From nobody Wed Apr 1 14:17:44 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8545E1A03AA for ; Wed, 1 Apr 2015 14:17:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.347 X-Spam-Level: X-Spam-Status: No, score=-1.347 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_COM=0.553] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id deWMqliehtNy for ; Wed, 1 Apr 2015 14:17:41 -0700 (PDT) Received: from proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A35391A01E2 for ; Wed, 1 Apr 2015 14:17:41 -0700 (PDT) Received: from [10.20.30.101] (50-1-51-95.dsl.dynamic.fusionbroadband.com [50.1.51.95]) (authenticated bits=0) by proper.com (8.15.1/8.14.9) with ESMTPSA id t31LHdR7056986 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Wed, 1 Apr 2015 14:17:41 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) X-Authentication-Warning: proper.com: Host 50-1-51-95.dsl.dynamic.fusionbroadband.com [50.1.51.95] claimed to be [10.20.30.101] Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) From: Paul Hoffman In-Reply-To: <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> Date: Wed, 1 Apr 2015 14:17:39 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> To: "cose@ietf.org" X-Mailer: Apple Mail (2.2070.6) Archived-At: Subject: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2015 21:17:42 -0000 There have been no messages for a few days; maybe we are done. Mike = wants something about a JWK mapping, but I don't see any other support = for it. Oh, and you need to change "March" to "April" below because we already = ran through that... Time to submit it to Kathleen? --Paul Hoffman > On Mar 29, 2015, at 8:11 AM, Kepeng Li = wrote: >=20 > Thanks for the input. >=20 > Based on the discussion, now the draft charter 2015-03-29 is: >=20 > # CBOR Object Signing and Encryption (COSE) >=20 > ## Charter for Working Group >=20 > Concise Binary Object Representation (CBOR, RFC 7049) is a concise > binary format for the serialization of data structured to an extended > version of the JSON data model. One motivation for CBOR was to make > this data model more amenable to constrained nodes and constrained > node networks (RFC 7228). >=20 > The JOSE working group recently completed producing representations > for message authentication (MACs), encryption, and digital signatures, > using JSON representation. This working group will reuse the work > done by JOSE, adapting it to the capabilities of CBOR. This will rely > on the JOSE registries, which, where this provides additional > efficiency, will be expanded with additional information. >=20 > The resulting formats will not be cryptographically convertible from > or to JOSE formats. This lack of a need for bit-for-bit compabitility > which will enable some simplification in the adaptation process. >=20 > The WG will have two deliverables: > - a standards-track specification covering the same cryptographic > formats from JOSE, expressed in CBOR; > - registration for algorithms (such as AES-CCM-8) that are appropriate > for constrained environments. >=20 > The Working Group will use a wiki to track desired use cases for its = work, > but does not intend to publish this as an RFC. >=20 > ## Milestones >=20 > * March 2015: Submit COSE specification as a WG item >=20 > * April 2015: Submit COSE constrained-appropriate algorithms as a WG = item >=20 > * June 2015: Submit COSE specification to the IESG, for publication as > a Proposed Standard >=20 > * July 2015: Submit COSE constrained-appropriate algorithms to the > IESG, for publication as a Proposed Standard >=20 > I will put the draft charter to a wiki page, so we can track changes = from that. From nobody Wed Apr 1 14:26:29 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 026A91A1B7D for ; Wed, 1 Apr 2015 14:26:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.211 X-Spam-Level: X-Spam-Status: No, score=-14.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3VsxXbJDKA1i for ; Wed, 1 Apr 2015 14:26:26 -0700 (PDT) Received: from rcdn-iport-2.cisco.com (rcdn-iport-2.cisco.com [173.37.86.73]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1DBBC1A1B25 for ; Wed, 1 Apr 2015 14:26:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=4074; q=dns/txt; s=iport; t=1427923583; x=1429133183; h=message-id:date:from:mime-version:to:subject:references: in-reply-to:content-transfer-encoding; bh=5GLRQkaZ2kU2spf36j1hSnWXvMbYuC+2ykJGRK4R/fM=; b=c0stRKJu32JwiLEPDfoyclGBv5+LwPWsXPbCJifd5DWnE+KSlly9lmqD aZgHUShhlt7FNvq0EzA1r2tEiLcPp9CNjnlJ+VpX5GZmigcNaZ3Tszrgf dX9jSnbZ5z/8i/s2llqJByNXlyjpf3FV7xnQGBWSdb7QPXvW2PBt0KMlc k=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0A+BQD5YRxV/4MNJK1cgwZSXAWDEMJDCoVzAoE/TAEBAQEBAX2EFAEBAQMBAQEBIA8BOwoRCxgCAgUWCwICCQMCAQIBFTAGDQYCAQGIIwgNtVuZBwEBAQEBAQEDAQEBAQEBAQEWBIEhigiERjqCaIFFBYseiTeGBIcKjTYiggEdgW9QgUR/AQEB X-IronPort-AV: E=Sophos;i="5.11,506,1422921600"; d="scan'208";a="408857166" Received: from alln-core-1.cisco.com ([173.36.13.131]) by rcdn-iport-2.cisco.com with ESMTP; 01 Apr 2015 21:26:22 +0000 Received: from xhc-aln-x08.cisco.com (xhc-aln-x08.cisco.com [173.36.12.82]) by alln-core-1.cisco.com (8.14.5/8.14.5) with ESMTP id t31LQL05023002 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Wed, 1 Apr 2015 21:26:21 GMT Received: from [10.129.24.55] (10.129.24.55) by xhc-aln-x08.cisco.com (173.36.12.82) with Microsoft SMTP Server (TLS) id 14.3.195.1; Wed, 1 Apr 2015 16:26:20 -0500 Message-ID: <551C627B.6030900@cisco.com> Date: Wed, 1 Apr 2015 15:26:19 -0600 From: =?UTF-8?B?4oyYIE1hdHQgTWlsbGVy?= User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> In-Reply-To: <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 8bit X-Originating-IP: [10.129.24.55] Archived-At: Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2015 21:26:29 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 4/1/15 3:17 PM, Paul Hoffman wrote: > There have been no messages for a few days; maybe we are done. Mike > wants something about a JWK mapping, but I don't see any other > support for it. > What I saw is Mike effectively asking "what about JWK?" and Carsten replying "It was implied". I do think it is necessary to have the correct CBOR representation of keys. I also think the mapping is fairly trivial -- where the value was base64url, it's now bstr. To accomplish that, I suggest changing the second paragraph to include mention of "cryptographic keys": - -----NEW TEXT----- The JOSE working group recently completed producing representations for cryptographic keys, message authentication (MACs), encryption, and digital signatures, using JSON representation. This working group will reuse the work done by JOSE, adapting it to the capabilities of CBOR. This will rely on the JOSE registries, which, where this provides additional efficiency, will be expanded with additional information. - -----NEW TEXT----- Otherwise I think it looks good, and is ready to submit. - -- - - m&m Matt Miller < mamille2@cisco.com > Cisco Systems, Inc. > >> On Mar 29, 2015, at 8:11 AM, Kepeng Li >> wrote: >> >> Thanks for the input. >> >> Based on the discussion, now the draft charter 2015-03-29 is: >> >> # CBOR Object Signing and Encryption (COSE) >> >> ## Charter for Working Group >> >> Concise Binary Object Representation (CBOR, RFC 7049) is a >> concise binary format for the serialization of data structured to >> an extended version of the JSON data model. One motivation for >> CBOR was to make this data model more amenable to constrained >> nodes and constrained node networks (RFC 7228). >> >> The JOSE working group recently completed producing >> representations for message authentication (MACs), encryption, >> and digital signatures, using JSON representation. This working >> group will reuse the work done by JOSE, adapting it to the >> capabilities of CBOR. This will rely on the JOSE registries, >> which, where this provides additional efficiency, will be >> expanded with additional information. >> >> The resulting formats will not be cryptographically convertible >> from or to JOSE formats. This lack of a need for bit-for-bit >> compabitility which will enable some simplification in the >> adaptation process. >> >> The WG will have two deliverables: - a standards-track >> specification covering the same cryptographic formats from JOSE, >> expressed in CBOR; - registration for algorithms (such as >> AES-CCM-8) that are appropriate for constrained environments. >> >> The Working Group will use a wiki to track desired use cases for >> its work, but does not intend to publish this as an RFC. >> >> ## Milestones >> >> * March 2015: Submit COSE specification as a WG item >> >> * April 2015: Submit COSE constrained-appropriate algorithms as a >> WG item >> >> * June 2015: Submit COSE specification to the IESG, for >> publication as a Proposed Standard >> >> * July 2015: Submit COSE constrained-appropriate algorithms to >> the IESG, for publication as a Proposed Standard >> >> I will put the draft charter to a wiki page, so we can track >> changes from that. > > _______________________________________________ Cose mailing list > Cose@ietf.org https://www.ietf.org/mailman/listinfo/cose > -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) Comment: GPGTools - https://gpgtools.org iQEcBAEBCgAGBQJVHGJ7AAoJEDWi+S0W7cO1E7AH/A4cuIE3EWU+FgSvTPKoYyJD 6Z9CHFtbEv5gE2vEdnB/yHUbO/GDFiMeyh/nlXhBwxu/q0dNjyQPNemUaJDvRrvp D2xRl/y5QVF9cRj1mYxyJYhjy2lcI1KO/LthQVu9J/rkzqRJpk4vhwzyBKGlUbNZ kuycMl0ghz0jlXH052lXJl8kEWj6kMerbkwt5dpHZcEosV8vD0jdPbB78mMnBQgs o4YCzieD1ivBWtrJnCPshBtKhQOx5KuKJrhJle0GIg/dCU+wk4KT8ZGWpFrLOZlo e0tBV1iFA4Tp29rN906pEpio9N9W5kaQoBXzoUUeZuqcKDrTBhKAQuz7MVtqNjs= =17az -----END PGP SIGNATURE----- From nobody Wed Apr 1 14:43:39 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1F7941A8703 for ; Wed, 1 Apr 2015 14:43:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.349 X-Spam-Level: X-Spam-Status: No, score=0.349 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, HELO_EQ_DE=0.35] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kF5L62M3inYU for ; Wed, 1 Apr 2015 14:43:36 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 58EAD1A8701 for ; Wed, 1 Apr 2015 14:43:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id t31LhXdB008078; Wed, 1 Apr 2015 23:43:33 +0200 (CEST) Received: from alma.local (p5DC7F099.dip0.t-ipconnect.de [93.199.240.153]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3lHLcj0qWmzCtpD; Wed, 1 Apr 2015 23:43:33 +0200 (CEST) Message-ID: <551C6683.8070002@tzi.org> Date: Wed, 01 Apr 2015 23:43:31 +0200 From: Carsten Bormann User-Agent: Postbox 3.0.11 (Macintosh/20140602) MIME-Version: 1.0 To: Paul Hoffman References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> In-Reply-To: <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2015 21:43:38 -0000 Because things are getting confusing with all that mail back and forth, I have tried to document the progress of the draft charter at https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md Yes, I also think it is time to submit this to Kathleen. On a separate note, I have also started to collect use case information (read: put Göran's input into a markdown file). Enjoy (and contribute) at: https://github.com/cose-spec/use-cases/blob/master/use-cases.md Grüße, Carsten [No April Fool jokes were harmed in compositing this message.] From nobody Wed Apr 1 14:48:39 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C2FB81A871E for ; Wed, 1 Apr 2015 14:48:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -11.911 X-Spam-Level: X-Spam-Status: No, score=-11.911 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MANGLED_DIET=2.3, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FK2qX5zPnDUt for ; Wed, 1 Apr 2015 14:48:36 -0700 (PDT) Received: from rcdn-iport-5.cisco.com (rcdn-iport-5.cisco.com [173.37.86.76]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0EB501A8746 for ; Wed, 1 Apr 2015 14:48:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1560; q=dns/txt; s=iport; t=1427924915; x=1429134515; h=message-id:date:from:mime-version:to:cc:subject: references:in-reply-to:content-transfer-encoding; bh=428dpVTqJhdM5nwKSKaeGe8iZvXfVbdfEkpwYUPL4mc=; b=M0Wr9aJX1s9zOl8J9eJS0Q9jqzx76OhOxwFbTcPfsVVt2+4PAZfCvkHC wJn2NCTnOQEfAJQmgd5A9GhDNHiplVDBrpwO/wRcL79G5LDfsxNG1NIaz LjkJwmPBprSMDzbfETXdop2MvhON7zUXYYYaKG5fJuelRei1z50Ck5VU6 E=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0A9BQC6ZhxV/5FdJa1cgwZSXAWDEMJNhXMCgUBMAQEBAQEBfYQUAQEBAwEjDwFFAQULCw4KAgIFFgsCAgkDAgECATUQBgEMAQUCAQGIIwgNtWWZBQEBAQEBAQEBAQEBAQEBAQEBAQEBARMEgSGKCIQnAQEdMweCaIFFAQSLHok3hgSBHYVtIY0VIoIBARyBb1CBCzl/AQEB X-IronPort-AV: E=Sophos;i="5.11,506,1422921600"; d="scan'208";a="408503541" Received: from rcdn-core-9.cisco.com ([173.37.93.145]) by rcdn-iport-5.cisco.com with ESMTP; 01 Apr 2015 21:48:34 +0000 Received: from xhc-aln-x08.cisco.com (xhc-aln-x08.cisco.com [173.36.12.82]) by rcdn-core-9.cisco.com (8.14.5/8.14.5) with ESMTP id t31LmYAA004118 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 1 Apr 2015 21:48:34 GMT Received: from [10.129.24.55] (10.129.24.55) by xhc-aln-x08.cisco.com (173.36.12.82) with Microsoft SMTP Server (TLS) id 14.3.195.1; Wed, 1 Apr 2015 16:48:33 -0500 Message-ID: <551C67B1.7010701@cisco.com> Date: Wed, 1 Apr 2015 15:48:33 -0600 From: =?UTF-8?B?4oyYIE1hdHQgTWlsbGVy?= User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: Carsten Bormann , Paul Hoffman References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551C6683.8070002@tzi.org> In-Reply-To: <551C6683.8070002@tzi.org> Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit X-Originating-IP: [10.129.24.55] Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2015 21:48:37 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 4/1/15 3:43 PM, Carsten Bormann wrote: > Because things are getting confusing with all that mail back and > forth, I have tried to document the progress of the draft charter > at > > https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md > > Thanks for gathering it together, Carsten. > Yes, I also think it is time to submit this to Kathleen. > > On a separate note, I have also started to collect use case > information (read: put Göran's input into a markdown file). Enjoy > (and contribute) at: > > https://github.com/cose-spec/use-cases/blob/master/use-cases.md > I believe Paul said this before -- I don't think it's necessary to formally publish a use case document. I'm fine having something less malleable (and more trackable) than a Wiki page, but I don't think it's necessary to actual publish an I-D, let alone an RFC. - -- - - m&m Matt Miller < mamille2@cisco.com > Cisco Systems, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) Comment: GPGTools - https://gpgtools.org iQEcBAEBCgAGBQJVHGexAAoJEDWi+S0W7cO1EnMH/ispcY4W0ivL3eIYtRc37lmi rSrnzq5boq9iEcnGGZLOAlnl6FQ1QvuZKCYQNJLmTZD/WmxRmoEGI2aTkbFooCFC WUBUIEfGLhpnueMhB/iK+fvfTeiHc+AVFOjKZl66x4/SNVUMCcBJbml3An23XTHn 065tN6EQVHlcXxNKm2AhkHigWjAscCvwjV8MEp/FonOzjlRI3sJ7vf+1JnIsd2an PqhYaXBzMOtxqyrwOKGb1IvPAFWT6bTDDFK0eKk0oc8s/uWHbzFvfNRa55w9wXiI aQQ48GY4rRex6uF2Wh7PtMfTReu68wQ2drdugJlfDmWbI25GYOTb6fLu+RckCEQ= =HhpP -----END PGP SIGNATURE----- From nobody Wed Apr 1 14:58:12 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C896B1A8774 for ; Wed, 1 Apr 2015 14:58:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.05 X-Spam-Level: * X-Spam-Status: No, score=1.05 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, MANGLED_DIET=2.3, MIME_8BIT_HEADER=0.3] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0o2sTd5X2xOT for ; Wed, 1 Apr 2015 14:58:11 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E48251A874B for ; Wed, 1 Apr 2015 14:58:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id t31Lw3L0012467; Wed, 1 Apr 2015 23:58:03 +0200 (CEST) Received: from alma.local (p5DC7F099.dip0.t-ipconnect.de [93.199.240.153]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3lHLxR02DCzCtJ2; Wed, 1 Apr 2015 23:58:02 +0200 (CEST) Message-ID: <551C69E9.3040501@tzi.org> Date: Wed, 01 Apr 2015 23:58:01 +0200 From: Carsten Bormann User-Agent: Postbox 3.0.11 (Macintosh/20140602) MIME-Version: 1.0 To: =?UTF-8?B?4oyYIE1hdHQgTWlsbGVy?= References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551C6683.8070002@tzi.org> <551C67B1.7010701@cisco.com> In-Reply-To: <551C67B1.7010701@cisco.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: Paul Hoffman , "cose@ietf.org" Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Apr 2015 21:58:11 -0000 ⌘ Matt Miller wrote: > I believe Paul said this before -- I don't think it's necessary to > formally publish a use case document. I'm fine having something less > malleable (and more trackable) than a Wiki page, but I don't think > it's necessary to actual publish an I-D, let alone an RFC. Indeed -- that's why it's just a markdown file. I'm much more interested in collecting input here than in polishing that input into a freestanding document. (Of course, if there is some confusing wording, we still may want to fix it so we all know what the input was.) I hope we can get other input. (Unfortunately, not everybody is at liberty to discuss every use case -- I know about a nice one from the transportation world that I can't talk about right now.) Grüße, Carsten From nobody Wed Apr 1 21:13:52 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B738C1B2A87 for ; Wed, 1 Apr 2015 21:13:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SMTHk4A7Ddxp for ; Wed, 1 Apr 2015 21:13:49 -0700 (PDT) Received: from out4133-50.mail.aliyun.com (out4133-50.mail.aliyun.com [42.120.133.50]) by ietfa.amsl.com (Postfix) with ESMTP id C8BE41B2A13 for ; Wed, 1 Apr 2015 21:13:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alibaba-inc.com; s=default; t=1427948021; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type; bh=f5WKyX2l5fU57fFcNWhVBUDASqtIZu9G2VnA02TUszE=; b=q9XRm9vr06LXq0edRcfuWpdSurTNJJc8Do+cpDGCiPFy5GEuMMcxjE5kTFCD3X8gwEuKsA53KyMx2UEZxHjra7ksXzCkHW0X7exi6RcF/7r5sGwWyedZxlIFqTy8oV/yWtWdxEU3UK5oo+yPzYiBGr/8kfpKLwK0btXWYOoRPH8= X-Alimail-AntiSpam: AC=PASS; BC=-1|-1; BR=01201311R121e4; FP=0|-1|-1|-1|0|-1|-1|-1; HT=r41f05041; MF=kepeng.lkp@alibaba-inc.com; PH=DW; RN=3; RT=3; SR=0; Received: from WS-web (kepeng.lkp@alibaba-inc.com[10.147.38.177]) by r41g03022.xy2.aliyun.com at Thu, 02 Apr 2015 12:13:39 +0800 Date: Thu, 02 Apr 2015 12:13:39 +0800 From: "Kepeng Li" To: "Carsten Bormann" , "Paul Hoffman" Message-ID: <2f049d52-83e3-4de5-9525-69ff7df67498@alibaba-inc.com> X-Priority: 3 X-Mailer: Alimail-Mailagent revision 2688041 MIME-Version: 1.0 In-Reply-To: 551C6683.8070002@tzi.org References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org>, 551C6683.8070002@tzi.org Content-Type: multipart/alternative; boundary="----=ALIBOUNDARY_18580_49fe3940_551cc1f3_1a941" Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] =?utf-8?q?Are_we_finished_with_the_charter=3F?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 04:13:51 -0000 ------=ALIBOUNDARY_18580_49fe3940_551cc1f3_1a941 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable >I have tried to document the progress of the draft charter at=0A>https://gith= ub.com/cose-spec/wg-charter/blob/master/draft-charter.md=0AThank you Carsten, = very helpful.=0A>Yes, I also think it is time to submit this to Kathleen.=0AFi= ne with me.=0A@Karen, Mike, Jim, Goeran and others, what do you think?=0AThank= s.=0AKind Regards=0A=0AKpeng=0A-----------------------------------------------= -------------------=E5=8F=91=E4=BB=B6=E4=BA=BA=EF=BC=9ACarsten Bormann=E6=97=A5=E3=80=80=E6=9C=9F=EF=BC=9A2015=E5=B9=B404=E6=9C=8802=E6=97=A5 = 05:43:31=E6=94=B6=E4=BB=B6=E4=BA=BA=EF=BC=9APaul Hoffman=E6=8A=84=E3=80=80=E9=80=81=EF=BC=9Acose@ietf.org=E4=B8=BB=E3=80= =80=E9=A2=98=EF=BC=9ARe: [Cose] Are we finished with the charter?Because thing= s are getting confusing with all that mail back and forth,=0AI have tried to d= ocument the progress of the draft charter at=0A=0Ahttps://github.com/cose-spec= /wg-charter/blob/master/draft-charter.md=0A=0AYes, I also think it is time to = submit this to Kathleen.=0A=0AOn a separate note, I have also started to colle= ct use case information=0A(read: put G=C3=B6ran's input into a markdown file).= Enjoy (and contribute) at:=0A=0Ahttps://github.com/cose-spec/use-cases/blob/= master/use-cases.md=0A=0AGr=C3=BC=C3=9Fe, Carsten=0A=0A[No April Fool jokes we= re harmed in compositing this message.]=0A=0A_________________________________= ______________=0ACose mailing list=0ACose@ietf.org=0Ahttps://www.ietf.org/mail= man/listinfo/cose=0A=0A ------=ALIBOUNDARY_18580_49fe3940_551cc1f3_1a941 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

>I have tried to document the progress of the draft charter = at

=0A

>https://github.com/cose-spec/wg-charter/blob/maste= r/draft-charter.md

=0A

Thank you Carsten, very helpful.

=0A=

>Yes, I also think it is time to submit this to Kathleen.=0A

Fine with me.

=0A

@Karen, Mike, Jim, Goera= n and others, what do you think?

=0A

Thanks.

=0A

Kind Regards
=0AKpeng

=0A
------------------------------= ------------------------------------
=E5=8F=91=E4=BB=B6=E4=BA=BA=EF=BC=9A= Carsten Bormann<cabo@tzi.org>
=E6=97=A5=E3=80=80=E6=9C=9F=EF=BC=9A2= 015=E5=B9=B404=E6=9C=8802=E6=97=A5 05:43:31
=E6=94=B6=E4=BB=B6=E4=BA=BA=EF= =BC=9APaul Hoffman<paul.hoffman@vpnc.org>
=E6=8A=84=E3=80=80=E9=80=81= =EF=BC=9Acose@ietf.org<cose@ietf.org>
=E4=B8=BB=E3=80=80=E9=A2=98=EF= =BC=9ARe: [Cose] Are we finished with the charter?

Because things a= re getting confusing with all that mail back and forth,
I have tried to doc= ument the progress of the draft charter at

https://github.com/cose-spec= /wg-charter/blob/master/draft-charter.md

Yes, I also think it is time t= o submit this to Kathleen.

On a separate note, I have also started to c= ollect use case information
(read: put Göran's input into a markdown f= ile). Enjoy (and contribute) at:

https://github.com/cose-spec/use-case= s/blob/master/use-cases.md

Grüße, Carsten

[No April F= ool jokes were harmed in compositing this message.]

___________________= ____________________________
Cose mailing list
Cose@ietf.org
https://= www.ietf.org/mailman/listinfo/cose

------=ALIBOUNDARY_18580_49fe3940_551cc1f3_1a941-- From nobody Wed Apr 1 23:05:10 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 46A201B2B08 for ; Wed, 1 Apr 2015 23:05:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.9 X-Spam-Level: X-Spam-Status: No, score=-3.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Bxpi31qplyQj for ; Wed, 1 Apr 2015 23:05:07 -0700 (PDT) Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2E2191AD2EC for ; Wed, 1 Apr 2015 23:05:06 -0700 (PDT) X-AuditID: c1b4fb30-f79996d000006ebb-af-551cdc106813 Received: from ESESSHC024.ericsson.se (Unknown_Domain [153.88.253.124]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id F1.88.28347.01CDC155; Thu, 2 Apr 2015 08:05:04 +0200 (CEST) Received: from ESESSMB303.ericsson.se ([169.254.3.196]) by ESESSHC024.ericsson.se ([153.88.183.90]) with mapi id 14.03.0210.002; Thu, 2 Apr 2015 08:05:04 +0200 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Kepeng Li , Carsten Bormann , Paul Hoffman Thread-Topic: [Cose] Are we finished with the charter? Thread-Index: AQHQbMFNPhEXnZth6UCGfZYhkBbCQ505HVy3gAAfDIA= Date: Thu, 2 Apr 2015 06:05:02 +0000 Message-ID: References: <5515A144.5060403@tzi.org> <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <2f049d52-83e3-4de5-9525-69ff7df67498@alibaba-inc.com> In-Reply-To: <2f049d52-83e3-4de5-9525-69ff7df67498@alibaba-inc.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.7.141117 x-originating-ip: [153.88.183.148] Content-Type: multipart/alternative; boundary="_000_D142A0F52C797goranselanderericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrAIsWRmVeSWpSXmKPExsUyM+Jvja7AHZlQg2vb5SyOTLnLajFt61RW i8vziyxurf/C6sDiMfHtRxaPJUt+MnlMW5Tp8Xn2VeYAligum5TUnMyy1CJ9uwSujOVX77AV vI6smDv5EVsD45rwLkZODgkBE4kNzxtZIGwxiQv31rN1MXJxCAkcZZTYMb2PCcJZzCix58As VpAqNgEXiQcNj5hAbBGBIon3O+6DxZkFlCUaN1wCmyQsYCrxuLGTGaLGTGLvqS3sELaVxNtX 58F6WQRUJHY3vACr4RWwkGg8eB5q2R82iQ3/ToI1cAo4S3yZvxtsKCPQed9PrWGCWCYucevJ fCaIswUkluw5zwxhi0q8fPwP7CBRAT2Jldeb2CDiShKNS55AHRor8f/ib3aIxYISJ2c+YZnA KDYLydhZSMpmISmbxcgBFNeUWL9LH6JEUWJK90N2CFtDonXOXCjbWuLrhM0syGoWMHKsYhQt Ti1Oyk03MtJLLcpMLi7Oz9PLSy3ZxAiM4oNbfhvsYHz53PEQowAHoxIP74NbMqFCrIllxZW5 hxilOViUxHntjA+FCAmkJ5akZqemFqQWxReV5qQWH2Jk4uCUamAMvsxYl7ndLZPHx0Q32pdp 0ubM+3ytvipKV6r0Sifu174udlStsuFX29497zR+PrZ8GJB6d1so618rLx7bb/vOxTxWVbgV 3XabsTlc2/rZP9PA85stfm5e1Cw+Mfzq3ZevM5eGH4mxvmpevsbVZor4oTbflQ4i/ybrJt/a raeWOa2qoI/56C4lluKMREMt5qLiRAB2HXdowwIAAA== Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 06:05:09 -0000 --_000_D142A0F52C797goranselanderericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 UmVnYXJkaW5nIHRoaXMgZm9ybXVsYXRpb246DQoNCk9MRA0KImEgc3RhbmRhcmRzLXRyYWNrIHNw ZWNpZmljYXRpb24gY292ZXJpbmcgdGhlIHNhbWUgY3J5cHRvZ3JhcGhpYyBmb3JtYXRzIGZyb20g Sk9TRSwgZXhwcmVzc2VkIGluIENCT1IiDQoNCldoYXQgSSB0cmllZCB0byBpbGx1c3RyYXRlIGlu IHRoZSBmaXJzdCBzZXQgb2YgdXNlIGNhc2VzICh0aGFua3MgdG8gQ2Fyc3RlbiB1cGxvYWRlZCB0 bw0KDQpodHRwczovL2dpdGh1Yi5jb20vY29zZS1zcGVjL3VzZS1jYXNlcy9ibG9iL21hc3Rlci91 c2UtY2FzZXMubWQpDQoNCmlzIHRoYXQgdGhlIGNyeXB0b2dyYXBoaWMgZm9ybWF0cyBwcm92aWRl ZCBieSBKT1NFIG1heSBub3QgYmUgc3VmZmljaWVudGx5IGZsZXhpYmxlIHRvIGFsbG93IGNlcnRh aW4gb3B0aW1pemF0aW9ucyBkZXNpcmFibGUgZm9yIGNvbnN0cmFpbmVkIGRldmljZXMsIGUuZy4N Cg0KICAqICAgRGV0YWNoZWQgQUFEDQogICogICBTdXBwb3J0IGZvciBzcGVjaWZ5aW5nIG1vZGVz IHdoaWNoIGFsbG93IGludGVncml0eSBwcm90ZWN0aW9uIG9mIG90aGVyIGltcGxpY2l0IGRhdGEg KEVBRCkNCiAgKiAgIFN1cHBvcnQgZm9yIHN5bW1ldHJpYyBrZXkgZW5jcnlwdGVkIGFuZCBwcml2 YXRlIGtleSBzaWduZWQgb2JqZWN0cyB3aXRob3V0IGRvdWJsZSB3cmFwcGluZw0KDQpDb3VsZCB3 ZSBtYWtlIGNsZWFyIHRoYXQgdGhlIHdvcmsgbWF5IGluY2x1ZGUgb3B0aW1pemF0aW9ucyB0byBK T1NFPyBGb3IgZXhhbXBsZQ0KDQpORVcNCiJhIHN0YW5kYXJkcy10cmFjayBzcGVjaWZpY2F0aW9u IGNvdmVyaW5nIHRoZSBzYW1lIGNyeXB0b2dyYXBoaWMgZm9ybWF0cyBmcm9tIEpPU0UgYW5kIG9w dGltaXphdGlvbnMgZm9yIGNvbnN0cmFpbmVkIGRldmljZSBwcm9jZXNzaW5nLCBleHByZXNzZWQg aW4gQ0JPUiINCg0KDQpCZXN0IHJlZ2FyZHMsDQpHw7ZyYW4NCg0KDQpGcm9tOiBLZXBlbmcgTGkg PGtlcGVuZy5sa3BAYWxpYmFiYS1pbmMuY29tPG1haWx0bzprZXBlbmcubGtwQGFsaWJhYmEtaW5j LmNvbT4+DQpEYXRlOiBUaHVyc2RheSAyIEFwcmlsIDIwMTUgMDY6MTMNClRvOiBDYXJzdGVuIEJv cm1hbm4gPGNhYm9AdHppLm9yZzxtYWlsdG86Y2Fib0B0emkub3JnPj4sIFBhdWwgSG9mZm1hbiA8 cGF1bC5ob2ZmbWFuQHZwbmMub3JnPG1haWx0bzpwYXVsLmhvZmZtYW5AdnBuYy5vcmc+Pg0KQ2M6 ICJjb3NlQGlldGYub3JnPG1haWx0bzpjb3NlQGlldGYub3JnPiIgPGNvc2VAaWV0Zi5vcmc8bWFp bHRvOmNvc2VAaWV0Zi5vcmc+Pg0KU3ViamVjdDogUmU6IFtDb3NlXSBBcmUgd2UgZmluaXNoZWQg d2l0aCB0aGUgY2hhcnRlcj8NCg0KDQo+SSBoYXZlIHRyaWVkIHRvIGRvY3VtZW50IHRoZSBwcm9n cmVzcyBvZiB0aGUgZHJhZnQgY2hhcnRlciBhdA0KDQo+aHR0cHM6Ly9naXRodWIuY29tL2Nvc2Ut c3BlYy93Zy1jaGFydGVyL2Jsb2IvbWFzdGVyL2RyYWZ0LWNoYXJ0ZXIubWQNCg0KVGhhbmsgeW91 IENhcnN0ZW4sIHZlcnkgaGVscGZ1bC4NCg0KPlllcywgSSBhbHNvIHRoaW5rIGl0IGlzIHRpbWUg dG8gc3VibWl0IHRoaXMgdG8gS2F0aGxlZW4uDQoNCkZpbmUgd2l0aCBtZS4NCg0KQEthcmVuLCBN aWtlLCBKaW0sIEdvZXJhbiBhbmQgb3RoZXJzLCB3aGF0IGRvIHlvdSB0aGluaz8NCg0KDQoNCg0K DQoNClRoYW5rcy4NCg0KS2luZCBSZWdhcmRzDQpLcGVuZw0KDQotLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCuWPkeS7tuS6 uu+8mkNhcnN0ZW4gQm9ybWFubjxjYWJvQHR6aS5vcmc8bWFpbHRvOmNhYm9AdHppLm9yZz4+DQrm l6XjgIDmnJ/vvJoyMDE15bm0MDTmnIgwMuaXpSAwNTo0MzozMQ0K5pS25Lu25Lq677yaUGF1bCBI b2ZmbWFuPHBhdWwuaG9mZm1hbkB2cG5jLm9yZzxtYWlsdG86cGF1bC5ob2ZmbWFuQHZwbmMub3Jn Pj4NCuaKhOOAgOmAge+8mmNvc2VAaWV0Zi5vcmc8bWFpbHRvOumAge+8mmNvc2VAaWV0Zi5vcmc+ PGNvc2VAaWV0Zi5vcmc8bWFpbHRvOmNvc2VAaWV0Zi5vcmc+Pg0K5Li744CA6aKY77yaUmU6IFtD b3NlXSBBcmUgd2UgZmluaXNoZWQgd2l0aCB0aGUgY2hhcnRlcj8NCg0KQmVjYXVzZSB0aGluZ3Mg YXJlIGdldHRpbmcgY29uZnVzaW5nIHdpdGggYWxsIHRoYXQgbWFpbCBiYWNrIGFuZCBmb3J0aCwN CkkgaGF2ZSB0cmllZCB0byBkb2N1bWVudCB0aGUgcHJvZ3Jlc3Mgb2YgdGhlIGRyYWZ0IGNoYXJ0 ZXIgYXQNCg0KaHR0cHM6Ly9naXRodWIuY29tL2Nvc2Utc3BlYy93Zy1jaGFydGVyL2Jsb2IvbWFz dGVyL2RyYWZ0LWNoYXJ0ZXIubWQNCg0KWWVzLCBJIGFsc28gdGhpbmsgaXQgaXMgdGltZSB0byBz dWJtaXQgdGhpcyB0byBLYXRobGVlbi4NCg0KT24gYSBzZXBhcmF0ZSBub3RlLCBJIGhhdmUgYWxz byBzdGFydGVkIHRvIGNvbGxlY3QgdXNlIGNhc2UgaW5mb3JtYXRpb24NCihyZWFkOiBwdXQgR8O2 cmFuJ3MgaW5wdXQgaW50byBhIG1hcmtkb3duIGZpbGUpLiBFbmpveSAoYW5kIGNvbnRyaWJ1dGUp IGF0Og0KDQpodHRwczovL2dpdGh1Yi5jb20vY29zZS1zcGVjL3VzZS1jYXNlcy9ibG9iL21hc3Rl ci91c2UtY2FzZXMubWQNCg0KR3LDvMOfZSwgQ2Fyc3Rlbg0KDQpbTm8gQXByaWwgRm9vbCBqb2tl cyB3ZXJlIGhhcm1lZCBpbiBjb21wb3NpdGluZyB0aGlzIG1lc3NhZ2UuXQ0KDQpfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KQ29zZSBtYWlsaW5nIGxpc3QN CkNvc2VAaWV0Zi5vcmc8bWFpbHRvOkNvc2VAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9y Zy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UNCg0K --_000_D142A0F52C797goranselanderericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <7DF80C7A355DFA4B9E6A5AF0F25E4C47@ericsson.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1zaXplOiAx NHB4OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiPg0KPGRpdj5SZWdhcmRpbmcg dGhpcyBmb3JtdWxhdGlvbjombmJzcDs8L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2Pk9M RDwvZGl2Pg0KPGRpdj4mcXVvdDthIHN0YW5kYXJkcy10cmFjayBzcGVjaWZpY2F0aW9uIGNvdmVy aW5nIHRoZSBzYW1lIGNyeXB0b2dyYXBoaWMgZm9ybWF0cyBmcm9tIEpPU0UsIGV4cHJlc3NlZCBp biBDQk9SJnF1b3Q7PC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5XaGF0IEkgdHJpZWQg dG8gaWxsdXN0cmF0ZSBpbiB0aGUgZmlyc3Qgc2V0IG9mIHVzZSBjYXNlcyAodGhhbmtzIHRvIENh cnN0ZW4gdXBsb2FkZWQgdG88L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PjxhIGhyZWY9 Imh0dHBzOi8vZ2l0aHViLmNvbS9jb3NlLXNwZWMvdXNlLWNhc2VzL2Jsb2IvbWFzdGVyL3VzZS1j YXNlcy5tZCIgc3R5bGU9ImZvbnQtZmFtaWx5OiBDb25zb2xhczsiPmh0dHBzOi8vZ2l0aHViLmNv bS9jb3NlLXNwZWMvdXNlLWNhc2VzL2Jsb2IvbWFzdGVyL3VzZS1jYXNlcy5tZDwvYT4pPC9kaXY+ DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5pcyB0aGF0IHRoZSBjcnlwdG9ncmFwaGljIGZvcm1h dHMgcHJvdmlkZWQgYnkgSk9TRSBtYXkgbm90IGJlIHN1ZmZpY2llbnRseSBmbGV4aWJsZSB0byBh bGxvdyBjZXJ0YWluIG9wdGltaXphdGlvbnMgZGVzaXJhYmxlIGZvciBjb25zdHJhaW5lZCBkZXZp Y2VzLCBlLmcuICZuYnNwOzwvZGl2Pg0KPHVsPg0KPGxpPkRldGFjaGVkIEFBRDwvbGk+PGxpPlN1 cHBvcnQgZm9yIHNwZWNpZnlpbmcgbW9kZXMgd2hpY2ggYWxsb3cgaW50ZWdyaXR5IHByb3RlY3Rp b24gb2Ygb3RoZXIgaW1wbGljaXQgZGF0YSAoRUFEKTwvbGk+PGxpPlN1cHBvcnQgZm9yIHN5bW1l dHJpYyBrZXkgZW5jcnlwdGVkIGFuZCBwcml2YXRlIGtleSBzaWduZWQgb2JqZWN0cyB3aXRob3V0 IGRvdWJsZSB3cmFwcGluZzwvbGk+PC91bD4NCjxkaXY+Q291bGQgd2UgbWFrZSBjbGVhciB0aGF0 IHRoZSB3b3JrIG1heSBpbmNsdWRlIG9wdGltaXphdGlvbnMgdG8gSk9TRT8gRm9yIGV4YW1wbGU8 L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2Pk5FVzwvZGl2Pg0KPGRpdj4mcXVvdDthIHN0 YW5kYXJkcy10cmFjayBzcGVjaWZpY2F0aW9uIGNvdmVyaW5nIHRoZSBzYW1lIGNyeXB0b2dyYXBo aWMgZm9ybWF0cyBmcm9tIEpPU0UmbmJzcDthbmQgb3B0aW1pemF0aW9ucyBmb3IgY29uc3RyYWlu ZWQgZGV2aWNlIHByb2Nlc3NpbmcsIGV4cHJlc3NlZCBpbiBDQk9SJnF1b3Q7PC9kaXY+DQo8ZGl2 Pjxicj4NCjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+QmVzdCByZWdhcmRzLDwvZGl2 Pg0KPGRpdj5Hw7ZyYW48L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2 Pg0KPHNwYW4gaWQ9Ik9MS19TUkNfQk9EWV9TRUNUSU9OIj4NCjxkaXYgc3R5bGU9ImZvbnQtZmFt aWx5OkNhbGlicmk7IGZvbnQtc2l6ZToxMXB0OyB0ZXh0LWFsaWduOmxlZnQ7IGNvbG9yOmJsYWNr OyBCT1JERVItQk9UVE9NOiBtZWRpdW0gbm9uZTsgQk9SREVSLUxFRlQ6IG1lZGl1bSBub25lOyBQ QURESU5HLUJPVFRPTTogMGluOyBQQURESU5HLUxFRlQ6IDBpbjsgUEFERElORy1SSUdIVDogMGlu OyBCT1JERVItVE9QOiAjYjVjNGRmIDFwdCBzb2xpZDsgQk9SREVSLVJJR0hUOiBtZWRpdW0gbm9u ZTsgUEFERElORy1UT1A6IDNwdCI+DQo8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCI+RnJv bTogPC9zcGFuPktlcGVuZyBMaSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmtlcGVuZy5sa3BAYWxpYmFi YS1pbmMuY29tIj5rZXBlbmcubGtwQGFsaWJhYmEtaW5jLmNvbTwvYT4mZ3Q7PGJyPg0KPHNwYW4g c3R5bGU9ImZvbnQtd2VpZ2h0OmJvbGQiPkRhdGU6IDwvc3Bhbj5UaHVyc2RheSAyIEFwcmlsIDIw MTUgMDY6MTM8YnI+DQo8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCI+VG86IDwvc3Bhbj5D YXJzdGVuIEJvcm1hbm4gJmx0OzxhIGhyZWY9Im1haWx0bzpjYWJvQHR6aS5vcmciPmNhYm9AdHpp Lm9yZzwvYT4mZ3Q7LCBQYXVsIEhvZmZtYW4gJmx0OzxhIGhyZWY9Im1haWx0bzpwYXVsLmhvZmZt YW5AdnBuYy5vcmciPnBhdWwuaG9mZm1hbkB2cG5jLm9yZzwvYT4mZ3Q7PGJyPg0KPHNwYW4gc3R5 bGU9ImZvbnQtd2VpZ2h0OmJvbGQiPkNjOiA8L3NwYW4+JnF1b3Q7PGEgaHJlZj0ibWFpbHRvOmNv c2VAaWV0Zi5vcmciPmNvc2VAaWV0Zi5vcmc8L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86 Y29zZUBpZXRmLm9yZyI+Y29zZUBpZXRmLm9yZzwvYT4mZ3Q7PGJyPg0KPHNwYW4gc3R5bGU9ImZv bnQtd2VpZ2h0OmJvbGQiPlN1YmplY3Q6IDwvc3Bhbj5SZTogW0Nvc2VdIEFyZSB3ZSBmaW5pc2hl ZCB3aXRoIHRoZSBjaGFydGVyPzxicj4NCjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxibG9j a3F1b3RlIGlkPSJNQUNfT1VUTE9PS19BVFRSSUJVVElPTl9CTE9DS1FVT1RFIiBzdHlsZT0iQk9S REVSLUxFRlQ6ICNiNWM0ZGYgNSBzb2xpZDsgUEFERElORzowIDAgMCA1OyBNQVJHSU46MCAwIDAg NTsiPg0KPGRpdj4NCjxkaXY+DQo8cCBkaXI9Imx0ciI+Jmd0O0kgaGF2ZSB0cmllZCB0byBkb2N1 bWVudCB0aGUgcHJvZ3Jlc3Mgb2YgdGhlIGRyYWZ0IGNoYXJ0ZXIgYXQ8L3A+DQo8cCBkaXI9Imx0 ciI+Jmd0OzxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNvbS9jb3NlLXNwZWMvd2ctY2hhcnRlci9i bG9iL21hc3Rlci9kcmFmdC1jaGFydGVyLm1kIj5odHRwczovL2dpdGh1Yi5jb20vY29zZS1zcGVj L3dnLWNoYXJ0ZXIvYmxvYi9tYXN0ZXIvZHJhZnQtY2hhcnRlci5tZDwvYT48L3A+DQo8cCBkaXI9 Imx0ciI+VGhhbmsgeW91IENhcnN0ZW4sIHZlcnkgaGVscGZ1bC48L3A+DQo8cCBkaXI9Imx0ciI+ Jmd0O1llcywgSSBhbHNvIHRoaW5rIGl0IGlzIHRpbWUgdG8gc3VibWl0IHRoaXMgdG8gS2F0aGxl ZW4uPC9wPg0KPHAgZGlyPSJsdHIiPkZpbmUgd2l0aCBtZS48L3A+DQo8cCBkaXI9Imx0ciI+QEth cmVuLCBNaWtlLCBKaW0sIEdvZXJhbiBhbmQgb3RoZXJzLCB3aGF0IGRvIHlvdSB0aGluaz88L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9zcGFuPg0KPGRpdj48YnI+DQo8L2Rp dj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rp dj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8c3BhbiBpZD0iT0xLX1NSQ19CT0RZX1NFQ1RJT04iPg0K PGJsb2NrcXVvdGUgaWQ9Ik1BQ19PVVRMT09LX0FUVFJJQlVUSU9OX0JMT0NLUVVPVEUiIHN0eWxl PSJCT1JERVItTEVGVDogI2I1YzRkZiA1IHNvbGlkOyBQQURESU5HOjAgMCAwIDU7IE1BUkdJTjow IDAgMCA1OyI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGRpcj0ibHRyIj5UaGFua3MuPC9wPg0KPHAgZGly PSJsdHIiPktpbmQgUmVnYXJkczxicj4NCktwZW5nPC9wPg0KPGJsb2NrcXVvdGU+LS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t PGJyPg0K5Y+R5Lu25Lq677yaQ2Fyc3RlbiBCb3JtYW5uJmx0OzxhIGhyZWY9Im1haWx0bzpjYWJv QHR6aS5vcmciPmNhYm9AdHppLm9yZzwvYT4mZ3Q7PGJyPg0K5pel44CA5pyf77yaMjAxNeW5tDA0 5pyIMDLml6UgMDU6NDM6MzE8YnI+DQrmlLbku7bkurrvvJpQYXVsIEhvZmZtYW4mbHQ7PGEgaHJl Zj0ibWFpbHRvOnBhdWwuaG9mZm1hbkB2cG5jLm9yZyI+cGF1bC5ob2ZmbWFuQHZwbmMub3JnPC9h PiZndDs8YnI+DQrmioTjgIA8YSBocmVmPSJtYWlsdG866YCB77yaY29zZUBpZXRmLm9yZyI+6YCB 77yaY29zZUBpZXRmLm9yZzwvYT4mbHQ7PGEgaHJlZj0ibWFpbHRvOmNvc2VAaWV0Zi5vcmciPmNv c2VAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCuS4u+OAgOmimO+8mlJlOiBbQ29zZV0gQXJlIHdlIGZp bmlzaGVkIHdpdGggdGhlIGNoYXJ0ZXI/PGJyPg0KPGJyPg0KQmVjYXVzZSB0aGluZ3MgYXJlIGdl dHRpbmcgY29uZnVzaW5nIHdpdGggYWxsIHRoYXQgbWFpbCBiYWNrIGFuZCBmb3J0aCw8YnI+DQpJ IGhhdmUgdHJpZWQgdG8gZG9jdW1lbnQgdGhlIHByb2dyZXNzIG9mIHRoZSBkcmFmdCBjaGFydGVy IGF0PGJyPg0KPGJyPg0KPGEgaHJlZj0iaHR0cHM6Ly9naXRodWIuY29tL2Nvc2Utc3BlYy93Zy1j aGFydGVyL2Jsb2IvbWFzdGVyL2RyYWZ0LWNoYXJ0ZXIubWQiPmh0dHBzOi8vZ2l0aHViLmNvbS9j b3NlLXNwZWMvd2ctY2hhcnRlci9ibG9iL21hc3Rlci9kcmFmdC1jaGFydGVyLm1kPC9hPjxicj4N Cjxicj4NClllcywgSSBhbHNvIHRoaW5rIGl0IGlzIHRpbWUgdG8gc3VibWl0IHRoaXMgdG8gS2F0 aGxlZW4uPGJyPg0KPGJyPg0KT24gYSBzZXBhcmF0ZSBub3RlLCBJIGhhdmUgYWxzbyBzdGFydGVk IHRvIGNvbGxlY3QgdXNlIGNhc2UgaW5mb3JtYXRpb248YnI+DQoocmVhZDogcHV0IEfDtnJhbidz IGlucHV0IGludG8gYSBtYXJrZG93biBmaWxlKS4gRW5qb3kgKGFuZCBjb250cmlidXRlKSBhdDo8 YnI+DQo8YnI+DQo8YSBocmVmPSJodHRwczovL2dpdGh1Yi5jb20vY29zZS1zcGVjL3VzZS1jYXNl cy9ibG9iL21hc3Rlci91c2UtY2FzZXMubWQiPmh0dHBzOi8vZ2l0aHViLmNvbS9jb3NlLXNwZWMv dXNlLWNhc2VzL2Jsb2IvbWFzdGVyL3VzZS1jYXNlcy5tZDwvYT48YnI+DQo8YnI+DQpHcsO8w59l LCBDYXJzdGVuPGJyPg0KPGJyPg0KW05vIEFwcmlsIEZvb2wgam9rZXMgd2VyZSBoYXJtZWQgaW4g Y29tcG9zaXRpbmcgdGhpcyBtZXNzYWdlLl08YnI+DQo8YnI+DQpfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NCkNvc2UgbWFpbGluZyBsaXN0PGJyPg0K PGEgaHJlZj0ibWFpbHRvOkNvc2VAaWV0Zi5vcmciPkNvc2VAaWV0Zi5vcmc8L2E+PGJyPg0KPGEg aHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlIj5odHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2U8L2E+PGJyPg0KPGJyPg0KPC9ibG9j a3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvc3Bhbj4NCjwvYm9keT4N CjwvaHRtbD4NCg== --_000_D142A0F52C797goranselanderericssoncom_-- From nobody Thu Apr 2 02:19:34 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8A5641B2C24 for ; Thu, 2 Apr 2015 02:19:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fYmGTdx_WF3c for ; Thu, 2 Apr 2015 02:19:27 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 26EB41B2C16 for ; Thu, 2 Apr 2015 02:19:27 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id F27F8BEE8 for ; Thu, 2 Apr 2015 10:19:25 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id STgpwFOsO2gD for ; Thu, 2 Apr 2015 10:19:24 +0100 (IST) Received: from [10.87.48.73] (unknown [86.46.18.59]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 64829BEDB for ; Thu, 2 Apr 2015 10:19:24 +0100 (IST) Message-ID: <551D099C.2010303@cs.tcd.ie> Date: Thu, 02 Apr 2015 10:19:24 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: "cose@ietf.org" References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> In-Reply-To: <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 09:19:31 -0000 Hiya, I was chatting with Kathleen about this and I have a couple of questions/concerns. Apologies for not being at the JOSE session in Dallas to ask 'em at the mic, but I had a conflict. Anyway, Kathleen suggested I ask 'em now rather than when we get the charter for balloting so here goes.... 1) Why is this different from BEEP? BEEP had a lot of backing from some core/key IETFers, and consumed a lot of effort for them but also for others who (for a short while) got dragged into using that day's fashion item. Turned out all that effort was wasted as BEEP went nowhere. I'm a bit concerned that we're replicating that pattern here. A good answer might be to show that folks who aren't "insiders" are really using CBOR for something that cannot use JOSE and is unrelated to any IETF WG, and that they are doing that without input from "insiders." A not so good answer would be of the form "I (an insider) am using CBOR for and want COSE." 2) Can you explicitly say why JOSE just does not work for some key use-cases? (And I do not mean "is not optimal" I mean "cannot work.") I'm worried that we've done JOSE because of , and now we're doing COSE because of and yet a lot the same people who described A and developed JOSE seem to be involved here, and so presumably agree with B. For those folks, what have you learned to change your opinions? Why not fix JOSE if fixes are needed? Why won't we see the same pattern repeated here and once COSE is done be asked to charter DOSE, then EOSE then GOSE etc.? 3) I think PHB has proposed a directly competing approach to CBOR/COSE. [1] Why is what's proposed here technically better than that? (Note: I'm not asking if CBOR is or is not more popular than PHB's ideas.) Are there any other such directly competing ideas and again, why is this one the one to standardise? I'm not sure if answers to the above ought affect charter text, but they (or discussion ensuing) will affect how I at least ballot on a charter. I've no idea if other ADs feel similarly or not. (If it helped, I could ask.) And lastly for context, I'm not "against" this work, but I am uneasy about it - I think maybe it's being done too soon and we'd perhaps be better off seeing if CBOR gets real traction for uses that really cannot use JOSE. In general I do think it is a good thing to have security primitives defined for transports or formats that see widespread usage, but I'm worried we may be wasting effort here. Cheers, S. [1] https://www.ietf.org/mail-archive/web/jose/current/msg05034.html From nobody Thu Apr 2 06:33:07 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 504C51A8AD7 for ; Thu, 2 Apr 2015 06:33:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.55 X-Spam-Level: X-Spam-Status: No, score=-1.55 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0TAn9YqHdXjA for ; Thu, 2 Apr 2015 06:33:03 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B72E81A8AD6 for ; Thu, 2 Apr 2015 06:33:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id t32DWvRL011663; Thu, 2 Apr 2015 15:32:57 +0200 (CEST) Received: from alma.local (reingewinn.informatik.uni-bremen.de [134.102.218.123]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3lHlh92NClzCsmC; Thu, 2 Apr 2015 15:32:57 +0200 (CEST) Message-ID: <551D4507.70806@tzi.org> Date: Thu, 02 Apr 2015 15:32:55 +0200 From: Carsten Bormann User-Agent: Postbox 3.0.11 (Macintosh/20140602) MIME-Version: 1.0 To: Stephen Farrell References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551D099C.2010303@cs.tcd.ie> In-Reply-To: <551D099C.2010303@cs.tcd.ie> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 13:33:05 -0000 Hi Stephen, thank you for exerting some pushback. Good design is not possible without pushback, and it is certainly useful to think again about the assumptions we are making here. > 1) Why is this different from BEEP? The BEEP question is rather difficult to generate an answer for here: The overlap on constituents between the BEEP community of yore and today's IoT community is minimal. Having watched BEEP from a corner of the eye at the time, first of all I can tell you that BEEP was *weird*. It provided an abstraction that didn't really fit anything I was interested in. Much more general work is going on on transport abstractions now; I hope they don't run into the same problem. More importantly, BEEP also was solving a problem we no longer had: It became available slightly after the market had decided that application protocols would be put on top of HTTP; there simply no longer was any development of new application protocols per se that could have benefitted from BEEP. This is clearly different for COSE. Maybe we'll get a reasonably good answer for the "who needs this" part of this question after having collected some more use cases. So: Could everyone please contribute their reason for being here to https://github.com/cose-spec/use-cases/blob/master/use-cases.md ? > 2) Can you explicitly say why JOSE just does not work for > some key use-cases? I had some slides about this: http://www.ietf.org/proceedings/90/slides/slides-90-jose-2.pdf (the last three slides are the COSE-specific ones). More generally, the 10 years of IoT standardization we have had in the past were mostly about unshackling ourselves from prohibitive backwards compatibility considerations. 6LoWPAN unshackled itself from ND classic, ROLL from existing routing protocols, CoRE from HTTP, ... If we stay serious about IoT, this pattern is unlikely going to end. > Why won't we see the same > pattern repeated here and once COSE is done be asked to > charter DOSE, then EOSE then GOSE etc.? We might, if there is an area of application that is as fundamentally different from the Web as IoT is, and that is not covered by COSE. (I'm not aware of such an area, but that is just proof by lack of imagination.) > 3) I think PHB has proposed a directly competing approach > to CBOR/COSE. [1] Why is what's proposed here technically > better than that? (Note: I'm not asking if CBOR is or is > not more popular than PHB's ideas.) Are there any other > such directly competing ideas and again, why is this one > the one to standardise? The design space is indeed humungous. Why have we arrived here? Binary-enhanced JSONs are a non-starter, they just carry all the existing complexity of JSON and add a couple of backwards compatibility issues. That's why we did CBOR. Now the more interesting question is: Why don't we stick with the original draft-bormann-jose-cose, which is essentially "we don't need to standardize anything, because JOSE already did our job". See my comment about unshackling above. We do have the opportunity of simplifying things by not being bound to the same installed-based issues that JOSE was. But, make no mistake, JOSE has done 98 % of the legwork here, and there is no point in reinventing that. > I'm not sure if answers to the above ought affect charter > text, but they (or discussion ensuing) will affect how I at > least ballot on a charter. I've no idea if other ADs feel > similarly or not. (If it helped, I could ask.) We could add more background to the charter. Having recently done a charter update proposal on the CoRE WG, I'm not so sure that capturing the thinking of a specific point in time in the form of charter text is such a good idea. But COSE will be short-lived, so maybe we will have less of an evolution problem. (If we can write this in a way that can be re-used for the document, we don't even waste time.) Thanks again for feeling uneasy; as I said, that certainly helps us all in thinking more clearly. Grüße, Carsten From nobody Thu Apr 2 07:08:24 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D6421ABC75 for ; Thu, 2 Apr 2015 07:08:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.689 X-Spam-Level: X-Spam-Status: No, score=-0.689 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_ORG=0.611, J_CHICKENPOX_44=0.6] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AmsvItNyC_ZW for ; Thu, 2 Apr 2015 07:08:21 -0700 (PDT) Received: from mail2.ihtfp.org (MAIL2.IHTFP.ORG [204.107.200.7]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E7E2D1A9090 for ; Thu, 2 Apr 2015 07:08:20 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail2.ihtfp.org (Postfix) with ESMTP id B51DDE2039; Thu, 2 Apr 2015 10:08:19 -0400 (EDT) Received: from mail2.ihtfp.org ([127.0.0.1]) by localhost (mail2.ihtfp.org [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 29134-10; Thu, 2 Apr 2015 10:08:16 -0400 (EDT) Received: from securerf.ihtfp.org (unknown [IPv6:fe80::ea2a:eaff:fe7d:235]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mocana.ihtfp.org", Issuer "IHTFP Consulting Certification Authority" (verified OK)) by mail2.ihtfp.org (Postfix) with ESMTPS id A3891E2036; Thu, 2 Apr 2015 10:08:16 -0400 (EDT) Received: (from warlord@localhost) by securerf.ihtfp.org (8.14.8/8.14.8/Submit) id t32E8EBK024930; Thu, 2 Apr 2015 10:08:14 -0400 From: Derek Atkins To: Stephen Farrell References: <5515A144.5060403@tzi.org> <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551D099C.2010303@cs.tcd.ie> Date: Thu, 02 Apr 2015 10:08:14 -0400 In-Reply-To: <551D099C.2010303@cs.tcd.ie> (Stephen Farrell's message of "Thu, 02 Apr 2015 10:19:24 +0100") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Virus-Scanned: Maia Mailguard 1.0.2a Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 14:08:22 -0000 Hi, Stephen Farrell writes: > Hiya, > > I was chatting with Kathleen about this and I have a couple > of questions/concerns. Apologies for not being at the JOSE > session in Dallas to ask 'em at the mic, but I had a conflict. > Anyway, Kathleen suggested I ask 'em now rather than when we > get the charter for balloting so here goes.... > > 1) Why is this different from BEEP? BEEP had a lot of backing > from some core/key IETFers, and consumed a lot of effort for > them but also for others who (for a short while) got dragged > into using that day's fashion item. Turned out all that effort > was wasted as BEEP went nowhere. I'm a bit concerned that > we're replicating that pattern here. A good answer might be > to show that folks who aren't "insiders" are really using > CBOR for something that cannot use JOSE and is unrelated to > any IETF WG, and that they are doing that without input from > "insiders." A not so good answer would be of the form "I (an > insider) am using CBOR for and want COSE." I cannot use JOSE because of it's size. I want COSE+CBOR for tiny embedded devices where literally bytes matter, and the 33% increase of base64 is completely wasted. In my use case I'm going to be nesting objects, so a signature on a signed object which is itself signing a signed object, etc. If there were a 100% pure binary encoding of JSON/JOSE that had the same compact encoding then I'd be happy to use it, but my understanding is that there is not, so CBOR/COSE is attractive. > 2) Can you explicitly say why JOSE just does not work for > some key use-cases? (And I do not mean "is not optimal" I > mean "cannot work.") I'm worried that we've done JOSE because > of , and now we're doing COSE > because of and yet a lot the > same people who described A and developed JOSE seem to be > involved here, and so presumably agree with B. For those > folks, what have you learned to change your opinions? Why > not fix JOSE if fixes are needed? Why won't we see the same > pattern repeated here and once COSE is done be asked to > charter DOSE, then EOSE then GOSE etc.? Size. To me there's very little wrong with the JOSE/JSON structure, except the encoding. > 3) I think PHB has proposed a directly competing approach > to CBOR/COSE. [1] Why is what's proposed here technically > better than that? (Note: I'm not asking if CBOR is or is > not more popular than PHB's ideas.) Are there any other > such directly competing ideas and again, why is this one > the one to standardise? I have not looked closely at PHB's suggestion, but JSON-C could also solve my problem, provided it can be nested. PHB claims 25 bytes (out of 129) are for framing with a total of 6 structure elements at 4 bytes per element. I haven't looked at the framing or per-element overhead of CBOR vs JSON-C; if it's a 1:4 ratio then I'd still prefer to see a CBOR encoding because those extra bytes can add up when nesting 10 objects deep (an extra 120 bytes). > I'm not sure if answers to the above ought affect charter > text, but they (or discussion ensuing) will affect how I at > least ballot on a charter. I've no idea if other ADs feel > similarly or not. (If it helped, I could ask.) > > And lastly for context, I'm not "against" this work, but I > am uneasy about it - I think maybe it's being done too soon > and we'd perhaps be better off seeing if CBOR gets real > traction for uses that really cannot use JOSE. In general I > do think it is a good thing to have security primitives > defined for transports or formats that see widespread usage, > but I'm worried we may be wasting effort here. > > Cheers, > S. > > [1] https://www.ietf.org/mail-archive/web/jose/current/msg05034.html > -derek -- Derek Atkins 617-623-3745 derek@ihtfp.com www.ihtfp.com Computer and Internet Security Consultant From nobody Thu Apr 2 07:19:40 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0ED1B1A90F2 for ; Thu, 2 Apr 2015 07:19:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1iqNf6sz4bp0 for ; Thu, 2 Apr 2015 07:19:32 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 05CDC1AD338 for ; Thu, 2 Apr 2015 07:19:31 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id AD9C9BE59; Thu, 2 Apr 2015 15:19:29 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hKRCkmLJu_wl; Thu, 2 Apr 2015 15:19:27 +0100 (IST) Received: from [10.87.48.73] (unknown [86.46.18.59]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id A8AE2BEE1; Thu, 2 Apr 2015 15:19:26 +0100 (IST) Message-ID: <551D4FEE.50800@cs.tcd.ie> Date: Thu, 02 Apr 2015 15:19:26 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: Carsten Bormann References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551D099C.2010303@cs.tcd.ie> <551D4507.70806@tzi.org> In-Reply-To: <551D4507.70806@tzi.org> OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 14:19:39 -0000 Hi Carsten, On 02/04/15 14:32, Carsten Bormann wrote: > Hi Stephen, > > thank you for exerting some pushback. Good design is not possible > without pushback, and it is certainly useful to think again about the > assumptions we are making here. Thanks for taking this positively! That's great to see. > >> 1) Why is this different from BEEP? > > The BEEP question is rather difficult to generate an answer for here: > The overlap on constituents between the BEEP community of yore and > today's IoT community is minimal. Sorry, my question wasn't phrased so well. I did not mean to assert that BEEP, the protocol, could solve an IETF/IoT problems. I meant to express my unease at the similar human pattern here of a set of IETF "insiders" identifying and pushing strongly for a technology when it's not clear (to me, yet) that there is real non-insider demand for the work. (To be clear: I do not think there's any negative connotation at all to being an insider here, it's a fine thing. But I'd like to know that the folks who've already inhaled all the fumes aren't, in reality, the only ones who care about CBOR/COSE.) > Having watched BEEP from a corner of the eye at the time, first of all > I can tell you that BEEP was *weird*. Yes. And starting COSE when JOSE is not yet finished and when most of the relevant bits of the world are using JSON without yet having gotten to try play with JOSE is also weird. > It provided an abstraction that > didn't really fit anything I was interested in. Much more general > work is going on on transport abstractions now; I hope they don't run > into the same problem. Sure, but that doesn't touch on the question I asked (badly). > More importantly, BEEP also was solving a problem we no longer had: > It became available slightly after the market had decided that > application protocols would be put on top of HTTP; there simply no > longer was any development of new application protocols per se that > could have benefitted from BEEP. > > This is clearly different for COSE. Maybe we'll get a reasonably good > answer for the "who needs this" part of this question after having > collected some more use cases. > > So: Could everyone please contribute their reason for being here to > https://github.com/cose-spec/use-cases/blob/master/use-cases.md > ? Well, again I'm not seeing the answer there to the question I badly posed. The best answer would be if you or someone pointed me at a bunch of work that's being done using CBOR and that is not being done by "insiders" and that has security requirements one cannot meet via DTLS or JOSE. So I also just took a quick look myself. One way I measure the relevance of an RFC is via citations. RFC7049 is not referenced by any other RFC [1] and google scholar only shows me 6 citations to RFC7049. [2] To me that provides no evidence that we're ready to start in on COSE and that that'll be worth the investment. The corresponding numbers I see for RFC4627 are 18 RFCs, [3] and 833 citations, [4] which is quite a bit different. CBOR is of course much newer so time may well eradicate that difference, but again that's more indicative of COSE being too early than arguing that this is the time for doing COSE. [1] http://www.arkko.com/tools/allstats/citations-rfc7049.html [2] http://scholar.google.com/scholar?cites=11243383381382361928&as_sdt=2005&sciodt=0,5&hl=en [3] http://www.arkko.com/tools/allstats/citations-rfc4627.html [4] http://scholar.google.com/scholar?cites=1045615204790743605&as_sdt=2005&sciodt=0,5&hl=en > >> 2) Can you explicitly say why JOSE just does not work for >> some key use-cases? > > I had some slides about this: > http://www.ietf.org/proceedings/90/slides/slides-90-jose-2.pdf > (the last three slides are the COSE-specific ones). The last 3 slides there simply seem to say "don't use b64." If there are places where JOSE emits ciphertext, the plaintext of which is b64 that might be a reason. However, I have no doubt that, if that is needed, then some simple binary variation for such cases could be done as a JOSE extension while retaining compatibility for most forms of ciphertext/signature. I do not currently accept that the b64 issue alone is sufficient justification, at this early point in the evolution of CBOR, for forming a COSE wg. > > More generally, the 10 years of IoT standardization we have had in the > past were mostly about unshackling ourselves from prohibitive > backwards compatibility considerations. 6LoWPAN unshackled itself > from ND classic, ROLL from existing routing protocols, CoRE from HTTP, > ... > If we stay serious about IoT, this pattern is unlikely going to end. Hmm. That also doesn't touch on any reason why JOSE cannot work. You may or may not be correct (and you certainly know more than I about IoT's evolution) and yes, JOSE -> COSE is consistent with the likes of HTTP -> CoAP. Perhaps it is just not clear to me that a stack with CoAP, RPL, 6lo etc is what's going to dominate in the way that HTTP, BGP, IP etc do. I also recall the WAP forum and it's alternative stack and how by the time it was ready, the real phone people really used could run normal TLS/TCP/IP just fine. (But I know already you and I disagree about the applicability of that lesson-learned for IoT.) >> Why won't we see the same >> pattern repeated here and once COSE is done be asked to >> charter DOSE, then EOSE then GOSE etc.? > > We might, if there is an area of application that is as fundamentally > different from the Web as IoT is, and that is not covered by COSE. > (I'm not aware of such an area, but that is just proof by lack of > imagination.) One could argue that that might not be a lack of imagination but a lack of real demand. But this is a minor point and we can't know what'll happen in future regardless of whether we do or do not start a COSE wg. > >> 3) I think PHB has proposed a directly competing approach >> to CBOR/COSE. [1] Why is what's proposed here technically >> better than that? (Note: I'm not asking if CBOR is or is >> not more popular than PHB's ideas.) Are there any other >> such directly competing ideas and again, why is this one >> the one to standardise? > > The design space is indeed humungous. Why have we arrived here? > Binary-enhanced JSONs are a non-starter, they just carry all the > existing complexity of JSON and add a couple of backwards > compatibility issues. That's why we did CBOR. I would have preferred a specific answer there that referred to (ideally via a list archive URL) PHB's stuff and showed why what's proposed here is (going to be) better, or which pointed out the fatal flaw in PHB's work. > Now the more interesting question is: Why don't we stick with the > original draft-bormann-jose-cose, which is essentially "we don't need > to standardize anything, because JOSE already did our job". See my > comment about unshackling above. We do have the opportunity of > simplifying things by not being bound to the same installed-based > issues that JOSE was. But, make no mistake, JOSE has done 98 % of the > legwork here, and there is no point in reinventing that. Simplifying 2% of JOSE by replicating 100% of it does not sound attractive tbh. > >> I'm not sure if answers to the above ought affect charter >> text, but they (or discussion ensuing) will affect how I at >> least ballot on a charter. I've no idea if other ADs feel >> similarly or not. (If it helped, I could ask.) > > We could add more background to the charter. Having recently done a > charter update proposal on the CoRE WG, I'm not so sure that capturing > the thinking of a specific point in time in the form of charter text > is such a good idea. But COSE will be short-lived, so maybe we will > have less of an evolution problem. (If we can write this in a way > that can be re-used for the document, we don't even waste time.) I'd suggest we try bottom out the discussion some more before diving straight into charter discussion. It may be that chunks of the discussion are better are messages to this list and not as charter text. So first arguing the case and then deciding what of that to put in the charter is probably better as a plan I think. > Thanks again for feeling uneasy; as I said, that certainly helps us > all in thinking more clearly. You're welcome. As I said I do not want to be obstructive here but my unease/concern is intact as of now. Cheers, S. > > Grüße, Carsten > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose > From nobody Thu Apr 2 07:24:46 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6065C1B2C91 for ; Thu, 2 Apr 2015 07:24:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.61 X-Spam-Level: X-Spam-Status: No, score=-3.61 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_44=0.6, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bxfA-A4fbXmh for ; Thu, 2 Apr 2015 07:24:43 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5741F1B2C1A for ; Thu, 2 Apr 2015 07:24:42 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 2182ABEE1; Thu, 2 Apr 2015 15:24:41 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dwZUHGentWCr; Thu, 2 Apr 2015 15:24:39 +0100 (IST) Received: from [10.87.48.73] (unknown [86.46.18.59]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 52DC9BE59; Thu, 2 Apr 2015 15:24:39 +0100 (IST) Message-ID: <551D5127.7070207@cs.tcd.ie> Date: Thu, 02 Apr 2015 15:24:39 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: Derek Atkins References: <5515A144.5060403@tzi.org> <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551D099C.2010303@cs.tcd.ie> In-Reply-To: OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 14:24:45 -0000 Thanks Derek. Would it be fair to say that your message implies that an awful lot of the technical justification here hinges on that b64 issue and that we probably ought to have very specific answers as to why COSE is going to be better than alternatives before we start a wg? There are separate and also (though maybe not equally) valid community arguments that might also come into play but I think the first order thing is the technical justification which seems to really hinge on that b64 issue. S. On 02/04/15 15:08, Derek Atkins wrote: > Hi, > > Stephen Farrell writes: > >> Hiya, >> >> I was chatting with Kathleen about this and I have a couple >> of questions/concerns. Apologies for not being at the JOSE >> session in Dallas to ask 'em at the mic, but I had a conflict. >> Anyway, Kathleen suggested I ask 'em now rather than when we >> get the charter for balloting so here goes.... >> >> 1) Why is this different from BEEP? BEEP had a lot of backing >> from some core/key IETFers, and consumed a lot of effort for >> them but also for others who (for a short while) got dragged >> into using that day's fashion item. Turned out all that effort >> was wasted as BEEP went nowhere. I'm a bit concerned that >> we're replicating that pattern here. A good answer might be >> to show that folks who aren't "insiders" are really using >> CBOR for something that cannot use JOSE and is unrelated to >> any IETF WG, and that they are doing that without input from >> "insiders." A not so good answer would be of the form "I (an >> insider) am using CBOR for and want COSE." > > I cannot use JOSE because of it's size. I want COSE+CBOR for tiny > embedded devices where literally bytes matter, and the 33% increase of > base64 is completely wasted. In my use case I'm going to be nesting > objects, so a signature on a signed object which is itself signing a > signed object, etc. > > If there were a 100% pure binary encoding of JSON/JOSE that had the same > compact encoding then I'd be happy to use it, but my understanding is > that there is not, so CBOR/COSE is attractive. > >> 2) Can you explicitly say why JOSE just does not work for >> some key use-cases? (And I do not mean "is not optimal" I >> mean "cannot work.") I'm worried that we've done JOSE because >> of , and now we're doing COSE >> because of and yet a lot the >> same people who described A and developed JOSE seem to be >> involved here, and so presumably agree with B. For those >> folks, what have you learned to change your opinions? Why >> not fix JOSE if fixes are needed? Why won't we see the same >> pattern repeated here and once COSE is done be asked to >> charter DOSE, then EOSE then GOSE etc.? > > Size. To me there's very little wrong with the JOSE/JSON structure, > except the encoding. > >> 3) I think PHB has proposed a directly competing approach >> to CBOR/COSE. [1] Why is what's proposed here technically >> better than that? (Note: I'm not asking if CBOR is or is >> not more popular than PHB's ideas.) Are there any other >> such directly competing ideas and again, why is this one >> the one to standardise? > > I have not looked closely at PHB's suggestion, but JSON-C could also > solve my problem, provided it can be nested. PHB claims 25 bytes (out > of 129) are for framing with a total of 6 structure elements at 4 bytes > per element. I haven't looked at the framing or per-element overhead of > CBOR vs JSON-C; if it's a 1:4 ratio then I'd still prefer to see a CBOR > encoding because those extra bytes can add up when nesting 10 objects > deep (an extra 120 bytes). > >> I'm not sure if answers to the above ought affect charter >> text, but they (or discussion ensuing) will affect how I at >> least ballot on a charter. I've no idea if other ADs feel >> similarly or not. (If it helped, I could ask.) >> >> And lastly for context, I'm not "against" this work, but I >> am uneasy about it - I think maybe it's being done too soon >> and we'd perhaps be better off seeing if CBOR gets real >> traction for uses that really cannot use JOSE. In general I >> do think it is a good thing to have security primitives >> defined for transports or formats that see widespread usage, >> but I'm worried we may be wasting effort here. >> >> Cheers, >> S. >> >> [1] https://www.ietf.org/mail-archive/web/jose/current/msg05034.html >> > > -derek > From nobody Thu Apr 2 07:51:00 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9439A1B2D19 for ; Thu, 2 Apr 2015 07:50:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.3 X-Spam-Level: X-Spam-Status: No, score=-1.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_44=0.6] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XoIptm_M1P_k for ; Thu, 2 Apr 2015 07:50:58 -0700 (PDT) Received: from mail2.ihtfp.org (mail2.ihtfp.org [IPv6:2001:4830:143:1::3a11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C17B01B2D03 for ; Thu, 2 Apr 2015 07:50:57 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail2.ihtfp.org (Postfix) with ESMTP id 6CB21E2038; Thu, 2 Apr 2015 10:50:56 -0400 (EDT) Received: from mail2.ihtfp.org ([127.0.0.1]) by localhost (mail2.ihtfp.org [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 29691-04; Thu, 2 Apr 2015 10:50:53 -0400 (EDT) Received: by mail2.ihtfp.org (Postfix, from userid 48) id 76BBAE2039; Thu, 2 Apr 2015 10:50:53 -0400 (EDT) Received: from 192.168.248.204 (SquirrelMail authenticated user warlord) by mail2.ihtfp.org with HTTP; Thu, 2 Apr 2015 10:50:53 -0400 Message-ID: <198c2343f9234e686613acd031da50bc.squirrel@mail2.ihtfp.org> In-Reply-To: <551D5127.7070207@cs.tcd.ie> References: <5515A144.5060403@tzi.org> <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551D099C.2010303@cs.tcd.ie> <551D5127.7070207@cs.tcd.ie> Date: Thu, 2 Apr 2015 10:50:53 -0400 From: "Derek Atkins" To: "Stephen Farrell" User-Agent: SquirrelMail/1.4.22-14.fc20 MIME-Version: 1.0 Content-Type: text/plain;charset=utf-8 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-Virus-Scanned: Maia Mailguard 1.0.2a Archived-At: Cc: Derek Atkins , "cose@ietf.org" Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 14:50:59 -0000 Hi, On Thu, April 2, 2015 10:24 am, Stephen Farrell wrote: > > Thanks Derek. Would it be fair to say that your message implies > that an awful lot of the technical justification here hinges on > that b64 issue and that we probably ought to have very specific > answers as to why COSE is going to be better than alternatives > before we start a wg? > > There are separate and also (though maybe not equally) valid > community arguments that might also come into play but I think > the first order thing is the technical justification which seems > to really hinge on that b64 issue. It's more than just the b64 part, but that's a MAJOR part of it. My understanding (which is limited and probably flawed) is that CBOR also gives you the potential to use single-byte element tags. Maybe the JSON-C does, too, but I haven't looked at it yet. String tags for standard element entries is a non-starter, and using 4 bytes vs. 1 is, IMHO, also a non-starter. In my use case I might have 10 (or more) nested objects, so if each object has 15 extra bytes do to element tag overhead, that's an extra 150 bytes. In my environment that's significant and worth the engineering to re-do it. I'd encourage a minimalist approach. I'm of the opinion that the JOSE data structures can (and should) be used as much as possible. I would prefer NOT to see re-architecting them and instead just say "this is how you encode the data model". It would entail a registry to provide the single-byte tag numbers for the known data fields and change any b64 to a binary type. I'd love for someone more knowledgeable than I give a quick "CBOR vs JSON-C" comparison. > S. -derek > > On 02/04/15 15:08, Derek Atkins wrote: >> Hi, >> >> Stephen Farrell writes: >> >>> Hiya, >>> >>> I was chatting with Kathleen about this and I have a couple >>> of questions/concerns. Apologies for not being at the JOSE >>> session in Dallas to ask 'em at the mic, but I had a conflict. >>> Anyway, Kathleen suggested I ask 'em now rather than when we >>> get the charter for balloting so here goes.... >>> >>> 1) Why is this different from BEEP? BEEP had a lot of backing >>> from some core/key IETFers, and consumed a lot of effort for >>> them but also for others who (for a short while) got dragged >>> into using that day's fashion item. Turned out all that effort >>> was wasted as BEEP went nowhere. I'm a bit concerned that >>> we're replicating that pattern here. A good answer might be >>> to show that folks who aren't "insiders" are really using >>> CBOR for something that cannot use JOSE and is unrelated to >>> any IETF WG, and that they are doing that without input from >>> "insiders." A not so good answer would be of the form "I (an >>> insider) am using CBOR for and want COSE." >> >> I cannot use JOSE because of it's size. I want COSE+CBOR for tiny >> embedded devices where literally bytes matter, and the 33% increase of >> base64 is completely wasted. In my use case I'm going to be nesting >> objects, so a signature on a signed object which is itself signing a >> signed object, etc. >> >> If there were a 100% pure binary encoding of JSON/JOSE that had the same >> compact encoding then I'd be happy to use it, but my understanding is >> that there is not, so CBOR/COSE is attractive. >> >>> 2) Can you explicitly say why JOSE just does not work for >>> some key use-cases? (And I do not mean "is not optimal" I >>> mean "cannot work.") I'm worried that we've done JOSE because >>> of , and now we're doing COSE >>> because of and yet a lot the >>> same people who described A and developed JOSE seem to be >>> involved here, and so presumably agree with B. For those >>> folks, what have you learned to change your opinions? Why >>> not fix JOSE if fixes are needed? Why won't we see the same >>> pattern repeated here and once COSE is done be asked to >>> charter DOSE, then EOSE then GOSE etc.? >> >> Size. To me there's very little wrong with the JOSE/JSON structure, >> except the encoding. >> >>> 3) I think PHB has proposed a directly competing approach >>> to CBOR/COSE. [1] Why is what's proposed here technically >>> better than that? (Note: I'm not asking if CBOR is or is >>> not more popular than PHB's ideas.) Are there any other >>> such directly competing ideas and again, why is this one >>> the one to standardise? >> >> I have not looked closely at PHB's suggestion, but JSON-C could also >> solve my problem, provided it can be nested. PHB claims 25 bytes (out >> of 129) are for framing with a total of 6 structure elements at 4 bytes >> per element. I haven't looked at the framing or per-element overhead of >> CBOR vs JSON-C; if it's a 1:4 ratio then I'd still prefer to see a CBOR >> encoding because those extra bytes can add up when nesting 10 objects >> deep (an extra 120 bytes). >> >>> I'm not sure if answers to the above ought affect charter >>> text, but they (or discussion ensuing) will affect how I at >>> least ballot on a charter. I've no idea if other ADs feel >>> similarly or not. (If it helped, I could ask.) >>> >>> And lastly for context, I'm not "against" this work, but I >>> am uneasy about it - I think maybe it's being done too soon >>> and we'd perhaps be better off seeing if CBOR gets real >>> traction for uses that really cannot use JOSE. In general I >>> do think it is a good thing to have security primitives >>> defined for transports or formats that see widespread usage, >>> but I'm worried we may be wasting effort here. >>> >>> Cheers, >>> S. >>> >>> [1] https://www.ietf.org/mail-archive/web/jose/current/msg05034.html >>> >> >> -derek >> > -- Derek Atkins 617-623-3745 derek@ihtfp.com www.ihtfp.com Computer and Internet Security Consultant From nobody Thu Apr 2 10:04:44 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CBB351ACEB8 for ; Thu, 2 Apr 2015 10:04:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.55 X-Spam-Level: X-Spam-Status: No, score=-3.55 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, GB_I_LETTER=-2, HELO_EQ_DE=0.35] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7dGXvK5AZYKQ for ; Thu, 2 Apr 2015 10:04:40 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9CAD31ACEBF for ; Thu, 2 Apr 2015 10:04:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id t32H4WNU020662; Thu, 2 Apr 2015 19:04:32 +0200 (CEST) Received: from alma.local (p5DC7F099.dip0.t-ipconnect.de [93.199.240.153]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3lHrNH6M3lzCt17; Thu, 2 Apr 2015 19:04:31 +0200 (CEST) Message-ID: <551D769D.2010602@tzi.org> Date: Thu, 02 Apr 2015 19:04:29 +0200 From: Carsten Bormann User-Agent: Postbox 3.0.11 (Macintosh/20140602) MIME-Version: 1.0 To: Stephen Farrell References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551D099C.2010303@cs.tcd.ie> <551D4507.70806@tzi.org> <551D4FEE.50800@cs.tcd.ie> In-Reply-To: <551D4FEE.50800@cs.tcd.ie> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 17:04:42 -0000 > I meant to express my unease at the similar human pattern here of > a set of IETF "insiders" identifying and pushing strongly for a > technology when it's not clear (to me, yet) that there is real > non-insider demand for the work. ... and I was trying to explain why the comparison is not so good, because BEEP failed for reasons that are quite different from the things we are discussing here. COSE is actually the first draft I have written in 20+ years of IETF work where people are sending me unsolicited specifications with an attached letter "this is how we are planning to use COSE, do you see any problems with that". Yes, outsiders. > The best answer would be if you or someone pointed me at a bunch of > work that's being done using CBOR and that is not being done by > "insiders" and that has security requirements one cannot meet via > DTLS or JOSE. Impossible -- because COSE is a copy of JOSE, it fulfills the same *security requirements*. It just doesn't work in certain environments. > So I also just took a quick look myself. One way I measure the > relevance of an RFC is via citations. RFC7049 is not referenced by > any other RFC [1] and google scholar only shows me 6 citations to > RFC7049. [2] To me that provides no evidence that we're ready to > start in on COSE and that that'll be worth the investment. This is more of a demonstration of -- how long it takes to finish a spec in the IETF -- the ones based on CBOR just aren't RFCs yet, -- what kind of no-brainer CBOR is -- it's not something you do research *on*. (Some of the research *based* on it is just not published yet; research also sometimes takes time.) >>> 2) Can you explicitly say why JOSE just does not work for >>> some key use-cases? >> I had some slides about this: >> http://www.ietf.org/proceedings/90/slides/slides-90-jose-2.pdf >> (the last three slides are the COSE-specific ones). > > The last 3 slides there simply seem to say "don't use b64." They do say a bit more, but, yes, base64 is the biggest problem. The other two are the escape processing required by JSON, and the handling of strings -- the decimal numerics that get in the way of JSON usage are not an issue here. > Perhaps it is just not clear to me that > a stack with CoAP, RPL, 6lo etc is what's going to dominate in > the way that HTTP, BGP, IP etc do. Well, is HOBA going to dominate in that way? That's an RFC. > I also recall the WAP forum and it's alternative stack and how by > the time it was ready, the real phone people really used could run > normal TLS/TCP/IP just fine. Well, I still have the scars from the SDPng discussion where people weren't accepting the idea of fixing SDP because "phones will never speak XML". Yeah, right. If you look at my plenary slides from a while ago, I'm actually citing WAP as something we should learn from. WAP did not fail because it took away complexity, it failed because it simply replaced one form of complexity by a different, "more optimal" complexity. > (But I know already you and I disagree > about the applicability of that lesson-learned for IoT.) Here, we'll have to agree to disagree. >> The design space is indeed humungous. Why have we arrived here? >> Binary-enhanced JSONs are a non-starter, they just carry all the >> existing complexity of JSON and add a couple of backwards >> compatibility issues. That's why we did CBOR. > > I would have preferred a specific answer there that referred > to (ideally via a list archive URL) PHB's stuff and showed why > what's proposed here is (going to be) better, or which pointed > out the fatal flaw in PHB's work. I'm sorry, but that is water under the bridge. Replacing CBOR by something that nobody has looked at in detail is not reducing any of the other work required (and, for one, am not going to waste any time on something that is not solving my problems). If minimal work is what you are interested in, you should argue for draft-bormann-jose-cose as opposed to draft-schaad-jose, not for redoing the work we did for CBOR based on something much less useful. >> Now the more interesting question is: Why don't we stick with the >> original draft-bormann-jose-cose, which is essentially "we don't need >> to standardize anything, because JOSE already did our job". See my >> comment about unshackling above. We do have the opportunity of >> simplifying things by not being bound to the same installed-based >> issues that JOSE was. But, make no mistake, JOSE has done 98 % of the >> legwork here, and there is no point in reinventing that. > > Simplifying 2% of JOSE by replicating 100% of it does not sound > attractive tbh. I don't know what's being replicated here. We need to: -- switch to a data encoding that actually use the efficiencies offered by CBOR, without changing things structurally, -- assign numbers in some places where right now we only have strings. None of this is replicating any work already done by JOSE (except that they already did encode their data in JSON, sometimes awkwardly, but that is the trivial part). Grüße, Carsten From nobody Thu Apr 2 10:14:00 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88C211AC422 for ; Thu, 2 Apr 2015 10:13:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.347 X-Spam-Level: X-Spam-Status: No, score=-1.347 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_COM=0.553] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Yr_b6-9EKrsM for ; Thu, 2 Apr 2015 10:13:57 -0700 (PDT) Received: from proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BC2B71A888E for ; Thu, 2 Apr 2015 10:13:57 -0700 (PDT) Received: from [10.20.30.101] (50-1-51-95.dsl.dynamic.fusionbroadband.com [50.1.51.95]) (authenticated bits=0) by proper.com (8.15.1/8.14.9) with ESMTPSA id t32HDlKU034109 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 2 Apr 2015 10:13:48 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) X-Authentication-Warning: proper.com: Host 50-1-51-95.dsl.dynamic.fusionbroadband.com [50.1.51.95] claimed to be [10.20.30.101] Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) From: Paul Hoffman In-Reply-To: <551D099C.2010303@cs.tcd.ie> Date: Thu, 2 Apr 2015 10:13:46 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551D099C.2010303@cs.tcd.ie> To: Stephen Farrell X-Mailer: Apple Mail (2.2070.6) Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Apr 2015 17:13:58 -0000 On Apr 2, 2015, at 2:19 AM, Stephen Farrell = wrote: > 1) Why is this different from BEEP? BEEP was designed for an ASCII-based transport, required a fairly = complex processor for both encoding and decoding, and also did not do = much to try to reduce message size. Those were explicit design choices = that have not borne fruit. > 2) Can you explicitly say why JOSE just does not work for > some key use-cases? (And I do not mean "is not optimal" I > mean "cannot work.") With those restrictions, probably any existing format (JOSE, XMLENC, = CMS, OpenPGP, ...) can be made to work. That is, if you ignore the = requirements for reducing the overhead of the encoder/decoder, and = ignore the requirements for small messages, we didn't have to ever come = up with things beyond whatever-was-first. > 3) I think PHB has proposed a directly competing approach > to CBOR/COSE. It is not "directly competing" in that it inherently takes more = resources for encoding and decoding than even JSON does, whereas CBOR = takes less than even JSON. Further, it would be a fork of JOSE, and it = would require the IETF to be willing to extend or revise JSON. Phill = brought up his proposal a few times, and there was no interest, whereas = there was a fair amount of interest in CBOR. --Paul Hoffman= From nobody Fri Apr 3 04:06:23 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9AA361A87E6 for ; Fri, 3 Apr 2015 04:06:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.21 X-Spam-Level: X-Spam-Status: No, score=-6.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, GB_I_LETTER=-2, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1PdhqignhEsj for ; Fri, 3 Apr 2015 04:06:19 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5A5161A8826 for ; Fri, 3 Apr 2015 04:06:19 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 7AB63BECA; Fri, 3 Apr 2015 12:06:17 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ybmmhCDxe5Nm; Fri, 3 Apr 2015 12:06:15 +0100 (IST) Received: from [10.87.48.73] (unknown [86.46.18.59]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 41614BEC9; Fri, 3 Apr 2015 12:06:15 +0100 (IST) Message-ID: <551E7426.1050203@cs.tcd.ie> Date: Fri, 03 Apr 2015 12:06:14 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: Carsten Bormann References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551D099C.2010303@cs.tcd.ie> <551D4507.70806@tzi.org> <551D4FEE.50800@cs.tcd.ie> <551D769D.2010602@tzi.org> In-Reply-To: <551D769D.2010602@tzi.org> OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Apr 2015 11:06:22 -0000 Hiya, On 02/04/15 18:04, Carsten Bormann wrote: > COSE is actually the first draft I have written in 20+ years of IETF > work where people are sending me unsolicited specifications with an > attached letter "this is how we are planning to use COSE, do you see any > problems with that". Yes, outsiders. Seeing some of that expressed on this list (or some other list, or web pages, I don't care about that) would be a fantastic answer to my question. >> The best answer would be if you or someone pointed me at a bunch of >> work that's being done using CBOR and that is not being done by >> "insiders" and that has security requirements one cannot meet via >> DTLS or JOSE. > > Impossible -- because COSE is a copy of JOSE, it fulfills the same > *security requirements*. > It just doesn't work in certain environments. Fair enough. But you could point at work being done using CBOR. It's those pointers I'm after mostly. >> So I also just took a quick look myself. One way I measure the >> relevance of an RFC is via citations. RFC7049 is not referenced by >> any other RFC [1] and google scholar only shows me 6 citations to >> RFC7049. [2] To me that provides no evidence that we're ready to >> start in on COSE and that that'll be worth the investment. > > This is more of a demonstration of > -- how long it takes to finish a spec in the IETF -- the ones based on > CBOR just aren't RFCs yet, > -- what kind of no-brainer CBOR is -- it's not something you do research > *on*. (Some of the research *based* on it is just not published yet; > research also sometimes takes time.) Right, I think I said that too. The point is that we don't have positive evidence of folks using CBOR from that direction, and hence me asking for pointers to work being done. >>>> 2) Can you explicitly say why JOSE just does not work for >>>> some key use-cases? >>> I had some slides about this: >>> http://www.ietf.org/proceedings/90/slides/slides-90-jose-2.pdf >>> (the last three slides are the COSE-specific ones). >> >> The last 3 slides there simply seem to say "don't use b64." > > They do say a bit more, but, yes, base64 is the biggest problem. So how do we justify going from "let's document a way to use JOSE but without the b64 penalty" to "let's re-design all of JOSE to be a thing called COSE that doesn't have the b64 penalty"? I don't think I've seen that justification tbh. > The other two are the escape processing required by JSON, and the > handling of strings -- the decimal numerics that get in the way of JSON > usage are not an issue here. > >> Perhaps it is just not clear to me that >> a stack with CoAP, RPL, 6lo etc is what's going to dominate in >> the way that HTTP, BGP, IP etc do. > > Well, is HOBA going to dominate in that way? That's an RFC. I've no idea what point you're making there. But in any case, no, HOBA will not dominate anything. (And I don't believe I've ever claimed it would.) I think you've also quoted my text above out of context - it was responding to your point about "unshackling" with which I don't think I agree. But this is a side-line anyway, COSE, if justifiable, shouldn't depend on your or my views on "unshackling" so we're probably better off leaving this be. > >> I also recall the WAP forum and it's alternative stack and how by >> the time it was ready, the real phone people really used could run >> normal TLS/TCP/IP just fine. > > Well, I still have the scars from the SDPng discussion where people > weren't accepting the idea of fixing SDP because "phones will never > speak XML". Yeah, right. If you look at my plenary slides from a while > ago, I'm actually citing WAP as something we should learn from. > WAP did not fail because it took away complexity, it failed because it > simply replaced one form of complexity by a different, "more optimal" > complexity. Partly, yes. But also because time went by, and what appeared to be hard requirements of a class of constrained equipment turned out to no longer be required. It's the applicability of that latter point to challenged networks and devices on which you and I disagree I think. And it's just fine that we disagree, and the justification for COSE shouldn't depend on either your or my opinions there either. >> (But I know already you and I disagree >> about the applicability of that lesson-learned for IoT.) > > Here, we'll have to agree to disagree. Yep. > >>> The design space is indeed humungous. Why have we arrived here? >>> Binary-enhanced JSONs are a non-starter, they just carry all the >>> existing complexity of JSON and add a couple of backwards >>> compatibility issues. That's why we did CBOR. >> >> I would have preferred a specific answer there that referred >> to (ideally via a list archive URL) PHB's stuff and showed why >> what's proposed here is (going to be) better, or which pointed >> out the fatal flaw in PHB's work. > > I'm sorry, but that is water under the bridge. That seems non-responsive, so maybe I wasn't clear. If the flaws in PHB's stuff, or the advantages of COSE compared to PHB's stuff, were water under the bridge then you should be able to send me the list archive URL where that was documented. If not, then the water hasn't yet flowed under an IETF visible bridge;-) > Replacing CBOR by > something that nobody has looked at in detail is not reducing any of the > other work required (and, for one, am not going to waste any time on > something that is not solving my problems). You are assuming that I accept that CBOR is being, or will be, widely used. That may be the case, but I have not seen the evidence for that. If CBOR is being widely used that shouldn't be hard to demonstrate. And (to repeat myself) it's those pointers to work based on CBOR that I'd most like to see. > If minimal work is what you > are interested in, you should argue for draft-bormann-jose-cose as > opposed to draft-schaad-jose, not for redoing the work we did for CBOR > based on something much less useful. I am not arguing for PHB's stuff. I'm asking to see the analysis of why it is the wrong approach and why COSE is the right approach. >>> Now the more interesting question is: Why don't we stick with the >>> original draft-bormann-jose-cose, which is essentially "we don't need >>> to standardize anything, because JOSE already did our job". See my >>> comment about unshackling above. We do have the opportunity of >>> simplifying things by not being bound to the same installed-based >>> issues that JOSE was. But, make no mistake, JOSE has done 98 % of the >>> legwork here, and there is no point in reinventing that. >> >> Simplifying 2% of JOSE by replicating 100% of it does not sound >> attractive tbh. > > I don't know what's being replicated here. We need to: > -- switch to a data encoding that actually use the efficiencies offered > by CBOR, without changing things structurally, > -- assign numbers in some places where right now we only have strings. > > None of this is replicating any work already done by JOSE (except that > they already did encode their data in JSON, sometimes awkwardly, but > that is the trivial part). Except that I remember being told similar things about how JOSE would be almost immediately finished - I just looked back, the first charter proposal text I found, which is about where we are on this one, claimed JOSE would be finished in in April 2012 [1] ;-) I actually don't have a problem with folks making or believing such claims about how easy it'll all be, but I also don't take them very seriously. I think re-doing all of JOSE as COSE will be a big chunk of work that'll consume a lot of people's time. S. [1] https://www.ietf.org/mail-archive/web/jose/current/msg00175.html > > Grüße, Carsten > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose > From nobody Fri Apr 3 04:10:18 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E73031A8836 for ; Fri, 3 Apr 2015 04:10:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ouqqLNK9Tgzf for ; Fri, 3 Apr 2015 04:10:10 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C9501A8835 for ; Fri, 3 Apr 2015 04:10:05 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 94148BECA; Fri, 3 Apr 2015 12:10:03 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dTCT6trKguUk; Fri, 3 Apr 2015 12:10:02 +0100 (IST) Received: from [10.87.48.73] (unknown [86.46.18.59]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 124B2BEC9; Fri, 3 Apr 2015 12:10:02 +0100 (IST) Message-ID: <551E7509.8060604@cs.tcd.ie> Date: Fri, 03 Apr 2015 12:10:01 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: Paul Hoffman References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551D099C.2010303@cs.tcd.ie> In-Reply-To: OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Apr 2015 11:10:16 -0000 Hiya, On 02/04/15 18:13, Paul Hoffman wrote: > On Apr 2, 2015, at 2:19 AM, Stephen Farrell > wrote: >> 1) Why is this different from BEEP? > > BEEP was designed for an ASCII-based transport, required a fairly > complex processor for both encoding and decoding, and also did not do > much to try to reduce message size. Those were explicit design > choices that have not borne fruit. Sorry, see my discussion with Carsten. I'm not asking about the BEEP protocol but about the insider group-think aspects that ended up with the IETF spending a lot of effort on BEEP. > >> 2) Can you explicitly say why JOSE just does not work for some key >> use-cases? (And I do not mean "is not optimal" I mean "cannot >> work.") > > With those restrictions, probably any existing format (JOSE, XMLENC, > CMS, OpenPGP, ...) can be made to work. That is, if you ignore the > requirements for reducing the overhead of the encoder/decoder, So are we saying that the code footprint of a COSE library will be a lot smaller than for JOSE? If so, that'd be interesting but I've not seen that argued. (It was for CBOR vs. JSON, but I don't think for COSE vs JOSE that I've seen.) Naively, I'd have thought the code footprint would be dominated by the crypto functions in both cases. (Note: a fair comparison here would be against a JOSE library where someone has tried to consider code footprint size, but I've no idea if anyone has done that.) I could imagine that one might want to prefer an overall suite of crypto mechanisms that re-use functions to save footprint. I'm not clear if COSE plans to do work on that or not, but if any of it involves novel crypto (which can end up being needed) then that'd be good to know ahead of time. > and > ignore the requirements for small messages, we didn't have to ever > come up with things beyond whatever-was-first. So what are the "small message" requirements really? Not wasting bytes via (esp layers of) b64 or other webby-encoding is clear. Derek I think implied a requirement that the same small plaintext be encrypted multiple times without getting bigger but I'm not clear on if that's needed generally or is a weird corner-case. (I'm also not clear how the key management for that wouldn't have to call for bigger and bigger messages or more and more calls to a KDC-like thing.) Are there others? (Also note: I am not asking for work to be done on a requirements draft. If this is all as obvious as being claimed it should be possible to deal with the COSE-specific requirements in some emails, and maybe those might affect some charter text, or not.) > >> 3) I think PHB has proposed a directly competing approach to >> CBOR/COSE. > > It is not "directly competing" in that it inherently takes more > resources for encoding and decoding than even JSON does, whereas CBOR > takes less than even JSON. Sorry not to have read all of that but why is that "inherently" true? > Further, it would be a fork of JOSE, Well, COSE would be a fork of JOSE too I guess. > and > it would require the IETF to be willing to extend or revise JSON. Fair enough - if PHB's stuff extends JSON so that current JSON parsers would barf, then that is a showstopper. > Phill brought up his proposal a few times, and there was no interest, > whereas there was a fair amount of interest in CBOR. Right, but that only tells us to not pursue Phill's thing. It does not argue that we ought do COSE. S. > > --Paul Hoffman > From nobody Fri Apr 3 05:46:59 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C1CA21A9232 for ; Fri, 3 Apr 2015 05:46:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VAB_KkHNBVen for ; Fri, 3 Apr 2015 05:46:56 -0700 (PDT) Received: from mail-qg0-x22f.google.com (mail-qg0-x22f.google.com [IPv6:2607:f8b0:400d:c04::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8CBB41A9218 for ; Fri, 3 Apr 2015 05:46:56 -0700 (PDT) Received: by qgej70 with SMTP id j70so5995958qge.2 for ; Fri, 03 Apr 2015 05:46:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:mime-version:subject:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=LVkm/ZOqDpLktBs1IPBxlxUSfBJ72y7C5XoRxyjRna8=; b=MtPrv8RhPxBg5Zww6ty7qD5VkXp944YNCQTuInuZvWguCDGihM7ZHI6kDVV/MEw2iF I/ZWkwEDNG6EgsdXyIytcQ5yGCgGk01SpRBpFZAPsqaul6RjzUb56KehJBkfmePawiUU 4lZqW46b4Hce6TnD8SB0rwTmjupA9+G34+jiUtfOBR7f42Th5GnFWkuu8VUq/mUiLcuF IvCrmoDmcNb0oxjCehq1nHG1Y9qzMZuGahNU6kTQ7b2r6DqncUZVyAsxjUmWeoh6JLPN yunmRdnh2nJMaMMadFqIJ3XmQw4OtTNGJBikEgCuhAJsFPwdk0QQLzENIau86b5rhVoY ZSiQ== X-Received: by 10.55.40.215 with SMTP id o84mr3750094qko.93.1428065215863; Fri, 03 Apr 2015 05:46:55 -0700 (PDT) Received: from [192.168.1.3] (209-6-114-252.c3-0.arl-ubr1.sbo-arl.ma.cable.rcn.com. [209.6.114.252]) by mx.google.com with ESMTPSA id z77sm5553449qkg.44.2015.04.03.05.46.54 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Fri, 03 Apr 2015 05:46:54 -0700 (PDT) From: Kathleen Moriarty X-Google-Original-From: Kathleen Moriarty Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (1.0) X-Mailer: iPhone Mail (11D257) In-Reply-To: <551E7509.8060604@cs.tcd.ie> Date: Fri, 3 Apr 2015 08:46:54 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551D099C.2010303@cs.tcd.ie> <551E7509.8060604@cs.tcd.ie> To: Stephen Farrell Archived-At: Cc: Paul Hoffman , "cose@ietf.org" Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Apr 2015 12:46:58 -0000 Hi, I'll see where I can help from previous discussions. Sent from my iPhone > On Apr 3, 2015, at 7:10 AM, Stephen Farrell wr= ote: >=20 >=20 > Hiya, >=20 >> On 02/04/15 18:13, Paul Hoffman wrote: >> On Apr 2, 2015, at 2:19 AM, Stephen Farrell >> wrote: >>> 1) Why is this different from BEEP? >>=20 >> BEEP was designed for an ASCII-based transport, required a fairly >> complex processor for both encoding and decoding, and also did not do >> much to try to reduce message size. Those were explicit design >> choices that have not borne fruit. >=20 > Sorry, see my discussion with Carsten. I'm not asking about the > BEEP protocol but about the insider group-think aspects that > ended up with the IETF spending a lot of effort on BEEP. Yes, we'd like to avoid this as well. >=20 >>=20 >>> 2) Can you explicitly say why JOSE just does not work for some key >>> use-cases? (And I do not mean "is not optimal" I mean "cannot >>> work.") >>=20 >> With those restrictions, probably any existing format (JOSE, XMLENC, >> CMS, OpenPGP, ...) can be made to work. That is, if you ignore the >> requirements for reducing the overhead of the encoder/decoder, >=20 > So are we saying that the code footprint of a COSE library will > be a lot smaller than for JOSE? My understanding is that the data exchanged is much smaller, not sure about t= he coding footprint or algorithms. > If so, that'd be interesting but > I've not seen that argued. (It was for CBOR vs. JSON, but I don't > think for COSE vs JOSE that I've seen.) Naively, I'd have thought > the code footprint would be dominated by the crypto functions in > both cases. (Note: a fair comparison here would be against a JOSE > library where someone has tried to consider code footprint size, > but I've no idea if anyone has done that.) >=20 > I could imagine that one might want to prefer an overall suite > of crypto mechanisms that re-use functions to save footprint. I'm > not clear if COSE plans to do work on that or not, but if any of > it involves novel crypto (which can end up being needed) then > that'd be good to know ahead of time. >=20 >> and >> ignore the requirements for small messages, we didn't have to ever >> come up with things beyond whatever-was-first. >=20 > So what are the "small message" requirements really? Not wasting > bytes via (esp layers of) b64 or other webby-encoding is clear. >=20 > Derek I think implied a requirement that the same small plaintext > be encrypted multiple times without getting bigger but I'm not > clear on if that's needed generally or is a weird corner-case. > (I'm also not clear how the key management for that wouldn't > have to call for bigger and bigger messages or more and more calls > to a KDC-like thing.) Size has been discussed on list (I believe - JOSE) and in meetings and has b= een the main driver. >=20 > Are there others? >=20 > (Also note: I am not asking for work to be done on a requirements > draft. If this is all as obvious as being claimed it should be > possible to deal with the COSE-specific requirements in some > emails, and maybe those might affect some charter text, or not.) >=20 Agreed. >>=20 >>> 3) I think PHB has proposed a directly competing approach to >>> CBOR/COSE. >>=20 >> It is not "directly competing" in that it inherently takes more >> resources for encoding and decoding than even JSON does, whereas CBOR >> takes less than even JSON. >=20 > Sorry not to have read all of that but why is that "inherently" true? I did get a reasonable answer for this and hopefully someone will chime in. = I'll reach back out to the person and respond once I hear back - IETF week w= as a long one. >=20 >> Further, it would be a fork of JOSE, >=20 > Well, COSE would be a fork of JOSE too I guess. >=20 >> and >> it would require the IETF to be willing to extend or revise JSON. >=20 > Fair enough - if PHB's stuff extends JSON so that current JSON > parsers would barf, then that is a showstopper. >> Phill brought up his proposal a few times, and there was no interest, >> whereas there was a fair amount of interest in CBOR. >=20 > Right, but that only tells us to not pursue Phill's thing. It > does not argue that we ought do COSE. It's finally been posted in a draft, I believe and it had not been before. L= ooking at both answers in parallel will help to get what's needed sooner and= I'm also interested to see reviews of PHBs work on JOSE as part of this pro= cess to show due diligence. Thanks, Kathleen =20 >=20 > S. >=20 >=20 >=20 >=20 >=20 >>=20 >> --Paul Hoffman >=20 > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Fri Apr 3 06:58:52 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42E571A92FF for ; Fri, 3 Apr 2015 06:58:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4 X-Spam-Level: X-Spam-Status: No, score=-4 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, GB_I_LETTER=-2, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GhfZ7igGf0t9 for ; Fri, 3 Apr 2015 06:58:49 -0700 (PDT) Received: from mail-qg0-x22e.google.com (mail-qg0-x22e.google.com [IPv6:2607:f8b0:400d:c04::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D6F111A8A94 for ; Fri, 3 Apr 2015 06:58:48 -0700 (PDT) Received: by qgeb100 with SMTP id b100so51952451qge.3 for ; Fri, 03 Apr 2015 06:58:48 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:mime-version:subject:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=XqzYRnzUHsv2j8lxf5klHiGvHCMRhjqwZCipYK9K9pM=; b=X2sJ4GoG+mO8x5/q+8tdDaXgcX1NTvaqm5rQYUloTMknQvcZ0AsgxCR4IWLHI56zqL jIvzUvc8hQhwWIN5FG1YmOvF1oSuVyPpf64MLAn5s8vwUByubpY+hWyDNABb1dmgqAvn cZrP41oI9Agp+/X//Nxx0C0QJdPwbt+qsBDWWOKuXk85/9lv8ylrlTbZFzIufpGqAi6P UskUfwBUXBIosGxqlmg1CaEh0ybDlO5nQUhbvX2TH6RXUlgKz6DZih/sAuPovdXbTcRD 5WTGKNHZiqrYzkAKandxRtOdfNTl9toyVcUddTmwZPAnkePtEQdN6Fp3YtoLPvxTFwXi LTZQ== X-Received: by 10.140.130.71 with SMTP id 68mr2881285qhc.12.1428069528149; Fri, 03 Apr 2015 06:58:48 -0700 (PDT) Received: from [192.168.1.3] (209-6-114-252.c3-0.arl-ubr1.sbo-arl.ma.cable.rcn.com. [209.6.114.252]) by mx.google.com with ESMTPSA id 77sm5682046qhg.16.2015.04.03.06.58.46 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Fri, 03 Apr 2015 06:58:47 -0700 (PDT) From: Kathleen Moriarty X-Google-Original-From: Kathleen Moriarty Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (1.0) X-Mailer: iPhone Mail (11D257) In-Reply-To: <551D769D.2010602@tzi.org> Date: Fri, 3 Apr 2015 09:58:46 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <94BA1220-072A-4510-83F1-754B01CC17A8@gmail.com> References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551D099C.2010303@cs.tcd.ie> <551D4507.70806@tzi.org> <551D4FEE.50800@cs.tcd.ie> <551D769D.2010602@tzi.org> To: Carsten Bormann Archived-At: Cc: "cose@ietf.org" , Stephen Farrell Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Apr 2015 13:58:51 -0000 Hi, Sent from my iPhone On Apr 2, 2015, at 1:04 PM, Carsten Bormann wrote: >> I meant to express my unease at the similar human pattern here of >> a set of IETF "insiders" identifying and pushing strongly for a >> technology when it's not clear (to me, yet) that there is real >> non-insider demand for the work. >=20 > ... and I was trying to explain why the comparison is not so good, > because BEEP failed for reasons that are quite different from the things > we are discussing here. >=20 > COSE is actually the first draft I have written in 20+ years of IETF > work where people are sending me unsolicited specifications with an > attached letter "this is how we are planning to use COSE, do you see any > problems with that". Yes, outsiders. Please encourage them to send their messages to the list. Is very helpful t= hat we see the possible uses and real customers of potential work. >=20 >> The best answer would be if you or someone pointed me at a bunch of >> work that's being done using CBOR and that is not being done by >> "insiders" and that has security requirements one cannot meet via >> DTLS or JOSE. >=20 > Impossible -- because COSE is a copy of JOSE, it fulfills the same > *security requirements*. > It just doesn't work in certain environments. >=20 >> So I also just took a quick look myself. One way I measure the >> relevance of an RFC is via citations. RFC7049 is not referenced by >> any other RFC [1] and google scholar only shows me 6 citations to >> RFC7049. [2] To me that provides no evidence that we're ready to >> start in on COSE and that that'll be worth the investment. >=20 > This is more of a demonstration of > -- how long it takes to finish a spec in the IETF -- the ones based on > CBOR just aren't RFCs yet, > -- what kind of no-brainer CBOR is -- it's not something you do research > *on*. (Some of the research *based* on it is just not published yet; > research also sometimes takes time.) >=20 >>>> 2) Can you explicitly say why JOSE just does not work for >>>> some key use-cases? >>> I had some slides about this: >>> http://www.ietf.org/proceedings/90/slides/slides-90-jose-2.pdf >>> (the last three slides are the COSE-specific ones). >>=20 >> The last 3 slides there simply seem to say "don't use b64." >=20 > They do say a bit more, but, yes, base64 is the biggest problem. > The other two are the escape processing required by JSON, and the > handling of strings -- the decimal numerics that get in the way of JSON > usage are not an issue here. >=20 >> Perhaps it is just not clear to me that >> a stack with CoAP, RPL, 6lo etc is what's going to dominate in >> the way that HTTP, BGP, IP etc do. >=20 > Well, is HOBA going to dominate in that way? That's an RFC. >=20 >> I also recall the WAP forum and it's alternative stack and how by >> the time it was ready, the real phone people really used could run >> normal TLS/TCP/IP just fine. >=20 > Well, I still have the scars from the SDPng discussion where people > weren't accepting the idea of fixing SDP because "phones will never > speak XML". Yeah, right. If you look at my plenary slides from a while > ago, I'm actually citing WAP as something we should learn from. > WAP did not fail because it took away complexity, it failed because it > simply replaced one form of complexity by a different, "more optimal" > complexity. >=20 >> (But I know already you and I disagree >> about the applicability of that lesson-learned for IoT.) >=20 > Here, we'll have to agree to disagree. >=20 >>> The design space is indeed humungous. Why have we arrived here? >>> Binary-enhanced JSONs are a non-starter, they just carry all the >>> existing complexity of JSON and add a couple of backwards >>> compatibility issues. That's why we did CBOR. >>=20 >> I would have preferred a specific answer there that referred >> to (ideally via a list archive URL) PHB's stuff and showed why >> what's proposed here is (going to be) better, or which pointed >> out the fatal flaw in PHB's work. >=20 > I'm sorry, but that is water under the bridge. Replacing CBOR by > something that nobody has looked at in detail is not reducing any of the > other work required (and, for one, am not going to waste any time on > something that is not solving my problems). If minimal work is what you > are interested in, you should argue for draft-bormann-jose-cose as > opposed to draft-schaad-jose, not for redoing the work we did for CBOR > based on something much less useful. This doesn't help enough and there have been a couple of responses that just= say use this and not what PHB is proposing and a seeming unwillingness to r= eview his proposal to explain any issues with it. That doesn't show why one= direction should be pursued versus another, it looks more like a bias. My r= equest is for a few of you to review PHB's proposal to show clear comparison= s and help us move forward. I'd like these to be on technical merits and needs of consumers with a healt= hy on list discussion. Thanks, Kathleen=20 >=20 >>> Now the more interesting question is: Why don't we stick with the >>> original draft-bormann-jose-cose, which is essentially "we don't need >>> to standardize anything, because JOSE already did our job". See my >>> comment about unshackling above. We do have the opportunity of >>> simplifying things by not being bound to the same installed-based >>> issues that JOSE was. But, make no mistake, JOSE has done 98 % of the >>> legwork here, and there is no point in reinventing that. >>=20 >> Simplifying 2% of JOSE by replicating 100% of it does not sound >> attractive tbh. >=20 > I don't know what's being replicated here. We need to: > -- switch to a data encoding that actually use the efficiencies offered > by CBOR, without changing things structurally, > -- assign numbers in some places where right now we only have strings. >=20 > None of this is replicating any work already done by JOSE (except that > they already did encode their data in JSON, sometimes awkwardly, but > that is the trivial part). >=20 > Gr=C3=BC=C3=9Fe, Carsten >=20 > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Fri Apr 3 07:46:35 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C3C11ABD38 for ; Fri, 3 Apr 2015 07:46:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.347 X-Spam-Level: X-Spam-Status: No, score=-1.347 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_COM=0.553] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FkwxFrrbC7X4 for ; Fri, 3 Apr 2015 07:46:33 -0700 (PDT) Received: from proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 938A81A9102 for ; Fri, 3 Apr 2015 07:46:33 -0700 (PDT) Received: from [10.20.30.101] (50-1-51-95.dsl.dynamic.fusionbroadband.com [50.1.51.95]) (authenticated bits=0) by proper.com (8.15.1/8.14.9) with ESMTPSA id t33EkPcv011603 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 3 Apr 2015 07:46:26 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) X-Authentication-Warning: proper.com: Host 50-1-51-95.dsl.dynamic.fusionbroadband.com [50.1.51.95] claimed to be [10.20.30.101] Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) From: Paul Hoffman In-Reply-To: Date: Fri, 3 Apr 2015 07:46:24 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: <3F4AA5A1-3E70-4BBF-9AFE-0EC89C107888@vpnc.org> References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551D099C.2010303@cs.tcd.ie> <551E7509.8060604@cs.tcd.ie> To: Kathleen Moriarty X-Mailer: Apple Mail (2.2070.6) Archived-At: Cc: "cose@ietf.org" , Stephen Farrell Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Apr 2015 14:46:35 -0000 On Apr 3, 2015, at 5:46 AM, Kathleen Moriarty = wrote: >> On Apr 3, 2015, at 7:10 AM, Stephen Farrell = wrote: >> Sorry, see my discussion with Carsten. I'm not asking about the >> BEEP protocol but about the insider group-think aspects that >> ended up with the IETF spending a lot of effort on BEEP. >=20 > Yes, we'd like to avoid this as well. The proposed charter is not "a lot of effort", certainly not as much as = BEEP took. BEEP was a format, a transport protocol, and many other = things: COSE is a format. It is also not appropriate to say that either BEEP was consumed by = "insider group-think aspects that ended up with the IETF spending a lot = of effort". In fact, the opposite was true: BEEP was designed by people = not familiar with the requirements of the IoT community, but who had a = long history of doing IETF formats and protocols. Those people thought = we could impose our new protocol on others. The COSE work, however, is = being motivated by people within the IoT community. >>>> 2) Can you explicitly say why JOSE just does not work for some key >>>> use-cases? (And I do not mean "is not optimal" I mean "cannot >>>> work.") >>>=20 >>> With those restrictions, probably any existing format (JOSE, XMLENC, >>> CMS, OpenPGP, ...) can be made to work. That is, if you ignore the >>> requirements for reducing the overhead of the encoder/decoder, >>=20 >> So are we saying that the code footprint of a COSE library will >> be a lot smaller than for JOSE? >=20 > My understanding is that the data exchanged is much smaller, not sure = about the coding footprint or algorithms. Sorry, I had forgotten that you might not have followed the discussion = that lead to the CBOR spec in the Apps Area. CBOR's main reason for = existence is smaller coding size, not smaller data. If you only care = about smaller data, "gzip of JSON" or some of the recent unstandardized = formats are probably fine. On the other hand, if you want a format whose = code for encoding and decoding is smaller than JSON, and that takes less = power to run than JSON for typical data, that's where CBOR shines. > Size has been discussed on list (I believe - JOSE) and in meetings and = has been the main driver. Data size is a driver for some, and CBOR works well for that, but = nowhere is it the primary driver for COSE. In order to get good size = with JSON, or with some of the other unstandardized formats, you need = much more code overhead, and you get more failure cases when an encoder = doesn't follow a size-limiting profile of the format. With CBOR, those = mostly fall out by themselves and, where they don't, checking take less = code overhead. >>>> 3) I think PHB has proposed a directly competing approach to >>>> CBOR/COSE. >>>=20 >>> It is not "directly competing" in that it inherently takes more >>> resources for encoding and decoding than even JSON does, whereas = CBOR >>> takes less than even JSON. >>=20 >> Sorry not to have read all of that but why is that "inherently" true? >=20 > I did get a reasonable answer for this and hopefully someone will = chime in. I'll reach back out to the person and respond once I hear = back - IETF week was a long one. It is inherently true for many reasons. - CBOR has no Unicode escaping rules that must be applied to object = names - CBOR has no whitespace removal rules - CBOR has no "real numbers as text" to float rules and so on. >>> Further, it would be a fork of JOSE, >>=20 >> Well, COSE would be a fork of JOSE too I guess. It could be, but it's not, at least in the document many of us are = considering. COSE is being informed by he JSON work, but is not at all a = fork. For example, COSE will likely not follow the JOSE mistake of = calling HMACs "signatures". >>> and >>> it would require the IETF to be willing to extend or revise JSON. >>=20 >> Fair enough - if PHB's stuff extends JSON so that current JSON >> parsers would barf, then that is a showstopper. It does exactly that. It uses currently-illegal signaling as a way of = introducing the new elements. That's a reasonable design and, in fact, = the only design that I could think of that is guaranteed to work. > It's finally been posted in a draft, I believe and it had not been = before. Maybe we are talking about different things: Phill posted = draft-hallambaker-jsonbcd in 2013 and tried to get interest in it, but = failed. > Looking at both answers in parallel will help to get what's needed = sooner and I'm also interested to see reviews of PHBs work on JOSE as = part of this process to show due diligence. Wearing my ex-chair hat of the JSON WG: please don't. Suggesting that = the IETF should extend or revise JSON would be politically tricky and = almost none of the people active in the JSON WG wanted to do so. --Paul Hoffman= From nobody Fri Apr 3 08:04:20 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4DCDE1A9118 for ; Fri, 3 Apr 2015 08:04:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W3Aim9N1BNkt for ; Fri, 3 Apr 2015 08:04:13 -0700 (PDT) Received: from mail-lb0-x231.google.com (mail-lb0-x231.google.com [IPv6:2a00:1450:4010:c04::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D05ED1A9102 for ; Fri, 3 Apr 2015 08:04:12 -0700 (PDT) Received: by lbdc10 with SMTP id c10so80295660lbd.2 for ; Fri, 03 Apr 2015 08:04:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=o1qKOjgnF9bZSXI6gSyWz5x6xagCR/lu3v8a/ze3f6w=; b=kXi/qdNiNOe6mMkFYQoCUXNnyw+UBWB68uxRFYfsU+mSdhEVM1SuAooppG1zV8RI7w Enkst6YOUGkaZy3+MOaQpHM2rFAE5kYPdUEMYtHQM9RiWRUMo1bylXzu6V/u6Nr8svnM 2Cs1KwFzLhdovuUwBU0xw8xsbgI163rLDORPDXc+jY08VJTqCPa/9d0kRYxU3Kctby0l SDYKAPtnmkCfcwlL3VbgvFKUghKUgOrhZ1IbZ0DP17fJTCrLC35GxnlHvmrE17/cw8By mngM3KikWRCTfH2U9dc8zexps4ej0LLTzsxbwgFb2uxq/QJFy6ozrCNzvptaZrUXJcER HxZA== MIME-Version: 1.0 X-Received: by 10.112.218.5 with SMTP id pc5mr2607770lbc.32.1428073451276; Fri, 03 Apr 2015 08:04:11 -0700 (PDT) Received: by 10.112.167.101 with HTTP; Fri, 3 Apr 2015 08:04:11 -0700 (PDT) In-Reply-To: <3F4AA5A1-3E70-4BBF-9AFE-0EC89C107888@vpnc.org> References: <5515A144.5060403@tzi.org> <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551D099C.2010303@cs.tcd.ie> <551E7509.8060604@cs.tcd.ie> <3F4AA5A1-3E70-4BBF-9AFE-0EC89C107888@vpnc.org> Date: Fri, 3 Apr 2015 11:04:11 -0400 Message-ID: From: Kathleen Moriarty To: Paul Hoffman Content-Type: multipart/alternative; boundary=001a11c322f6c6cd090512d34264 Archived-At: Cc: "cose@ietf.org" , Stephen Farrell Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Apr 2015 15:04:19 -0000 --001a11c322f6c6cd090512d34264 Content-Type: text/plain; charset=UTF-8 On Fri, Apr 3, 2015 at 10:46 AM, Paul Hoffman wrote: > On Apr 3, 2015, at 5:46 AM, Kathleen Moriarty < > kathleen.moriarty.ietf@gmail.com> wrote: > >> On Apr 3, 2015, at 7:10 AM, Stephen Farrell > wrote: > >> Sorry, see my discussion with Carsten. I'm not asking about the > >> BEEP protocol but about the insider group-think aspects that > >> ended up with the IETF spending a lot of effort on BEEP. > > > > Yes, we'd like to avoid this as well. > > The proposed charter is not "a lot of effort", certainly not as much as > BEEP took. BEEP was a format, a transport protocol, and many other things: > COSE is a format. > > It is also not appropriate to say that either BEEP was consumed by > "insider group-think aspects that ended up with the IETF spending a lot of > effort". In fact, the opposite was true: BEEP was designed by people not > familiar with the requirements of the IoT community, but who had a long > history of doing IETF formats and protocols. Those people thought we could > impose our new protocol on others. The COSE work, however, is being > motivated by people within the IoT community. > > >>>> 2) Can you explicitly say why JOSE just does not work for some key > >>>> use-cases? (And I do not mean "is not optimal" I mean "cannot > >>>> work.") > >>> > >>> With those restrictions, probably any existing format (JOSE, XMLENC, > >>> CMS, OpenPGP, ...) can be made to work. That is, if you ignore the > >>> requirements for reducing the overhead of the encoder/decoder, > >> > >> So are we saying that the code footprint of a COSE library will > >> be a lot smaller than for JOSE? > > > > My understanding is that the data exchanged is much smaller, not sure > about the coding footprint or algorithms. > > Sorry, I had forgotten that you might not have followed the discussion > that lead to the CBOR spec in the Apps Area. CBOR's main reason for > existence is smaller coding size, not smaller data. If you only care about > smaller data, "gzip of JSON" or some of the recent unstandardized formats > are probably fine. On the other hand, if you want a format whose code for > encoding and decoding is smaller than JSON, and that takes less power to > run than JSON for typical data, that's where CBOR shines. > > > Size has been discussed on list (I believe - JOSE) and in meetings and > has been the main driver. > > Data size is a driver for some, and CBOR works well for that, but nowhere > is it the primary driver for COSE. In order to get good size with JSON, or > with some of the other unstandardized formats, you need much more code > overhead, and you get more failure cases when an encoder doesn't follow a > size-limiting profile of the format. With CBOR, those mostly fall out by > themselves and, where they don't, checking take less code overhead. > > >>>> 3) I think PHB has proposed a directly competing approach to > >>>> CBOR/COSE. > >>> > >>> It is not "directly competing" in that it inherently takes more > >>> resources for encoding and decoding than even JSON does, whereas CBOR > >>> takes less than even JSON. > >> > >> Sorry not to have read all of that but why is that "inherently" true? > > > > I did get a reasonable answer for this and hopefully someone will chime > in. I'll reach back out to the person and respond once I hear back - IETF > week was a long one. > > It is inherently true for many reasons. > - CBOR has no Unicode escaping rules that must be applied to object names > - CBOR has no whitespace removal rules > - CBOR has no "real numbers as text" to float rules > and so on. > > >>> Further, it would be a fork of JOSE, > >> > >> Well, COSE would be a fork of JOSE too I guess. > > It could be, but it's not, at least in the document many of us are > considering. COSE is being informed by he JSON work, but is not at all a > fork. For example, COSE will likely not follow the JOSE mistake of calling > HMACs "signatures". > > >>> and > >>> it would require the IETF to be willing to extend or revise JSON. > >> > >> Fair enough - if PHB's stuff extends JSON so that current JSON > >> parsers would barf, then that is a showstopper. > > It does exactly that. It uses currently-illegal signaling as a way of > introducing the new elements. That's a reasonable design and, in fact, the > only design that I could think of that is guaranteed to work. > > > It's finally been posted in a draft, I believe and it had not been > before. > > Maybe we are talking about different things: Phill posted > draft-hallambaker-jsonbcd in 2013 and tried to get interest in it, but > failed. > > > Looking at both answers in parallel will help to get what's needed > sooner and I'm also interested to see reviews of PHBs work on JOSE as part > of this process to show due diligence. > > Wearing my ex-chair hat of the JSON WG: please don't. Suggesting that the > IETF should extend or revise JSON would be politically tricky and almost > none of the people active in the JSON WG wanted to do so. > Please send pointers to the previous reviews or I'd like to see some posted on JOSE. I thought PHB said he posted something last week, maybe I'm wrong and it's old, but I don't see why you oppose reviews of competing proposals to show this was done fairly. > > --Paul Hoffman -- Best regards, Kathleen --001a11c322f6c6cd090512d34264 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable


On Fri, Apr 3, 2015 at 10:46 AM, Paul Hoffman <paul.hoffman@vpnc.o= rg> wrote:
On Apr 3, 2015, at 5:46 AM, Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com> wrote:=
>> On Apr 3, 2015, at 7:10 AM, Stephen Farrell <stephen.farrell@cs.tcd.ie> wrote:
>> Sorry, see my discussion with Carsten. I&#= 39;m not asking about the
>> BEEP protocol but about the insider group-think aspects that
>> ended up with the IETF spending a lot of effort on BEEP.
>
> Yes, we'd like to avoid this as well.

The proposed charter is not "a lot of effort", certainly n= ot as much as BEEP took. BEEP was a format, a transport protocol, and many = other things: COSE is a format.

It is also not appropriate to say that either BEEP was consumed by "in= sider group-think aspects that ended up with the IETF spending a lot of eff= ort". In fact, the opposite was true: BEEP was designed by people not = familiar with the requirements of the IoT community, but who had a long his= tory of doing IETF formats and protocols. Those people thought we could imp= ose our new protocol on others. The COSE work, however, is being motivated = by people within the IoT community.

>>>> 2) Can you explicitly say why JOSE just does not work for = some key
>>>> use-cases? (And I do not mean "is not optimal" I= mean "cannot
>>>> work.")
>>>
>>> With those restrictions, probably any existing format (JOSE, X= MLENC,
>>> CMS, OpenPGP, ...) can be made to work. That is, if you ignore= the
>>> requirements for reducing the overhead of the encoder/decoder,=
>>
>> So are we saying that the code footprint of a COSE library will >> be a lot smaller than for JOSE?
>
> My understanding is that the data exchanged is much smaller, not sure = about the coding footprint or algorithms.

Sorry, I had forgotten that you might not have followed the discussi= on that lead to the CBOR spec in the Apps Area. CBOR's main reason for = existence is smaller coding size, not smaller data. If you only care about = smaller data, "gzip of JSON" or some of the recent unstandardized= formats are probably fine. On the other hand, if you want a format whose c= ode for encoding and decoding is smaller than JSON, and that takes less pow= er to run than JSON for typical data, that's where CBOR shines.

> Size has been discussed on list (I believe - JOSE) and in meetings and= has been the main driver.

Data size is a driver for some, and CBOR works well for that, but no= where is it the primary driver for COSE. In order to get good size with JSO= N, or with some of the other unstandardized formats, you need much more cod= e overhead, and you get more failure cases when an encoder doesn't foll= ow a size-limiting profile of the format. With CBOR, those mostly fall out = by themselves and, where they don't, checking take less code overhead.<= br>
>>>> 3) I think PHB has proposed a directly competing approach = to
>>>> CBOR/COSE.
>>>
>>> It is not "directly competing" in that it inherently= takes more
>>> resources for encoding and decoding than even JSON does, where= as CBOR
>>> takes less than even JSON.
>>
>> Sorry not to have read all of that but why is that "inherentl= y" true?
>
> I did get a reasonable answer for this and hopefully someone will chim= e in.=C2=A0 I'll reach back out to the person and respond once I hear b= ack - IETF week was a long one.

It is inherently true for many reasons.
- CBOR has no Unicode escaping rules that must be applied to object names - CBOR has no whitespace removal rules
- CBOR has no "real numbers as text" to float rules
and so on.

>>> Further, it would be a fork of JOSE,
>>
>> Well, COSE would be a fork of JOSE too I guess.

It could be, but it's not, at least in the document many of us a= re considering. COSE is being informed by he JSON work, but is not at all a= fork. For example, COSE will likely not follow the JOSE mistake of calling= HMACs "signatures".

>>> and
>>> it would require the IETF to be willing to extend or revise JS= ON.
>>
>> Fair enough - if PHB's stuff extends JSON so that current JSON=
>> parsers would barf, then that is a showstopper.

It does exactly that. It uses currently-illegal signaling as a way o= f introducing the new elements. That's a reasonable design and, in fact= , the only design that I could think of that is guaranteed to work.

> It's finally been posted in a draft, I believe and it had not been= before.

Maybe we are talking about different things: Phill posted draft-hall= ambaker-jsonbcd in 2013 and tried to get interest in it, but failed.

>=C2=A0 Looking at both answers in parallel will help to get what's = needed sooner and I'm also interested to see reviews of PHBs work on JO= SE as part of this process to show due diligence.

Wearing my ex-chair hat of the JSON WG: please don't. Suggesting= that the IETF should extend or revise JSON would be politically tricky and= almost none of the people active in the JSON WG wanted to do so.

Please send pointers to the previous reviews or = I'd like to see some posted on JOSE.=C2=A0 I thought PHB said he posted= something last week, maybe I'm wrong and it's old, but I don't= see why you oppose reviews of competing proposals to show this was done fa= irly.
=C2=A0

--Paul Hoffman


<= br>
--

Be= st regards,
Kathleen
--001a11c322f6c6cd090512d34264-- From nobody Fri Apr 3 09:06:17 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0414C1AC3FC for ; Fri, 3 Apr 2015 09:06:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.347 X-Spam-Level: X-Spam-Status: No, score=-1.347 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_COM=0.553] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mPjKbvKNFf3w for ; Fri, 3 Apr 2015 09:06:14 -0700 (PDT) Received: from proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A72E31AC3F9 for ; Fri, 3 Apr 2015 09:06:14 -0700 (PDT) Received: from [10.20.30.101] (50-1-51-95.dsl.dynamic.fusionbroadband.com [50.1.51.95]) (authenticated bits=0) by proper.com (8.15.1/8.14.9) with ESMTPSA id t33G601L017149 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 3 Apr 2015 09:06:01 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) X-Authentication-Warning: proper.com: Host 50-1-51-95.dsl.dynamic.fusionbroadband.com [50.1.51.95] claimed to be [10.20.30.101] Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) From: Paul Hoffman In-Reply-To: Date: Fri, 3 Apr 2015 09:06:00 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: <7983ED0D-549D-42C1-B267-71CF1EB15C39@vpnc.org> References: <5515A144.5060403@tzi.org> <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551D099C.2010303@cs.tcd.ie> <551E7509.8060604@cs.tcd.ie> <3F4AA5A1-3E70-4BBF-9A! FE-0EC89C107888@vpnc.org> To: Kathleen Moriarty X-Mailer: Apple Mail (2.2070.6) Archived-At: Cc: Stephen Farrell , "cose@ietf.org" Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Apr 2015 16:06:16 -0000 On Apr 3, 2015, at 8:04 AM, Kathleen Moriarty = wrote: > Please send pointers to the previous reviews or I'd like to see some = posted on JOSE. I thought PHB said he posted something last week, maybe = I'm wrong and it's old, but I don't see why you oppose reviews of = competing proposals to show this was done fairly. Offline, Kathleen just pointed out her and Stephen's questions were = about draft-hallambaker-joseunencoded and Phill's assertion at the = plenary that it alleviates the need for COSE. I thought we were = discussing draft-hallambaker-jsonbcd, and my earlier comments were about = that document. draft-hallambaker-joseunencoded appears to only affect COSE if you = believe that the only reason for IoT objects not using JOSE is that we = need smaller messages, and only smaller due to they base64-encoded = cryptographic material. That's only a small part of COSE, although it is = the easiest one to see if you are still thinking in terms of JOSE. draft-hallambaker-joseunencoded does show that it might be useful to use = non-base64'd data for detached signatures, and COSE already has that as = a use case. However, COSE won't be limited to binary data that can be = encoded as UTF8. --Paul Hoffman= From nobody Fri Apr 3 11:23:50 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D8DE1ACED4 for ; Fri, 3 Apr 2015 11:23:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SatM93AAeQhw for ; Fri, 3 Apr 2015 11:23:46 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 79F311A90D3 for ; Fri, 3 Apr 2015 11:23:46 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 2A348BEE8; Fri, 3 Apr 2015 19:23:45 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WmWBOUKwHc4J; Fri, 3 Apr 2015 19:23:43 +0100 (IST) Received: from [10.87.48.73] (unknown [86.46.18.59]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id B26D2BEDC; Fri, 3 Apr 2015 19:23:43 +0100 (IST) Message-ID: <551EDAAF.9080705@cs.tcd.ie> Date: Fri, 03 Apr 2015 19:23:43 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: Paul Hoffman , Kathleen Moriarty References: <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551D099C.2010303@cs.tcd.ie> <551E7509.8060604@cs.tcd.ie> <3F4AA5A1-3E70-4BBF-9A! FE-0EC89C107888@vpnc.org> <7983ED0D-549D-42C1-B267-71CF1EB15C39@vpnc.org> In-Reply-To: <7983ED0D-549D-42C1-B267-71CF1EB15C39@vpnc.org> OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Apr 2015 18:23:48 -0000 On 03/04/15 17:06, Paul Hoffman wrote: > On Apr 3, 2015, at 8:04 AM, Kathleen Moriarty > wrote: >> Please send pointers to the previous reviews or I'd like to see >> some posted on JOSE. I thought PHB said he posted something last >> week, maybe I'm wrong and it's old, but I don't see why you oppose >> reviews of competing proposals to show this was done fairly. > > Offline, Kathleen just pointed out her and Stephen's questions were > about draft-hallambaker-joseunencoded and Phill's assertion at the > plenary that it alleviates the need for COSE. I thought we were > discussing draft-hallambaker-jsonbcd, and my earlier comments were > about that document. To be clear, my questions are not motivated by that. I do agree with Kathleen though that it'd be wise to have answers to hand. S. > > > draft-hallambaker-joseunencoded appears to only affect COSE if you > believe that the only reason for IoT objects not using JOSE is that > we need smaller messages, and only smaller due to they base64-encoded > cryptographic material. That's only a small part of COSE, although it > is the easiest one to see if you are still thinking in terms of > JOSE. > > draft-hallambaker-joseunencoded does show that it might be useful to > use non-base64'd data for detached signatures, and COSE already has > that as a use case. However, COSE won't be limited to binary data > that can be encoded as UTF8. > > --Paul Hoffman _______________________________________________ Cose > mailing list Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose > From nobody Fri Apr 3 11:34:56 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BDE361ACF04 for ; Fri, 3 Apr 2015 11:34:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FuaC6yxDNo24 for ; Fri, 3 Apr 2015 11:34:54 -0700 (PDT) Received: from mout.gmx.net (mout.gmx.net [212.227.15.18]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 048D51ACEFC for ; Fri, 3 Apr 2015 11:34:53 -0700 (PDT) Received: from [192.168.131.146] ([80.92.114.249]) by mail.gmx.com (mrgmx003) with ESMTPSA (Nemesis) id 0LrNE4-1ZaDMp2L6q-0134ls; Fri, 03 Apr 2015 20:34:47 +0200 Message-ID: <551EDD45.4070606@gmx.net> Date: Fri, 03 Apr 2015 20:34:45 +0200 From: Hannes Tschofenig User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: Derek Atkins , Stephen Farrell References: <5515A144.5060403@tzi.org> <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551D099C.2010303@cs.tcd.ie> <551D5127.7070207@cs.tcd.ie> <198c2343f9234e686613acd031da50bc.squirrel@mail2.ihtfp.org> In-Reply-To: <198c2343f9234e686613acd031da50bc.squirrel@mail2.ihtfp.org> OpenPGP: id=4D776BC9 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="CO4v6lUM1s5NXQn54RvTExwLRFGuThVf9" X-Provags-ID: V03:K0:8+BZOGAwcHN9K7dzebloV05JX2KN1JleHJ6R0R7j31Dv5edZs6c 1b3Imq1h6Bf002bA9QQDW7T/KlRC9Zguru2x6OASXWp6nrXy4emSWfvLjpMeDQXVp4oIftF 80Wxijh8sUNMitC74m4CgDwfzZ1Bjc2uDkDV009xyOLWU2uU8eELYKcegDTmOUm+PrlyhfO ASfmxXfTVFMmNAf2Uqeww== X-UI-Out-Filterresults: notjunk:1; Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Apr 2015 18:34:55 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --CO4v6lUM1s5NXQn54RvTExwLRFGuThVf9 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Hi Derek, I would like to better understand this statement: On 04/02/2015 04:50 PM, Derek Atkins wrote: > I cannot use JOSE because of it's size. I know that you are playing in an extremely constrained space (with RFIDs) and so I am wondering what specific scenario you have in mind. Just saying that you cannot use it does not give me enough context to understand your limitations. Ciao Hannes --CO4v6lUM1s5NXQn54RvTExwLRFGuThVf9 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJVHt1FAAoJEGhJURNOOiAtfCsH/3Qp9L23u4xh7LHSOmspQ3b6 lnzt/B61BQtwDexghmYp3ZX6QA+0Ve5ZL4xZXGJ8G1c2avW5OtgFcXwAXbmTUbOY g53K8ndED9vjI5pPFT4+FN1ZNnAwguAKUEDx5rernV37osDnSJ5GDuxXQvq41NJa Xzobnc3nrYZhS/KYbjm7LbONyohFpaSYIpa6hHy9kNstyFzTZV3kCZqMrcM2FZBT jOViULOWUtWwzlvn55kWVsXkwc8ZxlRtoTZv4P/NeP2sFk93VLjiDxqrGummZjDv XogaY5fkgK22qMUk3enFUEshFTjWMDNQoqnwn70a6wRiHMDWMTnUlB0AaRrtbfg= =iNju -----END PGP SIGNATURE----- --CO4v6lUM1s5NXQn54RvTExwLRFGuThVf9-- From nobody Fri Apr 3 11:35:04 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 19D851ACF17 for ; Fri, 3 Apr 2015 11:35:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.61 X-Spam-Level: X-Spam-Status: No, score=-1.61 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F5b00Z81SIsz for ; Fri, 3 Apr 2015 11:34:58 -0700 (PDT) Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 773151ACF16 for ; Fri, 3 Apr 2015 11:34:58 -0700 (PDT) Received: from [192.168.131.146] ([80.92.114.249]) by mail.gmx.com (mrgmx002) with ESMTPSA (Nemesis) id 0MDyil-1YevvD3YFj-00HLNw; Fri, 03 Apr 2015 20:34:41 +0200 Message-ID: <551EDD3C.5020200@gmx.net> Date: Fri, 03 Apr 2015 20:34:36 +0200 From: Hannes Tschofenig User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: =?UTF-8?B?R8O2cmFuIFNlbGFuZGVy?= , Kepeng Li , Carsten Bormann , Paul Hoffman References: <5515A144.5060403@tzi.org> <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <2f049d52-83e3-4de5-9525-69ff7df67498@alibaba-inc.com> In-Reply-To: OpenPGP: id=4D776BC9 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="a3GJSI7oBKCelavkwSPoPcVpxEaP7XHIi" X-Provags-ID: V03:K0:Y5kl4jSFBSmObE+jhB4k/f5KsePC2UO1tj1djJI/kk2hHUNGUZF iEstb6TE4S9PqyLVl/r1MrOtUJcswp57QdIBasnBLw5E4blGGP+fm07D+AoiCupvCihF95v cSz7Qhd2OUcEzq2nlbQVieFZghAePUqZbnqvs3ZSVOrGsvGIFEtT7pUCggb8aSZkAFu53zw c10ClodOe6Xci33qmwgOw== X-UI-Out-Filterresults: notjunk:1; Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Apr 2015 18:35:00 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --a3GJSI7oBKCelavkwSPoPcVpxEaP7XHIi Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi Goeran, I don't think that these use cases are useful since they are pretty much independent of the JOSE/CBOR/COSE question. The interesting question is whether there are cases where you cannot get your use case to work without having COSE. Do you have such a use case? Ciao Hannes On 04/02/2015 08:05 AM, G=C3=B6ran Selander wrote: > Regarding this formulation:=20 >=20 > OLD > "a standards-track specification covering the same cryptographic format= s > from JOSE, expressed in CBOR" >=20 > What I tried to illustrate in the first set of use cases (thanks to > Carsten uploaded to >=20 > https://github.com/cose-spec/use-cases/blob/master/use-cases.md) >=20 > is that the cryptographic formats provided by JOSE may not be > sufficiently flexible to allow certain optimizations desirable for > constrained devices, e.g. =20 >=20 > * Detached AAD > * Support for specifying modes which allow integrity protection of > other implicit data (EAD) > * Support for symmetric key encrypted and private key signed objects > without double wrapping >=20 > Could we make clear that the work may include optimizations to JOSE? Fo= r > example >=20 > NEW > "a standards-track specification covering the same cryptographic format= s > from JOSE and optimizations for constrained device processing, expresse= d > in CBOR" >=20 >=20 > Best regards, > G=C3=B6ran >=20 >=20 > From: Kepeng Li > > Date: Thursday 2 April 2015 06:13 > To: Carsten Bormann >, Paul Hoffman > > > Cc: "cose@ietf.org " > > Subject: Re: [Cose] Are we finished with the charter? >=20 > >I have tried to document the progress of the draft charter at >=20 > >https://github.com/cose-spec/wg-charter/blob/master/draft-charter.= md >=20 > Thank you Carsten, very helpful. >=20 > >Yes, I also think it is time to submit this to Kathleen. >=20 > Fine with me. >=20 > @Karen, Mike, Jim, Goeran and others, what do you think? >=20 >=20 >=20 >=20 >=20 >=20 > Thanks. >=20 > Kind Regards > Kpeng >=20 > ---------------------------------------------------------------= --- > =E5=8F=91=E4=BB=B6=E4=BA=BA=EF=BC=9ACarsten Bormann> > =E6=97=A5=E3=80=80=E6=9C=9F=EF=BC=9A2015=E5=B9=B404=E6=9C=8802=E6= =97=A5 05:43:31 > =E6=94=B6=E4=BB=B6=E4=BA=BA=EF=BC=9APaul Hoffman > > =E6=8A=84=E3=80=80=E9=80=81=EF=BC=9Acose@ietf.org > > =E4=B8=BB=E3=80=80=E9=A2=98=EF=BC=9ARe: [Cose] Are we finished = with the charter? >=20 > Because things are getting confusing with all that mail back an= d > forth, > I have tried to document the progress of the draft charter at >=20 > https://github.com/cose-spec/wg-charter/blob/master/draft-chart= er.md >=20 > Yes, I also think it is time to submit this to Kathleen. >=20 > On a separate note, I have also started to collect use case > information > (read: put G=C3=B6ran's input into a markdown file). Enjoy (and= > contribute) at: >=20 > https://github.com/cose-spec/use-cases/blob/master/use-cases.md= >=20 > Gr=C3=BC=C3=9Fe, Carsten >=20 > [No April Fool jokes were harmed in compositing this message.] >=20 > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose >=20 >=20 >=20 > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose >=20 --a3GJSI7oBKCelavkwSPoPcVpxEaP7XHIi Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJVHt08AAoJEGhJURNOOiAte14H/0I6KzqNY4rjg35xAzsnfh4p Ud9X4kCvsVl+a51+sWIK7twMgoqF15io0hVsvlALWQrj8Lld1GOhyyC/ithFQrF2 GsyhA8gK3ju2nZO5DIdLLCOF665v+B6HV/+uB0kKDjenIiUchAuDNFH8TVyid3bw dUEEPvGmsFwSLT38BTFqzWMXkBlgrxig3TXoHyncd/lfbBVG7Mc/0Prpmp4zxvkC hK4/4ZjyXCuHiePbpiKtIPh/214H8VD7xk35w4lYFaFv0BZiTjIKrziypbEeM3I7 tzn3uHHtVpIab0d+3JHMVBPcHZCrkeZlrPnyE2mavo8GC9yKThTeuC1FxJOJvAk= =LM0a -----END PGP SIGNATURE----- --a3GJSI7oBKCelavkwSPoPcVpxEaP7XHIi-- From nobody Fri Apr 3 11:38:40 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 188611ACF19 for ; Fri, 3 Apr 2015 11:38:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dQ3RgBNN7JMu for ; Fri, 3 Apr 2015 11:38:37 -0700 (PDT) Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CD8861ACF18 for ; Fri, 3 Apr 2015 11:38:36 -0700 (PDT) Received: from [192.168.131.146] ([80.92.114.249]) by mail.gmx.com (mrgmx002) with ESMTPSA (Nemesis) id 0MDhba-1YeeiC2Rag-00H4TQ; Fri, 03 Apr 2015 20:38:34 +0200 Message-ID: <551EDE29.9020906@gmx.net> Date: Fri, 03 Apr 2015 20:38:33 +0200 From: Hannes Tschofenig User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: Stephen Farrell , "cose@ietf.org" References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551D099C.2010303@cs.tcd.ie> In-Reply-To: <551D099C.2010303@cs.tcd.ie> OpenPGP: id=4D776BC9 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="SuhNX1kV3P6fFAE4ERmEUbkW7B9MnGN0K" X-Provags-ID: V03:K0:2lS6wj6oLnRLXzNc1t7b3XF4DCKwHNTYnPmqEDvFoGyL+RUA8dv bCNfbwCfzTZkCLsq6yi0Wop4WvKsMKNgrf2WpP5yXQqHG2bXWrU/vrXxeW5UwZbJ8rcBWIS q7q4plG+asM9bUhhKXvxQgrFTnuUKbsu7BvWr1fPwY+lyYaq4WnWVgQk5QItJ/iuOp87OS1 pgyu7yni0usG8RV8hy9cQ== X-UI-Out-Filterresults: notjunk:1; Archived-At: Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Apr 2015 18:38:39 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --SuhNX1kV3P6fFAE4ERmEUbkW7B9MnGN0K Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Hi Stephen, you raise good questions. Comments below. On 04/02/2015 11:19 AM, Stephen Farrell wrote: >=20 > Hiya, >=20 > I was chatting with Kathleen about this and I have a couple > of questions/concerns. Apologies for not being at the JOSE > session in Dallas to ask 'em at the mic, but I had a conflict. > Anyway, Kathleen suggested I ask 'em now rather than when we > get the charter for balloting so here goes.... >=20 > 1) Why is this different from BEEP? BEEP had a lot of backing > from some core/key IETFers, and consumed a lot of effort for > them but also for others who (for a short while) got dragged > into using that day's fashion item. Turned out all that effort > was wasted as BEEP went nowhere. I'm a bit concerned that > we're replicating that pattern here. A good answer might be > to show that folks who aren't "insiders" are really using > CBOR for something that cannot use JOSE and is unrelated to > any IETF WG, and that they are doing that without input from > "insiders." A not so good answer would be of the form "I (an > insider) am using CBOR for and want COSE." You raise interesting points. We are obviously on an optimization track here and there is the perceived need to re-invent everything (not only with CBOR but with almost everything). Of course, you could call it innovation but you can also argue whether this is indeed necessary (and BEEP provides an interesting lesson here since there is more than just the number of bits on the wire that are important for a technology getting adopted). Note that this is not limited to IoT technologies but more broadly in the IETF in general: just look at HTTP 2 or TLS 1.3. In the early days of the IoT work in the IETF we said that we could re-use the IETF protocols but then we started to slowly re-build everything and I am myself wondering whether we are sometimes going a bit too far since it is a lot of effort to educate the wider Internet community about all this new stuff. I cannot tell you whether we crosses the line of useful optimizations already or not. On the other hand we are never asking ourselves these question when big companies propose something (see all the Web work or the token binding work). So, why start now? I have often heard the phrase "let the market decide". >=20 > 2) Can you explicitly say why JOSE just does not work for > some key use-cases? (And I do not mean "is not optimal" I > mean "cannot work.") I'm worried that we've done JOSE because > of , and now we're doing COSE > because of and yet a lot the > same people who described A and developed JOSE seem to be > involved here, and so presumably agree with B. For those > folks, what have you learned to change your opinions? Why > not fix JOSE if fixes are needed? Why won't we see the same > pattern repeated here and once COSE is done be asked to > charter DOSE, then EOSE then GOSE etc.? In the use cases I see in IoT JOSE would of course work; the messages would just be a bit larger. There are some pretty limited radio technologies around and of course it would take longer to transmit data. Whether that matters or not depends on the application context and is not easy to answer in a general way. I am less concerned about the code size in this case (to be honest): the cryptographic algorithms are actually the heavy parts. I guarantee you that there will be a DOSE, and many other activities that will follow afterwards. Every-time I thought we reached the end I was already wrong and there was yet another more fashionable version arou= nd. >=20 > 3) I think PHB has proposed a directly competing approach > to CBOR/COSE. [1] Why is what's proposed here technically > better than that? (Note: I'm not asking if CBOR is or is > not more popular than PHB's ideas.) Are there any other > such directly competing ideas and again, why is this one > the one to standardise? I will definitely look at the solution PHB proposed. >=20 > I'm not sure if answers to the above ought affect charter > text, but they (or discussion ensuing) will affect how I at > least ballot on a charter. I've no idea if other ADs feel > similarly or not. (If it helped, I could ask.) >=20 > And lastly for context, I'm not "against" this work, but I > am uneasy about it - I think maybe it's being done too soon > and we'd perhaps be better off seeing if CBOR gets real > traction for uses that really cannot use JOSE. In general I > do think it is a good thing to have security primitives > defined for transports or formats that see widespread usage, > but I'm worried we may be wasting effort here. I felt a bit uneasy myself, not necessarily about COSE, but rather how CBOR was introduced to the IETF and how the show was run so far with COSE= =2E I am a bit unclear what motivates various proponents to participate in this work. It can hardly be IoT. Ciao Hannes >=20 > Cheers, > S. >=20 > [1] https://www.ietf.org/mail-archive/web/jose/current/msg05034.html >=20 > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose >=20 --SuhNX1kV3P6fFAE4ERmEUbkW7B9MnGN0K Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: GPGTools - http://gpgtools.org iQEcBAEBCgAGBQJVHt4pAAoJEGhJURNOOiAtGosH+weRbATMYnMoSkZjS1NATJUv eufqaNMCkLuCLOqr4UXlXmriIi0ZnQ+bHHe2vSH3veiFWUAl4+qO1Dj9IotLpwbT ndNM4LLMNP75OlAVdDl4clJF7CrKQR+N7oTGLx90e9/29PXwKoQmKytD3fhqovMf /CABKnBKJ9gnX3z+ZktitVPRI4xnUvlOHKJGqpqlMM4VwtQ342Ob8zi2hLpbjvLb KH8CZBxjbFPqhrs+suP1o4yKPmynP3Y8/rqSY7rT/Wa4nGAC85D3tiOv5X6I0scR gSakbgKKux84n/cCFgZOanMq2Ied4lnUSUEIZy43I8mFPhsXgPhIgu0B7vpJxmc= =LFBe -----END PGP SIGNATURE----- --SuhNX1kV3P6fFAE4ERmEUbkW7B9MnGN0K-- From nobody Fri Apr 3 12:35:06 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9276D1A0110 for ; Fri, 3 Apr 2015 12:35:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.3 X-Spam-Level: X-Spam-Status: No, score=-1.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_34=0.6] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4fkHwPdF73Qg for ; Fri, 3 Apr 2015 12:35:04 -0700 (PDT) Received: from mail2.ihtfp.org (mail2.ihtfp.org [IPv6:2001:4830:143:1::3a11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4BF161A002D for ; Fri, 3 Apr 2015 12:35:04 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail2.ihtfp.org (Postfix) with ESMTP id C2214E2036; Fri, 3 Apr 2015 15:35:02 -0400 (EDT) Received: from mail2.ihtfp.org ([127.0.0.1]) by localhost (mail2.ihtfp.org [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 07051-04; Fri, 3 Apr 2015 15:35:00 -0400 (EDT) Received: by mail2.ihtfp.org (Postfix, from userid 48) id 3CF72E2038; Fri, 3 Apr 2015 15:35:00 -0400 (EDT) Received: from 192.168.248.204 (SquirrelMail authenticated user warlord) by mail2.ihtfp.org with HTTP; Fri, 3 Apr 2015 15:35:00 -0400 Message-ID: <3e4258cee802cfd757151fc2356bc692.squirrel@mail2.ihtfp.org> In-Reply-To: <551EDD45.4070606@gmx.net> References: <5515A144.5060403@tzi.org> <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551D099C.2010303@cs.tcd.ie> <551D5127.7070207@cs.tcd.ie> <198c2343f9234e686613acd031da50bc.squirrel@mail2.ihtfp.org> <551EDD45.4070606@gmx.net> Date: Fri, 3 Apr 2015 15:35:00 -0400 From: "Derek Atkins" To: "Hannes Tschofenig" User-Agent: SquirrelMail/1.4.22-14.fc20 MIME-Version: 1.0 Content-Type: text/plain;charset=utf-8 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-Virus-Scanned: Maia Mailguard 1.0.2a Archived-At: Cc: "cose@ietf.org" , Derek Atkins , Stephen Farrell Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Apr 2015 19:35:05 -0000 Hi Hannes, On Fri, April 3, 2015 2:34 pm, Hannes Tschofenig wrote: > Hi Derek, > > I would like to better understand this statement: > > On 04/02/2015 04:50 PM, Derek Atkins wrote: >> I cannot use JOSE because of it's size. > > I know that you are playing in an extremely constrained space (with > RFIDs) and so I am wondering what specific scenario you have in mind. It's a bit hard to go into too much detail, but I need to be able to store multiply-signed (nested) documents on devices that have, maybe, 5KB of storage space total (and that 5KB needs to include my code, crypto keys, and other ancillary data as well). So in my environment every byte matters. > Just saying that you cannot use it does not give me enough context to > understand your limitations. There are two aspects here. First, parsing strings takes significantly more code than parsing binary. Second, storing strings takes significantly more space than storing integers. *COULD* I use JWS+JSON? Arguably, yes, but as-written after nesting 10 signatures I've now expanded the document by 33% 10 times. That blows up very fast. Now, going back to PHB's "encode as binary" is a step in the right direction, so I don't get that 33% bloat, but I still have to deal with string parsing vs binary parsing. I'm really not sure, short of having you sign an NDA to explain my full situation, how to give you more information. I'll note that I'm still in the design phase of my project; I don't actually have code today, which is yet another reason I'm trying to find the best fit. I don't have any history I have to maintain or compatibility issues. Hope this helps, > Ciao > Hannes -derek -- Derek Atkins 617-623-3745 derek@ihtfp.com www.ihtfp.com Computer and Internet Security Consultant From nobody Fri Apr 3 19:18:32 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 765561A885E for ; Fri, 3 Apr 2015 19:18:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3uYZGJbvb8_u for ; Fri, 3 Apr 2015 19:18:28 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DDDBD1A87B2 for ; Fri, 3 Apr 2015 19:18:27 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 3607FBEDB; Sat, 4 Apr 2015 03:18:26 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S6CYPE1RsIp7; Sat, 4 Apr 2015 03:18:24 +0100 (IST) Received: from [10.87.48.73] (unknown [86.46.18.59]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 20DD2BEC4; Sat, 4 Apr 2015 03:18:24 +0100 (IST) Message-ID: <551F49EF.4020104@cs.tcd.ie> Date: Sat, 04 Apr 2015 03:18:23 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: Hannes Tschofenig References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551D099C.2010303@cs.tcd.ie> <551EDE29.9020906@gmx.net> In-Reply-To: <551EDE29.9020906@gmx.net> OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Apr 2015 02:18:30 -0000 Hiya, Not answering on all points, just where I think I can add to the discussion... On 03/04/15 19:38, Hannes Tschofenig wrote: > Hi Stephen, > > you raise good questions. Comments below. > > > On 04/02/2015 11:19 AM, Stephen Farrell wrote: >> >> Hiya, >> >> I was chatting with Kathleen about this and I have a couple >> of questions/concerns. Apologies for not being at the JOSE >> session in Dallas to ask 'em at the mic, but I had a conflict. >> Anyway, Kathleen suggested I ask 'em now rather than when we >> get the charter for balloting so here goes.... >> >> 1) Why is this different from BEEP? BEEP had a lot of backing >> from some core/key IETFers, and consumed a lot of effort for >> them but also for others who (for a short while) got dragged >> into using that day's fashion item. Turned out all that effort >> was wasted as BEEP went nowhere. I'm a bit concerned that >> we're replicating that pattern here. A good answer might be >> to show that folks who aren't "insiders" are really using >> CBOR for something that cannot use JOSE and is unrelated to >> any IETF WG, and that they are doing that without input from >> "insiders." A not so good answer would be of the form "I (an >> insider) am using CBOR for and want COSE." > > You raise interesting points. We are obviously on an optimization track > here and there is the perceived need to re-invent everything (not only > with CBOR but with almost everything). Of course, you could call it > innovation but you can also argue whether this is indeed necessary (and > BEEP provides an interesting lesson here since there is more than just > the number of bits on the wire that are important for a technology > getting adopted). Note that this is not limited to IoT technologies but > more broadly in the IETF in general: just look at HTTP 2 or TLS 1.3. > > In the early days of the IoT work in the IETF we said that we could > re-use the IETF protocols but then we started to slowly re-build > everything and I am myself wondering whether we are sometimes going a > bit too far since it is a lot of effort to educate the wider Internet > community about all this new stuff. > > I cannot tell you whether we crosses the line of useful optimizations > already or not. Yep. I feel similarly. But I also very much respect folks who do not feel that unease. > > On the other hand we are never asking ourselves these question when big > companies propose something (see all the Web work or the token binding > work). So, why start now? I have often heard the phrase "let the market > decide". The web is different right now. There are a very few browser implementers with significant marker share, a chunk of whom need to be on board for most web innovations, if those are to get traction. And if one does not get that kind of browser buy-in, then there is not much commercial value to an RFC, (of that kind) except if it's written based on other motives. So yes, that does currently give the browser implementers some power here. Mind you we both remember the previous generations of N-hundred pound gorillas, many of whom are not so gorilla-like any more, so I expect the same will happen in the browser case, in (not too much) time. (If they're wise, they will realise their power is temporally limited, but I've no idea why this crop of developers ought be wiser than previous ones;-) The above is a reason why chartering tokbind is currently "important" but HOBA (as a non-random example:-) is not. But that actually is ok - a big part of what we're about here relates to impact. In general, we do, and should, prefer to not work on stuff that won't matter. And that's partly why questioning COSE is fair game IMO. > >> >> 2) Can you explicitly say why JOSE just does not work for >> some key use-cases? (And I do not mean "is not optimal" I >> mean "cannot work.") I'm worried that we've done JOSE because >> of , and now we're doing COSE >> because of and yet a lot the >> same people who described A and developed JOSE seem to be >> involved here, and so presumably agree with B. For those >> folks, what have you learned to change your opinions? Why >> not fix JOSE if fixes are needed? Why won't we see the same >> pattern repeated here and once COSE is done be asked to >> charter DOSE, then EOSE then GOSE etc.? > > In the use cases I see in IoT JOSE would of course work; the messages > would just be a bit larger. There are some pretty limited radio > technologies around and of course it would take longer to transmit data. > Whether that matters or not depends on the application context and is > not easy to answer in a general way. I like the way the above is stated. JOSE can in fact work, but there is for sure a (possibly niche? possibly mainstream?) set of use-cases where JOSE does not work. The question here is how to address that - via a tweak to JOSE or starting over, the latter being how I read the COSE proposal. > I am less concerned about the code size in this case (to be honest): the > cryptographic algorithms are actually the heavy parts. Code size is a concern for me here, not not because I care about code size:-) If the best way to reduce code size is via fewer basic crypto functions, then that can and has lead to "interesting" crypto choices. (CCM vs GCM for example, and perhaps the idea oF AES based MACs.) That kind of choice can impact a lot on interoperability and security and privacy. So from an inventing-cryto-stuff-is-bad perspective, that code size is an issue for this group is a source of inevitable potential concern. > > I guarantee you that there will be a DOSE, Sigh. But yeah, probably. > and many other activities > that will follow afterwards. Every-time I thought we reached the end I > was already wrong and there was yet another more fashionable version around. > >> >> 3) I think PHB has proposed a directly competing approach >> to CBOR/COSE. [1] Why is what's proposed here technically >> better than that? (Note: I'm not asking if CBOR is or is >> not more popular than PHB's ideas.) Are there any other >> such directly competing ideas and again, why is this one >> the one to standardise? > > I will definitely look at the solution PHB proposed. Great, thanks. And I think others are doing similarly. In fact I think this part is now in-hand. (But please do review stuff.) > >> >> I'm not sure if answers to the above ought affect charter >> text, but they (or discussion ensuing) will affect how I at >> least ballot on a charter. I've no idea if other ADs feel >> similarly or not. (If it helped, I could ask.) >> >> And lastly for context, I'm not "against" this work, but I >> am uneasy about it - I think maybe it's being done too soon >> and we'd perhaps be better off seeing if CBOR gets real >> traction for uses that really cannot use JOSE. In general I >> do think it is a good thing to have security primitives >> defined for transports or formats that see widespread usage, >> but I'm worried we may be wasting effort here. > > I felt a bit uneasy myself, not necessarily about COSE, but rather how > CBOR was introduced to the IETF and how the show was run so far with COSE. > > I am a bit unclear what motivates various proponents to participate in > this work. It can hardly be IoT. So ask 'em! (I thought that bit was clear tbh.) S. > > Ciao > Hannes > >> >> Cheers, >> S. >> >> [1] https://www.ietf.org/mail-archive/web/jose/current/msg05034.html >> >> _______________________________________________ >> Cose mailing list >> Cose@ietf.org >> https://www.ietf.org/mailman/listinfo/cose >> > > > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose > From nobody Fri Apr 3 22:22:57 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98B6F1A8753 for ; Fri, 3 Apr 2015 22:22:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.55 X-Spam-Level: X-Spam-Status: No, score=-1.55 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XQhb8FbJEb53 for ; Fri, 3 Apr 2015 22:22:54 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 700F41A8A6B for ; Fri, 3 Apr 2015 22:22:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id t345MlRx021830; Sat, 4 Apr 2015 07:22:48 +0200 (CEST) Received: from alma.local (p5DC7F099.dip0.t-ipconnect.de [93.199.240.153]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3lJmjf6zBtzCsvP; Sat, 4 Apr 2015 07:22:46 +0200 (CEST) Message-ID: <551F7525.3050903@tzi.org> Date: Sat, 04 Apr 2015 07:22:45 +0200 From: Carsten Bormann User-Agent: Postbox 3.0.11 (Macintosh/20140602) MIME-Version: 1.0 To: Hannes Tschofenig Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: "cose@ietf.org" , Stephen Farrell Subject: [Cose] "Optimization track", "re-inventing" (Re: Are we finished with the charter?) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Apr 2015 05:22:56 -0000 Hi Hannes, Hannes Tschofenig wrote: > We are obviously on an optimization track > here and there is the perceived need to re-invent everything (not only > with CBOR but with almost everything). Thank you for documenting a common misconception so clearly. Yes, to people less familiar with the matter it may seem that way. Let me pick an example I am very familiar with. 6LoWPAN "re-invented" header compression. Twice. There had been a whole working group (ROHC) that defined an extensible header compression scheme (also called ROHC). [Which had been a "re-invention" of RFC 2507/2508, based on increased interest in optimistic compression; itself a "re-invention" of RFC 1144 to enable IPv6. But I digress.] When we were defining 6LoWPAN, we quickly found that ROHC was too complex for constrained devices. More importantly, the underlying concept, flow-state based compression, didn't match the actual use case very well. So we tried stateless compression in RFC 4944, and then invented (no quotes here) area context state and redid the compression in RFC 6282, adding a simple distribution protocol for the state in RFC 6775. On the way, I was at least a dozen times asked by area directors why we didn't just use ROHC. A reasonable question from someone less familiar with header compression (and one can't really expect area directors to be familiar both with header compression and with constrained nodes). I'm pretty sure that the repeated explanations why that wasn't a useful way forward helped shape our understanding of our own problem, which ultimately enabled the invention of area context state. Push-back is good. But, after a short while, nobody accused us of "re-inventing" header compression any more, even if we did to a certain extent. Another important observation. Header compression of course always was an optimization. An *enabling* optimization, both for VoIP (ROHC) and constrained node networks (6LoWPAN). However, ROHC is much more "optimized" than 6LoWPAN header compression. Compared to previous work, 6LoWPAN header compression was a major simplification, not a further optimization. Just as it should be: Simplification is at the heart of the constrained node network cluster of work [1]. As opposed to "optimization" in the usual sense, which connotes just adding another layer of complexity. Grüße, Carsten [1]: http://www.ietf.org/proceedings/82/slides/plenaryt-7.pdf From nobody Sat Apr 4 11:33:10 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 09F121A01A9 for ; Sat, 4 Apr 2015 11:33:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OQBa7_GzhlE7 for ; Sat, 4 Apr 2015 11:33:07 -0700 (PDT) Received: from smtp1.pacifier.net (smtp1.pacifier.net [64.255.237.171]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 266531A0015 for ; Sat, 4 Apr 2015 11:33:07 -0700 (PDT) Received: from Philemon (winery.augustcellars.com [206.212.239.129]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp1.pacifier.net (Postfix) with ESMTPSA id 651C62CA19; Sat, 4 Apr 2015 11:33:06 -0700 (PDT) From: "Jim Schaad" To: "'Paul Hoffman'" , References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> In-Reply-To: <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> Date: Sat, 4 Apr 2015 11:31:58 -0700 Message-ID: <015901d06f05$a2f6b060$e8e41120$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQJgTYirmvkMWTGQnnlblEGgZ7aZhgB8sL+nAiST3/wCBobXjAI2iO60ApwXwvgCG7cP+gDZdbR0AxcblUICMs+EBAJyUTYDAcCxrPQCnBfC+AIHMDvVAif9TaABd81jLZsr8c5w Content-Language: en-us Archived-At: Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Apr 2015 18:33:09 -0000 I can easily live with the charter as it currently stands. There are three things which we might want to include in the charter: 1. Since constrained environments are one of the primary targets for this work, message size and code size are to be considered whenever decisions are made. 2. We will coordinate with the ACE and CoAP working groups during last calls of the working group documents. 3. The working group will not deal with issues around key management and the binding of identities and keys, the working group is only focused on secure message formatting. As I said to start with, I don't feel strongly that any of these issues need to be in the charter, I am just raising them as issues. Jim > -----Original Message----- > From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Paul Hoffman > Sent: Wednesday, April 01, 2015 2:18 PM > To: cose@ietf.org > Subject: [Cose] Are we finished with the charter? > > There have been no messages for a few days; maybe we are done. Mike > wants something about a JWK mapping, but I don't see any other support for > it. > > Oh, and you need to change "March" to "April" below because we already ran > through that... > > Time to submit it to Kathleen? > > --Paul Hoffman > > > On Mar 29, 2015, at 8:11 AM, Kepeng Li > wrote: > > > > Thanks for the input. > > > > Based on the discussion, now the draft charter 2015-03-29 is: > > > > # CBOR Object Signing and Encryption (COSE) > > > > ## Charter for Working Group > > > > Concise Binary Object Representation (CBOR, RFC 7049) is a concise > > binary format for the serialization of data structured to an extended > > version of the JSON data model. One motivation for CBOR was to make > > this data model more amenable to constrained nodes and constrained > > node networks (RFC 7228). > > > > The JOSE working group recently completed producing representations > > for message authentication (MACs), encryption, and digital signatures, > > using JSON representation. This working group will reuse the work done > > by JOSE, adapting it to the capabilities of CBOR. This will rely on > > the JOSE registries, which, where this provides additional efficiency, > > will be expanded with additional information. > > > > The resulting formats will not be cryptographically convertible from > > or to JOSE formats. This lack of a need for bit-for-bit compabitility > > which will enable some simplification in the adaptation process. > > > > The WG will have two deliverables: > > - a standards-track specification covering the same cryptographic > > formats from JOSE, expressed in CBOR; > > - registration for algorithms (such as AES-CCM-8) that are appropriate > > for constrained environments. > > > > The Working Group will use a wiki to track desired use cases for its > > work, but does not intend to publish this as an RFC. > > > > ## Milestones > > > > * March 2015: Submit COSE specification as a WG item > > > > * April 2015: Submit COSE constrained-appropriate algorithms as a WG > > item > > > > * June 2015: Submit COSE specification to the IESG, for publication as > > a Proposed Standard > > > > * July 2015: Submit COSE constrained-appropriate algorithms to the > > IESG, for publication as a Proposed Standard > > > > I will put the draft charter to a wiki page, so we can track changes from that. > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Sat Apr 4 12:47:29 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF2801A1AC1 for ; Sat, 4 Apr 2015 12:47:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uXAc015bjXQG for ; Sat, 4 Apr 2015 12:47:26 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 828C71A1ACA for ; Sat, 4 Apr 2015 12:47:26 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 3F477BEAA; Sat, 4 Apr 2015 20:47:25 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DpWR35A65HHx; Sat, 4 Apr 2015 20:47:23 +0100 (IST) Received: from [10.87.48.73] (unknown [86.46.18.59]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 09C8ABEA4; Sat, 4 Apr 2015 20:47:23 +0100 (IST) Message-ID: <55203FC9.4050107@cs.tcd.ie> Date: Sat, 04 Apr 2015 20:47:21 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0 MIME-Version: 1.0 To: Jim Schaad , 'Paul Hoffman' , cose@ietf.org References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <015901d06f05$a2f6b060$e8e41120$@augustcellars.com> In-Reply-To: <015901d06f05$a2f6b060$e8e41120$@augustcellars.com> OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Apr 2015 19:47:28 -0000 Hi Jim, Two questions below. On 04/04/15 19:31, Jim Schaad wrote: > I can easily live with the charter as it currently stands. > > There are three things which we might want to include in the charter: > > 1. Since constrained environments are one of the primary targets for this > work, > message size and code size are to be considered whenever decisions are made. Code-size minimisation can call for novel crypto mechanisms. Say, (inventing one just for the sake of an example), a node implements chacha20-poly1305 as an AEAD cipher and also has a need for a MAC, then is this proposed WG going to take on the crypto work of defining such a thing? I would hope not. How is it proposed to handle such cases? > 2. We will coordinate with the ACE and CoAP working groups during last > calls of the working group documents. > > 3. The working group will not deal with issues around key management and > the binding of identities and keys, the working group is only focused on > secure message formatting. You did not use the term CBOR above. Do you see this proposed WG only defining crypto based mechanisms for CBOR, or more generally aiming to be independent of how the platform handles structured data? I assume (based on the list name and proponents) that the proposal here is only to consider CBOR but that might be a bad assumption. S. > > As I said to start with, I don't feel strongly that any of these issues need > to be in the charter, I am just raising them as issues. > > Jim > > >> -----Original Message----- >> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Paul Hoffman >> Sent: Wednesday, April 01, 2015 2:18 PM >> To: cose@ietf.org >> Subject: [Cose] Are we finished with the charter? >> >> There have been no messages for a few days; maybe we are done. Mike >> wants something about a JWK mapping, but I don't see any other support for >> it. >> >> Oh, and you need to change "March" to "April" below because we already ran >> through that... >> >> Time to submit it to Kathleen? >> >> --Paul Hoffman >> >>> On Mar 29, 2015, at 8:11 AM, Kepeng Li >> wrote: >>> >>> Thanks for the input. >>> >>> Based on the discussion, now the draft charter 2015-03-29 is: >>> >>> # CBOR Object Signing and Encryption (COSE) >>> >>> ## Charter for Working Group >>> >>> Concise Binary Object Representation (CBOR, RFC 7049) is a concise >>> binary format for the serialization of data structured to an extended >>> version of the JSON data model. One motivation for CBOR was to make >>> this data model more amenable to constrained nodes and constrained >>> node networks (RFC 7228). >>> >>> The JOSE working group recently completed producing representations >>> for message authentication (MACs), encryption, and digital signatures, >>> using JSON representation. This working group will reuse the work done >>> by JOSE, adapting it to the capabilities of CBOR. This will rely on >>> the JOSE registries, which, where this provides additional efficiency, >>> will be expanded with additional information. >>> >>> The resulting formats will not be cryptographically convertible from >>> or to JOSE formats. This lack of a need for bit-for-bit compabitility >>> which will enable some simplification in the adaptation process. >>> >>> The WG will have two deliverables: >>> - a standards-track specification covering the same cryptographic >>> formats from JOSE, expressed in CBOR; >>> - registration for algorithms (such as AES-CCM-8) that are appropriate >>> for constrained environments. >>> >>> The Working Group will use a wiki to track desired use cases for its >>> work, but does not intend to publish this as an RFC. >>> >>> ## Milestones >>> >>> * March 2015: Submit COSE specification as a WG item >>> >>> * April 2015: Submit COSE constrained-appropriate algorithms as a WG >>> item >>> >>> * June 2015: Submit COSE specification to the IESG, for publication as >>> a Proposed Standard >>> >>> * July 2015: Submit COSE constrained-appropriate algorithms to the >>> IESG, for publication as a Proposed Standard >>> >>> I will put the draft charter to a wiki page, so we can track changes > from that. >> >> _______________________________________________ >> Cose mailing list >> Cose@ietf.org >> https://www.ietf.org/mailman/listinfo/cose > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose > > From nobody Sat Apr 4 14:53:30 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E4BC91A037B for ; Sat, 4 Apr 2015 14:53:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id InzSMJtWOTz4 for ; Sat, 4 Apr 2015 14:53:27 -0700 (PDT) Received: from smtp4.pacifier.net (smtp4.pacifier.net [64.255.237.176]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A0D271A036D for ; Sat, 4 Apr 2015 14:53:27 -0700 (PDT) Received: from Philemon (unknown [50.109.252.111]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp4.pacifier.net (Postfix) with ESMTPSA id BA6F838EEA; Sat, 4 Apr 2015 14:53:26 -0700 (PDT) From: "Jim Schaad" To: "'Stephen Farrell'" , "'Paul Hoffman'" , References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <015901d06f05$a2f6b060$e8e41120$@augustcellars.com> <55203FC9.4050107@cs.tcd.ie> In-Reply-To: <55203FC9.4050107@cs.tcd.ie> Date: Sat, 4 Apr 2015 14:52:18 -0700 Message-ID: <000901d06f21$9f90b850$deb228f0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQJgTYirmvkMWTGQnnlblEGgZ7aZhgB8sL+nAiST3/wCBobXjAI2iO60ApwXwvgCG7cP+gDZdbR0AxcblUICMs+EBAJyUTYDAcCxrPQCnBfC+AIHMDvVAif9TaABd81jLQK9AQvvASi00tqbDPxM8A== Content-Language: en-us Archived-At: Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Apr 2015 21:53:30 -0000 > -----Original Message----- > From: Stephen Farrell [mailto:stephen.farrell@cs.tcd.ie] > Sent: Saturday, April 04, 2015 12:47 PM > To: Jim Schaad; 'Paul Hoffman'; cose@ietf.org > Subject: Re: [Cose] Are we finished with the charter? >=20 >=20 > Hi Jim, >=20 > Two questions below. >=20 > On 04/04/15 19:31, Jim Schaad wrote: > > I can easily live with the charter as it currently stands. > > > > There are three things which we might want to include in the = charter: > > > > 1. Since constrained environments are one of the primary targets = for > > this work, message size and code size are to be considered whenever > > decisions are made. >=20 > Code-size minimisation can call for novel crypto mechanisms. > Say, (inventing one just for the sake of an example), a node = implements > chacha20-poly1305 as an AEAD cipher and also has a need for a MAC, = then is > this proposed WG going to take on the crypto work of defining such a = thing? I > would hope not. How is it proposed to handle such cases? It has already been stated that we are going to do some of this in the = charter. After all, there is a work item of doing some constrained = appropriate algorithms to be done in a draft. I would not expect that = chacha20-poly1305 would so up here. However it is possible that there = may be a call for doing the new EC curve and possible a static-static = version of ECDH as part of this work. Again I don't know that would be = the case and I would probably start by arguing that it should be done in = a different group as the first step. Only those things that are well = understood and deemed necessary should be done now. >=20 > > 2. We will coordinate with the ACE and CoAP working groups during > > last calls of the working group documents. > > > > 3. The working group will not deal with issues around key = management > > and the binding of identities and keys, the working group is only > > focused on secure message formatting. >=20 > You did not use the term CBOR above. >=20 > Do you see this proposed WG only defining crypto based mechanisms for > CBOR, or more generally aiming to be independent of how the platform > handles structured data? I assume (based on the list name and = proponents) > that the proposal here is only to consider CBOR but that might be a = bad > assumption. I would be more than happy to put CBOR into that, I kind of assumed it = was implicit from the rest of the charter. I was thinking in terms of = not getting into key management or certificates would be good statements = to have in the charter for limiting purposes. At some point the ACE and = CoAP groups are going to need to figure out how to do both of these and = I wanted it to be clear it was not something this WG was going to deal = with. Jim >=20 > S. >=20 > > > > As I said to start with, I don't feel strongly that any of these > > issues need to be in the charter, I am just raising them as issues. > > > > Jim > > > > > >> -----Original Message----- > >> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Paul Hoffman > >> Sent: Wednesday, April 01, 2015 2:18 PM > >> To: cose@ietf.org > >> Subject: [Cose] Are we finished with the charter? > >> > >> There have been no messages for a few days; maybe we are done. Mike > >> wants something about a JWK mapping, but I don't see any other > >> support for it. > >> > >> Oh, and you need to change "March" to "April" below because we > >> already ran through that... > >> > >> Time to submit it to Kathleen? > >> > >> --Paul Hoffman > >> > >>> On Mar 29, 2015, at 8:11 AM, Kepeng Li = > >> wrote: > >>> > >>> Thanks for the input. > >>> > >>> Based on the discussion, now the draft charter 2015-03-29 is: > >>> > >>> # CBOR Object Signing and Encryption (COSE) > >>> > >>> ## Charter for Working Group > >>> > >>> Concise Binary Object Representation (CBOR, RFC 7049) is a concise > >>> binary format for the serialization of data structured to an > >>> extended version of the JSON data model. One motivation for CBOR = was > >>> to make this data model more amenable to constrained nodes and > >>> constrained node networks (RFC 7228). > >>> > >>> The JOSE working group recently completed producing = representations > >>> for message authentication (MACs), encryption, and digital > >>> signatures, using JSON representation. This working group will = reuse > >>> the work done by JOSE, adapting it to the capabilities of CBOR. = This > >>> will rely on the JOSE registries, which, where this provides > >>> additional efficiency, will be expanded with additional = information. > >>> > >>> The resulting formats will not be cryptographically convertible = from > >>> or to JOSE formats. This lack of a need for bit-for-bit > >>> compabitility which will enable some simplification in the = adaptation > process. > >>> > >>> The WG will have two deliverables: > >>> - a standards-track specification covering the same cryptographic > >>> formats from JOSE, expressed in CBOR; > >>> - registration for algorithms (such as AES-CCM-8) that are > >>> appropriate for constrained environments. > >>> > >>> The Working Group will use a wiki to track desired use cases for = its > >>> work, but does not intend to publish this as an RFC. > >>> > >>> ## Milestones > >>> > >>> * March 2015: Submit COSE specification as a WG item > >>> > >>> * April 2015: Submit COSE constrained-appropriate algorithms as a = WG > >>> item > >>> > >>> * June 2015: Submit COSE specification to the IESG, for = publication > >>> as a Proposed Standard > >>> > >>> * July 2015: Submit COSE constrained-appropriate algorithms to the > >>> IESG, for publication as a Proposed Standard > >>> > >>> I will put the draft charter to a wiki page, so we can track = changes > > from that. > >> > >> _______________________________________________ > >> Cose mailing list > >> Cose@ietf.org > >> https://www.ietf.org/mailman/listinfo/cose > > > > _______________________________________________ > > Cose mailing list > > Cose@ietf.org > > https://www.ietf.org/mailman/listinfo/cose > > > > From nobody Sat Apr 4 15:15:22 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B5DF51A046D for ; Sat, 4 Apr 2015 15:15:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HOLyoeXRf4ds for ; Sat, 4 Apr 2015 15:15:17 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C2A0B1A0461 for ; Sat, 4 Apr 2015 15:15:16 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id C629BBEA4; Sat, 4 Apr 2015 23:15:14 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qDq1s9ppZfNR; Sat, 4 Apr 2015 23:15:12 +0100 (IST) Received: from [10.87.48.73] (unknown [86.46.18.59]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 98DF0BE5D; Sat, 4 Apr 2015 23:15:12 +0100 (IST) Message-ID: <55206270.2050903@cs.tcd.ie> Date: Sat, 04 Apr 2015 23:15:12 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: Jim Schaad , 'Paul Hoffman' , cose@ietf.org References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <015901d06f05$a2f6b060$e8e41120$@augustcellars.com> <55203FC9.4050107@cs.tcd.ie> <000901d06f21$9f90b850$deb228f0$@augustcellars.com> In-Reply-To: <000901d06f21$9f90b850$deb228f0$@augustcellars.com> OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Archived-At: Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Apr 2015 22:15:20 -0000 Hiya, On 04/04/15 22:52, Jim Schaad wrote: > > >> -----Original Message----- From: Stephen Farrell >> [mailto:stephen.farrell@cs.tcd.ie] Sent: Saturday, April 04, 2015 >> 12:47 PM To: Jim Schaad; 'Paul Hoffman'; cose@ietf.org Subject: Re: >> [Cose] Are we finished with the charter? >> >> >> Hi Jim, >> >> Two questions below. >> >> On 04/04/15 19:31, Jim Schaad wrote: >>> I can easily live with the charter as it currently stands. >>> >>> There are three things which we might want to include in the >>> charter: >>> >>> 1. Since constrained environments are one of the primary targets >>> for this work, message size and code size are to be considered >>> whenever decisions are made. >> >> Code-size minimisation can call for novel crypto mechanisms. Say, >> (inventing one just for the sake of an example), a node implements >> chacha20-poly1305 as an AEAD cipher and also has a need for a MAC, >> then is this proposed WG going to take on the crypto work of >> defining such a thing? I would hope not. How is it proposed to >> handle such cases? > > It has already been stated that we are going to do some of this in > the charter. After all, there is a work item of doing some > constrained appropriate algorithms to be done in a draft. I would > not expect that chacha20-poly1305 would so up here. However it is > possible that there may be a call for doing the new EC curve and > possible a static-static version of ECDH as part of this work. Again > I don't know that would be the case and I would probably start by > arguing that it should be done in a different group as the first > step. Only those things that are well understood and deemed > necessary should be done now. Cool, I think we agree. So where I think we'd want to (as usual) draw the line is before we get into the putative WG doing novel crypto. For example, I'd say that defining a way to use 25519 or 448 for static-static ECDH would be fine, but defining a new signature scheme would not. Things like that latter really would need to get proper crypto review. (That could be done with or via CFRG or some other way, as usual.) That said, I would expect there to be at least some demands for novel crypto arising here, (for code footprint reasons) so I'd say it'd be good for a charter to be as explicit as possible about that. > >> >>> 2. We will coordinate with the ACE and CoAP working groups >>> during last calls of the working group documents. >>> >>> 3. The working group will not deal with issues around key >>> management and the binding of identities and keys, the working >>> group is only focused on secure message formatting. >> >> You did not use the term CBOR above. >> >> Do you see this proposed WG only defining crypto based mechanisms >> for CBOR, or more generally aiming to be independent of how the >> platform handles structured data? I assume (based on the list name >> and proponents) that the proposal here is only to consider CBOR but >> that might be a bad assumption. > > I would be more than happy to put CBOR into that, I kind of assumed > it was implicit from the rest of the charter. I was thinking in > terms of not getting into key management or certificates would be > good statements to have in the charter for limiting purposes. At > some point the ACE and CoAP groups are going to need to figure out > how to do both of these and I wanted it to be clear it was not > something this WG was going to deal with. Ok, thanks. So that brings us (well, me:-) back to the still unanswered question as to whether or not CBOR really has enough usage to warrant forming a WG dedicated to crypto-for-CBOR. If it does, the answer is easy. If not, what is best to do is less clear for me. S. > > Jim > >> >> S. >> >>> >>> As I said to start with, I don't feel strongly that any of these >>> issues need to be in the charter, I am just raising them as >>> issues. >>> >>> Jim >>> >>> >>>> -----Original Message----- From: Cose >>>> [mailto:cose-bounces@ietf.org] On Behalf Of Paul Hoffman Sent: >>>> Wednesday, April 01, 2015 2:18 PM To: cose@ietf.org Subject: >>>> [Cose] Are we finished with the charter? >>>> >>>> There have been no messages for a few days; maybe we are done. >>>> Mike wants something about a JWK mapping, but I don't see any >>>> other support for it. >>>> >>>> Oh, and you need to change "March" to "April" below because we >>>> already ran through that... >>>> >>>> Time to submit it to Kathleen? >>>> >>>> --Paul Hoffman >>>> >>>>> On Mar 29, 2015, at 8:11 AM, Kepeng Li >>>>> >>>> wrote: >>>>> >>>>> Thanks for the input. >>>>> >>>>> Based on the discussion, now the draft charter 2015-03-29 >>>>> is: >>>>> >>>>> # CBOR Object Signing and Encryption (COSE) >>>>> >>>>> ## Charter for Working Group >>>>> >>>>> Concise Binary Object Representation (CBOR, RFC 7049) is a >>>>> concise binary format for the serialization of data >>>>> structured to an extended version of the JSON data model. One >>>>> motivation for CBOR was to make this data model more amenable >>>>> to constrained nodes and constrained node networks (RFC >>>>> 7228). >>>>> >>>>> The JOSE working group recently completed producing >>>>> representations for message authentication (MACs), >>>>> encryption, and digital signatures, using JSON >>>>> representation. This working group will reuse the work done >>>>> by JOSE, adapting it to the capabilities of CBOR. This will >>>>> rely on the JOSE registries, which, where this provides >>>>> additional efficiency, will be expanded with additional >>>>> information. >>>>> >>>>> The resulting formats will not be cryptographically >>>>> convertible from or to JOSE formats. This lack of a need for >>>>> bit-for-bit compabitility which will enable some >>>>> simplification in the adaptation >> process. >>>>> >>>>> The WG will have two deliverables: - a standards-track >>>>> specification covering the same cryptographic formats from >>>>> JOSE, expressed in CBOR; - registration for algorithms (such >>>>> as AES-CCM-8) that are appropriate for constrained >>>>> environments. >>>>> >>>>> The Working Group will use a wiki to track desired use cases >>>>> for its work, but does not intend to publish this as an RFC. >>>>> >>>>> ## Milestones >>>>> >>>>> * March 2015: Submit COSE specification as a WG item >>>>> >>>>> * April 2015: Submit COSE constrained-appropriate algorithms >>>>> as a WG item >>>>> >>>>> * June 2015: Submit COSE specification to the IESG, for >>>>> publication as a Proposed Standard >>>>> >>>>> * July 2015: Submit COSE constrained-appropriate algorithms >>>>> to the IESG, for publication as a Proposed Standard >>>>> >>>>> I will put the draft charter to a wiki page, so we can track >>>>> changes >>> from that. >>>> >>>> _______________________________________________ Cose mailing >>>> list Cose@ietf.org https://www.ietf.org/mailman/listinfo/cose >>> >>> _______________________________________________ Cose mailing >>> list Cose@ietf.org https://www.ietf.org/mailman/listinfo/cose >>> >>> > > _______________________________________________ Cose mailing list > Cose@ietf.org https://www.ietf.org/mailman/listinfo/cose > > From nobody Sat Apr 4 15:33:40 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CAA081A0004 for ; Sat, 4 Apr 2015 15:33:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ElIhHOIvxpHL for ; Sat, 4 Apr 2015 15:33:36 -0700 (PDT) Received: from smtp2.pacifier.net (smtp2.pacifier.net [64.255.237.172]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 822231A008A for ; Sat, 4 Apr 2015 15:33:36 -0700 (PDT) Received: from Philemon (unknown [50.109.252.111]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp2.pacifier.net (Postfix) with ESMTPSA id 79C8E2CA27; Sat, 4 Apr 2015 15:33:35 -0700 (PDT) From: "Jim Schaad" To: "'Stephen Farrell'" , "'Paul Hoffman'" , References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <015901d06f05$a2f6b060$e8e41120$@augustcellars.com> <55203FC9.4050107@cs.tcd.ie> <000901d06f21$9f90b850$deb228f0$@augustcellars.com> <55206270.2050903@cs.tcd.ie> In-Reply-To: <55206270.2050903@cs.tcd.ie> Date: Sat, 4 Apr 2015 15:32:26 -0700 Message-ID: <000a01d06f27$3b086d00$b1194700$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQJgTYirmvkMWTGQnnlblEGgZ7aZhgB8sL+nAiST3/wCBobXjAI2iO60ApwXwvgCG7cP+gDZdbR0AxcblUICMs+EBAJyUTYDAcCxrPQCnBfC+AIHMDvVAif9TaABd81jLQK9AQvvASi00toC0nbWvwJDwloWmuRW6XA= Content-Language: en-us Archived-At: Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Apr 2015 22:33:38 -0000 > -----Original Message----- > From: Stephen Farrell [mailto:stephen.farrell@cs.tcd.ie] > Sent: Saturday, April 04, 2015 3:15 PM > To: Jim Schaad; 'Paul Hoffman'; cose@ietf.org > Subject: Re: [Cose] Are we finished with the charter? >=20 >=20 > Hiya, >=20 > On 04/04/15 22:52, Jim Schaad wrote: > > > > > >> -----Original Message----- From: Stephen Farrell > >> [mailto:stephen.farrell@cs.tcd.ie] Sent: Saturday, April 04, 2015 > >> 12:47 PM To: Jim Schaad; 'Paul Hoffman'; cose@ietf.org Subject: Re: > >> [Cose] Are we finished with the charter? > >> > >> > >> Hi Jim, > >> > >> Two questions below. > >> > >> On 04/04/15 19:31, Jim Schaad wrote: > >>> I can easily live with the charter as it currently stands. > >>> > >>> There are three things which we might want to include in the > >>> charter: > >>> > >>> 1. Since constrained environments are one of the primary targets > >>> for this work, message size and code size are to be considered > >>> whenever decisions are made. > >> > >> Code-size minimisation can call for novel crypto mechanisms. Say, > >> (inventing one just for the sake of an example), a node implements > >> chacha20-poly1305 as an AEAD cipher and also has a need for a MAC, > >> then is this proposed WG going to take on the crypto work of = defining > >> such a thing? I would hope not. How is it proposed to handle such > >> cases? > > > > It has already been stated that we are going to do some of this in = the > > charter. After all, there is a work item of doing some constrained > > appropriate algorithms to be done in a draft. I would not expect = that > > chacha20-poly1305 would so up here. However it is possible that = there > > may be a call for doing the new EC curve and possible a = static-static > > version of ECDH as part of this work. Again I don't know that would > > be the case and I would probably start by arguing that it should be > > done in a different group as the first step. Only those things that > > are well understood and deemed necessary should be done now. >=20 > Cool, I think we agree. >=20 > So where I think we'd want to (as usual) draw the line is before we = get into the > putative WG doing novel crypto. For example, I'd say that defining a = way to > use 25519 or 448 for static-static ECDH would be fine, but defining a = new > signature scheme would not. > Things like that latter really would need to get proper crypto review. = (That > could be done with or via CFRG or some other way, as usual.) >=20 > That said, I would expect there to be at least some demands for novel = crypto > arising here, (for code footprint reasons) so I'd say it'd be good for = a charter > to be as explicit as possible about that. Novel crypto is something that I would run away from as quick as = possible. I really don't want to get into that. I have a hard enough = time understanding some parts of "normal" crypto. Jim >=20 > > > >> > >>> 2. We will coordinate with the ACE and CoAP working groups during > >>> last calls of the working group documents. > >>> > >>> 3. The working group will not deal with issues around key > >>> management and the binding of identities and keys, the working = group > >>> is only focused on secure message formatting. > >> > >> You did not use the term CBOR above. > >> > >> Do you see this proposed WG only defining crypto based mechanisms = for > >> CBOR, or more generally aiming to be independent of how the = platform > >> handles structured data? I assume (based on the list name and > >> proponents) that the proposal here is only to consider CBOR but = that > >> might be a bad assumption. > > > > I would be more than happy to put CBOR into that, I kind of assumed = it > > was implicit from the rest of the charter. I was thinking in terms = of > > not getting into key management or certificates would be good > > statements to have in the charter for limiting purposes. At some > > point the ACE and CoAP groups are going to need to figure out how to > > do both of these and I wanted it to be clear it was not something = this > > WG was going to deal with. >=20 > Ok, thanks. So that brings us (well, me:-) back to the still = unanswered question > as to whether or not CBOR really has enough usage to warrant forming a = WG > dedicated to crypto-for-CBOR. If it does, the answer is easy. If not, = what is best > to do is less clear for me. >=20 > S. >=20 >=20 > > > > Jim > > > >> > >> S. > >> > >>> > >>> As I said to start with, I don't feel strongly that any of these > >>> issues need to be in the charter, I am just raising them as = issues. > >>> > >>> Jim > >>> > >>> > >>>> -----Original Message----- From: Cose > >>>> [mailto:cose-bounces@ietf.org] On Behalf Of Paul Hoffman Sent: > >>>> Wednesday, April 01, 2015 2:18 PM To: cose@ietf.org Subject: > >>>> [Cose] Are we finished with the charter? > >>>> > >>>> There have been no messages for a few days; maybe we are done. > >>>> Mike wants something about a JWK mapping, but I don't see any = other > >>>> support for it. > >>>> > >>>> Oh, and you need to change "March" to "April" below because we > >>>> already ran through that... > >>>> > >>>> Time to submit it to Kathleen? > >>>> > >>>> --Paul Hoffman > >>>> > >>>>> On Mar 29, 2015, at 8:11 AM, Kepeng Li > >>>>> > >>>> wrote: > >>>>> > >>>>> Thanks for the input. > >>>>> > >>>>> Based on the discussion, now the draft charter 2015-03-29 > >>>>> is: > >>>>> > >>>>> # CBOR Object Signing and Encryption (COSE) > >>>>> > >>>>> ## Charter for Working Group > >>>>> > >>>>> Concise Binary Object Representation (CBOR, RFC 7049) is a = concise > >>>>> binary format for the serialization of data structured to an > >>>>> extended version of the JSON data model. One motivation for CBOR > >>>>> was to make this data model more amenable to constrained nodes = and > >>>>> constrained node networks (RFC 7228). > >>>>> > >>>>> The JOSE working group recently completed producing > >>>>> representations for message authentication (MACs), encryption, = and > >>>>> digital signatures, using JSON representation. This working = group > >>>>> will reuse the work done by JOSE, adapting it to the = capabilities > >>>>> of CBOR. This will rely on the JOSE registries, which, where = this > >>>>> provides additional efficiency, will be expanded with additional > >>>>> information. > >>>>> > >>>>> The resulting formats will not be cryptographically convertible > >>>>> from or to JOSE formats. This lack of a need for bit-for-bit > >>>>> compabitility which will enable some simplification in the > >>>>> adaptation > >> process. > >>>>> > >>>>> The WG will have two deliverables: - a standards-track > >>>>> specification covering the same cryptographic formats from JOSE, > >>>>> expressed in CBOR; - registration for algorithms (such as > >>>>> AES-CCM-8) that are appropriate for constrained environments. > >>>>> > >>>>> The Working Group will use a wiki to track desired use cases for > >>>>> its work, but does not intend to publish this as an RFC. > >>>>> > >>>>> ## Milestones > >>>>> > >>>>> * March 2015: Submit COSE specification as a WG item > >>>>> > >>>>> * April 2015: Submit COSE constrained-appropriate algorithms as = a > >>>>> WG item > >>>>> > >>>>> * June 2015: Submit COSE specification to the IESG, for > >>>>> publication as a Proposed Standard > >>>>> > >>>>> * July 2015: Submit COSE constrained-appropriate algorithms to = the > >>>>> IESG, for publication as a Proposed Standard > >>>>> > >>>>> I will put the draft charter to a wiki page, so we can track > >>>>> changes > >>> from that. > >>>> > >>>> _______________________________________________ Cose > mailing list > >>>> Cose@ietf.org https://www.ietf.org/mailman/listinfo/cose > >>> > >>> _______________________________________________ Cose > mailing list > >>> Cose@ietf.org https://www.ietf.org/mailman/listinfo/cose > >>> > >>> > > > > _______________________________________________ Cose mailing > list > > Cose@ietf.org https://www.ietf.org/mailman/listinfo/cose > > > > From nobody Sat Apr 4 19:08:25 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 542D31A8547 for ; Sat, 4 Apr 2015 19:08:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.289 X-Spam-Level: X-Spam-Status: No, score=-1.289 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_ORG=0.611] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sP8o15SzpBDd for ; Sat, 4 Apr 2015 19:08:22 -0700 (PDT) Received: from mail2.ihtfp.org (MAIL2.IHTFP.ORG [204.107.200.7]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6BD711A8033 for ; Sat, 4 Apr 2015 19:08:22 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail2.ihtfp.org (Postfix) with ESMTP id 222B0E2036; Sat, 4 Apr 2015 22:08:21 -0400 (EDT) Received: from mail2.ihtfp.org ([127.0.0.1]) by localhost (mail2.ihtfp.org [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 14892-09; Sat, 4 Apr 2015 22:08:17 -0400 (EDT) Received: by mail2.ihtfp.org (Postfix, from userid 48) id 4E06DE2038; Sat, 4 Apr 2015 22:08:17 -0400 (EDT) Received: from 192.168.248.204 (SquirrelMail authenticated user warlord) by mail2.ihtfp.org with HTTP; Sat, 4 Apr 2015 22:08:17 -0400 Message-ID: In-Reply-To: <000a01d06f27$3b086d00$b1194700$@augustcellars.com> References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <015901d06f05$a2f6b060$e8e41120$@augustcellars.com> <55203FC9.4050107@cs.tcd.ie> <000901d06f21$9f90b850$deb228f0$@augustcellars.com> <55206270.2050903@cs.tcd.ie> <000a01d06f27$3b086d00$b1194700$@augustcellars.com> Date: Sat, 4 Apr 2015 22:08:17 -0400 From: "Derek Atkins" To: "Jim Schaad" User-Agent: SquirrelMail/1.4.22-14.fc20 MIME-Version: 1.0 Content-Type: text/plain;charset=utf-8 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-Virus-Scanned: Maia Mailguard 1.0.2a Archived-At: Cc: cose@ietf.org, 'Paul Hoffman' , 'Stephen Farrell' Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Apr 2015 02:08:24 -0000 HI, On Sat, April 4, 2015 6:32 pm, Jim Schaad wrote: > > >> -----Original Message----- >> From: Stephen Farrell [mailto:stephen.farrell@cs.tcd.ie] >> Sent: Saturday, April 04, 2015 3:15 PM >> To: Jim Schaad; 'Paul Hoffman'; cose@ietf.org >> Subject: Re: [Cose] Are we finished with the charter? >> >> >> Hiya, >> >> On 04/04/15 22:52, Jim Schaad wrote: >> > >> > >> >> -----Original Message----- From: Stephen Farrell >> >> [mailto:stephen.farrell@cs.tcd.ie] Sent: Saturday, April 04, 2015 >> >> 12:47 PM To: Jim Schaad; 'Paul Hoffman'; cose@ietf.org Subject: Re: >> >> [Cose] Are we finished with the charter? >> >> >> >> >> >> Hi Jim, >> >> >> >> Two questions below. >> >> >> >> On 04/04/15 19:31, Jim Schaad wrote: >> >>> I can easily live with the charter as it currently stands. >> >>> >> >>> There are three things which we might want to include in the >> >>> charter: >> >>> >> >>> 1. Since constrained environments are one of the primary targets >> >>> for this work, message size and code size are to be considered >> >>> whenever decisions are made. >> >> >> >> Code-size minimisation can call for novel crypto mechanisms. Say, >> >> (inventing one just for the sake of an example), a node implements >> >> chacha20-poly1305 as an AEAD cipher and also has a need for a MAC, >> >> then is this proposed WG going to take on the crypto work of defining >> >> such a thing? I would hope not. How is it proposed to handle such >> >> cases? >> > >> > It has already been stated that we are going to do some of this in the >> > charter. After all, there is a work item of doing some constrained >> > appropriate algorithms to be done in a draft. I would not expect that >> > chacha20-poly1305 would so up here. However it is possible that there >> > may be a call for doing the new EC curve and possible a static-static >> > version of ECDH as part of this work. Again I don't know that would >> > be the case and I would probably start by arguing that it should be >> > done in a different group as the first step. Only those things that >> > are well understood and deemed necessary should be done now. >> >> Cool, I think we agree. We already have OMAC for making a MAC out of a block cipher.. It's the basis of AES-CMAC, and can be applied to pretty much any block cipher. So no, I wouldn't expect we would need to do any real work here other that saying to use the OMAC construction. As for ECDH, I would suggest that we might also consider AEDH in static-static or static-ephemeral form in addition. >> So where I think we'd want to (as usual) draw the line is before we get >> into the >> putative WG doing novel crypto. For example, I'd say that defining a way >> to >> use 25519 or 448 for static-static ECDH would be fine, but defining a >> new >> signature scheme would not. >> Things like that latter really would need to get proper crypto review. >> (That >> could be done with or via CFRG or some other way, as usual.) >> >> That said, I would expect there to be at least some demands for novel >> crypto >> arising here, (for code footprint reasons) so I'd say it'd be good for a >> charter >> to be as explicit as possible about that. > > Novel crypto is something that I would run away from as quick as possible. > I really don't want to get into that. I have a hard enough time > understanding some parts of "normal" crypto. Not sure your definition of "novel". See above about AEDH as an alternative to ECDH for efficient key agreement in low-power environments. > Jim > >> >> > >> >> >> >>> 2. We will coordinate with the ACE and CoAP working groups during >> >>> last calls of the working group documents. I would also think we might pay attention to DICE as well. >> >>> 3. The working group will not deal with issues around key >> >>> management and the binding of identities and keys, the working group >> >>> is only focused on secure message formatting. >> >> >> >> You did not use the term CBOR above. >> >> >> >> Do you see this proposed WG only defining crypto based mechanisms for >> >> CBOR, or more generally aiming to be independent of how the platform >> >> handles structured data? I assume (based on the list name and >> >> proponents) that the proposal here is only to consider CBOR but that >> >> might be a bad assumption. >> > >> > I would be more than happy to put CBOR into that, I kind of assumed it >> > was implicit from the rest of the charter. I was thinking in terms of >> > not getting into key management or certificates would be good >> > statements to have in the charter for limiting purposes. At some >> > point the ACE and CoAP groups are going to need to figure out how to >> > do both of these and I wanted it to be clear it was not something this >> > WG was going to deal with. >> >> Ok, thanks. So that brings us (well, me:-) back to the still unanswered >> question >> as to whether or not CBOR really has enough usage to warrant forming a >> WG >> dedicated to crypto-for-CBOR. If it does, the answer is easy. If not, >> what is best >> to do is less clear for me. Personally I would still like to see a side-by-side comparison of CBOR to JSON-C for, e.g., a JWS object. -derek -- Derek Atkins 617-623-3745 derek@ihtfp.com www.ihtfp.com Computer and Internet Security Consultant From nobody Sun Apr 5 12:39:04 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A96E01ACE03 for ; Sun, 5 Apr 2015 12:39:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oWi-90-6ztLJ for ; Sun, 5 Apr 2015 12:39:01 -0700 (PDT) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0753.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::753]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DB1EB1ACE01 for ; Sun, 5 Apr 2015 12:39:00 -0700 (PDT) Received: from BL2PR03MB433.namprd03.prod.outlook.com (10.141.92.19) by BL2PR03MB434.namprd03.prod.outlook.com (10.141.92.22) with Microsoft SMTP Server (TLS) id 15.1.136.17; Sun, 5 Apr 2015 19:38:45 +0000 Received: from BL2PR03MB433.namprd03.prod.outlook.com ([10.141.92.19]) by BL2PR03MB433.namprd03.prod.outlook.com ([10.141.92.19]) with mapi id 15.01.0130.020; Sun, 5 Apr 2015 19:38:45 +0000 From: Mike Jones To: Jim Schaad , 'Stephen Farrell' , 'Paul Hoffman' , "cose@ietf.org" Thread-Topic: [Cose] Are we finished with the charter? Thread-Index: AQHQbMFNtsHHUuNJaEG9ePl0I4vBaZ09McEAgAAVEICAACLpAIAABmYAgAAE0QCAAWFRkA== Date: Sun, 5 Apr 2015 19:38:44 +0000 Message-ID: References: <5515A144.5060403@tzi.org> <, > <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <, > <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <015901d06f05$a2f6b060$e8e41120$@augustcellars.com> <55203FC9.4050107@cs.tcd.ie> <000901d06f21$9f90b850$deb228f0$@augustcellars.com> <55206270.2050903@cs.tcd.ie> <000a01d06f27$3b086d00$b1194700$@augustcellars.com> In-Reply-To: <000a01d06f27$3b086d00$b1194700$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: augustcellars.com; dkim=none (message not signed) header.d=none; x-originating-ip: [198.134.93.254] x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BL2PR03MB434; x-microsoft-antispam-prvs: x-forefront-antispam-report: BMV:1; SFV:NSPM; SFS:(10019020)(6009001)(107886001)(106116001)(76176999)(54356999)(2950100001)(76576001)(99286002)(50986999)(92566002)(77096005)(122556002)(93886004)(558084003)(62966003)(102836002)(77156002)(2656002)(74316001)(86362001)(2501003)(2900100001)(40100003)(33656002)(46102003)(86612001)(87936001)(66066001); DIR:OUT; SFP:1102; SCL:1; SRVR:BL2PR03MB434; H:BL2PR03MB433.namprd03.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(5005006)(5002010); SRVR:BL2PR03MB434; BCL:0; PCL:0; RULEID:; SRVR:BL2PR03MB434; x-forefront-prvs: 05373A0663 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: microsoft.onmicrosoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Apr 2015 19:38:45.0250 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL2PR03MB434 Archived-At: Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Apr 2015 19:39:02 -0000 > Novel crypto is something that I would run away from as quick as possible= . I really don't want to get into that. I have a hard enough time unders= tanding some parts of "normal" crypto. +1 ;-) > Jim -- Mike From nobody Sun Apr 5 19:26:46 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5DBA31AD2AF for ; Sun, 5 Apr 2015 19:26:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.101 X-Spam-Level: X-Spam-Status: No, score=0.101 tagged_above=-999 required=5 tests=[BAYES_50=0.8, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3REC7DRZpPej for ; Sun, 5 Apr 2015 19:26:43 -0700 (PDT) Received: from smtp1.pacifier.net (smtp1.pacifier.net [64.255.237.171]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 50AA81AD28D for ; Sun, 5 Apr 2015 19:26:41 -0700 (PDT) Received: from Philemon (unknown [50.109.252.111]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp1.pacifier.net (Postfix) with ESMTPSA id EBFCF2CA07 for ; Sun, 5 Apr 2015 19:26:39 -0700 (PDT) From: "Jim Schaad" To: Date: Sun, 5 Apr 2015 19:25:27 -0700 Message-ID: <005f01d07010$f5428770$dfc79650$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0060_01D06FD6.48E53610" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdBwDYrwjwlNHuehRiyuocq8YzNRUw== Content-Language: en-us Archived-At: Subject: [Cose] Encoding sizes X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Apr 2015 02:26:45 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0060_01D06FD6.48E53610 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit I have been trying to look at a number of different encoding types for a message to figure if there is any reason to choose something other than CBOR. What I did was not a very deep look at the different formats, I did just enough to encode one message (a signature on content) and got some idea of what the structures looked like and could make some guesses about what the difference in sizes would be on things going forward. JOSE-C I encoded a message that in CBOR takes 237 bytes and in JOSE-B it took 250 bytes. I did not do any swapping of strings to integers in either case here. The major difference in lengths appears to be the fact that most of the strings have tag and length in 2 bytes for JOSE-B but only in one byte for CBOR. I did not do the string folding that is available in JOSE-C because it would not give any change in the size. None of the strings occur more than once so unless there was a pre-defined map of values to strings there would be no shrinking. This would require the ability to both add items to the map and declare which map is used. This is done in the CBOR by using a pre-defined mapping which is contained in the IANA registry. There will be potential problems for the CBOR encoding if new items are added later. Even if this is done I believe that the CBOR encoding will be smaller as the integers are encoded in one byte for CBOR and two bytes for JOSE-C BSON I started to encode and quickly stopped as the fact that many fields are prefixed with a 32-bit integer which contains the length means that the message size is going to be much larger. There does not appear to be any way to switch from strings to integers for the keys. However, it would be possible to use single character strings which would be encoded in two bytes for the element name (character followed by zero terminator). Smile I found the Smile description to be mostly unreadable. It is a tighter version of BSON and encoded my message in 249 bytes. There is a 3 byte prefix that could probably be dropped. It was unclear if one could do an integer for the element name using the standard decoder or not. Strings are encoded in a similar method to CBOR, but using more tags so that even more string can be encoded with a one character tag. From that point it will produce smaller items. Smile does not have the same nicety of CBOR of having a similar structure for all items so the code size of the encoder/decoder is probably larger. ------=_NextPart_000_0060_01D06FD6.48E53610 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

I have = been trying to look at a number of different encoding types for a = message to figure if there is any reason to choose something other than = CBOR.

 

What I did was not a very deep look at the different = formats,  I did just enough to encode one message (a signature on = content) and got some idea of what the structures looked like and could = make some guesses about what the difference in sizes would be on things = going forward.

 

JOSE-C

 

I encoded a = message that in CBOR takes 237 bytes and in JOSE-B it took 250 bytes. =  I did not do any swapping of strings to integers in either case = here.  The major difference in lengths appears to be the fact that = most of the strings have tag and length in 2 bytes for JOSE-B but only = in one byte for CBOR.

 

I did not do = the string folding that is available in JOSE-C because it would not give = any change in the size.  None of the strings occur more than once = so unless there was a pre-defined map of values to strings there would = be no shrinking.   This would require the ability to both add = items to the map and declare which map is used.  This is done in = the CBOR by using a pre-defined mapping which is contained in the IANA = registry.  There will be potential problems for the CBOR encoding = if new items are added later.   Even if this is done I believe = that the CBOR encoding will be smaller as the integers are encoded in = one byte for CBOR and two bytes for JOSE-C

 

BSON

 

I started to = encode and quickly stopped as the fact that many fields are prefixed = with a 32-bit integer which contains the length means that the message = size is going to be much larger.  There does not appear to be any = way to switch from strings to integers for the keys.  However, it = would be possible to use single character strings which would be encoded = in two bytes for the element name (character followed by zero = terminator).

 

Smile

 

I found the = Smile description to be mostly unreadable.  It is a tighter version = of BSON and encoded my message in 249 bytes.  There is a 3 byte = prefix that could probably be dropped.  It was unclear if one could = do an integer for the element name using the standard decoder or = not.  Strings are encoded in a similar method to CBOR, but using = more tags so that even more string can be encoded with a one character = tag.  From that point it will produce smaller items.   = Smile does not have the same nicety of CBOR of having a similar = structure for all items so the code size of the encoder/decoder is = probably larger. 

 

 

 

 

------=_NextPart_000_0060_01D06FD6.48E53610-- From nobody Mon Apr 6 05:33:15 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A7AAF1A8850 for ; Mon, 6 Apr 2015 05:33:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.15 X-Spam-Level: * X-Spam-Status: No, score=1.15 tagged_above=-999 required=5 tests=[BAYES_50=0.8, HELO_EQ_DE=0.35] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 56xc6oJgURuQ for ; Mon, 6 Apr 2015 05:33:12 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 96DDE1A8852 for ; Mon, 6 Apr 2015 05:33:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id t36CW61N024032; Mon, 6 Apr 2015 14:32:06 +0200 (CEST) Received: from alma.local (p5DC7F099.dip0.t-ipconnect.de [93.199.240.153]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3lLB862lXWzCtn6; Mon, 6 Apr 2015 14:32:06 +0200 (CEST) Message-ID: <55227CC4.9000701@tzi.org> Date: Mon, 06 Apr 2015 14:32:04 +0200 From: Carsten Bormann User-Agent: Postbox 3.0.11 (Macintosh/20140602) MIME-Version: 1.0 To: Jim Schaad References: <005f01d07010$f5428770$dfc79650$@augustcellars.com> In-Reply-To: <005f01d07010$f5428770$dfc79650$@augustcellars.com> Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Encoding sizes X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Apr 2015 12:33:14 -0000 > BSON The domain of application for BSON is a database where you want to do in-place modification of some data (e.g., increase a counter). Hence, BSON does not employ variable-length encoding as much as other formats. (See also Appendix E.3 of RFC 7049.) I think the main reason why it is sometimes cited where a "binary JSON" as an interchange format is needed is that it has the cool name. > Smile Smile is really baroque. (I had the same problems extracting information from the specification, which is why it's not in Appendix E.) More information about formats can be found in other sections of Appendix E. By the way, there are various implementations of compression of duplicate strings or items for CBOR. E.g., see tag 25 [1, 2]. These schemes are most useful if you are using a JSON-like representation for a table. They are less useful for many types of communication seen by constrained nodes. More powerful nodes can also get many of the advantages (and some more) from applying a lean compression scheme such as LZ4 to the encoded CBOR. It would be trivial to define something like JSON-C's hash for a string map as a tag for CBOR. So far, nobody has wanted to. I think this is because the scheme has all the usual problems of referencing external data that the recipient may or may not have available to it (may need a way to retrieve, and cache, previously unknown values; standalone data lose their usefulness; ...). Grüße, Carsten [1] https://www.iana.org/assignments/cbor-tags/cbor-tags.xhtml [2] http://pod.tst.eu/http://cvs.schmorp.de/CBOR-XS/doc/stringref.pod From nobody Mon Apr 6 11:20:59 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D61321A908C for ; Mon, 6 Apr 2015 11:20:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id viJG-sISFJH9 for ; Mon, 6 Apr 2015 11:20:57 -0700 (PDT) Received: from mail2.ihtfp.org (mail2.ihtfp.org [IPv6:2001:4830:143:1::3a11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4556F1A908B for ; Mon, 6 Apr 2015 11:20:42 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail2.ihtfp.org (Postfix) with ESMTP id F2B42E2038; Mon, 6 Apr 2015 14:20:40 -0400 (EDT) Received: from mail2.ihtfp.org ([127.0.0.1]) by localhost (mail2.ihtfp.org [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 27462-08; Mon, 6 Apr 2015 14:20:38 -0400 (EDT) Received: from securerf.ihtfp.org (unknown [IPv6:fe80::ea2a:eaff:fe7d:235]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mocana.ihtfp.org", Issuer "IHTFP Consulting Certification Authority" (verified OK)) by mail2.ihtfp.org (Postfix) with ESMTPS id 74A02E2036; Mon, 6 Apr 2015 14:20:38 -0400 (EDT) Received: (from warlord@localhost) by securerf.ihtfp.org (8.14.8/8.14.8/Submit) id t36IKaED024194; Mon, 6 Apr 2015 14:20:36 -0400 From: Derek Atkins To: Stephen Farrell References: <5515A144.5060403@tzi.org> <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551D099C.2010303@cs.tcd.ie> <551D4507.70806@tzi.org> <551D4FEE.50800@cs.tcd.ie> <551D769D.2010602@tzi.org> <551E7426.1050203@cs.tcd.ie> Date: Mon, 06 Apr 2015 14:20:36 -0400 In-Reply-To: <551E7426.1050203@cs.tcd.ie> (Stephen Farrell's message of "Fri, 03 Apr 2015 12:06:14 +0100") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Virus-Scanned: Maia Mailguard 1.0.2a Archived-At: Cc: Carsten Bormann , "cose@ietf.org" Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Apr 2015 18:20:59 -0000 Stephen Farrell writes: [snip] >>>>> 2) Can you explicitly say why JOSE just does not work for >>>>> some key use-cases? >>>> I had some slides about this: >>>> http://www.ietf.org/proceedings/90/slides/slides-90-jose-2.pdf >>>> (the last three slides are the COSE-specific ones). >>> >>> The last 3 slides there simply seem to say "don't use b64." >> >> They do say a bit more, but, yes, base64 is the biggest problem. > > So how do we justify going from "let's document a way to use JOSE > but without the b64 penalty" to "let's re-design all of JOSE to > be a thing called COSE that doesn't have the b64 penalty"? I don't > think I've seen that justification tbh. Personally I don't see us taking that leap. At least *I* don't see that. I see it more as "let's document how to use JOSE without the b64 and other JSON penalties, and make the necessary changes to simplify the data structure encodings, encoder code, and decoder code". That's not the same thing as "let's re-design all of JOSE" which, frankly, I don't see anyone specifically suggesting or supporting. [snip] >>>> The design space is indeed humungous. Why have we arrived here? >>>> Binary-enhanced JSONs are a non-starter, they just carry all the >>>> existing complexity of JSON and add a couple of backwards >>>> compatibility issues. That's why we did CBOR. >>> >>> I would have preferred a specific answer there that referred >>> to (ideally via a list archive URL) PHB's stuff and showed why >>> what's proposed here is (going to be) better, or which pointed >>> out the fatal flaw in PHB's work. >> >> I'm sorry, but that is water under the bridge. > > That seems non-responsive, so maybe I wasn't clear. If the flaws > in PHB's stuff, or the advantages of COSE compared to PHB's stuff, > were water under the bridge then you should be able to send me the > list archive URL where that was documented. If not, then the water > hasn't yet flowed under an IETF visible bridge;-) I think that Jim Schaad's email showing a 35-40 byte savings of COSE over JOSE-B/C is probably sufficient, considering the complexity of a JSON encoder/decover versus a CBOR encoder/decoder. >> Replacing CBOR by >> something that nobody has looked at in detail is not reducing any of the >> other work required (and, for one, am not going to waste any time on >> something that is not solving my problems). > > You are assuming that I accept that CBOR is being, or will be, > widely used. That may be the case, but I have not seen the evidence > for that. If CBOR is being widely used that shouldn't be hard to > demonstrate. And (to repeat myself) it's those pointers to work > based on CBOR that I'd most like to see. There's at least a dozen (or more) CBOR implementations out there. See http://cbor.io/ I cannot comment on how widely used they are, but I know that I'm planning to use it. -derek -- Derek Atkins 617-623-3745 derek@ihtfp.com www.ihtfp.com Computer and Internet Security Consultant From nobody Mon Apr 6 12:31:59 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DDCC01A908B for ; Mon, 6 Apr 2015 12:31:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.511 X-Spam-Level: X-Spam-Status: No, score=-14.511 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CvOKdL4TNY66 for ; Mon, 6 Apr 2015 12:31:56 -0700 (PDT) Received: from alln-iport-4.cisco.com (alln-iport-4.cisco.com [173.37.142.91]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3CD551A90E9 for ; Mon, 6 Apr 2015 12:31:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1770; q=dns/txt; s=iport; t=1428348716; x=1429558316; h=from:to:cc:subject:date:message-id:references: in-reply-to:content-id:content-transfer-encoding: mime-version; bh=B9Z0+awpdepCM8M3Fcr3GIOzO7fFtRZ6l2LtzC1VY+c=; b=cILell/ZMHoxppo845f99R9u5zEKm2KhK37o8iDKGlxSO3JMYi2PDVQk DNZ8C/0XPAHnywzA8QxwNuJoyDE+yJ8TV0dWF4Xg52rz449LcNeE19SNm dxekc1MnTL1MjvvGeri5aU1WUWfvli5ndFPRuM0ULU6LEXM/z9rv+jtqP c=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AcBQCX3iJV/5RdJa1cgwiBLgWDEL9kiD0CHIEFTAEBAQEBAX6EHwEBAwEjEUUQAgEIGgImAgICMBUQAgQBDQWIJwi1Gpc8AQEBAQEBAQEBAQEBAQEBAQEBAQEBF4EhigiERjMHgmgvgRYBBIYfikyKApRUIoNvb4FEfwEBAQ X-IronPort-AV: E=Sophos;i="5.11,533,1422921600"; d="scan'208";a="138758425" Received: from rcdn-core-12.cisco.com ([173.37.93.148]) by alln-iport-4.cisco.com with ESMTP; 06 Apr 2015 19:31:55 +0000 Received: from xhc-rcd-x06.cisco.com (xhc-rcd-x06.cisco.com [173.37.183.80]) by rcdn-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id t36JVtBO031143 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Mon, 6 Apr 2015 19:31:55 GMT Received: from xmb-rcd-x10.cisco.com ([169.254.15.175]) by xhc-rcd-x06.cisco.com ([173.37.183.80]) with mapi id 14.03.0195.001; Mon, 6 Apr 2015 14:31:55 -0500 From: "Joe Hildebrand (jhildebr)" To: Derek Atkins , Stephen Farrell Thread-Topic: [Cose] Are we finished with the charter? Thread-Index: AQHQcJZw3yIYUyrghk6igEA2zI7kj51ATruA Date: Mon, 6 Apr 2015 19:31:55 +0000 Message-ID: <1F66B0B5-2AF9-4A2D-BAD1-A9BBAFF56549@cisco.com> References: <5515A144.5060403@tzi.org> <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551D099C.2010303@cs.tcd.ie> <551D4507.70806@tzi.org> <551D4FEE.50800@cs.tcd.ie> <551D769D.2010602@tzi.org> <551E7426.1050203@cs.tcd.ie> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/15.8.2.150328 x-originating-ip: [10.24.98.87] Content-Type: text/plain; charset="utf-8" Content-ID: <0CAF8302FBCE9E4EB5EF76F289E80B83@emea.cisco.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: Carsten Bormann , "cose@ietf.org" Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Apr 2015 19:31:58 -0000 T24gNC82LzE1LCAxMjoyMCBQTSwgIkRlcmVrIEF0a2lucyIgPGRlcmVrQGlodGZwLmNvbT4gd3Jv dGU6DQoNCj4+IFNvIGhvdyBkbyB3ZSBqdXN0aWZ5IGdvaW5nIGZyb20gImxldCdzIGRvY3VtZW50 IGEgd2F5IHRvIHVzZSBKT1NFDQo+PiBidXQgd2l0aG91dCB0aGUgYjY0IHBlbmFsdHkiIHRvICJs ZXQncyByZS1kZXNpZ24gYWxsIG9mIEpPU0UgdG8NCj4+IGJlIGEgdGhpbmcgY2FsbGVkIENPU0Ug dGhhdCBkb2Vzbid0IGhhdmUgdGhlIGI2NCBwZW5hbHR5Ij8gSSBkb24ndA0KPj4gdGhpbmsgSSd2 ZSBzZWVuIHRoYXQganVzdGlmaWNhdGlvbiB0YmguDQo+DQo+UGVyc29uYWxseSBJIGRvbid0IHNl ZSB1cyB0YWtpbmcgdGhhdCBsZWFwLiAgQXQgbGVhc3QgKkkqIGRvbid0IHNlZQ0KPnRoYXQuICBJ IHNlZSBpdCBtb3JlIGFzICJsZXQncyBkb2N1bWVudCBob3cgdG8gdXNlIEpPU0Ugd2l0aG91dCB0 aGUgYjY0DQo+YW5kIG90aGVyIEpTT04gcGVuYWx0aWVzLCBhbmQgbWFrZSB0aGUgbmVjZXNzYXJ5 IGNoYW5nZXMgdG8gc2ltcGxpZnkgdGhlDQo+ZGF0YSBzdHJ1Y3R1cmUgZW5jb2RpbmdzLCBlbmNv ZGVyIGNvZGUsIGFuZCBkZWNvZGVyIGNvZGUiLiAgVGhhdCdzIG5vdA0KPnRoZSBzYW1lIHRoaW5n IGFzICJsZXQncyByZS1kZXNpZ24gYWxsIG9mIEpPU0UiIHdoaWNoLCBmcmFua2x5LCBJIGRvbid0 DQo+c2VlIGFueW9uZSBzcGVjaWZpY2FsbHkgc3VnZ2VzdGluZyBvciBzdXBwb3J0aW5nLg0KDQpB Z3JlZS4gIFRoZXJlIGFyZSBzb21lIHNtYWxsIGNoYW5nZXMgdG8gZ2V0IHRvIG1vcmUgaWRpb21h dGljIENCT1IgdGhhdCBJIHRoaW5rIG1vc3QgZm9sa3MgYWxyZWFkeSBhZ3JlZSB3aXRoLiAgVGhl cmUgbWF5IGJlIG90aGVyIGNoYW5nZXMgdGhhdCBhIFdHIG1pZ2h0IHdhbnQgdG8gbWFrZSAoZS5n LiAic29tZSBzaW1wbGlmaWNhdGlvbiIgaW4gdGhlIGN1cnJlbnQgY2hhcnRlciB0ZXh0KSwgYnV0 IHRoZSBiYXIgdGhhdCB3YXMgcHJvcG9zZWQgZWFybGllciBvbiB0aGUgSk9TRSBsaXN0IHdhcyBv bmx5IHRha2luZyBjaGFuZ2VzIHRoYXQgaGFkIGEgY29tcGVsbGluZyBjb2RlIHNpemUsIHdpcmUg c2l6ZSwgb3Igc2VjdXJpdHkgaW1wcm92ZW1lbnQgYXNzb2NpYXRlZCB3aXRoIHRoZW0uICBXZSBj b3VsZCBkZWNpZGUgdG8gYWRkIHRleHQgb2YgdGhhdCBuYXR1cmUgdG8gdGhlIGNoYXJ0ZXIgdG8g YXZvaWQgdGhlIHBlcmNlcHRpb24gdGhhdCB3ZSdyZSB3b3JraW5nIG9uIGEgY29tcGxldGUgcmVk ZXNpZ24uDQoNCi0tIA0KSm9lIEhpbGRlYnJhbmQNCg0KDQoNCg== From nobody Mon Apr 6 13:18:04 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6C1601A911B for ; Mon, 6 Apr 2015 13:18:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HsmQlWWC1p5V for ; Mon, 6 Apr 2015 13:18:00 -0700 (PDT) Received: from mail-la0-x22d.google.com (mail-la0-x22d.google.com [IPv6:2a00:1450:4010:c03::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 324BC1A9100 for ; Mon, 6 Apr 2015 13:18:00 -0700 (PDT) Received: by labbd9 with SMTP id bd9so16053021lab.2 for ; Mon, 06 Apr 2015 13:17:58 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=WT25dmI3VCu6WZ293ksyecbuL0Hc6Deh5mhXGYKzUBM=; b=KhqeqspoeAFw5syJfTsnEz73csSmIbzEApYbSXigddHeIcfhiI0+uA6jDTrny1J4Sr k3N/0/FP347YCH5XtuZk30b+07LPcUOOPHV9fqKB7uhgacYbKQJYKPo3ezx8jI8Yg/rS 0SPwFsxEzBjsx2F8bbZrtbijtcz21VveZ0XCHp/Wzr+xHEPYxfk9aa7RipWWqJSC60DC 48UJgkdnPss+Gp3kXCwFx0clRWybzC4oL2IjkOvcAOKCtC9yIami50aVpTK/tuu7sCZG 1/BsnsDY1jQMe1ZvNnbWFPSbV+J84doA261P65uEIuV0OZsNjhZ1s+lC35u12FLj2b+A fJEg== MIME-Version: 1.0 X-Received: by 10.152.19.199 with SMTP id h7mr15486007lae.32.1428351478615; Mon, 06 Apr 2015 13:17:58 -0700 (PDT) Received: by 10.112.167.101 with HTTP; Mon, 6 Apr 2015 13:17:58 -0700 (PDT) In-Reply-To: References: <5515A144.5060403@tzi.org> <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <551D099C.2010303@cs.tcd.ie> <551D4507.70806@tzi.org> <551D4FEE.50800@cs.tcd.ie> <551D769D.2010602@tzi.org> <551E7426.1050203@cs.tcd.ie> Date: Mon, 6 Apr 2015 16:17:58 -0400 Message-ID: From: Kathleen Moriarty To: Derek Atkins Content-Type: multipart/alternative; boundary=089e014942aa7f54da051313fe01 Archived-At: Cc: Carsten Bormann , "cose@ietf.org" , Stephen Farrell Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Apr 2015 20:18:03 -0000 --089e014942aa7f54da051313fe01 Content-Type: text/plain; charset=UTF-8 On Mon, Apr 6, 2015 at 2:20 PM, Derek Atkins wrote: > Stephen Farrell writes: > > [snip] > >>>>> 2) Can you explicitly say why JOSE just does not work for > >>>>> some key use-cases? > >>>> I had some slides about this: > >>>> http://www.ietf.org/proceedings/90/slides/slides-90-jose-2.pdf > >>>> (the last three slides are the COSE-specific ones). > >>> > >>> The last 3 slides there simply seem to say "don't use b64." > >> > >> They do say a bit more, but, yes, base64 is the biggest problem. > > > > So how do we justify going from "let's document a way to use JOSE > > but without the b64 penalty" to "let's re-design all of JOSE to > > be a thing called COSE that doesn't have the b64 penalty"? I don't > > think I've seen that justification tbh. > > Personally I don't see us taking that leap. At least *I* don't see > that. I see it more as "let's document how to use JOSE without the b64 > and other JSON penalties, and make the necessary changes to simplify the > data structure encodings, encoder code, and decoder code". That's not > the same thing as "let's re-design all of JOSE" which, frankly, I don't > see anyone specifically suggesting or supporting. > > [snip] > >>>> The design space is indeed humungous. Why have we arrived here? > >>>> Binary-enhanced JSONs are a non-starter, they just carry all the > >>>> existing complexity of JSON and add a couple of backwards > >>>> compatibility issues. That's why we did CBOR. > >>> > >>> I would have preferred a specific answer there that referred > >>> to (ideally via a list archive URL) PHB's stuff and showed why > >>> what's proposed here is (going to be) better, or which pointed > >>> out the fatal flaw in PHB's work. > >> > >> I'm sorry, but that is water under the bridge. > > > > That seems non-responsive, so maybe I wasn't clear. If the flaws > > in PHB's stuff, or the advantages of COSE compared to PHB's stuff, > > were water under the bridge then you should be able to send me the > > list archive URL where that was documented. If not, then the water > > hasn't yet flowed under an IETF visible bridge;-) > PHB just posted his 4-page draft Wednesday of IETF week, after the JOSE meeting. He brought this up during the JOSE session and during the plenary at the mic. He told me after the JOSE session that he would get the draft posted, so there really hasn't been too much time, but reviews are flowing. The reviews on that draft and feasibility for this problem space are being discussed mostly on the JOSE list. http://www.ietf.org/mail-archive/web/jose/current/msg05066.html My opinion is that we need to allow that conversation to happen and give it a little more time. > I think that Jim Schaad's email showing a 35-40 byte savings of COSE > over JOSE-B/C is probably sufficient, considering the complexity of a > JSON encoder/decover versus a CBOR encoder/decoder. > This type of discussion and analysis has also been helpful. > > >> Replacing CBOR by > >> something that nobody has looked at in detail is not reducing any of the > >> other work required (and, for one, am not going to waste any time on > >> something that is not solving my problems). > > > > You are assuming that I accept that CBOR is being, or will be, > > widely used. That may be the case, but I have not seen the evidence > > for that. If CBOR is being widely used that shouldn't be hard to > > demonstrate. And (to repeat myself) it's those pointers to work > > based on CBOR that I'd most like to see. > > There's at least a dozen (or more) CBOR implementations out there. See > http://cbor.io/ > > I cannot comment on how widely used they are, but I know that I'm > planning to use it. > I'd like to see this conversation develop a bit more and also want to be careful that we don't waste a ton of time in the lead up for a WG that may only produce a couple of drafts with plans to do that quickly. We shouldn't be a barrier to getting work done. If there are enough use cases where this makes sense, having it flow quickly and seeing what comes of it may be the way to consume less overall time. ACE needs a solution or they may design something else, that was pretty clear in Dallas - but the WG would prefer to refer to something else. I'm going to be pretty tied up this week, so I may be more quiet until Friday. Thanks, Kathleen > > -derek > -- > Derek Atkins 617-623-3745 > derek@ihtfp.com www.ihtfp.com > Computer and Internet Security Consultant > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose > -- Best regards, Kathleen --089e014942aa7f54da051313fe01 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable


On Mon, Apr 6, 2015 at 2:20 PM, Derek Atkins <derek@ihtfp.com> wrote:
Stephen Farrell <stephen.farrell@cs.tcd.ie> w= rites:

[snip]
>>>>> 2) Can you explicitly say why JOSE just does not= work for
>>>>> some key use-cases?
>>>> I had some slides about this:
>>>> http://www.ietf.org/proceedings/90/slide= s/slides-90-jose-2.pdf
>>>> (the last three slides are the COSE-specific ones).
>>>
>>> The last 3 slides there simply seem to say "don't use= b64."
>>
>> They do say a bit more, but, yes, base64 is the biggest problem. >
> So how do we justify going from "let's document a way to use = JOSE
> but without the b64 penalty" to "let's re-design all of = JOSE to
> be a thing called COSE that doesn't have the b64 penalty"? I = don't
> think I've seen that justification tbh.

Personally I don't see us taking that leap.=C2=A0 At least *I* d= on't see
that.=C2=A0 I see it more as "let's document how to use JOSE witho= ut the b64
and other JSON penalties, and make the necessary changes to simplify the data structure encodings, encoder code, and decoder code".=C2=A0 That&= #39;s not
the same thing as "let's re-design all of JOSE" which, frankl= y, I don't
see anyone specifically suggesting or supporting.

[snip]
>>>> The design space is indeed humungous.=C2=A0 Why have= we arrived here?
>>>> Binary-enhanced JSONs are a non-starter, they just carry a= ll the
>>>> existing complexity of JSON and add a couple of backwards<= br> >>>> compatibility issues.=C2=A0 That's why we did CBOR. >>>
>>> I would have preferred a specific answer there that referred >>> to (ideally via a list archive URL) PHB's stuff and showed= why
>>> what's proposed here is (going to be) better, or which poi= nted
>>> out the fatal flaw in PHB's work.
>>
>> I'm sorry, but that is water under the bridge.
>
> That seems non-responsive, so maybe I wasn't clear. If the flaws > in PHB's stuff, or the advantages of COSE compared to PHB's st= uff,
> were water under the bridge then you should be able to send me the
> list archive URL where that was documented. If not, then the water
> hasn't yet flowed under an IETF visible bridge;-)

PHB just posted his 4-page draft Wednesday of IE= TF week, after the JOSE meeting.=C2=A0 He brought this up during the JOSE s= ession and during the plenary at the mic.=C2=A0 He told me after the JOSE s= ession that he would get the draft posted, so there really hasn't been = too much time, but reviews are flowing.=C2=A0 The reviews on that draft and= feasibility for this problem space are being discussed =C2=A0mostly on the= JOSE list.


My opinion is that we need to allow that conversation to happen and give= it a little more time.


I think that Jim Schaad's email showing a 35-40 byte savings of = COSE
over JOSE-B/C is probably sufficient, considering the complexity of a
JSON encoder/decover versus a CBOR encoder/decoder.
This type of discussion and analysis has also been helpful.=C2= =A0

>>=C2=A0 Replacing CBOR by
>> something that nobody has looked at in detail is not reducing any = of the
>> other work required (and, for one, am not going to waste any time = on
>> something that is not solving my problems).
>
> You are assuming that I accept that CBOR is being, or will be,
> widely used. That may be the case, but I have not seen the evidence > for that. If CBOR is being widely used that shouldn't be hard to > demonstrate. And (to repeat myself) it's those pointers to work > based on CBOR that I'd most like to see.

There's at least a dozen (or more) CBOR implementations out ther= e.=C2=A0 See
http://cbor.io/

I cannot comment on how widely used they are, but I know that I'm
planning to use it.

I'd like to see= this conversation develop a bit more and also want to be careful that we d= on't waste a ton of time in the lead up for a WG that may only produce = a couple of drafts with plans to do that quickly.=C2=A0 We shouldn't be= a barrier to getting work done.=C2=A0 If there are enough use cases where = this makes sense, having it flow quickly and seeing what comes of it may be= the way to consume less overall time.

ACE needs a= solution or they may design something else, that was pretty clear in Dalla= s - but the WG would prefer to refer to something else.

I'm going to be pretty tied up this week, so I may be more quiet = until Friday.

Thanks,
Kathleen

=C2=A0

-derek
--
=C2=A0 =C2=A0 =C2=A0 =C2=A0Derek Atkins=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0617-623-3745
=C2=A0 =C2=A0 =C2=A0 =C2=A0derek@ihtfp.com=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0www.ihtfp.com
=C2=A0 =C2=A0 =C2=A0 =C2=A0Computer and Internet Security Consultant

_______________________________________________
Cose mailing list
Cose@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/cose



