlZWVlZWVlZWf/AABEIACcC/wMBIgACEQEDEQH/xAAfAAABBQEBAQEBAQAAAAAAAAAA AQIDBAUGBwgJCgv/xAC1EAACAQMDAgQDBQUEBAAAAX0BAgMABBEFEiExQQYTUWEHInEUMoGR oQgjQrHBFVLR8CQzYnKCCQoWFxgZGiUmJygpKjQ1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2Rl ZmdoaWpzdHV2d3h5eoOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbH yMnK0tPU1dbX2Nna4eLj5OXm5+jp6vHy8/T19vf4+fr/xAAfAQADAQEBAQEBAQEBAAAAAAAA AQIDBAUGBwgJCgv/xAC1EQACAQIEBAMEBwUEBAABAncAAQIDEQQFITEGEkFRB2FxEyIygQgU QpGhscEJIzNS8BVictEKFiQ04SXxFxgZGiYnKCkqNTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNk ZWZnaGlqc3R1dnd4eXqCg4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TF xsfIycrS09TV1tfY2dri4+Tl5ufo6ery8/T19vf4+fr/2gAMAwEAAhEDEQA/ANrNFFFfMnoh RRRQAUEZoozQB594ljZNRYlCqkdual8Lxh7/AHNwgXG49DXXajp0V8oDgZHqM1X0zR0siWcq 5/ugYAr0/rcXR5XuYul7/Nc1hwBTqaenFKOleYbC0UlFAC0lGaN2KAFoppNG7miwDqOKYWrB v72abXbaygkMaocvg9a1pUnUdl6kylyo6GgcGm5ozWVihfao5HjjxuKg4wB3p2apyo0TbgA8 0h4LdBVRV2VFJvUcbt84S3Yj1I60+G4D/I8TRnPAK8VTLRhiJnldx97a3A/WrtsmI9wdnVuR uPIrSSSWxpOMUtifaMn5R+XWhioGWxgc89q5TUNeurHWZE4e3HBQ8frRrOsfbNIWS1Z4wX2u DjPT2rZYKo3G+zOR1Y6+R1YCHnAx1o2g9QOfasTw3qTX1mY5Ml4cDd6jtW2fXNc9Wm6U3B9C 4yUldC4XGMDH0pQACSMAmm9qKzKHEijNMoosA/NB+tNoNFgCjPNJRQAUpIJpKTFMDC8Tab9r tvPiUmaLsO4rmLK4CPsk/X1r0TGeoyK4DxLAsGruI1CggNgV7GXYh/w2ZVI/aNGJ1454JqZH CSfKcisKzvdvEnbvWtGAQHQAZP517KdzK5qwzbW3ZwTVxXVvlXAz2rGViAD6U+Ocls8jHFDV waNeZFC7VORWbcRkcAZqSK6OMHJJNDEy57Yxwe9LYS0M6eHPSqEgKkDkjPWtSTGOTgmqdxEQ B6deaq4zNuYvM5Ucjv61nMCCQQRWxICi55IB7VTu4/l3hQAOvaokhNGcwIJ9RU1jeS2V3Hcw nDoenqPShgNuc1ARjmsGujIZ63pmoRajZR3ELZDDkZ6H0q1u5rzTw3rDabehXLG2lOGXPQ+t ekKQwBByDXz+KoujPyZ1QlzIk3UhemGkxXNcuw7caXPvTaDSAXNGaQdaKAFzRmikzQAtLSdq KAFozSUUALmjNJRQAuaM0lFAC1najd7Elj44TJrQrntaBW6wOkg5row0VKpqaU17xSsYkuNU RXYsuc4rriQo9AK5bRYhJqe4Y+UZrobuQJCxJ4HWt8X71RRHPWVjFubqSKe6YAfNxsPT61o6 ExOnANgEMRgVlpi9vJXAG3/CtXR4tlkDk/O5b+n9KrE2VO3XQqolyo0c0ZJptLXnGAZpc8U3 NFAC5pc02imBQ1DS0vpVkaVlwMYxkVny+HPmXy7g475Wt+itI1px0TE4pmAfDYwf9IOf92on 8OzY+WRD610eeaXNX9YmuouRHKP4ZmmXbKVAPoelUZPB8wkIR8qBkH3rueopMcVccZUWwnTi 9zjIfC8kbozqztzknpVoaJOrouw7T1P92upApcH1oeLm9w5Io5OXRrsICqMzA4I7Y9aVdGuv L5jO4e9dXyDSjOKn6zIfKjlG0a8VM7R06Dk1Uk0m6dWVrZ2BGPu12xJ6UmKaxUkDijz7/hGL kIWKyfTZzU6eGZfKY7Jtwxjiu7AAoq3jqhPs4kNFL2oyK4zUKMUoNGaBCEHFGKXNITQMKKTP FANAC0UmaKAF70GgUlAC0hooNAC0lLupM0ABHIrktKkWbxTK7c5Lba63NcZZwS2+rPc8YhkI Ydz616OCjzRqLrYwrO3K/M7SkNQJdROgYOMHmo2vox91Hf6CuSNCpLaLNXOK3ZaBFB5yPWsZ vEEKsVMEvBwcDNRnxPaDhUlJ9NtX9VrfysXtIdy3e/aISq26nb1yO5rQhZvKTf8AeI5rn5fE wPENpIW/2jWhp81xqUZZgIh/drdYOrNJNWHPEwaSOe8RWvmX8ksZB4GQKwlYKQGBKg5Ir0SS K2S5ELqpUjlu+azL3RrON98a5/GvYprkio9jz5O7bMvRbmOK6JtWwxUBkPQ10yanDj98DEff kH8a5qYW1rMxG1GYZJ9aPto2lUk3k/wjmsK2GhWd3uXCpKGx10FzDcAmF1cDg4OalrI0DT2s oWlkLCSXqueAK1814dWMYzag7o7YttXYE0maDRWZYuaM0lFAC0UlFAC5pM0daKAAkAZJwK4j VWS91WWRGyv3QfUCt/xBfG2thDGSJJePoK5yBNo/xr2ctoWvUZlUfQz7m2MMgK9DUlteNCQG JKj36VbuUDZFZkq4cj+KvWehgb8F4spCgAAD1zUzcMACDn3rmYpniY7D1rQgvS2FYfMO4qkx o1hJ5e5m/IU8zgxlcbWPeq0cyP8AK3JqZgNm7oabGSgxtgDnAqOYZyCOg600bkGEp0jYcAd8 ZpC2M2RDkggCopF3KSQGA65q/cIQx6VTZMdeh6imwMtxtOAvB6D1qB1wcdqvXMHzB1JGelVH GQM96wkiGiAAYP513nhDV/tVr9jmb97CPlJP3hXCkVLZXUtjcpcQtiRD+dc1eiqsHEIy5ZXP Ws0E8VT029S/so7iM8OOR6HuKtfWvnZRcXZnYtdUZ93qctu0gSxklVBnfuwDxmqTeJ4/NVBb EhtoVt/BJxnt2zW46h0ZT0IxWTH4es0WBfmIhYsMn1//AFCt6cqNvfRElLoyeDWbe4P+jI8m CCe3y4PzD1HFNXX7FmQFnG88Erj8fpT7LS4bFXSLoV2Anrj61H/Ydruhf5iY1CcnOQKdqF3u Hvj7zWFtb5bUxjlQxdmwP5VWbXyFib7IzJMrmPD5J2nB4x+NXruwS6IEjHbxlR3x71Fb6TBb zxyhnPlbvLUnhdx5oi6PLqtQancdp2qpfsy7BEw7FuSe/HtUVxr1rCJgu93jBwAMBiOoBp0G i20F0lwm7ep3ZJ6n/JpjaHauWO59uWIGehPWi1DmvrYPfsR2OuTXhfZYudhAPzY7ZrXgleSC N3jMbsoJXOdp9Kr2VjHZGXyyT5hBOfYYq19ayquDfuLQcU+o7NGabkUVkWOzRmm0UAOB5rF1 /CiJ8Z5xWweaxtXPmukZHy7uv4V04VP2iZcFqT6DEqWfm4G52PPtU+qnFjLx1qSxhEFpHGvQ DPNN1LLWTjHNLm5q9/MW8jDsWwPLQfvJOMDsO5rpI1EcaoOijFY+j2YV3nbqPlH41sVeLneX Kiqju7Ds0bqbSZFcpmPpKBjFFIANKKSigBc0ZpKKAClJpM0UwFzRmkooAQgEgkcjpTt1JRSA dmjNNooAdRmkpM80CHbqM0lFAEO7ikycUUVYyG5uBbxlmBJxkD1qrHq0UrhVUjj5s9qKK6qV KMoNsTZfBzS5oorlGFKKKKADNLmiikAZozRRQAlLRRQMAKKKKQBisa+tfKvFmQcTHawz3oor rwcmqqt1MqsU4M2NO0yGNQzDJq/JDGu4IqjI9KKK9w4DitSY2twQVBB5GOMe1Zq3Kb8lB+Ao orRbBYlN4irkJzWpouqCKG4+XLZ4P4f/AKqKKHsIqahdlA0gznqKq2d3fanP5ETqCerN2ooq Kj5KUpLdFQXNJJmn/wAIy0o/f3mT7R5q5Y6BbWknmMfNcfdJGMUUV4M8XWkrOR3KnBdDXpKK K5TQKKKKYwpaKKAEooooACOlR3E6W8TyyZCKMniiirpxUpKLE3ocZPO+oXjXDZCnhV9BT9ux QetFFfWQioxSRzN3K7tmqNwhznv1oopsRWOTyODSB8nbjDetFFZ3JZdhusP+8GT6itCG687K g8Drx1oorRMpF+NlKgCkYDcMZz7UUVTGRPuyd43ZPbtULxnHXiiikhFOVfMVh7ZFZswAPPXr RRUyEyFhhqjb19KKKxZDOs8E6hh5bFs/N86H37iuyzRRXh46KVW66nTRd4hSUUVxGoE0oNFF IBc80hOASegFFFAyjJI9yrPvMcI4wOpqWzdGiPlqwUf3jRRW8l7rN5r3WWs5NUr+8MK7EH7x uB7UUVrg6cZ1bSOKtJxhdFfS53MzI7Ft3Iz2I61q5oooxsUqrsKi7w1DNLRRXGbEF1IY48g4 5qrBb+bceY5yq8gHuaKK6o+7RujXaBo5x9KgvJlit2DLncOKKKyoq80RHdFfTXBjZPQ/nV2i iqrq02EtwBzSfhRRWIhRS0UUCEooooAKM0UUAGaM0UUgFzSZoooAKXNFFADJZRGoJBOTjin5 ooqmtExdQ3UZooqRi5ozRRSA/9kKZW5kc3RyZWFtCmVuZG9iagozOCAwIG9iago8PC9TdWJ0 eXBlL0ltYWdlCi9Db2xvclNwYWNlL0RldmljZVJHQgovV2lkdGggNzY3Ci9IZWlnaHQgMzkK L0JpdHNQZXJDb21wb25lbnQgOAovRmlsdGVyL0RDVERlY29kZS9MZW5ndGggNDk2ND4+c3Ry ZWFtCv/Y/+4ADkFkb2JlAGQAAAAAAf/bAEMADgoLDQsJDg0MDRAPDhEWJBcWFBQWLCAhGiQ0 Ljc2My4yMjpBU0Y6PU4+MjJIYklOVlhdXl04RWZtZVpsU1tdWf/bAEMBDxAQFhMWKhcXKlk7 MjtZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWf/A ABEIACcC/wMBIgACEQEDEQH/xAAfAAABBQEBAQEBAQAAAAAAAAAAAQIDBAUGBwgJCgv/xAC1 EAACAQMDAgQDBQUEBAAAAX0BAgMABBEFEiExQQYTUWEHInEUMoGRoQgjQrHBFVLR8CQzYnKC CQoWFxgZGiUmJygpKjQ1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoOE hYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4eLj 5OXm5+jp6vHy8/T19vf4+fr/xAAfAQADAQEBAQEBAQEBAAAAAAAAAQIDBAUGBwgJCgv/xAC1 EQACAQIEBAMEBwUEBAABAncAAQIDEQQFITEGEkFRB2FxEyIygQgUQpGhscEJIzNS8BVictEK FiQ04SXxFxgZGiYnKCkqNTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqC g4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2dri 4+Tl5ufo6ery8/T19vf4+fr/2gAMAwEAAhEDEQA/AOgxRTsCg4xXy56Jna0caXNk8HA/UVzO nYk8RWwBDFCST+GK6TXsjSJ2Azjb/wChCuP0y5EWtxy9Rux+dejhY3pSt5/kYz3R6AaSmmRT /Gv50x540XLOoHrmvPszYmyKKzY9XspJmi89AwbAyfvcZ4q4sqMMhx+dVKEo7oE09ibFJg4z nimg1U1S9FjZvIylh0wKUYuTsgI9Q1i0sDtmkAfGcVWgvotcjeGIFQozvxxXE3DT39yZfLdi 54AHSu78PWP2DTwrLh25Nd9WjChBO/vGUZuT8ipB4Yt45xJIxdB/B2Nb0UaRIFiQIo7AU7NG a46lWdT4maKMY7C5NIx4P0ozRmsyjhLWe7TUbeNnZraW+ZlOehBII/UVqXrSR625e5Gx2Cqq ykNH8vXHSui+zwDbiFPlbeOOh9aRrS3eUytChkIwWxya7XiYuV7dDFU2luZGlyJJ4fcTTbhl lLs+O/c1z8NwzwTLPMyiCKRrfDnHmBuNp79q7ZbS3SExLCgjbquODSGzttqKYIyIzlRt6UoY iMXJ23YOm3YrXt1A+l3DyTFVjGJCjYIPcfWub+0yQ2kCsWeBWM3yksBzwhNdebaFkdDGpVzu YY6n3ojtoI4jEkSrGeqgcVNOtCCta45QbYuRPak4O10+nWvP2nuyR+8fbIRZdehUr/8AXr0T gDFQ/ZYMAeUmA2/p/F6/WlQrqle6uE4cxma82yCzjdykDyhZSDjjHc1mLM7aZBHLI32NrooW 3H7nbn0rqpIo5oykqh1PZhmmmCEw+SY1Mf8AdxxRCuoxUWgcLu5wlxcStEieaWSMSlN8hGAG +Ur6kV11xcR3Gj3DQ3DKUQ5YHDKcZwfQ1aeztnVFaGMhPugr0p3kQ7HTy12ucsMfePvVVK8Z 202FGDVzjZZp2awMbu8jxoI2WTO0/wAWRXU6dpiWLu6yO5ZQvzHp3/rU0dnbRMrRwxqy9CB0 qxmpq1+dcsdEONOzuyOS2jkninK/vI84NOuIlnieORQysMEGlJozzXPd6eRdiKwtvsdnHAX3 7OAT6VYqPfjtRv4od27sLWJKKjD0Fs9KVhjieK5DXpjLrIiYDCDAPqCBXVnpXG68SPEYHQeW pH616WW/xvkRU+E1IWOFXPIFSszA1Shf5eexq4h3LX0JiNLnvVWcZarbIc8VWnRs8A80CKEx BH3vwqq5x1OeKtyREse31qvLEecjtVDMueOIAjuO2OtUvLBf5Tg9s1oTWrBs5xmqsiFWKkc1 lKJm0JDMY32vwfUVpJKJACT09KyWTJp0bvCQQfwNc8qfYWprSY3mnwX8tvkI3aqMVyJO+D70 rsCOlYOPcEW7jV55F27zz6VS3STEdSDgYFOjj3knHbiuu8PaBsaO7ul7ZSMjp7ms5zjSVy1G 5d8PaHDY28c8se66YZJP8PsK3hTSeDQp4zXkzm5u7N0raIc1J0o60GgApKWkpMYoqaA4JqHH FSRfrXdgX+8foc+I+Ep60w/d+xqWXZdwR7oi4VemKq6wSWTtVey1eSCRoZMMh4AHqa9eUbxW lzkU+V7mnbWUajetopzxVXVRsubdVjEYUY4+takN0sUeDy1ZmstuuYH6ZrGlNOryo2nzct2z VjkRI239zQl1Eyjbzl9v4iqqwXMrsVMezqMinCxuF24MYwxbgHqaGpcz10BONtVqMu3xdEAe lLniq94zQyFpSC3fFT+lcGP+ya0Oo2VxFEWPYZxWDPcfbLxAPpg9q3pRmJwOu04rLGnFL5XX lThvx71zUXFXb3O6k4rVmlDGIowg7U+nUh45rneupiVLpwWCEZVfmP17Vl3ux5Y2ZRwhNa0u DA7d8E5rmLy4MhXaeSMV3UY3t5HXTVkV5XjW2d87XJwuK1rJBa6YueWclzn2/wD1VnTaeXki jHUJk/zq2XkPms3yxRoAAe9dE7SSSHuWvDbbo7hj1LZradFkUqwyDWT4djKWcjEY3N+dbKjN edXf712OafxM5+5LWeoRlfkUMOR3Fa8FwkmV3AmodXsmuoMRkBhzzVfR7Xy4T5p3bhn3B9K1 lyzp8z3RTs43Nb8KMU4KMACkkkSMckZ9K5VFvRGQYpssscMZkkYKg6k0guFK9Qv1pkslpIm2 ZPMArqp4aTfvaBr2M+/162htd1swllPCqB3rl5YrvUJzNcCSRj0yDgV2guLaMAQ2yjHT5RTH vNwxsUAe1ehRhTo7asznTqT02OSXTHUgtGc+4p5smABIP0reuL5B1YZ/2aom+BbgE/U11LEL sZfUZ9zKaJY9xIC461DaafNe3SzSwyGDGQQOorVe4jmyrwAg8EkUkPm24ZIJWSJhjaTwPpSl WT6FQwso311LKzwgYDqMcYz0oE8O4YkGajsYbW2XEkHmH1NXFubQZAgx7cUOrdWJWE5ZX1KM hhkO13Vh6EVTlt4lJktpfLY+nQ1trdwf88Oh46U0zWcynMBI9sUnVurMFhbO6ujMsb6SOTrt ceh4NdHBqUbWxeQ4dew71iyQ2Z5VWjPbPam+TgfLIcCuOrSjNndCF1aTOopKTNN3V4hI26hW 5tpIXztcYOOtYo8MWQYHdKOc/fH+Fbm6kzWkKk4K0WKye5kf8I9ZpljLOAO+8f4VjaxFa2qi GFZHd+RuJII9RXYNtZSDjB9a42+sjHey+SrEEkhSAMfTnpXZhJc8/fkZ1Lxi3FamLNH5SqwP z57V0nhu5LuYrlFAx8jHqxrm2kWeRVY4UHOR1rf0KWKfUQgXCoP3fT9cda9DF8rg1Y58OpX5 mdYuOnQU2eGOeMxyqGQ9Qe9PFFeB5naQR2sMYASMAD2qfjHFFFDd9wCiiikAUUUUALxRmkpK AHZopuaM0ALS1VkvraIsJJo0KnByw4/zkUQX9rcSbIbiORsZwrA1XJK17BdFmimk81HNNHBE 0kzhEHVieBSSb2AmpOKjRg6BkO5SMgjvTgKLAOozTcVClzC0piWVTICRt78Yz/MU0m9gJ80Z qOKWObd5bhipwcHoaWWSOFd0rqi5xljjmizvYLjzVe7+0+V/omzzM/x9MVNG6TIHjYMh6EHI NO20bPUNznJ4NaaXdk8/3GUChbHWGI3TED3cV0mKTFbe3fZE8qMy1sbpDmW5Y+wP/wBatJBt UZJJpcUYrKUnLcpaAa5fxPD5V5a3W37wMZPuOR/WuorO1u1+1aZMgXLqN6fUVvhans6sZEzV 42MOJl8skmrlucjFY9jP5sQBGWHUVowNgk8cdfavqjAvoM05lBAz0qOJgeR2qUcnluvSkIrS QqwJXmqjxbT04rVMRPSq9wAi/MPYmi4XMiaAE5HaqEsAclmQgn9K25Y2KZUAZ6ZqjLGI8gDA FPce5hyR7CR27GoGHPcGtp4VcHIySKzpYirHcMLUSiS1YpsNvI4qxBKhmjEzHyScMfSozwcN yKidQMehrGUU0S9D0vSdB0+AJcoPOLAFSWyv4Vuda4HwlrzWky2N0+YHOIyf4D/hXfV4OJpz hO0nfsbxaaClFJRXMWLRRRVJiEopc0nNJjDPFRNdQw3IV5FDEZwTUtRTWsE5BmijfH94Zrah W9lPmInDnVivqFxbzRoxkGM9c1QiFmgUrKpIbJLmr0mkWMoAa3XA9CR/Kmf2Hp+MeQR9JG/x r0VmUbWaZzvDX6j2vrbr5q5xjg1Tu9RtmkVmlBI6VZ/sTThn/R+v+23+NRnw9pjNuNuf+/jf 41EcbSg3JR1Zo6UpKzehJH4jjRtkbgr9M0r+IBvPztj1AqIeH9MVsi2P/fbf40/+xdOJz9nH /fR/xq/r9P8AlJ9g+5mXOrq5kZ3Ru4yKqHxNeD+GM49EP+NdJHpdig2rbIQPXmpxa26qVEKA egFc1bFwq2biaQpcnUwbPxFJLGvmR/NnHypwT+dbVpctPGC6Mp9xUscMSDCxqo68DFSADtxX JKUXsrGoUhHBp1FQBQkkVrRhnsR/OsC0szJqkcTKSF+ZvatqKNponjbhVlxn260zSV3Xd3Kf ULXdzezi2jpk7RdgnhBvJB0yAKy9Rd5JWtYxncwAx64Fa7unn3Tt1TgVV0q2869e5kHKn5R7 4/wohLkjzPogTtG5r20C28CxL0UVKOKXHFJXC3d3OcM5NRRwJG7lS3zncRnjNS5oBp3sIGcR ruY4X1qGVLWUFjKS/wBah1a3lurCSKFtrH9a4OeO7t5TFJPPGy9t5rvwnLZ9xpPdHW3VzBbT bHkAz0602O5hkO1JQSe2a5FftrP8kryN0+Ybv51JGuoW8nmBmVh/s4FdfKac7R3tvaq6BnYY +tVtQNtbxMocbiOma486rqaqyCU/N3qhPf3jgpJI3PXA/rVJIzu73bLs98iOyuTx/d61ahuY pI1MTA+q9xWGptxBtw3mMfmJ7CmF5JpRBbOETtzj8zVctxyrcurOknuvs0QfaW+g6VkTatcS 8Fwv0FVHN7YtiRiUcYIJyGFQAg8gYFHLbcn2vNsXDezdfPf86QXMpOfNfP1qpn/Jo3cjgUWQ +Zl8XU4GBK/tzUkN7cWzsQ3Po1VF5A7e1PTYx+ZvrU2LTZfS8uJfmJwO5xVlbpwARKmB15rF vJTPNHBabumNo7mqz29zFIISrhj2BqlDQylXSdj1g0hoor5tGg2loopgGKhuLaO5j2SDGOhH UUUU02tUBwniBPLuRGpPyJxn3JqPw/N5Gpo7btgBziiivejrQ17HJLSqeiowKgjoRS0UV4DO sKWiikAUlFFABiiiigAxRRRQAUlFFMCnNp9sBLKsS+YwY59z1rnZLeUJAqAr+4XO1sc7qKK7 MPUl1/rQymkPa2uYluBbPIGMcgBaT0Ix/WiOGSfw6yyFpM3KkAnoMrkfzoord1Hb5omxH5V0 JbtAXBVG3EPwfm+XHpxVzWrS4S0sVtHYFh5bZb1HWiiplUfNH+ugW0f9dTHmN8U+fdv3MqsH /u4A71dvYLgXd28YwBLIx5GSuI8iiitXN3WhFiCdbvaGRmjhMrYAbkHt3rR0eJp9UnS4UzRg bt0hyQ2RRRU1Jvkf9dhxXvI6OGJIIliiUIijAA7VJRRXlN31Z0hQaKKAEzSUUUwEJpPY0UUA cBqcbabrEqr9xzuH0NXYZlKKw4zxRRX1eGk5Uot9jnejZdilwCQeKsQXGSM0UVuyWW42DtwO cYyaDEArZwRnPAooqHuSVni7jhao3EXXHNFFWikUHXDEg1BLFvXB4NFFNgZkkZVzG3aoGH8q KKwkSM74ruvBmtPcx/2fOS0kS5RvVfSiiuTFQUqTv0CDtJHWg0ZoorwDpDNFFFACZpc0UUhi ZpM0UUDDNITRRSYBmjNFFIAzRmiigAzRmiii4BmjNFFO4gzTZ5PLgZvQUUVVNXkkyoq7Rm6j qXkWO6Nh5jnA4qxpMJgs138u/wAzGiiuzEe7TSRpU00MuSL/AEyaVy21XOcdxitLRij2zzIC FkkJGfwH9KKKdZv2d/Qc/hRoZzQaKK4bmAmeaCeKKKLjDNU9SsItQtJIJABvGAw6iiimpOLT QmcDcWepeH7sBZFIdTgg5B/CrFlNeTIsl1fPGgJOFXLGiivcp1ZSpqTOWUUpWIri285y/wBt lZj/ALOKrPZy/wDPwSPpRRUe0kVYo3UEsGNz7gaSxm8mYHnB44NFFdVN3jcyluWL+eTc0DsS d2WJJP5VLHp+8IxlIUrngUUVFWTS0KgtWOfTG42zEcdT3pP7OfA/eniiisPayNbAumPnmU49 j71DqFu1s+YpWZScc9RRRVQqScrMUlZENnKI7gu4ztU/Wr82oTzyLOQmY1CqMdqKK6zGx//Z CmVuZHN0cmVhbQplbmRvYmoKMzcgMCBvYmoKPDwvU3VidHlwZS9JbWFnZQovQ29sb3JTcGFj ZS9EZXZpY2VSR0IKL1dpZHRoIDc2NwovSGVpZ2h0IDM5Ci9CaXRzUGVyQ29tcG9uZW50IDgK L0ZpbHRlci9EQ1REZWNvZGUvTGVuZ3RoIDU2MzI+PnN0cmVhbQr/2P/uAA5BZG9iZQBkAAAA AAH/2wBDAA4KCw0LCQ4NDA0QDw4RFiQXFhQUFiwgIRokNC43NjMuMjI6QVNGOj1OPjIySGJJ TlZYXV5dOEVmbWVabFNbXVn/2wBDAQ8QEBYTFioXFypZOzI7WVlZWVlZWVlZWVlZWVlZWVlZ WVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVn/wAARCAAnAv8DASIAAhEBAxEB/8QA HwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQAAAF9AQID AAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3ODk6 Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWm p6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QA HwEAAwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAEC AxEEBSExBhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5 OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOk paanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oA DAMBAAIRAxEAPwDS1zwta3nnXUe6O4PzdeCa4F7l7SQrIpDryMV7MygqQa5DUPBNjO9xOjTB 2BKoCMA/lmstOpNrmVoN9ttzK4BeQHrziqmquJDn5Qe2OtUILTVbMbfsk2xQWYlCMAe9Vri8 dwyktubjJ/hFZezfNc9GFaCh5lSZ983XIHBJrQstMN13AXqcntVKCznuJfIgjMsnovOa6+z8 O6jb2yPuAJXmMDmtal1GyOahyud5mPNZKH2AK27gcdK9G0OygtNOgWOJA2wZYDkmufsNCuJJ YnnHlqjZIOOa62Fdq47DpWcW7amuKlC6USwDxScUVHJIqcsQBTOMeTRmseXxHpkM6wtcKGJw ccgfjV65vre2tjcSyKsQXO4mqcWtwsWHlSMAu6qPc4rlPFGiarrlxshuIo7NcFEYn5j3JwK5 jVvE9zf3zPbuyQhtsa54I9SK6+01ua28OxXt7buWJChQME+/tWnJKFmPSxTh0STw9o00tviW 9I+Z1Gdo9qwWvtSv28szTzsw/wBWnXH0FaF54tv5JFaFY7eIHkY3E/ia6zRzazWgubWKONpv mk2gA596p3WskZv3tmZHhHTbqxSVrm3WMNymQN9dSBQBTqyk7u5SKt1Y2t4ALmCOUDpvXOKq f2Haxhlg3Qo38KHitSipKUmtjl4/B8CSFmuHdT6jmt6x0+2sUxbxBOME9zVqlpjlUlJWbAdK WkopEi0UmaM0AFFFRzypDHvkOB0FAJX0RJkVV1G/hsLcyynJ6Ko6sfQVMrqwyrA/j0rktcju tK1JNXcteQhsGIjiMeo9PrQtR2NvSLW4V5ru7IM05BUf881HRf1rH1XxTJbzSrbCPEMhRgx5 OOvFWV8YaYbcSDzC5/5ZheQfr0rk7sW/9sG6eAmGVt7Rl8nk89P5VXXUaR6PYXP2uxhuChQy LnaeorPiH2fxOyJxHcQF2GP4lOM/rVd/FOlwWQMLlnC4WAAhqqaJc3uoa8t5cpsiaA7B2A3f /WpCsdbnikpNy/3hQWUfxDH1qboVmOzUbnapJPApd6Z++PzqjrMwh0ydwRnbxRdDUW2kc79u 0ye5leSBmO88kdam+36XEPktsfRBXPxYWLjtTWkyKzaPb+qQa1bOgGv6WWCF3hP/AE0UgVci uoZuIZlbnHDVyDt8vIDexqlNboCGgbyHHdehoUYvc5qmElFXi7nou+WPgHPuOaY07t94muFt tburQrHcOzoOAQ39a6Ky1m1u1HzlT6GnKDt7rOLZ6o0ml570x3ypxTZWBJGRxzxVKWfbnHBH c1z2d9Sx7tt+Yg4+lNeQFc/wkdqWCYSRHJye9Q4w4XgLnjjGetW421QrnOahbpb3rsS5ic5A XPH1qt5sJbCQ5A9a6ydEkjxtUnHHFcdqKNbzv5bADqRitoS5tC4z5dGWLwxi1+WI5PQ1lyc4 YZ2njmmtczMMF+Kj3Fjnv3reKsTUqKWxIyYUH1FKPuirEqn7MjEfjUA5HegzH9OvNdt8Oosy Xk577VH8/wCtcMx6YPtXoXhMT2GjxtHArPN85L/pUzkoq8mHK5aI7OgcVhtc6g/dE/3V/wAT UUkdzJ9+Rz9WrndeHRlLDye7N554kB3SIv1aoY5FlJKMCPUVhLC4c5U1r6ap8ggjGCf51rQq czYVqKhG97ketNsshjk7qktLe3Mce9RvKAmodbKi1XP98U+O6iTa5ik5XHSuiam4pROePL9o s/Z7RshQrH2NY9/CkV7CABtIORWhFfW6t8kTlvpVHUpBJcwsEK9etKjGal7zCfK/hNKG3LxI UO3HFP8Asj45lwapz3TRaaTGQXDDH51lG+muLa78yQqobgDtzRzPm5S+R+zc+xtXMZigbEnP Y5rFkmuGYKJWzjPWtVCG02M5z8nessDI9c1zYlO6OrCxU4skiubgD/XNuB9eKsx6rOPlbaTV J/3ZRgPvDFRE4mBHQ15/POLaTHKCvsaTapNGkjSEYCnGK5TU48W2/JaWZt3PvW3dkCHcelZv mCfUIVxwo4/AV0UakrXl0OijFRi5Ig062kA8xCoPfJINWZ/tMsDna8e31OM1JBc+TcSxsQMH PPvSTXsckWxkB8w4BHStW25XsbrVXKWm3MkcRjLHG7I284qPU7xWaRW3OQMbqvWV2YjLBkbF +6B2rHv9hZ2RmOPvZ960ik5t2E72IYoRJF5gJ+U8gV6rZur2kLJypQY/KvL7Qtbu8EqFSwzy O9eheHZEbRrYFxlVweelaSZx4pXimjVopNy/3h+dISv94fnUXRwWHUZpMr/eH50ZHrRcAoop aYEc6u8EixttdlIDehriNfh1KxSO3gvbiaeQeZ8nUBFP8yRXdHkdaaUBbcVUsBjJHamnYDiz 4uuJYppoBbRxxxoRHKxDuWA5HsM/pTG1y6jvpm+0Wju8aDzVkJhXOf1rtRBEAAqJhRgfL0FH kR7ceWmMYxiquuwHDaZ4ivoY7W2AikDfM0ksgG7LdFJPNOuPEOqT2UwYwxF7czIyZyoWTac1 3BiT5fkX5enHSgRoBwi9MdO3pRzLsBzWseIJ7B7SKAwyGSMO7E8EE44OazLfxBqFgjllSeJz M6Ak7gV9fau4McZ25QHb0yOlJ5SAg7FyPb1pXXYDiZvF1+lpG+y180h2OJAQyqAeDnrz061N dX13qespaR3Uduu6WNVjc71xj5mHv2rrjFCoxsQAdBjpTgiFt4VSx796d12Ar6daPZxMjzPM WYtljnHtVykAAGB0pakQYpD0qib9v7g/OkN+39wfnXN9bpdzX2MxdVQNpd3zgeS5/wDHTXlF xEY3hwAd4BIFemalen+zbrcgwYnHH+6a4CYMNS0/YM/cJH5VpTrRm7xKUHFanY+FNHa1ja7u EAlkHyjH3RXSFKzhcv0/rSee/r+tc7xsBujJ7mjt5pw4rM85/Wk85z/Ean65HsHsH3NbPFef eNL/AFSC9eHOyzIBVl6n8fxrqi7n+I/nVa7to7y3aGYblb16j6U4Y+MZXcR+w8zziyt571gk Sl3bnHp9a7r+xJrzQo7O8uAjqcgqcjHarNjYW9hCIoFAHqep/Go77U47FlEowD0YmtZ5jOpL lpxGqKSu2ZOkeERb6mJbx0eGPkBT97612F1Da3dm1vL/AKsjGB2rkR4lQ3YJik8oHBIrfgnS eESIcqamtia0LOcSVThLZlC38NaerEXEksnsDgVvWv2SyhEUC7VH61Tornlj6ki1QijS+2x9 gaT7amOFNZw4qpeahBY7RMzZbOABnpUxxVWTstx+xgtzZN96Kaab5uwrDt9ZtbmURxls85yM AY61eWWNmAV1JPYGpnWrrSWg1Th0LhvZe2KPtkvtWbb30Nw8yKdrROUIbvjvUvnxYz5i47c1 Dq1k7NsfJDsXDdy56j8qPtcvqPyqokiuDtYNjrg1nT69ZW73SSMQ1sVDjHXd0xRGpWk7JsHG C3Rufa5fUflSG5kPU1U86PGd6ge5oE8THAkUn0zU+1qPqx8kexZ8+TP3jVTUJXaOLccqJAT+ RpfPi/56J+dI7xSrsLr83TmjnnfW5ceWLuVVmkQtsYqS5zn36Gp7VbkxOt04kVu3tTYYWDgS DG3v/eq0Tj6USqPZGk2tkY2q2Fna6fdTxwRxybOCB0rkDM08iR7upAz7Vv8AiG4e8BhiyIYz 87ep/wAK5pB5dwm7oGFerhYSULz3OKo1fQ9Ds7C2ggiCxISB94jJq4DtAA4AGOKigIaCMjoV FSV485Sb1Z0JIfvbHU0hZj3NNzRmlzPuFh24jvWfrk2NMl3nqMD61ermfFN0RLbW4UgEliT0 NbUFKU1FFRWpnq48sEdCM1E7jOaj83HBqKSXqor10j0HNJEzyAdOtV5Zgi5bmoZnZcAHk1Vk bPU1SiYTqkhl804YAUIxjYmM7WHT0qqSB25pVkwS3U4q7HJNqW5v6drD7jHMeT3NajTebGTx k+lcaZQz5HFamn3oWUbzyPXpWcqfVHNJcvoa8NwY5ArMM9atyS7o8g4IOTWRdfO+5DjmnwXI eIqxx2qGib2Ltvc7W2s3BPGaytZgbeZAPlIxUk2dn41C87GIo4ytEdHcLnPMMMRUkK5kqaeD 52KkYqzpli804ABx1J9K6bqwixPGI9IjyOWbiswnC4Fa+vFYxDbxnO0ZNY+CwIHJ6Uo6q4yz plm9/fw2yAkMQW9h3r1WCJYIEjQYVFCgVz3hHSHs4GurhdssowqnstdJXmYqpzy5VsjaCsha Qe9FLXIWA71bsxhD9apirVmev1rvwXxv0Ma2xV137kA6AvUbXi2sG+Rd6oMACn6/jbbgnA3G rMNvb/Z0WQ71ZO4r0KkW3FrYwi0lJdTPt9bj3ZeFQpOODzT9XYfaLc9iM1c8iwAztHHTgVR1 WZJLqHaOBVQj790TtDzHrZxzFs7vwpyaXBg8MAeo9av2wHlnkA9al82P16nFNzsOxRaBYY9i ZwexNM8tAMBRVu76j/dqsSK8/Gbpm9F2uMMSMOVBpjQQ7cmMcVNmo5XCxtn0xXD1N1qZWpFT BEmP9Yeg9Kh0qBW1Fvl4RDj2p01yoO/rxhRWhpkHk24c/fk+Y10TfLGx0zfLCxV1bT1eSOSI BWJ2n3FQQWiQqImwwHIPpWlqRdYBKg3FD09aowXRnUM0YUdz6Uoyk4eQ6TbiZ32fZqDnblXG B9axZRulljVRnd0rTu5W+3/LIMc4rLMbiVmQ5JIFdtNPdmjNfVxFNLDcRjaXj5I9QaXQ7uW1 4Z8ozfMKLW3d7LAIZ4X3HPcH/wDVRsjacyRsMEcr6Gs9OVwZCimuU63OeQaMn1qC0m861jcd xU2a816aHI1Z2Fy3rRub1NJmm5pcwrEm5v7x/OgO4/iNR5o3GjnfcLE3nSY+9Si4lHcflVfc aN1V7WXcXKuxa+1Seo/KkN1J2x+VV91Lmn7afcOSPYsfapMdqBdyegqAEGlxT9rU7i5I9iwL pu60faz02nmq+KTvVe3qLqL2cexRuGWWZgY55CDyfM2inRXCwPtQywSEceYd6motTdICJXLk YxtXjJpbOFZ4/N3Fo26Buq1XtpWudnKuS72Na0v/ADIv3ylZF4OBwas/aY/f8qoLgLikzR9a mccqUW7ohooorzzcragwSxnJ/uEfnXJiFJtesk3HOQTn6UUV34bSEmvP8jOe6O17ijNFFcBq LRRRQAmaKKKADIrn/E0TtCJFJIT5gOPxoorpwzcasWiKivFpnMmRCpLE8jgCup8KyNJYHIOA ThietFFermH8I48LpI3qKKK8E7xM0YGRkA0UVTVmFjJg0t4rK8hZ0LXDsyn0zTIdHMWoQ3Kt GAkpcgDnBjC4/OiitvbTd/MnkRBPoMk00j+Yi75JWyBzhgMfliktdAkjiUSvFnLEkZPUYzz3 ooqlialrXF7OO4aVpl5pMqKnlSLI4EjgnhBnnBPX6Ul14bW6nvbiVx50pJi9ACoHPHtRRR9Y nzcy3YezVrDrjRLuaVv3sIiyzDg5yVxTk0KRLiCQPEPL25wOuARRRSWJqWD2aIv+EfZUi3PD +7MZbg87XZj+YNR6FplzCzSgxGMS7VMi5PlgcY9DzRRWjrzdN3F7OKaOn/GmSL5kTpn7wxRR XJtqaM5Sx04f2hJYX00xIG6La3DD19qZqukf2ddw3Cgvahhu3H5hRRXoqtP2kVfdGHKrM6+J leJGT7pAIp9FFedJWbRshKKKKkYVyPipvN1C3jYYCLnjvn/9VFFehlsU6yuRPYS10qAqpYMS R/eqWTRrVm6Mv0NFFfQ8kexnzPuVZdEh5KO2fc1Qk0sA7SzA0UUckexLkyrJpb4yHGfpVKa1 mizlQVHcGiiiVONrktshDActkVIkoPQ89qKK52kJTb0NWxugRsk57A+lTTgcMuQ3p0oorBok jMjFQpOcCrFrp0l2SwYBR3NFFZSfKtBrVltNCTdmWRmHooxS3V5DY2/l23DDjp0ooqINzdmU 1Y50iS6mwo3ySNgDpk13PhvQF06MzXKq1y/4hB6D3ooqcXNxSiupUEdB7UUUV55qB60UUUmA d6sWh6/Wiiu/A/E/Qwr7Ip65ysXPRqsXV/HZ20W5dxKjHFFFd9f4YkYeKlOzKkeuLIxBhGPQ VFeTpPNbOsewEdPxooqaHxm+KpxjHRFxvP3P5QXHuaRUvE2lQnHvRRWzjFu7Rx3drDnZzjzM b++KQ0UV52P+ydFDqGaoanLtRUzjOSaKK4qSvNHXTXvFXTrTzZTNMvyj7orZzxRRSqybkwqO 8iG9k8uwlI5YjaPqa5zUpJLdowh2sRuJFFFdVDoa0tihK581H+8T1NTafb+Y8k78iPO0e9FF dc3aOhoaXhsEmYuOQAp/Wi6sBa3TTomYmOG56UUVxSm1Wa7mV2psu6bLh5IlPy/eWtDNFFc9 ZWmZzVpBmjNFFZEBigUUUAOqrfX1vYx77hiM9AATmiitqMFOaixPRHMz+LJhK/kRIy5wuePz qNvFd/JgQwQL65BP9aKK9+FCnFWSPPnVk3uNXxNqwb/V2+P93/69OPi2/jfDxxZ9hRRVThFL YqnOTlZs07LWNQnTzJUiQNyO/wDWra6ncAn5EJAzx/8ArooqZ0oct7BCtJ1OV7FO51tGQrdw FV7E85/I1Paa1CYwqICB6Aiiiuath6dtjpoVpTfKzWt7mKdQyE57g1NRRXkVIqMrI3krM//Z CmVuZHN0cmVhbQplbmRvYmoKMzYgMCBvYmoKPDwvU3VidHlwZS9JbWFnZQovQ29sb3JTcGFj ZS9EZXZpY2VSR0IKL1dpZHRoIDc2NwovSGVpZ2h0IDM5Ci9CaXRzUGVyQ29tcG9uZW50IDgK L0ZpbHRlci9EQ1REZWNvZGUvTGVuZ3RoIDQ3MDY+PnN0cmVhbQr/2P/uAA5BZG9iZQBkAAAA AAH/2wBDAA4KCw0LCQ4NDA0QDw4RFiQXFhQUFiwgIRokNC43NjMuMjI6QVNGOj1OPjIySGJJ TlZYXV5dOEVmbWVabFNbXVn/2wBDAQ8QEBYTFioXFypZOzI7WVlZWVlZWVlZWVlZWVlZWVlZ WVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVn/wAARCAAnAv8DASIAAhEBAxEB/8QA HwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQAAAF9AQID AAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3ODk6 Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWm p6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QA HwEAAwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAEC AxEEBSExBhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5 OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOk paanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oA DAMBAAIRAxEAPwCze3T307SOx29AM1nCOYSsA2FqdCAgAPApyN82MHHrXnvUIVHB3QgjUYYg FsdacWGCT2qE3UTMVDcg46UwSoS3zgsRjFFiXJyd3qKsSyw+Y8mzPIFZd7IUBVhvX1706WSS MbUbco/SoxC7kvIcKOeTVxi07s7ZOi4WKemahJpepRXELlRnDAdwa9D0WGe8Lzyy+bbTDK7j mvMbohpCwA5647V1Xg7xKtkBZXhxCT8j+hPauiUeazOenVcE0up36WcKtnYCduwkjqKmRQih UGFAwBShgwyDxSg1JLk3uwooooJCkpaSi4Bmig0hoAKKKKAFopM1BdXaW0YZslmOFUdSaASu T5ozXNXuu3cZJRI0A7MMmsmbxRqaKSvkH6qaSkjZUJs67UNRisYGdzlgOFB5ri7+/kvJjJKx I/hXPAFVJNTkvB5s8ilx1A6Vk3WpfORF09aVm9D1KFOnQjzPVsvXN5HF95ufQVmy6kW+4pH1 qixllYnBYnvQIf8Ano/4CtFBLcU8ROXwjpLpj1Y5qJnLdAakCR5wqkmtC00fUbw/6PZvjszD aPzNVojnlJ/aZmRwO59Pc1MLfH3nGO+K6+w8EXrkG8nWND1VDk1uweDdNjYNJ5spHZm4pcxn 7WnE82RCzeXAjM3TgZNb2m+E9QvQHlX7Oh/vjk16HbabZ2h/cW8aH1A5q0RzU3M5YhvZGLo/ hy00xVbYJJv75HStrHSnAcUUjnlJyd2IBVTU4PtFhNHjJxkfWrlB6e1ARlytM4FkHII5HFVb i2DnIwK2dWgFteOq9H+as888VlqmfQQkpJSRktbqCcrULW4JNaksfJxUXljHTmmmaWTWxjS2 IHK5H0qrJaso6MTW6yEH2qMqCeRVqbRlLDxlsc/gr8rAikPTIrantkZSSPwqhLaYBOCPYc1a kmc86UolKponI4PQ1GEbftxg0rkIdq/ias51pqWo5Fxgde9DTAAmqasV6VatLKS6bJBCdc0n Zasbq2RFGHlfgdaW4HlIQa0nCW0aqg6dTVO3tHvroK4O0nFSp316HI22yzotmZZ1lZSFXp71 tX8W2M5P8INXbS2jtYljTp79qo37/OyORxWPNzSC1kcxericnPWoFdgwZTgg5q1fODJtx+NV hgEVstgPXvDerpq2lxyjIkQBJAT3A61sCvJ/CGrtperpGx/0e4Oxx6Hsfzr1hMEZFDRk1ZhW Tc6y1vPOhspjHCCxkzwQFLf0x+Na9QXUC3NrLAxIWRChI9CMUkSY8XieD7El1c200EUgBjJ+ bflQ3GP88VdsdZtL+KWSBmKxDLZXBxjNMbRoW0+0tC77LVNinuRsKc/gabBocMEE8SSyDzY1 jJBwQAMU9AKkviq12xtbo8mXKMDwVIBP9KtN4gtIdPtLq4yn2lA6ooyQMZJ+gqonhO1X/lrJ y+849dpH9ann8PW8sFogkkVrWJoVYd1YYOaegyS68QWVvE77mfa20BR1O3d/KnHXbRNOhvJg 8azcKhGWJ+lVpfDFtIQPNkWMENs99m3r9Kml0OOW2tI2mk32p/dv+GOaWgDbPX4b3UJoIY3M UUQkMvY59KZb+KdMuJY445H3SEBcrgHPSrNho0GniURM5EkaxnPtn/GqUHhW1gaErLITEIwM 99hJH86PdAS48SpCjOIshQpJ3ccsR/SrMWtm5ZTa2c0sLMFEvQcnGfoKil8MWssLxPJJtcAH 8CT/AFrT02xXT7JLaN2dEzt3dQPSh2EWhRQKWpASg0tIaAE7Vn6xKY7M4bbuOM1o1k+Io92l uRywPFJ7GlL40Y1zNtACk4I6A1nf2g0dxA8YZdj/AIH2qcjzLZPLZc4weOaXToft+o28Bj/d Qt5jn+X61lBanrVGoxdztQcqD6iq2oWv26wmtt+zzVK5x0qadzFFvCM5HYVUTVYDIEkWSJj/ AH14/Oteax5EacpK8UYqeEIyP310WLFt+1cDBQrx6daS28LxPAs0N/um3ZSUAYwF2Yx9K6gg MhAOQw7VxQ0LWEWBIUMYjAVSJhhTvJLYzzkGrTb6iuadv4UW2lhEV23kxushQqMlh71BJYia /u9QmulSxMyOAoyWZeP51Y0fTdVttaee6kJiIbc3mZDknjA7YqlJoGpxpceRkGUMcebxu35H 6U/mFye58PW9rDb3Etygjt41R98YbIDFgR6feqvd+HbaAN52pRxCUbgPLAAx3HoeetZd3b3t 5rE9kshmmkM2cS/Lj5doI7Y5rqtK0UwtdreJ5kZlzDvfcQmBx+YpvTqFyn/wiavM0ovXaOQE gFe5XGc1aTwxFHqcF4soPliPKsgOSnQj0rfAwAMcU6puxXDtikNLSUhBS0UlIBaKSigAzRRQ aACiiigDz2K2a4t/M84R7ewqsly1tIUlO7PAqnDfSeQNuTGOhzSJMfMEjnkHpWKi+p3v2Spl 5whuI3Zflcgkj2qzq09tJAqwxBQo6jGc1QeTztw/gB/H8KqZRpSJXYY4Ip8rMaFaEY2ZbtSG izgH29abKHmuViGU/GnxzRltinb2z61Vu5FM25c4HpxTszCMoOpdrQivrGGABAAeM5B61Qs5 fs15G3l+YY3yoPenTXp8wkAk+p6GpNJu7i1vVltUR5ieAyhv51tTTS1Nazg7cp7DaSPLaxyS R+W7qCVznFT1BZPLJaRNOgSUqCyjsanqWYi0Ug5pe1AAKKBSGgApD0pkkqRDc7BR6mlDBlBB yD0NAFe/1C206ISXcojUnA4JyazR4q0zeE8x+eh2HFS63HptyI4dQlCnOV5I5qpN4U0t4Pkj dm7NvNaJRteVw1uaWo6xaafAJJ35Iyqr1aucg199TuJJmiEUUK/IuckEjuaxNbvLS2ke1hhc NGdvJqjBcSwacYoIW3MMs3as9bHXCnD1LF5qqC5dZmb+eKrNepOCsfOByaxHDiRmfOc85qxZ Rlpen41XIki1Vk3YfPIw3Y+UHg570scaEblJcnjniuh0LRRqV8qSLugXmQ/0rv7PS7O0QLDb ooHHSmnZClVUHrqea2WgajfuPKh2J2Z+B/KuisPAsYAbULje2fuxDA/M12mABgClpXMJV5SM uw0LTtPGLe2jDddzDLfnWltHTFPxRU3MW2xKKKWgBtLR3phdV6nFAEnag0xZFbpzTzQAho+l BooAw/EdqXjS4Qcx/eHqK5w9a7yRFkUq3Q1xGp232C6aI52dVJPWs5I9XBVeZezfQqPzmmAH FIWzTSaD0bCOM1GyccVITTffFAyEr2NROnynirRUmm+WS+AMk07kzsldsybiI7WYA5A7VnBS XC4+Y12MekS3Bx5bAfhitS30W3tI1YqDIeueapVbI8uvON/ddzkLHRZJsPMCq/3cda1ZdlvC UxzjAHrW5KMBtgHtXJapHd7nJibZyWcHjFZpuo9TmbEZQ7gAZJ4ArfsrOGxj3TSIrsOpIz+F YkK6QiRlZh5uOSSc5q7bmwlYHcHA7805I1jS8zQuJ7RgB54YjnAYZrHuo2Dth9wznB64qDXI IPMX7OAB3xVKK4dYtrNkrVxhpdGc4NMivVAl6cmqw6dKnnlEwGOoqHB61ojMCCMHPSvXfCuo nUdGglZsyBdr/UcV5Ljiuz+HMuJrq3zwQHH8qN0TLY9AoHWjvQKgzA0lKaSmAVBcyTRx/uI9 7Hjk4A96myaRkDKVYcGkxxdndmDJcFZCJtTw/cInA/Wp4rueGPzfNS8h7lRgrUd60VtOFmuP J3fdVVHA9Tx61oWtpwskpDPjhl4yKySdzvm4qCbWj8v+AWo3EkaOucMMjNPoFAFanAwpaSig QtFFJQAtIaKzLu6WSc24OMnHFKTsjSnTc3ZGg8iR/fIFZOrXiMYYVGQz8/SsJ5lbWGhgclFA 3E85NSTx/Z0JPzZ5PNZym72O6nhoxadyhd7LcTkBgQ+AR7112iW1vBZrJAd7TAMz+pxXJi1a VxIh4ccA/rVlZpNLMYtyyksB6jn1FUpK9jSvTdSNkzq9SkEdsSbjyOfvYzWazv8AZw1yY7y2 Y4DqMFT68/41Q1LWb+0cRSeXg879vWta0tnnSG5ICM6YkXHBqXq9DGMPZQTn/X6hYSNbXK2b sZEYbo3J7ela2KzotOZIbdS/zQybgfbOa0h9c1cb21Oas4t3iJijHFOpKowI1hRXLhBuPU45 NP8AxpaKACkpaKACiilpgJRRRQAUUUUAFGaKKACjNFFAHjU8D2N7LbJKWiVsfMOtXwIZ1G0f OeooookQyy0blDGiguRzmsu4hkWTLEEk8iiisos7qVCEqd2RecI2KsSCKZJdKFzgkUUVukcj ik7FKQZYkDjrW74RhlbWoWSNHXPO7sPaiiq6Dloz1kZAooorIBe1LRRQAVT1PUINNs3ubosI 064GTmiinFXdgPObrVdQ8S6gscBKIT+7TdjHua67UJL7SPD0a25WS4UYZ3Ocf40UV0zSTUeg HBxz6lrmoBVYvcMerMABXp2kWs9rYpFcy+bIOpoopVpP4RHM6xY6db6/JcagnyyplAATk981 nSq16HaxjHkpxuJxj8KKK57XVztpOyMK8so1b5mLSkZwOBVvQdEudQn2Q7VQcuxPSiiqT0Lq JRTkj0vStMh0y1WKIZY/ebuTWhRRU3OBu71EooopALRRRQAUhoooAztQvHWeOztv+PiVdwJ6 KOmaYukLIoN1PNM/c7sD8qKKfQYNprQRk2U8iOBwGbINS6ZqQv0kUpsmhbbIvYH60UUAXyKK KKQgxmsrWdNF9CNoHmJ90+tFFK1yoTcHzROLlQwytE/DKcGmgZPHNFFZN2PoJVGoJki2c8hG 1Rg+4q1Do90+N+1R9aKKhSbdjhqYqp0L9t4eDHMj8e1X4tKt7Y5VAT6nmiiurkSjc4JVJyl7 zJhtQ8fyqCVsnJ6CiiuScnsUkZ8v3uDxVC/hZrKfp/qziiinB2Y3sc5pulxTRtLcSFT/AHQK uQCytmGN2M+9FFdDbbdzqilFKxHq81rIqiIEEd6yHbZnHRloorSGxnVZWLYPFSggrRRVM5hQ eK674eL/AMTa5P8AdjH86KKQnsei96UUUVmZBimFqKKuCuwZVvp3hg3ocN2rK/tO8/hZT+FF FdMIRa1RDbKV4Jb6RZJ1XcoxwcZFasGreWoSSIgAcYOaKKbowvsU6s5JRb0Q/wDtOZ8eVbjn oS1KLq/PPlxj8aKKhwiugk2T2ss7MfOIx7VdyPzoorGaSehSHDmkNFFZjCuG1XUWtriQoSJP mA9jk/0oopcqbVzswm7M/S2JufMALv3Ga27uRzbt+5ByOpPSiisK3xo7yHT3UwROwxjIzS6g 8QTMgwQMjiiipSvUDzMq9vluVAbLcYya9Cth/okIHHyD+VFFdXKorQ4sZ0JsUtFFBwCUtFFA BRRRQAlGaKKBoXp1pCwHHeiimCDIxmgnmiigAzSZ4oooAWkzzRRQAtFFFID/2QplbmRzdHJl YW0KZW5kb2JqCjM1IDAgb2JqCjw8L1N1YnR5cGUvSW1hZ2UKL0NvbG9yU3BhY2UvRGV2aWNl UkdCCi9XaWR0aCA3NjcKL0hlaWdodCAzOAovQml0c1BlckNvbXBvbmVudCA4Ci9GaWx0ZXIv RENURGVjb2RlL0xlbmd0aCAzMjExPj5zdHJlYW0K/9j/7gAOQWRvYmUAZAAAAAAB/9sAQwAO CgsNCwkODQwNEA8OERYkFxYUFBYsICEaJDQuNzYzLjIyOkFTRjo9Tj4yMkhiSU5WWF1eXThF Zm1lWmxTW11Z/9sAQwEPEBAWExYqFxcqWTsyO1lZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZ WVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZ/8AAEQgAJgL/AwEiAAIRAQMRAf/EAB8AAAEFAQEB AQEBAAAAAAAAAAABAgMEBQYHCAkKC//EALUQAAIBAwMCBAMFBQQEAAABfQECAwAEEQUSITFB BhNRYQcicRQygZGhCCNCscEVUtHwJDNicoIJChYXGBkaJSYnKCkqNDU2Nzg5OkNERUZHSElK U1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6g4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1 tre4ubrCw8TFxsfIycrS09TV1tfY2drh4uPk5ebn6Onq8fLz9PX29/j5+v/EAB8BAAMBAQEB AQEBAQEAAAAAAAABAgMEBQYHCAkKC//EALURAAIBAgQEAwQHBQQEAAECdwABAgMRBAUhMQYS QVEHYXETIjKBCBRCkaGxwQkjM1LwFWJy0QoWJDThJfEXGBkaJicoKSo1Njc4OTpDREVGR0hJ SlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoKDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKz tLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uLj5OXm5+jp6vLz9PX29/j5+v/aAAwDAQACEQMR AD8A7yg0UYrIkSlxTsUmKQ7BRij0pc0AJS4yKQ1F9phBAaaME8AFhQBNgUmKjS4hchUmjYnO AGBzjrT/ADE37N678Z255x64pAL2ooBz0prSIjKGdQWOACetMB1HakNLQAdqKa0iJt3uq7jg ZOMmhpEVwhdQzdBnk0BYf2pKTPPWh5EQZdwo6ZJwKQ7C4oqKSeJG2NNGrehYA1IOlMQpppp1 J3oASinYo60CEpQPWilAoGGKAPWnH2pjHAycUgFJ9KzNX1NLKEgMfNYYUCo9V1iO0jKxEPKe MA9K5G6uXnkMkrFmPrUylbRHoYTBuo+ee35jZppJnLytuY96rNJjvTZJfeqssyoMsQKlI9iU klZEryH1qCSYJ1POKpS3bPu2nA7VVkkJ5JyR61rGDZxzrJbFiW6cg4OAaq7i33jTN3yjnJNJ gdzWqikccqjkEvWmHrg9h3p4Qk4AJ+tKUAyXYDHUU7mbjfUYrdf0xTufzqIyZPHA7VIPfHTt QTFrYM805T82TzTff0pycsKRa3J1Q9dvNW7eU52npVYNwMUqkh8kkjqahq51RdnoaiHsaG54 qBHJA5yKmBzWbVjsjK6sMaM9VqlcWoPzRqFfuPWtHOKjZgM5pxbRnVpxktTG4wAeo7GkPJya u3EaksxUZAqg3rXQndHm1I8mg4E7QOtOc4I45FAGCPSkPLHms3uYX1O5+HV1zdWhJ7SAfpXe ivJvB139m8RQZICzZQ16wKmW5nNWY6ikzmipICiiigA7UUdqWgABINLncKTHFJQAtJ9KWkoA KXNJRQAuaSiigAOTRRRQAlFLRQAlFFLQAlLSUUALmgUlLmgBTRSUtABSUtFABQaBRmgBMUoo ooAKKKKACigUUDEop2OKMUCG0UtFACUUtHFMBxFLjAozWfqepCyQYXcx7Um7IZfo/CudbxBI 0eEiUP6noKzZ72+mk3/a5I/QJwBUe0QrnZZ55pc8VwVze6qu10vnYrzggc/pXUaDq8eq2gP3 Z04kQ9QfX6VaaewJmoeeK5PxRo0VvpEtzZo5uI2DDnPfP9a6w8gkHnFYhvbj7QyLdWp54V3x /Shz5TanTc72OIjtNSs7q4a3WQGCLzVYA/x43Y/WuiSKX/hHp7+OSR70kRJIM7gnmA45Hua6 WG8WSYW8qNHLjOGHyt9D3q7gelVz3JlFx0Zx1rJfp4mSCS4lESNhVYE702jvjHWor5r1N8/m zEi6cDPIVQOMV2u3nOOfpTJIkliaORcowwR6incm55zHqOpPaxPBPdPbt5fnuwPBO7OCB06V 1Gn6g8uiXELzvJd29uWeTaV5Kkjr3xityC3jtoUhgXZEg2qvoKRreJhKDGv74Yk7buMfyobu B55Fe6jM0DW0lzOoKkl1yN+OccUt1Pdva2c8L3b3S7jcFgcrwcgceleiQQx28KRRLsjQYUDs KkA9qOYDk9cvrq3uofIacRy2mE2gn59w6++M1nJcXE888M73E6mRX8zacL83Tbiu8x3wKTHP FJMGyjNpNndXK3UsZaQbcE+3StAcCkBpRSEHWilxRQAUUUZpAHvS5G3JqKaeK2j3zOqL7kCu d1DxKCpSxVgem9gP0ovY2pUJ1XaKOhnuYoELSOEGO9ctqevPcEx2pKxjqcdaxri7luHLTzM5 9CeKqtP6VDk3serRwUKb5p6smd+pY5JqtLJmopZgBlmAqhc3wZdsRI98URi2dVSsooluboR8 Kct/Ks2SRnbJOTTWbOf500epreMbHn1KrkwyfSmMxPFTrE7DnAHqakEa5ARSz5wOOv0FVzGT i2V44mbnGB71JhY8kggep711+keDbmcrLesIozzt/i/LtS+LPD8MPkfZo1WMLg4659ajmQk1 fljucO9y3ROPc1D1JJq3Np0iMccj9aqshRypzkVomuhz1FO/vARxyakj+5UWCexqSMHbimxQ 3H/SpE5x/Oo/4fenL3zUM6I7kpOBgU4PjiosjqfypOpzQa8xdtmwcM2c81aXPas2Bh5oLfSt GNuD2qJI2pSHE0wnGTUTTYYgfnSF8nPakkW53Gz5KkHJzk1RVfmGatykkbjxgYquvyknHXgV qtEcNaWojnnH607ySId/41ExLPwOprWeEpa7SucLjp7VEnY5jOhmaCWOdPvRMGH4V7Rp10Ly xhuBjEihq8T6dq9E+HupedYy2UhJaA7lz/dND2FLY7Klo7UVBkFFFJTAUdKKKKAEpaKSgBaK KSgBaSgjPfFFABRRRQAtFJS0AJRRRQAUUlLmkAZo70UlAC0CjPFFAC0maKQCgB2aM0UuaAEz 7UDPpTu1GeKBjcGjBp1JTAMUYopaQCAUYoooAKKDSUxCmkoooAKKKKQEOoXYsog5BbJwK5aW Zb68aWddy44XsKKKxrNq1jegr1LPsZDqsN6fLG3J6dq0D05oorPsXi/iRXeRtrA4/CsW7eWz uvPtpWSVedwOOKKK2p7nGdp4V8Qy6yZI7iNFkTnKA4P61d1CSSAMZQkkbNjB7UUVdXQ6sLrN JlV8+VNb7ji3IkjPce361vWcpmtIZG6ugY/iKKKinub4he4n/WxNRRRWpwiUUUUAFFFFACZo 70UUCFoFFFIYZpQeKKKYBWfq9+1hbiRFDMTgZoopM2oRUqiTONurua8lMkrZI7dqoyuQDiii slqfRWUVaJVmmKrnqTVKe6dRgcH2oorWKOSrJplKSdnOG59u1REknk0UVqjik23qORd7kDp7 1OqqhzjJ6ZNFFJlwWlySCM3NwkecAnFelaD4ds9OjEwUyTHnc3OPpRRUS7GGIk0tDfXFYvie JW00ueqsBRRUvYxofxI+pxtzbo3BHasue2Toyhh79qKKUWey4p7lKS0jb7uRUDQFBnOcUUVq mzknCK1sRhcilHFFFUYrQBzmgGiigsAcNkVeDlo91FFDKgNUbuvepSOGXsKKKk26FSQ/MR6U jDvRRVHn1fiC1UPIoOc5zXSXqKkQUdv/AK9FFZ1NzNbHMTLtmZR0BrT8L3j2Ou2zKSQzBGHq DRRVLYZ7COlLRRUGAGiiimAUUUUAHaiiigApKKKACjvRRSABRRRQAUtFFMBKKKKACmsdqk+l FFIEUZrqQQeYMAHpio9P1B55REwHTOaKKybfPY7/AGcfZN2NIc1zGrvqEEF7cC7KoodlVTyO OO1FFbI4VuYdhrd4Ibe4e4lljSWQ7XPLARE4PrzV+PxdfPbE/Z7b7R5gUfe2427vXOaKK1sh kZ8R32oXdiFEcMJlQPsLBiSOR1xitG78RXsGuSWiw25t0lWPcd2/5h9cUUUmkCKUXi/UGWKS S2tNjbS23dnaz7eOevBp0fivU5ooHS3s8TuVUNu4x680UUNIEiafxVewyzReRbkxs69G52rn 1plj4qvptQtLeaG2CStGrlN2RvzjGTRRRZWA7MHIB9aKKKzJCiiigAooooAKKKKQBSUUUAf/ 2QplbmRzdHJlYW0KZW5kb2JqCjM0IDAgb2JqCjw8L1N1YnR5cGUvSW1hZ2UKL0NvbG9yU3Bh Y2UvRGV2aWNlUkdCCi9XaWR0aCA3NjcKL0hlaWdodCAzMwovQml0c1BlckNvbXBvbmVudCA4 Ci9GaWx0ZXIvRENURGVjb2RlL0xlbmd0aCAyMjAxPj5zdHJlYW0K/9j/7gAOQWRvYmUAZAAA AAAB/9sAQwAOCgsNCwkODQwNEA8OERYkFxYUFBYsICEaJDQuNzYzLjIyOkFTRjo9Tj4yMkhi SU5WWF1eXThFZm1lWmxTW11Z/9sAQwEPEBAWExYqFxcqWTsyO1lZWVlZWVlZWVlZWVlZWVlZ WVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZ/8AAEQgAIQL/AwEiAAIRAQMRAf/E AB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkKC//EALUQAAIBAwMCBAMFBQQEAAABfQEC AwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHwJDNicoIJChYXGBkaJSYnKCkqNDU2Nzg5 OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6g4SFhoeIiYqSk5SVlpeYmZqio6Sl pqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2drh4uPk5ebn6Onq8fLz9PX29/j5+v/E AB8BAAMBAQEBAQEBAQEAAAAAAAABAgMEBQYHCAkKC//EALURAAIBAgQEAwQHBQQEAAECdwAB AgMRBAUhMQYSQVEHYXETIjKBCBRCkaGxwQkjM1LwFWJy0QoWJDThJfEXGBkaJicoKSo1Njc4 OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoKDhIWGh4iJipKTlJWWl5iZmqKj pKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uLj5OXm5+jp6vLz9PX29/j5+v/a AAwDAQACEQMRAD8A7kDnNL1paXFY2JG0Yp1FFgExRilpwoAMUYpaKQxMU3FPpOaAGkYopeSK Q5oATBpcUClxQITHFNp9JigYlFBo7UxB2pKWigBKKXpRSAb3oxS0UWAD0pMcUvTIo96ADHAp aBRQAlLRRigBKWlApKACijOKp3WpW1rkSSDfjO3uaCoxcnaKLZ4Fc5rGsLmS3hB39C2eKztR 1me8JUHZH2Cis5TkevvUOXY9XD4LlfPU+4VV3NknJJzTpH2rTd2O1Vp5QBnPzd6SR3ydyC5l HJJ6VlTXO5j+gpby43t1+UdAO9UOG4NbRicNet9lEpnYkZGWBznPFTxSKykHINUzgZA5qSI8 ZH61djnjN3sxCChyOtNBZiQcmpSuAe4oRRn3qmzNxaHxr6CpY1J7UiKW6VZUFQBmspSsXCFx jwB16c9qpyxFFwx784rTzgZqleToXVF+YAc+9FNtlVEkrlT5VyCKuW8oePaD82OgqkAerY9K apKtketatXIhUcWdPol0YJZkdQRKoGBzz/nNd7o14tzar3Zflb615NbzMsyyg4YYzXb+HL5V ZRuDLIMAjmuaScZeplW97U7YdaXrUcZyoNSVRzBRijNGc0AHSilpD1oASilopgJSCnUlIApM c0ppKAExzRSmgCkAmaOtLilxRYBMUDrwKUcUvanYBo9aXH60UUAFFLSUAFFFFACUClI5ooAO 1ApaBQAUZoooAKSlxQevtQAlL0Ipe4pSeaBiUHpR3zSdKADtSUdqCcUCCgD9aXtSE4FABjml FJknBpQDjNAAaOKQjrRgmgB1FFFUAUCk7UooAUUtJRmkMWjNITgj3oNABuozSE4FJmkA7NFI KWgANGaKSmAtGaKSgANJ3p2OlGKAEopTSUCEooooAKKKB3oAKOtFAHFABRS4paQCYo7UtJQM KjmlSGMvIQqj1qlqWqwWIwSJJMZCA1yN9qE15KWkYkZyEzwKTdjsw+DnV956I09T16SVmjts qnTfmsN3d/vsWPqetMYgc9KhaTB4qD14UoU1aKLHAHv601pMKKgaaqst0qE85PpTsNu25beZ sHtWbeXHylQe3JqCe+bae30qg8rN149vWtYw6s5K2ISVoj2bfyenYUwDBppbIpQSea1OBu7E bHWnK2CMU3HrSquKAV7l1QGGBzS/Z2xuUZHp3FQQPg4zWnGCBx3rNux2wiprUpRu0ZO5TipW uFA6Y/GrbxCQDIqvNbKVxjaexFTdPcp0XFaFaS5LjGcD+dVT8zlsE5wBU8ltsyRlsDqahUqO h/CtopdDkmnf3hSAAf5mk2g96XILYpmcP9KZI9WIibI/GrWnXklrPGVYgBwfpVXB8n6nNJ90 qPXmoluZy3Pa7GXzbeJweHUGrdc54Lu/tOhR5OWjYoa6IVkznejFooooEFLSUZoADS+lHakP AoAPWkxzTh06UMOaAG0gp2OM0CgBppaKWgBKWlwTRj3oAb2oB4pzLgdaaBx60AFFBooAXvSU d6TNAC0UUuSKADFGaUjimjmgBcc0delFA70AFGecCl68mkPXNACNnApQePcUdaXtzQAGkx3z Rnjml7CgAPOKTvS0UAIR8tJ1NLijoaAFHSkoooAB3ozRRQAUDpRRQA6kooqgEPWlFFFIBaSi igYp60p6UUUANNJ3ooqQFFL60UUwCiiimAvaiiikAelHrRRTASjtRRQAlIetFFAgoHQ0UUAA p1FFAAaDRRSGL2pP8KKKYHD6z/x/t9P6msw9aKKx6n01L+FEik71B/hRRVCIn6NWXN3+tFFa QOasVpuo+lRN0FFFbHmT3JE6rR/e+tFFA4h/EfrTl+/+NFFI07D4/vH61qRfcWiis5nXRJ1+ 6KR+lFFZna/hK56n6Vjj7zUUVtA83Ebocfup9KH+/RRWpzDv+WK/Sg/fT6UUVm9zN7nonw7/ AOQVcf8AXb+grsRRRWb3MZbhS0UUiRKBRRTAKKKKQDx0ob7v40UUDGjvSUUUCAdKXtRRQMUd KSiigAakoooAQ0DpRRQIKKKKACloopgO7CkHU0UUhgaPWiigQUHpRRQAHpSHpRRQAUCiimAt FFFACd6WiikAnegUUUABoFFFMAooopAf/9kKZW5kc3RyZWFtCmVuZG9iagozMyAwIG9iago8 PC9TdWJ0eXBlL0ltYWdlCi9Db2xvclNwYWNlL0RldmljZVJHQgovV2lkdGggNzY3Ci9IZWln aHQgMzkKL0JpdHNQZXJDb21wb25lbnQgOAovRmlsdGVyL0RDVERlY29kZS9MZW5ndGggMjEy MT4+c3RyZWFtCv/Y/+4ADkFkb2JlAGQAAAAAAf/bAEMADgoLDQsJDg0MDRAPDhEWJBcWFBQW LCAhGiQ0Ljc2My4yMjpBU0Y6PU4+MjJIYklOVlhdXl04RWZtZVpsU1tdWf/bAEMBDxAQFhMW KhcXKlk7MjtZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZ WVlZWf/AABEIACcC/wMBIgACEQEDEQH/xAAfAAABBQEBAQEBAQAAAAAAAAAAAQIDBAUGBwgJ Cgv/xAC1EAACAQMDAgQDBQUEBAAAAX0BAgMABBEFEiExQQYTUWEHInEUMoGRoQgjQrHBFVLR 8CQzYnKCCQoWFxgZGiUmJygpKjQ1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2 d3h5eoOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX 2Nna4eLj5OXm5+jp6vHy8/T19vf4+fr/xAAfAQADAQEBAQEBAQEBAAAAAAAAAQIDBAUGBwgJ Cgv/xAC1EQACAQIEBAMEBwUEBAABAncAAQIDEQQFITEGEkFRB2FxEyIygQgUQpGhscEJIzNS 8BVictEKFiQ04SXxFxgZGiYnKCkqNTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1 dnd4eXqCg4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV 1tfY2dri4+Tl5ufo6ery8/T19vf4+fr/2gAMAwEAAhEDEQA/AO5ApcgU2iue5IuaKKKACiij FAB9KMUUUALSUuKDQAlFFLSAKKKWiwxKKKKACkpaMUAJSUtFAhKKKKACg0tJigAoFLR0oAUU ZpKKdwCg0lFIAoopcc0wEopcUbaAEpaPrSUgAn0opKUCgAFLijFBp2sACiijvSGI6hlZT0Ix Xj/ijQrjSb2Rwp+zOcq49+xr2Gqt9Y21/CYbqFZUPUGrhPlYHhqBpCFUZJrZs9Cu58Yj2j1N dbqHhnTLCeI2qP5rNyGbIAq8iLb7cAYHWipXeyOqjSTXMzll8MSj7zGn/wDCOYbJJ2966x5o m5Qiqt2SEyD1rF1J3tc6oxT6HMyaJaxxu8k5GBwK56SFtzbegNbeomeQEKePrWfZ2txeXQt4 ULyMc8f1rppXtdswqxjfY2vCnhtNUWWa5JSNcAbepNejW1vFbQrFCgRFGAAKqaJp403To4MD f1cjua0e9RObkccrX0CnCkpRUEi0tNpwoGGKSlzQaYDGFHanYzRtoEIKKXaaMUgAUtIKKYC5 60HrSUtMBKO1FHFADTRg0ZozSAMUlFFABS0gpaAFFJS0negBetLTc80tIBelK3IzRjignC4o GNoopaYgHFLSUvagY2nZpKKADNBpcUhoENooNFABmkoopALSUUUAFGaWkwDQAtLRRTAKMUlL QAYpaKOnSgAoxRRQAtAGRRQDQMMUYopTzQAlBozQc0AHak70ZoFAg7UlKKKYCUUGkqWAUYpc UUALikpaQ0wCikJopALRR2op2AKPSgUUABBpw6U2jNADiRTd3pR1pQKNQEoAp1J0osAYooJx 1rH1LW4rYmOE75vQdqNjSFOVR2ijTllSIbpHVFHcnFZt1rtpCcIxl/3c4rnJ5p7hi1xISD/D ngVUkZRwOlS5X2PSp4CK+N3Oi/4SZAfltmYe7Y/pUEvih158gL9X/wDrVzzzBcAdazrm4Byx PK+lCTZrLD0IK/KdJN40mB8qC1DSHgMz8A/TFSQ69qhj/emLcf7qYxXNaQvmSMxH3RgVqzSC OMk9BTno+VHNClB+9Yti6kkuPNmbc1JdXiqjMxwT2rCuNVEY2r19az5L2SXOTSVJvUt1IrQv Nq8lrMfmLKT61ZGvCZcOCp965x+csxJNWtLSBbkNeozxEYCg4ya1dONjFVJN2RaurxGLFMMT 2rtfB+k/Y7E3EyDz5ueRyoqjpsnh2FwTD5bnvICRXXW80U0QaF1ZO2Km/RGVeUtmrEw6UoFA pc1JyhS0UCgBaXpTQDTyPWmMTv0o7D0pKWmIKKKSgB3akopB3osAZo70nel9fagANJmiikAu aaaWkoAKKMUYoAQUtGKO1AAKKBzQRQAZzQf0pQOMUYosAmKXqaBS0AL2o7UlFAwxQKKKBBQO lLjijpQAUUUUDDNNpwoIxQA3tSYzT+gxR2oEMxRinZ/CgEUANxRin5Wg4osAyilIpMUgF70U UVQBS0UUAFFFFAC44pcUUUDDFJjBoooEFFFFACUUUUAJSiiigApOaKKADFLiiigAo7UUUAJR RRSAMUdqKKAA0DpRRTAXrRRRQAmKUCiigBeKKKKACmuwVST2oooGjl9W1uVpDDbEoBwWrJix lnbr6miisnqfRU6cadNKKILmY7feqE05HfrRRVJA3ZFSWRl2/NyTUDZMbKKKK1ic09bodpt5 9nDqF5NF1fyyKecUUVbgr3ONSfIUADJ945OepqRV5PHGaKKGZoJRt/GnOxMSjPQ4oopouPUW Gd422sxK5ratNTurRW+zysmBnA6Giioklc6qb5k0zrfD+vPe2xFwnzx4DMO9dGp3ZxRRWfU8 6tFRloLinAc0UUGI7oKQniiimADmiiigBKKKKYBQO5oopMAoJxRRSAbRRRQIXFFFFMYUmaKK l7gHWjtRRQA4dKMUUVQBRRRQAUUUUAAoFFFAC0Y70UUDDPFFFFACUUUUhC0HmiimMb1o6iii kIDmkxRRQAYowfWiiiwBg+tGPeiiiwH/2QplbmRzdHJlYW0KZW5kb2JqCjMyIDAgb2JqCjw8 L1N1YnR5cGUvSW1hZ2UKL0NvbG9yU3BhY2UvRGV2aWNlUkdCCi9XaWR0aCA3NjcKL0hlaWdo dCAzOQovQml0c1BlckNvbXBvbmVudCA4Ci9GaWx0ZXIvRENURGVjb2RlL0xlbmd0aCAxODQz Pj5zdHJlYW0K/9j/7gAOQWRvYmUAZAAAAAAB/9sAQwAOCgsNCwkODQwNEA8OERYkFxYUFBYs