--
=

Best regards,
Kathleen
=
--089e014942aa7f54da051313fe01-- From nobody Mon Apr 6 22:25:51 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF9BD1B2A21 for ; Mon, 6 Apr 2015 22:25:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.901 X-Spam-Level: X-Spam-Status: No, score=-3.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4c_EcLk8X6tH for ; Mon, 6 Apr 2015 22:25:45 -0700 (PDT) Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E508E1B2A1C for ; Mon, 6 Apr 2015 22:25:44 -0700 (PDT) X-AuditID: c1b4fb25-f79126d000004b89-cd-55236a56e3bf Received: from ESESSHC019.ericsson.se (Unknown_Domain [153.88.253.124]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id B0.F8.19337.65A63255; Tue, 7 Apr 2015 07:25:42 +0200 (CEST) Received: from ESESSMB303.ericsson.se ([169.254.3.196]) by ESESSHC019.ericsson.se ([153.88.183.75]) with mapi id 14.03.0210.002; Tue, 7 Apr 2015 07:25:42 +0200 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Hannes Tschofenig Thread-Topic: [Cose] Are we finished with the charter? Thread-Index: AQHQbMFNPhEXnZth6UCGfZYhkBbCQ505HVy3gAAfDICAAkI6AIAFjm0A Date: Tue, 7 Apr 2015 05:25:40 +0000 Message-ID: References: <5515A144.5060403@tzi.org> <5515D7BC.5060408@tzi.org> <5515EAA6.50109@tzi.org> <3E437B95-88E2-4C7B-8AC9-B084FB113362@vpnc.org> <032e4abb-fa77-40f5-b9ae-f09435ddbc91@alibaba-inc.com> <7FB72934-9659-40B3-8E12-A272A6658C1E@vpnc.org> <2f049d52-83e3-4de5-9525-69ff7df67498@alibaba-inc.com> <551EDD3C.5020200@gmx.net> In-Reply-To: <551EDD3C.5020200@gmx.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.7.141117 x-originating-ip: [153.88.183.150] Content-Type: text/plain; charset="utf-8" Content-ID: <455831B1573C3E44951FDDA120A442FE@ericsson.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupjkeLIzCtJLcpLzFFi42KZGfG3Rjc8SznU4DarxbStU1ktlu68x+rA 5LF40342jyVLfjIFMEVx2aSk5mSWpRbp2yVwZew5k1iwx7Ti0KRF7A2MPSZdjJwcEgImEjce HmODsMUkLtxbD2YLCRxllDh+y62LkQvIXswoMf/7DnaQBJuAi8SDhkdMILaIgKHE9ZnTWUFs ZgFlicYNl1hAbGEBU4nHjZ3MEDVmEntPbWGHsN0kNk15BGazCKhIPO26wQhi8wpYSCxftIMN YtkxdolrDZvBEpwC6hKfbnSCLWAEuu77qTVMEMvEJW49mc8EcbWAxJI955khbFGJl4//gdWL CuhJrLzeBPWZksSK7ZeAZnIA9WpKrN+lDzHGWuLe4wksELaixJTuh+wQ9whKnJz5hGUCo8Qs JNtmIXTPQtI9C0n3LCTdCxhZVzGKFqcWJ+WmGxnrpRZlJhcX5+fp5aWWbGIERuDBLb9VdzBe fuN4iFGAg1GJh1fBSjlUiDWxrLgy9xCjNAeLkjivnfGhECGB9MSS1OzU1ILUovii0pzU4kOM TBycUg2M8ZtXetpWzPzpPO+6eZX7t10Tf33kKNgS9slBuo5xfcXLeSErp5csyTp1y+e+xFSe FdPb4n9FX8lZwshlHrSV0+XQmVlXH719seX6F/kZxxY7TvnR+P2ATxtf7s65PWzPdmUG35X8 F1khMmkFj2jgSd+I3Scm353eUd3yk8V+MbctX2oR4wbGaiWW4oxEQy3mouJEAKqsl2ahAgAA Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Are we finished with the charter? X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Apr 2015 05:25:49 -0000 SGkgSGFubmVzLA0KDQpTb3JyeSBmb3IgbGF0ZSByZXBseS4NCg0KT24gMjAxNS0wNC0wMyAyMDoz NCwgIkhhbm5lcyBUc2Nob2ZlbmlnIiA8aGFubmVzLnRzY2hvZmVuaWdAZ214Lm5ldD4gd3JvdGU6 DQoNCj5IaSBHb2VyYW4sDQo+DQo+SSBkb24ndCB0aGluayB0aGF0IHRoZXNlIHVzZSBjYXNlcyBh cmUgdXNlZnVsIHNpbmNlIHRoZXkgYXJlIHByZXR0eSBtdWNoDQo+aW5kZXBlbmRlbnQgb2YgdGhl IEpPU0UvQ0JPUi9DT1NFIHF1ZXN0aW9uLg0KPg0KPlRoZSBpbnRlcmVzdGluZyBxdWVzdGlvbiBp cyB3aGV0aGVyIHRoZXJlIGFyZSBjYXNlcyB3aGVyZSB5b3UgY2Fubm90IGdldA0KPnlvdXIgdXNl IGNhc2UgdG8gd29yayB3aXRob3V0IGhhdmluZyBDT1NFLiBEbyB5b3UgaGF2ZSBzdWNoIGEgdXNl IGNhc2U/DQoNCkFzIGhhcyBiZWVuIG1lbnRpb25lZCBieSBvdGhlcnMsIGl0IGRlcGVuZHMgb24g d2hhdCB5b3UgYXNzdW1lLiBJZiB5b3UNCmFzc3VtZSB0aGF0IG1lc3NhZ2Ugc2l6ZSBhbmQgY29k ZSBmb290cHJpbnQgZG9lc27igJl0IG1hdHRlciwgdGhlbiB0aGVyZSBpcw0KbGl0dGxlIG5lZWQg Zm9yIENPU0Ugb3Igc2ltaWxhci4gSSBndWVzcyB0aGlzIGlzIHlvdXIgcG9pbnQgb2Ygdmlldy4N Cg0KQnV0IEkgdGhpbmsgaXQgaXMgZmFpciB0byBhY2tub3dsZWRnZSB0aGF0IHRoZXJlIGFyZSBv dGhlciBwb2ludHMgb2Ygdmlldw0KaW4gdGhlIENvUkUgLyBBQ0UgY29tbXVuaXR5LiBJbiBIb25v bHVsdSB3aGVuIHdlIHByZXNlbnRlZA0KaHR0cDovL3Rvb2xzLmlldGYub3JnL2RyYWZ0cy9kcmFm dC1zZWxhbmRlci1hY2Utb2JqZWN0LXNlY3VyaXR5LTAwLCAgdGhlDQptYWluIGNvbW1lbnQgd2Ug Z290IChpbmNsdWRpbmcgcGVvcGxlIGZyb20gQVJNKSB3YXMgdGhhdCBvdXIgcHJvcG9zZWQNCm1l c3NhZ2UgZm9ybWF0IGJhc2VkIG9uIHdyYXBwaW5nIHdpdGggSk9TRSBjcmVhdGVzIHRvbyBtdWNo IG92ZXJoZWFkLCBlLmcuDQpiZWNhdXNlIG9mIGZyYWdtZW50YXRpb24gaW4gODAyLjE1LjQuDQoN ClRoaXMgd2FzIG9uZSBvZiB0aGUgcmVhc29ucyBmb3IgY29uc2lkZXJpbmcgbWVzc2FnZSBmb3Jt YXQgb3B0aW1pemF0aW9ucw0KdXNpbmcgQ09TRS0wMCBldGMuIGluIHZlcnNpb24gLTAxIChBcHBl bmRpeCBDKS4gV2UgY291bGQgdXNlIG91ciB0YWlsb3INCm1hZGUgbWVzc2FnZSBmb3JtYXQgb3Ig bWFrZSBvdXIgb3duIHByb2ZpbGUgb2YgSk9TRSBmb3JtYXRzLCBidXQgaXQgc2VlbXMNCm1vcmUg ZnJ1aXRmdWwgdG8gZGVmaW5lIGEgbmV3IGZvcm1hdCBmb3IgY29tbW9uIG5lZWRzIGluIHRob3Nl IGNhc2VzIHdoZW4NCm1lc3NhZ2Ugc2l6ZSwgZm9vdHByaW50IGV0Yy4gbWF0dGVycy4NCg0KDQpC ZXN0LCAgDQpHw7ZyYW4NCg0KDQo+DQo+Q2lhbw0KPkhhbm5lcw0KPg0KPk9uIDA0LzAyLzIwMTUg MDg6MDUgQU0sIEfDtnJhbiBTZWxhbmRlciB3cm90ZToNCj4+IFJlZ2FyZGluZyB0aGlzIGZvcm11 bGF0aW9uOg0KPj4gDQo+PiBPTEQNCj4+ICJhIHN0YW5kYXJkcy10cmFjayBzcGVjaWZpY2F0aW9u IGNvdmVyaW5nIHRoZSBzYW1lIGNyeXB0b2dyYXBoaWMgZm9ybWF0cw0KPj4gZnJvbSBKT1NFLCBl eHByZXNzZWQgaW4gQ0JPUiINCj4+IA0KPj4gV2hhdCBJIHRyaWVkIHRvIGlsbHVzdHJhdGUgaW4g dGhlIGZpcnN0IHNldCBvZiB1c2UgY2FzZXMgKHRoYW5rcyB0bw0KPj4gQ2Fyc3RlbiB1cGxvYWRl ZCB0bw0KPj4gDQo+PiBodHRwczovL2dpdGh1Yi5jb20vY29zZS1zcGVjL3VzZS1jYXNlcy9ibG9i L21hc3Rlci91c2UtY2FzZXMubWQpDQo+PiANCj4+IGlzIHRoYXQgdGhlIGNyeXB0b2dyYXBoaWMg Zm9ybWF0cyBwcm92aWRlZCBieSBKT1NFIG1heSBub3QgYmUNCj4+IHN1ZmZpY2llbnRseSBmbGV4 aWJsZSB0byBhbGxvdyBjZXJ0YWluIG9wdGltaXphdGlvbnMgZGVzaXJhYmxlIGZvcg0KPj4gY29u c3RyYWluZWQgZGV2aWNlcywgZS5nLg0KPj4gDQo+PiAgICogRGV0YWNoZWQgQUFEDQo+PiAgICog U3VwcG9ydCBmb3Igc3BlY2lmeWluZyBtb2RlcyB3aGljaCBhbGxvdyBpbnRlZ3JpdHkgcHJvdGVj dGlvbiBvZg0KPj4gICAgIG90aGVyIGltcGxpY2l0IGRhdGEgKEVBRCkNCj4+ICAgKiBTdXBwb3J0 IGZvciBzeW1tZXRyaWMga2V5IGVuY3J5cHRlZCBhbmQgcHJpdmF0ZSBrZXkgc2lnbmVkIG9iamVj dHMNCj4+ICAgICB3aXRob3V0IGRvdWJsZSB3cmFwcGluZw0KPj4gDQo+PiBDb3VsZCB3ZSBtYWtl IGNsZWFyIHRoYXQgdGhlIHdvcmsgbWF5IGluY2x1ZGUgb3B0aW1pemF0aW9ucyB0byBKT1NFPyBG b3INCj4+IGV4YW1wbGUNCj4+IA0KPj4gTkVXDQo+PiAiYSBzdGFuZGFyZHMtdHJhY2sgc3BlY2lm aWNhdGlvbiBjb3ZlcmluZyB0aGUgc2FtZSBjcnlwdG9ncmFwaGljIGZvcm1hdHMNCj4+IGZyb20g Sk9TRSBhbmQgb3B0aW1pemF0aW9ucyBmb3IgY29uc3RyYWluZWQgZGV2aWNlIHByb2Nlc3Npbmcs IGV4cHJlc3NlZA0KPj4gaW4gQ0JPUiINCj4+IA0KPj4gDQo+PiBCZXN0IHJlZ2FyZHMsDQo+PiBH w7ZyYW4NCj4+IA0KPj4gDQo+PiBGcm9tOiBLZXBlbmcgTGkgPGtlcGVuZy5sa3BAYWxpYmFiYS1p bmMuY29tDQo+PiA8bWFpbHRvOmtlcGVuZy5sa3BAYWxpYmFiYS1pbmMuY29tPj4NCj4+IERhdGU6 IFRodXJzZGF5IDIgQXByaWwgMjAxNSAwNjoxMw0KPj4gVG86IENhcnN0ZW4gQm9ybWFubiA8Y2Fi b0B0emkub3JnIDxtYWlsdG86Y2Fib0B0emkub3JnPj4sIFBhdWwgSG9mZm1hbg0KPj4gPHBhdWwu aG9mZm1hbkB2cG5jLm9yZyA8bWFpbHRvOnBhdWwuaG9mZm1hbkB2cG5jLm9yZz4+DQo+PiBDYzog ImNvc2VAaWV0Zi5vcmcgPG1haWx0bzpjb3NlQGlldGYub3JnPiIgPGNvc2VAaWV0Zi5vcmcNCj4+ IDxtYWlsdG86Y29zZUBpZXRmLm9yZz4+DQo+PiBTdWJqZWN0OiBSZTogW0Nvc2VdIEFyZSB3ZSBm aW5pc2hlZCB3aXRoIHRoZSBjaGFydGVyPw0KPj4gDQo+PiAgICAgPkkgaGF2ZSB0cmllZCB0byBk b2N1bWVudCB0aGUgcHJvZ3Jlc3Mgb2YgdGhlIGRyYWZ0IGNoYXJ0ZXIgYXQNCj4+IA0KPj4gICAg IA0KPj4+aHR0cHM6Ly9naXRodWIuY29tL2Nvc2Utc3BlYy93Zy1jaGFydGVyL2Jsb2IvbWFzdGVy L2RyYWZ0LWNoYXJ0ZXIubWQNCj4+IA0KPj4gICAgIFRoYW5rIHlvdSBDYXJzdGVuLCB2ZXJ5IGhl bHBmdWwuDQo+PiANCj4+ICAgICA+WWVzLCBJIGFsc28gdGhpbmsgaXQgaXMgdGltZSB0byBzdWJt aXQgdGhpcyB0byBLYXRobGVlbi4NCj4+IA0KPj4gICAgIEZpbmUgd2l0aCBtZS4NCj4+IA0KPj4g ICAgIEBLYXJlbiwgTWlrZSwgSmltLCBHb2VyYW4gYW5kIG90aGVycywgd2hhdCBkbyB5b3UgdGhp bms/DQo+PiANCj4+IA0KPj4gDQo+PiANCj4+IA0KPj4gDQo+PiAgICAgVGhhbmtzLg0KPj4gDQo+ PiAgICAgS2luZCBSZWdhcmRzDQo+PiAgICAgS3BlbmcNCj4+IA0KPj4gICAgICAgICANCj4+LS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tDQo+PiAgICAgICAgIOWPkeS7tuS6uu+8mkNhcnN0ZW4gQm9ybWFubjxjYWJvQHR6aS5v cmcgPG1haWx0bzpjYWJvQHR6aS5vcmc+Pg0KPj4gICAgICAgICDml6XjgIDmnJ/vvJoyMDE15bm0 MDTmnIgwMuaXpSAwNTo0MzozMQ0KPj4gICAgICAgICDmlLbku7bkurrvvJpQYXVsIEhvZmZtYW48 cGF1bC5ob2ZmbWFuQHZwbmMub3JnDQo+PiAgICAgICAgIDxtYWlsdG86cGF1bC5ob2ZmbWFuQHZw bmMub3JnPj4NCj4+ICAgICAgICAg5oqE44CA6YCB77yaY29zZUBpZXRmLm9yZyA8bWFpbHRvOumA ge+8mmNvc2VAaWV0Zi5vcmc+PGNvc2VAaWV0Zi5vcmcNCj4+ICAgICAgICAgPG1haWx0bzpjb3Nl QGlldGYub3JnPj4NCj4+ICAgICAgICAg5Li744CA6aKY77yaUmU6IFtDb3NlXSBBcmUgd2UgZmlu aXNoZWQgd2l0aCB0aGUgY2hhcnRlcj8NCj4+IA0KPj4gICAgICAgICBCZWNhdXNlIHRoaW5ncyBh cmUgZ2V0dGluZyBjb25mdXNpbmcgd2l0aCBhbGwgdGhhdCBtYWlsIGJhY2sgYW5kDQo+PiAgICAg ICAgIGZvcnRoLA0KPj4gICAgICAgICBJIGhhdmUgdHJpZWQgdG8gZG9jdW1lbnQgdGhlIHByb2dy ZXNzIG9mIHRoZSBkcmFmdCBjaGFydGVyIGF0DQo+PiANCj4+ICAgICAgICAgDQo+Pmh0dHBzOi8v Z2l0aHViLmNvbS9jb3NlLXNwZWMvd2ctY2hhcnRlci9ibG9iL21hc3Rlci9kcmFmdC1jaGFydGVy Lm1kDQo+PiANCj4+ICAgICAgICAgWWVzLCBJIGFsc28gdGhpbmsgaXQgaXMgdGltZSB0byBzdWJt aXQgdGhpcyB0byBLYXRobGVlbi4NCj4+IA0KPj4gICAgICAgICBPbiBhIHNlcGFyYXRlIG5vdGUs IEkgaGF2ZSBhbHNvIHN0YXJ0ZWQgdG8gY29sbGVjdCB1c2UgY2FzZQ0KPj4gICAgICAgICBpbmZv cm1hdGlvbg0KPj4gICAgICAgICAocmVhZDogcHV0IEfDtnJhbidzIGlucHV0IGludG8gYSBtYXJr ZG93biBmaWxlKS4gRW5qb3kgKGFuZA0KPj4gICAgICAgICBjb250cmlidXRlKSBhdDoNCj4+IA0K Pj4gICAgICAgICBodHRwczovL2dpdGh1Yi5jb20vY29zZS1zcGVjL3VzZS1jYXNlcy9ibG9iL21h c3Rlci91c2UtY2FzZXMubWQNCj4+IA0KPj4gICAgICAgICBHcsO8w59lLCBDYXJzdGVuDQo+PiAN Cj4+ICAgICAgICAgW05vIEFwcmlsIEZvb2wgam9rZXMgd2VyZSBoYXJtZWQgaW4gY29tcG9zaXRp bmcgdGhpcyBtZXNzYWdlLl0NCj4+IA0KPj4gICAgICAgICBfX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fXw0KPj4gICAgICAgICBDb3NlIG1haWxpbmcgbGlzdA0K Pj4gICAgICAgICBDb3NlQGlldGYub3JnIDxtYWlsdG86Q29zZUBpZXRmLm9yZz4NCj4+ICAgICAg ICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlDQo+PiANCj4+IA0K Pj4gDQo+PiBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0K Pj4gQ29zZSBtYWlsaW5nIGxpc3QNCj4+IENvc2VAaWV0Zi5vcmcNCj4+IGh0dHBzOi8vd3d3Lmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vY29zZQ0KPj4gDQo+DQoNCg== From nobody Wed Apr 8 07:33:54 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13FB71B3146 for ; Wed, 8 Apr 2015 07:33:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.347 X-Spam-Level: X-Spam-Status: No, score=-1.347 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_COM=0.553] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yg9fSVZ4euzd for ; Wed, 8 Apr 2015 07:33:50 -0700 (PDT) Received: from proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 514101B3141 for ; Wed, 8 Apr 2015 07:33:39 -0700 (PDT) Received: from [192.168.1.5] (pool-74-105-116-19.nwrknj.fios.verizon.net [74.105.116.19]) (authenticated bits=0) by proper.com (8.15.1/8.14.9) with ESMTPSA id t38EXapr071595 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Wed, 8 Apr 2015 07:33:37 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) X-Authentication-Warning: proper.com: Host pool-74-105-116-19.nwrknj.fios.verizon.net [74.105.116.19] claimed to be [192.168.1.5] From: Paul Hoffman Content-Type: multipart/mixed; boundary="Apple-Mail=_D28A3EC5-0777-4E85-A9DA-442ECFDE22F9" Message-Id: <7D7F3630-A6D9-4140-B81D-13A5235FC12D@vpnc.org> Date: Wed, 8 Apr 2015 10:33:36 -0400 To: cose Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) X-Mailer: Apple Mail (2.2070.6) Archived-At: Subject: [Cose] CBOR+crypto already deployed X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Apr 2015 14:33:52 -0000 --Apple-Mail=_D28A3EC5-0777-4E85-A9DA-442ECFDE22F9 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Greetings again. As part of the "is this work needed" discussion, we = were asked for current systems that could use something like COSE. = Attached please see an already-deployed system that had to roll their = own subset of what we intend to do in COSE. I don't have any more = technical details than what's in this this document, but I have been = told that there are multiple implementers. --Paul Hoffman --Apple-Mail=_D28A3EC5-0777-4E85-A9DA-442ECFDE22F9 Content-Disposition: inline; filename=x2-mobile-ticket-spec-1.pdf Content-Type: application/pdf; x-unix-mode=0644; name="x2-mobile-ticket-spec-1.pdf" Content-Transfer-Encoding: base64 JVBERi0xLjMKJcTl8uXrp/Og0MTGCjQgMCBvYmoKPDwgL0xlbmd0aCA1IDAgUiAvRmlsdGVyIC9G bGF0ZURlY29kZSA+PgpzdHJlYW0KeAGtVltzmzUQfdevWO6fS63ofnmkgQfghYw9wEzbh45xJi12 0iYt/H3OruTLZycupMSZT9JKOto9WunoHV3QO7KO/2O2VGyh2yX9Rtd0dn5naXFHRlufXQyVa9XZ mKQmxkh3C5pabaOyEd20plgDytZa9dbU6RKNsZZWbTTtW67o8glhAWPob7L0RsnK57OPrDw7h+dG G/zlkoOxiQx+07FJnGvuqMW696bscza1tUp2xbgM13OMNeU0Nq+2ZluDCylyDLJGR1E7+xXNwCfc d0Kc+AOC2E0XpCWVbHSB15EyfIZTz+YIX7pboeZrOpvPwSLNL2mgCc3f0A9z2aoHkFKpuoQOxt4h oPmCrCmC28sO7Bvwcxo++3yC+vCFfL+ckKPhK/l+LZZvpP5i2Ot+MZHGk4nCvDbqWxnVxj6V+lTG tN4+oYHrY6SzicKqDaMNaj6ZCb2k+U8tbqO9q8EiOY2OkasOteI5CRPn4CHFPjltgnfUiOGtB8sH dFDjudMxIIINz5xI5j7c7dal5HV1HZcJx1ogPDa+e9Hww5buX5e3QsCdfF/L9+Z6gjPBu6x28R6G Yx0OVUDGtmX7Pj+8mBrsLpgjMO+0D2GMJTnj7wtBIRV7CMPTE7log9XZIM9HPgo1x7g9Eze4zth4 wuEcdLS4gEbIo+gP8JCAm608ij5XnWKMY7B/56bxJ3Br0iYhQ/8PJ8GHdo/k0ridk//53DibdTIl 9Sh6fo+o/qRTE4IOpaOGduf14hF3nkfCpU8DczZobNkjkFg3g4eukbW4lCP0w/qic2+qVW8W3klj AmSjDd8zXInQsjnUWiG+fSgkVPSSXNUmqo0g/7K8XSzfvv/wakW3r7H8dhhfVjJUlhhj4eY7+3Ft 6fsbulAPir2tJnb5pefUWu37Eth/tMcAJJk1ydLsXPGx+oj0eo4CiYTjBj3iOwtTcIdn64NIqIsp RVfUmlIOPkP/ozOp6soay0rK7jokJORRh8ogDvd6RLtg145pUUJLHyOk8LgxQuPDCR+nF9jy3vW8 xX6f2HAOhYR3Uo8TUsPsFNFgn0VMWjGWdijw7zitU0/Dd88gnXgOsNpP8VAafr5pHSuYIw29WDbj nyiiGt63KRCSqQXGXxBfaCmsgsBak2l41aZcdiurDvAEgYaOdw0RDjRAl6bo27hwBTxYPzSA3rlz 84RcRafDlpE9kczHjPTrpD92wMg5+4RlWRdRcIzwCcEgKCXRwMp0oHjbxvQWR7qbiCh4Iq5sNrLb m9DAkZ0otkIle+HAn8SNTt4SdOIFwkXHmaGFbenu8Oagb4EiKSETWwe+2Nj7ulPr/XfMoRi54nRN h0yNMmbMD3uzUbaLfwCH9V+eCmVuZHN0cmVhbQplbmRvYmoKNSAwIG9iagoxMDIzCmVuZG9iagoy IDAgb2JqCjw8IC9UeXBlIC9QYWdlIC9QYXJlbnQgMyAwIFIgL1Jlc291cmNlcyA2IDAgUiAvQ29u dGVudHMgNCAwIFIgL01lZGlhQm94IFswIDAgNTk1IDg0Ml0KPj4KZW5kb2JqCjYgMCBvYmoKPDwg L1Byb2NTZXQgWyAvUERGIC9UZXh0IC9JbWFnZUIgL0ltYWdlQyAvSW1hZ2VJIF0gL0NvbG9yU3Bh Y2UgPDwgL0NzMiA4IDAgUgovQ3MxIDcgMCBSID4+IC9Gb250IDw8IC9UVDMgMTEgMCBSIC9UVDQg MTIgMCBSIC9UVDEgOSAwIFIgPj4gL1hPYmplY3QgPDwgL0ltMQoxMyAwIFIgL0ltMiAxNSAwIFIg Pj4gPj4KZW5kb2JqCjEzIDAgb2JqCjw8IC9MZW5ndGggMTQgMCBSIC9UeXBlIC9YT2JqZWN0IC9T dWJ0eXBlIC9JbWFnZSAvV2lkdGggMTg2IC9IZWlnaHQgNTcgL0ludGVycG9sYXRlCnRydWUgL0Nv bG9yU3BhY2UgOCAwIFIgL0ludGVudCAvUGVyY2VwdHVhbCAvU01hc2sgMTcgMCBSIC9CaXRzUGVy Q29tcG9uZW50CjggL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngB7ZxNy05dFMcfSgbk fYxyY0r5AEr5CGLAhCRkgpSiOwMvMVKGPoSiKAMfwIwiN2Ek78qI4n5+z7OeVqu9zsve6+zrJc91 Bnfr7Guftf977f9Za6+997kXF4uvhYWFubm5v9qv+fn5YqWLizzVrvK/X0o190LtbbG7wjjxlLaV MwT59gm3/vz589WrVzeacd26dadOnXr06FEO1KQOeBp1Urhr1y5+5SrV/Pnz55s3b/Lg8ePH25QH yieCh14kFht+q/b5x7jz8/SrzRr8GmvuzZs3e/bsgRhe85YtWwAQU3vp0qVE4Zo1a3BiXLdv347p 1Ke+f/++d+9eVG3cuHHJkiVJQ/m3PIuGWnjoYH7T4fFSI/QK9Otfe895YOHWf/78CWHwIb6nUOjl y5e9qBorXL9+PVF4+PBhXCXX169fGx/JL/z9+/fbt29R9eDBg5UrVyYN5d/yLBpq4aGD+U2Hxyvf SvTrX3sveGDSOn9L3bu0zoNJT3fv3o3bD/gW8Yc8bhUSOx4/fpzf0/yat27d6nC5FkMi8xTP5jfU W5MO5ofIMbBFAXtg0joGOXfunFbLFyDGpk2bli1bpia9du1a/uO2Ju7IxjXcIFGD2GHr1JVxuQl4 7UWjUCsA+V5IiPSe38MYJ1vAKcB0XJQtsVHGITx8+BCba79irAMYqpjwqB7cIFGD2OFtW6sEl5uA 19YbhVoByOOXEOk9v4cxZrYIMJ1vKFvCEeTTp0/r16+nXxs2bAinQsRBnhUO8xd5RAEoGSkF78cl KcE+dQNQgoRb7/kTDNyOmS0CkkYFCTkIJSIzTIHZqSRHZNNMpAPTFcGDRxIM/B2SUom2/L8dmZ3i ESHme/ORSM3E8ycYuJ0IW5hvkAMuXbr0woUL4BRUsWGS5OjAgQOQjbl0qX2kPmOhlomRNtZuR2an eEQIR9giYInnTzBwOxG24AQkizxx4gTdEVQSAmLJ0ZEjR1Dy5MmTIuNQGSRQV1OhcEAsbdfWZwjE Ao1/h5jFtpIv37hxoxEJhRNhC8g/fvxI+Dh69CiyxRZ7ifBRO3bsePXqVb5NpGaSCrHeUqpheH2f 2VmDxFzuEFQXL160AKw8KbY8e/Zs1apVx44do18WTyxAf/jwAar8+PGj1EpJKiTzqFIlA+uDoSM5 GmdklI6cPXvWjoiVp40t44wFNhUSm0zKGt++fdu+fbsdF5HHaQ3lvDeLApuUfdp8C8DG9jbZVEgM ghNWoxUJv379wrkRXoue0srMz8npdFBUmEhkBNWXL18a2TuFbBlbpLapkAwQTlhHsEhgqW3nzp2X L18uekort7FlIpERVK9fv966dauSVoUpZMsYsoAkFcIasUZFDzZkAoaSbdu2xdbQ2tgyqdGpi4fQ RkfsVZr5dkQiYXIsOdK3tVtIUiFaxPHifruf8r96PbI+D4t85Y6SuqNDQ7JygloWAFnV6Wi68ae6 ePy0udSH97Illhw19t0XMprEO6Gl/MXx4n59ze4Sr0f2/kiKux9Mfq07OiiXVVnmQpwCgjBJc723 dfH4lLx0ftjLltGlA41zfgyLiXrNaCvcvXuXNeTGI3xnzpyxNXvluqNDB/UQApto7Eb1Akgq1MXj z5iV2qdtdc6+7yNKjnwqRKMBtly5coW4w/6FxSxy6btTd3Ss52eDnsWcyUZG1k6xEns9GFmuIt8L eL/y720+ouTIp0IxtkD4+/fvYwSPvDQu12WL9fwc/oEwRaODn6mLh/0dmc6hVq4i9gLe7yp6m8fy lMSpJrfkLMQ43xazXJbIksq9t42rakSB0jk/NuSl86jII3ox+Ao8lagq9fx18bC/Q7wOL0Zpd+yJ haSDelsrOVKHppqtUMVjQ+/Yibu66xtqXu1gKetevHixefNmfVyFUj3CZJYX2OVhpuqJ3V2S7IlL 6wqmUaiVHIlDaztsX8Vjc4wqduKu7trpcLbwAc7atWv9cIyZLcl5mxy21EqOvA29NUo9dhKJYsZs zNEEW0yh72mpHvwwL5cP2aV6hvgWUs59+/bZMZLWbUmjPDA5yj90VLTSjkl17zjmmsSYNoVJuh8b HTvLFYUxPf57mZieWCQi5VyxYoU1SCZbBiZH+Qcai3bxePuY7cgXB7Fpj7DFD66aKDY6nn5Fb4HO Jfw6SQxPjC3Miu/du2cJk8kWZtSsg+GatCNFwtOnT9X+3UJR1AO8aostgkkvqp9VI7SBTa6TJ08u X768NMIKMDRoB0WgpMjyUjnGFnmWHFY/vMrJicDJ2g4JO64pAJVH8n0LbeVEvWSuzpc4sQX2RE8y NNzGRsdaiXNiekbRlufI08AWcPLhVc56i1qPyqyDhRP2/HkLLeZEvWSuzpc4sc27RI/2V4XhbGHl RM8o5jDE1pkStnAaJGctV402xM9r933fVb8VZEmw43siuwvTW1lb94LVYwFYeThb7H6cx9Bd4i0W wzMkEgnCd+/eYZb9+/dza+3jZUYk5ucTU9hJqW8lKen4VtFuM+U4ogSG3lo9Set6GxsdbQLhz2AL 5xI5pW+/J1ITJQJLXjE/b42GbBPepAl/2/EdtN1mypnkJDD01urxAKRkxhYxF+fzIQxzMG7bbFXL YjpA+V+SStPs+DBe9jic3WYqSqAUA0Lb2pe3w4wt1m4ieytJyZAlL98KJUXJkaLS/VOZa2l5eEvC n7hTnYnwJ7GF+XbjoJQWJibS2yFLXo0YipIjhSHH4dgjJjWz20zh7U58CxMe1d8h/BlskT1oiSON 41JU2GauKqmQR8IQtLWYXx44liBIOnaFfOt/BltYG2SFkHVCupNcWMMPUHeJtxIltVIh33RRcuSx ASx2LEGQnD592utsK8G2Hn9RyTTkRH4HQfuLNYq6Q2V91gq1UiEPpig5spBEDh9LECT/Q7bAeW9G KanFluGvleeJlpQmR7azA4Hhe9GQXDAQl2VbEZlqijkmTLNviUXzxErVUyFv51hyNDpgdU9D2f5O A1v8KW5ShnA0T9hSPRWy1hM5lhyNDljdk5a2v9PAFn+Km2w6dsiQriVsGVEqZG0oMn4+abr7dnTA 6p6atj1lK3bie9ADT3Hb7iDbMQrv/ic6c26LkqORAqvLFqbxKJTL7t7m2MTW8W9TbB41fFfRorJs Ce/+W4WZclFyNFJgjGzFL0R4C9Amlz0ZkmkWrTbNbCEpIDXoOCqgvfACx+o4KxU4AJOTHA0B5qE2 ltRlC6th9gVEjp20nGa2DNn9P3jwIDZhRtc4Fh2FOcnREGAdTduf6rKl1ijX0jOKSMQrzHabtWG+ jFPiuO/79+/zH5GaOcnREGCZeGZsyTQU1XALA3f/OegrOxGBfQcA+JdIPXkYWH73qTljS6+5rl69 eufOHaoxNLV2/2P7wh3JURhYb/dthRlbrDUSmXO5fCoCSQ4dOsRPCLFR5tlk9z82uB3JURhY0uXu 2xlbOuwjZ/4hyfnz56lGIIhFEJ5KdljCgaMxOYptZHR0vO2nGVvaLOO/J2qr2VvOiw/lkovPvfno u/fZpEKSHDGzDW9kJJpzbmds8VbSD0N0fPEqvlp+CXFHVanAv5LgH0rkK5GaSXKEywpvZJQ2Tf0Z W7zRJADZw4phtjDTYGpK3FGSqMAaJsb3reeU6EemCDn1a9WZsUUtyewCVnDpB606shRqtSKh7R+M oHkIW8Aj2MLAinqhlWdsUVP4T/4TtvwNHcCNEQplbmRzdHJlYW0KZW5kb2JqCjE0IDAgb2JqCjI3 NzgKZW5kb2JqCjE1IDAgb2JqCjw8IC9MZW5ndGggMTYgMCBSIC9UeXBlIC9YT2JqZWN0IC9TdWJ0 eXBlIC9JbWFnZSAvV2lkdGggMTA5NCAvSGVpZ2h0IDEyMCAvSW50ZXJwb2xhdGUKdHJ1ZSAvQ29s b3JTcGFjZSA4IDAgUiAvU01hc2sgMTkgMCBSIC9CaXRzUGVyQ29tcG9uZW50IDggL0ZpbHRlciAv RmxhdGVEZWNvZGUKPj4Kc3RyZWFtCngB7dAxAQAAAMKg9U9tDB+IQGHAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBv4DAwLKAAEKZW5k c3RyZWFtCmVuZG9iagoxNiAwIG9iagoxNzQxCmVuZG9iagoxNyAwIG9iago8PCAvTGVuZ3RoIDE4 IDAgUiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRoIDE4NiAvSGVpZ2h0IDU3 IC9Db2xvclNwYWNlCi9EZXZpY2VHcmF5IC9JbnRlcnBvbGF0ZSB0cnVlIC9CaXRzUGVyQ29tcG9u ZW50IDggL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBvVp5WBRHFi8YbhDQCB64iyyI msXggZigWc/VaPDIrhzqBsH7Sr5NVOIBBkH9RE0+1ws16/Vt4rmSz4BXQEQR3CWKoKuCGMEDkEuU e5iB3u6uqpmq1zMKH5L+Y7rq1av3fv266levqicqir3Wb1owyArRa1hEVDTTGh0VMYw2ifd3/77j aqlWkK/a+8nb/O2YRgNFh1GRCflqrF+ZdijEzVyp1HPqqk2MR1yM/jo8aMSYIT3MeP1TZ1PZKy1h uS1VMJ2bknqFabySFOdH26zHfbb7wn8f17ZgJE3ljzKOxszyoM3Ku4v/2sMpeZXkSesf3/px2yIf gAWhvuGJaYxHXLxyOenUwSP7tkYunOBlorecWIB9635vDSD2zD1P64S4UP8PL9zRsnvguUbQKFbz o73t9ZbZkp33ymsK/fIDH7sA7L7fk5eiUJYElUnbP3axoXaDzwCloiXdcJvD4v+BpkfjLHHTwN35 NSTarEpTSfpMape/T4wvrWc15bK26k7U73k9n4OvFGp6QXNt5eOjo2iPrusaeAx1Zz7AbX0u1Ok7 SaXKQ91xy59PlfMt+lrGZ0SH2pfuzqGJDXoVtvRw61BWEfkcqGKbDZTrz4V2JV0mpfNWNUWLzaTR ZPFJGeiY4i9PAbuh8aCBrZZ/3oMZi5IPE/vQ26wGV3713QA9I6BWIBeEnDACvUf4C85WiyaupzT6 PGMrObkgbLczlZD4nqsGDWxVWxJuzUO3DkoxMCdIn+aiAz6SUXK9OeaC0HhjBNX+hfUsljOmSLNg 5n3eX1NusNzB93gT0AfVO6H8tBuQwL9UoF6xphMBIt5ag1zQxv0R9+gcW8IbK9ntgkysvuGFQvkm T1Hf1H4bkCur17wt9FiQS0SNUoWVpE3TQ28d8tLF2L6V33nWkCBobg9GFgP/zQuFh6MlPLbB6UCu rJbE9GWQz3hCOFypiCV15/+gU28VckEbKw9bMbxRgF6qIxzN1z/mPRFi6fPT6wY57tL8YLoOilnP ON6OgVr5HCeq3zrkwkkP8lYnAnppyBrbKxO4wMRiPtUoH7L6G3WT1D7oOttgsFybMKqNyC9PIQNM QS/16/9SCJxgYukdUQHkBqunfa0JFudvSw1qsEJt+Zw2Is8MdSA9fCC93ErkVyFKLB+l8nIWAFPO XtCZWHbLaGbkxoobKRu1crRkLXAk9hX0IvDrKiEWhJbCRb+m+FF+YRVE9yzWGVs2G1lkDC0rP+pO 8kYF8ua6F1VVL6s1rLYg3JhLkSvohVcUCLEgtAZgbE5cONRjzD6YbLzY2wMj7/nFmweL6OtaAMnU IPLml6m7v9t/OL6YB6RHrqQXXpMQi4nNdl5ecWZyFxGiz6q7vLzpPMmkvPfyC7So1pSTCXCIgYkk CzpE3lQY4T1ksO/IDblcDqkfLQhBeuGRkIzFzOUwkE/ExKqKbeSH121C0WPP1vI9hJLTy8J2PASr asUekqdB5Op7f5VfnutGjtP0MxQhSC+8P5KxWPT5gZfvoNugWXe4mAj5Hni0BObwKYQg7OrVxdHj i2zeTsMxF6yvQJ47Q25QDS9ge+hYUWpU0IteU0syFmTR/5heKpUisD+EhsfzS3yeO26Z/YSfW9oK mQBdjvB2Wq73xvpK5CTh9ytge5yiK5HUS0kvOtVSOWMRdSz6AeTRNCscncAhb0nvLdlEaFElP6XV d4NkeYzOOC4U9JHFioxLnSsiV1laDYhl1pGWhk14kOI+r6GX7JFkrbV89wTvcTvZI6HZ5VxyUnei F7YawYkFQX0fv/0o3o7wkIwuZcxnIFU3L99vWfvqLPz42IWB7IUaf7rhHaKj6rqfCvE9a77MqyrX Pby8iPI5jK0cQ9Ha17y+bl4okQcipyUnfnzC6ldFkLgQWEbp5eQgEnJRESK55Cr17rwMbHpu0jUO xpYih/J8Mi+UyKejPmCn3Jj0HoVM7sboJdKKjmaEVvDDVkiWebt3EmCQi2PIDh0iNIb8gRwB5c5C nTsduR9nAy4I2SE0tdA9gEF6aUwbq1NAKITnirzPpYXI5UuObEU/251UuFNrkReOwTPGUMzdj7LI ay6EOekjSaB1jlUsboLwdCFJQWSl4ceY9LylYaezCpmoZmTzZK4tDyUWkRI53hJCefF8nPy9GXlZ JEksqAvpbuWXyD4dLmd6kfDJmvbzGHZSZ80Q21TddoIFtDZhJDULEarvTZWb1gNHRWE4cXkz8prz Y6hx5m4KDQpC0Rb9JlHS9ErXj/SKtdLKZxl6B8Ao1e9xIHJN8a7gkI/cUAToUhTaWuTasvhPFAeS JmZrgEFBuPcVpUT8hA4rcqmOOtVblKn6JfJjRWhMcse64i9ELqiL7xWcnobCqRFybz1ysUPmJJJZ 6txYDQQLjajVmOyma5cKpu/so07z10gzoOuCQj7ZEm4v0899BfIWjbrp+qdoBTVC7m1CXpMZwGFC qFMMR/jYaOmXgPb94kkqcrivtJPx/w9YJoX9rvqZoUAuGc0Jax9yQTj2HjdgVF43SQTYmzqbW2pF rEPPS2d/2iJpHTex38kqy3L2UNQg8huz24v86RaOYJwXPgMopGpLYwx4NXbvHxBHdvUWKdWwCcoA fV5tIcmT3KuDkGtyhrCgxqaBlZBgujSC5lVU22d1ctlNP2ms9E2AGzksp5pvA7nnTyA4YrV6JUno RUcmVpFKBVlSulevRRFN3bVOmt+Oi1+CTiWb6d5WVm0/8gDkuru46FnJKy7Rr0ueQKEgq0EnAQha 1d4ZrNOihU7du0op8vg0sC0TLvqxh8pKVpSMtmmcByHbkfPCgpf98Jzike6agr9RKCKxPGWb2HI1 zCpJJ1PnrWD11DwPZ9IzUa39MRd5wNrRwdrpg3+yvlrUKylyw8SC8TfwmTztghxC4AHTyyPg9bQf uY6ppj/iTr91vGGYWDDylgadmg61VHC7CMfKk/GcwtuIuQ75uJ+5Y4T11JMxYsHYlfQi9nNewmRf sl5zwfJpM6Vr3mSS7bzFmAfwRy5RGLlxYsHIDdGLyZQrMOTa8ry7udJV+jPZKRhEfiu0DSvRTGRq 09nR0ck1DkOhvwS5cWLBigboxcRqcx1IWMSFVY0v7T13HBKDyPPmo+UUALkbz1uCkd2opXPnfJ0C DssIchvjxIJNK+nFPDALeGerhWQhhcibX6UfPLphOFrFKotl48gDkMuG7Bu//Ao6CBvk0FgMgijy MviRoKAXVb+z3FQHhukZF0Te9Gi5S19XW7QO6BtHLu6g4adwsW+LZq2M3DMGnrhGT+K/einoRZnc cliMIVfnhZhZmJsqeP51yN3B8ZTkSPNsrow8+AGfqTakDnZIBvuFS8O5xFKZ3LYO+f1A2SN8F69F zu2gsZu6C2NFO6Z24GxZKF5qabsajKzSvb+Tfco/JnY7OKCKitGYS6dt4tVe5GVrpQ2PrX8K8Jz/ oYn5sLO8UHv3Q9mn/GM96TLfCmsdjfzXUdII6H4IfCavOCR+ybXeqN8qy7ga9vTXQe91HHT5jZHj 83aL0Q+B38vyPxOm5/HkoS1dqiJHNLazALkCA+I/XaRth3jBUWHsjKtt47zx9J+kjNRzEzyhipP/ meC1B+Te2j3dVDIcND6V50wF8A5GfvtTGymGwbl8bDXPF8n4bCY8AIhyQvFpof3GJsXqCVQ7Muba 5DD524zrN8Bp9ffDcGSd4gExqhM8pEe1m3wVdFFWOw55U+nZQDxoFyYAv2UB5Ptxl69A0Fvy/aUZ 7Xr8zV9zOw554ZoB5JzoKjhjqTnnhkOOLPuDrzlC/b/E/y71XGzoiAA8fkcg11bmXT6+NUT3zy81 v3wKRZv1x3GrAR7NkzCE3j9WA8QGqh2BXJ17asVoZiH/P2L0S1oKZW5kc3RyZWFtCmVuZG9iagox OCAwIG9iagoyOTA4CmVuZG9iagoxOSAwIG9iago8PCAvTGVuZ3RoIDIwIDAgUiAvVHlwZSAvWE9i amVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRoIDEwOTQgL0hlaWdodCAxMjAgL0NvbG9yU3BhY2UK L0RldmljZUdyYXkgL0ludGVycG9sYXRlIHRydWUgL0JpdHNQZXJDb21wb25lbnQgOCAvRmlsdGVy IC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAHt0AENAAAAwqD3T20PBxEoDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw8DkwAO4AAQplbmRzdHJl YW0KZW5kb2JqCjIwIDAgb2JqCjU5NQplbmRvYmoKMjEgMCBvYmoKPDwgL0xlbmd0aCAyMiAwIFIg L04gMyAvQWx0ZXJuYXRlIC9EZXZpY2VSR0IgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFt CngBnZZ3VFPZFofPvTe90BIiICX0GnoJINI7SBUEUYlJgFAChoQmdkQFRhQRKVZkVMABR4ciY0UU C4OCYtcJ8hBQxsFRREXl3YxrCe+tNfPemv3HWd/Z57fX2Wfvfde6AFD8ggTCdFgBgDShWBTu68Fc EhPLxPcCGBABDlgBwOFmZgRH+EQC1Py9PZmZqEjGs/buLoBku9ssv1Amc9b/f5EiN0MkBgAKRdU2 PH4mF+UClFOzxRky/wTK9JUpMoYxMhahCaKsIuPEr2z2p+Yru8mYlybkoRpZzhm8NJ6Mu1DemiXh o4wEoVyYJeBno3wHZb1USZoA5fco09P4nEwAMBSZX8znJqFsiTJFFBnuifICAAiUxDm8cg6L+Tlo ngB4pmfkigSJSWKmEdeYaeXoyGb68bNT+WIxK5TDTeGIeEzP9LQMjjAXgK9vlkUBJVltmWiR7a0c 7e1Z1uZo+b/Z3x5+U/09yHr7VfEm7M+eQYyeWd9s7KwvvRYA9iRamx2zvpVVALRtBkDl4axP7yAA 8gUAtN6c8x6GbF6SxOIMJwuL7OxscwGfay4r6Df7n4Jvyr+GOfeZy+77VjumFz+BI0kVM2VF5aan pktEzMwMDpfPZP33EP/jwDlpzcnDLJyfwBfxhehVUeiUCYSJaLuFPIFYkC5kCoR/1eF/GDYnBxl+ nWsUaHVfAH2FOVC4SQfIbz0AQyMDJG4/egJ961sQMQrIvrxorZGvc48yev7n+h8LXIpu4UxBIlPm 9gyPZHIloiwZo9+EbMECEpAHdKAKNIEuMAIsYA0cgDNwA94gAISASBADlgMuSAJpQASyQT7YAApB MdgBdoNqcADUgXrQBE6CNnAGXARXwA1wCwyAR0AKhsFLMAHegWkIgvAQFaJBqpAWpA+ZQtYQG1oI eUNBUDgUA8VDiZAQkkD50CaoGCqDqqFDUD30I3Qaughdg/qgB9AgNAb9AX2EEZgC02EN2AC2gNmw OxwIR8LL4ER4FZwHF8Db4Uq4Fj4Ot8IX4RvwACyFX8KTCEDICAPRRlgIG/FEQpBYJAERIWuRIqQC qUWakA6kG7mNSJFx5AMGh6FhmBgWxhnjh1mM4WJWYdZiSjDVmGOYVkwX5jZmEDOB+YKlYtWxplgn rD92CTYRm40txFZgj2BbsJexA9hh7DscDsfAGeIccH64GFwybjWuBLcP14y7gOvDDeEm8Xi8Kt4U 74IPwXPwYnwhvgp/HH8e348fxr8nkAlaBGuCDyGWICRsJFQQGgjnCP2EEcI0UYGoT3QihhB5xFxi KbGO2EG8SRwmTpMUSYYkF1IkKZm0gVRJaiJdJj0mvSGTyTpkR3IYWUBeT64knyBfJQ+SP1CUKCYU T0ocRULZTjlKuUB5QHlDpVINqG7UWKqYup1aT71EfUp9L0eTM5fzl+PJrZOrkWuV65d7JU+U15d3 l18unydfIX9K/qb8uAJRwUDBU4GjsFahRuG0wj2FSUWaopViiGKaYolig+I1xVElvJKBkrcST6lA 6bDSJaUhGkLTpXnSuLRNtDraZdowHUc3pPvTk+nF9B/ovfQJZSVlW+Uo5RzlGuWzylIGwjBg+DNS GaWMk4y7jI/zNOa5z+PP2zavaV7/vCmV+SpuKnyVIpVmlQGVj6pMVW/VFNWdqm2qT9QwaiZqYWrZ avvVLquNz6fPd57PnV80/+T8h+qwuol6uPpq9cPqPeqTGpoavhoZGlUalzTGNRmabprJmuWa5zTH tGhaC7UEWuVa57VeMJWZ7sxUZiWzizmhra7tpy3RPqTdqz2tY6izWGejTrPOE12SLls3Qbdct1N3 Qk9LL1gvX69R76E+UZ+tn6S/R79bf8rA0CDaYItBm8GooYqhv2GeYaPhYyOqkavRKqNaozvGOGO2 cYrxPuNbJrCJnUmSSY3JTVPY1N5UYLrPtM8Ma+ZoJjSrNbvHorDcWVmsRtagOcM8yHyjeZv5Kws9 i1iLnRbdFl8s7SxTLessH1kpWQVYbbTqsPrD2sSaa11jfceGauNjs86m3ea1rakt33a/7X07ml2w 3Ra7TrvP9g72Ivsm+zEHPYd4h70O99h0dii7hH3VEevo4bjO8YzjByd7J7HTSaffnVnOKc4NzqML DBfwF9QtGHLRceG4HHKRLmQujF94cKHUVduV41rr+sxN143ndsRtxN3YPdn9uPsrD0sPkUeLx5Sn k+cazwteiJevV5FXr7eS92Lvau+nPjo+iT6NPhO+dr6rfS/4Yf0C/Xb63fPX8Of61/tPBDgErAno CqQERgRWBz4LMgkSBXUEw8EBwbuCHy/SXyRc1BYCQvxDdoU8CTUMXRX6cxguLDSsJux5uFV4fnh3 BC1iRURDxLtIj8jSyEeLjRZLFndGyUfFRdVHTUV7RZdFS5dYLFmz5EaMWowgpj0WHxsVeyR2cqn3 0t1Lh+Ps4grj7i4zXJaz7NpyteWpy8+ukF/BWXEqHhsfHd8Q/4kTwqnlTK70X7l35QTXk7uH+5Ln xivnjfFd+GX8kQSXhLKE0USXxF2JY0muSRVJ4wJPQbXgdbJf8oHkqZSQlKMpM6nRqc1phLT4tNNC JWGKsCtdMz0nvS/DNKMwQ7rKadXuVROiQNGRTChzWWa7mI7+TPVIjCSbJYNZC7Nqst5nR2WfylHM Eeb05JrkbssdyfPJ+341ZjV3dWe+dv6G/ME17msOrYXWrlzbuU53XcG64fW+649tIG1I2fDLRsuN ZRvfbore1FGgUbC+YGiz7+bGQrlCUeG9Lc5bDmzFbBVs7d1ms61q25ciXtH1YsviiuJPJdyS699Z fVf53cz2hO29pfal+3fgdgh33N3puvNYmWJZXtnQruBdreXM8qLyt7tX7L5WYVtxYA9pj2SPtDKo sr1Kr2pH1afqpOqBGo+a5r3qe7ftndrH29e/321/0wGNA8UHPh4UHLx/yPdQa61BbcVh3OGsw8/r ouq6v2d/X39E7Ujxkc9HhUelx8KPddU71Nc3qDeUNsKNksax43HHb/3g9UN7E6vpUDOjufgEOCE5 8eLH+B/vngw82XmKfarpJ/2f9rbQWopaodbc1om2pDZpe0x73+mA050dzh0tP5v/fPSM9pmas8pn S8+RzhWcmzmfd37yQsaF8YuJF4c6V3Q+urTk0p2usK7ey4GXr17xuXKp2737/FWXq2euOV07fZ19 ve2G/Y3WHruell/sfmnpte9tvelws/2W462OvgV95/pd+y/e9rp95Y7/nRsDiwb67i6+e/9e3D3p fd790QepD14/zHo4/Wj9Y+zjoicKTyqeqj+t/dX412apvfTsoNdgz7OIZ4+GuEMv/5X5r0/DBc+p zytGtEbqR61Hz4z5jN16sfTF8MuMl9Pjhb8p/rb3ldGrn353+71nYsnE8GvR65k/St6ovjn61vZt 52To5NN3ae+mp4req74/9oH9oftj9MeR6exP+E+Vn40/d3wJ/PJ4Jm1m5t/3hPP7CmVuZHN0cmVh bQplbmRvYmoKMjIgMCBvYmoKMjYxMgplbmRvYmoKOCAwIG9iagpbIC9JQ0NCYXNlZCAyMSAwIFIg XQplbmRvYmoKMjMgMCBvYmoKPDwgL0xlbmd0aCAyNCAwIFIgL04gMyAvQWx0ZXJuYXRlIC9EZXZp Y2VSR0IgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBhVXfb9tUFD6Jb1KkFj8gWEeH isWvVVNbuRsarcYGSZOl7UoWpenYKiTkOjeJqRsH2+m2qk97gTcG/AFA2QMPSDwhDQZie9n2wLRJ U4cqqklIe+jEDyEm7QVV4bt2YidTxFz1+ss53znnO+de20Q9X2m1mhlViJarrp3PJJWTpxaUnk2K 0rPUSwPUq+lOLZHLzRIuwRX3zuvhHYoIy+2R7v5O9iO/eovc0YkiT8BuFR19GfgMUczUa7ZLFL8H +/hptwbc8xzw0zYEAqsCl32cEnjRxyc9TiE/CY7QKusVrQi8Bjy82GYvt2FfAxjIk+FVbhu6ImaR s62SYXLP4S+Pcbcx/w8um3X07F2DWPucpbljuA+J3iv2VL6JP9e19BzwS7Bfr7lJYX8F+I/60nwC eB9R9KmSfXTe50dfX60U3gbeBXvRcKcLTftqdTF7HBix0fUl65jIIzjXdWcSs6QXgO9W+LTYY+iR qMhTaeBh4MFKfaqZX5pxVuaE3cuzWpnMAiOPZL+nzeSAB4A/tK28qAXN0jo3M6IW8ktXa26uqUHa rppZUQv9Mpk7Xo/IKW27lcKUH8sOunahGcsWSsbR6SZ/rWZ6ZxHa2AW7nhfakJ/d0ux0Bhh52D+8 Oi/mBhzbXdRSYrajwEfoREQjThYtYtWpSjukUJ4ylMS9RjY8JTLIhIXDy2ExIk/SEmzdeTmP48eE jLIXvS2iUaU7x69wv8mxWD9T2QH8H2Kz7DAbZxOksDfYm+wIS8E6wQ4FCnJtOhUq030o9fO8T3VU FjpOUPL8QH0oiFHO2e8a+s2P/oaasEsr9CNP0DE0W+0TIAcTaHU30j6na2s/7A48yga7+M7tvmtr dPxx843di23HNrBuxrbC+NivsS38bVICO2B6ipahyvB2wgl4Ix09XAHTJQ3rb+BZ0NpS2rGjper5 gdAjJsE/yD7M0rnh0Kr+ov6pbqhfqBfU3ztqhBk7piR9Kn0r/Sh9J30v/UyKdFm6Iv0kXZW+kS4F ObvvvZ8l2HuvX2ET3YpdaNVrnzUnU07Ke+QX5ZT8vPyyPBuwFLlfHpOn5L3w7An2zQz9Hb0YdAqz ak21ey3xBBg0DyUGnQbXxlTFhKt0Flnbn5OmUjbIxtj0I6d2XJzllop4Op6KJ0iJ74tPxMfiMwK3 nrz4XvgmsKYD9f6TEzA6OuBtLEwlyDPinTpxVkX0CnSb0M1dfgbfDqJJq3bWNsoVV9mvqq8pCXzK uDJd1UeHFc00Fc/lKDZ3uL3Ci6MkvoMijuhB3vu+RXbdDG3uW0SH/8I761ZoW6gTfe0Q9b8a2obw TnzmM6KLB/W6veLno0jkBpFTOrDf+x3pS+LddLfReID3Vc8nRDsfNxr/rjcaO18i/xbRZfM/WQBx eAplbmRzdHJlYW0KZW5kb2JqCjI0IDAgb2JqCjEwNDcKZW5kb2JqCjcgMCBvYmoKWyAvSUNDQmFz ZWQgMjMgMCBSIF0KZW5kb2JqCjI2IDAgb2JqCjw8IC9MZW5ndGggMjcgMCBSIC9GaWx0ZXIgL0Zs YXRlRGVjb2RlID4+CnN0cmVhbQp4Aa1YyW7cRhC98yvqODyozV5JHm0lBydIEEMDOECcw2hEW3Y0 i0dSjOSP8pd51dXkkBJJj2xZBpfqYu31qns+0xv6TNrwf19qqnRFh4be0pZenN8aWt9SEf9u1+Ar lHHyzg9loaqiKDyVZVClydYberUET6FtoOWanI+86bbc0Ivl0pOm5Xv6gxa/7HJytLjMydLiY04V LW7itckzUCg+L3ur68j/V7w2kX6XU2g5L3LytNhHuqwyf5Ykv8+pbLWInFWUIxJEu9izzelPWv5E Py5jZIYem8IpG+zQ4Rk32Yvlp3FZ3jjlikIPhXmJdroNYjYvrFS6rsuvCwuSgDlhx7wGl5I65qP+ uqSqihXiyFYKlVK0NXKiOC5NF4xynsNUBxU4Xhvi0BWu9FlHu+loMQI18930vkWBJtp1rO2j1HYl aOXr0tSka1XCVJ21bfBbc1g3+7v71Q0dPsIi4bQmFjdzj+hBK7x4vbH0ww5V9Cb7HHuFrEf1IAoU lLF1XVfoOjTO0xvuCeE00xXIrusS+p8grlfQk8BRe+OzL6iOT4whms4vBDPo4hzhOwNA4F9Zla7Q Ia48IHkfVAVUCaWytN5kWNZVXTsN7FHa+8LUFlUQTBV8gX5RtS106Stk/ALhfgJuFSiptsTZLMgA bgWxKt0GPQjcenl5m5OhBaBD0+IQn1fAFLzc5dk0dmgLuAwGfkWtcIzRclpXdlKLhtKoKsli5AWM jyBvBuRN7QoPltfRWqAeMFGcQVqnLa+dCjbUgaKyHswD+keUMcwflV3tJDb3m5zOgNDNtkPtkLF2 xG3fCA8sAp4Dq3GV50YYYB5IK7ldrURCehUOhB4cyAZGyn2bDf7oXmhNErG9kodmK0y7K1G0/SD0 aGW2SAZdr7ayLEqSC32bxNidKOmJoMXukj/NeKjBjKS/mzcgiQGYZ4hAIwt9yULZicxLfD9TWx1i h4Ai6NfDeIqG9XAvapsUmhQQUby/vxQHhCo2y5IYeMgzhHy1FRn7FAlZE75m+3dbb12KdtsH5YDP uQCz8bHrLSrQaHTL0L1x72IBZu0+Q9HrO8K0P4NyuIJgQ9cZbMa8ZxqlV2wd+BV7B77BUeaB1zpb vOdbt5RMHZ/q1jpVO//A1MG8ywRRThifNgIzWvqh33rE8aFYtHnqjzZN3BnzaTp2BPfSoCPgvKyO d4QkelA4rH06o8eCdaUKPfzyGNPA9ClY6bK6QUaBJjAKGAY8wzMnCbiMDRzDzBygASWVrSySxNpP 2OKcTQ9RrQP2ImEoi2dJGEXiITgeuNo4L3K76r1lvDPmNdQsvEqMCCoKkSsXK1yxuCHBoMF7sHHZ YvOc5MmnQA6sA6iOXx64+3TRMYoIEf5u8RKLKIB/RZasJf3rPGP57/K58JrgVeUKzItecgctQKkF JJ1zg84EbCHrUA5k8aCzj2fPow74gsKQw0UdQ4NgCQWedhTECjyoGlyFfhkPIPC4oyAxnRy0v8Qe FAQYckTCP5EuXwk/S8s4WeDsy0dE8ZVY0tcikpFCyMdAQWHLqly37bEI34pMpBTPYrPYIM+cXNSC MHXnK7CKuSwubi6mJ/6xPQFn1VfmyaOwXzV9wBfcSPMPNk1r1VorHCXRSlHrCX2JKE0dr7T2ytka 2HmqMARvWlilXO3dUBiX4QgQt8WNfpOT7l52BwkekX0eM2nY7rZoT7zvV/sGbDPBqSsVNDdVPyUP u6o32Bdq2h9TaBUCd9WksGFW51q0KxZfYcPegvlgY5uEpcP/acIw+7rK+15hrsbB4bkscw7Ba3vi ey1DhSrsrEcOA98QM+vwk8JzWWaezSyDMWCeyyyNPng2Wf7BdlJm9kxOsa06B4Zhku6B97ihZ2Uy 4PohUq7R4EBfoAlIvwqzkD5GBE94ON/rOCpabUn3DZwx66SOYkQs21Jj7HI27rNK+ZUu3oZdn7yF H/K7mow4uIzf6ni3hQ0EfMayzDKZazKD/gOsYeKYuFzEq45XH6/C9HsMmPAI5edIkcmFacUa4g0n svgdTkvY3ImiZAFmjWyCoE5Mk1ko0zExyXesI+PtDRL3Kl6Bkd0IFXpfaztcJzzOkiGY2zBKHBBW MVbo8ix0sVUoskeAAdO7ZMubH8s/E/VT5/oJGw4bGJFNzbAOpnVhlG/r4BuFGY19AdLzdElv/gd5 KpZNCmVuZHN0cmVhbQplbmRvYmoKMjcgMCBvYmoKMTYzNgplbmRvYmoKMjUgMCBvYmoKPDwgL1R5 cGUgL1BhZ2UgL1BhcmVudCAzIDAgUiAvUmVzb3VyY2VzIDI4IDAgUiAvQ29udGVudHMgMjYgMCBS IC9NZWRpYUJveApbMCAwIDU5NSA4NDJdID4+CmVuZG9iagoyOCAwIG9iago8PCAvUHJvY1NldCBb IC9QREYgL1RleHQgL0ltYWdlQiAvSW1hZ2VDIC9JbWFnZUkgXSAvQ29sb3JTcGFjZSA8PCAvQ3My IDggMCBSCi9DczEgNyAwIFIgPj4gL0ZvbnQgPDwgL1RUNiAzMCAwIFIgL1RUNSAyOSAwIFIgL1RU MSA5IDAgUiA+PiAvWE9iamVjdCA8PCAvSW0zCjMxIDAgUiA+PiA+PgplbmRvYmoKMzEgMCBvYmoK PDwgL0xlbmd0aCAzMiAwIFIgL1R5cGUgL1hPYmplY3QgL1N1YnR5cGUgL0ltYWdlIC9XaWR0aCAy MjIgL0hlaWdodCA3MSAvSW50ZXJwb2xhdGUKdHJ1ZSAvQ29sb3JTcGFjZSA4IDAgUiAvSW50ZW50 IC9QZXJjZXB0dWFsIC9TTWFzayAzMyAwIFIgL0JpdHNQZXJDb21wb25lbnQKOCAvRmlsdGVyIC9G bGF0ZURlY29kZSA+PgpzdHJlYW0KeAHt1F1q4zAAhdGtlO6j+19WKjAY419FupHycIZ56DTWlTnz kZ+/3x9/CYwSeFX/kSWBkQLVYb5GvpW7CBSByjhZEZgi8NjnlLdyKYFF4KZPRATmClzFOfet3E6g CJzGSYbANwgc4/yGt/IOBIrALk4mBL5EQJlf8h/hNY4C2ziPn/oNgVkCypwl7957AWXe+/h0loAy Z8m791FgjfPxSQ8QGCmgzJHa7qoXUGa9lSdHCihzpLa76gWUWW/lyZECyhyp7a56AWXWW3lypIAy R2q7q1JgzbL8UHnEYwQGCChzALIrGgSU2YDmyAABZQ5AdsW7Atssy8/vHvc8gQ8JKPNDsGZ7BHZZ +s7swXQ2JXDMUpkpWzvNAqdZKrPZ08GIwFWWyozwGmkTuMlSmW2kTgUFrvoMXmGKQJvAaZxtU04R yAoc48zuWyPQLLCLs3nHQQJxgW2c8XGDBHoE1jh7RpwlEBdQZpzUYEpgiTO1ZodASkCZKUk7WQFl Zj2tBQVKnME1UwRSAspMSdrJCigz62ktJaDMlKSdrIAys57WUgLKTEnayQooM+tpLSWgzJSknayA MrOe1lICykxJ2skKKDPraS0loMyUpJ2sgDKzntZSAspMSdoJCpQslRn0NJUSUGZK0k5QYMnSd2aQ 1FREQJkRRiNZgTVL35lZWGs9Atssldkj6WxWQJlZT2v9Arsml3/2z1og0CNwmmX5Zc+mswQ6Ba6y VGYnrOPNAjdNLh81LztIoEHgMUgPECBAgECDwD+z4Q8jCmVuZHN0cmVhbQplbmRvYmoKMzIgMCBv YmoKNTgyCmVuZG9iagozMyAwIG9iago8PCAvTGVuZ3RoIDM0IDAgUiAvVHlwZSAvWE9iamVjdCAv U3VidHlwZSAvSW1hZ2UgL1dpZHRoIDIyMiAvSGVpZ2h0IDcxIC9Db2xvclNwYWNlCi9EZXZpY2VH cmF5IC9JbnRlcnBvbGF0ZSB0cnVlIC9CaXRzUGVyQ29tcG9uZW50IDggL0ZpbHRlciAvRmxhdGVE ZWNvZGUgPj4Kc3RyZWFtCngB7VvdYbM6DGWEjMAIGcEjZARGyAhskBE8QkbwCBmBERiBz8bWj60D gTbNfbk81LakIx1ZNhjadt1nrv7uw1Ku4O/9ca9XQQY/nAAeCBHANVa4O7AIrjLpx4kyo3a6XyqT jcHl3iJfwxZwQERY9hhvVxPEEx3d9tps1prSn7RB74FFFPktmgy+PJDzecTAEYfR0tAsml4rqT9y /K4bSKjbQQwu20Hnu5ih3g3llsJMDplvB9LU6mXltar0ZzV5E9Cr0l1fQM+ioBy1hC+ezWzn0VrH 8bHsliX0Au6t62UZWO/21cPW9BfYfGVPTeeyOy3Ly87L0eyWWeh3HvCX4jx3tQPQ1qKt9N4kt4D0 Dmenq9PXdPKIst9V4j3ZuMPpvU0OpHciu8XxSvENnzQMRYt0XFgHgFY09xxJOshvC32K+do7k93E CxvWx60OL2hbDauq63qkbCnG8avYq2YAZlZ0V4jYPZPdMjLWW8eLX7XIIZcuABgUSaQSEk6ahTZV R2QsqEjktt8jmz4xmYBmSIp4DUC3IepXgPzwG3atmPZHRp7KTt32UbT0xEEJUOkOzv9KOC8Ezg7O ZpvZOnaMiZ1z2cmuReFSaQMIOZSAp2L1BZQbD9xiUVW8UxGXWUKieGPnQEgqHVy0wD6L0kLg67Jp ZhVXRp2t3dIzFBVvgs/5W8HcLJMdCc9JQt93DFuVXtPnaqceeTAR5I2Xim957I91DfaPYLUftb5O 7ruF6hDnExWvjpNHLk1+uiak3ZbdMyr9PBqqCXh6ZY4SEhbPkuXSQYpTfLN2I3zGqxU2WLc7EsVx 3DEDKoU8OKOO5sMBdyUDeITkaekOziP5V0CUXVH3T7KXVi2XY0ElFIjkKfPLJCGop/YP3nZzCLDo C3nFK5MZ2fS4EslDT0R2WgHY7OToAw8BKUS+oP/npevw62xPOHhX4ewsfcfA1PEwrBayq657aPna 98oZqAJrnUFGQfEcgM4x0s4oA6PNq8Uybu3Y7Ft7JwDLYxQlOuOwFj4oy90b6WT7nMtOlWKN7dts mrG2/3l2iOMS1+V6NRHTcCyqN/vO1EZmJTswBk0sx3FQJH3YmhqkXkEwO/JscMsifhGSZzy0UJow cv1m57GjZG8jTewGnU+frLXIyIu0LcU4lrAIWbQ3s+s8ueS2B85F5NgudkCkkfVBQNQTpSeRbgmq ZaX/PrsAUOoOTr53iydRkrkDHm/FzwB0rujwW9VCWoCUuGBG18oGgCIu5Di1PbAjkdOG3YXEqi0W bx7mQSG4S75ZIJ0fZefJYdV68dr0JEgGTI0+/tqgeEJTTLpoEgwwCogE0Elg5DhprUcVjjyndrt4 TpvFvnmc0yce6OIqaMvl49ltJLd9YJEZLDyv7TSPRYHYazTSL5R86zSOBXu0dhN5My2c+RjDGcuG JX0edYCg+j6F1lFEkHcAPp/d8lJLhTzn1oMAegLZukmDblITwFeTGYDBh7PTv0dgvmsHlV/uGNq2 okkzDOHDJqzK1HVdNc4D8gyfsZtPhCokh9/6StmzBXeqD+1lLVQyolqVDtzhyM59MLtqMzBlOPcx vGcL6agTPamfxFS3kbW6glZV/WhXjfPgZ7VDd4puq3SL+jooTAciQ+ceRwLdCr0VGbSu6n82O+Ik dNHxsRCg6ihj+RI/Fqk5yyawqyDfWplguW2XDhevG+bEfyr872nQXu20hNaAx3EauC8dKf0oQu4l beBR3ekLLWoQnhAty4y5pnK53Mdz02cl/wzk0LTuw9k1jDE9YtHSLHzvM82uJ0vdystnsQ9aW/U/ nd1cIpZmr3RgHRfU5ZI75myWqNu9HaqM9MD9sHaP9PdGaMvTCWPlt1+6jZ1XUowNpD2KvvSg2Zqk +2F22XFv86vWzX7ptouXvQ+6DNSfSkqq+avsOvteSVsmRX9Xuv3iYfSg0irdP8vOfiTWG+9d6faL 96By6fZlk8MLeAW5X63MrrMbX8Ljyddc94rX14ZlFPmaK0DLJIzWQCfLC02/aNG3HgmOsG2wp5g3 vdCarmP+48kgLLBlMv9tdnb5MMkjpePnNqOoow7Ua1r2B1n+3cocdoIeKR18i0207e3KRPrD7K4u Xd6ElFf+Y6XbKt6BqfnD7ALIK4soKOKHZLJ/CBlb+M7ahGRzyGWd/XjmaUBpKBG3+ECPCUq3bFS6 +YJgjmlK55lcvbnYOiBD0gLdL7KjmyCalrFD9woJRozgV3dDk62/mN09B0WlS2/jkyGJdh6yMsD/ IruYQbpQ6XyUD4ak3gcrFIMtrhhvHLZJa3G/2Hdl28HSXWNEqHBEJbfQxrJkULA6uXUDnWwFVIOk hR6jpyHH3ILhuki4Fe0BIyDKkeLPAJQLaYFOwm3RhB75ewicfbcG7EE4+tCQGTlkAWTE/3vZ5Qzg rpsKGw+IymxGI/vOCBBR9PXsHjkiLN1Q2MDSuKKMzYBzsVKGBKuT3IFO5nLc0EKPvgREoHmXjASE MwNICP8vrcxnPPikCxIcV1X6AYvjSG1fOmBqUUiI72RHlYO7jv86JnKaAF8qnn0bBsZZ9M3s5htF g6Xj1KPVHRF2GR6QDsso3t/XTv/7Htp11a9EYPq5eHDV4uSWb2X3qv5ncwZs6GydGXlgkZ95E9Js yL6Q3RweH/63WSb9f+f7M/APaRSG7AplbmRzdHJlYW0KZW5kb2JqCjM0IDAgb2JqCjIwMDEKZW5k b2JqCjM2IDAgb2JqCjw8IC9MZW5ndGggMzcgMCBSIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0 cmVhbQp4Ab1caY8ctxH93r+Cm3MGiNrNq48c3tgrJ7EBA3F2gAA5PtgbOVYi+ZDkOPn3ecWbs002 Z3Z3lGBm3d3zWCSrHquKxf6Ofca+Y1zQ//XE2cxn9uYF+zP7mr1381awu7dsMP97e4fnhl4o+9/0 B5ein9k0jf2EB193Hx6Y0ua2+zq8Zu8dDppxdviS7dieHf7FPjqYFnMkuQz9LIFiwbq71wxgQz9w ObLDXQ32r2z36Td7ptjuiz2TbPdyz2a2e2U+X+w7XEG7uHJI7t6Z5/9tPl+Y6+/2bPRP3u6ZZrtv zXV7l57vHPKXezb5VizO5wbHItjWrTxf79nf2eGT9R5roXo1DDzv8ZnDp8XU82WZcjBtJ859Nc+F XkQvm8DG7YmdMK/DMGg2jcrN6lof+TbSPBskxeTcA3EQp8GRlpMwehgwTMvYjzT4r40OKzWpLlx7 Fa6Z4VzouVfJb6Hu7tpXxkwiqr8z8l4vk0Snln6CqLzzFvXHF2/uXnz77vvPX7E3LyGRe1IYo6Gn V9qBLbz38WvJnn8Dw/ms+45pPvWLYFL3Ep0QbOwF5muBBZMd+qa2jNegQGlOGU9ZtmDS50FO4ylw CSEUSWjRQnc/QD3+RXzE2c2t5R92e4PxewaKwL9pntTAR3Pn6JIWS0/aN4Gg2NANmPJRzCPUAPQy TZqrUWN6bzG2m3wXlXmA/nh9JhFGQSw1WgncV2ZwYKkbsAJnu69BFILtXrjvt5YkulVa5FL1UnIJ raAGqQugxUoz4LquxLFB+nHi0BwHtkYSs7PGqwrY2M+zgCltgvHBoHW7q7LywLbJpPQ2mmS8w1qC 4fzbbk/TjxHle1qX2E5cQT+HHiuBom8wvzaP4I+RLuDRcGEyd0S3m2skzUfVCzHLBrk6u8b9vNxJ Pup+VnLOwYwC47d3LJuJzmoPumuWTph39V+5VTHOWGegn3ai4spKtHbcKjux1aKuSSjbMs5tffWt uiGsdhQ3y31Vk+y1hCPz0L6Wm9BcY6WdvEa44cymznfHTV1FI4iCNfytTNwa1i8rggnZj9tIzhpZ zRojUWCpnfw6uyaXJ4ofleXCmuiIYgusRbRIFFtoznJAFFfB6H9FLADXztOEZwVLIN0OU2UZJXKL f/TXnkl+45jEk058NPz6fb3vgAPaEVfXdL/sBQrO+4kLTJzpzxonHzFBRZ0El/1CK3oG9tQEI/nY qxnRgG31QgSj4CwNSrX11VtkE8GUVTnafqPykUKVVuNg+61Yv61gWdvfQmoxsGj7AivpnMwmPE4K xLiN7+yXXS6c8w5TE70JnWAbZZWfFXxiDpwxbWGNXVrkJUceawK0L0WDznO+FOWNApNPBs/Bfr4x wv/DXHm57xAzIoLDXcR3sGUb39l40D4D9xWRYIj78DfiQTyJuBKfMa7sKALFXXsFkWn4+zVYJTxq G7NwzitcDx2FHHp0F+tG2ufVmWmIq4TkmGha0VI0Yg0lt0Zw12/8KzuQEq3JBW6obdYx31azzoI3 WoUWlsxODUsvluVo7LaadUv5ZrNFf0gtcy+GB3W23CeiklEruD1mBt1QZvrgFhHeoA9wSBDIzUey VtGwwJbGW1tqSgXLTN0LZoOERrdkEHAuE40x1NRlIjrKj5buqEm0UZNpoeLcnUZNKRpRE0y3RKVR 4FswAXwVkBICmu9N6Ah6AR2923e4bq/YuyAWXLckY4NMJKnwTCAo/P2VQQhPItn1KZFPR9yHwAi5 M3wie4UbgaEsKK4ckrtWCHAc7lo4KygiTzz5IUABZKUDo+FvkCU+A2h5ZRBw3xcFxUvHa3VWG9RY TBpgAxaGFO3JDV0iYpwVInTbbKKkNTZ9OK1p2U9IdTxmb51Rd5SaybO1kXDM2K4Rjre/bKbWkxyR cJrR4GBvEE4KlRGOFywSThEq+EJ61r3y2RdSoYovZKcy+kIIIMoaH3yhrIVM3hMIMvhCGZohHFrJ 1wkyEs7BWj/sG+YK+8Yn7Buf3r6JG8i+kTVZtW/cxg/KveWj6AWiHZbKV5WKGKw00ZSbmQckHAMa 7T88uYELsjQul9is26mouksPNnCpBPl83DWb+OU1XsHs0cbLA/wWOIdajPIpelue2sAvdmpdZ89d CQK/tKMhMVBSO+vQZFCZvd7nlyJU5JeREvrJnFb4xU5p5BdVs7jIL2kL58ob+SVFI35pirWep3GU /RvmjSgrjbXANZZGEBb90/gYNiqz+2r27v+8u4PfWhwbOlFU5mMtex00ZRwmwoQDZD0WIKehlkW2 kVsqIaRCnGYjQzxfpjWhidZGmKYZlrXV0JN4thoWgrvALylaoLU6XW4aelEXI78czW2V1h6RX1Z7 u55u4G1sWrFhHzDZGXs0fkmHrspW2/ySQp1rr5FfNHI559GLrml+pJekgXOljeySgAW9L2hCYMOP kTF5hjDHfcHwn1keeaY7iqGeUSxzi2/Y9EsQC92FVdMXjJ5+CW5xkQtddD/J/Zkud4M5QoxBL1gc SeI1u/eLwX27xzbufbBFDPArErCm7nfb63vR7AU5UfDJbKuJijypVyGJ46RUJ/W1zej7stUrcqEk EgdmhB+tr5VQJNBMMqVVXqjs3kYvphVsqkhmsjKppm1YbUOMJGUP1z4U7pwSI4EOy8trJJm0hUxe v7zGmK6o8JFlUrTgw1SXVzhdz0EI8B/+Y3yJ1HOw160/A5pB1GS9GuvDWH8j9S6sZ2J9m5xk7vHC hKIVAZIxAj9wreLTTPlyhGApWhPNPCSMEFjOxkFr12yiJTWeebDFSz1if5VPF+6tUkgXYFvXjvFj dbZMbDFcSid1g2iKFhKJphkNNRQb4VIKlZmuXyEbTDe6M9iDHxP+PiFaQtlHC9MkDZwrbSSaBIx4 RjXkfj89mKwvki3ktoBOBpQPmf/4Zt8hHQw+wSc8lsW4L/BewEX0kL0BQsElkEu5rxwWiVJPLPyJ eOeqDMfUIPEJjkrAnp5UNLZyJpQWmlYfy8xsCFVWaKnmnlM52UX7quTUD6hDeuyulvsZSSWZ03MV JHJKK1ilysdlYBKkc200MAptzw1nbnZXC8iC85K1cK68gVMyNCKVth0lJE7gmIAjQlIXLgkY5r/7 zvIMgqNbeCa4TTvToBj3ZR8DoeASQCq0MpG3girUTMJz1SZ4Kxna0xOL91ZssxdjFu+tXLa33lt5 zM7WaEX0wzJNTkEwtubUwFpVyf2geWUjSvRqQvh6b8gqPoHH5UNFTBMgZajnGm0kmXHsufdb1tB8 Nd2Py3KFajpsMdbBWnaoQzXdJlqspov1buJauTLbX7jvD0AaphI3FsDFx1ELlZfr+l+H0jrkmmzZ HG0ymTpeScA4eeEfdVW7bIcWyyQkUAivR/g2tlvOfrMRdxGjL6+FbCUHNhTVZWDEQSv1s0ew51ey hqK6bGYKrTof2ndms9ViMB+K6lr66lt1UVqt1fLo6gEVpjMZ8JY++95VpgqhXq9QUZRhQZEwVaZ2 LdMALz4WO9oiu4F7XVIB63BkqGtQLRYXyUCdseUje+PYt5XX4VBL3FQ6V97ocaRoGNK2LZ8/2ZTH DzVrRXzeixFbjJnAZ7sMQNMTyt0zNNKBWqbBKcHm9knRclDbZYtgbbOXchnEgjNA84zV9Gh6nra3 Em6tWFB8e9neUnk/tsBBFg/ubcXYsXhYByVt5Fx11ECzDkqKRurY4qDA0Dc4KUU918YjJ6Gu9NRt IkdJombhMQhKGjhX2shICRgREirQt4vqPviLyd8eTNjzkfkE8SPeQeYdu8noBrK7z90V2puGK4K7 lsYQ/2Bn6M48g31hPIkdZ3zW87dwsuQC8lGJvOeqE58XZG2EzsCentyQNJ44DvOYLlyK2yRFYZfu qqIYjE4QPVJXKwYceIb0wg1qphd+V8PHK5VaqEgzCViBZY5h+TbLJKCZ2XqoU5K3EqkWNVd8ch8F /aQ8diEK2gRr8clCFLSJFqOg41NASAKZk0UhyLkKwdF1CFow0IiOcBDS/hGPKdbPCPGZjlDhlGqr fLVjJzBjJE2xZ52Bkao8ZTgj6Hg/bYnYVpPc/UqrR555LbCge+VdThwvwNFHUG9LX32rDeGMabW4 Miv4ZMs4nt3XstqHYCkbxcwifS+cQ9sQLGVYrcESVsi6Y5KhrknYYpjBMZHm5KzTmjU0zxk/LcsV OWMLrEW0yBlbaJEzfJbEW3/Ie8APMVkT4dMdMWlyj1fCj0KyxOdGPLwFsZW6Jnni2xPmLCKmGA4N HqrkTwZEZNhssMOerPeD7OonhrFDriEPGqgnaATOe0+oqN6c2IaoX+CA/6K0F/dS3IJXn2i8d2Bl kMrHqh/OLXjnwzANj9lXZzFrVf4+N5PpwZr5ZbNUKvK3uZkMa4tu3HjdbB57zlDXJOSDw7qqMIR/ VYnEbrWvZFkDmx3WzypY/tTzFlaLYJFsNgSTVjBYYfA5UFqTv/jA04T/vhbVDSwc1Oylwqs1TEcq FJzpwHppK1e0Hs94cwn140KGKlCMsUx4UUU6EwV/x6+ebn43PY/iIkibxKj+uGxPlebIXOjH6WlZ taMXUtLGoyx4ixOSQJVI4Qj15ncVEc3uTTrhmRmfFbYM8O/9mcM1NO+CVHobXZAtsNNckC206III 7wu87/8IV7wbERwM/4RbyddpnUPnxIgXt8iiEN6ogktaTKJylIUOAmWhGdhT26rQusdxDrwHyXTh QrQkNcpI1HzhvqoR7zziKDJ+eF8r1hf8hnRAM5u5pxNFJvV7OpnAJYo4gr35fUVISxFbErYYYghT qMoxHOOp9Bfr83XYKg1/eHvzhviheYkICi68Q/8HFyaAYawTf11z4jlObi04hMo2pWrpIy3dSPgv 22iRbHyHvNzXV6Gv3ivheyqp34gW8LqdnuvZt72WOvIT7xbuCgcT2IxwwXUkDW7u++1HS84D/AHo mcLKnM3FBrE5vtxstEinagCd8qWtq0cjuNlq2WAHotMGtfMOY63SyzNJNm4Vy6plvjyTZFitTPLx FpNkqGsStlhZZBK19GNSj9a4uYHtYWxZwO7KsT1yiXIccchepE2cKzByuRJv0oNppmhQ7LYqV2yi gN++MJ+ugPUVsgeoY8WLO1HB6ipfD+kD2H7BHRxPxic2XvD5zpTBumdtyaxD8fhUMuvu35odG/sT 7OdguFDvhtsW1l63V+zd6t6OgNu60G5B1v0sie/squXFG/B84EvByczQiCWedOtaYiXk2N5xzSaM WGvWMe3mjnmRJxTtf0wo0rlsb6Gt/TIj9WSbPb23FSLwOzoZ9LE2dHghbos2hC2dDI20YWXn2Ec0 fquII6avJ2gz1Mz8PdYpmzoCVRc4iW8P/6yhRa+gyfPJyr/YznoQyfvZ8CK3MsWR56MQS7BNqVo4 2SYtsE2xiRb7GGKokKQNf4ij2ra4CUTZWXptHJKn3nMKzwaXL2aGvVcY2sq3pLrk/Zjh19WVAaf8 UVGowQPtkxn9OJvBXt3Zsn1yYaTLDB2dpJR4KxNe9Ip1pNi2d1BCGOkV/N5JSslhJRNOTGVgZDlb m03d7ny/h/hsRN7HtfqIYWR5gyukYrKeZvZ3b9iK7mLwj9Ip2PKP3DJw88km36SoaxK2JEKDf8RH vCrZ883q63CdYJU9c8Fx9JWdg/TZ/wGxL9OpCmVuZHN0cmVhbQplbmRvYmoKMzcgMCBvYmoKNDI0 MAplbmRvYmoKMzUgMCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1BhcmVudCAzIDAgUiAvUmVzb3VyY2Vz IDM4IDAgUiAvQ29udGVudHMgMzYgMCBSIC9NZWRpYUJveApbMCAwIDU5NSA4NDJdID4+CmVuZG9i agozOCAwIG9iago8PCAvUHJvY1NldCBbIC9QREYgL1RleHQgL0ltYWdlQiAvSW1hZ2VDIC9JbWFn ZUkgXSAvQ29sb3JTcGFjZSA8PCAvQ3MyIDggMCBSCi9DczEgNyAwIFIgPj4gL0ZvbnQgPDwgL1RU NiAzMCAwIFIgL1RUOCA0MCAwIFIgL1RUMTAgNDIgMCBSIC9UVDMgMTEgMCBSIC9UVDUKMjkgMCBS IC9UVDEgOSAwIFIgL1RUMTEgNDMgMCBSID4+IC9YT2JqZWN0IDw8IC9JbTMgMzEgMCBSID4+ID4+ CmVuZG9iago0NSAwIG9iago8PCAvTGVuZ3RoIDQ2IDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+ PgpzdHJlYW0KeAGdmllvG8kRx9/nUzT0RAJRe+7jUbZ3EQd2vI4YLBZxHiRKtuRIlKzDC3/7/VVX zUVySCrrxQz7qq7619k9+u4+ue8uSeX/okpcndTu4dL97lbu1ZvH1C0fXRz+PS6ZF/s017b8qGJf x3FcuKoqfZVGy1v3esGcOMlKt1i6vAhz7bW4da8Wi8IlbvHF/cfNPtzNXe5m53OXudn13NVudhOe l/OIHhd+LwajyzD/f+F5Gfqf5q5sZ57OXeFm96FfR2V+ZJS/zF3V7qJ0zgIdpaC7Kz+rufuvW/zD /bIIyIwlTuPcZ2U2FniHmCLF4tt2WkWa+zyOkzGxQtG21wiz3cQqnzRNtZ9YqQrYRazXa5mbUrfJ mOynVNfBQnKX1R5LiVsbOZCcmGZepj4vBKam9KXgdesEujiviqjru+n6AgKNzLsZrMVAre8q2HZP tR0pE180Vdq4pPEVrCZR6wa/XT4sL++fns9u3MM1HOnMLA3GLbO37IMrvHp3m7m3d1jRp+h78BWX FVgPKLjSp1nTNDVeh+O83OFeAGc+bYEielKx/wvIDQx6MnA0RVpEf2Id3ySGJO7NqcYMd/oG+I4J EPxX1VUeJ2UYWesqitLXRJWy8plb3kYMJ3XT5AmxxydFEadNhhWUaV0WMf7imyxOqqJG46fA/YK4 FbNRbSZeKi/2GntesgPEBseLSzxvH7ED/CWBRorkQ1ICVwin2xjMu3C6IOglbvYQnrdzd6xRlefq 7iZE1LuvYeznrgBHDPF5VrUsgL6EdNoSlvQVKTQHxBGTpqxTUDZSkh1INevZwYgaRGSHxVVgVoXC 6IjzxO3UzYjSiEmU5qnRm0jOb2I4EX41j/jdQUFG0LW6iiyg+YKnrl3bZVfkJ8DmpVNhDoiKi2mT SZPMY7qEgYBMnzfjPNtAxincPTLX4HCMYCRCeSHrsYpznEQi7Q4ZssYXWWPbmkImQnFEkp693iFD jutULR4D5VIO7FXu8+qCVA/Xl6oddEfjMeix0zV6PNNZNvfCzaNecbb0g6Jwd640RmRRwbFaBstA jd+AJvbxFCjpVgh5jF29/8ibesSaOvZ5FqoE69MtVmf4GBPxI0gpT++t76twNa2A1iFIsES+vlzK D3CIj+dh12/sGgetwwIyYQFYcuNmn+ehYPpbaAy5IPmMi5gkr3ydJIUr1/nYoruR+UU45tWlin95 pt6kfiSdO+RuEl9ndd7vGBFVJixPysNd1UnS5L5uWKzsD7yn3IRxxL5UnQ/iL0AH82II2njQ3mh2 sUuKNMt8jgp7KSQ2bpWCILRHijQrfV6W9ZiYxPoD/OeJcCZO7wh98sZzRCb3RDiTtsUEJ86RIKY4 At2v59ExMdIPrWOjqM+SxMeFBKd160g3g9NG2D6FM5xJ8g8MwQcNtmNXWOU3nJKRqNL5raPYMD04 JHN0dDd7NbEzqQamZGeObbFzg71r8kYAToAJniMvQ+1aYNSMIb3Ygkw1qJdgx9izdop8ZLEWaKOK K8jCnfyjc99Urdp7400K6lOKmfXYuWHAt7AAI/AKYOwo+mXHhOBPhGAEWFWIHf6oZUZZVD7P+zgU U1at778B4VIAYU974feoT7CijwDJ1oIGDbFNXrColiDpyebBL32wKxPEWLt5f9Jop3dDRlBXKb0r 1NGv1RHb0PYw/jC1nrptpTw/6qo7pUQ8YN/xFkP2dOTRyBmhpQqsa+V3NFuOxNZxY8XEIEJ3Oz2K PSHHUkyQ90CQaGYMtgJvciNWqJ4la8ewU+tJZ2A0Cv7ITGPbZirhFoUwfYiCCcL4wJCitVRihpTn vhkmtC1BbMOQV2e36lOWybFoGL4/00RtnWcrsr4UBzDL88q6LwCWpi7RoYd5BKzaf/6sfdq6WymJ O6RjkTZ0F01lmslRbSfoRs5Mm9qnJS5from6T1JJmW24Fp3AAJuKagRfWmJRvNoYFECAuRDPpcQz b2DKT4VLohSd3r17cggIJetZywbWO4xYZhDQuoAWry5jGDNPXYeYChOMiLXck82zbuPvEWJq0h2A G2mlLX2yVG6O+tJnC34bIceKK9O9as76VIGq50szlTvTvpZm53vOO1QmhRQTQ8b+z5wulUkTCoRD iQHn1PVQGpOH0zo7nDPcepqYnV4OZQwnmaSVEAPiNBkzJue6QwqEE8IzidMKBBTHtR+M06W/saxQ Dkh2w+roR8UY4vU86mbiR9OGlnKrUeecx6c1OjYwCQiTslYN90Yp6XoI3KGyvibwI4BKjBkiGMEf wdiRJy7P6FBI/X02j+gnWDGHOLYGhK5VUHS+zhzS6UdDyoWarlJqypX2YICMKujDOUPe6Be4o603 ornEw6Y5xIEIVVIUn8yjKbjzIvVZVlLcDeHe6o1GjJJ2mljjyyo7xIGMmN9BjFtILgdfICbRZ5Kz svBVXXCQGIo5cTPS5k09UpBNfiWiE8g1w6EnDeo80fq0W+RN5YuKC37d84ALjONpt2iDOZefRXul K+wfXMNighSKMGxnWRp4htSwGJtUtEgnL8RjCNPmaSNYLA0tdfU5IvOjjRZSnutcoyW5kj7dmpDT k/wtVGSL0HXSVmeyvRz/kzia6QQtvHXPGyVmNElJ6tWySOkYU8qB7kaaZBb5np1HABiDJqByoJvZ iMIwWkM8FGlsAsGFGClXAAKoETLmcO6eOchqVteowm+iE2UrS3bYTsLtfckVXhkU3mfvQ5J3W/w4 EGkrUrb9glKlwLBe100DsVCZ3GuFYk2b9oSgdkSbZre1zrjiI4EyS9nKJeoLrgfQL+jKblpU0kCJ 0vjaFTvoGpVInw0J7qoSrecYESl56cgHGqIfLESEkOM4COgYQbyn96B9Uhr2NB4kZ8py9GqabzfD GIYMDrY0EoIilKRsIwnZy3jr5LLNQi0H3tMAZykVQFFwkTiAWL77HXSAHB1rBEDkRl7Yw5h5sjU8 CscM4M6t0RAc0Aq4ESmYpktEhrVp3UloSBQPknm23TPI07Izko1tmW7UdYQgIOCJ8gD7RFtEeXgR zeBQxrNYDdRZNQ2h2WhBxciHpK4cjps6Wj+BtwkA+yB9kgB+GFsAxd4/2QdQxgdngMKyuPZX+2J8 fNjWNcavNsRS4FqJYmKs/GET0AshogcDctYQ22GRTGjPXvr7p98lfZonUjQ4Ff+AXASLU8m0RbIq fDm4TiE47gVyyzcGTjQoly/QSIUeeQqwdGE5ig6CEjL5jRfRD2cgdRQAEP9m+N+64lSxWRzNIzox WtXFntlK759K4iMvMTklLyRCpO5I/Eun/aI7fdLZtv27sOF4xlud35Iz6+jIGcd/11m2uZF7H2Re IzAUKZo29jxtuLHl4rQQJfXWvu3AgLVH/JlA/7njVNgBbmEHvIUdWrBDQ9ihAWZ4n2DWz8NNaYA9 0gGcZsBpFlsrKjOP5fT+yDe3dTManx7wxyMBmQ1EDez2RlvCLycWsQlu5+1lU4RVFrwlDPXrRBha R0iDaOJ6ePdKXxf60qEjI3ZCJ/v9oS/WSRKw2C4xjeV3+nrW102g3NOahiOlWsxSDlFFAGTgV1tS /kaAOreTukaRFREBNu2zwb3e0/AFJnTakf0MtlWRzLy41JYe9IcB6bw94htlRJ6WIc/52h4XrQxD pW6NDWOz+zwzrf4KdvivaRUNwGeqePJVWEC2V6MtirAdTPHt2lclpb8Ca0xNn3CimZ8OfUVc+Drl D3YOIRY+6MH+VBzt/uij4ETX3tBsZeyAjxsJn2jcXkIuWWfq01+Ek0+ECmVuZHN0cmVhbQplbmRv YmoKNDYgMCBvYmoKMjgyNgplbmRvYmoKNDQgMCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1BhcmVudCAz IDAgUiAvUmVzb3VyY2VzIDQ3IDAgUiAvQ29udGVudHMgNDUgMCBSIC9NZWRpYUJveApbMCAwIDU5 NSA4NDJdID4+CmVuZG9iago0NyAwIG9iago8PCAvUHJvY1NldCBbIC9QREYgL1RleHQgL0ltYWdl QiAvSW1hZ2VDIC9JbWFnZUkgXSAvQ29sb3JTcGFjZSA8PCAvQ3MyIDggMCBSCi9DczEgNyAwIFIg Pj4gL0ZvbnQgPDwgL1RUNSAyOSAwIFIgL1RUMSA5IDAgUiAvVFQ2IDMwIDAgUiAvVFQ0IDEyIDAg UiA+PiAvWE9iamVjdAo8PCAvSW0zIDMxIDAgUiA+PiA+PgplbmRvYmoKNDkgMCBvYmoKPDwgL0xl bmd0aCA1MCAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBzZ1tjxw3csffz6do 3KtdwJrr55nJO9k+4y6AL75ogyDIBcGutLJkS7traWUnHyjf5z5SfsUqssluNqdX9gWxjJntp2Kx Hv5VLJI9P1V/qX6qmlb+Hw5NdWyO1Yfb6l+ru+r3X31sq5cfq9r9+/iS++p92+ux/NF07f5YHQ7j /sCN73dfXlX94C7b19X76vdXV0PVVFevq4vqsrr6ofrDlWsxpdSd6v2xg4oS2718X0Gs3tdNN1ZX L0tk/726+Pb+suqri5vLqqsu3l5Wx+rinfu8vdxxhnY5cxVdfenu/9F93rrzj5fV6O98cVkN1cWD O69X5f6dUX59WR18K0rn2tFRCtq68nN3Wf1HdfWP+R4Pbb/v67pJe/yZ4hvaw745nQ4psUEVZ1+b dTGc2n23idh4XrEH9FrX9VAdxt60mutjc57S8ego9VV33EOxbp9GTqxcmBnqGjGdxv0own/vbLjv D/0unHsXzjlxnuS+d9GzmLude+PcZKLqr4zNfjgdOjp12h9gtdl5j/ru9sPL24fHT9fvqg9v4cju bJ3TyN2ZdvCF3//pfVd9fY/j/GX3UzU0h/2prbph39GJthr3Lfo64cHih76pc87rqGA0T5HnsO7B Ys91dxifQi4ChFUQOg3tsPsF8/hB8Kipvnqh+FO9+Ar5PQMi+O9wPPR1M7ors1NDe9qL9R0AqKre 1ah8bI8jZgC8HA5D048D6n2BbM/i3WTMNfbj7XnUdu0rdbN2XWCHEy5bw9fhHLENztFAo6WbMSkR DfoAPXMcgt4CyoaerUNPPsEvkBT0BAFBT86gpHUUa0Za6U7WsIhYYbtetrtTyUztXtEW6AyGNtUF WMwnaMsnSKrtcvWb+w/u3PvL6hmHQK27YbfOUjsO+8NwIC45YRhPjeibf/5bmZGwtzsTmky045FY d5x62PDsPDBZF01fiPbqTdQtBEmI+ZaOIFsiBB0hYvGJHIgoyJxPlUB1ueNWERCnEBDiQEB8BgGt 9785dft67KrA8FpY3mJW4GTTnBojFoXlTO8rkyldUsP6RjuJAumwKJCvoECNtnxqJz96nXPmVSQ0 Pa/3fO/OE1WRmQpC7tyJhfKUxl9tUs8QwblTm9fzP7szSi1uRe+/vtxxv/79yd2pben9xH1ayXRJ H1DSypZo3aULQXupcoXQkpzSMTlpO94+dgv7mHqs3GWNhGaCXM1gdgK0ae7lDRx0A0InFx4W9p1o eId9v0a4z5AZ3D6jMeG9EREiWzmGNY5ev0Yqcmg32xGylZOP1XeXu2f070qPn/PFEXw/A4j2lZ1G pHK3PVthRlMDodm3ToH2aGUNGG+P1aP9VWEXETt2Fv2JfSrLjv9daE1PeobT3tjjRlOuQcV6Klxy dEMHgzSwBGSiFB//W29A8+v+3NcD8b05VaNTUOSDZFVzBEo0JOB+r3amtqUuQttw89LJymBXLyA4 WPvCXdYHbj7pFT2iV6jkWk+9udVD4X23muTWPaBJUqK8m3GVEsDHy93aGGGoSXv6rt9O7L5ArCFd GQG22OpLjAHJa4x5BxoO+76fHKgp6AegUYx8UCneB2RCNa9uVd7X+vXmWu/xyHCnClRtoQ0JFXrq HhNdN6S27fbj2NLnmNGkz2kAEyhc63PbMuhrjoSZmJikHH23sMqULFb51nyJBgQ+zLnNlX7h5Mnh sFzD2uTrLQAnvvQjvsSX+aBdFI/npFEzbEBozzRiivPZtfTkgzpmetKIWQve6ZULO2nwhqcIa0b6 o3L2liglDdqD5Scc29YJ671jJkCPtZT2zEin11J+TVo4gPBid6a8QHPdVrxJ9/3+ZDFhh3KbbgPk /IIxoj+6xSeq1RF4dEbG5PASziMx/qb/fKI8PgFJtQA+9TwwFs4gIiKEUNhJ17ifaM0nnQaftHVk xBmlTE95Vq8qNXTMncqh/o17c0/8rD4V9yLmWe8Ul8TGAP/AtLJlF/QJ5UUpaf/0b6WhHOk92mba Y+HLyOmFUObgggoqZiwmrV2eyhw763LczVhEKgptRSmrYGOanl1Rot6/96o5b07UiygbhRRDzWmX QNAigv0xFqL2SM/gfkhARaZnSOCCGcSG950LbFcuxXzu/tanVA7eAISampkYmHNBqC1lqxJQCnq/ nlGzNFXFDQDRkI6b0Qd+iZUey3iuN2+qQnRnPGbajG1L28+44qR7lzjDmLas8op7+60at4rtSye2 oGoe0/P6GInXrIdKSDuofKnZxgYbJHLecCiNDL7gI0FmAwy9pinQGUYEAv+LL0IEvefc+YTsNeKV xwSNBeKNCj2Rs+hHklP6/mxEipjXMoGd0s0SzrZdTRFnIEGa9bAZqDExZj2b4L2HNQ2IfKJKl3/L l3N2OYLNcANmIafoVlM72XDlJ3cdT+dvkQ+AllynhR2X0CWf1gKqA4KNGrLiCq4Q2g6ElrfvBNC5 nShPQ0rU6GAhXFBGtAFjR+/SjuoF+dxJqho1qRS1t/agmIDmABC2VpSAMRbu28l9djs3nrdIktE6 hrKgrzNw9h4bgpmkZ8bM4oobQwpjKgCgeuqG3mx9wiA1InLddDej6fqXSDuRDekndq0SnqQgwp0r dz3Zb/sj9UfGKXPRFLw15MGfLKvFimBEij44mGCpyopzdIhPRkzrumkpV/TN0bPwtALxfFjcnk77 nvqg9WcadxW6A7hoWj/HD4xagAPbe8ZEgqFJZSDzunLn6aLhC3qSuy1ts5OIRKDIZ30Og5wzya0i KdGWDUONsNGx5uzo0RrzY+jQmEsVK9H+hJOOD2s55UMMOKCrkdwH5WTKDENL2aEZgbrYPgqxXxz2 6odddr5oYCzTHqh4PoHY6vgtlHWHQ7vvoxoftXXwd9AZL/uy+m4w3JZOI4gmdD0zu3U87dv6CLdJ AwnddIikXc9PHFlqnpCSkNgcFswa0ank+tX9/YdXbvAFy9ePt6/KUHfs98Nx7I3tyAMybVneZm1d PL59+ePto9NgvhsyGj11g5dJTNwF90Q6KXEGkLdqpreWbd2KEdMlse0CQFFyPxxbmeeM9FxoCDWs Go1XQ49uN9Q1vipQohRB0faIoU20ZLBVAJpgftcP1ze4IhCARPjUvwNWIhN0wHk9c68Hiq6316J+ EpjrO/eHf/hO77X6jhUobvWkPn99d6+HURGINqSQR7C6Ul0854sjNDJjQlkEvzifqT9pE+91NH0N 3ofH9cE7vUHp3luIsIqJnoxl8GlWIBEDWZ2T7ZnAaw5dl2giQajtbtpjbG17wr7PazWlinlfqzKt j9rhG2B8nXXmsWSqEduW5n5d5POm3RFNj5NjluwRJWnge3Ub60AN7fpGu3O7d7Uq7Y5ZiVmkhv1r NQrV39KerfIYdI0TXHzSR94oUbMQNU4z4PsH+6PkKELqC+coSshKb9qXxPaTgqo2Dqi6dOWVNL+7 uPN8mlcpN8paxuq1QQE0XMgBGinPLU4odT1lwHgyt+Vo3Q687pJhdj3szo4jXt2qDkyELjTAgB1O bWYie0MJsG4EV5NW22UhMBncywTCcxIWQEI/MXDNdfkkzeGT1lm5wdiNgTgskOMyDl3vfNtIVnAC SVs/ObtxsLiv/gW40jGsDO2SDI0hd/XoBnvhAnqJb7PU6PERFUkcgm8+Gc9Ibma536OjudMckO6k 6ZRv8J+VjT/wRW+/0qN/0q9v+ZIkT793F3bTn/Xq1/plJ+2omieixqA1J+miGzLshGs5yRF9Wxdx z0IdxExOkOg6E6oWoCY2PYWou+8nm8qkTN6Om2bfPhWDMr4k7Yov+clCqTFjU2/UvBMMsWq7oYx5 uIUZ+7onBol3an8MwvTgjT1nd17/4KzWAEJb0xunwEYSr66HQCBq2K94oKe+g1u84Yov1JQEVrJP ntHbnmv8LTzDpYJqm4FFMYyehs8Rus0UaRdj7KYuDtN63ik9CC4WfpIIaA/ub1R4t6oDxLae2g14 fs+AwHjfkJDB1trcxtAcWV/zFGLn88T+dNwP8ezqaR0dQ3L3UsZxCM9nty7KCG6oQPFVu4IkpwPK BHIDQmSo6UkYJdwfs5cx5JyEkUXKCn/rdtI2LKNqqVlpnzbkGrS3JmtGhEzqUTXYTIx+rRM77WUh VELrTCYdMpcNqCHAi5zNAf+NI7xSjfWWIIVI1bdvfUKthx4T5MiVdPAAtelNVs/dcRpg0EXJNTjS G+XBzyXat7qXJS+GagF11tVryNsfx339myJvDFWGaJgj1na/hWE6O2lI5wAtnsTCMQ1JMMfOX6iG rvhSh4DIn/WShFSavgIyw6VPSskQPNWdHwbFSZKqXGX/O+dtSuA/5cAbxl8v3EFKzZI9Pamf03Q6 TP7ucgcBpRYT09bv9XH9vDd7uMXJ1pU6UF4+HhnZJGpNhjZJbua4X3MzbyGHjtr1E8cHN8ECJ+sl 7xDO85UeFgAzjmLNZu+a24DsJTDuGBwdRhAiJnYGIQIcf7p7ZVpSzVhuoEac5At+yt4GNEHDotW/ XjqD+CIK3NdKTy3JLEW9N76QnhHv9wabDDQsHUkHYt+HQUnSiGOaIOGwKxnGEFpmw5jJ+xwI+mxO OcS311U4kFh0rLlMpV42vtXgHIp1PeuAP69W15Y8JdTqYvpJjShNbAX/zznKjFNW2M/LikZzqtS9 ePxgQ9vHT6zoVQXh/gpWEmlcVOEPgTy+7hlt8KVLoIAG/rbHZBkhRxZxXFGOwy+xZrutJI6OVcbH jnUeThzm7Ik40trcFnFgDvFkXm4lZQpGDBTnKykjqGNhAmMRt7zTbUpoj/uWsnDVu3ai2eYwRZPd TsBySFkKSluynYAwj0D5FOER5UVUfAFVnBN1IMKr+AbEy4CNgO4mYmTCDEeWu+zmL53XMxbkClkb nwA2nznCEjNkfu5baWEnY17DjajXs0V87Ug5leXMaa/nPrZjN8aGZZ/tyIC+65YirDNZa+oOiM+n nPRSDPMjEqSfHxGHxrT1TnSs2HXoHFvIvA+yo2RDH7qaiOey1JjYGajHT9QEphFZgdu23deD5MGz FjKD4YU9+3G5FQeIIVFDM4vu+ob6PmWNxKK3yYXtAql7dCzpqceBEDh3j3NsS73mxkKVxiKFFAyc WPRgGSZq5kijwj8kvZoxwuaXfYdPJdLb1qm1JazdSZYb+gFJ4zCh1y9bm9yphi/+pwDaMrzpWfV0 npoRQwCrEYBdESw5b1JiYoX0fK0mN0WBwgpwif8qeeBB/AxL4hOn4xNo4RNocWAUm9ZMCexA2B/6 ft7ZzCauDS4nK8/Z7HNMO1tS6d8KkmP69dQch+3ECmpo6xZ0nHcTNZyzeQkHs9Jf9RjiqczlgvhR JfDRLy6W4TQaItuVEaMGWhmDc84uFfP1lt1OwxGXT43wM/Wim0O6Y00wdLsBfrVrlEk9xS8CpbI2 Jp/4E9giErcvA1CpXSLbDzaee8Ehtq+akoII1yQeTeJ/nJBXvMeex4YCDi+gk1EIm2xIflSSstUl a9x+DnSy7iUp6lXdodtKaTLtDCVmaVrZDuYk6fffbFgghV27Kf9M1xcA23ZMLx1G7DG0Mu96nFsg 9zVEbDuEKOO5idJKUF4kFnd30yA5aGnJ6sgiwxMVpamBhNWUrJjRKqukQQcynomQ2Oim9c15k8MA MbXI8DSjjPoyj/xY3NCzqHxiIelLmlYkufeMko3Zu1EipB9Eb4OBhck1IUKepTZDgtzkUYiQMTEx icJaYzzMcvWvsV4qPaxfAhIwO6ZwyEr4W8/jOJwBDZC7XkUz3A8W8AkS86nLM9EKf5OHacjk7xgL llaGDE4tk/apRGOA9oa2hIMMNVlN1hDsYiEkqp5TmyBhSY2VNvVJtmLG1MR2l6jgyaqiMtEuAsRl Qwxs+37AQ1xDPvGKhTCzUELgqreRmA7sW0toiR1kuE6pwrXNPmTxYeYJ7TjuhwODm0Q6iaxT8hFE LFyBWYJ9vSAmos7AREJWsunZXgFLDMigz8HELIvrmLBxY51EdqUuFazHIwXbxn+rbKFMaoYRucnA gBGBkhgGlf7zKbSMoYEAkmRmkuk2TibTqiQC2CKrqUECLiNzuYAGOJCsQfMFDsARPtPx2Uz8DXM7 bpdkN9QlH/BAUBB+WzesQBGP2kZqSjGWzinZikSvbZRKTIF1Xc8u0IlUHkwSA8+lzlKrVmk+YyrW 7P1B8zL7EuGHXM3CqF9+bRmcbdWzvOWdm1+03NqIcCkKqjN1dS3DaXb8S3d8JIwhy0PiBnV5XwFw /TYZGssO7jzVALSFitaM4cZXtDrXjpnYSjteB8Y9KPN/MIhkl1AtRhvzl4WfLTI9sc1vbFBPTE0M LlN88r0NUp0Vn/BrcgExNJcA2Dp2OfiIwXNJb5DFHZwTi+JLr9gBQzeAwQ5e6u2gAVuPxOS4W4yS L+yW+17GVO3Uj/awPmvt6rWPHyUZxBXsFsaExkDBfFlYRtWJ+DWzOhcnz6w+92WnIp518gKQo1RA Yg1k9Xkeu7vTIDkCiVJMTIx3S1y/v7N5FVtBgXhBZre4AgXQC8301qXVDwxcBlLeRFrzvsRjF5pY S1F6Fjodm56hxUz0TWat08Lhv7ty0Pa8hE1u1aBUUOIGEm5TslFusggAPct3D0+htS/0/MhQaOwZ ZW5lrCBGj5oUZZJFRJmSWNpbATNcVT1VHXVd8xNqunYm1CzY3QSahSrDTrKBs27a8GqX9iAp/byb BVuZ2n8BQJCwEAAZIwIxfIJifIIijFCADf6GD7wB7IikMM926+O+G6SQFLORWFSKodEgcpntkmf2 pEYJrS2uLMnu7Z2WiwFUSb4Yd4se9Uvdmq5xxc1rRR2aBUOmb9kOL0PimVr/n1RUu573hBxYRZXw t03gCxfu+kEWyZN5zTtbMGLDZF3VvQZlHbUNpIhDP4Gyj97XsgZ7lTIvShm7gfg0o1xgebL7c363 bhg9rz9iho8sxLWby+y8pfc6pR+Z+kLyMisxyquBEmpi638H98WVEah0Lb8GAj4oRHkrsJ6t8DLr I473ncIE6UqADyCDv/FHV/6wkgdnyD8mXvL7Ngy8W+bJk0nccrXGptX+SMM0CZLxSWN86hnqtuua bXCpDr+vtNGSZp3tu0Wea+bZ4FLMZx9TYggzb55xZiAvEFklS54xDEUe01hWMj5ZUD0223hMqaLu KMWTICW5kpuGliQYeDVDW1HuiUKCjPTm6s0Lx03F/ha+2zIkO/L2sFQpWdA877ot1YKjhLzEXFbc xYtv6kUm8qq7lCdsBl7n1TRdKrlsDzyKFjC0pYbdjMzmz/Xw64Pcupu1KH+oiayJ3ApdKPpZy1zs MGI3CbXNWvhSMxzNfBSWSBzIiNDFehdYZUSC3i7EVjBfjZb4zdqrhkrA3A2sXgX5Fn0soWFYT1aq XRf6yJTtMBxnPlpQk/P5NdzqmLNlsD2z2xU1hdgShJZxFp+myjur1tPUWVbX98xD120J4r2nWnpT 8J6+73TMt1BLxg5SspvyVNkctK4fHyAPUtKfRh1npjMsQBZMohQgWdZ4ZDaxdW2W4qNiT9FxJdoy fYYTxdRWLMJLrwif3iIyA5cp28hnPu5ldlJf38JMMM/gYb9t6tNiV23DzKIy81Tdfl7yw34myriC o7E6su5+Pvlpyc27ntdBJsREt1s8I+wT3TRQ61ge1dQCjjNPyDQVNBeA5dw4wI2/mddbm+UnTEi2 Q+Q4m/RIuatvecHanNFfH2zP5Vu9pCpSUFroY9Mo4/OCZE+qUo9s6076u25RxfjRS6bSsrU9IYZF FbQclBzeyJfNWUGpTTmrrm5pmYLs/E5ssehMCF6iVQFvZXAC0DNdkZs+nt5hpcMYvZNZJlJuoh7P krqEQQ6pi04lrYeNlg28PUv0K+2IgUtJK4VyXcsbgt26gc3ECuHUBzQGTvFq/0y1zrtxUHChWjer U4VqXSvNTEPcghn5mLO7KIDFuam7gcXCDVMXrtmS0Ddk7aHkFxNbCZxeVL4TWNl6xe9JqRRvmtCK XyzJxI68G6iaSgPR1gp+MSnx7czkdkqUPOotpT1Z+4ZlCVjjFILEdnIBz3ILy9vly15aJ0XWKT3I j1flXb9tcyRXmVnNJgbxUGGJaCbNGks25Witv7WLso5PwVxuTd8baFOPKRlqK9J5O/nW7rEWTSQO 3dwMtNDeFKpk7mdkNmPWXw3fZ+Z+XtmGDtvbnuxJ/R7jgwd7t8I1yylkfekbv8lDr2r91qjoKdkJ 68q5ujOJg3WE8zjSdUSMKXkqeHjAEZaqOfmbjtJmFkjCwJOl8FXrGpqg5Hw4lzJ1YbZUOqrdPbvk tpSsM8xue3bLJ/wlDurBwfW/nKwzym5PEjVmnd3momaPwfGckM30XeEIB7QYnFhyMFpikDgEUpGv K74Y9ZWUNRv3STX/2EvZZGYVufDtxTJhZiF8FzTQsZ6hH2XMGwstqwFtqqiCjqWcvNuIDCimtgL7 HiWnLhRgPzNeirxrZvb8FIDu3k7YyHZqgfuLiZ6O3SQjxe+E1grwe62osX4W8JttGUiaMWVBVpZ+ 4IVvDSwnPBDzm7JFObqxW52NuxeFuifN5P3Kki2AxZRn/Ka3LW/TuLFtt35z5q3hJD11uKow8ur2 52hzvMKrzXe/sU2e7p0iALO8LYEn0+cNtBV7wXPZXujmxpGF3pmidG4AB9FvkRSx6oov5CbY1rp3 63FJW7VevInDwBu9ZDHBundj3EcbE6ddyrIxMbLfGRL46MCqJZYZT68IXdm05R0phIj3MEdKKhKS crcdoWZ6hmFoLJYr2AwH8CIHYF1Th9fskZwAX7qHS/8us8wmUt6HQaTxTMvievH8LTHNdtLQDnzc qxxVwE53rAmxbZ0mfb1mBlCSpLyHbzwhxIStbUiwmAdrh4ZamtQ8XB+jsP2U1TiyLIteShbFFz1B A3e6VF8ckXMIGuMVBOAAg+ZAT4k9oxS7Ik4dKERLcxxC8wzi4VMb4AVkereetIU3RiG5JBLmMXcu rMURoAiMCd5wYE+BQuuG3LPAnZ/EoMYyl1gmKU3AU1bM+fdcS0v4H9YRWlqgdE/1eWSx2aTo1S0J M8jPrMOWqgDv8iYt8ca8cSuBJE1hIB+xuzAl8/CGlCVZLJdxloV320Zqg8gH9YLwXiksBVnpwgIg VRxKdiuL5FbKisdh3/T8SEnCTMlFCq8LkT1U44KYRMvlcmuv71Ch3FffqKYt+EnyJVbnM15MmUPM QAx0eqesBTdnJdi+WUv4pQXkJPfbTqV0veQXgbY9NWFcxiw6fj6nlxUIiaQE4zL1Fd87spsNy/OD YS8sRdKPWqY4tNFfOSzvWPDdyBRHQk26kCmyRV2wknwhQcuMy3XECmD9URWJjDWH5hMQ4VPPoOf1 /vcDZVrWcqccl8wTHa7N8PQDE94nplbm3d+0nvKjJPNYoOGvjOI5UuR9FV6esd4V7/QUnpM3a2ai x8Lpy2s5NYaotzjUN4x2QUYHKHAqOSFfFkUsMGhk8WHI3aAhx3qJcijd2TO8VFwoxJHFbksihIU4 8SnuVgr6jLEgzQW2kraTEKjPWAvKqJ4yRVgDvOQCB1+EJWnbOmk3fhHF0jyhwmuVOpYQUpQ8VNRY Uv1tgDb/MjRLy1MUwoJgVT+FU/C77BLy4xUN4Uk5ifKQdU406BGelpBnyCgqljdlw8G6Cfcjk8oj 705JhJD1xvOLE/pDw7bWE649k2guZ1x4RLIKFm0itTPL5bz/jbz6NKre5soDHvqC2N6JFdKERBPN ouWIZmXF8rKktS7Bprc9f41jIzdBmXb14m/reEa1FnA8IsGtxArg2JBCscWWX6iMia2k8CmP2FWi jus7kAebpjWklH1BqmpMbttdPCRLH6f3DfAsDsznXRjWSUorlio6UBJ6hxbfdvIq9bWX2eno4pPe r89O7a4rjO2G+4YfyTOxPM3bfOpifk+rUUPzqoW8Fo0lk6n8s76lZinitUi3zIfZPONWAG5RZmLt ksM+fAKAkPSDX5q6TxifDVfZlInhHPjRxdhwEsZTc4kYX+Q7/P7knoXq5DsxsXwGmVKF7z9ZRWM9 rcvtqNJJM/fmzniRQiFlDbBgrzq7NpN8AMQxV2dWbhjGgb0ta/arRulbhlFkZBcz8bo3efKepgWD hZQtMFh4qaj8oCHOMHup6PMiK+hkIIc0XqbSxJY60BdhCjOJODqSRFCW2PPid7cVW+ORTDA44K1g FUTx2X80hYKdWtSUFABCsTQXjsHPcpqXyZtao1rWOXWLX0Rzs+v6YrsI+9kZiqrCNiD85McLd9AJ eYn159lduIP/SToTDz9uIeIx0dlJ85giMvX8Vo2suV3wcH4Uv7t4J0moakUyMmvdtGoam+DRJW3G 01SXlLNMw8jXEwrqPt67zbSTrTJaW30FMJH0/Oqj2FdnGN7Y6qMmbjNBQo+11lIEhQtTDauPEmqb BmtirIXBWrmaPsMfGdPzRn2c3nWqNAJV6V0QLdZGYGER02ZiBedo5Cc5+W2K7ZyViFkYaHnJVxwG /k5z+41rJ7LKszt4RaflHbxSSJTFFTjzmR28hRkheT+Me3F0wmHWhp26ixNCzAWRoPKGpYSYRPMM dCzw6+nT5vRcQMKmzdG2HMloCwAywCOzsXfxSxK5TN3lCcMjh0NhusSoSYZp+3a1miG0fZAqBU/Z DdPVkt/NTOxc5MntHk4amoGQm/7iLZdLoWcqDR6PDPh4JzeBFsHYQFxEgECQXSngyXtrZWQ8t+kt aYFlQjf6Dj7REzF+vTF+9JLaLPWTRIrr5unSgTU0kvr0oam9pJ6Y29uQ0FccnbWY7ez8lFsY1Rd6 xOhXfyE9Fl/So9QzopixyBfcO01lq/tCFzp5tBr5QuB7T4RG/8I49i1Qgv4l+eIIM58u6U9h4RXr XfMRmGlhHg8TWfL+tvnbCtIuAnU/i7/StI5EdPAGGxhIWnLSK7ABZ+6K+1U4DvQUHeBvKxjp8/ET +re4r1q5fE3zT56UPqfnBRu4SenmGCpKpO3ZsjeyiJf9EU9b+uEmFtYMmVcxUZpmk0RCNrGh1NFL NtSyEKw/5Xg8jx9Iz9Rj6pMfm0NcCAo18OLDUuRh8elBtjNqJ3KJc9KJcuRhr/VB1gonxCSTyRTr F8ZX/LFAZ1oaZvnEtCiQ0ls+qURyBptiTIKdWOEUx/GXJTojHy5gcuExTJwquT6AXXEP4tL3cXAP SMwnVsV5pQPScIawRjNyp3MSnRjkvF6V4VNomPlFLkB63VXdDmlm0VJ5ZS3IKnv79SyPYMAeJt7t mgg/Syyz//Av/wsCkiv9CmVuZHN0cmVhbQplbmRvYmoKNTAgMCBvYmoKODQ2NQplbmRvYmoKNDgg MCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1BhcmVudCAzIDAgUiAvUmVzb3VyY2VzIDUxIDAgUiAvQ29u dGVudHMgNDkgMCBSIC9NZWRpYUJveApbMCAwIDU5NSA4NDJdID4+CmVuZG9iago1MSAwIG9iago8 PCAvUHJvY1NldCBbIC9QREYgL1RleHQgL0ltYWdlQiAvSW1hZ2VDIC9JbWFnZUkgXSAvQ29sb3JT cGFjZSA8PCAvQ3MyIDggMCBSCi9DczEgNyAwIFIgPj4gL0ZvbnQgPDwgL1RUNiAzMCAwIFIgL1RU MTIgNTIgMCBSIC9UVDEzIDUzIDAgUiAvVFQ1IDI5IDAgUiAvVFQxCjkgMCBSIC9UVDQgMTIgMCBS IC9UVDE0IDU0IDAgUiA+PiAvWE9iamVjdCA8PCAvSW0zIDMxIDAgUiA+PiA+PgplbmRvYmoKNTYg MCBvYmoKPDwgL0xlbmd0aCA1NyAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngB rZ1bk9w2dsff+1Ow8pJRldXbvPQtb/JlK05lY+9qUlupeB9G0tiajaSRrdE6m1S+e35/nAOSIAk0 R7Lsag5J9MHBuePgAP1z9cfq56pu9P/+WFen+lT9clv9uXpX/e6rD0318kO1C/99eEm73bbp7F5/ HHfb026321fH42F7bDYv31ZfXtNmV7eH6vpl1e1DW79cv61+d329r+rq+sfqP6urP9w/qbrq6sWT qq2u7p5Up+rqTfi8fbLhSRX+vh69fRna/1f4vA3PH55Uh9jy+ZNqX129D8/trdpvHPKPT6pj7MXg 3AQ4BsF6N3zePan+Ul3/S/XNdaBMOuJm123bQ5sOuDBMjeL6r8uw9k237Xa7OgW2N2r7JaFZGdhx W5/Px8vADsaAErCBr4fOmbo0xvoypNMpSEhXtactkrKLMrISnESzOzTbbi8ynQ/bg+j1thLpdt1x v+mfvemfBQqc1e7N6LsIqD97HWR7gBrfHOrt/nxszlV93h5Btd5ENfj+9peXt+8fPt68qX65AyNr 2TZBuNV6oR9U4Xffvm2rr++Roj9ufg66UrV7pAcqVIdt057P5xNah+I8XuEeQc5DXgI19PpI/48A NxLorOE475v95lek46+yIXX11XOzGdXzryDfUwwE/46nY7erD+HN5NF+f9iesCqH47atXr7d8Lo+ nc9dje3Z1vv9rjm3SMGhOR32O/Rle2539XF/guPPIfcj7NbuvN1HmRRajczW3kycXxIVxGw12yeM 7KotmYnTedvsTg1DGHewBHeFDtU7pGUCSrjWxxyynSkmyF7fvfyv2wd4BsZffsS0PeWPV5hZLpjZ vKGrz7tt27XYkzACuCDTvjQC62xTsic+gsOJgXQOSl4Cl7PgJTZ4CSeLRvDakRXKDKSAcnPaNofd ser72bg3Wu5H3giJiu7oGieAi8A5NNUVToZP3AidykWE4eFqvjQKfgwvIKeoGT4hKV+2L5SxPB+3 5wP9GpaDz9x17RI1ApY9kncfQAA3RxfiJD7sqTnAp/Xm6l9K1Gmadnto95ieKReaeb8bE/qBC8+/ oyco8m/Wb3GEzX6HUp3a+QgPi/xOR/jD1Z/oA1r+ngsj/cru6JERHrkhZKjtsrfL2S4/PCkNv91B 9tMUqZVuaBr3tHWN++nmPKyJhRYkOh3h/Yu/mrAgai5evWRvFqMOFHHbdac573bYwVx/myjYL4lr JCyu/YgzJJTk8AyZh8b+Jrn5aURN3FcaBrXnFmd5qlNhWkPNjZzGFBh+fY/0r5HMyiUTvd1YGPn9 dSDjMyQEqXE5JahEWqEzQSVKyd8Qm6CSwdMIJcqbkW5/2rbn/Vx6V7D2i+pX6HqurjBaUky61uUX EXsT7yp/6soLYpJp/0ZRs6IdPbbb42GwHPWCBo/o5OF2kU6bOZ3yFKoVkZ1laAMibtAT7qcGpOgb DvvtvjucU2Dybwv2cAJW1jAXXdfg9tshSaS0iOSSwqdI4sLe3byFx+jZ7SvYizzIo8BxxALG33/8 Cd7nqR3MaUeoaNT+vHi82eMFdvtI7ZEMrbFcN4b+x3dYCgbw88fbQVwXFLs5E/0fZLbGciLHXxbY uWLnqdPi1tr6iCme9GHis0mkcq4Ud3jvkaLKEBp/gnFk0hiuQWE3UuMCIodue5LZGOOx3LtZ5pJS tES+5z1hSwJNSrHgQqO8DaHMD1ff20AwjZK7Z3YHszD534bPr3mEJZw4zU1qmbt6x+zkcJijcdEW bq62lXqXnNsFmaH3sultj9tDfU77W2ahRUQlGnbdbnvQpKCnoYeDS4YlSoaBRWfvpLIwQAkFDeLN nVvtEICFcFCigSbr4kN0i+4PIbc3yUsNU5lt1zADMyQfo49Xr6V9WfNnk4YDc9VdnMNLfgoBQz/2 Dx4ciATIiAbOGF3VlyMUEj7bhnAgdDeK8EuK3gcoqWdCPukU+cxTrT7WRAxnqBb7E2sXle2ynGA8 tsd6T/gxoVW9J2PA9DIXYPX0+sO/hwjjeTDnCD0aJ1XD4xMuI0LEJHyOXoTwi1bIVv8JlfkbyvOJ oal3DqS6IqRoQhpL4ohs1SZwtJNK8QyrxU3octLAgPobwkCavXiy4ZPISN+090QgUNwhe+O31tox SeCMUNg4wgkG9k17ZKDt69sSS7u2dYs35sInspR5K6J+XGBpt2IG8h3BI35ZJIIJ4M4N44BqD082 xHZQKC+aHaJ56mTComjGlOiCg42Wu5ekIVIo2sk9WcjTETnoO/kc+XdL0RH2ku59GyfNC/jOrOTN O49oQNesIabSwhpkk1nzu5+gFs/+Ft7fDK8Q9RfMmXl1a98tUlVp18P5gC0PWA5mcp0tRxZlw8td 1AcCCQRu2kUmS7E+e7CxrvlclT0ocr4hodopfBvT4RO1pDmT8az3SNEYmMKzVaw3XsoHMbI/QWGm V99wwaz88clGUxrMoh5i0GctFH5Yjp9XGBQ+7w3Si1FMqQT8JCQha7qtd6dIgZGruYz05uq9S6CJ XAzHUW6E98YfGhoS32BZS6pOgLGvIyojoVzlZDEscquSTS4f6DBYGFmbu2Cj0Rm98XZF67lHePe1 8spRi2V1ErlIbY104VLo0JyxZCMCH08zV5gCJWz6M8OobZ6tC3ERnsWfMVJu6FhvGBU3uDs+of9p 4215nad4fWCZ6dQwzCluC3FGxG0Ii9M4A68sWS1kCnpEZvkPJdN2DWsFCSIJvVNb2dN7aZrUHLa7 4xk9nIzqkkRvIPiDh56SEgS2ehCxA0mlgaQxdfGX6Fk/pFkWpmHRp2Z+4Vg8RpqvPhSkqTme0JID yYIwugFuaRLYO8Tn/2xK8OxfQwxln/SG1BDIWATDpz3BIkECBssTQis+x09Qb5M7niOKfEIP4Kj9 RllcnhSlT0kvm51M+LRkL6P02UiCccnpW7fbsxqkaGUMNxGmCbQCubsdSfBzixsbA8sY9QnYm3cl wIj8nkWZZbilSRpS6mbXXMbN34OI0hfc+uGqJJTdngWzEOhMheeSbmiB+d76e3Vr12juFXaEeJru zeabA9JcGGXB0EqRSmjFPFzNmuto9agUKfQSPV3PoC/SDHzeP2FCpBVwZNI+CaR5oowioole8wLB 5RG5WT6NgPaccZj4AgijytTD3tpza+NJKDSj7wfZ7wHZ3/8dnghEdRW+gNPMfMHQM+StN/takXTN ec9anvz3I4g3mPDCIs1jwqy8GWwJ20+t9GeMX6KMGcu+UC3QKid00mRgDGztNLyct9csDmlQhAB7 hxtkQ89gArKMYPMpCeICv6Zv7JssERKw8SVrbl/11rhHvWEyhGQhIrp5ae1k9fOEjDpC5D7OP1xM HKEOqKu6EQZ0GhIx3FbhnimFPRYuvK2+54piXNvtsyJKzPTrumUWMUKqxNp/KgRJR3T/cEaOV8KC WDkHUDfH7b7an0h++fyrq61wxi6+5OGVM2LtBUhkq/upXBHU/xZAMSFX1cU+AHO3XQR2GS9S/Wky 6hwiyuJgS1BbVu93BOD7MeAijv9QGHDHQgSVBSm0oKx5NGMxzfuHm28JIbJ8OQo2AXSC6UrYt+8e 7n68kxPLgVc4ykzu8CjwUZz+4Z+q/yyA7pDNmrx2gnmRxiWOmaSzCDFev9qhRkqyLclBJHDFvzyW zGKhbwvvPgH0Q6iRKABHMfc7FmAS4EVsnxagaem0ZvEsgbZSFFg6vpX1zQsCGsEsKQX+qag2lCvt 6+NjoLEyn8WtU7rh9BhoX5SgRbkcc7w40pL8mFx2JONPwwzlt5TLTwC9Xi7HwIskWCWXY2i/uVyO gX8qqoNcrobWlCQpyuVqaJclqaUmbbRCX5KkaIeL9q33dGPAi/SL4P6SHzFZTvd0q6FdHjF1kIeo O0XE/q+AWIw5VgO7jBfz4Rh/FtEqQbIMecfUZTzbW8g5pVMDpqDfEK0yMSPDRe6BAJa/LdNAio+S C3tLyG6TN+JYplD8bc/7nATPx9kLIgEiX2J3IKj9xuum7Qkt81F5w4ruSVnuMJhRcm9hPp1mBzSL x/NYx3zeg2Ohn5aEPauv1k+MHhfKwVfUP5IbYRWaivIpAxZwnjHgfjw/NfzDuqlQX17KbA4shFDB PiMRC2a5pcCuX8ssTFBL5KIo8NBSKTEe4uLMxKfCpUlAuyMvfaZ6ZgwMQ15KuA0z7C+pbZxIINmI UB5UKBdt4feZyqmEaIsDILFw/WOxWrQN1ciE9RMZzaz1pOWikwLJMHlkOKiJZotolC5x7sgdE0sG rIcfmAMzjb5DrnWreTQXzILafMWFpT8t4ECK7/SQtcE/2VNv432gf0/3fYFA2mMsKPE+HA9v42Ai AtzmhdRn19QEErEMarxUHjKohNfVZCosj+BNlmBnl84uq2or64MWQphXGzortH1b8AEHJgfyl6uB QahczBkWDFgkTYFJFwrKHCRU+cNrDLYSD8HqmR1BVnjyS1ifcWsSnsDJ8FyJGGtvKTxMMsZbUijR Cjf2NWukv8PKB182EPZ8nLb7n6CP47eGFggV7C/l282ectffgorkk21pNAGm0HBFNme6QPEHaKEK hmuujF0aBYUqV56iU2kpLK5Z//FBudgnVib1WdL3nGi07DEgGRnlbAUwWJMHdt6qttoINNLHOYFS DJGyB9gZLI1bA7cNThDl3zBDSJOJSGj5Y/hKKEiTcQKxvCR0yg0c2m6G25pVi8KQu5adK1q1mI7Z y2Y2OV/JQKxwt1BiAinQFyRckvIjiXEuaI9KVgilkBe/sXZQjNbokpoViRHN5oFNO0l4ni+j7tGN 6VgpMxiQFRfticXCqlLIn37wVVyxh3fiJBdmsdjVMl6qQWpkpyaYLTFpMOhOyBukw2TEHNZIGCar 52TeWUBlRm/9DIK6op/NValwfXmLW9PU7Epjs8NCf5cFZGU1TLPvqD0jcZcQLzELKcnEi5wmN/sj m0gmsOQw1ti6YjmM1ifeEVWMuDMthGchkHSrtpNJPpdMUhzIihJSJj6HtsEpj4HJaJPJmurmzCj9 TebHxBvZRdtA3h/JIvHGZE42ixv8FZ8S8U1u52TLUh5ldgv4LNR5T4apkCjHMK2xNEfZofE4F7m/ gmjacabVnwRYJl6IRBti51LwP1PNKfMpbAm1ttb1kIX6/LAdq1mcFHZkFzqS08mgP5GCHUmUfUuZ XQIso0CRgr2N9XVipCqvJdqfgfNJbVhp/bmk7tEhSOs9jsZkMvubO+4okz2yf/omSP1X35kOKLCB 0n7RO+o/v7Y2X6MaTB9wUXziHfKja9inVO+Q5hFGn1rIo8k+3hhejIGt5UUoxEJqcbjo9v07K+Hz tXQFroSsyX4GL+B680SW7l6LjvKMOMj8aNua9f1WQdgYw0T0Uhm5elqwBPVpy57aFBajXap5TqES hb106/YB2ZNFg2EYPrd1/ox4hGfu3BPHb601SaSBQlpGLrEgLGGOmB9/x0aysHvBxr9i5lQYP9tj 2eKGn0qAZdg9k+bbd87oV2btY+WmOE2ZL5VEUGWo1YTF780F3Nj3oFF+nOT94TPhTWDzimFu82ze E1O0J0rmVwODOznv0e907xptxB6s7iN2Anelkfc7gZMOlvbRrsiERWs1xZVd1Hj0JaAxXfT1zYM2 7+TIUJNiY089ujMDHSLjAmh0J2QskI6H259+uXv4e3Xjge8rZnWFnFFD3duBVW/vdAhGtSt8YTxK 9Ay+9uPD61vvh4WSm4e7ckKyZRszS8Uox3iEhXGVvEbLrv2zEpK/ASznqepau5iols6uSlBQ/Cet DJ+wd6SA08A/7o22fka0LkRf7umolRKh0XhsgWyjzCF3niHDEIb6JH9JcdcIjUmQ0xdwJsNN7H1q mEpcoPyCUh1KVBNgq+zdFZF6QRuYJYVZSwL4U7GkyrrhqIpPwBLVuvko+0shLUUA4Q8zzjK5sYTN nhfJ3nScp3DucViaWKQOsUR2zAQ7NZD+qSgtTZEmYJWNz9mgZk9ld8NOvgRuQvUJtIJBa9iiWp8+ CUmo7oWDRuuf3B+W5LrBzO84zyJlcoL7erluzuDeEYEm4rdKroU7JEZgoA2fr3zJxjduvgwlhvcu Sjc+sBjFecRmT13svIlBi6LolmZ5+aSjUhM2nlM2XrBo69ZP+mEpwsIOWTIW28TfqDOfRCTHsM86 b4K0qMCRJ5G6S7oQWXV5vhiNN0cqEJAMxx9ldo6l8guzpjvH8mjLQ3c19bdt6GtFCFXQjpqtkd2x Q4XHwFZJ2FWYFuR0mLNZSFyQx5oCXko6RDK7m2GTkMfZeJQ+6YA0h8y55hSZBESBaJpTsxnDsFli dcqRotljpyYbu+LQRsxeyAylYGH0i3HN80SPMqkzim+UqZtRcmEH8IySv4iS0BA/ESZhdocyM0H9 m23OsRs5dtoV01IoM2cnMT3+TcjIipWy7gmsjOTNqBi376xweTrvA32JHY0C+xUz+37rsuZ6sjpK 9nJVqIPf9afanxNk0+2PWnhoVMVVD6iMWdKSIFSu3pZ8SKuDYXYkyKYcX/KrM47f2izs9Y3vzbeM HB1qLfKLkUsYCR/4mn23xvb50Wf4ZvIHbyItW7b40QiSwx6f7rOgFgPWvhQZyRTJVqJPzZlfHNB1 rNpJR4TK2VzyMF+4nJuDHF9aHfSyYwncLRkbBXpsTurx+5xNmWeIeWb9zoAN4vsbbEqGz8MKCpqP DGMG+ITlWkFBQnRhbsEzOGNv8gO3nUNYqsCXEaqFKcwqviQV/fn+NbU7KYnUE37FltsBgY/vdB6W 6W6hEza4H/fIdN/JZ3C3JeF62lGmOSNZUWl8ueejKaqpbkjT9GjPNqq1zJEQmbnSXOposres72G2 b4wJGDtSYXVPmM/YekheR3XSUexXeGxiglwwEvZrKdCb2ItV+cAPOGzFmEWT3dXUKnCqVNJFMRUN uBy6SiacOQZiAPaYndi3ZtfHoZN5BLPjt5aVdS8xbnvvDqNvnWd1NPRskUkOzVu13RVxxZAoZwBV FXZw8YCObfV4R5Xh8IwRhAXVcAPyvPnwElukd3ITXOTVsGDcFXClZiFsqtSGnh7b0owMrcqxpuYg m712aK4GBuI5YM2OwytazptIgGVCoMFjuvK/urX5nWt/nLvplq0xxmyzDwmvrXk5RdagfBw2hMKs JVlplDo/MJi4MbC1o9QZi1jkfYnDrVZLdQZZgi49XDJtKu3ZVs9MiCqJlhl/XSSRENIrsjwsCWEf 7tHjPi0K0FTnQ5hIcqNAG0nVSYt5mWxJBVF8iaOa0mTNctOvYIpmwEnWkOiP7uxJFU6lIETlLaii GSDK38SntLH2DMi0ik/EI49jx3Lq/sg5wAmOJb0pCEHHcuqB9dQU2EoWFWPDaXrTKnRbdr+vroZz hWKqFA4r+Nk4KCtkVGOqFKdRUC9PsZrk2mGnNKR6/9yJOVXUB03MR7CkNJmEwsw8vLV4zUM4pBmb C/bMAezv5AWcU6CHQdEFoaExAjQ6esabI2e8MtBIm1ojRMtBZNIP1BxgFu21tolzYmoy8JLUMaXJ GtgTRScqph0TsQSrIMEN0U2tWtoxrLVWrC8HMX/7ekyAeaTWUJnN+kToaCnwSXk9SlUsgApn6aDD E3245KgV9HkJU8ZRy6JkHHVeQ9pjo2JEwqRUqjMFvelpmXcQT04fgdNsGxrK+L5BaAu1JsyeyJ2k xCybHc/1fVGQBc7q1hGixNIpWZcKNGapi9xBBnmqdZRBk7THW6RUu5wOKOfoOsqlSIw4cUbTtTV+ 0/PJJtC+8vvagpCNJo6wRmUA+VHFGJLpVNii6lO1hb5nJJw6hD9IMJCMaxMJksKFbtnGyMEh6HHo +DOtNHWop6Ms/hjYaqtg4RlUglivfEXdom/qis338ObFOLQjYrb2RuJ+B0MmdYhHUg3bDL01YcZX FjwQoVuoAEJ0SsgBclh8zDvPLaiwNmgkTyzAAElafifGhOIJXgzHaHFjYUt/jBZtn4coyuBhc2hj UMc92HODbf1bG/UZCu2B802AY8+tFwuFmMYxAguObBwGeTxKIEtylrNbnLbEMYKKYaYiW0jEmjXB mv4Qzy8WTdg5wHBlvsBWl8npi5PFUs78pNy57/nzZJZ90lsOrEHrP0VmX0FMyHhjcw8TwiLVoppT fBzrGGV/iw7Ic4IfvLJWlh4pegm/sPv0bKrB37FWBzz6Z/BTrREAXbZBkcCQ99c8IpZTnM8bg3bh 6AJ+aODIWWCVDhcdlwmvSB1baXaIo9SdpqoeLuVFrCGzyf4m/OOIXBcDlmVxbdjJqtPxx6DKnq8/ SHlqX0v2tGEL4aHjtKBZPytSsd/Kl8MZvyieQBnEby5ImpvxpaOStI+eXxdIul2klOf3LEzKkCqc TBTZPFrQKWzsGxYqnyNJKDS2CeFC7PhkBHxilfhE9rCWyJ7JHC2xSlg36qj4VMvgL2ljLQvbriI9 lg4YYTXlsNNS8UhSF+kBHlTd63CbXNjcnmBpSBWuhAXieVjUmavYd4yXHGQhJWwYYjOvUVWoBo34 pJORV59M+/rzaWdSOKtwjtFzzPturlZK4QLVw8myJ6U8L1EqkcJlZ91xtnvYRzEGJlKVpLCn1YIU 4iGRP3wssoVq8TcqZfo1ouTM1xDSUPueV6w0HDO9Wh5RtP3aajqajS8NKAUK73NhMmMh7cJYTMdS qZiMhcmyfjCGsQQMhgh33SI09JPltjUBlBzSodJ6RDWbLrgdn4hww6s8VZsdZ5DrRwcMk6VZXUqB Elkbchx7/ehAAkySsiZ4zi1Am8XFGHu68NZGbMW++ns4w/Mxq6/UtdbUsCS4FhPjJWNCXWt93I0G /pjE+AtPmHpNz4XTJZlqdbUmjlPhXaBxNCmujKRY3o1X+d9bzHRvob3H+bg8hMZoHCtstcaal6FO O6lZF3GUPi8K1MG4bA3GLk9UY0mGJuND/pPxJWjPchAh9XfYTyhZck1RAhbcfkeZ7rHh926mbLnE lckqluKL8gmJZcNiWUYda1+Pw8LLJZSwXJEp3cNr2RCFq6Z6TwkEQpSIcZPp4SkGRm3uvBHfzItH 2Hurc6gSrNbQecGx1dp7q21oCbBL4aMnUh8c+/TMSY/xqKDYaGhYVUbmLdEMhYGY9Pz4Go6CaI8E moaSmdCiJSmEOA1LbF3DBqse2Gcs4rqbU3UMoftwbnLBb/du23+sJD2QVPkMyPHsP0ix4u8gEiIB wYgdoSJRI/LAk7KIqto0cHCK1iVV0aoIq4QhUjCThRjCMbozkcQTlFM7TC+3x46SpZ4kK9bhe5J4 oauZxrHzNZPp5wyrkLEgLPEMU8Ng8Pyl/TwxIuTMeSQRMo/XTaBEkNBCGXuLkw/HUyTDXtRA66p8 +AE25sia8pyIC3IVg4dhCIV4UPORfDw4iaxZn7Sf7rg8KOPgKHKZ+QJttT43WMkEWCZySbyO7PdP t++8JMmTjzExNq+DQFC90vXV7RDBhKkXZVtFO9OhLyd+ti7FcZGLnip+mp/+dCc/j2064KUESGRi rwkrEiBFLYiGicOS0zOIVmxyHpU9aIldjokLlFPdGwYBZSCsQUnQU2ViQIRHnB8ZPBbhT145OUhs u99TH8UPiqSIrUir9BV5SuPAZrrHj0TnoqM7QMMeauWCFu5vo0v1JAPIy7UKX9pUMrlKzzzjyjj/ QxfU01d4YyuH6LcO2O8cYOzGn2rCIPicUawrdNHaRV8VGAF7M79FYod6wsE3BkDhNiziqYl36heH bqN37BzlpEdhIIZqwBw2K7gaKI/tq+abhYxaFlnpgZA2XuuEcI/H17iYB+vLh5fGCg9faMOQ8PJR RDImQ/OvGrbO1pSQld/+HWAMJZWESIEEjyrpYTGHZ8QHNx/BEJwNDOrjOkNuIChfc7QftNzMbRza +LBTcI3YGeN4EEXF2eJj6UUFWxSlQQgNo42A/Pv6Hi8fqkvnLXMU+Y4KhbCnfrwdaQ1vb7chVvjJ LkiQqBU+tWChar5/Bw2Mh1++De++tmerBI4jBMO++MdMAIcSVhAoxw86iDUcZNOEjkbxw4LzTRyV oqcv4TexGiLZ5ykYPWYFZeOJRW/2BCt2MZLTAbM6OsFw8dyBOc1sjrX3If/6DVS92AU1UscdP9uT DHfR57mTZ40tl/JTWRMncE6ArXHyIfL0tcR7rXPlfUjDZHhHkjLFeG0nKxcvXUy4WAxx+xrrwB0a jLbBZP5GrfJYhsOwmEfNsCwfz+TzqB+efBE6ghB0p8UQXJuUm4scnTlfeIso0QDcTLj0HjUvoKVk 8WGKVondIJJjt7LFR44TScdYAsZ48sBIFx9ldiZ6t8bquD2eGLwqxAbELO6Z42vomadQOLxAxU+J ziWDSqO1UdQ7K4zttESi4qcEWEZWU7AYE09XQTSJY5p4iTYV/w/PiwoTY0GmZsnJyytCrgePKySB M4mfTBdkOHec+FBpDkimznZCJYRLzaVCN5eG2XSh5mSh8GOLq4FF0VpIHTHz0wpJiliGCQmKmnok rsOMwDtbAnX2SKpwq25YrEUwYRDM5q0fOegxL3BDdmMd3UIMntOiIbsxBpYZ60zg+p9jMpFLhmmP bHgmfDY4e/7+o9UtvL+3p2XbyIkP4ZCCPHNT1IpLViSHdi119KuBRUlZSH61JId2Z7Y5JcAg34IR SlFEUr598BASEsgQ00+e6xyPQn0G60fW0yjMWOgqEcrgKv0kDmOHkTxK3u2rkrS1KovivPp0hHkt LScqtF1JqfIV5GIM6SmNcak5TpuSeQq6UyRfSGKTcptRr1DeMmRISkkeXGu5Z3YStB07PadjLq1t DV0/LjkzRG/Ly9fRtOt3y0Z7T8tFdV5jcScxxXAx2lE2WpMEiP9Ght+YoJeaZYKLTyTe+FW7CGnj DPRvYhv0jSINa0UhnALejPDGm6w7cudXBJ1iH/rhkyDaYiH+BoHAPP0+37gN4zRt5Dm40oaJF58y 3AzKmtqX7W/7gjoIx+sRvdvXrEtrQ1gIUAgRuhQqBpQgbQBtX4sdbPqm5QlYSwDEb3jhSEfkYX1z xa8hY4XutsYA55HfEcU5V3Rxjjnnv+cdc5ZruMlQnxWtlnZUcCxKgtmi8fAEGV3kXFVLhQ1bHQm0 JsNcWoeaGds0NqIbBNGC83t/Fc+wmWQMfzJHdf/xfVFEOeyf7Vk1FubR2IWQITdqnYLDKQyYzDHc hITpWKVJOWBR/ck+J7/StjBTTYEiJ3HdAWFHLlWFBgWRlrzLqrVj7QBsLWmfYmIgQT11VEXU8X9n 7WVPgMkGrCkP+T1qZmbJDBio2xNKHvh7XDyC6erbMC3nW4zYbFn/N9rBt0yIUHKHELLFtCnKSUOF LitJkSijKfqCJ4pMGNxBwRMVONHwA6PnRnmBi5zwrkqs4LwNRJKTQRJoYsWCHEUOD0MoeLRHlZ+E 2CvM68finIhXpB9cVCFTQTPahp+Y4uRJH9PAllXZ91hciFNwq4mt/4AdR5LkNTCTmhEhG2/CMznL ICgq3VU+lRvZXxMeninTx41B+BDBI5qonr/z9n73xah4UdaaLzsy3oCxAxdh5VP58KTHgg5b1pak UvKrZeWAwZMSn7d8PYomlAaFkspnoGoaFxeGokF48jf25V5MgzYNVRsdUiIf71/R8Hmpr+QHzq5s friPE91nQ18xDf7CA/ttdKqjWDWEQGUTwf4RXEnseiSL866jhA/qdalETQSpnkMChBL54q5f/Aio TSh47cQKLT0fPcnAV2T4BA1r2fOn3w6HwNMFQPOk7jic7Xjg+Ecj9VIiIA7TFRn7m3NxHXWxJwzT emAFq8CvrNuekASz1ZEVjmMUMPudC+HdmzdFIdBBdaNxDPO9R6med+Y8DVF5+G0+8SmN0b2lR3qy STRR4J7nm4UmRHeJiiQGOFp/59s2zzcW+fh11ANyPDY1JWAFvnmcU7OHKIYdck8LP0abIkiY82es g2sGtlbSywUy8Ey72LiBUrpYu/imQCadb1Nrf15AZ6zN2ZT8em127iwlsUi21hAz6XaRnt6bucfM vFGnmx3ZfzwZQ9Hj9xsaCh6/XGAwKdLUb/g0h/ZoWLhKLA7J5a0gIorDWvZoJ7Ck2cXtBu7ZokN2 F0s3Yz8eCj7tmdbczPzpYv7bnDq5Mr5jf0s9eT146l7nZnnOcIqgyiImjLhoFZSajE4S3NSf67r7 U3/oTtZLzrj0uMyS1Rxez8IKYetYz0rseJpX/3DSc0NmaAwrY2hnOvsmDkyEHNx+uOt/+1GskNd3 s5cGEwrSmEeEIIxGThK3iU6ZX5nvEkXE6MGDEr/1NhGRlMLc5akYbZW2DMWdwGvlMB48+1Kutxew IE4hD4eEmZx5SPhB2NIOsSsgxA8j7jlSvFJNdFKltibTGDPZr/2n0Rk7BH1xexs2o+F8oD9o3dsy GYjwFs9oSPH3/btYqrN0tNwI77lqcHj5ruMsjB7v2aEiqeT084EF69mqGFmbJBJg4ss8BkugLlWP MkrGJ//PyP3iwZJLrIRyaGJHR21iQBWdcaQSDT0Qq9JIjGlFnq2UKGuDXxzRCutZ8NadKixV+m/k WQEMOciHbA2H85I6SYCtoLUy2zErPKj+iASTFSftwThqP9uUqZdL/cTWT5t7c2aefuZj1Gm2fjRx xMV9EjVbU5W/jTUNnzvx1gmISCQWEElEC6HmiIwTN1xT58fvLYGtYzHTs0m4XuA9P0C6ZYkB6oxg Zez+BKry0TmRIt767VDU+f5LKM4tQYqhpDNdDzVD4Mrr7tcmSPbprSslypnwpsbBvvyjXfxVnOe6 iYjfT7g3UQKdcno87YkLRxQveW3wdDLPTK5+9iyc8rcWVpSEBYsbclRUaYxBIQhLyd2ZwX3hlSCY w7zYhl8R17EM4x6SgafsKx0br1rw056zW8ewMtimUBGK23d+BL75PZhmpp9PIg5pn8KRPgnpfvA1 i8K8Q3ho99rc6ut75IaHrwySPfRqVmt4/97A26t+bVqQrK8L28JjdEINzfg3w5a4MhvnvJ6WoYFp nkXs/rFyzzr0t8Kt/GMvnLPwVL9YedhjGVcDi9K5sNBbs8nnuCP9nACToVozX/jsClkPDvKU03bg 8AvBM/zmVipRH/lQlVDafD8IV3SpIUTuoxDPEsV418zQQ18c6hCiBXKDFL1yqAfpD8FEBkaRkEFK gpz4tf5nrtzOWVOv3H3woCn5vodVVEzaTMC78sdueeMYQvQUsvaaGTjq/o2q77sksJztyiRbcdBY YCUWK8ge6RxxTTqaWO2ohyFVNsohLPwuz4y9/C5PmJKarYBcshjQBzsirpnZwdzYG5/Tit28QSV4 462FKCXdf7OGZmDCsxjCW2sZLJvbmpUBwDDv4JH3QDqFN1ih4b0DMzD2xvqSQeSbw/uCJnB6Ib9r jn8LtHIbslZT4w92OY4fQIKhIGlkfJyMYATG3sDeF42a1imOux4hY15xN1LBDmmd4qgyEBvdEAKu s0NOQMOabhibFA9GS/rhrT2z9860gei01tovpLjmQrD4zO62ieROosVwAo6OKEz4kfjdVGL7aRlm +I//Dz/AmBUKZW5kc3RyZWFtCmVuZG9iago1NyAwIG9iagoxMDE1NgplbmRvYmoKNTUgMCBvYmoK PDwgL1R5cGUgL1BhZ2UgL1BhcmVudCAzIDAgUiAvUmVzb3VyY2VzIDU4IDAgUiAvQ29udGVudHMg NTYgMCBSIC9NZWRpYUJveApbMCAwIDU5NSA4NDJdID4+CmVuZG9iago1OCAwIG9iago8PCAvUHJv Y1NldCBbIC9QREYgL1RleHQgL0ltYWdlQiAvSW1hZ2VDIC9JbWFnZUkgXSAvQ29sb3JTcGFjZSA8 PCAvQ3MyIDggMCBSCi9DczEgNyAwIFIgPj4gL0ZvbnQgPDwgL1RUNiAzMCAwIFIgL1RUMTYgNjAg MCBSIC9UVDE1IDU5IDAgUiAvVFQ1IDI5IDAgUiAvVFQxCjkgMCBSIC9UVDQgMTIgMCBSIC9UVDE0 IDU0IDAgUiA+PiAvWE9iamVjdCA8PCAvSW0zIDMxIDAgUiA+PiA+PgplbmRvYmoKNjIgMCBvYmoK PDwgL0xlbmd0aCA2MyAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBzZ3dct02 koDvz1Owam+kKvuE/zzcu8STVJLZ2WRGmpqL9V4oshxrIsmOJU92HmgeZu/mkfZrNAACJIFDSd6t zc+hCJKNRv+j0SB/Lf5Y/FpUtfzXDVVxqA7Fx6viL8Vd8cWr+7q4vC9K8+/9JfeV+7rVc/mjaur9 oRiGfj9w4+3uq/Oi7cxlezi/Lb44P++Kqjh/W5wUp8X5X4uvz02PMaRmLPeHBigKbHd5WwCs3JdV 0xfnlzmw/1Gc/OH9adEWJz+dFk1xcn1aHIqTG/N7dbqjhX5pOQ+uXpr7fzG/V6b94bTo3Z1np0VX nHww7XpV7t9ZyG9Pi8H1onAuDByFoL0rPnenxX8W59+vj7ir231bllU84ieSr6uHfTWOQwysU8bZ w2ZedGO9bzYB648zdoCvZVl2xdC3lqtrY6yOQzocDKS2aA57IJb148CJlAsyXVlCprHf90L8WyPD bTu0O99249sMOUe57yZ4FnG3be+MmkxQ3ZW+2nfj0DCocT+AarVzGvXj1cfLqw8Pny5uio/XYGTv rI3SyN0r/aALX3x32xS/e4/i/HH3a9FVw36si6bbNwyiLvp9Db9GNFj00HV1THkNFITmMfQc0hos 8lw2Q/8YcIFBSBqhsau73W+Ix1/FHlXFqzO1P8XZK+j3EhPBP8NhaMuqN1dmTV097kX6BgxUUe5K WN7Xhx4xwLwMQ1e1fQd7z6DtUXs3CXMJUCeAgkItRqpT02gPkb5hpOr9KaM46XJG4TDu6/JQg2/Y wRrcDQpTlQjGDJTgiqFPIItFF0MNst/d33+6+lhgCV+C8/XPmDL54wIj97LanXz6iF1M27a6bDBH gwiz0EkojzVfG0a7O+oa7DD6A6NpLShxDDqMyJjslOaWNgzj/J2hOciCPNKWRrmqD/u6xzRoP5MD wnQl/E8Vkgu64IHu9fCJA96Ebl/2u5OPHKR7IaZ6Ds5+1luErtyJB5HDg33QPnGExod9042HGOGI HEVEjpz7ratq36I/88FXdZMcvZeVs2/BniF9+W+nRV2c8OvJjLGK/XzdwsV+tB1Zbm5BeicGYg5r 3Dc14rUQjQzPimqnEv7TFfIAzX++uruC3jBPhFu49kYv/PR3JzXCGXPpnX3mwwVPyCB368FM3++r tqoWiGXwUj1AZB/o9iXhR0FsISJFKCGicSs0hshEJXJKmMEJQQ6/+reVpJ9Pd3K9eEDy5Q8jg0dk v227fd80zQJfdGx3XPjPQQC5Bl+4T0zFryqcEk2p+RV4gSsCzi+48vvGjYGHs6Le4djqYXCijtSk Is3tVrEfmj3OSkGJOcnwBmRVZj6h30pwKHuHCntBXwinhMZdK5JuOnpcrDKX9ApX35fwJ4QlSDdp 4+SRfoUEEQRDc34ZADIFY8YCu7SD8pgeDZpp0XvgBS1wh1+YR/sPInwuvv4rNCgNx7iuAfDD6Y67 9F6snJKIFijEPQoVIfE9aLver/3rPdLnzsL52sDRdu0FnQNf1IMRaHCu41DI4SiBnNHOdsQJDo6a k0cpe+MYV62RV8/XJ68gBngITZhViFFHGMBWDq9PczLRHIZ9N/W8QSb26XhLZkxd37SxUKwir6KQ s//Ox3bdvnRhesLHxk4l8rEZbag7ApsWBxP28FRkvasOgYFuRoU/n6tGO4TTiKocinM9IoNIPXIq JvsXbB0He+dD8RXNSIx17oh0AEBNOLemiVf3EK9mHvw5iFf3xDmDhA1z4o0bXP0lWiaWQMbA4Z5h 46ru0UOmx/eoHcO2tzBN5sRq4voUuKmbfYMRs7hMmogxTvodK8wXd4BOZhOYIjKLXRlk2l5ul5A0 pxqI2zGXjAe0KuYbAt9mqMTqdzE0UcuVqMyFvtMwzmAOBgpbi0OGYfxia/mFWyqN/I1NRYoRP/6G oLT/iFugCS76W/Uywo0x14e1BR3wj9kYUC9oP3J5Z2HbeGldDrCJ+7FvHbsmOVhRaDdOKwYvCvpK iUFXl0xD5nAjdszAZWTKmciW5Iib0SRMpAM68WJjiGSUKg6RcDwS5sEYSJuWvGogEzcytD7E76lD Hbr9CFNiYDLYowzBH1zc2QAazqQRliliy/Q76mMXIRx7GhHhFKNrmWaSKJiAPSNArIk2e9ICFthn nglmKALn+hIrn+SgI8gG21FLSN/XTEFCaP9LtiMY0242RSOVOHRITYRGjsuTBi7njmNHBrCfUUjG dCwM3iGWvzEhwn5hFAlDNaDUFnqkRds1PNYW/Rut4ykNPeWenQ2Y0cnZU3qnhLAuFEYB+Bu55Tds 1zvvTG5aMcHa+ntScELcQsiCrcNK8dRfvUfDZe4JmDSbRzvLRqLsEAZ/K8ruJFCtL1SdzYjCfhb8 87MY09Fk5Tex7xVBFKbwBw08/qQs0iGGhFEyKwmJQDyLlAm6HBCyQtmuV0PkF/O5minYgQlj75AX C4Ps5SYNnkqvT/4E3tjwbzgQML3SM7KpEieWGi62ejbqIT+TqAn+NYpz6NjlkuOB055hJu0oafFm FKsRysI2dV1QrBmINLui68hpHjbMdTJ4WQnt2mYfJF3XMoALAc1kAGe2ymcATTeTeGbUwDn4HflS ZZs92FAfOZRQH33MaF8HmaquIT06jW6V5La37DyO9YR6qKB6ACxh9R2p3CCYy6INiYhRMgUMahkx pgfmcoozchK8JmP7CRWiUAlMj0WhOxBCnTUKzaAiyywd8cEclxXHsQzevlVzosYmNDBZvtbjQFKN OUjIilW+2lA2I/9NWe77wxiBOsJVb3uW2Vkfs1+f7mA3xo8Wje7xarQoo5WujN3fr7E/XpOWsF1W RHeWVwpBf5V7v6EEWG6VLe1M5yRZe9u2rM5Uh5h8MuaMOvoxm/wslvVCsqbY2yswl2kODJN5ak4d WzGB3WBpba1Agm2SST7517Q5bceRrHpbRWK3CmvzKkhXk1aUtKXYeyDLCq892GR/Y2H9I41XVbEO ykCL49A2IMa6XyVLpBGwBKecck0rNBeICqxBItLqWzXjfhyZdYVdZOcKGV2qsIxlS7LDAzs2V/hn hpLkEiuWFjfDyiHWkeWuWTRWYNO8Y22674y3F/nPbLtLZrk9C3h+YK4cI2O9PS5fqvqrlqsRUHOu NmAyIztZ1kjzvW5Z8mdZIkJiVX90VSfnGeuu2h8Oo6Nu4N5Xsr5OTP2IXpuVPUJ0cMeWfWQg2ECM mcRvjFMORyI2li+rqsGeGQ3+PPEQeZPWRezrxkBHcLLJGByFZoHlZNgbgxAYxiBjtd2azfU1HicV mVIGtB8bViglVzSNeaXYyIHLYSn25MB60mZgWRMAY8uOkOtzYGbsyXyYefp5IT0Sg5r1t+I7iCwx Kf5bDiLCHB4QaOT6rR7stXx4A6ebnkTk5xh2TflSWx1mNJRhryjnwvRllHO3UTmJD/tWTK/hoXOv oXTFJiFnaexkpSX1se6pHajmEcp5HNojlDMCttlT/4JwICrIT9pie08ddvFsT+2BfQZPvRlWzn44 T63AHumpf4964TxIzOBP6IWZFZQl7H5zKtMZvapxsnpKvSpBtrtT78nrZ0W+omL9OcIx4TyPVWfW FY6YFdMI1v+henaEbCPJF888E/0+Tz37ZqpMEh3YVE5EMIOZhGkoAtWm/A0rfAszRP7WdkIg2OWu yoqKzkFCCKgS98Ne7oS93KO/+hTslamLuQdx4E6BYKpQuV/7UpiulzlWelXmXypXgAjBFWahR29i Uuev6vAeh9zODk+fZYZFjzowoiMg6wBCpHWZIxykPkstAYRAO3iKVX6PlcJ8Ycjk7sxYopa1xb6u kRnD6EBHM6EIvcmUzpT5pCKRlrXFUSZ1c8AZuFNeI+Ojn1coJl4csljTvFIt5dxSx9xvin5zcwvF WnLnG7MxwnTEhl8wQUa/RfKUfzRdGOuml5FCWrL2q8J9tn1/oPJ7QjgyX86NWqbRZYplFQsHhN3Y wgCW6HxHHS91oOeXORfF+P/wZ4PwmVnSPjd6SXdSjvXv5sIP5tdd2MkF8ilQAG1HhxF+flE0uYAO cIJuYHDsFQuLK2nPalJAPUvLZgzPmz40rL0NUlAQwkrYQBdtTTP2N+COsMHJDLasvOI08BhC8Wdi iybXQxuPXLDNKJzKBJxLZYJAfpeqzG966rBl0SoUl0j0HFGs6LFinhK9hoqtVvYwhLBAPoO7plzA /UWBzQsKSdAao+VxK4Im99gIHoELwnosfJpHYsgwkPEw03TdsZFjEgIpZkYIWMHIdIDb7thNEg49 IuNMgwGZImPb9ftuaOvNsHLWQMuiW0qSDkE9sUzh5rWOFsGZ+UZvhQUc8GEmvagH7NlLCekwE8KR a5sXQPulChjtNnziMD1pHxHOYhSKLzliNW7sk8JMmu1N1xgQefQdy0W0uoJQUEmzQMptKWpGd8LR rjHBjlEsd4oJzoMwR0KgNQWZsBoxZ5HlbxgLxo+hyDiN7DAcJGgWeKSHUrXkGTsSKK3pf3LoGVWa MQ6mWN0RxtG50ajn+d00wjUzZKqT8TrbEfZ260URa7LTfSKioKRcvMgkCSJhDErEhVYiKCNTttVI obHaxoZ46KZa2EF/a28meAWC/hLOyhP2irU2VPmKMEvxjVzUO23psQVt0VAUXTWyE9pCmy03kIc0 GdumIVlDneOcjJvs/5srDanVZ91dvcHI2L5WYqQWa12xrmr7WssDzEy/UZf1KvCW3UDVQQLFDQrj wHrjn1m3nC3ft+NBq5yiftZ0fEtqTI1jM7YkRCYdX9GxhYo/WnhynGBXjql4niNylOkSrro1hffI oBji0NzYFSE1QXoFKUTateX9HbKMRMv8w1Qi87etcTD7AtJyWuOi8CFsy5rTrk0veHp9v7b6CRai vGLqOWAcRb2cekoje2+00T5wcy26iFG1N92I3vOMBWRb/6aN9sw+ykwrPZyGHEd/IGCNhhNJlZNZ MwhDrJTnaKg1HQiFYmDJMCgONZztcFSwJig2c8YuQjdrfMSBQgQCMyGjtVL2HktUtUAWmIu0HizU mFAGGjNc+6QzzW8ftcnCes/mULNiNHmvowItu7E+hIJsJVi2oCDcfz/FZFjhPSL3aWZXI2UDDSVv c+xW9D7iuiBnSjCF2vlIpGTa3M+7SMuTGVNKnqREr6zMXsMnUPNNuBys7hP98R5C0yKp3T9pIsqs igUeDIBhsRpPakxWy3VjKp58SXVTarANuz0PTBYfzRs4k4HKrGqsW1TyKQL50xWKg9y9t8J4NfF+ xa2asuieWouQMoTyunqth5Wtautu1VRFVyxeR8DEljCYeQDvyGyXscXKJsl8oFh4onPg+1YK4xfO 716sMgQh2kAp9ReJQq4u9SAWhetiejlg3yV8wgMmZ6FtjQeUvamPHydKOfMn1vSJdWMGYY2kdQqy 7Cbq6x7B2omQr1O/RVrG8jDEWOVZmZwctwfqjKXuezHEzLKPj5BkC6oEoThsxgSV+RVLT5PErP6K vU2IndyM74wzM3+/uCiau8X+vbH7Buk70wErXD1bEgpJLvgu8nRLimrVSG0MJWMRsCMqsAg1bIxh XZ31cVZCzFwTOY2DiVUpisGIP0XoCS1EzK/9NCOMSaw7tlGIlb4se6SauYR8iwFvYlAUBv5s7Tz9 IfMXnzTd/O7qjnGIEphfNW6Wr9r0HnTT7G0oKulqJikRR3Ls3WcsEbEvFUhYuM8gKw0rypheFDYE JrK9UvvmzKWXlW9hICmN3xASDhgMtEr/1s2DL0yJLbT0hbaQkb/DFlwDT2mLPqst+istOzGLwNdn oTcQEBJa0G2FliY9JlKnWYsBblFev1nhvc4TQdN3tSxgtpMjIn3zvhNXE3O8I6J2lS/rL98zeHUD yBx9esmz1z9YmdWHLu5UIGX3cdph8CqHPRu7sAoz/DLoeWP61mqq6D+ILSJb8BWLCrfEVYiWc2Zn IuYZsy4lQ3J5BwtwGSRbUPY+e/ZgIcv4K5l5uWDbGouHONWAXAiWiAoHfcasFglyes3DwxBxjz21 NufBQVUAsZWyGFng8oR4cRmxqXGUM0slsYecxaRzoKVHLjpogVwtKqWd9/F+QUz5Mhu50E5HIzu4 IpyB7ywdHpO+MbyNRyMEmmY+jtL74htGB63jmz3TlKxu6JZaBkvNg/KkvRiT/kVh0bXNboAesBup 8UQ+cReLgWWA7dWJo7TCDisAzum4DtgYIFeVgvyhMqS/ghJNFqwV/UQCzMqDSapZBBQ50xFQHAVD O5OUh4aq5bDe3S9X5WJngr/UctVOAiOQgIr8goJohuBH5HQLSWmUIXOmd9zqAZpxBVNkFYkTShX4 3eeEuq4puCspuGvMMHK5NBudg1AqOHcawrwvXLwE1XnEv4jMP2PmuZHuc4tZLol+lhkJdYjtyN66 ENiR0G1KY5s1BbTHirGzNUjolBgSuVMWiobmBY1UVW1cRkDYKGpx5HQj+zI9srqkiKqRqDQAlhjZ DCwya9Y8YovCIFwcajMvaI/3zgutqaViXNYJQ8pGg4kNqJAmJW9MjKk8ZTNeCEuCpqNmmRXHDFjJ EZo4NpAkIVFmvuNjsY/Cbbxunghs3WRdG62LeziOODwI8iIZMo8kDnpeNRb28FQys0eirDsmgDG2 JfvT54odMw9s/yb0wIBhspAbO//GYgnq65NXs9+8PljiBDP8nK+1r4t5sfBBOVls2mE/HJY92YqD 5AYYz+xbBoeFVaOsv9ZQqzVmusbl7PpuA6PKtmXSFOtjQhTipOsUDkPbI3lFG+bACjSK23VK9T5v eWwozcaWMrToK/rlbIWnTWpNH8OHehBYKCZpEa76ds9eaSyV6f6RydjFktI00JXcF2+9YITIs/YV CF0mXeVfUuRyMlMXK+9OZPcYb5ljK/WiC2NWjtS2vD75Hj1irvUXUSds7pcc4eKRcnZ5j1Mnk42Q hE81A8xRyT67AUz8KFdSbws7cI/Oix24JEKB/6gJmiEBJG3ssTXTGXOlyWlsjbY0VGosibg0DrFE nuyrtMVv2EjRGXscSnpEpxk0WJ3ySk1JHdOwguNaFVcMFnvpNoL9AGlg85+VQv9m8ma/05OsmDUd L6w0hj9k+SanSO/udVt+MW0KHle0ppH3Mw4lvjxJtlgO1Jmvm30bPLKuy4qWi0NXt06pidHdEglY buvUcWgWGDY6xc/K7ZaIgAlFV17w4cZb+Tm7VOUh6gg8NSMysUD6cRvwVi8w9VFLyGVRai7gKznB eXDhvVk5CmFotoFYi6v5KIPyrnLAunjEk5XZG9ac2fTEwglDVmi5ANvS9J9pHaHMT3YdbwaVUbea V3gRA7pRTmZprVbYsUcxRODPlY4YJ2UCJhU/zt9kziKucQLXzAVhp+eaOF7THjNtulMY7+puPdPM NNYllOA17hC+M0rAfa1arvD0V4VHEHOQtIVprn/slcoOEZZHkkwgf4djEwvCE4qTCphCsimsYCSK DHMkMc16kz5AaEOLDlof+xTIqO8t49i9QuHh/eYLr1BHPOHmbWuiHeYNT4wEEr8+yTmWahjY/94O Rb2KUzyVXxjtr4X4EMUa6DP0OD18CQQouqxsVxsUSZx8yjqZov9WxN8gvgFaTpfIBoyl6HgIbKvz uNgQ1FHPinOco7u1h7WgDo1BOindk1dNZajOW92ahlLCOYPXZnULBr8++c5IvagDHYpzZivIF6ZN r4jWckUEAWEDFcSBiEPSka0cipPD/JBGtoH844G4LUI2F4+8TEuIrOuaN+VEwBIkX4y8Yec046qZ /eZjzZawZ2Txx/eSdDaQRur3M3LY8qYgMz9WYJNN/xyhZprsreQTemoD/BgWO1giB5KtpmmJvc3S fQRsK9lt5W7zwlAfUsGD5VtcaLTRgFl00IXTlUBtCmFknclHV5ml/R9FnhLBFZnCtsFSboVlZDMF C1so29IjYAkiOdrbRCSlXBkRqkjidCIuWyAvpH7j5BX6T0aPE7FPsi9GDBLTGveOWnsKtmnZqyls 6FtyWSG+pi5lZbLtKKGaRBhz8eHD1Z0t+f8vY3tUZMQhMWnUYhnxgNgh20ZkD46VHkTc0rjxxn/Z RXqwuE3qmEhSyNcEpiL0RuwG/SpGU8pC+luXioaEU8ubOSJaHHuNjw+4X7v396hhRpLFMFvLDRIY ZtsmkyuM9Vd6h16yNtsa6z5Hlhay9BLF5hQhSNicZIy0lKHWkoqKgCUUIRbXkzYXH7TsaC973tAR Ac65EuiQCjZa3nxezUcMkmtFPTGSyOimLMlkqZopNhQ12GT53YsvmRYJY2VNCG6jfkTshK2Sfidu lTbMJiKpV3wWIqMCBGy695nyAY1Zn+HeKnjC+yfRdQNs0qctqj4thmXQlSz/0PeIU9hDxPXYhuS8 sSTHDkz/YmAim5kJsDdNLqGRj4llazlfR4i7yOGb0SVqJHEqK+geJe8JPiUt/aJBbHHZjmNGk9hy QMapJtQIGZTQ95hVqNI763Xe0UPabMvsuq0p5nxSH/l0cq4mmeldL3vgtFuXykkGG9koqkEwzCa4 CFiCTguTs3DO4vJQeu+c08RrDizrspVpTrs1U7fgzyZTJ5l/VhrwcjMRWJuRLLrIz0hwhu5l18sZ ibzLzsxIjK+z0xQzP0mTozUf1aDaKUL2iQqK7cP+ses3ApZg6mLk04zEOL40zh2fSxgOfPQj6iaH c0ZhJ8fE9196t74MzkeNCvr6Vta9ROj0cKnk95sBTSEC19JDqXoJNRAV03lOpWxwnBsJpVi9yT+E wBLUX6hUR6TISLKGR5IpYyUZjqCHXFon530mwuOGTLboOZ7XpZ4qIpmQi49JFmJACC5Idvjc26XZ NU0cgdppqlZ/NRmmd34wV/UeeM2db8xvCEcmc6Z8iatQGDrb6Z25E2hpCeHbQqwj8iYJHZmKyFNp XvM6WvGgESyR9S0rPd/LEhXZkbzDRwix7XyaKmTEE3VT3pbeHNh0GAFLSPTCnjzd0VXy8gL5opMZ Q04rTTSUd3QVaykHRw8LKz2EYFqBfclPV8ngpOVG6jGZdzhePy9/KBPFsWGNc8GITKTo1h6+ZoqW mnjINxl6Xsy1BJwxvw5wNqgzaaueepQI5VVBdPByttXbF1xc5zYQrULTADlr+XT1nRhhMlVsVFx5 maCF9Y80Af3LBI9D24CYH2WImgjrSqmX0zdHvW+YgaXYrO8PG4oISbE7y9XdGViU4OZG5nvYTJni cRAvy4EawEw1LpajqnmTl/aYU2HFP6vDFZ8CwPc5/AMlbtcKZYwOW7KAvyxsUEbNIgsZG/wEv3gR PA3+hnY8AUaVFSTamd+mNdos1E1jep5G8+qBcEgbgP0zzV5ZqqtHPjAW8feJ2iGvem46z7ppEp0T QpVtiD2t+2UIyVI6K4twKBTzp6LbyX58zGAELC/bHtuwZNgsDxMfeGE30aMNKZMFryiCpDk4IFM2 KQIQl0ywApVIxxENmE2Bx5XE247kanpDWpxNgbgIQ9RJR3ITK5/buyZasmunab6xj0K6mCm1mKfm 2AdLkIw/4YagTDZ6aaRIQYoo58w8nhE5OZPVwZQB5POIsp0shpuTuEwaRDxbI6W9j0cSMvz4e5k4 QoizfzGBLnNFT/HFlgu+zEm5LIFQyNMc2s6FrqxVyHtIzFugI2CiKNlyQ1sA+DeZ04I1sxRyfp2e ZCcrZjLK1xwn5GV+IdKS8TpeM6cMg6fOouTVz2Dk5Rg+KNjawzPWPCuCkIOxOabjQNdYgJ1Xbi5m eonX4UNM6NtAWRKobXTgPTPSSDo6kx4y9RqSTVRq5FyuoXLW4xonMLCqGwFTVT8+wt+8Z8W/qmdl dPxNBGFWTeRvTKOUTKhDZsrGBeod+FV3zcyevzFLusLBA3onG5X4Oyt5DWFU2aA1jxaLExZIc4tf +EUEjcXYx4NG9X/SDBkBR1qmG97XRk4cSzVDftMU0X6Din5cYt6QChKSwTe1gEL11Qy+hndIIOhx v4IQ10ZTNoXS4sX6gSrmCOMtRmqlmFO+xciXg1cIvGW/3rrcWWKvmUSZ38qbwBX1QI/TcbHqDtx0 Lp7sgbj/rEROlor6LL9OLOq05YXSmzL98sqQoeKtvpXpYkNAmXFxFb6iYftKDGyTZc2n+isoPjSi m1uxhK4ppy7TAt5WE4HahCPcCzP9cC/KVZjNfDSiCfy+E5VBnUBEbsQioRF6suZCMqpNMeehwtnO Ec5FaEbc5D0T21Lf1LpTQkAQGJIXmvx/TH3LJxzZS4+PCZHNGY6MxErS37y1LgK2VRo2p755SzKv uWE5Oeomh3NGflvWJypeyB8DE24dMT8iD89OfZtVdvlMrw4lFy8cz323bLyhOJpgz/BysqRrwV4c EZ1I5jul4u2BSGvIIjmDFtDbfFSdXA9V1PJNH3II8oGx20I+zRO33fi2nXywx9x3w3de7bNBm37z fnmlZuwEf9PX53kx/T3KK//eXxIDUwFl0OBdwr1Fw2wRFNRcG2i4NmRM7wMN++wuaHunrS2S2LMW UJJkY2Bv6ex7/jffim9n34rXBBfu/CU07Ue+KFEMeFsZqziLWj4aCfuo7gESBTP+7Madyatk+Va8 vdOevdNzXmMhz/Jm2GF3az4nz2yj7IamlQ/NEx/Il6oRbcraawodhCQsvViSyLqm4UxN5jdq29Gd a+tY3Tf3QRL3bNAGSaR1lA8lVy2r9IOhyK/QQzJ76YEzx2LgvFRCBs5+QH9G33rGN4rMwPVOe8bA 5Vz6k4cxQG7kX7y67wq4X8owg/75nsueAJMPC+IJOu63asL3hBVDsGQTu9SBOKEm5WVq+t7/xHeH JyXxQ9oAEhvDa1T6OUTmcw4e+PKyM/A9wjHHiZ3Q13GMisqIYyIgri3gjnu2CNqgILzlg1udgbiJ Y0KykEdoM9UDjn8okJztKsexiH/0xzmGAJdjOQbHzwhDUxyTxR/ewMcnWi3HbFgVcow3iLqcqePW f2+hrRTfTNrgaRbQtpGXmKvRsPRmfK4toKN7FgPhNYSxSq2r+Qz7Vm0Q2gbURI9bGbbVDTED5szS 1t7ptUHOe9LoK6QVUzhXBvmGWyvvh3SkTStDQF7zzaGUMmwAaZUBiCZJ7BjGBGeuDGK4jen2Jtmb afEgnjNqzrFTvi0w0/7ZoO2dMfLlSI1KZLoDQ7FuoUObDGt6wwxjr2GNnlmbbO/0FloyVoN82G5m olNi3/DlmdogmDZUaG7dMoOf25Xr+/tPVx8DLxyMawtc9tawGF2VM7hEPPfXP99dPHwiz8pbdWX3 xRRqOwsmLFN/y/vWrOpYBt16Pxr6W+dbMUuTv3XPBm04F1r5bpI4F/W3qMfb0LovmSYSXRGXTm41 dLKRI0V+7J2eaXLO/4io9atHbBV1AawoMGdzCrViqxzTAo0y7iXHtE1wO/bGMUxeJn5rilSdYr27 ungj3x1z2hUIg9pWlh47SmB41Xm3gi8OnRu8fcXTGnS/Uxk7QyAoBT6/vvzlis+Mf7p7c4NUmK6Y 7P/xfwCSa5e1CmVuZHN0cmVhbQplbmRvYmoKNjMgMCBvYmoKODYyNAplbmRvYmoKNjEgMCBvYmoK PDwgL1R5cGUgL1BhZ2UgL1BhcmVudCAzIDAgUiAvUmVzb3VyY2VzIDY0IDAgUiAvQ29udGVudHMg NjIgMCBSIC9NZWRpYUJveApbMCAwIDU5NSA4NDJdID4+CmVuZG9iago2NCAwIG9iago8PCAvUHJv Y1NldCBbIC9QREYgL1RleHQgL0ltYWdlQiAvSW1hZ2VDIC9JbWFnZUkgXSAvQ29sb3JTcGFjZSA8 PCAvQ3MyIDggMCBSCi9DczEgNyAwIFIgL0NzNCA2NSAwIFIgL0NzNSA2NiAwIFIgPj4gL0ZvbnQg PDwgL1RUMTEgNDMgMCBSIC9UVDE3IDY3IDAgUiAvVFQ2CjMwIDAgUiAvVFQxOCA2OCAwIFIgL1RU MTMgNTMgMCBSIC9UVDUgMjkgMCBSIC9UVDEgOSAwIFIgL1RUNCAxMiAwIFIgL1RUMTQKNTQgMCBS ID4+IC9YT2JqZWN0IDw8IC9JbTMgMzEgMCBSID4+ID4+CmVuZG9iago2OSAwIG9iago8PCAvTGVu Z3RoIDcwIDAgUiAvTiAxIC9BbHRlcm5hdGUgL0RldmljZUdyYXkgL0ZpbHRlciAvRmxhdGVEZWNv ZGUgPj4Kc3RyZWFtCngBhVVdaBxVFD67Mzt5iUMRbUsrdfCvIaRhUq0mFrXbTbq7Tdium402VarT 2dnudCcz453ZtAl9CoJvWhDEV0V8Ei2I0GrE5MW+tFSoiRSLICi0WEEQ+iAKfmd2sjsbkcxwZ745 9zvnnvPdexiivmXD9520RjTnhiJfyc4enz2h9X1HaVKpn3AZZuBny+Upxq7nWvzuve6tU4otN/Zx rN65Lb8yNSswwVrB8GqBOUeU0omUYdMXIVHf67CPng19xu8DP9CsVnLAnwCrsS8gPZi3XEvYppYX xoJWFl7ddpK5bjXPMba85pwW58rXHoz+oDk9ifcgcj5XM8YZPwX8oWlMTAMPAa/74eFKm5NOt5oz 2bY9PVQXR2Zi+/FGq8B4mCi9tNiovgy8Dfiie6p0LOavmEHuBPBjsN9tWEXeD41I2maHxSowfCVd eBXmgyOdrFnjE8DPAi81vUnOYSfwcjA/zXbmf7/YyJWAsZacPmMcLQNvB77fcvLMRxx5wA/LHHMU eMp1Srwu6pXftIKoxgHgT8NGtRDz10NRZd9HYP+rbh8pAkOHzEMNUWA78skUfCc6T08DL4lWhWt/ AviSISbywIiZ+clyZ1hDYEWhl1IGWeTRKTxNcukf1B6QTfMR8klgro5vh/JguBgCwwHrNNCvFGKe rewfUBM29mVGgGcZQ8T+GtXw1fazMcuII96OfMxN3BziuLRIBnjtle/EPE/eIevykxgH5Sn5OXlU HiNNfkE+JD8vj8M6Jh+MfAR8FxC1WwGveAdR25HeoFZPPqvIOYSPQz+D40UZBsjgb0RoRsyEGhd2 tQZ8/723l8Rrtnn9nT8S6nBtzbjOrj4JXzqWVDvSv7ZZ7cwvmduZNTxvZm4lqtEyP2Zu4b7ZU5cX r2ajPhuZbyjL2tvYVa+HvbEDm1lZVO5EezKHall93lFWn5VsAYd41mF1aV8y4pXzyzs7vAXS1uRL r97ov3L+fzVhfVhnixKq1N0Lu3z/5MespvVW6V6Jlob0i/pd/SP9B/13fU3/AOg36V3pC+lr6bL0 pXSVNGlFWpW+kb6VPpO+wtfnsK5Kl5Fb8tS1T1nn9CDT9jk04xPG9fApDogVYDbXz9YNpc5grpsp n+3NK7DO3RPdWUs9rO5WH1XH1YfVx9UpdVA9oB5Sd6j7MUbUgroXM7s7KnFPsdY23mW8N/rOptlI q/aOcFYNqCeQpYG7mxf3qN2Jhjip+6AzR+tyeI12d9uIosXd66FjDZpBxTadjbQL8O3gG7v5H2/u SWSXegUny5b3yCNyMe7BrHwAXTjZ04+j3KXKhDKuZElTBpUxZUQ5yjiqlTtUU/ZidgzPiWT2iJ7g 9CiCv09oncN/iyjn+QvCPt0Itf26/oyWxW/S0oquOTykGY6jRVOBJqzAEvNWbZj4H8x+RH++GP1b U9uvmi0x37ZRKnWN6F/6uod7CmVuZHN0cmVhbQplbmRvYmoKNzAgMCBvYmoKMTA4OAplbmRvYmoK NjYgMCBvYmoKWyAvSUNDQmFzZWQgNjkgMCBSIF0KZW5kb2JqCjcxIDAgb2JqCjw8IC9MZW5ndGgg NzIgMCBSIC9OIDMgL0FsdGVybmF0ZSAvRGV2aWNlUkdCIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+ CnN0cmVhbQp4AYVV32/bVBQ+iW9SpBY/IFhHh4rFr1VTW7kbGq3GBkmTpe1KFqXp2Cok5Do3iakb B9vptqpPe4E3BvwBQNkDD0g8IQ0GYnvZ9sC0SVOHKqpJSHvoxA8hJu0FVeG7dmInU8Rc9frLOd85 5zvnXttEPV9ptZoZVYiWq66dzySVk6cWlJ5NitKz1EsD1KvpTi2Ry80SLsEV987r4R2KCMvtke7+ TvYjv3qL3NGJIk/AbhUdfRn4DFHM1Gu2SxS/B/v4abcG3PMc8NM2BAKrApd9nBJ40ccnPU4hPwmO 0CrrFa0IvAY8vNhmL7dhXwMYyJPhVW4buiJmkbOtkmFyz+Evj3G3Mf8PLpt19Oxdg1j7nKW5Y7gP id4r9lS+iT/XtfQc8EuwX6+5SWF/BfiP+tJ8AngfUfSpkn103udHX1+tFN4G3gV70XCnC037anUx exwYsdH1JeuYyCM413VnErOkF4DvVvi02GPokajIU2ngYeDBSn2qmV+acVbmhN3Ls1qZzAIjj2S/ p83kgAeAP7StvKgFzdI6NzOiFvJLV2turqlB2q6aWVEL/TKZO16PyCltu5XClB/LDrp2oRnLFkrG 0ekmf61memcR2tgFu54X2pCf3dLsdAYYedg/vDov5gYc213UUmK2o8BH6EREI04WLWLVqUo7pFCe MpTEvUY2PCUyyISFw8thMSJP0hJs3Xk5j+PHhIyyF70tolGlO8evcL/JsVg/U9kB/B9is+wwG2cT pLA32JvsCEvBOsEOBQpybToVKtN9KPXzvE91VBY6TlDy/EB9KIhRztnvGvrNj/6GmrBLK/QjT9Ax NFvtEyAHE2h1N9I+p2trP+wOPMoGu/jO7b5ra3T8cfON3Yttxzawbsa2wvjYr7Et/G1SAjtgeoqW ocrwdsIJeCMdPVwB0yUN62/gWdDaUtqxo6Xq+YHQIybBP8g+zNK54dCq/qL+qW6oX6gX1N87aoQZ O6YkfSp9K/0ofSd9L/1MinRZuiL9JF2VvpEuBTm7772fJdh7r19hE92KXWjVa581J1NOynvkF+WU /Lz8sjwbsBS5Xx6Tp+S98OwJ9s0M/R29GHQKs2pNtXst8QQYNA8lBp0G18ZUxYSrdBZZ25+TplI2 yMbY9COndlyc5ZaKeDqeiidIie+LT8TH4jMCt568+F74JrCmA/X+kxMwOjrgbSxMJcgz4p06cVZF 9Ap0m9DNXX4G3w6iSat21jbKFVfZr6qvKQl8yrgyXdVHhxXNNBXP5Sg2d7i9woujJL6DIo7oQd77 vkV23Qxt7ltEh//CO+tWaFuoE33tEPW/GtqG8E585jOiiwf1ur3i56NI5AaRUzqw3/sd6Uvi3XS3 0XiA91XPJ0Q7Hzca/643GjtfIv8W0WXzP1kAcXgKZW5kc3RyZWFtCmVuZG9iago3MiAwIG9iagox MDQ3CmVuZG9iago2NSAwIG9iagpbIC9JQ0NCYXNlZCA3MSAwIFIgXQplbmRvYmoKNzQgMCBvYmoK PDwgL0xlbmd0aCA3NSAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBtZ3rct02 koD/n6fgv5WqYob3y/5aj+1UnMndymar1ltTsiQ7TmTJseRkUqk8zr7PPtJ+jW6QxDkkSMmeXMhD EGw0+o5Gk/o1+S75NckL+a9u86TLu+TdRfJjcpV8+uimSM5uksz9e3NGvywtKr2WH22WdlmW1Unb Nmlb7M7eJH87oU+Wl01ycpZUtetrp5M3yacnJ3WSJycvk/9Ojr66Pk6q5OjFcVImR6+Pky45unTH i+MdLYn7fTK5e+b6/+KOF6799jhpfM9nx0mdHL117XpX+u8M8svjpPWjKJxTB0ch6OiKz9Vx8j/J yRfJkxNHmXDGRValZVOGE45MU2Zx8vM8rLqo0irL8hBYrdS2U0CzOLA2zfu+XQfWKANiwEa+NpUx dW6O+TqkrnMSUiVllyIpmZeRjeBENKumSKtayNQ3aSP0epMI6bKqrXdD2+XQ5ijQS7/LybMIqLX9 5GR7hOrvNHla923RJ3mftqCa77wafHvx7uzi7e3708vk3Wsw0p5l4YRbes+Mgyp8+vRNmTy+Roq+ 2/3qdCUpa6QHKiRNWpR933doHYpzd4W7Azm7ZQmUqect498B3ESgFw1HXxf17nek42exIXny6Jna jOTZI8j3AAPBP23XVlneuDt7TXXdpB1WpWnTMjl7s+N23vV9lWN70ryus6IvkYKm6Jo6Q1/Svszy tu7g+DPIvWq3csQnd5qX9Wl9R5ncN4IDsKZHnyc2EIO6YANNcbCBJz8dQyaxUVinm+OkcNYMm3Z2 vOM3Fom775xl0yOWjRbtia3jt/bBavH7fHIXRgFH7NvO+owtyZGOq9Boj1i8qoBWZbI3uwwOrM7u ix+PkweY9YfRARqUomibYISN9mGfF0XTpWVXdgEs8Uf4qFVsT/E+UOzVNZTGL8ETox/UenO8WyZR mZdpU/S9jorAihdcnsEuZnrLHCPXGTEM1PIEdjjUUZjenirmp28gO77wQp3bhbb+e4wJZdOnXZeH bF6egpPSJb9WtgUK2dYHTCiXmTBO4nv8OJJcOD9eu2OjmO9mPXKVNSlxi2G+SnzDfB5WDqwCvJFI lHeIZrJ6EfEqyXcazTxFJx+gsnZ6byzQExx4ICHNUxTUcUZPKO0DlTF58vXL490Dpv4arZROPLQs c3nXpl2PnExxDRi209gBDCXeismcn3aF6FXjtPMZA2ZAR3aZAdtgSPKiS4sma5PGjTMayohuGvIY SkdetFLIy0nIC+WEUpg3IS+EU/L65uTIkxdN5u5LPblHVohbZGVaNXibANWAuolS1wgRo24hApqL fdufd7PBQTwXOyTC4Y4iPsz++TEmO99JsCuXRLJyemdn0f48U+LQjBFg9jJt6RO39V0ufnEG1WqD tX8tvEFuGUK4ATaD+BL/7MXRPcKQdwRCU6HbQuGdRB0hMJx/WrSVZ9cowXEnZYp7hgMVfO2ELKGp QmjaoDoTEjnSCckJekJIoScX1i853tEW9hM24NStI0Shx41wbAR1xs2BRgfTqoo8bSt82b7cLFqj US0/SZwU2FCohOmCiAgK80pOihsnmQSnhJWYnP/gJGy8JUaY9IpKjjchZZn2Pp4St1Wsyc3Rw78t x6d5QWhXiDufwo1JSRoDBm53AMV8lzxcXrRpVjZ5iNem+WLKnsAENJpVKIIGjfnNWIjKWxfz6V3E EFYga9NVK/2RSAIqxIintOe0D1ymHe4WLshwMMeeU5gwWRySg//scxiNqHzDicd/0KsvHazH6pO0 IwLCfYSWo7YoCig+wPSoCAoKTuiG/gjZgJQ+pcgqHH1Kj/RcVoqyK4i18NFbJQL4S2wsu5pYKz9k Y8QjqTeFiy/N6YjZgFNe3RLmJhqWmMKZo/K3xRrQ255lvpAdQfBWnFsEobT5x08h/wS6Pc6clink VRHrgUkcg5i+3K2GwDP2SQQDrYqMx+KxqXtMuRvxw/IFHvlMlsWbQgRlyNHTlxFG53mdVnmHg7gr XBgdNYO70BPlSGXbiGFwA02ov2yzfYyzi8U4g8hsjHGc1CBly2wrsi7tmwaDOEV11rZWOw0hUfAl VSpy1r7boBmwCLuKvGVVTiYmQA3zOqOXBwGphXmmYRKS4HdvE3G8KJJpqzWr/t3q6VpVzfQ20UY6 RkhIDF7k+3gGJAzRE6O5SMEeUWruN+d9ETWLYv7bWaRBgOzKutySa50YpOTfnN3+D4hF9HukV5+o TRtiiJE0QlojpbNzOxftjPbN7iWfKfG/49QnR4/19LWekudH/MDIWCczmJfHyIkZQx+QxHhhhqPu s1Hp8uowwA4Zgnp/x4BMA7JwFONL5Cy850TOGHTtAtNLB3wTR9jo5iEoIlG0iH3H1SkUewJJGvoy WfrqbeurAJ8fO4dOABmRs4IcY42cBbOLBbeqY8zuRmRAR47Ar9q06rpyD76L+XeBOIerHuBfXkIL GQBaycn06/LSfvxOM6T6BNbtFnPqHevOnBX8OL3IoBB/t6hDXZ82DZmHEZIEZZG8w0Co3yEUMQxM 4Yjx0Mid3/BMY5uBlwRcTGnaX+Rhd/T462fqu919EWuAPIYQPD/KBxfIBwAQD36rKH2towySYfsf 9FKQaADDo04cdXhF1B4QIWIsYC0z2StIK7Z19KzrETpcXgkQI4PWRZoRwbOzJMOaai5zN5oaI/Gb 5hVePAAmDN7iF15cQB5M03uoiKBenOslcituAY4rf9V48duSZ+/cyg6OcePiN/eoXly9UgBsRwk4 OMRJYeuN0ysbwvrfHu8Eho6kw55iheVhHlimYVmXadd2aP+EhsQds9M+UNDT83Md8UJxs9lzshFn 1tMVm1xNSc53OmIkoekCxJOf53NqVdZKQhOdnKAfBRZRcC/ENdtKEzsfWWUOCv53NAYLresepq+6 h9agerRDJOGO+w07aNc1Ft6Bu7Lw2dnuJOxkBaYQMALc1adkgeN0kGe1Dxo+tOgqzfeX3L6OIs4Q EcA/yOmZNuqgOsQUlK6qtI8HKKCmaCNZIIDVoR13NmyqaovYY8aZB+r2CXjMOin6ClvJoyNru5JN DJAoy2SmcmMn1g1IU5pMKaxTU5R0snoXfYAvU2jo38AXvatPaX/gLytOTUza5hmKY+Kyi6blHUeW PIsXPFIxmUiegJoPSA808CUIT0IsoRhLThE7acUqLM8gL3HMBUur2o+7trNAkn9xClWGl68xnxuA SW5MJHQRmGbKa9Y7bPVHdzxWQZFMwTqw7zFR6YzdFFmt5lpAoKeTN26/wyoIjv7x5y8Xf7w+/yv9 RwRPQvQ6I+1zCN+thvfgS4FC7uG/uX3BAOkycJYoZHabRoGPPnUB+QD4n+fXb05fX/2VRIhcEM7U BSl5h/zd4D/9OgK4xCYTT2Lghep3A3zyXyfLFCmLOq3LAoGdAN5nYkCHGJYlO/Il2+ybgf0ZwQxV qksWBFNgosHzghbg+OL05qKpIrDbMhW92jrnBzFQsByCTWFtxPLi6uz6nLDm7fsXl6/PEuKSJeWl cCJli/1ecnvxx18RwD2EqHvTZpOr+7J/KI+Z0uK+wLz9ZmOnbDxiM9VJG/ZzDBSBKDumo+7kbbe+ xfwjAQDeGQfHERfJEQVg6cOG1o4L/CIOG+8sTXofnz/2wunLnSkUe544Aj/8tTs+O97pNoz0XX4E DwRk3C/HmV46PP5JoBhKeOARP3uGiIo2QwNfBzRiEHnI2gbYMkOdut0JJmoPKQTcO7uPsmziqIga GPeMi1SAFpDQntERrLe12UB6iyh+4nL3MngSrrZZ0STK30mQObPI2PP1pD8s5P8K5w4LfuAEHZ5x YhonnHD8zB2/75cjuqSw0gPQ5Nb5qS0VBNgE071dLy+H7LZTRTPkeTcthmwRpOP5lYyEomCLDE2Q VmyZgSEys1zIqR0oCjZ2qw2ojCSz7bcLXQO9h1MIsGIE86CDLqmiNJByvKYbhp5oY2RJwJJLt+yf /NOFm4ymggmPECiON64AEVwQbA03fbsnw1xpIFFmRd1DSIZgrRsmn0QSlkx0ITVmFXHLPk2zmU3j ECzr9ecux8akhJecRAAhqJ2e6NUjvff8OEXXnFgKi+cXcSUbcV3JxvA+OptyKz/ceN4OaQ+smhoI WqA/R2waLWjo0D7mU3ZDL7gx3EdilG+06Ah6l1UP/VEsXZgM/R8yz93Rt262TweBnuFkJTUVOcUV wWwDTiLGk9qbo4hHryhJarviDmKBuVsSi6qtpIyximAWCoOswBaBsduf5V0eAltILIRgkbGltMIo SvNVr95s1T3bU3dU2JU8lFlXhELXlKrYqsa6FNbfCAtCgaih6uigKMj3KAOY/6deThed2lmtwNpS dUwhjEtVV50iVt0sS8yCUEBIwIuoOOLMLatCNkQtSE/A24kFmQLbyt1Tpr3GyZLa1aLZQ3dzYur8 QnNgsATqXHnPaZdi9RcTxhRgp1lBuef+1OaMo3c4QyLo+ZEwG6Z/xgknbXZQRlws+y77Ii3JX+qA E6ldDQqOCpRf8rOLWohpZVnuJ2Ow942NW4+o45Ld2GVgshLZwzMGi1kvw6JuqRfzsK+qkXz64Fsf qS3muEzVikRE27blwQgxPg4jvEOjJPeExKjjlgtsp5wkanUaLhf0i+DA5kNddJ78H6ZzlSzYKVze l8u5JHuoyRjUh98+dbYoKojeekI5/NM06Fvf3L+WvB6G78py0AwkmjdUi3qVl4SbVZJaznxVV+UJ BadALrQUdXdEKOuM4vTmWwv5VNWnVkBDQXtGb18TeUXikiaTTDX+cI8gEb0cDMEnie1OEXpIeMSA CA04iNBYW7jX6asykGqXu2Nj1O2eEmuIJRHhG+DgcIBmTVZZpW04Hunmd1VvrdBq2DzdJABlJS/g zCfeppEJ9F9ScFKjKTEd1mIKTLINM9V+B+L6mrXZA1mj+enI5bABCFfNG8vJ6EzA5upc0U5pfQ1r hRDEgo4e+kjUYuRdmRYd+aUB5bskYoeKNuU0oiqcTsSOgIbt/xv/cfXS6CYJrjZJw/gWE7xsUihy 1fpnRXKDRYfjy0xyJckVvCom2YZ4SbKtb57KDN1yxp1kSkipTKXWmlkJjf+uE3WtWvsnNFkrVHbc 1UJlBypCjZxXNnqqCXQKCyIr/s2XmaxTo6RWYpIs/lcVKvth1mXM1/BE65Rlk8kJflzBWfkVLUlo P7p/pW5mReuVchw+2OViHMKcp+6o4SdcVl/JcRodU3lOT9SCBa/2QVcjPCXNy9qI94YmjAjCDI+Z eutonEpZOA64DGCJEdq20CXNKT4N1JmSRQRaHu128ETBLSYIy6PV2nIXMph+cxEvj8ZYkmqhvGA6 bbWX6973tSgj6gdTxPiZfbFG0T6sjbNEbg9cupgNNWdjxtMeD5+7tOfFdjEEUzL76rxTaF/tpvk3 e9Cg2vPhiDawFQqFQ9hzwgSzLMyCvM3EntssDIqB5nUa5zvsefOSXC3LnEU+ZcuLhBPdx1et0P7o EuFYNK85Fe9l2yYKd4zsY9U1KtSEbDcQU6ylO8rUlGuuSQrCfxHy0iYU4XSjHaUUjSu7B2GQXwUk dOAO+EJN8TXuQpK5diGspE3h6DM2bJR2Be+7sV5Cxxz1JrNcLkscJrlfXAZ2oCACyAzJlMnJpNmk SXgtWFofK72zm+ZfFUr4TsY5wJCfD6lDL2uW0Fne32Wmo/V0DtPNyk1uOquP/5IJG7uaab4PU9Lk GUTGZhtVLQJ1VwOqplYadcqGkLDKHhCRRK6MRftvC9jdaFWaV0iSZeFKZHEbZIi8ffJ7vRbn9Fwi MBBFXhCNKz0hdcgX8k8TwsasgjWD5tRt7aL3LyyhcX3FjFWDeNaV6Mhyx1ZGP11coUdcvw3KdKw6 KMRkrvwHeg0YXUN2Ljgu2zRqkhGBLiknNIy50QfLhqwqyFC0FBZMYW3N9lwbxZRWSqFoiFtR11WW frSPEuGWrOCC/bSZeMfncgbbFAl3xroYbOdBuCOBEbI0DXdgFjOXkNgFTCgPT0ERivnRGX5rOyaY 39qikPW39HSxxjCWtmvg5WEKVtNRpmGZtmMfwUGhKYbTty5GaP7DBoqDwlcIOq7CQUeGmeIpGH3o P4jlwctZIkK1JIaVJ5GQ3W+XViaYM7tDCCVL9BoP6xi8AVgqwBb2Ich/N72Y963AIsVkw1cOJJFJ mcGQTeH9fGpP2NGXTzHYyT7EMJiwAiyxI01MvckGUWXPyyrBAAHc7XGyN7f7uLL3t4+sATW/dvT4 4rfXZ2INF4OgmuVUxUvHAZ4S2OadBFcBxqaDo9N8hpRCiVdXp7fv3yF7g1wdvNAmrxyUNQWcOo6Z DeJpobOdlM4bvlFh9JAameyu+wgPVQnwcsvI5qxxijwJ4Ae2OTRGYh0W6evefOWtkACYGOdIJnUk 8GOIiknARuPoIDabWyi3c+Wx2jHWkV3X+0FjeqdDxWtvGzaeqrq0KYy6EkttjlMQGcHWqu1U4qt9 VftEoIVlUpsXStDe7jxvW/DiHVsOSsn1STlr6/gyY5rceybboKnHUSbPmyZ2wHW/JUBNmBxxZIM5 8TtbD790pOC4LJkFddAV0WNAhFidfkw2WRawa70HayFuCCWe9Y+P415d+Jyyz/daHQQBnkRqcB/f 6OsMHhHRIc8+FAvCOOvpd4O+0Zj1xc/OjZE3HuM+9A2Yz+iA6Ohjryw89ANpBfYyIb0J4TMotS8K WmHYEHk8USmeemvMCdPSlzi3+N0D+5hL6keym3wNA4yQbp95msmFHDDjud/JEqKhbEIaKPRET2xB xYxFz1okGHmt0BT3t2TuCl4o4xsc1TiNCLC16tAiq/nOAYZ3oInPh33crxMUVKH2mRi4fWn4YBuN UCCsWG04osrAb0wh7QgRR0whR0SGdkwhvzGFurZbFl6i77Rpiy5E+J4eqpRSabEo+5OP2K5BFbzt ErlDF3/gxDTVkPH6cGQKJMrdpzsC3i5PIeqhZFO44SsAh4IysxcUhl0TS4Y+gzvkF/d6aMyMf96Y ydTmvUFVkaaSEDqYGsZlBhmvyYMz2M+4xJwBL11S0Uh4PR3IbcJH5HZg3edfKc8eumljmJeZRTES L6GxURrIyDKzklhRjLe88Ky7a/DmxQ2cl7GVj410DXk9ChTGIe6LbVlQl8E6PQC2yUkeFTVLhCVL mUvgLZ8rCgDHsIxFmbwn1PNRsRDYJixRgJWPH0kKhrGXCS5GvyAJYaNPAsQZiT9Qv7HcBNU6t1eV prqoDv6FjwssTIjmp4pWtsxqVNCJwIjR3M4COjjZNYUez2XfBFNgXtR8KiSgrUdpsA+tnsargTqH K2pyfVXBtmqAS4zRPtUzE7aWvHSR8fG0ENgqo63esuAVEYhcZHkuZSkDzgfRSMn6uKSWexnlkI2x KLOkQr6qyRcFwBZQ3gOrUdySCpXUTHUNFQD7kJXLsbDYcfl7mIir/YwTIo4FlCtlc6H8zfWUaaa7 0qs46Vx6jI8IhUgF7N6bZCScqgj3y5YX6IIZxoBFjEQl4X5JefPHAOateBV+Lusu27EoMvS+cYse 0EYw0XqCiGvvh2EK3pgj60JUj/UEd9lR4Lf2IYTiN3kxd1eeVTi6rNA+0xY2vugp0Fw4wYhfuBF/ VNbjVWyHhTsEZvQlhQuOBGz8nuKluMs4OykX4S4Z4mV9KvqaaicK8oopvQI+hlYoplAF3rgra4z9 FNgmhULsVz8Ux9yh2fJcSmRSTZAbPpYA9inCz5fdoKvnIydkkxm3p+Zq2X205OFGHWxJiSsrERRx M57Me8nWeHkv5DtpEyxnViIeS6RCa81PBrlbpqpLOWUVyjkdYV9CpqWAMWT959YCYCIhkcBwzNjE kk4sUBj4fgua4Vmpw3Y7VegWWjUsgNBMfmMF8LC6JNIWNHx49nNtQj1p0hv6zWBMxTJ55TNh/I8w OPLGkkcaiscUkKIzcpnihKfAhLwzS6bQ2KOAQwy7Id1TlsQxuXi4jyAVvAFHzS6vfgXAQHuu5utA iH3FFtwRb3lpG6RwQD55BFMm+/7wTgwpYi+N470If7BprhTzALcNu9T+LVuMtZpsNdYy9u94boQV c00b7kLasOYOVyz29G1cu+sm5My/dLpFPOWMcD1AZEnzrEbD3lLwYVDe3h03Fg4nciAa4Za4Tsfw wU1K3Bn9kGdOLV8vb/kWbuyYZVbbFBNym0bOa31D8dnsG3ilwfrfiPGkDqyrKFpdh7YBMf8B3wDY gvvzYmweA/Xzi52YtchRu75nWygY4r7GuCJk5+Wg7cD+L0LJqpcypO2wYl6CjdyiKCHNlMcLZswT UvkjZgydWkjrSz3ZXlpfQ7Nl/ZclZClrdsVlVBtM6kqND7g8RFUGXNBYRkNhUVvFEXMERlgjvk0Q D9PI3HSl51TMSeC/Vt6SL2rbg9mf0dwS9MASPJe4WDLl4I7lesdEmJSYKIyAGDBO8XUI38fmRSby CwF37yvD+so/77kOX7n+cFuwBuwupmACSwQ4EpWNluAcoiIjGNhlucz5cELdV8jlZIT7EhFDwDfL +cj8RlgrdqCVb0VvhbViB7pib45CxUiwOJiBTbHiUxcxQmgEWsM3JFmFW50zR2oFh9/aBxVGbSXa 3JGS8YvFITTU2/CQxxSc5tVX1IJX8vqWTNnHIJxpBTmmj+giV6HdRS+mwDa7yF+2KMbgIqdDfIBm qIvcCmxFNZyL3AprRTXURU6BbXWRH7lCCTzRB9EErBbuQRWodQupwdehCTgKNIHjiiaQM27lExi5 mxveTnYc78tBUwX/NoltXsYM8WBCxuUxno5JRqyxX9dKpFtMl+EzCy8fsYzr2o/JjwiSvC/oPiAe IHlfupI4ch8QD4CtaLIZiHjytOCLJT1/M4GvNezRMmL2R1r+a+2+UXcmAe4yaT3JL0U7HqONH7+f 36lzmbSaSp8A2Ap1h6268e05hFZVEgF+O/mwm2rlcEu7jS/UScHo8PLrC9aWKv+0EvVx/MnKWNF1 7qhRfuWrLUJF2auV8Ys3vso7fHlvZVqDOp6+fcsHOBleB2S9z+BBje31VRrVUqk+4g/c8BUPGf4D l6FSfFRTPxUAk7lEYrxhLp9Nc7ZKfiOtf0lUSb6sza6goR4mEyxMDoqdfRg/qklklSTGfHaVRDsL mt2mBc1q3pm9p45duIB697RFJWu0uiR/FADbKlbTvPMyuWV/q6XS635jTP7oSWQIlr28yCN/funD xVOS4W1JUWoADJrId8fkI2bL3xli3fobWUxJlLF8Rd8ko8aFpMs4feI/5EOyDZnlKOm08X6o/3vf h5E/jFLxN5MO0Mr5Oir/rKP2BtQY8+3kiD3I9et+3CDC4BhHghVwyx6skmaiOVt2ha9ZD0AT1Vmf s5n/6zwuJac2UvBZ/HSAN4q8TklGNZaY86HDYOp9GtB/Slr4BnYuKzjkCn0+URjITT6vPHbaufU8 axf/xqndtIwfUZs8Yo2W8osSV9w3cocUu+mMOxJ3SubGh5CyKPlbPgdDbCtJY29NMhiyuYZCyx+C kjkSlEbKglxJonyOWMdcde/RsiD9kA4fwg+AOeU8/NMU3nYPvuNGuIG+naF9MA7pR+AlHUyb8IsT 5ONOGXOGJTVsrs7pgIiH+WAvdgMKqew/QzP/ws/nXLLa/UZOO1dsxdWX2uex3vMvUJkoJZamRz0k ZRQKmHnx+diokm/Ey+dmAuJF7BnUGD7O/N3/Ay+5SUoKZW5kc3RyZWFtCmVuZG9iago3NSAwIG9i ago3Mjc5CmVuZG9iago3MyAwIG9iago8PCAvVHlwZSAvUGFnZSAvUGFyZW50IDMgMCBSIC9SZXNv dXJjZXMgNzYgMCBSIC9Db250ZW50cyA3NCAwIFIgL01lZGlhQm94ClswIDAgNTk1IDg0Ml0gPj4K ZW5kb2JqCjc2IDAgb2JqCjw8IC9Qcm9jU2V0IFsgL1BERiAvVGV4dCAvSW1hZ2VCIC9JbWFnZUMg L0ltYWdlSSBdIC9Db2xvclNwYWNlIDw8IC9DczIgOCAwIFIKL0NzMSA3IDAgUiA+PiAvRm9udCA8 PCAvVFQxNCA1NCAwIFIgL1RUNiAzMCAwIFIgL1RUMTMgNTMgMCBSIC9UVDE1IDU5IDAgUgovVFQ1 IDI5IDAgUiAvVFQxIDkgMCBSIC9UVDQgMTIgMCBSIC9UVDExIDQzIDAgUiA+PiAvWE9iamVjdCA8 PCAvSW0zIDMxIDAgUgo+PiA+PgplbmRvYmoKNzkgMCBvYmoKPDwgL0xlbmd0aCA4MCAwIFIgL0Zp bHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBxZ3bcua2kcfv+RS8lKo8NM+H3NnjrY1dG8de KZXainOhkTQZORppPIc4eaA8zN7tI+2v0QAJ8CNASnZ24/jTR5Bfo9GHfzcaAP1T/n3+U17V8v9u qPKxGvP3t/kf84f885cf6vz6Q16afz5c81xZ1K1ey5eqqYsxH4a+GHjwbfblZd525rb9c/k2//zy ssur/PJ1fpaf55c/5v92aXoMKTVTWYwNVJRYdv02h1hZlFXT55fXKbJ/ys9+93iet/nZq/O8yc/u zvMxP7s3n7fnGS30S8uld/faPP9X83lr2j+e57178uI87/Kzd6Zd78rzmaX8+jwfXC9K58rQUQra u/LzcJ7/Ob/8ZnvEXd0WbVlW4YifKb6uHopqmoaQWKeKs38O66Kb6qI5RKzfV+yAXsuy7PKhb61W t8ZY7VMaR0OpzZuxgGJZP42cWLkw05UlYpr6ohfhvzU23LZDm81t93ObEeckz917v8Xcbdsb4yYL VXenr4puGhoGNRUDrFaZ86jvbt9f3777+OnqPn9/B0f2ydo4jTy90Q++8PnXb5v8q0cc5/vsp7yr hmKq86YrGgZR531Ro68JDxY/dF3tOa+hgtE8RZ5T3IPFnstm6J9CzgOEKAhNXd1lP2MePwoeVfnL C8Wf/OIl8nsBRPC/YRzasurNnVVTV0+FWN8AQOVlVqLyvh57zAB4GYauavsO9V4g2328KxE1xKqq aJ01C0YBnRGMsnYNRl2+OWcQZ+AJnwzcQ4YsxMKqHou6Fys1/QjfDgu7aD+AMRib0dFXCll/M6AE HE35mcKUttM1LUAcbOjdvxigA6yASqCMT6Bsys4+me/vDdz5v/3O/FbbATr7vBka37UvoeBabhwI 0/LbYOCrcFIPTVH1gxOwN3DwYy3gTPGs0oHT19XNLTxFA0xZFQ3RJBRqAEWOopFkOlqVbdF0QxsS E0voQIayzNbM5pZZJS0R6wujnv9KiaPBDhTUfXsLWA7pJgNsU2G63XRqvBuyDcnC7tXNDbZCgJyD HN8fH66Isn0msZbLf2xY9krBzTght9YxsSi4bBsUnCXGBhN3mOgLOsLCXhCf77FPubzRP1ioXGHe L7Dsj+eZ/MHnpDG8RwCXe5iu3Lu/t19+5hoLdb3gFTO97Mz+5s5SuredfuAhWPlNSo1djXtXpRv0 06LWScalCNRLuuQoVZpx6R9raI014n/GPaKqoNFOfb5LbN8hKsC/kjgZ0NpIBSsX6DGkmKtWJDND 3xDXvFEKzp+CQGioZ7kXUE4k1zTFOHRdQDVhcGf/k+CwmYppWnGYopXiq22Ksp2agC+BkmZvuLjE Sx+jfaR+MJirKKyIf3me1w7x32K2XGDMALbe/uEsZcN11RRTR0KzVonx283sfIl8zqPgRvzOupDx r8xdwbtw9Jk+AkteeFyBSN01RT+R/xheFgxBYPu4+wcNcxr4/p7sZugKpkP+gJ+p4XoYsec+pHXE nlHwRzhFZqIwXMdJS2CH+c7HK1AOCHN3mbHExdZIHlTVodiCEa3i3w/ncQdocKZq6KzRWh2kiKUc wEIa8kapmuy0PqY5vp6EabvUngJqPjFxzY18zzG5mP07bBolJY2saonK1TDmZD3z6LfDoAPOlCTb tiCHmhZqsRm5I5bCuK5kFkhOray5YLOF6QdEic8yyXLjtMRElLUE/h0A+QKnBRxIMBSuPCNfp86I se19CbjUeTd4/Ck7sxp7RGX4miY84ltEeL0AwXC3A4lOXddF11YEG6NXb7z7fJDRXGlHV+ia/tSO brXt/XmGUSk7t+T4Ago3+hw5yvz0o+Vb7zzcXimRVzPvPHnD77N5oGRVQgto8cS7gl7sASsF831z DZXn/GDfJpqpLaYReQTEBBf70+lUSBZg/OFMQFDnHvD9HolgIpIhIh6JLfwRBIsPpgUQ67IDln0d BSC2Ti/igFhZEOt/zbxsj9i+jJe8zKOVDj0LgLnEGMuIS7GaUyGvh+cKcU6FDtJKwVc7yVwy7w+S SsFqVxd1LcmPR0uwqz2109BisNN/J93BFLUgiF3yHVekHEns5jshm0+mKXxiwlVppjcAjtYUmVlJ E8zFNVAzvxhK6jgr9nROFXrnCXuejgXm6FUSCpOpUe+0MyM770pzQSWrH0vChQjJy8oM4G2HNLVf hPSo0KVgpTj35lavBKQEmBTxrg1gIdK4OBqpQ/UCKx4jmwYJ9u1VpaWsOlvRMqj/I4RqkGnTUrPw Nbs5lANIYAGKMsDQe/FoI5U5MZJnlK56088isQOzmezXqlzlVK6k7I+fUaj3JznfGVPSdmxbo8dc p9qqXOVNZidIv1VCWiBj+s+PtQVyCWs0Zacet/AF/0wdNlJ2ongZEhMk0rLTfiZ1tOxEXAw7eS7H UnXqsbFg+MKxgYUdcDLlpVwCPQDwqHjwyuLC7d8NFChY3D7cuCRIG+zDgEZcNS2LV8PYrVRzlLcH zZe09PXpxnL1KN1nZ2+kEgmiK8sKbgpgt/qDGx0T9+P8uZSCVYHSLzYfktxMf84Ib3/6pCxoBunk FWSEIfRevXun3DrsFTXY1FSbHh+K8yw+ApmpY5sETjMGN7eLTiGMq8WqQh3GT+29a80ih50mPpfU QC2YLPMIsWwnRlg1dXVftB7ebeDqSQ57CQYhUmvY5juQMrcANXxnUZNPFKFYZu5mGqP5nCnEtVBR VWetp8/XLBpD2onMtuyrJqyf1rZvH9Ra1BIwC2HKusErO1mRkqrg5O2DjjG0rzRtIae/UlvWfv7y YA3wk3qY7VAJ6+TmncxhENNnZjokJDJJaOICamsKSnUdEVCIUaEOcXToxyy2ZaFyYoZ/InhT2dsW vF3NICdKLeMkxjIw8WyoWxllpybtbt0kNQAmRp2UOX1iApCJSfsygAs0Rp5LzqsTMz6xaD4xFWyZ yiXf0aKYjfkOJ/GBOTeTQqSrEikr0aLfwsp32g3OYrq3rsR3QFyTAONcGS1Edj5hhRYWq2zBkibl XW8rvxBN8Msietv3I4u1wnFKExjrHsZMKKKup5CYDP9w4P+DGdeFCUuXZn8DY6yq7Oxbc+P35tO7 YWSDDJAZ8wJmAHziRVKERBJcoF0wzt6xtLgTl0hTlkXfs2imEklFgwOZedmw1s3ekIAYEtmIjs5n XdHr7g4txpy2qfqi64hZAeEg/XH09vXWEPf6igQ+ICZ6S7CpZEGAd7Zoc2VrORZUMb6EkPu+KFkM tz0eMDusOCqLng0JHawq+8usYYP7k0nDZzkwLFUY+JU5pf2jrXPdHwc0lWyxJmNs8uiR+WbbtEXX g6Rr3rZEe8JcXRjcGVKibKkgjKwXBR0EhhCSPYNmTJItJYSpwnkOE8OjYsTmLTXtwHKqN5ljKwi1 1E43aNk/wa4fjEpGjqSTI2eVti5Hkq2ggy26zqUS3FrgDkiJn7J9LMLsgtu/A5Bg9kvIx02eqSW1 1rYNuZUuqmG/i5ePYm108vHKrFPxTRIc6S7b3KlWgcXVONjeLIptySYIsBFaOilvO3HadPK42Jok pCgyMSlfVW3n/SQn/RzeraCB4Us3qUkoo8MtpfCtfR3An1QNjwpOz26048RSdtgTMSqWrALOtiPG ImyJzAj748lGAk8E6zWIsaYA5fpZtJoATWfx2dnXFjTtH7vFwWJnMuGo2f2Fxffh+FJ4lRBWXXVF OTRYuTHNBfmfnfoxBJNdSY5Fx2QW6tuaJGoexn5MrarwDLkGz+iTX2quiKMaEvLJfGg0QcTTw8rs JfiWNTteArPfFEh7IOFgRQdMDIkdjeSPaG4uBzAyYpyZOSSYZ+pc99SNThSQ2BbgzCg5ebAbYql6 kQyCdiiA72TpiB4JqwL41BIXCuAujs+TaGF+Ru6ajT9aPYsPpJUdjuxvCAW31kLGLuEDsaTtJehX x2klwKUljPbsG0wQO57otcyxh2Y9SjGPjalSSBZ0ubATjS/+w1g4n3F5duVYdOPg5HkAYBNu7mIz 6y5+HnEohbLFOTvFv9K5N7CFoeSpohCrJsXUtFi26XXBx0ivvmmY4l8sLao6tk1SbDwlvOEyJzr4 GRcFcJjBYOOsysyfANfKG9Rj1FcYKh6QnPfUtazxM3kLBrz2ANknX+3DUM3qRt2vaImdsf6zXkd3 Y1xgQfIpdWcm5tgFcfrspYEjpnncYEx8AlByg0FxIYk5BRS9gyxoQlLsupTfx82UrZYsXbBAFgxa ou3URCfs2I6G22vYkZyMXk1qZtATfuQChmDO3rk7z5YLWfU11idYyyD4lLBNk8TP+Q7KlQtGgV5t R/J05i5c78QYiDNMCLEI5RHS335QVkJe5fFMZCePWy4By6X7CGNxUTonbVhXc3v+IoHnJG95Z/2S oRBzHq/sTgEY16IYjeqyti6tFb4ipdm5nNgahvDfvU0miCTqszYBJndhp4mSkrFtVE9PxvacBNj0 42UzG17j+tn1GtFYJK3vKcLVIymgG9eBXSg2ByEcPNrK6pWoCSNaFhPiRsKCTdE0kuyshnhoFfhO 0k21dTFUsV46Rm8vKBABELIvlhzgBajxe2lkSfo/tdU8M0/uxd75oUzqoSaOwZVYP384iuNd2d99 o0+Sifi0v+WSHu0zlgx1cPn9j4DPTMx2hEvFJdP0FPtlm2ugjAB+HVAq/ki/MXttSBrasiNpWGv2 UIxBoYwLdvkEmsAf+lq1aLzRdtyRu49mNRMX5rt+IhJ++7OSQ+hcaAKnP5N6ETkyauSG3tZsjj0H tGj/SgMkI+oRvPcA3aIQ50zYyKVBm3nPZiHLedAM5w9zBetzY9G6om8TiE+U0KXWDyzHlVhR1m44 XZL7/ZPvb/YfqhOHso7EWBklpp7ohx3HpXiu9nMgu2Lrd8xYqonlrxFLO0wsYXmyk4eKTDOWKcQ9 skWSbU9NiT/skNp3BsnkZpZAuO0VDZfWo/SooNqxaIZRTnbJ6KKkDrDUcTJHkstjlBLTg6obqAOz XfYYpZTmpIqBHXiUxHAPV+4vTRpypPYy9mQIlEtg2YtxG8h04qEvFQ0UKxQfFD1IsEAdbVdkUsRg vHEvqpuh6Fv2As2yE1ctp3E/8/ubTdVmXwXsNQzCoZdSgRlL4idVEp4T2ANIJFCYEGH+KKEku6bk LzseFrkF4SGUFjsP45bcsBerGlmWWEhFQCokCkg9fLJl/leu/rh9bpRzR0U7dmPYxdaOpLALdkMW CcaZWR8XwY61CyjItD+56uUOBaPXKC6wmDF2VM33qR2ABnbhrxkT3Twh1cQQCZYEEIIrIsDWONqG qTEEPklGaMcWrSlinxgzF3gPn3gVP3A/kxa9qym3kDazrLnd70YDpj6PQUNZ7ypD2r32Yg19Oy9t yNipxYBERjsKtdQ/9PyQ/gkOqp1V51lMOU3DEVrBx6O0cNk4LdbJBqprAbEdz9HJsuTLKkIVrYrZ 7R5EJwh0K6GOoxfVa6Q0kAPs2jDEZeU24VdtRblGlqkOE2MYMTG5HIC4W7qZ4Kb2npQG7FKzo0wx ZjOBXVIuGSDZiw6SZGDqJYrtUjvAGOtu1ICx+KPEkikB5zFb9gEfJpYSGcZF0WY1TDH5X5gYZHKS enWgeJSQYdm2Xi897WUGcpo4kRnIfATUYUYBMvE5Zwa0o2BaNIeQ2YWrFYNVc7vOSZARz0tQBVuJ 3dwG1mbSSkJJ6zSFXf2yfwSni/uwicMDNTdVVQrp9mtuburDNiEi+3Ia+0hp9wuAmhExSFhm8EQI 0Irv2gKwcxfx0c4YCRD6PGkXc219HhFrvOFXlfn+maMQF0A1skpZy9zDcL2kg4lVKHUndL5e7UKZ klihiheUjdCCzO6ZiQq0erfmqT5ji3MGUyyPUak44ezQWULk8/9SqTCDN0qSqTW6sjNsEYxIRGO7 JJ5SEcd8pfRIoy172B+gae9JYpX8YH7SvxfWULAB+Z091WypzI2GyqZgTrr19LJettRSXMOp4N7f yHjEYG7YmmK2/9EfU2ybyOLG8PzgdppewSGjxTho1ZD9iBFxoZ+Pdinhg8mpkkeqZXmyn9hcFXC7 GQoPuLfOrGvONrnKxnZO1Fha/0wELze53qd2gDGNqgEpYHtDIScVj69f52snfo06EL9YBH/EWtDU x9zaknqzNVbRn3fa1NlZjrN79rMKMjW7HccOHcz8Sl14m99wZgLinLLr+Zvh2hznt40WgXLxEQZh McixaR/S4dpGO9zc3DN5tnFD+8tVadG4mqX9MbfurOScUIWQiGI7z255X8M4eZKQ8u+mdSrkShS9 /DFGi7fdcCJ+EesesUSe3bIUVfbjGBITHSWwVw0VJZl9cx58pY+My+7XgYW+oC8pGW7Yr7OHpea+ tw9CCtP513Np2ajMGYCqytq7tW/MPm66ZlPWxEZdNV0vWG6cRHS8WtX9cA6gxXNZUyEzB8DdZBgJ RFY6zRKgkkXasd1/ArGZt7nZzSzdlCex5GPcfobgpAnXsvVXTlEp76kEarbh6PSuHjkbJtO7w8QS NlyPrSy1NyGxHbuabXjfrohQF+AKyZbakawqShjTP6tVjEtt1SctZLCLxdv2+DGncifUpEi10DGW a5Ji9GFttEjZaEuU4sA97iRvE3A7oANQCaOABNqoXdqQ17HRz+072yT1lIkkW212qFlLSTFmQ55P alu14WDxl39ZyBOt7ccnE1Xt+xh+YXyyxgbA/aL4ZNJka2dqoBYu8z3g7nXBLFCowFbiBRsLcqfO LehMiOT4a1NWhh+d/fCJf/FJRsxduOWTFHH+jodwF+jDkeRUN3+wIovoWzNea0ctm7n9KVsi9hjj lBlvCnj9UyUHgFdyYgbDp5/7yrH+eDAS/+7lzGm9Zv7XE/+FSbFVzM/Z+eXWIVHLn7PYCw4bWY5g /3QwjgBlVqGUs2QxwJIXR5n904eJJSKInc/XvF5r3nWb4uvbOF9VxXuPpoaEyie2E+LnYGROCwL/ 2AMmYiuX9nyTttknvPOEccOpZN+p7NlUXpYs5tkVJZkDvKTiYHbG6HILn/ApN0gfuMCGllMgmANN eOn+mXUAHjWcsrrnoLIZN+WgWeBpdiJqN8GoSM0esrgUGza8Tm1JnDUa9aR4hLWbW53YqtPPU1+5 ZNaR9Pu25K1XJafQ1qa00e9J8Htts4uP9i86cGtgWFZOmUmigc0z7E0zJzIvNUWbyxwqLhpeksnb 21hDCTgMPCdkTHQR82g5DzA+iRjSixLD9CeOvYScRdww5BF72lo/UAXOqB0XigMTKhL+Fkq2uZ3s xwvhjo4/SGHN5n/8uaZTtIQFMamlAsj3a5mwcgufM21yX1RFkySk/EkmjRUHeMaGpWcpmMzsBRoL mUomjVogquTVqe488kFS5uWe/JwjYHIYmFWojlOFb/OOU1y8ibPK5rb7uY1zLGyBLnmO97G633pt +u7V0zvNxH4feamMJDEsOS+vQ6WqxbuMMRSGwPulTr7wgmPOB/BOvIp3abDNtmw5UPM2p+JPnOhh 0rXdz215x1Yv3mEjL4idf+u1vbGtlDvl10yEeii+JgJ8Q75h3mjart5oSmdlOTJZkpf3vpArdiG0 nKNti7HmqCovaEZ+k+btFS/F7bKazZadcNozacv1Ch71SrII4U6e1FjMFXzJdcmbkuRxMr2R31+Q SbnR+hJAQyx8sOfYk8Dc5o12/q1ry6Qn2SfY8o6dQAKsUTxpoGYw80A7OfIzD9Re2YGGw6Z7VrbH EZWuBsrLXjt9ubV5sXWEG6E2NbwSu6Og3o4ulyTAqXpERW3BaY8XtcMV3sNrVgV5c8ndNZC7gNbx PqR05vfBtgLyWFrs8qztQzDkTo5Ey2lomBSEX6CKEYrJU3NJmjx2OZbY1axc3ol84gaLeWdOucYv 7W+9NkwLim0nbw7zTP4pCpegy0LbrGKu1HqNna9t2T5p1U/3/LKSDX9O4RmWrW/3PaDwCm+vWkLJ v1DhG32sFQ5eY3qnGufcSPieW6tkbE7+wZSBTOy9B614Dw65KX7Ne9V5NTP1rbntfmnrZJMFace9 +yWY5lremDaKeAJ+kCs5WAp8PUWXUjmS0rC4qzjt24yNQfMVKKVXzNcEpeyT9oru5ZcsXZrfVjix qlK2MXQUgXidM4UlsgjQksIm6RPZiciA3ZnjxCHYibVkOcAODxz/IlHnCLVro7e5TY5Utv0EXs0/ tU0GLKVxmgQF2P44NIbgk6QgFl237CiDPswLP7DhruhVr2S0EiJp0IeXBmQhTdMwgoIw0TPpeIpd G0nK6YjArjMfZKAqyd0KY84eX7HndhfE1vRt4uzRZ6aERfM2f/PfBECXCpMsaTrizpZn9aJVVa/U jT31znpzusTGgeFpJJ55+l3aFmU6nWfd0oZsCRK8NEos5hco2FMpDHF8eFGwvVr0eaJxmOD3fV21 z1QwU+RualfAFSiYU5lr6f/3EekvzpXhXItUPenLsfOahQVf+nPbIunlt7bNZAgNaFdhes8VvmCM EXDmvIv/sIInfHu1CP9EG2/M73tZArDO9aSgARLJQVXO+UezBOtc6yThmHNt0/d1G3EuJglr55oD xUlUYMgtb7EpR85Ne5FiblviwvzTpQkJDhz5qeV9SjZUQO9JIClq9IODJLRGjRI4MBR7ZYNDGDjI 83hqmGrRII8vseJYnteI70rSYDV4Cl8veI+H5OEn+Hj34cOn2/fB7DSS6B3o5NmJXsbcZlatHIUj nrWLGgk4mhcsTQQZ27Ro0f2QJG/JAaSxg/dZsQSeJynW5HNshgcONQdwcd5cwYd4JvFNcwDZNr9c kc9xzb9M7q1in+SaFWtPvCeEuBB1TafYtW8eV+y6ky3rOZrQ/RSbGNUG4FkJ5vUkHEKZ/wMUXoh9 IYFxXGC+Lm2Q/crMRfILJgtsx7i8u/7rLQtTnx5u7s0ERZeev/9frtZUEgplbmRzdHJlYW0KZW5k b2JqCjgwIDAgb2JqCjY2ODQKZW5kb2JqCjc3IDAgb2JqCjw8IC9UeXBlIC9QYWdlIC9QYXJlbnQg NzggMCBSIC9SZXNvdXJjZXMgODEgMCBSIC9Db250ZW50cyA3OSAwIFIgL01lZGlhQm94ClswIDAg NTk1IDg0Ml0gPj4KZW5kb2JqCjgxIDAgb2JqCjw8IC9Qcm9jU2V0IFsgL1BERiAvVGV4dCAvSW1h Z2VCIC9JbWFnZUMgL0ltYWdlSSBdIC9Db2xvclNwYWNlIDw8IC9DczIgOCAwIFIKL0NzMSA3IDAg UiAvQ3M0IDY1IDAgUiAvQ3M1IDY2IDAgUiA+PiAvRm9udCA8PCAvVFQ0IDEyIDAgUiAvVFQxOSA4 MiAwIFIgL1RUNgozMCAwIFIgL1RUMjAgODMgMCBSIC9UVDEzIDUzIDAgUiAvVFQxNSA1OSAwIFIg L1RUNSAyOSAwIFIgL1RUMSA5IDAgUiAvVFQxNAo1NCAwIFIgL1RUMTEgNDMgMCBSID4+IC9YT2Jq ZWN0IDw8IC9JbTMgMzEgMCBSID4+ID4+CmVuZG9iago4NSAwIG9iago8PCAvTGVuZ3RoIDg2IDAg UiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAHNnNluJEd2hu/zKfKSBMRUxpaL7qQe ATMCBEtgAYZh+YJNUmpKTbbU7B7bGPhx/DC+Hb+QvxNLZuRaVewewFoqmVEZESfO8p8lIuuP8sfy j1Jp+c+1quxUV76/L/+5fCq/fPWsy9vnsvb/Pt/yXF1pG+7lj7auurquXdm2TdXq4vax/ObAM7Uy TXm4La3zz8bL4bH88nBwpSoPP5f/Wl58/+6ytOXF68vSlBcPl2VXXrz1n/eXBS2l//uQfXvrn//N f9779g+XZZOevL4sXXnxu28P38rzRRz558uyTbOEcW78OGGEMHug5+my/Lfy8F357cFzZrpiXdvK NGa64J1lyioOv66P5bStbF2r6WAucDteJjzbH6ytVN+3xwdrggD2Bhvl2tgo1LU1quMjdZ3XEFua rkJT6qQjJw4nqmkbXVknbOqbqhF+PZbCutq2rhja3g5tngO9PPc264uCxrY3XrfHUdM3japc3+q+ VH3VQqoqkhn8cP/+9v73Dx9v3pbvH6AoPGm0V255emUeTOHLvzya8k/v0KIfiz+8rZTGoT1wAWMT ++Gz1edb24yXYm/Y4Ia9JSGpelsTO1PVxn2KkFbxo3faFf+OkvwqUKLKV9cBOsrrV3DxCrr5p+1a W6vGfzNrcq6pOsClaStT3j4WfK26vrcKCKqUc7XuDcrQ6K5xNWZT9aZWresQ/DVcPwO+6r5ySTWF LC3chCFii/EysUTQS1eXrOyi20OLrq903WmWkE+wNm6S0g5cqLqp5kMJreD1BrEoWITa6//0xD59 uPkPZoDs64+Pl+UVfzxeFnK5ec8Te7AHvrcqLQRhCNDPF1IA73HOPXRxDZjqsFcD0+NQczyQoU7n iatdNpTyYrPhcnj0Q5nAiov/3jYCpfBmtm/K7dGKoASnEAZAKcGgyWBiqdosLHU27Nd7SmDwGT3Q sxgXCzzcFnM+isfFXJIeHHB0uEEcoC4vcKR84iqR/+BIcaffiGYUFx+DyvjPO/+Jd6YzHfYURVXK tO2EvnWqokR2FivOVvWmGwcrQnhR2yUTy4lsMNCHZ9ZBRMAEXsO5sDi8u1zKy2JnEaaubId2L5i8 DrOZsjLvu9e/Bj7B5RlnQ8u7p8DtG4QhFMXLL/C12Io7jBKI7mf6tCrtga/FVuBhVFPVgPNyfSvK mfhqi6REPxz8wkRNUYd/gqGoEVEcn6ycKA4N4W8WSxTHUnkIUWTsLqYxFepSdcb1U3L215aCKhzr bLAOK+71jFFieOuy8wbiWVYgu6cbgUWU5h6NzyieTYIHqpyRgHkCPHm0O7PpHS23qq0cTnA62AbF 02Gh+HVAdsbfIdcQbTTNFNkQgkTu+1EDE3x4EywGoQbD2ZvI1VWjMM7Alywf2FGsoK/MNNWrEJIj Bo9RBZ+YLp9BocK3eVAflO69Nylc8zY3HBFb07czIk9Tt0UGFJ2y7Vn4ECrPHJBXsXMc0PHRBhtP drAkLDmgyWAbDijZ+CCKb0mOBhNGAfh71LBCovKp1SmHhmlitTBbdOpHZsMtFSETnEr+JEQZyVnL 0hSxvAbA54uvCRiPavwteaB4DHEVAcDJUmGI3DxcFqBD/OYZIsavYuM+YZJZWTzanLCj6CQJ8w3a zXzh82YasM0wVfeu6lHOqUBOU/IFpuq+q/qmSVRn0j0GIIKp77BS73Hl893TPQySP8Iqwk0E3dgW n7i7iW4yPPN8iQOKcUro+zF3sB9D2z2ehsdCl7v7MHV0sPd3oRnIlKHCTZjjjcy5DRlqMKY2CzSD ehdH9Slp9+4M1klcp0qS2jEVWZVXirABuS0Hr2xXOYY7YzTWvzlaSDwsYftnxLijo52DcflgIhYf DK+Wn2Lsjl4ewDXUAL8RlCET/8yYlG0qsgP038+T6f/OPEFMYgCnB93lTtC9F69KHcEJ3OX0rSqP Z2ohur8lba1c1SlSvclgMHUt6F6EI7OgO4bgD8S2WfAdQwl8e4woBFlfk4iCC6Ba1oh1yndnhCAC fKYmUJ6o6wb5C7+XyI90kwIJMQ8C7U1xEVcB84QoKo3ypTgGLsCPhMGR4Ck2z5ylcW1VN8S7ExK3 xeWhaktclJMqpYl3J4OJDRzDZvEoHwNcpgwkB8GFFzBUM0CnNFNmBeZIGClG8AqnSjoAJ/lkVvwY vOo940gQ4CLt0EFLeAYloQUd4RO6aJe4gLw01IvJNFTtrZfvcQTDeOHZa2/VYTzExjNh1HyGX1KZ ObP8mahG4Aefh2LFBncXxnDzFD3Ot0E5noLDCp4qxO2/B/8TBPAOGiMtazFW34as1Oa0HFWbYqOO XeMhxMrzwcRMGl/7Wh12yAB/unjFimLyR8IHt8UGZJlcfroclrEWm5me0u0w85gjnKKvX5TR6sTc sEGJ1JjRI4mvWMgdXL5CHeApT8BSaUumO89m/oIqysPxEg2eDQjpxCTbqmGsrSjt6SkHV/kWU+c9 1DWWHLhTeOyZPPbqRWNd55rFIgdWCQaxZD6xHz5D/oRNIKxDsgmehEfYxG/eAsKTKCLPhCe/gQ/D QGGItDOzwxHrFHk8YBDWcMLGQbXthqyDvR3VuJMHg/QtkExZGnWdzxjBHB3NO9td9B7xJR9M8OWU hPnrIOkgM0wBkWEefH64LJBl0InQHp4MWV0QJb22lVt1WnaTUO45XTtYP6rjn1Ap1OuvHpYhA/BG 4TCzYWePFkBjmwCtKXYrhz14AkZnsxeFjATMAo7oo1FxAY1o5NFjQ2pGxizy0w1plM98cjJWjXwh 7IUD1Q3Ip9lgmq9JObam2MDYyiQG3P3+a8/Ff5mQPHNZutcV+yFJdJFzE5KnjmoPlnwaqSkgL0he QevpsPj81zGTu7m7y3IvQWWUD3wFdPkb/RCAHsqg8l0RE70jeRlupGr7jsA8F494sWVEkqgblWQL +73DiA6mREvF0UEkpEYv8hTcA5oTnU+mQDNpWNlaa4iZcgJfKAzbSRrChuFkMAGLlTRkudzjacj2 MkacguPDTtlkHSmWjvyVXYRNODaqsoZd03wwWceK2GbDSsz6dAeCoTJTy50xXrmuMk7CjHySXYq/ 2KGYLV9bs61xfLQFDiyLZQ17OI0BB3LSjqw/DMvyh6AyRI65hawEjbKFonWdCB9xdM/BIMJUmMMM 4HTwISFCgOt4mBA/5C1DpLGtRVTkkEm/svBP9io7k3Zt1XeCup7ba3g41bH97LhXsg8zHUxEt74C vzM0Is6fYR5+MSQ7MIy/Q8t+pKk52qGaJMMT4iogdMv2DEAEhqQVZOH3Zy2NgpdjnVRgM4A+IQDL lhvJ87kQl8hFHDQXqQN6sJUi6y2rCGH8OBL1PJok6udpmAYDY584Aho59PGPFTLFtnbYjphVu8Tb 0T5WoChBarTwL3a4bEXppMyb69yGhU+HFYDL/eITzNsm37ERpY2dSXMV5Y7jkmMjSkvl5GxYurjZ 4cXoO+os/N5gRjLFAe7u7okiEXaIEoAd/o7Av57Zci6Ekz6EzxytItrfs/fIkqvLzZ1SIrPKNVJZ yweD9r2NhCFce5ZkNdArl9tgFEGHw99Rx5+jNURdjhfJQukWVDoo+6TXb/BBHoidqz1F0a2uKDkR O+RCeKGixHTKdHks8KmbXsdHi+I6RdUmg4mqrURIC1V7QUE4zDOiBjnTZhQf3IDUwr4/+JSICIlM nOUQpUhBJTjaUADjE7nLFwAbNwieM1KCZdwgdz7f7x5h0FIWhJoJhdvy3nd6nNRRXTMdS4xg/RjG 9DjEA2i2cwzDa7AgNaujsicXKe35RUrNFYuX3jBDVB1meUsKjbGb+BC6xUfEEXAXarbjlWKfNMcB 4rOLurIM/r3MQYhz4IozQkpXQUzyJWAkVInlMRpGKUXfuMKHKT1xqkhdTDrFtGXwuNSx0CTjxB5x BbGj+MtA+LYbsBx6QBpJ2plTX+ZBC7Wfl8T8+lmqrJ+lsv7tiZ1mo5WDYVPVWFWzgIqyxq3QZHAU hl3SAbk39GzhNR+iTKMwooTegrbb5MvGTqvargwzflpkpSwnQVtiw5MH++lihxnO+BxpMpjwYlui Y5y5k9kW+1VNRb7KMSNsPZfBSwVKwmrtwN4MJleqW0mg4yr+XxQ1NSc7TC9A6hmypyKR8j0V58Aq Z5kTd0c73ct8g9vDbUy2zNF2UGHI/tZjIcO+dWM5BTCRJlq0ka6E04JD/LJTxpPIG1PGDV17tMY/ 8TexKu0AV0xsisn+DUgCrACEwzMhBSKbD05t21AtJ5i6tjtHCrILsYU01jTsfugTZBpjjmpvLELE vgMCjypIHGwHAhkivFBhoLDbU7bjY1G2q0A2GQjLk5OTnACTA83xEs5Lriitfx+EPX8j51cbDt3b mkIsh+4Jhjm30hVDG4fuY5s/zdvIc2/Zl4t95YRvbAuH7pffWGBOMWZJTgoU23Y4dP/qmdidd08I 5lVPBW35By+kSJlYtiQbjsX2zkGkpXJtpeARmwpeAkhNxL/gEaJ6O3TMmt74xr6mwCZ9u4YTxI/l zzD6O/73R9ht8WpyhB2aqOf25AfCV46n9xprQ7HIQZxxHNPljQzibs6Tc2JaSbxcGoiA0EJeQEh3 4UUFalWc7HfCQf9kunvj75uGBN137jsLYXLCPa2sGNfv2EjqnbFp/Yw2NGWLTT3LrO2NH4/D70g4 Z4Ac9jpnnfnKHgtnOOYdVw0t/i6tLDyZ7pgfnvBaB4YpTBrXyUl+hzIUdRlfQtoiB5Vva472NRyX Rav66HLYKfYC4nrFI7y/c6Wjv2Hn3J9rvSDRfLglasgx49RpoqHm0xB/g/O0BDNL0wDjzw+/PN18 kPNKnNxPuWx4Q4h1cojwmNKLdmjFPu0o9bkdDApeZPId+mVtQbdqdtumSn+OzGX1yrLepNsTTZ9r c3hylLncGxKdJPIiqHYUOXLbF7nmBG7fItF/rMgX06yInLKJbXi9bS5zvPTN3T3yTqolYhZsE9VT rK+Q7JwtoA4ZwAz2ggXIqPr1RMFDEyARm3hNiU0FUAAxp56pDbwDyFp2HXrK1dK5l/qQANk5MhWP oXlbSeTC8WShpw52LHeQ4u+st2ao8E+mO+bnvlWAkMF7dK62UajoSO1aYzHGqmk5ockrVKykZVfM iZy1bDsaAW9wvTEe54yWl2gor6Y2Vji2Uc1oG9sIJ4a+YxuUUN/j5THpDc9qDt2cywkRtJZNedZM skN/zaLSHfOGO6gUvsQn4x3zc0oA7aSoRmdV68SJU9XbUL/Hh6AZ24hG2gH7FoDm30NIKrcj+7Up JFrI0IzXMFBsXun0b3AmLLtQS5VeSljOmY8SHiWXSZg38HQreJbakPDQNkoz9S14gy5J/Q26IGcd JQb4JAlnMn0s5TTGKOF4lyQ8kTcS5sBZ20l1/oUS5uh0TdywJ2Fombur/zmF91PrSjwtBj4LypDv gQ9Dk6BMbBq5nHqWU85zVLUxDcO90LTEO+esfiwMJ40zxoe7yPipGBA8yXtXg/yJ8ZhmfO3vpGCB rI6qFjHaP9C0VqY4zbTIoZLpzr3F4AaSZwBcrbxCA7ROvEVqS65BYHvpQYi6aGQ/EhcavQUDnu0t kMLoHyCIM47Rd0gE7u+Sf5j6Duav8X6ulceDt5gK8mgIYLEg13QsPmLkmm828r4tRbYZhD08P3+8 fz/LyDbCvlPm+aSwL8UD+E/Fe8LNKE2cTnL0SeribFJbJuHYlbhviBHEHyu2iXB+ScIv8oLkaUmm 4gWz6ABSJhFAeDLJmxhTiiiOraUk4XODPCSs5BhOkvBaXB8lPAfKcyRMQDKdZ02Tzo3yiMB8Bosj nKeyhDyclyO8YT+2wY+Qm2pYSw6JQ+QnFIY2CbhSm8QinWolDBr6xjZ0AlyklaMiOBRG7GoO74g5 nxxwtGxwa4UxSS2CLcHIgi5kUF15JbUT0qg2mRIvs8tbxhd/GyFrL9rYGF9Km5QbOAI1n2kxUVne vP3lq/Lv315r1/zveGrDH7jasF0znzZq0Oa0JulRWl5ZPjzcMesPh6/rbNK9qHoxaeTl5qSc/4z4 NM76m8xq9bjMl8w446mUX0Mol+b5r5OEtyhryII0qDvB7tiA/viIWN7eJ9j39THfIDXQWvYM4hPR aYfM16uZtwtTtUajh0xq5eUGYgXiQ8PWOm0dp1paCfuzNnY4xZ1jA4UhMZn3/pmhv+P/X/cYuLpC flVgpFhyVckB0iJkeTRJIpCayL5CE8Y46zokQnMoGMAhxwRHNZ66j6ydciUV0IaXZGMb9j+2Ued1 mucyTJCfyIhtGSZIb17nknLegAlHyyqWI9uGYwaUtWCrpjdiJ0MYtUrenQcU9JCEJL06DRTWJkiv es9BIU4lG7pTFU6w8OcpKpR/CPCul+nW5o2/YLMAo7TEJS7ceVyw/NBDd/O6u2pudX91f3vfXt3X bX/V9bbnNyl4nfz2/kTcWJC1gxuBLH4CYs4Mjxt/V8a0k1k/JzNUt2TGh6+oBWnLz3Tgy04Cla3V zrVLLxaZgVYq0u54nlXTVo2AF4cRiUCZgEJWaBBoajmiSPUqNLDDOjFy2XKVhn3wGgwmAy/5VRN+ rkQ6D+DFb5lAAFXuCXhlvT8DeAnFpEpNjl6SN/i2DL7kyGpsG/GryHrLkl/Cb0ENNp4qVxg2BgVF nfWuw98JnHlZUDER3vgnOf0f7ogh6clv1FAD53GONEr/63jiccO8FxIXCsgpNS/LxSNTInEtDsaa wp97iiJlU1gqWFQVUt2FB4khqEFIG9Up3pETKsc2+eELygAiwbXeL5cgNuwJ9AezoF0kmIimjTev pQ1a4kJo82uUNuFb6O2XF3uLBAeHs/wDFzTs1EiNWd4kZUqCTM5aSxLhm3BAQ5PD93WGjQ/aht2f sQ0qaMWJhyqzNmc6ICWOX855D9JYOCApv3GyYg5Ip/mftfE3/Y+facX7/BXkOy1KW0y3h+8y3QL5 yvL3r8qqmm1LbpjB1nQZwMok8jtCUyeS4euP/wck7xM3CmVuZHN0cmVhbQplbmRvYmoKODYgMCBv YmoKNTI0NAplbmRvYmoKODQgMCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1BhcmVudCA3OCAwIFIgL1Jl c291cmNlcyA4NyAwIFIgL0NvbnRlbnRzIDg1IDAgUiAvTWVkaWFCb3gKWzAgMCA1OTUgODQyXSA+ PgplbmRvYmoKODcgMCBvYmoKPDwgL1Byb2NTZXQgWyAvUERGIC9UZXh0IC9JbWFnZUIgL0ltYWdl QyAvSW1hZ2VJIF0gL0NvbG9yU3BhY2UgPDwgL0NzMiA4IDAgUgovQ3MxIDcgMCBSIC9DczQgNjUg MCBSIC9DczUgNjYgMCBSID4+IC9Gb250IDw8IC9UVDIxIDg4IDAgUiAvVFQyMiA4OSAwIFIgL1RU NgozMCAwIFIgL1RUMTMgNTMgMCBSIC9UVDUgMjkgMCBSIC9UVDEgOSAwIFIgL1RUNCAxMiAwIFIg L1RUMTQgNTQgMCBSID4+IC9YT2JqZWN0Cjw8IC9JbTMgMzEgMCBSID4+ID4+CmVuZG9iago5MSAw IG9iago8PCAvTGVuZ3RoIDkyIDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAGl m1lv3MgRx9/5KfolgAawad5H3nwt4mCzhzXBIonzIEvjY2MdK8kxsp8+v+oqcrpHJIf2WsZw+mB1 ddW/jj7mN/ez+83lhfyv29x1eedud+4Xd+WePL8r3Pmdy/zf3Tn9srSotCxf8rJIO9e2TdrS8TJ5 tnVV7Zvtsb10T7bb2uVu+86duI3b/upebv2IMaWyz9KuhIoSS84vHcSyNMvLxm3Pl8j+y5387Xrj KnfyduNKd/Jx4zp38sl/7jYJNYxLzTZoPff9/+M/d77+fuOaoefpxtXu5MbXa6v0T4zyu41rh1GU zpmnoxR0dOXnauP+7bZ/nZ5xXVRplWV5PONvFF9dtGne921MrFbF2WO1Luq+SMtVxJrjim3Ra5Zl tWubyrQ6Ncf8OKWu85QqV3YpFLPi68gJyoWZOssQU9+kjQj/0mO4qtoqGes+jXVenL30+xS8C9yt 7oM3kz3VoaXJ07pvSybVpy2s5slgUT/tbs93N/efzz65249wZD0LbzTSe2IcbOHJq8vSvbjGcH5O fnN1nqd94co6LZmEWG5aoLBevmBCw1jHrNeTATWHAhWrQ2EzVjdoKs/nrVmwndc1LH6zqiYdUl8X dfIFqPwqvil3z0/VF7nT58jyMYzzr+3aKssb33JQVRd9KkhscVYuSzLU3xRdAyRwNW1b51VTo+pT 5HzU9+2BnYGlAduNjmuP2OTKeYG1PeabwVd7jNgg/gVfmkOjYJohKRGNd6RTDOLIxT/jSLe3G76f 4ND4vLrbuML7QQrXt5uEB06OKgbHrb68wv1J04V/4PmovHrvC7w67/qKukvLosP1hSzmogX+hqcK T3BwLHiMqmjkW7cPHtgGKK41Ytkj0glTLlPPMGieZ7jr0yLrkGk0wBTd9eqJSIl68naOWdPPyeuz L/MQyss8LbOqOM7jQO44hJqqTbsB2uIW0MayW0Cg3xH8QAVIIogyBmFV8QSCqCFI0wpYCKIaMrXn 0Efe+p/vo+8quLRV+8v3xCgrHQKtYpOxCNjj6ITqcXSwCnK1VYGt9O83CX0++Le0Vev/tnGPYWX7 jCcEtfJSK5WbkEudFenG2PXh3JRLHVs5C3lVKWiNzHmYoY61aE8l0SwjBXCqL3Fuh5lYYtaEbCQT ezyPIwJJ2uZ1FxMTgFblA+XHZFH+RxgVsT0apSbC+0wJISMSKX38NPT6iEikAZ/xuPETlnZmLJXW hpSlhPzn7dM8XkNEBKGaiApcj0YxOP58dbFD9qSPpIwMpFoFV8LCe+fRoe077aBNZ2+1tFNgXJwZ NrU4Kh+yZ+JHmdaNuFDK2pb6ARZnVbRFWkuwGuc15MTeDJOFPIp5bUNIK+hCeMeGIyYQgnGN4ZiB PEU/zO4f+lB5hcTV7hAW9g4O6KoWHTLzAy9jnN891+cjk41wZeYXvq9vqhjV1+in1jDteaBUWErf VIDbQ+XrMsjD1Q9pQ5oVeUxrLewAg2BuEQADrIsiDZzwGlDfQ/2hKYltMuY73JSYlPVxSE+K/10S HA4hLQoy50aYMQ+jc02ORgSzLzWNV165P8WaFmP76E3Ncgo1rs8Xamxih9LFNGw2pyWV42Bk5lfV 0vSla63TwtmVPgfvrmISkGlawyDaXclee4c/uOJ4eGVNbVs/P0cT1d7XNq4+LpE83vH6rb6ssxxc yA4NYB7apKnVDjcxj2by1TRrWa97pfwxMA9Yy0qWFvsM6lsj/qAbifgawXDnTE4dkWnJ1yDo+Rnm TZlmfdu4JuRrwfHJAHN7DHnTybIMDK8lhtJmibV52tQlsg+JrbX+tzsVEPncY5Lm3Q7pmBQSWajG myNFXrLbUpDa+bGm4ruL47tnPJncaSlyVgd9V8bEYHzBr5DV6PrgHu8qvgIX7IMyWFWlil9B9PKw YG9dBiczBnXveggB/n2rdWJmOZTMFZFNSbNSx0hoGUa0N30xEZ8l9qQdMRkZ33o+cofMvqa9H9ML ET0lp64yOcg6bC7sAQkjxpbN5d7ZEChNRrdxpROlC3WuypL18PnNOmdf93kqKcwQ6ovyuH89/QtD I6MfeeDG/q6l733C+0ILAIL4+3aTaA6szk4jMt+ZraDQv4CAF+yxrwBP6TyXf9Dh9G1aVn0e0RL7 KY9tPZDcfAGHyrEsOf13Zog6b/yGH6qgnlkpKvlEHbSCK+oBFN+Z7fw8i6ZNswaLCCe6bCOAVG0k db+IzBkoNhaPnmSApyHfcPYAqxKfxCC2PAGgBCi05RRV/iWCkuHR0PibdjXz055xj8Hq7g3PzuzM 8oEDeob9mITxGxgA3N1b0dP3wXJeshZn6rZLScP2OJ/wPg8WF58ZHZkwNQb1OcHCOCR4uEu2tGWg fUDLmhVL2DeSBDCSyAnw3IItHRdbucK+FVbiuXHjtIgyqRNr5yH+gCYRCqU3G96e57PI2EL3ZnDA 6PHFCyuL+fhU5HWadUTKSABLkRM254JdkXdpXrGBFBFbG+yubzTYqd40sTnT1EeXCz7JQora9MH0 i/wWxIYjYm00cKRAWloRLS15CYeygdra9CAmJxli7mvAcmuKNhCIEaB2K+FxpcRs1fFKQdFkKDGI 2VuLcy5xSn2T97EWvlGlJflLRup4qNGpVX6cXMgqX5CODTKTYJXhS8nJJ3NtKF0aRTp0FTeiUUcq xY0QK62LvWBRci+DiVSoqso0b8vBrvcOZMJ/RGwnsL1PCdQ7mjNzogr0Yl7RvKTxzaTmUTg4s6ZO 22bvY/Li4U5JxIxstS4H7USkxNg+aBt2VHzUIChFE59oYvyOjJE00qQG0dKTSRSJLLipCamxyYGH 0hrtSawa6Wi9viUU/NqQ/qzQOEdDWurdRppKAfGNNfqW8qb8EGpoxQ6goFzpKOgAakoh5B8N0VNn qrzRZ14TZcthSF5hG6Eulmzj8by7K3HFfYtthLRWRv93hiILm5ZlGsJZlopeDWHOaq1oL1rYvVeI WuVgb1Z8J/mCT6QRpRnivGwGlNasIsKQO5FoDSF3fyLwghFQEIk2FgJPZE4AgO9ajxIXBq4KFpOc VNV+6HUGsh/6NMRAiCW2bME2iQ6IUszAzAIbnC2zu06sCCUQYWOYN8FctkeZ1VwozHtWpG1JrAiJ CThIiw93QmKyGP3dueSE5hV5SORTM5XKdGkWRVmx4MyrWJjRLGIfszgLPSKqoVkHjuuYExW/9cqD z6NuAN9+t8lj0sBq3pXdpjEAMMdht+khlQcpb+JT3ndmSQZ9kZgkxg8yZrUXG9Qe41I02u8a09/D BaKNZAxbVFC6YpV+oSkb/NZB5ilBLMzKYcySajNu48ReEVPnFRVC4hNGKVpf9xUpt70yuolB8vNm IMe9WdEAIK91C52TANL1/lLKNPiUIid73UfhqaT1gRFcX2nypzvtyx6EA9uqZ9ux9gPtPchXpSlE jsHmhkwkkQxfKk2Oomw0YWqCJ2l7c7JkkDlRwp+6H/I2JYTYNDEj2dmDmff6eBQNlMTbPxzRc/NB XM6htI/nGcnJqdgV/vqUMXA1TE0dzjxQCpZOnbjLcLgIJ7FKl3BCWp3WJWE5pCXuuOYKBQe+2/Ol pB05XaIgFCNWqPmDPN5sKGb+lMn7Akqoi7AgDzysalIsS1te+1ChlIjIULAGkCGvYPhCTjtg1rx5 52MMBsl3XA+f1sleMQIAhiZ9BQwhWu2MoVNvXLNkpEAuw6e9Zy14B9WJcKFv4j7oRrwFHdZLG3Bm NChfGJDIAQuil5FUJrTvnsl5NQ8mnPVcI9lb1ir0nt3cqA3DIRwwc/jXIzF2OMD0wrCcJHSVoNkP vMINMb+5aDye/HOBh5to43bCxMG/YdbuooEsO/gvlpgdD/5D+tG5/4EpLPBq8g4pSdqgNjxFc58J Pf2nF/DWf770n8/9p6jenTAFPl8ENc+AMlXkm3yqdgAG38Eln6B2XkF+sZ9XrQs5XeBP8Denn2HO NReiwl1Nf4AZX+o7EOQWfmepclEq65oeAgHdJQ+1xCIHWnnFXa2ImLioiWwoZhIQLextqIFgovOi zrn+1XXsgerYZoTRROLAsSjrpkr7qi5jYgKxr9nFkBSEaDFsakj6UuqmJbW4GGkU76JuZ/guWS0N Ej55KCp9PodXBbUSWp/x0DN+3pXEjI6eundzODMjLrsAIw1gvC+AY9lXAxhSJ0dp4rSNYetpfUIO fcao3l3esx7GMf7LD+13aRbNouxK/Bb3ayKcTOrqePpUdm1as4yIic3o6gHoBuXYnCWpZGJWkvST EuhjYpFC3nlvYOK7PRBLKDH9PqXTpxDH3/+O7HXVrs4kkCu6X8C7LjsqrgUGzhpDO37GUeDeZMxl +kVJLOOEz48QxLTjiRIARYCIjDCvEU2hRg0nOirKhYlhe2VJJhxObQkbSw6Jbb4SQ45orYXGm5NX 3jhPVVE/8mAb5Ymv05aX2vKch6UePoA85n5zRR3QaaNHp6U/exJEGumRRQ/rIUmZSWhi467gbixL 2BUSwreEa/BJWtzH63HPobTFYx9Ts2wCDvtuT78f2Z26j55xc7WoCTEPsHp8lf892gVDb+Vgfx4z JZfn2fjHoeyHIPOfjDtxFGAWdhSyw/YXRqgbjtjEZckIK6ILidtczC1rVmLcAVtNawHhZcPM2VyL aMnMJ9KCBzOXxECjDyLWiwREE2pIdggz+C7q8V3qmXz9goiqPCP6k30HSsAp+4uo+oi971IArjim z7n2HdESw111cc77Y/yMxDNmgBuS/XLx1pTknJuHuHMeiFaWpxI9mTFHnkGbdZGYsO8poYGSRFge +7Z56AyJWwGCgusgX5VKaAjSCDsGJx9otS5s15BDsiTuhfkxPe1kWYFWHQQmT0tbpkNiRCJKLIY0 R+TLiOca0CxcWlpiDx3AOuq54CQ3I+vJkKLYIMq18mLZh4lDJaDUrMXGER3Bl5zM8ng0QH5eYSXL qrbjTnXlVRYshR4ep8eQxpscboT51A0VbBUwkrpprJgfv+JqSpWLTR9A5qhTXnEYsjBsRSiouy6e dmTAkQfxp9NzPq6q+eGLHCIcyvD4UkCd/RzhwZpwEE2gmTU7xucCCFQh7gEdCKQo4R1ITwSuFO7u 7IuAhjJ4AjOfgY40gjuchJgRJbGBsQe4pJ+keVQZCX33BXUefb6JvJECWIWOAJfe+mr0zipGOUGC iE3JeNIhmd+8lkvZBixwo+JiAwmuyhx3WBYsfzi7QhS4P8yaosgTVhicqjOpG275Xew0qmjvq92F 9rHiEptVxe9yqpIYKWyuiLdQnoNMVbGa63vsKaAlwWTNYu7NyWumB1y+01kGyV5ywi8dRLm9Pmp9 WGWQw00kRTV3Far6gKd5W/PSnZvfYBLcoQ1/sTFlaZEBi7d4axqyO7R2f3Lnr47ifCcvjZ7xYz+B uWpfVWp7WHbvADTPIxDwsfrjLjY50J7hpbmn87otKvkFGWdxq4ktAMUEWXZsY6zBHJeTZnXC1cCm ZPkUEVubkn7Y2d3a97sruwhrl+LtZu/kJd6FDRRVklrv9YVpWS7w+tvquEBQrJ/7y9QYs70QtpsL wGvRroZ87ZlNjIAxeiRh5xeI3E4bxLN35ArapY3sE7mEPCd2bp7wy52+MbFDd+6HtCt+XSSQKpuR yWANPLGd9cCyivJP+AOEpLIPHSZinzePAYRNnzbhyn7iiHkYUzdJsObXL71lPv+RkbFQyT1IfO2h bT+80OcLjGqBCeToj5tLz8Yf878Fcuw7tj0jYqsXKeECRGVJ0GN2JOt8jkDERQNXpktcpZ4Yq3mW wljzf+oJ7Hzu/OeomTaRUEYfrRGPTwFBiRTF41MSmZIoiDAJdvawLj9oF4n13BGxSl8aSCqbyrgO wubSASOYGZSVNQI6UTRkNmzV+lAY0j8eKxbbCsCxwsVwxn3/pfAxAu5GXYOFgt2VTnP0VeIj1DuM WcLOQsqZcv9FVwtqHfr2B22xDkP399dX40W3feqh7/2uolRv9vA+uNLjJ4feZ12qAu1hY11ZZtKO nfyPC6zToqlIplLyY1p+QxwIMApn8SJBQDbnv8ZDmLJkDTCcBn8jsYLfNHQuohT9ZNXYmvgN48// B4lHEc8KZW5kc3RyZWFtCmVuZG9iago5MiAwIG9iago0NTY4CmVuZG9iago5MCAwIG9iago8PCAv VHlwZSAvUGFnZSAvUGFyZW50IDc4IDAgUiAvUmVzb3VyY2VzIDkzIDAgUiAvQ29udGVudHMgOTEg MCBSIC9NZWRpYUJveApbMCAwIDU5NSA4NDJdID4+CmVuZG9iago5MyAwIG9iago8PCAvUHJvY1Nl dCBbIC9QREYgL1RleHQgL0ltYWdlQiAvSW1hZ2VDIC9JbWFnZUkgXSAvQ29sb3JTcGFjZSA8PCAv Q3MyIDggMCBSCi9DczEgNyAwIFIgPj4gL0ZvbnQgPDwgL1RUNSAyOSAwIFIgL1RUMSA5IDAgUiAv VFQ2IDMwIDAgUiAvVFQ0IDEyIDAgUiAvVFQxMgo1MiAwIFIgL1RUMTQgNTQgMCBSID4+IC9YT2Jq ZWN0IDw8IC9JbTMgMzEgMCBSID4+ID4+CmVuZG9iago5NSAwIG9iago8PCAvTGVuZ3RoIDk2IDAg UiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAGtnduS3DaSQN/rKxjzstURUpnXIuk3 yZLXGsu2PGrH7MZoH1rdbUm21C3rYo9jYj5n/2c/aU8iARBgkSC7umUHWbwlEnlHIoH+Lfsx+y0r Svm/aYusK7rsw2X29+wq++Krj2V2/jHLzX8fz3kv35W1XsuPNt91eZ43Wdvud225OX+XPTzlnbyo 9tnpeVY35l17On2XfXF62mRFdvpz9o9s+931SVZn25cnWZVt35xkXbZ9a46XJxvuZOb3afD03Lz/ qzlemvufTrK9e/P5SdZk2/fmvj6V9zcW8s8nWetaUThnBo5C0NYVn6uT7H+y079mj08NZeIel3m9 q/ZV3OFEN6UXp79Mw2rKelfneREDa5Ta9hTRLA2s3RV93y4D2ysDUsAGvu5ry9SpPhbLkLrOSEid Vd0OScmdjKwEJ6JZ78td3QiZ+v1uL/R6lwnp8rptNv7eW3/PUKCX994G3yKg9t5rI9sDVPdkX+ya vi37rOh3LagWG6cGzy4/nF++//T57G324Q0Y6ZtVaYRb3p5oB1X44sm7Knt0jRT9uPnN6EpWNUgP VEDZRH84tuXNtW1ES9E3dHBG3xyTinJeErtql1fNbZg0aT/6pmw2fyAkv4gpKbKvnqvpyJ5/BRXv gzf/2q6t82JvnoxuNc1+12Fc9u2uys7fbXhcdH1fF5igXdE0edlXCMO+7PZNjtrs+iov2qaD8c+h +g3MV45kOUnfKy72FCtgPU/Dtkf/8j0KuATMcSRhGgpglPQ8BCXk2tfC5ikMESZrVr/F+BXZ9k9z pA1M6Xcn2X1unZ1sOF5h+Di9Mkd99x3PeU0vrjCJCQNYIStNPepmIeTnP3dWqolQCFIpU2N7uu/K XdcFDoRv0wKNAzl9HfSBnuIKHmhPH55spMP3nHvgCcadOx+Mk9B3lQ76+yKAhBPCVSgxhEobCCff qqvQ+/qVwsS1qBPiqO/cBC/clqD6Dacy2/6gnPhJr56adh/pBU3Os6Uq9rumK7MxHfP9Cjp+oE/3 8cR0Vk6f9QQZQAiZkXsf9AqhSuDQdLu2LXqLBBor0UBk6TdWMJblosLIdmVXxMBmTF0MFsk4u7qw PMbXQ109XsN9+nKBt4dVV6/0FWXZtV68v357suGhvqKfeU2a73rdtrjyqprCdrMoxxahj4GUKaaK xcvPVvKyk808Ck6R8N1Y0yESS3gGrIFGYmfaeXjsux4iw9NEu1Wx68uqy/am5UGFc4zzYtfPUSER f4IuOdFRGIS6ycWbkw0BnX0CKYYLBDWBEKYkb6vWIqSk2ERimK0Ww6JrdkXZI9OOrhuNcNf1TlSJ nsBNzKseRddchze2w0kClyXxT4nP8yi4IHuCtQea8P7zy5CtKtHp9pp6VxZiS45h6K+2fyiNdPMj TcFRw+XNFkvJhd6yTAY5+KpHfaCc/vjR0s7Cg3gByzdxVF4RVzUVLiMiUYrliLcNywnNRsDqgmjo JsDA2wDbSLg6BkagSoQTYzZjxgax3KheXoeu5Q8oihS9Dk3Ta5oevM6lXj3gRSz3Qz1hNHjj9Zkq tL7xu7E0Z6FgXJxZI2MNp169FpDzdHc2p8H61YPNWaUbCIrx0U5QonZGVCxKhhEt1jVsKGJvLPfJ gMPYqx5ZCYHNcCQGK47F2uLXlxImeWupaqWc0fvqNHbmHaHhZm5EWfTVbt+Leo/xSYRA3nLbEIiW CVlgMXxXFsNbHe/6+4qXPh3e39j36YHx9uIt9Vs9on7c0fBIv7WSYe7z1EvHgSKVfbkrCiLiqGcR 2waJj+LECUUqewxxW+JmQjJNArOh8PZU1HIzOYxnnLDr+pLoIoRmIuz5eKn2VP9gQyQILioJRaCR GCqJLgKSHJqDClu+R1e03duNrY3VK3ECy8AcSZ55s3eIWk0E3oilMiQZ/HhqbDmMOhJuZoYF+w6b zVAmYkGSod+ebOZyKVXbiIVwtBhsURJ7z9DLFTFe1ec7Bj5rrJAj99MEuSWZsT/EN68PoyZnhQZq vxHJw28ieV7/Djha5+1BEzhOydel47LtDk2fo3RdVET5ngyBnCTsFfqhHm1iyGadkRmbhlZLbU44 9FKrpYMuwkJ0DjwT/Sd2q8rG2Z8A00UKYOnfawh+rab9Ut0nR2lvWqKbstp1deHaszI4KdFKD9Cf FWjnWut61984nHejH2uqbVww1yOlo/dlVxoxHBluKJ0GvkyZ8pYRA6qfYQhXd45huErQXEAL/mSG xQ6rLntEeHCmvLR0YLglIZG+oCTS5+q//XArbcl78j2VCJfpxO0seZ3jKXsZOYfA1qgqgvpJgmv6 k30i7SA/xBHJNZ26T/LCXqJaEEeiLewGPeVChla8KMN+eZ/UuZwlMOdkvga6vmqAbIRm8/pGjpak FT41ZOuM+AszRXvnrEwjefac6YgImFAkYR9VqyCJM4+DGE6k8p2G4ZJJxYYD5uUR+7UNA1WGVG4u rHhFQfsnjb7tI31dLcr1++n3Jai0Mb6+Tie4Jb832/eXYaSpowNtXe/bIF5vXV8Rfs6zq8ox5E2D 0BkK3E6CHTFxDo3L8cOt4hifEKA8GufJOKDc5yidaSdgWqId9ZobxOIUmUb4Cd4QfghKwKvqj3Rz JwxyCZRk+KqvMkPFb+ebNkTUUFsj7QDX0ZilRBv2JeIf4Rqpw8ivb7+d14cy7zCVMkoY99z4sun0 xhAvrIlvStzXvmoYGIVMjBB24fqK+KYsmRdpmE2JoM0o8AhuoMHJAKes84k2JjFW05CyOGWN9857 LE7Y/QWEFWyAb9LilGRWJptIBam+CZuk+6sRxufIJxL4AyfGHN8zlGYcopbi+uUvmsBWk6ASnsSr Qq3atmdsNer6KrwGezevDJXkVPKpFsrDcPdQGp6dmk4/oBcon0xw0HdcGX3+mMqJVl2/62UuWjs2 2IvpAHDD9LSdnIGl9zIJgXqsMScssPWj1i/aq8yerdOE5MKP1/CDL9xDdb32TZlrKTAn9tL64E+Z +lmskgAI2XUwrna2FgOTx45rIa7/x4bJH2kfI3gpeZ55hhWMBvu6YbCzohVnx7yovvTDKaigAmgy SVx9vlLn9NtncX/zCJTMjeZ7+KQIBMH7ERLzJGjpgJxl1e+avfjBFV2NZVOcykWcCQp98iWykuhh 25H4YcY+6uGx1qsrrDM3nVjhzF9sE96GkVPNVGuMmvjz44iP0j5SUkyPnKqSQhKmrg5YkJq+8oP3 FyfEOWhUUp6qKmeKV0zBmMtltRzvPUa/MTmot2Rgl51/5afCQnYcScD19s6M+GUCPOrkvEiZ5N9c CF4XeNdKBiUjiokdHycQDkzA72IRNWoSrdcLsXlLjKpx6nmfO8szKP5U5O/U0VueVZF/3WA5p5pY 5e9W+eF5tbfWu6EyhgqScNixTNRJ137P55hnq5YK3C9jKW1zoOiq7gYeI2XNqLvYVTXhU9TIvOgZ dZ0TvQLTWOd4nwiYqM+045a6ssFxT3qflPmR4Lpq97Y1y5NF1KdNWVkUu7ois7yGwU58vSkLvGOK 2CUjbJNGjhqJMI4VMh34tozZIGwEbMZWObBuBPDt4//G7M7xsWxLqhLIKUegJ/F0AHHV89AaMeET iBqpWBoDrXfUo1FnVdSa8ZzvhWOk2qGA2gfRRlW0u47MfYIkI2DeUU+k0hC0Xd2TRI9Qm+Gdgwup bS5NuYd3huqDj56uViTXRZhUreGlpcKLk3leSnlHWU4gPqHgTua8kb+X2ZDcZr40vmb4LkH3GxML jFJbQ2osCsxd8K3fhKkukx+QSPw/1Nnb3Jj4MdogIXB/v5GMAN5MP7aRf0YOUj6z0b1NtyUjE+cQ MKD7wTavmkP9aB0qcSZxCYgQ2Hu/K8UT3Ep4oor0a0fRLw2njZ7J1jE0mdPMAp9dx5BmjPUBL804 RCIEwCsxubhaLvDYd0hiQLLIqDhJt4L4ZQJzU9/Bx2thJaydY2TT7FwKrC5MWZw92aqTyqL1vwm0 iL06FDtrloBZWCm0qJWlLg+PFMBaMBGDM32mOTMECQMhY0eEW4PhD6Y8x4/0eKz30Qp+w0HYqXM1 IQg7GjRPAWelc8K0UYJCXra2JEjJZ1RPOeOVsZNVniOiQoMUMEvP/xPezMGi2oG6oNWwDG9mYDEq qdtRJ+HNhBUcZNoa78GmGZuUtDFlTQEFCb4IZ1XR5cHP5yvNJF3b1IGdR8L2zNuWsm93bV2ypCAQ upSOJqyLJKrLMSwh0poCM2cixTvo0AMB1jqkay1AUeMpfVMRlteQUl5LklSGeOW+9xS1dWGrItQL O52odAUBGkPDxLOIPRwKEJmLSxC5Zti8rxg2h1IthJko+jwwvC+2/6Vd7lWpdQy914tST+LB53lc U57dFow21/LYKMJ0dFE3pIuphQ9B3ZTF58o1CInnk9AARl4pj2kZEtd6j55yUfmL+R42VNXmZbe+ h5Bvzkc2lPEVNTP+YRdTGpGgVuFNugyWw7LppOEwNTaUxs4jKWk/sn74ihDwsVjWVOWJkkbAQHiV jlw6q3NxECKIfpjq3XnOlagGVILapiPW4kvbExmsA914+OD5Y1hJxgeRSTRCENvmbdCIGIEjqVXu GWXsKVs9ilpRed9FbJpHw5myZ2JK1rmMSbPCnjIDfK72UrVMAmG0zIahkY3VFyTCVrM7T0aZHOhy GQuEQifaP2HHBjdoK0pebP9GG5jurzmh+F/pFdrDfKloPLpurZq96vRm2rhVzO8zPhkhleItZmVO 92V+vyopXot6mAKWUn5dG8LamjsMM5eA3STMDGCJwiWmZocw82tiR+SE2BHd1uNLvXVuCoO0tAOq 8PgB/GO4o2+9skX9iBuPPhnb/3oILCfm/WWesyipkY8oOLFSMYorp90WQ1iqEluUNuh0iq8mrpyB JdPwPauw1sJKyEgpC83wXhEs0ail0i8mNIK4cl5ny8ak03EUKzueQraRClgqckNYguyq+E6G2MbR mxMCgL4jOXLvn6m5wZKRHxUrGG/pweKQIJkqJ0TYNY1kEANYIvvT9I7nGS8uwzmjK+ftVKDTAWDF 1BUZeuxKwAVpd8LJHRjOB+Q08HB6xILzG2vN8eJkw5H2WZD7T5NZgHkY2AdYOE6FeSn8rY+JuPiM vvAOd6zsTIzsakoDSub3xtRaNPcy3ZYw9xrT2ThvOLUT5v4gLVd3lGN2I5xSiuzkeaJ/Q3TGKJ4x ZzLHP7DFDusScY9YOLdqyVb3iy2E6s/19FhPrBJMSj6VDqz2RPLX4ReL6yjS0LTNzEBGEI7leHoY LPN/VS954hFGKZHwSfOkSKyJAGaQYk2XKYiOkErJxG6+nLPqWJ0qlQirgS3XhtbM+UYFAAlP64l1 SuoU04i+c4R5CI/+RqDhlh3i6y2MKbf0A83kEOERVeln+oE6aWJCQq8QUFhkpfflW2MZgKkVVX8a 165w9B2sCk81d6S/9WmIiW8l4Z1k/pqCnkxJNGRVGd8czLI5DbQzENiYH7CJ2A8a4nhljiiYUTOx jE+9cZuILirWxxYs3Y2YMyk0ypJgruCggLuqiC46ikUiYDN+5WAQ48p9X8Ec+uEKPyyHrVraNZAa S+m9lyT25H39TPN79wxflBeuPjbiTLqYo2aNPcbVUSXgxxpHtXI01pAwrCR+ipg+SXoEcaH+1OZy axYpVC6ZO0N4Jz8KFPEZLLgjshpJIRhriZWutvjTCval+Hkk332q/LjW71xEEM1rMgtt1nVdnl1I mQkMUwh+5asGFdfX2oJ9h0z4vNawrwX5nE52Mwh6fSwBS6aLGAuzqUJAv5xkFaUDjHJltbg9aVoc SVCu3Jd/82OpgiI6qoNh8xGwHz7+zyffZ89+evj0yVcZs1/zzUhtYS9Z3mOaWehCyYYGPQWSMewk UWDu3OCyUEoziK7dFgZI6hpK7zCxs1DZZIJVUl1Wh4BviSNL76pwjusupeEI2I+/f7ROFsjSm4Vs 9RGNLMkC06qMRrHxIezJeSO7c07KYzizxaYkntDHKrCmGdigZtgaQyxgIsjwFvDrcN5H7ZKLB8SB eg+OxZMaS25hKRk2hG5ePwvv6DtD8OECEby1j2gIRD00P6wCst7XYEVhKjRFlCwxEEInF7ar6Gq7 IephJKWQNTzSdzDKhEQDtmZUSivEExzDYMhaanNf8dHWWSDLmwpHqfEcYnHrG6WZxP5cPTUf6lFf 0+gqRFXn6rgzb/1rakoq2fxJOR6MWho2zmF/j8WSr3cgT5d/V09mftNN7mBmEu0SGVPL4tq1scGR Qluzk01D8c2B1K6JMx7AGoSHiIfsEpQMcB6lUK2aVZ3Y8YBSlHWMqXQQHfxBcbBO1lNaDKM5whfu ICp4cYSZ34gTR4SWO/oUfHjzD6TWf4b8VWZ7K+6AOh/oSwpUnsYfM2REXJAajkgSx8fmSHaUN2u3 6ZZHSGEqErCWd2Cnh6m/tUWycx5RyMemW3pfW/nmBxXUn5BRPn+kzxBSD0vvIOloqnZXolR4wRQd LyFRHrw2m5YoQvC+7xv2nAr4E0lUHCyvsKjVvo+WuE+ZwRgogeAw1gpEabRMhKh4x6Zi+yxsYbqU CY4tRa1ufYwH5mYlE/I/jHuS5UBjFWC6oipJefmmDjZ7iUU/IPJB9oVF4tge9hCJgEkUM7HaKwIr KaFVNZ9SUjjdxESWMebkVuaQZ+MkVgVTXIGwjSREUU9xEtTfAlkKilAyu5xXLLq9iaibVQScuPlS 1xSgXsFNVF2eoety036HNgVQ0GJ5Zt98Y84bsw6Qu/ZVW9aEBTKLA+0nDMOXmzJ7OEjRk47/5YMY RUyZ3LQw4z5hH+6TZBR/htV5QA+5wkrIB/ZkMcRayM24hxa0fcW2YPvyTiZ+sSDxh5gYMSu7yLiP NNIPVj1HbzGrV7MtGJXtrRWPYOSbyESooiMeP9AntXwc6WZgRsbqqNFaJVPyoUeaTkDH9bKygGEo OUBAlIfIFU3y+zuIBnd/4oQxFp5BwlNO/o3v9ZHYeWx/9Gi0XBcRE3lVwNqUXWhsN2DSiR6zXs3E d74N+xoOEJT0ywiMW2CiLbhsh8tLzKT4mMVoe5Z+HNAtZS99Li1pL0dSVZFg7tipLmoKJq6aktll QlP6faDoXiIObCq75FHdR3XGjfpmRE+M6k36ZurpmxIhD8XvSIdbM74vctaeRMBmfEFsqGNfIOL5 N8iGZXnMCcvyI6ciV0nm7hO5DN4x1ueRfhEr24iXLvyL9rw5DP0OkPMrtWOjlFmTZQ0YEg5WvyW1 XXIgUgFZeRQiakcu0qy+8O5rbDf2DO86vLgHBKVnpq1GVkMTUO+j7FO8Fkq1FHfgpfQgxVkWbOtS FJUgcLvQ3zGFeCrMOE0FajF5kJohUFNzE+A7ppePsEw7qWlDV9H+rQ0epmaKZN+qnuljtqkA62Ak kbDbQ/n2mlW9BSaupEorbiKSFienDmE8rxeXseSj4CyqLGNoXjmno50hwHSRGoIRkHjchgkGfRu3 lAr2MKtlHaNSePC/i5Gl7FDs8E1bA6ZhJptYpUZ2779XoV+zG3PpToSojwol5l99m776SmeK5+lY wqv9nsHwuOur8BrVY4cUOHA17L+K0WDnh7EYp6bvvKd5sWVJs0QWfxd7TGghEQadXajPkQ0vZdWm b/MWURpz6KzVnyLVqhE9DMGdINQcddgNucydjb9D5EoXQzIe2EJ2BtbVMr5LdqM/JeO0chkyiqwe kJGB/goyUgxWSAlpJCSReYitpXRhzjpUPa67Z8gWAVvrUKzUHxT0SNgj0TwhKG1zJd7cigknxDxl TdgkGsvKshVP1FvISc0gsmHL6YMOJsy1Z5D3/j+TTBHOyGAE1ZZUR8GsalI2nHdjVXRQUDDdbDxf H5TzSKPpVqgrVX9k23Hpg0TSd7Duye01NpI8mjdWhWz32rF8kI0XfQ9nxNCsRkmIYUFqwqxdX4Rl d3TbPpuXafac25WUzkeIzYj0yJGilIld0aaLwArq5s0+Hwb3lO9z3tqFFxNz0Szqo6KsQx+FqIPv SzmAgZ1roosSw8me6ZY6a9BNBBdSTEfgz4glRjflqgd0na9OxhZl1R42MSNmJtlGpmDO2skMIQXd EbYpUAmJlb1Hylz8T9DzI2FZS1Fii6PK8IQKexM1joOxF4QcGFlNEGCwEhoMOcjia7vpSNbpiW/3 M/kvLKGOFz7TjCQ9oBfty+4iiUbJ9xvtjLp7LOUIY6qKUVUETILbw7Fd7BTR9MDMzqOrewKxm3DU wpHoyp+ikKFbBEssUyp34UkebSoAqcm8o5qwms3RGCrDdsKVtC7JhjkFyCsCU0OhmNGp0KGsSY+w 3X0MTGi/mJ6F+OeSCUSAZAStwTICJINsLiRl6O9J+nG4J7Xsdi6G4CJ+P+mtdDMJchRh11PxWarr UjHU5kTPHpjzumvkLirHszOJb43myHGzvSZvNi+QrHqnmKIcmnYR5yLVtx8Tqyor6q/yhs3bfZcO JgfWi4bWN5RU4/kRcjQ97iC56fF/zZvsAlLLXxJZDyxhtC1eLBHQAs8IKeyDCcMcUik4Dqk7gMRO Njk7dsjCal91mmNvZFYyXIrqaOb+Fswbttu+/PBElsgzmJn1eOxt0BTUgIzhmzWEIXxnHh38n99I mmgWrqRBCuaSgOtiiCloK4hZUq1CIVgIyhiRQxI4FB3QL7OE4JQsT2NeGVt3awyt2JDB838wKWLN GK81knM3wJzw3Ak0s/aLEifZ8+z2HZVSr7waQVtgrJO9Xy//fII1nxM+CiyBzRq/u8GUKWfWvN0E WsKOyt7gFAyjcHdCRZY0NQX700bQ1lNxnoYlm1o0EgtHkJNifS8BjQU6TdHcBFpKSUx5nETYQ4b5 SOPi3cfdAHP6difQvL7dCTSvbyG09ZKyTt9C2ElZSXHX69tqaKv0bTW0FG5e30Jo66mY0BCvbyHk o2moGsLys+K27tdryN0AcxoSQlugn3Pn/04YGFLV1p2EgG9JPtnCzuVYjgblQsG7AebIF0JbIJ9z mmFAuDZ4C5s5lgJD/BZCW0Da8XxlCBdCPhZPG8XlYZ3tbb3K3QBzTL8TaN6r3Ak0r3YhtAXeOoFc HcWFsI/mrvcqq6Gt8iqroa3yKiG09VRc41VCyJM0dFxJGFlZZq1R3CI0p7+pXhsfxVLXIak5idga UNbI3hEwq293A83p291Ac/oWQVsvKauiuAj20Sxx+rYe2hp9Ww8tJXkuiougrafiCn2LIB9NQ9UQ KTO7ZQ7FBXGkUe4AltOPtcD+PU8wks3EbSQV7gQzpZeZHl5DsBRezqKsBpaSN8WLOczSV0QdG1lo UaiUADmZQG5vWBE1nzz2pethA0dOZvi/7BDCMko2vz+8n8v4q1SOMGkhhSNaZEH6nzldudAMv8y4 k/dnPkNmlvTCbhdlr+zMAIzhDSlIHl60kwtsixDMHZDOXKrnMH9RQCZITJ+GhCzTr8ubrg276jMJ phNjrsJVEvtmxZSZnpM1Qvoc3LkjRGAaR7oAglIEwtXTp/pQ59mu7d+uO9NKIrv2NP5TJQdTCUzF RSW4biMCfVEhXSpqF8lN+WtWvJUFFRkhWebFZrNNmPqakhk2YYtJnIK1rHhsiun/HEzCFif3A9HR QcGOX74YOwkqkXn2xngNsMXKCLUtskWx+8MBc3gtgnI2bxmY1kunpsAK2YJfJi4oBR1Qm/Gxbu7C hXp/OXv76i8Jp8G6jCbfdzHsqNtjiCkhoZ6Qablj8Mzsv3lUZcvLvGlHqCoZZqdYHBm+TGBdsoA1 b8hKK97W3c3Q101AuBj/45tXV2efPn+4fPCW2qw3n2R3JZ9MH5XHMn3O395lI4+IQBGxx+Ad2hPl sdQEA40J+QjaAtrQw8jui+0vf5wltyBupUKCPdgj6GNco1m8xHBHNvjIOxZ1zENLiNmP/w88luq7 CmVuZHN0cmVhbQplbmRvYmoKOTYgMCBvYmoKNzQzNAplbmRvYmoKOTQgMCBvYmoKPDwgL1R5cGUg L1BhZ2UgL1BhcmVudCA3OCAwIFIgL1Jlc291cmNlcyA5NyAwIFIgL0NvbnRlbnRzIDk1IDAgUiAv TWVkaWFCb3gKWzAgMCA1OTUgODQyXSA+PgplbmRvYmoKOTcgMCBvYmoKPDwgL1Byb2NTZXQgWyAv UERGIC9UZXh0IC9JbWFnZUIgL0ltYWdlQyAvSW1hZ2VJIF0gL0NvbG9yU3BhY2UgPDwgL0NzMiA4 IDAgUgovQ3MxIDcgMCBSID4+IC9Gb250IDw8IC9UVDExIDQzIDAgUiAvVFQ2IDMwIDAgUiAvVFQx NiA2MCAwIFIgL1RUMTIgNTIgMCBSCi9UVDEzIDUzIDAgUiAvVFQyMyA5OCAwIFIgL1RUMTUgNTkg MCBSIC9UVDUgMjkgMCBSIC9UVDEgOSAwIFIgL1RUNCAxMiAwIFIKL1RUMTQgNTQgMCBSID4+IC9Y T2JqZWN0IDw8IC9JbTMgMzEgMCBSID4+ID4+CmVuZG9iagoxMDAgMCBvYmoKPDwgL0xlbmd0aCAx MDEgMCBSIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Aa1bS3fbNhbe81fgeCWdEzPE g6/uJmkXmU4yk7F6upjMQraZRK0lJ7KcNIv57/NdPEiQIkBKdtojWiD44eI+PlyAV1/Ze/aVcUH/ 5yVnFa/YvmG/sx17+fpBsJsHlun/Hm7QL0uFMt/pDy5FWrGyLNISHbfJqxVTub5tL6ste7la5Yyz 1Ue2YEu2+oP9stIj9pFknaWVBIoBS262DGBZmnFZsNVNDPY/bPH2fskUW1wvmWSLzZJVbHGnP5tl ghaMi5aVd/dG9/9Tfza6/bBkhet5tWQ5W3zR7eYu9U8s8sclK90oBmetcQyCGd3Is1uy/7LV38dn nAuVqizj/Rmfqb5clCmv67IPlhvD2ctsW+S1SOUssGLasCXsmmVZzspCWauOzZFPI1WVRlJMVikQ M3EaHHk5CZNnGdRUF2lByt9qH1aqVEnbdte2aXXW1O/Oexbubts+6zDpUN2dgqd5XUpMqk5LiMoT F1H/avY3zZfD4/qO7TeQyPYUOmio98g4iIWXb7aS/XyPwHmffGU552ktmMxTiUlQ5KYCBqvpD4SQ G2sqejUMvGaoUIo6GCwQdc5SXIajmXyb5zlEPNtUo4RU5yJPvsNV/iBu4uz1leEidvUauryE4PhX VqXKeKHvDJpyUafkiSXIimVJBvMXoirgEqCassy5KnKY+gp6nuY+hBywuIQRnCdyw33mYuKNzyA/ LmWaExM8DxjmmPH6BLSLsCW5yoEmBmikaPgNeUhsyn9ubiPIBU06Pw/5IrKU8JJELrEu+eqcKTIz /8JiCw6zw0/66FE1/BRBE1ACz09Bi8xckHvzYoA2c+a7x+11s4+hl2A1IdUJM/+wiEy9hCKFGsBN COsWnPXtdrPbPBz268PmW/Pq/vbHr82PN87bEuL6fn6hOJxCFc7bKP4pWRnzXjfGhyUJn4ymK0pA F6r1sRici/8XyySU/CiiElU5j51GS2KpFDfElIk0qyxUWKsJ0rOOoiLW59LRig/cU2AyYLxZtOKj tWImPVw2wF0/Hj6H/YoXJGgBZWroOdSMnC1kmo5MZqM5LxzJcnkFt8nI0D5aO+1xf3QOFOW8mniE EpszgEF5YQUI5Bo5lwPkqH2iaI49z5DzpxhwS31nAINHNrtPMfSW+nz0qBLmUZ8PN+EGjpaOqc8z XtJnPVkR62FTpceZJAPaqyFxMps1sGmQsGRNhCXBpj7wqD4MXLIwbDq+FVIZvFepOXB5YqR74U16 SPUZCEBRYjEpnEOLmN6waUHb0ygvW7liSDbLex4sy8azweaQsQ8W8MYhx8/k4lHkOMvv1lvsvYO8 7AhPI1uSD8g8XD9iRCoyRAxsznzcUcd2tByxeMudzwNmqdMHmznjWcx5Bu584vTBo+qcxZs+2oQK HJ2dQ5t6mNNY8x15bZA3laMmH3lUHU5s0GYYzeW0k2jOV6M5qM1oZ4OxsGSWNMs6FXHWbE99gpN0 e+PiecAcbc5ESxazeNNHC/jjkDgfmv1mjUPKIMG5VLE3cQOeTG28YwzHW+bUUp9GnbQ7Dsvc7o2N zKdBz+OoM2Te7A7NJ+xso8xSIQMRuWKnSO5i1Jjynd4/h5Ujc6wsEgfsvSGmgj/oH5JODmU1B66L /ggaFhfkc9OyObCIG9joxxbMvhIY22XPwXEJ0zMgubifBzUr6FuoQMQP047d/eHb+m5ze918vN9H Upv2FKcoqtNC6IJFgygnH8fB7sm4LoIizp3BG0UlT8f+sHjcbf5ih822eTist18+LLvUHkfd/f1M u1HAFKLZeLuuOI8/grJOmttXV8HToGM/PYZyfnoy2MhBVXvOUsxG0946fk7VHt/20KYc1u5lnMOu Px6afdj2wp1hjozxpJVK4AVHzsuCGWAbC6OMeWyloxNAoeggo3o2NMrGawSTNtNTZWtD00ebMpN1 8lOi8wx4G6Bh+0tJawdOGXqqmCm8F/eREdxxQ2+EqCN0JHLkCB2J+NqIok0vdnhNotz7zZlTj2VS HQucAXxBHrHHWnMxM1s7Y4yY8N0CdgZwdAVrQ/gM4On3G20OeAb6h8VDc3O/u32InXN1keKPEPW8 iB9LhfVc4iVrMRtt2o8lXtxGX2e6pDcG5dbDSbAZtN1Fgo82M8Qu9s2X+4fN4T6yfOEFOJic48Tn jAE2zUOYtrrt0BnIE7lcGwlnQK/3+/UPdv8xYkJRY+kVJfK5E/Cda0yeCnVxcAK68xWsR/tNNMoK u5fxwc8OspKOpvtqiGJFlGpTTiHSthRmwo+dRmNs2wWID/xEGfHSZ15Vw//C7t+e3MwGm9ZdBoW5 TdHZU8yKVOQsr4q0cliA5UJOlLyg0OwXlHoJtkDZF8rK8BISf0NolIN9WSb429wF2aCUDOVgfplY W5iGsrK2p98HxWJo/4RP/XZXY3Y9fcwfenQzrik3AwmZMjc89e8lu+SQ9D2ugPrNfH2jpXH3fjaN BsIIgYq1djJmMGxR0WLu7pcJpmQGM+3fXHVc+5SZvME0kzE9v/uD4cSrcoV0RmoMEC6Sk7VKactq jOW2fH6JoTtXO9rxHeV99NJKFFTlqC3fnetyeVzs1IeF5b9j8rVWBz5heaNv/I1pt3+jNBAtUB/s gMmj/asuQHx0ykILVINPUzgIS6JsESrDU9AMPs1T0AzazSfuWv2M7RatL5e0bHczmqreSjAheod+ CaNCfrpALLqwA5kLgsAfzHfMG+60xVeOK+SjZoh2SZIDJKHvtrmTdezld12leVlzVJkOpFXHkef0 jxpTKh2FvBsrIfyF/NuOCF1fwgPhjZco2bRzgSo9lxq8E0UFS5rJMTGOvcAd4VghkkXKVhgJE7bK mzNvUQgYR/TnncSKIBGzoWNhgWJDnhU9HWKCMwr2oMIdbAnZ/9IWha3wN7SJT9O+hS2hREppoGBz Z02Gp2LYqGkl0pFM6gJia1oqBZ4QqzMtDhq0GLAiBqZT8VYmOi3T3EMpHDwOCvdMOzwe4lCOzMue dvqlw86vjEVjZTQK1WO8Rh3d0F3HaiP7sFD1beMmZdXpq/tz439zytd6xh1i2nswCS5RpcMN9DqG g2BUUbUF01kkmqwfw+AUwDCrvYCfvChO8Q12wOB0IYcHnbUOr+Pd3rtzOLCf98hb+oaopLUHVHKF i6m/JiD76Du6lyz+SV2zdhR78xqtmH4XXQRuhbQi23sotqGe0Bp16T8HdqV7lsksfbQPaIGt3O3k fDA7nn1ug6gxI/kPbjQvYqpWHCuchdV0lBjuRB+s/B4CVnr6tiHq6uZqR7N6cJyHr+T142d8Kldp WeAoKh94wpijOkZT5oyPSCESfGvjhpgOSYgIDMceaiLTolaVlcI7uJ6i1cULTC/Ed87JVZXWbl86 wSutk18/GsEBD/EtkT3CRPCUgw4zc8f0+hylFlRVpigsBvFqSWZkIrBkcFKlQAV5LueDxTSEcte6 4KoPFtDREU9dWyq6NSxklIPkBCpaG8a9bW5TR0ZQ4xv9t+Fko77dvb02lDqYXAgdfRZ3Orechrt2 iB09miycFJbjjUHMFyNXY5aG5vaFEyXsiTpnxIGkVUjnibF4ME6zWO9AGiGzKSq7r7HtMD7gznz9 bNSFl4WLmI0KUrM8cz7QSRnJ3boV8w0RjUkR6eLzd0L5pybjK1xBuNAgrGnpxvKLTZQO9kH7REdi VrsjGSdq5bF9rZ12xwJhTAnj1OWiW2Il85YwnuP3FajJD/0CoeWut7/pPQomCiWs9K92oHLKU7ES UCrjN8HloA2sBrgBNejVLwm7EcerZvxyAxMdSDe2wGLKupLW2J2yVbvOWJWSgrtVor8GOZK3C8Ha ZNR4URijW4HDv0rg8K8n3TCp9GRaIIhDji0UbYU5fNGfag+sTxy0iIfB6rSWJZYjH4z4COXSQ4v2 YaG338lbwSGgALpgYTY2wyd8FZ/2Bpm53y0ha6ODvQMP775AtUhATBN4iZ6040DJXbe/aa94tUzg GxYGcYYnbWfEEDrDd/BpwKw0RjQYmbIeIwaIioZBYjKQ03XAAGHnUzKDErGYDnUopH6lNsY5HTv8 ChEgSHtOEBknx0qkKmTMeqCOhWJc2Q30DygGZA4l6SXVn9Bg16Wwb8mKYhBNPRcbow1dL3r0wlXh UI4LgcV4qJ6nEUdYT46o6FUn/dIRr4v1rmvk5KA/Dbj0O53jan6CUWB2pMSgJzgHzGRcBC3wJHzC heBbcCe0Q6tgNdNuesJZ0Y5AjghaKVSYo6Ifv9SAqE9bo+iHbeBhgGXZ05AEskN4MzjdlITgNyr0 20R7MfX91q1IQ45b3v8f2GsnUQplbmRzdHJlYW0KZW5kb2JqCjEwMSAwIG9iagozMjMwCmVuZG9i ago5OSAwIG9iago8PCAvVHlwZSAvUGFnZSAvUGFyZW50IDc4IDAgUiAvUmVzb3VyY2VzIDEwMiAw IFIgL0NvbnRlbnRzIDEwMCAwIFIgL01lZGlhQm94ClswIDAgNTk1IDg0Ml0gPj4KZW5kb2JqCjEw MiAwIG9iago8PCAvUHJvY1NldCBbIC9QREYgL1RleHQgL0ltYWdlQiAvSW1hZ2VDIC9JbWFnZUkg XSAvQ29sb3JTcGFjZSA8PCAvQ3MyIDggMCBSCi9DczEgNyAwIFIgPj4gL0ZvbnQgPDwgL1RUNiAz MCAwIFIgL1RUMTYgNjAgMCBSIC9UVDE1IDU5IDAgUiAvVFQ1IDI5IDAgUiAvVFQxCjkgMCBSIC9U VDE0IDU0IDAgUiAvVFQ0IDEyIDAgUiA+PiAvWE9iamVjdCA8PCAvSW0zIDMxIDAgUiA+PiA+Pgpl bmRvYmoKMTA0IDAgb2JqCjw8IC9MZW5ndGggMTA1IDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+ PgpzdHJlYW0KeAGtnVtz3MaVx9/nU+BtySppMsBgbvsm28kmW1FlXWIqlUr2gaIoUY5EyhJlJ99+ f//+nwYaMwA4jtd2AURfTp/7OX0b/1h9X/1Y1Y3+2+zqal/vq8+31V+q++o3335pqpsv1Sr9++WG dqtl0/pbf+xWy/1qtdpUu912uWsWNx+rb65os6rX2+rqpmo3qW28rj5Wv7m62lR1dfW2+lt18fLh smqri9eX1bq6eH9Z7auLD+l5e7mgpEp/XxW1N6n9P9LzNpU/Xlbb3PLVZbWpLj6lcteq/SIgv72s dnkUw7lOcAzBoxuf+8vqf6ur/65+e5U4M6S4WbXL9XY9JHiGTFFx9cM4rE3TLtvVqh4C25jb8Rrw bB7YblkfDrungW0tgDlgvVy3bQh1jMb6aUj7fdKQtlrvl2jKKuvImeCkmu22WbYbsemwXW7Fr4+V WLdqd5tFV/ahK0scOKjdh6IvChpld0m3e6i5ZlsvN4ddc6jqw3IHqvUim8H/3H6+uf30+PX6Q/X5 PRi55bpJyq3WI+NgCr/5w8d19d0DWvT94sdkK9V6g/bABYxN9sNz1/xyazvipewNG5ywtyykup3W xP16uVpvfo2QRv3HYdNsFj+jJD/IldTVt6/sOqpX38LF5+DNP7v9rl3V21RzVLTZbJd7nMt2t1xX Nx8XVNf7w6GtcUHLerNZNYc1yrBt9tvNCrNZHtarerfZI/hXcP0XuK8VmpU1fWtc4jU0wM00D3cH 7G+1xQCfApYlMuMaamA0UF6CEruQEWIewxBlCrf66hb/VlcXXz+nF66tqS5wcxT9q7pc8PHtZfWc rwc8nd5finZvbt3r2h3cuWhYeMbFkWfcN8v9vtkH0shLsaCWXPg3v81OaYuw7XzQQoY+hBcs2Caw AU2avtvPa/qCyPKXu+TtiQL4fKjkCbNrgsqbogK6CTmQqIp3Rdsour9c0NEV0Z2Y0cP6mDhL0KCI IMYzOhLFBNLDR8/Hy4XKogUSYmgiGU83E7+pj9ZGza1KWjwk8bHH4msaeUCLKR4gHuANK5BwH1RC A/uD6AlkY+TRoy3h8wR9MyMgp3aLC3PDCDwbIcmgfyoIl76hkwYWnAucYmwTbdQMP/rE0O7qMXs2 dpqK7x3XLKIcfqfLWVY4k3kf+rfFxRcIkM3cwHa9wcRSJfVgbNKZf7kCQfIBasnCQF7v3BlloPKL 20Dec5geAL8YiqvQqqKby25ggQqhN0gcMZ6m3S8xuW21LYmcC7rI/+qHxXjOs1kr7h4Bkztqpzm2 yO7oPSb3nCRNtPOCYc8Rd3xF3dIkQaAou+IFQ9BV91voBX7P4XH0i5aoqArFZZrAEb2iLr7ELQrh qkCjWJ1enHgc8rrlarOvh0yTzxmPrguy2fDl+JxPUIZQb28lTyWiDMnA6DBPFF7iR735QEOmkWib zbJdN5nZvy77apv9st3v90FRkZ+PU6T8vKfo9S2sBN9r2Az2fj58vRdhi4vbN67FM9DmwdS7yDTf 8zFNZ3bvm92yzZE3RbinbBBZhmbIPVgx4HslBeH96TKpS+iJFIRCt3zrV5SF0jy6MNQklOZZJcuD SBkl1D1WEmrNaFEQgz26Xa+WBjbU+ARzcREDBRJD/X9WHSEV1bhwDR/IyXRA4T0OuyO7gIPOVYUl 8Bl4pFI+g7hoI1crXVxIWYOeAhrDVpnRGp9GQXsgJSFQmIeUsBdTs6Ys7LZdHs70uJ3/KPydqEf5 LNAgiKLwnMKy/4KiafdYbw5MKbCxEqE57wh1aRY34mprpiebummGwKTK22ZGlxeeA39GY3CH4j9x hIRAL0aDEAkDUnEdeklqvJAazUVxX6bUIuk4NWICNRI1LwNS8OHjc9RJ1RgkwMfI8VrO+cdmh61u DkNCp7m20PBTc9+sEQ15btvH4LoZjShDT/sCZM0logT8I4eCXoiHUDOHJ3pCLRjw9N+QTzkRoCtB hSmBEalcLTExFN8wPQoi6cZCBrT0WPp7EesVOHTauH3Ztxz9dCyvSBirD5cLqEC4PF3yM1KyVDvy MLwO0ZIkk+2BEe6aLKVA+tXvDelPvOj+Z3/9McH6zh/GE5dHfckNFAuemGrzwbXmgHuV/C+Rcq37 Gik9M3UocMdJ9/rPzl5HVl3aw2aJiW2Y6klffl1QzKq3qpfNvgiJ68OUufZzq37JCoMy6QjtILYp o4NopAVBnRJBNI4K5lEL83i61i2xbUpgEk/DEcyFHPd05GxAfHVQmpIo6I1nhW0eJ7ALT7iCgov3 jD5lks1qv9y15OIncPHZVzeLMUvvOcPUMqhDsFABRZHYQvYMMW29XLfrXQw6I9lMAuNMURCS3WjK WAh23KcMc50X1mlbMkOg90IfKh7SlNnG0UkcKQ8NZYbEesva6H63rY7wmsue8f+OD+9RIIVZRQZe DNpls8m/ykdEmH+P1asNIlapsgWJImUyXfCOyoCTEwSSAHpEHf5HY8AEFaKcxVd0iO4KTdL0wDGV dlgpRlEJX/UadgzcYogYVwkFLQP2fKa+aZarLXltYmlhAeMhdxg+PmsEBCuscUjIFDZFjPRHNBDq tAM9+ABzpcXjM6T1gcWfdrsZ4DNmL4Oln3FY7YqlwRUTgGPaZqan88kS3LbjlTxxM+gInBcHJFzK RCgvFS60kqEP8cBl08ab7Y055mrfS8HTpVF/0U8u3nz9BCrSnvREGIymVSepwJtleoMQX79FO5FQ TKE0q6DQDe8evr67GxRoyjKNcNNultsDs9ZNQrn3EefZYuhy6GsoakqHF525RaVWAUATbMTFMKLo 31ndDKZrnPF2jzM+xnRiLjr0Ztdfgz+3abJWMjnth3QMBE0LmZIHz+TMzjchimt/xvTOsnrnF5JY 0C0kF3LJc8bbewwG0FqERNPSZHFaLlmRmAxue6GcRepXjxMovTO6LiN9AT8j8HAfVUbXhaY+JuoP 71x4/enO5c8KHTSoOy2OihqP4jE9lkvuH/xW8obJXY+yV0i9ubWAAmAsGQQRQ1oCVnTIKHgcpCNo LxkOo76ysn3DC3uZwvH6rHn5hpnRvgyi5ywYjGrJtc18dmZRM9puV+M/07DhSqYd6DlTiw2pYrm8 V2NMx9lRdfVxGBt+R/BDaxGznSTMDUtK5UiGxACJd/x1S1xBsvKYmFNrOBg85UNFmjH6mt2y3Z6p pHH/hZZwF2pphK1EoVjUzKx7Nc1ueYBVxxybWBAdcuyLImciPr3k4vhC+bATcICNfdG0A2jIkVpW q04pXz+1scXS28+kDo7kZOIYOEO7BLIpgSE8XYKkaAl6lMhsEBVmwxOrMd5UgDdPxAwgN1WivpAb pzP63LXBlXfgXiUIv9c8C0h//mOq+s79Caq0y4MLKaOJmlAOh3h6PLdBrVC0bnpArYkwZi5Xy8XF MmHDKNPMzd61Zhm3DNMjBhHThT5MX8E2qGEscweDgAv8Df5wzU/XogiUW/uu05IEVFMCv6ClhOBQ bjiuhS7awE3a+2/DkQNNxt4ZomuzXqcOEE+1/CQYuR6OAsnwbIqpOoNyo9KO3dRIemj/bfuO4UrY TPi6EYyAqS1dvnlXjJ+9soscbzUaq6kJYaNtcB7MuJQlJdaG4L5m55c0W3HfKfa7l3GY8nSCmbj1 tFqt2HctFvXGovaJWr2ONWWmNTMDNKzS7dnyZHO3G2Iurbx4PjM3XK9J0fcFsEUcVTknst3ex2o3 3EfsFrL/DvmFilhSllokAwgD9XRjP7+Gp76/jeDuXi/R4M3iKIy7B1YODDf7nR3M2Ip7jxFmen+T VPT2WdE3RI/U7doAGhle4P8QCeMddkllr81pUQnSv772IFg+XwZkCgcbHg9nZRnsTfTLOVoynZnj MJynxHkLjrHxi/gSuVtQINTcYJX6gmTTxxO76CMSZq6PKHMnKKUrlPbNkB89WWgXzH9gC6pyITKg amTmlPaA1S6a07BQ7ePN8paTDXt2VM2Bfu50xkSEDB4RKOGLV8y0NS4iE4nWFSEjBSPa4IlUmGfq 8Ul4VJsMDoz1KY7SVjzi9SHv30UtGqRGeA/VIoPINZ/jLuCQ6gJ64BP9cG3qEIX/9Fd0iCbx9TNY gXKMEHVBVSAlYQEs6Mc4NGy0vOKLWJIpxiGKVVGZifoQ0IM9AYhGhcjGd405dLTc5FNMZ25YvS24 JUQDi0rcg23BkygVLmhYdAm2RR0ePckk2V7mb7T8yYRGaQKdYi8DRm9lanCtQu0pDMjVUEO67kkz 8hB5Iyh/y1NpN0y8BuI3vGD50SZWHuA1iPWSr0JbAxnJFfEEho8agM+Q9rMj5Lzzhb0ydEblGDVp bw/QbU1wAPXHY2x8VcG9t1UADExwb5JCZyhnKIZ2j/PSNIrBHpOON43NOYaT9ZdwEYxhIgOigmKs kGR7AV0QX12GSOtVIpzWrsFi1DpqUqeUk9EpqqAq8VOerISd5N+XQXX/gUaQSLkIS5PKeBxX3CW3 OBgMNvXdYR3juzs60FegvXwYo4CIv6YIb8AgaERXbRhHNBSgogbh9dihZ+7fFxlksIfG1FNEvf+O igAWFBkmZ39obCIGaATiPQI0G5aZGQWZaXFIoosRLDtSH9jkv5dzjoejj8t9yznBttSw6clxwmdq iXzD+dXDak3gKYGd6cf+kE16Dt2YbXBic7ku/eRZoR3my5UrGYE5Mkm+YC+W8RE3Qlm0kCe0ncB/ R/BBa+RDHxhO9UgEx7RuZNuAiG7DIeNoDv2nA0LTHpaHhhnVCalnTFkfq+xDX5jWv/rl2JA2FsEN 7ShiwfFhg3Ch4ggqHW3jJVVTRpJc75HHjA5VbOSLAfQP2cYXpiHmYACqS36ZWUp3IiBadURcuV0O BD+k0cPTB0aPZdwRKKMovsuHZYhzHM+qtWaZsEiZNouRdZ2hjz2OwMdR47GjNzEsgkjgZPY9y2E7 GBXhpKQKVc2ARVzy35JfDmPBTWUv8hplcMpsMFO6cyUhKqAmvDrwmVsBUdbQq0B0MvgQgiXIoMzM NfgREUG+wNqeCtkbpYIlwj19phWRvoMbRkQPQjKtb4UHHWOgzKag4zNIMeJyTvjtgcsG2/22Yrew E/+oF/RuiNzGlBfMisT5azaRuhOANSuQx6o03EBlsek7cAZXGMATKuE70YqA6XJGpeRVKnGtt+3v YTyN7JdgBp3hBROYshsW3ZUjRf52e7fxMCrJi/hugyyf8FJb7gWws9sTO+DbkMQz+LY+tIOl1ZEZ 9MmMv4sdobJhPsOkzEoT+hsqWj2yAyvtdrrceYrsVkKj3BUWyeDCtwSE8HNhPF2+PeW8SrN8C+dn eLuvOb/PVRczJNZrB7xlhbnwRHMLFM2euwF7zo8PgJ0Zmced6bOOZHMnWNYflUteAxLF3mCdW04d ldOa15F4Qp7mmp/RgnRxmndtUy/rum1OyT0rUXBOwGQUaWu4zmyY01IkpCiSAvByY9HJh6aevGxY NsFoTbMZfFmqWO+IVCfimTkEiwV7zeJDMFluE17H1wdG1AQw+BVT61k0wnOt0bzBWm4ywbm1sf6E 6gOkCwcEbj7wgdR5pkUb3uypSdAuzBtn7pU2Gaa51KxQYnZzuO7TI8jaBxfCTl1rto3+EIl8q9d0 kCHDd+vkLvdyPr7VyFGLadMeMfNEijxBk3IcLH8jXWeRMwjvD+xdo4UJ3zMseDkdVZpDs6zXvwQY op4KUY2OPGmreoCZOHnOcZbfomgwALYRc2APT8aCGT7SRepLCWrHE1bxdJByuVvCfp9loldZghMB skoWceDOcFzup/uSlQAZl3B6WsaJPLWGTHrD3+5FROBvY+5aREp741aWly1NryAs5Mk62o3Pf5y9 SbLe7vulZjnfc7xRXiFUsoNqavIwrXH1umbacEDl0lD9Jt8ZS3/wSC4NE2WI8GJ6aSrjTYSiLkIr HFNheJ68AhilAeY9LE6Y8yJJ0yoqXT6c45Cahtt5jcJWwTmWzkYPzZ9kBaO79w+vGdhuSJZuPxXn EZAwNXJU2vi2TwpPdnfvyh+/3iJ1Oj5LbSGRlq5ye5co44bW8HVlTT7DgPvADQX0h3cB3rDz6Xf3 uwvswGpG8L7TteZSW3nkdU7DnMniur9EjBPS2IKkB4EQ0oc/x0IXgRUV0gpapcbMRXjPIMey5ro9 EN5K9EZTmTPS6x3XDlYbfFcJbMKaTnRixJogZnTFfRjm33gWYRZocgzxDvDBvVg0iF7xhX9CDcJ0 3VdLos6xqXG9n66OjgMh5FPqIaCj0dPsJqrQRKDmTQwZKWgSVaAR8NMSWh+4Bblip81M7f2Gkqjj WUsOrZiBE5D/ggXWFZ4M6tGIlNyX4G/YhJOGMfyNvYEgKkQtyGrhykUQTDX6T/Usqu2OS9JasTpG dWSicIIp6X72cNPMyGlQu17uyhNDZ625XnyErKm4W9c7ppnEWE6lDmCfhbv4lYKp/Kf0TE5KisJb yXjyq/ENIzVXybWIQJpgCFGnU59m+TQrGjZHOX94GCI8arnWBsluivpmtdbFCNzAv0N9CkNHJMQs a3HxAlpwXX/163gtq5N6TNaCKxHt4iuxyIsOJV+HjWS8aG51Gv5QW3MXdTbnPa8MLscgsWKBBKZ5 jnPDh++DS15AmEu+51jectJvvdJEKLEcYHljeiZl7uz6ZyiCWlsr/HdqRgn4ozlMnSmR53FO1VUT LWgEQx1NKP8xdXbiDCsoga88YRaA4Mr09Z7NSnefj/gx+uMP/fnXxZQKZtMmTVoVN0PmbtN0YfLv aSoFup/RcYxJIuVLuQ+v+JK68OUW0KsP2Ru0KvHpqmS+3Ud0ChDSMRhnEFKf1Dc1l/qkXppBwWWe cmgUDXEK6FJFOstyurFe8iGve8Ubnf3GXsODIW4kGejGK2gI3KT3gPr75ZwCrznyteHifbVObO6D yTlerlsJ1fjCujQ1doFBZNp01lt+L2HfkC+WAh51V5FooKRTurLe4a5aLvwPgCn5nAgEJ8mGQgHn oKTrsBrMeUIOT/Eb4RHs+UCq8uAuwthqZu3IrOsSNaA6sc8TDZA6fTyY/+bmj8b3ADAUtQqU+Jhm Y8uJ81b7OCXlsy5oOc1GfkhBF7s2PTC5oFGZPB1Csv2y3MgvZPTe7Kl7+/pFmOl7+4QF5pvIB/7A PnstnuI47IOXfEgwGJP4x8vN1NGS64qwcoqw4bA4KrBhT1KpQBT8Dfd5MoUQKEmPl4cP8DEYMZ0+ rglkovUApyjrOvUURI1cBcf5AnhAMhLRKRqSWjJgNMC18IF/A9fo6j7aKgdj15sT02xxq4RBR6ux d0+mNQL2Iimvx/dzyB6DGWOCcUoEpFMigob5dIwL0jC8rmhAE16yEw9twyzGLmN6jtVgHRz16hb2 5+ZYSaP1oxHj8w740M8jELM+ehRG7qrVbHzu9+t9ZSR61zp2MO4k+71leZIRPiEsHA68REfzXPPa y3KMTtXsCfLc4zW6bHzp8emBSQxvg/bhMNcjRsoNF2Xj73zMPA6qKYHAbw3Os99dIyKA62wxPdwv jrzlGXSc/fa4D4qasqI4SucexiYGCFhoIhAHB9wyWvOsD+nv+SmkwvU8KX25niPpMw6cV2CDRB8E i19mQCYQAdowJGaCCsA0A0f6uAZbmHbeNWFrw/2lqkmY/kIViZsW8XsDD9iGpICJ8bKGLAt5Xhm3 O/PZrSzp05KQwoNb+c6DZVfqUSilK25RgmlC1w220GLt/xah13EWsUTXqlGqXD72/kaoJGFJeQZc YfkPv2IweHqxywSJ0Hwm+DrocrM3JXesfK53+eu4YDPUZbT/6fWfhsnxwDVN/55Nl9f+FF7IPDcK oZtRA4roo2tw2lJHzaR4QQ81sTYSDuwnNwwmuZ2F/iy1dp8T7QaOahZpQgGTY2xd/eyNofeRlEWL WA6JV09FWqsFx2gWA4ZmlegPCPNw0ccf2iIEDpTPKGNLRqIFlFICo0lOJJ7PpzOmNRfJ+K2w3QCW FrhGNoNOcs4PeRFXrIKNkCDkUV99RSHalo6zo/Cq9LptP/eNUtyM+kjiPaCAEIUB9n0A7Hqkua8s XvnTsAvKFJqjlxgNcPRDMSCQjVl26sdplQ/LOc5vWCNebVlJP5fzDDKV8kd6qcM3bDN1Eb7GyRwv ggXj88Xh38GBSais+rCA3VTHcKUvT959vo4AECYJ9n3sEIdgIixNbE5qeuMvlJp2EggNJC1auO91 fA0AIgAaxFAs201resPUas917iE1Y6pu3qSNnCnWNPzaXMPm9BCYdB12zbOcsJou24K2vYuf0E2J 6OYFpTOE4Ct3zaaOsSNQThOS+DdFSNactS4TFDH3V+2n6bAy0iOZhRZkbYp4IkhiDtLib8h2ykAS C72U4Ju7Nrg7Z+9sXckenUNQhJY4HaYpmtB1eOlGVymSfeOBeiBp1cFzpRnGslnT7A5oSOJG2NEY Y+unnWGzY0er5YcTB8CkIad7vifOcPzkAhxLKwvhe2QOuCCZg9xcei80UZNHispomjwaEkHJeBLh Epw5JVvrfn6DFzT6hWbMLMCdtWcdv2LKQturhA048TeyRxvAmidI80TQlKMr/I2TstD5Gy6ECEem Ou2GEKTfdjqD64NphuY6+WRI5/nz4RqzLdgfC6NZGMeH6OZcUDa2Whc8Cjc9ohIZuS7bmbsaDn5o QD6oMLiyLLNAHTALnan4hhcWA+6oATZCL6c76f4rX/dxDsJ1ecbiNg/SImBxRV1zm3xZ14lJmQvH L3oZq+jkj/uTu+yClJA7mV65R4lqXMp5HRMo3eVJaWtG1rl5nlDdnnXZRmcz+BWKPmSOyOLEPGOW Ede1UFSIMLrBTfPERa7O/BG91/ne1F2e/ZkC03oXUzz3c00Jz8k+yzUzjqzlN4mYblcD6kYdGQy8 eruYPYK14UzShl8XHQAbd2Ro7fAi7FmObOrMmU5lwq4jP3d0ShIGTTNijTvYrRQqk5j//73YzNCc e1nv2cE4ZtvYUZWsYb0DfYXyEO0cEuEAVotb5IladCEUtwh/CLAFGkd3qto1KWHKyY8UfW7+nxMg ndmYShxafkxx1cjTngE405e0TQsLoxvXMdOJ5JCxCfoxX4MbeB5l7XixaCC9wI0tU7tZNQi/Wx90 GaW39dUZZ6TzCU2NCa+FAYiADiM/RnQV3hw0wUgpjPh7Eks006A64OTDzwbknn6yB1juh+bz1VMn w2PKYThDS0mTmkW+7HZ0JDv6aYsFstwd56W8IMqiw2OPKrEoiOxQTb0zTZrJAiwmUxEg4+UREqcE RKByt26Xc6DHRxfNWm6qMrfkZ7qPhbhtnj7p/nen3BA3vwPU4utW/Hp2jFL4i5GwkEN0p9QzyyNy +93yCLrKp6JZYbdH9GaV3evCSK+ysYXzNMVj96eIHNq8QT6oMPqoXRmtYlNGmkUZsnKaxd9gN7HT 83EAACnm1l7FBhoaRBnWwROdzPV5aBcVHZNX02iBFI6fPtgabHIzKRzOL14ui8bY/zQb15wDWPFT 2VWdGBkCnY6Eie4pl5dlwi+d78s7befMlV6BMwRAEyms/wZ/qUE65QdheHt4Dv9hb+fnyymU27uN YwEGR0s/VZsOzVLiWsyZsUoIyJcSQ3Ctx/KEzDjkOZU2cDBXoBnb017K7LAoN8K+IQDJdh0yIG1R OWh5MAOKzu7mav/tiGcKXF6OX57ULMvNG5eYSkMzEqbPMHtOpxtoSMAt3Yvk3lOMjk9HqE+rWtYO 1mC4pTibUJ54jsGPyfKj+taM1+CqA4xwDDT1gTDQIAwlUmyQ5gMLoMatXiIUbKdbre5ruLw3jXzD rwrstvzKf8K+8Dfjfm+Y5MWc4TrhmyIgSD3LSM0MuuXACCe4YtSeZ+ODFlcGyCCO0kAUoAyvrwii KPDvKWUS+Se//uzXH3nBr+/8dXzm5m1AQlvUCtVRbEeP9DXY1AcHFE7FETgj2UXNVYgtpC7SdPm2 1Dat7RZBNkaJtmgiDRGqWuR+8XkUv+eEmTVxzc/HPCnKxNVulhk/Pxb6GJpndYxdLNgDchPnP70F Ya2MU6yxaQeLIA0C4cxDVFljDd1g8+6ZFd/1n2LO6Hbx21DxQ1pu0c2nDF6MwwQ+hQ2Ux/ZDQ4Mu 4/RwH3HbAwSKMUBpWlcSJCccYldJQKZ1O8ugIW0p4veIZp/kxv21u1KPQg1CYSY0LmWOWWHkCqR4 L3hjC3/160Tf4TWNAq7SbST0bpCDZuU/XuqwuobuRmYcFhE4JItYpCQeqDHGqJl0x2cCXB5TOSXC DKPUjoZEayxjrKhLmTKVE6xJYAaX8RediUZaGvCqnNfHSk8UCzHAoxHTUm/ZuuT/9kD+mOT+69KN dLePO85DYOQzYzPIk5DyoozLyJjojLx4OoQyTXGI64n5/v8A5jYG1AplbmRzdHJlYW0KZW5kb2Jq CjEwNSAwIG9iago3NzgzCmVuZG9iagoxMDMgMCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1BhcmVudCA3 OCAwIFIgL1Jlc291cmNlcyAxMDYgMCBSIC9Db250ZW50cyAxMDQgMCBSIC9NZWRpYUJveApbMCAw IDU5NSA4NDJdID4+CmVuZG9iagoxMDYgMCBvYmoKPDwgL1Byb2NTZXQgWyAvUERGIC9UZXh0IC9J bWFnZUIgL0ltYWdlQyAvSW1hZ2VJIF0gL0NvbG9yU3BhY2UgPDwgL0NzMiA4IDAgUgovQ3MxIDcg MCBSID4+IC9Gb250IDw8IC9UVDUgMjkgMCBSIC9UVDEgOSAwIFIgL1RUNiAzMCAwIFIgL1RUNCAx MiAwIFIgL1RUMTIKNTIgMCBSIC9UVDE0IDU0IDAgUiA+PiAvWE9iamVjdCA8PCAvSW0zIDMxIDAg UiA+PiA+PgplbmRvYmoKMTA4IDAgb2JqCjw8IC9MZW5ndGggMTA5IDAgUiAvRmlsdGVyIC9GbGF0 ZURlY29kZSA+PgpzdHJlYW0KeAHNnNtyG0eShu/xFH1JRkhwnwHEXI09GyHvjmLWITr2YmcuaBIU ZUukLFKjnQfa99wv68/qrgK6G5BmN2JlB4CuQ1aeMyurmr8XPxW/F1Vt/3ebqthW2+LTvviP4qH4 7oenurh5Ksrw39MN48p13erZflRNvd4Wm02/3jDww+r7q6LtQrd/XX0ovru66oqquLorLorL4urX 4l+uwoo5pGZXrrcNUARsdfOhAFi5LqumL65ulsD+Z3Hx+vGyaIuLXy6Lprh4d1lsi4v34XN/uaKF dWm5Snpvwvjfwuc+tD9fFn0c+eay6IqLj6FdvTZ+5ZDvLotNXEVwrgMcQdDqwufhsvhbcfWv0xR3 dbtuy7LKKf5G9nX1Zl3tdpscWCfB+dfZsuh29bo5C1h/WrAb5FqWZVds+talOkVjdRrSdhsgtUWz XQOxrL8OnGm5IdOVJWza9evemP8h6HDbbtrV0PZ+aAvs3Nm498lc1N3b7oOZjFBjT1+tu92mgajd egOq1Spa1L/vP93sPz5/vn5ffHoHRj6yDkZjoyfWwRa++/FDU/zpEcP5afV70VXVelcXTbduIMIs d10jsJ39wITiWqesN4BBaw4ZalaHwGasLkqq6uat2XS76jpQ/GZRTTqkXVd3qy+oyq/mm6rihzfy RcWbH+DlSxDn32a7acuqDz0HTV29W5smbnBWRbkqEX9fb3tUAlez2XRV23eI+g18Pu37yn5dAwxZ tFGzDYFTjMNdPeMeXpq3ecZz2A8c0Uv8F77mZb+6KPA81vqJr6q48MHeGMYMfYUDwA8ZgGe8zzjj 4XKlVeJydw7RJ33WMrf6KnyUjylscOK9Vrm/rns4Wbat02/8dH99mgGri+vPt/hkSLyW09Tn/gOY mOPV41OgReOgD7quH/T0y95nP12uaNbAzz5776AF5DGf8fjgUx/x4iaB8Kmh93StaHM4jwKrPsYl vDiMgtKEfrdVGBw5sVq2IVRhLzz0uReZWhJRgszfA+E5ZnvH9/E2ZZEanV5nycePCNEUS89xuFHp I7TifeTS/bUW1OKPnzVdvdeRMQ9vR7atTEtZweftCbsA1+deXVppvcTBttqs211bFeLh1zn2o6TE xbFpPSUxf4Y/mJEFWYwlJ8ji37At1Okfl0UdNcNJxmDq1cWDfRUXb8OnxkadCxMfEMGCluzadb/t oJFYI3OZCoSOzlKuVDmBXbeutw4q0FjP0eg+Gxqv7gOqyJccBskMlGJK/MbJwAHRhmrQopHST/1W O7xg5KCqQMN/0ELOU+HCghogf8xZ0FAJZU18qiVdXVipXZCjHq4Yr7nIBfiCPK4VWwRN+GjddAwy G7AS/hojmKLaDSisYuODkwV/4aMxkXuGleAIn0wP1KGhmmxMiawUokxwVVlZYpI717ZpyR/KpuiD iN25TmlLDMYAvfp1NZlZty268VXAcINzaXrbNusQJDPMlsMeLlr2NYQ9sB3CXeCjPXk0Qi4W9FCF ELs8OMFGeyReKqTB9QVLc/tobXMyBKaybY7MY6WceDSPd0gqLJRhgTZYo6FmFoGiGIroTkBRT46Z z48xdRFNQmjd9NuizxEl9zodN249cl4vc2LXkH/W+BxbInEVp4M09gy9yEWh4K2+PABff34OofJ+ bz4P1qgXxYcvjpmaHh/WSzyod/iwqnMeLLjFqOiQO6ebNfG3Jv1NaV2ymdfzoJqSeNSWbQbLXOw5 fLt2Vokz8ckbCZ0WfdVnGYdxD77Na3OzJcFsprQEdV4tEIi3f3wYHDfL3ObSulaUFmKSZ+ZiNVUY 5vh6VqGZctQudCPob6u5LW8MXA2sTCxziauD89g/SLuklO63U+V7dN0klzb/oRF4Gh5Ew/Wny5Xl QjlFgudpmKu8RmQpIgpvknI/T25oiafaNFrM8P6PDkgDrh31/aIpNJ1tJEznAnv+OVuInGZz0vSJ 3bOrmkmDRh/oKYKCsYhTRHsMROPhIH3QKwIhzs44Hj7VO8iFXkXANPxb78rc5yAahepU4bQiwiEA u7DDeEHW+BikVzNB2hIOwREVaAbuW3gO6kHLSCM7k4QKtVNUGqgbR8Z0Jwo8DBK6Qu4DkQq8UAuw UMzXyuKWIKlXPFOL1tdvtRMXSV18nRQZraahAipwYqM+taRGRgFlmjvvd1yFOrxqb5l03NU0xxvc ozD6BTKou8FkDA7iF1Zp0NCq3xVaZ1TVczzti+IOZsfQbNoEB/iCcbaP9jQjbrJD65BuwI0FrMjV 612TI7Xgai/+MB9Lqt1m3bS76nxgiHQuxkWhbAh1wy6iUsVVX57RNPDBSq7/vQCrohrW7nqqvqeg ObAlxKziY4WyDJiFzG90OdFYTVtTVyGjj7o8mqZ0XOaTuh9Zo5lS3JUok09tVU5CMGWq+pRtuekJ dETFgnhqjAydV6emrNfUSlpnzmhMQclPxPA7XCc8YHlT9C987YITsyfMfmHVpkG+FVqcync5V5eg yRxeFDAoScTdlkKSvrINGSh5tcntypPk1ASDa11AkCJsXbIjPkSwmvAxxWGq/gV54WPkadAWPA1C gDe/KcznHoje9RKz2q5c99VgDFNbrtzL2WKnrLRns2TnIuY6KW5YNV5fEdRXWelJaBLeImKDlabA Zqw0IjnoxERiEK3U1OE4pA6Wc2jEB5aDJsv4/ivolQxUhitDVK8FuWjEghCt0VIz7bctWg5pmkzW bD8GeQGS7ZMOEqC1jFoWNaTBnOrGjDjlXRYUco4tCkJb1K41z/u/piEnoUmUi4gNGpIC+/+gIdKE NP9TTimRjkJeuV9OdSPVLkFIFUFzpSyCKcevfFeqoZY0XzsfjunzyjVc0KThwkFw1C4cUhrVLtpd PWfKPBU1o3aDt08Fl6ln7kLRgtkyT0wzUPlpBxZBjQ5sHtaQZpyENqjnPLBBPVNgM+oZkcT7qAD1 7Q7MPIgpVO5+JECphnIIBDgf7+q6RkSW6wbkk1x3ojQVkRdPiMjvWcF2FF4ne89SlgKgLC+lXZ4Q 2BcoWez2oRa7bSuCnltnDNQa41DRM6tt/UP1NfTTYc9TQ9a+3lR1pGZMaqa287lnhJrrBy8/DFED fDEv8ANdfruyT5+dNx2nT5VlDiknl5X9ZLQuW6oSo1C+NXH1oCfnkTqt1IX4IPkB2bgCkeKa/IB+ m0cK3mNeFHUJO7aQz4ncWFmZZIdsYSkC1Bwi923JtiAFZiY2sSU7kmtWNJEju/fTp1Abmr0OUXct F0A61OlADmV/Rs3iE6qD+pqmkxOSldiXP+HnFli3LTl5iquOSlyy+5uolKy4zTJWSm7MBtFVMyy+ EDBpJlKLefPQ5uOenswiaTXxS6j2RF4zTodnAEEZxqYpiBpGzmPDrPbMl9qERdaPnxqhwZx5drTN Zl12nDwcSmFK+EcuarroZvQg+wUheLhhk0y16qQM7EZRNfj0G2dVYGk4wDJSMSkUIO9CRfCCT86M gelWE3SxPGmIi9P8JKDEzxtBxFtZG3Y7z8O67tYtlwkK0eMeZdIaPeAhrLmtRF1v1zi5TQ5sxhqP BLLoZS0px8sqXPB5Jdr8BNk9lFwyCDJAv98mpV4arWt1ca8+uW45OhgGZ9N2NE/89Gnk7Gm3TQtF G2OwH4Wrfyg2MpF4Rf/BGYNW1GAvtr4PdfbPt+58NOLEaYmS8pbt8jYpT59zHHPn0VgbY32a2YKw 91ichR9sTu0LdOYViAM2Lic1xREiEz7pyAG7Drvyuiq7/0FWo7JLoUfXsFC2pxq2w0aPEFpyCoOB epx/mx0nSaHuXckknF+upT7xAkcs6CM0q7bcprrg1U3pWDzWWGRqw8llV5Ifi6tJnOeklX9T3j54 GtkoKcsHuIgDAfUKDcT18gD7OoqzWQ94kjSboqr6zTBTCBWabSregzZwr8rgo3hAV8KwlQ0zoCFG zKtIy2HBhqpiLpLMx+SasRTxW0LvhgLlkb6dUel9thA0arnpG09FbDb1sudFdXez6/t1lZ5VTKQb Rw4uO4lybeKcx9ScVBZe4+DmuVi13Xq37dCJsHbch0/cYPV4s8TFGMRaOzocg9hUGpmLBtWa2Jgo HXQ7QVViiQTiUA5ZjCoY6NtwxKB6DHYkbYP1zhQEAQjEw6eAapqWsfa4Q7UqS1xANRXN1cL6reXT hSNChhyXboFgeWvwfsOKmpvCFybCQRAOCY4brnQtkUfMBnKKW0q2YCq/jmPGc6KUA+IJ/nKgWuPV Hq+hGC3igEHmLlAYP8vcdRJX/4INkIxohmBDq2vlxO2PqEhcAqEeOR68nLKHFYp09nWyuP7EVeyK Umi9YZtq11B2iUXO5MS5l4z5GORapgSnsUU4F9KxkKaiGAsmuaXKRpzT2v+kRW57nbxkwMidJjiZ m2S4oTmXklXcWehqNr4Z2G/0vRXHa11wvofiVlg6fRPkA6ZhUQNOW3DxJ/QZS8ziEmYpz2HDsBU0 OhuMxOj3JgJsAi2NZRrGfQHrR5HtSxFNqyHrefE2JReCa3Z5Ke+WDkCMrDlBNJxul9s6h2XinciT jiLHE6ijmVizqSnk8qAmqey99lTY67gJkBrDIfj09JtG+1M61WGqKSRiwbcaHLcKhyp4sG20FO95 keDzJIQcKj4fU8rQcgAOe9jYGEVxYzOOn5dN9DtUqYazxWljOWLmYbi3DTir26o66bf6EyoXUl/T MHHiZGbA7fjtDstqD3A664DoFXyBVTAZTYcr/PZzaXhIE9jRhJQ4M3oTcFILyi7ODZPBmDGIgU92 gNIUfr+GIu6FIhmGagUYzm9cHN0CB9maMM/5poTPG07qDuk8q/bx14tX4AFBEGHJlmFlmaXxu1ld /PVyHYiD0AUMyI5bM8vA6CToTJzE5a6SoPOzSEz5KZZgVbBBHH4Fdog9sCzgFpiyol+jNEPC0gwf ehWSme8jDUzQchIK5gW/UX0oVYv9DkVOPgVI7Zq1yIVoAVZOi2+XIJmlbQ40qbYc7yfFO9PXb/e3 MN5YPl2wr3oSRVYs2rDcUqjTIlAzXxdXDh3eolqWXrTdYX/2Spz341TyHQQjUUoYuKJBiHByXoe4 xmd3+ZoiYDFusCaibURi4N5dfJFhWT4b28NV3eEK1blbuNcoE54IZcpMcioJ2/EuzrbmDRZ7MW1k 6SliLAnzc/Fhxz/6Qvr8fBxtNGfoX+amsVzYbl/wPcScWxXjvdXBIQLMyJz8OMGhFKi+tSJQ+3ou hgu3nwXJxznAwtwGon3DF94juA1A+6AXg0RSZ64TAlgYrwf4Wjg8pvI5rx4tpXrOUF144uhi5H85 H/nbhlewdn2fSocXVM6z1Efl9P52AgoHryAa/GExn/f728+qHi1XrN1bNJSLmnjKbzjUx5XjI5f5 xnjPWn/hi9ztZz39Obi6P+kBxJAKhQFVBLShU9GY3yCMfyMkMYY4Rwsj55k/XEJKsTWOTd2Kzq3z 4v07FpvLwWpuym7sErMAn1HsZE85C6zixkpHvM+AnSXXiz0mMQu37kkUd1+BJMyfB7azK/DHOE6E ypyTuIYvUI/cUv+q3/h2TFEpRjoGRGhXiJQ/1vjfAxxlG2pR3LPkJdytlINjrtx7GooPVpnXGjtm 4xVV3rgMOn6GcBf41vQ1KQbv12XATAXPSdd/g0gzGNKvBXw3BG5e48yXyHZmuUQsQZiTc7PlHKzp Njkww/esAylzjMgAl4ht5o7x4FW6xi4Ili2hJvUkS1iPnpGXQQ9eHSGV3PWUOTNg55iQRa7cNcop wiIcpBfV/PK0l90e83vOhCaLPg8U561ge5737Lt1UuSYCK9HvnOIaoe7DlMR1uUSkW032JMmwRBa XmIYHmg9wvqE+ObjXXEY6gKgMJWIN6yLCs5eca95KbfemKvJCVvKIYdUbK/7T9insQ8kUaB4Ti4x PPi7f3YNED/iNXXQxjRMXKuLF2EyoxfMhJfFOV/AEk/jeMT9R2F3P4bPhYV4fYm3oHnB2BZKMsJz LP7Jz9p8++v2/wHCCYK+e1/Y+Zr4YYpPg5ew68mMkkZcpSM9kflZNbziHeJzuJN5E4qCrDbnTqzE 3FZc/0uZPmPkK7u5i8+Yh8UJFY7uNCypllXBZ2FteJf8LLwc1oLLjBkRb5ylV8bLbvYgYXz58kdP Xk1uWK8ZKl8om+VHheW7PJq8sQlv9afi72S3Y+f7d5OD35nsGTXKfqL0aXcfdj2lvSaQsBDwzn9N s2FLnZ1rUKybuFmQV1H9QACPSn6HYRsPgmH/X7ymaTYl/inA8qnFSCllQkMLYuG3EELZ+Q2zQ695 fKELh4fxiGj4bT4LOtSEcR92kPbQ9C7UZkhjGKoW4SLYjipKwlAsBO6oQ8iknMLkOZpTu8Dpt8an dX0hnJ4AiChhKn/HFYsBX3IpiDX4Ibui3dESpuKRgGqyho68W5kGm4sPZEQORp80oZfRsKgUZGdL 5xxN3+4HWllSW5zsUByG0MGLfCbC7P1xCcniSrA5w9gpVZvo9Vh0Lzha4F5ntlGzUmnHl/ezm0I+ UCAEXJ/WQoVt0WobXpjq2RIWTcqfSd/qPuzlvD9sqMM3pW0tU2AzaepRdPRrImCNbiBknJV+x6tC 6Cw9MM5COwYBZ82NEbg12vwebYpX6Ic9rMNozbmiCcvwQEbbfPRta86Ia0u4AyVj+D27XBKPFkAU pCHEzhloDKfUyAfrA8UFDAj7FaltzstMMDkHjTGzgarfriv+VkcOzAQzG13Gm1qHqSL8Nc4aScGd WVTx5A+67MlZO1O7U7mt5gWG84/oLKqTY/stB6n3o8wFPDCueLHG/4CF25X65DAwKxsoU3WDEyB1 OAQNvhZsJYfq98qHOjSKFNJuQA1po+GBkvKlT00UEg8f/TVINcoPqsv/8AN/kWLhnlfT7NZbdCjj W6YOBwkV68ypQ2NvNPfbKgdmG52ZYmCuaQji9c8hyLwJ1oVdyS7tOIu4xwOqPTYRcXhAbXRnw07S 1KRR3gHLzERwd/AP5A0YPDeehvneD8tsGI4fMEQWPhGGDRY0dfh8IZOBjBNtuk8UfLzuvDV6EKm3 vNuWXFCYMJ8oBXlLWPXM8pYiWHIGMWBpX24pLwoja2g1r0annXvxFQ0PvQhWZc6OZh8EIfZUoJDW a15t7Hz2ZXzssy+3Lq5UzSQ7sNE+Cm7Nk17jOxr+lFhxTPzsAWuSmvrK/mUuelzXPYktP7spZGle ckTvD1g/VSqMvG8H5r9BXfjzZTAUnYEZfMJFPhE9Hhh0+A0awonfi6wIrxlbGUbIJFFhom4ZkUG8 cl6xbvnHP4dV9cl64IEeszaqAK5wynanYYx60WJ6kZXwYzx2oUoYLcJedOJV2ODpt8ajJcOsFI6N jKsc0B/wsVn8DSQ+UV/WWuRLtA62Q/zdqsVbF0eeJJZD5FezP7YDHabR/hdzspwH8dnNSS+paO6j /z2FeKUNRmJZIA6Qo8lWqlbXa1SSZPeKL4Z/z5cYxixbBeEoCmR530dkZV2O9To8Cd4rLMwE6CHI M0jf8r9IBgp6REPhJfu7AvZ3KnxrYCT4O/pzpMxbcBQPFckyvvg6Hfujzp5lv+HPFy2syjlDXVLs 5coC67paTEYst1eT1VzIqgh/dc9fn8ugWciaML2oZCMZX+cHEqIO6o0kUboWk6ExSZTsPqHpqN5Y ba1EzKFfBswkc+qdFqs3vrO830KhB5b379ybm6sl3sBMU2jv9dhhHpcpPoS3WsKfhPF44zPQS5v4 NSEC30zZByedqtgSV8BqTtI1h4b8aZNdDsy48jW1Y4iABuMIsdFCJCaJNY1tOMZEzAeVYNsVWVU5 E0xGz4GKJWI++otE9vJjubNsKzUEI2g++R4190eTFTT411EAXSCCdy1L/rhlzsiMigN7X6TCrnly EJRDg4ql+yQjGa8QBSJADfmE93yqhRR6noSWl7/DviVj3SQJwdzCjcc5xcLUSN7qA4c0LQcYk7+u ckcwQnnMfvhyYTy/OHhj23w+x0ZuOppyo+zN24aTYbdLT9sO8zVNdaMl1rAm1jmfJUUXz+334Tx1 nk0h4ZhjE5dueZNkg9qkwGbZlL9R8hz/YISZHFrr+0L3TM69InguSHL6PEEWa9jMR2bEYc6q5Exe 7PHk9tfB1ImSvu4zaXFImhO/x4KOx51bkRirz4iEA3BUffodKAVPGZPuDIGDP6QR0ba5tsnQWBM0 TwFn1PRgzkEWH0E45Y6M60rsNLjDH+rIEIr+PG4gjGxFhHlTixqEs/rq0waDD3dvjK18gy7mDUZG fdghG3PpQIV9p8IDGSgPasJb89tMhA6Hpp7sJCOUJG2IsYA0lbRrniCu06x7qvNFbSRNpR/RhwfX EVCZs4nhD/EaUGKu/1mC9LL7+cBq3jbeFt8C6af/ARGLTi0KZW5kc3RyZWFtCmVuZG9iagoxMDkg MCBvYmoKNjI4NwplbmRvYmoKMTA3IDAgb2JqCjw8IC9UeXBlIC9QYWdlIC9QYXJlbnQgNzggMCBS IC9SZXNvdXJjZXMgMTEwIDAgUiAvQ29udGVudHMgMTA4IDAgUiAvTWVkaWFCb3gKWzAgMCA1OTUg ODQyXSA+PgplbmRvYmoKMTEwIDAgb2JqCjw8IC9Qcm9jU2V0IFsgL1BERiAvVGV4dCAvSW1hZ2VC IC9JbWFnZUMgL0ltYWdlSSBdIC9Db2xvclNwYWNlIDw8IC9DczIgOCAwIFIKL0NzMSA3IDAgUiA+ PiAvRm9udCA8PCAvVFQ1IDI5IDAgUiAvVFQxIDkgMCBSIC9UVDYgMzAgMCBSIC9UVDQgMTIgMCBS IC9UVDEzCjUzIDAgUiAvVFQxNCA1NCAwIFIgPj4gL1hPYmplY3QgPDwgL0ltMyAzMSAwIFIgPj4g Pj4KZW5kb2JqCjExMiAwIG9iago8PCAvTGVuZ3RoIDExMyAwIFIgL0ZpbHRlciAvRmxhdGVEZWNv ZGUgPj4Kc3RyZWFtCngBpZtZl9s2EoXf+SvwKD2Y4b48tjvOjLM4Tlrn5GHOPGQ6dhKP24mXTCbz 6+cDLkgCEkWJ7CyUGsRWhVu3CgXovfnOvDd5Yf+r29x0eWc+vDI/mHfms9uPhbn/aDL378d76mVp Uelv+6XN0i7Lstq0bZO2RXL/YJ4eqJPlZWMO96aqXV3/cXgwnx0OtcnN4bX5h9l989veVGb3r70p ze7XvenM7q17vtonlBj3/RC8vXf1/+2er1z5p71phpp3e1Ob3e+uXG9t/cT3/Hpv2mEU9fOj60c9 aHTN593e/NMcvjTPDk4zscRFVqVlU8YCL4hppTi8me+rLqq0yrI87qyWtv1HpLPlzto07/v2cmeN FmCps2ldm8ov6pyM+eWeus4hpDJll4KUbMDIld1ZaFZNkVa1VVPfpI3V14Oxqsuqtk7GsrdjmdNA b+u9DdoCUF/2i8P21OvwpsnTum+L3uR92jLVPBnM4OWrD/evfv/0x49vzYdfmZFqloUDt609Mw6m 8Nnzh9J8/hso+i5572zFlDXoQQsYm7Ufnm2x3tqOdGntDRs8Y2/DIuXNeSR2ZZqV9WMWaZY/+rqo kz8ByRtLJbm5vRN1mLtbtPiEefNP27VVljfuzVFRXTdpB7k0bVqa+4eE13nX91UOBaV5XWdFXwKG puiaOsNs0r7M8rbuWPg7tL6CvjKQNSC90Vz8R2yACzpse+wvazDAS50NK7JADTl9FEgedmXVBVpY 5rkZAiZPq3+DRKFVyKwwu4+ODvX8cZ9Q8sGV/LVEcnnTpVVVw3JufFRvaT0aNZFe/KghlzhvkuEY TNNWDuR5nnZU7NLWEdRgVYNzSSzhzTgXq4OywIybrki7zs9imTiSgWvtLArMq6mGaZQ5YDo/C4e/ mVkUeZv2zNvPYh0bBrqo67TG7GNdjAwz6OLcLCZdNFWKsUyOtihPDN+vzQCzm6fnDT8vMJq+RLqw 30jHR70FoA11LPEu6PjcSk86DmdhaW1GOiPk5cmA95ufHNIf9uYJsJcnx4cDdX0X+PHz+H/iApkA UcNUM9n9vGQORVeldVOBpHB6kZLiSYXmcBwyFV2bNkXWxJ2dkTXWPSHTU1m1JF604dKCv+8KP85m 3JYtjjbAbdX2fbcBt1UNpazD7cvnS8AlAKhNE3YbrUisunBFQthKuhG2TrgTf3wZtuEszixljBCW 8oZIFSzqqbhXiCQ6JfolOuWtUKtyLb2QjRW2ye4lXA6Q9QIIj9BWY28RM4ahurYTs0PJdKVuT41E YbP608QwofPhcdnhSFuiUC3MZtThLAivHs+WBVHfKra0Nva10+S38AkKhTzPi5sTzzVNi7huoPXi Di5K8o44dI7yaiOb6HOTuEKXAKCFFqygF+3CAIlUEr792QUT4lMBySuM7Rxqe7M3/UC3wg3YOq/I Mq9T9ozbFZm7iKPu+5TtzaOdbNbZwGVysuVpdB3zC7C5BSm52Vkt8PH9krQ5ATwTJkJyA22GjcR9 NGo2SQvpgA5Qw1P7aXDEkuNt8cKLJFHUuMDGusAN4p/40yYjrmyOdHmBhMdY+el58PsUBOC/DGwq yQZYdrv6MgtR+4d9AkerRKGIvoeMK8OaJfvzNlORiuD/cpMap8i07vLU7t5Go9no4euutxHuSqPx 5nLnbOfZstG0aWVDVQ203Wgk72g168QduXabuKHVyFJYdKwGxgVDwABrkh3JsoAKJT8N+TBqeoXB sryAZfPMgWu0QvUHGqkrrao/XD513rmewhFUrvoaXyMTYlJf5awLoA5t3c432eEhsHVgTk2Nq55H KRfAW0CxTZdvXk1P+DY3FGB3neMcd1XkPW2UO2F3Zt9xQvjPbmXsn+vj7mYRvRV74Zxkhobajl4n 8AjedfJO4N0kr4LUMFQVw4W8JV8vMvT6+WNIO0CD/3FYEQGqktcewCH9q7hU39WrmFFj2gbJ7i6s KhJVJTX4IwiDw3Fu1IdGAKBFYo1u3Aaq8S+uMQHzAnCJVMq+g4YCHSbR1mMI9eVljrceHrhVmeK0 JtYdciPJVYn3Cbl1YSPlCblQ+XEi8AS5Xzx3kr/0wF0SNy9xrw1pttoNtB23kvfRwN0kLjiAv2A0 uWaeLD1nBeCG7wBD/hswSDGgivLXznEDlbG+3UmNzUCM0ENjVVIzUEq5163G+W1PssJGSQTGmgvc z3c9wTNdqDHwpKa6gL1tLKFxNFVbKfGCqEQDINoSYsnmtWTvtIQeKxFiY4ScQWxRpydhwtV75Qmw JcAP8DoTWg/2M2Z4/i5H9s2SlBNQgwFWCOl3YmSskXKE6caEQB3MwYaiVwnJguJHWVDQwILy/c+w COCMDln6UAmwwglDe6VjNBoDKJw/uOEpFw2g+I7+7I5W3lkj2GbOAnhNdyOIOK+Iz73Kqk3rioxL KFqk3mHVADDHeyOGEk4/yMV61iOlW0Wsd/3px4Qgu1cczpHQ7sWjDzZnz58hO6rBJY0yMqtYxpxD paZuTR0OcI2M9oRnyjfXEnLEEOeixynvc2neyUG7KUxmMiNjbLNWRtjhCdTziYW0nyDJ8ocvBUru JeCgEAzYv8Z3if0LIrTk41Wlv3xfgMwmVz/5Pn3zYST/Fu/5pHGpJNubBvKv/Oh+BFbhCYDzvVhW zRl4+FTDj/vEjghF+qxuNOvzi1gVnKlVlu0CFa73zxVp2jZKJQipyRWn4iNSKw4sg6jyqkX02j9Y XZrdF4t4xTfnNacBbpzNrtmL+ii8bpF0Ea4ed58GNPrK+EcLMUHEl/mq/sMjNKrhWoFsr1QPRget ZMd1Aoswg6qtxj0ofTcevvR9HnFlW5OKBnEbl0HUWDV9nGhfQRsT4FoyK8NJ2Tw1ntIGzsRS47dL MubWLdowsApGWGNV3r16KQOsuQjiGqsauTGcAgw+x/+nQi6C7XpuREmWuTw6PK58cz+EkPc/oeq4 Z8ezvqJ5HWPN+IX4FPeHo7a49IV+ZDICE8eeGcs1Y6zzyK3KPi1ajlal0vUM4qFbZ5yPBXuZiktB 0+2Jq882q7qLsvUZeLu4l/nSao0Yxq4MsfmLJXlduh4Hr4HWizuAWPKOIF4n7oTjTeJaHOAK2Ujb D/+X18E96EAVIFAXofz2wbLbPuHpdUTuyL4heQSuLG3yxz3hoqtnnyjRUqKFJ6/0xo9k/3D8ywj+ /SLEyopUd9VWXudbNx9VqTsEY5Jy9toMB3UzJ/gTO1aZjT7HvfIcvoYodtx7fPkDWiA1cbMIrILc Z1WBrHCIKHSMKWkMj+PQ0Ys5ImuFlBOswilYepyxolMpT6zI+USHCa8ADxQPHnYUIASlWNsjrKvd GbqFi0dFCEUhyIaHvLdhHu7m45I+y4JLF3Vbe32ut1RPTHkZp7Y3+dQit5HgImrixSUWH1CDWs/T bz6iJhhii1OVmMeoWedUgyk4pzqDmlMpt6HmDuc10pT1oaACErEfAcu4Pa0tE5KWQ7CCC2wdJ0qV E2MrXsqeDWCYTl7H7BPRZEwnCPzzmquHXFA73C+tLrD55uCom5PEa1DjRlkvq/diXtgRNetknehm s6wQBU4EPuFpgyZSE3Z/qBwZZVCM3RZalSji5w3xONxByM4TRFALbrG1fGU0By197d5863Jsi7p0 x84FsNmoStGM3QD0YWpsC82U7pLRRDNzOaMTA3zBpgWtsJ9ewgtRVdFyAdfeYlrvgAe4SMgRLltc UzQFXNOcjCeu6QXrDFvADDzhAlZe6SzJDnKUu5If4rsyW6pzC8jIi1mfg578h5JeMI5IiCbACtho CABFibq1rR03efWSzDpOGo0BTiRc5PoHkcLMWOJul0+ZsZIz8RhCJ6nVc0mjkXbKpuaipSeEC+rV XKCcF8+dvDC5bC0AUnKUHiMGK9uG7KgbZw5Jc5K6u+9OcQOSnKjLQELWmUhuJJ1tkp5fX3vWr7cw EKsv8EgzwgnhCggJsaHvwpK+W6Amvq2Q8zroTRpWTY2lngVXlQjeKiEBxoiayWl9lR+GIwXmLwwT ZAmxPDUHK1Hiv+NsKV+8N1hV3OAqmnphlWMaslMMb916TuSKy+VM74WA3Sad8Qdj6HXVddCXX0GH Nm5A4QGYj3O9JResWyL2aIzIbJfFHMAsOZfRPC/mhOZNYoI8KA33yZM1ZosCZ/EEB6wxiwJRfgUk eb244KR10o5LclLEunDimAyLtiBuL/K4s2up6FbwP71VwPkZIgm8qiOD0M0DQT486FgytSTyJJja eYy4y4w9PyfYihFvCkV2nBuZ4fZ5jEzczn2JMKKcuaAwkO+4dX0JPWAHN0sy5uy02rxkxYIBNpgB Mo424CLJq0WczCCYgYXMVSJeYwVSA8BRGg2DgHl5wunwte4wwJWUqA4crSCD540GUBFIo1JYVSan t3/tkwUscf+Dw8Tzah5WbwwSop8yeCRleVo89viszHriwZVRwvdrAs1wgAhKJzJGjmNgVAk5omlF MD1ByU0hcBwzB7AxvRMJfa9A873jT/l1lYCT0ffL70ob8q/c7xtDUhdujnGmDzfViZw9SFnACPmA vOcHaNESrdCgUFLwc5koHbtCgyPfFD1QW6tA8e4FvmE3UnJj+niAokyOc71HcLmzN6yGSOPY8+Tk ZPuK+1Wu33VeLDi79bp7FPiOJbsKexAJcSdZXZB2DnVSr9ydHOADmRQYSY3lGQVQNAXzK5BUSKtO PSTVWpBUA3IyNFBHcrR6q5rAltnJJjSMuhva2sGm+DPxEkT4V9U/NYL6kyThhOXQ9bQjuMNkXL8E Udv/LplQ1ZM4bKs8gldkQbHZnwSv7MHW/wzaWg2/1rPRT9Wtw94xjsdf3hb1sJOLpn9kEyjvnEUU ecXv3egGK074+d6V3Xz3f6z+uVUKZW5kc3RyZWFtCmVuZG9iagoxMTMgMCBvYmoKMzY1NQplbmRv YmoKMTExIDAgb2JqCjw8IC9UeXBlIC9QYWdlIC9QYXJlbnQgNzggMCBSIC9SZXNvdXJjZXMgMTE0 IDAgUiAvQ29udGVudHMgMTEyIDAgUiAvTWVkaWFCb3gKWzAgMCA1OTUgODQyXSA+PgplbmRvYmoK MTE0IDAgb2JqCjw8IC9Qcm9jU2V0IFsgL1BERiAvVGV4dCAvSW1hZ2VCIC9JbWFnZUMgL0ltYWdl SSBdIC9Db2xvclNwYWNlIDw8IC9DczIgOCAwIFIKL0NzMSA3IDAgUiA+PiAvRm9udCA8PCAvVFQ1 IDI5IDAgUiAvVFQxIDkgMCBSIC9UVDYgMzAgMCBSIC9UVDQgMTIgMCBSID4+IC9YT2JqZWN0Cjw8 IC9JbTMgMzEgMCBSID4+ID4+CmVuZG9iagoxMTcgMCBvYmoKPDwgL0xlbmd0aCAxMTggMCBSIC9G aWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ab2d25LcxpGG7/spELE3MxFkq3Fs9MbGRlBD ekXZlGjO+BCx2guaIk1xSVoSJcu7T2mTL7Rf1l8oVHWjqsGhY0UFgC4UsrLy8GfWAZgfqt9WP1R1 Y//3+7oa67H68Xn1h+pt9dnVu6Z69q7auX/vnlFvt206/baLum22Y7XfD9s9Fd9sPr+put7d9qeb N9VnNzd9VVc3L6qL6rK6eVU9uHEtppTaw247tlARsc2zNxXEdttd3Q7VzbMS2f+sLh795bLqqos/ XVZtdfHdZTVWF6/d8fnlhhLapeQmuvvM1f9vd3zuyn+6rIap5vVl1VcX37ty3bX6G0/5xWW1n1oR naeOjiiodfHz9rL6r+rmy+Ue90237Xa7Ou3xLcXXN/ttfTjsU2K9FOdPq3XRH5ptu4rYcF6xe/S6 2+36aj90XqtLfazPUxpHR6mr2nELxV3zceTMyo2ZfrdDTIdhO5jw3zgb7rp9twllr0OZE+fB6r2O nsXcfdlL5yYz1enOUG/7w76lU4ftHlbrzeRRj5//+Oz59z/9/PR19eN3cORrNs5prPZCO/jCZw/f tNX9v+A4v938UPV1vT00VdtvWzphnrttUNjBLnChqa1z3uvIYDXHAjWvQ2EZr5s0Ve/z3my2Xfc9 LN5aVYuAdOibfvMLpvLKsKmurq6FRdX1FbK8C+P8tx/33a4e3J2jor45bM0S94BVtdvsUP/QjAMm AdTs933dDT2qvkbOZ7FvNuwdtjTZ9qB2/Sl1uYLA9gfcdwdf+3PEJvEXsLSGRkM3Y1ImGgekSwwC 5IbPAOkT4K6uLoA4YFPXP7oSu95cvAXvuK0b70roRm+2aAJ0c1yYvMHzpPGNpOMbLwUH69BYDWO7 HTtPqasVZtzJU5pEU+cNs8ZD2gHjWE2sJOemNjipU2LOe0bnPXkeEfW9rYsj0Cea/MdldbepLn6+ rDgSuigimHGN9AlFBBiuCSccv73ccET40lAovzORI4w9hraiGcffE5Kg9zf3tK5RIM/dudxQDgNU +o0rCSxR8kBN6AExQ1Tjsb9OVUML72Fyc3FPlO7TFWzkK52uVfhEv/xJZYqjoqluqvydi9lEX9oS o1id4jrs8hTt/o+7K94klj+7EihQR5H4JSUbT0GUJVi1KJoSbIjcPKu7oilqKnlxuVF/qRMLX5xL JuJHlMW5akInnwfUwYr22OYU1Mxf++7Eiir5jLd0rOibC5M3nJm8OV1zwmBoEXf1P0zq3Pq9bn1z uXVO/KHM1TjZ9hFXdX3IchXhyK+cOq5og8yrcfoD/tDi6LSrEhjJy6VpyRB3Ha7qOFjh9zSWSy8b EtXD2BxSYibkrj3pTgonCPnhA0SH3m8kSPpm8rxT+QtUbTLHR+yEQZj948p3cQoMLCrEbO+Sp1Z0 30p3S6eiUNqGgNoMUz+mDCgGmtREVsBq3wGuPnkvEILnnHRnVF1Jq6Cp2R0iWhlMTbtqmCrf0xFF IGP54bceLwzw8HaOcTnsUHKtGynWGgipROREyNx645HzCiWib6HEG35g5P4kPBC6xK2qbbX6R3t8 c3FwDKJ7GOEG5vXesf9YIUH4K/yKUUY0fi2CBopHXIlpoaUQVdyIW2Gm6qiTqmPIaRhrgUYtYOmh j6qv8htXrvpxr1R/xmfnCFB76yhLP7qrdtUzaObxYDaMrt02YzRC3J1G2xPLuBZ34j1Faxsh6m5A a5Tw0KlC/Erp0oTqSJuxdI33TW6s1+zqbduSkw2O9yUsSzm+uHu5yXkboLgdhgZgXEusKhHbb7tu B6DExAwYD3mpbqZ08QbNYxdIjyMSwGwfyB1QKD90RNFcY1pUkvmpBDNI7BX7QMZUQq6gJFo6om2h jkp6GuPltq6hKqylRG3CDM5PAMwbFPrYjjXdPOl6O25s8JMHQ6DmO9o3DMdC7IQZ2wlGAvgrFCgF sXuwZPfuccK+Xvvn8US7SZdd1zwB5GqlhiP1Ljz6zcXlxmqZjCFhyEN0Nalwoq9W6Ml/c8lPqoIo 1ugH/TIjnSYkGEemUzBdz/Cz79sTedQFB1PI3yCQP8YQNjg/b9wRFkKjJzNIHaP6YWDUFZTgJpHy ojcx5jxjhoi23u6Hj4SIQvAwIMTSEC/64Si4ECzADyWrg8fGZ488hlN8UvDYXLjgUfngcccxIroe 7gLkB559ZFI8UTcMxVzYoBJDJ7oqTeo4ntdhO+BI49hUQyz2gvsUdaixXt0xv7givWkL1hDGemuJ rTKtmJjlJYV8GIDSsPoKH8BFoc/xcwdc+D1x50c3qjClIHYwhCIAJRzjx97LYPScKr2b5h3RnCiJ BKZKO6qDjiGHqXKkfWp+LUjABCh6dVkdnD1zDR4Du2bhzhyEKcJYrsEr6oho3IDK1bW4B1OTlnIB WNDRs2oFo8P8SUygiZVylGeJctxJMQ30VcPm4sozD9hBUGQN6qClev/mzFVtqw3x9MJ1nTY8FG1s OvAI/zpAoyEcOA2vitFCokVa/XbXM/2REHNhtTkZb8yhfyNz+dNfYB1VmF0QBZ6+RXIlCO22fQtG x21tSu53N+803bjfjkNMzPDYGG9PB0oz497OX6E4GxphmMY4tpdnu8fRG5uLFdsrfL3A9oz8O5sC nZF/hw7OxvJnxjb29K7IcN0xhrRJ3SFu45ZyZqZx2+5aMDMmdtZAvJx3u63Lb7BnxMzMDszr+t+3 lxuKPjj7wSXy8q/HftsdGuTvOPD2nkG0aUg8j/CXPBGm8u01NdOklkokPS6JD/Zzkb5hqrwdmQNP iJn4FsbzJ2b6EOBYGs8buIwbw0Ebpf9kVoEsAUpvzHbCM81UjobwxE272enk5bBZXunaHZiK6Mi4 Y7mX5ZAdC2hmtEeVtv5mU6wlQrB382qZqzCEX0vLKSdDa5rRimllDGvSTRhSFEKloXw2VJL9EKTg CgU+dg6BFgg9lHD8Al0SYxQFdFygFJ6A0nvFGz331j2tyKUIpdALXkBVTSisx5FRkUdRiMF0qGlm hgkVAnDei1pWVIbd/lA52a4ATaen5RXIloDXjgPLvmY/M2auSmlspYAeKXarjyph+hbn0bXkBjIh UElD18UoT1YsWX7NaAc5PfEBHu1ABmRTsM/LqOuHbdcwkInsb3PG/mZge8LcBcnYlaYrd66XOA59 JSHmCMDmm+7xaZb7urjpgku6PCuHcSGm9fvWlvvk3xmMmwA6pJxFjHO5Xg7jNmWMaxOMW7ashtS7 6/qRDQXG+qeZqcc4UyoyODc87PNBY8a4lbQKvjMrJ6J1xsaCbu7LO5jswJ7kEcITIcxLhxUzoLGe MwGahzjBE0P/B+6GLPY3jtw9V3LjbNjuTiO7KyGZR70lt7WMM4a1KYE3/Lxv3rvxvMqThXpqWrSF Agmu0rmAwdeOM7WsfRkxoALKdE7AoPIAGFBYBAzqM0cEWxKnmlcPcvWJ086Fra12uob+B48qBdfu hmbbdyOo4jU+bVBZHgBu2PcCDkwjwAlVkBpNiw3hCQYLS4GxArbUO/YdMEBxDHyiT4UQ3TH7H02m flL+9MgC2y4sejC6c6sdPjmiu5Yj+RMzRPYLUM/3uD70tipPsIu5LGU4JY91Ewu2UaadZoZKlOAv C8zTxMJqYiW2giZiztYiyRcKirKqXzsHkxs8dRjyizzpf91oAHVgaNrzFIOLaY2AFyjhDoq/cqvX lxss9nUUw+NoDyE5OHWeQEI/OF7Jfd+6RkXpJ0dJkCAHjdt871ww8hOINJFvxJGYGEx7k9MWLMil OAM72qSqOYYu5ThTDJ299guTDenGPSfZq391QoiFrY4h2ZDygJpm0MuZccfU/X7YgSFO2aWU3TNR WgjodiwGHo6pnTGdLmTaX0hDAkwmnDEOaUU6i+d1BM4xypsQNhdePJKCCOko0iKhuzxQcPTgBDVT idO8n/Xk7NSz7Vq5RyTFgmVZ9IRrGuX41i1hBYvDonAI+gl7oT59ppy+ufp2xCoLrDJhzawFKoxZ LSEJPc8iCbtk9mM/pMTo9yfBMDG5sBRlW7Pqfu+bnD1iR4qZmykJNvP8Tzg/tv7zU52xfBsMu2kI 239YFF3DMIM1+KPe3lZ0Ds67wzjvmShRKuy9CmnhamIljU6WnBBbrdFr8AZr/JoTALetAEUbAj3E kC1avsBM7YzwrfiNnVgewpyt9CdMmVJfBy+2wuonXMEusHyLxiSX9svf9XVB9/lBvNZqoFoXvUvO 0PS2EZGZwaS3JT38Pe8MTc9SpE2MrCZW0EMzMLk7ML+WEDuDKCFb88snAguBCyJHKN+5LVMCFAQE WMADClOJQEdPCYYQM3UEMT+4a1GzmtFKUB5u2n63bWs2fKgfmYjhkk1xf1GQcNvjgHv20OWJTTHQ EytIuO2ZiejZspgQMwmfbltKqYLYjxAA4iRYaLaYI0ZMCcbHUXdp3Kz7noNs5MYNUggrQrihFiJ2 N1xd8wDuo4JAEdVYkb+DwVNbz7AsbneunF50g+gdCIs5mMhrJ4wCu5EdivMMysqtWxY+WX2hg+Zw 8DHNnTOm+eay3DLSJwLVlWs5Yxa2974WdpfMoh469mqaJq0XK2gVrKIeINH3CamM150YxWNMAG+R p8mjaAnvalw52RfXKjHJEccnh7O5NTmcSMRuhxq5a1DJST+ggXnIE1UiD7XHNmaCwa9FTvWxDcrV pK71lPxdNeEaylMdv3+Gkpg5tUhJ3q7Y1s0qTDtr5Nysx908rLZotz60Y1DJtKCzZqb8BUKKwgVd dbNG5kwWaOJQsv3ATUoRVr5jlrLWO8P4yNQUHbNbLuZ0/OE1TczhsTqIOWK78Rh+lQbxBqfkW3Hz i+FKjW5Iv7PJW9e322FMaVlXlvOoo/mABmuGZzYG1duiwFiP2/Xk+BHHxbU9xJ/LNrvxQP6Vcmzz ouuSzVT2d4pqnnFxz8xyDIzLwnFA5UOOF0muE7ZwxgZ/ECYmvajD8zFMU4sdiUfYLVKixF6ILFvT nMBqYgVFzeKLObulpj57+EBeY/GFMVtIKu+pmMkB59OAlnmRd/HK1Q7JJHhnN32diqWL082tlX/U 55RHj4B61ozPKg2OLfY6QgFJSmmof57pw4gR36Lg6IVOz0AlGgKPreJiTrwKqto9A72RPdiJRs8o IYtVkRY2ltpP64ed2PQQ5k/YmfEORBSQtANJG/ODYxspuNg0qcC6+wjs5Iy5Y9a+Bi1S2iXPKBiz +SnLzGTix4yuCUBHkH9nkhuzQWaB7mSbyp3AikjaN+1233bEQcfHUpqTZiQWyXIS8sDRuR0kCwuv R5QITVlKATjWEiuxFUafa4n9o8AZu7nc6y3sD7WXPT9u/SnADGNXp5z1Y1feM9Ijp2NXR8nfXTN2 LaQCDXPKw2HAHuLu5Y18U0qhG/KKpmdxYA0x2+VTMi6WLre7lnelEmIgz9JsWGppDK0KY9d5pAoM hxxXmTYrMpQAqCGVRsyUKMc9HrtGmXQeolq2FLv5SfVjxYpFaewK3g09ay2riRX8pGXeomt5cysh ZhJeXsyJ8hMk/AWxRWMJN58SgzTpVPx+dLtnvndv6e46G6uifPNkf64FJOXOMbEzAcnlQLY990wm HzuWD7XIL6/brrHFqD0jFMfMp+m2a1jbHYhbq4kVdNvxjmfT7SfvmQflS94zbT9RqoiYsmPQ1vlH PAa9D0gx3pkGe7OzyInCgJABS1zHxJp9UWDO/HjRx71T71cZM6OKaIQP8y+fojpYKo4ta7yybzs0 FzeR4F6KKZFNnuyZdNn4cEwsY5Mp2VvZ5Jy5FZA9LBsmPcwwhQUcDc2OUo4oc3OTspVfzvSph//l T7zdlvcZ5iM9rmclP9njiuFnw0wLQeJIj9bLhQRwEv2cn7bTAJQlqZKjNwfeCmDTY5DluamIgmu2 7I7pdweipBPA7Jq3GYGmetnwOh7TRJY2e8X4k0+wi31sB/pIcEn5SlxiUszqMSXj+i5ayFpSyhHN Go7zWeLeJtrhMKZ7Ww5DlriW2D8KnIUsMSaWd7Y0lM5Z4jXKm6d2TLkb+31FsQ2XvH95bfp8fz4V nG6H5A4WDmL+SpIrTPk00GibY2IZn0vVC9zNLjdgjljqh7BLNxsQLLHk+xm4jGO/nIRPLc5rvKXk m0BRGiT75DtshyWomHeRFdppTfJdSB9aXu6Ux53VyjRm/XveBm26tG0MCldTK6EUMK08K6aGkksJ xAyshfx7fvuU/JsMEiYw8Sn/tgRibf69au3IJijr3mZ+Y9s5Nv04+pWGOGzn2+4hV6B2FGVKY5yO D590B5vhjnkzIbsMfHmKcxbyfYYlwII2GOgaMVKi1Fy7VSzTym7FCJkWH04BWiPHKrwxMDvWOxol +7e1UvzInMK7Eyc44ZbNnPOD1Qw0bRNn/HgHS9z6hV/6nBA/VNu8iwq6TyfygFbz6ZrxwFdwIr7d LO5C2A+AEPLb779//vZbeMeF/+ZyRS+kzD7OFjfd1XvfWCnLX+GmjQ0VbE1WrK+hBne5kNjY6LKr +5Taajf9+EQfqeGtZNjoU36qlSol96gxrPzANdcYIS9SAZT4tdaUNCTQU6LGU9BE+dSxOVHsgYcp YmKUIj2gJjVA18KTGvAPqP0YOfQYRgmJmGv/gD6wQQjKGxkfROJlDfZNxVaGr0YfXZlsy68vFjTV 2aLLgdF2Qsyi5sIM4IQhwWLPpOOZtM9tL2Syu9TJvqaTfGAiYWuxj2yjPTNnownBdmTfcwQlyy4Z r9bXJDY5C6/hzyV9MdmEv1RYJbyd4e6IxQW0S6mSuHyJGGWZHL+00A9UYV4O0t6lv+9EVT8nh8NZ 4qfZo2hFWKg9jItAERPl+O6/dY5rv3fO9tie2UyAaksGR49i+3lTbnp0wpZZvkUl5ZwbwJTyPzZQ uP1aMa0zkBMMOfpKw+TlV+qLIcLGlkbw1+/dUbgQY4dQQ56tOkKNMJMH4thLyJzY+wkh9MNReKHH REIlwhRhjb1bSTx4/GvPzrW9cEGBoczm4l8cHcwUaowZoa+nnoj3a//Zn6grbpUn7grPsFZMiWDw bFfyypzN2D6/FS0slnKzoIFrCS4GTMEjH/cBc3X9zNmcJCY1qFzKkFSD9OjZ70VOnbIb7juBkIsf MFFO+xgwcO5KoFxT/mESd77jrPRoHNAed7wwYznnS9G2WpKk1nWx80fbPMHCkxy1wMHBvunG+ok4 8Ch3SzhiF+D20DKeTYitDgkPsD1keMMJ8bHf0U7/7O/xICUb6aCivFDaAxvgmAVNtJLIZAqTMsIi RLsdjS1Je9igbgJZjiHRMPqibtbEkJjubTmcJg6OmVzY8pX2myDyCEHaki+uYKcvneXjI4iY3Y0c 8SOOeBC6TOu+dy+p64lrZ6lfOzj6yh09wT+gLiCGNAkqBAmO/s499wixxtoFgrijdvFZtl/h3nYD X7cTqMr9N2LD7xAzgKSiGPDtiKghJXd8Q7x8XjAVXt8g48DkY02s0jDS+xZeCZJP2YkNe/AaNXS8 6MCHs/qGhS01tOSoqXKiCd7TRYeWj+717D9MiBnXjCtz24Wdrduiw3fo1HwIfi1mw3zE9tHr90xJ s0+JQXzSUmKpaWISsX0yL23bJpHBEtunr7GnZGH7Y15jbwc+S2rTsIlaE7az0j5lm0+dIYNJddEE 6aq37zHaaW4GH3obSftUr+w8722NMS/tDNsLXztoDxjJLIM5AS4vp/mvHfyCkRB8cNm8cXSskjP5 xqjXOc+STadaLBkHg0be5LKRY0ws44kpWYzjKUCCSf/Zf6MB9JCBc3xpAyzO6KHQFWY+hj0jn3+G wfC9UhtGTXKJDOZs2KArjMcj7jUfgKvSg4/4jECICbxNHD7PacIsjCzmxORLg1NCOXDqhwp5ydXk QHv8rbK3esJbIiVXA5ezgyvWk90G2oSY8b0wKE1dAckxPb2YgRAibGaH7NHsAA+0k99D6QsBcsNC 8nY32m9UZ6eTn+bu9YvXnPLS4Iu/bADio67qwJJLJGyX3zVW7sG7IUzPzBs9lo0oGb+2BRGH8WtM N9FX6l3F7CjYWUwMfS3kHilV1PXIx3hye4BRIR51oBslHT438GG8nJrcUZ6wUFd0UTp0/e3PHbQp z2BYxg2GXxx9g2odU6AopfuVS23Eo89MPMlrR1LEeJmP/vjOvcHOoDM1Zte4t+U0/sn3URYjKlMa 5TcqW92QRtnzSRqlR3xjSqPU14TLn10vxYS651tfSqJE8iSJomWJiY8akV2JPsmDT9PyPtHxHWW+ as0MY2wkJYsrDPY75gvGrgaoY2KGEAupz4nJfUzq0zEaqsfAdmli1A8jSmwzLxzJIAoJq3IIMuPp LQTUgAaDtE9yCJs/G2kqFVAi7QSB5t0tCznEPLIn1E8vIThhnyZsCVXLM1+9E2B65jHLwPVJjlUT 9erRvnoeNZQwneqylEm4vRRYW0TJEGlhSJ7ShOU1WU9NqjDa7oq4gduySqZQH2z4njJbCtNh4uTj Vzu8/BcUTcjStzBjRpJOJeotGk3Dt3TcpzBjWmY0y4FrHjSb0ZBEOMBUxnOU/Rj6fZimMvPG1JBF jH2DC5hUI19bSH6mbp0mP8DgcfJz4mzsoCX5GQu2MNE/mmlYUgFbcjUUPbKFc6mPia2Y+jiwXpX6 kI40ctpM6lNwYcYtpD58TjWWesmECEHZPNBlPg1fGvjI9xTqrkB0ynwSurflcMp8EmIZnEmNAHV9 9dCti2JiJJ03LqvA7G1LhXuHnpyADIIZNKZOVPOxq6n6yI2aKvkduQwkKNLsJUM29l9wZKklv6Gt qUmzOwYoYv5slmrunv3aVWOSsHc/EmJn/D28u2z7nFZ6dQtENXxp47gdkH3Fa0orF6ftEwYSMzkV 16RUSJPYxZGUhyPIRDlpHddkVCiKeMy1dKBnqcMqI/XzIMWOFb1Ye9ydJZicAtWMUm+/9S97f0u7 CNASOaai7gu04MKm3fzJUjnuIWljZ/kjCK29Bs6UQSrdsnNkTaK178fWzMAe920pCE/OEUxiwTlI w5G5DJ+BAJ2R/MnYKSdVl/y5Br6Y6we9KGHcxrF1R9/55RV1fUWmPTLhpPOTBo5wfOGPJmnRsdnb 60vlUdsRzZoBZhYQA3bFdG/LYcCumJhh18KHHVImwa5rRAnYyNw/xwOwPiwdc9MiFr7iZnztqLvT A7ac897VX1h1+wWTBclIFsNzovfO6Y/m8DSGGxy1bCXaYgNr4CnVxBu5Vn18mDbFkUqeqBmwlcbc 8li0awfa5rkTF3oCAA40xJGoHi1JORzwQzbq+3bEzA+OJTGph8W87tr8FHaqH+KVN6qhob79xj2s u3+NrrF96qjPkvAHJ1ueyqOObSHgU2hYulP9nBuVPHNGnXTFqom8rHaftjms8DWCur3smThIYsgA QjyZQX9yXmEvuddt16TELPQs5EwnhpzLmUryCwMi2+gbvoV8Jth5zPCf4sh1JrxDmZA+lsycLTv7 yBJTAkUinHx39VwGDmYWP7Hktz5Ygh3o3pbDAEIxsQwITTFCkjwGISIC/iPk0DYaeQtoETxEfqI6 8jH5jHz8vfMcEjFAgQkj8MMouMk5/PpzwVsML1ooRlZUJThRSYQWqraOEr4SV4UvERUvwpUsCbXT ORJkiLR2XzAmGsIsXYvGA5EVRKnTMXTp7p/d6r96hTCg+mEFgDTsFifdq2QDc4Bbl4WlAEKPUBy9 46hrJa/FKdaOtfZDx2g+4SBvhcUpVnupct/w19oSYv8/CNLaH3mIEJihU3Htzj6q9DUqJftB4+Q6 KBbBMR3IkRVWjoQVxQ2fCbl995QrH5KgUXU+Ptj3h5sGYTYxd3nhrgEhvgocvja5Ein3ecwP+6/s a8OB7m05DCAUE7sVCPmURlGZz7OhB/JS+bx0wjHJnZSDoLKQQMkvmT92CrWHjZzbMCeEgYSg6nfy fzlvnOVoM49Q4AtVeqT84t5VceECR+gH3NoJ4uyIsPgNBvbiu82wCa28UKNgb8juub5XMtOGj1q5 7WNJE4kRpOG+NF/Y8uFut39sNTHAPBd4W5tI63hJLCGWMfuURzrfDwQTzAH9cTRJYAmmP34hEBvT kbPm3be1bXX8xUTfugeXRC5pKC3KxT5MtOPvRaorEVItDBNSsmv12GIp7nWppInb8ss6g3t3OCGW Ef0Jv+3YxbJ/+tYPrJ0S9FG9lUqwnbV8MWtSwpIvpYovKaHjnYx6T952bE/rxmprnIk/s7rlj3My Wo98f3mvv89kSwsd9oGGPQYSiE1ftjmbe5r9s9ziTN9Gg5g+yIbQiXYcX5L55C1/Tsz5iEK823dh JIDuU8x5yGSarXcDp7b8S+5nDkeotV/z240Fx+PvqiJDdm401nzkKgurDpPp5YZVcSY0uLA+ZUUF BuzvT9UscoiBJZtLe20Qk8MwWwwY97zN4Dozp3ifNKoyFLOlQtJUEy6x8WSlPXw5gvBvdYqZSjPa O1iGTpHCE+Q4crJChzVlY38ddYwXuRYs9ohmjWZyUgyJSkL3thxOiUpCzGHb6Y6vlEnc6kbpPRIg jWDG2CZayDswbrTBNcrgGFciy+Auf0mMWTnzB456mrEWQUiP/dWV6/paVPEZbos2zktz37tKuDC7 liGBWr+mKr5N3grVVy5jVQt6WN6u1r6iKvRIdKmqG9ac++Y1lNSC7r51ddSCnwwVr54z36qn6KdE gRTI2GAqdGpuZeryQ8e16Ouu2FUvxfRLx5VEoZokYkei+5UY1WNvaDPIH6pIauuOH5C8k1Qe6zp7 s87+FPORwS7N4Uy2kAMbXA1daKaU+UeuV8zh9Lic+/tg4mBFmoFesn4STJv4HW+yXdhDMkEnotUf 5XmEyNEgMmVLAqpAjKiCEhq0j1437gfDH4roJMfOHZF1Xr7MXOvP7xF44UgAWAyIhe6Fv0hd2+fj wt/07PXSjk7J348tIfNMjPesgqySP+DsRdRLRCViDX9SaaxstfxjKf32/wCZTq+NCmVuZHN0cmVh bQplbmRvYmoKMTE4IDAgb2JqCjgyMjcKZW5kb2JqCjExNSAwIG9iago8PCAvVHlwZSAvUGFnZSAv UGFyZW50IDExNiAwIFIgL1Jlc291cmNlcyAxMTkgMCBSIC9Db250ZW50cyAxMTcgMCBSIC9NZWRp YUJveApbMCAwIDU5NSA4NDJdID4+CmVuZG9iagoxMTkgMCBvYmoKPDwgL1Byb2NTZXQgWyAvUERG IC9UZXh0IC9JbWFnZUIgL0ltYWdlQyAvSW1hZ2VJIF0gL0NvbG9yU3BhY2UgPDwgL0NzMiA4IDAg UgovQ3MxIDcgMCBSID4+IC9Gb250IDw8IC9UVDUgMjkgMCBSIC9UVDEgOSAwIFIgL1RUNiAzMCAw IFIgL1RUNCAxMiAwIFIgL1RUMTQKNTQgMCBSID4+IC9YT2JqZWN0IDw8IC9JbTMgMzEgMCBSID4+ ID4+CmVuZG9iagoxMjEgMCBvYmoKPDwgL0xlbmd0aCAxMjIgMCBSIC9GaWx0ZXIgL0ZsYXRlRGVj b2RlID4+CnN0cmVhbQp4Ae2cbW8kN3LH3/en4OmSWNpkZpv93M7lEt/GQO6AAOesggCxFwedPBvL lnbXK9kxcLgvef5C+RXJKnZPz4xmlOhd/CDN/oddXSyS/yoWi/u9+8J973wl/7W9d4Mf3MeN+w/3 zr18dV+563tXhn/vr2lXrqsm/lk+9OV6KMuydX3frfuquL5zv7mkTenrzl1eu6YNbdOvyzv38vKy dd5dvnVfuvN/fX/hGnf+xwtXu/ObCze489vwc3NRgLjw+XLy7XVo/134uQn4w4XrtOXrC9e68w8B j99K+yJJfnvhen1LlHMV5EQJ8e1Rn3cX7o27/J37/DJYZt7jqmzWdVfPO3ygm9KLy293y2qrZt2U pZ8La6O106+ZzQ4L69d+HPvHhXVxAA4Jy+PaNWlQd/XRPy5pGMIMaVw9rJkppc6RI8XJ1Gy6at20 YqaxW3dirzsnpiubvi0MuzUsWGCUdreTZ5mgCfsmzO0sVb/p/Lod+2p0flz3qOoLXQa/33y83nx4 +OHq1n28QaPYsq7C5JbWO97DUnj527va/fN7ZtEXxfdhrbi6ZfZgBRabrB9+9tXpq23LlrLeWIN7 1psOkh/2z8ShXpd1+78ZpJ38MbZVW/w3k+RboRLvXr2O1OFev8KKK/Tmn37om9J34ZstqG279QC5 dP26dtd3BV/7YRwbDwWtfduW1VgzGbpq6NqSZbMe69L37cDAv8bqJ9BXyczSmS5qdb2Ys4tapV9x KTJoib4+g2p8IBx+Qjj8fPd1+HUT+Oun8Jn1D5d9dohTPN0su5alG9Sgp8Kis5cX8eVeB/MAq3is BRGMc2nSqVY4uZjJddud+vwnaJGe3F24Fdz8AUJG/c39If2rul+3datvTIThZUT4V3/HN51CPt3A iHbZqZRVLaPCPBW56dd2Bz5bB/39IYVHv26qmnkye8MuuUcZnFGr2rksMTfr+1FtxQVibVwgP3FC /MTilcyngs8MMz9xgfYtrovPuEB+xjmHA+NzbPmb+PBUqHxRnOMbaRSbfgyffwg/o7iIRyR+i+gD PpBxKdu2mnd5l/nSYjnkanyyHrO217E+0jlsRyM1zoaB8L5ZtybKh8nSxF9pFUG/soYPqdXWQtCs oidJCxEVHavFC3XtuPb9UMFUoiGhUVsYdmtYeFNT0e6WNZOelbcnLLqt7W+8qwZm80C/24Z+l824 120hG0WSKdqmhSbgOZHYtb7m/fW6HppR+AfX1eC6CulI1TG/O/yUrLpmQLOhj1ZuxhpCqhDE6+NT bXR4L/9tc3v1cPPj5tX72/cfb+42Dx9vrgucJ5zcSEgpROYdIaX3DLzvsVK97mvYHivhkct6GDOG lfphXddlblfUzEI/8ADKr4eeocpIM67bAY2vM+YrBHTliHWtna+EeIe6MOmeuKIqiaJMB0OyqgYx UL5lfFgKihVixbbrMWcSHuyakKSCiLJWCVsgU0nL5zrtouiQZJkhTCs1KrK2rHztvuHBLfDOvYV7 xGH/jv+D026C02Yi9wO+tkwfCv0QPXm57kbflSkgwkvzR7w6U4uRKZsOX9YyNSFcJklFrIE0HEEf PlQFI05k13rMrpiM0jiuh7pGSmrnmrJKrUbe0BByGJKEEl1mTPYkdVfJerJ2fc+jfZeFsy5jI1NB EUSZqorJ0ozvxlnrk0m/jrgzCp8AUQNELbCjkMlz1kNUiAbBgmoHUyp9VWXVDZERtw4piu1TpMQC lo1e2uTtHs+qYZigAlYQC4xoJYUqjIRww4rfqx4SaRrm/6qGN7qeXWFkXWHmFDn94ozogtXrzn95 wZxi1/ZXCvx1+EDI8TfyDRHIJxdOAuzzr85xWDxTnH91IV/R5EVuEpr+bXiWZ/4ufJiKXaX3mPj4 4uKcaAFNEPbSVNA3l0k8oQRNEGvyK5UvSoWn64si+8slx0GRbTsQbwjXdiForTtcwch+2zAhOd4z DGNhWN0zPRss3rHvHDz8N0FkNbCkMuQbDFQNtaye9GDhCc6GmtBPhTvPJmTskaQaKMBsU0UVYrIx Z2TIE1L4CndTjjCeCs6Ivl4EaSvFFshEkraZPNeFtS6RvD1oJlCV1EpI2rZvoLcFKvzG4PSR09q+ avF2pbifrmEkiGp6NprjUIT9yUmsVpMWaDoCl6HFd431ELw9nnHwvjBMfM+wbsZmyO1qolFp5QbY uGo7/Jgi/I6yGOOEFT3RBFu1RsZY2/XskLtu8Fl6D+GGVnjUKN0QZCVdC8OQJa+q8OuGib8MPTLp GVEdoMjUKuuliDNNl0h+zlkfb7OsbAnVyiyoumf7yVAv0cxrxSm81vv1KH4obsFY9pIHkDB+SnEM YU8joTjCBd+ShlhQXPOi/UT4Ao7r+vibP0IiwwthD+D07S/HT7pP02co6E0xzTw9RsNzdSc6Ejay XJjdCxVZySH2/cU8G3DSm1hwRviV7LoHJrS9Ke0pJ3xv1LqDhgklIOodNPz3xuJ8gE5oJczvWT/u /FeJm+vJPqVY8i6zuq4IO1oSLW1dhkUp2STSBBlj8ndEUEQF2qyouxhKg3gMSXZigsDRsvlhHWkr L4usgotFVHrSk1MZ+7ZFVhQuALFQRZOkgSFML9XUMIivhs0lrlUMs49scIhhBRHhTEtDkgoyVbex BTKVtHyuxc+GLgr5JllmCNPKjGW6K4JpCC61R4Ym9k0RZdcQ2wnnkrohlJAPdUco+wTubWC/QRKE FdPEy7477iEGIvPCMMaGPQRbuia3q4nYpBUIY0KfaWMIS1tkMc4JKwg6mU9kCEVWateN4k3DjiFJ 70bSVdJK9hBBuiFEp0lXZKVWRKewHLs4djKK1QR29KgGUekZSTqIT4itsl6K8FxqtUTyc/Q69ZH+ qCyzhGllFlTds/1koJfoE7m3wZUMrd8RU0qkXY4kyFainWdYdhCuMAK0qkFhG2I0AALIefTWJSAF oYU9YmHdP0A4fYr4OvltcZ7Gq2OSocKjzOL80+2XHaI+9NpLfZLr5MsjqW/HtpoBJRPYuWascGlD L7usFm4aCA8Vk3nctmy7G7ZSqR2IxKhs7Btc8yi7vgnCeU9Ts53JUN2JB+yDKH2QALMkczERjoMu h4oAxVRIiGyNTFVtJdzHcUFFWqBRTMJNws4BJEmfIFGHIMtaJb0WrZC93UZ0UGyMXRQVDEp2yEqp rbLqiky7o5ZftloikTK3xgweWwasOMxFwPqEbTgDQT618wVZLqiPzQkTJGzTiV0NY4JIOrnDdRom +wa4aXS4onXPTkCBgkRIFMUE0UY1fgDpsgufYPXaNyx1E44viK1UhcIQSfhGVZ1hctjDtr3rh4yR BZIOMV3rJF0RZCUdkJVbJewYJD+X+4gOKksNYUqZrUx1Q3J3suWXrZaITJAl+jSqJaxnLbHTiGHu JJpbjez2hp7dyIr0FSmZblxSrVJsI2QHw+pvJUWJZgPlWgT3a2lZZ6ZdkLNEdnigCdOqMGQQjnA0 bFL/Mby2yIAlBJTZrakpcIiG90agFpQenwkozqcRKcnTfZtIS6VsjUUfA2tcnW9IiJK44tPWSAwp hP/TSSH8/EV0Wrc2u14Z3wgppI2NvtK5s6vb/zr71J19/pq96hkGvvy2sJPyR3YRcxWwzQEVavig rL15+okGNzdfo8HN/f0Pm4+rm6+DDvmE/UgdJsdKcYe3wwwkVoMSO6zwXdDhL03180UxPd8/8u1p 5e14J+mW8E5ddtrvP+fB3rHPUcfBouU0Lhw1QBbR2SesmDp7bZf9OMkS2SBNAGLDjp3PxNlX7OSr buiCqOTsKyIlX3EyZ5FEhXAfwoakgQIT36jQLfmp5OkVMr9rkidIfD86LTFFiPhTK0WIV5fPNRL7 Sv+mnj4ZQXUqGrVTdtiKTDpzoJU+lyXNHb1KE0e/nywWeXSZvOYMak5yBoZl6sANmzhww7IfbsS3 jyN71OTSa4LwIGviwYkFOYYl9Tjx4B0+tuOoPXvwDg8urZAluX6CCEUYLdPVsIkHN8z8qUovJkjS IXti5Cds2WqBEBoaZn2cePA6WWISV6hVTXe1n8iyiGRvqx1tZi7cpGUXflIGnplD0lAzVVMXzljW ns0sjoN535JvVi7JGfh/SvuUZUZFdzCaBd9yrsW5ZLOCd5/5bEnNxwRNyIcf8rfwftj2yBZnlnh/ gr91wd+elDObG24HA688Oaap2ZSCT/O39exFj/hbX8ZXLj3Nh4crfNzKf+q+TB4gHMo+GlfMX3/Y 167G+PZGJ4r22Nk/f3Jn9394CE7PXd5cf7d5+O2JjlcVOsbxrkixyghQQRFqBtn2pRN7U4hI5P4P bz8SCDj3+8vP/vP9u41odIozVo2SMz4YjqzIHQWN9psoaPTwflujWfnfI+GBanSUjYSzj7DRjx/u RaV/f3fzEyN3t7l/uLr78IyGao8z1I8fNrvUejZr4diOsdbHH8P49VVZPqONiHmOmUwfrn4Sbb50 juV3ffXAH86uY8x9dLx70pRK/uLgspusQPl49u6HO/Ty7s/PaK9EyAf4aUurbK9vntNecRhJhRyg qS3Nsr3cm2djK1IbFMt0+7lqspvYH3baHvWUOcSBSXj3XpO8OW3PqO8+hqTl0Hl3v5MXrbIXTbXd /4eELEkmefvenssq3uFEn8tlkcDfY408JWc+9PUDJVvv3z2nYycIf8RGW150otNz2Ylq7mPstMeP PpfD4mj3GEvtcaPPZSupNdy9wmZzKnnRoeN6w2npGV3ux0RAnE8cYyLzotkpXOEUnstEsllHLb+f fLOp4qeZS3iu+eQjMRNG74uog084OpenA3UML4cSngMmeZNzW6d7ox07ODl7liHY7uvE681yaIXU oeopFOf4FL7Ecl32+SGHZtgkh2aYpcw4r1o3XFAoJgj5uL6aJdG8HAtxdDE9MfNM5YGrRTmJ5uUc aqR2yE7MFAnJr5TvM2xyYmZYSn9R8JGkh1owztAESTpYIm2CTZ5LrRZIPmnrKc1IfbREmmDRElhV s3tq1YWdg6zUH7PpotWO8Zll0vRJjjlPyqTJ9LVsTkd9YzVyopWPwgrDJpk0wyxvRv0YF0ioFpgg VE6IrJxJKzoOskcOUGeZtIFSnYYDFzsL4+Q/tsqZNEVy5glZqZVl0uQKQsJSroviQpU+QZIOlhHz Wa9lqyWSn3NShBz6aJk0ZKkl0mEYWqlVl3bO/Vm2ypbf9dzkMMzkPy2TVpXtmjmsF9NISnEqEa5u TJNqVGaO3Bnh+FlJJSfTXlBolSq4cHYrSlR//UJOuKT4ICTJ5Fhr5CtfWtlXqgmzr+OXX11I4ozn VuULHsVJrUiV/Wp2pjRjrlBBH44MmpBvpehcbkRJrWdFjVrGbqlxhxS5h5AxrREF4cQ0lLBotSm3 H8qWlC+T1ypQ5RhqGClyQpS2k/J3DuRppcLl8oWnniCroAhco5oqRPqfgo66pnSxUyzXe6rwCZJU EFG8UMpQSeEHtZC0hSzbCHVaK+0itJWxYIeJUiS1g0lNcwUmnVFo0SYBhSS4g5TAWGoDBedlUVIM VTehHKrn9hx1dtxQ6MuKGqXXr7hFuC/vtzgiEGLDDUoJJ1UUoRqULBqYXEGRolTDIDbKuQeZ29rM KktZuhQlUd2XEbxjy5UUmRr4lSCK2caFSQr+EZUwJ1OEmjq5UxiFUxgeG6kGzhBEJU0LwygHlZKk sePepz5JeiL2x4RnRFWw0tK+MLWWrZZIfo47LqmLVpLaF2YI0yoba2Hl3J+JSbWHB5+jlHUh7Wm0 1nG+xaWMIQXSgdZGIiKZuFa8uZJSRCqHnYQf1OpbxJTJbQjMBnFBRmTrOetfjaHKSn5xSCC/qIKS X3BXLoLfP1UtrbClYiDealtDWS7UdXANZEtFLWQ9oybLTmBJsz+yo9eXprh1agz4hjsq3GPUV2kI n62xo4BVjzMW9wi0NixWMhRyB5RRgM+1nGBZpvAI0cvcoJy14OCNW0oUWEmcosWkikmckipOFcpF qT3Xm3qpw0plqoiC8ipK65izVrqKWx+4QhrCFOicO2XOsyi41SSFsEk4fr6H+wGiBoVXhCmWNOWx 1EqCQy1nVcyKS024IshKKsh01XJWxY5B8nO5i8L0KksNkbVSY2XdFcn9yZZftloiMUCNY8alHRuz t8Li7E8aL9N1Xv76hEquVIDZwHeMEX40BACp9NQwpoWWvxpmRaw9x3cEPXJJBLtL2SwlQFEW80JL XbkcIfzbyrzIGFVyZc00MOlCn9JKy18L/EdErPyVvzlCMSt/HTKmxaggKl3LU00H9EoYrZJexyD5 udxHcVup4NYskcpf0UqtqnbOSO5Ptv2y1RKRibFEM8+fcmWByJUIgZOyWMu1L3zFG3e1VE8uOa2D h+RiAvRE5Ll1PeFgJFvIA0dGsu5gJMtl57AHT4ulpb7dM4mmBGdYJjiDjLpadlgE9NzoVDJrSVmV cPqE31op9pYbryIp8VtLDFjzlygovbXca6h7eNHozZBMB1QLpFYTejMskg0XDZLo/Of4etn4Bj6S Jkmjx4HJQ6lnSmu+0N5nrjULGTsZMu2GmltbISkNgCLOkBmrGXritluiElsBnuuL3CeXv9dDOYO7 qQkTrkmF9YYZ+3ix/xgu8EbewqKyc5Eqcp5LWMWtu74jvhVZhiGUL7J0rv2GVuxuEncqgizT1bAJ bxmWWITrBHCGSC8mSNLB+EdaJWzZaoEwWQyzPtKfyFsEKMkSepmAkE4taLorgqwFdhQy4y2Tlnnr lAIWrtAQZe8sYOHuAqRLVd6K5cFmo653kFYqYBHukphK2GtW/2/F/BZl/X8Ragr8Q4ws97MtEt8a jElKlesB8je04Bq2hkIrMk4ripm/aHdRjL0yvZEtwXbKWotQ/+UJRahzFWR/na747ei1xGkc1A86 /7TTHFJ9HWphzhquNQxXfxxW3XU1rjbXm361KftxNYwNF7T46wma683sBPrxHcopChK3iYb9DgVT haqv6/7n085gVIFDZzA6SNBOUGA5Rn95oNjkZyoDSIvyl/YMvjrpyEWVSHHNjsFhP7Gz75Ms/xf/ AxaPXUEKZW5kc3RyZWFtCmVuZG9iagoxMjIgMCBvYmoKNTI5MgplbmRvYmoKMTIwIDAgb2JqCjw8 IC9UeXBlIC9QYWdlIC9QYXJlbnQgMTE2IDAgUiAvUmVzb3VyY2VzIDEyMyAwIFIgL0NvbnRlbnRz IDEyMSAwIFIgL01lZGlhQm94ClswIDAgNTk1IDg0Ml0gPj4KZW5kb2JqCjEyMyAwIG9iago8PCAv UHJvY1NldCBbIC9QREYgL1RleHQgL0ltYWdlQiAvSW1hZ2VDIC9JbWFnZUkgXSAvQ29sb3JTcGFj ZSA8PCAvQ3MyIDggMCBSCi9DczEgNyAwIFIgL0NzNCA2NSAwIFIgL0NzNSA2NiAwIFIgL0NzNyAx MzAgMCBSID4+IC9Gb250IDw8IC9UVDI3IDEzMiAwIFIKL1RUNiAzMCAwIFIgL1RUMTIgNTIgMCBS IC9UVDI4IDEzMyAwIFIgL1RUMjUgMTI5IDAgUiAvVFQ1IDI5IDAgUiAvVFQxIDkgMCBSCi9UVDQg MTIgMCBSIC9UVDExIDQzIDAgUiA+PiAvWE9iamVjdCA8PCAvSW0zIDMxIDAgUiAvSW00IDEyNCAw IFIgL0ltNSAxMjYgMCBSCj4+ID4+CmVuZG9iagoxMjQgMCBvYmoKPDwgL0xlbmd0aCAxMjUgMCBS IC9UeXBlIC9YT2JqZWN0IC9TdWJ0eXBlIC9JbWFnZSAvV2lkdGggNDA4IC9IZWlnaHQgNzg4IC9J bnRlcnBvbGF0ZQp0cnVlIC9Db2xvclNwYWNlIDEzNCAwIFIgL1NNYXNrIDEzNSAwIFIgL0JpdHNQ ZXJDb21wb25lbnQgOCAvRmlsdGVyIC9GbGF0ZURlY29kZQo+PgpzdHJlYW0KeAHt0DEBAAAAwqD1 T20LL4hAYcCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgw YMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCA AQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMG DBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYMCAAQMGDBgwYOA3MLhyAAEK ZW5kc3RyZWFtCmVuZG9iagoxMjUgMCBvYmoKNDIyOQplbmRvYmoKMTI2IDAgb2JqCjw8IC9MZW5n dGggMTI3IDAgUiAvVHlwZSAvWE9iamVjdCAvU3VidHlwZSAvSW1hZ2UgL1dpZHRoIDM4NSAvSGVp Z2h0IDcwMyAvSW50ZXJwb2xhdGUKdHJ1ZSAvQ29sb3JTcGFjZSAxMzQgMCBSIC9TTWFzayAxMzcg MCBSIC9CaXRzUGVyQ29tcG9uZW50IDggL0ZpbHRlciAvRmxhdGVEZWNvZGUKPj4Kc3RyZWFtCngB 7dCBAAAAAMOg+VNf4QCFUGHAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDA gAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAED BgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwYMGDAgAEDBgwY MGDAgAEDBgwYMGDAgAEDBgwYMGDAwDUwZHEAAQplbmRzdHJlYW0KZW5kb2JqCjEyNyAwIG9iagoz NTY0CmVuZG9iagoxMzcgMCBvYmoKPDwgL0xlbmd0aCAxMzggMCBSIC9UeXBlIC9YT2JqZWN0IC9T dWJ0eXBlIC9JbWFnZSAvV2lkdGggMzg1IC9IZWlnaHQgNzAzIC9Db2xvclNwYWNlCi9EZXZpY2VH cmF5IC9JbnRlcnBvbGF0ZSB0cnVlIC9CaXRzUGVyQ29tcG9uZW50IDggL0ZpbHRlciAvRmxhdGVE ZWNvZGUgPj4Kc3RyZWFtCngB7ZfXl9SFngeZxATCDMiAJEGCiCCjXMSEgAEDQfBe8lWSIqCgpP3/ twcVKNe9Zx/oOnuO9X3Rz0vXUNX965klS7oMZCAD/38MjHTDNPAfQ4+Mjo6NjY9PdMMyMD4+NjY6 MvKXFUZGRscnlk5OTU/PdMMyMD09NTkxMWjwPxMs6p+cXrZi5ezcqm5YBuZmVy6fmZ78iwQjYxNL p5fPrlqz9uX1G7phGVi/bn7NqpXLppeO/+lDMPA/ObNy9doNm7du27GzG5KBHdtf3bJp/fyqlTOT LDB4/kwum53fsGXH63v2vfX2/m44Bt5e2Ldn1/ZX1q+ZXSzw3PfAyPjSmdn5TdvfWHjn/UOHjxw9 +nH34g0cPXrk8IfvHdj3+raN87MzS8ee+yYenZheOb9px94DHx499tWJk6dOfd29eAOnTp08/uWx Ix/8Y8/2jWtWTE08+wiMjE0uX71h+953Dh87eebs+QsXL17qXryBixcvnD97+vhnHx1449X1q5Y9 9xEYmZieXbtl94HDX5w+d/nK1WvXr9/oXryB69evXf3u8tmvjx3av2vz/Mqp8afPoNGJmVUbdix8 eOz0he9u3Lx1+043HAO3b928/u25U5+9/+a2l+dmnj2DBk+gNZtfP3D0xLkrP9y5e++Xwf3avWgD i1rv/Xz7+2/PHj+y/7WNLy1b+vRLYGxq5dote94/dubyjTv37j942A3JwIMHv969ff3S6U8P7n5l fsXk2B+/iI5Pza7btu/QV2ev3Lx7/9Gjx4v3X92LNfDE6qOHv/78w7f//PyDvVvXrnwuwPTc+u0L h0+cv3rr3oNF/y8W3av9bmBg9tH9uz9eOfvVh2++um526tknYGZuw463j5y8cO32Lw/zP7w3zCDA g3u3rp47/tHCtpdnp8efPoIGvwTtfPvoqYvX7ywGGN4P8Hd/5d8DnD9+eGH7+rk/Bdj/R4C/u6Uh /vv/CHCCAUbGFz8BBRii+acv/eQRdP7PARb/DivAU0nD/J/Hi98BTwP8/qfwyG8BPv760o07vz4c Jr7Xfvzgl9vXLpw48taOxe+AAujviALoygksAH3oqwC6cgILQB/6KoCunMAC0Ie+CqArJ7AA9KGv AujKCSwAfeirALpyAgtAH/oqgK6cwALQh74KoCsnsAD0oa8C6MoJLAB96KsAunICC0Af+iqArpzA AtCHvgqgKyewAPShrwLoygksAH3oqwC6cgILQB/6KoCunMAC0Ie+CqArJ7AA9KGvAujKCSwAfeir ALpyAgtAH/oqgK6cwALQh74KoCsnsAD0oa8C6MoJLAB96KsAunICC0Af+iqArpzAAtCHvgqgKyew APShrwLoygksAH3oqwC6cgILQB/6KoCunMAC0Ie+CqArJ7AA9KGvAujKCSwAfeirALpyAgtAH/oq gK6cwALQh74KoCsnsAD0oa8C6MoJLAB96KsAunICC0Af+iqArpzAAtCHvgqgKyewAPShrwLoygks AH3oqwC6cgILQB/6KoCunMAC0Ie+CqArJ7AA9KGvAujKCSwAfeirALpyAgtAH/oqgK6cwALQh74K oCsnsAD0oa8C6MoJLAB96KsAunICC0Af+iqArpzAAtCHvgqgKyewAPShrwLoygksAH3oqwC6cgIL QB/6KoCunMAC0Ie+CqArJ7AA9KGvAujKCSwAfeirALpyAgtAH/oqgK6cwALQh74KoCsnsAD0oa8C 6MoJLAB96KsAunICC0Af+iqArpzAAtCHvgqgKyewAPShrwLoygksAH3oqwC6cgILQB/6KoCunMAC 0Ie+CqArJ7AA9KGvAujKCSwAfeirALpyAgtAH/oqgK6cwALQh74KoCsnsAD0oa8C6MoJLAB96KsA unICC0Af+iqArpzAAtCHvgqgKyewAPShrwLoygksAH3oqwC6cgILQB/6KoCunMAC0Ie+CqArJ7AA 9KGvAujKCSwAfeirALpyAgtAH/oqgK6cwALQh74KoCsnsAD0oa8C6MoJLAB96KsAunICC0Af+iqA rpzAAtCHvgqgKyewAPShrwLoygksAH3oqwC6cgILQB/6KoCunMAC0Ie+CqArJ7AA9KGvAujKCSwA feirALpyAgtAH/oqgK6cwALQh74KoCsnsAD0oa8C6MoJLAB96KsAunICC0Af+iqArpzAAtCHvgqg KyewAPShrwLoygksAH3oqwC6cgILQB/6KoCunMAC0Ie+CqArJ7AA9KGvAujKCSwAfeirALpyAgtA H/oqgK6cwALQh74KoCsnsAD0oa8C6MoJLAB96KsAunICC0Af+iqArpzAAtCHvgqgKyewAPShrwLo ygksAH3oqwC6cgILQB/6KoCunMAC0Ie+CqArJ7AA9KGvAujKCSwAfeirALpyAgtAH/oqgK6cwALQ h74KoCsnsAD0oa8C6MoJLAB96KsAunICC0Af+iqArpzAAtCHvgqgKyewAPShrwLoygksAH3oqwC6 cgILQB/6KoCunMAC0Ie+CqArJ7AA9KGvAujKCSwAfeirALpyAgtAH/oqgK6cwALQh74KoCsnsAD0 oa8C6MoJLAB96KsAunICC0Af+iqArpzAAtCHvgqgKyewAPShrwLoygksAH3oqwC6cgILQB/6KoCu nMAC0Ie+CqArJ7AA9KGvAujKCSwAfeirALpyAgtAH/oqgK6cwALQh74KoCsnsAD0oa8C6MoJLAB9 6KsAunICC0Af+iqArpzAAtCHvgqgKyewAPShrwLoygksAH3oqwC6cgILQB/6KoCunMAC0Ie+CqAr J7AA9KGvAujKCSwAfeirALpyAgtAH/oqgK6cwALQh74KoCsnsAD0oa8C6MoJLAB96KsAunICC0Af +iqArpzAAtCHvgqgKyewAPShrwLoygksAH3oqwC6cgILQB/6KoCunMAC0Ie+CqArJ7AA9KGvAujK CSwAfeirALpyAgtAH/oqgK6cwALQh74KoCsnsAD0oa8C6MoJLAB96KsAunICC0Af+iqArpzAAtCH vgqgKyewAPShrwLoygksAH3oqwC6cgILQB/6KoCunMAC0Ie+CqArJ7AA9KGvAujKCSwAfeirALpy AgtAH/oqgK6cwALQh74KoCsnsAD0oa8C6MoJLAB96KsAunICC0Af+iqArpzAAtCHvgqgKyewAPSh rwLoygksAH3oqwC6cgILQB/6KoCunMAC0Ie+CqArJ7AA9KGvAujKCSwAfeirALpyAgtAH/oqgK6c wALQh74KoCsnsAD0oa8C6MoJLAB96KsAunICC0Af+iqArpzAAtCHvgqgKyewAPShrwLoygksAH3o qwC6cgILQB/6KoCunMAC0Ie+CqArJ7AA9KGvAujKCSwAfeirALpyAgtAH/oqgK6cwALQh74KoCsn sAD0oa8C6MoJLAB96KsAunICC0Af+iqArpzAAtCHvgqgKyewAPShrwLoygksAH3oqwC6cgILQB/6 KoCunMAC0Ie+CqArJ7AA9KGvAujKCSwAfeirALpyAgtAH/oqgK6cwALQh74KoCsnsAD0oa8C6MoJ LAB96KsAunICC0Af+iqArpzAAtCHvgqgKyewAPShrwLoygksAH3oqwC6cgILQB/6KoCunMAC0Ie+ CqArJ7AA9KGvAujKCSwAfeirALpyAgtAH/oqgK6cwALQh74KoCsnsAD0oa8C6MoJLAB96KsAunIC C0Af+iqArpzAAtCHvgqgKyewAPShrwLoygksAH3oqwC6cgILQB/6KoCunMAC0Ie+CqArJ7AA9KGv AujKCSwAfeirALpyAgtAH/oqgK6cwALQh74KoCsnsAD0oa8C6MoJLAB96KsAunICC0Af+iqArpzA AtCHvgqgKyewAPShrwLoygksAH3oqwC6cgILQB/6KoCunMAC0Ie+CqArJ7AA9KGvAujKCSwAfeir ALpyAgtAH/oqgK6cwALQh74KoCsnsAD0oa8C6MoJLAB96KsAunICC0Af+iqArpzAAtCHvgqgKyew APShrwLoygksAH3oqwC6cgILQB/6KoCunMAC0Ie+CqArJ7AA9KGvAujKCSwAfeirALpyAgtAH/oq gK6cwALQh74KoCsnsAD0oa8C6MoJLAB96KsAunICC0Af+iqArpzAAtCHvgqgKyewAPShrwLoygks AH3oqwC6cgILQB/6KoCunMAC0Ie+CqArJ7AA9KGvAujKCSwAfeirALpyAgtAH/oqgK6cwALQh74K oCsnsAD0oa8C6MoJLAB96KsAunICC0Af+iqArpzAAtCHvgqgKyewAPShrwLoygksAH3oqwC6cgIL QB/6KoCunMAC0Ie+CqArJ7AA9KGvAujKCSwAfeirALpyAgtAH/oqgK6cwALQh74KoCsnsAD0oa8C 6MoJLAB96KsAunICC0Af+iqArpzAAtCHvgqgKyewAPShrwLoygksAH3oqwC6cgILQB/6KoCunMAC 0Ie+CqArJ7AA9KGvAujKCSwAfeirALpyAgtAH/oqgK6cwALQh74KoCsnsAD0oa8C6MoJLAB96KsA unICC0Af+iqArpzAAtCHvgqgKyewAPShrwLoygksAH3oqwC6cgILQB/6KoCunMAC0Ie+CqArJ7AA 9KGvAujKCSwAfeirALpyAgtAH/oqgK6cwALQh74KoCsnsAD0oa8C6MoJLAB96KsAunICC0Af+iqA rpzAAtCHvgqgKyewAPShrwLoygksAH3oqwC6cgILQB/6KoCunMAC0Ie+CqArJ7AA9KGvAujKCSwA feirALpyAgtAH/oqgK6cwALQh74KoCsnsAD0oa8C6MoJLAB96KsAunICC0Af+iqArpzAAtCHvgqg KyewAPShrwLoygksAH3oqwC6cgILQB/6+k8Bjp66eP3OLw8f6z/U3wn4+MG929fOnzj81o71c9Pj I0ue3Mj4zKoNO/cXQHgnPHpw79bVQYCF7YsBfvO/ZEkBBPW/If4vAR73EBpaj8f/W4C5DTvfPnLy 4vXbg++AwQ3tB/h7v/DA7G8Bjn+0sP3l2eceQdNz63e8deTE+Wu37z14tFigBC/+rfLE66P7d3+8 cu6rQ/u2rZudevYdMD378raFQ8fPXfnx7v0CvHj3T17xSYCHv/5887t/ffHB3q1rV06N/fElPDa1 cu3WvR98/s9///DTLw8ePnz4qBuGgYHZ+/fu3Lh85rN339gyv2LyWYDJFfOv7D74yakLV2/+dO/X bmgGfrn3080r504cPbBr00vLl47+8QkYXbps9cadb3/0xTeXrt68feenblgG7tz64erF059/OPgz YNXMxLMAEzOz67buOXj0+DcXv7t24/sfuqEY+P77G1e/vXDmyyPvvLFl7eCXoN//EF6yZGR8csWa jTsX3vv4q9NnL1y6/O9uOAYuXzr/r6+/OPLum9s3rF4+OfY0wJKxwUdg7Su7Ft49/NlXJ0+fPvNN NwwDZ05/ffLLTz86uG/n5vnZ6WdPoCVLRscnl69at+W1N//x3qGjn3z62bFuGAY++/STI4fe3b9n 5ytr55ZNPnsCDZ5BYxNTgwKbt+3au7D/wDsHD77bvXgDBw++c2D/wp7XXt008D81MfrsCfR7gbn5 9Zu3bt+56/Xdu9/oXryB3btf37Vz+9ZNL6+ZHfh/7htg8bfR0cFnYGblqjXr1m/ctPmVbigGNm/e tGH92jVzK2Ym/+z/yWdg6fTMitm51S+tGdx896INLGp9afXc7PKZqaXjf3r/L34GRgYfgqWT0zMz y5Z3wzKwbGZmanJifAzP/0X7T25kdHRsfGJiYmk3LAMDuwP7f63/twYjgwrdEA2MjDz/y8/vb/3+ k4EMZCADf08D/w2gLABOCmVuZHN0cmVhbQplbmRvYmoKMTM4IDAgb2JqCjQzODgKZW5kb2JqCjEz NSAwIG9iago8PCAvTGVuZ3RoIDEzNiAwIFIgL1R5cGUgL1hPYmplY3QgL1N1YnR5cGUgL0ltYWdl IC9XaWR0aCA0MDggL0hlaWdodCA3ODggL0NvbG9yU3BhY2UKL0RldmljZUdyYXkgL0ludGVycG9s YXRlIHRydWUgL0JpdHNQZXJDb21wb25lbnQgOCAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJl YW0KeAHtl/uXz4XeR839Ypgh13EZhY5wQqXSjfTIKaSUiMolCiXX/v9nRoVTnb1a61m+e63n7Pcv WV6ZPWtv389nLFvWZSADGfh/ZmCoG7wB/js0NDw8MjI6OtYN1sDo6OjIyPDQ0F/WGRoaHh0bn5ic mpruBmxganJifGx0Mc2fyyxVmZhavmLl7NyqbrAG5uZmV8xMT46P/bnM0MjY+NTM7Ko16zZsnO8G a2DjhvVrn5tbMT05NvqHj8xilonplavXzW/Z9sKOnd1gDezY/vzCpg1r5mamxkeHn36ULT7EJpbP rp1f2LFrz8v7D7zSDdLAgf37/rn7xec3r1+9Ymp85Ol3zNDo+PTs2s3bd+87eOid9w4fOfJ+NzAD R44cfvetN17Z++LCxtUrJseefpINj02tXLt5x97X3j5y7KMTJ0+d+qQbmIFTp058fPyD997cv2vb hlXLJ0affGCGRiZmVs9v33vwvWMnP/3iy3Pnz3/VDcrA+fPnz50988lHR986sGvrutnpsSdvmKGx qdl1Cy+99t7x02cvfHvp8pUrV7tBGbhy5crlS1+fP3Pig0P7dsyvnpkYefzmHx6bXjW/Y9/bx06f ++bq9R9u3OwGaeDGje+vXb7w+cdHDr60sHbl5JMH2eJjbM2WXa8dOXH222s3f7r98+Ld6QZkYFH2 7du3vr9y4dMP33r5hQ1z02OPXzAjkyvXLew5dOzTC1dv3r577343WAP37t358fqlsycOv7Jz0+rl T14wo5Oz6194+Z2Pvvj2+k93Hzx4uHS/dIMw8Mj1wwf3fr559avTRw/u2rJmZvzxi390am7j9n3v nfjy0g+37y1lGcR3FOM3A0tp7t+5de3ip8fe2L117YqJJ12m5+Z3HDh88tzlGz/fL8uA/8YsdXmw +CD7+syHb+5ZWOzy+Aey0cUfx3YeOHLq/JWbS10G/H391+OWutz98fo3Zz48tGdh3co/dHnl9y7/ 9Z4GLuC3Lp8fP7R321Ndhh59Xuoy8B5PgI8+L3/qsvTPyp11eaJp4L+iLu9/8tXVm3fuD/x7CvjL Lw/u/nT9m8+Pv7X0HJv8/b0/9OvnpS7e35C6eO6JXBey42118dwTuS5kx9vq4rkncl3IjrfVxXNP 5LqQHW+ri+eeyHUhO95WF889ketCdrytLp57IteF7HhbXTz3RK4L2fG2unjuiVwXsuNtdfHcE7ku ZMfb6uK5J3JdyI631cVzT+S6kB1vq4vnnsh1ITveVhfPPZHrQna8rS6eeyLXhex4W10890SuC9nx trp47olcF7LjbXXx3BO5LmTH2+riuSdyXciOt9XFc0/kupAdb6uL557IdSE73lYXzz2R60J2vK0u nnsi14XseFtdPPdErgvZ8ba6eO6JXBey42118dwTuS5kx9vq4rkncl3IjrfVxXNP5LqQHW+ri+ee yHUhO95WF889ketCdrytLp57IteF7HhbXTz3RK4L2fG2unjuiVwXsuNtdfHcE7kuZMfb6uK5J3Jd yI631cVzT+S6kB1vq4vnnsh1ITveVhfPPZHrQna8rS6eeyLXhex4W10890SuC9nxtrp47olcF7Lj bXXx3BO5LmTH2+riuSdyXciOt9XFc0/kupAdb6uL557IdSE73lYXzz2R60J2vK0unnsi14XseFtd PPdErgvZ8ba6eO6JXBey42118dwTuS5kx9vq4rkncl3IjrfVxXNP5LqQHW+ri+eeyHUhO95WF889 ketCdrytLp57IteF7HhbXTz3RK4L2fG2unjuiVwXsuNtdfHcE7kuZMfb6uK5J3JdyI631cVzT+S6 kB1vq4vnnsh1ITveVhfPPZHrQna8rS6eeyLXhex4W10890SuC9nxtrp47olcF7LjbXXx3BO5LmTH 2+riuSdyXciOt9XFc0/kupAdb6uL557IdSE73lYXzz2R60J2vK0unnsi14XseFtdPPdErgvZ8ba6 eO6JXBey42118dwTuS5kx9vq4rkncl3IjrfVxXNP5LqQHW+ri+eeyHUhO95WF889ketCdrytLp57 IteF7HhbXTz3RK4L2fG2unjuiVwXsuNtdfHcE7kuZMfb6uK5J3JdyI631cVzT+S6kB1vq4vnnsh1 ITveVhfPPZHrQna8rS6eeyLXhex4W10890SuC9nxtrp47olcF7LjbXXx3BO5LmTH2+riuSdyXciO t9XFc0/kupAdb6uL557IdSE73lYXzz2R60J2vK0unnsi14XseFtdPPdErgvZ8ba6eO6JXBey4211 8dwTuS5kx9vq4rkncl3IjrfVxXNP5LqQHW+ri+eeyHUhO95WF889ketCdrytLp57IteF7HhbXTz3 RK4L2fG2unjuiVwXsuNtdfHcE7kuZMfb6uK5J3JdyI631cVzT+S6kB1vq4vnnsh1ITveVhfPPZHr Qna8rS6eeyLXhex4W10890SuC9nxtrp47olcF7LjbXXx3BO5LmTH2+riuSdyXciOt9XFc0/kupAd b6uL557IdSE73lYXzz2R60J2vK0unnsi14XseFtdPPdErgvZ8ba6eO6JXBey42118dwTuS5kx9vq 4rkncl3IjrfVxXNP5LqQHW+ri+eeyHUhO95WF889ketCdrytLp57IteF7HhbXTz3RK4L2fG2unju iVwXsuNtdfHcE7kuZMfb6uK5J3JdyI631cVzT+S6kB1vq4vnnsh1ITveVhfPPZHrQna8rS6eeyLX hex4W10890SuC9nxtrp47olcF7LjbXXx3BO5LmTH2+riuSdyXciOt9XFc0/kupAdb6uL557IdSE7 3lYXzz2R60J2vK0unnsi14XseFtdPPdErgvZ8ba6eO6JXBey42118dwTuS5kx9vq4rkncl3IjrfV xXNP5LqQHW+ri+eeyHUhO95WF889ketCdrytLp57IteF7HhbXTz3RK4L2fG2unjuiVwXsuNtdfHc E7kuZMfb6uK5J3JdyI631cVzT+S6kB1vq4vnnsh1ITveVhfPPZHrQna8rS6eeyLXhex4W10890Su C9nxtrp47olcF7LjbXXx3BO5LmTH2+riuSdyXciOt9XFc0/kupAdb6uL557IdSE73lYXzz2R60J2 vK0unnsi14XseFtdPPdErgvZ8ba6eO6JXBey42118dwTuS5kx9vq4rkncl3IjrfVxXNP5LqQHW+r i+eeyHUhO95WF889ketCdrytLp57IteF7HhbXTz3RK4L2fG2unjuiVwXsuNtdfHcE7kuZMfb6uK5 J3JdyI631cVzT+S6kB1vq4vnnsh1ITveVhfPPZHrQna8rS6eeyLXhex4W10890SuC9nxtrp47olc F7LjbXXx3BO5LmTH2+riuSdyXciOt9XFc0/kupAdb6uL557IdSE73lYXzz2R60J2vK0unnsi14Xs eFtdPPdErgvZ8ba6eO6JXBey42118dwTuS5kx9vq4rkncl3IjrfVxXNP5LqQHW+ri+eeyHUhO95W F889ketCdrytLp57IteF7HhbXTz3RK4L2fG2unjuiVwXsuNtdfHcE7kuZMfb6uK5J3JdyI631cVz T+S6kB1vq4vnnsh1ITveVhfPPZHrQna8rS6eeyLXhex4W10890SuC9nxtrp47olcF7LjbXXx3BO5 LmTH2+riuSdyXciOt9XFc0/kupAdb6uL557IdSE73lYXzz2R60J2vK0unnsi14XseFtdPPdErgvZ 8ba6eO6JXBey42118dwTuS5kx9vq4rkncl3IjrfVxXNP5LqQHW+ri+eeyHUhO95WF889ketCdryt Lp57IteF7HhbXTz3RK4L2fG2unjuiVwXsuNtdfHcE7kuZMfb6uK5J3JdyI631cVzT+S6kB1vq4vn nsh1ITveVhfPPZHrQna8rS6eeyLXhex4W10890SuC9nxtrp47olcF7LjbXXx3BO5LmTH2+riuSdy XciOt9XFc0/kupAdb6uL557IdSE73lYXzz2R60J2vK0unnsi14XseFtdPPdErgvZ8ba6eO6JXBey 42118dwTuS5kx9vq4rkncl3IjrfVxXNP5LqQHW+ri+eeyHUhO95WF889ketCdrytLp57IteF7Hhb XTz3RK4L2fG2unjuiVwXsuNtdfHcE7kuZMfb6uK5J3JdyI631cVzT+S6kB1vq4vnnsh1ITveVhfP PZHrQna8rS6eeyLXhex4W10890SuC9nxtrp47olcF7LjbXXx3BO5LmTH2+riuSdyXciOt9XFc0/k upAdb6uL557IdSE73lYXzz2R60J2vK0unnsi14XseFtdPPdErgvZ8ba6eO6JXBey42118dwTuS5k x9vq4rkncl3IjrfVxXNP5LqQHW+ri+eeyHUhO95WF889ketCdrytLp57IteF7HhbXTz3RK4L2fG2 unjuiVwXsuNtdfHcE7kuZMfb6uK5J3JdyI631cVzT+S6kB1vq4vnnsh1ITveVhfPPZHrQna8rS6e eyLXhex4W10890SuC9nxtrp47olcF7LjbXXx3BO5LmTH2+riuSdyXciOt9XFc0/kupAdb6uL557I dSE73lYXzz2R60J2vK0unnsi14XseFtdPPdErgvZ8ba6eO6JXBey42118dwTuS5kx9vq4rkncl3I jrfVxXNP5LqQHW+ri+eeyHUhO95WF889ketCdrytLp57IteF7HhbXTz3RK4L2fG2unjuiVwXsuNt dfHcE7kuZMfb6uK5J3JdyI631cVzT+S6kB1vq4vnnsh1ITveVhfPPZHrQna8rS6eeyLXhex4W108 90SuC9nxtrp47olcF7LjbXXx3BO5LmTH2+riuSdyXciOt9XFc0/kupAdb6uL557IdSE73lYXzz2R 60J2vK0unnsi14XseFtdPPdErgvZ8ba6eO6JXBey42118dwTuS5kx9vq4rkncl3IjrfVxXNP5LqQ HW+ri+eeyHUhO95WF889ketCdrytLp57IteF7HhbXTz3RK4L2fG2unjuiVwXsuNtdfHcE7kuZMfb 6uK5J3JdyI631cVzT+S6kB1vq4vnnsh1ITveVhfPPZHrQna8rS6eeyLXhex4W10890SuC9nxtrp4 7olcF7LjbXXx3BO5LmTH2+riuSdyXciOt9XFc0/kupAdb6uL557IdSE73lYXzz2R60J2vK0unnsi 14XseFtdPPdErgvZ8ba6eO6JXBey42118dwTuS5kx9vq4rkncl3IjrfVxXNP5LqQHW+ri+eeyHUh O95WF889ketCdrytLp57IteF7HhbXTz3RK4L2fG2unjuiVwXsuNtdfHcE7kuZMfb6uK5J3JdyI63 1cVzT+S6kB1vq4vnnsh1ITveVhfPPZHrQna8rS6eeyLXhex4W10890SuC9nxtrp47olcF7LjbXXx 3BO5LmTH2+riuSdyXciOt9XFc0/kupAdb6uL557IdSE73lYXzz2R60J2vK0unnsi14XseFtdPPdE rgvZ8ba6eO6JXBey42118dwTuS5kx9vq4rkncl3IjrfVxXNP5LqQHW+ri+eeyHUhO95WF889ketC drytLp57IteF7HhbXTz3RK4L2fG2unjuiUxdjpw6f+Xmz/cf0p9vezYGHtz98fo3nx9/a++2dSsn Rpb9ekOj06vmd75Sl2fj/O981d+6HPq3Lsvq8nfcPbv/5+HDv9PlYU+yZ5fgL7/yf+4yN7/zwOGT 56/cWHy/LN5f/ul+81kZ+LXL12c+fHPPwtoVj98vy0an5jbu2H/4xJeXb9y+96Auz8r/X37dpc/B w/t3bl27+NmxN3YvdRn+7b2/2GV2wwv73v347KXvf7q71KUPzF8qfCa/uaT7wWKXqxdOf3DwpS1r ZsYfdxmZXLlu2963Pjxz8dqtO/fu33/QDdLA/fv37/70w6VzJ4+8+uKm1cvHnnSZWLF260uvH/3k 3KXrt27f6QZt4Oefbnx38cy/3tm3Y37V9JMuw+PLV2/aeeDdf3321eXrN27euvVjNzgDt27duvn9 1W/Onjr6xp5t62enRod+f78Mj03Prt+25/X3Pz5z/pvLV7+71g3UwHdXLl08+8mxdw68uHnNzMTI 4y5Do5Mr1mzeue/Q+x+d/uLchQsXL37dDcrAxYsXL3z15ZmTx959bfe2DXNPPcaWLRsZn55dt/CP fW8ePvbRqdOfftYN0sCnpz85cfzo26/t2T7/3IrJJ4+xZcuGRydmVm1YePGfrx5698jR/znWDdTA B0cPv/36/t3bN62dnR578hhbtmxoZGxyZtX6Ldt37d3/6sHX3+gGaeD1g68deHn3zm3zi1kmRh// lLz09l8MMzUzt3bjlud3vLjrpd3dIA28tOsfO19Y2LT+uZVLWR6/9R/9VDa8+IlZvnLVmvUbN23e snXrQjcoA1u3bt2yeX7DuudmZ6bH/5jl0SdmfGr5itlVq59bs2ZtN0ADa9Y8t2pu5cz05NifsyyG WfzIjE9MTS9fPjOzohuggZmZ5dPTkxNjoyN/eIj99u/LxTIjo2Nj44s30Q3KwJLusbFHUf791fJb lUf/GRoaGu4EA0P/ucnTffp1BjKQgQxk4P9m4H8BfrFrqQplbmRzdHJlYW0KZW5kb2JqCjEzNiAw IG9iago0OTMzCmVuZG9iagoxMzkgMCBvYmoKPDwgL0xlbmd0aCAxNDAgMCBSIC9OIDMgL0FsdGVy bmF0ZSAvRGV2aWNlUkdCIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4AZ2Wd1RT2RaH z703vdASIiAl9Bp6CSDSO0gVBFGJSYBQAoaEJnZEBUYUESlWZFTAAUeHImNFFAuDgmLXCfIQUMbB UURF5d2MawnvrTXz3pr9x1nf2ee319ln733XugBQ/IIEwnRYAYA0oVgU7uvBXBITy8T3AhgQAQ5Y AcDhZmYER/hEAtT8vT2ZmahIxrP27i6AZLvbLL9QJnPW/3+RIjdDJAYACkXVNjx+JhflApRTs8UZ Mv8EyvSVKTKGMTIWoQmirCLjxK9s9qfmK7vJmJcm5KEaWc4ZvDSejLtQ3pol4aOMBKFcmCXgZ6N8 B2W9VEmaAOX3KNPT+JxMADAUmV/M5yahbIkyRRQZ7onyAgAIlMQ5vHIOi/k5aJ4AeKZn5IoEiUli phHXmGnl6Mhm+vGzU/liMSuUw03hiHhMz/S0DI4wF4Cvb5ZFASVZbZloke2tHO3tWdbmaPm/2d8e flP9Pch6+1XxJuzPnkGMnlnfbOysL70WAPYkWpsds76VVQC0bQZA5eGsT+8gAPIFALTenPMehmxe ksTiDCcLi+zsbHMBn2suK+g3+5+Cb8q/hjn3mcvu+1Y7phc/gSNJFTNlReWmp6ZLRMzMDA6Xz2T9 9xD/48A5ac3Jwyycn8AX8YXoVVHolAmEiWi7hTyBWJAuZAqEf9Xhfxg2JwcZfp1rFGh1XwB9hTlQ uEkHyG89AEMjAyRuP3oCfetbEDEKyL68aK2Rr3OPMnr+5/ofC1yKbuFMQSJT5vYMj2RyJaIsGaPf hGzBAhKQB3SgCjSBLjACLGANHIAzcAPeIACEgEgQA5YDLkgCaUAEskE+2AAKQTHYAXaDanAA1IF6 0AROgjZwBlwEV8ANcAsMgEdACobBSzAB3oFpCILwEBWiQaqQFqQPmULWEBtaCHlDQVA4FAPFQ4mQ EJJA+dAmqBgqg6qhQ1A99CN0GroIXYP6oAfQIDQG/QF9hBGYAtNhDdgAtoDZsDscCEfCy+BEeBWc BxfA2+FKuBY+DrfCF+Eb8AAshV/CkwhAyAgD0UZYCBvxREKQWCQBESFrkSKkAqlFmpAOpBu5jUiR ceQDBoehYZgYFsYZ44dZjOFiVmHWYkow1ZhjmFZMF+Y2ZhAzgfmCpWLVsaZYJ6w/dgk2EZuNLcRW YI9gW7CXsQPYYew7HA7HwBniHHB+uBhcMm41rgS3D9eMu4Drww3hJvF4vCreFO+CD8Fz8GJ8Ib4K fxx/Ht+PH8a/J5AJWgRrgg8hliAkbCRUEBoI5wj9hBHCNFGBqE90IoYQecRcYimxjthBvEkcJk6T FEmGJBdSJCmZtIFUSWoiXSY9Jr0hk8k6ZEdyGFlAXk+uJJ8gXyUPkj9QlCgmFE9KHEVC2U45SrlA eUB5Q6VSDahu1FiqmLqdWk+9RH1KfS9HkzOX85fjya2Tq5FrleuXeyVPlNeXd5dfLp8nXyF/Sv6m /LgCUcFAwVOBo7BWoUbhtMI9hUlFmqKVYohimmKJYoPiNcVRJbySgZK3Ek+pQOmw0iWlIRpC06V5 0ri0TbQ62mXaMB1HN6T705PpxfQf6L30CWUlZVvlKOUc5Rrls8pSBsIwYPgzUhmljJOMu4yP8zTm uc/jz9s2r2le/7wplfkqbip8lSKVZpUBlY+qTFVv1RTVnaptqk/UMGomamFq2Wr71S6rjc+nz3ee z51fNP/k/IfqsLqJerj6avXD6j3qkxqaGr4aGRpVGpc0xjUZmm6ayZrlmuc0x7RoWgu1BFrlWue1 XjCVme7MVGYls4s5oa2u7act0T6k3as9rWOos1hno06zzhNdki5bN0G3XLdTd0JPSy9YL1+vUe+h PlGfrZ+kv0e/W3/KwNAg2mCLQZvBqKGKob9hnmGj4WMjqpGr0SqjWqM7xjhjtnGK8T7jWyawiZ1J kkmNyU1T2NTeVGC6z7TPDGvmaCY0qzW7x6Kw3FlZrEbWoDnDPMh8o3mb+SsLPYtYi50W3RZfLO0s Uy3rLB9ZKVkFWG206rD6w9rEmmtdY33HhmrjY7POpt3mta2pLd92v+19O5pdsN0Wu067z/YO9iL7 JvsxBz2HeIe9DvfYdHYou4R91RHr6OG4zvGM4wcneyex00mn351ZzinODc6jCwwX8BfULRhy0XHh uBxykS5kLoxfeHCh1FXbleNa6/rMTdeN53bEbcTd2D3Z/bj7Kw9LD5FHi8eUp5PnGs8LXoiXr1eR V6+3kvdi72rvpz46Pok+jT4Tvna+q30v+GH9Av12+t3z1/Dn+tf7TwQ4BKwJ6AqkBEYEVgc+CzIJ EgV1BMPBAcG7gh8v0l8kXNQWAkL8Q3aFPAk1DF0V+nMYLiw0rCbsebhVeH54dwQtYkVEQ8S7SI/I 0shHi40WSxZ3RslHxUXVR01Fe0WXRUuXWCxZs+RGjFqMIKY9Fh8bFXskdnKp99LdS4fj7OIK4+4u M1yWs+zacrXlqcvPrpBfwVlxKh4bHx3fEP+JE8Kp5Uyu9F+5d+UE15O7h/uS58Yr543xXfhl/JEE l4SyhNFEl8RdiWNJrkkVSeMCT0G14HWyX/KB5KmUkJSjKTOp0anNaYS0+LTTQiVhirArXTM9J70v wzSjMEO6ymnV7lUTokDRkUwoc1lmu5iO/kz1SIwkmyWDWQuzarLeZ0dln8pRzBHm9OSa5G7LHcnz yft+NWY1d3Vnvnb+hvzBNe5rDq2F1q5c27lOd13BuuH1vuuPbSBtSNnwy0bLjWUb326K3tRRoFGw vmBos+/mxkK5QlHhvS3OWw5sxWwVbO3dZrOtatuXIl7R9WLL4oriTyXckuvfWX1X+d3M9oTtvaX2 pft34HYId9zd6brzWJliWV7Z0K7gXa3lzPKi8re7V+y+VmFbcWAPaY9kj7QyqLK9Sq9qR9Wn6qTq gRqPmua96nu37Z3ax9vXv99tf9MBjQPFBz4eFBy8f8j3UGutQW3FYdzhrMPP66Lqur9nf19/RO1I 8ZHPR4VHpcfCj3XVO9TXN6g3lDbCjZLGseNxx2/94PVDexOr6VAzo7n4BDghOfHix/gf754MPNl5 in2q6Sf9n/a20FqKWqHW3NaJtqQ2aXtMe9/pgNOdHc4dLT+b/3z0jPaZmrPKZ0vPkc4VnJs5n3d+ 8kLGhfGLiReHOld0Prq05NKdrrCu3suBl69e8blyqdu9+/xVl6tnrjldO32dfb3thv2N1h67npZf 7H5p6bXvbb3pcLP9luOtjr4Ffef6Xfsv3va6feWO/50bA4sG+u4uvnv/Xtw96X3e/dEHqQ9eP8x6 OP1o/WPs46InCk8qnqo/rf3V+Ndmqb307KDXYM+ziGePhrhDL/+V+a9PwwXPqc8rRrRG6ketR8+M +YzderH0xfDLjJfT44W/Kf6295XRq59+d/u9Z2LJxPBr0euZP0reqL45+tb2bedk6OTTd2nvpqeK 3qu+P/aB/aH7Y/THkensT/hPlZ+NP3d8CfzyeCZtZubf94Tz+wplbmRzdHJlYW0KZW5kb2JqCjE0 MCAwIG9iagoyNjEyCmVuZG9iagoxMzQgMCBvYmoKWyAvSUNDQmFzZWQgMTM5IDAgUiBdCmVuZG9i agoxNDEgMCBvYmoKPDwgL0xlbmd0aCAxNDIgMCBSIC9OIDMgL0FsdGVybmF0ZSAvRGV2aWNlUkdC IC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4AZ2Wd1RT2RaHz703vdASIiAl9Bp6CSDS O0gVBFGJSYBQAoaEJnZEBUYUESlWZFTAAUeHImNFFAuDgmLXCfIQUMbBUURF5d2MawnvrTXz3pr9 x1nf2ee319ln733XugBQ/IIEwnRYAYA0oVgU7uvBXBITy8T3AhgQAQ5YAcDhZmYER/hEAtT8vT2Z mahIxrP27i6AZLvbLL9QJnPW/3+RIjdDJAYACkXVNjx+JhflApRTs8UZMv8EyvSVKTKGMTIWoQmi rCLjxK9s9qfmK7vJmJcm5KEaWc4ZvDSejLtQ3pol4aOMBKFcmCXgZ6N8B2W9VEmaAOX3KNPT+JxM ADAUmV/M5yahbIkyRRQZ7onyAgAIlMQ5vHIOi/k5aJ4AeKZn5IoEiUliphHXmGnl6Mhm+vGzU/li MSuUw03hiHhMz/S0DI4wF4Cvb5ZFASVZbZloke2tHO3tWdbmaPm/2d8eflP9Pch6+1XxJuzPnkGM nlnfbOysL70WAPYkWpsds76VVQC0bQZA5eGsT+8gAPIFALTenPMehmxeksTiDCcLi+zsbHMBn2su K+g3+5+Cb8q/hjn3mcvu+1Y7phc/gSNJFTNlReWmp6ZLRMzMDA6Xz2T99xD/48A5ac3Jwyycn8AX 8YXoVVHolAmEiWi7hTyBWJAuZAqEf9Xhfxg2JwcZfp1rFGh1XwB9hTlQuEkHyG89AEMjAyRuP3oC fetbEDEKyL68aK2Rr3OPMnr+5/ofC1yKbuFMQSJT5vYMj2RyJaIsGaPfhGzBAhKQB3SgCjSBLjAC LGANHIAzcAPeIACEgEgQA5YDLkgCaUAEskE+2AAKQTHYAXaDanAA1IF60AROgjZwBlwEV8ANcAsM gEdACobBSzAB3oFpCILwEBWiQaqQFqQPmULWEBtaCHlDQVA4FAPFQ4mQEJJA+dAmqBgqg6qhQ1A9 9CN0GroIXYP6oAfQIDQG/QF9hBGYAtNhDdgAtoDZsDscCEfCy+BEeBWcBxfA2+FKuBY+DrfCF+Eb 8AAshV/CkwhAyAgD0UZYCBvxREKQWCQBESFrkSKkAqlFmpAOpBu5jUiRceQDBoehYZgYFsYZ44dZ jOFiVmHWYkow1ZhjmFZMF+Y2ZhAzgfmCpWLVsaZYJ6w/dgk2EZuNLcRWYI9gW7CXsQPYYew7HA7H wBniHHB+uBhcMm41rgS3D9eMu4Drww3hJvF4vCreFO+CD8Fz8GJ8Ib4Kfxx/Ht+PH8a/J5AJWgRr gg8hliAkbCRUEBoI5wj9hBHCNFGBqE90IoYQecRcYimxjthBvEkcJk6TFEmGJBdSJCmZtIFUSWoi XSY9Jr0hk8k6ZEdyGFlAXk+uJJ8gXyUPkj9QlCgmFE9KHEVC2U45SrlAeUB5Q6VSDahu1FiqmLqd Wk+9RH1KfS9HkzOX85fjya2Tq5FrleuXeyVPlNeXd5dfLp8nXyF/Sv6m/LgCUcFAwVOBo7BWoUbh tMI9hUlFmqKVYohimmKJYoPiNcVRJbySgZK3Ek+pQOmw0iWlIRpC06V50ri0TbQ62mXaMB1HN6T7 05PpxfQf6L30CWUlZVvlKOUc5Rrls8pSBsIwYPgzUhmljJOMu4yP8zTmuc/jz9s2r2le/7wplfkq bip8lSKVZpUBlY+qTFVv1RTVnaptqk/UMGomamFq2Wr71S6rjc+nz3eez51fNP/k/IfqsLqJerj6 avXD6j3qkxqaGr4aGRpVGpc0xjUZmm6ayZrlmuc0x7RoWgu1BFrlWue1XjCVme7MVGYls4s5oa2u 7act0T6k3as9rWOos1hno06zzhNdki5bN0G3XLdTd0JPSy9YL1+vUe+hPlGfrZ+kv0e/W3/KwNAg 2mCLQZvBqKGKob9hnmGj4WMjqpGr0SqjWqM7xjhjtnGK8T7jWyawiZ1JkkmNyU1T2NTeVGC6z7TP DGvmaCY0qzW7x6Kw3FlZrEbWoDnDPMh8o3mb+SsLPYtYi50W3RZfLO0sUy3rLB9ZKVkFWG206rD6 w9rEmmtdY33HhmrjY7POpt3mta2pLd92v+19O5pdsN0Wu067z/YO9iL7JvsxBz2HeIe9DvfYdHYo u4R91RHr6OG4zvGM4wcneyex00mn351ZzinODc6jCwwX8BfULRhy0XHhuBxykS5kLoxfeHCh1FXb leNa6/rMTdeN53bEbcTd2D3Z/bj7Kw9LD5FHi8eUp5PnGs8LXoiXr1eRV6+3kvdi72rvpz46Pok+ jT4Tvna+q30v+GH9Av12+t3z1/Dn+tf7TwQ4BKwJ6AqkBEYEVgc+CzIJEgV1BMPBAcG7gh8v0l8k XNQWAkL8Q3aFPAk1DF0V+nMYLiw0rCbsebhVeH54dwQtYkVEQ8S7SI/I0shHi40WSxZ3RslHxUXV R01Fe0WXRUuXWCxZs+RGjFqMIKY9Fh8bFXskdnKp99LdS4fj7OIK4+4uM1yWs+zacrXlqcvPrpBf wVlxKh4bHx3fEP+JE8Kp5Uyu9F+5d+UE15O7h/uS58Yr543xXfhl/JEEl4SyhNFEl8RdiWNJrkkV SeMCT0G14HWyX/KB5KmUkJSjKTOp0anNaYS0+LTTQiVhirArXTM9J70vwzSjMEO6ymnV7lUTokDR kUwoc1lmu5iO/kz1SIwkmyWDWQuzarLeZ0dln8pRzBHm9OSa5G7LHcnzyft+NWY1d3Vnvnb+hvzB Ne5rDq2F1q5c27lOd13BuuH1vuuPbSBtSNnwy0bLjWUb326K3tRRoFGwvmBos+/mxkK5QlHhvS3O Ww5sxWwVbO3dZrOtatuXIl7R9WLL4oriTyXckuvfWX1X+d3M9oTtvaX2pft34HYId9zd6brzWJli WV7Z0K7gXa3lzPKi8re7V+y+VmFbcWAPaY9kj7QyqLK9Sq9qR9Wn6qTqgRqPmua96nu37Z3ax9vX v99tf9MBjQPFBz4eFBy8f8j3UGutQW3FYdzhrMPP66Lqur9nf19/RO1I8ZHPR4VHpcfCj3XVO9TX N6g3lDbCjZLGseNxx2/94PVDexOr6VAzo7n4BDghOfHix/gf754MPNl5in2q6Sf9n/a20FqKWqHW 3NaJtqQ2aXtMe9/pgNOdHc4dLT+b/3z0jPaZmrPKZ0vPkc4VnJs5n3d+8kLGhfGLiReHOld0Prq0 5NKdrrCu3suBl69e8blyqdu9+/xVl6tnrjldO32dfb3thv2N1h67npZf7H5p6bXvbb3pcLP9luOt jr4Ffef6Xfsv3va6feWO/50bA4sG+u4uvnv/Xtw96X3e/dEHqQ9eP8x6OP1o/WPs46InCk8qnqo/ rf3V+Ndmqb307KDXYM+ziGePhrhDL/+V+a9PwwXPqc8rRrRG6ketR8+M+YzderH0xfDLjJfT44W/ Kf6295XRq59+d/u9Z2LJxPBr0euZP0reqL45+tb2bedk6OTTd2nvpqeK3qu+P/aB/aH7Y/THkens T/hPlZ+NP3d8CfzyeCZtZubf94Tz+wplbmRzdHJlYW0KZW5kb2JqCjE0MiAwIG9iagoyNjEyCmVu ZG9iagoxMzAgMCBvYmoKWyAvSUNDQmFzZWQgMTQxIDAgUiBdCmVuZG9iagoxNDQgMCBvYmoKPDwg L0xlbmd0aCAxNDUgMCBSIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4AbVdW2/k2HF+ 719BzNMI8Lb7wr4lT/baAWzAcZwRnAfbWGg1Gq/skTQradbZGP7v+ery1anDJtls7SgOVlNknTp1 P1XnkOzvmz803zfLlfz/Zrds9st983jT/E9z3/z866dVc/3ULPR/T9fAW8xXrcHyj+V6Nd83u912 vgPi3eyXl0270dv+5/Ku+fnl5aZZNpcfmrfNRXP5t+bXlzpjTWl9WMz3a1AxYrPruwbEFvPFcr1t Lq/HyP6pefu7h4umbd5+e9Gsm7e3F82+eftR/3tzMcMVzIsrl+nuteL/Xf97o9efL5otMd9dNJvm 7Se9bncFf+aUP1w0O85idK6UjlGw2Y2f+4vmL83lb/sl3qzaebtYLGuJX6i+zWo3Xx4Ou5rYxgzn fybbYnNYzdeTiG1PG3YHuy4Wi02z27Zu1T4Zl6cp7fdKqW3W+zkoLlbnkRMvF2Y2iwXUdNjOt6L8 O/Xhtt21s7j2Ma6pOg+C9zGNhbv7te80TApV3tku55vDbg2hDvMdWF3OGFH/dfN4ffPp+fPVx+bx Fhw55kqDRrB75kEs/Pw3d+vmVw8InD/Mvm82y+X8sGrWm/kaQkjkzlcw2EH+gRDiXKeiV8nAa7oK laiDwQaijpZaHoajWXx7udmAxRebqjchHTarzewfcJW/SW5aNl+/s1zUvPsauvwKjOP/dvtdu1hu 9U7n0mZ1mIsn7pCsmsVsAfNvV/stXAKpZrfbLNvtBqZ+Bz2fzH3FsRfwJfq2sADy0N3WOPA/FnzI mJIIkbF+geyy1ByD/yLH4L/37/XPraas/9V/I3Ehff1yLI1AzfN2s13Db4QNEQyJs5p8ZpMvabmR NLzcah451NRUqCOZnGyR6euHh0dlm4II8/dIjhAOyXFFQe02uIjkCJ+ul4PVdj3fLtspbDS1amdv L5GCMTFSM+ZFig8FGw+m019jfQCSaf7uovkqgHtDe7qYBXtH6956D/9eHbY1f0txI/yPf40x5MjZ icVvCdOtNs12j9V07xaUIEQMdIOQtoRU5kiX3yUJs06PmF6u9vPVFsnP5klL7Mlgh8N++gzbYo39 9PBkE2IuLJgPWA23M1lhAdgK+N2NQV+bVtUpMPA9zAKc+yvDunlvWJfAgoXs5vXFrNjM8Azr18CC /8BoIHEj9sICfSOmAmwMGaLRkSs1Uw92+/2N8Mvp7p3TK7tpHvPg1P3Pw31zMYtJbjJTKrvWDMOe QtMiWyAlWYkkpp2icteUTWnaN/G+/SzXZm9vjiUHtyKfBKLo/Mb+2kUj5JowPVyZzMg5GGTatSkM l7ay8XbHle6UHz75P66+tdsflVQm8qP6i5G4unezfz72ItVkaNokBP6Vi2IEaht9erjvcwKTzXWA cWKeWW/ZSfNsdvOWuVOz3XHkeZ5BEpVwRkQ8Inl8BSUjwckfZDX5A8nhqKj8BPir/fkZNQDn/sEu +SBoC9g2xgn4HchvYXFEDQLhjqP5RDpWPR63sLQkvh6haclufYwZqd8BYbnQAlnCCsvNV3AuHzZP vP9C7oRwsKtMYzR8zkcUvnKRoEwKP7WLJpIz/lgN98kqRCPsBGFSSIZQxH/t3yaPj4DrQk+uQSdm 4yux7ZLx8d3FTDh1AvmODYGnidqwgPjaINg2tOIMTcdX6A3+xgVO0HysYRd2TqeJtp0ftiUzLw7r oxWg+KGvANeiUahFXEF15K2QAOh/yrXPacU9Xh3aPeoIWR2Uh7IK9fFwtAo9iRoxn1ggeIAe4U4V W9diTiBIckUT9cnYg/UknVe3HPLR0CTUCr3jv/8AHv4YdbuBNfArS/i4kS4FURv5ZLdqfTnLfhHJ BkZ/n9XmnExl8snm+vNbpXRllPyi0XAduGiSI0JlzoWjdyRJphSnwyCimy6ubebfvsNNCPF7/IFa /xN/THfJ/WZ1ucU0iHYeXX303n2mP3I/KHUG+qY4uJjwdW2cO2S3XI3GozHsYrozqDDaZBevqQxW +ZOTc+v9+UK1PU8eflxTrlBTrtGUbLOYU5rRmfSO/RpbruegaBqbSEp70MN+gX0U6UY7/8Iui1hj s222i1YKenSom3a+BtsGoztVeLbZb+ctuhVHJ/hd88F2dIzKZn+YY6p2N99tvEU8aNOYusSZ7PH0 8FKuKVd7aS636DeFpeV8u1dA+FFggy2cdj8ThhTTYDAoHFll3LeFRORU+7ZLxbc/zDXsXuDPQ5tI y+VmfmiXu0Z2MHIlvUC3fHk9q+jSkZ0uFvQrL/ngWilUuoZH132Qfsvm4B5E5rhDWdIWOR7daptm Bhg/O8fqsJuHr3xsDFRfEEsY8pFr8LK6xrJdi4dg7+DIMXTzj46BnNHvrhvd/jPHWB1kBXPHcCAc YWmY4SjjjkHk2pTL5UGXxKzwjovAlL+CDZECsfTiv1iN8V9kIeQV5BBsBaI8QbmA5IJqxq4gJ2uh NdL0rbDrsoN+a+8a8SmtxyZZvtJzXyjOEDli2n3LNHDXtEtsrkgMapr4SJjGdnSCTAtx2Wy/0rRG 28c2FbeOeixevAA8rdHymuFbxB5KaAGEFQFmYXhBC2DU6oZ5ZPKZ9MHZ5J0YE5Nj/YCZzaj2bwQe jG1XUG7CwCg48N/RAF+3G/Rnh80UM6Ma7bT2owE+ycxi1pLt7xrdJy5WNpBWdWSCNHJcNiNjJYCj vNjILZyktWQv7CAKPMBnDoRpHTPgUVMr8g7bj1Um1eZ4fxTix/Z+h7CGLWP7A/+W/I1SBDUXABgf FSbqA9QjMDiuoG+wDIDrKL5wHbGPf8NB4jryAK7jrq8APUv/BurcLrgAcO0fcU5bAKwBPe0fsvRh E3F9WCFdHhpdedV+28UGm06y+IKB9WrmsBUA6jESenJTs4IAov+4UI2GQynM0aDWypKZCDhMGjoD aWAB0UlIg7CM0QpAOFSnVZrqB6dyiYnFQVb2LPaJMU5CMUPmcLOO3jhAJbmbpTrKJMX9oCE3a73x QpI5dOBra5YxCGS9cQanIckX51mhe4NrETPNaXrjJKr8O10ndBJnJCZVvRGZ7qGFWa23misjaCWG qk1ulxXeBSK5mCxJvC2uyrFd1pLOiOIEUM7ZqqfwR9RwsQpW3CQKZYXq+5evpMKUjpGFtCYZsAhF dihgj74MP9OLhVlZjIVaaFTExb5xIQSW0UVlMdolDPwkceA4DT1/oZ/BVwMOGjWHk/zMJilidokG bGL6DMN6w+qBXXRyibwmsFQQZukAhUKgklxcEOTZ4FiXN7CTzvp8I65JvSX5CJW2N1DMR4SRKC1B cO0NdOvKenISiXqaYSKHxCKVpz8hB6VEHg64stFwLa4pLXg273WQzhwcay6IPrKHY119TEyr8iKF KseWS4JDU4jSUwkqjvuqWiFfcRhFrXEMz3XPJsvEHtQxSWoClMUy4hfEymjlT0DgBf+T+PUoCA2b 04aGCRqDHe77NVxSmvDrQ1hHaxQFhx77AQvB8G2M1pBiEV5YUWkdrxorve+SJYb6ujqf+TpKjEB2 u282Wpuacwo+YWFESxuPme1CusDYdFitEEnd5iJNbvsFe91LkcltP8FgCTSDd7o7JZML/mxDONQq knzf7dd9f2Enh+V5a2u4jeTjKk/f/CCHG+zgjijjcHu3QmG8ybSrLoWNKSlO3QmQRqGoB2EG7bkt 6NFhGndqWkIs1WsZv26W8Z7/hF28A6dd2M7TLoRpB2vvp9rFiWfdSd2LfqDb63W1+Mebx6fbB9To g5Y5iGWwP/Uiy3TtvEKdsFvtOtSC1/5dJVr8/vPdtzePzcOHZPpkWd05cUe+m3UVSthsJoFg+ITH HZ/IUtfmI4VjBbO5ItPPt9d/v3luPjw83skJ4JCaV2soZr3Chsg2zVEFQJdy0sJoJyRbYaEm8XBs fEQApKyqmY0wQ4D4CiPtMznxuoeAbX1oCHQfmYmpdTvC/R+G1i2ODf2fMP1fkQmM2sYwJSOdZxjz pmGLrNdo/hYbtNQaVmObk7T1iywiGkefEhbpWWpgL9qD2A7PaA9ed3tY4zpuD24w0CTcgKBJCNMK xCc8apWyIfEq2uvpHKTmQzUYeuyrAVXPujLasotgDg8UceoxqUxlHYnEr3Ng37qqMwX26Ah/D2KK nIhxMIklhoJBJ9YnJ4dV5QXllsTmZSvJKn5HTuI4DYnmXL0FnFhV1nrlJDGXszs44MTQBDljWOIx FZhyW0Anati1lERxAt2CL2AXkugGamSFLat70eVu9j40SCVuCnNKqseSMSoY7FaoDjtVw69lZL62 Tsd6NyTyqGiiUg1OnabAXY8NYoqciPngIBYMJQaHPTaGuZz9GY6WNOxayrCDxJRUZJbmSkxxFbe2 qaRLw59F+oycVe/SCJrGtQoGsoDDRVM/iayLlMHcodNgmO8NRv3v8UAe3XfIooNcUBmuTPBDHGoU 099N8IpDnVQFVY6SIo45rDiKNsmVyj6xKC1z7ML2eLNgaQ5xHfooNStUVogoP8RWjXY1SD+kBt1h FAQpB6kxYhMe0GBEm/Nnw4qfJTLKIfEzh+abxQrOCWUsjCkFYmcKR55sN4tBFRYXcy9aL9z/xO0V EPlyf4gTeBxt5/4QBwEo/e1QesaHb9PM1iLKw652JG4tocEys8F4dkVLQh5BKwzOQr9jLSLYWaXH L6e0Ik/fPN/iiGGoQl5Gi5hpVxVyt7mZWo/1tog0TI/j0hJio2Oz8KKapTSHapThvt07DBqF7QqN QjiMovizDeFxozjxrLjoubBL0vOEAEvaS2tfbt/j2cDbD7djPfwKGtut8bT0Ruc5s2Au7klm1f2k RdfnuEJSasLcXtzVGjnCkzRxbrPw57dXj9/ePj9ePf4oj8cM+egKFfdujQe/NjFBpd0v2sLRQY8T l63KmizEe6XfY+bQM7i4aC4azVvOG/HQfhhGGy36J0+l6Z/s3+iPikxg1CSGKenivP7t6fnx9h4P fA3ZovRvL3HH6R21qF9WYpqjZxGg/olKY+gLKHHRjGGViPhRSuLHxmAzRntYs4Y1W5O6rJF6tBxR Q/xJJinN26uorqd4YAFGJbIAM9gKLlWyi2f4RVzxsHpMqQ2DBhIz1uUNnk9GRCSaAvu6Fs4exBQ5 EeNgEksMBYN5kewUmhymIdpZ9YUn3A8yDkuTSrOqnMRxGt1SKuDEqtLslZPEXM7u4IApJ/EFHpYz hiUesTDQFHJbQCdq2LWURHEC3WosYBeS6Ab2Nm9m99K80Q+CVOKmMHeqeaPHDmVhymiz1DLWY0q/ RTVFAelCBr7AXY+tbvoJoHSCFDOIuZiBP27JGOaG6E9vlNKwaymrmNJySR9JKjGFlTueIZAAXetz VBagsllPOJaRTkx582Y8gKw3b+SJ8HoBlQlgcyC6NJq6bZtxE0cDZM4dzHnh8w8neUO4aM5Rpad4 dyNYvIuIEexlra53bWFKskbTkbeARXEQsua1FOy13gRLGjbqjSHkrCnonBE1Fq6waUztNnX3IGcE nbHAdgsPWLSOyNKg0qJGxnkjcvBmPljkch44OFiCxomqrlF7A/xEfBUvOeIJrWI4g0uixjPL3AgU dAE9MHOLhs1uLDlYTP254SWqHTyWNLhVzpZL3kSWE3m2ZAqrp1iLZnTFq62lIxx6HWvRULfU70ec Psx4+ubD6CGevDK7xo55Jv3lC2C2XbSNOy5N4yAtgwikZSTkZ94887Jaho/tnrSL9xq0C3sR2oUw 7cDehPC4XZx4Vt5Al9btI3518+nq8fmzvEU1VA6vlngrd4U8+yLjHJ3jLaXpkud3X8Dtx4frq+fR Q8cVDsF26x2eG83kv7wniatId0RPYn6iKxF2XyK6gVoZSJTHZfMlfwz4lC9p32OOcxfHYXQktlN0 HEUmMOpFhnl+aF89Pl7hud4h91lj4Vss2lePbdG4FKu0iGdrGsRBtweRHWRsx2Wzh634eOB8POey Q2Jss4OiSQjTCsQnPGqV0lFlh54Y3afjpd3ihbO9HKtn8l8sXkYaNqy6peKyKsbLL+gN1UWpuBRm 0eo4NtprJBvtAA3O4o2waFmLDz4Alp1FFgaptogccGJF8R12k+EBsPoZ4cJQWfiDu0ygO4F4oFwT HJVNUoPUWDqaQGavsN9bjuIhJC9AuoMDpmw+LdUe7lhk44sPzlApcaX4FHpS7zi5Lnkh5ygiGJ+z MsFYglEw0lLWO3JV99iMUcx4pLPiI7HVI5WUOGQAdVypFlXnzOCUi5iEhSBx1GJVSUiAghGTsIw+ KoVpsWowHD9gV3EQc3hANg4L7vAuiIomN2Tt8uHEI1zxJmGkVZB2P+bVEilYxu1Ay10emRRnAha0 XjUpPMAbuymbk4kA1nSeGL2eoInOfJ21x7BRjpBT1E9mxmBxz+DPvZ3wEH8ulvKjdbTFZvBXyPAh TNWKFfWVBt1vTWHFyYxdnplBoa5Aojs4wJ9gYafY9RUBSfYKEeHOkHUKASvu6Etkz32D3BF0bgJ7 nDuLlcIdh5E9wm5OhpaDwl/tk3ykMtyjsCUCETmNj9gK/5UX66Idg3soHO1Yi08RJfclKKykdqw9 dF7jlNJg+GSGvdVC0rqEjvdeCsvUCjtRCR3pxWYBh+nHerHFyj5p4R/qmnhchhdshuo1+ZqY9WKZ dFURfNHTMjNEeDDtYh5MO0iMI6sQDLPwcvUK5bhR2Cu5UaLxcqM4HEbwxykDHjeKE8+aGyjVujr8 xePj7Q9XeDV90C7xOGWmPtUuR21YPE6ZqQWv449Tni4rVxs5zpJ1QMmfeaI3/QhFvETaMDpRJBaP bofpN47uYLcNcxsvUxs2uM9izZL7EI+00Cgj0CWl605Y+IwgBzDqQEo2qywsUh+2dtv4yT1Ypl35 Tpfi1BPw6hlRUbfUpTQH07Rbw0Aaw5EJdnowGiP1YIPGiIbK7cEjLdrDG7AwgeMHPGqS0oBl3U20 y+lIKQ1YJv/FTDPSgOlqycorioMovBaScK2ek3Mk6FJh0VXgSLWTSkLf0fTSiZk8sM0L6hOW+mai lZZnLawSO+phAntP2CcjeSgc6qjCYRARGRW7IyOuxRBbnaT78RIjKqrEpmL3ykhSejPR8sFBjDIS f1zGGGYyClgzKJCTNNxawjyA7VQIGCVZ4lHoOajtKs8/SMjF6w4NOPGSWBNSPRaMUSZdJHazYIBO 07Br+QLHKHSKxABdosA2uPbS+mY5bqM6gliwo2depv5hL41hhUNZy0xEuSmQkzTcWsJukSsJDc9O RRQ5TAfX8gkPfFlQI3wk9SocCbC0/FJzSnCW4Eupwnny4NUMDikdPRJ6T5MWHJrPBIME9RuOxi/C 6SR/GrfUkYndjWu8P0WGLMyrIjI0SAZcgW7w4M/gojCij+tPsDRpqL5KiSsg9FWIiE0cmcxqnmWE 1eyY/+FUyMz9EX2WuEpoK7DHuYsIc+5cxvC4REb4c/TMX/ivU6hdNrEl4x05jw/ti+d4eY+D5zCk 4MqDhDwzbXcHpDi6L07FDBRV5SYNH3DE95PqM7NTzzS2Bz7Ay6ZMYXFFa9KMqMytB2atwjm0R5q0 Fk97ww/SF52OD8y6/QBee/uED6cMdgN8prGiXZUNXYpTK7q+ZxrdEnRhGoYuTLsgHsWMXbv4ZVNh PjEbbp2tkQqrRFfmViEcVlH8mVkFHhIJrdcqTvwFVvnj1cfb97fPPzb44OLtw/vm6RmnZ8NWWoE/ fAZ305iVXrsNCiul0NUHcQm7YSTV6Kmyxs9RG+R2mtoGhZG8DXK4tEE0krZBBEYtZJiv+GbWK9tD 9O3rl+azkqDVHA66NYjMqPFzZl52a5zRB4VBvA8Kg7APog3YBxEetUn0QZXuJvZBz7d3N4iVO3zy aSij4ePfOIna714pVnpKzKpeiepGgog1ktpwLc9x2KKDRkiUqbAoKxdAuexyClaeRLJM2LqqKQUu 8fVNWwJRe5XBJJbYCfbyOtQp4ThMWKoWVpURd4OIyKjYHRmJYxQ6ZUoC1bWFQvH8j3UZXd+MRihk DGKUkcQEHpYxhhUOy1ah3BTISRpuLSFRbHinzkmgCliQFexphFycaKlCvCCVeEmsjTdCQkUsyFTu Xhqg07Q5avkCxyh0CrEEqkQJW+DagvXNaIRCxCAW7GgjZOoftmAMKxxaPcvCUSAnabi1hEeFJDIa PglQoshgOrhWKFgALailEULuVTgyYCeKLPs6DylVOE8MXknhkFJAiV1m9L5GiBy6P5FBB5UfoeQR cIo/oGmyUH5SmJM/JaNiaipz9D7+Kn6Ku5E/c4CisMxvrrtq/QkWCuDQn49Sk0LKQkS4I3Ifd/Q/ ak+cAb7h3LHjoLaITXjAunVcUubiYYmM8Ef0xF/4r+vf2XKXTWzJeCKn8Uf+i3vQVzGkwaUR2uKh SZASR5OC20GRLzdCW9uGrh4ePNkI2c/IyNTW+BgsrmiwEZW5rRFSOId2b8lN5L3we3YjNPJ0Wrzc JRupQfv1GiFapvgsDBUuTLsgwPrswstql7MaIVqFjQ+tQjis4o0Q4XD5Xqt4I5Q1N1DQdZvJbiN0 I7+bMVTarfDd/d16jzZIZ3r1Nog2SoGrRiLsVhITShtk4FEbZCqcfBrU0kRsg2gingbRJNrcEBi1 j2GKW5/3gtPkD1S8sj1E31IM0h6eFj2ZaSIM9WthI8jMZZ02yK1xThtEg7ANokHYBtEGbIMIj9qk tEHZlweipnuodlYblOlX+axLderGjn7ZePDDllatlNoGVpLEFqUNfm6JsLRBUKbCoqzAkSG2aKXy x5oKekGiqGtcp8BMpGIBdFoawkEssaMuJnBeheoCJIYVDt0xVSYtj8AhiWp91JGROEahU6QkMNgs nt+VsZBSGbuDA07sTJAxhhUOURq4GeWmQE7ScGsJiWLDO1VOAlXAgqxgXxvEqO8ODTjxklg70Qap PKzRQjxmdspnc9TyBY4J2CnDEqgSJWyB+9sgitgdHLCLGMQEHvbSGFY4RH50C8pNgZyk4dYSHpWR ltFKRDLDMRxYrmgZOYvUi5Ae2S4xDlKicI4YuiCqxxsCS+gqjEyimSK2OzwGyKH7ExkkiDIX6hJ2 JQC4NAzwByxNFcqPCR1hI5lMqaiUqM0MHuSPDGilVtyN/JlBQ2PEtqo81o86BwkSXMktGFvpqk4I WWgod8Tu1R79idpz31AQpAgaO4E8yl0dlZS4+FeiovwRP/NnPlkkdD4oYWFLKRA7Uzj2YHGm1Agp cnIJ+fiZPHIjzgbElrDYILdCa9e9v0fF71vN8g9spsmttdkc5GNN4knW+hgsnmMwfqzFj1PtwT3C 4QC9Rbe3QqCBfcQzW6FH/HDRUJUdD+61mXRVOXSr+KmVQ++RkNkt/JhmdD+mISTqeg3D62qY8rEL pI70mxidifV7DS3Nwt6HZiFMM/DRPcLjZvFeKOtuoKrravG/bz7iraQfbho2RcM2ii9dmI3O7ISO HuLjy04VtQGuu1XjrfxIGX2puL73j6YzMa7+kkRLHRK2eJJQMJsQnqTjVn+iZNT1u9w+3Vw/3L8f OxDl45Ftpl55f5dmkv/sJw59VWOeLKsc8yT9X8JBmkyFkbiYmOK6+X98SQOxMuT/2g668/O9Lw+G cthGQykygVGrGFnJRq/VZWpMnenr0y0iGvfqQJeKnmWG+sdCQWy3T3T9cd3sYbULl4nqd5gjVtg3 0iTsK5mPCNMKxCc8apXSZ76K9kbqO+b1qp7zJVb0TPGsvpsFLOLUY1Lhqct4VXOBlC3bbjs8qNOt EWGEuJn6SjBog73gywwJvsJOrE9OHxZyAvZp4D/GY5BxWDpeTqNyVmPKSVZeBKXWy6z6HD1yFmLA qYgBLhviZIDl8Ak56wpyaJ0mUcOupZRrJoQGVrfkS3DwWWSuO6ZCSkXsDiWcuQEpB5VUjyU5ipZk 7qUVCJOq4dcyEoc0ulVpglXIhH9syeomLNkdTLgwZMdjCg97LIdlHpHSKKbcBkiihl1LGTkr6mRN cyVAuX6Lb0lTxOXL8GcBR86qexvLBeQBZD10yRNhkPUfJ7PeUGG4uMZUtzc0nsJxyaK7knIInTEa yPEQhy6YcWSCw6ChNSOjguLksGSqXg7JgiuRZieHBhelEd17lQEOBUtyBjn0UQpCzkJE+SN2L381 Q/G8oPIHUu4w1Fhgj/PHaCN/lNJgW1nddZRD4mcO6cmkkV23YkwpEDtTOPZkcSlfHcSgipz8Ap5Y Tnqb1kGxQe4PF/WLXekrWuMt4nop1Z24k7WEBov7GIy6TtMG3+0iHD4w1iLKTyWe/SnET1f41XLW 9d2OoZyWZdpVldztbqZWyZ1WTbo+RlMJYbVV+DJNg9DEAnNkGl7OL3fRMCebRBomGhY1lExtDQ0N wSaR8LhhvNvJyhtot7pq/M/4BP2nq6enm/u/4vP5w3ZaYc9kt8bPn7U61Zm1c4kR8usvxpjwM6kt 1SupDPN+8Vrr5ghPUgYegl+e2Trg6ckGX/K4+euD/ADxkLOu8FPpuzV+SLLNU1TO+kVbOkszpaVj 2mF+dHeVzCsdnYHRQMRlc1eoGA8h013Hezr31ejpmER4ckhzaadGYNQ2hinp47yeTt8jk99JePj2 bzfXzyMeusYDSAv4y8s89PzujsYpa1csEWGLaO6Y5DtniObWXqucNA3bNbWG/riR7ti1tA7bOxqE +IRHDVTauxzgA7mk6+WjKb7Fk+F4IObwSobpKcNZ/NFEVbEnpRTMoSuzp2DDx+LgsCgqcNJqnouJ VJcirBLN1j5cpjSigOSEctNLAydmg1nkJoaCQZQOYblOkcthiUcd5qtaVKIkq/gdOXGtjCm9HnNN KuuCVcfXD7TVchZiKmd3cMCJoQlyxjCXU2DEeWZRQCdq2LWU1QhJqLEH1q0MVciCLmBv44jJVcRE SocGnLgpzJ1qHOmxzPAUMWCnarPUMgaOa6lbrCbYObVeTyVxJ4uFOhFTMbuDAw6GnJjAwx4bwxKP yJYUU24L6EQNu5YyOJQA1SKt84oZcipeOZPSwRpHoFWvmBEeiinc19BUHkrjSJ6YF4Amclrq4Nrb 3zYaR1FzkkF3MuVHKHnsnOLPxTJ+StsY/CmZGWvXpAXJUlW0koHOK2bkz1xAKakCiT7+EpdgSdNI /nyUgpCyEBF2iCzK7HJHD6T23DecOz7CSG0F9jh3dXSysioelsgIQ0RP/IUHu3/ULpvYkvFETuOP /dd/SiLZXx9zdniNH2rXTUDQgLsTFEOmdhE/Cyvp6MxXzBadV8wMFlfUXtGJipPr8aPBObhHekX0 CuIHo2cq3Zbk6Zun8fNEYQMJu6Jdld9dij+pV4TGYYkSt/bun7swDSFm6rOLXza7nPVkJa0SvVD9 ilmxivZGs4AjofVaxRqpSnMDxV1Xh+9uHn+4vR574pUnXRX1L28XyRZYXCS1qV1SsErEaLGN1E3L GHqAjBhedsugOEbg6Cf1Blt4bV5oFvZADBaHwwyCPC1SDPN0mKDanv388nLJHzKY+m2NVzaHqF9e ZqY5mKA9TAykMQz5yBi87MYAKRhw3BjsamgPdj20h8NhD8OfGCbRBVW6mxgoT6cCRTbI2z120Crq XyxQOp0QPyso1QwUq30H/kq9raAVLwryrQzTfwtVdt4o83rCyo0gaEWLgxqCqTpSuKo37GZxmFSb 2GAvbTh9EEvs9MnIYS4jwCwjQcpI7ETUltqQsVOVJDDY9Al6ZNTpiozdwQEndrIJIomXTi9965B2 FCqosdyMhJxkdwohSRQpWkv74+NTlaMCFeRj+fK9mpLiBqnEizCalN2xoCxWNir0n/K6FWHWWpBI dw6RrxpiH2cDP1RQKsOcS6foqary0kQKu4jlyAzK0sFBzGUK/HEZbVjIaNkxMyibRk6iO0XFn0SF FBxImTi5iog0GKugR5UkXmwKWpB7gaKwEOuxgZCVQ2XjofQ95MmDkfnc0Kt8XipbiwHniPVTMGgu VPizAA24hz/NZFXclr4n+CtkeGaOxER2Q4MMJioQ5Z0bMPgjTAV2+B3gT7Ck76H+GChu0kJEuHPk I+4QDNhzVecM7ZmnBHcOkjliEx7gro6ZkDk8LpGxSkr3RzJ/5pPFP4yPIFDYkvGGfKx9CXb6LzjG 9yLDkDIX9Gf+i4y4xm9zpjfKCIp8ue/BT3Liq5513zNYx7GPwS8M4hlNmdr6HINlaoONqISOPkaJ r3fbp0RDub0VtjdJu/TW19TC4ZvhMwd53We3Wh6gkER4tGb4MEZNRMde7HRqVyPU+GXG6dR+SkPm LhIJhR7jsUWHQSKQfOdgOAwvn/2q25ru4g2Zw3FyF+7hJ3cBj7uLN2TZqhPd5T+uxr6Ov9yLw+Cn C17ZKKJ1dGNhlJRCNI4Jux0M/cgscdnMMrUbC5uw+2IIE2bIao+lwKl9C8NMMTZgjW43ZgdTw0ES P971yvYQfaMdC3uUjKzmcNCtYchH1ojLZg0tCaa1Y2EQtl80CGEahO0Y4dEgKe3YC8Lkw2iYtPj5 sHb/amHSqbBSLyYG0hcIoF1Z5xS0Mk3B9PKKFjAOi56sBlMT8xWEVOOkws8W0jKBwkqhPpEq3nI0 2MotMWu8ZZfZC7PVfUoiQw6zjKzRSLQziXKoOCGj5AdwTy0l0GQkRS8eahkLKSDbsuG0dHAQS+xM kDGGmR0FrBkUyEkGrsPCXxpQOigK6IWagMGjUVewkq8Q0kKqOzTgxEtiTUh1vDT1YsZPFIqFPStO KV93DiHKxG9+rjviaJxIIZWGKlHCPpawull6sdBOEHMRAz+pu0dGGxY+5qnRA5GQk+hOUVmAtSyS GR5ssFpWIlJhr2UVXs8XuRfbOTxgA2uuwJ/yALKMZOeJMCsey9O54jnqxYyjKJ3IoLsQ+ZHwlQgg 3MNf6sUKf4xC8kcyXsIDVC2U972Uv9SLkT0akPwF7Arr8DvAn2DBmYI/BoqzRyLGDpFTvUjtRS9G 9tw3yB1BZ67L7AB3dcykEHP2gozxR/TEn/lk8Q/ng0FJtmy8IVdLPeWLXgy08XBc6cUUTr0Y6mlb oaSwVkBky30YfucPh4Rn9mHb+nW2tcGlDzOipQ8jHIod68O2L3md7XnKb4KtM+nRTuwndTtmhBKy /saCe6+ZBJF1bBJeVJOcc/TkBpAp9ZnEMAhhGoCdDuFxg3ink7U2UFt3j54uH69+uPmIZ/OGy+v4 MbDKKkZ/dil7i7rK+Z/LuyafpNzef3h4vDv1C1589NFmOPPRx+kPlolhsUMnaRw2LXmBwci8oJYn sgJQf/4x5LWZZfKHQsLs1jzNwuxspmhmbZEIjNpcMdXgL3jcb9jY8dNdr2wKUbWug26KklFV3w7q v4lKQ+QfQqYhbH3WY63B5y6tL2rCFtY3FVuwj6L6iU941Bylj3qBTfBT4RqEw2aJT8a/jll6Kjir kHxRKwUSQoV7hmq+hW3Zs57CV390C190VdVQqXJzCqVkUcMmbIHrJ8LqmxUtG0xiiZ1gL29LlF5K N0o5TFiq1mY+3hREotScrSsZQcHdWCh0Kp0EBpuO3SNjIYWbFS0dHMQoI/EFHpYxhpmMAqLCcDMS cpKGW0tIFBveKZUSGDwadQV7PhGScm/OxfEgUGiX8zpr458IMXmqhC4WZD6nxYzdWr7AMQE7tVwC VaKELXDtpfXNONdykcuefWHHWj2Fhy2YeBAf89ToFiTkajLcWsKjWtQSWokiJjhuLaikEnKoWEst OpYjdHYQ9C6KAhLGr+nqxzwFljZFYdiHWaJcKzSIk2hs+PooTtGEhsIvp6F8bOIVVOfd5k3KEd4j +n2MwAWffMyKpj02qWl3ZiqaIOlKTrCAOd4xyN2g6dV462YmpXHMa3nKACy53nCt0Ag9k2XXazhD 1nPBgT1LiiINkUu6QtqGzS5htRX3x6gEqaFBi8FDHQUsSiKu/FuI9Pgi57ZgMt4kFaXUZpypRohN zoVofc0pqKPFkCRbwqb9g001g4hkKc4nQa8bsA4REolipZ0QX1uMiHrXjj8EaU4TqCPa4dT0II4x bZVMSX0Qn7DwVl9LFnOvM5olMhN+aIjzGt2SIjkPcx1gjcyEHzSIQ1l6UiBq/JpiMaNIQgqZi84Q A3XOhC2w5vx0TaPJeciTDlOgC88W/d31dr7aNOtWTwjs6c52Yy2W/fEWC4F0+aF5q53b7NeXulmg j9pZdMgzd8hRQmql+x5fhNRilR843TXS//Uwh7nB3OxPzdt31xf499vvLpqv8AfPOMqfO/zZNW+v wHvbvMVnJNM9nK2um7e3euced1YCzICGj+7rv2UIfsxOhvh9I+PXbLxdeqO07MoVNh4w/uZiJiNx 5y/N5W+bXr2toPvFYb9s1iFur5BI+GGBfkpL/PzhplnhZwdwhn7Wk7pv5HDlzb81/xxuCpb75Xyz wK90V/Srdrzb7quzjLKKT7Kjgj+L1WaM6voAHnG4vuoljJw4snnw5v3N0/Xj7Sf5/W+o4o0cy/57 8/Xnx8eb++sfm6v7983V3cPn++c3P7uYDb1SuEaW3bQ4hqo4GJl3ZiE1qiU8ZojNuFEtdU8xp2lp AuGuTd88//hJPOWNnZNCF8OvV7bwmOV+26x0njM3Wo7eLDbnxiMdOB05pYtqV2iaLl5A+M2nxwe8 afp8e/M0Hjt4QgOa2EITeZYRr/BEO+oV+AwRSqwzNTGqCzC3WYjvvoD0m+uH9ycyyGqBdRY5qqb/ E7WAV3hfoIRRNWzxgP5iAzWcT7ubQyJ7iHYafBHrN+9+j/cm8cqxbVSOpZJW+Ni0UJfw4eF/QluD ecmXBtSEqCqm+QzXm0b+bzjKl6GuCcQHs8nT8+Pt/V9Hswk+PrhZocCA9qRcMyFO6GMwN7k+FrL4 zH552QxsYHdfjFVdTFLG4swk9ebT1fPzzaOuPH8aeUZrhTOZzRIv7q9ihlEdfDVsudVG3kTBjwcV UhPV8H9/+ef6XyhqhlbBFc5eNyusWYXyKJNjGtW0v8QBBn65eJrjslQdd1smu5eQ/tfIqhfxUBH+ ieLv5eewX0f8F5B+43XQaL2oYbpst80yz/AT9YB9qHM/BTE5ZJcvIB7VkH0RfSwk8EUa7PnjnZ88 zU9Ux3Yx379g9RsOXHliVkuAZSY9yuW/xqghVy3aQzOd2ulM0OpzxmdmghEe2TIsX0B4NA+EKjPh UVWeFh6fXji/5psi/AsIv3m8+f7z7ePNe9S+f7Ly72cNU8NfRlqkJSJhvVw18q0gbMaeXMgntEhL bDpMojTmrWup+7CrOpXWiLmwW7RfLLC0LvFjq9ikdBl79i4w3+xEW79athDuJCXsgnQp/eH/AaK7 UtsKZW5kc3RyZWFtCmVuZG9iagoxNDUgMCBvYmoKMTE0NjkKZW5kb2JqCjE0MyAwIG9iago8PCAv VHlwZSAvUGFnZSAvUGFyZW50IDExNiAwIFIgL1Jlc291cmNlcyAxNDYgMCBSIC9Db250ZW50cyAx NDQgMCBSIC9NZWRpYUJveApbMCAwIDU5NSA4NDJdID4+CmVuZG9iagoxNDYgMCBvYmoKPDwgL1By b2NTZXQgWyAvUERGIC9UZXh0IC9JbWFnZUIgL0ltYWdlQyAvSW1hZ2VJIF0gL0NvbG9yU3BhY2Ug PDwgL0NzMiA4IDAgUgovQ3MxIDcgMCBSID4+IC9Gb250IDw8IC9UVDExIDQzIDAgUiAvVFQ1IDI5 IDAgUiAvVFQxIDkgMCBSIC9UVDYgMzAgMCBSIC9UVDQKMTIgMCBSIC9UVDE1IDU5IDAgUiA+PiAv WE9iamVjdCA8PCAvSW0zIDMxIDAgUiA+PiA+PgplbmRvYmoKMTQ4IDAgb2JqCjw8IC9MZW5ndGgg MTQ5IDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAHVW8ty2zgW3fMrUFpZVQ5D gAAf3dWLnswsempmqlNWdS9SXtASbTOxHpHkmnZ35d/nACApUiYvQcpZjJMybZI+9+Lg4r4AfWUf 2VfGhf6vYs4SnrB9zn5nG/b+w0Gw5YEF5t9hifcCX0j7u/4hDvwkCALF4jjyY+Et1+xvC7wT8DBi iyWTyrxbXhZr9n6xUIyzxT37xK7+vZ0zya7u5ixkV8WcJezqyXzP5x7uMPPzovF0ad7/Yr7n5v5x zqLqzZs5U+xqZ+7bp/p9r0S+n7O4kmJxMoNjEax0q89mzm7Z4p/sHwvDTHvEIpB+GIXtARPD1KNY fO7GUkL6Mgh4G0xZtstLizMaLPZ5msbDYJGdAArsNK+RLCe1a4x8GClJjIVIFiY+LCWobMQRTpum jIQvlaYpjfxI87VmmrpAxsqr7z3V9wwDqX7vqfG3MNDy3qOx7RNq9STivkpjkTKe+jFU5V61DH7N 98t8d3zOnti+gEb2zVAY49Zvd8jBUnj/yzpkf9/Cij56X81aYaGC9YAFLDa9fvA9FuNX2xmXer1h Dfast2qSRNBviUnoB6G6ZJI6/UeqhPL+CyP5rF0JZx9urOtgNx/A4jvoja84iWXAI/Pk7JZSkZ/A uUSxH7Ll2sNjnqSp5HBBPlcqEGkIY4hEEqkAy8ZPw4DHKsHE34D1QffFg8gXwOfcr+xS64RF1MMl Zqz0XTfwIZxdPc7ZO1zgbvRljQucTMbmHvzaqvUM/sd6OTyBh3knjDPCL3BA9c9wQBqnfA7Xgefb uafv2b+3t2YGC77SPDZ/YtXJ+sHwN9qred1eLVK+jAM4D00FqNZuvGuJlgRY39GNxUXsKxal0o9k iWRITQ2p3AYEe7HOjSMieIgIV7On7TI7FtvN7Af2V7+xikD5ClLaMmQT2Tsh6/miXF2pLlYATLiO X0H6Wt1XoIRr52Hqw2WlLOoE9lrasjNtZ6v8gPnsCxs80thRUmKfgm6X0ufY+2JXMjz7V8n2j+zX xc8s26zYz/s8Y8Vqdj33+oSHKWZXhmcDI4bjOZAfcz8ZthUPyYO2FTujTuQ7AJ/P6uz4ssthgLNs v89eQEXvPAg4c8XjiEWVGE+vmqYdnrNPKW2XTRT4KtK+zuZRLlPKKNTaDg3wOFuZFcd8fQAXn/pJ QMoBEjgWY1PAhSTI1BfJOF0ZvggtFWJ7oK22CU1qSTggrrAGAjkGjdLNTnyYjJ31gSFHIZRUUDIc SaVxPw0/YbzD4VA8bIrNAzs+5iwb9hNSgHEZw0mZgZl4Qq+MXpdTemgR+VJzVFYY5MrwKifhypED eK+jOBz3IIb0FAivSiDTiIycKqOm+ej1OyUfXLWTltcB65X30WxQllibzHjs2S47HvO9Dt2zT6is +uKHkFg7PAUVDRnkQnxHgCnYONKBFthwsmECyJ9EOizq+XoLJREdlAjlFCXTW6RtvVQmcL0CSZYz ldTcWy8UhH7aSoXdrKpfSV573gnQ34joy2tjbQKTljQ4fJUKJK3fJfC0oEktXQKPO9rwmBOOknT8 mJ0ciZoAfh5+yqT0R/bndpNfs932UOgM9prlx6VPpapSwusqdLOsFmXoILh3SFUVcu/xqaqj2+0G H6gVkK4Sqy/RmUoKCoze42bZZMEjgltLBkGzQzmmVII0eJy6JrhR5l45jCngo8NbSwhJhkt8a6G9 ZYBrAU9Ws4pwLTRHNd1CXAuZ1JOyABPjkJV+r+qiBU1q+Y1Ys1V14Y42PGa049++plRj48YtFc+r ROGESjI4PGa0iJtbEmTBMKaroHvPY4Fn62LzS1lNi/65F1xnxzIyvexaxoU88LAuFEgkyiZDXUxy plyxqNmxTVeJ0BS3XPz/R9cV0Va3Y7M/7LVsq3Zv8AiJnYsU+wStwQ72VbvBbNkn4Wt1n3JEfwix 6w+6o4qeOaYXxbpBL8MuaSvU/BovK1U6oZLoXxl1Q3UK8HlK+Z/n9V2+Z9t7tssOh3zzkO8P6ILi FvrP+cN2r/t+vf0IqT2VQv/ZqvImeaWUiUu7fHwL1AW4t7OxvfucL49kZ0OCC55EzMp5G9MJsZM5 ugh1MZ0JwLPdfrvL98ci141QojYTQjdCIzDRlHLhIhIK1cb4NJjgooqycgL0DKuDJqHuBrfgLySB y+9XC2ArcTT4mTfpJ1tU7amWlAvZQLej7o1PhsL+PrpmsonlmK6TZX8iAItoNwF39lv2VKzYB+t/ sdp0k/mHkltPHwNon8MIMXFBHFaDGHbCZdVJ7VmG6cAOYLuhinbB6avfCniK3Iljb3UQ/twPZ+wn nA14eH7K9tdEwBVV+XUS0DKMc1gCyuYYYRIMttpfgY6joiHBc7S8O7Cxvcc2eG8/tNqPs/q7xCKq 9q4iWwvNUdddnn2hpwx5vpD6wIWm2kXV4VlDi2d01KxnrZ/Wk/2OF7DEnCG/Kra0AVft9rAhoWXC 7YXn0EAKUURPaWSXfLiwMUHCStNxfF7lmyNtHeWOQWsUFxIicXZqQioxgpAJEnIQ8rJ9Pj6SdKCU UAI7/2FTwoV0mINY4zOrEXRMkHAPOorNfTZgHvVyaYq4kA8RTso0R/AxQcID+LjP1sXTC2kfNR9N ERfygZN50xrQhhEX/zFBwiP40Nusm5U2kX4hIq7CS1PIhYwEaDxUkcoxDJbWoS/9yp7iywQJBRi5 K75gX6hfQJ2G43DgaQiXsSHSYFwTZhwVgHfJCT73D7quxByhKP6q83YnKMf5/4nt8qNPQVenAU7Q F85LnIzuzY6cmgkS0G/K9wUO0q+zF3aXs+dDvmLHLUMisD3m5vgd0W5CNaUkThsJI3m40nHYxhQ4 Ueta67TO0hiuKKsra51OAfRO5mGXL4v7Yln14FAD6u3d3nQ/RAdDhUIwI8tluRCGaAsfodTErLFf zfqcwhTw+jBixzYs6qbmRzHqMytWzrCZnLLojvK65EOOOsSLczVVTezChwP4eZU5ehsWNZbtqw4e zaRKwaqPY9HGZY1O54xawKQHpNSs+gAtNEdXnd7+Jb4Rh43CQKcUOG7fAidVHV5u2FUau4WoHRBh XFV7U0yAdjpt1AK+cPgC7bIJGZXL8CdAzzbPa8furmjCX0gC1weexy0pG7AJGqqTHmIC+Fl3d9a1 V4QirYpS9E6RVgTb+MwqMuyTHUK3TuzE8DnYs52igWVTEdYNTsftOkbBfrCrRvgQURXyVsybhGye TDg3TZhO5UCA66IftWdeneNwhKLcmtlSxUcNJuS2xFirzwZMASadZU1iU+PL/ARHkS9H969cBj8B eLbPvz4X+3wFf/nJ7IpdM+M+b7XA7i0Gkeoz4HHI7EiGfYHOz3r3oG1+xpGY1HsWJL/fCKjybIc7 GKFX/cFRLht7CF0nHqqPJRJgAns8CRtEOn0mrabr4/8ASXm+0gplbmRzdHJlYW0KZW5kb2JqCjE0 OSAwIG9iagoyNTYzCmVuZG9iagoxNDcgMCBvYmoKPDwgL1R5cGUgL1BhZ2UgL1BhcmVudCAxMTYg MCBSIC9SZXNvdXJjZXMgMTUwIDAgUiAvQ29udGVudHMgMTQ4IDAgUiAvTWVkaWFCb3gKWzAgMCA1 OTUgODQyXSA+PgplbmRvYmoKMTUwIDAgb2JqCjw8IC9Qcm9jU2V0IFsgL1BERiAvVGV4dCAvSW1h Z2VCIC9JbWFnZUMgL0ltYWdlSSBdIC9Db2xvclNwYWNlIDw8IC9DczIgOCAwIFIKL0NzMSA3IDAg UiA+PiAvRm9udCA8PCAvVFQ1IDI5IDAgUiAvVFQxIDkgMCBSIC9UVDYgMzAgMCBSIC9UVDQgMTIg MCBSIC9UVDE1CjU5IDAgUiA+PiAvWE9iamVjdCA8PCAvSW0zIDMxIDAgUiA+PiA+PgplbmRvYmoK MTUyIDAgb2JqCjw8IC9MZW5ndGggMTUzIDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJl YW0KeAHNWstu20YU3fMrLrSSgJjhvPhodnW7SIAWDay0iyALVWZqJZbkUHT6Qv69Z2Y4NCmLw6Hi ALUNSyapM3fu49zH+BO9pk/EuP5RGaOc5VSV9Bvt6PnlgdP6QIn5PqzxXBJzaf/Wb5jgcU5ZlsYZ HtxG3y9JKnO7eVlu6flyqYjR8j3NaUHLD/Tj0qzYRxJFEucCKBYsWm8JYEmcMJHScu2DfUvzn/YL kjT/fUGC5psF5TS/Nb/LRYQrWBdXlp27a/P8R/O7NNfrBaXuyasFKZrfmev2rn4+apDfLyhzq1ic lcGxCHZ1K89uQe9o+er0jhWXsUwS1t/xmepTPItZUWR9MGUN17wE20IVPBZBYOm4YTPYNUkSRVkq G6ue2iMbR8pzgyRJ5DEQEz4NTnu5FkYlCdRUpHGqlb81PixlJqP22m17zaiz0M/ddj4Ld2+u3Zgw eUB1d1IWqyIT2FQRZxCVRS6ifimrdXlX369uqdpAouZJboJGP31iHcTC85dbQT/sETivo0+kGIsL TkLFApvQkRtzGKzQbxBCbq2x6DUw8Jpjheqog8EGos5ZirPhaNa+zZSCiGeb6iQhFYqr6E+4ygfN TYwurywX0dUldHkBwfGV5ZlMWGruHF1SvIi1J2YgK0qiBOZPeZ7CJUA1WaaYTBVMfQU9j3NfksYc YLCF80S9PmJwQHGgS82CoKsr0Aaj+c2CLvAChtEvW7yAV1a0iEBl1717oBxLbLgDUrnghn/wBzin fQ/O0TjNfXAe7u8Xkb5mP28vzRzdtR9sVm7kOBhIC7xqboEKL1g0x0eH+YxneSzyHAyuNaIVPJAN oIdoJBsw0JmitJBxKhsko9vC6JbZDGNeIstqzKWYWb3Zlod6tb2bfUf/Dnsoh5CKiexhEZO8utB0 BO3JXo28uYjhtjYPDsj7CNSHKuCtCSsoNcAPOTFBzGon80k7uy4P62pzV2/2O6hi9ma3+Yta5byg Q7ne764PdNjs1iW9Wu0ILMeKLKE3y8vZs0U0lKkVg21SIRupnKGHZYl8eb/RXMbifMTS0FyEWqK1 NAVpLgD4sQv9fVdqlR3qarP7A7oYrFq41F6Up5SadVxCGtaFtwZqdJEm0O80Y4fp4gzg2ft9tV3V WhubXZ1KMEDrF1G/gnvQhVln3C8edBHp3NxHa3Qhi5jnIVBfGsFOQQmhw4jSYDDjWdHJOpVZ1k+5 OHJYH+1ruhunfc3XAbSvs8M47ZtUMET7laH41WdUxzo7oFQGZkP/9p6f6VMVSwUO6mohOlXVNSkv gACSLE4aAoBfIY0GMFxdYQu3ZTXC9IlCjHIwvVnjSWJUFSrOvkWMngN8zPTLG5iyiVIUi/244grB wFHd2ZVCQsvx7InQ4goZioOSe2jj9jP535mP6psSmWn9saxpc8DP4b68pnrvI16ZYhtKZs3CT2PU HA1Z/g2IV50BPKubJLSqqtXfPlVwtAHIySn1lvHWBs6iJ/pwy7sqE/2idjwag1LQGbizTV1uDwjx t61TP04WBdyQMXhDR+6v1AAas6JX14eowKsEhVohEQWpLrRXSk/9yhSqsEROQRu3ukpi16OPx7Cd 6JD+8lhGx2miIOZ07GNe+3m1LWn/3tKFo35PoSoKKFwKu3QY0Q0WvU1YoCA3BX4zm/JmqaiZeQVr KAB8rFQdNsQDU7tlvr7f0UMnU7VrqAkOMywla2PEQE/j4i+eQp21ftgF9gafz6tNe6pYekah7o2W dvtdaK+UQRQRjDa+ZxRTfHKODOWIM8CPSeLy/lDvt2VFL699TawQoE8hMfE2a46zQ0ATKwuBorCB Gg6HoyY2UDenwSOvb7Q1REAji5JecYyz7DpPUk/JnJ9RT4Xq4wzw2d2qrsvKjEPeYmbfdrLHNbKE c7ACyugu4lX1hQfNVdw9tGH/0Acm7ZDjn8QD3NrsScTEBENxjHXOEbN41x0MHKsz100CBnk9ZK86 R3lIQtpvU511kb0yuonDqSLaFWfBYOMbRqc1vR4ddh7mZoto5B+AvRt+50GToI+EFzimC0Ub37HM Mf0NYSKfJZrZjwwG88llZz+S87joNf++2c//Z+RvB/u9Mc9nnFZi9GOPI5o73dHP4/EBZnuF1IY2 SnB588SZ7/Ho58T0wBbVElodH/12WBHnEIey+rxZ6yGtr/5xXWF3hZ6HH5fTPtubkk9g7jPWADwC 9aG6KDwNPJLejyb8V1YpL+h2syufYcBvdPSMtuVqdzCNU4U3d/uq9lVGUmstxYCoJ1JPbf0zjIDK SOD84puM90OAj+3RVkXhk5V2ma/vmfAvDlAv4mZSz+Rh3taDDPC0jmnSbMVKHsLHPoe3YYQJSOKo PbASGqkLXeckutAer6W5jzlc/g5HG98zTh+mj4xHdu26WnEG+HHn9OvqdnPtWINw7mMGLR/299Wu 1APIwdmI1Mkfp2BkpXA5YfgQLIQx8I8D0h38DHvIeb2UOAk+QrZuHjuhl7LrPE3EIG7OqHe9w4bW eaZjT+6kRGcNb1SGNFJdsGHf6FQMNA/qo7q4Zwvp2qguWKCQYV1UF9gr5TglMfVQ+gfKOEJILQ13 ob1S+or3loaD0cb3nOCQZ1qW9AZRm347uN79hnRRIhRsdLscMynmiMMrl88OTRMVDjYuV67/4WMi Nb7+D7vA94sKZW5kc3RyZWFtCmVuZG9iagoxNTMgMCBvYmoKMjAwMAplbmRvYmoKMTUxIDAgb2Jq Cjw8IC9UeXBlIC9QYWdlIC9QYXJlbnQgMTE2IDAgUiAvUmVzb3VyY2VzIDE1NCAwIFIgL0NvbnRl bnRzIDE1MiAwIFIgL01lZGlhQm94ClswIDAgNTk1IDg0Ml0gPj4KZW5kb2JqCjE1NCAwIG9iago8 PCAvUHJvY1NldCBbIC9QREYgL1RleHQgL0ltYWdlQiAvSW1hZ2VDIC9JbWFnZUkgXSAvQ29sb3JT cGFjZSA8PCAvQ3MyIDggMCBSCi9DczEgNyAwIFIgPj4gL0ZvbnQgPDwgL1RUNSAyOSAwIFIgL1RU MSA5IDAgUiAvVFQ2IDMwIDAgUiAvVFQ0IDEyIDAgUiAvVFQxNQo1OSAwIFIgPj4gL1hPYmplY3Qg PDwgL0ltMyAzMSAwIFIgPj4gPj4KZW5kb2JqCjMgMCBvYmoKPDwgL1R5cGUgL1BhZ2VzIC9QYXJl bnQgMTU1IDAgUiAvQ291bnQgOCAvS2lkcyBbIDIgMCBSIDI1IDAgUiAzNSAwIFIgNDQgMCBSCjQ4 IDAgUiA1NSAwIFIgNjEgMCBSIDczIDAgUiBdID4+CmVuZG9iago3OCAwIG9iago8PCAvVHlwZSAv UGFnZXMgL1BhcmVudCAxNTUgMCBSIC9Db3VudCA4IC9LaWRzIFsgNzcgMCBSIDg0IDAgUiA5MCAw IFIgOTQgMCBSCjk5IDAgUiAxMDMgMCBSIDEwNyAwIFIgMTExIDAgUiBdID4+CmVuZG9iagoxMTYg MCBvYmoKPDwgL1R5cGUgL1BhZ2VzIC9QYXJlbnQgMTU1IDAgUiAvQ291bnQgNSAvS2lkcyBbIDEx NSAwIFIgMTIwIDAgUiAxNDMgMCBSIDE0NyAwIFIKMTUxIDAgUiBdID4+CmVuZG9iagoxNTUgMCBv YmoKPDwgL1R5cGUgL1BhZ2VzIC9NZWRpYUJveCBbMCAwIDU5NSA4NDJdIC9Db3VudCAyMSAvS2lk cyBbIDMgMCBSIDc4IDAgUiAxMTYgMCBSCl0gPj4KZW5kb2JqCjE1NiAwIG9iago8PCAvVHlwZSAv Q2F0YWxvZyAvUGFnZXMgMTU1IDAgUiAvVmVyc2lvbiAvMS40ID4+CmVuZG9iagoxMzIgMCBvYmoK PDwgL1R5cGUgL0ZvbnQgL1N1YnR5cGUgL1RydWVUeXBlIC9CYXNlRm9udCAvQ1lUWFhDK0NhbGli cmktQm9sZEl0YWxpYyAvRm9udERlc2NyaXB0b3IKMTU3IDAgUiAvVG9Vbmljb2RlIDE1OCAwIFIg L0ZpcnN0Q2hhciAzMyAvTGFzdENoYXIgMzUgL1dpZHRocyBbIDUyOCA0NjkgMjI2Cl0gPj4KZW5k b2JqCjE1OCAwIG9iago8PCAvTGVuZ3RoIDE1OSAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4K c3RyZWFtCngBXVBBasMwELzrFXtMD0GyA+1FCEpCwIekpW4fIEtrI6glIcsH/74rJU2hhxHM7M4w Wn7sTp13Gfh7CqbHDKPzNuES1mQQBpycZ00L1pl8Z1Uzs46Mk7nfloxz58cAUjIA/kGWJacNdq82 DPhUtLdkMTk/we7r2FelX2P8xhl9BsGUAosjxV10vOoZgVfrvrM0d3nbk+tv43OLCNSIHM2tkgkW l6gNJu0nZFIIJc9nxdDbf6PDzTCM9822UbJAiBehmGxbogSiz4UeiBKEoLek/fpKcDnAo7BZU6Ku 9Ur1G6We8/g4ZAyxBFT8AJ17di0KZW5kc3RyZWFtCmVuZG9iagoxNTkgMCBvYmoKMjQxCmVuZG9i agoxNTcgMCBvYmoKPDwgL1R5cGUgL0ZvbnREZXNjcmlwdG9yIC9Gb250TmFtZSAvQ1lUWFhDK0Nh bGlicmktQm9sZEl0YWxpYyAvRmxhZ3MgNjggL0ZvbnRCQm94ClstNjkxIC0zMDYgMTI2NSA5Njdd IC9JdGFsaWNBbmdsZSAwIC9Bc2NlbnQgOTUyIC9EZXNjZW50IC0yNjkgL0NhcEhlaWdodCA4NDYK L1N0ZW1WIDAgL1hIZWlnaHQgNjM1IC9NYXhXaWR0aCAxMzI4IC9Gb250RmlsZTIgMTYwIDAgUiA+ PgplbmRvYmoKMTYwIDAgb2JqCjw8IC9MZW5ndGggMTYxIDAgUiAvTGVuZ3RoMSAxMTMwNCAvRmls dGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAHlmnlYlOX6x+/nfQdmYxaQ1QFm8BWEWBV3DUZg ECIXhLEZLQUBxdIklDLLotPpaJTZvqe2Z1S+jC1jq5Xt2mqZlWn7StpemnDu9/0OHu10ftf1u37/ nOv6DfOdz3Pfz/I+z3Pf78PMwLL2jhayUifJVNS0uLGN9Ee2l5HedOYyj25SMvuj75vftmAxbHcq kXnQgkVnz4edvYhIvqy1pbEZNv3BHN3KDthiJHNo6+Jly2FnFzGdi5Y0ReqzG9i2LG5cHrk+fcC2 5/TGxS1MfuRq4+W1tbdE6kWAKCmJfdN7KncnyTRlA5f1R/bDUzZUPRixBbsMwkNO+oiMJDELqYHI Fi8KyUCCf4ii1oVvFzNPm+uY+DOlmNhB9Ng3527X+MKqey45uPzwGku68XHeHzOPgAf3M647/B5P ecPB5b9vt6SbSNwYqQMMPWY5LN0eco10h6WbQoNHMS4D2kMpY9g6A2gDTg4lj2PnbGAWoISSJrBz CJABeAA3kA6kAalACuACkoGkUGKlOyw+AvYBe4EPgT3AB8D7wHvAbuBdYBfwDvAW8DawE3gTeAN4 HXgV2AFsB14BXgZeAl4EXgCeB7YBzwLPAE8Dj4YStPW9FkrwM7YAYeAR4OFQQjPXPQQ8CGwGQsBz OuSRIXe+OywXAyOA4UARUKjHVi6AZQulF3IHqw7pUCitiAN3EPgN+BX4BfgZ+An4EfgBeC+UWszd dwPvAruAt4GdwFvAFswlBun2CPAm8AbwMPAgEEYq3gbcCmwAHgLWAe8ANwPrka2XAmuAi5Fg/4B1 EbAEKXwJsApYDCwCTgNORXc/EAQCwEnATKALqANqgVuAqcBqYDowDZgCnKhDdsA6AagBEvUkkhKA 04EZQDwwCIgDYgEn4ADsgA2IAayABagHzDrEVmTdU8i6dORSGpAKuIAUIBkwIN1kpNsXSJvPgc+A T4EXkCHPA88B25AFzwL3A/cB3TrkwQj4aGzPKKBJn7WciEkkAPHAICAOiAWcgMB0CdPtBw4DfwAf Y7ofAfuAvcCHwB7gA+B94Bms6GlgK/AU8CTwBPA48BjwKLARi74HuBu4C7gTuAP4BBtyDXA1cAWw FrgKqX8lsAI4G1gOnAVcDpwJdADLgKXAPNwdc4E5wClAIzASUSkGRgDDgSKgASgECoB8IBc4DsgB soBMYCiQDQzTIUtI4Tyk8C/AT8CPwA/A98ABYD/wHdALfAt8A3wNfAV8CXwBfA58BvwMfAp8Anys Q85H1uUBucBxQA6QDQwDMgEFGAJkAG7AoqepbAZMgBGI1iF9j4w8AOwHvgN6gW+Br4GvgC+B15CR rwLfAK8DO4DtSMWXgZeAF3XIWbBCSEUV2AQ8ANwI3ABcD7wC3KtDjkLyXQtcCHQCFwDnA+cBLUjF zcBCoBX5Mh9oBnoAH1AFlAGTAC9QCvwd+BtwHTARKAEmAOOBcUA1MBmoBMYCYwCTniiSETgeiAai AAMgA5GcF7AqgHKAgHN0iH6gD84FsA4DfwCHgIPA78BvwJP4jfAE8DjwGNATir+E37+oOqSVCMC5 OkS69wVnmftXe5X7F9bPthPcH7M+Yu2Lmep+jrWN9SzrGdbTrK2sp6wz3U+yHmRtZoVYPSyVtYn1 AOt+1n2sbta9rI2se1h3s+5i3cm6g3U761ZLq3sDaz1rHesW1s2sm1g3sm5gXc+6jnUt6xrzWe4r WJez1rIuY22R6+TpXstM9xo2LjW3uCeZ5RnydGolt1wLittCg0bwTtwKbAjF8TtqsR64Arg8FOtl 51rgMmANcClwCdAFXAysBlYBU4EpId7csDgRqAFOAKqBKmAyUAn4gIqQw8fdy4EyIA1IBVzAYCAF SA5xLMMiCUgEEoB4YBAQF+JIh0Ws9yTmT6wfWT+wvmcdYO1nfccR38v6kLWH9QHrfdZ7rN0cvXdZ T7AeZz3K2sK6jaN0NQciLG7AZl8PLMTGtAILgPlAC9AMNAHzgEagARgFjMQ2FQMjgOFAEVAIFAD5 2J88wAhEA1EatsjT5KmhCe6RT8lTqYJVz5L7t7IzJ69yi16IS6wMi/tDg+J5cfeFBrkY3cC9oUEK WxuBe4C7sfC7gDuBO4DbgeuAa4FrgKuRj1cBVwJzgTlY/ynAycBsYBYQBALAScBMwA/UA3XADKAW mA5MA3KB47CLOUA2MAzIAjKBoYACDAEysNEewA0YABmQAAGQ90JO5H5WH+sw6w/WIdZBTsvfWb+x vmV9w/qa9RXrS9YXrM85PT9jfcr6hPUa61XWDtZ21iusl1kvsV5kvcB6nhVmPcIp/DDrIVZYbEJE HgDWAbcANyMiNwE3Av8ALgrFFnD3v2P3LgT+BlwAdALnA+cBK4FzgXOAFcDZwHLgLOBMoANYBiwF 2oEzgDZgCXA6sBhYBEwCvAhaKVACHA9MBCYA44FxwFhgDEI4GnACDsAO2IAYwIoTyQKYAZO3kKPd yxHZxXqH9TZrJ+st1pusN1ivc5Su4sPmSv3AOQ2bf6r3dD7JL5Iz3X+XC9wXigL336o6/Rd0d/rP r1rpP697pd+6csLKmpWydaWLcc7K7pXvr4w+t2qF/5zuFX7DivgVkuXsqrP8y7vP8lvPEjFnVnX4 6zs+7fipQ47vqO9o7ljWcXXHTnYY7+h4sGNbhxzu3+qN6xg7obKz4/IOKZ7rJeoQDs3t6bDaK5dV tfuXdrf7De1D2+vb5XEH2oXkbRcN7W3tEjfa3D40u1Jr7GpPHFzpafe2T2+Xz6ha4m/rXuI/vWqx f/9i4Zxkkf3kYb3Okskh19Naud7bL9GitkWS+VRe7cKCBf7W7gX++QXN/pbuZn9TwTx/Y0GDf27B Kf453af4Ty6Y5Z/dPcsfLAj4T+L2Mwvq/f7uen9dQa1/Rnetf1rBVP9U9k8pqPGf2F3jP6Ggyl/d XeWfXiUmF1T6ffJoN7kFpfOzLb0z/UC6wdqQ1pYmtaXtSzuQJrelHkiVzncJx+DzB68dLDv4RcJL ijtlbcr6lE0pUQ69IMe0xXXGSW2xnbFSUaw39vXYfbEGit0QKznWOtY7NjnkaY65jv2Ofodhk0Ns sj9lf80uT7PPtS+xyw67ZstOr71geKXD5q1x2wpt8sRCW6ltmk1eaxNeW8GISq9t6LDK0phpMXNj 5PUxwhuTlVO539JvkbwWrvCas/L5JclVSbLwCP5az8mQTVosRIKbD3nanCiiRFhc3lNfl5tbEzb2 z6hRTdNnq2K1mlmnvXprZ6nRq1Xyz5od6BHismCPkMrr1fia2lmwL1qzhsrSatS0uoC6IS1Yo3Zy wasV+rlAaT2JVBbMnbO0Y2lubu7S3KXL+HXZnKXsWdbBTx2CX7ncwS9aibSGf/3QqjFQ7tKOudyb m81Zyi7uzgXN0Mb/687/Rd7/thmK/6K9+f83leS5c/jbceM6or6rjvq2vI0uoJupmx6iR+lpepne oh+Fhb+nv4ieok/oa/qBDvE9bRQJIlXkHNXv/1jsuzBqMdnkrRRN/JeE/oP9X/Vt7P+K/yBgP8pz FVtJhqx/efrj+nv/7Ou7qi/c92q0lZx6X6f0Co92QPT2H5RKuaezf7RmS6u0sn6lA8Z1fZv61h+z gLm84tNpCbXRGTSPFrDVTstpBZ1DK+k8Op//QnMh78g/aBVdzK+X0hq6jNbSFXQlXUVX0zV0LV1H 19MNdCPdxLt5C61j/7Vsr9NrSa/ZQLfRXXQP3Uv30f30AN3K9u10B91Jd7N3I/u72dbKWglt1rHn LvZptZpnE6nUE6lDOUSb6UGO3qZI3YD9CIVpCz1M4KP0GD1OT9CTHNWtHOdnIq9bOOqPHeP/zz22 07O0jZ6j5+kFepFe4lx5hbbTDnqVXvs3/1/5Btr+51FepzfoTc7AnfQ2vUPv0m56j96nD2kvfcy5 +Cl9S1oL1H5Ae7hmH3s/pi91/7967jrSF632cruPImN8Tl9w+6+ol7476mq41gfc6kv6hX7lnDeJ wSJN2MUg+pl+Y9smErnmoDBzKUMME/miQBSKkWKUmCAmiTIxg60iOpVOo8s5L67m6CMfbuR8OIvz 6GL2admCiN/Fd93GI1HexDHVongTx0L7eUqP1TN/sd87eKX3cPx79Jj/e6yeiUTiRa5/mTNcy4yB Vlrsnz0meq/xaPfqudhDIc6EJzkrtPhq0dXqtGi8zaPsjEQCu/kxfcY1WpS0+nf1GL2iR2mvvsuf cv3nHL9deitEcxdnyTscS4ywjdf4Efd9k+Pypt5Ki/dultbmJW51H9d/qI+5jyPyDUdLi9nX3P4L Lj+un0yf8Yy1WH4SqdvONQf4vPqJI7ufvufSj1zWfp5mzw+s79i7n6/wI0tr8w3P8QDn0bcc4x84 6r9yze9c/oX/gvoH99tNB+kQl7Sa97iG48/2IeqnPurnU1EIScjs18qk9/mDs+wwz7SPW/bxm6HD QhYGEc3np4kzxyKsIobzR+upezAKZ5XErbQ6k+7R29NvR9o7+D1VrIgTg0Q8n8OJPKpdONhO5let xjxQI5LYp9UNtE8g0n0pYjCX0vmdWQa9yid5Ov3C+Z3KGe4RQ0QKXz+N4/y2UDizs0WOKBLFYhT3 GCoy+WpappeIUqGwJ1NkiWHMXF4fZ7yYyDWTRIXwcW2/yBOj+X4oEZXHnK4RQ7qB7wD9wWf6u1F2 EcXn/zPSVFrO9i7O6Q00nQI0h06N+lLa7q2cO+eUk2fPCgb89XUzaqdPmzrlxJoTqqsmV/oqyssm eUtLjp84Yfy4sWNGjyosyM/LzsocqgxxJ8fHOh02q8VsMkZHGWRJUJ5PqWzwqFkNqiFLqarK12yl kR2NRzkaVA+7Ko9to3q0fo1cdUxLL7ec/6eWXrT0HmkpnJ6JNDE/z+NTPOqOCsUTFrNqA1xeU6EE PWqvXp6ilw1ZumFjIyODe3h8ya0VHlU0eHxq5ZmtXb6Givw80WO1lCvlLZb8POqxWLlo5ZKarbT1 iOwSoRekbN/4HolMNu2yqpzpa2xWp9cGfBWujIyg7qNyfSw1ulw16mN5Fqo8Z7rE05O3tevSsJPm NeTGNCvNjScHVLmRO3XJvq6uVWpsrpqjVKg5Kz5N5g1sUfOUCp+aq/DEamYcuYBQozKdiqfrZ+LJ K73f8qyP8jRGPNGZzp9Jq9SWeGSbVNE4UCaeG8+Q15eRoc3lkrCX5rGhdtYGYHtonitE3sLcoCo1 aDVbB2oS/FpN50DNke4NCu+sT/E1RJ5ntiarnfM8+XkcWf2ZqRoyud6jylkN85paNTa2dCkVvELe S6rnjxsVXPA2RjbT11NUyO0bG3gRC7VtqA2ohUqbGq+UYbfZwYNk+hbWBfQu8PrU+HKVGpoivdRC H/flFPF1aYHRJqiNpdQGtlBx/76ekR7X5mIaSUFtHmpiOQcly9cVaJ6vuhtczZyf8z0BV4bqDfL2 BZVAS1CLkuJUc/bx5fjBAdR78dr+1HqgMS9bNWaaPAHJJQe1aLHDU8kvStlErnCq0TC1iJZN9ASE iwaa8VUiLbTSMeOwIWeWV3FnJnctr3JlcHLrj/9hSi4sgKehmo7MycCTiPrXnHCd/zg1tNYmlOPx tVQcNcFjBmVDn2BktL+ep6TtRWQzeAomLZxV2hry8yQue7japEq8Tt2lRTHZo9J0T0BpUYIK55B3 ekALjrbXenxr6hTtI60e7UiW1B9joX4s6lTKqKkPDBj8gTigVubqcdXCqtuTdfuIWfWn6uqBak+X Samp69IurkQGJA/fQRyc6KzqxkvGxo3km7WSD0qlslHxOD2VXY3h/s55XT1eb1ebr6F1PN8GXUp1 c5dSF5jIsdTv+5WuFdql46hG1NSX5efx2VPWo4jVtT1esbpuVmALv9/2rK4PhCT+ON9QFuwZynWB LR4ir+6VNK/m1Jp4NEMbaQYbJr29a4uXqFOvNegO3W7ibxR0HxqxT1BTWILPOdBOYp8BPq/uC/KD 77DkVg4Bn8M+T7MWnnODrV0NQe3mokQOJT+FKpQSUiWlhL+EiI5RLUpLmWpVyjR/qeYvhT9a8xuV MlUkCt6cMJ9JXQ0Kn1OccgFyiSBnh1PLfinTE+7vrw9k7HD1BjP4ljiZNSugmnP590BU5gncbrKm BnZPVjubGrV5kJ9vde3OrG4K8r0wMCA3qVbNPII5MgK3qNT7aOnInZo4NhxAvX8nG2pnUA3mahcN LNRm5PE4VapSxnPYMWZUlnahwmBXnDJCS2xuqloyV2kw89yIv17RPS42+WJ84GorMsbwzJsUrmpq 8HAEDNRUx6mOs9SixY09LXwkGrJadFlckUrSliVnWm0W1VzAA/JTK1sLeEB+GoO8KdridWtVpAFf 26laeUZZR21lpAPvDldVa3Ph5yqevNb0aW2Y2jDNUJbz0ahNWr+UkatVW2Z1Ix/+6G9ljzJ2oDOP ZcrUXNoY2+A1aiuP4X2XM+vD/XcrZ2snwMAjP0/RfjloiUmuLZzYFOz6s0OdnZufZ/qz16a7u7pM tr/ugP0y2Y6QRyGDnUi8xv9WN65/r/w0f2Jlk3+0Rww+31IGf6EpseAl/rRwj6gTL3CLKP7kv1Te x5+SZf5/vAnkp5k07aH8xPxE08RJFmk8VZNRqNzZw/9px/9TJ3q8cQYpc0y0XOuyxbbVitoKo1RP pXs+3HPKh3t2MHeIwj297/Q6D7/TGzduXGHh8CIRmxGrK94uGY3R0cqQAmnMmNGji4tHlEijRhZI yhA7K2vUyBJpTIlcPCJdElpTtNS93Fjzyvv+mCZXHh4qnempaK1Kl/MzE91xRpESpQy2FpZlx9nS CpWs8TmDo01GQ7TFaBo2pmyIb0HFkL5XDCa72Z7rSVUGRRvMDqstJ2PwkEHGvqwo+8EfouyHTjJU HHpcjh3dMrU4+mybVYoym+7OcKUXTUiPz0yLtTlsdrsx1Z1qNMY5LMrxtYfXmVM9aRab3exMiLGm udMt9hiTI/FwBkn9e/uuMZC8i46jUlr/qFwlV1MgV/vu0h/w2jJGjY6xjbKNSrYlJVNY2ug15ybF jB6VYTAWhUW915Z1QpIt2WOIc1XHTRvHns1e45Ts3OTSwVN6S0vjksaV9vKLKNzZWxhbHFvsXLnK vm1brCgeXuR6+H89zPCiIG+zQYvGMNku61EZhI02GhGGqEhwjMbERA6WwUDJI6YuXhPIrpxQFDdN crhHZGYWuEzSQcPoEvewJJOU6pg0e/H4KQsnpfUdtqYMS82fPb3Elqr4x+b4xuS4bNKFk669+uLW EmfasMS+xRanNTra6rQY9ibERZkdlisyJk/IGnXyuacMGTssftTss32rx4zJLg80NHLent5/UP5M fp6G08xj93QLZUjHheISsx+TNnI+e6QrvVZvYn71EJur2naitnelceNKRSHv4M5e555e3iqv+c/V +lZEG+0yP7EfWXo2akmXNCiBkzKSl/Jn0XxOL1pZbUnNHj10jHdIjFgoJLOrODe7IMUkTowqrptc ki47M4qzMgtTzPKdVk/cot07t8+1x5qlqJgEpzzEmRoTn2CLNlhiYw6fkWKecvMd6jwbb4LBFKPd srzWuMh9Gk0pROXB+kCgPLe8cdHCee0L88uWLGquXsZGE/0T4gqZmQplbmRzdHJlYW0KZW5kb2Jq CjE2MSAwIG9iago1NzEzCmVuZG9iago4OSAwIG9iago8PCAvVHlwZSAvRm9udCAvU3VidHlwZSAv VHJ1ZVR5cGUgL0Jhc2VGb250IC9HUU1USUUrQ291cmllciAvRm9udERlc2NyaXB0b3IKMTYyIDAg UiAvRW5jb2RpbmcgL01hY1JvbWFuRW5jb2RpbmcgL0ZpcnN0Q2hhciAzMiAvTGFzdENoYXIgMjEx IC9XaWR0aHMgWwo2MDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDYwMCA2MDAgNjAwIDAgNjAwIDYw MCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAKNjAwIDYwMCAwIDAgMCAwIDAgMCA2MDAgMCAw IDAgNjAwIDAgMCA2MDAgMCAwIDAgMCAwIDAgMCA2MDAgMCAwIDYwMCA2MDAgMAowIDAgMCAwIDAg MCAwIDAgMCAwIDAgNjAwIDYwMCA2MDAgNjAwIDYwMCAwIDYwMCAwIDYwMCAwIDYwMCA2MDAgMCAw IDAgNjAwCjAgMCAwIDYwMCAwIDYwMCAwIDAgMCAwIDYwMCAwIDYwMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAKMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMAowIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCA2MDAgNjAwIF0gPj4KZW5kb2Jq CjE2MiAwIG9iago8PCAvVHlwZSAvRm9udERlc2NyaXB0b3IgL0ZvbnROYW1lIC9HUU1USUUrQ291 cmllciAvRmxhZ3MgMzIgL0ZvbnRCQm94IFstNjU1IC00MDkgNzY0IDEwODldCi9JdGFsaWNBbmds ZSAwIC9Bc2NlbnQgNzU0IC9EZXNjZW50IC0yNDYgL0NhcEhlaWdodCA3MzAgL1N0ZW1WIDAgL1hI ZWlnaHQKODgyIC9NYXhXaWR0aCA4MjMgL0ZvbnRGaWxlMiAxNjMgMCBSID4+CmVuZG9iagoxNjMg MCBvYmoKPDwgL0xlbmd0aCAxNjQgMCBSIC9MZW5ndGgxIDE0ODgwIC9GaWx0ZXIgL0ZsYXRlRGVj b2RlID4+CnN0cmVhbQp4AdV7eWBURbZ31a3be6e3pLvT6X3vzkIvWSAkaAIBFARREVHMyBIWBRQk iBjngQIqIONCZBBQETEK4xLZNAGZcYzbU576AB1GHZkxM+pMzOM5uGHofL+q7iBm3vv/e2lOLaeW e+vU2erUpfnmpbNJHllJGJl0zYxFc4j4GxoiROqbtXDGomzd2E4IXTnrlmZftq77Hu33z1k0d2G2 brgH+Ya5C5bnxptXEhIumDd7RlO2nfQhr5oHRLZOK5CH5i1svjVbNxYi37zgplm5dnMS9YkLZ9ya ez75GHXfjTMWzs72Hyrz+qKbljRn61WtyBctunl2rj+dSoj2EUKBjdAHiIbcRhREIiZSR8yEqL7Q Po71UtGOPl+6v8pcZ6z9hprVYronVv5wihfeesH28ZlX+w4qPeoXUVWK/rwBY5TqDDorN5159czv lZ5zLbyV/0Xq+6WVtJ7kE0briB7pBSSDdIRIh5MLUK4mB5EOE5iholxFGoGpJJuQVgh8ucCnSRMw SYEpE2kpDSFX0GJRi5P5aI+RSqRRUY6IZ4ZFK+/JaFDM6qNeEsA4n8DxMqMe0ddNXeQKtLhFP15m 1EkuQVokyg4xopDakStEyqiNvCJqBaItXzzfQsZijJmayBn0M4sWXmbUKMp6kepEqqUa4kYvnjKq Jv8kWtTU2CdGVeQ/MZMCeQNqStFfIVI5108WNSZSSVCUkiHoS/gKSD/wBuw6z3mfs+ACPt6AGi8z 8CR6kx9F+xnyA/kl2s+IGi8z8j2xIP2OfEta0fKdaPmO/I7IwHxDZgDHWxjSlcB9Q05jPoVoYeSb +n7wmgycWJNoY6LMyClixaj/EvP1kq+IDqN6RY2XGekhfyN24HoE7h/k76LHP0SNlxn5kniQfkHa kH5OqpH+jfyVqDGGj2SizEg3eZ7TEzmnwGci/QvnMPJnUT6JdkY+FeU/ifQjkf6RFAB/gvxBUOSE wPEyIx+Klg8E5jjZR+ox+3FROybSo9k9I0fFDvD9Y+R90fKeSN8lRcD8h5jliCi/I/Bvk3/ne03e FjVeZuQt8ib6KZDzt+dlRt4grwscTxl5jXM66eISQl4lvxctr5Iwr/XzXfp9bv28hQlOZeQweZnc i1kPi1kPi918mRwiVwPHWxhSvpuHMGsEON7CkPK95BhGOnPr7iRp1DoEXV4Ss70o0gNiXfux/1n6 7BfY/f3vYQaOYWQv2SPeYa9o2SveYQ95QbwDb2Fo5+/wAmkX78BbGGr8Hdpza+ItTJQZHU1i4PoG npLnxJ4+K2Z+RqS/EelucAcjT4vyUyJtE+lO8gSXU5EysoPLKXmcjEe6nTzG9QFyTl9eZuRRMeYR sk1wBk8Z2UIeBlYhUkY2ix4PiZZWaMzhaGkV823kWoY8KNofIPcLnuYpI/dx2SW/IhtIHL1/JaSS lxlowfd+vUjXiXQtuQe9FWSteAIvM3K3aLlLcPYawROrySrgFCJl5E7RfgfehYGu0HhkBfk3Mgbt K8hu1HiZkeVi/K1i3mVixC1kqXj/W0SNlxlZLMo3inQhWUCMmGUhKUcLLzM8nb/xDSSD/WfkejIP ukyBnEsaLzMylwxFOodcI2RzDtduZLZ4ahOZLHo3iV2YRWaCYgoyS8zIyww6ZzpstQJ5GWq8zMgv 8N5cTnjKyLTcvNPEKP4MBu7h7zQ1N/tUQdmriFfow6tE2xTx/CtzPa4UOP4uDLvOx15OqsR+XS5q l4kZJonyRMHtE8T4S0Q6ngzDiHGi9WJut8hFojxW6IQxQmeNFphRQouNzM09ktyKvvVi7jrsK9dc dWL8hbnahWIG3sLICJHWinlqRDpcpNUiHQYaF2L8MEHJobkncBwTZUYqxFzlondapCmRJsWIBClF zyECI+wt6pwOJSItFn3iRAVMLMfjMbH2qJCVCO9VvwmaiNuhEJ7K9yckeDUoZgiI1C9SYYnFbjDQ QxZ9PYIr3KAiI64cziV6O0HvGGZzihovM+LIPcEhcPxpDFaAv69NpMI6wxOxCAvBUwYvyARKK0TK wLkGWHoFci7/vMzAW1npzRNz6LH/XKJ4ykB7DeZWiJRhPo5T5fqrBA34WIYe2fUohAbgZYYf700F 3xBhYSktXLOBlvwf/iP/t97dLVxU6OpOaIs3yRGU2ohWckoXkRbw8T7Ut5FnyGuSlm4ix+mF9CWy ka6lr9Amulb0PoIJClgC3KOnr8hqqQcjngNuLXTxEfqZfIJ8BN7dQD5iW8hydiFalpPn6DVsJPy8 xXKBqO9En+OEyNWshmyiWnqInqAf0fWkjb5B8XQ2lXyN+daybewA3nKt7CBfs3Im4Umb8IynxRyY F/jNTKI76Ce0lxwgdjqHPkf15GlpM565jJ6BDt9E1tIy8gB5gF4InTlT3g7cHdCH/HcKT9lMNtC3 se4NgFfYJej/HFZ7hDrxHkfIPrqYNDE1vQP+YoaeYQZm53PBFt6N30ayWVpFx9AHJDc8KU6BDUiJ /K28I/tDxQu69eKZG4hf7uU/hYEslZx4E/QBdoOyQDmFviGV0ZfoG6B0k2SXNtCF8GkIcdAmPopp 0e8BaSJbQTaw9yUHPJINWMMdtEXeIe2U5qCmx0ruo5ulazBqk1QDnd2iLJC1oJ/4AbuBr1S6SHFE MULhxpo3sW30PraNHKZK4kDeQh5lm5RrQLNldDeo90tOf7IYVGuSt+NNb8JvMaAFc02FjTsFi3YT U8MCHeFvi7e2g1JaTinMsRiU8pMWxWL4Wkuk98kSkW4EtZbD7n6Kt8Hfin6802ZY6GSdSqmQsZGk 1Gdql8IXN7XXXTbV9+bV/rLSQVWfSeVrJ5Pa85b7XurvnzRVdiquble42llY3S6Hg3/+3xr/XFY6 ftJU30t01OiG3LSjpzcAecVUPAH/OBqPG91QhjeTj5A5AOR0IfItyHcgP4JcRs7LBwB7AM8AgCfv 5uCtbN/+DOojATMBUwH3Aa4F3A1oAEwHcDx/zhpAG2AeoBPAx/G2OOZyZoF8hDrO3dCdOOLgT0+U 9GbkPkhsFiPQP0sk6FoZGAW0swqaWgPdrcPIPGh54896mnI1nI/xZ8nVBrJ8USjAyeV/+7PB5hTC FhWhgxPgArhh0bJ/3lzuQ+7PlQl8MUKC52r/vxdCsOj8L4DfTPipz1ELtM230j2smO2QDXKzQlbc onhGeYHymOoG1TH1Jo1Ns0M7WXtMd5fep+/Ou9YwxHCXsc54zDTd9IX5ZnPGsg6zSWROZpM8R7ET O6Ui9jqNjG1VKySZJN75+J0UMR1759g7yXyz3xz2m/1zZNK3hDn7/prZpDJ8//XNyjh/I0oXZg6z MnoJdqCsrqjQYtbJBi1xGNgRB69oZVhplcPqMB3rsVdjzr53LNXVZnt1kl5Aa2jaZi1QqqiBBgOR BB1CK2vpUHpKXeT9yGiR5cxXqkIDU6nHmEwStQfy9RqFSXW2y2iRWJHKotdpFOC+LZCScikBnvLX ASczWfU+ec9kVKuIrGMm07Eu8dzT3XhmfiAyglZUlfvTNjctUAZfK7DbC9gIe5Enny502G7It9ny b7BwI0Xpjv6vWQmdAp4tqNOwY5qjeqWT6LEMLOJ0TzKMacTb483pjoVXXb1g4dSpC3ZObJo5adLM maDtkf5PZQJ9qwN3LqibpuzQkw7LYf3xwhpdjaqCVijG68arGmiDYpp5Wt7k/Pnm+XlN+Vt1W1Wt tFWxS7dL1UbbFB26DtUBekDxOn1d8aH5w7w/5P/B/rn587wv8r+whzQqK1MZXYV4HbxVIzF19/WY epM0IFkLLOVpS2WFxAKS2cTLZpMkzVmycuWS5pUrmw998smhQ3/6k7wic+r7HzL/Rc0/fE9NP06n s2glraCzMtsyR/Dbmt1fyDA7o1BDdurrQn6TFrEMlnfYa+4q1PoKLVYTcWi8sk9pNbl9SqOLugKm Y41dx/q6zBZ7tRl7bcGuJ3rSfdiGZHajKyuqhoYvoJx85hwN/YEIsDUI3izLy1N4owEfjeusunzb 9quTsdjZ3bFY8uo2OSVJQXdhSDOJsaDnx9fdsRD+Ym72PtdMO/Cen4He5WRN3ayQEnYmr2NFAS1w x8Nd7sPE42jR36ZoUd8VWCs/pt6q2CJvcW7yPuLYadxp2a3crdqt3q3YLT/reDLcod4fPqg6qDzo PCQfUrgSpeXJCCPKkEIdCKt8TKsq9YXtrAKM9btjXT18mVhoNeif6OnrMr3e2MtXXZ0US7qQVg0l lRWRYECpwg+8whefXXsBVRqpP1dWWlUQAqqtLP+d2z2UXnPbjAuXBJV54SEhjyG/7uVZbZ9mnrlq SAt9S476/RFJzTyFJWX1e12uCjrmoflrKkrV+aNKLwj58y+4+INtXZmDlw25paSsNMKMbIKX6zlK DvR/yr4HfVLk13XNxG0NdiQjNFLq7rAaO/TK46WHrWm5rKDs8tDlhmmmWaFZhutNi0KLDC0FLZ4W UytcmNZUa+jBIa2KBwxPDtmZ2km3G57M2x5qN+wl+1J76L4h7aHfqv1W4vCpEhbVIkbZ9PiiuBQ3 OXwOyaHxpE2nuxq7Go81glnN1Zxepq6e013g2BzNktRDoQ2yNAJflKerQLkofpUVQznRsnQ8146+ TFp6x/evbf6qxGs+fu2yh+Ze4yydfLnPOnH6LdMmv2BzhU/es+3dWVK7b9dtz3+6dIwnOueeBVe3 mBVMUV+jZbJ+3rjrbp0Xco5Y/vK66xFGlhD9IKxXoUdpGHm4btY62kkl6nO7iqwFqnBhqdFUIuvC ftKV0KU0XYWHWcw6zDpFmiPdIt0ltUpt0n5JUxIblk4E5FKfVKBnRqXb5dMwK1MSUkkrS2NKr5a4 jTEa8yZ9K4zUWA1hOVbb3dhX2216Pd3ImYmrRyE6A1zV25s+VpupfT2HTDZSs4bm5KUSXAaNBvJA nZan7TYvJyKkKqecjJC4EmrNSZnUmVlDjclAMNqcKXO43ApG2wwWo9Ioy3MM5nJbobHAJTG1yume HKyD3NEjUtvZazLl3njI/7TPMzpWCuvwjsMgUWqSnLaz6qDHpjGq46Gip72RUEjoC/IM9J4k95Ji sqzuUm88QDzsQuelzuuczFnYYQRbfGjpmISla+JdgQ80x0vm2xfkz1e32G/Pb3Xcb97p2G7WBDzx ILGqIkYl/EP3TfoVekk/3UM9JVy1gH8aIXZCseR0HmTu28ZMV6MgnbAsYsHyOVbJshKEkGPMWQPA Wc1P14xcVP78l5nMW09/VuzSHZ9211OP3nrNsxaPI15OzyST6SGZGmYotP9z32+/n1ZfFJ/w+Irb n7ymdDj92u+ORsPxrJ5nfULPh8iMutE+Z0Bv1ZwwYoUfsg5roMN52Ho8LAcLgpNtk6X56vlyk9Rk a1G3yM1Ss2110eqC1aa2oEmp8gQsxKdXWfyFrrDpdHdft6m795xS/7ax18K1aZIW5OQCi4kO6I4g 1/IERg1sCi0j0fvunDO9ZUXTjBW2qtUTH/3kg6de+4r+gnpnXHDLxMSjr9E1LVsfvOW2zQ9uHjOm 97kDf6fVVEEn00dc0TqJajyZfqEv3u3vZT3YxwBWVeexe21yUUCPoJlJ31X0AesMXq9bQ9brt+i3 6J4gu/R7yUF9h05rtxWx/LyAU69TwKfwqPM86un5ND/IN64rZxJgjrP71oVNNFeDrZNhcKmU1Y3U L5wBqMkLOUvnLLVKWqo25JvHFtgZo2szMgsFA35KtbAD0kNup1ZXUGgwGdRGrVySKAuEtFr5GpfH ga2IwuVj5F3ovkzOFifIA3VLQoXG5zVU80fWUWzt8BwuPp7UuhXeIrfVe5v6Nnmpdqm02rbacKf2 Tml9wXrTevV6eat7a0mrtzW+tbA1tDWx1dEabA3vDO4M/ybxG8cuV5vvgO9A8EC4w9Xh6BgSCRXq LSp/UKmK6lXOYJSoylxJWOmu09B2p3tz2k9Y69ON/wFbcf6u5p+3w/nwiAb8DNV52pEuWXPjTWvu WTD/Hu2qOXNXrZo7907/jJl/enb3X6bPnr3gs/37/7KATr1h9cob5t2xgvbO+rcVTdN/+cvM8uTG mVvfePP++a3J+GPzn3zvP5+a8xiXWYm8lbMNhYgVLay7jGhYgdEWOIHYLvvQ1aGxdRiPaw6HdWqd rLM77ZP905zTtE3uJv9853xts7vZ3+Js0XIirTNsVW817LLv1tocPqLS+70qS0Ap+LnndF833/ce TgOwM5hZ8PPAbgsfhQijCW1WZckXRtMqiMHGVd0JNj7e1nUq83jmj40jll065NHXFKvmzLj132bN WCldO7rhq2cP/CPzWqYvsysz1xWpY5LGjcPKx7dzRn94I9aY9edwiuX+mK/OpDnGjMesR9k/Cy1K p54Umo7V9qTh2on3S3InccC74/pioPyTpzfg8UlHci5fJnrO9+vP4PT2obwDlE2S1rr0eGmaJMVY h5Z0eD/Tdif8bmbsitmSTGcwEip5vD6/vrSozARJGRIuU5WWpkzHurtPN3ZDNuA81fbY09nXwoGx 3oG1NGBeRLKQewEegBE/g2hhMPYNxAfwA3i/pEph6unpMfWoeKbuuZo0Uj98WyFwXMLswhfj+jBn VqJ+VW7JAxi6mT784X0PjkiVTKfuoVETvdtcFYtUZE5dUpKob5yRkafMGJksuTjzQ11xcW2+RCSL Pxr3uqN9CQ9ybzzi7e31RngpKg5mlIwEjapBoxHk3rpJsSGJEn/IazVpyqurhqtIqNf7eUkvSdBT CZrocWs6HP8wdadUXVV/JyMsLqtJq6KyWh7iS0XTrpSVROmpKI0mPcZqa2WerE5cYOrrSnen+2q7 GhebetP4N+CNgpywpxkOjYu7M92cDbnBrbaYeVqdLM8aDbiiA4WBwwK3tDgHZQVSHB/+FdOZCIVL JtTVjS8LR8rY8ECQr/5sD1W6Q0GnKxRyZs5IBZwaIb/wXNd44+FgPNpTESudcF/m+cqq4rJxneOL k6ODmdE7JpTGq/tCEfhuM0GrG0CrMWR53UWBjtF/Kw/5mLmjpLB7VKURF1G1qvKy2iq5IjlqRElY jgWNmkKLbNL7ikAmmdTFhjUEjdXJigq3PMxPjBVWfYUpPdbU151+B45H2tSdziA753XkHA3Oeb12 NPGkNxnOckROT/9EH0nIRgnFMTFHsXOY3Igso2GEny4bVZMsHvtRWThcUmsx1ZaFoyXvTyqpGl9G P22oTpVNfaMsFC6uKjTVlhZf8u5lpRUXpzL+Db5w3BsKRT1sjS8WDnrjMV9mJ702AG4C1t/XMsBX dDvXZbh/l68FrdSIUP+ibgTtwD18pBCS123TdBkjgUhommoam6+az1pULUztddhMsj3fqFFLEZ8S 1x55QX2UGIOjXfn2uOljsBG4yAR1xU8zwnQlOP+kP2jESYs7Wtwrzc/qhwFhyRGCixa8DJCGHj74 yLZHttlSpcU1GXsgFAzfMWZqSShA3/1n35lvnpctmWTz0iXNfS3+UMwXDgYDDIwRDB968cXOzLvY //v6j8rl8mtkFHm17v748LE1ax131WysedjRatqWejT5WOLJwG9GtVV3jNpf0+nYFzAXxwJlYaLU sppCx3C53lv2ZYXuS0sX+6K+oiv8hXdv/f4G24WXpK9NzzY1eZoqm6rn58+3N3uaK5urW+wt+UtN a0zr81fXrvasriyYn2pJrU8xI3ENL3TUBFLKobG4VelSxa1jLhg6RuVqAJHg0sO4CzHiXmt1Y9bC d/eYIGImCBknnhAzSFgjrD04JZE1bXab3QP1w8koAgBC2dqFZ+PNHgdwAhiCAUrYAuHdiiMCHakI RYvjLA+MVKTXBX99/R2Pz7qu9d3DZ18eetsEyRUoDciGWKjSbTD4b790+a8XN29/rv3M+xf9KlgW TA39wpKMTSmxjbnktusunW4ocG9/4OH33F63rSj1vjYYHVdsTVfdOuOSqaYC+1O/evrtgPCHrgVf LQZfpchNdRe6nCSlNec5rRaNkihdhSzp6sjrLvN0RaJliWJfxB00WMzMac3TauD7O1PWi4Jj3SSl vMhtLB6bSEO9c4XeDV8gx1cD5OH6ibPX62nESLg+UhlU+VkbmayqzM96RHb4CJWCDFHmN+eiKAPK WzL7T0nesmBQ0kqhCJsdCVGdFInEPJI28+ct0eJIKHD23UAomvBvyfyZGcbHwyGviY4L+/3hzAGL j4aC8fFU5qwYDIeDYR9bk/UR7u7/XL6b7UMEr5KsqrvqNsV6BU7R1odUv1HsVMEPiu227tce9Haa 84rcjsq8lIboix1xdvKkjdr6NGdMvu/dJyPfmY4W/5gqMQ+3dFpYqmRIZToPt11eB4nGJyljwfwq zkyne9Lc8mH1YKNET3cffOHeTGMv9xYH+AinoAGm4Mxjz5IoyzyDz4m5IAM3eFHWMHRu+ZY9N01Z cUJ9+StzHnrxnx8Pv+WCG5sn/s7rjnzyTPu+1FgcfB5xhZS002KeN7Vh6pqL3h03sW3No88ZTaol N05OhGsu3/t8psYTDYUCPuibhv5eeRWiDTrY2hP1V0JG83B3mYdbDBvutvMQL7fh3p3faSVxlxcG /Ywo85szHqc8ibhmGCHUUuBOouU71I+i1o/o5I/oMR7x0/HQANOQT0P+JO7PnsSN2n7k+5GrcRsf R183xjDiw4gy+HAaMT+/t40hnoqdIFHkV6LnFehzOXpcRlLQ/93diFhwf1Sw308Hzu5ML47luQa0 QWazik5IIePSSawFBFIcFQou5zYMGAAKvSdt29C+d936F154dtjTN7xF9ZmvXr9+Wzrf9mI0MqTB mt+QjkU3e5zr9/xq/b699967T7pjzLjMf7/5WqZ33PhJzkJuHGXiQ4CnwIpVTwfvlYH3SklL3bVr XPcZHw4+ZtxqeNiys/SgsTO4r1Sr1qkoYWb5Ut11upt0Ta5m1wrdY7rndTtd7R6tx34mpDOflIu/ Cx0ta7A02CZbJtt2RXbFOiOdMbWhgKT8qskFseiUMlMfD0mIaA6iaV09XSYcK4WMggY5Xzxn+s8p JfAf91iFscORE+EegjLbGInFvZGIM+pKrr1626sHN45aXpXvqw97o5njT5/IfEp9f7jkYTZd9nuT 4zvDYW/qsiteevChl8NhvaMy6r30SWp77z1q50FW2DSsfwt4LAQe+rB+CnjMiJ00gscU+I5ADT4z gs8UuFVTg9eMSF3gLzNuyYaA87Jx+Bj4S0XM4LVCYE8C/x3qR1HrB/f8iOc0kAQgirv4BCCKmXUA DWbVATSY1YFeJXgLD6KB/AkWRPj57Fb0K8HTosBfhZYrwecxxPuncC7rwWG2C9FXzmMDMg2h5oGf 8zkMxnOEiA9KWQLaz+emgTjh+QclttFqrt13/cv91PT23J01lVeVx6NHPM6yVGnE19e+Z+26PS+s 3/Cc1XP5+Cto3pvv0vyLx9IVCGWApX582B9C2PaVde0vbli/74Cg8RzQ+Brc+LkgTS/XT8R3Egpy C6BNgI3swvp2YS8OoM7v37m0+pFaQb0OshLySwH3Ya6TYj6452j7Dr2OgmINGDkZ0IbTxy7I7S7s zi6M2I96J+qdqHeirsUNBqcsv8GwoKQBrWNIC+HXuIU0TyGhAS4FRfFP2NqePh4Z4SQFn3KDGso6 XzyqmGNJSCx8kbBf6E1aoN67dSmio55Y8ZCm49dD4mngy6PUlphnPDtbWm/c1bLmAN1x/yO/jLjc SXuqgqpOfEIt/eTAsMiqZQ/cixfEatZkFstr2KPgj6Hkq/oZ4Mti3OD7wJvF5FrkCwBLUL4d+TOA J1A+hLwTNN6Lsh4SXYLvIhLEi3VyfRUADasoAaYQlDgJGnB68m8dTqLNQrlG+w7nAhkRugbQqwG7 MRn5ZOTrQKHd0Ie7Qe9O5J3INZg9iZhwArNr8CwPeLQcT7sP9ecBEmAynhvFXoXJMAR1e3DugsuH wEQ2SNnT032MEzZzzgvkPgwVmjDrt+AmQZCZx3ZBdSCzjJyr24HO2egSKo1b1da26s6nnqJJV2DY v6+9+fryoHORu/X2Ea3TD37T1zlh43in+9exWHq0hal33LHiiSdWrNh5tuzepaXjJpQmvQnjPU8u Hzvyh9/+7mz18IusBcFgjNugNvgmkxTTsQ9Rclt9MdIgeId/u6ihCuICPYOgWBHW+iN4rQAlH/gu BArrUc8DZysxwg0swZ2qktQBQwHcbuC0jH4xGOauPoRveeSNS3KW93KxfZhs1H92as7POr85r6R8 4HAgfGJJG627IBaur4t20PpoOJjo+z4WKy6mqVfjJYg6hp1e+dCCYYmpU+KRvjx/iPv5CHHdAcc4 aMN1IMXtL5E3Qx/Wkm/rx2DnS8lowBjYvpHY48koX458C9q3kBrorRhWHMM6+BcqecCWQpOVYK0K YCmoJpM8iu8KSAypD5QqgE6swWw60KsCrXxEEUaUAauEB8ilMwQOTGHuKqEVo5BfPRnB3Zd097Gu YyLWxY/u6XQPV3WcXEIFosBP8TZSiq/nOPeXIa/Br5aUcAygVrTgKhi5A78inNvVOLnzYzxO78kU RQiYy/L/YHbN4WzISFAfwUADNdKfn+6HUtruL+qIxhITkvEp6Xj0t04P9fu9pcXUGInNyNfFZ6Yf oC1TSsLxaOa/S2PRaOZDuiJzIpbMGmWuQW35Z8u/NgTsHk8gUKuVJEVl6YpME04uYY/fGdUj7kAh fUTmt/1OcnW9F5QECnqz/xwXZvlOjRYVmjhPyvgRcB3n4kngOwrgGBeksqsxe6MkjutwknGh1AOG y544BVOZBzGcFNw9IxWP0nFY3nBcwCTO4iwOJrPKG7JL4EYgy1p4hkRGQpetgi6LYcf/VH8V9FUI EIXOckNnhQBR6Cw39j8GPyqMdbnwfiZEXQi4RAXcSWAT+I7JS0xYqx18pIK+ClMVMN/Bax4Puzse Wm8a8mnIn4T9aIPc7Ud+ALka/JnGnGbMqcbKjTnacBqU4qkB4NJ4LsGbBGBjC9DOvYDLSCU/y3Ot JXQUF86cL2fqgYsnzIKIgQixhfLK2oaBE8NPoQ5+LZpz7njwPHq+10ebTkUi4URmbCxePjo/f3R5 PAYHruHJ696ihn7yxg17amnV+j17161rf76f4GDuC0E3yQZfLBgssM4YMyZz6shrmfFjpOfX3/NC +9p17ZwhpsJ3nil3QkNvrx9OmiCbzYDVgFbAToACFLeDGh6AAbRPgM6loAC/Vz2DFi9wHcBEhOUF 2aka2KOQzAjxCZ2GqxfsDkPZjNEq0A7He8xKAYizNUJEeWg6q9UQAOzua6yFEEPfQ1QHVB1oljvi m0VE8jzjyk+nI34iobhf5nRky1JlxcWZ+VfOnZbxuKKpmpmPjF76WLTAvLs4UnHl4nC0NMCaAtBp mT07590Qc/tT9mho/Ljg9CYvnegPxz1HKkvi6avf5nSK938ib8d3MhHyeH0UXwkZodfC4NkYSsrc Sj2CF3n0D7yHi3wZKz6KteJ/BIBKPlDMiB4q8A8D50Cjw9eA3YNs4R9nGL50HmoEKaDLuZKyECNU kA8TQCxR4tN4BS5CDKjzvwjXSiK0qDb1XJ0ijbhj53YwK40lVHO+jHKllb0Djm4bmYKqL6yOpEeF qUz9tROqItW0MhZLjbRkDjhSiZKEgwnu8UZjvrPLpbsROvRye3c2OtTvG4ZHU+rMrGd7FCbwz8r6 MmhnLyTLBykpxvos4AHuRzlh2WWUzVitFRKpBSWcSK1Uh0XoSTHKQXypzrU6vmFAr5swj5nciGXr yCLgeDQ2fRp8wq+y4Xt18xA2ZxjBHdwH41fbHoqDgQ3hDB7zgfCAEThrgBb8dJBjC3FBY+A9lZKz aVLp8LzCqUOKd60beUc04PIaXW337oqXTTVrL0xNoke8G9pa540xMKYfE4g8/UXz0hk2ZRhypWaq 4O+Xfb47GhitY1Q/fsHGp4Q/9hM9UmR1fQK0KAE10uB6P0rcd3cJj51TQsapVAWLo4VmsyF1gRoh UCNLn26MCoEqFGMcmIfTxCdo4gBFoqALQhi1p3M0QVR/gChC73DPievpJI7oggriCpe7Rli3iPeA QvyiKneSyl3vchJJe2ZfVjosr2hKcfGue3d4TT6316craF+3q6RkikVdn7yMHnFvaNt4w8WcKnWR 6O7Pl70aUMqaoC8QU0py4PXmL56ORuv0kqQbs7B1532QkY+kQ+wtxM4c8PuW16eQlkFfFEN+QrA5 Dvg/FmFztFirATqB0ThkwwBdj3Oc6Mt7etBSBB2UBC2zY3SQH376IcDayEOgph9pkuDDAITDuK3n wXsTD7Bmv3zI2euhPIiDm9pyxL04HcQNrZCZwS1suqqgsF1nkKWP1Sa1Qo3/t6PPozRjAvo5vZGx jzQmrUItSUNRkaTPXUatiulV9DWjQZKsslmr1rDMjf+ClbVQiRL5XtrC/irv4PxNWkCXFHikWOw6 j01YsNt8hfxbryjkJM79SUhJ+rx+buAcWD2XuZ9GDNAEsgb8Q2i1CuqAY/jNP+eQn1Pmp++AGD+s DIQB+Y32wAdCgxpmqgocz2lNIIDSopNUqmF6LJieUuUDC8Y4oTTrJaV6aJ6BUnmZy6hTgyqZmrw8 ygoURo2sU9DWf8GCVlgs6CL+Mhtx9vuf/rgq5F8tm0Af7klbsfcDX59xj4D7hTFQshx+4VCcTkbD Kx2L79DH4Vw0kVwKe30Vvor/BZmOL+f2iwdQ0JrLGf5LF7iOjL1swuSLR5eMumnpzdfPvjnXwlu3 A54BHAK8A/gY0APogyLUAxBNoqWAWsAlgGsBCwC3A+4FbAM8AzgEeAfwMaAH0IdF6wEuQCmgFnAJ 4FrAAsDtgHsB2wDPAA4B3gF8DOjpz/3hPci5MsW+/7xeOqjOP3M8v/+QQfXkoDrXzef3Tw+qlw+q 8//jd37/ykH1qkH1oYPq3LqcP756UH34oHr9oLowjefR46JB7ZMG1a8YVJ88qD5jUB33QT97v1mD 6k2D6rMH1ecOql8/qD5/UH3BoPqiQfXmQXUhO+etv2VQ+y9/Xve5BtXFZ+L/DwYLwzgKZW5kc3Ry ZWFtCmVuZG9iagoxNjQgMCBvYmoKOTc4MwplbmRvYmoKNDAgMCBvYmoKPDwgL1R5cGUgL0ZvbnQg L1N1YnR5cGUgL1RydWVUeXBlIC9CYXNlRm9udCAvSkFMU0xCK0NhbGlicmkgL0ZvbnREZXNjcmlw dG9yCjE2NSAwIFIgL1RvVW5pY29kZSAxNjYgMCBSIC9GaXJzdENoYXIgMzMgL0xhc3RDaGFyIDM5 IC9XaWR0aHMgWyA1MDcgNTA3IDUwNwo1MDcgNTA3IDUwNyA1MDcgXSA+PgplbmRvYmoKMTY2IDAg b2JqCjw8IC9MZW5ndGggMTY3IDAgUiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAFd kL1uxCAQhHueYstLccJ2ijQIKbroJBf5UZw8AIa1hRQvCOPCb5+FOBcpBQUz87HDykv/1JPPIN9S sANmmDy5hGvYkkUYcfYk2g6ct/m4Vc0uJgrJ8LCvGZeepgBKCQD5zsia0w6nRxdGvCvaa3KYPM1w +rwMVRm2GL9wQcrQCK3B4cTPPZv4YhYEWdFz79j3eT8z9Zf42CMCN2Ki/alkg8M1GovJ0IxCNY1W 16sWSO6fdQDjdCS7VqvuQTNx39b8r1PQ8sVbJbulxG3qHmrRUsAT3lYVQywD6/kGcLlwGgplbmRz dHJlYW0KZW5kb2JqCjE2NyAwIG9iagoyMjYKZW5kb2JqCjE2NSAwIG9iago8PCAvVHlwZSAvRm9u dERlc2NyaXB0b3IgL0ZvbnROYW1lIC9KQUxTTEIrQ2FsaWJyaSAvRmxhZ3MgNCAvRm9udEJCb3gg Wy01MDMgLTMwNyAxMjQwIDk2NF0KL0l0YWxpY0FuZ2xlIDAgL0FzY2VudCA5NTIgL0Rlc2NlbnQg LTI2OSAvQ2FwSGVpZ2h0IDYzMiAvU3RlbVYgMCAvWEhlaWdodAo0NjQgL0F2Z1dpZHRoIDUyMSAv TWF4V2lkdGggMTMyOCAvRm9udEZpbGUyIDE2OCAwIFIgPj4KZW5kb2JqCjE2OCAwIG9iago8PCAv TGVuZ3RoIDE2OSAwIFIgL0xlbmd0aDEgMTYyODAgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3Ry ZWFtCngB1Zt7QNRV3v/Pd+4wDHOBAWSAGRwYseGmCIIajNwU8YYwBigKAgp5AVG8Xygri7La7rVd 7GYXdmsYS7GrtVa7W1ZbbbW129puu1tttnbbbTXk9z7fDx/Tfk/P88fzzz7Aa97v8zmXOd/POd8z 44Dre3rbhVn0Ca3IbV3d0i3Ur7wjEF/rhvUeKqd3CKFPWt69YjWVz7tEiIjEFas2L6fyJIh5Q0d7 SxuVxXfQgg4EqKzIBmkdq9dvonLeXlle1dU6Wp/3Gcqxq1s2jT6/+D3KnjUtq9uh+CqR/TzdPe2j 9Uo9utu6u9atV6tFwQ3Q7nPrI+8QCqIRikfYxC+EUWigOQIj2q9VLhY61Mp6/Z1De/71sn2pddo3 YowJASGe/Pu2V6S+tPvBK0+dHL4y4jPjARQjMAJ9oZ/xzuH3hIjce+rkyb0Rn6kjjVaqEhGO0HqG NJc8FpGgzILZxeZiNhex6WOzk80ONtvZbGOzlc0WNpvZbGKzkc0GNr1s1rNZx2Ytm242XWzWsFnN ZhWblWwuZNPJpoPNCjbL2bSzaWPTymYZmxY2zWyWslnCponNYjaL2DSyaWBTz+YCNgvZBNnUsall s4BNDZv5bOaxmctmDpvZbKrZzGJTxWYmmxlsKtlUsClnU8amlM10NgE2JWyK2ZzPZhqbqWymsCli U8hmMpsCNvlsJrHJYzORzQQ2uWxy2GSzyWKTycbP5jw249lksBnHxscmnU0aGy+bsWxS2XjYuNmk sElmk8TGxSaRzRg2CWzi2cSxcbKJZRPDxsHGzsbGxsommo2FTRQbM5tINhFsTGyMbAxs9Gx0bLRs NGwUNmLUKCNsTrMZZvMdm1NsTrL5N5tv2fyLzT/ZfMPmazZfsfmSzRdsTrD5B5vP2Rxn8xmbv7P5 lM0nbD5m8zc2f2XzFzYfsfkzmz+x+ZDNMTZ/ZPMBmz+w+T2b99m8x+Z3bN5l8w6bt9n8ls1bbN5k 8wab37B5nc1rbF5lc5TNK2xeZvNrNr9i80s2L7F5kc0LbI6w+QWb59k8x+Ywm2fZPMPmaTZPsXmS zRNsDrEZYnOQzQE2j7N5jM1+NmE2g2xCbB5l8wibn7P5GZsBNg+zeYjNg2weYLOPzf1s7mNzL5t7 2NzNZi+bu9jcyeYONrez+Smb29jcyuYWNjezuYnNjWxuYHM9m+vY/ITNtWyuYXM1mz1srmJzJZt+ NlewuZzNbjaXsbmUzSVsdrG5mM1FbPrY7GSzg812NtvYbGWzhc1mNpvYbGSzgU0vm/Vs1rHpYbOW TTebLjZr2Kxms4rNSjYXsulk08FmBZvlbNrZtLFpZbOMTQubZjZL2Sxh08RmMZtFbBrZNLCpZ3MB m4Vsgmzq2NSyWcBmPpt5bOaymc2mms0sNlVsZrKZwaaSTQWbcjZl++W7ZbxrDqcUu/GeOZzihFxM pYvCKVNQ6qPSTpId4ZQoBLdTaRvJVpItJJvDydPRZFM4uQyykWQDSS/VrafSOpIeCq4NJ5eiQzdJ F8kaarKaZBXJynBSBVpeSNJJ0kGygmR5OKkcTdqp1EbSSrKMpIWkmWQpyRLq10SlxSSLSBpJGkjq SS4gWUgSJKkjqSVZQFJDMp9kHslckjkks0mqSWaFXVW4hiqSmWHXLJRmkFSGXdUoVYRdsyHlJGUk pVQ3nfoFSEqoXzHJ+STTqOVUkinUvYikkGQySQFJPg02iSSPRplIMoEklwbLIcmmflkkmSR+kvNI xpNkkIyjoX0k6TRmGomXZCwNnUrioX5ukhSSZJIkEhdJYjhxLpI1hiQhnDgPpXiSOAo6SWIpGEPi ILFTnY3ESsFoEgtJFNWZSSJJIqjORGIkMYTHzMez68NjaiA6Ei0FNVRSSIQqygjJabWJMkyl70hO kZykun9T6VuSf5H8k+SbcEKde0j5OpxQC/mKSl+SfEFygur+QaXPSY6TfEZ1fyf5lIKfkHxM8jeS v1KTv1DpIyr9mUp/IvmQ5BjV/ZHkAwr+geT3JO+TvEdNfkeld0neCcdfgEt5Oxy/EPJbkrco+CbJ GyS/IXmdmrxG8ioFj5K8QvIyya+pya9IfknBl0heJHmB5AjJL6jl81R6juQwybNU9wzJ0xR8iuRJ kidIDpEMUcuDVDpA8jjJYyT7w3EluOhwOG4RZJAkRPIoySMkPyf5GckAycPhOJz6ykM0yoMkD1Dd PpL7Se4juZfkHpK7SfaS3EWD3Umj3EFyO9X9lOQ2kltJbqEON1PpJpIbSW6guutplOtIfkJ115Jc Q3I1yR6Sq6jllVTqJ7mC5HKS3SSXhZ0tuPZLw85lkEtIdoWdy1G6mOSisDOIUl/YiRcbZWfYWQDZ QbKdum+jfltJtoSdbWiymbpvItlIsoGkl2Q9yToauoe6ryXpDjtbMUoXDbaGWq4mWUWykuRCkk7q 10Gygma2nLq3k7RRy1aSZSQtJM0kS0mW0EU30cwWkyyii26koRvoiepJLqDpLqQnCtIodSS1JAtI asKxAVzY/HCsTOu8cKy8YeeGY3dB5oRjsyCzqUk1yaxwLN5IKFVUmkkyg4KV4dgdqKsIx+6GlIdj d0LKwrF9kNKwoxIynSRAUkJSHHbgfYFyPpWmhe0NKE0lmRK2y/uoiKQwbJ+B0uSwvR5SELY3QvKp bhJJXtieieBEajkhbJcXlhu2ywMphySbumfRM2SS+Gmw80jG02AZJONIfCTpYbvMUhqJl8YcS2Om 0mAeGsVNkkL9kkmSSFwkiSRjwrYmjJkQti2BxIdtSyFxJE6SWJIYEgd1sFMHGwWtJNEkFpIoammm lpEUjCAxkRhJDNRSTy11FNSSaEgUEhEYsS5zS05bW93D1jb3d/CnwEnwb8S+Rexf4J/gG/A14l+B L1H3BconwD/A5+A44p+Bv6PuU5Q/AR+Dv4G/Rq9w/yW6w/0R+DP4E/gQsWPQP4IPwB9Q/j30ffAe +B1417LS/Y5lgvtt6G8tq9xvWXzuN8Eb8L+x+N2vg9fAq6g/itgrltXul+F/Df8r+F9aLnS/ZOl0 v2jpcL9gWeE+gr6/wHjPg+dAYOQwHp8Fz4Cno9a6n4rqcT8Ztc79RNR69yEwBA4ifgA8jrrHULcf sTAYBCHwqHmz+xHzFvfPzdvcPzNvdw+Yd7gfBg+BB8EDYB+435zlvg96L7gHfe6G7jWvdN8Ffyf8 HeB2+J9irNsw1q0Y6xbEbgY3gRvBDeB6cB36/QTjXRs5131N5Dz31ZEr3Hsi73dfFfmA+1JtuvsS baF7l1LovjjYF7xooC+4M7g9uGNge9C8XTFvd22v3r51+8D297cHHIbIbcEtwa0DW4KbgxuDmwY2 Bp/QXCaWay4NTAtuGOgN6npje9f3ar/uVQZ6lfJeJbdX0YheW6+nVxu1PtgTXDfQExQ983v6ekI9 uqmhnmM9GtGjRA6NHN7f40qphAa29VhslWuDXcHuga7gmuWrgxdigp2FK4IdAyuCywvbgu0DbcHW wmXBlsLm4NLCpuCSgabg4sLG4KKBxmBDYX3wArRfWFgXDA7UBWsLa4ILBmqC8wrnBuciPqewOjh7 oDo4q3BmsGpgZnBGYWWwAhcvkmxJniStTU5gbhJmIlxKaa4r4DrmOuHSCVfIddildVgT3Yma8dYx Stm8MUrXmJ1jrhmjtSa8lqAJJIzPrLTGvxb/x/h/xOtiAvHjsytFnC3OE6d1ymuLm1Mnr21/XEk5 6YR89VrnxHl9lVanYnW6nZoKt1MR9mP2E3at81nbazaN1apYrSNWTcCK5tZod7RGPoxEawPREyZX Wi1ui0Y+jFi0cQELInLy46Lm11VazW6zJlhinmfWBMwlZZUBc1ZupdAqHgW/+bFBtCY5G8XprhxS xP44Ra8MKdcO1tX6/dVDJrGgOmSavyikXB5Kr5WPgZrGkOHykAg2LqofVJSrGwYVTVldKLa6ppHK l+7ZI0qTq0PJtfWhvckN1aE+mIA0IzAieTBOlDb4l6zrXef3r1+ChyXr1vvVH5SUXlnCFyrws249 yvIbgrKQNT/+Rc3Qbuk6fKnD0Og/3uX/QI3yf2CO/+FTHBTYovXTRzSXiDbNLnAxuAj0gZ1gB9gO toGtYAvYDDaBjWAD6AXrwTqwFnSDLrAGrAarwEpwIegEHWAFWA7aQRtoBctAC2gGS8ES0AQWg0Wg ETSAenABWAiCoA7UggWgBswH88BcMAfMBtVgFqgCM8EMUAkqQDkoA6VgOgiAElAMzgfTwFQwBRSB QjAZFIB8MAnkgYlgAsgFOSAbZIFM4AfngfEgA4wDPpAO0oAXjAWpwAPcIAUkgyTgAolgDEgA8SAO OEEsiAEOYAc2YAXRwAKigBlEgghgAkZgAHqgmz6CRy3QAAUI0aYgppwGw+A7cAqcBP8G34J/gX+C b8DX4CvwJfgCnAD/AJ+D4+Az8HfwKfgEfAz+Bv4K/gI+An8GfwIfgmPgj+AD8Afwe/A+eA/8DrwL 3gFvg9+Ct8Cb4A3wG/A6eA28Co6CV8DL4NfgV+CX4CXwIngBHAG/AM+D58Bh8Cx4BjwNngJPgifA ITAEDoID4HHwGNgPwmAQhMCj4BHwc/AzMAAeBg+BB8EDYB+4H9wH7gX3gLvBXnAXuBPcAW4HPwW3 gVvBLeBmcBO4EdwArgfXgZ+Aa8E14GqwB1wFrgT94ApwOdgNLgOXirbpfcolcLvAxeAi0Ad2gh1g O9gGtoItYDPYBDaCDaAXrAfrQA9YC7pBF1gDVoNVYCW4EHSCDrACLAftoA20gmWgBTSDpWAJaAKL wSLQCBpAPbgALARBUAdqwQIwH8wDc8FsUA1mgSowE8wAlaAClIMy0fYffkz/p0+v4T99gv/h80tY ukT+xZAQp68/+4+ExHxxoVgn+vB9mdgjrhfPivfFMrEL7laxV+wTD4mQeE78SrxzTq//ZeH0Zv1q EaU9KAwiRoiRkyPHT+8DQ/rosyLXoxSj83wfGbGNfP6D2Oenrx+xnR4yOESk2teieQOjfaUMj5zE 66tBWEYKZFmzG96qPtMXxjtPP3r6gXMuYL6oEY1ikVgsmkSzaMH1t4kO0YnMrBSrxGqxRi2tQd0K +OUoLUUrnCWq/75Vl+gWXaJHrBe9YgO+u+HXjZZk3Vq13Cs24nuT2Cy2iK1im9g++rhRjWxDzRY1 ugk1O8ROrMxF4mLVsVJkl7hEXIpV2y0uF1dgxX68dMWZVv3iSnEV1vlqcY34Mb/nnJprxbXiJ+I6 7IcbxI3iJnEL9sVPxe0/iN6sxm8Td4q7sGdkjxsRuUt1N4mbxVPiRfG4eEQ8Kg6ouWxFbikjnJfl aqa7kYNtuOZdZ82YsrnxTLZ2IBvyuvtHr3sT8nfxWT02jOZRZm8XWsrs9I+ugxxl+2iEM3Etroz8 99cpcySv4ZpzrpN7/E9RecUyT7cjX5wZmbObELvt/4ue3eJsf5O4A3fg3XiUWZXuHnhyd6n+7Pid Z9ruVevuFfeJ+7EWDwjpWCmyD7EHxIO4tx8WA+Jn+P7en+2o9hHxc3XlQmJQhMV+8RhW8oA4KIbU +H9X9yjOjh/22T86VvjMKIfEE+JJ7JBnxGGcNM/jmyNPI/bsaPSI2orKz+NvKY+orWTt89hbL+GE +rV4WbwiXhMvoPSq+vhLlF4Xb4g3xTuKBe434hM8DovX9R+JaDEdf3j5BFbjdrFELAnMaFu6pGnx osaG+mBd7YKa+fPmzpldPatq5ozKivKy0umBkuLzp02dUlQ4uSA/JzsrM8OXnuYd606ItdusFnNk hMlo0Ou0eGebWeGtbPaEfM0hnc87c2aWLHtbEGg5K9Ac8iBUeW6bkEf2a0HVOS0DaLn8By0D1DJw pqVi80wT07IyPRVeT+houdczpDTW1MPvKfc2eELHVT9H9TqfWrCgkJqKHp6KhI5yT0hp9lSEKjd0 9Fc0l2dlKoPmyDJvWXtkVqYYjDTDmuFCGd7uQSWjWFGNJqNiyqBGmCzyaUPa9IqWttD8mvqKcldq aoMaE2XqWCFDWciojuXpDGHO4krPYObh/quGbGJZsz+qzdvWsrg+pG1Bp35tRX//7pDdHxrvLQ+N 3/JRAhLYHsr0lleE/F5MrHrBmSdQQvp0m9fT/43A5L3HP8Osz4q0jEYM6bZvhKyUl3gmTSGlhb3A 3DBDXF9qqpzLlUMBsQyFUF9NPZU9YpkrLAI5/oaQplnWHOYaZ1DW9HHNme7NXmS2wlvRPPqzoSMh 1LfMk5WJlVV/0kO6dNR7Qlpf87LWDqkt7f3eclwhcinq8KFNOUygZTSZFYO5OWjf0oyL6JRpqKkP 5Xi7Q7HeUso2AhgkvaKztl7tQtGKUGxZSDS3jvYK5VSgL7ZIRb9cGDlBOZa3pv6QyBs5NjjJ49qf JyaJBjmPUFwZFsVX0V/ftjzkbna1YX8u99S7UkOBBqSvwVvf3iBXyWsLjT+Gp8MXFlDthWv7QWtu jMsOGdNNnnqNS9sgVwsBTyUevKXTUGELGagoV7R0mqdecQluhmcZbSHdOeOgoE0vm4nOUHQtm+lK xeZWv/6bKbnoAjCNkOnMnHSYhP77OdHz/OjUqLWc0HhPRXv5WRM8Z1AU1AmOjvZfz1MjczGaDEzB JJdzpryGrEwNvAfVppAG16mG5ComeEJivqfe2+5t8GIPBebXy8WRuVbXt7rWKz8YVFd7dJfUnVOi +kKqC4nU6rp6LsjPbEKVfnVd5bKq5Rlq+Uxx5g+qq7ja02/yVtf2yyf3jg4oPLiDsDgGX1XLlYWO SbhZK3FQeitbvB6bp7K/ZWikb1n/YCDQ313R3DEFt0G/t6qt31tbPw1rqd73211b5FM7RLVSXVea lYmzp3TQq1xeMxhQLq9trD9kE8JzeV19WIMPRZtLGwbTUFd/yCNEQI1qZFQGZROPLMiRFqBgUtu7 DgWE6FNrdWpALbfic1k1Ro0QU0TrkIZiNm6nQUxHsYAaa8AX7rCEDiwBzuEKT5tcnm0NHf3NDfLm EnFYSvwoIcVbLEIabzE+yjVEhSK97aUhs7dUxktkvITiBhk3ektDSpyC5AzhTOpv9uKcwparx0fk DdgdNrn7NemeoZGRuvrUo67jDam4JRaDxvpQhB+vA/r0WWg3Q9KM8IxQX2uLnIcI4laXd2ZVawPu BR4QTapCERghYnQEtKhU+8jtiE6tWBssoNq/D4VQX0OowS+ftL5TzsjjsYXETO8ULDuNqffJJ8pp 6Hd4J8qNjaahyPTdUiIwN4EPqdWIC0U8GQ5ceUXGKMy81Yuq1mYPVkAnWmux1eksjZTrhkg7jkSd r10l0jVaKeRladPNlshQRDYGxI/05mwMiB9jA5IiL14t7R5tgOe2hcyYke+sVI52QHZQVSXngp/d mLxs+pwcpmZILPBuwtEoJ60+lRHVIUt6VQsOf+pvRsRbyJ0xlildhuQYRyhqlFcehbxr0+uGRh7w bpYnAH9lZXrli4PcmMJ1CBtbNPT/MBBa5M/KNP0walHD/f0my3/dgfJlspxROYqnAq81QuiiVVZC HwE9YAXIBe1AxlsxIfq/LEJE4d9aCSinqv/fRYu10SNiFPQfW4S4W5mnMWj2aW/TLdXH6pP0T6Je nF6nfQP/gtOiXZGYI+aKRU8JCz5qiRNTlMcfd5aXm7KMz+BjFI3w4IMYk1CUsoBVp7EcTEws8R7M N+zR2quGlKzHSox78BFjyfAHw6/mDH9w3FGUc1zJ+cOHH3xo++JVe1FO3odvfTghV7Gn2lViozVG Y6zBOzZbkz/OV5CXN7FYkz/J5x0brVFjkwomF2vzJqZotGhJkWKNLCvaN75r1M4bNmh2eEsW5ulT Eq2xFoNek5TgyJqWbqtdlD4tO9moNRq0epMxY3Lp2OpVFWPfM9qTnXHJDpPJkRznTLYbh9/XR5/8 Uh99qky36tQNWsPUxSVp2lsiTRqdwTCUkjDmvKmpVQutMTadOcZmjzMZHfaojPLFw5c5k+QYSU4n jTU8B2lZOXJc+7Teg1fvmeLWQ2IWfgMVb9XMaZ6l+HtLlOUlSlmJMqlESStRSoY0ZYHYqKSkqC35 yoX5SnW+MiVf8ecr+ag40C0UD5ZyaOTYfqsyB/rxQQwjcqOUqKGRk4FIFKKmjOTm6n04GMMxDeVD inNQv1SUHC8Zzba/6S2/v6npwyb5hQWwkZs4IbfJr1AedfmTinXIo8E5mleZcSOl2jgpG6lGMTYF qS7WaJ+etGrf2ppti89Ptzmy523ctyZ9diAz2qjTKEZzhNlXMCev6bLgeG3i9DkLJ3Re2+B7JL6g sTR9VkVJYmrJkpLAkuJk5d7gXZurMmat6r9vSe3Dd165YlqE1WG2WGOiHYk2U7Q9enbfQ4utKQnW ovYrmqcsLU2zxLsdFz3SmZVb0y739SNCaO/Sx4ts8ZdAWlqKkpaspCUpXpeSlqikjVF8CYovXhnv UMbbFYfHpszJlb//s8js5yrCY0YaxyOP+1EDPSHzqqpF1X/uj1L12/1oOH5IYw9EpyTITglm+Wi2 jy4F9K39GBN6WA51VvywHALlE4EI9NiLvR3jGFJK9nsXjLcNKcZBQx2WZ2LJ8FElp4k+pjrqP+LP +0L1L/jlwgi/oq6X+pAuVyVV3hSTsN1T7UaDweeTfnI6rZHTrt4UdxkiLcbhxcYos8EQYTEp0Sdj 4qP1WoM5QjlPF+VIcCR4HIZPTdER+vKYRJvRaEuMcSTaI7Tv3hips6TE2xNsUYZntTqdojOaDaeu ibAnymz3INu361NFsbghYBlfoPhTlPHJii9FCci0qps6oMQlIAVxtiiLMjtOpiluSJN1IC8d36Jo NNdFT+DXS2YkC8kxI4kBMxJvthcWeTxFriEl+0BenCG71lY0pGRwhhxFRcdxSkCUHL//Q//RoqIc 7F/kSc1Rk8zROcmZHFOszR/dsKPng0GmRu5rozFVnhy36yOsEcP50U6rURtpjTp1QWeRIyl//qTz W6omRBnN2Md6U8LUhpVTl+xpyo6bcVnXUU2eyWrWz3IkxUQYbSlxsSnx8RYlcvF1m5b5/XOmjB2b MdbkSHFa42zRzjRvQv7iLRXFW695tOftCIdL5m8FToLrkL96RX9INCJlSXInNioTTEjZBBuSMEHN 2wSZtwlDmvxA5Nxa39y5CTHKHKT444APTXwePAQQ9QW00S7Z0yV7utSeLtnTNTSiblkXMv+4MCEi D4vH8FwienTLQtXdDj0ciMEyRE8NYJCpAblsOVMVdSsjIDUQKYNT7VPtcQVDijkQWVWb+ZXHo6+q jUNxUL9QnjDyOC+yYYmwLDhj/H65TH4cN3KJ/H5HPOIyYncUqaumLtvomWPIn1Qgl4bOeJwxZ87z M5Ezx37x94voTNFqryte//DK6Wvrp1hNBm20JSK/tqu8tK18rL9285ytWCujwRwdsba0s2pc4qSa /CktsydGYmG1GoMpZkqwK9B4+aIsT3Hj1LKu+VlKT8M1yyc7k93R0bHJzrQkT7pnbHFw4uT6wFjc Hs6YMVbj2EDD5IyqArc3w6u3uuKs8fboGKxzdl3vjPM7a4rMGmP+/JU48XNHTmrf1MeK83AunQpM Sc9WfFnKuEwlbZyS5lPSkxSfS/GqB1R6gpIer/jiFJ9T8cUqPpuCJU7TK2k6xe9S1NPKQadVVlwC TJw8xOJGF1HqQaxdXFJ2Nv4q47tAMlrY5O1nkzvCZsMxZotEA5sNe8D2JH4/OE7o6KzSDY28Lm8/ 6LFAJKp1utycca5sdYF1/lSbLTJ1QWRQlMiVdRTlHZ840e5QiuQS5tGS+ifa847KtVVfPoR6B35/ UKlOwQu41z76QpJv53NrsvL9WRWneJVU7ZuxjutMsZ4xCZ4Y4/CnUTaLXmOINCpv6GNSMlNSJ6TY rrM7T9+tOb1IeUDpTvWdPmEym3Q6PCg2gy0lISZlTLxF6zBFmfCibon47kWv5pPhKfKOa8cddxPe vRSL5wKWcZOVcQWKz6T4tOqJdUBmNqBMHj2VoCceM2OrT34CmcrAxs9AKjPkfZERPW9i18SdE7UT k2V6k2V6k9UbLlnecMlPaPLwEfbH8kUAt9rhx1EtAjFwB602ZXZMTAJunMxAVOaUrz1jlbFj9Zk1 CefcOk3H5a2T41dsb4/eMUea3qKbh443md3v7xZ6p/P9zYG3Sb58O24ieaw5kfRUe4F6R2lvquwb XDVtVV2BFW+BtCazMfK8GZ0zy7prssfVbFt4fr0vKcGdrDnfZI3UxzpOJ3urcrv2dRUpezvu6Zpi H5MQHWVPdNhddtOY5ERP+YpZxUtL3FGJ6RprqicCh2Baxukb9Zr8lv6REX6Xg98ry/83jX+J4R54 FJl3i3cOCTvOrkh7qjLbbkP6cKggVfS6uB97VC1jL0K/VffiervisyvY0qO9bLKXLMpe0BOyl1pt Nkcps3tx19gUg4xjMVKRdnVlU+V7JfUFGfruY6gS6h8a4ZmgH8u2qmJM6LHHsXhOvR1vVfcn1pjl zj8+UT3E/NjlchXwzkludxb1HZNRidYi+b6CyUoq1kB9UZYvLY9q9RGG09l6a3xa4lifXWNQPh2+ PiZGHxkdofky2mk26I44kl1jok+9GmWN0BosMRbdrIy0GLyuGBxJyJ/MoEPNpMA7dLzLnzV9du3s Un9Zy6rOZT2d/w/wIekuCmVuZHN0cmVhbQplbmRvYmoKMTY5IDAgb2JqCjc5OTEKZW5kb2JqCjI5 IDAgb2JqCjw8IC9UeXBlIC9Gb250IC9TdWJ0eXBlIC9UcnVlVHlwZSAvQmFzZUZvbnQgL1dHTUZQ SCtUcmVidWNoZXRNUyAvRm9udERlc2NyaXB0b3IKMTcwIDAgUiAvRW5jb2RpbmcgL01hY1JvbWFu RW5jb2RpbmcgL0ZpcnN0Q2hhciAzMiAvTGFzdENoYXIgMTIxIC9XaWR0aHMgWwozMDEgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAzNjcgMCAwIDUyNCA1MjQgNTI0IDUyNCA1MjQgNTI0IDUyNCA1 MjQgMCAwCjAgMCAwIDAgMCAwIDU5MCAwIDU5OCAwIDAgMCAwIDAgMCAwIDAgMCA3MDkgNjM4IDAg MCAwIDAgNDgxIDU4MSAwIDAgMCAwIDAKMCAwIDAgMCAwIDAgMCA1MjUgNTU3IDQ5NSAwIDU0NSAz NzAgNTAyIDU0NiAyODUgMCA1MDQgMjk1IDAgNTQ2IDUzNyA1NTcgMAozODkgNDA1IDM5NiAwIDAg MCAwIDQ5MyBdID4+CmVuZG9iagoxNzAgMCBvYmoKPDwgL1R5cGUgL0ZvbnREZXNjcmlwdG9yIC9G b250TmFtZSAvV0dNRlBIK1RyZWJ1Y2hldE1TIC9GbGFncyAzMiAvRm9udEJCb3gKWy04NiAtMjYy IDEwODIgOTQzXSAvSXRhbGljQW5nbGUgMCAvQXNjZW50IDkzOSAvRGVzY2VudCAtMjIyIC9DYXBI ZWlnaHQgNzI4Ci9TdGVtViAwIC9YSGVpZ2h0IDUzMyAvQXZnV2lkdGggNDU0IC9NYXhXaWR0aCAx MTE0IC9Gb250RmlsZTIgMTcxIDAgUiA+PgplbmRvYmoKMTcxIDAgb2JqCjw8IC9MZW5ndGggMTcy IDAgUiAvTGVuZ3RoMSAxNTY2MCAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAHVe3t8 VdWd71r7fd77PJJzkhByTg55QEAIISRohC3kJIEYCAHJCRiTADGBigYkgo8qWsekVMEZLdDaVuuj MLbVw5FCdFqkVoGq6XRGi48Wh/ZSoJY4jpe2DJKT+f7WSRDbzr2fO/fOH3efrL1+ez32Xuv3Wr/f b61s3NDbyZxsC5OZtWpdRw8Tl/tBZG+uum1jOP2sGYxJPTf2dK1LPxubGVO3dt10+43pZ88TjE1h 3Z0dq9PP7CLymd0oSD/zGcgndK/biH50uRXc+m+6ZdVovSeO55p1HZtHv89+hefwzR3rOpHjuhrf ZxN6brl1o3hkVU8g7+7Z0DnanqO/8v3PP9u/yTha5bMGprN6pjKJmWwquw4z+ZiPYL5c1Kt4cfD9 nDZP1R9YDn2Gse93HMii/JWffPeNkcbh08Ye/St4tIv2VIH36l9KzWLM+N1I48hmY8+lGqqlK9+y L335GW49482oeXqAO5PT8749wDOsZF7eLUdKIzcjrUO6CekLSGuR1iB1I3Uh3YjUibQaaRXSSqQO pHakNqQbkFqRrkdagbQcqQUpjtSMtAzpOqSlSEuQmpAWIzUiLUJaiNSAdC1SPdICpPlIdUi1SDVI MaRqpAFekbzFQDYzeTNl5cl1lM1I3kRZWfILlE1PrqWsNLmGsmnJbsqmJrsouyJ5I2VTkp2UTU6u pqwkuYqyScmVlE1MdlBWnGynrCjZRllh8gbKCpKtlE1IXk9ZNLmCsvzkcsoiyRbKwsk4ZXnJZsrG J5dRlpu8jrJxyaWU5SSXUJadbKIsK7mYslCykbJgchFlmcmFlGUkGygLJK+lzJ+sp8yXXECZNzmf MjNZR5knWUuZO1lDmSsZo8xpjVQbkTXNpXlxpGVIi5tK82qqS/NiSIsWluY1IIV3Tttp7WzcqUzr 554H+fb7H7//+ftfvv8f71e3dz/e/Xy33L6mZ420fQXfvpz3NPPtjY83Pt/4cuM/NqrbFz+++PnF 8vamx5ueb5Ln3LXoLqnxzvY7e+6Uexbynu182vb27T3bZbaN48/a1rNNYtumbbO2NW5rx4Nm9lg9 UvtG3n4r76nmrLgYzOrzGlaFZ87PMrnnybwnpRCIHkByI7mQnEgOJDuSDclA0pE0JBVJQZKRJCSO ZN3FcD8RMiK/ChiRY24j8guXEXnbaUTechiRf7YbkX+yGZGfG0bkH3Uj8jPNiAyqRuRNxYi8IRuR 1yUj8lNuRI4yIxJ1x/KdsYg9FjZieVpsvBLLlWLjWCzbCBmZRsDwGabhNpyG3TAMzVAMyWBG/YA+ 0lSfMBpXxPdyvq0l4atn9Uvnvsg4H/mbh0r+i9etc3lufSJnSTyxI7elPjEdAMvdm8nmttSH8RRN 7Fi8PJ6YlttSwmNrlszl9Y3xvQZq512fzjPNntl7Kypia8IJtjSesNpbqvdOYz0vTGfTWFZPqOdW cW3cmM4vu/8Xx/t/0m1jCXhAPYX0IstCCihTWYCxkdNIZymlrkfdTxhLLWVMrgT8FnToEuRHoRP/ X19H2SB+O9g+/NLXQXYUvwfZE+wxlNOVLmHsWfzoWs2+yO5Dix1oMwY/xv75EoxyaRqfyUP8aX6M 1UghPpm/AjV+jP2e/Z7/E7+HL+V+HuPdfDJ7SCrnLfIcVQW8j92MXjfwN/mbyrvsZjwdw1vb+DnU bZZ+zh+W72FbpC2oobE+k3qSTWcvYhz/15fxv6XH2CeIHnQRPf5brv8melgzl9ZHFsyvq62JVc+b e401Z/bVVVddOauyYmb51CumTC4uLJgQzc8LBbymx+Ww2wxdUxVZ4mxyLFrTHk4UtieUwmhd3RR6 jnagoOOygvZEGEU1n2+TCFO/DlR9rqWFljf+WUsr3dK61JKb4SpWNWVyOBYNJwaro+EBvnxxHPBD 1dGWcGJIwA0CVgrFgwsPkQh6hGOh7upwgreHY4ma27q3xtqrp0zmex32edF5nfYpk9leuwOgA1Ci ONqzlxfP5gKQimNX7pWY4aLPJuSCWMfqROPieKw6JxJpEWVsnnhXQpuX0MW7wmsSGDP7Snjv5ENb Hxww2cr2Eufq6OqO6+MJuQOdtsqxrVv7Et6SxMRodWLiHSdDQGBnYnK0OpYoiWJg9U2XPsATaoEZ DW/9A8Pgo0NnMerLSjpGS7QC8w+MKmmKl9CU4B1jMMPYMELMLxKhsXxlwGIr8ZDYsjiefg6zlTlJ Zk0taUlI7VRzaKwm4zqq2TJWc6l7exSYjUVj7aN/t3WHEltWhqdMBmXFX0FCKUB9OCEXtq9c1U15 R+fWaDVmCFwKDVwNwOoYRWZs77SpaN/RjkmsITQsjiemRnsSgejcNLZRgJcUQLfHRZd0aSwRmJdg 7atGeyWmxtAXLBLbSoShAdK7oovjL7KykRN7Z4RzXihjM1gLjSOROQ9EKYxtja++MZHXnrMa/Hlj OJ4TSVgtQF9LNN7ZQlSKmomJJ/A5XCCg6IW5/VnrscaYdkIvMMJxKUduIWqhIFyDW3RuFSrMhJZ+ JIrOrQrHeQ4ba4avjLYg6HPvwYNcMK8OnZGj67y6nAiYW1z/iyHlpCeAYSSMS2NSMAj1szGlv/Of Di3dmgY0MRzrrL5sgJ97KR7EAEff9tfHKREuRpGBIRhEzjqaw5TJEuAwqo2EhHmKIqJiCIt1Yzge 7Yy2RMFDVmOciEO4FvStXxKtx6ovqD0qk1uNaP2SrVQarUwXsfDW+QkGdrIgSpW+GenSGiixrVtr ouGare1bOwZGtqyMhs3o1r319Vt7YlA+rDEOHhgYeekrOYmaB1sSZns3vxK8uzU6f/XW6JJ4FQgA zmq8JKwJad7S+OiAxJcFx6ANNMjcvVHev3ivxfuXLI+/aDIW7l8aT0pcmtc+t6VlCjwnhlVsDflF 7E1lOjuKdBXSOqQspPuQlo6mFmWAKcpPWaP6fRZQc9gO+T3WqDzDfMoM5L2sT/4ju0ZpZddIf0Cu oKyN9Ul1yG3Ir2c76FmpRx21HYf+V7Nr5MlskfwJvFAGP4p8NgZYwyqPobLloyWi+C9ukiiRMQUV PXRmMNtfsUkcaEVv//PLxdyXijzwDv+zy8t8zI/KAMtgmSzIQoCzWDbuOWwcy0U+nuVhrGNXRADF rJgtZo/z8fwTKSk3KmGlQ31Qq9XDRqWt0F5j/5rjH5zrXUXuNvdbnvfMe71u71Yf9z3pXxuYE9ib sSzjg8wteI/EtvAb5C3KDfBYdVZoZarfkL+pfEPHMCpQxPRvcDwyNnV4eIhPbWtFVjrN7414CyLe yBaZDW+RWIrhFWwYVCYMvzlylp/nWczBCqxgkVwh18rNsiJ/qc4Wt0nM5mRf0hxszhA3j7W1DrWW TuPTMzMCWjS/sHzGTL5ydjw+G4lnIWtpAYg3HsUwX1JfBvY3WsFJGpe1Xl1iy4xxfr9Ub9g9HtwH Rj6xHC4XIKfDIZ4vWg6nk549Ho3qz1jZLhcgm9OJexzWmMS4Lks6c+oKmzPHPD7om9XWyqeOGbfD h82hNgww4lXLZ86sKPPyT1LH1o/UVCmrXvqHWUeXX7gGY7sKNutPYbFmsB9YWarpMaV6RdxlcZfE 3T8wcnYffVYA1IaAA04MN+TggD+28kxTq1eadZNXmnVm3Ow2N5v95i5TN0PU3kR7azLNzwzQ/MxA 0Ga3b/LzCn+zv8u/ya8w/70sM7A8w6atcGU4XSrNiGYAPGMWrVXma+axY5haa+tQSem0Vj46y7Jy PrN8RjRf04tmziwjUug8khHjbzz828XbwvfmH3norY++lTogzS6WXj7+9Teuu2btyo0/ST7z6fAf 92H260bOyt/H7PP5XGtKKI/rmcFMqcu2ybbbJrO+zJ2ZUj/fxaV+7y6vJHl9vAhMJbFodtAGeuwj wgE4Z9XSxGyu5qBJFAr6TMw46KNqKqE7zTloEj2DanOuRs1yndQsN0zNckWzXELkLdQodwJ9dw+X +7w7vbu9B7xHvO94NdY1jnfJm2Sp27PZI0lxjRezSlbH4qybbWZaka/CV+tr9nX5Nvk0np1tX9GH eRywyTabR+YkERKTV4S9hi/kk5jPsyIQdgUEnoeOt7UOmkPHWwe9vllTW4dmZUFSWltHEw+ZhPiS kqG300gffrWkxBw0j7UOHhtMtwFBWGtFRWZZ2DujMBotL5tONAFJBEU0PRN0USAi69pX7uCZTz5g 2lL/el9DS+v7hz7pW3H3V1Op3638YffXb+LmXY89eeLD5v7bB5+444fhia89+OYH80nGEW9SNEiQ nblAKZcaIslRnYRbDUjbR4BzYOTEPkIpgA8FbQQwWnXOmkqIrXU2O7ucm5xK0F5kl5xKmLhaCQu2 DxM/K26t17HMkJcxei99BsAp8V4A58R7AXwoPgngfFpKmaAwnj+wKom4zKAXs1p7s73Lvsmu2D2G I+SQzjt4nSPu6HZsdighR7Gj0jH2qDPHwMihfXZIkQBoRADO7KNBUYnlc1CRLruWG8uh13ha6kGv oaEqc5AoQ7RYD3lpPZ6mEyhWNTQkiDfYSppKFLOSEu6NeiPlvMxblsF5RN5wcLhT9tc8mnou1cSf 49tT6/n2DfLBi2u/Ln17+N9JJ94HOfkx8B9kv7cyDSfXbUEbVANXHNoynklY4gMjH+2jQQM4L5Aj AMI5gHOWRVjhoUCzQ8iFI5NqHFmkIiTWZWwy+gxZus7X6ev1ycszuWxWerike4KeIo/MPC6WKZCP 9wM4Y7ncbkArDDd9EbrxkDVOQIZPWS77Mgn2haiNb4XLJZN2HALLDnlnQTkOl5QcNsHwYHkgjHKg DKgaY3LzVfPYYOk01trqL/JGMiJewcRmJL9I8DeAM9XSe8O/XbDhzXdSGYN9Df138+zUhw9Ib0yV Xns29Y2Kc78efm/D7ltg79cR7y4dOS0fh44xWTa39sumy63VS4JpRwHLa7dr9Z02LqfFWeYKKYIC JzCWoZQrMeU6pVPpVTSZZzYbNl5s22N71yYX2ZptEtTPh4I5AXwk0A7glDWT9I1N4d7mCnefe6d7 t/uAW2VuIF2rd2NBkerdQuO4hUpyZ1Jzdw7k5eMxCToviDlaopFMnbfmecCd3KRx3arwOziXN2m8 O4tLdzh5t5NnrdCEStM0PxcSxcMukIBDxnBn/hVOF8wQkEJwK9FiSOgYUEEwpiCDYONh7yxSNeDm oVfbWsHXtIyBe1kJD8KMSWsVKRr2mkw2I9OxABRG86UnOuKpF3xLHn3lw3/bnxrPb9/N+U1fvL87 pb71hWhq3brG8++9k7og3cPt0pSLU1JHnnrgK98h3kbURrGDt12s1pquhAg5dNfqVYTNK5U6Ja50 K5sVVdlSZNQazQYxq8oMj7pcY05NrLxjxsCx4cOl00pKItGZzB8pj2Toml3i3/tgAb/hb4cb5P33 XrOt/8bfyyr3HlyYujf1ZupQ6iMsv6wF0vWBWIPHs4n8mOXKE5otz0mIGy9YBUoAjP+x0AYoOQFS Y6FJV2n1Oskc0RZtzlptRKDNId6VuylXkpqdfU6JZ2SWZ8Yyr8v8QabKMv2hPGck1Pyc7aBNkm34 llYPowLdbSbN3iZYwyZYw6YJTipqHuMihbnHvgrghPgqgDQTEmC5BDNFcpv3ylyWSWzpAwKgbwiA 1LQA6HujVQK4YF1B3eVIMxkGEvOL0fnF6PwadfMLTev3EW78k4Q2mE8T3gM+3OnhnZm9mV/NlOW+ vJ15Unfe5jyJTwrzSRP5dRM6J/ROkGVdC2pHNNnwhrCk5zFnppIzYYU3Z4XmdWnpxRB6IghDCkw3 xp7gwc+Yc2wVhPVnigURwOjCCMg3axbW0FlCr7TCUOFg2jR3F5KBOLoeKmQxYq2cWZDm3YyAX8sI ZJYJVuYdrbcdf/5HP797CTfO/SJVvYt39q9rfnX3r/pv6vnb1fLU6cm2pw4efLr9yNRH/+2Nf+HP 3vnRzVu+3NTxgwdSH256Y90jD/cs3k56B26Lsk8dhFVs51e/yAyozRWkGJ0WoVGTKu119ri9277Z rvIKKJ9a6BMyfZQ6zmslzuPOfqfEJJuscbvKanTZHgiAfDUKgsmTlCsVqUAv1yU5pHNJ6VHBgmf2 uaHRAHxsFXm9gMIOB+49WlAtUiVdpaxCrVU3qbvVA+pp1cZUcMcPiJAqdPgJK0K9mKTaua1Osog1 JDFWSVIVHfFrVYL2mEMmCtT1rFkmfDrLfb3B5Tqj29hsyMxYD1OxrTUnYZQh0jwVimP9cSh+aH4q bvXBrgmZQ2IhEFQSpYJU9CobtxuYr2HIqm5WVelVVS1p+kXkiBzlZdB3EflY5/C/3HRCWlIuFQ/v +x/8BV6eekMdvFCmNAzfSdqkceS0crv6zyyDt1nJ0xmc6RhfM3B0t8nvcPAMWP/9bBfbwwbgFrzL zoA8ujPoLHJWOBXmFOaIM6jFvEKTejVCghd4xF3Io9dH9ozXSZj2hkieqAT3zAp2mknSNnxts4dv CnAJC4pdXi6vleVJnis9kuxw7uS7+QF+hL/DT3ON8dNOzg04a/1MpiH0OeEuDYz83PIIMgScFuVO N8QzTVkAn2B5ECJMxq8A0gsGtbEKhDDPD9iE9qQ7dMl8ty1gUie6S/UBmc0pKUmvxkIssBbgT0jb 9LZWb9kloRtdltPCQ4tzW+thIiJS6TQiHNdJ6XsDvrLpFUEtEmZYDSLTlavntf/sx7/71x/97Jab n0t9lPp1aj8W4uC/ql/6bk1qX+rChdRP/+5r3+ff4kt4HU8SxQIjZ9WnENd38o+tALcIs4q4uwXz MWnedXEr1+kOuYvdlW7ZAFDprnPH3XvcA25d0wz4cnPm8Kmt681jpdNyrJEFMo9JfJ5xqyFda7/L LsnFMi+28yIDCorzXQrv03m/g/O//kJs9DrVmkpnnVOq0Go1SSrW6jSpyFnrlLQNunMDOtodimL0 6vbebgfv0rnjVkm/FUa+1HtE5kXwD/rk3fI78mlZY/ImG+ddNm7YQjap29Zv2wXbYcB2FPbDGdt5 my0OMVc4WyBB/CH1Cuc6D8Lu4kW8j1/OLn/idl0JKpKuFCl9yk5lt3JAOaK8o5xW/qTYRZ8gr+XN vItvsub/RV/XaN8getcqzUqXsukv3uJhtvUSX6+s1yWbE9tVDkngFQJvDp0kAV6f/glWIT5YTzwA P2U9uSsQa3MYrqFJD6QhRgvQEGVoRD1G2QdA6bQW0ssRmUd5WrTLuPLb51KHpqcOPHuQ+1bwVj53 OZ8of//iHPnHF5eoL376ljLlQi3xy46Rs8rfgF9s/Ln9aohEE1JzzooSZOeqJslM0iS92gDtqmUj m5jfcApXH+6BsK/I299H7QF8bDmEgy8We6oYDQMEiBHxfNEKkHlomDYb7rD/g3KRTOvqWeGdADgn 3gngAr0Ki6dCr8ZzShiEAD4Rmlk0HRXblFi4qcRy0Otlg16P54+tDCHidpoEVzSbTQaDK0Lzzhk0 B6EoX4AOU2iRayGt2TSgcfZVjfdqXApCvUh9HKEJDnHi1/Ob+F2wAbrQAqtIVCvT5mlLtFXarZom h3gxr4QMxvlmrhVpxOvN2ibtgKYxQWJQLE02AOvb1rdw83BaF4h76+VP5hAGklBntaQBJga2T+2V WS+IDyWON8J6hN0V9ZZxb5lXmT/sONgo/fog9vI+/a364kWH/IcLZWntLfdDexfyN/dKFDO0svT8 bLegsluYHO583Z2tFPiDAeGT0eIV8DKFFwTne2VlfoENoSGycH2zoNZ8s3zBWRSQGZwKjyJnryZe +YAxgSNOwgrCsXBnuDesTHJgCSveUyx1+7lfj+n5Ffld+XJ+NsuOVbp5n5szd9EmhUvl4zvH946X y/NieZ15vXmK3Xmlc4FzrfMOp1qWz2W0tTvyxisFdYF4oDuwOaAEvBVjUilUv87EOGmYXihijBMj bWs1B1sxTiEdJFMU2GodetV8GzcSlTQ9WnOs/08H3tKCyMSobVVUNGqGBfVCLB9kdGUGg6PhiaXz K3fP7d226PHbdmw6s/9/tl1V/HTNjb2T6jdu3nF76k8f/GTewMSKLasW3FNfUXOo7+l3Fz2XO3Pj isrrZ1fOqn1t1zOnwD8+2FyPQDfobIs1vkjnxQrXH+HKZJJ+5RFeXYQtOskgAYMHeNLyUrkkFkpJ mLUo/aMQWgCnrDCpAAn+Mu6c1nopn9Z6Sa9T6lQpbQ6ZQwhrXhIMGKCnSsxTwtkXPn4kQ/re0dQV yr2qeuFTVd2HjVgJNspZ+aQyD9HZAv7W/iKxzBWQQnGAmwF8ZM2n7+j+oF/iXeFNYSxCnjqPxA54 jnje8Zz2YMkoyPCoFaHaUHOoK7Qp1BfaGdJDBQ32hv4MniGUXYawYDLIMyGlBOBjy0vikjGeTJgM YcKI0mqaIEJ++GRGUWRhpcqZKnxUVfilqjB8VGH4qKKXKtwBCv/ASSu8Em5GAVTwoX0uGBgEWNNd eONYXExhUihrXJPdcDcZnpCn2FOJucQ9uzx7PAOeo553PWc8Tuah/v6gVE+ANYFG6PEtGL98vCSP b9pjDBhS3OBsrXGHIcnkBGLjkXoEAunwg1DFKDkzpt7TwUFqY/n9fihuwxltkpxNviyH5PDpZMdC 9tIBCVCPdB0JHWQRsRvyLH4ByTSPwzGGfI75HumadCwOndYPDR1uNV+FJk53F5KK4E5JQToaPaFs etAUUTjhdngDwYz8QjnN9bCZpJMbfn/3izz3eNW1Z5LtjTNfbv7dW0s33lqyfMLD+197+JY7tx/o f+rX2Vxpf3zynLdPp7Y8NLVtLv+XwKOdu78MHurDKjgJpyJMlsvtVrDZwaXQwlrHOw6p1rETc7QT a4sAFlEfwIdYcQTwrmBwlJwTq5JoQ8xNgBUkmjp8SoOvQZeCUpHUJ/1Jwtk0ai2EBQJiOciSlBQi EiouWF76hGSnVU9C3E2UnhcvR3XKQoQVQiMJAZLo/dL4WAaflHNlzoIcOaPJnUN0o84EWB56QU6T wR1uh6HDJAapQCtyIlovo4QgGoJro55fCcwQMkwLdCwxXopEswyTIeIpe8fcOmgbPnFe28Gcr9b9 intTH3147SP2bQWv7Hn1O9EvNnSoF4YvFMxO/fxM6lxqcJY8aXiHOf+lX+5/swpa5RrI6w8gr0Ge ZY2Pqfzb8ESKsyqzQAXXTtdulywx3UWg7BqzBgCkY6ACILkGcMbqIJy59IWVvjqf1Ofb7TvgO+I7 7VMZQtbAqU+oIl+Y2vtC1NankQ7yCbHzYQEEjOgA7qECe7k9ZpfJE1ygyLKzSXcFXRK+csgSYuvy 8CbyLrCnYhFyGYJaiGbizQRYWfR2pSnDDicGdpP4mL3J48gg2RDYLik5LiTheAnJxeWox9OwwHtr 1ajgwE+7pM+FOxDNZ+XkDmTKz9+Q+0jtY/tfembLffVf+80vU7/hE7m05BX53QdyZ7z3ox++tuqJ VbzwU2yszawh3QhcK+OA6yzsCYxYfRPE2ONBLg/ofKv+df1Z/SX9df19XZOaVU5eZ7+xy9hjqMVG pVFnxIUjmi4aMI4a7xpO1gz9KBn5hF9D4NcQUzYmEwYMKDcy7ginRt7C2vEwokKkV7uETt0dOhA6 ErKFKNJChACQtiAB/EroVQC/EVgF8LaQLAAnhXVHgPUFenOIj1/IF/Z9tjejmCa9DkTHqEwR9THH EdXNTBoVBoVRIdCHvma0T9+p74YkFAnvvVmFF9A0ybjSWGDIcjocJutGEKfLSCPSSwDQUDAj4oZy MU/n+Ma0f7AbNqLKuHDvOaLCCA0CRlyRq/Fsnt0UEKOBdXVGzIaA9EIYEBthgS64tgsCywPS6LrQ 5HQE0jwDDWrSSjjUKuK8aTWKZzL+wUFtFBqnelxQtUOkacWFfkPY0aALILkV+CPPn0cCQdgN8C51 aNSiwnKzAoIdxF4Gz9c1PTKjqFBxXbzYtWL7U+saJ6/Y8ODrD33z2w+/9tv77k5NuGdZk0NaXLdI Un/YGW/78uTwpC/vHOG2J7bfe9fgHL6maeHGWxuWkmyD6UagRzPY0y+yIBBIIRoE9g5ZUwiVvT4u Z1Ta6rD3KNscbqfuUBv0BkdDnRMWtkTUc4p4OuKzHwkdBuBMep11hgm5zkwiNEr/zcomojoDRBin rQnLoUdq8jvtHg17t6PrUdVlxgSwAiRVmYfNw60Ia6ZtaJ5ePoJlGVHYF9jooZBWUHr9yunN69X3 3z/4jW+8/p0lbWpV4P7OnNwnLq6Xtz8x+OF4yFVj6nr5qLIR5/mqeLs1uS4rntWdtTlLYUUlFSWS 1Ml7uSSHzXE+bWFxSWVJXUm8pLtkc0l/iV5CqowmAeBjy0PDL8m6cuE4N81+HHkwD5AKGScMhHGz WXSha8bCMb1FK4PPJ/SZqPddHeS8P2tX1p6sgSylP7QrtCc0EFKKnZWIdcF55ZK0tvSOUqmzordC ks1wRXF2MC+UUSEEt6Ipz7LBWcrbaew2DhjyTsduxwGHzIqXGAVLHNjmOLTPC4NAAPTJ0RLwNtFT 7NtyuemKUiKRi0ZW2pRxhduhCZ1Haww2PIkLzaG3h8GEb5eg5PBoQFEwJW6XFOHQ20OHBT8PHYYu bB0ihwxMLljXj50KCiViyYnmI+pYUYhQI+hUEdRpr1pH1CIjgBYiGkn7clxYwunwY3vXdx6896s/ DO+ZevILi37z4fe+1dJ214b5rz/9zXE3rCzZP/lbe1N/eqP7FG9Y9cXbuzo33Jn65a5bWubeF/5e +TL/Wq7tOXHNht5lbV978lemKReMn5i384FH9y9QlQdX9zyyfeNqHP7jrA9B7/fA837uslwZQsPq ZtCEbQxrcT9xKWsQO81kKAM4L5Z+AH+0gkR0v9gy92fTsuIXCz7qjgkeEY3EPrrfTVqFelt+4hm/ 4WgwGmjjqgh7u9glSceyAKQtCwLSloVNWBbiWVgWNmFZ2MSHRHNiRgAXLKGRbIG1yh2KJFY1D1FV afL47Ta7R8fpz1Hj4fLVi/TSZ3YDyE372UK6IrR5ip1sclOFDZGZ4ZVzbvtC7CsFBw8W/v3yZ38s fXvz1sUzL55UTw2/ddWiE68Mtwl7Hkj9sfoqczAve2+/X6hWTPzQflIAtjuF309jBpA2xgFcEIsG gH+3RNBR9rqdDZu8nHkVsrO8Qrd4gUPAY7oFAB0DECWn0mEKaoHoI2EZpxUuRSNBDkusMF6Dgohe v2uxKSxzoazYXZoYo2Y6sd8JHIGPKSr7mX4mKcBZjcNp82qIlHHJ5ecsZKieiJfXl8ZipdNi1RWP 8MXqq7Fp9FhafaEKWufTfxrlNMUGTnMw6NMiewW2Y2L2TnuvHWcl7bKNLXIYi2xFjgoHwqOy1iA3 UKCqSMGBmTG2EAAxHYALVlDQ1yDGUwSXKIIrqE6wH7VOx3MUndCB5/Npm1Zx6oskO3QcxoP9Jma3 0cQpmh2c9WczT/NHW+sxchBGpRqnOHiaL0Qc+qpU4jsHD/Kvf5D6e/6UFPpu6hH11MVmnO9YM9w9 GqNCwP0UTpwceZHZoZeIpnZSUDQVAqxJREjdTvvgFfaxfWqcIw0iGCNrUgMF9YoQKlYYtFc61gTg I/ECAJ+krW7sAAMXXKGXofRNK0iMxqEucce2De6wKIQGPGvl0H4Atx1Qj6hAv5FtkBWhaE26g5Ok DEF3fY4FiAOEKwtu8EMkYElnhHccXNWY2s6nKgc+XbNsFQ44p/XJu7DZvFy2Qv60PsHOscRxvoQ1 eGHkCBZ9W5CIeFWgA8A5C5VgZ6FPvIKU6VISHO84mtpnDC5sKtGbJiTawWcH9DmtAvITri/pkD8K hKWVCzHPqDKhQdCw0hVCoYzpF+HPoManNLm90CN2zS38RSwQl2MHyBnzPUhaYPX8FS0SnIkTGV45 u+v2a7YVHryv6oZf8Hbplu9+eeGsiyeVqVu/lVo6TAfbhNVrBwYd2LeosgqCIiQQhEhL9QdUziuD 3LswKGJ0XZqiwXoU5y4+EBYoDmBcFKYHADI8RVXaFEVJeukGkN4qpDbWbYRAzbmwj+1ku9kBdgRb F9rYQRZsWwmrlAndw8JEBCa2kJmwTZnwRZiwm5mwUFnmWpnT9nmXmyOCJsXc17k73fIC/3L/Wr/s Fvaku8kGjfixlUk08DfJo7sTgk9tDqjBtMNOwA+Id2WgHPsUtBbT39hG4GUEwFr8GQFwEIxMRrDp DFY23YedCDggfrE1jfMC2jXc8f6pVOriid+OsKM89292pk7e95iUfZ6Xpn6ZupgaTv2CX8FZat27 /8C3vU306Etdr0wGPTwshzdYmbmCp0/n8syFtfY/2aVa+067BCk+KQgAIO1cA0jjHUDauQZwSvAt tbEQeNHq7V4vVxp4Q1DiYx72afjY2n/Bx05/Q/jYZYS0z/nY4+KubpfUrHfpkhQL8AVZPCBWhFH7 vsmVBXoIiSSAllKpPqtJ525ZgxOZriHAClCNy6GL3rqgpj5GnTHPnCx6EOQy8tD6gQAJ7NdRKcET UaiAFtcMWD4+byDtnyM0KE4twT2PHTx409dOpkbYJ9WPZfo2VvCVe14s3nhVKqK+Fb8pdTL10bnU G9PkycMP55Tyh9/4YSV0D/7jQiZ/0c2et8bbsSiSTxcyi82jpnLE/Y5bcmu2Bq2hW+fYGE2rUQBp NQpgVI3qQo3qQo2KakIngIuCeNROaAsqsQpIW+BkzGWKW2OqXWxZ2aUm7J3odqfQGObQYAk21S7H CpkeQqfiKIUw5cfQEZQGZ8/p3HnwYPdgWbu8ueSlLw1/XZn63Zd95KOMnJUuYo4RdtoqiQpeNPJC eZLuDrql4mhdtD8qsyudvDyXy0e93KsuFEcPcJztI0FgACes5aRTc4MsuBC+y07nbucB52na8lRo Os78M1m8KIfzYmw9eXhxGNuX2b3ZkqxnZcsBuc4X93X7NvuO+lSf57OQNu1lIqQNoT1hBbyIsslN 4UCIgECTJ+zwEBLS8vsaXMPXWmmtJQP5Eq8AhBEtzOdXqZxkGOd+eAkdZcMRtqIrZLFnj2CxiBWn I8VaNP+aeY93JJ790op5kUOP9SZnrt9Q3drb/8UNr7/w99a+7kfXXls1e1FL2f2PLkgst0q7ymfP +rubH36KVqpFhEk1Dm/vdeHtWXPoeJfhD/ml4iCHg27uNLBZx5kGd0+EfG0N6TjmedrPF4FVZif1 i/N7EAvYVOmNJAA4HALdC+CMlUu4ZsLzYxAY2NOFwqouJgWAFhetHMI6m+yv8ksel6TqriYfwjVN us+hC4MMbAJGgfN32XlSLDIwTUqqIFMUmkyzEZDlhxtYXiGOSlGsC+4yHYZ94667DvLC1PsrOucv HHfbQ/c8L39tx4n5qXd2DJ/t21Cwe/yPHgY+nPAKT+H/qTwcQXPXyIkXaGqjOy8+l0NpkjFOhya7 PG6Xwwl1cO4ArQcul9eEZTS15DgGMmi+SpYUTl58tsWS8Zd9R7v8RQ8rfq3BcdisCIxUhMA29kGl CgTYDG+xV2KVrjqXhKChMwYB1hX3Io/XuSiG/RrFYe5y7XEhPo59ryJXravZ1eXahGOrLg+N2oNR i1F5R50yCOFhYA+HWRGcQIDiauxcfvYjK6elhZWomhYtF4dAisjOK5PCBUN/t+nZ2aWpD17hV/Gc V/bf2P/sLY3x794t/e7iq3IVrRXiSn3K7klDf3bPx7MMv+Czs9l0MjuHTWCF8MVL2UycaK1mMVaD c6Tz2QL8J/C1bCFbhJPZTWwJ/ht4GWtm+P82XLS7ATsNl0b7HM21DTWNdSVLN3Su7F3V3bmxYcl/ AA+YRLkKZW5kc3RyZWFtCmVuZG9iagoxNzIgMCBvYmoKMTAzMjgKZW5kb2JqCjQyIDAgb2JqCjw8 IC9UeXBlIC9Gb250IC9TdWJ0eXBlIC9UcnVlVHlwZSAvQmFzZUZvbnQgL0xPWE1NSytDYW1icmlh IC9Gb250RGVzY3JpcHRvcgoxNzMgMCBSIC9Ub1VuaWNvZGUgMTc0IDAgUiAvRmlyc3RDaGFyIDMz IC9MYXN0Q2hhciAzMyAvV2lkdGhzIFsgMjIwIF0gPj4KZW5kb2JqCjE3NCAwIG9iago8PCAvTGVu