ICEaJDQuNzYzLjIyOkFTRjo9Tj4yMkhiSU5WWF1eXThFZm1lWmxTW11Z/9sAQwEPEBAWExYq FxcqWTsyO1lZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZ WVlZ/8AAEQgAJwL/AwEiAAIRAQMRAf/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkK C//EALUQAAIBAwMCBAMFBQQEAAABfQECAwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHw JDNicoIJChYXGBkaJSYnKCkqNDU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3 eHl6g4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY 2drh4uPk5ebn6Onq8fLz9PX29/j5+v/EAB8BAAMBAQEBAQEBAQEAAAAAAAABAgMEBQYHCAkK C//EALURAAIBAgQEAwQHBQQEAAECdwABAgMRBAUhMQYSQVEHYXETIjKBCBRCkaGxwQkjM1Lw FWJy0QoWJDThJfEXGBkaJicoKSo1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2 d3h5eoKDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW 19jZ2uLj5OXm5+jp6vLz9PX29/j5+v/aAAwDAQACEQMRAD8A7iijoOaD0rmJCikpaADpQKM5 60UAFFFFMAoopaAExTgKSigBc0metBoxQAUUdKKACiijtSAKKBzRSuMSilooASiiigQUUlLT AKKKKACiiigAoopaAEoxS0hpgGKSlpKAClpKKAClopKQC96KTvS0AFBpRQelADSQASTwOtc3 q3ieOENFp224nHBbB2r/AI1T8W6rK10NMgyowGkYHr7VhTMkMHlRgAjqa3p076spIde+I9Wm h2/aPLPfYoFY76pfyDLXlwf+2hGP1ok4fOSaqv1xitVZbFWNiw8Y6vp21HkS7iHaUZP59a7T RPF1jqpWJz9nuScCNu/0NeWOBkD1ojJjkDKdrqcg05UVJXJPdc8UZrK8N6g2o6NDO/8ArMYb 6itWuNqzsyRRRQKKQCilFIKWmMTpSUtBoEJ6UlHel70gEpKWimAYpBS0UgEopaKAEpe1FFAB QaSigAo70lFAC0UUUAFLSUUAAoFFFAC0nB/CgUtABRRRQAUY4paKAEoopcUAJR0paQ9aAFzT Qc84opcUAHekpe9GKYB1FAG0Y5/GlxRQAUUUlAATnijPFFLSsAmKKKKYBRRS4oAKMUfQUZoA KKKQn0oAXpR1oA7mjNAB0ooooAKKKKQBRRRSGAFFA6UlABRRRTEJRRRQAUtJRQAtFFFABRSg UuMU7AJSUUZoAKTPNFFIAooooAO9LRRQAUlLSUAFL3oFKKADpSE8E0tYXiPxJa6FDtcGS4YZ SId/c+1CVxnD6pMX1+8fOT5rAH6HimTYjTfK4XvzWPNq081xJNhEkkYsWUZxmqks0kzlpHLE 8mu1LQdy7cXsWCEBY9j2qk1xIx5P5VH16Cl78daLCuKrFj82TmplTeM5OR71AAc1IjMh+Vsn 2rSPmBraT4kvtIHlwsHizkowruNC8ZW2p3At54/s8jfcOcg+1ea7QyNkAsehpLeR0mVozhlP GO9RKknuDPdhzg5pRVTS3kl022klz5jRqW4xzirtcIWDtRSUCgA7UGlNNpiE9DS0dqO1ACUU vWigBKMU7FGKQDaKXFHemAUlB4FFIBKKKKAEpaSlFABRQTRQAdqKKKAEpaMUUgFFHcUAHFKR wKYB3NHbNJSn07UAHagUp5pKAFxnpQRxikGRS96YCE0UUUAFFGKOPWgAxRRRQAUUUlABRRRQ AUtFFABjJox60UUwDNBoopAJS0UUgDrRRRTAKKKKAFpKKKQBiiiikMXtSUUUwDtSUUUCCgUU UgCiiimAUUUUAApwFFFMAHFITRRQAlJRRQAtJRRSAKXHFFFAAKKKKACkoooAcKO9FFADZG2R u/ZQTXiesXT6hqc1xKxbc3AJ+6PSiit6K3GUXGCOMZ5FNAJNFFbsESrHx607yhxwKKKhtm6g rDWjwaUKqnnnNFFXGTuRJJDJHy21fpiun8HaB/aNytxNgQRnOB1JoopVJOzZmepqNqgDoOKc KKK4QD0ooopgBpKKKYhOlFFFIBR7UooooAXtRiiimMMYpD60UUxDDSgcUUUgA0lFFIBBS0UU CAiiiigYvtSGiigBe2aMcUUUAOHalccCiigYyl7YoooELSmiigYYpKKKAFxSUUUAFNJoopiC iiigBM0uaKKACiiikB//2QplbmRzdHJlYW0KZW5kb2JqCjMxIDAgb2JqCjw8L1N1YnR5cGUv SW1hZ2UKL0NvbG9yU3BhY2UvRGV2aWNlUkdCCi9XaWR0aCA3NjcKL0hlaWdodCAzOQovQml0 c1BlckNvbXBvbmVudCA4Ci9GaWx0ZXIvRENURGVjb2RlL0xlbmd0aCAxNDk0Pj5zdHJlYW0K /9j/7gAOQWRvYmUAZAAAAAAB/9sAQwAOCgsNCwkODQwNEA8OERYkFxYUFBYsICEaJDQuNzYz LjIyOkFTRjo9Tj4yMkhiSU5WWF1eXThFZm1lWmxTW11Z/9sAQwEPEBAWExYqFxcqWTsyO1lZ WVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZ/8AAEQgA JwL/AwEiAAIRAQMRAf/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkKC//EALUQAAIB AwMCBAMFBQQEAAABfQECAwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHwJDNicoIJChYX GBkaJSYnKCkqNDU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6g4SFhoeI iYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2drh4uPk5ebn 6Onq8fLz9PX29/j5+v/EAB8BAAMBAQEBAQEBAQEAAAAAAAABAgMEBQYHCAkKC//EALURAAIB AgQEAwQHBQQEAAECdwABAgMRBAUhMQYSQVEHYXETIjKBCBRCkaGxwQkjM1LwFWJy0QoWJDTh JfEXGBkaJicoKSo1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoKDhIWG h4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uLj5OXm 5+jp6vLz9PX29/j5+v/aAAwDAQACEQMRAD8A7PFHenYoxXMZjaMU8CjbQOwzHNOxS4p2KAsM xS9Kd39qD7CgdhtLilFFACYoxS0tACAUuKKKAENFFFACZpcUUUAFJS0UAFFFA60AFHSg0d6A F+tFJScmmAtFHejFIANJSjrRQACg0tJTASjFLRQIQUd6UUYNACUUYozQAdBSUtJikAUlLilo AbRS0UAJjNGOacKQ0AJRilooASkHNLS0AGKMUtFACYpenSlxRyKBiAcGjHI9qUdKKAF/ipMY pcUdOtACE80UvvRQAlFKBRQAlJS44oNACUUDrS9qAEopcUnU5oAKKXvSUABo70v8IpMUAApa D0opgGKKOvNGOlABRS0gpAJ3openNLjBpgJRRRQAdqKOtFABRRmigBDRgUppKBBxigAUUZFI BMCjbxS0Z9KAGlaTbkdafikoAbj3oxzTjSUAOFJ3paKQw+lKKBxS0wExRS9qSgAooFFAAKWi imAUUUUAJRS0UAJRRRSAKKKKAAc0ClooASlo70lAC9qSlooASlopKACilo9KACk70tHegAoo pKLgFJS0hoAUmkzmkopiClxRmigAxzS0lFAxaKSikAGg0UnegQUGigc0AHailHSkFAAKKXFL jmgYgo70vTNLQAGlXmkHWl6ZoGGOaQ06kpiAdqDQeKDQAnagUhNFIA70opKKYC0UlJQAdKO1 FB5NAgoJ9KTtml70AAPFB702nUAKO2aO1JRQMU8ijtSUvagQCijtSdqBi0UlLSAOpoJoNJTA WkyTwKKMUAByBx1pc0UUAFGaKQ0AFFFLQAlGKWjtSASinUmKAEoNLiigBMUUUUAFKKKKAClo ooASjPBoooAO3NLRRQAUUUUwEooooAWjGKKKACkoooAKWiigAooopABpD2oooAKAKKKQBRRR QAvajtRRTASiiigAzzRnFFFACdaTFFFABijFFFMQtFFFACfzpaKKQBjtRRRQMMc0tFFACYoA 4oooAOMelJwRnNFFMaFz7dadRRSEFFFFAB3paKKAFFHaiimMDTTRRQIQ0UUUmAlFFFABRRRT EFHeiigAxRiiikMKDRRTAXpSetFFIBaO1FFACUdqKKAFzRRRQAlH9aKKYB3paKKACg9sUUUA FGKKKQCUZ5oopiFFAoopDDtSZoooAUHijrRRQAYoxRRQB//ZCmVuZHN0cmVhbQplbmRvYmoK MzAgMCBvYmoKPDwvU3VidHlwZS9JbWFnZQovQ29sb3JTcGFjZS9EZXZpY2VSR0IKL1dpZHRo IDc2NwovSGVpZ2h0IDM5Ci9CaXRzUGVyQ29tcG9uZW50IDgKL0ZpbHRlci9EQ1REZWNvZGUv TGVuZ3RoIDUzODc+PnN0cmVhbQr/2P/uAA5BZG9iZQBkAAAAAAH/2wBDAA4KCw0LCQ4NDA0Q Dw4RFiQXFhQUFiwgIRokNC43NjMuMjI6QVNGOj1OPjIySGJJTlZYXV5dOEVmbWVabFNbXVn/ 2wBDAQ8QEBYTFioXFypZOzI7WVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZ WVlZWVlZWVlZWVlZWVn/wAARCAAnAv8DASIAAhEBAxEB/8QAHwAAAQUBAQEBAQEAAAAAAAAA AAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQAAAF9AQIDAAQRBRIhMUEGE1FhByJxFDKB kaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNk ZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXG x8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEAAwEBAQEBAQEBAQAAAAAA AAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSExBhJBUQdhcRMiMoEI FEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElKU1RVVldYWVpj ZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPE xcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwDrsUtFLisD EbQBmnYpMUgsJijFOxS0wsMxRinUGgLCBaMVBfT/AGazml7qpI+tYOi392dQjjupXdJkJUMf 1/Q1LZ008NKpTlUXQ6XGKXtQTWHLrcjX0cMUJWJn2lnHWm3YilRnVvy9DdzSGormdLW2kmkP yoM1V0e4uLy18+dVUMfkAHai5KpycHPoi+OlJ1p+OKiaeFG2vKikDOCaCFFvYdinBaZBcQXI JgkSQDrtOabLe20L7JJ40bpgmgr2cr2tqS7aXZx1oDqyBgwK9cjpUIvrRshbiM7Tg/N0oBQb 2RMFwaXFI8qJH5jsFTrknio4bqC5GYJUkx12mgOV2vbQlxTsUhIAJJwBUMV7bTSGOOeNnHYH mgai3qkTketL9KhkureMsJJkUr1yelOhminj3wurqe6mgOVpXsPIyaXHNQS3ttFII5J0Vz0B PNTMyhdxIA65pA4tboDSY5qGK8t52ZIZ0dx2Bqrpq3UZuWu5ldd2Vwc4FFy/Zuzb0saFBqul 9avJ5a3EZf0DVna9czQTWYilZA8mGx3GRRcdOjKc1Da5rmjGTTjVd7u2RctOmAQvXv6UGSi3 sifGKB0NRz3MFvgzSpHnpuNO82MR+ZvXZ/ezxQPle9h3aioDe2vmLH9oj3t90butTuyxoWdg oHUmgHGS3Qp5FHWoYLq3uSfImSTH90057iFGIaVVKjJBPSgOSV7WJMUnesbVNZEFxaJbyxlJ DmQ9cLkf/XrXjkSWNZI2DIwyCOhoLnRnCKlJbjqMYJqGe6t7cjzpkjJ6BjTg6FRIJBsxnOeK DPldr2H0VA97ax7S88ah/u5PWp8gjIOQaAcWt0HSkrH1HVjbalbwLIgjJ/ek9hUdzdt/wkNq qTf6O0e44PB+9zSudEcLNpN9U39xuUVFBdQXBYQyo5XrtPSia6gtyPPlSPPTcaZz8kr2tqTU UisrqGQhlPQikd1jUs7BVHUk0Cs72HUYqKC6guMmGVJMddppv222M3lefH5n93PNBXJLaxPi jFNkljiAMjqueBk9aYLu3M3lCZPM/u55oEot7IkK0bajS7t5JjEkyNIOqg81Vtkuxqdw0syt AR8iZ5FBSpvW+li8E705VAqJru3RSzToFU4Y56VJFLHNGHjYOh6EGgTg1q0OwKTioft1ruZP Pj3L1G7pU6srqGUgqehFAOLW6Ex1o7cUxLiGUsI5Vbb97B6Ukc8MisY5EYL1IPSi4OLXQf0F JjI5rO1F5bq1RtOuUHzjLbscVoGaOPYsrqHPqepouU6TST69uoqrz3pxGe1MjuYXRnSRWVTg kHgGkhuoLgkQSpIR1CnpRcnkfYkI96aRWRBczN4nubdpGMKpkJ2HC/41qT3dvbkCaVIyegJo uXOjKLS3uk/vH7aNtHmIU37hsxndnimQ3dvOxWGZHI6hTTuZ8j3sSbaXHFQPfW0UvlyTxq/9 0mrAYEAjkGi4OLWrQ3FLgVC11Am7dKg2/eyelLJdQRRCSSVFQ8gk9aLj5JdiTbRtqP7TB5Pn eanl/wB7PFK08Sw+c0iiLGd2eKLi5H2Hgc0EUw3EIh80yKI/72eKSC5guATDKsg/2TmkHI7X sPxRisfS7qWXVb9JZWaOP7oPRea1op4pkLRyK6jgkGhMurRdN2fl+I7Aoqpc38MdhNcRSo2z IBzxux0qja3s2oaQ3lzxrec57Y54pXKjh5yjzbK9jZxRiobXfFZR/aZFZwvzPniiG7t52KxT I7DqAaLmbg1e2tiaio2miR9jSKGxnBNJDcwXBIhlR9vXaelO4uV2vYloHWlNIKCQxRgYpSaS kAmKAKU0UAJiilHGaMUAFLRRVAJQaWkxQAUlKBRQAlGKdilAoCxheJ5vLsFj7yMB+A5rJuL2 3E2nSW7HMACuSuPT/wCvW9qWnT3mo20gKCCI5IJ5PPpU2s2LahY+VHtDhgyljgf55qWepQrU qcYQfW9/K+mvyLygEA9jWJrYA1DT8DHz1r2ccsdpCkxBkVQGI6E1kahYandXaSq1vtibMeSc /jxTZz4ZRjVd2klf9UR69MtxewWBkWKPIeR2OBipLTUkGtParPELNUAjwRgnjgH86vLpsVyi SX8Eb3OMMVziqdvoSx6w85jj+zAZRQTkNxz/ADpam8Z0HT5JdE+2/df1sPutUvYriSKPS5ZU VsBxnDe/SqNxClz4lt0mj+V4gWQ+uDxXT1zeoCY+KYhbsqy+WMFhkd6GLDTjJtRXK+V63Y6O JLHxTHFbrtjlj+ZQeB1/wptxNYztdfZrB7g875VHAPrV6x025F+97fSI8pXaFToBUNvpF9a+ fBbzxC3lJJLLlhSNPaU+a7lqkurs+/rYzobiSPwo+1jkvtz6Ck1ext7fRLOWJAJGK7m9cqTW xBoyxaPJZzyghiWD4xj0rG1m0vLXTYVuLpZYlcKiBcY4POaRvSqRnV9yVveb9VYt67OBd2Nu 6O8IUOyIOW/zimW0g/tuGS1s54ImG1wyYFa2o6a94kE0EvlXEP3WxSWcGqeer3lxEYx1RF6/ jT6nOqsFSsrXs09X+VtSTVoZrjTpooP9Yw4Hr7Vk6RPZpPBbXNmYLuPhWI6mt27imltytvN5 MmQQ2M1m/wBlXtzfQT380TLAcqEGCfr+NDMqE4+ycZOy1732/EqG2iufFk0cyB02bsH1wKdp R+yarqNvHxEgLAelMkW4bxTN9kdFl8v+MZBGBWppemPbPPNcusk8/wB4qOAKDerNRp2k94rT 9Tm7aWKeyuzLaTT3ExOJFXIU9uas3c9wdEsbeTejSOUbPBwDgVox6XqNi8iafcxrA7FsOvK/ SrN5pb3umxwzzZuE5EgGOfpRYuWIp86elr366aW2toS2+l2lvskjhAdFwGrG0eSCK31Vrn/U 78N79a07K31VJF+1XMTRIMYUct9aqQ6HKbS+hmdFM7hkKnOMEnmmYRlFKSqTve35mXqjwNYR SW1hJboHG2VhjIwa0NfJLaYT1Lj+lSTaRqF1Yx2s9xCqRY2hVznHAyfpVnVNMnuzZ+UU/csC 2449KVjb21NShrtzdW91pqzVI4NcxodlBdX160y7jFLlBngHJ5/SupIrK0fTprKe8eYoRM+5 dpz3PX86pnFRqclOaTs3b8zG+0xSaxevdW0tyASiBFztAJFOtvNHh6+jljdFU5QOMcVpT6Zd w30t1p0yIZuXRxxmi+juo9CuhdzLLIRnIXAHtU2Oz20Jcqjb7PV308tjKmsoF8Lx3SpicEHf 3+9iptVne5h0mFyds+0v79B/jS2dhfX+lW0JnjW0PJ+X5uvStTUtKW6toUhfypLfHltjp/nA osOVaEJpTd3eXyvovxM3UrePTdTspbVdhc7WC96S5to7rxV5MoJjZMkA4zgVct9Lu572O51G ZH8r7iIOKlOnzf2+L4FPKCbcZ56UWM/bRjpzXai9fPoZ2vW0MV9piJGoUvtI9RleK6ONFjQK gCqowAKzda02W+EElu6pNC2V3dO3+FXrRZktkW4cPKB8zDoaa3OarNTpQ11V7r5mBpcEWpXt 7NdJvIbaAe1Rae5Gnavb8mONW257davy6XeQXcs+nTogm+8rjp9Kkt9JNvpl1CHDz3Ctuc8D JFKx1SrQtfm0fLZdrWuZCWcB8LNclMzDo2enzYroNHOdKtieTsFVF0udfDrWJKecffj72av6 fA1tYwwyY3IoBx0poyxNVTg1e/vP7rGLrEMZ16xBQESMNw9eabqFvFJ4ltIGUeUYgNo44+ar +r6bPdzQXFrIqSxHjd0pv9nXT6vaXcjRsI49rnOCTz2x70jSnWioxfNtFr59CpaQpbeKpYoV 2R+XnaPoKqQXUU15dS3NrNckttXauQoraXT5hr8l7lPKZAuM89B/hUMmm3ttdSTadOirKcsj jjNA1Wpt6vVxWt2vXUPDZkEE8bxyRor5QOMcGotczcavZWTEiJvmYevJ/wAK1rGO6jiP2uYS yE5yFxj2qtq2mNfGKWGTy7iI5Vu1PoYxqx+sOb03187bkWo2sGnWFxNaxiOQptyKzjp9v/wj QudmJ9u/f3zmtSGzvp45Y9RmjeN127UHT3qn/Y+oGAWZuk+yA+nzY9KRrSqKKs56ppt66rsV dWlabw7YStneXxk9eAR/Sna1Y29tPYLCmze2GIJyeRWjq+lPc6dBbWuxfKI++e2CKfqunTXk 1m8RQCFstuPuP8KLFU8RBctnZXl+OxQureKz8Q2C26eWG6471Lpn/Iz3/wDuf1WrV9p00+r2 lyhTy4T82TzS2enTQ6zdXTlPLlXC4PPb/Cgh1ounq9eW3zuZekWcF1f6mJo94RztBPAyW/wp umTPBoOoFD9xiF9q1tJ02a0ur6SUptnbK7T7nr+dM03SXt7G7gumTbMxOVOeMUWLnXg+a7uv d/DcyJ7GBPDCXOwecxB3555OK6TTP+QbagY/1a/yrntS0+8s9IdWvFktVI2oFHOT610mmf8A INts/wDPNf5UIjFPmpJ81/ef5HNGUadfarHnG9dyj6//AK6js2fTI7mNzzLBvA961dY0Wa+1 GOeIxhMAOGPJ5/wpdb0aS/aBrcopQbTuOOKLG0a9JqKk/i3+VrfkZF3B5Hhi0JGDJNuP5Grv iFA9zpqHo7bSR6Eir+r6VLdaZbW1uUBiYE7jjgDFLqmmTXdxYyRFAsDZbcfcdPyosTGvFyjJ vrL8dihr6R2Nlb2tuhWKR8sF6moY5F/tazks7KeBFO2TcmMitzVdOF/bqofZIh3I2M4NQ2tt qonQ3N1EYk6hV5aixnTrx9lq9db3b1v+ZTtefGF3/wBc/wCi1nWt1DNPdTXVpPctIxClVyFH pW7Bp00evz3rFPJkTaADznA/wqFtLvrS5lk02dFjlO5kkHQ0Fxq072vryx6223V0Z1tBd3Gh XFuiOrK+VVhglfSreizWbTLCbbyLyNNpyMZ9av8A2XUWsthvFFxu3bwnGPSq9tpd02pC9vJY y6LtUIP1P50WIlVjOM1JpbvS++n3pmRGqadPNHqtoZBK+RN1rqothiQx42Y+XHpWRc6ZqdxD 9mkuopISeXK4ati2gFtbRwryqKFFNGWKnGcU76+V7fjsc3DaQ3XiS8SZdyLztzgHpTLqeP8A 4SB1mt5J4oE2pGgzjgc4/H+VbFpp00OtXN25TypRhcHntUd7plx9v+22MqxzFdrBhw1Kxuq8 OezenKkvJ2X3GZYwPPb6jB5MkcLfPGrjGKhkuTJoEFsM+YZPLwPaujsIrxA5vZllLdAq4C1l waFLHq3nkp9nDl1UE5/Kiw414OUnNrSzXm0rEV7CG1TT9OfPkogJHYn/ACKdLGlh4ktltl2J KnzKOnf/AArQ1TTXu5Ip7eTy7iE5Unoais9NuDfi91CVHlUYVUHAosRGvHkTcujTXdvqU9O/ 5CWrf7p/rUvhz/kDS/7zfyqzY6bLBfXsspTy7jhcHmq1tpWo2okghuY0tmOc7csKBzqQmpR5 l9n8FqVtJRX8M3m5QcM5Gex2imwRIPCckgUB2yC3c/NWtp+lG10ye0kkDeaW+YDpkAf0qnFp F+mnz2bTRNGw/dj05zzxRYv20JSlaX2k/kU76RxoWnRA4WTAb3qbWbWLTHs7i1TY6vg7f4qv yaQZ9IgtZHCzQjhhyAaiTSr25uYX1GdHjhOVVB9760WFGvBa82icrrvfYr6lCk3iW1jkGUdO R69aLSJLfxQ8UK7EKE7R9Kv3GnzS65b3ilPKjXBBPPf/ABoTT5hrzXuU8optxnnpTsZ+2jyc vN9i3zuadHelopnmjaWlI4pKAEpaKKQCUUGigB2KMUUUwEooooAKPSiigBaUCiimAYpaKKBh iiiigBe9KKKKQBjmqbabG+prfFm8xV2gdv8APNFFBcZOOxdxSdqKKCSK6t0urdoZM7W64OKz IvD1usqPJLLKqHKox4FFFKxpCtOCtF2NkUdqKKDMSgEGiimIqJpsSak98GYyMNuOwFXaKKZc pOW4lFFFIkKSiigBRRRRTASiiigQVBeWy3dtJA5Kq4wSKKKQ03F3QtpbJaW0cEZJVBgE1Lii igG23dgB1zR1GKKKBB2pKKKADtSUUUAKelJ2oooAM8e9HcUUUCD3oxRRQMXGaPWiigAooooA UdDSDgj60UUAOZfmx2pB96iigY/puHvUUsYmheNs7WGDiiigezMgeHbfcN00zRA58stxWyqB QFUYUDAFFFIudWdT43cd3NJRRTMxe1JRRQAoooooASlzRRQAlKKKKACiiimAlGeelFFIAo7U UUAJigrRRQICtG2iigA28Um00UUABWjFFFACYoxRRQAUUUUCAijHFFFACcUh5FFFIAxkcUY5 6dKKKAP/2QplbmRzdHJlYW0KZW5kb2JqCjI5IDAgb2JqCjw8L1N1YnR5cGUvSW1hZ2UKL0Nv bG9yU3BhY2UvRGV2aWNlUkdCCi9XaWR0aCA3NjcKL0hlaWdodCAzOQovQml0c1BlckNvbXBv bmVudCA4Ci9GaWx0ZXIvRmxhdGVEZWNvZGUKL0RlY29kZVBhcm1zPDwvUHJlZGljdG9yIDE1 Ci9Db2x1bW5zIDc2NwovQ29sb3JzIDM+Pi9MZW5ndGggMzY0OTE+PnN0cmVhbQp4nLR9BUBU 2/P/jV1gaRAMVFQELOzAwsJAsVBabLATFVGxC8V4KDYiKBgIomA/A7sQW7C7A6Rhd+/9zznn 7orK3sX3//7m+ZRdbp6Y85mZz8yhY+7FMxRF0zRLU/CvnEP/SGj4hlPyPCUI+pL/+QONf0Or fo3+hYsw6Gse/a/+lqI+vHh3cEPCtRNXKA1iYWU5fEGAvpHhQp/Zmo4xMDYoLixWyBVlnW7R fYhrfceGR7YfvHL4oqYrDJjo2cWvL6Orgx6VRi8Iz79uQujd8zc1nQJiWdWy4wDnpl1aVqpW RU+m8+NL1un4Ewc2JYicAjJp9Yw2PdtDk9IUD/+/e/bm4NaEc4dSyzxYZijrPaSv96RBCqE1 0T/ZX76vGLvkZeYLTsn9eUq/4f08xnnrGxlQ+PrwIjdS05aNXiT+VB36dOzUv0vterWNzYzl JfKb527s3xz//OFzkVMcHBsu3bWMRr2O/uN5Gt8O3ZGlafKBdDet+pN5JzN6dfTty7fLvGDF qhUH+rv19usLP3MUOh+Gy6c3H6e4TcrPLeB/jrefMmnRuG4Dusr09eB3l09e3r1h36N7TzQ9 sJGp0fAZw7p7ulCol+k9Ebv3b00oKigq82BDYwO/yX4u3j0lOlJ4kk+vPxyISjocd6TMgyVS Se8hvYfNGEkzDHpKnuMpLvtr9prAVQ9vPlQqlH+e0s296/Cg4YamRkr8WjDqHt3KDPIK0vTw RPT09cwrmhuaGLAsy3E89FSNejWdPXvYN7Jj8AEvH708uPXAxaMahzpI8KZgh7ZNWAma01dP XN69Ju7z28+aDm7bu8OgGUPMLU1gPjO4F2Hiv338Zkb/aeKPGrx9fuPWDnCGgueV6FxhTBzd kRK3KkbkRGjMLh7O7Xt3rFCzWgUT/byC4itHzh/YuD/r83eRs3p4dx8xz78YTQhal6Ff3HkU 7DNH/Ak3HPzHrqEtvI4SJhKvXDd7w6nEMyLHm1QwdXbv0qJ7m0rWVrr6+rnZuamJJxPC9yiV ZfSvWvxmjejq60JmLrz+949f/407fjQ6peyjaUrfUH/k4nFNO7ZkJCx8IZcrlg0JeXH/qcgt OgzoMnLhWOhOloHeoRSoEX6ZLKDQ0Iik0N/wCxZ3xMXk1JStBz6++qDpsjp6OjXq1Wjds41N k7oGJsZ8saIwJ+/Vo9dXjl8qyM3/+u7z1A3BtRraSCQsjPeE9fvOJ57JzcrVcCndVj1a9x0z sHK1SnBzWCOKCgpvpd7ctWx7XnaepgdwaNfEd+bwGjbVQBko0PODYmH2rYo+siNJpDUMjPQ7 uzu37NkOuknPQFacX5iadPrghvjCvEKRs/qN8+w31gNanGHoy4cvbJoZLnIwhdq8U/veHazt rfWMDIuK5OlnriVDY754L3JKsy6tJoXPkMLaibsHNM+llHMxi7dpOr5Ft9Zu472r1q6O1lKk /fiC3IJj0YeOxxyWF8v/PL5yDavgqAWWlc1LlD+XwmM7Dh2OPAQnarqLvpF+veb1W/doa1O/ tq6BXlFh0Y8v2U/vPb534Vbuj1yeZkaHTYVnoNGwgXUcnoMuUFKzeo6FASDysr0D3AZM8uHg fJoCBcrgRQKG37tXHzbNWPPy4QuRc4fOG+XYs73MUB9+VhSXwJR59ejVw6t3Xz18XlJU3KKr Y/+xHgzLlgYSpYVVrUNYFVMSRvgZTQEerSt0qYN5vEiRL2n8UYGXTQnN0zH39mPcA/MK/VaB 0Q/+BhSGas6jg/FahXEPj3HPb7dgyPpICUsYr1oXsz9/T4yIv3gwVVNDVKhcwXuGH8tK1k1Z XeYBujKdhu2avHjw/NuHr2Ue0K5vx/b9Ox3atD/zxkNNd5m8Lqh+u6aURMILQI3C6Ge5OPpp 7NRs0trpujI9Grcex3EfXryd0XeSyCnoXquD2vbqwKJG4mEBu3LiUsLGvW+evC7zYDNLs7nb FtasVwvUc+nvty/edCHlfH5u/p+ndOzb0WOsV1VQGQj9oB4pD/pZnbSuRt1aEtXAycspiJgd fuXkJZFTMPpZToY1iyCjGu/SahzEl4LA0PcHdyQlRR/8pGHa1G1SN3DllGo21Sk0UoVRBaB2 2YTFN1LTy1xjvEZ79B7Sx6KyBfz87OGzPRv2Xjqu8Zn1DPS6Dug6et5Y9IGjFo6ad/vynTJB M0iz9k29xnvXb+FAYTCTfiEtdu3Opw/KhoO6errLd6+o3cCWIngTLzTQYztXRZ9OPP3je86f p7R2dhw81a9GnZoI/eDpl4nQzwxND0+klXPLtj2dbOvX1JPpKhSK7O85RSXKitUrV6hkTtBP 1pfvJ+KOJW5JFLnIqPkBTm7OOjoS+DkmNOrcwXP5OWUMJBCZgay7n6v7RG/oWx2swqAPYCi+ evxmlpsW9DN7+4LGbQD9APTh0XpMgx6kGYo+Ep0cGyaGfgDxbzqzVcdAH6CMoYQqUVLZWTnL Ryx4++SVyFkY/QSUYPSjw9DP72TO0oZ+Nh1aW9vBthhApFKRp1BuDdl48eBZkeNrN7SbH71A VwbgCikJeK8fX7PGO4/SNISIDJ49sptvTzX6efPoVfK2A1ePXy7zYIZlmnRsNm75JF19GVkj 4c9i39nPNWN6kPZuXYZj9CNlkH4HuMn8iX5U2h+pOJpRyuU7Fm1J+/daUX7Z6B/Euo51n1H9 mnVuTkukAF+lNKvLsnKO+fEj5/2zF5cPn/ec6qerrweIvzA7b/nIRW8el63EQKrXqdF7ZH/H nu1YikwPNE1gVYtfs+vK0bKbgsjk9TNbODWhpTpyPIQkNLMXoZ+DIqdUsq68LCFMqq+HMDfW IVnfcuYOCMz59kPkrH7jvPqO8YAf9CV0+rELYdP+ETkYZM3JTbA2wXuUcIBm+KK8wk2BYZnX 7ouc0sy51eTwIB2E5FgOTdWsyJDw+5fKNgVBhswd1aqnE4AAmH0wjxi0jPJXj10+uDnh3bN3 fx5vUcUyYOmEhq0bKTjBKgasEDZq0dN7T5RyjQC9UfvG/fwH2jerT7OocwArwPgGgy0/K+fp gyf3bz3pN9pDogNf8yxe1OHSxUpqusvYL6Lox9UfoR8lBV1GgeogSg4g7MvMl4s8poucCDJ5 wyxinlEqsxndtKDoy+sPWR+/WlhZVK9T8zc3Smkhy48afxhI0EFw6xJsGBCgQxAPEV7luaFp ApLQb6Cp6V3397P4uTnhYDWqgh7/Hf1QGNxxKvSDn4Gn1Zcn6Ef9E/6hKL8wMXzv6b0nNDWE kZlxZ48uRiZGcWG7yjzAtoltx4HOZ+NPPb/3rMwDmjm3tHGwSwjfrekWIHNjl9VyqE2sYfWC vXbC8tvnxNBPiy6tpkcE49UfNxtN53zLDmg/VOQUkMC1M9v36oCNMb6kqCRh8/6ETfvKPBKW C6saVmH7/5EZyehf+/r84XO7Vu388uHLn2cBKHEf69mwTWP1i6Sf045+tvwbWdG6CoWRH4OB 6uppYedSUkVOwegnFB0P6IehWdzvfKkGVL2G8C9YFWtmrjl/5HyZV2NZprlT8+DwmWCukSFI TgXD/OieI5HLI+UlZZg7Tj3be4/3rlXXBk75+vHL3g17j+05JvLMZhZmUeejWYkEtNVQp8GF +RrNwZ7ePQf6DwBzCn4uKZEfjj0ctTyyzCNhnJtUMNl8YquBsQEtvDHH80gDXT5xOXZt3Nvn b/88q06TOt5jPRy7OKotgYxyoJ8lMYvqtXBgJGj5JSfCrFaqZjJ8KS8uuZBybsfyKE0+LZCO /Tr6zx8lk+lBk870CHqtedGq07x+/zEDm7RtDPpXgkdFCVpR+HdP30zvpwX9zNq+wKG1g5Th AYCjsY6hD7TN4ejknSvF0A8Yo3E3dgGOgQXPWIpUrZynZrvPeJkh5ons6t1j5LwAAgFhQj67 nTnLVwv6WRK/upaDHYNUq0KhVG6du+mCZjMMxK5xnQW7l0ErsAwjYRgWw2KvJp5ljky1DJ3j 33NQLzIpQGneOp+2d/Wut0/LGBIU9nuNWTK2Ta/2YDMrCFKhqEW+s5+Joh8njH5ggZJilKNA k+eXSUiGh1rrQld8ev1+08z1z+9pdCkBrGnr2tZnxiAdPR3syIdBBwpSAiu3glOAVaIsKZHo SJXY3H117+nW2RtE3EgtujkOnOhtVasqiSHg1YQH5X/95JVtczeJvNqgmUOd+nbUMzFScsim B9y2Z1XMsehDIqdUqWkVdiQcBk9pQ39ql1HZX7JEznIb59VvrIcSNThz/ciFTcFrRQ4G2XQp xsBYn1chVGiftWOX3Lt4S+SU5s6tpgD6YWgFpaNQcm8evwwZOFnTwdDsU9YGObRrDIoRtTFP Vk/++f3nyduS0k9f//MUY3OT/qMG9h7aV22Hvnr8asHguXk/ynbIUShsYug2ekAP316srg7o LOLI54j3BGEFTi5X6OlKkCOE5omRBj1eqKCCyuf7gUvqspQhCxgRwUQY0u+evQkdPj83qwyD UC3Ovj3b9etsUa2irkxPgixyWvBKCI4Jni81mP9EP0QdqkGJRLUAcepTsB9UQEj0zwVL5QEi zcfTcff345Ude30Q9CbAB06Av37CSYJ1eIx+iAdIFfogwTDB48Pj0/Dz8WrnUPKWxKPbkwGl ltkQMiP9xk5NYHG9dLhsm95lSC/HXu32rY7T5Nqxb1Gvqk21s/H/lvlbImFHN1SqXkkKWg03 DX4xftW4ZbdE0U/LLq1mbAgmLUYc+z++ZQ9vO0TkFJDpgH5cO3CoSTiwHRM2xx/ZVXY8BazM 1l0dp66eCc/E0D/7Gu5378b99bPXfyhL3YDpM2C0R5eB3dRA5M75m8tGLxR/qsjTkZbVq5B1 FHoZlFRYYNjZ5FSRUxwcGy3bFUoCGmqXHqUaWIzqcdGQosFwoT6/+7xpwYZrZ8uYtxQKK5h0 d+82bPpw8p4C+qHRAnPz/I3lE5aVFJf8eVaturVGzfZv1q4pjwwdeUJkwr5N8cUaxhK6i7nJ qoS1lapWfP3k9XSPQABkmo70meDdf2g/I1Nj+Dn7+4+D0cnxm/aWeSSsWM06NJ23ecFPIwCN c+T7eZieuWXR5jIDiJZWlgNG9HcbhsN8GMGUB/2sTQyzb2QHmp3EE3kcVOJUHY39cNTj25m7 /4m9f+2ByHV2XI4yNTd58/zd8nHLP7zUuGg5urR1n+BtbWMFww8ursCIhMboJ0hb5Gtm5IJ6 jgj9SPC5aI7gQXFoh3b0szdtVzFevYwkVBFWGdMHzBCPwzp7AfoZBWYrsU0f385Y5KcF/axK CKvpYAfNX6BQ6jDKrSGbzxxIFTnevkmdpXuWIcSJLFoGOVqUnHcTL3H0M3xOgOtgV6KsS0pK /o0/GbO0bBgNItWRLtmzpHrdWrBsKHm0HMG6s1Ab+uk0oEvA4rHQuFLs85FzvMpVXNpiFZYF YuhmpD3YtSxKxFtj37zuwIkedZrXwcqH4ShAewygPgXPKHklQylY1D8oTABTNfPKnZgl279o jp869e/sEehrYmZSGv1Au2Vcux82dpnIq/UJ6NfV28XI0pzE01ma2b065uiOZJFTAP2EHg4H tMSpmgCGn1b0M2C8V/+xHhx2jF07cn5DkBbfz8aLMcam+gQNKDiMfsYtvX8xXeQUQD9T1wVJ GUZJ6YDde+/qndVjNaplW4faYxaPr1m3FrGTcXyWBzPgw6tPh7cfvJh0+s9TZPp6Tj1aB68O zJHjZYKmrp++tjYovKCsEAGRdq5O/QIGVLO35nhBfcNSq8NIoZuQs4TjWWS2oLsTbIRWfZ4q UFIhvcZ+04Z+3Cf5YEcsJWPRKcVKGNJU7ves45GJJ+OOi5wL0tCpaf02jWo52FasVklmaCDV RYtzmeinlAgDnfQ7o/pchEebFC9qLC14QJXqRQqjH/U8wYqOJmEyeue9/RQtrGRUKTxFfv1z zSs1xYjwv4Iy7CH4eRan0tTwzf0rd1O2JT26kSHeHJpkcPCwtn06RS3YnH72RpkEC0MzQ5m+ 7Mu7MtwkRPSNDDalRgHUICCGPBj0U+jYxempN0Ru3aKL47SI2bQaM9IUoB//dlp8PzPWBjm5 tieN8/bZ2/2b4lM1gAwDY4Oevi6Ep/KbQ+XJ3cc7V8V81jD+3AIG+AUOQcY2buG0c2nLtfl+ Nv+7rUqNKuohxdL8mmmrUlPOiZzS0LFRaOwKDpNcCDancWAYtwbDC6szh9dp9OXjO4+jVu64 e+1emVerbF25l6+rk4sT+lAKj8MF7l2/s2HeBk1rTNCKad0GdoWugzNuXry5OyLu3g2NC7+R qdGCzfMdWjS4ePLyysCVmnASDIaxc8a4ePXAM4569/pdwtbEI3uOlnkwWGm9fHv1HdJfPaQJ 2oc3f3r/ady6Xa81hDXh+hMWjYcBxyEQwz+5/WiGNt7P6oRV9o3sOZ5WhZZ5QhtS4IYmzfb1 7cdjO5MP7yr7aYlsOBpRrZZV+pW7G0M2fHlf9tSQSFlYeAZO8DYy0idOBbXl9PLx65n9p4o/ 6vwd8+1bOrAMColyaDywOgwvpbnE7Yd2rNCCfnanIU8tWcR5hDHoWR5BL0TRTw+fHgHzx3AI ZiPccP/mw6WDZ4k/YURSWJW6tgCzkHOepTbMjvg3sYxFRS11mtRZvncFjOQSJSVhOGjzQjnn 38JXIYp+RswJcPFzxdYOVZCTe2L30X3ryobRFEY/K5P/saxuBUMI5iBgR0Abc71nPr0rhn6c 3Z3HLxnHYcaDBMVioMU4DhvxGLIg7yyo9SIlHMAVKXldhjqffG7/hvjPbz5qumazzi0HBQ+t WLUip7JnKDWBT6D0cRjio6l9JvZYyvbk7K8aQ0vO3j28p/np6Oni01VeBKXy+YPnC31DRF6t Xd/2A8a4V7SuwiNCDmOmI9m5MnrfNjHeT+WaVsuSwwlhg6zWMHonlwv9eJLJe/nwua2z1osc DLL58g4jEyNC8+Dxgrpm7JK7or6flmDKrgvmEAeOUxYUnkk5v2PhVk0HN+/W2tnX1aKKBdEq iI2K//749svJvcevnSg7XGhZtWLEyS1KmmWxC//gjoMJ63cXa3YDDxzZv+/IgUbm5hIGHc8h LgaMOlaC0Q+i6vJcIUcVKtBoJ2wNGoFsemK3MSJkQZC+AW6ek30pAVNhmgf+uTA3/3LKhV3L d4icqxYLK8uGbRvVbelQvU5Ns0oV9GRSCYxoGvNM8FXJek1cy5hcQ4AOp3YVIHc1R2EtJHjK CQ9HBWSQHmXUP2K/DDYtKZg4CP3QuB1/A1pkVP0Uwoj89QBe9SWnor6qO5LAC3LMi/vPUrYe uJUq5mURkSlrAxt1aHHh0Nmj0SmfXmuczJqEYZkBowYOHOtFS0BLYxcOCTTy1PJyox+KvFT5 0E9weFCHXu0J/Hx89zGgn+tluTH/f8TFq/uQKX5mFqbIDc5TN86mLfm/QT/LYkPVvGaWsJ9I rFOFfjjs7MNxa+rmhfRd/8Q+uvP4f/SWgowOHtHHx1VmZAg3fPP01e5N+04e0LiGGZkYzloz 3bFTq+1hO/ZvT5JrYGw4dW87ZIKvfSM7gmOeZDzbvSn+rGhr/Afp6Oo0ak6AkYUZhzXL49uP pnlqQT+rMPrh1QFo/HwwlZTYV4anLiXPyzt/4HRkqJh+WbxjUb2WDU7sOwHDL/trdpnHWNtX 9xg9sHMfhEcV/E/WCNzo7dM3U/pMEX/UeVEL7Fs5SBlKh6GLOQZWcT1APwyXtP1QtNbIV9oe /GrwWuQVqZnugH5eiJzV1RuhH0w+o8EWf5j+cJGfFvQTnhRWo74tKEe4AzznhjkRp0XRj12T Oot2r6AwOJfQPFjGJQrOv6UW9BMwN6Cbr6sCm84FP3JPxB2Nj9CIfgBJx97aJ0XUELSkShAA YqZ7BIvPmu6AfpaOK1LS2CkFC7IS1lcFuiGryzAA7OBXcjwVdRkuV4EQIoCwYzsOfdfAlQRp 5dJ2cMhIYxNDYsf+in6wWaVCPzD8Tmw/eDL2eE5Z/DbhCYe4ek9HTnGiIljsLYbneffs3Zz+ gSKv1rJ7q6FTvCvbVC1WgkphTKTsrpXR8ZFivB9AP8tTwskDq/3fgc5a0E//cQj9EH7qpZRz m7Whn/UXdhiZGqr8WEj/rx6jBf00d3acEj6TQR4IvjAn71Ds0YMRZXMe/rOYV6owN3ppAzsr HH2notfsStqRXFyo0RfuNcGn51A3ib6+BK19qE9AjesBwkDeaB5btgjdFiu5YoT4eUOWx85F akJ3LeinT4Cbx2RfRlju0SpBtIdCLn+clrl6YpimaE+ZYmVj1ap76xZdWlW1qaon04VVWonV ESH5KLHvHFQgWbxkrIC41ENXlclEQAv5X1ChGCbSPGHooOAVL+cJwkPoJ56mCc2Zokp5IDhV bIL6w+sjHIn/kFsqeHXEjjwxCYgwOERAfXz5/tCWhMuHL5S/LdQikUoW7lpSu6HdnUu39v6z W9w6LFNYCTsxdHJbl3ZyWkKsGkblyFkxZvFNbegnaMOc0hxyQD8j22mJfAX9E9TBtT0Jdty+ fDthU/yD62Jcuf8gPTx7+E31MwX0g4dIWmraUm2Rr9/QD4yHtdNWnSsH+sE9S4bOz3YoxXrG uBz3/tnks3s373/56NX/59v9JqOChwP6MTBCajrr63e4RUKURtNQpq/nHeA2bNKgcR7TMu48 KTNpDsTL391z5ICKVpZk6b2fdm9XxO4r/xWgaxKnXk7+swOMLc2gnXRo6tHtzMByoB+7RvZk xGFtIsxzVWQKfWR45eUTV1ZPX1umK5TIjFWBLbq1+Wf6qvQLtzU5wMD6dxvjYdfQTodB4ABU Hkk8hB5//fRNYB8t7P6QqEUNWzvosbA60thwB4MSKdPE7UlgvoucCOgnNm0vpjlgncZzLEPP GBAkHvnq6uXiP380IC1oBzlH37upHf0sig+r19BWgulI8I7hsyJOJIihHxz5WoHVGkKrAFAA /Qxp5ise+fIP8e/p5woaFYbap3efDu84BABI08GAfpLuJeC3RqwLBeYYBXvOfCyKfrq6dx23 ZDxuZ5LepUQ5uRyy5mBVA0u9iBMCNNAd+UpeQnGb50ZcP3FVhPLcvn+nEYvGSAQe6E/WJ0E/ mP0F6AfgKRpzIf1mfBBNd+qB0M9gFO7CqaESmuF+oh8tTsRZ2+Y0aNNYjrWIqQ4TFxaToA39 hKaEk4UGe6PRjbTzfsZ7uQH6wZ176fD59TPXiT/VpotRhqZGFCUwuKGhVo5ZeueCGPpp1dUx KCJIF80m5svn7Jh1e09pJrz+NwH0ExK9zLqWlQ6O18z2C85IzxTRA8OC/fsO789iPjVZoBnU O7y6xwk7uJhD/k5oUX0WHh55Fod1HvNRC/oZ4DnZF/kjQbkhbh2vChYh5Je4JelE7FFN6leT VLau3Nm9c4c+HYwtTHkacaIpDH0IH4QYWnCvAqXw5Jwq3MSUWqMFc53+CeixA49WA2WWJial Cv1ISqEfFXGHRuFgVZ4Y9ZsriFyXpkgfgN7EgBedTnQo/NFlGRYH2HK+/UjatP9fUbKqJuns 7uw+ztOiiuWze09jQqMepWf+7RUA/cxYH9y0QwsOtyajys2Dn5ePWSSOflo5OwZvnEOrMuWg lbPLgX6mrw1q27M9aca7l28nbv7fox/nAc7ek/wqVLEkH+EtyoF+IhH6+UmA59dOXyXOem7k 2Cg0LhTzOQgvXhC4AqtOeFdFvjD6Sd27Of5/jn6GTPHr69fHxNyEwuTVhG2JUat2lJkeT2G4 7NCyXsjaWV5tB2tKVIZHHx8ypo+3q56BHoEX928g9HPtXNr/9snbdm/rP8u/EsoBRooh81ZG edCPbUN7MnEw4VRAlgxWWLAW4eWKf/b4VeLmhEtHNOa99x/e13Vwv7lD53zUHPvo6tFt4Dhv s0oVAB/ooHgKYh+TEOfrJ2+C+k0Uf9QlMUscWjvAIilHnhUG/mBcwsdvA/Qj5pdC6OcGinyp 3cOwwMx2D3z5sOy0BuFpvV1GzhsNKz0J0t2+kbFQG/pZsC/MobEtjWjCKPK1sXyRLw4Nb0wC pVDkSyv6GTJ7pKufqy62ID+8/Zy849CxWDH0s/d2fDEHqhwFQ0uUiCw+3yfo2V0x9OPs3nXC 0gk6NI0zc6kipQBKBBorZmjColuIIl84VMor5/nOeSKKqAD9jFw8WqqKF/yKflhsz/I4NIkg 2rz+M8STvV2G9PKd4UeeBEarhGHJWvjhxbvgvlqciMHbQhzaNFYi+EgbsIj1nBQlhn6qYPRD Bg9LC9wOFPn6LIZ+BgL6GedJZtOVw+fWBWlBP1suRRlh9KNeWFeMWXpbFP00d3YMXBdkKKFh 7fv8OTs6fO+ZfVroL38r5hXNF21f2K6pTZGSyldQfRu5F2hO7AAZM2dUn2H95Byn4qTAPKV1 aWUhxjpFHKpxg4NujAQzG2BBl1BKBa/07zLm09tPIlceOHqAz5RBxdixqoNKIqCBxxOVxSs+ vf68Ydb6F/eea1LUItKkY1PPqb5WtatL8KDEAwPFdgH9GLBoIufImdLsZiX/i/NSiT8QDhCL tT1xSqkivAj8Yf8WTcdi1jNTCveohFb5P/FtSpn+pUNgBPGob18acCkJUQQUYmFx4sZ9KdvF BrQm8Z7q18Wjm4mZ8beP37aEbLhzSWzwlSmwHK5MWlvdxpomwUASVMTvtbQc6GfWxpCfLlbs +xnedrD4HQPXBrXp2R7f6/8K/bTv2c5noq+1XQ1ylxupNxYGaEE/G08i9KNOAoR+WzNNO/pZ HhcKJqYEI24yesgoJNEHxFsVCGroMVJTzu77P0A/A0YOcBvWv3LVigTU37txb8+GPTcvaKQf yvRli7fNDxoyW5PlYV3Tavy88W2cWxPnA8j9m/d2rY+7/r9GPy06NB8RNMy+vg120fEZtzKm emhhPRPeD0muJOiH4HUGm1ZyHCaC9s/++i057sSBjfGaruPo3NJthNvq6WvLTBskMmC0+8Dx 3qxEIlElNRIzC67/9umbSb21oJ9VsUvtWjoUc8hNooPRDzwhfEzarg39GOpHXtsFp4CGKeGQ 30iHpYPcJj0XRT/dvV0C5o+hsRWO2IQ3M+YO0oJ+VuwPq9vIFixFHWQ1UutmaUE/xPfDETSP Z7xCyQ3Whn6Gzh7Z068XLCqAWT+9/XxQG/qJu7UX8JWE+JY41HRzvIKeaEM/45dMoLADH+d8 cVKaI4RcWvDto2YpVqK1QcZS2SXKWT5zntwWu2YHt07+i8awmKmuKjam1t6IR4TXM4R+4OKz +k7X5vvp5TPDjxaWCeQIJEvOh+fvZvXTgn5mbAmp17YJhwq30KZSJjYsOiFSS87XisPhZK0l VrcuQ4/uFJAlin48JngNHOdJPEZXj5xfF6Sl3k/4hR0mZoaUCl/S5Yh8tezqOH39TBxjYvO/ Z8eu33N893+x+UXEpILphJXT2ndspoM9mr0bakE/40MA/fQHuEyS6glcZmklgz0XCh6hH5mE 1mdp+LlAgUZUMacsUXKTuo/+LIp+3EcP9J06CGekEsCNNBX0iYJQgDjq9bO3+9ftvvv3DnVY oZt2bj50zogKlSpQgucGRaKUPEVy8lmsangV5UZC/4I9lJg0yai4yGqyJul6gpYEIseeB/vJ LRX8LynyDEY/6vJZ5FfqK9Iq0EPkT+hDYfRDABT8OZvw7/5N8d8+fPvbhhi/ckqLLo66+jK4 X/iUsGv/ipWOKFOkOtLYm/GslFWBtp/YbdnoRWmi6KcloJ8NIb9FvoZqQz/T1ga169We/Hzn /ybyRdBPddsa5CO8xaJRWtDPtlMY/ahZ7TwfNm2VJjo2kYaOjZbGhsKwA+Wiywo2EM5KRR4+ nJfE8QL8QQPq3P8V+nEbUAr9fHj9PmFbYspujQsM9Ljv6IE7N+zjfy2hpJYufTv6jhtkW9eG ElhyVMbNe7ERcf9z30+Ljs2HzxhWo44Nnrd8RnrGDG05X/8kosgXMXoUBP1QAj8RfijGsxGW t8LCwpOHL22aHaHpOizLjpgxZP+2A9kaiqA0aFnfc6ynQ9umcCc97GNWCoXy0Bx/9ejNGNcJ 4o+6ZOeyOi0blCB3FG8sZcx0EYEcbMrdWw9sEeU8YvQTA/axjEVETwkrqSajPXpMeHBXrOJf Lx+XCYvG0NjVBIj8wc2MEG3oZ+2BMJsGiPUMih5eMXx2xCntvp9QSjATcVY5x/k21YJ+Rs4Z 2WNQL1Iw9tO7L1p9P3G3djM0KjxWrOQUHC+TsFrRj9OArv6LJsA0hIUKleZEpcd4mID5SjTG of1lQg8K6ce5CuUMrzmPRNFPR7dOAYvHwGNI6Z/ohwgpdwRzW4HRD3wzp5929OM9Hfl+SOyU JWELinr3/N1sbegneFtInTZN4HWkNG0koXevijmwXRv6SflHiWkVBP0YSpmRTgHfRatlek7w 8hzvySHPGXU+5XzkLC3oZ8PFHYamRjqg+hghk2jxqCXp58XQT4cejos3Bxcp6UIlk/U1e0/E npP/KeIhImYWptNXT2vYpjnp8b6NBooU9QAZGzLabXg/6EdCTCbJ3kohMxusKZTrrcfSBhKE J4o4GkdvlIVK5dTuo7+8E0M/fUcN9Jo8SKD5Yt6nlKAftCZwDMOUKPiv33PunrgUvXKnSGyu TLGsaukyuKfLYFdsBBK6DxqUEtwXJRzx9wmiLierAiFqXsavwgucIEIJQuk7ex4kkZHPqaJl qooaAuaiqJ/ohy7l/lH+Wlfxt8QBCi+TLCOApHtXbidtSXikuRqhJlm4O9TGwZ7ChXpO7T58 JCb5k2ZP/p8CZm3zzs2C1s1hSgfxVEWKl45emJYqxkdu5dya+H4EYjgqYJU9pK2f+E2D/glq r0I/ty/fjt8Uf19DjSw9fb3mnZq36uJIqRlXav+zKiir1kul8aVpBdMa9rXMUJookjTk+1kg /lQxZ7db1bAiXUn8kysDV4pnvAP6WREbyjIkE5WEThHpWZUcRGpU/Mz5Sk0+u2dT/ItHL8u8 mpmlaRtnx8atG1PkXGJRlXo7qhTznlP5S+GyllUq1rKvYYzyL9ABOVk5STsOxkbs0fjcNKWn p1ukmQk4ZIJP38F9LSoiw4LMnIz0+yjylVo2+pFKpa06tejg6lTqO/63J6fUHjDkoUEBIGiw iuYmtexrWlSxgF/kybmHtzJme2upA7Y6YZVtI3spnr9KXNcOxRkZIfWdRKwVaJ3gn99/unXp toxbGlc4mb5eUVGxJgjYsV8nzzGeVW2qw50MJShugup8cFQxpom/efp6gut48UddHLOscZsG HK8sxIETKcMSC+p4dFKMNt7P3puxMKWKOVaPBbXL1jKkvXqMf6i5OA2FfT+j54+WY7RtoUvf Tcuc5qUF/axKDLOqa4uWVez72Tgn4oxmvjyF0c8yjH5oYXDzSiXnp833M3LOCJdBPcnc/Pz+ c/KOw8diNa55Oro60deidfV0sd8RvYuRlA10D84UjVJ1QTlf4zFnEw03TH6iizkATxyZKXAl VGYGZVogEKbkuLhV0RcPnsvL1lgJpm3v9iPnj5bK9P4cIAQBq1jw6AYJ4bHnEs6IVG12GeI6 aMZgSlgXaAnDSnFl6rfP3gb2FkM/Tdo38QsaamVrTer3wOqzb3XM0WixjHfMeib56lgj4VT5 yV38s0XRj9s4rwHjPEkA4CKq9ayl3k/c9V0yYyMWU+JwuVc6ZMTC66IVUtp1bzNv4+xCRB9m irKyd62LPaR5JDRqUb9Tz3ZGFUxRwgFHEqaEDACU2Yf5bRymkeD6hCjKWcTxulJJvfo2ZjWs yXq9fNLi66euy+Uax+fQwKHu/gOkOjp4tCiJB4TjGVI5U5elwdAqQcwm5NEHOwHAkA6jBADk 32W0tsiXu89UP5VzBD2/BOf6oVgY9gDBlS11KHmJ4unrzxmXbseFxxWIFuMuLQCe6rd2GBI8 zAqVxqWlLKWLuRbQtqh5fwU3BAFLcNoXg7ERKdos1M9WtWopEVYbQD8HOeonjlHjm9I5ydSv jNffROAJlY690UJSFUEMMB9gRUzZlpimof6pJqnXsv6YpZMqVquCcB9N3blwM3797qeihTF+ E9A1nhM8BwZ4kGyv0u8HT7sY0I+G4jREAP3M3vjT9wOnZH/NHvo36OdFxnNAP5c0vLiBsUEP 7x5e432o0l2AAaiQz8n/zENWheSxB45hGYmEZgQD60Y50M/2U9urEPQjfMGvmrZS3PfTyLHh yrhQxI3H6IcSNkIhLckrBafPT/Rz99rdHati7t8sG+NWqlbRbWj/3oNcySMwqhAkJdCGaNU2 KSTow1FqMj96VwnOG8czjePPHz2/bUXUR801DsRlypKJLgO7Gerrqn0/b5+92r15/9GEsktG gb3u4ukyImhkac8ZpYpJsapAqromYQnSWbwUpfOgRwdLmNhb99Mzgr20oJ9/EhHvR4elVTkE YH0LWBOnZfEkSgWaJev95z2RBw/tLLuUlFbpM3KAx2h3IxMjBpdqZTD1p0BJ/ZAjV1D2y9cj emhBP/N2LGvWpj6LdCXKtdZlWSnuo+Sog1ErokVOlBnqb722p4IOnatAY0nOMfVNaF+XieLo p4ePy9gFo2GZgOa11GXu38yc7KkF/SzfH1a1ni20G7wRtNumORFnRdGPPaCfPaGqT9hM4LhB 2nw/w+aM6OXnQozG7G9ZR3cdO7BFY5RfqiONOLy2YvWKMKsUuOiskYSZNHBWxh3xej/O/ovH 4VRgGi9aqFBtAXL/KBXob95AgtCPHJWbowk7/uSeo0ejDmmqjw/SvEvLwcHDK1hZlknoVFfz IqvA8Z0pR3ck/9CQPEghVlZ3kvGuugJCP6Aknt5/HuIt1k1t+zh5jvOqaF2FZB3Cw+9dpR39 hKasZShMzsJsISMpPbqDv7jvx2OCl/t4T8wFoS8cvrBmuhb0E3U1Vs/ISMYiUloJdh8uHbUw XXRvAKcebRZvnkN2fVEW5CfvOb5uSZSmg9t3azN4yuBKNawwT5woNh4XTiNxaFJen/h9kZIB m6cQkapoPSloFR2ii+L+idkfeUDE0vMOGOgW4G5gZg7QR473e4Fb6Ekkuhj9UJjAAHeVIdc+ uj6i7XIwxZTju2mJfLmNch8yzc8QV4XKVSLVhHw/KFMSDb9ijjaW0pV06UIlrUNz8ITvP3x/ ePfxwxv3Lx6/mqsZRqulZn0bz6m+Dm2aQKvAo5pIKSlLFytJcVReKOojVDYXolKkjh00GCds SoFr7uFSRqqr8qoqzSj5n97zMFnttmFKeXcIaKJ+dedQqrWTeMgJxBFq0f7iesLH8MLyAAe8 ef4ueduBSxr2utLcvgNch/U3MTcll32GSuBEa/KjlCl6+npTV011dG4jkJhKFciGBgH0c0M7 +plLlwoc5qDI1yDxm05f+xP9vHsuVu8HEG612tWW71mhb2SgdqqpQptC86r5WOq2Je4hpcoQ pMqHfrZi9KOGUDAHwgJXnhHtEUA/q3aH6jAMLoBH68CkQxYho0CbIVBKwvFXl7ekqEf3nkSG Rt65erfMq0mkkpYdW8xcM1NmoEfjkhKUCjbhkgzkTeGiaAVFpdxVKJDgAHWUl0Z1BB7Fbth7 6d9r4q9cptSubzNmzqimrRtLyOTHA/rLmw/7tiUcjC0bScDgqVCpwtZjmw1NDFWVsYQZRf4n M5BEoFE5ZjQpCCMK5i3OfESncPfSM6ZrqwEfcWBV7YYo453UFyA5daQuGdaqKMYBa1+RgsnN yb90+OymhVv+QyNUs6nqM8Gno2sHjmZINJ3ClfRwwVZYXKlPT18F9NSCfkJ3LmvYph7WqlyR koElWYqvlrzjoDbfj0HU9Xh7Iyq7hM9TcPkK2lyXmtB3ypMHYryfXj49JywareCVBQpKxjIP bmbO9tWOfuo2tKUxoRu6e6O2yBegnyV7QtV2X3kjXyEjeg1yIRGivB+5x+JOxEdo3AoQ0M/S mEW1GtnAuFBwxPcjCfSY9UgU/Ti7O49bMk6FRWBsIFYyNDsDaoBC5CFdBukCBY+mKqzTsMqd Sz6XuCFexFNep0U9j4k+9Vs0UJZRVk6oJY056Wgopp++tmtF9FcNhaNAOvTv7DHV18jcVMrw JMEYzi8plj+8fj9szFKRV3Mb5dbNp5eRpbkCj0Ndlo8L25kcpaXa4YqUtWRrJkwHQQHBMR39 xfeJGzjey32cJ55W9MWUC+FBWtDP1stxFc2N9CTo+uSb+f7z00R9P+27t1mwKaQYqUWmuKDw dErqxhCN3Gp9A9nMdbObtWuirwMTB4WmSrBBKcHcdrgpQ5GkIlTdSoET+ohOUCBmHkvW+4So xG2rY0WCX937dfQa62Ntb8NQeNtAFILiJYwu2ZmLUP04XghaFXNkHUdM5uGdR30URz+j3UdO H6zHUIUKvggHBTAiQ/iJ47ji/GITU/0SJXpiCx0KoxausLAoO7/w65vPsJQfiT3yUbR+jZVN tb6jBjj16aiHgYWCx35vvI4X4XQWsn4I66YKstPCIbSatENKHKmu+iv6ScxMVuJ6QVLsO1Jn kSkRP4onm+chb6qwNxjNl2I962J1yZEC/LgqgnqtUm03g67FobSv7ORtiUd3atj5T4MEzBvd sW8XQ2MD8hGg6NZFm8WZOr+JzEC2fM/KGnVqUaqH4Sk1mOCXauP9EN+P+iO8YHl8PzP+mdmu pxNe/fisL1mJW+KPaVhWKVybePqaaU3bNWNUtyCdo+BYEuNEkRSKLyoolkhoqZQVQle/euIA /SzQhn6izkRWsbYq9QWNI19nRU5p0rrR2j0r5LjAHA7ukq1wGawO1J4fDq/KaOH/9O5z+PyN V89oBJR2DWwnLRrr0KwuhUaIkIJHABBBcoTJmJ9fqKvLKnAdQhmDnMCIhSB4v1DzfHzzYX9k QkLM3w0nIi4e3bxHe9aoXRVnDgn+pNzvOQd2HNy5QWNxDl093QUb57Tq2ALvf4ArUPCcHCUE 42ZhhH0li4uLEWCTSpWcQsEpKLxDCDyzLosM/fvpGVrr/WxKWmPTsE4J8vGgmnXQxkVK5FkR KnQhgicOfvFoK4L0C+kLR4stLZqkTVdHn3GedRrbC/sC4i+JGYNXIOrl4zeje44Tv8jynYsc WjeSE1gmRIfRoEjafihm5U6RE/UN9bdfi62ohzqgQE4yd5ipboHPRDPeXXxcRs0fje+GiCkZ 6Y9CtKGf8ANhjZrYwvD5WozcP+tnRxzfr533g7QfxxFzHFrHt+kgcfQzYs7Inn49hTaUy0/u +zdqqUaLn5WwQ6f69h3hSjFSRGjgGAnPB/nMfCzK++nq7jxh6Viy6YQODUBTouSZIhhkqPAP z5AHxV4QUhNFynD3r93bvmS7pu0FKWGnC6chM4fp6+uo3T+E/F6i4D9/+FqQnVejXi2WYWAc PrvzaH3wug+vNC5Xrbq18Z7iW9sWBVJhxJIko4K8wmsnLkfO2yzyakODh7br28nAxBA/A20o YWLDtPN+wg6Hg1qQ4NrQcEcLXba/47Cvn8R9P96+E7wQA4yRnk2+sCJwhcjBILuuxVmYG0lZ lmzkCaN71oi510XXiw492izcHAKvrwNopqTk5uXbs0YuFjl+dNDQvt49wLzHVUOQIakUEiE5 BicfoPwSJScvUcj09YSNpbDBpkA1ItA8vfzvpbmTV+VprvVsZGLoOdbHbUg/fZkOmJSFCkSX MpCw0KfFxfI37z4XFpVUt6tpKOELFQgaAJTRYRAOG9ctQNz303+U58jpQ1gaMBOvh+LmqC9g BBZxdHFW1v5t8aYWpg6tGzdoaAPmCi2E8hlELVKWFBcUZN5+tH9d3EvNBg/YCa26txm7YqqK ZYHiDxJQrshbTCsFvjOPCzYK2SES9AcUBIMLlOMyaYJ9LsQ8CKbH8Ah9TydkJGN6AWpolvqZ P8YR9MMIcVwcmPhJ1CCeHmjBXAVarmQSSsEJ9Z1ZNb+aFgx6dEGlMiXywN7wWJHW/FPmRy5s 6NhIV09KPpYUK8KD154/fK78V9A30t9wbIspKrgibG6l9l2VB/04AvrZ9Euh0h9ftfN+AP20 7+WEc5V5hVx5Mv54/MZ9WV/KdhqDNqxdz2bS8km16thQAnQlyJQhaDLvR97zRy9OJv5rU6dm x94dTCzMfgbCBHIXD+hnvv8C8afaeRahH/VWiHD1ldNWnj2kFf2EEQtQgaPyeC1nSM0oYiDS NIcHAwJGCrkictXOlL3Hc3+U7djUk+k1b99kbPDwamhX51+Ya0RrZ3378fjBk0M7Uzr3bt+s Uyt9I0NdBMpRWhBe89DQlzJ0fk5e4s7kiBVi1FpN4j9jWC+vHhUsjEnNC4oMVwV35vC5LSui v3wsm5gPQ9m6VrVZa2bYOdgxDGZWYPRDcm5BC+fn5r96+vrfpLMVKlt0dXM2r2Qm52DJRPtx Yr8jcp5n3NKOfjYfXFu3cR1kr+ByK4SjhUEhT6r26UnQPFdyqPleP3uzLXTHzXNi1ffLlH5D XD0CBlpUsVQXTVGXOiRpoi+fvB7TS4vvZ/rqwDbdHKV6unK5srCgkJVK9NBU5ZOikneKox8j /ZjrO3UwZMS7laPg1/SBgdpqPSP0o+SUOMLIPL31SCvreUVCWB20xzvSTgZSKqJ86IeUnxas JI4qD+vZxa+XaiTz6alpO1ftelvWLpUUnrMWlcyDI6bbONiDMgel/Srj2eoZa14/1QhTKFzt cOKy8QT96OI9yKDFCO+HTENca5HGnmPBY/jp/ee1gaufiLqUrOvU6DeyfxOnpjJjQ/INp5C/ f/H+6f1nJ3Yfr2xdKWDBWAMjfRjC2V+zloxcJIKl6ja28x7n3qxT6wIl8isjTxiv/P75e+LG +DOibT41fHpDp+aw1IEGAPViKKF3rYxO1IZ+Vh1Zx2JVIBEK+TLD2g/TFvnyGTTRy0ACK530 1KELS6aEihwMEncjzszUGG33hg2YYo6ZOzwk7bzYeuEE6GdTCPaeomH69tXHkIAFb59rZItX qmLhN9mvbY92oOion1EX6EpQqmiPyE/vPqWdS3ue8dI9wL0m2PAkeRtRahhC0n3/4u3EgZNz NLO7QJq3b+blP6CZY0OYn4UIMfPFhcVfX7y5e+3O2eOX7RvX8Q0cYaovAcSjJ0FeDLCvChS8 fxd/cd6Pi6/r4KmD9Y0NShRKqaIEVJKukTHyPiq51w8y5wYskEglxuYmrbu0aNCuWS27GuZm hgzNAjQpVCoAYPElxcsmrbx2Rqw9m3VsHrJlHoXNYwqTJUit8wKOIUEusr8yNAbOukHQB8cK GaF2Kwle88QPz5P6EJQK/QiRL8LWZIWmV5dQFJgNpBoHo/IXqd1NpNBCIb4DgFCCctRVfzAS orGaFr6/fOTc3vC4T2/EGrS0WNWsMn/rAqsaVgLNBP9JikpKiUnWVLn/N0HAooHNsrgw6IbS 3wvogUbo58bZv0A/NOb9lIP1PLMdoB8SxKWpjBv3927an665UAQ8p30je8+xXjXsalSoYgmT DTBTTlZu1pfvLzKfpaWmvX/1/uObj9a21eCY5u1bSPDe3bR6LwSKv14O9BNzJtJKzfvBhcNX osiXGPppjNGPDoMyU4pRfQgaFY7DfkVcDIrUeOBUuARho/PHr8RE7H6kmcAhM5A1a9to4LC+ NnY1K1SqAEOluLgYQM+3z1mP7j6+eOrq10/f3r9816hV/WGBQ+0a2EolLEbeBCoJpbo5jr96 5srG0MhXGvaSFJE5a2Z0dHXS0yVpHLSKv01n3n28a8O+iyevajoR7mzXoLbfeG/bBraWVSzg UYrl8h9Zubnfsl89fnHtXPqrp29AX1SqVtFrlKdj11bIe0OhVFJGVas083ZmoIdW389ah6b2 KLOJ40gtDYYmQQ2ebF8MigNHBhHczP6WfXjP8d2a91XQJMOm+bkN6wfARU3OK12wFB4VXiR0 cuhTDfsKE7G2re7Uq62uTO/Zgxdmlcyd+nasVccahv3BqORdYVrQz+4bO4sQGRkRDgDJFSiZ majejxb0E6BCP7AmPbv1aJY230/o/rDaDrYkWkp8PydFqx2WRj803scNuvCv0A90EECEpG1J 55LL3uuXCOilDr2djEyMACSBEfzs4TORcr0gPTy6Tl42nnh3cGSEkePQM6AfJcY6FComjryk ErQbMQXAqLhEEbNyx7nkC3kaTBEKE9osKltUs7eu36qBDqDY4pLXj168fPgq70cuKGqZoWza uhn1WjSgWVauUMaFRV9KuZCv4Wr6Bnqd+3b0GOtpVNECg3ausKDg9qXb2xdt+6F5f4w6zeuN DPGvZleDx+s6gwgoDKAf8Xo/VrWsVh9Zx6j2BUNZDiwzqK0W9OM5wcdngpcMoR8JoJ/lU7X4 fpLS48zMjGm0WQC6kQIA+tCQa+fE1gsS+UKBFBbNVmj5fRv3JoiWegGd3Nu3Z0unZlWsq+gb 6KMdMnLzv375/vLF29tX7j5Mz4SXUiqVrl4uPqO9ZAZ62L2HkuNIxKakpGT5xMU3L6bLizUO UcCvlawq1mtSxxYsN6kkNyf3+cMXb56+/vEt++vn79a1rQPDAls0sStUIq+PHBXMRN67BRNC r529ITIsQXu37Nyyhr012GCKwqKuvTu06OwIELYor/BUSmr4HBTyQ/tDmxubWpobGBm06dy8 XpN6ZpUrwgCFW3x48TpyVdxDzejcxMyou3vXYTOGKyhSDx5tsy0RTCa03EhwdbFijlK5fyiC WABgKQXaMo7e8gJFVcBAQikfsC05Ou5BCq8q2az2i6j+VXGl8QanBGOrF11VHKn00RSpHkF+ xuiHJo4leKYHV27v37jvoeYdmn6Tzv06BswKMKlgWvr6N1Jv7N2w9/GdR+W5gq6ebnevHiNn j/r9F4Q4Q/FLyoF+5vzm+/mWPbiNdvTTvpeTUiDG0lkfvyZuS0zZdVjkFIZhatjXMDQxAnBA Y71bUlwCIy8n68fXj1/BCKCQ40S3i1uXfkP7W9euJqBQ4qfG6Gee/3zxp9p+OrIaQEkVrwjG x/KpWtFPY4R+aFiGeRyVx1X2aaHiATwmht4cps7Q2E9Lv3/5fsPSyAv/XhG5rK5Mt0btasYm Rnr6egg0c8riwpKiwmJYyz+//0JKFOobysBe6e3do0IlCyFBUUUmINzil5nPYjfuOZ0itsb8 KXUb2U2cP6Z+03osw9FUaV8g/f1z1oFdKbHaKtPXsq9hYm6ip0+6iSsplpcUFedk53z5+I1s uq6rp9OhV/v+I/pZ2VrDZWUY/ShwZB3QzyR3Lehnw4E1DZvWwaFznKXKY6TJC4UBcc4nUqw4 pYKCRrt8+nrY1DV/1Qi2DrX9Jvu27NhcXd+CXF+iyuyFi3/7/H3nqpizojuiU0gDmsPQzcnK adDKwX2se72mdZQY/cSKoh8DlPO1M7sE5RIbS0GFMflKOrgc6Af5fniOoXgpyzxJfzRdlE5L 4V1ObRxsyc/wauvLkfEeuk/l++GFeoJaWc8jQ0b2HNSL/Awtmpede3Lvibh/NOckYrG0spBK pXk5+Xk5eVpL4vbw6DZl2SRs+iPUyzIoE52nMPr5JUWAJrvRKJHfkLpx5vruf3a/1rzRKRGp ro6ppSnLsvAYedk5pRNz2rq2HTrLX9/UCK527+Kt2NDojy81ejLMLM1aO7dq0721zNgITJoX Gc9OJZx+lflK5NZeUwZ19ehewdyYw2w5kr0VuzI6eYfYPl+AftYeXc+USnA2kdLebYZ9E0U/ XhN9vCd44zo3DIDC0MCVIgeDHL4VZ2ZuQgsUWkQnnzks5Lo29DMfox+iZrkS+c0LN0NGiQW/ QCpXq2hRyQImhUQigfGmkMsLC4tzc/K/ff4GNjCFMpdZsLsCpg9v1aEFIemSPa2KME3ndNLJ DYs3i7t/KBxuBiBCA24ukcMQLVRtDQa4pJdXtxlz/ItwinYRSlijAAntWh+XEp2syYtPxNDY 0MBYPz8n37yi2eBxni4DnaFTPnz4vml55Ok/GKVgMZpWMAXNyeB0tvycvHevPuRrzgKrWqOK Z8CA7t49C3HVKYYWys5h3CNko3MCMCI140nEicecCrx7MDoEgR5SIp8TyJoq3g+gn9gHKepC PqW5b/gTqmFPglwk9kkJpwouB1JBFZNUhBwxwvtRLSo0qyqjziKT6NWBrQmpyeWNWwXM8e/u 0R3gsLA+4Xd7fPdx7Nqddy7fLs8VwMT0nx3gPLAbpboCpSZl478Xj1p4XRz9dG0d8kfky08r +gmf6SSgH3QfpVx+/fS1+E37nme8KM9jiwjAba/R7i7u3WSoWWg1++f62etz/eeJnxt1JrJq DStSAROXkKGXTV15Wkvkq/E/e8OonxujEAQMKpgRSPeYU6/ajQXBI0WJImX30YTog+/K2p3+ r6SqdeWxc/xbdmgu0dXD9Hkh4wrnRFCf3n9OiD60Z8v+v7qmx4j+7iNQ6SA1uFcTHuRyxc1L t2LC4zJFgwXlEXNLM1e/Xn38ehqigIIw2XRo6n565mRtvp+IA6vrN6mjxIYKZlkJO4mQqj8c 8pfwNCXkl8EEfvTg+drg9S8faVnhSkvXgc79/d2q165GmI8kpkmplACJl2dn5x7bfWRveHm9 Sg1bN/Qe79GgVQPQU0nlQD/7bu7MlePirRIaB3HoIBT5EnM1ufi4jME5XzhZl8lMzwwsR8a7 dX2Eflj8ahHa9vmq27TOSox+KLTxKo/yp3jet6mPtp0uRrqUQj+cUnn/6r3d4XueiJYv+ivp 7tFt6vJJMMOIHmZppQIhJlgVSLgSpRmrco8ZovoppKyy4sKi085cF9nvQlwMTQwnrJpar0V9 iY4k70deXFjMjVPXCnM1rlhGJoaVrSsDnAIb5sf3Hx8184RAatapOWrhOFsHW30dVilkX6Ln jlm5I0XzVjYUQj9V1x1bj0tv0PgUGkbRkHZDxX0/PpN8PcZ7UyhSQV9MObc8cJX4ux9M321m ZkIoHxxytDCzR4SkiaOfHm0XbgrBhdCQKchS3JcPX9fOjbgiGt8pj4Ch2KZTyxlLJ5uam3GU UP0LBRkpKufTl7kTl2TcfqRpT0NxYVjG2qbawnVBle1tiTdFiqog8udSzmxZtv2baAFJtVjV REilr28vsGXv3XqycNyi7xqYHuWXOo3sAoKGNWrTVIHyXsn2KUhjYOTHC2XihcojPJ6tKmVO s4JzBosSn44tXJwJhrcuoUnCTdzDFHW2EVPq3oTASMpg4wAbrQI/lKrqHfKPkT10iPeI+HjU vh8cx8Uf8e7z3z9+TdyedCi6vEzV+VvnNWnXVKoj5dVlqpFD/mP0ishr/2oMT5QWmLpB4cGN 2zYhHwn6YeifieULA/4O/ZDIl1b0MzMc+X4YoWPQX18/fTu5/8Th2COaSs+VX1p1bO433qth SwdU/5v/iX5CtKGf2NRIKxXrmYyF5drQT9PWjcP3hiHgTHOsytvEoSRJhoVvaLIDIqdUuYUw IGPevnifsD3hTEoqmC//ny/b3a2zzziv6rVrSAQOGfH9oBsV5OUf338iYpEYofJPmbxwbPf+ nQ2NDdQZW+pS5vBy2d+yTh08G7/twHfRDYPKIw1b1R820aNl+yZFSqG6OMzYu+mZ0z1nip+4 IWlVvcZ1FDhPQU2KIoFmwtmSYFcQh51A8PHD+297N8Uf2V12rn6Z4j3eq/sgVxNzI32UPobS MThV2pcwcykqN7/o+qmr67XVw1WLqYXp8BmDu7h1kmP0s0sb72df2s4SDvE8JCimgABi4IDA Z+I5X74u4xaMJiRGOP4xNKY238/aA2E1G9hi9YXeS+sup/Wa1lkdH4rNaw6n/qJuG/SX6IdG VcGyTu49sW/D30FzEenu3m0KoB9Ufxkz7yhliVKBqj7yShbvWyT/mQmBaHkM8Qlz3NWTlxM2 7dfq/hGRDv06+E0bbGphAljw/pU7O1fEvH3y5n/yUsOChnd172ZkasgKhT0pUuRz+4qog9vF 0E/VWlXXH4vgKEx9RToB1esb6aQF/XhP9PWc4I3NP/r0odS101eLP15S+h5zM2MJqqJENC0d PDzkmihP1KlH20WbQ7BlgtxFKAojl9+9cicsJEJkw5lyimVlixGTB/fx7QM/G0iQDZCNQgKU LsXFxSTHhO8CuPnfrqxvIOvj29MncIRMRwJAQQ+zeB+kZyyfEvr5ndhWX2qRGci69Os0dfGE /Pyiiycuh83Q0rblkRZOzWaunGJR2ZISEtcpXtjnHSAaR/wsJPtdh1btsyGs7ywv4Bz0P3aO 8mQvJryJPSVs7kHz9N4MFJEhRTPVW4URQgQmr9E8pcY3NEmjp4XS+z9rPdMqsjOxOoQlCnc/ 8Rhh9m7uwaiDezXX5v9NNhzdUL12dZoRdtsgerm4qHjLgo1nksRUmFpMzE2Wx4VWt62uvgJF /XzHcqEfZ4R+1IUj4SKAfgZr4/0Eh890cnWiVfV7UFhByb3MfJ6wPUl8T/XyiLGZUb9Brn0H 