Z3RoIDE3NSAwIFIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBXZDPasQgEMbvPsUc t4dFk1shCGXLQg79Q9M+gNFJVmhUJuaQt+9owxZ68AO/md/4OfLSP/fBZ5DvFO2AGSYfHOEaN7II I84+iKYF520+btWzi0lCMjzsa8alD1OErhMA8oORNdMOpycXR3wo3hs5JB9mOH1dhuoMW0rfuGDI oITW4HDicS8mvZoFQVb03Duu+7yfmfrr+NwTAidiovmNZKPDNRmLZMKMolNKd9erFhjcv9IBjJO9 GRJd22huVo/A4lhaxWJUJY+eMqP89Z7NbkQcqy6kJi5JfMD7zlJM5eV6fgDV7nFlCmVuZHN0cmVh bQplbmRvYmoKMTc1IDAgb2JqCjIzMwplbmRvYmoKMTczIDAgb2JqCjw8IC9UeXBlIC9Gb250RGVz Y3JpcHRvciAvRm9udE5hbWUgL0xPWE1NSytDYW1icmlhIC9GbGFncyA0IC9Gb250QkJveCBbLTE0 NzUgLTI0NjMgMjg2NyAzMTE3XQovSXRhbGljQW5nbGUgMCAvQXNjZW50IDk1MCAvRGVzY2VudCAt MjIyIC9DYXBIZWlnaHQgNjY3IC9TdGVtViAwIC9YSGVpZ2h0CjQ2NyAvQXZnV2lkdGggNjE1IC9N YXhXaWR0aCAyOTE5IC9Gb250RmlsZTIgMTc2IDAgUiA+PgplbmRvYmoKMTc2IDAgb2JqCjw8IC9M ZW5ndGggMTc3IDAgUiAvTGVuZ3RoMSAxMDQwNCAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJl YW0KeAHtWnt8VNW1XvucmbxmkkwCeQ6QMx4mPE4gTzCjA5k8IUQ0CUFnEi0TcqIBFVGC9YXESgAn gI/WKuAj7ZV6bx8/TgKtwfqIVil6ic/Wqm01Crb+FEq0Wo0Vcr+955zwqNx7/7i3f/VwvrXWXnvt tfdea+995pzQed3adnJQF8lU0HZ162oS17ROsOy26zuVaDn1BqK4hy5ffcXV0bI7k8jZdMVVN14e LU+7H/xIR3urHi3T1+BzO6CIllkJ+NSOqzvhh1/TrgKJu+qaNrN+2l0ox1zdeoPZP/0BZWVV69Xt 4LimbwBRVl/XbtazIFFKzull289OLyc8SAytJBqkWXQfxUByUT5hxPEtKTmYLxP19i8b8+y9xrJk /+fkjuOd0b4/3T+P8wPzJm36rORIXfonmcdQjIeH6AW/sTtO+Igymj8rOf5I+ifCk1kpmLSPFHZi b3wmW6QMsK8sYdQSvrSELyzhb5YwYgnHLOEvlnDUEo5YwseW8CdL+MASDlvCIUt43xLes4RhS3jd El6zhFct4WVLeMkShizhoCX0WsKdlrDNEiKWsNkSNlnCRktosYRmSwhZQtASmiyh3hIusIQ6S1hk CXMtocAS8i1hliXkWUK8JcRagj0wJjL3maCfCvqJoCOCHhP0qKBHBP1I0A8EPSzoIUHfE/QdQd8W 9E1BXxd0SNCDgr4o6AuCHhB0v6DPCfqsoIOCPi3ok4LuEbRP0N2C7hL0EUF7Bd0m6FZBtwjaI2hE 0DsE7RZ0g6C3gwbmL1K6RGm9oLcKuk7Q5YI2CFov6EJBKwRN4jS5vM1WTjlAPlAGXAQsA64B1gN3 Ag8Du4GngZeBRFomf4St1CV/RncBvYABDAKvAMPACBAHr8XwWgyvxfBaDK/F8FoMr8XwWgyvxfBa TAkYQwmsS2BdAusSWJfAugTWJRSLXlV6FzgGyJQMmgOUAcuAh21qQLWPvM+M44PHpcHjrxwfPj5y 3BZl8uDYK2PDYyNjttXlCTYvhj0I+gowDIzYvAGnbfipkackQZLLU2weOPbwU0gKwjoZdBiQ0G0C L9vi9rLkXJZc7rbFinIM6HopQ9g+QDnSA5QPlAEXAcuAGHoX9BgwJj0QWCK/O5yeMek3vwW5+ZZ0 9823ZL36GuTrvw1y9WqQq64BuXJVuvvKVeuvy+5cOzFt0hUrQS5fAdLeMdHd3tF9bXbWmvSbKrM8 NwJZ5YXSPbQdkGgSaB6XpO3SDmknOaWt0jbpTvCI1CNtISe5pe3UA2BKoA8DvwR+D9ikXbB5lBKl h9H2B+APoO1DlDj2obStf6Lq2wdhBxfKs6XvSOuQYk26TbqF7OC3SjeRDXydyW+SLhH6b0tXCH6F dEm/XVMGpNX9bsX3pHQd6rn9KuhtXH/JnsJiX3x5uXQtZQE/Rj2UsFmB0tuQPgRkaYN0IyKqSV3g vP16cD6Om01+o3SxqL9B4k89TboenNevNfkak19u2nWCc7s1Jr9Gurg/VptRXo8yo42cSpdJ35KW IYQNUqO0BPxC6SKpHqF0SBcCDZQgXUbnQw5Bvh5Yi/JOlH8O/hZ4grQCLa5EQNvgqR08DE/LwVeQ X2oDwsBlQANwIVAl+UXUKqUUJEqTAmZ5Psp81vOkFEStpjwNekY1oPsBSTof9bGo94HzKJ1r2ntg H8ujXNw/Id1Xni7lmxWzTT4LnKcxzyxrJp+JhnZtQXkFyozsoLsACdMtpjpAR6kTsEkVkkt0XQ7O PZWB86GfZ+pLTT7X5HNMrpi8BJy3KzR5gamfYfLpkgtTiJSvQplRNug+qQhTzpAypSwkxSE5pUTw OCleShDJiUNyHAh+BkYbh+Q4kBwHkpOB5MQhORlIThzqVbTwIhmT4SkHPBueJoGrSMRkIBvIABxA HPnZEraYz4xdaPKL2aU8KWypyS8B5/Vvs9/gbNPYmyb/gA3zGbL3TD7MPhblY+Dc/gj7GLEODIDF J2CzDTJbf2GhKWDTDIwN7v11juKDhdyfl+d7nMn811F/zjnqPi7uGZwyRbWUkydbykmTxpVut6Wc mG1KXY4JphSIT4AkMbYnUN8DicEjl8oToCS6iHK4inOMjPrrl4qR0R5V5SOixyZP8QU+dLvFMP88 1eu7eIDFBSawP75p185/o+4NKWA4En3PDNo1zCNw7sMTJvgCD+QX+B7YwbSdO+zajrtt2n9st2nb 75G1wPN5hb577pa1zXfff7cU35bZ9us2WWlLTIbzkb0Lcry+/xxgCYFJ7P57mXbuQ+z790pa5n25 M30Z9zHXvWUB31v3sifYXJaH54XGCvqHbNoAy+8/yNms/iEZLI8rn2AXsEXCZlH/eru2j7WwJuyr 5PIs1oTpNpHENrLNIjmbwHmS7zD5ZnanaLgNnOvv3NNt18rKnayXGHuJHRSVr4FjG7JX2cH+GJ7Z 2P6iIh9nuzGGscE970wRaQ2k/CEz2/fCi7L24gGbFjjgOYdHcc+BtAzB9yOavLw/PZvzgPr0rEJf fQPi1IB4f4BpHT6EwqGZM31DB7GCDlZUCfuD06Zx/tjBjGzfsx8xzDq+/23RcaD4I6/X9+5HLPCc e7JvT59d60NiAoPz5vkGd9u013fbtd3rcFy/nZrue/5Jpmxjrm2MD6Fnbqlw3TNNE0Mp6oHvLVvt 2taITbsjYtciiONnx2Tt02N27ZMuSRvptWnHEJrAkaISX+AIeuNuehsao7x6QZSX+oU7Ry8S/24v 60VLbvc9rH/wwG+6EJ/b1jPtVoxqHbo4Cry5nq3v9uZs7mbaJmADerkdmNHt667tli/vZjXdbG43 y+1m7nPTMuempc1JSy1JSy5OcxalxRemxRSkyflpNDtt9KtkZbRgVMqdljR9WvJMLSlPSz5HTZqq Jk/JSVJyksnuskv+eUkOf6d/u19OdqU44xMczpjYOKdsszvxgHDGyHrO6pkseSZzJNcl46Q4n6rk Tvkn9PvkGAc5ZEfy+XR+fEhuib9e3kk747cnv0XOfczBnIGZyW42OTEzNjsxzZWRmGqbmJg/es3o w6O9oy+PvjIaUzYaGN09aowOj9ppgDn680fzH2cOKmOOwGzb3/2j/i/8n/vz/DP90/25/qn+c/yK f4rf7c/0p/lT/cn+eH+MX/aTv764iRmpdVTXVGFMYOBLKoxirW5AVhqNIq3OiK9vCfYxti0ErSFt xn5uMmybBySw1MrmluAAy+LV3e59WN5k1IW7t4Y0bbKh1y0JGl2TQ0YRF+6aHKI6o6jBcKsV2jdd azrXCjX4ms6owRptTVTom55bbcysbjXyqsNVmqUVdWwNrqi92UqzeLStoPBplcYFS3GSm1WcMaGl Tu6sk3fYearXNd/UB1rQSV+nlYRHa1amDVkTjpbN2pMeztLmtB5QEO0Yp0amUYbcnWnQF8+TWN9Y YUiVl9YZemOdMaW+JWxkqxV1xgGU5ta3GE61AuPhocQF3rlmLQiH0PSRVNnUJ3ESA9LSEixvYydI Z18Bo8CXwBfA34AR4BjwF+AocAT4GPgT8AFwGDgEvA+8BwwDrwOvAa8CLwMvAUPAQaAXuBPYBkSA zcAmYCPQAjQDISAINAH1wAVAHbAImAsUAPnALCAPiAdiAXtghf6Z/qn+iT6iH9OP6kf0j/QP9MP6 If09/R39bf1N/XV9SD+ov6i/oB/Q9+vP6c/qg/rT+pP6Hr1P363v0h/Re/Vt+lZ9i96jR/Q79G59 g3673qWv12/V1+nL9Qa9Xl+oV+hJ+pmJ+f8pY+v9My6yb8UPGLIvxTcZTXwxIVsGZPOSn4jKeL16 kGhsxNKfaDwpo3UfJcrzKJF7kdLGRqRhco31nmphtTvJZdhES/xbD4eNFytoHWe42qIMPPqtif+G P/v17NmrzlrzEr1Av6TbRf0TtId+alr+lH5O3fQsPUHRr2Qh/CDaQL2gTdA0Uy0tpW/RClhfS4/Q LrPVcgpTIf4RzUdEI6b2RfqQfsG+ht1OU3OSfRe9XEcD6GknLYK/+XQ3Zvs9+gk9THW0EaWT1xtC HJZaaSWtoUfJQFudOoR2Md1GC+lSjK2GLsaYVqH3ZtpNe6md+mg79E9QIz0U8xTFSZ08U2N/lc4b +yv1oPX3pU68322Tu6iTbqGH6B3CKz/deeLZ/z57Jwd2Vukuuh+z2EDbkNNmeZ5cL4fHc3vWRmbF Y4jXM4jNDcjKj5CXh+gu5qUdtInWMSc9SE+wotOi8z/5+6b6x2gLfJ9+/Yr2IW67kN9tiNga5OXf Mfr6042I2HSWgHWzkppZEn1Fy86s/z8pr8ZauAEr7jvo5zrMPIgvpoW0FrwDWGv1gZ/A82kzsv5v OBQPQ19Bt9Iq5mEFtJ82s0y6CfYPQvs9epwVwHYN7WXTaRS7qgWz/IcL5wH2pTgPUBdHLJ1e4ntT /oqbyh9Z5wEv8TXCptIBopPnAVNZItbbY/Rj9P9D2sncTKbP6T06wfLZJGRuBr0K7EfcHqdnEL8j sMik3/H3jjOvM8eCFj32dnFOwPQfx4LVvvXUsWBfPEoPYH+twxrai73+DN1DvwDfglIvdtB99DOs gR9hLXVhrOOXvZmKEYMrOBUxSKJfmecTyvIg14+9OjbEa6OUSye2jcu/xW7+PfZzPc6Kf13/isA/ MQJS7NeH7O9KtfZkOxv72PbjWNuJFvY5BrALO/67oDfj3xXfPCD5uPyhfffYX+yPn6iwp9innrj2 xC14lv2O3qKX6Xk6RK/Tb+lF+rNcID8vvyd/agvbYuxD9h/Sz22z6dv0/TO92lbZOmwNtkdszbbZ 9mnYQZNoMc7VS/CsCtNyuhLnGtnvii203WO/2K7Ln8pf2fnfr67CubcRZ9N3cZJRoLldX/atyy5t aQ4FlzY1Lr6gblHtwgU1VZUV5YGy+fP855/nKz137pyS4qLCgvzZs/K0mTOmT8v1TlXP8Sg5UyZP cmdnZWakp02ckJriSk5KdDoS4uNiY+w2GR888limkVkZrF5pZFWG8du5SnUphvPCkcX5BqW6PWqK UpwfmmVaGXbNoAl1xsT6YB8FSkNGjHamyYWG7HV96kHjxW6l2rB5cauLWnVjemPQo7recI/Xh+DW yK4MejxuQ/LirkUV7kWtim646qFHhdDUGlQf5BgYe78USir1hEAbg8YUqxji3qJTOWWQ+3A2DZ4x zAtZxNXnzKqsMmhiHznfNyiNm42U4veE35iO10KvC5LwRvkGm/ipwSYYLG0xpnR6F7zZcOk3xKBa X6lW6ysQUT18MqYj0Yh6lIgSaQymFLs9HjFovLk0BPscCZVqZXsCZoFXSyioL8EBjYMrkJbVfcw5 nwlBclaf1ydRXCLCl8qHW82x0gj0hCGoVYgbaiacrMGXhS2nVhGaRY0IZkJiok8jptKIjQ5CWWEE Wg3qUfryBiNbBly0PKw5dVVvvTRoyK0YVB/J3uqOJmNSXX0zVBgEEO5QeLqrBOHJU6o7lAjK3DYM qlah6el6vaM9zJcJC6tVqIuvDG7yDLrxOh7cVG2kaEYimifedNgtR6ozVyi8GIlsUozehuCptR5u g0WQOStPiVSr6A3OqldW8Izlj6dNrMZaXSQn0NOqGF3LVyJmuFu3WOvfE3EZzr95kB3kBy357uAB 5tDDK/lUVqKlDUyJ9LSLqW4RU8N6VapXVnHwhlj9tBStm4PVHWo14ml2iICgvew9s63HY2RpvGEk Us2H2Kpj9DwyuLPwRoxhRAvYE26NYTyVRqBJMGoSOUCPgdaqkKkyDVBjQx6MQLgqFOKTiibAiPVu ss9WlQh3Gus1Jmouz3OoG5yVV9cYrK7iqxOWUmVw3tFM91HIdfXjapYJm0j+UR4kXrNErWuIroIO Hh9Owk3RDYyomZmHqWkvvA5luoeiPVwarFFrwpFIjarURMKR1oGxruWq4lIjfU5nZHV1WBHbn0H/ eI/bqNkSMlzhDnaeyBDvHpOTvTV4+5/Q0MJTVaN0tEKDu0z1lLo9KeM2OEW+udrcc1j92AN8z0Vc RzB7J04nt1LDjxp8kS11G65SvmUxoKVB7Ik2dFGtC4K9gg9DkpvvGjnkrV6xxAyW24MuxeLhZ2CD qYUTj4fvp56BAC1HwehqCEbLCi1391MgX0Mew7xm0KpJW8pruqya8eZhFXnL5B+mxPo42/rG2T6+ tiMpaqri4wc7Roe7VjcGmzDHL0uNOERMpH5CZVB2S9wEkuSWuZSg4fHgNzI00ZDHBCdmxKUqr6iG SzPslcFBtz+kuFJwWDLYLIQhX6muV9QXGD9HaaLLYH6DpXM94VxF9HDuZ5SicnwhKdWRsLkAT50W TLm13jG+laKDx97lc8PsXSq2rjsahpRUlc/wIF/w1oPBW8P3FVIiArUoZCTx552RdEQQjNddGVRw EmHnNghBqVY6eLINJVwljoSQm9db6oGx4XAVPwKDWIMwcZtLHAs9GtrTl+KsvP/tQu/CQr9tS6jj PIwpMBMzUOagWx70yqagud1EnsQmQF+1fCqn149H0bLBwYbt7DEKsl/IxELNzhS7Orp3x42RhCbM ZjwBp3Ym6qzlwUdi1OD5Hz0DxMiMBaIs5s6rF55RXWtV4/hY574JdniQVfSpbHNDX4BtXtIc3IcX L2VzU7BfYlJluCLUNxV1wX0KfgQJLb7bhSu4kpsovEB1DN768Qcxbu/eFyDqErU2oRDlNnzoFbqo EXSM2vDVV+hclp0EnS2qCwgdnicYYnVmB463oIqk60agPnhLqCMSDvFgU3p0AWJlq/PJkNT5fUyK cRoJanuF4VAruL6M68ui+hiuj1UrsPyxOZQBbPVIWMX2xwEcJDcL8SXMV7nkVQbGxnCCDuHk9Rgx 3ksBHLDxWkgx7N5FsFvAEYZ6gdHV1srHwZcp2sZ6a9tCRty4Q5jUGvHwEG96gEWNaIPHM2/UhsXa qgoRamyOrpAR0ninwRV8RIqC30ML1fOMmNzoIO25vKP8UCRVLRKPkxivkeDdhBboY5E4CIXGjSI6 488j3LFOjLxNhVVbWEEGbNS2BIvRlsvvBJ43aNrxVLfl4qEKJGAji0r8vwu+8R2JCUb8bDjEzWXH bDjEHRtCUPjkRWmTaYC+XYYDI8o9JZRmA0QHVbV8LLg3YfDc9BnupmGAGtUbDCYiKrqKRbWR6K1t xY+FaHsHNCp+90Ubw1ecl6u4j+ei2lg+c6f4Qds0MPaoeiPfJNY1K081qCnIFybh7wwUoFDkTIXR goMz7kxtolBHInGJ39wgGq+4xHHOvSjVK7BWScEzBWGMya1t7SlNLZllr6KnGN7ocUX/7xn+Ex3+ iOdE2TOuIboe//hr/1MgG+1NNJ3yqIBKqC7gTcsvmT4jj/ImOwpnl+Q5Zs925JXY5sylGVpBceqE CUmZmbMLZSobKsrHXfbHN4aKUlJZhi8fl2vINZRS7Boqcv1xf2EBm1MyXzp3vjynJFc9J0mKVefM nVtcNEVKm4hCkpyWlpGmzmEpnhQO6dyY9JlTM3LdyeXzlYKpWfFh/x2VNW3zJyVP9ecpuWmxqXex r4/HyK1fl7I/p6d7Z86ZlpVf7FPrGidOLZrynSmzJxfXzMidP69mlidv2vRJMat+8IMTh207/n65 7YuvfooJinikIgL8iqEkogsuCi5eXKdVtl69/LoVrf8F49stTAplbmRzdHJlYW0KZW5kb2JqCjE3 NyAwIG9iago1NzM0CmVuZG9iago1NCAwIG9iago8PCAvVHlwZSAvRm9udCAvU3VidHlwZSAvVHJ1 ZVR5cGUgL0Jhc2VGb250IC9GVUlHWVErQXJpYWwtSXRhbGljTVQgL0ZvbnREZXNjcmlwdG9yCjE3 OCAwIFIgL0VuY29kaW5nIC9NYWNSb21hbkVuY29kaW5nIC9GaXJzdENoYXIgMzIgL0xhc3RDaGFy IDIwOCAvV2lkdGhzIFsKMjc4IDAgMCAwIDAgMCAwIDAgMzMzIDMzMyAwIDAgMjc4IDMzMyAyNzgg Mjc4IDU1NiA1NTYgNTU2IDU1NiA1NTYgNTU2IDU1Ngo1NTYgNTU2IDU1NiAyNzggMCAwIDAgMCAw IDAgNjY3IDY2NyA3MjIgNzIyIDY2NyA2MTEgMCA3MjIgMjc4IDUwMCA2NjcgNTU2CjgzMyAwIDc3 OCA2NjcgMCA3MjIgNjY3IDYxMSAwIDAgOTQ0IDY2NyA2NjcgMCAwIDAgMCAwIDAgMCA1NTYgNTU2 IDUwMCA1NTYKNTU2IDI3OCA1NTYgNTU2IDIyMiAyMjIgNTAwIDIyMiA4MzMgNTU2IDU1NiA1NTYg NTU2IDMzMyA1MDAgMjc4IDU1NiA1MDAgNzIyCjUwMCA1MDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAKMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMAowIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDU1NiBdID4+CmVuZG9iagoxNzgg MCBvYmoKPDwgL1R5cGUgL0ZvbnREZXNjcmlwdG9yIC9Gb250TmFtZSAvRlVJR1lRK0FyaWFsLUl0 YWxpY01UIC9GbGFncyA5NiAvRm9udEJCb3gKWy01MTcgLTMyNSAxMzU5IDk5N10gL0l0YWxpY0Fu Z2xlIC02IC9Bc2NlbnQgOTA1IC9EZXNjZW50IC0yMTIgL0NhcEhlaWdodAo3MTYgL1N0ZW1WIDk2 IC9MZWFkaW5nIDMzIC9YSGVpZ2h0IDUxOSAvU3RlbUggODEgL0F2Z1dpZHRoIDQ0MSAvTWF4V2lk dGggMTMzMwovRm9udEZpbGUyIDE3OSAwIFIgPj4KZW5kb2JqCjE3OSAwIG9iago8PCAvTGVuZ3Ro IDE4MCAwIFIgL0xlbmd0aDEgMjM0NjggL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngB 1bx3YFRV+jd+zrn3zp079U4vKTOTSULIJARISAgGcikJJYROSMBI6AREOlJEsFEiCIi9gYqAPSSU EAvYK+q67q6ua9ldLLuKuopYIJPf59yZUPb9fn/v328mt59bznOe8nnKvcuWLJ9FLGQ9EYg2Y8G0 RUT/cxcRQlfPWLEsnNg2YiE1zF40Z0Fi29qA7XfmXLlqdmLbi/ZDHps7a9rMxDY5h2XxXOxIbFMc J5lzFyxbmdh29cT1xSsXzkge9zRj/40Lpq1M3p/8Ddvhq6YtmJVoP+VGLHMWLVy6LLE9+XMs9yxa MivZntYSYtjbI62wsnv2gP6V+ZG8bjmpBkLRaiD5kZSRyUQijKikgEwkhF3HqomIHz8u2S/vXHlF +lR72c/GAO8nIQ8vefEYX75y7/Sas590zDF9Jp/F2Yrenh/AefKA+Cgy2PTY2U9+H2f6jESIzA+c /xt4YELPZ9hjaKmx/S2lhVob29+qenrzZYvMNx9ttTh7rxvoYHvJ05iOYfoek0h6Yj4a01RMGBS2 t2Ubb7+3Zaq+aB01tvd6bLaOrOZX29uqDUssTdbEUumXWPYs5O32tFas5Nt7Wnv3S2zn9kpsZ2bh 9irbg2f8Xp/bMS/AVI5pHSYRN9/T6klLnKa4+WkPtwZTetuPsYfR4mGc97D+iA9rJhx2jjaMltn3 A0voN7jmLn2+Tp9P1efl+rxAn9v1+Tr6b353fX5Mnz+tzwv0ebk+H63PF+pzvT09hd+3+H2D37/p vzUnyaMkRNU8qoaolke1ED1KFWpuKQrtaKNmraQo1CM8ONQbU2F4aCgPyxCmNbnDQvmYIrlDQiWU UEoUyoiR+HwYRafDqLXRJ47EN1o7NlqJ0kbLW3JHhgYqtB9pF/ntijHdg0lsyV0Seh5nh/VNQsLs 8ZbQ2fw2WtMS+j3UZqQtod9CbYxqrtCvoZOhX0LPhH4OjQi9kft46Cha3dMSagu1iWi1O7eNPa7Z QzeHxuHhToZWhq4MXRXWD10ZwUIzh2bgpMm5k0O1YTRtCY0K63cZGsJlDocqcHBIbhulh0NaaHOo MF8/tTc/9XCoV2hJqAdv1xLKS9yue+LZcvjicKgbbpah36UiNNGqWJWS7X+Tt++Xt++Vt18rbx8o b79M3l4sb+8jb+8pby+Qt8fk7Vny9jTZbXQaVaPNaDGajEajwSgamZEY3W2dn2sxLilug8oXBpHP RX1dZXwdM8wJo0ZGRpBml1DFqsYPolXNx2eQqunh5jPjo23UNHZysxQdRJudVaRqwiB/c99YVZvc Oa65JFbVLI+ZUnuA0lvqsLeZbWqjZEJtGw3wXTelNDsH1x7FqAZu2prCl503ba2rI94V5f5y5wBH aeWQ/2HWoO9sGBK78Oe/sMrXqsasOopBr22VQ/1lbI7H5na+uZ1v+tOa76gaX9v8WFpdc2++0plW V9W8c3z48tqj9Cn6RMWQo/RJvqirPSrk0acqxvH9Qt6QuroqDI3ejpRjP9o9xRdoZ/wzKeftSLnx z3o7kSbaRfV2YLtEO2+YRPV2UW/4knbp9Elcj+TyBa7n+5yk6+3SfZ9f1O5Ae7RiyIEoZmiDa7Xr bdoT12ou47c8EAqhSQQzNIGohPQmIcr4ZZorLzTJTzbpcb5JD/1Ogv7kicvwa+Ey1nBXGyt/6kuJ /b9tzRoUi1U0cl4ZU3vASAbVDcbD8aVXXTRAH3drYMAjKe3kfeEbYo7VNZuig5rN0UGkvNwfU8to gcHSbMAuGRPnkssi/mtT2mEO9uutLdhtTR7KH5g/kB8C9/IL2bDbnjzkv/aySEo73Z88pGK3A/e4 6KGXLVuOP+KvaBxy/n9p8m95crmMVDXnjq9qLh87ufaALFc0aw1D6rCvZ9c+s7mirfN4YmcP7Czj DQXhfMPz+xQl2RDUODw6j44O0ZLYsmV1saV4pKVLl130YLFlfF9sGQRUaicBfdpLgmI28RPS+RWm r/ky3tj5HT8WX9j5D/YPiOuh5IQF/p4lx8gW0kr24neAqFQkM8kqcjN+L5B/kybyENlBD5KlZDXZ g/Vn6HNsEezweuIji8hLpCcVOt8jT5C11EoMxEneICdIDdnRuY26iJkEyGCyhBwVXhf+0vkdraRX QV2kkCFkHDksfEc+pCLrL/mlpZ35sOsKeZWcYCPx3A7iISVkOBlFLscz7cPzvkI+pjnS4E5uoTUy HndeRW4hD5M36TY2iy1ne4TXpYmd93TiLriSkWSTStKIVkvJ1eQe9ON7aqIu+gL9QvCL98V/jP/W uQc970aKgCsqyHL05mXyFvmIfEF+pRPpbBZjE4RFoiTO6fR2HsQzp5HeUG4jSDVwRwO5hqwDxe4n B9jDwpb4y/FfoAAF/PLx1CWkH/o/GbQ6Qf5KHTRAs2g3OoyOp410Nz3LZFYK3LKH/SJIQg5+xcLD wiHhE+Ez4T/iMHGl+KXB3JnTWdU5t3Nl567OY51/B01DJIeMxDUvJ1eQaejV1eQ6cgPZhNG6D7/7 yS7yCDlM2shR0k7+SD4jfwdW+oXaaG96GS2js+mVdCX00CF6hL5L32f1bBp7iJ0QosJk3HsPhGKI OEZcKr4fJ/G+8S3xA/F3Om2dLZ2vdX7b2QFqhkDzLFA0n9SSWbjzTWQHuRt3fJw8TZrxaycfA+f9 C5RT8FOpm/poJu1O82kBLaZj6Fg6mc6hy+gqej29hW6nd9P7aDNtxdM8T1+hf6Vf0x/oj6AMyMzM zM5CLIPlsXzWg41ic9hGtp09wQ6xZ/F7j33APmQfsy/Yf9hvgkNw45chZAvDhBHC5cJCYaWwSrhW eBz0fEv4XBQxfnYxR8wTbxQfEZ8W3xW/EX+TzNIt0k7pLukL6QsDMaiG/oYxhrmG2w1tho9kQR4r z5avldfJ18uHYf2ixidIC6TjAHp60R+7nDxI/kifJ5/SvYKbPU7HsH30DmoT/GS+cC/9g1RFNrMy 1kyrmVf4ia6gK4hHeJSeJqfJYSayD2lM3Ed3k2chSVvYfLZStNNJ4qNiB10mvi8K7CTZy77jtzO4 xX0wrCtgXxfQAVibQxaQB5ibvAVUdxNZTF4kDxgUth3jvo1ks2GkDx3Ox4Z9T76BdDhoOZkHOemg D0vL2IN0tfA1s5Aa2sE+o5dJy8hsWPTraCsbJbxFT0LyngW/VNG5rJROJx3kS/oQ/ZJNJNXsBvKw OEf6gH5CY3SUNBf8R8TPheHCbOZiz1xElsTq0+QgJOEEGSm8Ti6nt0L6T7AYGc4WkvuF5+i/yEF6 jThHmIunXMlEegNk4QnSKgwTzWQQOSgcJM/T/cKfaYw8La6kV9GdnRUd9eRnw17xKeGAVCymdr4Z /xt9hL7X2c7+Q0o63xQmxufQ+8QA5PIaSO8SUMhMHsf590Fj7CVGrGVBHm8Bv3qg2xRIeSU010hy Bf0REnMDqFRMc8golkHms4Fy2OCGT9CNPNbJJfkq0p3+VdwP/dCuDZyglQ/oX3ZZv9K+JX2KCnv3 6lnQIz8vlts9p1t2VmY0IxIOpaelpgQDfp/X43Y5HardZrWYTYpRNkgYVUryKqKVDeHm7IZmMTs6 bFg+345Ow45pF+1oaA5jV+WlbZrD/LxpOHRJSw0tZ/9XSy3RUjvfkqrhMlKWnxeuiIabTwyJAmpO HluL9a1DonXh5lP6erW+LmbrG1ZsRCI4I1zhnzsk3EwbwhXNlSvmNlU0DMnPowfMpsHRwbNM+Xnk gMmMVTPWmn3RRQeobwDVV5ivot8BYHAr+tgcjA6paA5EcSouI2RVTJvZPGZsbcWQlEikLj+vmQ6e EZ3eTLhBjulNyGD9Ns2Gwc2yfptwYzO6Q24OH8g73rSlTSXTG2KWmdGZ0y6vbRam4RoVzY4Y7juk 2bf6pP/CJi4OVLDx4qMpQlOFvzHMGzc1bQw37x5be9G5KRF+hbo6XAPnsqzKhqZK3HoLhor6C/Bw /PF5VxKdmhWt4Hsa5oWbleig6NymeQ0YkGBTMxm3KtISDGpHOz8nwYpw04TaaKS5PCVaN21I6gE3 aRq3qjWghQOXHsnPO6A6EtQ8YLMnVyzWi1dmgdKJY/qa3pyvVY07T07Knyg6HOijOTwjjCepjaIj fflsVl/SNKMvqI6/OoqzmmdiGBqblcENTWo/vh+kpM1SlhoNN/1MMOzRU99eumdaco8hS/2Z8IOc Oc4zWDOd1rXeHIs15+ZyvpAHYyDxjAP07T75eSvaWHF0kQrHpxjkI2NqcVpdvwLQPBLho3pzm0am Y6N5/djaxHaYTE9pIVoBcBtr4EeOdx3xTORH1ncdOX96QxTse5B7JcTTbMw+/29Xva6Kuf2aqff/ 5/CsxPGq8dEqQLRwRVNDklWrJlyylTjOCQq64Vhyrdk1uFZIYZy1scZSBP0oOPHyyeebYKPW0ixm 4d+gc/LMNtkIVtT30HBls9owLDGvM0UiSUH5v53U1vkDP0tfXDgt2Y3mfrHkgyYeu/myS7YveTxL k1A1AYqGVU2Y3NRkuuRYJVRYU1NlNFzZ1NA0ra1z/fRoWI02HWWPsEeaFlVA+SRGtK2z/eaU5sot dejKXNoPfMvIoANRumnsAY1uGj+59ig8yPCmCbUtjLLBDYPqDmTiWO3RMCGavped38vbhPkWqaLg 9BZm1A+lHNUIWa+3FfUd+vYMOI/6vkQj7KNkRhtL7FP1dnV1dfmwrTjASmFTHyNPssc6d2K9F9an YrmClXbeJS4lO8SltADLlZgWYarHdAumxzH9iuluTE1ov1yq6fyLVEPqpNdIO6YpWL9c/Cepx3oN Py4iqIZ9U9B+nOExMtlQSp7Bdi2ON2C5HW075a2U4DrHsP092k3GNATnLcXySkzzcB1+/z58P32N 9KevdRpxvBLrxbjmYL4f00xxaec3WDaiL/z8UTiPX2M91h/C/XaJpLMD6wTteGwP8RLMCSKHBnol lmFgncQefbc+Y7Dn/E8EFjQgPmYEUjfBylqIldiIHdE4BzDqxX8u4oa19cLOwg+BDxAE5k8Fhk7H Vgj3IECUGSSKJaKJOrbUV8/PugHvdie5JEbygDp7INrXk/QCAi8EXu9DimGZ+5JS4OzLEBHsTwaQ 8vNn/r+woiUfsh96sBwY5DR1AlmNoS8B9+4XioR/iuuBUidKPxu2Go7IOfIfjRONHyhjledNw00P mv3mVnOntcb6V9tEu8n+htrD4XH85mxylbl+dM9yn/Lc5LV5/+17wD/S/5fA3mBhSiClLTUn9W9p m9Mj6Z+EqkO/hKdG0iKvZfTLmIiYDR5Fwg8jLJMRBxh9hvbgY8xKWogkttEeBwVikvnKIUoCRoPE j4Mf6OBWZcrzcMLPlHWUjVJPl1V3lJFyrKvnMOvVM+KIOLIwQ6SInAsLx89pEjlLwuJxznFPxscK o6Q/gneKNfv9tidtTFaJ0zKKGX+V2+jPrcz2K2mjpw+xgH3Ban8Ml68+fUrF/yk4/r160nrKHEXO kuKSQgNhHtVFR9y/7vqa57Yuj59dsTQ+ltbS+T/SB9/e9OHaeL/4iE/ih+MPENq5Mz6WFel3rdQc jSa607ab7LYJNhVxr0vuq1kso7gTUsAEFlTb6PgDw/hDnKmvPsUfoyP5EPXU6XAz2SBHi4mzjyrQ Ox5Yd/2kZ7cuo4blS6U/xvfH7/gp3nBi04fX0lfpoU/pCDoNfe8V/5DOBTpWyCjNkSn3kXEFRTCK kkAM8+Q2dn2LQoQ2do/mZIxWEJPwNKugT5Nq04IvObVPd5wk5aDyKbXszCmHr5Q6S4n6BqdJYUmh bDDIoMrC2DtZGdumOa7OPtH64B3m0ZE23HcqbWNPsgUY57Cm0jWEPS3cI+HCAXHFoASJT6pnTpKC U716ukoi8tRslpNF2w4hUEAJ9z+uwjMLJHCYPxOeCMPTKvbjj3Qag4KT+O1XxE7knTiBxp13dX4t DAet4REfBo+Bh9hAM+2H6N014J1+aPITEYHuhxBcoQNkBe+Ug21kWkjnCu77z33rl7753QNO29H5 lbhBOg4Nk0kWaZ5J7qvlDXDTHNTvtzqKAnwWbev8uhXLMJZaAVY2qzdGWLZ5lbosIpT7CyOz3I2B OVEpPWyQvGG71VlOAlkp5Uowe9VEfWCrT3EW4/3gPaH19fU8qEIW17uKnANYYW/AeT5M0QxW4vZ5 C3uXFDv7FGVHMwwYfMOOhZtu3Vqz/++jLt9z7YOP/PPp/P4rG2uuWbtqxrC1pWPLCunf2+n6L6/v //u3P30X/3LrfCq8sXFk49QNTNrzwJYRk9d1fAhi0AII4J/RSzPZpKVXsbWU1VFaahpGh5smsFqT ZDKb2wmFZ0Ihimc1m2DKUSRzDrGYTIrZDJOnmRD0psoYjBZpY3WHrPDDia8dTJcLEsdiZTS2Wv0P QGw9VguS63yVlMcguJgKTm2UesTWqi9zCqDvEZdBKinO5FJG6amv74j/kLGRyoNyMhvjJ8TxK4bu KX5qYE7p7xruuBKmYR2ePkJ2HxllH5XaGBRsbZ1va9U2R5EljFk3e2YwK7VUKLaXOrW0Qel1bIF5 rmt2sCGlIXVG2vT0NWyN0MSahJ0pjxjaBF8oTNJSHKokGFKDBlEMWcNuKYyQNzkcIZbwmajajl46 6GsawksZpnJ/MLr5qYsGEkL6pa6LyrmEQEYczlLeKQxpfeEAhh7hlxzAbsXFGF8+wAYJ0hORV6bO 2PPvW4qqMnzb5s65J3IgePaZtW/NnqvFX99wQ4Rtj95wYNczi4tHVRWWzdq67YHgS3+f++zMWzdO +GXeprK9GB6yCPy6HLTIJXdrtoJu1B22O4oUTgQvSNKKpcBJ48NKia93twpW6RMzTOBjwWOnI6D2 JmqOHMsIe9hkyvGEUyUxnGOFtBHNQgIxuTzr/lBBgPo5AQL0jSPO8lAwr6vzHadP1UMcL/Cys7Tg 1Em146TD6SvtIgEngqvECy5OkEAuOb9qkBPU8LgNMicJiWZkL2p2b1644aVb19jyQkH/vfs2z5h2 r7cl7/fHD362alXNxPhHJ177ma733nPT8Wuu3CreKd551aymrddlHnr1r7uWPVlauL3+lfhnnwFk kXrwyCTEIE3EStO0/pKF7rPssx6xvGo5bZFEywgLK5DL5eulGy33Wp+0PmN9y2qkyD9YDFbZJCnM aJLMVplYLFaAjjbaqXkF0S0IInZIJlM7sUA2LILVwtNEipQjila5nBnb6TswcScOmiAp0K2kdb2R GtvoRy2KKLYxEckuSTIp+DOZkjJksShkIYaxjU1usStQxEQz24FQAzYL5Gnz0fPiBCrXV5+EIP1Q D6n6L6HSY9Ox1f/AETSDxoZ8fYmRKMPKKeIo5ZK20bj2ZSz9MSNkzo4/zqKLSf3iiCtSQguFQjkq CC7KZo7ueCxb6HPbS+9E3hldsb7jU7qiVdhx7vLd8SbmZTM77uNcdwu47jZpL2J0Lx6q9F3tY6G2 zj+3qo4iiadvSsFs1iLMAkpvdbNL6ObLClX67kx51Sf5HF63J4dkUdUsqDanw+sNu5xul8vpC9p0 dnS0RmzlQZC1xTnC0UZXahaXx1vudolyOGLFjrOa4hTKswLdzOVpbeym1hyuU7u4sEDXqRwVdJzu OKVzot539JhAKLlggjEdhYUbbbra4XqXs6fB49Y59LyUuiJyRNBF1eNmIvgyu0/RtjY2eKk24akr d6wYvbX/A5+wt6Mdf7xqwA0V+z+8Ld5xx7UvTqMPO7sZB20YuuzTBWtuGznSzL7bG785P//TFx6N //PuJa/PNIEvHwflboa8pkFib9c8/VJHpDI/l9kAn3XLTdiVz7WwxVGkpq5xrIpenbsxV4oY+6RV kjlklbrZtzkq+7wEbpeWZXYUkax0khMWzvhGeP8QDLukSNhk9d2fVW643xvMSy+3BmJtbMMB3fDA 5gBWVOs2Haan4/SZUzpNYgmLnrBC9TTZb90A9Skq0S2ST87mBsgguLn4JulE7xt554h9f31oy+uH fxpVduC1tXc8b91vm189ds+KifdMG3LXvJ1zV74jjCsvP/nCby13U/Mvn3x76JurnnlKvXretb90 /OuaR+e8P3fDgzzn+yuk9SXwk5VM0nosM99oZilinXSlNNt8LaKnBqNiN8jENkWikt2qSIawURaJ xVoewqnP0j8TGx1Ie3PTfroeHMBhod6vej7eGO1ePevrI9DBpCQCqGEQmEC7+0fV0x5HO7Kiwv6M 71reHXnbe2fp9y179/4B6O2G+F2AEHd3fineiJEKgMuLyEOHMsLg71TO3zas9OLDlc6ZPAu7uJ7t zg+lY0XxBAJMIYF8b6GQ58/JXxAS6vGg1rRwbyRkNK9iKurd2x0Ny1Is7Lb6yu3dQt1YtzZa0BIs F9rosNY+BeXg9MIj4XJTsLgLM3SAoc+c+pl3EGMHVRs7VcrNzOIkfIjFKOfSEm5fdI3Ko4JcpfYp Knbpo5YwQXwIMYZdFom+M25cw/qPX/h05fra7F7xf3199N97718175p7V80bs2Hg1stWVu+cMuym Kzc9J2Tnbx170+K7371j/hOFJQPGXvlK/O2Tjz/4Fc27YumdV9UvH7Gug/RfNKjpyrWzr3+Ta+Am cHoj6JcOf+ohzdbHUGlgG/Kp3wgSwSb9uRUEZFhqClZywmD8CN+qxMrywLLgqswV+U2ZUoqc5yg1 DjPONW6gBkqMTrC8MTtkzAibz0Bh/CE1FzwvhlOt9P5Quf1+EijILvcGe65KaE7O7rqB6uJ5KIb/ gelj9V1GCqbaAODVLUlJZxcSy06QkDM+5MDGmh5zzBs+t+6GAVO2jtgwb8tDN795+IcxUx+68ZG7 Xvhi56yq2+ZVrhpQtmxGLzrGsWbu5Bt/GdJv8vKPfz1wV/ynM9//K/7d9fOeYz807Zn91vwJ24dr 1zzI6bUcs5CYDc6TSXdAjQpqkCpEHfyyK1oMFVIb29Rq7LcUbH5GR7AJ9AgcTPmUE3s7N74eiFio O3Hi3D6Oi1nnXyBX38MKQnjIbq3SaDAwg9EoS4rJIhqMNotFNhjtkqJa7rRQFoaRT5ctblm2MIso pgsMFo9R2Y5gsqBazsIsKcaIZGijz2g2WRZFQSBGy6P2G673xwLqaeIvL1P57zTkr7zsFAUYcpSW boTpgeWB4YEWjiU0cOlG1fay9PLLUMOYy2rZRg4Do7TQFRUiAo0I2d0Mcneh/Ksfnx/a8fQ3tJx+ URox9m6Q2n+vpHvjk1l/uujjW699ErSqgz/ZHz10wt/PIX/ShmZzMfXwWWlGo+e11NfSRFdOWmpO tsdlljK7m105qWlp6Qlw63ZFcnK6dSNiSmqENuSILD0tkuMkRl+usY3doVltuSRzdGZD5vpMMTOz jf5JS08D6iVKaqqSlrZGsSNOwBAS6a6D38qxXcB3lPqDjnxXV3MErNtqnjyG8f6R7wduAlyMdRCY Z3h3ZaBJASxWWRIPJy2Vr1Qug4fCYWQhjfT2pbMunAQGxY4EK0aESG9oaC7aiLEW0levKZu+ccRN m69ecfMXW+NP0e5/eqbftA3x10/RUTf1qF826LpD8S1Su8kxcWfdqrae3e5vXPXpKmHYpusHTO5+ dqeiVl9bMWc+dFV751fSh/CnUsiu1juM1MVVHKRUL86wQX5VTl8Hl1k/13q9IJSi3+1n2e5ytVJY qYqqze31BFSnvdR2q5mWbsc1iejMNwuBfFEha+AcTtPc9jU2by58sAKZykWptsFpRYM5rP4Sanxx Nbxv3dXTdV09wMxpB2w3/M8EstSNFYw39RlINEwcqqs40lvUzVRYNjh0hSf+8cXL47s/jv8cf+27 D+hl/6IR35G0Q9viP+3d/mnLXWeYmBKPn0OOuCfdQoWvfv+jY9f9378T/+If373K5XEKOKsFnGUn YXKrNsIXRidT+Yy4w+6e7mY3smj2MEO9UGqIpqSGwgW0ICwPlWhYVZP8FQpHKM1hzFWqRnLsxBjM NY7NgIcva44E71RGFlEKz4nzDhilnuowT7fSSR45CQingkkkyJHuLKHL9fWLL2IKBj/CEM3iKp3/ OF90AzdMQXKtfdeElY/VzH/yueumb4v/5ev7V48sHtpv5JRrGobeEe+Q2n2hXd/ddiD+ySdr0317 05zR/BHTz+5uORbyYbQuR+8PoPdm8rLWP8a6C/2YJk9nkklgzCwZFdFotYiKkuyoAQDFKMtEECM5 UBMmJZJjJkb5RQT5DG1s6hFJEhXhRcawrqUBDAMCr9EdyC4RsiREaP5/i5AuNtW6J5nAvFyyTup4 Vwe6CTHS55dKEcd6ECAoFh3pQYSA6BLT5bRQzIiee6hBGBY91zZPuDcqte+L990XR90ceg7PQRqG nivkca04RENiilEoFIoNneysQeQ9l4xm0//adSUH/W6jy1tV3nX64mFJUkV0HauaXxRVZc0yPuLJ 4TfxsUenuZLgQ89ZoLoDG+rpkypfnEyi+YS+SHYxyQs6nE0qifoLHaynvYWj0Q7zNEGInuu4mfct f1/HHPSsBlFooz6mn2kjRMVolASTGYMlCqLVwszmrsGU5XSj5MZhxSQKEZOJmQ2SxFgOZWY+yuih waDI8hoj3BlcpY01aVGrwhhCA//HqBLJCEfG6Kt8Qi+I4gaChwZ0RZgY0YsGV9eb/7WXOzP8rPNL ri6B8LvUZdKygBi6xoQxgdYshEMTcRXSqCsi1NDCl9axX9e9HH/n5e0dyg6pvWMXm/Z7JWvtqObj ze3ufFBFILdpiiqhoqBcYvBjjrdm53J/5nirP6ovtW5uTxEThCSZOD0E0AL9FoTdOjcTzRlFaJij PEcwo0jF1R8Qdc5+4M6LOLs+xs1Cop8XeFv32tDZ82EROCcQdXSFLkcX4u9w64crDgGuGo7n9ZA9 WuYKlfa0a/Yx9gb7Evt+axt8Vjc1C1abLd1scZvNFtoA33KLFjBYmCHfoVitis2Wa1YaLItg5C16 MOe4lqIIuQXucvdo93a36K4xe3Msqtln9poqG/HYahmeNaYep6PggnbEVvOx4w9ff0lY51Q5eHaj rUdMgprirJnU0wnvCk4DlJOrUODoCuBq/GF11uSBM0L+wF9f+qzgb48fbqePWyfmjJ122YCC1aL9 7B/+8eL+uwajt1wL81oiM/lVm+REMA8SiRxXigESaDSZJPjkmJuhlLrYVwBcEdMlkxu+NiKU6YrR jaYGON5GWZCsFhOGyyyJOjvnGJFdkNpoiWa1LrlILo/SErgTPHjFVTKP7pQlw1ZlZeAzndmMG6sT neUcyJ1qiKUOcmRjmbFMVo1lBwxs8IRazWzww5lTuEcH3PueZoMNMfidOUUKn2HX5y1YJuu/6rjJ J0uQrzso5jj9RTRWx5mZwpBEKRWg1V/eKaRSd8ck+tPH8br4iZng5wHsxY7Hz93LvoKpy+Q8PQ7W tjeoJpHlmv9SloVE56BgSXoRkb3uWoqss++lYmtIKOOjtPv5WF4XpPkvfczxNcINSTBzgXU500bk cXjYOApnoF9//1bXrZOhgX7Hc/lZtVa+K0iLhRK5RClWh8pDlUp1uLNOmOK8UlggNhrnK42WRutC Z6NrYXCVc11ws3CTo8n5qPND52fBlF3Bz4IsQd2DJhIMQEq/brVYuZS+pwWBT2yqObXIo2EmeWwC oWaAOsR38KQYSa4pIFsxXX+ixNOOAbCFDc92HicSJhHSGxVEaDyDDB1ogSyZ7arDYXO5PR6n1+f3 ezbZjAqiv7NaJacD5Q052jgP4DOTpHQ4DE7J6PQYse6wuR0Sc9gQ7Uk32yCMNg6w/R43riBRv2cy U2xrjDlQIJSBE5wOh9mMKBwxIj6kIGy0/JDEwSZMx2WaipTJGr/i8Sh+/04JMsz1UvdYkb70ZOlL rcymFtkKzLvMT5uFheZ15s/MgrkgWB5kwTdNeIg1kPadSljaLrEGeNJSIGgze/wQdP8l2jnAFSwQ xmpuamOr/87n6o+LV6v1i1/gVAtwIJs4djyxwZsEVN0qX7SSUNiE626oEJCeL08hlcABblLJJSVm oxGSw/XG+RXciPsIL/+vM9K3b1/aty8Xl8X1S8BvLq+vGHEsqPxil0GmUd2HECbT3v+5LU3pv42x n+PvvHB3nxnl9R2fPrfTrQT8L0nt50Y888RtHcIWWIM3fqGF2x45N1B44ronXlh8rg4I8JnOrww9 gIJV5BDv0ILdWI6ZrXLd6EbABiJ8ARDq8NisFqXrEQAu3S4l1etKSRVz6DD/JJeQli8InnyrEsw1 8HHL7FukL1My9KXm8/qK1gMujI04cnsSxMgpKQoXARJySAAkzHNBIMjFGQNsxnSvVSURoF+EkzkI zMhExiARyULGgEUzUDz5Ch2MdF/dpIGvLr5jf3P8s9tfmP/B8sVvP1j/88Ev47vZbLqJfhG/N/7B n49sfq142H6av/u6D1fPP0Z9Gz+mYvxqjoRroYNvh9TaSZDcq/XdL+5zsTxXP9dK12anaFODdpdq Uz0pLuYI2u1J6+hQIxAcEgjqgNAOrkZQ75iW4cktMJSjAq7BsMiw3mAwNAI8L6PsPCKCwelSu0iA dUD1csV7HuB1dAHh8/E8R5efhGA73CIeSEZ+zxCNCC44SUkvqZYWspm7ds0dsXjZoK3b4zuu2UUH P9s8r+/sHfFNUvvwA1dNeXb1AHuk40n229i99cOmxNDrBvT6L+i1D5mg77XrItzlSeNKfJKZcp2g Op12rz/Tl+L3uhQplOXyZvp8yd47QQeb2Y1WTrtZyLJlh8xOn7LBm9Lgj+AJPSSaqdPFZ8+xg0rG zEzF5+tSwtASh7KUUG7Y0BPu+uBsnlnZBs+IIwawAhjifwFQSRm7mF6IgapfIAqmG2Qfd8ZtXMx4 HBhLosdEddzEBY1PFzxOTkkksMCc8MrhUmRHo5ykCW8TDkYDaDrn8LPz/x0/O6b75X0XfdxYOrz3 3OUnNz1K7c+WLrxlVL8rFsczpPb++9e3fhu9rPS6pvi31HHblVUFHcuFXMk86saR2tQMbq22w9uc CjkrIR8dJXlwNeFX5nJZ4tk2Cyf5sh7Xd2fFYrGxb0RQipGUwsEiHIxwF1Tms6yC4vzbzILdas7N 62Hw9kkrTSWlNC3NS2mfaL5XMOT3UZCG5LrU2i037OzpZHbnIidztrHC1r5Kbi8O2ky4Va/X0nKD DYjzHdfUjJyicGrPVFaQ+l7q56lCahu7ubX0dQyF+jMU5OmO0zHE5OoXX+SoOkoL1JOqngFJUJIL KRdeV4mckMw+Rd1ATJATcTkeqwOVZbmoWw9Iq8zj0KA3fpz2iDtnbj/ORh28pvlor96fPVk+44pr vr+j9cxC+pzZPWHnlN11Q/oOL3rpgbIxNTs6ySO/xVHb6iycuLX6nhkVpX0bqnIG3j198eGGla9P UTz2AdH+EwqHlUwpntg9raYyp8+dDVe/cdVHnPqd4PM94HOZ7NKKUxgNk7BcjMCPoBgpYqU5BrgD iXCJxCLAVhfwPzBvCKBJ4YC3NZJRpANfS2p6ES+faAagBrlfOWzU0cQ2XvjfhYGT8B8MXf8/JAcR PkqaBz1cpJtpTsz6COXxWyChP1B7PBQVr4/Go/H/SK59+34/hZ5AbojxWvQknV6u+XN8dBgZHqgl dYFG0hhYRVYFNpHNAVMCNhzx0XBoA56MP7oZUIzncj1YSdH4VooK0OAnRg/CYpAqoIYkaKhPgAat OhBMSfEnKy2ZgspLq2oGnnYCI6hp6ZaU9PR0xQLgafGpHk+614fB96WnKL6wmqIqQrrXA4+Lpft9 Rs8azdtG17aoYV8bHdDqj6hIKg04ZI2ksHQk4t5vJREl3I4cvkrfP5TyjLIzBFJqerC7A8J9iuc5 vsR/MKB2BP08asAxThdMLeW29nwEDoG4pJjrsn7BuL6MP32rqjkwHq+MpHR+flgNK2E8K1lbUHBN AUxt37oENq2PCNzYcr7lBle3uwnLq5tcSidPfi1DkBldXUyff7OXUXD2GB6lD73e4X2/lyz27x4X gVhjRV9qQce432cLI8/t2/lu4ayHK4V+vyN0tGTvzdXnhmE0O48BK3bDaHrolVo/MWwuDYuDrU1U KDX1M5dahpmHWYbYBttrzDWWNvOv5Gf3ac+PXpsgZJNiyybzZst+6xmzrJhpEoSbbMzndfqBCI18 qDk+pE4rKppQAc4QmgHdugY5OcRLdQfYbCaixIGgyWYTVIfT6bbbmcvpVDHQFugQi8co2MwQIxSS WwWbx2J0+rxGJ/OYgfU8Ft6KcWMgwBgI1pcA4S1mhFA8dmh9z2Rin2zTzJMtYWEyQ1oBI/+qZkFM iUOA+7zfvInA6qhqHhfwfxCkAR4ZCFK/egpjfSqIJS9QwVDzCYrnVDIukARV3ELqer+UZ/swumXG l20IiGDOB5svcB7f/7LxZT60SxZDV8XgZejDy9EUdzoSgzqQPRuf9uFzVeZgaMS9dBAlHZfRW//0 XbRH8aj4HJTH/yl+8AZvryEzH6bjO8w4BmU1fFx8JNcv32McCzCOFvKFNm6uMtfEZCBcg5nmmFGt bEnqFoPZZBBM6YoBMmMwUIYy83TBgAC0QTEwQbRZzQYqwHUDWL4cJgF4wqxa1sA0ttHXD1ux3AZi cbdUPYMZCMWBA6eTXydR0meDKBghBLqndmEFljAGMeF4M8EtR4mx871Wb2qRDIeCLwHX9CXnHW6d sF9fYv/XLdi+2HmLuC6AUYGVrYj3f//DoYNHrKe1/+4YspSVCDfEJ2zZvelB+vS5q3g1BiOTO78W i8UBeDukD3lBGzsln2aZssxRS1ZePxRUGAqMpcZJkTkRsSgv1ywW5GRbBTuyftGcmOCymnoHc2Kx PJPVbTJZvZkhH/WNc4WCcrapd0gw+2rtXgr18pKWXhA2ZBfbw+mkVo0uirJoZ7rmcBaRdDV9YbqQ /ixbCfObjbkega2PVZ+pB3sBgFZ3YI3nnJAwrNcdfI4gdObqYjA93+8r5Toaxi4r6eIXw+NHOQe3 d7x0Rc/161pDgJnzRbNdgKw2BLX1hKKgXvHUjJ0Hx26Y1p9OHOHpUb5qyY7Ikb4/HX1laW3gslTv EXv/7EmzH7h+UOO0yXsbbhxb9eTGus3jnRZb2ohe5Zm9Z9WrD+y/onLRxEXxX68d3fuKIvqlXVVs sStKR06f+hin8RDQmEf1XKgCPKfNDvIKiXQ+EyOjs5Z7mhyPOo46DN0dBVnlWUM9NZ7ZHsPqCBWg zzNceEinkJopGEIuxqJ4MxGmBuEDImSGQgbZlUNM/pDdrISd5amUpBaklqeOTv0+VUpN5YjXAg+O ufS0gcvVRou1gKJj/HIymkxFtRqpydQNZM2sLuuY9LWXxFZXJ5yvRO7guO6OJVILixEfaF2Uive0 6uuoPjqc4Tt4sDhpOpP4GJAPXI2/Xj31wDGPGyOYmUgS2gTEYrrJLiATxGfO1xgNob0PLajZMvL2 18asuPbG/o2783MX0OunTd01+7qp0/eUdIf6Pj164KcfbP33rqkFC5e8QQ9mbLrlJhq8esNtd96/ HBK/FLT2gp9TyBbNVCo0uuek3GkQ9UzBRJ6XMd3sYJenNKrXKKvUu42Swe11d1cG01pWazTYM23j zTSzJ+D3do4gRGfILAdCeFujNoxAPaM/2LxhOTvVXktsqo3ZqtL6Vum1OKiW49yKgrkLKVKeNjip Q4f6RKogEXxyZvIcqQxEm2FIMqAQOTTk7O4n/9JE6SOPv95Cl16xYPeUlbW1D9IbXK+98PkbT9Ex T7+wyzJrSVP8q+s3bdoAjroSvXwDHGWHd7j/KEkDbkXnnByaTgVfKYLBJqYFhEZLm/WwTfba3Gnd 5ahnqG2SzeD24U2liCnPU2OabZL60d6mMk8VHWQa4TH47XaL2exWLCQlpMh2m8kdYmbr27Zay9uq fap9oX23XbS30czDETUsZYezj9IsXWQTuX2UiPCCvVMwZqfKIZ4FUGpr9bGv54niWCwrSQEwgI/H R+nFyWAb0nz3PnrnG7u+X/nqrJUH4+/si/fMmzdizcwNN84cOL9x2D0tn33wIh24+xi7DHm45xau n7j+sd+vvaXfzX/mEjYP9BiIUQ+QDHL8KImADgoIEuJ+E2qRPtdqOVUMORk3+28OiP7A0CCTyaHA KwG8T5Vnvjq4MSgS3pakBIngpA57GslUUe3PCF7xGoMVvL8qpgTzHNudu4HbnWI4ZJF94AxA+Fu1 FHfYmB1NC9s1X7iI2FX7IvtnoNSAzOwBCfaA+6xrM508PH9er9eJ1C8+qdt7xITeiHFWgRUEXEda CfCbg/QEs7jlCAfnEBMa4T4lOEcY05wd//65Fa/MeZCS25//p+3cj+LmGfUH45lsAt00f9kx2ui8 4dsF7930FB2669u3R40LBW6/fzVdnWrZtGM3pAR5BmEwvB4veVWbF0UCl3Y3l8qfuT5zS36a7Sx2 CnhdXBA9gtPj9TqwTiSL2SKYFRuqZqJEQgWSNNpGbWGFulmeAEyCjKzBC23kWuYWlqmIKjmXIWDk 9dYSRUTWQUcViAa7D/qUt7ZA21wUhueVRV3JypMF9ScLEkVEyYwu8rmnFnPF0qX6naXqG7KEUHsi 3I5CImh+ZG9LUBmAAkak4bjKl3lNUf0LD6U9FPIXLp1RcUPk8gF9Stz+N9PefEG4Z8udi2cOTHvA 32fGki3nZnMO6hOfhDfnBoB/CmnaUZKdkCh4ZrpkoXjic62ca+xe7l5M9JcqE7NnZa/vI2XFevZh Wc4sTzkpC4lwnfJ8PpMpkGPN8QcCUZMPlhHvBxKEcRh6f4tWaC0IuWU4CIackNVkCKXZ/X4lEKhF iMwHaim+dT4a8hX41vve9YlTfZTApraxrIMK3jwA3HhXS2XhbfBFXlGzy02UmKipKMenmnymIlP2 VJC1K15ev5h+Cdv5hcpj5sjZLdGjZUk1/p6uzXWSr+ZhNGTPkc/Xgx3cpzwfSdddoI02FRhNV+G6 FMd8PgMQuJ7yK7lIoksKBRv8SM62LlSOXtDqNtbvCMvI6jVqz7CCHOfWXQ9+9Pi3a/+wOHPvn6NL 3rpp/dEpX3nSFw6pa16wY/6ga+aXNDgGDHB4J5Yeq9l26qNWmnf3q0+d7Xz0ubmD1o0LsPELSqrH rqWGq2+4d+gOVHogIwE1fRk0oZ+6tauHijRbpiFLyIrUaJZxOK00ThI2Gt9xyHPk1cbVsLPPGJ9x GESzaGNuhEiY4PMz5vdHEz6mYrFEraob7pQLtpVbWSs4GvlCi6XWqmxTqaoqBdZy6zrru1ZRtY62 TrUutIpWaxtbq+UHeRLK7we/O+GX0v82tAGFEtWKaIrVVwOtgL9kOuq8xU1kNS7kZJKRTjj7iSMJ GcGA+S8UspbrhawXh1VkWyJzj8qcJSiwu8jiygLCkwn1YZAFbmiXz3rq8htvDd9waGPasCHTW2bl ToV5PTF94s1L+t7RsZXdsCWzaNCc1tfifcG8/SEkmaAzKkRogWbaJ7wqfCX8LIhwXo9rIwv6Fo1W 1ivvKUJIKVB2KU8rx5ROxYCyepEKICWhQg6T5ahI3XzPDE5bFKHKOagxYUjnXSUqqk416BF+QT8u uF58T0TdotleJC7nfryYJBzP4YFoscU8kwUsckjUqnuU66cp5dnlojYgS99qrcIGv5htYAR73TmY IUXGd7Wm9UwsUwsSS1+yqeLmTdO66XtbApFyPlDn/+qSI3FhjJIRQi46XSXFXGhk6SLtFFus18gg /0QrYgdj8SGfHvpUPHXixFmXmH32ryBrpzE+iSFPAdo6yQlt6GaFFrgnmRlBRB4um9XKJLzmL+SI DsksM6s1aqJQK0kqmg1y2GEHEa3WsEkhCIuYQUjkVZFiadcyFJNmL50KNaGaCkzlptEm0VSjmFw5 lOsMl6mm9SKdwemqV3jCCK2u/pwrCVUPkiQwYJeK1vG43uFkwo3DPWcp7zfK82UVfUfmWy8fqdd7 XsJ1gZ5/42FiEKE11qGGB/TsV5H12aEvY32rNgzl9Pjtxnsc1U+LPc8+/W7VTEh2JST7KlDFTGce JSZUHHZHmDssadIUcZ54s3iXeI8kKyK1C1HhQdMXpp9NUqNyo3Cn4YQgJv3uHBQXOYrguBlFEJCg 6oiYjFYiW80C2M7MVHMtnDditXArjJQ3PDfuTmCD9wU4BjAG6ZoUbQzchfMpPzMTDZKAL4aYzUm9 oWf9ChNZP8WomIxR2YDAmoG/DQuzaLVA43COl0SDmWf9TPgyS5sWM4kzCpAL2VKuaxLByp9HTwRC vpMAvcaCB6yBvfw/kvSj1Hr+ksaF/CCvt70AvOFrwlNK+JpdK0nXiXcWaUKeJDSWwfeGlgA+07E5 UhhwumWhkhYefJ6p38cvo85XP/jbCCQrltLf4ss6ZrPI8/H7ud4tBuOm6Twb1yYipTNaWi+9JwlG GpIKpF3S09IxqVOSkf5L0oj3HxlrLu6CcFWXknTiffN3CVtP3oOK0czwCecmctY13JhB3LgSjC1e khB0ovnxPgMXaS7ohAu6vmVLLcEWBDyRA+cCHsEevoRgJ06AYBMu2PpeCLa+hIbgyyNQEESLOi+V 9liXuJ8HJwlpP+/mcMS2mKd/8FJ170Pnc+SDEXNYDySRS4dr/SsdNE9D0eWuvGeix/Le9b0R/YoZ 7vbdHX3K+1TG03nP+AwVthrjRNsk52zbujwkPzOMGbY+xkIb6uXyeE9HW9UioXsuY7m5nJIo8CkF nMIIpKWnR0Nhd5jvCFN8HMjudEZdbreb73BTl8udFTIEQhaLbskMuaF07izmIaqnWd12xVnrVolL dTH4hfM1ayhNTa8FxAipIdRTY0+IMDUX4nERL8bAi2E15FZd3ILpaXiuEDHxXBEWyeoRvgpRQh1J Yu1llJJw0uEvqS959Ai8CT3DTRfn0ktXsTNpx2KwY/UxwLtCWXccffoc4b9LjNnFhm3wp4eyZu2q n3GTZ2zrjJtu8m07dKtrUNnY/fXRKw/doQ4sqn50XkajmP304prGK2bOuHZJr8UdE9jzNVlFZdN3 PdLRwU4MDxVp059+KG5KootSjKUPWZgx+htMUZZpLGaVxho2yTKbrTKudDzmOAZQ8bbxDYdN8Pqg HATm8+ljpamlKLHCWCWBhYodS1SaxBcot41rDsSUDDkWn9UKLMcBAlTDkRZLLQq1jmiAGvQCzHiG rYV/w2h7i68Wwdl2zXXR2PgvAAs+GNwVw2IxFjrOgDIDYI6VlxHkSoH2gKeTFMcaJ35SN3CHPRFK OU/xS2gN3PDpnm7z26ddtzO48dBWz/CKmz8qnCNmH10wc8vyy9Z1rGUPTi/oM+j1n+JOCPRMeGXj QD0bCZOVR4kDGHo8MHSK/pqMQhsyFmUwg5TicacLde7Jnpr0mtBCT0PIMFiiy9QV7jXB1ekHBSk1 JMpwxM32MNHyC4pIdiQQJrIqL8KrUUszshG64DlK3cO6kKbkSg2wFz1zqSXFellyopYeOcrC3vzF GB0J2djMI3f+fPyb2+Lf33nNW/MPbV/Yb8n0Ck9ox1UTtyzuQ3fSkrf3//D2kfgr++e9uOOOewsa 1gydMWX7rrH3vcvt9jfxRnzFZADe14qQ37WMilCNeIV9sme+Xern6ROqEKvtwz1SltjDHvOUiGV2 CQH/H7SxoEAqp0CdfyVd5d9M7yS/RgwBf7alLx1G56hz/QZjBK/bMSHNxxyOpPpUVVtaApMafCEU ceQQmxIOkuBUJNjbWETL5JEexeEA/NykAyle/0NGKiQDph7sm2F6i6POLvcAepWbcy6fF0ppdGjJ FS5/ywOBHR7WSXgFHYjwchfsApeASXRvADG3eoEmhRPvK/D4Wzch6QAkojqIs9HCfaH6nePuev2q 3XtqjjWuPOAILKm67/h1DRUrZg2KN0rP3Tat6pN39sa/3zvqxY5jwvCrewwcQ6ce2bhz+I73wUeN oPN80Bnqh3ynmdstdE1gc3BDmsCT3rz8nSfBNQdWgt7LSKltNCp35hFDBjcA+YVFfKkN9yGSmu5N n2QD5ldVK3FbUpjNbo+qVjc2ecDDlmM18IiHyvOiNsVur1WVRVaIq6ISVVXL1dHqVBWDSGdoquJA BASFlVZV9akRE0Ih+AzRRfQdhdgl97w4iNLpemnB0gXSdsHGBIjizpYugDHAW56+uyhm4vXh7TQe NDkfL+Ov5LEf773ltrfv/c/6abt6db8v/s6h+F3XTxu3b/6GaVOH1vfJWbn97+++SrXdC6566ffB wtD779xE1XXX3zZgzJ3Lkt6TMAWUtZPT2hpF2KDsNO5QRIPVa91rfE38l/i7YMDLkWJfWsyG4ZM2 m6lsszMB6QZ7ki8VhM3MScZEop2bd9CNIJ9QpFelOfmY9eTBNHjADfiaynvkBwQeE5pLIDWqHn98 6ygt4+QDO4L/dKrBsgLbH8UXnY63ctvNx1Cx+WCnrd6E8c7HBva2pCfttm6ucXqsy7G9xE9KeEqc gRFtT76Bs7hLySViBgKU2+78cfePKx49oqDv1NdLJ4vZH61Z0W1/xgfxU3EUMFIyChpNAL3yyI+H zLmoStbfPcKSV1JpAazcbr0vcl+GsEJYHbjDfLtFNHNRDyf5FC8ZfK4NwY6bhJv9e8x7rWKlsMq8 ySzkWjIjGdG+FjGMDE0aMACWIvVlese5SCal3YMhlyyFupvT+Aut6jKax8NOCq0NJyo2EFfR1Hwe f//BGCZZahbL+gFhL1QCZnYvIl7Vyz5HKP6FHjUvJJTl4lj16fqOk/XQm0vw1tzpxXoYlwem9Ffo eMKiFMgX2DDh8kOVYnBcyfoOHlXPTCSRoVj1sucMHlZHVIDH2HUVkD3xUM/ralauzMyK/z1n8JDX D77+B/GAuH75FXPz09e+V1wz7bWNbdddR+ebR11V2TCwIDd3TaD7wmHXHjx6p6VhUU3v3tnB4slF 468efdeUKVNA96Wd37Fbpf0kSDZpuSPss+0r7Bvtd9nudu1TmlOPp37tgrGmeGXXTpzmPIcFuEcw 23/AiyzxFnWZs53GiYultLprFUsbS2mxLjM/y1LArClEAZHMmXlgVlXZpghKG9vWmtIXXhFIEzt9 EpWwHXyeiGsiFMXrwBNvLGVxZ0Z/V4OHnlwl+ktsiTgd/SZ9YP8rtZ7B67albSt5d2xL+oE1vqzc sp23OfrkVESvZY1bqLQ2fu2WjkOLvOEM9G89+GoF3r8IkLi2PGAMKLebD8uHTV95vvDL8CiUGy0b /LfLt5seFx41GLuZSvwr5BWmZZblfkMeLVBLHcMdogff4vFFvQG3FyhjHYbbG+CwQzK6jT0BO4wo ujISY8CrGBF7skPNBfwmKZjjDRgl1VeLPE27ZvfXlgeoGhgdmBpYGBADiGu0pkDCORZJtYR7SvQ9 6XPpB0kokHiZagCv1ElBU18wlW5YRqFya0nivXG9LkFHHqjd5J7UKWAPwD+4HijTBDPpBVdY0UtB oPSSKYIufad7i8n0TKJ2MyoEjr2+5s6M9YducQ4fOnJHY8Sb1nDo033HP9w6e/DDbFZH3cSCssEj rq0paaJvwa2m+HobEVeBpiZyv1bl7CaELZUmzTLGslnepKy3PEL3mo5QXlxs8ordTH0JfzmyMFF6 jL4ZWWEi14IaYw7RTHDaagm+GclADQ9gm54R+IEKC+k2JAY6ze34/hVPYHGR6tDflEJqlId4uN3k vhgHWtyA6paTl1gaTU4fL7FMpLT1LDYd81TzFLu3aCydcaxjt5jdcaTho8W3snV6f3bBryhBf4K4 f/YXAWpP/SyVdQ8MDVzt2iCsN2+wXO+6yb8+eKfyJ/dXytemr102XkjSmhbhL44d1wbDe8ZXmmwO fKfJbPN4fT63PxAM+riTajDxjzbBeAeJzeVz69WAvhkovkbPXbYZbnfQMCOI2G47m0ncbNaRYKrP F3TWOtrpUeSeZ7YeR4ChjR5tZbUUaGRmqx3kb6Mv4O0qYJFAylY4sKPUk4urzyxGtcCZ+njgjL8j MKpi1pAv/dXqme/AIHjHH/V5OsVQpocfXrZw6AUEPImQLBBIlAnoudILM9ATlhIvk3I68oIAHmrQ CwN4jiFZFmBb+FRPFypzc3t0vBI1st6LTx7q+O1ZvHTTvW/8KzEbpRyn06fMXjCL5XacWvXmhu/o P87+lS3st3/+NR13QO/jy3BErAbt7dSmuZ2qI+xg3eyaY4xjtn2V/LnD4OAUHp5/WZFB8SogGj64 gjQyXkpA/j4ZOhDgCVhsNrvZzFBjCeRhtCkGKtpR1I6CFwPeerfbwWQjDaYZeMk9DmM3ktpnEOMM uR2f6zIwcyuP+HBVRqn7kIo3dxlpp++iNEM4wPXVz/Un8TI43u+Bc6XPdcyvJrkQ2lxPxxgT2Xek 43kWPpmOt2EFwXQO/EFJ3ewaO8+0ZPaxt3WewWAXGU1+fV1TPL4imfNtSSIoVscz9lD7euAAlUVU oO/Ef3l9cu8c2vuT+CBqeX1eRiz+Mkth5ufmTaObOr7q+OnDitnxtWAQEh8rrgVN3eQubXzY29Os WTTvRrwAbTFbEQg35Zr7WvHCmIJ6N5lQD3FRo2BX1ULZhtiKzWozyapgNYKj8V0Ag9EkhF0csdko /m2mWoW2s1tRvyEcAPOpJwtOFcDU6aErnb04d+kFCl1V4wn8xWMjG1XxZSMnxuJ6RwnAFvQPlDs4 Cp3kts3ct09JRl5RvwMtY/wO+vFzHVOm3zWjPD77MTUQmTJX7N7x1a5dwqSz1c1LOOeco2+KC9kU ICBkFfCdAw0v4gYlfIribv1TFCcRwCmoxpcYhD4Rj4hv8Ly5YwdKiRhwz2lM3QjY73/4G4h9AurS LUBuiS/SXPwVmgvfoEl8bybxhZmLvy/Dvy6T+LZM4rsyQ/BdyEoylKBqCd99rMIX46rxPcrRZAwZ i3ru8WQCvjhXQyahGrMOX2acgjd0WvAEFPFKjCP+DHgjgFROHD60bmxs4JLGaVfmD1827crGGdUT yP8HshGCtwplbmRzdHJlYW0KZW5kb2JqCjE4MCAwIG9iagoxNzIyMwplbmRvYmoKMzAgMCBvYmoK PDwgL1R5cGUgL0ZvbnQgL1N1YnR5cGUgL1RydWVUeXBlIC9CYXNlRm9udCAvS0dYVUxMK1RpbWVz LUJvbGQgL0ZvbnREZXNjcmlwdG9yCjE4MSAwIFIgL0VuY29kaW5nIC9NYWNSb21hbkVuY29kaW5n IC9GaXJzdENoYXIgMzIgL0xhc3RDaGFyIDMyIC9XaWR0aHMgWyAyNTAKXSA+PgplbmRvYmoKMTgx IDAgb2JqCjw8IC9UeXBlIC9Gb250RGVzY3JpcHRvciAvRm9udE5hbWUgL0tHWFVMTCtUaW1lcy1C b2xkIC9GbGFncyAzMiAvRm9udEJCb3gKWy0yMjggLTQwNyAxNzc4IDEyOTVdIC9JdGFsaWNBbmds ZSAwIC9Bc2NlbnQgNzUwIC9EZXNjZW50IC0yNTAgL0NhcEhlaWdodAo2OTMgL1N0ZW1WIDE2NSAv WEhlaWdodCA0NzQgL1N0ZW1IIDQ2IC9NYXhXaWR0aCAxODAzIC9Gb250RmlsZTIgMTgyIDAgUiA+ PgplbmRvYmoKMTgyIDAgb2JqCjw8IC9MZW5ndGggMTgzIDAgUiAvTGVuZ3RoMSA2MTc2IC9GaWx0 ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4Ac1YC3AUx5n+u2dfElokIUBCSMwuywqx0iIeEgIj 45HYFSwSmLd3sQ4khEAghJBQZOAMlrHBZmULOJJAOQmoCPGR4zhGgwKj+IUTXJxjiB/EwcXZZyrG ieGMnbjwE6O5r2dl8Sgn5atKpW66+v/67//v/h/d0/NobvpeDSVQK0mkVNdXrSXzSp0OSK9uaXbF +H5jiKzDl69dUR/jk+YT2a6sWL1heYxPXQ2sra2pWhbj6WvgBNER41k+cERtffP6GJ+qAB2rG6p7 5alinK2+an2vfXobvGtNVX0NEFeqmG/E2oZ1zSZLqb8DZq9tqunVZ2GiuDdHZ44vHZU15e5Svzt3 ZHaGjRi0OC0hG20lB1pJKEEi+wdxb5IFUiHH5fms6cSSxKJPWbLD5A88+rKJv60qP9sz+uvn+0+O r4Bu3Df6Am3UA53+q3tG94zuP7lPYo4D4TpNztFpLOrInF/stO2080E6b9OmyQN1HgWk6Hw7YIDO Hwck6/wxQJLOtwESdb4V0F/njwKcOn8EkKDzLYB+On8YEK/zVkCczh8COHS+GWDX+SaATecPAqw6 /2eARecbAZLONwC4ztcDWIwjcMqgafK7IfZqiLl8zFXIdkbYzhFsR3Eer0RUSaBJfClyt59Xgzf4 MtCPTfqaqfEqr0HPC7wK9KhJY5o7TP0Gvhz996J9L1+BWWRTW+YrNOZQivvxfHaGGsnJTpn0sEnt ysBG55lG5y8bnU83OlsbnZMbnRMancXx7HUqhG6nSWtMmqX0K3QeKnS2FDo9hULlTxSBygyTZpg0 VRkYcV6KOF+MOPdHnJUR58KIc0TEWTyYRSkbuo+YdItJN5q01qRzTeozabKSnO18K9u5L9v5o2zn 0mznxGznMyyRujA+Xunf5Xyvyzmyyzmsy9k11PlL9htKZP21RIrrZr9hkA4bukbW2ZdaRRrgWgw+ 0SoywX2sVXgBH2kVWXLxEPZHqnAwktn7VMEWAv9AHRbBv8PquMC3WZ3JXyAf84J/S/M9g+HnY/D7 GPxO8y1C52uaLxtwVvMNB7wSg//UfMPAvaSFXIAXtVAW4KQWGg14QQvlAZ7RQksBuha6BDgRg2Oa fzU4TfM/LD/LVPLzwzDfqlUMQe9DWkUGYJNWMQHwoFYxUS72sweow/SxuTeGdeCfwqBGoIhtLbWb 8gZqN2Naw+pMvh4o5KtYnZmLlaSY41YgZjG+WvPNgJnFmi8XENFCYwFhLTRXLnayBRQyJ5tPIdPD eRQyB83W/Iehdq/mvwT/Z/b6X675z8rFcayM8phIb4i8pvZ0zbsP2mN7VyWvdzX8vRHkwHPhyShS zFUZST7TqBceCs89sXUYrvl2Yxa35psGcGm+UYDM2AKkxTI/WAuJWFJEdp9lSeQ3x/dTBsL+VxWy /GXFCPmLjkvy56jXusUm0OS/+HTmVVLlP/suyR/5xslXfWPlD33x8vt+j3y+/RnhCZ2DhmuQfM6X LL8RGiCf9V6ST2G//bpin3zSt1R+ARvkqKJbmJIoH/Hly/8eSpAPh1bLPw+JvhT5xxjzVGi3/H2M e9K3Wo56Y/1blHT5YWySBzBPkz9DXuvX2VPH5QZ/gVyfh6Ym13nh3HF5lXe3XOvVHXC3ul3nTOkn 3w9fFoVy5QUhwcfLdptPlrhPnFPrcCThYGsC4AxrBOBgWwvAqdUAwBm2GIDjSgDOtyUAHGWLj02T p+VhuuPy1NBw+W5YOqzJRcJZTZ4UMs2P90OuyWM6RNIK5Fx/tiyH4uUFnfb77HfZC+z59tH2LLvb nmnPsA90DHAkOfo7EhzxDofD5rA4uIMcA3XjojKCcI4NtCUJsFkEtXBBQUCJMwenGcVpPEoO/jjq NtRHUbegtqJuRn0QdSPqetQW1Khx8ZgY3c2j/MEuc+pu/iDf2Nu5kW/rbW3j63tb63mL2dKBwiaw cwbpzNiqsifTBrfck3bPgCnJk0oD30Iqzc7KQM7NK+2vDfg23VuGsUz1h2Xzwuq/ZUbUcaJhZEbK 1FHzXBXhbj6B5wcD3bxAQCTczZr4hOBc0c+aAhGolZtq1MELoEYVAqAmDacOoUYd0nBTbbtQ62zv CAY6O0CgYt1L7aZKu3WvqXI4NpMPBjCTIgBqtnjymWo+W7xQw6Yw9VgdKZhMAYHWkERWJ7RY3ZBE c7LBpj2vFyohkEi4M8cLhU5vjikeeVPsd5viupi4LmaD3ZTnxYa7Y3I35DdT9/+gVVPyf3XiWNvF 7QeDNZ5gpSdYg1qptrXUpqmtS12uzu0XhcClSlmVS6trBVbVqBc9NQF1uyfg6mwzx90hPijEbZ5A Jx0Mzg93HlRqAlqb0hb0VAUix2YdKN91m63tfbbKD3yLrQNisnJha5Y57g5bu4R4lrC1S9jaJWzN UmaZtoIr55Wsu+X6XnNzjPv2BK3DvW6tpQxUGTVNOkrpRMZ51PdE7Vlk3LDWk7vnFeOCNBZ3tj9W MSyfVtGjNJZew3v2GbLSz0ijEhZE/ylKYW5IFtMSVkRBvMk6MWs1/ZndR8vpCH1MbTye6vEMDJKf xmPODFpAp8lNK40eClELRamdDkE2h9qN14yLsDYW1hpoG+1gw9A+Qt30DlttnMZzoYTW0GE6z6YY h6CXBktTLTnwYjIFaAbNxMyL8L68DDMeoJ/S62yDsc04jQjtsDeGCuDX03QcEVxn49kGqUR6CpIS lDfoTdaflRjzjGPGy7CTTZMwV4SeQNlJe+kgnaCr1MPy2Bx2xKgzmowT5IWtWnqYHqc99BP6NX3J cpifj+MN/Ch8y6A8FDH3QnjzY/hzii6weJbAFrI1bAPrYp/ziHTcWGvswyHspXGweJieo1/Ry/Q6 XYZmPMtgJayeneZHpBRpt7TP2mL9D8NjfAD/ptJcWocMbaej0H+L3qH36HP6AjGksXQmszEsnxWw MrYI5Wl2lEt8K3+aH+FXJYf0E+klS0LPe8Z/G58hK1mUgxwXYMYAvi3KEbPIYBPKHuTqOXoRa/Uy MvYmvmnepvfpI2ZhKWwwLA2FHTcbwUaxaShliCvMmtgBlHfZZY6gOOddUkjaZSHLVmu+dYMx3Mg3 ClF+ixgkZD4VWSqgu2mKuXIVyGYt1cHyI/jeeQx5baf9WMUuegkefEx/oU/oGl2nr5nErMwOD5KQ IQ/LxqqMYRNQCpnCQvCkjJVjnRaw++DRIraELWOtbBf7F3YC5Xn2K3aa/YFdZp+w66aXVt4Pqxbi c/g8vonvQdH4OWmk9IllmCXHolguWC5Z062F1kXWH1gP2+Lsv7jxYc+Rni7DYpQb7cY+45xxheJp AI2nWbgLliKGBsTQTK20g3aj7EHZj1z+K3byceyjk1jj0yivoJyh/0JW38XqXUL5H+yxq4jxC8QX jxzHiljRdHNFJ7EpLIDo5qGE2XLsjbXsAbYJBe9zbD8yf5Adws7qQoy3llfZRZQ/sg8Q9TV2HXEP 5Hko5WbM9/OHeCvKVv5D7JAj/CWUz6VB0jhpgXS/tEHaKx2Sfi69Il3BOi63RC37LM9bXreSVbZO t1ZbN1gfs/7IetR6xnrOetk2wnbEvsO+234Zq7IQazMJd8KtVwp2WAc9S7W8hXfhRBiG79hVdJQ1 01fcgageYClY6w3IXh7u+n9im/H1NoZ/n+VijX5qLZP2YE/8AGdFIe7Yd3BvhWgX7pzzVMpO8YX0 AWXiJEsxrlKaccXabG0mbi2jTNQ0jEzpPeeuAq/0lOAshKznOeP30jC4uAXng88spIzM8o7wDHe7 5GGZGUPTh6SlDh40MGVAclJif2dCv/g4h91mtUh4c84NekorXWpWpWrJ8kyf7he8pwodVbd0VKou dJXerqO6xLgqiG7TVKC5/A5NJaap9GmyJFcRFflzXUGPSz0b8Lh0tmhOGO0nA56IS71qtmea7Z1m 24m2240BrmBabcClskpXUC1tqY0GKwP+XNatIPx4fy4STgr1ExOrNLVqE56QNFVoBNV0TyCoDvGg DZnkDVYtU2fPCQcDQ93uiD9XZVOrPUtV8pSoiTm9w8U4PMm8c8Ow7c9dqcJ/aktY5lnWpiu0tFK0 qirCqlQVUXmlsJGco6Z6AmrqxvfTbrLftIJP3CJUube0qiZaqiqVbUi6YCsFV/UEuDLxHqPyrZGw yrbCOeGE6Xssitiz3lu5yqXGeUo8tdFVlcg5zQ1r6Uq6+VBVaXZYG6IMMRl/bnfa5sluJKXbX+wv FjjZnbY5hn96JNb/xkmBaZtPXQSWze3LCxO2PSG4qbqqTSMe+DpRkJqJFK2eiPThijBEuVKNm1oZ TboL66FavUkeV/RTwkJ5rn54e09Vb4/Nm/QpCaFYzr4dobKq3jb+2+SW6RQ3O9zJWHtEvGHrFMjs xl8gacliv07ZYjusDGA0mFG56PC50fLlukrhdalYN1fUFQ0ti7pKXbVYcIvXRAhqopE8hDMvvBJ0 ftitKpGhfc2aSOQuzJMj5sEQqEcjmGFV7wxAsyvvBpRyc8vE287s8Jyw2hoYqiqBCFKCLXZydlg9 id0ViUALMfZ6Cty0Mq3X59Hw2e+DPC82C97iWzFFJBoVc84Le9zqyWh0aFTcEzFeZ3Rnh9LboZNQ EVtFZ62zMRbgcQ8VHR63xw23IgGYGoPt9c3y4u/Y387wuD6/MXI8vB1nZjj/75Thgu+S4QnfKcOF fZ7eluGJ8LlQZHjSPy7Dd92W4cl/O8NFfX7DybvhbZGZ4Sl/pwzf810yrHynDBf3eXpbhkvgc7HI 8NR/XIYDt2QY/4EnkVf8A8D1zf/kBPwcTgDv6usR7//iD7h4TyVbf3w7iLe3YiXDapPxGLTYZYni rRZZknh6nM0uMxriwB+Q0cfcK2an5eTMulY080bRrKTPimYm3Siie4puFIk6dsz4ZHfySFSv9fLp 6z+z1n6197R04ess2DEvYz21xVp3UCGXzD6G9y78vsBlo2SismnhBeXlOfNX1tes85c0rF5G/wtP F1H7CmVuZHN0cmVhbQplbmRvYmoKMTgzIDAgb2JqCjM3MzkKZW5kb2JqCjUzIDAgb2JqCjw8IC9U eXBlIC9Gb250IC9TdWJ0eXBlIC9UcnVlVHlwZSAvQmFzZUZvbnQgL0pNR1dMWCtTeW1ib2wgL0Zv bnREZXNjcmlwdG9yCjE4NCAwIFIgL0VuY29kaW5nIC9NYWNSb21hbkVuY29kaW5nIC9GaXJzdENo YXIgMTY1IC9MYXN0Q2hhciAxNjUgL1dpZHRocyBbCjQ2MCBdID4+CmVuZG9iagoxODQgMCBvYmoK PDwgL1R5cGUgL0ZvbnREZXNjcmlwdG9yIC9Gb250TmFtZSAvSk1HV0xYK1N5bWJvbCAvRmxhZ3Mg MzIgL0ZvbnRCQm94IFstMTY3IC0yOTkgMTA5NCA4MjddCi9JdGFsaWNBbmdsZSAwIC9Bc2NlbnQg NzAxIC9EZXNjZW50IC0yOTkgL0NhcEhlaWdodCA2MjMgL1N0ZW1WIDEwMyAvWEhlaWdodAo0Njcg L1N0ZW1IIDM4IC9BdmdXaWR0aCA1NzIgL01heFdpZHRoIDEwNDIgL0ZvbnRGaWxlMiAxODUgMCBS ID4+CmVuZG9iagoxODUgMCBvYmoKPDwgL0xlbmd0aCAxODYgMCBSIC9MZW5ndGgxIDM3MDQgL0Zp bHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBvZdreBTVGcf/58zO7EaSsFwEdU3ZNYZrYoCA yCWwYBLRIMaAuIs03JIQLJFIAIGUsjSmwCJeSktTmlKxlFqkcQWKK7U0eWgFy8ULVHqhWqoUaSla izQPhqTv+e/KB572Wx9nM7/z3s553zlnZs5k8aIlFUhFBBaCc6tn14BH2lppbpq7dLE/oadUAbpX Zc286oTeJSI65i1YXpnQ03ZK+3hVxezyhI52aW+vEkNCV8OkvbWqevGyhJ4WkdazYOHcpD9tm+hO 9exlyfw4Jbr/kdnVFdLKkR4S+GsW1i6mivTB0vavWVSRjFfi93hvy8grGtB3bH5RTiC7X/90QEmU xgq42EvDiyC6Ae4PPV7xmR9jjr370YiZXcd8qrp5GLj16NqIEV7LPZffseNKk6fF2SKqw3jjkH52 05UmyTmtY8dnpzyrr3qM1xw6Dveg8Z06omx0wFIu0sJKkTVlRcIQnWQHeYVsJz8jL5Nt5L/JS+Sn 5EXyX+Qn5D/Jj8mPyAvkP8jz5N+lRgt/o3wOH6IcNs5RM7KFs5T/Sp4hPyDfJ/9CnibfI98lT5F/ JP9A/p78HXmSfAePI0OyvYNMyfM2bW+L7MJblN9M0ljeoHyMPEIexiHp9RvKr5OHyIPka6z915R/ RR4gW8lfkvvJX5Cvkj8n9+EV3Cd17UtonW9KfmOxEMfLSBdPHL2oRcTzMvbK/WDTYwmDYjMWCz/D UOEefB3W+E7sxrPIk7jdmCHW3YzbxQwvsdYYXpSMNmK0vYhmLBXN2CyhydScHMF4LNFMphdQLPIO 9vkJ+Tz5Y465HaPE+yPK22j/IbM/R8vW5HhbMU6itnI8U6OFH7DfFowX+fuyMhaa2Pt7zLaZ8nfJ RnMf4zu4Q7iJlm+T3+IIG+n9JvkMcz5N71O4LPFPMmYDvU+Q67mmUcasI9eiv0Su7fxYrnUNLd8g G5L3TgPGit/cRxbqZabNDNczop7rZiwWVsv8nRLPanpWo0VGi2AVnhCb8VhCM8Or8DWMEZvxWEIz w8ZinlbzdH6VrJP3iImqS2jMYywWltOyjHyMXMqrXiLrb/rXYhEKpWdtQmNPY7HwKGq4+o/SU4OF XH1js8RjaluIR9BX+hqPJTS1GYuFr7BPFTmPrCDnkjPJMvLL5AzyIUyX2mw8RM3IFsKUQ+SD5DTy AXIqOYUrVUq5hLyPnEzeS04ii8mJnX+WSu/i+EW0FPAZv5PyBHI8GeTVjKM8lswnx5CjyVHkSNwp 1d5BeQQ5jMwjh5JDMExiBlPOJW8jc8hsTBTvIMoDyQFkf/STu9KWu86sl5EtqcrIWeSt6CpyJnzC W+SOtxCg3Y8HRO7D+C/RkkH5ZtI3PnEf3MRZuJG5b2BUb7IXeX2SXpmvnrI7ZUkdPWnrge7y5Nno wYzdkz5jsyhbsp+ZGr3yc0mF5ulKpyWNTCW7kNeRKaSHdGO4xDs4JrRp4R4lmhlT89kyO6ZL9jZz l8ySq58l1gjS8LScz8oZk7NFTjeUmtSwQdUO+kIOfCFZ/q9JMnABRzEaa/Q6ee9OQyvK1HnsUhux XuVgnXhHy7t9Fw7KOQI5mGVtl5h2HJdd57iegcOiVWKIvlHayZgqUU1a6wwsQavahFadrsepndii m9QqWZnp6OPqJ5EXEbL2oBp5+nmUuR7WDW6gVj+HJcorb6MyPUFPTtFodF3CCLtI9ohXZUW3W9X6 rLsMBapNRq/Cn3Aaw/UIzMEGPUcq3a+Oq73qpHpfl+INdUC1q6P2RP7Mt2BvXLBbsVf75N22V3Qf xlmupH+i6H0wQOo3Z6XaaB9WW+T6S+TqL2AINuMZsW+2J0oVQ6xG5FhSuXyV3CO/AVajWPLsepEP 4CmU2scxXTVhibNS5kp81l61C3lWo12vDlJvlGzd1RknAyNdAd3PKZOd5Jwd0/n6JB5Dvb4kkXvw nr1Bb5f56G436Xo1JzEnmGyXYr29AT1lZgLSzpAV6WNfRKnap3PgtbarHZ/Pjf26PqtTnSKU2+fV BdXm5DpZapfdpoF61eoMR75qd/LUfmekky6zWS/zuL+uYVWn7FqDMRAIuh3bZWmFbL83prPuLo8F 7w/5D4UDOdnXqH6v2x9DSSxtuT/e2VkScvnscMy+OWZleWKurMzT/8t5Oie7uCTkjyt3YUFy2MJZ BWKcEpIM8mfMkq6wIEc+WrOL43BKQi8p9WQ4rjob4ijIeMV82MwsE7cn2+8vnF8QU7NESckWw8CA SNdl+4ukjqLSUGbYH/VH7y6P+ov8VbPLpTC24qiIhnOlxCmh+cKpoUAsGPZdFSvC4VEyThczjnSR 8GhYRng4OYK0NOVekaDU7GJ/zOpbEro/FIsU+GLBgrAvEPAXxlpKQrGWAl8gHJaotKuVSsUr59+Q rDldak4bKP6uiVFkDoK+GMLRqBlzSigzEItEo76oXEdSj6PlGoPCtYZg0hCHGUNmojCuIiUymDSZ AZ8xZAYyA1Jn2Eyy18x9oVQaCOe4jqLSapZn3/xXYf4fgfw35sgJ+YL73ALZdSaIRaOyY5Or0t4m 72M3egdTXHCUx9Yu5B45dWQIvCeOnDgyuEe3QLesQLdApQvttZav/UzHJnd62yeLnAFmdIVm9ZZu dwXQBT2CHuu3KalOMVK9Jz4w/c8P7jHs9ryhva7v6WTe0re5uW7FCz9dUbdTX17evLOurlnKlBvb HB075Sn8b4fxr6FDyf6VuCJH9gjcc+9dD04KDZqyvHrOwgX4D3/cIjAKZW5kc3RyZWFtCmVuZG9i agoxODYgMCBvYmoKMjA2NQplbmRvYmoKODggMCBvYmoKPDwgL1R5cGUgL0ZvbnQgL1N1YnR5cGUg L1RydWVUeXBlIC9CYXNlRm9udCAvS0RGSlNLK0hlbHZldGljYU5ldWUgL0ZvbnREZXNjcmlwdG9y CjE4NyAwIFIgL0VuY29kaW5nIC9NYWNSb21hbkVuY29kaW5nIC9GaXJzdENoYXIgMzIgL0xhc3RD aGFyIDIwMSAvV2lkdGhzIFsKMjc4IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgNTU2 IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMAowIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCA1MzcgNTkzIDUzNyA1OTMKNTM3 IDAgNTc0IDU1NiAyMjIgMjIyIDAgMCAwIDU1NiA1NzQgMCAwIDMzMyA1MDAgMzE1IDU1NiA1MDAg MCAwIDAgMCAwIDAgMAowIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwCjAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAKMCAxMDAwIF0g Pj4KZW5kb2JqCjE4NyAwIG9iago8PCAvVHlwZSAvRm9udERlc2NyaXB0b3IgL0ZvbnROYW1lIC9L REZKU0srSGVsdmV0aWNhTmV1ZSAvRmxhZ3MgMzIgL0ZvbnRCQm94ClstOTUxIC00ODEgMTk4NyAx MDc3XSAvSXRhbGljQW5nbGUgMCAvQXNjZW50IDk1MiAvRGVzY2VudCAtMjEzIC9DYXBIZWlnaHQK NzExIC9TdGVtViAwIC9MZWFkaW5nIDI4IC9YSGVpZ2h0IDYyNSAvTWF4V2lkdGggMjIyNSAvRm9u dEZpbGUyIDE4OCAwIFIgPj4KZW5kb2JqCjE4OCAwIG9iago8PCAvTGVuZ3RoIDE4OSAwIFIgL0xl bmd0aDEgNjEwMCAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAG1WGtsG8cRnj0+dZIo nviUKIk8Ht+kSFE0KepFyRYpS1ac+CWbtCPbsi1bLuzYaFTXAdrAbZGgEdoi/RGjTgq0aIv0kTRV /rg0gyAGgjyatoD+tEUDIf8SFEXQP3Hyo4mkfntHKbbiBkbhUprb2b292ZlvZmf2buGrX5ujJrpC Oho9eX72Iqk/Y56InTt5acGn9dmv0LpPXzxzvt6/SaSPnDn32Gmtb1omanl6fm72lNanz9Dm5jGg 9dk2tIH58wuXtb7hH2j3nLtwsn7f9Av0Y+dnL9fXpxX0fY/Mnp/T5rteRBu5eOHRhXr/ONoHLn51 rj6fldHfnezMjEdDheHxbjkRjlhgAkbtdJUaaJ70JKBH1EVg9BHYy9T7mDN7OEDHWoY+ZpKO60XX x47zhpbF6+9/NrnmNb2uz6LbUJegytVV1+PUYX4Z96+YXlclqc/UL/Yq2eOshicEcsbZa1iuQH0U Jy/ZMKUjTq/hzq47h2pQUk+eeJWYr/TNs+5ilUR08BQ3A/9TdBistD5AjYKBmoR3SMLtxFSVGvaU X2bsB5UqW3+iWqTOG9BWd+xoN0QlfL7S2eISO46OkMBATAanS/jGl3TB8X1lpeJb9C1Onlr0jfvm Z08t6YNqixtzi5WUb4n2l8/ieqAsL41WPJvsXKUyADl6LgePYPpiBRK+UpeAVh1KrWKSITHlW9KF 9pT3lpeuFD1Lo8WKR5Z9paWbe8pLN4seuVLBLOOmptCYm6/pbILOxhjumzUp+yEDIiqLi1wmekJI Xrq5uOhZhCXqiCJXGdUHYCmfowuWqmx0T5nfGlVkDx9QZEWGHpUiZDckpvaXS9BE5pqIX4CUirdB 2ripKOY2Qb1GFdLm+wSp5V4gbbknSK2bmt4BqQSdrRzS1rtDqnwJoJsIj94F4SsawlfugrDtDoTt X46wY1NvKOmEtg4VYdd9Qth9Lwi33RPC7Zua3oGwBzq3c4Q7NhEe9SzRZtAC4StbQpb+awz/r5B3 3gY5u0UZ5kTuS9AhoY0Cwl4aq7cBtS1gLEGj9B6V6L31jzgvYIztpmE862WD1MDHwFuQJS8gD2n5 k1A9jOwo+j76zRfyIIa3/LQsvGXwPnZ1SKEGMpIJMs3IgiI11qU3UbPKWaiFrCRR631c9f8nipcL ogn8PcIuC1bh2zqf7rv6Af339Nf1twxDhhWjaHzJRKY9poumtzFToAwx9ifhbZQcE83xOoTUmUKd AJmtyKXLoNQNTNTdwqj1BgDjXMMKoTiUysjpKQ8fFAuV+oCBDxhIzwf0eACr4AEDONS3Wz1pJkuy TZIldm3tzyyTWTsjPLv6jHBttV94CxFxCKFySngDnlBq6KIw8Qpn5aupatWgp1kdNFl70rKkWHSK IyOxU9tNob5ioCq8EdnW1Vhc4xU8sP6xIAoS9dAO9jC37RXKw9BmcoOLgXOBq5ILdhpgpyG1XUIs 5MkJCoFyoHHQQdBp0CWQeWa7gZ4A8wxImKlSHob5gMkNVGuOjAv9njpXpTTkpqF4DGsUNzELcoiC ZN7ETOADOGlsDpj5gJkP1IClQEGptb9KQcjuAIhQ4Skw13hnBkqbwbhBEVAeNAEqg+ZBl0Fm6BmE Bt4VVHXISHIZEpBMAoIkhUF9oJ2gQ6AzoK+DVFufBHMVJMzUYJemSY3SmzoNL/ekg0bFH8pamOJP CtltBaGvoMtuSwqK32hSCrpMb5fgkOzOTG9f2GJw2LuETG9ByAqiMyyHlZmcMpL0dKVHZGWkp8Mh R+25Cd20EBjanVBKeb/J3tiyaN3WP5DslDwBe2wo1Co0B2OxoNXfF07klVajydTc5u7wtxqj/T07 oq2iN9+99klXh+GtpkZTgz3oc3S2ml1KVN3AAo0hJrpxFnJTgn5bpWSqBpbUgHIDIQH+4q0erR5+ S4K3ADU+5sSYE2MW8G0r8MG71Eb/BMEHHkRqm/oXxbUfNAmqgM6CHgM9BboG+jXoBugPoGb4hUtW IFlJIcYJ6nTVg77LWsPxD2dPhKgNsW6TMtlMF9AEdhvgSsxuAcwa6hznsWnBEk2mbIOVwc6uwcpQ 7rBDYIPWwGAiUQi3SqGheHQ4bBPeWc2VXN5Wc2zyRF/fialEOM4a14ZDE3m/nNsZCoz3+X25EmBh fA+xf2MPKfRYDZHUqKrTYYXBRnSdoBAoBxoHHQSdBl0CPQm6CnoedB30JqiZ756/gHkfJMxQDfFn VUW6YK2RZJU3AhIC6Fa09hVkjExSp/gtghY6uT7l80jL9DrZT8qG0ODuxPDDw13e4SODJx+1HDLv HIkMBCRrsJDMjbJjybGEIz41NzAwOx6aPz60w5ctBsKTeX8OJiKQeZ6wICZsiIlXqtQNJzhgGgfe ARW6Qf5lEE9AK6rlhNsEy/HeAhoHHQTx95tLoCdBV0HPg66D3gTVLSdYjiXhdyekipAqQirn3eDd dT4GPgYt4uQnh7rz+YzEMiLEgeEW7FiuXAsw60R64HwnIqQPW0/dbPWgMEiKpNwJXcbxuDUwFL89 GNjTaswk7bfHzNqWWHhXeGftE5fXZo6rEbMrEYqPc0NU7HSIDxFoHKnhtQNZEOrYoZoDEzYwtEN/ BqsIbRPaphR830KBTTva4X0+uR0PMojhPMPkAH+Ax4CsJRJX3fl9co4nGAQF3xI59su1vwnOUFb2 ZcOuAwcaS7lYIdLK2HcER9+RUrayPSB4C0cK5QW2rSsbcbnCuZcyvR2pYX9qvtwfmTgxOHhqIlJW 7UmxNdgToSF6tYa816SqklTVQhWsqyVArTzsyMMdvNTkVS/xUceyGiFJREgSmCQRIUlESBIRkkSE JBEhSUSIllSfR3sd9CaoHiFJRIiWbWWsnVTlyogLHzYEB6SwAuQ8kMxV8UAtE2o4503gozipcD6K aAhKikNJIid/vnEyjnpkhBUVtfBtmYPfYmt7mGtfeuzhvLtz4OBAb8UpSKGBmCMZ9rBpITI8FfjG wr9ieb9FCg5EI3nFKiGxsL/visczD80ms8d2xrp7/PGJTGeD3eeKDQSsj/9I6R9XgsVtXl92hz8w 0a/wnDKKy4fYb+20t4aLFiXc8ZZ6fuEZth3EszFvtb2h5kftHNAE2G31c4AND7ZBKgEqNUtK6jZw OqSMpOZJi2BSpNFpW6g/nM5PS7FixpXuDogCz4IsoAwm3PmetZ+xA7FSb4fokN1MgkN59nsWOvJz ERZjGLrd97w+cG8Y+Z40qBM0MxjP1Fmlk2H1Z6enhRPz8zOrn+IFnIT1j9YH6zJt1MfjxqLK1EMO QR5vBXgZMmvYT5onRVgH2+qLq7IdNuxruzHO/KGwA1U1h3Wm7R2tepPB7uof40uuzgjjq29HvIxN 6kfw9AbmEvJtqQajNIG6LZjroIEDmvAk4+RzACns4yevOxG/K84mJXsHyo9mBcGw+ulWiI/u28gb 7dhnNuSyP1YpgiWioAg0sEMDO/j7l2ujkNoFZEWtaouo2uJG1RYRPCI2joiqLaJqi6jaIqq2iKot omqLqNoiqraIqi2iaovYqGrualN9wnOwUs/BCvf9lhwc3jju1EPx8bbEoCwPJto22sO+0aPDhZlR n290pjB8dNTHhNRkb3t772QqNZlub09PpvpPTEajkyf6+09OxmKTJ1V/DsOpuwUbQijM/clUZbj/ moFeMz9LMDixob5HGrhmOD9w5bIhnMqyw9P2xESmdNir+uiD3t25jsPC0Ag+2THyoub/Fb4ZoBdq 6mK6eA1nXC2z+2BwGrxPzUzplHoOSgNRHAm1c1AaiKaBaBqIpoFoGoimgWgaiKaBaBqIpoFoGoim gWgaiOKzCPzDq0MMrQPUCH6I57pcvTLksHAQ6YJvQ36Y3TglaAdbVD81p2mHo3ASB1CtGLo+Pzzo N9LfAj9fPhgPPzQS7kwN+7qGerx2X9jmiPqdwrTO378r4S/1Kb1T5aledzBhb0+H3T/vGYu2toQK qWCvbMeR09bptLe1GBvscltqJNgiKflwb94rOfyy22s1iq4wcGwAmJ3CT7HnUBm3ZhD+ZsX9ZULL 64YLNnPf8axi51mF+6+lXn54lPE3VW77RrowYKJjWcsI/BUIgTbIsuphEJ6+Pl0uWzpT8vawvc1i OCMYnntuau33gYS7YUontraw7VPwLJQaha8/RHpy81zMX3r5Ek1Ybqu+2umXH9gEYqrvudabmXkj R5ixo7kIMyIOb2eSWnBCWc7xc3+uL+NgH96ei/sPeBCCaytaHmZH115EHvZ09yBLcP34h9kPoJ8J QaVlIgNPDcBGz++rOV+2KTr82Vj01cr3hR8euwl5e9nvVj/FxsC3B91lXHkeb6Rv1XDRXh95fOlX tuvwbVVPbAZMaoO5qDJwDQ9JPiXFl+JTXttg+KdkhqjVca/xKEVXtZuH8EZx4C+VvG9Gy93aAG8F HZmsXCddw4W1Iv+v/3heVH/rP6ZejdtyxYddWGKnIurTON7XJvBVeIoeoN20l/bRNM4Yh/DiV6EX 1OcYvlrw2kHYQXhyqji+a/9UfGLu3KW5hbMnZx+cw9d8+g9JtZheCmVuZHN0cmVhbQplbmRvYmoK MTg5IDAgb2JqCjM0MTcKZW5kb2JqCjEzMyAwIG9iago8PCAvVHlwZSAvRm9udCAvU3VidHlwZSAv VHJ1ZVR5cGUgL0Jhc2VGb250IC9SV1RIV1UrTW9uYWNvIC9Gb250RGVzY3JpcHRvcgoxOTAgMCBS IC9FbmNvZGluZyAvTWFjUm9tYW5FbmNvZGluZyAvRmlyc3RDaGFyIDMyIC9MYXN0Q2hhciAyMTEg L1dpZHRocyBbCjYwMCAwIDYwMCAwIDAgMCAwIDAgMCAwIDAgMCA2MDAgNjAwIDAgMCA2MDAgNjAw IDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMAo2MDAgNjAwIDAgMCAwIDAgMCAwIDYwMCAwIDAg MCA2MDAgMCAwIDYwMCA2MDAgMCAwIDAgMCAwIDAgNjAwIDAgMCA2MDAgNjAwCjYwMCAwIDAgMCAw IDYwMCA2MDAgMCA2MDAgMCA2MDAgMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYw MCAwIDYwMAo2MDAgNjAwIDYwMCA2MDAgNjAwIDAgNjAwIDYwMCA2MDAgNjAwIDYwMCAwIDYwMCAw IDAgNjAwIDAgNjAwIDAgMCAwIDAgMCAwCjAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAKMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MAowIDAgMCAwIDYwMCA2MDAgXSA+PgplbmRvYmoKMTkwIDAgb2JqCjw8IC9UeXBlIC9Gb250RGVz Y3JpcHRvciAvRm9udE5hbWUgL1JXVEhXVStNb25hY28gL0ZsYWdzIDMyIC9Gb250QkJveCBbLTYx MCAtNDIxIDgwNCAxMjIzXQovSXRhbGljQW5nbGUgMCAvQXNjZW50IDEwMDAgL0Rlc2NlbnQgLTI1 MCAvQ2FwSGVpZ2h0IDc1OCAvU3RlbVYgMCAvTGVhZGluZwo4MyAvWEhlaWdodCA1NjEgL01heFdp ZHRoIDYwNiAvRm9udEZpbGUyIDE5MSAwIFIgPj4KZW5kb2JqCjE5MSAwIG9iago8PCAvTGVuZ3Ro IDE5MiAwIFIgL0xlbmd0aDEgMTc1MzIgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngB 1Xx5fBRF2n9V3z1nz0zmTtIz6RzkTggBAiFpIAcEidwQNZJAwhEIhCsKAoILghFWlEM0gAeIIOw6 hGNDwGMRWEF9V1zWA7xYQBE3iu8ii8BMfk/1TBCyvu/n8/75m8nT3dVV3VX11HN8n6qazJ09rxYZ 0RJEo2H3VTdMQtpHHYUQ021ifXVDOC0tRAgvmdg41xdOcxsRoq9NaphcH07r1iDEuiZPnx953joF oXR1Sm11TTgf3YJzzylwI5zGPeAcP6V+7sPhtHkHnE9Pnzkxkm8h5afXVz8cqR99DmnfjOr62nB5 lTzva5g5Z244XUieX9UwuzZSHo+D9hQgDHdzUQMyoHLEIgpJ8M1HiL8EeTTkknwKoQNvHeXGm/N/ xhZBe92D/zi2hFx8sMXe46Z862VupvguJEWtPMmA5wQUQmgXc+amHJzLzbydQ3LJJ7cVdU9V/Znl j5a/nvH6ZCZzWub6rGl/nfbX9VemcZn9svr9td+H/a70Y1txXUt6T/kN/DO+hvxIxlfxhZY4eVh/ L54DL72iHavwXNQAtAToayAG+eC4BugKEAwcHANAFP5JdQrd5eGCXTbqc2Sey5FFIVumqWy5Fb9z IN4tvw3UijNbtNMRcupvxG/hQ2gp1P0GPiRgOB+OpA+19FkqH8Zt+CAaAbcPtsi58HBrS+JSOP2p pU9vyDwAGeSZ/S3yQEjuxfu0svta4jOg0J6WePJIYF/SUllQD+HtwBox3OVWnNKSni731+M4NAEn wCv8kXMsUhh8QL4oK/L5Pq0MVr3y10qZ/CaUPqgUyq1KT/kVuN6WvkveOgLyW+SXJ2inl8KnF5RW DDe3KHDzgNysFMsrwpfLlb7yjHCZieHTyPDzg8L5pUqpPFBpFeDhAeROi5w8oRUntMjdwqUTwzcT yEnVy3HKQNkPFKOl+8qjXaJLXPMQv6aKX3Mvv0bl1xTwa7L5NVn8mlR+TQq/JpaPEqyCJJgEg6AT BIETGIESkBDV2vG1mkrEKoqTyIljyJHRriUQUEykFI4wwgKFylBLlC+quKrIdRBh3LF8taOx0FVo LbDklRT9xqFKu1lVlPrrx/XrJR4ybP5hYP50xMPReICXv+PlMp4UGDISctZoOWtIzprv+DXhHFdM YMOQkeMCr8VUBLqTi46YiiGBLSN9D4w7iHfg7cVFB/Gr5FQx7iC9De8oHkHu09uKKm4Xg8p2QDGU Tk6k2AtIJsWQTL9AigGLtdehePwqKZdDTlDOraJ4rVy8W72j3J4JcnHRHhkOUMapoglamQnOcBlB e9eeEelQJh0OUKb7EjRCKzOi+xKtWdWkuj2KAkX6wAGK4FNI0Yoo+JRWFR1+jVYmKVzGtLKzjGnl f5TJ+80yv/L+f7yqHbC336Jp64trleIqpbgWqCrwZOMUV2DJBJ9vz7RFJMMXoBOrJkycQs7VtYFF Sm1RYJpS5NvTT3uuS/Z6kt1PKdqD1hePGrdnvVpb1NJP7VesVBdV7M0YVj75rrqeuF1X+bDfqGsY eVk5qStDe65LXZNJdgapazKpazKpK0PN0OoqnjpywP/U7Tlz582ZC5lz5sxBiCtHMihDJlAGU4lk hDpOAZ0j51B5xzkOPE9oFWhEPXKiN0E7CIU/zagNvqVoIXyb0Ukg8m1De3EdPtLRSu4wBehpdB3v hWsKNXZ0oEFoH5TZBSY4Ay3GUciMjmAZ7myiZPAZfrQYNePBeE+oCOlRbzSWMnbMQgXoBDpB/xfk VqJFaDVajzaj3diCVVyC1+DjHfdAnYfxLHyKOdmxE+qRUSa06jmtLUegzL14FrgRGWosgzc8i1vp ucyqjokdj3U0dXyIoiDnXrhfB72A2uG7D/0NfUbpqJP0VvpkaH/ofMfIjjkdizvAepAv9GGu1o51 UMdWdEDjwgn0D+jnRvwTXUvvYkqYER3pHZOhhg6wJj6UDn0oRaPRGDQbzUML4Lk2dBadR9fRDSzj JJyBB+LReAH05hNKpvpTQ+kkuoRuoU8yMpPJ1DKPcPXBr0NzOkwdAfCvOdCCUagWzYRWLEaPAocJ R9ugfgRcceIUeNc4vBXvxN9RiHJSaVQWNZgqp2qpeuoXOooeRY+mq5lVfEsoObQ5dL2D7yjteK7j Jc36McApAblRLEpCySgL9USFUNu9WtvHo4loEpoOvW9Ey9E6tBH6cRi+f4bve/D9AH0IvbqC/hv6 9Qv0TIDWhHvXE/o3Fk/E8/AS3IIP4b/gU/jv+Dz+Dl+nhlAbqV3UYeoKLdDT6bn0KnoXfZL+jD4H 3+v0LeCAzCQxY9jht9jQxtC7oR87/gyj1g3aNhnVo2VoLdoJI9aGjqHj6BT6CMbhMrThCvoZ09iM JWiDC1qRg3vg3vAtxGV4DK7AU3A9tGYhXorX4WZoUws+CW36iWIpF1VGraLWUa9RZ6hz0KYkuhDG ogTatZW+CW0pgG8hjEk9s4xpYrYxJ9m57D85iV/GnwPdOIneQEc6FUQ770Jb+SPQzs0wSi3AoV3o eZCAQ9qITQdkcxy1Q/tkPBtH4xKqJzqLfWgG5cFP4qO4nIqjtHHED9MCaAj5nESt+AOqkt2EblD1 +F6KAvk+RcXCm5aDBG+9+e2tZjr+1tnQMvqxW8OCzawA8jcfPYm+oJ9hZLQbPQacS0FI7Z6dlZmR npaaktwtKTEhXonz++TYmGivx+1yOuxRNqtFMpuMBr1OFHiOZWgKo7RipaTKF0isCjCJyqBB6SSt VMON6jtuVAV8cKvk7jIBH3muGrLuKqlCyUldSqrhkurtkljy5aP89DRfseILfFCk+FrxfcPHwfXq IqXCF2jXrodq10yiljBCwu+HJ3zFrilFvgCu8hUHShqnNIEvT0/DB1Vgoy49DR0ENiA9eXMADaxe BHYfDSQligMepag44FbgGvLohOLqmsCw4eOKi7x+f0V6WgAPnKhMCCBlQMCcGnlce3OAHxjgBsKr fVMD0AH0pG9P2ttNq1olNKEq1VCj1FQ/MC5AV8MrigOW1IBTKQo4F1xwpae14u2jxgXEga0YjQLf 7OlYsse9pAgcXWfJ4lWR0hehdIBKKKmubSoJqFVPwiiQZBVJVa+CFHZlQv2k0aQD4a6E3VhCVZ0v ICoDlClNdVXAeU9TAI2Y72/xeNSDYNY8xb6mUeMUf6DQq1RUF0XviUJNI+bvdas+99056WkHXYv7 +oFxB9P7p/cn575+1+Lw+dvfhe9/9DY5uxYf/RrOQ0bc5h0mTVMGQ9MDvok+aMA4Bdrfmxxqe6Om ib2BxfCpwNDzqcCRqiapD3QqwCZIiq/pZ8DfVUr7P+++Ux25wyVIPyOSSYb8ttgEcHXndSA1NZCS AiMPo1QLgwVNK9Bu5KanNQa8SoPkC3jB46Nh4+Cpij6ZwGy/nwzck62AdSARWDJ8XDjtQxO8LUjN TK0IUFUk5+3OHPtokrOkM+f241UKyOQ+Ai+RPSAk3v4zSw5b8ZQ+Aez4X7JrtXyIdtKGtCJx2Lg9 GP++ohVQaSsqijkIMRM9/sH0VpRDhH5qEfQfEj3S4EaKH65y03wlwPcS4HaFr8nXNLimyVfimwJi zSRoZ8iobarIhK6PHDcVjqPG+QNqhff2ZW1FRR94T0/yHngEijdVwBvqIm+As3YrMwiFeqUNIUhl 2Ljh4wJLirwBwIYwqKBIbwNb3wYdArFuRb1vtxRavGiqK9LmPGhz7xTI7xN+C4DeJfCKiqYm8s6R RD7fbmryNhHVD6dBZ7reUCM3WhEpQnShFS8ZBs/CSfF7yQ3Fr/ihWRVFUFXfNMDWEeVmPkBrgRDz AbYA7YDr80ClQIeB1gM9DZQFtBloEtA2oOVAUAa/A2c/0HtAi4F2AwWASFnyDLm3AMpNhPNAIPJe 8o7VQOQ9s4EeA3o1ct0M5y1AHwDNByLlyb2xQOSZG0CkjVVATwGRunsD/Q2I1LWPEAhcOAZHEKFz eDakfXCXCCKJd7p+aAh8yYdFHAQrAsiWDtCYAWYvTIDX7vxA4KR9LNrRimyRdPgUpZ3syAHIsfPj AmyBkAfICxSNYgBpyNAaP4pDCoqHewkoEbBHN0Af4KVQKkoD9JQBiA6B3yKfbKDu2tX/D4ccRGZQ EGDZ3mgKeP59gDk+pabTJrqK/oiZy1xhj3CTuBf5cfzL/BnBIcwWo8Qi8UXxki5ad49uit6k32Jw GF42ZhlXmu4xvWlG5kbza9Io6W1LgeUja4otyrbQdjlqRNRp+xT7DUe540UY0bUwZ1QPeJ6G0StW RZ6LwQwbQ1OteKtqBVHQMXwMjTwiy8VQ2C204TSMkSu1XLqaPzSYXy5dIydUmC8F84PkkJ2VjC1+ 3m/x0/XBROrMhtAI/EdO2nAzmvSMAj2R6cMQR5D6eqgGFhdxNMUM59nhfCv+4gCHhtN4OA2XLZQo ZL7/efsF6cKX5OCCSsjrsULnaHRqifoLbnw07yojU5nBUxQZdYx3hMrpeJyELChJtWM/Gq8fzOrx PQI70TRbcFu7D9HaPjTYLl1Ahe1X2+GFuQVUblxibo+eOd0By5jgHYOGpFeOm9B/1IKqV0LlC22l 9UOn5hePf3rxjHeaiHacp5Lo76kj0AePasAxiPKwyM28sZu8+oL0DcocGszOsuX67ecBiCU1NwOL UWnHKWY5VwC6YUexOErd4Ta6TQ6nwxVPpfFpQhbOovrx/YQirFJlfLkwCg+n7ufHCxNxNVXHzxCm GqY4ZuPZ1Hx+kbCW2sRsEtbqtpv2Rr8TfVo4o/u74Qvr36N/FC7qrgpXo9M7X52AE6g6w2TjZNNh 017LXtdh7zGraaBgNBgGWp2GKCdUbzQwHmkAYj0DOKOWssWMoD0+24hHRSy65X2faOyqHNoOIz20 3eLMA6YVkvMKISPVtEg6mp3lGjhfzXJFY6uXjanCbh4CfZfTjI0qNhktelsVimY8VcgleFRkoiQV W3VSFUYk3sSpUj75S126FFeiSuxDFgjrtCMNYY4SR1miHCKOxTndrZYe1CQsYkfocujfoeuh77Az iXLnPKS++keBWhD8PrWh+M0XuYLQwNCK0OOhgTBrtgDPx2/cXEwPruwfWh06338DJd1qGTwYAh36 RRjDw2C1J4PcG9FjaqEO6ygv9lJe2ssA8KdK2DHsfLwcP4ufpbbj7dQ11sKBWnAcjRlmoJVleZbB NM/ojAP1BoOuFS/aK4gTjOSMeQow96L9iMGM29SGfZgOq0vl0GvO/AvBfBA7kONC4GBGqsY/NKsy wWLCfG7PXjkWv92fS/UetaXp7EtteN6t0c3MHwc+mL2jct2NJ4kcYYhnEaOCHCnokDoyWUyO3umi E9lELpFPFEpsg/1jbRX+uui6mLrYOnm6fx77EPcQP9+7MHphzILYBfJ8/0bXc9Gvxh73fid63YIv 2iqybJzNYfKJLB0X7dGbWvHhvQ5WiWvFh1Q9wgb9CM9S5EmAtP9PtqXYHV+xLqxBFzSRuNoe7k47 tljzrCAe4VN2FgiF5HQbjK4Eo1OvYoPbpGIYcBhqGOjKZJzbowDiK9C8HolKHOl9AYxyLLZHcWYK kn5GvTW658bRdb5Pi1+syVtd99Di4Ij57018NDC76v4Gjrq8a8Czh8dO919ZUlBT71F6vpKffu/2 B6d+/odZDz6w+yHg09Ogb0OAT4nolDqnzDJWHhNXZznBfGA8oXzCnDGeVn4w3oCARYgBDTX1YPvw PUxD+GL7fVHTUI39EfQIP88+z92EltmXuZ9Hz/Pr7bvQNvs2d6twDB3DJ+xn2bP2y+xlPpbDnF2M cdjdMSxG8TGiPcppiDHrDcDHfaIYX2qFixYnCxbtsGqIN5pHeBq5EX5PN30rHv8n+1LkTupk6NUL mo4RjoKKNVrzMl0aVwlL86x5lry87CyQFTyrsleuI6d7T+CcX8kNXyhxID45PjBfHB9L2aOQPy7x 6Ys7nj/xRejfk59654+/X/vKm29uwd5PZj+3oqk09EYHKns9+ujcQ2vXtTW/Pq16eeWe0q+eqmsb 3G3ulglnQhccYErBN4APZTaDjuhASyap8lcG/JzhSwN12oifY9YZKYPROMFK0wzNU8aBAniMx1Qn MjCMEVE8b9YZGApNYHVmmjKbMo9+nC+dzg868yVLXiZ0CBUWXiVJnpVSmUXSaTDDs2eh2bPAb+Ri TQ0stAVT7wTrqbWHsBw6dyiUg1s20UduFWwKlcP8xI4grCbAOG+Gcb4X2uhBTWqPPH1fewPVQDfx rMeVYE9zlUhjpGnmBeYFriZzs3m7sMu83XGAP26/YZb0ZsFNSTZPK35jH8saaQYkfi+FGRsZKafR SNF0qXOE6Ilm2AkYLTW7vbcHCvRXG6pGGCLwfe1EoWG42i2REaq0ET225PgQjAejxCXlEhNWADIf 7z9M1wZH+yAMr3smdG3DhsujP6qoeO3BUEeolU6ivtsbWha61L7hhxWD38voO+aVMU+fIOMwKeI7 XIB3jqllfZ09vX1jh5jKnUNih8TVoBo8D83D69F6vF04xh0TPjScN1i95lR9qjdVzvOOcjwgTzVP SljOvK8/S51lvjBfSDAjn9tm14RSnOl73Uf5fDo7kVSJdZP+KzqjLeZliffxWTzNe5KQAgGVkgXh 4AilRlmiCEqpCyyCqpOMPoAbtNGd2Iqdezq9RbDx/UoXsKhyaDDsMIA7lUFLHgw8DDQx9Z3ajpSw 0e/utIMdoCxYYxNccvYoB44f9Pcl8z+bHbr4behK6F8wFxO/ed32tR9ewPVDNo5du3L1/j3Up9NW NP5t1RehgzBPNB4vw+9kHL439FjobHB6xcH63x/427Mb/6zJyTaQ5UUgJy70ilos0L3p3vYhYp24 kFvILxQWigulJ7jnuOf454SN0nH6DHeGv8xd5qM4UWStNsmkQyaPwSZJE6xwwyaxNBLB6h9SEwx6 BkGGyDIg+pKBMng8zhGPYoz/gXSSjtK53RWdTLlaCRbzm0rNhxYS1ES8qElzAsR4EjXnTfkrJBP4 VFzpBzxiLaR69vIDjgCt5szYRMVgXFjW1vvlPgOybp2lP+u7Pl6ZUlOV/eTWL7FU9vGQinmHFpYt /q/s7GdW7ziw7knoN42Wg+yMATvoAZycgwX1NQCX4OEGo/vQ2NT7Mmu4nXEfON/1vhv9hfNi2i/o F/wLdZOz8iKrE11JlgRPojcxKY8u8pZEl8SUJJQkFiWVpJZkjvKOih6VOCppdOrozFpvbXSdXKfU JtYmTetWn1yTWpM5Pbu++7ScubpZ3lnRsxJnJS3otjB5YfbC7gtzlumaspvNrxoPooP4IHXQ85n0 afdPcy5GX4y5mH2x+7XUa5kFXtTNzKT7If463MKz6UQefQ4j6kalxHrNVFZ87Mv6xtKsETZPbvzL TGNpygi3u0cr9u6JOKb2xquuMFwhFxZwSoTCuAUuwIiCA8JJGaCOgPiIywF/49Rcj0JgIMim5pSI BDp5Bo5hG5uE34srXXn18JzWmoz7V4xaO+nq1Z+vUuzq0mVTGuZNmM6Erv/xofrdp5LpYnf3d+Y1 nx35ctWAR+bPGPjwH6fv+Pe3uzrwgGlrCoY88vigkoVDL7y3Z+qapsm1H/qIfhNsOAnGiOj3CXVs Ymyuc2DsiNg6VIcXoAV4E9qEXxN22g5x+52fx12OJ6N0M97GxmGr2ZuQICToE7w9hR7eXHmSfp7n uHBMfEd/zPsRdUb80NwuXk6w2Wg7coeVvcr3IlF2iWh5i44N67xR02UlVemrDFUqlWnKI8qTyjpl myIqvNGTZANT8BSPeXfivoO/opn2vEzQcEseYEONt0TF28FNRVQcHJUJEBzhMgJDSIAd2EFgpdWC wd/f5iq9I6zj2PstlrAx9Fro87COh9Z26jjde9qKeadXfY5LQ3mhl0ILQ/0yD5XjxQBu11a0zlh9 4G8bNB2n8Dsdp2iRWQgY24m6qXZDg5XnGpDe/qBZbKBps9sVQf/5Q6V2Kdzq7Cz2V+jP0XdcU5MG VlUPGFBdNTByzqwaWDR+fNHAKrq28wrGzg925Q9gV3hkwD3VjRwSWSpT/5TuKf1Thhd0L+hfMLyl e0v/lkHXjU5mMnWJhsloMp5CTabrmJXccn6Z8ITYpFuPnmfXC8+Lz+k2GHZRr9Dvcsf5j9Fn7EV0 mf0Z/Rv/wlxnfbxA04gT9XrEshQvGPSQ0On1LA+rj5zIbtdTtI/Ws2y8lYEJWD1CyVaMKb1AUxQH sVVA7SfKAhZ+wCzDQAwnQDBGs3qmLzONeYTZxRxiOOYnvb6vfpr+Ef0u/SE9p//pr/hHDFFfqbHv Blequ1xqvFrpGhqsbK90EUQCOpUvkW+wkiBacIEr2IzUFYuOrshwkVMqQBYQhzxi0tj8/BVwPHp0 hSRAAk5HNTMHujgrR4EZd4X29/LTSfz5I/jLD/C5v9cFv8zCxw6lJXHSL1fw6GZq6KZNxN+/B/y2 AL/1qObAMOMaIyWQvh3Q6USRYjmyqg2dR4CuAqoHU8IaCI8D4tsiI9axhchj5PTxNOUGdKbseUbD sZEodujVC5VhJBv25eFQFlcmgB8nvpwQY7nVRvcMrqMygh/t2sVJm4I/NQfPQZsWQ5sIBtGjQlVm 6CRRV6pjKWC9wArxPM95jJQ+HiO3od+iO+sEMdRC58L8vEYAEiS4zbEA9gFS4Lj4JFVw4kTwCCcF a6hNv1yhPgsmgUmH+nZDfT6tvkFqEsNSSKc3cjyTxLGUDifpkcBdFkTo52WE3gIRdRvuD/e1cihg rs4ABK6I29FGCCrOJcgr3NPdeHRoFz03tAvYzny2adPNJIg8iJ0KQL0zoF4DzNJMVbu16T+P+mcU TbG4m+AYRBsGmUwUCJtgzfEJb8Ma+noXeHCqn1O6CjMD1ypB4QoJSpIg5oboIJqN0iVKCVyCWW9N xVGstQBbRFMqsvH2AogT4A8+SwHtYsINzU5TjJIUxlGAfPGCk/ixH87M3RT67scRYw8dmPB6KDSf 6hk8yUnT/uvR9aHQk83VB+oe33QbI5JY4K/q7+4x3uO6z1VrXmCcKzf4VhheEd5NvJyoF8yCxMfx SqI3wTeEqWDvM07yTvK9IbUoZyUTaJVTVGgS68XEytE+HW10RMtyvFWnM8jRBh3joKPOq7Y6qyPP QuPzKqqz0nnxopbFu6N+x+cA4nfnmAoB7t8XloGhV8M+6kLEOcGsdwB5Km55APv/ek0yIxgBafAJ EEI+L5nIPMgswFFaJKD5q0wqHvyZP4yjiOuSaYgGSByw+crRERuG1j0zaXLoyr8wtb1518tLX1gw vrx6REfoRuirB171vzm7sLF4+OrRffu+9OPrP2b9YcDKqvGLczP7Zm36575QiKwk4duxAI/y97CA 9QP7iZ4JgJr77uN4kG64UI0zqR+pDhACt9D30cjMQUTkIpM3nVJG4VAmUx/KYGt37brRTHQoguPt qEFN+tp0MeqacE382cSmCnpMcXkWUa9LNhoNHiem4u3gzhy3dQmUCBxRRJkAi2vSFUtHmROFBCbR lsBLugLMWqkCJJrAydJRcOiULxAwVGnLsURFADqoHqAB4rZA/QY+Ofq+1QPbln645ZkvZ3PSLfbE 2qEj91yld9/Sf/bzwumfYg+0ewHoxEjQCRFNVJ2DqHHUFOphigGLy8cT84t5jgLPG9jHMmFLpdpF BPt5KJ7hCgWPngGR0EW6MlQLAC+A1STxEegnIYj7IlaVoMKcXEy0FPvtC6hzwZ703qCP+nEXcwKU tNcuMk54YmgV0wTr8DzYIgvHixTNwMSdxLExPLLCuK1RDYhhu0FRtzArLWKOgIXEH0aq1MwC1BYx fHginRRcS9WHVvHnNv0yRrMFGA0MraLrtHp6qdFQCcwPIl5i6BhMWVmmGziY9ziYYOjQagCwGzZ1 4T5hLZaF92tGh6679RlVH1zL1V+Xm7nXwMoTeSvtqIU1SoJgZdVMI+iDDqbZsJvxaY0m02waiM7O cgJDSpmCZjI/QmKlc8yDTD2s1PvQefWB4/aL/FWeRk8wOz1vimdkxihiWY2lEwS7wxWrd3ihLslq la02mI6WXLHmYpei1/E2qy62D61HNoc1zmqb6pAl87wGK7Z64rzpDRDyu/3liyPyTdRYM6ygycSY avFgYX47SYaHTlh0tBPgA/ok02UedwwjCokxjDcbuUVvCopmY7ORh3elRCwfzJIMHjVftco+TPlw bBlMcdrLsM8OM/PE46YiMmUGBgCmjoi4Amq1ApaFCT2QX6eSSFtIMBXGWPT80T/WrPpq3fU/5U6T fIdSjjiME0fvvrho2NiPbq76/X9fO4Kz9wB0uPX9ycUPwHzzV57QtYvbd4Kpp9DqjivM/TBXa4GZ 9zfUIU+wu50fOy+z7fwv7A2eR3vFoyLFEH7S3gTBZkW016532STk7UND/G8HRupdGrs8ssUmS5nm F82U2R2bEWFdxPVqADK/vRDi6AibCEgnXHJ4CJccIrDFw7iysZO3pyA3683uwqVoELoY7C1joylr GYqx/ieXtHgT7CHFQTSemKRYctyYYNEw0MelY36oWfX1+ut/6jFd8rW11Y7e+e3iYWNP0RM0BoX+ ShjEld/qFfJ7sPjNqzuAO0RGt4GslQLedKHNanmNfq5+nWsXekV/yMUdYFqEFumAbV/U+/T7wln6 rCCyArhJg8tkN7yk15sUkXe9BEt7fSi93tAA7/J4rOmZ3FscxbndGcPulC2Cs4a250nthUE4EKkK +09zFC0wCVJCFG1NQWYBDjYW+GPhTZ1SFBGSygTodTzMtCEQERJmE/hthaCmF1N6aOeO0M1n8JDL f/jzO89P2jfhjZP9Gl/wFTZjcWcID+u/t6L241nPhn6w9CTyMBv6q4I8WGEdZr864AJ/jaeamDbx PfGzmB9EVlajQa+ibIh2RNuiLFZTsc6MHIqOt+qiQZnMVlmyeHzu9EeJAsmludDLRlhHAEhJdCi8 jqCJgXRBM0EQEXdKgtNLJMHLuLORU3SnIA8bnY1cvKOzp536EhOLqVgcXQY2z1aGY213SQL4yy7a QpCWG9+hK8vv0pVDv6Uo+KdfWvCnd+nJYx1fM/eAHNhBT/6k3ltiH21vM9ArYrYx24Sdhv3MfmG/ 5aTjrB5mCXAe4G67zeEym2SD01FqMpspL7DIplB610v24gYDNnhk80uZXCERhdjcu83MhduxVgS+ EYND5gY1kUh2x9BWSyKTICRaaTNwSQ9KEy06UlCMxNpAdQygOjG8l3AtFcO8O/mEDYkmI4kgI8SO WC12v+YRe4G3IfOzHJP/1V+e/eGplVc3/OWnW6HqLbX7zgTdVPrjDbNeKavbgJ0vPIc9m0MXQp92 m/t21cP4Ve8TL78S1pFXwT+uBD/hRLVqjChhSS8ZfHqfoadUIo2W9gtHBZHjscEUBV6yVY21UxQy RTQEIx2DZYdNb4uiooa5qQyXdFW6BT1+PxN6D2iSKAUkSUqLOolB9FtgTpRMLt+W9Rjwln4LfuH6 9ZpTux97/OmGipVD8aFQMV3b3OOL0yu9e7IGrG8Z1HyLODaQccAlKviPOFhH/EVN3N7tAv9N7M88 8wTzhtjifF/8LP1H8fvY7+XvfaKBmL40uliwtXbcUHNcDjcdHa/AKnKaPj7ZXJxIHEkaCH604jDH xcu2qWZPlrs4OSz/mXfJf9jzk04B/CPO47YlhP5pfesNBrF7UmqMP8rOiD6/7I/105yQmMokZ6MY e1wKjrIlickpKIVNy0b+qOgU1I1PTNHWWbRlltTUlKXwCbuV9AxMZeC0MiadUspwhnKXmhBc2UVP ciwSzEDdnsns2Qsg5/+iN2ZLt9D5k+99eO+300dvzMyM+y01unU59M0idf3uKYd7juyZk7OiAT9y h05h2P+EmAKwNU60Ts06ygOnOZss0A4nRrY+HO806YgGGY0N+jV6Su9xU04ZZ4Iddbs6rWenewF/ GV6iBM5qwAM46QCbpBf1gp7mLIlW3pwNcmkDtwKKkRLhEfCZtTO2MjaKdZQhu4Oh73C9lSRQIzLm IBNHEKD0IMtVHG9pbhv2j1njN8tua5s8MnvCucFcedC79Jnq4tyH2oJrqBUvTR7Qtio4j+gGhbYA vDmmYSgbKlBtlot6QIyJDM1xbCKPdMJFWI35STVwl1iZuoTcUbUnwmjqQvDC1eBtuFZI1jA1XA2A DUdWMcHiJ+LToZP4Cu4VvDImMWnMmKTEMfSR5lsFzeyVwoIC+CsgPozsXtgOfNahA+oSnhvHNbL0 cvZZ9lnuVfZV7gx7mb3OCZ9wpwXqXQ5vZJ/jqE+4bzkw+03sLn6XcIh7g3+P/56/xYsCp+MpOxvF reNojmZ4XrYKoNwADdnzVoZmRBr8FctwsDdMJwAk08E+a52BokVaJ2PSFIM+8/0vYSrBmW+RyISd EwBwYT5R8GO8xKZKIkQ+cBIA4c8mqj4b5vFmzSYjgXNE7MeWD9oo9/XgJSqxAwXPgb/WUWzwZnAH NS5IfomAYWcbor+EvvJooOpHGqtRmNXAYvoS4GIZ3ws7Jb8C1OkWWnGfPR+HHTERIOmf0j9v85yE X7dZ/pdQCyXgSrZl042hILaAXYGny8EfJAACbSBrit44r5JGpzFpcWlKDV8j1JhrpGmead5pyrT4 ufxcYa55rrTQs9C7UFkYvwzmhJaZl0lr+bXCWvNa6RX+FWG3Z7fyluct5QPPF57vPTc8N5TUeK+O ZhL8fThXH5MJLCiXEBMTHW3TwfLFftUwyOKzYtWKZwJmbcVnWqIHxZD7xkGi1xeN1Wg8MxpHk4xB VAJk7B8EipM49CCu6FzabwzmN16rnDUrP78x2AgAF64ag2QJnsDPQjhBGA/z12Qy9bYqxMByHllC v0MdQDGI++AtpVuHLi8aPtFfWdN/0KSthnh7j4cKNvVx5szLZSo70NaFj87Ln/TokAUHbu2jbj5Y HP9Ca3A9dWNdj5Yng48QXYnYA83HPtVpDyxugY6yW8AawBqcQWc0yDAd1iCuESnR46TsEXvg+J/t ASxkR8CUxEtCgjlR4o3Z2CRawpYgNWIJrDaGtTGWMtbKRpUhW9TdlgBB/2HGQptJvqPnmiGY+HL/ iBlgKq8ufWbqa7/8hw0YC5iqEfpF5ix3qmM3UM8zzwsbdMxxfJw6zhxnT/AnhBO6E/oTxhOmE9IJ y3Hb8ajjjuPOdtzOXuAv6G/hW+y/+H/pXb0Eq8LxBgXpzekNsHjvcdvTG2hMu13lk++Ek5HpWg0w pGCnUW+GI9aAI1xpENKkM6QgBwUHCWAljmLgQKCCdtCW6tk4pMFJWOBCSdpSJIwyxBvU5Cuhr7Hv yo/YF/r6x/WBwPoNgQAoVUcHLg+1dHSE9jRfeu/kpUsn37tE4otQOXM/9J3gyaPq8H0wT3eKOh0D pmWpa7frI9f37D/5b5w3eQEijOgwsox22KLcZkCWgCh5CwfoUi+Z3OEgw2c1y5KUaXnRQlnc8q9R RniCQAszwAUUws6P34aXBFligjExQZYaxoQek053+s1OeMkSeInuhpfaqoLmEm6HGSAO//c4I1TO mUPd7og0MLoB9kQFPlnQHDUVHKERtuvojTqBo3Q6RBlBASgO6fQ6WRQFj42ygDl1W98KBxERLxiZ HoHeE3sKBH8asAgDApOZYc2MsYw1sVIZMkMc/6uz65RvJyCrsDLfaBt7rqm2dm+md8q740Gym56Q Q/UdwrZtwYc0Xd0BMt0D2puMx6l7qLhMlIkzqczkvmJfXc/YnnJNHOyRjH/Y/LA0xz8nbo4yJ36t 7fmkXUlt1lbbvuTT4mndRRF2sohXdbHEOYhmURJjRFhpx2aH2emBbV7dHN2c+WgIKvYV++9Ho3yj /NPRVP1U41TTVHOtXOtbgObr5xvmG+eb5jvnu+bJ83xNsJ1qNzroO+g/bvzY8LExsUyIk006xs2Y LDo5Oo53bhnvmOdWonjciqNVHYMYpZveub8UZpcPHGiAnTSeVDCYB1R9pgVbpiJ3SsYfws5YW9aD GYD2RrJFCSDphcJ2mMWDOQ4yuUqW9SJBTA9PEmvz2KKzEJvEZ2FYW8nCsWZIeq3uLMwlMllIiNfB /qY4URcjyVkoVjabtGhfO3SqH9k/QbYAxILJgT0ASYmZVGJSePeSFtyBGjodMoa9PbBsqMTtaLgx dvXCmJg56tIPe/b6+497X2x9uXF5n7yli/9QUvLVzx/3PTa47/1F6T5fpidneHHRhKaWHjsHjCzI j4/PzCgsK5v59KGw/a2CMe3PHoFYd6Fqa0Ir2OfRevY1xLoFRLtEB+x9yduvk8REM6yLPqvqHDBb iqb6AO+34sdVs9EqG/hLMtlT5C7vjG7JzODVSrINS9s7RiZMCNQFeCbBqlsim2BnrNnIxjmyUVgL Ya5OA6awqKTNHYX3CYQjFab/7xp7zTsykewMasM/hczqtMEr1qf3st8XaMVHmvGRUEFzqP+KmT1G h/vzFPSnO/yGxY6eUXuc5D+zUTLMl2kexQB6BV5Fb6fgV3Rvge/xOA1GWa/TZYqPii+ItOh2RAa/ MowtyQzQ7flHmM2PdIKXyBQk8SmI+JRIJ8IK1+lTGOJTcFefAlPeuZHVMzIjqQ11LwvTve2+z2dM 2KqCT8macK6Mqby59eempqm7rlMNwfmALA+upmDRFyM/2Is/QN84tE1NXkKvoV+kL9M3aLaUGktN wZPZHYB1vmGvo2usKLAiTFDCDjwGtXasUrvBCpMPABqSYWMHRXY8kQtApLBmBD8e4MDMwLIRw7Ft WEU0VlUzTEjBb2sCmIGdX0ue1VaJtEWi9s4VojBk+I+1IXC4nZPYfgLfcmCWN+R9Hz+KV7SFnEzl rVX03Jtbw2PVG/qzGfqjR8fV1cTC0EI3NplL5lOEPH4SrKVNZubQc5iN1E5qJ/sa9xrfyh7iDvIn 2E/Zb/X/5q/pPQqby06mJrGPU8vY7ewn1CVBhN7QOhZzMLGAeEbUI57WcTzpOSY5OhmW+hme42Ax jYPFJZjQ1OkgBgIGgW81vg5L/G5DBDHBytiFSukbsrLviiAkDSetYIdqy/uR9TAzfMKrz34FOqz9 KWDUPsF/Ck36ASvY+7fQQvzBj6Hd8AucqNAT+KFgKPgKfoP0GP0N5nXvhVihD3pcHZB+rEfGynTT MR42erpssBnNhGJ69uiWwKTHooRkvkcvd8yK2FhZNqWlw+8yrDGxR5JN6SeTe82Ii2NmuIcnJwMo /Hpv36Y/ulJh4kW62k7wHEDcq2QnJ1nIy4QbmpMEG6ZZMHAYToi2MeyZ144AgMk+IzMgryhHX2xX fGCCCmmyKSkVhzclZdLEKvlz7Bo0AItEFtoppXJsapQ7avy65s2hH7aYrRYDv2hLRcWmR3mDxWre gq2bm9dWQYHUsdTC7AcnqnkPzK5M7ze6OTCzb9GwsbkJSuWy5seq4+N6jB1W3HfGnk2jC9IqZz+Q p058MCwri2Fe+obGp+Vq6Z18CvMHxYb5FcP3YFCC1R27gsDmdDC0aenW2Jgj1jt4lG49aXL3XaZt 67w6FHjUyan/E5syYFKlEHcyhmzRMtOdTCOYSVun4Tp3cmViYFoBpl6rHJtiC7MJW1+Q7maT9ELo h83N68ZHuW0pd7Np054Z+cAmAN0PLGv+XbUSl0vYNPP15jvYRKF99FrGDTyywC7Cfqof274utepj BrPO8cgqoTmwV1aoMT1vneNxTvTU+BLiM9//uL1d+uYaOWghEIgKBAguEAK7ibKTXbMk3iQNT+h6 g3HDZtoHKib0Hz0fNtP+/o6dtVz9IltJffnUviWws3bmkSbp7iTgwzvb2UsFuAXtROOd7OAYPWlm DezpJa2scU4kjTz9cXsQ2hjsbGK4hbauu3vZrjf23dEmPLv0Htj6W91/NGz9pdfe3aKuDQSBi+yI 79hL5it+45ML92jYG2+G3yvaYE0ivL+d7Gv3IK+2oz0edq+Tfes58Ou5XrDvux/8+k9FA1ARKkYl EEkOQoPhl4hD0D3wa/l70TA0HH7JPVL7hd1YNA5VoPvRg6gK9ufvh5owIGmw3fDhYMceGjF21KCx o1OHzpxRPXEmye38fA4Xl4Cuw00ByAVEVoTAzuJBQOOApgA9DLQSaCPQDqBWoHeBPgW6BHQdGCAA uYC6AfUGGgQ0DmgK0MNAK4E2Au0AagV6F+hToEtA14E5ApALqBtQb6BBQOOApgA9DLQSaCPQDqBW oHeBPgW6BHQd/IIA5OqIfEgHb19j5OuSjuuSTuuSTu+Shv2Pd72P/Jrgzvdrvyy4o76cLvnabv47 8ok03Pk8TKrfle7VJd27SzqvS7pPl3T/LuniLulBXdKDu6SHdUmP7JIe1SWtQak7+ndfl/z7u6Qr u6THd0lXd0lP6JKe2CVd0yVd2yWt/d+LO9o3uUv+lC7pqV3S07qkp3dJ13dJz+iSBqW7a3wbuqRn d0nP6ZKe2yU9r0u6sUv64S5pberkjv4vujvfF90lHUPS/w8TIhzmCmVuZHN0cmVhbQplbmRvYmoK MTkyIDAgb2JqCjEyMzUzCmVuZG9iago4MiAwIG9iago8PCAvVHlwZSAvRm9udCAvU3VidHlwZSAv VHJ1ZVR5cGUgL0Jhc2VGb250IC9XVEtTRlYrSGVsdmV0aWNhTmV1ZSAvRm9udERlc2NyaXB0b3IK MTkzIDAgUiAvRW5jb2RpbmcgL01hY1JvbWFuRW5jb2RpbmcgL0ZpcnN0Q2hhciAzMiAvTGFzdENo YXIgMjAxIC9XaWR0aHMgWwoyNzggMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCA1NTYg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwCjAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDUzNyA1OTMgNTM3IDU5Mwo1Mzcg MCA1NzQgNTU2IDIyMiAyMjIgMCAwIDAgNTU2IDU3NCAwIDAgMzMzIDUwMCAzMTUgNTU2IDUwMCAw IDAgMCAwIDAgMCAwCjAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAKMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMAowIDEwMDAgXSA+ PgplbmRvYmoKMTkzIDAgb2JqCjw8IC9UeXBlIC9Gb250RGVzY3JpcHRvciAvRm9udE5hbWUgL1dU S1NGVitIZWx2ZXRpY2FOZXVlIC9GbGFncyAzMiAvRm9udEJCb3gKWy05NTEgLTQ4MSAxOTg3IDEw NzddIC9JdGFsaWNBbmdsZSAwIC9Bc2NlbnQgOTUyIC9EZXNjZW50IC0yMTMgL0NhcEhlaWdodAo3 MTEgL1N0ZW1WIDAgL0xlYWRpbmcgMjggL1hIZWlnaHQgNjI1IC9NYXhXaWR0aCAyMjI1IC9Gb250 RmlsZTIgMTk0IDAgUiA+PgplbmRvYmoKMTk0IDAgb2JqCjw8IC9MZW5ndGggMTk1IDAgUiAvTGVu Z3RoMSA2MTAwIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVhbQp4AbVYa2wc1RU+d/bpsb3e 8T7t9WNnZ9+73vV6s+v120lsY8cE8nKym+AEJzFxKgJRSdMgtShtBSpWW9EfRAUqtWor+oBSI1Xp ZhEiEuJRWqT8aasii3+gqkL9w+NHwU6/M7M2iaEIVenaZ+65d+6ce853zj3nzpz76tcWqYkukonG T5xZOEv6z1oiEveeOH8uaPTFr9D67zl76ky9f5XIHD9174P3GH3bNaKWx5YWF04affoEbXEJA0Zf bEMbXjpz7oLRt/wD7Z577z9Rv2/7BfrJMwsX6uvTKvrB+xbOLBrzfc+ijZ+9/4Fz9f7daG8/+9XF +nxRRn+3+U36PdNUj5qOxR0wAaNuukQNtERmktAj6iIw5jjsFfp9zFk4HKZjLcMfCsXEetHlnXdz Q9fky+98MrPebXvZXEC3oS5Bl2uqXk9Rh/153L9oe1mXpD9Tv7ir5E6JGp6QyJsSL2G5UeqnFHWT C1M6UvQS7uy6eagGJc0USFVJBCe/edo/USUZHTzFZuB/lg6DVa4PUqNkoSbpDVJwOz1bpYY95eeF +EGlKq4/XJ2gzivQ1nTsaA9EpYPBydMTK+JudKQ0BpIqOFM6OLViikztK2uV4HJweebkcnAquLRw csUc0VvcWFyuZIMrtL98GtcDZXVlvBLYZBcrlUHIMbMcPILpyxVI+EpdAlp9KLuGSZb0bHDFFN1T 3lteuTgRWBmfqARUNTi5cnVPeeXqRECtVDDLuqkpNGbzDZ1t0NmaxH27IWU/ZEBEZXmZZaInRdWV q8vLgWVYoo9oalVQfQCW8hxTZLIqxveU+da4pgZ4QFM1FXpUJiC7IT27vzwJTVTWRP4MpDRxA6SN m4pibhPUa9Qhbb5FkDq+DKQtXwpS56amN0GqQGcnQ9r6+ZBqXwDoJsLjn4PwRQPhi5+DsOsmhN1f jLBnU28o6YW2Hh1h3y1C2P9lEG77Ugi3b2p6E8IB6NzOCHdsIjweWKHNoAXCF7eELP3XGP5fIe+8 AXLxAeWFF7kvTYekNgpLe2lnvQ3r7SjG0jROb9MkvX39feYljIndNIJnu8UQNfAYeAey5P3IQ0b+ JFQPqziKfpB+85k8iOEtPyMLbxm8hV0TUqiFrGSDTDuyoEyNdelN1KxzDmohJynUegtX/f+J4nJB NI2/+8QFySl92xQ0fdc8aP6e+bL5A8uwZdUqW5+zkW2P7aztdcyUKE9C/Fl6HSXHRotch5A6s6gT ILsTufQaKHsFE00fYNR5BYAx17BKKA6TZeT0bIAH5dFKfcDCAxYy84AZD2AVPGABh/r2QW9OqIrq UlRFPLH+psjn109JT649Lj2xNiC9hog4hFA5Kb0CT2g1dFGYuMI5eTVdrRr0tOuDNmdvTlU0h0nz 5BVxcrst2j8RrkqvxLd1NU6scwUPX/9QkiWFemmHuItte4FKMLSZ/OCS4HzgquSDnRbYacluVxAL JfKCoqAiaAp0EHQP6DzIPr/dQg+DeRwkzVepBMOCwOQKqjUj40O/t85VKQe5OSiexBoTm5hFGKII 2Tcxk3gAJ43NATsP2HmgBiwliiitA1WKQHYHQIQKj4J5gjvzUNoOxg+Kg0qgaVAZtAS6ALJDzwg0 6F5FVYeMDMtQgGQGEGQoBuoH3QY6BDoF+jpIt/URMJdA0nwNdhma1Ci3qdPItd5cxKqFogWH0EIZ qbBtVOofNRW2ZSQtZLVpo6Z8X5fkUdzefF9/zGHxuLukfN+oVJBkb0yNafNFbSwT6MqNqdpYb4dH TbiL06Y5KTy8O61NlkI2d2PLsnPbwGCmUwmE3cnhaKvUHEkmI85Qfyxd0lqtNltzm78j1GpNDPTu SLTK3aWe9Y+6OiyvNTXaGtyRoKez1e7TEvoGlmgnYqIHZyE/pem3Vcpka2BJDyg/EJLgL27NaM3w Wwa8A6jxmBdjXow5wLetwgdvURv9EwQfBBCpbfpfAtcB0AyoAjoNehD0KOgJ0K9BV0B/BDXDLyxZ g2QtixgnqNNVD/ouZw3HP5w9EaIuxLpLyRfyXUAT2G2Aqwi3AzAbqDPOO+ckRyKTdQ1Vhjq7hirD xcMeSQw5w0Pp9GisVYkOpxIjMZf0xlpx0tfdak/OHO/vPz6bjqVE4/pIdLoUUou3RcNT/aFgcRKw CN5D4t/YQxo9WEMkNerqdDhhsBVdLygKKoKmQAdB94DOgx4BXQI9DboMehXUzLvnL2DeAUnzVEP8 OXWRPlhrJVXnrYCEALoTrXsVGSOfMWkhh2SETrFf+zTS8n1e8ZOyJTq0Oz1y10hX98iRoRMPOA7Z bxuLD4YVZ2Q0UxwXxzI7057U7OLg4MJUdOnu4R3BwkQ4NlMKFWEiApnzhAMx4UJMvFClHjjBA9MY eA9U6AGFroE4Aa3qlhNuEyzHewtoCnQQxO8350GPgC6BngZdBr0KqltOsBxLwu9eSJUhVYZU5v3g /XU+CT4JLVIUIo++83lG+hoixIPhFuxYVq4FmHUiPTDfiQjpx9bTN1s9KCyKpmg3Q5f3POQMD6du DAbxmB4zGfeNMbO+JRbekt5Y/8jX7bKn9IjZlY6mptgQHTsT4kMGGkdqeO1AFoQ6bqjmwYQNDN3Q X8AqQtuEtikL37dQeNOOdnifJ7fjQQExzAtMDvMDHAOqkUh8def3q0VOMAgK3hJF8cv1v0neaEEN FmK+AwcaJ4vJ0XirEN+RPP1HJguV7WGpe/TIaPmc2NZViPt8seJz+b6O7Egou1QeiE8fHxo6OR0v 6/ZkxTrsidMwvVhD3mvSVcnoaqEK1tWSoFYJdpTgDi41Jd1LPOq5pkdIBhGSASYZREgGEZJBhGQQ IRlESAYRYiTVp9FeBr0KqkdIBhFiZFsVa2d0uSriIogNwYCMrgK5ACSzKgGoZUMNZ94GPoGTCvMJ RENE0TxaBjn5042T99QjI6bpqMVuyBx8S6zvEb59uZ13lfydgwcH+ypeSYkOJj2ZWEDMSfGR2fA3 zv0rWQo5lMhgIl7SnAoSi/j7rlQqf+dCpnDstmRPbyg1ne9scAd9ycGw86EfaQNTWmRiW3ewsCMU nh7QOKeM4/Ie9ls77a3hYkQJO95Rzy+cYdtBnI25NfaGnh+Nc0ATYHfVzwEuPNgGqQSo9Cyp6NvA 61Hyip4nHZJNU8bnXNGBWK40pyQn8r5cT1iWOAuKsDaU9pd6138mDiQn+zpkj+oXChzK2e9J6Mjn IiwmMHSj77k+sDesvCct+gTDDMGZuqB1Cqz+5NycdHxpaX7tY7yAk3T9/etDdZku6ue4cegyzZBD kMetBC9DZg37yfCkDOtgW31xXbbHhX3ttqZEKBrzoKoWsc6cu6PVbLO4fQM7ecm1eWlq7fV4txAz 5jE8vYG5gnw7WYNRhkDTFsxN0MADTTjJeHkOIIV9fPK6GfHPxdmmFW5C+YGCJFnWPt4K8dF9G3mj HfvMhVz2pyrFsUQCFIcGbmjgBn/rcm0CUruArGxUbRlVW96o2jKCR8bGkVG1ZVRtGVVbRtWWUbVl VG0ZVVtG1ZZRtWVUbRkbVc9dbbpPOAdr9Rysse+35ODYxnGnHooPtaWHVHUo3bbRHg6OHx0ZnR8P BsfnR0eOjgeFlJ3pa2/vm8lmZ3Lt7bmZ7MDxmURi5vjAwImZZHLmhO7PETh1t+RCCMXYn0JXhv3X DPSa+Swh4MSG+h5pYM1wfmDlClGcygojc+70dH7ycLfuo3f7dhc7DkvDY/hkJ6gbNf+v8M0gPVPT FzOlajjjGpk9CINz4IN6Zspl9XNQDojiSGicg3JANAdEc0A0B0RzQDQHRHNANAdEc0A0B0RzQDQH RHNAFJ9F4B+uDkm0HlAj+GHOdcV6ZShi4QjSBW9DPsxunBKMgy2qn57TjMNRLIMDqFEMfZ8eHswb 6e8cny/vSMXuHIt1ZkeCXcO93e5gzOVJhLzSnCk0sCsdmuzX+mbLs33+SNrdnov5f967M9HaEh3N RvpUN46crk6vu63F2uBW27JjkRZFK8X6St2KJ6T6u51W2RcDjg0As1P6KfYcKuPWDMJvVuwvG1qu Gz7YzL7jrOLmrML+a6mXH44yflNl2zfShQUTPdeMjMCvQAi0IVHQD4Pw9OW5ctnRmVW3x9xtDssp yfLUU7Prfwin/Q2zJrm1RWyfhWeh1Dh8/R7Sk59zMb/08hJNWG6rvsbplw9sEgnd96z1ZmbeyBF2 7GgWYUfE4e1M0QtOtMAcn/uL/XmPeO/GXDxwIIAQXF818rA4uv4s8nCgpxdZgvXjD7PvQj8bgsrI RBZODcDGzPf1nK+6NBP+XCLxYuX70g+PXYW8veJ3ax9jY+Dbg+kCrpzHG+lbNVyM10eOL/PqdhO+ rZpJzIPJbjBndQau4ZDkKVleiqe8tMHwp2SBqDWx1zhK0dXt5hDeKA78Usl9O1p2awO8FfHkC2qd TA33r0/wf/3HeVH/Xf8x9Rnclis+7MISN02gPk3hfW0aX4Vn6XbaTXtpH83hjHEIL34VekZ/TuCr BdcOwg7Ck4cOzO6fOpiaXrz3/OK50ycW7ljE13z6D3i7mgIKZW5kc3RyZWFtCmVuZG9iagoxOTUg MCBvYmoKMzQxNAplbmRvYmoKNTIgMCBvYmoKPDwgL1R5cGUgL0ZvbnQgL1N1YnR5cGUgL1RydWVU eXBlIC9CYXNlRm9udCAvUUtZTUlLK1RpbWVzLVJvbWFuIC9Gb250RGVzY3JpcHRvcgoxOTYgMCBS IC9FbmNvZGluZyAvTWFjUm9tYW5FbmNvZGluZyAvRmlyc3RDaGFyIDMyIC9MYXN0Q2hhciAzMiAv V2lkdGhzIFsgMjUwCl0gPj4KZW5kb2JqCjE5NiAwIG9iago8PCAvVHlwZSAvRm9udERlc2NyaXB0 b3IgL0ZvbnROYW1lIC9RS1lNSUsrVGltZXMtUm9tYW4gL0ZsYWdzIDMyIC9Gb250QkJveApbLTIw MyAtNDI4IDE3MDAgMTI3Ml0gL0l0YWxpY0FuZ2xlIDAgL0FzY2VudCA3NTAgL0Rlc2NlbnQgLTI1 MCAvQ2FwSGVpZ2h0CjY3NiAvU3RlbVYgMTAyIC9YSGVpZ2h0IDQ2MSAvU3RlbUggNDQgL01heFdp ZHRoIDE3MjEgL0ZvbnRGaWxlMiAxOTcgMCBSID4+CmVuZG9iagoxOTcgMCBvYmoKPDwgL0xlbmd0 aCAxOTggMCBSIC9MZW5ndGgxIDQ3NzYgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngB vVgLcBTlHf9/u/dKYEmCKCEk7J5LQkLucgnBABKSDdxFkuORx4F34sAdIZAEYsDE1BcYVBAOqVQU FaPg25ZaNkdkLvhKFaujUB07VIvvGh/jY2qraCuS7e/bi0EcpuN0Ot3/7Pd/P77/9+1+e9dx+RWN NJK6SCStoTWylswr7QhQRkNnh5LgHZlElgkr165qTfAjS4msW1atuWplgk/7EnhNU2NkRYKn74FL miBI8Gwq8MSm1o4rE3zaYWDHmraGIX3aJ+BtrZErh/LTW+CVyyKtjQn70TcCT1zb1t4xxF8KnLv2 8sYhexaE+3OWo9TL70q30zUpdxQRg5VA68hGuygJVCpgJpH9E9tzZIGW63GtundR1bKU0hMszWHy D8xaYuI/RuYdHQx/v1PaneyCIOkHe45tNAiR9PxgeDAs7R7WmH4YhDgV5cdpUr6WkvRKgKUEWPmr eWxPgGkVEjsJ80JzVMwx1RyJndRGMFLYDjvbYWNfViwUeI1/E0SM/QKvVmcG6aCeERxYr/2g9oMS aI/Ab05dJxBujh10C+hbQHcJVmAH2akNkjZI2iBpg8RCy8DVIMMycCItBMezLjS5QnDl4ApNzoNs HnAek5MFR4w5tEPsQzaf1T2eIj+7bpT8JPOz+bScZFYU27xQfpo9TApJ7BZzvF4bpUjvKNJxRbpF ka5TpKfZNqqBeo05Mm1UjfRGjTSnRiqvkS6skZ5gMykXalEbkys9lSvFc6VHcqVrc6XOXMmdC+8e qob6EXO8TVOqpW+rpRerpTurpU3V0tXV0spqyVktLc+UJmZK4zOlONtwMOXWlB0plASyd4d06w7I Thwo8sgVcfbV48VyvqtEjrOtsYAL6IZYYJ9ccS7bSHkWhhl1UR4aILNryWviq1ihia9khab+FzFP HtzaY2X3Aq2LlQ2gHaupwFS2xIoHIJ0eCyyVK5JY8VDMKeR18JjuWNlOqCfHXEflijQ2iQpYNsQT qdhUq1RsRjl/CNtigRyYW3tRqJEXZywmD26JC+ygfNJTJ39TELdAcqIg7gB6Py8u7IvJb3uAtLHy m56l8l/KquXDiPBcYEB+xrNGPuQyHX7tfZJnoUdZIdutjZAf8uyUH/Rsle8vM9V7i814uwImuj0P woPyVoRpL4izxTH58mKeYYS8GhFbXH65AeLdWopc4Jom13uekGs9l8sLE5mqvGbEuZ5D5rS+0qSK LLnCkyXPKjsqz/RiJjF5BnePyVMTyacUmNMrKpsn52N6loPy5ECRfD5SMs0tL1plX2ZfZJ9mv8Be aM+xZ9sn2LPsYxyjHamOUY6RjmSHw2FzWBzYt44xceM9LZ+/GMbYUjmyWfhoMelUPB0MzxAfSWAO AVsrzoxNOtt+Xmd5evnosrQZld6zDGFTGPbmn+3K0nf564P6b7JC+hROGFkhv35BvXJpsI99zD70 efvYRxyFwDvZx746U+70hkLpfn1eTTDOPvI1x6FojugaV34Ega5FYODXF5txKA8ibx8FOEIcoYTy eBxs2RLTbGvCzIMoMPNyxM0GyGOaeYQB0+woN+vZkufz9uRhgIm1gLaYJlusBdwEDU9UXghXb48H A6ySdVZo1l2YrJuBssxAxcUwKcMQCvZMKYZBT/EUU+05rXYl1HUJdZ2pXnJaXZBQ702o90J9thb/ N7LG2T/P68CSuzd2+xpVX1j1NeIO69s6m9L1ruWK0rPxbq5QdDEnvLyhieNIo3632ujVN6pepWeJ 6fcTdTdXL1G9PdTtCwR7urVGb2yJtsSnYkEPbN6+zndGrq3DudZtP0uu7TzYOp5rs+n3k1w+rt7M c/l4Lh/PtVnbbObis/c1189uP8vVccUVS9vbl5K1gwSrn7Jwp4t30DlExge4v8D96eBsfAFAN/iU 8WdxAp6ZXn4Lg+WllEOZtJ7uxHmynt6hC2gs3uMfsDLwvfQqvUvz6BI6jGdrH7uIorSAZlArm0UT 2WtUQj66l56Gx1XUBttK+hU54XXIeBayEtpHcfoG53AWzaIgotxMdxmHaS99QieM+4xPqZg2weKY 8VfyUBe0AmVQNmK20FrmFjqMm6gM+e6kQ/QOO88oo3NpKpWSl1ZRE7XSZXQjdE/RMXqdZWI2bipE nkq6mLbRTrqDdPoDk9k17B5LktFktNBiVNACv1sxm1fpY/o7S2PPsBeMTKPXMJBbpek029R30z10 H93PZ0IvAAboC1bPLhZVcaohGVOMk7BPQdc08tOl8GilazGTO+l5ehnwLrLmshK2iK1lXSzKXhBm i+dY7NYFxvWo0oF+zwIsRP3tqHQH3Y4ePkqPAZ6jP6HzSUwVKoQu4WsxTdQstdZO4zpjv/G08QpW xEqj0H8/YB510JW0hbZiPrfSQXqW3sBafUmnmJ2lsrGooZe9zT4TSEgT8hDtJbFNjIr7LWTptrxt LbPeNPjw4ICxyrjdeNn4J2Yv4HsjGys/DTAdOcqpluopRCvQ69Xm/riL9lMP9aF3x+g4vU2naJBN wDynsdnsEnY1e4AdZkfYt4IgpAoycuYJNwl7AP3CEeGYmCFmiblikbhU3CXuER+17LSusK6z3mbt sX1m3zLYMLhisHPw2sEnDb9xh/Fbox/VOFENX9O5VIXZ1lIAK7iSrjZ7HeV7CfUcoMcBB1HVE/Qk HUFt79PX2HPfow9JZh/S0YlCNoOVsjLUOYd5WRU+exayANbnYhZkEdbC1rMN7EbWDbiH3Yd59AL6 2BPsZfYqex0wwD4HfCtYBbuQLqhCjqAJfsDFgIjQIDQJzUKrsB3wsLBf6BXiIollYqUYAehiv3hM fF18V/yXJcPSYbnG8nvLEctxy4DlH5ZvrKnWQusi62Jbum2GrdP2oO2AfbX9MftxiqHHv8Ocfnw1 0FXCLuE72iBchOfsRZx5LwlzsRLr2QH2IDr1EHXj+ZiKb/G3sDM1KgIkA65HDycDSJuUkz1RPd+p yBOyMsdnjEsfe965Y84ZnZaaMkoaOSI5yWG3WS0iPpNcPrUyrOg5Yd2So86d6+a8GoEg8iNBWFcg qjzTRle4XwSqMyw1WK78iaWWsNSGLVmqUkqlbpfiUxX9qFdV4uyS2iDo7V41pOhfmPR8k95h0hJo pxMOii+9yavoLKz49MrOpqgv7HW7WJ+G7iW7Xdgc6MYIHlinOZH1OA5oDrfw6Rmq16ePU0FDJ2b7 Iiv0mtqgzzve6Qy5XTqb06Au10mdrafkD7lzP7y2s+uCyO12NeNk12nbyBXqim1xjZaHORW5NKiL kZAuhHmOtHx9rOrVx179Yfpp9gfKd/OPlLqQXRlpjFbqWngbms7ZMOciN4Pz81NWFzaFgjrbhOJ4 EWbtiVkkDrbscIuiJ6mz1aZoSxg9p7pgLEPLME8QnWqCsXHaOJNxu/rSN8x0oil97gp3Bccznekb EvjjGxLy1/o5Tt9w+D1gf91wXxjPrVahTF1pMJOoqHU6HxqnU7RhOtqHK8Qwy2Y9aU44mnoh1kO3 ZqeqSvQEfhaF1S8+P1MSGZLYslNPEFfy5RzeEToe08TuwG80lz9OSTXBHsZ+GeLfe3HyZvXhlBGX LXXHKZdvh2YvvMHkuSCY7AQ12aVUoupKvm5KVIlWrYgqlUoTFtySbWIoGqMhD6ZTH2zGGAg6dS00 fphsDIUuRJx8HgcuMI+GEKFlKAKwKfKcgpHL5edHe02wNqh3ecfrmjeElmCL9dcE9X7srlAIVpjj UKXA65vTh2ouQM3uydB7ElHwDdqFEKFolMesD6pOvT8aHR/lz0SCjzP6qUAbEsSJm/CtEmddNfAF Up3juUB1qk6UFfIiVSG21w/Li1/C/7nDU4brhmcxqp1idnjq/6jDF/ycDpf8rA5PG670jA5PR83T eIdn/P86fOGPOmx9gZwC3k24fvhPYyT+oBgJXhmW4P8YAF7yOAfJege+3USciXN6BVZlteEnnJZJ FnuVSMlWS5UoChlJNnsVo3GOpM+clXXp+fkLvi6df6p0Qeo3pfNTT5VSeemp0tSvMRQVFqc50ybh dlo74ye/s/q/ezwuvvl9tpkLA74WG2nofxyTPT3wokWTZTSa/+rCZQNFtf7Q/Cp/fqC5tbHdXdfW Grns33gh2GsKZW5kc3RyZWFtCmVuZG9iagoxOTggMCBvYmoKMzA4OAplbmRvYmoKNjcgMCBvYmoK PDwgL1R5cGUgL0ZvbnQgL1N1YnR5cGUgL1RydWVUeXBlIC9CYXNlRm9udCAvQVNXUE1OK0hlbHZl dGljYU5ldWUgL0ZvbnREZXNjcmlwdG9yCjE5OSAwIFIgL0VuY29kaW5nIC9NYWNSb21hbkVuY29k aW5nIC9GaXJzdENoYXIgMzIgL0xhc3RDaGFyIDIwMSAvV2lkdGhzIFsKMjc4IDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgNTU2IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MAowIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCA1MzcgNTkzIDAgNTkzCjUzNyAwIDU3NCA1NTYgMjIyIDIyMiAwIDAgMCA1NTYgNTc0IDAg MCAzMzMgNTAwIDMxNSA1NTYgMCAwIDAgMCAwIDAgMCAwIDAKMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMAowIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwCjEwMDAgXSA+PgplbmRvYmoKMTk5IDAgb2JqCjw8IC9UeXBlIC9Gb250RGVz Y3JpcHRvciAvRm9udE5hbWUgL0FTV1BNTitIZWx2ZXRpY2FOZXVlIC9GbGFncyAzMiAvRm9udEJC b3gKWy05NTEgLTQ4MSAxOTg3IDEwNzddIC9JdGFsaWNBbmdsZSAwIC9Bc2NlbnQgOTUyIC9EZXNj ZW50IC0yMTMgL0NhcEhlaWdodAo3MTEgL1N0ZW1WIDAgL0xlYWRpbmcgMjggL1hIZWlnaHQgNjI1 IC9NYXhXaWR0aCAyMjI1IC9Gb250RmlsZTIgMjAwIDAgUiA+PgplbmRvYmoKMjAwIDAgb2JqCjw8 IC9MZW5ndGggMjAxIDAgUiAvTGVuZ3RoMSA1NzkyIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0 cmVhbQp4Ac1YWWwb1xV9b7hqJFEc7hK1cDjcSZGiaC5aTcWkLFl14k0x6UROZFu2HNixkaiuC7SB 2yIBoo+gPwniJB9FC6RL2kABCpdmUMRAmqVuA/inLRoI+UtRFEF/svwkonruDEXIihsYhT8q+867 782bO/ede9+5b7jyxLeXWAe7wnSsePL84kWm/hmHGOPnTl5a8Wl9/gu0ntMXz5xv9m8wpo+cOffd 01rf9AfGLOeWlxZPaX32FdrcMga0Pt+FNrB8fuWy1jf8E+3MuQsnm/dNr6AfOr94ufl+to6+7/HF 80vafBc9F7l44cmVZh/+sZmLTyw15/MK+vv1H7DfkkwPyolwxIIlYNTGXmBtbJnpmaA+28+g6CNY L1fvY87isQB7pGv8cy7pyC92bc+j1LBb4rWPv5ptDJje1mfRbWtaUO3qaptx1mt+A/evmN5WLanP NC+2GnPEeR1PCMwV52/hdZMsz+JsgNkxpTfO3sKdfbcP1eGknnnjNcZ95e+f9ZRqTEQHTzHmoP9z 7BhUaXOUtQsG1iHcZBJuJ+ZqrO1A5Q3On6vW+ObTtRLruw5vdY8cH4SphM9XPlta44+iIyQwEJOh 6RK+6TVdcPpQRan6Vn2rs6dWfdO+5cVTa/qg2uLG0mo15VtjhytncT1SkdeKVW9LXapWR2FHT3bw CKavVmHhsaYFtOpQagOTDIk535oudKBysLJ2peRdK5aqXln2ldduHKis3Sh55WoVs4wtT+ExLV/z 2QSfjTHcN2tWDsMGTFRXV8kmekJIXruxuupdxUrUEUWucdYcwEppji5YrvHigQrdKiqylwYUWZHh R7UE222JucOVMjyRyRPxa5Cy0jZI21uOYm4H3GtXIe28R5Ba7gbSrruC1Nry9DZIJfhsJUhtd4ZU +QZAWwgX74DwFQ3hK3dA2H4bwo5vRtjZ8htOuuCtU0XYfY8Q9twNwt13hXBPy9PbEPbC5x5CuLeF cNG7xlpJC4Sv7EhZ9l9z+H+FvG8b5PwzluEucF+CHRW6WUA4yPZAAqo+iTbBiuwjVmYfbX5KuoAx vp9N4LkBPsbaaAzseAH8o/EmQ9Uw8uPo+9ivvsZ/GN7xp7HvjsF72NWBOhkzMCOuJmYG/4lN6+3w lP46mYV1MWtz9P+9kVQHZ9gMe5xfFqzC6zqX7n19j76k/6H+puExw4vGceNzxo9MOcwTWIZx/mfh fZQZE1ui2gO6TKE2QMxW8OctSOo6Juo+w6j1OsAirW2doSCUK+DxlJcGxclqc8BAAwampwE9HsBb 8IABGmraZ0NpLkuyXZIlfrXxAc9kGmeElzaeF65ujAjvIRuOIk1OCe8gBkodXRQjqmpWepvqVl2N EQ2arENpWVIsOsWZkfipKVMoXwrUhHciu/rbSw2q2oHNzwVRkNgQu48/TGt7kxWw0E7mgRaD5oZW Y26s04B1GlJTErKgwFyQECQHmYY8CDkNuQQxL0wZ2NNQnocICzVWwMJ8wOQ6KjQh40Z/qKnVWBp2 03A8hneUWpgFCaIgM7cwE2gAp4vWgJkGzDRQB5YCC0q2kRoLwnYvQIQLz0K5Sp0FOG2G4oFEIAXI DKQCWYZchpjhZxAeDKyjksNGkmxIQDIJCJIsDMlD9kKOQs5AvgNR1/oMlBcgwkId69I8qbN0y6eJ W0PpoFHxh7IWrviTQnbXpJCf1GV3JQXFbzQpk7rMcL/glByuzHA+bDE4Hf1CZnhSyAqiKyyHlYWc sjvp7U/vlpXdQ71OOerIzejmhcD4/oRSLvhNjvauVeuukdFkn+QNOGLjIZvQGYzFglZ/PpwoKDaj ydTZ7en124zRkaH7ojZxoDDY+KK/1/BeR7upzRH0OftsZrcStdG2ENge5MQgzj8elmC/qbFkqg6V qVnmAUIC4kWtHq0ecUtCtwA1GnNhzIUxC/TudcTgQ9bN/gVBDLzI1G71XxTXEcgspAo5C/ku5FnI VcgvIdchf4R0Ii5kWYFlJYUcZ3Cnv5n0/dY6jnw4byJF7ch1u5TJZvqBJrDbAlfiDgtg1lAnnPfM C5ZoMmUfq4719Y9Vx3PHnAIfswbGEonJsE0KjcejE2G7cHMjV3YP2Myx2RP5/Im5RDjO2xsToZmC X87tDQWm835frqziRXvIArzswOvNGhuEg05sEHLKCc8HIX5476fNuQ4YiEVRLbB/cI6HTEMehJyG XII8A3kB8irkGuRdSCftqb9A+RhCe8oFqyKsirBKuge6p6nHoMfgRZz5mVPdFTQjcQvoOTHchWwm 57qAXh+2Dul9QC+PtFQTsQmYQVIkJalT/BZBy8hcPuN8yhoYj28Hiv9YxTPp2I5nYwdOHwo3G1+4 B+zmuIrmvkQoPk0LUflHB/4RgcZDdRzDwRBwxwHXnJiwhaED/nOsiqHtQNuRYrSOQGsdPUCVJvfg QQ4zpHNMDtAD68So2iZzK9oWzMs52nxYGaVLjv+88TfBFcrKvmzYfeRIezkXm4zYOP+R4Mw/VM5W pwLCwORDk5UVvqs/G3G7w7nXM8O9qQl/arkyEpk5MTZ2aiZSUdeT4g2sJ8LG2e/r4IQO1ZWk6hYq RNMtAW4VsI4CwkE0XFCjRKPOW2qGJJEhSWCSRIYkkSFJZEgSGZJEhiSRIRrhvIr2GuRdSDNDksgQ jYlkvDup2pWRFz7sUAJkch3IeWGZXPHCLRPqG+km6FEmqXoU2RCUFKeSBF9tj34zM8KKilp4265y 4hZvHODuQ+k9Dxc8faMPjg5XXYIUGo05k2EvnxciE3OB7638O1bwW6TgaDRSUKwSNh3/+754PPPA YjL7yN7Y4JA/PpPpa3P43LHRgPWpF5WRaSVY2jXgy97nD8yMKHRCKuLyCfZbDztYx0XLEgq8hbWr 7hP79ECIqajV9obKHVqN7ADsdpQEWrcdD3bDKgNUKoNI6jZwOaWMpHKIRTApUnHeHhoJpwvzUqyU cacHA6JADMEDyljCUxhq/JQfiZWHe0Wn7OESAkrM8BJ8pDMDXsYxtD32xJ0UDSPtSYM6QVsGJxbL Kn0cb39pfl44sby8sPElPkiZsPnp5ljTpp3lKW8sqk097DDYo1ZAlGGzjv2kRVLE6rC25stV2047 9rXDGOf+UNiJipPDe+YdvTa9yeBwj+yhV24sCNMb70cGOJ/V78bTW5hLqIXlOhalGdTtwFwHD5zw hEjGRXMAKdZHp5LbEb8jziYlexvKT2YFwbDx5U6Ijx/a4o0e7DM7uOxPNRbBK6KQCDxwwAMH9HvH tVFY7QeyolbRRFQ0cauiiUgeERtHREUTUdFEVDQRFU1ERRNR0URUNBEVTURFE1HRRGxUlbu61ZgQ BytNDlYo9js4OLx1FGim4lPdiTFZHkt0b7XHfMXjE5MLRZ+vuDA5cbzo40JqdrinZ3g2lZpN9/Sk Z1MjJ2aj0dkTIyMnZ2Ox2ZNqPCcQ1P2CHSkUpnhy1RmKXyfQ66Q6yxHEtuYeaSPPUFvJuWwIJ5bs xLwjMZMpHxtQY/SP4f253mPC+G78hMXZwObn/K+IzSh7ra6+TBev4/ynMbsPC05D96nMlE6pZ4Q0 EMVxSTsjpIFoGoimgWgaiKaBaBqIpoFoGoimgWgaiKaBaBqIptUzQjviQ9UhhtYJaYc+TlyXa1aG HF4cBF3QNqSDnhHCMFE79KH6qZymHRzCSRzOtGLozrQqoJ44jk4SK3T2uj8efmB3uC814esfHxpw +MJ2Z9TvEuZ1/pF9CX85rwzPVeaGPcGEoycd9vxsaE/U1hWaTAWHZQeOY/Y+l6O7y9jmkLtTu4Nd klIIDxcGJKdf9gxYjaI7DBzbAGaf8BPsOVTGnQxCXx0ULxNaqhtuLIViR6ziIFah+HU1yw9lmb6Z ZVt0YcBE5y2NEejzAIk2xrPqQQmRvjZfqVj6UvJU2NFtMZwRDC+/PNf4XSDhaZvTibYuPjWHyMKp ImL9CejJQ1zcge8GgrcDr9vpr3YyrGMxAuNq7MnrFjNvcYQZO5pMmJFx+HKRVMRDWdLoTEwnEP7J di4eOeJFCjbWNR7mxxu/Bg97B4fAEiAg+qbWXcaVeLid/aCOi0b7lB/69SkdfivUM74AJbWlXFQV QAtIQSJ0B0ulKW9tKfTTKMcpTEeoU5YRFuQ3peAWudMHE/XNaCksbUA76Mxk5abo2i40SvS/+Ue8 pv5tvsKGNW3HlQ7oOpxuSqgve/EJsw+/Wn6L7WcH2SE2jxPCUXzSvKY+w/HbLPE+Q/bj582pw0cP 7L8/PrN07tLSytmTi/cv4Zdp9h/yPl/MCmVuZHN0cmVhbQplbmRvYmoKMjAxIDAgb2JqCjMyMTEK ZW5kb2JqCjU5IDAgb2JqCjw8IC9UeXBlIC9Gb250IC9TdWJ0eXBlIC9UcnVlVHlwZSAvQmFzZUZv bnQgL1lYVVVZTCtDb3VyaWVyTmV3UFNNVCAvRm9udERlc2NyaXB0b3IKMjAyIDAgUiAvRW5jb2Rp bmcgL01hY1JvbWFuRW5jb2RpbmcgL0ZpcnN0Q2hhciAzMiAvTGFzdENoYXIgMTI1IC9XaWR0aHMg Wwo2MDAgMCA2MDAgMCAwIDAgMCAwIDYwMCA2MDAgMCAwIDYwMCA2MDAgNjAwIDAgNjAwIDYwMCA2 MDAgNjAwIDYwMCAwIDYwMCA2MDAKMCA2MDAgNjAwIDYwMCAwIDYwMCAwIDAgMCA2MDAgMCA2MDAg NjAwIDAgNjAwIDAgMCA2MDAgNjAwIDAgNjAwIDAgNjAwIDYwMAo2MDAgMCA2MDAgNjAwIDYwMCA2 MDAgNjAwIDAgNjAwIDAgMCA2MDAgMCA2MDAgMCA2MDAgMCA2MDAgNjAwIDYwMCA2MDAgNjAwCjYw MCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAw IDYwMCA2MDAgNjAwIDYwMAo2MDAgNjAwIDYwMCAwIDYwMCBdID4+CmVuZG9iagoyMDIgMCBvYmoK PDwgL1R5cGUgL0ZvbnREZXNjcmlwdG9yIC9Gb250TmFtZSAvWVhVVVlMK0NvdXJpZXJOZXdQU01U IC9GbGFncyAzMyAvRm9udEJCb3gKWy0xMjIgLTY4MCA2MjIgMTAyMV0gL0l0YWxpY0FuZ2xlIDAg L0FzY2VudCA4MzMgL0Rlc2NlbnQgLTMwMCAvQ2FwSGVpZ2h0IDU3MQovU3RlbVYgMCAvWEhlaWdo dCA0MjMgL0F2Z1dpZHRoIDYwMCAvTWF4V2lkdGggNjAwIC9Gb250RmlsZTIgMjAzIDAgUiA+Pgpl bmRvYmoKMjAzIDAgb2JqCjw8IC9MZW5ndGggMjA0IDAgUiAvTGVuZ3RoMSAzMjA4MCAvRmlsdGVy IC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAGUvQlgVNXZN37OvXf27c6+75lJJjPZExLIdkNIUBAD CkKAQACRRRQQ1LpUolaRRUFxR4XWpSouIQEMoIKtVi1aqOJuX9A/LrWi6IvUFjLz/507k0Do8n1f hrPe7dxznv15zmX5FVfOJXrSRXgizbls1hIi/3n0KA7OuWp5KNvWo61ae8mSeZdl29b7CVEsmrfo mkuybe98Qma55s+ddXG2TU6hHDYfHdk2rUSZN/+y5b/Itt0CIVS9aPGc3HHPYfTfetmsX+SeTz5F O3T5rMvmZs//ZQHKgiWLly3Ptq/vQvnkkivm5s6nUwjRbhXeJttYai0Kp/ILjHgEzhpJI+RccjNR EI6IpIRMIoTfpJhMBLTZcQUhhftfuWOmqe4ntUaNDkIejU2Qx/Wa7s+PZFT/XC+cVCfRrZHPZyfg OuVT/Q8QIrydUWXeEU4OHmFH2d/IXWRiZi+/t2dShdSHYoRc9BrzyrvQ7NUZ5LJHU9HYVMLvJUuQ nkfajySQmchX5Hp4EkStEYn1rkMSyGZ+N+lG2ot0AIn17ELPLvTsQs8u9DTyfYTyL/A7evKCGMG2 Xnde+fdNHr6XZJA4/k5+DQnj3jNy5cxcuQ5lIfrX58rb+TU9tUFTkwZtSr5HnkHi8G4P9YxuK98p V6rr5MrGgZ6NvegJNrn5hzCqhzCqhzCqhzCq75FT3H0j+jeifyP6N8r9GwmVbxVO5G6VqzzUY3Lk elBp0vLt/EWkHLeYkisn8xf1lAf3NHXyk3Dr5+V8Mz8R9XVyPlPO2+R8hXx0hVxfLNcXy/VGud6Y q7NrS+R6Ng/KdRPL+Qv4C0kCT5/Aj5HL8XwLiaHdhjYrz+fPlctx/Gi5PA/9LvSP5VuIBeUYvlVu n4v2KLTPQZuVo/nWnlHB0qYlaM/EMY6YeNY/CiMZhcUchUliPeuQNiMdkntmIl+BtB+Jl8+k/Cj8 mvFr4ptwhYR7SDgiEZ6X8GvEr4FvwJF6vE09comvw/sGkZcgNSK1Ic1E2ot0AEnF1yEP8VWkFElC Go/UiaTAfVK4LoVxpfCEFF9E8nCvMLeW2FCGcmWQW0MCaAe4NT2BoNSk4baR8UidSEuQurhtPQqL qcmG89i5JUhtSDORViBtQnoeSU0akeOIpOMauUa+jWvjBUB3oreurlwuK4ZlS58/W+o95aamK/gE pilBNiHxGHICQ07gVQdaQdQ4gE4+2YO0H+kQEpvwfExGPiYjHy+Yj+vz5bOU8nnfo5VB4sli5CuQ zjyHTU0+Xjkfzzp9F9ZbgJ4C3LMA1xTgfgWYxkPIqXwFOz4eaR3SHiR2LIJj6+S8EXkbEod7RPAG rGZCHuQjPZzG1If5pSNMTdWY9zYkHORux2zejnm7nUEIZg+wjSONuTPWoXweScHvxC+BXz5+BfhF 8AvjF8IviF8Aq7cev3X43YHf7fitxW8NVsP2fHJPkptZtbhqRdW6qk1Vz1ftqVLt5mbh18l1Slri cIAmWsxqT5PICWQ6MdB/yvmzcn6FnEty7pQ80w1HphvemG54YLrhnumGKdMN5083tE43lEw39NHZ kjNp+CRpWJ80XJQ0DEsaqpKGiqQhkTQ0mWk7nUwM5GU5Hynn5XIekXM/ndxjIJoX6TQSVgPiaf62 8I3BL8J9Au0J3hzuU6O4Kduali1qWeeOYGl4XjCV7Ylni7zwSwLuQCbRZ4iKJqWU6k3VTJWkGq4q VhWpClT5qqgqqLKpLWpRbVTr1Vq1Wq1UC2pOTdS2vsxhCeyEEptSZIWS8UIiyHWRY3VkyAlH1RwZ Q7qt/Fhu7IUj6djuvXPI2Nmh7hMXRvuodsLUbkV0JO22jCVjJ450dVcnx/apMhd01yTHdmvGT5uy ldI72tHq5m7ro2TilD6aYV23eLstzVN2EkpTt9zuzZXt7eyaKVsFevvt7cRxVaOr0dJgHt466t9k nXJn56jk6T/X6WoyyUbi77537IVTup/2t3eXs0rG3z4W83xhaPqUnVwNN6xl1E6umhXtU3Zqu7ia lgtYv7ZrFAYycB4JoX/UThJmhXweCbHzSOis8wJcNTsvxorseQH5vMCQ87bWh1tGbQ0jy55TL59T P/SceUPPmSefMy93Di+PX77FwH1Uh0lYPiesOiyP/cxzAtln/ddzYv/2nDOmc+7IMxr/UqU7yRj6 /tbma1vmRls6oy1zkTq711w139XdNTsU2kma6fvsUKibj3fOnjOflbPm9tH3o3NHdTdHR4W2jpEv HXq8+1p2eEx01FZybcvEKVuvleaO6hkjjWmJzhrV3jt6VuGzQx63auBxWwtn/evDumexmxWyZ42W rzvrWc+yw6PZs55lz3qWPWu0NFp+lgz1AEs1GdnePD1b9nI6LQC40xtuH+kQlzTI0Fwbdt3g3SUQ +iTRJdu79dGR3QYkBuhFTUVN7BCwjB0yotuUO+S6oTbs3UWfzB0S0W2OjiSulgWj8G/Zslwl2/w/ 5suWLVs+Y9kMFMuWy/+WLb8SJVszsoxAcsUbNOll/hYENWa0eQ3SWplG88uWtS8n8vouu5Kwpy9n 2eBDT9euxM3psjMhgbBHDvnDUZok2YTbLbuSYgxsGFdmr6PLKA7iNrh0ea4PNEf4Cuku4kUZ4GeD Y5PMoVz6PH1D9ni6P5PhPsDJE3MJhVybSO5BH350XLYkF5OD5DJyJ7kPfRX0T+QpIhETjh0kPCWQ 2OvIBnI1eY9MyvyA3jB5lHxPUmQ4mZ9JEzNZQdL0l+RRyrGZIjXkXTKXrOfq+KTwNxDHQlrKb6E3 kSLcZSK5lzjJftyxMKNFu5fzc3W4aiLZx89UpzKlmR/pXuHNzGzyG1rHvS88R94iR2lEIOmbM2sy GzMPESM5zvv7f58py1yGqyaRTnIluR4j6CKPkLdpO1fP7cmswpimYAwryAtkH00CoDoh0V2As39F 7ic7yctkP/mQfEEpNdEC2kXfpQcVpP/V9KuZczOzM4tJCzmfjCddOOqnMdrETeWn8s/yH/T/f+nD mQDuPZFcRX5BriPryHqyhXxAPiKfUJ7TchO5SfyzxEvqyVQyG7O5AWN6irxJDlE1raQjqERvpc9w Vwl8/6vg8AKxYwbPwd0uxrkbMaePk+fJq+QA+TPu+QPmlKduLP4kOp3+kt5C76B308fpM/Q5+jdO wX3I8/yNwh+Ev6Xfz2gzD2aewnO9xEdCkHVTWIPzsJ5vk2/wfoU0RRvpO1ySS/FU0Pen0xWZ0ZkV mdcyH5Aoyce59ZBrW8g4Mhmjvgb6127yB1z7NvkT+ZL8HbPEUy21YC5CNEovoBfSKzGKZ+n3tJ9z YP1quEVcD3eQT/JvC5OF5/q3pe3pnvT36UxmS6Y78/vMW/L6DsNzmrECHWQJUIyt2HY85zVyhPyV /IRnKGkQYz2HjsX73o/7H6KnAE5q7gbuGS4D6Xc9/6bgFu5Pn5++LH1/ujdTmRkH2OIhdLlJJX4j AE2TSDvufRNm81HyNFamF9DzPvmOumiAltJz6UV0Cu2k8+liuoQupdfR6zGrT9FtdDd9n35Cv+ME TsnZMU9Jbg53E7eB28a9yr3PHeEJfyF0mKX8dfwGfht/gP9aEIWUUCqMEzqFa4RrFRDJlA71W6ec py7rn93/YP/v08XpUelL02vSr6TfT3+e0WX2ZL4gSlKKMbaTeRjjL/H+t5I7yCbAx9MY42fkK/I3 rPmPmAueaqgHIw7K69aMcY/DyCdDZLoEv/l0Iea/i26hPfRFupe+Qt+k++g79FP6PUcx+mL8aoEF k7hL8A4Pclu4bu4j/H7i/sHHIfWX8xXQKjrxNiv52/A+9/Gf8l8InGAXyoQLhRXC6wpecbHiXsVG xauKNxTfKEXlNEBo9pelH3LOv8W9IjTwi8hmaAc8/w33DldHf8mdpL/l/PQVPM3Pj+fHc81cLWSj 3YDyy4hNtVEZVoY5GxFVnewm3ANcET9ZiPN6shz4Rrip3K1cJ3mCvkhOcucA0q7i3+Y2czP5jcJd QgP9APrFKzAFGOgJ0kSaaAPW7l2yFCtUxD8v/IndUaHmTyku4wyZlcJXCo5/B3SwnnL8H+lUepSO 5xyYrVruDhJFW6RHUZ4LDPwIkL8TYmeNcJhfy43hPkHfIrKBvoJ33E0Wcbvpb7AuNcDHK+h4+hBf Rm6gSzEjw8lC7m4S4ZZwEcDzJPK/9CZqB+aexNrkcZcQgTdwc8hBrh2rfoBauGJ6A+D0MrKGriYp 2k/3kre4O8kwOpd/+ZS7v4Cjp47Srfw5ZCs9KbwpvAnh+yRm0g/IVVMJEPIoaMQkYGaYjwNqaoiC gx4HfOoErpu5n+j13CKygN7P/5U+zjWRNjKXX8a10nvTPwlNfAVmbBeoSbNyuJoo6hR+oRIr/hVp ADTOg4VkvnBIcROr8+/yxzPtmXB6psKY/pRci9k5B9RtDXDpHPIxddAZdIKQ4cYKmcxFZAv3vPBp xkn1NEz+nAGGpbfTOpqXCdGlGR2dAAifwWwvwhrhFuFK4Xrwp5OgmreSu8iD5HfgJo+Bb+VjHs/D bE4H7VkAHlEKi0EV3q6BjARVOhfHxpOLQE87QSUvIZeTpaC8D5NnyFZwqLGYjxm47hKyEP3LwKGu IzcA/1eStaAB95InyJ+5p7lN0HFv417jruIWkI/Jx/zrvEQvIgeFVcIKciF04AnUiidXY5WCuG5t 5l08LUG8oP6VwFJAfuZvmfczT/bvx/2ewNjvUo4kf1M2kwLSRk8IHqqQmiZKjQ31dbUjhtdUV1VW lJeVlhQXpZKFiYL8eCwvGgmHggG/z+txu5wOu81qMYsmo0Gv02rUKqVC4DlKUi3R1s5Qd7yzW4hH zzmniLWjs9Ax64yOzu4QulqHntMdYtfNwqEhZ0o485KzzpSyZ0qDZ1IxVEfqilKhlmio++1R0VAf nTphCuq3j4q2h7qPyvVxcn29XDegHg7jglCLa/6oUDftDLV0t141f3VL56iiFN2q0zZHm+dqi1Jk q1aHqg61bmd0yVbqbKByhXO2jNjKEbUBr9jtiY5q6XZHcSluw8daZl3cPX7ClJZR3nC4vSjVTZvn RGd3EyYFJuVTSLP8mG5lc7dKfkxoQTfehqwJbU3tXb22TySzO5P6i6MXz5o+pZufhXu0dJuTeO6o bue1R1ynm7g55M2VZx718qtbXAtC7OTVq1eGujdPmHLGtd4wu0N7O+6Ba7lYa+fqVjx6LVZqLNOU urlb2qd001vwSMjMMfmtsu+XlehjnQtD3ZroyOj81Qs7sTSe1d3kgmvCPR6PtDNzmHhaQqsnTomG uxu90fZZo3xbbWT1Bdf0uqWQe+iRotRW0Zyd2K1GU66iN5xZmYtJzx6Ta/LprDb2gsGZpWyM0XO7 JUDUnBBGMiWKd6ph2dwasnpODRYAf+0UV3VfjBVZ0K1p7lwtjmD9eEXarYiJ0dDqnwggIHr026E9 s3I9ypj4E2EHGZwMglo3nTVQ704muwsLGYiomrGmGGOD3K4qSl3Vxy2ILhFDKKAQkfGY21ntI0ow /eEwW+A1fRKZjUZ314Qp2XaIzPb2EKkEegPXyY7sHThin8SOdA0cGby8MwpI3gYhghB7tzo++M8k Oqwt80d0U8d/OTw3e3zshdGxE6ZOCbWs7sxB7diJQ1rZ42xCMW84lqt1W5un8F4OfazGeXn5KIBy +tTBU9CYou8WYvinlIH64j6VGlAp99BQa7fYeU42b9eGwzmc+T9d1Jc5xq6Si9OX5V6je0QyN9Ds sLtrh7SHDE+/mh87ESSHGztx6urV2iHHWkHMVq9ujYZaV3euntWX6ZodDYnR1TshgMRXL2kBGcqu aF9m1xpvd+vadrzKfDoCcMuRkVuj9LYJWyV624VTp+yEpSV028QpPRBtmjtHtrcXwWcwDwnWfKoV 3uY6UKIPMv7bZBfKt1F+gXQEaQvS75HeR78F5bsordlzaA3ac5HMSCuQHkHahMSuZdd1IRUjzUfq RZqCtBNpHdKFSCLSeDy/HverQx3jIeuR2PjY9TcgsXt8gPRLpElILyExn8cepN1IdqRFSHcisevY +eza/Uh3IU1DqkUaGOs9qB/F81DSuwG0UMyQE3iElJAKMFHghayHmaQG/piWwf4UOEeFUg3PiJbo cA2B+Q1uF+hrIjQaWPyQ2J8VyQbNhBBmByTQ1lzI3UgeWb8gxM/sw3haGH0RJAItAh4jpBhSHBy9 APyzkCShhxSRYvhxSkkZuHoFpJ8qMgyctgY8fwSpBcetB59vBCcnkE/YXzV+a8jndDhdQG+mT3F/ 5NuEkPB3xd3Kbtjo1Oqx6l+r/6rVaffpNugn6X8wPGbUm3ixTDxqMVg+sk6yFdpdjrscB51mZ5mr xJV2b/fM8XLebt9t/nX+U4HrQnmha8NHI+noW3lPx+6Od+RvL2hPeDHUd4tuKH68pKnkg9K1GAXH ZCJhngLuJ8xa61alqo/qt4FNKwRW4YlWqUBlB89zHo2K9e2gxK1uu86VPF88Xjeuv+588UTdOLEf Rvq6/jqWykorzGFzLGwOzxPIqRC/95SkICdJSNgL+VjL/ZZ/RXgHq2MmnVuNij7uVklLtRrmxdJ+ oNnFPUZ03MuSPmTeY95vPmT+3qww76IOwnEv96ohF/dxj20vVS+GzfJF7gGs5A90PHElxRMdx4+K /Sc6jh4/inHUiXUYW1kpDfNKZTQSzz9dwbNalSG3O6Sk8+SqyxNSCO+kPfFgME6/zJaEch3pU5C0 vwIcjJfyE/pCkVM4jVatxaFUKkSnw2pvsCrGaTTWzUZAg4hpdPv+uIsqiIu6b2Ez0zGu/3ideFQ8 guE01pktw4dTlmFMHbTSYqkeVlEO+UgFJcxmYZIShpkf5+JcR93T+Xqjxa26fMaMy1Vui1Efe1Ki Py6jHL0gqnOZtfo/pvseezzd96Zea3brInRMGjbTovQpbkVutAkNp/G4ObdHYCPWWJROh6hQYrRa LQaN8ZoA0hzx+B/bRccNjPcEG+8RDFge7pDR2jhOxSaxqrJ6mKWqkstHDaN3OiwObsW/He0Py9KZ 9LMRvRujfZOe89jj9Jw/YrQuXSS9g402mT7I/ZkWAz8rJNfvyDvkMDkG5N0h0P/lXiHvmGCk5lQv 0vuBvpdRf3Z5j/QfISVH5ekL09xwoBKa0x944+4oT4v7PyyPurVAdkp2cSrByq0ARHskPdmLd1Vw bmHOFgayR8QvSck4diN7uEqwnvott+IXv8CY3s58DvPPD6AUPsBjj1onfKhzGy/bSQN4PtZzHGYG V8XkZVNG5fkYxk3Kqxk/oZplP7TVjDifJUztF7jX1wqmrZfQZ3stnDa6K/Mj4TPHe4rUiSYN6gWZ 4yQ/83fiQLJn/r7DZ9QY1UZuV+ZnImZ+7PEbi9gVhZkfpWhC4TMGjRHLZeqAz0KKab7CEIkaw/WW VL3ColAYPPXAibd2lOXVG92lv95FlVjSlAyC446KJzDqRkDhUawowM/MMsBg8zXSVK5YjLvcTrfD bXfb3Aqlz+v3BrxBr6DMjxfEE/HCuKDU6bV6jV6tV+kVSj4eMedJJGT1SDSpjEmg4yUSjZrCEvW6 kcX1KYkUc8iYMQ+WPfwV4i95I6nJ/dGBilyC5Ut2c8DqbrQFzM5GM8scgYClMdKXOSlJqOTbfGZk XhGZ24TMaWyMsizf5jCghoy34Tw+YNE1FmmROVjNb3OH2U2+lZyomGzOILsq2MhpRXODk2XZ0clD HMzYsNupXZRhPT8eB5hXiTKaOh0Op0NViZ78eDTC2e02tJ2OinJLFf/1jXMfHHNzsb/F5ERt7E3F gVGiY2Jzobtg+OjbNzcnXQXDz1m7mfvkQPqHR66vrQrfVX/RsgNUZPXIXXUXrbj67fqoO5o+vHfn 1X+qj7jzaHgvg+AjIMdfCz+D+mztsai9fZmfJZNZSdQar+QdbxnvFTSmXdxTRE83ShpRrzeJL2vU HOtRoMdCFQqOvqzOqWAqi9e2C7ZRMzfvBaLQqPVuzrabuxH018n9CU6weWYznUdEKr7ELYFR7dcw icoQBJp6tE7sPyrKJLXx6FEQMOdwIvbXW4aXuKj40/FXhzTKSkkHW1hqDjPSpoyGGc0YVhE2KwbI RzW3noYCHk+gfxHLaSj9nU1jcmvVbuHnk9OdVovLZbE6hdKLlG6zyaBmPGELZuID4FKShrYqueaJ U17w6pIKwUZIH522Xau31UcUwMzGfja4slJ4jhyZ/5FS3rzKc0zXGm/Nv7Xg1sQTBU8kduu3FWoM Fq2jSl9TKCSihYGkLT9QENXbdAxSDN9Yjjr+ael3CAXqgZn89IXcRCpeokdArHTUAEIxbZtGo9V7 +ug/tsnP3k2nQcjg0K/+zFwfazJwiyEKONEbwPk67jIYQO4cwErxBNjUCTApRmiPHm3E/B4Rj9Lc nBI2pzJ2+oJ5FpcjForbwy6JWKNmiTqDNola8pDlsOvGG7PzjSknS+nSZHt1WCbMDjsoW151A1dV CXBVqvDLUqssy1EqVUTVz93iwmyfOkjJj0snBp+77vKn3UqNXjQ7F+yc9fDn8WlXpT/cNTHMFunK 67/8bvH8toJFT9zQ4VJpnWLpYzM+Xj1i1rLl6U9/zWD195nPBUwUwcL3LqqhpA9Uq6K8vMo8Iu/c vDGx5poriHJF+Naae4QNVffWPF71RM1O6y7nPus+29vOT6x/cX5r/aczU2Jm1223RbBw5j6soA+V hNqkSxaY+RIMxEUUUR9xB0IF8ZQbS98bCllSffT23nh9hRHldku9Mlo/rI8aJK29nvf5hvOeESW7 sAQ+7sYXdO7hFQql4dtdtCsL3CCLlFH1I0fOF78EPI8TmeTAVqP/CJpHQScZuZRBHoBlzhJNX2VV XsxqExSxyqhErQq7RPOq4hK1CRaJgIBgaW7EH4qajqU1pGYpdWRZO6MmWaZZUT4M64KFkTucckte pQEcyTIY3rr82p/6Fn1dbHKKom3js3e9NmtHR8Djdp+zdMOD10++KyWadWbX5Gse3PTWbG5L5fbZ 9301vVS0iC7TsheWjF1/IcMlunrajPV1lTaNUyyon7TnVxPvBW96n+ETJAU/ZNo/SwbwyBAXCCv8 QZ8D0/rlDr//ZYfJbumjnZLFaHzZHgqH53E8ZACeCwdhNJn2As8LinDAEEC9B2J1Hwd+5fcxNHAQ E/ocdr6Pu1kyUYVxnt8fJKYABSoEdnGXkzCdJumAQ9QdEQS7HtzqHSxH3i3J3HIsHQcRbmkd5Lf+ OkhOYh1kujrxO4glkOiYUNdfZx6uWFmc/KX4qoswxPnpYN1AaSorXUrDVbTCPMCjByo5QlRhNkcp z/e/S999vjXo8QRb5Tz9Bqs/nEpPpjNn8fmn3mJzl/5pgBrRmdyh/jAQ3AI49wDOo6SUPi3piyO2 vMpIIBkIB+K7Midg8PtcMlYJtepmYax6kjBVrYwBjnsBxqFcCZaEdrQyry9zUNIy+MbVeWpDH65c IQiC2ibY1HEhri60jrCOtU6zLrReY73Nekvebuv2vI91H1v+ZrDqqEKtCinjblNeKBaeG5oTviZ8 TcGykiWlvZHdhe/rP9d+qbdMVYMti2ZLyGoL2gMOv9MtugwRkmfQx3RxLS0t4YpToHMJVbJQ4VQa DXllWMXHtxfV87zG20f/R3IE622K/HqNwfWZsp4UioWhwtJCofAl7m3oNnk0j+i5J16I1JcaqdFd tpvW0BuzWCXLvYy69XdAXANVPgrBo+ToESb6MvqcpdGQPnyxVCgsWEWT2WQx8Uq9QWfglCmhUKIh a6SPPiPZSVwLaSOWV6BGZ1JRJNGwKciO6GjMkC+RhApZTtQQ62RZg2HeUpkFMaaeI45JOixH94By DAtBGJnwmpO4oxFit4HBZ9EyGlEp6aLzH59764GXf3vZS8OaG0s3v3f9xBqXw2ywJOp/n97jjj+6 eMmmzXNnTa3jrMsuP/TYvf+4dc2z7zxy24JNcyMmt8WptaW3fhX+846Hnl978zMXVoM+vptJ8+8D 4+yka6uGZ0xaCeQq5JRKnntZozcY5tmJzW4ndrA7vVNn1xNepNw8ndZsErWCqNftAmpR7sltTo3b AQo2KOAdGSez5kYZNYAZTlnFYGRrpbE4aWQ4chZnoVVh+b0h2oTtVFaNMCH8jf1PMGjn+fRzaofR 4lIKi+JjGO3fdOvJNzxml6i1AP6tgH8n4D9GKuh4qUilFgpVSVL8dN6uPGWcIUM0hczoQmYwBsor 9RFk5Y6KVH7KzniCaVrZF5Z/RP+38HixYg+hZQwb2FV9mW968h2RXZlvSHnma6kIVylt28teLXu3 TJihNuSRuFGfryvQFEIORc0QR4dBMOUl6rUKBreStgSAqw3XOwzxXYBNA/eEpM2rN3mqPJ+p6lMv cU+SytMgKh7vB8k/Me7o8S8AoDJ0NmYlGyYaDwJofn5xJCrYDUa9kVOaQVitok0UlIpYoQYSboEO RD8/HrHnMYi00mKBib3qBDqNyKJiGP3bSZGyZBBGk6eBlHQkwbOTS+kgrKIuL0aWSUC2ZJqhzLfP 4BukqhJiKXgF5E+Aa/Uwfk9T74zJj3bu2XzFi5XNw+Mbpt9w29ThHpdZ78yveI+W26oeXnDpb35z Se2yijD3h2XLL35l4YP9d6x89oueq8bfW9IYEV1mp85KK74q/HDfhm23r+qVEADEZTUhfjY0IS8p kzSmHodO3UOUlt3Qwt1EoI7tOp3b7TutGkH7z8ozTEGiA8RXZnDWIa0z1CVZZ5Izfvb46trzWepf d1qHojWZQvgi2ShcZIpk3ms8YPxQPGz8q3jM+A9R5bT20ad7S03U1Ec9kgbjM/2v+IoD5gmHZNBV Gt8xOajjYzdR5kZJGilU8uOMMoGtHEU1q4kPGR4PxTLHhbmJsZq28dXIJkyn6vQXdrfZFVKeMdS3 0qURS8CuhwmJI3PpamEBPHtsxqp7VHm0j/tZ8trzTDq3xy+0WSj+mSwllkYLb3H7cqaTDjA6WE6g jPafYPM2IC3LsjM/pCWUnZLlZf5uhpRn1LkXmBTHUvpdp9XqZAnjgY1L2IOIiUKoizuk5DAzZBlv Q6q6aLTlXM95qdYiqBCOmZ6ZqfFFPxeakqSwMFVMOa5IK8K6IjkM6wybDNwhAzUkzAaDaPZrzZZo gh0yxuMVhfF4otAfLUxpwObRpVRWyKTMr+GK3Fa5y+G4yOJwWC1+t8Uc8bGuc4Ik2BVcH+QPBGkw 4Q0GoW1GvB5PqrAw4PXYvF6PxWwOcEWQM4ryolF4iwgNJE3FQbh4izXuolTcY43DqOHZhXCKFG2Q bIVxr2TSNBIzNUFpPew95hXAulI7Srm4uShu2UUbiDmzt9esbYQ4uVcSca7JTIm5DRaljFkw49ze kpZFLpS3MPPRUghtTCzPVvtlnYdJH6AKJR2yYQvyx0qFLHqsLHYlV/4SEoh6UBn6oWNpCfShMzr+ n5ry1SoQcpayRg4+B5sDwgvNiYzhAQwbOMDzUZ6/rv/Dpb9m0JH+A8ub6LKfWUl/Sx9skrtfZ0LO 5g1fBz+jK9NvDwg3/DcMZE7+bqBNV3Jz+h9mUv2KzCHhPOFZ2C8PSb8ostES2C7bCK9w2B0XOefa LnYsKF5iW+ZY4trm1Fb7hpWOcYwZNs05rWqhc37VLb4HSrQVZaaQN4KwBbXR4awuD0UDJkibFl10 W9ISq9atEQKxZDUvcEmNMa7uDMfjnhHeuKksWFZS1lgmlLmHr7wmuzhZoYLR7P5+Zs6Q7RmM4mQl CtmkkZXTQb+B1mRst+7Csd158FXsJL7Mtz1mG9mV+Zb4M99uhybvczmYloq/dtqxlGDhB7QmZoOD iMCUfKY0qZTQ9IlMaeWlAEWGja6Yr6qqtECk4D/MYpzZySkuWn73rIuk+Mh8HxW3Ldoy3my3OJIX vL1g2oxzZqwqv+WrlQeEYC1bhr8GPS7vxKb2ZLDo/JmtUza8mP7bjJl2h9lZMr0j6j1ny52Tt1xP WSA7ommIcBVw2A9w10vhO7SrdLdZVllX2dba1wXXhVaHb89fnVhXqNcV0PxQwhdm4ZuaB/K3h7lm tdPPcE7nSRCPx0/8TjXH2lWKhKzP+tXmYlMw4HD4A051MqDRcAE1lxc3gZiaQibO5ClOBaCaY7Vh 1CzaDfu0+rR0lzP4diyV7WEQzBshmjP++V8NA5D4KkOFWrvRZDDpTTqToIzH8mMFsURMUFotNgun DMcKtXnFNGSPFtOYKVlMI5ZgcU6lYmaknLIL+S5mHkCEctkMg0VinHIAG8Llw4ZhhdgyxqNh6h8t o8GrC58vbkv4r7hlzk3pOtazkZYt3NnhzhuZt3ZCev/ELB5MqZm5cNyC5Tf+OHUks0OsfmXG/efX t49PnQt82IT1WI71qCQ/SDM6FdSk0SdF0a8JewNVkYjfW1FkKg2WcqXJykp/EadWDKPUr7a47Umz 2e+Op0hCTHCJZCzmT0WicXclJNs4XA0cjWvcnEZdGSuKxUlKTI1P8dBqG6RUXl6U0LgYiRNvyMuN 9272HpCpnMJ7gTkkUiJ2ievFY6IguqtO7GQrJBudl2J9OpYyugV16Tiz38As34gmqBg0KaZAUZge xJ86DrJlO1N9GujOHh88LBOjsyw6FdklgHEsbJaRBuKkecD4MNBDH8qaetJeNt9LlwY8Jl2AfxgT 6+r/JS2SGRfqXFU6OEB95FUwaNOH2BVvp8fOZGX6O5bPZDTpC+iuf8UaBMkHUlGJUKyI6kOGkC1k L/GVBBoUFfpSW6m90dcYOF/RrJdskn2sr83fFrCzCHTgg36YbCrza9xBue0bRny+IPG7s/ihw5ox w5lf7bKw4/n2YWa73WL2u4JxtyXudnFcXG2KazRqxpzMbbCYuUNrD2UnnuEFTOeMLDVCa8UK/Acr 2RCT2ZDGv5tpTGvOiJY1qXF3nmU/O8wmh5PlAqHhlGPITGbFAczbFtDy5zFvcfKjdP0N/ArrtbZV 3Fp+nXW17WeHWsPpbDo7/yD3sOpp1VfiF7YvHEpBvETcIe6wCeXqeChaBUdYyB30feJy+YMqk0Wn E0JBzhITNC5ngFIiGcxwbOnFxsME9hVKPAWmS4wBtVrFDqjYgS4VVbnzH95J38sBKrgtcxoxUVxm vTkPEiYPkApB/CzglI1iEdHBKe0OG3KzwgSCY1KqrLyziIpKkB8HZynKEgyAeV2SUYylHaAXNAuQ +WZmf4Ftgul61aARZ80s//yRR2a+sIiBJx1335gLzq2eln6B8UzuEjbFQkO/54HDk+fQYTJM/jh6 dEHgjgncl4NSFyVdoBBTMMthskiqMeuMVRaLX8fIA2bPy2uUn3CcX2PzOKusVr+Hi+u8Hk6nNmmo xgNMD1gt7sjj18jAlKWxX3YAc7OitYynMn4OouWA0QNAA19b9tUG3iiHnsDOLNDQ97hi2drXycb+ xhssp19k3+qUg54Ps1IwPYNRvCwZlKVICm8mEW7E+6ToYsmh5qjG5/Zxr3NUR5VeL3V4BZ1ZRiNj AoYiM941lmRtIymgBYlUQUEy5Y9pBfkUVQWvUgm8X+uxyW1nErKqDdOQF2DtSLjCHw4H/P48L8ws NODz2nw+L/USazIeiwXieXlgYNfu8NrimDPIk9fCQ6PTaqna7wtQCHCSl5CUFKsypdpSM1OLU+tS h1LKlKeYg2PAy063WmZaF1vXWY9ZBZOVWt1FIy4dlC2WdtTBUSK7MTsYTH6ZRWTG2hgio2SUkimH sDsxn4WJqm0FjdRm9iETvY0A5WS7LA7+PyN9x7+Y0GWJJByl/2K6yjG9CnoG+2O6fFTgFvXfs5FB anofy1tBaT2BT7lFG9m6ZuF1tOA8VT+UNpz8in9tEHjB6eeDRsyHvGcgbnpKyrxpes3NWb50fOn6 h/gPy3HHcbfydcdH4keW9x0fuP4q/tWi8ogei93hcAmvW/5pOmHlH9bco3+Me0rxlOYx/R+Vf1Sr b+bWKm5Xd+khtNjv5jYq1NXKanWFpk4/QqywVDhGuNSFXFJfIsYsMUeJqxYeP9MescfSY+2xdzv2 uHa51c+anhMft/zG+qj9Mcfzrqfd6snWCY4O1ybxHusGx0OuB9zqFmuLvcUxxnWee6ppqniBRZ1w jTANs1bbh7vON40RWyxqnVKr9iq96oQp35pvh0znpoLaajIIROUEATPHtLwxxjy4IbjuNyN44Gpb TOXu9TRfm3P79XcwU33ORsBcDHSp/NfB/kBiOgAT2x1aeKosfZkTvShFuGt6La5GB3PbGG3eRofL 4W90sUwDMa3X5GaHvmGloi/z/mBbZ2Ht3/WixHlyaWUliCgMKIdz5XHJCIJqDxksDdYAMtqX+boX TjSYEeWSY6Vob9TnShezvRjM1gZqRKaPsBqzjw39ky1pgGPSQW0c5FxiFiH6OiyqSo65vJgcbBHm 3/b9qn3pfbRq36rvVk367qWtJ6nq8Ze+41qfTH+2GTG7RsQRTtmc/vypt2lr+s1Pv0l/QFuYftwL SjINlCRKisgxySV4BK8KcRVWryUY81Z5W7w7k9pCS35f5jtJvNLzKw+Xry5Ub/DcE5T3jjHOncxx 7n/PqcsgZWU5dUrm01ESiFlMeY15XF6eC+w6ETP5qM9TUgS2LbqLT5xWLAbEWSbNMs7TwXZDSKY8 CWuQB9sHMp2pEVPVnott+L9DccbKmVcGzrCloM9ZMjwgoQ5FYNk9E5OlVrhrwrT7bKkJtPrrZz8Z XT52/IiL0v+g+o5Hxz59U/o9eji9fChGv7Vqwk2xGo914oW/aJgD9YHDvgAivIx5LyLV9NfYsZR5 VTo/FG5I2pyuhmlVl5RdWcarkiPKxpRN9UwpWx5anvpF1e1Vjxc+XbY//l7w3dCh+HtF38fNEHnK WoKt4V+kbgmuTt0Z/E1wS+qN0JvhL5OGwG44rDXYKfLv1qhiiDRVe3qNgqHCZFgZKUpFIeIPi7sh XLm4IhIoKWbTjszUWFysdiWi8cJCJm0Fd3HXkiJus2RA0AwNiBUxH4nTeB/t2L7Ct84HjkALcCxC x0c2Rw5EjkWESB/nh8NUEmkJZGROdNeMyWn6TJnMCslHOo50MDkNgjLzkjPh+Kis7QMV2GIzsg+q b8n6gIZIav+5gYWvgf5pyemfPUF9aBdc/eHM8W1JfZUjCArRUxmC6fObrAoKH1E7ZBRgHZxH/4nm Z+FHBd01ZxKIcvF8BCJAiJFBZlKW+m9mdJ/J2YCYUw9/cMtDU7tul1hryUNbFqd/+uLy3glPXZPe x2nTY4YCzuu/nLqpquGhH1kvdb5cNXH8opqJ90OO2wmeYANPGEU+kQrrK87ztlV0VFztuNWx0rPK u3b4AyO154ZamzgGEk81PTnyPeeXzp+cKnirT/RYXcNg35Xak1KivtbjMilshFYby0ujfHElswOY de54XV2lOdYMS0DxmvzKWLgZxoB8dVg2B1THZgYWB7iAp9UWk8ri0bjUtDixIrEusSnxfEKRcLc8 vIsGT2ul444cBatmsuSAjWDASNBvlp15WdeDzMVlNwQzE2AFKCPgZ+v/UP9hYg1wzMefcxMMGM1l OWvQW8B0zJx9lt+Q5aUWJ1U8+qs1jxWf13nJlqbJ7V/+/pOb2bQi4cjuRx55obWl9P4/T5/+7rPd QoOPrc778G16J966blb5BRVBs8+fv3rG+n2rStmhr5m1YPp9jywaOS9g9yBW+pZfvcz0oHXA6zqZ nt4hFUIRrWKKaMQXHBaN+n3QPauY7ml1O4ZBAnVHLbCwQcVUw723eIcomgO4BapSSPSV+Dp9+32C ydfoa/PN9C0BNj3vO+RT+/4a+91iOapqKYKYZF8ci2IaUB4HpdChMimTRXMQOkjrBhRECKlZTdHM rf+YvVv/31n+cfpJNj38s2z6hiow6b8waYZenV4ll5CRyYWAx+vx3qU0shuWnZ9JMPNzT1D0sbAZ L3ht5GrvEeWXvm+C/+B+Uv7k/Tl4MqTRcYKSenXBW7wblUqLi4mbIrGLds5e4bbbXW6/pbCUdRpJ ES1KkKKiUuIvNGtlMdWQ0BgMWo3fnIiy9uh4RYQZ4P2JUlCmaDyRcMUt2rjFzPkhSUTCUIUWY204 E0wnM1nwUbnbAy2oTTNTs1izQrNOo9C4y86QPCF45uTObI2JGadFzv8bTjNUfkSLSSfMqwDgzuk9 8arTynqWD0XNsv8AGtBpQwoDcL7/298uee5aGEyM+kBWbtz48k0XrpoHQRIkRVZ8oAaN3Hps9uu/ 4F7Gihm0bNn6R6753XmPzJF7sionrBM5zpOk7ZIP8QauUnKea0yy03+XeMD/D9c/ktonyZN+Ti+r A0ZRrLDDy2336+2OSCGbahD4JXGOxMV4Z/wAXKLxRDIeL0z6I0mik83OrsUqyuLEFqugWSQ4lYrn /DqOht3s6nP9/gqX3+92+cMup52jNAA8Bi67sL854HTZnE5sTiiMR9zxsC2u5+O6CCKt9ToO3/5g uxPjpa7xrm7XMZcAJaFB0jm5eIl9pn2Pnbej3YtNIM5d9GYonAd6U7IF+WJYkI9/2QF7C7O5QG8D rjAllFkD2K+khBmOoSL8O8Px2XbijqVn2ZH/pSO3zNASsIDMZSRreoxUQR3AlsZ/08s9fmW6vclp MxhsTjrcZTUYrc5f01uV9MbNLhsaLlqTLSWhQWPX6+2abH7KwX9zZptRn/FY2y5gYTNXId1jqaIj wjXRqmZJ3+ZoK26qmaCf6egonlAzS3+54/LiWTWPFK+v+W2kz9IX7qvsa37D8kb4jco3mj8k31Z+ 33i0+e+I3/xBjLhw23JqaTZbmqNiBO4zbCyh4crKZovFEghX2sLhyvIonHABOLUoLefA/cW4Ka61 xi3xcDwU94yMN8cr41Xx2rJ4eTzUx/1C8kF60Ko96lqukPu+klbGm5sba2oao9Hi4vxmJjBYGpsU YpxShV6v8Pv1MIeCKhZIZpOiRNGoaFPMVCgUnpbyOPa0F2zPv8SPJ7Hj2jb/TP9iP+93j9pN47Jp 1J4N+HSPO+4CALiRM07kHnfEBYkS/Af/3KjJB+U+NxqDnUzNZzZtmYUdZXxsIGNAw8TRgCi5yxtF yVmEDKqnCM9To2g0OJDpbbL+ySTUHHzhip3EkjnYi2ugkRzsxWVyiStRft2Li+U2rmdlz9BbmPAn UxH5PhWZHySrEcF5Jmi7ZoWdZdAtmM4hWdEVduFgM8tEl8mWvT/Kchx/AaXZCElzQNuQVYx2erb7 4qyOYRV0wNMxIO38Swf3AF0XYkQp/SPLb00/nn7qVrl9POARbRV0dfq2IGt/wVjHDDqKjpzBal+y vhA3ub+fMR1m8KAvp0dm60aHkuPpV1k2bnWmO+ijA3U43+vT/fw98OGbSasUh23nR0LKdeC0PwIa 1TqtqLYQmqcRtaXa8Vpe67bMfepMsyCzCw6xtZ7JKQfUA+7Ot+RXOJxVAIS7/rmHDUDxDTPdAO9o Xbqfu1seQ4MUOnsMos6i0ebRRiDSwNNPgaswWwZU1zPtvGWlikHCP2Ax4hr3sWcjHu8wK59XNDE7 2D9lcyLuSPoRp5+OwjZg2KaaRnVCSUk2FneIcVK45+Sj7GqhI+h29+8fnD2OrAffvojvIgXYAThb mvC06rHg08V8XBUL1grLrVd7rvJ22W7x3GW7x7NFtdn2mOe5ku2qF41bbds8OwP7jMfL7Fps5yuk /IPmuz3cdcWrizcWP23cUvxa2XtlX5SpCyDtPyd5YiXhWCwSjhRY/FZnYliYDEtQvkKvSSEm7LA0 ld5WQLQVYV6nCTM7+xLY2RO1en2B7SEx7FexAwYSCoUlYIUpTEvCjeG28MzwpvDz4T3hQ2F12FPj XFcaVrLji5WblHuUh5SC0l1duHvQkAQZflz/lzmDZnbqBwJgSjpQa6w7LisU2TANObxsiCIhe67c Oc1hD1FBqKnMHCNVSO7M8V6LulidVRqgpC/NOblscHLtJgGcYs3shUeLibMd4Soo8AOhBHIQIPwj rKMaQQMMqQakNJ5JMzCJZOMJ+CkvHLjv6cMfjLitratr9taQRnRqjXMeGr+pZwlDntdqf3XuC/PO v/qKy3bPuebBBxZfu8Mk3tZyyXCty2LWmjyFD8/pP8hQif7GLLbVXnDe/Mmw2XOkCGs/GVDrg1kw b6sBDuLnJJ1YYhNFqy1i8DlY2+ousbvdDnvEF1DxVBeK6zt0fXTO9nhYEwqDKs+RCnkfbP8qjc4f NmHmOaWnMDqR6EN2G3MCm2yLbYdsvM2dmHHHmcvBFkG2MDP1HsZUt3gERPio+4jrCLPnIf1HIUte DH1uMaSJCzW0VFeaN7rgooKLC56KPJ73At2pezGwI/9VxT71QeFT9RHFN2qzQyij5Yp6XTNt050b uIhOUnSoOnQX00sUi3RXctdprwtcE1wV2BV8KbI95gANPdajEwugC24NyC5J2V7dTs1YIwQlETgb 7bl1HLTogo8NBoDQwvs/6KPK9N+3f7rhNYZ4Wd2Pf+Tju+76mCXhq/53/5D+6Xevpo/94XFG7YQG 2Qz8xqa//GUTEjCbeQbGAjMLybHtYS0UbxiaTkgpVF63fxr7KP9w8HD4b7Fv8lV59nzHqNC42Lj8 SaGO2NT8haaF7gWxVW49LFk/SsustnbrRfZLY5fkn/AolB63aPfA4WWJeVaLG8V7Xfd4Hrc/jnOj EJZNbpuXMq+w2+fMaoLkNnM4odL1Ckrfb5zhqM5Yq27fHKTrg3uDXNCTsoXjbJE3x6kpHoyvx74q d/LVM9YZnvtxMsddOo557RFVix8WmOl8uQBO5hhGA4vKpGPmFIC6PeD2lWM+mLfwdGSNzHkY0iDm BpYv/jVGDqnTCl+v8vm7d//u/adn77vAjmjZuY++sS99kur2vcIbfAxLXg56nN7RXd/c9+jBc8bb nObkyEsp//o+in0JHLkBs70FuBDAfH+249zC+YXY9M8QwIi4bUWJbC+JqANQUp6TRG+J0+t1OSMB rSNSoOnQAg16C8KYb6BDKBK2BYheZ1MRcAZnUBPqYt93oNSTioW74Jjqo2t7k4VdWWQQTyzNzQ8z djCOgJAxCBz4d5zhwX9AAlmdGNvtyCFBrxHfDWIkZmz3AF7sxA6Fb3tCtnymgMUzX/VG1XnuQRo1 qAxGZXqUFVTLnQPMx3oGKAtclsTc9dkVf77mmj8v+/Reub3kw3vu/fDDe+/5UPjq5GWMtvz2jWsO X/2LQ9e+QT/OQvLmTz/dzCCZI12Y2xJAshuG3APSAq3jATtXzo3kLsD3Df7A/cH6R/fHlo/dn3r/ P9cXwX86DG5foa+SqwmM8Z4XnO6dGlzsXRS8wbvW+4DvgcALCtOVjl2+V/lXLW/63gwo1a+ZPaEQ OLDZH3aqhLBZp5/oqd1M6BJgUB/9QnJGQrW0drONLrbtse0HKRKwA6HwmdOkCN5yObDkaDYoEsIg dGkRUT9nTGaPw6YESdjmtQUDsOF+K88jI/WIUqBh5rXKUW8WGjYAmUQlw61KKDr1pOOLp2b8qclq FF1i6U83fpg+RE1v/IlqJ7vf27DhoIc+/OjrDRUmt9kslk+m3jdfAOX43xvXPPfM7YAg7OQnwlRA ZiXZJ8Uk/XhFl+Jm/Y1lm/U9+m3J3yUPJrVOuKr0b4hiRFNZTMoQvccJO7AnrhhCUB+VJA+lEXVe QYTEOhJhP7bYhdzFRS6lRq1FOOdaSTsMbqSQZ78MmvdIhhK7ZF9iP2AX7O6qK3fSt3JewXHHWahN HbboMBWqjpnh+uXgUTj7zpRi4L0e6JA9g8bCpBcLmgqSpDcRpEyJQywoXH//wfRakQvGzpl3ZNS3 587lSqhsQ+tfzGjqvh0s3/HMHVevrLC7bGrrffMvv5quYp28oX/0gBzJ7WTwuGLhQw61w2Jx8s5F LSuychtHfpm+QbgBkJmPuMmAVNZiW2LjPg2/G/s2fCR2Mnw8T3lp4rKiOSVzKq41XJ9YWrE20VXx cOLOii2JzRW7AkZOzajBbJlAaBQKtSbCkUCyzBUSnSGspTGwoSwc0ibDZENcBWVHiY+LFPhDNKTV iprNmm4Nb9IwA8Tzmv0wP3iqisNd0fXRzdHuqLAnuj96OHosKkTdlYWzhgCrLMQw3yMWgwmQjUcY Sc26t4dSDJlInAHFu2GIOU482OpUqIYW8HNPQI3A/uM9KXUpKxL6CtZZ5Cg5bQLNATqTXGjVgMxv tqmMXG6XVQWi5KsR1AGox54GS0X5maSDvzHL+/JcS6aPk0MFfhhzdb5j5XvPnjz57Hsr991++x// ePvt+7g3HpQpxs6JI1MzCiCbuuh55xY2ndpJ6fbtlKTH3v3W2xvufvtt4AK+xClcBlyooVdIRQ94 ToY4gdrpxcorlevp3dxm+hjXTXs57ePKJ1TbFNtVf1B9qDrkUXnUZqdMt022oI2zTXfZYGWPmBMl rFOXml6aSpWURhIiLEuM3iO4brpsXIqIWflVF5uek19rytkp0aqSsqqq8rJIDWXhPUKioADLXUME lahVa0LuQy4KPvGopBtBwqGyPaX7EXvSR//WO3x0bimhgjIiI2NUjuTLJgnzfyT4Q5yRQ01LZx/K bsXBV9oQYodAdsgyh3vMnkqoeO0yQooer0KljHkV8EB6VL4sSgInASkDtvGdRJk5vj2kD9qy0g+i sZgAZIY1oxy2mgEZddCSyNgFnCX/0p8TkegF4zdMm71q+gwoH8H097Lid/OV05tKFp0ZRSJjNuSi k5NHt6xr6//7IP7y064tCl3d/+1AR1ZUAl95CdDgUJhhzvORFVJhxF3ultwXuOe4l7t/5VZZDeIU G+RYpV4zRaGI6B0+9z12yLH8a1wfvXuHT2nQawm+ucPMgRzUEKMgKEL2Nhu1uf0TVpzWEWEHlN3O jScgnw5R107TOaCHPVplPYumhQf4Kbf++hV0DHvvfhcjT3TMTzD8BhXmjz5KTzglG/eZDAhKBVmG SSPb0jfwNfKb+ckmKSmyLWCcyE8ztfsg3fmWm7pIF+3iuvh7TMbz1evUm9RbfLt8Cp/ay1waPmCz Qqfuo8/uEISILvvCklGn9Ex0hyxWo2NDgJmZZ0pmbB3hA0G9IeT3twlUcAd20e30zzmKL5tAQVJK Bs3M/UcaT/TnJgEMEuIa9tLIbz6gbcKSDNks11JgBw136Pob0wbm7uZGT5lSPzH9kzwBmkt/xd6+ /5SM+XMuXV+ESCMg/tp5wPI9WNcNwPIqrm8nSQCMsZkwgUjRXpteLqU27CScZ33Cyr1aSQtthbHi RGFlQdXwvMZYfaKxcqFtYVR3iZVGrcOsXNLWlvgo9lHlt7FvK0/GTlaqR8RGVC7MW1i1xbYlqsyr ikbxdSeZDihKcjTcx5TWbfjaYxA+ob298OiyUhIheQenR4PBSDTig7u0QqYWpaWtlaWlFZWRosoq s06+kbFEazTqtBGz187aVpMr6OJcrgdsLpcdm6hs1lSc9Y9OJKbHEol4LJKK5cXy8kJVlTZEx0Xx YRZriESxiy5KrFV5NkWURmp9PnutVxmvTVXUFhWlUpyu1mIm6lrKaW1MhdYshsHxwVjepKpddDOJ ocewpLKrkgtVllZ2VvKVjBr5qxEQbQH3WaLp0nCiJqQpRYXxIaXGPWw3fRhRMi4Ke+mAH44JpMwl xzaNwHYKvi/bwHPG04HgQufwlYJsC9sJPfdgb6CuEY7xg72+6mwJS5fchqWLlT2wdMnGJuznXKmA 1dWIeF2FvGXov8Tn/gvB+8/nQnsoOft0lRGRuwNk0QpvvSevkn1Ts9dkrsSgDvegZIMCfcQXM09L 0FFI0DZ1jG33rcycYLww6xBcirPyIHqPl8NYo4goiLkrQ/JhFiPCjGqDoSCD6mGFecB2lhNmomdZ 1ypgXXvxDGXxNTo3KeOKgRGOWek+umkWq6WPsd7a9H30qvTqM1THf9IUIx8ModLfpdsHqCW+2Efx hTMCb+FXiNfvkCpn25fZb7ZD+NBPYTIjpMQpTEK0uOz3mM2w90IwJDRkFsU2cY/Ii273mdSQSX// hQr+Rwp451D69yOjfwOqw+mXYPIuvvkg7IFM1soVSnWmalONcbhphKnOVG+STM2mFo0lrh+m3+bt SQn5dBjlJvlmq2b7lquW+xTDVOW+FlWLb5JKUaqurpfx89AIOqK1YcSI+oZItR2xhs9JgZCFjrcc sBy2HLMIxCJaJIT+txotFpMxYo8h/BAKHomIES7SGohEgoFIbBi8UKyzQqzgKlpLKipKSyLDWiXW OfdQM21ubWxulhojRSXKQLy4qMDvU1JVYbVUS1qVhWHeE9ZoeBXC2mIxu9ZgDDkdUrCq1NHl4Byn 4v5AKD/O2vEufGHgVAMpCTU2MEMWadjTsB+fXXaPLnw2y4soIqBkoYG5wIGQrMBqMGdGVvoDfjLN mnlSEXM3GOQ4FBv+a0t2Z5xWOXHuANYoGRWWhYmzhYqcVBEqSLiwxV9Q6GIJIT9IFUq31olP6SkK g9Slh7MQCEbljTZsFyZBeM7Ybm9OfW3SEm3mOyIgqTIfQ/b4GMLLuwOyJ10qm7tVbASeBuhhcgmx Zm8P2jLe0g6rnYkmTiagYIfOgCASNcuK7KBgkm2fIamcbcP5+tJFTbPDNctGTBs2Wo5O3nh+RfEl Ta0M4za2lRWl6pvl7s9ZR/YMfvakZS2trS21503t386QjrtPmtgytx+bPlC/s3myP3FxtsHAPKuM AMoXAconA8pr6Eqp+j3le2ruVeWrau5RdY+yR80vVXWpuDmqi9UXe/mN3seV3HXBXrqN433BhUG4 wgQOceHMYQqoNNmDcJi2yg7TiOVsmTbLkowEuwFbc1wpK9OKJCbGuLMEW0NVa1awLa+tUdJd9DAJ waJh9YcFFWRcC4yJGm3Ic8hN4cp7VBJl8XZ96WaIt24m28qcIwekZwAnNmw0Hh0Ex7PF1TPsrENh 8+wTB0DxP8m1Nq8P+y/x0WRO6VMA4Lxqf1a2ZeGmp4GtJ2gD7PzPVq+NEWyCeDFEoiJUDBJcFnrO AJ+spbbiLCgaFHsHxNvJU+5o72yrmSaDxmeMRrfedNmF1y49U7qVj/GzV7SPSgTWnNv//QB55vj2 65pv6f9hsC1rq0wGvBNWkzpAiA4b1s+RaiwOwYHdkPyb9E3de9wnir+o3tMpL1UtMHNzubnCAvUC 7ULDIvNc6yVOtT3Mm8IamNNV+jA0vL0sik0u4QtipWSwV3UTKiKqrhPCbx+3UnJZYD/HaUoJ5yyG CX2/8rDymFKh7KOf97pAggb24oC5HUUYO3A5yQy3zIUqm0oGtnXsxh7/48SGoBrRZrQ5d2U+h1jw ea8hYA7ICC1POov9JQytJZ2DhWnaWIa9QCcgLAUadTZkai0yFcvQ/63kh8SnsiEECfHQlkaHzexs sLHMamOurD5ET1lQ0WohrKlZxvGmYB1lX7Ad8tdOme02azkk+GzEoF1RqEsfhTH2O2p59XfUOumz zZs/Y4k+vzd9jJr3sI+ZHHvlkf859PBDhw9hbYpgN2DYG4O5pUhqLNOahucjVRVNoJO4DsPFFGui vNSwnF5XeEWx7vfKvdqPVB9pPs7/qOxL5Rf4pAI+gHmdai3/AP8MvtiJqFmooe4SP3bu+SOOLJfS Wd4YwpKaIiU5boStXyWmWruvFpqYsSSs0ybCdIOgIsHamDIeNqmp2lORIsZQwORvk/2hgt9dfqbx nWEo+zJQR3afiGxA+Hf2gyEIeFZDXvMBSamnQF/K9I4iOZTKEKJs1csyf9maHx1cc3nFATRZLGPB O8yIPkCo/wWlzlgaWjj2mSuvf2dZuv+lz9Zm/XCy+SdnUn/43fsfOHjwgfsO8rMfmDZ9+f4rtqcz L6SVDJ+Ym0uolQWiBXfuP7D+zgP7sXZdWLunsXZRfAHmvJ0kmTnRYxoO9eKEVGMa/hz5rfe5GH8B mem5mFzuWRjGN2I9VxXfTG733Fr8QPyh1H3FT8WfST1RbH4sSjcmtoS2JPis/pC1E+dUiCxt1tnf yJHlLBm+gJHhAeWAePKLXLUWJsgbi8I+bKuDhSgftqIINim6Ne5Ql5aatIe1x+C09JQVhtkWvc3B 7qCwP3g4eAyf13eXDhiRZYF9wM7O9pVALoBViAXKyUEr/2IWOoPmDllXEOChC+vJbs8qgSAcs6WA iD0FtmQfVjZx1spmrfaDFqJcZXBZYR4C0uWdZR565jVGK5fI9uT0EsZS9635/MV0P+VfPrzm4P33 H2SJe/MBtoInERGdXVH6zxdgGNqRSY+9c//+O+88cADcFF8iEabyV8O4aJds1xtpStOmXWi5xrLK cq/yYatK1ugkXfCNnPbmte/inoOyI0manFKWjDEkbCs4P6+gIJYXSeqMNvnDmAqVAZ/ltBlFbV6s liSV2kYRzBC6GFPJvFqT6hg+h+QpIrZQnik6Ppo14B2LKqPuVP8dpxkiPmTBQk9gtWO7srAq8uZF ti5ZiW34f9miNWSx/isTBJcz50Sq7Vab0WHxZVkcAl1l3pY1qcq7r/DtkbNE9UFFheMee7Rl7I1u q9ZojVa6qzfuocvZOvVfxrT4fXLoOj/74N2T5nqssLJEPVO2pCvlxbHAB/MiWyysyP7MIT4NLBtF f5BuszX6mjjLefjo8IJRz4Seqf51zVvWN0f+j/V9x/sNn4z8m/VI5dcjT1mPV/480qKzKh2KBs3I oNXusDd4R66J3FO526SbbJ1as6BmYe21NTfUrqpZVfu4rcemvaN2e5CboE4iGrVMqq+rRCyjUWXX DyeVCGYUioeZjHpei3hGd219fdgcboafpmobHyqmxX30XskXHxYOk1rVpOHhtgALaeQR0lg2MVqb sIclxiUd4IdS++IERUxjs4pXxrVh3Yyc34ZZ7eSvlHSMO06TCFXN+jLZLki2xnL0KsJIck7lQbFc 9ntBOpcNcTXVIy0hX8waczbYg6TWOzxIq0PILCPRdDS6ggQRGvUj/HWQZTy1dTXBYUFiazLLojST +iFNI2PaJv5kGWdg9bfV2iq1vhczXxEnNleOAto22KqBvb0RRx2DieyfvMdyKYuR30lqwGM1UDtq bchqGMd1IZak1oZsFGOxo2xgqqNsMIH42H0wM+ykF5hgYWNZdhAsZ2Hq2T0v2chMFoeZ9WSzoE0E aMrd+SwgCuJVztE3+JmH/HieHDYFx971WW2W+fVqLlh5+/m1raW3Pj9q1sw/vf76CrXdIAduup3R BxY/tnnCBenXbzvv4Ibn+KQfkLo+4HG46/Jrhier6gp8Jqsrev05l/52bsRm9ASeBRDbi4OljdeO Or+kJFQ5v27RCqZ13gVpqxaRUynyppR30ksNXo+Xe0y7Xfs77bvaI1rFVcZbjfcYnzD+Qfe+TulU UxWjIALM0Ha1IKjUESraNHZ8FcJssSnc+kQffVQyB2rz8lS1FP9fhz7s1v3/jV1/bBPnGb7v7uzY jh3bd+c7n50457PBJgkxcZwm9Bi5kra0sAArMGDMG+poSemqEFQ01Gpqq0krGt2Q2jIFtj+Qpq4b IOhIWUMpa1VW2nVdu0l0m7SprVDK2glGV01dtypmz/ud84O02haJ7/vuh0P83n2/nvd5n1fbgxD4 n7paRwcw4vnZc0JzrNkCr/N54Hbj4rtjC2mjh1l5AoMD9nfcHQVHFMA3vq3j/tJrhwnPv5JKhxob U8FWIZQOtyLKivwr3F1dZVMuFo9V6BEMPBfVFPXwum7P36InsNzn0Ue1vl0j68/1ahHoklj/HHns GKcY/oAehnQ7de7J3916e7cVIRWo7OB3doklOskjmsmOm2HHTdLtQgEjcTgkn9TFos5ScFDxRU64 FAiHgwE76jlSG9Or6o7UQpauIxUQy99s5fNZyy4wPapZWUcohIyk05rJRANBB2FlGugg8PgJBugJ P3KDC2JxK/AGQtgIYC/OBdhhSHI703hLncXTQPy/p8Op7S9CmlxC0q1rYHRFJc0JVY63Copf8yzv dUO1PgifgX7cJayHL4DzdQF9jjyGnAACZvIUNNzNn03vzGF96pS+ffSV+921HBR/aWjVb47wx3CF byPu/+HAxl1ihj+M7962/Tmv6eHI9AwczIaP4hnkAPF2HWFHlKOqZIWsRotCMpusqIWdm8P6lOvV O8Vt8bu0u3LHcdNhVXFbGekMHHMToBPFIqWIFFnFZQZsyAx4kyi+LYDRGRiUlAbgNPH7v8yVBgAn MQ/27E9GOe65ahr2jIPtaSlxDftIDVKdUMDRVBVoJ8Ql6wBnOuaEJCcU9OccwJrb3UZVdErx/vjx uAShye2CyoJuBBpqi5Rh5RAgHFk5w47jnZnHsh50SXDlRc715HDlVIhY/5L/SvOszuV5YlE0C2Gc e5mOOQ1PqHo8TxrEpkE9zvGcfUZ86nu1J79IqxvmULmXVeaxzkf4iSXkEVkvRehR8se53AMIqE1P su/qVflxPMmi1OE+UdQLxrelw/oTcGad0p82AoIYEx/Q9+nH9V/ob+s1PXAIIvtviBLSBiVAkE0U xQVyMVEw+uS+xC3yLYkN8gZtY2KjubF4J7tbHkpsM7aZ24r3y7sTo/r3jR+LR+SfJA4ZJ8XT8nji KeMZ85nir/SXjT9Bx/R9fcJob9TTOpIS6O3Gw+bDxaP6af2c75z2Z/099p7xsfiJ/rER9zhEIA1P kYi0RLZAL0jHjjwT8lbezUsfUOtQ/rd5aUf+wbwYy6+hWKADxXy+ULSzRSHspw8s+CqnZQOlbIWT VLoSZMeDzwffJp8pCwYP+IJBP3w6PtlK0d3xlpaS2dKSMm3LTO4XdcMav7rCLSdkydJ8sgwuElR8 NGQEtJIm3kfEdoNQaCUNtA2oZzHJQuxqIqGLzwPzMNi9eJvegfkTANJzMnKRMGmdHCo42ZRjqU7E 74SzlhWJhP3D8PSdNeFLecSdLzxmuot6TLfYXjHdeQUULRkUZgoFAGbTcbcg+vI0exJ7EIPtdQ19 veh2La6IdJ9I94luLF6Bc+pJN+KztiRY4qwmP6Y5CDx74cSiHqrG+hZX+GG7d4j/hp/Gb+A1Ps9r /DKqXUU3Kj430fOAb59PFMCcFaGXd0FYMKvHfFStTk/elydAw6qmYpN0ZjJ50YRYVCp52bv+DxxO VIWkBznSKoevZhGEALYK3NGXiRMbAJSPOjnToBOeJgfyPM3uVnM7HSCYkU/xqz/rJO99M0ISJ4sB MyDHaHwl0QjAOTuzDRJSkk2Be3Vqvap2q+qcc9KeoVPjQ8cWUGf8CxV37x/bOr5vO6HTF2nRW2Ri M2gOs3ronaI2eUnkHuupXnoHxtvt6KUD4qPu/tZ4qyIqffENcTFNGEurvYXdowxnh3NbBs6ys7HX ldezr+VeK79YeXEgCm0AYdSWPotgzUnVlkeq5mRryyNbi6CzRB0MlKqjOFnHclJdTtnJOzmnbZkz 4PQ4FcdxpwjVBTCq+zf5KuOs82lr4CDCH/FGp4lYnc3qIFcLkOIBufpg1DeMVwOUalwfyx0sQGMO 92UPFjZFW0p1GMEHWnUolAq1+R3/xWdZA/oI5FlmLYQniF5txq7lWFeJTI1/mHTBssYblLqcjE3Q STpRr1NCcoZaPdMiNTm+OlWuvjqHMn10zKNMfzSm5IjafGEMuBXqt06klyz13tdZpGs3F7uOaNod 0zTtED4WyxA3OoMFb8ye/hTnahPR2ttpnYwnI9FKNzjTJ1BjmUs+IgoK80Dp7qsX3CCgqXgGqBTu uuCuQCMe0o2lcUyZSwdugAQqo2KgF9GnjIqBXoimMioGSDkV7uZofzbUYi2tRFGUNTO9FHpWCSJq X6JgUXwrXg8A5RqLaRRU+ks3gkZuCYosFfU9gPe9vdJbkdNinJHLHjEkU5vxOW4nInV7oQrdU9v3 OaRufw7Miofma1H4nj6kTrG3dqp2mk9gtSuQjlDns4dqh/Mqrr9L89lWlmYtW6kLIZA9qubZS7V9 DToW7ASAs8W1lz2sM6I3YGN6S4BfwXxXu8Li3jwY1qHiIOwHTjOKXlVmz7n9SSGpJO32SNboYT3x 1RHX+ET9l90YhBbfCnuIDcV3q7vtPeoe+1T8jPqsfc7+g92ECVQpK/Gy6q1pMpFIaXoxk7YzD0L4 8ICdAaqWtnPtIE0de7pzEd8bGm5jubOzq2y3l9WgRwL0+Q54FMAgJBQQGYMpx1iEYJMSD5a3U2q5 LU9n7ykUSrlCAck22nK2Woa0jq2BKhNXFEsA9qioAivjggK5o0DGp0AF3XbSac1JpdCjRVr65J22 LgfyvE1CZk1G3JF5J/MB7Uwra3zQ/Y75LN8O3zu+D3x+n9nd9iyjdQ9XFJ6ojgBjGJkGGWaClfrr TMuHA53c00qj8f9wuM5d8cwZqqcvowez2N+rpdg16yXc3RCILQmQWNJINVt3e2KnUR+IP/V6zQk7 yIpfr91nZlKRhM6jAkaQdOg2vhBGzEBM65y89C0aqms8RI81YGxWIokgXz6tFn/mvUJ4uWYQI1pJ XQZH+W94mwzhfTfURBAxCzSFxDNQh4yAIRkSZDy9xoYSF0OwQzpfBt+olqIqlBBtvYmJimhFmhCl g5QpYhPTI2KYNUUtwYBUoAUxZlaVnWioPzRMeJ2pV4fDLGwmd9XxAi6UVOc7k+y4txOps2AXAxHA UMf4WCd64SGgGb5A4SG8xliH+o8nMF5R7+aKBtfIB15zALPTBh8puxLQ3PT24g0Q35zWF5R+P7lX 7ON8i0lB3Dn5kbe5Wzn5uXvJsK+sFF/cSY2Xwavcj+iK6+E57hJGT76pvGmLDRhkn8n06HazXcmg 7Wpo5Ox8Z1yJSVFfx2a3H5u4cTF5UrACm124XJNuVrBSQuF8Z/i87MtjzX8+VerMZ7PWeQFKBWLK LP/7FBK3eXDZoBfVyMsJCI2apRIWJMnUZRNVFTX8mx6MAqiSfIoQciWXnyf87IEL2F6RJDTRWntJ TsSzAXa+oGfiTr94XVkxlnW1hiIpc3XP8mXdzbreXLlh97pkKhK0yjcU2Yfz7YVLawcW3+qTgmEM W+WbvsaGelfKkq6puiSv7GVDX/lmUlHCIcm3orc22j8IWz0OXfrF3FZvumqbze6zX7X/akuHbdbc MW9hBdH+590mNFpsFK1UGPSUUYPa/RbVYGy/5WbRyNAHZJJf4qaN+jKD+qBgNcC6JKzHrdu+2SU7 uy2edesmTU0bGeMxjPuc+HOQG0+zX8O+QBfqdvWqTxsXRuZi0vRmAqWCHGL9B0urnQw29Sw7LX3o 2Z3ml7pp+QKLghm42cXR7jgMbQUjprmmsnygO20Y6cqy3WtNMxyaMnTHUjbUt0KWIAGtJLtv3Fob 5YZWNW7o2igMrSrhoOSD1bf1ryLfGP9B1Ms6NJh3NKtchjZlZKP8El5eCUC44BXo6P0m8kc089wR FnJFUJYIylO3ENkhvNwQM5khHOSEcAXK/nSTcLOwHHmnbkVq1ZXIBDWIvHyrEWv3BeTyW4u/YT0y Q21ARP8m4UvCZmSQqiIDxhb+9zABwUe85Sdew6aN69dv+nz7wPCunXfdsXPVHd9Ys3ZwnfAfFbcU RwplbmRzdHJlYW0KZW5kb2JqCjIwNCAwIG9iagoyMjE1MAplbmRvYmoKMTI5IDAgb2JqCjw8IC9U eXBlIC9Gb250IC9TdWJ0eXBlIC9UcnVlVHlwZSAvQmFzZUZvbnQgL1FKV1RYTCtDYWxpYnJpLUJv bGQgL0ZvbnREZXNjcmlwdG9yCjIwNSAwIFIgL1RvVW5pY29kZSAyMDYgMCBSIC9GaXJzdENoYXIg MzMgL0xhc3RDaGFyIDY1IC9XaWR0aHMgWyA4NzQgNDk1IDU2MQoyMjYgNTI5IDUzOCA1MzcgMzQ3 IDQ5NCAyNDYgNTAzIDM1NSAzMTIgNjc2IDU2MyA1MzcgMjU1IDQxOCAzMTIgMzk5IDQ3NCA1MzcK NjMwIDQ3MyA1MzcgMjQ2IDYwNiA0NzQgNDgwIDQ3MyA2MzEgNTM3IDgxMyBdID4+CmVuZG9iagoy MDYgMCBvYmoKPDwgL0xlbmd0aCAyMDcgMCBSIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0cmVh bQp4AV2TzW6bQBRG9zzFLNNF5DGDcSIhpChVJC/6o7p9AGAuFlINCOOF377nG6ep1MWxdLjc4X5w vXk9fD6Mw+o235epO9rq+mGMi12m69KZa+00jNk2d3Ho1ndL17pzM2cbmo+3y2rnw9hPrqoy5zY/ aLmsy809vMSptU+69m2JtgzjyT38ej2mK8frPP+2s42r81ldu2g9x31p5q/N2dwmtT4eIvVhvT3S 9e+On7fZHBPRsb2P1E3RLnPT2dKMJ8sq7+vq7a3ObIz/lUK4d7T9+635tq6E90WssyrPUfB+V0gD ClRzaYGC9/yiOxSoBmmJgvdlL92jgJr0CQXv96n3GQWqW1UbFNBnaYsCupN2KNCbxogoMMaTqoYC Y6Tn9igQQTcH3oXgqKRkDSlv2ahKVkFVEQJZBSdrjEBWwXNTlawh5S33qpJV0KtEgayCMZKSNdzz lqqSVXCUEgWyCno7KVkFvXobgayCm9MYZA0pb9mqSlZBwDQVWUPKW+htFGQV9HopWQUP4vuyEH+/ vHZDO/yxc911WVi3tOhpE7Vhw2gf/4V5mnVA4g/kTtgwCmVuZHN0cmVhbQplbmRvYmoKMjA3IDAg b2JqCjQzMAplbmRvYmoKMjA1IDAgb2JqCjw8IC9UeXBlIC9Gb250RGVzY3JpcHRvciAvRm9udE5h bWUgL1FKV1RYTCtDYWxpYnJpLUJvbGQgL0ZsYWdzIDQgL0ZvbnRCQm94ClstNTE5IC0zMDYgMTI0 MCA5NzFdIC9JdGFsaWNBbmdsZSAwIC9Bc2NlbnQgOTUyIC9EZXNjZW50IC0yNjkgL0NhcEhlaWdo dCA4NDYKL1N0ZW1WIDAgL1hIZWlnaHQgNjM1IC9NYXhXaWR0aCAxMzI4IC9Gb250RmlsZTIgMjA4 IDAgUiA+PgplbmRvYmoKMjA4IDAgb2JqCjw8IC9MZW5ndGggMjA5IDAgUiAvTGVuZ3RoMSAxOTc2 OCAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAHlnHlgVNX1+O99b/Z9ksySmWSWvMxk mWQm+wIhGbKRhZCEZCABAgkBDIqyRgQF0bqiqBWXumJdqhaVyYA4FKpUqdYq2ip1Q1ttaStqKm61 gpl8z31nJgTt9rXf3/f7xy/Jmc+7y7vv3nPuPXeZB+vWDC8larKF8KRg8NyBVUT88f4AMG/w/HUu DJs/J0SmWLbqrHMxnPY1Icrks1ZsWIbhrCpCPEeGlg4swTCBdFI2BBEYpiXAzKFz112AYa8BeNWK lYPxdC+UTxrPHbgg/nzyNoRd5w2cuxTzt7H82avWLI2n0x5CTHeSClJJppCppIpMI9WkhgQh13S8 Q/yk8JlBXcRAfkrkhAMGSD8hmkE6nUgIhV9CpHdHiz4/R7VIX/UFSVVABCH7P7zoRcbnrnzomlNv jW1TfiT/OeRVQgn4A/fJ7x57ixDVPafeOnmF8iOxpHiiiIwRJR/lvoo40p1R7m8Rhw/wZcSRB/gr 4gvE55j2GYY+RXyCOIH4GPEXzDmK+AgjP0R8gDiOeB/xZ8SfEH9EHIs4lFCJP2Do94j3IulJEPlu JD0V8LtIegDwW8Q7iLcRRzHLWxh6E/EG4nXEa4jfII4gXkW8gvg14leIlxEvYSUOI15EvID4JT72 ecz5C8RziGcRP0ccQjyDeBrxM8RBxFNY5pOIn2LkAcR+xE8Q+xBRxBOIvYjHEXsQuxERxEgkrQg0 GEbsiqQVQ+gxxKOIRxA7ET+OpBVClocRD+F9DyJ+hHgAcT/iPsS9ePsPEfcgdiDuRtyFuBOLvgNx O95+G+IHiFsRtyBuxvtuQmxH3Ij4PuIGxPWI67DobXj7tYhrEFsRVyOuwhuuRFyBuBxxGeJ7iEsj 9hLQyyWILYiLEZsRmxAXIS5EbERsQFyAWI84HzGMWIdYi1iDWI1YhVgZsZVCJc5DnItYgTgHcTZi OWIIcRZiGWIpYgliELEYMYDoRyxCLET0IRYg5iPmIXojqeVQsx7EXMQcRAjRjehCzEZ0IjoQ7YhZ iDbETEQrogXRjGhCzEA0IhoQ9Yg6RC1iOiKIqEFUI6YhqhBTEVMQlRFrJbSvAlGOKEOUIkoQxYgi RCGiQARPI1Y/lBLASD8iH5GH8CFyETmIbEQWwovwRCxTobBMhBCxsIGeEbFMAbgx0oVwIhyIdEQa wo6wIVIRVoQFYUaY8Akp+IRkjExCGBEGhB6hQ2gRGoQaoUIosUwFQo6RMoQUIUHwCA5BEUQEHUfE EGOIrxGnECcRXyH+hvhSfCz9q9gi+gVGfo74DPEp4hPECcTHiL8gRhEfIT5EfIA4jngf8Wd83p8i ZsEZpX9EHIuYYeTQPyB+HzFXQOg9xLsRcx2Efhcx1wN+i3gH8XbE3ACRRyPmRsBbiDcRb2DRryNe w8J+g4UdQbyKeAUL+zXe9yvEy4iXEIcRLyJewPt+iUU/j/gFVv45xLP4vJ9HzLVQs0N4wzP4oKex 1j/Dwg4inkI8ifgp4gBiP+InWPQ+LDqKRT+BRe9FPI7Ygw/ajYggRvCxYcQuxGNY9KOIRxA7ET9G PBwxgdenD0VM0wEPIn4UMbVB6IGIaRbg/oipHXBfxDQbcG/EFAT8ELPcg1l2YJa7MctdmHYn5rwD Q7djztsQP8AbbkXcEjF1QJk34+03IbYjbsQqfR9z3oA5r0dcFzF1wn3bMOe1iGsQWyMpPZB2dSSl F3BVJGUB4MpISh/gikhKC+DySMp8wGWY9j3MeSlmuSS4C7Ke0Dc4P9Y1Od/VzHI+DfIzkIMgT6nn OCMgIyBhkF0gj4E8CvIIyE6QH4M8DPIQyIMgPwJ5AOR+kPtA7gX5Icg9IDtA7lYNOW8HuQ3kByC3 gtwCcjPITSDbQW4E+T7IDcoh5/Ug14FsA7kWZLqS+5o7SeYQJ3cKOESc9OJIMrhMujmSxAbgOsTa iJH12jWI1YhViJWI8xDnIlYgzkGcjahCTI0YWGFTEJWICkQ5ogxRiihBFCOKIqDgKC1EFCCSEEaE AaFH6BDaCBglSjUINUKFUCIUCHlEy0wtC84H/gVkFOQjkA9BPgA5Dub8HchvQd4BeRvkKMhbIG+C Wd4AeR3kSZCfghwA2Q/yE5C7wBR3gkTpFtT0xoiRDY4NqJwLEOsR5yOGEXWIWtTDdEQQUYOoRkzD JpsQKYhkhn08z3ORoPP+J3mO7AE5BMLzBOtyIaILrT4ba9aJ6EC0I2Yh2hAzEa2IFkQzogkxA9GI aEDUIzIQbqy8C+FEOBDpiDSEHWFDpCKs2EwLwhy8A5o7BvI1yCmQkyBfQR/4G8iXIH8F+QLkc5DP wKqfgnwC8meQP4H8EeQYyB9Afg/yHlj3MMiLIC+A/BLkeZBfgDwH8izIz0EOgTwDEgV5Aiy+F+Rx kD0gu0HuYNbnxlDHmxAXIZZHjLAUokOIs1AtyxBLEUsQg4jFiAFEP2IRYiGiD7EAMR8xD9GL6EHM RcxBhBDdiADCj6rOR+QhfIhcRA4iG5GF8CI8aJtMhICQIiQIHsEhKI5IErwXjDQOEgN5HxT7Gshv QI6AvAryCsivQX4F8jLIS6DofSCX8x7nZbzf+T3qd17atCV0yc4toYubNoU279wUUm+auql1E6/e ZAdcuGnnpqObZBc1bQxduHNjSLIxZSOn2tC0PnTBzvUh9XqqOb9pONQ9fGz482E+Zbh7eMnwuuGb ho9AhPz+4T3Dh4b56PjBYNJwxdTGLcM3DHMpkM6RYapn0e5hta5xXdOa0Nqda0KSNSVruKmfr6Hv rqFcwRrasaZ/DQe5dq/JzG5kuUvXmG2NhjUFa4Jr+NVNK0Ordq4Mta9cufLilTtWPrVSevHK61dy u+CKC65UahvPazo39LtzKTnAjRMDyEFuPMKrVu7nYnDq8TEXC47Tc0ABZ4MilvvPCg3tPCu0zL8k tHTnktCgf3FowN8fWuTvCy3c2Rda4J8Xmr9zXqjX3xOaC/nn+LtDoZ3doS5/Z2j2zs5Qu39WaBbE t/lbQzN3toZa/E2h5p1NoY4mOsPfGGrgy5wwgxAH/K1ybHGccEjU/emr0rlV6e+mn0jnV6WdSOMu tlO97WLb9TZeDx8cfqQ6U69P3ZG6K1WqFy94zaqkLUncKuMWI1dgDBp/ZXzXKCHGe4yc/nr9Dv0u Pd+uX6T/WD+ul+zS0126p3Qv6/h23SLdSh2v17Ewbwjq/IWNeq1TG5wR0PJVAW2Ntl3LX6+lQa2/ qDGozcxqrNG0axZp+B0aGtR4cxo/Vo2ruKAKEj5Wjiu5cSUlPHVROIcyAHgFsxE1ORujlOw2UymN 0htGurt8vtaofHx2a1jRMT9Mrwp7uthnsHNeWHZVmITmze8ZofS63hHK1XWHU1o752H48m3bSG16 azi9qyd8T3pva3gLXATZxThckPQRM6nt9S1cO7x27TrfWh98gCxcCzHrhuFPBIVPuB6GD3ZFIIvv H/ywHJAIucVMa4cXDUMZkBmiWenDcMECLMs/KOJ/N5rV7f/sh/6fPfn/+wdbFy1kp7eExLZPOrC9 hFxC7iQ7yePkJ+Rn5JfkVfIZVcFZ8eXkKfIH8gH5lJyCYSqnJppGcybd9x9exr4nPZdo+YNERiyE jJ8cPx57ePw4HErrJsVsh5BF4j0dM540PvrNuNj2WDT2kkxNDOK9Bu4FKO0EHR0/ydXAnYbxMhbm rmTX4pNOyO+O7YrtOKMBq8gaMkwuIBvIRnIh2UQ2k4vJ98gV5EpyFbkadHExXF9DriXbyHXkenID +T65kWwnN5GbyS3kVvIDchu5ndwBeryL3E12xNNY+G74vUVMZSn3kh+Rh8kjwPvI/eQB8iB5CMI/ Bu0/Qh6DOIzB8KMQcw/5IcT+CPKxXI+QR8ku+A2TERIhu8kesBmGE6EoOUj2kidIlOwDa+4nB+D0 /0mw40Gw7NNiHItJhP9xTsz/DDlEfk6eJc+RX5DnoWe8QF4kh8lL5GXyXVJ+PlEKK+FX5NfkFehr R8hvyGvkdfImOUp+S35H3iW/h1730bfS34Acb0Ged+K53oNcfyTHIecolITlYJ63oYz3yPtiCUeg 7HfJMaogX1COnCLjcMWsd4toodtEOzLr3Q52u1/UM7PHLggzC6HWmW0eBZ0/CvZllmHXt8et8Rjk HQG9JjTNtPxt3bwUtxXq+wDkYbpg+kRt/go0jDZj5Tw5ofEXRD1FRIs+PWGL01ZgOmT6e50ktPP2 JB3+kfxJ1AzT7hui7t6epD2m5WOgQWYFVsaZuv093IvWYfcynTOdJu5haW9B+Dh4h49A04wfipb4 kPx54vrP8fRR8hfyMflC/DxBPgF/8hn5HMJ/hZgTEPoYPs+M/WbMl+RL8jfyFTkJFvyajE0KTb5m KWMkBjYmlFKO8iR2+up0LEuhElhiyMCnKaiSqqiGaqmO6mEpIv9GinoixfitlNN3nU5TiuUk0WSa Av7SQq3URu3gN9Opgzqpm2bQ02mpEykuSBFoJvXE7zOLd6ZO3OuEJZIlXgrLm0ML6Hr49FE/DcB1 IS2hpbScVkJMPoSLIDwF0gpE1pIOspisICel73MvQr1SwKuMBBsXLexbMH9eb0+ou2t2Z0f7rLaZ rS3NTTMaG+rraqcHa6qnVU2dUllRXlYa8OfnZXs9mUKG05piNOi1apVSIZdJJTxHSV6D0NjvCnv7 wxKv0NSUz8LCAEQMTIroD7sgqvHMPGEXu28Aks7IGYScy76RM4g5gxM5qcFVRary81wNgit8uF5w Rem8zh643lYv9LrCo+J1m3gt8YoBLQTcbrjD1WAdqneFab+rIdx4/tDWhv76/Dw6olbVCXVLVfl5 ZESlhks1XIWzhVUjNLuaihdcdsOUEY4otOyxYd7TMLAk3NHZ01Bvd7t7xThSJ5YVltWF5WJZruVh qDO5xjWSd3DrtVEDWdzv0ywRlgws6AnzA3DTVr5h69Yrw0ZfOEeoD+dsPGYFBS4N5wn1DWGfABVr nT3xABqWegyCa+sXBCovjH4EtZ4UMxCPkXkMXxCWyJo4oaYwHUhcE6gb1BDa53azulwTDZLFEAhv 6ezBsIsstkdIMODrDXP9LOVgIsUUYilbEikTt/cLoNkGoaE//nf+kDW8ZbErPw8sK/55whIPpLvC vLd/8eAQ48DSrUI9tBB0SbphdV4PF8GBuDIbRgoCkH+gHxqxnKmhsyccEFaFU4Ra1DZEQCGehuVd PeItGNsQTqkLk/7B+F3hQAPcC12kYSszDKsgK0vo7NlHisffHSlx2XcXkxLSy+oRNteBUbwNW3uW LAs7++1LoH8uc/XY3eFgL6ivV+hZ2susJBjCOe/C4+AHDCjeBW37Ru5EZmh2WO5RuHo4O9/LrAUR rkb4EGqrIMEQlmGQWbS2ytVD7SSRDZ4Sz8GuzigHArynrgluBsKtdU12N3Ru8eefVMmODYBqhBUT dZJAJaSn64TP+YdVw9ysQjmuhqX1kyp4RqEQECsYL+3v15NjuogrA6qgYOZsYm3Iz+Pg2gXJijAH 7RSjmBWtrjDpcPUIS4VeAfpQsKOHGYfpWrRva5fAdoCiteO9pPuMEKZXYFqYuFu7exIB2D/2hBt9 ol2ZWcXwDDE8EWz6RnJzItm1VSG0dm1lDxfiBRIXjCAwjszbPHBNRVIJDNZGcJRC44DgMrgatw5E x7cs3joSDG5d1dA/NAWGwVaheclWoaunCmwpjvtN9o3s0UmklbZ21+bnge+pHRHoVZ0jQXpV17ye fbCWdV3V3RPhYPfbX9s7kglpPftchATFWI7FskiWxcUCrKTZEFCI+e37goRsEVMlYoQYHoQNuBiH mSCOksEoh3GGRD4O4iQYFxTjeuEHRph1CEwAfrjBtYSZ56Leoa39vWxwETOYEv5omArVJMwJ1bBn l2nCKmFpbVgt1LL4GhZfg/EyFi8XasPUTEE5UfBJW/sF8FPQ5XqInfZC7zCw3s95XNHx8e4e92H7 aK8bhsQCkHk9YaUP5gGppwXyzWDSD9EzwlsGB1g9SAiGOhuZzYO9MBYSBUKW5rASSlDGS4AcjeI9 rDvCTYNgGzCgeP8WCIS39IZ7feyhPctZjVwuQ5g0CVPA7Fim1MseFOjdmiQUsY4NWcMqz5UMSqgb gdMIMcYOQXgYOFzWIrkGaj4oQNJgvwssICGDXdDV0ZeqmN0gZim4RIl3qSgqezyRsGbxHrVWFVb6 oUD4Y9dqPxQIf/JeUAprvBi6Mp4Bnm0Iq6FG3kmqjN8A2oGkZlYX+LsSKs+y/owV0xkls4ULwDWy SouPkkNyWOtpHgDnj/erIUaoSNwMZSk8LIqVcQhj5azlGtA77+mOjj8obGAeIPGTnyewyYF1TGLf Bx2b9G79ZkR4vi8/T/HNWK0YvXWrQvv3b0B9KbQThFKIREcIfZkQyZuw57yIbJNUkXapmmyTasg2 WQy4nHRILiHb+F+QGv6vRMN/RmZIWslmvpc0AVslctLCvwC980tyDqceP8q/TjbD9WbZpWQzyydp E/Nt5t6AewpJM/csPKeVbOCfJ2b+l8TMbYb7NpMBaC0sXOETXteCPetMoBt+5fCuGg/xEmKFHXMa pCXBftZGXEQB72dpSTLRQS47MRI9kRIHSScmwhEnSSEqKCWVmMUSCduR0jb6MXcp9xF/q2S+5CXp xbKpstvlVyiyFU8q56m86jz1JeovNMOaJ7QbdES3Vm/S32Q4yxAzbjR+kDQv6d6kD6AkKZwirOWP wo6bh5pVkjYyi3QfIFp6F1RuCn1hT329Il/+JAQ54qIvQB0pvSuYLOG0dnuNUCq7lu80NtfIr+W6 Sc3Yb995Fj4OJ1UGDtPAO6OvjRrGnjVWBkaPjBYWUKPbKEqKjpPLZTIhw8+VZnnLiouLqrnSEq+Q oePEuJKy8mq+uMjB8ZATY6o5Fqb80a/b+YaxTG6De2pXoZT6PBZnskLBOx1aT7FL39omlGXbpBKF jJcq5FlltUJofUvGSyprVlp6llUFTE8Djj0t1Z38VKo7NVdSf+oA935lT3WmbINWzUmViruyHabM wrRprVq9VqqzW2xpcoVRp8ptGhi7zeaxqFQWjy3Nw8ryjE0FjVjGT0qekaaQDOIl77HjyxCsSTLH 39+j1tOZQnT8/aCDXXk0WsGqJWaqM3vVKiFDRVwSgRoFrydKc4OOoJpoaBKv0WSlZwqCQ6U1EyHD Kk9Kn50UkoaItaamJslSWWEsNoJmYb1fbGsbLaKpgYV9NuvhouJNVx46RK2HFvbhZWEBHHLCMJtc jcdZLf6TpxUW+Hy9HrMZ7ZbFu+U6XsjwesvKKRrLIhd4t2REIzNXFBZXOjSSuTHbbIk2vdTnL0mR aej1MoNQXTy1Mcsoe5o+QVcuzsw1SXmlQUslY7pktURmyRUkFxlNap5Xm5OfhTcTeTijIZIy6JkO 4oP3JHck9Ovktj9uU5tMahLl7ozkeYuj3IaI2pYVpfzuwkJ5Jqhd1H9mlHqCSkNniZW1viRKcyJB eTeoE9Tnqxn1gTJHK2lgtCgwCp00qRI6qX3kOxZTWNBLU3QSwZ3hLTWWlBW7ob+aWE938LTEzwmC kXXz5NOXkjJvXd+qi2fFHnLn57tpw/oHVldZ/XW+8r6G7Ngj1oLmaZdvr6zPN9c5psxruvPJ8tZy J72sYdWc6uzkrDzJUF5WdudF3YGu+hKDqqj9bPq7rOoccyxsD9SMfZU/o8AWu8GSX8f8T/v4hxKN VICRfQ3qL5JGfE9yz4GTsdIBcDTeuLa8UdofSe6SwBbsidICUWUFUbo4ElTOEVU25jsyWsM+QGNH DoGqDnzXAkBXnhQdOoCSpLIyGNsypis21pkXMKU4YLzjmJdoeJnKXDN/uP7y127p6Ln7ncvLloTq 7SoZL1HplHp/89LGtg2hvMDcC9salzUHtCqNQnIoVUhNsmS6zbPv+/zeByh5bF5SuteelOZNc+Ta NIJPqBn+0dCaB1eUurNdCquPwDhmPe0g9LQk8LOrUU9PkWTuDnCQNu5GcMvWuJasUeoPKnWddlFB 9ijtjgSlk/oUUw7rR/v+7Tuw53Bn9BzppH5ysO+xrx6JvSD2kpmPfvLAnNgJ36KbN1x+9YqbBgu5 2yNj97Rih+jc8cF9C+5eN/3rGypWPwSW3wa+6WLwTQHycmLkBMbf3a2nbZ4oEkaKGFbHqYqTAPdA PkET5bZHLJlqAPgoS+7sTLHZmfvpIEziGnBvKWxo6TVODacB/3WGxxJdlU8cazRwZLTIMFrEvAj7 sQeV37ks7D04McCUkpgjjCXYYUwQl7iUXKx1FHmzitO1sTSNoyjLW+zQah3F3qwih4Ye06YXZ3mL HNpMlUElk8EHpx77InEteTZxFfPQo4lr1KpsNfSUKvImajWo1hYUWAIBld9qtUW5JXsyCzUaFVw8 QTLLOlM1aut+mg/a8o+f2GMQuJmF0fETQRe7shjYpxY/LYGCQr/Mmd3pDE04feb1mbqYuy8qqhG1 aCwGPcJMUDktUFxsLIau9vj/7FPO0K9AmZv3c1lUmKRpNmc7OAstZr6fXZpkq9XpBZ7MgjQNF7ta kuQsyMgocCbxsVs4tSMA8enqsvxH/LUFLg21SmiG1plT4RmxZ6WeVr4k/dQxrVHFS9UGtSTt1B8S KpdcUlymFypzvx7jae6UTL0O7mIjtmP8uDRV6oHVUtbpEZvCPQ0j1gGfKpIaH7GpUbogqNR3CWLX FaK0D0YsujRxFjg9Yv/dOxIjli1g4l1NHLCTXJc0tePu47fd+t4trcDbt793a1vsI1fblv6BSzvc rplbBhi5W34YG+lrv/fkzrtOhRfOuvfLvcseXD+9eeN9889++IKaposeYH4JxnAb9LYyUk/uwv62 x+A35qj2w6KTkHLujkhOjZGN0jS/ITHvGWDe2x0MWqYlIqbB1Lc36O60JFYTbFCy2c8nTn9HwGXB yqKSTX/frZRJfSaL9/Mw250elmwuNFscfHw2tFjMZlrizfJ643OipE3hmFKUW5SukawzZRcGc2fD oGVDVQPTYntxrX3Wprl+d3BhVXpxfnbyuXpV7NEptSnF+edfUdFdkZah1qskErVRQ92FM4ttseSJ fnNrXpaEV5fNXd82/Zzu6mRddmWzf9wr8EuCPUlSWez79sJ6Nj/WjB/nr4V+1Ez2J7zkdO7WxzOL Mos0dra+IBo/G8DlREXz9xrL4ddclVBsVZTmBzXT7dKcLrPYvcxR2jO5e4FWR33GyspAwDBqgJnz yCjEBAJshjhA/P9DxZ7uj5JEf8Q1tV8WD39zepXx18689LHBurU9U21qiVKv0hV3rGwumFmaVtC2 eGhxW0HD8I5e/4KO6hS5lOPlWrW6oHFBuS/oMwXalwwtmVVAL1t2+1klZmeGrdDvzLWp3dluS261 N6+m0FcwLbSus29bn19ndaToLIItPdumSXPbTZ6SdB+mrwW9a8ZP8h9Az84gIdT7CJFFuZt2W42y pIR6k6J0/p5geqdGXAOzTltEA4fGDrOO+k9zJTQyaXpwJ0YrW5nBk1V6ZewAmwzYpBA7oNKppFL4 4G8AbUgl96bnpGpOjU50pmRNak66IzdVrU7NZd5nBvSa82FfWEyCNAfrH1FaSqLc/D0kK4tMiXIN QYORt9DPLNQS1ZTQr0toCXtvRanRwlK0xD89N0qtQfu7GZTflLEtgwtmdGT0Z/D6DGcGp5FkZEjS YQ4O6jQwu6ZbDbQt/aS/hY1nWM/StmnHgpo22D4GEitZNphhX9DXt6iPjeSAr2/1aN9q8GyHKqHj FbGRHdT/H9dG9BFs++D1lpbGt3/MexaXssXOxOavWiJOKHJcCJqLi8rK+fNTfLn5OcbybXNmrJ9b MG3DnvVzjVnTC2oGZxYb1Ea1TJXWuHDl1OU39+d92T9tTlnqjJrSXr9TZ5DLDboZU2s9zSuaZq1t zSzLrclNSctI09m8FmdmuuBIzgldseCtpMxid0WwDP55F0c2jx+XEOkqkgv/GuuWuF1V7rL9XD9s wn3cZUElManKSt0SaUGik8IiuTWo9bbYGw0zK0UnUBmlLeAE2hI7jRq217CAqz0CPkA0xt7vWkai Y7MpObFkhv1GYumDW7HEZCQ3mkF/1ZyElCy+fn7+rBkNmdB9Hc6cVJUGZmtPQbomo76+KXtw69zs 2Cljbl1xakFxmaN0oLSwPj+FfrT+ySuajN4pOQOij1Xp1VJBZVDLZGqDKpYM87uu/Yrdw5Vnzy7U ZZRlx96on1HUsQxGdtP4B7ybf42UJmYs2HFkPcmtE3cc8PLTxMYU9mfOSHKL5Ce0iRTC2FCraVth nqjCvChthJ0HqhA2Hb6JrcchWESKW4//rCSxNyb2IKL6wEeKWxIhA64cExsQaIpUbp3SMtd/1o4V 5XUX3L84u62u1KyU8ikGo7ekqWjxkK24rbiktcKrVWrkkrBNsOotbpshuGnPuiue2VINbtCstwqp UwLQ9W69sem8Fo/T61TZRT/SCn7kRXh/wgv7s5vj/U1tr9zPwQseJMCtCaqS3Y3qyiy7RJeb6HDg OZqDSmvLxLa2eU9Q1yadyc4JxNW22NtgtQjTOg595XctA7WEa+3JYxYm9IlOx8NMPmnlU86/qLLm OFzZqeqGWxcs29abXbz4xkWtG6vYAtEDC8STZYNlhTN8pqSc+hJbYXGZC6dw6F6DLbOhRw2ybjdt KoUVIPa1sZL6psLZS0srzu4q0meUZ7Nx2gJ62wv+10dKqBT1tjs52Z0X5eoivhJJlGnOzecl53H2 vGckzPFatLSNSAwSbmaHpF/C3SMJSziJJC0AWmVbIsagC/IEjnlbrH8lOoOOM/I6pVVD25RWyKD8 KpiW6I6+I+BsR2FUM7/bt3phn290YR/ou+gdmN4DzNkq/3efLboFmeCe1G/BO8R32HHnkFUm2knO 783JHHvPPrVveu2S5gK9UqPgOYlCO2Xeutr1uy+YWn3+w2ev2rGs4HN+/qKCGYFUjp7051X2Tc9I tiTLk9ypZqdZr7NajFUbf7Jp/VOXN9YO37PQdfaGzGldATixsce28/fyr8K/ZJ1FFlEOLRNs1xfI +QqhpbjlmRbe2UJb3nse9gEaqnm+izq6qLWLdn1yGL5mN1FiMpg4vcnUX8F/VdWU68qrPVAL35fQ 2sMVLfr51MDPfzHoakfHCjaoGe3rS6qsEec8Nv1BsO81EeBvmR1Ck5+sbqH/+uGnn11V+2ItJ6ml +n/6fHhsogZnVKBPrAEcCskEwWxGX+3NkoFvMVviq+HE2WY5zIhw6Mk+ma3MFlgwwxJ5YgZk50be rCwdLKFFf87fazYsNyeXDFzd7Ztl0iQX+9+cub7TN2XdruE1PzwrYHQXOH2BMp+QW774qtm5bW5q N5piP+1o9lR4kjpmeCs8yVObanbbnMmypQsqZxWk8P0Ffus096wNXT6TTptpTvdwCvjeb2FV7fCc osxgb6m7qrzIYmkPTB3IEhY3z7owlK9S5sW+aupI9VU669utueVjc/ILOGmy4HIYikos3gAbo+eM n6TbpLNg4nSTBuwJT8Hh+FNw5G2C+VQFr8Fe+Hgw1dCMrus18F2n92LfTpvsiyacTzLz2Ux7oDa6 MTGrJZhc3R2aOi3UXZWhgkUdLPlU/EbwMzCD6VW0YOaUiuaZUysJN340tp3eAzXNJAVkEdZ0H/Fw T0V8GjhiXLQnNZUU+aP0wt3ZzuaUKK2HyT3eB2teGzUWF7OFlnjqs/tfZDzdhvhKXbTn6Qn8jOZs y2w+ryVnik0l4XiFSiF1Jtm8Vo0mDWfuZNYu1j7J8kt789WaJEu6Jc1jVkkNQnkVv/3bzYSZeTOs uffD6qaELE7YoxAskUE08Alnztze3fn5Zji7eCKoCxJzhlqa3ZzWaJyJBoJD6Eq2iAE7gZeDo/2i Y2yIqf9ettMNhaODSZvBuC8yxg+NYcqVU2o28/vV6UXZOcXuJHns9YT1EqQKRYq70Ospdmr0+tgp 6teo3bB6l0rY4fFrseyEbU+vTr7+hA5qkkSLq/UZybE3Yvkp6dh+uhHabyLs60k4qw/qtSYKyw61 imoJVUvA2v2PB1WGRmwxDUBbCwvElXWffXcielLjTpvu271votOdrhjWQaaEmauD7MQ6jDQmQx/b 7XAUgeIXRTqqs9hqswhed8RTbNjNt0VaWyafareBeaa3VDfmVzTnz0ydbJ7EAgB6ZCVs6tkBN9ho 339W2JntZYt1mXySTb8VETeySTzZ5Sy4KDXJlKzreuEoyCiUevIXlIF9M9ka1JhRlulfUJowt8qW 43TlWlQt2zvKexqKjNltra1ZvRtbXRP65Iz5LaXpjXVjuxKm/3YMf1Ei7ayODouvyuOrzkquOmtr G9vzs3HwCtigiFwSt0FuMlO6g6jBAsQBJykndsNiVDxRYVswZoOgOpjfkpua2TyhcPD7bL3lw4V9 QtH/nTv/hWbPVKSJf0WTVpjpKUzTJGdWegsWf1tlt3XN39SWMaEoOjb9G4o6Qy2gjgHw002w55GA Nr5xkjYsnqQNn3mSZoOTtJaJk7S0ybucUdBD4ux70knaP70D2g/fmuD68h+cpEkkVRujF64Pr6uY tvGJCy8Ir62IjZmKumoqusvs5sLu6sruMhs9vubAVS21m6Pnr/nplS3TN0cvqV0525/TvnIGMD9n 1kq2s4vdLCHQysk7O3cZnKPhzu7yf7azaza0/8c7u39VxiRVZE0aXIku8I92drC4Xpg1fVqVa2L4 pOY4HbDDy2qd1RVYzHZ2J405dUWpsNJ2lPaXFDbkmejo+qeuaNI7/c7YgsQiW/LbxHhZnj0tJ6Xt isj6yuWzC/VsZ/dWXXNRJ9vZwbjh9oMOiwm8T8f854hXDx4zqCE2vcqpCqh4LQ/fIbzPxo4qSruC qqCvxas3uZpN4u4E5g9xxIBDhXOcuGtS/ev8k3TDFkWTnc8Z+pFx+2Elq1KkpDqSTLn5MFDi29yE TxGqKyrStA6XVS2FSbU1029TyRVyY2ZV3tiRRPtPD5GVRdO9el6uVGlMudD65vHj3KfQ+mZyHFu/ j0zn/BMnhfVBmEclfuo/Vg7TierPxvIgcyHlrnKOF08N9VUUDg5PBO3sK5OqY+zUsMVsYOdB8MWw QWL+dOLIAPTjY5PtqK9PPDtc1OczjPbB3xkHiEHX/+OnnVb7v32uyH1aOXRdV9H8pgKzRqLQKNW+ YKgsozQrxTOtrbNtmqdo4ZXdue3BvGSFhOflGoXSW9lakFHkMnir2zvbq73UMXPdrCy9xWrKz0sX TPJUh01ny7Y5fK60jLzgvJrgOTNzNUkmvd7ktNgzUuQmq0lnE1Kcua40d16wF6xkGf+Iu04yAv+n zna00hNGo3ZqDhHy2exq0eYnttH5cPqwW2hK1yYitOw4wtJUGKUz4Hvi+OkNbPIOg9BA8VjRoSJ2 tibOp/nxyfm/VQjoE773lIjLfqO4bIXeC8dfiT4sHnyx/YIR1/kszF2nThIC5Wmt5zVlnJOcwtaw Z6vTcRZ4mnXZlORn/FNTXKlGuUwtk27MCyTDAtfbfsFs+nygPD3bonoOhrgUvlWBC0t2enkg1tfc LFfK5aZM0NYGdv7APwsz4TnxEa2G5Qc7fHByi4L65PzmLLU0tTn+tR/Mgt84amAjWnT74m5L9+9k Ry2ceaYwsZ43ijvYsvKJCDhNAIfmzrGqWm6bvWBTm1tsPKwakjwwBQ6UJ04VJuY8mO6rhq5exk1E xBSN4iTIdSZGOLTbDCuA3dDuvMTpc8Tghn9wetneoMntkrmFKNcX1ASJy53d7FbbmtVx91UDL13Y rO+IK2Cb4R0bLIShOzzxjUzxcSOf+O7s9PdElmRLeTL6cn435aWS2OdSY1ZdWWmd1yiNfQ6rYXVa oSeHfRnygkz2C16bFvB6AjYVv0OqM5p1X79pNGkkUo3JwGeluHQyaJFEqjRqxlanpnLXa4ywKFbp 2QrHHLuZ3wPtyyRDaNe9VKnUERt8o1G7N5hpc6ls1ii3NqgP6mzO5lRVcrOqVdJOWtkZElvns4Za caUfbyf0fHbuHtT83ezQZDePh7rlyV5vFvWWxFd/ycXJrH+bzSly7nsrlB1t2QVWTr5ea5LGDmut cFRdlKaTv8IflCXnlfsq7YrYoVSz3GA1Up8sVceXCB6TgtekWsZ2cgM2o0Jh9sC3f5ScE9vBpUlv IALJeIrY6EnosAb6FbwexXPrdpuc6stJTYAGxl6DV5DgzSMZvFKQZDGnxF9e8fNszMVfMuIs3XPm zpaZ87PTsu16vqyj1GYvay/lNNYcV6bfykt7nokNvHU0NviswWJQSORq+dCrrx9dvero60eWw1tG vFxnhvoMQH2SoD5ukgnvt3FrI0km6X6olh42uad2m2wqrBB7I0qsESx64i/QlJSXJZWWcFle9AIW cxKXZCttL+P19uy0nHyzrGvunJCUT833OLNtan5oBWdbffT1V4egIhIFVOkQ3XH0LbrjGa1ZB5VR SF+JdYEyKLzJQIHwX57Buo50tszt7pnpqxtYsXzxmuX5tStXsP/k7L8A/uc7ZgplbmRzdHJlYW0K ZW5kb2JqCjIwOSAwIG9iagoxMDkwMAplbmRvYmoKMTEgMCBvYmoKPDwgL1R5cGUgL0ZvbnQgL1N1 YnR5cGUgL1RydWVUeXBlIC9CYXNlRm9udCAvSkNFWUNaK0NhbGlicmktQm9sZCAvRm9udERlc2Ny aXB0b3IKMjEwIDAgUiAvVG9Vbmljb2RlIDIxMSAwIFIgL0ZpcnN0Q2hhciAzMyAvTGFzdENoYXIg NzQgL1dpZHRocyBbIDg3NCA1MzggNTM3CjI0NiAyNDYgNTAzIDIyNiA0OTUgNDE4IDQ4MCAzNDcg NDczIDUzNyAzMTYgNDk0IDUzNyA0ODggNTYzIDI2NyA2NTkgNjc2IDQyMwo2MzcgNTIwIDI2NyA1 MDcgNTYxIDUyOSA1NDcgNDU5IDYwNiA1MDcgNTMyIDYzMCA1MDcgNTA3IDY1MyA1MDcgNTA3IDU1 MSA1MDcKNTA3IF0gPj4KZW5kb2JqCjIxMSAwIG9iago8PCAvTGVuZ3RoIDIxMiAwIFIgL0ZpbHRl ciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBXZPNitswFIX3fgotp4shiqUkEzCGMmUgi/7QtA9g S3JqaGzjOIu8fb+jpFPo4hh/uj+6x1yvXg+fDkO/mNW3eQzHtJiuH+KcLuN1Dsm06dQPxbo0sQ/L g/JZODdTsaL4eLss6XwYutFUVWHM6jsll2W+maePcWzTB519nWOa++Fknn6+HvPJ8TpNv9M5DYux RV2bmDrafW6mL805mVUufT5E4v1ye6bqX8aP25QME1Gxvo8UxpguUxPS3AynVFTW1tXbW12kIf4X ehS0XfjVzEVV7mqS7d7wiDxKy6OxufKR47b3O9ru0bxc15VkrY81LUoQWbvthA5EYCn0IAL3wg2I wCDcggjcCF9AZO3GC/cgIuqEDYjAVtiCyNpdTg4gojYnRxARxU1VJhBRuxV2IALXoONzSWASYk7C oKZymJPoLEcOcxJROXKYc9mRz7W4cdmRl0HH95VI3gkxJ9Eq12LOZYPMRhRzkrU0BTHnsiOf78WN y4687DvcSHSWI4cbCZQjjxuJVrLAWRb36mvQL4tkXeRxw4uScy1uMA5uci1uGF5RXeQZXyL6ImR8 f58ZZN/+rolWT7/I+0qH6zyzzfk/youuBe6H9P6rTeOkBll/AJpu7wgKZW5kc3RyZWFtCmVuZG9i agoyMTIgMCBvYmoKNDcyCmVuZG9iagoyMTAgMCBvYmoKPDwgL1R5cGUgL0ZvbnREZXNjcmlwdG9y IC9Gb250TmFtZSAvSkNFWUNaK0NhbGlicmktQm9sZCAvRmxhZ3MgNCAvRm9udEJCb3gKWy01MTkg LTMwNiAxMjQwIDk3MV0gL0l0YWxpY0FuZ2xlIDAgL0FzY2VudCA5NTIgL0Rlc2NlbnQgLTI2OSAv Q2FwSGVpZ2h0IDYzMgovU3RlbVYgMCAvWEhlaWdodCA0NjkgL0F2Z1dpZHRoIDUzNiAvTWF4V2lk dGggMTMyOCAvRm9udEZpbGUyIDIxMyAwIFIgPj4KZW5kb2JqCjIxMyAwIG9iago8PCAvTGVuZ3Ro IDIxNCAwIFIgL0xlbmd0aDEgMjI3MDQgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngB 5Xx5YFTV9f+9782S2Wcye5LZMpmZJJPMTLYJCSF5ZCMhBMgGCRBIwq4oCEQERdHWpShq3Xesu0Vl MkEYhKpVqm0t1lprrVaLrW3dUqlLrWAmv3PfmQnB2n67/X7fP35Jznzu/u49595zzz3vTjZvHF5J VGQH4Ulk+VmDG4j44z8CsG75uZvdGLd8SogsY9WG1WdhPOdLQhTG1eu2rsJ44CpCIl+uWTm4AuME 8kl0DSRgnJYD5q05a/N5GPfrAfetW788lR+IQHzJWYPnpZ5Pfg1x99mDZ63E8r1XAOZv2LgylU97 CTHfQaaRKlJNppMaMoPUkjoiQKmZWEP8pPBZTN1ET75H5IQDDJMBQtTL6UwiIRR+CZHelSj99Ezl Ml3NZ8SeAQmEHPrggp8wfP7yh648+fr4LsWH8h9AWQW0gD9QT37X+OuEKO8++fqJyxQfii2lMkUo HlHwCe6LuNPhSnB/jTuDAJ/HnUUAf0H4DOFTzPsEYx8j/BnhOMJHCH/CkmMIH2LiBwjvI7yH8C7C HxH+gPB7hHfiTgV04ncY+y3C23FHJiQeizvsAL+JO8IAbyG8ifBrhDewyOsY+xXCawi/RHgV4RcI ryD8HOFlhJ8hvITwU4QXsRNHEX6C8ALCj/GxP8KSP0R4HuE5hB8gHEF4FuEZhO8jPI3wFLb5JML3 MPEwwiGEJxAOIiQQDiDsR3gcYR/CKEIcYSSeUwocjCHsjeeUQewxhEcRHkHYg/DdeE4JFHkY4SGs 9yDCAwj3I9yHcC/CPVj9Owh3I+xGuAvhToQ7sOnbEW7D6rci3IJwM8JNCDdivRsQrke4DuHbCNci XINwNTa9C6tfhXAlwk6EbyFcgRUuR7gM4VKEbyJ8A+GSeHY58OVihB0IFyFciLAd4QKE8xG2IWxF OA9hC8K5CMMImxE2IWxEOAdhA8L6eFYFdOJshLMQ1iGciXAGwlqENQirEVYhrERYgbAcYQhhEGEA YRnCUoR+hCUIixEWIfTF7ZXQs16EhQgLEHoQuhG6EDoROhDmI8xDmIvQjjAHoQ1hNkIrQgvCLIRm hCaERoQGhHqEmQgCQh1CLcIMhBqE6QjVCFVxWxWMbxpCJUIUoQKhHKEMoRShBCEiAk/jthC0EsbE EEIxQhFCEKEQoQAhHyGA4Efwxa3TobE8BG/cyhZ6btxaDeDBRDeCC8GJ4EDIQchGyEKwI9gQrAgW BDM+wYRPMGJiJoIBQY+gQ9AiaBDUCCoEJYIC28xAkGOiDEGKIEHgETgEikBEoBMISYRxhC8RTiKc QPgC4a8In4uPpX8RR0Q/w8RPET5B+BjhzwjHET5C+BPCGMKHCB8gvI/wHsK7CH/E5/0hbvG6EvT3 CO/ELbBy6O8Qfhu3TIPY2wjH4pYGiP0mbmkEeAvhTYRfxy1NkPhG3NIM8DrCrxBew6Z/ifAqNvYL bOwVhJ8jvIyN/QzrvYTwU4QXEY4i/AThBaz3Y2z6Rwg/xM4/j/AcPu8HcUs99OwIVngWH/QM9vr7 2NjTCE8hPInwPYTDCIcQnsCmD2LTCWz6ADa9H+FxhH34oFGEOMIIPjaGsBfhMWz6UYRHEPYgfBfh 4bgZtD59KG6eCfAgwgNxczvE7o+b5wLcFzfPA7g3bu4EuCduFgC+g0XuxiK7schdWOROzLsDS96O sduw5K0It2CFmxFuipvnQ5s3YvUbEK5HuA679G0seS2WvAbh6ri5A+rtwpJXIVyJsDNu6oW8b8VN fQBXxE1LAC6Pm/oBLoubZgNcGjctBvgm5n0DS16CRS4W9kLR47om10faFtcx9VzXM0DfB3oa6CnV AlccaAQoBrQX6DGgR4EeAdoD9F2gh4EeAnoQ6AGg+4HuA7oX6B6g7wDdDbQb6C7lGtdtQLcC3QJ0 M9BNQDcC3QB0PdB1QN8GulaxxnUN0NVAu4CuApqp4L7kTpAFxMWdBFxDXPSiuBFUJr0wnskW4GaE TXEDm7UbEc5B2ICwHuFshLMQ1iGciXAGQg3C9LieNVaNUIUwDaESIYpQgVCOUIZQGgcGJ2gJQgQh E8GAoEfQIWgRNHEQSoKqEVQISgQFQgaCPK5hopYJiwH/BDQG9CHQB0DvA70H4vwN0FtAbwL9GugN oNeBfgVieQ3ol0BPAn0P6DDQIaAngO4EUdwBlKA7kNPb4ga2OLYic85D2IJwLsIwQgNCPfJhJoKA UIdQizADh2xGMCEYGRzkeZ6LC677nuQ5sg/oCBDPE+zL+QhdKPVO7FkHwnyEeQhzEdoR5iC0IcxG aEVoQZiF0IzQhNCIkIvgwc67EVwITgQHQg5CNkIWgh3BhsO0IliE22G440BfAp0EOgH0BcyBvwJ9 DvQXoM+APgX6BKT6MdCfgf4I9Aeg3wO9A/Q7oN8CvQ3SPQr0E6AXgH4M9COgHwI9D/Qc0A+AjgA9 C5QAOgAS3w/0ONA+oFGg25n0uXHk8XaECxDWxg1gCtE1CKuRLasQViKsQFiOMIQwiDCAsAxhKUI/ whKExQiLEPoQehEWIixA6EHoRggjhJDVxQhFCEGEQoQChHyEAIIfwYeyyUPwIkgRJAg8AodAcUUS 4R4Q0gRQEuhdYOyrQL8AegXo50AvA/0M6CWgnwK9CIw+CHQp73N9kw+5vkFDrktadvRcvGdHz0Ut 23su3LO9R7V9+va27bxqezbA+dv3bH9ju+yClm095+/Z1iPZZtrGKbe2bOk5b8+WHtUWqj63Zbin e/id4U+HedNw9/CK4c3DNwy/Agny+4b3DR8Z5hMTTwuZw9OmN+8YvnaYM0E+R4apjiV7hlXa5s0t G3s27dnYI9lYvpGb/ulGemwj5SIb6fyNAxs5KDW6MS+/mZWu2GjJatZvjGwUNvLntKzv2bBnfc+8 9evXX7R+9/qn1ksvWn/Nem4vhDhhvULTfHbLWT2/OYuSw9wE0QM9zU3EeeX6Q1wSvB4fcUlhgp4J DDgDGLE2tLpnzZ7VPatCK3pW7lnRszw01DMYGuhZFurvWbqnv2dJaFHP4j2LevpCvT0LofyCUHdP z57unq5QR0/nno6eeaG5PXMhvT3U1jNnT1vP7FBLT+uelp75LXRWqLmniY+6YAchTvjb4NzhPO6U qAYcGxzcBscxx3EHvyHneA53UTbVZV2UdU0Wr4MPDj/sLvs19t32vXapTgzw6g2ZOzK5DYYdBi5i EAwvGY4ZJMRwt4HTXaPbrdur4+fpluk+0k3oJHt1dK/2Ke1Ptfw87TLtei2v07I4rxe0oZJmncal EWaFNXxNWFOnmafhr9FQQRMqbRY0eYHmOvU89TI1v1tNBbW/oPkj5YSSE5SQ8ZFiQsFNKCjhqZuC H0oPwGcwGVGzqzlByaiFSmmCXjvS3RUMtiXkE51tsYz5i2P0ipivi30KHYtisitipGfR4t4RSq/u G6FcQ3fM1NaxCOOX7tpF6h1tMUdXb+xuR19bbAcEBBaYgABxjFhIfV9w6abhTZs2BzcF4QNo6SZI 2TwMfyJQ+ITwMHywEIEiwb/zw0pAJpQWC20aXjYMbUBhSGatD0OARViRv9PE/9tk1rf/tR/6v/bk /+8fbFu2lHlvCUleP8VhezG5mNxB9pDHyRPk++TH5OfkE6oEX/Gl5CnyO/I++ZichGUqp2aaQwum 1PsPg8lvSM8iGv5pIiNWQiZOTLyXfHjiPXBKa6ekXA8xq8R/KmUic2Lsq2nJ65OJ5IsyFdGLdfXc C9DacTo2cYKrg5r6iSiLc5ezsPik4/K7knuTu08bwAaykQyT88hWso2cT7aTC8lF5BvkMnI5uYJ8 C3hxEYSvJFeRXeRqcg25lnybXEeuJzeQG8lN5GZyC7mV3EZuBz7eSe4iu1N5LH4X/N4k5rKce8gD 5GHyCOC95D5yP3mQPATx7wL3HyGPQRqmYPxRSLmbfAdSH4ByrNQj5FGyF35jZITEySjZBzLDeDqW IE+T/eQASZCDIM1D5DB4/58EOT4Nkn1GTGMp6fjfL4nlnyVHyA/Ic+R58kPyI5gZL5CfkKPkRfJT 8u/k/GCyFdbCS+Rn5GWYa6+QX5BXyS/Jr8gb5C3yG3KM/BZm3Yd/k/8alHgdyryZKvU2lPo9eQ9K jkFL2A6W+TW08TZ5V2zhFWj7GHmHZpDPKEdOkgkIMendJEroVlGOTHq3gdzuE/nM5LEX4kxCyHUm m0eB54+CfJlkWPi2lDQeg7IjwNc0pxmX/5Y3L6Zkhfw+DGUYLxg/kZsvAYdRZqydJyc5/oLIp7go 0WcmZXFKCoyHjH+/JGnu/HoKD39P/iByhnH3NZF3v57CPcbld4CDTAqsjdN5+1uoi9JhdRnPGU/T dVje6xB/D7TDh8Bphh+IkviA/HEy/MdU/hj5E/mIfCZ+Hid/Bn3yCfkU4n+BlOMQ+wg+T0/9asrn 5HPyV/IFOQES/JKMT4lNDbOccZIEGRNKKUd5kjwVOpXKcqgETAwZ6LQMqqBKqqYaqqU6MEXkX8lR TeYY/ibnVK1TeQqxnUxqpCbQl1Zqo1k0G/Smgzqpi3poLj2VZ5/McUOOl+ZRX6qeRaxpn6zrAhPJ mmqFlS2gEboFPoM0RMMQLqHltIJW0ipIKYZ4KcSrIS8iYj2ZT4bIOnJC+i73E+iXCbTKiNC8bGn/ ksWL+np7urs6O+bPm9s+p212a8us5qbGhvqZQl3tjJrp1VXTKqMV4VBxUb7fl+fNddlMBr1Oo1Iq MuQyqYTnKClq8jYPuGP+gZjE721pKWZx7yAkDE5JGIi5Ian59DIxN6s3CFmnlRSg5KqvlBSwpDBZ kurdNaSmuMjd5HXHjjZ63Qm6qKMXwrsavX3u2JgYbhfDEr8Y0UDE44Ea7ibbmkZ3jA64m2LN567Z 2TTQWFxER1TKBm/DSmVxERlRqiCoglAs37thhObXUjHA5TdVj3AkQ8MeG+N9TYMrYvM7epsasz2e PjGNNIhtxWQNMbnYlnttDPpMrnSPFD2986qEngwNBNUrvCsGl/TG+EGotJNv2rnz8pghGCvwNsYK tr1jAwaujBV5G5tiQS90rK1z8gE0JvXpve6dnxHovHfsQ+j1lJTBVIrMp/+MsEw2xEk2xehgOkyg b9BDGJ/Hw/pyZUIgQxCJ7ejoxbibDGXHiRAO9sW4AZbzdDrH3MNydqRzJqsPeIGzTd6mgdTfuWts sR1D7uIikKz454tJfJDvjvH+gaHlaxgOrtzpbYQRAi9JN1jnjRAQBlPMbBqJhKH84AAMYi1jQ0dv LOzdEDN565HbkACN+JrWdvWKVTC1KWZqiJGB5alasXAT1IUp0rSTCYZ1kLXl7eg9SMomjo2Uu7NH y0g56WP9iFkaQCj+pp29K1bFXAPZK2B+rnL3ZntiQh+wr8/bu7KPScmrjxUcg8fBDwhQrAVj+0rp dGEYdkzuy3D3ctl8H5MWJLib4cNbXwMZ+pgMo0yi9TXuXppN0sXgKakSLHRaOxDhfQ0tUBkQqja0 ZHtgcos//6BL2TgA6EYsY7JPEuiE9FSf8Dl/t2tYmnWowN20snFKB09rFCJiB1OtfX0/OcaLFDOg CxlMnC1sDMVFHITdkJ0R42CcYhKTos0dI/Pdvd6V3j4vzCFhfi8TDuO1KN+2Li87AYrSTs2S7tNi mD8N82LE09bdm47A+bE31hwU5crEKsZnifHJaMtXslvT2e6dGd62rp3s4d5Ug8QNKwiEI/O3Dl45 LbMcFmszKEpv86DXrXc37xxMTOwY2jkiCDs3NA2sqYZlsNPbumKnt6u3BmQprvvt2dvYozNJG23r ri8uAt1TP+KlV3SMCPSKrkW9B8GWdV/R3Rvn4PQ7UN83kgd5vQfdhAhiKsdSWSIr4mYR1lInRDLE 8tkHBUJ2iLkSMUGML4cDuJiGhSCNkuUJDtP06XIcpEkwTRDT+uAHVphtDYgA9HCTewUTzwV9a3YO 9LHFRSwgSvijMeqtJTHOWwtndpk6pvSurI+pvPUsvY6l12G6jKXLvfUxaqHAnATopJ0DXtBTMOV6 STbtg9mhZ7Of87kTExPdvZ6j2WN9HlgSS4AW9cYUQdgHpL7ZUG4WowFInhXbsXyQ9YP0wFJnK7N1 eR+shXSDUKQ1poAWFKkWoESzWIdNR6i0HGQDAhTr74BIbEdfrC/IHtq7lvXI7dbHSIu3GsSObUr9 7EHhvp2Z3lI2saFoTOm7nIEC+kbAGyGmZEMUHgYKl41IroaeL/dC1vIBN0hAQpZ3wVRHXapkcoOU laASJf6VIimzU5mEDYv3qTTKmCIEDcIfC6tC0CD8yfuAKWzwYuzyVAF4tj6mgh75p7AyVQG4A1mt rC/wdzl0nhX9PmumI0E6veeBamSdFh8lh+yYxtc6CMof66sgxTstXRnayvCxJNbGEUyVs5Grge+8 rzsx8aB3K9MA6Z/iIi/bHNjEJNkHYWKTvp1fTYgtDhYXZXw1VSMm79yZofn6CsivDM0kQitEoiWE /pQQya/gzHkB2SWpIfOkKrKL/yPQI2SX1E5auVxIH4D4ENklS0JaE9BaMl9SD+kXQ/oPSR3/F6KW VpGrJGuIR5JP9PwnZJakjVzI95EWiZzM5q4gdvo5OZP/JbkQ8EKWJ2mHPEDuOWLlvGQ79KUbaAbQ DUC9QHlAA0AsvQOI5dUDZ8DIhU+42gXnWzjfEw8phLALTtXZxEHskJtJbCQH0g3ETbKIhTjFk7CC aIgW7r9lEDPJJQG4BSchSvGuWD7RESnxET8xkgJozUSCpEh8BpxmaTv9iLuE+5C/VJIj+Y3UKr1J +nvZw/LF8hcz2jK+VCSUVuXFKq3qPPUKjUxzh3aN9mPdLN3zeoX+WgNvuD+zJnOhMWhym54032FZ YvVZi617rQdsF8LzSHIT/wac4HnoQxVpJ3NJ92GioXfCQKrpC/saGzOK5U9ClCNu+gL0mtI7BaOE 02Rn13krZFfxHYbWOvlVXDepG3/rzefg42hmVfgoDb859uqYfvw5Q1V47JWxkgg1eAwimbScXC6T eXNDXEXAHy0rK63lKsr93lwtJ6aVRytr+bJSJ8dDSUyp5Vic8m98OY9vGs/jtnqmd5VIadBndRkz MniXU+Mrc+va2r3R/CypJEPGSzPkgWi9t2fL7NwXlbZAjiNgUwI6cgDHn5FqT3ws1Z5cKGk8eZh7 t6q3Nk+2VaPipIqMO/Od5rySnBltGp1Gqs22ZuXIMwxaZWHL4PitWT6rUmn1ZeX4WFu+8enAEevE CcmzUhPI0U/eZu7QHrBx8ibe3afS0TnexMS7gpOFfGqN16YhFqq1+FVKb66SuCVeavD6fQlaKDgF FVHTTF6tDjjyvF6nUmMh3lybPNPRmdkj7SG2urq6TGvVNEOZATgL54eyrPaxUmoPL+3Psh0tLdt+ +ZEj1HZkaT8GSyLgNIVlO7Ubj7Ne/CdPK4kEg30+iwXlFuA9ci3vzfX7o5UUhWWVe3mPZEQts0wr KatyqiULk1mdEo2jIhgqN8nU9BqZ3ltbNr05YJA9Qw/Q9UN5hWYpr9BrqGRca1RJZNZCr+QCg1nF 8yqL8Tm46ciDz4dIojAznbAOppHdaf66uOsfz1KZzSqS4O6IF/nLEtzWuCorkKD8aEmJPA/YLvI/ L0F9gkLfUW5joy9P0IK4IO8GdgL7gnVjQWDmWBUNj5WGx2CSZlbBJM0e+TebKYn0UZNW4vXk+isM 5dEyD8xXM5vpTp6Whziv18CmufFUUBL1N/RvuGhu8iFPcbGHNm25/5waW6ghWNnflJ98xBZpnXHp 9VWNxZYGZ/WiljuerGyrdNFvNm1YUJtvDBRJ1hQF8jsu6A53NZbrlaXzzqC/CdQWWJKx7HDd+BfF syJZyWutxQ1MR82b+ECilnphZV+J/IvnkOCT3POggmx0EJSTP8Utf4IOxI1dEjjSHaiIiCyLJOhQ XFAsEFk2HnxlrI59AMdeOQKsOvzvNgC88pm0qADKM6NRWNsyxiu21pkWMJucsN5xzUvUvExpqVs8 3HjpqzfN773rzUujK3oas5UyXqLUKnSh1pXN7Vt7isILz29vXtUa1ijVGZIjdq8905rnsXTe++k9 91Py2KJMhz87M8ef4yzMUnuD3rrhB9ZsfHBdhSffnWELEljHbKY9DTMtE/T3Ocinp4iRux2UbxZ3 HVEQW4pLtgQNCQptR7bIoOwE7Y4L0ilzijGHzaOD/3QNnDncaTNHOmWePN3/2BePJF8QZ8mcR/98 /4Lk8eCyG7de+q11Nywv4W6Lj9/dhhOiY/f79y65a/PML6+dds5DIHkYE38VjAkO1DgiNre56wSd wug2umFMWTYNrIusJ2gBmwT7NbTd75fZ06vHLo5U0xEQRwqLKxQXZFNGCqsnOBakYVg4VeGwfqwU Rr3/v9EkTo/TGSJOD48hvaq8GIThKXWK8XMZb7jLFFqlVAqTIllKL1foWFinSG6lL7PwatgAVMgm pT3ghG1AlTyissLG4Lcqk9erbAG2VnZNnOCXA8cC5GCKY3JjgrtBsGgcxOmQ5+tou9ym1tA5cr0K gk/QhcQ4cXw/hI1GuywxcWwUSgCC+tHSObIEXbxPyO2wixqc6RymcYBnQca1I4YqkWWC4b/Y7uRc msqp9C6aVkswRBVwqY/uUmhVUjG8Se0qDfjLnBrg4yBLldzjLLCpk/cpbflOZ36WKulU6VUyGXxI biwKqOyFwK3Wifclt0vz4A78G8it0ZwcnQ1mWJwEdIe4W+GED6uGscQGLBmF6QV4fFTNkAb25eZW hWsP0TBYIMrU4lICxwRFVZdJnHKmBF0WF8KofUBhM93DNkBkIOigMYikl9r/ncek+XmaYopWGmDn qygHBSXORwPT+8yYYSmlTgkwRaFRaKoHLu1desu66uln3LioaIHvs0wTm5z0cb3dqDTPHFi9tuL2 z767aCD2xa3dO1c3ZqslTY5CuzKvMG/mlgdXrn94Y7XJRIuKozl+q0plcZnGx53FWTkmZd/Dn9y2 e3xkqdXjzynDOUtvBAvETApRCmCvczc8Lij1nWg60DBMPWDTaDohvb5Ylw3YZ85Mb9Q4cQpoXKX+ QKlTk6fUK2Uy+JA8lw6l1oikFp5XRobweU+RCHcD7CNK7npm0HLPjRYVmRUJ7ieCViDmQKdHqc/u 1E/aMVVVdTT8CnSJSVI/Xsq6Jqi+rthkP/3+AAUmoy042WNDyvAwm2RySi0WSa3KFS2YWWWXJ7eq 02NxlrGxqOn5cpO7NJBf7lJn2pN30m9YFAGVQSVTQqurxm+bnNvPqnDMqvFfcX6NQSmBGa805AWS 4fEDBdkpndoNo88ibWlum0FBqIhC12kWZ605QfunKkoaPioO8e8WSA8TLQfc9czi+uW7QYUpx/d6 ijU4Dg29GRKkZzsLstWgzG5Oy+XkRyp7Ac4F2Tmgv2rIr7B3gkoTiVjDYWXIZstKcCv25ZWo1UoI HCB50Q67WmU7RIvheBeaOL5P7+XmlMACFdwsZNWzTw1+WsORkpDMld/h6pk0SJlFyl7sgiRLS0uZ TMdKDWWwDYCVWjUjXFZmKAPJPv7ffUqaV+LU9VJmgoa4APVOmR3sPOHkrLSMTQ8WNMvOUTkivrxI jppLfkuS6Yrk5kZcmXzyJk7lDEO6QxUtfiRUH3GrqU1CczWugmm+keyAfcoKcJx8B2YDL2X6L+fk 79J8l1xcFtV5qwq/HOdpYXWeTgu10mskIc2Ebwg9jnLYH9ApQzqdKcGVx52hUoB9xDmts4CxO1Pn 5+YU5Idy1XoWUqtkugTdfiCgtLOtIwThU9MJzgFVVWCsVgVBEVYFkevA8zAwnbE7/l9oM81jZC2s Pa/FYv5bBhudvLXMz4zd1JSVJPTZPuMGb1kw3558MqfaykkkquxQnjeUpazM3+UvL8gzfmkJ5vsz Kc+rc0J5uSG7cok1z6bS+upKuf7o9ukt18wZX6zEjUYpuTIc1jgrAslAsKtrfn7zLU3cMqVeLZWq 9Uqw2OZPvCe1S31wUg6csthM3DNgsTnhU0nsqU0F7JglgkLX5RWXp1dcntLJTYVZMGmL7Z+tARwC W/+0o6losE0xXaX2+Xe9d+vNb9/UBnjb9W/f3J780N2+Y2Dwkvke95wdgwy5m76THOmfd8+JPXee jC2de8/n+1c9uGVm67Z7F5/x8Hl1LRfcz+xSOF/ysKJzwB+wA+fSSJ7sEKhaA3Fw3xcUxOATxwUH yeCoTKZmZ87U4ZMG9wnmDvWk9SFunWydpmy1f61ietCnrzXYACVTjVW+8ZLv7ViX2krUJfm0JNS1 eUt3UXIs0txesOHcup5oDn/pWQ9tqkkun1xFV4XDcmvtsouGGnsLVcnW3Bk9qZG3w8ijpJHciSPf pw8ZCpSHwFVDSCV3e7ygzpDg4FtCIX160Ho48Y0KgnVGOmEGHPr2C54Oa3r/YWaYyAjx4PcKiJ6t JFg6I/9eK+nVwvQQH+LhnJeeGWhuWaxOPnUOtFotFlruD/j9qdOgpD3DWV1aWOpQSzab80uEws40 4+BAOK+sPnvu9oUhj7C0xlFWnG88S6dMPlpdbyorPveyad3TcnJVOiWsMIOaekrmlGUljZP8vLko IOFV0YVb2mee2V1r1OZXtYYm/F5+hdCbKZUlv51d0si0VN3Ee2BA+0grOYT8PUhmcjc/nleaV6rO Zidrog6x7aGSKGnxfkMl/Fpq0oytSdBiQT0zW1rQZREnoCVBe+EoNLmwmKIKgqZiRwM9nBlfgQ0f ImwvPExC/6Vm05MyNyRJWV/iwbGiPCRLxb96sJTxV8255LHlDZt6p2epJHA00JbNX98amVORE2kf WjPUHmka3t0XWjK/1iSXcrxco1JFmpdUBoWgOTxvxZoVcyP0m6tuW11uceVmlYRchVkqT77HWljr L6orCUZm9Gzu6N/VH9LanCat1ZvlyM9S53iyzb5yRxDzNwHf1XDKeB9mdi7pSa1oIoNTxqjNIMtM szdTPDs4pqzeUho+Mn6UTdR/WCrNEc+peehhu2XaWoUns2PRYWZRMIM/eViJxyYlfy07KEnucRTY 1SfHJieTUW0vcDgL7Spm9EPvr5p4T/IoWEBBshB7f5i4uWthRVq46wW10t+p75w8Gy+ZOiFgs0JF K6j+QaF0/8UdPr21GFIOgSmbzaPNV/zwkm3PXDZLPLmAueqftXxG7VCjT80GVgIm32+3HL6kccYF By/gJ1fGuKT9nNk+f+uZjbwqPUA2Jg9o2UYYU5hclB5TLti0NpLHzReUIWs4ZINfomYWlGBRucGC ulHIFIjK7fWqCjq9KoOj05DWMDDN68A3VxbOsunfBHWTBZ849yGHrQWQofC1tZguOeVh4ycdbBTc bMxJwlmNRuZsgzJwXyKQqbLVTQtHXVrpJx/LtK7K4vIqk9pIo8ljmRprbVW40q2R/e5NmQa0R2m1 RWVIHlvuLbTIJAq9mv48WazWKyQyS6GXq+CMeUGzlKUnu+kjLF1qKcwbPw6c0QNnbMCZQtKe1hFW 7sa4Ru1mPrfCbPDA3SAoBbWvM1uW2SkT95pMZuFntY9XvTmmf5WN9sBXcpmMT03PKaOzWKxl0Wjl 5CC5W9DwdamTdxlV1trKUKVbJ7/WXGDmjPnGq6U6Z3mwqs6qzqQfJKvSAqXPc9/3FcB4VJna5DOh VdOiq0K0Rm9US6TmwjzYWWaB3jsX3gGUEYEW4KjiCmt5glu8jwQCpDrBNQl6A2+ln1ipNaEup1+W 03J2h1nBjv7l5aGZhQlqE7KP5VJ+e+6uXE7InZ87kMvrcl25nFqSmytxgCtA0KrBueKw6Wm740Ro NtuRwBdJ22e8I6jbJcQWTnsh2XYEPt3+/mX94vE22H/OWP85sFiOVDGvCtubBN3/cm/YzDQx1y8Y fBUp1z1bnGWgaUWXXer8KxENbjk68SxlpdFK/lxTsLC4wFC5a8GsLQsjM7bu27LQEJgZqVs+p0wv HsFympeun772xoGizwdmLIjaZ9VV9IVcWr1crtfOml7va13XMndTW160sK7QlJObo83yW115Dq/T WNBz2ZLXM/PKPNOEKHzVnyMXgmYi0g0wV2eQm1JyVXqih7gBOJcGuW+CsWRWRis8EmkkrWbBwdkm aPyzs5v1c6rEbawqQWeD1mpPe4nrmJ/YCsaCaDYxYez/d9uYotoCaXfnKY1mQDd62pCUGyzAv1pO QsqHrllcPHdWUx4oYKerwK5Uw2nGF3GocxsbW/KX71yYnzxpKGwos0fKos6KwYqSxmIT/XDLk5e1 GPzVBYOilaDUqaTetGGdNML5RzvvstHhqjM6S7S50fzka42zSuevgvXeMvE+7+FfJRVpmwu8xYEn uc2itxguwk++VADfuitunC15graQElgbKnCClRSJLCxK0GbwGiMLwWkTnHQbH2E+QuY2/s9aEmdj 2n8snj5glxfdyd5cCDknnccwFKncVj17YWj17nWVDefdN5Tf3lBhUUh5k97gL28pHVqTVdZeVt42 za9RqOWSWJbXprN6svTC9n2bL3t2Ry1s5BadzWuvDsPUu/m6lrNn+1x+lzIbdkKOzAY9sh/0SJCU UynOt1Gj0VOU4BriwXJJgtsoKD18kbGIyy56VsIUiBV8YESil3Bz5ksGJNzdkpgEDkk5YZiOzH/F UHBDmfA7/tm2vxCtXssZeK3CBi4zhQ0KKL4QctJsDb4CSmMMZifTH/3nLO0Pji3tB61R+mbKLSYo /t8+W5zeMq9nCv9hlqe8/KkzYiDqZ7pBzu8vyBt/O3t6/8z6Fa0RnUKdwXOSDE31os31W0bPm157 7sNnbNi9KvIpv3hZZFbYztEToaKq/pm5RqtRnumxW1wWndZmNdRse2L7lqcuba4fvnup+4yteTO6 wjCH7XD/+BbpeeAF2ZSSikVPwKBdNhop9IGL0TEanZXlT6sAeO3h2i9EWtxz9C3imzZ2QiitA4v1 SNn4kTL2ouMgGMD/XKUpS1zUgWZRH8LcnHIsSPsOQXeKXJFwt0gylDK5wZ5rzQ5kqe9lZpjJeK86 pzQvr8Sh2mA0SiFpfV77lo5Ac75WIZF87PAa5fIMucE3PdiptOY7KsPjIeYZYv4i7uVwpSPfqmxb /K3FIXiNaQ/AXD1z4gTdJZ0LitBDmpArT4HF9hQcLM2gH5XwFZfzHxfs+lbpHMaEV4EJaXPt4Nfk 4Qr8ikPOyNYg+EXBVLHQbWktlUZjbXfP9Bk93TW56Y7y20AtgU9Zp6SROdXTWudMrwLpXQjW8SHQ 4uWn/Isl0MNcooZPeC/K7R8tLraABXaA+RctuSppfmtOs2EOdlx0kICyhv6zUx74F99h+6fq64pN GcQ/41/kD6kcpfkFZZ5MefKX6VGlkWZkmDwlfl+ZS63TJU/SkFrlATubGVUa+moyPz3mU1r4yz/T 5epMUWQqXa4x+Vqy2OTA8dNtMH4zYVdy4H2yoNOYKahXlZJqCFVJwOQaYO7dZhxxyr0rWhD94ORN JU8Z3Kk95m+lMimMUx1LyeBl0Gyl5GLsw0ihkW2jTqLilsWJE87bx0dB4YvnbmbmwLm7XVAJxbML 7Xmt9rQswBBkiwk8LGzzZHvnQTAo/5Wap4+CmRqwTk4dsFNaxYzWsZl/WZ1TkucryVEb86r8kaGK tHSUWQUud6FVOfvWrsXb23MnB03HZ86ucDQ3jO9Ny4e/IB1aPX9+zeqdg7B2WsCukAA3vuJpGhY9 TcOne5qywNM0e9LTlDPVkvg7nqZ/WAPG/z95miSSmm2J87fENk+bse3A+efFNk1LjptLu+qmdUez LSXdtVXd0Sz63sbDV8yuvzBx7sbvXT575oWJi+vXd4YK5q2fBVhcMHc9s56SN0oIjHKq9eSJgrcF radL/5H11Kqf9x9bT/9TG1NYEfiaKfD3rKeyoeuWBmbOqHFPzgV7gcsJVlSgbW5XeIhZTycMBQ2l 9hJmPQ2UlzQVmenYlqcua9G5Qq7kkrTRJHkrPTHW5s8oMLVfFt9StbazRMesp9cbWks7mPVknfiQ u1oyAv8f6npcNwcMBs30AuItht0nbtUUpzedYth0Rr0tDk06QcPMKWtLSYLOgjsKKesTNvejQDRc Nl56pJS9+hKXUHHKw/cvNYIrCd9TTb6+Sm9BnHnqRiXanWzj4q5WZXrDlTltZ7fknmmE11c65Rkq B66wZxg7TMZnQ9NNbrtBLlPJpNuKwkZQ6P5553XSH+Ee9DywD94w6pXP4y6V7G9tlSvkcnMecGv7 xCf0AZoPN6EUcQU/h9SBdwNOGaf2kAdmdncLM3u6hGv7hbrepUIds7q6wep6Cd46lpMW8g5y+SCY Yk8f0HHtZDYN1iW4PfvUOTnqiie4i+FbR3AQYznwPLhjo+PV1WmWVydo7WgkIgVLQFRJUy2COkFh 7GsUrdnGBBVgGS9LHwjQ4GJSAZX7ClhdIBbRodofzH4cOqDj/1tPgCtT8Ii0AmAOLna8Os2hJf/K tE/ZXvxLNZu/u37RZUO1Pq0uOPf8vef52+tDugzwaGVolWp/tDXSsaHZTS1VDXOLhq7qK0wmM/Pr wznR8ojZFp4VDjWFbDQ29ODWpoL2s3fes3jOA3d/+yy49ZCp0RtzTK4Cq1KjV9esvmKONsekia64 ekNZe0W2MtOuPfOabm9ubRdcPCAzRDn5wDtfSWZRZ1pSrRNP72fyaKWRQ9x6uOGWz60XlE6d12mC X+W0J7g9otCUKDQdT+oT3CX7lBUzpFNXj1FQ2PuaRAE1Jaj5dAGBn4UZL8A8Jh1wOk46XkBGQqui gSrqqWImzRCoUkJls6ismcqaqKyRyiqpLEplFVRWTmVlVBGiimKqKKKKIFUUUpmH8m6qgr7r+H+x PyhLwo75p/1QMZaWseimqwzxKcvwtAtEeLKxRqPsDlFAC05ldr7mX5qxJbbp7Ac2TPPMHKwr66x2 Vp5137ozbx0Ku6Z1ls8YqPcm3zIF64Ldneai5kjrPKe9Yn5FqDlkXbliaJAu7t25rKSoZ3tH5WBX qydnZvuS6NyL+ktD3cOzwn3zZzncLV1LuRneaQFTe6M7GgllBYfG9/tmREuz7KWVM7xzO7vZuroB xB2TWkko/bZL0CgKqCKfZgQofO0GDtvgOgFxChH4alAB3A8YddpUhsTEW49DosEIrs7tgsLbWaDT U5UULIngqfddIMLSuvGjNBw8CtY46Idl/UHSz5iWLdgK8mkBPGfKo9gT/pn2mDT6sZ3+fnYXiV02 STlJy0CZycDNAcZ5pQ+XlxnubsFtxJgMrk2MRzO0oOsg9OeXrA6DjMvQqqlFqrMFXP6wLePnCjhp r8gJsJuC4q1DFT97k0pqKPTbXBZtxj6JlKe8XK04+XN25YQS+J+C/GHwwdfSTFwhglZSRCUw3aqp ooqqBGCeuF4Eaklwf9pf5oNfUvUE9yeimnhfEFeJCqajClxSa/cbplW53VXZoOGYdcZQfBUEt5TW CpoyiyzUpZ/cp/tOcRmOO7BCQLGJt+CqwPIXl85RdN6XRIDnMHGB69lw73Nq78CBpuP/m08+tUzg aacLphIuhX7F2yTD0xW7TsouYgAjwQc4brO4TQqZ3m461tAZMpgLagunL24KwYWMDClcJbM3DJ0r rLx5RYltzs6NN9Ok0qCWnekoyFJlWIu8nrDPaz7evGnZ/DzP9CK70+dS54RzrS6rwebz2soWb2+p 27Zrzzm3g0scdqI8OKm8I/pGQ+STlPRM8hCVB6ksh8rhS21aKtNQlbgAVEyfRYBdIY8+wa3eF5BI SPETnIJYJj4WNJBpyQ5N3rRasE+i1yuDCbpyn+DpVKbf4MFOUzYePAJvAoJjRyEML95hRYCWS6mV bCEa0NFAiAaC1J9DA3oa0FK/hn5Nn8Su/PNPRLmcrr1AacG5dtKRVZFeQekLoWzVWODrdR7+HXPm JrUz4men2aRBa9HJ4cWKkl4ntQXrw2UtQdMmvTW5lkvuoQvp5rKK99OW1vtyezjgDvtzjdwP4EaN hL1+//KzEu6b448yvTMAO0wM3qPUkneR+wekUSqtOG3RVCY49eP5pfmlWscTHPyDUTAHREkQ+Noh rwUTwDeamyuNpldKNEFXxIs6FHDv8YDRJm4vcFdpAWwvU+5A4gtE3P9TGwx4uXGRwAopjNLCSprq irhC/pPHnL4iUoeB9Mut9Msudi5iZlP6hhfzhnkMeCriY62XHtpYs25BpQH2fwm4WpQFDQMN1cvq 85zCqtbqZYXwDzhzuZUKsNTMpmS5t8m/9t711fS+tXAhVWe16jLt/ix2bdqaY7VVzJ8WaSvPUjsC XGm+V50VdNZEkx9IuJJlu8jERNo242TEC4cjSjrEs7wW3IZ3pSWUSaUGqvKk1ZqHwmp4AV5cmw2H uB9DJXNaQmYQkFkK2wTqMIO4GLI6VOnFEIRlwOa+6O6awn+tFB9BPNDAP6x/irXi/itPXSeppOwm DvPNiErlkESuzkgukBlzKwIVtQ4ug/54/JjZzNwWPM20aeWS3Y6gz2P80qfRK3i5zmrgP66scQZz 1HJbEfAkZQcBT/JgePBdIpi1T4HGj8B3CF5DrhwkjSn7tZE6ShLct0eJVkvYO4RTVtB0eN9ywCeI U1JI0PxRt1s+ddoWCorCrskZC1uofPJNbOqFN3ujwBg21VxtBB7BFnNcUMJ+capxQcFaZ3cc/+lH 4Ev1IPKU8ZMdNU57KVs55b1B+tbA5I2JKP+Uvnje9tFtwZ7mEouSh+WuLqqbX9K9uSWXC13Svfra RQXVG7+7YdHlgzN94GCxRVoiYbgdbSyoD1ev5p6Z9/A9150lqDNN5vw8T75Frs3U1qy6bLYjGF11 3ZLBe7fUF85df8VdpWdeuyDPU9NZUtFRkcWmKMzRTCD2I4PzPZnd0NTXsCjYMLhu7dDGtcX169ex fy78fwAjpQL9CmVuZHN0cmVhbQplbmRvYmoKMjE0IDAgb2JqCjEyNjY1CmVuZG9iago0MyAwIG9i ago8PCAvVHlwZSAvRm9udCAvU3VidHlwZSAvVHJ1ZVR5cGUgL0Jhc2VGb250IC9BSkpKUEQrQXJp YWwtQm9sZE1UIC9Gb250RGVzY3JpcHRvcgoyMTUgMCBSIC9FbmNvZGluZyAvTWFjUm9tYW5FbmNv ZGluZyAvRmlyc3RDaGFyIDMyIC9MYXN0Q2hhciAxMjEgL1dpZHRocyBbCjI3OCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDI3OCAwIDU1NiA1NTYgNTU2IDAgMCA1NTYgNTU2IDU1NiA1NTYgNTU2 IDAKMCAwIDAgMCAwIDAgNzIyIDcyMiA3MjIgNzIyIDY2NyA2MTEgMCA3MjIgMjc4IDAgMCAwIDgz MyA3MjIgMCA2NjcgMCA3MjIgNjY3CjYxMSAwIDAgMCAwIDAgNjExIDAgMCAwIDAgMCAwIDU1NiA2 MTEgNTU2IDYxMSA1NTYgMzMzIDYxMSA2MTEgMjc4IDAgNTU2IDI3OAo4ODkgNjExIDYxMSA2MTEg MCAzODkgNTU2IDMzMyA2MTEgNTU2IDc3OCA1NTYgNTU2IF0gPj4KZW5kb2JqCjIxNSAwIG9iago8 PCAvVHlwZSAvRm9udERlc2NyaXB0b3IgL0ZvbnROYW1lIC9BSkpKUEQrQXJpYWwtQm9sZE1UIC9G bGFncyAzMiAvRm9udEJCb3gKWy02MjggLTM3NiAyMDAwIDEwMThdIC9JdGFsaWNBbmdsZSAwIC9B c2NlbnQgOTA1IC9EZXNjZW50IC0yMTIgL0NhcEhlaWdodAo3MTYgL1N0ZW1WIDE0NSAvTGVhZGlu ZyAzMyAvWEhlaWdodCA1MTkgL1N0ZW1IIDEyMSAvQXZnV2lkdGggNDc5IC9NYXhXaWR0aAoyMDAw IC9Gb250RmlsZTIgMjE2IDAgUiA+PgplbmRvYmoKMjE2IDAgb2JqCjw8IC9MZW5ndGggMjE3IDAg UiAvTGVuZ3RoMSAyNDI1NiAvRmlsdGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAGdvAl8VEW2 P15Vd+vb+74lobvTSWdpQkLSIQQiuYEQgQiE1USNhB3cCMimjhJXNkdx3FCZIToKis7QdFgSljE6 bqMzT2bc0BmfvBkc1JEnb56DqKT7963bAXVm/r//5//vpO6p7dxbderUqXNO1b0rV6xaSMykiwhE m3/t3E6i/yIFAL+dv3plOJt2DSVEuWxR5+Jrs+ngBkKk9xZfc8OibDp/JiGjf7Vk4dwF2TQ5Bzhi CTKyaZoALFhy7cq12XS4A/Cla5bNHyyPnEZ6wbVz1w4+n/wJ6fB1c69dCIjflVtxKe5cdv1KPUmu dAPe0bli4WB92kqI4w9EQ25DtoZ+pbgOJ38ndeReIhNG7KSczEJP6tiLREKal0u2K345ef3Lc2x1 /zAEDDraE3+py+ORlx+bN+ubb84N2ImhAHVVvT4vAJ4yJj2FjLOTb7755ka7nsMLLvyG75nZ1WAR niO7EfBgXMMI3QggtPBcj2Kp1HoBnW4dprzxyr5Mv/BcalSVnl/2QGXXYeFZModUIfvZ1Cye/WyP 1sirP9tTNToLy4frMGXIFivuylBDEGjlCIzYBmNTAe9F2I7wPIKMBj1LPkLIIAjC08ITqaYQbvwU bmRrcAtPoYsarm8iZBAEtP4p9OUp8sVgjohW/bxHNfPH/1zHyhF+DiwbrnaELoTdCG8iSGQZrtsR MggCYk+g7AnChCeEx1P2kL3BKPyMrENgwqPERikJ4e5be+w6bR7psbkqtQa78CBpQWAkKUwm/QgM t70PaPcRhurNqbLhOgmbe4zWSjvqb0ajN6Mhm/HIblypntYQ4/U397i8vPG3p2wOHe+mVEUiG+mx +ytbQIW1hAoLhetIlISEWwCHAM4HzAOcJywgFr2dWo/NXtmF59Wjer3gISUobhC8pBKwUQiSHL3a qpQ1+5xVqeLSSvR4nODXq9gEC0mgqkFQUpWh8CFB04m/oUc18fZtSNk9lUeEOwWFuFGrC7V8IdsR wYgxNuo9mdmjWiq3NJiFmejmTJAlhDZSUJlfNeG6FG7U4BDGC7nEi7KrhTziAWwShuhwp/A4aUL6 pz2x3FD/IeF+Hesn/KZ4/Jgsa43psVgr+xtUYQxKk8I9GIB79Idv6YmNrCQNMaGYVCAw0HgdYusQ swubENuEUduEkdqEkdqERm0C9xFhI0o2ok65cCPpFNaQLQjbEeds5UmBoHwyeFIFxZV9QkDwgzD2 QyAlRW6wR7XylvlTTpdezd9jtlbWHxGuJ1MRGLq8ssfnr1x2SCjVuzK0x5/DETpTYNcjgi87NLiT lw/JESEXhOCEyROGpDyhZEMIac7IIULZ6+woJxJ7i73Dh5u9iTSHbwzC3w3C/8jCTD87mp0U7A8c Hm/IZR/jZnPYh2Q7YowdYr8mFbjBB6yXjz57n/WResBjSC8A7AOsAjyYirwW6mW9PQBo+2Mpi5d3 lv06FS8fjIQKByO+nMGI01vZUMheZC+QXNziPcACwBdYP8kHfB7QD9jPVpLXAPexajIacO8gfIkd 5izODrD9ZCRgT8rKm5BMKRzsTskc/DJFsqmW8tBh9kv2LAmi6i9SsSAKn+6JFYRsh3A/yp5iK1N5 IWeDkT1OW+mXqNRNjnFInOyJVA2/yZbU4XCoj21hWzR/jVaolWk7hIrCirKKHUK4MFwWrgnvCDfY 2T0QINsZ5i/bjGsNCTNwD4KGsIVtTIk1yYYB9In3i5EuXLv1WAeunXqM4GrXY7z0tB6rZ3eSqQgM 97gFYR1CF8KtRMT1RoSbEH6EcLOesxKxVQhrIE06gdEJjE5gdOoYncDoBEYnMDp1DP7kTmB06hgd wOgARgcwOnSMDmB0AKMDGB06Bm9vBzA6dIwWYLQAowUYLTpGCzBagNECjBYdowUYLcBo0TE0YGjA 0ICh6RgaMDRgaMDQdAwNGBowNB2jAhgVwKgARoWOUQGMCmBUAKNCx6gARgUwKnSMMDDCwAgDI6xj hIERBkYYGGEdIwyMMDDCOoYdGHZg2IFh1zHswLADww4Mu45hB4YdGHYd4zgwjgPjODCO6xjHgXEc GMeBcVzHOA6M48A4ztbsEY42vAyUo0A5CpSjOspRoBwFylGgHNVRjgLlKFCODnadE4IzTD9w+4Hb D9x+HbcfuP3A7Qduv47bj5r9wO3XcZPASAIjCYykjpEERhIYSWAkdYwkMJLASOoY3cDoBkY3MLp1 jG5gdAOjGxjdOkY3MLqB0a1jbAHGFmBsAcYWHWMLMLYAYwswtugYW4CxBRhbdIz/z0PDbqWtBqy1 rIuW6HAd+VyHt5BjOryZ7NHhj8gOHd5EbtPhjaRGh2tITIcYah2uJCEDTYVqbA1eiICpCHMQliFs R9iN8DyCosfeROwjhAyr1vJFmzJV2a7sVp5XpN3KcYXZ5Knydnm3/Lws7ZaPyyzckMMsuhyFaCH3 Ao+Sdbh+gYBFBNd6PVbPEnhuAnK2Gn8JltAcp8JflNI3S+nzpXR3Kb23lDao7GIq6pIuTGoYCEBb NXNsTOgYQk2saAwk0z37P/eFUrERoV56OAtKtDiSnyPsQdiBcBtCDUIlQhlCIUIIoSZWCrRWLX/w locBixAiCGGEGuL1Qk90OgxaH7PQHT0vW4jKn1NUDLxDqaIKgN5U0VSAA6mieaEGle4nRVwrovsw qZ4F3J0KnUDxL7LguVToEFJPp0IJgPZU0TCAy1NFvws1WOgsEhI56sxBOAMDztPTU6HZqDYtFSoB iKeKYrx2KR5UiNISaNQnABHXsQuyT4qmQqNROz8VquW1DaSIDzyVSZnePAlxnhZ60KAv+mirSDVT 6FTo/tDnaO/fQFiwx/vhXhHgzcJeOlszhg6X/QyVG0KpBiOvj/VhzyBMcrgvtKNwY+gx3IsW7g89 EhoWuqes14DsH6PdG/VHpEK3hXvZs5or1BWqCK0sOxG6PjQpNDc0PdReiPxU6IrQYd5M0kZb2bP7 Qy244UT0ojAVurgQbUETm0I3hLRQUag2fJjTl4zkjwYnlx3mFCCV2acPBX1LC/H0VGhWTS91aKXK aWWLcrkyVhmtRJV8ZYiSp7gNToPdYDWYDUaDwSAbRAMzEIO7N3Nci3M7wS3r5oIs8oSox+2Mx3HB lTBqYGQSSbqEZtY8YyxtTvbPJ83zwskzM6K91DjtsqQUHUuTzmbSPHNscmS8uVfJTE/WxJuTSsvl rXsovacNuUm2oZeSma29NMOz7sxJOsehkNz545w+Qmngzh+3tRG/d3W9v945xlHb1PhvLh16Zkdj /Luf//vRvORDzTNak7vy2pKVPJLJa2tO3jojfEVrH7Mxy/jGPmbloK21T+xktvHTeb7Y2diGaif0 auBmK6qRIg5QzTCWhHk1yJOxvBrGKFsvBnTUi3CAekYLien1YkaLXk+kvN6eY+HxjXvCuKBOISHH 9DrHCsn36oBjgNu4J4YLakXDtJXXoq3RsN6wEv1GoRCqlOGCKhT6nn6jENUfliz/rkrhYJXqC1Wq 9WcJ2fbot+EX3MZdfL6Ouxh1viPk/7/YwrFx2jN81S2/Hr8wOr4jOn4hQkdy8+ol/mTXvHB4zy2r eEE4KcQ65s1fwuHchclV0YWNyVuijeE9w3W8fyr+NS8eHm3cQ349fmbrnl9rCxtTw7Xh46NzG9t6 6utaG37wrI0XntVa92+eVcdv1sqfVa/j/dOzGnhxPX9WA39WA39WvVavP2v8Us73La17DGRs2ziM K4c9zGQED3fkRNrGeu2dYzhD942O+G/JOSgS+jQxxduS5ujYpAWBF5U1lDXwIswzXmRFtm2wyH/L 6EjOQfr0YJEd2Y7oWHJ+IAjHb05WT2tORmZc1spZJamBBP9uzK7nP73YT8YvbcQ/0iv1sPL6lefv yCHhNf/1t/Lf/VatWnX9SlxWxa8npDlZOqM5OWIaWqIoeFRHYxvyhp3PEwQ9b4+qju/N9KMwjkbQ lfxxPBancVBQMxKZKKxb7lYYtyJW9gTzKpcdgd6wDgHmMFuTgiuBF63pyS+EtYQq5dVZCHOVp1PB SCWe0FMDVA4Ls1BzlCGypXBL2Zaa7sLusu4aGaX7dyAztIMvpanyHQJZGb/+PDEQXdkGYqNZ/HmP p3Lz9Ad380g83ha/nur0Ol//O6jnI/kdYdFH/Xe9fntOb53CuPIoiM5LMR7Zp6/iKf7LRnRc0FlH Qi5qZVN6Fr9890MKrqKDJFcPO0muGIONRTInzof00swJXsYh+wySHB4kHgZ/KfIceY8W0zDpod8Q HzlLA3Q4mQju/Ar2xG4yQB6EeT+TPESdpADW6CwykYqoEyd308cyqzOfkovIT8gTmQP0tswulN9L XiFn0YL/xIpZQ6ag/iyykHwqfEzaMo8SA1lPTGQ0mU69ZC55F3//QDvuJw+QX9EfZc7iqW5yG+5X RxpIQ+aFzDlSSu4Wt0jH1H3kPnKIypn5maXQkPLJJhbPvJv5iMRIG/k5eQ5titN+cQKJkKvJnWQr DQivIPYgeZKkqZm1C+Ok5/GkiWQ2uY6sIZvILvI6ddIW6Zh0OnNT5iS40EWK0aal5FNaTSezp0Rz ZkzmA3I56SOvob/8r1+8XNwpXZ6uz/w08yKs7wPUSA/TF6RK6Z6BWzOPZ34Jf2UMfr2L0O/ZZB65 nbxAfkP+h/ydrcusIxPIDDz5ZZpHwzQGir/LAuwWdovwFhmG3rajtavIdpIkKXKQHCJHQJs/kuPk Y+qmOXQSnUfvo39nZraAvSk8JuwV3hap+AzoHSWFoNFK8hTZT35LfkfepBLuX0Fb6FV0GX2Y/pQe Z0n2OftKNIi3i9+KA1IsfTz9bWZK5h+wuYPkEnIjWQfa/pz0kL3kP8g78Er+LzlD7XQkXUIfp0l6 nH7OVJbPprJO9hCs518IU4T7hBfEanGseLX4O/ED6S5pszJXSZ/bkb4//Yv07zMHMr8H71hx/xgc OEvJreCKp8jz5C3c/X3yIfkz5x/cfzS9jF6Jp1xPN9AH6C/oy/T39DP0EhoH/vLZaNaIpy5jK0Cn 29j97AE8/U3u6YCT4kP2N/YPQRLyhRHCcuFxISn0CkeFv4p2MSYOE4eLU8XLxAxGplK6WJohPS09 K70onZbr5AVyp/yJcptyh+G3A6UD/5km6SXpZLoHvGsAJ90ISvyMwAkIWhwir4Oi/4EWHydfYhSC NEKL0O5a2kSb6WR6Kb2CLqS30fX0J3QrfYw+QX+JHqAPTEHb46yBzWBz2UJ2B1vPfgxfxl52kP2G vQuHyim03CdEhbgwXJgoXCZcLlyHPqyEK+8OUPY+YZfwpvCWcFL4RDiFUfOJQ8RV4o3iI+JOca/4 e+kS6Vr8PSE9L/VLv5fOSedkJgflXLlcvkp+Wv6zIisjlBZlo/K28r+GTppLS9HyMHj/wo8FMAeH sF3MLa6jp5CdB6vDhp7HMQ4zMCv+l9QLaYyLlZejbR4WEF0cXdbEJBTBlfQQqaYvk3UyE6AYisdJ iv6JHRd/zS4i79AOGhB3CtdJr7MIeRbSaAs7zA7RsWQvq2Oz2TaB0I+xKn4Mfl9LHqBX0+vJs/QU HUVvpjV0HXmbeYUZ9A5Sl3mCiVSlE+lpghaQW8UF5MoLXfi3EVoL7/yn6Z+JFvFHkE+95CGM6HPk I/oM+YZKmc8h3QRIo7mQMneD3+8kXOq1Y56tw3wMQIJcI79J9lIZPvQaeYx4IzlNviafSgfBUWMh TU+ml4o/E/+SqcmUYYZhlpGnMe+WkIsxYz4GlxxBmqeuwEw3QpbA+UhayGVwnt0MqXdfJpnZlrk9 c0NmGXkDuN/QofQb2o0Z0QuMOvi9XsMseZ9uxjy8+N927/81M72A9JPPqJ8W0krMh1PSammLtEva K/1K+p08HNS+gzwGjv4zuNmIHswnvyefka+oAWMTIENJAu0diba3kmtYm3CEjKNB0ok5Www5Pnaw J9fjLreBetswn49gbpyGnLiC/Ar+M0Z96NF8PN+A+zSDznPI9WQHRvB22oOcBZDapeRv6LeVjoR7 YCj2RG7DCO1Hm3+LcfsrqJ3R2zUUcqGRzsa9viKXkgV4wgjSQvdgBPaTWkjWRuG3oHcBtZOxNJ8+ CbwOzFArnN+10l8oI0PTUzIj2VLhCNaYDPK7sXrlkIvocrTChn4MEA+dSqrT09GGt6ggJukf9FY8 whZm1gtr0teQN8gzGBNNXK00EqI1zNTqx1xUN3pU7cia6kRV5fCK8mFlQ+OlJcVFscKCaH4kHBqS l5sTDPh9Xo/b5XTYbVaL2WRUDYosiQKjZOj4aFNHOBnrSIqx6IQJZTwdnYuMud/L6EiGkdX0wzrJ MMebi6If1NRQc9E/1dSyNbULNak9XEfqyoaGx0fDyd81RsO99LJpsCaSP26MtoWTp/T4ZD2+RY9b EI9EgBAe71/SGE7SjvD4ZNPqJZvGdzSWDaV7TMZx0XELjWVDyR6jCVETYklftHMP9Y2heoT5xo/a w4jBgi4mg9HG8clAFKi4jVA4fu6CZMu01vGNOZFIW9nQJB03PzovSbj2G9erkHH6Y5LyuKSiPya8 FNptkmwO7xnav+nuXjuZ1xE3L4gumHtFa1KYi3uMTzrieG5j0nfjCf93SdwcevL675fmCJvG+5eG eeVNm9aHk/3TWr+HmxPhd2hrwz2AywqbOjY14dF3Y6SauUmVZHe2tSbpnXgkjIVCvVfZ/mUtmcKO q8JJNTo2umTTVR0YmuCmJJl+QyQVDGp9meMkOD68aWZrNJKsz4m2zW3M3eMmm6bf0BPQwoEflpQN 3WN3ZAm7x2objJgt348sBNGzZXpMr85jzdMvUJbyNkYnQh9PhueH0ZLWKPo0kl8WjiSb5o/EAODX RoGVXIARWZpUx3Vsso/i+egiTUqF9mh40z8IOCB66vMf5swdzJEL7f8gvJDzyQVWS9K55+PJeDxZ WspZRBmHMUUbx+jp6rKhq3vZiGinHb6RETAESQtoO7dtVDnIH4nwAd7cq5F5SCS7prVm02EyLydF tHLYS6yDl2AAsyWeWbyk63zJBfSOKDh5L/dbEE/SELvwb7N7XeOXjEpS7/+leGG2vHlGtBnWTXj8 po5Brm2e+YNUtpwTFHRD2WAs6RrXKuQw5PEYyxH0UjDlFZddqIJEqzkpFuJf5o3G7BDAlHoGDTcl 7R0Tstc2YyQyOGX+FadXMXwPqTdzmmPp4Du0wV4kR8UH25ltdXL0D9I/aJ15k9A8ExKHNc+8bNMm 4w/KmiDLNm1qioabNnVsmtub6ZoXDdujm/rYTrZzU+d4SKHsgPZmDm7OSTbd3YauLKGjwLaMjN0T pRum7dHoBpivfXAxhTfMbE0xysZ1jG3bU4Cy1r4wRK6eyy7k8jphniLNFIyeYga9KKdPI6RLryvq GXp6PtxLel62EvIomd/Lsnl2vV5bW1sZFH54tmqhzdSS+8XryWyEJxCqEC5HuHQwzABskF6FjfUq eQhhLsID0mzyoPgX8jDPA/7d8i5yH+JbeT7PA5yE8qEIXuBPBFwPOAtwJr8f20X8evwv5CeDz9/I oZJHbkH+fQjTETZjQ5TjVaB+COkfI26Sa4kKaEawEoJOcBYnsDxkrMOEhKFxZHP07H+5cGeeAA1I 0ktge0PvVaGv/PBnwv0suL8NJxNwgIE4B4tdsM8woRC80Kb8g7kcBL4XJ7ArcmAD5nFfNloUgb1G YKkUwFaJkSJoFAR70aUkjhW4DNZPOTYe+W8E/mbBGvXTv7EnhTHCNvFqySq9Ia9TcpX7lNOGMYan DZ8bvSaP6WZzuWWOZZf1etuNtrP2hxxWp9v5gOs2N3PPcH/qCXm+9l7n/atvge/dwA1BNXhzTlFu dV447yP4MPEYiXdeQM/H7mU0LSu9rF5zEUlMC8SoiGlKAgZZSjPhMI0RFQaQn/jj9jN1A3VT7F/W TR6oI/WI28/hMrwi4og4CnGBx5ScCwv95zSJfEvCYj8fmftxeY4G8KwCzcNGEiOL2XSCVKB2QFy8 2h/HLdsnD5D6yaeGV1ThXvdzQzN9EmxJZmdOilapH6MQJvdrzWuNG4w76S5ll7rTekB9TTXMdrR5 24KzQ4sdS7xLgotDhlpWK49QR1gmsonyeLXJslN9g/1Gfkl9yfI++6P8tvq2xWH3h/3MDzeIVuj0 Jvw7DJaQrdzGbBpSth1Eyjs2FXZlMN99zBSIvPWi3r7Jp6bYzyyffIrUn4ov52F4BW0n7e200ud1 2BU5mk8c9poRvnxZkR12r7eqckTNCIc9FmOV76y9d8uad95Nf4NrVYs3LzG1Kguk/q1703PSHfsf goK/g/5s/0OfNsy8No3fC9C3roE2yV5oAAWfwEDFQAOVzNbUq9lN2GgVmNhLS3rmSFTqZVceMKgS JWYVvoFW0Iyyds0iETEkhsWkKIoB40G6E1p2ltB1k/koYvjq675sP1U7vIK0RyIOWakeUVBTJcTS Jx/9/XWUVZwQo1vGZwp+cxcfwyrYN2a0II/Wa3P2+fcH+3JeF1/1H/UfDRwNGsbljMsdlzc78Jj4 oH+XuCPXIAfDpFiuCU4Qx/nHBcYFDQX+gkBBUPDGxNniBv+2nG252/J25e7KMzhJnh08OTxvdd4d eVvy3s0z5PFx8bo9iTxmN9vy7Bh3FsbU0MBA3K+FMSK97PEeRs02vkURDZnLzczMx868wyWpx7xe KLaUBEO2Y/Y1LDDk/AB+qY9gXd1kOwZxIL78BBg43r68zuGspY6qeDt3eJG8TH/KUcvbkLLpQLPa a0WDvVYyOAAdtVmfU9semY2b2aqZ1JxADstxUW4Z4kb4b2/jnNE8rfUIyYHak4uQlzk+cuTINrq8 HfziiIxw1oA3qhOxKJilcERBVSU0ZrCNKCui+VyRvfvzX8VHLWxrXWJIfxKghlfeP3vx5Kr0mYu9 VEp/+wBV/7in/tJZVy686qbcT17/7Jfze+Y1fNkS46N0OeZKtbQDo2TXSgzWsLnGOd45MfCI5WfW h50fWFWnw+WMOKLOO51gDmoxms0Wp8PRy7o1r9XitlotTqObe000KrTQLWA/0HefHUwEZsv0HwCF xR05FnMvu0yzhIzlRmbkVDfuwO5Jv2ZyexNhd4VbcwvuXvqs5nY4QvZyOyu319un2gU7r2rnz3LZ bFbRZj+uHDvqo5qP+oIhay+NaE7LGnr4KKEa/D+7MdgYuT568SDTYuZ9eQIzsJ1HOPPa9bFDRlwf Sn5pXw7yr5eGxa0321+ijtrBAcFwLG93FepTUie6UuSCrFJGVFUSj5vP3ILLqd+8enLrjTfMvaHj xBZ2cuC/h1457xAVl96bfiND6A15c5bdu2X9+qsj7Nv011+Xp0+/v++eFz/ATLsUFC/FvPBBrh/R Rl9lWmVYb3g4sFPaaXjGusvVZ93vOOLqd7zpsnikEY5G+43efewP9qNu5RB5E+giVfxOe04YLMRJ OAQkytlhs4Qi5REGgngTkR31KtXUo2pGFbAJObVnN6UYlYiWHxLLMSy8jrjDI9FjZM2QY1PN1Bws 9B9zBgrOM/2g1Poyy/JftoOAg/KLglicQu1ZQUalmM6PoIrT4ya6OCPgTOrmoizLrKItfdo4c1zb Tfal25Lfps+++Z/pP9PS/975x4HHb5k2ZUnnzGmd4owhM1u6B36U/vLt/0qfpm10I72fLjh07tON D964+d4714FLL4Us8YNLTeSuPhwoOq4NtzkSRlPQNEocaZwgzTbtMv3K9DvT+yZjxERNgkJCpnIT KzfVm6aaBBPvsekg6yYCfe4AY1RUsJWH/dyecoViDevQrGyqQIWgBQuYeZAKdZDcdZO/bMcKA6Fn P6WzDu+/3ve4yxHxyIz5Ik5nzaXCC2vO3ErT/6OcekV8nEq/XZWelHa9SCvY2q/BkzMyfxV9GG8/ VvEKatlXYcgLJWK9mbPaNYi86njV9Z70niKusq9232EXYqTUPIKMNjeRS8zXifMNWKM8a4rWFz1s 2ep/0vKM/5ngjiE7i3YMfaaiL3hgiG+N6y7XXe71ReLDGMeHQancYVsRi6s8XigM412vHzZ1GBt2 EIducsEwdq8/0Znblcu6c2luruws5lykolpFsVbMiuHd1yxOS33+1HyWz7HzeU5QlkLH1DXxY1Nt 1BasDBwT1hQe8waGX2CZrKDEPNMXu/b6gfa43VFb3r48fqo9rpONk07nHZ2Cy9vJ8vZ4nMZi1Qmw jy7MvLiK0fwinuX6HgsJ34vTCdfO//it35+8quPGdemB916786er++ZMbemYM2VaR3BN26UrVrYt Xij4hj3e8eS77z65aHvp8MM3vZFe+qNja16l02ZeOWfm1DkdAxetvO3m1YtvvofrCg0YHffgbDyq tY52NDsWmm40bDQ8Iz1j2GHd4dpH+oR91l7HXtfL5HVHv8uRcM02tVnmOKa7OlxyQFrjfcT3of0j t7TEBVWGT85QTjkmJ6cdJqZkj4QxMTmR7ciJ7KhQ6VT1I/X04OTszk7O70SmloNqmJ8W/7GpTuoM Fmbnqfl78/M8sfUl6d/NT118gcCDEqwG8opVJzA1oW9gmsaovo54dLq2U7tx5vhLb3Rctf0X31L1 dx/RIel3v3jubXblzdOnLMb8XEZnDJnR0n3uJmp69yPqSO9Mr0pfl952QMjd8NBNd99zZxeoyHXD 57FXohAjbegjSuaYptbUJuRiXBSdwYqrE7KGC1LHtJZIEcpwgS4LWVhsLDePJDVSvfkqchVbKCyS lhgWGz8RbJNkygwqFYyqKioqpWGiQItWZFUUw5LsliTZYNSCeWOM/BGmYF7CWMgEQRb52QvNKitM ErGZYjD7fEGs/3NxKgD3wGLVRQXaywo0NaTSCrVLZepBVkBE1FDD0I4Cpivnn1cwA5B+X7Yv9w9M Gb+w8a8QBnV2yIPJp8DO5dAF4nV88Vh/80vrh/k5UOx1detfeim71O9VE6olQeJ8dW9OmrC9NwRG cR8RMumUQTQezKRBqXN7ZBErfXatz2oKkYiAPxpxCYL0fPpXXQP7b0i/wkbT2tLXX6GT0z3SwXOb WHjgONfFHwLl54HyLug8Q8kxrX5NKV1iXVv6V/GMKKoRjyoXD40Uep0hz1QPq/Ds9jCPxx3NL3S6 DGF3IQy5nKJOuQuO8Obiot2QHKAkTqkmsGDfrUUqhmnDWoZ1DOsc1jVsy7DuYYbwsAqIEnd+mIRd FS7m6mWbe8qGzzivJA5AUWpffibOF9x2SALojDzogkBXlTyZrlRerQcPSQU56Nrj4tpRGyqdX1su 0MrGt0eNYehA0JldkcohjGs8XEjIUHykCBSwypoRfJkpikUFR2QwEYs+xCb98tn1ly2bc9eW9sdX T0p/nLbQ4hd/UXrJpc2Thv5+F3V2x8fO0G54XTqYd8UjcxY/Fy86vG7BkeUWAxNfSf9CUi+9uHGW Kg30pdeq5vYpY68o5XrS3MxJ6UrpLdhn72pT7lI3ujd6t5Ot8qvq28Lbpn8IaqFabC62lLhLvKuk VepdkkFxKT6fy+crYaVCoaQUS49ID6u/EV42SfV0KvSk6XZCj8MFy3QN1eGHhgrSG8Ev8DZqPn+Z aLBqVmfC2jzHRrnY1Tz+BLTXYi3fWWYUbF9YZ5MviH6rYAVEuaeoW6E2JaRUKAIWtbt7cm4ZHBeM xhQ7VvGsdB74EgrsiXg9II9gOSPtlCuZkixGw1xARMI+ry+7tMMqwUou1tPQ2PTvPk//Kb2B3kgT 1PL0gsr0H4NPrf75G691r97Fci4//Sm9F3tS19EHt1+ZbFpxx2fpb9KffQ7mZNihJNJccKgdBtw6 raoY0/1i30JxoVkq9dX6JnjbvEu8Uq1vRM76nEekh0xSyMHZ0uUstNkNgaLdfInO8iTvlebqitBw pAIi1eEEF9or7Awa4uae8L/lwgssyHu5nHI28nm9UFaw14O/aJaJxkA4xjgXPcDyDnTc2ttRVrNo 8u3znhx4ixZ/+KOaCXPq6q6ZMWafdDA39mL65H/su717fnNpSHzxXLXVOfvlXbv2L3LCoUCxZ0rE 0+ipiWzRLjJIUDMKZWdIohXSbolJkiqIhTDPjGqhicDD3SywCUYCdSUYtlRYNItgEdUwRFwFZwn0 yPz9HukDCH2kTldk/3laSZhPebUS5hOmFQffTStBgkTSLWQPFFg9PCjWn/uUHR8IC1XSwbPpQ1+l l3+F1j+M1t+B1qtkhVaP1stSoRI2VBieN3xkEMsNW3DoyUCyXVDR/nqc52PydAGeARYMmypMzPTD 9hv/Xfvbs0bkQB3EJ+yogbp/ad/DwqmB0WzBwDbetqfODtzHKculXKlO2Z9rhaooGQWmGgtF526o bQKRJQmNUAwG0FUyhOU3dbVus5avWVosHRah09JlYZzI3ZZ+i2hhpiyZ+yE+s4Re9UMBtuJM+6C3 Qhf2uPDW6gJM0CktZAUYB/9E6fPEhkMi+/cQLWaNtDh9bOCwdHDgedbwTRO7dYDrtHejY3vRJ4Es 6yMYwZ7KRAJj198TLdShVu/2JYikSS1Sl3RckkJSh9QpnZbELgnigwnEwIT3KcG+93Ei9HNJwnnn KFIiuU4cvj3bp+UrBrtSDy6g7ctXQNxyd8ndtFg6+E0T2gECQ405SMzMr5lMQswQMwki6Ao20tTc UQljeNTohIrDbj2DUHsydxhycZFVg/Ev6udGrDRGo4vlinY1ZIyyoWJYLTcuZkvEhepVxjVsrfik usu4Tz1oPKN+Y/RuF7eo242vqL8xvseOie+q7xtPsk/Ej9XPjJY16lrj7exu8Xb1buMWprSaFrKr xMXqEuNqdoOoNLJmsVFtNl5quFRtNSp+Y7k1wUaJCXW0sd6qCMwsyqpq9LCg6FOVQWs7xESoD5JZ USplq7kSS6ZdYIYWgyVh4he9l1aTJWHQrEUJE78ga5tm5xGTQeAqHVOMcPVh5a+H3e8btObbafkp +9tQA3y1sMNGa2V4Slg0qGqlILoFQcTRJmOlwBBluI1gFhkzG6HHKIaQlcJ2tfTwPa6D8G3xob+8 PTvkvhkzE1KloinrDNRwZB1G4YgpbDKzXjZSc2KsNVQkGiqRyhBfrHEby3Bwr/1LmGhxe91/2+uC AfvA8oHldUE/zN04MuwnlqPxgGg/WvtDfWVQN3HNgFpiyBzfYwpzRQTLAX46r+C8zfJ2MAylnJ8p BOZ99BB2GxV6OH0q/WH6L+n/hDriFz75pkm87dtbeABPbcV8jXJZQv9Ds6qCbAgIPoPoBMeCuqTH aaoH1LvNoVaKHgmVisGtKAbBwJgiqKAXaCWIvMci77FYKb+pe642awHN1GLqMAmdpi4T6zb1m1hW /hjApfpNOdSsM2Yk1EpdoJ6f6UZOK+44xJyA6gZlBZ3UJztSIFK9roXUEmdt7fphXBeDRpflI660 HddUcIUhnOWR/gPQ7QyaruBxFWZ4BU6ooVbXflO1octUrXfsouCwhGEGLpLgFSoFTRCbhDshSrsN KcMJQX5JeNPwgUEIC+WGhDDaMNXwE2G7oVvYbUgKzxtMWcW5qjrBNFyQOq5ZyisTLMwvirsaOQ9r amRYgs3ERa/dNCSMFC4Gpih+JviUoaxIGc2qlClMU65gsxXVzXKUyWy88qjyrPIG3lX5hJ1Uvmam IlasTFLWKhuU55jM5QQXFNkfPJZZVmgjOidwyUYdW2mYtVJX+r2BPWCAMuGtb5qEw+ew7cv0dfAs Rt8GX/YarVCW+tx9fuFiiS6W3pWY01FosVpJjp0vhjZi8P7LGu8N5VXkdeR15nXlSXl22/cXxdzv LyqT7VldUx85fUnBgjK40oNlocYMKovRaIBBjxnUFR+kf6TW6bfsmvfwlKt+88ITu1ePu3JCdbd0 0Bv5cPf63qUOz8B74ovpjmHzGlqWWPA+lr76QHrDex8hZ7Xbam0TbZcqV5muMnOPcnd0v/WYapQN stFn8BpHWJusTTbFYFcdbqvb5raPsI6wXWxbZb3B/pbRtFZdG1idt0HdELgrT1a9btVss86wrrLe YX3A+nOrZA1bzG6LxWwzeyw+b6HL7qYd7m745t0kHOHkAuE8xADxcVgrIha7hVnezinqlpNyv3wU vsD1nVEajlZEWTTi+T7V8ocP2jN8LeAaevugfq4Lhe8WY66Dc85v/543TNcP4YUEQSt1ekIF97ki wjAWjTqggp+nKtTuZX97p+vFFzpuvqon/bN3V8y8clHdH9+5qm7qhIK9J6WDU1+/7an3ckfe9Sz8 P/XPtkUGtglTClrHTrrcjD0FSibBDv879Ouh9Kh2UZ+jN29/8StDRSjRHijRHn98obSweKW81rKy +H3zu1Fzm3GWdVZ+W3SJeZFzcWRp8eKha/LuynsoYnZG+Uo1JJTgUFsYCCam5U+LvpD/QlRcnr88 emv+rdH/yv+vqBw3lloK8guitZZEtNnYbGnMHxe9yrIweoPlxvyNlk35O4w7LU/nu1SjapHz5WjA GLB485X8qNEiUt9svxYIJ5b56TL/duwKHGQL4bft18zB2lAOzSlzC2QC5SJoYjCc4K7RFmz0bqHd 2BHpx6GR/xa1YK0duwVlpar/iwy8mZrLl/A1K0Wx4LBQUbc9CZ22mX7hyOqCgbI/DCryOJG9h2gj 23TrCo5NwPgK7qVbHv+yPX4iC1fET0DKZ6esrrLkgx45eWNAj6OD8C8pV20+yAOA3N+knDx1VLM5 ay1hZ61RDzae94lmNSPPUmv086DbauelAkTe4BLrGWUcZanOrwYdJ1rG5TdFdxifyTcS7tTOKt0X /KhFULJ1986IqjB8Ytx7qMget88r6pzF7Y9JNBzcvv7e+y66JNH33x3r133xDA6Q+ZT0MdfNN986 sXzoSJp8c9XdGfJ8+rP0u/TD3Ps23DAtMTHHOWz07Bt+2fnrRX9/3bJ8fnV+baKwfNG1Rzbf8qer KdZNnCSBdtuHOaxAu42WqxVihdSidsL236IqMpVYIc6bYEdPhatAXMfXGVqmGWUF3gIc8oNCjqRD sLbgJF8X28JEFjAMPJddS+C238MwKtxbCPmDCzwFJwZlEte9aTsEZjXXvelH6cnij9NTxBfPnv2W v3aJt0bEI/o6uYh7TU7vs9UqjDoHCWtmaBqVsQqajJyfesJFCcDjWg5WHSoosoYMOYyEDI2tUGRK IVdUTtUPYB7H4/oFU9rHtxhqc7CRJivoEHNTyuRSicEsFeGvZzENUlgphFIvSxMMnSrVl89C1ZxQ g4MrrUmswOLVInTgOdMp34pjJGA8N0gBvefcQoljYR00UOx/1ff6Tg2qG4PLI0UncsK8E/1alDuB uhzVGp0gt9AFdJncSdfJXXhXIhwpTiga6rHezI6Uo9rEq1fbA4kpSrsyny1VVrCblR8r+9ghRcWO j1LGwko9qxhc41qUTazLeK/pLDut2ODG5wxL+BV6DVRfyoeCRjxegQ3MEoef+1AYC4/xgbN/PRf9 Cr2amPkEpyDHwDdfSZdrS5SgIVfK8wYn5UzInVj4R/tHDnVEoClwaWxRYHHsrthPAvcHd2Bj69Xg azlmWbZ4vHLAWySXeNoCa9hdbIe8T35FNj+feN/O8goqhzuGWgq0+LBEgZZfjEsgL7Gs4FwBK2jS N7AqrLbERXmU724l877OE/PyhtIqoiE3S/BZES3XUR/Rcuy4+IOJCE5w7xMVs8U4lDMHynSIYh2i xlDU0DS3acjwmKFELba0hczbzQyaYwbKo2bF7ldwaoImOsCJ91TAEVlVEpnjox/56FTfHN8yn+AL VC1tOG9HQNosP9WeHeblK5A6wXcEoXbGoThBndJlkG7WxbP8myrPo8vbTmUTfaQA20E5eYmZBQsK WHu8jY8I+FKwwmTikwQeYVjoRSO4N9jrgc/XF+HSQobvkjuEsfuFM2R8u4Fy94/uu9S3xOjCTPwP bx7ubRZyCtOfmeyKMOHJ9iePzH7sJy9f0rKseSa9csRnBTWtjZeMr7Kb2J+HPfpA28YD6d6777wk tyZgaGpKbbjsx825heHcaeNHp//grPQX1Y2eXRmrKVgIblgPbngA89OGPfmf9hEnnPbDTbU1ORfn MOdsebZxtne2vy33K0WuFkdbRruqc8aLzZZm1/icB5RHVKPZCkONBDEIKUlx87FwmUw2YvRFDMHO IXSIvYQJMbh0SjQz7STcjxrIq8/SG3sPpwbq/joFGg7fP67DpD7FLTg4dWn7OGwiLpIXGRd5F/mX 5krt0Mt0mw6kwxk67uAt8rggVS9swqyngdtSL6bTA32X79GciYk3tN9+x+KFd8EgPf1A+mT66/Tp 9AeXt21jpU9N7dz+7P7Hf8ol5iz0vR4zIUD+S5vWamtzwlFjW+pc6r3Zf0PgYfaw+RX7K/737O/6 P5U/NXzq+tRzVnaNdI30THJO8jb528xLzcooZ423xi+skdbY1kt32TYGnnbu9PY593tVK+dYf06C w31Od8JaZeE5gSEJHWJ3x3IQZ2uNoJnTYSIaqhIN9UjVFvDpQch0EUVhn0J5Lo2QcguPWCJTYV0F c5SIOxBszZJS34WH8yv+5ak41sov20+AY7n3CzC7QoGmWXdX1iNeI3Gm454wsKI4PP036/ypS29e d3XLIg91x7/83afpv1HvqRc/Zp9Xzph5364j2y5fVv6rF3ESFt5/WriTa8AzQTvu8+J8s0Urc7bJ bcY2Z5ZbtoI1zqpq55CuIWyUkDCP8iQCk4RG8yRPY+ARVeV8kpJMnGs0q0mx2jAURl+J1RLDJl6J ZrOR4L2cdyKGQF5rnT45eQ+Xn8lyjL7ucG4Z1NvAK5al8lLjUmeWW+R2nFSsHuygs6rSB13++6wi zk1/27DnsgPpb9Mvpm6jgQFneeONczfcsXjB+m2Xt+EYtwHHUAMPMPu5zl2XXPfUkwce347+NqC/ ReAVN8mlP+8jdsyTJlPtI+qjlofsT0s7jYfUQ5beoMHgphPYxXKTceqQpy375f3BV42vmd81HjOf Vb6yWHJtuR4NEsKjWR0Jm+d5z5segbuKe2xD6nVo9QGyH2tQmp0t1g4rs/qdfCnZH8hJ0Cqn7kDN C2cdqfklWRgvy0J/rg41G8RpN0gKdyQjc5xOkLlHNDn9nNwFJoVEaLkny0TlQ+YMWTZk+xBxiC1i 0Cy2BAg+KA3jP/ConoKapbn9WrG73q8NseECEeznshoiLt5WP6CrYU50BDWcvEOopEPU4zB1vio2 GjiK/h4NTu32QzPjnUr5OEj2qMYxerIhUg+zHLc+wSUod0xpbqsGKln5Q6388XAd++r1V2Xa9G0K WHOwbat0FxCkBZy9cjQMVYzzOBEi+ka3K6uP+dg31D/i093pv925lLrfOkWd8oAm3DZ37GVFwtrZ V9TVUTq9/NHH9933IXghnn41feTmzRPoNTeuGzfuei43/JgAf4Um7yW9GnzHtFQM28OONrHLLxnE 5/3M43Uwt9PrsLpwRsqKTTM7c6sGm4nOMWXgROQDYZSpw+alGS/18uQQO+57GreWXW6jWlUPQ7kF foJie7ljjoM5eqmoWayuGHPPId3efi/zcp6A+uIN+Nb2saXZ4wBxiFR+8uhcO1S0wAnih1DlHkgE 7FYur6204Te4Drlgb/OFyKfwBcfjqfJEYfRG/dtqH1m19vrYuDEXVf/hD+mT28RYy113zCh4yV47 rfnDcweEifrcT08TO3QNopxO0eatyVufx5xmS+fwuyxdw8UwhXUmVNAqViVodBwbJ1xua3O3Fc4u mR1vK7/adtZx1uUcbanyji6uGgqzxNtc3Dj0tHnAZ7wHa7bJbDGVmi1FVq/PU2YxQ3H2F/AZsE+f AfoEsDp0JukxmbOwuDQ7AeBV1MuHJ7ITQfXk6Av/HBwGWpkK2Yo4sBrLOMFNHsUfkEtLTLGgnwsd NRAIBu8dTodDBPXixbOqgogzUHFB+vD9SC5/7KfsA7riyxergS8HPQjn13/wcw8mts7BGBydfSnX TvmusK6iwmo+v8Qt1+WWbal7aeHikkXxpeWQW6TdJ3n5qqav+9WQ0YMM7KuOwNhm0TAUhe9vHN9A Gwx5xbOvqyl0WW7pf/fmeZQ+/3IXVcZ0Hro3/fc/n7u9Y/E9G5YsvL2paKRnSMQ7PHrlY8/tu/cd aqLBXzx47uLDB6+q67vHym5/5qeP/+yp7p+CAX8Cfb0Nct1LUlrcRkN4pQUDaR9Lxzr+k35NVUXy SgWs1bHEIUHJdrkdTpfgZtTGiZonKPCSuj1GKP0mY8ygauGCxG6VZqBwg8xQcb35BYkt/m4/6/Sf 9rMv/Dg/5455uejTbKjb7aGnPdQT8NVnxT6cMtyeh0aG2JnBlC7/uVl/CjT16eqVQbdBsMvjAEtj Fw2sjO0OMLbMo/TZDUfmbpualz4ZnnZR03VVadjqAx9vn9C54d6B+9jwnZdVN268a+BzdBoC835M xOcQ5WcA1/QRFS2rdxjrNbVFZV1qUu3HsZMvVCmkdqjr1G5kSIKs4ICggFVM033TAmmHTiRLOLdk ZArWTN47NVKQEAOGwX7pvcquY/r01LcIdMc6lMQV/OiFgyLgwF/6JN6Y2U/F9LlvJ4mxbz/ACG3E CM1BC03kf7k37sMei0P3NWo3B8oSCpy/LrlIXSTvNj5vfE19w/iB0TgDVg2zKH61Sb7UsFqW9qsf iafEc+I/ZGmKMsWwSL5ZvFt8TNwmPSo/qjxqMIZEpxwX41KpXKqUGsotzWKzZIROCleBwSgZ4e0U Tdg94QcmTSaDYhSMRpPYy67VglK5oTaEvYmF2IKI0S5CQ2hwwFx/06CKzUczgHMnfhyj4P5a0EB3 0GT9tgacUDLUnZ9NQua1lBoZ3FzmzlqyAho1nDTcR4t/xbERByIn0svSD9I7079P/+N2eOnO0NXp Hw1cST/cmH4Oj/5uNGfoOxBaCR9L7DewLimJd6SOSl9ktx3WSd3IwCYLBt4InZXySayPGg5j/suo 6UJ0hd4WjNHgLsMt2GXYCqlYREf3kRJgt+NZWIXMHtlrTggJQ8KfiDay8Ybx/saoGR7RkhlqR0lX yfaSJ+Wdyg7zPnmfOVlytOR4iZWUlJe0oOD5ko9K5BItmJuoR7pLL5SUiKgE8/iykTIq3ELShoiK 3eEoysnNjRUZwXo2e8zp0C6r7nDQZWCkXtak2YI5sbxc5C3LpR3YS0Xe3kLsCHKNK0VIEXrbY1Pr OdRGoN1FqFqkNSDUIRQUJYq0URclyoveLPqoSLAVhYq6igRSFC6qKMoUiUWB4r9kJ+ygGxUrd1ZW 1uFsQRxL0hkYqQDnp67uqocIhXDUZSPouQJOeEzguCviwRz2+nQrCS/NYLgTRRem8nez+hYqbO5f 9FBF0xNXrHqiGHM7r2ja6CXD0ieH1I9oWFKWPinG7ntm5qxZM+dc0bh1oI3N+dmwugmbH0oz1vTY ZUOb7nhk4Bz4AztDYhvGzEu2a37F5XNdZlhiEPF5BYyWvdHQaPvULsm6aHMoVotsNpmgqjIa8xJd tOHTTrjJ/5NoM5piZjgyS1Lwd3K66hLOTE9jlfuhhOOryr8KuezEOK/l4jDqd53HNmdW0Ilt6ZMF 02onroxDUEib32p/dGqIDXlu4ciWO1LpkBjbtnfckjtu4nJtOvTXR9FTC6ydh7UJn9CThq9cX3nE V9kncFgHpIDK2uyzXbO9bf6H2VZ5q+Fhc6/6Dvuj9Cf1HfNJ6aT8icW+0/AG+638a8MrZmmVYaN8 h0EAb4ELTT5OIreouGuVYEdOJ84GWSPkB+ZJ1sjLKu3cwOOrn7rUvgg6+1K/SNux9GHvOuFEt3D8 EAZeQazwe4eipm8a2PY/NJH+zec/SX+1iYYfuu66Bx+87rqHWP7dVN6UfvWL/0n/+o7M0z97+unu bU8/zfu7OX2N+DD6a4d98qg2bKRrgos5E0KtpdaVyGkUJlomuhpzvs5RuY173m45o3ydg29uyN+3 Z70mE97ZOm/POkqsVlvMbtcNFdM/W7STT+EAJnaj/sWm5ec7KF/vuU37PTuFn/rwcE4fPLVUxE0V 7wWjdjOVq355VR9l6XN9rfdOxRB771k077a75i/egKFtWZD+z/RA+kz6/aZZA58KfT3P/rRn5xPb wZDrCRFq9L4/rRU/LFHVSmdIi6RVklDubLUusXY6RaNqM4fM7F5zxszqzVNxVLiXrdFKFAX8LTDZ WExUu1oB96GoBtc5tzvZHOc6527nUafotJMYtk6hM5kY64LLl9GAo76P5maVUOigF9j5THtgclYN xWIN0VCL9+M4KZbjUwA+nBWq1s+/VI7E4IO9s5TIKqSyg3Zzjh53dWNH26UXXzR6erkYe/jqxup/ DGvYlf4f9LEC/GxHH0vZi1q/7JCjhiKfwxfd6tzqfrjowVJVcTe5mfOQpc/6auTj6FnLmXy5xDLL stDyoOlh5878PrPSENUKGmOL8xfE1jvXu+/Kv71ArYmNl5tMkyxTbU2RsfCFFxTFaszVEe75rS5Q ZKPkUCN+S5E5Pz8/qhTka0OvN6913+BZXbKqdIPnjtJHPQ+W7s3fG7V00Xt9d/sfKX2mNDlU9kW8 WiSa8Gq5+BKLl34Elb/KEGkpvLeQFWr+vERhkDuzNB+kbstQWjGUlg+lQ4dEKuzUXkUjukYLyaxD VMmuS3xPLhBf28uX1XOQtrrnalBN0s8m8e2sUyS7lGrV3MdKvTSWPyLSFJlJ23wL6FLfGexx+pgY jOSzYpfFzIqDc+Cxbyo2tQRpsMmlwGbAf9a5yh2scLkvz+kj+Zk3eqBxR3qzED50bEYU8PTxnlAB DlMCYk+Cp7UcRK620BH5TflbLQ/kv5T/dr4cyTdbRBGn1bI6Pani2n2Pr6weUDcA9XR+YdaFmoe1 j+iHr1uo2IFjbacpXhK26/sNol7T5UVNSrXJ2MeeI57G8V90wavBXPBW+TTc16fBqvRp1TUJH/dM +rTCElxwX5svpDsBRd+soAbF1BakLcFMkA12Xt9yAG25G4XbT/xUka7wc5uUE0Mv07eX+VlP/Nqz JygKMr/RVJOz3laMS6Q38/l+S63Zba7l0ZSZ7zp8tsdUq5uu+DhE24VTjPz0O/yBYLrsidEfbB/w 90dhD8QqaNB53fxrawrdnonp5y6/5YOPP3i7OP2VY07rsopwboy+0Nb65RfvD9Dy+PRZxbnlYY/b 0Txm9iObDt+zefiYsSFvdIgnd9Gk5rt+8ockZlEo8wm7T/op1oTfaSVhAtPNWGIbZZ1kbbMpAQ/x C14P8Tld2J9wwqnuF1TFqJhhMFE41H3dvqRP6ADohx8VJmoKziMsBD3Ew9+bgW/HbMIhiXJCyukc SAluxBb7hZjPOctT797u3u0WOtxd7i3uo+7Tbom47W5+UF6EW2tt93mPbHOyBnJitH6m0J3p51sQ 3MLFDoT9S93ChcsQEhdehRNQJRxVgxZuO4U56+Ymf42PE41vyTii1VXVhQ52Y7+pKLdokn/ejy65 sdak3norDYqx4+mZt8Vzcz4orZo2fviD9M3jbz2Z3gj6/BhSZgbeU/eSbZrvUsdix0OSoMoBuY7V OfClI8dJpuiWj0M0eYnR44bxDgs+5vFgO6UE7mddS8ia+f8XLUE1cAGgqwcGehrnIn6oHnxfN8gu MRfU5qx20J51d+GkMbQlvdvYskRUmDLqyNKrd11CA6Hp9RNWlNLA9lnzrtz1EOtO+48vHD111Qna D5MC/TRBD7oM/TRRbKJIxcHyhMIvMr8Y+EXAodYeQN2YCQdHJR4VqYzjIwaj2QSLjTkFvEtlzCdl pldNZszt05oXfiojkUxuEjDhMxSmBBllWk/UrEjaa6QWs34vk+pL4ASrSmW8aFbPz5/U6qepsZvj NBEj9oVUFQfaZcTVWu451fy5xQmTJaSfKBMt2M2yG+uNU2GE9LIKzSSyWhOculNFAUdPKqCgdWk2 M768Fubvb9CA+SXwVoAfkIj7J59qh+LVHtDPveppXT/lyilefoHFzk+1Lo9jwcL3aPgvggOrPu6m d8EAOZCeSYteG+WTrfbXaSQN6g38ed94b1kZG5KlqQp7YCRoaqYfasNBWXzNhhkVSc0hXjZEdEhB xa0OMTrMZmdciMtRU61QK08QJshbha2y7j3W1gy9GCQ0iaIkqiajaM4hQdErudWA0WM2R0mxWCSV qcXGIvNwHC0eozaRi9nF0gRlorqGrBXXSNiKN64xrycbxPUSNuSN683vk/fFd6R3cB7pHfNn5DPx hHQCZ5JOmL8mX4tnpLPKGfVr4xlz2eAYwQ9q4Z/F6YEVhvHv1zyImGAU4dyQDCmsgAX464H8VMn5 c0Nco6/N2fuiSZTCvZnJPTLODPVmLtEqBWIOA0sw4zSdaBYko0lR8aExRZFwgpkPsH52iODAUz28 nhhVA74gx19vk9m1xISg4d0G694wDVhe6qPBrLIRDEweCPoHBoKBAX92FNGY7DkgfuV/eoO496W2 FlcChwEGkg8s5Dfh8nqvSbPUoptnU5Za9PIshLVJM/Oc0xDWyOEAqeMpjBDAedHNGUI/uMu5wsX/ aUQQaFs6SR2vHqC2PW9QT/rZ9N8P7AVnTGC9PHz7AXt2YBbmmxnzrUOfb1u1zcXKayLbqvTRP9F3 lNMWHKwNin4Zb4qRkYYJeFnkR3SVYozRuDKCjlKa6CRlq+msfFZRC8WYUmpMiKOM48Qpxl+LhkuM M8U24wLxWuNaerPxAfEh5aDxHfFPxnNGiyAqMN+9eGup1Fgl1hubRNWDN+BGGacYrzbuFA+IvzGe EVWcsDnd4/TzWX6sx4OJyRdxj9mRoCLefuQjB4B3QnHcCyX7S8oSGf0Y3XHN5i1ICDGGszdMlWQT 9jP14tM4/Mnv4UOxKUYknG2XcJYRGibOkZkIHHPXpuQqlfsOTIaFUy3bLcdxSlTg2awKjtJrNSf3 ikKL5ycFRLLwu/m7HPP3y1MBnHA6o8dIedaVgDHnO7Lx5efPrGdj4APdD+erzXL3PmMYjMw7mHUy cJ7gS3L78uUrwBvLV1RRfVxxBdPSden76KWHX6GT0lvpxvTOYx+wKBPSf6IFaXXg93Ri+gCXolb4 RadjVF00sddZLFEX77rfDL+6F851hV9kfpG8yGN8RoUgSeEiEC0mq2xnxCWLLpzmE7D5I7s6oAD2 0t0QgzZLubWYhD0Vng6PwB1kfFLmxxK638yZOyTh4Xv6tYLmDyT4ibpeWqSpTE/hRA1POWkt0XJH JAbPW7i5FNSF4OSBAEQhl4bZ4/+g24rJ9i/h4zzVXp6dS5CE2bfG9FmkYDeTUyorEdubk3Ys0KOw QKfwWcCDGYxW5vQeAV8I4uf99W0BiR+ygI/KZXcFcHH663EG9HQPEhymkM7eqy07iRSrALdnEbeC aqzwvp+l0fTGcYXjLl3XMm1KYGz1vCsDmFBW9vdzrK993kX5jj9Zrm8j+OnvaGBPoYi8x5P/8huO HIE48B6BG+ec/NB5sm8if/fmcYn+1nEFGY43O6vJCHzb5CLSSMbjO0UX49snE/GBw2Z8E2kKmYov hUwj0/HNpln4ltOl+CpKG96svhzfBeFc4OQMix//ahRpmDRpUktjvGHF0rnXlI1dds2CyTNR9H8A GSVhXAplbmRzdHJlYW0KZW5kb2JqCjIxNyAwIG9iagoxNzY4MwplbmRvYmoKNjAgMCBvYmoKPDwg L1R5cGUgL0ZvbnQgL1N1YnR5cGUgL1RydWVUeXBlIC9CYXNlRm9udCAvVERQSlNTK0NvdXJpZXJO ZXdQUy1JdGFsaWNNVAovRm9udERlc2NyaXB0b3IgMjE4IDAgUiAvRW5jb2RpbmcgL01hY1JvbWFu RW5jb2RpbmcgL0ZpcnN0Q2hhciAzMiAvTGFzdENoYXIKMTIxIC9XaWR0aHMgWyA2MDAgMCAwIDAg MCAwIDAgMCAwIDYwMCAwIDAgNjAwIDYwMCAwIDAgMCA2MDAgNjAwIDAgMCAwIDAgMAowIDAgMCAw IDAgMCAwIDAgMCA2MDAgNjAwIDAgMCAwIDAgMCAwIDYwMCAwIDYwMCAwIDAgNjAwIDAgMCAwIDAg MCAwIDAgMCAwCjAgMCAwIDAgMCAwIDAgMCAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2 MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAKNjAwIDYwMCAwIDYwMCA2MDAgNjAwIDYwMCA2MDAg MCAwIDYwMCBdID4+CmVuZG9iagoyMTggMCBvYmoKPDwgL1R5cGUgL0ZvbnREZXNjcmlwdG9yIC9G b250TmFtZSAvVERQSlNTK0NvdXJpZXJOZXdQUy1JdGFsaWNNVCAvRmxhZ3MgOTcKL0ZvbnRCQm94 IFstMTI0IC0yNzQgODAwIDEwMDBdIC9JdGFsaWNBbmdsZSAtNiAvQXNjZW50IDgzMyAvRGVzY2Vu dCAtMzAwIC9DYXBIZWlnaHQKNTcxIC9TdGVtViAwIC9YSGVpZ2h0IDQyMyAvQXZnV2lkdGggNjAw IC9NYXhXaWR0aCA2MDAgL0ZvbnRGaWxlMiAyMTkgMCBSID4+CmVuZG9iagoyMTkgMCBvYmoKPDwg L0xlbmd0aCAyMjAgMCBSIC9MZW5ndGgxIDIyMzcyIC9GaWx0ZXIgL0ZsYXRlRGVjb2RlID4+CnN0 cmVhbQp4AZV8CXxU1b3/Offe2bc7+75nssxksidkIJALSVjFCRAkQWLCKriRAKJgBVzRuIBWrYo+ tJa61TIQ0IAo1Ip1qY8u2qpdoBaXZ6WlFa1VMvP/njuTANa+9/nPzNnP3c757b/fnTWrrlxK9GQT 4Ym0+PKFfUT+OFn+88Vr14TkJlH9ghDlO8v6Lr483zY+QYjqyMWXrVuWb7tshEx4dvnShUvybXIa ZcNydOTbtA5l0fLL11ydbztYectlKxcXxp0/R3vy5QuvLlyf/B7t0BULL1+anz+PHV/Vt3L1mnz7 AjZ/ed+qpYX5tBP3dyX62v2T1U9wJFxeUmokhKInQv5BmshWoiAcEUklmU8I96pwLRHQZuMKQrYd 7FnRY2r6XK1Ro4OQx9rve4qVh3W/3J7jh48oL1ZTzNbI89kAjlM+OfwAIcKbOT67THkxCRMVGxj9 RHZ3WUwTA/wSzK1E3oyURuKJCXkv0lakQ0gCCfLLMEtE3oy0BYknm/hlgxpjjTTEL9ttuqZmH9/D bdi9JGjaz11PKH+RFP3jkuAR/5HwkciRoiOVR9JHFhz5TH3EcSRwJHik9EjiyJQjLx0Zog2SWX0k +mbDm+1HZh2ZfaTjyAqVaWI9Pw8XuwCXnUdCKCtRKoiEWhq1jUjbkXbKvZX8XNzUXIzMxU318h2k D4nDcR2kCklCakcaGdmE+lakR5AyfIek1zZzzXyaS/OCpXLieNx8M1IP0hakg0gK0sttJJuQOIxt lFuHUB5DEkglt4FsROKICTlrpZGwFnLvTpTHkFTySDNqbLS30Kvgrsd3I74buA3PVfr7gg1IQ7Rr d6AvuI920veleF/wpfa+4PTKvmB1tC8YwUAQcyihlGgoR9TEyTDBYlZLE43cHM5BFhMDZ2E5nSbn ATn3SJ7FhqOLDT9bbPjJYsMdiw0diw1zFhtmLzbEFxuG6IWSZ57h43mGWfMM0+YZmucZGucZ6ucZ auYZkvMME820C+BrIC/J+XQ5r5bziJwHaeduA9EM0Tt2T/lu8ABdQKZwT5MgbWTN/bSB+AX6bPCz Kc8HV4SHWHWB/+Jg2o/q7mCC9ewOluaLKOt8Lji3TlOnGbP1eU6JldtKn5caVFsfU229SLU1pdo6 RrW1QrW1TLW1RLW1WLU1ptoaUtnUFrWoNqr1aq1arVaqBTWnJmrbUO6YlGDIYFOKrFAKLBfkusix OjLkhKNqjkwnGSs/g5sxZxKdkTm0mMxYFMp8MSc6RLWz5mcU0Uk0Y5lBZnRMcmXGJGYMqXKzM42J GRlN+4Wduyi9swutDHfLECUdnUM0x7pu8mYsLZ37sFclN93hZeV1N93R1UUca5tdzZYJ5tTk1m/J euXO3tbEmY/rTBW1Ge3rDpIg58baBOnTcv6U5FAFM6rgj1TB81XBqargeFWwThWsUp05cMYcHLVV PmqrfNRWyo7amlFt/ZFq6/mqrVNVW8erttaptp59lMufuW/GnM7MU/6uTA2r5PxdMzLH54QW4Lmm cHPaWvcB6lB0de7jJpMpbbPl/smtXV0zsJXyPG5ufl5HYZ5W4uayedxcrXT2PBJAf+s+EmYFzqeV SEA+X+Ab8/xcB5tXxIr8PL88z1+Yp5avu6s93Na6K4wMc+wgvPKcdjuRr8nn57DhkTmqYyQszwmr jv3bHH/+PP/rnKJvnXNmCxJLJ53V+Ldq2woGee2du9RkUlfLgnzpEPsmyFBkSE940LufvM1/QnSJ row2Oimji04izc2uhNhEK5X6jBJdKiQGc+PCrg3e/QKhT8iz9eg2FIaSE5MT2RBwgZ3IiG5TYci1 YVzYu58+URgS0W3GNUbv1NW2ojX/W73mytVrVuMmD8h0LwiKxq3uIqspelevwYckVuMwudXSuR98 pIfQNV1ARiJ8hHQ38aIM8ItIgJDc0UJ6P7shP54dzuW432Ly7EJCIddmkw5yCKkDIx1kJ51Hfovy UvIIcp5sob8CJy1C/VfkuxhZSsZTShdwHeTPpAK4XkRMVAWCXkJw27m/kx3g+heSX9JSkmL1XJbE cN455FHyBrmKrhf+knuL7KYS/6IQJjoygfya0xITKSdmksS1THQ6FxQewxXBXsjV9Fq+h/9B7ru5 00RJxqvLyXPkTaoBafm18Br4ehe5hhpwhJ+sIs+Q18l/kxM0AsK6GWcMku3kKEajdDN3MHtD7mkS IrWgR/eTQVrHnxB6FST3GvrKSTXpI9eQTeRGcifZRg7jmGtzwdy/QAQ8eLrZ5Fayh7xJfkNraSNN 0XXcRK6f+zN/Ff8m/1EuTdy4Uoy0yWu3ltyAu/gEctAw1VELLaNx+hRXBWwe4OfzzwhhYZowR1gm /EVhGv5z9oXc7bmnc78jE3H0RnILuY88TYaogrrpOHozHeb6+UlYJb3QLNyA9TWRbrKMXI0rfJc8 Rl7CHf0SV6mmF9Jf4ft77h2+RxCECcIruSm5i3PvgYsFSQJrWkPqyVhyHu5vObmErCffI0+Q/ZC0 jmL//kyLqUTb6HQ6n66iq+mPOcopuMncfO5Bbhd3ULheeFr4WfbLnCvXmDuOc43FvU7CmXrJCrIa 31vJQ2SQPE9exd28D6hwYfU7aA/tpT+gO+jj9F1+Dr+V/1wgw1uzE7Jbsv+TOwLOwDhEFWnEudKk E5LZQrIW93UtuY3sID8mv8Bz/Qlr+AXJ0iC9iF5J76e/pcfoP7kE14PvZm6A28O9wP2M+wu/lv8e /zD/LP8RnjyY/W1uSW5t7hliA/wX4z7PI4sArSvIVfLZbyB3kLvIg9jhN+Rr/JF8TP5GTsl7JVAl 1eDuW2g7oKcbV+2hF9Mr6E30drqTvkh/Qv9G/8UJnJITORvnBfG9mFvBXYL7+BX3O+5ffJwfx4/H kz7Cv8L/in9PiAljhUlCr7BeuF/4sfB7BVEoFTWKDUqH+ufD+7Izsz3Zh3G3sdw6YiF+wGACUFiB NRlLLgBML8fK3oH7fBoY9UdyDKvxEfkr+Qy7raI2msCe19A67FsLXU430E30BroZ3zvpFvoQ1vwZ uoseoIfpm/QX9D36e3y/xp37uQgX5Yq5Oq6Rm8BN4qbgO42bx3VyS7mrISpdj1W9D9//4h7lHuN2 cHu5A9x/c7/kPsb3NM/zSnxVvJq38zG+kq/ma/hafiI/hZ/Od+K7jF/Pb+C38Hfz+/h/ChcIS4Sl wneFRwA9g8KfFfcpXlZ8ohSV/YAc9p2XJzz5HMJOLVcOeFzLxendWO0IrSQmbYq8QcvJH0gHt5He xrXRT/if0gO4YyU9zpnJJG4n/TG9hI6nuwSlwsaED4j0F/KNXC3kjp/RI2QSdvEu/m3uKP0YEP89 LklKebAAMoW0UBcE2X10JnY/CogjXBj9T9ODgMIPyVTqIU/zMyHfHeElXH8vvYas5i4i3zdR7V9I D/01vYHvAkR+Rq6nV3NF1I81f4nv4V6hE7kYfYRzcUnaThrp59w/6OXczVjP6+gV/Ms5P/cbYNjd fFBxfu56UEmT8BfhL+py/jy+lWsfBr2ls7PXkK9yHOYfpFOAGePJz/k/0nb+Um4SPUF44Wf8D07f P/wTRYq/mztOHyAp4aOv//D1T/lI7tJhNWmBxhPIcnRmbj2/RpHl60iDsBj4fS0ZBn17Fc/2BWBs I2jMMBEBQzXkE7qTvE6XAzfMoC4xUFYIl8C9EP0V1wnIUwM3zgPNkejj3HaipW/RGYAuvTABlHzv 6Z3QVeropbQq96hwN/8Id1v2EvIj0oX77+d+Qv6avYe7jfvt17U5Dd9LnqFBrGsZ7eD+RTblbiQb czcDBv8JCrAFPOp+MlFhA+W9UzmJ/76inkxUtpA0/ULwUAX/a2lmV+e8C+Z2zJk9qz19/tQpzRPG N40bm2ocU19XW1NdVVmRLE/Ey0pLimNF0Ug4FAz4fV6P2+V02G1Wi1k0GQ16nVajVikVAs9RUt4W ndwbyhT3ZoTi6NSpSdaOLkTHwrM6ejMhdE0+d04mxI5biKFzZkqYuewbM6X8TGl0JhVDTaQpWR5q i4Yyb7ZGQ0N0/qxO1O9ojXaFMifk+ky5LhTLDQMa4TCOCLW5lreGMrQ31JaZvHb5QFtva7Kc7tJp W6ItS7XJcrJLq0NVh1rGGe3bRZ0TqFzhnG1jd0GVMeAZM55oa1vGHcWhOA0fa1u4JNM+q7Ot1RsO dyXLM7RlcXRRhjCZJSFPIS3yZTLKloxKvkxoRQaPQ24L7So/NHD7kEgW9Sb0S6JLFi7ozPALcY62 jDmB67ZmnOuPu840cXIITpvPHvXyA22uFSE2eWBgcyjzyKzOs471htkZurpwDhzLxSb3DkzGpW/H VlFXJW6O3T57lPxDLY22sZ7eS0IZTXRSdPnAJb3YEM9AhsxeF97t8Uj7cseIpy000NEZDWeavdGu ha2+XTYyMHvdoFsKuc8dSZbvEs351dxlNBUqesPZlaVY6fyYXJOns9qM2aPLSdkdRadlJMDR4hDu pDOKB2lk2dJGMrC4EauOTxfFUZkl2IYVGU1L74A4lvVjKWlGEROjoYHPCbY9euLTc3sWFnqUMfFz wgYZcIwCWIYuHKlnEolMPM7gQtWCjcQ9TpDb9cnytUPcw9E+MYQCy0faO3FY19hKrHk4zHb1tiGJ LEIjs2lWZ74dIou8u4lUCdGW62Ujh0ZG7HPZyKaRkdHDe6MA3z1MDST2jLp49GcSHda25WMz1PG/ DC/Nj8+YE50xa35nqG2gtwCqMzrOaeXH2YJi3TBWqGWsLZ28l2OgjRrn5eVRQOKC+aNT0OjUZ4QY fkoZkpcMqdQARbmHhiZnxN6p+bxLGw4XEOX/Omgod5IdJRdnDis8RmZsonCj+dvOjDunfc7t6Qf4 GR0gNNyMjvkDA9pzxnCL0Yw6BiDLKGMuohaHATAh1ElTanylS24oYlR8u1KeqYihZ27nKW9YBEkJ hzNi4i1szf/HWZS43rlnkc/B6FNGJ98HckwwxjImOTfEMhq5jqYzlnHjLsUm9en8/R07KSN2huaX ur2z17sQRBBPgx+704xSXhfcKibq5VPhzLiEKP9wTvw6gHCZdAI/oFfXdQx15I/8iCMN+Qx8MRWn jUuWRzN8MZFroeIofuhh0BTqBf7EBhq90XDXUC4H4GZt0GauNxZiwwO9qEYzc+JstDjkBR73Fnfh MJ7NPT9BsfIZVWwyu1U8ODYGFevIauBWxZircm7nW95wF5atiYonK6fuNmnnJsI4faYjjjtmD6eV j8N0HK2OncxPbWrKtIMif+tVLPLlbLGMXV4WcyyDn2X0Wk3iv10NhOkbl8sv6jcvNxk8cmBgcjQ0 eaB3YOFQbtOiaEiMDuzjF/ALBvrawN3yJGMot/82b2by7Xiu3uV0LAgjRybtitJbZu2S6C1z5nfu g1gWuqWjcze0ipbeSV1dSVhOycVIrBwW3qQrkUpR/xTpaaRWpB6kE0i3IS1EOoBUj/QV0hGk3yAd RXobqQ/pMNIlSGz+y0h+pDVIf4aVFokMIr2D6+DcVIP6/yBBP5b1EBSwgivJiyhD0EQYuTr3w2xZ BFowtHf5o8Ds/+2jgtx09keDhlbu0J3d/R/repgEjdD1REhlFmKFLmMnDuIkLuiZHuLFcT5oDAHo diH5HGE5t2HeheRm8jj0ch9fIxiF/1LF1as192sHdBfq7zPcZWw3rRIvMReZj9nG2n7kyDgfdY13 X+qZ4d3iW+LvD3QGL8R5OHIxduZimMZ56L6k1hw2x8Lm8MUCOR3iD52WFORrEhIOYZWGs6e5LGwN XlIl2S+xXuLkTCKx8J36f6gfabalbZztALeZ+LkayMIwpXzRPXzqOKwq1VWQyiPF9XVjLJb6uhJU GmprnA6L3cYpVfjSkMmmf2PnLEXIbtAEL158z/Lz3IbsaavRJEI9O/Sn1/5hUliDmlD24RsGs0e+ vHGhGUtL6crsW/wArYClPj74BKHCEC15DqZcuoS8xsF+ulfzuPay99htnDh1glQ2iSfk+whTZVS+ F+5qaskuLI45vBpaMfxOjcdmtuKspZxK2AZzNE+KJStP/JRy1E/+S8H7Obfw0V2uxPniqZnHRTwY TjnchHOqwmOEbZ7Tj3u4jVdfjVX6FAv5D+FL4qEWKTmOXOBZ5rnK8wB51vMaUc0j7WbuHTMdR8aZ u8wrzOvMA+anzPvMQx6NRmN6HhK3nujpDySjqNebTFrxJY1o5jTqIW77HqKgCsUQxlwoOU5LX4Kf Apfz0HbRbBNFs/kFmIdLiQ25hxclPVGoNXrRW2oWRedB7lKi514BdFEMi9zlz/rQK3q1+zkVfQeb BcMX0qkP3C+7TtHjrCUeIs1NzaeGEyc2KyoS6mvFl2Wuk2gab0lVuqj498ruU4mXGSM6qws91VVk RsY3Z0amCEx8HyT9L3eZbY2NXbS/m3T3Uz5cAyldGQ2zTWioDVsV+f1oGMP/12ka8tnC4eHLWE5D f87+3q7VWxxB4cuvF5hFe8Ai2gJC1QVKq9HsY/6ZpwG331cooOF8AZN9qSFlLNWnDtrofNs68w8T P+cOl/40/pOE6jXzoRg3YHvItjfMXxXfHL8v8WjpjrLH4nsTqnJjwhQXy6zqYoNiiLtsL+CnXQcj /oe79XrvEP1sj2NKVEGZ3V1HNw/2aKl2iHta0ldYp7QXryzmij0VbjheBtsDNHAAS0ww0UA379a7 k/vpJ1SNhWXgcurEqe4T5wMfZp5ABmhsHj7e/GHTcJN43Gxxphhckm4YynWjq+bKndpj19v08Rdz H5Gy3CckAUNMee6TxvwHxop+0p1IxMINY4BLWFAVoLAoNoGrryuORoBTeRhvyA8qlSqioibuJoNO dBitvPv0W17aSosGLi27dcUVr1TYQkZr3cx3+2/YVb36luxtf+8YrzNb9Frxyu98cWLVqu7Ki274 Tk+ZxRBpW3rFM+vHrt/Ql31zJ6MbrVj/U7A/xkkF3S4VU55YTB5T1FRmKidJocLn8ZVrLSRRXh6n Fckkp9EaRLNliLtK0gWnmIppJFpcFieFNlFSrUYJbQ3t54JTPW4HNLl8PRoJQr1j8y4ITrUkOc5v ttjMZkt5PO73emxer8di5vhkZdzr4avKy91JQv2JCkmjratAbmqukLTm5gpN0mKxJTxuzldWxvNm s5jQRqJRjUarxqnvlbTl13kTVfHeOBcf4mr3co7BZAL3uno3lzAP5Q4Nuk3N5v3ck6SS1u+ayKhK AmTlOLaTUZfmJpF9saHyt5ltbZMllUhUJlA1W1KU7TNLmysSwKTNFa7E5mtfZr6IbnxVYlMTS9VV EE/3elwmTXNyKPeOZESlvBSZx2XW5rs0qJSX5lsn8XCBZouIjBvKfSkZcI8eF7JyltFRU3MiwYxb YV4GlFHMq6UyjDAU/MYAz0cp/6/hdwYf9dsi4ezPGDZK3LQvZaz84Z6JrMy+wvJHpWXB7EN0c/bN EfTkPzGbbYGvXxppwwq7ePhhUNMewMpBwEqQlJFa6pUCv4l8VcKVVY+tbovMqF4T2VitnJb8vnnQ /LL5bTMIXe6Q5PLH6lyUFmnrtFMpH6qNx8tcbl+Q5EFkikatgG7PwGJycGptdcgkVNaVASQIhX+a msIhf01trbssoVFz8UTC5VaTulJ4XiuLLA/HivSSTd8c0lfp2/W9+j69Qu+pp0PUJenjiRAscu2k F7x/iFsqaerAhuu0l/TlaSTb8OMMlRMzsfGjdHK4qbnpBOgidjvFyCX2WN5yHJTfWGC3EdgdA02U NCWOSn0Rrq0dyp3alXQUcLqbrkp0k/7umHVkY2RKqXIweslQukAyabimoYHheRi0tFCjlrf72YZw 4sDDfX3LF8xa1dk0bfh2ecfG07JFT3RedWl2z9v0yY57O55+PPurjvw+bVnW+8DY0mvOm/5AT8TJ qCvXMOX6MdMuPe2Yc+O4xZcx9nIC+/aevG8vSP60QtJPM0v2tK9HMVs/297jW6lYZNeBz5jEPLJO +dYdAkK7XXZYZthueYJTwYX8eabldnFwxIshcCmaMO+HkU4EsgHkRQYBjoZ6Iopildgu9op94iPi MfGkqBGH6HOSJgT+FdLeeOHoviQSx08kRvhWU2EXGIolZMb/b4xnhAPl+RF/9dvncp+3s8fkFf0u kCAkTDjtGAHp/NKxFluf22CBvAXr0yLMkyympmATZyEuXSqM1BCmQONDu20pCt3wOVNqaXhtmLOz B7sCoD2xZE7JspIrSwTNGEOjUfI3zmtYXL+44dJJffXXSpvG3910fOJXJV81mg4m32viGiX6egs9 r+nCpqUS3xCZHP4Q+NxCYOYnNeFQOBKiLbWT6ibWj1GNlFIjxmtGt2ZPcIpbExzibpHcPuITfZyv JuTzBYPaUNAdomXxZFVNrUxuz+DVObsWCU5twSmFptbQ6OZZaiLhsJ/U2Eg4RGpaXuC2kDCMifjg EWtEezOhoeqamgjobDBoSbhqEvEI7HZlbuw6Z0poUonmZknSaNRq7GWrNjXEDe5pbElIuJGXJG3k WKivhh6toTX76UUkCbCwBBgRPCRprO7mpBQwya1BExroHTQ686VvTKE/P3vQ4Mi39bZ8qbPkS7tP LkFlMSA5DMhAE+RTgaLKpTMol89iqpikyf3cT4kEXuGvaqTHGqnU2N7Y28g3vt8WSoCfiGEJAJGQ AdfirmkmgFYuVABeAaC/dLAVs/Zzv6IT8hIXyEh/4vMm6haZxOUSP6CsZ9XwMFj7Nz6nuvs97hOu U54T4oeM6oywnBNgOnnuc0Jk9TwDEhnPSVSecB/frGasRnHty+Asg2y7oNgNzihulsv20nw5NyGX knV+sjksBZqQYRHDEh4iPMQnnxvZYflkhRtj5+xifOwsUpc4VxrsroQ4mCC4lRRNpZwp4kyp1DAJ NKmMMrMDTbQVaOILpCF3itQj1eVO7ZX0E/Ut+gJZhGQEsXFGxo2pdSCfz02QxktN0jiJjUOqxFCk cJbBSXoJhzHpaFWC9IMDwpCdSODRJbFJAtMcI4GyNLEsD0eQC4pLkdWA2w6izPdCZCguRcZ6AZ2m 5kjI7GOtQ4OiN18C5tD+WNIA6CIhZGx0dyAVYeAZaQqgE2CGLbU3l0gGc3MRy2pLkRWzGlb/5CAm sHI32rjJs9n1WXvPOPc3Gfe5/CEa5Uc4eZ6Pg1NQh8PpcBbYOvw/JfT99m2MmmUfYXl/nlnQXtbY dgW3awGr/NNvsxl1jcO/67m82JFcwbq+P+bWDfT17MC/k77hrzkF4/QwtvsUfHZxfMOVLSfYNLri SJzRxYWgi6tAF8s5sxQERUCsCDRiL7TY8mAgGAyGguFgJBgNFhkt5WwVbCkvlnu3KQVR5qQ0Tpfi HBs56tNT0av3l3Zy871rudXWd61fWr/0q0v9peWNZCyt8zb6ptNJ3qm+5f51fl2p5I3VGdk+gbw6 2VZoUNHqjGaLNU/bYkVh+AoYF4IICplYp1XBQ4D2HjAlJ2WH6N30jC9hP094ynOSKTgvf8f8mTN0 BKeWQy+nxO/z23w+PwfhlfdbrDaLxepFm3I2yvJEIFEEwTNWVARJlRPMCZ1Oq4WiofZZkqV+n9Ui ehdxCSv9KfFfD5HjXskh02fRF/JV+Xp9fb6MT+l7tcK9n/YSK0QUO59IW/osnMWd9DktTpxFeyMk UlAFqHBQN6BlnIKC2r0K4umH4jATUmR1julzMnkYoRgywQBOJxQFkZQpeeCbrkQ3KsjlL+OeAMju fqAb6W8kDFKBUfsIh3X2mZnoeWjQaWTlSVZiG+V+lB+ztry7wBAZwAHogOgw5MtvyJwjMF1LR2oF PTEq8Jdl17yZh97XGVBOfruPFb+jd+R7aYPcKzhPjz8XTr/+iD+ch1Gwao4cyB0VevlN0BZT9IfS 3C5Kb1bdp+JuVn2hhv/utep3q/kgF0wlKG9iyk0qCM+YwjKd0iurb1FxWrNQv059m+K2MQ8pHhqj 0idTsAwQYhAUfEOKJgkpL4M3ikGWKTjVQEggVmSLQc5MJ4f40GBlWAth75AUtJU2a/lg6jMaS9NH y4m2IczrnFUgtE7JEm12DtFbJb01HFTFnLGxWn1/cojWSP7UQrqQfBYzpIsejUkgG+lYT2xlbGdM iHnGedhyg2/JpUWHktole21YKU9U9ihXwofrHlsUEyfto+/m+Q5lUJKYOfwhgxcmyp4C6zh16tQH ec4yfDyRaD7R3HQcLEXmI8NfyDYAowwVMj1nNF0lqpuMTU0KZgOZkdEXaPAeS8AcrR/K/SFPnSHQ Mp2mmikwGhZDBqW22e4yp/xI6Dgp6cypahE3Xi0aoDDJH4AI6e7u7u8PjxlRZGEwGgOhtwTabUG5 HdV8R0CJl8fsNkdtDYwJXe7f/vLmW66+9+Tq+/18xYTVC19zag0W/6JnOrbcpVwrC8uX9d/12roL exZf/t/r1z149fxbF10TvMVkGhutalJZTNaAO7kh7XEPvyVTte+HuyfPnzh7LsgaBz51FLrMR4yW 0W7pcrsIdcsu4sH0m/CY+lLUlKXW0jLHA46HYjuEJ1VP654Mf+nQzi1fXL6m/MbSm8qftO93qERa iUOm6oUNRfTnlN5Ufg99hGboQf3zpUf08N9TzTsORFdwcT3cmQZiMJptdkeejhG/B85OBm0GEC6D IWB32Ox2B1SYlZLJkS71E1Ic5lWBsFanH+LDUp3BUGrU2pOlDrsYDYtK2qM8quSUngq9IW2nJO1w iHanPakV7RRtuzspjn0SJIXBST8DikTTTPHzJvwAOhBRZo5qPokmIh4HsABcEsNEBhMZShKbwemN 176sZtAxYttg2s8+os59OgjcCDAAganIUQAcxPQBaLpI/6rubmYrklki5fMWDE6IRkpUBb2odoRE 0JoRg4cS287Vrz30zsNvPJj923V/XB49zIhC/4cyqaC16e3Xz33y2qUfrn9S+Gj416+8vu3W7F8f fWWHbFCagDz49XnT1u1asu6Jm/7Q/50nGbf6Cnv8GqhFA1Xt9YiQGBoYsErY6R77rIYd9fude+tf c74c/nlcvVK/0sAlPOXV5TWpmlvKHqzeEfjE85dqTSAyED4YPhgRDMwAETRQwy4E+twu2QRlMFyu Y8kVrlOJaS35TA1EHzQx+xIQXlfChJUSJqeUMPT2hupQbpIcnnpSQptL0iU9JVtKjpUoSjyNvnAl IyxOzCGVYiWXruyp3FJ5rFKodI9Z+3vZ/oQtnCmbn/oZds08BQuUCJsF27QTzadOdDMKnzc+sQ16 gfhzn5JA7g/Ek/t0BIlxigQdxTiVcgQt8xipZMvPsC6/WSoldgvWvQkciLxwqV5ntsPoVKbyA6s4 KnXctv6dm3/43d73lrrNRottSvaDrU++vnTba99ZeB9vSOnMVr3G/GLQY9ErjWp1a/Wkqz5dfcP2 KbNsZqPNPv2Knz501Tv3daeAhUdyRxV6GQsT9OQ+YoMIhwWDevXOIFYPZSPsI5pm7SZkCF89yahk COVuY4oV0mp9iqh1puaYy5Bqta/QciZtnX1caJKt1S7FFtsWxzZqb4xv091r+x+tQRlvCjWHW3UX 04u1l4RuKlFfGR8wbzfuND4TfrLoqfhz5IDhgPH58P7Y66HfImTsE+0/6VexL+JWu90W1Wq0Oo1j 1FoBreoM9hYFp9ptRKuz6sNRbUnMzpNEIBjSKqjJodEEEGwLOQForn82j9NahstLabpUrdEGwnqd Xq+3F4etKlpeSqio0aQRJEeopiwcMkmmdhN/0kR7TCtNG03bTTtNCpO7nDppuRY2cpGGEEnUThUE WS89SYWtoDzHWIV6kppJB4D8688X34cgDQc8owCMEqyS8Z5WJtaLfxrphlTBmESlTAFOkOMyHfjw bBsIrF6MZzCWYU6lcOKzSAPwnxk9Gdzt1gawZ+/vLrUlhnKf7g27Q25S0AFkiR7GY4geIAvyZ1SA iBZYhKUILOLfCAMBYCr0/5LJ/StFBz64/9VHqfq631+2pM9nh2mLzN9+XfuOa3dlP9qBsJrLGaV/ /NWf/+Aman3gVfpeni7MuDazYMMPsx8O3vg4o/2/AV24D3QhCEzcsI/o8ooDmLusQICjvSO5GLYz tYKwjIpyDWqEPMj0CS3TLnRs6rWoBFkLXgwd0cO2oRP1IW1IHzKGxJTmX8V6wX1JMWeJuxLu8uIH 7E/5FVFNSBcy8AoBodlavsnVVDzTNcM/s3g23y6029rtsx2XQRa+N/a0+0Phc0GcW0wxlS8JMWsF LVKGrbqisFcVSpNyI5M2ws2BdKAvsDVwNKAIeMpKymk5H047ehxHHbzDXTr2gjwJmQlXjmzBPs7M nSeah80wdkHfhJUrBQP2Wfu4J2qL2DT7ocqpc3/dHbPBlPfpHrfbphdg7QI9yX+6zqI4+4iQ+2Qv Ann0kQgblV0FsG/T7hYYy7a4bndvKb6jRKDdYA5na8Y0/L/QHbutpIFJC0qVcPPpJ/j927vfO99p NFjEiuyndw4d7X34zXU/+mWHYl7nPVu/GksfDoq37h5fZ7KaLGJ1z3tPrDy8ZcHrD9cZBjrnPbUF 3ABRtYp5oDX15ANpqk/tTnnkZEppvMryexM7Ei96X0wo4bSrKSWl5jJvo/fZ+E/jv44fi2shI9Rb zB6x3uL2iBWItqAVrlGrzHPBM+YWyQKFgtKA6IE3xwMMj6WDQ3xACpaF/dRSH3BVKMWGUo8oRjxj 6OHytOcwrCYNWtnewKQqUaR9IhXdDfs5Hb0773pgdBvIO/PUMHZPNhzIbp2ZUAFgvmyWrWR5sS5h wofxaqY2QwY+100zynJrxzCfglO2SYIlywusCqOD+XS4t++hMqoNr2Tc9417nmXFs17nm1tWbhpj DrpUlruX9d9p9NJbfRpdOMwbhqeMiOzcPoZuGy/dZtNYDPYA77y8daNaiy7g3NvZDYpK4FycNNLt e2ErBHNkFPxCVLSEallHNcuqWGaJ6ELGSODK5M2Nv44rG3TnVbc28hX1S8mi6vUl6+u2JO9rPBRU VwerklUVe5J7Kt6oUUIdrcIux7H4CghcClDsvGw1RavTBQLUhgTWPU6q0KY5qnQHzK6AxWI2Bncm wmFdbbhMFUiVUrHqUV06HaDpQG9gS2BnQAg8z31ExhI70MxRFG5g/PxQAzU1pBtWNmxsONmgaBii /5Q0qYAzkNKOBbMeIbSJYabA9Z84XrBnglFjs6CvIT9xfLMxr7JBQxslpbuUXEuH7G47tNscqyOJ Lpmpj0rlSV+1j7yYe59oc3+F/Popacy9X8BE4O7ItH0ws53aXW3zvpj7gvgwK45Ecl+MzOxnkhmQ 0jSWVumqjFUBSddmlAIqoCaDGuaSomMYeDBoiPJKlZGLFoQ2JxMPxhSINZMMRoU3RqMFV/iwT6OP hPsGzVWRgd7z/8og5+9Tbk6FjA0737nr0JI79y5/O3vj3PuunvHQ2sez/3qIe/VBGTxO75s1qaK3 xGKyB+nU8+KTTu/76QOXHt7cefqTyasfm3vltuxXO9Y/hL3tgx37amDwWDpDmlWrBr6YII6YnCYX KUIYZBmJB13mIjHeoGnwNEYaaydrJnumRqbWLtMs83xZ6yiroSXKd/1ZPy8orIqYgof3KkpMdtA/ u8sNDxKcVlPiiYrqESsqoAMhiCMSeolYwiXiJYhWlGdOJWPHIJIR9WeDUyM0SiJD9C7JTWm0Nj2W kGBYUJktlng8ofWkTRqK14FulzzutJZBUKW2R7tSu0W7U5vTKrWepmi6Zogul0zks1AtDdVW1fbU PlIrwIRqHBy39gnZDd8PXB/xWXSPeKsYwz7hZr5cxr+hejHS2l0wzZ1Fzw+SCICAg/+RIillmZCJ 6QwUQCcKLkbViBZWsKrXWmUXBcjvvw0UAIK76Iol3++6/g7lyh6211l5x3suV1y8tOM79/af3ZcX 4iG4f905+cZl3sDwP0eJBu9wTr+o+abhT0d6BFmaB804jP0OKszwPPmofR9RwBiBPYcc+LFkQ0Uj aOxuwW3/2K7QG0SrjelS2EGDXoOY0fweCT434Bh1yRycKigUAZvdZrPZObqLJ0O8RzL4BKXeoLX5 S+02kTtA7wJ/rYG56C7J2geAIwG/kLYr0qLNafNrcWHZfi2XsCbKZV4whaOL3ZlkS9kka4rY+mwZ 2zGbYHP7YSv+Y15nlxV2WfCRtbGZH7jf+oC6sG+VzP8okw1m3mlu+gIeqLNcHzIRcJ2lYX2yi4e/ CQo2MFUVHWP9Bp0Pj0hQ/GMV11REf0ins70ZdrGcTr/ncyY1KczvvpuddfofI0uep9xMNroku4H/ h7zmAWreRwx4ZNDjAHt0lHq29kFUtIJW7xE8+jKhTL9PeN3/rl8TVFO9To1oXbbccBB5RJ/JqNA7 hEAgYNDbDAY95Xbx+XW36PRKd7kHBNhqNARLsX3nLL7bRI7hXkgoqP9MWGNIBxzuoMFpCGrZfcga gRg4FuDgrx8iIbKd/hacUjyO9QCfPF88PlPEgv7bwopw2GNtIfCMEN+Ce6/7nBWWNILD5/A6/NDE c/mlzgs0DLfk9R5xOvFne/QUNSCN/D+w4tasgS01N+Vl19WLJ83Ofi4vvObStgUOtuzDpxmTPL34 ijuTAZniNaWXA9TggxIyoG0Ngk26qsFKEUuiNdlNDjjjvaYKU51HG6wI1unQ5Q3ag16xSGHxbjLW u5E8SE4kB5IdyYXUG+otWlG8ov572vssT9qeLDoYf9emnWtdal1q22F9PKawxBrwfi9+VmbsZPwS wgrbOANsqiExxHl9oWhRrNBjqg5Wc8mK6rr6BvQAx85QRjE41eSiJlfQxfm8LsRuyxOmViTjiOxm h8+Fv7/IZrUGSJGNWC2kqCFWXByob7DV1zdomYJkgYJkseJixfUNRE19rNpAlI1jyGeS1Yo9Ira0 N+T1KTlKK0orkloLFYtAa5+zkYUYo0DvJXswUSxG57OmetpcT+tR3V0s1Q9xByRjc8P2Bq4hHWqO bY9xuCfXs42atAg1igE10FY2GevgPGqmabqd8vQFmiVjEGvv547LxjYY2vD5AD6eL7o9w92u4x5x GJwd0IauD5lxjKmusJiOydMEeF8YbZBc4YmgCWYnMjgIbMw6CBJRKg/uhrksTwxgTnUdF9nZgP0s F0EDPG7xhKsZ8QeVnhMymEL9QuRB3i0thx7AMDPqGHIx94iLrbKES1qZ+8fK3D9W5v6xyu6fwuKP un+Y78fVBW6BZ5PjF854dfJyyN76kL+oLsYswCjxPMdYaUW5G6Wsw0E+aencZfNREKO8EmiAEigZ vZJHcksuySk5JLvs42EaAVMGZAMyHpvZE2NMx8L5PmZeFJx/aBBLgjZorFzCu2KS2zLCu5j9pZiN ooTuf0iqRsXDer0sc7NMnuTBfPQhc7PMlc/gQWReBUmDizW44C7EuT6WqtFtC8EjZHOhhtAB9LuQ 1YfkGqbVI7ANAzjKJRmt+Ss3o1LYTdyqXUKmUSNzS3oRRmBkOJOIKYCpBgn28xjLGlgzxrKRVRjZ //9Q5vVk0HkWWcR/03BWO+oyGhHdo5R+wyJP6S/azzaiHd5BdyRkcmSQJbWF2Q20bSHryJ5k+djs R3RtdgAEKpBnwqe/ouWMXMliWvav2a4RhkFXg2a9DJoVAM1ykXskQ6l5umKqmf9WtYjZS0ZjB1xo MBVJDnhzEQLCI7pZ7MAB7hgx47UWRA9IDvBVIqYLAQMK0e2GouRGqNsfuaN5A7hs2EzM/A/xAkwL +qYCdIYxPvyvc5niR5+xpx8xH5x5fDwjrLDCW9BbzuPrpahGh1eqjRqPPqmp1bR5jV6PJ+RNeMuD SV+Fu9bdJlpUBSMVaMrHUpMpVWqMe8rq4m0pY8qVCqcSqWSqLtU2zTjNNbVuatticiW5m1imGNuC k8P3Bl8OKWhdXU19PRmvaRniLgL6mKSgxEmLWyWppUXbGhnf2iZqYD++SDJbrXNMVqsoak0Rh8kY 1ZTJBxSTYhExbXMixcXRqDYSKYuEGzRN8lCKpMQUl5pTn0o1NGjrI031ZLLmPDaUmjZtTtu0aZMn a9si57W1hpR8TW0VNZpMAafL5nS6whH4+QLxhA3SbFtra6CegHjjDSNlHcjsXvoZH/5MyTSruKYq zPP+tEZlgjXa6Yyky8ri9el4U2u6aby2fmapy5mIk3rR9Jns2PNCjnBKdePrnFJVvZP5/URnyFnl 3OgUnEPcNbsjn8UZxrJpcTYtjmlxeVo8FK+Kb4wLCPO6RnLUp1uZrbWvlba6ZzqdcWe9s36mdj9t or8rgEreCg5vCRwl+BQKRnILfjVQ3hMi+4knWBd0NaapMZdKQcFmXjU41Ua9a0zhHvGiuP4tfvJb fOj/ZxdztH/LpLyHZkQ1pKC+RkZ9mWooG9gZ5Q8a1Xh+F8vCLEuwrI5lbSwjQ7lfDEJeNTEDF/gd Fl8u4eiWS6yyXNYXylaUUhgTXcynE2ZZgmX1IoI3WlnWJgZSOOvH+bCYj3chOuZbaRhoF1Uxg7Lz mypGtKBbIHZ4RLn4tq58gOmo5YI+YrnhiqYLrFOuHzd9kfI7k1ls27Y7hFS8oqal86opDIm33S6M K0lWT5m/Vh79E+ubfK88xC+au3py2+S2pe021/BeRsm475nN9eN9JRcP/1pu3mWz1kresmX5JqMD BcGYEvyPibAQdGAsnYBX8sGGQKCwgCcZO2LlbjPzeh+T5mDBwyG4GF73/95/2s/r4FmO0KS/jo73 L6U30of8O/37Azoori4ShgQWD1qCLjEsFtUpJysHIrfUPug3RqB5RKEM27n/WzPVgZqW0P+kl4bH EqWsl1rpvWdppKqwyUd9TCPVutNEWwlVlIf098FuWREdh7jjz6pqN9Vurf2FrIUuGdVCT5waPoWI 8LMUUIYg9BzN82xYdY/AKguKg/gMKAFAFFwMoxs/ssv/p7pp8l6xbf537lD0y/v5PtvbKZcrlvXM u3Wg72xt857Cfm+8cNKNK2ye4b+NsC2Od9qn9Uy+fvjvoz2yzYppPn+GVfhR7LABcfq/2wcu9DH2 VFZ4bjSnFKXm1DIfvUZ/jfgd25W+B7l7NU/pnjLv1+03v6p71fyp4i8uo8M7TT9N5LU2ha9L0amc 77zUtsy33naVb5vtHu/Pra/4DEWKmGu9Yr3zJsVttptcN/q+sn3u+sKnM+J1entYpbKEm7VpbR/M Ake1Cq0n4Amn+aM8x7v9oybcQgiy7PmR1ZYR0/sLRA9zrTP3CXHlPtltdXiZ9dY3Yq2F8NXP6MUq bICCLTcztUMz5oSSQvhhxMjBhsMt2PHWI9S55Qdvbct+tGHtRxt/vHnh49d1/Dj8y0dvoKaHf7Ht luyp73fc9PuVG56aue7J+Tf8CEaFP2c3CC9h3WKkmr4i9WkDngBneS9A7TSuXwKPxIv6Z0v2JQ9W qKNcNHlVydMJYXvV0SrOktQnA+UlyYpp/vMC51UuwXuuN5I7Sm5PfJfcq9mWeJo8bnjc/1TgE2rT JNzx0kAqMLZkReCWwE1ValpZpTcYiN3h9vkDeYXEYbfghdG87kFiEbxNynSPpcGpVcUC8636Aza/ PxAjynLYZYrDWp3dYfQ7/TXasrBqU289UW1UcX2qnSpO5ak1kHQg4EfvTv9B/xE/3+zv8a/0b/Rv 8W/3K9Nyg1V3+pV+d03Aj1DGpl3M0yo2yb7W/ryjNe9lhdcO/SzUC7aaM7yEsQ4ckdjM+MjLL+fd 7yPBpc+T6tyHsOJ9OJiIlnryyicz2T17Aemx9Lj57i6yCtu5StY7ONhQHYi4URtSfhGhHAFmRvaL kDcZgWbBG3IJqZOVkhGjFgkirZtlIFyHWOzSGeoNmTNPtPM4SmAfZmgqGwNHzUIFURSWEjlUnRn/ 6Puh3oNrHn8lO/jesaWXveE06eCakR23/R/K5mR6xyA17tg0mP37Dn7RA93zf/LAG9n9z2WVSrMW LwWY7AFhHBM0h9VU+fiV27NfPbruUUhfg6C6p/mrELDSzFSsY1IP5GqdVbBpitxFiaLGog78TcBK 1Ur1SsMOctjycZFRz2KtDSFkJgr5iFqt8+gc6zL6BVXrLBdaVhoutXzHsNFym+Upy4uWNyxaq9UC XxpHbF5fMBKVgz9YWJGLjmqzCDOaakLUcaIUbyozqIoGp3IW3qwwGZX4gx0VPHy2QLTIFoXemoYB VYk3ruECvl0aIwLW7GlvJO31aaPlpUVR0ZAWVbRXRVWeJEkXFdnSYtQZLdeK0fYoR6LHgCHuckQZ frirF9BxxnM/84MmBBZ+w20PcQU+nOPdzKh8tq8uH/STj9KDV0emu7DyjZBd5vYtgXTIzHr/wUHA 7U/+bLC19fKQQ6s3eStdjc8cX0TXMGY7fLnPFgq/ca8cysMveuu+OQs89pDKGvV0Pp2tYzTVbLL5 uQPMsME88O+Apl4H2tBOn5RmCUViEWd5oObJmtdqXmsTXptBV0+63/UYedy2s+yx9j3khbI97YfI 62WH278qNXxa+qd2zlQaaz+v9LD/zTbF9CltLXiHwKMuPl9/O6+UwsU6WN5bJE1S6wifr2oJM1hm caJyCe1NLmUYhze+UkPSaktasxAGhj71IfUx9Un8KZJntic8XcIx0xkynJxOpz9aW5auaUrX7gds 10D2tEI1JDV0Zc2xmpM1fI17Fiz8eEfppsLezGReeBaHk8j75gttIPaobx52KPZ2CIyxI0ESz5Y6 bA67YwKsS3smO6bagJfMRy/jOXaLhUoyoU4XYE5HXxUyvJYq+8X9hTLIBDT2YkFAhILrc7GMITtw e0qhDBXKSRBNJDjumoMhPGeAZVNDplQQKYCUVzFxvyMfhvwj/LkQInAmZsduczqEvN9IhqLRd1Rk hxKjEWwGggjq6yoEvBnEaIhQpgR6W4WAym81WimtmrLpwQtbxyWoo6lj9mV/vG3x/fVqvdmG4IKY MoAZynHn3zd4YExf7spJF7x27byb+ITfw6IJtgYQTWBWqxoidZOqxzREXEGbd5k0/Z7e2poyvcli 0IjPBDxWgzqggpJ15+TiaQlvWUdD87ouFslIWwGHVyCSsZ6KUrxcNKVqDLQ81ByaEdqf/DKpqKqu 5ZMEfqL68qJoPdxF0STQOWkHFu8RwwFd1RDvkhoSMTjnaUIZbShNRkVhIXGJLs7lGVN6uIgs1CJA oHxhUVFUU1+fTmp0unRUk0xqolGApWRk5DcqRrl0tBc4PsStf7ZBA8xvgNDF7VqZdxrBI/8P5h+H rx5/YDTinx9109NKFmCMXGRO3P6ZZ17wYiHDx0EJmFmT8RNF4VUUai5AnqVgPH6BGCEfWCEYWGTB AJuN6+WJACKywvw3fbGFMK0xIxblvOcQG63i1tJXsaFagz/beJVicU/XLyc4DUaLe/yDK3uuvVV5 lUwgttXLWyrwi/DOkFOhHP6ly1aVrgkbrKLdUl7kWTPbE+QqGdn/ErtrULM32zTYqbv5RfDjbZeW 0E2A1y2InypF6a5CNkAp7KFhl8ZlLtYUm4ujzcKY6EzhIuFyxTWKVYYBxUOKuw3fi1oq3M3u890X ui9xK+7D+ydS3Rj87Uo0Vud2u2Ry7zEFaCQcQJRoQWY4y7FjFg344wlG6WG7dEdhfrME1BqbWq2B vyhAPHg1xUMfjROtE4F/eGcvXBqOKCORtEfjXohYD43HQ7DvaYRxSIx8MAIjghbiLzO248+a2Csp H0n2co3ZnIaRV62xgC6p1WyqmsGKCAVCVFNRHVJXyVTqebod/zKjof5d8AQBLE4yhzCDkvWFAA4G LHL128dkoMFxf8cxZyyMkEWOj5gTjdBsWfwonlSWSrrzzCMvyO+hoREpHtQCLiM4jcDl+hOjgX2j 0FGAnzPgMiLh8zd73nxjyZXq1bIocPgm4fyWI79aLcPI334oy+rXPLS6K1TEsdcDg8N32B2T0gfy jbyPgvGS/4H/fhIgI0Z79wGITyLOGFYWVsBIyfQvhJ6wAvT05G44Yc60pFoxhfX3kyIH/igOCpcj 6Az6riFX23XLxGXmdW5+mXaZbpl+mWGZcZlJqdEWgo0lIySBMMXP5w8XxeT3lCAcBM96zY0JB0E3 9Y/6mZhwAOuW1QJjrCUGD1Le42SzgnQQhBH5/Ep4ofc+F0vbmVER9wy7sb8OpOYZqUyCNfugla5Z ydHtePM6bZF8vrpmS9qyxbLdIljWiFZaaa2yctb9dB8ppm27ENnBnMzgQDBI4022/lOwbuB93aYm 9kbBcJPizLtq2N9COLAcLAY+kzfZinJAH8l9nPcoyYwgHB0xN47aFq1n3jUb8Q1zmTsHL2A6GB0n hwLc9kiMvpR/X6lJ7pjLI1ajYDwcnpJXpfPxABT/eLNB4cRuNtBLpQiiys1aG/NtqGNKSwh/uCQp 7rcJxGqzNZzZDbb0IQrHRCxWzLATrgpTTbCGq6isgedAxuMpWs3IC2VMajtLioMJsrIiUfBJJINT Zb9HITqrAQJcrBihvsV4a9tiJZoKK7RijRY+h8oKo22IvrC7IQ3vwgtSKMbct2KMxjyNlsPWceQ2 EduKUKweuhJhV+4xz9M28iSkxxERIR+18QWi9xC+wbQAtjOys5Yh21mvEsov58oOXGaNp4U3zrpl Gd8K9g/7C7OVSxrw8hAzdyEmR3bJAc4/HhllpdzGJDZ7N8qCbJ8X7MOFfW2oHRHqo9Yzbx7IPn/Q fGZGPlviD3Pjjrp9drPb/YFDxH9q9P2UfoDgq3DkA59abzXqqoaVN8gDWZ8MDmq27waPXiXqgM1p blcBCoxepfD14VGJH28UwMcHbkSyUfxnHMPxb34i6OCJXn6rnr1Pz9z87P+2qvHeahvBHyySqWQa /hluBqyRM8n5+O+ldjIL/1M1h8zF/3HNw3+UdZEF8kkpsRTOr4R+Tzpa26fPmZNoWXnlqhVLV52/ 9Kr2OclpaxZetmLxTNzJ/wNwdJBVCmVuZHN0cmVhbQplbmRvYmoKMjIwIDAgb2JqCjE1NjkxCmVu ZG9iago2OCAwIG9iago8PCAvVHlwZSAvRm9udCAvU3VidHlwZSAvVHJ1ZVR5cGUgL0Jhc2VGb250 IC9JREJHREQrSGVsdmV0aWNhTmV1ZS1JdGFsaWMgL0ZvbnREZXNjcmlwdG9yCjIyMSAwIFIgL0Vu Y29kaW5nIC9NYWNSb21hbkVuY29kaW5nIC9GaXJzdENoYXIgMzIgL0xhc3RDaGFyIDExNyAvV2lk dGhzIFsKMjc4IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDY4NQowIDAgMCAwIDAgMCAyNTkgMCAwIDAgMCAwIDAgMCAwIDAg NjQ4IDU3NCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgNTM3CjU5MyA1MzcgMCA1NzQgMCAy MjIgMCA0ODEgMjIyIDAgNTU2IDAgMCAwIDMzMyA0ODEgMzE1IDU1NiBdID4+CmVuZG9iagoyMjEg MCBvYmoKPDwgL1R5cGUgL0ZvbnREZXNjcmlwdG9yIC9Gb250TmFtZSAvSURCR0REK0hlbHZldGlj YU5ldWUtSXRhbGljIC9GbGFncyA5NgovRm9udEJCb3ggWy05OTMgLTQ4MSAxNTExIDEwNzddIC9J dGFsaWNBbmdsZSAtMTIgL0FzY2VudCA5NTcgL0Rlc2NlbnQgLTIxMwovQ2FwSGVpZ2h0IDg1MCAv U3RlbVYgMCAvTGVhZGluZyAyOCAvWEhlaWdodCA2MzggL01heFdpZHRoIDE1MDAgL0ZvbnRGaWxl MgoyMjIgMCBSID4+CmVuZG9iagoyMjIgMCBvYmoKPDwgL0xlbmd0aCAyMjMgMCBSIC9MZW5ndGgx IDQ4MjAgL0ZpbHRlciAvRmxhdGVEZWNvZGUgPj4Kc3RyZWFtCngBrVh7TFvXGf/OubYvxg74/Qy+ 93KxTbAxNsY4PMIjARIgZaSFxG5KKElIoAlLl9GoD1WLpjVqkTZpk5qu6jZNe1SdtKlUmjKCVCV/ TF3XTRWaWmnr2KZu6rqtnVpNyVqpAfY714Y0UVdV2i58Po977ne/3+98j2PPn31gmux0niTqOTY3 dT8Zl+kGmp8fOzevlsZsBe32E/efnCuP3yXiL508/dCJ0tj8NyL7/Mz01PHSmMTzrTOYKK9vQVs3 Mzf/YGls+inafafPHCvfN1/FODY39WD5/bSKsfr5qblptLhcP8BH+v4zX5w3huS6B+2++89Ol9ez AsbnIKM1AxXPcdKS8foqIoYZF10kK7UQx5+4PLActuODGfex5gnXi89MVndeZ0EJOIgu7flwRrQr lZfevaGsK+a3TTmst5Y1GHqlFzcStN28ivtHzW/judfFE1uXa4kqE7RsvMWeYMugVyJ0rpCJeilH DRSBZbAucYXM1E5pilKYHMYMXcFj/dRGSVLJXV4k0Qj1UDPVka+0aJks0OVMLBFT+x+dDfQtESUM eB4apb00TpNY6NjoIDs3Q14hJ1Ykh5fIOlp4gbGvFZfYxmNL1FdzGcikySON0JRU1f7ZvkV2LwY8 iYkGDT0pqQ4sStGBOwt6UV1QFwaPL6gD6szU8UVT1GhxY3qh2KQu0l2FWXyOFbTFnmJ4qztdLLZD j0nowSNYvlCEhvvKGtAaU01rWGRODquLUmy0cKCweL4vvNjTVwxrmtq/eHW0sHi1L6wVi1hl2bIU Fgv0JZtl2GxpwP2Kkpa7oAMqigsLQidGPKYtXl1YCC8AiTGja0uMyhNAKtZI0f4l1jNaELd6dC0s JnRN12BHsQ+6rcnhuwr9sEQTllR+OqW2LUOx1g7zbAal2/5PlFZ9FkqrPxOlji1Lb6HUCZsdglLX FqU94UXaolTXFs/fRij9V4a3KO/5BMrPlyg//wmUuz9GOcLvGjUzhAH/CclMIpk/TpW8izp5kLz8 ADnRYrzxDv1x4wZ7c+OGaHkS/TuM8YesgzSepGrERykHIHkhmi5hrNJBIyug+z9dpVyzqULa7Hys NSHuP+2ykEwVWGCFVEJssJFoG0RcVbDeQU6jP0AD9G9WyS6x3/Ix/qpUkF6T/mWKmdpNPza9Yf6K ecXSjnUcyYPYq/xlJCKZJkV+Qpg0ISdAKhyImxUI+nwVcxib0FpXCUmgv4BRU/gy8o29q1ieMIsJ M1nEhAnLCcvNjst4j3QtnWGaU3M7NSd7fv177Iiyfpw/u/Yl/v21nXg/GRYQ/zJykpVqkAv/tAwo UZJgkdPRa6Y3MPgHhE/0hrEkSkHIDkgbZBBShMxCHoI8AXka8iPIZcgvIdsmlgEySk6nq22J5KZe oVOGTnlTpwydMnTK0ClDpwydMnTK0ClDpwydMnTK0ClDpwydSxQCyOQq8noE+yHMjTiWsTvM6Fei T6QYfULfiz7BgHTGnc82R7jXo9uY1tzFcy2xeK5LQqOz8p0qrv8svejLNIS/+d6TbCp3T3+8PaM2 6+4js+tLLb+uye0I7NjZ7mJP/cXsqlMfZ9m1VqXtzmzbHVXcrDW1RQ7cvXbhgwpfQ21mZ40Me2RY cgP8SrATG2ZsM+yQsu5vX5y8yF9Za8VNrKvceJ/P8N9TN/1wGc6vGcarMD6BOiMAJkr74QN3vk3u fODOB+584M4H7nzgzgfufODOB+584M4H7nzgzgfufMZ+ENqEsR/C49jqMkzTSDVmbJhpBbcMjtQr +A1TzHh9GKZYqMPoWxzwq2xriuu1VSAzwhUWkbweUFeb4nndEuFZg9wUb2IpsNuFcYRzeZLv2DeZ S08MpkLJdnUqlNI9SnOvltiXDfFJc3z4dE/62Gi2Jt2l3RtIKC410x6KdiX87IPOg/lwqOWOlvqO RI01JLvC8XBdi+Zw1u9O757srAnlDuxM706EjVvRkJrcvq1KbwPx4LUTAfdVUCwDCeKiaRlz8HsQ KiCK8JJWgCavyVnsCX/EtXbV+f6FyQv84dHRNXwKHd6N6+w6d8KLnloi9TYVKlRYVyCYNxKZwWNg FQFjoQCoDoDBALVCBiAHIScg5yAXIBchz0IuQV6CbJtAiLyOzlsQPoEdcCPfCHvd2AETolT0N+Pc jpc7VsVupFhpM3zZ5ta8XoVRCu4tmPex745LJwv9pwajp+47/LB/3DWSr8tEtoWyw5lsO5s6PJ4r nu26b/6eQro9UN8aaTg0kMyBI07Ojev8CLgLUD09tAxfqzJeHnQY2ILAFgS2ILAFgS0IbEFgCwJb ENiCwBYEtiCwBYEtuIktCGxBgU3EwzI0uA21MeCzIp4FPitwxSABYNPcuqSnpE1fE/iycrQEreR0 MfaLp8byvKK2sTnQd2owHmrZn2k5EOOu9ffQzXbvCWf3pwe6+Svr74Z0r7XjyAMdTSN5RW8eejlx 91DT/vb6w/ubh4S/cMThdfYe9lpF4D2JHAMDTeVoFKQnIfYVCOJEKe2xAh4UoFDAgwIeFPCggAcF PCjgQQEPCnhQwIMCHpRNHhTwoIAHuCE0UhP2OoT0K/CHwIVMcaMvo19b9tlaRF5e62IiY5VjT4Ta zQ2Pal2SCLaj7DFumT2bmxpMeJrHexr2dyUrx11DbaF0zMc61l+zRpIdUT1dY/u7rc4z92C68MhQ 7eCuuC/Rm0hnnUpTxD8VydX7gztw3t54Z6OJ14OTRmSnfmGMbhhWC8Oq0a81PL4ajKRExqiBtwgM NbhdSVmjLzJyB078Yr4DGKJuXdZzt26qvwp7nOJxPQIErfkudssepzj71cSog1uUxlxN9/H+aDA9 mM6MbeeV/vruTCCl+/kY03cO1o+d02ye9ecCqb7GPb3+1N60mlYcw2x5kgfi4eq2w2fbmkbalLoG Hhtur5PdWiixK+baPRIefL5ufLB5aFf80FDaH0OJ5jivEP3VyN0yfPT27CGqiV7NkDVWfAd97lNj p/nRmZmJtY9wymfiWc7xrB2sCT8XT4tNFu6EDATKlnGq2OzZyj2jMnQzd1bK6+a4+xsXx+InpifP v3lm/QYvimKxdHj9n2zgypuciS9ipfeUbby9vnz9ybGb9UXYw64ZOezRZfKXU4q/VFPsqCn2zZpi R2zaUVPsqCl21BQ7aoodNcWOmmJHTbGjpthRU+yoKXbUFDvcGfGAuHDDi90A6UdfM84rGLiAOIS4 Lnl1qfJ1MewuEpOIXhn8lf3ZIuv5mdNjnRUhf6Bfj7VIJhPbPd4tV+wdbD2qcgc3r33EIkqbJ1Sr R2Wv31ux/hsWj7Q6+3saG0dKXLCHuRv5SjY4N96GV5X+O1izPx+z6LXiPSdPjWUsHqcHO+hx2K0m T0VVRe9EhAfFS96q2RNUklYTY4c5H8idETx/iLywBP466IVlRK1qAFLg1g04XghwDSUuveDSu8ml F1x6waUXXHrBpRdcesGlF1x6waUXXHrBpRdcesGlF1yKo4uXGoyYulmfVVKMGVGfW8r1eZeIthAO VyVuRX1uM/oWbIA4BUbRKkZ1aLlZq/0fL9Wo3ZulOr5ZqX3s2HhtfqCurr9V88czoWAmFvDWNnjD maiXj6n5/Y2x4c5YICbuxP0epd7d2MPmGrvjTk90Z11NUgtU2ty+sNsXcVdU+uPbm/fUO52xXYlI oxayVbp9IZcnWG1phMdrGx+xPv4d0Jkpx4hIIsJjxJlcoDLq3IqogdXEDALMwFSDio3Yk3XU7Com DiBIGN1MFL1YrqU1787m/6COq4cch/q45FYaAtWR6mp7YJtH4aznJPzo6aeH16/YPbag6pYlPmIy V3usDitLDxsxRdWoexWI4gh9QZyNSucvW6nqiaEN2d6GbG9Dtrch29uQ7W3I9jZkexuyvQ3Z3oZs b0O2t21mexuyvc3I9q4VAbKM2Am0FXATgbYCmVFUO5EIAQR5XQwA0CjqWZk9MzfeKWvpXXWxFm4y 8VuDY/3P6q6m7UZk+GSWWv+diIzuJCJD1DXauAb5lvju8QmX+AVEgiclgSoPVHtpHw3RfvzU8Tk6 gF8wDtIhKhjPMfxagqyFy4ITFQ327d7b15fYN3363PT87LGpkekHphsH56dOzx7Dkv8AX5apGQpl bmRzdHJlYW0KZW5kb2JqCjIyMyAwIG9iagozMDk2CmVuZG9iagoxMiAwIG9iago8PCAvVHlwZSAv Rm9udCAvU3VidHlwZSAvVHJ1ZVR5cGUgL0Jhc2VGb250IC9aSVpMUlgrVHJlYnVjaGV0TVMtQm9s ZCAvRm9udERlc2NyaXB0b3IKMjI0IDAgUiAvRW5jb2RpbmcgL01hY1JvbWFuRW5jb2RpbmcgL0Zp cnN0Q2hhciAzMiAvTGFzdENoYXIgMTIxIC9XaWR0aHMgWwozMDEgMCAzNjcgMCAwIDAgMCAwIDAg MCAwIDAgMzY3IDM2NyAzNjcgMCA1ODYgNTg2IDU4NiA1ODYgMCA1ODYgMCAwIDAgMCAwCjAgMCAw IDAgMCAwIDYzMyA1OTUgNjEyIDY0MyA1NjkgNTgzIDY3MSAwIDI3OCAwIDYxNyAwIDc0NSAwIDAg MCAwIDYxMSA1MTEKNjEyIDAgNjIyIDAgMCAwIDU2MCAwIDAgMCAwIDAgMCA1MzMgNTgyIDUxMiA1 ODEgNTc1IDM3MCA1MDIgNTkzIDI5OCAwIDU0OAoyOTUgODU5IDU5MCA1NjYgNTgzIDAgNDI3IDQz MSAzOTYgNTkxIDUyNyA3ODQgNTUyIDUzNCBdID4+CmVuZG9iagoyMjQgMCBvYmoKPDwgL1R5cGUg L0ZvbnREZXNjcmlwdG9yIC9Gb250TmFtZSAvWklaTFJYK1RyZWJ1Y2hldE1TLUJvbGQgL0ZsYWdz IDMyIC9Gb250QkJveApbLTEwMSAtMjcwIDExMjkgOTgwXSAvSXRhbGljQW5nbGUgMCAvQXNjZW50 IDkzOSAvRGVzY2VudCAtMjIyIC9DYXBIZWlnaHQgNzI4Ci9TdGVtViAwIC9YSGVpZ2h0IDUzMyAv QXZnV2lkdGggNDc0IC9NYXhXaWR0aCAxMTYyIC9Gb250RmlsZTIgMjI1IDAgUiA+PgplbmRvYmoK MjI1IDAgb2JqCjw8IC9MZW5ndGggMjI2IDAgUiAvTGVuZ3RoMSAxMjU2MCAvRmlsdGVyIC9GbGF0 ZURlY29kZSA+PgpzdHJlYW0KeAGtent8VNW1/157n9fMmceZyUxmQgKZMCQzQCCQECbQAAPJJIMh BMIjE2BMeCYg1ADGRHxRHw0EFatVuNqCrR9uEF+D2kvQn9VWedje+BaoiNpWDVXyqe1PKsbMyW/t MwliP977129m9px99nmtvZ7ftfa5bkvrWmIh2wkj4dWbVrYQ42N+FTf/vfr663ypfTaGEFi2rqVp U2pf2E6IeEvTxhvWpfbVrwgZs6F57co1qX0ygNupzTiQ2ocpuB3TvOm69tS+mW9e3Xjt6qHj6r24 v2bTyvah55MPcN/345Wb1vITCZn0Cf7lt1y79Tpjl0xqxO0dLVvWDp0PMaTvNRxbMLJCOUhJTn4g aMMhHJlMFhKZVBGRUKKRArIEhyvhKM4XjOMiIWWmlnca7KUXSaaCFxDy5ParnuPb37/y+DuDhckz JrN8Bs+1GOfzA3hf+XZ9GiGmeYOFg3NM5stH+FH+mRweXFxzCAoOzTr0xiG2PDo5exm2RdhqsS3E NhfbAmzryydnx7DVYVuKbT62GmzV2CqwRbDZd8CtXtgd3x+nmhc+InBr6+7W/a1Pt77U+kbrR62y bwvcugUaakHbF97Xsu/efY/se3mf5Lt/0v3b72fhFrj3Fmi5efvNj9ycuPnjm8VrbwX7Tdk3+W7a fZNgvzH7xt03svD1UENrWI1QIwqN7S3tiXZmL88uLyjfXb6//OlyiQSDOCmnQwmH7LNeTwe/LTLa EskxR3xKJFuKjBIiI2kki0RGKF4lXXEpTkULOxSbYlHMiqJIiqBQhShV3fJgbVVCWbA8dhjgnvqE s4pULZ5zlAAM3nn3+B/8zIGRVYnMRbHEgyPrqxKF2CEjD6eTOUM7k0bWj4fI+kVzoGpB7LCC42Ur Utt0rWXm4VAost6XIItjiXBjffnhSaTl2UIyiWS0eFu2fu9zXWrv30nYet14nLc4iO0oycDmEgqI i5DBXmwXeNNX4LHThHBtYCOw/w4hFC8STxJDybky/P/6gAA2sJEe0ovf1KcfxwQcSX1xbOgcMnTO QfIgeZocJSfJafIZ+e0VfT7+CnmLj9O58CzdCSYIkA46ifwMzuF9Pod8/H4JD8BivO2LsAnyyUn6 McTZbcJLsBpU3P8ZXA1/p5OEM+QAOQBn8f8R6sHx5+ibtIm9QL6h62kv2U63kw5yiGyFqWTrEN2E fIk0fUlIuHhx1VVzo5UVkfKyObPDs2bOKP3R9GkloanFBRMn5Afzcsf4R2d7XQ7NblXNJkWWRIFR IPkRf0WjL5HXmBDy/NHoBL7vX4kDK68YaEz4cKji++ckfPy6lXjoe2eG8cx1/3ZmOHVm+PKZoPlK SemEfF/E70v0lPt93bBsYQz7d5f7632JPqNfbfSFPGPHijs5OXiFL+JtLvcloNEXSVRc39wZaSyf kA+HVXOZv2yteUI+OWxWsatiLxH0txyG4EwwOjQYmX6YEsXKH5tguZGVaxILFsYi5Zk5OfXGGCkz 7pWQyhKycS/f+gTSTHb5Due/3HlXt0ZWNY63rPGvWbkilmAr8aJOFuns7Eg4xifG+ssTY7d94kUG rk3k+8sjifF+JKyq9vIDICHman5f50WCxPv7LiDVV4ysHBqRcrWLhB/kU7zMpgSsHO4TpA0pxPnl 5HBadnWHySrcSWxfGEvt+8iqzGdIuGB8fYI28iMvDx9xL+FHtg8fuXx5ox85G/FHGod+1zd7E9tX +Sbko2SNX25CyMXjvgTLa1y1uplvV67t9JfjDJGXhlsox0545RAzI4cnFeD5KxtxEus5GxbGEgX+ loTLPyfFbRzAm+Siw4kZl6RGIwlXWYI0rh66KlEQwWtRRSKdXDCcQH4v/8LYUVI0+PHhKb7MZ4vI FFLP6Uikl6FQ8iKdsTXrEtmNmWtQP9f5Ypk5iXA9sq/eH1tbz6Xk1xJjP8bH4QcFaFyFc/u3s4dP xmkn5FzFF6OZrJ5LCwd8Ffjnn1OKB7SElNrlEp1T6otBJhk+DZ8ydAbvfe8+uMNyy6J4MW7x0rJo Zg4qt/H5X0jKTE0AyUgol2kSkAjxO5pSz/kfSUudzQka64usLb+CwO/dFHcMAofu9sN0Us6LIWYg CQoXZ5TPYUI+xb4PDysJivM0hrgUvRhBFvhi/rX+ej/qUHhBjAuH89qQb9Uif9XCZTFD2kM22an4 qxZ18lF/SWqI+DrnJgiqUxhNqcQ5JTVagU6ss7PC76vobOxc2T24fZXfp/k7D1dVdbZE0PmQBTHU ge7B53dlJiruqk9ojc0wHXW30z93Tad/UawUBYCcp2WLY0NUGI8z1AQPoNuYc9gPOxYeDsOORcti RzVCfDsWx56hQMsa59TXTyBEIOif12PM+jupoF+SO7BtwvaUkCBVQgLsuN2FbTe2A6KDiMIr5EHh U7JAHIPbu7E9Th4UG8gCOp08LHyJ/X9hjPwrjnvIAjzPJXyD19yI/TIyW+giWwUvbg+QJcJ/kNn0 IvELAikUfotxZzWOr8LtCvKM9DHpEI5i68Cxx8hWdg3pYFvIbJZPJgvP43gJEaUIsQrX4L0jiOwI 4i+O9QhiNAmjHE6TLDNGqDH6/T+Gk+bXSIgLFWLC3v8UqVW8n5XYiB2RowPPc2JLw4YIYOjjJunE g33v0H7G8AFjO4Jkkiwykowi2UhRDhmNo34yhuSSPBIgHFKNJePIeJJPJpCJiE0nGVcF8cg2chCj 819gHrTAG7SM3sc09oBQLvxM6BFV8TZxn/ip9Ed5onxM/kqpUTpNY013mC3mH6tutcnitSyz7LGc t06y/of1fdsc28O28/b77Z9pudpPHWmOl53FiIS3w9Vsu3A1omCZ5IXTxf3sEWG/jFMJ4RCR9wPu ElKQTPZBQUMcN5MnpTlyHLk5jpztjCS3U6ITvAVJovag8pAKwUKfF18w7rctHIuaIAoxaIZ22AF7 4SDIlaSONJE2IlQKdUKT0CYIUTEmNovt4g5xr3hQlAVZlAgDKldKddIJiZVIILEQaqoingAUL5Xw MWTWLO1cQ7wUtFPxc+/G4z3asdR3M37ikyeBnxXxRh9+MeuSvhb/BAs8rS+Ep1Eb7tA7aQ64UZpj wmkx1szOM0aYFeTbrQ5ivl0j2iev4o2Tx7WeBrxXWmBq8ZRAXvGUqUWF6W6X9KclR9wNa66KNLXp nZt2zh81cuKi0pr1kVvf4tq3CT6gt9ATOP+RYY15ULohnDAalwBR5GMf3rch3oM3Lc5xb6IO+OCL L/CqpwZfp+kQIipxHpFuJxZ2u0kls/jJyO/Q8IP9o/OeWl9VtZ63243Nhg2c51WDF4Q1iDfNxE1u DscPCMAOmiHmhso0oNNhA2yDTngIDoFULK2VWqU7pQekA5LEHHUeMSCGRCaqdSECKbl0kD2kixwh JxA4okmkFyswnYFrObMtV6xMRMb3aX3xuDGPzcl340ggaYjH8YctTSNFPodG/D4CmrOocKpDy/P7 qiD3IgzqF77RvxokYNtyx+72rbfr3zAT4sp9yXT9Ub0RtsMu/SyeArNg7F8wD7Ajip4hvoRaOTqs ia0yJUtlkBkK3yIJhvR7nNOgAGWEBOQ4xOIxoSIHnaafguyuZsH3bP+unv7ZyNldyPnlyBsXaQ8v 8svA9lqh0gklzh1OWqJElZjSrLQrOxQJhLoSe9QeszN7yFXnanMxF1FMTm4KAW4K7mEtFgDSlrkU abnFZbFwfmiciKKGFEt6Th3TzsWRLZwhkyfFkTdFxYAK5B8tB6amNEiGHPfD8OauE3vjT0/5qOPP yIB3ad48+njPXf/5q871u3r+q+sbPdSL1O9GyaYh9T6yK1x/p+cBD82npXQeZX6tSCvTGHM4gZis I6x1J71nvOe9l7yCV6xrymrL2pPVlSVkje5wgOIAGWDECPPyOlOHiRKTyc6AsOXZDqd9uTvb6jbm 0HeuR8PmcE5DM++bllGA5IMXrasP59KjvXuq5xRqLZc0xEOh9KLC4il5fn8x3145M7QPwT96923X 7bh077aJgY/f2rhuW8HJNWcvdv9N/+KrD2987ca/bbjz1Auvrnt2+tKTz51qadHf+gzneQDnGUBp e0lNeAIQK9rm0iYLKBawiHV73Cfc1D0CJ4FneszKcqeT2ZZZ2XKP1cpVAfXRMY1rwjk0V9TLOGpl vO+49qqGFBu0OpBWZL8jx53jMESg5Yw+0LR/y8CWn96wtYm5k5/OWXHmb8mvz1x76iaY+sDOtjJ6 6pzeP6r/0+RbaF8YI0SL2IO6aCavhBdFxUqJCjEz0HHSdOkqaZm0QdomdUoPSYckU65YLEbEJeJa sVW8U3xAPCCaWNASs1AF3XHQ0m4RqIlJYBZJhcwqBMyJhRZR7h588zlNk6qwc/45i8XovPmcqqY6 4UyTCXstUqUIRFQ2i6YopaIgYzYtUmTALC415AL30Of6eOqq9TmnzSjwagZrpuHhafHNKLrJk5BB DfEchl8oAsBt3zW6eZ3+EY1uodXJbQjmYKx+WuzpLxKsyb+i3j+I9rNVPI7RLx3j1i/CTa1ZD2RR tleEqBVA8QO5E43KlBYpkaNyTG6Wd8iiPDKi2srBo3aoVPWWy+CBAISw2FIHXXAaFBiNOuiY62ny QZ2vw9frY8Tnc1PBO2Iu2NxzBVAEPi2trxB/jiIUbkN8c1FfIWqloZLJV+N8ZlwxG9Dp8FlxO8vJ cYwpKhTcLllwuARwGErqH814Bw0QVYAu1cMQbPsEoBsc+tv6ktI5eu+MWM3kp35533/lid22V37z 1NoG/fTJL4Tz+q+Elx5LvqVnydfvvHkLat6CwV7hMfFt4gZL+M1KAq0AtE5tUttUhjEOaPB7ca4b TsIZMLMfHCVXOR9y/sHJGA96lGxNA3fanWlUVsAtwVqAVhVYQK1UaQCZRols8VgClpCl0lJnabK0 WRSLR4pUOnCGQQvE1Ga1Xd2h7lVF1VIHTdAGHbAHGX0ETiCze8EMmM0POXVRQROj/H4YQl0WG5vr Ms21mVwsZUZaD4948Xhh3FFkuPh4H5rT8ZR3R2dmsJmzPPVFVSJxkDlj3S709iGPlOMj6P5zCoXb rqn73ZHP//SbN1pv2K/34PcJuAHyBsRrTtfpPV98oV/4+duPwc8hDhH4DY9hXM/eFV9BHOYk88NT 7RFZ9shUNpcfAXRf3ylQB84sNa+vAetwaWZLFKjJEb1CaYpQa64MT4ZecLoMlXA60PjhrP4ChBZA GNoGjs+ae+wjvWqc2K3qO/U/DHwuvDfglWAUAJziEZ1TNgMrPiqpCI/zIg6pNJs5cQGZyVZSLpbL SkDBvNwCUUEQSdQkRhUF/eywY0qF/D7OyVLtE9RWMPwQ90U5bgzLn+hZdO/AGtYlvK0/dk6f2yse xaJO6rnL8bkm9IlTaWVIAVnx4KNCSp3SpnQoXcoJ5bTSq6iKaFAhBSRKJDOnQiJRWVIwZnIj4r7B YAeS8G588yeXCTAeT1kyqQ+wY8bDk6uGno26LtpR1zPJXeFV8ySu3yyA5j4S5AxPRiijMkPgGA7r L5rNWu7RAlpI69D2aF3aEe2Edlrr1cyaHKn01HmaPB0ewZMVIGCfG7WBjHUrMyg4PTLCPNclzB3h Mo3g2scNmitfIbIp3jfsxpM92vFCVDvkmhF65LzvlM3hL85xSAJCjZTGvblp4suRM/0X39m17I/w Rlw/+zP9mL4b7oPF/xDnvDV2oX72X5/r5+eB78Nky7wl8EtYhN+DnNMP499+5DQj2WEnK0+F/JAB 2oiC9jdrVop/kycVIfR9GATxaD86AK4ZGBe4ZiwKTzGDiZEKVanA6tQI0zgTM1UyqRzvJniEgBBC uCsSxMboEhSBoOdWaMp3o/P2TBuWz1fx49xlo79GUAMyPi3HATnI/Pf05kf1Aazp/ROCejH105aP 9GvFo8ky+mJy+8AJPgvX4AXxAlJjgd3h7W0M2gVoM0G7ClEEOLQS/QalfizWmYD1Ujgvok+GoAQl tqjtjI0pNq+txNZs22ETZeqhAcoU0SsGRQYVRKoIyqDIXjkop7x8t3xSPiOfl80o1mFucVzPUeNp xI1mjGOXwpvNZoxaWxWy1WI2M4FSiyqKSqvJ0qoqqlcNqkw2eUwBE2tTod0Epq2CupWZzR1sDzvC TrDTrJdJrDXFvzqhQ+gVJM5Knje0CV3CaUEW2im0Y0yMmIGdN4O5e/BjI3ryTngiD5rmzQJdY8KA SreootERtyhBAUxChjBWwATQBFiVVikaMMbRWbPQ+2l9GD75b7zh5uJQEN/cF8fYY4RTroxcVzG8 8qjLGx9Pjo9vxtM4Mo7zDAQvTcUlfr7oZ+AH5ucht0i8MLBX/1Nc/9O+byHQCTNg6k5g6QOn2diB z8XnB3LZ2SFvOICVYzsZQZrCM+/E4itlYBPQB9nTI1EVOlRQBa1cKJdFj4HhK0WRiJlahmSyOVja XAAxY66JKGLKE6F5YRTtKyoswnBaNKxtHCadMrSNB9EcyEOE5CgcgwjeJSHa+i5usjf1G360Qf9n OuQtoxMfaoXDAwejeY/u+fVT42gcpOQvxKN2fcFtp/KTG4XT+nppxZ0bl6JGohdhJ9CL+Mgfwve1 OaBdA8xngbWjay12AMbGEvQsPC8UacARclQ6uhxHHCcckiZG5CxPViiLZaWT9EhIPa3SSjUVbDvU PWqXegSHTGoO3pQ0e9o9FDaYtpnoBu82L2XcGVVqLEhKSBRtOncEjDOBV1YYS3PYIDttLoa9bJPt ipjHTdAQGUqNhzZkEArzOLrLvleNAQx0BnJCNg2D3zF5qYzQw+Of5HaJozAIIvZd0PjQA59u1J9u nfXNK3pbzc69y1aD5/7byvXeCz0L/7bxkaodj216cPmhjxs+XtUw75Yd0Rt+tfqZzwz7xTjzFtqv TErCufL9INwP5QEaok20g3bRIzzttXCVpnJUiIqYDafcO6K+8YjYP9M+Mxy7IwcTS/q5PqBPFF4U 3v52ovB2by/KQkSE/RXeXSJ3h62VBIOmIGrp6VIV6x78MjyB964iGIyBeZWgUoIZ0V7lpCKJFRKr oNL1hF4PWKFprUTRCRyt8guMjt2e6oQ1Fc2sTQAi3AMmiVLDovoa4ghH0YS4wRgGxI2HW8f48Uhv A9oG9285tHt38gOMuYtgHXhdYs/AaPYh1yDkyXik2kSuCk8MqsBdU4jWUYF7oxLEmwIVZSKaBML9 MebMZhYVlKgpBSDxSaAd1443xLVSng1oPWiM6MSLgTMJk7AFdHWyi72QfJjeuFi4pXfxt7dh5KVk NvLKiXWqkVideS3cIbs8Lkpa/bAtB7blQmsubLOgEmO8FyEolAhRgQFPIin1aKBJKhlV7Q7Koz2j 6ej5HVi8CNSNgdgoiPmAUG/mqFrVZK9VNK8W1Eq0qBbTmrV2bYe2VzuodWsntTPaeQ3LTE5frclk HVPLrLXOTJWpmIiie+LM44bMax992nsYMY05cX3ti2PF4tgx7VWcISorqisHZwZCww7u50oSFhCK p4zJKfSkcjYsZzjcLo8xzjBPd7swnaNnRz+24snjCLkgv/TvdzdM/ckzFz9Zmj1v8tSlgbBPP9P1 52tKKp/c//zb9hcLfj/zI/21T0+FpmYsgP9j/f29f+bc24rcqxX7sVrmJVeHw8qI4Ajqnm/epwnV WnWIVqL4WCrEcEl20D2Ie6kX1YVmVKqof4Kz1uqplalqVWUZCyfcLRvzHkqxuZ/t077qw3nmyn50 G5jRETfWHIaRPsd3JSV396+5/gvw6R9eemBq6Orf7NFPXvujGvHtUt0yQz99Xv+/+glWnnxr9hMv YoBD3UGZs9Moczf5XXhXk7nN3GHeY+4yHzFLTUOIGnUMU77ctEjaEgTrD6SJDHWOBrn3IbkYgELm SjMlGFSNVAdRu+pRQ+i09iAwl+Z3OPYMebfTDokgclcRlocQQZlrr0K0z0+mqg1qDYCOtY9al1Jr U11c6ihzQ9znUIhoT6k6A+a4x3E/9TUkzmWdclIGJJfcWg5H5Ch04piCkJy9cU3s5/ccgNm7NqzY 9Oi1l/Q/w3Swv8Def2HRi1360yuOlY/hppiEEi7FJSjFQpQij0DN4ch7aZ+mUdbsanehqxW3iTRi WmJCjJAVzKJEs1bb9rnnH5QhJNfJHfIeuUsWiZxptXlqUZpmu1lQzTIuw38nSiMExZNfJUtLUY44 KUNlc4oNcounkKJCD0oWlRJdK85jaoiVZP+85mN9EAIfblvT37+g7sFfw5wx67XZo4sgS9dhViE8 WdovsYLwkcf1Z8anD9txDGWahpr4Vbi7Q9ojdUmMbJRukuiSdGA8gw1IIYlWSECW2BHZI7SgYGjs lXCnWW7HtHavfFBWUwiI74iye37ICR5nyFnpbHN2OPc4JSe45sN82QIdWHftshyxnLD0WiRLhixB m9SB8HyRA6TacfJ0+SqZMQ8yq0luw4KnyesKuqjBXRdXN4oFMMFTaxdqTap9SAWMLLgnvll7j6tB vGHzllSUQl+ABvEqwo+ULnxn/qgMOemY+/K0zNABbieu3BxkqlCWZPKvdz5ev/IOvf+i/leYdvZv MGLga2ob8fkp+OP2e+pfugayuTJM1z8/PbGB1yj9qJV54mdoIQ3hMrdJ5YiRem1BhI3dtpOIIc/b LtkUmyZWy9Vq9XDOOswJhVhMtYqt1k5r0yxmu4TV8yG7LjXqFn19faXHcXbHX8WwYIjd5Sly+x34 LS7idTMP/aA2v3I1fPh+/y9+qfzpifrtImRuq7daXx/Yz1a+fuyfAdTaQn0F+0z4CdbPS8nR8A1B Swkmuoad5Y4vHo/6OtM7s30mVs+ynNL8YH5JfjS/PV/IzwjND2RBexZkzSS5862T57c7wTkjSEto jDLMfTT/lOAIT7bXPaU2mF2SHc2OZTdni9l142DcIqUuACSwCG24tmB6rbvApprdw76aFwYb4u8m 4+ieteOI6o1KjAEv+t5FfMFTneMIMozhlBFzQ0jj9TWjZCj5fVh2Dg0hjZBH5vVn/+hAgCMOPIdD NcQcaa7UBZxvoX23/2rjXQ+P+89xur502pGB7ntXrnqybeZHhzInjJXjkez7psAm/YPX/1W0vr6+ sal26Ua975X2cEmD62jxOm/b+0/8eeqWX9Zdvf3IWVEa7wmO0s/++qiwvGFry6qFLRtRCzowIofQ LzhJeThfcQGpdipqtVKdgvIhE68x9pq+NuF6SppZFWptTrPJbJPVYeO/An1yD55jlOYkGeVsOPJ0 t4OV3rRm5i2Zur7y0Gsf0p+vbi8bPzAo/rY0+Y/YR28mN6KUZ6PD/kB8HfMuB5keHs0VMWhjphuZ w2apPuOAbkSFjjTrAo3cJGkWsyahqmElnaMBLL5vRqm8y58NRjXfiIlTmZFNQlXpkiWl2CI74afi 60YXd/sL2aqeb98amn0cZ6+S9eFyBRNZq9catDJM6jBLV5Uak8qkalb9Xc7H8xZZsATkEGbjoiTX UIwhTDBJRDATM264S+TwE+N6Kr7FeZrOiR1SijjPAzl3jDxwin6svb8fa0QT9AfhOfj0Vv0hZM3A Q/CwviHZhBQ+M3iBjkYKFbIhXBJhwH+4HtBmhuHk7TtvZkqhlx3CXuGggFX16r2AzgerrN2DF8I2 XoYEfKFJkCUV03VkYY8hPESbcazAobpyiMHjESqsA2GEf3TxM/3XT7/rEFL07bzjeT++kOKYVI8+ OJtsDs9TclBf5GwIZXdl02xUGh4xurDMo1XLDo8jgBlAk6PXITl8itfrpYrLi8DLm253pbPaTEtt erZZMTvMmXK67ExxLoUMsPBr1K24Q8S4uBkrg5ixGcqFBsG5x4t/RqfIw11Jqg7vEBteLGl296+q L7g2o/+JouYD720sOLj42RN0/ztzxg98S4/XxCvGDehCwdVbriue1fNscgZHCtwCCnFGTlIWnmBY AK4nOJXq0yb4ISMYMgGzZDO8AkKZIS18d5jG79HGDaBkfVvoZn//cxPXnXjpHL1m5y0zJw70CwVr 2j/tSV7L9R9jcwVSoBrrPcvQQUXdCEg9QNotOyx7LYy1OTjeYDSGqzoSMMUT9FDHfA/GukqpCcPg EUmSLPNDiJppx+X1Hp65y7jiY6s1pdUyVGVOMEdewwTzsJNKkHi+yEWfxiM1r78gyMjVuNPSkNGz IfP8V2DT+/7+lf4PEAZbd+qtnXTERZiin9EHB4n+NkxO6vu6D0G820CM+gphMc7HmkKMa5VWBV01 x42u+aZ9djsI1VCNlbcfBo+IGx21FkSMYGOSBTGjYVPf0c3RYmkKLyIIRmUocnO/eQVg5NoBm/r7 r96Jq5mfXrx+ZfnyJ/c8+OSyTH22+E50RfK/9W/0T9iMZE/owDO/5cUirgNsBVJsI2vCV3EsT2Vb yFZpYwFjU2drsrXZOmxHbCdsJptkqpaqu3H1yigahhAg9cpfy7JsNwITLjrTWosiyWbLUNjowTIY V2XuCTAkck/FVcQ9RDpGwn+WLajr6O9f/9T2claRv29Lcp9QsOr6wDCOnYyUjSKXwkdlDygKrwKR bR70AQpUeoBGsWpXmY6rkQARxDwpmMIqNVDsXnvQzhfBxB32vfaD9m77Gft5+yW7bBfn85of5cW/ AJb/mjLaMjoy9mR0ZRzJMGe4iGt+txk6DLh8wnza3Gv+2oxrJdnm9A3p29I704V+BFtnVFzSVdI9 gpPJmkeje4xCISvBlMkaQMiMmIfVZiH2z1Ktw4p3DDO3Y1hQ4Q6So5vNhiZiUs4LmQbmSenhkFYa CCh+eXkqMMZYsjUSdLcrXUjFzrxIfcvd98Vu1b9490DX/dHa+25fCiNuOvfba34SOVHfPGN+8dY3 dj1c9fuK5rFzrt3X8sDjCHuATEav+g9xLdpbY3iWFsAabCXWYPdgDfaIIivIXwnrfdXt5BIW140F wz1YPQymlaRRYreKPIeTTLWkljkxPhhG1VeKCorFTZQ0rrThXinunYsj+ElDvFMcMkrEPKqH3BKP UE/edFM/5OnvR5ctm1/3q0eeYOtee3+F/ofX9PFbGyZ/Nuo3XYZWol8oEgowKs4Kj1XScBG1WkO/ 9J3mcXDeiwYiO9VagSAqVyQjOHIzHzbyJAfkIgfiPgcWizjKCOGWTSt+fr6+q//okvu8/bBsQhju okeSK16PTacff/smfzqvMPCnS2RveAkvvuDqBYoV3DSXFlM2QuKrZYwp+GZos3IQiwsi2SFCB8OU r4aKNQYQ55CLSjcTerNRbeA34MsZXbiYgQu03YO/CLt5CSSEUZUqvNSwGVRJwtIIRlGeGl1ZaUgi Xzn8SmkFbnFaQ8WGsmV6FuDKKaSByYVYeAu9h8/AOnhBKsEZWMgH4eUymgnWqWVc7k0BjBJbO1ZH Dw4BXTNpltolypd/KEg1olpjuQXfhBZkmQlmM7QS1iqQW03CrVgWMLV60PSUJlSYE1j5xeokru0N LfKFJ/EenZSewf8dTv5vsUpVQR6wsWCwWTFvBnmzgOU+PBELMkOBj/s3Y3bGm6pGjfLKCguWKy+X Joe5MJxnIRewHJmThuXItCLh0eX6+/rZFfpGkE+DtAzs5//lovclf4xs+Qm9NXkzvZ3LFmPeOuSM CiPCvWfMcFoAekbG8h2cx3RXhl4Z2qwQtIKZmiRVZoqk4qs1Cr7FYSJYoDGW0FMbHnPqjBdAUoHn a2LpJV+j2RhrGyy14eZVh/ziyxzcyL5WLL34h1VaLw1iaDA2JejJYrSZttMddC89SC9Ry3n8o4rk lYISksA3JVJUiklcVDukvdJB6ZJkOY9/VKkpMUVNSF1NqqrIiGpFKeKrzxb0xwjMhviMVoElUg4b +05hvN685fLPjh+uU4QXfnmhBYEarqoiX9Pwn4X0vq/1MwjLfgrZfxmAkfpa+B3E9UfpGKrqR6Ey eTGJr7YjZzH2TUXOWslT4Xm4xkNFk9uUa2JmXNQfZ2VYxWwnlGK1ANrswL0zxbo+2YH7qmoh7Vhe Eiw1JVbOfqvdXBPA0jgVTCab2j348nNckdBqXg77cHZVwVStKqBCiRpVYyqfs1DLbFYphUOxsoSz wMIcoDc6biz9GX/4osUMXIHlxy6nmFi4w6WXYsxOAhyX5tCVQf2bpyFngX4YGIzBJTv2xDV3n/tZ 43E2K5lF+Vv7uOLIP/q3+L7vD30m4yBDTUu9Y5WGb2zwd6q8V7wlxd+Rysf3oyaRYjIViyfTyAxS TiKkAnUqSuaSq/Dt/nlkPqnBuuFCUksW4Tv+S1HbYqSeLCPLCb6hjRx3YuMfCdWSLJu7bF5tbPzi LWtXta5uXntd9aIJc67duAYP/z8+1CZoCmVuZHN0cmVhbQplbmRvYmoKMjI2IDAgb2JqCjkyNDAK ZW5kb2JqCjkgMCBvYmoKPDwgL1R5cGUgL0ZvbnQgL1N1YnR5cGUgL1RydWVUeXBlIC9CYXNlRm9u dCAvUUJJV1FYK0FyaWFsTVQgL0ZvbnREZXNjcmlwdG9yCjIyNyAwIFIgL0VuY29kaW5nIC9NYWNS b21hbkVuY29kaW5nIC9GaXJzdENoYXIgMzIgL0xhc3RDaGFyIDIxMSAvV2lkdGhzIFsKMjc4IDAg MzU1IDU1NiAwIDg4OSAwIDE5MSAzMzMgMzMzIDAgMCAyNzggMzMzIDI3OCAyNzggNTU2IDU1NiA1 NTYgNTU2IDU1Ngo1NTYgNTU2IDU1NiA1NTYgNTU2IDI3OCAyNzggNTg0IDAgNTg0IDAgMTAxNSA2 NjcgNjY3IDcyMiA3MjIgNjY3IDYxMSA3NzggNzIyCjI3OCA1MDAgNjY3IDU1NiA4MzMgNzIyIDc3 OCA2NjcgNzc4IDcyMiA2NjcgNjExIDcyMiA2NjcgOTQ0IDY2NyA2NjcgMCAwIDAKMCAwIDU1NiAw IDU1NiA1NTYgNTAwIDU1NiA1NTYgMjc4IDU1NiA1NTYgMjIyIDIyMiA1MDAgMjIyIDgzMyA1NTYg NTU2IDU1Ngo1NTYgMzMzIDUwMCAyNzggNTU2IDUwMCA3MjIgNTAwIDUwMCA1MDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwCjAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCA3MzcgMCAwIDAgMCAwIDAKMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDU1NiAxMDAw IDMzMwozMzMgXSA+PgplbmRvYmoKMjI3IDAgb2JqCjw8IC9UeXBlIC9Gb250RGVzY3JpcHRvciAv Rm9udE5hbWUgL1FCSVdRWCtBcmlhbE1UIC9GbGFncyAzMiAvRm9udEJCb3ggWy02NjUgLTMyNSAy MDAwIDEwMDZdCi9JdGFsaWNBbmdsZSAwIC9Bc2NlbnQgOTA1IC9EZXNjZW50IC0yMTIgL0NhcEhl aWdodCA3MTYgL1N0ZW1WIDk1IC9MZWFkaW5nCjMzIC9YSGVpZ2h0IDUxOSAvU3RlbUggODQgL0F2 Z1dpZHRoIDQ0MSAvTWF4V2lkdGggMjAwMCAvRm9udEZpbGUyIDIyOCAwIFIKPj4KZW5kb2JqCjIy OCAwIG9iago8PCAvTGVuZ3RoIDIyOSAwIFIgL0xlbmd0aDEgMzg4NDAgL0ZpbHRlciAvRmxhdGVE ZWNvZGUgPj4Kc3RyZWFtCngBtLx5YBRF2j9eVd0999Fzn5npySSTY4AEEgiBSJojKCIS7gSJBLlB 5Ah44EFQOUQU1AVvwBtQZEg4wrELIqvrweq73nihi+eKsi7iRSbfT/VMQPfd7/t9//j9Mqmqp6uq u+t46qnnql64YNFUYiHNRCDq5DmT5hHtL9SFENo8+eqFSuba6idEN3ravOlzMteuK3F91fQrr5uW uc6pI+S6BTOmTpqSuSZnkfaagYzMNS1HmjdjzsJrM9eBD/D82ivnTs6Wh59B/tY5k67Nvp+gnChX TZozNVP/3vv49by5TQsz1+tfRfrqvAVTs/Up3m/+E/JqrUXP/cgylfAKAKPJ96SKPEz0hBGZlJCx hIjPiDlEwjUvl+wT7tn3VO+J9qofDCGDduejfy8o5sCfH7xi3C/b26fLxGDBpVGrzwtwn75f+lIy UCa/bP9lsZx5Ey/p/Bu9l4wWClsT/ujrB4QichyBCUUtyZzoXqFAyGnpG1XbhHir09PD3r+roOCJ JVqsIJ6LsB3hIIJIJgoRlMqIlyA0I2xHOIjwOoKOEMS8VEGYi7AR4TiCTsgRwi1KVO5fIARwbwD9 tQs+8h1CB4JAoohLEIYjTERYg7ARQafV4zlzEZYgHEQ4haAjquBrubsMbfe13K4lrbOu7KFdTspc TmjQLlvH1WfSYSMy6aAhmWp9MtW6l2eyuw3IpAVdMqkzv0czHt5qsvY41N8reNFJLxo+DzFlR4id UhIlmwQPSSEwAU3VclTB2ZqX6LHxoCASKjCBkikk2nFIoC1WR4/+JtbBviNOEmXfspOZEnay1ebo sbH/xexTsh3hIILAPsXvE/YJWcKO8zFHXI2wEeEgwmsI3yHo2HH8PsbvI/YRsbMPSQlCNcJEhI0I BxG+Q9CzDxHL7AOOMVrM4WoExj5ALLP30a33EdvZMUDH2LGOQ+yNlorKHns1IFmSBaL5WcAXygJO b4829reWn4uAUQnMNDBqv5BL+pEyIbclv3u0TfC3VM2MtrG/tyrJ6Kb+pexNkkJgaMmbePObREGo RWhEmIegA/Q2oLdJM8JahE0IKQRgGWIZQWEvI7yK8DYpRVARahEM7PUWvKaNvdaSGBDt72V/ZS8S H0b8KPuLlr7KXtDSV9iftfQlpBGUv8xeaIlESX8zygnukZHKSEtQLrHnWvOc0Y7+DnYQIxhFXIJQ jTAcYSLCGgQdO8hyW6ZEnXjIfvIy1nCUtZCvtPRJ8qiBqLOiamIgEFDhUaLPBYAQbVQ2JpiaWH8/ LnmUuPNuQDxK3LoaEI8Si5cC4lHiyqsB8SgxZRYgHiXGTwTEo8Tw0YAQtbENe/IKohXDZ1Olv51d g1G6BqN0DUbpGiKya/iP/CzyNj7YUlyMEXtATRYVR5v30eYDtHkkbX6UNk+lzTfR5qW0uYo2X06b k7Q5TJsjtFmlzftpbwxFM1V3/u6yUvXT5pdp8zba3ESbE7Q5nzbn0WaFVqhtLNYyBKsOSY2WtPbn i47FWi/oB+pjZzGMaAw4HwNNOIj4NYQO7UpFJSU3UzkQ4Wlua3F15rpbnx5z+1/EnseNz2Manicf I4iYoOeBRs/jIc/jcXbE1QgTEQ4hfIfQgaBD7Vz0Y40W2xGXIFQjTERYgvAdgk5rzndoCiNzEfMm btcaVoK4GmE4v2LP45eLX4zF1Bw5LCfli4Q1YWqP0OGRjgirIF4v6LLTYXC0UevuH60//Wglxv5G didbQ3IwEWuz6ZqWn3OibfS+lsT+aH8PvZdERGAdrSQJmo+0N2nSrnuSsIHnl5Mwexppj5bwWNxm b0l0ie6jNn7X7ujP4RPRr8JtDOCX4f3Rd5Q2kbZE30LO07ujb4Zvi75U0mZAzoFEG0WyT9Gq7g33 jm57Wau6FAUPtERv4snu6I3hC6Ozw1rB1EzB5U24Uu3RkYnx0YvwvEHhK6JqE565O1odvjxalanV k9+zO1qKJiQzYDEaWxTWXhqPaA8cU9FGZ6hd9Ov1dfrh+l76Hvou+pg+qs/Rh/Rug9MgG2wGi8Fk MBh0BtHADMTgbus4rib5rufWaZufDghNiajBMigM5WQGMWHUwMjFJOUShrKhowbQoalDk8nQK5TU mVHxNmoaMT4lxQfQlHMoGTp6QKp3cmibvmNkqiI5NKWvvaxuB6V31iM3xVa2UTK6ro128KxloZRz YN1eQqlj2R0hnhYuu6O+nvi9V1f7q539HJWDB/2HqFHLbByUPP/nPw8m/cmc1Pqho+pSW3PqUz04 0JFTPzR1zyhlQt1e+j09VTNoL/0nT+rr9gr96Pc1I3m+0G9Qff3QNjpWq0cU+k/UA8YgQT0DNmZe jyiGSKbeA5l6+bgf9fJ4gnpGI8nX6uUbjVo9kfJ6O5ryagbtyEOEOj6FNGl1mnzKb+u8nI86+YhQ x9tMXtbqvOxt5nVS/bTHhMOoEkGEKjRIwlqVMA1qVbSW79CqlGSr3Hauym3am4RMa7Q6PMJjrMc7 61iPo85vBvJ/BqcOSCZpa9/6yRNqpsZrGuM1UxEaU7dfPcOfar5CUXZMrucFSkpINF4xeQZPJ01N 1cenDkpNjg9SdvTV7vu34gm8uG980A4yoWZ03Y4J6tRBLX3VvjXxSYPqWy+sLa/43btuO/eu8tr/ 8K5a/rBy/q4Ltfv+7V0VvPhC/q4K/q4K/q4L1Qu1dxENx2vrdhjIgPqBmD+etjKzCfjaGIrVD/DK 8/ppyNs35r8ptA/cymZiTtanLPEBKSsCx+uu/bv250VYU7zIhmx7tsh/U99YaB/dnC2Ske2IDyDJ hYuaFhF/zcxBmf8m/CFr4SI+FZk4yfP+4x+q1KTUSYM4bz00VTxqaKp6xPi6HXo9chsH1SOvT2ee 2VzT1nEok9kNmX14RUE4V5HnVfE8ozFb8b/jgtYmZGN09oLR2N9K1QhdSJrqhVRk6GgGUjB6PIZh wvi6feCl+CbRVI8ONtEkbep8Gu+HBpNMDkG3mzrDwkVZKDsWC7OpVrUpSZJNnUPS+bgkHywt0sZq YRKkTdpHAghB6SkSEBPET0jHFwhf8jQ9s+NLXs5T9jUIXVs2ELKZbKMzyTZykBymp3DXdrKX7CSc BRpEHiI3kD+QFdjWxiPnNjISPwn5f6CBjp2QTB7BhvkIOYq648hNZB/xUn/HV2QJWSa8gbuWESvJ Jf1JLZlL7qCXdCwiE8jH4i2kglxCriLzaHNHXcedHXd3PE6eIHuFv3S0EzMJksn4He34Vnq34wPS FXesI/eTj+ndxl1ExVuaUfNhsoA8IDSItGN6xy9oQYxcgzaIZBg5Sg+xJJ4+lXxB/fQGYSCe8lhH quMIaoVJA5lBHiD7aE96IYtJEzqGdRwlXrzjWjz1ftJCduPXRv5IjlGLdKrj8Y5TJEC6kCHoz07y V3pISLcvTVdj3CSMUhGpRMlc8ifyInmdxulzbK5kkXpIqrS4403iJt3JGLT2Kdz5Of2R3YTfEuEF cXDHAGLDuNzFR5v8mXxCg7SEDqdjWRGbyzYIC4gBb+yO3xQyE+N9H57+EdBoN7Ow14THxKfFX3U5 6eMdNsxIgjxIHibPUSt6qtAmejN9m/6dDWQT2YPsU+EP4hbxb/pJ6PXlZA65gzxNfqRO2puOoJfR GfQGuoLeRe+nR+nr9EvWn41ms9l3wgxhvvBHcQB+o8Qm8RZpuXS77st0XfpI+r/SP3b06FhORgAf lqL168gG9GwveY28h9/H5FMqUTO14afQGB1Dr8fvJnoHfZRuplvoTrzldfop/Qpb0g/0V4adlulY CMwPZ4HibAE4zD+wh9hr+L3OvmE/Cz4hV0gKPYUqoV6Yi1atENbit0v4RAyKr4kdGOce0nppo7RZ elo6LJ3SWfQ3Y49/9exj7cXtH6VJemV6fbolvbPjE+LBHGL3gAhWhdZPwm8W5ns9MG47eYNaMHZB Wkz70UswMhPpLDqfXouRvJU+QJ/Q2v4sPYBReod+hzZbWVhrczfWkw1gw/G7nE1l88GM3c12srfZ L4JeMAt2wSMUCxcKDcJUYaFwnbBeSAmvCh8KnwpnhLP4dYgmMSrmigkxKV4oThQXiRvEL8QvpAnS K9JnOpNujm65rk33T3A1/fS1+hH6Bv0a/W79m4ZGYOfzZBfZAww890ePC0uFGmEXuZOViQGIMH8F Pk8kU4RhDJjKNtOV7Ea6k+VJ1+r6sr70UnJKTGCsX2Ab2RnWVxhGh9JRZBbrnnmgzi1uBVQlPk9O igfQt7/iydfqLPQm9p3OQlrAI1WCR/qzUComhVfIMeFjqhcfIe+LJuqjJ9lTQi2w4I9iP6mOxISH yLPCfHoj2cVqCDH9algNPL6UbgVdGE170J+EDrDBlwKLKoS/k1vIbPYuOYl1vJLcS6eI08mdpIze QL4gT2JVFElX6Yp1HvoSmymuYi66kzBxC3pXSfOoILnJrbRBeED3HXuPLCKviSbykfAMWv8ae1YY Jp6SRtIZWAE3kuVkfsdScp1UJ/6NTicCHUvyxeOgbjcIPcQY0iWgKhNA03Zjde8DHegvDEOOH5hz CfBiDCjEA/jdBzohAoNmYo2PAxX7K9mpG83ayHTJRkF1oKl5JT2SjO94ktzfMZ1c1XE36Qp6sKLj BjxxM/mMrCGb6bL09WQeRMn3sLYvkQaz16TBHV3ZKvYeG8XW/35+Mdr51E++xu9ZzEw/aT9ZJb5D RpHqjtUdbwG7C0Fh7ydXgGE9gV5+izdcJBwiZelL2Y6OwcI89PdjMqLjqY4oNZEZHVeS4eQAeUIv kUn6JOY4Rf+G/l5PprKRHQuFqemZGIc1GAUVo7UI9Oc2deCY0f3V6n4XVPXtU9m7omd5WY/upSXd unZJFhcVFiTy8+K5MSUayQmHggG/z+txu5wO2W6zWswmo0Gvk0SBUdKlJj64UUklGlNiIn7RRV35 dXwSMib9JqMxpSBr8O/rpBR+3yQU/a6miprT/q2mmqmpnqtJZaWKVHXtotTEldTRQXGljY4fUQf4 jkHxeiV1UoOHafBaDbYCjsVwg1LjnzFISdFGpSY1+OoZq2oaB3XtQneYTQPjA6eaunYhO0xmgGZA KV983g7q60c1gPlq+uxgxGBFF1PB+KCaVCCOW/EYIb9m0pRU7Yi6mkGhWKy+a5cUHTg5fkWKcE4p qVUhA7XXpHQDU3rtNcpM8Dgpcruyo8uhVavbZHJFY9IyJT5l0oS6lDAJz6hJOZJ476CUb/EJ//lL PBw82YrfloaEVTX+mQqvvGrVCiW1aUTdb+4NxfgT6uvxDNzL8gc3rhqMV6/GTA3lvHiKLauvS9Fl eCUYy3ytV5n+Zbje/MZZSsoYHxCfsWpWI6YmuCpFRl4XawkG1b0dx0mwRlk1ui4eS1WH4vWTBoV3 uMmqkde1BlQl8PuSrl12yI7MwO6w2bOAxfpbYCoGPVOmQVp1Dg0deW5kKW9jfAg4wZQyWUFL6uLo U28eTe1NVk3ujQnAXz3FXakpmJGZKePAxlVyH56PLtKUlC/HlVU/EGBA/OQ3v8+ZlM3R5cs/EF7I 8eQcqqXopE44lUymios5iugHYk7Rxn7adc+uXa5uY/H4PBnyMxcaSC3GdlJ9nxIMfyzGJ/j2NpVc gYtU84i6zLVCrgi1ELUEvDVr5CWHOks8Y3hJc2fJudsb48DknVyeJZ6UIXHu3y57XTUz+qSo938o npopHzoqPhSssVKzqjGLtUNH/+4qU84HFOOGsiyUcg2sE0IMeRxiIUErzXDInVXALtdZUmI+/nUa Uk9p0xuAlVoOVQan5MaLMnG9KRbLrpn/101tHaf4XVpy/rZsN1J9ktmGZpqd6vu76981z7JKGDoa JIeBs1+1yvS7MqBappVDsgkwHoJ+TBmYImOwMvPxD5GjNw/1oZSKIUPJaKwiLbs+lL38XcVQ9qZ6 /HHs7NplMGjmqlWD48rgVY2rJrV1NF8RV+T4qr3sMDu8al4NqF0Gcdo69t0eSg1eXY8Rm0H7YHkw MmBHnK4csUOlK0eNr9sLFYeycnRdC6NsYOOA+h15KKvbqxCiarmM5/JMXkXhF2QoRSdbmEGrH9qr EtKslYpahnY9GdoNLS9TCXmUTG5jmTy5sx5DnpjJU7U83j9OYwaOrstOi4YQfOkBh2ChwWM4j8He IZeLTcSjzyHX0BVkPNtKbtBCJdmKtD/q7OP1UGcMwscIVQhjEYIIPG8YwiQE8LJkDOruRdgqPkPm 8WCIkrnS2I52aSxZL71IpiFsAPyo+HeyWVdJ5uD6cdQ/CKm1gtfBM9brtpL7kP8QyicjbwPSOlw/ AngC7ivNwkb9HZDDxhIjgk5s6vgE916MsBzPqkU6GGEonu1COgBhBX2RrKQvdjyKcqTkFrxnBc9H GJRNL0Kfl6G8GvflIe8WwEG8jyux7AgxhELpMyLgfWe5RQj1RyFcCJDix/8sREcXIFXAc/EcBpkI A4ggYdj1SAmkDyMxQQqzQHKzETusTw7iJC7wOh5ISj5wQwT8NN5NQuCpc7g6HM+LgQeJkzySD5mk ABxJESkmScgxXUk38FOlkGZ6kDL++Owft6z1JL0gB/aGFNWH9AVvfgHMANXgO/qTAWQgJMwaMhit vwgy1sVkKCS6YeTSztv/f0mH/3/61FrIGiPBpfE/D34zaR9mY90hKxwRiBAX+gvXiePEP0vHdC/q rzGMNlYb15k+Nv9sKbAst7xoNdlMto/tT8sXyd84LnVscc53nnZNcx1z/+Dp433N97i/n/+5wP7g P8ODww/nlOR8FTUod8Ymxa7PPRF/I29b/orEtAK50FB4rGh00fFkl+TWLoe7PtFtecmM0rLS3T1W lYXL/lH+S0VJ7/6Vc/pM6lvfd1HfO6viVXvRUrBqHBkkGOg4PsQcMUc+ImhJyVlFOHRWlcivRBEP cdy5XGhl10CjIAFbFuHmjp9ac/PLpbaOn9TcRFG5WWcCkwndsyTpzN8aDQZBYERvqDLZjc1GZgRt VD1We7nxIyqIVYyqVkc5DVjmP+VPXiqfTlYNa6+S25MNVe1VpLpKxq+9ChF1OCsreeheSpNJl9Cz zCOUafHaHke7ftj9aKnQSn2nTqW/ysS8nZ6OL8R66Q3ga5R2V1cU5vTOYUbRmMPG2fe49oRfdL0Y /ilHR5mHGEXBjUWrcxBwrjIxmvVyyGTRy36rXS/7bE6dw2dzCW6fzcs8PluAefzWIPOETGHBHTLl CG6/NaJz+K1RnSNkMoVC+cTohgHW6vfn+2xun8/mYfluQSCyPt+ha6O71d42m9VqMhlJyO/3+YjJ 43Y75H42vU4nsH7E/wer7w/WfJvqqBxu22hjtkUx0x9Cxj/guRi8XY5KBYu4jT3SqmyZ4U/KZxqS J0/IJ86lp/l4yVqcHcHMOMrtGEpHZQniFVK35I3ykRXd/Dyx/9sfhrihYb7PFe9Z5or1jLnKBB7K PHEh5okJcVdMcMVcsenjtrx4cfo7WjJu/Tjad9y947a9MpR606+OWz82/cK4RbTP0PSfA3TrOjp7 Hd2WHsXDuvS6demxdGt6LKums4E/13S8rNuIGTKDvoRAP8qoXjWtDawNshmGYCjErU12f8Dt9wf8 IY89EOyedB5gG4kR4paFbVTNQjAQECgGMb+Q50eR341tbMk3hw+wB0gSON2dPdCa+0xPHb/24NqO Rxr5+C0qHzdeG7yTp0/KZxCR6pPtJzm+aaMF+BzKrdAGq3upf+B16khaVhRJRkmZ0j1KuyYAleQB sjJ7lPhET5Q6TIBcBkDFOYWwtsQQdSnoFiWlcUQ2aolSr4RINjujxK1HlNUKQs/cqeFbShtc5b3K ekCm0sVzEzRX53F7y3r06lmeEGgZpf+Xsms2rF+1a8/yZTto5cD68QMGIQi5d5/9hH624V4UrEBB H55ZUz9eHP/wB38+uO+lF+ifFz54R9PCB+5s+qVJZ/z5R3rnhvd5wYv0yMIHVy/kBRis8VhcBdqK T6geIglU+hZbyFKFrqWMztLxtQv040OoDVr30swCXdlNW5bOH35If4un3JAewRox2zK5QDUV2GGy duoNstxGy1rJRpsBqerQb7RdTgRZUARBeMbx8Grtwe1n+BQBmaurOG7SBHOUV/SqKNPp8fPIlH68 7q/Dxh9Yel3BBXGMYnrEAfoTtX17rP3X1+tXrd//x3Q0zaf8/PunqpZCVigzo0mmxGnkLTBtFCjS nfApuNwGLnKnLLMxAH7aabdrwImdVqsGfKPaTSY2xm6LYmk+48y2kc/dv7XTFSeO8oIEfmVeyMcy a1+KKc69oGDx0gPjh72WHkGP008O7F2/avzffm0/9m36+7QBrdya/ojeAp2miVy6ywRi/DQoRq2a oEIVY9REq4gJDgNCFdH11vcZDn3PXGgvNmEtbTI/ch9G63TD6RPySaAxJoPTgZNyBpO7l5aBZrp1 +oJevSp2H60d16Oyl3D06PzbE8MCky7De/vTNjaLzQH976IG5rF5AhtGh+GVccKC0jxUCIjz7uA0 +kSD/DkpGXayeymZD0TtGfP0Z0W0bdcugkr7EK1A6wWSr/oZb2xVponbibgJ5ZtErZVnGjRsyTRq 39GjR/m90FWzSuCHQEbtJULHRy3uStbW8ZGquCvvFSgTNgrb4SxxNaEgrsA71DMJXxL2JeZtC14u ti5G/0H5TsoZXOFUrgH0jeNMMunhK2fL2nRdQPrmFzyBkTHYHxzSIeBjDh2zg3HGVDUFI6Lkjlit PmxUX2pzzwE1wCff6CAWjg3Ea7EgtvA8UoKJP4roKAa8GoMS2qH77086jSfpxuBJnwOLNOBbNWA2 A3IQmecQ2WLhMc8798jzz9ypUwJyGGgJNt38JwjWXgQngh2mzStE3Qq20rzS/pJNMurNflbjusRz cWBgaLRrgmdCYGRotn62ebLrSs/sQGPoOnaN7mrzYvsK3X369fJL/mPsbd3b5vftwXMdbzKqsXh5 qZESo4z9em3U0cT3HdWGXAVsGiNrIy/eri3MJNZlw/wkX/i867RhPhTtvfkfRaivd8lOTsa8TiA/ KFlBwiVzOuaQE/FcvW7M7Dc2Xd2ycMCsNx5587q79m654YYtW2664eIG9gYV6QXPTGxNdxxLp9PP b7tvD304fe93p6C9nvXtzOUcVz7GBP6KuTOR7aoicB5itriErWH3G+AuRY1EJzHBKFELoy+btNab eJ8IVXAvzMHa6gbwterQJjSsTSg2ZUwoRlkN8OnqnBNtfoIWSQXXAi4nMxKlElWg8WdSwLyPVtFl JLM05idBCbN0HCPDuRlSXe2rpA7OuTSQhmQs7tDp9D2xCsvYrzv7vzH63k9LForX97sh+uyFL0/k fasCLuvRtwh9MYtLRods9btcujHWto7TOx0ODfhWNcoyoIhbinAU9fEKkQgvjYRtKIkAQRG3sf2q hZl8PnhXORhTomCjSt48yuOjpOQkb2w1j49AvRfKLgP+QovTybQXqka7A1DmPcdVs9PFxkTcPI8/ uwWP5kvFbGZjAHyjaqP4n97G1wh/H3+b9jK1V1+pr26/dFC3X/+i4aWwfoil3jLaNtsyxbbYudh1 m/OA87PgZ6FTQctB8x4XC8FZIkeOyLo/wTyjB/IbkBoxW8GISTbodC+Hg+5wOGgIB0EtDMGwYI3I bezx1uEOClcK/y7eA6INh50yi6nJ9wZGm+M63c+WEoXItLdqceyqhhllLlvCRLaP5YGnWLMjg+yc T0hy8oKNqL0K3ELDCYeTzyyiFbZuSRtIDd/+QBc7V0Bv0kAbFtTX53tiiQrMeC++hcdzNSKc2d6x gen0ov5sBfPlP/bAd5vvv/7mh+he10//9caZi546/OiEyLZt/asmH7rpyGfTZt/z0CrXa+99va1u 64HHV07qDkwZ2/G56AWmJGl9duLMAb/KsdgfJpSjatKCC1oUN1ntFnvEZCryRMJipCgsFVnjVos/ gO1PAelhYxR9gs8ir54o4QTtaAn/EWdldTU2kZPAlpMvyC84K+UjyR48AFnUQsnqtdZYl1vFGsc4 x9UhYaT3SnmWe4p3kfU693LrKvdtoSesJkkRuAeG2Wyx2kQ9xXux1TzeqqID+6HgLiJW2nOnxeIR /fvY4yTAZqgFaKWEZlqdTROVuQpT/ByTlWZ9U0KjTQlKEnKCocWn9/CSxNqu/jbauyXwBt1He2Mj OaSaz1OrLm307uwcJjVuL8lp1umktgVhHjGN6JyszWdmOrFUQcKwWun8eleFN8t7gWZVnAM755Dz aHovYgJObezO6LrZS7Y/emPZJW6nualt+ayZq907Y18/e+3Ls6dNuXlt+su3n+ugt/jvX5G6+YZH 3BvYtTdOvvnWW5VdL05vmTLxoW6RP955KP3D5yCxQdAAGRyXCYOTUHs56ywzLA9YtlheskiXCJdY /yAKTuA4segEvWQyC3piwWJ/WRAhZoiClTCLVdQL++FgZoBot0k1EVFEFfKySWxj0/ZIkknNiZab OikhAL4xsTEAvtV2KFMbrVCtejU3Xq5vjvXUr7VjK8aoWt3lhMnQFQm4Pq7dA+DEbj4LbJetja7W RvqbZLJBI4SnOXmpkj+H8AE6CKnkDEQQPsiVlWCrxYz0geHW7OtW7PnOStC4N1VzWaWQ27VSEHNy qvgj6jEZqKO6Laq50tJcW2lRE5WW3DDSrpW8QrIe4mpPWuaAnOIQHJStb7+VPXzPCy/sTPekE58Q dp+9+In0I1jU69pnA/H43h+TngSNHZtZOfDLQf+sfBBo2GaKeDxhJ6ecZrsoRsJWGyV6P/YLjSPQ AG2V8X2frxK+/wGJ2o9gZfCFUeTUaK9di4cGr8tZlbPe9ZTrecvblvdDBqPLbysOCsZSqdS8D3RM wOqQXSaP0+V62WZ321xum92KJaK6eENU2yYwmja76qHZRu2xi/QNvnxA1VSFN88xUZ4rL5HXyKKM ReLXFomfEr/sZ2hsZpH41yrOA7QnfFDXAal6t9h2/afFAtew3y4Wjehpy6WBc5RYI1pHGyBHNoAs nFhh6JaUMItEI3x81+9N54Pb+t2ywVpxcdERvADxuPVcphnzR8/9V968c9vqcasLt9zJ3mvfM/zW uw5Rw8I7Tv+lnTbLq24/8ugDLcOrveyfz6SvnpA+818v3tVynHNtwzBzHtC8HFJMh2epXtROozDh QhQsjKhWarViSwxJuRG31RShJF/GEGQ4ODnik/mG79Nong/TAzjLwR1986j8586ZbDgpH2ngM9l1 doAO0queQYFBynjnaGW2MEU/xTDLOUVZaFgUXmZYHn7b8KbXoVf4CijIrAndmLhG8HhWTCvQ84IC Ja7EeIGDt7LWytDOEH1jIp9IED1jZ5vBz/ZWnWRXfpOsTSRkFBnSCHpxag/nEuW1XUyczEVopeqt 9k30zfUt8Yk+MKW6MT4vf6mvjeW1JjNMGlbiSb5zaZOY4dQylK6kgbNsfMb48uHUrp7qIa1w1kyn 74XJcoK2YbKIQ67AlZe6z1NCnfBrq7/LkNlj+4+5gvU/MH1n+zWv3/pJ+sTDt3257cP2iuF3Xrrg 8UevX7xVHGWbVTqstN+3H0xuTP/4t1Unb4LZ+Qa65bnNh89+2LC1vm3Dfdu3YwAmgd554b1iJfNU 2xErFfHPDKIRtIyvwlJGRaPF2gRVEh+S4doWLbCg3dBk/AcZjrmfyIRqJHPpEjCPARAiDYuhUWqY XzXs9MlL5TOcG+OSAd+9Kx0aDUL/52sSjI4IOn28l9NZMUnYtTp9cmgv+17h5n/dJv6ybfW6tDP9 a9v72+jX9MWHuH5sFDAwAAz0QfNZykgGB3daSCjSjdNI8GFsTLduzlhEJxVGnNaI0cI3WDD/p0Em ASTtXL7kaAggwzhxQCu0+7FXZoRPDeC1AGTRV8jzWDif5dGe6NHQ15NF34wU8htRBPQoeZIrzLIS yR6tIZrwwRsCgDfkhCaZcEDLy76fs7947Vk1l1fkr+XIxV/IY97T8/3rXDJ4F9XoYaYlmkzEV1BF Ty8t8g7xDkl8bvmqVDKWwjHgRnqDuNAw37zAssi62Hc7WUVXi8sNS823WpZb7/C96njB5czFSmkJ K0GeKEoJT7oq2PGPq5EixUIifmJBMzZ1o+dbEmk6aKTGNjZdlZNNdlUBxw8tg122M3sbvWt3D39T CqIzylvymjydjLziUT3Ms7b7OZHmNNY+sAYcQpZBcFY2lPDO8U0ru2I0OtewYD6ZX19PE4menRqZ Tk6AIMfVqbMBwyf8dunQWfOu/Pzgoa9nz1lxR/rMe++lz9x1xfLZM5bdNm36yj5D1o5aunnbzUue EkJF983adOzjTdPuLepyZOWBDkLpoTXP0dEzbr1l4uQVt57tGLZ2+JPNN2/d3CnLcpyMgCo+m5Ea 9pij2ALyHdgAzmiTzHcCbXMHcEot5DPqd2hT6tCkT4ff0SVpLoxwzcZwm2CzuUktpRobaZUhVVC+ 04CoStqMH0k29ACKNZzsoQ0MZp4josyp6Id/5kinCdS/acT5vVMt1jZPh4bF/5e3/v5d//YqvOn8 i9TyPsFLvGr8Mu+4+DThSu+c4PT44uCNkdXB2yMPeLcEDwS/9n6unFFcF3g3eLd5hT5FU3SsgO+7 cSCTP6bolMLIcNtEvsmGeffoG7UZkryTNwJO0pXEDIrs+P22urYLp9M7OZl2nMMlh+pgjrVZygu9 LN8+OSpxuntu7+wku6QB+hMIyRqD2Y/1LC/g1BYpAbGFLwUXmRNUExgy+r9527w3TBp1Y20v2mv/ nN1nqf6FNSevX/zPR585xl55YuG1LVtuuPEROkpefNUlS96dZ/GPnU0N735M5QfSf4du6Yt067MH hfIHdx95aDVILnZSqO7pcngLco1/b/ARsAXpjUxXJQpVVCdCcwO+hjAFY/GIIatbms/pJ6QBbcq1 5eDimniEvVDiCPVHj559CsocltFiac+Gz5ta0mS+xXyP+THzKTOMBjRhqjANNo01TTXtMn1q0ptN Nj1/p75Kp5NsovlpMJ+1alyqErVmLIVhQqevEk29zX2kErFaZIpIxUfsnU2qgsILNgOoujiH2Z5R 4nKRhTeSyC9xIk8WzO9s6DkV2NGsEqyz1Z2qMPR3HvlU7AtPKPg+qpY1QjOUCZJOMDBpPxuPTIGN b2Gqbh+tBXNdq3rI0/RpRWRBg1ilKRgW6bO65Sq+75BASXDYSfz5g9lW+biMiH2Heij1zBNeOZsW GFu6mT7QCn+751oxLb9vQTNbI4JzpeD1GW8BrDJogaSCf6slUqYFuqehMq3SkaBBkaiUbcHnDXh/ 1bCTvAn/oQWU9uT/Yt+zPQV6tkN4hS1NT2ql1bSqNT2NY8jc9Aj9W9JbsMaNIz+q48SYrHhjsfye 1jJbjW2If1BscN7gIReOHW1bXGTz5hfRhLE4J1HUM9ircmD+WH99zmWxsUVjh9SPneqfmj+t6Org 4pwFecv8twZX59weW5EI2ORaGxFG8Q3eZC8oNdeamVnv3c8ughlwKNu/c2AfwYQjJ/v39KFKcl6S JffRYaSA7d9dclGeXU/1bewW1S7X9iN5zk32vFJ5HpikfXQLCbENO6t7F+ehvpHE2QZo/HvSnoG6 cVAnc45gGLT7pzl5P90O1AGVLzl5sgEs/AkgTXXDCXDyWe6Ai+/5fFFyEq+psnwVZUJGG1/Ry9mz nMEJSmQet1MsU/KgkNaJ8dy8vALUrnCSWA8wZR5Z43cLEuCeynrwVZ6I59qYeFv/R0bUb5752PcL xm2ozG1dGynK6Tl2wbKn09uOfp2+8a236D0/UB29om5X2U/prf/8KH1b+qeBo6csps9R9Sd6+4JJ r+5+t2aM25r23jy69w3zL1oxSZ0/S31s6GUz3l26kVZvuqzhwfZJq+2hggtqqXXNUzT32ffT07/+ Ib1hS+qmmceWLPhs3R/fP/0htVPllZe2vZL+6JOXiwsC9JLb7ht46yvTVq7vv/avmH945RKpXtoH +mCj03dTmx06cYh73+/MAj9p2wlyTqv1fDvhnI5ujKTFJXKpPN0ww9gorxTWyi9JL+gOyadks0Gq h8trrTzDnJL/ZfmX9V82o2gRraJNgNuYJIrQERh0er0FsAG+ndAKc7uiXdPPKXqLG0VMAGvykwqe BLyRIlrcuMsYkSRDRCfo2tg81YgTkF+p8Hlg+6gZ26ZZdVoUMlUvjKyFC+nHorAWBARnSlRzreWQ /mOLsNZCLfxatutf07Ml+mY9099jf/sdTZ8+PwBuAP9+YEcwIIOW+6urgsAWUBz8cy1zpzGNpxpp hIy7Qj5yxHbkyAopk4IKDU2Z4XEegVvNTtEuGPT7oL6C8ZTzEvV0AZea+F8cempY2mBjExIFOr3A yv6L1X34dPuDj7xH/3n/4NxwmbTvl8H0QHoQG0/X773mjts5T7oe/PNXmCmHJhe59hIRc3Ih1yaL 4uD42Pi0eJPxVqNuZnCRNM8IaizdYtYVeI2Cv6A44s0xGl3OSHFxUREJ50QwblGoEYnBn9BZuBVE B+2AWsY5UZ2Tb9w6HR95nYE/HSBmXOfmjKFudH7CEuZ3WEy8noXjhYfXsgS75EQUjTYqvBxzylmS LMDrIucX6IDOAdC+ciYFzwHUkOw7geubMwPETcMga7gYBiVO5g+kn+vkEMCSwH5cVVni4OZiCt0c Rp7rXcscMWiiO7U1NhansR4ZhVwiDtVBjwptbQJezxKbX2maNn3ZmnHNz61O30MvWNr74qGDb96Q fp/OuTwxcHyf0etWp7dJ++r3Tr38ybKCA83TdzR2F0Y6vNOGDZlb9OsmvaX37MEjr4NjLSXTOr6Q roZNI4e8sWsym5XDwE5xll/r35fqRA4ppId1Mij+wpxmcmvOWvKA9LTwhHWvsNP6ovV1ciLnXzkO mzPHkZMjFOsKHcVhJXqhdax7nGdsYIY0O+d65+3OB4T7bQ+EN9PH2WbHWzbusxGU3XJQxMr8qKWw UmPhuhZWynZCxZArYhFCEdEoJ+wXk4QCDi8Y9SUUAzVAttCNMQQikzHa3BYPQomBRqxZR6tPOrTB hEDJ9fwQGRdQn0bwQNSceWWgdvoEiJuO00PQul7izsMXpJ//7GT6nQe304GHP6Bd+h4sO3zPlr9P mPP58sc+Zaz7d78+R6/622ewvhx/peumux9Nf3fX/vRXqw7wvWcDaM94YLQdY/eZWqJE6UBDBjsd csRODGiykUY1ZadRQyqjiWOUEarCjLDFCQRIUjCaI/+vUe9H4KA2NT91ol7k31Evi4ZcNsiiXPdS GIZ7CSE9TpxJOHMm6gL+oJ/pzCasAxO2C6/b6/IKupDgi1GnDZHfEI5Rr8kRg+0XJsFi/MHmyzHU B0shxG54jMTzYz2yGuMCYOUG+vPT42+qX9h06eK7ji5Lw8Z71xPda4bde+Wl29KvSvs8OZdckX7t yFPp9JZJPbb16l7z1ZOf/1jMz2I/CsrAz3+YyTrVo5MiBoNeD2chvsxNxoiZGKCbOISDiM5y/Wjh YsWkWJkpaBWN/+sx4+v298vV0veyDAJpi7OBG0E0PDp9Inlu0LLrFBZAB1RD2fComHd2g5A8+5Zw q7RvW7r6mbR1G19FEHHEZeiDkdyhJrU+rMH239kNdOEhBXYxxoLm/0W7VbNGZzRkB5FJ/7fmm/iU c/zP/J1v/4mM8oBLPZzG/Lbtm4UPz37GUu21vN19trVPQ6vnYO3vxdrPpy41GHKHPKyxgF5ucFGn kJdHYk4fyyeYBj78Ch9CSnW+iE2A3sBIaaIgPw8cHfpV0KgpW7mgnt19OYZjaR/TCKa2+4b4/WxB cwEtyEkoJmrSBDpTIDE5OxNYxMPkBo2Coj9oPIjjObVlEoiMa04vEbgFAwg9SIyHwsFwICzoLAk5 35OIJgz5cOLO91tzYsRrd8VQ2e1S9LjKlfJjNGwGZrsdiCLGWIzkCYg03wZgOPeryA4n0B24Ds6q J5xhOLvUST28Pn03BvLBbfqcoQL2O4RL2Jw16dc3vZveuLOV1r6/kdK7E9tjV+yeu+zwNbHeKyi7 66ZT/Vj1M7T9+IKmvfTyd9+mTTunt/2hdF7zsBG3Dl+58Uj6p+ZJFdSB+XgcFCVXWwnv7iVWjHrQ 5SkXhYjRtMn0uomZJMbMBqxgRa/HlvetNt4AvofWGwOu01SGuIbMyOmkjvIx1zU0Q9/IzJnVwqfS hIeS/2GXy6KftnsC/X5DcbyZzc6iWKkC9WCjdZ5V7Fvvh+auc+sD6cVUZecRanXNR6q6CvoJZGOf wyaH5YQQR/z4YfbL4cPtOmlf+5Ns/C+DWWv7MIzCQSyopRgFgby6i8JhnXGTZmvvCzTTZmtZeSbt WppJC4syaVxz8DrUmhPJXPuDWgpJXi5XpLXSdgm4CmZtDXwRUkQsgZ24FkbaU0RyKshcSwTNcqqN JNTSGR7gm04egNscMsyAqo0yUbQd8lHxbXS/s/Nc/9/SDHauoX7+gqr2LLsE6wJWJV+KZY6Dhzlr hD5WdHwhTEIfHWSLKk9l03UL2SLdSutKh86orbedZr7c2mhQNYsRu9GYMJkMCTNX7/OWaQBvEABO HTQgs2nzHFVTtJobFBdVXKqr1tXoEl00gbmE+SzDwXzdSVM+yG4jQ527O3tyUm6Yn+FkOPcIvcDJ JJoPcTBjZ+rVEx3R1K6Jvtv18yYPmVV4uP65m587Sjf5N98wsOkm4fuzgbaXZ33E6SK4Pmkkx2ia ViNCbkWlwdinwNRT18t0oWmcsFx4R9BfbXpPeA+bEOfFtK2xUFotrpK2il8bJJNIe4pvi9wn77hq dMbKBYVHYBpaLZVwi+k43oprQzYVeZoTK0d6qNXp5fkfqRcE8M78/AsMxkDgAixdI85+mCRBFBXJ 5IaZCe5/il4Hrl1nMuELCSJlejOOa5kEZoYU28b6qHZY0jdJKemQdFwSpYsNPM9cqqcKuPCUXoCQ t1y1mBUF3f0fVlXnyJ/bjL7v3MAtfTdzNj5Ly6GFmQ/Jb77m6VUF1KmqAttYxdlGzshzGy5Sv2aZ gnNSlaEKbLsfbHsIbDvnqt/tXZ9Rr/GLU60WBx+vU6oPgE62OcoNsk0uN3LIJGNtZJ276vnizPxx K5bDmItx6xKoFHnIDVVicXy02wvQW4mZ+gg29kpDrrtSVN2VfJh35QP0ZOxcmafgkClYh/kLGpKE Cw4c+2mM4l/vWH+YvUv17fezmztI+5lTWP5F7J32Z8/exz7/Oo0jvJqsUAyskcgc1UIZKKBEDFyn 0saeUu16hoX8vxztM514fo5d0v03dunzhsyen1miMQ+a9zcs039tQ0vug9e3HS2R2YlOK5yh40yG QhpsVngYYHcDcQCAEfpWLeSQxclXmWS3CPjEDTMYzTZiMDKTWaetXXjTaOv1l93awpWxLD/v9PbI +HIh52yG3nCFJVdTcz+b6kOH5NdfP8SN+UmY8PhskU5Xnqheo0c6LRa0WNRiSYsxQ9+rcU6xmMZU YMPku7GNxxmJ2KRJSWC0MgIzbvhJjXJqn4CLimJyltu1SLIIhNrAkhnAm/GO82dqAH+UaT8bC49s mY1VrSTDvWgvQn8yjyVc/Z48XQJcx5ADqzOdgRmrE/dwnJj/hdQlhNkNbhYyiFfD7fgvGErLEMsQ u1Ak5lu72OqEy8SrrdfaVlgNZiYZKq29bMPZUAFmMMMw6wCb6T52v7Bev96wWXhKr3Myu81WKjGs dmaANrlUMgA0WEbaR1IVIrjBYDSZQfdtNnyYyMganc1O5tzHNsMG2b1FUuD21101WYwmRbUsMVPz PnTSRs0oYW0Q3I1Q4Cv2eTKFJ8fYPYrUKDVL2ErY5lYH3xoD3N+tocqPTVGTzQEHz12caICkjmHg zEfnDyo4TWJfcaPm/YoEtPe8YP5HYun4FX4lb0P58bYmlw9NWbD6C7XVb+34aYfNxKX1rLn6zd2x SluXmGay3l1RaetRoYG7uiI3a5ZO1kOyxxrlml7szdTr61VBY9igcXDYcR9OMV5W6g3AQk2l/emx 29N10r5fv7/rotoHhbO/DBZf+bWnePxXvhhheJKiWClGeuMOJ3ahDJ9h8Fu8mn3oSzXGIQNUI4re AHJrYHpBMBhFxox6gygo0KzCN0fbbwF8n2FppMxKAhOiBjmqSQ2KmSpQwzWa55mbzZLZACkA6AW7 OJia/wdNyPI1orZz/46vyQrxJj5hnZs53AM0Tma+RpjPcTKa5g26E7FbElPTSWhhH98D+mpQEAGD QUy52IQ52GlQB1eC/h7aPbjSoPbIgD0q9aCuXPTdHQDYIwPy3HjGn9Acr9Tb3Agufn16twtgTgbM Aejh4E87zpHb7OLRlg6msIxy/oo6HnpRYPtePJvGhC0Vl2Cymn9t5nLrZHD9H0pv4gxFiLys1gbt 1C273SFfKCSKsug2+8whcYtvt+0Fm+Dz+UNMyVEdw13DfWqwTqozjpPHOCa6xvsm+scGx4Vu993P 5EBEEJwRs9GTULjOE1wGJ3QAMlwTgFPa7gfga41iAMjYeQD8AsQA7dAHm3Nojj3B51CnzVCGdATC nbJ+RtjPSAhgM6Ez/o1PHwR+l8z1mVw01Xj2ChlGCri3Mgj8ZDJdSXu9Qgc/vTO9++Br6X2b/0Jz 3nmfhq776q6/pt9hL9M59OHD6Sc++Di9addf6Pg/pX9Mv0bLaaiVmu9Jf5aR9cV2YLcVp0xa1C5T HbPdbKg81H2ZfJlbNFtgkbIRn5+LrMTgTBiAUMB1zVcSpPS0qkk/hqASpPgP+q3/z/3r30TAc0zD OYVT4LfbmMZ0XyrP1waHD0ynnknjuSHKaIJ7BGoPFos5IMRzLy9NZmdFdw+78u76b9MvpVfS6w9s aLik+63p26R9NufU3XP2p9vbnxHo6iUTbvFYOebgiwjSt8AcnOylM9R1ExP44FPAX+Fh5jBOjUMa c0fdcV2x1NWXTPSVqnx9EpdIl/iGJBqkMfG6xFzpemGxtFpYLa3DFxIeJ08Lb5G3vJ+Rz3yf+YNh KUmKpb6S2CDd7V+feCsh5nuLE+XeysQQ/5BwTbQmPjQx1lDnGOMZHx6fMzY6ThmXO1Oa5pmduD5x Z/jOxPv+DxIBs5/CavpmS6gSNOFNtXeoUvS7/cVSH0lkgrdQ0Bcm/F4YkaC7DEqMXxApLxKxC8yQ F9EbgwmXn4uwrk7MBZDhmAGc0jAXQAZzOaDmc8x1XcyCSnFzMSuOJUCdzJrsZdaw1xwo+nfsHZbl 8zTs1RRWWZnWV0kcZfJL8kuZ3bChARYh0OT5C/IhdkLP+hs5lOM4cntlkdvBMb0iUSD+sGJB5YaH H/vzi+kD21O05iWO8Fe1f755ztPA8/fSn9LQBzMmXDb14YbkisrrLztEJxx7j07Z91z6iWO70h/f UdLwEK1soaZ70u+kUTn914K+/Bt3j4CuQ5UIvM+lZ9WY02yjzl7h8dFphjlRqOg4j2DQYr0W54HW aYtdcwTlHA5Xsmo52BQygLOt49NWZ7Ac6anW3IJyWCc/bc0pKIf/iJbC1q+lKH+3NSeRKUd9rRwp L1eHAMi3XRy+WBllnhCeE15gvNZ2nX2ZaaX9XusWe5v9S9sXdhkcjuKwux0Ou8NuMTrxVYeg16SD 5dJqkfxGo9cXDETgEnoo4+qMgy6xXG0N+4EHNkMkYXsIzG7GyRrAGY0pA3BczeU90+l473UNSt68 vOY8IS/X/79d1xkK95/2oDgXBv5NtZMVpwMn/MAajVHIru8ktypWlmg+nhkXT+7pBG7qnOipcVN8 Y9B800wG1V5pl/s4nH2QVU/na1yCDex8MFDpwJ7kRLCp4UoZrL2cG0U4t8lw3qBTPQ0doCsudGMg IXGNnGheo7FH2Kojry5++Y1hhWMu6Th9eMxV47rGhn5CH1m2/tJ7H0uXSvuG/+W6h97Oyc+7dFF6 Pu1+6+reZn37IqGs4roLZ2g+0xPgt/IP6KNKmUctmCxMFpuEhaKYX9BTqAwPFIboL8mpiQ7KG1ww SqjXT8gZV3ibyxbnxh6+3QDxMkB+J5DoBAo6AVTGHGYqZwBUzgConAFQ+Yw6mFcqtCbyWJ5QkN/L jq8X5deUjFfGxsfkX2meZZ1tm+ae6r/OvNi62H6jvCivKX+5sMp8m3WV/Q55Wd4t+Xdb19vXeyIZ 9kDtGks4Q4mgMQH7IyFFQafYo3sCn4FhxNr1utBtIRbK91q7Rgryab7kBfNzWs1YqSJdjZGIV9D2 uST0Xg0ZFRhPGqDa8sEnNPODE1h+ns1qlmLQP4fwaQN82UBH8/NykQdlZKhrEE9kY9Zg7zmJb8po Cj2Ns5KpQmtpI52HczI6qBtSqqsrf6WEV6PFFxsTpIgW8W3bZmNjAJxWrfxJRcEe6BNNYIV+oxUB wPBh0wOQNYbBFQ17eaB7VsHXMOwEcA4WKs0ycl5lD/Nmkts4k6d5j6DAR+80qwiYKPgfaAisRaCF rooIg9Yts3vBiMndWrjfF6eQXK/vcfu8sGhyGwqnl4kJe6wT/3Lj3K2jaif0TV85Yub0m77/w2M/ L5f22bdtST1S2Zu+V9e8ePmvD7+Y/tf99B35qjvGDWgaVDM97puUrHhs6tznpsx8dant9juXXja8 rGx2Yd9dVy96rWnhVwTdKoW+dx+ooh5fobBKLIIBh5IXn5SAc09TqyaqUrpHp1BWwh16KN1FNZEV 1EQ1c3Qlhqx16XuNNmK/+rRTxXQWOZq6Oo0cDuCJht33n2dNoduFGCG3n2j4nEsNme2+eyl3L+Wa auZK54ir0iHJum3bL//irX0EHB/XK7rJe6opYa8T6wwvGUQvJ3xe8M3lYl/DYPFiw9X2J6Uv7XoL YQ7YtHfqjO4EGM0MTw4gy5MzTQGG6+NqmDNqrEHxUsVb62WN3nneZnxk1KopePnTuarRpClFICRm DGoawDEFwC8ZNsekseS4zqgaAWSldVODh7Pk58khPAWhJM6qpzIcoHbgKgltLZRSGc5P009pjoAO sfHwlPSvb/41/cu8wxduu/Ht3dK+szs+TJ997E5q/UoYfrbl4K4rDmundaC5J9JgjJGJ9sv6bDol CuUj5+igGDIaJMqkkg/hO3TUUVaGMa8GonLvsbwSiRaTQiHfVGIptTRabjPcZlxrOWQ5BZ2QpdYC twizgWUdnozUAuEZj6yu1qywuNtkNCoGyQ21LhSHCpPcjElGvOorxQRpdKqBTmVgIeHYXFhZa6DN hrX4YiC3BFuZWlg5kdE1+FoOgyRKVYci1UqsFBLoWuiqTkkSpNCVreZGbChcCp1/AquJBz938sBG EgychJ2YK5W4Tilz0jJrAnZDmmwhdszEP1uMTtCLf7ZAGAdbBIkTf/WoVgihs5cmdMKZHSdp+K4D ObKhPgbzsCZDllHWv/0vf6M3dovmdqWrX2iH8vPXd5rnXXutWAQlKCcO+O7v1Zy3oO+riSKScBQ5 E/5K0stR6ezlH0IudAxxXuivI+Mcdc5xfvk+w3327ECqZTINBpKecqncMkgaZBnqGS2NtlzmmSJN scz2LJQWWq732CUP11Y4ocyz42sB2qBrs+bTqGdlZQgaSRE6AZ0eg2+CzcVotdntFnwlxunx+vx+ sJJVrficlsJTi9PBU3W8ByIn9IRMwccaKRyYJYMh4vG7PR6/02I0RjxOgE4HTmEpssMtyw6n0WLw eyQ7PNgIQ5MkwQ8HXyPUjji6xvxOpwOG7KDPF5T7G+kIohALYg+CCseZEbsVBebPQKCN3r4jwxg0 BAPD2qFCaA8G2v2X1kwd9Pk5nqBThcD5ARBRTki1AHF1mCau8kk+r1fIXoG4rrDBBQBRFY806LcR JtuOyXZwnHCauLNeBgPykVl8HgOySgobclotqqSiEkeKBQ1ACFcGIVxO6BZc8B6A8Uinp3RD+voX P84L9sYXmr7+2/B4uOvnz6ev2p9+pUDvc6dfwlqtvnfdP/KEj9qD6W/+dftO4VkIsQ2rlakX/voY sIev2CHAHhfbpRZhNwpQr5kVOYtcvWmF0NvQ29jb2sfW01nhMjldXG3s5BEOTGo6Y7CnWvpbHbJ6 JSqImoaZR9fQa8wsIRbpC83FtoSzl9jH0MfMn3iRYbTYYJhgHm8b7ZxOp4qzDLPNM21TnYvExQbO E1zjvMa1XFylX2VaJ7YZ9jhfEF8yvCO+a3jP9rbzC/FLw5e2z51dwEbibJcF6kLZy2OzgcdYaj9B ZcvGZFkHswX+6LLfBOdG3PClauOQrMPnvkCVGOgItGh8jqFu4ElIbQA2G42Uf9xIwEbjwueOrFSW rQ647kOhbWRWs2BxmcxUJzOX0eRyKZmj4AJ8vRWL4LZYBFAkeDEzlxVbPTGUwKkf2KlYcEQLLigT 9yimtaZDJgEucG27JmaJT5tq0u1U5Vr5NVnAcdmJqkkhAbfncIwTn+SlpznONvg/C5xsONkAQENb rnXlGJuJV0i/Q1HurY8/u51jZZVBQ87OJIOkR+qhRNQUodxU18kmaAytmeunA5WUM7P+UCVYko8g EkJi4wmMA1/uDkF5HarE3B9qCXOF2CE1Gq50gfEVEKw2r6/K5fT6YDMAJIiAILt8pHaDqJbrrDRb cmIXUJITqzKbOMQ4ZHH5kOfyIY9DDFBnmzLpuSbiEpw3iCVOe56jlJ1Lwsgq0pYvqGlUvPtAWvBG eztLnkqvica6e9Jr2Vn2p/TKRdW14+iy9mFnf2bmrj1rI2nKKakuu3tZ6KzdMLEIYl907otWp48b Qb5QbQDEACKBRyh6t9Wv2U3eVfsCEAsROYHqhmJTiU2cQWfoZpg/0okciXQGvVGnM+oEo8kCvsWo mMxuE3TZgs4IvdYZ2JqQCyswxcZFdRazDt8LJ9TcxgKqER8QACIRg62N+VWjxThSNTXDjNlGd6lW HLZSiDByOI5E8u1rlwqTMgHBzFrZzBp7pPmPa7wR5zrBCfl3W21ZrNJMVJwTwsGoTAJKyC0lOMPD WUmQQBzgSRqwuUmc1GnQCu7wJCMamvKBfIVBrHYaLEaLuK/jNE65nNZOG2icJ9UkJqNmBwEiAW0+ 2hHgBg7gXfYv5jg/gQ7Wt/2Vb2istmbA5TT8afseNkcYlh58ww1Na+n2s63t92CWOj5J4xtx6X/A sgmGnMJ1NSjh0PLA/pzFOdF5ZlkAExcVt6Rn3nwz17lc3PGlGBb74cslFayr2sVoNRYHrMHiImtx MdTenopQn+IhxQ3WhuJZ1pnFjaWrrMuLHvA+GNxi9RRy0ZVzaBBpcD6YQ08GthbuDuwvPBJ4rfBv ng8LDYO8FEczT4MQgeV0QibodI7ryfm7Mfw66ov6k12KyyvFyi5DxIu6jDXUJ6cZZiavtqzAYa+f rT8nHRXlNirKJXnlvh4xt39i0dwiVhQusVXb1uDrEB02aaNtu+07+GtrZ5NBgTNWTADwvuInRG2a j7dNx5364eIs4HTI1t3+dTgrqcfkn1aDGkNcU2DqERbMRZPkSQSSN/AhPwap75tO8e+bjM44T+S4 goIT6LwGnNZGATkfcN5bNyZPexGuM5x2Xhu7TLUVqPzEnpIoTWxPSJUgCZpcA7Hw7d1c9kl053mq NQKX/cpDlWxTJa2E5uC02p8/0Zfvzy3JO6h7Tceiumod04GRgH5AQ1+dn7cHKwON4TEoOWgyYs0D Qte993mNMwx/J5OwviaB2/D97MSzqvbkZ59xKfAETqZmDgNqRTASzged5KRSEwe5wMQLtPNNZH7G L5SLSPgUAX5w3+ZCkr6gH4QoyExeD5y2ffEEDpbYoBrkDlGoJFRN2Ttr+4ELmy7qOfvYdFpWs3LJ dTkp/1Wv37Zya61s9OUeCPuuODJ3Qo85M2c8msi5Zczgp5dduvRSt80azMs3XdX1gvr5/vm3D1Un Xdzt2lO/LrugN/2wMCwXDiu5qPGy4RdcA4xeDozmlgJ+qr1ZfZBKFnue1FOqkaTqaCrKolF4EIYH hOdF10Z1fVxV3io4z18SbDA0WOvsDd7Lg7MMV1pn2K/yXhU8FH3Pcsx3LPCp6xvfN4G/5xyPdkQD ilRiL3GXStV2VbrEXitNk47l/CD+Iltkj03UMRIKg/UwecI2sz/vdTM+c6HCmtBsFjOeWmYNR82a IRpEn9sPNWtdRv2nqbA4lgI4rolpPEct4fNpXgi9O9GQj4ia4FYm5DN2iEK23kRT9BQVo/BcHo5D YNxqzykdgLNqDkcvqqEK1UQr6uSoAkkBqML5AVTVgLOql7+aAp8Qu/kraCByYcXvBCQgDnwP4D8D 7IFY3YlCQBWOQPjXvA45pnDdIpmPw95lDsjQUA7LOCBagG/IcETInAKmXZ/auWDHFdvnq+nv/3hg Nisfc9fVzzyx6OpnYLL9Yc3wNS83pb9Lv/0wXX9wzO1HX3n9haPYiWo7vhROgl4F6fisHFVuW2Kn djPlDhfzQPtEZ9is94dFfJPVozfw3uu13uuh9QAMrTlibihMHn3zBU35gZNuONHboJ3ovdBoodHw QNdA3yjXKF+jq9H3IHtQeMD6uPx40GKwBkyz2ExhlrTIMs/abH3Sssu427TLYvHCiPh3JthyJ9rn 2pfYBTsO+G5VryvVvEAa0ay1cAs5Dm8QI7HbzRDuO9sYRtPzbAY+2LbcEPqXZ05GsVOBK1e1CVK1 2blIm5OgNidDwp681/Q0qq+Gk66NV9KbeCW9Rl713UPlR7KyPLfyZzyeFmQ/OKYd8uxdf3LB6eTJ BVrfYffHUUa54QT+NY0I5q0ebo1QcMC6kXH57tR+8JkTqnbkfPfssfSPC766bdsH0e2BJeNXbn38 1ll30mW+Pa/RHGp6hrKl2x8Jzb7y+TfePqztMYMxZx9jRcI3l45RHzcx0ZpvLbcOsko93T3D49ho 00j3qPB0NkWaapzsbgwfir4pveX6MPCZ6zP3d75/BD7TVp43Gk0G+XIdGuRrF75SedZu3j6sp3Uo q7EOdg8JjzONtU63fqb7wvsLPW2TqUewmeHyGQI+OPCNIRB3fxk/EGTPl+XXHVTGYZVGR7MDS5Pj RGaBOpx85UBljE2LE1mHjmMQvm2EDQG5UFLwEXfY+Ijj+lttlQL4SR3AZ8ex0Jl3ED7UH+s79CKf ouHw4IhoKKfRaT2+rMERUps2bVvSa7uPPhApr/3NSmuYDx/9ztXFFx3su+BD4IB3Ejw5wvl1xq2r sZ6Yr/M++twZ4reHr3pPPbLkrUWz3rylcX1Ja7vyzKKrn9h8/bWPLN+w+tfHNlJh1Yj+zAb/KOer Lz/3wrFXj3C+YCioaATrzIM5G6X6oiTsAR/WIDUYx5inCrOlucapZgNEWP5VGG0kTqgjOZQT5nGB 8z3pF/eZoNjd2SfQPdzfOSzYPzzCiW9xhCc55wQnha/VXes5w874ZXw22271+Wq9XLsjeMP2tfIm nGKQxVDYpMd37rbyY8md1OwQVgPGHR+8oetcWOE+Fcz1B5piC0Dm4DaAjPeRxncbC4rLU3BQC0ax vbbmJ8p5qvbn22yURr1lcp5ezSsu75wpuDNgdjIzhY4AziwwfB4DC0zzT+Mz9Vua2JAc1n4CxrFk Egcs8aepjbhzVvagcFX7/MzHu7g6R3PE5jso9xzWlljGjOjWxzSNEo1xuxmOy12+r8u3e7/C16Xc H7yFL0uf/dLUsmzy6vZjbISl99jbbthCx/oe24kzvwI+41yY/ij9s6xs3zeDrls+cMaToCIuTGEz NN0+alUjbiO1B0oCpQF81ibwoOUh6xar4f809iXwUVX3/vfcuXPXmbl3lsyaZbJMEpjUYBYCIZor sggIEQElEBQRFzbZF2URKwqtG1J9wGv7QOGh1vYRQthcalpcWpQHVrStPoR+RItYa14f5amYyfv+ zp2E6Ov7/P+BuXPunf2c8/ud3/me7+974t5yb2usIybFqD7K4wU1earX5TFzdZYjpkNBCXv16NtC LNQdtKVISkLKzya4JarEywfV0L2dzi2o2SiwmE1mErO9MJNsgF3Og+siMhyhgkdS3HDI/Qoh6vl4 PcVovPAJ1uR54Wue2yvsiMZeYi8IhcIFqPYirHaoYo4poFYp/LYagDB9jgkeheOkRIFsVk7ZDCFL T1NkFRGSheUYwS+bCYaV8v73QXgIdrIIC9e11chNIVgXoC5hujmUL9+2bVswfv+ya1sSg6quH3bs mOufH144p2bEjYGf6iOmz3j4m9thEUMz413nYBGUYTjfnm4Y7lCFkQpdawwPyVpeLK/CKA1VFA82 BoZGGyNCNyiTjTuNr/W/5/guK64ou7L4yrJryzZWbK9QBhYO7NdYMcIYUTi838TCif1mKbcW3tpv esXaivfLzhb+tfiLMn8kLOccFPe0l+cGFT6SWElAwjSOrBU6hOOAhQ+Kq+0qd26uqQ8vyvXo4Zzq VLWeikaPR5gVsSPTI2sjUgXgT3FSBWeIR7hb4xEld2sR7tYoWZqLlpxz3Bo9i5Kns24NhW/s0WTP kSUmSwlFBSWvmMfMU2a3KRWYjWYTBjpuMSZ8GJJ5kSuLI0dtncR/ui5PMmPpiiWF5N4wVc82JNwb UgO/4+G6zlygHHsYDk8VPOOoXYFqvzBCtHAeQNJKJRFmqQFre4iCfTNNb99tVF29ZPWGqI8ta/2g 8663H3npnl23fbD9l+e27lq96tlf3LPi2cnx8amqmVPqWh9iDSe3MPbwlrXfzP7y2IrnXf3f7njl rcOvH6Y573qklRBvPMRuOQS5oY69OZjf0rSFh9cpqRba4y94JX6pPhKriaiAW0IuoLpmrlsJgfye 0uzqgTXdGuvQWBg1LE4Kw4FhklvOjyEyEEyW/2L7qeKQBoRK1EBE4VfBAiNT0ULUJHjWlzT9QAkk f35+AfwuFMZxmD1SM7CmNdwZFheEt4dbw91hKSyGUg51xcJ36MTvAfZ3HDGIBOP7mjtUKtgRbqVO WAlKLiy0h8DytRMPQkoDnwNECB8ujMsZiWbsnVFQTr3DYkn3ziaogXGZEGAnHKSZMrdOn+xTUj7Z k2BeFXYJ0ZZ0+j4BRBiHtosWxdIKiEE84VPO8a9vX9Ox7N/GtC+dc90jDQgJ/7Zp2s6fdN0sPrV+ 5YRHV3e9CJvcgIbCQ4j6FOGofZM2kH5Bk7ZR2661ah3aKa1TUwStQFsA5cVt2UuntW5NL4C6E/Tb oZEku9YA33Aj31NWUpBt3CZtl1qlDum0JHdInZIoSEnpOM4kyYmVxUkoZOsNeVdoMgn0Lhy5Z8Nj jmdDwVlfQeEb8LtQh9I49bu1BxovX1/J6sbRVIsGiUUL0zxbE+P4hvb2dumzY8cu5kilF9+HW+9+ Grpp9fw3B4R37eGSO+UeIlVjwwJ3RHW7FQmZku6gwLyGCLgN+l6GQr/QkJVcv7kRHh1oG7RSUrq+ 0WAFRqPRZLgwy/jarqOeYDj0QT5RMPic0kD0gtkHEqFwVOl3QMYGfcGIBUO/KKQf1GvVPE7B3ADJ DgQcLxQax9KcAL/KISE4cHF19XpLxbIKKPY+1TJLVUtPMM2nJECWpx5BkmrVOayO7J2vtSgw+Qfb M3cWDSyoG9hefdXmUdKnb7/91cqtvlGbpJaL218dO5PsFX3B9SXqxRBvsRM0N8aILd8gT9Fcpve/ 3BeAMPUkczk0Aaw+OAUYl1OAKZ+1Oc1gkmu5LgbkZJCjWJ17A2WEanW24z6AFVRcKOQX7HW4IktA suQ6bSSaQv6ePllf7lqqv+/6SFZ2yaxYLlVS6mB5kNbobfI2S83yZKVZWy3d7d6qvS7/TnpPPiN/ qvy3/JWaE9BBHHZJIrGIQSLWsSikphzuMPjEKYdPrKPDSrTEIyEnWIXFClC0YSbEM9AXga4UYfXG tAuTfHbAIQAlvhEBkJESxBTmigJwoSZYDvG4L+e2z1ucpL5g+7wnC5ggwtb5dAJ67mT3MY/3T4Uj b+/b1iQrQSs9CH2grUGZaJfYAwhPwRfAyg/p23A6MfGKFTS72uDixyz+7B2DFCZtnUtE1hJR2zD3 QP8HymrrWkXeYE2F+g2A6Q/b8ogWfKItye/2FBJQBqiM8woXAqbluKwMuLWQU+DawnT3YZvFycS4 42cefrfHcF4MlBRvQR8VOCkxNRTGp4VCDfyAz7rQFqUX/2VPwnk66IsO+gGhkIUO3RgAazHoxhva 2c8+zcxmr3yYeepeLCq8xFozy7pmigX3ZKZSv7wfhzpurx/td3MHhR7UsbdukJNIUFPr3A+43Ll3 lGQ77BSGGxOUx23uU26pCYdOt6vAvQD0z243tGVJBdFx8PROaE6IyiKy2SawDkwzxb7enmb4aFuy cQ4GZEEEp62deAwqlGjlHpeFQjef16CQ9V3COOnbvgtNtQjRGHdf5LLojP6IiH1/O09DwG/HGCqX ImYqZm9QxonDbSLKGp81wKT+YI81vDUp6Yx0RvtT5OOk+133haQYUZPFWjSRxEJBcX6unEMhhcLk YmSf6sdTbGNqe0pMwY/5UhshbSbxGRunVmEiBpiOurU/RB0a59CFI/fsF6lT+7kbQ1iIMRSPObw3 mr1lZzFsmu2JpjYmWIK/XaL37RL87XD+V9tPb5fgo2SCT7xxNeMMzgmgO/IknDvIX+Ig3g/7YVYX p9hxAba3XRALICnQhPGKXuO0Rl/74x5XCHP7o3fJNst5O8SDZD6MCDz+EGIlqYNsxd7vemBqF+Sb nekh/KNJ+kB9OOniqyPAZih4RgTNjRjmSgs8PQM1FilLQx5/ggW8OT0DdXbqgvbNoegZK244OMM1 j6P7DtxPVe2avWxzwZoj//KzvcUtVy54on3yzGvvq5dKnxx384zJL+ze31Um/nTuzfVP7uzaLLat WHHdPz/e9UeyFYq5PkF/CbPVdtDtkoPis9ZB6yPXn4OdrgtBGWNpp92ADnO3xbZYx6Ono91RKamG fKFwADEXk8Ne3evz+EqiPM6K8pjL4NGWwaMtDHTZaMvgQ7dRRI3JQTYebRk82sL5V06DGjzawvkF ZFDT0McDOoN1g4g3DkuVSKGiyCvaGRUXRLdHW6MdUSmKjOWcMLfNC5AqdCzvkgn2DbgcE7wUcCE0 hxk6AZeD8dFHBL4bwI2LcFENbm90gBViUkS4Lm59/0gAleIwjMG9UVhY9mu6qitIibFKgW4kmKkH so1MiWlwp1g7olbOori8YZ0mXv/00pPTn7rO0tv7z7lm8TNS6ebdwxeMrVrdtVh88K55V216q4tn rg4DdlCGVvQKMTZnP7SiMYRgeewsNzKw687ai+lSjD8QUPSYZ6R8jXqD3KzeIc9S1RqrPlAfro0O t8YExoSHR1vcLdr11rTAtPD10XnuedpMa15gXnhmdDnL0WS3d6oLi/P6VM9c123u2/S5Hj2SKyl+ uIxQSYLPfRK8GyiIzBxIR+FgThYIpFGdzA0Pd/LvxwvUDrxAjY5Chx0sSdUgKUdQLCUJSOfyU/AR dH0UQQko+0oEjw8TYYFniENqjoZTfAkcOYSQtVruf0g+Fe1s4y3JHYjC5XGCFNCovY33OQCFaRCJ 7b1wSWOU8B4atrQJ7gnaDPcMTaKxiZ4Y5DJVWNHl0ELfSdGwnT947QMWXvnZQ6cynx9qW/9g294H 1rdhO6GyR5dl/tR19LPvs3zmfevNt95+7c0j+ELrsZJUiBYMQGNrhv2ox/qedYU1xpIak61JsSDZ z1OcV5VTlTc0b0FyY1Ktj9QnRkdGJ5rVqZ6WSEtitjrHM8uaF5mT6Ei+EzoZPRl/J/9M6Ez+6WR3 Mlwspa10Tq1Ub4ETZE2xPjY+y8tYht8H8IegczkM6FzwxUqO68zSbX061vSkJG/CJG9OxG2fQJUO da3zhsQ5+fGsdh+1JY/sqAlROGsXU2XrS1iwWqwOpAThHyPmPUA598ZZoJxDxb1A+QXujTmm7gDl nEUHF4muzGIFAMpZXyqR44gBlH8XJsesiOyRfG0PSh7scaqglnHRmzI/BJN6cfL1O+s33bnh+Oyl p1ZOeewy/65lK55/ZsniPZlZ7pd/OH78w91bdmQuPnRtfddF186jr7757ptHfk8I3jWZWa7TaENL yGUD7UcNMS32jw4Rx4h3e+TGnMbYmNjG/O357ppgTaIxf1hwWAKAd+LW4K2J6flr80/I7wY+kT/1 nIta/cQiTxo5AbWeUeIIzxRxlvhHzwfRj8Kfxj5JfCOaUCoLxYGw+uQQEDnBF/FVQ3DOOm4yy7TN 6eZaU8rnQAQk3wge4EAEnEAWXzU5EGFyIAJXMZBSU5phGvnIVfA4hD+9kSraXOL/3/hqCZkZ4ag4 cgxC4QamcLxcieXlfxt9+AfYatd5moZ9p2Gg7gylWo6Dc7wIcMO3UNWK/psnvZz5Yv47a15b+HRX 4c9XLN61e9nSHZlZojpkHLuMKdsz9+969OurXb84evTwGyfee4NGuAfQNK+jVfzCb+0hlUFmSaxY qpGuxrZzt0tLJFnzq5qqeYN+zSu4VGZwkxB0rXwj9AmKkkEWFIv8//fMvjfW+9L295nZgxDMx6E+ EQXvw4KTBeEE+eMCI3tWDrjbwWDSgEBi2vlFlPdNfRY4G48TSFVovY+nDk1bRHn7TkzgIGrIXvY/ 8PSVsxqn3nTl0KFDbgrlS6VPLbym/pmykY3TF3WdoFpoxIrAHtTCAFfEXikVhYrqtdHasJIbim4r WqU9qq0r2RV8vuLXLq8WiUcjA8ZUvBdxJ5ALJ1pVTI+2qC1ai95itHhavLPV2dpsfbYx2zPb217a XmaWlZaUlfQbWDJFbzZmls4sX1K8BOTpH+k/8Wwq31zx5ICd+nOeHWU7sdf7a6VhLGE7kWhRT6G4 p1DSU+DPIRfCn0MF/hwq8OdQIY/oG4H8wVPUspRHl+LJ0hzJuCwvTotARbEKqvyCWGOsKXZzbHfs WEw2YwWx+bFTMakg9lhMjL2MtslBv+BYt42IHKQdhtQxCzsHguxgQesbQ83eULiG7m3KrWTsspa8 uXliXm6OgqiIlqA5MEGpfkAayEUGyQNKuZcZBeDllsTsYLSmil5eyfFaHt/SCAzsFtaCY5JeGUvS q2J84hjjeHcMy9dtSkl/vHRf7uDj/RlKn3B/i4LDXecFqgcUzu0nM+0f5x9VCPR9elVHldhYtbZK rCLcvkTgn5kV/U46tSxO4gX6AlRw1KeTJSZ3wCb/emaSew+axOArwkPw7MIszFh0qmdaG7s8C87D yLOQFEk7W6AGLxqXXfpOpxf2UU6hRwA64kmNny/EahiBGIs4ZZjuEBTjf3b5G4iFXfa9/GIAv6V+ K2AFLZdc5E0mBK1cSTD393DID+G00FecEIog86v2A7RRXqbpclrCJhxWHsVZjhYAUZMI7oAaQPq+ +wCD9fyRJhpSM3pVd8tKy7DnYg3Wzp2ArGcxjhDRCOXckIsqbWwzf7By1Yra1I9e39p01aD+j09Y /fIUf6tn8axVs8PhysS6VzbfMOv11cf+yK7InbPotmFXFEdTVaPuGzfy7vKC9DUr74he33J9XXFu XlAvqb5qVcuUbTf+nOy0pPtvYn/3Vig9QjFARx8sLiXcAysoKKyFeDIWlnXmEsIWtBR1DN0uw7SK kMrhDaQ8rFtRh2vDpysLkMm8UZEERE7bkdLcoRzHvgUEMtPEDQUSh+eFv3FSBK7QfIxf+ZL3NFwh yNKJyWjsR4l7LjzgRJXKC+Js8DwH7gFGcQmeRFPyzQBA4DlDHh7rZrQDCNq0GrkwNG1Np1MRqr/S WloZ8NfBkxX7uVahaMWvbZgxt2Ldur379gXT5flPbbOuvO1p8daHmTI388jDXT8aWxGnOrofvuw0 7TnLmg4JcdSNhpm7mAyGKZGk064OhGrSQVaiBsMeFgwbWFfxo5qE6nAqGqHpRJzPVSJ8lhIJkNMG 7p4lm0T4LIXD9nx+EglRLeA8iwZH+IQT5xeIOC9P6o6wjgiLjINoJPAAmprEO+Pigvj2eGu8Oy7F AUnTIxwSJn37pHZcO40tYXqgTSo4A0cWjcYMxUGbHTBY43MTsPxg49q42LcgAQwXlNr/nUkIRhCq d2g08JGDw35xyfJ5TS8xY0kwBhMRyZMQvKrfgQChBeNQ7rKrmlATA6gA4gBFRBwSdDWuevemHU2W 0W747xo//tEh7T9pv2ZeU+1icVPX3kcuHzl+wmMbxMGAS5mAJnKdRevo7FyWLxBxq4KuykzupV2X UPdzV6b7sq8pPEscqHUzocg/WCf/7vUP1jDNrFHpALLyub24h0Pm93jGH2wtv7BGKMcBZ2dtDUiO EMYBZ+/ba8ovgyoGDqann1AOwYXBQq1+jTBSvwFqYM3qZO12drs4S52lrcCmX8vFu9UV2nJ9PVsv Puj6gbJB/aH2U2GL9rj+c+Fp/WXhgLJH/63wmv6+8K7+F+Ej/aJwXq/Az9GjQlgvF0hesEkAhOa2 A+EaN6ayNVm8DTsCCPTTBXyn87ZJzajTNg6YjQBtpGs8nCUyOr8qut0eAw6w8mQazHTcjqaPpoXK XnJ6nQ4MMqXpIU3TsUQIhJGzlt3QOiDlA6LsKSDpCcxdCYWxItW2bWcPJJbYZwPKgvYGS0CdTrRZ kXHud2S7SGPuAokzHv38DGWiwFgH9zI5/RxUvEQxBlgIx8n5SD3uE6xNzhHnlGBwgdm/Zeb+8kwK HLO/HMrcJZV2rbtj/sRl4gbC0h1e4wH0joCU15N/H6DIlHsfhwTGj6iuE1waHiMrMixIJN6fpCMe AJMLbgwPYGilkt/m57rfxSBPrqC2TdSG1wOHhWw1CHNjD1w/kByOTjmOzo9R5+hR672j1gmeip/l kfNfRz+MxokELDDE+kv9dHG0f6r/UWh8Y0jkcxySIeeDvlMAntVpawWFNVYust5g0p32gYKSGkn2 aEE5ocUCbmxWLhvQDVADloBtnZRcNWHkYQabUvqraV+NUKvUq0N8w1wjZVsZq44xrjZH+kcHpprX B+ZA+/mOwN3yPcoS9ZD8grk/8Hf5olZu+MuFcm+Zr9wsC1SGBgl1geXqg+oW12bPM+xZ8VkDRBlh v/yC7zfAu/+onZXOmn8OnJe/1nINnuPm4UeLH338aPJjINttE7rPlAKCX1UAiJspH03jfIrLyzwp rPK/Z9eRl/Ki9/WnAnaFDgVl3fCX6mn/ROl6vcU/17/K/0O/7tcl9EVqDqdhKKylvtxD2a+EeICT KAS+JP45oz+OCRsLe0TlV9xgnaqYo+gWsv4Odo8Bgz+AmGWUfbtu+pKH/QrkPvyBQBorgFiM8aGd U15fCNn/KsCdtK6C3KoSvz9rKdDPVAKSavo9Pi//egH4cVKoItMJIEvQJ+ihC5aXTYcYzlqvy3uQ PQP2c5PO5uv3EtdVnGRr2N9hvv9eCK/SmWG52XSOE0MmgD2zj10IXsCgiCSX2Njz06ZFof+B/2Rk 06L/mNuftTrE+rC9/w9qvwIONd2I3E+3Ma0FEya3g+6dFF+CyCzDzdd9vF0YYCbBlT7NObA8zWNM a80EaIqo3cf3KCTE3TymtRCs2WpO+le7T+9Rks7VAK6SbOAheqP9CAXx3vBWx9uUAfSObcIgkeRs 8Um9b87fjV4X4a/zg46vJ6Uk7UzB8wb4ioGv+8R+SKRW4AYD3xMkqL+ZDI7HgJwADtoA4JVC5Bjw 3IJghCcYuMpcbEzmxReea5Sqnzu0rfaK/bsz7S8+1+/3cDA/PuM/It7VteXNo+LtF98XV+375hg8 jYlx6D/haSz2H9lxKMdkhgztGZAVvOiRJo/IzUpIV1CfJKW5xAEzwEywg2kJxL4uNniK+U/SP6mQ ujM73B1yh/KmqZl2eHDcFdRyvHGrltUb97FHDbUycKPUrDQbk32b2RZ9i3FAPOj5jXHE95b1vutd 7W3vB9bHeqDHuJADEPCbUS8CC3wOcgCoZPIcAGzzJBN++O0cgNuxS5uTBSBj1Ql5ACYyYZEGYJpe qzcHwNJlqE7r1uvC65poZTeEQxbA61iLSvVNBJCBuCARQG8KsMAo7xpPkW7eImtrbNC4Ewds+Tp5 LRe1vNr2JV1rxKIm1OUo/yo+UZ123hksMFZYH2NfEq600pfzj+2PsoMFbYPESf+g/HO6/6vOEXfU dbEuhbGEFp7afdG8wQB8QfHPw/4KEezCEOHnWFpCgjByznLA0i8crIHJz3sKDs0cNIWbntZMpHvE 5QPr6mh1yFUGgdF1ma1/2nFZbkVq7+8zj7OHTr5fn/lULGeZr0YOGFp9MePp+nc2ujkzDb+rEAyT v6KPxNl/Z/tInh4ysa16bswMyIYctAPgW9ieZLavxCrT8ZPx6FEsi9Adn6TDl6Hj7DVzGbzTh/a8 3MHloRvM3Tq2CLLRIMnyATUWHSAwGgh7o4Eyo8xT5h3oGeit9W31G+WB8uA14eZAc7A5Z1ZgVnBW zt3yMu/d/ntC9+Q84P2h/+HAw8EfhLbozxovWS/6Xwid0/8c+ru3y/oq1J2b39OjwkEjNyGZw8x1 IIjEer++AyI4yaWUS1KHbCgkMAUQOcRCwWAqoIdwgm1a/J6UoWMarCNVygPKP/1+IdfKFStzX8kV cw+KjftM1IUdOihOtI3GgB0Qbw68AlWVg2zofpMVCcMTcIwTndqCtNwAT5PHdZ2nm2eYDN1bCc4l 3qM9kVwFx4jK6yJ1U3QiEjeNWufPxLDF18LP40hk4yWIqGDiQP2KljSJ8N+7pEldCi6PUkjGtPrg baLwNi9CQ+WsYHSfJeeV7VaHhBDkOOoG69CoAjH97L4cJEQ7yc/oPfA0EDFC9wmWUYzL+dTZrCaE MIghMEW5NzSkouGaiL/UbWTm/fpkuqgg/VF7Zu5VJQNW3VCTueM5q7wkMcfMk8q7ti69b9Uycc7F 3+we2jyBopxy+J4T6Fc+ttv2YlOP36pigFU5yRv/Dt2rSA27ElErPOqv7dEo9BPLtUoLDHR9FBsh jlBHaU1WC5soTlSnaNdZc9mt4q2AXVayJepK7SH2ABISv2LnxURMLWX91LQ2WP1X9fdMIWs5YOXU iHCvCEJO2MWYSIv1mi5ibTvFRKS3iYzEbsVb3Gn8RP0Wr4DR/Lyt8dE87dORt2G2YzB0yy+KWErF lkfnbb42BpRvOzYk8dm+6b61vk6fm3P9AQOCRbtE0Ncwhi0VmrAzXDdW2rhgghAzrSWF5DaIrZBd u8YumwsbzkAbixq3i0CAButjTBE/5uRKamx4D2RzZOWQALyTxcNJ7EOmNVL+DnY7tadSXeLs1weo Fqkq+ROxdw7P8qAR7sM2kyohe3f2ALKD1HDiCgrO2iL0CFJSw4NFrEKL8fAlx1Jdi1VPSrtlysDq wpxycefiyZkm18yuX82/ezb7bJNLlTct77pppfZjNDESTP7qPgvWn4mdaetZtZ18IvAEcjV+nL/L 9azxrPfQgBOBE+EP4h/kv1v93kDfAjV5UHx+b+H6kkq6H4CNBF4Up2Pz2kHiDNtqKgExeX7JvSVf lEglT6hVB3HRENKPpbvTrvQTQhTnbaoBUaIZbYILbzCj7bJ38H4z9hZukGpfFmdApnqm4BFycUWK N8BSZ+zzxIbQDnWIRLis6ljsMkD/s9qqPNOGC5OB/IXkYz5TnFhdl+rPCpB+l/KViqn80nCpnpJL 46nq/rUFQl0KB+gvFAoFDHqiEQ2lmIJSTXlVARtYOggbUXqtQpbnwiHHiBYKCTcOjtvm2ItT5EeA MNhZsY/CC2m6RnrEratKAiR2HeSszZ68cOCdpTwtnIxWvPBLNvvIG5mtr76a2fqbN9nsX27LvPOz Z1jFjh2sYtdzmd9NXJl/+KHW/5h5aPkDrcnl+UubFj/5yIIpG9zvHM48+drhzJY33mB3Hn6NzTm8 ekfm7Z07Mu8+8wxL79jJKnd0WSWrnzxzZN3hW++dlze6aefWrT+9E3bd/Q07Is2HZbiEfNtktZTv k4S5x/hGgH33KaScH0lazI48/jj5A4Edwa5I9Lo4NovB6/jLstsHTsOSYeXnlw/w4zXYjpFeIgoT XP8lTkHPon1K/2C3bAOMKX6hfBEUTymnguIx5VhQfEV5JSjuVnYHxW3KtqD4mPJYUFyjrAmKF9WL IXGuOjckTlGnhESP6gmJoaCqALswBJf5lc/1lejziszT4BUavFAJuM6uDM5X7lUewzobCw4KNfi8 ngaEwnYkXuNbypRBKnbNFRpcrseQ4RqL0uab6FOOqic6DuAfklNCSWgktUhwVMh3E1eF1rjxH+g1 oT9QQFm4kOHG/9D4OcVEDa1DGyuFfcos9Ktk/6kVdTUu9kRPSXr17X99sOG6fiMiU2+8VEJNjXR9 Ko5z/5bX1Af2OF5TnWpnSGQqUthOK6eD4nHleFDsUDqCYqvSGhSfVp4OipuUTUHx+8r3g+ICZUFQ vE29LSROUCdka8r0GC4h9HyQ6sbjRZX5UFlMfV6hCwMYKlAUGhjkyRs8qK8yb+RKMLyourxLRRFb ZaLKygTK9J3NawsLjdk9A6iqQBWAvRE6xjnm2MjJuf92ZfXW00LaS8DhaGEnI76bZjX4Wj3lG39V kJ5agTyfP/QUpC9RQUPG9xsZvnnCpRLcOWqL/3WXkSLfP/ibiGsuqPTJAhAb1KgHnu1/78odA8Zz aUfuQuH/vRs3Jrjf2YF76P+x63YTckqc3awnCpOEG7ALwGShWZgiTBVasNHjQ0KbsBc7iu/j3x07 yZFt4U+G9pUwfuioG8dPTl+1aNYtc8dO/B9BiHC7CmVuZHN0cmVhbQplbmRvYmoKMjI5IDAgb2Jq CjI3NDg4CmVuZG9iago5OCAwIG9iago8PCAvVHlwZSAvRm9udCAvU3VidHlwZSAvVHJ1ZVR5cGUg L0Jhc2VGb250IC9VUUFGRUUrQW5kYWxlTW9ubyAvRm9udERlc2NyaXB0b3IKMjMwIDAgUiAvRW5j b2RpbmcgL01hY1JvbWFuRW5jb2RpbmcgL0ZpcnN0Q2hhciAzMiAvTGFzdENoYXIgODkgL1dpZHRo cyBbIDYwMAowIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCA2MDAgNjAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgMCAwIDAgMCAwIDAgNjAwCjYwMCA2MDAgNjAwIDAgNjAwIDAgNjAwIDAgNjAwIDYw MCAwIDYwMCAwIDYwMCAwIDAgMCAwIDYwMCAwIDAgMCA2MDAgXSA+PgplbmRvYmoKMjMwIDAgb2Jq Cjw8IC9UeXBlIC9Gb250RGVzY3JpcHRvciAvRm9udE5hbWUgL1VRQUZFRStBbmRhbGVNb25vIC9G bGFncyAzMyAvRm9udEJCb3gKWzAgLTIxOCA2MDAgOTk1XSAvSXRhbGljQW5nbGUgMCAvQXNjZW50 IDkwNyAvRGVzY2VudCAtMjE4IC9DYXBIZWlnaHQgNzAyIC9TdGVtVgowIC9YSGVpZ2h0IDUyMSAv QXZnV2lkdGggNjAwIC9NYXhXaWR0aCA2MDAgL0ZvbnRGaWxlMiAyMzEgMCBSID4+CmVuZG9iagoy MzEgMCBvYmoKPDwgL0xlbmd0aCAyMzIgMCBSIC9MZW5ndGgxIDU5ODAgL0ZpbHRlciAvRmxhdGVE ZWNvZGUgPj4Kc3RyZWFtCngBvThrdBRVmt+9t6qr+pVUd9JJJw2kmjK8ihBIQ0iYaFqSDo8cNLyO HTSkA2loAiTRAOIo22DMhOmAwLavWR1PZsxxPLurVpSV6Load3HVdRjHWXyd2VkdhXXWnahHRT1K d+93qzuAj5kzZ39sdd3v3u/77uN73a/u7V037I6CA/YDg+DmnR29YD55MlaHNu/ZpWZx4SgA3b+l d+vOLC4pAJYTW3fctCWL540ByEti0Y7OLA7nsa6OISGLk4VYXxbbuWtvFne+iHVwR8/mHD/vDsSn 7+zYm1sf/gNxtbtjZzTbv7gG68t6e/p2ZfGiz7Bu7L0hmutPwgBsMdJanLOf+4JmOwEQbChkOqyA 1SACBQV88APUJN9yAvWlJh87l1bfsbc9v+4c2LnaAI/Ocxzm9XMT7R8BpK8UTkmfIyqb/TkD55WW ppcCCKc4ipCvdOmjBD95+52i4imnX0Nw8y1FvptvKVFO7zp92+nTp8+cFpU9wT0te3r2CK/+Bvl7 bkSwsxfBjh4E27uLfFbYTuSru9u73+7+qDvTLcL24e3GdpbfTbZ3x28o/fyLQs+Uz84h+ORTBLt2 I9jahWDLNgTRWKEPPh//nNbHro61xxhE90fHo+zt2EexTIyp0WC0N3o0KlghSuRobOD60pK+oh82 lPhvwpJ/tv0sNf5I7j/qKqs3yIfJ4rK3nqkq+0lS1O9ICvpfJ5l+LGnTk3cS/e57BP2eO5l+Fxb1 o5kLaq+0kfmkElqgjCwk86AS6woyLzitsuzoG8Nv0NsPV5UdHqoq+zGWoYGqstaD5LlxQR/LjAfH x5WCWuOD8Q9o/L0j79GjA0vKDsRlfR+W+ICkPzpQUjY4APptA4Lej2X/APEt9nirPZ5FHvdCT37A 46jyWBd4LPM9rNID8zwzZubNmpk/R8+bq+dP1/Iu0/KnleWpZfmq6NVq8xWXw+HMc1htdodFkh1M EB1AqCOfvcJoPrwCVCBzy3xkqtMrlTo9SrHTLRQ61fzZ1bWqgwMrBxYOGAeAYCzzzuNKrnbmaluu lnK1kK3/gWDdEiCGuxma1y01CgjWa5caAb15jKlrjCq92ZBbrg2PEnJ7K1INenCMwDpDODhGsXI3 bLg2PEZKOHvA9yQQAkZzZOBwqz7V6GxeGzb2T201qnjj6NRW0L/99PV9gzI6a0bImBPqMOaGIo2X csiuSYyP2M0Rc+QlM/bpfX1E1w2voaH8ur6xb+OuPnwmByKCJBPLEketXLeWNUtRwTWmkkaphsiL iFS3XGs4tKUg9kMJ5GB2QwkGp+Ta7mw78z7HL8L0ZN6B9N/muv6fK54DsnngL5hiBO77k71eg2Nw V0bP9GS64FU4ANdlKjPxzEiuf3vmZ7A481IOuzOzHR7BNufeC0PwANZ85mMwcIF+G/DseRoLAOZj GMRyP5ZjWLIP5308iXxv/RV8ZdJf+x5uP/Dfs/hLwK1kH1wFO/EXN3t2faf/g5kNmAjnIP0eWAc3 QRe5G9uHM30wDKPkbvI3lmPkR7CcVMBRWg030ftgN2pyBTwKp2B3ZgiqMr+ChzNrM/9PD2yBHrgR AjAb1kMz5qh9KOcpuILYoAkOwQm4FX2VSS8N/mBJbc3i6kULA1UL5lfOq5irz5k9a+aM8su06X61 bNrUKb7SEm9xkaewwO1S8vOcDrvNKksWUWCUwFxieBvCoS6jpCFiNGmNmqIaTVd9vKrSALfPr7kC rRXZLoaoG1DQbBS2hEchWNNqWPRv8K8yWLnyiR+HrfKpIUMox1db2dFpzFoT9mvK674L/Fac0iht CPv9PoOW47sCWfiu7FA7DaUF6cgwKSsMaAnzMpZ5twaJSo2/1WfAmrAxDdGxzMeI4/NdCZ/EnTb+ DRmvIglltKmkodGAwlFoetcAD+/0cQ0YUGfMwpRVrmALp/IaUGmQwk8MUmAQzypU6Bvz81Hv1Hxb +1Bnlxbq3IZW7IxctOPHWSv61YSaWBN2BXx+lBdnG7XbGrSGqK1iLoza7Ni0Ywut3ztKmq4gZoM2 hZaMUpCdaCs3ly7ES5cRHIpgQ2tEIyGn4CIHv0mHLmUBDst2AuxmtohhaTAkc111mxHsMGBIHZ07 njg0psCmiO7o1Do7rgsbrANlHAVWHoqtM6Y0t2xAEi6PJRJTuVcbTcB9pIZiagJx3jeCUGvkvv0G vTMWjfBoIBGtEXnWhvCgf9yH34TwYMhw6cYyHL7sh2d8LBHyblM5mkgMqsbw6vClXD/vg672VsxV EyENV8PJQl1Lub8qJ/1jxtyKTtMRwaEO1di/qQuNhW/Hocn49icUo+lzP3oCfTE5MGfdzkgX16QL RwpYqYmhqKnpIVMzjEo11NXICx+IMQ7rce9sCIdiWgjNmVsQ7YHjWfm3x/r9RonOByYSIS5iRycK zw2Dbwl+kRrCOQQj36cTFLrBCK4zK1hnugBXDHY0tuZIuQ7IEdANRjDS2NrKlcIVmteEG5Ad0joa ecRdSonkKNglNMnk0morcAZD3azy3aXh4BoOojWQ2Fxj2srfSirmNrdcHGWI5YqmJs4B9+zEH3GR SygdOYqlXDkHnNmkNUUSiSZNbUpEEh1jmf2bNFXREqPNzYneUARXxX1OkP7UkM9oOtRqKJEYWYK+ 5mHXhPudljepsQ5E8K3X/CiTC/XKsnHo97MBgx1DHjdXQkEZDAfmHJ/axFXkuYPnE74dcfX1YdwC m3HuUKcJcGvgaYT6+CZhreWhbWtzivv8uJa5FXlmW52j4iR+P98+Q2NB2ISIsX91OIursMn3GAQr dfRbhHPGJzme9Zyzf5JzYXhEQx/yw9CfDWdM1RdCOeHS3GptJUqBwuG7otMYX4cqflljyNx7nFHQ EGY+mmtRH+Mtm47Zvs4o1s2B3CSYCBPo1V9rhqIbYkN43FfXqiouzIHc+2u15tUbwrkZeYQqv9Ze IjxPQqFikDqDFPEwAMybaEXM6sU1yLwwUA0lJsMPpa3gd5A3+W1EOEUCWM5i+1Us8WxNOB/bpOwS /GnEOZ3324jfbpK7xTjAAn+FuApLvnOvQXLuoXiD+sseAe9eFpCwMz9WWbHYwI7QgcWJJfvk5ep8 s54G06AK1sIpspj8iPwj9dOr6RP0DaaxHnZCmIp9KLyJd75zYgTlkKDwhERwHSZA5anKUyZYMD/g 8rvK/S7/m2xqajOdmnpPjHw1vF+I4Jk5QN5nAzSOY53HyVuUUT5oYsF84l/kZwOpR+ga8v492O9s 5iz9HZxFeYuCNjAsBexRq9XpcLlrKyegHgeUV+FZwKJNn7FoYTWNLFq+YmFg+bKzyxdVr1pVXb0M 538VfXI5nmrzoRgtOhS8XJKJDGpSkSUl6ZtfnJSZNym55SnkyylEchCrxIhCl8BKoEwGL1APneJ1 5lcXKAgcGFfBKYq7GjgJCuKOKfuYtzguBaezHuqXtlNdJ6VeZVWqTpk4PRHgh+/2jW3tbQg2trVd jyLXT+jKRO3GNtR1GvEUChoayNRBKg+oixbO0IkrUIXnH2ww5fBw+r9PpnvI4C//a2B3OjpOKu44 8m9PPfDs0489wiz+Z/rHz4j9jz/QeZ+2/I1N276+944DP76Lx1E8c1aoFO8HD/QHZ0puYn1BIQcL yUEnoQcpGZSJPWl/xhGUndWOvKQsQBKe8fBr4EykeAqStEByEZsHHHbXPjEoih5xvRgVBTsrtnfT InEHVxIV4npOlCjPe18veX5jG3jrU/+pT0xkYRvXr72tDVDtcoumgksBVLNYmqFNpy7FX7VYqHzw t+kP0++RQuLb8uLl1Ycf+pdnyIEH/i7cR/aSThImAwv1Ay3ps+lfpY53YrRxP65EP8rggnXB6j9Y vrTQ9+kXlNJfiMSVBGZNyu6HnITJTq8z7Iw573GKVurcJ1jjcrBA6KFu+YJ3JpQJ0yumO1DQNkBR C/ymlLPJ4kAVni2pTl4lRcRDrko/nP4i/d7Irpc++J8Xd4n96cH0ibSRPnKEzCEyseABm98BcS/8 HqWzw5LgdGvSQokFg0tMUmZLErfE8GJli5OgE7qpg1yQA6PkzMnJmFgwfzZx+T0YDryw36fK6G9T L1F/6m2K8Xsk3Xwk9XbOtxXo2xLoDTZ62Sx2kDGKUewlNq+XyvbkTAcB060e4K4sLnYV2YviwF15 jbhVpJQ7lNqZD2UpveDM9qw7lYmTfG+hTIGq+onftbdNcHRjG+609j/hSJe2yC9UPPyb9ET6DCkg U7LO/OdnyYFjK9Pk551xsptsJdeSW01/nkm/kjp+Obnudm61MrTasGm1BcFSWUxamJ1yc8GwzUKG bfEgczhZ3Kvjsah01QRaK1UH9ak6fLmxFgX40h481rPhVPzTT+mBDz44IkSPHPn6XrQTj5cnzLl/ EgxTSuw2O9iY3W4jlBwAeyGA3SrLtzJbIWM2Ge3BNz4wZrFZmUjAHbN9aaO0mBJmtRE7UPSkBC8A xRzqlFlcDDpE9OPkZn8d4+lf0VLu2lpXoP369jaor6vDt7ayvc1dXDs4Txf3KScH53n1QXnfSUlW 6mTUwa8RyYXyuzAfCk+8ktbuHBmhN/xT6i16/OepD8X+1HV0JPX3ufjC9NqPmXx60E2ZgFYSMJ4k 9KHlYjzxlFhvxhGmXgFSMEKvE/u/xkRP4Gm0h4IzWGFHcKmFG0GyFEqSZZZEKCZvWfJKs9ACT6PC Eqo9E7MfoUi3MEbc2F+KA40LQTuuaBMuRDDuJFdtLSpbX4eqm5sKt1J726A4Tx/cd9JUkWuISU1Q nkhbRk6Q8z8TNnz9IIplCC2AlzaUqxzlsoEbrgku9iqzFBpWYspehWGaisl7Zbw4yFY33+FuSSgW BgUm07x9gt0atwULhW5aYLsgDk+7KATU10+gMzB6zSx0PclmWEytWkEuyeLHdsvLn336/EsjI48R /09veUrs/+Xjx99IDTL5k94Ej5/MWXYe5cqHa54EW+YPj5dMrbbx9F+JmZ8p0/wI8EMgM4IfEPYl 40JZcLezAmccZIwPF1pK4TGSDRK0FPdOHYp3Pf8soGT43VJLSMCl8ISPUXz+hZfTW0fO3dw3Qp4+ 9y75d/by+cb0I8PH2VMoD54QhD6UR4Z7g20yIUTCa698AAhGMpHwfzTLAVEoFEWBCJLEQLaIjLkl Eg8KgiiDRRRFFPRGkezFv9piIikWl4nXiOwFwI/hQzCGxkUP9FKruDOX3du4G/l3C8Mz4K41dyA6 GmMaPV0ZCHAPyzymRQxq3lgwH7OoFU2M0WwlQl962QPpZU+S1WSN2H/+rRSGIpuZGqA3m2cHBHj1 DOC/ApDJmMilQEGE4b/FLiiHGTATZsEcmAv8H80F+A9CDdSZnXGTol34Y8GesH71lU2hkH5ld2fH juiqnu4e+F90SvrsCmVuZHN0cmVhbQplbmRvYmoKMjMyIDAgb2JqCjQwNDMKZW5kb2JqCjgzIDAg b2JqCjw8IC9UeXBlIC9Gb250IC9TdWJ0eXBlIC9UcnVlVHlwZSAvQmFzZUZvbnQgL1pZRlNWRStI ZWx2ZXRpY2FOZXVlLUl0YWxpYyAvRm9udERlc2NyaXB0b3IKMjMzIDAgUiAvRW5jb2RpbmcgL01h Y1JvbWFuRW5jb2RpbmcgL0ZpcnN0Q2hhciAzMiAvTGFzdENoYXIgMTE4IC9XaWR0aHMgWwoyNzgg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAw IDAgMCAwIDAgNjg1CjAgNzA0IDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCA2NDggNTc0IDAg MCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCA1MzcKNTkzIDUzNyAwIDU3NCAwIDIyMiAwIDQ4MSAy MjIgMCA1NTYgMCAwIDAgMCAwIDMxNSA1NTYgNDgxIF0gPj4KZW5kb2JqCjIzMyAwIG9iago8PCAv VHlwZSAvRm9udERlc2NyaXB0b3IgL0ZvbnROYW1lIC9aWUZTVkUrSGVsdmV0aWNhTmV1ZS1JdGFs aWMgL0ZsYWdzIDk2Ci9Gb250QkJveCBbLTk5MyAtNDgxIDE1MTEgMTA3N10gL0l0YWxpY0FuZ2xl IC0xMiAvQXNjZW50IDk1NyAvRGVzY2VudCAtMjEzCi9DYXBIZWlnaHQgODUwIC9TdGVtViAwIC9M ZWFkaW5nIDI4IC9YSGVpZ2h0IDYzOCAvTWF4V2lkdGggMTUwMCAvRm9udEZpbGUyCjIzNCAwIFIg Pj4KZW5kb2JqCjIzNCAwIG9iago8PCAvTGVuZ3RoIDIzNSAwIFIgL0xlbmd0aDEgNDU5NiAvRmls dGVyIC9GbGF0ZURlY29kZSA+PgpzdHJlYW0KeAGtWGtMW+cZfr/v2ByMDfgCxpfgcw4H2wQb22AM 4RIDKZAAKSMNJHZSQgkhgQbWNCVRL+sWTWrUIm3SKjVp1Wqq1q7afqxl0tQRpCqZNHVdN3VoWn9s Y5fs1m3t1v5I1koJZs93bFjTdVU19aDX3+V8fs/7PO/tmIXTZ6bJRudIou6p+clTZFymDzC8OnV2 Qc2v2SrGbcdPnZgvrN8h4q+emHvgeH5t/hOR9ZmZ6clj+TXdxNgyg43C+WaMtTPzC/fn16bvYeyd u2eqcN98Rdyfn7y/8Hxaw1r9/OT8NEZcjh/iI3HqnvsWjCU5zmHsPXV6unCeZbA+Cxkp3f6D9zkm xsXw6aALZKFm4vgTVwUsh+34YPgjIY85X3l6orzzOvNKfxVHXr7tgxkxrpa8/M5NJaeY3zKlcN5S 0GB8R3plI0LbzGu4f9T8Fr73pvjG1uVYppIIrRhPsUXYCuiVCJPLZKIeSlE9BciJ087IZTJTOyUo SH6yGzt0GV/rozaKkkquwiGJhqmbmqiW3PlDK1QEXY7IMjG17+FZT+8yUcSAV0EjtJvGaAIH7Rsd ZONmyOsEmyg6tEyWkcx3GftqdpltPLJMvdWXgEyaONIATVFV7ZvtXWJ3YcGj2KjXMJOiav+SFOy/ I6Nn1UV1ceDYotqvzkweWzIFjRE3phezcXWJ9mdm8Tma0Za6s/6t6XQ22w49JqEHX8HxxSw03F3Q gNHYiq/jkDk6pC5JoZHMvszSuV7/Undv1q9pat/SlZHM0pVev5bN4lTRlqWwWKDP2yzD5qJ63C/O a9kPHVCRXVwUOrHiIW3pyuKifxFIjB1dW2ZU2ABScUYK9i2z7pGMuNWta36xoWu6BjuyvdBtiQ7t z/TBEk1YUvLJlFq3DMVZG8yzGpSWfkaUln0aSss/FaX2LUtvodQBm+2CUucWpd3+JdqiVNeWzn2E UPqfDG9R3v0xlJ/LU37uYyh3fYhypN81amJIA/4dkvkVyKNUwtPUyb1UyfeRAyPWG2/Tbzdusqsb N8XIo5h3kMajVM6uIv9EFov8J1S/IkJqINkOFnaM7f/7Q9QZ6RO/bULOf9JVRDIV44AFUgKxwkai UsjmVUblRrUQ6378/Ysd4JzX8mcln/S8STWlTadN500fmHvNL5rfQDlpAtw3+GuwS6YJUZuQInGA hhTbkTOrEMz5GvawNmG0rIEV1pfBKu6/hFpjS2cLG2axYaYisWHCccJxs/0SniNdSzQyzaG5HJqD vZT7Bjui5I7xF9a/xJ9b34HnC2ZkeO7LqEcWqoYffreCEh0kCRY57D1m+hUWf4fw8R4/jgTJC9kO aYMMQLKQWcgDkMcgT0G+DbkE+TGkdHwFjwiSw+FsWyY53iN0ytApb+qUoVOGThk6ZeiUoVOGThk6 ZeiUoVOGThk6ZeiUoXOZfAAZXUNND8AfwtyAfQXeYca8BHMixZgT5pWYEwxINLpak00BXlmhW5nW lOap5lA4lZYw6Kxwp4zr308suRvr/U+++wSbTN3ZF25vVJt015HZ3HLzT6tT2z3bd7Q72cU/mp21 6qMsud6itN2RbLu9jJu1eFtg36H18+8Xu+trGndUAyPMJf4C+LVRFd27goYnG2ZV5Nn9DJjwChaI yrbQlhZYKLUnGltdebxAtYVYP3PmyY7bo47g0L17v3CRObOPz7Q/9sgIr6/ZMRju+eLUTv7gekv6 vuemv/Q4NJVsvMdn+K+pi765gqTUjMeoIDWC3ieIj+SRuOFT96ZP3fCpGz51w6du+NQNn7rhUzd8 6oZP3fCpGz51w6du+NRtxAlhjBhxIjKBra3AtRqpxo4VOy3wOUOA9wjEfgoZj/fDlCLqMOZFQMyS LTGu15TByQGusIBUWQHwNTHeqhcFeNJweozHWQxeT2Md4Fye4Nv3TKQS4wMxX7RdnfTF9AqlqUeL 7En6+IQ5PDTXnZgaSVYn0tpdnojiVBvbfcF0pIq933mg1e9rvr25riNSbfHJTn/YX9us2R11uxK7 Jjqrfal9OxK7In7jVtCnRreVlultcBZ47URcfAVxIQMJ8jW+gj3kIwgVEEXaS6tA06rJSSnp4g85 16843js/cZ4/ODKyjk+ho3LjOrvOHYjui8ukfkSFChWWVQj2y8UjDR49a0jkIvKAag8Y9FALpB9y AHIcchZyHnIB8gLkZcirkNJxpO6bmPwZwsfhARdiWtjrggdMqB5ivll/bHi4fU14I8byznAnm1pa 9TKsYkg7wbybPTsmncj0nRwInrz78INVY87h1trGQKkvOdSYbGeTh8dS2dPpuxfuzCTaPXUtgfqD /dEUgHBybFznR8Cdh+rogRXEWj74vXYDmxfYvMDmBTYvsHmBzQtsXmDzApsX2LzA5gU2L7B5N7F5 gc0rsMEHIC0EhAJTCPgsqDNibgGuEMQDbJpLl/SYtBlrAl9SDuah5YMuxH50cbSVF9c0NHl6Tw6E fc17G5v3hbgz9y6mya7b/Mm9if4u/nruHZ9eaek4cqYjPtyq6E2Dr0UODcb3ttcd3ts0CMjAXAJf vwtfq0i8J1D7YKCpkI2C9CjEtgpBnih5HyvgQQEKBTwo4EEBDwp4UMCDAh4U8KCABwU8KOBB2eRB AQ8KeEAYQiPF4Wsf2oLA7wMXMoWNuYx5DWwT+zWi1mhpJippIfdEqv3H4UEtLYlkO8oe4UWzp1OT A5GKprHu+r3paMmYc7DNlwi5WUfuF5ZAtCOoJ6qtf7PWVszfn8g8NFgzsDPsjvREEkmHEg9UTQZS dVXe7fgNsPH2RpzXgZMGVKc+YYxeMEZEvE41RsSXg5GYqBjViBZhazXsLqGkMRedogNFWex3AEPQ pct66lanVpXBxzEe1gNA0NKaZrf4OMbZT8ZH7LxIaUhVdx3rC3oTA4nG0W28pKquq9ET06v4KNN3 DNSNntWsFblveWK9Dbf1VMV2J9SEYh9iKxPcE/aXtx0+3RYfblNq63loqL1Wdmm+yM6Qc9ewf+Cl 2rGBpsGd4YODiaoQXh043qGI/oL4F93b9V/VQ3Q5vZyhaqy6D7hdJ0fn+NGZmfH1G/jlwcR38W4i +lGDEeei9ggni3BCBQJlK3jb2ZxZCzPolJJdzJWUWnVz2PX4hdHw8emJc1fvyd3kWf76esvy4dw/ WP/lq5w9L+LVeE7BRmvhORQ3tLi+9sToBfEVGJE/x64ZNezhFbTIfEmpyvcUG3qKbbOn2JCbNvQU G3qKDT3Fhp5iQ0+xoafY0FNs6Ck29BQbeooNPcWGcEY+IC9ciGIXQFZhrhnvUVg4gdiHvM5Hdd6y NIN3UZhE9srgrxDPRbLeOjM32lnsq/L06aFmyWRiu8a65OLdAy1HVW7n5vUbLKC0Vfhq9KBcWVVZ nPs5CwdaHH3dDQ3DYFDbuMF6+deRVI0FLkRQCgvEu6ewwKibq6KmlhcKtRnGVqMDwJeyjh5QxkRD QwB2MVFEQ6nmFjT31t+oY+pB+8FeLrmUek95oLzc5imtUDjrPgG7nnpqKHfZVmH1qi5Z4sMmc3mF xW5hiSHDR1SOOlqMqAiINxMryoUwxZqvomJpRfWwonpYUT2sqB5WVA8rqocV1cOK6mFF9bCielhR Payb1cOK6mE1qocTvDvjBcQOoC2GC8UjipFponqKxAIQ1AmxAECjSSRl9vT8WKesJXbWhpq5ycRv JTv3B3VnfJvBtFtmsdwvBdNdUTAteiJ+S7B/ApN4rRR1/MPxjVuI70RjkqFyS7rrZ0y58/c8emiQ m3N3sBfXb6DO0sY1yDPiHf1jLgf2JLzOhsFKK1jZTXtokPbi3wGfo334xZJBUAornCJvcBWhu9Oh bP/+A32RPdNzZ6cXZqcmh6fPTDcMLEzOzU7hyL8BdyGBOAplbmRzdHJlYW0KZW5kb2JqCjIzNSAw IG9iagoyOTE0CmVuZG9iagoyMzYgMCBvYmoKKHgyLW1vYmlsZS10aWNrZXQtc3BlYy0xKQplbmRv YmoKMjM3IDAgb2JqCihNYWMgT1MgWCAxMC4xMC4yIFF1YXJ0eiBQREZDb250ZXh0KQplbmRvYmoK MjM4IDAgb2JqCigpCmVuZG9iagoyMzkgMCBvYmoKKCkKZW5kb2JqCjI0MCAwIG9iagooV29yZCkK ZW5kb2JqCjI0MSAwIG9iagooRDoyMDE1MDMwMzExMTgzM1owMCcwMCcpCmVuZG9iagoyNDIgMCBv YmoKKCkKZW5kb2JqCjI0MyAwIG9iagpbICgpIF0KZW5kb2JqCjEgMCBvYmoKPDwgL1RpdGxlIDIz NiAwIFIgL0F1dGhvciAyMzggMCBSIC9TdWJqZWN0IDIzOSAwIFIgL1Byb2R1Y2VyIDIzNyAwIFIg L0NyZWF0b3IKMjQwIDAgUiAvQ3JlYXRpb25EYXRlIDI0MSAwIFIgL01vZERhdGUgMjQxIDAgUiAv S2V5d29yZHMgMjQyIDAgUiAvQUFQTDpLZXl3b3JkcwoyNDMgMCBSID4+CmVuZG9iagp4cmVmCjAg MjQ0CjAwMDAwMDAwMDAgNjU1MzUgZiAKMDAwMDQwNDMzOCAwMDAwMCBuIAowMDAwMDAxMTM5IDAw MDAwIG4gCjAwMDAxNjk5NDUgMDAwMDAgbiAKMDAwMDAwMDAyMiAwMDAwMCBuIAowMDAwMDAxMTE5 IDAwMDAwIG4gCjAwMDAwMDEyNDMgMDAwMDAgbiAKMDAwMDAxNDI5MCAwMDAwMCBuIAowMDAwMDEz MDgzIDAwMDAwIG4gCjAwMDAzNjcxNDQgMDAwMDAgbiAKMDAwMDAwMDAwMCAwMDAwMCBuIAowMDAw MzA0Mjk2IDAwMDAwIG4gCjAwMDAzNTcwODYgMDAwMDAgbiAKMDAwMDAwMTQzOCAwMDAwMCBuIAow MDAwMDA0NDM1IDAwMDAwIG4gCjAwMDAwMDQ0NTYgMDAwMDAgbiAKMDAwMDAwNjM5OCAwMDAwMCBu IAowMDAwMDA2NDE5IDAwMDAwIG4gCjAwMDAwMDk1MTggMDAwMDAgbiAKMDAwMDAwOTUzOSAwMDAw MCBuIAowMDAwMDEwMzI3IDAwMDAwIG4gCjAwMDAwMTAzNDcgMDAwMDAgbiAKMDAwMDAxMzA2MiAw MDAwMCBuIAowMDAwMDEzMTE5IDAwMDAwIG4gCjAwMDAwMTQyNjkgMDAwMDAgbiAKMDAwMDAxNjA1 OSAwMDAwMCBuIAowMDAwMDE0MzI2IDAwMDAwIG4gCjAwMDAwMTYwMzggMDAwMDAgbiAKMDAwMDAx NjE2NiAwMDAwMCBuIAowMDAwMTk2NjQ4IDAwMDAwIG4gCjAwMDAyMzI2MDggMDAwMDAgbiAKMDAw MDAxNjM1MCAwMDAwMCBuIAowMDAwMDE3MTUxIDAwMDAwIG4gCjAwMDAwMTcxNzEgMDAwMDAgbiAK MDAwMDAxOTM2MyAwMDAwMCBuIAowMDAwMDIzNzIxIDAwMDAwIG4gCjAwMDAwMTkzODQgMDAwMDAg biAKMDAwMDAyMzcwMCAwMDAwMCBuIAowMDAwMDIzODI4IDAwMDAwIG4gCjAwMDAwMDAwMDAgMDAw MDAgbiAKMDAwMDE4Nzc5MSAwMDAwMCBuIAowMDAwMDAwMDAwIDAwMDAwIG4gCjAwMDAyMDc3NTQg MDAwMDAgbiAKMDAwMDMxODIyNCAwMDAwMCBuIAowMDAwMDI2OTg1IDAwMDAwIG4gCjAwMDAwMjQw NjIgMDAwMDAgbiAKMDAwMDAyNjk2NCAwMDAwMCBuIAowMDAwMDI3MDkyIDAwMDAwIG4gCjAwMDAw MzU4NTAgMDAwMDAgbiAKMDAwMDAyNzI4OCAwMDAwMCBuIAowMDAwMDM1ODI5IDAwMDAwIG4gCjAw MDAwMzU5NTcgMDAwMDAgbiAKMDAwMDI2MTQ3NyAwMDAwMCBuIAowMDAwMjM2ODc4IDAwMDAwIG4g CjAwMDAyMTQzNDAgMDAwMDAgbiAKMDAwMDA0NjQ0NiAwMDAwMCBuIAowMDAwMDM2MTkyIDAwMDAw IG4gCjAwMDAwNDY0MjQgMDAwMDAgbiAKMDAwMDA0NjU1MyAwMDAwMCBuIAowMDAwMjY5MjE4IDAw MDAwIG4gCjAwMDAzMzY3NDQgMDAwMDAgbiAKMDAwMDA1NTUwOSAwMDAwMCBuIAowMDAwMDQ2Nzg4 IDAwMDAwIG4gCjAwMDAwNTU0ODggMDAwMDAgbiAKMDAwMDA1NTYxNiAwMDAwMCBuIAowMDAwMDU4 MzIyIDAwMDAwIG4gCjAwMDAwNTcxMTQgMDAwMDAgbiAKMDAwMDI2NTA5OCAwMDAwMCBuIAowMDAw MzUzMjM0IDAwMDAwIG4gCjAwMDAwNTU5MDEgMDAwMDAgbiAKMDAwMDA1NzA5MyAwMDAwMCBuIAow MDAwMDU3MTUxIDAwMDAwIG4gCjAwMDAwNTgzMDEgMDAwMDAgbiAKMDAwMDA2NTczNSAwMDAwMCBu IAowMDAwMDU4MzU5IDAwMDAwIG4gCjAwMDAwNjU3MTQgMDAwMDAgbiAKMDAwMDA2NTg0MiAwMDAw MCBuIAowMDAwMDcyODcxIDAwMDAwIG4gCjAwMDAxNzAwNjkgMDAwMDAgbiAKMDAwMDA2NjA5MCAw MDAwMCBuIAowMDAwMDcyODUwIDAwMDAwIG4gCjAwMDAwNzI5NzkgMDAwMDAgbiAKMDAwMDI1NzE1 MCAwMDAwMCBuIAowMDAwNDAwNDIwIDAwMDAwIG4gCjAwMDAwNzg2MTggMDAwMDAgbiAKMDAwMDA3 MzI3NyAwMDAwMCBuIAowMDAwMDc4NTk3IDAwMDAwIG4gCjAwMDAwNzg3MjYgMDAwMDAgbiAKMDAw MDIzOTQ4MSAwMDAwMCBuIAowMDAwMTc3MDY1IDAwMDAwIG4gCjAwMDAwODM2NjMgMDAwMDAgbiAK MDAwMDA3ODk5OCAwMDAwMCBuIAowMDAwMDgzNjQyIDAwMDAwIG4gCjAwMDAwODM3NzEgMDAwMDAg biAKMDAwMDA5MTUyNCAwMDAwMCBuIAowMDAwMDgzOTkzIDAwMDAwIG4gCjAwMDAwOTE1MDMgMDAw MDAgbiAKMDAwMDA5MTYzMiAwMDAwMCBuIAowMDAwMzk1NzA4IDAwMDAwIG4gCjAwMDAwOTUyNDkg MDAwMDAgbiAKMDAwMDA5MTkxOSAwMDAwMCBuIAowMDAwMDk1MjI3IDAwMDAwIG4gCjAwMDAwOTUz NTkgMDAwMDAgbiAKMDAwMDEwMzQ3OCAwMDAwMCBuIAowMDAwMDk1NTk1IDAwMDAwIG4gCjAwMDAx MDM0NTYgMDAwMDAgbiAKMDAwMDEwMzU4OSAwMDAwMCBuIAowMDAwMTEwMTk5IDAwMDAwIG4gCjAw MDAxMDM4MTIgMDAwMDAgbiAKMDAwMDExMDE3NyAwMDAwMCBuIAowMDAwMTEwMzEwIDAwMDAwIG4g CjAwMDAxMTQyODggMDAwMDAgbiAKMDAwMDExMDUzMyAwMDAwMCBuIAowMDAwMTE0MjY2IDAwMDAw IG4gCjAwMDAxMTQzOTkgMDAwMDAgbiAKMDAwMDEyMjkyMyAwMDAwMCBuIAowMDAwMTcwMTk4IDAw MDAwIG4gCjAwMDAxMTQ1OTYgMDAwMDAgbiAKMDAwMDEyMjkwMSAwMDAwMCBuIAowMDAwMTIzMDM1 IDAwMDAwIG4gCjAwMDAxMjg2MzcgMDAwMDAgbiAKMDAwMDEyMzI0NSAwMDAwMCBuIAowMDAwMTI4 NjE1IDAwMDAwIG4gCjAwMDAxMjg3NDkgMDAwMDAgbiAKMDAwMDEyOTA3NyAwMDAwMCBuIAowMDAw MTMzNTExIDAwMDAwIG4gCjAwMDAxMzM1MzMgMDAwMDAgbiAKMDAwMDEzNzMwMiAwMDAwMCBuIAow MDAwMDAwMDAwIDAwMDAwIG4gCjAwMDAyOTIyMjQgMDAwMDAgbiAKMDAwMDE1MjU5NCAwMDAwMCBu IAowMDAwMDAwMDAwIDAwMDAwIG4gCjAwMDAxNzA0NzcgMDAwMDAgbiAKMDAwMDI0MzgxMSAwMDAw MCBuIAowMDAwMTQ5ODE2IDAwMDAwIG4gCjAwMDAxNDE5MjggMDAwMDAgbiAKMDAwMDE0NzA1NSAw MDAwMCBuIAowMDAwMTM3MzI0IDAwMDAwIG4gCjAwMDAxNDE5MDYgMDAwMDAgbiAKMDAwMDE0NzA3 NyAwMDAwMCBuIAowMDAwMTQ5Nzk0IDAwMDAwIG4gCjAwMDAxNDk4NTUgMDAwMDAgbiAKMDAwMDE1 MjU3MiAwMDAwMCBuIAowMDAwMTY0MjAzIDAwMDAwIG4gCjAwMDAxNTI2MzMgMDAwMDAgbiAKMDAw MDE2NDE4MCAwMDAwMCBuIAowMDAwMTY0MzE1IDAwMDAwIG4gCjAwMDAxNjcyMDEgMDAwMDAgbiAK MDAwMDE2NDUzOCAwMDAwMCBuIAowMDAwMTY3MTc5IDAwMDAwIG4gCjAwMDAxNjczMTMgMDAwMDAg biAKMDAwMDE2OTYyMyAwMDAwMCBuIAowMDAwMTY3NTIzIDAwMDAwIG4gCjAwMDAxNjk2MDEgMDAw MDAgbiAKMDAwMDE2OTczNSAwMDAwMCBuIAowMDAwMTcwMzA5IDAwMDAwIG4gCjAwMDAxNzA0MTAg MDAwMDAgbiAKMDAwMDE3MTAwMiAwMDAwMCBuIAowMDAwMTcwNjYyIDAwMDAwIG4gCjAwMDAxNzA5 ODEgMDAwMDAgbiAKMDAwMDE3MTIzNyAwMDAwMCBuIAowMDAwMTc3MDQzIDAwMDAwIG4gCjAwMDAx Nzc2NzAgMDAwMDAgbiAKMDAwMDE3Nzg5MyAwMDAwMCBuIAowMDAwMTg3NzY5IDAwMDAwIG4gCjAw MDAxODgzMDUgMDAwMDAgbiAKMDAwMDE4Nzk4MCAwMDAwMCBuIAowMDAwMTg4Mjg0IDAwMDAwIG4g CjAwMDAxODg1NDIgMDAwMDAgbiAKMDAwMDE5NjYyNiAwMDAwMCBuIAowMDAwMTk3MDY5IDAwMDAw IG4gCjAwMDAxOTczMTAgMDAwMDAgbiAKMDAwMDIwNzczMSAwMDAwMCBuIAowMDAwMjA4MjUxIDAw MDAwIG4gCjAwMDAyMDc5MTkgMDAwMDAgbiAKMDAwMDIwODIzMCAwMDAwMCBuIAowMDAwMjA4NDkx IDAwMDAwIG4gCjAwMDAyMTQzMTggMDAwMDAgbiAKMDAwMDIxNTAwMCAwMDAwMCBuIAowMDAwMjE1 MjY5IDAwMDAwIG4gCjAwMDAyMzI1ODUgMDAwMDAgbiAKMDAwMDIzMjc4NSAwMDAwMCBuIAowMDAw MjMzMDI1IDAwMDAwIG4gCjAwMDAyMzY4NTYgMDAwMDAgbiAKMDAwMDIzNzA1MyAwMDAwMCBuIAow MDAwMjM3MzAyIDAwMDAwIG4gCjAwMDAyMzk0NTkgMDAwMDAgbiAKMDAwMDI0MDAzNyAwMDAwMCBu IAowMDAwMjQwMjgwIDAwMDAwIG4gCjAwMDAyNDM3ODkgMDAwMDAgbiAKMDAwMDI0NDQ0NiAwMDAw MCBuIAowMDAwMjQ0NjgxIDAwMDAwIG4gCjAwMDAyNTcxMjcgMDAwMDAgbiAKMDAwMDI1NzcwNiAw MDAwMCBuIAowMDAwMjU3OTQ5IDAwMDAwIG4gCjAwMDAyNjE0NTUgMDAwMDAgbiAKMDAwMDI2MTY1 NSAwMDAwMCBuIAowMDAwMjYxODk2IDAwMDAwIG4gCjAwMDAyNjUwNzYgMDAwMDAgbiAKMDAwMDI2 NTY1MCAwMDAwMCBuIAowMDAwMjY1ODkzIDAwMDAwIG4gCjAwMDAyNjkxOTYgMDAwMDAgbiAKMDAw MDI2OTcxNCAwMDAwMCBuIAowMDAwMjY5OTU4IDAwMDAwIG4gCjAwMDAyOTIyMDEgMDAwMDAgbiAK MDAwMDI5MzA1MiAwMDAwMCBuIAowMDAwMjkyNTIzIDAwMDAwIG4gCjAwMDAyOTMwMzEgMDAwMDAg biAKMDAwMDI5MzI4MCAwMDAwMCBuIAowMDAwMzA0MjczIDAwMDAwIG4gCjAwMDAzMDUyMDEgMDAw MDAgbiAKMDAwMDMwNDYzMCAwMDAwMCBuIAowMDAwMzA1MTgwIDAwMDAwIG4gCjAwMDAzMDU0NDMg MDAwMDAgbiAKMDAwMDMxODIwMSAwMDAwMCBuIAowMDAwMzE4Njc2IDAwMDAwIG4gCjAwMDAzMTg5 NDUgMDAwMDAgbiAKMDAwMDMzNjcyMSAwMDAwMCBuIAowMDAwMzM3MTc1IDAwMDAwIG4gCjAwMDAz Mzc0MjcgMDAwMDAgbiAKMDAwMDM1MzIxMSAwMDAwMCBuIAowMDAwMzUzNjI0IDAwMDAwIG4gCjAw MDAzNTM4NzYgMDAwMDAgbiAKMDAwMDM1NzA2NCAwMDAwMCBuIAowMDAwMzU3NTQyIDAwMDAwIG4g CjAwMDAzNTc3ODkgMDAwMDAgbiAKMDAwMDM2NzEyMiAwMDAwMCBuIAowMDAwMzY3ODQyIDAwMDAw IG4gCjAwMDAzNjgxMDQgMDAwMDAgbiAKMDAwMDM5NTY4NSAwMDAwMCBuIAowMDAwMzk2MDI3IDAw MDAwIG4gCjAwMDAzOTYyNjMgMDAwMDAgbiAKMDAwMDQwMDM5OCAwMDAwMCBuIAowMDAwNDAwODEw IDAwMDAwIG4gCjAwMDA0MDEwNjIgMDAwMDAgbiAKMDAwMDQwNDA2OCAwMDAwMCBuIAowMDAwNDA0 MDkwIDAwMDAwIG4gCjAwMDA0MDQxMzMgMDAwMDAgbiAKMDAwMDQwNDE4NyAwMDAwMCBuIAowMDAw NDA0MjA3IDAwMDAwIG4gCjAwMDA0MDQyMjcgMDAwMDAgbiAKMDAwMDQwNDI1MSAwMDAwMCBuIAow MDAwNDA0Mjk0IDAwMDAwIG4gCjAwMDA0MDQzMTQgMDAwMDAgbiAKdHJhaWxlcgo8PCAvU2l6ZSAy NDQgL1Jvb3QgMTU2IDAgUiAvSW5mbyAxIDAgUiAvSUQgWyA8NTVhMDUxNmQ1NTg0ZWQ2N2RkNDIw M2Y3OGQ2YjlkMGU+Cjw1NWEwNTE2ZDU1ODRlZDY3ZGQ0MjAzZjc4ZDZiOWQwZT4gXSA+PgpzdGFy dHhyZWYKNDA0NTIyCiUlRU9GCg== --Apple-Mail=_D28A3EC5-0777-4E85-A9DA-442ECFDE22F9-- From nobody Wed Apr 8 07:40:27 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 98B3B1B3161 for ; Wed, 8 Apr 2015 07:40:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.61 X-Spam-Level: X-Spam-Status: No, score=-3.61 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_46=0.6, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qjk9zzPsM_9j for ; Wed, 8 Apr 2015 07:40:25 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B5DA71B3159 for ; Wed, 8 Apr 2015 07:40:22 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 88709BEE7; Wed, 8 Apr 2015 15:40:21 +0100 (IST) Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u1PuO5eGznK9; Wed, 8 Apr 2015 15:40:21 +0100 (IST) Received: from [134.226.36.180] (stephen-think.dsg.cs.tcd.ie [134.226.36.180]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 6486DBE8A; Wed, 8 Apr 2015 15:40:21 +0100 (IST) Message-ID: <55253DD5.6030003@cs.tcd.ie> Date: Wed, 08 Apr 2015 15:40:21 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: Paul Hoffman , cose References: <7D7F3630-A6D9-4140-B81D-13A5235FC12D@vpnc.org> In-Reply-To: <7D7F3630-A6D9-4140-B81D-13A5235FC12D@vpnc.org> OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [Cose] CBOR+crypto already deployed X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Apr 2015 14:40:26 -0000 On 08/04/15 15:33, Paul Hoffman wrote: > Greetings again. As part of the "is this work needed" discussion, we > were asked for current systems that could use something like COSE. > Attached please see an already-deployed system that had to roll their > own subset of what we intend to do in COSE. I don't have any more > technical details than what's in this this document, but I have been > told that there are multiple implementers. Thanks! That's exactly the kind of thing makes me much happier about this work. S. > > --Paul Hoffman > > > > _______________________________________________ Cose mailing list > Cose@ietf.org https://www.ietf.org/mailman/listinfo/cose > From nobody Wed Apr 8 08:00:10 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4CAD11B31EF for ; Wed, 8 Apr 2015 08:00:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.4 X-Spam-Level: X-Spam-Status: No, score=-1.4 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, J_CHICKENPOX_46=0.6, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 88etPvVizz0d for ; Wed, 8 Apr 2015 08:00:08 -0700 (PDT) Received: from mail-qg0-x231.google.com (mail-qg0-x231.google.com [IPv6:2607:f8b0:400d:c04::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DD1E61B31E7 for ; Wed, 8 Apr 2015 08:00:07 -0700 (PDT) Received: by qgeb100 with SMTP id b100so30112995qge.3 for ; Wed, 08 Apr 2015 08:00:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:mime-version:subject:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=fY0ERQvuaOwhmj9VH16nBdW3rDUylSAnTK9sQApUtJA=; b=pAgSq52A/QA6MU9l9VldkvMvnziOK8PGTaRLJ+9M1tkGF9OgQQzbuj6b2xwbEQyC8U jjgpsUq24f9BjXPvDvfKCL3C89yzJ95U5G0strXajzgqNzXNXKjicoNLEgqjFPeLVkJl MjqPUwYpV4UizY/7o4WnWOLUhMU8vbJvffhDk50amTeVKcNsFz6oE/jv7gS+HTB4Uylm I8hQUgbDaCkitrVmtQIgTQoce5vecSiopinKGeTOKl34pby/9iNBysmT4wbbQqjDhZd0 5RVC+iQtx4p/d0v+kMfrVA/RjXWxKua4HrLtINrytlS6ozuP5XlVtFQXTJt3QrNqnSzl yq4A== X-Received: by 10.140.91.201 with SMTP id z67mr29974763qgd.27.1428505207260; Wed, 08 Apr 2015 08:00:07 -0700 (PDT) Received: from [172.20.28.228] ([66.228.68.140]) by mx.google.com with ESMTPSA id n72sm450881qha.19.2015.04.08.08.00.05 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 08 Apr 2015 08:00:06 -0700 (PDT) From: Kathleen Moriarty X-Google-Original-From: Kathleen Moriarty Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (1.0) X-Mailer: iPhone Mail (11D257) In-Reply-To: <55253DD5.6030003@cs.tcd.ie> Date: Wed, 8 Apr 2015 11:00:05 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <4AEE556C-3F46-4AB9-931C-F2CD2444A3F5@gmail.com> References: <7D7F3630-A6D9-4140-B81D-13A5235FC12D@vpnc.org> <55253DD5.6030003@cs.tcd.ie> To: Stephen Farrell Archived-At: Cc: Paul Hoffman , cose Subject: Re: [Cose] CBOR+crypto already deployed X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Apr 2015 15:00:09 -0000 Sent from my iPhone > On Apr 8, 2015, at 10:40 AM, Stephen Farrell w= rote: >=20 >=20 >=20 >> On 08/04/15 15:33, Paul Hoffman wrote: >> Greetings again. As part of the "is this work needed" discussion, we >> were asked for current systems that could use something like COSE. >> Attached please see an already-deployed system that had to roll their >> own subset of what we intend to do in COSE. I don't have any more >> technical details than what's in this this document, but I have been >> told that there are multiple implementers. >=20 > Thanks! That's exactly the kind of thing makes me much happier > about this work. Thanks, Paul. This is really helpful. Kathleen=20 >=20 > S. >=20 >>=20 >> --Paul Hoffman >>=20 >>=20 >>=20 >> _______________________________________________ Cose mailing list=20 >> Cose@ietf.org https://www.ietf.org/mailman/listinfo/cose >=20 > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Wed Apr 8 16:20:36 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 36CBD1AC3A6; Wed, 8 Apr 2015 16:20:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.801 X-Spam-Level: X-Spam-Status: No, score=0.801 tagged_above=-999 required=5 tests=[BAYES_50=0.8, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UNiet8aG2l18; Wed, 8 Apr 2015 16:20:33 -0700 (PDT) Received: from smtp3.pacifier.net (smtp3.pacifier.net [64.255.237.177]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6C5321AC3AF; Wed, 8 Apr 2015 16:20:29 -0700 (PDT) Received: from Philemon (173-8-216-38-Oregon.hfc.comcastbusiness.net [173.8.216.38]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp3.pacifier.net (Postfix) with ESMTPSA id A658538F4E; Wed, 8 Apr 2015 16:20:26 -0700 (PDT) From: "Jim Schaad" To: , Date: Wed, 8 Apr 2015 16:19:16 -0700 Message-ID: <001101d07252$70d02bc0$52708340$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0012_01D07217.C472B350" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdByUQUajaCt3cBsQ46N96pczIZS/Q== Content-Language: en-us Archived-At: Subject: [Cose] Use of supplied authenticated information with AEAD algorithms X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Apr 2015 23:20:35 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0012_01D07217.C472B350 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit In the process of going through the use cases that have arisen for dealing with the COSE world in ACE. I have come to a realization that we have perhaps messed up the paradigm for additional data when dealing with AEAD algorithms. I don't think this is an issue for the world which JOSE came out of, but it may be an issue going in the future and is definitely an issue for the world of CoAP. In JOSE we make the assumption that all of the additional authenticated data is transmitted as part of the JOSE message. This makes sense because we did not have a large number of cases where it would not be. However, if one looks at the CoAP/ACE world this is not always true. In their case they are going to want to potentially have both authenticated data carried as part of the message, but also have authenticated data which is carried in the envelope. Case of sending a JWT, this would be the equivalent of needing to send the name of the originator in the headers and still wanting to have it validated as part of the token. (As opposed to just sending it in the body of the JWT.) I don't know of any cases currently where this is a problem for JOSE. I do know that it is a potential problem for COSE. Can any body think of a use case for JOSE where this paradigm needs to be fixed? Jim ------=_NextPart_000_0012_01D07217.C472B350 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