9zWxMKNV8Ora2etzRmqJfO1OjayCfT+YMYDmp9bIF6CfdXvDAN/gWjzCbn8cjqoyKB8QDUhC /mXwBjE4OMUoFNzt63fjNuxJL5+LTkTMLc2GThnUqXdHY2NDHJTBhUrx0AITO/3izU1Lt74s ty6uUNFsxoopzds10ZFKhEJYvxaTRHy9Z28Sdhw8uu8vwESZAgCrp3tnz4D+JpYVCNiGx75f HvRzYFWdxnY8iVKrq1mojQqM/HgOZ9SjnbSpnJyCC4fPR8zfVs4Hq1TVctg0vzY92kqkLC7j RpFkWmLAcLiWAYeyfpRvn75eF/TP68flbV7/WcP7DOsNiuZQVLJ4zpeBkX78zRg5KrmGtgKU o02v6En9pz7VkvHuMnbhGEyng090ZnrGDG3oJzwprHYDWxznRQ23Tlvkqy6gn32hJOeD1JmE Ae3VRAv6CZjr33NQL1rFieRR5pfi+YPnSZEHrv4rVlCj/NLNvev4pRNh6ulKGBnKMeaKlMoS ZBBzhLRA3PMs2gQNaR2FagOarG/ZKTsPpyadEc8GFxFjc+OAeQHNOjaT6OoW5hee2X/qeNzR z/+11JZaOvXr5D3OG1WfZ9A4pFB6jhCU3xYalRh5QORcq1pVI45tEHYexDrBUMIMbjdEPPLl M8nXc7w35sbSZ5JT12hDP/tv7jUzMya+H0yqpWcN1xL5AvSzZMtcToVEGawni/ILkuKObg7d /h92vCotUh2pQ7P605YFVrOpZsAiZVykwGkKDPX23deoVVEXT1zKzyv4D1dmGKZqjcqTlwc6 tGhAmAXQITnZuWuC19y8cEvTHsm/iWPnVou2zQc7P2FbQpJouabySOVqldyG9oU/rESqRK4d Uv6DxtuhIO1HUYTgjCp36zA/Hfl4M9df0I+6oA8GQAQPkYgWT8dnHFbDArWSFbI/iPeCWE4U qfYrFH1mhbykn92pjp2VNqZpFUmExrmgydHJUaIbAKnFrpH9vG3zTM1NS39Jbp24NSE5+lB5 rHMzC7Otp7YCsOVVe3xQ6sgXbouFoxaVE/0IoBD7frTyfmaFz+zo6oQKUahc7mjzlKKiuzce HNiedPfvtyorLbB69fLq2XVgtwqVKqjrMyH0479A/ESS86XDCE5yUJSh2iNfjf7ZE8bh6CqN 854YFfrBLEteyJfCsJcRaAfI9MzLL7x86sqBqKTMu+ViaGkS69rVPQMGtu/R1sTUWB2YJSXI 4XnePHu9Z3P8sYRT5bxa266t/IOG1bS1ZlT0fXURUFVlLArWuYw7j+O3JV05/f+1blWobN7N rVNvnx6VqlbEGAMp9wfpmVM9gsVPXJcYZtcI0A9it2DHKo19vHjjAJpMTDSxFajoH0o0hWn1 MO3hrKGLyvlgrZ1beI3zqNvItnSgm5CyyVRV18kozis8uvtYzOrd5byy/+zhvYci9JOsDf3o G+nvSYsBoAwDCgUIGAbG1/h+U8TRT0+MfihVIdCHN8uFfmwb2Aq6j0Z7vIuzngn6oShSXwDR BziOcmvkLY5+RiH04/pr1Xu+pKj4yd2nh6IP3zzzX6pS/Sbd3Z3HLh0v5xh9CQ12wA85SgBE 9eUYhH6UeJOBQiWtx6IDFBwqA03GNszNl49fndxz7NrJKz/+q+N5xFz/Tv066xvKUF27L1n/ xp84lXjmq+Y6ilrFqbfTgJEDbOrUwK59Rr3PPCxIoFW2hkbt3ybm+6lmU3XriY2qTRvQBIG3 9mmjBf0MmuTrPcEbk2aYc8mpK6dpiXztu7kP0A8rOG7Rkhc0fI54xjtGP/NIyzNkszTsOUAs uoi9SbuP/O2GD6VFpq/XskPzoVOH1bSrJWW40sYbzIiM2xl7tsRfv5Be/nrKpQUMkpkrprRz aS+h+SKOEAyo1MPntq6I+ly+HKNWnVst2DoPTKaIBRvv/k1Nvj/FzMK0S+8OA4b3q1zdCmNc Gtc6QthFjkpR87i+ICE4U0pVmWx0Jk/2hKbV2zlQVCk1R5GPvLDbGUhC5hGO/1mqR0A/iMqD ChBIGSHsVaJ2wwt05lKBNSylzVPhxqrDaFUu3/mjF6LDosXz6Ij4TPB183eTGch+eW78nDfO Xo/fuC/ztpZlFeZV4zaNF0QuoNUZ+Fh+KikOVzsUHc2tceRL4JuQPd7LEfmasw6hH2i0YqVQ Yr8Eh+0K8gszbmdeOpwKZuub52UnxIqIRSVz2wa1m7Zr0qRt08qAY3RxaU3ci4DhQvwXiJ8O 6AfOIhXtUFga+35Oacv5WrV7JafioEgF7w6oG/QvSxPsIMRUBZoTruGMANCPnFuX0s8dv/gw PeNT+dynpaVK9Ur2De0cO7Vs7NioYhXL37L28J3471+zUuKO7vinvGUUBo337D/Y1aJSBXVE kuRBUir2HDkMrVv3n51MOvsgPePV34cMzCxMbOvXat6uYYv2javVqqqjp8erQqCI9+OuBf2s PxBm19BOgdgtqN4P2lIN7cVDCh39LPWEXG5ocwPkv3374sPK6eGZd8rFMuk/vHf/ob0rVbUg 78uoaHAksswKYW4cU1dy715+iAzdeT21XBn1Q6cN6jusj0RHcjAqeccKLegn9kaMBAFmFhYV Iykj56kxfadAs4ucRXw/QmFMii8n+rFTsZ6h9f4Jjjghin5I5IvCGoPBO6yB0dmvoZc4+hk9 N6CnnyvRcjxBqMhBxZUUIQ/Q2cR/H6Q9fKeZAdOotcO3z1mf334WuQvJeFfwjC4DEIfKVdDE Pc9iaifhcspRSVxGR4jUKIgOBvQjl3OvM5+nnb566djld5o5y2VK7QY29ZrX7+jWpbqttY6O BAdeqe/vPl7/99rFk1eeZbxUk2fLI6hqaGVzWMJ7DXKpYVcDkXyxxmCE2krCG21bHrU/UhT9 1Kq6499NmHJK40Kg6JWHtBssHvkaPNl30EQfbPkwpw+dW6GN9ZyYvt/czAinMNO4sAU9Y9gc 8cgX2GmLNyMGAqlhRsrZYz4J/endl6S4I7eu3cm88/hvCTqAe2rVrenQ3KFNl9a2DnZ6+jKW VpuCSEhZoDtp91KPXEg9ehEUY/kvrqunU7eRXUPHRt0GOFtZV8YOYMHNkZv1I3b9nlPJqYR8 LS7NnZrPjZhVXFBw+sj5jLSHD9MzxcGoJjG3MG3TtVVPz+52DevQjIQRtpWk4ZUlDEo9pjEd WcbisY0iwbxCVQ2fXIFWQRNe9VFduByTVnlSYx1d+kDmEYVK6xEEQypdoCJmmABF+BykgLqq liL9pw9PXRBZjX7Icwu/xX8/vJWxb8Ne8XKZRILXzW7ZpYWOrk7pLwn6eXL3cVx47M3zWjSy obGhxzjPgSMHaEI/ciW1ZMxC8T3eAf3Mxbwf1f4GCP0MKjf6KSHoh6XU3SOXy7M/frl35c61 8+nPn7zWVBTkN7GpWxMmfL3G9g1bNqha21rPEJV/JI42FfpJ04p+YlMjK1W3Qm5DoaAnYj2X A/2sQNXRBaopreIAMrgiO3Eu4pUZPw6nQj8Ye3PykuK3L9+lXUi/dfkOGKAfyoF6QRo0rVup WqVGLR0cmtcHI09XT6/Mw+B+RYVFpw+lhmnbrVAtQWFTOrq0NTDUFy6gAf2AKBWKr5+z71y9 Cw37+unrF+XDQNVrV61eu5q9g01Tx3q17a2NTA0xKYFRkeyoe+mZk7Shn4ikMFBGpI6LUO4Z t6164z6CfpQcQj8wN2USKis7/8KxKzcu3uFxIsOl42KsuOGzhnn4OoMCLVTyqpwZIeIgx+4f zHlEkXLEsFEont57mhRz7EH642+fssRd9z7j3N1G9NU31k/anrxdG/rZlxYjYRglfkVDXPbb v8+Ux9rQz3jk+yGZjn+BfogG+Cv0Q2EbkWS8u5UD/bj6uZauCI88o8grw5TIle/ffbl37f6z u4+zvv348S0r87bAqa9Vp0ZFK0sr60qturS8mnrzXPJ5EVIgoJ9Jy8aDQtVBsS2qWKj2xuMq /oJC02EZUucNZcRgIhBPvHpgN1NcwddvMJivX7j99MGzL++1uG0YhqlZr1a12tUcu7Zu0LKB oakRKxS5wnVNGbooJ+/+zYfpl+5m3Mp4+/ytVn8DABzLyhZ1m9av36JO6y6tKlU2pVgJh2nL MOh0cIhAIZBY+UgU+dKCfqJKoR9YGuFSfuVGP1Ia0M/5Jdoy3g/d2m9iakTohniHCTpYG/oh vh+KIvCXUm+3ibjqFF2YX3A/7f75E5eeZr548vBFeSJKZhZmYARWr1W1ebsmtg3szCtW4Cgh u0gt6iQepVLx4c2nMympD24+eHT3yY+sHPGLY1BVq2Zdm7bdHOs1rcfIZETn6CP6FU18Iq+f vD4WfwJ0OMD3kuISkas1adM4ePX0ChXNCouK3r94e+/Gg8zbjwEA3b56T+trEjEwlFnbVm/p 1NzRuVV1+xqsVJfCvmFcS5lmGVTQvFCJ/TKI6YVL6nNCtUMsgoeGsI0pFRQRdosSCDk02fgC s3doOunREQUuA6+uFc2pfD8ctvhJaVuyT5aqPh2hm1Fqqg+lwjdUKQCkZtio5evHr7cv336R +fIXj1Spf9Vell6+rhWrVyKkH1RLVxU/gmNgiN88l/b6yStKWAmESkeCqOx6PZnMsasjDB2q LPSDmVPUqYST75+9Lg2PSj8wfFHTvkZ3j2686nv4uzC/aBd2NtCqjT5UL6uKO4KqGtCldj0b BYoQkZ1HeGzTcKQ0DtgQxYUlr158yLz3BDBy3o/c3B95xUUlj0rVVrGtVxOQn5m5ib6hvr6R oUPL+rXr1qpUtaLMQB/Ru3DCOUNxKsY7/frpm8P7TvKq2i3kBVUbhJGYFCxOXgamJsSyZ/ER p5LOPL7/02GgduapG6FqzSr9/HoTDgRNkUFC47RboQQT2YeDxLxU3cGQWc8QbwJP5eUWvH7+ JvPWo8y7j3Oyc/Jz83Nz8l6q8ATLMvbYOje3NNfT1wPE4NihebWaVatUryzVkZYaIHSpXhBG O8cpn2e+OJ54+rdhpg5mqXuNSG8fF9AjDMvwKjBRivpM0I/QBiSfTlEi//Dq/dOHT29fvf/j ew50E6yCj+4/U+cn17SvrifTNTY1gm4yMtav28Tepn6tytUsTY31hZoAaEYylOqiX95/Stxx hBPCxDyhzZEyJxJVIKrfsD6oCCHuPUwdI1aHMJdUShU9L+kUfQlVUKKEhfPHjzy4YH5uQaDn HEqDWNeqPGLWsA5dmlM03i7+ZyBbIP1wQoU/ClddwJ1Oca+evbt2/k7GzcdfP2dB331881WB jdfqNlb6hjJ9A5nMUGZgbNC+a6um7RrpyHQeXn+QdjZNCRY5fmSsbnDFFFI0laf0ZdIhgd6E zM3g7VEBSe+NTPr04RtuNV698Q6D+50E4+o1q9fepa0AWynq49tPyWSPM1Wl19JC/NBuw6Ex LWjVJnrnjlwstaGEgHyFLA58QOWqlv2G9laPH+LV3LZyJ/S4lFb73oSXIoMLvmzbrU39FvXU 6o5wELCpioJQJYA/FHze92xovR+fv966+gAn7HC1G9pZWVepZVtdz8Agec/R/VsSRcg03d27 Tl42AacKk5WJJzodUDLZn5JFOJjhOFRLF1UiR3FRNekBbw3GUEX5ha9evr997cHT+89+fP8B MzHrc5Y6rqGj9/+6+9Jgy67qvD2cO7yxJ3Wr1epGM8KgCUOClCIOBgyFg6ECGEOKoew4IeUE J1WxqcpP/3Plh41/UHFibBNiwMQMVYCQEiygKmDEJCMEEqglgyY0tHoe3nv3nrN39vq+tfY5 93VLDE7lR25RTev1ffeec/bea33rW2t9a3zpFQdW1lbKGdyzb891L7n+suddefHB/ZRbizZq isUQ5WflmZw4cuzwPfffe9d9Tzz61NlTZ04fO3n86ePHTd2nWLCLL927tnNtx56dy6srL7jp mhtueeGll+3PBVuV2DNzanLABqAQMJFc/urnv3bPV+/hUWRCdqwxpGC78tYdu3e8+V+/kUvW At4tRf/nf/ShYmpMtY7JEaIEzwEOt7zs51/40p/PovwUHvjODz77yTsYQNLyW+6CGkKS7vgX v/OO0XRqdasiW/rJD936wOFHcGEpVTUYmwVeXldee8U/ffOr+IZaIOuRuAk6KrHs2yfu/94P 7/7K3U8/ceT0idObG1sP/d2jtV993yUXXXTx7qXlpWJVSpx26KpD1//D6y8+sO+ifXuGpYpZ rXqmMUHNuJq74lAefuChb3z528UpnD5x8uyps0889tSJo9qBtbZj9ZLnXLy6trq+a/3Aof3X /4PnX/bcKyAyJ5ry9O/Tam7gjR9/7MmCYL79te/86OHHC6I68vjRs5CWLtdZrrYZj1bWVgtw KWHGL73xlcvrq02AvmCXChR7+vEjd37+m8U0nSmG/+Tp+WxW8NDxp060rbJfu/fu3HXRzp17 dq6ur15ycN91L37BtTdeu75nR4vkIfdGFjVUUfqZxrTVOfsnWCrsmehzNAPpbFqUs3QYZqHo qXQoiePRKNGX/8z9t3auP7euf77y16CWWvxZl3u9Q+0etyFNbhE36GtbbmzxZQCojydZJYMm eUQtSSdIRRYHUDoIQlo6Ck69lEpZq9/XMFtNWjDOJtVr9lbfkFWhWNE9Hk0YzHbFV+HMZ9eD BnvVgR72mRmtwiJxh+lxLukUB5FNm8SufMAGVGoz7rLEYyWwLjv1xJGjxV4UUPXNL9/tVZDa 3/CSF4yn03379xXbsS7qMtMS2LVo6gs2qSMYvMmK3igX1g9rY0+Eh0IUWhm9NiM4pxfoFm7H Dx6RMzDKx1fhrP1rvwf01OlPK7YkRoEKG/69nc+LwS1b/+TxYiJPfPeu+7g/Rk3zopfeWC5+ /6H9q6sru/fumEwmoYpY65+9n+bGwr6p9qfn82xLcWk6a+6r1eH6u4moot/phD6DO0b1kifr klM5t08/efTYkeMlXPvml+6mIlH5letedG3BPbv37lrbtXbRnvUx1OhDYOE/hqPps+O1irwN 1VoZqnE1y6KMQ5hEMbhB+igxKAdir9icEjXSh0GVR25GVJdE5CV5ichzx6ed3axLD9738L95 /e9e+MgVaPVrL3/Tv/xney+7FEfDjCkBEOIfiv2Uz2oKdM9U8Zbrn827J374+KOPPHX86MmH vv/Ilkir5WtvuGp95+rqjrWyS3fuXit/j1EmsayOiq+NG12zJe2ASWiqFMYxznPkJE6hl7ot r9UFUvcjIFGS+jJjKGCea7ApjDReuKpgO8vnYdVSZgVMHhqhBuFI0nQsIhNfwbCFBibMQQ9W ueps+C9ilO9GkstelXkrItgNcZ006zR8bCwa9AP7y4/dOH32yceeKk5ifcdaCrFLOklNNAuE rRfL2pSfu/iZD3/6o3/8sWfpr3mVqB2+2zn2nXhT25IvYhtwFogQIMonhX1CBCB2pRoF0S2x wsZWe+LYyWNPPH3y2IknHnnykQcfBWubi5G5+vqrduxe37N31/5LL54ur2SbM0guN/QFpKZ8 C0HXs6fPHH365MmjJ049+XS53ycfexrPNo+WJpddc+iifbt3XbJvdW3t0kv3Utp7S+oE5zy9 wWGYeQ1BWIs66KoRtydshGC7ra5gu/LE5IwkhCCT4LwprZDsGgUSVMJ9lY8bo1zuLCYtLEca M6ezUbN5DwuGAMJisbRjG3hHfVEnPVZubeQ3C4ptaTe7jlbAMiHZTLdTJjUlm//TyJ7XAFuH LPmmPbtx5uixY0eOnjp97jt3Hz565DiD+Odccemhy/av71gtcEcA0PpqDn0rdlZ7Uh5jI/Aa R6YRiUJZqIANnVBPd2ajK595+sjRYnV/cPhhYFx5Irsu2nHV8y7fuXvnRRfvuWj/nvFkgl90 oyjJEGIIaYOAN6wnqmu7I088/fjDP3r6yWOP/uBH5TPLdVx2+f4rrz4QJ9OlnTvL2d+xa300 GVOLaJ5TA0O3LMcj/OjJEyV6LMh4c2Pz0YeeeOyRJ9J8TnSw/+C+Anr2XrJvzx6BQctrKx0Q qZTzhwAWU1K6wl9i7oeG1Bi5RNOEy86UhNV57crXGN5B3A6PIBZkS5R7U1nqAoL9bYdvzTbd Ig8mijszFUFdWwDhRONR/WOfVDPL0xugbXPl/cBxqonJuf82CDJyuxCPY9QOO9ykeozsAiX/ g7Rb+76uOxsFg4flOZQje8ro140z9IHZOAojS3wFQ532tWW0yYlMS4s689miIBnLUZ2cQJZf ZWSIxAo3qsPVCNgvPtilkTRCtee6DrO0Gx+acurRKt5jeS+jtkUjIAnU5dEMncUlONVCwNZW O85E976ikO2voB/rSR5yjM4A0nQLv7RI1OHZVlRTzTrPQ+7fZf9ogoQarPMBYr0yw5TzL1B+ DhTLyaZZLy4T+vjFq9n2+2a0shtsuG1fgNKH+lEeF6bQJ+vpyFTAAnTO2chH3Gao10OSSP8O y+mdHcJBNEYPlBEmOjEfHoNvoGHLLJI6EY+wpXiptuJpSWdIRlI8wWbnW9UaZgWfds86/VJc d9c+/uhTRx4/8pyrD66sr0zGEdrQ7sSx03/xvo9/+oOfPW8v6Otd73n7q3/tlSs71sEd5uwW ooLF5Um806C9n1TYk38RvJWG3XLOmZBEBxnG4iqW4mizG23JrA85GQLswij6WIDtVqK3mBVn NMsxiYsKDIu3OjHoEYKzSB4xLOFAX4cTHYKunGkfmI2JA/AqjxR6DB3eoujHFtfCsmR7hh6L cvbmpRA0YmJ9cbNhuYlrowJnw7lWTKc4v8SNEZZl3KTbTN5wj15PO+u+e9e9t/3l7Vdee/m1 11156IpL4+rqrl1rXWKAN6+j88q5/pPf/9PPfeKOU8+QqljftfYrb/vlt/32W7EtMfJF7bwW GHiIl448CTZBz6MgVygRI25wHGg35F87N0BoTsuG5olxLJOtGeFZ8AN7kQen3SubTAiaAiyk xzYGuJenWE6fYFnMuStnYSTNfZJQKzeLBOtMlQuAFUb4jk6FeJk2kp2Q5ILFBSJ+C7PE2iZX IAg7cpYajUudDZrkxMkm0Phg5JlWzMG8Y9MLOuxnM9OLCZ9dXHUTitGOjU8bXdpopV6T4fEY 5Ztssd7oyre0XvAldgBazzRwddrm3KqVYa2kDjzojXkcjyHcV+50Q2ai2U7GEgAwycd2oAC6 +tx7VqIsdMMwuxyZkZwXOkY1SgUHz0SSzY9xrpJGg8k0Uz1TQx0ySmXpxyK75RB7IDXRiSPr zCCqFM4gHsXSlZC+HHP5uPKg5qYUT3s7h4BY+cDyseWxbyAOpatqpYoxlTMeVLSMZBuGOjvV xId/TxhjIldIi4F8BePA4nMDK96yDiQFBcLxNIpl9eto3zjFC9ZAlmYOaFGekqKfWVbepVrD ZKyj4huRmrDoibkN6wjrj0dvD/3QENQfDSysN8vVu1LeBhXeHKUYNcYQlQunYE7+FWIzKAUX Y5BhpPAI4CcgBOk5ErYeMC4MgVoCvJ1ibqYhCbK7Hg0URELGj3mVweWUpeHtzPHfS0g/z0xG Gx13fEOUZDkeTNlOXepK2DCWrxDBbtFRQ7MUkt8stBJugIPHGSY6zDcgmE1G7ydrz3Fe+Xxv e9Qt4tdGmw7Ep9oZ6Begq5Dxwq861q1f5cUldgN7yJOeqe6tOALoB56f3srn7b+8gH7qvQDF D3faQh/i4KuHm8dt98bgfuwTfL0jOw/MzWXzgtlMOVeO70x2DUYn4vnzf+Lmk/4638Z8GqCe LAVpfASyghVqprmsssiTCAhQ5MoPBB0i8c0MIWyXdLm9hvsau1Pq9+iRY7d9/At3fv4bL/xH Nxy88sDlV+4fjWKJ6b91571/8vvPWHCze9+u3/69d9388hdHKTWutkOjpeAVDugN6nQ/zdtm 85hgaSSwTarCpZE6jJeUE85xqctNUyzKLLVe0H+HcYPFYGlvM5krhx86if7DCFkV+q0YEuCj fCkiSPGXrJyodo22pKPOKhxG7u2QvIp9TCgLSK7yRIPAzd5mZ9Y3A9vEfSBnFla+3B/IObnU zS4V05nAUovmpwtrI0U/+pQsIDt+5Pitf/k//+KPPjyejC67+uD1L/q5HZdcfPDQ/kNXHlha XY6Nm0iZRdjamj/1yFN/8B/f+/ADz6gs8Lwbr3nrb/3qza94CZkwscUyXK/PvNR9Trsn9kq4 7CxaSo7UCNCz0xwWhiToEwBSEXcVoaIr0Fp+EthmqJaTjkTnFzlvYY7PQxCJb0GKALawjQr3 HSZFBGy2wPZhn7nNsfO5sZMm8r2GzcRhniMmoUIeWqnvkW+ZZb3sKb6DNFqy4wvwmtgOPcNQ iGnUh8P07lYiVjY4odRP2DkO06ZgrDDvunNtC54PQISXZ1TTZoeKeF+lgNU+MNpmm/O8S77m RLKKiFYwMYlj1FCKlSgLQblRBry+0vCDao18nokbhThS9CNUYotZJ/MOKMTnleiZWNShb/gV nYsC2FeuudzdHHALpX5+pdHiVMlplruDVjhtsqtD73K9EgkMiNLIL24lrQl2Buol56twillI M8TmyEDsOea2our4ULJZbF5xv1Egb3GF0nEVUM2TZe0EVC1H6hHCG6aM6ew1XZ6TymAak+0o D63mAtg0UTvR//WDnxX0k/S66yPGb2aDfogI4NP6gGCIewaP5ple2wN6gzL1EHbGUymLxaJD qA9gWoC6LoeSl6DoR/Q0R+BpEsMaqYeShZhJjKXgxjrX+pxXK9NMQBBrsY5cmYzIQcaXqcRs KeF5duRC4+IdIUDXnrgW0o5RyTe5UY7jafCwWswjxJHm6RDjkjAFk4+l3OWsU2HJEZgAOUvY oBw322b2d0C0W8uzfAUE3hQH0uCQjLw3b+1rjFtfZCSeZb3ygDipv5ksjPYL0eAC+nHG/Xh9 vFmrN54V/dgOqTjXaCdLyW0DazikOQ+237ZX0nNer19JqWyZLwIaZ/SAeT1DOjY9wNK9mjFk fsS4n0SSxikn5KWMFxo2WZi9ZLiBhXbFeopVglEoAVaYSrarmMIMcCM9zCGoW5Jf1WyFpn7o hxy4iG999Z73/8GHv3uXtD2uri9f/+LnLS1NNja2vvL5Z2sFeMXr//E7/+2bL7vqUKcFW2o+ 7LZrRpVRbIBqsB5GDyBOqpkwGp3Gcls0cGNRoM6djWJdbqIEoAX9IIySiSiZcMEtBaHZYfQ9 oI/ApxKkYqgZZqOBlyKeiUp9O3p9AsFMTA/3dq4VVyRPchH9jGODgJsPPhvrXP9XozxnYg66 8nDVDvp7aauELDpSPjJCnctYLdk+I+nSlzqc5SZId2dSgomxcYl1vv/t73/gDz/0rS8vSF41 o+alr7r5okv2TqajHXt2lc89dez0fXfde+8373uW5qkbb77u7e9+y00335C1VsZjtHDtwpVH Ng6GfhKL1uUGJ5od917Lp4BFmFGqWWMzwzV3wKyHd772wdAvQFwRSVIxYUE3kSXQa0YM11D+ 6Bpl1AAIZPq3sJt0S8G+n+wIS7Nr/ANmhmnfAjskgODDp9gppxwkeMoJkJMSD0DDCX+fiXvL dWxLeTaTqBT4nNyYHnhzQTBcu8ayrOVgnuvmm23LgZWdRX2Z8iVgjxhy8nn2xQY4qs7zCadK IjgMgOJ/ggArdkCuJZusFJAfXJiZqhq3W9cRhLBrnh43S0pso5X3LDVyVjc6D14KowBdjQf0 F5P4jsQJBOVy5lnNIIRk/frIE47AaYqWstIfnlG0XpVdQGJxXs76T23u/Tt2kcSCESsbLWrO 5qeY1wYExzYL6n/r46JtZ5dxhqmJOJjlXzeB8FYN/UAG2qHSqH5+Rp6oRz+dOT8+xuitGqPc /OcevM1UxhXjV6SpgZ2Fv/aWukd141cD2j9sO5bDM7yIfqrjtEMI9NrpJssQ5Uta8ikbBQS8 clkZdKu351IOuSSB55n3hgy9FHVKdRvxO6HfRqdYNeuR6Hp9WyAJKM8q+mlgZlk61wL1z9PC /UiSy6dJ5KZRAwq/KLDXGe3W4DNZEoRtCMuBPTNPrav22IsBJQHIq5pE6fHWOifc8ihQzztT pG5uk02GFKUfPPcqTGAalQvLsUi89Ws6WCE/5GBcv9aZtMUQ/fA9LFJxJt3hTWM3GEW57fOH 6AfYTi94WH2V7c+8Hf0ofOtTVos3kCp8cRZZOC1zMRjv7C7ydlaroh+LWKI3ItJuGZ+D7Iqe AFnagn7K7QJ3JmH7cIlsT83YDESELerglxp/thXcUHbpWpMRgeQN+Pk57ILYPhCbmOqFIWvQ Ef7Ef/vMB973MffTvKbLk1//D2977RtetrJjDWYr12q/ihr6YEaWL1QgC5eT4WPkoZQQcxxJ Myj6wWhlOkK5i/KGggmWYtgiVhCSk1ST4BiMfZX12RK4L8WkzN6UKLZB/n5LMgoCaOzgeJpy hrPKVMmxKt/lT8/kvKw2ueuJXXnFMGYyQOshXL8XyHeYUgN3QV/RTAIYpja3XTmiHTYz+pIK +smYoAXavPxwSYq2w2YnGRl+F2PQs6fP3fHJz73v9/7rT7VGz/R66atv+c33vPPQ5QfoYliu 4vuiRk+9H9YOz1GwwrqxafCIdxlemzMwiOD0oQDM8iTkbOaohgdqoDhTs0c/3tCeppDQsQXe 3XuWG0qeYRxldYplE7SEKJoZocbPq4MP3g1PsZUtZkshSWDJs80cOmXfebJGodb8KknP+Xdz mVOSyXihikWKfsahMv0azOikHmyw8ojWmvKXMJcYupsLcNdIKdnx6DuJhDj2rDiujZm8cUHG UAMhDCVm8kYsR2a1cJTVamQNs5lsqlx+h5We4LIBPXt7TchGa3mulT8vWRIa7FznT814hfqZ xIsWN5rxy32VzLwTZqUYmX0Tufiyk4F+Oir4d1Z+x3ogu2BBJ2kwWcII1Fokw3yl5CULOGO1 QEcqHh/YIn2JgKrWqnpvmRnPkkY0tIJs851m/H11dstRW71aPDTmi7Lu7eycZbH1RMuHlmUN RgIbbyTcz21ay7aY3UCJcbZkhLrz6lbdgJobuJ9cF8cZT7TgsSoeJcujeXb8E9BPa9YoYoZR Wdgxw1BUHRknnzHpkLutig7r3hoF5X62pDFJJiG3FjdvdrqQBA3lY2pxOBLMWsNIrBDMufIJ lC04SwrO+CrLuRTTSuMhHqhbH8laRT8gD8Ujgk8WsIJ8s2B/zleaS9mrr49Rqhejwq8tyZg2 MBYkFaTIkY6hFnjOs3be1eSFt7Rr3YVWmu07awdzPWbJQ7d3HvrRtfO12Lm3BZbMuhD6qaWf foh+8Mvnox8/QD/M9NVYKi8erSE8qfdRC76G17ntHohiQLHYR+V+dzobE0NTaGAYP8nJ93eG 6dmeZLXmBEmwi4vEI3GapSroJ8I9dCm1qMTkUZevkKoXSLNPo9/smrJ5NjRtn5cbSf+DQ9aT KZyw1+3aIRCXKLnNd915z5+/9yPf+vq92+/2WV83vuQFv/G777z+pmuSllUpr0lTy+RWTaci nJL4NFlXBcqSaMXEC5YjFgO3n/xqI2W8WTwujD7GRMvwgS0QjAklcVa0KJt81on/a+V8y7fw dG+JYr08+Q3EnrD7gv61M05xj2JQbDaRPjs7l11XrCFGcvUOolgOInXScnRZueYo8rBjQHmO Lpusq4Anks1UU0PCEeVatpvkyguKK4FWK8VA3g6I3u9Dhx/+q/f/1ec+/vmfao0u+FpeWXrd 2375nf/urdPphElb+zKpr6c/aFG3MI1amLIlefPEVimAIWhAB8WyHW9AS9m0/ZPJFxEbtGxX Nh8Mb6d5itrxTl+BvaH5GeStqtK04I/yi2tS/+7PyZYIrLwm2mh8W+2et7nLNd7yGhchqwWx Kx5lOgz4Y+EnAFMAy7JxJCD1kQdpAY98VkpGZnuR+BmhiIeQOlkePAP9gOCXNy/JhPaO5Ti1 ENjZLPBWye8e/TiNkQjQ5fPL85/jIDgT5+RTYraoILRatEoP2OncRH0g3jP3Lb9bDkJkefYg fvNaayRkT/m/vdNyBCR+PjnHifRKRXZGdZOJ0S4ldGQhetHnUD5/55gUJmY1pq5DerfeYBig HzBGiWgm2H3JI1XGxKEcKpbL3iEDjGWTbGCjtManFM+MR+SyBjaVGCNTKPaQNfuTBi5VYQXr CuSRNRbkdDq/HVu3mvKBHqFHDqTsonIN6L/2kI02FPTp+2+nFQzb/d9COExPo5kUx1KsMMgq crZejaT5KzEP0I+10GfHchbByDH2Fy355i1RrXabUq/ndo3SiTk7gcNu0bKWYwAqLG8KLSfJ eCm5kqqxLAxQlBqrYnPbFM51DjWnPcHN4EBEAtATMRbD0eWeayWA8rV524F9TWZ8vWkBVAAU peIn8wZBieuUvupXvSDoTrtXNCQib5+DJkrSgLmRYeD6+bgSps8Iffh+K56lvQlyhCAJUOmZ 7d6fggE9Q+56i4+vqIjeQJLtcsUc6uZRUe91BfETXI/rWz4HHEkPhpQWJ1TSap5tF4i9kp2S Dd4eX3/S6n8OcVYNEFm/ZX09tJ/9ll3GVit74/Q8nWvz3qkUyunH1k+sIMgCX9vAw+p//dry PUsN6/I84IskNIuZY5aBqmhetnRAJlSyPdHqVGq1FkxJhlkfoZI9ox1XJdj7Ncqa5UmabvDF kZTt/fjjx//7+z/1wf/80xE/SyvTf/Wed7zqdb+wY9eaLbTmJZOdjpp3oFeIlkhlHSV7ETpr fmSjcrD96bWpTVmWalwAWXwFsjiAwplstAUAbRaHxPqSkbRAe1ezhPgoDVpc70JqwAR3o0VK RE5ZuzWZkCQvIueVAKg29FF9wE5zfdkaqZ+AtIeI5UdWnYKYJNorFyxsH4lodEGLwYDaXr+p Z1tbf/O5r/zpf/qzJ//e4yDK64W33PCOd7/lRbfc6HRGjeSzRkEN1WYnCihJGDUOpxT04yxt NKZ0U5K8D4pPa4GwNKKOEQqujeTRHefEqMDRAZ4wiMWOXPR6Hum/nanGdcb9BOOEMmBBcZ8g s63kwLtKJAcbt1QDGyVFDFuQAqFlS6qzrBuAu0JrIlNvjZl5iRb4takS4lgS7ZTs1XedtxIT to4D2XLGCzdqRtEuKYo+S1rXuKcC5IX6XG9RqK+cqe+NIf00Jfs8c8oD6qDa0v5ViWZvjUdJ q3pxPH2qGXleANAdl0mMD5lvBVg4qo2W1zDL1hmVwqoDnUfuqhXNqbJQfUhh15jsRGnWKKut sCRdgWJS4LWEPXl2XtAPqtSVrXGoDVAKwKrl9GnYnfblorV2BRZY0mTF8EZIc2QFJCz7s+SX 9jmKlWaKc3XkWXDpDf3MUgfWOQr64VM8P3Tehn74Zf7vh35QHyDhL7ZCRNuePtAE2rz85wzo Z32UTs1JCYSdQnf4OXF9eZvUlIWRV/Qjkkcuj6M0Rg7RT3Me+plAeHCLKOpC6AdGXymsIfpx Xmt66nkL4N94g3i4fVNVRT/FOMw1daroxxn6cdD8GKKfaaRwe0U/rqIfb2jDaFJBXD8z+kmG fpr/X9APoy+zJvoi+inXfFaGIuVdUuKv6CcM0I9xVT8p+mFwMwH6KSa+CalFfU8zQD+toZ/G 64NJxs9V9DPPowkIFRQMZkMMrpboLqAf51dGbhrynf/723/83o/87Ve/637i12g8uuUVL/6N f//WK64+FGOwhc5Bn57e8/nox2uknr2hn9YcYTL0E7T3nHvSckyeJ2E7+kEgK+hn80Lox6Jb BSsV/bAksVlEP0HzVuiBUl2kbejHD9GP345+hiV8emazoR+/iH5gSS6AfoKhn/ki+jl+5Njt /+P2j/6Xj507+7PMHBi+VtaWX//2X/nn73rT2vqyH6AfkSq5EPqZi+qBOx/9jIF+NjvuJUU/ bEdabQQTnISa40Txk1IvTdCZgBX9uB+Hflj3k4F+NtGszoSU/7+Bfmh+mTyqnDfXj2Y2svQJ ma8Loh/bPNvRDwdSJEM/gAIabP+/QT/nw59t6MdZKcX56Mcrsnk29OPtIj1rZYB+8iL6SfZp RD/umdFPHqCfLitply1EgRBzkL4i7Mlz87y5iH7cAP1YsKdPgbb9mdAP8z/ivg39+GdAP97Q T2PoRxMykIToUoeCp+hvPXz7OOi9pYUFdsP1qExpVmPnFufIZ+ugYTKYu7xx1pjq9MjlXSMh aQpkOdeVi2sKGGKrMPozs259WNsCAEoUsj6Sa55KXVMovzUDbTWSdjg5/9S6ZtxZ1msk9I8k Hc+1gkDBzeiakShsYDXnEA8IeXi7SEAG6boSM5e0TIe5W61c06Xtn8xqI6TODH5jntSFV9+M yg9hUDv6WO3GxzYGW0BnrKVz2O6qJ0kPlKrByc76rrXQhcUkfgz65kK4x/H593lqbqysh4eP hEl6V0FtGhzobDV9Q+AyTF39WPSjZRCD8+/9cEPpluN34eTot3iD/27wn97+0n+B+Wk3uH69 Wzy4pTobA+hklijp5Dzr+LwueqvJ8JrL0yqrbeiHNzJG/YRTvBuSZMcLwM1Luo09a9TKvi3h RXRd8TpgkjU1SyQhpjzkzbZZE2bYnW6lbbDrs8y5JsIzSSDgreJnN89sfPQDn3r/H37kJ1fK b0bN82+65td/5x03vvC503HjdTKOG0c5YjM4y/65bX/Jz8DO0r64OTvRnIp6szvdaR4ZOhTY cdbZK2fWMDQL9j3bf8oJbbsNPDHhyRqpIFach3ORgvUoZEM/HPpRNwCqocp7YpJRqR49Js5p GZZcTRS9Ig0VMhuIbBPhOEYMpLONhCHeUXcRUI5kA0IA1plL53C5WVy2GLESOCYmu8Hpys/t 7MiKnTtz9oHvHv7Cp7745b/+2tbm1s82dynGOF2e/tIbXvHG33zDxQf2NZoNEYJcqhgFLwr6 gfStvH+pkQM30xgss8W9bD+inzRQMvMeRcG5Y9n4yMSjyw1wesBMij9ytkSPGY1+k1CGin3y VHC146noB480b7QSbU6YnnNuGKe5QSRTTVClopPFzHXBnAEjx+ZH9DoRMEVtpcyo6WQlvtzg sMcCsMM3li4ayXZT9MNR3KBfWeSK9K4sdJAyiaBpo22ng6a703jGo5RH6xA0M8vgmcpMrJ7O jJMp1mVuX0tAmOvvXaeZ3n7JnDlo/jmSM6IZW9+/v9YSKZAzf4F8XAyrsPhn5gU0d1oC67Sn WA4aKkOmUWOeCrZqFFrdCcFxruSxWc9qmRvpeEBpNtQrMKXL1Wq7joiTy6qpXL19c4WaEKT1 SFY7kUzzb7WpPadyC+MKJp0+KG/snZAUjczL4Dy4Fon7lSghzUaK/vYHbq+/us2J1iIdp+gn WyzIJQnJEn8MqlmxYKUYeRxH0Q9HrWZ0ymW7aBFXGLEyHzE6pALlgU6lpknQUolCdowdlIUl 1jzTShVV+delmKDpTp4sIyCTkGi5EfPKsS94Cl0eIAh2uyXr2xz54Xqx45qqqb4S/qmin4rB rbOgXEDxXmU7naOmDWo/uXJW/xXxuFvW/5sbQCyhGjNBzwNa+47NfIFTK42cjQ2x4XM3zPXa abEjQe3Q4Ac2ZVv44BfRD5YqW+GO4Kdt6Gd4yGnLgiXaAU/7f63xSj2aAwDWo58adhiu3w7S ssb68vdoZZb6jGxxKu7xgwok5+rWV/TjXI/d+Qb0ltPcZNDvqbMexmjoh3IyA6APytd1wxvh z7VUQuJpFgyi3tUXECNbd+fYMzQHxJHiHpSmoTIRml1O3LMSJGAmpKt00kg4XsL3lUYBlhkv XxvWaNyRy3enT5z5my9+85Mfvv2+bx+ebc3aHzcxcTIdP//Gq9/2W7963YuvW1mexGDeRYC+ XMY8qUZcMKYnW9idVWKR/VxqkoTOSk6LhK3MH+hHynq0RyZrD47wIl65GS9FuCI/7CEAU1BL lzaBfiLEtKJdmCZ5g2HZ8icnckgRtAVpmf2hgrcoHArJYPlH9pbJW3C6LS7Kqhs5cNPZ94vu 2CKreQFNqUT8irT2S82KLGJAw7bYBkaWDr361LBG9FwtjVzh6TNbP3zgoa994euf+uBnykrN Z/NnH5cxfI0no4NXXPrK1//iP3nty/Ye2GdnTKUTGmkaEorRecZ+4mM8kryMTls0D5YLI5eD wmFRQ0ZfmCuB+GZboM8c4lJyuZNIGWIWvkhmgcAoWnt8nb6e9WCyhjpDsjANDiN3hXfU+8yU yZEfsxeJbm7IA/FVK0uc2gS1asEEP+u61noOy6bpr6jaFiJbCP+kIcTKmhTznUHnFugoYI5U UNqGNRgd4uiAui7H6HdbotQ5pQqt58uDzVVJKsPoGUvDbIv2tGZjzdn1YtaLRd3VCPVgsjbw 1mdV3QFiEohY4nHLjoXdyMZQ0MwrusIDL+dxCYqdxYduaEaDEI3TQ6XqrglJhJ59IKHYmcxB Y7KNateNxancG/0QgVRjDJAzSz4M51Bim60jQVER/6taZsOONQ0iH7UUZKNyrU/N66dlGp/Q pzgQ6NqEg4YS29iTZOLLEZ6IcrCfFSNx2wO3z7XRfzEZ7nryjcisU75LU8LI66t/9dr+5lQC HHt/JOgnGu1MP5darf0WAnCpGRkwkrXaaDODj2mQBpNpTOdaGWZWjI4Q5q7gDFmJKYS0Z2g3 hUqHVgRP8HSc9LrL/5B7bofox5lx51+CxRSEJrIeVvdD8A5zb4Hs4PkkVdaKO1COf4rGDx9j x5V9dxMvoS0HprFaMiB8Eb0itLeQftdNnOSWS5Qp+6Mgqla6bXX/dla+Z+vB/9euVz+wAotH NGQDS7kfye7smcdavV4TSclMDJyfx0UqQkrWZeCMBKo5msGfw7+oelOw/ON52NrOM/7WWNWz V+6nNwPuQvGiV+aGV6L214oPGOF5LhZVKDNxeVZ46rKGqjaA3ff6PdqdEO0uslNNLfmcaVTE 5aBFyZx6LThl+GKEsFSfEP2wQ8qSRPI8Vpo8E+U0udrlRhuaskGxBpLH6ie8RnW0NUeOHP/S HV//7Cfu+M7f3p8SgtwkZYp8quXrRGYKMxHe+PbXvOkdr5Eh8yESTfLGs0ZauuLDqgJX5cI9 Ejr4SjpXZB8y/GUemTA0ZSqd4wy4/j+jtWra3hQ5khKRRyjOAf20UlUNIVdwP8RS2byYYzeZ Q68AVtNVcWr2CculSj6KoIS5i45cvpNC7BHvMtnm9wP0E9zcu4pFNFljh8jzOQM0J/TwB/SD yorXOl/UG1GDPpi+yOBwodNKjHvXnThy9L67v3fnF7/xhVu/nFX5Ul914ndsKIUBYQ8ffvF1 v/Dat7zmimsvm0yndtmMkxNt/TREEYmWGh0WY5FnzRTQwxrJ701EaZDkkGdVwAho5mw7b9O8 GLFTrbiH3WOFLMidSXdMeSebtDkWsFhmppaCOTArhxcxz2AHsNMCLMWCS1FDbRlOqXowmWe5 6dM0DnZPmXU113XCiTpXpU+iatYLSwERZyXykWRRb2284wJiaHiCbDoElG86vE2nCNSTDrCb AAQ9RHFy1lzMgu1CNK7JU2a7aDNdrxietpKSQ6TQqpUeXphTt+ipShURPyOW9NnqsrPV/Tgz ldirQjiNtINMFsjSJrVUIBv6EZyE46lODAQwKRl5A6aE5pNtunhCffmycOHUPHQWKTEROWZT oWfZkD52pTzVnGr11QQOulotR1ULLTmi0ZasK2CWsh7JZNmdhrg9+qmfszYSO1l+Mm3ckxss fHO5rzikqJXCMlamcz5JoxSBPAQMn0ldmnkBvmP/mcNS98PW/DzAud7CwWQJjLlmXMQuVD/M mNjYDnlHm5RcQZ+Br4W6LPrZMZb0wWnpHAW9nLX7IigKlpWYxMqx+5WGYidiJU2MUr53blQE 6gPKggl0Jd8169iHxeSo3ctgwzkF0dE4FQ0Es8ZwZDIdI92khTt9pUu2ZoGpbCl5T8TV85Kg UsrrHIHY77T2AKlUtDozlZCDSigROwswYmeZE7VDKRPyAwOB82M8pwUBNR15PnPjejYoW7gg f4/aaugwIEjfGXz/LQYQpSYjmLhfhgCj9cTxTpOVuOp5rRWFFYhYka81Qxuta+42JeufIiVg K6X3Ue/Im56e6zkwT2otYZAI/iEFK9yj7FBncYnRSzqahxllsIQ92tckmn0U2AVv4FJ+iTgg 082rjxRwMJLuJ8VSRpBIyzd6FpLVgdI4gDBH6rY8v7VRPjsX31CcxDjG0y0UZeRjE8jHzBp5 bzpblcfjkm1uzh57+InD9/7d9+65/8HvP/TVL93t4ESvv+maF918/fNv+rnLn3vo4gN7Wejj rGklWDkFEhdQ28yUF1f+Iys9RqCdoNmq9f5oFJBZS1iOwN2blK/WTiRunmhaTBEFPZjOwSo3 5d4QuIv7aQVYCIBQoV7vahCcDYcNuUlnVsLJnIcSVcSRIKBiqT3qXQh0ZXOKYIS9v+6jejKC HC4lhoPFFYNyN7l3KtoB8jrSzPDr2aI79fRQvuFYde/M91hg5VhZXPZJ8U9b5zYf/eGjx4+c eOTBR06dOvfYQ4/decc3tjA58tVvfPmevbsPXHnw4HP27Tt46a49OyYjPdkojvRe1c6Uv6SW WAZlTpE67xgxCmZH1WPGadWsx9oIZYXmGDaL+e9Eze90K8ZzvdGSWOb9GQ/MkUKiZizT/RX9 dCq+xZJE57RcI5tSGjGcaAzOqIxsuvmxhufwwRZSwmDq3Jl+6parX2SQIpgOZ61GCtZwHqxt jSvdpeR6tKElvbXuFZaH3KqvlLNR4xRU86iG0qYnNyj3VANrVQq0bCBDcx5sgDzIGVW+ytl/ hhpqDgwdBYrsmFddVrXHhn58vQDITGh4ebbt26UZMtXrzX3nv/cKRJT8d5aFL8t0qk07R0qT j6P0JVTiB89DkZbLrL7KNbNoeT11Io7iRiS3VOXLOucFHmGYiJeKe6AfNroyGs/GYLkamDk7 +1IyCDnZWSL7HgYlqtqNwaY2gtGaLwscJWht8zkTb7V4FI3U/fDTc9UFGiCG4BXiNYbNR4Ed g+V/QsTWVsBaOUv+fywXOMKgRmFgkIEr6EcOobS8igKEAJoekMjzlDivLMAkoksWrpGZ7DVg IGavR157ecq3lSeSMvUuHVgTzn1VF+6tfXrbDs5qW/vBhZ7dm46ZVE+N7fKuLZRIowQhsW/Z ypIY/pLu8jWSrgcgyGpJkwH75JNtZXuw3Ceco8TZsWI9C7aF3pQEjp0xf9kAUPALB8nV42Q4 dVvmy2kcpS9GMEQ/s8Ej4tHaAmM8DrqUMDfBqbics/Jn2hGPNhzJEPnF76vuimnEYE6l4yG2 K1duE+JeYJjF/5GISgoVkzNoYpnyWhdCJCQDgmBt56T/EzJNeM6xii5av302/QLDd5IFl/kK CQ3N2ajXirgY4kdlI2QDK6aXMxP1HuUJeG+14dTRd+xAxvOhg++XySvupLxb8MUDIVQSvdrR 2baZyMAHB6GRORrHmBj1Wc+Ub3xN1XsUIGVQP51M0pLD6NDY30Sp9hBMNuBuHa0MLxI4siX6 4TYoKMQQj7OIrbNpCWKkyoEdS7GFGJOp/CiWk0puRQeyorKOZYlOdog8Quh2ymF3Oq2QmxKB AAYFZBl0JVXPGsxkTfmb6Ve+yg+2sZp4l6CXJ90lZbXPtSTWOz01lk0bnoTFU8NVrttJ/qLo R79artBOHI8wpbdzDRWS0XXOsVRICX76HmhdyuKSQiA3x1srvwONxtRJzZj4i7FAOBGjW455 SyxzGElDrFpv5teGsKPGu96sbhDpF/m6EdJMXdakMz+iwbiJKh9QDOxEXEj5IVN78ivcpSNh lejqMtKO1DzM3aB3gkwwgUtSQW39lw5KaVKU6WMFAbAGmhAgVBrHpgdCQ8SjAVKmG/bem632 fXCEz9zU3I26f5VMNGDkZcpNNjxNAfpeGzbbeIQw2F3Z/AID0qwtI86Y7+2Gbtvu2kYOOY12 +q2benK615yzsLaXutE3Vy7EzmTvOvB1sJk1z+DOtP0G9xpq9RfYGGScRgbYiUnS+r0KcZw6 92DqD22v8NT7947G39caHb2saAk8ORd+LIIfUN2EIZVrg2ae2KVBSWv/AN3ghHpTpqXnoQ2f 6PSSmrfpXV4eOPpML2zYdPgew1XZwrAgaod8TrOkwCXaZio+mJxkMl6Lin8jrQ/P0S9AdT4d jPGTiLYYaJQQJlWxlD3N4Ufi5lMFDVkXG8P5tHlhBrGnefIE9WPtCOLWV96VwVmLbwy2Tb3v lyQMd2h90P0ZaDAgEBrhidGJD8YcZBYqmd8i91OVSyYALPOkCb+Ua+Qq/+vUD4Upxh+gEoKV CsOrsB2tO17Mkw5/wVpYlVV/tLYdOYa1uvn6uy4uN3faCxqDsSbcnVtamg1NsIUua6kGAKx2 1Jixx93X4qBqzLCdq+XburF4DRUE8ww4Tet6s2jaWYNsushlBbQO4dyhdtX1hYeome39H88k ixLmGGAEuTmnI0RkXeQhYWBWHGFu1OlZR8TJOmKSN/b55cKkvU/LFgz6OGOXMK9Ksq4RPgnK 6BUpeiTd5FTToylYNK0E1BLhHwbg43xsKuEIKv2j7HNkcV3NISRvxhdZHhHzDGqYAjghzQtA bzA5vcfMNJlXNDa0Jw51CTrADsMR5VQGa9Pg0aNoitdG1sBBoaiOlApW6FNL/e/6KCBQS5b+ UK7Xm1lxUp8LpkcIAIFiOfuBwRLsgp5kz8KLBs2b9VTQB3YDNbxwAXDPDHtAJQNnaPOTFcjG wWzI889ORVfZ0M/ALNS/JyU2fL24XP1TtvGrRCSSQOETxy7LqlNauR99wvUFvi0rA+FieQMC ubY8t9NbAqFWJjImMGNwygjqQyjfyY7ykkEVQDpzqAw7G1P/M5utnNySURy8tXmK8xym0jmP TC5sr165nMcAHNna0c4Gm3INqIxs1vm7bKclUg8q0cvee9x+ztZHIsAL5Q2xfo43UriaXJhZ 0iHmTXtG2NCA05tlzegkKkfVmii87y2VKoN745OyfVzdEtXS2pnBGTTS5byo0p33A5e3/0yx fvTDejV9U6yacwMIMnylnijneaqskh9eNiGIcwtzS7xzVmNa36ZB8ljXRUKfUMGfxavn3xS/ K3J2D6UyNbFjtb89KTU8oR7N00YNM6UDxbUuBURciX2vvgfHdTPQAnqrpMlG+MnGXEJFdrFF 9AsDcK8n2ivUqxIYFwSm2mArn/2/HvwsLS77IaEZyjGt4o+puOqciu7PkPSOfUasX6K64Zif Qh4qENk4nVyhIhkE46LBpelqclw567xrFZYtPyohndCnOi3PsWFvrsXzWoehPZCcE5SrioAu 29DMmaSBpXhQMRbQacsOL3K2zFtrIs9AcdahS5k4VLwvSOY5sNe8qw6gt54Qwvect+cHZzub s/UL+02+FNm0alMqQNId7AZsqrqSXoy79xOodGGxdhMGpyv6HshD6lrlMvkNNOLV0yTdeV5H 7lkrhzcfb45WDxkH8mmNMzzipPETyOWVh7PVsX5WuUoWP41KwC+FUJ6/R0RFNIC+UEE/c1br KEfdWxDvlReVFH5mSiWDbyuugpmCEgp3nRa0CVAGsh82/5PZUvRDKM9nCnPvi3vAYYO8ghAh fOL8kzPCtDCrYS2L9PcWjyUpRbi6EBeGMyuHzy7iBvQyYokO6Kd8QpNSgKqhx/WQkxeQwQHO 5RfHklESTgiIgZtf7oB4bhNTNig6hapVPygER1E5QiPNBJlgJdOXdXxKpRO63EhGKaMCqaAf cAAycDtEEaYSQKbiDLYxsrO+d8cdDgZPUvXSm6mhmKMdADEGEiRwVvqozt8e+EIekrpthk7I 9oLazGQpeDNIuTHZrnq6zn9pnZPVMA0Xq/5ZXf4ClKSD6TldBc7JrrMByc3B1BX96KeoRWYJ ORvLJUuHGqOEAvMGxKkE6IiIpFg1Bl8T0wCdgSUUyZasnl++J+jcvHrBYtYo+AnTWhY3QqMh KWZVutcDupUrF7HjDNl9MveduTHXOzyfzQgEgc4SjsA7eigdJ1LyEj900o0LCyxgC6FjVDOV VEUzqwki7adUcUU/C7fC05RUuL+6Hs3IqHxwUPQDABRt1mH1hdX1VLdd11G3L7DvMI01fJ2/ nc6HDvwVEwjoGaCqIFDLdNRx5P5zFl0r0UxWJIefwkr3wSerEhWRiFUL28os6Q2Nc7IoxZZy SF60tlHJURlV3FdAO7d4cXxn8PWEinFOIfeOTtImkuKXJtwguZQu6cfWid36sdqoFr0NF1T0 iZPi2QneX2HFXkQ/5D7kLLDfxY5u9XH1/ZZ78f8HzAVK9wplbmRzdHJlYW0KZW5kb2JqCjI4 IDAgb2JqCjw8L1N1YnR5cGUvSW1hZ2UKL0NvbG9yU3BhY2UvRGV2aWNlUkdCCi9XaWR0aCA3 NjcKL0hlaWdodCAzOQovQml0c1BlckNvbXBvbmVudCA4Ci9GaWx0ZXIvRENURGVjb2RlL0xl bmd0aCAzOTc3Pj5zdHJlYW0K/9j/7gAOQWRvYmUAZAAAAAAB/9sAQwAOCgsNCwkODQwNEA8O ERYkFxYUFBYsICEaJDQuNzYzLjIyOkFTRjo9Tj4yMkhiSU5WWF1eXThFZm1lWmxTW11Z/9sA QwEPEBAWExYqFxcqWTsyO1lZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZ WVlZWVlZWVlZWVlZ/8AAEQgAJwL/AwEiAAIRAQMRAf/EAB8AAAEFAQEBAQEBAAAAAAAAAAAB AgMEBQYHCAkKC//EALUQAAIBAwMCBAMFBQQEAAABfQECAwAEEQUSITFBBhNRYQcicRQygZGh CCNCscEVUtHwJDNicoIJChYXGBkaJSYnKCkqNDU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVm Z2hpanN0dXZ3eHl6g4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfI ycrS09TV1tfY2drh4uPk5ebn6Onq8fLz9PX29/j5+v/EAB8BAAMBAQEBAQEBAQEAAAAAAAAB AgMEBQYHCAkKC//EALURAAIBAgQEAwQHBQQEAAECdwABAgMRBAUhMQYSQVEHYXETIjKBCBRC kaGxwQkjM1LwFWJy0QoWJDThJfEXGBkaJicoKSo1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2Rl ZmdoaWpzdHV2d3h5eoKDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXG x8jJytLT1NXW19jZ2uLj5OXm5+jp6vLz9PX29/j5+v/aAAwDAQACEQMRAD8A6SkpaKRwgPWi iigAxRiilpAFFJS0wCkpaSgA60YopRQAlFLRSAKKKWgBveloooGBpO9LSd6BC0UUUXGFFFFF wCiikpXAWigc0Y4ouAUUdDSlcHvSuFhKSlAz2zS7cnpii47DaKeQB1ApAOKQWG0UUDvQAUlO NNpALSUA0UxC96KSikMKKKUGmITvSjpR3ooABRQKWmAlLijtRzTuAlLRiigAo70YoxRcBDR2 oxxRRcAoooouKwUCjtS9qLjsFFFFFwsFFFFFwsFJS0UXCwmKO1GeKMZxRcLBRRRQAlLRiigA 7UUd6KAD1o7UYoAoAKQUtFABRRRSuAUGiilcAFFFFAw9aSlooASiiloASilooASilopAJS0U UwCkpaKQBS0YpDVXELmszxBeT2GkTXNtt8yPB+YZGK0hVPV4PtGk3cRG7dGePpzRca3PP38Z 6u2cPEv0j6fnXe6FePfaPbXMh3O6/McYyc4ryEjBwetek+CbgP4ew3Ahdh+HWrehtUiktDL1 7xXf2OsXFtbeT5UZAG5cnOBnv61Y8M+J7vU9SNtdiPDKSuxccj8a4i8n+03s85/5ayM/5nNW 9AufsmtWspOF3gH6Gi2hTguU9D8U38+naM81s/lzblCtgHvz1rjV8aauDy0LfWOt34gykafb ID96TJ9+K4W1i8+7hh/56Oq/mcULYmEVy6nc+JNX1Ky0jTZY5hFPOCZdqjGcD1zXNw+JdYee MNfOQWAI2r6/St/4gKEs9PUdAzD9BXFW/wDx8xf74/nQtioJOOx7VRVO61Oys8i4uY4yOoJ5 pbTUbO8/49riOU9cA8/lU3OezLeaKSmu6RqWkYKoHJJwKVxDs0tZz65piSBGvYQx6DNXIJ4r hN8EiSL6qc0DsyXNA5BprsqKWchVHUk4AqudRsl63cH/AH2KAsWaMGmNcQLbidpkERGdxbiq ia7pUkhjS9hLjgjOKB8rL+Mml2E+lKu11DKQVI4IoxzSCw0jBwadtAwRS9BTJbiK3UvNIsa+ rHFAWHjg9OtA4bvWf/b2lGXyxexb/TNX4XSZA8bq6noVORQOw5l5BFIQc5qK4vrW3fZPcRxt jOGbFVxrWmtJHGLyIvIwVQDnJNA7FwD60Ed6Zc3ENlbvPcSLHEn3mPQdqrrrOnP0vYT/AMCo FYt9/WkC06NkmjWSJg6NyGB4NQ3N3bWvNxPHH/vNigLDyKNpqnDrelzsVjvYWIOMbsVeBB5B yD0IoE0NIPtSYzTZrmCAjzpY489NzAZqNNQtJZBHHcxM56KGBJoCxMRikqpLrOnxXHkS3kSy /wB0mnyalZQkiS5iUjsWoCxZxSYqpDqthcXCQQ3Ubyvnaqnk461PdXVvZw+bcyrEmQNzepoC xLiq95dwWNs1xcyeXEuMtgnGTjtUS6vp7dLyH/vqsXxnqFodEmtROpnkCOqdyNw5/ShIajd2 LR8W6MP+Xon6Rt/hWxazpdW0VxFkxyqGUkdjXi9eneHtY086bYWguk+0CNV8vnOcdKpxsXOF loc1r/iHVbbWrqCG7ZIo3wqhF4GPpV7wZq9/qGqzRXdy0qLAWAIHXcv+Nc74n/5GK+/66f0F angBgus3BYgAW5yT/vLTa0LaXKeh9qWqD63pkUgje9hDHoM5q7DLFcJvhkWRD3U5rMwszmfG Wt3OmxQwWjeXJNkl8ZIA9K53QPEt/DqUMc87zwyuFZX5IyeoNdh4k0WDV7dA0qwzx52M38qx tF8Jx2t9HcXl1FL5ZyiKep7VaasaRceXU7MHiio5biCDAmmjjPozAVGl9aSyCOO4idz0UMCT UmVizScVUu9TsrLIubmOMjsTzS2upWd5j7NcRyEjOAefyoHZlqijtUc9xFbx75pFjX1Y4oES A0orPg1rTbiUxxXkTODjGcVKdRsgxU3UII6jeKNR2ZbFFRwzxTgmGVJAOu1gcVIKBBSUVFPd QWwzPMkY/wBo4oAmpKz49c0uRyi3sRYdecVfSRJEDIwZT0IOQaAsO7UCo5Zo4ULSuqKO7HFZ 7eINKSTY19Fu9OaYWbNQ0GoLe5guVLQTJIP9k5qbtRcA4oNVmv7NDhrqEEdt4p8V1BPGzxTI 6L1YNwKQWJqKzm13TI5BE17EHPbNXYZo54w8MiyKe6nNAWH0VDJeWsTFZLiJWHUFxkUsN3b3 DMsM8chXrtbOKAsTUVQuNZ022fZNeRK2cYzn+VWra6gul3QSpIB/dOaB2JcUYpaimuIbdd00 iRr6scUCJMUVnrrmmNIY1vYdw7Zq+kiSKGRgynoQcigdhaMUuaZLLHEheR1RR3Y4pCHUtZx1 3S1lEZvYtx7Zq5DcQ3C7oZUkX1U5pjsU9Q1rT9MlWK8n8uRl3BdpOR07D2qtbeJtLurqO3gm Z5JG2qNhFcb40vra/wBUhktJllRYQpK9juNZugzx22t2k0zhI0kBZj2FVy6Gqpq1z12iqtjq NnqAc2k6zBPvbc8VNPcwWy7p5UjH+0cVJlYkorPGu6WzlBew7h1GauQ3EU67oZUkHqpzRYLW JKKWigQlFLRSAM0UUUDE70jAMpU9xg0UUCPG7+IwX9xEequR+tdD4evmt/DOsKCQVUbSPVgR /hRRWr2Ol6o5alRijqw6qciiiqLOn8ZXRuItMPYw7iPfis7wrD5/iK0UgEKxc/gCf50UVPQz 2gdH8Q/+Pex/33/kK4YEggjgjpRRRHYdP4SaeOdszTZbcfvFsk022uJbWdJoHKSIcgiiimUj 2G1uBLp0d0/Row5/KvMtf1241W6YBmS3UkIgP6miipiZ00rsWy8NX17pjX0Xl+WASAW5IHWq el6ncaVdrLC5AB+ZM8MKKKadyk73TPU5ZE1DRHkA+SaEnB+lePUUUok0+paV7u6gSAO7xRfd QtwKrMCpIPUUUVRod/8AD6/lmguLSVi6xYZM9h3rtRiiis5bmM9ytqF2ljYzXMgJWNc4HevI 9W1e61a6aWdztJ+VAeFFFFVEuC6lqXwzfRaR/aLeX5W3eV3cgetHhzW59KvkG9mt3IV0zxj1 FFFNajT5k7m78Q7Zc2d2v8Q2f1rjbWVoLqKVfvI4YfgaKKI7Djsei+O7rZ4ejVf+W8ij8MZ/ wrziJDLMkY4LsF/OiilHYUNj1LWNRHh3w/CsS5k2iOMY4zjrXmcktzqd6PMdpZpWwNx7miii O1wjtcvaz4evNGjjkuChVzgFT0NbXgrXJlvF0+4dnik+4TyVNFFG6F8UdS98RYh9jtJMciQr n8P/AK1cHDNJBKssLlJF6MOooopx2HDYktENzfQofmMkgBz35rovHVkttqMEijAkjA/Liiih 7g/iRkeHbj7Nr9lJ/wBNQv8A31x/Wus+IVxts7W3H8blz+H/AOuiik90J/EjiLGA3V7BAMZk cLzW/wCN7ZotVj2LiKOBEBz6ZoopvcbfvI5mt/wnZyNrtpKy4QHcDkelFFD2HJ6FXxP/AMjF ff8AXT+grPgabcyQswLjaQDjI64/SiimthrYbJG8TbXGD9a6HwVfy2+spbhz5MwIK9s9qKKT 2E9UaXxDd0msNrFflfofcVy+lSyHVrIGR8eenf8A2hRRRHYUfhOq+IkYAspMc/Mua4qGWSCV ZYnKSKchh1FFFEdgh8JJOlwwM82W3HJYtkmmW9xLazpNC5SRDkEUUUykewWl0JtNiuW/ijDn 8q8u13VptVvpHdj5QJCJ2AooqYmVNasqw2VxJbvcxr+7j6tuAIqsSSck5NFFUapnovgFAujS OAMtKc/hXU5oorN7nNP4mZfiDVBpOmPcAbnJ2oPevLLy8nvZ2luJGdic8npRRVR2Naa0uM8i Ty9+35fXIrtfBe+00m7v55XMC52pnI46miinLYc9jltW1e51W5aSZyEz8qA8AUyHSrueza6j jBhXqdwoooehT0WhFZ3txYzrLbStG6nPB4P1r1XQ9RGq6XFc42seHHoR1oopSRFVaXPMddjE WtXiAYAkNV4Jrny3t4ZHCSEFkBwDiiiqNFsRSRvE21xg10fgm+lg1dbbefJmBBX3oooewpax IfGsYj8Qy4GNyKxrGtp54GYW8jIZF2NtOMj0oopLYI/Chs0UkRHmjBPPXNaHh2/lsdXgaNyE dgrr2INFFMe6PTtVvk03TZrpwWEY4A7ntXlOo6lc6nctLcSFiTwueF9hRRUxM6a0uXbzw3fW emrey7PLIBIDcjNS+GNcm06+jid2a2kYKynnHuKKKa1Wo0+ZanpVzOlrbSzyZ2RKXOPQCvKd Y1m51a5Z5XIjz8sYPAFFFTAmkupRjgkkUlFyB710fge3ml1gssrJFCpZ1B+92AooqnsXJ6M5 uaJ4W2yLgnnrTURncKoyx6CiimV0O98Fxmw0m+nlUg53EZzwAa4zUdRuNSunnuHJLHhc8KPQ UUUluRDVtjYbG4ngaaNAUXqcitzwVDNJrYAkZEiUs6g9aKKHsOT0Z6TmiiiszmCiiigD/9kK ZW5kc3RyZWFtCmVuZG9iagoyNyAwIG9iago8PC9TdWJ0eXBlL0ltYWdlCi9Db2xvclNwYWNl L0RldmljZVJHQgovV2lkdGggNzY3Ci9IZWlnaHQgMzkKL0JpdHNQZXJDb21wb25lbnQgOAov RmlsdGVyL0RDVERlY29kZS9MZW5ndGggMjYwMD4+c3RyZWFtCv/Y/+4ADkFkb2JlAGQAAAAA Af/bAEMADgoLDQsJDg0MDRAPDhEWJBcWFBQWLCAhGiQ0Ljc2My4yMjpBU0Y6PU4+MjJIYklO VlhdXl04RWZtZVpsU1tdWf/bAEMBDxAQFhMWKhcXKlk7MjtZWVlZWVlZWVlZWVlZWVlZWVlZ WVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWf/AABEIACcC/wMBIgACEQEDEQH/xAAf AAABBQEBAQEBAQAAAAAAAAAAAQIDBAUGBwgJCgv/xAC1EAACAQMDAgQDBQUEBAAAAX0BAgMA BBEFEiExQQYTUWEHInEUMoGRoQgjQrHBFVLR8CQzYnKCCQoWFxgZGiUmJygpKjQ1Njc4OTpD REVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoOEhYaHiImKkpOUlZaXmJmaoqOkpaan qKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4eLj5OXm5+jp6vHy8/T19vf4+fr/xAAf AQADAQEBAQEBAQEBAAAAAAAAAQIDBAUGBwgJCgv/xAC1EQACAQIEBAMEBwUEBAABAncAAQID EQQFITEGEkFRB2FxEyIygQgUQpGhscEJIzNS8BVictEKFiQ04SXxFxgZGiYnKCkqNTY3ODk6 Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqCg4SFhoeIiYqSk5SVlpeYmZqio6Sl pqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2dri4+Tl5ufo6ery8/T19vf4+fr/2gAM AwEAAhEDEQA/ANoc0uKftpcVVzzLEYU0yVf3bZNTEU1+Yz6UXE1oUtgx1oKrxyakx7ZpGxgZ FFzKxetbyGC2EJQsH3eYfrxx+VNN3iKGKPIVPvcDJ59apgcYApwHekXzytY02v4ZJg771wGA CqOc/jVa4eCWGLBkEiIFwVGDyff3qtg4o5pFObe5f+1WyLAEEm2MgspAwT65pZb2J7gPhz8h UsQMnNZ/NKBQP2ki9HfCOBIwOkTL90Hk5x+FRRXTCeOSXGEz9xQO3tVfrRjnrQHPI0TqKSPG 8iHchJAA46U171WZnCsrtEUOOme1Z3OacOvtQP2kmXbG7it0KSRFtxyWB9uBikiuo4/K4b5H ZsdeCKp8UvegSm7WLFzcCdYsjlc54A7+1WftkCNCYxJsTgpgAcjBP1rOFL2pDU3uaC3kOfLI fygqqDxng5/rUE9yrxyBQQ0j7mz6dqqgUtAObaG4BpcUtHenciwlFFLSAOtFFFIYVPZzLBcB nBKYIIHfNQUmKY07O5pNqKtLCzKcDPme+eP5UNqIZ4iVPBJf3FZ1FBftJF+4vY50RGVgu7LY 9O1Ed5EkBjUMpUtsO0Hg/wAqoUUC9pK9y99qh8xZSJN5XYw4xjGOKRrqIRGNA+0KFBPU85ql RQHOy8byF3beH27w64xngYwaDeI2GZWB2SAgerEn+tUKUigOdl17uNlIG9eVIIA4wKc13AZD lWwyFWYKASfXFZ+OKBQHtGW1ltl8yNRL5ciAMeM5BzTluYQgID70QxqDjBB7mqdFAudl77bH 6P8AwdvSqMpDzOw6FiRR2pMdKBSk3uJQQSKdiigmw3FGKdQaAsCYDru6A84q/daizzIYGdI1 AGOmaodqKClJpWRpnUYhfCcRthk2tUUl3bLaSW8ETgMc5JqjRQU6kjQS9toYJFhikVnGNpOV FR/a4GsEgkRy6fdI6VSI5pKBOoy/Nfo2oxXKKxVFAIP4/wCNPnvoHgnjjWTMpzlj3rMx1pcU w9pLXzL4vYglouG/cnLcdfpUn9oQP56SLIEkbcCpwazKDQHtJFy+uo7iKFI0ZRGCOeabaS20 YPnJJuzkMjYIqr6UtAud35i1qF0t3IpRSFUYGepqf+0F/sz7PhvMxt3dsZrO7UtA1OV2+5o3 GorLaxxhW3ggsT0OKk/tG289ZykvmBcYzwKysZooK9rLcvw3kHkzQzxuUd9w20qXkD28cVyj kx8KUPas+igXtGXoLuGKScqjhZFwoznFURwQfSjFFBLk3uaMt5a3Cq9xE5lVcfKeDUF1cpNb W8aBgYxg5qpRQNzbNGW8tppIzJHIyqm3IOCD6086lEJYNqyGOIk5bljxWXRQP2si9HcWvmyP IkoZnLKyHBwe1R6hci6nDqpCqMDPU1V70UEubasFJS0UEhRRzQKQBR26UUtACUUuKMUAJRjN LiigaEoOMGjtR6/nTGGOfxNFOYc/gKSkJiUUGloEJS0UmOaBksH3j9KmqGH7xHtUx9KDSOwU UUUDG4waAKU0tMQ2kdSUIHWn0EcUBYrGFj2FNMTAdAas44oGOeKCeRFbyH3ZIFIsDjPH61bH T/GlxRcORFYRPjkCgwue1WsUUrj5EVfJbHSlETelWKUCgORFbyXyOP1pfJb0qziigfIir5DY 560vksB0qx3pe1AcqKwib0FBiarNJQHKiv5TelL5TelTCigOVEPlN6Uhib0FWKMUByog8pvS kETVZxSHOKA5UV/Kb0o8pvQVYooDlRX8pvSl8pvSp6KA5UQeU3pSeU3pViigOVEHlN6UnlN6 VYooDlRX8p6DE3pVig0Byor+U1HlN6VYoNAcqIPKbHTmk8t+4/WrFJSDlIPKb0o8pvSrFGKA 5Sv5TelHlt6frViimHKV/Lf0o8p/SrFLQHKiv5T9KBE3pViigOVFfymzSeU3pVmkoDlRB5TU nlNViigOVFcxN2FHlN6VYpKBcqIBE/pSeS1WKKA5UV/Kf0o8l/SrJ6UhphyIreU3pS+U1T0u KA5UQeU2ego8pvQVOKWgOVFfym9KXym9KnxRSHyog8p/Sjynz0qxRQHKiv5TelJ5T+lWKWgO VFbym9qDE3pVijtQLlRW8pvSl8pvSp6WgOVFbympfKb0qfrR0oDlRX8p/Sl8pvQVYooDlRWM TUeU/pVn+lFAciK/lN6Cjym9KsUUD5UQeU/pR5TelTiloDlRX8pvSjym9KnzzQO9AcqK/lt6 UeW3pViigOVFfy29KPLb0qweKDRcfKiuY3OOO1HlN6VOOlApXFyog8pvSjym9KnoNFw5EQGJ 6DG23pU9BpXDkRHEjIxJ6VLSdhRRzFJWFopO9LmlcdhMUtFFWIBRRRQITFFFFABS4oooGH0o oooAKOlFFABRRRQAtJzg0UUAHFGM0UUAJSjpRRQIOtLRRQMKKKKACiiigAooopAFJRRQMWko opAFBoopMAooooAKKKKQwzRmiincQUlFFK4C0UUU7gFLRRRcAooopgFJRRTEFLRRQMKTFFFM QE0GiigBKWiigAooooAWiiigAoNFFABRRRQAlFFFAhKWiigAooopDCjNFFABnrRRRSuMKQGi igBe9B70UUAJS0UUCAUUUUDA0UUVICUtFFACUUUUAFFFFABRRRQAUUUUAf/ZCmVuZHN0cmVh bQplbmRvYmoKMjYgMCBvYmoKPDwvU3VidHlwZS9JbWFnZQovQ29sb3JTcGFjZS9EZXZpY2VS R0IKL1dpZHRoIDc2NwovSGVpZ2h0IDM5Ci9CaXRzUGVyQ29tcG9uZW50IDgKL0ZpbHRlci9E Q1REZWNvZGUvTGVuZ3RoIDM1NDk+PnN0cmVhbQr/2P/uAA5BZG9iZQBkAAAAAAH/2wBDAA4K Cw0LCQ4NDA0QDw4RFiQXFhQUFiwgIRokNC43NjMuMjI6QVNGOj1OPjIySGJJTlZYXV5dOEVm bWVabFNbXVn/2wBDAQ8QEBYTFioXFypZOzI7WVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZ WVlZWVlZWVlZWVlZWVlZWVlZWVlZWVn/wAARCAAnAv8DASIAAhEBAxEB/8QAHwAAAQUBAQEB AQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQAAAF9AQIDAAQRBRIhMUEG E1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3ODk6Q0RFRkdISUpT VFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2 t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEAAwEBAQEB AQEBAQAAAAAAAAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSExBhJB UQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElK U1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0 tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEA PwC/mk+tO2kjikwB1NdNzxxM1Ben/RJPpVg7e1Vr3H2SXHpUz+FnRhf49P1X5oxKKKK8c/Rw ooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKK KACiiigAooooAKKKKACiiigArasf+PWPntWLW5Yrm0jPtXRh/iZ8/wAQr/Z4/wCL9GTY284p vzHpUp9qjPHOTz7V2JnxbQ0j1pAOaftPvQFPWquKww9MVetr1YNOuLYoxaXow6Cqhj9aNv40 XQ4uUXdFlL1V0t7Ta25n3bu3arE+rZ1GK6ijICJsKt361nYHp0oo0LVSaVr/ANIu3d3aSxOI bVkkbncT0qHTLr7FdiYqWXBBA71XzxQD6UCc3zKXU1odZCajNcNGxjkUAKOox/k1DBqe2a58 6MyQzsSV7is8Gl5xRYftp9/6ZpPqiA28cEJjt4m3Fc8mokvlXWTe7G2E529+mKo4JNH40A6s maNvqKIbtJomkgncvtHUc1HqF6l1BDFFEY1i4AzniqVGDQJ1JOPKWbGe2hVhPCZCTkMpwRT9 Tvftzx7EKpGu1cnmqmMikxkYzijzBSfLydDVj1O38i3Se2ZzAPlIPemQ6ri8uJ5UJ81doA7V mfwgClxRYftpfcblgHn01IpbUzRq2UIYDFWp5XGrusUYlUwhXUH3P+Nc6kssYPlyOg/2SRSB pA+8OwY9weaVjRV7JKxuakqwaOqLH5B8zIQnJqq2p20yq1xbF5VGMg8Gs12lkP7x2fH95s0m 3j/61GgpVpN+6tC9aX1pAFZ7dvMVshkbrz3p8WrKL24mli3JMu0qOuKzduOTS7ffNGhKqTVr dB6XEcN+s8aERq+QvtWk+rwgTSQ25SeUYLE8VklCCCaXbx0NGgo1JxVkaUeqQNBbxzQsz2+N u1sD8aX+1Y/tVzMY2xMgUD0rM28ZAFG0+oFGhXtZlpL1F0w2pVtxfdu7VcOsqbx5DExhePYy Z6/5zWRj6GjHOKNCVVmti8L+MWUVuqN8ku/PtnNSf2nH/a32vy227du3v0rM296XYevNGge1 n/Xkbtoz3VmyyWhmiMhZMMARVbxCVN+gGCRGAfbk1nI8sY+SR1/3WIppyzZOSx6knNFtS5Vr w5bF+21CBLJbaeBpFDbuDUo1jF95xi/dbNgXPIFZWOadj1NFkSq09l0L82oQmxltoYHRXIbL HPNSSarFIbeUwHz4sZbPBFZZBJHbFBX3o0B1Z9DWGp263UkyQsvmIVbnqfWobbUI0tRbXUJk jU5UqeRWfsp2wY60aB7We5JdSpPNvhj8tMYx1qE5xwaeAPWlx70XIab1ZF8xpcMKlAH+RSHB PTFFxcozDD0o+bPWnYOM8UnOelK47D7fdvOfSrQHFQW4O8nHarOPak2bQWgmARSYFPAo20XL sUCWNN2571Lij8K2uYkYQDrSTKPKbipsEimTA+WcUrg1oUtvHAAo2fSpNp70beelO5hqRbKT ZjtU2O9AQtRcepDt5o281YEYz1zQYzngUcyHZkJTjtSbRUzpzQB7GjmBpkQQZpfLB6H9Kn24 p20+tLmHYr+WR/8AqpdoBOcflUxjzkml2LjFLmCxAqZPB/SneUfXirATHejbzS5yuUh2YHBo CEjk81OF9KUIM5HWp5h2ZX8s5709UwMYqcCgilzD5SBk9utIIwDjn86mxzSEcZPNO4WIRGDn Cj8ad5SkYIFSKMCnYobCxXKhTwB+VAQ4JwPyqZxgZpnPvRcLCBOeQPwFKI1B6D8qkVfU80qg EnkmlcaQzy144/Sl8tc9BUmM0uKVx2IwmD0HtxTsU7FLilcZGVB6jNG0elPx3pMUgG4FLsHp S4pcUBYZtHpRtFP6UuKAIygNG32p/rSY9aAI9o9qMCpMfSkxTFYixkcU3bj3qYoO3FM8oDpi mmS0NHANAJp20+lIVbng4HSncVgbOOKYc9zUpUkDAOauWmlS3UBlVgmCQMjrTTGoSk7IzMc0 YxyalaJw5UgAjvSeW3PcdjTuTykYFLinBO5P0qd7OSKCOd8BZOnNFwUWyrn0pe3FO8sMeDgU 7YMnn8KVxcpEPal9TWkNNUR20hkA84457VBPCIZ3jDBwD1HejmKdJrVlRV3DijBzjFXbW2Nx