In the = process of going through the use cases that have arisen for dealing with = the COSE world in ACE.  I have come to a realization that we have = perhaps messed up the paradigm for additional data when dealing with = AEAD algorithms.  I don’t think this is an issue for the = world which JOSE came out of, but it may be an issue going in the future = and is definitely an issue for the world of CoAP.

 

In JOSE we = make the assumption that all of the additional authenticated data is = transmitted as part of the JOSE message.  This makes sense because = we did not have a large number of cases where it would not be.  = However, if one looks at the CoAP/ACE world this is not always = true.  In their case they are going to want to potentially have = both authenticated data carried as part of the message, but also have = authenticated data which is carried in the envelope.  =

 

Case of sending a JWT, this would be the equivalent of = needing to send the name of the originator in the headers and still = wanting to have it validated as part of the token.  (As opposed to = just sending it in the body of the JWT.)

 

I = don’t know of any cases currently where this is a problem for = JOSE.  I do know that it is a potential problem for = COSE.

 

Can any body think of a use case for JOSE where this = paradigm needs to be fixed?

 

Jim

 

------=_NextPart_000_0012_01D07217.C472B350-- From nobody Wed Apr 8 16:33:21 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A8D61ACD42 for ; Wed, 8 Apr 2015 16:33:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.7 X-Spam-Level: X-Spam-Status: No, score=-0.7 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nwi1n_wwXBCh for ; Wed, 8 Apr 2015 16:33:19 -0700 (PDT) Received: from smtp2.pacifier.net (smtp2.pacifier.net [64.255.237.172]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E7E0D1ACD41 for ; Wed, 8 Apr 2015 16:33:18 -0700 (PDT) Received: from Philemon (173-8-216-38-Oregon.hfc.comcastbusiness.net [173.8.216.38]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp2.pacifier.net (Postfix) with ESMTPSA id 683A22CA15 for ; Wed, 8 Apr 2015 16:33:18 -0700 (PDT) From: "Jim Schaad" To: Date: Wed, 8 Apr 2015 16:32:08 -0700 Message-ID: <002201d07254$3ba98890$b2fc99b0$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0023_01D07219.8F4BC200" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdByVBWk7r5z5MFHSOGpM8wyZtF1YQ== Content-Language: en-us Archived-At: Subject: [Cose] Charter Pull Request #2 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Apr 2015 23:33:20 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0023_01D07219.8F4BC200 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit I have created a pull request to deal with the issues that I raised over the weekend. As part of the text changes I am suggested are some that are aimed at what I believe are the issues that both Joe and Stephen have raised about scope. Please look over them and comment. Jim ------=_NextPart_000_0023_01D07219.8F4BC200 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

I have = created a pull request to deal with the issues that I raised over the = weekend.  As part of the text changes I am suggested are some that = are aimed at what I believe are the issues that both Joe and Stephen = have raised about scope.

 

Please look = over them and comment.

 

Jim

 

------=_NextPart_000_0023_01D07219.8F4BC200-- From nobody Wed Apr 8 16:44:56 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B0A431B35B0 for ; Wed, 8 Apr 2015 16:44:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.053 X-Spam-Level: X-Spam-Status: No, score=0.053 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, HELO_MISMATCH_COM=0.553] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ihvaLGDeCdzS for ; Wed, 8 Apr 2015 16:44:55 -0700 (PDT) Received: from proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E57681B347D for ; Wed, 8 Apr 2015 16:44:54 -0700 (PDT) Received: from [192.168.1.5] (pool-74-105-116-19.nwrknj.fios.verizon.net [74.105.116.19]) (authenticated bits=0) by proper.com (8.15.1/8.14.9) with ESMTPSA id t38NhZ1M003655 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 8 Apr 2015 16:43:36 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) X-Authentication-Warning: proper.com: Host pool-74-105-116-19.nwrknj.fios.verizon.net [74.105.116.19] claimed to be [192.168.1.5] Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) From: Paul Hoffman In-Reply-To: <002201d07254$3ba98890$b2fc99b0$@augustcellars.com> Date: Wed, 8 Apr 2015 19:43:35 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: References: <002201d07254$3ba98890$b2fc99b0$@augustcellars.com> To: Jim Schaad X-Mailer: Apple Mail (2.2070.6) Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Charter Pull Request #2 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Apr 2015 23:44:55 -0000 It's kind of unfair to expect people to know where the draft charter is, = or even what a "pull request" is. For those not in the know, the draft = charter is at: https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md and Jim's proposed changes are are: https://github.com/cose-spec/wg-charter/pull/2= From nobody Wed Apr 8 18:31:07 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 042591ACDAD for ; Wed, 8 Apr 2015 18:31:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 2.35 X-Spam-Level: ** X-Spam-Status: No, score=2.35 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_CHARSET_FARAWAY=2.45, MIME_QP_LONG_LINE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u2usJ-6Pfst4 for ; Wed, 8 Apr 2015 18:31:04 -0700 (PDT) Received: from out4133-98.mail.aliyun.com (out4133-98.mail.aliyun.com [42.120.133.98]) by ietfa.amsl.com (Postfix) with ESMTP id 33D121ACDAB for ; Wed, 8 Apr 2015 18:31:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alibaba-inc.com; s=default; t=1428543063; h=Date:Subject:From:To:Message-ID:Mime-version:Content-type; bh=XYZV2IezJB78U/Df095cmmX+2yIO0ZQ0hFQNnSY6EQQ=; b=O++ew8gecUoJrmOzur9t/WTZmVrGR6qTyg4wpba09VvwGuwmNlKJzkO6ZlWHP1AqWb8NqChGZVA8uyJfHqM2Ux0q0nNbWD/mckH4RUkWgAvLTJQ2oUIXFVljBZpfmGfXssRmTjBjaVsRCKTYc+Z/biEB4MLZcHeFHpGL7vYyw3o= X-Alimail-AntiSpam: AC=PASS; BC=-1|-1; BR=01201311R181e4; FP=0|-1|-1|-1|0|-1|-1|-1; HT=r41f05041; MF=kepeng.lkp@alibaba-inc.com; PH=DS; RN=3; RT=3; SR=0; Received: from 10.1.151.84(mailfrom:kepeng.lkp@alibaba-inc.com ip:42.120.74.161) by smtp.aliyun-inc.com(127.0.0.1); Thu, 09 Apr 2015 09:31:01 +0800 User-Agent: Microsoft-MacOutlook/14.4.8.150116 Date: Thu, 09 Apr 2015 09:30:55 +0800 From: "Kepeng Li" To: Paul Hoffman , Jim Schaad Message-ID: Thread-Topic: [Cose] Charter Pull Request #2 References: <002201d07254$3ba98890$b2fc99b0$@augustcellars.com> In-Reply-To: Mime-version: 1.0 Content-type: text/plain; charset="GB2312" Content-transfer-encoding: quoted-printable Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Charter Pull Request #2 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2015 01:31:06 -0000 I copy the proposed texts here: --------------------------------------------------------------------------- ------------------------- Criteria that should be considered on making decisions in changing from a JOSE to a CBOR encoding are: - Keeping the current JOSE paradigms and formatting where feasible. - Minimizing message size and code size should be considered (for the constrained environments where we expect to use this). - Improving security. - Providing new functionality that uses of JOSE did not require, but are required for the new use cases. Since contrained environments are one of the primary targets for this work, message size and code size are to be considered whenever decisions are made. Issues dealing with key management and binding of keys to identities are out of scope for the working group. The Working group will coordinate its progress with the ACE, DICE and CoAP working groups to ensure that we are fulfilling the needs of these constituencies. Other groups may be added to this list as the set of use cases is expanded. =A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1= =AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA For the last paragraph, I propose to change CoAP to CoRE. Thanks, Kind Regards Kepeng =D4=DA 9/4/15 7:43 am=A3=AC "Paul Hoffman" =D0=B4=C8=EB: >It's kind of unfair to expect people to know where the draft charter is, >or even what a "pull request" is. For those not in the know, the draft >charter is at: > https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md >and Jim's proposed changes are are: > https://github.com/cose-spec/wg-charter/pull/2 >_______________________________________________ >Cose mailing list >Cose@ietf.org >https://www.ietf.org/mailman/listinfo/cose From nobody Thu Apr 9 06:26:30 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB0171A1BF1 for ; Thu, 9 Apr 2015 06:26:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.347 X-Spam-Level: X-Spam-Status: No, score=-1.347 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_COM=0.553] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F2_LrgjoeTY6 for ; Thu, 9 Apr 2015 06:26:27 -0700 (PDT) Received: from proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 904261A1B1D for ; Thu, 9 Apr 2015 06:26:15 -0700 (PDT) Received: from [192.168.1.5] (pool-74-105-116-19.nwrknj.fios.verizon.net [74.105.116.19]) (authenticated bits=0) by proper.com (8.15.1/8.14.9) with ESMTPSA id t39DQDvL056423 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Thu, 9 Apr 2015 06:26:14 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) X-Authentication-Warning: proper.com: Host pool-74-105-116-19.nwrknj.fios.verizon.net [74.105.116.19] claimed to be [192.168.1.5] Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) From: Paul Hoffman In-Reply-To: Date: Thu, 9 Apr 2015 09:26:13 -0400 Content-Transfer-Encoding: 7bit Message-Id: References: <002201d07254$3ba98890$b2fc99b0$@augustcellars.com> To: cose X-Mailer: Apple Mail (2.2070.6) Archived-At: Subject: Re: [Cose] Charter Pull Request #2 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2015 13:26:28 -0000 > Criteria that should be considered on making decisions in changing from a > JOSE to a CBOR encoding are: > - Keeping the current JOSE paradigms and formatting where feasible. > - Minimizing message size and code size should be considered (for the > constrained environments where we expect to use this). > - Improving security. > - Providing new functionality that uses of JOSE did not require, but are > required for the new use cases. > > Since contrained environments are one of the primary targets for this > work, message size and code size are to be considered whenever decisions > are made. > > Issues dealing with key management and binding of keys to identities are > out of scope for the working group. > > The Working group will coordinate its progress with the ACE, DICE and CoAP > working groups to ensure that we are fulfilling the needs of these > constituencies. Other groups may be added to this list as the set of use > cases is expanded. This seems like a fine addition. --Paul Hoffman From nobody Thu Apr 9 07:00:37 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EF2241A1B2E for ; Thu, 9 Apr 2015 07:00:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.45 X-Spam-Level: X-Spam-Status: No, score=0.45 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, MIME_CHARSET_FARAWAY=2.45, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uo8lMiOqbr_k for ; Thu, 9 Apr 2015 07:00:31 -0700 (PDT) Received: from mail-ig0-x22f.google.com (mail-ig0-x22f.google.com [IPv6:2607:f8b0:4001:c05::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 715DD1A1B07 for ; Thu, 9 Apr 2015 07:00:31 -0700 (PDT) Received: by igbqf9 with SMTP id qf9so65164067igb.1 for ; Thu, 09 Apr 2015 07:00:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=18zf4jXqpkZL0jOhEA7Mag5b5YLRmEcFwZOErVo3UMQ=; b=Oh1ROz4q9l6bhuPFvLODN4MvXr1wZQ0eGONDTqqQFPp8WgQPGvZMPN0HeY+z1qEtsB KJ7gBvyAPmrZS0WrXpQrUBdy28IWCNtiucZe1AI7FtiIipi8PR/2u1Fk6oPvFyyv/Qxl 8JT0w5GpVJrJTwR7Exyh/CzxX8EfTFiFatAHKJPWguKq0DuR3mBlCjYoUSd7ItCGAIoh Tbtrm092CLRFCsYRJzjcNNqnfnUxJ444m7rmAm9rQcExkwxJx1oeT2Su4+0BMkMDCtkf ufTf1vQv2pf4d3Bxj8Wro1GqKpSqFaZdnMYsHq8mVE7LG2BnzEoLqgbBj6h0rbmjHKnk fUvQ== X-Received: by 10.50.137.2 with SMTP id qe2mr20413576igb.20.1428588028305; Thu, 09 Apr 2015 07:00:28 -0700 (PDT) Received: from [192.168.0.10] (CPE7cb21b2cb904-CM7cb21b2cb901.cpe.net.cable.rogers.com. [99.231.49.38]) by mx.google.com with ESMTPSA id h19sm8817329igq.10.2015.04.09.07.00.26 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 09 Apr 2015 07:00:26 -0700 (PDT) Message-ID: <552685F5.9030408@gmail.com> Date: Thu, 09 Apr 2015 10:00:21 -0400 From: Rene Struik User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: Kepeng Li , Paul Hoffman , Jim Schaad References: <002201d07254$3ba98890$b2fc99b0$@augustcellars.com> In-Reply-To: Content-Type: text/plain; charset=gbk; format=flowed Content-Transfer-Encoding: 8bit Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Charter Pull Request #2 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2015 14:00:34 -0000 Hi Kepeng: Some feedback (one remark, two small suggested text tweaks) below. Best regards, Rene On 4/8/2015 9:30 PM, Kepeng Li wrote: > I copy the proposed texts here: > > --------------------------------------------------------------------------- > ------------------------- > > Criteria that should be considered on making decisions in changing from a > JOSE to a CBOR encoding are: > - Keeping the current JOSE paradigms and formatting where feasible. > - Minimizing message size and code size should be considered (for the > constrained environments where we expect to use this). > - Improving security. RS>> Just a remark (not a proposed change) to illustrate the importance of this point: improper encodings have resulted in attacks in the past, see, e.g., N. Mavrogiannopoulos, F. Vercauteren, V. Velichkov, B. Preneel, A Cross-Protocol Attack on the TLS Protocol, ACM CCS 2012. < - Providing new functionality that uses of JOSE did not require, but are > required for the new use cases. > > Since contrained environments are one of the primary targets for this > work, message size and code size are to be considered whenever decisions > are made. RS>> I suggest to change this paragraph slightly, as follows: Since constrained environments are one of the primary targets for this work, message size, code size, and computational cost are to be considered whenever decisions are made. NOTE: sometimes, small representation differences may have larger computational impact, e.g, when dealing with security-related objects. < > Issues dealing with key management and binding of keys to identities are > out of scope for the working group RS>> I suggest to change this slightly, as follows: Issues dealing with key management and binding of keys to identities are presently out of scope and may only be considered after rechartering. < . > > The Working group will coordinate its progress with the ACE, DICE and CoAP > working groups to ensure that we are fulfilling the needs of these > constituencies. Other groups may be added to this list as the set of use > cases is expanded. RS>> I can imagine some other "constrained cluster" groups also having an interest in this work, such as 6TiSCH, 6lo, RoLL, etc. Perhaps, this is already captured under the last sentence, though. < > > > > > For the last paragraph, I propose to change CoAP to CoRE. > > Thanks, > > Kind Regards > Kepeng > > 9/4/15 7:43 am "Paul Hoffman" д: > >> It's kind of unfair to expect people to know where the draft charter is, >> or even what a "pull request" is. For those not in the know, the draft >> charter is at: >> https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md >> and Jim's proposed changes are are: >> https://github.com/cose-spec/wg-charter/pull/2 >> _______________________________________________ >> Cose mailing list >> Cose@ietf.org >> https://www.ietf.org/mailman/listinfo/cose > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose -- email: rstruik.ext@gmail.com | Skype: rstruik cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 From nobody Thu Apr 9 08:39:26 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0CFE71B2D8E for ; Thu, 9 Apr 2015 08:39:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qk5P4MINQUNP for ; Thu, 9 Apr 2015 08:39:24 -0700 (PDT) Received: from smtp3.pacifier.net (smtp3.pacifier.net [64.255.237.177]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 825B01A9174 for ; Thu, 9 Apr 2015 08:39:24 -0700 (PDT) Received: from Philemon (winery.augustcellars.com [206.212.239.129]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp3.pacifier.net (Postfix) with ESMTPSA id 7ABA038F34; Thu, 9 Apr 2015 08:39:23 -0700 (PDT) From: "Jim Schaad" To: "'Kepeng Li'" , "'Paul Hoffman'" References: <002201d07254$3ba98890$b2fc99b0$@augustcellars.com> In-Reply-To: Date: Thu, 9 Apr 2015 08:38:14 -0700 Message-ID: <003301d072db$31e61170$95b23450$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-2022-jp" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Content-Language: en-us Thread-Index: AQGOuPA2XPfZI2xrEEOtPjxO+2tB0wGAL+utAUvAfeudseTuwA== Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Charter Pull Request #2 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2015 15:39:26 -0000 > -----Original Message----- > From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kepeng Li > Sent: Wednesday, April 08, 2015 6:31 PM > To: Paul Hoffman; Jim Schaad > Cc: cose@ietf.org > Subject: Re: [Cose] Charter Pull Request #2 > > I copy the proposed texts here: > > --------------------------------------------------------------------------- > ------------------------- > > Criteria that should be considered on making decisions in changing from a > JOSE to a CBOR encoding are: > - Keeping the current JOSE paradigms and formatting where feasible. > - Minimizing message size and code size should be considered (for the > constrained environments where we expect to use this). > - Improving security. > - Providing new functionality that uses of JOSE did not require, but are > required for the new use cases. > > Since contrained environments are one of the primary targets for this work, > message size and code size are to be considered whenever decisions are > made. > > Issues dealing with key management and binding of keys to identities are out > of scope for the working group. > > The Working group will coordinate its progress with the ACE, DICE and CoAP > working groups to ensure that we are fulfilling the needs of these > constituencies. Other groups may be added to this list as the set of use cases > is expanded. > > > ----------------------------------- > --------------- > > > For the last paragraph, I propose to change CoAP to CoRE. Yes - on the way to being done. Jim > > Thanks, > > Kind Regards > Kepeng > > $B:_(B 9/4/15 7:43 am$B!$(B "Paul Hoffman" $B > >It's kind of unfair to expect people to know where the draft charter > >is, or even what a "pull request" is. For those not in the know, the > >draft charter is at: > > https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md > >and Jim's proposed changes are are: > > https://github.com/cose-spec/wg-charter/pull/2 > >_______________________________________________ > >Cose mailing list > >Cose@ietf.org > >https://www.ietf.org/mailman/listinfo/cose > > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Thu Apr 9 08:39:42 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E88981B2D9E for ; Thu, 9 Apr 2015 08:39:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 21siBtrkJJEB for ; Thu, 9 Apr 2015 08:39:39 -0700 (PDT) Received: from smtp4.pacifier.net (smtp4.pacifier.net [64.255.237.176]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0766D1B2D9A for ; Thu, 9 Apr 2015 08:39:39 -0700 (PDT) Received: from Philemon (winery.augustcellars.com [206.212.239.129]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp4.pacifier.net (Postfix) with ESMTPSA id 1C4B338F1E; Thu, 9 Apr 2015 08:39:36 -0700 (PDT) From: "Jim Schaad" To: "'Rene Struik'" , "'Kepeng Li'" , "'Paul Hoffman'" References: <002201d07254$3ba98890$b2fc99b0$@augustcellars.com> <552685F5.9030408@gmail.com> In-Reply-To: <552685F5.9030408@gmail.com> Date: Thu, 9 Apr 2015 08:38:27 -0700 Message-ID: <003401d072db$3abea000$b03be000$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-2022-jp" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Content-Language: en-us Thread-Index: AQGOuPA2XPfZI2xrEEOtPjxO+2tB0wGAL+utAUvAfesCVVWjHZ2fOOxg Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Charter Pull Request #2 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2015 15:39:41 -0000 > -----Original Message----- > From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Rene Struik > Sent: Thursday, April 09, 2015 7:00 AM > To: Kepeng Li; Paul Hoffman; Jim Schaad > Cc: cose@ietf.org > Subject: Re: [Cose] Charter Pull Request #2 > > Hi Kepeng: > > Some feedback (one remark, two small suggested text tweaks) below. > > Best regards, Rene > > On 4/8/2015 9:30 PM, Kepeng Li wrote: > > I copy the proposed texts here: > > > > ---------------------------------------------------------------------- > > ----- > > ------------------------- > > > > Criteria that should be considered on making decisions in changing > > from a JOSE to a CBOR encoding are: > > - Keeping the current JOSE paradigms and formatting where feasible. > > - Minimizing message size and code size should be considered (for the > > constrained environments where we expect to use this). > > - Improving security. > RS>> Just a remark (not a proposed change) to illustrate the importance > RS>> of > this point: improper encodings have resulted in attacks in the past, see, e.g., > N. Mavrogiannopoulos, F. Vercauteren, V. Velichkov, B. Preneel, A Cross- > Protocol Attack on the TLS Protocol, ACM CCS 2012. > < > - Providing new functionality that uses of JOSE did not require, but > > are required for the new use cases. > > > > Since contrained environments are one of the primary targets for this > > work, message size and code size are to be considered whenever > > decisions are made. > RS>> I suggest to change this paragraph slightly, as follows: > Since constrained environments are one of the primary targets for this work, > message size, code size, and computational cost are to be considered > whenever decisions are made. > NOTE: sometimes, small representation differences may have larger > computational impact, e.g, when dealing with security-related objects. This is something that people would not understand without an example. (I know that I am not sure what is intended here.) If we have to have an example then I am not sure that it makes sense. I would however appreciate an example of what you mean because that might suggest wording changes. > < > > > Issues dealing with key management and binding of keys to identities > > are out of scope for the working group > RS>> I suggest to change this slightly, as follows: > Issues dealing with key management and binding of keys to identities are > presently out of scope and may only be considered after rechartering. Your wording change suggests that we might consider this later. I have no intention of considering this. I think this is work for the ACE and CORE groups to deal with not for this group. As such I don't believe the change helps. > < > . > > > > The Working group will coordinate its progress with the ACE, DICE and > > CoAP working groups to ensure that we are fulfilling the needs of > > these constituencies. Other groups may be added to this list as the > > set of use cases is expanded. > RS>> I can imagine some other "constrained cluster" groups also having > an interest in this work, such > as 6TiSCH, 6lo, RoLL, etc. Perhaps, this is already captured under the last > sentence, though. If we have other groups which we really think are going to need or use this work, it makes sense to identify them sooner than later. If we have them identified then adding them now makes sense. Jim > < > > > > > ---------------------------------- > ---------------- > > > > > > For the last paragraph, I propose to change CoAP to CoRE. > > > > Thanks, > > > > Kind Regards > > Kepeng > > > > $B:_(B 9/4/15 7:43 am$B!$(B "Paul Hoffman" $B > > >> It's kind of unfair to expect people to know where the draft charter > >> is, or even what a "pull request" is. For those not in the know, the > >> draft charter is at: > >> > >> https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md > >> and Jim's proposed changes are are: > >> https://github.com/cose-spec/wg-charter/pull/2 > >> _______________________________________________ > >> Cose mailing list > >> Cose@ietf.org > >> https://www.ietf.org/mailman/listinfo/cose > > > > _______________________________________________ > > Cose mailing list > > Cose@ietf.org > > https://www.ietf.org/mailman/listinfo/cose > > > -- > email: rstruik.ext@gmail.com | Skype: rstruik > cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Thu Apr 9 09:25:08 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B88471B2E8A for ; Thu, 9 Apr 2015 09:25:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.451 X-Spam-Level: X-Spam-Status: No, score=0.451 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_CHARSET_FARAWAY=2.45, MIME_QP_LONG_LINE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KF2TMrIEuikI for ; Thu, 9 Apr 2015 09:25:04 -0700 (PDT) Received: from out4133-66.mail.aliyun.com (out4133-66.mail.aliyun.com [42.120.133.66]) by ietfa.amsl.com (Postfix) with ESMTP id 2C1571B2E8F for ; Thu, 9 Apr 2015 09:25:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alibaba-inc.com; s=default; t=1428596703; h=Date:Subject:From:To:Message-ID:Mime-version:Content-type; bh=5pA950hXkfJnkuhdLLA4okkvSIDWWcgAk5XGeUKf2tg=; b=R3sqZrbctJqkW05SX8bHS4U/LdMWPJgjDe8iahSdOy12J6TIqF7tFODUDuz/4b94xsZPn/qVzPmh2W+ByaoxITLq8zjibdjJluwXT/Am116kfw9xO03GYJFKS6g+vXFREqmZ48c4Yf2jK4nZcOqKi5nRax2RM4jrD4wc52Tqkwo= X-Alimail-AntiSpam: AC=PASS; BC=-1|-1; BR=01201311R771e4; FP=0|-1|-1|-1|0|-1|-1|-1; HT=r41g03021; MF=kepeng.lkp@alibaba-inc.com; PH=DS; RN=4; RT=4; SR=0; Received: from 10.22.50.72(mailfrom:kepeng.lkp@alibaba-inc.com ip:42.120.73.208) by smtp.aliyun-inc.com(127.0.0.1); Fri, 10 Apr 2015 00:25:00 +0800 User-Agent: Microsoft-MacOutlook/14.4.8.150116 Date: Fri, 10 Apr 2015 00:24:55 +0800 From: "Kepeng Li" To: Jim Schaad , 'Rene Struik' , 'Paul Hoffman' Message-ID: Thread-Topic: [Cose] Charter Pull Request #2 References: <002201d07254$3ba98890$b2fc99b0$@augustcellars.com> <552685F5.9030408@gmail.com> <003401d072db$3abea000$b03be000$@augustcellars.com> In-Reply-To: <003401d072db$3abea000$b03be000$@augustcellars.com> Mime-version: 1.0 Content-type: text/plain; charset="GB2312" Content-transfer-encoding: quoted-printable Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Charter Pull Request #2 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2015 16:25:06 -0000 >>RS>> I suggest to change this paragraph slightly, as follows: >>Since constrained environments are one of the primary targets for this >>work, >>message size, code size, and computational cost are to be considered >>whenever decisions are made. >>NOTE: sometimes, small representation differences may have larger >>computational impact, e.g, when dealing with security-related objects. >This is something that people would not understand without an example. (I >know that I am not sure what is intended here.) If we have to have an >example then I am not sure that it makes sense. >I would however appreciate an example of what you mean because that might >suggest wording changes. I assume that computational cost means CPU processing cost, memory cost, etc. Maybe Rene can further clarify. Kind Regards Kepeng =D4=DA 9/4/15 11:38 pm=A3=AC "Jim Schaad" =D0=B4=C8=EB: > > >> -----Original Message----- >> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Rene Struik >> Sent: Thursday, April 09, 2015 7:00 AM >> To: Kepeng Li; Paul Hoffman; Jim Schaad >> Cc: cose@ietf.org >> Subject: Re: [Cose] Charter Pull Request #2 >> >> Hi Kepeng: >> >> Some feedback (one remark, two small suggested text tweaks) below. >> >> Best regards, Rene >> >> On 4/8/2015 9:30 PM, Kepeng Li wrote: >> > I copy the proposed texts here: >> > >> > ---------------------------------------------------------------------- >> > ----- >> > ------------------------- >> > >> > Criteria that should be considered on making decisions in changing >> > from a JOSE to a CBOR encoding are: >> > - Keeping the current JOSE paradigms and formatting where feasible. >> > - Minimizing message size and code size should be considered (for the >> > constrained environments where we expect to use this). >> > - Improving security. >> RS>> Just a remark (not a proposed change) to illustrate the importance >> RS>> of >> this point: improper encodings have resulted in attacks in the past, >>see, >e.g., >> N. Mavrogiannopoulos, F. Vercauteren, V. Velichkov, B. Preneel, A Cross- >> Protocol Attack on the TLS Protocol, ACM CCS 2012. >> <> > - Providing new functionality that uses of JOSE did not require, but >> > are required for the new use cases. >> > >> > Since contrained environments are one of the primary targets for this >> > work, message size and code size are to be considered whenever >> > decisions are made. >> RS>> I suggest to change this paragraph slightly, as follows: >> Since constrained environments are one of the primary targets for this >work, >> message size, code size, and computational cost are to be considered >> whenever decisions are made. >> NOTE: sometimes, small representation differences may have larger >> computational impact, e.g, when dealing with security-related objects. > >This is something that people would not understand without an example. (I >know that I am not sure what is intended here.) If we have to have an >example then I am not sure that it makes sense. > >I would however appreciate an example of what you mean because that might >suggest wording changes. > >> <> > >> > Issues dealing with key management and binding of keys to identities >> > are out of scope for the working group >> RS>> I suggest to change this slightly, as follows: >> Issues dealing with key management and binding of keys to identities are >> presently out of scope and may only be considered after rechartering. > >Your wording change suggests that we might consider this later. I have no >intention of considering this. I think this is work for the ACE and CORE >groups to deal with not for this group. As such I don't believe the >change >helps. > >> <> > . >> > >> > The Working group will coordinate its progress with the ACE, DICE and >> > CoAP working groups to ensure that we are fulfilling the needs of >> > these constituencies. Other groups may be added to this list as the >> > set of use cases is expanded. >> RS>> I can imagine some other "constrained cluster" groups also having >> an interest in this work, such >> as 6TiSCH, 6lo, RoLL, etc. Perhaps, this is already captured under the >last >> sentence, though. > >If we have other groups which we really think are going to need or use >this >work, it makes sense to identify them sooner than later. If we have them >identified then adding them now makes sense. > >Jim > > >> <> > >> > >> > ---------------------------------- >> ---------------- >> > >> > >> > For the last paragraph, I propose to change CoAP to CoRE. >> > >> > Thanks, >> > >> > Kind Regards >> > Kepeng >> > >> > =D4=DA 9/4/15 7:43 am=A3=AC "Paul Hoffman" =D0=B4=C8=EB: >> > >> >> It's kind of unfair to expect people to know where the draft charter >> >> is, or even what a "pull request" is. For those not in the know, the >> >> draft charter is at: >> >> >> >> https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md >> >> and Jim's proposed changes are are: >> >> https://github.com/cose-spec/wg-charter/pull/2 >> >> _______________________________________________ >> >> Cose mailing list >> >> Cose@ietf.org >> >> https://www.ietf.org/mailman/listinfo/cose >> > >> > _______________________________________________ >> > Cose mailing list >> > Cose@ietf.org >> > https://www.ietf.org/mailman/listinfo/cose >> >> >> -- >> email: rstruik.ext@gmail.com | Skype: rstruik >> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >> >> _______________________________________________ >> Cose mailing list >> Cose@ietf.org >> https://www.ietf.org/mailman/listinfo/cose > >_______________________________________________ >Cose mailing list >Cose@ietf.org >https://www.ietf.org/mailman/listinfo/cose From nobody Thu Apr 9 09:32:45 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DE2BB1A8A05 for ; Thu, 9 Apr 2015 09:32:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H7LjQBx9AOYx for ; Thu, 9 Apr 2015 09:32:41 -0700 (PDT) Received: from mail-ie0-x22b.google.com (mail-ie0-x22b.google.com [IPv6:2607:f8b0:4001:c03::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 256D21B2D90 for ; Thu, 9 Apr 2015 09:32:40 -0700 (PDT) Received: by iejt8 with SMTP id t8so33371947iej.2 for ; Thu, 09 Apr 2015 09:32:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=F88jhEx+q++cecI1XxkGeZpkVdhVKON2A6RVfTKOcdU=; b=jOxCq6P3anlJO4Lbak+uwv2eR+dhA5J7E1ITPlQ6BvYUy3rykPaH1C8MWNadj5LyH/ MMraREC17JJhQeBCxTtfPPhrxNdjAZ29fV8yiJMMq0rsVihf7E1Cs/HALpFYK8LiXgNJ HCH+93vz6JaQsGdbVgX9ERix9U96seJPBVfTMvewm0GA+XlDGnK8R4Zvauvm7VFVbRlZ Iq57rsOzQL6ICNX9qulI+wUWqN4+7zsJoZ8wMKrFduxOQ6Qam0iOM18CBpfLX8duqIUE krhAjiR+KoYieNfgYhJQAqMYrJJVbaTq4W/iuIiayNcJ2WSskOsp8GqQxO1aF1Jcf1gE zzTw== X-Received: by 10.50.79.233 with SMTP id m9mr21734160igx.45.1428597159600; Thu, 09 Apr 2015 09:32:39 -0700 (PDT) Received: from [192.168.0.10] (CPE7cb21b2cb904-CM7cb21b2cb901.cpe.net.cable.rogers.com. [99.231.49.38]) by mx.google.com with ESMTPSA id lp7sm7413420igb.20.2015.04.09.09.32.38 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 09 Apr 2015 09:32:38 -0700 (PDT) Message-ID: <5526A9A1.3060006@gmail.com> Date: Thu, 09 Apr 2015 12:32:33 -0400 From: Rene Struik User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: Jim Schaad , 'Kepeng Li' , 'Paul Hoffman' References: <002201d07254$3ba98890$b2fc99b0$@augustcellars.com> <552685F5.9030408@gmail.com> <003401d072db$3abea000$b03be000$@augustcellars.com> In-Reply-To: <003401d072db$3abea000$b03be000$@augustcellars.com> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Charter Pull Request #2 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2015 16:32:44 -0000 Hi Jim: Please see below (RS2>> < >> -----Original Message----- >> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Rene Struik >> Sent: Thursday, April 09, 2015 7:00 AM >> To: Kepeng Li; Paul Hoffman; Jim Schaad >> Cc: cose@ietf.org >> Subject: Re: [Cose] Charter Pull Request #2 >> >> Hi Kepeng: >> >> Some feedback (one remark, two small suggested text tweaks) below. >> >> Best regards, Rene >> >> On 4/8/2015 9:30 PM, Kepeng Li wrote: >>> I copy the proposed texts here: >>> >>> ---------------------------------------------------------------------- >>> ----- >>> ------------------------- >>> >>> Criteria that should be considered on making decisions in changing >>> from a JOSE to a CBOR encoding are: >>> - Keeping the current JOSE paradigms and formatting where feasible. >>> - Minimizing message size and code size should be considered (for the >>> constrained environments where we expect to use this). >>> - Improving security. >> RS>> Just a remark (not a proposed change) to illustrate the importance >> RS>> of >> this point: improper encodings have resulted in attacks in the past, see, > e.g., >> N. Mavrogiannopoulos, F. Vercauteren, V. Velichkov, B. Preneel, A Cross- >> Protocol Attack on the TLS Protocol, ACM CCS 2012. >> <>> - Providing new functionality that uses of JOSE did not require, but >>> are required for the new use cases. >>> >>> Since contrained environments are one of the primary targets for this >>> work, message size and code size are to be considered whenever >>> decisions are made. >> RS>> I suggest to change this paragraph slightly, as follows: >> Since constrained environments are one of the primary targets for this > work, >> message size, code size, and computational cost are to be considered >> whenever decisions are made. >> NOTE: sometimes, small representation differences may have larger >> computational impact, e.g, when dealing with security-related objects. > This is something that people would not understand without an example. (I > know that I am not sure what is intended here.) If we have to have an > example then I am not sure that it makes sense. > > I would however appreciate an example of what you mean because that might > suggest wording changes. RS2>> A simple example would be ECDSA signatures, where the signature (r,s) over a message is represented as (r, 1/s) so as to avoid any inversions modulo the elliptic curve group size for verifiers, which could be a useful trade-off in environments with lots of verifications relative to signatures, such as with Connected Vehicles (IEEE 1609.2/DoT, EU initiatives). NOTE: this example is not meant at all to trigger a debate on whether this particular representation convention should be pursued. It just illustrates that one should also consider trade-offs with computational cost. Hence, the suggested wording change. <> <>> Issues dealing with key management and binding of keys to identities >>> are out of scope for the working group >> RS>> I suggest to change this slightly, as follows: >> Issues dealing with key management and binding of keys to identities are >> presently out of scope and may only be considered after rechartering. > Your wording change suggests that we might consider this later. I have no > intention of considering this. I think this is work for the ACE and CORE > groups to deal with not for this group. As such I don't believe the change > helps. RS2>> Perhaps. It is hard for me to keep track of which group should do what. What I do know is that there are technical reasons to look at some of these topics. As an example, clever representation of bindings of keys and identities may be crucial for, e.g., the join protocol with 6TiSCH. It may be okay to tackle this elsewhere, but question is why and whether there would be sufficient critical mass to take on some of the micro-topics. To me, it seems that some representation topics benefit from a system level perspective, even if these are not on the top of the list, due to low-hanging fruit considerations. < >> <>> . >>> >>> The Working group will coordinate its progress with the ACE, DICE and >>> CoAP working groups to ensure that we are fulfilling the needs of >>> these constituencies. Other groups may be added to this list as the >>> set of use cases is expanded. >> RS>> I can imagine some other "constrained cluster" groups also having >> an interest in this work, such >> as 6TiSCH, 6lo, RoLL, etc. Perhaps, this is already captured under the > last >> sentence, though. > If we have other groups which we really think are going to need or use this > work, it makes sense to identify them sooner than later. If we have them > identified then adding them now makes sense. > > Jim > > >> <>> >>> ---------------------------------- >> ---------------- >>> >>> For the last paragraph, I propose to change CoAP to CoRE. >>> >>> Thanks, >>> >>> Kind Regards >>> Kepeng >>> >>> 在 9/4/15 7:43 am， "Paul Hoffman" 写入: >>> >>>> It's kind of unfair to expect people to know where the draft charter >>>> is, or even what a "pull request" is. For those not in the know, the >>>> draft charter is at: >>>> >>>> https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md >>>> and Jim's proposed changes are are: >>>> https://github.com/cose-spec/wg-charter/pull/2 >>>> _______________________________________________ >>>> Cose mailing list >>>> Cose@ietf.org >>>> https://www.ietf.org/mailman/listinfo/cose >>> _______________________________________________ >>> Cose mailing list >>> Cose@ietf.org >>> https://www.ietf.org/mailman/listinfo/cose >> >> -- >> email: rstruik.ext@gmail.com | Skype: rstruik >> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >> >> _______________________________________________ >> Cose mailing list >> Cose@ietf.org >> https://www.ietf.org/mailman/listinfo/cose -- email: rstruik.ext@gmail.com | Skype: rstruik cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 From nobody Thu Apr 9 12:20:00 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE1871A8F3C for ; Thu, 9 Apr 2015 12:19:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eRzglzM7YBOI for ; Thu, 9 Apr 2015 12:19:57 -0700 (PDT) Received: from smtp2.pacifier.net (smtp2.pacifier.net [64.255.237.172]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 00FCC1A8BB5 for ; Thu, 9 Apr 2015 12:19:57 -0700 (PDT) Received: from Philemon (173-8-216-38-Oregon.hfc.comcastbusiness.net [173.8.216.38]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp2.pacifier.net (Postfix) with ESMTPSA id 3EC482CA1F; Thu, 9 Apr 2015 12:19:56 -0700 (PDT) From: "Jim Schaad" To: "'Rene Struik'" References: <002201d07254$3ba98890$b2fc99b0$@augustcellars.com> <552685F5.9030408@gmail.com> <003401d072db$3abea000$b03be000$@augustcellars.com> <5526A9A1.3060006@gmail.com> In-Reply-To: <5526A9A1.3060006@gmail.com> Date: Thu, 9 Apr 2015 12:18:45 -0700 Message-ID: <006301d072fa$00d405f0$027c11d0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Content-Language: en-us Thread-Index: AQGOuPA2XPfZI2xrEEOtPjxO+2tB0wGAL+utAUvAfesCVVWjHQEqQB4fAfoHdw+dhlLG8A== Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Charter Pull Request #2 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Apr 2015 19:19:59 -0000 > -----Original Message----- > From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Rene Struik > Sent: Thursday, April 09, 2015 9:33 AM > To: Jim Schaad; 'Kepeng Li'; 'Paul Hoffman' > Cc: cose@ietf.org > Subject: Re: [Cose] Charter Pull Request #2 >=20 > Hi Jim: >=20 > Please see below (RS2>> <=20 > Rene >=20 > On 4/9/2015 11:38 AM, Jim Schaad wrote: > > > >> -----Original Message----- > >> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Rene Struik > >> Sent: Thursday, April 09, 2015 7:00 AM > >> To: Kepeng Li; Paul Hoffman; Jim Schaad > >> Cc: cose@ietf.org > >> Subject: Re: [Cose] Charter Pull Request #2 > >> > >> Hi Kepeng: > >> > >> Some feedback (one remark, two small suggested text tweaks) below. > >> > >> Best regards, Rene > >> > >> On 4/8/2015 9:30 PM, Kepeng Li wrote: > >>> I copy the proposed texts here: > >>> > >>> = -------------------------------------------------------------------- > >>> -- > >>> ----- > >>> ------------------------- > >>> > >>> Criteria that should be considered on making decisions in changing > >>> from a JOSE to a CBOR encoding are: > >>> - Keeping the current JOSE paradigms and formatting where = feasible. > >>> - Minimizing message size and code size should be considered (for > >>> the constrained environments where we expect to use this). > >>> - Improving security. > >> RS>> Just a remark (not a proposed change) to illustrate the > >> RS>> importance of > >> this point: improper encodings have resulted in attacks in the = past, > >> see, > > e.g., > >> N. Mavrogiannopoulos, F. Vercauteren, V. Velichkov, B. Preneel, A > >> Cross- Protocol Attack on the TLS Protocol, ACM CCS 2012. > >> < >>> - Providing new functionality that uses of JOSE did not require, = but > >>> are required for the new use cases. > >>> > >>> Since contrained environments are one of the primary targets for > >>> this work, message size and code size are to be considered = whenever > >>> decisions are made. > >> RS>> I suggest to change this paragraph slightly, as follows: > >> Since constrained environments are one of the primary targets for > >> this > > work, > >> message size, code size, and computational cost are to be = considered > >> whenever decisions are made. > >> NOTE: sometimes, small representation differences may have larger > >> computational impact, e.g, when dealing with security-related = objects. > > This is something that people would not understand without an = example. > > (I know that I am not sure what is intended here.) If we have to = have > > an example then I am not sure that it makes sense. > > > > I would however appreciate an example of what you mean because that > > might suggest wording changes. > RS2>> > A simple example would be ECDSA signatures, where the signature (r,s) = over a > message is represented as (r, 1/s) so as to avoid any inversions = modulo the > elliptic curve group size for verifiers, which could be a useful = trade-off in > environments with lots of verifications relative to signatures, such = as with > Connected Vehicles (IEEE 1609.2/DoT, EU initiatives). NOTE: this = example is > not meant at all to trigger a debate on whether this particular = representation > convention should be pursued. It just illustrates that one should also = consider > trade-offs with computational cost. Hence, the suggested wording = change. Great that is the type of thing I was looking for. I had not considered = the issues of algorithm and algorithm encoding because I tend to think = of that as being a separate step from the core message structure = encoding. I will think about this and see if I can offer a suggest = later today on how to word this. > < >> < >>> Issues dealing with key management and binding of keys to = identities > >>> are out of scope for the working group > >> RS>> I suggest to change this slightly, as follows: > >> Issues dealing with key management and binding of keys to = identities > >> are presently out of scope and may only be considered after = rechartering. > > Your wording change suggests that we might consider this later. I > > have no intention of considering this. I think this is work for the = ACE and > CORE > > groups to deal with not for this group. As such I don't believe = the change > > helps. > RS2>> Perhaps. It is hard for me to keep track of which group should = do > what. What I do know > is that there are technical reasons to look at some of these topics. = As an > example, clever representation of bindings of keys and identities may = be > crucial for, e.g., the join protocol with 6TiSCH. It may be okay to = tackle this > elsewhere, but question is why and whether there would be sufficient = critical > mass to take on some of the micro-topics. To me, it seems that some > representation topics benefit from a system level perspective, even if = these > are not on the top of the list, due to low-hanging fruit = considerations. Yes, there are a lot of problems in this space and there have been many = different attempts to solve them. Most of the solutions have had = problems of one type or another. Introduction - How do I know who you are the first time I see you. I = think, from the brief look at 6TiSCH that this is the main problem you = are looking at. There have been a lot of ways to go about this and none = of them are generically good. Certification - Given a trusted third party statement, how do you = represent the binding of the key and the identity information. This is = basically the approach of X.509 certificates and OpenPGP keys. There was yet another BOF at the last IETF on the first problem (ACME), = as the web is currently based on X.509 certificates it uses the them = for the latter problem. There are a lot of problems and a lot of solutions already in the world. = I would want to see something come to the fore as a single solution = before worrying about that in this group. Given that however, you might = want to look at the JWT work that was done in the OAUTH working group. = That could encoded in COSE and potentially give you some of what you = want. I know that CORE/ACE are currently looking at doing some of their work = with keys derived from DTLS sessions. This does not give end to end, = solutions, but can give point-to-point success. =20 > < > > >> < >>> . > >>> > >>> The Working group will coordinate its progress with the ACE, DICE > >>> and CoAP working groups to ensure that we are fulfilling the needs > >>> of these constituencies. Other groups may be added to this list as > >>> the set of use cases is expanded. > >> RS>> I can imagine some other "constrained cluster" groups also > >> RS>> having > >> an interest in this work, such > >> as 6TiSCH, 6lo, RoLL, etc. Perhaps, this is already captured under > >> the > > last > >> sentence, though. > > If we have other groups which we really think are going to need or = use > > this work, it makes sense to identify them sooner than later. If we > > have them identified then adding them now makes sense. > > > > Jim > > > > > >> < >>> > >>> ---------------------------------- > >> ---------------- > >>> > >>> For the last paragraph, I propose to change CoAP to CoRE. > >>> > >>> Thanks, > >>> > >>> Kind Regards > >>> Kepeng > >>> > >>> ? 9/4/15 7:43 am, "Paul Hoffman" ??: > >>> > >>>> It's kind of unfair to expect people to know where the draft > >>>> charter is, or even what a "pull request" is. For those not in = the > >>>> know, the draft charter is at: > >>>> > >>>> = https://github.com/cose-spec/wg-charter/blob/master/draft-charter.m > >>>> d and Jim's proposed changes are are: > >>>> https://github.com/cose-spec/wg-charter/pull/2 > >>>> _______________________________________________ > >>>> Cose mailing list > >>>> Cose@ietf.org > >>>> https://www.ietf.org/mailman/listinfo/cose > >>> _______________________________________________ > >>> Cose mailing list > >>> Cose@ietf.org > >>> https://www.ietf.org/mailman/listinfo/cose > >> > >> -- > >> email: rstruik.ext@gmail.com | Skype: rstruik > >> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 > >> > >> _______________________________________________ > >> Cose mailing list > >> Cose@ietf.org > >> https://www.ietf.org/mailman/listinfo/cose >=20 >=20 > -- > email: rstruik.ext@gmail.com | Skype: rstruik > cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >=20 > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Fri Apr 10 06:10:18 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 46BB81B350E for ; Fri, 10 Apr 2015 06:10:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bROxx_HDsyRV for ; Fri, 10 Apr 2015 06:10:14 -0700 (PDT) Received: from mail-qc0-x22e.google.com (mail-qc0-x22e.google.com [IPv6:2607:f8b0:400d:c01::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 52BAE1B3504 for ; Fri, 10 Apr 2015 06:10:14 -0700 (PDT) Received: by qcyk17 with SMTP id k17so492233qcy.1 for ; Fri, 10 Apr 2015 06:10:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:mime-version:subject:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=9wlcrduo0uaXEEs4gnv5Fk8e3fAnQxoZOlEsym157ss=; b=NH7y8hNVpulCZe0ghpm1XlJRMv3pfG4eyMv0rIAqBe6dl5xDpupNIzyH5qqpjfMxOY CUWczFmK2QM+C4e+Xl6zN6iX7FJNbQkpYai/LU2Ya2+nKcvh6BsULf2TlPuX+RpZrOxs ixb1Zaz/R8VUQOV7ec83pnEqmUPg9BAExQzyOnf5w88yNlJi1KRMmNqS93HtnMc/Z7Zv 5vpMDiBBj6w+B396ClzvdLMokHwvHN0J+WMbWe0zEJgJ1WrV49G7pAh+LtiP/csAM5Ah Wp13Uik52iEcn+mrH0L2DQjp0V/WkIkimsNE6K2mP75H3fNAwBYpzC/FIep/Ak62X8Uu rklg== X-Received: by 10.140.150.151 with SMTP id 145mr1624969qhw.100.1428671413576; Fri, 10 Apr 2015 06:10:13 -0700 (PDT) Received: from [192.168.1.3] (209-6-114-252.c3-0.arl-ubr1.sbo-arl.ma.cable.rcn.com. [209.6.114.252]) by mx.google.com with ESMTPSA id j94sm1542852qgd.47.2015.04.10.06.10.12 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Fri, 10 Apr 2015 06:10:12 -0700 (PDT) From: Kathleen Moriarty X-Google-Original-From: Kathleen Moriarty Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (1.0) X-Mailer: iPhone Mail (11D257) In-Reply-To: <006301d072fa$00d405f0$027c11d0$@augustcellars.com> Date: Fri, 10 Apr 2015 09:10:11 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <82EDFA60-BF3E-49B9-89AB-876EFAFABE2E@gmail.com> References: <002201d07254$3ba98890$b2fc99b0$@augustcellars.com> <552685F5.9030408@gmail.com> <003401d072db$3abea000$b03be000$@augustcellars.com> <5526A9A1.3060006@gmail.com> <006301d072fa$00d405f0$027c11d0$@augustcellars.com> To: Jim Schaad Archived-At: Cc: Rene Struik , "cose@ietf.org" Subject: Re: [Cose] Charter Pull Request #2 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Apr 2015 13:10:17 -0000 Hi, =20 I just have a question and a suggestion. Sent from my iPhone > On Apr 9, 2015, at 3:18 PM, "Jim Schaad" wrote: >=20 >=20 >=20 >> -----Original Message----- >> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Rene Struik >> Sent: Thursday, April 09, 2015 9:33 AM >> To: Jim Schaad; 'Kepeng Li'; 'Paul Hoffman' >> Cc: cose@ietf.org >> Subject: Re: [Cose] Charter Pull Request #2 >>=20 >> Hi Jim: >>=20 >> Please see below (RS2>> <>=20 >> Rene >>=20 >>> On 4/9/2015 11:38 AM, Jim Schaad wrote: >>>=20 >>>> -----Original Message----- >>>> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Rene Struik >>>> Sent: Thursday, April 09, 2015 7:00 AM >>>> To: Kepeng Li; Paul Hoffman; Jim Schaad >>>> Cc: cose@ietf.org >>>> Subject: Re: [Cose] Charter Pull Request #2 >>>>=20 >>>> Hi Kepeng: >>>>=20 >>>> Some feedback (one remark, two small suggested text tweaks) below. >>>>=20 >>>> Best regards, Rene >>>>=20 >>>>> On 4/8/2015 9:30 PM, Kepeng Li wrote: >>>>> I copy the proposed texts here: >>>>>=20 >>>>> -------------------------------------------------------------------- >>>>> -- >>>>> ----- >>>>> ------------------------- >>>>>=20 >>>>> Criteria that should be considered on making decisions in changing >>>>> from a JOSE to a CBOR Shouldn't this be JOSE to COSE or JSON to CBOR? Obviously language tweaks w= ould be needed for the latter, but would be good to list that out explicitly= for someone trying to figure what this is about. >>>>> encoding are: >>>>> - Keeping the current JOSE paradigms and formatting where feasible. >>>>> - Minimizing message size and code size should be considered (for >>>>> the constrained environments where we expect to use this). >>>>> - Improving security. >>>> RS>> Just a remark (not a proposed change) to illustrate the >>>> RS>> importance of >>>> this point: improper encodings have resulted in attacks in the past, >>>> see, >>> e.g., >>>> N. Mavrogiannopoulos, F. Vercauteren, V. Velichkov, B. Preneel, A >>>> Cross- Protocol Attack on the TLS Protocol, ACM CCS 2012. >>>> <>>>> - Providing new functionality that uses of JOSE did not require, but >>>>> are required for the new use cases. >>>>>=20 >>>>> Since contrained environments are one of the primary targets for >>>>> this work, message size and code size are to be considered whenever >>>>> decisions are made. >>>> RS>> I suggest to change this paragraph slightly, as follows: >>>> Since constrained environments are one of the primary targets for >>>> this >>> work, >>>> message size, code size, and computational cost are to be considered >>>> whenever decisions are made. >>>> NOTE: sometimes, small representation differences may have larger >>>> computational impact, e.g, when dealing with security-related objects. >>> This is something that people would not understand without an example. >>> (I know that I am not sure what is intended here.) If we have to have >>> an example then I am not sure that it makes sense. >>>=20 >>> I would however appreciate an example of what you mean because that >>> might suggest wording changes. >> RS2>> >> A simple example would be ECDSA signatures, where the signature (r,s) ove= r a >> message is represented as (r, 1/s) so as to avoid any inversions modulo t= he >> elliptic curve group size for verifiers, which could be a useful trade-of= f in >> environments with lots of verifications relative to signatures, such as w= ith >> Connected Vehicles (IEEE 1609.2/DoT, EU initiatives). NOTE: this example i= s >> not meant at all to trigger a debate on whether this particular represent= ation >> convention should be pursued. It just illustrates that one should also co= nsider >> trade-offs with computational cost. Hence, the suggested wording change. >=20 > Great that is the type of thing I was looking for. I had not considered t= he issues of algorithm and algorithm encoding because I tend to think of tha= t as being a separate step from the core message structure encoding. I will= think about this and see if I can offer a suggest later today on how to wor= d this. >=20 >> <>>> <>>>> Issues dealing with key management and binding of keys to identities >>>>> are out of scope for the working group >>>> RS>> I suggest to change this slightly, as follows: >>>> Issues dealing with key management and binding of keys to identities >>>> are presently out of scope and may only be considered after recharterin= g. >>> Your wording change suggests that we might consider this later. I >>> have no intention of considering this. I think this is work for the ACE= and >> CORE >>> groups to deal with not for this group. As such I don't believe the ch= ange >>> helps. >> RS2>> Perhaps. It is hard for me to keep track of which group should do >> what. What I do know >> is that there are technical reasons to look at some of these topics. As a= n >> example, clever representation of bindings of keys and identities may be >> crucial for, e.g., the join protocol with 6TiSCH. It may be okay to tackl= e this >> elsewhere, but question is why and whether there would be sufficient crit= ical >> mass to take on some of the micro-topics. To me, it seems that some >> representation topics benefit from a system level perspective, even if th= ese >> are not on the top of the list, due to low-hanging fruit considerations. >=20 > Yes, there are a lot of problems in this space and there have been many di= fferent attempts to solve them. Most of the solutions have had problems of o= ne type or another. >=20 > Introduction - How do I know who you are the first time I see you. I thin= k, from the brief look at 6TiSCH that this is the main problem you are looki= ng at. There have been a lot of ways to go about this and none of them are g= enerically good. >=20 > Certification - Given a trusted third party statement, how do you represen= t the binding of the key and the identity information. This is basically th= e approach of X.509 certificates and OpenPGP keys. >=20 > There was yet another BOF at the last IETF on the first problem (ACME), as= the web is currently based on X.509 certificates it uses the them for the l= atter problem. >=20 > There are a lot of problems and a lot of solutions already in the world. I= would want to see something come to the fore as a single solution before wo= rrying about that in this group. Given that however, you might want to look= at the JWT work that was done in the OAUTH working group. That could encod= ed in COSE and potentially give you some of what you want. >=20 > I know that CORE/ACE are currently looking at doing some of their work wit= h keys derived from DTLS sessions. This does not give end to end, solutions= , but can give point-to-point success. >=20 >=20 >> <>>=20 >>>> <>>>> . >>>>>=20 >>>>> The Working group will coordinate its progress with the ACE, DICE >>>>> and CoAP working groups to ensure that we are fulfilling the needs >>>>> of these constituencies. The DIME chair came to the JOSE session as they need help and this may be pa= rt of what they need. Is there a reason it's not listed? Thanks, Kathleen=20 >>>>> Other groups may be added to this list as >>>>> the set of use cases is expanded. >>>> RS>> I can imagine some other "constrained cluster" groups also >>>> RS>> having >>>> an interest in this work, such >>>> as 6TiSCH, 6lo, RoLL, etc. Perhaps, this is already captured under >>>> the >>> last >>>> sentence, though. >>> If we have other groups which we really think are going to need or use >>> this work, it makes sense to identify them sooner than later. If we >>> have them identified then adding them now makes sense. >>>=20 >>> Jim >>>=20 >>>=20 >>>> <>>>>=20 >>>>> ---------------------------------- >>>> ---------------- >>>>>=20 >>>>> For the last paragraph, I propose to change CoAP to CoRE. >>>>>=20 >>>>> Thanks, >>>>>=20 >>>>> Kind Regards >>>>> Kepeng >>>>>=20 >>>>> ? 9/4/15 7:43 am, "Paul Hoffman" ??: >>>>>=20 >>>>>> It's kind of unfair to expect people to know where the draft >>>>>> charter is, or even what a "pull request" is. For those not in the >>>>>> know, the draft charter is at: >>>>>>=20 >>>>>> https://github.com/cose-spec/wg-charter/blob/master/draft-charter.m >>>>>> d and Jim's proposed changes are are: >>>>>> https://github.com/cose-spec/wg-charter/pull/2 >>>>>> _______________________________________________ >>>>>> Cose mailing list >>>>>> Cose@ietf.org >>>>>> https://www.ietf.org/mailman/listinfo/cose >>>>> _______________________________________________ >>>>> Cose mailing list >>>>> Cose@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/cose >>>>=20 >>>> -- >>>> email: rstruik.ext@gmail.com | Skype: rstruik >>>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >>>>=20 >>>> _______________________________________________ >>>> Cose mailing list >>>> Cose@ietf.org >>>> https://www.ietf.org/mailman/listinfo/cose >>=20 >>=20 >> -- >> email: rstruik.ext@gmail.com | Skype: rstruik >> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >>=20 >> _______________________________________________ >> Cose mailing list >> Cose@ietf.org >> https://www.ietf.org/mailman/listinfo/cose >=20 > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Fri Apr 10 08:53:40 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2720C1A1EF7 for ; Fri, 10 Apr 2015 08:53:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1YPLCSlsjHCe for ; Fri, 10 Apr 2015 08:53:36 -0700 (PDT) Received: from smtp4.pacifier.net (smtp4.pacifier.net [64.255.237.176]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 37D1F1A1EEA for ; Fri, 10 Apr 2015 08:53:36 -0700 (PDT) Received: from Philemon (97-126-80-68.tukw.qwest.net [97.126.80.68]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp4.pacifier.net (Postfix) with ESMTPSA id 7399038EEA; Fri, 10 Apr 2015 08:53:35 -0700 (PDT) From: "Jim Schaad" To: "'Kathleen Moriarty'" References: <002201d07254$3ba98890$b2fc99b0$@augustcellars.com> <552685F5.9030408@gmail.com> <003401d072db$3abea000$b03be000$@augustcellars.com> <5526A9A1.3060006@gmail.com> <006301d072fa$00d405f0$027c11d0$@augustcellars.com> <82EDFA60-BF3E-49B9-89AB-876EFAFABE2E@gmail.com> In-Reply-To: <82EDFA60-BF3E-49B9-89AB-876EFAFABE2E@gmail.com> Date: Fri, 10 Apr 2015 08:52:26 -0700 Message-ID: <013f01d073a6$57c52e50$074f8af0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Content-Language: en-us Thread-Index: AQGOuPA2XPfZI2xrEEOtPjxO+2tB0wGAL+utAUvAfesCVVWjHQEqQB4fAfoHdw8BNOB2gwIPhPC6nW2IYAA= Archived-At: Cc: 'Rene Struik' , cose@ietf.org Subject: Re: [Cose] Charter Pull Request #2 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Apr 2015 15:53:39 -0000 > -----Original Message----- > From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kathleen Moriarty > Sent: Friday, April 10, 2015 6:10 AM > To: Jim Schaad > Cc: Rene Struik; cose@ietf.org > Subject: Re: [Cose] Charter Pull Request #2 > > Hi, > > I just have a question and a suggestion. > > Sent from my iPhone > > > On Apr 9, 2015, at 3:18 PM, "Jim Schaad" wrote: > > > > > > > >> -----Original Message----- > >> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Rene Struik > >> Sent: Thursday, April 09, 2015 9:33 AM > >> To: Jim Schaad; 'Kepeng Li'; 'Paul Hoffman' > >> Cc: cose@ietf.org > >> Subject: Re: [Cose] Charter Pull Request #2 > >> > >> Hi Jim: > >> > >> Please see below (RS2>> < >> > >> Rene > >> > >>> On 4/9/2015 11:38 AM, Jim Schaad wrote: > >>> > >>>> -----Original Message----- > >>>> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Rene Struik > >>>> Sent: Thursday, April 09, 2015 7:00 AM > >>>> To: Kepeng Li; Paul Hoffman; Jim Schaad > >>>> Cc: cose@ietf.org > >>>> Subject: Re: [Cose] Charter Pull Request #2 > >>>> > >>>> Hi Kepeng: > >>>> > >>>> Some feedback (one remark, two small suggested text tweaks) below. > >>>> > >>>> Best regards, Rene > >>>> > >>>>> On 4/8/2015 9:30 PM, Kepeng Li wrote: > >>>>> I copy the proposed texts here: > >>>>> > >>>>> ------------------------------------------------------------------ > >>>>> -- > >>>>> -- > >>>>> ----- > >>>>> ------------------------- > >>>>> > >>>>> Criteria that should be considered on making decisions in changing > >>>>> from a JOSE to a CBOR > > Shouldn't this be JOSE to COSE or JSON to CBOR? Obviously language tweaks > would be needed for the latter, but would be good to list that out explicitly > for someone trying to figure what this is about. Yes - I changed to "JSON to CBOR". > >>>>> encoding are: > >>>>> - Keeping the current JOSE paradigms and formatting where feasible. > >>>>> - Minimizing message size and code size should be considered (for > >>>>> the constrained environments where we expect to use this). > >>>>> - Improving security. > >>>> RS>> Just a remark (not a proposed change) to illustrate the > >>>> RS>> importance of > >>>> this point: improper encodings have resulted in attacks in the > >>>> past, see, > >>> e.g., > >>>> N. Mavrogiannopoulos, F. Vercauteren, V. Velichkov, B. Preneel, A > >>>> Cross- Protocol Attack on the TLS Protocol, ACM CCS 2012. > >>>> < >>>>> - Providing new functionality that uses of JOSE did not require, > >>>>> but are required for the new use cases. > >>>>> > >>>>> Since contrained environments are one of the primary targets for > >>>>> this work, message size and code size are to be considered > >>>>> whenever decisions are made. > >>>> RS>> I suggest to change this paragraph slightly, as follows: > >>>> Since constrained environments are one of the primary targets for > >>>> this > >>> work, > >>>> message size, code size, and computational cost are to be > >>>> considered whenever decisions are made. > >>>> NOTE: sometimes, small representation differences may have larger > >>>> computational impact, e.g, when dealing with security-related objects. > >>> This is something that people would not understand without an > example. > >>> (I know that I am not sure what is intended here.) If we have to > >>> have an example then I am not sure that it makes sense. > >>> > >>> I would however appreciate an example of what you mean because that > >>> might suggest wording changes. > >> RS2>> > >> A simple example would be ECDSA signatures, where the signature (r,s) > >> over a message is represented as (r, 1/s) so as to avoid any > >> inversions modulo the elliptic curve group size for verifiers, which > >> could be a useful trade-off in environments with lots of > >> verifications relative to signatures, such as with Connected Vehicles > >> (IEEE 1609.2/DoT, EU initiatives). NOTE: this example is not meant at > >> all to trigger a debate on whether this particular representation > >> convention should be pursued. It just illustrates that one should also > consider trade-offs with computational cost. Hence, the suggested wording > change. > > > > Great that is the type of thing I was looking for. I had not considered the > issues of algorithm and algorithm encoding because I tend to think of that as > being a separate step from the core message structure encoding. I will think > about this and see if I can offer a suggest later today on how to word this. > > > >> < >>>> < >>>>> Issues dealing with key management and binding of keys to > >>>>> identities are out of scope for the working group > >>>> RS>> I suggest to change this slightly, as follows: > >>>> Issues dealing with key management and binding of keys to > >>>> identities are presently out of scope and may only be considered after > rechartering. > >>> Your wording change suggests that we might consider this later. I > >>> have no intention of considering this. I think this is work for the > >>> ACE and > >> CORE > >>> groups to deal with not for this group. As such I don't believe the > change > >>> helps. > >> RS2>> Perhaps. It is hard for me to keep track of which group should > >> RS2>> do > >> what. What I do know > >> is that there are technical reasons to look at some of these topics. > >> As an example, clever representation of bindings of keys and > >> identities may be crucial for, e.g., the join protocol with 6TiSCH. > >> It may be okay to tackle this elsewhere, but question is why and > >> whether there would be sufficient critical mass to take on some of > >> the micro-topics. To me, it seems that some representation topics > >> benefit from a system level perspective, even if these are not on the top > of the list, due to low-hanging fruit considerations. > > > > Yes, there are a lot of problems in this space and there have been many > different attempts to solve them. Most of the solutions have had problems > of one type or another. > > > > Introduction - How do I know who you are the first time I see you. I think, > from the brief look at 6TiSCH that this is the main problem you are looking at. > There have been a lot of ways to go about this and none of them are > generically good. > > > > Certification - Given a trusted third party statement, how do you represent > the binding of the key and the identity information. This is basically the > approach of X.509 certificates and OpenPGP keys. > > > > There was yet another BOF at the last IETF on the first problem (ACME), as > the web is currently based on X.509 certificates it uses the them for the > latter problem. > > > > There are a lot of problems and a lot of solutions already in the world. I > would want to see something come to the fore as a single solution before > worrying about that in this group. Given that however, you might want to > look at the JWT work that was done in the OAUTH working group. That could > encoded in COSE and potentially give you some of what you want. > > > > I know that CORE/ACE are currently looking at doing some of their work > with keys derived from DTLS sessions. This does not give end to end, > solutions, but can give point-to-point success. > > > > > >> < >>> > >>>> < >>>>> . > >>>>> > >>>>> The Working group will coordinate its progress with the ACE, DICE > >>>>> and CoAP working groups to ensure that we are fulfilling the needs > >>>>> of these constituencies. > > The DIME chair came to the JOSE session as they need help and this may be > part of what they need. Is there a reason it's not listed? I did not think about them. Previous efforts in that group have been CMS oriented. I have no problems with adding them in if you think we should. Jim > > Thanks, > Kathleen > > >>>>> Other groups may be added to this list as the set of use cases is > >>>>> expanded. > >>>> RS>> I can imagine some other "constrained cluster" groups also > >>>> RS>> having > >>>> an interest in this work, such > >>>> as 6TiSCH, 6lo, RoLL, etc. Perhaps, this is already captured under > >>>> the > >>> last > >>>> sentence, though. > >>> If we have other groups which we really think are going to need or > >>> use this work, it makes sense to identify them sooner than later. > >>> If we have them identified then adding them now makes sense. > >>> > >>> Jim > >>> > >>> > >>>> < >>>>> > >>>>> ---------------------------------- > >>>> ---------------- > >>>>> > >>>>> For the last paragraph, I propose to change CoAP to CoRE. > >>>>> > >>>>> Thanks, > >>>>> > >>>>> Kind Regards > >>>>> Kepeng > >>>>> > >>>>> ? 9/4/15 7:43 am, "Paul Hoffman" ??: > >>>>> > >>>>>> It's kind of unfair to expect people to know where the draft > >>>>>> charter is, or even what a "pull request" is. For those not in > >>>>>> the know, the draft charter is at: > >>>>>> > >>>>>> https://github.com/cose-spec/wg-charter/blob/master/draft- > charter > >>>>>> .m d and Jim's proposed changes are are: > >>>>>> https://github.com/cose-spec/wg-charter/pull/2 > >>>>>> _______________________________________________ > >>>>>> Cose mailing list > >>>>>> Cose@ietf.org > >>>>>> https://www.ietf.org/mailman/listinfo/cose > >>>>> _______________________________________________ > >>>>> Cose mailing list > >>>>> Cose@ietf.org > >>>>> https://www.ietf.org/mailman/listinfo/cose > >>>> > >>>> -- > >>>> email: rstruik.ext@gmail.com | Skype: rstruik > >>>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 > >>>> > >>>> _______________________________________________ > >>>> Cose mailing list > >>>> Cose@ietf.org > >>>> https://www.ietf.org/mailman/listinfo/cose > >> > >> > >> -- > >> email: rstruik.ext@gmail.com | Skype: rstruik > >> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 > >> > >> _______________________________________________ > >> Cose mailing list > >> Cose@ietf.org > >> https://www.ietf.org/mailman/listinfo/cose > > > > _______________________________________________ > > Cose mailing list > > Cose@ietf.org > > https://www.ietf.org/mailman/listinfo/cose > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Tue Apr 14 05:15:40 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C8671A1EFE for ; Tue, 14 Apr 2015 05:15:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 2.35 X-Spam-Level: ** X-Spam-Status: No, score=2.35 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_CHARSET_FARAWAY=2.45, MIME_QP_LONG_LINE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B7e8P-QT0TLm for ; Tue, 14 Apr 2015 05:15:37 -0700 (PDT) Received: from out4133-82.mail.aliyun.com (out4133-82.mail.aliyun.com [42.120.133.82]) by ietfa.amsl.com (Postfix) with ESMTP id A59C71A902F for ; Tue, 14 Apr 2015 05:15:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alibaba-inc.com; s=default; t=1429013723; h=Date:Subject:From:To:Message-ID:Mime-version:Content-type; bh=5Zns0FUljfL4v7Z/blpXNi/63JMbXuCBXpYA2Xj8bfA=; b=hqwq6oWrgbo5VA90QRItPV0yDhYkTFGIdD+V/jEtdzzrjkFD5zYpQu/E5VS8lAtV9wMw/7BHlEmG1WxBJACQBLCYbdcB46jFF1dy3DKUfiAsgX0nWAgbGOBJCrb3QSwOF9bjWZvVKAc4QbaPAZeeOMMLFpD/FvB30agucE2YzL8= X-Alimail-AntiSpam: AC=PASS; BC=-1|-1; BR=01201311R381e4; FP=0|-1|-1|-1|0|-1|-1|-1; HT=r46d02009; MF=kepeng.lkp@alibaba-inc.com; PH=DS; RN=3; RT=3; SR=0; Received: from 10.1.144.239(mailfrom:kepeng.lkp@alibaba-inc.com ip:42.120.74.182) by smtp.aliyun-inc.com(127.0.0.1); Tue, 14 Apr 2015 20:15:20 +0800 User-Agent: Microsoft-MacOutlook/14.4.8.150116 Date: Tue, 14 Apr 2015 20:15:13 +0800 From: "Kepeng Li" To: Paul Hoffman , Jim Schaad Message-ID: Thread-Topic: [Cose] Charter Pull Request #2 References: <002201d07254$3ba98890$b2fc99b0$@augustcellars.com> In-Reply-To: Mime-version: 1.0 Content-type: text/plain; charset="GB2312" Content-transfer-encoding: quoted-printable Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Charter Pull Request #2 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2015 12:15:39 -0000 >Since constrained environments are one of the primary targets for this >work, message size and code size are to be considered whenever decisions >are made. I propose to remove the paragraph above, since it is redundant with the second bullet in the previous paragraph. - Minimizing message size and code size should be considered (for the constrained environments where we expect to use this). Thanks, Kind Regards Kepeng =D4=DA 9/4/15 9:30 am=A3=AC "Kepeng Li" =D0=B4=C8=EB: >I copy the proposed texts here: > >-------------------------------------------------------------------------- >- >------------------------- > >Criteria that should be considered on making decisions in changing from a >JOSE to a CBOR encoding are: >- Keeping the current JOSE paradigms and formatting where feasible. >- Minimizing message size and code size should be considered (for the >constrained environments where we expect to use this). >- Improving security. >- Providing new functionality that uses of JOSE did not require, but are >required for the new use cases. > >Since contrained environments are one of the primary targets for this >work, message size and code size are to be considered whenever decisions >are made. > >Issues dealing with key management and binding of keys to identities are >out of scope for the working group. > >The Working group will coordinate its progress with the ACE, DICE and CoAP >working groups to ensure that we are fulfilling the needs of these >constituencies. Other groups may be added to this list as the set of use >cases is expanded. > > >=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA= =A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA=A1=AA > > >For the last paragraph, I propose to change CoAP to CoRE. > >Thanks, > >Kind Regards >Kepeng > >=D4=DA 9/4/15 7:43 am=A3=AC "Paul Hoffman" =D0=B4=C8=EB: > >>It's kind of unfair to expect people to know where the draft charter is, >>or even what a "pull request" is. For those not in the know, the draft >>charter is at: >> https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md >>and Jim's proposed changes are are: >> https://github.com/cose-spec/wg-charter/pull/2 >>_______________________________________________ >>Cose mailing list >>Cose@ietf.org >>https://www.ietf.org/mailman/listinfo/cose > > >_______________________________________________ >Cose mailing list >Cose@ietf.org >https://www.ietf.org/mailman/listinfo/cose From nobody Tue Apr 14 10:14:46 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6EF451A0196 for ; Tue, 14 Apr 2015 10:14:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A1gRPzuWjbKx for ; Tue, 14 Apr 2015 10:14:43 -0700 (PDT) Received: from smtp1.pacifier.net (smtp1.pacifier.net [64.255.237.171]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BF40E1A01A5 for ; Tue, 14 Apr 2015 10:13:29 -0700 (PDT) Received: from Philemon (unknown [4.30.143.226]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp1.pacifier.net (Postfix) with ESMTPSA id 2D4652C9BC; Tue, 14 Apr 2015 10:13:29 -0700 (PDT) From: "Jim Schaad" To: "'Kepeng Li'" , "'Paul Hoffman'" References: <002201d07254$3ba98890$b2fc99b0$@augustcellars.com> In-Reply-To: Date: Tue, 14 Apr 2015 10:12:15 -0700 Message-ID: <041e01d076d6$293b5ea0$7bb21be0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-2022-jp" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Content-Language: en-us Thread-Index: AQGOuPA2XPfZI2xrEEOtPjxO+2tB0wGAL+utAUvAfesDAJYzlp2h1e1Q Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Charter Pull Request #2 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2015 17:14:45 -0000 > -----Original Message----- > From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kepeng Li > Sent: Tuesday, April 14, 2015 5:15 AM > To: Paul Hoffman; Jim Schaad > Cc: cose@ietf.org > Subject: Re: [Cose] Charter Pull Request #2 > > >Since constrained environments are one of the primary targets for this > >work, message size and code size are to be considered whenever > >decisions are made. > > > I propose to remove the paragraph above, since it is redundant with the > second bullet in the previous paragraph. > > - Minimizing message size and code size should be considered (for the > constrained environments where we expect to use this). I completely agree. I missed that when I rolled it into the set of bullets. Jim > > > Thanks, > > Kind Regards > Kepeng > > $B:_(B 9/4/15 9:30 am$B!$(B "Kepeng Li" $B > >I copy the proposed texts here: > > > >----------------------------------------------------------------------- > >--- > >- > >------------------------- > > > >Criteria that should be considered on making decisions in changing from > >a JOSE to a CBOR encoding are: > >- Keeping the current JOSE paradigms and formatting where feasible. > >- Minimizing message size and code size should be considered (for the > >constrained environments where we expect to use this). > >- Improving security. > >- Providing new functionality that uses of JOSE did not require, but > >are required for the new use cases. > > > >Since contrained environments are one of the primary targets for this > >work, message size and code size are to be considered whenever > >decisions are made. > > > >Issues dealing with key management and binding of keys to identities > >are out of scope for the working group. > > > >The Working group will coordinate its progress with the ACE, DICE and > >CoAP working groups to ensure that we are fulfilling the needs of these > >constituencies. Other groups may be added to this list as the set of > >use cases is expanded. > > > > > >--------------------------------- > ----------------- > > > > > >For the last paragraph, I propose to change CoAP to CoRE. > > > >Thanks, > > > >Kind Regards > >Kepeng > > > >$B:_(B 9/4/15 7:43 am$B!$(B "Paul Hoffman" $B > > >>It's kind of unfair to expect people to know where the draft charter > >>is, or even what a "pull request" is. For those not in the know, the > >>draft charter is at: > >> > >>https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md > >>and Jim's proposed changes are are: > >> https://github.com/cose-spec/wg-charter/pull/2 > >>_______________________________________________ > >>Cose mailing list > >>Cose@ietf.org > >>https://www.ietf.org/mailman/listinfo/cose > > > > > >_______________________________________________ > >Cose mailing list > >Cose@ietf.org > >https://www.ietf.org/mailman/listinfo/cose > > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Tue Apr 14 10:45:21 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 441A31A19F6 for ; Tue, 14 Apr 2015 10:45:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.3 X-Spam-Level: X-Spam-Status: No, score=-1.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_71=0.6, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iGFs-QbkabQd for ; Tue, 14 Apr 2015 10:45:19 -0700 (PDT) Received: from smtp4.pacifier.net (smtp4.pacifier.net [64.255.237.176]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 904FC1A1A00 for ; Tue, 14 Apr 2015 10:45:19 -0700 (PDT) Received: from Philemon (unknown [4.30.143.226]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp4.pacifier.net (Postfix) with ESMTPSA id 9144738EED; Tue, 14 Apr 2015 10:45:18 -0700 (PDT) From: "Jim Schaad" To: "'Rene Struik'" , "'Kepeng Li'" , "'Paul Hoffman'" References: <002201d07254$3ba98890$b2fc99b0$@augustcellars.com> <552685F5.9030408@gmail.com> <003401d072db$3abea000$b03be000$@augustcellars.com> <5526A9A1.3060006@gmail.com> In-Reply-To: <5526A9A1.3060006@gmail.com> Date: Tue, 14 Apr 2015 10:44:06 -0700 Message-ID: <042501d076da$9b582e60$d2088b20$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Content-Language: en-us Thread-Index: AQGOuPA2XPfZI2xrEEOtPjxO+2tB0wGAL+utAUvAfesCVVWjHQEqQB4fAfoHdw+djhGiQA== Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Charter Pull Request #2 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2015 17:45:21 -0000 > -----Original Message----- > From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Rene Struik > Sent: Thursday, April 09, 2015 9:33 AM > To: Jim Schaad; 'Kepeng Li'; 'Paul Hoffman' > Cc: cose@ietf.org > Subject: Re: [Cose] Charter Pull Request #2 >=20 > Hi Jim: >=20 > Please see below (RS2>> <=20 > Rene >=20 > On 4/9/2015 11:38 AM, Jim Schaad wrote: > > > >> -----Original Message----- > >> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Rene Struik > >> Sent: Thursday, April 09, 2015 7:00 AM > >> To: Kepeng Li; Paul Hoffman; Jim Schaad > >> Cc: cose@ietf.org > >> Subject: Re: [Cose] Charter Pull Request #2 > >> > >> Hi Kepeng: > >> > >> Some feedback (one remark, two small suggested text tweaks) below. > >> > >> Best regards, Rene > >> > >> On 4/8/2015 9:30 PM, Kepeng Li wrote: > >>> I copy the proposed texts here: > >>> > >>> = -------------------------------------------------------------------- > >>> -- > >>> ----- > >>> ------------------------- > >>> > >>> Criteria that should be considered on making decisions in changing > >>> from a JOSE to a CBOR encoding are: > >>> - Keeping the current JOSE paradigms and formatting where = feasible. > >>> - Minimizing message size and code size should be considered (for > >>> the constrained environments where we expect to use this). > >>> - Improving security. > >> RS>> Just a remark (not a proposed change) to illustrate the > >> RS>> importance of > >> this point: improper encodings have resulted in attacks in the = past, > >> see, > > e.g., > >> N. Mavrogiannopoulos, F. Vercauteren, V. Velichkov, B. Preneel, A > >> Cross- Protocol Attack on the TLS Protocol, ACM CCS 2012. > >> < >>> - Providing new functionality that uses of JOSE did not require, = but > >>> are required for the new use cases. > >>> > >>> Since contrained environments are one of the primary targets for > >>> this work, message size and code size are to be considered = whenever > >>> decisions are made. > >> RS>> I suggest to change this paragraph slightly, as follows: > >> Since constrained environments are one of the primary targets for > >> this > > work, > >> message size, code size, and computational cost are to be = considered > >> whenever decisions are made. > >> NOTE: sometimes, small representation differences may have larger > >> computational impact, e.g, when dealing with security-related = objects. > > This is something that people would not understand without an = example. > > (I know that I am not sure what is intended here.) If we have to = have > > an example then I am not sure that it makes sense. > > > > I would however appreciate an example of what you mean because that > > might suggest wording changes. > RS2>> > A simple example would be ECDSA signatures, where the signature (r,s) = over > a message is represented as (r, 1/s) so as to avoid any inversions = modulo the > elliptic curve group size for verifiers, which could be a useful = trade-off in > environments with lots of verifications relative to signatures, such = as with > Connected Vehicles (IEEE 1609.2/DoT, EU initiatives). NOTE: this = example is > not meant at all to trigger a debate on whether this particular = representation > convention should be pursued. It just illustrates that one should also > consider trade-offs with computational cost. Hence, the suggested = wording > change. > <. While I recognize that = computational complexity is not directly tied to speed, it can be = measured in memory use as well, it would be more tied to selection of = algorithms which the group is going to try and generally punt on to the = groups that will be using the data format. I don't want to include the = text following "NOTE" and am not sure if you intended this to be = included or not. Jim > >> < >>> Issues dealing with key management and binding of keys to = identities > >>> are out of scope for the working group > >> RS>> I suggest to change this slightly, as follows: > >> Issues dealing with key management and binding of keys to = identities > >> are presently out of scope and may only be considered after = rechartering. > > Your wording change suggests that we might consider this later. I > > have no intention of considering this. I think this is work for the = ACE and > CORE > > groups to deal with not for this group. As such I don't believe = the change > > helps. > RS2>> Perhaps. It is hard for me to keep track of which group should = do > what. What I do know > is that there are technical reasons to look at some of these topics. = As an > example, clever representation of bindings of keys and identities may = be > crucial for, e.g., the join protocol with 6TiSCH. It may be okay to = tackle this > elsewhere, but question is why and whether there would be sufficient > critical mass to take on some of the micro-topics. To me, it seems = that some > representation topics benefit from a system level perspective, even if = these > are not on the top of the list, due to low-hanging fruit = considerations. > < > > >> < >>> . > >>> > >>> The Working group will coordinate its progress with the ACE, DICE > >>> and CoAP working groups to ensure that we are fulfilling the needs > >>> of these constituencies. Other groups may be added to this list as > >>> the set of use cases is expanded. > >> RS>> I can imagine some other "constrained cluster" groups also > >> RS>> having > >> an interest in this work, such > >> as 6TiSCH, 6lo, RoLL, etc. Perhaps, this is already captured under > >> the > > last > >> sentence, though. > > If we have other groups which we really think are going to need or = use > > this work, it makes sense to identify them sooner than later. If we > > have them identified then adding them now makes sense. > > > > Jim > > > > > >> < >>> > >>> ---------------------------------- > >> ---------------- > >>> > >>> For the last paragraph, I propose to change CoAP to CoRE. > >>> > >>> Thanks, > >>> > >>> Kind Regards > >>> Kepeng > >>> > >>> ? 9/4/15 7:43 am, "Paul Hoffman" ??: > >>> > >>>> It's kind of unfair to expect people to know where the draft > >>>> charter is, or even what a "pull request" is. For those not in = the > >>>> know, the draft charter is at: > >>>> > >>>> https://github.com/cose-spec/wg-charter/blob/master/draft- > charter.m > >>>> d and Jim's proposed changes are are: > >>>> https://github.com/cose-spec/wg-charter/pull/2 > >>>> _______________________________________________ > >>>> Cose mailing list > >>>> Cose@ietf.org > >>>> https://www.ietf.org/mailman/listinfo/cose > >>> _______________________________________________ > >>> Cose mailing list > >>> Cose@ietf.org > >>> https://www.ietf.org/mailman/listinfo/cose > >> > >> -- > >> email: rstruik.ext@gmail.com | Skype: rstruik > >> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 > >> > >> _______________________________________________ > >> Cose mailing list > >> Cose@ietf.org > >> https://www.ietf.org/mailman/listinfo/cose >=20 >=20 > -- > email: rstruik.ext@gmail.com | Skype: rstruik > cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >=20 > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Tue Apr 14 11:21:36 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 053E31A8711 for ; Tue, 14 Apr 2015 11:21:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.7 X-Spam-Level: X-Spam-Status: No, score=-0.7 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 907MV35TXfbH for ; Tue, 14 Apr 2015 11:21:32 -0700 (PDT) Received: from smtp2.pacifier.net (smtp2.pacifier.net [64.255.237.172]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 48FBB1A86FC for ; Tue, 14 Apr 2015 11:21:32 -0700 (PDT) Received: from Philemon (unknown [4.30.143.226]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp2.pacifier.net (Postfix) with ESMTPSA id B9D8F2CA28 for ; Tue, 14 Apr 2015 11:21:31 -0700 (PDT) From: "Jim Schaad" To: Date: Tue, 14 Apr 2015 11:20:17 -0700 Message-ID: <043201d076df$aa87b770$ff972650$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0433_01D076A4.FE2954A0" X-Mailer: Microsoft Outlook 14.0 Content-Language: en-us Thread-Index: AdB233J6eMIFWU+bSfiQcTRrv8iHPQ== Archived-At: Subject: [Cose] Charter State X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2015 18:21:34 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0433_01D076A4.FE2954A0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit I would like to get Pull Request #2 rolled into the draft charter and then I think we are ready to send it to the ADs and IESG for review. Since it is my pull request I have not done the merge preferring that it be done by one of the others who have permissions. If I get a message saying do the merge request I would be happy to pull the trigger on it. Jim ------=_NextPart_000_0433_01D076A4.FE2954A0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

I would = like to get Pull Request #2 rolled into the draft charter and then I = think we are ready to send it to the ADs and IESG for = review.

 

Since it is my pull request I have not done the merge = preferring that it be done by one of the others who have = permissions.  If I get a message saying do the merge request I = would be happy to pull the trigger on it.

 

Jim

 

------=_NextPart_000_0433_01D076A4.FE2954A0-- From nobody Tue Apr 14 11:33:36 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C36811A90CB for ; Tue, 14 Apr 2015 11:33:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.347 X-Spam-Level: X-Spam-Status: No, score=-1.347 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_COM=0.553] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4B4lDylWxG6G for ; Tue, 14 Apr 2015 11:33:33 -0700 (PDT) Received: from proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AC7C81A9092 for ; Tue, 14 Apr 2015 11:33:33 -0700 (PDT) Received: from [10.20.30.101] (50-1-98-218.dsl.dynamic.fusionbroadband.com [50.1.98.218]) (authenticated bits=0) by proper.com (8.15.1/8.14.9) with ESMTPSA id t3EIWF1O006419 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 14 Apr 2015 11:32:16 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) X-Authentication-Warning: proper.com: Host 50-1-98-218.dsl.dynamic.fusionbroadband.com [50.1.98.218] claimed to be [10.20.30.101] Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\)) From: Paul Hoffman In-Reply-To: <043201d076df$aa87b770$ff972650$@augustcellars.com> Date: Tue, 14 Apr 2015 11:32:15 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: <50A4152F-E8F1-4890-AD03-065899ACC3BB@vpnc.org> References: <043201d076df$aa87b770$ff972650$@augustcellars.com> To: Jim Schaad X-Mailer: Apple Mail (2.2098) Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Charter State X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2015 18:33:34 -0000 On Apr 14, 2015, at 11:20 AM, Jim Schaad wrote: >=20 > I would like to get Pull Request #2 rolled into the draft charter and = then I think we are ready to send it to the ADs and IESG for review. > =20 > Since it is my pull request I have not done the merge preferring that = it be done by one of the others who have permissions. If I get a = message saying do the merge request I would be happy to pull the trigger = on it. There seemed to be general agreement, so I accepted the pull request. Current version is at: = https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md --Paul Hoffman From nobody Tue Apr 14 11:53:52 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A13E1ACD07 for ; Tue, 14 Apr 2015 11:53:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.4 X-Spam-Level: X-Spam-Status: No, score=-1.4 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, J_CHICKENPOX_71=0.6, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aPpkSwvD60e8 for ; Tue, 14 Apr 2015 11:53:47 -0700 (PDT) Received: from mail-wi0-x22c.google.com (mail-wi0-x22c.google.com [IPv6:2a00:1450:400c:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 364D21ACD03 for ; Tue, 14 Apr 2015 11:53:43 -0700 (PDT) Received: by wiun10 with SMTP id n10so33150708wiu.1 for ; Tue, 14 Apr 2015 11:53:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=/iT68Q0zHWuE4Wgo0KhOgs1MY2ROvpVh6f8Y8oogr14=; b=TP/3Vg69iHHFvoTAmEt9qQBwpVQXRUXZ/UY1tMoYmDvksUexJIp7WPtqoqrGkBFb2q bN1kvxnRyvtCv7/q0wGzqaDgz1YImdQiBKYpUTL1VO99I34Ir9Obc69CJngqW2xfzNDx Gc00k7ZYZg516UIom0b6D2sznpUaHsYK/lP6GkQRQFFMW0anR2pxaElU5y2QxQ8wrv9x faiVNiV5v84WsJLMVwo5vexWBN9rRZMOBFga09zrxsoNTp+g6EHvFgZn0n/LzfrSa9iL Y/oAqHve4se/x2LJ1w0VAkfN8uq+hcavDDt9BYX4JKHnojJgkRevNzegyNpe3nUM+aWs QDOg== X-Received: by 10.194.104.71 with SMTP id gc7mr17012112wjb.114.1429037621941; Tue, 14 Apr 2015 11:53:41 -0700 (PDT) Received: from [10.154.240.180] ([46.189.76.51]) by mx.google.com with ESMTPSA id z12sm2728389wjq.12.2015.04.14.11.53.40 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 14 Apr 2015 11:53:41 -0700 (PDT) Message-ID: <552D6233.807@gmail.com> Date: Tue, 14 Apr 2015 14:53:39 -0400 From: Rene Struik User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: Jim Schaad , 'Kepeng Li' , 'Paul Hoffman' References: <002201d07254$3ba98890$b2fc99b0$@augustcellars.com> <552685F5.9030408@gmail.com> <003401d072db$3abea000$b03be000$@augustcellars.com> <5526A9A1.3060006@gmail.com> <042501d076da$9b582e60$d2088b20$@augustcellars.com> In-Reply-To: <042501d076da$9b582e60$d2088b20$@augustcellars.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Charter Pull Request #2 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Apr 2015 18:53:49 -0000 Hi Jim: Indeed, the portion after "NOTE" was meant as explanatory note in my original email, thereby not forming part of the proposed tweak of the charter text. As to whether a particular metric would be weighed sufficiently during a WG's work, that is of later concern. My main objective was to have it included in charter terms. Rene On 4/14/2015 1:44 PM, Jim Schaad wrote: > >> -----Original Message----- >> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Rene Struik >> Sent: Thursday, April 09, 2015 9:33 AM >> To: Jim Schaad; 'Kepeng Li'; 'Paul Hoffman' >> Cc: cose@ietf.org >> Subject: Re: [Cose] Charter Pull Request #2 >> >> Hi Jim: >> >> Please see below (RS2>> <> >> Rene >> >> On 4/9/2015 11:38 AM, Jim Schaad wrote: >>>> -----Original Message----- >>>> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Rene Struik >>>> Sent: Thursday, April 09, 2015 7:00 AM >>>> To: Kepeng Li; Paul Hoffman; Jim Schaad >>>> Cc: cose@ietf.org >>>> Subject: Re: [Cose] Charter Pull Request #2 >>>> >>>> Hi Kepeng: >>>> >>>> Some feedback (one remark, two small suggested text tweaks) below. >>>> >>>> Best regards, Rene >>>> >>>> On 4/8/2015 9:30 PM, Kepeng Li wrote: >>>>> I copy the proposed texts here: >>>>> >>>>> -------------------------------------------------------------------- >>>>> -- >>>>> ----- >>>>> ------------------------- >>>>> >>>>> Criteria that should be considered on making decisions in changing >>>>> from a JOSE to a CBOR encoding are: >>>>> - Keeping the current JOSE paradigms and formatting where feasible. >>>>> - Minimizing message size and code size should be considered (for >>>>> the constrained environments where we expect to use this). >>>>> - Improving security. >>>> RS>> Just a remark (not a proposed change) to illustrate the >>>> RS>> importance of >>>> this point: improper encodings have resulted in attacks in the past, >>>> see, >>> e.g., >>>> N. Mavrogiannopoulos, F. Vercauteren, V. Velichkov, B. Preneel, A >>>> Cross- Protocol Attack on the TLS Protocol, ACM CCS 2012. >>>> <>>>> - Providing new functionality that uses of JOSE did not require, but >>>>> are required for the new use cases. >>>>> >>>>> Since contrained environments are one of the primary targets for >>>>> this work, message size and code size are to be considered whenever >>>>> decisions are made. >>>> RS>> I suggest to change this paragraph slightly, as follows: >>>> Since constrained environments are one of the primary targets for >>>> this >>> work, >>>> message size, code size, and computational cost are to be considered >>>> whenever decisions are made. >>>> NOTE: sometimes, small representation differences may have larger >>>> computational impact, e.g, when dealing with security-related objects. >>> This is something that people would not understand without an example. >>> (I know that I am not sure what is intended here.) If we have to have >>> an example then I am not sure that it makes sense. >>> >>> I would however appreciate an example of what you mean because that >>> might suggest wording changes. >> RS2>> >> A simple example would be ECDSA signatures, where the signature (r,s) over >> a message is represented as (r, 1/s) so as to avoid any inversions modulo the >> elliptic curve group size for verifiers, which could be a useful trade-off in >> environments with lots of verifications relative to signatures, such as with >> Connected Vehicles (IEEE 1609.2/DoT, EU initiatives). NOTE: this example is >> not meant at all to trigger a debate on whether this particular representation >> convention should be pursued. It just illustrates that one should also >> consider trade-offs with computational cost. Hence, the suggested wording >> change. >> < I have been thinking about this and think that it would not be a problem to include computational cost in this list, however I have been told that execution speed is frequently the looser when looking at the matrix the trio . While I recognize that computational complexity is not directly tied to speed, it can be measured in memory use as well, it would be more tied to selection of algorithms which the group is going to try and generally punt on to the groups that will be using the data format. I don't want to include the text following "NOTE" and am not sure if you intended this to be included or not. > > Jim > > >>>> <>>>> Issues dealing with key management and binding of keys to identities >>>>> are out of scope for the working group >>>> RS>> I suggest to change this slightly, as follows: >>>> Issues dealing with key management and binding of keys to identities >>>> are presently out of scope and may only be considered after rechartering. >>> Your wording change suggests that we might consider this later. I >>> have no intention of considering this. I think this is work for the ACE and >> CORE >>> groups to deal with not for this group. As such I don't believe the change >>> helps. >> RS2>> Perhaps. It is hard for me to keep track of which group should do >> what. What I do know >> is that there are technical reasons to look at some of these topics. As an >> example, clever representation of bindings of keys and identities may be >> crucial for, e.g., the join protocol with 6TiSCH. It may be okay to tackle this >> elsewhere, but question is why and whether there would be sufficient >> critical mass to take on some of the micro-topics. To me, it seems that some >> representation topics benefit from a system level perspective, even if these >> are not on the top of the list, due to low-hanging fruit considerations. >> <>>> <>>>> . >>>>> >>>>> The Working group will coordinate its progress with the ACE, DICE >>>>> and CoAP working groups to ensure that we are fulfilling the needs >>>>> of these constituencies. Other groups may be added to this list as >>>>> the set of use cases is expanded. >>>> RS>> I can imagine some other "constrained cluster" groups also >>>> RS>> having >>>> an interest in this work, such >>>> as 6TiSCH, 6lo, RoLL, etc. Perhaps, this is already captured under >>>> the >>> last >>>> sentence, though. >>> If we have other groups which we really think are going to need or use >>> this work, it makes sense to identify them sooner than later. If we >>> have them identified then adding them now makes sense. >>> >>> Jim >>> >>> >>>> <>>>> ---------------------------------- >>>> ---------------- >>>>> For the last paragraph, I propose to change CoAP to CoRE. >>>>> >>>>> Thanks, >>>>> >>>>> Kind Regards >>>>> Kepeng >>>>> >>>>> ? 9/4/15 7:43 am, "Paul Hoffman" ??: >>>>> >>>>>> It's kind of unfair to expect people to know where the draft >>>>>> charter is, or even what a "pull request" is. For those not in the >>>>>> know, the draft charter is at: >>>>>> >>>>>> https://github.com/cose-spec/wg-charter/blob/master/draft- >> charter.m >>>>>> d and Jim's proposed changes are are: >>>>>> https://github.com/cose-spec/wg-charter/pull/2 >>>>>> _______________________________________________ >>>>>> Cose mailing list >>>>>> Cose@ietf.org >>>>>> https://www.ietf.org/mailman/listinfo/cose >>>>> _______________________________________________ >>>>> Cose mailing list >>>>> Cose@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/cose >>>> -- >>>> email: rstruik.ext@gmail.com | Skype: rstruik >>>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >>>> >>>> _______________________________________________ >>>> Cose mailing list >>>> Cose@ietf.org >>>> https://www.ietf.org/mailman/listinfo/cose >> >> -- >> email: rstruik.ext@gmail.com | Skype: rstruik >> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >> >> _______________________________________________ >> Cose mailing list >> Cose@ietf.org >> https://www.ietf.org/mailman/listinfo/cose -- email: rstruik.ext@gmail.com | Skype: rstruik cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 From nobody Tue Apr 14 18:59:58 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EFE111B30B3 for ; Tue, 14 Apr 2015 18:59:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.451 X-Spam-Level: X-Spam-Status: No, score=0.451 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_CHARSET_FARAWAY=2.45, MIME_QP_LONG_LINE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KSEt2VpLzUdX for ; Tue, 14 Apr 2015 18:59:54 -0700 (PDT) Received: from out4133-114.mail.aliyun.com (out4133-114.mail.aliyun.com [42.120.133.114]) by ietfa.amsl.com (Postfix) with ESMTP id 84A061B30BE for ; Tue, 14 Apr 2015 18:59:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alibaba-inc.com; s=default; t=1429063174; h=Date:Subject:From:To:Message-ID:Mime-version:Content-type; bh=tjo+y0VnbKNjC649NYLXl9AKwKD2HJI0ZxBls6toOkA=; b=MvlldZIOrapf2xRjZxuOAVzFRKV3GuzmO0rvTWBzXWrIH8+2CHcvGomKKtKiS3i3fHfRlgzbervncxVL6mO06b5vbmLlZ5WOaWXq7OhOqinhHA0TVzsUWKWgeqc/LZzLbH/HHjUDL8tg1xnzn8OsuE2wVtJmNmAB9Kg+W4HKCS8= X-Alimail-AntiSpam: AC=PASS; BC=-1|-1; BR=01201311R761e4; FP=0|-1|-1|-1|0|-1|-1|-1; HT=r46d02009; MF=kepeng.lkp@alibaba-inc.com; PH=DS; RN=3; RT=3; SR=0; Received: from 10.1.144.239(mailfrom:kepeng.lkp@alibaba-inc.com ip:42.120.74.156) by smtp.aliyun-inc.com(127.0.0.1); Wed, 15 Apr 2015 09:59:32 +0800 User-Agent: Microsoft-MacOutlook/14.4.8.150116 Date: Wed, 15 Apr 2015 09:59:26 +0800 From: "Kepeng Li" To: Paul Hoffman , Jim Schaad Message-ID: Thread-Topic: [Cose] Charter State References: <043201d076df$aa87b770$ff972650$@augustcellars.com> <50A4152F-E8F1-4890-AD03-065899ACC3BB@vpnc.org> In-Reply-To: <50A4152F-E8F1-4890-AD03-065899ACC3BB@vpnc.org> Mime-version: 1.0 Content-type: text/plain; charset="GB2312" Content-transfer-encoding: quoted-printable Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Charter State X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2015 01:59:57 -0000 Thanks Paul. There are two other changes we might want to incorporate: 1) Proposal from Goran: http://www.ietf.org/mail-archive/web/cose/current/msg00027.html OLD: "a standards-track specification covering the same cryptographic formats from JOSE, expressed in CBOR" NEW:=20 "a standards-track specification covering the same cryptographic formats from JOSE and optimizations for constrained device processing, expressed in CBOR=A1=B1 (2) Proposal from Kathleen: http://www.ietf.org/mail-archive/web/cose/current/msg00077.html OLD: The Working Group will coordinate its progress with the ACE, DICE and CoRE working groups to ensure that we are fulfilling the needs of these constituencies. NEW: The Working Group will coordinate its progress with the ACE, DICE, CoRE and DIME working groups to ensure that we are fulfilling the needs of these constituencies. Thanks, Kind Regards Kepeng =D4=DA 15/4/15 2:32 am=A3=AC "Paul Hoffman" =D0=B4=C8=EB: >On Apr 14, 2015, at 11:20 AM, Jim Schaad wrote: >>=20 >> I would like to get Pull Request #2 rolled into the draft charter and >>then I think we are ready to send it to the ADs and IESG for review. >> =20 >> Since it is my pull request I have not done the merge preferring that >>it be done by one of the others who have permissions. If I get a >>message saying do the merge request I would be happy to pull the trigger >>on it. > >There seemed to be general agreement, so I accepted the pull request. > >Current version is at: >https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md > >--Paul Hoffman > >_______________________________________________ >Cose mailing list >Cose@ietf.org >https://www.ietf.org/mailman/listinfo/cose From nobody Tue Apr 14 19:12:12 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB0861B30C7 for ; Tue, 14 Apr 2015 19:12:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id und4EfDASAqN for ; Tue, 14 Apr 2015 19:12:10 -0700 (PDT) Received: from smtp2.pacifier.net (smtp2.pacifier.net [64.255.237.172]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D72631B30C5 for ; Tue, 14 Apr 2015 19:12:09 -0700 (PDT) Received: from Philemon (unknown [4.30.143.226]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp2.pacifier.net (Postfix) with ESMTPSA id EB12F2C9B7; Tue, 14 Apr 2015 19:12:08 -0700 (PDT) From: "Jim Schaad" To: "'Kepeng Li'" , "'Paul Hoffman'" References: <043201d076df$aa87b770$ff972650$@augustcellars.com> <50A4152F-E8F1-4890-AD03-065899ACC3BB@vpnc.org> In-Reply-To: Date: Tue, 14 Apr 2015 19:10:56 -0700 Message-ID: <04c701d07721$69175fb0$3b461f10$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-2022-jp" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Content-Language: en-us Thread-Index: AQHQPHasz7knjv+nJda5/t/ZvlDMAAEZOK9bArBs0b+dL3tugA== Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Charter State X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2015 02:12:11 -0000 > -----Original Message----- > From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kepeng Li > Sent: Tuesday, April 14, 2015 6:59 PM > To: Paul Hoffman; Jim Schaad > Cc: cose@ietf.org > Subject: Re: [Cose] Charter State > > Thanks Paul. > > There are two other changes we might want to incorporate: > > 1) Proposal from Goran: > http://www.ietf.org/mail-archive/web/cose/current/msg00027.html > > OLD: > "a standards-track specification covering the same cryptographic formats from > JOSE, expressed in CBOR" > > NEW: > "a standards-track specification covering the same cryptographic formats from > JOSE and optimizations for constrained device processing, expressed in CBOR$B!I(B I am agnostic about including this change. We now are much more constrained device focused later so it might not be needed. > > (2) Proposal from Kathleen: > > http://www.ietf.org/mail-archive/web/cose/current/msg00077.html > > OLD: > The Working Group will coordinate its progress with the ACE, DICE and CoRE > working groups to ensure that we are fulfilling the needs of these > constituencies. > > NEW: > The Working Group will coordinate its progress with the ACE, DICE, CoRE and > DIME working groups to ensure that we are fulfilling the needs of these > constituencies. I am not sure that DIME is a reasonable group to be coordinating with since it is not clear that this would be the solution space they are going to operate in. It is true that this need something along these lines, but what they need first is to get someone who has good knowledge of what can be done in the group first. Given that this is major (telecom) vendors, using CMS might be a better fit for this The other question if we expand this list here rather than in the wiki is the set of groups that Rene Struik though that might be included here such as "6TiSCH, 6lo, RoLL, etc" which seem to be much closer to the types of groups that might use this specification going forward. At this point, I think I would go with the list we have and start adding more groups to the wiki. Jim > > > Thanks, > > Kind Regards > Kepeng > > $B:_(B 15/4/15 2:32 am$B!$(B "Paul Hoffman" $B > >On Apr 14, 2015, at 11:20 AM, Jim Schaad wrote: > >> > >> I would like to get Pull Request #2 rolled into the draft charter and > >>then I think we are ready to send it to the ADs and IESG for review. > >> > >> Since it is my pull request I have not done the merge preferring that > >>it be done by one of the others who have permissions. If I get a > >>message saying do the merge request I would be happy to pull the > >>trigger on it. > > > >There seemed to be general agreement, so I accepted the pull request. > > > >Current version is at: > >https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md > > > >--Paul Hoffman > > > >_______________________________________________ > >Cose mailing list > >Cose@ietf.org > >https://www.ietf.org/mailman/listinfo/cose > > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Tue Apr 14 19:17:14 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 40AEC1B30EB for ; Tue, 14 Apr 2015 19:17:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XeStMj7Xx2xU for ; Tue, 14 Apr 2015 19:17:11 -0700 (PDT) Received: from mail-qk0-x22f.google.com (mail-qk0-x22f.google.com [IPv6:2607:f8b0:400d:c09::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 135AC1B30AE for ; Tue, 14 Apr 2015 19:17:11 -0700 (PDT) Received: by qkgx75 with SMTP id x75so50548259qkg.1 for ; Tue, 14 Apr 2015 19:17:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:mime-version:subject:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=k+sJReoIz2IHxKwgVTE5ZHEI4V7TvDc9vhJVoXZyNzk=; b=nwlXU3gD/8JGoPU6FQ0sQZ9dawnu9EKvvUCP5ASJvcJXIVAVyz2VDdYOK6FVqtb46K PasLsFMSC69dyeLiAdfGrjUA71E3D2nqzxHsAirBae/mdOVo3/DQF5oxZwttniMCyZF9 WqLzQCEpyI1080DZUS5zg8MQxn4hDImuErvYQsdemsuLFwIOpVimi+8Xl3ffkd7GOktP dpEfrZ++skabMryYrB2zS6C63ih6Q0N0H3rGl7xOjJsvtgcw19nwc3XVIYXPiFE7rkOP yqJU8Kgyp0PaQjJLmhqgHrZk+19+94RmLdb12ciiXFPvHx7Crizg4z4F+t6uQ+UC+12n bV0g== X-Received: by 10.55.31.167 with SMTP id n39mr46469287qkh.59.1429064192590; Tue, 14 Apr 2015 19:16:32 -0700 (PDT) Received: from [192.168.1.3] (209-6-114-252.c3-0.arl-ubr1.sbo-arl.ma.cable.rcn.com. [209.6.114.252]) by mx.google.com with ESMTPSA id d64sm2164527qka.15.2015.04.14.19.16.30 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 14 Apr 2015 19:16:31 -0700 (PDT) From: Kathleen Moriarty X-Google-Original-From: Kathleen Moriarty Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (1.0) X-Mailer: iPhone Mail (11D257) In-Reply-To: <04c701d07721$69175fb0$3b461f10$@augustcellars.com> Date: Tue, 14 Apr 2015 22:16:31 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <566CD668-1A69-4D37-A04E-98025906759D@gmail.com> References: <043201d076df$aa87b770$ff972650$@augustcellars.com> <50A4152F-E8F1-4890-AD03-065899ACC3BB@vpnc.org> <04c701d07721$69175fb0$3b461f10$@augustcellars.com> To: Jim Schaad Archived-At: Cc: Kepeng Li , Paul Hoffman , "cose@ietf.org" Subject: Re: [Cose] Charter State X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2015 02:17:13 -0000 Sent from my iPhone > On Apr 14, 2015, at 10:10 PM, "Jim Schaad" wrote:= >=20 >=20 >=20 >> -----Original Message----- >> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kepeng Li >> Sent: Tuesday, April 14, 2015 6:59 PM >> To: Paul Hoffman; Jim Schaad >> Cc: cose@ietf.org >> Subject: Re: [Cose] Charter State >>=20 >> Thanks Paul. >>=20 >> There are two other changes we might want to incorporate: >>=20 >> 1) Proposal from Goran: >> http://www.ietf.org/mail-archive/web/cose/current/msg00027.html >>=20 >> OLD: >> "a standards-track specification covering the same cryptographic formats > from >> JOSE, expressed in CBOR" >>=20 >> NEW: >> "a standards-track specification covering the same cryptographic formats > from >> JOSE and optimizations for constrained device processing, expressed in > CBOR=E2=80=9D >=20 > I am agnostic about including this change. We now are much more constrain= ed > device focused later so it might not be needed. >=20 >>=20 >> (2) Proposal from Kathleen: >>=20 >> http://www.ietf.org/mail-archive/web/cose/current/msg00077.html >>=20 >> OLD: >> The Working Group will coordinate its progress with the ACE, DICE and CoR= E >> working groups to ensure that we are fulfilling the needs of these >> constituencies. >>=20 >> NEW: >> The Working Group will coordinate its progress with the ACE, DICE, CoRE > and >> DIME working groups to ensure that we are fulfilling the needs of these >> constituencies. >=20 > I am not sure that DIME is a reasonable group to be coordinating with sinc= e > it is not clear that this would be the solution space they are going to > operate in. It is true that this need something along these lines, but wh= at > they need first is to get someone who has good knowledge of what can be do= ne > in the group first. Given that this is major (telecom) vendors, using CMS= > might be a better fit for this >=20 > The other question if we expand this list here rather than in the wiki is > the set of groups that Rene Struik though that might be included here such= > as "6TiSCH, 6lo, RoLL, etc" which seem to be much closer to the types of > groups that might use this specification going forward. >=20 > At this point, I think I would go with the list we have and start adding > more groups to the wiki. I'm fine with that approach. My point in bringing up DIME was more that the= y need help and this *could* help them, but work needs to be done to figure o= ut what they need at this point. I brought it up just in case it's relevant= to COSE. Thanks, Kathleen=20 >=20 > Jim >=20 >>=20 >>=20 >> Thanks, >>=20 >> Kind Regards >> Kepeng >>=20 >> =E5=9C=A8 15/4/15 2:32 am=EF=BC=8C "Paul Hoffman" = =E5=86=99=E5=85=A5: >>=20 >>> On Apr 14, 2015, at 11:20 AM, Jim Schaad wrote:= >>>>=20 >>>> I would like to get Pull Request #2 rolled into the draft charter and >>>> then I think we are ready to send it to the ADs and IESG for review. >>>>=20 >>>> Since it is my pull request I have not done the merge preferring that >>>> it be done by one of the others who have permissions. If I get a >>>> message saying do the merge request I would be happy to pull the >>>> trigger on it. >>>=20 >>> There seemed to be general agreement, so I accepted the pull request. >>>=20 >>> Current version is at: >>> https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md >>>=20 >>> --Paul Hoffman >>>=20 >>> _______________________________________________ >>> Cose mailing list >>> Cose@ietf.org >>> https://www.ietf.org/mailman/listinfo/cose >>=20 >>=20 >> _______________________________________________ >> Cose mailing list >> Cose@ietf.org >> https://www.ietf.org/mailman/listinfo/cose >=20 > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Tue Apr 14 19:29:51 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ADA071A8758 for ; Tue, 14 Apr 2015 19:29:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZUo2stRho0iq for ; Tue, 14 Apr 2015 19:29:47 -0700 (PDT) Received: from out4133-130.mail.aliyun.com (out4133-130.mail.aliyun.com [42.120.133.130]) by ietfa.amsl.com (Postfix) with ESMTP id C918C1A6F3F for ; Tue, 14 Apr 2015 19:29:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alibaba-inc.com; s=default; t=1429064985; h=Date:Subject:From:To:Message-ID:Mime-version:Content-type; bh=RSfy7COPI8waZzBXXI96xFz3M02yaeOmBXmGrplxoTg=; b=HHE4sUOfknj3PwW0SmpSvezJEAmpS7JNoDun1rZAQBQ4ChnQrBVS7Vx44j79FHnrIaSrs556cKwjL+/YMP/UlFxbi5BO7xqbgt2kLQac4LsqjSL5k2iyxoSPAwqeAAIe2E5wAxdYM+P13k8sdXmN//8C1Ky57qY14Cs15FWNtbM= X-Alimail-AntiSpam: AC=PASS; BC=-1|-1; BR=01201311R921e4; FP=0|-1|-1|-1|0|-1|-1|-1; HT=r46d02002; MF=kepeng.lkp@alibaba-inc.com; PH=DS; RN=1; RT=1; SR=0; Received: from 10.1.144.239(mailfrom:kepeng.lkp@alibaba-inc.com ip:42.120.74.182) by smtp.aliyun-inc.com(127.0.0.1); Wed, 15 Apr 2015 10:29:40 +0800 User-Agent: Microsoft-MacOutlook/14.4.8.150116 Date: Wed, 15 Apr 2015 10:29:36 +0800 From: "Kepeng Li" To: "cose@ietf.org" Message-ID: Thread-Topic: COSE Draft Charter - 20140415 Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3511938580_5977711" Archived-At: Subject: [Cose] COSE Draft Charter - 20140415 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2015 02:29:49 -0000 > ʼʹ MIME ʽʼĶʶ ˸ʽˣ޷ʶʼķֲ򲿷ݡ --B_3511938580_5977711 Content-type: text/plain; charset="GB2312" Content-transfer-encoding: 7bit Hello all, According to the recent discussions, here is the latest charter: https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md I also copy the texts below. Please check the new charter and let us know if it is ready to be submitted to our ADs. Thanks, Kind Regards Kepeng ---------------------------------------------------------------------------- ---- CBOR Object Signing and Encryption (COSE) Charter for Working Group Concise Binary Object Representation (CBOR, RFC 7049) is a concise binary format for the serialization of data structured to an extended version of the JSON data model. One motivation for CBOR was to make this data model more amenable to constrained nodes and constrained node networks (RFC 7228). The JOSE working group recently completed producing representations for cryptographic keys, message authentication (MACs), encryption, and digital signatures, using JSON representation. This working group will reuse the work done by JOSE, adapting it to the capabilities of CBOR. This will rely on the JOSE registries, which, where this provides additional efficiency, will be expanded with additional information. The resulting formats will not be cryptographically convertible from or to JOSE formats. This lack of a need for bit-for-bit compabitility which will enable some simplification in the adaptation process. Criteria that should be considered on making decisions in changing from a JSON to a CBOR encoding are: * Keeping the current JOSE paradigms and formatting where feasible. * * Minimizing message size, code size and computational complexity should be considered (for the constrained environments where we expect to use this). * * Improving security * * Providing new functionality that uses of JOSE did not require, but are required for the new use cases. Issues dealing with key management and binding of keys to identities are out of scope for the working group. The Working group will coordinate its progress with the ACE, DICE and CORE working groups to ensure that we are fulfilling the needs of these constituencies. Other groups may be added to this list as the set of use cases is expanded. The WG will have two deliverables: * a standards-track specification covering the same cryptographic formats from JOSE, with optimizations for constrained device processing, expressed in CBOR; * registration for algorithms (such as AES-CCM-8) that are appropriate for constrained environments. The Working Group will use a wiki to track desired use cases for its work, but does not intend to publish this as an RFC. Milestones * April 2015: Submit COSE specification as a WG item * * April 2015: Submit COSE constrained-appropriate algorithms as a WG item * * June 2015: Submit COSE specification to the IESG, for publication as a Proposed Standard * * July 2015: Submit COSE constrained-appropriate algorithms to the IESG, for publication as a Proposed Standard --B_3511938580_5977711 Content-type: text/html; charset="GB2312" Content-transfer-encoding: quoted-printable
Hello all,

According to the recent discussions, here is the latest cha= rter:
https= ://github.com/cose-spec/wg-charter/blob/master/draft-charter.md

I also copy the texts below.<= /div>

<= div style=3D"font-family: =CB=CE=CC=E5, monospace; font-size: 12px;">Please check the = new charter and let us know if it is ready to be submitted to our ADs. =

=
Thanks,

Kind Regards
Kepeng
---------------------------= -----------------------------------------------------

Charter for Worki= ng Group

Concise Binary Object Representation = (CBOR, RFC 7049) is a concise binary format for the serialization of data st= ructured to an extended version of the JSON data model. One motivation for C= BOR was to make this data model more amenable to constrained nodes and const= rained node networks (RFC 7228).

The JOSE worki= ng group recently completed producing representations for cryptographic keys= , message authentication (MACs), encryption, and digital signatures, using J= SON representation. This working group will reuse the work done by JOSE, ada= pting it to the capabilities of CBOR. This will rely on the JOSE registries,= which, where this provides additional efficiency, will be expanded with add= itional information.

The resulting formats will= not be cryptographically convertible from or to JOSE formats. This lack of = a need for bit-for-bit compabitility which will enable some simplification i= n the adaptation process.

Criteria that should = be considered on making decisions in changing from a JSON to a CBOR encoding= are: 

  • Keeping the current JOSE paradig= ms and formatting where feasible.

  • = Minimizing message size, code size and computational complexity should be co= nsidered (for the constrained environments where we expect to use this).

    =

  • Improving security

  • Providing new functionality that uses of JOSE did no= t require, but are required for the new use cases.

Issues dealing with key management and binding of keys to iden= tities are out of scope for the working group.

= The Working group will coordinate its progress with the ACE, DICE and CORE w= orking groups to ensure that we are fulfilling the needs of these constituen= cies. Other groups may be added to this list as the set of use cases is expa= nded.

The WG will have two deliverables:

  • a standards-track specification covering the sam= e cryptographic formats from JOSE, with optimizations for constrained device= processing, expressed in CBOR;
  • regi= stration for algorithms (such as AES-CCM-8) that are appropriate for constra= ined environments.

    • The Working Group will= use a wiki to track desired use cases for its work, but does not intend to = publish this as an RFC.

    Milestones

    • April 2015: Submit COSE specificati= on as a WG item

    • April 2015: Submit= COSE constrained-appropriate algorithms as a WG item

    • June 2015: Submit COSE specification to the IESG, for pu= blication as a Proposed Standard

    • J= uly 2015: Submit COSE constrained-appropriate algorithms to the IESG, for pu= blication as a Proposed Standard

    --B_3511938580_5977711-- From nobody Wed Apr 15 11:21:12 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E553B1A0233 for ; Wed, 15 Apr 2015 11:21:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.289 X-Spam-Level: X-Spam-Status: No, score=-1.289 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_ORG=0.611] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VoSrmoc5OPVV for ; Wed, 15 Apr 2015 11:21:10 -0700 (PDT) Received: from mail2.ihtfp.org (MAIL2.IHTFP.ORG [204.107.200.7]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D8A3E1A0217 for ; Wed, 15 Apr 2015 11:21:09 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail2.ihtfp.org (Postfix) with ESMTP id BD2D6E2038; Wed, 15 Apr 2015 14:21:08 -0400 (EDT) Received: from mail2.ihtfp.org ([127.0.0.1]) by localhost (mail2.ihtfp.org [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 03289-09; Wed, 15 Apr 2015 14:21:06 -0400 (EDT) Received: from securerf.ihtfp.org (unknown [IPv6:fe80::ea2a:eaff:fe7d:235]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mocana.ihtfp.org", Issuer "IHTFP Consulting Certification Authority" (verified OK)) by mail2.ihtfp.org (Postfix) with ESMTPS id 94B4FE2035; Wed, 15 Apr 2015 14:21:06 -0400 (EDT) Received: (from warlord@localhost) by securerf.ihtfp.org (8.14.8/8.14.8/Submit) id t3FIL5X6025348; Wed, 15 Apr 2015 14:21:05 -0400 From: Derek Atkins To: "Kepeng Li" References: Date: Wed, 15 Apr 2015 14:21:04 -0400 In-Reply-To: (Kepeng Li's message of "Wed, 15 Apr 2015 10:29:36 +0800") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Virus-Scanned: Maia Mailguard 1.0.2a Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] COSE Draft Charter - 20140415 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2015 18:21:11 -0000 Hi, "Kepeng Li" writes: [snip] I'm fine with the wording of the proposed charter, however... > Milestones > > * April 2015: Submit COSE specification as a WG item > > * April 2015: Submit COSE constrained-appropriate algorithms as a WG item > > * June 2015: Submit COSE specification to the IESG, for publication as a > Proposed Standard > > * July 2015: Submit COSE constrained-appropriate algorithms to the IESG, for > publication as a Proposed Standard Do we really think these are reasonable milestones? Considering it's already April 15th, I suspect we wont get the first two items until May. That will also delay the rest; I'd push the latter two items back a bit further, maybe August and September. That also gives us time to talk as a WG in Prague. -derek -- Derek Atkins 617-623-3745 derek@ihtfp.com www.ihtfp.com Computer and Internet Security Consultant From nobody Wed Apr 15 12:20:17 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 385DB1A88C0 for ; Wed, 15 Apr 2015 12:20:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DSqsxYoaGAhu for ; Wed, 15 Apr 2015 12:20:14 -0700 (PDT) Received: from mail-la0-x22f.google.com (mail-la0-x22f.google.com [IPv6:2a00:1450:4010:c03::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 266381A88AD for ; Wed, 15 Apr 2015 12:20:14 -0700 (PDT) Received: by labbd9 with SMTP id bd9so40415049lab.2 for ; Wed, 15 Apr 2015 12:20:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=B6j2LIUs82Q59loISSeG0iM7yC1mJBDafRTaPfhCI+c=; b=mgP7h1tVRU9TXiGPqLqLev0XydFDNgIblLZBCgj/amkCB0k6M1ryntS8zke7kkJl4M +tnlwwdraR1M9432lluNTix1ZhhvXggoVDVdgZ+lsWJaCWgscmSkfXPPPxozceG93piE E4RWG/xNzeXiawXqmVWhxNGxNnVkpWXAaIoM8/345Zqo6OYQLGFsA7s2U5d+024HQOqU eVPZAQJ1WROCjKEjSULGhNp15izviOBiKJjDPWYlXFw5ISQzyxulcUM2bHZRuaeY5U/W DMdp3686wkABR2lM6OyNKShwiJqipOJgp5QIMFGfOmTXicvwe78E2FmNNMdl/Iss1Ovl UZhg== MIME-Version: 1.0 X-Received: by 10.112.29.36 with SMTP id g4mr25852368lbh.56.1429125612679; Wed, 15 Apr 2015 12:20:12 -0700 (PDT) Received: by 10.112.11.199 with HTTP; Wed, 15 Apr 2015 12:20:12 -0700 (PDT) In-Reply-To: References: Date: Wed, 15 Apr 2015 15:20:12 -0400 Message-ID: From: Kathleen Moriarty To: Derek Atkins Content-Type: multipart/alternative; boundary=001a1133f9947bb87b0513c83c7e Archived-At: Cc: Kepeng Li , "cose@ietf.org" Subject: Re: [Cose] COSE Draft Charter - 20140415 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2015 19:20:17 -0000 --001a1133f9947bb87b0513c83c7e Content-Type: text/plain; charset=UTF-8 On Wed, Apr 15, 2015 at 2:21 PM, Derek Atkins wrote: > Hi, > > "Kepeng Li" writes: > > [snip] > > I'm fine with the wording of the proposed charter, however... > > > Milestones > > > > * April 2015: Submit COSE specification as a WG item > > > > * April 2015: Submit COSE constrained-appropriate algorithms as a WG > item > > > > * June 2015: Submit COSE specification to the IESG, for publication as > a > > Proposed Standard > > > > * July 2015: Submit COSE constrained-appropriate algorithms to the > IESG, for > > publication as a Proposed Standard > > Do we really think these are reasonable milestones? Considering it's > already April 15th, I suspect we wont get the first two items until May. > That will also delay the rest; I'd push the latter two items back a bit > further, maybe August and September. > > That also gives us time to talk as a WG in Prague. > I love the ambitious schedule, but agree with Derek. We have to form the WG before you can accept the specification as a WG item. Let's finalize the charter and I'll work on that approval process. It would be good for this list to work on the draft so the ambitious schedule can be met, even with pushing it out a month or two. Thank you, Kathleen > > -derek > -- > Derek Atkins 617-623-3745 > derek@ihtfp.com www.ihtfp.com > Computer and Internet Security Consultant > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose > -- Best regards, Kathleen --001a1133f9947bb87b0513c83c7e Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable


    On Wed, Apr 15, 2015 at 2:21 PM, Derek Atkins <derek@ihtfp.com> wrote:
    Hi,

    "Kepeng Li" <kep= eng.lkp@alibaba-inc.com> writes:

    [snip]

    I'm fine with the wording of the proposed charter, however...

    >=C2=A0 Milestones
    >
    >=C2=A0 =C2=A0* April 2015: Submit COSE specification as a WG item
    >
    >=C2=A0 =C2=A0* April 2015: Submit COSE constrained-appropriate algorith= ms as a WG item
    >
    >=C2=A0 =C2=A0* June 2015: Submit COSE specification to the IESG, for pu= blication as a
    >=C2=A0 =C2=A0 =C2=A0Proposed Standard
    >
    >=C2=A0 =C2=A0* July 2015: Submit COSE constrained-appropriate algorithm= s to the IESG, for
    >=C2=A0 =C2=A0 =C2=A0publication as a Proposed Standard=

    Do we really think these are reasonable milestones?=C2=A0 Considerin= g it's
    already April 15th, I suspect we wont get the first two items until May. That will also delay the rest; I'd push the latter two items back a bit=
    further, maybe August and September.

    That also gives us time to talk as a WG in Prague.
    I love the ambitious schedule, but agree with Derek.=C2=A0 We h= ave to form the WG before you can accept the specification as a WG item.=C2= =A0 Let's finalize the charter and I'll work on that approval proce= ss.

    It would be good for this list to work on the = draft so the ambitious schedule can be met, even with pushing it out a mont= h or two.

    Thank you,
    Kathleen=C2=A0

    -derek
    --
    =C2=A0 =C2=A0 =C2=A0 =C2=A0Derek Atkins=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0617-623-3745
    =C2=A0 =C2=A0 =C2=A0 =C2=A0derek@ihtfp.c= om=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0www.ihtfp.com
    =C2=A0 =C2=A0 =C2=A0 =C2=A0Computer and Internet Security Consultant

    _______________________________________________
    Cose mailing list
    Cose@ietf.org
    ht= tps://www.ietf.org/mailman/listinfo/cose



    --

    Best regards,
    Kathleen
    --001a1133f9947bb87b0513c83c7e-- From nobody Wed Apr 15 15:57:51 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 21A5F1AC3CE for ; Wed, 15 Apr 2015 15:57:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t7yzKqxEoW8T for ; Wed, 15 Apr 2015 15:57:48 -0700 (PDT) Received: from smtp1.pacifier.net (smtp1.pacifier.net [64.255.237.171]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5273D1AC3C9 for ; Wed, 15 Apr 2015 15:57:48 -0700 (PDT) Received: from Philemon (unknown [4.30.143.226]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp1.pacifier.net (Postfix) with ESMTPSA id 64ABF2CA55; Wed, 15 Apr 2015 15:57:47 -0700 (PDT) From: "Jim Schaad" To: "'Derek Atkins'" , "'Kepeng Li'" References: In-Reply-To: Date: Wed, 15 Apr 2015 15:56:33 -0700 Message-ID: <058f01d077cf$6be3c810$43ab5830$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Content-Language: en-us Thread-Index: AQGsGFgKgWcqGKnMNOHXmPKST+vcYgJVsJoqnYSnEAA= Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] COSE Draft Charter - 20140415 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Apr 2015 22:57:50 -0000 > -----Original Message----- > From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Derek Atkins > Sent: Wednesday, April 15, 2015 11:21 AM > To: Kepeng Li > Cc: cose@ietf.org > Subject: Re: [Cose] COSE Draft Charter - 20140415 > > Hi, > > "Kepeng Li" writes: > > [snip] > > I'm fine with the wording of the proposed charter, however... > > > Milestones > > > > * April 2015: Submit COSE specification as a WG item > > > > * April 2015: Submit COSE constrained-appropriate algorithms as a WG > > item > > > > * June 2015: Submit COSE specification to the IESG, for publication as a > > Proposed Standard > > > > * July 2015: Submit COSE constrained-appropriate algorithms to the IESG, > for > > publication as a Proposed Standard > > Do we really think these are reasonable milestones? Considering it's already > April 15th, I suspect we wont get the first two items until May. > That will also delay the rest; I'd push the latter two items back a bit further, > maybe August and September. Given that we don't have a working group yet, it might be just as easy to reset the dates in terms of milestones - specifically change April to working group formation date and set the next milestones to 5 months later. I could have the basic structure of the algorithm draft out in a very short amount of time. The real discussions around that document are which of the multiple algorithms should be included in it and which are better left to other groups to define instead. That is going to be partially based on the different requirements from the groups that are looking to use the format, and for many of them I don't know that it is clear to them what algorithms they really want. > > That also gives us time to talk as a WG in Prague. I kind of hope that we don't have much if anything to talk about in Prague. I kind of expect that I will be somewhat busy trying to do other things like talking to other groups and people who might want to adopt the format into their products. Jim > > -derek > -- > Derek Atkins 617-623-3745 > derek@ihtfp.com www.ihtfp.com > Computer and Internet Security Consultant > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Wed Apr 15 23:59:54 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B2711A86FF for ; Wed, 15 Apr 2015 23:59:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.26 X-Spam-Level: X-Spam-Status: No, score=-2.26 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_LOW=-0.7, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fq14i6O3zJw7 for ; Wed, 15 Apr 2015 23:59:51 -0700 (PDT) Received: from outbox.sics.se (outbox.sics.se [193.10.64.137]) by ietfa.amsl.com (Postfix) with ESMTP id EA1441B2A19 for ; Wed, 15 Apr 2015 23:59:50 -0700 (PDT) Received: from e-mailfilter01.sunet.se (e-mailfilter01.sunet.se [192.36.171.201]) by outbox.sics.se (Postfix) with ESMTPS id 7C92F7703 for ; Thu, 16 Apr 2015 08:59:48 +0200 (CEST) Received: from norm.sics.se (norm.sics.se [193.10.64.192]) by e-mailfilter01.sunet.se (8.14.4/8.14.4/Debian-4) with ESMTP id t3G6xmAR014206 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for ; Thu, 16 Apr 2015 08:59:48 +0200 Received: from [192.168.0.108] (unknown [85.235.11.178]) by norm.sics.se (Postfix) with ESMTPSA id 13F3286 for ; Thu, 16 Apr 2015 08:59:48 +0200 (CEST) Message-ID: <552F5DDC.9030808@sics.se> Date: Thu, 16 Apr 2015 08:59:40 +0200 From: Ludwig Seitz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: cose@ietf.org References: In-Reply-To: Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms040300070203000901010100" X-Bayes-Prob: 0.0001 (Score 0, tokens from: outbound, outbound-sics-se:default, sics-se:default, base:default, @@RPTN) X-p0f-Info: os=Linux 2.2.x-3.x, link=Ethernet or modem X-CanIt-Geo: =?UTF-8?Q?ip=3D85.235.11.178; _country=3DSE; _region=3DSk=C3=A5ne; _city=3DLund; _latitude=3D55.7028; _longitude=3D13.1927; _http://maps.google.com/maps=3Fq=3D55.7028,13.1927&z=3D6?= X-CanItPRO-Stream: outbound-sics-se:outbound (inherits from outbound-sics-se:default, sics-se:default, base:default) X-Canit-Stats-ID: 09OguXMHd - 359da9278850 - 20150416 X-Antispam-Training-Forget: https://canit.sunet.se/canit/b.php?i=09OguXMHd&m=359da9278850&t=20150416&c=f X-Antispam-Training-Nonspam: https://canit.sunet.se/canit/b.php?i=09OguXMHd&m=359da9278850&t=20150416&c=n X-Antispam-Training-Spam: https://canit.sunet.se/canit/b.php?i=09OguXMHd&m=359da9278850&t=20150416&c=s X-CanIt-Archive-Cluster: PfMRe/vJWMiXwM2YIH5BVExnUnw Received-SPF: neutral (e-mailfilter01.sunet.se: 85.235.11.178 is neither permitted nor denied by domain ludwig@sics.se) receiver=e-mailfilter01.sunet.se; client-ip=85.235.11.178; envelope-from=; helo=norm.sics.se; identity=mailfrom X-Scanned-By: CanIt (www . roaringpenguin . com) on 192.36.171.201 Archived-At: Subject: Re: [Cose] COSE Draft Charter - 20140415 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Apr 2015 06:59:53 -0000 This is a cryptographically signed message in MIME format. --------------ms040300070203000901010100 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: quoted-printable On 04/15/2015 04:29 AM, Kepeng Li wrote: > Hello all, > > According to the recent discussions, here is the latest charter: > https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md > > I also copy the texts below. > > Please check the new charter and let us know if it is ready to be > submitted to our ADs. > > Thanks, > > Kind Regards > Kepeng I'm also fine with the charter, but I second Derek's doubts about the=20 Milestone schedule. Regards, Ludwig --=20 Ludwig Seitz, PhD SICS Swedish ICT AB Ideon Science Park Building Beta 2 Scheelev=E4gen 17 SE-223 70 Lund Phone +46(0)70-349 92 51 http://www.sics.se --------------ms040300070203000901010100 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMVDCC BhgwggUAoAMCAQICAwyGmDANBgkqhkiG9w0BAQUFADCBjDELMAkGA1UEBhMCSUwxFjAUBgNV BAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRl IFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlh dGUgQ2xpZW50IENBMB4XDTE1MDEwODA4MzkwNloXDTE2MDEwOTIyNDEzMFowODEXMBUGA1UE AwwObHVkd2lnQHNpY3Muc2UxHTAbBgkqhkiG9w0BCQEWDmx1ZHdpZ0BzaWNzLnNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUHisC6rgXFsBHHBGo8ulz/cLX3gX5Ufhcwo rp+7djzMMuKPM1KOHq0bjWhmFe8ly8CzWdk2NS600t7IEBQWJiHLsdc12UqmNswQUpD7oqkR 1nRGT6leAHYTWapkR+nczZ2NxD+H7u4ZWVIZg0DFiTqtY8ghYHHYYy8BBoc/jHG78X4+JJAg s5XOa0gVl7W38vDvVpo14xhWEBGjzPk9WxWirqAF66PF+JEu2JD9LzFbpEq829SRXJMFB9wp oQNlH0UQ01/2sWCIBxPpHuEjxEF/V3Z/F2VsNTy4zvYrd+/MYO3w30F+bWQNZsMHEkTW1pEh iz7rQPWTBXoO8Fv0wQIDAQABo4IC1DCCAtAwCQYDVR0TBAIwADALBgNVHQ8EBAMCBLAwHQYD VR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMB0GA1UdDgQWBBTqvKspqEm0E4R1sgsABYKk 6xDJqDAfBgNVHSMEGDAWgBRTcu2SnODaywFcfH6WNU7y1LhRgjAZBgNVHREEEjAQgQ5sdWR3 aWdAc2ljcy5zZTCCAUwGA1UdIASCAUMwggE/MIIBOwYLKwYBBAGBtTcBAgMwggEqMC4GCCsG AQUFBwIBFiJodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRmMIH3BggrBgEFBQcC AjCB6jAnFiBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTADAgEBGoG+VGhpcyBj ZXJ0aWZpY2F0ZSB3YXMgaXNzdWVkIGFjY29yZGluZyB0byB0aGUgQ2xhc3MgMSBWYWxpZGF0 aW9uIHJlcXVpcmVtZW50cyBvZiB0aGUgU3RhcnRDb20gQ0EgcG9saWN5LCByZWxpYW5jZSBv bmx5IGZvciB0aGUgaW50ZW5kZWQgcHVycG9zZSBpbiBjb21wbGlhbmNlIG9mIHRoZSByZWx5 aW5nIHBhcnR5IG9ibGlnYXRpb25zLjA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vY3JsLnN0 YXJ0c3NsLmNvbS9jcnR1MS1jcmwuY3JsMIGOBggrBgEFBQcBAQSBgTB/MDkGCCsGAQUFBzAB hi1odHRwOi8vb2NzcC5zdGFydHNzbC5jb20vc3ViL2NsYXNzMS9jbGllbnQvY2EwQgYIKwYB BQUHMAKGNmh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL3N1Yi5jbGFzczEuY2xpZW50 LmNhLmNydDAjBgNVHRIEHDAahhhodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS8wDQYJKoZIhvcN AQEFBQADggEBAGXwFsbSfv4mMWqIk64CoxuR6ozo7J37igca7d9tpKIzVIp6xp7Zt+a+J9X3 1r4zgMRFnZJWQ5hy82W/fVDeG9i3NGMM6p7DNUrGjTbVHd11BQtbUOG9MSlyWKQbmt3Q1ElC f4SRLAQot5SPryLR2FTxQuFkMOrcDzVxNxnMgatOM2fAO8KS0H+wX+I7gC3pEnbg/eMqNgU+ Ktbc2y9naDNmLNLN65s8TT9xZyoQEn9S1oU8Xnh596OMu49Eccws8Ny+vAGESIHG4bqhMSjj rmDilL1Wj9nQahmBnID5oZD5g9s9KyqxiZIGNnowYYOpCrSeITZ1b7wg50dC8ySojnYwggY0 MIIEHKADAgECAgEeMA0GCSqGSIb3DQEBBQUAMH0xCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1T dGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWdu aW5nMSkwJwYDVQQDEyBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wNzEw MjQyMTAxNTVaFw0xNzEwMjQyMTAxNTVaMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3Rh cnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmlu ZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGll bnQgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCYPMzi3YGrEppC4Tq5a+ ijKDjKaIQZZVR63UbxIP6uq/I0fhCu+cQhoUfE6ERKKnu8zPf1Jwuk0tsvVCk6U9b+0UjM0d Lep3ZdE1gblK/1FwYT5Pipsu2yOMluLqwvsuz9/9f1+1PKHG/FaR/wpbfuIqu54qzHDYeqiU fsYzoVflR80DAC7hmJ+SmZnNTWyUGHJbBpA8Q89lGxahNvuryGaC/o2/ceD2uYDX9U8Eg5Dp IpGQdcbQeGarV04WgAUjjXX5r/2dabmtxWMZwhZna//jdiSyrrSMTGKkDiXm6/3/4ebfeZuC YKzN2P8O2F/Xe2AC/Y7zeEsnR7FOp+uXAgMBAAGjggGtMIIBqTAPBgNVHRMBAf8EBTADAQH/ MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUU3Ltkpzg2ssBXHx+ljVO8tS4UYIwHwYDVR0j BBgwFoAUTgvvGqRAW6UXaYcwyjRoQ9BBrvIwZgYIKwYBBQUHAQEEWjBYMCcGCCsGAQUFBzAB hhtodHRwOi8vb2NzcC5zdGFydHNzbC5jb20vY2EwLQYIKwYBBQUHMAKGIWh0dHA6Ly93d3cu c3RhcnRzc2wuY29tL3Nmc2NhLmNydDBbBgNVHR8EVDBSMCegJaAjhiFodHRwOi8vd3d3LnN0 YXJ0c3NsLmNvbS9zZnNjYS5jcmwwJ6AloCOGIWh0dHA6Ly9jcmwuc3RhcnRzc2wuY29tL3Nm c2NhLmNybDCBgAYDVR0gBHkwdzB1BgsrBgEEAYG1NwECATBmMC4GCCsGAQUFBwIBFiJodHRw Oi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRmMDQGCCsGAQUFBwIBFihodHRwOi8vd3d3 LnN0YXJ0c3NsLmNvbS9pbnRlcm1lZGlhdGUucGRmMA0GCSqGSIb3DQEBBQUAA4ICAQAKgwh9 eKssBly4Y4xerhy5I3dNoXHYfYa8PlVLL/qtXnkFgdtY1o95CfegFJTwqBBmf8pyTUnFsukD FUI22zF5bVHzuJ+GxhnSqN2sD1qetbYwBYK2iyYA5Pg7Er1A+hKMIzEzcduRkIMmCeUTyMyi kfbUFvIBivtvkR8ZFAk22BZy+pJfAoedO61HTz4qSfQoCRcLN5A0t4DkuVhTMXIzuQ8Cnykh ExD6x4e6ebIbrjZLb7L+ocR0y4YjCl/Pd4MXU91y0vTipgr/O75CDUHDRHCCKBVmz/Rzkc/b 970MEeHt5LC3NiWTgBSvrLEuVzBKM586YoRD9Dy3OHQgWI270g+5MYA8GfgI/EPT5G7xPbCD z+zjdH89PeR3U4So4lSXur6H6vp+m9TQXPF3a0LwZrp8MQ+Z77U1uL7TelWO5lApsbAonrqA SfTpaprFVkL4nyGH+NHST2ZJPWIBk81i6Vw0ny0qZW2Niy/QvVNKbb43A43ny076khXO7cNb BIRdJ/6qQNq9Bqb5C0Q5nEsFcj75oxQRqlKf6TcvGbjxkJh8BYtv9ePsXklAxtm8J7GCUBth HSQgepbkOexhJ0wP8imUkyiPHQ0GvEnd83129fZjoEhdGwXV27ioRKbj/cIq7JRXun0NbeY+ UdMYu9jGfIpDLtUUGSgsg2zMGs5R4jGCA90wggPZAgEBMIGUMIGMMQswCQYDVQQGEwJJTDEW MBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlm aWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVy bWVkaWF0ZSBDbGllbnQgQ0ECAwyGmDAJBgUrDgMCGgUAoIICHTAYBgkqhkiG9w0BCQMxCwYJ KoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNTA0MTYwNjU5NDBaMCMGCSqGSIb3DQEJBDEW BBQuXQ77vkuhn4OxGd8cveeYZey7lTBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjAL BglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFA MAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGlBgkrBgEEAYI3EAQxgZcwgZQwgYwxCzAJBgNV BAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRh bCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1h cnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQQIDDIaYMIGnBgsqhkiG9w0BCRACCzGBl6CBlDCB jDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3Vy ZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNz IDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgMMhpgwDQYJKoZIhvcNAQEBBQAE ggEAwmGbBmduYzivyRak8216/aQvBgz1OWdQRnYvFzgkppGAO5PXxa/y2WxI5V2bnCw71aoP RTynxBhmiCbtecjph39PxpIXRWdI/yRQtAcAZjQrmClk0Uxg2QYsy5k4gywVbuRiyVMpIkc3 pLdxmNFOWcuiAfnqrsgndjs7dVHrjWl9I0n4WxzdEMTcoYJ8UCJrsniLmfaAiZJklTentF2w g7l4GA/5fBAIb2MYmg8xaoQrCJTrESGUCUb/SI9jPFd5rx9/mwafQ3W0g5IetbLsaQWoFrPv uOhwtE4H8b2usZg+Cwce/rnICORRjkMMlLPXXnGTA86yWQ4Q+H+Le8zbSwAAAAAAAA== --------------ms040300070203000901010100-- From nobody Thu Apr 16 18:44:59 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A21C1A8A84 for ; Thu, 16 Apr 2015 18:44:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.451 X-Spam-Level: X-Spam-Status: No, score=0.451 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_CHARSET_FARAWAY=2.45, MIME_QP_LONG_LINE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RF7xb1lSW9Xu for ; Thu, 16 Apr 2015 18:44:56 -0700 (PDT) Received: from out4133-18.mail.aliyun.com (out4133-18.mail.aliyun.com [42.120.133.18]) by ietfa.amsl.com (Postfix) with ESMTP id DF6B41A8A7D for ; Thu, 16 Apr 2015 18:44:55 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alibaba-inc.com; s=default; t=1429235095; h=Date:Subject:From:To:Message-ID:Mime-version:Content-type; bh=VqyekwcaXZ1XfHrihrkUgVH90xtMhcCG1VTwwVH5BKc=; b=A5XFiSwy6KZnNbdQ//IoLzqsFY9egZISw1IC9BpXj8T1YcP027u/luAi+nnKu8EVapfruF7YmZfSL/YkwLVcR4K99I5o+87Xtn1OnS5sAvhk0tRsfUKKAf3fb1obQu66Mgjs9dRhwyFKfSiDeGQXwktF9zsTq7O058rPRLhLgYw= X-Alimail-AntiSpam: AC=PASS; BC=-1|-1; BR=01201311R441e4; FP=0|-1|-1|-1|0|-1|-1|-1; HT=r46d02011; MF=kepeng.lkp@alibaba-inc.com; PH=DS; RN=2; RT=2; SR=0; Received: from 10.22.52.213(mailfrom:kepeng.lkp@alibaba-inc.com ip:42.120.73.208) by smtp.aliyun-inc.com(127.0.0.1); Fri, 17 Apr 2015 09:44:50 +0800 User-Agent: Microsoft-MacOutlook/14.4.8.150116 Date: Fri, 17 Apr 2015 09:44:42 +0800 From: "Kepeng Li" To: Jim Schaad Message-ID: Thread-Topic: [Cose] COSE Draft Charter - 20140415 References: <058f01d077cf$6be3c810$43ab5830$@augustcellars.com> In-Reply-To: <058f01d077cf$6be3c810$43ab5830$@augustcellars.com> Mime-version: 1.0 Content-type: text/plain; charset="GB2312" Content-transfer-encoding: quoted-printable Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] COSE Draft Charter - 20140415 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Apr 2015 01:44:58 -0000 > specifically change April to working group formation date and set the >next milestones to 5 months later. Do you mean something like this: * WG formation date + 1 month: Submit COSE specification as a WG item * WG formation date + 5 month: Submit COSE constrained-appropriate algorithms as a WG item * WG formation date + 7 month: Submit COSE specification to the IESG, for publication as a Proposed Standard * WG formation date + 11 month: Submit COSE constrained-appropriate algorithms to the IESG, for publication as a Proposed Standard Thanks, Kind Regards Kepeng =D4=DA 16/4/15 6:56 am=A3=AC "Jim Schaad" =D0=B4=C8=EB: > > >> -----Original Message----- >> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Derek Atkins >> Sent: Wednesday, April 15, 2015 11:21 AM >> To: Kepeng Li >> Cc: cose@ietf.org >> Subject: Re: [Cose] COSE Draft Charter - 20140415 >>=20 >> Hi, >>=20 >> "Kepeng Li" writes: >>=20 >> [snip] >>=20 >> I'm fine with the wording of the proposed charter, however... >>=20 >> > Milestones >> > >> > * April 2015: Submit COSE specification as a WG item >> > >> > * April 2015: Submit COSE constrained-appropriate algorithms as a WG >> > item >> > >> > * June 2015: Submit COSE specification to the IESG, for publication >>as >a >> > Proposed Standard >> > >> > * July 2015: Submit COSE constrained-appropriate algorithms to the >IESG, >> for >> > publication as a Proposed Standard >>=20 >> Do we really think these are reasonable milestones? Considering it's >already >> April 15th, I suspect we wont get the first two items until May. >> That will also delay the rest; I'd push the latter two items back a bit >further, >> maybe August and September. > >Given that we don't have a working group yet, it might be just as easy to >reset the dates in terms of milestones - specifically change April to >working group formation date and set the next milestones to 5 months >later. > > >I could have the basic structure of the algorithm draft out in a very >short >amount of time. The real discussions around that document are which of >the >multiple algorithms should be included in it and which are better left to >other groups to define instead. That is going to be partially based on >the >different requirements from the groups that are looking to use the format, >and for many of them I don't know that it is clear to them what algorithms >they really want. > >>=20 >> That also gives us time to talk as a WG in Prague. > >I kind of hope that we don't have much if anything to talk about in >Prague. >I kind of expect that I will be somewhat busy trying to do other things >like >talking to other groups and people who might want to adopt the format into >their products. =20 > >Jim > >>=20 >> -derek >> -- >> Derek Atkins 617-623-3745 >> derek@ihtfp.com www.ihtfp.com >> Computer and Internet Security Consultant >>=20 >> _______________________________________________ >> Cose mailing list >> Cose@ietf.org >> https://www.ietf.org/mailman/listinfo/cose > >_______________________________________________ >Cose mailing list >Cose@ietf.org >https://www.ietf.org/mailman/listinfo/cose From nobody Thu Apr 16 19:43:25 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3BCF31A9150 for ; Thu, 16 Apr 2015 19:43:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hK6XX1x8M7zP for ; Thu, 16 Apr 2015 19:43:22 -0700 (PDT) Received: from smtp3.pacifier.net (smtp3.pacifier.net [64.255.237.177]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 120F51A90EB for ; Thu, 16 Apr 2015 19:43:05 -0700 (PDT) Received: from Philemon (unknown [50.109.252.111]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp3.pacifier.net (Postfix) with ESMTPSA id 1ED6038EA7; Thu, 16 Apr 2015 19:43:02 -0700 (PDT) From: "Jim Schaad" To: "'Kepeng Li'" References: <058f01d077cf$6be3c810$43ab5830$@augustcellars.com> In-Reply-To: Date: Thu, 16 Apr 2015 19:41:47 -0700 Message-ID: <010601d078b8$0f2fc990$2d8f5cb0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="iso-2022-jp" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQGsGFgKgWcqGKnMNOHXmPKST+vcYgJVsJoqAs8EYVYBe0hMBp1kPyGQ Content-Language: en-us Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] COSE Draft Charter - 20140415 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Apr 2015 02:43:25 -0000 > -----Original Message----- > From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kepeng Li > Sent: Thursday, April 16, 2015 6:45 PM > To: Jim Schaad > Cc: cose@ietf.org > Subject: Re: [Cose] COSE Draft Charter - 20140415 > > > specifically change April to working group formation date and set the > >next milestones to 5 months later. > > > Do you mean something like this: > * WG formation date + 1 month: Submit COSE specification as a WG item * WG formation date + 1 month: Submit COSE constrained-appropriate algorithms as a WG item * WG formation date + 6 month: Submit COSE specification to the IESG, for publication as a Proposed Standard * WG formation date + 6 month: Submit COSE constrained-appropriate algorithms to the IESG, for publication as a Proposed Standard Corrected to what I intended. Jim > > Thanks, > > Kind Regards > Kepeng > > > > $B:_(B 16/4/15 6:56 am$B!$(B "Jim Schaad" $B > > > > > >> -----Original Message----- > >> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Derek Atkins > >> Sent: Wednesday, April 15, 2015 11:21 AM > >> To: Kepeng Li > >> Cc: cose@ietf.org > >> Subject: Re: [Cose] COSE Draft Charter - 20140415 > >> > >> Hi, > >> > >> "Kepeng Li" writes: > >> > >> [snip] > >> > >> I'm fine with the wording of the proposed charter, however... > >> > >> > Milestones > >> > > >> > * April 2015: Submit COSE specification as a WG item > >> > > >> > * April 2015: Submit COSE constrained-appropriate algorithms as a > >> > WG item > >> > > >> > * June 2015: Submit COSE specification to the IESG, for > >> > publication > >>as > >a > >> > Proposed Standard > >> > > >> > * July 2015: Submit COSE constrained-appropriate algorithms to > >> > the > >IESG, > >> for > >> > publication as a Proposed Standard > >> > >> Do we really think these are reasonable milestones? Considering it's > >already > >> April 15th, I suspect we wont get the first two items until May. > >> That will also delay the rest; I'd push the latter two items back a > >> bit > >further, > >> maybe August and September. > > > >Given that we don't have a working group yet, it might be just as easy > >to reset the dates in terms of milestones - specifically change April > >to working group formation date and set the next milestones to 5 months > >later. > > > > > >I could have the basic structure of the algorithm draft out in a very > >short amount of time. The real discussions around that document are > >which of the multiple algorithms should be included in it and which are > >better left to other groups to define instead. That is going to be > >partially based on the different requirements from the groups that are > >looking to use the format, and for many of them I don't know that it is > >clear to them what algorithms they really want. > > > >> > >> That also gives us time to talk as a WG in Prague. > > > >I kind of hope that we don't have much if anything to talk about in > >Prague. > >I kind of expect that I will be somewhat busy trying to do other things > >like talking to other groups and people who might want to adopt the > >format into their products. > > > >Jim > > > >> > >> -derek > >> -- > >> Derek Atkins 617-623-3745 > >> derek@ihtfp.com www.ihtfp.com > >> Computer and Internet Security Consultant > >> > >> _______________________________________________ > >> Cose mailing list > >> Cose@ietf.org > >> https://www.ietf.org/mailman/listinfo/cose > > > >_______________________________________________ > >Cose mailing list > >Cose@ietf.org > >https://www.ietf.org/mailman/listinfo/cose > > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Thu Apr 16 20:13:40 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DC0761A9149 for ; Thu, 16 Apr 2015 20:13:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.998 X-Spam-Level: X-Spam-Status: No, score=-1.998 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sFRg0qvXGTcB for ; Thu, 16 Apr 2015 20:13:36 -0700 (PDT) Received: from out4133-146.mail.aliyun.com (out4133-146.mail.aliyun.com [42.120.133.146]) by ietfa.amsl.com (Postfix) with ESMTP id 506761A914C for ; Thu, 16 Apr 2015 20:13:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alibaba-inc.com; s=default; t=1429240414; h=Date:Subject:From:To:Message-ID:Mime-version:Content-type; bh=G7V8qsoBSU0emhUt/vshi3c/tfJckqqNJ19SHuJPb3M=; b=IpP4nhk9X8hL5uOo0B4h8Y2d/WU5jwv47qestlG1LR2mQsZnzUrz4OpzLyaLkIJ0KgOQNZ54yWLSrMJeMxwYnplNafgedvTKL8vdysIF4OKfC+kmmhrzqHWd4N7Pcb2n9nt5LSB+rGrnVPECoGRXb3lJgE15AcVNa8RSTGlcPFA= X-Alimail-AntiSpam: AC=PASS; BC=-1|-1; BR=01201311R641e4; FP=0|-1|-1|-1|0|-1|-1|-1; HT=r41g08145; MF=kepeng.lkp@alibaba-inc.com; PH=DS; RN=1; RT=1; SR=0; Received: from 10.22.52.213(mailfrom:kepeng.lkp@alibaba-inc.com ip:42.120.73.208) by smtp.aliyun-inc.com(127.0.0.1); Fri, 17 Apr 2015 11:13:31 +0800 User-Agent: Microsoft-MacOutlook/14.4.8.150116 Date: Fri, 17 Apr 2015 11:13:25 +0800 From: "Kepeng Li" To: "cose@ietf.org" Message-ID: Thread-Topic: COSE Draft Charter - 20140417 Mime-version: 1.0 Content-type: multipart/alternative; boundary="B_3512114011_9781364" Archived-At: Subject: [Cose] COSE Draft Charter - 20140417 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Apr 2015 03:13:40 -0000 > ʼʹ MIME ʽʼĶʶ ˸ʽˣ޷ʶʼķֲ򲿷ݡ --B_3512114011_9781364 Content-type: text/plain; charset="GB2312" Content-transfer-encoding: quoted-printable Hello all, Please find the latest charter below. @Paul / Carsten, can you help to update the web page to reflect the changes= : https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md OLD: * April 2015: Submit COSE specification as a WG item *=20 * April 2015: Submit COSE constrained-appropriate algorithms as a WG item *=20 * June 2015: Submit COSE specification to the IESG, for publication as a Proposed Standard *=20 * July 2015: Submit COSE constrained-appropriate algorithms to the IESG, fo= r publication as a Proposed Standard NEW: * WG formation date + 1 month: Submit COSE specification as a WG item *=20 * WG formation date + 1 month: Submit COSE constrained-appropriate algorithms as a WG item *=20 * WG formation date + 6 month: Submit COSE specification to the IESG, for publication as a Proposed Standard *=20 * WG formation date + 6 month: Submit COSE constrained-appropriate algorithms to the IESG, for publication as a Proposed Standard Let=A1=AFs submit it to our ADs next week? Kind Regards Kepeng ---------------------------------------------------------------------------= - ---- CBOR Object Signing and Encryption (COSE) Charter for Working Group Concise Binary Object Representation (CBOR, RFC 7049) is a concise binary format for the serialization of data structured to an extended version of the JSON data model. One motivation for CBOR was to make this data model more amenable to constrained nodes and constrained node networks (RFC 7228)= . The JOSE working group recently completed producing representations for cryptographic keys, message authentication (MACs), encryption, and digital signatures, using JSON representation. This working group will reuse the work done by JOSE, adapting it to the capabilities of CBOR. This will rely on the JOSE registries, which, where this provides additional efficiency, will be expanded with additional information. The resulting formats will not be cryptographically convertible from or to JOSE formats. This lack of a need for bit-for-bit compabitility which will enable some simplification in the adaptation process. Criteria that should be considered on making decisions in changing from a JSON to a CBOR encoding are: * Keeping the current JOSE paradigms and formatting where feasible. *=20 * Minimizing message size, code size and computational complexity should be considered (for the constrained environments where we expect to use this). *=20 * Improving security *=20 * Providing new functionality that uses of JOSE did not require, but are required for the new use cases. Issues dealing with key management and binding of keys to identities are ou= t of scope for the working group. The Working group will coordinate its progress with the ACE, DICE and CORE working groups to ensure that we are fulfilling the needs of these constituencies. Other groups may be added to this list as the set of use cases is expanded. The WG will have two deliverables: * a standards-track specification covering the same cryptographic formats from JOSE, with optimizations for constrained device processing, expressed in CBOR; * registration for algorithms (such as AES-CCM-8) that are appropriate for constrained environments. The Working Group will use a wiki to track desired use cases for its work, but does not intend to publish this as an RFC. Milestones * WG formation date + 1 month: Submit COSE specification as a WG item *=20 * WG formation date + 1 month: Submit COSE constrained-appropriate algorithms as a WG item *=20 * WG formation date + 6 month: Submit COSE specification to the IESG, for publication as a Proposed Standard *=20 * WG formation date + 6 month: Submit COSE constrained-appropriate algorithms to the IESG, for publication as a Proposed Standard --B_3512114011_9781364 Content-type: text/html; charset="GB2312" Content-transfer-encoding: quoted-printable
    Hello a= ll,

    Please find the latest charter below.
    =
    @Paul / Carsten, can you help to upd= ate the web page to reflect the changes:

    OLD:

    • April 2015: Submit = COSE specification as a WG item

    • =

      Ap= ril 2015: Submit COSE constrained-appropriate algorithms as a WG item

    • June 2015: Submit COSE specification to = the IESG, for publication as a Proposed Standard

    • July 2015: Submit COSE constrained-appropriate algorithms to = the IESG, for publication as a Proposed Standard

    NEW:

    • WG formation date + 1 month: Submit COSE specification as a WG item

    • WG formation da= te + 1 month: Submit COSE constrained-appropriate algorithms as a WG item

    • WG formation date += 6 month: Submit COSE specification to the IESG, for publication as a Propos= ed Standard

    • WG fo= rmation date + 6 month: Submit COSE constrained-appropriate algorithms to th= e IESG, for publication as a Proposed Standard

    Let’s submit it to our ADs next week?

    Kind Regards<= /div>
    Kepeng

    -------------------------------------------= -------------------------------------

    CBOR Objec= t Signing and Encryption (COSE)

    Charter for Working Group

    Concise Binary Object Representation (CBOR, RFC 7049) is a concise bin= ary format for the serialization of data structured to an extended version o= f the JSON data model. One motivation for CBOR was to make this data model m= ore amenable to constrained nodes and constrained node networks (RFC 7228).<= /p>

    The JOSE working group recently completed produ= cing representations for cryptographic keys, message authentication (MACs), = encryption, and digital signatures, using JSON representation. This working = group will reuse the work done by JOSE, adapting it to the capabilities of C= BOR. This will rely on the JOSE registries, which, where this provides addit= ional efficiency, will be expanded with additional information.

    The resulting formats will not be cryptographically convert= ible from or to JOSE formats. This lack of a need for bit-for-bit compabitil= ity which will enable some simplification in the adaptation process.

    Criteria that should be considered on making decisions= in changing from a JSON to a CBOR encoding are: 

    • Keeping the current JOSE paradigms and formatting where feasible.=

    • Minimizing message size, code siz= e and computational complexity should be considered (for the constrained env= ironments where we expect to use this).

    • Improving security

    • Providing= new functionality that uses of JOSE did not require, but are required for t= he new use cases.

    Issues dealing with= key management and binding of keys to identities are out of scope for the w= orking group.

    The Working group will coordinate= its progress with the ACE, DICE and CORE working groups to ensure that we a= re fulfilling the needs of these constituencies. Other groups may be added t= o this list as the set of use cases is expanded.

  • a sta= ndards-track specification covering the same cryptographic formats from JOSE= , with optimizations for constrained device processing, expressed in CBOR;
  • registration for algorithms (such as = AES-CCM-8) that are appropriate for constrained environments.

    • The Working Group will use a wiki to track desired use = cases for its work, but does not intend to publish this as an RFC.

    Milestones

    • WG formation date + 1 month: Submit COSE specification= as a WG item

    • WG formation date + 1 month: Submit COSE constrained-appropriate algorit= hms as a WG item

    • = WG formation date + 6 month: Submit COSE specification to the IESG, for publ= ication as a Proposed Standard

    • WG formation date + 6 month: Submit COSE constrained-appropria= te algorithms to the IESG, for publication as a Proposed Standard


     --B_3512114011_9781364-- From nobody Thu Apr 16 21:02:35 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D0331A8A93 for ; Thu, 16 Apr 2015 21:02:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RJwShkJOQ2nt for ; Thu, 16 Apr 2015 21:02:30 -0700 (PDT) Received: from smtp1.pacifier.net (smtp1.pacifier.net [64.255.237.171]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BCC751A8A62 for ; Thu, 16 Apr 2015 21:02:30 -0700 (PDT) Received: from Philemon (unknown [50.109.252.111]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp1.pacifier.net (Postfix) with ESMTPSA id D1FB92CA4E; Thu, 16 Apr 2015 21:02:28 -0700 (PDT) From: "Jim Schaad" To: "'Kepeng Li'" , References: In-Reply-To: Date: Thu, 16 Apr 2015 21:01:15 -0700 Message-ID: <011001d078c3$27604200$7620c600$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0111_01D07888.7B075D70" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQG0V0+7WomsXVCzDgUybmmmeeRepZ2I16Vw Content-Language: en-us Archived-At: Subject: Re: [Cose] COSE Draft Charter - 20140417 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Apr 2015 04:02:34 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0111_01D07888.7B075D70 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit This is now pull request #3 Jim From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kepeng Li Sent: Thursday, April 16, 2015 8:13 PM To: cose@ietf.org Subject: [Cose] COSE Draft Charter - 20140417 Hello all, Please find the latest charter below. @Paul / Carsten, can you help to update the web page to reflect the changes: https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md OLD: . April 2015: Submit COSE specification as a WG item . April 2015: Submit COSE constrained-appropriate algorithms as a WG item . June 2015: Submit COSE specification to the IESG, for publication as a Proposed Standard . July 2015: Submit COSE constrained-appropriate algorithms to the IESG, for publication as a Proposed Standard NEW: . WG formation date + 1 month: Submit COSE specification as a WG item . WG formation date + 1 month: Submit COSE constrained-appropriate algorithms as a WG item . WG formation date + 6 month: Submit COSE specification to the IESG, for publication as a Proposed Standard . WG formation date + 6 month: Submit COSE constrained-appropriate algorithms to the IESG, for publication as a Proposed Standard Let's submit it to our ADs next week? Kind Regards Kepeng ---------------------------------------------------------------------------- ---- CBOR Object Signing and Encryption (COSE) Charter for Working Group Concise Binary Object Representation (CBOR, RFC 7049) is a concise binary format for the serialization of data structured to an extended version of the JSON data model. One motivation for CBOR was to make this data model more amenable to constrained nodes and constrained node networks (RFC 7228). The JOSE working group recently completed producing representations for cryptographic keys, message authentication (MACs), encryption, and digital signatures, using JSON representation. This working group will reuse the work done by JOSE, adapting it to the capabilities of CBOR. This will rely on the JOSE registries, which, where this provides additional efficiency, will be expanded with additional information. The resulting formats will not be cryptographically convertible from or to JOSE formats. This lack of a need for bit-for-bit compabitility which will enable some simplification in the adaptation process. Criteria that should be considered on making decisions in changing from a JSON to a CBOR encoding are: . Keeping the current JOSE paradigms and formatting where feasible. . Minimizing message size, code size and computational complexity should be considered (for the constrained environments where we expect to use this). . Improving security . Providing new functionality that uses of JOSE did not require, but are required for the new use cases. Issues dealing with key management and binding of keys to identities are out of scope for the working group. The Working group will coordinate its progress with the ACE, DICE and CORE working groups to ensure that we are fulfilling the needs of these constituencies. Other groups may be added to this list as the set of use cases is expanded. The WG will have two deliverables: * a standards-track specification covering the same cryptographic formats from JOSE, with optimizations for constrained device processing, expressed in CBOR; * registration for algorithms (such as AES-CCM-8) that are appropriate for constrained environments. The Working Group will use a wiki to track desired use cases for its work, but does not intend to publish this as an RFC. Milestones . WG formation date + 1 month: Submit COSE specification as a WG item . WG formation date + 1 month: Submit COSE constrained-appropriate algorithms as a WG item . WG formation date + 6 month: Submit COSE specification to the IESG, for publication as a Proposed Standard . WG formation date + 6 month: Submit COSE constrained-appropriate algorithms to the IESG, for publication as a Proposed Standard ------=_NextPart_000_0111_01D07888.7B075D70 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

    This is now pull request #3

     

    Jim

     

     

    From:= = Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kepeng = Li
    Sent: Thursday, April 16, 2015 8:13 PM
    To: = cose@ietf.org
    Subject: [Cose] COSE Draft Charter - = 20140417

     

    Hello = all,

     

    =

    Please find the latest charter = below.

     

    =

    @Paul / Carsten, can you help to = update the web page to reflect the = changes:

     

    =

    OLD:

    ·      = April 2015: = Submit COSE specification as a WG item

    ·      = April 2015: = Submit COSE constrained-appropriate algorithms as a WG = item

    ·      = June 2015: = Submit COSE specification to the IESG, for publication as a Proposed = Standard

    ·      = July 2015: = Submit COSE constrained-appropriate algorithms to the IESG, for = publication as a Proposed Standard

    NEW:

     

    =

    ·      = WG = formation date + 1 month: Submit COSE specification as a WG = item

    ·      = WG = formation date + 1 month: Submit COSE constrained-appropriate algorithms = as a WG item

    ·      = WG = formation date + 6 month: Submit COSE specification to the IESG, for = publication as a Proposed Standard

    ·      = WG = formation date + 6 month: Submit COSE constrained-appropriate algorithms = to the IESG, for publication as a Proposed = Standard

    Let’s submit it to our ADs next = week?

     

    =

    Kind = Regards

    Kepeng

    =

     

    =

    -----------------------------------= ---------------------------------------------

    =

     

    <= div>

    CBOR Object Signing and Encryption (COSE)

    Charter for Working Group

    Concise = Binary Object Representation (CBOR, RFC 7049) is a concise binary format = for the serialization of data structured to an extended version of the = JSON data model. One motivation for CBOR was to make this data model = more amenable to constrained nodes and constrained node networks (RFC = 7228).

    The JOSE = working group recently completed producing representations for = cryptographic keys, message authentication (MACs), encryption, and = digital signatures, using JSON representation. This working group will = reuse the work done by JOSE, adapting it to the capabilities of CBOR. = This will rely on the JOSE registries, which, where this provides = additional efficiency, will be expanded with additional = information.

    The = resulting formats will not be cryptographically convertible from or to = JOSE formats. This lack of a need for bit-for-bit compabitility which = will enable some simplification in the adaptation = process.

    Criteria = that should be considered on making decisions in changing from a JSON to = a CBOR encoding are: 

    ·      = Keeping the = current JOSE paradigms and formatting where = feasible.

    ·      = Minimizing = message size, code size and computational complexity should be = considered (for the constrained environments where we expect to use = this).

    ·      = Improving = security

    ·      = Providing = new functionality that uses of JOSE did not require, but are required = for the new use cases.

    Issues = dealing with key management and binding of keys to identities are out of = scope for the working group.

    The Working = group will coordinate its progress with the ACE, DICE and CORE working = groups to ensure that we are fulfilling the needs of these = constituencies. Other groups may be added to this list as the set of use = cases is expanded.

    The WG will = have two deliverables:

    • a standards-track = specification covering the same cryptographic formats from JOSE, with = optimizations for constrained device processing, expressed in = CBOR;
    • registration for = algorithms (such as AES-CCM-8) that are appropriate for constrained = environments.

    The Working = Group will use a wiki to track desired use cases for its work, but does = not intend to publish this as an RFC.

    Milestones

    ·      = WG = formation date + 1 month: Submit COSE specification as a WG = item

    ·      = WG = formation date + 1 month: Submit COSE constrained-appropriate algorithms = as a WG item

    ·      = WG = formation date + 6 month: Submit COSE specification to the IESG, for = publication as a Proposed Standard

    ·      = WG = formation date + 6 month: Submit COSE constrained-appropriate algorithms = to the IESG, for publication as a Proposed = Standard



    ------=_NextPart_000_0111_01D07888.7B075D70-- From nobody Tue Apr 21 15:33:28 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 967481B2D07 for ; Tue, 21 Apr 2015 15:33:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id baEJ2YpxNHLV for ; Tue, 21 Apr 2015 15:33:25 -0700 (PDT) Received: from smtp2.pacifier.net (smtp2.pacifier.net [64.255.237.172]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 54A1F1B2D04 for ; Tue, 21 Apr 2015 15:33:25 -0700 (PDT) Received: from Philemon (unknown [4.30.143.226]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp2.pacifier.net (Postfix) with ESMTPSA id A503D2CA2A; Tue, 21 Apr 2015 15:33:24 -0700 (PDT) From: "Jim Schaad" To: "'Kathleen Moriarty'" References: <043201d076df$aa87b770$ff972650$@augustcellars.com> <50A4152F-E8F1-4890-AD03-065899ACC3BB@vpnc.org> <04c701d07721$69175fb0$3b461f10$@augustcellars.com> <566CD668-1A69-4D37-A04E-98025906759D@gmail.com> In-Reply-To: <566CD668-1A69-4D37-A04E-98025906759D@gmail.com> Date: Tue, 21 Apr 2015 15:32:09 -0700 Message-ID: <013d01d07c83$01465190$03d2f4b0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQHQPHasz7knjv+nJda5/t/ZvlDMAAEZOK9bArBs0b8CrmfyWwJ7agYBnRDxCDA= Content-Language: en-us Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Charter State X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Apr 2015 22:33:27 -0000 The date change proposed by me has been merged into the draft. I believe that we can now consider the charter discussion to be complete = unless anyone else has a big issue they want to bring up. Kathleen: Can we get this to move forward into the IESG? Jim > -----Original Message----- > From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kathleen = Moriarty > Sent: Tuesday, April 14, 2015 7:17 PM > To: Jim Schaad > Cc: Kepeng Li; Paul Hoffman; cose@ietf.org > Subject: Re: [Cose] Charter State >=20 >=20 >=20 > Sent from my iPhone >=20 > > On Apr 14, 2015, at 10:10 PM, "Jim Schaad" > wrote: > > > > > > > >> -----Original Message----- > >> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kepeng Li > >> Sent: Tuesday, April 14, 2015 6:59 PM > >> To: Paul Hoffman; Jim Schaad > >> Cc: cose@ietf.org > >> Subject: Re: [Cose] Charter State > >> > >> Thanks Paul. > >> > >> There are two other changes we might want to incorporate: > >> > >> 1) Proposal from Goran: > >> http://www.ietf.org/mail-archive/web/cose/current/msg00027.html > >> > >> OLD: > >> "a standards-track specification covering the same cryptographic > >> formats > > from > >> JOSE, expressed in CBOR" > >> > >> NEW: > >> "a standards-track specification covering the same cryptographic > >> formats > > from > >> JOSE and optimizations for constrained device processing, expressed > >> in > > CBOR > > > > I am agnostic about including this change. We now are much more > > constrained device focused later so it might not be needed. > > > >> > >> (2) Proposal from Kathleen: > >> > >> http://www.ietf.org/mail-archive/web/cose/current/msg00077.html > >> > >> OLD: > >> The Working Group will coordinate its progress with the ACE, DICE = and > >> CoRE working groups to ensure that we are fulfilling the needs of > >> these constituencies. > >> > >> NEW: > >> The Working Group will coordinate its progress with the ACE, DICE, > >> CoRE > > and > >> DIME working groups to ensure that we are fulfilling the needs of > >> these constituencies. > > > > I am not sure that DIME is a reasonable group to be coordinating = with > > since it is not clear that this would be the solution space they are > > going to operate in. It is true that this need something along = these > > lines, but what they need first is to get someone who has good > > knowledge of what can be done in the group first. Given that this = is > > major (telecom) vendors, using CMS might be a better fit for this > > > > The other question if we expand this list here rather than in the = wiki > > is the set of groups that Rene Struik though that might be included > > here such as "6TiSCH, 6lo, RoLL, etc" which seem to be much closer = to > > the types of groups that might use this specification going forward. > > > > At this point, I think I would go with the list we have and start > > adding more groups to the wiki. >=20 > I'm fine with that approach. My point in bringing up DIME was more = that they > need help and this *could* help them, but work needs to be done to = figure > out what they need at this point. I brought it up just in case it's = relevant to > COSE. >=20 > Thanks, > Kathleen > > > > Jim > > > >> > >> > >> Thanks, > >> > >> Kind Regards > >> Kepeng > >> > >> ? 15/4/15 2:32 am, "Paul Hoffman" ??: > >> > >>> On Apr 14, 2015, at 11:20 AM, Jim Schaad > wrote: > >>>> > >>>> I would like to get Pull Request #2 rolled into the draft charter > >>>> and then I think we are ready to send it to the ADs and IESG for = review. > >>>> > >>>> Since it is my pull request I have not done the merge preferring > >>>> that it be done by one of the others who have permissions. If I > >>>> get a message saying do the merge request I would be happy to = pull > >>>> the trigger on it. > >>> > >>> There seemed to be general agreement, so I accepted the pull = request. > >>> > >>> Current version is at: > >>> = https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md > >>> > >>> --Paul Hoffman > >>> > >>> _______________________________________________ > >>> Cose mailing list > >>> Cose@ietf.org > >>> https://www.ietf.org/mailman/listinfo/cose > >> > >> > >> _______________________________________________ > >> Cose mailing list > >> Cose@ietf.org > >> https://www.ietf.org/mailman/listinfo/cose > > > > _______________________________________________ > > Cose mailing list > > Cose@ietf.org > > https://www.ietf.org/mailman/listinfo/cose >=20 > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Tue Apr 21 20:26:20 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BBAF61A883D for ; Tue, 21 Apr 2015 20:26:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wWt3PU44WRZg for ; Tue, 21 Apr 2015 20:26:18 -0700 (PDT) Received: from smtp2.pacifier.net (smtp2.pacifier.net [64.255.237.172]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F00A21A87C6 for ; Tue, 21 Apr 2015 20:26:17 -0700 (PDT) Received: from Philemon (unknown [4.30.143.226]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp2.pacifier.net (Postfix) with ESMTPSA id 5648B2CA2B for ; Tue, 21 Apr 2015 20:26:17 -0700 (PDT) From: "Jim Schaad" To: References: <20150422031948.30430.23115.idtracker@ietfa.amsl.com> In-Reply-To: <20150422031948.30430.23115.idtracker@ietfa.amsl.com> Date: Tue, 21 Apr 2015 20:25:01 -0700 Message-ID: <017201d07cab$eb907870$c2b16950$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQI495TaKfHlY8m4vYP6a5rOxXnngpyHaIoA Content-Language: en-us Archived-At: Subject: [Cose] FW: New Version Notification for draft-schaad-cose-01.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 03:26:19 -0000 Even though we don't have a working group formed yet, and thus cannot = formally adopt any documents into the working group, I think it is time = that we started on discussions of what the resulting document should end = up looking like. To this end I am going to start sending out some = e-mails to facilitate/start discussions. =20 I have a candidate document located at = https://github.com/cose-wg/cose-spec. This is the document that I have = used to generate the document that I have posted to the IETF = (draft-schaad-cose). Along with the document is a list of issues that I = think need to be discussed while we are dealing with the message format = specification = (https://github.com/cose-wg/cose-spec/blob/master/Issues.md). This = document deliberately does not include those issues which I believe are = related only to algorithm issues. There are some algorithm looking = issues that I believe have more to do with how the message format = document is that are directly algorithm issues. In addition to the list of discussion issues, there is also the issue = tracker on the spec. Feel free to either put issues into the tracker or = give pull requests on things that you don't like. For technical issues, = we need to be sure there is discussion on the list before I would accept = them. For editorial issues I will just pull as I get to them and agree = with the content. If this document is accepted as the working group message document, I = would expect that we will just import this repository into the = organization created for the charter discussions. > -----Original Message----- > From: internet-drafts@ietf.org [mailto:internet-drafts@ietf.org] > Sent: Tuesday, April 21, 2015 8:20 PM > To: Jim Schaad; Jim Schaad > Subject: New Version Notification for draft-schaad-cose-01.txt >=20 >=20 > A new version of I-D, draft-schaad-cose-01.txt has been successfully > submitted by Jim Schaad and posted to the IETF repository. >=20 > Name: draft-schaad-cose > Revision: 01 > Title: CBOR Encoded Message Syntax > Document date: 2015-04-21 > Group: Individual Submission > Pages: 28 > URL: = http://www.ietf.org/internet-drafts/draft-schaad-cose-01.txt > Status: https://datatracker.ietf.org/doc/draft-schaad-cose/ > Htmlized: http://tools.ietf.org/html/draft-schaad-cose-01 > Diff: = http://www.ietf.org/rfcdiff?url2=3Ddraft-schaad-cose-01 >=20 > Abstract: > Concise Binary Object Representation (CBOR) is data format designed > for small code size and small message size. There is a need for = the > ability to have the basic security services defined for this data > format. This document specifies how to do signatures, message > authentication codes and encryption using this data format. The = work > in this document is derived in part from the JSON web security > documents using the same parameters and algorithm identifiers as = they > do. >=20 >=20 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > The IETF Secretariat From nobody Tue Apr 21 20:34:36 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0CAEB1B30F3 for ; Tue, 21 Apr 2015 20:34:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.801 X-Spam-Level: X-Spam-Status: No, score=0.801 tagged_above=-999 required=5 tests=[BAYES_50=0.8, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9RkuPOMPeHZF for ; Tue, 21 Apr 2015 20:34:31 -0700 (PDT) Received: from smtp3.pacifier.net (smtp3.pacifier.net [64.255.237.177]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1CC11B30FB for ; Tue, 21 Apr 2015 20:34:27 -0700 (PDT) Received: from Philemon (unknown [4.30.143.226]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp3.pacifier.net (Postfix) with ESMTPSA id 92D7B38F09 for ; Tue, 21 Apr 2015 20:34:26 -0700 (PDT) From: "Jim Schaad" To: Date: Tue, 21 Apr 2015 20:33:10 -0700 Message-ID: <017601d07cad$0f29f9e0$2d7deda0$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0177_01D07C72.62CDB9F0" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdB8q//xVONrp/wVQHWYU1gUsf5YPg== Content-Language: en-us Archived-At: Subject: [Cose] Issue: Use arrays for some containers X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 03:34:35 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0177_01D07C72.62CDB9F0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Questions: 1. Should we use arrays or maps as top level containers for COSE? 2. If we use arrays, should we always use nil elements to indicate absent elements or use them only when ambiguity in parsing arises? Discussion: The first issue that I would like to look at is the question of using arrays rather than maps at the top level. For the purposes of this discussion, I would like to assume that we are going to use integer as well as text keys for maps where they occur. I would also like to postpone the discussion of using an integer vs a tag to identify the top level structures. There are some of the maps in the current JOSE specification which could be changed to maps. Not all of them can be changed, for example the protected and unprotected header fields, since the contents in those cases will be extremely fluid. This works only for those structures which are both highly predictable and unlikely to change in the future. When I initially made the change from maps to arrays in my document, I was assuming that there would be a significant space savings by doing so. When using integer values for the key of a map this expected space saving has not been born out in practice. This is, in part, due to a decision that I made to put filler elements into the array to make the coding simpler. There would be no code to try and make a decision if elements are absent as to what the next item would be. For maps, this leads to an overhead of one byte for all elements that are present in the map. For arrays, this leads to an overhead of one byte for all elements that are 'absent' in the array. There is one argument that can be used against the use of arrays, that is that one would be unable at a later date to easily add a new element to the end of the array and expect people to process it. This argument is only true if the flattened version of the structures is kept. If only the arrayed version of signers and recipients is permitted then elements could be added to the end of the array. I am currently unable to come up with something that I believe it would be reasonable to every want to add to a top level structure that could not be better dealt with by adding it to the set of protected and unprotected headers instead In CMS the only time we found we wanted to modify the top level structures it was when we were doing the completely new paradigm of changing from EncryptedMessage to use authenticated encryption algorithms. This was dealt with by adding a completely new structure rather than trying to modify the existing one. The remaining argument for changing from maps to arrays is a question of code implementations. I believe, and it is mostly a belief, that the code to evaluate the structures will be smaller when indexing arrays as opposed to doing a map look up. There is no significant change in the CBOR library that would be needed. The grammar will have both arrays and maps in it no matter what decision is made on this topic. I made the decision in my document to use a nil filler when an array element is absent. It would, in theory, be possible to have the field omitted entirely. The issue that needs to be addressed for doing this is to make sure that one does not end up with a sequence of values where it is not possible to easily determine which of the optional elements is (or is not) next. Thus a grammar where you have an optional integer followed by an integer can make parsing harder. With some clever re-arranging of the fields in the array along with occasional tagging or forced nil values it should be possible to have omitted absent elements rather than always having nil values for absent elements. Doing this would likely lose the size gains of code size, but potentially shrink the message size by a few extra bytes in many cases. As an example, the current grammar for COSE_mac in my document is COSE_mac = ( protected : (bstr / nil), unprotected : (header_map / nil), payload : bstr, tag : bstr, ?recipients : ([+COSE_encrypt_a] / nil) ? COSE_encrypt ) One of protected and unprotect would be required - so the nil on protected could be removed as it would be followed by either a map or a bstr. The nil for unprotected could be removed as it would always be followed by a bstr. Things are slightly more difficult if one wants to make the payload optional as you have an optional bstr followed by a bstr. This is a location where the nil value would be required. The optional nil on the recipients could be removed as the count of elements in the group could be used to determine if it is present. Thus the group (removing flattening) could potentially be encoded as COSE_mac = ( ? protected: bstr, ? unprotected: header_map, payload: (bstr / nil), tag: bstr, recipients: [+COSE_encrypt_a] ) With only a single required nil value. Jim ------=_NextPart_000_0177_01D07C72.62CDB9F0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

    Questions:

     

    1.  = Should we use arrays or maps as top level containers for = COSE?

     

    2.  If we use arrays, should we always use nil = elements to indicate absent elements or use them only when ambiguity in = parsing arises?

     

    Discussion:

     

    The first = issue that I would like to look at is the question of using arrays = rather than maps at the top level.  For the purposes of this = discussion, I would like to assume that we are going to use integer as = well as text keys for maps where they occur.  I would also like to = postpone the discussion of using an integer vs a tag to identify the top = level structures.

     

    There are = some of the maps in the current JOSE specification which could be = changed to maps.  Not all of them can be changed, for example the = protected and unprotected header fields, since the contents in those = cases will be extremely fluid.  This works only for those = structures which are both highly predictable and unlikely to change in = the future.

     

    When I initially made the change from maps to arrays = in my document, I was assuming that there would be a significant space = savings by doing so.  When using integer values for the key of a = map this expected space saving has not been born out in practice.  = This is, in part, due to a decision that I made to put filler elements = into the array to make the coding simpler.  There would be no code = to try and make a decision if elements are absent as to what the next = item would be.  For maps, this leads to an overhead of one byte for = all elements that are present in the map.  For arrays, this leads = to an overhead of one byte for all elements that are 'absent' in the = array.

     

    There is one argument that can be used against the use = of arrays, that is that one would be unable at a later date to easily = add a new element to the end of the array and expect people to process = it.   This argument is only true if the flattened version of = the structures is kept.  If only the arrayed version of signers and = recipients is permitted then elements could be added to the end of the = array.  I am currently unable to come up with something that I = believe it would be reasonable to every want to add to a top level = structure that could not be better dealt with by adding it to the set of = protected and unprotected headers instead  In CMS the only time we = found we wanted to modify the top level structures it was when we were = doing the completely new paradigm of changing from EncryptedMessage to = use authenticated encryption algorithms.  This was dealt with by = adding a completely new structure rather than trying to modify the = existing one.

     

    The remaining argument for changing from maps to = arrays is a question of code implementations.  I believe, and it is = mostly a belief, that the code to evaluate the structures will be = smaller when indexing arrays as opposed to doing a map look up.  = There is no significant change in the CBOR library that would be = needed.  The grammar will have both arrays and maps in it no matter = what decision is made on this topic.

     

    I made the = decision in my document to use a nil filler when an array element is = absent.  It would, in theory, be possible to have the field omitted = entirely.  The issue that needs to be addressed for doing this is = to make sure that one does not end up with a sequence of values where it = is not possible to easily determine which of the optional elements is = (or is not) next.  Thus a grammar where you have an optional = integer followed by an integer can make parsing harder.  With some = clever re-arranging of the fields in the array along with occasional = tagging or forced nil values it should be possible to have omitted = absent elements rather than always having nil values for absent = elements.  Doing this would likely lose the size gains of code = size, but potentially shrink the message size by a few extra bytes in = many cases.

     

    As an example, the current grammar for COSE_mac in my = document is

     

    COSE_mac =3D (

       protected : (bstr / = nil),

       unprotected : = (header_map / nil),

       = payload : bstr,

       tag : = bstr,

       ?recipients : = ([+COSE_encrypt_a] / nil)

       ? COSE_encrypt

    )

     

    One of = protected and unprotect would be required – so the nil on = protected could be removed as it would be followed by either a map or a = bstr.  The nil for unprotected could be removed as it would always = be followed by a bstr.  Things are slightly more difficult if one = wants to make the payload optional as you have an optional bstr followed = by a bstr.  This is a location where the nil value would be = required.  The optional nil on the recipients could be removed as = the count of elements in the group could be used to determine if it is = present.  Thus the group (removing flattening) could potentially be = encoded as

     

    COSE_mac =3D (

       ? protected: bstr,

       ? unprotected: = header_map,

       payload: = (bstr / nil),

      tag: = bstr,

       recipients: = [+COSE_encrypt_a]

    )

     

    With only a = single required nil value.

     

    Jim

     

     

     

    ------=_NextPart_000_0177_01D07C72.62CDB9F0-- From nobody Tue Apr 21 21:06:02 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4DC151B3165 for ; Tue, 21 Apr 2015 21:06:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.5 X-Spam-Level: X-Spam-Status: No, score=-0.5 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rS6JPy0dXW_y for ; Tue, 21 Apr 2015 21:06:00 -0700 (PDT) Received: from smtp4.pacifier.net (smtp4.pacifier.net [64.255.237.176]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1371E1B3164 for ; Tue, 21 Apr 2015 21:06:00 -0700 (PDT) Received: from Philemon (unknown [4.30.143.226]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp4.pacifier.net (Postfix) with ESMTPSA id 85D5938F10 for ; Tue, 21 Apr 2015 21:05:59 -0700 (PDT) From: "Jim Schaad" To: Date: Tue, 21 Apr 2015 21:04:41 -0700 Message-ID: <018701d07cb1$77705310$6650f930$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdB8sCyBYj8GstjtT9uyEmm4+eR1qg== Content-Language: en-us Archived-At: Subject: [Cose] Issue: Create separate MAC structure X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 04:06:01 -0000 Question: Should we separate out MACs from Signatures? Discussion: I have a number of reasons that I would support this change: . It is easier to talk about the security properties of signatures and MACs if they are not combined into a single structure. The security properties of the two items are very different and conflating them does not make for good decisions by people who are using the message format. * It is problematic to do recipient key management if they are in the same structure. The fact that signers and recipients have different structures, means that overlapping them can lead to implementation errors if a recipient structure is used when a signer structure is called for. One way that has been conceived to do the recipient management can be found in http://datatracker.ietf.org/doc/draft-jones-jose-key-managed-json-web-signat ure. * Having MAC different from Signatures allows for the ability to do a clean separation of MAC and signature code implementations when only one of them is needed. Why it should not be done: * There might be confusion of people moving from JOSE to COSE. Jim From nobody Tue Apr 21 23:57:41 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 936F31B323D for ; Tue, 21 Apr 2015 23:57:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qMcJEMXFHOoO for ; Tue, 21 Apr 2015 23:57:39 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 093141B3235 for ; Tue, 21 Apr 2015 23:57:39 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id C7E26BED6; Wed, 22 Apr 2015 07:57:37 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6StUXPMFo2M1; Wed, 22 Apr 2015 07:57:36 +0100 (IST) Received: from [10.87.48.73] (unknown [86.46.17.62]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 5A578BE32; Wed, 22 Apr 2015 07:57:36 +0100 (IST) Message-ID: <55374660.4030606@cs.tcd.ie> Date: Wed, 22 Apr 2015 07:57:36 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: Jim Schaad , cose@ietf.org References: <018701d07cb1$77705310$6650f930$@augustcellars.com> In-Reply-To: <018701d07cb1$77705310$6650f930$@augustcellars.com> OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [Cose] Issue: Create separate MAC structure X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 06:57:40 -0000 On 22/04/15 05:04, Jim Schaad wrote: > Question: Should we separate out MACs from Signatures? > > Discussion: > > I have a number of reasons that I would support this change: > > . It is easier to talk about the security properties of signatures and MACs > if they are not combined into a single structure. The security properties > of the two items are very different and conflating them does not make for > good decisions by people who are using the message format. > > * It is problematic to do recipient key management if they are in the same > structure. The fact that signers and recipients have different structures, > means that overlapping them can lead to implementation errors if a recipient > structure is used when a signer structure is called for. One way that has > been conceived to do the recipient management can be found in > http://datatracker.ietf.org/doc/draft-jones-jose-key-managed-json-web-signat > ure. > > * Having MAC different from Signatures allows for the ability to do a clean > separation of MAC and signature code implementations when only one of them > is needed. > > Why it should not be done: > > * There might be confusion of people moving from JOSE to COSE. You gotta choose who to confuse:-) I agree with you - I'd prefer separating MACs and signatures at as high a level as possible. Consuming code needs to know the difference and should have a smaller footprint if these concepts are not conflated and if only one of MACs or signature needs to be supported by a device/application. S. > > Jim > > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose > From nobody Wed Apr 22 07:03:08 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F098A1A916A for ; Wed, 22 Apr 2015 07:03:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.347 X-Spam-Level: X-Spam-Status: No, score=-0.347 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_COM=0.553, J_BACKHAIR_44=1] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wrB9kRTXu9_4 for ; Wed, 22 Apr 2015 07:03:02 -0700 (PDT) Received: from proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 39E1F1A9164 for ; Wed, 22 Apr 2015 07:03:02 -0700 (PDT) Received: from [10.20.30.101] (50-1-98-218.dsl.dynamic.fusionbroadband.com [50.1.98.218]) (authenticated bits=0) by proper.com (8.15.1/8.14.9) with ESMTPSA id t3ME31n1004007 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Wed, 22 Apr 2015 07:03:01 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) X-Authentication-Warning: proper.com: Host 50-1-98-218.dsl.dynamic.fusionbroadband.com [50.1.98.218] claimed to be [10.20.30.101] Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\)) From: Paul Hoffman In-Reply-To: <55374660.4030606@cs.tcd.ie> Date: Wed, 22 Apr 2015 07:03:01 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: <6EFE65D7-E33B-40D5-B47F-A449AE6FECC7@vpnc.org> References: <018701d07cb1$77705310$6650f930$@augustcellars.com> <55374660.4030606@cs.tcd.ie> To: cose X-Mailer: Apple Mail (2.2098) Archived-At: Subject: Re: [Cose] Issue: Create separate MAC structure X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 14:03:07 -0000 On Apr 21, 2015, at 11:57 PM, Stephen Farrell = wrote: > I agree with you - I'd prefer separating MACs and signatures at > as high a level as possible. Consuming code needs to know the > difference and should have a smaller footprint if these concepts > are not conflated and if only one of MACs or signature needs to > be supported by a device/application. +1. The fact that they were conflated on JOSE is not relevant here. Even = if someone was going to create a JOSE<->COSE translator, COSE separating = them will not significantly hinder such a translator. Just to be clear, = I don't care about such translators: COSE's use case is different than = JOSE's. --Paul Hoffman= From nobody Wed Apr 22 07:08:13 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F04D91A9232 for ; Wed, 22 Apr 2015 07:08:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.053 X-Spam-Level: X-Spam-Status: No, score=0.053 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, HELO_MISMATCH_COM=0.553] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JOS--tSwIjYK for ; Wed, 22 Apr 2015 07:08:10 -0700 (PDT) Received: from proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 10D061A9237 for ; Wed, 22 Apr 2015 07:08:09 -0700 (PDT) Received: from [10.20.30.101] (50-1-98-218.dsl.dynamic.fusionbroadband.com [50.1.98.218]) (authenticated bits=0) by proper.com (8.15.1/8.14.9) with ESMTPSA id t3ME87cT004230 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Wed, 22 Apr 2015 07:08:08 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) X-Authentication-Warning: proper.com: Host 50-1-98-218.dsl.dynamic.fusionbroadband.com [50.1.98.218] claimed to be [10.20.30.101] Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\)) From: Paul Hoffman In-Reply-To: <017601d07cad$0f29f9e0$2d7deda0$@augustcellars.com> Date: Wed, 22 Apr 2015 07:08:08 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: References: <017601d07cad$0f29f9e0$2d7deda0$@augustcellars.com> To: cose X-Mailer: Apple Mail (2.2098) Archived-At: Subject: Re: [Cose] Issue: Use arrays for some containers X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 14:08:12 -0000 On Apr 21, 2015, at 8:33 PM, Jim Schaad wrote: >=20 > Questions: > =20 > 1. Should we use arrays or maps as top level containers for COSE? > =20 > 2. If we use arrays, should we always use nil elements to indicate = absent elements or use them only when ambiguity in parsing arises? 1) Maps 2) But, if we do arrays, use null elements so that a decoder always gets = the same number of elements. For #1, unless every structure everywhere is an array, the encoder and = decoder will need map interpretation. Given that, and given that maps = have become a more natural way for programmers to think of bundles of = information, choosing maps seems more likely to make COSE = understandable. The programming cost is very low, and if using integers = for the keys, the wire-size cost is also trivial. --Paul Hoffman= From nobody Wed Apr 22 07:37:57 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2FDF11B36B8 for ; Wed, 22 Apr 2015 07:37:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.211 X-Spam-Level: X-Spam-Status: No, score=-14.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sL6Hsc4pXDq2 for ; Wed, 22 Apr 2015 07:37:51 -0700 (PDT) Received: from alln-iport-7.cisco.com (alln-iport-7.cisco.com [173.37.142.94]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DED761ACD85 for ; Wed, 22 Apr 2015 07:36:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1348; q=dns/txt; s=iport; t=1429713363; x=1430922963; h=message-id:date:from:mime-version:to:subject:references: in-reply-to:content-transfer-encoding; bh=jhKuzsx/Hx7CJsLtoLOcrO5ilWc8FEOzuuqPu47b4TY=; b=gwyI9Skg3msKDyhAjGYoYOp4GQHZ3Xo/WwSW4YTgarG8WbTACP+WPWGV niJB6pkzRCBKp1e9/GLwR3URNiAq5nMxCfcSTE/sJBXtIXDaApmqZM/qj WbrEmco1eIp5rnOj4qcyiCe6dFoipIDyxXRr7sqAw5NcVGqBrb4hRE/rw E=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AcCQCtsDdV/4oNJK1bgwxSXAWDE8JtCYFHhgwCgTU4FAEBAQEBAQF9QQWDWgEBAQMBIw8BRRELDgoCAgUWCwICCQMCAQIBRQYBDAYCAQGIHwi3U5UcAQEBAQEBAQECAQEBAQEBAQEBFQSBIYoWhFE6gmiBRQEEi0OJcYYohyuOAiKCBAEZBIFwUIFEgQABAQE X-IronPort-AV: E=Sophos;i="5.11,623,1422921600"; d="scan'208";a="143523219" Received: from alln-core-5.cisco.com ([173.36.13.138]) by alln-iport-7.cisco.com with ESMTP; 22 Apr 2015 14:36:02 +0000 Received: from xhc-aln-x12.cisco.com (xhc-aln-x12.cisco.com [173.36.12.86]) by alln-core-5.cisco.com (8.14.5/8.14.5) with ESMTP id t3MEa1fk018781 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 22 Apr 2015 14:36:01 GMT Received: from [64.101.72.55] (64.101.72.55) by xhc-aln-x12.cisco.com (173.36.12.86) with Microsoft SMTP Server (TLS) id 14.3.195.1; Wed, 22 Apr 2015 09:36:01 -0500 Message-ID: <5537B1D2.2050702@cisco.com> Date: Wed, 22 Apr 2015 08:36:02 -0600 From: =?UTF-8?B?4oyYIE1hdHQgTWlsbGVy?= User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: Jim Schaad , "cose@ietf.org" References: <017601d07cad$0f29f9e0$2d7deda0$@augustcellars.com> In-Reply-To: <017601d07cad$0f29f9e0$2d7deda0$@augustcellars.com> Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 8bit X-Originating-IP: [64.101.72.55] Archived-At: Subject: Re: [Cose] Issue: Use arrays for some containers X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 14:37:55 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 4/21/15 9:33 PM, Jim Schaad wrote: > Questions: > > > > 1. Should we use arrays or maps as top level containers for COSE? > > I would prefer maps. Since the space savings of arrays are negligible, I'd rather have a model that lets me completely omit things if I can. As Paul said, COSE implementations will need to support maps and arrays for other parts of the structure, so there's no code savings in using arrays over maps. > > 2. If we use arrays, should we always use nil elements to > indicate absent elements or use them only when ambiguity in parsing > arises? > > If arrays are used, then absent elements MUST be null. - -- - - m&m Matt Miller < mamille2@cisco.com > Cisco Systems, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) Comment: GPGTools - https://gpgtools.org iQEcBAEBCgAGBQJVN7HSAAoJEDWi+S0W7cO1aPsH/3OE2xNPB7bVUnHoPAI2VgZ0 ReSHhX+yq74vk64V+enOEyppIxK8GEE9c1+4pK8xaUoMJBwMnaozu7XfPB/31Lfj OJnX8k3UlRS4P91hx8xZXk2OY+Z45k1lOvvF9ow63/vCApAnhP0KWs1teiBCEBsK 3trBOJ3FllbzCABPwhgCpCml2ybrq08qOPeyM261mMJfvcPNw3dzq/hWIoIhL07F UZM/ne8OHJ7TThSW5LGe9iyvy3BoBWu/JHka5gXvtL+igHO2NAOkg9vIo+iENc9d GbvazX5Yuc+wjsJdV/VQcIyxMUYXDTTYIiUposTaKXfnB48XCkNKhFza5a1vzuk= =Z8fe -----END PGP SIGNATURE----- From nobody Wed Apr 22 07:38:31 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 05A351A903C for ; Wed, 22 Apr 2015 07:38:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -13.211 X-Spam-Level: X-Spam-Status: No, score=-13.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, J_BACKHAIR_44=1, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F1dmPy0deXGE for ; Wed, 22 Apr 2015 07:38:28 -0700 (PDT) Received: from alln-iport-5.cisco.com (alln-iport-5.cisco.com [173.37.142.92]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8E1B41ACD6B for ; Wed, 22 Apr 2015 07:37:05 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1486; q=dns/txt; s=iport; t=1429713425; x=1430923025; h=message-id:date:from:mime-version:to:subject:references: in-reply-to:content-transfer-encoding; bh=UaDnb7xYc0RblqgUzHUrNF8EBUu2KNUJw2Yn8IAtv64=; b=Bs5mtg5EI9FXBt7InKrrZtPwPan3OIDvTrh4TYxCqJMQymE8Z0c523RE gBNUEmaoxJtPcU5ieXwC/sRFQRnRJdVDvyzEKUzOF1PljcSYQIwLblYCz XDB7lxuB8OxSpNn6sseBuHa1quCEaAuiGoicVoGBjv9CqkeuRzHfE4HPC A=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0AbCQDzsDdV/4sNJK1bgwxSXAWDE8JtCYFHhgwCgTU4FAEBAQEBAQF9QQWDWwEBBCMEURELGAICBRYLAgIJAwIBAgFFBg0GAgEBiCe3UJUcAQEBAQEBAQMBAQEBAQEBARYEgSGKFoRROhaCUoFFAQSLQ4lxhiiHK44CIoFkIBoEgXBQgUSBAAEBAQ X-IronPort-AV: E=Sophos;i="5.11,623,1422921600"; d="scan'208";a="143541135" Received: from alln-core-6.cisco.com ([173.36.13.139]) by alln-iport-5.cisco.com with ESMTP; 22 Apr 2015 14:37:04 +0000 Received: from xhc-aln-x12.cisco.com (xhc-aln-x12.cisco.com [173.36.12.86]) by alln-core-6.cisco.com (8.14.5/8.14.5) with ESMTP id t3MEb4Ib025536 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL) for ; Wed, 22 Apr 2015 14:37:04 GMT Received: from [64.101.72.55] (64.101.72.55) by xhc-aln-x12.cisco.com (173.36.12.86) with Microsoft SMTP Server (TLS) id 14.3.195.1; Wed, 22 Apr 2015 09:37:04 -0500 Message-ID: <5537B211.9070308@cisco.com> Date: Wed, 22 Apr 2015 08:37:05 -0600 From: =?UTF-8?B?4oyYIE1hdHQgTWlsbGVy?= User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: References: <018701d07cb1$77705310$6650f930$@augustcellars.com> <55374660.4030606@cs.tcd.ie> <6EFE65D7-E33B-40D5-B47F-A449AE6FECC7@vpnc.org> In-Reply-To: <6EFE65D7-E33B-40D5-B47F-A449AE6FECC7@vpnc.org> Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit X-Originating-IP: [64.101.72.55] Archived-At: Subject: Re: [Cose] Issue: Create separate MAC structure X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 14:38:30 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 4/22/15 8:03 AM, Paul Hoffman wrote: > On Apr 21, 2015, at 11:57 PM, Stephen Farrell > wrote: >> I agree with you - I'd prefer separating MACs and signatures at >> as high a level as possible. Consuming code needs to know the >> difference and should have a smaller footprint if these concepts >> are not conflated and if only one of MACs or signature needs to >> be supported by a device/application. > > +1. The fact that they were conflated on JOSE is not relevant here. > Even if someone was going to create a JOSE<->COSE translator, COSE > separating them will not significantly hinder such a translator. > Just to be clear, I don't care about such translators: COSE's use > case is different than JOSE's. > +1 on separating MACs from signatures. - -- - - m&m Matt Miller < mamille2@cisco.com > Cisco Systems, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) Comment: GPGTools - https://gpgtools.org iQEcBAEBCgAGBQJVN7IRAAoJEDWi+S0W7cO1qk8H/1GS3dkgFUbeB3Cld4qa3buO 8VaNnCWex5P8GS0BceNVzwoKBtBxgQPhyx2zufJED5/MdK/heljq1IgaAM9/nMJ1 Al6MkZTbhuYtyEXu6qO7YwSRTQg5DXHbIe1lmylwdqTGkUXYPBq76TaSXAiKvEws HWoefTajUxUeqSOKtziKSXNXHAxIa2KZItP3ns+hlex0SJGkyHyYbwllt8pYXUto /5ir+KzaL+dO2CkSgGWCLwNL3opSYnCiAcFkr9KjvImUHmMeAwnpNmHYV8fbvxhA l6SQHgBhvfjjP3zsLQOCV2skQtADVsnr7Hc9xMPnzQLuxsGjZm80D/Qos/7ahdE= =1v6m -----END PGP SIGNATURE----- From nobody Wed Apr 22 08:39:35 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B5FAB1ACDAF for ; Wed, 22 Apr 2015 08:39:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.249 X-Spam-Level: X-Spam-Status: No, score=-1.249 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VuU31NgoIrIN for ; Wed, 22 Apr 2015 08:39:31 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C74D1ACD92 for ; Wed, 22 Apr 2015 08:39:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id t3MFcCLK018062; Wed, 22 Apr 2015 17:38:12 +0200 (CEST) Received: from alma.local (ip-77-24-86-181.web.vodafone.de [77.24.86.181]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3lX5WR3jRVz2v9c; Wed, 22 Apr 2015 17:38:11 +0200 (CEST) Date: Wed, 22 Apr 2015 17:38:06 +0200 From: Carsten Bormann To: =?utf-8?Q?=E2=8C=98_Matt_Miller?= , Jim Schaad , "=?utf-8?Q?cose=40ietf.org?=" Message-ID: In-Reply-To: <5537B1D2.2050702@cisco.com> References: <017601d07cad$0f29f9e0$2d7deda0$@augustcellars.com> <5537B1D2.2050702@cisco.com> X-Mailer: Airmail (286) MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="5537c05e_554cca6e_2525" Archived-At: Subject: Re: [Cose] Issue: Use arrays for some containers X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 15:39:33 -0000 --5537c05e_554cca6e_2525 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline So let=E2=80=99s recap the criteria here: =E2=80=94 representation size: =C2=A0that=E2=80=99s generally a wash (Jim= had a nice slide in Dallas), with a little benefit for arrays in a dense= ly populated place and maps in more sparsely populated structures; =E2=80=94 extensibility: Maps are obviously way more extensible. Arrays m= ake sense mostly where extensibility is hard to imagine (and not just as = proof by lack of imagination) or where there is another place that can ta= ke that extension (e.g., unprotected headers); =E2=80=94 coding effort/size: a wash for higher level language environmen= ts (Java+). Arrays are nice for C-level programming in that the sequence = in which you get the data is pre-determined, so there are no bugs caused = by varying processing order or such. Personally, I see some benefit for using arrays for small sets of data th= at mostly are present and come in well-defined sets (e.g., the top-level = structures for sign, mac, encrypt, and maybe the equivalent embedded sign= ature and encrypt structures). Completely eliding absent array elements is likely to be brittle. =C2=A0(= There may be no need to make header maps absent, by the way, as an empty = map is equivalent; an empty array also is a great representation of an em= pty recipient or signature set..) In the end, we are trying to make the representation compact enough that = bespoke formats (such as the one proposed as a strawman in Appendix C of=C2= =A0draft-selander-ace-object-security-01) are no longer attractive. =C2=A0= (I=E2=80=99m not saying that that format would work or that its size must= be matched exactly, but it=E2=80=99s an example of what people will come= up with if we do COSE wrong.) Gr=C3=BC=C3=9Fe, Carsten On 22 Apr 2015 at 16:38:07, =E2=8C=98 Matt Miller (mamille2=40cisco.com) = wrote: -----BEGIN PGP SIGNED MESSAGE----- =20 Hash: SHA512 =20 On 4/21/15 9:33 PM, Jim Schaad wrote: =20 > Questions: =20 > =20 > =20 > =20 > 1. Should we use arrays or maps as top level containers for COSE=3F =20 > =20 > =20 I would prefer maps. Since the space savings of arrays are =20 negligible, I'd rather have a model that lets me completely omit =20 things if I can. As Paul said, COSE implementations will need to =20 support maps and arrays for other parts of the structure, so there's =20 no code savings in using arrays over maps. =20 > =20 > 2. If we use arrays, should we always use nil elements to =20 > indicate absent elements or use them only when ambiguity in parsing =20 > arises=3F =20 > =20 > =20 If arrays are used, then absent elements MUST be null. =20 - -- =20 - - m&m =20 Matt Miller < mamille2=40cisco.com > =20 Cisco Systems, Inc. =20 -----BEGIN PGP SIGNATURE----- =20 Version: GnuPG/MacGPG2 v2.0.22 (Darwin) =20 Comment: GPGTools - https://gpgtools.org =20 iQEcBAEBCgAGBQJVN7HSAAoJEDWi+S0W7cO1aPsH/3OE2xNPB7bVUnHoPAI2VgZ0 =20 ReSHhX+yq74vk64V+enOEyppIxK8GEE9c1+4pK8xaUoMJBwMnaozu7XfPB/31Lfj =20 OJnX8k3UlRS4P91hx8xZXk2OY+Z45k1lOvv=469ow63/vCApAnhP0KWs1teiBCEBsK =20 3trBOJ3=46llbzCABPwhgCpCml2ybrq08qOPeyM261mMJfvcPNw3dzq/hWIoIhL07=46 =20 UZM/ne8OHJ7TThSW5LGe9iyvy3BoBWu/JHka5gXvtL+igHO2NAOkg9vIo+iENc9d =20 GbvazX5Yuc+wjsJdV/VQcIyxMUYXDTTYIiUposTaKXfnB48XCkNKh=46za5a1vzuk=3D =20 =3DZ8fe =20 -----END PGP SIGNATURE----- =20 =5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F= =5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F =20 Cose mailing list =20 Cose=40ietf.org =20 https://www.ietf.org/mailman/listinfo/cose =20 --5537c05e_554cca6e_2525 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline

    Be my guest to make the changes.

     

    Jim

     

     

    From:= = Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kathleen = Moriarty
    Sent: Wednesday, April 22, 2015 9:27 AM
    To: = Jim Schaad
    Cc: cose@ietf.org
    Subject: Re: [Cose] = Charter State

     

    Hi,

     

    I = am assuming the current charter text is at the = link:

     

    I = have some proposed changes that I think help with readability.  Let = me know if these are ok and I'll put in the charter for IESG = review.  All of the charter text is included, broken out by = sections to show edits.  In some cases, there is a Note: following = a change with assumptions I was making in case they were not correct = assumptions.

     

    Old:Concise = Binary Object Representation (CBOR, RFC 7049) is a concise binary format = for the serialization of data structured to an extended version of the = JSON data model. One motivation for CBOR was to make this data model = more amenable to constrained nodes and constrained node networks (RFC = 7228).

    New:

    Concise = Binary Object Representation (CBOR, RFC 7049) is a concise binary format = for the serialization of data structured to an extended version of the = JSON data model. One motivation for COSE was to reuse functionality from = the JOSE working group using the CBOR data representation as it is more = amenable to constrained nodes and constrained node networks (RFC = 7228).

     

    Old:

    The JOSE = working group recently completed producing representations for = cryptographic keys, message authentication (MACs), encryption, and = digital signatures, using JSON representation. This working group will = reuse the work done by JOSE, adapting it to the capabilities of CBOR. = This will rely on the JOSE registries, which, where this provides = additional efficiency, will be expanded with additional = information.

    New:

    The JOSE = working group recently completed producing representations for = cryptographic keys, message authentication (MACs), encryption, and = digital signatures, using JSON representation. COSE will rely on the = JOSE registries, and will be expand them with additional information = when necessary.

     

    Note: = you may have other reasons besides efficiency.

     

    Old:

    The = resulting formats will not be cryptographically convertible from or to = JOSE formats. This lack of a need for bit-for-bit compabitility which = will enable some simplification in the adaptation = process.

    New: =

    The = resulting formats will not be cryptographically convertible from or to = JOSE formats. This lack of a need for = bit-for-bit compatibility will enable some simplification in = the adaptation process.

     

    Old:

    Criteria = that should be considered on making decisions in changing from a JSON to = a CBOR encoding are:

    =C2=B7      = Keeping the = current JOSE paradigms and formatting where = feasible.

    =C2=B7      = Minimizing = message size, code size and computational complexity should be = considered (for the constrained environments where we expect to use = this).

    =C2=B7      = Improving = security

    =C2=B7      = Providing = new functionality that uses of JOSE did not require, but are required = for the new use cases.

    New: =

    Criteria = that should be considered in the decision making process, changing from = JSON to CBOR encoding include:

    =C2=B7      = Maintain = the current JOSE paradigms and formatting where = feasible.

    =C2=B7      = Minimize = message size, code size, and computational complexity to suit = constrained environments, where this is expected to  be = used.

    =C2=B7      = Improve = security

    =C2=B7      = Provide new = functionality for additional use cases that were not required for = JOSE. 

    Old:

    Issues = dealing with key management and binding of keys to identities are out of = scope for the working group.

    New:

    Key = management and binding of keys to identities are out of scope for the = working group.

     

    Note: = I am assuming you really want to out-of scope all key management and not = just issues?

     

    And I = don't see any need to tweak the rest of the text:

    The Working = group will coordinate its progress with the ACE, DICE and CORE working = groups to ensure that we are fulfilling the needs of these = constituencies. Other groups may be added to this list as the set of use = cases is expanded.

    The WG will = have two deliverables:

    • a standards-track = specification covering the same cryptographic formats from JOSE, with = optimizations for constrained device processing, expressed in = CBOR;
    • registration for = algorithms (such as AES-CCM-8) that are appropriate for constrained = environments.

    The Working = Group will use a wiki to track desired use cases for its work, but does = not intend to publish this as an RFC.

     <= /o:p>

    I'd love it if you can keep to the = milestones projected = :-)

    Thanks.
    Kathleen

     

    On Tue, = Apr 21, 2015 at 6:32 PM, Jim Schaad <ietf@augustcellars.com> wrote:

    The date change proposed by me has been merged into = the draft.

    I believe that we can now consider the charter = discussion to be complete unless anyone else has a big issue they want = to bring up.

    Kathleen:  Can we get this to move forward into = the IESG?

    Jim



    > -----Original Message-----
    > From: = Cose [mailto:cose-bounces@ietf.org] On = Behalf Of Kathleen Moriarty
    > Sent: Tuesday, April 14, 2015 7:17 = PM
    > To: Jim Schaad
    > Cc: Kepeng Li; Paul Hoffman; cose@ietf.org
    > Subject: Re: = [Cose] Charter State
    >
    >
    >
    > Sent from my = iPhone
    >
    > > On Apr 14, 2015, at 10:10 PM, "Jim = Schaad" <ietf@augustcellars.com>
    = > wrote:
    > >
    > >
    > >
    > >> = -----Original Message-----
    > >> From: Cose [mailto:cose-bounces@ietf.org] On = Behalf Of Kepeng Li
    > >> Sent: Tuesday, April 14, 2015 6:59 = PM
    > >> To: Paul Hoffman; Jim Schaad
    > >> Cc: cose@ietf.org
    > >> = Subject: Re: [Cose] Charter State
    > >>
    > >> = Thanks Paul.
    > >>
    > >> There are two other = changes we might want to incorporate:
    > >>
    > >> = 1) Proposal from Goran:
    > >> http://www.ietf.org/mail-archive/web/cose/current/msg00= 027.html
    > >>
    > >> OLD:
    > >> = "a standards-track specification covering the same = cryptographic
    > >> formats
    > > from
    > = >> JOSE, expressed in CBOR"
    > >>
    > >> = NEW:
    > >> "a standards-track specification covering the = same cryptographic
    > >> formats
    > > from
    > = >> JOSE and optimizations for constrained device processing, = expressed
    > >> in
    > > CBOR
    > >
    > = > I am agnostic about including this change.  We now are much = more
    > > constrained device focused later so it might not be = needed.
    > >
    > >>
    > >> (2) Proposal from = Kathleen:
    > >>
    > >> http://www.ietf.org/mail-archive/web/cose/current/msg00= 077.html
    > >>
    > >> OLD:
    > >> The = Working Group will coordinate its progress with the ACE, DICE = and
    > >> CoRE working groups to ensure that we are = fulfilling the needs of
    > >> these constituencies.
    > = >>
    > >> NEW:
    > >> The Working Group will = coordinate its progress with the ACE, DICE,
    > >> = CoRE
    > > and
    > >> DIME working groups to ensure = that we are fulfilling the needs of
    > >> these = constituencies.
    > >
    > > I am not sure that DIME is a = reasonable group to be coordinating with
    > > since it is not = clear that this would be the solution space they are
    > > going = to operate in.  It is true that this need something along = these
    > > lines, but what they need first is to get someone who = has good
    > > knowledge of what can be done in the group = first.  Given that this is
    > > major (telecom) vendors, = using CMS might be a better fit for this
    > >
    > > The = other question if we expand this list here rather than in the = wiki
    > > is the set of groups that Rene Struik though that = might be included
    > > here such as "6TiSCH, 6lo, RoLL, = etc" which seem to be much closer to
    > > the types of = groups that might use this specification going forward.
    > = >
    > > At this point, I think I would go with the list we = have and start
    > > adding more groups to the = wiki.
    >
    > I'm fine with that approach.  My point in = bringing up DIME was more that they
    > need help and this *could* = help them, but work needs to be done to figure
    > out what they = need at this point.  I brought it up just in case it's relevant = to
    > COSE.
    >
    > Thanks,
    > Kathleen
    > = >
    > > Jim
    > >
    > >>
    > = >>
    > >> Thanks,
    > >>
    > >> Kind = Regards
    > >> Kepeng
    > = >>

    > >> ? = 15/4/15 2:32 am, "Paul Hoffman" <paul.hoffman@vpnc.org> = ??:

    > >>
    > >>> On Apr = 14, 2015, at 11:20 AM, Jim Schaad <ietf@augustcellars.com>
    = > wrote:
    > >>>>
    > >>>> I would = like to get Pull Request #2 rolled into the draft charter
    > = >>>> and then I think we are ready to send it to the ADs and = IESG for review.
    > >>>>
    > >>>> Since = it is my pull request I have not done the merge preferring
    > = >>>> that it be done by one of the others who have = permissions.  If I
    > >>>> get a message saying do = the merge request I would be happy to pull
    > >>>> the = trigger on it.
    > >>>
    > >>> There seemed to = be general agreement, so I accepted the pull request.
    > = >>>
    > >>> Current version is at:
    > = >>> https://github.com/cose-spec/wg-charter/blob/master/dra= ft-charter.md
    > >>>
    > >>> --Paul = Hoffman
    > >>>
    > >>> = _______________________________________________
    > >>> = Cose mailing list
    > >>> Cose@ietf.org
    > >>> https://www.ietf.org/mailman/listinfo/cose
    > = >>
    > >>
    > >> = _______________________________________________
    > >> Cose = mailing list
    > >> Cose@ietf.org
    > >> https://www.ietf.org/mailman/listinfo/cose
    > = >
    > > = _______________________________________________
    > > Cose = mailing list
    > > Cose@ietf.org
    > > https://www.ietf.org/mailman/listinfo/cose
    ><= br>> _______________________________________________
    > Cose = mailing list
    > Cose@ietf.org
    > https://www.ietf.org/mailman/listinfo/cose



     

    -- =

     

    Best = regards,

    Kathleen

    ------=_NextPart_000_0227_01D07CE0.87D0F000-- From nobody Wed Apr 22 09:54:52 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 37BD11B3806 for ; Wed, 22 Apr 2015 09:54:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.399 X-Spam-Level: X-Spam-Status: No, score=-1.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, J_CHICKENPOX_37=0.6, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aD1tguG8Lo0F for ; Wed, 22 Apr 2015 09:54:47 -0700 (PDT) Received: from mail-lb0-x22d.google.com (mail-lb0-x22d.google.com [IPv6:2a00:1450:4010:c04::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 47BB01B380A for ; Wed, 22 Apr 2015 09:54:40 -0700 (PDT) Received: by lbbuc2 with SMTP id uc2so184980352lbb.2 for ; Wed, 22 Apr 2015 09:54:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=X1w2uATKK1cGrWlcl7UJlv4kHmbKg64ybN+l/IC4trY=; b=yApMbrCzC/AbmU9Lw6JfJ/7quiTscuqpowDG+R7WDU8gEgE3yDZcNMfu3+1CTZV/ix NXhwHy/e6L+SL6OdUkYrauz4zwfcldfQH1YxpKMEmH9PZELrjFejfb9i+BBgJFkO/EDl nT8zASVdHyKy6KgUUPJ8xQqF2eXrpA/Jf+xLlvwm38bF27+TRmSM9UGrK1bX1rZ+52AZ fHSTnrg7vfOAH4MIkolL5C768ZB74NzvfLwb1F9xTiBf1Loke/eXrpHU75lL8B9kyuoQ 9SB7211Hd2AncNIRQP/UwP34sECgRa7fTRgWPcP+SgMdobH5kEmtQsulKUts3g2z6Ckz cqsw== MIME-Version: 1.0 X-Received: by 10.152.204.40 with SMTP id kv8mr25222292lac.113.1429721678742; Wed, 22 Apr 2015 09:54:38 -0700 (PDT) Received: by 10.112.11.199 with HTTP; Wed, 22 Apr 2015 09:54:38 -0700 (PDT) In-Reply-To: <022601d07d1b$34298670$9c7c9350$@augustcellars.com> References: <043201d076df$aa87b770$ff972650$@augustcellars.com> <50A4152F-E8F1-4890-AD03-065899ACC3BB@vpnc.org> <04c701d07721$69175fb0$3b461f10$@augustcellars.com> <566CD668-1A69-4D37-A04E-98025906759D@gmail.com> <013d01d07c83$01465190$03d2f4b0$@augustcellars.com> <022601d07d1b$34298670$9c7c9350$@augustcellars.com> Date: Wed, 22 Apr 2015 12:54:38 -0400 Message-ID: From: Kathleen Moriarty To: Jim Schaad Content-Type: multipart/alternative; boundary=001a11347da6ca07eb05145304d3 Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Charter State X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 16:54:51 -0000 --001a11347da6ca07eb05145304d3 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Great, are others ok with the changes? If so, I'll get it rolling. On Wed, Apr 22, 2015 at 12:41 PM, Jim Schaad wrote= : > Be my guest to make the changes. > > > > Jim > > > > > > *From:* Cose [mailto:cose-bounces@ietf.org] *On Behalf Of *Kathleen > Moriarty > *Sent:* Wednesday, April 22, 2015 9:27 AM > *To:* Jim Schaad > > *Cc:* cose@ietf.org > *Subject:* Re: [Cose] Charter State > > > > Hi, > > > > I am assuming the current charter text is at the link: > > https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md > > > > I have some proposed changes that I think help with readability. Let me > know if these are ok and I'll put in the charter for IESG review. All of > the charter text is included, broken out by sections to show edits. In > some cases, there is a Note: following a change with assumptions I was > making in case they were not correct assumptions. > > > > Old:Concise Binary Object Representation (CBOR, RFC 7049) is a concise > binary format for the serialization of data structured to an extended > version of the JSON data model. One motivation for CBOR was to make this > data model more amenable to constrained nodes and constrained node networ= ks > (RFC 7228). > > New: > > Concise Binary Object Representation (CBOR, RFC 7049) is a concise binary > format for the serialization of data structured to an extended version of > the JSON data model. One motivation for COSE was to reuse functionality > from the JOSE working group using the CBOR data representation as it is > more amenable to constrained nodes and constrained node networks (RFC 722= 8). > > > > Old: > > The JOSE working group recently completed producing representations for > cryptographic keys, message authentication (MACs), encryption, and digita= l > signatures, using JSON representation. This working group will reuse the > work done by JOSE, adapting it to the capabilities of CBOR. This will rel= y > on the JOSE registries, which, where this provides additional efficiency, > will be expanded with additional information. > > New: > > The JOSE working group recently completed producing representations for > cryptographic keys, message authentication (MACs), encryption, and digita= l > signatures, using JSON representation. COSE will rely on the JOSE > registries, and will be expand them with additional information when > necessary. > > > > Note: you may have other reasons besides efficiency. > > > > Old: > > The resulting formats will not be cryptographically convertible from or t= o > JOSE formats. This lack of a need for bit-for-bit compabitility which wil= l > enable some simplification in the adaptation process. > > New: > > The resulting formats will not be cryptographically convertible from or t= o > JOSE formats. This lack of a need for bit-for-bit compatibility will enab= le > some simplification in the adaptation process. > > > > Old: > > Criteria that should be considered on making decisions in changing from a > JSON to a CBOR encoding are: > > =C2=B7 Keeping the current JOSE paradigms and formatting where feasi= ble. > > =C2=B7 Minimizing message size, code size and computational complexi= ty > should be considered (for the constrained environments where we expect to > use this). > > =C2=B7 Improving security > > =C2=B7 Providing new functionality that uses of JOSE did not require= , but > are required for the new use cases. > > New: > > Criteria that should be considered in the decision making process, > changing from JSON to CBOR encoding include: > > =C2=B7 Maintain the current JOSE paradigms and formatting where feas= ible. > > =C2=B7 Minimize message size, code size, and computational complexit= y to > suit constrained environments, where this is expected to be used. > > =C2=B7 Improve security > > =C2=B7 Provide new functionality for additional use cases that were = not > required for JOSE. > > Old: > > Issues dealing with key management and binding of keys to identities are > out of scope for the working group. > > New: > > Key management and binding of keys to identities are out of scope for the > working group. > > > > Note: I am assuming you really want to out-of scope all key management an= d > not just issues? > > > > And I don't see any need to tweak the rest of the text: > > The Working group will coordinate its progress with the ACE, DICE and COR= E > working groups to ensure that we are fulfilling the needs of these > constituencies. Other groups may be added to this list as the set of use > cases is expanded. > > The WG will have two deliverables: > > - a standards-track specification covering the same cryptographic > formats from JOSE, with optimizations for constrained device processin= g, > expressed in CBOR; > - registration for algorithms (such as AES-CCM-8) that are appropriate > for constrained environments. > > The Working Group will use a wiki to track desired use cases for its work= , > but does not intend to publish this as an RFC. > > > > I'd love it if you can keep to the milestones projected :-) > > Thanks. > Kathleen > > > > On Tue, Apr 21, 2015 at 6:32 PM, Jim Schaad > wrote: > > The date change proposed by me has been merged into the draft. > > I believe that we can now consider the charter discussion to be complete > unless anyone else has a big issue they want to bring up. > > Kathleen: Can we get this to move forward into the IESG? > > Jim > > > > > -----Original Message----- > > From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kathleen Moriart= y > > Sent: Tuesday, April 14, 2015 7:17 PM > > To: Jim Schaad > > Cc: Kepeng Li; Paul Hoffman; cose@ietf.org > > Subject: Re: [Cose] Charter State > > > > > > > > Sent from my iPhone > > > > > On Apr 14, 2015, at 10:10 PM, "Jim Schaad" > > wrote: > > > > > > > > > > > >> -----Original Message----- > > >> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kepeng Li > > >> Sent: Tuesday, April 14, 2015 6:59 PM > > >> To: Paul Hoffman; Jim Schaad > > >> Cc: cose@ietf.org > > >> Subject: Re: [Cose] Charter State > > >> > > >> Thanks Paul. > > >> > > >> There are two other changes we might want to incorporate: > > >> > > >> 1) Proposal from Goran: > > >> http://www.ietf.org/mail-archive/web/cose/current/msg00027.html > > >> > > >> OLD: > > >> "a standards-track specification covering the same cryptographic > > >> formats > > > from > > >> JOSE, expressed in CBOR" > > >> > > >> NEW: > > >> "a standards-track specification covering the same cryptographic > > >> formats > > > from > > >> JOSE and optimizations for constrained device processing, expressed > > >> in > > > CBOR > > > > > > I am agnostic about including this change. We now are much more > > > constrained device focused later so it might not be needed. > > > > > >> > > >> (2) Proposal from Kathleen: > > >> > > >> http://www.ietf.org/mail-archive/web/cose/current/msg00077.html > > >> > > >> OLD: > > >> The Working Group will coordinate its progress with the ACE, DICE an= d > > >> CoRE working groups to ensure that we are fulfilling the needs of > > >> these constituencies. > > >> > > >> NEW: > > >> The Working Group will coordinate its progress with the ACE, DICE, > > >> CoRE > > > and > > >> DIME working groups to ensure that we are fulfilling the needs of > > >> these constituencies. > > > > > > I am not sure that DIME is a reasonable group to be coordinating with > > > since it is not clear that this would be the solution space they are > > > going to operate in. It is true that this need something along these > > > lines, but what they need first is to get someone who has good > > > knowledge of what can be done in the group first. Given that this is > > > major (telecom) vendors, using CMS might be a better fit for this > > > > > > The other question if we expand this list here rather than in the wik= i > > > is the set of groups that Rene Struik though that might be included > > > here such as "6TiSCH, 6lo, RoLL, etc" which seem to be much closer to > > > the types of groups that might use this specification going forward. > > > > > > At this point, I think I would go with the list we have and start > > > adding more groups to the wiki. > > > > I'm fine with that approach. My point in bringing up DIME was more tha= t > they > > need help and this *could* help them, but work needs to be done to figu= re > > out what they need at this point. I brought it up just in case it's > relevant to > > COSE. > > > > Thanks, > > Kathleen > > > > > > Jim > > > > > >> > > >> > > >> Thanks, > > >> > > >> Kind Regards > > >> Kepeng > > >> > > > >> ? 15/4/15 2:32 am, "Paul Hoffman" ??: > > > >> > > >>> On Apr 14, 2015, at 11:20 AM, Jim Schaad > > wrote: > > >>>> > > >>>> I would like to get Pull Request #2 rolled into the draft charter > > >>>> and then I think we are ready to send it to the ADs and IESG for > review. > > >>>> > > >>>> Since it is my pull request I have not done the merge preferring > > >>>> that it be done by one of the others who have permissions. If I > > >>>> get a message saying do the merge request I would be happy to pull > > >>>> the trigger on it. > > >>> > > >>> There seemed to be general agreement, so I accepted the pull reques= t. > > >>> > > >>> Current version is at: > > >>> https://github.com/cose-spec/wg-charter/blob/master/draft-charter.m= d > > >>> > > >>> --Paul Hoffman > > >>> > > >>> _______________________________________________ > > >>> Cose mailing list > > >>> Cose@ietf.org > > >>> https://www.ietf.org/mailman/listinfo/cose > > >> > > >> > > >> _______________________________________________ > > >> Cose mailing list > > >> Cose@ietf.org > > >> https://www.ietf.org/mailman/listinfo/cose > > > > > > _______________________________________________ > > > Cose mailing list > > > Cose@ietf.org > > > https://www.ietf.org/mailman/listinfo/cose > > > > _______________________________________________ > > Cose mailing list > > Cose@ietf.org > > https://www.ietf.org/mailman/listinfo/cose > > > > > > -- > > > > Best regards, > > Kathleen > --=20 Best regards, Kathleen --001a11347da6ca07eb05145304d3 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
    Great, are others ok with the changes?=C2=A0 If so, I'= ll get it rolling.

    On Wed, Apr 22, 2015 at 12:41 PM, Jim Schaad <<= a href=3D"mailto:ietf@augustcellars.com" target=3D"_blank">ietf@augustcella= rs.com> wrote:

    Be my guest to make the changes.

    =C2=A0

    Jim<= /span>

    =C2=A0

    = =C2=A0

    From: Cose [mailto:cose-bounces@ietf.org] On Behalf O= f Kathleen Moriarty
    Sent: Wednesday, April 22, 2015 9:27 AMTo: Jim Schaad


    Cc: cose@ietf.org
    Sub= ject: Re: [Cose] Charter State

    =C2=A0

    <= div>

    Hi,

    =C2=A0

    I am assuming th= e current charter text is at the link:

    =C2=A0

    I = have some proposed changes that I think help with readability.=C2=A0 Let me= know if these are ok and I'll put in the charter for IESG review.=C2= =A0 All of the charter text is included, broken out by sections to show edi= ts.=C2=A0 In some cases, there is a Note: following a change with assumptio= ns I was making in case they were not correct assumptions.

    =C2=A0

    Old:Concise Binary Object Representation (CBO= R, RFC 7049) is a concise binary format for the serialization of data struc= tured to an extended version of the JSON data model. One motivation for CBO= R was to make this data model more amenable to constrained nodes and constr= ained node networks (RFC 7228).

    New:

    Con= cise Binary Object Representation (CBOR, RFC 7049) is a concise binary form= at for the serialization of data structured to an extended version of the J= SON data model. One motivation for COSE was to reuse functionality from the= JOSE working group using the CBOR data representation as it is more amenab= le to constrained nodes and constrained node networks (RFC 7228).=

    =C2=A0

    Old:

    The JOSE working group recently completed producing represent= ations for cryptographic keys, message authentication (MACs), encryption, a= nd digital signatures, using JSON representation. This working group will r= euse the work done by JOSE, adapting it to the capabilities of CBOR. This w= ill rely on the JOSE registries, which, where this provides additional effi= ciency, will be expanded with additional information.<= /p>

    New:

    The JOSE working group recently completed producing repr= esentations for cryptographic keys, message authentication (MACs), encrypti= on, and digital signatures, using JSON representation. COSE will rely on th= e JOSE registries, and will be expand them with additional information when= necessary.

    =C2=A0

    Note: you may have other re= asons besides efficiency.

    <= /u>=C2=A0

    Old:

    The resulting formats will not be crypt= ographically convertible from or to JOSE formats. This lack of a need for b= it-for-bit compabitility which will enable some simplification in the adapt= ation process.

    New:

    The resulting forma= ts will not be cryptographically convertible from or to JOSE formats. This = lack of a need for bit-for-bit=C2=A0compatibility=C2=A0will enable some sim= plification in the adaptation process.

    <= p class=3D"MsoNormal">=C2=A0

    = Old:

    Criteria that should be c= onsidered on making decisions in changing from a JSON to a CBOR encoding ar= e:

    =C2=B7=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <= /span>Keeping the current JOSE paradigms and formatting = where feasible.

    =C2=B7=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 = Minimizing message size, code size = and computational complexity should be considered (for the constrained envi= ronments where we expect to use this).

    = =C2=B7=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0 Improving sec= urity

    =C2=B7=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Providing new functionality that uses of JOSE d= id not require, but are required for the new use cases.

    New:

    Criteria that should be considered in the decision making process= , changing from JSON to CBOR encoding include:

    =C2=B7= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Main= tain the current JOSE paradigms and formatting where feasible.

    =C2=B7=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Minimize message size, code size, and computational complexity to= suit constrained environments, where this is expected to =C2=A0be used.=

    =C2=B7=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Improve security

    =C2=B7=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0 Provide new func= tionality for additional use cases that were not required for JOSE.=C2=A0

    Old:

    <= div>

    Issues dealing with key management a= nd binding of keys to identities are out of scope for the working group.

    New:

    Key management and binding of keys to= identities are out of scope for the working group.

    =C2=A0

    Note: I am assuming you really want to out-of scope all key = management and not just issues?

    =C2=A0

    And I don't see = any need to tweak the rest of the text:

    The Working group will coordinate its progress with the ACE, DICE= and CORE working groups to ensure that we are fulfilling the needs of thes= e constituencies. Other groups may be added to this list as the set of use = cases is expanded.

    The WG wi= ll have two deliverables:

    • a standards-track= specification covering the same cryptographic formats from JOSE, with opti= mizations for constrained device processing, expressed in CBOR;
    • registration for algorithms (such as AES-CCM-8) that are appropriate fo= r constrained environments.

    The Working Group will use a wiki to track desired use cases for its = work, but does not intend to publish this as an RFC.

    =C2=A0

    I'd love it if you can keep to the milestones projected :-)

    = Thanks.
    Kathleen

    =C2=A0

    On Tue, Apr 21, 2015 = at 6:32 PM, Jim Schaad <ietf@augustcellars.com> wrote:

    The date change proposed by me has been merged into the draf= t.

    I believe that we can now consider the charter discussion to be c= omplete unless anyone else has a big issue they want to bring up.

    Ka= thleen:=C2=A0 Can we get this to move forward into the IESG?

    Jim<= /u>



    > -----Original M= essage-----
    > From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kathleen Mor= iarty
    > Sent: Tuesday, April 14, 2015 7:17 PM
    > To: Jim Schaad<= br>> Cc: Kepeng Li; Paul Hoffman; cose@ietf.org
    > Subject: Re: [Cose] Charter State>
    >
    >
    > Sent from my iPhone
    >
    > > On A= pr 14, 2015, at 10:10 PM, "Jim Schaad" <ietf@augustcellars.com>
    >= ; wrote:
    > >
    > >
    > >
    > >> -----Origi= nal Message-----
    > >> From: Cose [mailto:cose-bounces@ietf.org] On Behalf O= f Kepeng Li
    > >> Sent: Tuesday, April 14, 2015 6:59 PM
    > = >> To: Paul Hoffman; Jim Schaad
    > >> Cc: cose@ietf.org
    > >> Subje= ct: Re: [Cose] Charter State
    > >>
    > >> Thanks Paul.=
    > >>
    > >> There are two other changes we might wan= t to incorporate:
    > >>
    > >> 1) Proposal from Goran:=
    > >> http://www.ietf.org/mail-archive/web/c= ose/current/msg00027.html
    > >>
    > >> OLD:
    >= ; >> "a standards-track specification covering the same cryptogr= aphic
    > >> formats
    > > from
    > >> JOSE, exp= ressed in CBOR"
    > >>
    > >> NEW:
    > >>= ; "a standards-track specification covering the same cryptographic
    = > >> formats
    > > from
    > >> JOSE and optimizat= ions for constrained device processing, expressed
    > >> in
    &g= t; > CBOR
    > >
    > > I am agnostic about including this c= hange.=C2=A0 We now are much more
    > > constrained device focused l= ater so it might not be needed.
    > >
    > >>
    > >&= gt; (2) Proposal from Kathleen:
    > >>
    > >> http://www.ietf.org/mail-archive/web/cose/current/msg00077.html=
    > >>
    > >> OLD:
    > >> The Working Gr= oup will coordinate its progress with the ACE, DICE and
    > >> Co= RE working groups to ensure that we are fulfilling the needs of
    > >= ;> these constituencies.
    > >>
    > >> NEW:
    > = >> The Working Group will coordinate its progress with the ACE, DICE,=
    > >> CoRE
    > > and
    > >> DIME working group= s to ensure that we are fulfilling the needs of
    > >> these cons= tituencies.
    > >
    > > I am not sure that DIME is a reasonab= le group to be coordinating with
    > > since it is not clear that th= is would be the solution space they are
    > > going to operate in.= =C2=A0 It is true that this need something along these
    > > lines, = but what they need first is to get someone who has good
    > > knowle= dge of what can be done in the group first.=C2=A0 Given that this is
    >= ; > major (telecom) vendors, using CMS might be a better fit for this> >
    > > The other question if we expand this list here rath= er than in the wiki
    > > is the set of groups that Rene Struik thou= gh that might be included
    > > here such as "6TiSCH, 6lo, RoLL= , etc" which seem to be much closer to
    > > the types of group= s that might use this specification going forward.
    > >
    > >= ; At this point, I think I would go with the list we have and start
    >= > adding more groups to the wiki.
    >
    > I'm fine with tha= t approach.=C2=A0 My point in bringing up DIME was more that they
    > n= eed help and this *could* help them, but work needs to be done to figure> out what they need at this point.=C2=A0 I brought it up just in case = it's relevant to
    > COSE.
    >
    > Thanks,
    > Kathleen=
    > >
    > > Jim
    > >
    > >>
    > >&g= t;
    > >> Thanks,
    > >>
    > >> Kind Regards<= br>> >> Kepeng
    > >>

    > >> ? 15/4/15 2:32 am, "Paul Hoffman"= <paul.hoffma= n@vpnc.org> ??:

    > >>
    > >>> On Apr 14, = 2015, at 11:20 AM, Jim Schaad <ietf@augustcellars.com>
    > wrote:
    > &g= t;>>>
    > >>>> I would like to get Pull Request #2= rolled into the draft charter
    > >>>> and then I think we= are ready to send it to the ADs and IESG for review.
    > >>>&= gt;
    > >>>> Since it is my pull request I have not done th= e merge preferring
    > >>>> that it be done by one of the o= thers who have permissions.=C2=A0 If I
    > >>>> get a messa= ge saying do the merge request I would be happy to pull
    > >>>= ;> the trigger on it.
    > >>>
    > >>> There se= emed to be general agreement, so I accepted the pull request.
    > >&= gt;>
    > >>> Current version is at:
    > >>> https://github.com/cose-spec/wg-charter/blob/master/d= raft-charter.md
    > >>>
    > >>> --Paul Hoffma= n
    > >>>
    > >>> _______________________________= ________________
    > >>> Cose mailing list
    > >>>= ; Cose@ietf.org
    &= gt; >>> https://www.ietf.org/mailman/listinfo/cose
    > >&= gt;
    > >>
    > >> _____________________________________= __________
    > >> Cose mailing list
    > >> Cose@ietf.org
    > >> <= a href=3D"https://www.ietf.org/mailman/listinfo/cose" target=3D"_blank">htt= ps://www.ietf.org/mailman/listinfo/cose
    > >
    > > _____= __________________________________________
    > > Cose mailing list> > Cose@ietf.or= g
    > > https://www.ietf.org/mailman/listinfo/cose
    >
    = > _______________________________________________
    > Cose mailing l= ist
    > Cose@ietf.or= g
    > https://www.ietf.org/mailman/listinfo/cose



    <= /u>

    =C2=A0

    --

    =C2=A0

    Best regards,

    Kathleen

    <= /div>



    --

    Best regards,
    Kathleen
    --001a11347da6ca07eb05145304d3-- From nobody Wed Apr 22 10:02:21 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5CC51B3845 for ; Wed, 22 Apr 2015 10:02:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.347 X-Spam-Level: X-Spam-Status: No, score=-1.347 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_COM=0.553] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Vm9Y6ZXte9I8 for ; Wed, 22 Apr 2015 10:02:20 -0700 (PDT) Received: from proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D177E1B3889 for ; Wed, 22 Apr 2015 10:01:35 -0700 (PDT) Received: from [10.20.30.101] (50-1-98-218.dsl.dynamic.fusionbroadband.com [50.1.98.218]) (authenticated bits=0) by proper.com (8.15.1/8.14.9) with ESMTPSA id t3MH1WQ5011828 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 22 Apr 2015 10:01:33 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) X-Authentication-Warning: proper.com: Host 50-1-98-218.dsl.dynamic.fusionbroadband.com [50.1.98.218] claimed to be [10.20.30.101] Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\)) From: Paul Hoffman In-Reply-To: Date: Wed, 22 Apr 2015 10:01:32 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: <31D7BE2E-1D60-4D1B-8104-C8A3C21C114C@vpnc.org> References: <043201d076df$aa87b770$ff972650$@augustcellars.com> <50A4152F-E8F1-4890-AD03-065899ACC3BB@vpnc.org> <04c701d07721$69175fb0$3b461f10$@augustcellars.com> <566CD668-1A69-4D37-A04E-98025906759D@gmail.com> <013d01d07c83$01465190$03d2f4b0$@augustcellars.com> <022601d07d1b$34298670$9c7c9350$@augustcellars.com> To: Kathleen Moriarty X-Mailer: Apple Mail (2.2098) Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Charter State X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 17:02:20 -0000 On Apr 22, 2015, at 9:54 AM, Kathleen Moriarty = wrote: > Great, are others ok with the changes? If so, I'll get it rolling. They look fine to me, as does rolling. --Paul Hoffman= From nobody Wed Apr 22 10:48:21 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1345B1A6FEA for ; Wed, 22 Apr 2015 10:48:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.5 X-Spam-Level: * X-Spam-Status: No, score=1.5 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DATE_IN_PAST_12_24=1.049, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_CHARSET_FARAWAY=2.45, MIME_QP_LONG_LINE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xQYQTsTd0QpL for ; Wed, 22 Apr 2015 10:48:18 -0700 (PDT) Received: from out4133-18.mail.aliyun.com (out4133-18.mail.aliyun.com [42.120.133.18]) by ietfa.amsl.com (Postfix) with ESMTP id D02391A0406 for ; Wed, 22 Apr 2015 10:47:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alibaba-inc.com; s=default; t=1429724877; h=Date:Subject:From:To:Message-ID:Mime-version:Content-type; bh=bPnWi9rb42FbnX9EZiIhVI7Lw5QQ29J6UKF9i+PM9k0=; b=t11/WRNg4VIBsmg4A5eGmUNUwmCftXAgiA8qC0BTSDBi1z0G2Eek49sdMXU0vYpsmRizyW6C4p7JQRNBW8LoQUvpzK5WurRn/mHTuQps5o8hX8JxmjoMMprbzy+ZS/gc/QV4Bz2KAa7AGjy0RqwQKDjuH1gkL42FCC272c/TP5g= X-Alimail-AntiSpam: AC=PASS; BC=-1|-1; BR=01201311R101e4; FP=0|-1|-1|-1|0|-1|-1|-1; HT=r46d02004; MF=kepeng.lkp@alibaba-inc.com; PH=DS; RN=3; RT=3; SR=0; Received: from 10.22.57.7(mailfrom:kepeng.lkp@alibaba-inc.com ip:42.120.73.208) by smtp.aliyun-inc.com(127.0.0.1); Thu, 23 Apr 2015 01:47:53 +0800 User-Agent: Microsoft-MacOutlook/14.4.8.150116 Date: Wed, 22 Apr 2015 10:47:48 +0800 From: "Kepeng Li" To: Paul Hoffman , Kathleen Moriarty Message-ID: Thread-Topic: [Cose] Charter State References: <043201d076df$aa87b770$ff972650$@augustcellars.com> <50A4152F-E8F1-4890-AD03-065899ACC3BB@vpnc.org> <04c701d07721$69175fb0$3b461f10$@augustcellars.com> <566CD668-1A69-4D37-A04E-98025906759D@gmail.com> <013d01d07c83$01465190$03d2f4b0$@augustcellars.com> <022601d07d1b$34298670$9c7c9350$@augustcellars.com> <31D7BE2E-1D60-4D1B-8104-C8A3C21C114C@vpnc.org> In-Reply-To: <31D7BE2E-1D60-4D1B-8104-C8A3C21C114C@vpnc.org> Mime-version: 1.0 Content-type: text/plain; charset="GB2312" Content-transfer-encoding: quoted-printable Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Charter State X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 17:48:20 -0000 Fine with me. Thanks. Kind Regards Kepeng =D4=DA 23/4/15 1:01 am=A3=AC "Paul Hoffman" =D0=B4=C8=EB: >On Apr 22, 2015, at 9:54 AM, Kathleen Moriarty > wrote: >> Great, are others ok with the changes? If so, I'll get it rolling. > >They look fine to me, as does rolling. > >--Paul Hoffman >_______________________________________________ >Cose mailing list >Cose@ietf.org >https://www.ietf.org/mailman/listinfo/cose From nobody Wed Apr 22 11:04:15 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D1C281ACEE8 for ; Wed, 22 Apr 2015 11:04:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.948 X-Spam-Level: X-Spam-Status: No, score=-0.948 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, HTML_MESSAGE=0.001, J_CHICKENPOX_37=0.6, MIME_QP_LONG_LINE=0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id huTiZ2pXA8tv for ; Wed, 22 Apr 2015 11:04:10 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A49F91ACEFD for ; Wed, 22 Apr 2015 11:04:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [134.102.201.11]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id t3MI2q6L015769; Wed, 22 Apr 2015 20:02:52 +0200 (CEST) Received: from [77.24.86.181] (ip-77-24-86-181.web.vodafone.de [77.24.86.181]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3lX8kN2NMfz2tNs; Wed, 22 Apr 2015 20:02:52 +0200 (CEST) Content-Type: multipart/alternative; boundary=Apple-Mail-E3059C52-12A2-47A0-904F-F95405DDE70B Mime-Version: 1.0 (1.0) From: Carsten Bormann X-Mailer: iPad Mail (12F69) In-Reply-To: Date: Wed, 22 Apr 2015 20:02:54 +0200 Content-Transfer-Encoding: 7bit Message-Id: <69AEF5E5-2CE6-4F60-B8F0-7CEE53134AE0@tzi.org> References: <043201d076df$aa87b770$ff972650$@augustcellars.com> <50A4152F-E8F1-4890-AD03-065899ACC3BB@vpnc.org> <04c701d07721$69175fb0$3b461f10$@augustcellars.com> <566CD668-1A69-4D37-A04E-98025906759D@gmail.com> <013d01d07c83$01465190$03d2f4b0$@augustcellars.com> To: Kathleen Moriarty Archived-At: Cc: Jim Schaad , "cose@ietf.org" Subject: Re: [Cose] Charter State X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 18:04:14 -0000 --Apple-Mail-E3059C52-12A2-47A0-904F-F95405DDE70B Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable s/will be expand them/will expand them/ Looks fine otherwise, and I also agree with rolling this now.=20 Thanks for the clarifying!=20 Sent from my iPad while stuck in the German train driver strike > On 22.04.2015, at 18:27, Kathleen Moriarty wrote: >=20 > Hi, >=20 > I am assuming the current charter text is at the link: > https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md >=20 > I have some proposed changes that I think help with readability. Let me k= now if these are ok and I'll put in the charter for IESG review. All of the= charter text is included, broken out by sections to show edits. In some ca= ses, there is a Note: following a change with assumptions I was making in ca= se they were not correct assumptions. >=20 > Old:Concise Binary Object Representation (CBOR, RFC 7049) is a concise bin= ary format for the serialization of data structured to an extended version o= f the JSON data model. One motivation for CBOR was to make this data model m= ore amenable to constrained nodes and constrained node networks (RFC 7228). > New: > Concise Binary Object Representation (CBOR, RFC 7049) is a concise binary f= ormat for the serialization of data structured to an extended version of the= JSON data model. One motivation for COSE was to reuse functionality from th= e JOSE working group using the CBOR data representation as it is more amenab= le to constrained nodes and constrained node networks (RFC 7228). >=20 > Old: > The JOSE working group recently completed producing representations for cr= yptographic keys, message authentication (MACs), encryption, and digital sig= natures, using JSON representation. This working group will reuse the work d= one by JOSE, adapting it to the capabilities of CBOR. This will rely on the J= OSE registries, which, where this provides additional efficiency, will be ex= panded with additional information. > New: > The JOSE working group recently completed producing representations for cr= yptographic keys, message authentication (MACs), encryption, and digital sig= natures, using JSON representation. COSE will rely on the JOSE registries, a= nd will be expand them with additional information when necessary. >=20 > Note: you may have other reasons besides efficiency. >=20 > Old: > The resulting formats will not be cryptographically convertible from or to= JOSE formats. This lack of a need for bit-for-bit compabitility which will e= nable some simplification in the adaptation process. > New: > The resulting formats will not be cryptographically convertible from or to= JOSE formats. This lack of a need for bit-for-bit compatibility will enable= some simplification in the adaptation process. >=20 > Old: > Criteria that should be considered on making decisions in changing from a J= SON to a CBOR encoding are: >=20 > Keeping the current JOSE paradigms and formatting where feasible. >=20 > Minimizing message size, code size and computational complexity should be c= onsidered (for the constrained environments where we expect to use this). >=20 > Improving security >=20 > Providing new functionality that uses of JOSE did not require, but are req= uired for the new use cases. >=20 > New: > Criteria that should be considered in the decision making process, changin= g from JSON to CBOR encoding include: >=20 > Maintain the current JOSE paradigms and formatting where feasible. >=20 > Minimize message size, code size, and computational complexity to suit con= strained environments, where this is expected to be used. >=20 > Improve security >=20 > Provide new functionality for additional use cases that were not required f= or JOSE.=20 >=20 > Old: > Issues dealing with key management and binding of keys to identities are o= ut of scope for the working group. > New: > Key management and binding of keys to identities are out of scope for the w= orking group. >=20 > Note: I am assuming you really want to out-of scope all key management and= not just issues? >=20 > And I don't see any need to tweak the rest of the text: > The Working group will coordinate its progress with the ACE, DICE and CORE= working groups to ensure that we are fulfilling the needs of these constitu= encies. Other groups may be added to this list as the set of use cases is ex= panded. >=20 > The WG will have two deliverables: >=20 > a standards-track specification covering the same cryptographic formats fr= om JOSE, with optimizations for constrained device processing, expressed in C= BOR; > registration for algorithms (such as AES-CCM-8) that are appropriate for c= onstrained environments. > The Working Group will use a wiki to track desired use cases for its work,= but does not intend to publish this as an RFC. >=20 >=20 >=20 > I'd love it if you can keep to the milestones projected :-) >=20 > Thanks. > Kathleen >=20 >> On Tue, Apr 21, 2015 at 6:32 PM, Jim Schaad wrot= e: >> The date change proposed by me has been merged into the draft. >>=20 >> I believe that we can now consider the charter discussion to be complete u= nless anyone else has a big issue they want to bring up. >>=20 >> Kathleen: Can we get this to move forward into the IESG? >>=20 >> Jim >>=20 >>=20 >> > -----Original Message----- >> > From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kathleen Moriart= y >> > Sent: Tuesday, April 14, 2015 7:17 PM >> > To: Jim Schaad >> > Cc: Kepeng Li; Paul Hoffman; cose@ietf.org >> > Subject: Re: [Cose] Charter State >> > >> > >> > >> > Sent from my iPhone >> > >> > > On Apr 14, 2015, at 10:10 PM, "Jim Schaad" >> > wrote: >> > > >> > > >> > > >> > >> -----Original Message----- >> > >> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kepeng Li >> > >> Sent: Tuesday, April 14, 2015 6:59 PM >> > >> To: Paul Hoffman; Jim Schaad >> > >> Cc: cose@ietf.org >> > >> Subject: Re: [Cose] Charter State >> > >> >> > >> Thanks Paul. >> > >> >> > >> There are two other changes we might want to incorporate: >> > >> >> > >> 1) Proposal from Goran: >> > >> http://www.ietf.org/mail-archive/web/cose/current/msg00027.html >> > >> >> > >> OLD: >> > >> "a standards-track specification covering the same cryptographic >> > >> formats >> > > from >> > >> JOSE, expressed in CBOR" >> > >> >> > >> NEW: >> > >> "a standards-track specification covering the same cryptographic >> > >> formats >> > > from >> > >> JOSE and optimizations for constrained device processing, expressed >> > >> in >> > > CBOR >> > > >> > > I am agnostic about including this change. We now are much more >> > > constrained device focused later so it might not be needed. >> > > >> > >> >> > >> (2) Proposal from Kathleen: >> > >> >> > >> http://www.ietf.org/mail-archive/web/cose/current/msg00077.html >> > >> >> > >> OLD: >> > >> The Working Group will coordinate its progress with the ACE, DICE an= d >> > >> CoRE working groups to ensure that we are fulfilling the needs of >> > >> these constituencies. >> > >> >> > >> NEW: >> > >> The Working Group will coordinate its progress with the ACE, DICE, >> > >> CoRE >> > > and >> > >> DIME working groups to ensure that we are fulfilling the needs of >> > >> these constituencies. >> > > >> > > I am not sure that DIME is a reasonable group to be coordinating with= >> > > since it is not clear that this would be the solution space they are >> > > going to operate in. It is true that this need something along these= >> > > lines, but what they need first is to get someone who has good >> > > knowledge of what can be done in the group first. Given that this is= >> > > major (telecom) vendors, using CMS might be a better fit for this >> > > >> > > The other question if we expand this list here rather than in the wik= i >> > > is the set of groups that Rene Struik though that might be included >> > > here such as "6TiSCH, 6lo, RoLL, etc" which seem to be much closer to= >> > > the types of groups that might use this specification going forward. >> > > >> > > At this point, I think I would go with the list we have and start >> > > adding more groups to the wiki. >> > >> > I'm fine with that approach. My point in bringing up DIME was more tha= t they >> > need help and this *could* help them, but work needs to be done to figu= re >> > out what they need at this point. I brought it up just in case it's re= levant to >> > COSE. >> > >> > Thanks, >> > Kathleen >> > > >> > > Jim >> > > >> > >> >> > >> >> > >> Thanks, >> > >> >> > >> Kind Regards >> > >> Kepeng >> > >> >> > >> ? 15/4/15 2:32 am, "Paul Hoffman" ??: >> > >> >> > >>> On Apr 14, 2015, at 11:20 AM, Jim Schaad >> > wrote: >> > >>>> >> > >>>> I would like to get Pull Request #2 rolled into the draft charter >> > >>>> and then I think we are ready to send it to the ADs and IESG for r= eview. >> > >>>> >> > >>>> Since it is my pull request I have not done the merge preferring >> > >>>> that it be done by one of the others who have permissions. If I >> > >>>> get a message saying do the merge request I would be happy to pull= >> > >>>> the trigger on it. >> > >>> >> > >>> There seemed to be general agreement, so I accepted the pull reques= t. >> > >>> >> > >>> Current version is at: >> > >>> https://github.com/cose-spec/wg-charter/blob/master/draft-charter.m= d >> > >>> >> > >>> --Paul Hoffman >> > >>> >> > >>> _______________________________________________ >> > >>> Cose mailing list >> > >>> Cose@ietf.org >> > >>> https://www.ietf.org/mailman/listinfo/cose >> > >> >> > >> >> > >> _______________________________________________ >> > >> Cose mailing list >> > >> Cose@ietf.org >> > >> https://www.ietf.org/mailman/listinfo/cose >> > > >> > > _______________________________________________ >> > > Cose mailing list >> > > Cose@ietf.org >> > > https://www.ietf.org/mailman/listinfo/cose >> > >> > _______________________________________________ >> > Cose mailing list >> > Cose@ietf.org >> > https://www.ietf.org/mailman/listinfo/cose >>=20 >=20 >=20 >=20 > --=20 >=20 > Best regards, > Kathleen > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose --Apple-Mail-E3059C52-12A2-47A0-904F-F95405DDE70B Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable
    s/will be expand them/will expand them= /

    Looks fine otherwise, and I also agree with rolli= ng this now. 
    Thanks for the clarifying! 

    Sent fr= om my iPad while stuck in the German train driver strike

    On 22= .04.2015, at 18:27, Kathleen Moriarty <kathleen.moriarty.ietf@gmail.com> wrote:

    Hi,

    I a= m assuming the current charter text is at the link:

    I have some proposed changes that I think help with readabi= lity.  Let me know if these are ok and I'll put in the charter for IESG= review.  All of the charter text is included, broken out by sections t= o show edits.  In some cases, there is a Note: following a change with a= ssumptions I was making in case they were not correct assumptions.

    Old:Concise Binary Object Representation (CBOR, RFC 70= 49) is a concise binary format for the serialization of data structured to a= n extended version of the JSON data model. One motivation for CBOR was to ma= ke this data model more amenable to constrained nodes and constrained node n= etworks (RFC 7228).
    New:
    Concise Binary Object Rep= resentation (CBOR, RFC 7049) is a concise binary format for the serializatio= n of data structured to an extended version of the JSON data model. One moti= vation for COSE was to reuse functionality from the JOSE working group using= the CBOR data representation as it is more amenable to constrained nodes an= d constrained node networks (RFC 7228).

    Old:
    The JOSE working group recently complete= d producing representations for cryptographic keys, message authentication (= MACs), encryption, and digital signatures, using JSON representation. This w= orking group will reuse the work done by JOSE, adapting it to the capabiliti= es of CBOR. This will rely on the JOSE registries, which, where this provide= s additional efficiency, will be expanded with additional information.
    New:
    The JOSE working group recently completed producing re= presentations for cryptographic keys, message authentication (MACs), encrypt= ion, and digital signatures, using JSON representation. COSE will rely on th= e JOSE registries, and will be expand them with additional information when n= ecessary.

    Note: you= may have other reasons besides efficiency.

    Old:<= div>The resulting formats will not be cryptographically convertible fr= om or to JOSE formats. This lack of a need for bit-for-bit compabitility whi= ch will enable some simplification in the adaptation process.
    Ne= w:
    The resulting formats will not be cryptographically converti= ble from or to JOSE formats. This lack of a need for bit-for-bit compat= ibility will enable some simplification in the adaptation process.

    Old:

    Criteria that should be considered on= making decisions in changing from a JSON to a CBOR encoding are:

    • Keeping the current JOSE paradigms= and formatting where feasible.

    • Minimizing message size, code size and computational complex= ity should be considered (for the constrained environments where we expect t= o use this).

    • Imp= roving security

    • = Providing new functionality that uses of JOSE did not require, but are requi= red for the new use cases.

    New:

    Criteria that should be considered in the decision making p= rocess, changing from JSON to CBOR encoding include:

    • Maintain the current JOSE paradigms and formatt= ing where feasible.

    • Minimize message size, code size, and computational complexity to suit c= onstrained environments, where this is expected to  be used.

      • Improve security

      <= li>

      Provide new functionality= for additional use cases that were not required for JOSE. 

      Old:
    Issues dealing with key management and binding of key= s to identities are out of scope for the working group.
    New:Key management and binding of keys to identities are out of scope for= the working group.

    Note: I am assuming you really want to out-of scope all key management and n= ot just issues?

    And I don't see any need= to tweak the rest of the text:

    The= Working group will coordinate its progress with the ACE, DICE and CORE work= ing groups to ensure that we are fulfilling the needs of these constituencie= s. Other groups may be added to this list as the set of use cases is expande= d.

    The WG will have two deliverables= :

    • a standards-track specification covering the same cryptographic format= s from JOSE, with optimizations for constrained device processing, expressed= in CBOR;
    • registration for algorithms (such as AES-CCM-8) that are a= ppropriate for constrained environments.

    The Working Group will use a wiki to track desired use cases for i= ts work, but does not intend to publish this as an RFC.


    I'd love it if you can keep to the milestones pr= ojected :-)

    Thanks.
    Kathleen

    On Tue, Apr 21, 2015 at 6:32 PM, Jim Schaad <= span dir=3D"ltr"><ietf@augustcellars.com> wrote:
    The date change proposed by me has been merged into the draft.

    I believe that we can now consider the charter discussion to be complete unl= ess anyone else has a big issue they want to bring up.

    Kathleen:  Can we get this to move forward into the IESG?

    Jim


    > -----Original Message-----
    > From: Cose [mailto:cose-bounce= s@ietf.org] On Behalf Of Kathleen Moriarty
    > Sent: Tuesday, April 14, 2015 7:17 PM
    > To: Jim Schaad
    > Cc: Kepeng Li; Paul Hoffman; cose@ietf= .org
    > Subject: Re: [Cose] Charter State
    >
    >
    >
    > Sent from my iPhone
    >
    > > On Apr 14, 2015, at 10:10 PM, "Jim Schaad" <ietf@augustcellars.com>
    > wrote:
    > >
    > >
    > >
    > >> -----Original Message-----
    > >> From: Cose [mailto:co= se-bounces@ietf.org] On Behalf Of Kepeng Li
    > >> Sent: Tuesday, April 14, 2015 6:59 PM
    > >> To: Paul Hoffman; Jim Schaad
    > >> Cc: cose@ietf.org
    > >> Subject: Re: [Cose] Charter State
    > >>
    > >> Thanks Paul.
    > >>
    > >> There are two other changes we might want to incorporate:
    > >>
    > >> 1) Proposal from Goran:
    > >> http://www.ietf.org/mail-archive/web/cose/cu= rrent/msg00027.html
    > >>
    > >> OLD:
    > >> "a standards-track specification covering the same cryptograph= ic
    > >> formats
    > > from
    > >> JOSE, expressed in CBOR"
    > >>
    > >> NEW:
    > >> "a standards-track specification covering the same cryptograph= ic
    > >> formats
    > > from
    > >> JOSE and optimizations for constrained device processing, expr= essed
    > >> in
    > > CBOR
    > >
    > > I am agnostic about including this change.  We now are much m= ore
    > > constrained device focused later so it might not be needed.
    > >
    > >>
    > >> (2) Proposal from Kathleen:
    > >>
    > >> http://www.ietf.org/mail-archive/web/cose/cu= rrent/msg00077.html
    > >>
    > >> OLD:
    > >> The Working Group will coordinate its progress with the ACE, D= ICE and
    > >> CoRE working groups to ensure that we are fulfilling the needs= of
    > >> these constituencies.
    > >>
    > >> NEW:
    > >> The Working Group will coordinate its progress with the ACE, D= ICE,
    > >> CoRE
    > > and
    > >> DIME working groups to ensure that we are fulfilling the needs= of
    > >> these constituencies.
    > >
    > > I am not sure that DIME is a reasonable group to be coordinating w= ith
    > > since it is not clear that this would be the solution space they a= re
    > > going to operate in.  It is true that this need something alo= ng these
    > > lines, but what they need first is to get someone who has good
    = > > knowledge of what can be done in the group first.  Given that= this is
    > > major (telecom) vendors, using CMS might be a better fit for this<= br> > >
    > > The other question if we expand this list here rather than in the w= iki
    > > is the set of groups that Rene Struik though that might be include= d
    > > here such as "6TiSCH, 6lo, RoLL, etc" which seem to be much closer= to
    > > the types of groups that might use this specification going forwar= d.
    > >
    > > At this point, I think I would go with the list we have and start<= br> > > adding more groups to the wiki.
    >
    > I'm fine with that approach.  My point in bringing up DIME was mor= e that they
    > need help and this *could* help them, but work needs to be done to figu= re
    > out what they need at this point.  I brought it up just in case it= 's relevant to
    > COSE.
    >
    > Thanks,
    > Kathleen
    > >
    > > Jim
    > >
    > >>
    > >>
    > >> Thanks,
    > >>
    > >> Kind Regards
    > >> Kepeng
    > >>
    > >> ? 15/4/15 2:32 am, "Paul Hoffman" <paul.hoffman@vpnc.org> ??:
    > >>
    > >>> On Apr 14, 2015, at 11:20 AM, Jim Schaad <ietf@augustcellars.com>
    > wrote:
    > >>>>
    > >>>> I would like to get Pull Request #2 rolled into the dr= aft charter
    > >>>> and then I think we are ready to send it to the ADs an= d IESG for review.
    > >>>>
    > >>>> Since it is my pull request I have not done the merge p= referring
    > >>>> that it be done by one of the others who have permissi= ons.  If I
    > >>>> get a message saying do the merge request I would be h= appy to pull
    > >>>> the trigger on it.
    > >>>
    > >>> There seemed to be general agreement, so I accepted the pu= ll request.
    > >>>
    > >>> Current version is at:
    > >>> https://github.com/cose-spec/wg-cha= rter/blob/master/draft-charter.md
    > >>>
    > >>> --Paul Hoffman
    > >>>
    > >>> _______________________________________________
    > >>> Cose mailing list
    > >>> Cose@ietf.org
    > >>> https://www.ietf.org/mailman/listinfo/cose
    > >>
    > >>
    > >> _______________________________________________
    > >> Cose mailing list
    > >> Cose@ietf.org
    > >> https://www.ietf.org/mailman/listinfo/cose
    > >
    > > _______________________________________________
    > > Cose mailing list
    > > Cose@ietf.org
    > > https://www.ietf.org/mailman/listinfo/cose
    >
    > _______________________________________________
    > Cose mailing list
    > Cose@ietf.org
    > https://www.ietf.org/mailman/listinfo/cose




    --
    <= div class=3D"gmail_signature">

    Best regards,
    <= div>Kathleen
    ____________________= ___________________________
    Cose mailing list
    Cose@ietf.org
    https://www.ietf.org/mailman= /listinfo/cose
    = --Apple-Mail-E3059C52-12A2-47A0-904F-F95405DDE70B-- From nobody Wed Apr 22 11:53:10 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B23B1B29DA for ; Wed, 22 Apr 2015 11:53:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.5 X-Spam-Level: X-Spam-Status: No, score=-0.5 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ni-qBAXoRmvW for ; Wed, 22 Apr 2015 11:53:07 -0700 (PDT) Received: from smtp4.pacifier.net (smtp4.pacifier.net [64.255.237.176]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8EBC81B29D8 for ; Wed, 22 Apr 2015 11:53:01 -0700 (PDT) Received: from Philemon (unknown [4.30.143.226]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp4.pacifier.net (Postfix) with ESMTPSA id A6B2738F10; Wed, 22 Apr 2015 11:53:00 -0700 (PDT) From: "Jim Schaad" To: "'Derek Atkins'" References: <017601d07cad$0f29f9e0$2d7deda0$@augustcellars.com> In-Reply-To: Date: Wed, 22 Apr 2015 11:51:44 -0700 Message-ID: <024801d07d2d$6137c6b0$23a75410$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQIjhaQWeEEQ9jAwW3jY6t94GHjs1gISURK9Ag/x/AOckjjBAA== Content-Language: en-us Archived-At: Cc: 'cose' Subject: Re: [Cose] Issue: Use arrays for some containers X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 18:53:09 -0000 > -----Original Message----- > From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Derek Atkins > Sent: Wednesday, April 22, 2015 9:14 AM > To: Paul Hoffman > Cc: cose > Subject: Re: [Cose] Issue: Use arrays for some containers > > Paul Hoffman writes: > > > On Apr 21, 2015, at 8:33 PM, Jim Schaad wrote: > >> > >> Questions: > >> > >> 1. Should we use arrays or maps as top level containers for COSE? > >> > >> 2. If we use arrays, should we always use nil elements to indicate > >> absent elements or use them only when ambiguity in parsing arises? > > > > 1) Maps > > > > 2) But, if we do arrays, use null elements so that a decoder always > > gets the same number of elements. > > > > For #1, unless every structure everywhere is an array, the encoder and > > decoder will need map interpretation. Given that, and given that maps > > have become a more natural way for programmers to think of bundles of > > information, choosing maps seems more likely to make COSE > > understandable. The programming cost is very low, and if using > > integers for the keys, the wire-size cost is also trivial. > > I agree with this. > > I believe it would be less code to use maps. OK - I am open to novel ways to write code and would love to see something more efficient that the algorithms that I would instinctively use. For Arrays: If (array.count < n) produce an error If (array[0].type == type.bstr) then process this element Else if (array[0].type != type.nil) then produce an error. For maps with loose enforcement: Obj = map[key_name]; If (obj.type == type.bstr) then process this element Else produce an error For maps with strict enforcement: Foreach (item in map) If (item.key.type != int) then ignore item Switch (item.key.value) Case "key_name": If (item.value.type != type.bstr) then produce an error Process element Break; All of these look to me to be about the same size in terms of code. Notice that I have included both a strict and a loose enforcement in my examples. These correspond to either saying that no elements other than the defined set are present or any elements which I don't know are ignored. JOSE is defined as using a loose enforcement. I don't know which of the two enforcement models COSE should document if maps are used. If arrays are used then it is strict by default. One possibility is that we document both enforcement modes and allow applications to decide. My question on this has always been what are the security implications of allowing for random elements to be included in the structure which will never be processed by an app and are there any benefits to having the random elements here rather than in the unprotected attribute map. Allowing for loose enforcement gives a possible upgrade path, one could put in both a "signatures" and a "signatures2" item in the map and allow the recipient to deal with the ones they can deal with. Having both in the same message would make me cringe in the world of IoT since that is possible just making messages larger. I am also not sure that I think this is a good way to do versioning, a better way may be to update the structure type marker instead and just have a new object if extensions to the base object are really needed. If this really does get rolled into the IoT world, then we are going to have to live with the initial version being around for a long time based on the lifespan of IoT hardware. For the most part, I don't know how easy firmware updates are going to be. Jim > > I don't see the savings of using arrays; it doesn't really seem to reduce space > significantly, and it might add complexity. > > > --Paul Hoffman > > -derek > -- > Derek Atkins 617-623-3745 > derek@ihtfp.com www.ihtfp.com > Computer and Internet Security Consultant > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Wed Apr 22 12:02:46 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B70A11B29F7 for ; Wed, 22 Apr 2015 12:02:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -14.211 X-Spam-Level: X-Spam-Status: No, score=-14.211 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, USER_IN_DEF_DKIM_WL=-7.5] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ivRDcptI8qCG for ; Wed, 22 Apr 2015 12:02:43 -0700 (PDT) Received: from rcdn-iport-4.cisco.com (rcdn-iport-4.cisco.com [173.37.86.75]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 94ECD1B29E4 for ; Wed, 22 Apr 2015 12:01:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cisco.com; i=@cisco.com; l=1111; q=dns/txt; s=iport; t=1429729303; x=1430938903; h=message-id:date:from:mime-version:to:cc:subject: references:in-reply-to:content-transfer-encoding; bh=IdHZ0eq5PrJvcMGvSBvfTVd+VM5VebgCMIJ7iMCzZB8=; b=m72BOj9LcXEdcChijIunRtoI5CsO56M7P53DOPUoMGoQAONBnK7F92vX EKN4aKde6tKugARF1tvTpCkwwPTTteRPAfG4b3ipi6YhVoPRZ34MVgifs 5HqV67fnR9aWtizjqWwi3nBb9dFmQWwK3HxIGDQNjJUo19Ac0sWfo3p7i o=; X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: A0C3CgD67jdV/5RdJa1bgwxSXAWDE8RBhgwCgThMAQEBAQEBgQtBBYNbAQEEIw8BRQEQCQIYAgIFFgsCAgkDAgECAQ82BgEMAQUCAQGIEwMRmyKdAo9FDYU3AQEBAQEBAQEBAQEBAQEBAQEBAQEBEwSBIYoWgk2CBDMHgmiBRQEEi0mDUoYhhFuBTocshzuGSiKCBBoEgXBQAYFDgQABAQE X-IronPort-AV: E=Sophos;i="5.11,625,1422921600"; d="scan'208";a="414032289" Received: from rcdn-core-12.cisco.com ([173.37.93.148]) by rcdn-iport-4.cisco.com with ESMTP; 22 Apr 2015 19:01:43 +0000 Received: from xhc-aln-x12.cisco.com (xhc-aln-x12.cisco.com [173.36.12.86]) by rcdn-core-12.cisco.com (8.14.5/8.14.5) with ESMTP id t3MJ1gJx008994 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=FAIL); Wed, 22 Apr 2015 19:01:42 GMT Received: from [64.101.72.55] (64.101.72.55) by xhc-aln-x12.cisco.com (173.36.12.86) with Microsoft SMTP Server (TLS) id 14.3.195.1; Wed, 22 Apr 2015 14:01:42 -0500 Message-ID: <5537F015.9020802@cisco.com> Date: Wed, 22 Apr 2015 13:01:41 -0600 From: =?UTF-8?B?4oyYIE1hdHQgTWlsbGVy?= User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: Kepeng Li , Paul Hoffman , Kathleen Moriarty References: <043201d076df$aa87b770$ff972650$@augustcellars.com> <50A4152F-E8F1-4890-AD03-065899ACC3BB@vpnc.org> <04c701d07721$69175fb0$3b461f10$@augustcellars.com> <566CD668-1A69-4D37-A04E-98025906759D@gmail.com> <013d01d07c83$01465190$03d2f4b0$@augustcellars.com> <022601d07d1b$34298670$9c7c9350$@augustcellars.com> <31D7BE2E-1D60-4D1B-8104-C8A3C21C114C@vpnc.org> In-Reply-To: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 8bit X-Originating-IP: [64.101.72.55] Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Charter State X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 19:02:44 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 4/21/15 8:47 PM, Kepeng Li wrote: > Fine with me. > > Thanks. > > Kind Regards Kepeng > > > 在 23/4/15 1:01 am， "Paul Hoffman" 写入: > >> On Apr 22, 2015, at 9:54 AM, Kathleen Moriarty >> wrote: >>> Great, are others ok with the changes? If so, I'll get it >>> rolling. >> >> They look fine to me, as does rolling. >> +1 SHIPIT! - -- - - m&m Matt Miller < mamille2@cisco.com > Cisco Systems, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) Comment: GPGTools - https://gpgtools.org iQEcBAEBCgAGBQJVN/AVAAoJEDWi+S0W7cO1/A8IAJrubZh6DL5kVuuebLp5NIDd myV3dqb7dk3kdb6Rl53edawZSrPJUXo/QV/szfPwizEIfKVGHi9FGvBcsSiVZHSK LAzseprJiB2BmN8aC1lfHrUs9dJTfy2psJfVAqXbpTkioLUR3y0Y03EAnayRvNhD tsjHrpOim1xDmY2N9ouOg9KbbH5tckmu+PyepuwYTjioUS9P0uUvhs35sDdzc3rV fhM9JxZAPLZSd42hIBokLp1n3L/0UQ2cfrr04IU3fJbZFVbBdbJYHL11mukXwoPG RZX4hhQfGxdVyS6m1TmltbReEJz22aZDb4Y9EwsMlUxjkzOh6v4gGOqQF/W/SQc= =zhUj -----END PGP SIGNATURE----- From nobody Wed Apr 22 12:04:40 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 59EBF1B2A16 for ; Wed, 22 Apr 2015 12:04:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.7 X-Spam-Level: X-Spam-Status: No, score=-1.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, MIME_8BIT_HEADER=0.3, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dSK4JGg776QI for ; Wed, 22 Apr 2015 12:04:38 -0700 (PDT) Received: from mail-qk0-x234.google.com (mail-qk0-x234.google.com [IPv6:2607:f8b0:400d:c09::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 76A7C1B29E4 for ; Wed, 22 Apr 2015 12:04:37 -0700 (PDT) Received: by qku63 with SMTP id 63so236771485qku.3 for ; Wed, 22 Apr 2015 12:04:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:mime-version:subject:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=nfDYfcAsTxfkV5YVlH78IcUVS6VRP6K+XeGqfMRFCb4=; b=Sqw9g5vffmerNCPlLwJl19mD/J1XKfZs48ERHUrpXKy8Y2zGym6Z88nM4n5e4SWZuS /TNPdF7biza4vJyeyMFJNCmzh9oOyqWOhfO16o0HeWolC0+g/SWzf60xqI+36MHaVB/U ff5KqJ+1+2U0u11abUbop52lyk4iyo9K1CE10kn9gn2HgQH5TyA72OuxGy4GAliT1G2/ fEbyx2dX3ZSVTaVaB6POE9+c5ll9biTnt6CRUe30LnG5IVEI9KY2i7hf/7Zd+nHsSNsh J7aGPE5FXlWUGv7ucjh62PijVDYz2tD1lxXD/TkWPd63qqCXBsHgpkn42o9wmkcYBkdG TtJw== X-Received: by 10.140.232.144 with SMTP id d138mr30313871qhc.65.1429729476658; Wed, 22 Apr 2015 12:04:36 -0700 (PDT) Received: from [192.168.1.3] (209-6-114-252.c3-0.arl-ubr1.sbo-arl.ma.cable.rcn.com. [209.6.114.252]) by mx.google.com with ESMTPSA id q105sm4300713qgq.11.2015.04.22.12.04.34 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 22 Apr 2015 12:04:35 -0700 (PDT) From: Kathleen Moriarty X-Google-Original-From: Kathleen Moriarty Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (1.0) X-Mailer: iPhone Mail (11D257) In-Reply-To: <5537F015.9020802@cisco.com> Date: Wed, 22 Apr 2015 15:04:34 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <536E4A53-9E7C-4D52-B514-BF9FFC756FCB@gmail.com> References: <043201d076df$aa87b770$ff972650$@augustcellars.com> <50A4152F-E8F1-4890-AD03-065899ACC3BB@vpnc.org> <04c701d07721$69175fb0$3b461f10$@augustcellars.com> <566CD668-1A69-4D37-A04E-98025906759D@gmail.com> <013d01d07c83$01465190$03d2f4b0$@augustcellars.com> <022601d07d1b$34298670$9c7c9350$@augustcellars.com> <31D7BE2E-1D60-4D1B-8104-C8A3C21C114C@vpnc.org> <5537F015.9020802@cisco.com> To: =?utf-8?Q?=E2=8C=98_Matt_Miller?= Archived-At: Cc: Kepeng Li , Paul Hoffman , "cose@ietf.org" Subject: Re: [Cose] Charter State X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 19:04:39 -0000 Great, thank you! I'll move it forward to the next review stage. If something else is spotted= , it can be fixed. Thanks, Kathleen=20 Sent from my iPhone > On Apr 22, 2015, at 3:01 PM, =E2=8C=98 Matt Miller wr= ote: >=20 > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA512 >=20 >=20 >> On 4/21/15 8:47 PM, Kepeng Li wrote: >> Fine with me. >>=20 >> Thanks. >>=20 >> Kind Regards Kepeng >>=20 >>=20 >> =E5=9C=A8 23/4/15 1:01 am=EF=BC=8C "Paul Hoffman" = =E5=86=99=E5=85=A5: >>=20 >>> On Apr 22, 2015, at 9:54 AM, Kathleen Moriarty=20 >>> wrote: >>>> Great, are others ok with the changes? If so, I'll get it >>>> rolling. >>>=20 >>> They look fine to me, as does rolling. >=20 > +1 >=20 > SHIPIT! >=20 >=20 > - --=20 > - - m&m >=20 > Matt Miller < mamille2@cisco.com > > Cisco Systems, Inc. >=20 > -----BEGIN PGP SIGNATURE----- > Version: GnuPG/MacGPG2 v2.0.22 (Darwin) > Comment: GPGTools - https://gpgtools.org >=20 > iQEcBAEBCgAGBQJVN/AVAAoJEDWi+S0W7cO1/A8IAJrubZh6DL5kVuuebLp5NIDd > myV3dqb7dk3kdb6Rl53edawZSrPJUXo/QV/szfPwizEIfKVGHi9FGvBcsSiVZHSK > LAzseprJiB2BmN8aC1lfHrUs9dJTfy2psJfVAqXbpTkioLUR3y0Y03EAnayRvNhD > tsjHrpOim1xDmY2N9ouOg9KbbH5tckmu+PyepuwYTjioUS9P0uUvhs35sDdzc3rV > fhM9JxZAPLZSd42hIBokLp1n3L/0UQ2cfrr04IU3fJbZFVbBdbJYHL11mukXwoPG > RZX4hhQfGxdVyS6m1TmltbReEJz22aZDb4Y9EwsMlUxjkzOh6v4gGOqQF/W/SQc=3D > =3DzhUj > -----END PGP SIGNATURE----- From nobody Wed Apr 22 12:23:47 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF21F1B397C for ; Wed, 22 Apr 2015 12:23:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.3 X-Spam-Level: X-Spam-Status: No, score=-3.3 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, J_CHICKENPOX_37=0.6, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ivcZ3WHlduN3 for ; Wed, 22 Apr 2015 12:23:41 -0700 (PDT) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5654E1B3973 for ; Wed, 22 Apr 2015 12:23:36 -0700 (PDT) X-AuditID: c1b4fb3a-f79146d0000070a3-f9-5537f5350b4e Received: from ESESSHC010.ericsson.se (Unknown_Domain [153.88.253.124]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id 8F.B1.28835.535F7355; Wed, 22 Apr 2015 21:23:34 +0200 (CEST) Received: from ESESSMB303.ericsson.se ([169.254.3.19]) by ESESSHC010.ericsson.se ([153.88.183.48]) with mapi id 14.03.0210.002; Wed, 22 Apr 2015 21:23:33 +0200 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Kathleen Moriarty Thread-Topic: [Cose] Charter State Thread-Index: AdB233J6eMIFWU+bSfiQcTRrv8iHPf//4jyAgAB88QCAAAM3AIAAAY+AgArBooCAASxkgIAABAIAgAADogCAACmYAA== Date: Wed, 22 Apr 2015 19:23:32 +0000 Message-ID: <657EE3F5-CB06-4227-8E91-BFB3AB50233D@ericsson.com> References: <043201d076df$aa87b770$ff972650$@augustcellars.com> <50A4152F-E8F1-4890-AD03-065899ACC3BB@vpnc.org> <04c701d07721$69175fb0$3b461f10$@augustcellars.com> <566CD668-1A69-4D37-A04E-98025906759D@gmail.com> <013d01d07c83$01465190$03d2f4b0$@augustcellars.com> <022601d07d1b$34298670$9c7c9350$@augustcellars.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: Content-Type: multipart/signed; boundary="Apple-Mail-D896C510-3D30-41B8-AA7B-D39AA72A2974"; protocol="application/pkcs7-signature"; micalg=sha1 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrEIsWRmVeSWpSXmKPExsUyM+Jvja7ZV/NQg7PtXBbTtk5ltVg9/Tub RcPOfAdmj41zprN57Jx1l91jyZKfTAHMUVw2Kak5mWWpRfp2CVwZnRMOsxds6WCuWDPFuoHx x1+mLkZODgkBE4m3SxrZIGwxiQv31gPZXBxCAkcZJe6fm8oI4SxmlNjYPAesg03AReJBwyMw W0TAQmJN8zewbmYBD4mtt/8yg9jCAooSz168YoGoUZLY9OQMG4SdJfH59hqwXhYBVYnj+w6C 2bwC9hKPLn6G2tzIIjFt6nuwZk6BQInpa1eCFTECnff9FEQzs4C4xK0n86FeEJF4ePE01Aui Ei8f/2MFGcQsMJlRYsr1TVAbBCVOznzCMoFRZBaS/lnI6mYhqZvFyAGUiJdYMb8Aol5eYvvb OcwQtqbE/u7lLBC2osSU7ofsELaGROe3iayY4tYSM34dZIOwTSVeH/3IiKxmASPPKkbR4tTi 4tx0IyO91KLM5OLi/Dy9vNSSTYzASD+45bfVDsaDzx0PMQpwMCrx8D6wMA8VYk0sK67MPcQo zcGiJM5rZ3woREggPbEkNTs1tSC1KL6oNCe1+BAjEwenVAPjZI0rJ4725pb5cXxXPXnf0VdU RuGew23Z/iPXb1Yqffw4w2fnXLn1lgtWlPL2msxX/e3lmK/f7XAsTuxTdYbGWmXh4Mxfezzz v+Tyea7rWG270ersFmexm40ZG1fejrsk/U1Z5dMEnyebnhslWfHKMRhwXGzdkV46t3uXed7V NbN+6rBq7+VQYinOSDTUYi4qTgQACEmdtNUCAAA= Archived-At: Cc: Jim Schaad , "cose@ietf.org" Subject: Re: [Cose] Charter State X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 19:23:46 -0000 --Apple-Mail-D896C510-3D30-41B8-AA7B-D39AA72A2974 Content-Type: multipart/alternative; boundary=Apple-Mail-6E949903-4EFC-4D3A-B5A2-142D05E92C9A Content-Transfer-Encoding: 7bit --Apple-Mail-6E949903-4EFC-4D3A-B5A2-142D05E92C9A Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: base64 TG9va3MgZmluZS4gDQoNCkFib3V0IHRoZSBjb25zdHJhaW5lZC1hcHByb3ByaWF0ZSBhbGdvcml0 aG1zOiBpcyB0aGUgaW50ZW50aW9uIHRvIGNvbnN1bHQgQ0ZSRz8gSWYgc28sIG1heWJlIHdvdWxk IGJlIGdvb2QgdG8gZ2V0IHRoYXQgYmFsbCByb2xsaW5nIHRvbyBzb29uLiANCg0KVGhhbmtzLA0K R8O2cmFuDQoNCg0KPiBPbiAyMiBhcHIgMjAxNSwgYXQgMTg6NTQsIEthdGhsZWVuIE1vcmlhcnR5 IDxrYXRobGVlbi5tb3JpYXJ0eS5pZXRmQGdtYWlsLmNvbT4gd3JvdGU6DQo+IA0KPiBHcmVhdCwg YXJlIG90aGVycyBvayB3aXRoIHRoZSBjaGFuZ2VzPyAgSWYgc28sIEknbGwgZ2V0IGl0IHJvbGxp bmcuDQo+IA0KPj4gT24gV2VkLCBBcHIgMjIsIDIwMTUgYXQgMTI6NDEgUE0sIEppbSBTY2hhYWQg PGlldGZAYXVndXN0Y2VsbGFycy5jb20+IHdyb3RlOg0KPj4gQmUgbXkgZ3Vlc3QgdG8gbWFrZSB0 aGUgY2hhbmdlcy4NCj4+IA0KPj4gIA0KPj4gDQo+PiBKaW0NCj4+IA0KPj4gIA0KPj4gDQo+PiAg DQo+PiANCj4+IEZyb206IENvc2UgW21haWx0bzpjb3NlLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJl aGFsZiBPZiBLYXRobGVlbiBNb3JpYXJ0eQ0KPj4gU2VudDogV2VkbmVzZGF5LCBBcHJpbCAyMiwg MjAxNSA5OjI3IEFNDQo+PiBUbzogSmltIFNjaGFhZA0KPj4gDQo+PiANCj4+IENjOiBjb3NlQGll dGYub3JnDQo+PiBTdWJqZWN0OiBSZTogW0Nvc2VdIENoYXJ0ZXIgU3RhdGUNCj4+ICANCj4+IA0K Pj4gSGksDQo+PiANCj4+ICANCj4+IA0KPj4gSSBhbSBhc3N1bWluZyB0aGUgY3VycmVudCBjaGFy dGVyIHRleHQgaXMgYXQgdGhlIGxpbms6DQo+PiANCj4+IGh0dHBzOi8vZ2l0aHViLmNvbS9jb3Nl LXNwZWMvd2ctY2hhcnRlci9ibG9iL21hc3Rlci9kcmFmdC1jaGFydGVyLm1kDQo+PiANCj4+ICAN Cj4+IA0KPj4gSSBoYXZlIHNvbWUgcHJvcG9zZWQgY2hhbmdlcyB0aGF0IEkgdGhpbmsgaGVscCB3 aXRoIHJlYWRhYmlsaXR5LiAgTGV0IG1lIGtub3cgaWYgdGhlc2UgYXJlIG9rIGFuZCBJJ2xsIHB1 dCBpbiB0aGUgY2hhcnRlciBmb3IgSUVTRyByZXZpZXcuICBBbGwgb2YgdGhlIGNoYXJ0ZXIgdGV4 dCBpcyBpbmNsdWRlZCwgYnJva2VuIG91dCBieSBzZWN0aW9ucyB0byBzaG93IGVkaXRzLiAgSW4g c29tZSBjYXNlcywgdGhlcmUgaXMgYSBOb3RlOiBmb2xsb3dpbmcgYSBjaGFuZ2Ugd2l0aCBhc3N1 bXB0aW9ucyBJIHdhcyBtYWtpbmcgaW4gY2FzZSB0aGV5IHdlcmUgbm90IGNvcnJlY3QgYXNzdW1w dGlvbnMuDQo+PiANCj4+ICANCj4+IA0KPj4gT2xkOkNvbmNpc2UgQmluYXJ5IE9iamVjdCBSZXBy ZXNlbnRhdGlvbiAoQ0JPUiwgUkZDIDcwNDkpIGlzIGEgY29uY2lzZSBiaW5hcnkgZm9ybWF0IGZv ciB0aGUgc2VyaWFsaXphdGlvbiBvZiBkYXRhIHN0cnVjdHVyZWQgdG8gYW4gZXh0ZW5kZWQgdmVy c2lvbiBvZiB0aGUgSlNPTiBkYXRhIG1vZGVsLiBPbmUgbW90aXZhdGlvbiBmb3IgQ0JPUiB3YXMg dG8gbWFrZSB0aGlzIGRhdGEgbW9kZWwgbW9yZSBhbWVuYWJsZSB0byBjb25zdHJhaW5lZCBub2Rl cyBhbmQgY29uc3RyYWluZWQgbm9kZSBuZXR3b3JrcyAoUkZDIDcyMjgpLg0KPj4gDQo+PiBOZXc6 DQo+PiANCj4+IENvbmNpc2UgQmluYXJ5IE9iamVjdCBSZXByZXNlbnRhdGlvbiAoQ0JPUiwgUkZD IDcwNDkpIGlzIGEgY29uY2lzZSBiaW5hcnkgZm9ybWF0IGZvciB0aGUgc2VyaWFsaXphdGlvbiBv ZiBkYXRhIHN0cnVjdHVyZWQgdG8gYW4gZXh0ZW5kZWQgdmVyc2lvbiBvZiB0aGUgSlNPTiBkYXRh IG1vZGVsLiBPbmUgbW90aXZhdGlvbiBmb3IgQ09TRSB3YXMgdG8gcmV1c2UgZnVuY3Rpb25hbGl0 eSBmcm9tIHRoZSBKT1NFIHdvcmtpbmcgZ3JvdXAgdXNpbmcgdGhlIENCT1IgZGF0YSByZXByZXNl bnRhdGlvbiBhcyBpdCBpcyBtb3JlIGFtZW5hYmxlIHRvIGNvbnN0cmFpbmVkIG5vZGVzIGFuZCBj b25zdHJhaW5lZCBub2RlIG5ldHdvcmtzIChSRkMgNzIyOCkuDQo+PiANCj4+ICANCj4+IA0KPj4g T2xkOg0KPj4gDQo+PiBUaGUgSk9TRSB3b3JraW5nIGdyb3VwIHJlY2VudGx5IGNvbXBsZXRlZCBw cm9kdWNpbmcgcmVwcmVzZW50YXRpb25zIGZvciBjcnlwdG9ncmFwaGljIGtleXMsIG1lc3NhZ2Ug YXV0aGVudGljYXRpb24gKE1BQ3MpLCBlbmNyeXB0aW9uLCBhbmQgZGlnaXRhbCBzaWduYXR1cmVz LCB1c2luZyBKU09OIHJlcHJlc2VudGF0aW9uLiBUaGlzIHdvcmtpbmcgZ3JvdXAgd2lsbCByZXVz ZSB0aGUgd29yayBkb25lIGJ5IEpPU0UsIGFkYXB0aW5nIGl0IHRvIHRoZSBjYXBhYmlsaXRpZXMg b2YgQ0JPUi4gVGhpcyB3aWxsIHJlbHkgb24gdGhlIEpPU0UgcmVnaXN0cmllcywgd2hpY2gsIHdo ZXJlIHRoaXMgcHJvdmlkZXMgYWRkaXRpb25hbCBlZmZpY2llbmN5LCB3aWxsIGJlIGV4cGFuZGVk IHdpdGggYWRkaXRpb25hbCBpbmZvcm1hdGlvbi4NCj4+IA0KPj4gTmV3Og0KPj4gDQo+PiBUaGUg Sk9TRSB3b3JraW5nIGdyb3VwIHJlY2VudGx5IGNvbXBsZXRlZCBwcm9kdWNpbmcgcmVwcmVzZW50 YXRpb25zIGZvciBjcnlwdG9ncmFwaGljIGtleXMsIG1lc3NhZ2UgYXV0aGVudGljYXRpb24gKE1B Q3MpLCBlbmNyeXB0aW9uLCBhbmQgZGlnaXRhbCBzaWduYXR1cmVzLCB1c2luZyBKU09OIHJlcHJl c2VudGF0aW9uLiBDT1NFIHdpbGwgcmVseSBvbiB0aGUgSk9TRSByZWdpc3RyaWVzLCBhbmQgd2ls bCBiZSBleHBhbmQgdGhlbSB3aXRoIGFkZGl0aW9uYWwgaW5mb3JtYXRpb24gd2hlbiBuZWNlc3Nh cnkuDQo+PiANCj4+ICANCj4+IA0KPj4gTm90ZTogeW91IG1heSBoYXZlIG90aGVyIHJlYXNvbnMg YmVzaWRlcyBlZmZpY2llbmN5Lg0KPj4gDQo+PiAgDQo+PiANCj4+IE9sZDoNCj4+IA0KPj4gVGhl IHJlc3VsdGluZyBmb3JtYXRzIHdpbGwgbm90IGJlIGNyeXB0b2dyYXBoaWNhbGx5IGNvbnZlcnRp YmxlIGZyb20gb3IgdG8gSk9TRSBmb3JtYXRzLiBUaGlzIGxhY2sgb2YgYSBuZWVkIGZvciBiaXQt Zm9yLWJpdCBjb21wYWJpdGlsaXR5IHdoaWNoIHdpbGwgZW5hYmxlIHNvbWUgc2ltcGxpZmljYXRp b24gaW4gdGhlIGFkYXB0YXRpb24gcHJvY2Vzcy4NCj4+IA0KPj4gTmV3Og0KPj4gDQo+PiBUaGUg cmVzdWx0aW5nIGZvcm1hdHMgd2lsbCBub3QgYmUgY3J5cHRvZ3JhcGhpY2FsbHkgY29udmVydGli bGUgZnJvbSBvciB0byBKT1NFIGZvcm1hdHMuIFRoaXMgbGFjayBvZiBhIG5lZWQgZm9yIGJpdC1m b3ItYml0IGNvbXBhdGliaWxpdHkgd2lsbCBlbmFibGUgc29tZSBzaW1wbGlmaWNhdGlvbiBpbiB0 aGUgYWRhcHRhdGlvbiBwcm9jZXNzLg0KPj4gDQo+PiAgDQo+PiANCj4+IE9sZDoNCj4+IA0KPj4g Q3JpdGVyaWEgdGhhdCBzaG91bGQgYmUgY29uc2lkZXJlZCBvbiBtYWtpbmcgZGVjaXNpb25zIGlu IGNoYW5naW5nIGZyb20gYSBKU09OIHRvIGEgQ0JPUiBlbmNvZGluZyBhcmU6DQo+PiANCj4+IMK3 ICAgICAgS2VlcGluZyB0aGUgY3VycmVudCBKT1NFIHBhcmFkaWdtcyBhbmQgZm9ybWF0dGluZyB3 aGVyZSBmZWFzaWJsZS4NCj4+IA0KPj4gwrcgICAgICBNaW5pbWl6aW5nIG1lc3NhZ2Ugc2l6ZSwg Y29kZSBzaXplIGFuZCBjb21wdXRhdGlvbmFsIGNvbXBsZXhpdHkgc2hvdWxkIGJlIGNvbnNpZGVy ZWQgKGZvciB0aGUgY29uc3RyYWluZWQgZW52aXJvbm1lbnRzIHdoZXJlIHdlIGV4cGVjdCB0byB1 c2UgdGhpcykuDQo+PiANCj4+IMK3ICAgICAgSW1wcm92aW5nIHNlY3VyaXR5DQo+PiANCj4+IMK3 ICAgICAgUHJvdmlkaW5nIG5ldyBmdW5jdGlvbmFsaXR5IHRoYXQgdXNlcyBvZiBKT1NFIGRpZCBu b3QgcmVxdWlyZSwgYnV0IGFyZSByZXF1aXJlZCBmb3IgdGhlIG5ldyB1c2UgY2FzZXMuDQo+PiAN Cj4+IE5ldzoNCj4+IA0KPj4gQ3JpdGVyaWEgdGhhdCBzaG91bGQgYmUgY29uc2lkZXJlZCBpbiB0 aGUgZGVjaXNpb24gbWFraW5nIHByb2Nlc3MsIGNoYW5naW5nIGZyb20gSlNPTiB0byBDQk9SIGVu Y29kaW5nIGluY2x1ZGU6DQo+PiANCj4+IMK3ICAgICAgTWFpbnRhaW4gdGhlIGN1cnJlbnQgSk9T RSBwYXJhZGlnbXMgYW5kIGZvcm1hdHRpbmcgd2hlcmUgZmVhc2libGUuDQo+PiANCj4+IMK3ICAg ICAgTWluaW1pemUgbWVzc2FnZSBzaXplLCBjb2RlIHNpemUsIGFuZCBjb21wdXRhdGlvbmFsIGNv bXBsZXhpdHkgdG8gc3VpdCBjb25zdHJhaW5lZCBlbnZpcm9ubWVudHMsIHdoZXJlIHRoaXMgaXMg ZXhwZWN0ZWQgdG8gIGJlIHVzZWQuDQo+PiANCj4+IMK3ICAgICAgSW1wcm92ZSBzZWN1cml0eQ0K Pj4gDQo+PiDCtyAgICAgIFByb3ZpZGUgbmV3IGZ1bmN0aW9uYWxpdHkgZm9yIGFkZGl0aW9uYWwg dXNlIGNhc2VzIHRoYXQgd2VyZSBub3QgcmVxdWlyZWQgZm9yIEpPU0UuIA0KPj4gDQo+PiBPbGQ6 DQo+PiANCj4+IElzc3VlcyBkZWFsaW5nIHdpdGgga2V5IG1hbmFnZW1lbnQgYW5kIGJpbmRpbmcg b2Yga2V5cyB0byBpZGVudGl0aWVzIGFyZSBvdXQgb2Ygc2NvcGUgZm9yIHRoZSB3b3JraW5nIGdy b3VwLg0KPj4gDQo+PiBOZXc6DQo+PiANCj4+IEtleSBtYW5hZ2VtZW50IGFuZCBiaW5kaW5nIG9m IGtleXMgdG8gaWRlbnRpdGllcyBhcmUgb3V0IG9mIHNjb3BlIGZvciB0aGUgd29ya2luZyBncm91 cC4NCj4+IA0KPj4gIA0KPj4gDQo+PiBOb3RlOiBJIGFtIGFzc3VtaW5nIHlvdSByZWFsbHkgd2Fu dCB0byBvdXQtb2Ygc2NvcGUgYWxsIGtleSBtYW5hZ2VtZW50IGFuZCBub3QganVzdCBpc3N1ZXM/ DQo+PiANCj4+ICANCj4+IA0KPj4gQW5kIEkgZG9uJ3Qgc2VlIGFueSBuZWVkIHRvIHR3ZWFrIHRo ZSByZXN0IG9mIHRoZSB0ZXh0Og0KPj4gDQo+PiBUaGUgV29ya2luZyBncm91cCB3aWxsIGNvb3Jk aW5hdGUgaXRzIHByb2dyZXNzIHdpdGggdGhlIEFDRSwgRElDRSBhbmQgQ09SRSB3b3JraW5nIGdy b3VwcyB0byBlbnN1cmUgdGhhdCB3ZSBhcmUgZnVsZmlsbGluZyB0aGUgbmVlZHMgb2YgdGhlc2Ug Y29uc3RpdHVlbmNpZXMuIE90aGVyIGdyb3VwcyBtYXkgYmUgYWRkZWQgdG8gdGhpcyBsaXN0IGFz IHRoZSBzZXQgb2YgdXNlIGNhc2VzIGlzIGV4cGFuZGVkLg0KPj4gDQo+PiBUaGUgV0cgd2lsbCBo YXZlIHR3byBkZWxpdmVyYWJsZXM6DQo+PiANCj4+IGEgc3RhbmRhcmRzLXRyYWNrIHNwZWNpZmlj YXRpb24gY292ZXJpbmcgdGhlIHNhbWUgY3J5cHRvZ3JhcGhpYyBmb3JtYXRzIGZyb20gSk9TRSwg d2l0aCBvcHRpbWl6YXRpb25zIGZvciBjb25zdHJhaW5lZCBkZXZpY2UgcHJvY2Vzc2luZywgZXhw cmVzc2VkIGluIENCT1I7DQo+PiByZWdpc3RyYXRpb24gZm9yIGFsZ29yaXRobXMgKHN1Y2ggYXMg QUVTLUNDTS04KSB0aGF0IGFyZSBhcHByb3ByaWF0ZSBmb3IgY29uc3RyYWluZWQgZW52aXJvbm1l bnRzLg0KPj4gVGhlIFdvcmtpbmcgR3JvdXAgd2lsbCB1c2UgYSB3aWtpIHRvIHRyYWNrIGRlc2ly ZWQgdXNlIGNhc2VzIGZvciBpdHMgd29yaywgYnV0IGRvZXMgbm90IGludGVuZCB0byBwdWJsaXNo IHRoaXMgYXMgYW4gUkZDLg0KPj4gDQo+PiAgDQo+PiANCj4+IEknZCBsb3ZlIGl0IGlmIHlvdSBj YW4ga2VlcCB0byB0aGUgbWlsZXN0b25lcyBwcm9qZWN0ZWQgOi0pDQo+PiANCj4+IFRoYW5rcy4N Cj4+IEthdGhsZWVuDQo+PiANCj4+ICANCj4+IA0KPj4gT24gVHVlLCBBcHIgMjEsIDIwMTUgYXQg NjozMiBQTSwgSmltIFNjaGFhZCA8aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbT4gd3JvdGU6DQo+PiAN Cj4+IFRoZSBkYXRlIGNoYW5nZSBwcm9wb3NlZCBieSBtZSBoYXMgYmVlbiBtZXJnZWQgaW50byB0 aGUgZHJhZnQuDQo+PiANCj4+IEkgYmVsaWV2ZSB0aGF0IHdlIGNhbiBub3cgY29uc2lkZXIgdGhl IGNoYXJ0ZXIgZGlzY3Vzc2lvbiB0byBiZSBjb21wbGV0ZSB1bmxlc3MgYW55b25lIGVsc2UgaGFz IGEgYmlnIGlzc3VlIHRoZXkgd2FudCB0byBicmluZyB1cC4NCj4+IA0KPj4gS2F0aGxlZW46ICBD YW4gd2UgZ2V0IHRoaXMgdG8gbW92ZSBmb3J3YXJkIGludG8gdGhlIElFU0c/DQo+PiANCj4+IEpp bQ0KPj4gDQo+PiANCj4+IA0KPj4gPiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPj4gPiBG cm9tOiBDb3NlIFttYWlsdG86Y29zZS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgS2F0 aGxlZW4gTW9yaWFydHkNCj4+ID4gU2VudDogVHVlc2RheSwgQXByaWwgMTQsIDIwMTUgNzoxNyBQ TQ0KPj4gPiBUbzogSmltIFNjaGFhZA0KPj4gPiBDYzogS2VwZW5nIExpOyBQYXVsIEhvZmZtYW47 IGNvc2VAaWV0Zi5vcmcNCj4+ID4gU3ViamVjdDogUmU6IFtDb3NlXSBDaGFydGVyIFN0YXRlDQo+ PiA+DQo+PiA+DQo+PiA+DQo+PiA+IFNlbnQgZnJvbSBteSBpUGhvbmUNCj4+ID4NCj4+ID4gPiBP biBBcHIgMTQsIDIwMTUsIGF0IDEwOjEwIFBNLCAiSmltIFNjaGFhZCIgPGlldGZAYXVndXN0Y2Vs bGFycy5jb20+DQo+PiA+IHdyb3RlOg0KPj4gPiA+DQo+PiA+ID4NCj4+ID4gPg0KPj4gPiA+PiAt LS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPj4gPiA+PiBGcm9tOiBDb3NlIFttYWlsdG86Y29z ZS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgS2VwZW5nIExpDQo+PiA+ID4+IFNlbnQ6 IFR1ZXNkYXksIEFwcmlsIDE0LCAyMDE1IDY6NTkgUE0NCj4+ID4gPj4gVG86IFBhdWwgSG9mZm1h bjsgSmltIFNjaGFhZA0KPj4gPiA+PiBDYzogY29zZUBpZXRmLm9yZw0KPj4gPiA+PiBTdWJqZWN0 OiBSZTogW0Nvc2VdIENoYXJ0ZXIgU3RhdGUNCj4+ID4gPj4NCj4+ID4gPj4gVGhhbmtzIFBhdWwu DQo+PiA+ID4+DQo+PiA+ID4+IFRoZXJlIGFyZSB0d28gb3RoZXIgY2hhbmdlcyB3ZSBtaWdodCB3 YW50IHRvIGluY29ycG9yYXRlOg0KPj4gPiA+Pg0KPj4gPiA+PiAxKSBQcm9wb3NhbCBmcm9tIEdv cmFuOg0KPj4gPiA+PiBodHRwOi8vd3d3LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIvY29zZS9j dXJyZW50L21zZzAwMDI3Lmh0bWwNCj4+ID4gPj4NCj4+ID4gPj4gT0xEOg0KPj4gPiA+PiAiYSBz dGFuZGFyZHMtdHJhY2sgc3BlY2lmaWNhdGlvbiBjb3ZlcmluZyB0aGUgc2FtZSBjcnlwdG9ncmFw aGljDQo+PiA+ID4+IGZvcm1hdHMNCj4+ID4gPiBmcm9tDQo+PiA+ID4+IEpPU0UsIGV4cHJlc3Nl ZCBpbiBDQk9SIg0KPj4gPiA+Pg0KPj4gPiA+PiBORVc6DQo+PiA+ID4+ICJhIHN0YW5kYXJkcy10 cmFjayBzcGVjaWZpY2F0aW9uIGNvdmVyaW5nIHRoZSBzYW1lIGNyeXB0b2dyYXBoaWMNCj4+ID4g Pj4gZm9ybWF0cw0KPj4gPiA+IGZyb20NCj4+ID4gPj4gSk9TRSBhbmQgb3B0aW1pemF0aW9ucyBm b3IgY29uc3RyYWluZWQgZGV2aWNlIHByb2Nlc3NpbmcsIGV4cHJlc3NlZA0KPj4gPiA+PiBpbg0K Pj4gPiA+IENCT1INCj4+ID4gPg0KPj4gPiA+IEkgYW0gYWdub3N0aWMgYWJvdXQgaW5jbHVkaW5n IHRoaXMgY2hhbmdlLiAgV2Ugbm93IGFyZSBtdWNoIG1vcmUNCj4+ID4gPiBjb25zdHJhaW5lZCBk ZXZpY2UgZm9jdXNlZCBsYXRlciBzbyBpdCBtaWdodCBub3QgYmUgbmVlZGVkLg0KPj4gPiA+DQo+ PiA+ID4+DQo+PiA+ID4+ICgyKSBQcm9wb3NhbCBmcm9tIEthdGhsZWVuOg0KPj4gPiA+Pg0KPj4g PiA+PiBodHRwOi8vd3d3LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIvY29zZS9jdXJyZW50L21z ZzAwMDc3Lmh0bWwNCj4+ID4gPj4NCj4+ID4gPj4gT0xEOg0KPj4gPiA+PiBUaGUgV29ya2luZyBH cm91cCB3aWxsIGNvb3JkaW5hdGUgaXRzIHByb2dyZXNzIHdpdGggdGhlIEFDRSwgRElDRSBhbmQN Cj4+ID4gPj4gQ29SRSB3b3JraW5nIGdyb3VwcyB0byBlbnN1cmUgdGhhdCB3ZSBhcmUgZnVsZmls bGluZyB0aGUgbmVlZHMgb2YNCj4+ID4gPj4gdGhlc2UgY29uc3RpdHVlbmNpZXMuDQo+PiA+ID4+ DQo+PiA+ID4+IE5FVzoNCj4+ID4gPj4gVGhlIFdvcmtpbmcgR3JvdXAgd2lsbCBjb29yZGluYXRl IGl0cyBwcm9ncmVzcyB3aXRoIHRoZSBBQ0UsIERJQ0UsDQo+PiA+ID4+IENvUkUNCj4+ID4gPiBh bmQNCj4+ID4gPj4gRElNRSB3b3JraW5nIGdyb3VwcyB0byBlbnN1cmUgdGhhdCB3ZSBhcmUgZnVs ZmlsbGluZyB0aGUgbmVlZHMgb2YNCj4+ID4gPj4gdGhlc2UgY29uc3RpdHVlbmNpZXMuDQo+PiA+ ID4NCj4+ID4gPiBJIGFtIG5vdCBzdXJlIHRoYXQgRElNRSBpcyBhIHJlYXNvbmFibGUgZ3JvdXAg dG8gYmUgY29vcmRpbmF0aW5nIHdpdGgNCj4+ID4gPiBzaW5jZSBpdCBpcyBub3QgY2xlYXIgdGhh dCB0aGlzIHdvdWxkIGJlIHRoZSBzb2x1dGlvbiBzcGFjZSB0aGV5IGFyZQ0KPj4gPiA+IGdvaW5n IHRvIG9wZXJhdGUgaW4uICBJdCBpcyB0cnVlIHRoYXQgdGhpcyBuZWVkIHNvbWV0aGluZyBhbG9u ZyB0aGVzZQ0KPj4gPiA+IGxpbmVzLCBidXQgd2hhdCB0aGV5IG5lZWQgZmlyc3QgaXMgdG8gZ2V0 IHNvbWVvbmUgd2hvIGhhcyBnb29kDQo+PiA+ID4ga25vd2xlZGdlIG9mIHdoYXQgY2FuIGJlIGRv bmUgaW4gdGhlIGdyb3VwIGZpcnN0LiAgR2l2ZW4gdGhhdCB0aGlzIGlzDQo+PiA+ID4gbWFqb3Ig KHRlbGVjb20pIHZlbmRvcnMsIHVzaW5nIENNUyBtaWdodCBiZSBhIGJldHRlciBmaXQgZm9yIHRo aXMNCj4+ID4gPg0KPj4gPiA+IFRoZSBvdGhlciBxdWVzdGlvbiBpZiB3ZSBleHBhbmQgdGhpcyBs aXN0IGhlcmUgcmF0aGVyIHRoYW4gaW4gdGhlIHdpa2kNCj4+ID4gPiBpcyB0aGUgc2V0IG9mIGdy b3VwcyB0aGF0IFJlbmUgU3RydWlrIHRob3VnaCB0aGF0IG1pZ2h0IGJlIGluY2x1ZGVkDQo+PiA+ ID4gaGVyZSBzdWNoIGFzICI2VGlTQ0gsIDZsbywgUm9MTCwgZXRjIiB3aGljaCBzZWVtIHRvIGJl IG11Y2ggY2xvc2VyIHRvDQo+PiA+ID4gdGhlIHR5cGVzIG9mIGdyb3VwcyB0aGF0IG1pZ2h0IHVz ZSB0aGlzIHNwZWNpZmljYXRpb24gZ29pbmcgZm9yd2FyZC4NCj4+ID4gPg0KPj4gPiA+IEF0IHRo aXMgcG9pbnQsIEkgdGhpbmsgSSB3b3VsZCBnbyB3aXRoIHRoZSBsaXN0IHdlIGhhdmUgYW5kIHN0 YXJ0DQo+PiA+ID4gYWRkaW5nIG1vcmUgZ3JvdXBzIHRvIHRoZSB3aWtpLg0KPj4gPg0KPj4gPiBJ J20gZmluZSB3aXRoIHRoYXQgYXBwcm9hY2guICBNeSBwb2ludCBpbiBicmluZ2luZyB1cCBESU1F IHdhcyBtb3JlIHRoYXQgdGhleQ0KPj4gPiBuZWVkIGhlbHAgYW5kIHRoaXMgKmNvdWxkKiBoZWxw IHRoZW0sIGJ1dCB3b3JrIG5lZWRzIHRvIGJlIGRvbmUgdG8gZmlndXJlDQo+PiA+IG91dCB3aGF0 IHRoZXkgbmVlZCBhdCB0aGlzIHBvaW50LiAgSSBicm91Z2h0IGl0IHVwIGp1c3QgaW4gY2FzZSBp dCdzIHJlbGV2YW50IHRvDQo+PiA+IENPU0UuDQo+PiA+DQo+PiA+IFRoYW5rcywNCj4+ID4gS2F0 aGxlZW4NCj4+ID4gPg0KPj4gPiA+IEppbQ0KPj4gPiA+DQo+PiA+ID4+DQo+PiA+ID4+DQo+PiA+ ID4+IFRoYW5rcywNCj4+ID4gPj4NCj4+ID4gPj4gS2luZCBSZWdhcmRzDQo+PiA+ID4+IEtlcGVu Zw0KPj4gPiA+Pg0KPj4gDQo+PiA+ID4+ID8gMTUvNC8xNSAyOjMyIGFtLCAiUGF1bCBIb2ZmbWFu IiA8cGF1bC5ob2ZmbWFuQHZwbmMub3JnPiA/PzoNCj4+IA0KPj4gPiA+Pg0KPj4gPiA+Pj4gT24g QXByIDE0LCAyMDE1LCBhdCAxMToyMCBBTSwgSmltIFNjaGFhZCA8aWV0ZkBhdWd1c3RjZWxsYXJz LmNvbT4NCj4+ID4gd3JvdGU6DQo+PiA+ID4+Pj4NCj4+ID4gPj4+PiBJIHdvdWxkIGxpa2UgdG8g Z2V0IFB1bGwgUmVxdWVzdCAjMiByb2xsZWQgaW50byB0aGUgZHJhZnQgY2hhcnRlcg0KPj4gPiA+ Pj4+IGFuZCB0aGVuIEkgdGhpbmsgd2UgYXJlIHJlYWR5IHRvIHNlbmQgaXQgdG8gdGhlIEFEcyBh bmQgSUVTRyBmb3IgcmV2aWV3Lg0KPj4gPiA+Pj4+DQo+PiA+ID4+Pj4gU2luY2UgaXQgaXMgbXkg cHVsbCByZXF1ZXN0IEkgaGF2ZSBub3QgZG9uZSB0aGUgbWVyZ2UgcHJlZmVycmluZw0KPj4gPiA+ Pj4+IHRoYXQgaXQgYmUgZG9uZSBieSBvbmUgb2YgdGhlIG90aGVycyB3aG8gaGF2ZSBwZXJtaXNz aW9ucy4gIElmIEkNCj4+ID4gPj4+PiBnZXQgYSBtZXNzYWdlIHNheWluZyBkbyB0aGUgbWVyZ2Ug cmVxdWVzdCBJIHdvdWxkIGJlIGhhcHB5IHRvIHB1bGwNCj4+ID4gPj4+PiB0aGUgdHJpZ2dlciBv biBpdC4NCj4+ID4gPj4+DQo+PiA+ID4+PiBUaGVyZSBzZWVtZWQgdG8gYmUgZ2VuZXJhbCBhZ3Jl ZW1lbnQsIHNvIEkgYWNjZXB0ZWQgdGhlIHB1bGwgcmVxdWVzdC4NCj4+ID4gPj4+DQo+PiA+ID4+ PiBDdXJyZW50IHZlcnNpb24gaXMgYXQ6DQo+PiA+ID4+PiBodHRwczovL2dpdGh1Yi5jb20vY29z ZS1zcGVjL3dnLWNoYXJ0ZXIvYmxvYi9tYXN0ZXIvZHJhZnQtY2hhcnRlci5tZA0KPj4gPiA+Pj4N Cj4+ID4gPj4+IC0tUGF1bCBIb2ZmbWFuDQo+PiA+ID4+Pg0KPj4gPiA+Pj4gX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4+ID4gPj4+IENvc2UgbWFpbGlu ZyBsaXN0DQo+PiA+ID4+PiBDb3NlQGlldGYub3JnDQo+PiA+ID4+PiBodHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UNCj4+ID4gPj4NCj4+ID4gPj4NCj4+ID4gPj4gX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4+ID4gPj4gQ29z ZSBtYWlsaW5nIGxpc3QNCj4+ID4gPj4gQ29zZUBpZXRmLm9yZw0KPj4gPiA+PiBodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UNCj4+ID4gPg0KPj4gPiA+IF9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+PiA+ID4gQ29zZSBtYWls aW5nIGxpc3QNCj4+ID4gPiBDb3NlQGlldGYub3JnDQo+PiA+ID4gaHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbG1hbi9saXN0aW5mby9jb3NlDQo+PiA+DQo+PiA+IF9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+PiA+IENvc2UgbWFpbGluZyBsaXN0DQo+PiA+ IENvc2VAaWV0Zi5vcmcNCj4+ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9jb3NlDQo+PiANCj4+IA0KPj4gDQo+PiANCj4+ICANCj4+IA0KPj4gLS0NCj4+IA0KPj4gIA0K Pj4gDQo+PiBCZXN0IHJlZ2FyZHMsDQo+PiANCj4+IEthdGhsZWVuDQo+PiANCj4gDQo+IA0KPiAN Cj4gLS0gDQo+IA0KPiBCZXN0IHJlZ2FyZHMsDQo+IEthdGhsZWVuDQo+IF9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IENvc2UgbWFpbGluZyBsaXN0DQo+ IENvc2VAaWV0Zi5vcmcNCj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9j b3NlDQo= --Apple-Mail-6E949903-4EFC-4D3A-B5A2-142D05E92C9A Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: base64 PGh0bWw+PGhlYWQ+PG1ldGEgaHR0cC1lcXVpdj0iY29udGVudC10eXBlIiBjb250ZW50PSJ0ZXh0 L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPjwvaGVhZD48Ym9keSBkaXI9ImF1dG8iPjxkaXY+TG9va3Mg ZmluZS4mbmJzcDs8L2Rpdj48ZGl2Pjxicj48L2Rpdj48ZGl2PkFib3V0IHRoZSBjb25zdHJhaW5l ZC1hcHByb3ByaWF0ZSBhbGdvcml0aG1zOiBpcyB0aGUgaW50ZW50aW9uIHRvIGNvbnN1bHQgQ0ZS Rz8gSWYgc28sIG1heWJlIHdvdWxkIGJlIGdvb2QgdG8gZ2V0IHRoYXQgYmFsbCByb2xsaW5nIHRv byBzb29uLiZuYnNwOzwvZGl2PjxkaXY+PGJyPjwvZGl2PjxkaXY+VGhhbmtzLDwvZGl2PjxkaXY+ R8O2cmFuPGJyPjxicj48L2Rpdj48ZGl2Pjxicj5PbiAyMiBhcHIgMjAxNSwgYXQgMTg6NTQsIEth dGhsZWVuIE1vcmlhcnR5ICZsdDs8YSBocmVmPSJtYWlsdG86a2F0aGxlZW4ubW9yaWFydHkuaWV0 ZkBnbWFpbC5jb20iPmthdGhsZWVuLm1vcmlhcnR5LmlldGZAZ21haWwuY29tPC9hPiZndDsgd3Jv dGU6PGJyPjxicj48L2Rpdj48YmxvY2txdW90ZSB0eXBlPSJjaXRlIj48ZGl2PjxtZXRhIGh0dHAt ZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij48 ZGl2IGRpcj0ibHRyIj5HcmVhdCwgYXJlIG90aGVycyBvayB3aXRoIHRoZSBjaGFuZ2VzPyZuYnNw OyBJZiBzbywgSSdsbCBnZXQgaXQgcm9sbGluZy48L2Rpdj48ZGl2IGNsYXNzPSJnbWFpbF9leHRy YSI+PGJyPjxkaXYgY2xhc3M9ImdtYWlsX3F1b3RlIj5PbiBXZWQsIEFwciAyMiwgMjAxNSBhdCAx Mjo0MSBQTSwgSmltIFNjaGFhZCA8c3BhbiBkaXI9Imx0ciI+Jmx0OzxhIGhyZWY9Im1haWx0bzpp ZXRmQGF1Z3VzdGNlbGxhcnMuY29tIiB0YXJnZXQ9Il9ibGFuayI+aWV0ZkBhdWd1c3RjZWxsYXJz LmNvbTwvYT4mZ3Q7PC9zcGFuPiB3cm90ZTo8YnI+PGJsb2NrcXVvdGUgY2xhc3M9ImdtYWlsX3F1 b3RlIiBzdHlsZT0ibWFyZ2luOjAgMCAwIC44ZXg7Ym9yZGVyLWxlZnQ6MXB4ICNjY2Mgc29saWQ7 cGFkZGluZy1sZWZ0OjFleCI+PGRpdiBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1 cnBsZSI+PGRpdj48cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFmNDk3ZCI+QmUgbXkgZ3Vlc3QgdG8gbWFrZSB0aGUgY2hhbmdlcy48dT48L3U+ PHU+PC91Pjwvc3Bhbj48L3A+PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7O2NvbG9yOiMxZjQ5N2QiPjx1PjwvdT4mbmJzcDs8dT48L3U+PC9zcGFuPjwvcD48 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFm NDk3ZCI+SmltPHU+PC91Pjx1PjwvdT48L3NwYW4+PC9wPjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMWY0OTdkIj48dT48L3U+Jm5ic3A7PHU+ PC91Pjwvc3Bhbj48L3A+PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxZjQ5N2QiPjx1PjwvdT4mbmJzcDs8dT48L3U+PC9zcGFuPjwvcD48ZGl2 IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6 MGluIDBpbiAwaW4gNC4wcHQiPjxkaXY+PGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRv cDpzb2xpZCAjYjVjNGRmIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Gcm9tOjwvc3Bhbj48 L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21h JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiBDb3NlIFttYWlsdG86PGEgaHJlZj0ibWFp bHRvOmNvc2UtYm91bmNlc0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmNvc2UtYm91bmNlc0Bp ZXRmLm9yZzwvYT5dIDxiPk9uIEJlaGFsZiBPZiA8L2I+S2F0aGxlZW4gTW9yaWFydHk8YnI+PGI+ U2VudDo8L2I+IFdlZG5lc2RheSwgQXByaWwgMjIsIDIwMTUgOToyNyBBTTxicj48Yj5Ubzo8L2I+ IEppbSBTY2hhYWQ8L3NwYW4+PC9wPjxkaXY+PGRpdiBjbGFzcz0iaDUiPjxicj48Yj5DYzo8L2I+ IDxhIGhyZWY9Im1haWx0bzpjb3NlQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+Y29zZUBpZXRm Lm9yZzwvYT48YnI+PGI+U3ViamVjdDo8L2I+IFJlOiBbQ29zZV0gQ2hhcnRlciBTdGF0ZTx1Pjwv dT48dT48L3U+PC9kaXY+PC9kaXY+PHA+PC9wPjwvZGl2PjwvZGl2PjxkaXY+PGRpdiBjbGFzcz0i aDUiPjxwIGNsYXNzPSJNc29Ob3JtYWwiPjx1PjwvdT4mbmJzcDs8dT48L3U+PC9wPjxkaXY+PHAg Y2xhc3M9Ik1zb05vcm1hbCI+SGksPHU+PC91Pjx1PjwvdT48L3A+PGRpdj48cCBjbGFzcz0iTXNv Tm9ybWFsIj48dT48L3U+Jm5ic3A7PHU+PC91PjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPSJNc29O b3JtYWwiPkkgYW0gYXNzdW1pbmcgdGhlIGN1cnJlbnQgY2hhcnRlciB0ZXh0IGlzIGF0IHRoZSBs aW5rOjx1PjwvdT48dT48L3U+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9Ik1zb05vcm1hbCI+PGEg aHJlZj0iaHR0cHM6Ly9naXRodWIuY29tL2Nvc2Utc3BlYy93Zy1jaGFydGVyL2Jsb2IvbWFzdGVy L2RyYWZ0LWNoYXJ0ZXIubWQiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL2dpdGh1Yi5jb20vY29z ZS1zcGVjL3dnLWNoYXJ0ZXIvYmxvYi9tYXN0ZXIvZHJhZnQtY2hhcnRlci5tZDwvYT48dT48L3U+ PHU+PC91PjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPSJNc29Ob3JtYWwiPjx1PjwvdT4mbmJzcDs8 dT48L3U+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBoYXZlIHNvbWUgcHJv cG9zZWQgY2hhbmdlcyB0aGF0IEkgdGhpbmsgaGVscCB3aXRoIHJlYWRhYmlsaXR5LiZuYnNwOyBM ZXQgbWUga25vdyBpZiB0aGVzZSBhcmUgb2sgYW5kIEknbGwgcHV0IGluIHRoZSBjaGFydGVyIGZv ciBJRVNHIHJldmlldy4mbmJzcDsgQWxsIG9mIHRoZSBjaGFydGVyIHRleHQgaXMgaW5jbHVkZWQs IGJyb2tlbiBvdXQgYnkgc2VjdGlvbnMgdG8gc2hvdyBlZGl0cy4mbmJzcDsgSW4gc29tZSBjYXNl cywgdGhlcmUgaXMgYSBOb3RlOiBmb2xsb3dpbmcgYSBjaGFuZ2Ugd2l0aCBhc3N1bXB0aW9ucyBJ IHdhcyBtYWtpbmcgaW4gY2FzZSB0aGV5IHdlcmUgbm90IGNvcnJlY3QgYXNzdW1wdGlvbnMuPHU+ PC91Pjx1PjwvdT48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz0iTXNvTm9ybWFsIj48dT48L3U+Jm5i c3A7PHU+PC91PjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9sZDo8c3BhbiBz dHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6IzMzMzMzMyI+Q29uY2lzZSBCaW5hcnkgT2JqZWN0IFJlcHJlc2VudGF0aW9u IChDQk9SLCBSRkMgNzA0OSkgaXMgYSBjb25jaXNlIGJpbmFyeSBmb3JtYXQgZm9yIHRoZSBzZXJp YWxpemF0aW9uIG9mIGRhdGEgc3RydWN0dXJlZCB0byBhbiBleHRlbmRlZCB2ZXJzaW9uIG9mIHRo ZSBKU09OIGRhdGEgbW9kZWwuIE9uZSBtb3RpdmF0aW9uIGZvciBDQk9SIHdhcyB0byBtYWtlIHRo aXMgZGF0YSBtb2RlbCBtb3JlIGFtZW5hYmxlIHRvIGNvbnN0cmFpbmVkIG5vZGVzIGFuZCBjb25z dHJhaW5lZCBub2RlIG5ldHdvcmtzIChSRkMgNzIyOCkuPC9zcGFuPjx1PjwvdT48dT48L3U+PC9w PjwvZGl2PjxwIGNsYXNzPSJNc29Ob3JtYWwiPk5ldzo8dT48L3U+PHU+PC91PjwvcD48ZGl2Pjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtIZWx2ZXRp Y2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMzMzMzMzIj5Db25jaXNlIEJp bmFyeSBPYmplY3QgUmVwcmVzZW50YXRpb24gKENCT1IsIFJGQyA3MDQ5KSBpcyBhIGNvbmNpc2Ug YmluYXJ5IGZvcm1hdCBmb3IgdGhlIHNlcmlhbGl6YXRpb24gb2YgZGF0YSBzdHJ1Y3R1cmVkIHRv IGFuIGV4dGVuZGVkIHZlcnNpb24gb2YgdGhlIEpTT04gZGF0YSBtb2RlbC4gT25lIG1vdGl2YXRp b24gZm9yIENPU0Ugd2FzIHRvIHJldXNlIGZ1bmN0aW9uYWxpdHkgZnJvbSB0aGUgSk9TRSB3b3Jr aW5nIGdyb3VwIHVzaW5nIHRoZSBDQk9SIGRhdGEgcmVwcmVzZW50YXRpb24gYXMgaXQgaXMgbW9y ZSBhbWVuYWJsZSB0byBjb25zdHJhaW5lZCBub2RlcyBhbmQgY29uc3RyYWluZWQgbm9kZSBuZXR3 b3JrcyAoUkZDIDcyMjgpLjwvc3Bhbj48dT48L3U+PHU+PC91PjwvcD48L2Rpdj48ZGl2PjxwIGNs YXNzPSJNc29Ob3JtYWwiPjx1PjwvdT4mbmJzcDs8dT48L3U+PC9wPjwvZGl2PjxwIGNsYXNzPSJN c29Ob3JtYWwiPk9sZDo8dT48L3U+PHU+PC91PjwvcD48ZGl2PjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90Oztjb2xvcjojMzMzMzMzIj5UaGUgSk9TRSB3b3JraW5nIGdyb3VwIHJlY2Vu dGx5IGNvbXBsZXRlZCBwcm9kdWNpbmcgcmVwcmVzZW50YXRpb25zIGZvciBjcnlwdG9ncmFwaGlj IGtleXMsIG1lc3NhZ2UgYXV0aGVudGljYXRpb24gKE1BQ3MpLCBlbmNyeXB0aW9uLCBhbmQgZGln aXRhbCBzaWduYXR1cmVzLCB1c2luZyBKU09OIHJlcHJlc2VudGF0aW9uLiBUaGlzIHdvcmtpbmcg Z3JvdXAgd2lsbCByZXVzZSB0aGUgd29yayBkb25lIGJ5IEpPU0UsIGFkYXB0aW5nIGl0IHRvIHRo ZSBjYXBhYmlsaXRpZXMgb2YgQ0JPUi4gVGhpcyB3aWxsIHJlbHkgb24gdGhlIEpPU0UgcmVnaXN0 cmllcywgd2hpY2gsIHdoZXJlIHRoaXMgcHJvdmlkZXMgYWRkaXRpb25hbCBlZmZpY2llbmN5LCB3 aWxsIGJlIGV4cGFuZGVkIHdpdGggYWRkaXRpb25hbCBpbmZvcm1hdGlvbi48L3NwYW4+PHU+PC91 Pjx1PjwvdT48L3A+PC9kaXY+PHAgY2xhc3M9Ik1zb05vcm1hbCI+TmV3Ojx1PjwvdT48dT48L3U+ PC9wPjxkaXY+PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZx dW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMzMzMzMzMi PlRoZSBKT1NFIHdvcmtpbmcgZ3JvdXAgcmVjZW50bHkgY29tcGxldGVkIHByb2R1Y2luZyByZXBy ZXNlbnRhdGlvbnMgZm9yIGNyeXB0b2dyYXBoaWMga2V5cywgbWVzc2FnZSBhdXRoZW50aWNhdGlv biAoTUFDcyksIGVuY3J5cHRpb24sIGFuZCBkaWdpdGFsIHNpZ25hdHVyZXMsIHVzaW5nIEpTT04g cmVwcmVzZW50YXRpb24uIENPU0Ugd2lsbCByZWx5IG9uIHRoZSBKT1NFIHJlZ2lzdHJpZXMsIGFu ZCB3aWxsIGJlIGV4cGFuZCB0aGVtIHdpdGggYWRkaXRpb25hbCBpbmZvcm1hdGlvbiB3aGVuIG5l Y2Vzc2FyeS48L3NwYW4+PHU+PC91Pjx1PjwvdT48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz0iTXNv Tm9ybWFsIj48dT48L3U+Jm5ic3A7PHU+PC91PjwvcD48L2Rpdj48cCBjbGFzcz0iTXNvTm9ybWFs Ij5Ob3RlOiB5b3UgbWF5IGhhdmUgb3RoZXIgcmVhc29ucyBiZXNpZGVzIGVmZmljaWVuY3kuPHU+ PC91Pjx1PjwvdT48L3A+PGRpdj48cCBjbGFzcz0iTXNvTm9ybWFsIj48dT48L3U+Jm5ic3A7PHU+ PC91PjwvcD48L2Rpdj48cCBjbGFzcz0iTXNvTm9ybWFsIj5PbGQ6PHU+PC91Pjx1PjwvdT48L3A+ PGRpdj48cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7 SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzMzMzMzMyI+VGhl IHJlc3VsdGluZyBmb3JtYXRzIHdpbGwgbm90IGJlIGNyeXB0b2dyYXBoaWNhbGx5IGNvbnZlcnRp YmxlIGZyb20gb3IgdG8gSk9TRSBmb3JtYXRzLiBUaGlzIGxhY2sgb2YgYSBuZWVkIGZvciBiaXQt Zm9yLWJpdCBjb21wYWJpdGlsaXR5IHdoaWNoIHdpbGwgZW5hYmxlIHNvbWUgc2ltcGxpZmljYXRp b24gaW4gdGhlIGFkYXB0YXRpb24gcHJvY2Vzcy48L3NwYW4+PHU+PC91Pjx1PjwvdT48L3A+PC9k aXY+PHAgY2xhc3M9Ik1zb05vcm1hbCI+TmV3OiA8dT48L3U+PHU+PC91PjwvcD48ZGl2PjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2Em cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMzMzMzMzIj5UaGUgcmVzdWx0aW5n IGZvcm1hdHMgd2lsbCBub3QgYmUgY3J5cHRvZ3JhcGhpY2FsbHkgY29udmVydGlibGUgZnJvbSBv ciB0byBKT1NFIGZvcm1hdHMuIFRoaXMgbGFjayBvZiBhIG5lZWQgZm9yIGJpdC1mb3ItYml0Jm5i c3A7Y29tcGF0aWJpbGl0eSZuYnNwO3dpbGwgZW5hYmxlIHNvbWUgc2ltcGxpZmljYXRpb24gaW4g dGhlIGFkYXB0YXRpb24gcHJvY2Vzcy48L3NwYW4+PHU+PC91Pjx1PjwvdT48L3A+PC9kaXY+PGRp dj48cCBjbGFzcz0iTXNvTm9ybWFsIj48dT48L3U+Jm5ic3A7PHU+PC91PjwvcD48L2Rpdj48cCBj bGFzcz0iTXNvTm9ybWFsIj5PbGQ6PHU+PC91Pjx1PjwvdT48L3A+PGRpdj48cCBzdHlsZT0ibWFy Z2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjEyLjBwdDttYXJnaW4tbGVmdDowaW47bGluZS1o ZWlnaHQ6MTkuMnB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzMzMzMzMyI+Q3JpdGVyaWEgdGhhdCBz aG91bGQgYmUgY29uc2lkZXJlZCBvbiBtYWtpbmcgZGVjaXNpb25zIGluIGNoYW5naW5nIGZyb20g YSBKU09OIHRvIGEgQ0JPUiBlbmNvZGluZyBhcmU6PHU+PC91Pjx1PjwvdT48L3NwYW4+PC9wPjxw IHN0eWxlPSJtYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MTIuMHB0O21hcmdpbi1sZWZ0 Oi41aW47bGluZS1oZWlnaHQ6MTkuMnB0Ij48dT48L3U+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6U3ltYm9sO2NvbG9yOiMzMzMzMzMiPjxzcGFuPsK3PHNwYW4gc3R5 bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7Ij4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgPC9zcGFuPjwvc3Bhbj48L3NwYW4+PHU+PC91PjxzcGFuIHN0eWxl PSJmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Oztjb2xvcjojMzMzMzMzIj5LZWVwaW5nIHRoZSBjdXJyZW50IEpPU0UgcGFyYWRpZ21zIGFuZCBm b3JtYXR0aW5nIHdoZXJlIGZlYXNpYmxlLjx1PjwvdT48dT48L3U+PC9zcGFuPjwvcD48cCBzdHls ZT0ibWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjEyLjBwdDttYXJnaW4tbGVmdDouNWlu O2xpbmUtaGVpZ2h0OjE5LjJwdCI+PHU+PC91PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OlN5bWJvbDtjb2xvcjojMzMzMzMzIj48c3Bhbj7CtzxzcGFuIHN0eWxlPSJm b250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IDwvc3Bhbj48L3NwYW4+PC9zcGFuPjx1PjwvdT48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6IzMzMzMzMyI+TWluaW1pemluZyBtZXNzYWdlIHNpemUsIGNvZGUgc2l6ZSBhbmQgY29tcHV0 YXRpb25hbCBjb21wbGV4aXR5IHNob3VsZCBiZSBjb25zaWRlcmVkIChmb3IgdGhlIGNvbnN0cmFp bmVkIGVudmlyb25tZW50cyB3aGVyZSB3ZSBleHBlY3QgdG8gdXNlIHRoaXMpLjx1PjwvdT48dT48 L3U+PC9zcGFuPjwvcD48cCBzdHlsZT0ibWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjEy LjBwdDttYXJnaW4tbGVmdDouNWluO2xpbmUtaGVpZ2h0OjE5LjJwdCI+PHU+PC91PjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OlN5bWJvbDtjb2xvcjojMzMzMzMzIj48 c3Bhbj7CtzxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90 OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDwvc3Bhbj48L3NwYW4+PC9zcGFuPjx1 PjwvdT48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzMzMzMzMyI+SW1wcm92aW5nIHNlY3VyaXR5PHU+PC91 Pjx1PjwvdT48L3NwYW4+PC9wPjxwIHN0eWxlPSJtYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0 b206MTIuMHB0O21hcmdpbi1sZWZ0Oi41aW47bGluZS1oZWlnaHQ6MTkuMnB0Ij48dT48L3U+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6U3ltYm9sO2NvbG9yOiMzMzMz MzMiPjxzcGFuPsK3PHNwYW4gc3R5bGU9ImZvbnQ6Ny4wcHQgJnF1b3Q7VGltZXMgTmV3IFJvbWFu JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPC9zcGFuPjwvc3Bhbj48L3Nw YW4+PHU+PC91PjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMzMzMzMzIj5Qcm92aWRpbmcgbmV3IGZ1bmN0 aW9uYWxpdHkgdGhhdCB1c2VzIG9mIEpPU0UgZGlkIG5vdCByZXF1aXJlLCBidXQgYXJlIHJlcXVp cmVkIGZvciB0aGUgbmV3IHVzZSBjYXNlcy48dT48L3U+PHU+PC91Pjwvc3Bhbj48L3A+PHAgY2xh c3M9Ik1zb05vcm1hbCI+TmV3OiA8dT48L3U+PHU+PC91PjwvcD48L2Rpdj48ZGl2PjxwIHN0eWxl PSJtYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MTIuMHB0O21hcmdpbi1sZWZ0OjBpbjts aW5lLWhlaWdodDoxOS4ycHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtIZWx2ZXRp Y2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMzMzMzMzIj5Dcml0ZXJpYSB0 aGF0IHNob3VsZCBiZSBjb25zaWRlcmVkIGluIHRoZSBkZWNpc2lvbiBtYWtpbmcgcHJvY2Vzcywg Y2hhbmdpbmcgZnJvbSBKU09OIHRvIENCT1IgZW5jb2RpbmcgaW5jbHVkZTo8dT48L3U+PHU+PC91 Pjwvc3Bhbj48L3A+PHAgc3R5bGU9Im1hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbToxMi4w cHQ7bWFyZ2luLWxlZnQ6LjVpbjtsaW5lLWhlaWdodDoxOS4ycHQiPjx1PjwvdT48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpTeW1ib2w7Y29sb3I6IzMzMzMzMyI+PHNw YW4+wrc8c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4mcXVvdDsi PiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8L3NwYW4+PC9zcGFuPjwvc3Bhbj48dT48 L3U+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMzMzMzMzMiPk1haW50YWluIHRoZSBjdXJyZW50IEpPU0Ug cGFyYWRpZ21zIGFuZCBmb3JtYXR0aW5nIHdoZXJlIGZlYXNpYmxlLjx1PjwvdT48dT48L3U+PC9z cGFuPjwvcD48cCBzdHlsZT0ibWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjEyLjBwdDtt YXJnaW4tbGVmdDouNWluO2xpbmUtaGVpZ2h0OjE5LjJwdCI+PHU+PC91PjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OlN5bWJvbDtjb2xvcjojMzMzMzMzIj48c3Bhbj7C tzxzcGFuIHN0eWxlPSJmb250OjcuMHB0ICZxdW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyI+Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDwvc3Bhbj48L3NwYW4+PC9zcGFuPjx1PjwvdT48 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6IzMzMzMzMyI+TWluaW1pemUgbWVzc2FnZSBzaXplLCBjb2RlIHNp emUsIGFuZCBjb21wdXRhdGlvbmFsIGNvbXBsZXhpdHkgdG8gc3VpdCBjb25zdHJhaW5lZCBlbnZp cm9ubWVudHMsIHdoZXJlIHRoaXMgaXMgZXhwZWN0ZWQgdG8gJm5ic3A7YmUgdXNlZC48dT48L3U+ PHU+PC91Pjwvc3Bhbj48L3A+PHAgc3R5bGU9Im1hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRv bToxMi4wcHQ7bWFyZ2luLWxlZnQ6LjVpbjtsaW5lLWhlaWdodDoxOS4ycHQiPjx1PjwvdT48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpTeW1ib2w7Y29sb3I6IzMzMzMz MyI+PHNwYW4+wrc8c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9tYW4m cXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8L3NwYW4+PC9zcGFuPjwvc3Bh bj48dT48L3U+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMzMzMzMzMiPkltcHJvdmUgc2VjdXJpdHk8dT48 L3U+PHU+PC91Pjwvc3Bhbj48L3A+PHAgc3R5bGU9Im1hcmdpbi1yaWdodDowaW47bWFyZ2luLWJv dHRvbToxMi4wcHQ7bWFyZ2luLWxlZnQ6LjVpbjtsaW5lLWhlaWdodDoxOS4ycHQiPjx1PjwvdT48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpTeW1ib2w7Y29sb3I6IzMz MzMzMyI+PHNwYW4+wrc8c3BhbiBzdHlsZT0iZm9udDo3LjBwdCAmcXVvdDtUaW1lcyBOZXcgUm9t YW4mcXVvdDsiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8L3NwYW4+PC9zcGFuPjwv c3Bhbj48dT48L3U+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMzMzMzMzMiPlByb3ZpZGUgbmV3IGZ1bmN0 aW9uYWxpdHkgZm9yIGFkZGl0aW9uYWwgdXNlIGNhc2VzIHRoYXQgd2VyZSBub3QgcmVxdWlyZWQg Zm9yIEpPU0UuJm5ic3A7PHU+PC91Pjx1PjwvdT48L3NwYW4+PC9wPjxwIGNsYXNzPSJNc29Ob3Jt YWwiPk9sZDo8dT48L3U+PHU+PC91PjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90Oztjb2xvcjojMzMzMzMzIj5Jc3N1ZXMgZGVhbGluZyB3aXRoIGtleSBtYW5h Z2VtZW50IGFuZCBiaW5kaW5nIG9mIGtleXMgdG8gaWRlbnRpdGllcyBhcmUgb3V0IG9mIHNjb3Bl IGZvciB0aGUgd29ya2luZyBncm91cC48L3NwYW4+PHU+PC91Pjx1PjwvdT48L3A+PC9kaXY+PHAg Y2xhc3M9Ik1zb05vcm1hbCI+TmV3Ojx1PjwvdT48dT48L3U+PC9wPjxkaXY+PHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMzMzMzMzMiPktleSBtYW5hZ2VtZW50IGFuZCBi aW5kaW5nIG9mIGtleXMgdG8gaWRlbnRpdGllcyBhcmUgb3V0IG9mIHNjb3BlIGZvciB0aGUgd29y a2luZyBncm91cC48L3NwYW4+PHU+PC91Pjx1PjwvdT48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz0i TXNvTm9ybWFsIj48dT48L3U+Jm5ic3A7PHU+PC91PjwvcD48L2Rpdj48cCBjbGFzcz0iTXNvTm9y bWFsIj5Ob3RlOiBJIGFtIGFzc3VtaW5nIHlvdSByZWFsbHkgd2FudCB0byBvdXQtb2Ygc2NvcGUg YWxsIGtleSBtYW5hZ2VtZW50IGFuZCBub3QganVzdCBpc3N1ZXM/PHU+PC91Pjx1PjwvdT48L3A+ PGRpdj48cCBjbGFzcz0iTXNvTm9ybWFsIj48dT48L3U+Jm5ic3A7PHU+PC91PjwvcD48L2Rpdj48 cCBjbGFzcz0iTXNvTm9ybWFsIj5BbmQgSSBkb24ndCBzZWUgYW55IG5lZWQgdG8gdHdlYWsgdGhl IHJlc3Qgb2YgdGhlIHRleHQ6PHU+PC91Pjx1PjwvdT48L3A+PGRpdj48cCBzdHlsZT0ibWFyZ2lu LXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjEyLjBwdDttYXJnaW4tbGVmdDowaW47bGluZS1oZWln aHQ6MTkuMnB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzMzMzMzMyI+VGhlIFdvcmtpbmcgZ3JvdXAg d2lsbCBjb29yZGluYXRlIGl0cyBwcm9ncmVzcyB3aXRoIHRoZSBBQ0UsIERJQ0UgYW5kIENPUkUg d29ya2luZyBncm91cHMgdG8gZW5zdXJlIHRoYXQgd2UgYXJlIGZ1bGZpbGxpbmcgdGhlIG5lZWRz IG9mIHRoZXNlIGNvbnN0aXR1ZW5jaWVzLiBPdGhlciBncm91cHMgbWF5IGJlIGFkZGVkIHRvIHRo aXMgbGlzdCBhcyB0aGUgc2V0IG9mIHVzZSBjYXNlcyBpcyBleHBhbmRlZC48dT48L3U+PHU+PC91 Pjwvc3Bhbj48L3A+PHAgc3R5bGU9Im1hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbToxMi4w cHQ7bWFyZ2luLWxlZnQ6MGluO2xpbmUtaGVpZ2h0OjE5LjJwdCI+PHNwYW4gc3R5bGU9ImZvbnQt ZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMzMzMzMzMiPlRoZSBXRyB3aWxsIGhhdmUgdHdvIGRlbGl2ZXJhYmxlczo8dT48L3U+PHU+PC91 Pjwvc3Bhbj48L3A+PHVsIHR5cGU9ImRpc2MiPjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i Y29sb3I6IzMzMzMzMztsaW5lLWhlaWdodDoxOS4ycHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWls eTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+YSBzdGFuZGFy ZHMtdHJhY2sgc3BlY2lmaWNhdGlvbiBjb3ZlcmluZyB0aGUgc2FtZSBjcnlwdG9ncmFwaGljIGZv cm1hdHMgZnJvbSBKT1NFLCB3aXRoIG9wdGltaXphdGlvbnMgZm9yIGNvbnN0cmFpbmVkIGRldmlj ZSBwcm9jZXNzaW5nLCBleHByZXNzZWQgaW4gQ0JPUjs8dT48L3U+PHU+PC91Pjwvc3Bhbj48L2xp PjxsaSBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0iY29sb3I6IzMzMzMzMztsaW5lLWhlaWdodDox OS4ycHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90OyI+cmVnaXN0cmF0aW9uIGZvciBhbGdvcml0aG1zIChzdWNoIGFz IEFFUy1DQ00tOCkgdGhhdCBhcmUgYXBwcm9wcmlhdGUgZm9yIGNvbnN0cmFpbmVkIGVudmlyb25t ZW50cy48dT48L3U+PHU+PC91Pjwvc3Bhbj48L2xpPjwvdWw+PHAgc3R5bGU9Im1hcmdpbi1yaWdo dDowaW47bWFyZ2luLWJvdHRvbToxMi4wcHQ7bWFyZ2luLWxlZnQ6MGluO2xpbmUtaGVpZ2h0OjE5 LjJwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMzMzMzMzMiPlRoZSBXb3JraW5nIEdyb3VwIHdpbGwg dXNlIGEgd2lraSB0byB0cmFjayBkZXNpcmVkIHVzZSBjYXNlcyBmb3IgaXRzIHdvcmssIGJ1dCBk b2VzIG5vdCBpbnRlbmQgdG8gcHVibGlzaCB0aGlzIGFzIGFuIFJGQy48dT48L3U+PHU+PC91Pjwv c3Bhbj48L3A+PHAgc3R5bGU9Im1hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbToxMi4wcHQ7 bWFyZ2luLWxlZnQ6MGluO2xpbmUtaGVpZ2h0OjE5LjJwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFt aWx5OiZxdW90O0hlbHZldGljYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMz MzMzMzMiPjx1PjwvdT4mbmJzcDs8dT48L3U+PC9zcGFuPjwvcD48cCBjbGFzcz0iTXNvTm9ybWFs Ij5JJ2QgbG92ZSBpdCBpZiB5b3UgY2FuIGtlZXAgdG8gdGhlIG1pbGVzdG9uZXMgcHJvamVjdGVk IDotKTxicj48YnI+VGhhbmtzLjxicj5LYXRobGVlbjx1PjwvdT48dT48L3U+PC9wPjwvZGl2Pjwv ZGl2PjxkaXY+PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHU+PC91PiZuYnNwOzx1PjwvdT48L3A+PGRp dj48cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBUdWUsIEFwciAyMSwgMjAxNSBhdCA2OjMyIFBNLCBK aW0gU2NoYWFkICZsdDs8YSBocmVmPSJtYWlsdG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbSIgdGFy Z2V0PSJfYmxhbmsiPmlldGZAYXVndXN0Y2VsbGFycy5jb208L2E+Jmd0OyB3cm90ZTo8dT48L3U+ PHU+PC91PjwvcD48cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGUgZGF0ZSBjaGFuZ2UgcHJvcG9zZWQg YnkgbWUgaGFzIGJlZW4gbWVyZ2VkIGludG8gdGhlIGRyYWZ0Ljxicj48YnI+SSBiZWxpZXZlIHRo YXQgd2UgY2FuIG5vdyBjb25zaWRlciB0aGUgY2hhcnRlciBkaXNjdXNzaW9uIHRvIGJlIGNvbXBs ZXRlIHVubGVzcyBhbnlvbmUgZWxzZSBoYXMgYSBiaWcgaXNzdWUgdGhleSB3YW50IHRvIGJyaW5n IHVwLjxicj48YnI+S2F0aGxlZW46Jm5ic3A7IENhbiB3ZSBnZXQgdGhpcyB0byBtb3ZlIGZvcndh cmQgaW50byB0aGUgSUVTRz88YnI+PGJyPkppbTx1PjwvdT48dT48L3U+PC9wPjxkaXY+PGRpdj48 cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+PGJyPiZndDsgLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0t LS08YnI+Jmd0OyBGcm9tOiBDb3NlIFttYWlsdG86PGEgaHJlZj0ibWFpbHRvOmNvc2UtYm91bmNl c0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmNvc2UtYm91bmNlc0BpZXRmLm9yZzwvYT5dIE9u IEJlaGFsZiBPZiBLYXRobGVlbiBNb3JpYXJ0eTxicj4mZ3Q7IFNlbnQ6IFR1ZXNkYXksIEFwcmls IDE0LCAyMDE1IDc6MTcgUE08YnI+Jmd0OyBUbzogSmltIFNjaGFhZDxicj4mZ3Q7IENjOiBLZXBl bmcgTGk7IFBhdWwgSG9mZm1hbjsgPGEgaHJlZj0ibWFpbHRvOmNvc2VAaWV0Zi5vcmciIHRhcmdl dD0iX2JsYW5rIj5jb3NlQGlldGYub3JnPC9hPjxicj4mZ3Q7IFN1YmplY3Q6IFJlOiBbQ29zZV0g Q2hhcnRlciBTdGF0ZTxicj4mZ3Q7PGJyPiZndDs8YnI+Jmd0Ozxicj4mZ3Q7IFNlbnQgZnJvbSBt eSBpUGhvbmU8YnI+Jmd0Ozxicj4mZ3Q7ICZndDsgT24gQXByIDE0LCAyMDE1LCBhdCAxMDoxMCBQ TSwgIkppbSBTY2hhYWQiICZsdDs8YSBocmVmPSJtYWlsdG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNv bSIgdGFyZ2V0PSJfYmxhbmsiPmlldGZAYXVndXN0Y2VsbGFycy5jb208L2E+Jmd0Ozxicj4mZ3Q7 IHdyb3RlOjxicj4mZ3Q7ICZndDs8YnI+Jmd0OyAmZ3Q7PGJyPiZndDsgJmd0Ozxicj4mZ3Q7ICZn dDsmZ3Q7IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tPGJyPiZndDsgJmd0OyZndDsgRnJvbTog Q29zZSBbbWFpbHRvOjxhIGhyZWY9Im1haWx0bzpjb3NlLWJvdW5jZXNAaWV0Zi5vcmciIHRhcmdl dD0iX2JsYW5rIj5jb3NlLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XSBPbiBCZWhhbGYgT2YgS2VwZW5n IExpPGJyPiZndDsgJmd0OyZndDsgU2VudDogVHVlc2RheSwgQXByaWwgMTQsIDIwMTUgNjo1OSBQ TTxicj4mZ3Q7ICZndDsmZ3Q7IFRvOiBQYXVsIEhvZmZtYW47IEppbSBTY2hhYWQ8YnI+Jmd0OyAm Z3Q7Jmd0OyBDYzogPGEgaHJlZj0ibWFpbHRvOmNvc2VAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5r Ij5jb3NlQGlldGYub3JnPC9hPjxicj4mZ3Q7ICZndDsmZ3Q7IFN1YmplY3Q6IFJlOiBbQ29zZV0g Q2hhcnRlciBTdGF0ZTxicj4mZ3Q7ICZndDsmZ3Q7PGJyPiZndDsgJmd0OyZndDsgVGhhbmtzIFBh dWwuPGJyPiZndDsgJmd0OyZndDs8YnI+Jmd0OyAmZ3Q7Jmd0OyBUaGVyZSBhcmUgdHdvIG90aGVy IGNoYW5nZXMgd2UgbWlnaHQgd2FudCB0byBpbmNvcnBvcmF0ZTo8YnI+Jmd0OyAmZ3Q7Jmd0Ozxi cj4mZ3Q7ICZndDsmZ3Q7IDEpIFByb3Bvc2FsIGZyb20gR29yYW46PGJyPiZndDsgJmd0OyZndDsg PGEgaHJlZj0iaHR0cDovL3d3dy5pZXRmLm9yZy9tYWlsLWFyY2hpdmUvd2ViL2Nvc2UvY3VycmVu dC9tc2cwMDAyNy5odG1sIiB0YXJnZXQ9Il9ibGFuayI+aHR0cDovL3d3dy5pZXRmLm9yZy9tYWls LWFyY2hpdmUvd2ViL2Nvc2UvY3VycmVudC9tc2cwMDAyNy5odG1sPC9hPjxicj4mZ3Q7ICZndDsm Z3Q7PGJyPiZndDsgJmd0OyZndDsgT0xEOjxicj4mZ3Q7ICZndDsmZ3Q7ICJhIHN0YW5kYXJkcy10 cmFjayBzcGVjaWZpY2F0aW9uIGNvdmVyaW5nIHRoZSBzYW1lIGNyeXB0b2dyYXBoaWM8YnI+Jmd0 OyAmZ3Q7Jmd0OyBmb3JtYXRzPGJyPiZndDsgJmd0OyBmcm9tPGJyPiZndDsgJmd0OyZndDsgSk9T RSwgZXhwcmVzc2VkIGluIENCT1IiPGJyPiZndDsgJmd0OyZndDs8YnI+Jmd0OyAmZ3Q7Jmd0OyBO RVc6PGJyPiZndDsgJmd0OyZndDsgImEgc3RhbmRhcmRzLXRyYWNrIHNwZWNpZmljYXRpb24gY292 ZXJpbmcgdGhlIHNhbWUgY3J5cHRvZ3JhcGhpYzxicj4mZ3Q7ICZndDsmZ3Q7IGZvcm1hdHM8YnI+ Jmd0OyAmZ3Q7IGZyb208YnI+Jmd0OyAmZ3Q7Jmd0OyBKT1NFIGFuZCBvcHRpbWl6YXRpb25zIGZv ciBjb25zdHJhaW5lZCBkZXZpY2UgcHJvY2Vzc2luZywgZXhwcmVzc2VkPGJyPiZndDsgJmd0OyZn dDsgaW48YnI+Jmd0OyAmZ3Q7IENCT1I8YnI+Jmd0OyAmZ3Q7PGJyPiZndDsgJmd0OyBJIGFtIGFn bm9zdGljIGFib3V0IGluY2x1ZGluZyB0aGlzIGNoYW5nZS4mbmJzcDsgV2Ugbm93IGFyZSBtdWNo IG1vcmU8YnI+Jmd0OyAmZ3Q7IGNvbnN0cmFpbmVkIGRldmljZSBmb2N1c2VkIGxhdGVyIHNvIGl0 IG1pZ2h0IG5vdCBiZSBuZWVkZWQuPGJyPiZndDsgJmd0Ozxicj4mZ3Q7ICZndDsmZ3Q7PGJyPiZn dDsgJmd0OyZndDsgKDIpIFByb3Bvc2FsIGZyb20gS2F0aGxlZW46PGJyPiZndDsgJmd0OyZndDs8 YnI+Jmd0OyAmZ3Q7Jmd0OyA8YSBocmVmPSJodHRwOi8vd3d3LmlldGYub3JnL21haWwtYXJjaGl2 ZS93ZWIvY29zZS9jdXJyZW50L21zZzAwMDc3Lmh0bWwiIHRhcmdldD0iX2JsYW5rIj5odHRwOi8v d3d3LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIvY29zZS9jdXJyZW50L21zZzAwMDc3Lmh0bWw8 L2E+PGJyPiZndDsgJmd0OyZndDs8YnI+Jmd0OyAmZ3Q7Jmd0OyBPTEQ6PGJyPiZndDsgJmd0OyZn dDsgVGhlIFdvcmtpbmcgR3JvdXAgd2lsbCBjb29yZGluYXRlIGl0cyBwcm9ncmVzcyB3aXRoIHRo ZSBBQ0UsIERJQ0UgYW5kPGJyPiZndDsgJmd0OyZndDsgQ29SRSB3b3JraW5nIGdyb3VwcyB0byBl bnN1cmUgdGhhdCB3ZSBhcmUgZnVsZmlsbGluZyB0aGUgbmVlZHMgb2Y8YnI+Jmd0OyAmZ3Q7Jmd0 OyB0aGVzZSBjb25zdGl0dWVuY2llcy48YnI+Jmd0OyAmZ3Q7Jmd0Ozxicj4mZ3Q7ICZndDsmZ3Q7 IE5FVzo8YnI+Jmd0OyAmZ3Q7Jmd0OyBUaGUgV29ya2luZyBHcm91cCB3aWxsIGNvb3JkaW5hdGUg aXRzIHByb2dyZXNzIHdpdGggdGhlIEFDRSwgRElDRSw8YnI+Jmd0OyAmZ3Q7Jmd0OyBDb1JFPGJy PiZndDsgJmd0OyBhbmQ8YnI+Jmd0OyAmZ3Q7Jmd0OyBESU1FIHdvcmtpbmcgZ3JvdXBzIHRvIGVu c3VyZSB0aGF0IHdlIGFyZSBmdWxmaWxsaW5nIHRoZSBuZWVkcyBvZjxicj4mZ3Q7ICZndDsmZ3Q7 IHRoZXNlIGNvbnN0aXR1ZW5jaWVzLjxicj4mZ3Q7ICZndDs8YnI+Jmd0OyAmZ3Q7IEkgYW0gbm90 IHN1cmUgdGhhdCBESU1FIGlzIGEgcmVhc29uYWJsZSBncm91cCB0byBiZSBjb29yZGluYXRpbmcg d2l0aDxicj4mZ3Q7ICZndDsgc2luY2UgaXQgaXMgbm90IGNsZWFyIHRoYXQgdGhpcyB3b3VsZCBi ZSB0aGUgc29sdXRpb24gc3BhY2UgdGhleSBhcmU8YnI+Jmd0OyAmZ3Q7IGdvaW5nIHRvIG9wZXJh dGUgaW4uJm5ic3A7IEl0IGlzIHRydWUgdGhhdCB0aGlzIG5lZWQgc29tZXRoaW5nIGFsb25nIHRo ZXNlPGJyPiZndDsgJmd0OyBsaW5lcywgYnV0IHdoYXQgdGhleSBuZWVkIGZpcnN0IGlzIHRvIGdl dCBzb21lb25lIHdobyBoYXMgZ29vZDxicj4mZ3Q7ICZndDsga25vd2xlZGdlIG9mIHdoYXQgY2Fu IGJlIGRvbmUgaW4gdGhlIGdyb3VwIGZpcnN0LiZuYnNwOyBHaXZlbiB0aGF0IHRoaXMgaXM8YnI+ Jmd0OyAmZ3Q7IG1ham9yICh0ZWxlY29tKSB2ZW5kb3JzLCB1c2luZyBDTVMgbWlnaHQgYmUgYSBi ZXR0ZXIgZml0IGZvciB0aGlzPGJyPiZndDsgJmd0Ozxicj4mZ3Q7ICZndDsgVGhlIG90aGVyIHF1 ZXN0aW9uIGlmIHdlIGV4cGFuZCB0aGlzIGxpc3QgaGVyZSByYXRoZXIgdGhhbiBpbiB0aGUgd2lr aTxicj4mZ3Q7ICZndDsgaXMgdGhlIHNldCBvZiBncm91cHMgdGhhdCBSZW5lIFN0cnVpayB0aG91 Z2ggdGhhdCBtaWdodCBiZSBpbmNsdWRlZDxicj4mZ3Q7ICZndDsgaGVyZSBzdWNoIGFzICI2VGlT Q0gsIDZsbywgUm9MTCwgZXRjIiB3aGljaCBzZWVtIHRvIGJlIG11Y2ggY2xvc2VyIHRvPGJyPiZn dDsgJmd0OyB0aGUgdHlwZXMgb2YgZ3JvdXBzIHRoYXQgbWlnaHQgdXNlIHRoaXMgc3BlY2lmaWNh dGlvbiBnb2luZyBmb3J3YXJkLjxicj4mZ3Q7ICZndDs8YnI+Jmd0OyAmZ3Q7IEF0IHRoaXMgcG9p bnQsIEkgdGhpbmsgSSB3b3VsZCBnbyB3aXRoIHRoZSBsaXN0IHdlIGhhdmUgYW5kIHN0YXJ0PGJy PiZndDsgJmd0OyBhZGRpbmcgbW9yZSBncm91cHMgdG8gdGhlIHdpa2kuPGJyPiZndDs8YnI+Jmd0 OyBJJ20gZmluZSB3aXRoIHRoYXQgYXBwcm9hY2guJm5ic3A7IE15IHBvaW50IGluIGJyaW5naW5n IHVwIERJTUUgd2FzIG1vcmUgdGhhdCB0aGV5PGJyPiZndDsgbmVlZCBoZWxwIGFuZCB0aGlzICpj b3VsZCogaGVscCB0aGVtLCBidXQgd29yayBuZWVkcyB0byBiZSBkb25lIHRvIGZpZ3VyZTxicj4m Z3Q7IG91dCB3aGF0IHRoZXkgbmVlZCBhdCB0aGlzIHBvaW50LiZuYnNwOyBJIGJyb3VnaHQgaXQg dXAganVzdCBpbiBjYXNlIGl0J3MgcmVsZXZhbnQgdG88YnI+Jmd0OyBDT1NFLjxicj4mZ3Q7PGJy PiZndDsgVGhhbmtzLDxicj4mZ3Q7IEthdGhsZWVuPGJyPiZndDsgJmd0Ozxicj4mZ3Q7ICZndDsg SmltPGJyPiZndDsgJmd0Ozxicj4mZ3Q7ICZndDsmZ3Q7PGJyPiZndDsgJmd0OyZndDs8YnI+Jmd0 OyAmZ3Q7Jmd0OyBUaGFua3MsPGJyPiZndDsgJmd0OyZndDs8YnI+Jmd0OyAmZ3Q7Jmd0OyBLaW5k IFJlZ2FyZHM8YnI+Jmd0OyAmZ3Q7Jmd0OyBLZXBlbmc8YnI+Jmd0OyAmZ3Q7Jmd0Ozx1PjwvdT48 dT48L3U+PC9wPjwvZGl2PjwvZGl2PjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZndDsgJmd0OyZndDsg PyAxNS80LzE1IDI6MzIgYW0sICJQYXVsIEhvZmZtYW4iICZsdDs8YSBocmVmPSJtYWlsdG86cGF1 bC5ob2ZmbWFuQHZwbmMub3JnIiB0YXJnZXQ9Il9ibGFuayI+cGF1bC5ob2ZmbWFuQHZwbmMub3Jn PC9hPiZndDsgPz86PHU+PC91Pjx1PjwvdT48L3A+PGRpdj48ZGl2PjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+Jmd0OyAmZ3Q7Jmd0Ozxicj4mZ3Q7ICZn dDsmZ3Q7Jmd0OyBPbiBBcHIgMTQsIDIwMTUsIGF0IDExOjIwIEFNLCBKaW0gU2NoYWFkICZsdDs8 YSBocmVmPSJtYWlsdG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmll dGZAYXVndXN0Y2VsbGFycy5jb208L2E+Jmd0Ozxicj4mZ3Q7IHdyb3RlOjxicj4mZ3Q7ICZndDsm Z3Q7Jmd0OyZndDs8YnI+Jmd0OyAmZ3Q7Jmd0OyZndDsmZ3Q7IEkgd291bGQgbGlrZSB0byBnZXQg UHVsbCBSZXF1ZXN0ICMyIHJvbGxlZCBpbnRvIHRoZSBkcmFmdCBjaGFydGVyPGJyPiZndDsgJmd0 OyZndDsmZ3Q7Jmd0OyBhbmQgdGhlbiBJIHRoaW5rIHdlIGFyZSByZWFkeSB0byBzZW5kIGl0IHRv IHRoZSBBRHMgYW5kIElFU0cgZm9yIHJldmlldy48YnI+Jmd0OyAmZ3Q7Jmd0OyZndDsmZ3Q7PGJy PiZndDsgJmd0OyZndDsmZ3Q7Jmd0OyBTaW5jZSBpdCBpcyBteSBwdWxsIHJlcXVlc3QgSSBoYXZl IG5vdCBkb25lIHRoZSBtZXJnZSBwcmVmZXJyaW5nPGJyPiZndDsgJmd0OyZndDsmZ3Q7Jmd0OyB0 aGF0IGl0IGJlIGRvbmUgYnkgb25lIG9mIHRoZSBvdGhlcnMgd2hvIGhhdmUgcGVybWlzc2lvbnMu Jm5ic3A7IElmIEk8YnI+Jmd0OyAmZ3Q7Jmd0OyZndDsmZ3Q7IGdldCBhIG1lc3NhZ2Ugc2F5aW5n IGRvIHRoZSBtZXJnZSByZXF1ZXN0IEkgd291bGQgYmUgaGFwcHkgdG8gcHVsbDxicj4mZ3Q7ICZn dDsmZ3Q7Jmd0OyZndDsgdGhlIHRyaWdnZXIgb24gaXQuPGJyPiZndDsgJmd0OyZndDsmZ3Q7PGJy PiZndDsgJmd0OyZndDsmZ3Q7IFRoZXJlIHNlZW1lZCB0byBiZSBnZW5lcmFsIGFncmVlbWVudCwg c28gSSBhY2NlcHRlZCB0aGUgcHVsbCByZXF1ZXN0Ljxicj4mZ3Q7ICZndDsmZ3Q7Jmd0Ozxicj4m Z3Q7ICZndDsmZ3Q7Jmd0OyBDdXJyZW50IHZlcnNpb24gaXMgYXQ6PGJyPiZndDsgJmd0OyZndDsm Z3Q7IDxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNvbS9jb3NlLXNwZWMvd2ctY2hhcnRlci9ibG9i L21hc3Rlci9kcmFmdC1jaGFydGVyLm1kIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly9naXRodWIu Y29tL2Nvc2Utc3BlYy93Zy1jaGFydGVyL2Jsb2IvbWFzdGVyL2RyYWZ0LWNoYXJ0ZXIubWQ8L2E+ PGJyPiZndDsgJmd0OyZndDsmZ3Q7PGJyPiZndDsgJmd0OyZndDsmZ3Q7IC0tUGF1bCBIb2ZmbWFu PGJyPiZndDsgJmd0OyZndDsmZ3Q7PGJyPiZndDsgJmd0OyZndDsmZ3Q7IF9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPiZndDsgJmd0OyZndDsmZ3Q7IENv c2UgbWFpbGluZyBsaXN0PGJyPiZndDsgJmd0OyZndDsmZ3Q7IDxhIGhyZWY9Im1haWx0bzpDb3Nl QGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+Q29zZUBpZXRmLm9yZzwvYT48YnI+Jmd0OyAmZ3Q7 Jmd0OyZndDsgPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9j b3NlIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9jb3NlPC9hPjxicj4mZ3Q7ICZndDsmZ3Q7PGJyPiZndDsgJmd0OyZndDs8YnI+Jmd0OyAmZ3Q7 Jmd0OyBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4m Z3Q7ICZndDsmZ3Q7IENvc2UgbWFpbGluZyBsaXN0PGJyPiZndDsgJmd0OyZndDsgPGEgaHJlZj0i bWFpbHRvOkNvc2VAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5Db3NlQGlldGYub3JnPC9hPjxi cj4mZ3Q7ICZndDsmZ3Q7IDxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vY29zZSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vY29zZTwvYT48YnI+Jmd0OyAmZ3Q7PGJyPiZndDsgJmd0OyBfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4mZ3Q7ICZndDsgQ29zZSBtYWls aW5nIGxpc3Q8YnI+Jmd0OyAmZ3Q7IDxhIGhyZWY9Im1haWx0bzpDb3NlQGlldGYub3JnIiB0YXJn ZXQ9Il9ibGFuayI+Q29zZUBpZXRmLm9yZzwvYT48YnI+Jmd0OyAmZ3Q7IDxhIGhyZWY9Imh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY29zZSIgdGFyZ2V0PSJfYmxhbmsiPmh0 dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY29zZTwvYT48YnI+Jmd0Ozxicj4m Z3Q7IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPiZn dDsgQ29zZSBtYWlsaW5nIGxpc3Q8YnI+Jmd0OyA8YSBocmVmPSJtYWlsdG86Q29zZUBpZXRmLm9y ZyIgdGFyZ2V0PSJfYmxhbmsiPkNvc2VAaWV0Zi5vcmc8L2E+PGJyPiZndDsgPGEgaHJlZj0iaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlIiB0YXJnZXQ9Il9ibGFuayI+ aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlPC9hPjx1PjwvdT48dT48 L3U+PC9wPjwvZGl2PjwvZGl2PjwvZGl2PjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj48YnIgY2xl YXI9ImFsbCI+PHU+PC91Pjx1PjwvdT48L3A+PGRpdj48cCBjbGFzcz0iTXNvTm9ybWFsIj48dT48 L3U+Jm5ic3A7PHU+PC91PjwvcD48L2Rpdj48cCBjbGFzcz0iTXNvTm9ybWFsIj4tLSA8dT48L3U+ PHU+PC91PjwvcD48ZGl2PjxkaXY+PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHU+PC91PiZuYnNwOzx1 PjwvdT48L3A+PGRpdj48cCBjbGFzcz0iTXNvTm9ybWFsIj5CZXN0IHJlZ2FyZHMsPHU+PC91Pjx1 PjwvdT48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz0iTXNvTm9ybWFsIj5LYXRobGVlbjx1PjwvdT48 dT48L3U+PC9wPjwvZGl2PjwvZGl2PjwvZGl2PjwvZGl2PjwvZGl2PjwvZGl2PjwvZGl2PjwvZGl2 PjwvZGl2PjwvYmxvY2txdW90ZT48L2Rpdj48YnI+PGJyIGNsZWFyPSJhbGwiPjxkaXY+PGJyPjwv ZGl2Pi0tIDxicj48ZGl2IGNsYXNzPSJnbWFpbF9zaWduYXR1cmUiPjxkaXYgZGlyPSJsdHIiPjxi cj48ZGl2PkJlc3QgcmVnYXJkcyw8L2Rpdj48ZGl2PkthdGhsZWVuPC9kaXY+PC9kaXY+PC9kaXY+ DQo8L2Rpdj4NCjwvZGl2PjwvYmxvY2txdW90ZT48YmxvY2txdW90ZSB0eXBlPSJjaXRlIj48ZGl2 PjxzcGFuPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPC9z cGFuPjxicj48c3Bhbj5Db3NlIG1haWxpbmcgbGlzdDwvc3Bhbj48YnI+PHNwYW4+PGEgaHJlZj0i bWFpbHRvOkNvc2VAaWV0Zi5vcmciPkNvc2VAaWV0Zi5vcmc8L2E+PC9zcGFuPjxicj48c3Bhbj48 YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UiPmh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY29zZTwvYT48L3NwYW4+PGJyPjwvZGl2 PjwvYmxvY2txdW90ZT48L2JvZHk+PC9odG1sPg== --Apple-Mail-6E949903-4EFC-4D3A-B5A2-142D05E92C9A-- --Apple-Mail-D896C510-3D30-41B8-AA7B-D39AA72A2974 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIF9jCCBfIw ggPaoAMCAQICED5j3SSNCPxYeGdCFol+BckwDQYJKoZIhvcNAQEFBQAwOjERMA8GA1UECgwIRXJp Y3Nzb24xJTAjBgNVBAMMHEVyaWNzc29uIE5MIEluZGl2aWR1YWwgQ0EgdjIwHhcNMTQxMjIyMDky NjE0WhcNMTcxMjIyMDkyNjEzWjBrMREwDwYDVQQKDAhFcmljc3NvbjEYMBYGA1UEAwwPR8O2cmFu IFNlbGFuZGVyMSowKAYJKoZIhvcNAQkBFhtnb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5jb20xEDAO BgNVBAUTB2VyYWdvc2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSU5mmTfwCXmA8 +o6zD0QBUzHdSI8Nnh1/IJqdUCNMsXGhyh13VB0fb/dlvGxNuFK7EKzKAmV54EVajL+FRucgxen9 lcC7bp4f1qd3au9kgOXYKzHuw9btR1xuqWG+fvzrZGaSAt2bewZenaZnyZWxoX9o7ia2ZviWktr0 frBlXciopyIlMnIgZ4D4eif47wlcX/ZPATYvm+AkdIH6/PqkY/8Cq3FMILYvrRvO5X1przyuLH+d suuETUeGbbHQrU+C2DKJnE6xVm4K9nXBvpcfkdKVQuqqg7O71Sd1QRDyt6BCXjrSZ4prRy/n26DU 6FMcIn2DkeXdWnm8SpxxoE/zAgMBAAGjggHBMIIBvTBIBgNVHR8EQTA/MD2gO6A5hjdodHRwOi8v Y3JsLnRydXN0LnRlbGlhLmNvbS9lcmljc3Nvbm5saW5kaXZpZHVhbGNhdjIuY3JsMIGCBggrBgEF BQcBAQR2MHQwKAYIKwYBBQUHMAGGHGh0dHA6Ly9vY3NwMi50cnVzdC50ZWxpYS5jb20wSAYIKwYB BQUHMAKGPGh0dHA6Ly9jYS50cnVzdC50ZWxpYXNvbmVyYS5jb20vZXJpY3Nzb25ubGluZGl2aWR1 YWxjYXYyLmNlcjAmBgNVHREEHzAdgRtnb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5jb20wVQYDVR0g BE4wTDBKBgwrBgEEAYIPAgMBARIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly9yZXBvc2l0b3J5LnRy dXN0LnRlbGlhc29uZXJhLmNvbS9DUFMwHQYDVR0lBBYwFAYIKwYBBQUHAwQGCCsGAQUFBwMCMB0G A1UdDgQWBBSB4nTbn3t1sB2zhLxonZW3Hhv9/zAfBgNVHSMEGDAWgBSxDcrURrevhgLDL28Gyg52 cX9LNzAOBgNVHQ8BAf8EBAMCBaAwDQYJKoZIhvcNAQEFBQADggIBANSVTbxCbSceXCp/tX+UCloB 5q5UI743Q5vKV+h+TB86caGnHBuBtHatVJTD/k+myt8+B+Iu60M2UrX3gBmwSTW6Y8MZhtXYijOM OPvKVyqHkf9ikVMWDBKG+b6O9UB+EomtcfZ7cElXCu/AjXW4Q7CZWVwPrJORLec6mfER9usYEa0O x+meWW5sRDKVHTFgVgsub3+4ouzgOQpsqGrQydYhovIptNPalWGSSTMYpW+r6rukSQ/sUjl54pCA SZj5zs9mQu9fhRtm4I+9HcBNSe1+yq6ECW0Zvc82ynYTFx3w0Art1hmmnd7euM17JzpORrh3y07D ey0wc3RoP4z4ISNffsC+z+jVMl54H1PYYiDuHiPf+cMorlMXFPs7rTFgZS/mY1B2v+qZP9O9k4i/ g4HPQlsJgnWxC5TWluMsOHzQS35FR+oei/35aDwNYvdPixeWNhUmkR4vtfydjpLW+3eKyxcf0Hf/ SVJuzMYrnssBFe+jYNGJYGvdOFjJFffqKCcRocJ0l25ALTVDtv3kpZap6YZXaBAeYTncGWVyv9te bhtILVdqlO7sLtP3zAGZ46bPTW/54F7TOwZ+kfI0vptFgJN5iAA8GwOvhBatrNw9oA9dM2ioAlBb iD3gQ8Fz7Mxq/5AkpSdt3Gzxd7HNwhi5GIkuyPtq1U7B/o19KWC7MYICljCCApICAQEwTjA6MREw DwYDVQQKDAhFcmljc3NvbjElMCMGA1UEAwwcRXJpY3Nzb24gTkwgSW5kaXZpZHVhbCBDQSB2MgIQ PmPdJI0I/Fh4Z0IWiX4FyTAJBgUrDgMCGgUAoIIBHTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcB MBwGCSqGSIb3DQEJBTEPFw0xNTA0MjIxOTIzMzBaMCMGCSqGSIb3DQEJBDEWBBR+E1w6HRcw94CR A0mSg6rKyTnrtzBdBgkrBgEEAYI3EAQxUDBOMDoxETAPBgNVBAoMCEVyaWNzc29uMSUwIwYDVQQD DBxFcmljc3NvbiBOTCBJbmRpdmlkdWFsIENBIHYyAhA+Y90kjQj8WHhnQhaJfgXJMF8GCyqGSIb3 DQEJEAILMVCgTjA6MREwDwYDVQQKDAhFcmljc3NvbjElMCMGA1UEAwwcRXJpY3Nzb24gTkwgSW5k aXZpZHVhbCBDQSB2MgIQPmPdJI0I/Fh4Z0IWiX4FyTANBgkqhkiG9w0BAQEFAASCAQB3VPQPSX1h kFwrUfi3MuuAXX0vj9vrjhdfbTZhUo/VdnC3PUdSEgspEKR4fPcNQt3RsqqackyjxQDxehzZgG0t OFXIZW9b+gJvEW/dkDlEkRXpHgbzlwSMahCH8ZKoPSgimFmxhUlP7oHSyXfm/WK7uY2GmkCGWGAA EAO8EuYGhh/fCn5AKND+KClJZ7MkfEimIKFsmaaBbVoq31makyGgstrspsH0a/L+bOj327hOlabJ frM2xTbUO8TqKvYLqcvpDUwC0mw3meXKwFyqyka3vK1Yl3phYcTP8KmgD+kB22bcP2XzWfutkSAI Esw2ifpRTwSKARkOGWPmE4UrjCk7AAAAAAAA --Apple-Mail-D896C510-3D30-41B8-AA7B-D39AA72A2974-- From nobody Wed Apr 22 12:45:05 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF29A1B399B for ; Wed, 22 Apr 2015 12:44:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.599 X-Spam-Level: X-Spam-Status: No, score=-1.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LR6u_JW6_zPw for ; Wed, 22 Apr 2015 12:44:56 -0700 (PDT) Received: from smtp3.pacifier.net (smtp3.pacifier.net [64.255.237.177]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D49931B398D for ; Wed, 22 Apr 2015 12:44:52 -0700 (PDT) Received: from Philemon (unknown [4.30.143.226]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp3.pacifier.net (Postfix) with ESMTPSA id 6AD0438F2C; Wed, 22 Apr 2015 12:44:51 -0700 (PDT) From: "Jim Schaad" To: =?UTF-8?Q?'G=C3=B6ran_Selander'?= References: <043201d076df$aa87b770$ff972650$@augustcellars.com> <50A4152F-E8F1-4890-AD03-065899ACC3BB@vpnc.org> <04c701d07721$69175fb0$3b461f10$@augustcellars.com> <566CD668-1A69-4D37-A04E-98025906759D@gmail.com> <013d01d07c83$01465190$03d2f4b0$@augustcellars.com> <022601d07d1b$34298670$9c7c9350$@augustcellars.com> <657EE3F5-CB06-4227-8E91-BFB3AB50233D@ericsson.com> In-Reply-To: <657EE3F5-CB06-4227-8E91-BFB3AB50233D@ericsson.com> Date: Wed, 22 Apr 2015 12:43:35 -0700 Message-ID: <025a01d07d34$9f540740$ddfc15c0$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_025B_01D07CF9.F2FE7E10" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQHQPHasz7knjv+nJda5/t/ZvlDMAAEZOK9bArBs0b8CrmfyWwJ7agYBAV6wAW8Cfn9pMgD4DIpCAZQA+aECX4dIw5zMDekw Content-Language: en-us Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Charter State X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 19:45:00 -0000 This is a multipart message in MIME format. ------=_NextPart_000_025B_01D07CF9.F2FE7E10 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable In order to get the CFRG pointed in the right direction, it is necessary = to give it some input. To that end I would suggest we start with doing = a survey of three questions: =20 1. What type of algorithms are needed? (key agreement, key = transport, signature, hash, MAC, KDF, etc) 2. What are the constraints we really care about? 3. What algorithms are we currently using today for those = purposes? =20 =20 Jim =20 =20 From: G=C3=B6ran Selander [mailto:goran.selander@ericsson.com]=20 Sent: Wednesday, April 22, 2015 12:24 PM To: Kathleen Moriarty Cc: Jim Schaad; cose@ietf.org Subject: Re: [Cose] Charter State =20 Looks fine.=20 =20 About the constrained-appropriate algorithms: is the intention to = consult CFRG? If so, maybe would be good to get that ball rolling too = soon.=20 =20 Thanks, G=C3=B6ran On 22 apr 2015, at 18:54, Kathleen Moriarty = wrote: Great, are others ok with the changes? If so, I'll get it rolling. =20 On Wed, Apr 22, 2015 at 12:41 PM, Jim Schaad = wrote: Be my guest to make the changes. =20 Jim =20 =20 From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kathleen Moriarty Sent: Wednesday, April 22, 2015 9:27 AM To: Jim Schaad Cc: cose@ietf.org Subject: Re: [Cose] Charter State =20 Hi, =20 I am assuming the current charter text is at the link: https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md =20 I have some proposed changes that I think help with readability. Let me = know if these are ok and I'll put in the charter for IESG review. All = of the charter text is included, broken out by sections to show edits. = In some cases, there is a Note: following a change with assumptions I = was making in case they were not correct assumptions. =20 Old:Concise Binary Object Representation (CBOR, RFC 7049) is a concise = binary format for the serialization of data structured to an extended = version of the JSON data model. One motivation for CBOR was to make this = data model more amenable to constrained nodes and constrained node = networks (RFC 7228). New: Concise Binary Object Representation (CBOR, RFC 7049) is a concise = binary format for the serialization of data structured to an extended = version of the JSON data model. One motivation for COSE was to reuse = functionality from the JOSE working group using the CBOR data = representation as it is more amenable to constrained nodes and = constrained node networks (RFC 7228). =20 Old: The JOSE working group recently completed producing representations for = cryptographic keys, message authentication (MACs), encryption, and = digital signatures, using JSON representation. This working group will = reuse the work done by JOSE, adapting it to the capabilities of CBOR. = This will rely on the JOSE registries, which, where this provides = additional efficiency, will be expanded with additional information. New: The JOSE working group recently completed producing representations for = cryptographic keys, message authentication (MACs), encryption, and = digital signatures, using JSON representation. COSE will rely on the = JOSE registries, and will be expand them with additional information = when necessary. =20 Note: you may have other reasons besides efficiency. =20 Old: The resulting formats will not be cryptographically convertible from or = to JOSE formats. This lack of a need for bit-for-bit compabitility which = will enable some simplification in the adaptation process. New:=20 The resulting formats will not be cryptographically convertible from or = to JOSE formats. This lack of a need for bit-for-bit compatibility will = enable some simplification in the adaptation process. =20 Old: Criteria that should be considered on making decisions in changing from = a JSON to a CBOR encoding are: =C2=B7 Keeping the current JOSE paradigms and formatting where = feasible. =C2=B7 Minimizing message size, code size and computational = complexity should be considered (for the constrained environments where = we expect to use this). =C2=B7 Improving security =C2=B7 Providing new functionality that uses of JOSE did not = require, but are required for the new use cases. New:=20 Criteria that should be considered in the decision making process, = changing from JSON to CBOR encoding include: =C2=B7 Maintain the current JOSE paradigms and formatting where = feasible. =C2=B7 Minimize message size, code size, and computational = complexity to suit constrained environments, where this is expected to = be used. =C2=B7 Improve security =C2=B7 Provide new functionality for additional use cases that were = not required for JOSE.=20 Old: Issues dealing with key management and binding of keys to identities are = out of scope for the working group. New: Key management and binding of keys to identities are out of scope for = the working group. =20 Note: I am assuming you really want to out-of scope all key management = and not just issues? =20 And I don't see any need to tweak the rest of the text: The Working group will coordinate its progress with the ACE, DICE and = CORE working groups to ensure that we are fulfilling the needs of these = constituencies. Other groups may be added to this list as the set of use = cases is expanded. The WG will have two deliverables: * a standards-track specification covering the same cryptographic = formats from JOSE, with optimizations for constrained device processing, = expressed in CBOR; * registration for algorithms (such as AES-CCM-8) that are appropriate = for constrained environments. The Working Group will use a wiki to track desired use cases for its = work, but does not intend to publish this as an RFC. =20 I'd love it if you can keep to the milestones projected :-) Thanks. Kathleen =20 On Tue, Apr 21, 2015 at 6:32 PM, Jim Schaad = wrote: The date change proposed by me has been merged into the draft. I believe that we can now consider the charter discussion to be complete = unless anyone else has a big issue they want to bring up. Kathleen: Can we get this to move forward into the IESG? Jim > -----Original Message----- > From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kathleen = Moriarty > Sent: Tuesday, April 14, 2015 7:17 PM > To: Jim Schaad > Cc: Kepeng Li; Paul Hoffman; cose@ietf.org > Subject: Re: [Cose] Charter State > > > > Sent from my iPhone > > > On Apr 14, 2015, at 10:10 PM, "Jim Schaad" > wrote: > > > > > > > >> -----Original Message----- > >> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kepeng Li > >> Sent: Tuesday, April 14, 2015 6:59 PM > >> To: Paul Hoffman; Jim Schaad > >> Cc: cose@ietf.org > >> Subject: Re: [Cose] Charter State > >> > >> Thanks Paul. > >> > >> There are two other changes we might want to incorporate: > >> > >> 1) Proposal from Goran: > >> http://www.ietf.org/mail-archive/web/cose/current/msg00027.html > >> > >> OLD: > >> "a standards-track specification covering the same cryptographic > >> formats > > from > >> JOSE, expressed in CBOR" > >> > >> NEW: > >> "a standards-track specification covering the same cryptographic > >> formats > > from > >> JOSE and optimizations for constrained device processing, expressed > >> in > > CBOR > > > > I am agnostic about including this change. We now are much more > > constrained device focused later so it might not be needed. > > > >> > >> (2) Proposal from Kathleen: > >> > >> http://www.ietf.org/mail-archive/web/cose/current/msg00077.html > >> > >> OLD: > >> The Working Group will coordinate its progress with the ACE, DICE = and > >> CoRE working groups to ensure that we are fulfilling the needs of > >> these constituencies. > >> > >> NEW: > >> The Working Group will coordinate its progress with the ACE, DICE, > >> CoRE > > and > >> DIME working groups to ensure that we are fulfilling the needs of > >> these constituencies. > > > > I am not sure that DIME is a reasonable group to be coordinating = with > > since it is not clear that this would be the solution space they are > > going to operate in. It is true that this need something along = these > > lines, but what they need first is to get someone who has good > > knowledge of what can be done in the group first. Given that this = is > > major (telecom) vendors, using CMS might be a better fit for this > > > > The other question if we expand this list here rather than in the = wiki > > is the set of groups that Rene Struik though that might be included > > here such as "6TiSCH, 6lo, RoLL, etc" which seem to be much closer = to > > the types of groups that might use this specification going forward. > > > > At this point, I think I would go with the list we have and start > > adding more groups to the wiki. > > I'm fine with that approach. My point in bringing up DIME was more = that they > need help and this *could* help them, but work needs to be done to = figure > out what they need at this point. I brought it up just in case it's = relevant to > COSE. > > Thanks, > Kathleen > > > > Jim > > > >> > >> > >> Thanks, > >> > >> Kind Regards > >> Kepeng > >> > >> ? 15/4/15 2:32 am, "Paul Hoffman" ??: > >> > >>> On Apr 14, 2015, at 11:20 AM, Jim Schaad > wrote: > >>>> > >>>> I would like to get Pull Request #2 rolled into the draft charter > >>>> and then I think we are ready to send it to the ADs and IESG for = review. > >>>> > >>>> Since it is my pull request I have not done the merge preferring > >>>> that it be done by one of the others who have permissions. If I > >>>> get a message saying do the merge request I would be happy to = pull > >>>> the trigger on it. > >>> > >>> There seemed to be general agreement, so I accepted the pull = request. > >>> > >>> Current version is at: > >>> = https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md > >>> > >>> --Paul Hoffman > >>> > >>> _______________________________________________ > >>> Cose mailing list > >>> Cose@ietf.org > >>> https://www.ietf.org/mailman/listinfo/cose > >> > >> > >> _______________________________________________ > >> Cose mailing list > >> Cose@ietf.org > >> https://www.ietf.org/mailman/listinfo/cose > > > > _______________________________________________ > > Cose mailing list > > Cose@ietf.org > > https://www.ietf.org/mailman/listinfo/cose > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose =20 --=20 =20 Best regards, Kathleen =20 --=20 =20 Best regards, Kathleen _______________________________________________ Cose mailing list Cose@ietf.org https://www.ietf.org/mailman/listinfo/cose ------=_NextPart_000_025B_01D07CF9.F2FE7E10 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

    In order to get the CFRG pointed in the right direction, it is = necessary to give it some input. =C2=A0=C2=A0To that end I would suggest = we start with doing a survey of three questions:

     

    1.       = =C2=A0What type of algorithms are needed?=C2=A0 (key agreement, key = transport, signature, hash, MAC, KDF, etc)

    2.       = What are the constraints we really care = about?

    3.       = What algorithms are we currently using today for those = purposes?

     

     

    Jim

     

     

    From:= = G=C3=B6ran Selander [mailto:goran.selander@ericsson.com] =
    Sent: Wednesday, April 22, 2015 12:24 PM
    To: = Kathleen Moriarty
    Cc: Jim Schaad; = cose@ietf.org
    Subject: Re: [Cose] Charter = State

     

    Looks = fine. 

     

    About the constrained-appropriate algorithms: is the = intention to consult CFRG? If so, maybe would be good to get that ball = rolling too soon. 

     

    Thanks,

    G=C3=B6ran


    On 22 apr 2015, at = 18:54, Kathleen Moriarty <kathleen.moriarty.ietf@g= mail.com> wrote:

    Great, are others ok with the changes?  If so, = I'll get it rolling.

     

    On Wed, = Apr 22, 2015 at 12:41 PM, Jim Schaad <ietf@augustcellars.com> = wrote:

    Be my guest to make the changes.

     

    Jim

     

     

    From:= = Cose [mailto:cose-bounces@ietf.org] On Behalf Of = Kathleen Moriarty
    Sent: Wednesday, April 22, 2015 9:27 = AM
    To: Jim Schaad


    Cc: cose@ietf.org
    Subject: Re: [Cose] = Charter State

     <= /o:p>

    Hi,

     <= /o:p>

    I am = assuming the current charter text is at the = link:

     <= /o:p>

    I have some = proposed changes that I think help with readability.  Let me know = if these are ok and I'll put in the charter for IESG review.  All = of the charter text is included, broken out by sections to show = edits.  In some cases, there is a Note: following a change with = assumptions I was making in case they were not correct = assumptions.

     <= /o:p>

    Old:Concise = Binary Object Representation (CBOR, RFC 7049) is a concise binary format = for the serialization of data structured to an extended version of the = JSON data model. One motivation for CBOR was to make this data model = more amenable to constrained nodes and constrained node networks (RFC = 7228).

    New:

    Concise = Binary Object Representation (CBOR, RFC 7049) is a concise binary format = for the serialization of data structured to an extended version of the = JSON data model. One motivation for COSE was to reuse functionality from = the JOSE working group using the CBOR data representation as it is more = amenable to constrained nodes and constrained node networks (RFC = 7228).

     <= /o:p>

    Old:

    The JOSE = working group recently completed producing representations for = cryptographic keys, message authentication (MACs), encryption, and = digital signatures, using JSON representation. This working group will = reuse the work done by JOSE, adapting it to the capabilities of CBOR. = This will rely on the JOSE registries, which, where this provides = additional efficiency, will be expanded with additional = information.

    New:

    The JOSE = working group recently completed producing representations for = cryptographic keys, message authentication (MACs), encryption, and = digital signatures, using JSON representation. COSE will rely on the = JOSE registries, and will be expand them with additional information = when necessary.

     <= /o:p>

    Note: you = may have other reasons besides efficiency.

     <= /o:p>

    Old:

    The = resulting formats will not be cryptographically convertible from or to = JOSE formats. This lack of a need for bit-for-bit compabitility which = will enable some simplification in the adaptation = process.

    New: =

    The = resulting formats will not be cryptographically convertible from or to = JOSE formats. This lack of a need for = bit-for-bit compatibility will enable some simplification in = the adaptation process.

     <= /o:p>

    Old:

    Criteria = that should be considered on making decisions in changing from a JSON to = a CBOR encoding are:

    =C2=B7=       = Keeping the = current JOSE paradigms and formatting where = feasible.

    =C2=B7=       = Minimizing = message size, code size and computational complexity should be = considered (for the constrained environments where we expect to use = this).

    =C2=B7=       = Improving = security

    =C2=B7=       = Providing = new functionality that uses of JOSE did not require, but are required = for the new use cases.

    New: =

    Criteria = that should be considered in the decision making process, changing from = JSON to CBOR encoding include:

    =C2=B7=       = Maintain = the current JOSE paradigms and formatting where = feasible.

    =C2=B7=       = Minimize = message size, code size, and computational complexity to suit = constrained environments, where this is expected to  be = used.

    =C2=B7=       = Improve = security

    =C2=B7=       = Provide new = functionality for additional use cases that were not required for = JOSE. 

    Old:

    Issues = dealing with key management and binding of keys to identities are out of = scope for the working group.

    New:

    Key = management and binding of keys to identities are out of scope for the = working group.

     <= /o:p>

    Note: I am = assuming you really want to out-of scope all key management and not just = issues?

     <= /o:p>

    And I don't = see any need to tweak the rest of the text:

    The Working = group will coordinate its progress with the ACE, DICE and CORE working = groups to ensure that we are fulfilling the needs of these = constituencies. Other groups may be added to this list as the set of use = cases is expanded.

    The WG will = have two deliverables:

    • a standards-track = specification covering the same cryptographic formats from JOSE, with = optimizations for constrained device processing, expressed in = CBOR;
    • registration for = algorithms (such as AES-CCM-8) that are appropriate for constrained = environments.

    The Working = Group will use a wiki to track desired use cases for its work, but does = not intend to publish this as an RFC.

     

    I'd love it = if you can keep to the milestones projected = :-)

    Thanks.
    Kathleen

     <= /o:p>

    On Tue, Apr = 21, 2015 at 6:32 PM, Jim Schaad <ietf@augustcellars.com> wrote:

    The date = change proposed by me has been merged into the draft.

    I believe = that we can now consider the charter discussion to be complete unless = anyone else has a big issue they want to bring = up.

    Kathleen:  Can we get this to move forward into the = IESG?

    Jim



    >= -----Original Message-----
    > From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kathleen = Moriarty
    > Sent: Tuesday, April 14, 2015 7:17 PM
    > To: Jim = Schaad
    > Cc: Kepeng Li; Paul Hoffman; cose@ietf.org
    > Subject: Re: [Cose] Charter = State
    >
    >
    >
    > Sent from my = iPhone
    >
    > > On Apr 14, 2015, at 10:10 PM, "Jim = Schaad" <ietf@augustcellars.com>
    > wrote:
    > = >
    > >
    > >
    > >> -----Original = Message-----
    > >> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kepeng = Li
    > >> Sent: Tuesday, April 14, 2015 6:59 PM
    > = >> To: Paul Hoffman; Jim Schaad
    > >> Cc: cose@ietf.org
    > >> Subject: Re: [Cose] = Charter State
    > >>
    > >> Thanks Paul.
    > = >>
    > >> There are two other changes we might want to = incorporate:
    > >>
    > >> 1) Proposal from = Goran:
    > >> http://www.ietf.org/mail-archive/web/cose/current/msg00= 027.html
    > >>
    > >> OLD:
    > >> = "a standards-track specification covering the same = cryptographic
    > >> formats
    > > from
    > = >> JOSE, expressed in CBOR"
    > >>
    > >> = NEW:
    > >> "a standards-track specification covering the = same cryptographic
    > >> formats
    > > from
    > = >> JOSE and optimizations for constrained device processing, = expressed
    > >> in
    > > CBOR
    > >
    > = > I am agnostic about including this change.  We now are much = more
    > > constrained device focused later so it might not be = needed.
    > >
    > >>
    > >> (2) Proposal from = Kathleen:
    > >>
    > >> http://www.ietf.org/mail-archive/web/cose/current/msg00= 077.html
    > >>
    > >> OLD:
    > >> The = Working Group will coordinate its progress with the ACE, DICE = and
    > >> CoRE working groups to ensure that we are = fulfilling the needs of
    > >> these constituencies.
    > = >>
    > >> NEW:
    > >> The Working Group will = coordinate its progress with the ACE, DICE,
    > >> = CoRE
    > > and
    > >> DIME working groups to ensure = that we are fulfilling the needs of
    > >> these = constituencies.
    > >
    > > I am not sure that DIME is a = reasonable group to be coordinating with
    > > since it is not = clear that this would be the solution space they are
    > > going = to operate in.  It is true that this need something along = these
    > > lines, but what they need first is to get someone who = has good
    > > knowledge of what can be done in the group = first.  Given that this is
    > > major (telecom) vendors, = using CMS might be a better fit for this
    > >
    > > The = other question if we expand this list here rather than in the = wiki
    > > is the set of groups that Rene Struik though that = might be included
    > > here such as "6TiSCH, 6lo, RoLL, = etc" which seem to be much closer to
    > > the types of = groups that might use this specification going forward.
    > = >
    > > At this point, I think I would go with the list we = have and start
    > > adding more groups to the = wiki.
    >
    > I'm fine with that approach.  My point in = bringing up DIME was more that they
    > need help and this *could* = help them, but work needs to be done to figure
    > out what they = need at this point.  I brought it up just in case it's relevant = to
    > COSE.
    >
    > Thanks,
    > Kathleen
    > = >
    > > Jim
    > >
    > >>
    > = >>
    > >> Thanks,
    > >>
    > >> Kind = Regards
    > >> Kepeng
    > = >>

    > = >> ? 15/4/15 2:32 am, "Paul Hoffman" <paul.hoffman@vpnc.org> = ??:

    > = >>
    > >>> On Apr 14, 2015, at 11:20 AM, Jim Schaad = <ietf@augustcellars.com>
    > wrote:
    > = >>>>
    > >>>> I would like to get Pull = Request #2 rolled into the draft charter
    > >>>> and = then I think we are ready to send it to the ADs and IESG for = review.
    > >>>>
    > >>>> Since it is my = pull request I have not done the merge preferring
    > = >>>> that it be done by one of the others who have = permissions.  If I
    > >>>> get a message saying do = the merge request I would be happy to pull
    > >>>> the = trigger on it.
    > >>>
    > >>> There seemed to = be general agreement, so I accepted the pull request.
    > = >>>
    > >>> Current version is at:
    > = >>> https://github.com/cose-spec/wg-charter/blob/master/dra= ft-charter.md
    > >>>
    > >>> --Paul = Hoffman
    > >>>
    > >>> = _______________________________________________
    > >>> = Cose mailing list
    > >>> Cose@ietf.org
    > >>> https://www.ietf.org/mailman/listinfo/cose
    > = >>
    > >>
    > >> = _______________________________________________
    > >> Cose = mailing list
    > >> Cose@ietf.org
    > >> https://www.ietf.org/mailman/listinfo/cose
    > = >
    > > = _______________________________________________
    > > Cose = mailing list
    > > Cose@ietf.org
    > > https://www.ietf.org/mailman/listinfo/cose
    ><= br>> _______________________________________________
    > Cose = mailing list
    > Cose@ietf.org
    > https://www.ietf.org/mailman/listinfo/cose



     <= /o:p>

    -- =

     <= /o:p>

    Best = regards,

    Kathleen



     

    -- =

     

    Best = regards,

    Kathleen

    _______________________________________________
    Cose= mailing list
    Cose@ietf.org
    https://www.ietf.org/= mailman/listinfo/cose

    ------=_NextPart_000_025B_01D07CF9.F2FE7E10-- From nobody Wed Apr 22 15:08:32 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BCFD91B2A69 for ; Wed, 22 Apr 2015 14:44:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yHrsXaOjm__M for ; Wed, 22 Apr 2015 14:44:24 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A24481B2A75 for ; Wed, 22 Apr 2015 14:44:23 -0700 (PDT) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit To: X-Test-IDTracker: no X-IETF-IDTracker: 6.0.1.p1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150422214423.6053.44122.idtracker@ietfa.amsl.com> Date: Wed, 22 Apr 2015 14:44:23 -0700 From: IETF Secretariat Archived-At: X-Mailman-Approved-At: Wed, 22 Apr 2015 15:08:31 -0700 Subject: [Cose] State changed: charter-ietf-cose-00-00 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 21:44:25 -0000 State changed to Internal review. URL: http://datatracker.ietf.org/doc/charter-ietf-cose/ From nobody Wed Apr 22 16:55:20 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8A60A1B2C3F; Wed, 22 Apr 2015 15:32:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 236xKWIvQdpG; Wed, 22 Apr 2015 15:32:15 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A37551B3AA1; Wed, 22 Apr 2015 15:32:00 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit To: , , X-Test-IDTracker: no X-IETF-IDTracker: 6.0.1.p1 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150422223200.22745.25179.idtracker@ietfa.amsl.com> Date: Wed, 22 Apr 2015 15:32:00 -0700 From: IETF Secretariat Archived-At: X-Mailman-Approved-At: Wed, 22 Apr 2015 16:55:19 -0700 Subject: [Cose] Telechat update notice: X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Apr 2015 22:32:17 -0000 Placed on agenda for telechat - 2015-05-14 ID Tracker URL: http://datatracker.ietf.org/doc/charter-ietf-cose/ From nobody Wed Apr 22 23:48:09 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F09A1AD0D1 for ; Wed, 22 Apr 2015 23:48:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.9 X-Spam-Level: X-Spam-Status: No, score=-3.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Wj_SvpIIW6f7 for ; Wed, 22 Apr 2015 23:47:59 -0700 (PDT) Received: from sessmg22.ericsson.net (sessmg22.ericsson.net [193.180.251.58]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 946DE1B2A0F for ; Wed, 22 Apr 2015 23:47:53 -0700 (PDT) X-AuditID: c1b4fb3a-f79146d0000070a3-a4-553895977590 Received: from ESESSHC012.ericsson.se (Unknown_Domain [153.88.253.124]) by sessmg22.ericsson.net (Symantec Mail Security) with SMTP id 14.36.28835.79598355; Thu, 23 Apr 2015 08:47:51 +0200 (CEST) Received: from ESESSMB303.ericsson.se ([169.254.3.19]) by ESESSHC012.ericsson.se ([153.88.183.54]) with mapi id 14.03.0210.002; Thu, 23 Apr 2015 08:47:51 +0200 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Jim Schaad Thread-Topic: [Cose] Charter State Thread-Index: AdB233J6eMIFWU+bSfiQcTRrv8iHPf//4jyAgAB88QCAAAM3AIAAAY+AgArBooCAASxkgIAABAIAgAADogCAACmYAIAABZyAgADbHYA= Date: Thu, 23 Apr 2015 06:47:50 +0000 Message-ID: References: <043201d076df$aa87b770$ff972650$@augustcellars.com> <50A4152F-E8F1-4890-AD03-065899ACC3BB@vpnc.org> <04c701d07721$69175fb0$3b461f10$@augustcellars.com> <566CD668-1A69-4D37-A04E-98025906759D@gmail.com> <013d01d07c83$01465190$03d2f4b0$@augustcellars.com> <022601d07d1b$34298670$9c7c9350$@augustcellars.com> <657EE3F5-CB06-4227-8E91-BFB3AB50233D@ericsson.com> <025a01d07d34$9f540740$ddfc15c0$@augustcellars.com> In-Reply-To: <025a01d07d34$9f540740$ddfc15c0$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.7.141117 x-originating-ip: [153.88.183.148] Content-Type: multipart/alternative; boundary="_000_D15E4DA62DA5Agoranselanderericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprHIsWRmVeSWpSXmKPExsUyM+Jvje70qRahBrPvGVpM2zqV1WL19O9s DkweG+dMZ/NYsuQnUwBTFJdNSmpOZllqkb5dAlfG5+d/GAu6V7BUTH45l7WB8cFMli5GTg4J AROJHY93sEPYYhIX7q1n62Lk4hASOMooce7UaSYIZzGjxK5Hj5lBqtgEXCQeNDxiArFFBNQl tq6+CWYzCyhLNG64BDZVWEBR4tmLVywQNUoSm56cYYOwyySWn1kONodFQFWipXMTI4jNK2Ah cWrWCbAaIYG3LBLbZvp2MXJwcAo4SDT1aoGEGYGO+35qDdQqcYlbT+YzQRwtILFkz3lmCFtU 4uXjf6wgtqiAnsTK601sEHElicYlT1ghemMlph58wAKxVlDi5MwnLBMYxWYhGTsLSdksJGWz gC5iFtCUWL9LH6JEUWJK90N2CFtDonXOXCjbWmLykduMyGoWMHKsYhQtTi0uzk03MtJLLcpM Li7Oz9PLSy3ZxAiM0INbflvtYDz43PEQowAHoxIP7wML81Ah1sSy4srcQ4zSHCxK4rx2xodC hATSE0tSs1NTC1KL4otKc1KLDzEycXBKNTBqTN6vPjNZQm3x7l1eEyZHLpl07EGEyN5Fk9fw Pbh+R/3/5Iqn0hIh3zwiFS3ZvJq3ffjzs7Fa+JprRaGdzpI7s+dMObJ8Cmva/k0nIqdKrvxl W/vghLrAM54X6o318Wm5lsYRTo1neKfr8DcalUgxmGhenZqvp2wS/8giz8RzppX3k/qiG3xK LMUZiYZazEXFiQDoAUkksQIAAA== Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Charter State X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Apr 2015 06:48:08 -0000 --_000_D15E4DA62DA5Agoranselanderericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQoNCkluIG9yZGVyIHRvIGdldCB0aGUgQ0ZSRyBwb2ludGVkIGluIHRoZSByaWdodCBkaXJlY3Rp b24sIGl0IGlzIG5lY2Vzc2FyeSB0byBnaXZlIGl0IHNvbWUgaW5wdXQuICAgVG8gdGhhdCBlbmQg SSB3b3VsZCBzdWdnZXN0IHdlIHN0YXJ0IHdpdGggZG9pbmcgYSBzdXJ2ZXkgb2YgdGhyZWUgcXVl c3Rpb25zOg0KDQoNCjEuICAgICAgICBXaGF0IHR5cGUgb2YgYWxnb3JpdGhtcyBhcmUgbmVlZGVk PyAgKGtleSBhZ3JlZW1lbnQsIGtleSB0cmFuc3BvcnQsIHNpZ25hdHVyZSwgaGFzaCwgTUFDLCBL REYsIGV0YykNCg0KRm9yIHRoZSB1c2UgY2FzZXMgSSBoYXZlIGluIG1pbmQ6IGtleSB0cmFuc3Bv cnQsIEtERiwgZW5jcnlwdGlvbi9BRUFELCBoYXNoIGFuZCBzaWduYXR1cmUuIEJ1dCB0aGUgbWFp biBjb25jZXJuIGlzIGFyb3VuZCBzaWduYXR1cmVzLg0KDQoxLiBFQ0RTQSBzaXplIG9mIHNpZ25h dHVyZSBhdCAxMTItMTI4IGJpdHMgc2VjdXJpdHkgaXMgb2YgdGhlIG9yZGVyIG9mIDYwIGJ5dGVz IHdoaWNoIGlzIGEgbG90IGNvbXBhcmVkIHRvIDggYnl0ZXMgdHJ1bmNhdGVkIE1BQy4gSXQgd291 bGQgYmUgZ29vZCB0byBoYXZlIGEgcmVjb21tZW5kYXRpb24gb2YgYSBzaWduYXR1cmUgYWxnb3Jp dGhtIHdpdGggbWVzc2FnZSByZWNvdmVyeSwgc3VjaCBhcyBFQ1BWUyAod2hpY2ggaGFzIHNvbWUg SVBSLCBzb21lIG9mIHdoaWNoIGlzIGV4cGlyaW5nIGluIGEgZmV3IHllYXJzKSBvciBvdGhlci4N Cg0KMi4gQSBjb21iaW5lZCBzeW1tZXRyaWMga2V5IGVuY3J5cHRpb24gKyBzaWduYXR1cmUgaXMg bmVlZGVkIGZvciBwb2ludC1tdWx0aXBvaW50IHNldHRpbmdzLg0KDQoNCg0KMi4gICAgICAgV2hh dCBhcmUgdGhlIGNvbnN0cmFpbnRzIHdlIHJlYWxseSBjYXJlIGFib3V0Pw0KDQpUaGUgY2hhcnRl ciBzYXlzICJNaW5pbWl6aW5nIG1lc3NhZ2Ugc2l6ZSwgY29kZSBzaXplIGFuZCBjb21wdXRhdGlv bmFsIGNvbXBsZXhpdHnigJ0uICBJbiBvcmRlciBvZiBpbXBvcnRhbmNlIGZvciBzaWduYXR1cmVz IEnigJlkIHNheSBtZXNzYWdlIHNpemUsIGNvbXB1dGF0aW9uYWwgY29tcGxleGl0eSwgY29kZSBz aXplLg0KDQoNCg0KMy4gICAgICAgV2hhdCBhbGdvcml0aG1zIGFyZSB3ZSBjdXJyZW50bHkgdXNp bmcgdG9kYXkgZm9yIHRob3NlIHB1cnBvc2VzPw0KDQoNClRoZSBkZWZhdWx0IGFsZ29yaXRobXMg YXJlIHRob3NlIHNwZWNpZmllZCBieSBDb0FQIChzZWNwMjU2cjEgZm9yIEVDRFNBKQ0KDQoNCg0K SmltDQoNCg0KRnJvbTogR8O2cmFuIFNlbGFuZGVyIFttYWlsdG86Z29yYW4uc2VsYW5kZXJAZXJp Y3Nzb24uY29tXQ0KU2VudDogV2VkbmVzZGF5LCBBcHJpbCAyMiwgMjAxNSAxMjoyNCBQTQ0KVG86 IEthdGhsZWVuIE1vcmlhcnR5DQpDYzogSmltIFNjaGFhZDsgY29zZUBpZXRmLm9yZzxtYWlsdG86 Y29zZUBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbQ29zZV0gQ2hhcnRlciBTdGF0ZQ0KDQpMb29r cyBmaW5lLg0KDQpBYm91dCB0aGUgY29uc3RyYWluZWQtYXBwcm9wcmlhdGUgYWxnb3JpdGhtczog aXMgdGhlIGludGVudGlvbiB0byBjb25zdWx0IENGUkc/IElmIHNvLCBtYXliZSB3b3VsZCBiZSBn b29kIHRvIGdldCB0aGF0IGJhbGwgcm9sbGluZyB0b28gc29vbi4NCg0KVGhhbmtzLA0KR8O2cmFu DQoNCk9uIDIyIGFwciAyMDE1LCBhdCAxODo1NCwgS2F0aGxlZW4gTW9yaWFydHkgPGthdGhsZWVu Lm1vcmlhcnR5LmlldGZAZ21haWwuY29tPG1haWx0bzprYXRobGVlbi5tb3JpYXJ0eS5pZXRmQGdt YWlsLmNvbT4+IHdyb3RlOg0KR3JlYXQsIGFyZSBvdGhlcnMgb2sgd2l0aCB0aGUgY2hhbmdlcz8g IElmIHNvLCBJJ2xsIGdldCBpdCByb2xsaW5nLg0KDQpPbiBXZWQsIEFwciAyMiwgMjAxNSBhdCAx Mjo0MSBQTSwgSmltIFNjaGFhZCA8aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbTxtYWlsdG86aWV0ZkBh dWd1c3RjZWxsYXJzLmNvbT4+IHdyb3RlOg0KQmUgbXkgZ3Vlc3QgdG8gbWFrZSB0aGUgY2hhbmdl cy4NCg0KSmltDQoNCg0KRnJvbTogQ29zZSBbbWFpbHRvOmNvc2UtYm91bmNlc0BpZXRmLm9yZzxt YWlsdG86Y29zZS1ib3VuY2VzQGlldGYub3JnPl0gT24gQmVoYWxmIE9mIEthdGhsZWVuIE1vcmlh cnR5DQpTZW50OiBXZWRuZXNkYXksIEFwcmlsIDIyLCAyMDE1IDk6MjcgQU0NClRvOiBKaW0gU2No YWFkDQoNCkNjOiBjb3NlQGlldGYub3JnPG1haWx0bzpjb3NlQGlldGYub3JnPg0KU3ViamVjdDog UmU6IFtDb3NlXSBDaGFydGVyIFN0YXRlDQoNCkhpLA0KDQpJIGFtIGFzc3VtaW5nIHRoZSBjdXJy ZW50IGNoYXJ0ZXIgdGV4dCBpcyBhdCB0aGUgbGluazoNCmh0dHBzOi8vZ2l0aHViLmNvbS9jb3Nl LXNwZWMvd2ctY2hhcnRlci9ibG9iL21hc3Rlci9kcmFmdC1jaGFydGVyLm1kDQoNCkkgaGF2ZSBz b21lIHByb3Bvc2VkIGNoYW5nZXMgdGhhdCBJIHRoaW5rIGhlbHAgd2l0aCByZWFkYWJpbGl0eS4g IExldCBtZSBrbm93IGlmIHRoZXNlIGFyZSBvayBhbmQgSSdsbCBwdXQgaW4gdGhlIGNoYXJ0ZXIg Zm9yIElFU0cgcmV2aWV3LiAgQWxsIG9mIHRoZSBjaGFydGVyIHRleHQgaXMgaW5jbHVkZWQsIGJy b2tlbiBvdXQgYnkgc2VjdGlvbnMgdG8gc2hvdyBlZGl0cy4gIEluIHNvbWUgY2FzZXMsIHRoZXJl IGlzIGEgTm90ZTogZm9sbG93aW5nIGEgY2hhbmdlIHdpdGggYXNzdW1wdGlvbnMgSSB3YXMgbWFr aW5nIGluIGNhc2UgdGhleSB3ZXJlIG5vdCBjb3JyZWN0IGFzc3VtcHRpb25zLg0KDQpPbGQ6Q29u Y2lzZSBCaW5hcnkgT2JqZWN0IFJlcHJlc2VudGF0aW9uIChDQk9SLCBSRkMgNzA0OSkgaXMgYSBj b25jaXNlIGJpbmFyeSBmb3JtYXQgZm9yIHRoZSBzZXJpYWxpemF0aW9uIG9mIGRhdGEgc3RydWN0 dXJlZCB0byBhbiBleHRlbmRlZCB2ZXJzaW9uIG9mIHRoZSBKU09OIGRhdGEgbW9kZWwuIE9uZSBt b3RpdmF0aW9uIGZvciBDQk9SIHdhcyB0byBtYWtlIHRoaXMgZGF0YSBtb2RlbCBtb3JlIGFtZW5h YmxlIHRvIGNvbnN0cmFpbmVkIG5vZGVzIGFuZCBjb25zdHJhaW5lZCBub2RlIG5ldHdvcmtzIChS RkMgNzIyOCkuDQpOZXc6DQpDb25jaXNlIEJpbmFyeSBPYmplY3QgUmVwcmVzZW50YXRpb24gKENC T1IsIFJGQyA3MDQ5KSBpcyBhIGNvbmNpc2UgYmluYXJ5IGZvcm1hdCBmb3IgdGhlIHNlcmlhbGl6 YXRpb24gb2YgZGF0YSBzdHJ1Y3R1cmVkIHRvIGFuIGV4dGVuZGVkIHZlcnNpb24gb2YgdGhlIEpT T04gZGF0YSBtb2RlbC4gT25lIG1vdGl2YXRpb24gZm9yIENPU0Ugd2FzIHRvIHJldXNlIGZ1bmN0 aW9uYWxpdHkgZnJvbSB0aGUgSk9TRSB3b3JraW5nIGdyb3VwIHVzaW5nIHRoZSBDQk9SIGRhdGEg cmVwcmVzZW50YXRpb24gYXMgaXQgaXMgbW9yZSBhbWVuYWJsZSB0byBjb25zdHJhaW5lZCBub2Rl cyBhbmQgY29uc3RyYWluZWQgbm9kZSBuZXR3b3JrcyAoUkZDIDcyMjgpLg0KDQpPbGQ6DQpUaGUg Sk9TRSB3b3JraW5nIGdyb3VwIHJlY2VudGx5IGNvbXBsZXRlZCBwcm9kdWNpbmcgcmVwcmVzZW50 YXRpb25zIGZvciBjcnlwdG9ncmFwaGljIGtleXMsIG1lc3NhZ2UgYXV0aGVudGljYXRpb24gKE1B Q3MpLCBlbmNyeXB0aW9uLCBhbmQgZGlnaXRhbCBzaWduYXR1cmVzLCB1c2luZyBKU09OIHJlcHJl c2VudGF0aW9uLiBUaGlzIHdvcmtpbmcgZ3JvdXAgd2lsbCByZXVzZSB0aGUgd29yayBkb25lIGJ5 IEpPU0UsIGFkYXB0aW5nIGl0IHRvIHRoZSBjYXBhYmlsaXRpZXMgb2YgQ0JPUi4gVGhpcyB3aWxs IHJlbHkgb24gdGhlIEpPU0UgcmVnaXN0cmllcywgd2hpY2gsIHdoZXJlIHRoaXMgcHJvdmlkZXMg YWRkaXRpb25hbCBlZmZpY2llbmN5LCB3aWxsIGJlIGV4cGFuZGVkIHdpdGggYWRkaXRpb25hbCBp bmZvcm1hdGlvbi4NCk5ldzoNClRoZSBKT1NFIHdvcmtpbmcgZ3JvdXAgcmVjZW50bHkgY29tcGxl dGVkIHByb2R1Y2luZyByZXByZXNlbnRhdGlvbnMgZm9yIGNyeXB0b2dyYXBoaWMga2V5cywgbWVz c2FnZSBhdXRoZW50aWNhdGlvbiAoTUFDcyksIGVuY3J5cHRpb24sIGFuZCBkaWdpdGFsIHNpZ25h dHVyZXMsIHVzaW5nIEpTT04gcmVwcmVzZW50YXRpb24uIENPU0Ugd2lsbCByZWx5IG9uIHRoZSBK T1NFIHJlZ2lzdHJpZXMsIGFuZCB3aWxsIGJlIGV4cGFuZCB0aGVtIHdpdGggYWRkaXRpb25hbCBp bmZvcm1hdGlvbiB3aGVuIG5lY2Vzc2FyeS4NCg0KTm90ZTogeW91IG1heSBoYXZlIG90aGVyIHJl YXNvbnMgYmVzaWRlcyBlZmZpY2llbmN5Lg0KDQpPbGQ6DQpUaGUgcmVzdWx0aW5nIGZvcm1hdHMg d2lsbCBub3QgYmUgY3J5cHRvZ3JhcGhpY2FsbHkgY29udmVydGlibGUgZnJvbSBvciB0byBKT1NF IGZvcm1hdHMuIFRoaXMgbGFjayBvZiBhIG5lZWQgZm9yIGJpdC1mb3ItYml0IGNvbXBhYml0aWxp dHkgd2hpY2ggd2lsbCBlbmFibGUgc29tZSBzaW1wbGlmaWNhdGlvbiBpbiB0aGUgYWRhcHRhdGlv biBwcm9jZXNzLg0KTmV3Og0KVGhlIHJlc3VsdGluZyBmb3JtYXRzIHdpbGwgbm90IGJlIGNyeXB0 b2dyYXBoaWNhbGx5IGNvbnZlcnRpYmxlIGZyb20gb3IgdG8gSk9TRSBmb3JtYXRzLiBUaGlzIGxh Y2sgb2YgYSBuZWVkIGZvciBiaXQtZm9yLWJpdCBjb21wYXRpYmlsaXR5IHdpbGwgZW5hYmxlIHNv bWUgc2ltcGxpZmljYXRpb24gaW4gdGhlIGFkYXB0YXRpb24gcHJvY2Vzcy4NCg0KT2xkOg0KDQpD cml0ZXJpYSB0aGF0IHNob3VsZCBiZSBjb25zaWRlcmVkIG9uIG1ha2luZyBkZWNpc2lvbnMgaW4g Y2hhbmdpbmcgZnJvbSBhIEpTT04gdG8gYSBDQk9SIGVuY29kaW5nIGFyZToNCg0KwrcgICAgICBL ZWVwaW5nIHRoZSBjdXJyZW50IEpPU0UgcGFyYWRpZ21zIGFuZCBmb3JtYXR0aW5nIHdoZXJlIGZl YXNpYmxlLg0KDQrCtyAgICAgIE1pbmltaXppbmcgbWVzc2FnZSBzaXplLCBjb2RlIHNpemUgYW5k IGNvbXB1dGF0aW9uYWwgY29tcGxleGl0eSBzaG91bGQgYmUgY29uc2lkZXJlZCAoZm9yIHRoZSBj b25zdHJhaW5lZCBlbnZpcm9ubWVudHMgd2hlcmUgd2UgZXhwZWN0IHRvIHVzZSB0aGlzKS4NCg0K wrcgICAgICBJbXByb3Zpbmcgc2VjdXJpdHkNCg0KwrcgICAgICBQcm92aWRpbmcgbmV3IGZ1bmN0 aW9uYWxpdHkgdGhhdCB1c2VzIG9mIEpPU0UgZGlkIG5vdCByZXF1aXJlLCBidXQgYXJlIHJlcXVp cmVkIGZvciB0aGUgbmV3IHVzZSBjYXNlcy4NCk5ldzoNCg0KQ3JpdGVyaWEgdGhhdCBzaG91bGQg YmUgY29uc2lkZXJlZCBpbiB0aGUgZGVjaXNpb24gbWFraW5nIHByb2Nlc3MsIGNoYW5naW5nIGZy b20gSlNPTiB0byBDQk9SIGVuY29kaW5nIGluY2x1ZGU6DQoNCsK3ICAgICAgTWFpbnRhaW4gdGhl IGN1cnJlbnQgSk9TRSBwYXJhZGlnbXMgYW5kIGZvcm1hdHRpbmcgd2hlcmUgZmVhc2libGUuDQoN CsK3ICAgICAgTWluaW1pemUgbWVzc2FnZSBzaXplLCBjb2RlIHNpemUsIGFuZCBjb21wdXRhdGlv bmFsIGNvbXBsZXhpdHkgdG8gc3VpdCBjb25zdHJhaW5lZCBlbnZpcm9ubWVudHMsIHdoZXJlIHRo aXMgaXMgZXhwZWN0ZWQgdG8gIGJlIHVzZWQuDQoNCsK3ICAgICAgSW1wcm92ZSBzZWN1cml0eQ0K DQrCtyAgICAgIFByb3ZpZGUgbmV3IGZ1bmN0aW9uYWxpdHkgZm9yIGFkZGl0aW9uYWwgdXNlIGNh c2VzIHRoYXQgd2VyZSBub3QgcmVxdWlyZWQgZm9yIEpPU0UuDQpPbGQ6DQpJc3N1ZXMgZGVhbGlu ZyB3aXRoIGtleSBtYW5hZ2VtZW50IGFuZCBiaW5kaW5nIG9mIGtleXMgdG8gaWRlbnRpdGllcyBh cmUgb3V0IG9mIHNjb3BlIGZvciB0aGUgd29ya2luZyBncm91cC4NCk5ldzoNCktleSBtYW5hZ2Vt ZW50IGFuZCBiaW5kaW5nIG9mIGtleXMgdG8gaWRlbnRpdGllcyBhcmUgb3V0IG9mIHNjb3BlIGZv ciB0aGUgd29ya2luZyBncm91cC4NCg0KTm90ZTogSSBhbSBhc3N1bWluZyB5b3UgcmVhbGx5IHdh bnQgdG8gb3V0LW9mIHNjb3BlIGFsbCBrZXkgbWFuYWdlbWVudCBhbmQgbm90IGp1c3QgaXNzdWVz Pw0KDQpBbmQgSSBkb24ndCBzZWUgYW55IG5lZWQgdG8gdHdlYWsgdGhlIHJlc3Qgb2YgdGhlIHRl eHQ6DQoNClRoZSBXb3JraW5nIGdyb3VwIHdpbGwgY29vcmRpbmF0ZSBpdHMgcHJvZ3Jlc3Mgd2l0 aCB0aGUgQUNFLCBESUNFIGFuZCBDT1JFIHdvcmtpbmcgZ3JvdXBzIHRvIGVuc3VyZSB0aGF0IHdl IGFyZSBmdWxmaWxsaW5nIHRoZSBuZWVkcyBvZiB0aGVzZSBjb25zdGl0dWVuY2llcy4gT3RoZXIg Z3JvdXBzIG1heSBiZSBhZGRlZCB0byB0aGlzIGxpc3QgYXMgdGhlIHNldCBvZiB1c2UgY2FzZXMg aXMgZXhwYW5kZWQuDQoNClRoZSBXRyB3aWxsIGhhdmUgdHdvIGRlbGl2ZXJhYmxlczoNCg0KICAq ICAgYSBzdGFuZGFyZHMtdHJhY2sgc3BlY2lmaWNhdGlvbiBjb3ZlcmluZyB0aGUgc2FtZSBjcnlw dG9ncmFwaGljIGZvcm1hdHMgZnJvbSBKT1NFLCB3aXRoIG9wdGltaXphdGlvbnMgZm9yIGNvbnN0 cmFpbmVkIGRldmljZSBwcm9jZXNzaW5nLCBleHByZXNzZWQgaW4gQ0JPUjsNCiAgKiAgIHJlZ2lz dHJhdGlvbiBmb3IgYWxnb3JpdGhtcyAoc3VjaCBhcyBBRVMtQ0NNLTgpIHRoYXQgYXJlIGFwcHJv cHJpYXRlIGZvciBjb25zdHJhaW5lZCBlbnZpcm9ubWVudHMuDQoNClRoZSBXb3JraW5nIEdyb3Vw IHdpbGwgdXNlIGEgd2lraSB0byB0cmFjayBkZXNpcmVkIHVzZSBjYXNlcyBmb3IgaXRzIHdvcmss IGJ1dCBkb2VzIG5vdCBpbnRlbmQgdG8gcHVibGlzaCB0aGlzIGFzIGFuIFJGQy4NCg0KDQpJJ2Qg bG92ZSBpdCBpZiB5b3UgY2FuIGtlZXAgdG8gdGhlIG1pbGVzdG9uZXMgcHJvamVjdGVkIDotKQ0K DQpUaGFua3MuDQpLYXRobGVlbg0KDQpPbiBUdWUsIEFwciAyMSwgMjAxNSBhdCA2OjMyIFBNLCBK aW0gU2NoYWFkIDxpZXRmQGF1Z3VzdGNlbGxhcnMuY29tPG1haWx0bzppZXRmQGF1Z3VzdGNlbGxh cnMuY29tPj4gd3JvdGU6DQpUaGUgZGF0ZSBjaGFuZ2UgcHJvcG9zZWQgYnkgbWUgaGFzIGJlZW4g bWVyZ2VkIGludG8gdGhlIGRyYWZ0Lg0KDQpJIGJlbGlldmUgdGhhdCB3ZSBjYW4gbm93IGNvbnNp ZGVyIHRoZSBjaGFydGVyIGRpc2N1c3Npb24gdG8gYmUgY29tcGxldGUgdW5sZXNzIGFueW9uZSBl bHNlIGhhcyBhIGJpZyBpc3N1ZSB0aGV5IHdhbnQgdG8gYnJpbmcgdXAuDQoNCkthdGhsZWVuOiAg Q2FuIHdlIGdldCB0aGlzIHRvIG1vdmUgZm9yd2FyZCBpbnRvIHRoZSBJRVNHPw0KDQpKaW0NCg0K DQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206IENvc2UgW21haWx0bzpjb3Nl LWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOmNvc2UtYm91bmNlc0BpZXRmLm9yZz5dIE9uIEJlaGFs ZiBPZiBLYXRobGVlbiBNb3JpYXJ0eQ0KPiBTZW50OiBUdWVzZGF5LCBBcHJpbCAxNCwgMjAxNSA3 OjE3IFBNDQo+IFRvOiBKaW0gU2NoYWFkDQo+IENjOiBLZXBlbmcgTGk7IFBhdWwgSG9mZm1hbjsg Y29zZUBpZXRmLm9yZzxtYWlsdG86Y29zZUBpZXRmLm9yZz4NCj4gU3ViamVjdDogUmU6IFtDb3Nl XSBDaGFydGVyIFN0YXRlDQo+DQo+DQo+DQo+IFNlbnQgZnJvbSBteSBpUGhvbmUNCj4NCj4gPiBP biBBcHIgMTQsIDIwMTUsIGF0IDEwOjEwIFBNLCAiSmltIFNjaGFhZCIgPGlldGZAYXVndXN0Y2Vs bGFycy5jb208bWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5jb20+Pg0KPiB3cm90ZToNCj4gPg0K PiA+DQo+ID4NCj4gPj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gPj4gRnJvbTogQ29z ZSBbbWFpbHRvOmNvc2UtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86Y29zZS1ib3VuY2VzQGlldGYu b3JnPl0gT24gQmVoYWxmIE9mIEtlcGVuZyBMaQ0KPiA+PiBTZW50OiBUdWVzZGF5LCBBcHJpbCAx NCwgMjAxNSA2OjU5IFBNDQo+ID4+IFRvOiBQYXVsIEhvZmZtYW47IEppbSBTY2hhYWQNCj4gPj4g Q2M6IGNvc2VAaWV0Zi5vcmc8bWFpbHRvOmNvc2VAaWV0Zi5vcmc+DQo+ID4+IFN1YmplY3Q6IFJl OiBbQ29zZV0gQ2hhcnRlciBTdGF0ZQ0KPiA+Pg0KPiA+PiBUaGFua3MgUGF1bC4NCj4gPj4NCj4g Pj4gVGhlcmUgYXJlIHR3byBvdGhlciBjaGFuZ2VzIHdlIG1pZ2h0IHdhbnQgdG8gaW5jb3Jwb3Jh dGU6DQo+ID4+DQo+ID4+IDEpIFByb3Bvc2FsIGZyb20gR29yYW46DQo+ID4+IGh0dHA6Ly93d3cu aWV0Zi5vcmcvbWFpbC1hcmNoaXZlL3dlYi9jb3NlL2N1cnJlbnQvbXNnMDAwMjcuaHRtbA0KPiA+ Pg0KPiA+PiBPTEQ6DQo+ID4+ICJhIHN0YW5kYXJkcy10cmFjayBzcGVjaWZpY2F0aW9uIGNvdmVy aW5nIHRoZSBzYW1lIGNyeXB0b2dyYXBoaWMNCj4gPj4gZm9ybWF0cw0KPiA+IGZyb20NCj4gPj4g Sk9TRSwgZXhwcmVzc2VkIGluIENCT1IiDQo+ID4+DQo+ID4+IE5FVzoNCj4gPj4gImEgc3RhbmRh cmRzLXRyYWNrIHNwZWNpZmljYXRpb24gY292ZXJpbmcgdGhlIHNhbWUgY3J5cHRvZ3JhcGhpYw0K PiA+PiBmb3JtYXRzDQo+ID4gZnJvbQ0KPiA+PiBKT1NFIGFuZCBvcHRpbWl6YXRpb25zIGZvciBj b25zdHJhaW5lZCBkZXZpY2UgcHJvY2Vzc2luZywgZXhwcmVzc2VkDQo+ID4+IGluDQo+ID4gQ0JP Ug0KPiA+DQo+ID4gSSBhbSBhZ25vc3RpYyBhYm91dCBpbmNsdWRpbmcgdGhpcyBjaGFuZ2UuICBX ZSBub3cgYXJlIG11Y2ggbW9yZQ0KPiA+IGNvbnN0cmFpbmVkIGRldmljZSBmb2N1c2VkIGxhdGVy IHNvIGl0IG1pZ2h0IG5vdCBiZSBuZWVkZWQuDQo+ID4NCj4gPj4NCj4gPj4gKDIpIFByb3Bvc2Fs IGZyb20gS2F0aGxlZW46DQo+ID4+DQo+ID4+IGh0dHA6Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNo aXZlL3dlYi9jb3NlL2N1cnJlbnQvbXNnMDAwNzcuaHRtbA0KPiA+Pg0KPiA+PiBPTEQ6DQo+ID4+ IFRoZSBXb3JraW5nIEdyb3VwIHdpbGwgY29vcmRpbmF0ZSBpdHMgcHJvZ3Jlc3Mgd2l0aCB0aGUg QUNFLCBESUNFIGFuZA0KPiA+PiBDb1JFIHdvcmtpbmcgZ3JvdXBzIHRvIGVuc3VyZSB0aGF0IHdl IGFyZSBmdWxmaWxsaW5nIHRoZSBuZWVkcyBvZg0KPiA+PiB0aGVzZSBjb25zdGl0dWVuY2llcy4N Cj4gPj4NCj4gPj4gTkVXOg0KPiA+PiBUaGUgV29ya2luZyBHcm91cCB3aWxsIGNvb3JkaW5hdGUg aXRzIHByb2dyZXNzIHdpdGggdGhlIEFDRSwgRElDRSwNCj4gPj4gQ29SRQ0KPiA+IGFuZA0KPiA+ PiBESU1FIHdvcmtpbmcgZ3JvdXBzIHRvIGVuc3VyZSB0aGF0IHdlIGFyZSBmdWxmaWxsaW5nIHRo ZSBuZWVkcyBvZg0KPiA+PiB0aGVzZSBjb25zdGl0dWVuY2llcy4NCj4gPg0KPiA+IEkgYW0gbm90 IHN1cmUgdGhhdCBESU1FIGlzIGEgcmVhc29uYWJsZSBncm91cCB0byBiZSBjb29yZGluYXRpbmcg d2l0aA0KPiA+IHNpbmNlIGl0IGlzIG5vdCBjbGVhciB0aGF0IHRoaXMgd291bGQgYmUgdGhlIHNv bHV0aW9uIHNwYWNlIHRoZXkgYXJlDQo+ID4gZ29pbmcgdG8gb3BlcmF0ZSBpbi4gIEl0IGlzIHRy dWUgdGhhdCB0aGlzIG5lZWQgc29tZXRoaW5nIGFsb25nIHRoZXNlDQo+ID4gbGluZXMsIGJ1dCB3 aGF0IHRoZXkgbmVlZCBmaXJzdCBpcyB0byBnZXQgc29tZW9uZSB3aG8gaGFzIGdvb2QNCj4gPiBr bm93bGVkZ2Ugb2Ygd2hhdCBjYW4gYmUgZG9uZSBpbiB0aGUgZ3JvdXAgZmlyc3QuICBHaXZlbiB0 aGF0IHRoaXMgaXMNCj4gPiBtYWpvciAodGVsZWNvbSkgdmVuZG9ycywgdXNpbmcgQ01TIG1pZ2h0 IGJlIGEgYmV0dGVyIGZpdCBmb3IgdGhpcw0KPiA+DQo+ID4gVGhlIG90aGVyIHF1ZXN0aW9uIGlm IHdlIGV4cGFuZCB0aGlzIGxpc3QgaGVyZSByYXRoZXIgdGhhbiBpbiB0aGUgd2lraQ0KPiA+IGlz IHRoZSBzZXQgb2YgZ3JvdXBzIHRoYXQgUmVuZSBTdHJ1aWsgdGhvdWdoIHRoYXQgbWlnaHQgYmUg aW5jbHVkZWQNCj4gPiBoZXJlIHN1Y2ggYXMgIjZUaVNDSCwgNmxvLCBSb0xMLCBldGMiIHdoaWNo IHNlZW0gdG8gYmUgbXVjaCBjbG9zZXIgdG8NCj4gPiB0aGUgdHlwZXMgb2YgZ3JvdXBzIHRoYXQg bWlnaHQgdXNlIHRoaXMgc3BlY2lmaWNhdGlvbiBnb2luZyBmb3J3YXJkLg0KPiA+DQo+ID4gQXQg dGhpcyBwb2ludCwgSSB0aGluayBJIHdvdWxkIGdvIHdpdGggdGhlIGxpc3Qgd2UgaGF2ZSBhbmQg c3RhcnQNCj4gPiBhZGRpbmcgbW9yZSBncm91cHMgdG8gdGhlIHdpa2kuDQo+DQo+IEknbSBmaW5l IHdpdGggdGhhdCBhcHByb2FjaC4gIE15IHBvaW50IGluIGJyaW5naW5nIHVwIERJTUUgd2FzIG1v cmUgdGhhdCB0aGV5DQo+IG5lZWQgaGVscCBhbmQgdGhpcyAqY291bGQqIGhlbHAgdGhlbSwgYnV0 IHdvcmsgbmVlZHMgdG8gYmUgZG9uZSB0byBmaWd1cmUNCj4gb3V0IHdoYXQgdGhleSBuZWVkIGF0 IHRoaXMgcG9pbnQuICBJIGJyb3VnaHQgaXQgdXAganVzdCBpbiBjYXNlIGl0J3MgcmVsZXZhbnQg dG8NCj4gQ09TRS4NCj4NCj4gVGhhbmtzLA0KPiBLYXRobGVlbg0KPiA+DQo+ID4gSmltDQo+ID4N Cj4gPj4NCj4gPj4NCj4gPj4gVGhhbmtzLA0KPiA+Pg0KPiA+PiBLaW5kIFJlZ2FyZHMNCj4gPj4g S2VwZW5nDQo+ID4+DQo+ID4+ID8gMTUvNC8xNSAyOjMyIGFtLCAiUGF1bCBIb2ZmbWFuIiA8cGF1 bC5ob2ZmbWFuQHZwbmMub3JnPG1haWx0bzpwYXVsLmhvZmZtYW5AdnBuYy5vcmc+PiA/PzoNCj4g Pj4NCj4gPj4+IE9uIEFwciAxNCwgMjAxNSwgYXQgMTE6MjAgQU0sIEppbSBTY2hhYWQgPGlldGZA YXVndXN0Y2VsbGFycy5jb208bWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5jb20+Pg0KPiB3cm90 ZToNCj4gPj4+Pg0KPiA+Pj4+IEkgd291bGQgbGlrZSB0byBnZXQgUHVsbCBSZXF1ZXN0ICMyIHJv bGxlZCBpbnRvIHRoZSBkcmFmdCBjaGFydGVyDQo+ID4+Pj4gYW5kIHRoZW4gSSB0aGluayB3ZSBh cmUgcmVhZHkgdG8gc2VuZCBpdCB0byB0aGUgQURzIGFuZCBJRVNHIGZvciByZXZpZXcuDQo+ID4+ Pj4NCj4gPj4+PiBTaW5jZSBpdCBpcyBteSBwdWxsIHJlcXVlc3QgSSBoYXZlIG5vdCBkb25lIHRo ZSBtZXJnZSBwcmVmZXJyaW5nDQo+ID4+Pj4gdGhhdCBpdCBiZSBkb25lIGJ5IG9uZSBvZiB0aGUg b3RoZXJzIHdobyBoYXZlIHBlcm1pc3Npb25zLiAgSWYgSQ0KPiA+Pj4+IGdldCBhIG1lc3NhZ2Ug c2F5aW5nIGRvIHRoZSBtZXJnZSByZXF1ZXN0IEkgd291bGQgYmUgaGFwcHkgdG8gcHVsbA0KPiA+ Pj4+IHRoZSB0cmlnZ2VyIG9uIGl0Lg0KPiA+Pj4NCj4gPj4+IFRoZXJlIHNlZW1lZCB0byBiZSBn ZW5lcmFsIGFncmVlbWVudCwgc28gSSBhY2NlcHRlZCB0aGUgcHVsbCByZXF1ZXN0Lg0KPiA+Pj4N Cj4gPj4+IEN1cnJlbnQgdmVyc2lvbiBpcyBhdDoNCj4gPj4+IGh0dHBzOi8vZ2l0aHViLmNvbS9j b3NlLXNwZWMvd2ctY2hhcnRlci9ibG9iL21hc3Rlci9kcmFmdC1jaGFydGVyLm1kDQo+ID4+Pg0K PiA+Pj4gLS1QYXVsIEhvZmZtYW4NCj4gPj4+DQo+ID4+PiBfX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+Pj4gQ29zZSBtYWlsaW5nIGxpc3QNCj4gPj4+ IENvc2VAaWV0Zi5vcmc8bWFpbHRvOkNvc2VAaWV0Zi5vcmc+DQo+ID4+PiBodHRwczovL3d3dy5p ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UNCj4gPj4NCj4gPj4NCj4gPj4gX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPj4gQ29zZSBtYWlsaW5n IGxpc3QNCj4gPj4gQ29zZUBpZXRmLm9yZzxtYWlsdG86Q29zZUBpZXRmLm9yZz4NCj4gPj4gaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlDQo+ID4NCj4gPiBfX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiA+IENvc2UgbWFpbGlu ZyBsaXN0DQo+ID4gQ29zZUBpZXRmLm9yZzxtYWlsdG86Q29zZUBpZXRmLm9yZz4NCj4gPiBodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UNCj4NCj4gX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gQ29zZSBtYWlsaW5nIGxpc3QN Cj4gQ29zZUBpZXRmLm9yZzxtYWlsdG86Q29zZUBpZXRmLm9yZz4NCj4gaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlDQoNCg0KDQotLQ0KDQpCZXN0IHJlZ2FyZHMsDQpL YXRobGVlbg0KDQoNCg0KLS0NCg0KQmVzdCByZWdhcmRzLA0KS2F0aGxlZW4NCl9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpDb3NlIG1haWxpbmcgbGlzdA0K Q29zZUBpZXRmLm9yZzxtYWlsdG86Q29zZUBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vY29zZQ0K --_000_D15E4DA62DA5Agoranselanderericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <0E9A51B1BFC82D4BA31894A3E8FD9084@ericsson.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsgY29sb3I6IHJnYigwLCAwLCAwKTsgZm9udC1zaXplOiAx NHB4OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiPg0KPGRpdj48YnI+DQo8L2Rp dj4NCjxzcGFuIGlkPSJPTEtfU1JDX0JPRFlfU0VDVElPTiI+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0K PGJsb2NrcXVvdGUgaWQ9Ik1BQ19PVVRMT09LX0FUVFJJQlVUSU9OX0JMT0NLUVVPVEUiIHN0eWxl PSJCT1JERVItTEVGVDogI2I1YzRkZiA1IHNvbGlkOyBQQURESU5HOjAgMCAwIDU7IE1BUkdJTjow IDAgMCA1OyI+DQo8ZGl2IHhtbG5zOnY9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206dm1sIiB4 bWxuczpvPSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpvZmZpY2UiIHhtbG5zOnc9 InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOndvcmQiIHhtbG5zOm09Imh0dHA6Ly9z Y2hlbWFzLm1pY3Jvc29mdC5jb20vb2ZmaWNlLzIwMDQvMTIvb21tbCIgeG1sbnM9Imh0dHA6Ly93 d3cudzMub3JnL1RSL1JFQy1odG1sNDAiPg0KPG1ldGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50 PSJNaWNyb3NvZnQgV29yZCAxNCAoZmlsdGVyZWQgbWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyog Rm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpIZWx2ZXRpY2E7 DQoJcGFub3NlLTE6MiAxMSA2IDQgMiAyIDIgMiAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZh bWlseTpIZWx2ZXRpY2E7DQoJcGFub3NlLTE6MiAxMSA2IDQgMiAyIDIgMiAyIDQ7fQ0KQGZvbnQt ZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMg MiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6VGFob21hOw0KCXBhbm9zZS0xOjIgMTEg NiA0IDMgNSA0IDQgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwg bGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRv bTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBS b21hbiIsInNlcmlmIjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0K YTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwDQoJ e21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJn aW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0 OjBpbjsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4i LCJzZXJpZiI7fQ0KcC5Nc29BY2V0YXRlLCBsaS5Nc29BY2V0YXRlLCBkaXYuTXNvQWNldGF0ZQ0K CXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkJhbGxvb24gVGV4dCBD aGFyIjsNCgltYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6 OC4wcHQ7DQoJZm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiO30NCnAuTXNvTGlzdFBh cmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3JhcGgNCgl7bXNv LXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbi10b3A6MGluOw0KCW1hcmdpbi1yaWdodDowaW47 DQoJbWFyZ2luLWJvdHRvbTowaW47DQoJbWFyZ2luLWxlZnQ6LjVpbjsNCgltYXJnaW4tYm90dG9t Oi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJv bWFuIiwic2VyaWYiO30NCnNwYW4uQmFsbG9vblRleHRDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJC YWxsb29uIFRleHQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1s aW5rOiJCYWxsb29uIFRleHQiOw0KCWZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIjt9 DQpzcGFuLkVtYWlsU3R5bGUyMA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglm b250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1z b0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEw LjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2lu OjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3Jk U2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3Qt aWQ6NzI2NTM4NDgyOw0KCW1zby1saXN0LXRlbXBsYXRlLWlkczoxMDI0OTA4MjEyO30NCkBsaXN0 IGwwOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVs LXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDouNWluOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXpl OjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWwyDQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxl dmVsLXRhYi1zdG9wOjEuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZh bWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0 OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEuNWlu Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47 DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxp c3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2 ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIuMGluOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1z aXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw1DQoJe21z by1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNv LWxldmVsLXRhYi1zdG9wOjIuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN Cgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250 LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9y bWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMu MGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1 aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0K QGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28t bGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuNWluOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9u dC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOjQuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglm b250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9w OjQuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot LjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7 fQ0KQGxpc3QgbDENCgl7bXNvLWxpc3QtaWQ6MTMwNDAwMDc1ODsNCgltc28tbGlzdC10eXBlOmh5 YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6Nzg4MzIyNDY2IDY3Njk4NzAzIDY3Njk4NzEz IDY3Njk4NzE1IDY3Njk4NzAzIDY3Njk4NzEzIDY3Njk4NzE1IDY3Njk4NzAzIDY3Njk4NzEzIDY3 Njk4NzE1O30NCkBsaXN0IGwxOmxldmVsMQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCglt c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBs aXN0IGwxOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCglt c28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVsMw0KCXttc28tbGV2ZWwtbnVt YmVyLWZvcm1hdDpyb21hbi1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOnJpZ2h0Ow0KCXRleHQtaW5kZW50Oi05LjBwdDt9DQpAbGlz dCBsMTpsZXZlbDQNCgl7bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMTpsZXZlbDUN Cgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1z dG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0uMjVpbjt9DQpAbGlzdCBsMTpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6cm9t YW4tbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpyaWdodDsNCgl0ZXh0LWluZGVudDotOS4wcHQ7fQ0KQGxpc3QgbDE6bGV2ZWw3DQoJ e21zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDE6bGV2ZWw4DQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OmFscGhhLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxp c3QgbDE6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1z by1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246cmlnaHQ7 DQoJdGV4dC1pbmRlbnQ6LTkuMHB0O30NCm9sDQoJe21hcmdpbi1ib3R0b206MGluO30NCnVsDQoJ e21hcmdpbi1ib3R0b206MGluO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+ DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+ PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4 dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxh eW91dD48L3htbD48IVtlbmRpZl0tLT4NCjxkaXYgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZs aW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJp LCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiPkluIG9yZGVyIHRvIGdldCB0 aGUgQ0ZSRyBwb2ludGVkIGluIHRoZSByaWdodCBkaXJlY3Rpb24sIGl0IGlzIG5lY2Vzc2FyeSB0 byBnaXZlIGl0IHNvbWUgaW5wdXQuICZuYnNwOyZuYnNwO1RvIHRoYXQgZW5kIEkgd291bGQgc3Vn Z2VzdCB3ZSBzdGFydCB3aXRoIGRvaW5nDQogYSBzdXJ2ZXkgb2YgdGhyZWUgcXVlc3Rpb25zOjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjog cmdiKDMxLCA3MywgMTI1KTsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS4yNWluO21zby1saXN0Omwx IGxldmVsMSBsZm8yIj48IS0tW2lmICFzdXBwb3J0TGlzdHNdLS0+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPjEu PHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50OiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGZvbnQtc2l6ZTogN3B0OyBsaW5lLWhlaWdodDogbm9ybWFsOyBm b250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbic7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhLS1bZW5kaWZdLS0+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNv bG9yOiByZ2IoMzEsIDczLCAxMjUpOyI+Jm5ic3A7V2hhdCB0eXBlIG9mIGFsZ29yaXRobXMgYXJl IG5lZWRlZD8mbmJzcDsgKGtleSBhZ3JlZW1lbnQsIGtleSB0cmFuc3BvcnQsIHNpZ25hdHVyZSwg aGFzaCwgTUFDLCBLREYsIGV0Yyk8L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9ibG9ja3F1b3RlPg0KPC9zcGFuPg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+Rm9yIHRoZSB1 c2UgY2FzZXMgSSBoYXZlIGluIG1pbmQ6IGtleSB0cmFuc3BvcnQsIEtERiwgZW5jcnlwdGlvbi9B RUFELCBoYXNoIGFuZCBzaWduYXR1cmUuIEJ1dCB0aGUgbWFpbiBjb25jZXJuIGlzIGFyb3VuZCBz aWduYXR1cmVzLjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+MS4gRUNEU0Egc2l6ZSBv ZiBzaWduYXR1cmUgYXQgMTEyLTEyOCBiaXRzIHNlY3VyaXR5IGlzIG9mIHRoZSBvcmRlciBvZiA2 MCBieXRlcyB3aGljaCBpcyBhIGxvdCBjb21wYXJlZCB0byA4IGJ5dGVzIHRydW5jYXRlZCBNQUMu IEl0IHdvdWxkIGJlIGdvb2QgdG8gaGF2ZSBhIHJlY29tbWVuZGF0aW9uIG9mIGEgc2lnbmF0dXJl IGFsZ29yaXRobSB3aXRoIG1lc3NhZ2UgcmVjb3ZlcnksIHN1Y2ggYXMgRUNQVlMgKHdoaWNoIGhh cyBzb21lIElQUiwNCiBzb21lIG9mIHdoaWNoIGlzIGV4cGlyaW5nIGluIGEgZmV3IHllYXJzKSBv ciBvdGhlci48L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PjIuIEEgY29tYmluZWQgc3lt bWV0cmljIGtleSBlbmNyeXB0aW9uICYjNDM7IHNpZ25hdHVyZSBpcyBuZWVkZWQgZm9yIHBvaW50 LW11bHRpcG9pbnQgc2V0dGluZ3MuJm5ic3A7PC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRp dj48YnI+DQo8L2Rpdj4NCjxzcGFuIGlkPSJPTEtfU1JDX0JPRFlfU0VDVElPTiI+DQo8YmxvY2tx dW90ZSBpZD0iTUFDX09VVExPT0tfQVRUUklCVVRJT05fQkxPQ0tRVU9URSIgc3R5bGU9IkJPUkRF Ui1MRUZUOiAjYjVjNGRmIDUgc29saWQ7IFBBRERJTkc6MCAwIDAgNTsgTUFSR0lOOjAgMCAwIDU7 Ij4NCjxkaXYgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89 InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNj aGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMu bWljcm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5v cmcvVFIvUkVDLWh0bWw0MCI+DQo8ZGl2IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0i cHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTGlzdFBh cmFncmFwaCIgc3R5bGU9InRleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMSBsZXZlbDEgbGZv MiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNh bnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyI+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjI1aW47 bXNvLWxpc3Q6bDEgbGV2ZWwxIGxmbzIiPjwhLS1baWYgIXN1cHBvcnRMaXN0c10tLT48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PHNwYW4gc3R5bGU9Im1zby1saXN0 Oklnbm9yZSI+Mi48c3BhbiBzdHlsZT0iZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQ6 IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgZm9udC1zaXplOiA3cHQ7IGxpbmUtaGVpZ2h0 OiBub3JtYWw7IGZvbnQtZmFtaWx5OiAnVGltZXMgTmV3IFJvbWFuJzsiPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjwvc3Bhbj48L3NwYW4+PCEtLVtlbmRpZl0t LT48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fu cy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7Ij5XaGF0IGFyZSB0aGUgY29uc3RyYWlu dHMgd2UgcmVhbGx5IGNhcmUgYWJvdXQ/PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjwvYmxvY2txdW90ZT4NCjwvc3Bhbj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PlRoZSBj aGFydGVyIHNheXMgJnF1b3Q7TWluaW1pemluZyBtZXNzYWdlIHNpemUsIGNvZGUgc2l6ZSBhbmQg Y29tcHV0YXRpb25hbCBjb21wbGV4aXR54oCdLiAmbmJzcDtJbiBvcmRlciBvZiBpbXBvcnRhbmNl IGZvciBzaWduYXR1cmVzIEnigJlkIHNheSBtZXNzYWdlIHNpemUsIGNvbXB1dGF0aW9uYWwgY29t cGxleGl0eSwgY29kZSBzaXplLjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+PGJyPg0K PC9kaXY+DQo8c3BhbiBpZD0iT0xLX1NSQ19CT0RZX1NFQ1RJT04iPg0KPGJsb2NrcXVvdGUgaWQ9 Ik1BQ19PVVRMT09LX0FUVFJJQlVUSU9OX0JMT0NLUVVPVEUiIHN0eWxlPSJCT1JERVItTEVGVDog I2I1YzRkZiA1IHNvbGlkOyBQQURESU5HOjAgMCAwIDU7IE1BUkdJTjowIDAgMCA1OyI+DQo8ZGl2 IHhtbG5zOnY9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206dm1sIiB4bWxuczpvPSJ1cm46c2No ZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTpvZmZpY2UiIHhtbG5zOnc9InVybjpzY2hlbWFzLW1p Y3Jvc29mdC1jb206b2ZmaWNlOndvcmQiIHhtbG5zOm09Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29m dC5jb20vb2ZmaWNlLzIwMDQvMTIvb21tbCIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JF Qy1odG1sNDAiPg0KPGRpdiBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+ DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgi IHN0eWxlPSJ0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDEgbGV2ZWwxIGxmbzIiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlm OyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS4yNWluO21zby1saXN0 OmwxIGxldmVsMSBsZm8yIj48IS0tW2lmICFzdXBwb3J0TGlzdHNdLS0+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUi PjMuPHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50OiBub3JtYWw7 IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGZvbnQtc2l6ZTogN3B0OyBsaW5lLWhlaWdodDogbm9ybWFs OyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbic7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+PC9zcGFuPjwhLS1bZW5kaWZdLS0+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7 IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyI+V2hhdCBhbGdvcml0aG1zIGFyZSB3ZSBjdXJyZW50 bHkgdXNpbmcgdG9kYXkgZm9yIHRob3NlIHB1cnBvc2VzPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQt ZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxv Y2txdW90ZT4NCjwvc3Bhbj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PlRoZSBkZWZhdWx0IGFs Z29yaXRobXMgYXJlIHRob3NlIHNwZWNpZmllZCBieSBDb0FQIChzZWNwMjU2cjEgZm9yIEVDRFNB KTwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8c3BhbiBpZD0i T0xLX1NSQ19CT0RZX1NFQ1RJT04iPg0KPGJsb2NrcXVvdGUgaWQ9Ik1BQ19PVVRMT09LX0FUVFJJ QlVUSU9OX0JMT0NLUVVPVEUiIHN0eWxlPSJCT1JERVItTEVGVDogI2I1YzRkZiA1IHNvbGlkOyBQ QURESU5HOjAgMCAwIDU7IE1BUkdJTjowIDAgMCA1OyI+DQo8ZGl2IHhtbG5zOnY9InVybjpzY2hl bWFzLW1pY3Jvc29mdC1jb206dm1sIiB4bWxuczpvPSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29t Om9mZmljZTpvZmZpY2UiIHhtbG5zOnc9InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNl OndvcmQiIHhtbG5zOm09Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5jb20vb2ZmaWNlLzIwMDQv MTIvb21tbCIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy1odG1sNDAiPg0KPGRpdiBs YW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3Jk U2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTog MTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDcz LCAxMjUpOyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNh bnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyI+SmltPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsg Zm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUp OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2Vy aWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVwdDtw YWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9u ZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBp biI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMHB0 OyBmb250LWZhbWlseTogVGFob21hLCBzYW5zLXNlcmlmOyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFu IHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiBUYWhvbWEsIHNhbnMtc2VyaWY7 Ij4gR8O2cmFuIFNlbGFuZGVyIFs8YSBocmVmPSJtYWlsdG86Z29yYW4uc2VsYW5kZXJAZXJpY3Nz b24uY29tIj5tYWlsdG86Z29yYW4uc2VsYW5kZXJAZXJpY3Nzb24uY29tPC9hPl0NCjxicj4NCjxi PlNlbnQ6PC9iPiBXZWRuZXNkYXksIEFwcmlsIDIyLCAyMDE1IDEyOjI0IFBNPGJyPg0KPGI+VG86 PC9iPiBLYXRobGVlbiBNb3JpYXJ0eTxicj4NCjxiPkNjOjwvYj4gSmltIFNjaGFhZDsgPGEgaHJl Zj0ibWFpbHRvOmNvc2VAaWV0Zi5vcmciPmNvc2VAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVj dDo8L2I+IFJlOiBbQ29zZV0gQ2hhcnRlciBTdGF0ZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Mb29rcyBmaW5lLiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5BYm91dCB0aGUgY29u c3RyYWluZWQtYXBwcm9wcmlhdGUgYWxnb3JpdGhtczogaXMgdGhlIGludGVudGlvbiB0byBjb25z dWx0IENGUkc/IElmIHNvLCBtYXliZSB3b3VsZCBiZSBnb29kIHRvIGdldCB0aGF0IGJhbGwgcm9s bGluZyB0b28gc29vbi4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtzLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5Hw7ZyYW48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PGJyPg0KT24gMjIgYXByIDIwMTUsIGF0IDE4OjU0LCBL YXRobGVlbiBNb3JpYXJ0eSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmthdGhsZWVuLm1vcmlhcnR5Lmll dGZAZ21haWwuY29tIj5rYXRobGVlbi5tb3JpYXJ0eS5pZXRmQGdtYWlsLmNvbTwvYT4mZ3Q7IHdy b3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRv cDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+R3JlYXQsIGFyZSBvdGhlcnMgb2sgd2l0aCB0aGUgY2hhbmdlcz8mbmJzcDsgSWYg c28sIEknbGwgZ2V0IGl0IHJvbGxpbmcuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5PbiBXZWQsIEFwciAyMiwgMjAxNSBhdCAxMjo0MSBQTSwgSmltIFNjaGFh ZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5jb20iIHRhcmdldD0iX2Js YW5rIj5pZXRmQGF1Z3VzdGNlbGxhcnMuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2Io MzEsIDczLCAxMjUpOyI+QmUgbXkgZ3Vlc3QgdG8gbWFrZSB0aGUgY2hhbmdlcy48L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNp emU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMx LCA3MywgMTI1KTsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGli cmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyI+SmltPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwg NzMsIDEyNSk7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJp LCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJs dWUgMS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0i Ym9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQg MGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48Yj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogVGFob21hLCBzYW5zLXNlcmlmOyI+RnJvbTo8L3Nw YW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiBUYWhvbWEs IHNhbnMtc2VyaWY7Ij4gQ29zZSBbbWFpbHRvOjxhIGhyZWY9Im1haWx0bzpjb3NlLWJvdW5jZXNA aWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5jb3NlLWJvdW5jZXNAaWV0Zi5vcmc8L2E+XQ0KPGI+ T24gQmVoYWxmIE9mIDwvYj5LYXRobGVlbiBNb3JpYXJ0eTxicj4NCjxiPlNlbnQ6PC9iPiBXZWRu ZXNkYXksIEFwcmlsIDIyLCAyMDE1IDk6MjcgQU08YnI+DQo8Yj5Ubzo8L2I+IEppbSBTY2hhYWQ8 L3NwYW4+PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi Pjxicj4NCjxiPkNjOjwvYj4gPGEgaHJlZj0ibWFpbHRvOmNvc2VAaWV0Zi5vcmciIHRhcmdldD0i X2JsYW5rIj5jb3NlQGlldGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0Nvc2Vd IENoYXJ0ZXIgU3RhdGU8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+SGksPG86cD48L286cD48L3A+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+SSBhbSBhc3N1bWluZyB0aGUgY3Vy cmVudCBjaGFydGVyIHRleHQgaXMgYXQgdGhlIGxpbms6PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNv bS9jb3NlLXNwZWMvd2ctY2hhcnRlci9ibG9iL21hc3Rlci9kcmFmdC1jaGFydGVyLm1kIiB0YXJn ZXQ9Il9ibGFuayI+aHR0cHM6Ly9naXRodWIuY29tL2Nvc2Utc3BlYy93Zy1jaGFydGVyL2Jsb2Iv bWFzdGVyL2RyYWZ0LWNoYXJ0ZXIubWQ8L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5JIGhhdmUgc29tZSBwcm9wb3NlZCBjaGFuZ2Vz IHRoYXQgSSB0aGluayBoZWxwIHdpdGggcmVhZGFiaWxpdHkuJm5ic3A7IExldCBtZSBrbm93IGlm IHRoZXNlIGFyZSBvayBhbmQgSSdsbCBwdXQgaW4gdGhlIGNoYXJ0ZXIgZm9yIElFU0cgcmV2aWV3 LiZuYnNwOyBBbGwgb2YgdGhlIGNoYXJ0ZXIgdGV4dCBpcyBpbmNsdWRlZCwNCiBicm9rZW4gb3V0 IGJ5IHNlY3Rpb25zIHRvIHNob3cgZWRpdHMuJm5ic3A7IEluIHNvbWUgY2FzZXMsIHRoZXJlIGlz IGEgTm90ZTogZm9sbG93aW5nIGEgY2hhbmdlIHdpdGggYXNzdW1wdGlvbnMgSSB3YXMgbWFraW5n IGluIGNhc2UgdGhleSB3ZXJlIG5vdCBjb3JyZWN0IGFzc3VtcHRpb25zLjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+T2xkOjxzcGFuIHN0 eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDUxLCA1 MSwgNTEpOyI+Q29uY2lzZSBCaW5hcnkgT2JqZWN0IFJlcHJlc2VudGF0aW9uIChDQk9SLCBSRkMg NzA0OSkgaXMgYSBjb25jaXNlIGJpbmFyeSBmb3JtYXQgZm9yIHRoZSBzZXJpYWxpemF0aW9uDQog b2YgZGF0YSBzdHJ1Y3R1cmVkIHRvIGFuIGV4dGVuZGVkIHZlcnNpb24gb2YgdGhlIEpTT04gZGF0 YSBtb2RlbC4gT25lIG1vdGl2YXRpb24gZm9yIENCT1Igd2FzIHRvIG1ha2UgdGhpcyBkYXRhIG1v ZGVsIG1vcmUgYW1lbmFibGUgdG8gY29uc3RyYWluZWQgbm9kZXMgYW5kIGNvbnN0cmFpbmVkIG5v ZGUgbmV0d29ya3MgKFJGQyA3MjI4KS48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+TmV3OjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIHNhbnMt c2VyaWY7IGNvbG9yOiByZ2IoNTEsIDUxLCA1MSk7Ij5Db25jaXNlIEJpbmFyeSBPYmplY3QgUmVw cmVzZW50YXRpb24gKENCT1IsIFJGQyA3MDQ5KSBpcyBhIGNvbmNpc2UgYmluYXJ5IGZvcm1hdCBm b3IgdGhlIHNlcmlhbGl6YXRpb24NCiBvZiBkYXRhIHN0cnVjdHVyZWQgdG8gYW4gZXh0ZW5kZWQg dmVyc2lvbiBvZiB0aGUgSlNPTiBkYXRhIG1vZGVsLiBPbmUgbW90aXZhdGlvbiBmb3IgQ09TRSB3 YXMgdG8gcmV1c2UgZnVuY3Rpb25hbGl0eSBmcm9tIHRoZSBKT1NFIHdvcmtpbmcgZ3JvdXAgdXNp bmcgdGhlIENCT1IgZGF0YSByZXByZXNlbnRhdGlvbiBhcyBpdCBpcyBtb3JlIGFtZW5hYmxlIHRv IGNvbnN0cmFpbmVkIG5vZGVzIGFuZCBjb25zdHJhaW5lZCBub2RlIG5ldHdvcmtzIChSRkMNCiA3 MjI4KS48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPk9sZDo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBjb2xvcjog cmdiKDUxLCA1MSwgNTEpOyI+VGhlIEpPU0Ugd29ya2luZyBncm91cCByZWNlbnRseSBjb21wbGV0 ZWQgcHJvZHVjaW5nIHJlcHJlc2VudGF0aW9ucyBmb3IgY3J5cHRvZ3JhcGhpYyBrZXlzLCBtZXNz YWdlIGF1dGhlbnRpY2F0aW9uDQogKE1BQ3MpLCBlbmNyeXB0aW9uLCBhbmQgZGlnaXRhbCBzaWdu YXR1cmVzLCB1c2luZyBKU09OIHJlcHJlc2VudGF0aW9uLiBUaGlzIHdvcmtpbmcgZ3JvdXAgd2ls bCByZXVzZSB0aGUgd29yayBkb25lIGJ5IEpPU0UsIGFkYXB0aW5nIGl0IHRvIHRoZSBjYXBhYmls aXRpZXMgb2YgQ0JPUi4gVGhpcyB3aWxsIHJlbHkgb24gdGhlIEpPU0UgcmVnaXN0cmllcywgd2hp Y2gsIHdoZXJlIHRoaXMgcHJvdmlkZXMgYWRkaXRpb25hbCBlZmZpY2llbmN5LCB3aWxsDQogYmUg ZXhwYW5kZWQgd2l0aCBhZGRpdGlvbmFsIGluZm9ybWF0aW9uLjwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5OZXc6PG86cD48L286cD48L3A+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhl bHZldGljYSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYig1MSwgNTEsIDUxKTsiPlRoZSBKT1NFIHdv cmtpbmcgZ3JvdXAgcmVjZW50bHkgY29tcGxldGVkIHByb2R1Y2luZyByZXByZXNlbnRhdGlvbnMg Zm9yIGNyeXB0b2dyYXBoaWMga2V5cywgbWVzc2FnZSBhdXRoZW50aWNhdGlvbg0KIChNQUNzKSwg ZW5jcnlwdGlvbiwgYW5kIGRpZ2l0YWwgc2lnbmF0dXJlcywgdXNpbmcgSlNPTiByZXByZXNlbnRh dGlvbi4gQ09TRSB3aWxsIHJlbHkgb24gdGhlIEpPU0UgcmVnaXN0cmllcywgYW5kIHdpbGwgYmUg ZXhwYW5kIHRoZW0gd2l0aCBhZGRpdGlvbmFsIGluZm9ybWF0aW9uIHdoZW4gbmVjZXNzYXJ5Ljwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ Tm90ZTogeW91IG1heSBoYXZlIG90aGVyIHJlYXNvbnMgYmVzaWRlcyBlZmZpY2llbmN5LjxvOnA+ PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+T2xkOjxvOnA+PC9vOnA+PC9w Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5 OiBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoNTEsIDUxLCA1MSk7Ij5UaGUgcmVz dWx0aW5nIGZvcm1hdHMgd2lsbCBub3QgYmUgY3J5cHRvZ3JhcGhpY2FsbHkgY29udmVydGlibGUg ZnJvbSBvciB0byBKT1NFIGZvcm1hdHMuIFRoaXMgbGFjayBvZiBhDQogbmVlZCBmb3IgYml0LWZv ci1iaXQgY29tcGFiaXRpbGl0eSB3aGljaCB3aWxsIGVuYWJsZSBzb21lIHNpbXBsaWZpY2F0aW9u IGluIHRoZSBhZGFwdGF0aW9uIHByb2Nlc3MuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPk5ldzoNCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2Es IHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoNTEsIDUxLCA1MSk7Ij5UaGUgcmVzdWx0aW5nIGZvcm1h dHMgd2lsbCBub3QgYmUgY3J5cHRvZ3JhcGhpY2FsbHkgY29udmVydGlibGUgZnJvbSBvciB0byBK T1NFIGZvcm1hdHMuIFRoaXMgbGFjayBvZiBhDQogbmVlZCBmb3IgYml0LWZvci1iaXQmbmJzcDtj b21wYXRpYmlsaXR5Jm5ic3A7d2lsbCBlbmFibGUgc29tZSBzaW1wbGlmaWNhdGlvbiBpbiB0aGUg YWRhcHRhdGlvbiBwcm9jZXNzLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+T2xkOjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIHN0eWxl PSJtYXJnaW4tYm90dG9tOjEyLjBwdDtsaW5lLWhlaWdodDoxOS4ycHQiPjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDUxLCA1MSwgNTEp OyI+Q3JpdGVyaWEgdGhhdCBzaG91bGQgYmUgY29uc2lkZXJlZCBvbiBtYWtpbmcgZGVjaXNpb25z IGluIGNoYW5naW5nIGZyb20gYSBKU09OIHRvIGEgQ0JPUiBlbmNvZGluZyBhcmU6PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDo1LjBwdDttYXJnaW4t cmlnaHQ6MGluO21hcmdpbi1ib3R0b206MTIuMHB0O21hcmdpbi1sZWZ0Oi41aW47bGluZS1oZWln aHQ6MTkuMnB0Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGNvbG9yOiByZ2IoNTEs IDUxLCA1MSk7Ij7Ctzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2NvbG9yOiMz MzMzMzMiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjxzcGFuIHN0eWxl PSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDUxLCA1MSwg NTEpOyI+S2VlcGluZyB0aGUgY3VycmVudCBKT1NFIHBhcmFkaWdtcyBhbmQgZm9ybWF0dGluZyB3 aGVyZSBmZWFzaWJsZS48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OjUuMHB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbToxMi4wcHQ7bWFy Z2luLWxlZnQ6LjVpbjtsaW5lLWhlaWdodDoxOS4ycHQiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZTogMTBwdDsgY29sb3I6IHJnYig1MSwgNTEsIDUxKTsiPsK3PC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LXNpemU6Ny4wcHQ7Y29sb3I6IzMzMzMzMyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7DQo8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIHNhbnMtc2Vy aWY7IGNvbG9yOiByZ2IoNTEsIDUxLCA1MSk7Ij5NaW5pbWl6aW5nIG1lc3NhZ2Ugc2l6ZSwgY29k ZSBzaXplIGFuZCBjb21wdXRhdGlvbmFsIGNvbXBsZXhpdHkgc2hvdWxkIGJlIGNvbnNpZGVyZWQg KGZvciB0aGUgY29uc3RyYWluZWQgZW52aXJvbm1lbnRzIHdoZXJlIHdlIGV4cGVjdCB0byB1c2Ug dGhpcykuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDo1LjBwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MTIuMHB0O21hcmdpbi1sZWZ0 Oi41aW47bGluZS1oZWlnaHQ6MTkuMnB0Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7 IGNvbG9yOiByZ2IoNTEsIDUxLCA1MSk7Ij7Ctzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjcuMHB0O2NvbG9yOiMzMzMzMzMiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBjb2xv cjogcmdiKDUxLCA1MSwgNTEpOyI+SW1wcm92aW5nIHNlY3VyaXR5PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPHAgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDo1LjBwdDttYXJnaW4tcmlnaHQ6MGlu O21hcmdpbi1ib3R0b206MTIuMHB0O21hcmdpbi1sZWZ0Oi41aW47bGluZS1oZWlnaHQ6MTkuMnB0 Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGNvbG9yOiByZ2IoNTEsIDUxLCA1MSk7 Ij7Ctzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2NvbG9yOiMzMzMzMzMiPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZh bWlseTogSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDUxLCA1MSwgNTEpOyI+UHJv dmlkaW5nIG5ldyBmdW5jdGlvbmFsaXR5IHRoYXQgdXNlcyBvZiBKT1NFIGRpZCBub3QgcmVxdWly ZSwgYnV0IGFyZSByZXF1aXJlZCBmb3IgdGhlIG5ldyB1c2UgY2FzZXMuPC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5OZXc6DQo8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdDtsaW5lLWhlaWdodDox OS4ycHQiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBj b2xvcjogcmdiKDUxLCA1MSwgNTEpOyI+Q3JpdGVyaWEgdGhhdCBzaG91bGQgYmUgY29uc2lkZXJl ZCBpbiB0aGUgZGVjaXNpb24gbWFraW5nIHByb2Nlc3MsIGNoYW5naW5nIGZyb20gSlNPTiB0byBD Qk9SIGVuY29kaW5nIGluY2x1ZGU6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDo1LjBwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MTIu MHB0O21hcmdpbi1sZWZ0Oi41aW47bGluZS1oZWlnaHQ6MTkuMnB0Ij4NCjxzcGFuIHN0eWxlPSJm b250LXNpemU6IDEwcHQ7IGNvbG9yOiByZ2IoNTEsIDUxLCA1MSk7Ij7Ctzwvc3Bhbj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjcuMHB0O2NvbG9yOiMzMzMzMzMiPiZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOw0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBz YW5zLXNlcmlmOyBjb2xvcjogcmdiKDUxLCA1MSwgNTEpOyI+TWFpbnRhaW4gdGhlIGN1cnJlbnQg Sk9TRSBwYXJhZGlnbXMgYW5kIGZvcm1hdHRpbmcgd2hlcmUgZmVhc2libGUuPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPHAgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDo1LjBwdDttYXJnaW4tcmln aHQ6MGluO21hcmdpbi1ib3R0b206MTIuMHB0O21hcmdpbi1sZWZ0Oi41aW47bGluZS1oZWlnaHQ6 MTkuMnB0Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGNvbG9yOiByZ2IoNTEsIDUx LCA1MSk7Ij7Ctzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2NvbG9yOiMzMzMz MzMiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTogSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDUxLCA1MSwgNTEp OyI+TWluaW1pemUgbWVzc2FnZSBzaXplLCBjb2RlIHNpemUsIGFuZCBjb21wdXRhdGlvbmFsIGNv bXBsZXhpdHkgdG8gc3VpdCBjb25zdHJhaW5lZCBlbnZpcm9ubWVudHMsIHdoZXJlIHRoaXMgaXMg ZXhwZWN0ZWQgdG8gJm5ic3A7YmUgdXNlZC48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OjUuMHB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRv bToxMi4wcHQ7bWFyZ2luLWxlZnQ6LjVpbjtsaW5lLWhlaWdodDoxOS4ycHQiPg0KPHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTogMTBwdDsgY29sb3I6IHJnYig1MSwgNTEsIDUxKTsiPsK3PC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LXNpemU6Ny4wcHQ7Y29sb3I6IzMzMzMzMyI+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7DQo8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRp Y2EsIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoNTEsIDUxLCA1MSk7Ij5JbXByb3ZlIHNlY3VyaXR5 PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDo1LjBw dDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206MTIuMHB0O21hcmdpbi1sZWZ0Oi41aW47 bGluZS1oZWlnaHQ6MTkuMnB0Ij4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEwcHQ7IGNvbG9y OiByZ2IoNTEsIDUxLCA1MSk7Ij7Ctzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0 O2NvbG9yOiMzMzMzMzMiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOw0KPC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LWZhbWlseTogSGVsdmV0aWNhLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdi KDUxLCA1MSwgNTEpOyI+UHJvdmlkZSBuZXcgZnVuY3Rpb25hbGl0eSBmb3IgYWRkaXRpb25hbCB1 c2UgY2FzZXMgdGhhdCB3ZXJlIG5vdCByZXF1aXJlZCBmb3IgSk9TRS4mbmJzcDs8L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPk9sZDo8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQt ZmFtaWx5OiBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoNTEsIDUxLCA1MSk7Ij5J c3N1ZXMgZGVhbGluZyB3aXRoIGtleSBtYW5hZ2VtZW50IGFuZCBiaW5kaW5nIG9mIGtleXMgdG8g aWRlbnRpdGllcyBhcmUgb3V0IG9mIHNjb3BlIGZvciB0aGUgd29ya2luZyBncm91cC48L3NwYW4+ PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+TmV3OjxvOnA+ PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZv bnQtZmFtaWx5OiBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoNTEsIDUxLCA1MSk7 Ij5LZXkgbWFuYWdlbWVudCBhbmQgYmluZGluZyBvZiBrZXlzIHRvIGlkZW50aXRpZXMgYXJlIG91 dCBvZiBzY29wZSBmb3IgdGhlIHdvcmtpbmcgZ3JvdXAuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5Ob3RlOiBJIGFtIGFzc3VtaW5nIHlv dSByZWFsbHkgd2FudCB0byBvdXQtb2Ygc2NvcGUgYWxsIGtleSBtYW5hZ2VtZW50IGFuZCBub3Qg anVzdCBpc3N1ZXM/PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5B bmQgSSBkb24ndCBzZWUgYW55IG5lZWQgdG8gdHdlYWsgdGhlIHJlc3Qgb2YgdGhlIHRleHQ6PG86 cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0O2xpbmUt aGVpZ2h0OjE5LjJwdCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIHNhbnMt c2VyaWY7IGNvbG9yOiByZ2IoNTEsIDUxLCA1MSk7Ij5UaGUgV29ya2luZyBncm91cCB3aWxsIGNv b3JkaW5hdGUgaXRzIHByb2dyZXNzIHdpdGggdGhlIEFDRSwgRElDRSBhbmQgQ09SRSB3b3JraW5n IGdyb3VwcyB0byBlbnN1cmUgdGhhdCB3ZSBhcmUgZnVsZmlsbGluZyB0aGUgbmVlZHMNCiBvZiB0 aGVzZSBjb25zdGl0dWVuY2llcy4gT3RoZXIgZ3JvdXBzIG1heSBiZSBhZGRlZCB0byB0aGlzIGxp c3QgYXMgdGhlIHNldCBvZiB1c2UgY2FzZXMgaXMgZXhwYW5kZWQuPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPHAgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0O2xpbmUtaGVpZ2h0OjE5LjJwdCI+ PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGNvbG9yOiBy Z2IoNTEsIDUxLCA1MSk7Ij5UaGUgV0cgd2lsbCBoYXZlIHR3byBkZWxpdmVyYWJsZXM6PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHVsIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJjb2xvcjojMzMzMzMzO21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvO2xpbmUtaGVpZ2h0OjE5LjJwdDttc28tbGlzdDpsMCBsZXZlbDEgbGZv MSI+DQo8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYSwgc2Fucy1zZXJpZjsiPmEg c3RhbmRhcmRzLXRyYWNrIHNwZWNpZmljYXRpb24gY292ZXJpbmcgdGhlIHNhbWUgY3J5cHRvZ3Jh cGhpYyBmb3JtYXRzIGZyb20gSk9TRSwgd2l0aCBvcHRpbWl6YXRpb25zIGZvciBjb25zdHJhaW5l ZCBkZXZpY2UgcHJvY2Vzc2luZywgZXhwcmVzc2VkIGluIENCT1I7PC9zcGFuPjxvOnA+PC9vOnA+ PC9saT48bGkgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImNvbG9yOiMzMzMzMzM7bXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87bGluZS1oZWlnaHQ6MTku MnB0O21zby1saXN0OmwwIGxldmVsMSBsZm8xIj4NCjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTog SGVsdmV0aWNhLCBzYW5zLXNlcmlmOyI+cmVnaXN0cmF0aW9uIGZvciBhbGdvcml0aG1zIChzdWNo IGFzIEFFUy1DQ00tOCkgdGhhdCBhcmUgYXBwcm9wcmlhdGUgZm9yIGNvbnN0cmFpbmVkIGVudmly b25tZW50cy48L3NwYW4+PG86cD48L286cD48L2xpPjwvdWw+DQo8cCBzdHlsZT0ibWFyZ2luLWJv dHRvbToxMi4wcHQ7bGluZS1oZWlnaHQ6MTkuMnB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 IEhlbHZldGljYSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYig1MSwgNTEsIDUxKTsiPlRoZSBXb3Jr aW5nIEdyb3VwIHdpbGwgdXNlIGEgd2lraSB0byB0cmFjayBkZXNpcmVkIHVzZSBjYXNlcyBmb3Ig aXRzIHdvcmssIGJ1dCBkb2VzIG5vdCBpbnRlbmQgdG8gcHVibGlzaCB0aGlzIGFzIGFuIFJGQy48 L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQ7bGlu ZS1oZWlnaHQ6MTkuMnB0Ij48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6IEhlbHZldGljYSwgc2Fu cy1zZXJpZjsgY29sb3I6IHJnYig1MSwgNTEsIDUxKTsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+SSdkIGxvdmUgaXQgaWYgeW91IGNhbiBrZWVw IHRvIHRoZSBtaWxlc3RvbmVzIHByb2plY3RlZCA6LSk8YnI+DQo8YnI+DQpUaGFua3MuPGJyPg0K S2F0aGxlZW48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPk9uIFR1ZSwgQXByIDIxLCAyMDE1IGF0IDY6MzIgUE0sIEppbSBTY2hhYWQgJmx0 OzxhIGhyZWY9Im1haWx0bzppZXRmQGF1Z3VzdGNlbGxhcnMuY29tIiB0YXJnZXQ9Il9ibGFuayI+ aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj5UaGUgZGF0ZSBjaGFuZ2UgcHJvcG9zZWQgYnkgbWUgaGFzIGJl ZW4gbWVyZ2VkIGludG8gdGhlIGRyYWZ0Ljxicj4NCjxicj4NCkkgYmVsaWV2ZSB0aGF0IHdlIGNh biBub3cgY29uc2lkZXIgdGhlIGNoYXJ0ZXIgZGlzY3Vzc2lvbiB0byBiZSBjb21wbGV0ZSB1bmxl c3MgYW55b25lIGVsc2UgaGFzIGEgYmlnIGlzc3VlIHRoZXkgd2FudCB0byBicmluZyB1cC48YnI+ DQo8YnI+DQpLYXRobGVlbjombmJzcDsgQ2FuIHdlIGdldCB0aGlzIHRvIG1vdmUgZm9yd2FyZCBp bnRvIHRoZSBJRVNHPzxicj4NCjxicj4NCkppbTxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxicj4NCjxicj4NCiZndDsgLS0tLS1PcmlnaW5hbCBN ZXNzYWdlLS0tLS08YnI+DQomZ3Q7IEZyb206IENvc2UgW21haWx0bzo8YSBocmVmPSJtYWlsdG86 Y29zZS1ib3VuY2VzQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+Y29zZS1ib3VuY2VzQGlldGYu b3JnPC9hPl0gT24gQmVoYWxmIE9mIEthdGhsZWVuIE1vcmlhcnR5PGJyPg0KJmd0OyBTZW50OiBU dWVzZGF5LCBBcHJpbCAxNCwgMjAxNSA3OjE3IFBNPGJyPg0KJmd0OyBUbzogSmltIFNjaGFhZDxi cj4NCiZndDsgQ2M6IEtlcGVuZyBMaTsgUGF1bCBIb2ZmbWFuOyA8YSBocmVmPSJtYWlsdG86Y29z ZUBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmNvc2VAaWV0Zi5vcmc8L2E+PGJyPg0KJmd0OyBT dWJqZWN0OiBSZTogW0Nvc2VdIENoYXJ0ZXIgU3RhdGU8YnI+DQomZ3Q7PGJyPg0KJmd0Ozxicj4N CiZndDs8YnI+DQomZ3Q7IFNlbnQgZnJvbSBteSBpUGhvbmU8YnI+DQomZ3Q7PGJyPg0KJmd0OyAm Z3Q7IE9uIEFwciAxNCwgMjAxNSwgYXQgMTA6MTAgUE0sICZxdW90O0ppbSBTY2hhYWQmcXVvdDsg Jmx0OzxhIGhyZWY9Im1haWx0bzppZXRmQGF1Z3VzdGNlbGxhcnMuY29tIiB0YXJnZXQ9Il9ibGFu ayI+aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbTwvYT4mZ3Q7PGJyPg0KJmd0OyB3cm90ZTo8YnI+DQom Z3Q7ICZndDs8YnI+DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDsmZ3Q7 IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tPGJyPg0KJmd0OyAmZ3Q7Jmd0OyBGcm9tOiBDb3Nl IFttYWlsdG86PGEgaHJlZj0ibWFpbHRvOmNvc2UtYm91bmNlc0BpZXRmLm9yZyIgdGFyZ2V0PSJf YmxhbmsiPmNvc2UtYm91bmNlc0BpZXRmLm9yZzwvYT5dIE9uIEJlaGFsZiBPZiBLZXBlbmcgTGk8 YnI+DQomZ3Q7ICZndDsmZ3Q7IFNlbnQ6IFR1ZXNkYXksIEFwcmlsIDE0LCAyMDE1IDY6NTkgUE08 YnI+DQomZ3Q7ICZndDsmZ3Q7IFRvOiBQYXVsIEhvZmZtYW47IEppbSBTY2hhYWQ8YnI+DQomZ3Q7 ICZndDsmZ3Q7IENjOiA8YSBocmVmPSJtYWlsdG86Y29zZUBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxh bmsiPmNvc2VAaWV0Zi5vcmc8L2E+PGJyPg0KJmd0OyAmZ3Q7Jmd0OyBTdWJqZWN0OiBSZTogW0Nv c2VdIENoYXJ0ZXIgU3RhdGU8YnI+DQomZ3Q7ICZndDsmZ3Q7PGJyPg0KJmd0OyAmZ3Q7Jmd0OyBU aGFua3MgUGF1bC48YnI+DQomZ3Q7ICZndDsmZ3Q7PGJyPg0KJmd0OyAmZ3Q7Jmd0OyBUaGVyZSBh cmUgdHdvIG90aGVyIGNoYW5nZXMgd2UgbWlnaHQgd2FudCB0byBpbmNvcnBvcmF0ZTo8YnI+DQom Z3Q7ICZndDsmZ3Q7PGJyPg0KJmd0OyAmZ3Q7Jmd0OyAxKSBQcm9wb3NhbCBmcm9tIEdvcmFuOjxi cj4NCiZndDsgJmd0OyZndDsgPGEgaHJlZj0iaHR0cDovL3d3dy5pZXRmLm9yZy9tYWlsLWFyY2hp dmUvd2ViL2Nvc2UvY3VycmVudC9tc2cwMDAyNy5odG1sIiB0YXJnZXQ9Il9ibGFuayI+DQpodHRw Oi8vd3d3LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIvY29zZS9jdXJyZW50L21zZzAwMDI3Lmh0 bWw8L2E+PGJyPg0KJmd0OyAmZ3Q7Jmd0Ozxicj4NCiZndDsgJmd0OyZndDsgT0xEOjxicj4NCiZn dDsgJmd0OyZndDsgJnF1b3Q7YSBzdGFuZGFyZHMtdHJhY2sgc3BlY2lmaWNhdGlvbiBjb3Zlcmlu ZyB0aGUgc2FtZSBjcnlwdG9ncmFwaGljPGJyPg0KJmd0OyAmZ3Q7Jmd0OyBmb3JtYXRzPGJyPg0K Jmd0OyAmZ3Q7IGZyb208YnI+DQomZ3Q7ICZndDsmZ3Q7IEpPU0UsIGV4cHJlc3NlZCBpbiBDQk9S JnF1b3Q7PGJyPg0KJmd0OyAmZ3Q7Jmd0Ozxicj4NCiZndDsgJmd0OyZndDsgTkVXOjxicj4NCiZn dDsgJmd0OyZndDsgJnF1b3Q7YSBzdGFuZGFyZHMtdHJhY2sgc3BlY2lmaWNhdGlvbiBjb3Zlcmlu ZyB0aGUgc2FtZSBjcnlwdG9ncmFwaGljPGJyPg0KJmd0OyAmZ3Q7Jmd0OyBmb3JtYXRzPGJyPg0K Jmd0OyAmZ3Q7IGZyb208YnI+DQomZ3Q7ICZndDsmZ3Q7IEpPU0UgYW5kIG9wdGltaXphdGlvbnMg Zm9yIGNvbnN0cmFpbmVkIGRldmljZSBwcm9jZXNzaW5nLCBleHByZXNzZWQ8YnI+DQomZ3Q7ICZn dDsmZ3Q7IGluPGJyPg0KJmd0OyAmZ3Q7IENCT1I8YnI+DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZn dDsgSSBhbSBhZ25vc3RpYyBhYm91dCBpbmNsdWRpbmcgdGhpcyBjaGFuZ2UuJm5ic3A7IFdlIG5v dyBhcmUgbXVjaCBtb3JlPGJyPg0KJmd0OyAmZ3Q7IGNvbnN0cmFpbmVkIGRldmljZSBmb2N1c2Vk IGxhdGVyIHNvIGl0IG1pZ2h0IG5vdCBiZSBuZWVkZWQuPGJyPg0KJmd0OyAmZ3Q7PGJyPg0KJmd0 OyAmZ3Q7Jmd0Ozxicj4NCiZndDsgJmd0OyZndDsgKDIpIFByb3Bvc2FsIGZyb20gS2F0aGxlZW46 PGJyPg0KJmd0OyAmZ3Q7Jmd0Ozxicj4NCiZndDsgJmd0OyZndDsgPGEgaHJlZj0iaHR0cDovL3d3 dy5pZXRmLm9yZy9tYWlsLWFyY2hpdmUvd2ViL2Nvc2UvY3VycmVudC9tc2cwMDA3Ny5odG1sIiB0 YXJnZXQ9Il9ibGFuayI+DQpodHRwOi8vd3d3LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIvY29z ZS9jdXJyZW50L21zZzAwMDc3Lmh0bWw8L2E+PGJyPg0KJmd0OyAmZ3Q7Jmd0Ozxicj4NCiZndDsg Jmd0OyZndDsgT0xEOjxicj4NCiZndDsgJmd0OyZndDsgVGhlIFdvcmtpbmcgR3JvdXAgd2lsbCBj b29yZGluYXRlIGl0cyBwcm9ncmVzcyB3aXRoIHRoZSBBQ0UsIERJQ0UgYW5kPGJyPg0KJmd0OyAm Z3Q7Jmd0OyBDb1JFIHdvcmtpbmcgZ3JvdXBzIHRvIGVuc3VyZSB0aGF0IHdlIGFyZSBmdWxmaWxs aW5nIHRoZSBuZWVkcyBvZjxicj4NCiZndDsgJmd0OyZndDsgdGhlc2UgY29uc3RpdHVlbmNpZXMu PGJyPg0KJmd0OyAmZ3Q7Jmd0Ozxicj4NCiZndDsgJmd0OyZndDsgTkVXOjxicj4NCiZndDsgJmd0 OyZndDsgVGhlIFdvcmtpbmcgR3JvdXAgd2lsbCBjb29yZGluYXRlIGl0cyBwcm9ncmVzcyB3aXRo IHRoZSBBQ0UsIERJQ0UsPGJyPg0KJmd0OyAmZ3Q7Jmd0OyBDb1JFPGJyPg0KJmd0OyAmZ3Q7IGFu ZDxicj4NCiZndDsgJmd0OyZndDsgRElNRSB3b3JraW5nIGdyb3VwcyB0byBlbnN1cmUgdGhhdCB3 ZSBhcmUgZnVsZmlsbGluZyB0aGUgbmVlZHMgb2Y8YnI+DQomZ3Q7ICZndDsmZ3Q7IHRoZXNlIGNv bnN0aXR1ZW5jaWVzLjxicj4NCiZndDsgJmd0Ozxicj4NCiZndDsgJmd0OyBJIGFtIG5vdCBzdXJl IHRoYXQgRElNRSBpcyBhIHJlYXNvbmFibGUgZ3JvdXAgdG8gYmUgY29vcmRpbmF0aW5nIHdpdGg8 YnI+DQomZ3Q7ICZndDsgc2luY2UgaXQgaXMgbm90IGNsZWFyIHRoYXQgdGhpcyB3b3VsZCBiZSB0 aGUgc29sdXRpb24gc3BhY2UgdGhleSBhcmU8YnI+DQomZ3Q7ICZndDsgZ29pbmcgdG8gb3BlcmF0 ZSBpbi4mbmJzcDsgSXQgaXMgdHJ1ZSB0aGF0IHRoaXMgbmVlZCBzb21ldGhpbmcgYWxvbmcgdGhl c2U8YnI+DQomZ3Q7ICZndDsgbGluZXMsIGJ1dCB3aGF0IHRoZXkgbmVlZCBmaXJzdCBpcyB0byBn ZXQgc29tZW9uZSB3aG8gaGFzIGdvb2Q8YnI+DQomZ3Q7ICZndDsga25vd2xlZGdlIG9mIHdoYXQg Y2FuIGJlIGRvbmUgaW4gdGhlIGdyb3VwIGZpcnN0LiZuYnNwOyBHaXZlbiB0aGF0IHRoaXMgaXM8 YnI+DQomZ3Q7ICZndDsgbWFqb3IgKHRlbGVjb20pIHZlbmRvcnMsIHVzaW5nIENNUyBtaWdodCBi ZSBhIGJldHRlciBmaXQgZm9yIHRoaXM8YnI+DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDsgVGhl IG90aGVyIHF1ZXN0aW9uIGlmIHdlIGV4cGFuZCB0aGlzIGxpc3QgaGVyZSByYXRoZXIgdGhhbiBp biB0aGUgd2lraTxicj4NCiZndDsgJmd0OyBpcyB0aGUgc2V0IG9mIGdyb3VwcyB0aGF0IFJlbmUg U3RydWlrIHRob3VnaCB0aGF0IG1pZ2h0IGJlIGluY2x1ZGVkPGJyPg0KJmd0OyAmZ3Q7IGhlcmUg c3VjaCBhcyAmcXVvdDs2VGlTQ0gsIDZsbywgUm9MTCwgZXRjJnF1b3Q7IHdoaWNoIHNlZW0gdG8g YmUgbXVjaCBjbG9zZXIgdG88YnI+DQomZ3Q7ICZndDsgdGhlIHR5cGVzIG9mIGdyb3VwcyB0aGF0 IG1pZ2h0IHVzZSB0aGlzIHNwZWNpZmljYXRpb24gZ29pbmcgZm9yd2FyZC48YnI+DQomZ3Q7ICZn dDs8YnI+DQomZ3Q7ICZndDsgQXQgdGhpcyBwb2ludCwgSSB0aGluayBJIHdvdWxkIGdvIHdpdGgg dGhlIGxpc3Qgd2UgaGF2ZSBhbmQgc3RhcnQ8YnI+DQomZ3Q7ICZndDsgYWRkaW5nIG1vcmUgZ3Jv dXBzIHRvIHRoZSB3aWtpLjxicj4NCiZndDs8YnI+DQomZ3Q7IEknbSBmaW5lIHdpdGggdGhhdCBh cHByb2FjaC4mbmJzcDsgTXkgcG9pbnQgaW4gYnJpbmdpbmcgdXAgRElNRSB3YXMgbW9yZSB0aGF0 IHRoZXk8YnI+DQomZ3Q7IG5lZWQgaGVscCBhbmQgdGhpcyAqY291bGQqIGhlbHAgdGhlbSwgYnV0 IHdvcmsgbmVlZHMgdG8gYmUgZG9uZSB0byBmaWd1cmU8YnI+DQomZ3Q7IG91dCB3aGF0IHRoZXkg bmVlZCBhdCB0aGlzIHBvaW50LiZuYnNwOyBJIGJyb3VnaHQgaXQgdXAganVzdCBpbiBjYXNlIGl0 J3MgcmVsZXZhbnQgdG88YnI+DQomZ3Q7IENPU0UuPGJyPg0KJmd0Ozxicj4NCiZndDsgVGhhbmtz LDxicj4NCiZndDsgS2F0aGxlZW48YnI+DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDsgSmltPGJy Pg0KJmd0OyAmZ3Q7PGJyPg0KJmd0OyAmZ3Q7Jmd0Ozxicj4NCiZndDsgJmd0OyZndDs8YnI+DQom Z3Q7ICZndDsmZ3Q7IFRoYW5rcyw8YnI+DQomZ3Q7ICZndDsmZ3Q7PGJyPg0KJmd0OyAmZ3Q7Jmd0 OyBLaW5kIFJlZ2FyZHM8YnI+DQomZ3Q7ICZndDsmZ3Q7IEtlcGVuZzxicj4NCiZndDsgJmd0OyZn dDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PiZndDsgJmd0OyZndDsgPyAxNS80LzE1IDI6MzIgYW0sICZxdW90O1BhdWwgSG9mZm1hbiZxdW90 OyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnBhdWwuaG9mZm1hbkB2cG5jLm9yZyIgdGFyZ2V0PSJfYmxh bmsiPnBhdWwuaG9mZm1hbkB2cG5jLm9yZzwvYT4mZ3Q7ID8/OjxvOnA+PC9vOnA+PC9wPg0KPGRp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bWFyZ2luLWJvdHRvbToxMi4wcHQiPiZndDsgJmd0OyZndDs8YnI+DQomZ3Q7ICZndDsm Z3Q7Jmd0OyBPbiBBcHIgMTQsIDIwMTUsIGF0IDExOjIwIEFNLCBKaW0gU2NoYWFkICZsdDs8YSBo cmVmPSJtYWlsdG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmlldGZA YXVndXN0Y2VsbGFycy5jb208L2E+Jmd0Ozxicj4NCiZndDsgd3JvdGU6PGJyPg0KJmd0OyAmZ3Q7 Jmd0OyZndDsmZ3Q7PGJyPg0KJmd0OyAmZ3Q7Jmd0OyZndDsmZ3Q7IEkgd291bGQgbGlrZSB0byBn ZXQgUHVsbCBSZXF1ZXN0ICMyIHJvbGxlZCBpbnRvIHRoZSBkcmFmdCBjaGFydGVyPGJyPg0KJmd0 OyAmZ3Q7Jmd0OyZndDsmZ3Q7IGFuZCB0aGVuIEkgdGhpbmsgd2UgYXJlIHJlYWR5IHRvIHNlbmQg aXQgdG8gdGhlIEFEcyBhbmQgSUVTRyBmb3IgcmV2aWV3Ljxicj4NCiZndDsgJmd0OyZndDsmZ3Q7 Jmd0Ozxicj4NCiZndDsgJmd0OyZndDsmZ3Q7Jmd0OyBTaW5jZSBpdCBpcyBteSBwdWxsIHJlcXVl c3QgSSBoYXZlIG5vdCBkb25lIHRoZSBtZXJnZSBwcmVmZXJyaW5nPGJyPg0KJmd0OyAmZ3Q7Jmd0 OyZndDsmZ3Q7IHRoYXQgaXQgYmUgZG9uZSBieSBvbmUgb2YgdGhlIG90aGVycyB3aG8gaGF2ZSBw ZXJtaXNzaW9ucy4mbmJzcDsgSWYgSTxicj4NCiZndDsgJmd0OyZndDsmZ3Q7Jmd0OyBnZXQgYSBt ZXNzYWdlIHNheWluZyBkbyB0aGUgbWVyZ2UgcmVxdWVzdCBJIHdvdWxkIGJlIGhhcHB5IHRvIHB1 bGw8YnI+DQomZ3Q7ICZndDsmZ3Q7Jmd0OyZndDsgdGhlIHRyaWdnZXIgb24gaXQuPGJyPg0KJmd0 OyAmZ3Q7Jmd0OyZndDs8YnI+DQomZ3Q7ICZndDsmZ3Q7Jmd0OyBUaGVyZSBzZWVtZWQgdG8gYmUg Z2VuZXJhbCBhZ3JlZW1lbnQsIHNvIEkgYWNjZXB0ZWQgdGhlIHB1bGwgcmVxdWVzdC48YnI+DQom Z3Q7ICZndDsmZ3Q7Jmd0Ozxicj4NCiZndDsgJmd0OyZndDsmZ3Q7IEN1cnJlbnQgdmVyc2lvbiBp cyBhdDo8YnI+DQomZ3Q7ICZndDsmZ3Q7Jmd0OyA8YSBocmVmPSJodHRwczovL2dpdGh1Yi5jb20v Y29zZS1zcGVjL3dnLWNoYXJ0ZXIvYmxvYi9tYXN0ZXIvZHJhZnQtY2hhcnRlci5tZCIgdGFyZ2V0 PSJfYmxhbmsiPg0KaHR0cHM6Ly9naXRodWIuY29tL2Nvc2Utc3BlYy93Zy1jaGFydGVyL2Jsb2Iv bWFzdGVyL2RyYWZ0LWNoYXJ0ZXIubWQ8L2E+PGJyPg0KJmd0OyAmZ3Q7Jmd0OyZndDs8YnI+DQom Z3Q7ICZndDsmZ3Q7Jmd0OyAtLVBhdWwgSG9mZm1hbjxicj4NCiZndDsgJmd0OyZndDsmZ3Q7PGJy Pg0KJmd0OyAmZ3Q7Jmd0OyZndDsgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX188YnI+DQomZ3Q7ICZndDsmZ3Q7Jmd0OyBDb3NlIG1haWxpbmcgbGlzdDxicj4N CiZndDsgJmd0OyZndDsmZ3Q7IDxhIGhyZWY9Im1haWx0bzpDb3NlQGlldGYub3JnIiB0YXJnZXQ9 Il9ibGFuayI+Q29zZUBpZXRmLm9yZzwvYT48YnI+DQomZ3Q7ICZndDsmZ3Q7Jmd0OyA8YSBocmVm PSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UiIHRhcmdldD0iX2Js YW5rIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2U8L2E+PGJyPg0K Jmd0OyAmZ3Q7Jmd0Ozxicj4NCiZndDsgJmd0OyZndDs8YnI+DQomZ3Q7ICZndDsmZ3Q7IF9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0KJmd0OyAmZ3Q7 Jmd0OyBDb3NlIG1haWxpbmcgbGlzdDxicj4NCiZndDsgJmd0OyZndDsgPGEgaHJlZj0ibWFpbHRv OkNvc2VAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5Db3NlQGlldGYub3JnPC9hPjxicj4NCiZn dDsgJmd0OyZndDsgPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9jb3NlIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9jb3NlPC9hPjxicj4NCiZndDsgJmd0Ozxicj4NCiZndDsgJmd0OyBfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NCiZndDsgJmd0OyBDb3NlIG1h aWxpbmcgbGlzdDxicj4NCiZndDsgJmd0OyA8YSBocmVmPSJtYWlsdG86Q29zZUBpZXRmLm9yZyIg dGFyZ2V0PSJfYmxhbmsiPkNvc2VAaWV0Zi5vcmc8L2E+PGJyPg0KJmd0OyAmZ3Q7IDxhIGhyZWY9 Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY29zZSIgdGFyZ2V0PSJfYmxh bmsiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY29zZTwvYT48YnI+DQom Z3Q7PGJyPg0KJmd0OyBfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fXzxicj4NCiZndDsgQ29zZSBtYWlsaW5nIGxpc3Q8YnI+DQomZ3Q7IDxhIGhyZWY9Im1haWx0 bzpDb3NlQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+Q29zZUBpZXRmLm9yZzwvYT48YnI+DQom Z3Q7IDxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY29zZSIg dGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY29z ZTwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PGJyPg0KPGJyIGNsZWFyPSJhbGwiPg0KPG86cD48L286cD48L3A+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj4tLQ0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj5CZXN0IHJlZ2FyZHMsPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkthdGhsZWVuPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxiciBjbGVh cj0iYWxsIj4NCjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tLSA8bzpw PjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QmVzdCByZWdhcmRzLDxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+S2F0aGxl ZW48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Jsb2NrcXVvdGU+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJn aW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NCkNvc2UgbWFpbGluZyBs aXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRvOkNvc2VAaWV0Zi5vcmciPkNvc2VAaWV0Zi5vcmc8L2E+ PGJyPg0KPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3Nl Ij5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2U8L2E+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9zcGFuPg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_D15E4DA62DA5Agoranselanderericssoncom_-- From nobody Thu Apr 23 02:22:17 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 96CBE1A9023 for ; Thu, 23 Apr 2015 02:22:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.31 X-Spam-Level: X-Spam-Status: No, score=-3.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_37=0.6, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id G4InQqU1uxe4 for ; Thu, 23 Apr 2015 02:22:12 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 527251A8ABC for ; Thu, 23 Apr 2015 02:22:12 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 102E3BEE8; Thu, 23 Apr 2015 10:22:11 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wkndGtKiIFPu; Thu, 23 Apr 2015 10:22:07 +0100 (IST) Received: from [10.87.48.73] (unknown [86.42.29.198]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 64532BEB3; Thu, 23 Apr 2015 10:22:07 +0100 (IST) Message-ID: <5538B9BF.7090601@cs.tcd.ie> Date: Thu, 23 Apr 2015 10:22:07 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: =?UTF-8?B?R8O2cmFuIFNlbGFuZGVy?= , Jim Schaad References: <043201d076df$aa87b770$ff972650$@augustcellars.com> <50A4152F-E8F1-4890-AD03-065899ACC3BB@vpnc.org> <04c701d07721$69175fb0$3b461f10$@augustcellars.com> <566CD668-1A69-4D37-A04E-98025906759D@gmail.com> <013d01d07c83$01465190$03d2f4b0$@augustcellars.com> <022601d07d1b$34298670$9c7c9350$@augustcellars.com> <657EE3F5-CB06-4227-8E91-BFB3AB50233D@ericsson.com> <025a01d07d34$9f540740$ddfc15c0$@augustcellars.com> In-Reply-To: OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Charter State X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Apr 2015 09:22:15 -0000 Please be aware tha CFRG are currently very busy with selecting and documenting additional curves and associated signature mechanisms. If COSE needs CFRG help, you should really try to minimise what's needed. You could minimise that to zero by only using well-worn crypto. But if COSE needs to go beyond that (my I hope is it does not), then you ought be ready for delay - like any other group CFRG has limited bandwidth bounded by volunteer cycles. S. On 23/04/15 07:47, Göran Selander wrote: > > > In order to get the CFRG pointed in the right direction, it is necessary to give it some input. To that end I would suggest we start with doing a survey of three questions: > > > 1. What type of algorithms are needed? (key agreement, key transport, signature, hash, MAC, KDF, etc) > > For the use cases I have in mind: key transport, KDF, encryption/AEAD, hash and signature. But the main concern is around signatures. > > 1. ECDSA size of signature at 112-128 bits security is of the order of 60 bytes which is a lot compared to 8 bytes truncated MAC. It would be good to have a recommendation of a signature algorithm with message recovery, such as ECPVS (which has some IPR, some of which is expiring in a few years) or other. > > 2. A combined symmetric key encryption + signature is needed for point-multipoint settings. > > > > 2. What are the constraints we really care about? > > The charter says "Minimizing message size, code size and computational complexity”. In order of importance for signatures I’d say message size, computational complexity, code size. > > > > 3. What algorithms are we currently using today for those purposes? > > > The default algorithms are those specified by CoAP (secp256r1 for ECDSA) > > > > Jim > > > From: Göran Selander [mailto:goran.selander@ericsson.com] > Sent: Wednesday, April 22, 2015 12:24 PM > To: Kathleen Moriarty > Cc: Jim Schaad; cose@ietf.org > Subject: Re: [Cose] Charter State > > Looks fine. > > About the constrained-appropriate algorithms: is the intention to consult CFRG? If so, maybe would be good to get that ball rolling too soon. > > Thanks, > Göran > > On 22 apr 2015, at 18:54, Kathleen Moriarty > wrote: > Great, are others ok with the changes? If so, I'll get it rolling. > > On Wed, Apr 22, 2015 at 12:41 PM, Jim Schaad > wrote: > Be my guest to make the changes. > > Jim > > > From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kathleen Moriarty > Sent: Wednesday, April 22, 2015 9:27 AM > To: Jim Schaad > > Cc: cose@ietf.org > Subject: Re: [Cose] Charter State > > Hi, > > I am assuming the current charter text is at the link: > https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md > > I have some proposed changes that I think help with readability. Let me know if these are ok and I'll put in the charter for IESG review. All of the charter text is included, broken out by sections to show edits. In some cases, there is a Note: following a change with assumptions I was making in case they were not correct assumptions. > > Old:Concise Binary Object Representation (CBOR, RFC 7049) is a concise binary format for the serialization of data structured to an extended version of the JSON data model. One motivation for CBOR was to make this data model more amenable to constrained nodes and constrained node networks (RFC 7228). > New: > Concise Binary Object Representation (CBOR, RFC 7049) is a concise binary format for the serialization of data structured to an extended version of the JSON data model. One motivation for COSE was to reuse functionality from the JOSE working group using the CBOR data representation as it is more amenable to constrained nodes and constrained node networks (RFC 7228). > > Old: > The JOSE working group recently completed producing representations for cryptographic keys, message authentication (MACs), encryption, and digital signatures, using JSON representation. This working group will reuse the work done by JOSE, adapting it to the capabilities of CBOR. This will rely on the JOSE registries, which, where this provides additional efficiency, will be expanded with additional information. > New: > The JOSE working group recently completed producing representations for cryptographic keys, message authentication (MACs), encryption, and digital signatures, using JSON representation. COSE will rely on the JOSE registries, and will be expand them with additional information when necessary. > > Note: you may have other reasons besides efficiency. > > Old: > The resulting formats will not be cryptographically convertible from or to JOSE formats. This lack of a need for bit-for-bit compabitility which will enable some simplification in the adaptation process. > New: > The resulting formats will not be cryptographically convertible from or to JOSE formats. This lack of a need for bit-for-bit compatibility will enable some simplification in the adaptation process. > > Old: > > Criteria that should be considered on making decisions in changing from a JSON to a CBOR encoding are: > > · Keeping the current JOSE paradigms and formatting where feasible. > > · Minimizing message size, code size and computational complexity should be considered (for the constrained environments where we expect to use this). > > · Improving security > > · Providing new functionality that uses of JOSE did not require, but are required for the new use cases. > New: > > Criteria that should be considered in the decision making process, changing from JSON to CBOR encoding include: > > · Maintain the current JOSE paradigms and formatting where feasible. > > · Minimize message size, code size, and computational complexity to suit constrained environments, where this is expected to be used. > > · Improve security > > · Provide new functionality for additional use cases that were not required for JOSE. > Old: > Issues dealing with key management and binding of keys to identities are out of scope for the working group. > New: > Key management and binding of keys to identities are out of scope for the working group. > > Note: I am assuming you really want to out-of scope all key management and not just issues? > > And I don't see any need to tweak the rest of the text: > > The Working group will coordinate its progress with the ACE, DICE and CORE working groups to ensure that we are fulfilling the needs of these constituencies. Other groups may be added to this list as the set of use cases is expanded. > > The WG will have two deliverables: > > * a standards-track specification covering the same cryptographic formats from JOSE, with optimizations for constrained device processing, expressed in CBOR; > * registration for algorithms (such as AES-CCM-8) that are appropriate for constrained environments. > > The Working Group will use a wiki to track desired use cases for its work, but does not intend to publish this as an RFC. > > > I'd love it if you can keep to the milestones projected :-) > > Thanks. > Kathleen > > On Tue, Apr 21, 2015 at 6:32 PM, Jim Schaad > wrote: > The date change proposed by me has been merged into the draft. > > I believe that we can now consider the charter discussion to be complete unless anyone else has a big issue they want to bring up. > > Kathleen: Can we get this to move forward into the IESG? > > Jim > > >> -----Original Message----- >> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kathleen Moriarty >> Sent: Tuesday, April 14, 2015 7:17 PM >> To: Jim Schaad >> Cc: Kepeng Li; Paul Hoffman; cose@ietf.org >> Subject: Re: [Cose] Charter State >> >> >> >> Sent from my iPhone >> >>> On Apr 14, 2015, at 10:10 PM, "Jim Schaad" > >> wrote: >>> >>> >>> >>>> -----Original Message----- >>>> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kepeng Li >>>> Sent: Tuesday, April 14, 2015 6:59 PM >>>> To: Paul Hoffman; Jim Schaad >>>> Cc: cose@ietf.org >>>> Subject: Re: [Cose] Charter State >>>> >>>> Thanks Paul. >>>> >>>> There are two other changes we might want to incorporate: >>>> >>>> 1) Proposal from Goran: >>>> http://www.ietf.org/mail-archive/web/cose/current/msg00027.html >>>> >>>> OLD: >>>> "a standards-track specification covering the same cryptographic >>>> formats >>> from >>>> JOSE, expressed in CBOR" >>>> >>>> NEW: >>>> "a standards-track specification covering the same cryptographic >>>> formats >>> from >>>> JOSE and optimizations for constrained device processing, expressed >>>> in >>> CBOR >>> >>> I am agnostic about including this change. We now are much more >>> constrained device focused later so it might not be needed. >>> >>>> >>>> (2) Proposal from Kathleen: >>>> >>>> http://www.ietf.org/mail-archive/web/cose/current/msg00077.html >>>> >>>> OLD: >>>> The Working Group will coordinate its progress with the ACE, DICE and >>>> CoRE working groups to ensure that we are fulfilling the needs of >>>> these constituencies. >>>> >>>> NEW: >>>> The Working Group will coordinate its progress with the ACE, DICE, >>>> CoRE >>> and >>>> DIME working groups to ensure that we are fulfilling the needs of >>>> these constituencies. >>> >>> I am not sure that DIME is a reasonable group to be coordinating with >>> since it is not clear that this would be the solution space they are >>> going to operate in. It is true that this need something along these >>> lines, but what they need first is to get someone who has good >>> knowledge of what can be done in the group first. Given that this is >>> major (telecom) vendors, using CMS might be a better fit for this >>> >>> The other question if we expand this list here rather than in the wiki >>> is the set of groups that Rene Struik though that might be included >>> here such as "6TiSCH, 6lo, RoLL, etc" which seem to be much closer to >>> the types of groups that might use this specification going forward. >>> >>> At this point, I think I would go with the list we have and start >>> adding more groups to the wiki. >> >> I'm fine with that approach. My point in bringing up DIME was more that they >> need help and this *could* help them, but work needs to be done to figure >> out what they need at this point. I brought it up just in case it's relevant to >> COSE. >> >> Thanks, >> Kathleen >>> >>> Jim >>> >>>> >>>> >>>> Thanks, >>>> >>>> Kind Regards >>>> Kepeng >>>> >>>> ? 15/4/15 2:32 am, "Paul Hoffman" > ??: >>>> >>>>> On Apr 14, 2015, at 11:20 AM, Jim Schaad > >> wrote: >>>>>> >>>>>> I would like to get Pull Request #2 rolled into the draft charter >>>>>> and then I think we are ready to send it to the ADs and IESG for review. >>>>>> >>>>>> Since it is my pull request I have not done the merge preferring >>>>>> that it be done by one of the others who have permissions. If I >>>>>> get a message saying do the merge request I would be happy to pull >>>>>> the trigger on it. >>>>> >>>>> There seemed to be general agreement, so I accepted the pull request. >>>>> >>>>> Current version is at: >>>>> https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md >>>>> >>>>> --Paul Hoffman >>>>> >>>>> _______________________________________________ >>>>> Cose mailing list >>>>> Cose@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/cose >>>> >>>> >>>> _______________________________________________ >>>> Cose mailing list >>>> Cose@ietf.org >>>> https://www.ietf.org/mailman/listinfo/cose >>> >>> _______________________________________________ >>> Cose mailing list >>> Cose@ietf.org >>> https://www.ietf.org/mailman/listinfo/cose >> >> _______________________________________________ >> Cose mailing list >> Cose@ietf.org >> https://www.ietf.org/mailman/listinfo/cose > > > > -- > > Best regards, > Kathleen > > > > -- > > Best regards, > Kathleen > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose > > > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose > From nobody Thu Apr 23 07:57:56 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 584011AC430 for ; Thu, 23 Apr 2015 07:57:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.289 X-Spam-Level: X-Spam-Status: No, score=-1.289 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_ORG=0.611] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KLbShh7OYWNp for ; Thu, 23 Apr 2015 07:57:53 -0700 (PDT) Received: from mail2.ihtfp.org (MAIL2.IHTFP.ORG [204.107.200.7]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7A0371AC418 for ; Thu, 23 Apr 2015 07:57:51 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail2.ihtfp.org (Postfix) with ESMTP id EF3EEE2039; Thu, 23 Apr 2015 10:57:49 -0400 (EDT) Received: from mail2.ihtfp.org ([127.0.0.1]) by localhost (mail2.ihtfp.org [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 29618-09; Thu, 23 Apr 2015 10:57:48 -0400 (EDT) Received: from securerf.ihtfp.org (unknown [IPv6:fe80::ea2a:eaff:fe7d:235]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mocana.ihtfp.org", Issuer "IHTFP Consulting Certification Authority" (verified OK)) by mail2.ihtfp.org (Postfix) with ESMTPS id 8A376E2035; Thu, 23 Apr 2015 10:57:48 -0400 (EDT) Received: (from warlord@localhost) by securerf.ihtfp.org (8.14.8/8.14.8/Submit) id t3NEvlUS028796; Thu, 23 Apr 2015 10:57:47 -0400 From: Derek Atkins To: "Jim Schaad" References: <017601d07cad$0f29f9e0$2d7deda0$@augustcellars.com> <024801d07d2d$6137c6b0$23a75410$@augustcellars.com> Date: Thu, 23 Apr 2015 10:57:47 -0400 In-Reply-To: <024801d07d2d$6137c6b0$23a75410$@augustcellars.com> (Jim Schaad's message of "Wed, 22 Apr 2015 11:51:44 -0700") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Virus-Scanned: Maia Mailguard 1.0.2a Archived-At: Cc: 'Derek Atkins' , 'cose' Subject: Re: [Cose] Issue: Use arrays for some containers X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Apr 2015 14:57:55 -0000 "Jim Schaad" writes: >> I believe it would be less code to use maps. > > OK - I am open to novel ways to write code and would love to see something > more efficient that the algorithms that I would instinctively use. Okay, let me recind my statement here -- the formats do already use Arrays in other contexts, so we wouldn't save code by being able to elide all array-parsing code. -derek -- Derek Atkins 617-623-3745 derek@ihtfp.com www.ihtfp.com Computer and Internet Security Consultant From nobody Fri Apr 24 05:23:46 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 253E41B29FC for ; Fri, 24 Apr 2015 05:23:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.299 X-Spam-Level: X-Spam-Status: No, score=-2.299 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WBM8ggsUJ00M for ; Fri, 24 Apr 2015 05:23:40 -0700 (PDT) Received: from smtp1.pacifier.net (smtp1.pacifier.net [64.255.237.171]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0CDE61AD2B2 for ; Fri, 24 Apr 2015 05:23:40 -0700 (PDT) Received: from Philemon (unknown [4.30.143.226]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp1.pacifier.net (Postfix) with ESMTPSA id ADE062CA16; Fri, 24 Apr 2015 05:23:37 -0700 (PDT) From: "Jim Schaad" To: =?UTF-8?Q?'G=C3=B6ran_Selander'?= Date: Fri, 24 Apr 2015 05:22:21 -0700 Message-ID: <03f601d07e89$503e1690$f0ba43b0$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_03F7_01D07E4E.A3E3F980" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdB+h/eINRzVF5dERLqXesXhzzM7rQ== Content-Language: en-us Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Algorithm Questions X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Apr 2015 12:23:45 -0000 This is a multipart message in MIME format. ------=_NextPart_000_03F7_01D07E4E.A3E3F980 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable =20 =20 From: G=C3=B6ran Selander [mailto:goran.selander@ericsson.com]=20 Sent: Wednesday, April 22, 2015 11:48 PM To: Jim Schaad Cc: cose@ietf.org Subject: Re: [Cose] Charter State =20 =20 =20 In order to get the CFRG pointed in the right direction, it is necessary = to give it some input. To that end I would suggest we start with doing = a survey of three questions: =20 1. What type of algorithms are needed? (key agreement, key = transport, signature, hash, MAC, KDF, etc) =20 For the use cases I have in mind: key transport, KDF, encryption/AEAD, = hash and signature. But the main concern is around signatures. =20 1. ECDSA size of signature at 112-128 bits security is of the order of = 60 bytes which is a lot compared to 8 bytes truncated MAC. It would be = good to have a recommendation of a signature algorithm with message = recovery, such as ECPVS (which has some IPR, some of which is expiring = in a few years) or other. =20 So basically ECDSA, and it=E2=80=99s variants, have a size of 2*|r|, = which comes to roughly 64 bytes for P-256. I looked at ECPVS, and for = the same level of security as the 8 byte truncated MAC I believe you are = looking at |r| + 8 or 40 bytes for P-256. It is a message size win, but = I am not sure it is as big of win as you originally thought it would be. = =20 =20 2. A combined symmetric key encryption + signature is needed for = point-multipoint settings.=20 =20 Please explain what you mean by point-multipoint settings. I am not = familiar with that term . (I probably know it as something else.) =20 2. What are the constraints we really care about? =20 The charter says "Minimizing message size, code size and computational = complexity=E2=80=9D. In order of importance for signatures I=E2=80=99d = say message size, computational complexity, code size. =20 I was thinking in broader terms. What you have listed above is more = along the lines of decision criteria but not constraints. A constraint = is =E2=80=93 We need a minimum of 64-bits of authentication tag for AEAD = algorithms. We need a minimum of X-bits for signature algorithms. We = need to have deterministic signature algorithms because our PRGNs are = not good enough. Minimal systems will only support hash and encrypt = mode block ciphers. =20 3. What algorithms are we currently using today for those purposes? =20 =20 The default algorithms are those specified by CoAP (secp256r1 for ECDSA) =20 Where? In a document that I can easily read? =20 =20 Jim =20 =20 From: G=C3=B6ran Selander [mailto:goran.selander@ericsson.com]=20 Sent: Wednesday, April 22, 2015 12:24 PM To: Kathleen Moriarty Cc: Jim Schaad; cose@ietf.org Subject: Re: [Cose] Charter State =20 Looks fine.=20 =20 About the constrained-appropriate algorithms: is the intention to = consult CFRG? If so, maybe would be good to get that ball rolling too = soon.=20 =20 Thanks, G=C3=B6ran On 22 apr 2015, at 18:54, Kathleen Moriarty = wrote: Great, are others ok with the changes? If so, I'll get it rolling. =20 On Wed, Apr 22, 2015 at 12:41 PM, Jim Schaad = wrote: Be my guest to make the changes. =20 Jim =20 =20 From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kathleen Moriarty Sent: Wednesday, April 22, 2015 9:27 AM To: Jim Schaad Cc: cose@ietf.org Subject: Re: [Cose] Charter State =20 Hi, =20 I am assuming the current charter text is at the link: https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md =20 I have some proposed changes that I think help with readability. Let me = know if these are ok and I'll put in the charter for IESG review. All = of the charter text is included, broken out by sections to show edits. = In some cases, there is a Note: following a change with assumptions I = was making in case they were not correct assumptions. =20 Old:Concise Binary Object Representation (CBOR, RFC 7049) is a concise = binary format for the serialization of data structured to an extended = version of the JSON data model. One motivation for CBOR was to make this = data model more amenable to constrained nodes and constrained node = networks (RFC 7228). New: Concise Binary Object Representation (CBOR, RFC 7049) is a concise = binary format for the serialization of data structured to an extended = version of the JSON data model. One motivation for COSE was to reuse = functionality from the JOSE working group using the CBOR data = representation as it is more amenable to constrained nodes and = constrained node networks (RFC 7228). =20 Old: The JOSE working group recently completed producing representations for = cryptographic keys, message authentication (MACs), encryption, and = digital signatures, using JSON representation. This working group will = reuse the work done by JOSE, adapting it to the capabilities of CBOR. = This will rely on the JOSE registries, which, where this provides = additional efficiency, will be expanded with additional information. New: The JOSE working group recently completed producing representations for = cryptographic keys, message authentication (MACs), encryption, and = digital signatures, using JSON representation. COSE will rely on the = JOSE registries, and will be expand them with additional information = when necessary. =20 Note: you may have other reasons besides efficiency. =20 Old: The resulting formats will not be cryptographically convertible from or = to JOSE formats. This lack of a need for bit-for-bit compabitility which = will enable some simplification in the adaptation process. New:=20 The resulting formats will not be cryptographically convertible from or = to JOSE formats. This lack of a need for bit-for-bit compatibility will = enable some simplification in the adaptation process. =20 Old: Criteria that should be considered on making decisions in changing from = a JSON to a CBOR encoding are: =C2=B7 Keeping the current JOSE paradigms and formatting where = feasible. =C2=B7 Minimizing message size, code size and computational = complexity should be considered (for the constrained environments where = we expect to use this). =C2=B7 Improving security =C2=B7 Providing new functionality that uses of JOSE did not = require, but are required for the new use cases. New:=20 Criteria that should be considered in the decision making process, = changing from JSON to CBOR encoding include: =C2=B7 Maintain the current JOSE paradigms and formatting where = feasible. =C2=B7 Minimize message size, code size, and computational = complexity to suit constrained environments, where this is expected to = be used. =C2=B7 Improve security =C2=B7 Provide new functionality for additional use cases that were = not required for JOSE.=20 Old: Issues dealing with key management and binding of keys to identities are = out of scope for the working group. New: Key management and binding of keys to identities are out of scope for = the working group. =20 Note: I am assuming you really want to out-of scope all key management = and not just issues? =20 And I don't see any need to tweak the rest of the text: The Working group will coordinate its progress with the ACE, DICE and = CORE working groups to ensure that we are fulfilling the needs of these = constituencies. Other groups may be added to this list as the set of use = cases is expanded. The WG will have two deliverables: * a standards-track specification covering the same cryptographic = formats from JOSE, with optimizations for constrained device processing, = expressed in CBOR; * registration for algorithms (such as AES-CCM-8) that are appropriate = for constrained environments. The Working Group will use a wiki to track desired use cases for its = work, but does not intend to publish this as an RFC. =20 I'd love it if you can keep to the milestones projected :-) Thanks. Kathleen =20 On Tue, Apr 21, 2015 at 6:32 PM, Jim Schaad = wrote: The date change proposed by me has been merged into the draft. I believe that we can now consider the charter discussion to be complete = unless anyone else has a big issue they want to bring up. Kathleen: Can we get this to move forward into the IESG? Jim > -----Original Message----- > From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kathleen = Moriarty > Sent: Tuesday, April 14, 2015 7:17 PM > To: Jim Schaad > Cc: Kepeng Li; Paul Hoffman; cose@ietf.org > Subject: Re: [Cose] Charter State > > > > Sent from my iPhone > > > On Apr 14, 2015, at 10:10 PM, "Jim Schaad" > wrote: > > > > > > > >> -----Original Message----- > >> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kepeng Li > >> Sent: Tuesday, April 14, 2015 6:59 PM > >> To: Paul Hoffman; Jim Schaad > >> Cc: cose@ietf.org > >> Subject: Re: [Cose] Charter State > >> > >> Thanks Paul. > >> > >> There are two other changes we might want to incorporate: > >> > >> 1) Proposal from Goran: > >> http://www.ietf.org/mail-archive/web/cose/current/msg00027.html > >> > >> OLD: > >> "a standards-track specification covering the same cryptographic > >> formats > > from > >> JOSE, expressed in CBOR" > >> > >> NEW: > >> "a standards-track specification covering the same cryptographic > >> formats > > from > >> JOSE and optimizations for constrained device processing, expressed > >> in > > CBOR > > > > I am agnostic about including this change. We now are much more > > constrained device focused later so it might not be needed. > > > >> > >> (2) Proposal from Kathleen: > >> > >> http://www.ietf.org/mail-archive/web/cose/current/msg00077.html > >> > >> OLD: > >> The Working Group will coordinate its progress with the ACE, DICE = and > >> CoRE working groups to ensure that we are fulfilling the needs of > >> these constituencies. > >> > >> NEW: > >> The Working Group will coordinate its progress with the ACE, DICE, > >> CoRE > > and > >> DIME working groups to ensure that we are fulfilling the needs of > >> these constituencies. > > > > I am not sure that DIME is a reasonable group to be coordinating = with > > since it is not clear that this would be the solution space they are > > going to operate in. It is true that this need something along = these > > lines, but what they need first is to get someone who has good > > knowledge of what can be done in the group first. Given that this = is > > major (telecom) vendors, using CMS might be a better fit for this > > > > The other question if we expand this list here rather than in the = wiki > > is the set of groups that Rene Struik though that might be included > > here such as "6TiSCH, 6lo, RoLL, etc" which seem to be much closer = to > > the types of groups that might use this specification going forward. > > > > At this point, I think I would go with the list we have and start > > adding more groups to the wiki. > > I'm fine with that approach. My point in bringing up DIME was more = that they > need help and this *could* help them, but work needs to be done to = figure > out what they need at this point. I brought it up just in case it's = relevant to > COSE. > > Thanks, > Kathleen > > > > Jim > > > >> > >> > >> Thanks, > >> > >> Kind Regards > >> Kepeng > >> > >> ? 15/4/15 2:32 am, "Paul Hoffman" ??: > >> > >>> On Apr 14, 2015, at 11:20 AM, Jim Schaad > wrote: > >>>> > >>>> I would like to get Pull Request #2 rolled into the draft charter > >>>> and then I think we are ready to send it to the ADs and IESG for = review. > >>>> > >>>> Since it is my pull request I have not done the merge preferring > >>>> that it be done by one of the others who have permissions. If I > >>>> get a message saying do the merge request I would be happy to = pull > >>>> the trigger on it. > >>> > >>> There seemed to be general agreement, so I accepted the pull = request. > >>> > >>> Current version is at: > >>> = https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md > >>> > >>> --Paul Hoffman > >>> > >>> _______________________________________________ > >>> Cose mailing list > >>> Cose@ietf.org > >>> https://www.ietf.org/mailman/listinfo/cose > >> > >> > >> _______________________________________________ > >> Cose mailing list > >> Cose@ietf.org > >> https://www.ietf.org/mailman/listinfo/cose > > > > _______________________________________________ > > Cose mailing list > > Cose@ietf.org > > https://www.ietf.org/mailman/listinfo/cose > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose =20 --=20 =20 Best regards, Kathleen =20 --=20 =20 Best regards, Kathleen _______________________________________________ Cose mailing list Cose@ietf.org https://www.ietf.org/mailman/listinfo/cose ------=_NextPart_000_03F7_01D07E4E.A3E3F980 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable

     

     

    From:= = G=C3=B6ran Selander [mailto:goran.selander@ericsson.com] =
    Sent: Wednesday, April 22, 2015 11:48 PM
    To: Jim = Schaad
    Cc: cose@ietf.org
    Subject: Re: [Cose] Charter = State

     

     

     

    In order to get the CFRG pointed in the right direction, it is = necessary to give it some input.   To that end I would suggest = we start with doing a survey of three questions:

     

    1.      =  What type of algorithms are needed?  (key agreement, key = transport, signature, hash, MAC, KDF, etc)

     

    For the use cases I have in mind: key transport, KDF, encryption/AEAD, = hash and signature. But the main concern is around = signatures.

     

    1. ECDSA size of signature at 112-128 bits security is of the order of = 60 bytes which is a lot compared to 8 bytes truncated MAC. It would be = good to have a recommendation of a signature algorithm with message = recovery, such as ECPVS (which has some IPR, some of which is expiring = in a few years) or other.