OsK4BPemzR+VK0eQ204yKOYPZu1yoqEdKXacVNjFIRRzC5SIK1OK08CgLSuOwzbxShR0qytp I1q0/GxTg81DsouPka6DBjsKVj8uOTTwuBRtB5xRcLEfUdKOT24qXGBS4pXDlIQrc07afWrd 1brb7MSK+5c8dqZaxC4nVC4QHuaLlcjTsVyvvRsFSyp5crJkNtJGR3plFyXEbtHpRj2p1GKA sM2+hxTqXFGKAsNxml2ginbaUADpRcdhgX2o2d6kpKLhyoZ5YNGwCnmg0XHyoZsFGwe9PAo7 Gi4cpHsGe9Ltx61J3pDRcHEZt4pQuBin4oxxRcOUYFGTRjmnBQCSB1pcCkFh0A+c8dqmxUcA +Y/Sp8UGsVoJijFOAooKsU9tKFFFFaXMrBgio5R+6JoooQpbFajAGKKKZgWrez8+znm3Y8rG B61YisEe2R/MIZl3Y28YziiipZ0whGy06fqS/wBmxB9olbb8wzt7jn1qpcQCLyiDnzE3/Tk/ 4UUVNyqkIpaIsDTlljQpLklgrDHTIzS/2bEsuwztgqWBCen40UUXKVONr2I1sFKhllJBjaQZ Hpmo7a38+4SInbu4zRRRcjkjdE8mnFBFluZHK49Kl/szMrxq+SjAZI7HvRRSNvZRvYrxW4kM pDfJGCc46+lTxWUMkUbeawZyRjb0IH1oooM4xWmn9XIJYBEkbZzvz+FWVsFfy9kudzbW46cZ oooHGKbsAsFLZ8390VDBtvPPA4pj2aqkuJgXi6rg0UUFOEUtingdaQAHiiimcwoXHajFFFId gK5HNIq55xRRRcdh22nwwGVnKnGxdxoopFRSbsWjp0qiTLL+76+/GaDp0uWyy/KM/pmiig6P ZRGS2bwxlmIwAD+dJFaPLC0ikADOB645NFFBHIuaw8WEhVPmXL849B1oGnyFiN64A3Z56UUU FeziIlhI0jruUbSFye5NOTTpXQNvQZB4PscGiigFSiOawKRNlg0m4AY6c0R2KlpFeVcqpPGe v5UUUDcIpleG3M0jKrABRksemKlNjJsZ9y8ZIHqBRRQRGCauxy6ZKyg705x696pONjlT1BxR RTJqwUUmhOopD9KKKRiFGaKKYB1ro7eOWGG0SNcr1c5oooOnDq9ypb26rrFyrKGG0sM81Wgj U6NcMVBYPgHv2oooG0l+JauIQlirW0MTRbeS33h7026uCdKtiI0+fjp0+lFFA5abdgvzHFcJ bw20e59remeelSXdv/xLpWlhiR15XZ2oooHa/MM2hrfTVYAgt0NEcLfbrkQwRMARy/RaKKAS u1/XQbqYNo9vNEqpKykNt6U3SY0kWY7Uab+HeMiiigi372xW1BXW5xJGkZA6J0Nan2eFporh o1EYhLEAd+P8aKKBwS5pIZNbxwR3kmxTkjbx0z/+upba3Z0VZbeFYyvbk0UUGyiuYhWbytKm wiEI+0AjrzUlpaKlrAUSNi43OXHP4UUUEQV3r2/Ujit4Y7y6Xywyqu4A9qy5pBPNkIqA4GBR RQZVNLJeZo3jxWRS3SBHymSW65pLl44LGArChaRMFsdKKKBydnLyJvJg+2QKyLzHkDHBNMMT f2jAk0MQU55To3FFFBpZfj/kFnDG0t2ERDMJCFDjgDNZ1+GFyQ8aRkDovSiigymv3d/MrYox zRRQc4uKMUUUAGKXtRRQAUYoooGFJ0oooGhaOxoooACOaKKKAaE7UUUUEhS0UUDJIPvH6VPj rRRSNI7AOlFFFBR//9kKZW5kc3RyZWFtCmVuZG9iagoyNSAwIG9iago8PC9TdWJ0eXBlL0lt YWdlCi9Db2xvclNwYWNlL0RldmljZVJHQgovV2lkdGggNzY3Ci9IZWlnaHQgMzkKL0JpdHNQ ZXJDb21wb25lbnQgOAovRmlsdGVyL0RDVERlY29kZS9MZW5ndGggNDAwNj4+c3RyZWFtCv/Y /+4ADkFkb2JlAGQAAAAAAf/bAEMADgoLDQsJDg0MDRAPDhEWJBcWFBQWLCAhGiQ0Ljc2My4y MjpBU0Y6PU4+MjJIYklOVlhdXl04RWZtZVpsU1tdWf/bAEMBDxAQFhMWKhcXKlk7MjtZWVlZ WVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWf/AABEIACcC /wMBIgACEQEDEQH/xAAfAAABBQEBAQEBAQAAAAAAAAAAAQIDBAUGBwgJCgv/xAC1EAACAQMD AgQDBQUEBAAAAX0BAgMABBEFEiExQQYTUWEHInEUMoGRoQgjQrHBFVLR8CQzYnKCCQoWFxgZ GiUmJygpKjQ1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoOEhYaHiImK kpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4eLj5OXm5+jp 6vHy8/T19vf4+fr/xAAfAQADAQEBAQEBAQEBAAAAAAAAAQIDBAUGBwgJCgv/xAC1EQACAQIE BAMEBwUEBAABAncAAQIDEQQFITEGEkFRB2FxEyIygQgUQpGhscEJIzNS8BVictEKFiQ04SXx FxgZGiYnKCkqNTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqCg4SFhoeI iYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2dri4+Tl5ufo 6ery8/T19vf4+fr/2gAMAwEAAhEDEQA/ALwFL3pRR3rqPHG4qC9/49JPpVnjNV77/jzl+lRU +FnRhP48PVfmjCooorxz9HNXwwCdftcDoST/AN8mus8XqW0N8DOHUmuc0vWrLTlRo7DM4QK0 m7r61oyeMIpEKPZFlPUE1vBxUWmzx8RTrTxEasYaR9DkBycCtm/0yOz0C0uHRlupnOcn+Hnt +VXk8SWMbbk0tAfXiqGva3/a4gVYjEsWeM9c4/wqLRSep189edSK5OVddTR8E3apcT2zEAyA MvuR1qTxrZOZIrtFJTG1iO1crDK8EqyxMVdTkEV1Nv4vVoPLvbXzTjBKkYP51UZJx5WY1qFS GIVekr90cxbW8t1MsUCF3boBU9hKdP1WKSQYMUmGHp2Na9z4ljSNl02zW2ZuC5AyK51mLMWY ksTkk96zdlszsg51E1UjZP7z0nW4Rf6JMIsPld6Y715qQQcHrW3pHiK405BCy+dD2U9R9Klk 1XRpLj7Q2myeZ1I3DaT9K0m4zs7nHhqdXC80HHmXSx0nh5BY+Honn+QYMjZ7DP8AhXB39x9q vp5/+ejlv1rQ1bX7jUk8kAQwD+Be/wBayFIDAsMrnketKc00kuhphMPKnKVWpvI7HwN/qLv/ AHh/KsrxgMa2feNT/Op7HxHb6dEY7Sx2qeSS2STVXWNZg1WPc1psuBgCQN2ptrk5bmNOlVWK dVx0foX/AAP/AMfl1/uD+dM8b/8AIQt/+uf9ag0rXrfS4AsNnmVgPMct9407UdftdTTFzY5Z RhWVuRRdcnLcPZ1frftuXTboP8GXiw38lu5AEw+X6irnji1YrbXSjIXKMfTuP61yCOyOHQlW U5BHault/FW+1NvqNsLhSMEjqaIyTjysuvh5xrrEU1fujAsYWuL2GJBks4rvfEl2lloskefn kXy1A61zltrOm2DtLZae4mPQyPnH0rJ1HULjUZ/NuGyeyjoKSkoRaW7HUozxFWMpK0Y992VK 9M0MEaDa5/55D+Ved2UlvHNuuoWmTHChsc10cfjARRLHHZhUQYADdBTpSUdWLMKVSslGEb2O Xm/18n+8f516L4a/5AFt/un+dcPd3dpcXyTpamOPOZEDferah8WpbwrDDZBY0GFG7pRTai22 xY2nVr04xjHX5HOXwxf3IPXzW/ma7rwh/wAgKP8A3m/nXH6je2t5dpOlqYstulAb7/P/AOut i28VxWkKw29kEiXoN1FNqMm2wxlOrWoxhGOvy6GHrP8AyF7r/roan8N/8h60/wB4/wAjRquo 2uobpVtPKuGOSwbg/hTtJ1O103bL9kMlyufnLcD6Co05r3OiXO8Py8utrdOx03jX/kEJ/wBd R/I1wiKXdUHVjgV0134phvYDDc2QeM8kbq515EW68yFCqBtyqTnFVUak7ozwNOpSpck1Zl+4 t77w9exkSbJCuQyHIPtXbaHqY1XTjM6BXUlHHbOP/r1zc/iSzv4lXUNP8xl6FW6VXu/EI+xG z063FrC2dxzyaqMlB3T0OatQq4iKjOFpd9LGNdbftMvl/c3HH0r0Tw+Q3h+1A/554rzat3Q/ EUmmRGCSPzYc5AB5FTSkoy1OnH4edWklDVox7pSl1MrDBDkH86iror7XrCctJHpiec38b/8A 1q52okknozqoznKPvxsFaVt/x7p9Kza0rb/j3T6V04T42eFxH/u8f8X6MlHWloApelegfFCd qQUtHegAAq+dUmKWq7ExbnK9efrVHNFJq5UZOOxfj1SaO8mugib5Rgg5wP8AOKbo7KmqQM7B VBOSfoapZozRYaqSum+hr6jq0pkuIIliVGYgug5YfWqUt7JLZw2xVQkRyCOtVc0ZoUbDlVlJ ttmquvXIKny4i4XaX28kVVgv5be1kgRU2u24kjkH/IqpRSsgdWb3ZqNrdw0TKI4kZxguq4Jp ttq88ECwlI5VX7u8ZxWbRRZB7Wd73JLiVrid5Xxuc5OBir8OtXMUKx4RiowrsORWbS02kxRn KLbTLUV/LHBcRYVvP+8x61TxzSnpSdqZLk3uW7rUJLmGCJlVRAMKV61ZXXLgRhWjidgMB2Xm suilZF+1mndMtTX8k1nHbMqhUYsCBz3/AMatnXblgmUiJUYJK5LCsoDg+1JRZAqs1szQudWm uERCkcaI27agwCad/bM32uS42R7nTYRzjFZtJRyoPazve5aS+kTT5LMKvlu24nv2/wAKqk8U YpMUyG29xQaQkUcUuOM0CA85NJ2pdtKBxxQDGfhSdBmn4PFBFADAc54oPtT8UmKLjGnp0o4p wAoC5zxRcBMA0EYFO28inbflzRcQzqAafjil28fypcce9FwG8k80hzUoXC+9JjJouIjOfSlz TyDmjaCPei4DM0Emn4wM0pHtSuBHzSEGpDk0mMGi4C24+c/SrG2ooAd5+lWcccUNm8NhnOKX JpeaTmkWFJRRTAU1Xvv+POX6VYqvff8AHnL9Kmfws6ML/Hh6r80YNFFFeOfowUUUUAFFFFAB RRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUU UAFFFFABRRRQAVqWozbpx2rLrXsxm2j57V04V+8z53iL/d4f4v0Y/GKOak/GjafxrvufF2I8 E9h+dJg5qXb6im7fancVhmMUU8LlgOBmtiPQo3hMi30e0feO3gfrQ5WNIU5T+ExMUYrUuNLS OyluEuPM2OFG0cHp/jWbj1ovcmcJQ0Y3FGKdjijFFyRMUtKeKOvOKVwExxQq5PNKDirWn24u 7yOEsV3Z5H0ouVFXaSK23nvijaCKknURXMsYydjlcnvg1e/svetmVk+a49V+7RcpQcm0uhmY 4xSEe1TXUSwXLxBvMCHG7GKhOPSnczemghFJV+8shb2dtMG3GYZxjpTLG2iuTIJZxCFXIz3N HMVyS5uUpjvRTiOv6UAH0707kDR05o707bRt4ouFxuBmjAp+2rNrZPdLKyMoES7jmlcpRcnZ FLFO7VYtYPPuooidoc4zS3kAtryWAEsEOM0rj5Xy8xWAPegdKd19qUCi5IwUY56VIq5IGepq 3qdktldCJGZwUDZNFylFtNlDBzQRVxrWIWCzicGQtgx9xVXGaLg4tbjQPUUoWnY4oC0XCwAY 70u0EdaufYgNLF3vOS23biqmDSuOUXG1xNuKXigA1dk02ZLqKAsm6UZBB4ouCi3sikMd6Xg1 oW2m+bczwySYMSknb3rPI9aLjcZRV2GBSDFLSYoIA+1B96OaU0AJx6UGlpMUXAkgPznjtU9Q wAbz9Kn280G0NhKTvT8UbeKVyyDtRRRWogzVe+P+hy/SiioqfAzown8eHqvzRhUUUV45+jBR RRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUU AFFFFABRRRQAUUUUAFFFFABW1Zrm0j+lFFdGH+Jnz/EP8CHr+jJ+D0JpcLRRXafFdBpxnrmk PFFFMOgmTWzp5/4kN7RRQ9jWh8T9H+Q+xna30GSQIrES8BuR2qea0hl8QRhkXb5O8jHBOaKK k6o6qKfl+ompJG+nymUxmRDlNiEYHpVPQtsy3VuyglkyCRRRT6ES/jRNF7OKSxitlUCSPy2Y 49Tz/WnT+Uj3lyI1LwAIoI46A/1ooqToaSV1/VkyCMJeW9pePGgk80KcDgihbndr6WyRoiRs TkDknbRRT7mV3aL7tEUIS3i1K92K0qTMq7h05/8Ar03VLqQWVhcJhHIJ+XtxRRTW5Em1Bpdv 1ZHoTRu027b9oYfIzLkVX1lJ1ulFwsYO3goMZoop/aM98PfsajXRtrLTQERt4CncOg4pY7aK PVLxVQbfK3AY6GiipN1q9elvyK0Ui2GjQzJEjPM2CWHbn/Cr80MK38kxjX9zbhguOM8/4UUU McNrdkvyZSnlF3oyytGiu8oUlR2zWh5EMJWE+UINmCpTJJ9c0UUMcHdcz3sv1KmnIhtpY7TY J1kIJdc5Hal0+eaN79JERWQbsKOM0UUBH4Ytef6mPYSNLq0MjdWkBOK3fMW7vb2zljTYq5BA 5zx/jRRTkY0G+Veb/Qr6WlwlpDlYFiY9SuSwzUscUUepXyiJCojDAEcZooqTdK0Y/wBdGVpp Bd6KJnjRXSQAbRjHIrRu0WJ7i8ADSxxBVB7deaKKGKGsbvsv1M2MK2kW0hUFjPySOvJq95qD VzaCGMIyZPy8niiimyYuyXy/Uqlk07TvNiiRnklK/MO2T/hVfxAqrdxKiqo8sHge5oooRNXS DXp+pPb3BtdBSRVVj5mPmHvUlxAzajby28Ue+SPcwbpRRSLj71k/IkvMrprTuImlicFSq4A5 FSz3ciapaRALtdcnjmiigqTaenl+bIoJml1S8DYwiEDApmnQrHpkcqGNZJG5Z1zx6UUU2KOr u/P8zO1pIUvsw8Ky5IAxzWf1ooqlscNV++xSDSAGiii5FhQpo2miilcaRLb53n6VYxRRQbQ2 DFGKKKRR/9kKZW5kc3RyZWFtCmVuZG9iagoyNCAwIG9iago8PC9TdWJ0eXBlL0ltYWdlCi9D b2xvclNwYWNlL0RldmljZVJHQgovV2lkdGggNzY3Ci9IZWlnaHQgMzkKL0JpdHNQZXJDb21w b25lbnQgOAovRmlsdGVyL0RDVERlY29kZS9MZW5ndGggNDU2OT4+c3RyZWFtCv/Y/+4ADkFk b2JlAGQAAAAAAf/bAEMADgoLDQsJDg0MDRAPDhEWJBcWFBQWLCAhGiQ0Ljc2My4yMjpBU0Y6 PU4+MjJIYklOVlhdXl04RWZtZVpsU1tdWf/bAEMBDxAQFhMWKhcXKlk7MjtZWVlZWVlZWVlZ WVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWf/AABEIACcC/wMBIgAC EQEDEQH/xAAfAAABBQEBAQEBAQAAAAAAAAAAAQIDBAUGBwgJCgv/xAC1EAACAQMDAgQDBQUE BAAAAX0BAgMABBEFEiExQQYTUWEHInEUMoGRoQgjQrHBFVLR8CQzYnKCCQoWFxgZGiUmJygp KjQ1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoOEhYaHiImKkpOUlZaX mJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4eLj5OXm5+jp6vHy8/T1 9vf4+fr/xAAfAQADAQEBAQEBAQEBAAAAAAAAAQIDBAUGBwgJCgv/xAC1EQACAQIEBAMEBwUE BAABAncAAQIDEQQFITEGEkFRB2FxEyIygQgUQpGhscEJIzNS8BVictEKFiQ04SXxFxgZGiYn KCkqNTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqCg4SFhoeIiYqSk5SV lpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2dri4+Tl5ufo6ery8/T1 9vf4+fr/2gAMAwEAAhEDEQA/AH7fWjbT6Su08Ubiorkf6O59qnqK6H+jv9Kip8D9Down8en6 r80ZVFFFeIfpIUVvaVo+n6kERL51uCuWjKdD3xWhP4StbePzJr8xpnGWUAVapyaujknjaUJc kr39GcjRXUw+G9OncJFqqux6AYyaxta05dLv/s6yGQbQ2SMdaHBpXZdPFU6kuSO/o0Z9FFFQ dAUUUUAFFFFABRRRQAVdsNTl0/JhjhZic7nTJH0qlRTTtsTKEZq0lob3/CW6l/0x/wC+P/r1 lX1699IHkjiQgY/drtzVaim5N7siFClTd4RSL+n6tPpw/cRwls53smWH41bn8TX1xEY5kt3Q 9jHn+tYtFCk0rXFLD0pS5nHU0dO1i401SLdIck53MmT+dWLnxJeXUeyeO3kX3j6frWNRRzO1 rg8PScuZx1HxSvDKskTFHU5DDqK3YvFt8keyVIpfcjrXP0UKTWw6lCnV+ONzS1HW7zUE8uRl SL+4gwKzaKKTbe5cIRguWKsgooopFBRRWhoVlHqGqxW8zYjOScHBOBnFNK7sTOahFyeyM+iu q8UaJZWFlHcWqmM79pXcTn865WnKLi7MzoV414c8dgoooqTYKKKKACiiigAq5CP3S1Tq7D/q Vrrwfxv0PneI/wDd4/4v0Y4dKKXHFFekfFiUAZzSgc0tADcGp/ttyLX7N5p8g/wdqhoxSGm1 sTLe3K2ptlmPknqnFNNzM1qts0hMKncE9D/k1FQBRYfM+5a/tG885ZvPbzFXaGwOB6VDDczQ T+dFIVk5+Ye9MxSUWQcz7kq3My3P2gSETZzv75p7391IkqPMSspy4wPmNVxRRYOZ9yWS5mlg jhkkLRx/dX0pz31y7RM0zFohhCONtQ+1JzRZBzPuWptSvZ9nmXDtsOV7YNObVr51Ie5cgjGP aqeKNppWQ+eXcRWKsGU4IOQauS6pezQmKS5dkPBB71U28UYOOKdhKTWzLKXtx9l+zec3k/3P 1pbe+ubQFbeZkB6gVXUUpHNKyDmlvcsLf3STtMs7CRhtZj3FVsE07H1ox9cU7EuTe50NjqNl bxQ5vLlQg5iK5BP5Vky6jOL+a4t3aLzGzgHtVNhmgDH/AOqpUUjWVaUkltYmmvLmadZnmZpE +62elNurm4u5A9xIXYDAJqPHP/1qCBTsjPmb6kjXdw8ccTSkpF9wf3aW5uri82m5mMhQYXOO KhwPWlAFOyDmfckmuJp4oo5ZCyRDCL6CrEN2Zr2GS9ml2x8Bk6iqfB9KTH+c0rIFNp3Oju9V thp88MdzNcyTDaN642/pWE93cSeSWlY+Rjy+B8v+cCoecUDikopFzqynuTrqF2ty1yJmEzDB bjmgX92BL+/Yed9//aqDmlxTsieeXcaBxS06kxTIEANLgUtFAwopRS8UxDcCjAp2KSgBMCjH FPxxSdqAI8UuKdR2oAb3op1JQMfB98/SrFQW/wB4/SrFI1jsJ3opTSGgobRgCnEUY5qiRB1q C7x9mk+lWagux/osn0qKnwP0OnCfx6fqvzRj0UUV4h+kGr4YJGv2mD1JB/75NdX4x/5Abf8A XRa5Twz/AMjBaf7x/wDQTXa+ILGTUdNMETKrFwcseOK6KavBo8XGyUcXTk9tPzZ5vE7Ryq6E hlOQRV7W9QGpX3n+WYzsClSfStmw8KXKXkTzyReWjAkA5yKyPEOBrl2AAAGHA+grJxlGOp3w rUqtZcmrS3M2p4LO4uf9TC8n0FXvD2ljU7/a+fJjG5/f2re8Tak+mJDZWGIcjLFR0FNQ05ns FXEtVVRpq8vwRy0unXkIzJbSqP8AdqrXW+GNbkeWWC/nBQruVpD0PpXKpG0kyxLyzMFH1pSS smi6VWblKNRWsIkbyNtRWZvQDNW/7KvwufskuPpXZfZoPDuiPMiK04XlyOSxrmLbxJqMV0JX nMiZ+ZD0IqnBR+Iwhiala8qMVZd+pkMrI211Kn0IxSda9E1HTbbXNNWeJQsrJvjcDn6GvPSG hlwcq6H8iKmcOU1w2KVdPSzW6JEtLiQgJBISf9k0Pazxz+S8TiX+5jmu28I3897bTC4beY2A DY5qHX9Sj0i9LW0SPeTKCzvzsHQVfs1y81zn+uVPbOjya+pykmmXsSF3tpVUdTtqpXoPhvWX 1aKVLhVEseM4HBBrmfFVlHZ6pmIBUlXdgdj3pSglHmRdDFylVdGpGzMSpoLWe5OIYXk/3RV3 QdN/tPUVibIjUbnx6V0fiS/Oj28Fnp4WFnGSVHIFKMLrmexpVxLjUVGCvJ/cjk5dOvIU3SW0 qr67aq11Ph7X7h7xbW9fzY5eAzdQal8V6LHFEb62Tbg/vFA4+tHInHmiQsVKFVUqytfZrY5J UZzhFLH0AzViOwu5QSlvIQBk/LTLW7ms5fNt3KPjGcdq9L06Y3ukwSSYzLGN2Pcc0U4KYYzF Tw6TSumeaQWs9wxEMLyEddopbi0uLbHnwvHn+8K35/ERsLg2+mwxJBGcEkZL11CiDWtJQyJl Jkz9DVRpqWieplVxtSlaU4e6/PU82gtprltsETSH/ZFPuLK5tgDPA8YPcit251saRMbLTIow kJ2vIwyXPeuos5Yta0hXkQFZVwy9cGiNNPS+o62NqUrTcPdfnqeZVNAtwrrLAsgZTkMgPFF5 D9mu5YT/AAMRWz4W1G4j1K3tN+YHJBUjpwazitbM7KtRqm5xV9LlLUZNUnhSW+84xA4UvwM1 m13fjX/kER/9dR/I1w0a75UT+8QKqpG0rGWDre1pc1rb7Elvaz3JIgheTH90U+bT7yAZltpV Hrtrs9ZSbSdBRNOXZtIEjKOQPX86y9C8QhIbiLU5yyEZQkZPuKbgk7NmMcXVqQdSnFNX26nL gEnABJ9K63wnpR8ua6uYvlZdqBh+tc5Z3f2O+FwiLJtJIVulekabdNd6XDcsoVnTdtHQU6MU 3cjMq04Q5UtH1PM54ZFmkPlsFDH+H3qGug1HxJNcQz232eJQ2V3DriufrOSSeh30ZTlH31b5 3CrsA/crVKr8H+pX6V04P436HhcR/wC7x/xfox+KMUoGaMc16R8UJjAowacQKTFAAR7UhB9K dita802OKws5YQ7SzdRnPbtSbSKjByTa6GNjFAq2bKcIzmCTav3jtOBUMcZkcIilmPQAcmi4 mmiPbSFfSrclpPHFveGRUH8RU4pEtJ3UFIJGBGQQp5ouPlfYq49qdtz2qx9iuPKMvkSeXjO7 acVYgit20ud3SUzK2FYD5RSuNQbM/b7UFTmrX2K48rzPIk2dd204pIrSeZS0UUjqOpUZp3Fy vsVgtIV96lK4zntUi2k8kZkSKRox1YLxRcSTexW28UYrc0fTY54JrieKSRUHyqv8VVrCC2uN VMEyukbsQozgg9gaXMjT2UrJ9zNxR71uw6PEkl61zuEUHCkHr/niss2k5jMqwyGLqG28YoUk xSpSjuV+1A/MVrTWKf2NaSxRkzyvtOOc9abqmlPZTIkQeRGA+bb39KOZA6Ukr+n4mTzml7Va NpNDIn2iGRULAHK4zU9/ap9rZbOGXYFBIZTkUXQuR2uZ1BqaW1niQPJE6K3QkYBqLHrTJaa3 G4pcUu2g0xARTe9PxxSYoAbRilopAFFFFAAKKMc5zS0wDFAFJSjmgBaWjFKBQAlJjilxzR2o EKBxzSGnD5hkUm33oAbijFOwKTAoGNoxTsUYoAdbj5z9KnxUUA+c/Sp8UjaGwmKMUZFLj3pF CbeaMc0UU7gLjNQXg/0SQ+1FFRU+BnRhF+/h6r80YtFFFeMfo5q+Gf8AkYLT/eP/AKCa6zxe zJojFWKnzF5BxRRXRD+GzxsX/vlP5fmzirHUJ7S7imEshCsCRu6j0pNUukvdRnuIwyrI2QG6 9KKKwu7WPW9nFS50tdjqPAyj7PdP/EXA/Ssrxif+J43/AFzWiitpfwkeVS/3+fp/kYNaXh9Q 2uWgPI3/ANDRRWUd0enX/hS9H+R1vjEH+wz/ANdFrgKKK0rfEcWV/wAD5s9D8JSF9BiBOdjM v65/rXGa8gj1q7VenmE0UVVT4EY4PTF1V/W50Xgb/UXf+8P5VleMP+Q43+4v9aKKUv4SHS/3 +fp/kW/A/wDx+XP+4P503xv/AMhCD/rn/Wiij/l0C/5GHy/Qs+BVH+lt3+UVT8bf8hiL/rgv /oTUUUP+EKH/ACMJen6IwLdilzEw6hwf1r0vU1E2jXAbo0RP6UUUUdmGZ/HTfn+qPMK9L0L/ AJANr/1yFFFFDdlZt/Dj6/oebzf6+T/eP869F8Nf8gC2/wB0/wA6KKKPxMM0/gx9f0PPr3/j +uP+ujfzruvCH/ICj/3m/nRRSo/GPMv92Xy/I4vWf+Qvdf8AXQ1P4b/5D1p/vH+RooqF8fzO yX+7P/D+h0/jX/kER/8AXUfyNcKrFHDDqDkUUVVb4jnyz/d/mz0rRdTi1WxDY+dRtkUjjNY2 v+GYjFJdWIEbKNzR9iPUelFFbpc8NTyZSlhsS1Sdlc42vStB/wCRetf+uX+NFFZUN2ejmv8A Dj6/oecz/wDHxJ/vH+dR0UVgerHZBWjb/wCoT6UUV14T42fPcR/7vH/F+jJRyaUrz3oor0D4 oCMijjpRRTAAAea6huIdH/3h/Kiis5nTh3o/l+aJbe4lk1m9gdyYlQ4XsOlYWicavb49T/I0 UUlszSbblG/d/mbMM8txcapFMxeJAcA9qrT3E0Gg2QhcoXO0kelFFLqXJvlb9fzNGxQ29wLW W5kll8nJQgbAOlZVgduhXhxnEgOPXpRRQv8AIqWjt25v0LbSrqlvI1pcyxSInzREfLipTcW9 jZ2Jd5kXbuAjAwx75oootrYXO+T2nX/gnPalLFPfTSwgrGxzgjB9/wBa6N5Hg1Gwt4TtgZOV HeiiqkZUG25PzX5kKO0UOrLGzKsZyuD047VzQYiQSAncDnPvRRREiu9vn+Z02rXJe0slKgC5 ZS+O/Sprq+tbO8CSPP8Acx5agbMUUVKVzonUcbv0/Iz72QLoto8JKgTErjgjrVrUr/7HrMLy bmiEeSo7E55ooppXf3kSm4xbX90rX6GWCG6hupJbdpR8r9jmtBWK63c4P/LuDRRSZpHdPvb8 mZvny3Phq5edy7CUAE/hWDRRVx6nJWbai32/zExmjoKKKsw6Bik/GiigAwOtAweBxRRQAmMc YooooGHQc0fSiigBO5HcUo4oopiY7NPoopCBuMGkoooEC8d6KKKYARQB7UUUigwTSbaKKAJL dfnPPapxk9BkUUUmbU9hdvOOKSiikWz/2QplbmRzdHJlYW0KZW5kb2JqCjIzIDAgb2JqCjw8 L1N1YnR5cGUvSW1hZ2UKL0NvbG9yU3BhY2UvRGV2aWNlUkdCCi9XaWR0aCA3NjcKL0hlaWdo dCAzOQovQml0c1BlckNvbXBvbmVudCA4Ci9GaWx0ZXIvRENURGVjb2RlL0xlbmd0aCAzNzgy Pj5zdHJlYW0K/9j/7gAOQWRvYmUAZAAAAAAB/9sAQwAOCgsNCwkODQwNEA8OERYkFxYUFBYs ICEaJDQuNzYzLjIyOkFTRjo9Tj4yMkhiSU5WWF1eXThFZm1lWmxTW11Z/9sAQwEPEBAWExYq FxcqWTsyO1lZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZWVlZ WVlZ/8AAEQgAJwL/AwEiAAIRAQMRAf/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkK C//EALUQAAIBAwMCBAMFBQQEAAABfQECAwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHw JDNicoIJChYXGBkaJSYnKCkqNDU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3 eHl6g4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY 2drh4uPk5ebn6Onq8fLz9PX29/j5+v/EAB8BAAMBAQEBAQEBAQEAAAAAAAABAgMEBQYHCAkK C//EALURAAIBAgQEAwQHBQQEAAECdwABAgMRBAUhMQYSQVEHYXETIjKBCBRCkaGxwQkjM1Lw FWJy0QoWJDThJfEXGBkaJicoKSo1Njc4OTpDREVGR0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2 d3h5eoKDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW 19jZ2uLj5OXm5+jp6vLz9PX29/j5+v/aAAwDAQACEQMRAD8AaBRj2paM4Fdx4omKjnH7l/pU g6dajn/1LfSs6nwP0OnCfx6fqvzRQooorxD9ICiiigAooooAKKKKACiiigAooooAKKKKALdj p1zqBYW0e8r1q5/wjeqf8+5/OpNB1JNPtb5t4WZk/dg9zVF9X1B2y13Ln61fupanI5V5TkoW SXe5a/4RvVP+fc/nR/wjeqf8+5/Ou71R2TS7l0JVhGSCO1ef2utX8M6N9qcruGQxyCK0nCMX ZnLhsTiMRFyjbT1HR+H9QkkZBEAy9QWpNR0O7022We52AM20AHPatJ79bjxbbS20mUd0U46H 1rU8b/8AIKh/67D+RpckeVtdB/Wayq04St73kcNRS7TjODikrE9QKKKUKT0BNACUUEY60UAF FFFABRRRQAUUUUAFFFFABRRRQAUUUUAFWI/uCq9WolzGtdeE+N+h89xF/u8f8X6MO9GKfto2 16J8WMoNSbaaVpgMxUslzPLEkckjNGn3VJ4FNxSYpDuSC4nW3MAkYQsclM8E0+K/u4YvLiuJ ET+6G4qACkxQPmfcmgu57d2eKV0ZupB60NdzvOJmmcyjoxPIqLtSUBzPa5LNPLcSb5pGkfGM scmrH9q3/T7XNj/eqnRRZBzNdSWO6niZ2jldWcYYg9aQXEwgaASMIWOSmeCaixRQK77ky3l0 IRCJ5BEOQu7intqN4+Q1zKwxjlu1VgKTFFkPml3JvtdwEjQTPtiOUGfun2oW9ukuGnWdxMww z55P+cVCcUnagOZ9xQSCGBII5zVqTULuWLy5LiVk/uluKq0tMLtbElvPNbOWhkaNiMEqccUL cTJA8KyMInOWUHg1HSc0BdlmG9uoI9kVxIif3Q3FMluriSIRPM7Rg52k8ZqLNBpaBzPa5N9t ujJG5uJN0Qwh3fdHtUU8stxKZJpGdz1Zjk03FNK0BzN9Tb1XWmmEC2c0sarHtcDjJrKFxMIG gEr+UxyyZ4JqLGBijFCSRUqkpO7JRdTiFIhM/lo25VzwD60/7bc/aPP8+TziMb884qADtSEU E8z7k32qcwtCZW8tjuZc8E+tSRahdQx+XHcSLH/dDcVWB5pe/FFkHM+47cwkDZO4HOamN5c/ aPP89/NxjfnnFQdqVaYrsnNzOYmiMr+Wx3MueCfWla8uWnWZp5DKgwrZ5FQUUg5n3JftdwVk XznxKcuM/e+tL9ruFSNBM+2M5QZ+79KgNL9KLBzMmnvbm5ULNPJIo6Bjmh7y5eJY2nkKJyoL cCoaQmlYOZ9yea9upo/LluJHT+6W4qKa5lmCCaRnEYwuT0FMyaaSfSnYd292GR6Un4UZI7Um Se1AC8+lJzSDJpwFAC4NGDRRjigCW3++ee1WBnFQW4+c8dqsY9qC1sFGKMUYoAbnjik79qdi kIqhBjmorkjyW+lSkVHPxA/0qKnwP0OnCfx4eq/NGdRRRXiH6QFFFFABRRRQAUUUUAFFFFAB RRRQAUUUUAFFFFAHqOr/APIIuv8Arma8ur1HV/8AkEXX/XM15dW9fdHkZR8EvX9C9ov/ACGr L/rsv867rxCbNLFZr5TJHE4ZYwcb2wcCuF0X/kNWX/XZf511fjf/AJBUP/XYfyNFN2gwxkeb FUo3F0LWbXU5mtGsYocLlQACCPTpWF4r02Kwv0aBdkcoztHQGm+Ev+Q5H/umtTxz/wAuv40N 81O7CMVQxqhDZoyfDmjjVbpjKSLeLBfH8R7Crup61/Z9+9rp9vbpDCdpymSxHXNa/gxFXR2Y EEtKc/kKx7/VLCDULmOTSYndZGBZu5z1otywTva4vaOriZxlHmUen6mncWNrr2jC8hiWK52k 5UY5HUGuIIKkgjBHBrqIfFkVvF5UGnpGn91TgVzMr+ZM74xuYnHpmoqOLs0dWDhVhzRmrR6a 3GUUUVmdwUUUUAFFFFABRRRQAUUUUAFFFFABVyH/AFS1Tq3D/qlrrwnxs+d4i/3eP+L9GSUd KTNIDmvRPixTSZNO7U3GaADn1op8O0TIWAKhhkH0rqZtLtm1q22wILdoi7KBxxScrGtOk57H JZpK65NKtv8AhIMCFDbGHeFxx6Vm3+06MHjtIkiadtsgPJGTx/n0pKVy5UHFNtmHRn1rsjbw /wBu2q+Wm02xOMcZrkrhc3UgH98gfnQpXJqUuQjo7V2MulWg0l4Fhj+1rAHLbfmz1/pVTQLE Jpk12Y4JJSfk8w8Ae/pS51a5f1aXMkcyenNJitZtGvJENzsiWNsvndgYqXUraa4NhFFZpG7x 8bD97pyafMiPZSs7mJSVpXWjXdqE8zyzvcINrZwafNoN7FC0pEbBBlgrZIp8yF7OfYyiDRjj mpIY3mkWOMFmY4AHetGbQryFAzCMjcFO1s7SfWhtIlRk1dIygKdjir/9j3YvxZ4XzSu7rxin w6Jdzl9oQBG27mbAJ9qOZD9nN9DMwe1ABrQi0m7muZbdUHmxDLAntUN7ZS2MoimKhyN2FOcU XQnCSV2irSVqwaFfXECSoqBXHyhmwTUcWjXctxLCFUGLh2Jwo/GjmRXs59jOFBra0/RJP7YS 3u1XYF3EbuGHt+NU9XshZX8kY27SSVCtnAzxmjmV7A6clHmZQpQBXSQWX2yDTY3tYUQnJfdg uKztcsFsb9lQKI25RQckDHekpXdipUnGPN0Mz+tB4rSGiXn2cXBCCLZ5mS3brVjWLeWe8tYU tEhd0AAQ53e9HMhezla7MQClWtSfw/fQRPK4jKxrliG6Vp32kyXlnpv2WONf3WXJO3JIH/16 OZDVGbvoc11oHGa6DStD3/bFukXfGNqgtjDev0osBAjC0/sxbmVTiSQHIo5kCovS+lzn6UVo 65aw2mpPFbn5MA4z0PpWf2qk7q5lKPK2mIaTHFOpQvFAhmKdilx0p2KBEWDRj3qQjik280x3 I9maAgxUmKTGaQXGbaXbTsYooC4m3FGKXBpDmgCW3++fpU+Khtwdx+lWCKDSOwgHNFHNHNAy PmkooqhC8VHc/wCof6UUVFT4H6HThP49P1X5ozaKKK8Q/SAooooAKKKKACiiigAooooAKKKK ACiiigAp0cbSyLGgyzHAoooQpOybPUNUQvpdyq9TGf5V5aRg4NFFdFfdHj5Q/dmjQ0FC+t2Y XtKp/I11XjYE6VEfSYfyNFFKH8Nl4l/7ZS/ruYHhFSdcTHZTWr45B22rdskUUUL+ExVX/t8f T/Mb4Kv1XzbJurHeh/n/AEqHxZpEi3hvYQDHL94Zxg0UU4rmp6mdWTo41OH2tzM07RpLlHmn byreMZZhyfyrLbAY7TkZ4NFFZSSSR6OHqyqTnzdBKKKKg6gooooAKKKKACiiigAooooAKKKK ACrcP+qWiiuvCfG/Q+d4j/3eP+L9GSfhRjmiivRPiw60lFFAwzzXaJOP+EfF4fvrDtooqJ9D pwztzegW04GgfbP+WiQMn+fyFY1x/wAifaf9dj/NqKKmO/zNqj93/t3/ACNk/wDIwWv/AF7G ubsrf7RrixnoZSTn0zRRRHb5CqK8kn3/AMjp4720bxA8QWTzyvlEk/Lgc9KzFhNto2rw54SX A+nFFFK1vwLb5k2+l/yINUdh4f00BiMjnB68VtWzKt5p4bq1qQv1+Wiih7feKD9//wABMCPS bltQjW7YiJ5ipIfPPJ/pW5BEkIv447fy1RCu8vktRRSbuXCmo3t/Whznh1lTWYC3TkD64rdv ZJ4Ib8JZRojA7nD8n0OPxooqp/EZUNab/roWVkRrMaqR+8Fvt/Gq9q5l0S2dLdZ2VvmDNjB9 aKKnobJ3kl3X+QtnLLLr1w0sYif7PggHPeuScszZckk9yc0UVcDlr7L1Z180E02o6ZNCf3Co MjOP0p6EPFqKLCszCbJRjgEcd6KKzOy1mvP/ACKpmmfWtME0CwhQwUK2cjH/ANasPW7eSHU5 zIP9Y5Zee2aKKuL1Oasvcd+j/Q2V4s9E7YcVl+I4JItVkd+EkOV59AKKKI7hVV6b8rfkWdbZ ho+lKGIBi5GevArVcga/Ylu8GB9aKKT2+8pP3n/26Vktri303WDcHIbJX5s8c1Ffsw/sAKxA wuef92iihO/9eRVRcui8v/Si8is+s6qi9WiUD8qzNLhvILPUFjChlGCd3IPtRRSv+g+W7T9T CYlmLMSWPc0Yoorc8wMUUUUALjNLRRQITiiiimMKTFFFIAoxRRTAXFIRRRSAlt/vn6VPzRRQ aR2DBoxRRQWf/9kKZW5kc3RyZWFtCmVuZG9iago1MSAwIG9iago8PC9SNDkKNDkgMCBSL1I3 CjcgMCBSL1I4CjggMCBSL1I0OAo0OCAwIFI+PgplbmRvYmoKNTYgMCBvYmoKPDwvUjU1CjU1 IDAgUi9SNwo3IDAgUi9SMTQKMTQgMCBSL1I4CjggMCBSPj4KZW5kb2JqCjYyIDAgb2JqCjw8 L1I1NQo1NSAwIFIvUjcKNyAwIFIvUjYwCjYwIDAgUi9SOAo4IDAgUj4+CmVuZG9iago2NiAw IG9iago8PC9SNwo3IDAgUi9SMTQKMTQgMCBSL1I4CjggMCBSPj4KZW5kb2JqCjcwIDAgb2Jq Cjw8L1I1NQo1NSAwIFIvUjcKNyAwIFIvUjYwCjYwIDAgUi9SOAo4IDAgUj4+CmVuZG9iago3 NCAwIG9iago8PC9SNTUKNTUgMCBSL1I3CjcgMCBSL1I2MAo2MCAwIFIvUjE0CjE0IDAgUi9S OAo4IDAgUj4+CmVuZG9iago3OCAwIG9iago8PC9SNTUKNTUgMCBSL1I3CjcgMCBSL1I2MAo2 MCAwIFIvUjE0CjE0IDAgUi9SOAo4IDAgUj4+CmVuZG9iago4MiAwIG9iago8PC9SNTUKNTUg MCBSL1I3CjcgMCBSL1I2MAo2MCAwIFIvUjE0CjE0IDAgUi9SOAo4IDAgUj4+CmVuZG9iago4 NiAwIG9iago8PC9SNTUKNTUgMCBSL1I3CjcgMCBSL1IxNAoxNCAwIFIvUjgKOCAwIFI+Pgpl bmRvYmoKOTAgMCBvYmoKPDwvUjU1CjU1IDAgUi9SNwo3IDAgUi9SNjAKNjAgMCBSL1IxNAox NCAwIFIvUjgKOCAwIFI+PgplbmRvYmoKOTQgMCBvYmoKPDwvUjcKNyAwIFIvUjE0CjE0IDAg Ui9SOAo4IDAgUj4+CmVuZG9iago5OCAwIG9iago8PC9SNTUKNTUgMCBSL1I3CjcgMCBSL1I4 CjggMCBSPj4KZW5kb2JqCjQ5IDAgb2JqCjw8L0Jhc2VGb250L0hlbHZldGljYS1PYmxpcXVl L1R5cGUvRm9udAovU3VidHlwZS9UeXBlMT4+CmVuZG9iago1NSAwIG9iago8PC9CYXNlRm9u dC9UaW1lcy1JdGFsaWMvVHlwZS9Gb250Ci9TdWJ0eXBlL1R5cGUxPj4KZW5kb2JqCjcgMCBv YmoKPDwvQmFzZUZvbnQvVGltZXMtQm9sZC9UeXBlL0ZvbnQKL1N1YnR5cGUvVHlwZTE+Pgpl bmRvYmoKNjAgMCBvYmoKPDwvQmFzZUZvbnQvS1BTSEJPK1dpbmdkaW5ncy9Gb250RGVzY3Jp cHRvciA2MSAwIFIvVHlwZS9Gb250Ci9GaXJzdENoYXIgMS9MYXN0Q2hhciAxL1dpZHRoc1sg NDU4XQovU3VidHlwZS9UcnVlVHlwZT4+CmVuZG9iagoxNCAwIG9iago8PC9CYXNlRm9udC9T eW1ib2wvVHlwZS9Gb250Ci9TdWJ0eXBlL1R5cGUxPj4KZW5kb2JqCjggMCBvYmoKPDwvQmFz ZUZvbnQvVGltZXMtUm9tYW4vVHlwZS9Gb250Ci9FbmNvZGluZyAxMDAgMCBSL1N1YnR5cGUv VHlwZTE+PgplbmRvYmoKMTAwIDAgb2JqCjw8L1R5cGUvRW5jb2RpbmcvRGlmZmVyZW5jZXNb CjEzMy9lbGxpcHNpcwoxNDYvcXVvdGVyaWdodAoyMzMvZWFjdXRlXT4+CmVuZG9iago0OCAw IG9iago8PC9CYXNlRm9udC9IZWx2ZXRpY2EtQm9sZC9UeXBlL0ZvbnQKL1N1YnR5cGUvVHlw ZTE+PgplbmRvYmoKOSAwIG9iago8PC9CYXNlRm9udC9IZWx2ZXRpY2EvVHlwZS9Gb250Ci9F bmNvZGluZyAxMDEgMCBSL1N1YnR5cGUvVHlwZTE+PgplbmRvYmoKMTAxIDAgb2JqCjw8L1R5 cGUvRW5jb2RpbmcvRGlmZmVyZW5jZXNbCjIzMy9lYWN1dGVdPj4KZW5kb2JqCjYxIDAgb2Jq Cjw8L1R5cGUvRm9udERlc2NyaXB0b3IvRm9udE5hbWUvS1BTSEJPK1dpbmdkaW5ncy9Gb250 QkJveFs2MiAwIDQzNyA3MjJdL0ZsYWdzIDQKL0FzY2VudCA3MjIKL0NhcEhlaWdodCA3MjIK L0Rlc2NlbnQgMAovSXRhbGljQW5nbGUgMAovU3RlbVYgNjUKL01pc3NpbmdXaWR0aCA1MDAK L0ZvbnRGaWxlMiA5OSAwIFI+PgplbmRvYmoKOTkgMCBvYmoKPDwvRmlsdGVyL0ZsYXRlRGVj b2RlCi9MZW5ndGgxIDUyMjgvTGVuZ3RoIDI1NDE+PnN0cmVhbQp4nO1XfXBU1RU/9973tZsN 2WyWkGZV3vJMRJIlBMSED8OS7K5JdqwJCbKLWnbzgYkEicBkiFJmLVBxE5xtoc5oVYKKBiT6 lqAGhnYQBTNjO9YZ7Uih2nbiaK1xdCrS6Qyk576bpMS2Tmf6T53xnf3d373nnHfuPfdj33tA ACATEsCg7taGkvlgXdmHsbiteX28U7SdjQBkaXPXZv2FkoMHUXEeQF68tvOu9a9/ucQEUPIA pDV3dXSvFf7TnFhsbWuNt5wlb3wM4L4B2ze2ocKVY38YwL4F29e2rd+8Rfi7JADq7NjQHB+/ vxf7O7M+vqWT3abMQf/HUanfE1/fOj6+FBaezg2bNou2283tnRtbO29947o16H8CgDXC/9v1 9n+0lKI0kwh9gK7G2s+hCcvHEC2IR2Ev7KWDwgcWIEys1cJH8jDMh42WfgFsxTIAfyP98GNL sxSa0N6E3qeRK9DWjEysGHtJr8U/hB0Y+ws6SE/RU5Z1Gcat5R5C6KA8jHoebzu8AO+Tk+hz P+xB2zF4m9+FkffCAFwks1F6yIdklNahlvD+Mc469N6L4/0lnIW/EjepIElyAn1c9AFrLKK3 BPqcRnnbisLlFtJBNpCN5CGMOUIZXYhRN9BdtI+a9BSLShXysOJSytQOjEKA4u7Nxgx5tO9D A/bcBPdORhXyG0JJPWkkbeQR0odjOE1GUb6kProMZ53Lz1hMckgfy+vkp1CGlZXqE5qCsWVQ IB90KIAbMKsg9lGPY26Bu+E+S+5H2Ypz+SPYB32wHw5CGo7Dq7xPOAfvw0WcnSwUnlcZWURW oURRNpJtZAfOR88Vsps8TgbJcRzfm+RdOhOzFtKB2YtRbqeP0aP0Tfor+gEdoZ/QLxgwG1vD mtgmdoAdYm+xt6RqqU/aL52XzstENq2Zcilu5U6lB6VXtanr1B3qT9Qn1Jftc2EG5lWMedXC KsyqGzPZCrsgaa1aGuUovIQyDJ/wPFDGxjPhsogESIisRImS1SRG1pNNZMtkRs+QZ0k/OYq5 vIvyHjlH/kj+Qj6z5CJVaC4tmsyvjjbQVXQdfYQ+Sh+nz+OOHKQn6Hv0fcxxhF7AHDOYi01n 17AgC6E0stvZFradDbBT7BwbxXVzSDdJFdJK6U7M/Yw0In2MK0llJhfIC+XFKG3yPfI2uUd+ Enf0qDyqOKxZcSk5yhLlQWWfMqicVS6p09VcdRbKXLVUbVA71C71kDqifqQdti23tds22ovh EMyDV752el/C3f0avVMpgXxyDnfDvSwLvXR+9qhD7bC100E+OrWBzMaV+j1cZDYIS2dgFbsd OuQmlqF+Cv1kk/QAeZ6F4DAcULvICRZjo+yAXKAsEfNJH2OH1G41pn6EI/2S7ZHb1LlkudxD +ukyPNEbST18RS7AD7DnzXQOnIGHYBfpAg32aodJJp6103Qm6ZGfYkekPhaUt5HrcQU98jDb CQthOjhgNszCvS6DGwH+svKyGxbML51XMtdXXDTn+tnXFRZca8zy6jOvufoqT/738mbkTnfn uLKdWdMyHRl2m6YqssQogeKgEYrpZmHMlAqN6mofbxtxVMSvUMRMHVWhqT6mHrPc9KmefvRc +zVPv/D0T3oSp74UlvqK9aChm78OGPoQWV0fwfrugBHVzVGrfotVlwqtRiY2vF68Qw/mtQV0 k8T0oBnqaksGYwGMl86wVxlVrXZfMaTtGVjNwJoZMjrTJFRBrAoNBRenKWiZOCqz1ggEzRoj wIdgsoJgvMWsq48EAx6vN+orNklVs9FkglFpZhVZLlBldWMqVaZqdaO383SgR08Xn0z2Djmh KVbkaDFa4ndETBaP8j6yi8ybjYB5830jeb7iIfJsY8S0VQ0RaIwcg9qxRLomEQhEeW+uqsiD lvsMdJ9x34iHJYN57TpvJpMP6mZffeRKq5eX0SgG9RWHV0S8OGoj2KvzNFZErAwwKMkrwUFy HU9TJNxqBLkmdrdu2oxKoy15dwwXKz9pwopu75H8Wv+xsT9AbVBPNkYMr7nMY0TjgavSbkiu 6B6s8es1Uy2+4rQzW8x0elrWeMWReWWlddJm1Sx3XsNRT0w14SMyanCLmHqzjiOJGCYtKOdF azkkm8vRDa8owRltx/mLJZ2L+ULIBU5DT14A3AjG6KdTNfFxjVLgvAC8yrfL5JZD+0TdLCoy 58zhO0WtwqXFkVVY7YW+4i4zbHQ6dTOMUwZ1EbwpurgEp9zr5avcM+SHJmyYifqIaOvQ5DkC /pKiqElj3HJywjJ9JbckJiyTt8cM3M5Hgb/QTTe1wslfljM3J9i22CS532BuFXY8PkE9LckF ybpIYTzZ4ymMJXujuDQhPIrJZMjQQ8lYMj40lmgydKeRTIfDyc5gbCKlobGTPR7T3xttIzip 5gIxG2ZOVYR5aFTUqIdFfcDHoZZergPIwHe9sbfsH1gju/LaYWn+RBxQArthGj6JnVhbhLd+ OjbGn/t+B4RC6OLK1vzV+hC98Uj1fKTtFpHDgp4XdFBQv6DnBD0taL+gfYJqBFULullQpSC/ oApBSwUtEqQIkgQxQcR/K/J5xDnE7xC/RbyGeBnxEuJFxADiMKIf8RxiH+JJxBOIXsR2RDNi jRXzRRF6QNAhQc8KOiDoGUFPCgoIWi7oJkHlglRBsiAqCPx+5LOIdxHDiDcQZxCnEa8gjiIG ES8g+hA/RXQjWqrnu21uW1lqiHT5a9TUfjW1R03tVlMb1FSHmlqrplrV1B1qarWaiqqpiHqt NkvTtWu0q7R8LU/L1dyaS3Nq0zSHZtc0TdEkjWr4CDNzWJiGGypJ2DzZDOEm3fyqwRgi9vrV pmxUEtMVhnBjZZ5ZXmTSXdY/4hAZSxPy8E4P/zM8BoSM7dztGedoFHKL/vXKm9IK13WfgJmk DFQsFwyqM19XubYBtSlLm+LalKXNI0fqYH443hO7Gv5N4H9e5ButUzyD7Tzdukhag8po1R2C B2mGHfOJebzRylxnZ4WV3BJv3jbPcQnw1T8D/xMc+JDJRHCTb7lvOTfh5xU3TePPn3FT3rYl Xs9x0j9ucqI6G6cST1kCv50S+NbPMEnDn6W+Q6R3yNP4gTcG8hg7Rj4EKLk86hyFZZ9hWTpv QbY3u8Cb7U0wuJSgcBnk4b+XJ6RhfsYHyAl6SXJgLPcvgNAyPK2MNGOAUfyVzsvBWwdoHTrV XTL5mS/8TlAqvtXCLzr+b+7GlceL5CMUrGz/H7+gv+2XhO/YvJT4/HxO8Dk2XmIbT6I1PwRc OH8UawrYAFa133NXC2KT9cwkKXw71/7L3r7m9zl8PjZFQSYGBYnv8B042EEYEGf2Gy6+b/Ab MW2+eHxN1tILmkdstAMDey5zfrXyz20Al+vsH6il2HRM7LN/AI06FeUKZW5kc3RyZWFtCmVu ZG9iagoxMDIgMCBvYmoKPDwvVHlwZS9NZXRhZGF0YQovU3VidHlwZS9YTUwvTGVuZ3RoIDE2 MjM+PnN0cmVhbQo8P3hwYWNrZXQgYmVnaW49J++7vycgaWQ9J1c1TTBNcENlaGlIenJlU3pO VGN6a2M5ZCc/Pgo8P2Fkb2JlLXhhcC1maWx0ZXJzIGVzYz0iQ1JMRiI/Pgo8eDp4bXBtZXRh IHhtbG5zOng9J2Fkb2JlOm5zOm1ldGEvJyB4OnhtcHRrPSdYTVAgdG9vbGtpdCAyLjkuMS0x MywgZnJhbWV3b3JrIDEuNic+CjxyZGY6UkRGIHhtbG5zOnJkZj0naHR0cDovL3d3dy53My5v cmcvMTk5OS8wMi8yMi1yZGYtc3ludGF4LW5zIycgeG1sbnM6aVg9J2h0dHA6Ly9ucy5hZG9i ZS5jb20vaVgvMS4wLyc+CjxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSd1dWlkOmFkZDQy N2YzLTgxN2EtMTFlMS0wMDAwLWI4YzNhMGI1MGZiYScgeG1sbnM6cGRmPSdodHRwOi8vbnMu YWRvYmUuY29tL3BkZi8xLjMvJz48cGRmOlByb2R1Y2VyPkdQTCBHaG9zdHNjcmlwdCA5LjA1 PC9wZGY6UHJvZHVjZXI+CjxwZGY6S2V5d29yZHM+KCk8L3BkZjpLZXl3b3Jkcz4KPC9yZGY6 RGVzY3JpcHRpb24+CjxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSd1dWlkOmFkZDQyN2Yz LTgxN2EtMTFlMS0wMDAwLWI4YzNhMGI1MGZiYScgeG1sbnM6eG1wPSdodHRwOi8vbnMuYWRv YmUuY29tL3hhcC8xLjAvJz48eG1wOk1vZGlmeURhdGU+MjAxMi0wNC0wNVQwODo1OTowNi0w NDowMDwveG1wOk1vZGlmeURhdGU+Cjx4bXA6Q3JlYXRlRGF0ZT4yMDEyLTA0LTA1VDA4OjU5 OjA2LTA0OjAwPC94bXA6Q3JlYXRlRGF0ZT4KPHhtcDpDcmVhdG9yVG9vbD5QREZDcmVhdG9y IFZlcnNpb24gMS4zLjE8L3htcDpDcmVhdG9yVG9vbD48L3JkZjpEZXNjcmlwdGlvbj4KPHJk ZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9J3V1aWQ6YWRkNDI3ZjMtODE3YS0xMWUxLTAwMDAt YjhjM2EwYjUwZmJhJyB4bWxuczp4YXBNTT0naHR0cDovL25zLmFkb2JlLmNvbS94YXAvMS4w L21tLycgeGFwTU06RG9jdW1lbnRJRD0ndXVpZDphZGQ0MjdmMy04MTdhLTExZTEtMDAwMC1i OGMzYTBiNTBmYmEnLz4KPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9J3V1aWQ6YWRkNDI3 ZjMtODE3YS0xMWUxLTAwMDAtYjhjM2EwYjUwZmJhJyB4bWxuczpkYz0naHR0cDovL3B1cmwu b3JnL2RjL2VsZW1lbnRzLzEuMS8nIGRjOmZvcm1hdD0nYXBwbGljYXRpb24vcGRmJz48ZGM6 dGl0bGU+PHJkZjpBbHQ+PHJkZjpsaSB4bWw6bGFuZz0neC1kZWZhdWx0Jz5FQ0MgQ29uc2lk ZXJhdGlvbnMgLSBQcmVzZW50YXRpb24gSVJURi04MyAtIHYyIChSZW5lIFN0cnVpaywgTWFy Y2ggMzAsIDIwMTIpPC9yZGY6bGk+PC9yZGY6QWx0PjwvZGM6dGl0bGU+PGRjOmNyZWF0b3I+ PHJkZjpTZXE+PHJkZjpsaT5zdHJ1aWNoaW5pPC9yZGY6bGk+PC9yZGY6U2VxPjwvZGM6Y3Jl YXRvcj48ZGM6ZGVzY3JpcHRpb24+PHJkZjpTZXE+PHJkZjpsaT4oKTwvcmRmOmxpPjwvcmRm OlNlcT48L2RjOmRlc2NyaXB0aW9uPjwvcmRmOkRlc2NyaXB0aW9uPgo8L3JkZjpSREY+Cjwv eDp4bXBtZXRhPgogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCjw/eHBh Y2tldCBlbmQ9J3cnPz4KZW5kc3RyZWFtCmVuZG9iagoyIDAgb2JqCjw8L1Byb2R1Y2VyKEdQ TCBHaG9zdHNjcmlwdCA5LjA1KQovQ3JlYXRpb25EYXRlKEQ6MjAxMjA0MDUwODU5MDYtMDQn MDAnKQovTW9kRGF0ZShEOjIwMTIwNDA1MDg1OTA2LTA0JzAwJykKL1RpdGxlKFwzNzZcMzc3 XDAwMEVcMDAwQ1wwMDBDXDAwMCBcMDAwQ1wwMDBvXDAwMG5cMDAwc1wwMDBpXDAwMGRcMDAw ZVwwMDByXDAwMGFcMDAwdFwwMDBpXDAwMG9cMDAwblwwMDBzXDAwMCBcMDAwLVwwMDAgXDAw MFBcMDAwclwwMDBlXDAwMHNcMDAwZVwwMDBuXDAwMHRcMDAwYVwwMDB0XDAwMGlcMDAwb1ww MDBuXDAwMCBcMDAwSVwwMDBSXDAwMFRcMDAwRlwwMDAtXDAwMDhcMDAwM1wwMDAgXDAwMC1c MDAwIFwwMDB2XDAwMDJcMDAwIFwwMDBcKFwwMDBSXDAwMGVcMDAwblwwMDBlXDAwMCBcMDAw U1wwMDB0XDAwMHJcMDAwdVwwMDBpXDAwMGtcMDAwLFwwMDAgXDAwME1cMDAwYVwwMDByXDAw MGNcMDAwaFwwMDAgXDAwMDNcMDAwMFwwMDAsXDAwMCBcMDAwMlwwMDAwXDAwMDFcMDAwMlww MDBcKSkKL0NyZWF0b3IoXDM3NlwzNzdcMDAwUFwwMDBEXDAwMEZcMDAwQ1wwMDByXDAwMGVc MDAwYVwwMDB0XDAwMG9cMDAwclwwMDAgXDAwMFZcMDAwZVwwMDByXDAwMHNcMDAwaVwwMDBv XDAwMG5cMDAwIFwwMDAxXDAwMC5cMDAwM1wwMDAuXDAwMDEpCi9BdXRob3IoXDM3NlwzNzdc MDAwc1wwMDB0XDAwMHJcMDAwdVwwMDBpXDAwMGNcMDAwaFwwMDBpXDAwMG5cMDAwaSkKL0tl eXdvcmRzKCkKL1N1YmplY3QoKT4+ZW5kb2JqCnhyZWYKMCAxMDMKMDAwMDAwMDAwMCA2NTUz NSBmIAowMDAwMDc2MTk4IDAwMDAwIG4gCjAwMDAyMDUzOTQgMDAwMDAgbiAKMDAwMDA3NjA0 MCAwMDAwMCBuIAowMDAwMDczODQzIDAwMDAwIG4gCjAwMDAwMDAwMTUgMDAwMDAgbiAKMDAw MDAwMDc5MCAwMDAwMCBuIAowMDAwMjAwMjI3IDAwMDAwIG4gCjAwMDAyMDA0ODggMDAwMDAg biAKMDAwMDIwMDczMCAwMDAwMCBuIAowMDAwMDc2MjY0IDAwMDAwIG4gCjAwMDAwNzM5ODYg MDAwMDAgbiAKMDAwMDAwMDgwOSAwMDAwMCBuIAowMDAwMDAyMjYzIDAwMDAwIG4gCjAwMDAy MDA0MjYgMDAwMDAgbiAKMDAwMDA3NjMxMiAwMDAwMCBuIAowMDAwMDc0MTMxIDAwMDAwIG4g CjAwMDAwMDIyODQgMDAwMDAgbiAKMDAwMDAwMzExMyAwMDAwMCBuIAowMDAwMDc2MzYyIDAw MDAwIG4gCjAwMDAwNzQyNzYgMDAwMDAgbiAKMDAwMDAwMzEzMyAwMDAwMCBuIAowMDAwMDA0 Mjg2IDAwMDAwIG4gCjAwMDAxOTU0MTUgMDAwMDAgbiAKMDAwMDE5MDcwMCAwMDAwMCBuIAow MDAwMTg2NTQ4IDAwMDAwIG4gCjAwMDAxODI4NTMgMDAwMDAgbiAKMDAwMDE4MDEwNyAwMDAw MCBuIAowMDAwMTc1OTg0IDAwMDAwIG4gCjAwMDAxMzkyOTEgMDAwMDAgbiAKMDAwMDEzMzc1 OCAwMDAwMCBuIAowMDAwMTMyMTE4IDAwMDAwIG4gCjAwMDAxMzAxMjkgMDAwMDAgbiAKMDAw MDEyNzg2MiAwMDAwMCBuIAowMDAwMTI1NTE1IDAwMDAwIG4gCjAwMDAxMjIxNTggMDAwMDAg biAKMDAwMDExNzMwNiAwMDAwMCBuIAowMDAwMTExNTI4IDAwMDAwIG4gCjAwMDAxMDY0MTgg MDAwMDAgbiAKMDAwMDEwMjU5OSAwMDAwMCBuIAowMDAwMDk4MTQ0IDAwMDAwIG4gCjAwMDAw OTQxNDcgMDAwMDAgbiAKMDAwMDA5MDkwOCAwMDAwMCBuIAowMDAwMDg3NTQ4IDAwMDAwIG4g CjAwMDAwODM3MzEgMDAwMDAgbiAKMDAwMDA4MDg4MSAwMDAwMCBuIAowMDAwMDc4NjE1IDAw MDAwIG4gCjAwMDAwNzY3MDggMDAwMDAgbiAKMDAwMDIwMDY2MCAwMDAwMCBuIAowMDAwMjAw MDg2IDAwMDAwIG4gCjAwMDAwNzY0MTIgMDAwMDAgbiAKMDAwMDE5OTM0MyAwMDAwMCBuIAow MDAwMDc0NDQ1IDAwMDAwIG4gCjAwMDAwMDQzMDcgMDAwMDAgbiAKMDAwMDA1NTEwNSAwMDAw MCBuIAowMDAwMjAwMTU5IDAwMDAwIG4gCjAwMDAxOTk0MDQgMDAwMDAgbiAKMDAwMDA3NDU5 MCAwMDAwMCBuIAowMDAwMDU1MTI3IDAwMDAwIG4gCjAwMDAwNTczMTIgMDAwMDAgbiAKMDAw MDIwMDI5MiAwMDAwMCBuIAowMDAwMjAwODcyIDAwMDAwIG4gCjAwMDAxOTk0NjUgMDAwMDAg biAKMDAwMDA3NDczNSAwMDAwMCBuIAowMDAwMDU3MzMzIDAwMDAwIG4gCjAwMDAwNTgxNzAg MDAwMDAgbiAKMDAwMDE5OTUyNiAwMDAwMCBuIAowMDAwMDc0ODgwIDAwMDAwIG4gCjAwMDAw NTgxOTAgMDAwMDAgbiAKMDAwMDA1OTY1MSAwMDAwMCBuIAowMDAwMTk5NTc2IDAwMDAwIG4g CjAwMDAwNzUwMjUgMDAwMDAgbiAKMDAwMDA1OTY3MiAwMDAwMCBuIAowMDAwMDYxNjc1IDAw MDAwIG4gCjAwMDAxOTk2MzcgMDAwMDAgbiAKMDAwMDA3NTE3MCAwMDAwMCBuIAowMDAwMDYx Njk2IDAwMDAwIG4gCjAwMDAwNjQ4MzEgMDAwMDAgbiAKMDAwMDE5OTcwOSAwMDAwMCBuIAow MDAwMDc1MzE1IDAwMDAwIG4gCjAwMDAwNjQ4NTIgMDAwMDAgbiAKMDAwMDA2NjgzMyAwMDAw MCBuIAowMDAwMTk5NzgxIDAwMDAwIG4gCjAwMDAwNzU0NjAgMDAwMDAgbiAKMDAwMDA2Njg1 NCAwMDAwMCBuIAowMDAwMDY4NDk1IDAwMDAwIG4gCjAwMDAxOTk4NTMgMDAwMDAgbiAKMDAw MDA3NTYwNSAwMDAwMCBuIAowMDAwMDY4NTE2IDAwMDAwIG4gCjAwMDAwNzEwMzcgMDAwMDAg biAKMDAwMDE5OTkxNCAwMDAwMCBuIAowMDAwMDc1NzUwIDAwMDAwIG4gCjAwMDAwNzEwNTgg MDAwMDAgbiAKMDAwMDA3MTg0NyAwMDAwMCBuIAowMDAwMTk5OTg2IDAwMDAwIG4gCjAwMDAw NzU4OTUgMDAwMDAgbiAKMDAwMDA3MTg2NyAwMDAwMCBuIAowMDAwMDczODIyIDAwMDAwIG4g CjAwMDAyMDAwMzYgMDAwMDAgbiAKMDAwMDIwMTA2OSAwMDAwMCBuIAowMDAwMjAwNTcxIDAw MDAwIG4gCjAwMDAyMDA4MTEgMDAwMDAgbiAKMDAwMDIwMzY5MyAwMDAwMCBuIAp0cmFpbGVy Cjw8IC9TaXplIDEwMyAvUm9vdCAxIDAgUiAvSW5mbyAyIDAgUgovSUQgWzxFOTYyNERBRTNC MTg3QkQ2QzhBMTQxMTRDRTA3M0U5NT48RTk2MjREQUUzQjE4N0JENkM4QTE0MTE0Q0UwNzNF OTU+XQo+PgpzdGFydHhyZWYKMjA2MTQ2CiUlRU9GCg== --------------E2024E14D7CE370FAF0DB3B9-- From joel.hoglund@ri.se Thu Nov 22 07:46:34 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0872F126C7E for ; Thu, 22 Nov 2018 07:46:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dn4ePg7DoXmS for ; Thu, 22 Nov 2018 07:46:31 -0800 (PST) Received: from smtp-out11.electric.net (smtp-out11.electric.net [185.38.181.34]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CBF921200B3 for ; Thu, 22 Nov 2018 07:46:30 -0800 (PST) Received: from 1gPrBT-0006jZ-Tn by out11b.electric.net with emc1-ok (Exim 4.90_1) (envelope-from ) id 1gPrBT-0006k9-V2 for ace@ietf.org; Thu, 22 Nov 2018 07:46:27 -0800 Received: by emcmailer; Thu, 22 Nov 2018 07:46:27 -0800 Received: from [194.218.146.197] (helo=sp-mail-3.sp.se) by out11b.electric.net with esmtps (TLSv1.2:ECDHE-RSA-AES128-SHA256:128) (Exim 4.90_1) (envelope-from ) id 1gPrBT-0006jZ-Tn for ace@ietf.org; Thu, 22 Nov 2018 07:46:27 -0800 Received: from sp-mail-3.sp.se (10.100.0.163) by sp-mail-3.sp.se (10.100.0.163) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1531.3; Thu, 22 Nov 2018 16:46:27 +0100 Received: from sp-mail-3.sp.se ([fe80::74af:9420:2d85:73d]) by sp-mail-3.sp.se ([fe80::74af:9420:2d85:73d%21]) with mapi id 15.01.1531.003; Thu, 22 Nov 2018 16:46:27 +0100 From: =?iso-8859-1?Q?Joel_H=F6glund?= To: "ace@ietf.org" Thread-Topic: [Ace] Minimizing overhead of certificates in constrained IoT Thread-Index: AQHUcp+R17G1j53EqkyuwSM7Na/FnqU+IRIAgBk8MoCABJ1x0g== Date: Thu, 22 Nov 2018 15:46:26 +0000 Message-ID: <34541d17d2384820808cca7009694d0d@ri.se> References: <3F7E42DF-7CA9-4765-AB67-A53B4E7D1AC1@ericsson.com> <20181103144026.GD54966@kduck.kaduk.org>, In-Reply-To: Accept-Language: en-GB, sv-SE, en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.100.0.67] Content-Type: multipart/alternative; boundary="_000_34541d17d2384820808cca7009694d0drise_" MIME-Version: 1.0 X-Outbound-IP: 194.218.146.197 X-Env-From: joel.hoglund@ri.se X-Proto: esmtps X-Revdns: X-HELO: sp-mail-3.sp.se X-TLS: TLSv1.2:ECDHE-RSA-AES128-SHA256:128 X-Authenticated_ID: X-Virus-Status: Scanned by VirusSMART (c) X-Virus-Status: Scanned by VirusSMART (s) X-PolicySMART: 14510320 Archived-At: Subject: Re: [Ace] Minimizing overhead of certificates in constrained IoT X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Nov 2018 15:47:54 -0000 --_000_34541d17d2384820808cca7009694d0drise_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi! We're happy for the questions and hope to see more discussions happening. A= few comments given inline below: On Fri, Nov 02, 2018 at 11:31:16AM +0000, John Mattsson wrote: > Hi, > > We recently submitted https://tools.ietf.org/html/draft-raza-ace-cbor= -certificates-00, which build on research done by Research Institutes of Sw= eden, Royal Institute of Technology in Stockholm, and Nexus: > ... > > That fact that certificates are sent encrypted in new protocols (TLS = 1.3, DTLS 1.3, EDHOC) means that compression in intermediaries will not wor= k in the future. TLS 1.3 and DTLS 1.3 are currently looking at certificate = compression, but these mechanisms are not optimal for constrained IoT. The = use of general lossless compression algorithms are quite heavy, and they do= not compress things optimally. I assume you are not considering lossy compression algorithms, and thus= are indicating that this effort could be considered a domain-specific lossl= ess compression algorithm. (Or perhaps you would consider the X.509 profil= e that removes many things to be "lossy"?) As long as we are signing the 'original' - profiled but uncompressed - x.50= 9 certificate, the decompression mechanism must be able to restore the exac= t uncompressed content for the signature to be valid. So in this sense the = proposed cbor based encoding schema works as a domain-specific lossless com= pression algorithm. From a "human readable" perspective, the profile could = be seen as lossy, as it forbids using some certificate fields such as count= ry codes, but we believe the benefits outweighs the drawbacks. Regardless, the codepoint space for CertificateCompressionAlgorithm (in https://tools.ietf.org/html/draft-ietf-tls-certificate-compression-04) seems large enough to allow for a domain-specific compression algorithm= , e.g., one incorporating a custom dictionary that would improve compress= ion efficiency at the cost of storage space on the implementation. Is this= an avenue that you have investigated? We haven't yet discussed on how to best align our efforts with the TLS Cert= ificate Compression proposal. As a first impression it seems like the propo= sed cbor certificates could be advertised through the CertificateCompressio= nAlgorithm extension as one available compression algorithm by the servers = and IoT devices supporting it, if the TLS proposal is extended to also enco= mpass DTLS. To further improve compression for IoT devices in general, the cost for a c= ustom dictionary could easily become bigger than the savings. But if there = are ideas for scenarios where a more refined custom dictionary could be ben= eficial, that would definitely be an area for further investigation. > With the submission of raft-raza-ace-cbor-certificates we would like = to start a discussion on how to minimize the overhead caused by certificate= s. > ... > > I think that a good place to start a discussion about these topics wo= uld be in T2TRG. If people find this interesting, I suggest having a quick = introduction on the Friday plenary session and then further discussions in = the security breakout. There are some good questions here (and I certainly don't have the answers!); it will be interesting to read the rest of this thread. I'm also looking forward to read more comments! Cheers Joel H=F6glund RISE SICS --_000_34541d17d2384820808cca7009694d0drise_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hi!


We're happy for the questions and hope = to see more discussions happening. A few comments given inline be= low:


    On Fri, Nov 02, 2018 at 1= 1:31:16AM +0000, John Mattsson wrote:

&n= bsp;   > Hi,
    >
    > We recently submitted https://tools.ietf.org/html/draft-raza-ace-cbor-certificates-00, which = build on research done by Research Institutes of Sweden, Royal Institute of= Technology in Stockholm, and Nexus:
    >
...
&n= bsp;   >
    > That fact that certificates are sent encrypted in n= ew protocols (TLS 1.3, DTLS 1.3, EDHOC) means that compression in intermedi= aries will not work in the future. TLS 1.3 and DTLS 1.3 are currently looki= ng at certificate compression, but these mechanisms are not optimal for constrained IoT. The use of general lossless compressi= on algorithms are quite heavy, and they do not compress things optimally.    
    I assume you are not considering lossy compression algor= ithms, and thus are
    indicating that this effort could be considered a domain= -specific lossless
    compression algorithm.  (Or perhaps you would consi= der the X.509 profile
    that removes many things to be "lossy"?)

As= long as we are signing the 'original' - profiled but uncompresse= d - x.509 certificate, the decompression mechanism must be able to res= tore the exact uncompressed content for the signature to be valid. So in this sense the proposed cbor based encoding schema work= s as a domain-specific lossless compression algorithm. From a "= ;human readable" perspective, the profile could be seen as lossy, as it forbids using some ce= rtificate fields such as country codes, but we believe the benefits ou= tweighs the drawbacks.
    Regardless, the codepoint space for CertificateCompressi= onAlgorithm (in
    https://tools.ietf.org/html/draft-ietf-tls-certificate-compression-04)<= br>     seems large enough to allow for a domain-specific compre= ssion algorithm,
    e.g., one incorporating a custom dictionary that would i= mprove compression
    efficiency at the cost of storage space on the implement= ation.  Is this an
    avenue that you have investigated?

We hav= en't yet discussed on how= to best align our efforts with the TLS Certificate Compression propos= al. As a first impression it seems like the proposed cbor certificates could be advertised through the CertificateCompressionAlgorithm extension as one av= ailable compression algorithm by the servers and IoT devices supp= orting it, if the TLS proposal is extended to also encompass DTLS.
<= br>
T= o further improve compression for IoT devices i= n general, the cost for a custom dictionary could easily bec= ome bigger than the savings. But if there are ideas for scenarios where a more refined custom dictionary could be be= neficial, that would definitely be an area for further inves= tigation.    =

&n= bsp;   > With the submission of raft-raza-ace-cbor-certificate= s we would like to start a discussion on how to minimize the overhead cause= d by certificates.
    >
...
&n= bsp;   >
    > I think that a good place to start a discussion abo= ut these topics would be in T2TRG. If people find this interesting, I sugge= st having a quick introduction on the Friday plenary session and then furth= er discussions in the security breakout.
   
    There are some good questions here (and I certainly don'= t have the
    answers!); it will be interesting to read the rest of th= is thread.
I'= m also looking forward to read more comments!
Ch= eers
Jo= el H=F6glund
RI= SE SICS    

--_000_34541d17d2384820808cca7009694d0drise_-- From nobody Fri Nov 23 02:31:35 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A6E2812008A for ; Fri, 23 Nov 2018 02:31:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QAYYReW-yHMi for ; Fri, 23 Nov 2018 02:31:31 -0800 (PST) Received: from smtp-out11.electric.net (smtp-out11.electric.net [185.38.181.34]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C68B81277BB for ; Fri, 23 Nov 2018 02:31:30 -0800 (PST) Received: from 1gQ8kC-000Azn-TV by out11c.electric.net with emc1-ok (Exim 4.90_1) (envelope-from ) id 1gQ8kC-000B0p-UD for ace@ietf.org; Fri, 23 Nov 2018 02:31:28 -0800 Received: by emcmailer; Fri, 23 Nov 2018 02:31:28 -0800 Received: from [194.218.146.197] (helo=sp-mail-2.sp.se) by out11c.electric.net with esmtps (TLSv1.2:ECDHE-RSA-AES128-SHA256:128) (Exim 4.90_1) (envelope-from ) id 1gQ8kC-000Azn-TV for ace@ietf.org; Fri, 23 Nov 2018 02:31:28 -0800 Received: from [192.168.0.166] (10.116.0.226) by sp-mail-2.sp.se (10.100.0.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1531.3; Fri, 23 Nov 2018 11:31:27 +0100 To: "ace@ietf.org" From: Ludwig Seitz Message-ID: Date: Fri, 23 Nov 2018 11:31:27 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.2.1 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Originating-IP: [10.116.0.226] X-ClientProxiedBy: sp-mail-1.sp.se (10.100.0.161) To sp-mail-2.sp.se (10.100.0.162) X-Outbound-IP: 194.218.146.197 X-Env-From: ludwig.seitz@ri.se X-Proto: esmtps X-Revdns: X-HELO: sp-mail-2.sp.se X-TLS: TLSv1.2:ECDHE-RSA-AES128-SHA256:128 X-Authenticated_ID: X-Virus-Status: Scanned by VirusSMART (c) X-Virus-Status: Scanned by VirusSMART (s) X-PolicySMART: 14510320 Archived-At: Subject: [Ace] WGLC comments on draft-ietf-ace-oauth-authz and draft-ietf-ace-params X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Nov 2018 10:31:33 -0000 Hello ACE, I have now addressed all WGLC comments (Jim Schaad's, Mike Jones' and Stefanie Gerdes') except for this one: "Do we need to write something about how a RS should handle the presence of multiple tokens for the same client? Perhaps a security consideration? I see two options: 1. Multiple tokens complement themselves i.e. if token A gives you right R1 and token B right R2 then you have R1+R2. 2. The newer token always overwrites the old one, which means if you want to extend your access rights as a client, when you already have A -> R1 you need to ask the AS for B*->R1+R2. " (see https://github.com/ace-wg/ace-oauth/issues/147). AFAIK the common usage in OAuth is option 2, however Jim has pointed out use cases for option 1 and refers to it in https://datatracker.ietf.org/doc/draft-schaad-cnf-cwt-id/ Jim has expressed a preference for 1. while Olaf has (in the Jabber at IETF 103) expressed a preference for 2. I would need some guidance from the WG on how to proceed here. /Ludwig -- Ludwig Seitz, PhD Security Lab, RISE Phone +46(0)70-349 92 51 From nobody Fri Nov 23 02:33:45 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EAF4F1277BB for ; Fri, 23 Nov 2018 02:33:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id U5sOs5x6O2DN for ; Fri, 23 Nov 2018 02:33:37 -0800 (PST) Received: from smtp-out11.electric.net (smtp-out11.electric.net [185.38.181.33]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7B7D812008A for ; Fri, 23 Nov 2018 02:33:37 -0800 (PST) Received: from 1gQ8mE-000eRv-VF by out11d.electric.net with emc1-ok (Exim 4.90_1) (envelope-from ) id 1gQ8mE-000eSg-W1 for ace@ietf.org; Fri, 23 Nov 2018 02:33:34 -0800 Received: by emcmailer; Fri, 23 Nov 2018 02:33:34 -0800 Received: from [194.218.146.197] (helo=sp-mail-2.sp.se) by out11d.electric.net with esmtps (TLSv1.2:ECDHE-RSA-AES128-SHA256:128) (Exim 4.90_1) (envelope-from ) id 1gQ8mE-000eRv-VF for ace@ietf.org; Fri, 23 Nov 2018 02:33:34 -0800 Received: from [192.168.0.166] (10.116.0.226) by sp-mail-2.sp.se (10.100.0.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1531.3; Fri, 23 Nov 2018 11:33:34 +0100 From: Ludwig Seitz To: "ace@ietf.org" References: Message-ID: Date: Fri, 23 Nov 2018 11:33:34 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.2.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Originating-IP: [10.116.0.226] X-ClientProxiedBy: sp-mail-1.sp.se (10.100.0.161) To sp-mail-2.sp.se (10.100.0.162) X-Outbound-IP: 194.218.146.197 X-Env-From: ludwig.seitz@ri.se X-Proto: esmtps X-Revdns: X-HELO: sp-mail-2.sp.se X-TLS: TLSv1.2:ECDHE-RSA-AES128-SHA256:128 X-Authenticated_ID: X-Virus-Status: Scanned by VirusSMART (c) X-Virus-Status: Scanned by VirusSMART (s) X-PolicySMART: 14510320 Archived-At: Subject: Re: [Ace] WGLC comments on draft-ietf-ace-oauth-authz and draft-ietf-ace-params X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Nov 2018 10:33:44 -0000 On 23/11/2018 11:31, Ludwig Seitz wrote: > Hello ACE, > > I have now addressed all WGLC comments (Jim Schaad's, Mike Jones' and > Stefanie Gerdes') except for this one: > > "Do we need to write something about how a RS should handle the presence > of multiple tokens for the same client? Perhaps a security consideration? > > I see two options: > > 1. Multiple tokens complement themselves i.e. if token A gives you right > R1 and token B right R2 then you have R1+R2. > > 2. The newer token always overwrites the old one, which means if you > want to extend your access rights as a client, when you already have A > -> R1 you need to ask the AS for B*->R1+R2. > " > (see https://github.com/ace-wg/ace-oauth/issues/147). > > > AFAIK the common usage in OAuth is option 2, however Jim has pointed out > use cases for option 1 and refers to it in > https://datatracker.ietf.org/doc/draft-schaad-cnf-cwt-id/ > > > Jim has expressed a preference for 1. while Olaf has (in the Jabber at > IETF 103) expressed a preference for 2. > > I would need some guidance from the WG on how to proceed here. > > /Ludwig > Btw. I haven't uploaded a new draft yet. Please use the editor's copy and the diff here: https://github.com/ace-wg/ace-oauth and here: https://github.com/ace-wg/ace-oauth-params /Ludwig -- Ludwig Seitz, PhD Security Lab, RISE Phone +46(0)70-349 92 51 From nobody Fri Nov 23 06:44:41 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 99AEB130DFF for ; Fri, 23 Nov 2018 06:44:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kzm_krBSWlvI for ; Fri, 23 Nov 2018 06:44:37 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3CE5B130E09 for ; Fri, 23 Nov 2018 06:44:37 -0800 (PST) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Fri, 23 Nov 2018 06:39:16 -0800 From: Jim Schaad To: 'Ludwig Seitz' , References: In-Reply-To: Date: Fri, 23 Nov 2018 06:44:07 -0800 Message-ID: <014c01d4833a$fe811040$fb8330c0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQJqoo66haZj7QiAwQQjp16fKnuZhALTutSepBqSlQA= Content-Language: en-us X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [Ace] WGLC comments on draft-ietf-ace-oauth-authz and draft-ietf-ace-params X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Nov 2018 14:44:39 -0000 I believe the consensus in the room at the F2F was to document 2, but make sure that it is not done in a way which would forbid 1 in the future. That is the default should be 2 but a future document/solution should be able to say how 1 could be done in the future. Jim > -----Original Message----- > From: Ace On Behalf Of Ludwig Seitz > Sent: Friday, November 23, 2018 2:34 AM > To: ace@ietf.org > Subject: Re: [Ace] WGLC comments on draft-ietf-ace-oauth-authz and draft-ietf- > ace-params > > On 23/11/2018 11:31, Ludwig Seitz wrote: > > Hello ACE, > > > > I have now addressed all WGLC comments (Jim Schaad's, Mike Jones' and > > Stefanie Gerdes') except for this one: > > > > "Do we need to write something about how a RS should handle the > > presence of multiple tokens for the same client? Perhaps a security > consideration? > > > > I see two options: > > > > 1. Multiple tokens complement themselves i.e. if token A gives you > > right > > R1 and token B right R2 then you have R1+R2. > > > > 2. The newer token always overwrites the old one, which means if you > > want to extend your access rights as a client, when you already have A > > -> R1 you need to ask the AS for B*->R1+R2. > > " > > (see https://github.com/ace-wg/ace-oauth/issues/147). > > > > > > AFAIK the common usage in OAuth is option 2, however Jim has pointed > > out use cases for option 1 and refers to it in > > https://datatracker.ietf.org/doc/draft-schaad-cnf-cwt-id/ > > > > > > Jim has expressed a preference for 1. while Olaf has (in the Jabber at > > IETF 103) expressed a preference for 2. > > > > I would need some guidance from the WG on how to proceed here. > > > > /Ludwig > > > > Btw. I haven't uploaded a new draft yet. Please use the editor's copy and the > diff here: https://github.com/ace-wg/ace-oauth and here: > https://github.com/ace-wg/ace-oauth-params > /Ludwig > > -- > Ludwig Seitz, PhD > Security Lab, RISE > Phone +46(0)70-349 92 51 > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace From nobody Mon Nov 26 01:23:34 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C493E128CE4; Mon, 26 Nov 2018 01:23:32 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.89.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: ace@ietf.org Message-ID: <154322421274.8323.16552829806564163818@ietfa.amsl.com> Date: Mon, 26 Nov 2018 01:23:32 -0800 Archived-At: Subject: [Ace] I-D Action: draft-ietf-ace-oauth-authz-17.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Nov 2018 09:23:33 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF. Title : Authentication and Authorization for Constrained Environments (ACE) using the OAuth 2.0 Framework (ACE-OAuth) Authors : Ludwig Seitz Goeran Selander Erik Wahlstroem Samuel Erdtman Hannes Tschofenig Filename : draft-ietf-ace-oauth-authz-17.txt Pages : 74 Date : 2018-11-26 Abstract: This specification defines a framework for authentication and authorization in Internet of Things (IoT) environments called ACE- OAuth. The framework is based on a set of building blocks including OAuth 2.0 and CoAP, thus making a well-known and widely used authorization solution suitable for IoT devices. Existing specifications are used where possible, but where the constraints of IoT devices require it, extensions are added and profiles are defined. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-oauth-authz/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-ace-oauth-authz-17 https://datatracker.ietf.org/doc/html/draft-ietf-ace-oauth-authz-17 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-oauth-authz-17 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Nov 26 01:24:34 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A5816130F08; Mon, 26 Nov 2018 01:24:32 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: ace@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.89.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: ace@ietf.org Message-ID: <154322427265.8276.13558927116553208401@ietfa.amsl.com> Date: Mon, 26 Nov 2018 01:24:32 -0800 Archived-At: Subject: [Ace] I-D Action: draft-ietf-ace-oauth-params-01.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Nov 2018 09:24:33 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Authentication and Authorization for Constrained Environments WG of the IETF. Title : Additional OAuth Parameters for Authorization in Constrained Environments (ACE) Author : Ludwig Seitz Filename : draft-ietf-ace-oauth-params-01.txt Pages : 14 Date : 2018-11-26 Abstract: This specification defines new parameters for the OAuth 2.0 token and introspection endpoints when used with framework for authentication and authorization for constrained environments (ACE). These are used to express the desired audience of a requested access token, the desired proof-of-possession key, the proof-of-possession key that the AS has selected, and the key the RS should use to authenticate to the client. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-ace-oauth-params/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-ace-oauth-params-01 https://datatracker.ietf.org/doc/html/draft-ietf-ace-oauth-params-01 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-oauth-params-01 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Nov 26 01:27:33 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F05F8130F04 for ; Mon, 26 Nov 2018 01:27:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id um87_zO1VDd6 for ; Mon, 26 Nov 2018 01:27:29 -0800 (PST) Received: from smtp-out11.electric.net (smtp-out11.electric.net [185.38.181.41]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EBF85130DE5 for ; Mon, 26 Nov 2018 01:27:28 -0800 (PST) Received: from 1gRDAs-000ViQ-Tt by out11d.electric.net with emc1-ok (Exim 4.90_1) (envelope-from ) id 1gRDAs-000Vjd-Ub for ace@ietf.org; Mon, 26 Nov 2018 01:27:26 -0800 Received: by emcmailer; Mon, 26 Nov 2018 01:27:26 -0800 Received: from [194.218.146.197] (helo=sp-mail-2.sp.se) by out11d.electric.net with esmtps (TLSv1.2:ECDHE-RSA-AES128-SHA256:128) (Exim 4.90_1) (envelope-from ) id 1gRDAs-000ViQ-Tt for ace@ietf.org; Mon, 26 Nov 2018 01:27:26 -0800 Received: from [192.168.0.166] (10.116.0.226) by sp-mail-2.sp.se (10.100.0.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1531.3; Mon, 26 Nov 2018 10:27:25 +0100 References: <154322421294.8323.8505315870685563404.idtracker@ietfa.amsl.com> To: "ace@ietf.org" From: Ludwig Seitz X-Forwarded-Message-Id: <154322421294.8323.8505315870685563404.idtracker@ietfa.amsl.com> Message-ID: Date: Mon, 26 Nov 2018 10:27:09 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.2.1 MIME-Version: 1.0 In-Reply-To: <154322421294.8323.8505315870685563404.idtracker@ietfa.amsl.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Originating-IP: [10.116.0.226] X-ClientProxiedBy: sp-mail-3.sp.se (10.100.0.163) To sp-mail-2.sp.se (10.100.0.162) X-Outbound-IP: 194.218.146.197 X-Env-From: ludwig.seitz@ri.se X-Proto: esmtps X-Revdns: X-HELO: sp-mail-2.sp.se X-TLS: TLSv1.2:ECDHE-RSA-AES128-SHA256:128 X-Authenticated_ID: X-Virus-Status: Scanned by VirusSMART (c) X-Virus-Status: Scanned by VirusSMART (s) X-PolicySMART: 14510320 Archived-At: Subject: [Ace] Fwd: New Version Notification for draft-ietf-ace-oauth-authz-17.txt and draft-ietf-ace-oauth-params-01.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Nov 2018 09:27:32 -0000 Hello ACE, I have just submitted new versions for draft-ietf-ace-oauth-authz and draft-ietf-ace-oauth-params addressing the WGLC review comments and the discussions from the IETF 103 meeting. I would encourage the reviewers to check if they feel that I have sufficiently addressed their comments. Regards, Ludwig -------- Forwarded Message -------- A new version of I-D, draft-ietf-ace-oauth-authz-17.txt has been successfully submitted by Ludwig Seitz and posted to the IETF repository. Name: draft-ietf-ace-oauth-authz Revision: 17 Title: Authentication and Authorization for Constrained Environments (ACE) using the OAuth 2.0 Framework (ACE-OAuth) Document date: 2018-11-26 Group: ace Pages: 74 URL: https://www.ietf.org/internet-drafts/draft-ietf-ace-oauth-authz-17.txt Status: https://datatracker.ietf.org/doc/draft-ietf-ace-oauth-authz/ Htmlized: https://tools.ietf.org/html/draft-ietf-ace-oauth-authz-17 Htmlized: https://datatracker.ietf.org/doc/html/draft-ietf-ace-oauth-authz Diff: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-oauth-authz-17 Abstract: This specification defines a framework for authentication and authorization in Internet of Things (IoT) environments called ACE- OAuth. The framework is based on a set of building blocks including OAuth 2.0 and CoAP, thus making a well-known and widely used authorization solution suitable for IoT devices. Existing specifications are used where possible, but where the constraints of IoT devices require it, extensions are added and profiles are defined. Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat -------- Forwarded Message -------- A new version of I-D, draft-ietf-ace-oauth-params-01.txt has been successfully submitted by Ludwig Seitz and posted to the IETF repository. Name: draft-ietf-ace-oauth-params Revision: 01 Title: Additional OAuth Parameters for Authorization in Constrained Environments (ACE) Document date: 2018-11-26 Group: ace Pages: 14 URL: https://www.ietf.org/internet-drafts/draft-ietf-ace-oauth-params-01.txt Status: https://datatracker.ietf.org/doc/draft-ietf-ace-oauth-params/ Htmlized: https://tools.ietf.org/html/draft-ietf-ace-oauth-params-01 Htmlized: https://datatracker.ietf.org/doc/html/draft-ietf-ace-oauth-params Diff: https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-oauth-params-01 Abstract: This specification defines new parameters for the OAuth 2.0 token and introspection endpoints when used with framework for authentication and authorization for constrained environments (ACE). These are used to express the desired audience of a requested access token, the desired proof-of-possession key, the proof-of-possession key that the AS has selected, and the key the RS should use to authenticate to the client. Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat From nobody Tue Nov 27 06:44:09 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 18FB7130E34 for ; Tue, 27 Nov 2018 06:44:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G-8WC_WPpN28 for ; Tue, 27 Nov 2018 06:44:06 -0800 (PST) Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 13B0812D4F2 for ; Tue, 27 Nov 2018 06:44:05 -0800 (PST) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id wAREi0dw028999 for ; Tue, 27 Nov 2018 09:44:00 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu wAREi0dw028999 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1543329840; bh=dFzB6JzDNlbOVuRSueYfnNsaY6kc4wyF6a3uAW728jQ=; h=From:To:Subject:Date:From; b=msiqqDpD9VnljQEHrd0Hqm1FOidU5dAJSvmzwwNa44rsBka9Db0ABFf4bwqzCwdM8 QZ7E4n28Vf0WlceVZnmkXocdNRjh5KEfsyEhcWjSiAc25Jrm4f2hC3yNLpHkom6onj kWzslZSfgzRZ60r3fNeHKyia33AAKKhwZIsvC0qA= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id wAREhq9S039203 for ; Tue, 27 Nov 2018 09:43:52 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASSINA.ad.sei.cmu.edu ([10.64.28.249]) with mapi id 14.03.0415.000; Tue, 27 Nov 2018 09:43:51 -0500 From: Roman Danyliw To: "ace@ietf.org" Thread-Topic: IPR Conformance check for draft-ietf-ace-cwt-proof-of-possession Thread-Index: AdSGXrQC083rSoERTQezf6anZOGC1w== Date: Tue, 27 Nov 2018 14:43:51 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0184C48B90@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Ace] IPR Conformance check for draft-ietf-ace-cwt-proof-of-possession X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Nov 2018 14:44:08 -0000 Hello draft-ietf-ace-cwt-proof-of-possession authors, (Hi Mike, Ludwig, Goeran, Samuel and Hannes,) As the shepherd for draft-ietf-ace-cwt-proof-of-possession, I'd like to con= firm with the authors that all IPR disclosures have occurred per RFC6702: --[ shepherd questions ]-- (7) Has each author confirmed that any and all appropriate IPR disclosures = required for full conformance with the provisions of BCP 78 and BCP 79 have= already been filed. If not, explain why? --[end question]-- Can you please respond to the list answering this question (e.g., "As a co-= author, I don't hold any IPR nor am I aware of any related to this draft"). Thanks, Roman From nobody Tue Nov 27 06:51:45 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E48381277BB for ; Tue, 27 Nov 2018 06:51:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9DxKGHDwCSrF for ; Tue, 27 Nov 2018 06:51:42 -0800 (PST) Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1B10F1241F6 for ; Tue, 27 Nov 2018 06:51:42 -0800 (PST) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id wAREpfY3030108 for ; Tue, 27 Nov 2018 09:51:41 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu wAREpfY3030108 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1543330301; bh=zvyN6r1DlTFD4X5hyvwuJMOLcCiUOOkHqBHUrOXBgY8=; h=From:To:Subject:Date:From; b=cgUXUqtyxgZ2CiJxx2TlwAkGAJSBnym3Iisel/aO0CxKuuChmBQyAHXHJ2Q9urwZp KkWWeuYNdfr5Jla9TSEhvVafC8djKB+vl4Dl9DUhpNBeacMRi/zXTWlJW+2FzNwLrS KLwvGvdFGbR/Zblm0UfYN/sfIEaaeupT9VCci8bw= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id wAREpdkk041866 for ; Tue, 27 Nov 2018 09:51:39 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.03.0415.000; Tue, 27 Nov 2018 09:51:39 -0500 From: Roman Danyliw To: "ace@ietf.org" Thread-Topic: Draft update schedule from IETF 103 Thread-Index: AdSGX98yt0b4tCqcRceX5zdTKztFtg== Date: Tue, 27 Nov 2018 14:51:39 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0184C48BB0@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Ace] Draft update schedule from IETF 103 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Nov 2018 14:51:44 -0000 Hello WG! It got captured in the meeting minutes [1], but for easy reference, the fol= lowing is the draft update schedule we discussed at IETF 103: ** draft-ietf-ace-oauth-authz -- Second-half of December 2018 ** draft-ietf-ace-dtls-authorize -- December 2018 ** draft-ietf-ace-oscore-profile -- Early December 2018 ** draft-ietf-ace-cwt-proof-of-possession -- Week of November 12, 2018 ** draft-ietf-ace-coap-est -- Early December 2018 Regards, Roman and Jim [1] https://datatracker.ietf.org/meeting/103/materials/minutes-103-ace-00 From nobody Wed Nov 28 09:06:22 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E53EA130E88; Wed, 28 Nov 2018 09:06:20 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5JmCFWRG6iJ5; Wed, 28 Nov 2018 09:06:18 -0800 (PST) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1EF0A130F9A; Wed, 28 Nov 2018 09:06:17 -0800 (PST) Received: from Jude (73.180.8.170) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1347.2; Wed, 28 Nov 2018 09:01:15 -0800 From: Jim Schaad To: CC: References: <154322421294.8323.8505315870685563404.idtracker@ietfa.amsl.com> In-Reply-To: Date: Wed, 28 Nov 2018 09:06:07 -0800 Message-ID: <042a01d4873c$a91bb5a0$fb5320e0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQK3+H3pFttPP+s38ebErlDfr5TlzwGwIdvjo49nOrA= Content-Language: en-us X-Originating-IP: [73.180.8.170] Archived-At: Subject: Re: [Ace] Fwd: New Version Notification for draft-ietf-ace-oauth-authz-17.txt and draft-ietf-ace-oauth-params-01.txt X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Nov 2018 17:06:21 -0000 Ludwig, It looks good. A couple of additional things that have occurred to me. (Always a problem when on reads drafts again and again.) 1. I don't really have a problem with figure 6, but I don't know if we want to more correctly reflect what an OSCORE message would look like in this location. This would basically be a re-write of the entire example structure to reflect that you have an outer and an inner CoAP message. It might be confusing for people who are not fully immersed in the OSCORE world. 2. I have no idea of where this would go and it is perhaps something that the OAuth people need to think about as well. If an AS receives a request which has message level security (OSCORE/CWT/JWT) over a session level security connection (TLS/DTLS/IPSEC) are there any rules/suggestions about which keys should be used for evaluating the resulting request. While I assume that message security wins and the session security is ignored, I have not seen this anyplace. 3. In section 5.8.1 - It says that for a CWT access token that the application/cwt content type MUST be used. There are two possible issues with this. 1) How does the client know what the type of the token is. It could be a CWT, an introspection token, or something else entirely. 2) Is it an error if a CWT token is received and the content type is not present? Jim > -----Original Message----- > From: Ace On Behalf Of Ludwig Seitz > Sent: Monday, November 26, 2018 1:27 AM > To: ace@ietf.org > Subject: [Ace] Fwd: New Version Notification for draft-ietf-ace-oauth-authz- > 17.txt and draft-ietf-ace-oauth-params-01.txt > > Hello ACE, > > I have just submitted new versions for draft-ietf-ace-oauth-authz and draft-ietf- > ace-oauth-params addressing the WGLC review comments and the discussions > from the IETF 103 meeting. > > I would encourage the reviewers to check if they feel that I have sufficiently > addressed their comments. > > > Regards, > > Ludwig > > -------- Forwarded Message -------- > > A new version of I-D, draft-ietf-ace-oauth-authz-17.txt > has been successfully submitted by Ludwig Seitz and posted to the > IETF repository. > > Name: draft-ietf-ace-oauth-authz > Revision: 17 > Title: Authentication and Authorization for Constrained Environments > (ACE) using the OAuth 2.0 Framework (ACE-OAuth) > Document date: 2018-11-26 > Group: ace > Pages: 74 > URL: > https://www.ietf.org/internet-drafts/draft-ietf-ace-oauth-authz-17.txt > Status: https://datatracker.ietf.org/doc/draft-ietf-ace-oauth-authz/ > Htmlized: https://tools.ietf.org/html/draft-ietf-ace-oauth-authz-17 > Htmlized: > https://datatracker.ietf.org/doc/html/draft-ietf-ace-oauth-authz > Diff: > https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-oauth-authz-17 > > Abstract: > This specification defines a framework for authentication and > authorization in Internet of Things (IoT) environments called ACE- > OAuth. The framework is based on a set of building blocks including > OAuth 2.0 and CoAP, thus making a well-known and widely used > authorization solution suitable for IoT devices. Existing > specifications are used where possible, but where the constraints of > IoT devices require it, extensions are added and profiles are > defined. > > > > > Please note that it may take a couple of minutes from the time of submission > until the htmlized version and diff are available at tools.ietf.org. > > The IETF Secretariat > > -------- Forwarded Message -------- > > A new version of I-D, draft-ietf-ace-oauth-params-01.txt > has been successfully submitted by Ludwig Seitz and posted to the > IETF repository. > > Name: draft-ietf-ace-oauth-params > Revision: 01 > Title: Additional OAuth Parameters for Authorization in Constrained > Environments (ACE) > Document date: 2018-11-26 > Group: ace > Pages: 14 > URL: > https://www.ietf.org/internet-drafts/draft-ietf-ace-oauth-params-01.txt > Status: > https://datatracker.ietf.org/doc/draft-ietf-ace-oauth-params/ > Htmlized: https://tools.ietf.org/html/draft-ietf-ace-oauth-params-01 > Htmlized: > https://datatracker.ietf.org/doc/html/draft-ietf-ace-oauth-params > Diff: > https://www.ietf.org/rfcdiff?url2=draft-ietf-ace-oauth-params-01 > > Abstract: > This specification defines new parameters for the OAuth 2.0 token and > introspection endpoints when used with framework for authentication > and authorization for constrained environments (ACE). These are used > to express the desired audience of a requested access token, the > desired proof-of-possession key, the proof-of-possession key that the > AS has selected, and the key the RS should use to authenticate to the > client. > > > > > > Please note that it may take a couple of minutes from the time of submission > until the htmlized version and diff are available at tools.ietf.org. > > The IETF Secretariat > > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace From nobody Wed Nov 28 21:48:58 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9FF7D12F1A2 for ; Wed, 28 Nov 2018 21:48:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.358 X-Spam-Level: X-Spam-Status: No, score=-3.358 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-1.459, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=erdtman-se.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g6KQpZFZ4lTE for ; Wed, 28 Nov 2018 21:48:53 -0800 (PST) Received: from mail-pg1-x532.google.com (mail-pg1-x532.google.com [IPv6:2607:f8b0:4864:20::532]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B2171130E08 for ; Wed, 28 Nov 2018 21:48:53 -0800 (PST) Received: by mail-pg1-x532.google.com with SMTP id y4so402728pgc.12 for ; Wed, 28 Nov 2018 21:48:53 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=erdtman-se.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=WPJv6oE7zhy1YAnU3CL5PLeBy+ZPI71aWJ370V2bqpU=; b=slPmozh8WlzrfujmiYOMJNV2bOj2oDLCDFVXYcEZLHccgFr4f3Cx3bzRmrODnSwIfx 9BWFr9TMJNOoOjtVZbtsff2gkgfD5R6w4uxyat4X1R1JHvxldvap00qk1znWoWh19jo1 CQm0I5Ak/C1yJAG+134i+euur4S1DQLXu6zFkiYCJ4w9EeN0rirA/mVuKrgWVhlo8mkM atkdP3GQFlosrXre5jn1Xntsnjhj0269Uj28HnGF63HwZXkafVn5DMAmgTACi85trbGA d4XNoOLBHgtDcCxpxJZ8TYqMFUGnQROVcWw5Vt1ZpvRKZeVnLTQELPAotO2+qQCDY08/ dJoQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=WPJv6oE7zhy1YAnU3CL5PLeBy+ZPI71aWJ370V2bqpU=; b=jtaGZD6Z0ousNds4PVpTUueiz/sjaPgvFygBGbdH9KK4JoMloCixGB4M8pGzb7qAKL Hc7hoKJYBPNzA42ucILkH3Gjg71wloKAXivOgroYtgcOJexQysTl9iTHbsEx/Z1jtEko qH6Y9d83sCAs/NUxRzUOFTz/ZPxndAHJa/bmKKBqphkKMwYPkXcnzvSpD5CaB0p2WbBV hM70sDBZ66y/PkCx08XZNg2dfK5hijyPcEGLqFzhSzoomG0g1MZdijmbboGDFXbBAT2Q NZvOupJrKYiuYAIklJnus5vXSMFxHn1n2w8RzUWFzMbls5BZu40oiWlxxSNB9+8Kla2h cGjg== X-Gm-Message-State: AA+aEWaEuVv/ddDHTY8DjM0yWZr6jjKOO0GYMpWWajBZQ6MeTpeDEmo9 +1nhVXSDu9eJMyQbWwa1oiaITONGxOUagtNHsVHvCPHVLSs+S9cQ X-Google-Smtp-Source: AFSGD/UtSzEKjAPWZne1+9zZ4zXSUDPkegn5q91IWOj354CwcqR9aLlQt2z+ax7gB/CuZeJaFW3ZXz1mLQevIk+OmCU= X-Received: by 2002:a62:444b:: with SMTP id r72mr167534pfa.184.1543470532867; Wed, 28 Nov 2018 21:48:52 -0800 (PST) MIME-Version: 1.0 References: <359EC4B99E040048A7131E0F4E113AFC0184C48B90@marathon> In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC0184C48B90@marathon> From: Samuel Erdtman Date: Thu, 29 Nov 2018 06:48:40 +0100 Message-ID: To: Roman Danyliw Cc: ace Content-Type: multipart/alternative; boundary="000000000000d54a7b057bc73c30" Archived-At: Subject: Re: [Ace] IPR Conformance check for draft-ietf-ace-cwt-proof-of-possession X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2018 05:48:57 -0000 --000000000000d54a7b057bc73c30 Content-Type: text/plain; charset="UTF-8" As a co-author, I don't hold any IPR nor am I aware of any related to this draft On Tue, Nov 27, 2018 at 3:44 PM Roman Danyliw wrote: > Hello draft-ietf-ace-cwt-proof-of-possession authors, > (Hi Mike, Ludwig, Goeran, Samuel and Hannes,) > > As the shepherd for draft-ietf-ace-cwt-proof-of-possession, I'd like to > confirm with the authors that all IPR disclosures have occurred per RFC6702: > > --[ shepherd questions ]-- > > (7) Has each author confirmed that any and all appropriate IPR disclosures > required for full conformance with the provisions of BCP 78 and BCP 79 have > already been filed. If not, explain why? > > --[end question]-- > > Can you please respond to the list answering this question (e.g., "As a > co-author, I don't hold any IPR nor am I aware of any related to this > draft"). > > Thanks, > Roman > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > --000000000000d54a7b057bc73c30 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
As a co-author, I don't hold any IPR nor am I aware of= any related to this draft

On Tue, Nov 27, 2018 at 3:44 PM Roman Danyliw <rdd@cert.org> wrote:
Hello draft-ietf-ace-cwt-proof-of-possession authors,
(Hi Mike, Ludwig, Goeran, Samuel and Hannes,)

As the shepherd for draft-ietf-ace-cwt-proof-of-possession, I'd like to= confirm with the authors that all IPR disclosures have occurred per RFC670= 2:

--[ shepherd questions ]--

(7) Has each author confirmed that any and all appropriate IPR disclosures = required for full conformance with the provisions of BCP 78 and BCP 79 have= already been filed. If not, explain why?

--[end question]--

Can you please respond to the list answering this question (e.g., "As = a co-author, I don't hold any IPR nor am I aware of any related to this= draft").

Thanks,
Roman

_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace
--000000000000d54a7b057bc73c30-- From nobody Wed Nov 28 23:54:56 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 78503128AFB for ; Wed, 28 Nov 2018 23:54:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jjTiUNiP7SmD for ; Wed, 28 Nov 2018 23:54:52 -0800 (PST) Received: from smtp-out10.electric.net (smtp-out10.electric.net [185.38.180.41]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 97752127333 for ; Wed, 28 Nov 2018 23:54:52 -0800 (PST) Received: from 1gSH9t-000751-Vt by out10a.electric.net with emc1-ok (Exim 4.90_1) (envelope-from ) id 1gSH9u-00076M-TN for ace@ietf.org; Wed, 28 Nov 2018 23:54:50 -0800 Received: by emcmailer; Wed, 28 Nov 2018 23:54:50 -0800 Received: from [194.218.146.197] (helo=sp-mail-2.sp.se) by out10a.electric.net with esmtps (TLSv1.2:ECDHE-RSA-AES128-SHA256:128) (Exim 4.90_1) (envelope-from ) id 1gSH9t-000751-Vt for ace@ietf.org; Wed, 28 Nov 2018 23:54:49 -0800 Received: from [192.168.1.140] (10.116.0.226) by sp-mail-2.sp.se (10.100.0.162) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1531.3; Thu, 29 Nov 2018 08:54:49 +0100 To: References: <359EC4B99E040048A7131E0F4E113AFC0184C48B90@marathon> From: Ludwig Seitz Message-ID: <0ef8d8de-d97e-0b13-14ab-5a1b624ad0b0@ri.se> Date: Thu, 29 Nov 2018 08:54:49 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.2.1 MIME-Version: 1.0 In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC0184C48B90@marathon> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Language: en-US Content-Transfer-Encoding: 7bit X-Originating-IP: [10.116.0.226] X-ClientProxiedBy: sp-mail-1.sp.se (10.100.0.161) To sp-mail-2.sp.se (10.100.0.162) X-Outbound-IP: 194.218.146.197 X-Env-From: ludwig.seitz@ri.se X-Proto: esmtps X-Revdns: X-HELO: sp-mail-2.sp.se X-TLS: TLSv1.2:ECDHE-RSA-AES128-SHA256:128 X-Authenticated_ID: X-PolicySMART: 14510320 X-Virus-Status: Scanned by VirusSMART (c) X-Virus-Status: Scanned by VirusSMART (s) Archived-At: Subject: Re: [Ace] IPR Conformance check for draft-ietf-ace-cwt-proof-of-possession X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2018 07:54:56 -0000 On 27/11/2018 15:43, Roman Danyliw wrote: > Hello draft-ietf-ace-cwt-proof-of-possession authors, (Hi Mike, > Ludwig, Goeran, Samuel and Hannes,) > > As the shepherd for draft-ietf-ace-cwt-proof-of-possession, I'd like > to confirm with the authors that all IPR disclosures have occurred > per RFC6702: > > --[ shepherd questions ]-- > > (7) Has each author confirmed that any and all appropriate IPR > disclosures required for full conformance with the provisions of BCP > 78 and BCP 79 have already been filed. If not, explain why? > > --[end question]-- > > Can you please respond to the list answering this question (e.g., "As > a co-author, I don't hold any IPR nor am I aware of any related to > this draft"). > > Thanks, Roman > > _______________________________________________ Ace mailing list > Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace > As a co-author, I don't hold any IPR nor am I aware of any related to this draft. Ludwig Seitz -- Ludwig Seitz, PhD Security Lab, RISE Phone +46(0)70-349 92 51 From nobody Thu Nov 29 02:34:46 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 14B011292F1 for ; Thu, 29 Nov 2018 02:34:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.359 X-Spam-Level: X-Spam-Status: No, score=-3.359 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_MED=-1.459, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a8sMCC_TjSGF for ; Thu, 29 Nov 2018 02:34:37 -0800 (PST) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-eopbgr140080.outbound.protection.outlook.com [40.107.14.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0B34A1271FF for ; Thu, 29 Nov 2018 02:34:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector1-arm-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=r9zUQt3iD3sYm2tpv+4y2yG40MH4AVQNpRaGlmpcgF4=; b=qa4vIvVHDCyvQuKmXl5LIjg6wSwKNNdLgNr1esP1YkKfZEfsM9j0YwjRy6R+AKmSLI4wDS13TJ1AM0u0TJYAmCuaIMN7EgCTn1aNws25KchbZ5KPD7aYcR7YctreAhdsXEbINYr8bL5zEgmqDqauMqGl6Gr7yH4PbmUk4QNHbJ4= Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com (10.173.75.16) by VI1PR0801MB1903.eurprd08.prod.outlook.com (10.173.73.141) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1361.16; Thu, 29 Nov 2018 10:34:34 +0000 Received: from VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::2056:1db1:e01:4670]) by VI1PR0801MB2112.eurprd08.prod.outlook.com ([fe80::2056:1db1:e01:4670%3]) with mapi id 15.20.1361.019; Thu, 29 Nov 2018 10:34:34 +0000 From: Hannes Tschofenig To: Samuel Erdtman , Roman Danyliw CC: ace Thread-Topic: [Ace] IPR Conformance check for draft-ietf-ace-cwt-proof-of-possession Thread-Index: AdSGXrQC083rSoERTQezf6anZOGC1wBSHnkAAAmFXaA= Date: Thu, 29 Nov 2018 10:34:34 +0000 Message-ID: References: <359EC4B99E040048A7131E0F4E113AFC0184C48B90@marathon> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=Hannes.Tschofenig@arm.com; x-originating-ip: [217.140.96.140] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; VI1PR0801MB1903; 6:Pbe2gZTYb8KbddQn2jk6yEQCqG2kxBSFpxbbxnAqdpXQlGd+ijYXmdYmvH5CSYx0NqaX7Ly0wUW63Iz59uehD7VqgUhBH4Arh9bShY/7MpsXDj7UWhn14lIeI8G1zI4rlo/UT3RsBcGb0VJyeTKW85KFleiJACBguswC58x7cfx1yfW8kBOYRyWYJQDAdRTmqOCEA6YJi0zOYyKXaWeqVephm30vH5G+ZvBdmdpn7NKpFxBf2CAZSsW35dyTjybdsaJC/v7GsM2smx8GVTo7pT6mCDHAZHuKgeO/yBJry2znXfi0uA1gBzXAH53D/IsRec500lfSPI522gjmI/ta+bC6h4jXpCyrbXsW5Sly8bXHs71h+fbd/p8zh1XRGw6/0YS0mzQM6ogQBMWd05/eLR0OmdrLP2MixCHDhtIrBwOuqRa7IUN1Eim4LsA8GoJQr6ZQRwHEbRB5bpP6OUpQFg==; 5:zIZExMwYBSlHn/5L12r7FzsQ35tbd/+rK0t2NWGaOPU7V/BQXvdYTExVAwKUSZrZ7l3+Xmz4twG7Iis5Ij3rkfnWZNEcskzrjdqmc0qEDezGl8DUGH9t3zuOJEo7uvoUFRQpGDu7tywq08enMf1DnbuMI4/USFG5sIG91n/qS4A=; 7:XJrhjbC/EDpU6wRWDU98evDCdpPJPs3WhDB0NnI3RQ0aX2zSFzrdyvi6/6DzVBhu6auq+vhD7frtWz2f71DPwnLpf3lMHDfUvf7eNFOrz/zn78HaAPL96WPKUJQWJvawYuhAub46jBTXcwCUHI3k/Q== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: a245846e-b67b-4408-88f8-08d655e64159 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390098)(7020095)(4652040)(8989299)(5600074)(711020)(4618075)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:VI1PR0801MB1903; x-ms-traffictypediagnostic: VI1PR0801MB1903: x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(3002001)(3231453)(999002)(944501410)(52105112)(10201501046)(6055026)(148016)(149066)(150057)(6041310)(20161123560045)(20161123564045)(20161123558120)(20161123562045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(201708071742011)(7699051)(76991095); SRVR:VI1PR0801MB1903; BCL:0; PCL:0; RULEID:; SRVR:VI1PR0801MB1903; x-forefront-prvs: 0871917CDA x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(396003)(136003)(366004)(39860400002)(346002)(376002)(199004)(189003)(40434004)(186003)(99286004)(26005)(256004)(5024004)(102836004)(71200400001)(14444005)(5660300001)(66066001)(316002)(110136005)(53546011)(76176011)(6506007)(71190400001)(25786009)(33656002)(966005)(229853002)(2906002)(606006)(74316002)(14454004)(72206003)(7736002)(478600001)(790700001)(6246003)(4326008)(86362001)(105586002)(6116002)(3846002)(6436002)(7696005)(8936002)(8676002)(68736007)(81156014)(81166006)(106356001)(236005)(55016002)(53936002)(486006)(11346002)(476003)(6306002)(446003)(54896002)(9686003)(97736004); DIR:OUT; SFP:1101; SCL:1; SRVR:VI1PR0801MB1903; H:VI1PR0801MB2112.eurprd08.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: arm.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: QRVGvZ/sXmiumZZQpmDtR170dHyRyaPmW86RpRqYUBYptCvRMTyftkUsSQUyuf3qvBggLuPGKZb/h1yeMCCTjwYEtH+5EoJwLqH7JUlZRWIPQolqRW71TNVClzwoZYcnDHdvNoZ5IucFSTGLWrF0qZQxVnbmz62Am2r3cqgqBPX+mWcqW4WOfSLpP+2epj3qhdL1zk6xv2y6otJVojYeD8ElvaNTlFg/ve3hhJTggzQf4QT8xKF/oJjA+GdPInuxeXdVvyd2UOceGkXJKk057iS/7j69o94Fbl2Z/TKm9hS1I0UHtojYM4dcNlMpKjZeELggr08/FaX1IoKsykgijTRcxKxSjxudEbFwFLizlIY= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_VI1PR0801MB2112B63107CE5F5905209546FAD20VI1PR0801MB2112_" MIME-Version: 1.0 X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-Network-Message-Id: a245846e-b67b-4408-88f8-08d655e64159 X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Nov 2018 10:34:34.5338 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR0801MB1903 Archived-At: Subject: Re: [Ace] IPR Conformance check for draft-ietf-ace-cwt-proof-of-possession X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2018 10:34:45 -0000 --_000_VI1PR0801MB2112B63107CE5F5905209546FAD20VI1PR0801MB2112_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBhbSBub3QgYXdhcmUgb2YgYW55IElQUnMgcmVnYXJkaW5nIGRyYWZ0LWlldGYtYWNlLWN3dC1w cm9vZi1vZi1wb3NzZXNzaW9uDQoNCkZyb206IEFjZSA8YWNlLWJvdW5jZXNAaWV0Zi5vcmc+IE9u IEJlaGFsZiBPZiBTYW11ZWwgRXJkdG1hbg0KU2VudDogVGh1cnNkYXksIE5vdmVtYmVyIDI5LCAy MDE4IDY6NDkgQU0NClRvOiBSb21hbiBEYW55bGl3IDxyZGRAY2VydC5vcmc+DQpDYzogYWNlIDxh Y2VAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW0FjZV0gSVBSIENvbmZvcm1hbmNlIGNoZWNrIGZv ciBkcmFmdC1pZXRmLWFjZS1jd3QtcHJvb2Ytb2YtcG9zc2Vzc2lvbg0KDQpBcyBhIGNvLWF1dGhv ciwgSSBkb24ndCBob2xkIGFueSBJUFIgbm9yIGFtIEkgYXdhcmUgb2YgYW55IHJlbGF0ZWQgdG8g dGhpcyBkcmFmdA0KDQpPbiBUdWUsIE5vdiAyNywgMjAxOCBhdCAzOjQ0IFBNIFJvbWFuIERhbnls aXcgPHJkZEBjZXJ0Lm9yZzxtYWlsdG86cmRkQGNlcnQub3JnPj4gd3JvdGU6DQpIZWxsbyBkcmFm dC1pZXRmLWFjZS1jd3QtcHJvb2Ytb2YtcG9zc2Vzc2lvbiBhdXRob3JzLA0KKEhpIE1pa2UsIEx1 ZHdpZywgR29lcmFuLCBTYW11ZWwgYW5kIEhhbm5lcywpDQoNCkFzIHRoZSBzaGVwaGVyZCBmb3Ig ZHJhZnQtaWV0Zi1hY2UtY3d0LXByb29mLW9mLXBvc3Nlc3Npb24sIEknZCBsaWtlIHRvIGNvbmZp cm0gd2l0aCB0aGUgYXV0aG9ycyB0aGF0IGFsbCBJUFIgZGlzY2xvc3VyZXMgaGF2ZSBvY2N1cnJl ZCBwZXIgUkZDNjcwMjoNCg0KLS1bIHNoZXBoZXJkIHF1ZXN0aW9ucyBdLS0NCg0KKDcpIEhhcyBl YWNoIGF1dGhvciBjb25maXJtZWQgdGhhdCBhbnkgYW5kIGFsbCBhcHByb3ByaWF0ZSBJUFIgZGlz Y2xvc3VyZXMgcmVxdWlyZWQgZm9yIGZ1bGwgY29uZm9ybWFuY2Ugd2l0aCB0aGUgcHJvdmlzaW9u cyBvZiBCQ1AgNzggYW5kIEJDUCA3OSBoYXZlIGFscmVhZHkgYmVlbiBmaWxlZC4gSWYgbm90LCBl eHBsYWluIHdoeT8NCg0KLS1bZW5kIHF1ZXN0aW9uXS0tDQoNCkNhbiB5b3UgcGxlYXNlIHJlc3Bv bmQgdG8gdGhlIGxpc3QgYW5zd2VyaW5nIHRoaXMgcXVlc3Rpb24gKGUuZy4sICJBcyBhIGNvLWF1 dGhvciwgSSBkb24ndCBob2xkIGFueSBJUFIgbm9yIGFtIEkgYXdhcmUgb2YgYW55IHJlbGF0ZWQg dG8gdGhpcyBkcmFmdCIpLg0KDQpUaGFua3MsDQpSb21hbg0KDQpfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KQWNlIG1haWxpbmcgbGlzdA0KQWNlQGlldGYu b3JnPG1haWx0bzpBY2VAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xp c3RpbmZvL2FjZQ0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwg YW5kIGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2 aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90 aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVu dHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUg b3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0K --_000_VI1PR0801MB2112B63107CE5F5905209546FAD20VI1PR0801MB2112_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkRlbmdYaWFuOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAx IDE7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUg NSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlxARGVuZ1hpYW4i Ow0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMg Ki8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBp bjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZh bWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJ e21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1 bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1z dHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVy bGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21z by1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJn aW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0 OjBpbjsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNl cmlmO30NCnNwYW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5 Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCi5Nc29DaHBEZWZhdWx0DQoJ e21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5z LXNlcmlmO30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCgltYXJn aW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldv cmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hh cGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlm XS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQi Pg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94 bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1HQiIgbGluaz0iYmx1ZSIg dmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+SSBhbSBub3QgYXdhcmUgb2YgYW55IElQUnMgcmVnYXJkaW5nIGRyYWZ0LWlldGYt YWNlLWN3dC1wcm9vZi1vZi1wb3NzZXNzaW9uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxz cGFuIGxhbmc9IkVOLVVTIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gbGFuZz0iRU4tVVMiPiBBY2Ug Jmx0O2FjZS1ib3VuY2VzQGlldGYub3JnJmd0Ow0KPGI+T24gQmVoYWxmIE9mIDwvYj5TYW11ZWwg RXJkdG1hbjxicj4NCjxiPlNlbnQ6PC9iPiBUaHVyc2RheSwgTm92ZW1iZXIgMjksIDIwMTggNjo0 OSBBTTxicj4NCjxiPlRvOjwvYj4gUm9tYW4gRGFueWxpdyAmbHQ7cmRkQGNlcnQub3JnJmd0Ozxi cj4NCjxiPkNjOjwvYj4gYWNlICZsdDthY2VAaWV0Zi5vcmcmZ3Q7PGJyPg0KPGI+U3ViamVjdDo8 L2I+IFJlOiBbQWNlXSBJUFIgQ29uZm9ybWFuY2UgY2hlY2sgZm9yIGRyYWZ0LWlldGYtYWNlLWN3 dC1wcm9vZi1vZi1wb3NzZXNzaW9uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+QXMgYSBjby1hdXRob3IsIEkgZG9uJ3QgaG9sZCBhbnkgSVBSIG5vciBhbSBJIGF3YXJlIG9m IGFueSByZWxhdGVkIHRvIHRoaXMgZHJhZnQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPk9uIFR1ZSwgTm92IDI3LCAyMDE4IGF0IDM6NDQgUE0gUm9tYW4gRGFu eWxpdyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJkZEBjZXJ0Lm9yZyI+cmRkQGNlcnQub3JnPC9hPiZn dDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3Jk ZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAw aW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5IZWxsbyBkcmFmdC1pZXRmLWFjZS1jd3QtcHJvb2Ytb2YtcG9zc2Vzc2lvbiBh dXRob3JzLDxicj4NCihIaSBNaWtlLCBMdWR3aWcsIEdvZXJhbiwgU2FtdWVsIGFuZCBIYW5uZXMs KTxicj4NCjxicj4NCkFzIHRoZSBzaGVwaGVyZCBmb3IgZHJhZnQtaWV0Zi1hY2UtY3d0LXByb29m LW9mLXBvc3Nlc3Npb24sIEknZCBsaWtlIHRvIGNvbmZpcm0gd2l0aCB0aGUgYXV0aG9ycyB0aGF0 IGFsbCBJUFIgZGlzY2xvc3VyZXMgaGF2ZSBvY2N1cnJlZCBwZXIgUkZDNjcwMjo8YnI+DQo8YnI+ DQotLVsgc2hlcGhlcmQgcXVlc3Rpb25zIF0tLTxicj4NCjxicj4NCig3KSBIYXMgZWFjaCBhdXRo b3IgY29uZmlybWVkIHRoYXQgYW55IGFuZCBhbGwgYXBwcm9wcmlhdGUgSVBSIGRpc2Nsb3N1cmVz IHJlcXVpcmVkIGZvciBmdWxsIGNvbmZvcm1hbmNlIHdpdGggdGhlIHByb3Zpc2lvbnMgb2YgQkNQ IDc4IGFuZCBCQ1AgNzkgaGF2ZSBhbHJlYWR5IGJlZW4gZmlsZWQuIElmIG5vdCwgZXhwbGFpbiB3 aHk/PGJyPg0KPGJyPg0KLS1bZW5kIHF1ZXN0aW9uXS0tPGJyPg0KPGJyPg0KQ2FuIHlvdSBwbGVh c2UgcmVzcG9uZCB0byB0aGUgbGlzdCBhbnN3ZXJpbmcgdGhpcyBxdWVzdGlvbiAoZS5nLiwgJnF1 b3Q7QXMgYSBjby1hdXRob3IsIEkgZG9uJ3QgaG9sZCBhbnkgSVBSIG5vciBhbSBJIGF3YXJlIG9m IGFueSByZWxhdGVkIHRvIHRoaXMgZHJhZnQmcXVvdDspLjxicj4NCjxicj4NClRoYW5rcyw8YnI+ DQpSb21hbjxicj4NCjxicj4NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fPGJyPg0KQWNlIG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1haWx0bzpBY2VA aWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5BY2VAaWV0Zi5vcmc8L2E+PGJyPg0KPGEgaHJlZj0i aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9hY2UiIHRhcmdldD0iX2JsYW5r Ij5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2FjZTwvYT48bzpwPjwvbzpw PjwvcD4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9kaXY+DQpJTVBPUlRBTlQgTk9USUNFOiBU aGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRl bnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRl bmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQg ZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQg Zm9yIGFueSBwdXJwb3NlLA0KIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFu eSBtZWRpdW0uIFRoYW5rIHlvdS4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_VI1PR0801MB2112B63107CE5F5905209546FAD20VI1PR0801MB2112_-- From nobody Thu Nov 29 12:59:36 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B2B49130EC6 for ; Thu, 29 Nov 2018 12:59:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wJx3fZvaTIsS for ; Thu, 29 Nov 2018 12:59:32 -0800 (PST) Received: from mail-io1-xd36.google.com (mail-io1-xd36.google.com [IPv6:2607:f8b0:4864:20::d36]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E8A90127B92 for ; Thu, 29 Nov 2018 12:59:31 -0800 (PST) Received: by mail-io1-xd36.google.com with SMTP id x6so2742172ioa.9 for ; Thu, 29 Nov 2018 12:59:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=w5EZ//YYIG+08fgRptuMnMRlM2HxRtx1Hv0LglrutVo=; b=lQ6Jnop05NVrGONydq0MXGvBUIeD+greKkauNUOzOycXJnxWgrMvHT2TEtcA6ADbT7 kRDMQENQNPGjGkFNaZUsqre6kE9essMSvWRAbc4NilE6bL/Q+phlpcQ9l8ycDeuAzW++ /0ZRm1PIa5nP92gYCh6+PrlxcN/6PvvIaXY3l2Ae0QfM1vdjytvL1YndJXB0N0D75g82 shANvHCpZG5k2FM3BCgAiF5GiVLhIkl1JI/DZsxL2zldzpntXJ5/AMcteAMUmeshKYmg lzdiczWlTP9GECIOPec21hRD61pdBOO13+pmhVLpXLEvOKjPNP1h35ClQFQwmsqLauul 87lg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=w5EZ//YYIG+08fgRptuMnMRlM2HxRtx1Hv0LglrutVo=; b=cC/IJO1ukigOKASlM8GdeycM0lN89QkgVDkI8x7WmpBqnl11axz0K3RLJ3C9cYME9s p2Ej/LWCLpb1S8FXYS0yEuaKumOqtG0p/dakiEA6hiLfxJdo1uG+beULAmDUDsaaW4Y2 aAKhROY4XgerF+oBXo2SLeEJ8opvKi9tUnuxOsNOJR7B/bJLdLj9rif+10j6ytnr/+2C jQH/qufq7dLxVW/fY3ysYSoJk3SQTSBk+EXbQAXrmo4Lqsr6THqZC61YAWsHf9XHm0Ii 470M0r7mhfFkLpE2beiyvL0m/MAH8FDwIsxjHHYVeLPAIqqGUEgq0l9j8q2isKoAJZcA AQ9g== X-Gm-Message-State: AA+aEWZiuPU8j34VmMOPhLvnAYKHGZ9T/UPC/a3OSAVjpEBdVILqxXGX gv/JINuZbamE6GweKApdIIPQwlv6ZJVhQVkHdZJc2Fh6 X-Google-Smtp-Source: AFSGD/WdhE5M9PCrYT/NGR/EIMy0SZk4Oc3vnodAk0l+SEAz0FHGkUOfPP8vqycT3dTsedtayPLcxOwkz2onsd+AepI= X-Received: by 2002:a5e:da48:: with SMTP id o8mr2812163iop.165.1543525171276; Thu, 29 Nov 2018 12:59:31 -0800 (PST) MIME-Version: 1.0 References: <359EC4B99E040048A7131E0F4E113AFC0184C4376E@marathon> In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC0184C4376E@marathon> From: Cigdem Sengul Date: Thu, 29 Nov 2018 20:59:20 +0000 Message-ID: To: rdd@cert.org Cc: ace@ietf.org Content-Type: multipart/alternative; boundary="000000000000893200057bd3f505" Archived-At: Subject: Re: [Ace] Draft IETF 103 minutes available X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Nov 2018 20:59:34 -0000 --000000000000893200057bd3f505 Content-Type: text/plain; charset="UTF-8" Hello Ace, Thank you for the detailed write-up of the meeting. In the minutes, there was an exchange between Ludwig and Jim about the MQTT draft, we submitted, with the understanding that the authors may not be ready to take it to a WG yet. As one of the authors, I can confirm that we've been keeping the draft up-to-date, and doing our best to answer comments/reviews. As IETF newbies, we need a bit more direction on the next steps to take the draft to the WG. This way we can ready ourselves for Prague, where we hope to be present in the meeting. Thank you, --Cigdem Sengul On Tue, Nov 20, 2018 at 2:32 AM Roman Danyliw wrote: > Hello! > > Thanks to Ivaylo Petrov, a preliminary version of the minutes from the > Bangkok meeting is available at: > > https://datatracker.ietf.org/meeting/103/materials/minutes-103-ace-00 > > If you have corrections or revisions, please provide it to the chairs. > > Regards, > Roman and Jim > > _______________________________________________ > Ace mailing list > Ace@ietf.org > https://www.ietf.org/mailman/listinfo/ace > --000000000000893200057bd3f505 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hello Ace,=C2=A0
Thank you for the detailed write-up o= f the meeting.=C2=A0
=C2=A0
In the minutes, there was an exchange between Ludwig and Ji= m about the MQTT draft, we submitted, with the understanding that the autho= rs may not be ready to take it to a WG yet.=C2=A0

As one of the authors, I can confirm that we'v= e been keeping the draft up-to-date, and doing our best to answer comments/= reviews. As IETF newbies, we need a bit more direction on the next steps to= take the draft to the WG.=C2=A0
This way we can ready ourselves for Prague, where we hope= to be present in the meeting.=C2=A0

Thank you,=C2=A0
--Cigdem Sengul


On Tue, Nov 20, 2018 at 2:32 AM Roman Danyliw <rdd@cert.org> wrote:
Hello!

Thanks to Ivaylo Petrov, a preliminary version of the minutes from the Bang= kok meeting is available at:

https://datatracker.ietf.org/me= eting/103/materials/minutes-103-ace-00

If you have corrections or revisions, please provide it to the chairs.

Regards,
Roman and Jim

_______________________________________________
Ace mailing list
Ace@ietf.org
https://www.ietf.org/mailman/listinfo/ace
--000000000000893200057bd3f505-- From nobody Fri Nov 30 07:42:32 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 806DB130E0C for ; Fri, 30 Nov 2018 07:42:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.781 X-Spam-Level: X-Spam-Status: No, score=-4.781 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.46, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FROM_EXCESS_BASE64=0.979, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com header.b=UpFDT0RK; dkim=pass (1024-bit key) header.d=ericsson.com header.b=U4hsRu2w Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hlAdRTm1VKle for ; Fri, 30 Nov 2018 07:42:20 -0800 (PST) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 16519130DFB for ; Fri, 30 Nov 2018 07:42:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1543592538; x=1546184538; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=jBvx68rCOg4+9bpUEhy80LCVanppjcBYSuoUQkKUhX0=; b=UpFDT0RKHPNjl4LcK0V/mI2HuhOyoucW5bD66dL4u/+qxBbPgEmNGyzF6a+ZtDbT rFa4Pqi5x/zjlw15VF8y2AzQwr7+FWDoR47kCq5wyzbwYCdjbiWISWjpJljB3V9J ypzxcEm4duVDBprZWsMN9lKe2N/UNyT3LsKmh35KL9c=; X-AuditID: c1b4fb3a-477ff70000002747-e1-5c015a5aa1ae Received: from ESESBMB503.ericsson.se (Unknown_Domain [153.88.183.116]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id DA.CA.10055.A5A510C5; Fri, 30 Nov 2018 16:42:18 +0100 (CET) Received: from ESESBMR502.ericsson.se (153.88.183.134) by ESESBMB503.ericsson.se (153.88.183.170) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Fri, 30 Nov 2018 16:42:17 +0100 Received: from ESESSMB505.ericsson.se (153.88.183.166) by ESESBMR502.ericsson.se (153.88.183.134) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Fri, 30 Nov 2018 16:42:17 +0100 Received: from EUR04-HE1-obe.outbound.protection.outlook.com (153.88.183.157) by ESESSMB505.ericsson.se (153.88.183.166) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3 via Frontend Transport; Fri, 30 Nov 2018 16:42:17 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=jBvx68rCOg4+9bpUEhy80LCVanppjcBYSuoUQkKUhX0=; b=U4hsRu2w/Z+Rg+4x5+hx3oHVmUu2beKeFhibDYbgPIAnK23hTlwNL6TmrJBO8H1zGvlPbw5qITlNlupqln8hPsKqTrf9xIm9A5nMBOIrKp+aqSJjToAf+H+8G1x/yrXNpEJ1jKs3cjU2n9HnRFFCEnaFwH0l9H+igBMcSglX8BU= Received: from AM6PR07MB4822.eurprd07.prod.outlook.com (20.177.190.219) by AM6PR07MB4088.eurprd07.prod.outlook.com (52.134.116.157) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1404.13; Fri, 30 Nov 2018 15:42:17 +0000 Received: from AM6PR07MB4822.eurprd07.prod.outlook.com ([fe80::3d6f:cb36:583b:269d]) by AM6PR07MB4822.eurprd07.prod.outlook.com ([fe80::3d6f:cb36:583b:269d%3]) with mapi id 15.20.1404.011; Fri, 30 Nov 2018 15:42:17 +0000 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Roman Danyliw , "ace@ietf.org" Thread-Topic: [Ace] IPR Conformance check for draft-ietf-ace-cwt-proof-of-possession Thread-Index: AQHUiMNFftpz+PHmiUWh8jN5849xkQ== Date: Fri, 30 Nov 2018 15:42:16 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/10.13.0.181109 authentication-results: spf=none (sender IP is ) smtp.mailfrom=goran.selander@ericsson.com; x-originating-ip: [192.176.1.85] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM6PR07MB4088; 6:QMOD6mpL8bCDMRexBa9kEjugE2ULxOpH8JnjwpuTO5T0QdEfsMsZCxj3qVhgZOsxb7Sa/38qc9zi5tR8ZRSp9RWqkX37d1fm14lp2CdGtd2dmELr9iB/JYLpqGtuRmSdAmeab8hrnvWBxoD5/celljAtfCkQFsPNILE+/dQJbRflZmbiM6aJrsCNA8ruPGv+dE48eU0L1whIP6NRsqR6VT6swL7ZbRBOkC9Y+oo6CqtoGxmoiUFawrLsYhO8hHsa72SXtlg/hfDd9U354cJT4Ld0LP8r+5x/2lhVqbUwBjgYPWK2tJkzKyyIGgcBmW9IrMTnA7IBlf2gLxuDXGqCg1lR3nrukZn70xNZQPhcJZ65OcXz7YlOYLeYNKx66QFJhE9QJHa3Dco+zxEebZx1poEpL9S1bd0XBiId2n7R0lGgKPzcGLKZEZp4j6sMZ450YY2j1bvZjQS1vjXmmAw3Ww==; 5:IzzvaEoP38lcu/W1KfaXzL0m86yjSe5XoAym5v9rdU3OxRfMyeUoq2oB0ytULCfMlwCw4PwP1Sx+svQoB5lC3NK6uUqv0/mL//Uo8pqgPXAHfFyUULFyjR096un8q8XxomHDVqegp0OhvIlqfsAGSlMdTkP1qJnnVxLg2qHh+Tc=; 7:m01l59U+YH/n9u2UnYXf925us0gXuQIOcM83vnhFCeRGut03OciwdLSIRQA3CDrUMBj/gw5Z23rk4LnKWVNJl1VNW75EFRi6DE3PlmOfjl3YZPsT3a4UL90ukH1nA45VWTRbET7AfiRkkO6BKqVfzA== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 333dee9f-92c2-4d9d-fc2a-08d656da683e x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390098)(7020095)(4652040)(8989299)(5600074)(711020)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(7193020); SRVR:AM6PR07MB4088; x-ms-traffictypediagnostic: AM6PR07MB4088: x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(3231453)(999002)(944501410)(52105112)(10201501046)(3002001)(148016)(149066)(150057)(6041310)(20161123562045)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123558120)(201708071742011)(7699051)(76991095); SRVR:AM6PR07MB4088; BCL:0; PCL:0; RULEID:; SRVR:AM6PR07MB4088; x-forefront-prvs: 087223B4DA x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(366004)(396003)(346002)(136003)(39860400002)(189003)(199004)(68736007)(82746002)(97736004)(6512007)(316002)(6436002)(4001150100001)(33656002)(53936002)(6116002)(486006)(966005)(3846002)(58126008)(110136005)(2616005)(476003)(66066001)(86362001)(478600001)(7736002)(99286004)(2501003)(305945005)(2906002)(6486002)(229853002)(85182001)(36756003)(6246003)(105586002)(6506007)(186003)(256004)(14444005)(26005)(8676002)(6306002)(102836004)(81166006)(5660300001)(83716004)(81156014)(85202003)(71190400001)(106356001)(14454004)(71200400001)(25786009)(8936002)(66574009); DIR:OUT; SFP:1101; SCL:1; SRVR:AM6PR07MB4088; H:AM6PR07MB4822.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: VJxQrCTS7w2SxbrFr/LNQiMKuNtp4e0Meisjx8Lo9iBUYVizy20uy9XwTS7AeEZPyvH4zni9FyhzcMg0tg1eTo9EWnTECUrkWoEJQps1c4AQyQfuAPTiVMkthxA24OLCixiSenmmkPHshD9kwIdE0Lajl2xlW837zLXTPQrAJ2EfpRsDVpj3r0k9A/g2uZvu3+Z/FKIRanE0YjH6JrtBQFka/RIFHceaiemahE7EJIU7+BoXBLb8X8Yc4iMCgY9sT/yNMXflUDXhEzFg/JgwP1Rc1W2w3podZ5hJ73TvD5I8X92T3dKP7KHZTkfdZ+msejsnwTHTK3e5Gtscv2tGQceUjcrWALDJlyiUpLu0b8w= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-ID: <03EFD5F8B1A1034EAC75AC74CAB911E1@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 333dee9f-92c2-4d9d-fc2a-08d656da683e X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Nov 2018 15:42:17.0227 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR07MB4088 X-OriginatorOrg: ericsson.com X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupjleLIzCtJLcpLzFFi42KZGbG9RDcqijHG4MVtEYvv33qYLT63sTkw eczY4OOxZMlPpgCmKC6blNSczLLUIn27BK6M45MPMRVs4q7YvqyJvYGxh7uLkZNDQsBE4sSf 2+wgtpDAEUaJxTcCuxi5gOxvjBITf51ignOudreyQjhLmCTmzrrHBuKwCExgljj2qJMRIjOV SeLO49lQZY8YJf5dPQA2mU3AReJBwyMmEFtEwF7iy8OzbCC2sECoxLy791kg4mES0x6/gLL1 JGbN3MEIYrMIqEo8+3QcKM7BwQvSe0sNJMwoICbx/dQasJHMAuISt57MZ4J4SEBiyZ7zzBC2 qMTLx/9YQWxRAX2J1lP97BC9cRJN6xrYQEZKCChIPNzqB1EuK3FpfjfYLxIC19gkzv35xAiR 0JX4MHUq1ExfiQVftrBBFF1glLg19yk7xCAtiY0zLCFqsiVW/X4HVS8nsar3IQtE/XlmiW1X WlghEjISW/dfZ5zAaDALyQ+zgEYxC2hKrN+lDxH2kJhy+jQjhK0oMaX7ITuIzSsgKHFy5hOW BYysqxhFi1OLi3PTjYz0Uosyk4uL8/P08lJLNjECU8nBLb+tdjAefO54iFGAg1GJh5ctmDFG iDWxrLgy9xCjBAezkgjvuTaGGCHelMTKqtSi/Pii0pzU4kOM0hwsSuK8TmkWUUIC6Yklqdmp qQWpRTBZJg5OqQbGKXYrDtkv0uIuD8j+vOjlxMgdqxfs9tx24acu1/w9NtVKnDF7bDx2P3vZ qHlwQ+nt2IVF3AaPBZ5vfs3Pkr5N/xe79Aqhmjl2i8t6fLmErQ4vXX8xPry49gtnXJXKpS/L OH9XSSnsXOS7KFI4sr3bufbp0tUvAtw45LdfD6rbaPGYY8rJ6v5MJZbijERDLeai4kQAzv3H jSEDAAA= Archived-At: Subject: Re: [Ace] IPR Conformance check for draft-ietf-ace-cwt-proof-of-possession X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2018 15:42:31 -0000 DQpJIGF3YXJlIG9mIGFueSBJUFIgcmVsYXRlZCB0byB0aGlzIGRyYWZ0Lg0KDQpCUg0KR8O2cmFu DQoNCu+7v09uIDIwMTgtMTEtMjcsIDE1OjQ0LCAiQWNlIG9uIGJlaGFsZiBvZiBSb21hbiBEYW55 bGl3IiA8YWNlLWJvdW5jZXNAaWV0Zi5vcmcgb24gYmVoYWxmIG9mIHJkZEBjZXJ0Lm9yZz4gd3Jv dGU6DQoNCiAgICBIZWxsbyBkcmFmdC1pZXRmLWFjZS1jd3QtcHJvb2Ytb2YtcG9zc2Vzc2lvbiBh dXRob3JzLA0KICAgIChIaSBNaWtlLCBMdWR3aWcsIEdvZXJhbiwgU2FtdWVsIGFuZCBIYW5uZXMs KQ0KICAgIA0KICAgIEFzIHRoZSBzaGVwaGVyZCBmb3IgZHJhZnQtaWV0Zi1hY2UtY3d0LXByb29m LW9mLXBvc3Nlc3Npb24sIEknZCBsaWtlIHRvIGNvbmZpcm0gd2l0aCB0aGUgYXV0aG9ycyB0aGF0 IGFsbCBJUFIgZGlzY2xvc3VyZXMgaGF2ZSBvY2N1cnJlZCBwZXIgUkZDNjcwMjoNCiAgICANCiAg ICAtLVsgc2hlcGhlcmQgcXVlc3Rpb25zIF0tLQ0KICAgIA0KICAgICg3KSBIYXMgZWFjaCBhdXRo b3IgY29uZmlybWVkIHRoYXQgYW55IGFuZCBhbGwgYXBwcm9wcmlhdGUgSVBSIGRpc2Nsb3N1cmVz IHJlcXVpcmVkIGZvciBmdWxsIGNvbmZvcm1hbmNlIHdpdGggdGhlIHByb3Zpc2lvbnMgb2YgQkNQ IDc4IGFuZCBCQ1AgNzkgaGF2ZSBhbHJlYWR5IGJlZW4gZmlsZWQuIElmIG5vdCwgZXhwbGFpbiB3 aHk/DQogICAgDQogICAgLS1bZW5kIHF1ZXN0aW9uXS0tDQogICAgDQogICAgQ2FuIHlvdSBwbGVh c2UgcmVzcG9uZCB0byB0aGUgbGlzdCBhbnN3ZXJpbmcgdGhpcyBxdWVzdGlvbiAoZS5nLiwgIkFz IGEgY28tYXV0aG9yLCBJIGRvbid0IGhvbGQgYW55IElQUiBub3IgYW0gSSBhd2FyZSBvZiBhbnkg cmVsYXRlZCB0byB0aGlzIGRyYWZ0IikuDQogICAgDQogICAgVGhhbmtzLA0KICAgIFJvbWFuDQog ICAgDQogICAgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18N CiAgICBBY2UgbWFpbGluZyBsaXN0DQogICAgQWNlQGlldGYub3JnDQogICAgaHR0cHM6Ly93d3cu aWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9hY2UNCiAgICANCg0K From nobody Fri Nov 30 08:50:17 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DFED9130E08 for ; Fri, 30 Nov 2018 08:50:10 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 91uuJNPwXJgW for ; Fri, 30 Nov 2018 08:50:09 -0800 (PST) Received: from veto.sei.cmu.edu (veto.sei.cmu.edu [147.72.252.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 12C65130E02 for ; Fri, 30 Nov 2018 08:50:08 -0800 (PST) Received: from korb.sei.cmu.edu (korb.sei.cmu.edu [10.64.21.30]) by veto.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id wAUGo5g0019078 for ; Fri, 30 Nov 2018 11:50:05 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 veto.sei.cmu.edu wAUGo5g0019078 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1543596605; bh=Scx2BCSPxKkECRixCgUgMsw0Uq7DeBXwPx+tWL8drro=; h=From:To:Subject:Date:From; b=Q1Y7UXWuXDuHlIvD0NUej6YQAPS6KBoLsIvkcxfeNMSELdObbG8DdhNM0dZHoW08G 9adKs3kMrG6Ql+PgAd3PJinfMIPp9UImURVeX3EBJIUkhaq/0qxtNuv4weacXGp4Yn 1bXxWSjssUaAIuRD1yvejdF+ssG+ctZC8r+cWgH8= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by korb.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id wAUGo3vf005772 for ; Fri, 30 Nov 2018 11:50:03 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASSINA.ad.sei.cmu.edu ([10.64.28.249]) with mapi id 14.03.0415.000; Fri, 30 Nov 2018 11:50:02 -0500 From: Roman Danyliw To: "ace@ietf.org" Thread-Topic: Idnits on draft-ietf-ace-cwt-proof-of-possession-05 Thread-Index: AdSIy7+vhYiDadVqQGmJm7v2n5eOiA== Date: Fri, 30 Nov 2018 16:50:01 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0184C526B3@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Ace] Idnits on draft-ietf-ace-cwt-proof-of-possession-05 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2018 16:50:11 -0000 Hi! As part of the shepherd review, I ran idnits on draft-ietf-ace-cwt-proof-of= -possession-05. The following nits were found. Could these please be fixe= d in a revised draft. --[ snip ]-- =20 Checking nits according to https://www.ietf.org/id-info/checklist : -------------------------------------------------------------------------= --- ** There is 1 instance of too long lines in the document, the longest one being 1 character in excess of 72. Checking references for intended status: Proposed Standard -------------------------------------------------------------------------= --- ** Obsolete normative reference: RFC 5226 (Obsoleted by RFC 8126) =3D=3D Outdated reference: A later version (-17) exists of draft-ietf-ace-oauth-authz-16 -- Obsolete informational reference (is this intentional?): RFC 7159 (Obsoleted by RFC 8259) Summary: 2 errors (**), 0 flaws (~~), 1 warning (=3D=3D), 2 comments (= --). --[ snip ]-- The line which exceeds 72 characters is in Section 3.4. Specifically: /protected header / h'A1010A' /{ \alg\ 1:10 \AES-CCM-16-64-128\}/, Regards, Roman From nobody Fri Nov 30 08:50:37 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5DEB5130E17 for ; Fri, 30 Nov 2018 08:50:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.781 X-Spam-Level: X-Spam-Status: No, score=-4.781 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.46, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FROM_EXCESS_BASE64=0.979, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com header.b=MJA+Gd5Z; dkim=fail (1024-bit key) reason="fail (body has been altered)" header.d=ericsson.com header.b=k4uGGG59 Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v8wL9IU94iOr for ; Fri, 30 Nov 2018 08:50:28 -0800 (PST) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D934E130E08 for ; Fri, 30 Nov 2018 08:50:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; d=ericsson.com; s=mailgw201801; c=relaxed/simple; q=dns/txt; i=@ericsson.com; t=1543596626; x=1546188626; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version:Content-Type: Content-Transfer-Encoding:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:In-Reply-To:References:List-Id: List-Help:List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=TIt+l6xER5LLDxANEo9IAST4vTahU0wyyvaXTRXZGOs=; b=MJA+Gd5ZR2DcuMBnYu9LIJPnOwDn5wItrqNrtqgRzUCzGck5KpZinFXsV6mSewkb aSltx0fRdVOXucSsVdb1bL0INKav3STZg1QnrwFI7NOeG75BDA1eOrXKBv2G2RYc l2ybWbaW5EoGwxtsU9STUiuwC90PIib+rnNdbhd/EHQ=; X-AuditID: c1b4fb3a-477ff70000002747-34-5c016a52bc9c Received: from ESESBMB501.ericsson.se (Unknown_Domain [153.88.183.114]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id 45.A5.10055.25A610C5; Fri, 30 Nov 2018 17:50:26 +0100 (CET) Received: from ESESBMR502.ericsson.se (153.88.183.134) by ESESBMB501.ericsson.se (153.88.183.168) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Fri, 30 Nov 2018 17:50:25 +0100 Received: from ESESBMB505.ericsson.se (153.88.183.172) by ESESBMR502.ericsson.se (153.88.183.134) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3; Fri, 30 Nov 2018 17:50:25 +0100 Received: from EUR04-HE1-obe.outbound.protection.outlook.com (153.88.183.157) by ESESBMB505.ericsson.se (153.88.183.172) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1466.3 via Frontend Transport; Fri, 30 Nov 2018 17:50:25 +0100 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=EI5Wr809hA+s9VwNQZULKoZveuczIqRF0wGDqLQnpYE=; b=k4uGGG591eHpBWJ5fBlp/wKWhE0yK3cyIn20LCqFODzIvBV6fBWGXSanoxfDzfm4SLNiRQhH00Md/3F+feAMwnMK7o8jPKZbdrHLdcB0WGnh5chuKDtU6BsYYMQgSYGWQNlwZDlw6+VBjp/lLs8awrVWglXTrsnx15pWWzFGwBY= Received: from AM6PR07MB4822.eurprd07.prod.outlook.com (20.177.190.219) by AM6PR07MB3862.eurprd07.prod.outlook.com (52.134.115.147) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1404.8; Fri, 30 Nov 2018 16:50:24 +0000 Received: from AM6PR07MB4822.eurprd07.prod.outlook.com ([fe80::3d6f:cb36:583b:269d]) by AM6PR07MB4822.eurprd07.prod.outlook.com ([fe80::3d6f:cb36:583b:269d%3]) with mapi id 15.20.1404.011; Fri, 30 Nov 2018 16:50:24 +0000 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Roman Danyliw , "ace@ietf.org" Thread-Topic: [Ace] IPR Conformance check for draft-ietf-ace-cwt-proof-of-possession Thread-Index: AQHUiMNFftpz+PHmiUWh8jN5849xkaVoiAwA Date: Fri, 30 Nov 2018 16:50:24 +0000 Message-ID: <2622C307-F502-46C0-B78C-5D089521ACDB@ericsson.com> References: In-Reply-To: Accept-Language: en-US Content-Language: sv-SE X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [83.251.145.234] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; AM6PR07MB3862; 6:FPpyAZtt3fIaoqGuQ03EASifzibGv0RbsjSpEW8RCnumPcJzWo8qr3qCtj1w34lopOufhWyBj4A1dk4lwaQ4xOwI7SJbKXqHUoupxkFkoEXXt39RqVaawYeKK3hBOUZkOZN1TVbReOG7NWco08vkIecmM1exkKBHh+dg20QeLgzsm85mMmEtsJZ9YYdGQKQEgGuBgBXIlqUcLFlP+QksaJ+GmN2Gu45oTGxLfqd9tTMoiAU1b3OqOc2DV2lFV/zx1oD6zXCMEHr0I12+b/a4It0bouoWkBI5mqf0SGnFAdEvZgm+DyZlLyF1oAjcRHsDNRQcYMkFH+vhiAfHw6O/5j4vKo9IwWCSQacqBeCQE0Ymw8D3dOaNIzQ+NJnbtBYiAxJvC4lIycj97Lap8aiCHHRSMLxzM7sJDRldQwLZg5wF+eRCPrXdTw89hlmQ1ENkJTHN3KA528HdrHPSy5pWXg==; 5:pBe85bhGnhCNKS715P1j5pu240qtFQi94W/tPWK5KOfn3lhEEr4Cq/XhEcTcsIpxS0jntmRsmIy7vwuZU48H0LcoxbY+/w66CpI84/Y72EacYMbY/KK2ewhmybDemnqqozY4jcgZ2BB5HHY3Zy70KPtrNn5LekGfmB5KfpmBYY4=; 7:41Bs9XUaAqtAeFwgHTGnZtRTQjyyD9Vl0WITUMyASDbsEinDr8j7KIERtBVhSjNW+fsTlDDqRiAEdRGMAm2Zd20fK38kQ26/qW0ymNYb2udFNYoA/Jry3W6/k0EaH2y8kO15prFmgF6yHhllCLg5YQ== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: cba6d4ea-8910-47f3-29d6-08d656e3ec9a x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390098)(7020095)(4652040)(8989299)(5600074)(711020)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7153060)(49563074)(7193020); SRVR:AM6PR07MB3862; x-ms-traffictypediagnostic: AM6PR07MB3862: x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(102415395)(6040522)(2401047)(5005006)(8121501046)(93006095)(93001095)(3231453)(999002)(944501466)(4983020)(52105112)(10201501046)(3002001)(148016)(149066)(150057)(6041310)(20161123562045)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(20161123558120)(201708071742011)(7699051)(76991095); SRVR:AM6PR07MB3862; BCL:0; PCL:0; RULEID:; SRVR:AM6PR07MB3862; x-forefront-prvs: 087223B4DA x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(376002)(346002)(136003)(39860400002)(366004)(396003)(189003)(199004)(6486002)(85182001)(6512007)(478600001)(229853002)(6436002)(256004)(14444005)(6246003)(105586002)(25786009)(316002)(85202003)(106356001)(4001150100001)(53936002)(66066001)(99936001)(71190400001)(71200400001)(83716004)(6306002)(966005)(66574009)(97736004)(14454004)(446003)(2501003)(26005)(6346003)(486006)(81156014)(7736002)(81166006)(8676002)(99286004)(3846002)(6116002)(476003)(305945005)(2616005)(76176011)(11346002)(68736007)(2906002)(5660300001)(36756003)(110136005)(8936002)(82746002)(102836004)(86362001)(33656002)(6506007)(186003); DIR:OUT; SFP:1101; SCL:1; SRVR:AM6PR07MB3862; H:AM6PR07MB4822.eurprd07.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: ericsson.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=goran.selander@ericsson.com; x-microsoft-antispam-message-info: 3W4N3tGyqVR2SCZo9SeNIUgb+SIBYzVNAo0cSnDu4wdU5uRqNWqOuGvdsL3EpqflZnn7Hb2IFRTv35Ggq5yjh+Bz5mmcrpCot//Y81jTUWlc5iydIMRPPApDvaBZ9AVebKF/LrNOYy4Xu1FbsM7qI5Pfc2BFrk3w9DqLLrUqkTzd9dqwNTopK77cUC2vyFpnnt0INx9PjufTiNNpaiIL5IEXDIIZ5sS2nHIq5bliCZ4e00ZV0uxppbpDPCkmILw/Vk3WMzXaeIbwtUI9IQVESUBRiz1QOz4ReKCAj1eVn+WM8ha3yxZb8Z2xZywfeSRHQmCDMnjPmiWf32K+oeeRA8f1UJ9o5Hyz4tYVosBAGn8= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/signed; boundary=Apple-Mail-B7888487-7D6A-4CDF-A84A-CCAA95982719; protocol="application/pkcs7-signature"; micalg=sha1 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: cba6d4ea-8910-47f3-29d6-08d656e3ec9a X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Nov 2018 16:50:24.5188 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM6PR07MB3862 X-OriginatorOrg: ericsson.com X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrHKsWRmVeSWpSXmKPExsUyM2J7kW5QFmOMQe8KZovv33qYLT63sTkw eczY4OOxZMlPpgCmKC6blNSczLLUIn27BK6MM/272Aqu2FZMO3mdvYHxg3UXIyeHhICJxOO7 61m6GLk4hASOMEr8nTMByvnGKNHXtZMRznk/5zCUs4RJoufxQTCHRWACs8S6lxPYITJTmCTW /vjJAjJZSOARo8S78xkgNpuAi8SDhkdMILaIgL3El4dn2UBsYYFQiXl377NAxMMkpj1+AWUb SbxfeYkdxGYRUJV4+PIuUD0HBy9Q7+LPeiCmEJC544QPSAWngIPEhE0rwaYzCohJfD+1Bsxm FhCX+Dz3ARPEnyISDy+eZoOwRSVePv7HCmErSexuPckMYctKXJrfzQhhX2OT+PfFG8LWlfgw dSozyFoJAV+Ji3MlQL6VELjFKPH4xFyo+VoSLedfQ/VmS7Qcmgo1U05iVe9DFgj7MbNE//EE CFtGYuv+64wTGPVnITl1FtBcZoHJjBLPl39hA0nwCghKnJz5hAWiSFNif/dyKFtRYkr3Q3YI 21ri55xHjBC2qcTrox8ZkdUsYORYxShanFpcnJtuZKSXWpSZXFycn6eXl1qyiRGYkg5u+W21 g/Hgc8dDjAIcjEo8vGoZjDFCrIllxZW5hxhVgOY82rD6AqMUS15+XqqSCO+5NoYYId6UxMqq 1KL8+KLSnNTiQ4zSHCxK4rxOaRZRQgLpiSWp2ampBalFMFkmDk6pBkaZGO/t/+S1fQ58/BS0 ehLLT2nTgPx0Sy4Ft9V6v/85//n/9lD3pFfhkgpM6p8ktt3ZeUvp1Qo2m4ros8q5TvPPe6V0 zX+gVBnZUb7l8oWbXqGH64smfAl/dmRPzZeLXDw/amN3/JB79y4q3NsmpXBd4rK4LzM+zytP zKlY7eJ/J9lA8OFuzyAlluKMREMt5qLiRADamowsUQMAAA== Archived-At: Subject: Re: [Ace] IPR Conformance check for draft-ietf-ace-cwt-proof-of-possession X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2018 16:50:31 -0000 --Apple-Mail-B7888487-7D6A-4CDF-A84A-CCAA95982719 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: base64 DQpDb3JyZWN0aW9uIQ0KDQpJIGFtIE5PVCBhd2FyZSBvZiBhbnkgSVBSIHJlbGF0ZWQgdG8gdGhp cyBkcmFmdC4gDQoNCg0KKFRoYW5rcyBSb21hbiBmb3Igc3BvdHRpbmcgdGhlIHVuZm9ydHVuYXRl IG1pc3Npbmcgd29yZHMgISkNCg0KR8O2cmFuDQoNCj4gMzAgbm92LiAyMDE4IGtsLiAxNjo0MiBz a3JldiBHw7ZyYW4gU2VsYW5kZXIgPGdvcmFuLnNlbGFuZGVyQGVyaWNzc29uLmNvbT46DQo+IA0K PiANCj4gSSBhd2FyZSBvZiBhbnkgSVBSIHJlbGF0ZWQgdG8gdGhpcyBkcmFmdC4NCj4gDQo+IEJS DQo+IEfDtnJhbg0KPiANCj4g77u/T24gMjAxOC0xMS0yNywgMTU6NDQsICJBY2Ugb24gYmVoYWxm IG9mIFJvbWFuIERhbnlsaXciIDxhY2UtYm91bmNlc0BpZXRmLm9yZyBvbiBiZWhhbGYgb2YgcmRk QGNlcnQub3JnPiB3cm90ZToNCj4gDQo+ICAgIEhlbGxvIGRyYWZ0LWlldGYtYWNlLWN3dC1wcm9v Zi1vZi1wb3NzZXNzaW9uIGF1dGhvcnMsDQo+ICAgIChIaSBNaWtlLCBMdWR3aWcsIEdvZXJhbiwg U2FtdWVsIGFuZCBIYW5uZXMsKQ0KPiANCj4gICAgQXMgdGhlIHNoZXBoZXJkIGZvciBkcmFmdC1p ZXRmLWFjZS1jd3QtcHJvb2Ytb2YtcG9zc2Vzc2lvbiwgSSdkIGxpa2UgdG8gY29uZmlybSB3aXRo IHRoZSBhdXRob3JzIHRoYXQgYWxsIElQUiBkaXNjbG9zdXJlcyBoYXZlIG9jY3VycmVkIHBlciBS RkM2NzAyOg0KPiANCj4gICAgLS1bIHNoZXBoZXJkIHF1ZXN0aW9ucyBdLS0NCj4gDQo+ICAgICg3 KSBIYXMgZWFjaCBhdXRob3IgY29uZmlybWVkIHRoYXQgYW55IGFuZCBhbGwgYXBwcm9wcmlhdGUg SVBSIGRpc2Nsb3N1cmVzIHJlcXVpcmVkIGZvciBmdWxsIGNvbmZvcm1hbmNlIHdpdGggdGhlIHBy b3Zpc2lvbnMgb2YgQkNQIDc4IGFuZCBCQ1AgNzkgaGF2ZSBhbHJlYWR5IGJlZW4gZmlsZWQuIElm IG5vdCwgZXhwbGFpbiB3aHk/DQo+IA0KPiAgICAtLVtlbmQgcXVlc3Rpb25dLS0NCj4gDQo+ICAg IENhbiB5b3UgcGxlYXNlIHJlc3BvbmQgdG8gdGhlIGxpc3QgYW5zd2VyaW5nIHRoaXMgcXVlc3Rp b24gKGUuZy4sICJBcyBhIGNvLWF1dGhvciwgSSBkb24ndCBob2xkIGFueSBJUFIgbm9yIGFtIEkg YXdhcmUgb2YgYW55IHJlbGF0ZWQgdG8gdGhpcyBkcmFmdCIpLg0KPiANCj4gICAgVGhhbmtzLA0K PiAgICBSb21hbg0KPiANCj4gICAgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18NCj4gICAgQWNlIG1haWxpbmcgbGlzdA0KPiAgICBBY2VAaWV0Zi5vcmcNCj4g ICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9hY2UNCj4gDQo+IA0KPiBf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBBY2UgbWFp bGluZyBsaXN0DQo+IEFjZUBpZXRmLm9yZw0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFu L2xpc3RpbmZvL2FjZQ0K --Apple-Mail-B7888487-7D6A-4CDF-A84A-CCAA95982719 Content-Type: application/pkcs7-signature; name=smime.p7s Content-Disposition: attachment; filename="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMyjCCBgAw ggPooAMCAQICEQDitNpy8aKbKejNtzWscSV0MA0GCSqGSIb3DQEBCwUAMEcxCzAJBgNVBAYTAlNF MREwDwYDVQQKDAhFcmljc3NvbjElMCMGA1UEAwwcRXJpY3Nzb24gTkwgSW5kaXZpZHVhbCBDQSB2 MzAeFw0xODAyMDExMjQ5MTJaFw0yMTAyMDExMjQ5MTFaMGsxETAPBgNVBAoMCEVyaWNzc29uMRgw FgYDVQQDDA9Hw7ZyYW4gU2VsYW5kZXIxKjAoBgkqhkiG9w0BCQEWG2dvcmFuLnNlbGFuZGVyQGVy aWNzc29uLmNvbTEQMA4GA1UEBRMHZXJhZ29zZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALZyYqhrKqHwiZ9VtUIG2KpEzGfaqDSmGGsPGoLJoRFtqgrASfmHoEs0uYzKIZIrfZbUswG3 g6oHaoCICXtWOS0rxWx3KYiNbf3ekBqejhL/gg/sxG4l0Ko15odauekanpBH+xiojMKkpy61Rs6l ZZomjVazPRa9sFBg8suyoZzMqReTSoalKN9lKSp8tm7Fqa/GXvQGCIRxDv761jishq0J9mU1BOPW CfBhFjpgnldqO6xQ/utmk5VgJZFOzyk51ym+Nn6CO8Q/hMcX6vBCx2Mk4G/iWd7B86qXwv8pppa8 EtJw9s4v8fZ4A5s42G71pjx+bwx9hjvena+2bnPwVScCAwEAAaOCAcEwggG9MEgGA1UdHwRBMD8w PaA7oDmGN2h0dHA6Ly9jcmwudHJ1c3QudGVsaWEuY29tL2VyaWNzc29ubmxpbmRpdmlkdWFsY2F2 My5jcmwwgYIGCCsGAQUFBwEBBHYwdDAoBggrBgEFBQcwAYYcaHR0cDovL29jc3AyLnRydXN0LnRl bGlhLmNvbTBIBggrBgEFBQcwAoY8aHR0cDovL2NhLnRydXN0LnRlbGlhc29uZXJhLmNvbS9lcmlj c3Nvbm5saW5kaXZpZHVhbGNhdjMuY2VyMCYGA1UdEQQfMB2BG2dvcmFuLnNlbGFuZGVyQGVyaWNz c29uLmNvbTBVBgNVHSAETjBMMEoGDCsGAQQBgg8CAwEBEjA6MDgGCCsGAQUFBwIBFixodHRwczov L3JlcG9zaXRvcnkudHJ1c3QudGVsaWFzb25lcmEuY29tL0NQUzAdBgNVHSUEFjAUBggrBgEFBQcD BAYIKwYBBQUHAwIwHQYDVR0OBBYEFDpeCIPtX5pdpmwWTBhfPzwgqPVOMB8GA1UdIwQYMBaAFBx7 GZ6XnHasID3Y3OORauPbLaZTMA4GA1UdDwEB/wQEAwIFoDANBgkqhkiG9w0BAQsFAAOCAgEAwdPb CdlbVFhVXREJjekBfVFM1NHlY+PN/KA6RHWmIiXqeAXRzS/QpY76mdqv1DXwXyTqrMpxst/Qgddb eKLEedwXlyxRB83vR8wTfFowfNv8jHZMFz6dWW2CJC5dj68b4H3Ur0/HniDvBKc7iUuWL2ehIeC8 rC+q8B1+ydvLcgDUYCbHgERDo/1zbVpb1I8ITnP+tRmpUHAi7eLYrXbOpyzqXt+oymNLzL7Y4hY1 J6bravIEwvCNk/k45ojuxTRjcTV06U2mAHU8KBTq4dgzeLvkIjgJtdLNnBWD/BdZocXhv8Y8ZE/e c5tSeVIwWbL79cMMrbBh+DFJYXYLc/cZKT/fN5Vcjo6cqDYWRdYCJQvZrVD0kZdePO8w2+Wf9dDm z+sAkSrDLl/bMAPF/TUNwxiMaweYM/9SZ91RENS/AOALZ+64krp4NllCl7faitrzfLs7ltT8p2FT lsUQMsSymGyNHCbPJpDonguQj8SjO1dn9SZNcMWPZ5zOrLPqfipxZNsG83tA41kIxW7AZWS0MFGV cj8n76L1j5SO7y4DvfIYEmFT0pCCymHc/MhrKArr07nv1uTTWSltlKCJ3rGxNWFNP9YjkOme8VqG ywnoaB5VDsJrqD9r/Re1bc8Oe9oiShIVCfFX34RkXpBLdf72Jt3XSf3Vc4n6XKPMjzMri5kwggbC MIIEqqADAgECAhBTuH6D4ZyZKJOwm0kc7LjrMA0GCSqGSIb3DQEBCwUAMDcxFDASBgNVBAoMC1Rl bGlhU29uZXJhMR8wHQYDVQQDDBZUZWxpYVNvbmVyYSBSb290IENBIHYxMB4XDTE1MTAyNzEyMTY0 NloXDTI1MTAyNzEyMTY0NlowRzELMAkGA1UEBhMCU0UxETAPBgNVBAoMCEVyaWNzc29uMSUwIwYD VQQDDBxFcmljc3NvbiBOTCBJbmRpdmlkdWFsIENBIHYzMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A MIICCgKCAgEA7PLfAAC4UPKnu9hUt8aT9+PBqjvUw0Y0tLPOXkO2NC0y2XZks9nJfpWKrNM30k5v u5norG4ZKlF5C+3xc6HuIiGQof1bmFGluNOwmZQwl3rOJ+E6k0rqJJTerjj4WOxAvWVW1yC5S4Ub ppk3Q3cYVVuC3qNGsBIXy3/fDL1sc8Ah8zI/JumDpjY8fn/U3CRN6mgNKYrr0sZX6VXYgrpT05Zr JldkUgUgMKgbIWWEXEASA36pnb5GqD/RMzSgIe8o7YQtIaYB2cmTCLNHjaOL9j1JhNK4bvmbNJ7o 58IZYzwNv/G/L/bRosQ9c27U+86DNjrdZnpyaRaeMyVUn3SlYLaFqoObdh/xNF2NS8CXs/PVtO57 HBKHMgZqQvsyQJisSocxFqiMj9VK2WhCBbvoTvrNDZvLDlDGuE5RuKwFIpHOVOU5lCBgUUBsbpWI XwM6kmH/KC1DC5MtQzmvXkbt7KdBXUAxM0JZxf4dS+ACtTDpF9b0vny4DrwaOS0VNXyz1GUOxSqw 1wup5dpXbxLZYx1rLRgZqr9uWhLwAPsq66ZQof5GL0gY72Ym8/Tm28MeMqku+/zRzdYsmclT9rOd gdgS3b6OMoc5Op0ZPEv/Mx2lFJAVK674ozw2hiuRTVUmoqBr5AuyCoqCEyn32C7U/V7oqyqx5Yd1 c5GsxuOqQFcCAwEAAaOCAbgwggG0MIGKBggrBgEFBQcBAQR+MHwwLQYIKwYBBQUHMAGGIWh0dHA6 Ly9vY3NwLnRydXN0LnRlbGlhc29uZXJhLmNvbTBLBggrBgEFBQcwAoY/aHR0cDovL3JlcG9zaXRv cnkudHJ1c3QudGVsaWFzb25lcmEuY29tL3RlbGlhc29uZXJhcm9vdGNhdjEuY2VyMBIGA1UdEwEB /wQIMAYBAf8CAQAwVQYDVR0gBE4wTDBKBgwrBgEEAYIPAgMBAQIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly9yZXBvc2l0b3J5LnRydXN0LnRlbGlhc29uZXJhLmNvbS9DUFMwSwYDVR0fBEQwQjBAoD6g PIY6aHR0cDovL2NybC0zLnRydXN0LnRlbGlhc29uZXJhLmNvbS90ZWxpYXNvbmVyYXJvb3RjYXYx LmNybDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwDgYDVR0PAQH/BAQDAgEGMB0GA1Ud DgQWBBQcexmel5x2rCA92NzjkWrj2y2mUzAfBgNVHSMEGDAWgBTwj1k4ALP1j5qWDNXr+nuqF+gT EjANBgkqhkiG9w0BAQsFAAOCAgEAUFhr8dWMO7Quq1dDyIynw8sWmpyF/jWSxBjpHUCyhltoFS7Q 1CUBD0bOULWmYjmzRwme5pkjTFXpOJZLf9Han1SBbrVcP0JMhRsAvfWZjcF0l/c/jqDMqBARxr8O UWOr0ZWa49Lir3QEs2C+CjGge5tzcLqzQ5pjWxudrLkSGe+sAThDnXUWXGYk8udGZAamJ55drdw9 6AV9jWQkMrLIVHKkXVG5Etdx0wiAoTLk1fVtLcz11DiaCZSZVPZ3fdSIpIRhDqz8H4sVprPgvLBd K/ajdbiRsehCzzohay3zbXDDTDGwKkR8KUi8Xt8HDZCRsb/U/C7MC4tVK0SEPOQCo6swZy0rI0Ro GzICfsSrZ4JrxANeeSZqCn1A+w0Wz+iqdeP2PVxW0f1rg4/OG2DSl3uB3Q3NT/lDGJtepti+i5CC KEZcdAOZoviu43sLhqsxSpGjzZidESwovuHeP+O2bNwwtz1DTsXThBB3+JJHVjmkiLo900GITb/i 7IBdLoo4gZms9s1BQ2tm3CJCmpA2XwBTOB6B8/CtgWUWhyloXd3Wbmv7ZUoqqJFBV9g8Zh5mdZ+R zPTomgCFz/2aNsddI/2G9ZjN4tG6hmocZR2M5f0MhBv3bo6d5XsLlYwiNJjw5GRqYb8cqqeCaPKk veBJzqgb8ToH7WLoOzmPRCmPlpAxggLAMIICvAIBATBcMEcxCzAJBgNVBAYTAlNFMREwDwYDVQQK DAhFcmljc3NvbjElMCMGA1UEAwwcRXJpY3Nzb24gTkwgSW5kaXZpZHVhbCBDQSB2MwIRAOK02nLx opsp6M23NaxxJXQwCQYFKw4DAhoFAKCCATkwGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkq hkiG9w0BCQUxDxcNMTgxMTMwMTY1MDI0WjAjBgkqhkiG9w0BCQQxFgQUwWHtutR1YW151p1eW9Je hKWiDKQwawYJKwYBBAGCNxAEMV4wXDBHMQswCQYDVQQGEwJTRTERMA8GA1UECgwIRXJpY3Nzb24x JTAjBgNVBAMMHEVyaWNzc29uIE5MIEluZGl2aWR1YWwgQ0EgdjMCEQDitNpy8aKbKejNtzWscSV0 MG0GCyqGSIb3DQEJEAILMV6gXDBHMQswCQYDVQQGEwJTRTERMA8GA1UECgwIRXJpY3Nzb24xJTAj BgNVBAMMHEVyaWNzc29uIE5MIEluZGl2aWR1YWwgQ0EgdjMCEQDitNpy8aKbKejNtzWscSV0MA0G CSqGSIb3DQEBAQUABIIBABvlV79CgWYCpmtPxil3+8JyhKDW+9dvteUQIb/ghb3sVrH81ukQL9Ao YJJ4C+xsLX8x1p9D5Nblx8KpH7MXgItSBIR79htFEEJPLud67W24IaYSCEiIrjghGCOCIjLL4Fzd lxkl4WV2BPehQutrQ3v7FArQRSsg0P152ETZ1D4wyOStgvnYr5QeFs1Zmgrqin5hCuCA8aL4kHPp UL6VEi0TRXH9M5pGMdSwaNz2mnCV5KYeYuAaKWwhduQFUwWU79txVFLJGF/UxzYWL2B46Ng81Nbt Qw1MlZBAxv7VTJyukOzZ5Na33a7IWpLpo3vLG8nsogPkexZu8/w7huf9VnIAAAAAAAA= --Apple-Mail-B7888487-7D6A-4CDF-A84A-CCAA95982719-- From nobody Fri Nov 30 09:05:27 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C382612F295 for ; Fri, 30 Nov 2018 09:05:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.459 X-Spam-Level: X-Spam-Status: No, score=-3.459 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.46, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7IiA2x_XLGBB for ; Fri, 30 Nov 2018 09:05:23 -0800 (PST) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-eopbgr650110.outbound.protection.outlook.com [40.107.65.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A9799128BCC for ; Fri, 30 Nov 2018 09:05:22 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=hgZCF5QLbQWHiGHV0HKrO1xPJhlKdTtsBY6eNGbCZeg=; b=ZMbX3H0rDqf4xSWkxoPHGE1MxVJMGPDsJWmDVxys6cKE1uCaE+8gYYvYrXpj0/GQZ7pv6c0Bf9md34cW8zhJO2Q2iJYCFi7aAGPnw94ifiYccqyy5UQxFYwH+voZ+2ELYAqfw7jkRaQhcX6CaZLZydoPXEdYj+BJwp01t1LuVwA= Received: from DM5PR00MB0296.namprd00.prod.outlook.com (52.132.128.37) by DM5PR00MB0408.namprd00.prod.outlook.com (52.132.129.32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1425.0; Fri, 30 Nov 2018 17:05:16 +0000 Received: from DM5PR00MB0296.namprd00.prod.outlook.com ([fe80::ac6b:86df:d210:c81e]) by DM5PR00MB0296.namprd00.prod.outlook.com ([fe80::ac6b:86df:d210:c81e%6]) with mapi id 15.20.1428.000; Fri, 30 Nov 2018 17:05:16 +0000 From: Mike Jones To: Roman Danyliw , "ace@ietf.org" , =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= Thread-Topic: [Ace] IPR Conformance check for draft-ietf-ace-cwt-proof-of-possession Thread-Index: AQHUiMNFftpz+PHmiUWh8jN5849xkaVoiAwAgAAEKPk= Date: Fri, 30 Nov 2018 17:05:16 +0000 Message-ID: References: , <2622C307-F502-46C0-B78C-5D089521ACDB@ericsson.com> In-Reply-To: <2622C307-F502-46C0-B78C-5D089521ACDB@ericsson.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [40.67.190.9] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; DM5PR00MB0408; 6:a5dCbrVXyy7uAdR8TR4W/gUBWvmhugs8nYxEUv4mPIfGQX1rJB638aXdIW3IT2eYGhFhPgKWSAD+aRQXBnp9V2kTVmgXJFVUzDDeGHzAdPrF21On/Isz1qWWXDzOfap3AwT4jmmyN3pvCmXjt/dmyx78jVOLqS5FeMSa/hHHjr9dTU+umqWMTMHPIw1ah4CqZIK16nE8DODU+xkVHgKOVxHwRgqTp4KkBMvyjzxpQxGVg6Yt8CIztbs0+76sSEZ1Y/tXptBsZTtVu1OipppQVvsT5wDm+uUkzqtqgV49teGSThLqUDNvFmnxEzX+SFc+byXfhzQcGPCbjaU4/XY6vzTyGHF29lr4Eq4HSVwUpH2FAOGAN3fYSMGjReWP8JDMTlPLNlDK9ZcxTnBFrXAMdb6G79tlG/1npUarerYRz66jU67IWmtlGoDTOq9Pm5hmkpVbC2D+kPld6e6ZR+/3IA==; 5:+BPwItRXkmuncCaz8WgQs1F/NQF4udFbiRmVrA7HJm/CN5hr0688URRRlIZh7gqMFg6BKkKtoaZeA56+r+j5CpaWivc/qSCFrDmvp0b9w12Rk0ztfvKGZgwyk8ipIN8UJq6jczpinU+uQXhB1HH4PHY7iKP9dtSTF+RMM096LO8=; 7:oN/Cw3VMfdhYBiia4jnKgGCf7MJvtL64QxKVphYmrh+wdTs8tECpUGKrAFOwYczx/+d5Y/IogzNdi4t+WYquZbtCgXo6Ju8N07xXWV/1yMNkmAk2tuTq1T7VbAG+p+rp1dmBzAAFN6R1NsB6NWG9/Q== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 0ad0de2b-3c86-4434-e44c-08d656e60031 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390098)(7020095)(4652040)(8989299)(5600074)(711020)(4618075)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7193020); SRVR:DM5PR00MB0408; x-ms-traffictypediagnostic: DM5PR00MB0408: x-ms-exchange-purlcount: 4 authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(2017102700009)(2017102701064)(6040522)(8220035)(2401047)(5005006)(8121501046)(2017102702064)(20171027021009)(20171027022009)(20171027023009)(20171027024009)(20171027025009)(20171027026009)(2017102703076)(93006095)(93001095)(3002001)(10201501046)(3231453)(999002)(944501466)(2018427008)(6055026)(148016)(149066)(150057)(6041310)(20161123558120)(20161123562045)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(201708071742011)(7699051)(76991095); SRVR:DM5PR00MB0408; BCL:0; PCL:0; RULEID:; SRVR:DM5PR00MB0408; x-forefront-prvs: 087223B4DA x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(376002)(39860400002)(366004)(396003)(346002)(189003)(199004)(71200400001)(26005)(71190400001)(8676002)(14454004)(6436002)(22452003)(66574009)(97736004)(99286004)(86612001)(966005)(6116002)(110136005)(478600001)(316002)(86362001)(2906002)(25786009)(72206003)(2501003)(10290500003)(229853002)(8990500004)(55016002)(74316002)(6306002)(7736002)(54896002)(66066001)(236005)(606006)(9686003)(53936002)(33656002)(10090500001)(3846002)(6246003)(186003)(81166006)(8936002)(81156014)(102836004)(6506007)(53546011)(14444005)(4001150100001)(256004)(76176011)(7696005)(446003)(106356001)(5660300001)(11346002)(105586002)(486006)(476003)(68736007); DIR:OUT; SFP:1102; SCL:1; SRVR:DM5PR00MB0408; H:DM5PR00MB0296.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: NZqo+/C30nIeRpgBNRT62L+XvWjMnfOI1LfdL+keySeOqffSrsPy+c93lj8u7tzBrcljG/NF7dgQ+AZUPSJL+OFIq/49ybbG4PFZFvyTOJe90moB4ikPPXrFbbkXaufyaKbyRYY7J3D5Xnyqy8cnite28MaLwyW3SQrWtPFXAXStmHoR3Qc5jzLx+q80mFtTu/bGEX2URdXSomm0LEryral5RwgCmZAksigYxtzWWW3ky15tkcQcG5Acan8Tci0gVmNLp7qsidC3KpAniEyq/VedOu3MkPA2nTkNETVaH/WXl5ZcmyGHh9qETBx8vAHYctTrRRwD8zYbql6/T87f99hNfNh2mWh5cBiTNV0gwPc= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_DM5PR00MB0296EF7CCAF1C6EED0988CCDF5D30DM5PR00MB0296namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 0ad0de2b-3c86-4434-e44c-08d656e60031 X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Nov 2018 17:05:16.3929 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM5PR00MB0408 Archived-At: Subject: Re: [Ace] IPR Conformance check for draft-ietf-ace-cwt-proof-of-possession X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2018 17:05:26 -0000 --_000_DM5PR00MB0296EF7CCAF1C6EED0988CCDF5D30DM5PR00MB0296namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 TGlrZXdpc2UsIEkgYW0gbm90IGF3YXJlIG9mIGFueSBJUFIgdGhhdCBwZXJ0YWlucyB0byB0aGlz IHNwZWNpZmljYXRpb24uDQoNCi0tIE1pa2UNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fDQpGcm9tOiBBY2UgPGFjZS1ib3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2YgR8O2cmFu IFNlbGFuZGVyIDxnb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5jb20+DQpTZW50OiBGcmlkYXksIE5v dmVtYmVyIDMwLCAyMDE4IDg6NTA6MjQgQU0NClRvOiBSb21hbiBEYW55bGl3OyBhY2VAaWV0Zi5v cmcNClN1YmplY3Q6IFJlOiBbQWNlXSBJUFIgQ29uZm9ybWFuY2UgY2hlY2sgZm9yIGRyYWZ0LWll dGYtYWNlLWN3dC1wcm9vZi1vZi1wb3NzZXNzaW9uDQoNCg0KQ29ycmVjdGlvbiENCg0KSSBhbSBO T1QgYXdhcmUgb2YgYW55IElQUiByZWxhdGVkIHRvIHRoaXMgZHJhZnQuDQoNCg0KKFRoYW5rcyBS b21hbiBmb3Igc3BvdHRpbmcgdGhlIHVuZm9ydHVuYXRlIG1pc3Npbmcgd29yZHMgISkNCg0KR8O2 cmFuDQoNCj4gMzAgbm92LiAyMDE4IGtsLiAxNjo0MiBza3JldiBHw7ZyYW4gU2VsYW5kZXIgPGdv cmFuLnNlbGFuZGVyQGVyaWNzc29uLmNvbT46DQo+DQo+DQo+IEkgYXdhcmUgb2YgYW55IElQUiBy ZWxhdGVkIHRvIHRoaXMgZHJhZnQuDQo+DQo+IEJSDQo+IEfDtnJhbg0KPg0KPiDvu79PbiAyMDE4 LTExLTI3LCAxNTo0NCwgIkFjZSBvbiBiZWhhbGYgb2YgUm9tYW4gRGFueWxpdyIgPGFjZS1ib3Vu Y2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiByZGRAY2VydC5vcmc+IHdyb3RlOg0KPg0KPiAgICBI ZWxsbyBkcmFmdC1pZXRmLWFjZS1jd3QtcHJvb2Ytb2YtcG9zc2Vzc2lvbiBhdXRob3JzLA0KPiAg ICAoSGkgTWlrZSwgTHVkd2lnLCBHb2VyYW4sIFNhbXVlbCBhbmQgSGFubmVzLCkNCj4NCj4gICAg QXMgdGhlIHNoZXBoZXJkIGZvciBkcmFmdC1pZXRmLWFjZS1jd3QtcHJvb2Ytb2YtcG9zc2Vzc2lv biwgSSdkIGxpa2UgdG8gY29uZmlybSB3aXRoIHRoZSBhdXRob3JzIHRoYXQgYWxsIElQUiBkaXNj bG9zdXJlcyBoYXZlIG9jY3VycmVkIHBlciBSRkM2NzAyOg0KPg0KPiAgICAtLVsgc2hlcGhlcmQg cXVlc3Rpb25zIF0tLQ0KPg0KPiAgICAoNykgSGFzIGVhY2ggYXV0aG9yIGNvbmZpcm1lZCB0aGF0 IGFueSBhbmQgYWxsIGFwcHJvcHJpYXRlIElQUiBkaXNjbG9zdXJlcyByZXF1aXJlZCBmb3IgZnVs bCBjb25mb3JtYW5jZSB3aXRoIHRoZSBwcm92aXNpb25zIG9mIEJDUCA3OCBhbmQgQkNQIDc5IGhh dmUgYWxyZWFkeSBiZWVuIGZpbGVkLiBJZiBub3QsIGV4cGxhaW4gd2h5Pw0KPg0KPiAgICAtLVtl bmQgcXVlc3Rpb25dLS0NCj4NCj4gICAgQ2FuIHlvdSBwbGVhc2UgcmVzcG9uZCB0byB0aGUgbGlz dCBhbnN3ZXJpbmcgdGhpcyBxdWVzdGlvbiAoZS5nLiwgIkFzIGEgY28tYXV0aG9yLCBJIGRvbid0 IGhvbGQgYW55IElQUiBub3IgYW0gSSBhd2FyZSBvZiBhbnkgcmVsYXRlZCB0byB0aGlzIGRyYWZ0 IikuDQo+DQo+ICAgIFRoYW5rcywNCj4gICAgUm9tYW4NCj4NCj4gICAgX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gICAgQWNlIG1haWxpbmcgbGlzdA0K PiAgICBBY2VAaWV0Zi5vcmcNCj4gICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9hY2UNCj4NCj4NCj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX18NCj4gQWNlIG1haWxpbmcgbGlzdA0KPiBBY2VAaWV0Zi5vcmcNCj4gaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9hY2UNCg== --_000_DM5PR00MB0296EF7CCAF1C6EED0988CCDF5D30DM5PR00MB0296namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVu dD0iTWljcm9zb2Z0IEV4Y2hhbmdlIFNlcnZlciI+DQo8IS0tIGNvbnZlcnRlZCBmcm9tIHRleHQg LS0+PHN0eWxlPjwhLS0gLkVtYWlsUXVvdGUgeyBtYXJnaW4tbGVmdDogMXB0OyBwYWRkaW5nLWxl ZnQ6IDRwdDsgYm9yZGVyLWxlZnQ6ICM4MDAwMDAgMnB4IHNvbGlkOyB9IC0tPjwvc3R5bGU+DQo8 L2hlYWQ+DQo8Ym9keT4NCjxkaXY+DQo8ZGl2IGRpcj0iYXV0byIgc3R5bGU9ImRpcmVjdGlvbjps dHI7IG1hcmdpbjowOyBwYWRkaW5nOjA7IGZvbnQtZmFtaWx5OnNhbnMtc2VyaWY7IGZvbnQtc2l6 ZToxMXB0OyBjb2xvcjpibGFjayI+DQpMaWtld2lzZSwgSSBhbSBub3QgYXdhcmUgb2YgYW55IElQ UiB0aGF0IHBlcnRhaW5zIHRvIHRoaXMgc3BlY2lmaWNhdGlvbi4gPGJyPg0KPGJyPg0KPC9kaXY+ DQo8ZGl2IGRpcj0iYXV0byIgc3R5bGU9ImRpcmVjdGlvbjpsdHI7IG1hcmdpbjowOyBwYWRkaW5n OjA7IGZvbnQtZmFtaWx5OnNhbnMtc2VyaWY7IGZvbnQtc2l6ZToxMXB0OyBjb2xvcjpibGFjayI+ DQotLSBNaWtlPC9kaXY+DQo8aHIgdGFiaW5kZXg9Ii0xIiBzdHlsZT0iZGlzcGxheTppbmxpbmUt YmxvY2s7IHdpZHRoOjk4JSI+DQo8ZGl2IGlkPSJ4X2RpdlJwbHlGd2RNc2ciIGRpcj0ibHRyIj48 Zm9udCBmYWNlPSJDYWxpYnJpLCBzYW5zLXNlcmlmIiBjb2xvcj0iIzAwMDAwMCIgc3R5bGU9ImZv bnQtc2l6ZToxMXB0Ij48Yj5Gcm9tOjwvYj4gQWNlICZsdDthY2UtYm91bmNlc0BpZXRmLm9yZyZn dDsgb24gYmVoYWxmIG9mIEfDtnJhbiBTZWxhbmRlciAmbHQ7Z29yYW4uc2VsYW5kZXJAZXJpY3Nz b24uY29tJmd0Ozxicj4NCjxiPlNlbnQ6PC9iPiBGcmlkYXksIE5vdmVtYmVyIDMwLCAyMDE4IDg6 NTA6MjQgQU08YnI+DQo8Yj5Ubzo8L2I+IFJvbWFuIERhbnlsaXc7IGFjZUBpZXRmLm9yZzxicj4N CjxiPlN1YmplY3Q6PC9iPiBSZTogW0FjZV0gSVBSIENvbmZvcm1hbmNlIGNoZWNrIGZvciBkcmFm dC1pZXRmLWFjZS1jd3QtcHJvb2Ytb2YtcG9zc2Vzc2lvbjwvZm9udD4NCjxkaXY+Jm5ic3A7PC9k aXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGZvbnQgc2l6ZT0iMiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMXB0OyI+DQo8ZGl2IGNsYXNzPSJQbGFpblRleHQiPjxicj4NCkNvcnJlY3Rpb24hPGJyPg0K PGJyPg0KSSBhbSBOT1QgYXdhcmUgb2YgYW55IElQUiByZWxhdGVkIHRvIHRoaXMgZHJhZnQuIDxi cj4NCjxicj4NCjxicj4NCihUaGFua3MgUm9tYW4gZm9yIHNwb3R0aW5nIHRoZSB1bmZvcnR1bmF0 ZSBtaXNzaW5nIHdvcmRzICEpPGJyPg0KPGJyPg0KR8O2cmFuPGJyPg0KPGJyPg0KJmd0OyAzMCBu b3YuIDIwMTgga2wuIDE2OjQyIHNrcmV2IEfDtnJhbiBTZWxhbmRlciAmbHQ7Z29yYW4uc2VsYW5k ZXJAZXJpY3Nzb24uY29tJmd0Ozo8YnI+DQomZ3Q7IDxicj4NCiZndDsgPGJyPg0KJmd0OyBJIGF3 YXJlIG9mIGFueSBJUFIgcmVsYXRlZCB0byB0aGlzIGRyYWZ0Ljxicj4NCiZndDsgPGJyPg0KJmd0 OyBCUjxicj4NCiZndDsgR8O2cmFuPGJyPg0KJmd0OyA8YnI+DQomZ3Q7IO+7v09uIDIwMTgtMTEt MjcsIDE1OjQ0LCAmcXVvdDtBY2Ugb24gYmVoYWxmIG9mIFJvbWFuIERhbnlsaXcmcXVvdDsgJmx0 O2FjZS1ib3VuY2VzQGlldGYub3JnIG9uIGJlaGFsZiBvZiByZGRAY2VydC5vcmcmZ3Q7IHdyb3Rl Ojxicj4NCiZndDsgPGJyPg0KJmd0OyZuYnNwOyZuYnNwOyZuYnNwOyBIZWxsbyBkcmFmdC1pZXRm LWFjZS1jd3QtcHJvb2Ytb2YtcG9zc2Vzc2lvbiBhdXRob3JzLDxicj4NCiZndDsmbmJzcDsmbmJz cDsmbmJzcDsgKEhpIE1pa2UsIEx1ZHdpZywgR29lcmFuLCBTYW11ZWwgYW5kIEhhbm5lcywpPGJy Pg0KJmd0OyA8YnI+DQomZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEFzIHRoZSBzaGVwaGVyZCBmb3Ig ZHJhZnQtaWV0Zi1hY2UtY3d0LXByb29mLW9mLXBvc3Nlc3Npb24sIEknZCBsaWtlIHRvIGNvbmZp cm0gd2l0aCB0aGUgYXV0aG9ycyB0aGF0IGFsbCBJUFIgZGlzY2xvc3VyZXMgaGF2ZSBvY2N1cnJl ZCBwZXIgUkZDNjcwMjo8YnI+DQomZ3Q7IDxicj4NCiZndDsmbmJzcDsmbmJzcDsmbmJzcDsgLS1b IHNoZXBoZXJkIHF1ZXN0aW9ucyBdLS08YnI+DQomZ3Q7IDxicj4NCiZndDsmbmJzcDsmbmJzcDsm bmJzcDsgKDcpIEhhcyBlYWNoIGF1dGhvciBjb25maXJtZWQgdGhhdCBhbnkgYW5kIGFsbCBhcHBy b3ByaWF0ZSBJUFIgZGlzY2xvc3VyZXMgcmVxdWlyZWQgZm9yIGZ1bGwgY29uZm9ybWFuY2Ugd2l0 aCB0aGUgcHJvdmlzaW9ucyBvZiBCQ1AgNzggYW5kIEJDUCA3OSBoYXZlIGFscmVhZHkgYmVlbiBm aWxlZC4gSWYgbm90LCBleHBsYWluIHdoeT88YnI+DQomZ3Q7IDxicj4NCiZndDsmbmJzcDsmbmJz cDsmbmJzcDsgLS1bZW5kIHF1ZXN0aW9uXS0tPGJyPg0KJmd0OyA8YnI+DQomZ3Q7Jm5ic3A7Jm5i c3A7Jm5ic3A7IENhbiB5b3UgcGxlYXNlIHJlc3BvbmQgdG8gdGhlIGxpc3QgYW5zd2VyaW5nIHRo aXMgcXVlc3Rpb24gKGUuZy4sICZxdW90O0FzIGEgY28tYXV0aG9yLCBJIGRvbid0IGhvbGQgYW55 IElQUiBub3IgYW0gSSBhd2FyZSBvZiBhbnkgcmVsYXRlZCB0byB0aGlzIGRyYWZ0JnF1b3Q7KS48 YnI+DQomZ3Q7IDxicj4NCiZndDsmbmJzcDsmbmJzcDsmbmJzcDsgVGhhbmtzLDxicj4NCiZndDsm bmJzcDsmbmJzcDsmbmJzcDsgUm9tYW48YnI+DQomZ3Q7IDxicj4NCiZndDsmbmJzcDsmbmJzcDsm bmJzcDsgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+ DQomZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEFjZSBtYWlsaW5nIGxpc3Q8YnI+DQomZ3Q7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IEFjZUBpZXRmLm9yZzxicj4NCiZndDsmbmJzcDsmbmJzcDsmbmJzcDsgPGEg aHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9hY2UiPmh0dHBzOi8v d3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vYWNlPC9hPjxicj4NCiZndDsgPGJyPg0KJmd0 OyA8YnI+DQomZ3Q7IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fPGJyPg0KJmd0OyBBY2UgbWFpbGluZyBsaXN0PGJyPg0KJmd0OyBBY2VAaWV0Zi5vcmc8YnI+ DQomZ3Q7IDxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vYWNl Ij5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2FjZTwvYT48YnI+DQo8L2Rp dj4NCjwvc3Bhbj48L2ZvbnQ+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_DM5PR00MB0296EF7CCAF1C6EED0988CCDF5D30DM5PR00MB0296namp_-- From nobody Fri Nov 30 11:10:20 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E083130F3A for ; Fri, 30 Nov 2018 11:10:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9W117VnRTIcV for ; Fri, 30 Nov 2018 11:10:16 -0800 (PST) Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B5A93130E5A for ; Fri, 30 Nov 2018 11:10:16 -0800 (PST) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id wAUJAFrg009547 for ; Fri, 30 Nov 2018 14:10:15 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu wAUJAFrg009547 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1543605015; bh=nM0u1ozx8AtIBGfDoKB8XvQrun4SBUpUyxFPLFAxTRI=; h=From:To:Subject:Date:From; b=hZafcqLD2P20g5zBZF8krexqYKPtaeOTu5UnIb13s3Ncz/tXzZKN0HzbbTnWQgqW/ qdUc8cGZ3Pz3LUYmBi17Zy89+HEPn3NvVpas1RiSaGof9pIj/cPlJ4go6sbrBaqDDG a1LNodUcrQeX0Fxwtg4psEI+0Zea3gYqRMGOAnxY= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id wAUJA8wj005761 for ; Fri, 30 Nov 2018 14:10:08 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.03.0415.000; Fri, 30 Nov 2018 14:10:08 -0500 From: Roman Danyliw To: "ace@ietf.org" Thread-Topic: Syntax check of examples in draft-ietf-ace-cwt-proof-of-possession-05 Thread-Index: AdSI3wRNfJL7yZrTRs6T+pPDYimggA== Date: Fri, 30 Nov 2018 19:10:07 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0184C52937@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Ace] Syntax check of examples in draft-ietf-ace-cwt-proof-of-possession-05 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2018 19:10:19 -0000 Hello! As part of my shepherd review, I ran all of the examples in draft-ietf-ace-= cwt-proof-of-possession-05 through a CBOR diagnostic-to-CBOR validator (tha= nks Carsten for cbor.me). All of the examples were fine but the first one = in Section 3.3: --[current text]-- { /kty/ 1 : /Symmetric/ 4, /alg/ 3 : /HMAC256/ 5, /k/ -1 : h'6684523ab17337f173500e5728c628547cb37df e68449c65f885d1b73b49eae1A0B0C0D0E0F10' } --[end]-- The error was: Expected one of [ \t\n\r], "/", [0-9a-fA-F] at line 5, column 56 (byte 184)= after { /kty/ 1 : /Symmetric/ 4, /alg/ 3 : /HMAC256/ 5, /k/ -1 : h'6684523= ab17337f173500e5728c628547cb37df e68449c65f885d1b73b49eae1A0B0C0D0E0F10 It appears that the string of hex encoded octets in /k/ is short one charac= ter. Roman=20 From nobody Fri Nov 30 11:43:22 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF81D130F94 for ; Fri, 30 Nov 2018 11:43:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.46 X-Spam-Level: X-Spam-Status: No, score=-3.46 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.46, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QZhlOLimzOXz for ; Fri, 30 Nov 2018 11:43:19 -0800 (PST) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-bl2nam06on0725.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe55::725]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3F8E8130FBE for ; Fri, 30 Nov 2018 11:43:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=WvzdX5zHLMLd3vqSEmQG/Ww8zChXRr3PB+44jIRgQKY=; b=YaMwI6lg0vqXt+o9KIl6SXJSkOXSfB5EC+pfCGB/DsHs18zOsTiSw16qOb2l+4Od92S2nO+PN86Cmy7a1MzRpq3DICI+zuBEmKwnRunfKC+rwOA4Wx1duDfu9uHmJmZJDjgr5TlJqZYD31HDfIJ5PpxKdldQmScmL1Fkql2s90c= Received: from SN6PR00MB0301.namprd00.prod.outlook.com (52.132.117.155) by SN6PR00MB0303.namprd00.prod.outlook.com (52.132.117.157) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1428.0; Fri, 30 Nov 2018 19:43:15 +0000 Received: from SN6PR00MB0301.namprd00.prod.outlook.com ([fe80::2006:968c:9d8d:32b0]) by SN6PR00MB0301.namprd00.prod.outlook.com ([fe80::2006:968c:9d8d:32b0%2]) with mapi id 15.20.1429.000; Fri, 30 Nov 2018 19:43:15 +0000 From: Mike Jones To: Roman Danyliw , "ace@ietf.org" Thread-Topic: Idnits on draft-ietf-ace-cwt-proof-of-possession-05 Thread-Index: AdSIy7+vhYiDadVqQGmJm7v2n5eOiAAGSi8g Date: Fri, 30 Nov 2018 19:43:15 +0000 Message-ID: References: <359EC4B99E040048A7131E0F4E113AFC0184C526B3@marathon> In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC0184C526B3@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-11-30T19:43:12.0670209Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:8:535:6ce7:ef20:39c9] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR00MB0303; 6:vJelvfcZHOyFcpvLH7t76Z8z+EClBfkrn0x3Sc/Jas7UNGKxqhJ/rTlyagQJ60UehbtcSZLoDJsEECC8cALb2RbU8FvuVDzANqV6tttsDwZd+sqqgOI28gnumnHN8UyZXMp4SMFtS6BqM7dKo/7FUazY0JPUFs+XdXi69kyY/n0QhVaGLvdeUCBEtBjgBzrvzxiuhEx3YWnLdkR12QWVyYJsoNC768V3xo3PXZlFxyV4MiTQrccWkgwgs8ZYn1/O2pf5a+SEZPEN7x8OEYMe2z3jeEbzt1JSnY3rxt5rsbOKDOTSvANdOkPWkcYkZ/9nnN3o/blghpy9ks+OL7KqG5fdl5fThnWYso8Dk6ZLr5qrTPGZ90WQa0sju1RDY/I34Ey/ue0pEbjWxQFeNaweb8DKsQNwAiHEy7nYw+jU4AWRSJMROxycE2HdFMf0XHL8cb0OovyzVqa9/1HQBNfD8Q==; 5:+QztBI7nfMy1JqUYSaE6dAANpLpWMOVqVlr1iz+dPq9nfrYFadNu2ViLe4d/WHTHnm9+ZSHzccCtd3niee9CzoIkPi2nE3HKHJ+csR1DgyTGSkoLhc6m/kX7UlHV4tYDuStpZtTSvEf0H1gf9vaUKDKObZRgDh5tAD81C695fQ0=; 7:kfWeSuKqzHHm4E6c2RQ01tlbTe5ZfCpnnhvZ5fNWG4H/D4fIGPdI3iijw1TvvQ4ZDgvU9mMLbJZVYvOPLlkdlXf2G8Ls+C7njH03703HXecHjsGxcUooviTrFhIaqEXdfff0q9EWEGSOdR31EXgN1A== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 562fd718-a88b-4e3f-0433-08d656fc121f x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390098)(7020095)(4652040)(8989299)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(5600074)(711020)(4618075)(2017052603328)(7193020); SRVR:SN6PR00MB0303; x-ms-traffictypediagnostic: SN6PR00MB0303: x-ms-exchange-purlcount: 2 authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(2017102700009)(2017102701064)(6040522)(8220035)(2401047)(5005006)(8121501046)(2017102702064)(20171027021009)(20171027022009)(20171027023009)(20171027024009)(20171027025009)(20171027026009)(2017102703076)(93006095)(93001095)(3002001)(10201501046)(3231453)(999002)(944501468)(2018427008)(6055026)(148016)(149066)(150057)(6041310)(20161123558120)(20161123562045)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201703061406153)(20161123560045)(201708071742011)(7699051)(76991095); SRVR:SN6PR00MB0303; BCL:0; PCL:0; RULEID:; SRVR:SN6PR00MB0303; x-forefront-prvs: 087223B4DA x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(366004)(396003)(136003)(346002)(39860400002)(376002)(199004)(189003)(13464003)(5660300001)(2906002)(25786009)(97736004)(10290500003)(6436002)(8990500004)(110136005)(72206003)(10090500001)(14454004)(71190400001)(966005)(229853002)(71200400001)(6116002)(22452003)(478600001)(68736007)(316002)(2501003)(86362001)(102836004)(6246003)(106356001)(105586002)(476003)(486006)(11346002)(33656002)(53936002)(53546011)(6506007)(446003)(186003)(86612001)(14444005)(46003)(256004)(305945005)(74316002)(76176011)(7696005)(7736002)(81166006)(55016002)(9686003)(6306002)(81156014)(8676002)(99286004)(8936002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR00MB0303; H:SN6PR00MB0301.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: fvNb2F0MH3y3yw5h7MgZ2dyUnHKZ0KutuMfmSyVl8jemTYlZScENPDYxkiMBMsEEkXr7PBLnLrbFsd0JTOjtEcB1MlnUGrpisChO0+BF01To9RTIh+gBs424cE4S+ZJhTj+Lj73jY9U23p3wDWTYSYuEYMEbyrPqlIdoiyAfrBtSWwwfeuoKY2zn9utQkiY3H2UhcXIcsadYRT7iM0eXoT+qa8zV7CKKZn31CcLFhL5Z61dgFeo7E2blYm8oE5Wr8mTv6/rGpqt21g7Kv5KGdTBQO4ztLzdlvzNljOpXMsn6vO/220TXS5oIAi6GsO66Ty6ETXLbD0zBXrtLACfWw7+Eav2PtsPLJ1y9KodrV0s= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 562fd718-a88b-4e3f-0433-08d656fc121f X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Nov 2018 19:43:15.4042 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR00MB0303 Archived-At: Subject: Re: [Ace] Idnits on draft-ietf-ace-cwt-proof-of-possession-05 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2018 19:43:22 -0000 Will do... -----Original Message----- From: Ace On Behalf Of Roman Danyliw Sent: Friday, November 30, 2018 8:50 AM To: ace@ietf.org Subject: [Ace] Idnits on draft-ietf-ace-cwt-proof-of-possession-05 Hi! As part of the shepherd review, I ran idnits on draft-ietf-ace-cwt-proof-of= -possession-05. The following nits were found. Could these please be fixe= d in a revised draft. --[ snip ]-- =20 Checking nits according to https://www.ietf.org/id-info/checklist : -------------------------------------------------------------------------= --- ** There is 1 instance of too long lines in the document, the longest one being 1 character in excess of 72. Checking references for intended status: Proposed Standard -------------------------------------------------------------------------= --- ** Obsolete normative reference: RFC 5226 (Obsoleted by RFC 8126) =3D=3D Outdated reference: A later version (-17) exists of draft-ietf-ace-oauth-authz-16 -- Obsolete informational reference (is this intentional?): RFC 7159 (Obsoleted by RFC 8259) Summary: 2 errors (**), 0 flaws (~~), 1 warning (=3D=3D), 2 comments (= --). --[ snip ]-- The line which exceeds 72 characters is in Section 3.4. Specifically: /protected header / h'A1010A' /{ \alg\ 1:10 \AES-CCM-16-64-128\}/, Regards, Roman _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace From nobody Fri Nov 30 11:45:58 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42B4D130F97 for ; Fri, 30 Nov 2018 11:45:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.46 X-Spam-Level: X-Spam-Status: No, score=-3.46 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-1.46, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0HTRcmtgXHFl for ; Fri, 30 Nov 2018 11:45:53 -0800 (PST) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-eopbgr650119.outbound.protection.outlook.com [40.107.65.119]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BBDDB130F96 for ; Fri, 30 Nov 2018 11:45:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=F+ZlLC8w1YGfmxQioOazyN2X3Aj/cwlBuyaIY4rr6ts=; b=doW+b1lYahjG8Zd+p2yNnioQDrUJGaNv5/DzIqhPHef6h+EVd+r0U6Z740NeCBVbW75NspF82t8rhEn1GvoJEAbuRbXLgP/DQIpeEZc66EVjWh5WkDCLWjnO9Djhq7VXN0mjKf7E6nSbnVEvfjGoD6WvI/kM+NC+0syoNHJyAAs= Received: from SN6PR00MB0301.namprd00.prod.outlook.com (52.132.117.155) by SN6PR00MB0446.namprd00.prod.outlook.com (52.132.118.145) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.20.1429.0; Fri, 30 Nov 2018 19:45:49 +0000 Received: from SN6PR00MB0301.namprd00.prod.outlook.com ([fe80::2006:968c:9d8d:32b0]) by SN6PR00MB0301.namprd00.prod.outlook.com ([fe80::2006:968c:9d8d:32b0%2]) with mapi id 15.20.1429.000; Fri, 30 Nov 2018 19:45:49 +0000 From: Mike Jones To: Roman Danyliw , "ace@ietf.org" Thread-Topic: Syntax check of examples in draft-ietf-ace-cwt-proof-of-possession-05 Thread-Index: AdSI3wRNfJL7yZrTRs6T+pPDYimggAABj6nA Date: Fri, 30 Nov 2018 19:45:49 +0000 Message-ID: References: <359EC4B99E040048A7131E0F4E113AFC0184C52937@marathon> In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC0184C52937@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=True; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Owner=mbj@microsoft.com; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2018-11-30T19:45:47.0387872Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=General; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Application=Microsoft Azure Information Protection; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Extended_MSFT_Method=Automatic; Sensitivity=General x-originating-ip: [2001:4898:80e8:8:535:6ce7:ef20:39c9] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; SN6PR00MB0446; 6:mmreNXLFyvf0w+6OEGsOQcmuj0uicKsLX25FRbiWQTj0oIyCkk+zoQpRV6Hxq+4O9V0EvWeOvLoxwWQXoAQ3omJeU8E7C4UxEZncACmAlvqtjc8cjy6bZNlm9nmDo2u9tusclWFWYSb+2ICXteix5sjamAd3wM42FPzEtwzqoGyLBRJFgL2SHQpyqhxOtGr8M+1rCxPFrnSf9EokxEtQyBMPCeTdTR/AX43UNiodni6q4Ew0fDU3q2S4Y4ppuAyqsDeEtFADlrLoRhXcdZrtKIJQF8XYm795uBhpPpiTmVrAnby0aZnvid4x0uAmbsoUMilXeR9meDfkr3i86Ff6E9co1QFywfHbCJUvHZr1qCw9AuUpXtpwI5V/Jm7SceA6st12cuOUQrvcUWen6eiv++Bg519IQVd6tnQF94SQ0emD55IUNC+hMxCiam04F/prhM1qO7aDImrm7t6aYjQTTg==; 5:noqOfZAG2Rj1JOtzgKx45fOsKn2uBvlHHeq2SFgcSIapFZh+Yqmf+to1Q48uco74+yrteBTy6kZx6i7/Btk6AbLOWfEJf1iQv4BUKz24Q+q0Dfy5/I0w11AjlHWCw4FGG7tDLsNLo76hHHC/nYtrZ3L6+5fN/xgOD62Wod/9oO0=; 7:lUNJhs7TRQOTFJMxRz632aPFdvWqvpoizON2RDq64DKwYFidQNTh+3voOojwkTlIJzfDeWH6Y07wn5Qrjzlu/gHFKxjyfol87GgRVp68rqGbGq+I2b9BRFBMBW1bwx1BKXLar1XD35XDJht/z5LzQw== x-ms-exchange-antispam-srfa-diagnostics: SOS; x-ms-office365-filtering-correlation-id: 897b577d-d52f-4148-1b1e-08d656fc6db6 x-ms-office365-filtering-ht: Tenant x-microsoft-antispam: BCL:0; PCL:0; RULEID:(2390098)(7020095)(4652040)(8989299)(5600074)(711020)(4618075)(4534185)(4627221)(201703031133081)(201702281549075)(8990200)(2017052603328)(7193020); SRVR:SN6PR00MB0446; x-ms-traffictypediagnostic: SN6PR00MB0446: x-ms-exchange-purlcount: 1 authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-microsoft-antispam-prvs: x-ms-exchange-senderadcheck: 1 x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(8211001083)(2017102700009)(2017102701064)(6040522)(8220035)(2401047)(5005006)(8121501046)(2017102702064)(20171027021009)(20171027022009)(20171027023009)(20171027024009)(20171027025009)(20171027026009)(2017102703076)(93006095)(93001095)(3002001)(3231453)(999002)(944501468)(2018427008)(10201501046)(6055026)(148016)(149066)(150057)(6041310)(20161123558120)(20161123562045)(20161123560045)(20161123564045)(201703131423095)(201702281528075)(20161123555045)(201703061421075)(201708071742011)(7699051)(76991095); SRVR:SN6PR00MB0446; BCL:0; PCL:0; RULEID:; SRVR:SN6PR00MB0446; x-forefront-prvs: 087223B4DA x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(376002)(396003)(346002)(366004)(136003)(39860400002)(13464003)(199004)(189003)(71190400001)(71200400001)(316002)(2501003)(55016002)(22452003)(97736004)(74316002)(6506007)(76176011)(8990500004)(6246003)(575784001)(14454004)(102836004)(7736002)(6116002)(11346002)(446003)(86612001)(5660300001)(110136005)(486006)(476003)(7696005)(25786009)(99286004)(53546011)(106356001)(86362001)(68736007)(33656002)(10290500003)(8676002)(81166006)(8936002)(81156014)(46003)(305945005)(229853002)(966005)(72206003)(186003)(256004)(53936002)(6306002)(9686003)(105586002)(6436002)(508600001)(10090500001)(2906002); DIR:OUT; SFP:1102; SCL:1; SRVR:SN6PR00MB0446; H:SN6PR00MB0301.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-microsoft-antispam-message-info: tWqva2nn71Xr0aanfyqNluHUcb5RQekzVF7cJUPUESe4cqYKUCLIqcbeiinLBZT5TPMrHyIf/Sth2vRr5vNCPeiLPb2bNrgs9E977bvqhloOQY2vNa13gxjBbaegBxt2O/98NvzyiDTXeqU5sQGW1YURITl9qHAcIMSuJuNVY1uN27cEPc1cUJ0Iyxs283SqHODVIPtuFTKcNdTXrX6GSIqpbaJsOp+3W28C5+Ux4/7nVC5GABIGQpdKGKV0zcPADDjtxa8SouM6L8Mn19dZ6GP1OXpDugrtWrjVsAKrqw4exii+LfC+wQb7FkEgFwvKqy4fbHctyXvG0iISMPd2iF9SSe2B9r/uG2ksYed3b/o= spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 897b577d-d52f-4148-1b1e-08d656fc6db6 X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Nov 2018 19:45:49.0871 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR00MB0446 Archived-At: Subject: Re: [Ace] Syntax check of examples in draft-ietf-ace-cwt-proof-of-possession-05 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2018 19:45:57 -0000 Thanks - we'll address that as well. -- Mike -----Original Message----- From: Ace On Behalf Of Roman Danyliw Sent: Friday, November 30, 2018 11:10 AM To: ace@ietf.org Subject: [Ace] Syntax check of examples in draft-ietf-ace-cwt-proof-of-poss= ession-05 Hello! As part of my shepherd review, I ran all of the examples in draft-ietf-ace-= cwt-proof-of-possession-05 through a CBOR diagnostic-to-CBOR validator (tha= nks Carsten for cbor.me). All of the examples were fine but the first one = in Section 3.3: --[current text]-- { /kty/ 1 : /Symmetric/ 4, /alg/ 3 : /HMAC256/ 5, /k/ -1 : h'6684523ab17337f173500e5728c628547cb37df e68449c65f885d1b73b49eae1A0B0C0D0E0F10' } --[end]-- The error was: Expected one of [ \t\n\r], "/", [0-9a-fA-F] at line 5, column 56 (byte 184)= after { /kty/ 1 : /Symmetric/ 4, /alg/ 3 : /HMAC256/ 5, /k/ -1 : h'6684523= ab17337f173500e5728c628547cb37df e68449c65f885d1b73b49eae1A0B0C0D0E0F10 It appears that the string of hex encoded octets in /k/ is short one charac= ter. Roman=20 _______________________________________________ Ace mailing list Ace@ietf.org https://www.ietf.org/mailman/listinfo/ace From nobody Fri Nov 30 12:51:31 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DC3BA131001 for ; Fri, 30 Nov 2018 12:51:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c84X78-B9B5w for ; Fri, 30 Nov 2018 12:51:26 -0800 (PST) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3DD1A130F11 for ; Fri, 30 Nov 2018 12:51:26 -0800 (PST) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost2.informatik.uni-bremen.de [134.102.200.7]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id wAUKpEx7029486; Fri, 30 Nov 2018 21:51:20 +0100 (CET) Received: from [192.168.217.102] (p54A6CE66.dip0.t-ipconnect.de [84.166.206.102]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 43664L3n47z1Bqf; Fri, 30 Nov 2018 21:51:14 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) From: Carsten Bormann In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC0184C526B3@marathon> Date: Fri, 30 Nov 2018 21:51:13 +0100 Cc: "ace@ietf.org" X-Mao-Original-Outgoing-Id: 565303871.957723-80cc057de2064761b19457e212612a91 Content-Transfer-Encoding: quoted-printable Message-Id: <141081A7-C34C-4456-992B-936D3CD68137@tzi.org> References: <359EC4B99E040048A7131E0F4E113AFC0184C526B3@marathon> To: Roman Danyliw X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: Re: [Ace] Idnits on draft-ietf-ace-cwt-proof-of-possession-05 X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2018 20:51:30 -0000 On Nov 30, 2018, at 17:50, Roman Danyliw wrote: >=20 > /protected header / h=E2=80=99A1010A' /{ \alg\ 1:10 = \AES-CCM-16-64-128\}/, You may want to switch to the << =E2=80=A6 >> form: > /protected header / << { /alg/ 1: 10 /AES-CCM-16-64-128/ } >>, Gr=C3=BC=C3=9Fe, Carsten From nobody Fri Nov 30 13:58:44 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E73DA130E1D for ; Fri, 30 Nov 2018 13:58:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6zAYCemf6kuX for ; Fri, 30 Nov 2018 13:58:40 -0800 (PST) Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A8A10130DF3 for ; Fri, 30 Nov 2018 13:58:40 -0800 (PST) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id wAULwd1U002773 for ; Fri, 30 Nov 2018 16:58:39 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu wAULwd1U002773 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1543615119; bh=trYb4jKKNttQYkGSojZIbW64FKK7W2YpIPNzERcGQyQ=; h=From:To:Subject:Date:From; b=n9BC1v9TEn+YDcbLfLftCjqKb3ujks2bTdWXwC0oz4Q6G5iT7Ttb+oynEEKlcYnXg c8Nfg7AptTy9D27m688JgOG+WEokyYAzWkM7p3Pi4V3QERz8ccGACzbneVIEl+dd8W uBeoSAt7AKWVajN0GFMwYchS3nuP8xIIdRXvfGuk= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id wAULwcO4002369 for ; Fri, 30 Nov 2018 16:58:38 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASSINA.ad.sei.cmu.edu ([10.64.28.249]) with mapi id 14.03.0415.000; Fri, 30 Nov 2018 16:58:38 -0500 From: Roman Danyliw To: "ace@ietf.org" Thread-Topic: Call for adoption of draft-tiloca-ace-oscoap-joining Thread-Index: AdSI95yhLiFsDREPRiCJ7cDGtjvMTA== Date: Fri, 30 Nov 2018 21:58:36 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0184C52E21@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Ace] Call for adoption of draft-tiloca-ace-oscoap-joining X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2018 21:58:43 -0000 Hello! This is the start of a two week call for input on the WG adoption of the do= cument: draft-tiloca-ace-oscoap-joining https://tools.ietf.org/html/draft-tiloca-ace-oscoap-joining-05 The document has been presented and discussed at the last few meetings; and= revisions have been made based on WG feedback. At the IETF 103 meeting, t= here was support for adoption; and volunteers to review and implement the d= raft.=20 Please provide feedback to the list/chairs if you believe that this documen= t should be adopted as a WG document. The adoption call will end on Dece= mber 14 2018. Regards, Roman and Jim From nobody Fri Nov 30 13:58:52 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1EF01131072 for ; Fri, 30 Nov 2018 13:58:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qi1ZXoE9MNQg for ; Fri, 30 Nov 2018 13:58:43 -0800 (PST) Received: from veto.sei.cmu.edu (veto.sei.cmu.edu [147.72.252.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5AC23130DF3 for ; Fri, 30 Nov 2018 13:58:43 -0800 (PST) Received: from korb.sei.cmu.edu (korb.sei.cmu.edu [10.64.21.30]) by veto.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id wAULwgjU017939 for ; Fri, 30 Nov 2018 16:58:42 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 veto.sei.cmu.edu wAULwgjU017939 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1543615122; bh=yjXc0mpUlVmy09SrZy/5ouASB9B9wVHRtYPnrzQ061k=; h=From:To:Subject:Date:From; b=TiISuN/+JEL4nposGpqQZr06O0PEf3pNKtkSV4T2PSfdK+M4QXiknOWyMWACcEB4P LdXhPGjg9o7u1FFkfyT7tDHRU6HBJfGnpP0hukpWUyJiVSyYu+upgvA9egkpEAqPT0 5WZsLHdzVQbCvRsEl5JELdZzXH8/Bk2TiKtLVt8Q= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by korb.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id wAULwdl0024190 for ; Fri, 30 Nov 2018 16:58:39 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.03.0415.000; Fri, 30 Nov 2018 16:58:39 -0500 From: Roman Danyliw To: "ace@ietf.org" Thread-Topic: Call for adoption of draft-palombini-ace-key-groupcomm Thread-Index: AdSI8aalNXFev0zyRSiL4RjyZD+fmQ== Date: Fri, 30 Nov 2018 21:58:38 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0184C52E29@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [Ace] Call for adoption of draft-palombini-ace-key-groupcomm X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2018 21:58:47 -0000 Hello! This is the start of a two week call for input on the WG adoption of the do= cument: draft-palombini-ace-key-groupcomm https://tools.ietf.org/html/draft-palombini-ace-key-groupcomm-02 The document has been presented and discussed at the last few meetings; and= revisions have been made based on WG feedback. At the IETF 103 meeting, t= here was support for adoption; and volunteers to review and implement the d= raft.=20 Please provide feedback to the list/chairs if you believe that this documen= t should be adopted as a WG document. The adoption call will end on Dece= mber 14 2018. Regards, Roman and Jim From nobody Fri Nov 30 14:01:23 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 38D0813106E; Fri, 30 Nov 2018 14:01:22 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Secretariat To: , , X-Test-IDTracker: no X-IETF-IDTracker: 6.89.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <154361528222.27543.2382823348185147759.idtracker@ietfa.amsl.com> Date: Fri, 30 Nov 2018 14:01:22 -0800 Archived-At: Subject: [Ace] The ACE WG has placed draft-palombini-ace-key-groupcomm in state "Call For Adoption By WG Issued" X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2018 22:01:22 -0000 The ACE WG has placed draft-palombini-ace-key-groupcomm in state Call For Adoption By WG Issued (entered by Roman Danyliw) The document is available at https://datatracker.ietf.org/doc/draft-palombini-ace-key-groupcomm/ From nobody Fri Nov 30 14:01:58 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 30C17131070; Fri, 30 Nov 2018 14:01:56 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Secretariat To: , , X-Test-IDTracker: no X-IETF-IDTracker: 6.89.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <154361531619.27556.4281543354005382527.idtracker@ietfa.amsl.com> Date: Fri, 30 Nov 2018 14:01:56 -0800 Archived-At: Subject: [Ace] The ACE WG has placed draft-tiloca-ace-oscoap-joining in state "Call For Adoption By WG Issued" X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2018 22:01:56 -0000 The ACE WG has placed draft-tiloca-ace-oscoap-joining in state Call For Adoption By WG Issued (entered by Roman Danyliw) The document is available at https://datatracker.ietf.org/doc/draft-tiloca-ace-oscoap-joining/ From nobody Fri Nov 30 14:24:34 2018 Return-Path: X-Original-To: ace@ietf.org Delivered-To: ace@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id BA997131093; Fri, 30 Nov 2018 14:24:32 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: IETF Secretariat To: , , X-Test-IDTracker: no X-IETF-IDTracker: 6.89.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <154361667275.27486.7837477362315661423.idtracker@ietfa.amsl.com> Date: Fri, 30 Nov 2018 14:24:32 -0800 Archived-At: Subject: [Ace] The ACE WG has placed draft-boucadair-dots-server-discovery in state "Call For Adoption By WG Issued" X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2018 22:24:33 -0000 The ACE WG has placed draft-boucadair-dots-server-discovery in state Call For Adoption By WG Issued (entered by Roman Danyliw) The document is available at https://datatracker.ietf.org/doc/draft-boucadair-dots-server-discovery/ From nobody Fri Nov 30 14:35:08 2018 Return-Path: X-Original-To: ace@ietfa.amsl.com Delivered-To: ace@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 600AF13107F for ; Fri, 30 Nov 2018 14:35:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id glafC1otpDED for ; Fri, 30 Nov 2018 14:35:05 -0800 (PST) Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E220A130F29 for ; Fri, 30 Nov 2018 14:35:04 -0800 (PST) Received: from korb.sei.cmu.edu (korb.sei.cmu.edu [10.64.21.30]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id wAUMZ4Bu008065 for ; Fri, 30 Nov 2018 17:35:04 -0500 DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu wAUMZ4Bu008065 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1543617304; bh=XTwcE0teBUPn1dmZsacghYiSyw8fxQqXbo2VQ3jyJeY=; h=From:To:Subject:Date:References:In-Reply-To:From; b=THI6DoXPdfY25em8RNqi00VqDvSPK/dnEOBvuOyVSs3Ox+h56DuhOfuIlLEqpv7Yh ccwXJ+w98IIkOS6K/5A7FgPRgEgFhrZckt1/HlKQp+THW7FiwnTNo77/gbIX0CB5UO sENVXFXGC2mZ6ecfrdIWwsjieb4vM7z0drQ8tYAM= Received: from CASCADE.ad.sei.cmu.edu (cascade.ad.sei.cmu.edu [10.64.28.248]) by korb.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id wAUMYxV7001098 for ; Fri, 30 Nov 2018 17:34:59 -0500 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASCADE.ad.sei.cmu.edu ([10.64.28.248]) with mapi id 14.03.0415.000; Fri, 30 Nov 2018 17:34:59 -0500 From: Roman Danyliw To: "ace@ietf.org" Thread-Topic: The ACE WG has placed draft-boucadair-dots-server-discovery in state "Call For Adoption By WG Issued" Thread-Index: AQHUiPuRF1azUrivTUeXkBuw7ASwn6Vo51wA Date: Fri, 30 Nov 2018 22:34:58 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC0184C5303E@marathon> References: <154361667275.27486.7837477362315661423.idtracker@ietfa.amsl.com> In-Reply-To: <154361667275.27486.7837477362315661423.idtracker@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Subject: [Ace] FW: The ACE WG has placed draft-boucadair-dots-server-discovery in state "Call For Adoption By WG Issued" X-BeenThere: ace@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Authentication and Authorization for Constrained Environments \(ace\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Nov 2018 22:35:06 -0000 VGhpcyBkb2N1bWVudCBzdGF0ZSBjaGFuZ2UgaXMgYW4gZXJyb3Igb24gbXkgcGFydC4gIEkgc2Vs ZWN0ZWQgdGhlIHdyb25nIFdHIGluIHRoZSBkYXRhdHJhY2tlciBpbnRlcmZhY2UuICBBQ0UgaXMg Tk9UIGNvbnNpZGVyaW5nIHRoaXMgZHJhZnQgZm9yIGFkb3B0aW9uIQ0KDQpSZWdhcmRzLA0KUm9t YW4NCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IElFVEYgU2VjcmV0YXJpYXQg W21haWx0bzppZXRmLXNlY3JldGFyaWF0LXJlcGx5QGlldGYub3JnXSANClNlbnQ6IEZyaWRheSwg Tm92ZW1iZXIgMzAsIDIwMTggNToyNSBQTQ0KVG86IGFjZS1jaGFpcnNAaWV0Zi5vcmc7IGRyYWZ0 LWJvdWNhZGFpci1kb3RzLXNlcnZlci1kaXNjb3ZlcnlAaWV0Zi5vcmc7IGFjZUBpZXRmLm9yZw0K U3ViamVjdDogVGhlIEFDRSBXRyBoYXMgcGxhY2VkIGRyYWZ0LWJvdWNhZGFpci1kb3RzLXNlcnZl ci1kaXNjb3ZlcnkgaW4gc3RhdGUgIkNhbGwgRm9yIEFkb3B0aW9uIEJ5IFdHIElzc3VlZCINCg0K DQpUaGUgQUNFIFdHIGhhcyBwbGFjZWQgZHJhZnQtYm91Y2FkYWlyLWRvdHMtc2VydmVyLWRpc2Nv dmVyeSBpbiBzdGF0ZSBDYWxsIEZvciBBZG9wdGlvbiBCeSBXRyBJc3N1ZWQgKGVudGVyZWQgYnkg Um9tYW4gRGFueWxpdykNCg0KVGhlIGRvY3VtZW50IGlzIGF2YWlsYWJsZSBhdA0KaHR0cHM6Ly9k YXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtYm91Y2FkYWlyLWRvdHMtc2VydmVyLWRpc2Nv dmVyeS8NCg0K