     

    S= o basically ECDSA, and it=E2=80=99s variants, have a size of 2*|r|, = which comes to roughly 64 bytes for P-256.=C2=A0 I looked at ECPVS, and = for the same level of security as the 8 byte truncated MAC I believe you = are looking at |r| + 8 or 40 bytes for P-256.=C2=A0 It is a message size = win, but I am not sure it is as big of win as you originally thought it = would be.=C2=A0

     

    2. A combined symmetric key encryption + signature is needed for = point-multipoint settings. 

     

    P= lease explain what you mean by point-multipoint settings.=C2=A0 I am not = familiar with that term .=C2=A0 (I probably know it as something = else.)

     

    2.      = What are the constraints we really care about?

     

    The charter says "Minimizing message size, code size and = computational complexity=E2=80=9D.  In order of importance for = signatures I=E2=80=99d say message size, computational complexity, code = size.

     

    I= was thinking in broader terms.=C2=A0 What you have listed above is more = along the lines of decision criteria but not constraints.=C2=A0=C2=A0 A = constraint is =E2=80=93 We need a minimum of 64-bits of authentication = tag for AEAD algorithms.=C2=A0 We need a minimum of X-bits for signature = algorithms.=C2=A0 We need to have deterministic signature algorithms = because our PRGNs are not good enough.=C2=A0 Minimal systems will only = support hash and encrypt mode block = ciphers.

     

    3.      = What algorithms are we currently using today for those = purposes?

     

     

    The default algorithms are those specified by CoAP (secp256r1 for = ECDSA)

     

    W= here?=C2=A0 In a document that I can easily = read?

     

     

    Jim

     

     

    = From:= G=C3=B6ran Selander [mailto:goran.selander@ericsso= n.com]
    Sent: Wednesday, April 22, 2015 12:24 = PM
    To: Kathleen Moriarty
    Cc: Jim Schaad; cose@ietf.org
    Subject: Re: = [Cose] Charter State

     

    Looks = fine. 

     

    About the = constrained-appropriate algorithms: is the intention to consult CFRG? If = so, maybe would be good to get that ball rolling too = soon. 

     

    Thanks,

    G=C3=B6ran


    On 22 apr 2015, at 18:54, Kathleen Moriarty = <kathleen.moriarty.ietf@g= mail.com> wrote:

    Great, are others ok with = the changes?  If so, I'll get it = rolling.

     

    On Wed, Apr 22, 2015 at = 12:41 PM, Jim Schaad <ietf@augustcellars.com> = wrote:

    Be my guest to make the changes.

     

    Jim

     

     

    = From:= Cose [mailto:cose-bounces@ietf.org] On Behalf Of = Kathleen Moriarty
    Sent: Wednesday, April 22, 2015 9:27 = AM
    To: Jim Schaad


    Cc: cose@ietf.org
    Subject: Re: [Cose] = Charter State

     

    Hi,

     

    I am assuming the current charter text is at the = link:

     

    I have some proposed changes that I think help = with readability.  Let me know if these are ok and I'll put in the = charter for IESG review.  All of the charter text is included, = broken out by sections to show edits.  In some cases, there is a = Note: following a change with assumptions I was making in case they were = not correct assumptions.

     

    Old:Concise = Binary Object Representation (CBOR, RFC 7049) is a concise binary format = for the serialization of data structured to an extended version of the = JSON data model. One motivation for CBOR was to make this data model = more amenable to constrained nodes and constrained node networks (RFC = 7228).

    New:

    Concise = Binary Object Representation (CBOR, RFC 7049) is a concise binary format = for the serialization of data structured to an extended version of the = JSON data model. One motivation for COSE was to reuse functionality from = the JOSE working group using the CBOR data representation as it is more = amenable to constrained nodes and constrained node networks (RFC = 7228).

     

    Old:

    The JOSE = working group recently completed producing representations for = cryptographic keys, message authentication (MACs), encryption, and = digital signatures, using JSON representation. This working group will = reuse the work done by JOSE, adapting it to the capabilities of CBOR. = This will rely on the JOSE registries, which, where this provides = additional efficiency, will be expanded with additional = information.

    New:

    The JOSE = working group recently completed producing representations for = cryptographic keys, message authentication (MACs), encryption, and = digital signatures, using JSON representation. COSE will rely on the = JOSE registries, and will be expand them with additional information = when necessary.

     

    Note: you may have other reasons besides = efficiency.

     

    Old:

    The = resulting formats will not be cryptographically convertible from or to = JOSE formats. This lack of a need for bit-for-bit compabitility which = will enable some simplification in the adaptation process.

    New:

    The = resulting formats will not be cryptographically convertible from or to = JOSE formats. This lack of a need for = bit-for-bit compatibility will enable some simplification in = the adaptation process.

     

    Old:

    Criteria = that should be considered on making decisions in changing from a JSON to = a CBOR encoding are:

    =C2=B7      = Keeping the = current JOSE paradigms and formatting where feasible.

    =C2=B7      = Minimizing = message size, code size and computational complexity should be = considered (for the constrained environments where we expect to use = this).

    =C2=B7      = Improving = security

    =C2=B7      = Providing = new functionality that uses of JOSE did not require, but are required = for the new use cases.

    New:

    Criteria = that should be considered in the decision making process, changing from = JSON to CBOR encoding include:

    =C2=B7      = Maintain = the current JOSE paradigms and formatting where feasible.

    =C2=B7      = Minimize = message size, code size, and computational complexity to suit = constrained environments, where this is expected to  be = used.

    =C2=B7      = Improve = security

    =C2=B7      = Provide new = functionality for additional use cases that were not required for = JOSE. 

    Old:

    Issues = dealing with key management and binding of keys to identities are out of = scope for the working group.

    New:

    Key = management and binding of keys to identities are out of scope for the = working group.

     

    Note: I am assuming you really want to out-of = scope all key management and not just = issues?

     

    And I don't see any need to tweak the rest of the = text:

    The Working = group will coordinate its progress with the ACE, DICE and CORE working = groups to ensure that we are fulfilling the needs of these = constituencies. Other groups may be added to this list as the set of use = cases is expanded.

    The WG will = have two deliverables:

    • a standards-track = specification covering the same cryptographic formats from JOSE, with = optimizations for constrained device processing, expressed in = CBOR;
    • registration for = algorithms (such as AES-CCM-8) that are appropriate for constrained = environments.

    The Working = Group will use a wiki to track desired use cases for its work, but does = not intend to publish this as an RFC.

     

    I'd love it if you can keep to the milestones = projected = :-)

    Thanks.
    Kathleen

     

    On Tue, Apr 21, 2015 at 6:32 PM, Jim Schaad <ietf@augustcellars.com> = wrote:

    The date change proposed by me has been merged = into the draft.

    I believe that we can now consider the charter = discussion to be complete unless anyone else has a big issue they want = to bring up.

    Kathleen:  Can we get this to move forward into = the IESG?

    Jim



    > -----Original Message-----
    > = From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kathleen = Moriarty
    > Sent: Tuesday, April 14, 2015 7:17 PM
    > To: Jim = Schaad
    > Cc: Kepeng Li; Paul Hoffman; cose@ietf.org
    > Subject: Re: [Cose] Charter = State
    >
    >
    >
    > Sent from my = iPhone
    >
    > > On Apr 14, 2015, at 10:10 PM, "Jim = Schaad" <ietf@augustcellars.com>
    > wrote:
    > = >
    > >
    > >
    > >> -----Original = Message-----
    > >> From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Kepeng = Li
    > >> Sent: Tuesday, April 14, 2015 6:59 PM
    > = >> To: Paul Hoffman; Jim Schaad
    > >> Cc: cose@ietf.org
    > >> Subject: Re: [Cose] = Charter State
    > >>
    > >> Thanks Paul.
    > = >>
    > >> There are two other changes we might want to = incorporate:
    > >>
    > >> 1) Proposal from = Goran:
    > >> http://www.ietf.org/mail-archive/web/cose/current/msg00= 027.html
    > >>
    > >> OLD:
    > >> = "a standards-track specification covering the same = cryptographic
    > >> formats
    > > from
    > = >> JOSE, expressed in CBOR"
    > >>
    > >> = NEW:
    > >> "a standards-track specification covering the = same cryptographic
    > >> formats
    > > from
    > = >> JOSE and optimizations for constrained device processing, = expressed
    > >> in
    > > CBOR
    > >
    > = > I am agnostic about including this change.  We now are much = more
    > > constrained device focused later so it might not be = needed.
    > >
    > >>
    > >> (2) Proposal from = Kathleen:
    > >>
    > >> http://www.ietf.org/mail-archive/web/cose/current/msg00= 077.html
    > >>
    > >> OLD:
    > >> The = Working Group will coordinate its progress with the ACE, DICE = and
    > >> CoRE working groups to ensure that we are = fulfilling the needs of
    > >> these constituencies.
    > = >>
    > >> NEW:
    > >> The Working Group will = coordinate its progress with the ACE, DICE,
    > >> = CoRE
    > > and
    > >> DIME working groups to ensure = that we are fulfilling the needs of
    > >> these = constituencies.
    > >
    > > I am not sure that DIME is a = reasonable group to be coordinating with
    > > since it is not = clear that this would be the solution space they are
    > > going = to operate in.  It is true that this need something along = these
    > > lines, but what they need first is to get someone who = has good
    > > knowledge of what can be done in the group = first.  Given that this is
    > > major (telecom) vendors, = using CMS might be a better fit for this
    > >
    > > The = other question if we expand this list here rather than in the = wiki
    > > is the set of groups that Rene Struik though that = might be included
    > > here such as "6TiSCH, 6lo, RoLL, = etc" which seem to be much closer to
    > > the types of = groups that might use this specification going forward.
    > = >
    > > At this point, I think I would go with the list we = have and start
    > > adding more groups to the = wiki.
    >
    > I'm fine with that approach.  My point in = bringing up DIME was more that they
    > need help and this *could* = help them, but work needs to be done to figure
    > out what they = need at this point.  I brought it up just in case it's relevant = to
    > COSE.
    >
    > Thanks,
    > Kathleen
    > = >
    > > Jim
    > >
    > >>
    > = >>
    > >> Thanks,
    > >>
    > >> Kind = Regards
    > >> Kepeng
    > = >>

    > >> ? 15/4/15 2:32 am, "Paul = Hoffman" <paul.hoffman@vpnc.org> = ??:

    > >>
    > >>> On Apr 14, = 2015, at 11:20 AM, Jim Schaad <ietf@augustcellars.com>
    > wrote:
    > = >>>>
    > >>>> I would like to get Pull = Request #2 rolled into the draft charter
    > >>>> and = then I think we are ready to send it to the ADs and IESG for = review.
    > >>>>
    > >>>> Since it is my = pull request I have not done the merge preferring
    > = >>>> that it be done by one of the others who have = permissions.  If I
    > >>>> get a message saying do = the merge request I would be happy to pull
    > >>>> the = trigger on it.
    > >>>
    > >>> There seemed to = be general agreement, so I accepted the pull request.
    > = >>>
    > >>> Current version is at:
    > = >>> https://github.com/cose-spec/wg-charter/blob/master/dra= ft-charter.md
    > >>>
    > >>> --Paul = Hoffman
    > >>>
    > >>> = _______________________________________________
    > >>> = Cose mailing list
    > >>> Cose@ietf.org
    > >>> https://www.ietf.org/mailman/listinfo/cose
    > = >>
    > >>
    > >> = _______________________________________________
    > >> Cose = mailing list
    > >> Cose@ietf.org
    > >> https://www.ietf.org/mailman/listinfo/cose
    > = >
    > > = _______________________________________________
    > > Cose = mailing list
    > > Cose@ietf.org
    > > https://www.ietf.org/mailman/listinfo/cose
    ><= br>> _______________________________________________
    > Cose = mailing list
    > Cose@ietf.org
    > https://www.ietf.org/mailman/listinfo/cose



     

    --

     

    Best regards,

    Kathleen



     

    -- =

     

    Best = regards,

    Kathleen

    _______________________________________________
    = Cose mailing list
    Cose@ietf.org
    https://www.ietf.org/= mailman/listinfo/cose

    <= /div>
    ------=_NextPart_000_03F7_01D07E4E.A3E3F980-- From nobody Fri Apr 24 05:42:39 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 65AEB1B2DB5 for ; Fri, 24 Apr 2015 05:42:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.26 X-Spam-Level: X-Spam-Status: No, score=-2.26 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_LOW=-0.7, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tB6cnm0aUAxH for ; Fri, 24 Apr 2015 05:42:36 -0700 (PDT) Received: from outbox.sics.se (outbox.sics.se [193.10.64.137]) by ietfa.amsl.com (Postfix) with ESMTP id AF08D1B2DB8 for ; Fri, 24 Apr 2015 05:42:35 -0700 (PDT) Received: from e-mailfilter01.sunet.se (e-mailfilter01.sunet.se [192.36.171.201]) by outbox.sics.se (Postfix) with ESMTPS id 68ABE257 for ; Fri, 24 Apr 2015 14:42:33 +0200 (CEST) Received: from norm.sics.se (norm.sics.se [193.10.64.192]) by e-mailfilter01.sunet.se (8.14.4/8.14.4/Debian-4) with ESMTP id t3OCgWdT017861 (version=TLSv1/SSLv3 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for ; Fri, 24 Apr 2015 14:42:32 +0200 Received: from [192.168.0.108] (unknown [85.235.11.178]) by norm.sics.se (Postfix) with ESMTPSA id A98BC169 for ; Fri, 24 Apr 2015 14:42:32 +0200 (CEST) Message-ID: <553A3A37.1040908@sics.se> Date: Fri, 24 Apr 2015 14:42:31 +0200 From: Ludwig Seitz User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: cose@ietf.org References: <03f601d07e89$503e1690$f0ba43b0$@augustcellars.com> In-Reply-To: <03f601d07e89$503e1690$f0ba43b0$@augustcellars.com> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms030300010100070304010400" X-Bayes-Prob: 0.0001 (Score 0, tokens from: outbound, outbound-sics-se:default, sics-se:default, base:default, @@RPTN) X-p0f-Info: os=Linux 2.2.x-3.x, link=Ethernet or modem X-CanIt-Geo: =?UTF-8?Q?ip=3D85.235.11.178; _country=3DSE; _region=3DSk=C3=A5ne; _city=3DLund; _latitude=3D55.7028; _longitude=3D13.1927; _http://maps.google.com/maps=3Fq=3D55.7028,13.1927&z=3D6?= X-CanItPRO-Stream: outbound-sics-se:outbound (inherits from outbound-sics-se:default, sics-se:default, base:default) X-Canit-Stats-ID: 09OjMGwnL - 7dad2a8e1e12 - 20150424 X-Antispam-Training-Forget: https://canit.sunet.se/canit/b.php?i=09OjMGwnL&m=7dad2a8e1e12&t=20150424&c=f X-Antispam-Training-Nonspam: https://canit.sunet.se/canit/b.php?i=09OjMGwnL&m=7dad2a8e1e12&t=20150424&c=n X-Antispam-Training-Spam: https://canit.sunet.se/canit/b.php?i=09OjMGwnL&m=7dad2a8e1e12&t=20150424&c=s X-CanIt-Archive-Cluster: PfMRe/vJWMiXwM2YIH5BVExnUnw Received-SPF: neutral (e-mailfilter01.sunet.se: 85.235.11.178 is neither permitted nor denied by domain ludwig@sics.se) receiver=e-mailfilter01.sunet.se; client-ip=85.235.11.178; envelope-from=; helo=norm.sics.se; identity=mailfrom X-Scanned-By: CanIt (www . roaringpenguin . com) on 192.36.171.201 Archived-At: Subject: Re: [Cose] Algorithm Questions X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Apr 2015 12:42:38 -0000 This is a cryptographically signed message in MIME format. --------------ms030300010100070304010400 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: quoted-printable On 04/24/2015 02:22 PM, Jim Schaad wrote: > 2. A combined symmetric key encryption + signature is needed for > point-multipoint settings. > > Please explain what you mean by point-multipoint settings. I am not > familiar with that term . (I probably know it as something else.) > What G=F6ran means are for example publish-subscribe scenarios, where a=20 resource representation generated (and encrypted and signed) by one=20 publisher is distributed to multiple subscribers. Another example would be proxy-caches, serving several clients with the=20 same cached resource representation from one server (singed and=20 encrypted by that server). > > 3.What algorithms are we currently using today for those purposes? > > The default algorithms are those specified by CoAP (secp256r1 for ECDSA= ) > > Where? In a document that I can easily read? > RFC7252 section 9.1.3.1: " Implementations in these modes MUST support the mandatory-to- implement cipher suite TLS_PSK_WITH_AES_128_CCM_8 as specified in [RFC6655]." and section 9.1.3.2. "Implementations in RawPublicKey mode MUST support the=20 mandatory-to-implement cipher suite TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8=20 as specified in [RFC7251], [RFC5246], and [RFC4492]. The key used MUST=20 be ECDSA capable. The curve secp256r1 MUST be supported [RFC4492]; this = curve is equivalent to the NIST P-256 curve. ...." (and section 9.1.3.3 but that basically repeats the crypto requirements=20 from 9.1.3.2) Ludwig Seitz, PhD SICS Swedish ICT AB Ideon Science Park Building Beta 2 Scheelev=E4gen 17 SE-223 70 Lund Phone +46(0)70-349 92 51 http://www.sics.se --------------ms030300010100070304010400 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMVDCC BhgwggUAoAMCAQICAwyGmDANBgkqhkiG9w0BAQUFADCBjDELMAkGA1UEBhMCSUwxFjAUBgNV BAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRl IFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlh dGUgQ2xpZW50IENBMB4XDTE1MDEwODA4MzkwNloXDTE2MDEwOTIyNDEzMFowODEXMBUGA1UE AwwObHVkd2lnQHNpY3Muc2UxHTAbBgkqhkiG9w0BCQEWDmx1ZHdpZ0BzaWNzLnNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUHisC6rgXFsBHHBGo8ulz/cLX3gX5Ufhcwo rp+7djzMMuKPM1KOHq0bjWhmFe8ly8CzWdk2NS600t7IEBQWJiHLsdc12UqmNswQUpD7oqkR 1nRGT6leAHYTWapkR+nczZ2NxD+H7u4ZWVIZg0DFiTqtY8ghYHHYYy8BBoc/jHG78X4+JJAg s5XOa0gVl7W38vDvVpo14xhWEBGjzPk9WxWirqAF66PF+JEu2JD9LzFbpEq829SRXJMFB9wp oQNlH0UQ01/2sWCIBxPpHuEjxEF/V3Z/F2VsNTy4zvYrd+/MYO3w30F+bWQNZsMHEkTW1pEh iz7rQPWTBXoO8Fv0wQIDAQABo4IC1DCCAtAwCQYDVR0TBAIwADALBgNVHQ8EBAMCBLAwHQYD VR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMB0GA1UdDgQWBBTqvKspqEm0E4R1sgsABYKk 6xDJqDAfBgNVHSMEGDAWgBRTcu2SnODaywFcfH6WNU7y1LhRgjAZBgNVHREEEjAQgQ5sdWR3 aWdAc2ljcy5zZTCCAUwGA1UdIASCAUMwggE/MIIBOwYLKwYBBAGBtTcBAgMwggEqMC4GCCsG AQUFBwIBFiJodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRmMIH3BggrBgEFBQcC AjCB6jAnFiBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTADAgEBGoG+VGhpcyBj ZXJ0aWZpY2F0ZSB3YXMgaXNzdWVkIGFjY29yZGluZyB0byB0aGUgQ2xhc3MgMSBWYWxpZGF0 aW9uIHJlcXVpcmVtZW50cyBvZiB0aGUgU3RhcnRDb20gQ0EgcG9saWN5LCByZWxpYW5jZSBv bmx5IGZvciB0aGUgaW50ZW5kZWQgcHVycG9zZSBpbiBjb21wbGlhbmNlIG9mIHRoZSByZWx5 aW5nIHBhcnR5IG9ibGlnYXRpb25zLjA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vY3JsLnN0 YXJ0c3NsLmNvbS9jcnR1MS1jcmwuY3JsMIGOBggrBgEFBQcBAQSBgTB/MDkGCCsGAQUFBzAB hi1odHRwOi8vb2NzcC5zdGFydHNzbC5jb20vc3ViL2NsYXNzMS9jbGllbnQvY2EwQgYIKwYB BQUHMAKGNmh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL3N1Yi5jbGFzczEuY2xpZW50 LmNhLmNydDAjBgNVHRIEHDAahhhodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS8wDQYJKoZIhvcN AQEFBQADggEBAGXwFsbSfv4mMWqIk64CoxuR6ozo7J37igca7d9tpKIzVIp6xp7Zt+a+J9X3 1r4zgMRFnZJWQ5hy82W/fVDeG9i3NGMM6p7DNUrGjTbVHd11BQtbUOG9MSlyWKQbmt3Q1ElC f4SRLAQot5SPryLR2FTxQuFkMOrcDzVxNxnMgatOM2fAO8KS0H+wX+I7gC3pEnbg/eMqNgU+ Ktbc2y9naDNmLNLN65s8TT9xZyoQEn9S1oU8Xnh596OMu49Eccws8Ny+vAGESIHG4bqhMSjj rmDilL1Wj9nQahmBnID5oZD5g9s9KyqxiZIGNnowYYOpCrSeITZ1b7wg50dC8ySojnYwggY0 MIIEHKADAgECAgEeMA0GCSqGSIb3DQEBBQUAMH0xCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1T dGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWdu aW5nMSkwJwYDVQQDEyBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wNzEw MjQyMTAxNTVaFw0xNzEwMjQyMTAxNTVaMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3Rh cnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmlu ZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGll bnQgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCYPMzi3YGrEppC4Tq5a+ ijKDjKaIQZZVR63UbxIP6uq/I0fhCu+cQhoUfE6ERKKnu8zPf1Jwuk0tsvVCk6U9b+0UjM0d Lep3ZdE1gblK/1FwYT5Pipsu2yOMluLqwvsuz9/9f1+1PKHG/FaR/wpbfuIqu54qzHDYeqiU fsYzoVflR80DAC7hmJ+SmZnNTWyUGHJbBpA8Q89lGxahNvuryGaC/o2/ceD2uYDX9U8Eg5Dp IpGQdcbQeGarV04WgAUjjXX5r/2dabmtxWMZwhZna//jdiSyrrSMTGKkDiXm6/3/4ebfeZuC YKzN2P8O2F/Xe2AC/Y7zeEsnR7FOp+uXAgMBAAGjggGtMIIBqTAPBgNVHRMBAf8EBTADAQH/ MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUU3Ltkpzg2ssBXHx+ljVO8tS4UYIwHwYDVR0j BBgwFoAUTgvvGqRAW6UXaYcwyjRoQ9BBrvIwZgYIKwYBBQUHAQEEWjBYMCcGCCsGAQUFBzAB hhtodHRwOi8vb2NzcC5zdGFydHNzbC5jb20vY2EwLQYIKwYBBQUHMAKGIWh0dHA6Ly93d3cu c3RhcnRzc2wuY29tL3Nmc2NhLmNydDBbBgNVHR8EVDBSMCegJaAjhiFodHRwOi8vd3d3LnN0 YXJ0c3NsLmNvbS9zZnNjYS5jcmwwJ6AloCOGIWh0dHA6Ly9jcmwuc3RhcnRzc2wuY29tL3Nm c2NhLmNybDCBgAYDVR0gBHkwdzB1BgsrBgEEAYG1NwECATBmMC4GCCsGAQUFBwIBFiJodHRw Oi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRmMDQGCCsGAQUFBwIBFihodHRwOi8vd3d3 LnN0YXJ0c3NsLmNvbS9pbnRlcm1lZGlhdGUucGRmMA0GCSqGSIb3DQEBBQUAA4ICAQAKgwh9 eKssBly4Y4xerhy5I3dNoXHYfYa8PlVLL/qtXnkFgdtY1o95CfegFJTwqBBmf8pyTUnFsukD FUI22zF5bVHzuJ+GxhnSqN2sD1qetbYwBYK2iyYA5Pg7Er1A+hKMIzEzcduRkIMmCeUTyMyi kfbUFvIBivtvkR8ZFAk22BZy+pJfAoedO61HTz4qSfQoCRcLN5A0t4DkuVhTMXIzuQ8Cnykh ExD6x4e6ebIbrjZLb7L+ocR0y4YjCl/Pd4MXU91y0vTipgr/O75CDUHDRHCCKBVmz/Rzkc/b 970MEeHt5LC3NiWTgBSvrLEuVzBKM586YoRD9Dy3OHQgWI270g+5MYA8GfgI/EPT5G7xPbCD z+zjdH89PeR3U4So4lSXur6H6vp+m9TQXPF3a0LwZrp8MQ+Z77U1uL7TelWO5lApsbAonrqA SfTpaprFVkL4nyGH+NHST2ZJPWIBk81i6Vw0ny0qZW2Niy/QvVNKbb43A43ny076khXO7cNb BIRdJ/6qQNq9Bqb5C0Q5nEsFcj75oxQRqlKf6TcvGbjxkJh8BYtv9ePsXklAxtm8J7GCUBth HSQgepbkOexhJ0wP8imUkyiPHQ0GvEnd83129fZjoEhdGwXV27ioRKbj/cIq7JRXun0NbeY+ UdMYu9jGfIpDLtUUGSgsg2zMGs5R4jGCA90wggPZAgEBMIGUMIGMMQswCQYDVQQGEwJJTDEW MBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlm aWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVy bWVkaWF0ZSBDbGllbnQgQ0ECAwyGmDAJBgUrDgMCGgUAoIICHTAYBgkqhkiG9w0BCQMxCwYJ KoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNTA0MjQxMjQyMzFaMCMGCSqGSIb3DQEJBDEW BBQKkciA1tH+tZHPwa0lM6ZYLcadPzBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjAL BglghkgBZQMEAQIwCgYIKoZIhvcNAwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFA MAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEoMIGlBgkrBgEEAYI3EAQxgZcwgZQwgYwxCzAJBgNV BAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRh bCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAxIFByaW1h cnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQQIDDIaYMIGnBgsqhkiG9w0BCRACCzGBl6CBlDCB jDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3Vy ZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNz IDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgMMhpgwDQYJKoZIhvcNAQEBBQAE ggEAkj/cMSU72MaPwQaDb0sxbldcVvVot6HisVdLHbJsOCE2EDHfzOylAqKORZ2Wi7JG2y0M /k0VyGAuwq+K+ELaDcqIOlseAiv9CAJREoNcZp8XLbJQGDpPJleb5F7dR6xtfLuQHcmkQYOh FLfQaFJfCeoPrzzImKaStXDM+WyXvWffqpTmBnq7K/upnKDHdJxodyhI1ot1nrxj0gLsSCrf TnfsbeDPfcjxtoEW6fsQT2UDnUE0e1r/7lB85JNZY9vqFoyAm6DB3waWSbKyuuZ9hC8xTh2s 4z1oQ5/Kkv1kg4s9d2Unc0OfCqt6NbUAuKyCN3iHuQfPcWtUe9vJdtJbwgAAAAAAAA== --------------ms030300010100070304010400-- From nobody Fri Apr 24 07:24:04 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0196D1A034C for ; Fri, 24 Apr 2015 07:24:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.9 X-Spam-Level: X-Spam-Status: No, score=-3.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KqvVI6LUcdGI for ; Fri, 24 Apr 2015 07:24:00 -0700 (PDT) Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 26F121A0217 for ; Fri, 24 Apr 2015 07:23:57 -0700 (PDT) X-AuditID: c1b4fb30-f79996d000006ebb-23-553a51fb9866 Received: from ESESSHC006.ericsson.se (Unknown_Domain [153.88.253.124]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id 07.7D.28347.BF15A355; Fri, 24 Apr 2015 16:23:56 +0200 (CEST) Received: from ESESSMB303.ericsson.se ([169.254.3.19]) by ESESSHC006.ericsson.se ([153.88.183.36]) with mapi id 14.03.0210.002; Fri, 24 Apr 2015 16:23:55 +0200 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Jim Schaad Thread-Topic: [Cose] Algorithm Questions Thread-Index: AdB+h/eINRzVF5dERLqXesXhzzM7rQAElNUA Date: Fri, 24 Apr 2015 14:23:55 +0000 Message-ID: References: <03f601d07e89$503e1690$f0ba43b0$@augustcellars.com> In-Reply-To: <03f601d07e89$503e1690$f0ba43b0$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.7.141117 x-originating-ip: [153.88.183.146] Content-Type: multipart/alternative; boundary="_000_D16004982DD29goranselanderericssoncom_" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprNIsWRmVeSWpSXmKPExsUyM+Jvje6fQKtQg8tneCymbZ3KarF6+nc2 ByaPjXOms3ksWfKTKYApissmJTUnsyy1SN8ugStj74ZZjAWHpzBVXLzF1sC4oJepi5GTQ0LA RKLz7F1WCFtM4sK99WxdjFwcQgJHGSV+/foH5SxmlDh+5y4jSBWbgIvEg4ZHYN0iAuoSW1ff BLOZBZQlGjdcYgGxhYHi5zonsELUaEjsXfATqJcDyDaS+PY2CiTMIqAqsXjNY7BWXgELiW3d B8BahQTsJfYdfg8W5xRwkPhyYyLYGEag476fWgO1Slzi1pP5UA8ISCzZc54ZwhaVePn4H1i9 qICexMrrTWwQcSWJH2CncQD1xkpMv20JsVZQ4uTMJywTGMVmIZk6C6FqFpIqiLCmxPpd+hDV ihJTuh+yQ9gaEq1z5kLZ1hLLv+1jR1azgJFjFaNocWpxUm66kZFealFmcnFxfp5eXmrJJkZg bB7c8ttgB+PL546HGAU4GJV4eBcstgwVYk0sK67MPcQozcGiJM5rZ3woREggPbEkNTs1tSC1 KL6oNCe1+BAjEwenVAOjt3iljtTtDdKqi0+vux24jfd0fWzlssbds+YoP1mT3ftj27UXzzU/ Oh95J1xsPHvlNfudXGvO/7dRWCOy7sr+1O2h9xqMd23uevdLLtNmR366L6f1gt0mn5SOVLal lEoe45moZ8vtZOdwJOiS+hbWqm/fHz44cDHTKffR4bXGB+Xmpfn9tTuQp8RSnJFoqMVcVJwI AAHr5i6uAgAA Archived-At: Cc: "cose@ietf.org" Subject: Re: [Cose] Algorithm Questions X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Apr 2015 14:24:03 -0000 --_000_D16004982DD29goranselanderericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgSmltDQoNClRoYW5rcyBmb3IgZ29vZCBxdWVzdGlvbnMsIGFwb2xvZ2llcyBmb3Igbm90IGJl aW5nIGNsZWFyLiBMdWR3aWcgYWxyZWFkeSBhbnN3ZXJlZCBzb21lIG9mIHRoZSBxdWVzdGlvbnMs IG1vcmUgZGV0YWlscyBpbmxpbmUuDQoNCkZyb206IEppbSBTY2hhYWQgPGlldGZAYXVndXN0Y2Vs bGFycy5jb208bWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5jb20+Pg0KRGF0ZTogRnJpZGF5IDI0 IEFwcmlsIDIwMTUgMTQ6MjINClRvOiBHw7ZyYW4gU2VsYW5kZXIgPGdvcmFuLnNlbGFuZGVyQGVy aWNzc29uLmNvbTxtYWlsdG86Z29yYW4uc2VsYW5kZXJAZXJpY3Nzb24uY29tPj4NCkNjOiAiY29z ZUBpZXRmLm9yZzxtYWlsdG86Y29zZUBpZXRmLm9yZz4iIDxjb3NlQGlldGYub3JnPG1haWx0bzpj b3NlQGlldGYub3JnPj4NClN1YmplY3Q6IFJFOiBbQ29zZV0gQWxnb3JpdGhtIFF1ZXN0aW9ucw0K DQoNCg0KRnJvbTogR8O2cmFuIFNlbGFuZGVyIFttYWlsdG86Z29yYW4uc2VsYW5kZXJAZXJpY3Nz b24uY29tXQ0KU2VudDogV2VkbmVzZGF5LCBBcHJpbCAyMiwgMjAxNSAxMTo0OCBQTQ0KVG86IEpp bSBTY2hhYWQNCkNjOiBjb3NlQGlldGYub3JnPG1haWx0bzpjb3NlQGlldGYub3JnPg0KU3ViamVj dDogUmU6IFtDb3NlXSBDaGFydGVyIFN0YXRlDQoNCg0KDQpJbiBvcmRlciB0byBnZXQgdGhlIENG UkcgcG9pbnRlZCBpbiB0aGUgcmlnaHQgZGlyZWN0aW9uLCBpdCBpcyBuZWNlc3NhcnkgdG8gZ2l2 ZSBpdCBzb21lIGlucHV0LiAgIFRvIHRoYXQgZW5kIEkgd291bGQgc3VnZ2VzdCB3ZSBzdGFydCB3 aXRoIGRvaW5nIGEgc3VydmV5IG9mIHRocmVlIHF1ZXN0aW9uczoNCg0KDQoxLiAgICAgICBXaGF0 IHR5cGUgb2YgYWxnb3JpdGhtcyBhcmUgbmVlZGVkPyAgKGtleSBhZ3JlZW1lbnQsIGtleSB0cmFu c3BvcnQsIHNpZ25hdHVyZSwgaGFzaCwgTUFDLCBLREYsIGV0YykNCg0KRm9yIHRoZSB1c2UgY2Fz ZXMgSSBoYXZlIGluIG1pbmQ6IGtleSB0cmFuc3BvcnQsIEtERiwgZW5jcnlwdGlvbi9BRUFELCBo YXNoIGFuZCBzaWduYXR1cmUuIEJ1dCB0aGUgbWFpbiBjb25jZXJuIGlzIGFyb3VuZCBzaWduYXR1 cmVzLg0KDQoxLiBFQ0RTQSBzaXplIG9mIHNpZ25hdHVyZSBhdCAxMTItMTI4IGJpdHMgc2VjdXJp dHkgaXMgb2YgdGhlIG9yZGVyIG9mIDYwIGJ5dGVzIHdoaWNoIGlzIGEgbG90IGNvbXBhcmVkIHRv IDggYnl0ZXMgdHJ1bmNhdGVkIE1BQy4gSXQgd291bGQgYmUgZ29vZCB0byBoYXZlIGEgcmVjb21t ZW5kYXRpb24gb2YgYSBzaWduYXR1cmUgYWxnb3JpdGhtIHdpdGggbWVzc2FnZSByZWNvdmVyeSwg c3VjaCBhcyBFQ1BWUyAod2hpY2ggaGFzIHNvbWUgSVBSLCBzb21lIG9mIHdoaWNoIGlzIGV4cGly aW5nIGluIGEgZmV3IHllYXJzKSBvciBvdGhlci4NCg0KU28gYmFzaWNhbGx5IEVDRFNBLCBhbmQg aXTigJlzIHZhcmlhbnRzLCBoYXZlIGEgc2l6ZSBvZiAyKnxyfCwgd2hpY2ggY29tZXMgdG8gcm91 Z2hseSA2NCBieXRlcyBmb3IgUC0yNTYuICBJIGxvb2tlZCBhdCBFQ1BWUywgYW5kIGZvciB0aGUg c2FtZSBsZXZlbCBvZiBzZWN1cml0eSBhcyB0aGUgOCBieXRlIHRydW5jYXRlZCBNQUMgSSBiZWxp ZXZlIHlvdSBhcmUgbG9va2luZyBhdCB8cnwgKyA4IG9yIDQwIGJ5dGVzIGZvciBQLTI1Ni4gIEl0 IGlzIGEgbWVzc2FnZSBzaXplIHdpbiwgYnV0IEkgYW0gbm90IHN1cmUgaXQgaXMgYXMgYmlnIG9m IHdpbiBhcyB5b3Ugb3JpZ2luYWxseSB0aG91Z2h0IGl0IHdvdWxkIGJlLg0KDQoNCk5vLCB0aGlz IGlzIGFsc28gd2hhdCBJIHVuZGVyc3Rvb2QuIFRoZSBkaWZmZXJlbmNlIGJldHdlZW4gNDAgYW5k IDY0IGJ5dGVzIG92ZXJoZWFkIG1heSB3ZWxsIGJlIHRoYXQgYSBtZXNzYWdlIHN1cHBvcnRpbmcg dGhlIGZvcm1lciBmaXRzIGludG8gODAyLjE1LjQgd2l0aG91dCBmcmFnbWVudGF0aW9uIHdoZXJl YXMgdGhlIGxhdHRlciBkb2VzbuKAmXQuIChFbnRpcmUgODAyLjE1LjQgaGFzIGEgTVRVIG9mIDEy NyBieXRlcywgYnV0IGFkZGluZyB2YXJpb3VzIGhlYWRlcnMgKE1BQyBsYXllciwgNkxvV1BBTiwg VURQLCBDb0FQLCBDT1NFKSB0aGVyZSBoYXMgdG8gYmUgc29tZXRoaW5nIGxlZnQgZm9yIHBheWxv YWQuKQ0KDQoNCjIuIEEgY29tYmluZWQgc3ltbWV0cmljIGtleSBlbmNyeXB0aW9uICsgc2lnbmF0 dXJlIGlzIG5lZWRlZCBmb3IgcG9pbnQtbXVsdGlwb2ludCBzZXR0aW5ncy4NCg0KUGxlYXNlIGV4 cGxhaW4gd2hhdCB5b3UgbWVhbiBieSBwb2ludC1tdWx0aXBvaW50IHNldHRpbmdzLiAgSSBhbSBu b3QgZmFtaWxpYXIgd2l0aCB0aGF0IHRlcm0gLiAgKEkgcHJvYmFibHkga25vdyBpdCBhcyBzb21l dGhpbmcgZWxzZS4pDQoNCg0KQSBzaG9ydCBleHBsYW5hdGlvbiBpcyB1bmRlciDigJxQcm90ZWN0 aW9uIG9mIHJlc291cmNlIHJlcHJlc2VudGF0aW9u4oCdIGluDQpodHRwczovL2dpdGh1Yi5jb20v Y29zZS1zcGVjL3VzZS1jYXNlcy9ibG9iL21hc3Rlci91c2UtY2FzZXMubWQNCg0KVHdvIGV4YW1w bGVzIGFyZSBnaXZlbiBpbiBzZWN0aW9uIEQuMiBvZg0KaHR0cHM6Ly90b29scy5pZXRmLm9yZy9o dG1sL2RyYWZ0LXNlbGFuZGVyLWFjZS1vYmplY3Qtc2VjdXJpdHktMDENCg0KSW4gdGhlIGZpcnN0 IGV4YW1wbGUgKEQuMi4xKSB0aGVyZSBhcmUgdHdvIGNsaWVudHMgYWNjZXNzaW5nIHRoZSBzYW1l IHNlbnNvciBtZWFzdXJlbWVudCBmcm9tIGEgcHJveHksIHRvIGF2b2lkIGxvYWRpbmcgdGhlIHNl cnZlciB3aXRoIG11bHRpcGxlIHJlcXVlc3RzLiBJZiB0aGUgcHJveHkgaXNu4oCZdCB0cnVzdGVk IHdpdGggdGhlIHBsYWluIHRleHQgbWVhc3VyZW1lbnQsIHRoZSBtZXNzYWdlIG11c3QgYmUgZW5j cnlwdGVkIGFuZCBzaW5jZSB0aGVyZSBhcmUgbXVsdGlwbGUgY2xpZW50cyBhIHN5bW1ldHJpYyBl bmNyeXB0aW9uIGFsZ29yaXRobSBpcyBwcmVmZXJhYmxlLiBJZiB0aGUgY2xpZW50cyBkb2VzIG5v dCB0cnVzdCBlYWNoIG90aGVyLCB0aGUgbWVzc2FnZSBtdXN0IGJlIHNpZ25lZCB3aXRoIHRoZSBw cml2YXRlIGtleSBvZiB0aGUgc2VydmVyLg0KDQpUaGUgc2Vjb25kIGV4YW1wbGUgKEQuMi4yKSBp cyBzaW1pbGFyLCBhbHRob3VnaCB0aGVyZSBpcyBvbmx5IG9uZSBzdWJzY3JpYmVyIHZpc2libGUg aW4gdGhlIHNlcXVlbmNlIGRpYWdyYW0uDQoNCg0KDQoyLiAgICAgIFdoYXQgYXJlIHRoZSBjb25z dHJhaW50cyB3ZSByZWFsbHkgY2FyZSBhYm91dD8NCg0KVGhlIGNoYXJ0ZXIgc2F5cyAiTWluaW1p emluZyBtZXNzYWdlIHNpemUsIGNvZGUgc2l6ZSBhbmQgY29tcHV0YXRpb25hbCBjb21wbGV4aXR5 4oCdLiAgSW4gb3JkZXIgb2YgaW1wb3J0YW5jZSBmb3Igc2lnbmF0dXJlcyBJ4oCZZCBzYXkgbWVz c2FnZSBzaXplLCBjb21wdXRhdGlvbmFsIGNvbXBsZXhpdHksIGNvZGUgc2l6ZS4NCg0KSSB3YXMg dGhpbmtpbmcgaW4gYnJvYWRlciB0ZXJtcy4gIFdoYXQgeW91IGhhdmUgbGlzdGVkIGFib3ZlIGlz IG1vcmUgYWxvbmcgdGhlIGxpbmVzIG9mIGRlY2lzaW9uIGNyaXRlcmlhIGJ1dCBub3QgY29uc3Ry YWludHMuICAgQSBjb25zdHJhaW50IGlzIOKAkyBXZSBuZWVkIGEgbWluaW11bSBvZiA2NC1iaXRz IG9mIGF1dGhlbnRpY2F0aW9uIHRhZyBmb3IgQUVBRCBhbGdvcml0aG1zLiAgV2UgbmVlZCBhIG1p bmltdW0gb2YgWC1iaXRzIGZvciBzaWduYXR1cmUgYWxnb3JpdGhtcy4gIFdlIG5lZWQgdG8gaGF2 ZSBkZXRlcm1pbmlzdGljIHNpZ25hdHVyZSBhbGdvcml0aG1zIGJlY2F1c2Ugb3VyIFBSR05zIGFy ZSBub3QgZ29vZCBlbm91Z2guICBNaW5pbWFsIHN5c3RlbXMgd2lsbCBvbmx5IHN1cHBvcnQgaGFz aCBhbmQgZW5jcnlwdCBtb2RlIGJsb2NrIGNpcGhlcnMuDQoNCg0KDQpPSywgSSBzZWUgd2hhdCB5 b3UgbWVhbi4gTXVjaCBvZiB0aGlzIGRlcGVuZHMgaW4gZ2VuZXJhbCBvbiBJb1QgYXBwbGljYXRp b24gYW5kIHdoYXQgQ2xhc3Mgb2YgZGV2aWNlIGlzIGFzc3VtZWQgKFJGQzcyMjgsIFRhYmxlIDEp LiBKdXN0IHRvIGNvbW1lbnQgb24gdGhlIHNwZWNpZmljIGl0ZW1zIHlvdSByYWlzZSAob3RoZXJz IG1heSBmaWxsIGluISk6DQoNCi0gQSBwcmlvcmksIHdpdGhvdXQgY29uc2lkZXJpbmcgcGFydGlj dWxhciBjYXNlcywgSSBiZWxpZXZlIHdlIHNob3VsZCBhaW0gZm9yIHRoZSBzYW1lIHNlY3VyaXR5 IGxldmVsIGFzIENvQVAgKFJGQzcyNTIsIHNlY3Rpb24gOSksIGkuZS4gMTI4IGJpdHMgZm9yIGVu Y3J5cHRpb24gYW5kIHNpZ25hdHVyZSBhbmQgNjQgYml0cyBhdXRoZW50aWNhdGlvbiB0YWcuDQoN CkZvciB0aGUgb3RoZXIgaXRlbXMgSSBkb27igJl0IGhhdmUgYXMgaGFyZCBmYWN0cyBhdCBoYW5k LiBNeSBpbXByZXNzaW9uIGlzIHRoYXQgd2Ugc2hhbGwgYXNzdW1lIHRoYXQgc3ltbWV0cmljIHBy aW1pdGl2ZXMgYXJlIGF2YWlsYWJsZSBmb3IgYWxsIGRldmljZXMgb2YgaW50ZXJlc3QsIGFzeW1t ZXRyaWMgbm90IGluIHRoZSBtb3N0IGNvbnN0cmFpbmVkIGNsYXNzLiBXaGVuIGl0IGNvbWVzIHRv IHJhbmRvbSBudW1iZXJzLCBJIGhhdmUgaGVhcmQgZGlmZmVyZW50IHZpZXdzIG9mIHdoYXQgY291 bGQgYmUgZGVzaWduZWQgYXQgYSBsb3cgY29zdCwgYnV0IGEgY29uc2VydmF0aXZlIGFzc3VtcHRp b24gaXMgdGhhdCByYW5kb20gbnVtYmVyIGdlbmVyYXRpb24gaXMgcG9vci4NCg0KVGhhbmtzDQpH w7ZyYW4NCg0KDQo= --_000_D16004982DD29goranselanderericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjx0aXRsZT5NaWNyb3NvZnQgUG93ZXJQb2ludCAt IDZMb1dQQU4tdHV0b3JpYWw8L3RpdGxlPg0KPC9oZWFkPg0KPGJvZHkgc3R5bGU9IndvcmQtd3Jh cDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyAtd2Via2l0LWxpbmUtYnJl YWs6IGFmdGVyLXdoaXRlLXNwYWNlOyBjb2xvcjogcmdiKDAsIDAsIDApOyBmb250LXNpemU6IDE0 cHg7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyI+DQo8ZGl2PkhpIEppbTwvZGl2 Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+VGhhbmtzIGZvciBnb29kIHF1ZXN0aW9ucywgYXBv bG9naWVzIGZvciBub3QgYmVpbmcgY2xlYXIuIEx1ZHdpZyBhbHJlYWR5IGFuc3dlcmVkIHNvbWUg b2YgdGhlIHF1ZXN0aW9ucywgbW9yZSBkZXRhaWxzIGlubGluZS48L2Rpdj4NCjxkaXY+PGJyPg0K PC9kaXY+DQo8c3BhbiBpZD0iT0xLX1NSQ19CT0RZX1NFQ1RJT04iPg0KPGRpdiBzdHlsZT0iZm9u dC1mYW1pbHk6Q2FsaWJyaTsgZm9udC1zaXplOjExcHQ7IHRleHQtYWxpZ246bGVmdDsgY29sb3I6 YmxhY2s7IEJPUkRFUi1CT1RUT006IG1lZGl1bSBub25lOyBCT1JERVItTEVGVDogbWVkaXVtIG5v bmU7IFBBRERJTkctQk9UVE9NOiAwaW47IFBBRERJTkctTEVGVDogMGluOyBQQURESU5HLVJJR0hU OiAwaW47IEJPUkRFUi1UT1A6ICNiNWM0ZGYgMXB0IHNvbGlkOyBCT1JERVItUklHSFQ6IG1lZGl1 bSBub25lOyBQQURESU5HLVRPUDogM3B0Ij4NCjxzcGFuIHN0eWxlPSJmb250LXdlaWdodDpib2xk Ij5Gcm9tOiA8L3NwYW4+SmltIFNjaGFhZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlldGZAYXVndXN0 Y2VsbGFycy5jb20iPmlldGZAYXVndXN0Y2VsbGFycy5jb208L2E+Jmd0Ozxicj4NCjxzcGFuIHN0 eWxlPSJmb250LXdlaWdodDpib2xkIj5EYXRlOiA8L3NwYW4+RnJpZGF5IDI0IEFwcmlsIDIwMTUg MTQ6MjI8YnI+DQo8c3BhbiBzdHlsZT0iZm9udC13ZWlnaHQ6Ym9sZCI+VG86IDwvc3Bhbj5Hw7Zy YW4gU2VsYW5kZXIgJmx0OzxhIGhyZWY9Im1haWx0bzpnb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5j b20iPmdvcmFuLnNlbGFuZGVyQGVyaWNzc29uLmNvbTwvYT4mZ3Q7PGJyPg0KPHNwYW4gc3R5bGU9 ImZvbnQtd2VpZ2h0OmJvbGQiPkNjOiA8L3NwYW4+JnF1b3Q7PGEgaHJlZj0ibWFpbHRvOmNvc2VA aWV0Zi5vcmciPmNvc2VAaWV0Zi5vcmc8L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86Y29z ZUBpZXRmLm9yZyI+Y29zZUBpZXRmLm9yZzwvYT4mZ3Q7PGJyPg0KPHNwYW4gc3R5bGU9ImZvbnQt d2VpZ2h0OmJvbGQiPlN1YmplY3Q6IDwvc3Bhbj5SRTogW0Nvc2VdIEFsZ29yaXRobSBRdWVzdGlv bnM8YnI+DQo8L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBpZD0iTUFDX09V VExPT0tfQVRUUklCVVRJT05fQkxPQ0tRVU9URSIgc3R5bGU9IkJPUkRFUi1MRUZUOiAjYjVjNGRm IDUgc29saWQ7IFBBRERJTkc6MCAwIDAgNTsgTUFSR0lOOjAgMCAwIDU7Ij4NCjxkaXYgeG1sbnM6 dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVybjpzY2hlbWFzLW1p Y3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0 LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9v ZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvVFIvUkVDLWh0bWw0 MCI+DQo8bWV0YSBuYW1lPSJHZW5lcmF0b3IiIGNvbnRlbnQ9Ik1pY3Jvc29mdCBXb3JkIDE0IChm aWx0ZXJlZCBtZWRpdW0pIj4NCjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpA Zm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkhlbHZldGljYTsNCglwYW5vc2UtMToyIDExIDYgNCAy IDIgMiAyIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkhlbHZldGljYTsNCglwYW5v c2UtMToyIDExIDYgNCAyIDIgMiAyIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNh bGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtm b250LWZhbWlseTpUYWhvbWE7DQoJcGFub3NlLTE6MiAxMSA2IDQgMyA1IDQgNCAyIDQ7fQ0KLyog U3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29O b3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXpl OjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIiwic2VyaWYiO30NCmE6bGlu aywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJs dWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlw ZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsN Cgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnANCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMi4w cHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsInNlcmlmIjt9DQpwLk1zb0FjZXRh dGUsIGxpLk1zb0FjZXRhdGUsIGRpdi5Nc29BY2V0YXRlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5 OTsNCgltc28tc3R5bGUtbGluazoiQmFsbG9vbiBUZXh0IENoYXIiOw0KCW1hcmdpbjowaW47DQoJ bWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZTo4LjBwdDsNCglmb250LWZhbWlseToi VGFob21hIiwic2Fucy1zZXJpZiI7fQ0KcC5Nc29MaXN0UGFyYWdyYXBoLCBsaS5Nc29MaXN0UGFy YWdyYXBoLCBkaXYuTXNvTGlzdFBhcmFncmFwaA0KCXttc28tc3R5bGUtcHJpb3JpdHk6MzQ7DQoJ bWFyZ2luLXRvcDowaW47DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltYXJnaW4tYm90dG9tOjBpbjsN CgltYXJnaW4tbGVmdDouNWluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6 MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0Kc3Bhbi5C YWxsb29uVGV4dENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IkJhbGxvb24gVGV4dCBDaGFyIjsNCglt c28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkJhbGxvb24gVGV4dCI7DQoJ Zm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiO30NCnNwYW4uRW1haWxTdHlsZTIxDQoJ e21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1z ZXJpZiI7DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFuLkVtYWlsU3R5bGUyMg0KCXttc28tc3R5bGUt dHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYi Ow0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhw b3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6 ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5X b3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAq Lw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6NTU1MTg0NzU7DQoJbXNvLWxpc3QtdGVtcGxhdGUt aWRzOi0xMTQ3MzUyNjYyO30NCkBsaXN0IGwwOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDou NWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1 aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0K QGxpc3QgbDA6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28t bGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEuMGluOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9u dC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWwzDQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOjEuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglm b250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9w OjIuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot LjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7 fQ0KQGxpc3QgbDA6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCglt c28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIuNWluOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2kt Zm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw2 DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7 DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246 bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsN Cglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1z dG9wOjMuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1i b2w7fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsN Cgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQuMGluOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFu c2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2 ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrv grc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBw dDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDENCgl7bXNvLWxpc3QtaWQ6NzI2NTM4 NDgyOw0KCW1zby1saXN0LXRlbXBsYXRlLWlkczoxMDI0OTA4MjEyO30NCkBsaXN0IGwxOmxldmVs MQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3 Ow0KCW1zby1sZXZlbC10YWItc3RvcDouNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246 bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsN Cglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDE6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1z dG9wOjEuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1i b2w7fQ0KQGxpc3QgbDE6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsN Cgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEuNWluOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFu c2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDE6bGV2 ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrv grc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBw dDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDE6bGV2ZWw1DQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRh Yi1zdG9wOjIuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpT eW1ib2w7fQ0KQGxpc3QgbDE6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxl dDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuMGluOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNv LWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDE6 bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4 dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEw LjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDE6bGV2ZWw4DQoJe21zby1sZXZl bC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVs LXRhYi1zdG9wOjQuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0 LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWls eTpTeW1ib2w7fQ0KQGxpc3QgbDE6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1 bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQuNWluOw0K CW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJ bXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3Qg bDINCgl7bXNvLWxpc3QtaWQ6MTMwNDAwMDc1ODsNCgltc28tbGlzdC10eXBlOmh5YnJpZDsNCglt c28tbGlzdC10ZW1wbGF0ZS1pZHM6Nzg4MzIyNDY2IDY3Njk4NzAzIDY3Njk4NzEzIDY3Njk4NzE1 IDY3Njk4NzAzIDY3Njk4NzEzIDY3Njk4NzE1IDY3Njk4NzAzIDY3Njk4NzEzIDY3Njk4NzE1O30N CkBsaXN0IGwyOmxldmVsMQ0KCXttc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwt bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwyOmxl dmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCgltc28tbGV2ZWwt dGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1p bmRlbnQ6LS4yNWluO30NCkBsaXN0IGwyOmxldmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDpyb21hbi1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVt YmVyLXBvc2l0aW9uOnJpZ2h0Ow0KCXRleHQtaW5kZW50Oi05LjBwdDt9DQpAbGlzdCBsMjpsZXZl bDQNCgl7bXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMjpsZXZlbDUNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9 DQpAbGlzdCBsMjpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7 DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpy aWdodDsNCgl0ZXh0LWluZGVudDotOS4wcHQ7fQ0KQGxpc3QgbDI6bGV2ZWw3DQoJe21zby1sZXZl bC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0 LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDI6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9y bWF0OmFscGhhLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDI6bGV2 ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1zby1sZXZlbC10 YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246cmlnaHQ7DQoJdGV4dC1p bmRlbnQ6LTkuMHB0O30NCm9sDQoJe21hcmdpbi1ib3R0b206MGluO30NCnVsDQoJe21hcmdpbi1i b3R0b206MGluO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFw ZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZd LS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+ DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3ht bD48IVtlbmRpZl0tLT4NCjxkaXYgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJw bGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNl cmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZv bnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdiKDMxLCA3MywgMTI1KTsi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2Jv cmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCI+DQo8 ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEu MHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6IFRhaG9tYSwgc2Fucy1z ZXJpZjsiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMHB0OyBmb250 LWZhbWlseTogVGFob21hLCBzYW5zLXNlcmlmOyI+IEfDtnJhbiBTZWxhbmRlciBbPGEgaHJlZj0i bWFpbHRvOmdvcmFuLnNlbGFuZGVyQGVyaWNzc29uLmNvbSI+bWFpbHRvOmdvcmFuLnNlbGFuZGVy QGVyaWNzc29uLmNvbTwvYT5dDQo8YnI+DQo8Yj5TZW50OjwvYj4gV2VkbmVzZGF5LCBBcHJpbCAy MiwgMjAxNSAxMTo0OCBQTTxicj4NCjxiPlRvOjwvYj4gSmltIFNjaGFhZDxicj4NCjxiPkNjOjwv Yj4gPGEgaHJlZj0ibWFpbHRvOmNvc2VAaWV0Zi5vcmciPmNvc2VAaWV0Zi5vcmc8L2E+PGJyPg0K PGI+U3ViamVjdDo8L2I+IFJlOiBbQ29zZV0gQ2hhcnRlciBTdGF0ZTxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOiAxMC41cHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogYmxh Y2s7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMC41cHQ7IGZvbnQtZmFtaWx5 OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogYmxhY2s7Ij48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXIt bGVmdDpzb2xpZCAjQjVDNERGIDQuNXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQ7bWFyZ2lu LWxlZnQ6My43NXB0O21hcmdpbi1yaWdodDowaW4iIGlkPSJNQUNfT1VUTE9PS19BVFRSSUJVVElP Tl9CTE9DS1FVT1RFIj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7 IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyI+SW4gb3JkZXIgdG8gZ2V0IHRoZSBDRlJHIHBvaW50 ZWQgaW4gdGhlIHJpZ2h0IGRpcmVjdGlvbiwgaXQgaXMgbmVjZXNzYXJ5IHRvIGdpdmUgaXQgc29t ZSBpbnB1dC4gJm5ic3A7Jm5ic3A7VG8gdGhhdCBlbmQgSSB3b3VsZCBzdWdnZXN0IHdlIHN0YXJ0 IHdpdGggZG9pbmcNCiBhIHN1cnZleSBvZiB0aHJlZSBxdWVzdGlvbnM6PC9zcGFuPjxzcGFuIHN0 eWxlPSJjb2xvcjpibGFjayI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmks IHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyI+Jm5ic3A7PC9zcGFuPjxzcGFu IHN0eWxlPSJjb2xvcjpibGFjayI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJ0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDIgbGV2 ZWwxIGxmbzIiPjwhLS1baWYgIXN1cHBvcnRMaXN0c10tLT48c3BhbiBzdHlsZT0iY29sb3I6Ymxh Y2siPjxzcGFuIHN0eWxlPSJtc28tbGlzdDpJZ25vcmUiPjEuPHNwYW4gc3R5bGU9ImZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGZv bnQtc2l6ZTogN3B0OyBsaW5lLWhlaWdodDogbm9ybWFsOyBmb250LWZhbWlseTogJ1RpbWVzIE5l dyBSb21hbic7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsNCjwvc3Bhbj48L3NwYW4+ PC9zcGFuPjwhLS1bZW5kaWZdLS0+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1m YW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyI+Jm5i c3A7V2hhdCB0eXBlIG9mIGFsZ29yaXRobXMgYXJlIG5lZWRlZD8mbmJzcDsgKGtleSBhZ3JlZW1l bnQsIGtleSB0cmFuc3BvcnQsIHNpZ25hdHVyZSwgaGFzaCwgTUFDLCBLREYsIGV0Yyk8L3NwYW4+ PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6IDEwLjVwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2Vy aWY7IGNvbG9yOiBibGFjazsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEwLjVw dDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiBibGFjazsiPkZvciB0 aGUgdXNlIGNhc2VzIEkgaGF2ZSBpbiBtaW5kOiBrZXkgdHJhbnNwb3J0LCBLREYsIGVuY3J5cHRp b24vQUVBRCwgaGFzaCBhbmQgc2lnbmF0dXJlLiBCdXQgdGhlIG1haW4gY29uY2VybiBpcyBhcm91 bmQgc2lnbmF0dXJlcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMC41cHQ7IGZvbnQtZmFt aWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogYmxhY2s7Ij48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOiAxMC41cHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlm OyBjb2xvcjogYmxhY2s7Ij4xLiBFQ0RTQSBzaXplIG9mIHNpZ25hdHVyZSBhdCAxMTItMTI4IGJp dHMgc2VjdXJpdHkgaXMgb2YgdGhlIG9yZGVyIG9mIDYwIGJ5dGVzIHdoaWNoIGlzIGEgbG90IGNv bXBhcmVkIHRvIDggYnl0ZXMgdHJ1bmNhdGVkIE1BQy4gSXQgd291bGQgYmUgZ29vZCB0byBoYXZl DQogYSByZWNvbW1lbmRhdGlvbiBvZiBhIHNpZ25hdHVyZSBhbGdvcml0aG0gd2l0aCBtZXNzYWdl IHJlY292ZXJ5LCBzdWNoIGFzIEVDUFZTICh3aGljaCBoYXMgc29tZSBJUFIsIHNvbWUgb2Ygd2hp Y2ggaXMgZXhwaXJpbmcgaW4gYSBmZXcgeWVhcnMpIG9yIG90aGVyLjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6IDEwLjVwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9y OiByZ2IoMzEsIDczLCAxMjUpOyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6 IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiByZWQ7Ij5TbyBiYXNpY2FsbHkgRUNEU0EsIGFu ZCBpdOKAmXMgdmFyaWFudHMsIGhhdmUgYSBzaXplIG9mIDIqfHJ8LCB3aGljaCBjb21lcyB0byBy b3VnaGx5IDY0IGJ5dGVzIGZvciBQLTI1Ni4mbmJzcDsgSSBsb29rZWQgYXQgRUNQVlMsIGFuZCBm b3IgdGhlIHNhbWUgbGV2ZWwgb2Ygc2VjdXJpdHkNCiBhcyB0aGUgOCBieXRlIHRydW5jYXRlZCBN QUMgSSBiZWxpZXZlIHlvdSBhcmUgbG9va2luZyBhdCB8cnwgJiM0MzsgOCBvciA0MCBieXRlcyBm b3IgUC0yNTYuJm5ic3A7IEl0IGlzIGEgbWVzc2FnZSBzaXplIHdpbiwgYnV0IEkgYW0gbm90IHN1 cmUgaXQgaXMgYXMgYmlnIG9mIHdpbiBhcyB5b3Ugb3JpZ2luYWxseSB0aG91Z2h0IGl0IHdvdWxk IGJlLiZuYnNwOw0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMt c2VyaWY7IGNvbG9yOiByZ2IoMzEsIDczLCAxMjUpOyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90 ZT4NCjwvc3Bhbj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2Pk5vLCB0aGlzIGlzIGFsc28gd2hh dCBJIHVuZGVyc3Rvb2QuIFRoZSBkaWZmZXJlbmNlIGJldHdlZW4gNDAgYW5kIDY0IGJ5dGVzIG92 ZXJoZWFkIG1heSB3ZWxsIGJlIHRoYXQgYSBtZXNzYWdlIHN1cHBvcnRpbmcgdGhlIGZvcm1lciBm aXRzIGludG8gODAyLjE1LjQgd2l0aG91dCBmcmFnbWVudGF0aW9uIHdoZXJlYXMgdGhlIGxhdHRl ciBkb2VzbuKAmXQuIChFbnRpcmUgODAyLjE1LjQgaGFzIGEgTVRVIG9mIDEyNyBieXRlcywgYnV0 IGFkZGluZw0KIHZhcmlvdXMgaGVhZGVycyAoTUFDIGxheWVyLCA2TG9XUEFOLCBVRFAsIENvQVAs IENPU0UpIHRoZXJlIGhhcyB0byBiZSBzb21ldGhpbmcgbGVmdCBmb3IgcGF5bG9hZC4pPC9kaXY+ DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxzcGFuIGlkPSJPTEtfU1JD X0JPRFlfU0VDVElPTiI+DQo8YmxvY2txdW90ZSBpZD0iTUFDX09VVExPT0tfQVRUUklCVVRJT05f QkxPQ0tRVU9URSIgc3R5bGU9IkJPUkRFUi1MRUZUOiAjYjVjNGRmIDUgc29saWQ7IFBBRERJTkc6 MCAwIDAgNTsgTUFSR0lOOjAgMCAwIDU7Ij4NCjxkaXYgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWlj cm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVybjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNl Om9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIg eG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1s IiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvVFIvUkVDLWh0bWw0MCI+DQo8ZGl2IGxhbmc9IkVO LVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9u MSI+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0 O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEwLjVwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNh bnMtc2VyaWY7IGNvbG9yOiBibGFjazsiPjIuIEEgY29tYmluZWQgc3ltbWV0cmljIGtleSBlbmNy eXB0aW9uICYjNDM7IHNpZ25hdHVyZSBpcyBuZWVkZWQgZm9yIHBvaW50LW11bHRpcG9pbnQgc2V0 dGluZ3MuJm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTAuNXB0OyBmb250LWZhbWls eTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigzMSwgNzMsIDEyNSk7Ij48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6 IHJlZDsiPlBsZWFzZSBleHBsYWluIHdoYXQgeW91IG1lYW4gYnkgcG9pbnQtbXVsdGlwb2ludCBz ZXR0aW5ncy4mbmJzcDsgSSBhbSBub3QgZmFtaWxpYXIgd2l0aCB0aGF0IHRlcm0gLiZuYnNwOyAo SSBwcm9iYWJseSBrbm93IGl0IGFzIHNvbWV0aGluZyBlbHNlLik8L3NwYW4+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvc3Bhbj4N CjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5BIHNob3J0IGV4cGxh bmF0aW9uIGlzIHVuZGVyIOKAnFByb3RlY3Rpb24gb2YgcmVzb3VyY2UgcmVwcmVzZW50YXRpb27i gJ0gaW48L2Rpdj4NCjxkaXY+PGEgaHJlZj0iaHR0cHM6Ly9naXRodWIuY29tL2Nvc2Utc3BlYy91 c2UtY2FzZXMvYmxvYi9tYXN0ZXIvdXNlLWNhc2VzLm1kIj5odHRwczovL2dpdGh1Yi5jb20vY29z ZS1zcGVjL3VzZS1jYXNlcy9ibG9iL21hc3Rlci91c2UtY2FzZXMubWQ8L2E+PC9kaXY+DQo8ZGl2 Pjxicj4NCjwvZGl2Pg0KPGRpdj5Ud28gZXhhbXBsZXMgYXJlIGdpdmVuIGluIHNlY3Rpb24gRC4y IG9mJm5ic3A7PC9kaXY+DQo8ZGl2PjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9kcmFmdC1zZWxhbmRlci1hY2Utb2JqZWN0LXNlY3VyaXR5LTAxIj5odHRwczovL3Rvb2xzLmll dGYub3JnL2h0bWwvZHJhZnQtc2VsYW5kZXItYWNlLW9iamVjdC1zZWN1cml0eS0wMTwvYT48L2Rp dj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PkluIHRoZSBmaXJzdCBleGFtcGxlIChELjIuMSkg dGhlcmUgYXJlIHR3byBjbGllbnRzIGFjY2Vzc2luZyB0aGUgc2FtZSBzZW5zb3IgbWVhc3VyZW1l bnQgZnJvbSBhIHByb3h5LCB0byBhdm9pZCBsb2FkaW5nIHRoZSBzZXJ2ZXIgd2l0aCBtdWx0aXBs ZSByZXF1ZXN0cy4gSWYgdGhlIHByb3h5IGlzbuKAmXQgdHJ1c3RlZCB3aXRoIHRoZSBwbGFpbiB0 ZXh0IG1lYXN1cmVtZW50LCB0aGUgbWVzc2FnZSBtdXN0IGJlIGVuY3J5cHRlZCBhbmQgc2luY2UN CiB0aGVyZSBhcmUgbXVsdGlwbGUgY2xpZW50cyBhIHN5bW1ldHJpYyBlbmNyeXB0aW9uIGFsZ29y aXRobSBpcyBwcmVmZXJhYmxlLiBJZiB0aGUgY2xpZW50cyBkb2VzIG5vdCB0cnVzdCBlYWNoIG90 aGVyLCB0aGUgbWVzc2FnZSBtdXN0IGJlIHNpZ25lZCB3aXRoIHRoZSBwcml2YXRlIGtleSBvZiB0 aGUgc2VydmVyLjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+VGhlIHNlY29uZCBleGFt cGxlIChELjIuMikgaXMgc2ltaWxhciwgYWx0aG91Z2ggdGhlcmUgaXMgb25seSBvbmUgc3Vic2Ny aWJlciB2aXNpYmxlIGluIHRoZSBzZXF1ZW5jZSBkaWFncmFtLjwvZGl2Pg0KPGRpdj48YnI+DQo8 L2Rpdj4NCjxzcGFuIGlkPSJPTEtfU1JDX0JPRFlfU0VDVElPTiI+DQo8YmxvY2txdW90ZSBpZD0i TUFDX09VVExPT0tfQVRUUklCVVRJT05fQkxPQ0tRVU9URSIgc3R5bGU9IkJPUkRFUi1MRUZUOiAj YjVjNGRmIDUgc29saWQ7IFBBRERJTkc6MCAwIDAgNTsgTUFSR0lOOjAgMCAwIDU7Ij4NCjxkaXYg eG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVybjpzY2hl bWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVtYXMtbWlj cm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWljcm9zb2Z0 LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvVFIvUkVD LWh0bWw0MCI+DQo8ZGl2IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4N CjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3Jk ZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQiPg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDExcHQ7IGZv bnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmVkOyI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTogMTAuNXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsg Y29sb3I6IGJsYWNrOyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8Ymxv Y2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0I1QzRERiA0LjVw dDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0O21hcmdpbi1sZWZ0OjMuNzVwdDttYXJnaW4tcmln aHQ6MGluIiBpZD0iTUFDX09VVExPT0tfQVRUUklCVVRJT05fQkxPQ0tRVU9URSI+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0idGV4dC1pbmRlbnQ6LS4y NWluO21zby1saXN0OmwyIGxldmVsMSBsZm8yIj48IS0tW2lmICFzdXBwb3J0TGlzdHNdLS0+PHNw YW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48c3BhbiBzdHlsZT0ibXNvLWxpc3Q6SWdub3JlIj4yLjxz cGFuIHN0eWxlPSJmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudDogbm9ybWFsOyBmb250 LXdlaWdodDogbm9ybWFsOyBmb250LXNpemU6IDdwdDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgZm9u dC1mYW1pbHk6ICdUaW1lcyBOZXcgUm9tYW4nOyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7DQo8L3NwYW4+PC9zcGFuPjwvc3Bhbj48IS0tW2VuZGlmXS0tPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBjb2xvcjogcmdi KDMxLCA3MywgMTI1KTsiPldoYXQgYXJlIHRoZSBjb25zdHJhaW50cyB3ZSByZWFsbHkgY2FyZSBh Ym91dD88L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEwLjVwdDsgZm9udC1mYW1pbHk6IENhbGli cmksIHNhbnMtc2VyaWY7IGNvbG9yOiBibGFjazsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6IDEwLjVwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IGNvbG9yOiBi bGFjazsiPlRoZSBjaGFydGVyIHNheXMgJnF1b3Q7TWluaW1pemluZyBtZXNzYWdlIHNpemUsIGNv ZGUgc2l6ZSBhbmQgY29tcHV0YXRpb25hbCBjb21wbGV4aXR54oCdLiAmbmJzcDtJbiBvcmRlciBv ZiBpbXBvcnRhbmNlIGZvciBzaWduYXR1cmVzIEnigJlkIHNheSBtZXNzYWdlIHNpemUsIGNvbXB1 dGF0aW9uYWwNCiBjb21wbGV4aXR5LCBjb2RlIHNpemUuPG86cD48L286cD48L3NwYW4+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZTogMTAuNXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgY29sb3I6IHJnYigz MSwgNzMsIDEyNSk7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJy aSwgc2Fucy1zZXJpZjsgY29sb3I6IHJlZDsiPkkgd2FzIHRoaW5raW5nIGluIGJyb2FkZXIgdGVy bXMuJm5ic3A7IFdoYXQgeW91IGhhdmUgbGlzdGVkIGFib3ZlIGlzIG1vcmUgYWxvbmcgdGhlIGxp bmVzIG9mIGRlY2lzaW9uIGNyaXRlcmlhIGJ1dCBub3QgY29uc3RyYWludHMuJm5ic3A7Jm5ic3A7 IEEgY29uc3RyYWludCBpcyDigJMgV2UgbmVlZCBhIG1pbmltdW0NCiBvZiA2NC1iaXRzIG9mIGF1 dGhlbnRpY2F0aW9uIHRhZyBmb3IgQUVBRCBhbGdvcml0aG1zLiZuYnNwOyBXZSBuZWVkIGEgbWlu aW11bSBvZiBYLWJpdHMgZm9yIHNpZ25hdHVyZSBhbGdvcml0aG1zLiZuYnNwOyBXZSBuZWVkIHRv IGhhdmUgZGV0ZXJtaW5pc3RpYyBzaWduYXR1cmUgYWxnb3JpdGhtcyBiZWNhdXNlIG91ciBQUkdO cyBhcmUgbm90IGdvb2QgZW5vdWdoLiZuYnNwOyBNaW5pbWFsIHN5c3RlbXMgd2lsbCBvbmx5IHN1 cHBvcnQgaGFzaCBhbmQgZW5jcnlwdCBtb2RlDQogYmxvY2sgY2lwaGVycy48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOiAxMC41cHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyBj b2xvcjogYmxhY2s7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9zcGFuPg0KPGRpdj48 YnI+DQo8L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2Pk9LLCBJIHNlZSB3aGF0IHlvdSBt ZWFuLiBNdWNoIG9mIHRoaXMgZGVwZW5kcyBpbiBnZW5lcmFsIG9uIElvVCBhcHBsaWNhdGlvbiBh bmQgd2hhdCBDbGFzcyBvZiBkZXZpY2UgaXMgYXNzdW1lZCAoUkZDNzIyOCwgVGFibGUgMSkuIEp1 c3QgdG8gY29tbWVudCBvbiB0aGUgc3BlY2lmaWMgaXRlbXMgeW91IHJhaXNlIChvdGhlcnMgbWF5 IGZpbGwgaW4hKTo8L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2Pi0gQSBwcmlvcmksIHdp dGhvdXQgY29uc2lkZXJpbmcgcGFydGljdWxhciBjYXNlcywgSSBiZWxpZXZlIHdlIHNob3VsZCBh aW0gZm9yIHRoZSBzYW1lIHNlY3VyaXR5IGxldmVsIGFzIENvQVAgKFJGQzcyNTIsIHNlY3Rpb24g OSksIGkuZS4gMTI4IGJpdHMgZm9yIGVuY3J5cHRpb24gYW5kIHNpZ25hdHVyZSBhbmQgNjQgYml0 cyBhdXRoZW50aWNhdGlvbiB0YWcuPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5Gb3Ig dGhlIG90aGVyIGl0ZW1zIEkgZG9u4oCZdCBoYXZlIGFzIGhhcmQgZmFjdHMgYXQgaGFuZC4gTXkg aW1wcmVzc2lvbiBpcyB0aGF0IHdlIHNoYWxsIGFzc3VtZSB0aGF0IHN5bW1ldHJpYyBwcmltaXRp dmVzIGFyZSBhdmFpbGFibGUgZm9yIGFsbCBkZXZpY2VzIG9mIGludGVyZXN0LCBhc3ltbWV0cmlj IG5vdCBpbiB0aGUgbW9zdCBjb25zdHJhaW5lZCBjbGFzcy4gV2hlbiBpdCBjb21lcyB0byByYW5k b20gbnVtYmVycywgSSBoYXZlIGhlYXJkDQogZGlmZmVyZW50IHZpZXdzIG9mIHdoYXQgY291bGQg YmUgZGVzaWduZWQgYXQgYSBsb3cgY29zdCwgYnV0IGEgY29uc2VydmF0aXZlIGFzc3VtcHRpb24g aXMgdGhhdCByYW5kb20gbnVtYmVyIGdlbmVyYXRpb24gaXMgcG9vci48L2Rpdj4NCjxkaXY+PGJy Pg0KPC9kaXY+DQo8ZGl2PlRoYW5rczwvZGl2Pg0KPGRpdj5Hw7ZyYW48L2Rpdj4NCjxkaXY+PGJy Pg0KPC9kaXY+DQo8ZGl2Pjxicj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_D16004982DD29goranselanderericssoncom_-- From nobody Fri Apr 24 09:36:18 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 277121AC427 for ; Fri, 24 Apr 2015 09:36:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id seHHXTR_krfy for ; Fri, 24 Apr 2015 09:36:15 -0700 (PDT) Received: from mail2.ihtfp.org (mail2.ihtfp.org [IPv6:2001:4830:143:1::3a11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A9A921AC3E1 for ; Fri, 24 Apr 2015 09:36:15 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail2.ihtfp.org (Postfix) with ESMTP id 95962E2039; Fri, 24 Apr 2015 12:36:14 -0400 (EDT) Received: from mail2.ihtfp.org ([127.0.0.1]) by localhost (mail2.ihtfp.org [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 07315-07; Fri, 24 Apr 2015 12:36:12 -0400 (EDT) Received: from securerf.ihtfp.org (unknown [IPv6:fe80::ea2a:eaff:fe7d:235]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mocana.ihtfp.org", Issuer "IHTFP Consulting Certification Authority" (verified OK)) by mail2.ihtfp.org (Postfix) with ESMTPS id EAC18E2035; Fri, 24 Apr 2015 12:36:11 -0400 (EDT) Received: (from warlord@localhost) by securerf.ihtfp.org (8.14.8/8.14.8/Submit) id t3OGaApI031362; Fri, 24 Apr 2015 12:36:10 -0400 From: Derek Atkins To: "Jim Schaad" References: <03f601d07e89$503e1690$f0ba43b0$@augustcellars.com> Date: Fri, 24 Apr 2015 12:36:10 -0400 In-Reply-To: <03f601d07e89$503e1690$f0ba43b0$@augustcellars.com> (Jim Schaad's message of "Fri, 24 Apr 2015 05:22:21 -0700") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Virus-Scanned: Maia Mailguard 1.0.2a Archived-At: Cc: =?utf-8?Q?'G=C3=B6ran?= Selander' , cose@ietf.org Subject: Re: [Cose] Algorithm Questions X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Apr 2015 16:36:17 -0000 "Jim Schaad" writes: > From: G=C3=B6ran Selander [mailto:goran.selander@ericsson.com] > Sent: Wednesday, April 22, 2015 11:48 PM > To: Jim Schaad > Cc: cose@ietf.org > Subject: Re: [Cose] Charter State > > In order to get the CFRG pointed in the right direction, it is necess= ary > to give it some input. To that end I would suggest we start with do= ing a > survey of three questions: > > 1. What type of algorithms are needed? (key agreement, key > transport, signature, hash, MAC, KDF, etc) For Key Agreement there's the question of data size vs. CPU/Power usage. For example, Algebraic Eraser can provide a significant CPU/Power improvement over ECDH (at the cost of addtional bits). > For the use cases I have in mind: key transport, KDF, encryption/AEAD, ha= sh > and signature. But the main concern is around signatures. > > 1. ECDSA size of signature at 112-128 bits security is of the order of 60 > bytes which is a lot compared to 8 bytes truncated MAC. It would be good = to > have a recommendation of a signature algorithm with message recovery, suc= h as > ECPVS (which has some IPR, some of which is expiring in a few years) or o= ther. True, but I've not seen a third-party offline MAC protocol, only 2-party MACs (or 3-party online systems, like Kerberos). This is, indeed, why we want to separate Signatures from MACs -- they have very different use cases. > So basically ECDSA, and it=E2=80=99s variants, have a size of 2*|r|, whic= h comes to > roughly 64 bytes for P-256.=C2=A0 I looked at ECPVS, and for the same lev= el of > security as the 8 byte truncated MAC I believe you are looking at |r| + 8= or > 40 bytes for P-256.=C2=A0 It is a message size win, but I am not sure it = is as big > of win as you originally thought it would be.=C2=A0 I believe that it can be compressed down to |r|+1 bits. -derek --=20 Derek Atkins 617-623-3745 derek@ihtfp.com www.ihtfp.com Computer and Internet Security Consultant From nobody Fri Apr 24 12:47:32 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC59F1A0052 for ; Fri, 24 Apr 2015 12:47:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ClhOkGgg_EJh for ; Fri, 24 Apr 2015 12:47:30 -0700 (PDT) Received: from smtp1.pacifier.net (smtp1.pacifier.net [64.255.237.171]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 279021A001B for ; Fri, 24 Apr 2015 12:47:30 -0700 (PDT) Received: from Philemon (unknown [4.30.143.226]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp1.pacifier.net (Postfix) with ESMTPSA id 5531C2CA5A; Fri, 24 Apr 2015 12:47:29 -0700 (PDT) From: "Jim Schaad" To: "'Derek Atkins'" References: <03f601d07e89$503e1690$f0ba43b0$@augustcellars.com> In-Reply-To: Date: Fri, 24 Apr 2015 12:46:12 -0700 Message-ID: <045d01d07ec7$51b8c680$f52a5380$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQIq7sRb8VnYd+CjGxXLBHBmdgYPuAJ4SKONnJPlopA= Content-Language: en-us Archived-At: Cc: =?UTF-8?Q?'G=C3=B6ran_Selander'?= , cose@ietf.org Subject: Re: [Cose] Algorithm Questions X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Apr 2015 19:47:31 -0000 > -----Original Message----- > From: Derek Atkins [mailto:derek@ihtfp.com] > Sent: Friday, April 24, 2015 9:36 AM > To: Jim Schaad > Cc: 'G=C3=B6ran Selander'; cose@ietf.org > Subject: Re: [Cose] Algorithm Questions >=20 > "Jim Schaad" writes: >=20 > > From: G=C3=B6ran Selander [mailto:goran.selander@ericsson.com] > > Sent: Wednesday, April 22, 2015 11:48 PM > > To: Jim Schaad > > Cc: cose@ietf.org > > Subject: Re: [Cose] Charter State > > > > In order to get the CFRG pointed in the right direction, it is = necessary > > to give it some input. To that end I would suggest we start = with doing a > > survey of three questions: > > > > 1. What type of algorithms are needed? (key agreement, = key > > transport, signature, hash, MAC, KDF, etc) >=20 > For Key Agreement there's the question of data size vs. CPU/Power = usage. > For example, Algebraic Eraser can provide a significant CPU/Power > improvement over ECDH (at the cost of addtional bits). >=20 > > For the use cases I have in mind: key transport, KDF, = encryption/AEAD, > > hash and signature. But the main concern is around signatures. > > > > 1. ECDSA size of signature at 112-128 bits security is of the order = of > > 60 bytes which is a lot compared to 8 bytes truncated MAC. It would = be > > good to have a recommendation of a signature algorithm with message > > recovery, such as ECPVS (which has some IPR, some of which is = expiring in a > few years) or other. >=20 > True, but I've not seen a third-party offline MAC protocol, only = 2-party MACs > (or 3-party online systems, like Kerberos). This is, indeed, why we = want to > separate Signatures from MACs -- they have very different use cases. >=20 > > So basically ECDSA, and it=E2=80=99s variants, have a size of 2*|r|, = which > > comes to roughly 64 bytes for P-256. I looked at ECPVS, and for the > > same level of security as the 8 byte truncated MAC I believe you are > > looking at |r| + 8 or > > 40 bytes for P-256. It is a message size win, but I am not sure it = is > > as big of win as you originally thought it would be. >=20 > I believe that it can be compressed down to |r|+1 bits. Ah, yes. I was assuming a particular mode of doing this which would = probably not be true.=20 I was assuming that you were doing a hash of the message and then doing = the recovery on a portion of the hash. If you do the recovery on the = message itself, then the addition of the n bits to the signature (|r| + = n) are subtracted from the message thus leading to a signature length of = about |r|. The question that would still need to be addressed is a = question of needing to add some additional redundancy bytes to the = message. (And I really don't understand this section of the analysis = that I am looking at.) Jim >=20 > -derek > -- > Derek Atkins 617-623-3745 > derek@ihtfp.com www.ihtfp.com > Computer and Internet Security Consultant From nobody Fri Apr 24 18:25:21 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DC9811A8758 for ; Fri, 24 Apr 2015 18:25:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.8 X-Spam-Level: X-Spam-Status: No, score=0.8 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0iBwL42ACbdy for ; Fri, 24 Apr 2015 18:25:17 -0700 (PDT) Received: from smtp4.pacifier.net (smtp4.pacifier.net [64.255.237.176]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7C8231A875C for ; Fri, 24 Apr 2015 18:25:17 -0700 (PDT) Received: from Philemon (unknown [4.30.143.226]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp4.pacifier.net (Postfix) with ESMTPSA id D02A638F3D for ; Fri, 24 Apr 2015 18:25:16 -0700 (PDT) From: "Jim Schaad" To: "'cose'" References: <017601d07cad$0f29f9e0$2d7deda0$@augustcellars.com> <024801d07d2d$6137c6b0$23a75410$@augustcellars.com> In-Reply-To: Date: Fri, 24 Apr 2015 18:24:00 -0700 Message-ID: <04a401d07ef6$827dc700$87795500$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQIjhaQWeEEQ9jAwW3jY6t94GHjs1gISURK9Ag/x/AMCrU4XFAILHVn/nHAD+YA= Content-Language: en-us Archived-At: Subject: Re: [Cose] Issue: Use arrays for some containers X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Apr 2015 01:25:19 -0000 Questions: 1. Should we use arrays or maps as top level containers for COSE? Arrays 2. If we use arrays, should we always use nil elements to indicate absent elements or use them only when ambiguity in parsing arises? Always have a field ************************************** At this point, the majority of people who have expressed an opinion have said that they prefer to use maps than arrays. I have not yet seen an argument that I could call a technical one rather than an 'emotional' one. People are expressing a preference rather than an argument on what the correct option is. This applies to me as well. After taking a long walk, I think I now understand why I prefer arrays to maps. I generally prefer to restrict the set of locations where arbitrary things can be placed that might affect the security of the system. By allowing things in fewer places there are fewer ways that things can go wrong. This is not to say that things will go wrong, it is just expressing a comfort level on my part. On Wed I sent a message to the list and Derek, in which I outlined a policy of either doing a strict or a lax enforcement of the fields in a map when doing an evaluation. I would appreciate it if people who think maps are better can respond to this. My personal preference is that if we do use maps, we all for applications to specify if they want t use a strict or lax mode and would prefer that the default is strict mode. Jim From nobody Fri Apr 24 22:16:44 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C18E1A1EFC for ; Fri, 24 Apr 2015 22:16:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.301 X-Spam-Level: X-Spam-Status: No, score=-3.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_37=0.6, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wOnpcEZqM9AM for ; Fri, 24 Apr 2015 22:16:39 -0700 (PDT) Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F1B501A0235 for ; Fri, 24 Apr 2015 22:16:37 -0700 (PDT) X-AuditID: c1b4fb25-f79126d000004b89-cd-553b2332a84c Received: from ESESSHC015.ericsson.se (Unknown_Domain [153.88.253.124]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id 4C.FD.19337.2332B355; Sat, 25 Apr 2015 07:16:35 +0200 (CEST) Received: from ESESSMB303.ericsson.se ([169.254.3.19]) by ESESSHC015.ericsson.se ([153.88.183.63]) with mapi id 14.03.0210.002; Sat, 25 Apr 2015 07:16:34 +0200 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Stephen Farrell Thread-Topic: [Cose] Charter State Thread-Index: AdB233J6eMIFWU+bSfiQcTRrv8iHPf//4jyAgAB88QCAAAM3AIAAAY+AgArBooCAASxkgIAABAIAgAADogCAACmYAIAABZyAgADbHYCAAAmVgIADAZMA Date: Sat, 25 Apr 2015 05:16:34 +0000 Message-ID: References: <043201d076df$aa87b770$ff972650$@augustcellars.com> <50A4152F-E8F1-4890-AD03-065899ACC3BB@vpnc.org> <04c701d07721$69175fb0$3b461f10$@augustcellars.com> <566CD668-1A69-4D37-A04E-98025906759D@gmail.com> <013d01d07c83$01465190$03d2f4b0$@augustcellars.com> <022601d07d1b$34298670$9c7c9350$@augustcellars.com> <657EE3F5-CB06-4227-8E91-BFB3AB50233D@ericsson.com> <025a01d07d34$9f540740$ddfc15c0$@augustcellars.com> <5538B9BF.7090601@cs.tcd.ie> In-Reply-To: <5538B9BF.7090601@cs.tcd.ie> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.7.141117 x-originating-ip: [153.88.183.154] Content-Type: text/plain; charset="utf-8" Content-ID: <576908ECD250CB49A49CFB50CCE480E0@ericsson.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprLIsWRmVeSWpSXmKPExsUyM+Jvja6xsnWoQc8pdotpW6eyWqye/p3N Yvrea+wOzB4b50xn81jbfZXNY8mSn0wBzFFcNimpOZllqUX6dglcGReur2cp+DOdsWLugY1M DYwdUxi7GDk5JARMJGbOesIEYYtJXLi3nq2LkYtDSOAoo8TC032sIAkhgcWMEm39HCA2m4CL xIOGR2ANIgL6Ens3n2MHsZkFPCQav69iBrGFBRQlnr14xQJRoySx6ckZsKEiAk2MEo39J8AS LAKqEuvf7gNbwCtgIXFt0kFGiM07WSUa1k4DS3AKaErsaVsKtoER6Lzvp9YwQWwTl7j1ZD7U 2QISS/acZ4awRSVePv4H1isqoCex8noTG0RcSWLR7c9A9RxAvZoS63fpQ4yxljj08AwbhK0o MaX7ITvEPYISJ2c+YZnAKDELybZZCN2zkHTPQtI9C0n3AkbWVYyixanFSbnpRsZ6qUWZycXF +Xl6eaklmxiB8Xlwy2/VHYyX3zgeYhTgYFTi4V2w2DJUiDWxrLgy9xCjNAeLkjivnfGhECGB 9MSS1OzU1ILUovii0pzU4kOMTBycUg2M4if69t3LuXL19PRbFSeN5SWVzgZLqC+8faL9joNC nsOiA/PWX/vrzZFcs18/6FvAZbvMLYbpL1qepvd5V1ruv3cz7kTjB4N38/+ZT4/NPbzzps9F AUlzL4UZr0SncB45fWbpvplablx8grK7pp4Puvxtdu6bpMNcUy9wBfxPN3xt+zNd9Om5VUos xRmJhlrMRcWJAF9ZWtmwAgAA Archived-At: Cc: Jim Schaad , "cose@ietf.org" Subject: Re: [Cose] Charter State X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Apr 2015 05:16:42 -0000 SGkgU3RlcGhlbiwNCg0KSSBhc2tlZCBLZW5ueSBQYXR0ZXJzb24gaW4gRGFsbGFzIGFib3V0IHNp Z25hdHVyZSBhbGdvcml0aG0gd2l0aCBtZXNzYWdlDQpyZWNvdmVyeSBzdWl0YWJsZSBmb3IgZW1i ZWRkZWQgZGV2aWNlcyBhbmQgaGUgcmVjb21tZW5kZWQgbWUgdG8gc2VuZCBhbg0KZW1haWwgdG8g Q0ZSRyBhZnRlciB0aGUgRUMgc2lnbmF0dXJlIGRpc2N1c3Npb24gaGFkIGJlZ3VuIChhbmQgYmUg cHJlcGFyZWQNCmZvciBkZWxheXMgZXRjLikuDQoNCldoZW4gdGhlIGRpc2N1c3Npb24gYXBwZWFy ZWQgaW4gQ09TRSwgSSB0aG91Z2h0IGl0IHdvdWxkIGJlIGJldHRlciAoZS5nLg0KZnJvbSBhICJt aW5pbWl6ZSBkaXN0dXJiYW5jZeKAnSBwb2ludCBvZiB2aWV3KSB0aGF0IHNvbWVvbmUgY29udGFj dGVkIENGUkcNCm9uIGJlaGFsZiBvZiBDT1NFIHJhdGhlciB0aGFuIG1lIHNlbmRpbmcgYSBwZXJz b25hbCBlbWFpbC4gRG8geW91IGFncmVlPw0KDQoNCkfDtnJhbg0KDQoNCg0KT24gMjAxNS0wNC0y MyAxMToyMiwgIlN0ZXBoZW4gRmFycmVsbCIgPHN0ZXBoZW4uZmFycmVsbEBjcy50Y2QuaWU+IHdy b3RlOg0KDQo+DQo+UGxlYXNlIGJlIGF3YXJlIHRoYSBDRlJHIGFyZSBjdXJyZW50bHkgdmVyeSBi dXN5IHdpdGggc2VsZWN0aW5nDQo+YW5kIGRvY3VtZW50aW5nIGFkZGl0aW9uYWwgY3VydmVzIGFu ZCBhc3NvY2lhdGVkIHNpZ25hdHVyZQ0KPm1lY2hhbmlzbXMuIElmIENPU0UgbmVlZHMgQ0ZSRyBo ZWxwLCB5b3Ugc2hvdWxkIHJlYWxseSB0cnkgdG8NCj5taW5pbWlzZSB3aGF0J3MgbmVlZGVkLg0K Pg0KPllvdSBjb3VsZCBtaW5pbWlzZSB0aGF0IHRvIHplcm8gYnkgb25seSB1c2luZyB3ZWxsLXdv cm4gY3J5cHRvLg0KPg0KPkJ1dCBpZiBDT1NFIG5lZWRzIHRvIGdvIGJleW9uZCB0aGF0IChteSBJ IGhvcGUgaXMgaXQgZG9lcyBub3QpLA0KPnRoZW4geW91IG91Z2h0IGJlIHJlYWR5IGZvciBkZWxh eSAtIGxpa2UgYW55IG90aGVyIGdyb3VwIENGUkcNCj5oYXMgbGltaXRlZCBiYW5kd2lkdGggYm91 bmRlZCBieSB2b2x1bnRlZXIgY3ljbGVzLg0KPg0KPlMuDQo+DQo+T24gMjMvMDQvMTUgMDc6NDcs IEfDtnJhbiBTZWxhbmRlciB3cm90ZToNCj4+IA0KPj4gDQo+PiBJbiBvcmRlciB0byBnZXQgdGhl IENGUkcgcG9pbnRlZCBpbiB0aGUgcmlnaHQgZGlyZWN0aW9uLCBpdCBpcw0KPj5uZWNlc3Nhcnkg dG8gZ2l2ZSBpdCBzb21lIGlucHV0LiAgIFRvIHRoYXQgZW5kIEkgd291bGQgc3VnZ2VzdCB3ZSBz dGFydA0KPj53aXRoIGRvaW5nIGEgc3VydmV5IG9mIHRocmVlIHF1ZXN0aW9uczoNCj4+IA0KPj4g DQo+PiAxLiAgICAgICAgV2hhdCB0eXBlIG9mIGFsZ29yaXRobXMgYXJlIG5lZWRlZD8gIChrZXkg YWdyZWVtZW50LCBrZXkNCj4+dHJhbnNwb3J0LCBzaWduYXR1cmUsIGhhc2gsIE1BQywgS0RGLCBl dGMpDQo+PiANCj4+IEZvciB0aGUgdXNlIGNhc2VzIEkgaGF2ZSBpbiBtaW5kOiBrZXkgdHJhbnNw b3J0LCBLREYsIGVuY3J5cHRpb24vQUVBRCwNCj4+aGFzaCBhbmQgc2lnbmF0dXJlLiBCdXQgdGhl IG1haW4gY29uY2VybiBpcyBhcm91bmQgc2lnbmF0dXJlcy4NCj4+IA0KPj4gMS4gRUNEU0Egc2l6 ZSBvZiBzaWduYXR1cmUgYXQgMTEyLTEyOCBiaXRzIHNlY3VyaXR5IGlzIG9mIHRoZSBvcmRlciBv Zg0KPj42MCBieXRlcyB3aGljaCBpcyBhIGxvdCBjb21wYXJlZCB0byA4IGJ5dGVzIHRydW5jYXRl ZCBNQUMuIEl0IHdvdWxkIGJlDQo+Pmdvb2QgdG8gaGF2ZSBhIHJlY29tbWVuZGF0aW9uIG9mIGEg c2lnbmF0dXJlIGFsZ29yaXRobSB3aXRoIG1lc3NhZ2UNCj4+cmVjb3ZlcnksIHN1Y2ggYXMgRUNQ VlMgKHdoaWNoIGhhcyBzb21lIElQUiwgc29tZSBvZiB3aGljaCBpcyBleHBpcmluZw0KPj5pbiBh IGZldyB5ZWFycykgb3Igb3RoZXIuDQo+PiANCj4+IDIuIEEgY29tYmluZWQgc3ltbWV0cmljIGtl eSBlbmNyeXB0aW9uICsgc2lnbmF0dXJlIGlzIG5lZWRlZCBmb3INCj4+cG9pbnQtbXVsdGlwb2lu dCBzZXR0aW5ncy4NCj4+IA0KPj4gDQo+PiANCj4+IDIuICAgICAgIFdoYXQgYXJlIHRoZSBjb25z dHJhaW50cyB3ZSByZWFsbHkgY2FyZSBhYm91dD8NCj4+IA0KPj4gVGhlIGNoYXJ0ZXIgc2F5cyAi TWluaW1pemluZyBtZXNzYWdlIHNpemUsIGNvZGUgc2l6ZSBhbmQgY29tcHV0YXRpb25hbA0KPj5j b21wbGV4aXR54oCdLiAgSW4gb3JkZXIgb2YgaW1wb3J0YW5jZSBmb3Igc2lnbmF0dXJlcyBJ4oCZ ZCBzYXkgbWVzc2FnZQ0KPj5zaXplLCBjb21wdXRhdGlvbmFsIGNvbXBsZXhpdHksIGNvZGUgc2l6 ZS4NCj4+IA0KPj4gDQo+PiANCj4+IDMuICAgICAgIFdoYXQgYWxnb3JpdGhtcyBhcmUgd2UgY3Vy cmVudGx5IHVzaW5nIHRvZGF5IGZvciB0aG9zZQ0KPj5wdXJwb3Nlcz8NCj4+IA0KPj4gDQo+PiBU aGUgZGVmYXVsdCBhbGdvcml0aG1zIGFyZSB0aG9zZSBzcGVjaWZpZWQgYnkgQ29BUCAoc2VjcDI1 NnIxIGZvciBFQ0RTQSkNCj4+IA0KPj4gDQo+PiANCj4+IEppbQ0KPj4gDQo+PiANCj4+IEZyb206 IEfDtnJhbiBTZWxhbmRlciBbbWFpbHRvOmdvcmFuLnNlbGFuZGVyQGVyaWNzc29uLmNvbV0NCj4+ IFNlbnQ6IFdlZG5lc2RheSwgQXByaWwgMjIsIDIwMTUgMTI6MjQgUE0NCj4+IFRvOiBLYXRobGVl biBNb3JpYXJ0eQ0KPj4gQ2M6IEppbSBTY2hhYWQ7IGNvc2VAaWV0Zi5vcmc8bWFpbHRvOmNvc2VA aWV0Zi5vcmc+DQo+PiBTdWJqZWN0OiBSZTogW0Nvc2VdIENoYXJ0ZXIgU3RhdGUNCj4+IA0KPj4g TG9va3MgZmluZS4NCj4+IA0KPj4gQWJvdXQgdGhlIGNvbnN0cmFpbmVkLWFwcHJvcHJpYXRlIGFs Z29yaXRobXM6IGlzIHRoZSBpbnRlbnRpb24gdG8NCj4+Y29uc3VsdCBDRlJHPyBJZiBzbywgbWF5 YmUgd291bGQgYmUgZ29vZCB0byBnZXQgdGhhdCBiYWxsIHJvbGxpbmcgdG9vDQo+PnNvb24uDQo+ PiANCj4+IFRoYW5rcywNCj4+IEfDtnJhbg0KPj4gDQo+PiBPbiAyMiBhcHIgMjAxNSwgYXQgMTg6 NTQsIEthdGhsZWVuIE1vcmlhcnR5DQo+PjxrYXRobGVlbi5tb3JpYXJ0eS5pZXRmQGdtYWlsLmNv bTxtYWlsdG86a2F0aGxlZW4ubW9yaWFydHkuaWV0ZkBnbWFpbC5jb20NCj4+Pj4gd3JvdGU6DQo+ PiBHcmVhdCwgYXJlIG90aGVycyBvayB3aXRoIHRoZSBjaGFuZ2VzPyAgSWYgc28sIEknbGwgZ2V0 IGl0IHJvbGxpbmcuDQo+PiANCj4+IE9uIFdlZCwgQXByIDIyLCAyMDE1IGF0IDEyOjQxIFBNLCBK aW0gU2NoYWFkDQo+PjxpZXRmQGF1Z3VzdGNlbGxhcnMuY29tPG1haWx0bzppZXRmQGF1Z3VzdGNl bGxhcnMuY29tPj4gd3JvdGU6DQo+PiBCZSBteSBndWVzdCB0byBtYWtlIHRoZSBjaGFuZ2VzLg0K Pj4gDQo+PiBKaW0NCj4+IA0KPj4gDQo+PiBGcm9tOiBDb3NlIFttYWlsdG86Y29zZS1ib3VuY2Vz QGlldGYub3JnPG1haWx0bzpjb3NlLWJvdW5jZXNAaWV0Zi5vcmc+XQ0KPj5PbiBCZWhhbGYgT2Yg S2F0aGxlZW4gTW9yaWFydHkNCj4+IFNlbnQ6IFdlZG5lc2RheSwgQXByaWwgMjIsIDIwMTUgOToy NyBBTQ0KPj4gVG86IEppbSBTY2hhYWQNCj4+IA0KPj4gQ2M6IGNvc2VAaWV0Zi5vcmc8bWFpbHRv OmNvc2VAaWV0Zi5vcmc+DQo+PiBTdWJqZWN0OiBSZTogW0Nvc2VdIENoYXJ0ZXIgU3RhdGUNCj4+ IA0KPj4gSGksDQo+PiANCj4+IEkgYW0gYXNzdW1pbmcgdGhlIGN1cnJlbnQgY2hhcnRlciB0ZXh0 IGlzIGF0IHRoZSBsaW5rOg0KPj4gaHR0cHM6Ly9naXRodWIuY29tL2Nvc2Utc3BlYy93Zy1jaGFy dGVyL2Jsb2IvbWFzdGVyL2RyYWZ0LWNoYXJ0ZXIubWQNCj4+IA0KPj4gSSBoYXZlIHNvbWUgcHJv cG9zZWQgY2hhbmdlcyB0aGF0IEkgdGhpbmsgaGVscCB3aXRoIHJlYWRhYmlsaXR5LiAgTGV0DQo+ Pm1lIGtub3cgaWYgdGhlc2UgYXJlIG9rIGFuZCBJJ2xsIHB1dCBpbiB0aGUgY2hhcnRlciBmb3Ig SUVTRyByZXZpZXcuDQo+PkFsbCBvZiB0aGUgY2hhcnRlciB0ZXh0IGlzIGluY2x1ZGVkLCBicm9r ZW4gb3V0IGJ5IHNlY3Rpb25zIHRvIHNob3cNCj4+ZWRpdHMuICBJbiBzb21lIGNhc2VzLCB0aGVy ZSBpcyBhIE5vdGU6IGZvbGxvd2luZyBhIGNoYW5nZSB3aXRoDQo+PmFzc3VtcHRpb25zIEkgd2Fz IG1ha2luZyBpbiBjYXNlIHRoZXkgd2VyZSBub3QgY29ycmVjdCBhc3N1bXB0aW9ucy4NCj4+IA0K Pj4gT2xkOkNvbmNpc2UgQmluYXJ5IE9iamVjdCBSZXByZXNlbnRhdGlvbiAoQ0JPUiwgUkZDIDcw NDkpIGlzIGEgY29uY2lzZQ0KPj5iaW5hcnkgZm9ybWF0IGZvciB0aGUgc2VyaWFsaXphdGlvbiBv ZiBkYXRhIHN0cnVjdHVyZWQgdG8gYW4gZXh0ZW5kZWQNCj4+dmVyc2lvbiBvZiB0aGUgSlNPTiBk YXRhIG1vZGVsLiBPbmUgbW90aXZhdGlvbiBmb3IgQ0JPUiB3YXMgdG8gbWFrZSB0aGlzDQo+PmRh dGEgbW9kZWwgbW9yZSBhbWVuYWJsZSB0byBjb25zdHJhaW5lZCBub2RlcyBhbmQgY29uc3RyYWlu ZWQgbm9kZQ0KPj5uZXR3b3JrcyAoUkZDIDcyMjgpLg0KPj4gTmV3Og0KPj4gQ29uY2lzZSBCaW5h cnkgT2JqZWN0IFJlcHJlc2VudGF0aW9uIChDQk9SLCBSRkMgNzA0OSkgaXMgYSBjb25jaXNlDQo+ PmJpbmFyeSBmb3JtYXQgZm9yIHRoZSBzZXJpYWxpemF0aW9uIG9mIGRhdGEgc3RydWN0dXJlZCB0 byBhbiBleHRlbmRlZA0KPj52ZXJzaW9uIG9mIHRoZSBKU09OIGRhdGEgbW9kZWwuIE9uZSBtb3Rp dmF0aW9uIGZvciBDT1NFIHdhcyB0byByZXVzZQ0KPj5mdW5jdGlvbmFsaXR5IGZyb20gdGhlIEpP U0Ugd29ya2luZyBncm91cCB1c2luZyB0aGUgQ0JPUiBkYXRhDQo+PnJlcHJlc2VudGF0aW9uIGFz IGl0IGlzIG1vcmUgYW1lbmFibGUgdG8gY29uc3RyYWluZWQgbm9kZXMgYW5kDQo+PmNvbnN0cmFp bmVkIG5vZGUgbmV0d29ya3MgKFJGQyA3MjI4KS4NCj4+IA0KPj4gT2xkOg0KPj4gVGhlIEpPU0Ug d29ya2luZyBncm91cCByZWNlbnRseSBjb21wbGV0ZWQgcHJvZHVjaW5nIHJlcHJlc2VudGF0aW9u cyBmb3INCj4+Y3J5cHRvZ3JhcGhpYyBrZXlzLCBtZXNzYWdlIGF1dGhlbnRpY2F0aW9uIChNQUNz KSwgZW5jcnlwdGlvbiwgYW5kDQo+PmRpZ2l0YWwgc2lnbmF0dXJlcywgdXNpbmcgSlNPTiByZXBy ZXNlbnRhdGlvbi4gVGhpcyB3b3JraW5nIGdyb3VwIHdpbGwNCj4+cmV1c2UgdGhlIHdvcmsgZG9u ZSBieSBKT1NFLCBhZGFwdGluZyBpdCB0byB0aGUgY2FwYWJpbGl0aWVzIG9mIENCT1IuDQo+PlRo aXMgd2lsbCByZWx5IG9uIHRoZSBKT1NFIHJlZ2lzdHJpZXMsIHdoaWNoLCB3aGVyZSB0aGlzIHBy b3ZpZGVzDQo+PmFkZGl0aW9uYWwgZWZmaWNpZW5jeSwgd2lsbCBiZSBleHBhbmRlZCB3aXRoIGFk ZGl0aW9uYWwgaW5mb3JtYXRpb24uDQo+PiBOZXc6DQo+PiBUaGUgSk9TRSB3b3JraW5nIGdyb3Vw IHJlY2VudGx5IGNvbXBsZXRlZCBwcm9kdWNpbmcgcmVwcmVzZW50YXRpb25zIGZvcg0KPj5jcnlw dG9ncmFwaGljIGtleXMsIG1lc3NhZ2UgYXV0aGVudGljYXRpb24gKE1BQ3MpLCBlbmNyeXB0aW9u LCBhbmQNCj4+ZGlnaXRhbCBzaWduYXR1cmVzLCB1c2luZyBKU09OIHJlcHJlc2VudGF0aW9uLiBD T1NFIHdpbGwgcmVseSBvbiB0aGUNCj4+Sk9TRSByZWdpc3RyaWVzLCBhbmQgd2lsbCBiZSBleHBh bmQgdGhlbSB3aXRoIGFkZGl0aW9uYWwgaW5mb3JtYXRpb24NCj4+d2hlbiBuZWNlc3NhcnkuDQo+ PiANCj4+IE5vdGU6IHlvdSBtYXkgaGF2ZSBvdGhlciByZWFzb25zIGJlc2lkZXMgZWZmaWNpZW5j eS4NCj4+IA0KPj4gT2xkOg0KPj4gVGhlIHJlc3VsdGluZyBmb3JtYXRzIHdpbGwgbm90IGJlIGNy eXB0b2dyYXBoaWNhbGx5IGNvbnZlcnRpYmxlIGZyb20gb3INCj4+dG8gSk9TRSBmb3JtYXRzLiBU aGlzIGxhY2sgb2YgYSBuZWVkIGZvciBiaXQtZm9yLWJpdCBjb21wYWJpdGlsaXR5IHdoaWNoDQo+ PndpbGwgZW5hYmxlIHNvbWUgc2ltcGxpZmljYXRpb24gaW4gdGhlIGFkYXB0YXRpb24gcHJvY2Vz cy4NCj4+IE5ldzoNCj4+IFRoZSByZXN1bHRpbmcgZm9ybWF0cyB3aWxsIG5vdCBiZSBjcnlwdG9n cmFwaGljYWxseSBjb252ZXJ0aWJsZSBmcm9tIG9yDQo+PnRvIEpPU0UgZm9ybWF0cy4gVGhpcyBs YWNrIG9mIGEgbmVlZCBmb3IgYml0LWZvci1iaXQgY29tcGF0aWJpbGl0eSB3aWxsDQo+PmVuYWJs ZSBzb21lIHNpbXBsaWZpY2F0aW9uIGluIHRoZSBhZGFwdGF0aW9uIHByb2Nlc3MuDQo+PiANCj4+ IE9sZDoNCj4+IA0KPj4gQ3JpdGVyaWEgdGhhdCBzaG91bGQgYmUgY29uc2lkZXJlZCBvbiBtYWtp bmcgZGVjaXNpb25zIGluIGNoYW5naW5nIGZyb20NCj4+YSBKU09OIHRvIGEgQ0JPUiBlbmNvZGlu ZyBhcmU6DQo+PiANCj4+IMK3ICAgICAgS2VlcGluZyB0aGUgY3VycmVudCBKT1NFIHBhcmFkaWdt cyBhbmQgZm9ybWF0dGluZyB3aGVyZSBmZWFzaWJsZS4NCj4+IA0KPj4gwrcgICAgICBNaW5pbWl6 aW5nIG1lc3NhZ2Ugc2l6ZSwgY29kZSBzaXplIGFuZCBjb21wdXRhdGlvbmFsIGNvbXBsZXhpdHkN Cj4+c2hvdWxkIGJlIGNvbnNpZGVyZWQgKGZvciB0aGUgY29uc3RyYWluZWQgZW52aXJvbm1lbnRz IHdoZXJlIHdlIGV4cGVjdA0KPj50byB1c2UgdGhpcykuDQo+PiANCj4+IMK3ICAgICAgSW1wcm92 aW5nIHNlY3VyaXR5DQo+PiANCj4+IMK3ICAgICAgUHJvdmlkaW5nIG5ldyBmdW5jdGlvbmFsaXR5 IHRoYXQgdXNlcyBvZiBKT1NFIGRpZCBub3QgcmVxdWlyZSwNCj4+YnV0IGFyZSByZXF1aXJlZCBm b3IgdGhlIG5ldyB1c2UgY2FzZXMuDQo+PiBOZXc6DQo+PiANCj4+IENyaXRlcmlhIHRoYXQgc2hv dWxkIGJlIGNvbnNpZGVyZWQgaW4gdGhlIGRlY2lzaW9uIG1ha2luZyBwcm9jZXNzLA0KPj5jaGFu Z2luZyBmcm9tIEpTT04gdG8gQ0JPUiBlbmNvZGluZyBpbmNsdWRlOg0KPj4gDQo+PiDCtyAgICAg IE1haW50YWluIHRoZSBjdXJyZW50IEpPU0UgcGFyYWRpZ21zIGFuZCBmb3JtYXR0aW5nIHdoZXJl DQo+PmZlYXNpYmxlLg0KPj4gDQo+PiDCtyAgICAgIE1pbmltaXplIG1lc3NhZ2Ugc2l6ZSwgY29k ZSBzaXplLCBhbmQgY29tcHV0YXRpb25hbCBjb21wbGV4aXR5DQo+PnRvIHN1aXQgY29uc3RyYWlu ZWQgZW52aXJvbm1lbnRzLCB3aGVyZSB0aGlzIGlzIGV4cGVjdGVkIHRvICBiZSB1c2VkLg0KPj4g DQo+PiDCtyAgICAgIEltcHJvdmUgc2VjdXJpdHkNCj4+IA0KPj4gwrcgICAgICBQcm92aWRlIG5l dyBmdW5jdGlvbmFsaXR5IGZvciBhZGRpdGlvbmFsIHVzZSBjYXNlcyB0aGF0IHdlcmUgbm90DQo+ PnJlcXVpcmVkIGZvciBKT1NFLg0KPj4gT2xkOg0KPj4gSXNzdWVzIGRlYWxpbmcgd2l0aCBrZXkg bWFuYWdlbWVudCBhbmQgYmluZGluZyBvZiBrZXlzIHRvIGlkZW50aXRpZXMNCj4+YXJlIG91dCBv ZiBzY29wZSBmb3IgdGhlIHdvcmtpbmcgZ3JvdXAuDQo+PiBOZXc6DQo+PiBLZXkgbWFuYWdlbWVu dCBhbmQgYmluZGluZyBvZiBrZXlzIHRvIGlkZW50aXRpZXMgYXJlIG91dCBvZiBzY29wZSBmb3IN Cj4+dGhlIHdvcmtpbmcgZ3JvdXAuDQo+PiANCj4+IE5vdGU6IEkgYW0gYXNzdW1pbmcgeW91IHJl YWxseSB3YW50IHRvIG91dC1vZiBzY29wZSBhbGwga2V5IG1hbmFnZW1lbnQNCj4+YW5kIG5vdCBq dXN0IGlzc3Vlcz8NCj4+IA0KPj4gQW5kIEkgZG9uJ3Qgc2VlIGFueSBuZWVkIHRvIHR3ZWFrIHRo ZSByZXN0IG9mIHRoZSB0ZXh0Og0KPj4gDQo+PiBUaGUgV29ya2luZyBncm91cCB3aWxsIGNvb3Jk aW5hdGUgaXRzIHByb2dyZXNzIHdpdGggdGhlIEFDRSwgRElDRSBhbmQNCj4+Q09SRSB3b3JraW5n IGdyb3VwcyB0byBlbnN1cmUgdGhhdCB3ZSBhcmUgZnVsZmlsbGluZyB0aGUgbmVlZHMgb2YgdGhl c2UNCj4+Y29uc3RpdHVlbmNpZXMuIE90aGVyIGdyb3VwcyBtYXkgYmUgYWRkZWQgdG8gdGhpcyBs aXN0IGFzIHRoZSBzZXQgb2YgdXNlDQo+PmNhc2VzIGlzIGV4cGFuZGVkLg0KPj4gDQo+PiBUaGUg V0cgd2lsbCBoYXZlIHR3byBkZWxpdmVyYWJsZXM6DQo+PiANCj4+ICAgKiAgIGEgc3RhbmRhcmRz LXRyYWNrIHNwZWNpZmljYXRpb24gY292ZXJpbmcgdGhlIHNhbWUgY3J5cHRvZ3JhcGhpYw0KPj5m b3JtYXRzIGZyb20gSk9TRSwgd2l0aCBvcHRpbWl6YXRpb25zIGZvciBjb25zdHJhaW5lZCBkZXZp Y2UgcHJvY2Vzc2luZywNCj4+ZXhwcmVzc2VkIGluIENCT1I7DQo+PiAgICogICByZWdpc3RyYXRp b24gZm9yIGFsZ29yaXRobXMgKHN1Y2ggYXMgQUVTLUNDTS04KSB0aGF0IGFyZQ0KPj5hcHByb3By aWF0ZSBmb3IgY29uc3RyYWluZWQgZW52aXJvbm1lbnRzLg0KPj4gDQo+PiBUaGUgV29ya2luZyBH cm91cCB3aWxsIHVzZSBhIHdpa2kgdG8gdHJhY2sgZGVzaXJlZCB1c2UgY2FzZXMgZm9yIGl0cw0K Pj53b3JrLCBidXQgZG9lcyBub3QgaW50ZW5kIHRvIHB1Ymxpc2ggdGhpcyBhcyBhbiBSRkMuDQo+ PiANCj4+IA0KPj4gSSdkIGxvdmUgaXQgaWYgeW91IGNhbiBrZWVwIHRvIHRoZSBtaWxlc3RvbmVz IHByb2plY3RlZCA6LSkNCj4+IA0KPj4gVGhhbmtzLg0KPj4gS2F0aGxlZW4NCj4+IA0KPj4gT24g VHVlLCBBcHIgMjEsIDIwMTUgYXQgNjozMiBQTSwgSmltIFNjaGFhZA0KPj48aWV0ZkBhdWd1c3Rj ZWxsYXJzLmNvbTxtYWlsdG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbT4+IHdyb3RlOg0KPj4gVGhl IGRhdGUgY2hhbmdlIHByb3Bvc2VkIGJ5IG1lIGhhcyBiZWVuIG1lcmdlZCBpbnRvIHRoZSBkcmFm dC4NCj4+IA0KPj4gSSBiZWxpZXZlIHRoYXQgd2UgY2FuIG5vdyBjb25zaWRlciB0aGUgY2hhcnRl ciBkaXNjdXNzaW9uIHRvIGJlDQo+PmNvbXBsZXRlIHVubGVzcyBhbnlvbmUgZWxzZSBoYXMgYSBi aWcgaXNzdWUgdGhleSB3YW50IHRvIGJyaW5nIHVwLg0KPj4gDQo+PiBLYXRobGVlbjogIENhbiB3 ZSBnZXQgdGhpcyB0byBtb3ZlIGZvcndhcmQgaW50byB0aGUgSUVTRz8NCj4+IA0KPj4gSmltDQo+ PiANCj4+IA0KPj4+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+Pj4gRnJvbTogQ29zZSAN Cj4+PlttYWlsdG86Y29zZS1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpjb3NlLWJvdW5jZXNAaWV0 Zi5vcmc+XSBPbiBCZWhhbGYNCj4+Pk9mIEthdGhsZWVuIE1vcmlhcnR5DQo+Pj4gU2VudDogVHVl c2RheSwgQXByaWwgMTQsIDIwMTUgNzoxNyBQTQ0KPj4+IFRvOiBKaW0gU2NoYWFkDQo+Pj4gQ2M6 IEtlcGVuZyBMaTsgUGF1bCBIb2ZmbWFuOyBjb3NlQGlldGYub3JnPG1haWx0bzpjb3NlQGlldGYu b3JnPg0KPj4+IFN1YmplY3Q6IFJlOiBbQ29zZV0gQ2hhcnRlciBTdGF0ZQ0KPj4+DQo+Pj4NCj4+ Pg0KPj4+IFNlbnQgZnJvbSBteSBpUGhvbmUNCj4+Pg0KPj4+PiBPbiBBcHIgMTQsIDIwMTUsIGF0 IDEwOjEwIFBNLCAiSmltIFNjaGFhZCINCj4+Pj48aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbTxtYWls dG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbT4+DQo+Pj4gd3JvdGU6DQo+Pj4+DQo+Pj4+DQo+Pj4+ DQo+Pj4+PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPj4+Pj4gRnJvbTogQ29zZSANCj4+ Pj4+W21haWx0bzpjb3NlLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOmNvc2UtYm91bmNlc0BpZXRm Lm9yZz5dIE9uDQo+Pj4+PkJlaGFsZiBPZiBLZXBlbmcgTGkNCj4+Pj4+IFNlbnQ6IFR1ZXNkYXks IEFwcmlsIDE0LCAyMDE1IDY6NTkgUE0NCj4+Pj4+IFRvOiBQYXVsIEhvZmZtYW47IEppbSBTY2hh YWQNCj4+Pj4+IENjOiBjb3NlQGlldGYub3JnPG1haWx0bzpjb3NlQGlldGYub3JnPg0KPj4+Pj4g U3ViamVjdDogUmU6IFtDb3NlXSBDaGFydGVyIFN0YXRlDQo+Pj4+Pg0KPj4+Pj4gVGhhbmtzIFBh dWwuDQo+Pj4+Pg0KPj4+Pj4gVGhlcmUgYXJlIHR3byBvdGhlciBjaGFuZ2VzIHdlIG1pZ2h0IHdh bnQgdG8gaW5jb3Jwb3JhdGU6DQo+Pj4+Pg0KPj4+Pj4gMSkgUHJvcG9zYWwgZnJvbSBHb3JhbjoN Cj4+Pj4+IGh0dHA6Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNoaXZlL3dlYi9jb3NlL2N1cnJlbnQv bXNnMDAwMjcuaHRtbA0KPj4+Pj4NCj4+Pj4+IE9MRDoNCj4+Pj4+ICJhIHN0YW5kYXJkcy10cmFj ayBzcGVjaWZpY2F0aW9uIGNvdmVyaW5nIHRoZSBzYW1lIGNyeXB0b2dyYXBoaWMNCj4+Pj4+IGZv cm1hdHMNCj4+Pj4gZnJvbQ0KPj4+Pj4gSk9TRSwgZXhwcmVzc2VkIGluIENCT1IiDQo+Pj4+Pg0K Pj4+Pj4gTkVXOg0KPj4+Pj4gImEgc3RhbmRhcmRzLXRyYWNrIHNwZWNpZmljYXRpb24gY292ZXJp bmcgdGhlIHNhbWUgY3J5cHRvZ3JhcGhpYw0KPj4+Pj4gZm9ybWF0cw0KPj4+PiBmcm9tDQo+Pj4+ PiBKT1NFIGFuZCBvcHRpbWl6YXRpb25zIGZvciBjb25zdHJhaW5lZCBkZXZpY2UgcHJvY2Vzc2lu ZywgZXhwcmVzc2VkDQo+Pj4+PiBpbg0KPj4+PiBDQk9SDQo+Pj4+DQo+Pj4+IEkgYW0gYWdub3N0 aWMgYWJvdXQgaW5jbHVkaW5nIHRoaXMgY2hhbmdlLiAgV2Ugbm93IGFyZSBtdWNoIG1vcmUNCj4+ Pj4gY29uc3RyYWluZWQgZGV2aWNlIGZvY3VzZWQgbGF0ZXIgc28gaXQgbWlnaHQgbm90IGJlIG5l ZWRlZC4NCj4+Pj4NCj4+Pj4+DQo+Pj4+PiAoMikgUHJvcG9zYWwgZnJvbSBLYXRobGVlbjoNCj4+ Pj4+DQo+Pj4+PiBodHRwOi8vd3d3LmlldGYub3JnL21haWwtYXJjaGl2ZS93ZWIvY29zZS9jdXJy ZW50L21zZzAwMDc3Lmh0bWwNCj4+Pj4+DQo+Pj4+PiBPTEQ6DQo+Pj4+PiBUaGUgV29ya2luZyBH cm91cCB3aWxsIGNvb3JkaW5hdGUgaXRzIHByb2dyZXNzIHdpdGggdGhlIEFDRSwgRElDRSBhbmQN Cj4+Pj4+IENvUkUgd29ya2luZyBncm91cHMgdG8gZW5zdXJlIHRoYXQgd2UgYXJlIGZ1bGZpbGxp bmcgdGhlIG5lZWRzIG9mDQo+Pj4+PiB0aGVzZSBjb25zdGl0dWVuY2llcy4NCj4+Pj4+DQo+Pj4+ PiBORVc6DQo+Pj4+PiBUaGUgV29ya2luZyBHcm91cCB3aWxsIGNvb3JkaW5hdGUgaXRzIHByb2dy ZXNzIHdpdGggdGhlIEFDRSwgRElDRSwNCj4+Pj4+IENvUkUNCj4+Pj4gYW5kDQo+Pj4+PiBESU1F IHdvcmtpbmcgZ3JvdXBzIHRvIGVuc3VyZSB0aGF0IHdlIGFyZSBmdWxmaWxsaW5nIHRoZSBuZWVk cyBvZg0KPj4+Pj4gdGhlc2UgY29uc3RpdHVlbmNpZXMuDQo+Pj4+DQo+Pj4+IEkgYW0gbm90IHN1 cmUgdGhhdCBESU1FIGlzIGEgcmVhc29uYWJsZSBncm91cCB0byBiZSBjb29yZGluYXRpbmcgd2l0 aA0KPj4+PiBzaW5jZSBpdCBpcyBub3QgY2xlYXIgdGhhdCB0aGlzIHdvdWxkIGJlIHRoZSBzb2x1 dGlvbiBzcGFjZSB0aGV5IGFyZQ0KPj4+PiBnb2luZyB0byBvcGVyYXRlIGluLiAgSXQgaXMgdHJ1 ZSB0aGF0IHRoaXMgbmVlZCBzb21ldGhpbmcgYWxvbmcgdGhlc2UNCj4+Pj4gbGluZXMsIGJ1dCB3 aGF0IHRoZXkgbmVlZCBmaXJzdCBpcyB0byBnZXQgc29tZW9uZSB3aG8gaGFzIGdvb2QNCj4+Pj4g a25vd2xlZGdlIG9mIHdoYXQgY2FuIGJlIGRvbmUgaW4gdGhlIGdyb3VwIGZpcnN0LiAgR2l2ZW4g dGhhdCB0aGlzIGlzDQo+Pj4+IG1ham9yICh0ZWxlY29tKSB2ZW5kb3JzLCB1c2luZyBDTVMgbWln aHQgYmUgYSBiZXR0ZXIgZml0IGZvciB0aGlzDQo+Pj4+DQo+Pj4+IFRoZSBvdGhlciBxdWVzdGlv biBpZiB3ZSBleHBhbmQgdGhpcyBsaXN0IGhlcmUgcmF0aGVyIHRoYW4gaW4gdGhlIHdpa2kNCj4+ Pj4gaXMgdGhlIHNldCBvZiBncm91cHMgdGhhdCBSZW5lIFN0cnVpayB0aG91Z2ggdGhhdCBtaWdo dCBiZSBpbmNsdWRlZA0KPj4+PiBoZXJlIHN1Y2ggYXMgIjZUaVNDSCwgNmxvLCBSb0xMLCBldGMi IHdoaWNoIHNlZW0gdG8gYmUgbXVjaCBjbG9zZXIgdG8NCj4+Pj4gdGhlIHR5cGVzIG9mIGdyb3Vw cyB0aGF0IG1pZ2h0IHVzZSB0aGlzIHNwZWNpZmljYXRpb24gZ29pbmcgZm9yd2FyZC4NCj4+Pj4N Cj4+Pj4gQXQgdGhpcyBwb2ludCwgSSB0aGluayBJIHdvdWxkIGdvIHdpdGggdGhlIGxpc3Qgd2Ug aGF2ZSBhbmQgc3RhcnQNCj4+Pj4gYWRkaW5nIG1vcmUgZ3JvdXBzIHRvIHRoZSB3aWtpLg0KPj4+ DQo+Pj4gSSdtIGZpbmUgd2l0aCB0aGF0IGFwcHJvYWNoLiAgTXkgcG9pbnQgaW4gYnJpbmdpbmcg dXAgRElNRSB3YXMgbW9yZQ0KPj4+dGhhdCB0aGV5DQo+Pj4gbmVlZCBoZWxwIGFuZCB0aGlzICpj b3VsZCogaGVscCB0aGVtLCBidXQgd29yayBuZWVkcyB0byBiZSBkb25lIHRvDQo+Pj5maWd1cmUN Cj4+PiBvdXQgd2hhdCB0aGV5IG5lZWQgYXQgdGhpcyBwb2ludC4gIEkgYnJvdWdodCBpdCB1cCBq dXN0IGluIGNhc2UgaXQncw0KPj4+cmVsZXZhbnQgdG8NCj4+PiBDT1NFLg0KPj4+DQo+Pj4gVGhh bmtzLA0KPj4+IEthdGhsZWVuDQo+Pj4+DQo+Pj4+IEppbQ0KPj4+Pg0KPj4+Pj4NCj4+Pj4+DQo+ Pj4+PiBUaGFua3MsDQo+Pj4+Pg0KPj4+Pj4gS2luZCBSZWdhcmRzDQo+Pj4+PiBLZXBlbmcNCj4+ Pj4+DQo+Pj4+PiA/IDE1LzQvMTUgMjozMiBhbSwgIlBhdWwgSG9mZm1hbiINCj4+Pj4+PHBhdWwu aG9mZm1hbkB2cG5jLm9yZzxtYWlsdG86cGF1bC5ob2ZmbWFuQHZwbmMub3JnPj4gPz86DQo+Pj4+ Pg0KPj4+Pj4+IE9uIEFwciAxNCwgMjAxNSwgYXQgMTE6MjAgQU0sIEppbSBTY2hhYWQNCj4+Pj4+ PjxpZXRmQGF1Z3VzdGNlbGxhcnMuY29tPG1haWx0bzppZXRmQGF1Z3VzdGNlbGxhcnMuY29tPj4N Cj4+PiB3cm90ZToNCj4+Pj4+Pj4NCj4+Pj4+Pj4gSSB3b3VsZCBsaWtlIHRvIGdldCBQdWxsIFJl cXVlc3QgIzIgcm9sbGVkIGludG8gdGhlIGRyYWZ0IGNoYXJ0ZXINCj4+Pj4+Pj4gYW5kIHRoZW4g SSB0aGluayB3ZSBhcmUgcmVhZHkgdG8gc2VuZCBpdCB0byB0aGUgQURzIGFuZCBJRVNHIGZvcg0K Pj4+Pj4+PnJldmlldy4NCj4+Pj4+Pj4NCj4+Pj4+Pj4gU2luY2UgaXQgaXMgbXkgcHVsbCByZXF1 ZXN0IEkgaGF2ZSBub3QgZG9uZSB0aGUgbWVyZ2UgcHJlZmVycmluZw0KPj4+Pj4+PiB0aGF0IGl0 IGJlIGRvbmUgYnkgb25lIG9mIHRoZSBvdGhlcnMgd2hvIGhhdmUgcGVybWlzc2lvbnMuICBJZiBJ DQo+Pj4+Pj4+IGdldCBhIG1lc3NhZ2Ugc2F5aW5nIGRvIHRoZSBtZXJnZSByZXF1ZXN0IEkgd291 bGQgYmUgaGFwcHkgdG8gcHVsbA0KPj4+Pj4+PiB0aGUgdHJpZ2dlciBvbiBpdC4NCj4+Pj4+Pg0K Pj4+Pj4+IFRoZXJlIHNlZW1lZCB0byBiZSBnZW5lcmFsIGFncmVlbWVudCwgc28gSSBhY2NlcHRl ZCB0aGUgcHVsbA0KPj4+Pj4+cmVxdWVzdC4NCj4+Pj4+Pg0KPj4+Pj4+IEN1cnJlbnQgdmVyc2lv biBpcyBhdDoNCj4+Pj4+PiBodHRwczovL2dpdGh1Yi5jb20vY29zZS1zcGVjL3dnLWNoYXJ0ZXIv YmxvYi9tYXN0ZXIvZHJhZnQtY2hhcnRlci5tZA0KPj4+Pj4+DQo+Pj4+Pj4gLS1QYXVsIEhvZmZt YW4NCj4+Pj4+Pg0KPj4+Pj4+IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fDQo+Pj4+Pj4gQ29zZSBtYWlsaW5nIGxpc3QNCj4+Pj4+PiBDb3NlQGlldGYub3Jn PG1haWx0bzpDb3NlQGlldGYub3JnPg0KPj4+Pj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vY29zZQ0KPj4+Pj4NCj4+Pj4+DQo+Pj4+PiBfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPj4+Pj4gQ29zZSBtYWlsaW5nIGxpc3QNCj4+ Pj4+IENvc2VAaWV0Zi5vcmc8bWFpbHRvOkNvc2VAaWV0Zi5vcmc+DQo+Pj4+PiBodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UNCj4+Pj4NCj4+Pj4gX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4+Pj4gQ29zZSBtYWlsaW5nIGxp c3QNCj4+Pj4gQ29zZUBpZXRmLm9yZzxtYWlsdG86Q29zZUBpZXRmLm9yZz4NCj4+Pj4gaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlDQo+Pj4NCj4+PiBfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPj4+IENvc2UgbWFpbGluZyBs aXN0DQo+Pj4gQ29zZUBpZXRmLm9yZzxtYWlsdG86Q29zZUBpZXRmLm9yZz4NCj4+PiBodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UNCj4+IA0KPj4gDQo+PiANCj4+IC0t DQo+PiANCj4+IEJlc3QgcmVnYXJkcywNCj4+IEthdGhsZWVuDQo+PiANCj4+IA0KPj4gDQo+PiAt LQ0KPj4gDQo+PiBCZXN0IHJlZ2FyZHMsDQo+PiBLYXRobGVlbg0KPj4gX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4+IENvc2UgbWFpbGluZyBsaXN0DQo+ PiBDb3NlQGlldGYub3JnPG1haWx0bzpDb3NlQGlldGYub3JnPg0KPj4gaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlDQo+PiANCj4+IA0KPj4gDQo+PiBfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPj4gQ29zZSBtYWlsaW5nIGxp c3QNCj4+IENvc2VAaWV0Zi5vcmcNCj4+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vY29zZQ0KPj4gDQoNCg== From nobody Sat Apr 25 05:12:23 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 26F1E1A19F6 for ; Sat, 25 Apr 2015 05:12:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.31 X-Spam-Level: X-Spam-Status: No, score=-3.31 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_37=0.6, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kv2cY7F21gV5 for ; Sat, 25 Apr 2015 05:12:18 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E021C1A19F0 for ; Sat, 25 Apr 2015 05:12:17 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 22284BE51; Sat, 25 Apr 2015 13:12:14 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J-xGAhlWVO-h; Sat, 25 Apr 2015 13:12:11 +0100 (IST) Received: from [10.87.48.73] (unknown [86.42.29.198]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id D6BF2BE50; Sat, 25 Apr 2015 13:12:10 +0100 (IST) Message-ID: <553B849A.6040907@cs.tcd.ie> Date: Sat, 25 Apr 2015 13:12:10 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: =?UTF-8?B?R8O2cmFuIFNlbGFuZGVy?= References: <043201d076df$aa87b770$ff972650$@augustcellars.com> <50A4152F-E8F1-4890-AD03-065899ACC3BB@vpnc.org> <04c701d07721$69175fb0$3b461f10$@augustcellars.com> <566CD668-1A69-4D37-A04E-98025906759D@gmail.com> <013d01d07c83$01465190$03d2f4b0$@augustcellars.com> <022601d07d1b$34298670$9c7c9350$@augustcellars.com> <657EE3F5-CB06-4227-8E91-BFB3AB50233D@ericsson.com> <025a01d07d34$9f540740$ddfc15c0$@augustcellars.com> <5538B9BF.7090601@cs.tcd.ie> In-Reply-To: OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: Jim Schaad , "cose@ietf.org" Subject: Re: [Cose] Charter State X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Apr 2015 12:12:22 -0000 On 25/04/15 06:16, Göran Selander wrote: > Hi Stephen, > > I asked Kenny Patterson in Dallas about signature algorithm with message > recovery suitable for embedded devices and he recommended me to send an > email to CFRG after the EC signature discussion had begun (and be prepared > for delays etc.). > > When the discussion appeared in COSE, I thought it would be better (e.g. > from a "minimize disturbance” point of view) that someone contacted CFRG > on behalf of COSE rather than me sending a personal email. Do you agree? I wouldn't say it'll make that much difference to the timing in this case, but sure, once there's a COSE WG and the chairs figure there's rough consensus on just what crypto stuff is needed, it'll be good to get a question (or set of questions) sent to CFRG from the WG. In the past, CFRG regretted it when they answered what they thought was the question asked, when that in fact turned out not to be the right question to answer for a WG. People who care and are able, can of course go get involved on the CFRG list directly to move the work forward. S. > > > Göran > > > > On 2015-04-23 11:22, "Stephen Farrell" wrote: > >> >> Please be aware tha CFRG are currently very busy with selecting >> and documenting additional curves and associated signature >> mechanisms. If COSE needs CFRG help, you should really try to >> minimise what's needed. >> >> You could minimise that to zero by only using well-worn crypto. >> >> But if COSE needs to go beyond that (my I hope is it does not), >> then you ought be ready for delay - like any other group CFRG >> has limited bandwidth bounded by volunteer cycles. >> >> S. >> >> On 23/04/15 07:47, Göran Selander wrote: >>> >>> >>> In order to get the CFRG pointed in the right direction, it is >>> necessary to give it some input. To that end I would suggest we start >>> with doing a survey of three questions: >>> >>> >>> 1. What type of algorithms are needed? (key agreement, key >>> transport, signature, hash, MAC, KDF, etc) >>> >>> For the use cases I have in mind: key transport, KDF, encryption/AEAD, >>> hash and signature. But the main concern is around signatures. >>> >>> 1. ECDSA size of signature at 112-128 bits security is of the order of >>> 60 bytes which is a lot compared to 8 bytes truncated MAC. It would be >>> good to have a recommendation of a signature algorithm with message >>> recovery, such as ECPVS (which has some IPR, some of which is expiring >>> in a few years) or other. >>> >>> 2. A combined symmetric key encryption + signature is needed for >>> point-multipoint settings. >>> >>> >>> >>> 2. What are the constraints we really care about? >>> >>> The charter says "Minimizing message size, code size and computational >>> complexity”. In order of importance for signatures I’d say message >>> size, computational complexity, code size. >>> >>> >>> >>> 3. What algorithms are we currently using today for those >>> purposes? >>> >>> >>> The default algorithms are those specified by CoAP (secp256r1 for ECDSA) >>> >>> >>> >>> Jim >>> >>> >>> From: Göran Selander [mailto:goran.selander@ericsson.com] >>> Sent: Wednesday, April 22, 2015 12:24 PM >>> To: Kathleen Moriarty >>> Cc: Jim Schaad; cose@ietf.org >>> Subject: Re: [Cose] Charter State >>> >>> Looks fine. >>> >>> About the constrained-appropriate algorithms: is the intention to >>> consult CFRG? If so, maybe would be good to get that ball rolling too >>> soon. >>> >>> Thanks, >>> Göran >>> >>> On 22 apr 2015, at 18:54, Kathleen Moriarty >>> >>>> wrote: >>> Great, are others ok with the changes? If so, I'll get it rolling. >>> >>> On Wed, Apr 22, 2015 at 12:41 PM, Jim Schaad >>> > wrote: >>> Be my guest to make the changes. >>> >>> Jim >>> >>> >>> From: Cose [mailto:cose-bounces@ietf.org] >>> On Behalf Of Kathleen Moriarty >>> Sent: Wednesday, April 22, 2015 9:27 AM >>> To: Jim Schaad >>> >>> Cc: cose@ietf.org >>> Subject: Re: [Cose] Charter State >>> >>> Hi, >>> >>> I am assuming the current charter text is at the link: >>> https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md >>> >>> I have some proposed changes that I think help with readability. Let >>> me know if these are ok and I'll put in the charter for IESG review. >>> All of the charter text is included, broken out by sections to show >>> edits. In some cases, there is a Note: following a change with >>> assumptions I was making in case they were not correct assumptions. >>> >>> Old:Concise Binary Object Representation (CBOR, RFC 7049) is a concise >>> binary format for the serialization of data structured to an extended >>> version of the JSON data model. One motivation for CBOR was to make this >>> data model more amenable to constrained nodes and constrained node >>> networks (RFC 7228). >>> New: >>> Concise Binary Object Representation (CBOR, RFC 7049) is a concise >>> binary format for the serialization of data structured to an extended >>> version of the JSON data model. One motivation for COSE was to reuse >>> functionality from the JOSE working group using the CBOR data >>> representation as it is more amenable to constrained nodes and >>> constrained node networks (RFC 7228). >>> >>> Old: >>> The JOSE working group recently completed producing representations for >>> cryptographic keys, message authentication (MACs), encryption, and >>> digital signatures, using JSON representation. This working group will >>> reuse the work done by JOSE, adapting it to the capabilities of CBOR. >>> This will rely on the JOSE registries, which, where this provides >>> additional efficiency, will be expanded with additional information. >>> New: >>> The JOSE working group recently completed producing representations for >>> cryptographic keys, message authentication (MACs), encryption, and >>> digital signatures, using JSON representation. COSE will rely on the >>> JOSE registries, and will be expand them with additional information >>> when necessary. >>> >>> Note: you may have other reasons besides efficiency. >>> >>> Old: >>> The resulting formats will not be cryptographically convertible from or >>> to JOSE formats. This lack of a need for bit-for-bit compabitility which >>> will enable some simplification in the adaptation process. >>> New: >>> The resulting formats will not be cryptographically convertible from or >>> to JOSE formats. This lack of a need for bit-for-bit compatibility will >>> enable some simplification in the adaptation process. >>> >>> Old: >>> >>> Criteria that should be considered on making decisions in changing from >>> a JSON to a CBOR encoding are: >>> >>> · Keeping the current JOSE paradigms and formatting where feasible. >>> >>> · Minimizing message size, code size and computational complexity >>> should be considered (for the constrained environments where we expect >>> to use this). >>> >>> · Improving security >>> >>> · Providing new functionality that uses of JOSE did not require, >>> but are required for the new use cases. >>> New: >>> >>> Criteria that should be considered in the decision making process, >>> changing from JSON to CBOR encoding include: >>> >>> · Maintain the current JOSE paradigms and formatting where >>> feasible. >>> >>> · Minimize message size, code size, and computational complexity >>> to suit constrained environments, where this is expected to be used. >>> >>> · Improve security >>> >>> · Provide new functionality for additional use cases that were not >>> required for JOSE. >>> Old: >>> Issues dealing with key management and binding of keys to identities >>> are out of scope for the working group. >>> New: >>> Key management and binding of keys to identities are out of scope for >>> the working group. >>> >>> Note: I am assuming you really want to out-of scope all key management >>> and not just issues? >>> >>> And I don't see any need to tweak the rest of the text: >>> >>> The Working group will coordinate its progress with the ACE, DICE and >>> CORE working groups to ensure that we are fulfilling the needs of these >>> constituencies. Other groups may be added to this list as the set of use >>> cases is expanded. >>> >>> The WG will have two deliverables: >>> >>> * a standards-track specification covering the same cryptographic >>> formats from JOSE, with optimizations for constrained device processing, >>> expressed in CBOR; >>> * registration for algorithms (such as AES-CCM-8) that are >>> appropriate for constrained environments. >>> >>> The Working Group will use a wiki to track desired use cases for its >>> work, but does not intend to publish this as an RFC. >>> >>> >>> I'd love it if you can keep to the milestones projected :-) >>> >>> Thanks. >>> Kathleen >>> >>> On Tue, Apr 21, 2015 at 6:32 PM, Jim Schaad >>> > wrote: >>> The date change proposed by me has been merged into the draft. >>> >>> I believe that we can now consider the charter discussion to be >>> complete unless anyone else has a big issue they want to bring up. >>> >>> Kathleen: Can we get this to move forward into the IESG? >>> >>> Jim >>> >>> >>>> -----Original Message----- >>>> From: Cose >>>> [mailto:cose-bounces@ietf.org] On Behalf >>>> Of Kathleen Moriarty >>>> Sent: Tuesday, April 14, 2015 7:17 PM >>>> To: Jim Schaad >>>> Cc: Kepeng Li; Paul Hoffman; cose@ietf.org >>>> Subject: Re: [Cose] Charter State >>>> >>>> >>>> >>>> Sent from my iPhone >>>> >>>>> On Apr 14, 2015, at 10:10 PM, "Jim Schaad" >>>>> > >>>> wrote: >>>>> >>>>> >>>>> >>>>>> -----Original Message----- >>>>>> From: Cose >>>>>> [mailto:cose-bounces@ietf.org] On >>>>>> Behalf Of Kepeng Li >>>>>> Sent: Tuesday, April 14, 2015 6:59 PM >>>>>> To: Paul Hoffman; Jim Schaad >>>>>> Cc: cose@ietf.org >>>>>> Subject: Re: [Cose] Charter State >>>>>> >>>>>> Thanks Paul. >>>>>> >>>>>> There are two other changes we might want to incorporate: >>>>>> >>>>>> 1) Proposal from Goran: >>>>>> http://www.ietf.org/mail-archive/web/cose/current/msg00027.html >>>>>> >>>>>> OLD: >>>>>> "a standards-track specification covering the same cryptographic >>>>>> formats >>>>> from >>>>>> JOSE, expressed in CBOR" >>>>>> >>>>>> NEW: >>>>>> "a standards-track specification covering the same cryptographic >>>>>> formats >>>>> from >>>>>> JOSE and optimizations for constrained device processing, expressed >>>>>> in >>>>> CBOR >>>>> >>>>> I am agnostic about including this change. We now are much more >>>>> constrained device focused later so it might not be needed. >>>>> >>>>>> >>>>>> (2) Proposal from Kathleen: >>>>>> >>>>>> http://www.ietf.org/mail-archive/web/cose/current/msg00077.html >>>>>> >>>>>> OLD: >>>>>> The Working Group will coordinate its progress with the ACE, DICE and >>>>>> CoRE working groups to ensure that we are fulfilling the needs of >>>>>> these constituencies. >>>>>> >>>>>> NEW: >>>>>> The Working Group will coordinate its progress with the ACE, DICE, >>>>>> CoRE >>>>> and >>>>>> DIME working groups to ensure that we are fulfilling the needs of >>>>>> these constituencies. >>>>> >>>>> I am not sure that DIME is a reasonable group to be coordinating with >>>>> since it is not clear that this would be the solution space they are >>>>> going to operate in. It is true that this need something along these >>>>> lines, but what they need first is to get someone who has good >>>>> knowledge of what can be done in the group first. Given that this is >>>>> major (telecom) vendors, using CMS might be a better fit for this >>>>> >>>>> The other question if we expand this list here rather than in the wiki >>>>> is the set of groups that Rene Struik though that might be included >>>>> here such as "6TiSCH, 6lo, RoLL, etc" which seem to be much closer to >>>>> the types of groups that might use this specification going forward. >>>>> >>>>> At this point, I think I would go with the list we have and start >>>>> adding more groups to the wiki. >>>> >>>> I'm fine with that approach. My point in bringing up DIME was more >>>> that they >>>> need help and this *could* help them, but work needs to be done to >>>> figure >>>> out what they need at this point. I brought it up just in case it's >>>> relevant to >>>> COSE. >>>> >>>> Thanks, >>>> Kathleen >>>>> >>>>> Jim >>>>> >>>>>> >>>>>> >>>>>> Thanks, >>>>>> >>>>>> Kind Regards >>>>>> Kepeng >>>>>> >>>>>> ? 15/4/15 2:32 am, "Paul Hoffman" >>>>>> > ??: >>>>>> >>>>>>> On Apr 14, 2015, at 11:20 AM, Jim Schaad >>>>>>> > >>>> wrote: >>>>>>>> >>>>>>>> I would like to get Pull Request #2 rolled into the draft charter >>>>>>>> and then I think we are ready to send it to the ADs and IESG for >>>>>>>> review. >>>>>>>> >>>>>>>> Since it is my pull request I have not done the merge preferring >>>>>>>> that it be done by one of the others who have permissions. If I >>>>>>>> get a message saying do the merge request I would be happy to pull >>>>>>>> the trigger on it. >>>>>>> >>>>>>> There seemed to be general agreement, so I accepted the pull >>>>>>> request. >>>>>>> >>>>>>> Current version is at: >>>>>>> https://github.com/cose-spec/wg-charter/blob/master/draft-charter.md >>>>>>> >>>>>>> --Paul Hoffman >>>>>>> >>>>>>> _______________________________________________ >>>>>>> Cose mailing list >>>>>>> Cose@ietf.org >>>>>>> https://www.ietf.org/mailman/listinfo/cose >>>>>> >>>>>> >>>>>> _______________________________________________ >>>>>> Cose mailing list >>>>>> Cose@ietf.org >>>>>> https://www.ietf.org/mailman/listinfo/cose >>>>> >>>>> _______________________________________________ >>>>> Cose mailing list >>>>> Cose@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/cose >>>> >>>> _______________________________________________ >>>> Cose mailing list >>>> Cose@ietf.org >>>> https://www.ietf.org/mailman/listinfo/cose >>> >>> >>> >>> -- >>> >>> Best regards, >>> Kathleen >>> >>> >>> >>> -- >>> >>> Best regards, >>> Kathleen >>> _______________________________________________ >>> Cose mailing list >>> Cose@ietf.org >>> https://www.ietf.org/mailman/listinfo/cose >>> >>> >>> >>> _______________________________________________ >>> Cose mailing list >>> Cose@ietf.org >>> https://www.ietf.org/mailman/listinfo/cose >>> > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose > From nobody Sat Apr 25 06:51:56 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B1371B2C67 for ; Sat, 25 Apr 2015 06:51:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.977 X-Spam-Level: X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Sce1UxIQx6Qd for ; Sat, 25 Apr 2015 06:51:53 -0700 (PDT) Received: from mail-la0-f46.google.com (mail-la0-f46.google.com [209.85.215.46]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B0B781B2C64 for ; Sat, 25 Apr 2015 06:51:51 -0700 (PDT) Received: by labbd9 with SMTP id bd9so52919268lab.2 for ; Sat, 25 Apr 2015 06:51:50 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=MKN+IddryRPZxVGq5gHhmggNtg5Lqp3gQdC8zZt7dqM=; b=a+UpIsl5RlBIMdmS9kzMA0vXsnNmauEkI81ERn7te5VDZZ2vF7k4uHr/mYmdGemi+/ 9aXSD05pRhbXyCNiq+cek44fL7jKCGkJpb7K2/nC/ZqPe/RvsxNTQgl3sgsWaoSXgtm5 tUnOPut9quPRsw/aQebSPs4Ayv0/yMHVMV02h0Usr+zUQL9hx6YsSPKOK69CUokf+88u tmrZY2fLt98UkOTkxF2zGG9bGkIAO1gZguugXvoZGS9HB27j96nuV3dAJzcoBA+QJiNC 1Sxrvzzi0lsFigve5BKEhrg7BFJBQBv9XTsladdMT8HJCZ/dWID0w+2tn3RE6tK1kdHo ZzPg== X-Gm-Message-State: ALoCoQlJWHDx3ePZ49AU3k+n5ClkQBH5vjVZrbvjv1lSD9/9hXeso6ihQcXp/Q/jPPU4vB4M/VnI MIME-Version: 1.0 X-Received: by 10.152.22.229 with SMTP id h5mr2868036laf.21.1429969910466; Sat, 25 Apr 2015 06:51:50 -0700 (PDT) Received: by 10.152.111.103 with HTTP; Sat, 25 Apr 2015 06:51:50 -0700 (PDT) In-Reply-To: <04a401d07ef6$827dc700$87795500$@augustcellars.com> References: <017601d07cad$0f29f9e0$2d7deda0$@augustcellars.com> <024801d07d2d$6137c6b0$23a75410$@augustcellars.com> <04a401d07ef6$827dc700$87795500$@augustcellars.com> Date: Sat, 25 Apr 2015 15:51:50 +0200 Message-ID: From: Samuel Erdtman To: Jim Schaad Content-Type: multipart/alternative; boundary=089e0160b6de8da1dc05148cd068 Archived-At: Cc: cose Subject: Re: [Cose] Issue: Use arrays for some containers X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Apr 2015 13:51:55 -0000 --089e0160b6de8da1dc05148cd068 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable I initially felt strongly for using maps and not arrays, I think that was mostly since it is so convenient in JavaScript but as keys in the map are changed from string to integers some of the readability and simplicity falls away. Initially I also thought that adding new element in an array would be harder but I guess it would be more or less the same if I have a map where I don=C2=B4t address all elements compared to an array where I do= n=C2=B4t read the end. With that said I=C2=B4m still slightly more in favor of maps and if using a= rrays I=C2=B4m strongly in favor of having null for absent values. To me it seems unnecessarily complex to analyse the type of an object based on previous object. Another reflection, for this protocol to get adoption implementors needs to feel that it would be simple to use, and since my first reaction was to intuitively prefer maps I think that using maps would benefit adoption. Best Regards //Samuel On Sat, Apr 25, 2015 at 3:24 AM, Jim Schaad wrote: > Questions: > > 1. Should we use arrays or maps as top level containers for COSE? > > Arrays > > 2. If we use arrays, should we always use nil elements to indicate absen= t > elements or use them only when ambiguity in parsing arises? > > Always have a field > > > ************************************** > > At this point, the majority of people who have expressed an opinion have > said that they prefer to use maps than arrays. I have not yet seen an > argument that I could call a technical one rather than an 'emotional' one= . > People are expressing a preference rather than an argument on what the > correct option is. This applies to me as well. > > After taking a long walk, I think I now understand why I prefer arrays to > maps. I generally prefer to restrict the set of locations where arbitrar= y > things can be placed that might affect the security of the system. By > allowing things in fewer places there are fewer ways that things can go > wrong. This is not to say that things will go wrong, it is just expressi= ng > a comfort level on my part. > > On Wed I sent a message to the list and Derek, in which I outlined a poli= cy > of either doing a strict or a lax enforcement of the fields in a map when > doing an evaluation. I would appreciate it if people who think maps are > better can respond to this. > > My personal preference is that if we do use maps, we all for applications > to > specify if they want t use a strict or lax mode and would prefer that the > default is strict mode. > > Jim > > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose > --089e0160b6de8da1dc05148cd068 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
    I initially felt strongly for using maps and not arrays, I= think that was mostly since it is so convenient in JavaScript but as keys = in the map are changed from string to integers some of the readability and = simplicity falls away. Initially I also thought that adding new element in = an array would be harder but I guess it would be more or less the same if I= have a map where I don=C2=B4t address all elements compared to an array wh= ere I don=C2=B4t read the end.

    With that said I=C2=B4m s= till slightly more in favor of maps and if using arrays I=C2=B4m strongly i= n favor of having null for absent values. To me it seems unnecessarily comp= lex to analyse the type of an object based on previous object.
    Another reflection, for this protocol to get adoption implemen= tors needs to feel that it would be simple to use, and since my first react= ion was to intuitively prefer maps I think that using maps would benefit ad= option.

    Best Regards
    //Samuel
    =







    On Sat, Apr 25, 2015 at 3:24 AM, Jim Schaad <ietf@augus= tcellars.com> wrote:
    Questions:

    1.=C2=A0 Should we use arrays or maps as top level containers for COSE?

    Arrays

    2.=C2=A0 If we use arrays, should we always use nil elements to indicate ab= sent
    elements or use them only when ambiguity in parsing arises?

    Always have a field


    **************************************

    At this point, the majority of people who have expressed an opinion have said that they prefer to use maps than arrays.=C2=A0 I have not yet seen an=
    argument that I could call a technical one rather than an 'emotional= 9; one.
    People are expressing a preference rather than an argument on what the
    correct option is.=C2=A0 This applies to me as well.

    After taking a long walk, I think I now understand why I prefer arrays to maps.=C2=A0 I generally prefer to restrict the set of locations where arbit= rary
    things can be placed that might affect the security of the system.=C2=A0 By=
    allowing things in fewer places there are fewer ways that things can go
    wrong.=C2=A0 This is not to say that things will go wrong, it is just expre= ssing
    a comfort level on my part.

    On Wed I sent a message to the list and Derek, in which I outlined a policy=
    of either doing a strict or a lax enforcement of the fields in a map when doing an evaluation.=C2=A0 I would appreciate it if people who think maps a= re
    better can respond to this.

    My personal preference is that if we do use maps, we all for applications t= o
    specify if they want t use a strict or lax mode and would prefer that the default is strict mode.

    Jim


    _______________________________________________
    Cose mailing list
    Cose@ietf.org
    ht= tps://www.ietf.org/mailman/listinfo/cose

    --089e0160b6de8da1dc05148cd068-- From nobody Mon Apr 27 07:05:13 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 305651A19FE for ; Mon, 27 Apr 2015 07:05:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.411 X-Spam-Level: * X-Spam-Status: No, score=1.411 tagged_above=-999 required=5 tests=[BAYES_50=0.8, HELO_MISMATCH_ORG=0.611] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uP6ELz7EsV9Q for ; Mon, 27 Apr 2015 07:05:06 -0700 (PDT) Received: from mail2.ihtfp.org (MAIL2.IHTFP.ORG [204.107.200.7]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 13CA21A19F6 for ; Mon, 27 Apr 2015 07:05:06 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail2.ihtfp.org (Postfix) with ESMTP id 8DB1BE2039; Mon, 27 Apr 2015 10:05:04 -0400 (EDT) Received: from mail2.ihtfp.org ([127.0.0.1]) by localhost (mail2.ihtfp.org [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 29250-08; Mon, 27 Apr 2015 10:05:01 -0400 (EDT) Received: from securerf.ihtfp.org (unknown [IPv6:fe80::ea2a:eaff:fe7d:235]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mocana.ihtfp.org", Issuer "IHTFP Consulting Certification Authority" (verified OK)) by mail2.ihtfp.org (Postfix) with ESMTPS id D2093E2035; Mon, 27 Apr 2015 10:05:00 -0400 (EDT) Received: (from warlord@localhost) by securerf.ihtfp.org (8.14.8/8.14.8/Submit) id t3RE4wdu022845; Mon, 27 Apr 2015 10:04:58 -0400 From: Derek Atkins To: Samuel Erdtman References: <017601d07cad$0f29f9e0$2d7deda0$@augustcellars.com> <024801d07d2d$6137c6b0$23a75410$@augustcellars.com> <04a401d07ef6$827dc700$87795500$@augustcellars.com> Date: Mon, 27 Apr 2015 10:04:58 -0400 In-Reply-To: (Samuel Erdtman's message of "Sat, 25 Apr 2015 15:51:50 +0200") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Virus-Scanned: Maia Mailguard 1.0.2a Archived-At: Cc: Jim Schaad , cose Subject: Re: [Cose] Issue: Use arrays for some containers X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Apr 2015 14:05:12 -0000 Samuel, Samuel Erdtman writes: > I initially felt strongly for using maps and not arrays, I think that was > mostly since it is so convenient in JavaScript but as keys in the map are > changed from string to integers some of the readability and simplicity fa= lls > away. Initially I also thought that adding new element in an array would = be > harder but I guess it would be more or less the same if I have a map wher= e I > don=C2=B4t address all elements compared to an array where I don=C2=B4t r= ead the end. Do you mean (User) Presentation Layer readability? Or on-the-wire readability? Yes, the latter is definitely different with the conversion to integers, but the former does not necessarily disappear. The parser could have the mapping from string -> integer and be able to "present" the strings to the user. > With that said I=C2=B4m still slightly more in favor of maps and if using= arrays > I=C2=B4m strongly in favor of having null for absent values. To me it see= ms > unnecessarily complex to analyse the type of an object based on previous > object. > > Another reflection, for this protocol to get adoption implementors needs = to > feel that it would be simple to use, and since my first reaction was to > intuitively prefer maps I think that using maps would benefit adoption. > > Best Regards > //Samuel -derek > On Sat, Apr 25, 2015 at 3:24 AM, Jim Schaad wrot= e: > > Questions: >=20=20=20=20 > 1.=C2=A0 Should we use arrays or maps as top level containers for COS= E? >=20=20=20=20 > Arrays >=20=20=20=20 > 2.=C2=A0 If we use arrays, should we always use nil elements to indic= ate absent > elements or use them only when ambiguity in parsing arises? >=20=20=20=20 > Always have a field > > ************************************** >=20=20=20=20 > At this point, the majority of people who have expressed an opinion h= ave > said that they prefer to use maps than arrays.=C2=A0 I have not yet s= een an > argument that I could call a technical one rather than an 'emotional'= one. > People are expressing a preference rather than an argument on what the > correct option is.=C2=A0 This applies to me as well. >=20=20=20=20 > After taking a long walk, I think I now understand why I prefer array= s to > maps.=C2=A0 I generally prefer to restrict the set of locations where= arbitrary > things can be placed that might affect the security of the system.=C2= =A0 By > allowing things in fewer places there are fewer ways that things can = go > wrong.=C2=A0 This is not to say that things will go wrong, it is just > expressing > a comfort level on my part. >=20=20=20=20 > On Wed I sent a message to the list and Derek, in which I outlined a > policy > of either doing a strict or a lax enforcement of the fields in a map = when > doing an evaluation.=C2=A0 I would appreciate it if people who think = maps are > better can respond to this. >=20=20=20=20 > My personal preference is that if we do use maps, we all for applicat= ions > to > specify if they want t use a strict or lax mode and would prefer that= the > default is strict mode. >=20=20=20=20 > Jim > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose --=20 Derek Atkins 617-623-3745 derek@ihtfp.com www.ihtfp.com Computer and Internet Security Consultant From nobody Mon Apr 27 21:45:17 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3631C1A0007 for ; Mon, 27 Apr 2015 21:45:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.078 X-Spam-Level: X-Spam-Status: No, score=-0.078 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, FM_FORGED_GMAIL=0.622, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kGGVDuMN8J8g for ; Mon, 27 Apr 2015 21:45:13 -0700 (PDT) Received: from mail-lb0-f169.google.com (mail-lb0-f169.google.com [209.85.217.169]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E53CF1A0032 for ; Mon, 27 Apr 2015 21:45:12 -0700 (PDT) Received: by lbbqq2 with SMTP id qq2so98003208lbb.3 for ; Mon, 27 Apr 2015 21:45:11 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc:content-type; bh=A17mIHnkG33hA6dcio/vyu8+XST/ytNaYDPhLYJvuf8=; b=UmJrfiUPHHTgNXj0udil2KxkEzrWN19cchdCStQgBTwfLjsqYbjJ1TyYSScr9evnnN MwmvAIBLUFeuOe3fCqrok40fDfo+EEp5wJVJuNIcFEv0llHfw9Pnf3ElGSJIRGPYF759 vu9kJ1lFjGq7uopqNdxx/D8lXPiF26A1H6INP2kROk4Rk/+GYJlJmwVjJwHN+R2Z8GCW W5lSa/4QKblao2nMIefwS9q2WLaWN+pqxIxMxEweebUwrVUVs8FOpIbjykHc7KXYJPuJ X9nfdxOD/9h5iY+sIhhciZMBjJ/k4/5oojvJ3FRcKfG3y1epAQk7mCWGfZd9QbzKOdeV ET6A== X-Gm-Message-State: ALoCoQkNBTvQmm2pK1ogJ0WASj0ajuuiMj8DebbPpFvRmxQTwz8Z6kHwkWbsfvWgywjVRSVGoj1c MIME-Version: 1.0 X-Received: by 10.152.36.40 with SMTP id n8mr12914007laj.121.1430196311188; Mon, 27 Apr 2015 21:45:11 -0700 (PDT) Received: by 10.152.111.103 with HTTP; Mon, 27 Apr 2015 21:45:11 -0700 (PDT) In-Reply-To: References: <017601d07cad$0f29f9e0$2d7deda0$@augustcellars.com> <024801d07d2d$6137c6b0$23a75410$@augustcellars.com> <04a401d07ef6$827dc700$87795500$@augustcellars.com> Date: Tue, 28 Apr 2015 06:45:11 +0200 Message-ID: From: Samuel Erdtman To: Derek Atkins Content-Type: multipart/alternative; boundary=089e0160a9d4167d640514c18778 Archived-At: Cc: Jim Schaad , cose Subject: Re: [Cose] Issue: Use arrays for some containers X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Apr 2015 04:45:16 -0000 --089e0160a9d4167d640514c18778 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Derek see inline On Mon, Apr 27, 2015 at 4:04 PM, Derek Atkins wrote: > Samuel, > > Samuel Erdtman writes: > > > I initially felt strongly for using maps and not arrays, I think that w= as > > mostly since it is so convenient in JavaScript but as keys in the map a= re > > changed from string to integers some of the readability and simplicity > falls > > away. Initially I also thought that adding new element in an array woul= d > be > > harder but I guess it would be more or less the same if I have a map > where I > > don=C2=B4t address all elements compared to an array where I don=C2=B4t= read the > end. > > Do you mean (User) Presentation Layer readability? Or on-the-wire > readability? Yes, the latter is definitely different with the > conversion to integers, but the former does not necessarily disappear. > The parser could have the mapping from string -> integer and be able to > "present" the strings to the user. > Don=C2=B4t think that I had thought about it in that detail. I completely a= gree with you that it is possible to put a presentation layer on top of both these scenario (map and array) so that one would see strings/labels when writing code or looking at the bytes in wireshark (or similar), however there will always be the case when you don=C2=B4t have the tools available = and in those cases readability will be slightly easier with maps IMHO. > > > With that said I=C2=B4m still slightly more in favor of maps and if usi= ng > arrays > > I=C2=B4m strongly in favor of having null for absent values. To me it s= eems > > unnecessarily complex to analyse the type of an object based on previou= s > > object. > > > > Another reflection, for this protocol to get adoption implementors need= s > to > > feel that it would be simple to use, and since my first reaction was to > > intuitively prefer maps I think that using maps would benefit adoption. > > > > Best Regards > > //Samuel > > -derek > > > On Sat, Apr 25, 2015 at 3:24 AM, Jim Schaad > wrote: > > > > Questions: > > > > 1. Should we use arrays or maps as top level containers for COSE? > > > > Arrays > > > > 2. If we use arrays, should we always use nil elements to indicate > absent > > elements or use them only when ambiguity in parsing arises? > > > > Always have a field > > > > ************************************** > > > > At this point, the majority of people who have expressed an opinion > have > > said that they prefer to use maps than arrays. I have not yet seen > an > > argument that I could call a technical one rather than an > 'emotional' one. > > People are expressing a preference rather than an argument on what > the > > correct option is. This applies to me as well. > > > > After taking a long walk, I think I now understand why I prefer > arrays to > > maps. I generally prefer to restrict the set of locations where > arbitrary > > things can be placed that might affect the security of the system. > By > > allowing things in fewer places there are fewer ways that things ca= n > go > > wrong. This is not to say that things will go wrong, it is just > > expressing > > a comfort level on my part. > > > > On Wed I sent a message to the list and Derek, in which I outlined = a > > policy > > of either doing a strict or a lax enforcement of the fields in a ma= p > when > > doing an evaluation. I would appreciate it if people who think map= s > are > > better can respond to this. > > > > My personal preference is that if we do use maps, we all for > applications > > to > > specify if they want t use a strict or lax mode and would prefer > that the > > default is strict mode. > > > > Jim > > > > _______________________________________________ > > Cose mailing list > > Cose@ietf.org > > https://www.ietf.org/mailman/listinfo/cose > > > > _______________________________________________ > > Cose mailing list > > Cose@ietf.org > > https://www.ietf.org/mailman/listinfo/cose > > -- > Derek Atkins 617-623-3745 > derek@ihtfp.com www.ihtfp.com > Computer and Internet Security Consultant > --089e0160a9d4167d640514c18778 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
    Derek

    see inline

    On Mon, Apr 27, 2015 at 4:04 PM, Derek Atkins <derek@ihtfp.= com> wrote:
    Samuel,

    Samuel Erdtman <samuel@erdtman.se> writes:

    > I initially felt strongly for using maps and not arrays, I think that = was
    > mostly since it is so convenient in JavaScript but as keys in the map = are
    > changed from string to integers some of the readability and simplicity= falls
    > away. Initially I also thought that adding new element in an array wou= ld be
    > harder but I guess it would be more or less the same if I have a map w= here I
    > don=C2=B4t address all elements compared to an array where I don=C2=B4= t read the end.

    Do you mean (User) Presentation Layer readability?=C2=A0 Or on-the-w= ire
    readability?=C2=A0 Yes, the latter is definitely different with the
    conversion to integers, but the former does not necessarily disappear.
    The parser could have the mapping from string -> integer and be able to<= br> "present" the strings to the user.


    Don=C2=B4t think that I had thought about it in that d= etail. I completely agree with you that it is possible to put a presentatio= n layer on top of both these scenario (map and array) so that one would see= strings/labels when writing code or looking at the bytes in wireshark (or = similar), however there will always be the case when you don=C2=B4t have th= e tools available and in those cases readability will be slightly easier wi= th maps IMHO.
    =C2=A0

    > With that said I=C2=B4m still slightly more in favor of maps and if us= ing arrays
    > I=C2=B4m strongly in favor of having null for absent values. To me it = seems
    > unnecessarily complex to analyse the type of an object based on previo= us
    > object.
    >
    > Another reflection, for this protocol to get adoption implementors nee= ds to
    > feel that it would be simple to use, and since my first reaction was t= o
    > intuitively prefer maps I think that using maps would benefit adoption= .
    >
    > Best Regards
    > //Samuel

    -derek

    > On Sat, Apr 25, 2015 at 3:24 AM, Jim Schaad <    ietf@augustcellars.com> wrote:
    >
    >=C2=A0 =C2=A0 =C2=A0Questions:
    >
    >=C2=A0 =C2=A0 =C2=A01.=C2=A0 Should we use arrays or maps as top level = containers for COSE?
    >
    >=C2=A0 =C2=A0 =C2=A0Arrays
    >
    >=C2=A0 =C2=A0 =C2=A02.=C2=A0 If we use arrays, should we always use nil= elements to indicate absent
    >=C2=A0 =C2=A0 =C2=A0elements or use them only when ambiguity in parsing= arises?
    >
    >=C2=A0 =C2=A0 =C2=A0Always have a field
    >
    >=C2=A0 =C2=A0 =C2=A0**************************************
    >
    >=C2=A0 =C2=A0 =C2=A0At this point, the majority of people who have expr= essed an opinion have
    >=C2=A0 =C2=A0 =C2=A0said that they prefer to use maps than arrays.=C2= =A0 I have not yet seen an
    >=C2=A0 =C2=A0 =C2=A0argument that I could call a technical one rather t= han an 'emotional' one.
    >=C2=A0 =C2=A0 =C2=A0People are expressing a preference rather than an a= rgument on what the
    >=C2=A0 =C2=A0 =C2=A0correct option is.=C2=A0 This applies to me as well= .
    >
    >=C2=A0 =C2=A0 =C2=A0After taking a long walk, I think I now understand = why I prefer arrays to
    >=C2=A0 =C2=A0 =C2=A0maps.=C2=A0 I generally prefer to restrict the set = of locations where arbitrary
    >=C2=A0 =C2=A0 =C2=A0things can be placed that might affect the security= of the system.=C2=A0 By
    >=C2=A0 =C2=A0 =C2=A0allowing things in fewer places there are fewer way= s that things can go
    >=C2=A0 =C2=A0 =C2=A0wrong.=C2=A0 This is not to say that things will go= wrong, it is just
    >=C2=A0 =C2=A0 =C2=A0expressing
    >=C2=A0 =C2=A0 =C2=A0a comfort level on my part.
    >
    >=C2=A0 =C2=A0 =C2=A0On Wed I sent a message to the list and Derek, in w= hich I outlined a
    >=C2=A0 =C2=A0 =C2=A0policy
    >=C2=A0 =C2=A0 =C2=A0of either doing a strict or a lax enforcement of th= e fields in a map when
    >=C2=A0 =C2=A0 =C2=A0doing an evaluation.=C2=A0 I would appreciate it if= people who think maps are
    >=C2=A0 =C2=A0 =C2=A0better can respond to this.
    >
    >=C2=A0 =C2=A0 =C2=A0My personal preference is that if we do use maps, w= e all for applications
    >=C2=A0 =C2=A0 =C2=A0to
    >=C2=A0 =C2=A0 =C2=A0specify if they want t use a strict or lax mode and= would prefer that the
    >=C2=A0 =C2=A0 =C2=A0default is strict mode.
    >
    >=C2=A0 =C2=A0 =C2=A0Jim
    >
    >=C2=A0 =C2=A0 =C2=A0_______________________________________________
    >=C2=A0 =C2=A0 =C2=A0Cose mailing list
    >=C2=A0 =C2=A0 =C2=A0Cose@ietf.org<= br> >=C2=A0 =C2=A0 =C2=A0https://www.ietf.org/mailman/listinfo/cose
    >
    > _______________________________________________
    > Cose mailing list
    > Cose@ietf.org
    > https://www.ietf.org/mailman/listinfo/cose

    --
    =C2=A0 =C2=A0 =C2=A0 =C2=A0Derek Atkins=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0617-623-3745
    =C2=A0 =C2=A0 =C2=A0 =C2=A0derek@ihtfp.c= om=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0www.ihtfp.com
    =C2=A0 =C2=A0 =C2=A0 =C2=A0Computer and Internet Security Consultant

    --089e0160a9d4167d640514c18778-- From nobody Tue Apr 28 06:41:37 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3F92E1AC3F5 for ; Tue, 28 Apr 2015 06:41:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QBD8BKTf6ODj for ; Tue, 28 Apr 2015 06:41:33 -0700 (PDT) Received: from smtp4.pacifier.net (smtp4.pacifier.net [64.255.237.176]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 02B511AC3F7 for ; Tue, 28 Apr 2015 06:41:31 -0700 (PDT) Received: from Philemon (unknown [50.109.252.111]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp4.pacifier.net (Postfix) with ESMTPSA id 7D05138EED; Tue, 28 Apr 2015 06:41:30 -0700 (PDT) From: "Jim Schaad" To: "'Samuel Erdtman'" , "'Derek Atkins'" References: <017601d07cad$0f29f9e0$2d7deda0$@augustcellars.com> <024801d07d2d$6137c6b0$23a75410$@augustcellars.com> <04a401d07ef6$827dc700$87795500$@augustcellars.com> In-Reply-To: Date: Tue, 28 Apr 2015 06:40:11 -0700 Message-ID: <021b01d081b8$da342380$8e9c6a80$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_021C_01D0817E.2DD6D220" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQIjhaQWeEEQ9jAwW3jY6t94GHjs1gISURK9Ag/x/AMCrU4XFAILHVn/AQpw6ZsCYzdyugDHyh95AW0dKEOcSHvPgA== Content-Language: en-us Archived-At: Cc: 'cose' Subject: Re: [Cose] Issue: Use arrays for some containers X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Apr 2015 13:41:36 -0000 This is a multipart message in MIME format. ------=_NextPart_000_021C_01D0817E.2DD6D220 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable =20 =20 From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Samuel Erdtman Sent: Monday, April 27, 2015 9:45 PM To: Derek Atkins Cc: Jim Schaad; cose Subject: Re: [Cose] Issue: Use arrays for some containers =20 Derek =20 see inline =20 On Mon, Apr 27, 2015 at 4:04 PM, Derek Atkins wrote: Samuel, Samuel Erdtman writes: > I initially felt strongly for using maps and not arrays, I think that = was > mostly since it is so convenient in JavaScript but as keys in the map = are > changed from string to integers some of the readability and simplicity = falls > away. Initially I also thought that adding new element in an array = would be > harder but I guess it would be more or less the same if I have a map = where I > don=C2=B4t address all elements compared to an array where I = don=C2=B4t read the end. Do you mean (User) Presentation Layer readability? Or on-the-wire readability? Yes, the latter is definitely different with the conversion to integers, but the former does not necessarily disappear. The parser could have the mapping from string -> integer and be able to "present" the strings to the user. =20 =20 Don=C2=B4t think that I had thought about it in that detail. I = completely agree with you that it is possible to put a presentation = layer on top of both these scenario (map and array) so that one would = see strings/labels when writing code or looking at the bytes in = wireshark (or similar), however there will always be the case when you = don=C2=B4t have the tools available and in those cases readability will = be slightly easier with maps IMHO. =20 I think that you are going to be disappointed in terms of readability. = Remember that we are using integer key names for the most part so you = are not going to get any useful hints. You are going to see something = like =20 { 1:{2:3, 4:h=E2=80=99xXXXXXXXXX=E2=80=99}, = 5:h=E2=80=99XXXXXXXXXXXX=E2=80=99, 6:[{7:h=E2=80=99XXXXXX=E2=80=99}]} =20 I don=E2=80=99t think that this is going to make life any easier if you = don=E2=80=99t remember what all of the indexes are vs where things are = in an array. =20 Jim =20 =20 > With that said I=C2=B4m still slightly more in favor of maps and if = using arrays > I=C2=B4m strongly in favor of having null for absent values. To me it = seems > unnecessarily complex to analyse the type of an object based on = previous > object. > > Another reflection, for this protocol to get adoption implementors = needs to > feel that it would be simple to use, and since my first reaction was = to > intuitively prefer maps I think that using maps would benefit = adoption. > > Best Regards > //Samuel -derek > On Sat, Apr 25, 2015 at 3:24 AM, Jim Schaad = wrote: > > Questions: > > 1. Should we use arrays or maps as top level containers for COSE? > > Arrays > > 2. If we use arrays, should we always use nil elements to = indicate absent > elements or use them only when ambiguity in parsing arises? > > Always have a field > > ************************************** > > At this point, the majority of people who have expressed an = opinion have > said that they prefer to use maps than arrays. I have not yet = seen an > argument that I could call a technical one rather than an = 'emotional' one. > People are expressing a preference rather than an argument on what = the > correct option is. This applies to me as well. > > After taking a long walk, I think I now understand why I prefer = arrays to > maps. I generally prefer to restrict the set of locations where = arbitrary > things can be placed that might affect the security of the system. = By > allowing things in fewer places there are fewer ways that things = can go > wrong. This is not to say that things will go wrong, it is just > expressing > a comfort level on my part. > > On Wed I sent a message to the list and Derek, in which I outlined = a > policy > of either doing a strict or a lax enforcement of the fields in a = map when > doing an evaluation. I would appreciate it if people who think = maps are > better can respond to this. > > My personal preference is that if we do use maps, we all for = applications > to > specify if they want t use a strict or lax mode and would prefer = that the > default is strict mode. > > Jim > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose -- Derek Atkins 617-623-3745 derek@ihtfp.com www.ihtfp.com Computer and Internet Security Consultant =20 ------=_NextPart_000_021C_01D0817E.2DD6D220 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

     

     

    From:= = Cose [mailto:cose-bounces@ietf.org] On Behalf Of Samuel = Erdtman
    Sent: Monday, April 27, 2015 9:45 PM
    To: = Derek Atkins
    Cc: Jim Schaad; cose
    Subject: Re: = [Cose] Issue: Use arrays for some = containers

     

    Derek

     

    see inline

     

    On Mon, = Apr 27, 2015 at 4:04 PM, Derek Atkins <derek@ihtfp.com> wrote:

    Samuel,

    Samuel Erdtman <samuel@erdtman.se> = writes:

    > I initially felt strongly for using maps and not = arrays, I think that was
    > mostly since it is so convenient in = JavaScript but as keys in the map are
    > changed from string to = integers some of the readability and simplicity falls
    > away. = Initially I also thought that adding new element in an array would = be
    > harder but I guess it would be more or less the same if I = have a map where I
    > don=C2=B4t address all elements compared to = an array where I don=C2=B4t read the end.

    Do you mean (User) = Presentation Layer readability?  Or = on-the-wire
    readability?  Yes, the latter is definitely = different with the
    conversion to integers, but the former does not = necessarily disappear.
    The parser could have the mapping from string = -> integer and be able to
    "present" the strings to the = user.

     

     

    Don=C2=B4t think that I had thought about it in that = detail. I completely agree with you that it is possible to put a = presentation layer on top of both these scenario (map and array) so that = one would see strings/labels when writing code or looking at the bytes = in wireshark (or similar), however there will always be the case when = you don=C2=B4t have the tools available and in those cases readability = will be slightly easier with maps IMHO.

     

    I think that you are going to be disappointed in terms of = readability.=C2=A0 Remember that we are using integer key names for the = most part so you are not going to get any useful hints.=C2=A0 You are = going to see something like

     

    { 1:{2:3, 4:h=E2=80=99xXXXXXXXXX=E2=80=99}, = 5:h=E2=80=99XXXXXXXXXXXX=E2=80=99, = 6:[{7:h=E2=80=99XXXXXX=E2=80=99}]}

     

    I don=E2=80=99t think that this is going to make life any easier if = you don=E2=80=99t remember what all of the indexes are vs where things = are in an array.

     

    Jim

     

     


    > With that said I=C2=B4m still slightly more in favor of = maps and if using arrays
    > I=C2=B4m = strongly in favor of having null for absent values. To me it = seems
    > unnecessarily complex to analyse = the type of an object based on previous
    > = object.
    >
    > = Another reflection, for this protocol to get adoption implementors needs = to
    > feel that it would be simple to use, = and since my first reaction was to
    > = intuitively prefer maps I think that using maps would benefit = adoption.
    >
    > Best Regards
    > = //Samuel

    -derek


    > On Sat, Apr = 25, 2015 at 3:24 AM, Jim Schaad <ietf@augustcellars.com> = wrote:
    >
    >    =  Questions:
    >
    >     1.  Should we = use arrays or maps as top level containers for = COSE?
    >
    >     Arrays
    >
    >  =    2.  If we use arrays, should we always use nil = elements to indicate absent
    >     elements or use = them only when ambiguity in parsing arises?
    >
    >    =  Always have a field
    >
    >    =  **************************************
    >
    >  =    At this point, the majority of people who have expressed an = opinion have
    >     said that they prefer to use = maps than arrays.  I have not yet seen an
    >    =  argument that I could call a technical one rather than an = 'emotional' one.
    >     People are expressing a = preference rather than an argument on what the
    >    =  correct option is.  This applies to me as = well.
    >
    >     After taking a long walk, I = think I now understand why I prefer arrays to
    >    =  maps.  I generally prefer to restrict the set of locations = where arbitrary
    >     things can be placed that = might affect the security of the system.  By
    >    =  allowing things in fewer places there are fewer ways that things = can go
    >     wrong.  This is not to say that = things will go wrong, it is just
    >    =  expressing
    >     a comfort level on my = part.
    >
    >     On Wed I sent a message to the = list and Derek, in which I outlined a
    >    =  policy
    >     of either doing a strict or a = lax enforcement of the fields in a map when
    >    =  doing an evaluation.  I would appreciate it if people who = think maps are
    >     better can respond to = this.
    >
    >     My personal preference is that = if we do use maps, we all for applications
    >    =  to
    >     specify if they want t use a strict = or lax mode and would prefer that the
    >     default = is strict mode.
    >
    >    =  Jim
    >
    >    =  _______________________________________________
    >  =    Cose mailing list
    >     Cose@ietf.org
    >    =  https://www.ietf.org/mailman/listinfo/cose
    ><= br>> _______________________________________________
    > Cose = mailing list
    > Cose@ietf.org
    > https://www.ietf.org/mailman/listinfo/cose

    --
        =    Derek Atkins            =      617-623-3745
          =  derek@ihtfp.com  =            www.ihtfp.com
          =  Computer and Internet Security = Consultant

     

    ------=_NextPart_000_021C_01D0817E.2DD6D220-- From nobody Tue Apr 28 07:31:58 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9AA831A1A7E; Tue, 28 Apr 2015 07:31:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id to2sk6M1c4Vg; Tue, 28 Apr 2015 07:31:54 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C5EBB1A0248; Tue, 28 Apr 2015 07:30:33 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "Stephen Farrell" To: "The IESG" X-Test-IDTracker: no X-IETF-IDTracker: 6.0.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20150428143033.5998.43672.idtracker@ietfa.amsl.com> Date: Tue, 28 Apr 2015 07:30:33 -0700 Archived-At: Cc: cose@ietf.org Subject: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Apr 2015 14:31:56 -0000 Stephen Farrell has entered the following ballot position for charter-ietf-cose-00-00: Block When responding, please keep the subject line intact and reply to all email addresses included in the To and CC lines. (Feel free to cut this introductory paragraph, however.) The document, along with other ballot positions, can be found here: https://datatracker.ietf.org/doc/charter-ietf-cose/ ---------------------------------------------------------------------- BLOCK: ---------------------------------------------------------------------- I was initially skeptical of this work, doubting that there is really sufficient real interest in CBOR to justify spending the time on a WG. However, (just about) enough people argued that they would or are using CBOR to convince me that there could well be a real constituency here. And given that, I'd prefer the work be done in the IETF rather than ad-hoc and possibly by some folks who'd prioritise constrained-system requirements too much over security and privacy requirements. So in the end, I'm for doing this. I do have one blocking thing to discuss though, but that should be easy enough as we mentioned it on the list already and I think folks are ok with the sentiment and we'll just need to get the right words. Anyway, my blocking point is: I think you need to add something to the effect that this WG will not invent any new cryptography. (It is likely to be asked to, since smaller-footprint is a requirement that leads towards that.) I'd suggest adding "The COSE WG will not innovate in terms of cryptography. Any algorithms to be used in COSE that are not already well-established for use as part of some IETF standards track specification will need to be checked via the CFRG before being adopted here." I'm fine with other wordings, what I wanted the above to allow was a bit more that just what is already MTI in standards track RFCs, but to not allow every single algorithm that has even gotten an IANA code point somewhere to be just adopted as MTI by COSE. And of course, for anything that is actually new to have to go via CFRG first. After we resolve this, I'll be balloting YES. ---------------------------------------------------------------------- COMMENT: ---------------------------------------------------------------------- - I think you could (and maybe should) lose all the references to JOSE - this work involves re-doing all of the same things, and won't be interoperable so I don't see any value in re-use of registries to be honest. (And maybe there is potential for minor confusion/harm there.) I read the current text with all it's JOSE references as trying to justify that the work is not just more JOSE (both involve a lot of the same people), but at the same time saying "this is like JOSE." And I don't think that is needed - if there is real use of CBOR, then there will be a real use of COSE. That doesn't depend on JOSE at all, but more on whether folks see CBOR as being better than JSON. The crypto primitives will just follow from the application developer's chosen form of structured encoding. - The text assumes that ACE, DICE and CORE are already bought into CBOR. I don't believe that is necessarily the case, though I'd not be surprised if a bunch of folks would argue for it to be the case. - The milestone dates are nonsense. I'll buy the chairs a beverage if they happen though. It is fine if folks want to believe those dates though. From nobody Tue Apr 28 08:26:42 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 960B71A87A8 for ; Tue, 28 Apr 2015 08:26:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.289 X-Spam-Level: X-Spam-Status: No, score=-1.289 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_ORG=0.611] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RPRx8vg7W8vH for ; Tue, 28 Apr 2015 08:26:41 -0700 (PDT) Received: from mail2.ihtfp.org (MAIL2.IHTFP.ORG [204.107.200.7]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C89411A8794 for ; Tue, 28 Apr 2015 08:26:40 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail2.ihtfp.org (Postfix) with ESMTP id 985FDE2036; Tue, 28 Apr 2015 11:26:39 -0400 (EDT) Received: from mail2.ihtfp.org ([127.0.0.1]) by localhost (mail2.ihtfp.org [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 07302-01; Tue, 28 Apr 2015 11:26:37 -0400 (EDT) Received: from securerf.ihtfp.org (unknown [IPv6:fe80::ea2a:eaff:fe7d:235]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mocana.ihtfp.org", Issuer "IHTFP Consulting Certification Authority" (verified OK)) by mail2.ihtfp.org (Postfix) with ESMTPS id 94E93E2035; Tue, 28 Apr 2015 11:26:37 -0400 (EDT) Received: (from warlord@localhost) by securerf.ihtfp.org (8.14.8/8.14.8/Submit) id t3SFQaGU029886; Tue, 28 Apr 2015 11:26:36 -0400 From: Derek Atkins To: "Jim Schaad" References: <017601d07cad$0f29f9e0$2d7deda0$@augustcellars.com> <024801d07d2d$6137c6b0$23a75410$@augustcellars.com> <04a401d07ef6$827dc700$87795500$@augustcellars.com> <021b01d081b8$da342380$8e9c6a80$@augustcellars.com> Date: Tue, 28 Apr 2015 11:26:36 -0400 In-Reply-To: <021b01d081b8$da342380$8e9c6a80$@augustcellars.com> (Jim Schaad's message of "Tue, 28 Apr 2015 06:40:11 -0700") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Virus-Scanned: Maia Mailguard 1.0.2a Archived-At: Cc: 'Samuel Erdtman' , 'Derek Atkins' , 'cose' Subject: Re: [Cose] Issue: Use arrays for some containers X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Apr 2015 15:26:41 -0000 "Jim Schaad" writes: > I think that you are going to be disappointed in terms of readability.=C2= =A0 > Remember that we are using integer key names for the most part so you are= not > going to get any useful hints.=C2=A0 You are going to see something like > > { 1:{2:3, 4:h=E2=80=99xXXXXXXXXX=E2=80=99}, 5:h=E2=80=99XXXXXXXXXXXX=E2= =80=99, 6:[{7:h=E2=80=99XXXXXX=E2=80=99}]} > > I don=E2=80=99t think that this is going to make life any easier if you d= on=E2=80=99t remember > what all of the indexes are vs where things are in an array. Sure, the "on the wire" format would absolutely be integers. Howeve I can certainly see a translator (e.g. wireshark) that would provide a "presentation" of strings by translating the "known integer tags" back to their string "representations" by using the registry values: { foo:{bar:baz, quux:h=E2=80=99xXXXXXXXXX=E2=80=99}, biz:h=E2=80=99XXXXXXX= XXXXX=E2=80=99, buz:[{boz:h=E2=80=99XXXXXX=E2=80=99}]} > Jim -derek --=20 Derek Atkins 617-623-3745 derek@ihtfp.com www.ihtfp.com Computer and Internet Security Consultant From nobody Tue Apr 28 08:32:53 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D13C61A8778; Tue, 28 Apr 2015 08:32:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.347 X-Spam-Level: X-Spam-Status: No, score=-1.347 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_COM=0.553] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6m2h5-uU5pNn; Tue, 28 Apr 2015 08:32:47 -0700 (PDT) Received: from proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E8AA61A6F28; Tue, 28 Apr 2015 08:32:46 -0700 (PDT) Received: from [10.20.30.101] (50-1-98-218.dsl.dynamic.fusionbroadband.com [50.1.98.218]) (authenticated bits=0) by proper.com (8.15.1/8.14.9) with ESMTPSA id t3SFWbAo029897 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 28 Apr 2015 08:32:40 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) X-Authentication-Warning: proper.com: Host 50-1-98-218.dsl.dynamic.fusionbroadband.com [50.1.98.218] claimed to be [10.20.30.101] Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\)) From: Paul Hoffman In-Reply-To: <20150428143033.5998.43672.idtracker@ietfa.amsl.com> Date: Tue, 28 Apr 2015 08:32:37 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: <39E2589A-483F-4DEE-AD5E-71AC75F1CAE3@vpnc.org> References: <20150428143033.5998.43672.idtracker@ietfa.amsl.com> To: Stephen Farrell X-Mailer: Apple Mail (2.2098) Archived-At: Cc: The IESG , cose@ietf.org Subject: Re: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Apr 2015 15:32:52 -0000 On Apr 28, 2015, at 7:30 AM, Stephen Farrell = wrote: > I'd suggest adding "The COSE WG > will not innovate in terms of cryptography. Any > algorithms to be used in COSE that are not already > well-established for use as part of some IETF standards > track specification will need to be checked via the CFRG > before being adopted here." That idea sounds OK to me, but "well-established" is quite mushy, and it = is not clear why COSE cannot describe the wire format for things that = are in Experimental RFCs, since there is more push to go to Experimental = for early IoT work. Also, some IETF WGs might be blocked by that = wording. Further, you have already said on the COSE list that asking the = CFRG is not always a good use of time. How about: The COSE WG will not innovate in terms of cryptography. The = specifiation of algorithms in COSE is limited to those in RFCs or active = IETF WG documents. > I'm fine with other wordings, > what I wanted the above to allow was a bit more that just > what is already MTI in standards track RFCs, but to not > allow every single algorithm that has even gotten an IANA > code point somewhere to be just adopted as MTI by COSE. The question of mandatory-to-implement is quite different than = specifying how to list something on the wire. Personally, I hope COSE = has no MTI algorithms, and that MTI is defined by the specs that use the = COSE format. > And of course, for anything that is actually new to have to > go via CFRG first. I think the proposed wording above should cover that. > After we resolve this, I'll be balloting YES. Let us know if the proposal above resolves this. > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- >=20 >=20 > - I think you could (and maybe should) lose all the > references to JOSE - this work involves re-doing all of > the same things, and won't be interoperable so I don't > see any value in re-use of registries to be honest. (And > maybe there is potential for minor confusion/harm there.) > I read the current text with all it's JOSE references as > trying to justify that the work is not just more JOSE > (both involve a lot of the same people), but at the same > time saying "this is like JOSE." And I don't think that > is needed - if there is real use of CBOR, then there will > be a real use of COSE. That doesn't depend on JOSE at > all, but more on whether folks see CBOR as being better > than JSON. The crypto primitives will just follow from > the application developer's chosen form of structured > encoding. I would be fine with that, but there were strong suggestions earlier = that we had to justify "why not just use JOSE". > - The text assumes that ACE, DICE and CORE are already > bought into CBOR. Bosh. The text suggests that there might be interest from those WGs, = which we have seen. If some specific text "assumes" any of them have = "bought in", we can remove it. > I don't believe that is necessarily the > case, though I'd not be surprised if a bunch of folks > would argue for it to be the case. >=20 > - The milestone dates are nonsense. I'll buy the chairs a > beverage if they happen though. It is fine if folks want > to believe those dates though. At some point, the IESG should agree whether new WGs should set = milestones for what are supposed to be short-lived WGs "aggressively" or = "based on historical precedent of WGs that didn't end when they should = have". Until then, please don't ask forming WGs to read the IESG's mind. = :-) --Paul Hoffman= From nobody Tue Apr 28 09:06:41 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5593D1AD0EA; Tue, 28 Apr 2015 09:06:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aM-IlhWZYNOD; Tue, 28 Apr 2015 09:06:27 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 267A81AD0C6; Tue, 28 Apr 2015 09:06:27 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 4DC5ABDD8; Tue, 28 Apr 2015 17:06:25 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NwZmVDn3kQwg; Tue, 28 Apr 2015 17:06:23 +0100 (IST) Received: from [10.87.48.73] (unknown [86.42.29.198]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 59676BDCB; Tue, 28 Apr 2015 17:06:23 +0100 (IST) Message-ID: <553FAFFF.6010208@cs.tcd.ie> Date: Tue, 28 Apr 2015 17:06:23 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: Paul Hoffman References: <20150428143033.5998.43672.idtracker@ietfa.amsl.com> <39E2589A-483F-4DEE-AD5E-71AC75F1CAE3@vpnc.org> In-Reply-To: <39E2589A-483F-4DEE-AD5E-71AC75F1CAE3@vpnc.org> OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: The IESG , cose@ietf.org Subject: Re: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Apr 2015 16:06:35 -0000 Hiya, tl;dr - make that or an equivalent change and I'll s/block/yes/ On 28/04/15 16:32, Paul Hoffman wrote: > On Apr 28, 2015, at 7:30 AM, Stephen Farrell > wrote: >> I'd suggest adding "The COSE WG will not innovate in terms of >> cryptography. Any algorithms to be used in COSE that are not >> already well-established for use as part of some IETF standards >> track specification will need to be checked via the CFRG before >> being adopted here." > > That idea sounds OK to me, but "well-established" is quite mushy, and > it is not clear why COSE cannot describe the wire format for things > that are in Experimental RFCs, since there is more push to go to > Experimental for early IoT work. Also, some IETF WGs might be blocked > by that wording. All fair comment. > Further, you have already said on the COSE list that > asking the CFRG is not always a good use of time. > > How about: > > The COSE WG will not innovate in terms of cryptography. The > specifiation of algorithms in COSE is limited to those in RFCs or > active IETF WG documents. Yeah but... that would allow e.g. ibs [1] and ibake [2] and other oddities that we probably don't want the WG to have to bother with. Note: I'm not saying (here:-) either of those is bad, nor that they'd be suggested here, they're just examples of not-well-established algs that are ok according to the above. (And full disclosure, I have a DISCUSS on [1] - afaik there are no published analyses of it at all.) But yes, the WG would of course almost certainly be sensible and say "no thanks" if someone suggests those be selected. I think some form of words that allows the WG to not even bother having to discuss oddball stuff like that would be better. That said, I'm fine with unblocking and treating that as a comment if your words (or similar) are added. We can try improve that wording as we go along. [1] https://tools.ietf.org/html/draft-ietf-manet-ibs-03 [2] https://tools.ietf.org/html/rfc6539 >> I'm fine with other wordings, what I wanted the above to allow was >> a bit more that just what is already MTI in standards track RFCs, >> but to not allow every single algorithm that has even gotten an >> IANA code point somewhere to be just adopted as MTI by COSE. > > The question of mandatory-to-implement is quite different than > specifying how to list something on the wire. Yep. OTOH, if something is MTI in a standards track RFC then that does kind of mean it's likely well-established. That's all I was going after there but I also agree it's not a perfect proxy for "well-established." > Personally, I hope COSE > has no MTI algorithms, and that MTI is defined by the specs that use > the COSE format. #include :-) >> And of course, for anything that is actually new to have to go via >> CFRG first. > > I think the proposed wording above should cover that. > >> After we resolve this, I'll be balloting YES. > > Let us know if the proposal above resolves this. It resolves the block yes, but I'd still like better wording if someone has some to offer. > >> ---------------------------------------------------------------------- >> >> COMMENT: >> ---------------------------------------------------------------------- >> >> >> >> - I think you could (and maybe should) lose all the >> references to JOSE - this work involves re-doing all of the same >> things, and won't be interoperable so I don't see any value in >> re-use of registries to be honest. (And maybe there is potential >> for minor confusion/harm there.) I read the current text with all >> it's JOSE references as trying to justify that the work is not just >> more JOSE (both involve a lot of the same people), but at the same >> time saying "this is like JOSE." And I don't think that is needed - >> if there is real use of CBOR, then there will be a real use of >> COSE. That doesn't depend on JOSE at all, but more on whether folks >> see CBOR as being better than JSON. The crypto primitives will just >> follow from the application developer's chosen form of structured >> encoding. > > I would be fine with that, but there were strong suggestions earlier > that we had to justify "why not just use JOSE". Sure, I can see that that was an issue. Maybe it's a thing of the past now though? I'm not sure. The point about pros and cons of shared registries though could be worth some thought, so be good if the final charter doesn't tie the WG's hands on that I reckon. >> - The text assumes that ACE, DICE and CORE are already bought into >> CBOR. > > Bosh. The text suggests that there might be interest from those WGs, > which we have seen. If some specific text "assumes" any of them have > "bought in", we can remove it. Well it does say that COSE is supposed to "fulfil[...] the needs of those constituencies" which is a bit presumptuous as it does assume that those WGs care about CBOR. I assume there's a missing "to the extent relevant to their work" or some such. >> I don't believe that is necessarily the case, though I'd not be >> surprised if a bunch of folks would argue for it to be the case. >> >> - The milestone dates are nonsense. I'll buy the chairs a beverage >> if they happen though. It is fine if folks want to believe those >> dates though. > > At some point, the IESG should agree whether new WGs should set > milestones for what are supposed to be short-lived WGs "aggressively" > or "based on historical precedent of WGs that didn't end when they > should have". Until then, please don't ask forming WGs to read the > IESG's mind. :-) The IESG does not have a mind. It has 15 regularly changing minds:-) Cheers, S. > > --Paul Hoffman _______________________________________________ Cose > mailing list Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose > From nobody Tue Apr 28 09:27:22 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 48F161A8934; Tue, 28 Apr 2015 09:27:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.747 X-Spam-Level: X-Spam-Status: No, score=-0.747 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_COM=0.553, J_CHICKENPOX_22=0.6] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1M89nqpK_-Z3; Tue, 28 Apr 2015 09:27:20 -0700 (PDT) Received: from proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 44A2F1A88C7; Tue, 28 Apr 2015 09:27:20 -0700 (PDT) Received: from [10.20.30.101] (50-1-98-218.dsl.dynamic.fusionbroadband.com [50.1.98.218]) (authenticated bits=0) by proper.com (8.15.1/8.14.9) with ESMTPSA id t3SGRGK9033371 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 28 Apr 2015 09:27:16 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) X-Authentication-Warning: proper.com: Host 50-1-98-218.dsl.dynamic.fusionbroadband.com [50.1.98.218] claimed to be [10.20.30.101] Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\)) From: Paul Hoffman In-Reply-To: <553FAFFF.6010208@cs.tcd.ie> Date: Tue, 28 Apr 2015 09:27:15 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: <522FAB4F-8E59-4D27-BE42-42DED9092D93@vpnc.org> References: <20150428143033.5998.43672.idtracker@ietfa.amsl.com> <39E2589A-483F-4DEE-AD5E-71AC75F1CAE3@vpnc.org> <553FAFFF.6010208@cs.tcd.ie> To: Stephen Farrell X-Mailer: Apple Mail (2.2098) Archived-At: Cc: The IESG , cose@ietf.org Subject: Re: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Apr 2015 16:27:21 -0000 On Apr 28, 2015, at 9:06 AM, Stephen Farrell = wrote: > tl;dr - make that or an equivalent change and I'll s/block/yes/ Cool, thanks. I'm a bit embarrassed to admit that I don't know how to = make a change to a proposed charter while it is in IESG evaluation. Does = someone for the not-yet-WG do so? Or does the sponsoring AD do so? > On 28/04/15 16:32, Paul Hoffman wrote: >> On Apr 28, 2015, at 7:30 AM, Stephen Farrell >> wrote: >>> I'd suggest adding "The COSE WG will not innovate in terms of >>> cryptography. Any algorithms to be used in COSE that are not >>> already well-established for use as part of some IETF standards=20 >>> track specification will need to be checked via the CFRG before >>> being adopted here." >>=20 >> That idea sounds OK to me, but "well-established" is quite mushy, and >> it is not clear why COSE cannot describe the wire format for things >> that are in Experimental RFCs, since there is more push to go to >> Experimental for early IoT work. Also, some IETF WGs might be blocked >> by that wording.=20 >=20 > All fair comment. >=20 >> Further, you have already said on the COSE list that >> asking the CFRG is not always a good use of time. >>=20 >> How about: >>=20 >> The COSE WG will not innovate in terms of cryptography. The >> specifiation of algorithms in COSE is limited to those in RFCs or >> active IETF WG documents. >=20 > Yeah but... that would allow e.g. ibs [1] and ibake [2] and > other oddities that we probably don't want the WG to have to > bother with. The COSE WG doesn't *have* to bother with any particular crypto, and I = suspect that a sane WG won't try to cover all types. After the COSE WG = is done, as long as someone who cares about both Algorithm Foo and COSE = can write their own specification, all is well. The same was true for = CMS, OpenPGP, and so on. > Note: I'm not saying (here:-) either of those is > bad, nor that they'd be suggested here, they're just examples > of not-well-established algs that are ok according to the > above. (And full disclosure, I have a DISCUSS on [1] - afaik > there are no published analyses of it at all.) There is a lot of crypto that most of us who are interested in COSE = don't care about.=20 > But yes, the WG would of course almost certainly be > sensible and say "no thanks" if someone suggests those be > selected. I think some form of words that allows the WG to > not even bother having to discuss oddball stuff like that > would be better. Hard to do that without being insulting. I think the current wording is = fine, and if someone interprets the charter as to mean "must handle = every possible algorithm", that's their issue. > That said, I'm fine with unblocking and treating that as a > comment if your words (or similar) are added. We can try > improve that wording as we go along. Or they might never appear, just as they did not for various other = wire-format WGs. > It resolves the block yes, but I'd still like better wording > if someone has some to offer. Great. > The point about pros and cons of shared registries though could > be worth some thought, so be good if the final charter doesn't > tie the WG's hands on that I reckon. That's a good point, given that the not-yet-WG is already diverging from = JOSE on "is a MAC a signature". I'd be fine with removing "COSE will = rely on the JOSE registries, and will expand them with additional = information when necessary" from the charter, even if the WG ends up = wanting to do that. --Paul Hoffman= From nobody Tue Apr 28 09:39:00 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1CD471AD359; Tue, 28 Apr 2015 09:38:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.4 X-Spam-Level: X-Spam-Status: No, score=-1.4 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, J_CHICKENPOX_22=0.6, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RJVBRSWQJBw8; Tue, 28 Apr 2015 09:38:57 -0700 (PDT) Received: from mail-vn0-x235.google.com (mail-vn0-x235.google.com [IPv6:2607:f8b0:400c:c0f::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 736B71A88F3; Tue, 28 Apr 2015 09:38:57 -0700 (PDT) Received: by vnbg7 with SMTP id g7so29564vnb.11; Tue, 28 Apr 2015 09:38:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:content-type:mime-version:subject:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=9t/GNTbJkog3afw6s49a4a4eYuqHLOrig9h/DvXTaVQ=; b=fI1MRCDapixPrIlnSuExOhhJkimolq7YnWLXRxelEc06O/Dw+feauLi0a0Cmhekxnk jG2CAtF0dhEKlOyEU46XYQWqAmxrsM2v37Dm/9Gp8R9idtbZ04kJVhxH9494F4rHXgdD jFnTQbuzKnDKmeFdMbSa6ZjaSNF/8Hoa08pROahxIXOYG9XF9fq/+w+m8sIk3D0cJr0J /jTjzRUPyDVefKQchotYRcRg2ppXmc4A/U7R6bPBEtH0AsCiRcYh+x7Th5mLIBpdBgSR LCbsPwTpUwSAs2COramRPSVJtSStbs4WpGkjOXremMvnTYsdiCIT+W0hTAV+Ozb2yim9 4amg== X-Received: by 10.52.171.199 with SMTP id aw7mr38268459vdc.87.1430239136739; Tue, 28 Apr 2015 09:38:56 -0700 (PDT) Received: from [10.180.65.188] (mobile-107-107-62-95.mycingular.net. [107.107.62.95]) by mx.google.com with ESMTPSA id mz6sm32194631vdb.9.2015.04.28.09.38.55 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 28 Apr 2015 09:38:55 -0700 (PDT) From: Kathleen Moriarty X-Google-Original-From: Kathleen Moriarty Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (1.0) X-Mailer: iPhone Mail (11D257) In-Reply-To: <522FAB4F-8E59-4D27-BE42-42DED9092D93@vpnc.org> Date: Tue, 28 Apr 2015 12:38:54 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <0F925919-5A1F-4087-AF8E-11F9C408C006@gmail.com> References: <20150428143033.5998.43672.idtracker@ietfa.amsl.com> <39E2589A-483F-4DEE-AD5E-71AC75F1CAE3@vpnc.org> <553FAFFF.6010208@cs.tcd.ie> <522FAB4F-8E59-4D27-BE42-42DED9092D93@vpnc.org> To: Paul Hoffman Archived-At: Cc: "cose@ietf.org" , The IESG , Stephen Farrell Subject: Re: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Apr 2015 16:38:59 -0000 Sent from my iPhone > On Apr 28, 2015, at 12:27 PM, Paul Hoffman wrote: >=20 >> On Apr 28, 2015, at 9:06 AM, Stephen Farrell w= rote: >>=20 >> tl;dr - make that or an equivalent change and I'll s/block/yes/ >=20 > Cool, thanks. I'm a bit embarrassed to admit that I don't know how to make= a change to a proposed charter while it is in IESG evaluation. Does someone= for the not-yet-WG do so? Or does the sponsoring AD do so? >=20 I can do it, but it would be good to hear from more than one person and to s= ee if there is better wording as requested. Thanks, Kathleen=20 >>> On 28/04/15 16:32, Paul Hoffman wrote: >>> On Apr 28, 2015, at 7:30 AM, Stephen Farrell >>> wrote: >>>> I'd suggest adding "The COSE WG will not innovate in terms of >>>> cryptography. Any algorithms to be used in COSE that are not >>>> already well-established for use as part of some IETF standards=20 >>>> track specification will need to be checked via the CFRG before >>>> being adopted here." >>>=20 >>> That idea sounds OK to me, but "well-established" is quite mushy, and >>> it is not clear why COSE cannot describe the wire format for things >>> that are in Experimental RFCs, since there is more push to go to >>> Experimental for early IoT work. Also, some IETF WGs might be blocked >>> by that wording. >>=20 >> All fair comment. >>=20 >>> Further, you have already said on the COSE list that >>> asking the CFRG is not always a good use of time. >>>=20 >>> How about: >>>=20 >>> The COSE WG will not innovate in terms of cryptography. The >>> specifiation of algorithms in COSE is limited to those in RFCs or >>> active IETF WG documents. >>=20 >> Yeah but... that would allow e.g. ibs [1] and ibake [2] and >> other oddities that we probably don't want the WG to have to >> bother with. >=20 > The COSE WG doesn't *have* to bother with any particular crypto, and I sus= pect that a sane WG won't try to cover all types. After the COSE WG is done,= as long as someone who cares about both Algorithm Foo and COSE can write th= eir own specification, all is well. The same was true for CMS, OpenPGP, and s= o on. >=20 >> Note: I'm not saying (here:-) either of those is >> bad, nor that they'd be suggested here, they're just examples >> of not-well-established algs that are ok according to the >> above. (And full disclosure, I have a DISCUSS on [1] - afaik >> there are no published analyses of it at all.) >=20 > There is a lot of crypto that most of us who are interested in COSE don't c= are about.=20 >=20 >> But yes, the WG would of course almost certainly be >> sensible and say "no thanks" if someone suggests those be >> selected. I think some form of words that allows the WG to >> not even bother having to discuss oddball stuff like that >> would be better. >=20 > Hard to do that without being insulting. I think the current wording is fi= ne, and if someone interprets the charter as to mean "must handle every poss= ible algorithm", that's their issue. >=20 >> That said, I'm fine with unblocking and treating that as a >> comment if your words (or similar) are added. We can try >> improve that wording as we go along. >=20 > Or they might never appear, just as they did not for various other wire-fo= rmat WGs. >=20 >> It resolves the block yes, but I'd still like better wording >> if someone has some to offer. >=20 > Great. >=20 >> The point about pros and cons of shared registries though could >> be worth some thought, so be good if the final charter doesn't >> tie the WG's hands on that I reckon. >=20 > That's a good point, given that the not-yet-WG is already diverging from J= OSE on "is a MAC a signature". I'd be fine with removing "COSE will rely on t= he JOSE registries, and will expand them with additional information when ne= cessary" from the charter, even if the WG ends up wanting to do that. >=20 > --Paul Hoffman From nobody Tue Apr 28 13:41:42 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1948A1A885C for ; Tue, 28 Apr 2015 13:41:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QVg2JZNRwOGO for ; Tue, 28 Apr 2015 13:41:39 -0700 (PDT) Received: from smtp3.pacifier.net (smtp3.pacifier.net [64.255.237.177]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BBD841A8849 for ; Tue, 28 Apr 2015 13:41:39 -0700 (PDT) Received: from Philemon (unknown [50.109.252.111]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp3.pacifier.net (Postfix) with ESMTPSA id 699D738F0D; Tue, 28 Apr 2015 13:41:38 -0700 (PDT) From: "Jim Schaad" To: "'Derek Atkins'" References: <017601d07cad$0f29f9e0$2d7deda0$@augustcellars.com> <024801d07d2d$6137c6b0$23a75410$@augustcellars.com> <04a401d07ef6$827dc700$87795500$@augustcellars.com> <021b01d081b8$da342380$8e9c6a80$@augustcellars.com> In-Reply-To: Date: Tue, 28 Apr 2015 13:40:19 -0700 Message-ID: <027101d081f3$8b547b30$a1fd7190$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQIjhaQWeEEQ9jAwW3jY6t94GHjs1gISURK9Ag/x/AMCrU4XFAILHVn/AQpw6ZsCYzdyugDHyh95AW0dKEMBSr3OogIGYYqRnC5oqDA= Content-Language: en-us Archived-At: Cc: 'Samuel Erdtman' , 'cose' Subject: Re: [Cose] Issue: Use arrays for some containers X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Apr 2015 20:41:41 -0000 > -----Original Message----- > From: Derek Atkins [mailto:derek@ihtfp.com] > Sent: Tuesday, April 28, 2015 8:27 AM > To: Jim Schaad > Cc: 'Samuel Erdtman'; 'Derek Atkins'; 'cose' > Subject: Re: [Cose] Issue: Use arrays for some containers >=20 > "Jim Schaad" writes: >=20 > > I think that you are going to be disappointed in terms of = readability. > > Remember that we are using integer key names for the most part so = you > > are not going to get any useful hints. You are going to see = something > > like > > > > { 1:{2:3, 4:h=E2=80=99xXXXXXXXXX=E2=80=99}, = 5:h=E2=80=99XXXXXXXXXXXX=E2=80=99, 6:[{7:h=E2=80=99XXXXXX=E2=80=99}]} > > > > I don=E2=80=99t think that this is going to make life any easier if = you don=E2=80=99t > > remember what all of the indexes are vs where things are in an = array. >=20 > Sure, the "on the wire" format would absolutely be integers. Howeve I = can > certainly see a translator (e.g. wireshark) that would provide a = "presentation" > of strings by translating the "known integer tags" back to their = string > "representations" by using the registry values: >=20 > { foo:{bar:baz, quux:h=E2=80=99xXXXXXXXXX=E2=80=99}, = biz:h=E2=80=99XXXXXXXXXXXX=E2=80=99, > buz:[{boz:h=E2=80=99XXXXXX=E2=80=99}]} Sure - but at that point the difference between array and map is = marginal. On can decorate the array just as easily as one decorates the = map. Jim >=20 > > Jim >=20 > -derek >=20 > -- > Derek Atkins 617-623-3745 > derek@ihtfp.com www.ihtfp.com > Computer and Internet Security Consultant From nobody Tue Apr 28 14:29:42 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 37AF11A6F01; Tue, 28 Apr 2015 14:29:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n1956yxH66v5; Tue, 28 Apr 2015 14:29:35 -0700 (PDT) Received: from smtp1.pacifier.net (smtp1.pacifier.net [64.255.237.171]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7D46E1A1BDD; Tue, 28 Apr 2015 14:29:35 -0700 (PDT) Received: from Philemon (unknown [50.109.252.111]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp1.pacifier.net (Postfix) with ESMTPSA id 643632CA22; Tue, 28 Apr 2015 14:29:34 -0700 (PDT) From: "Jim Schaad" To: "'Stephen Farrell'" , "'The IESG'" References: <20150428143033.5998.43672.idtracker@ietfa.amsl.com> In-Reply-To: <20150428143033.5998.43672.idtracker@ietfa.amsl.com> Date: Tue, 28 Apr 2015 14:28:15 -0700 Message-ID: <027201d081fa$3d7fb0d0$b87f1270$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQE2EMORTRX1AlHPC6a/v8p0Ab2JaJ6Xz32A Content-Language: en-us Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Apr 2015 21:29:37 -0000 > -----Original Message----- > From: Cose [mailto:cose-bounces@ietf.org] On Behalf Of Stephen Farrell > Sent: Tuesday, April 28, 2015 7:31 AM > To: The IESG > Cc: cose@ietf.org > Subject: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with > BLOCK and COMMENT) > > Stephen Farrell has entered the following ballot position for > charter-ietf-cose-00-00: Block > > When responding, please keep the subject line intact and reply to all email > addresses included in the To and CC lines. (Feel free to cut this introductory > paragraph, however.) > > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/charter-ietf-cose/ > > > > ---------------------------------------------------------------------- > BLOCK: > ---------------------------------------------------------------------- > > I was initially skeptical of this work, doubting that there is really sufficient real > interest in CBOR to justify spending the time on a WG. However, (just about) > enough people argued that they would or are using CBOR to convince me that > there could well be a real constituency here. And given that, I'd prefer the > work be done in the IETF rather than ad-hoc and possibly by some folks who'd > prioritise constrained-system requirements too much over security and > privacy requirements. So in the end, I'm for doing this. > > I do have one blocking thing to discuss though, but that should be easy > enough as we mentioned it on the list already and I think folks are ok with the > sentiment and we'll just need to get the right words. Anyway, my blocking > point is: > > I think you need to add something to the effect that this WG will not invent > any new cryptography. (It is likely to be asked to, since smaller-footprint is a > requirement that leads towards that.) I'd suggest adding "The COSE WG will > not innovate in terms of cryptography. Any algorithms to be used in COSE that > are not already well-established for use as part of some IETF standards track > specification will need to be checked via the CFRG before being adopted > here." I'm fine with other wordings, what I wanted the above to allow was a bit > more that just what is already MTI in standards track RFCs, but to not allow > every single algorithm that has even gotten an IANA code point somewhere to > be just adopted as MTI by COSE. > And of course, for anything that is actually new to have to go via CFRG first. Stephen, I am going to push back on this a bit. The first question is what do you mean by "new cryptography". One of the algorithms mentioned on the list was Pintsov-Vanstone Signatures with Message Recovery. This was first published at the latest of 1999 and appeared in IEEE P1363a (Jan 2000). So is an algorithm that has been around for on the order of 15 years "new cryptography"? Do you think it is better than a different working group - perhaps CORE- did the innovation instead? This language is not in the charter of any other group that I am away of (think ACE?). What makes you think that the COSE working group would be any more likely to do this that any other working group? Jim > > After we resolve this, I'll be balloting YES. > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > > - I think you could (and maybe should) lose all the references to JOSE - this > work involves re-doing all of the same things, and won't be interoperable so I > don't see any value in re-use of registries to be honest. (And maybe there is > potential for minor confusion/harm there.) I read the current text with all it's > JOSE references as trying to justify that the work is not just more JOSE (both > involve a lot of the same people), but at the same time saying "this is like > JOSE." And I don't think that is needed - if there is real use of CBOR, then > there will be a real use of COSE. That doesn't depend on JOSE at all, but more > on whether folks see CBOR as being better than JSON. The crypto primitives > will just follow from the application developer's chosen form of structured > encoding. > > - The text assumes that ACE, DICE and CORE are already bought into CBOR. I > don't believe that is necessarily the case, though I'd not be surprised if a > bunch of folks would argue for it to be the case. > > - The milestone dates are nonsense. I'll buy the chairs a beverage if they > happen though. It is fine if folks want to believe those dates though. > > > _______________________________________________ > Cose mailing list > Cose@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Tue Apr 28 14:40:50 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B6441A8A09; Tue, 28 Apr 2015 14:40:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id T_DoQOyfkXXJ; Tue, 28 Apr 2015 14:40:47 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BB3A31A8A03; Tue, 28 Apr 2015 14:40:47 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 92189BE35; Tue, 28 Apr 2015 22:40:46 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O-zYrHN5iha7; Tue, 28 Apr 2015 22:40:45 +0100 (IST) Received: from [10.87.48.73] (unknown [86.42.29.198]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 5FE12BDCC; Tue, 28 Apr 2015 22:40:44 +0100 (IST) Message-ID: <553FFE5B.10903@cs.tcd.ie> Date: Tue, 28 Apr 2015 22:40:43 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: Jim Schaad , 'The IESG' References: <20150428143033.5998.43672.idtracker@ietfa.amsl.com> <027201d081fa$3d7fb0d0$b87f1270$@augustcellars.com> In-Reply-To: <027201d081fa$3d7fb0d0$b87f1270$@augustcellars.com> OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Apr 2015 21:40:49 -0000 Hiya, On 28/04/15 22:28, Jim Schaad wrote: > > I am going to push back on this a bit. The first question is what do you > mean by "new cryptography". One of the algorithms mentioned on the list > was Pintsov-Vanstone Signatures with Message Recovery. This was first > published at the latest of 1999 and appeared in IEEE P1363a (Jan 2000). So > is an algorithm that has been around for on the order of 15 years "new > cryptography"? I mean new to the IETF and suggested "well established" (in the IETF) as the qualifier. I don't think any signature scheme with recovery would qualify as well established in the IETF, but I'm open to correction there. And yes, some schemes have been known for many years, but longevity by itself does not mean that either the IPR situation is clear nor that there are not going to be either better more modern schemes nor does it imply the absence of implementation pitfalls that we have yet to discover which is quite possible if a scheme has only really existed in the lab until now. > Do you think it is better than a different working group - perhaps CORE- > did the innovation instead? This language is not in the charter of any > other group that I am away of (think ACE?). > > What makes you think that the COSE working group would be any more likely to > do this that any other working group? The code footprint requirement will lead to more requests for unusual crypto. COSE is definitely going to be different in that respect. I think that's already been seen on the list and your example of message recovery is another indication that message size issues will be different for COSE as well. Cheers, S. From nobody Tue Apr 28 15:20:15 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3665F1A8BB2; Tue, 28 Apr 2015 15:20:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.301 X-Spam-Level: X-Spam-Status: No, score=-3.301 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_22=0.6, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oDXsfoG_SFu2; Tue, 28 Apr 2015 15:20:12 -0700 (PDT) Received: from sesbmg23.ericsson.net (sesbmg23.ericsson.net [193.180.251.37]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 52C9D1A8BB3; Tue, 28 Apr 2015 15:20:11 -0700 (PDT) X-AuditID: c1b4fb25-f79b66d000001131-2d-55400799903d Received: from ESESSHC020.ericsson.se (Unknown_Domain [153.88.253.124]) by sesbmg23.ericsson.net (Symantec Mail Security) with SMTP id 12.6A.04401.99700455; Wed, 29 Apr 2015 00:20:09 +0200 (CEST) Received: from ESESSMB303.ericsson.se ([169.254.3.19]) by ESESSHC020.ericsson.se ([153.88.183.78]) with mapi id 14.03.0210.002; Wed, 29 Apr 2015 00:20:09 +0200 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Paul Hoffman , Stephen Farrell Thread-Topic: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) Thread-Index: AQHQgcAbK1AaVMOIKUWXOTJmhBAWcJ1ibBSAgAAJb4CAAAXVgIAAhCQA Date: Tue, 28 Apr 2015 22:20:07 +0000 Message-ID: References: <20150428143033.5998.43672.idtracker@ietfa.amsl.com> <39E2589A-483F-4DEE-AD5E-71AC75F1CAE3@vpnc.org> <553FAFFF.6010208@cs.tcd.ie> <522FAB4F-8E59-4D27-BE42-42DED9092D93@vpnc.org> In-Reply-To: <522FAB4F-8E59-4D27-BE42-42DED9092D93@vpnc.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.7.141117 x-originating-ip: [153.88.183.150] Content-Type: text/plain; charset="utf-8" Content-ID: <3DBE166F002A544ABB160A812745DADC@ericsson.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrAIsWRmVeSWpSXmKPExsUyM+Jvje5MdodQgyf75SymbZ3KajHjz0Rm i1vrv7BaTN97jd2BxWNt91U2jyVLfjJ5fJ59lTmAOYrLJiU1J7MstUjfLoEr49f8y6wFf/Qq /l25yNrA+EC3i5GTQ0LARGLju51MELaYxIV769m6GLk4hASOMkrcWdgI5SxmlLjxbzlYFZuA i8SDhkdgtohAuMSM3ZuYQWxmAVuJJVuOsYHYwgJJEgtbV7FA1CRL7Nu2ih3CdpNYvnkLWC+L gKrEq9X3wOp5BSwkOprPMEMsO8go8bmzD6yZU8BG4tO3PWA2I9B530+tYYJYJi5x68l8qLMF JJbsOc8MYYtKvHz8jxXEFhXQk1h5vYkNIq4ksWL7JcYuRg6gXk2J9bv0IcZYS6w92w41UlFi SvdDdoh7BCVOznzCMoFRYhaSbbMQumch6Z6FpHsWku4FjKyrGEWLU4uTctONjPVSizKTi4vz 8/TyUks2MQKj9OCW36o7GC+/cTzEKMDBqMTDu+ClXagQa2JZcWXuIUZpDhYlcV4740MhQgLp iSWp2ampBalF8UWlOanFhxiZODilGhh12SX2fTl15fP053bt104Y+rlqBH8q2FnFn3Zf9mzi 043lV4xueE09cLE5nvf68zlr2iu04wPkmzrfb2/483/ytjgfl+xvblsMrTcYRf74qhZ/5dT3 ujbdbFZvnfPZn3n1VrXxe65Ovx/t59W76fusW8FLhW8u/GdaFZIUGZnTkH5GK+oXi6ASS3FG oqEWc1FxIgDukHyLswIAAA== Archived-At: Cc: The IESG , "cose@ietf.org" Subject: Re: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Apr 2015 22:20:14 -0000 SGkgU3RlcGhlbiwgUGF1bA0KDQpPbiAyMDE1LTA0LTI4IDE4OjI3LCAiUGF1bCBIb2ZmbWFuIiA8 cGF1bC5ob2ZmbWFuQHZwbmMub3JnPiB3cm90ZToNCg0KPk9uIEFwciAyOCwgMjAxNSwgYXQgOTow NiBBTSwgU3RlcGhlbiBGYXJyZWxsIDxzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllPg0KPndyb3Rl Og0KPg0KPj4gdGw7ZHIgLSBtYWtlIHRoYXQgb3IgYW4gZXF1aXZhbGVudCBjaGFuZ2UgYW5kIEkn bGwgcy9ibG9jay95ZXMvDQo+DQo+Q29vbCwgdGhhbmtzLiBJJ20gYSBiaXQgZW1iYXJyYXNzZWQg dG8gYWRtaXQgdGhhdCBJIGRvbid0IGtub3cgaG93IHRvDQo+bWFrZSBhIGNoYW5nZSB0byBhIHBy b3Bvc2VkIGNoYXJ0ZXIgd2hpbGUgaXQgaXMgaW4gSUVTRyBldmFsdWF0aW9uLiBEb2VzDQo+c29t ZW9uZSBmb3IgdGhlIG5vdC15ZXQtV0cgZG8gc28/IE9yIGRvZXMgdGhlIHNwb25zb3JpbmcgQUQg ZG8gc28/DQo+DQo+PiBPbiAyOC8wNC8xNSAxNjozMiwgUGF1bCBIb2ZmbWFuIHdyb3RlOg0KPj4+ IE9uIEFwciAyOCwgMjAxNSwgYXQgNzozMCBBTSwgU3RlcGhlbiBGYXJyZWxsDQo+Pj4gPHN0ZXBo ZW4uZmFycmVsbEBjcy50Y2QuaWU+IHdyb3RlOg0KPj4+PiBJJ2Qgc3VnZ2VzdCBhZGRpbmcgIlRo ZSBDT1NFIFdHIHdpbGwgbm90IGlubm92YXRlIGluIHRlcm1zIG9mDQo+Pj4+IGNyeXB0b2dyYXBo eS4gIEFueSBhbGdvcml0aG1zIHRvIGJlIHVzZWQgaW4gQ09TRSB0aGF0IGFyZSBub3QNCj4+Pj4g YWxyZWFkeSB3ZWxsLWVzdGFibGlzaGVkIGZvciB1c2UgYXMgcGFydCBvZiBzb21lIElFVEYgc3Rh bmRhcmRzDQo+Pj4+IHRyYWNrIHNwZWNpZmljYXRpb24gd2lsbCBuZWVkIHRvIGJlIGNoZWNrZWQg dmlhIHRoZSBDRlJHIGJlZm9yZQ0KPj4+PiBiZWluZyBhZG9wdGVkIGhlcmUuIg0KPj4+IA0KPj4+ IFRoYXQgaWRlYSBzb3VuZHMgT0sgdG8gbWUsIGJ1dCAid2VsbC1lc3RhYmxpc2hlZCIgaXMgcXVp dGUgbXVzaHksIGFuZA0KPj4+IGl0IGlzIG5vdCBjbGVhciB3aHkgQ09TRSBjYW5ub3QgZGVzY3Jp YmUgdGhlIHdpcmUgZm9ybWF0IGZvciB0aGluZ3MNCj4+PiB0aGF0IGFyZSBpbiBFeHBlcmltZW50 YWwgUkZDcywgc2luY2UgdGhlcmUgaXMgbW9yZSBwdXNoIHRvIGdvIHRvDQo+Pj4gRXhwZXJpbWVu dGFsIGZvciBlYXJseSBJb1Qgd29yay4gQWxzbywgc29tZSBJRVRGIFdHcyBtaWdodCBiZSBibG9j a2VkDQo+Pj4gYnkgdGhhdCB3b3JkaW5nLg0KPj4gDQo+PiBBbGwgZmFpciBjb21tZW50Lg0KPj4g DQo+Pj4gRnVydGhlciwgeW91IGhhdmUgYWxyZWFkeSBzYWlkIG9uIHRoZSBDT1NFIGxpc3QgdGhh dA0KPj4+IGFza2luZyB0aGUgQ0ZSRyBpcyBub3QgYWx3YXlzIGEgZ29vZCB1c2Ugb2YgdGltZS4N Cj4+PiANCj4+PiBIb3cgYWJvdXQ6DQo+Pj4gDQo+Pj4gVGhlIENPU0UgV0cgd2lsbCBub3QgaW5u b3ZhdGUgaW4gdGVybXMgb2YgY3J5cHRvZ3JhcGh5LiAgVGhlDQo+Pj4gc3BlY2lmaWF0aW9uIG9m IGFsZ29yaXRobXMgaW4gQ09TRSBpcyBsaW1pdGVkIHRvIHRob3NlIGluIFJGQ3Mgb3INCj4+PiBh Y3RpdmUgSUVURiBXRyBkb2N1bWVudHMuDQo+PiANCj4+IFllYWggYnV0Li4uIHRoYXQgd291bGQg YWxsb3cgZS5nLiBpYnMgWzFdIGFuZCBpYmFrZSBbMl0gYW5kDQo+PiBvdGhlciBvZGRpdGllcyB0 aGF0IHdlIHByb2JhYmx5IGRvbid0IHdhbnQgdGhlIFdHIHRvIGhhdmUgdG8NCj4+IGJvdGhlciB3 aXRoLg0KPg0KPlRoZSBDT1NFIFdHIGRvZXNuJ3QgKmhhdmUqIHRvIGJvdGhlciB3aXRoIGFueSBw YXJ0aWN1bGFyIGNyeXB0bywgYW5kIEkNCj5zdXNwZWN0IHRoYXQgYSBzYW5lIFdHIHdvbid0IHRy eSB0byBjb3ZlciBhbGwgdHlwZXMuIEFmdGVyIHRoZSBDT1NFIFdHIGlzDQo+ZG9uZSwgYXMgbG9u ZyBhcyBzb21lb25lIHdobyBjYXJlcyBhYm91dCBib3RoIEFsZ29yaXRobSBGb28gYW5kIENPU0Ug Y2FuDQo+d3JpdGUgdGhlaXIgb3duIHNwZWNpZmljYXRpb24sIGFsbCBpcyB3ZWxsLiBUaGUgc2Ft ZSB3YXMgdHJ1ZSBmb3IgQ01TLA0KPk9wZW5QR1AsIGFuZCBzbyBvbi4NCg0KSSBkb27igJl0IHVu ZGVyc3RhbmQgaG93IHRoaXMgZm9ybXVsYXRpb24gbWF0Y2hlcyB0aGUgY29uY2x1c2lvbiBpbiBh DQpwcmV2aW91cyB0aHJlYWQ6DQoNCmh0dHA6Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNoaXZlL3dl Yi9jb3NlL2N1cnJlbnQvbXNnMDAxMzMuaHRtbA0KDQpNeSBpbnRlcnByZXRhdGlvbiBvZiB0aGlz IHByZXZpb3VzIHRocmVhZCBpcyB0aGF0IENPU0Ugc2hvdWxkIGNvbXBpbGUNCnJlcXVpcmVtZW50 cyBmb3IgY3J5cHRvIG5lZWRlZCBhbmQgYXNrIENGUkcgZm9yIHJlY29tbWVuZGF0aW9ucy4gSWYg Q0ZSRw0KcmVjb21tZW5kcyBhbGdvcml0aG0gWCwgd2h5IGRvZXMgaXQgbWF0dGVyIGlmIGl0IGlz IGFuIFJGQyBvciBhY3RpdmUgSUVURg0KV0cgZG9jdW1lbnQ/IElmIGl0IGRvZXMgbWF0dGVyIGFu ZCBpZiBpdCBpc27igJl0LCB3aGljaCBXRyBzaG91bGQgd29yayBvbg0KdGhpcz8NCg0KVGhhbmtz DQpHw7ZyYW4NCg0KPg0KPj4gTm90ZTogSSdtIG5vdCBzYXlpbmcgKGhlcmU6LSkgZWl0aGVyIG9m IHRob3NlIGlzDQo+PiBiYWQsIG5vciB0aGF0IHRoZXknZCBiZSBzdWdnZXN0ZWQgaGVyZSwgdGhl eSdyZSBqdXN0IGV4YW1wbGVzDQo+PiBvZiBub3Qtd2VsbC1lc3RhYmxpc2hlZCBhbGdzIHRoYXQg YXJlIG9rIGFjY29yZGluZyB0byB0aGUNCj4+IGFib3ZlLiAoQW5kIGZ1bGwgZGlzY2xvc3VyZSwg SSBoYXZlIGEgRElTQ1VTUyBvbiBbMV0gLSBhZmFpaw0KPj4gdGhlcmUgYXJlIG5vIHB1Ymxpc2hl ZCBhbmFseXNlcyBvZiBpdCBhdCBhbGwuKQ0KPg0KPlRoZXJlIGlzIGEgbG90IG9mIGNyeXB0byB0 aGF0IG1vc3Qgb2YgdXMgd2hvIGFyZSBpbnRlcmVzdGVkIGluIENPU0UgZG9uJ3QNCj5jYXJlIGFi b3V0LiANCj4NCj4+IEJ1dCB5ZXMsIHRoZSBXRyB3b3VsZCBvZiBjb3Vyc2UgYWxtb3N0IGNlcnRh aW5seSBiZQ0KPj4gc2Vuc2libGUgYW5kIHNheSAibm8gdGhhbmtzIiBpZiBzb21lb25lIHN1Z2dl c3RzIHRob3NlIGJlDQo+PiBzZWxlY3RlZC4gSSB0aGluayBzb21lIGZvcm0gb2Ygd29yZHMgdGhh dCBhbGxvd3MgdGhlIFdHIHRvDQo+PiBub3QgZXZlbiBib3RoZXIgaGF2aW5nIHRvIGRpc2N1c3Mg b2RkYmFsbCBzdHVmZiBsaWtlIHRoYXQNCj4+IHdvdWxkIGJlIGJldHRlci4NCj4NCj5IYXJkIHRv IGRvIHRoYXQgd2l0aG91dCBiZWluZyBpbnN1bHRpbmcuIEkgdGhpbmsgdGhlIGN1cnJlbnQgd29y ZGluZyBpcw0KPmZpbmUsIGFuZCBpZiBzb21lb25lIGludGVycHJldHMgdGhlIGNoYXJ0ZXIgYXMg dG8gbWVhbiAibXVzdCBoYW5kbGUgZXZlcnkNCj5wb3NzaWJsZSBhbGdvcml0aG0iLCB0aGF0J3Mg dGhlaXIgaXNzdWUuDQo+DQo+PiBUaGF0IHNhaWQsIEknbSBmaW5lIHdpdGggdW5ibG9ja2luZyBh bmQgdHJlYXRpbmcgdGhhdCBhcyBhDQo+PiBjb21tZW50IGlmIHlvdXIgd29yZHMgKG9yIHNpbWls YXIpIGFyZSBhZGRlZC4gV2UgY2FuIHRyeQ0KPj4gaW1wcm92ZSB0aGF0IHdvcmRpbmcgYXMgd2Ug Z28gYWxvbmcuDQo+DQo+T3IgdGhleSBtaWdodCBuZXZlciBhcHBlYXIsIGp1c3QgYXMgdGhleSBk aWQgbm90IGZvciB2YXJpb3VzIG90aGVyDQo+d2lyZS1mb3JtYXQgV0dzLg0KPg0KPj4gSXQgcmVz b2x2ZXMgdGhlIGJsb2NrIHllcywgYnV0IEknZCBzdGlsbCBsaWtlIGJldHRlciB3b3JkaW5nDQo+ PiBpZiBzb21lb25lIGhhcyBzb21lIHRvIG9mZmVyLg0KPg0KPkdyZWF0Lg0KPg0KPj4gVGhlIHBv aW50IGFib3V0IHByb3MgYW5kIGNvbnMgb2Ygc2hhcmVkIHJlZ2lzdHJpZXMgdGhvdWdoIGNvdWxk DQo+PiBiZSB3b3J0aCBzb21lIHRob3VnaHQsIHNvIGJlIGdvb2QgaWYgdGhlIGZpbmFsIGNoYXJ0 ZXIgZG9lc24ndA0KPj4gdGllIHRoZSBXRydzIGhhbmRzIG9uIHRoYXQgSSByZWNrb24uDQo+DQo+ VGhhdCdzIGEgZ29vZCBwb2ludCwgZ2l2ZW4gdGhhdCB0aGUgbm90LXlldC1XRyBpcyBhbHJlYWR5 IGRpdmVyZ2luZyBmcm9tDQo+Sk9TRSBvbiAiaXMgYSBNQUMgYSBzaWduYXR1cmUiLiBJJ2QgYmUg ZmluZSB3aXRoIHJlbW92aW5nICJDT1NFIHdpbGwgcmVseQ0KPm9uIHRoZSBKT1NFIHJlZ2lzdHJp ZXMsIGFuZCB3aWxsIGV4cGFuZCB0aGVtIHdpdGggYWRkaXRpb25hbCBpbmZvcm1hdGlvbg0KPndo ZW4gbmVjZXNzYXJ5IiBmcm9tIHRoZSBjaGFydGVyLCBldmVuIGlmIHRoZSBXRyBlbmRzIHVwIHdh bnRpbmcgdG8gZG8NCj50aGF0Lg0KPg0KPi0tUGF1bCBIb2ZmbWFuDQo+X19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj5Db3NlIG1haWxpbmcgbGlzdA0KPkNv c2VAaWV0Zi5vcmcNCj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UN Cg0K From nobody Tue Apr 28 15:25:41 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C9A561A902C; Tue, 28 Apr 2015 15:25:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.91 X-Spam-Level: X-Spam-Status: No, score=-3.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VvECBb2H4SHd; Tue, 28 Apr 2015 15:25:38 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D02F51A9022; Tue, 28 Apr 2015 15:25:37 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id B5A4ABE35; Tue, 28 Apr 2015 23:25:35 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hunqPCOuhxUe; Tue, 28 Apr 2015 23:25:34 +0100 (IST) Received: from [10.87.48.73] (unknown [86.42.29.198]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 48814BDD8; Tue, 28 Apr 2015 23:25:34 +0100 (IST) Message-ID: <554008DD.20407@cs.tcd.ie> Date: Tue, 28 Apr 2015 23:25:33 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: =?UTF-8?B?R8O2cmFuIFNlbGFuZGVy?= , Paul Hoffman References: <20150428143033.5998.43672.idtracker@ietfa.amsl.com> <39E2589A-483F-4DEE-AD5E-71AC75F1CAE3@vpnc.org> <553FAFFF.6010208@cs.tcd.ie> <522FAB4F-8E59-4D27-BE42-42DED9092D93@vpnc.org> In-Reply-To: OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: The IESG , "cose@ietf.org" Subject: Re: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Apr 2015 22:25:39 -0000 Hiya, On 28/04/15 23:20, Göran Selander wrote: > I don’t understand how this formulation matches the conclusion in a > previous thread: > > http://www.ietf.org/mail-archive/web/cose/current/msg00133.html > > My interpretation of this previous thread is that COSE should compile > requirements for crypto needed and ask CFRG for recommendations. If you'd said "new crypto" above, I'd agree that's a reasonable thing. There's no need to ask CFRG if it's ok to use AES for example and we know that COSE will define AES based things for sure. But characterising what is "new" and what to say about that in a charter isn't trivial. So I don't see any conflict between this discussion and that thread. > If CFRG > recommends algorithm X, why does it matter if it is an RFC or active IETF > WG document? If it does matter and if it isn’t, which WG should work on > this? I suspect that some people are (perhaps correctly) worried about how that might impact on timelines too. S. From nobody Tue Apr 28 16:05:24 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EEE6D1A9040; Tue, 28 Apr 2015 16:05:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.901 X-Spam-Level: X-Spam-Status: No, score=-3.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g0ldd7AyrZf3; Tue, 28 Apr 2015 16:05:18 -0700 (PDT) Received: from sessmg23.ericsson.net (sessmg23.ericsson.net [193.180.251.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8E1441A9036; Tue, 28 Apr 2015 16:05:17 -0700 (PDT) X-AuditID: c1b4fb2d-f794d6d000004501-0f-5540122b63d7 Received: from ESESSHC016.ericsson.se (Unknown_Domain [153.88.253.124]) by sessmg23.ericsson.net (Symantec Mail Security) with SMTP id 4C.9A.17665.B2210455; Wed, 29 Apr 2015 01:05:15 +0200 (CEST) Received: from ESESSMB303.ericsson.se ([169.254.3.19]) by ESESSHC016.ericsson.se ([153.88.183.66]) with mapi id 14.03.0210.002; Wed, 29 Apr 2015 01:05:15 +0200 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Stephen Farrell , Paul Hoffman Thread-Topic: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) Thread-Index: AQHQgcAbK1AaVMOIKUWXOTJmhBAWcJ1ibBSAgAAJb4CAAAXVgIAAhCQA///f+ICAACyjgA== Date: Tue, 28 Apr 2015 23:05:14 +0000 Message-ID: References: <20150428143033.5998.43672.idtracker@ietfa.amsl.com> <39E2589A-483F-4DEE-AD5E-71AC75F1CAE3@vpnc.org> <553FAFFF.6010208@cs.tcd.ie> <522FAB4F-8E59-4D27-BE42-42DED9092D93@vpnc.org> <554008DD.20407@cs.tcd.ie> In-Reply-To: <554008DD.20407@cs.tcd.ie> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.7.141117 x-originating-ip: [153.88.183.150] Content-Type: text/plain; charset="utf-8" Content-ID: <181E3F57B2DEE940B457196E5FEB6980@ericsson.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrAIsWRmVeSWpSXmKPExsUyM+Jvja62kEOoQdckS4tpW6eyWsz4M5HZ 4tb6L6wW0/deY3dg8VjbfZXNY8mSn0wen2dfZQ5gjuKySUnNySxLLdK3S+DK2HjmMEvBPaGK Ze8/sDQwLhDqYuTkkBAwkWg8No0RwhaTuHBvPVsXIxeHkMBRRonNU74wQTiLGSVudN9nB6li E3CReNDwiAnEFhEIlzjd/ooZxGYWsJVYsuUYG4gtLJAksbB1FQtETbLEvm2r2CHsMInPZ/6C bWMRUJXoubUDrIZXwEJiw6ejLBDLupkktsw6xgqS4BRQl/h0+DTYMkag876fWsMEsUxc4taT +UwQZwtILNlznhnCFpV4+fgfWK+ogJ7EyutNbBBxJYkV2y8BLeYA6tWUWL9LH2KMtcTsue+h 7leUmNL9kB3iHkGJkzOfsExglJiFZNsshO5ZSLpnIemehaR7ASPrKkbR4tTi4tx0I2O91KLM 5OLi/Dy9vNSSTYzAKD245bfuDsbVrx0PMQpwMCrx8C54aRcqxJpYVlyZe4hRmoNFSZzXzvhQ iJBAemJJanZqakFqUXxRaU5q8SFGJg5OqQZGmzdGq7YuUn/tOEWnLkdNbLn396srrWoX68z+ E+y7k1fx71qTnnbPLN640NN7S8zNJXgbkljKXl/cZpEY+1iZSVD5Q5bb0uD4uXe+efyqm/3s QIL34SdLZA8sj7TVLbusbBuplv6k7oZBnsPR22x6lio8W1+WsLty32B8utrZM1H/w8KK/Bol luKMREMt5qLiRACHOkPmswIAAA== Archived-At: Cc: The IESG , "cose@ietf.org" Subject: Re: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Apr 2015 23:05:20 -0000 SGkNCg0KT24gMjAxNS0wNC0yOSAwMDoyNSwgIlN0ZXBoZW4gRmFycmVsbCIgPHN0ZXBoZW4uZmFy cmVsbEBjcy50Y2QuaWU+IHdyb3RlOg0KDQo+DQo+SGl5YSwNCj4NCj5PbiAyOC8wNC8xNSAyMzoy MCwgR8O2cmFuIFNlbGFuZGVyIHdyb3RlOg0KPj4gSSBkb27igJl0IHVuZGVyc3RhbmQgaG93IHRo aXMgZm9ybXVsYXRpb24gbWF0Y2hlcyB0aGUgY29uY2x1c2lvbiBpbiBhDQo+PiBwcmV2aW91cyB0 aHJlYWQ6DQo+PiANCj4+IGh0dHA6Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNoaXZlL3dlYi9jb3Nl L2N1cnJlbnQvbXNnMDAxMzMuaHRtbA0KPj4gDQo+PiBNeSBpbnRlcnByZXRhdGlvbiBvZiB0aGlz IHByZXZpb3VzIHRocmVhZCBpcyB0aGF0IENPU0Ugc2hvdWxkIGNvbXBpbGUNCj4+IHJlcXVpcmVt ZW50cyBmb3IgY3J5cHRvIG5lZWRlZCBhbmQgYXNrIENGUkcgZm9yIHJlY29tbWVuZGF0aW9ucy4N Cj4NCj5JZiB5b3UnZCBzYWlkICJuZXcgY3J5cHRvIiBhYm92ZSwgSSdkIGFncmVlIHRoYXQncyBh IHJlYXNvbmFibGUNCj50aGluZy4gVGhlcmUncyBubyBuZWVkIHRvIGFzayBDRlJHIGlmIGl0J3Mg b2sgdG8gdXNlIEFFUyBmb3INCj5leGFtcGxlIGFuZCB3ZSBrbm93IHRoYXQgQ09TRSB3aWxsIGRl ZmluZSBBRVMgYmFzZWQgdGhpbmdzIGZvcg0KPnN1cmUuDQo+DQo+QnV0IGNoYXJhY3RlcmlzaW5n IHdoYXQgaXMgIm5ldyIgYW5kIHdoYXQgdG8gc2F5IGFib3V0IHRoYXQgaW4gYQ0KPmNoYXJ0ZXIg aXNuJ3QgdHJpdmlhbC4NCj4NCj5TbyBJIGRvbid0IHNlZSBhbnkgY29uZmxpY3QgYmV0d2VlbiB0 aGlzIGRpc2N1c3Npb24gYW5kIHRoYXQgdGhyZWFkLg0KDQpPSy4NCg0KPg0KPj4gSWYgQ0ZSRw0K Pj4gcmVjb21tZW5kcyBhbGdvcml0aG0gWCwgd2h5IGRvZXMgaXQgbWF0dGVyIGlmIGl0IGlzIGFu IFJGQyBvciBhY3RpdmUNCj4+SUVURg0KPj4gV0cgZG9jdW1lbnQ/IElmIGl0IGRvZXMgbWF0dGVy IGFuZCBpZiBpdCBpc27igJl0LCB3aGljaCBXRyBzaG91bGQgd29yayBvbg0KPj4gdGhpcz8NCj4N Cj5JIHN1c3BlY3QgdGhhdCBzb21lIHBlb3BsZSBhcmUgKHBlcmhhcHMgY29ycmVjdGx5KSB3b3Jy aWVkIGFib3V0IGhvdw0KPnRoYXQgbWlnaHQgaW1wYWN0IG9uIHRpbWVsaW5lcyB0b28uDQoNCk9L LiBCdXQgYXMgd2FzIG1lbnRpb25lZCwgSSBzdXBwb3NlIHRoZXJlIGNvdWxkIGJlIGEgbW9kdWxh cml0eSBoZXJlIHNvDQp0aGF0IENPU0UgaXMgZmlyc3QgYXBwbGllZCB3aXRoIGNlcnRhaW4gYWxn b3JpdGhtcywgYW5kIG90aGVyIGFsZ29yaXRobXMNCmFkZGVkIGxhdGVyPw0KDQoNCkdvaW5nIGJh Y2sgdG8gdGhlIGZvcm11bGF0aW9uIGFib3V0IHJlZmVyZW5jaW5nIElFVEYgZG9jdW1lbnRzOiBp ZiBpdCBpcw0Kb24gb25lIGhhbmQgYWNrbm93bGVkZ2VkIHRoYXQgQ09TRSBhbGdvcml0aG0gcmVx dWlyZW1lbnRzIGFyZSBhbGxvd2VkIHRvDQpiZSBkaWZmZXJlbnQgKG1pbmltaXplIG1lc3NhZ2Ug c2l6ZSwgY29kZSBzaXplLCBhbmQgY29tcHV0YXRpb25hbA0KY29tcGxleGl0eSksIGFuZCBvbiB0 aGUgb3RoZXIgaGFuZCB0aGUgc3BlY2lmaWNhdGlvbiBvZiBhbGdvcml0aG1zIGluIENPU0UNCmlz IGxpbWl0ZWQgdG8gdGhvc2UgaW4gUkZDcyBvciBhY3RpdmUgSUVURiBXRyBkb2N1bWVudHMsIHRo ZW4gaG93IGFyZSB0aGUNCnJlcXVpcmVtZW50cyBnb2luZyB0byBiZSByZXNvbHZlZCB3aXRoaW4g dGhhdCBjaGFydGVyPw0KDQpUaGFua3MNCkfDtnJhbg0KDQoNCg0KDQo= From nobody Tue Apr 28 16:22:29 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 95F2B1A8A0B; Tue, 28 Apr 2015 16:22:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.91 X-Spam-Level: X-Spam-Status: No, score=-3.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bXlwBvE5Pubp; Tue, 28 Apr 2015 16:22:27 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6366B1A8A03; Tue, 28 Apr 2015 16:22:25 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 8A7FEBE2F; Wed, 29 Apr 2015 00:22:24 +0100 (IST) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LiaYZoDTSGXX; Wed, 29 Apr 2015 00:22:23 +0100 (IST) Received: from [10.87.48.73] (unknown [86.42.29.198]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 3C73EBDD8; Wed, 29 Apr 2015 00:22:23 +0100 (IST) Message-ID: <5540162E.3090009@cs.tcd.ie> Date: Wed, 29 Apr 2015 00:22:22 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: =?UTF-8?B?R8O2cmFuIFNlbGFuZGVy?= , Paul Hoffman References: <20150428143033.5998.43672.idtracker@ietfa.amsl.com> <39E2589A-483F-4DEE-AD5E-71AC75F1CAE3@vpnc.org> <553FAFFF.6010208@cs.tcd.ie> <522FAB4F-8E59-4D27-BE42-42DED9092D93@vpnc.org> <554008DD.20407@cs.tcd.ie> In-Reply-To: OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: The IESG , "cose@ietf.org" Subject: Re: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Apr 2015 23:22:28 -0000 On 29/04/15 00:05, Göran Selander wrote: > > Going back to the formulation about referencing IETF documents: if it is > on one hand acknowledged that COSE algorithm requirements are allowed to > be different (minimize message size, code size, and computational > complexity), and on the other hand the specification of algorithms in COSE > is limited to those in RFCs or active IETF WG documents, then how are the > requirements going to be resolved within that charter? In practice I'd say there aren't that many points where this'll be an issue, but there will be some. What I mean by "be an issue" are cases where a WG really ought get advice from CFRG. Signatures with message recovery as Jim mentioned is one, another is likely to be a desire to specify an entire suite of crypto mechanisms built around a single algorithm (so things like AES-CMAC) to minimise footprint. I don't think there are likely to be many more than that, or at least not many more on which there'd be rough consensus to want to do something even slightly novel, but who knows. There is I suppose a reasonable probability that some folks will show up who have radically different algorithms and who argue that those ought be supported, and directing folks like that to CFRG can also be useful. So I'd say it shouldn't be too big a problem, especially if the charter gives the WG ways to avoid heading off into the weeds. But I do think it's quite likely the WG will want to do something for which we really ought check with crypto folks. So I think it's fairly clear what we want the charter to say, getting the perfect wording for that might be tricky, but I'd say that getting something good enough (like Paul H's wording) isn't hard. Cheers, S. From nobody Tue Apr 28 21:04:32 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 56EF91AC39A; Tue, 28 Apr 2015 21:04:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.901 X-Spam-Level: X-Spam-Status: No, score=-3.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, MIME_8BIT_HEADER=0.3, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gTO8JrvizsoZ; Tue, 28 Apr 2015 21:04:28 -0700 (PDT) Received: from sesbmg22.ericsson.net (sesbmg22.ericsson.net [193.180.251.48]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F1AD51AC399; Tue, 28 Apr 2015 21:04:27 -0700 (PDT) X-AuditID: c1b4fb30-f798d6d0000009ec-90-554058499f55 Received: from ESESSHC009.ericsson.se (Unknown_Domain [153.88.253.124]) by sesbmg22.ericsson.net (Symantec Mail Security) with SMTP id D7.A4.02540.94850455; Wed, 29 Apr 2015 06:04:26 +0200 (CEST) Received: from ESESSMB303.ericsson.se ([169.254.3.19]) by ESESSHC009.ericsson.se ([153.88.183.45]) with mapi id 14.03.0210.002; Wed, 29 Apr 2015 06:04:25 +0200 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Stephen Farrell , Paul Hoffman Thread-Topic: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) Thread-Index: AQHQgcAbK1AaVMOIKUWXOTJmhBAWcJ1ibBSAgAAJb4CAAAXVgIAAhCQA///f+ICAACyjgP//4zwAgABwU4A= Date: Wed, 29 Apr 2015 04:04:24 +0000 Message-ID: References: <20150428143033.5998.43672.idtracker@ietfa.amsl.com> <39E2589A-483F-4DEE-AD5E-71AC75F1CAE3@vpnc.org> <553FAFFF.6010208@cs.tcd.ie> <522FAB4F-8E59-4D27-BE42-42DED9092D93@vpnc.org> <554008DD.20407@cs.tcd.ie> <5540162E.3090009@cs.tcd.ie> In-Reply-To: <5540162E.3090009@cs.tcd.ie> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/14.4.7.141117 x-originating-ip: [153.88.183.148] Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrAIsWRmVeSWpSXmKPExsUyM+Jvja5XhEOowbFNzBbTtk5ltZjxZyKz xa31X1gtpu+9xu7A4rG2+yqbx5IlP5k8Ps++yhzAHMVlk5Kak1mWWqRvl8CVcWzFa7aCKeIV 7+4+ZmpgPCHWxcjJISFgIvGxcTojhC0mceHeerYuRi4OIYGjjBJLn/1nhXAWM0r07G1kB6li E3CReNDwiAnEFhEIlzjd/ooZxGYWsJVYsuUYG4gtLJAksbB1FQtETbLEvm2r2CHsJImry+eB 1bMIqEr8u78MrJ5XwELi6/Q+Rohl15kk/i56zQqS4BTQlJizvQ/sPEag876fWsMEsUxc4taT +UwQZwtILNlznhnCFpV4+fgfWK+ogJ7EyutNbBBxJYnGJU+A4hxAvZoS63fpQ4yxlmh9fokV wlaUmNL9kB3iHkGJkzOfsExglJiFZNsshO5ZSLpnIemehaR7ASPrKkbR4tTipNx0IyO91KLM 5OLi/Dy9vNSSTYzAKD245bfBDsaXzx0PMQpwMCrx8CpYO4QKsSaWFVfmHmKU5mBREue1Mz4U IiSQnliSmp2aWpBaFF9UmpNafIiRiYNTqoFxq/QWPi0nIw5V16jHkwXdJC+6KfxUyintXsz3 4Yy3saJwzv5sy4/zo7XsEjYv/P3VTDXSiDVdaEvfPFclXqUH2RXxB7W0HC6nPclZyHFHiHUi 07zde5dv+2Flw/FtG/tPxxmH5knOlX/jFrfahMf5yUO/5t9Jj9afDp+8lzvRYK9fXm083yEl luKMREMt5qLiRABYDk6MswIAAA== Archived-At: Cc: The IESG , "cose@ietf.org" Subject: Re: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2015 04:04:31 -0000 VGhhbmtzIFN0ZXBoZW4uIFlvdXIgbWFpbCBpcyB2ZXJ5IGNsZWFyIG9uIHdoYXQgeW91IHN1cHBv cnQgYW5kIHdoYXQgeW91DQp3YW50IHRvIGF2b2lkLiBJIGp1c3QgY291bGRu4oCZdCByZWFkIG91 dCB0aGluZ3MgbGlrZSBzdXBwb3J0IGZvcg0KY29uc2lkZXJpbmcgc2lnbmF0dXJlcyB3aXRoIG1l c3NhZ2UgcmVjb3ZlcnkgZnJvbSB0aGUgZm9ybXVsYXRpb24gb2YNCmxpbWl0aW5nIGFsZ29yaXRo bXMgdG8gUkZDcyBldGMuDQoNCg0KR8O2cmFuDQoNCk9uIDIwMTUtMDQtMjkgMDE6MjIsICJTdGVw aGVuIEZhcnJlbGwiIDxzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllPiB3cm90ZToNCg0KPg0KPg0K Pk9uIDI5LzA0LzE1IDAwOjA1LCBHw7ZyYW4gU2VsYW5kZXIgd3JvdGU6DQo+PiANCj4+IEdvaW5n IGJhY2sgdG8gdGhlIGZvcm11bGF0aW9uIGFib3V0IHJlZmVyZW5jaW5nIElFVEYgZG9jdW1lbnRz OiBpZiBpdCBpcw0KPj4gb24gb25lIGhhbmQgYWNrbm93bGVkZ2VkIHRoYXQgQ09TRSBhbGdvcml0 aG0gcmVxdWlyZW1lbnRzIGFyZSBhbGxvd2VkIHRvDQo+PiBiZSBkaWZmZXJlbnQgKG1pbmltaXpl IG1lc3NhZ2Ugc2l6ZSwgY29kZSBzaXplLCBhbmQgY29tcHV0YXRpb25hbA0KPj4gY29tcGxleGl0 eSksIGFuZCBvbiB0aGUgb3RoZXIgaGFuZCB0aGUgc3BlY2lmaWNhdGlvbiBvZiBhbGdvcml0aG1z IGluDQo+PkNPU0UNCj4+IGlzIGxpbWl0ZWQgdG8gdGhvc2UgaW4gUkZDcyBvciBhY3RpdmUgSUVU RiBXRyBkb2N1bWVudHMsIHRoZW4gaG93IGFyZQ0KPj50aGUNCj4+IHJlcXVpcmVtZW50cyBnb2lu ZyB0byBiZSByZXNvbHZlZCB3aXRoaW4gdGhhdCBjaGFydGVyPw0KPg0KPkluIHByYWN0aWNlIEkn ZCBzYXkgdGhlcmUgYXJlbid0IHRoYXQgbWFueSBwb2ludHMgd2hlcmUgdGhpcydsbA0KPmJlIGFu IGlzc3VlLCBidXQgdGhlcmUgd2lsbCBiZSBzb21lLiBXaGF0IEkgbWVhbiBieSAiYmUgYW4NCj5p c3N1ZSIgYXJlIGNhc2VzIHdoZXJlIGEgV0cgcmVhbGx5IG91Z2h0IGdldCBhZHZpY2UgZnJvbSBD RlJHLg0KPg0KPlNpZ25hdHVyZXMgd2l0aCBtZXNzYWdlIHJlY292ZXJ5IGFzIEppbSBtZW50aW9u ZWQgaXMgb25lLCBhbm90aGVyDQo+aXMgbGlrZWx5IHRvIGJlIGEgZGVzaXJlIHRvIHNwZWNpZnkg YW4gZW50aXJlIHN1aXRlIG9mIGNyeXB0bw0KPm1lY2hhbmlzbXMgYnVpbHQgYXJvdW5kIGEgc2lu Z2xlIGFsZ29yaXRobSAoc28gdGhpbmdzIGxpa2UgQUVTLUNNQUMpDQo+dG8gbWluaW1pc2UgZm9v dHByaW50Lg0KPg0KPkkgZG9uJ3QgdGhpbmsgdGhlcmUgYXJlIGxpa2VseSB0byBiZSBtYW55IG1v cmUgdGhhbiB0aGF0LCBvciBhdA0KPmxlYXN0IG5vdCBtYW55IG1vcmUgb24gd2hpY2ggdGhlcmUn ZCBiZSByb3VnaCBjb25zZW5zdXMgdG8gd2FudA0KPnRvIGRvIHNvbWV0aGluZyBldmVuIHNsaWdo dGx5IG5vdmVsLCBidXQgd2hvIGtub3dzLiBUaGVyZSBpcyBJDQo+c3VwcG9zZSBhIHJlYXNvbmFi bGUgcHJvYmFiaWxpdHkgdGhhdCBzb21lIGZvbGtzIHdpbGwgc2hvdyB1cA0KPndobyBoYXZlIHJh ZGljYWxseSBkaWZmZXJlbnQgYWxnb3JpdGhtcyBhbmQgd2hvIGFyZ3VlIHRoYXQgdGhvc2UNCj5v dWdodCBiZSBzdXBwb3J0ZWQsIGFuZCBkaXJlY3RpbmcgZm9sa3MgbGlrZSB0aGF0IHRvIENGUkcg Y2FuDQo+YWxzbyBiZSB1c2VmdWwuDQo+DQo+U28gSSdkIHNheSBpdCBzaG91bGRuJ3QgYmUgdG9v IGJpZyBhIHByb2JsZW0sIGVzcGVjaWFsbHkgaWYgdGhlDQo+Y2hhcnRlciBnaXZlcyB0aGUgV0cg d2F5cyB0byBhdm9pZCBoZWFkaW5nIG9mZiBpbnRvIHRoZSB3ZWVkcy4NCj5CdXQgSSBkbyB0aGlu ayBpdCdzIHF1aXRlIGxpa2VseSB0aGUgV0cgd2lsbCB3YW50IHRvIGRvIHNvbWV0aGluZw0KPmZv ciB3aGljaCB3ZSByZWFsbHkgb3VnaHQgY2hlY2sgd2l0aCBjcnlwdG8gZm9sa3MuDQo+DQo+U28g SSB0aGluayBpdCdzIGZhaXJseSBjbGVhciB3aGF0IHdlIHdhbnQgdGhlIGNoYXJ0ZXIgdG8gc2F5 LA0KPmdldHRpbmcgdGhlIHBlcmZlY3Qgd29yZGluZyBmb3IgdGhhdCBtaWdodCBiZSB0cmlja3ks IGJ1dCBJJ2Qgc2F5DQo+dGhhdCBnZXR0aW5nIHNvbWV0aGluZyBnb29kIGVub3VnaCAobGlrZSBQ YXVsIEgncyB3b3JkaW5nKSBpc24ndA0KPmhhcmQuDQo+DQo+Q2hlZXJzLA0KPlMuDQo+DQoNCg== From nobody Wed Apr 29 07:29:16 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B02F1A7022; Wed, 29 Apr 2015 07:29:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.689 X-Spam-Level: X-Spam-Status: No, score=-0.689 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_ORG=0.611, J_CHICKENPOX_15=0.6] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q5aBr_j9YNO7; Wed, 29 Apr 2015 07:29:05 -0700 (PDT) Received: from mail2.ihtfp.org (MAIL2.IHTFP.ORG [204.107.200.7]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2745C1A1BC9; Wed, 29 Apr 2015 07:29:05 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail2.ihtfp.org (Postfix) with ESMTP id F2357E2036; Wed, 29 Apr 2015 10:29:03 -0400 (EDT) Received: from mail2.ihtfp.org ([127.0.0.1]) by localhost (mail2.ihtfp.org [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 15371-10; Wed, 29 Apr 2015 10:29:02 -0400 (EDT) Received: from securerf.ihtfp.org (unknown [IPv6:fe80::ea2a:eaff:fe7d:235]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mocana.ihtfp.org", Issuer "IHTFP Consulting Certification Authority" (verified OK)) by mail2.ihtfp.org (Postfix) with ESMTPS id 11D3AE2035; Wed, 29 Apr 2015 10:29:02 -0400 (EDT) Received: (from warlord@localhost) by securerf.ihtfp.org (8.14.8/8.14.8/Submit) id t3TET0un030850; Wed, 29 Apr 2015 10:29:00 -0400 From: Derek Atkins To: Stephen Farrell References: <20150428143033.5998.43672.idtracker@ietfa.amsl.com> <027201d081fa$3d7fb0d0$b87f1270$@augustcellars.com> <553FFE5B.10903@cs.tcd.ie> Date: Wed, 29 Apr 2015 10:29:00 -0400 In-Reply-To: <553FFE5B.10903@cs.tcd.ie> (Stephen Farrell's message of "Tue, 28 Apr 2015 22:40:43 +0100") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Virus-Scanned: Maia Mailguard 1.0.2a Archived-At: Cc: Jim Schaad , 'The IESG' , cose@ietf.org Subject: Re: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2015 14:29:07 -0000 Stephen, Stephen Farrell writes: > Hiya, > > On 28/04/15 22:28, Jim Schaad wrote: >> >> I am going to push back on this a bit. The first question is what do you >> mean by "new cryptography". One of the algorithms mentioned on the list >> was Pintsov-Vanstone Signatures with Message Recovery. This was first >> published at the latest of 1999 and appeared in IEEE P1363a (Jan 2000). So >> is an algorithm that has been around for on the order of 15 years "new >> cryptography"? > > I mean new to the IETF and suggested "well established" (in the IETF) > as the qualifier. I don't think any signature scheme with recovery > would qualify as well established in the IETF, but I'm open to > correction there. And yes, some schemes have been known for many > years, but longevity by itself does not mean that either the IPR > situation is clear nor that there are not going to be either better > more modern schemes nor does it imply the absence of implementation > pitfalls that we have yet to discover which is quite possible if > a scheme has only really existed in the lab until now. I still think this is a bit wishy-washy. However I think using Paul's suggested text is still a good starting point. I agree that COSE should not be "inventing crypto" however I do think that the COSE specifications should be flexible enough to allow additional crypto algorithms. >> Do you think it is better than a different working group - perhaps CORE- >> did the innovation instead? This language is not in the charter of any >> other group that I am away of A(think ACE?). >> >> What makes you think that the COSE working group would be any more likely to >> do this that any other working group? > > The code footprint requirement will lead to more requests for > unusual crypto. COSE is definitely going to be different in that > respect. I think that's already been seen on the list and your > example of message recovery is another indication that message > size issues will be different for COSE as well. As a purveyor of one such "unusual crypto", I just need to say that I suspect the COSE specs to be frameworks with some well-known, suggested algorithms (my guess: ECDSA, ECDH, AES-CTR-or-something, AES-CMAC) in there for all the core operations. But I also think that different users of the COSE specs will need to (and SHOULD) be able to plug in the algorithms (e.g. AEDH) that make the most sense to them for their applications. So we should enable that capability. > Cheers, > S. -derek -- Derek Atkins 617-623-3745 derek@ihtfp.com www.ihtfp.com Computer and Internet Security Consultant From nobody Wed Apr 29 07:30:30 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C2E571A1C06 for ; Wed, 29 Apr 2015 07:30:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K4wW6yFbiq2t for ; Wed, 29 Apr 2015 07:30:28 -0700 (PDT) Received: from mail2.ihtfp.org (mail2.ihtfp.org [IPv6:2001:4830:143:1::3a11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6F54A1A1BC9 for ; Wed, 29 Apr 2015 07:30:28 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail2.ihtfp.org (Postfix) with ESMTP id 397CEE2036; Wed, 29 Apr 2015 10:30:27 -0400 (EDT) Received: from mail2.ihtfp.org ([127.0.0.1]) by localhost (mail2.ihtfp.org [127.0.0.1]) (amavisd-maia, port 10024) with ESMTP id 15463-06; Wed, 29 Apr 2015 10:30:25 -0400 (EDT) Received: from securerf.ihtfp.org (unknown [IPv6:fe80::ea2a:eaff:fe7d:235]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mocana.ihtfp.org", Issuer "IHTFP Consulting Certification Authority" (verified OK)) by mail2.ihtfp.org (Postfix) with ESMTPS id 82B6EE2035; Wed, 29 Apr 2015 10:30:25 -0400 (EDT) Received: (from warlord@localhost) by securerf.ihtfp.org (8.14.8/8.14.8/Submit) id t3TEUOAB030912; Wed, 29 Apr 2015 10:30:24 -0400 From: Derek Atkins To: "Jim Schaad" References: <017601d07cad$0f29f9e0$2d7deda0$@augustcellars.com> <024801d07d2d$6137c6b0$23a75410$@augustcellars.com> <04a401d07ef6$827dc700$87795500$@augustcellars.com> <021b01d081b8$da342380$8e9c6a80$@augustcellars.com> <027101d081f3$8b547b30$a1fd7190$@augustcellars.com> Date: Wed, 29 Apr 2015 10:30:24 -0400 In-Reply-To: <027101d081f3$8b547b30$a1fd7190$@augustcellars.com> (Jim Schaad's message of "Tue, 28 Apr 2015 13:40:19 -0700") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.3 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Virus-Scanned: Maia Mailguard 1.0.2a Archived-At: Cc: 'Samuel Erdtman' , 'cose' Subject: Re: [Cose] Issue: Use arrays for some containers X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2015 14:30:29 -0000 "Jim Schaad" writes: [snip] >> { foo:{bar:baz, quux:h=E2=80=99xXXXXXXXXX=E2=80=99}, biz:h=E2=80=99XXXX= XXXXXXXX=E2=80=99, >> buz:[{boz:h=E2=80=99XXXXXX=E2=80=99}]} > > Sure - but at that point the difference between array and map is > marginal. On can decorate the array just as easily as one decorates > the map. Probably true; I feel that maps map easier to the decoration, but I've never implemented it so couldn't tell you how much more work it would be to decorate an array. > Jim -derek --=20 Derek Atkins 617-623-3745 derek@ihtfp.com www.ihtfp.com Computer and Internet Security Consultant From nobody Wed Apr 29 07:49:41 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B4D2E1A1A2E; Wed, 29 Apr 2015 07:49:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cXtyDKBzySIR; Wed, 29 Apr 2015 07:49:36 -0700 (PDT) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BBCBB1A1A2D; Wed, 29 Apr 2015 07:49:36 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 893D6BE2F; Wed, 29 Apr 2015 15:49:35 +0100 (IST) Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 756SxJ6I8q_w; Wed, 29 Apr 2015 15:49:35 +0100 (IST) Received: from [134.226.36.180] (stephen-think.dsg.cs.tcd.ie [134.226.36.180]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id 4FBC1BDD8; Wed, 29 Apr 2015 15:49:35 +0100 (IST) Message-ID: <5540EF7F.6000606@cs.tcd.ie> Date: Wed, 29 Apr 2015 15:49:35 +0100 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.6.0 MIME-Version: 1.0 To: Derek Atkins References: <20150428143033.5998.43672.idtracker@ietfa.amsl.com> <027201d081fa$3d7fb0d0$b87f1270$@augustcellars.com> <553FFE5B.10903@cs.tcd.ie> In-Reply-To: OpenPGP: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit Archived-At: Cc: Jim Schaad , 'The IESG' , cose@ietf.org Subject: Re: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2015 14:49:37 -0000 Hiya, I'm fine with all you say, but wanted to note one thing... On 29/04/15 15:29, Derek Atkins wrote: > As a purveyor of one such "unusual crypto" Right. And you did the exactly right thing with that so far, bringing it up in CFRG etc. S. From nobody Wed Apr 29 08:10:16 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ADE8D1A1A17 for ; Wed, 29 Apr 2015 08:10:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.55 X-Spam-Level: X-Spam-Status: No, score=-1.55 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eQ1C4W9Bxcnz for ; Wed, 29 Apr 2015 08:10:14 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E3A9C1A02F1 for ; Wed, 29 Apr 2015 08:10:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id t3TF97Ii001979; Wed, 29 Apr 2015 17:09:07 +0200 (CEST) Received: from alma.local (p5DCCC91B.dip0.t-ipconnect.de [93.204.201.27]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3lcNXf6v5wzDZyn; Wed, 29 Apr 2015 17:09:06 +0200 (CEST) Message-ID: <5540F410.1090906@tzi.org> Date: Wed, 29 Apr 2015 17:09:04 +0200 From: Carsten Bormann User-Agent: Postbox 3.0.11 (Macintosh/20140602) MIME-Version: 1.0 To: Derek Atkins References: <017601d07cad$0f29f9e0$2d7deda0$@augustcellars.com> <024801d07d2d$6137c6b0$23a75410$@augustcellars.com> <04a401d07ef6$827dc700$87795500$@augustcellars.com> <021b01d081b8$da342380$8e9c6a80$@augustcellars.com> <027101d081f3$8b547b30$a1fd7190$@augustcellars.com> In-Reply-To: X-Enigmail-Version: 1.2.3 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Archived-At: Cc: 'Samuel Erdtman' , Jim Schaad , 'cose' Subject: Re: [Cose] Issue: Use arrays for some containers X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2015 15:10:15 -0000 Derek Atkins wrote: >> Sure - but at that point the difference between array and map is >> > marginal. On can decorate the array just as easily as one decorates >> > the map. > > Probably true; I feel that maps map easier to the decoration, but I've > never implemented it so couldn't tell you how much more work it would be > to decorate an array. Actually, we thought about this a bit when designing CDDL: That's why you can give a name to array members. A CDDL-based pretty-printer could use that information to print even prettier. I probably should mention that I'm a bit uneasy about the current thread. Applying hard-earned design taste is good. However, there are cold hard numbers to look at, as well. Jim has generated some of them. I'd sure like to see numbers for applications such as draft-selander-ace-object-security that contrast the choices here. (As I said, my hunch is that arrays are right for the outer structure, but numbers! numbers!) We are doing this for the people who truncate the CCM authenticator from 16 to 8 bytes because they can't afford more... Grüße, Carsten From nobody Wed Apr 29 08:31:23 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2CCF51A1BEA; Wed, 29 Apr 2015 08:31:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.051 X-Spam-Level: * X-Spam-Status: No, score=1.051 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, J_CHICKENPOX_22=0.6, MIME_CHARSET_FARAWAY=2.45, MIME_QP_LONG_LINE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kxGyK4hyDanS; Wed, 29 Apr 2015 08:31:16 -0700 (PDT) Received: from out4133-66.mail.aliyun.com (out4133-66.mail.aliyun.com [42.120.133.66]) by ietfa.amsl.com (Postfix) with ESMTP id B06721A1BD7; Wed, 29 Apr 2015 08:31:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alibaba-inc.com; s=default; t=1430321409; h=Date:Subject:From:To:Message-ID:Mime-version:Content-type; bh=d4yd3ZiBlVQaL+hXGtCm9gaUt0/AxGzqk0ZJZau5Of4=; b=R6gyceqpmWBUei2cwmKwiF+Zlu8uIFNb5S/etrHCF4Q4nmk1YgZntkKLL6HTuw/kdiTTkCBEszy2CjzWltJs6KzCMLJdX553nkSEZP7+X6lTSFDdEZfCARU3fIZnFharoU3iJmWm7tDR6ii58VjYP/6mNKTdJ8r32V5urLiMlGg= X-Alimail-AntiSpam: AC=PASS; BC=-1|-1; BR=01201311R361e4; FP=0|-1|-1|-1|0|-1|-1|-1; HT=r41g03043; MF=kepeng.lkp@alibaba-inc.com; PH=DS; RN=5; RT=5; SR=0; Received: from 10.22.33.186(mailfrom:kepeng.lkp@alibaba-inc.com ip:42.120.73.207) by smtp.aliyun-inc.com(127.0.0.1); Wed, 29 Apr 2015 23:30:06 +0800 User-Agent: Microsoft-MacOutlook/14.4.8.150116 Date: Wed, 29 Apr 2015 23:29:58 +0800 From: "Kepeng Li" To: Kathleen Moriarty , Paul Hoffman Message-ID: Thread-Topic: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) References: <20150428143033.5998.43672.idtracker@ietfa.amsl.com> <39E2589A-483F-4DEE-AD5E-71AC75F1CAE3@vpnc.org> <553FAFFF.6010208@cs.tcd.ie> <522FAB4F-8E59-4D27-BE42-42DED9092D93@vpnc.org> <0F925919-5A1F-4087-AF8E-11F9C408C006@gmail.com> In-Reply-To: <0F925919-5A1F-4087-AF8E-11F9C408C006@gmail.com> Mime-version: 1.0 Content-type: text/plain; charset="GB2312" Content-transfer-encoding: quoted-printable Archived-At: Cc: Stephen Farrell , The IESG , "cose@ietf.org" Subject: Re: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2015 15:31:18 -0000 >I can do it, but it would be good to hear from more than one person and >to see if there is better wording as requested. I can help to consolidate the proposed changes and hopefully make it easier for you. :-) The proposed changes so far: 1) Add one paragraph below (proposed by Paul): The COSE WG will not innovate in terms of cryptography. The specifiation of algorithms in COSE is limited to those in RFCs or active IETF WG documents. 2) Remove one sentence below (proposed by Paul): COSE will rely on the JOSE registries, and will expand them with additional information when necessary. 3) Change one sentence below (proposed by Stephen) OLD: The working group will coordinate its progress with the ACE, DICE and CORE working groups to ensure that we are fulfilling the needs of these Constituencies. NEW: The working group will coordinate its progress with the ACE, DICE and CORE working groups to ensure that we are fulfilling the needs of these Constituencies to the extent relevant to their work. Thanks, Kind Regards Kepeng =D4=DA 29/4/15 12:38 am=A3=AC "Kathleen Moriarty" =D0=B4=C8=EB: > > >Sent from my iPhone > >> On Apr 28, 2015, at 12:27 PM, Paul Hoffman >>wrote: >>=20 >>> On Apr 28, 2015, at 9:06 AM, Stephen Farrell >>> wrote: >>>=20 >>> tl;dr - make that or an equivalent change and I'll s/block/yes/ >>=20 >> Cool, thanks. I'm a bit embarrassed to admit that I don't know how to >>make a change to a proposed charter while it is in IESG evaluation. Does >>someone for the not-yet-WG do so? Or does the sponsoring AD do so? >>=20 > >I can do it, but it would be good to hear from more than one person and >to see if there is better wording as requested. > >Thanks, >Kathleen > From nobody Wed Apr 29 08:42:07 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3BD281AC446; Wed, 29 Apr 2015 08:41:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.451 X-Spam-Level: X-Spam-Status: No, score=0.451 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, MIME_CHARSET_FARAWAY=2.45, MIME_QP_LONG_LINE=0.001, SPF_PASS=-0.001, UNPARSEABLE_RELAY=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 84tlXXNNmhxY; Wed, 29 Apr 2015 08:41:41 -0700 (PDT) Received: from out4133-34.mail.aliyun.com (out4133-34.mail.aliyun.com [42.120.133.34]) by ietfa.amsl.com (Postfix) with ESMTP id D750A1AC427; Wed, 29 Apr 2015 08:41:25 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alibaba-inc.com; s=default; t=1430322085; h=Date:Subject:From:To:Message-ID:Mime-version:Content-type; bh=fQXHk8U03LRCulLTTJzYLSKpHjBOLQJNXiiRABkydGY=; b=bQebVNFC7NGsv9WwXwCLE8DFIDj9yrmiCkrEWeXvy3v+iPdqy+rKDC3huRM9ioankBq6s2N3JGhxkCW5slvUjunOAW2Yg2NeOOdg5YQgTM3H8uiZb+JkSUlxVmqhNWN2bWUphGEnS4TVo+CJoCm7zCuq6mLW8unnI2LuBpsxlYQ= X-Alimail-AntiSpam: AC=PASS; BC=-1|-1; BR=01201311R431e4; FP=0|-1|-1|-1|0|-1|-1|-1; HT=r41g03020; MF=kepeng.lkp@alibaba-inc.com; PH=DS; RN=3; RT=3; SR=0; Received: from 10.22.33.186(mailfrom:kepeng.lkp@alibaba-inc.com ip:42.120.73.207) by smtp.aliyun-inc.com(127.0.0.1); Wed, 29 Apr 2015 23:41:21 +0800 User-Agent: Microsoft-MacOutlook/14.4.8.150116 Date: Wed, 29 Apr 2015 23:41:15 +0800 From: "Kepeng Li" To: Stephen Farrell , The IESG Message-ID: Thread-Topic: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) References: <20150428143033.5998.43672.idtracker@ietfa.amsl.com> In-Reply-To: <20150428143033.5998.43672.idtracker@ietfa.amsl.com> Mime-version: 1.0 Content-type: text/plain; charset="GB2312" Content-transfer-encoding: quoted-printable Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2015 15:41:55 -0000 > The milestone dates are nonsense. I'll buy the chairs a > beverage if they happen though. It is fine if folks want > to believe those dates though. I checked the other charters, usually they put one year between submitting a document as WG item and submitting a document to the IESG. Also we need a F2F meeting to discuss the drafts before adopting them, so I propose to change June to July. How about this: OLD: Jan 2016 Submit COSE constrained-appropriate algorithms to the IESG, for publication as a Proposed Standard Jan 2016 Submit COSE specification to the IESG, for publication as a Proposed Standard Jun 2015 Submit COSE constrained-appropriate algorithms as a WG item Jun 2015 Submit COSE specification as a WG item NEW: Jul 2016 Submit COSE constrained-appropriate algorithms to the IESG, for publication as a Proposed Standard Jul 2016 Submit COSE specification to the IESG, for publication as a Proposed Standard Jul 2015 Submit COSE constrained-appropriate algorithms as a WG item Jul 2015 Submit COSE specification as a WG item Kind Regards Kepeng =D4=DA 28/4/15 10:30 pm=A3=AC "Stephen Farrell" =D0=B4=C8=EB: >Stephen Farrell has entered the following ballot position for >charter-ietf-cose-00-00: Block > >When responding, please keep the subject line intact and reply to all >email addresses included in the To and CC lines. (Feel free to cut this >introductory paragraph, however.) > > > >The document, along with other ballot positions, can be found here: >https://datatracker.ietf.org/doc/charter-ietf-cose/ > > > >---------------------------------------------------------------------- >BLOCK: >---------------------------------------------------------------------- > >I was initially skeptical of this work, doubting that >there is really sufficient real interest in CBOR to >justify spending the time on a WG. However, (just about) >enough people argued that they would or are using CBOR to >convince me that there could well be a real constituency >here. And given that, I'd prefer the work be done in the >IETF rather than ad-hoc and possibly by some folks who'd >prioritise constrained-system requirements too much over >security and privacy requirements. So in the end, I'm for >doing this. > >I do have one blocking thing to discuss though, but that >should be easy enough as we mentioned it on the list >already and I think folks are ok with the sentiment and >we'll just need to get the right words. Anyway, my >blocking point is: > >I think you need to add something to the effect that this >WG will not invent any new cryptography. (It is likely to >be asked to, since smaller-footprint is a requirement >that leads towards that.) I'd suggest adding "The COSE WG >will not innovate in terms of cryptography. Any >algorithms to be used in COSE that are not already >well-established for use as part of some IETF standards >track specification will need to be checked via the CFRG >before being adopted here." I'm fine with other wordings, >what I wanted the above to allow was a bit more that just >what is already MTI in standards track RFCs, but to not >allow every single algorithm that has even gotten an IANA >code point somewhere to be just adopted as MTI by COSE. >And of course, for anything that is actually new to have to >go via CFRG first. > >After we resolve this, I'll be balloting YES. > > >---------------------------------------------------------------------- >COMMENT: >---------------------------------------------------------------------- > > >- I think you could (and maybe should) lose all the >references to JOSE - this work involves re-doing all of >the same things, and won't be interoperable so I don't >see any value in re-use of registries to be honest. (And >maybe there is potential for minor confusion/harm there.) >I read the current text with all it's JOSE references as >trying to justify that the work is not just more JOSE >(both involve a lot of the same people), but at the same >time saying "this is like JOSE." And I don't think that >is needed - if there is real use of CBOR, then there will >be a real use of COSE. That doesn't depend on JOSE at >all, but more on whether folks see CBOR as being better >than JSON. The crypto primitives will just follow from >the application developer's chosen form of structured >encoding. > >- The text assumes that ACE, DICE and CORE are already >bought into CBOR. I don't believe that is necessarily the >case, though I'd not be surprised if a bunch of folks >would argue for it to be the case. > >- The milestone dates are nonsense. I'll buy the chairs a >beverage if they happen though. It is fine if folks want >to believe those dates though. > > >_______________________________________________ >Cose mailing list >Cose@ietf.org >https://www.ietf.org/mailman/listinfo/cose From nobody Wed Apr 29 08:47:00 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C7E081A872A; Wed, 29 Apr 2015 08:46:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.347 X-Spam-Level: X-Spam-Status: No, score=-1.347 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_MISMATCH_COM=0.553] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oJ-wOxQitKR6; Wed, 29 Apr 2015 08:46:57 -0700 (PDT) Received: from proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BBFF61A6F1D; Wed, 29 Apr 2015 08:46:57 -0700 (PDT) Received: from [10.20.30.101] (50-1-98-218.dsl.dynamic.fusionbroadband.com [50.1.98.218]) (authenticated bits=0) by proper.com (8.15.1/8.14.9) with ESMTPSA id t3TFkkMu006523 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 29 Apr 2015 08:46:48 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) X-Authentication-Warning: proper.com: Host 50-1-98-218.dsl.dynamic.fusionbroadband.com [50.1.98.218] claimed to be [10.20.30.101] Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2098\)) From: Paul Hoffman In-Reply-To: Date: Wed, 29 Apr 2015 08:46:47 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: <56BE4DD7-DE1F-4D58-80B9-AE5E26A53263@vpnc.org> References: <20150428143033.5998.43672.idtracker@ietfa.amsl.com> To: Kepeng Li X-Mailer: Apple Mail (2.2098) Archived-At: Cc: cose@ietf.org, The IESG , Stephen Farrell Subject: Re: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2015 15:46:58 -0000 On Apr 29, 2015, at 8:41 AM, Kepeng Li = wrote: >> The milestone dates are nonsense. I'll buy the chairs a >> beverage if they happen though. It is fine if folks want >> to believe those dates though. >=20 >=20 > I checked the other charters, usually they put one year between = submitting > a document as WG item and submitting a document to the IESG. >=20 > Also we need a F2F meeting to discuss the drafts before adopting them, = so > I propose to change June to July. >=20 > How about this: >=20 > OLD: > Jan 2016 Submit COSE constrained-appropriate algorithms to the IESG, = for > publication as a Proposed Standard > Jan 2016 Submit COSE specification to the IESG, for publication as a > Proposed Standard > Jun 2015 Submit COSE constrained-appropriate algorithms as a WG item > Jun 2015 Submit COSE specification as a WG item >=20 >=20 > NEW: > Jul 2016 Submit COSE constrained-appropriate algorithms to the IESG, = for > publication as a Proposed Standard > Jul 2016 Submit COSE specification to the IESG, for publication as a > Proposed Standard > Jul 2015 Submit COSE constrained-appropriate algorithms as a WG item > Jul 2015 Submit COSE specification as a WG item This was meant to be a short-lived WG for two focused items; it should = not take a year to do this. Stephen might be right and we miss the goal = of finishing this year, but I'd like to make him buy someone a beverage. I also disagree that we need a F2F meeting on this at all. The mailing = list is already working well on the early hard questions. If we can meet = at an IETF meeting, great. If we need additional meetings, we can have a = virtual interim. Please: let's not make this a "reason to travel" WG. --Paul Hoffman= From nobody Wed Apr 29 08:47:17 2015 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A0AD1A854B; Wed, 29 Apr 2015 08:47:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.549 X-Spam-Level: X-Spam-Status: No, score=-1.549 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, HTML_MESSAGE=0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pkqSeGpiuDLu; Wed, 29 Apr 2015 08:47:12 -0700 (PDT) Received: from mailhost.informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BA78B1A872A; Wed, 29 Apr 2015 08:47:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from submithost.informatik.uni-bremen.de (submithost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::b]) by mailhost.informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id t3TFl1fw004632; Wed, 29 Apr 2015 17:47:01 +0200 (CEST) Received: from alma.local (p5DCCC91B.dip0.t-ipconnect.de [93.204.201.27]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by submithost.informatik.uni-bremen.de (Postfix) with ESMTPSA id 3lcPNP1KJxzDZfs; Wed, 29 Apr 2015 17:47:01 +0200 (CEST) Date: Wed, 29 Apr 2015 17:47:00 +0200 From: Carsten Bormann To: Stephen Farrell , Kepeng Li , The IESG Message-ID: In-Reply-To: References: <20150428143033.5998.43672.idtracker@ietfa.amsl.com> X-Mailer: Airmail (286) MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="5540fcf4_4d9b986b_2525" Archived-At: Cc: cose@ietf.org Subject: Re: [Cose] Stephen Farrell's Block on charter-ietf-cose-00-00: (with BLOCK and COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2015 15:47:16 -0000 --5540fcf4_4d9b986b_2525 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline On 29 Apr 2015 at 17:42:13, Kepeng Li (kepeng.lkp=40alibaba-inc.com) wrot= e: I checked the other charters, usually they put one year between submittin= g=C2=A0 a document as WG item and submitting a document to the IESG.=C2=A0 We are not those other WGs. Also we need a =462=46 meeting to discuss the drafts before adopting them= , so=C2=A0 I propose to change June to July.=C2=A0 We do not need an =462=46 meeting for *adopting* a draft. Can we please adopt Jim=E2=80=99s draft about a nanosecond after creating= the WG=3F =C2=A0We will have had enough time to determine whether this i= s a document that can substantially form the basis for the WG=E2=80=99s r= esult (as in, yes). (We also don=E2=80=99t need one for generating consensus on one to ship i= t to the IESG, but let=E2=80=99s see whether we do want to make use of Pr= ague.) Gr=C3=BC=C3=9Fe, Carsten --5540fcf4_4d9b986b_2525 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline