From nobody Thu Oct 10 10:17:36 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE614120116 for ; Thu, 10 Oct 2019 10:17:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L8sl09eFCG1Z for ; Thu, 10 Oct 2019 10:17:33 -0700 (PDT) Received: from veto.sei.cmu.edu (veto.sei.cmu.edu [147.72.252.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 34D17120113 for ; Thu, 10 Oct 2019 10:17:33 -0700 (PDT) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by veto.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x9AHHS2f026800 for ; Thu, 10 Oct 2019 13:17:29 -0400 DKIM-Filter: OpenDKIM Filter v2.11.0 veto.sei.cmu.edu x9AHHS2f026800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1570727849; bh=+RIpN3AoyC+K75TKTCfmZieD9KCQPUQ68XOlb7eIepE=; h=From:To:Subject:Date:From; b=eVDGvQBLjyzz2TIAfdE36NACDNrMKQNqxrPEZlJnPMeKhgHXi3US7FQHihaZDxFVt CFCN2NDn2RKn+e7zUN3T2i+HFzgVnpoATNTFpEv2TfehSwJrOTWudk4i+LlfX6Llxs QmQQvu3oB+dR2FhwrrBye1S1Yj2hsGl3uJWszCmM= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x9AHHP5s026255 for ; Thu, 10 Oct 2019 13:17:25 -0400 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASSINA.ad.sei.cmu.edu ([10.64.28.249]) with mapi id 14.03.0468.000; Thu, 10 Oct 2019 13:17:25 -0400 From: Roman Danyliw To: "cose@ietf.org" Thread-Topic: AD Review of draft-ietf-cose-hash-sig-03 Thread-Index: AdV/jjO+NBNekjPGTxOmdU2BtyuZIA== Date: Thu, 10 Oct 2019 17:17:25 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC01B348271C@marathon> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: [COSE] AD Review of draft-ietf-cose-hash-sig-03 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Oct 2019 17:17:35 -0000 Hi! The following is my AD review of draft-ietf-cose-hash-sig-03: ** Section 3. Per "The signature value is a large byte string. The byte s= tring is designed for easy parsing, and it includes a counter and type code= s that indirectly provide all of the information that is needed to parse th= e byte string during signature validation." -- please propagate the clarifying edits of the form made on the related se= ntence of Section 3.0 in draft-ietf-lamps-cms-hash-sig (to clarify the exac= t parameters in the byte string and where this byte string is defined) -- the examples in Appendix A seem to imply a particular formatting (e.g., = using the | to separate parameters), this should be clarified in this text ** This draft (COSE) and draft-ietf-lamps-cms-hash-sig (CMS) share common = text. A number of changes were made to draft-lamps-cms-hash-sig in respons= e to AD feedback and the IESG review (version -09 and -10). Please propaga= te these changes (where they are appropriate): -- Abstract and Section 1. Expand "HSS/LMS". -- from CMS Section 1.0 to COSE Section 1.0 -- from CMS Section 1.3 to COSE Section 1.1 -- from CMS Section 2.0 to COSE Section 2.0 -- from CMS Section 2.1 to COSE Section 2.1 -- from CMS Section 2.2 to COSE Section 2.2 -- from CMS Section 2.3 to COSE Section 2.3 -- from CMS Section 6.0 to COSE Section 6.0 Regards, Roman From nobody Thu Oct 10 12:36:39 2019 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 09F5F12082C; Thu, 10 Oct 2019 12:36:24 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.105.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: cose@ietf.org Message-ID: <157073618394.20465.17957764280348548441@ietfa.amsl.com> Date: Thu, 10 Oct 2019 12:36:24 -0700 Archived-At: Subject: [COSE] I-D Action: draft-ietf-cose-hash-sig-04.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Oct 2019 19:36:30 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption WG of the IETF. Title : Use of the HSS/LMS Hash-based Signature Algorithm with CBOR Object Signing and Encryption (COSE) Author : Russ Housley Filename : draft-ietf-cose-hash-sig-04.txt Pages : 21 Date : 2019-10-10 Abstract: This document specifies the conventions for using the Hierarchical Signature System (HSS) / Leighton-Micali Signature (LMS) hash-based signature algorithm with the CBOR Object Signing and Encryption (COSE) syntax. The HSS/LMS algorithm is one form of hash-based digital signature; it is described in RFC 8554. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-hash-sig/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-cose-hash-sig-04 https://datatracker.ietf.org/doc/html/draft-ietf-cose-hash-sig-04 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-hash-sig-04 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Oct 10 13:24:13 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 08C9212013A for ; Thu, 10 Oct 2019 13:24:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WuFD2O23YPpw for ; Thu, 10 Oct 2019 13:24:10 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 83B72120125 for ; Thu, 10 Oct 2019 13:24:10 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id F2F79300AEA for ; Thu, 10 Oct 2019 16:24:08 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id eHxvZaWNygLP for ; Thu, 10 Oct 2019 16:24:07 -0400 (EDT) Received: from a860b60074bd.fios-router.home (unknown [138.88.156.37]) by mail.smeinc.net (Postfix) with ESMTPSA id E8F9C300471; Thu, 10 Oct 2019 16:24:06 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) From: Russ Housley In-Reply-To: <157072789599.20442.12089124445445995749.idtracker@ietfa.amsl.com> Date: Thu, 10 Oct 2019 16:24:07 -0400 Cc: Ivaylo Petrov , cose , Ben Kaduk Content-Transfer-Encoding: quoted-printable Message-Id: <67AC8C51-9650-4864-8D42-C10A5D56DAC6@vigilsec.com> References: <157072789599.20442.12089124445445995749.idtracker@ietfa.amsl.com> To: "Roman D. Danyliw" X-Mailer: Apple Mail (2.3445.104.11) Archived-At: Subject: Re: [COSE] AD review of draft-ietf-cose-hash-sig-03 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Oct 2019 20:24:12 -0000 Roman: I just posted draft-ietf-cose-hash-sig-04 to handle these comments. > The following is my AD review of draft-ietf-cose-hash-sig-03: >=20 > ** Section 3. Per "The signature value is a large byte string. The = byte string is designed for easy parsing, and it includes a counter and = type codes that indirectly provide all of the information that is needed = to parse the byte string during signature validation." > -- please propagate the clarifying edits of the form made on the = related sentence of Section 3.0 in draft-ietf-lamps-cms-hash-sig (to = clarify the exact parameters in the byte string and where this byte = string is defined) Here is the updated text: The signature value is a large byte string as described in Section 2. The byte string is designed for easy parsing. The HSS, LMS, and LMOTS components of the signature value format include counters and type codes that indirectly provide all of the information that is needed to parse the byte string during signature validation. > -- the examples in Appendix A seem to imply a particular formatting = (e.g., using the | to separate parameters), this should be clarified in = this text I suggest: This appendix provides an example of a COSE full message signature and an example of a COSE_Sign0 message. The display format includes "\" to indicate that the same field continues on the next line, and = it includes "|" to separate items within a field. > ** This draft (COSE) and draft-ietf-lamps-cms-hash-sig (CMS) share = common text. A number of changes were made to draft-lamps-cms-hash-sig = in response to AD feedback and the IESG review (version -09 and -10). = Please propagate these changes (where they are appropriate): >=20 > -- Abstract and Section 1. Expand "HSS/LMS". Done. > -- from CMS Section 1.0 to COSE Section 1.0 Done. > -- from CMS Section 1.3 to COSE Section 1.1 Done, but it preserves the pointer to the SUIT WG, which was not = appropriate for the CMS document because SUIT has chosen to use CBOR. > -- from CMS Section 2.0 to COSE Section 2.0 Done. > -- from CMS Section 2.1 to COSE Section 2.1 Done. > -- from CMS Section 2.2 to COSE Section 2.2 Done. > -- from CMS Section 2.3 to COSE Section 2.3 Done. > -- from CMS Section 6.0 to COSE Section 6.0 Done, assuming that you mean the Implementation Security Considerations = in the draft-ietf-cose-hash-sig document. Russ From nobody Thu Oct 10 16:04:48 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CD7B112013B for ; Thu, 10 Oct 2019 16:04:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5v5dmLTf88un for ; Thu, 10 Oct 2019 16:04:45 -0700 (PDT) Received: from p3plsmtpa08-08.prod.phx3.secureserver.net (p3plsmtpa08-08.prod.phx3.secureserver.net [173.201.193.109]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5FF551200D7 for ; Thu, 10 Oct 2019 16:04:45 -0700 (PDT) Received: from [10.15.0.46] ([45.56.150.64]) by :SMTPAUTH: with ESMTPA id IhUCiF153xbN4IhUCi1JXb; Thu, 10 Oct 2019 16:04:44 -0700 From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_D6134542-88D2-4EB2-9734-F2878EF63B71" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Thu, 10 Oct 2019 16:04:43 -0700 In-Reply-To: <67AC8C51-9650-4864-8D42-C10A5D56DAC6@vigilsec.com> Cc: "Roman D. Danyliw" , cose , Ben Kaduk , Ivaylo Petrov To: Russ Housley References: <157072789599.20442.12089124445445995749.idtracker@ietfa.amsl.com> <67AC8C51-9650-4864-8D42-C10A5D56DAC6@vigilsec.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfBvNiLKHRYjW+YU+bOHLDruhxj1hPGgVh9K2EMA0QsjcmXlUlhEx34bijEjGOx/NRTMbHxb7XPgZXhtzfLjtplX2ALWkKavrLDL6i8A21DjzLid4Atoq ArOc7DAnHIF4bhVr1X+2ZQJIe6RJw8QvYmezPWd4cZ3TnX3SkRVioijXXKs/AKxBH7BlX+SDmglCO69ZDMu29ZWDEpPYWtFr0sqrb8us9TjGgz2VGxSaolji AcggP2AwKSqlGA8S+RMigmSDEyk5JKG80cRHqho3sPU= Archived-At: Subject: Re: [COSE] AD review of draft-ietf-cose-hash-sig-03 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Oct 2019 23:04:47 -0000 --Apple-Mail=_D6134542-88D2-4EB2-9734-F2878EF63B71 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Oct 10, 2019, at 1:24 PM, Russ Housley = wrote: >=20 > This appendix provides an example of a COSE full message signature > and an example of a COSE_Sign0 message. The display format includes > "\" to indicate that the same field continues on the next line, and = it > includes "|" to separate items within a field. Doesn=E2=80=99t COSE only have a COSE_Sign1? COSE_Sign0 is mentioned as = wrong in errata. The example in A.2 doesn=E2=80=99t look like a COSE_Sign1 at all. LL --Apple-Mail=_D6134542-88D2-4EB2-9734-F2878EF63B71 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
On = Oct 10, 2019, at 1:24 PM, Russ Housley <housley@vigilsec.com> wrote:

  This appendix = provides an example of a COSE full message signature
  and an example of a = COSE_Sign0 message.  The display format includes
  "\" to indicate that = the same field continues on the next line, and it
  includes "|" to = separate items within a field.

Doesn=E2=80=99t COSE only have a COSE_Sign1? =  COSE_Sign0 is mentioned as wrong in errata.
The example in A.2 doesn=E2=80=99t = look like a COSE_Sign1 at all.

LL

= --Apple-Mail=_D6134542-88D2-4EB2-9734-F2878EF63B71-- From nobody Thu Oct 10 17:23:47 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6027A12007C for ; Thu, 10 Oct 2019 17:23:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LseVcSlrxf1T for ; Thu, 10 Oct 2019 17:23:42 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3168712003E for ; Thu, 10 Oct 2019 17:23:42 -0700 (PDT) Received: from Jude (192.168.1.159) by mail2.augustcellars.com (192.168.1.201) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Thu, 10 Oct 2019 17:23:35 -0700 From: Jim Schaad To: 'Laurence Lundblade' , 'Russ Housley' CC: "'Roman D. Danyliw'" , 'Ivaylo Petrov' , 'Ben Kaduk' , 'cose' References: <157072789599.20442.12089124445445995749.idtracker@ietfa.amsl.com> <67AC8C51-9650-4864-8D42-C10A5D56DAC6@vigilsec.com> In-Reply-To: Date: Thu, 10 Oct 2019 17:23:33 -0700 Message-ID: <000001d57fca$1fbb5630$5f320290$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0001_01D57F8F.735E04D0" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQH0J6XExm1ebiz8FIK3yuh9o09PmwJBbKINAa21ojSm98tn0A== Content-Language: en-us X-Originating-IP: [192.168.1.159] Archived-At: Subject: Re: [COSE] AD review of draft-ietf-cose-hash-sig-03 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Oct 2019 00:23:45 -0000 ------=_NextPart_000_0001_01D57F8F.735E04D0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable No that would be the format that I use in the examples with all of the = inputs as well. You should just use the cbor_diag field, and read = section 8 of the CBOR draft for how multiple lies are done. =20 From: COSE On Behalf Of Laurence Lundblade Sent: Thursday, October 10, 2019 4:05 PM To: Russ Housley Cc: Roman D. Danyliw ; Ivaylo Petrov ; Ben = Kaduk ; cose Subject: Re: [COSE] AD review of draft-ietf-cose-hash-sig-03 =20 =20 On Oct 10, 2019, at 1:24 PM, Russ Housley > wrote: =20 This appendix provides an example of a COSE full message signature and an example of a COSE_Sign0 message. The display format includes "\" to indicate that the same field continues on the next line, and it includes "|" to separate items within a field. =20 Doesn=E2=80=99t COSE only have a COSE_Sign1? COSE_Sign0 is mentioned as = wrong in errata. =20 The example in A.2 doesn=E2=80=99t look like a COSE_Sign1 at all. =20 LL =20 ------=_NextPart_000_0001_01D57F8F.735E04D0 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

No that = would be the format that I use in the examples with all of the inputs as = well.=C2=A0 You should just use the cbor_diag field, and read section 8 = of the CBOR draft for how multiple lies are done.

 

From: COSE = <cose-bounces@ietf.org> On Behalf Of Laurence = Lundblade
Sent: Thursday, October 10, 2019 4:05 = PM
To: Russ Housley <housley@vigilsec.com>
Cc: = Roman D. Danyliw <rdd@cert.org>; Ivaylo Petrov = <ivaylo@ackl.io>; Ben Kaduk <kaduk@mit.edu>; cose = <cose@ietf.org>
Subject: Re: [COSE] AD review of = draft-ietf-cose-hash-sig-03

 

 

On Oct 10, 2019, at 1:24 PM, Russ Housley <housley@vigilsec.com> = wrote:

 

  = This appendix provides an example of a COSE full message = signature
  and an example of a COSE_Sign0 message. =  The display format includes
  "\" to = indicate that the same field continues on the next line, and = it
  includes "|" to separate items within a = field.

 

Doesn=E2=80=99t COSE only have a COSE_Sign1? =  COSE_Sign0 is mentioned as wrong in = errata.

 

The example in A.2 doesn=E2=80=99t look like a = COSE_Sign1 at all.

 

LL

 

------=_NextPart_000_0001_01D57F8F.735E04D0-- From nobody Thu Oct 10 21:13:08 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B6E33120048 for ; Thu, 10 Oct 2019 21:13:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QovSpvPEAQ2o for ; Thu, 10 Oct 2019 21:13:03 -0700 (PDT) Received: from p3plsmtpa09-07.prod.phx3.secureserver.net (p3plsmtpa09-07.prod.phx3.secureserver.net [173.201.193.236]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C3B49120024 for ; Thu, 10 Oct 2019 21:13:03 -0700 (PDT) Received: from [10.15.0.86] ([45.56.150.64]) by :SMTPAUTH: with ESMTPA id ImIYi39TZwe3WImIYiBp26; Thu, 10 Oct 2019 21:13:03 -0700 From: Laurence Lundblade Message-Id: <5752A1CB-FF58-421F-BCF9-BF224BD8CBB7@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_D7D7705C-C1DC-4463-BD07-D354350563A6" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Thu, 10 Oct 2019 21:13:02 -0700 In-Reply-To: <000001d57fca$1fbb5630$5f320290$@augustcellars.com> Cc: Russ Housley , "Roman D. Danyliw" , cose , Ben Kaduk , Ivaylo Petrov To: Jim Schaad References: <157072789599.20442.12089124445445995749.idtracker@ietfa.amsl.com> <67AC8C51-9650-4864-8D42-C10A5D56DAC6@vigilsec.com> <000001d57fca$1fbb5630$5f320290$@augustcellars.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfOKe1BppdIYRsm/a7/7gXkSmUzMB1SIpBpi7gS5Sj1PwUwmlzk2D1+RDcdFj6oyoTrKKY3nywNYcI5l2hhP6oQDpBkUxlG0iASNscyrLdaCuuhD66jzg o8a6rgFO7soWhDBPzoWMjYklCO6Plqf/wk/g5CE66EDKO3chzPvhGTK7pD3GcV/qnLRc3TDf2HOvgZRjxH9i48pUcVL1T+snyA9hMFzvMMp+sUNpoVaGjJQk NIPnogokBDT9Vm9w7nWJtRR/EwNcpRDPWIBCRLxv6NwR4zL7Bi6fh7Kb1WaWeo8e Archived-At: Subject: Re: [COSE] AD review of draft-ietf-cose-hash-sig-03 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Oct 2019 04:13:06 -0000 --Apple-Mail=_D7D7705C-C1DC-4463-BD07-D354350563A6 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Well I understand better =E2=80=94 this is JSON formatted inputs / = outputs for a test suite used by COSE-C? But still=E2=80=A6 What is a COSE_Sign0? Everywhere I look, I see it is a deprecated name = for a COSE_SIgn1. Shouldn=E2=80=99t the examples here look like the examples in RFC 8152? = Should this use a new style for examples? LL > On Oct 10, 2019, at 5:23 PM, Jim Schaad = wrote: >=20 > No that would be the format that I use in the examples with all of the = inputs as well. You should just use the cbor_diag field, and read = section 8 of the CBOR draft for how multiple lies are done. > =20 > From: COSE > On = Behalf Of Laurence Lundblade > Sent: Thursday, October 10, 2019 4:05 PM > To: Russ Housley > > Cc: Roman D. Danyliw >; Ivaylo = Petrov >; Ben Kaduk = >; cose > > Subject: Re: [COSE] AD review of draft-ietf-cose-hash-sig-03 > =20 > =20 >> On Oct 10, 2019, at 1:24 PM, Russ Housley > wrote: >> =20 >> This appendix provides an example of a COSE full message signature >> and an example of a COSE_Sign0 message. The display format = includes >> "\" to indicate that the same field continues on the next line, and = it >> includes "|" to separate items within a field. >=20 > =20 > Doesn=E2=80=99t COSE only have a COSE_Sign1? COSE_Sign0 is mentioned = as wrong in errata. > =20 > The example in A.2 doesn=E2=80=99t look like a COSE_Sign1 at all. > =20 > LL > =20 > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose = --Apple-Mail=_D7D7705C-C1DC-4463-BD07-D354350563A6 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Well = I understand better =E2=80=94 this is JSON formatted inputs / outputs = for a test suite used by COSE-C?

But still=E2=80=A6

What is a COSE_Sign0? Everywhere I = look, I see it is a deprecated name for a COSE_SIgn1.

Shouldn=E2=80=99t the = examples here look like the examples in RFC 8152? Should this use a new = style for examples?

LL


On Oct 10, 2019, at 5:23 PM, = Jim Schaad <ietf@augustcellars.com> wrote:

No that = would be the format that I use in the examples with all of the inputs as = well.  You should just use the cbor_diag field, and read section 8 = of the CBOR draft for how multiple lies are done.
 
From: COSE <cose-bounces@ietf.org> On Behalf = Of Laurence = Lundblade
Sent: Thursday, October 10, 2019 = 4:05 PM
To: Russ Housley <housley@vigilsec.com>
Cc: Roman D. Danyliw <rdd@cert.org>; Ivaylo Petrov <ivaylo@ackl.io>; Ben Kaduk <kaduk@mit.edu>; cose <cose@ietf.org>
Subject: Re: [COSE] AD review of = draft-ietf-cose-hash-sig-03
 
 
On Oct 10, 2019, at 1:24 PM, Russ Housley <housley@vigilsec.com> = wrote:
 
  This = appendix provides an example of a COSE full message signature
  and an example of a COSE_Sign0 message.  The = display format includes
  "\" to indicate that = the same field continues on the next line, and it
  includes "|" to separate items within a = field.
 
Doesn=E2=80=99t COSE only = have a COSE_Sign1?  COSE_Sign0 is mentioned as wrong in errata.
 
The example in A.2 doesn=E2=80=99t look = like a COSE_Sign1 at all.
 
LL
 
_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose

= --Apple-Mail=_D7D7705C-C1DC-4463-BD07-D354350563A6-- From nobody Tue Oct 15 09:02:16 2019 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 40552120033; Tue, 15 Oct 2019 09:02:08 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 6.105.0 Auto-Submitted: auto-generated Precedence: bulk Sender: CC: rdd@cert.org, cose-chairs@ietf.org, Ivaylo Petrov , draft-ietf-cose-hash-sig@ietf.org, cose@ietf.org, ivaylo@ackl.io Content-Transfer-Encoding: 7bit Reply-To: ietf@ietf.org Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Message-ID: <157115532818.27939.2528797856855977036.idtracker@ietfa.amsl.com> Date: Tue, 15 Oct 2019 09:02:08 -0700 Archived-At: Subject: [COSE] Last Call: (Use of the HSS/LMS Hash-based Signature Algorithm with CBOR Object Signing and Encryption (COSE)) to Proposed Standard X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Oct 2019 16:02:09 -0000 The IESG has received a request from the CBOR Object Signing and Encryption WG (cose) to consider the following document: - 'Use of the HSS/LMS Hash-based Signature Algorithm with CBOR Object Signing and Encryption (COSE)' as Proposed Standard The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the ietf@ietf.org mailing lists by 2019-10-29. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. Abstract This document specifies the conventions for using the Hierarchical Signature System (HSS) / Leighton-Micali Signature (LMS) hash-based signature algorithm with the CBOR Object Signing and Encryption (COSE) syntax. The HSS/LMS algorithm is one form of hash-based digital signature; it is described in RFC 8554. The file can be obtained via https://datatracker.ietf.org/doc/draft-ietf-cose-hash-sig/ IESG discussion can be tracked via https://datatracker.ietf.org/doc/draft-ietf-cose-hash-sig/ballot/ No IPR declarations have been submitted directly on this I-D. From nobody Tue Oct 15 09:41:56 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5CA9D120804 for ; Tue, 15 Oct 2019 09:41:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8BhfTUl2D4Et for ; Tue, 15 Oct 2019 09:41:47 -0700 (PDT) Received: from p3plsmtpa06-09.prod.phx3.secureserver.net (p3plsmtpa06-09.prod.phx3.secureserver.net [173.201.192.110]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7B616120827 for ; Tue, 15 Oct 2019 09:41:46 -0700 (PDT) Received: from [192.168.1.76] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id KPtHijrJ54rZ1KPtJioils; Tue, 15 Oct 2019 09:41:45 -0700 From: Laurence Lundblade Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_FAF4E8E0-2AB1-4DE2-9128-5A9C9AA5464F" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Tue, 15 Oct 2019 09:41:43 -0700 In-Reply-To: <5752A1CB-FF58-421F-BCF9-BF224BD8CBB7@island-resort.com> Cc: "Roman D. Danyliw" , cose , Ben Kaduk , Ivaylo Petrov To: Jim Schaad , Russ Housley References: <157072789599.20442.12089124445445995749.idtracker@ietfa.amsl.com> <67AC8C51-9650-4864-8D42-C10A5D56DAC6@vigilsec.com> <000001d57fca$1fbb5630$5f320290$@augustcellars.com> <5752A1CB-FF58-421F-BCF9-BF224BD8CBB7@island-resort.com> X-Mailer: Apple Mail (2.3445.104.11) X-CMAE-Envelope: MS4wfPG3h/T75ZFwGvJZ8i8Vms+h1W2KN7vxlglEDV1y8Ubn4dNlowhbkwd5WPqHG4PCgAQhpRDj1XCnOCT+uKCNKbGatghTFY9eHMJXjbzPY6L7pA2XhFD+ SPRbk2Nng2jxMuaDkUjIw91tEfm4V42pJ2twglyX9jKFA8niwhROLrbGSXzSiG8F1JY9T29p9NpTCMwPmZCPLIKZEEfNyjCu1nMw7LiQsW5+/aVaO+rOhgK7 bI1OR8TOvHiwPAAEPA+ad0CTDAsITwUQbCZ2fUCXhnRj3c0nApfNBrjG7uppxOhS Archived-At: Subject: Re: [COSE] AD review of draft-ietf-cose-hash-sig-03 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Oct 2019 16:41:53 -0000 --Apple-Mail=_FAF4E8E0-2AB1-4DE2-9128-5A9C9AA5464F Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Didn=E2=80=99t see any response to this. I also understand bette and can = comment more clearly. I really do think that s/COSE_Sign0/COSE_Sign1/ is necessary for the = document to be correct. I also think the Appendix A examples should be like the examples in RFC = 8152 Appendix C. The examples should be just in CBOR diag, not in the = JSON-format test framework input format. Is the reference to = https://github.com/cose-wg/Examples = in the Appendix considered = normative? LL > On Oct 10, 2019, at 9:13 PM, Laurence Lundblade = wrote: >=20 > Well I understand better =E2=80=94 this is JSON formatted inputs / = outputs for a test suite used by COSE-C? >=20 > But still=E2=80=A6 >=20 > What is a COSE_Sign0? Everywhere I look, I see it is a deprecated name = for a COSE_SIgn1. >=20 > Shouldn=E2=80=99t the examples here look like the examples in RFC = 8152? Should this use a new style for examples? >=20 > LL >=20 >=20 >> On Oct 10, 2019, at 5:23 PM, Jim Schaad > wrote: >>=20 >> No that would be the format that I use in the examples with all of = the inputs as well. You should just use the cbor_diag field, and read = section 8 of the CBOR draft for how multiple lies are done. >> =20 >> From: COSE > On = Behalf Of Laurence Lundblade >> Sent: Thursday, October 10, 2019 4:05 PM >> To: Russ Housley > >> Cc: Roman D. Danyliw >; Ivaylo = Petrov >; Ben Kaduk = >; cose > >> Subject: Re: [COSE] AD review of draft-ietf-cose-hash-sig-03 >> =20 >> =20 >>> On Oct 10, 2019, at 1:24 PM, Russ Housley > wrote: >>> =20 >>> This appendix provides an example of a COSE full message signature >>> and an example of a COSE_Sign0 message. The display format = includes >>> "\" to indicate that the same field continues on the next line, = and it >>> includes "|" to separate items within a field. >>=20 >> =20 >> Doesn=E2=80=99t COSE only have a COSE_Sign1? COSE_Sign0 is mentioned = as wrong in errata. >> =20 >> The example in A.2 doesn=E2=80=99t look like a COSE_Sign1 at all. >> =20 >> LL >> =20 >> _______________________________________________ >> COSE mailing list >> COSE@ietf.org >> https://www.ietf.org/mailman/listinfo/cose = --Apple-Mail=_FAF4E8E0-2AB1-4DE2-9128-5A9C9AA5464F Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi

Didn=E2=80= =99t see any response to this. I also understand bette and can comment = more clearly.

I = really do think that s/COSE_Sign0/COSE_Sign1/ is necessary for the = document to be correct.

I also think the Appendix A examples should be like the = examples in RFC 8152 Appendix C. The examples should be just in CBOR = diag, not in the JSON-format test framework input format. Is the = reference to https://github.com/cose-wg/Examples in the = Appendix considered normative?

LL



On Oct = 10, 2019, at 9:13 PM, Laurence Lundblade <lgl@island-resort.com> wrote:

Well I understand = better =E2=80=94 this is JSON formatted inputs / outputs for a test = suite used by COSE-C?

But still=E2=80=A6

What is a COSE_Sign0? Everywhere I = look, I see it is a deprecated name for a COSE_SIgn1.

Shouldn=E2=80=99t the = examples here look like the examples in RFC 8152? Should this use a new = style for examples?

LL


On Oct = 10, 2019, at 5:23 PM, Jim Schaad <ietf@augustcellars.com> wrote:

No that = would be the format that I use in the examples with all of the inputs as = well.  You should just use the cbor_diag field, and read section 8 = of the CBOR draft for how multiple lies are done.
 
From: COSE <cose-bounces@ietf.org> On Behalf = Of Laurence = Lundblade
Sent: Thursday, October 10, 2019 = 4:05 PM
To: Russ Housley <housley@vigilsec.com>
Cc: Roman D. Danyliw <rdd@cert.org>; Ivaylo Petrov <ivaylo@ackl.io>; Ben Kaduk <kaduk@mit.edu>; cose <cose@ietf.org>
Subject: Re: [COSE] AD review of = draft-ietf-cose-hash-sig-03
 
 
On Oct 10, 2019, at 1:24 PM, Russ Housley <housley@vigilsec.com> = wrote:
 
  This = appendix provides an example of a COSE full message signature
  and an example of a COSE_Sign0 message.  The = display format includes
  "\" to indicate that = the same field continues on the next line, and it
  includes "|" to separate items within a = field.
 
Doesn=E2=80=99t COSE only = have a COSE_Sign1?  COSE_Sign0 is mentioned as wrong in errata.
 
The example in A.2 doesn=E2=80=99t look = like a COSE_Sign1 at all.
 
LL
 
_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose


= --Apple-Mail=_FAF4E8E0-2AB1-4DE2-9128-5A9C9AA5464F-- From nobody Tue Oct 15 12:15:42 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D7F2212082D for ; Tue, 15 Oct 2019 12:15:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KxBrsvqX_aAH for ; Tue, 15 Oct 2019 12:15:38 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 18CC7120814 for ; Tue, 15 Oct 2019 12:15:38 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 5FDF0300B27 for ; Tue, 15 Oct 2019 15:15:36 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id K1-EwcQXx3_6 for ; Tue, 15 Oct 2019 15:15:32 -0400 (EDT) Received: from a860b60074bd.fios-router.home (unknown [138.88.156.37]) by mail.smeinc.net (Postfix) with ESMTPSA id 270F03005D7; Tue, 15 Oct 2019 15:15:32 -0400 (EDT) From: Russ Housley Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_D41EE6DE-A059-46E8-B25C-2FE078262A89" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Tue, 15 Oct 2019 15:15:32 -0400 In-Reply-To: Cc: Jim Schaad , "Roman D. Danyliw" , Ivaylo Petrov , Ben Kaduk , cose To: Laurence Lundblade References: <157072789599.20442.12089124445445995749.idtracker@ietfa.amsl.com> <67AC8C51-9650-4864-8D42-C10A5D56DAC6@vigilsec.com> <000001d57fca$1fbb5630$5f320290$@augustcellars.com> <5752A1CB-FF58-421F-BCF9-BF224BD8CBB7@island-resort.com> X-Mailer: Apple Mail (2.3445.104.11) Archived-At: Subject: Re: [COSE] AD review of draft-ietf-cose-hash-sig-03 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Oct 2019 19:15:41 -0000 --Apple-Mail=_D41EE6DE-A059-46E8-B25C-2FE078262A89 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Laurence: I'll let Jim respond to the format question, but I think the reference = to GitHub in informative, Russ > On Oct 15, 2019, at 12:41 PM, Laurence Lundblade = wrote: >=20 > Hi >=20 > Didn=E2=80=99t see any response to this. I also understand bette and = can comment more clearly. >=20 > I really do think that s/COSE_Sign0/COSE_Sign1/ is necessary for the = document to be correct. >=20 > I also think the Appendix A examples should be like the examples in = RFC 8152 Appendix C. The examples should be just in CBOR diag, not in = the JSON-format test framework input format. Is the reference to = https://github.com/cose-wg/Examples = in the Appendix considered = normative? >=20 > LL >=20 >=20 >=20 >> On Oct 10, 2019, at 9:13 PM, Laurence Lundblade = > wrote: >>=20 >> Well I understand better =E2=80=94 this is JSON formatted inputs / = outputs for a test suite used by COSE-C? >>=20 >> But still=E2=80=A6 >>=20 >> What is a COSE_Sign0? Everywhere I look, I see it is a deprecated = name for a COSE_SIgn1. >>=20 >> Shouldn=E2=80=99t the examples here look like the examples in RFC = 8152? Should this use a new style for examples? >>=20 >> LL >>=20 >>=20 >>> On Oct 10, 2019, at 5:23 PM, Jim Schaad > wrote: >>>=20 >>> No that would be the format that I use in the examples with all of = the inputs as well. You should just use the cbor_diag field, and read = section 8 of the CBOR draft for how multiple lies are done. >>> =20 >>> From: COSE > On = Behalf Of Laurence Lundblade >>> Sent: Thursday, October 10, 2019 4:05 PM >>> To: Russ Housley > >>> Cc: Roman D. Danyliw >; Ivaylo = Petrov >; Ben Kaduk = >; cose > >>> Subject: Re: [COSE] AD review of draft-ietf-cose-hash-sig-03 >>> =20 >>> =20 >>>> On Oct 10, 2019, at 1:24 PM, Russ Housley > wrote: >>>> =20 >>>> This appendix provides an example of a COSE full message = signature >>>> and an example of a COSE_Sign0 message. The display format = includes >>>> "\" to indicate that the same field continues on the next line, = and it >>>> includes "|" to separate items within a field. >>>=20 >>> =20 >>> Doesn=E2=80=99t COSE only have a COSE_Sign1? COSE_Sign0 is = mentioned as wrong in errata. >>> =20 >>> The example in A.2 doesn=E2=80=99t look like a COSE_Sign1 at all. >>> =20 >>> LL >>> =20 >>> _______________________________________________ >>> COSE mailing list >>> COSE@ietf.org >>> https://www.ietf.org/mailman/listinfo/cose = >=20 > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose --Apple-Mail=_D41EE6DE-A059-46E8-B25C-2FE078262A89 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Laurence:

I'll let Jim respond to the format question, but I think the = reference to GitHub in informative,

Russ


On Oct 15, 2019, at 12:41 PM, Laurence Lundblade <lgl@island-resort.com> wrote:

Hi

Didn=E2=80=99t see any response to = this. I also understand bette and can comment more clearly.

I really do think that = s/COSE_Sign0/COSE_Sign1/ is necessary for the document to be = correct.

I = also think the Appendix A examples should be like the examples in RFC = 8152 Appendix C. The examples should be just in CBOR diag, not in the = JSON-format test framework input format. Is the reference to https://github.com/cose-wg/Examples in the = Appendix considered normative?

LL



On Oct = 10, 2019, at 9:13 PM, Laurence Lundblade <lgl@island-resort.com> wrote:

Well I understand = better =E2=80=94 this is JSON formatted inputs / outputs for a test = suite used by COSE-C?

But still=E2=80=A6

What is a COSE_Sign0? Everywhere I = look, I see it is a deprecated name for a COSE_SIgn1.

Shouldn=E2=80=99t the = examples here look like the examples in RFC 8152? Should this use a new = style for examples?

LL


On Oct = 10, 2019, at 5:23 PM, Jim Schaad <ietf@augustcellars.com> wrote:

No that = would be the format that I use in the examples with all of the inputs as = well.  You should just use the cbor_diag field, and read section 8 = of the CBOR draft for how multiple lies are done.
 
From: COSE <cose-bounces@ietf.org> On Behalf = Of Laurence = Lundblade
Sent: Thursday, October 10, 2019 = 4:05 PM
To: Russ Housley <housley@vigilsec.com>
Cc: Roman D. Danyliw <rdd@cert.org>; Ivaylo Petrov <ivaylo@ackl.io>; Ben Kaduk <kaduk@mit.edu>; cose <cose@ietf.org>
Subject: Re: [COSE] AD review of = draft-ietf-cose-hash-sig-03
 
 
On Oct 10, 2019, at 1:24 PM, Russ Housley <housley@vigilsec.com> = wrote:
 
  This = appendix provides an example of a COSE full message signature
  and an example of a COSE_Sign0 message.  The = display format includes
  "\" to indicate that = the same field continues on the next line, and it
  includes "|" to separate items within a = field.
 
Doesn=E2=80=99t COSE only = have a COSE_Sign1?  COSE_Sign0 is mentioned as wrong in errata.
 
The example in A.2 doesn=E2=80=99t look = like a COSE_Sign1 at all.
 
LL
 
_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose


_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose

= --Apple-Mail=_D41EE6DE-A059-46E8-B25C-2FE078262A89-- From nobody Tue Oct 15 12:22:37 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 19F46120052 for ; Tue, 15 Oct 2019 12:22:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SPlfmLkDHxZr for ; Tue, 15 Oct 2019 12:22:32 -0700 (PDT) Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 394D8120044 for ; Tue, 15 Oct 2019 12:22:32 -0700 (PDT) Received: from delp.sei.cmu.edu (delp.sei.cmu.edu [10.64.21.31]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x9FJMSBB015218; Tue, 15 Oct 2019 15:22:28 -0400 DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu x9FJMSBB015218 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1571167348; bh=9ijeIVOYZpnVOjaQV4fX2kwLfmoO2e42pElq3Bywc6M=; h=From:To:CC:Subject:Date:References:In-Reply-To:From; b=Uv4Uo4xCz0OKkr3xod4LtgQGv+WZeXi9vzAOHPzk1ct7B77CjRIg3KlidW45vc4bq h3ejIob9thLWoVmcqUyMuVTIy9BXpr561jo6Shbis5ZI3uX6Z/naYWhLd6HbHp+13p hyqY4VlIu5wsq9Hm0n1peA4osnbnSvyF0vqjC4II= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by delp.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x9FJMQG3001196; Tue, 15 Oct 2019 15:22:26 -0400 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASSINA.ad.sei.cmu.edu ([10.64.28.249]) with mapi id 14.03.0468.000; Tue, 15 Oct 2019 15:22:26 -0400 From: Roman Danyliw To: Russ Housley , Laurence Lundblade CC: Jim Schaad , cose , Ben Kaduk , Ivaylo Petrov Thread-Topic: [COSE] AD review of draft-ietf-cose-hash-sig-03 Thread-Index: AQHVf6iqNBNekjPGTxOmdU2BtyuZIKdUwfCAgAAWB4CAAEAeAIAHGoGAgAAq+gD//74yQA== Date: Tue, 15 Oct 2019 19:22:25 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC01B34893E9@marathon> References: <157072789599.20442.12089124445445995749.idtracker@ietfa.amsl.com> <67AC8C51-9650-4864-8D42-C10A5D56DAC6@vigilsec.com> <000001d57fca$1fbb5630$5f320290$@augustcellars.com> <5752A1CB-FF58-421F-BCF9-BF224BD8CBB7@island-resort.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: multipart/alternative; boundary="_000_359EC4B99E040048A7131E0F4E113AFC01B34893E9marathon_" MIME-Version: 1.0 Archived-At: Subject: Re: [COSE] AD review of draft-ietf-cose-hash-sig-03 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Oct 2019 19:22:36 -0000 --_000_359EC4B99E040048A7131E0F4E113AFC01B34893E9marathon_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 DQpGcm9tOiBDT1NFIFttYWlsdG86Y29zZS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2Yg UnVzcyBIb3VzbGV5DQpTZW50OiBUdWVzZGF5LCBPY3RvYmVyIDE1LCAyMDE5IDM6MTYgUE0NClRv OiBMYXVyZW5jZSBMdW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbT4NCkNjOiBSb21hbiBE YW55bGl3IDxyZGRAY2VydC5vcmc+OyBKaW0gU2NoYWFkIDxpZXRmQGF1Z3VzdGNlbGxhcnMuY29t PjsgY29zZSA8Y29zZUBpZXRmLm9yZz47IEJlbiBLYWR1ayA8a2FkdWtAbWl0LmVkdT47IEl2YXls byBQZXRyb3YgPGl2YXlsb0BhY2tsLmlvPg0KU3ViamVjdDogUmU6IFtDT1NFXSBBRCByZXZpZXcg b2YgZHJhZnQtaWV0Zi1jb3NlLWhhc2gtc2lnLTAzDQoNCkxhdXJlbmNlOg0KDQpJJ2xsIGxldCBK aW0gcmVzcG9uZCB0byB0aGUgZm9ybWF0IHF1ZXN0aW9uLCBidXQgSSB0aGluayB0aGUgcmVmZXJl bmNlIHRvIEdpdEh1YiBpbiBpbmZvcm1hdGl2ZSwNCg0KW1JvbWFuXSBJcnJlc3BlY3RpdmUgb2Yg dGhlIFNpZ24wIHZzLiAxIGZvcm1hdHRpbmcuICBUaGlzIGhpZ2hsaWdodHMgYSBnb29kIHBvaW50 IC0tIEkgZG9u4oCZdCB0aGluayB0aGUgdGV4dCBleHBsaWNpdGx5IHNheXMgdGhlc2UgZXhhbXBs ZXMgYXJlIG5vbi1ub3JtYXRpdmUuICBJdCBwcm9iYWJseSBzaG91bGQuDQoNClJvbWFuDQoNClJ1 c3MNCg0KDQoNCk9uIE9jdCAxNSwgMjAxOSwgYXQgMTI6NDEgUE0sIExhdXJlbmNlIEx1bmRibGFk ZSA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPG1haWx0bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20+PiB3 cm90ZToNCg0KSGkNCg0KRGlkbuKAmXQgc2VlIGFueSByZXNwb25zZSB0byB0aGlzLiBJIGFsc28g dW5kZXJzdGFuZCBiZXR0ZSBhbmQgY2FuIGNvbW1lbnQgbW9yZSBjbGVhcmx5Lg0KDQpJIHJlYWxs eSBkbyB0aGluayB0aGF0IHMvQ09TRV9TaWduMC9DT1NFX1NpZ24xLyBpcyBuZWNlc3NhcnkgZm9y IHRoZSBkb2N1bWVudCB0byBiZSBjb3JyZWN0Lg0KDQpJIGFsc28gdGhpbmsgdGhlIEFwcGVuZGl4 IEEgZXhhbXBsZXMgc2hvdWxkIGJlIGxpa2UgdGhlIGV4YW1wbGVzIGluIFJGQyA4MTUyIEFwcGVu ZGl4IEMuIFRoZSBleGFtcGxlcyBzaG91bGQgYmUganVzdCBpbiBDQk9SIGRpYWcsIG5vdCBpbiB0 aGUgSlNPTi1mb3JtYXQgdGVzdCBmcmFtZXdvcmsgaW5wdXQgZm9ybWF0LiBJcyB0aGUgcmVmZXJl bmNlIHRvIGh0dHBzOi8vZ2l0aHViLmNvbS9jb3NlLXdnL0V4YW1wbGVzIGluIHRoZSBBcHBlbmRp eCBjb25zaWRlcmVkIG5vcm1hdGl2ZT8NCg0KTEwNCg0KDQoNCg0KT24gT2N0IDEwLCAyMDE5LCBh dCA5OjEzIFBNLCBMYXVyZW5jZSBMdW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbTxtYWls dG86bGdsQGlzbGFuZC1yZXNvcnQuY29tPj4gd3JvdGU6DQoNCldlbGwgSSB1bmRlcnN0YW5kIGJl dHRlciDigJQgdGhpcyBpcyBKU09OIGZvcm1hdHRlZCBpbnB1dHMgLyBvdXRwdXRzIGZvciBhIHRl c3Qgc3VpdGUgdXNlZCBieSBDT1NFLUM/DQoNCkJ1dCBzdGlsbOKApg0KDQpXaGF0IGlzIGEgQ09T RV9TaWduMD8gRXZlcnl3aGVyZSBJIGxvb2ssIEkgc2VlIGl0IGlzIGEgZGVwcmVjYXRlZCBuYW1l IGZvciBhIENPU0VfU0lnbjEuDQoNClNob3VsZG7igJl0IHRoZSBleGFtcGxlcyBoZXJlIGxvb2sg bGlrZSB0aGUgZXhhbXBsZXMgaW4gUkZDIDgxNTI/IFNob3VsZCB0aGlzIHVzZSBhIG5ldyBzdHls ZSBmb3IgZXhhbXBsZXM/DQoNCkxMDQoNCg0KT24gT2N0IDEwLCAyMDE5LCBhdCA1OjIzIFBNLCBK aW0gU2NoYWFkIDxpZXRmQGF1Z3VzdGNlbGxhcnMuY29tPG1haWx0bzppZXRmQGF1Z3VzdGNlbGxh cnMuY29tPj4gd3JvdGU6DQoNCk5vIHRoYXQgd291bGQgYmUgdGhlIGZvcm1hdCB0aGF0IEkgdXNl IGluIHRoZSBleGFtcGxlcyB3aXRoIGFsbCBvZiB0aGUgaW5wdXRzIGFzIHdlbGwuICBZb3Ugc2hv dWxkIGp1c3QgdXNlIHRoZSBjYm9yX2RpYWcgZmllbGQsIGFuZCByZWFkIHNlY3Rpb24gOCBvZiB0 aGUgQ0JPUiBkcmFmdCBmb3IgaG93IG11bHRpcGxlIGxpZXMgYXJlIGRvbmUuDQoNCkZyb206IENP U0UgPGNvc2UtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86Y29zZS1ib3VuY2VzQGlldGYub3JnPj4g T24gQmVoYWxmIE9mIExhdXJlbmNlIEx1bmRibGFkZQ0KU2VudDogVGh1cnNkYXksIE9jdG9iZXIg MTAsIDIwMTkgNDowNSBQTQ0KVG86IFJ1c3MgSG91c2xleSA8aG91c2xleUB2aWdpbHNlYy5jb208 bWFpbHRvOmhvdXNsZXlAdmlnaWxzZWMuY29tPj4NCkNjOiBSb21hbiBELiBEYW55bGl3IDxyZGRA Y2VydC5vcmc8bWFpbHRvOnJkZEBjZXJ0Lm9yZz4+OyBJdmF5bG8gUGV0cm92IDxpdmF5bG9AYWNr bC5pbzxtYWlsdG86aXZheWxvQGFja2wuaW8+PjsgQmVuIEthZHVrIDxrYWR1a0BtaXQuZWR1PG1h aWx0bzprYWR1a0BtaXQuZWR1Pj47IGNvc2UgPGNvc2VAaWV0Zi5vcmc8bWFpbHRvOmNvc2VAaWV0 Zi5vcmc+Pg0KU3ViamVjdDogUmU6IFtDT1NFXSBBRCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1jb3Nl LWhhc2gtc2lnLTAzDQoNCg0KT24gT2N0IDEwLCAyMDE5LCBhdCAxOjI0IFBNLCBSdXNzIEhvdXNs ZXkgPGhvdXNsZXlAdmlnaWxzZWMuY29tPG1haWx0bzpob3VzbGV5QHZpZ2lsc2VjLmNvbT4+IHdy b3RlOg0KDQogIFRoaXMgYXBwZW5kaXggcHJvdmlkZXMgYW4gZXhhbXBsZSBvZiBhIENPU0UgZnVs bCBtZXNzYWdlIHNpZ25hdHVyZQ0KICBhbmQgYW4gZXhhbXBsZSBvZiBhIENPU0VfU2lnbjAgbWVz c2FnZS4gIFRoZSBkaXNwbGF5IGZvcm1hdCBpbmNsdWRlcw0KICAiXCIgdG8gaW5kaWNhdGUgdGhh dCB0aGUgc2FtZSBmaWVsZCBjb250aW51ZXMgb24gdGhlIG5leHQgbGluZSwgYW5kIGl0DQogIGlu Y2x1ZGVzICJ8IiB0byBzZXBhcmF0ZSBpdGVtcyB3aXRoaW4gYSBmaWVsZC4NCg0KRG9lc27igJl0 IENPU0Ugb25seSBoYXZlIGEgQ09TRV9TaWduMT8gIENPU0VfU2lnbjAgaXMgbWVudGlvbmVkIGFz IHdyb25nIGluIGVycmF0YS4NCg0KVGhlIGV4YW1wbGUgaW4gQS4yIGRvZXNu4oCZdCBsb29rIGxp a2UgYSBDT1NFX1NpZ24xIGF0IGFsbC4NCg0KTEwNCg0KX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX18NCkNPU0UgbWFpbGluZyBsaXN0DQpDT1NFQGlldGYub3Jn PG1haWx0bzpDT1NFQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9jb3NlDQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX18NCkNPU0UgbWFpbGluZyBsaXN0DQpDT1NFQGlldGYub3JnPG1haWx0bzpDT1NFQGlldGYu b3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlDQoNCg== --_000_359EC4B99E040048A7131E0F4E113AFC01B34893E9marathon_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6eD0idXJuOnNjaGVtYXMtbWljcm9z b2Z0LWNvbTpvZmZpY2U6ZXhjZWwiIHhtbG5zOm09Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5j b20vb2ZmaWNlLzIwMDQvMTIvb21tbCIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy1o dG1sNDAiPg0KPGhlYWQ+DQo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNvbnRlbnQ9 InRleHQvaHRtbDsgY2hhcnNldD11dGYtOCI+DQo8bWV0YSBuYW1lPSJHZW5lcmF0b3IiIGNvbnRl bnQ9Ik1pY3Jvc29mdCBXb3JkIDE1IChmaWx0ZXJlZCBtZWRpdW0pIj4NCjxzdHlsZT48IS0tDQov KiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkhlbHZldGlj YTsNCglwYW5vc2UtMToyIDExIDYgNCAyIDIgMiAyIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQt ZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0K QGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUgNSAyIDIg MiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNv Tm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAw MXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIs c2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6 OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRl ZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJ Y29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc3Bhbi5hcHBsZS1j b252ZXJ0ZWQtc3BhY2UNCgl7bXNvLXN0eWxlLW5hbWU6YXBwbGUtY29udmVydGVkLXNwYWNlO30N CnNwYW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1zb0No cERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBw dDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEu MGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2Vj dGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVm YXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48 IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxv OmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwh W2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5r PSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEu NXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRl cjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAw aW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+RnJvbTo8 L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+IENPU0UgW21haWx0bzpjb3NlLWJvdW5jZXNAaWV0 Zi5vcmddDQo8Yj5PbiBCZWhhbGYgT2YgPC9iPlJ1c3MgSG91c2xleTxicj4NCjxiPlNlbnQ6PC9i PiBUdWVzZGF5LCBPY3RvYmVyIDE1LCAyMDE5IDM6MTYgUE08YnI+DQo8Yj5Ubzo8L2I+IExhdXJl bmNlIEx1bmRibGFkZSAmbHQ7bGdsQGlzbGFuZC1yZXNvcnQuY29tJmd0Ozxicj4NCjxiPkNjOjwv Yj4gUm9tYW4gRGFueWxpdyAmbHQ7cmRkQGNlcnQub3JnJmd0OzsgSmltIFNjaGFhZCAmbHQ7aWV0 ZkBhdWd1c3RjZWxsYXJzLmNvbSZndDs7IGNvc2UgJmx0O2Nvc2VAaWV0Zi5vcmcmZ3Q7OyBCZW4g S2FkdWsgJmx0O2thZHVrQG1pdC5lZHUmZ3Q7OyBJdmF5bG8gUGV0cm92ICZsdDtpdmF5bG9AYWNr bC5pbyZndDs8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtDT1NFXSBBRCByZXZpZXcgb2YgZHJh ZnQtaWV0Zi1jb3NlLWhhc2gtc2lnLTAzPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+TGF1cmVuY2U6PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5JJ2xsIGxldCBKaW0gcmVzcG9uZCB0byB0aGUgZm9ybWF0IHF1ZXN0aW9u LCBidXQgSSB0aGluayB0aGUgcmVmZXJlbmNlIHRvIEdpdEh1YiBpbiBpbmZvcm1hdGl2ZSw8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+W1JvbWFuXSBJcnJl c3BlY3RpdmUgb2YgdGhlIFNpZ24wIHZzLiAxIGZvcm1hdHRpbmcuJm5ic3A7IFRoaXMgaGlnaGxp Z2h0cyBhIGdvb2QgcG9pbnQgLS0gSSBkb27igJl0IHRoaW5rIHRoZSB0ZXh0IGV4cGxpY2l0bHkg c2F5cyB0aGVzZSBleGFtcGxlcyBhcmUgbm9uLW5vcm1hdGl2ZS4mbmJzcDsNCiBJdCBwcm9iYWJs eSBzaG91bGQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5Sb21h bjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5SdXNzPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxibG9j a3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIE9jdCAxNSwgMjAxOSwgYXQgMTI6NDEgUE0sIExh dXJlbmNlIEx1bmRibGFkZSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmxnbEBpc2xhbmQtcmVzb3J0LmNv bSI+bGdsQGlzbGFuZC1yZXNvcnQuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5IaTxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+RGlkbuKAmXQgc2VlIGFueSByZXNwb25zZSB0byB0aGlzLiBJ IGFsc28gdW5kZXJzdGFuZCBiZXR0ZSBhbmQgY2FuIGNvbW1lbnQgbW9yZSBjbGVhcmx5LjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIHJlYWxs eSBkbyB0aGluayB0aGF0IHMvQ09TRV9TaWduMC9DT1NFX1NpZ24xLyBpcyBuZWNlc3NhcnkgZm9y IHRoZSBkb2N1bWVudCB0byBiZSBjb3JyZWN0LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIGFsc28gdGhpbmsgdGhlIEFwcGVuZGl4IEEgZXhh bXBsZXMgc2hvdWxkIGJlIGxpa2UgdGhlIGV4YW1wbGVzIGluIFJGQyA4MTUyIEFwcGVuZGl4IEMu IFRoZSBleGFtcGxlcyBzaG91bGQgYmUganVzdCBpbiBDQk9SIGRpYWcsIG5vdCBpbiB0aGUgSlNP Ti1mb3JtYXQgdGVzdCBmcmFtZXdvcmsgaW5wdXQgZm9ybWF0LiBJcyB0aGUgcmVmZXJlbmNlIHRv Jm5ic3A7PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQiPjxhIGhyZWY9Imh0dHBzOi8vZ2l0 aHViLmNvbS9jb3NlLXdnL0V4YW1wbGVzIj5odHRwczovL2dpdGh1Yi5jb20vY29zZS13Zy9FeGFt cGxlczwvYT48L3NwYW4+Jm5ic3A7aW4NCiB0aGUgQXBwZW5kaXggY29uc2lkZXJlZCBub3JtYXRp dmU/PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PkxMPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4N Cjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4w cHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24g T2N0IDEwLCAyMDE5LCBhdCA5OjEzIFBNLCBMYXVyZW5jZSBMdW5kYmxhZGUgJmx0OzxhIGhyZWY9 Im1haWx0bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20iPmxnbEBpc2xhbmQtcmVzb3J0LmNvbTwvYT4m Z3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ V2VsbCBJIHVuZGVyc3RhbmQgYmV0dGVyIOKAlCB0aGlzIGlzIEpTT04gZm9ybWF0dGVkIGlucHV0 cyAvIG91dHB1dHMgZm9yIGEgdGVzdCBzdWl0ZSB1c2VkIGJ5IENPU0UtQz88bzpwPjwvbzpwPjwv cD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkJ1dCBzdGlsbOKApjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5XaGF0IGlzIGEgQ09T RV9TaWduMD8gRXZlcnl3aGVyZSBJIGxvb2ssIEkgc2VlIGl0IGlzIGEgZGVwcmVjYXRlZCBuYW1l IGZvciBhIENPU0VfU0lnbjEuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPlNob3VsZG7igJl0IHRoZSBleGFtcGxlcyBoZXJlIGxvb2sgbGlrZSB0 aGUgZXhhbXBsZXMgaW4gUkZDIDgxNTI/IFNob3VsZCB0aGlzIHVzZSBhIG5ldyBzdHlsZSBmb3Ig ZXhhbXBsZXM/PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPkxMPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxibG9j a3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIE9jdCAxMCwgMjAxOSwgYXQgNToyMyBQTSwgSmlt IFNjaGFhZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5jb20iPmlldGZA YXVndXN0Y2VsbGFycy5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Tm8gdGhhdCB3b3VsZCBiZSB0 aGUgZm9ybWF0IHRoYXQgSSB1c2UgaW4gdGhlIGV4YW1wbGVzIHdpdGggYWxsIG9mIHRoZSBpbnB1 dHMgYXMgd2VsbC4mbmJzcDsgWW91IHNob3VsZCBqdXN0IHVzZSB0aGUgY2Jvcl9kaWFnIGZpZWxk LCBhbmQgcmVhZCBzZWN0aW9uIDggb2YgdGhlIENCT1IgZHJhZnQgZm9yIGhvdw0KIG11bHRpcGxl IGxpZXMgYXJlIGRvbmUuPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9w OnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5Gcm9tOjwvc3Bhbj48L2I+ PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJz cDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Q09TRQ0KICZsdDs8YSBocmVmPSJtYWls dG86Y29zZS1ib3VuY2VzQGlldGYub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5jb3Nl LWJvdW5jZXNAaWV0Zi5vcmc8L3NwYW4+PC9hPiZndDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVy dGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGI+T24gQmVoYWxmIE9mPHNwYW4gY2xhc3M9ImFwcGxl LWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvYj5MYXVyZW5jZSBMdW5kYmxhZGU8YnI+ DQo8Yj5TZW50OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8 L3NwYW4+VGh1cnNkYXksIE9jdG9iZXIgMTAsIDIwMTkgNDowNSBQTTxicj4NCjxiPlRvOjwvYj48 c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+UnVzcyBIb3Vz bGV5ICZsdDs8YSBocmVmPSJtYWlsdG86aG91c2xleUB2aWdpbHNlYy5jb20iPjxzcGFuIHN0eWxl PSJjb2xvcjpwdXJwbGUiPmhvdXNsZXlAdmlnaWxzZWMuY29tPC9zcGFuPjwvYT4mZ3Q7PGJyPg0K PGI+Q2M6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bh bj5Sb21hbiBELiBEYW55bGl3ICZsdDs8YSBocmVmPSJtYWlsdG86cmRkQGNlcnQub3JnIj48c3Bh biBzdHlsZT0iY29sb3I6cHVycGxlIj5yZGRAY2VydC5vcmc8L3NwYW4+PC9hPiZndDs7IEl2YXls byBQZXRyb3YgJmx0OzxhIGhyZWY9Im1haWx0bzppdmF5bG9AYWNrbC5pbyI+PHNwYW4gc3R5bGU9 ImNvbG9yOnB1cnBsZSI+aXZheWxvQGFja2wuaW88L3NwYW4+PC9hPiZndDs7DQogQmVuIEthZHVr ICZsdDs8YSBocmVmPSJtYWlsdG86a2FkdWtAbWl0LmVkdSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1 cnBsZSI+a2FkdWtAbWl0LmVkdTwvc3Bhbj48L2E+Jmd0OzsgY29zZSAmbHQ7PGEgaHJlZj0ibWFp bHRvOmNvc2VAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmNvc2VAaWV0Zi5v cmc8L3NwYW4+PC9hPiZndDs8YnI+DQo8Yj5TdWJqZWN0OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUt Y29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+UmU6IFtDT1NFXSBBRCByZXZpZXcgb2YgZHJh ZnQtaWV0Zi1jb3NlLWhhc2gtc2lnLTAzPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp ZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJn aW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OyxzYW5zLXNlcmlmIj5PbiBPY3QgMTAsIDIwMTksIGF0IDE6MjQgUE0sIFJ1c3MgSG91c2xleSAm bHQ7PGEgaHJlZj0ibWFpbHRvOmhvdXNsZXlAdmlnaWxzZWMuY29tIj48c3BhbiBzdHlsZT0iY29s b3I6cHVycGxlIj5ob3VzbGV5QHZpZ2lsc2VjLmNvbTwvc3Bhbj48L2E+Jmd0OyB3cm90ZTo8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYi PiZuYnNwOyZuYnNwO1RoaXMgYXBwZW5kaXggcHJvdmlkZXMgYW4gZXhhbXBsZSBvZiBhIENPU0Ug ZnVsbCBtZXNzYWdlIHNpZ25hdHVyZTxicj4NCiZuYnNwOyZuYnNwO2FuZCBhbiBleGFtcGxlIG9m IGEgQ09TRV9TaWduMCBtZXNzYWdlLiAmbmJzcDtUaGUgZGlzcGxheSBmb3JtYXQgaW5jbHVkZXM8 YnI+DQombmJzcDsmbmJzcDsmcXVvdDtcJnF1b3Q7IHRvIGluZGljYXRlIHRoYXQgdGhlIHNhbWUg ZmllbGQgY29udGludWVzIG9uIHRoZSBuZXh0IGxpbmUsIGFuZCBpdDxicj4NCiZuYnNwOyZuYnNw O2luY2x1ZGVzICZxdW90O3wmcXVvdDsgdG8gc2VwYXJhdGUgaXRlbXMgd2l0aGluIGEgZmllbGQu PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+RG9lc27i gJl0IENPU0Ugb25seSBoYXZlIGEgQ09TRV9TaWduMT8gJm5ic3A7Q09TRV9TaWduMCBpcyBtZW50 aW9uZWQgYXMgd3JvbmcgaW4gZXJyYXRhLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp ZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5UaGUgZXhhbXBsZSBp biBBLjIgZG9lc27igJl0IGxvb2sgbGlrZSBhIENPU0VfU2lnbjEgYXQgYWxsLjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmIj5MTDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1 b3Q7LHNhbnMtc2VyaWYiPl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fPGJyPg0KQ09TRSBtYWlsaW5nIGxpc3Q8YnI+DQo8L3NwYW4+PGEgaHJlZj0ibWFpbHRv OkNPU0VAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6cHVycGxlIj5DT1NFQGlldGYu b3JnPC9zcGFuPjwvYT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj48YnI+DQo8L3NwYW4+PGEgaHJlZj0iaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOnB1cnBsZSI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3Nl PC9zcGFuPjwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQpD T1NFIG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1haWx0bzpDT1NFQGlldGYub3JnIj5DT1NF QGlldGYub3JnPC9hPjxicj4NCjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vY29zZSI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3Nl PC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_359EC4B99E040048A7131E0F4E113AFC01B34893E9marathon_-- From nobody Tue Oct 15 12:33:37 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F350B120046 for ; Tue, 15 Oct 2019 12:33:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tr1bGGwR_ULO for ; Tue, 15 Oct 2019 12:33:33 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 45543120044 for ; Tue, 15 Oct 2019 12:33:33 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 93D72300B24 for ; Tue, 15 Oct 2019 15:33:31 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id HqGCRIw3sude for ; Tue, 15 Oct 2019 15:33:26 -0400 (EDT) Received: from a860b60074bd.fios-router.home (unknown [138.88.156.37]) by mail.smeinc.net (Postfix) with ESMTPSA id B51DD3005D7; Tue, 15 Oct 2019 15:33:26 -0400 (EDT) From: Russ Housley Message-Id: Content-Type: multipart/alternative; boundary="Apple-Mail=_A0415284-D626-4B95-BD1D-D9D8E8F26A8B" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Tue, 15 Oct 2019 15:33:27 -0400 In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC01B34893E9@marathon> Cc: Laurence Lundblade , Jim Schaad , cose , Ben Kaduk , Ivaylo Petrov To: "Roman D. Danyliw" References: <157072789599.20442.12089124445445995749.idtracker@ietfa.amsl.com> <67AC8C51-9650-4864-8D42-C10A5D56DAC6@vigilsec.com> <000001d57fca$1fbb5630$5f320290$@augustcellars.com> <5752A1CB-FF58-421F-BCF9-BF224BD8CBB7@island-resort.com> <359EC4B99E040048A7131E0F4E113AFC01B34893E9@marathon> X-Mailer: Apple Mail (2.3445.104.11) Archived-At: Subject: Re: [COSE] AD review of draft-ietf-cose-hash-sig-03 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Oct 2019 19:33:36 -0000 --Apple-Mail=_A0415284-D626-4B95-BD1D-D9D8E8F26A8B Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I have added this to the introduction to the Examples: This appendix provides a non-normative example ... I will post it after resolving any other Last Call comments that come = along. Russ > On Oct 15, 2019, at 3:22 PM, Roman Danyliw wrote: >=20 > =20 > From: COSE [mailto:cose-bounces@ietf.org = ] On Behalf Of Russ Housley > Sent: Tuesday, October 15, 2019 3:16 PM > To: Laurence Lundblade > > Cc: Roman Danyliw >; Jim Schaad = >; cose = >; Ben Kaduk >; Ivaylo Petrov > > Subject: Re: [COSE] AD review of draft-ietf-cose-hash-sig-03 > =20 > Laurence: > =20 > I'll let Jim respond to the format question, but I think the reference = to GitHub in informative, > =20 > [Roman] Irrespective of the Sign0 vs. 1 formatting. This highlights a = good point -- I don=E2=80=99t think the text explicitly says these = examples are non-normative. It probably should. > =20 > Roman > =20 > Russ > =20 >=20 >=20 > On Oct 15, 2019, at 12:41 PM, Laurence Lundblade = > wrote: > =20 > Hi > =20 > Didn=E2=80=99t see any response to this. I also understand bette and = can comment more clearly. > =20 > I really do think that s/COSE_Sign0/COSE_Sign1/ is necessary for the = document to be correct. > =20 > I also think the Appendix A examples should be like the examples in = RFC 8152 Appendix C. The examples should be just in CBOR diag, not in = the JSON-format test framework input format. Is the reference to = https://github.com/cose-wg/Examples = in the Appendix considered = normative? > =20 > LL > =20 > =20 >=20 >=20 > On Oct 10, 2019, at 9:13 PM, Laurence Lundblade > wrote: > =20 > Well I understand better =E2=80=94 this is JSON formatted inputs / = outputs for a test suite used by COSE-C? > =20 > But still=E2=80=A6 > =20 > What is a COSE_Sign0? Everywhere I look, I see it is a deprecated name = for a COSE_SIgn1. > =20 > Shouldn=E2=80=99t the examples here look like the examples in RFC = 8152? Should this use a new style for examples? > =20 > LL > =20 > =20 > On Oct 10, 2019, at 5:23 PM, Jim Schaad > wrote: > =20 > No that would be the format that I use in the examples with all of the = inputs as well. You should just use the cbor_diag field, and read = section 8 of the CBOR draft for how multiple lies are done. > =20 > From: COSE > On = Behalf Of Laurence Lundblade > Sent: Thursday, October 10, 2019 4:05 PM > To: Russ Housley > > Cc: Roman D. Danyliw >; Ivaylo = Petrov >; Ben Kaduk = >; cose > > Subject: Re: [COSE] AD review of draft-ietf-cose-hash-sig-03 > =20 > =20 > On Oct 10, 2019, at 1:24 PM, Russ Housley > wrote: > =20 > This appendix provides an example of a COSE full message signature > and an example of a COSE_Sign0 message. The display format includes > "\" to indicate that the same field continues on the next line, and = it > includes "|" to separate items within a field. > =20 > Doesn=E2=80=99t COSE only have a COSE_Sign1? COSE_Sign0 is mentioned = as wrong in errata. > =20 > The example in A.2 doesn=E2=80=99t look like a COSE_Sign1 at all. > =20 > LL > =20 > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose = > =20 > =20 > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose = --Apple-Mail=_A0415284-D626-4B95-BD1D-D9D8E8F26A8B Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 I = have added this to the introduction to the Examples:

   This appendix provides a = non-normative example ...

I = will post it after resolving any other Last Call comments that come = along.

Russ


On Oct 15, 2019, at 3:22 PM, Roman Danyliw = <rdd@cert.org> = wrote:

 
From: COSE [mailto:cose-bounces@ietf.org] On Behalf = Of Russ Housley
Sent: Tuesday, October 15, 2019 = 3:16 PM
To: Laurence Lundblade <lgl@island-resort.com>
Cc: Roman Danyliw <rdd@cert.org>; Jim Schaad <ietf@augustcellars.com>; = cose <cose@ietf.org>; Ben Kaduk = <kaduk@mit.edu>; Ivaylo = Petrov <ivaylo@ackl.io>
Subject: Re: [COSE] AD review of = draft-ietf-cose-hash-sig-03
 
Laurence:
 
I'll let Jim respond to the format = question, but I think the reference to GitHub in informative,
 
[Roman] Irrespective of the Sign0 vs. 1 formatting.  = This highlights a good point -- I don=E2=80=99t think the text = explicitly says these examples are non-normative.  It probably = should.
 
Roman
 
Russ
 


On Oct 15, 2019, at 12:41 PM, Laurence = Lundblade <lgl@island-resort.com> wrote:
 
Hi
 
Didn=E2=80=99= t see any response to this. I also understand bette and can comment more = clearly.
 
I really do think that = s/COSE_Sign0/COSE_Sign1/ is necessary for the document to be = correct.
 
I also think the Appendix A examples = should be like the examples in RFC 8152 Appendix C. The examples should = be just in CBOR diag, not in the JSON-format test framework input = format. Is the reference to https://github.com/cose-wg/Examples in the = Appendix considered normative?
 
LL
 
 


On Oct 10, = 2019, at 9:13 PM, Laurence Lundblade <lgl@island-resort.com> = wrote:
 
Well I = understand better =E2=80=94 this is JSON formatted inputs / outputs for = a test suite used by COSE-C?
 
But still=E2=80=A6
 
What is a = COSE_Sign0? Everywhere I look, I see it is a deprecated name for a = COSE_SIgn1.
 
Shouldn=E2=80=99t the examples here look = like the examples in RFC 8152? Should this use a new style for = examples?
 
LL
 
 
On Oct 10, 2019, at 5:23 PM, Jim Schaad <ietf@augustcellars.com> = wrote:
 
No= that would be the format that I use in the examples with all of the = inputs as well.  You should just use the cbor_diag field, and read = section 8 of the CBOR draft for how multiple lies are done.
 
From: COSE <cose-bounces@ietf.org> On Behalf = Of Laurence = Lundblade
Sent: Thursday, October 10, 2019 = 4:05 PM
To: Russ Housley <housley@vigilsec.com>
Cc: Roman= D. Danyliw <rdd@cert.org>; Ivaylo Petrov <ivaylo@ackl.io>; Ben Kaduk <kaduk@mit.edu>; cose <cose@ietf.org>
Subject: Re: [COSE] AD review of = draft-ietf-cose-hash-sig-03
 
 
On Oct 10, 2019, at 1:24 PM, Russ Housley <housley@vigilsec.com> wrote:
 
  This = appendix provides an example of a COSE full message signature
  and an example of a COSE_Sign0 message.  The = display format includes
  "\" to indicate that = the same field continues on the next line, and it
  includes "|" to separate items within a = field.
 
Doesn=E2=80=99t COSE only have a COSE_Sign1? =  COSE_Sign0 is mentioned as wrong in errata.
 
The example in A.2 doesn=E2=80=99t look like a = COSE_Sign1 at all.
 
LL
 
_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose
 
 
_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose

= --Apple-Mail=_A0415284-D626-4B95-BD1D-D9D8E8F26A8B-- From nobody Tue Oct 15 13:00:55 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF6B712007C for ; Tue, 15 Oct 2019 13:00:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cert.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f_JZhNw6DLGc for ; Tue, 15 Oct 2019 13:00:50 -0700 (PDT) Received: from taper.sei.cmu.edu (taper.sei.cmu.edu [147.72.252.16]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE6C512004A for ; Tue, 15 Oct 2019 13:00:50 -0700 (PDT) Received: from korb.sei.cmu.edu (korb.sei.cmu.edu [10.64.21.30]) by taper.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x9FK0e3V017381; Tue, 15 Oct 2019 16:00:40 -0400 DKIM-Filter: OpenDKIM Filter v2.11.0 taper.sei.cmu.edu x9FK0e3V017381 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cert.org; s=yc2bmwvrj62m; t=1571169640; bh=jc9H7k0JmSpvUBBrX+zLSBBdczzUdOB6EUi8IdjMe7s=; h=From:To:CC:Subject:Date:References:In-Reply-To:From; b=Qje1bpLdScYwoS7nBoRePL6R67FStGz4nmWH/v4Ko2II/JikrHIhQFzUDzRjCEzzK WOt5n81YFQINqxqpaclKtCCoHPIYiqw5SYcVEX9B8ZS6FkZhFBRlpJd8Q2v2udnoDX J/VpH0kqU/Zx/64t5yRSneyyJS+Ng56feIk0ktbo= Received: from CASSINA.ad.sei.cmu.edu (cassina.ad.sei.cmu.edu [10.64.28.249]) by korb.sei.cmu.edu (8.14.7/8.14.7) with ESMTP id x9FK0EKa031283; Tue, 15 Oct 2019 16:00:14 -0400 Received: from MARATHON.ad.sei.cmu.edu ([10.64.28.250]) by CASSINA.ad.sei.cmu.edu ([10.64.28.249]) with mapi id 14.03.0468.000; Tue, 15 Oct 2019 16:00:14 -0400 From: Roman Danyliw To: Russ Housley CC: Laurence Lundblade , Jim Schaad , cose , Ben Kaduk , Ivaylo Petrov Thread-Topic: [COSE] AD review of draft-ietf-cose-hash-sig-03 Thread-Index: AQHVf6iqNBNekjPGTxOmdU2BtyuZIKdUwfCAgAAWB4CAAEAeAIAHGoGAgAAq+gD//74yQIAARtCA///EMNA= Date: Tue, 15 Oct 2019 20:00:13 +0000 Message-ID: <359EC4B99E040048A7131E0F4E113AFC01B3489424@marathon> References: <157072789599.20442.12089124445445995749.idtracker@ietfa.amsl.com> <67AC8C51-9650-4864-8D42-C10A5D56DAC6@vigilsec.com> <000001d57fca$1fbb5630$5f320290$@augustcellars.com> <5752A1CB-FF58-421F-BCF9-BF224BD8CBB7@island-resort.com> <359EC4B99E040048A7131E0F4E113AFC01B34893E9@marathon> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.64.22.6] Content-Type: multipart/alternative; boundary="_000_359EC4B99E040048A7131E0F4E113AFC01B3489424marathon_" MIME-Version: 1.0 Archived-At: Subject: Re: [COSE] AD review of draft-ietf-cose-hash-sig-03 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Oct 2019 20:00:54 -0000 --_000_359EC4B99E040048A7131E0F4E113AFC01B3489424marathon_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgUnVzcyENCg0KVGhpcyBuZXcgdGV4dCAoYW5kIHRpbWluZyBhZnRlciB0aGUgTEMpIHdvcmtz IGZvciBtZS4gIFRoYW5rcy4NCg0KUm9tYW4NCg0KRnJvbTogUnVzcyBIb3VzbGV5IFttYWlsdG86 aG91c2xleUB2aWdpbHNlYy5jb21dDQpTZW50OiBUdWVzZGF5LCBPY3RvYmVyIDE1LCAyMDE5IDM6 MzMgUE0NClRvOiBSb21hbiBEYW55bGl3IDxyZGRAY2VydC5vcmc+DQpDYzogTGF1cmVuY2UgTHVu ZGJsYWRlIDxsZ2xAaXNsYW5kLXJlc29ydC5jb20+OyBKaW0gU2NoYWFkIDxpZXRmQGF1Z3VzdGNl bGxhcnMuY29tPjsgY29zZSA8Y29zZUBpZXRmLm9yZz47IEJlbiBLYWR1ayA8a2FkdWtAbWl0LmVk dT47IEl2YXlsbyBQZXRyb3YgPGl2YXlsb0BhY2tsLmlvPg0KU3ViamVjdDogUmU6IFtDT1NFXSBB RCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1jb3NlLWhhc2gtc2lnLTAzDQoNCkkgaGF2ZSBhZGRlZCB0 aGlzIHRvIHRoZSBpbnRyb2R1Y3Rpb24gdG8gdGhlIEV4YW1wbGVzOg0KDQogICBUaGlzIGFwcGVu ZGl4IHByb3ZpZGVzIGEgbm9uLW5vcm1hdGl2ZSBleGFtcGxlIC4uLg0KDQpJIHdpbGwgcG9zdCBp dCBhZnRlciByZXNvbHZpbmcgYW55IG90aGVyIExhc3QgQ2FsbCBjb21tZW50cyB0aGF0IGNvbWUg YWxvbmcuDQoNClJ1c3MNCg0KDQoNCk9uIE9jdCAxNSwgMjAxOSwgYXQgMzoyMiBQTSwgUm9tYW4g RGFueWxpdyA8cmRkQGNlcnQub3JnPG1haWx0bzpyZGRAY2VydC5vcmc+PiB3cm90ZToNCg0KDQpG cm9tOiBDT1NFIFttYWlsdG86Y29zZS1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgUnVz cyBIb3VzbGV5DQpTZW50OiBUdWVzZGF5LCBPY3RvYmVyIDE1LCAyMDE5IDM6MTYgUE0NClRvOiBM YXVyZW5jZSBMdW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbTxtYWlsdG86bGdsQGlzbGFu ZC1yZXNvcnQuY29tPj4NCkNjOiBSb21hbiBEYW55bGl3IDxyZGRAY2VydC5vcmc8bWFpbHRvOnJk ZEBjZXJ0Lm9yZz4+OyBKaW0gU2NoYWFkIDxpZXRmQGF1Z3VzdGNlbGxhcnMuY29tPG1haWx0bzpp ZXRmQGF1Z3VzdGNlbGxhcnMuY29tPj47IGNvc2UgPGNvc2VAaWV0Zi5vcmc8bWFpbHRvOmNvc2VA aWV0Zi5vcmc+PjsgQmVuIEthZHVrIDxrYWR1a0BtaXQuZWR1PG1haWx0bzprYWR1a0BtaXQuZWR1 Pj47IEl2YXlsbyBQZXRyb3YgPGl2YXlsb0BhY2tsLmlvPG1haWx0bzppdmF5bG9AYWNrbC5pbz4+ DQpTdWJqZWN0OiBSZTogW0NPU0VdIEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWNvc2UtaGFzaC1z aWctMDMNCg0KTGF1cmVuY2U6DQoNCkknbGwgbGV0IEppbSByZXNwb25kIHRvIHRoZSBmb3JtYXQg cXVlc3Rpb24sIGJ1dCBJIHRoaW5rIHRoZSByZWZlcmVuY2UgdG8gR2l0SHViIGluIGluZm9ybWF0 aXZlLA0KDQpbUm9tYW5dIElycmVzcGVjdGl2ZSBvZiB0aGUgU2lnbjAgdnMuIDEgZm9ybWF0dGlu Zy4gIFRoaXMgaGlnaGxpZ2h0cyBhIGdvb2QgcG9pbnQgLS0gSSBkb27igJl0IHRoaW5rIHRoZSB0 ZXh0IGV4cGxpY2l0bHkgc2F5cyB0aGVzZSBleGFtcGxlcyBhcmUgbm9uLW5vcm1hdGl2ZS4gIEl0 IHByb2JhYmx5IHNob3VsZC4NCg0KUm9tYW4NCg0KUnVzcw0KDQoNCg0KDQpPbiBPY3QgMTUsIDIw MTksIGF0IDEyOjQxIFBNLCBMYXVyZW5jZSBMdW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNv bTxtYWlsdG86bGdsQGlzbGFuZC1yZXNvcnQuY29tPj4gd3JvdGU6DQoNCkhpDQoNCkRpZG7igJl0 IHNlZSBhbnkgcmVzcG9uc2UgdG8gdGhpcy4gSSBhbHNvIHVuZGVyc3RhbmQgYmV0dGUgYW5kIGNh biBjb21tZW50IG1vcmUgY2xlYXJseS4NCg0KSSByZWFsbHkgZG8gdGhpbmsgdGhhdCBzL0NPU0Vf U2lnbjAvQ09TRV9TaWduMS8gaXMgbmVjZXNzYXJ5IGZvciB0aGUgZG9jdW1lbnQgdG8gYmUgY29y cmVjdC4NCg0KSSBhbHNvIHRoaW5rIHRoZSBBcHBlbmRpeCBBIGV4YW1wbGVzIHNob3VsZCBiZSBs aWtlIHRoZSBleGFtcGxlcyBpbiBSRkMgODE1MiBBcHBlbmRpeCBDLiBUaGUgZXhhbXBsZXMgc2hv dWxkIGJlIGp1c3QgaW4gQ0JPUiBkaWFnLCBub3QgaW4gdGhlIEpTT04tZm9ybWF0IHRlc3QgZnJh bWV3b3JrIGlucHV0IGZvcm1hdC4gSXMgdGhlIHJlZmVyZW5jZSB0byBodHRwczovL2dpdGh1Yi5j b20vY29zZS13Zy9FeGFtcGxlcyBpbiB0aGUgQXBwZW5kaXggY29uc2lkZXJlZCBub3JtYXRpdmU/ DQoNCkxMDQoNCg0KDQoNCg0KT24gT2N0IDEwLCAyMDE5LCBhdCA5OjEzIFBNLCBMYXVyZW5jZSBM dW5kYmxhZGUgPGxnbEBpc2xhbmQtcmVzb3J0LmNvbTxtYWlsdG86bGdsQGlzbGFuZC1yZXNvcnQu Y29tPj4gd3JvdGU6DQoNCldlbGwgSSB1bmRlcnN0YW5kIGJldHRlciDigJQgdGhpcyBpcyBKU09O IGZvcm1hdHRlZCBpbnB1dHMgLyBvdXRwdXRzIGZvciBhIHRlc3Qgc3VpdGUgdXNlZCBieSBDT1NF LUM/DQoNCkJ1dCBzdGlsbOKApg0KDQpXaGF0IGlzIGEgQ09TRV9TaWduMD8gRXZlcnl3aGVyZSBJ IGxvb2ssIEkgc2VlIGl0IGlzIGEgZGVwcmVjYXRlZCBuYW1lIGZvciBhIENPU0VfU0lnbjEuDQoN ClNob3VsZG7igJl0IHRoZSBleGFtcGxlcyBoZXJlIGxvb2sgbGlrZSB0aGUgZXhhbXBsZXMgaW4g UkZDIDgxNTI/IFNob3VsZCB0aGlzIHVzZSBhIG5ldyBzdHlsZSBmb3IgZXhhbXBsZXM/DQoNCkxM DQoNCg0KT24gT2N0IDEwLCAyMDE5LCBhdCA1OjIzIFBNLCBKaW0gU2NoYWFkIDxpZXRmQGF1Z3Vz dGNlbGxhcnMuY29tPG1haWx0bzppZXRmQGF1Z3VzdGNlbGxhcnMuY29tPj4gd3JvdGU6DQoNCk5v IHRoYXQgd291bGQgYmUgdGhlIGZvcm1hdCB0aGF0IEkgdXNlIGluIHRoZSBleGFtcGxlcyB3aXRo IGFsbCBvZiB0aGUgaW5wdXRzIGFzIHdlbGwuICBZb3Ugc2hvdWxkIGp1c3QgdXNlIHRoZSBjYm9y X2RpYWcgZmllbGQsIGFuZCByZWFkIHNlY3Rpb24gOCBvZiB0aGUgQ0JPUiBkcmFmdCBmb3IgaG93 IG11bHRpcGxlIGxpZXMgYXJlIGRvbmUuDQoNCkZyb206IENPU0UgPGNvc2UtYm91bmNlc0BpZXRm Lm9yZzxtYWlsdG86Y29zZS1ib3VuY2VzQGlldGYub3JnPj4gT24gQmVoYWxmIE9mIExhdXJlbmNl IEx1bmRibGFkZQ0KU2VudDogVGh1cnNkYXksIE9jdG9iZXIgMTAsIDIwMTkgNDowNSBQTQ0KVG86 IFJ1c3MgSG91c2xleSA8aG91c2xleUB2aWdpbHNlYy5jb208bWFpbHRvOmhvdXNsZXlAdmlnaWxz ZWMuY29tPj4NCkNjOiBSb21hbiBELiBEYW55bGl3IDxyZGRAY2VydC5vcmc8bWFpbHRvOnJkZEBj ZXJ0Lm9yZz4+OyBJdmF5bG8gUGV0cm92IDxpdmF5bG9AYWNrbC5pbzxtYWlsdG86aXZheWxvQGFj a2wuaW8+PjsgQmVuIEthZHVrIDxrYWR1a0BtaXQuZWR1PG1haWx0bzprYWR1a0BtaXQuZWR1Pj47 IGNvc2UgPGNvc2VAaWV0Zi5vcmc8bWFpbHRvOmNvc2VAaWV0Zi5vcmc+Pg0KU3ViamVjdDogUmU6 IFtDT1NFXSBBRCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1jb3NlLWhhc2gtc2lnLTAzDQoNCg0KT24g T2N0IDEwLCAyMDE5LCBhdCAxOjI0IFBNLCBSdXNzIEhvdXNsZXkgPGhvdXNsZXlAdmlnaWxzZWMu Y29tPG1haWx0bzpob3VzbGV5QHZpZ2lsc2VjLmNvbT4+IHdyb3RlOg0KDQogIFRoaXMgYXBwZW5k aXggcHJvdmlkZXMgYW4gZXhhbXBsZSBvZiBhIENPU0UgZnVsbCBtZXNzYWdlIHNpZ25hdHVyZQ0K ICBhbmQgYW4gZXhhbXBsZSBvZiBhIENPU0VfU2lnbjAgbWVzc2FnZS4gIFRoZSBkaXNwbGF5IGZv cm1hdCBpbmNsdWRlcw0KICAiXCIgdG8gaW5kaWNhdGUgdGhhdCB0aGUgc2FtZSBmaWVsZCBjb250 aW51ZXMgb24gdGhlIG5leHQgbGluZSwgYW5kIGl0DQogIGluY2x1ZGVzICJ8IiB0byBzZXBhcmF0 ZSBpdGVtcyB3aXRoaW4gYSBmaWVsZC4NCg0KRG9lc27igJl0IENPU0Ugb25seSBoYXZlIGEgQ09T RV9TaWduMT8gIENPU0VfU2lnbjAgaXMgbWVudGlvbmVkIGFzIHdyb25nIGluIGVycmF0YS4NCg0K VGhlIGV4YW1wbGUgaW4gQS4yIGRvZXNu4oCZdCBsb29rIGxpa2UgYSBDT1NFX1NpZ24xIGF0IGFs bC4NCg0KTEwNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X18NCkNPU0UgbWFpbGluZyBsaXN0DQpDT1NFQGlldGYub3JnPG1haWx0bzpDT1NFQGlldGYub3Jn Pg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlDQoNCg0KX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkNPU0UgbWFpbGluZyBs aXN0DQpDT1NFQGlldGYub3JnPG1haWx0bzpDT1NFQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlDQoNCg== --_000_359EC4B99E040048A7131E0F4E113AFC01B3489424marathon_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6eD0idXJuOnNjaGVtYXMtbWljcm9z b2Z0LWNvbTpvZmZpY2U6ZXhjZWwiIHhtbG5zOm09Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5j b20vb2ZmaWNlLzIwMDQvMTIvb21tbCIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy1o dG1sNDAiPg0KPGhlYWQ+DQo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNvbnRlbnQ9 InRleHQvaHRtbDsgY2hhcnNldD11dGYtOCI+DQo8bWV0YSBuYW1lPSJHZW5lcmF0b3IiIGNvbnRl bnQ9Ik1pY3Jvc29mdCBXb3JkIDE1IChmaWx0ZXJlZCBtZWRpdW0pIj4NCjxzdHlsZT48IS0tDQov KiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkhlbHZldGlj YTsNCglwYW5vc2UtMToyIDExIDYgNCAyIDIgMiAyIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQt ZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYgMyAyIDQ7fQ0K QGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUgNSAyIDIg MiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNv Tm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAw MXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIs c2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6 OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRl ZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJ Y29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0Kc3Bhbi5hcHBsZS1j b252ZXJ0ZWQtc3BhY2UNCgl7bXNvLXN0eWxlLW5hbWU6YXBwbGUtY29udmVydGVkLXNwYWNlO30N CnNwYW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1zb0No cERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBw dDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEu MGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2Vj dGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVm YXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48 IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxv OmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwh W2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5r PSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5IaSBSdXNzITxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0 OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+VGhpcyBuZXcgdGV4dCAoYW5kIHRpbWluZyBh ZnRlciB0aGUgTEMpIHdvcmtzIGZvciBtZS4mbmJzcDsgVGhhbmtzLjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdE Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Um9tYW48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxl ZnQ6c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0Ij4NCjxkaXY+DQo8 ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFk ZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWYiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiBSdXNzIEhvdXNsZXkg W21haWx0bzpob3VzbGV5QHZpZ2lsc2VjLmNvbV0NCjxicj4NCjxiPlNlbnQ6PC9iPiBUdWVzZGF5 LCBPY3RvYmVyIDE1LCAyMDE5IDM6MzMgUE08YnI+DQo8Yj5Ubzo8L2I+IFJvbWFuIERhbnlsaXcg Jmx0O3JkZEBjZXJ0Lm9yZyZndDs8YnI+DQo8Yj5DYzo8L2I+IExhdXJlbmNlIEx1bmRibGFkZSAm bHQ7bGdsQGlzbGFuZC1yZXNvcnQuY29tJmd0OzsgSmltIFNjaGFhZCAmbHQ7aWV0ZkBhdWd1c3Rj ZWxsYXJzLmNvbSZndDs7IGNvc2UgJmx0O2Nvc2VAaWV0Zi5vcmcmZ3Q7OyBCZW4gS2FkdWsgJmx0 O2thZHVrQG1pdC5lZHUmZ3Q7OyBJdmF5bG8gUGV0cm92ICZsdDtpdmF5bG9AYWNrbC5pbyZndDs8 YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtDT1NFXSBBRCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1j b3NlLWhhc2gtc2lnLTAzPG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+SSBoYXZlIGFkZGVkIHRoaXMgdG8gdGhlIGludHJvZHVjdGlvbiB0byB0aGUgRXhhbXBs ZXM6PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsg Jm5ic3A7VGhpcyBhcHBlbmRpeCBwcm92aWRlcyBhIG5vbi1ub3JtYXRpdmUgZXhhbXBsZSAuLi48 bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgd2lsbCBwb3N0 IGl0IGFmdGVyIHJlc29sdmluZyBhbnkgb3RoZXIgTGFzdCBDYWxsIGNvbW1lbnRzIHRoYXQgY29t ZSBhbG9uZy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+UnVzczxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJt YXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPk9uIE9jdCAxNSwgMjAxOSwgYXQgMzoyMiBQTSwgUm9tYW4gRGFueWxpdyAmbHQ7 PGEgaHJlZj0ibWFpbHRvOnJkZEBjZXJ0Lm9yZyI+cmRkQGNlcnQub3JnPC9hPiZndDsgd3JvdGU6 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3Bh ZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25l O2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGlu Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkZyb206 PC9zcGFuPjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWYiPiZuYnNwOzwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5DT1NFDQogWzxhIGhy ZWY9Im1haWx0bzpjb3NlLWJvdW5jZXNAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJw bGUiPm1haWx0bzpjb3NlLWJvdW5jZXNAaWV0Zi5vcmc8L3NwYW4+PC9hPl08c3BhbiBjbGFzcz0i YXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGI+T24gQmVoYWxmIE9mPHNwYW4g Y2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvYj5SdXNzIEhvdXNs ZXk8YnI+DQo8Yj5TZW50OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+VHVlc2RheSwgT2N0b2JlciAxNSwgMjAxOSAzOjE2IFBNPGJyPg0KPGI+VG86 PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5MYXVy ZW5jZSBMdW5kYmxhZGUgJmx0OzxhIGhyZWY9Im1haWx0bzpsZ2xAaXNsYW5kLXJlc29ydC5jb20i PjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmxnbEBpc2xhbmQtcmVzb3J0LmNvbTwvc3Bhbj48 L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNl Ij4mbmJzcDs8L3NwYW4+Um9tYW4gRGFueWxpdyAmbHQ7PGEgaHJlZj0ibWFpbHRvOnJkZEBjZXJ0 Lm9yZyI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+cmRkQGNlcnQub3JnPC9zcGFuPjwvYT4m Z3Q7OyBKaW0gU2NoYWFkICZsdDs8YSBocmVmPSJtYWlsdG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNv bSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbTwvc3Bh bj48L2E+Jmd0OzsNCiBjb3NlICZsdDs8YSBocmVmPSJtYWlsdG86Y29zZUBpZXRmLm9yZyI+PHNw YW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+Y29zZUBpZXRmLm9yZzwvc3Bhbj48L2E+Jmd0OzsgQmVu IEthZHVrICZsdDs8YSBocmVmPSJtYWlsdG86a2FkdWtAbWl0LmVkdSI+PHNwYW4gc3R5bGU9ImNv bG9yOnB1cnBsZSI+a2FkdWtAbWl0LmVkdTwvc3Bhbj48L2E+Jmd0OzsgSXZheWxvIFBldHJvdiAm bHQ7PGEgaHJlZj0ibWFpbHRvOml2YXlsb0BhY2tsLmlvIj48c3BhbiBzdHlsZT0iY29sb3I6cHVy cGxlIj5pdmF5bG9AYWNrbC5pbzwvc3Bhbj48L2E+Jmd0Ozxicj4NCjxiPlN1YmplY3Q6PC9iPjxz cGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5SZTogW0NPU0Vd IEFEIHJldmlldyBvZiBkcmFmdC1pZXRmLWNvc2UtaGFzaC1zaWctMDM8L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5MYXVyZW5jZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkknbGwgbGV0IEppbSByZXNwb25kIHRv IHRoZSBmb3JtYXQgcXVlc3Rpb24sIGJ1dCBJIHRoaW5rIHRoZSByZWZlcmVuY2UgdG8gR2l0SHVi IGluIGluZm9ybWF0aXZlLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjQ5N0QiPiZu YnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5bUm9tYW5dIElycmVzcGVjdGl2 ZSBvZiB0aGUgU2lnbjAgdnMuIDEgZm9ybWF0dGluZy4mbmJzcDsgVGhpcyBoaWdobGlnaHRzIGEg Z29vZCBwb2ludCAtLSBJIGRvbuKAmXQgdGhpbmsgdGhlIHRleHQgZXhwbGljaXRseSBzYXlzIHRo ZXNlIGV4YW1wbGVzIGFyZSBub24tbm9ybWF0aXZlLiZuYnNwOw0KIEl0IHByb2JhYmx5IHNob3Vs ZC48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMxRjQ5N0QiPlJvbWFuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0Qi PiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlJ1c3M8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxi cj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFy Z2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+T24gT2N0IDE1LCAyMDE5LCBhdCAxMjo0MSBQTSwgTGF1cmVuY2UgTHVu ZGJsYWRlICZsdDs8YSBocmVmPSJtYWlsdG86bGdsQGlzbGFuZC1yZXNvcnQuY29tIj48c3BhbiBz dHlsZT0iY29sb3I6cHVycGxlIj5sZ2xAaXNsYW5kLXJlc29ydC5jb208L3NwYW4+PC9hPiZndDsg d3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5IaTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+RGlkbuKAmXQg c2VlIGFueSByZXNwb25zZSB0byB0aGlzLiBJIGFsc28gdW5kZXJzdGFuZCBiZXR0ZSBhbmQgY2Fu IGNvbW1lbnQgbW9yZSBjbGVhcmx5LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIHJlYWxs eSBkbyB0aGluayB0aGF0IHMvQ09TRV9TaWduMC9DT1NFX1NpZ24xLyBpcyBuZWNlc3NhcnkgZm9y IHRoZSBkb2N1bWVudCB0byBiZSBjb3JyZWN0LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5J IGFsc28gdGhpbmsgdGhlIEFwcGVuZGl4IEEgZXhhbXBsZXMgc2hvdWxkIGJlIGxpa2UgdGhlIGV4 YW1wbGVzIGluIFJGQyA4MTUyIEFwcGVuZGl4IEMuIFRoZSBleGFtcGxlcyBzaG91bGQgYmUganVz dCBpbiBDQk9SIGRpYWcsIG5vdCBpbiB0aGUgSlNPTi1mb3JtYXQgdGVzdCBmcmFtZXdvcmsgaW5w dXQgZm9ybWF0LiBJcyB0aGUgcmVmZXJlbmNlIHRvJm5ic3A7PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQiPjxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNvbS9jb3NlLXdnL0V4YW1wbGVzIj48 c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5odHRwczovL2dpdGh1Yi5jb20vY29zZS13Zy9FeGFt cGxlczwvc3Bhbj48L2E+PC9zcGFuPiZuYnNwO2luDQogdGhlIEFwcGVuZGl4IGNvbnNpZGVyZWQg bm9ybWF0aXZlPzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5MTDxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1 LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIE9jdCAxMCwgMjAx OSwgYXQgOToxMyBQTSwgTGF1cmVuY2UgTHVuZGJsYWRlICZsdDs8YSBocmVmPSJtYWlsdG86bGds QGlzbGFuZC1yZXNvcnQuY29tIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5sZ2xAaXNsYW5k LXJlc29ydC5jb208L3NwYW4+PC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5XZWxs IEkgdW5kZXJzdGFuZCBiZXR0ZXIg4oCUIHRoaXMgaXMgSlNPTiBmb3JtYXR0ZWQgaW5wdXRzIC8g b3V0cHV0cyBmb3IgYSB0ZXN0IHN1aXRlIHVzZWQgYnkgQ09TRS1DPzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+QnV0IHN0aWxs4oCmPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPldoYXQgaXMgYSBDT1NF X1NpZ24wPyBFdmVyeXdoZXJlIEkgbG9vaywgSSBzZWUgaXQgaXMgYSBkZXByZWNhdGVkIG5hbWUg Zm9yIGEgQ09TRV9TSWduMS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+U2hvdWxkbuKAmXQg dGhlIGV4YW1wbGVzIGhlcmUgbG9vayBsaWtlIHRoZSBleGFtcGxlcyBpbiBSRkMgODE1Mj8gU2hv dWxkIHRoaXMgdXNlIGEgbmV3IHN0eWxlIGZvciBleGFtcGxlcz88bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+TEw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFy Z2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+T24gT2N0IDEwLCAyMDE5LCBhdCA1OjIzIFBNLCBKaW0gU2NoYWFkICZs dDs8YSBocmVmPSJtYWlsdG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbSI+PHNwYW4gc3R5bGU9ImNv bG9yOnB1cnBsZSI+aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbTwvc3Bhbj48L2E+Jmd0OyB3cm90ZTo8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Tm8gdGhhdCB3b3VsZCBiZSB0aGUg Zm9ybWF0IHRoYXQgSSB1c2UgaW4gdGhlIGV4YW1wbGVzIHdpdGggYWxsIG9mIHRoZSBpbnB1dHMg YXMgd2VsbC4mbmJzcDsgWW91IHNob3VsZCBqdXN0IHVzZSB0aGUgY2Jvcl9kaWFnIGZpZWxkLCBh bmQgcmVhZCBzZWN0aW9uIDggb2YgdGhlIENCT1IgZHJhZnQgZm9yIGhvdw0KIG11bHRpcGxlIGxp ZXMgYXJlIGRvbmUuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJv cmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBp biAwaW4gMGluIj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1z cGFjZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3NwYW4+PC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp ZiI+Q09TRQ0KICZsdDs8YSBocmVmPSJtYWlsdG86Y29zZS1ib3VuY2VzQGlldGYub3JnIj48c3Bh biBzdHlsZT0iY29sb3I6cHVycGxlIj5jb3NlLWJvdW5jZXNAaWV0Zi5vcmc8L3NwYW4+PC9hPiZn dDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGI+T24g QmVoYWxmIE9mPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu PjwvYj5MYXVyZW5jZSBMdW5kYmxhZGU8YnI+DQo8Yj5TZW50OjwvYj48c3BhbiBjbGFzcz0iYXBw bGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+VGh1cnNkYXksIE9jdG9iZXIgMTAsIDIw MTkgNDowNSBQTTxicj4NCjxiPlRvOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNw YWNlIj4mbmJzcDs8L3NwYW4+UnVzcyBIb3VzbGV5ICZsdDs8YSBocmVmPSJtYWlsdG86aG91c2xl eUB2aWdpbHNlYy5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmhvdXNsZXlAdmlnaWxz ZWMuY29tPC9zcGFuPjwvYT4mZ3Q7PGJyPg0KPGI+Q2M6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1j b252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5Sb21hbiBELiBEYW55bGl3ICZsdDs8YSBocmVm PSJtYWlsdG86cmRkQGNlcnQub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5yZGRAY2Vy dC5vcmc8L3NwYW4+PC9hPiZndDs7IEl2YXlsbyBQZXRyb3YgJmx0OzxhIGhyZWY9Im1haWx0bzpp dmF5bG9AYWNrbC5pbyI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+aXZheWxvQGFja2wuaW88 L3NwYW4+PC9hPiZndDs7DQogQmVuIEthZHVrICZsdDs8YSBocmVmPSJtYWlsdG86a2FkdWtAbWl0 LmVkdSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+a2FkdWtAbWl0LmVkdTwvc3Bhbj48L2E+ Jmd0OzsgY29zZSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmNvc2VAaWV0Zi5vcmciPjxzcGFuIHN0eWxl PSJjb2xvcjpwdXJwbGUiPmNvc2VAaWV0Zi5vcmc8L3NwYW4+PC9hPiZndDs8YnI+DQo8Yj5TdWJq ZWN0OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+ UmU6IFtDT1NFXSBBRCByZXZpZXcgb2YgZHJhZnQtaWV0Zi1jb3NlLWhhc2gtc2lnLTAzPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUu MHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5PbiBPY3QgMTAsIDIwMTksIGF0IDE6MjQgUE0s IFJ1c3MgSG91c2xleSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmhvdXNsZXlAdmlnaWxzZWMuY29tIj48 c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5ob3VzbGV5QHZpZ2lsc2VjLmNvbTwvc3Bhbj48L2E+ Jmd0OyB3cm90ZTo8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOyZuYnNw O1RoaXMgYXBwZW5kaXggcHJvdmlkZXMgYW4gZXhhbXBsZSBvZiBhIENPU0UgZnVsbCBtZXNzYWdl IHNpZ25hdHVyZTxicj4NCiZuYnNwOyZuYnNwO2FuZCBhbiBleGFtcGxlIG9mIGEgQ09TRV9TaWdu MCBtZXNzYWdlLiAmbmJzcDtUaGUgZGlzcGxheSBmb3JtYXQgaW5jbHVkZXM8YnI+DQombmJzcDsm bmJzcDsmcXVvdDtcJnF1b3Q7IHRvIGluZGljYXRlIHRoYXQgdGhlIHNhbWUgZmllbGQgY29udGlu dWVzIG9uIHRoZSBuZXh0IGxpbmUsIGFuZCBpdDxicj4NCiZuYnNwOyZuYnNwO2luY2x1ZGVzICZx dW90O3wmcXVvdDsgdG8gc2VwYXJhdGUgaXRlbXMgd2l0aGluIGEgZmllbGQuPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+RG9lc27igJl0IENP U0Ugb25seSBoYXZlIGEgQ09TRV9TaWduMT8gJm5ic3A7Q09TRV9TaWduMCBpcyBtZW50aW9uZWQg YXMgd3JvbmcgaW4gZXJyYXRhLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmIj5UaGUgZXhhbXBsZSBpbiBBLjIgZG9lc27igJl0IGxvb2sgbGlrZSBhIENPU0Vf U2lnbjEgYXQgYWxsLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZiI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmIj5MTDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+ Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPl9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0KQ09TRSBtYWlsaW5nIGxpc3Q8 YnI+DQo8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOkNPU0VAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJm b250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2Vy aWY7Y29sb3I6cHVycGxlIj5DT1NFQGlldGYub3JnPC9zcGFuPjwvYT48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlm Ij48YnI+DQo8L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9jb3NlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOnB1cnBsZSI+aHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlPC9zcGFuPjwvYT48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX188YnI+DQpDT1NFIG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1haWx0bzpDT1NF QGlldGYub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5DT1NFQGlldGYub3JnPC9zcGFu PjwvYT48YnI+DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L2Nvc2UiPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmh0dHBzOi8vd3d3LmlldGYub3JnL21h aWxtYW4vbGlzdGluZm8vY29zZTwvc3Bhbj48L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Js b2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_359EC4B99E040048A7131E0F4E113AFC01B3489424marathon_-- From nobody Tue Oct 15 14:33:03 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55A9012080E for ; Tue, 15 Oct 2019 14:33:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W6tz2gB67btp for ; Tue, 15 Oct 2019 14:32:59 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D54CA120866 for ; Tue, 15 Oct 2019 14:32:58 -0700 (PDT) Received: from Jude (192.168.1.159) by mail2.augustcellars.com (192.168.1.201) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Tue, 15 Oct 2019 14:32:50 -0700 From: Jim Schaad To: 'Roman Danyliw' , 'Russ Housley' CC: 'Laurence Lundblade' , 'cose' , "'Ben Kaduk'" , 'Ivaylo Petrov' References: <157072789599.20442.12089124445445995749.idtracker@ietfa.amsl.com> <67AC8C51-9650-4864-8D42-C10A5D56DAC6@vigilsec.com> <000001d57fca$1fbb5630$5f320290$@augustcellars.com> <5752A1CB-FF58-421F-BCF9-BF224BD8CBB7@island-resort.com> <359EC4B99E040048A7131E0F4E113AFC01B34893E9@marathon> <359EC4B99E040048A7131E0F4E113AFC01B3489424@marathon> In-Reply-To: <359EC4B99E040048A7131E0F4E113AFC01B3489424@marathon> Date: Tue, 15 Oct 2019 14:32:49 -0700 Message-ID: <021f01d583a0$19d827a0$4d8876e0$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0220_01D58365.6D7C83F0" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQH0J6XExm1ebiz8FIK3yuh9o09PmwJBbKINAa21ojQCdiIH0AJqThmlAWEAt9QB3vH3XgIgf82MAh9bQFUC4IWmAaaFcZ7g Content-Language: en-us X-Originating-IP: [192.168.1.159] Archived-At: Subject: Re: [COSE] AD review of draft-ietf-cose-hash-sig-03 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Oct 2019 21:33:02 -0000 ------=_NextPart_000_0220_01D58365.6D7C83F0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Will take care of the sample after the final assignment of the algorithm = identifier by IANA =20 From: Roman Danyliw =20 Sent: Tuesday, October 15, 2019 1:00 PM To: Russ Housley Cc: Laurence Lundblade ; Jim Schaad = ; cose ; Ben Kaduk = ; Ivaylo Petrov Subject: RE: [COSE] AD review of draft-ietf-cose-hash-sig-03 =20 Hi Russ! =20 This new text (and timing after the LC) works for me. Thanks. =20 Roman =20 From: Russ Housley [mailto:housley@vigilsec.com]=20 Sent: Tuesday, October 15, 2019 3:33 PM To: Roman Danyliw > Cc: Laurence Lundblade >; Jim Schaad >; cose >; Ben Kaduk >; Ivaylo Petrov > Subject: Re: [COSE] AD review of draft-ietf-cose-hash-sig-03 =20 I have added this to the introduction to the Examples: =20 This appendix provides a non-normative example ... =20 I will post it after resolving any other Last Call comments that come = along. =20 Russ =20 =20 On Oct 15, 2019, at 3:22 PM, Roman Danyliw > wrote: =20 =20 From: COSE [ = mailto:cose-bounces@ietf.org] On Behalf Of Russ Housley Sent: Tuesday, October 15, 2019 3:16 PM To: Laurence Lundblade < = lgl@island-resort.com> Cc: Roman Danyliw < rdd@cert.org>; Jim Schaad < = ietf@augustcellars.com>; cose < = cose@ietf.org>; Ben Kaduk < = kaduk@mit.edu>; Ivaylo Petrov < = ivaylo@ackl.io> Subject: Re: [COSE] AD review of draft-ietf-cose-hash-sig-03 =20 Laurence: =20 I'll let Jim respond to the format question, but I think the reference = to GitHub in informative, =20 [Roman] Irrespective of the Sign0 vs. 1 formatting. This highlights a = good point -- I don=E2=80=99t think the text explicitly says these = examples are non-normative. It probably should. =20 Roman =20 Russ =20 On Oct 15, 2019, at 12:41 PM, Laurence Lundblade < = lgl@island-resort.com> wrote: =20 Hi =20 Didn=E2=80=99t see any response to this. I also understand bette and can = comment more clearly. =20 I really do think that s/COSE_Sign0/COSE_Sign1/ is necessary for the = document to be correct. =20 I also think the Appendix A examples should be like the examples in RFC = 8152 Appendix C. The examples should be just in CBOR diag, not in the = JSON-format test framework input format. Is the reference to = = https://github.com/cose-wg/Examples in the Appendix considered = normative? =20 LL =20 =20 On Oct 10, 2019, at 9:13 PM, Laurence Lundblade < = lgl@island-resort.com> wrote: =20 Well I understand better =E2=80=94 this is JSON formatted inputs / = outputs for a test suite used by COSE-C? =20 But still=E2=80=A6 =20 What is a COSE_Sign0? Everywhere I look, I see it is a deprecated name = for a COSE_SIgn1. =20 Shouldn=E2=80=99t the examples here look like the examples in RFC 8152? = Should this use a new style for examples? =20 LL =20 =20 On Oct 10, 2019, at 5:23 PM, Jim Schaad < = ietf@augustcellars.com> wrote: =20 No that would be the format that I use in the examples with all of the = inputs as well. You should just use the cbor_diag field, and read = section 8 of the CBOR draft for how multiple lies are done. =20 From: COSE < cose-bounces@ietf.org> On = Behalf Of Laurence Lundblade Sent: Thursday, October 10, 2019 4:05 PM To: Russ Housley < housley@vigilsec.com> Cc: Roman D. Danyliw < rdd@cert.org>; Ivaylo = Petrov < ivaylo@ackl.io>; Ben Kaduk < = kaduk@mit.edu>; cose < = cose@ietf.org> Subject: Re: [COSE] AD review of draft-ietf-cose-hash-sig-03 =20 =20 On Oct 10, 2019, at 1:24 PM, Russ Housley < = housley@vigilsec.com> wrote: =20 This appendix provides an example of a COSE full message signature and an example of a COSE_Sign0 message. The display format includes "\" to indicate that the same field continues on the next line, and it includes "|" to separate items within a field. =20 Doesn=E2=80=99t COSE only have a COSE_Sign1? COSE_Sign0 is mentioned as = wrong in errata. =20 The example in A.2 doesn=E2=80=99t look like a COSE_Sign1 at all. =20 LL =20 _______________________________________________ COSE mailing list COSE@ietf.org = https://www.ietf.org/mailman/listinfo/cose =20 =20 _______________________________________________ COSE mailing list COSE@ietf.org = https://www.ietf.org/mailman/listinfo/cose =20 ------=_NextPart_000_0220_01D58365.6D7C83F0 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

Will take = care of the sample after the final assignment of the algorithm = identifier by IANA

 

From:<= /b> = Roman Danyliw <rdd@cert.org>
Sent: Tuesday, October 15, = 2019 1:00 PM
To: Russ Housley = <housley@vigilsec.com>
Cc: Laurence Lundblade = <lgl@island-resort.com>; Jim Schaad = <ietf@augustcellars.com>; cose <cose@ietf.org>; Ben Kaduk = <kaduk@mit.edu>; Ivaylo Petrov = <ivaylo@ackl.io>
Subject: RE: [COSE] AD review of = draft-ietf-cose-hash-sig-03

 

Hi Russ!

 

This new text (and timing after the LC) works for me.  = Thanks.

 

Roman

 

From:<= /b> = Russ Housley [mailto:housley@vigilsec.com] =
Sent: Tuesday, October 15, 2019 3:33 PM
To: Roman = Danyliw <rdd@cert.org>
Cc: Laurence = Lundblade <lgl@island-resort.com>; Jim = Schaad <ietf@augustcellars.com>; = cose <cose@ietf.org>; Ben = Kaduk <kaduk@mit.edu>; Ivaylo = Petrov <ivaylo@ackl.io>
Subject: = Re: [COSE] AD review of = draft-ietf-cose-hash-sig-03

 

I have added = this to the introduction to the Examples:

 

   This appendix provides a non-normative = example ...

 

I = will post it after resolving any other Last Call comments that come = along.

 

Russ

 

 

On Oct 15, 2019, at 3:22 PM, Roman Danyliw <rdd@cert.org> = wrote:

 

 

From:<= /b> = COSE [mailto:cose-bounces@ietf.org] On Behalf Of Russ = Housley
Sent: Tuesday, October 15, 2019 = 3:16 PM
To: Laurence Lundblade <lgl@island-resort.com>
Cc:=  Roman Danyliw <rdd@cert.org>; Jim Schaad <ietf@augustcellars.com>; cose = <cose@ietf.org>; Ben Kaduk <kaduk@mit.edu>; Ivaylo Petrov = <ivaylo@ackl.io>
Subject: Re: [COSE] AD review of = draft-ietf-cose-hash-sig-03

<= p class=3DMsoNormal> 

Laurence:

 

I'll let Jim respond to the format question, but I = think the reference to GitHub in = informative,

 

[Roman] Irrespective of the Sign0 vs. 1 formatting.  This = highlights a good point -- I don=E2=80=99t think the text explicitly = says these examples are non-normative.  It probably = should.

 

Roman

 

Russ

 



On Oct 15, 2019, at 12:41 PM, Laurence Lundblade = <lgl@island-resort.com> = wrote:

 

Hi

 

Didn=E2=80=99t see any response to this. I also = understand bette and can comment more = clearly.

 

I really do think that s/COSE_Sign0/COSE_Sign1/ is = necessary for the document to be = correct.

 

I also think the Appendix A examples should be like = the examples in RFC 8152 Appendix C. The examples should be just in CBOR = diag, not in the JSON-format test framework input format. Is the = reference to https://github.com/cose-wg/Examples in the Appendix considered = normative?

 

LL

 

 



On Oct 10, 2019, at 9:13 PM, Laurence Lundblade <lgl@island-resort.com> = wrote:

 

Well I understand better =E2=80=94 this is JSON = formatted inputs / outputs for a test suite used by = COSE-C?

 

But = still=E2=80=A6

 

What is a COSE_Sign0? Everywhere I look, I see it is a = deprecated name for a COSE_SIgn1.

 

Shouldn=E2=80=99t the examples here look like the = examples in RFC 8152? Should this use a new style for = examples?

 

LL

 

 

On Oct 10, 2019, at 5:23 PM, Jim Schaad <ietf@augustcellars.com> = wrote:

 

No that = would be the format that I use in the examples with all of the inputs as = well.  You should just use the cbor_diag field, and read section 8 = of the CBOR draft for how multiple lies are = done.

 =

From:<= /b> = COSE <cose-bounces@ietf.org> On Behalf Of Laurence = Lundblade
Sent: Thursday, October 10, 2019 = 4:05 PM
To: Russ Housley <housley@vigilsec.com>
Cc:<= span class=3Dapple-converted-space> Roman D. Danyliw <rdd@cert.org>; Ivaylo Petrov <ivaylo@ackl.io>; Ben Kaduk <kaduk@mit.edu>; cose <cose@ietf.org>
Subject: Re: [COSE] AD review of = draft-ietf-cose-hash-sig-03

=

 =

 =

On Oct 10, = 2019, at 1:24 PM, Russ Housley <housley@vigilsec.com> = wrote:

 =

  = This appendix provides an example of a COSE full message = signature
  and an example of a COSE_Sign0 message. =  The display format includes
  "\" to = indicate that the same field continues on the next line, and = it
  includes "|" to separate items within a = field.

 =

Doesn=E2=80=99= t COSE only have a COSE_Sign1?  COSE_Sign0 is mentioned as wrong in = errata.

 =

The example = in A.2 doesn=E2=80=99t look like a COSE_Sign1 at = all.

 =

LL

 =

____________= ___________________________________
COSE mailing list
COSE@ietf.org
<= a href=3D"https://www.ietf.org/mailman/listinfo/cose">https://www.ietf.org/mailman/listinfo/cose

 

 

_______________________________________________
COSE= mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose<= /a>

 

------=_NextPart_000_0220_01D58365.6D7C83F0-- From nobody Thu Oct 17 08:35:46 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 53FBF120902 for ; Thu, 17 Oct 2019 08:35:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ackl-io.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hL-QcxY94wd3 for ; Thu, 17 Oct 2019 08:35:39 -0700 (PDT) Received: from mail-wr1-x432.google.com (mail-wr1-x432.google.com [IPv6:2a00:1450:4864:20::432]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DD1A4120909 for ; Thu, 17 Oct 2019 08:35:38 -0700 (PDT) Received: by mail-wr1-x432.google.com with SMTP id r3so2890499wrj.6 for ; Thu, 17 Oct 2019 08:35:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ackl-io.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=IeAepjnIV0kbpG/Xh7N6zXLnro8ZC7q++aD5P5D4sHk=; b=LmfbFTE6IOl0paERKI2z71nbn38DLSB0oEN4OODsdVqGNR7EPT+F0rZRbz10zjR+Ub v4oImDqz5T65AtEECJWiiv1jpC+evyCRfPoZorNoBm4I/bswUUz6wbBsdCaUKldCcgq2 D0U0q79tF3PuuZQ+WqbUKNX0cIdBBbx56E+pmnQ0e+7WapwzZrha7G/6xwte+U/H13Xl YxsggZoWEhJgE96j8++eEu9olZs8d4ukP4LmQY1iJeepHIhx+pHaT3MCIIi+EtS3UjBq p0qLcbizP5GZZQfuAza5dQFzGXHuvJDx/D8WOACEnQhx/rvu/q+29tnuYugZwSj8AnqW ytog== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=IeAepjnIV0kbpG/Xh7N6zXLnro8ZC7q++aD5P5D4sHk=; b=MJeF7niQdmqGJbuKMfRu9c5mgZVq8dDLhxzHCtwsq9h8O9H5FGnlHicDXnT6CGJkyg v0muptFXuT+0ERrGSi4PH+wjuxlcifI5j6Z5S6pqCkTsQ4T4SwBHYfYmthbxeFQ9JPaK Yc0gHveyW9zhlEvx9GFlK65rbGfSomZca3tjFKV5BeEyVWIaDmp4+A26+CsXDK8t+XSg qnxRenZVoruFIYeYIEi9W3/Qy4kUBGP9A4t4T+3M1hR7FxnNbMC5HUsSqoWeiD7xl5Kq 1iQHUCdlWojm7GGazbfbrx6ivCeV6Cu7EBetsFz1ATVsUbcWQ99fMIQ2Uh52nuUAe4nh /gOw== X-Gm-Message-State: APjAAAWtAP5zMZYqKWcv5+n+tISWI8uHWt5rSgnk6BoEWz6AfhCgIZxO 3YuPtP0CVU7FeEJR3nfoML+kvb8gL8Isol9wI/hFbA== X-Google-Smtp-Source: APXvYqxCnw+eg+gjGOYdJAzeJVRL6S+JWAYmSntlVEgOCPZeaQhv7VNwoO7LT9qvGl4MZX9EJj6TLSNUXEHkXAXKVl0= X-Received: by 2002:adf:fe12:: with SMTP id n18mr3829869wrr.114.1571326537309; Thu, 17 Oct 2019 08:35:37 -0700 (PDT) MIME-Version: 1.0 References: <60C612D1-ADE5-488E-A9CD-3DF7F6260C44@ericsson.com> <9da7b8fcd8030e58fe85547f96efb852@bbhmail.nl> In-Reply-To: <9da7b8fcd8030e58fe85547f96efb852@bbhmail.nl> From: ivaylo petrov Date: Thu, 17 Oct 2019 17:35:10 +0200 Message-ID: To: Francesca Palombini , Jim Schaad Cc: consultancy@vanderstok.org, Cose Chairs Wg , Cose Wg Content-Type: multipart/alternative; boundary="000000000000153acc05951cf834" Archived-At: Subject: Re: [COSE] IANA registry for COSE Alg parameter X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 17 Oct 2019 15:35:45 -0000 --000000000000153acc05951cf834 Content-Type: text/plain; charset="UTF-8" Hello Francesca, Jim, all Sorry for the delay! We discussed with Matthew and for us it seems that the best option is to include the creation of this registry in draft-ietf-cose-rfc8152bis-algs as you suggested if Jim is fine with that. We consider that this will be more convenient for implementers and more logical as a structure. Jim, and everyone else, please let us know as soon as possible if you have any concerns regarding this. If not, Jim, please update draft-ietf-cose-rfc8152bis-algs with this change, so that we can move forward. Best regards, - Matthew and Ivaylo COSE Chairs On Tue, Sep 17, 2019 at 11:28 AM Peter van der Stok wrote: > Hi Francesca, > > As long as I can find the definitions in the COSE IANA registry, I am > happy. > The registry points to the original publishing document. > I don't really see the added value of defining them elsewhere than in the > document that first needs them. > Unless you propose a change to the other registries, that I did not see. > > Peter > > Francesca Palombini schreef op 2019-09-17 09:54: > > Hi Peter, > > > > Thank you for your comment. Yes, that is not specified in > https://tools.ietf.org/html/draft-ietf-core-oscore-groupcomm-05#section-9.1 > right now, but we were planning on having this new register in the COSE > IANA page (independently of where this registry is defined). > > > > The question we have is: what document should define this registry. I > think a COSE wg document, and possibly draft-ietf-cose-rfc8152bis-algs, > would make more sense. Chairs, could you consider this point before > requesting publication? > > > > Looking forward to more opinions. > > Francesca > > > > *From: *Peter van der Stok > *Organisation: *vanderstok consultancy > *Reply to: *"consultancy@vanderstok.org" > *Date: *Tuesday, 17 September 2019 at 09:47 > *To: *Francesca Palombini > *Cc: *Cose Wg , Jim Schaad > *Subject: *Re: [COSE] IANA registry for COSE Alg parameter > > > > HI Francesca, > > thanks for raising the subject of regsitration. > > For the moment I am happy to find all COSE related values in > https://www.iana.org/assignments/cose/cose.xhtml. > > My hope is that all future COSE registries can all be found at this same > page. > > Greetings, > > Peter > > > Francesca Palombini schreef op 2019-09-12 12:05: > > Hi, > > > > Following up on a discussion with Jim at IETF105, and discussion with my > co-authors: both EDHOC ( > https://tools.ietf.org/html/draft-selander-ace-cose-ecdhe-14 ) and OSCORE > Groupcomm (https://tools.ietf.org/html/draft-ietf-core-oscore-groupcomm-05 ) > would benefit from a standardized way of getting the CBOR format (and > optionally possible values) of the parameters associated to a COSE > Algorithm. COSE does not currently specify that, it does have some of this > info for COSE Key (depending on the key type), but we would really rather > have a simple way to get that information from the algorithm directly. That > means for example, specify the CBOR encoding of the parameter "curve" for > EdDSA. > > > > As we first needed it in OSCORE Groupcomm, we have some proposed text for > a IANA registry that could be used: > https://tools.ietf.org/html/draft-ietf-core-oscore-groupcomm-05#section-9.1 . > Since this is more general and we need this in other documents as well > (EDHOC), we think it would make more sense to add this to one of the > existing COSE specifications (draft-ietf-cose-rfc8152bis-algs?) or draft a > new COSE document covering this. > > > > We would ask the WG to consider adding such an IANA registry, and would > like your opinion on where better to have this. > > > > Thanks, > > Francesca > > > > > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose > > --000000000000153acc05951cf834 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hello Francesca, Jim, all

Sorry for the delay! We discussed with=C2=A0Matthew and for us it= seems that the best option is to include the creation of this registry in= =C2=A0draft-ietf-cose-rfc8152bis-algs as you suggested if Jim is fine with = that. We consider that this will be more convenient for implementers and mo= re logical as a structure.=C2=A0

Jim, and = everyone else, please let us know as soon as possible if you have any conce= rns regarding this. If not, Jim, please update=C2=A0draft-ietf-cose-rfc8152= bis-algs with this change, so that we can move=C2=A0forward.
=
Best regards,
- Matthew and Ivaylo
COSE= Chairs
<= div dir=3D"ltr">
On Tue, Sep 17, 2019 at 11:28 AM Peter van der St= ok <stokcons@bb= hmail.nl> wrote:
Hi Francesca,

As long as I can find the definitions in the COSE IANA= registry, I am happy.
The registry points to the original publishing do= cument.
I don't really see the added value of defining them elsewher= e than in the document that first needs them.
Unless you propose a chang= e to the other registries, that I did not see.

Peter

Francesca Palombin= i schreef op 2019-09-17 09:54:

Hi Peter,

=C2=A0

Thank you for your co= mment. Yes, that is not specified in https://tools.ietf.org/html/draft-ietf-core-oscore-gr= oupcomm-05#section-9.1 right now,= but we were planning on having this new register in the COSE IANA page (in= dependently of where this registry is defined).

=C2=A0

The question we have = is: what document should define this registry. I think a COSE wg document, = and possibly draft-ietf-cose-rfc8152bis-algs, would make more sense. Chairs= , could you consider this point before requesting publication?

=C2=A0

Looking forward to mo= re opinions.

Francesca

=C2=A0

=C2=A0

HI Francesca,

thanks for raising the subject = of regsitration.

For the moment I am happy to find all COSE related = values in=C2=A0https://www.iana.org/assignm= ents/cose/cose.xhtml.
My hope is that all future COSE registries can= all be found at this same page.

Greetings,

Peter


=

Francesca Palombini schreef op 2019-09-12 12:05:

Hi,

=C2=A0

Following= up on a discussion with Jim at IETF105, and discussion with my co-authors:= both EDHOC (https://tools.ietf.org/html/draft-selander-ace-cose-ecdhe-1= 4=C2=A0) and OSCORE Groupcomm (https://tools.ietf.org/= html/draft-ietf-core-oscore-groupcomm-05=C2=A0) would benefit fr= om a standardized way of getting the CBOR format (and optionally possible v= alues) of the parameters associated to a COSE Algorithm. COSE does not curr= ently specify that, it does have some of this info for COSE Key (depending = on the key type), but we would really rather have a simple way to get that = information from the algorithm directly. That means for example, specify th= e CBOR encoding of the parameter "curve" for =C2=A0EdDSA.<= /p>

=C2=A0

As we fir= st needed it in OSCORE Groupcomm, we have some proposed text for a IANA reg= istry that could be used:=C2=A0https://too= ls.ietf.org/html/draft-ietf-core-oscore-groupcomm-05#section-9.1= =C2=A0. Since this is more general and we need this in other documents as w= ell (EDHOC), we think it would make more sense to add this to one of the ex= isting COSE specifications (draft-ietf-cose-rfc8152bis-algs?) or draft a ne= w COSE document covering this.

=C2=A0

We would = ask the WG to consider adding such an IANA registry, and would like your op= inion on where better to have this.

=C2=A0

Thanks,

Francesca=

=C2=A0

=C2=A0

_______________________________________________
COSE mail= ing list
COSE@ietf.org
https://www.ietf.org/= mailman/listinfo/cose

--000000000000153acc05951cf834-- From nobody Sun Oct 20 02:46:17 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2AB041200B9; Sun, 20 Oct 2019 02:45:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bRT3i_dpv6Pq; Sun, 20 Oct 2019 02:45:52 -0700 (PDT) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A52251200A4; Sun, 20 Oct 2019 02:45:51 -0700 (PDT) Received: from pptp-218-1.informatik.uni-bremen.de (pptp-218-1.informatik.uni-bremen.de [134.102.218.240]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 46wvyz2chrz10Ct; Sun, 20 Oct 2019 11:45:45 +0200 (CEST) From: Carsten Bormann Content-Type: text/plain; charset=utf-8 X-Mao-Original-Outgoing-Id: 593257539.733766-d395d753ad3a587fd75d4cba39dda151 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Sun, 20 Oct 2019 11:45:42 +0200 Message-Id: To: Ace Wg , core , cose , cbor@ietf.org, t2trg@irtf.org X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: [COSE] Constrained Node/Network Cluster @ IETF106: DRAFT AGENDA X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Oct 2019 09:45:56 -0000 Here is my usual eclectic condensed agenda based on the DRAFT AGENDA for IETF106. Remember that there is still quite some potential for changes. Conflicts that meet the eye: LAKE/SUIT (already noted by Russ), BOF on top (thing security): TMRID. ACE/RATS are also both security technologies that impact IoT. COSE is a technology that might be relevant for WPACK. All times are SGT (Singapore Time) =3D=3D UTC + 8 hours (=3D=3D China = time). Singapore doesn't obey the daylight savings myth. (Pure UTC times at https://datatracker.ietf.org/meeting/agenda-utc are useful for those who want to listen from remote.) Gr=C3=BC=C3=9Fe, Carsten FRIDAY, November 15, 2019 -- T2TRG/W3C WoT Workshop @ NUSS (https://is.gd/XWSfi8) SATURDAY, November 16, 2019 0830-2200 IETF Hackathon - Moor/Morrison SUNDAY, November 17, 2019 0830-1600 IETF Hackathon - Moor/Morrison 1700-1900 Welcome Reception - Fairmont Ballroom Foyer 1800-2000 Hot RFC Lightning Talks -- Padang MONDAY, November 18, 2019 1000-1200 Morning Session I Collyer ART dispatch Dispatch WG - Joint with ARTAREA Sophia IRTF icnrg Information-Centric Networking VIP A SEC *** rats Remote ATtestation ProcedureS WG 1330-1530 Afternoon Session I VIP A INT dnssd Extensions for Scalable DNS Service = Discovery WG - Joint with HOMENET VIP A INT homenet Home Networking WG - Joint with DNSSD Hullet INT *** lpwan IPv6 over Low Power Wide-Area Networks = WG Olivia IRTF*** dinrg Decentralized Internet Infrastructure Canning IRTF pearg Privacy Enhancements and Assessments = Research Group Padang SEC txauth Transactional Authorization and = Delegation BOF Sophia TSV tsvwg Transport Area Working Group WG 1550-1750 Afternoon Session II Collyer ART abcd Application Behavior Considering DNS BOF Padang IRTF irtfopen IRTF Open Meeting Sophia OPS v6ops IPv6 Operations WG Orchard RTG *** roll Routing Over Low power and Lossy = networks WG Canning SEC mls Messaging Layer Security WG 1810-1910 Afternoon Session III Canning INT *** lwig Light-Weight Implementation Guidance WG Olivia TSV rmcat RTP Media Congestion Avoidance = Techniques WG TUESDAY, November 19, 2019 1000-1200 Morning Session I Hullet RTG *** roll Routing Over Low power and Lossy = networks WG Olivia SEC *** teep Trusted Execution Environment = Provisioning WG Padang TSV quic QUIC WG 1330-1500 Afternoon Session I VIP A INT tmrid Trustworthy Multipurpose Remote ID BOF Padang IRTF maprg Measurement and Analysis for Protocols Canning SEC *** lake Lightweight Authenticated Key Exchange = WG Olivia SEC *** suit Software Updates for Internet of Things = WG 1520-1650 Afternoon Session II Canning INT intarea Internet Area Working Group WG Olivia SEC *** ace Authentication and Authorization for = Constrained Environments WG VIP A SEC *** rats Remote ATtestation ProcedureS WG Hullet TSV taps Transport Services WG 1710-1840 Afternoon Session III Hullet IRTF qirg Quantum Internet Proposed Research Group Sophia OPS anima Autonomic Networking Integrated Model = and Approach WG Orchard RTG babel Babel routing protocol WG Padang SEC secdispatch Security Dispatch WG WEDNESDAY, November 20, 2019 1000-1200 Morning Session I Collyer RTG raw Reliable and Available Wireless BOF Sophia SEC *** teep Trusted Execution Environment = Provisioning WG Padang TSV quic QUIC WG 1330-1500 Afternoon Session I Canning ART webtrans WebTransport BOF Sophia INT *** 6lo IPv6 over Networks of = Resource-constrained Nodes WG Collyer IRTF cfrg Crypto Forum Olivia SEC oauth Web Authorization Protocol WG 1520-1650 Afternoon Session II Orchard ART *** core Constrained RESTful Environments WG Hullet OPS anima Autonomic Networking Integrated Model = and Approach WG Collyer SEC tls Transport Layer Security WG Sophia TSV tsvarea Transport Area Open Meeting THURSDAY, November 21, 2019 1000-1200 Morning Session I Sophia IRTF*** t2trg Thing-to-Thing VIP A RTG bier Bit Indexed Explicit Replication WG Padang SEC tls Transport Layer Security WG Collyer TSV tsvwg Transport Area Working Group WG 1330-1530 Afternoon Session I Collyer ART httpbis Hypertext Transfer Protocol WG Sophia INT 6man IPv6 Maintenance WG Olivia RTG rift Routing In Fat Trees WG Canning SEC saag Security Area Open Meeting 1550-1720 Afternoon Session II Padang ART wpack Web Packaging BOF Canning RTG detnet Deterministic Networking WG Sophia SEC *** cose CBOR Object Signing and Encryption WG Hullet SEC oauth Web Authorization Protocol WG 1740-1840 Afternoon Session III Olivia ART *** cbor Concise Binary Object Representation = Maintenance and Extensions WG Sophia GEN git GitHub Integration and Tooling WG Padang INT 6man IPv6 Maintenance WG Canning RTG detnet Deterministic Networking WG FRIDAY, November 22, 2019 1000-1200 Morning Session I Collyer ART httpbis Hypertext Transfer Protocol WG Hullet INT *** 6tisch IPv6 over the TSCH mode of IEEE = 802.15.4e WG Sophia IRTF coinrg Computing in the Network Proposed = Research Group Olivia SEC mathmesh MatheMatical Mesh BOF 1220-1350 Morning Session II Hullet ART *** core Constrained RESTful Environments WG Sophia IRTF panrg Path Aware Networking RG Olivia SEC acme Automated Certificate Management = Environment WG From nobody Mon Oct 21 14:11:34 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F28A12001A for ; Mon, 21 Oct 2019 14:11:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.991 X-Spam-Level: X-Spam-Status: No, score=-1.991 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ikwdDYY1dQF2 for ; Mon, 21 Oct 2019 14:11:30 -0700 (PDT) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-eopbgr650130.outbound.protection.outlook.com [40.107.65.130]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3A5D4120019 for ; Mon, 21 Oct 2019 14:11:30 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=KOy2yM9fZdjiBuDlIrbvwul68RAA6GNOW/NthfT40ZGn5rUzSqy1fgLUH4B7pma3+6mAYzuVjiIbJ6IluSRxlA31Lp9dsB13JZL2GywRPQAVS3Jxa/s+nCdy3bZbGTjcQJ8uyTVc3fWMJkzotQZl4XfZ4PAzoX55nrA2l9JLCo7g5H7K3pE7lUVyo1FpJIjx/GHwKcHaN/EUX/Ns62+LFPmYP98TvsiE+3Dh1NhS9tCW2a3OVZKtXjQHHuaX9L1ETfp2yRZ/DjF1vkt+xYQF1kU4gGAga1zgGKNUGBvXcgxiv0ADP+fdje0LJgXegNPHoHm0IVt2BBwkMZaqpMdAAA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=RfoJkhYB9fghMiZSCXacx98/DkKsUdLdjxUpgkrulvc=; b=oWFFFs8NamobcO7/T/bNwqnZsp5Om5DD94pbn9fyYCFVhy//InpMCDjNxz4YCPSh0xN0PNydP6SVAYerPi8CoVI8asWY3i8mQHF5ouB2ZRxTimSNAJ+EjkHmMCLXho0S/Wb5gam9pV57SWjQwYZhv9jXRRpvyTN0tledXRtgsyHXx1aHoCtsff7VAXOnTBLGmDsPfvci8DqeF+JoNIvaJrn20petfMVWg4ZB5NpgMZGjSl7fox9x9X93/IWyk4UwORxsNXYKg8SXw35bJzdHzGG06iGLoGhjigkiSBjrnK8lAzMpE26k//GKms/fG6dxgCIoj7GpzQ79ZPrNrbUNtQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=RfoJkhYB9fghMiZSCXacx98/DkKsUdLdjxUpgkrulvc=; b=fuMsVTFjEfsPcnrvszVuVxwovNcp0dySWAWOyNPsg7E6ApnTt1MGMkRlRyHzozSpG7BI2aAcWop+S2G9IwSzG72FqKrG0UxgLd5l4Ybm+08JM6B1uBhXn0S7kta51k1DLt0744obUyvRgdYSLBnNY7U+07uzg0u4kQCbRV/MRyM= Received: from BN8PR00MB0563.namprd00.prod.outlook.com (20.179.72.150) by BN8PR00MB0612.namprd00.prod.outlook.com (20.179.73.76) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2422.0; Mon, 21 Oct 2019 21:11:27 +0000 Received: from BN8PR00MB0563.namprd00.prod.outlook.com ([fe80::e17f:be07:82a2:12db]) by BN8PR00MB0563.namprd00.prod.outlook.com ([fe80::e17f:be07:82a2:12db%9]) with mapi id 15.20.2421.000; Mon, 21 Oct 2019 21:11:27 +0000 From: Mike Jones To: "J.C. Jones" , "cose@ietf.org" CC: Kevin Jacobs Thread-Topic: [COSE] Feedback on draft-ietf-cose-webauthn-algorithms-01 Thread-Index: AQHVU66TKD2WR3BhR0ifVYYdgx1ae6dl/77g Date: Mon, 21 Oct 2019 21:11:27 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=d7727fdc-2fd5-414f-9d6b-00001fb4df13; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-10-21T21:07:32Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [24.18.207.73] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 0070a05c-a527-4e30-69e0-08d7566b3ce6 x-ms-office365-filtering-ht: Tenant x-ms-traffictypediagnostic: BN8PR00MB0612: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0197AFBD92 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(396003)(39860400002)(366004)(136003)(346002)(376002)(199004)(189003)(51914003)(13464003)(256004)(186003)(10290500003)(14444005)(6246003)(26005)(71200400001)(33656002)(5660300002)(4326008)(66066001)(10090500001)(486006)(8990500004)(478600001)(476003)(606006)(81166006)(8676002)(52536014)(81156014)(2501003)(8936002)(446003)(76116006)(11346002)(66476007)(66946007)(66446008)(71190400001)(25786009)(53546011)(9686003)(6306002)(229853002)(236005)(7736002)(7696005)(74316002)(6506007)(86362001)(54896002)(102836004)(6436002)(790700001)(3846002)(966005)(6116002)(55016002)(316002)(22452003)(110136005)(14454004)(66556008)(76176011)(64756008)(2906002)(99286004); DIR:OUT; SFP:1102; SCL:1; SRVR:BN8PR00MB0612; H:BN8PR00MB0563.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: IRzobfM4MJpRHLGYQDx2N4Tuc2OmYwyuRrfqi7373z0i2Wmln9vVm62iiXLKQCKE51fVjWl1VcRSclLZ+sWNTmJsijR0y6Qag2P7mjbefJqV0VZiA9h4j2KATrKSSjf6aQ9IW+MOBobztlnfbrKPoV7/sPVLigsGDJrG0R/rIxLvk2VvT0Q9JxrYA13FbDXMAf+WusTijzVnN1ikYu5gltZbcKdVeA0SmkZNoPvLEBz+l9SyvMN0BEfL8VaTx5laOdRQn70lMfgfXoIOhQuAIX9XZJKBbTx6eNShANlfIXrntReS4EMesR021VCEpce6joDbgDyYphEbq7XGO6dIYCeZas841RP5C+q6T+IxbbxOoQuCgdDyoi35TFu9zCqsjn2rBt9KPIobFqBWKa3/nqFSe5IMJ+vha85YwnP+hCNQmirRc0X1KDO4nsUYSpXS x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BN8PR00MB05638BD3633D5CFC31B6C325F5690BN8PR00MB0563namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 0070a05c-a527-4e30-69e0-08d7566b3ce6 X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Oct 2019 21:11:27.7498 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: oNVOVM3ZpiWLvf59msPrMG1Ursv/eNeHLhz4uOAvgjCUQzjOnQfYi+fLrjFFHAb64pgoUutDqbjeLHFS1H/BSQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN8PR00MB0612 Archived-At: Subject: Re: [COSE] Feedback on draft-ietf-cose-webauthn-algorithms-01 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Oct 2019 21:11:32 -0000 --_000_BN8PR00MB05638BD3633D5CFC31B6C325F5690BN8PR00MB0563namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Thanks for the review, J.C. and Kevin. Replies are inline below, prefixed = by "Mike>". Best wishes, -- Mike -----Original Message----- From: COSE On Behalf Of J.C. Jones Sent: Thursday, August 15, 2019 2:15 PM To: cose@ietf.org Cc: Kevin Jacobs Subject: [COSE] Feedback on draft-ietf-cose-webauthn-algorithms-01 All, We reviewed draft-ietf-cose-webauthn-algorithms-01 and only have pair of co= mments about the security considerations. Regarding section 5.3: While section 5.2 refers to RFC7518's guidance, currently 5.3 does not. Per= haps note in 5.3 something akin to "if you have an existing implementation,= the exponent restrictions from RFC7518 also apply." Mike> Good suggestion. I'd be glad to do that. Regarding section 5.4: The first sentence uses the FIPS186-3 form P-256 when everything else in th= is document would imply we'd refer to it as secp256r1, though rfc8152bis us= es the P-256 form. Perhaps all readers of this document would be able to av= oid confusion, but since it's a section _about_ confusion, it seems worth p= ointing out. Perhaps a parenthetical could be added? Mike> I propose to add a reference to "[RFC 7518]" after "P-256" to make it= clear where the definition that we are using originates. Kevin Jacobs and J.C. Jones _______________________________________________ COSE mailing list COSE@ietf.org https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.iet= f.org%2Fmailman%2Flistinfo%2Fcose&data=3D02%7C01%7CMichael.Jones%40micr= osoft.com%7Ca35cc1dc6c6549ca013108d721c5b465%7C72f988bf86f141af91ab2d7cd011= db47%7C1%7C0%7C637015005331095019&sdata=3DMtpdnZjpVDYvFS2Tr0mfFalyhw%2F= iyYQk9H7uKwJGRk8%3D&reserved=3D0 --_000_BN8PR00MB05638BD3633D5CFC31B6C325F5690BN8PR00MB0563namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Thanks for the review, J.C. and Kevin.  Repl= ies are inline below, prefixed by “Mike= >”.

 

        &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p;         Best wishes,<= /p>

        &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p;         -- Mike

 

-----Original Message-----
From: COSE <cose-bounces@ietf.org> On Behalf Of J.C. Jones
Sent: Thursday, August 15, 2019 2:15 PM
To: cose@ietf.org
Cc: Kevin Jacobs <kjacobs@mozilla.com>
Subject: [COSE] Feedback on draft-ietf-cose-webauthn-algorithms-01

 

All,

 

We reviewed draft-ietf-cose-webauthn-algorithms-0= 1 and only have pair of comments about the security considerations.

 

Regarding section 5.3:

 

While section 5.2 refers to RFC7518's guidance, c= urrently 5.3 does not. Perhaps note in 5.3 something akin to "if you h= ave an existing implementation, the exponent restrictions from RFC7518 also= apply."

 

Mike> Good sugge= stion.  I’d be glad to do that.

 

Regarding section 5.4:

 

The first sentence uses the FIPS186-3 form P-256 = when everything else in this document would imply we'd refer to it as secp2= 56r1, though rfc8152bis uses the P-256 form. Perhaps all readers of this do= cument would be able to avoid confusion, but since it's a section _about_ confusion, it seems worth pointing out. P= erhaps a parenthetical could be added?

 

Mike> I propose = to add a reference to “[RFC 7518]” after “P-256” to= make it clear where the definition that we are using originates.

 

Kevin Jacobs and J.C. Jones

 

_______________________________________________

COSE mailing list

COSE@ietf.org

https://n= am06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.ietf.org%2Fm= ailman%2Flistinfo%2Fcose&amp;data=3D02%7C01%7CMichael.Jones%40microsoft= .com%7Ca35cc1dc6c6549ca013108d721c5b465%7C72f988bf86f141af91ab2d7cd011db47%= 7C1%7C0%7C637015005331095019&amp;sdata=3DMtpdnZjpVDYvFS2Tr0mfFalyhw%2Fi= yYQk9H7uKwJGRk8%3D&amp;reserved=3D0

--_000_BN8PR00MB05638BD3633D5CFC31B6C325F5690BN8PR00MB0563namp_-- From nobody Mon Oct 21 16:59:59 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 88D0A120A7E; Mon, 21 Oct 2019 16:59:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ziWJLOOjjF1j; Mon, 21 Oct 2019 16:59:49 -0700 (PDT) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-eopbgr650126.outbound.protection.outlook.com [40.107.65.126]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D072A120A7A; Mon, 21 Oct 2019 16:59:45 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=BlY6hy+/GHGny2xT3LXFcIcO4dyr5o+5Q++urCokbjSWagxbt2qUHG/piV8IsGvSeuqOKT5QkgsXJiKYonBuHHowOefj+P8aWvWkAdWOGoqHzXDOmd4znz3uKaw5Rkj/9x6qfIIQj6Zf9HM0pUdqKxLFVgmizVE+EuNq5gcYYP88g3Sg7WU8KqU+YP+CyN8NKtB2kdeOrScgpuD97igRp6mnPCzOvCwD6RKMG6tSglSB160tq/9/FZrWmTuRoffx7V51HByZmsz3ItGJGoEmTNlFFaOJ4+eJMMy6Oy2vEacFluuq7Gt9/ISHVmNQcBXgJEODbsXe0f9CcxXdOV5vLA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=qq/VgH/ugDNtKzCVmhvT/JjjCBlvZV5iK88XGRE9oIE=; b=SmgWlsDyPoLctZRflF6R1W2u3RZw3aFltDj31e+MSTZ867VmTqqUvkfuOVPtn+1r1uWNouniLvBD4vCO2lI4fDhmHV0ZO+7gP0djAIt2m3EHujIBSMCia2AbrXoinyMy8EhtvEwNUF35ajqqL1OtILAem1XeuNyEq5nhfEkWru/Z/vzQf7AcxOErc9typY9O2Fk7RWegtySYa33l2cG7yCbGjdTtL/ZIR80vWdQ4pMxWUvryys/PRjhRzw7fACvJLcM8cZVJY0w2plhWmU7j4ywZo4bNbkX6QLsr8o0yGoerNUm8rUR5RQiIVo7yeUXw6y58bbMzyY2kUgo16mulFg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=qq/VgH/ugDNtKzCVmhvT/JjjCBlvZV5iK88XGRE9oIE=; b=f2lFLIv0ItRl8DYyNWLQDlBI0W+ZgGsnnJXSD0S5jgzKGWRzpzzGQc2UIEX6ca7zfzMqdRvmOuBFcaMi214sRiHWt4grJnXWUBrH1rRUsCdf2Z3a60IjLhxw38fh0fmwJVbTshiKTh5hh7xtmJwSuvPmVgokUc7PY7xDFnDGybE= Received: from BN8PR00MB0563.namprd00.prod.outlook.com (20.179.72.150) by BN8PR00MB0595.namprd00.prod.outlook.com (20.179.73.11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2422.0; Mon, 21 Oct 2019 23:59:41 +0000 Received: from BN8PR00MB0563.namprd00.prod.outlook.com ([fe80::e17f:be07:82a2:12db]) by BN8PR00MB0563.namprd00.prod.outlook.com ([fe80::e17f:be07:82a2:12db%9]) with mapi id 15.20.2421.000; Mon, 21 Oct 2019 23:59:41 +0000 From: Mike Jones To: Jim Schaad , 'cose' CC: "draft-ietf-cose-webauthn-algorithms@ietf.org" Thread-Topic: =?utf-8?B?W0NPU0VdIPCflJQgV0dMQyBvZiBkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4t?= =?utf-8?Q?algorithms?= Thread-Index: AQHVbWSlFBVJFlStCEe6sWSpGQx0gacwqvUAgDUjSdA= Date: Mon, 21 Oct 2019 23:59:40 +0000 Message-ID: References: <000001d56dc2$e14f20c0$a3ed6240$@augustcellars.com> In-Reply-To: <000001d56dc2$e14f20c0$a3ed6240$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=c44d03c6-2243-4e34-8e4e-00000af61e5a; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-10-21T21:14:25Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [75.151.116.174] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: a9b1b6b8-c189-4fe6-942c-08d75682bce1 x-ms-office365-filtering-ht: Tenant x-ms-traffictypediagnostic: BN8PR00MB0595: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0197AFBD92 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(396003)(346002)(136003)(376002)(39860400002)(366004)(199004)(189003)(74316002)(7696005)(7736002)(236005)(102836004)(86362001)(6506007)(54896002)(66946007)(66476007)(76116006)(6436002)(11346002)(6306002)(9686003)(229853002)(53546011)(71190400001)(25786009)(66446008)(2906002)(110136005)(66556008)(76176011)(64756008)(3846002)(55016002)(790700001)(6116002)(966005)(14454004)(99286004)(316002)(22452003)(6246003)(26005)(71200400001)(5660300002)(66066001)(10290500003)(33656002)(186003)(4326008)(14444005)(256004)(81156014)(606006)(52536014)(81166006)(8936002)(446003)(486006)(10090500001)(478600001)(476003)(8990500004); DIR:OUT; SFP:1102; SCL:1; SRVR:BN8PR00MB0595; H:BN8PR00MB0563.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: dHN6nzw94REY9BwHbJSVS/bQ2x2NlU+m/5gkaikwodJarHwofZaDp+QDMkXtHuDbO75mdWV2uZKch9PEK4EJjGAQqVJTg0RKIFNfY9ZkrQXh3uBN4/cawz/BfbGu4biglacrpfHlWIF85cb4TvzlH8MGZNzXJmD6Yb31SX6HC9Yh8WXm/6bN1z/qaQQW5qwM76RJjE51RKa/nYRnL2FeQ/VVPAnTb6A/PmpYeBtNtogDWVfeNckXIEcM+odmDvIqPo8MKtAhIvY7q2A0Oj9tEqWhVkWSmNF7Lba+H0CsMIJ/saUo3ldGz1JMUgFuipNiDCeZlBxqTMf8epQxEsyl7O4qfPomp4EIc7LM9MkucE2PUryoxq5RQwy8dY9MkGPouNQVaPGechuNi1XzUgWpkokgz/skiElxgkFVrFYs3cfEw7hnjj/ETs+6aZJFLOhN x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BN8PR00MB05639A215FF3352F58B31F0AF5690BN8PR00MB0563namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: a9b1b6b8-c189-4fe6-942c-08d75682bce1 X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Oct 2019 23:59:40.9032 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: oAYBQrh0bUtQRHnFT7+winVd/hr0cwGLt9SbJIt0zY1Bd/21pw1e0FsySJMbgNJzInlpDLQ3FJz5dltrZkYPTg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN8PR00MB0595 Archived-At: Subject: Re: [COSE] =?utf-8?q?=F0=9F=94=94_WGLC_of_draft-ietf-cose-webauthn-a?= =?utf-8?q?lgorithms?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 Oct 2019 23:59:54 -0000 --_000_BN8PR00MB05639A215FF3352F58B31F0AF5690BN8PR00MB0563namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIGZvciB5b3VyIHJldmlldywgSmltLiAgUmVzcG9uc2VzIGFyZSBpbmxpbmUsIHByZWZp eGVkIGJ5IOKAnE1pa2U+4oCdLg0KDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgLS0gTWlrZQ0KDQpGcm9tOiBKaW0gU2NoYWFkIDxpZXRmQGF1 Z3VzdGNlbGxhcnMuY29tPg0KU2VudDogVHVlc2RheSwgU2VwdGVtYmVyIDE3LCAyMDE5IDY6NDYg UE0NClRvOiAnY29zZScgPGNvc2VAaWV0Zi5vcmc+DQpDYzogZHJhZnQtaWV0Zi1jb3NlLXdlYmF1 dGhuLWFsZ29yaXRobXNAaWV0Zi5vcmcNClN1YmplY3Q6IFJFOiBbQ09TRV0g8J+UlCBXR0xDIG9m IGRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zDQoNCkkgc3RhcnQgdGhpcyByZXZp ZXcgYnkgY29weWluZyBmb3J3YXJkIGFsbCBvZiBteSBjb21tZW50cyBvbiBkcmFmdC1qb25lcy1j b3NlLWFkZGl0aW9uYWwtYWxnb3JpdGhtcy0wMA0KDQoxLiAgSSB3YXMgc3VycHJpc2VkIHRoYXQg dGhlcmUgYXJlIHR3byBhbGdvcml0aG1zIHN0aWxsIGluIHRoZSBXZWJBdXRobiBkb2N1bWVudCB0 aGF0IGFyZSBub3QgaW5jbHVkZWQgaGVyZS4gIElzIHRoYXQgaW50ZW50aW9uYWwgYW5kIHdoYXQg aXMgdGhlIHBsYW4gZm9yd2FyZCBmb3IgdGhlbT8gVGhpcyBvbmUgd2FzIGFkZHJlc3NlZA0KDQoN Cg0KMi4gIFRoZSB0aXRsZSBvZiB0aGUgZG9jdW1lbnQgaXMgbm90IGRlc2NyaXB0aXZlIGluIHRl cm1zIG9mIGEgc3RhbmRhbG9uZSBzZW50ZW5jZSBvbiB3aGF0IHRoaXMgZG9jdW1lbnQgaXMgZG9p bmcuICBJdCBzaG91bGQgYmUgbW9yZSBzcGVjaWZpYyBvbiB0aGUgYWxnb3JpdGhtcy4gIFRoZSBu ZXcgdGl0bGUgaXMgZmluZSBleGNlcHQgZm9yIHRoZSBmYWN0IHRoYXQgV2ViQXV0aG4gaXMgbm90 IGV4cGFuZGVkIHRvIGFueXRoaW5nLg0KDQoNCg0KMy4gIEFic3RyYWN0OiAgQSBsaXN0IG9mIHRo ZSBhbGdvcml0aG1zIGJlaW5nIHByb2Nlc3NlZCBpbiB0aGlzIGRvY3VtZW50IHdvdWxkIGJlIHJl YXNvbmFibGUuICBCYXNlZCBvbiB0aGUgY3VycmVudCB0ZXh0LCB0aGUgYWJzdHJhY3Qgd291bGQg bmVlZCB0byBiZSByZS13cml0dGVuIGFzIHNvb24gYXMgdGhlIGFsZ29yaXRobXMgYXJlIHJlZ2lz dGVyZWQgYmVjYXVzZSB0aGV5IHdvdWxkIHRoZW4gYmUgcmVnaXN0ZXJlZCBhbmQgdGh1cyB0aGUg c3BlY2lmaWNhdGlvbiBpcyBub3QgbmVjZXNzYXJ5LiAgSXQgd291bGQgYWxzbyBiZSBzbGlnaHRs eSBvZGQgaW4gdGhlIGV2ZW50IHRoYXQgdGhlIENUQVAgb3IgV2ViQXV0aG4gcHJvdG9jb2xzIGFy ZSB1cGRhdGVkIHRvIGFkZCBuZXcgYWxnb3JpdGhtcyBhcyB0aGV5IHdvdWxkIG5vdCBiZSBpbiB0 aGlzIGRvY3VtZW50LiAgKFNlZSBpc3N1ZSAjMS4pICBObyBDaGFuZ2UNCg0KDQoNCk1pa2U+IFVu ZGVyc3Rvb2QuICBJ4oCZbGwgcmV3b3JkIHNvIHRoYXQgdGhlIHRleHQgcmVtYWlucyBjb3JyZWN0 IGFmdGVyIHRoZSBJQU5BIHJlZ2lzdHJhdGlvbnMgaGF2ZSBiZWVuIHBlcmZvcm1lZC4NCg0KDQoN CjQuICBTZWN0aW9uIDE6ICBTZWUgYWJzdHJhY3QgY29tbWVudC4gIE5vIGNoYW5nZQ0KDQoNCg0K TWlrZT4gRGl0dG8NCg0KDQoNCjUuICBTZWN0aW9uIDI6IFRoZSByZWNvbW1lbmRlZCBjb2x1bW4g bmVlZHMgdG8gYmUgYWRkZWQgdG8gdGhlIHRhYmxlLiAgTm8gY2hhbmdlDQoNCg0KDQpNaWtlPiBJ IGFzc3VtZSB0aGUgY29sdW1uIHlvdeKAmXJlIHRhbGtpbmcgYWJvdXQgaXMgdGhlIG9uZSByZXF1 ZXN0ZWQgaW4gdGhlIG5leHQgY29tbWVudC4NCg0KDQoNCjYuICBTZWN0aW9uIDI6ICBUaGUgZGlz Y3Vzc2lvbiBvbiB3aGF0IGlzIGFuZCBpcyBub3QgcmVjb21tZW5kZWQgYW5kIHdoeSBiZWxvbmdz IGluIHRoaXMgc2VjdGlvbiBub3QgaW4gdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zLiAgTm8g Y2hhbmdlDQoNCg0KDQpNaWtlPiBPSywgSSBjYW4gYWRkIGFuIOKAnEltcGxlbWVudGF0aW9uIFJl cXVpcmVtZW50c+KAnSBjb2x1bW4sIHBhcmFsbGVsaW5nIHRoZSB0cmVhdG1lbnQgaW4gaHR0cHM6 Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzc1MTgjc2VjdGlvbi0zLjEuDQoNCg0KDQo3LiAgU2Vj dGlvbiAyOiBZb3UgYXJlIG1pc3Npbmcgc29tZSBjaGVja3MgdGhhdCBzaG91bGQgYmUgZG9uZSBv biBzaWduaW5nIGFuZCB2ZXJpZmljYXRpb24uICBMb29rIGF0IHRoZSBzdGFuZGFyZCB0ZXh0IGF0 IHRoZSBlbmQgb2Ygc2VjdGlvbnMgaW4gUkZDIDgxNTIgZm9yIGEgcGF0dGVybi4gIFlvdSBtaWdo dCBhbHNvIHdhbnQgdG8gYWRkIGEgY2hlY2sgb24gbGVuZ3RocyBvZiBrZXlzIGJvdGggZm9yIGEg bWF4aW11bSBhbmQgYSBtaW5pbXVtIGxlbmd0aC4gIE5vIGNoYW5nZQ0KDQoNCg0KTWlrZT4gS2V5 IHNpemUgY29uc2lkZXJhdGlvbnMgZm9yIHRoZSBSU0EgYWxnb3JpdGhtcyBhcmUgYWxyZWFkeSBj b3ZlcmVkIGluIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNvc2Utd2Vi YXV0aG4tYWxnb3JpdGhtcy0wMSNzZWN0aW9uLTUuMS4gIEZvciBFUzI1NkssIEkgY2FuIHNheSB0 aGF0IHRoZSBYIGFuZCBZIHZhbHVlcyBmb3IgdGhlIHB1YmxpYyBrZXkgbXVzdCBib3RoIGJlIGV4 YWN0bHkgMjU2IGJpdHMuICBXaGF0IGFyZSB0aGUgc3BlY2lmaWMgY2hlY2tzIHlvdSB3YW50ZWQg YWRkZWQ/ICBJIGNvdWxkbuKAmXQgdGVsbCB3aGljaCBzZWN0aW9ucyBvZiBSRkMgODE1MiB5b3Ug d2VyZSByZWZlcnJpbmcgdG8uICBBbHNvLCBub3RlIHRoYXQgYmV0d2VlbiBkcmFmdC1qb25lcy0w MCBhbmQgZHJhZnQtaWV0Zi0wMSwgdGhlIGRlc2NyaXB0aW9ucyBvZiB0aGUgdXNlIG9mIGhhc2gg ZnVuY3Rpb25zIHdlcmUgYmVlZmVkIHVwLCBpbiByZXNwb25zZSB0byBvdGhlciBjb21tZW50cyBy ZWNlaXZlZC4NCg0KDQoNCjguICBTZWN0aW9uIDM6ICBUaGlzIHNob3VsZCBub3QgYmUgdGhlIGZp cnN0IHVzZSBvZiBKT1NFIGFuZCBDT1NFIGFuZCB0aGVyZWZvcmUgdGhlIGV4cGFuc2lvbnMgaGVy ZSBtYWtlIG5vIHNlbnNlLiAgVGhhdCBzaG91bGQgYmUgaW4gdGhlIGludHJvZHVjdGlvbi4gIE5v IGNoYW5nZQ0KDQoNCg0KTWlrZT4gSeKAmWxsIGxvb2sgaW50byBleHBhbmRpbmcgYWJicmV2aWF0 aW9ucyBvbiBmaXJzdCB1c2VzIGFuZCBub3Qgb24gc3Vic2VxdWVudCB1c2VzLg0KDQoNCg0KOS4g U2VjdGlvbiAzLjE6ICBJIGhhdmUgb25seSByYXJlbHkgc2VlbiB0aGlzIGN1cnZlIGFzIFAtMjU2 SywgaXQgaXMgYWxtb3N0IGFsd2F5cyByZWZlcnJlZCB0byBhcyBzZWNwMjU2azEuICBJIHdvdWxk IGFzayB0aGF0IHRoaXMgYmUgY2hhbmdlZCBpbiB0aGUgQ09TRSByZXByZXNlbnRhdGlvbi4gIEkg YW0gYWdub3N0aWMgYWJvdXQgd2hhdCBzaG91bGQgYmUgaW4gdGhlIEpPU0UgcmVwcmVzZW50YXRp b24uICBGaXhlZA0KDQoNCg0KMTAuIFNlY3Rpb24gMy4xOiAgSSBkb24ndCB1bmRlcnN0YW5kIHRo ZSByZWFzb24gZm9yIHRoZSBsYXN0IHBhcmFncmFwaCBpbiB0aGUgc2VjdGlvbi4gIEl0IHNlZW1z IHRvIG1lIHRoYXQgdGhpcyBzaG91bGQganVzdCByZWZlciB0byBhbGwgb2YgdGhlIGl0ZW1zIGRl ZmluZWQgZm9yIEVDMiBpbiBDT1NFLiAgTm8gQ2hhbmdlDQoNCg0KDQpNaWtlPiBPSw0KDQoNCg0K MTEuIFNlY3Rpb24gMy4xOiAgSXMgdGhlcmUgYSByZWNvbW1lbmRhdGlvbiBvbiB1c2luZyBjb21w cmVzc2VkIHZzIG5vbi1jb21wcmVzc2VkIHBvaW50cz8gIE5vIGNoYW5nZQ0KDQoNCg0KTWlrZT4g SSB3aWxsIHN0YXRlIHRoYXQgdW5jb21wcmVzc2VkIHBvaW50IHJlcHJlc2VudGF0aW9ucyBhcmUg dG8gYmUgdXNlZCBmb3IgSldLcywgYXMgYSBjb21wcmVzc2VkIHJlcHJlc2VudGF0aW9uIGZvciBr ZXkgdHlwZSDigJxFQ+KAnSBpcyBub3QgZGVmaW5lZC4gIEFuZCBJIHdpbGwgc3RhdGUgdGhhdCB0 aGUgdW5jb21wcmVzc2VkIG11c3QgYWxzbyBiZSB1c2VkIGZvciBDV0tzLCBhcyBJIGRvbuKAmXQg a25vdyB0aGF0IHRoZSBHYWxvaXMgecKyID0geMKzICsgNyBmaW5pdGUgZmllbGQgZm9ybSB1c2Vk IHdpdGggc2VjcDI1NmsxIGlzIGFtZW5hYmxlIHRvIGNvbXByZXNzaW9uLiAgKEhvd2V2ZXIsIGlm IHRoZSBDUkZHIG9yIG90aGVyIGV4cGVydHMgdGVsbCBtZSB0aGF0IGl0IGlzLCBJIHdpbGwgYWxz byBhbGxvdyBmb3IgdGhlIGNvbXByZXNzZWQgcmVwcmVzZW50YXRpb24gd2l0aCBDT1NFLikNCg0K DQoNCjEyLiAgU2VjdGlvbiAzLjE6ICBZb3UgbmVlZCB0byB0YWxrIGFib3V0IGlmIHRoaXMgaXMg Z29pbmcgdG8gYmUgSUVURiByZWNvbW1lbmRlZCBvciBub3QuICAgKEFuZCB3aHkpICBObyBjaGFu Z2UNCg0KDQoNCk1pa2U+IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNv c2Utd2ViYXV0aG4tYWxnb3JpdGhtcy0wMSNzZWN0aW9uLTQuMSBoYXMgaXQgYmVpbmcgcmVjb21t ZW5kZWQuICBJIHdpbGwgZGVzY3JpYmUgd2h5IGluIHRoZSBuZXh0IHZlcnNpb24sIGFzIHJlcXVl c3RlZC4NCg0KDQoNCjEzLiAgU2VjdGlvbiAzLjI6ICBJIGRvbid0IHVuZGVyc3RhbmQgd2hhdCB0 aGlzIHNlY3Rpb24gaXMgZG9pbmcuICBJZiB5b3UgYXJlIHJlYWxseSBkZWZpbmluZyBhIG5ldyBz aWduYXR1cmUgYWxnb3JpdGhtLCB0aGVuIHRoYXQgc2hvdWxkIGJlIG5vdGVkIGFzIHBhcnQgb2Yg dGhlIHJlcXVpcmVtZW50cyBpbiBzZWN0aW9uIDMuMSBvbiB0aGUga2V5LiAgSWYgeW91IGFyZSBu b3QgZGVmaW5pbmcgYSBuZXcgc2lnbmF0dXJlIGFsZ29yaXRobSB0aGVuIHRoaXMgc2VjdGlvbiBt YWtlcyB6ZXJvIHNlbnNlLiAgKFlvdSBhcmUgbm90IHNheWluZyB3aGF0IHRoZSBoYXNoIGFsZ29y aXRobSBpcy4pICBCb3RoIG9wdGlvbnMgYXJlIHJlYXNvbmFibGUuICBUaGlzIGlzIHBhcnRseSBk ZWFsdCB3aXRoOg0KDQoNCg0KTWlrZT4gVGhpcyBpcyBpbnRlbnRpb25hbGx5IGV4YWN0bHkgcGFy YWxsZWwgdG8gUkZDIDc1MTgsIHdoaWNoIGRlZmluZXMgdGhlIOKAnEVTMjU24oCdIGFsZ29yaXRo bSBpZGVudGlmaWVyIHRvIGJlIHVzZWQgd2l0aCB0aGUg4oCcUC0yNTbigJ0gY3VydmUuICBJbiB0 aGlzIGNhc2UsIGl0IGlzIGRlZmluaW5nIHRoZSDigJxFUzI1NkvigJ0gYWxnb3JpdGhtIGlkZW50 aWZpZXIgdG8gYmUgdXNlZCB3aXRoIHRoZSDigJxzZWNwMjU2azHigJ0gY3VydmUuDQoNCg0KDQog IDEuICBTdGVwIDEgaXMgaW5jb3JyZWN0IGluIHRlcm1zIG9mIENPU0UsIGl0IGlzIG5vdCB0aGUg cGF5bG9hZCB0aGF0IGlzIHNpZ25lZC4NCg0KTWlrZT4gSeKAmWxsIHJldmlzZSB0aGUgZGVzY3Jp cHRpb24gaGVyZSB0byBhbGlnbiB3aXRoIGNvcnJlY3QgQ09TRSB0ZXJtaW5vbG9neS4NCg0KDQog IDEuICBUaGUgbmV3IHNpZ25hdHVyZSBhbGdvcml0aG0gaXMgYmVpbmcgZGVmaW5lZCB3aXRob3V0 IG1vdGl2YXRpb24uICBUaGVyZSBzaG91bGQgYmUgdGV4dCBkZXNjcmliaW5nIHdoeSB0aGlzIGlz IEVTMjU2SyBhbmQgbm90IEVTMjU2IChFQ0RTQSB3aXRoIFNIQS0yNTYpLiAgSSBkbyBub3RlIHRo YXQgdGhlcmUgbWF5IGJlIGRpZmZlcmVudCB0ZXh0IGJlaW5nIGRlc2NyaWJlZCBoZXJlIGZvciBK T1NFIHRoYW4gZm9yIENPU0UuDQoNCk1pa2U+IOKAnEVTMjU24oCdIGlzIGRlZmluZWQgYnkgUkZD IDc1MTggdG8gYmUgYWx3YXlzIHVzZWQgd2l0aCB0aGUgUC0yNTYgY3VydmUuICBBIGRpZmZlcmVu dCBhbGdvcml0aG0gaWRlbnRpZmllciBpcyB0aGVyZWZvcmUgcmVxdWlyZWQgdG8gdXNlIHdpdGgg c2VjcDI1NmsxLiAgVGhpcyBpcyBieSBkZXNpZ24uICBBbmQgdGhlIHVzZSBvZiBpZGVudGlmaWVy cyBpcyBiZWluZyBrZXB0IGludGVudGlvbmFsbHkgcGFyYWxsZWwgYmV0d2VlbiBKT1NFIGFuZCBD T1NFLg0KDQoNCiAgMS4gIFBsZWFzZSBpbmNsdWRlIHRleHQgcmVsYXRlZCB0byBkZXRlcm1pbmlz dGljIEVDRFNBIGluIHRoaXMgdGV4dC4NCg0KTWlrZT4gV2hhdCBkbyB5b3Ugd2FudCB0aGlzIHRl eHQgdG8gc2F5PyAgSeKAmW0gcmVsdWN0YW50IHRvIHVzZSB0aGUgdGV4dCBhdCBodHRwczovL3Rv b2xzLmlldGYub3JnL2h0bWwvcmZjODE1MiNzZWN0aW9uLTguMSwgd2hpY2ggc2F5cyB0aGF0IOKA nGltcGxlbWVudGF0aW9ucyBTSE9MVUQgdXNlIGEgZGV0ZXJtaW5pc3RpYyBhbGdvcml0aG3igJ0s IHdoaWNoIGlzIG1pc2xlYWRpbmcsIGluIHRoYXQgaXQgaW1wbGllcyB0aGF0IHRoZXJlIGFyZSBt YW55IHN1Y2ggYWxnb3JpdGhtcyB0aGF0IGNvdWxkIGJlIHVzZWQuICBJbiBmYWN0LCBleGFjdGx5 IG9uZSBpcyBiZWluZyBzcGVjaWZpZWQuDQoNCg0KICAxLiAgVGV4dCBzaW1pbGFyIHRvIHRoZSBl bmQgb2Ygc2VjdGlvbiAyLjEgaW4gZHJhZnQtaWV0Zi1jb3NlLXJmYzgxNTJiaXMtYWxncyBzaG91 bGQgYmUgaW5jbHVkZWQgdG8gbmFpbCB0aGluZ3MgZG93biB0aWdodGVyDQoNCg0KTWlrZT4gQXJl IHlvdSB0YWxraW5nIGFib3V0IHRoZSB0ZXh0IHN0YXJ0aW5nIOKAnFdoZW4gdXNpbmcgYSBDT1NF IGtleSBmb3IgdGhpcyBhbGdvcml0aG0sIHRoZSBmb2xsb3dpbmcgY2hlY2tzIGFyZSBtYWRlOuKA nT8gIEFyZSB5b3UgcmVxdWVzdGluZyB0aG9zZSBzYW1lIGNoZWNrcz8NCg0KDQoNCjE0LiBTZWN0 aW9uIDMuMjogIElmIHRoaXMgaXMgYSBuZXcgc2lnbmF0dXJlIGFsZ29yaXRobSB0aGVuIGl0IHNo b3VsZCBzYXkgd2hhdCBjdXJ2ZXMgaXQgb3BlcmF0ZXMgd2l0aC4gIEVsc2UgdGhlcmUgc2hvdWxk IGJlIGFuIGFkZGl0aW9uIG9mIHRoZSBhbGdvcml0aG1zIHRoYXQgYXJlIGxlZ2FsIGluIHNlY3Rp b24gMy4xIERvbmUsIGJ1dCBzZWUgY29tbWVudCAxMw0KDQoNCg0KMTUuICBTZWN0aW9uIDQuMSAt IFRoZSBjb3JyZWN0IHRlcm0gaXMgJ3Byb3Zpc2lvbmFsJyBub3QgJ3RlbXBvcmFyeScuIE5vdCBv ZiBzdWZmaWNpZW50IGltcG9ydGFuY2UgdG8gd29ycnkgYWJvdXQuICBIb3dldmVyIHlvdSBjYW4g anVzdCB1c2UgdGhlIHByb3Zpc2lvbmFsIG51bWJlcnMgd2l0aG91dCBhbnkgY29tbWVudCBvciBU QkQgZ2l2ZW4gdGhleSBhcmUgYXNzaWduZWQuDQoNCg0KDQoxNi4gU2VjdGlvbiA1LjQgLSBTbyBp ZiBzb21lYm9keSBjaGFuZ2VzIHRoZSBjcnYgdmFsdWUsIGlzIHRoZXJlIGFueSB3YXkgdG8gdGVs bCB0aGUgZGlmZmVyZW5jZT8gIElmIHNvIHRoZW4gdGhhdCBzaG91bGQgYmUgZGVzY3JpYmVkIGhl cmUuICBObyBjaGFuZ2UNCg0KDQpNaWtlPiBUaGUgd2F5IHRoYXQgeW91IGNhbiB0ZWxsIHRoYXQg dGhlIOKAnGNyduKAnSB2YWx1ZSBoYXMgYmVlbiBjaGFuZ2VkIGlzIHRoYXQg4oCcY3J24oCdIHBh cmFtZXRlciB3aWxsIGhhdmUgYSBkaWZmZXJlbnQgdmFsdWUuICBUaGF04oCZcyBzbyBzaW1wbGUg YXMgdG8gYmUgcHJhY3RpY2FsbHkgdGF1dG9sb2dpY2FsIGFuZCBub3Qgd29ydGggZXhwbGljaXRs eSBzYXlpbmcuICBJ4oCZbSBndWVzc2luZyB5b3Ugd2FudCBtZSB0byBzYXkgc29tZXRoaW5nIGVs c2UsIGJ1dCBJIGRvbuKAmXQga25vdyB3aGF0IGl0IGlzLg0KDQoNCg0KMTcuICBTZWN0aW9uIDUu MyAtIFRoaXMgdGV4dCBzZWVtcyB0byBiZSBzZWxmLWNvbnRyYWRpY3RvcnkuICBJZiB5b3UgTVVT VCBOT1QgdXNlIGl0LCB0aGVuIGhvdyBjYW4geW91IHRoZW4gdXNlIGl0PyAgSG93IGRvZXMgYW4g aW1wbGVtZW50YXRpb24ga25vdyB3aGVuIGl0IGlzIG9yIGlzIG5vdCBhY2NlcHRhYmxlIHByYWN0 aWNlIHRvIHVzZSB0aGlzPyAgTm8gY2hhbmdlDQoNCg0KTWlrZT4gSSB3aWxsIGFkZCB0aGUgZGVz Y3JpcHRpb24gYWdyZWVkIHRvIGluIHRoZSBvbi1saXN0IGNvbnZlcnNhdGlvbiB3aXRoIE5laWwg TWFkZGVuLg0KDQpOZXcgSXRlbXM6DQoNCjE4LiAgRklETzIgbm90IGV4cGFuZGVkIG9uIGZpcnN0 IHVzZSBpbiBhYnN0cmFjdCBhbmQgaW50cm9kdWN0aW9uLiAgIERpdHRvIGZvciBXZWJBdXRobiwg Q09TRSwNCg0KDQpNaWtlPiBXaWxsIGRvDQoNCjE5LiAgQWJzdHJhY3QgZG9lcyBub3QgcmVmZXIg dG8gSlNPTiDigJMgc2hvdWxkIGl0Pw0KDQoNCk1pa2U+IEnigJlsbCBsb29rIGludG8gZWRpdG9y aWFsbHkgd2hlcmUgdG8gYmVzdCBpbnRyb2R1Y2UgSlNPTi4NCg0KMjAuICBTaG91bGQgYmUgcG9p bnRpbmcgdG8gdGhlIGN1cnJlbnQgZHJhZnRzIGFuZCBub3QgdG8gUkZDIDgxNTIgaW4gdGhpcyBk b2N1bWVudC4NCg0KDQpNaWtlPiBJ4oCZbGwgcGxhbiB0byB1cGRhdGUgdGhpcyBzcGVjaWZpY2F0 aW9uIG9uY2UgdGhlIGJpcyB2ZXJzaW9ucyBhcmUgUkZDcy4gIEJ1dCB0aGVyZeKAmXMgbm8gbmVl ZCB0byB0YWtlIGEgbm9ybWF0aXZlIGRlcGVuZGVuY2Ugb24gdGhlIG5ldyB2ZXJzaW9ucywgYXMg dGhpcyBzcGVjIHVzZXMgbm90aGluZyBuZXcgYmVpbmcgaW50cm9kdWNlZCBieSB0aGVtLg0KDQoy MS4gIEdpdmVuIHRoYXQgdGhlIGFsZ29yaXRobXMgaW4gc2VjdGlvbiAyIGFyZSBhbHJlYWR5IGRl ZmluZWQgaW4gSk9TRSwgdGhlcmUgc2hvdWxkIGJlIHRleHQgdGhhdCB0aGlzIHNlY3Rpb24gb25s eSBhcHBsaWVzIHRvIENPU0Ugc28gdGhlcmUgaXMgbm8gY29uZnVzaW9uLg0KDQoNCk1pa2U+IFN1 cmUNCg0KSmltDQoNCg0KRnJvbTogQ09TRSA8Y29zZS1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpj b3NlLWJvdW5jZXNAaWV0Zi5vcmc+PiBPbiBCZWhhbGYgT2YgaXZheWxvIHBldHJvdg0KU2VudDog VHVlc2RheSwgU2VwdGVtYmVyIDE3LCAyMDE5IDc6MzEgQU0NClRvOiBjb3NlIDxjb3NlQGlldGYu b3JnPG1haWx0bzpjb3NlQGlldGYub3JnPj4NClN1YmplY3Q6IFtDT1NFXSDwn5SUIFdHTEMgb2Yg ZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXMNCg0KRGVhciBhbGwsDQoNClRoaXMg bWVzc2FnZSBzdGFydHMgdGhlIFdvcmtpbmcgR3JvdXAgTGFzdCBDYWxsIG9uIHRoZSBkcmFmdC1p ZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtcyBbMV0uDQoNClRoZSB3b3JraW5nIGdyb3VwIGxh c3QgY2FsbCB3aWxsIHJ1biBmb3IgKip0d28gd2Vla3MqKiwgZW5kaW5nIG9uDQpPY3RvYmVyIDEs IDIwMTkuDQoNClBsZWFzZSByZXZpZXcgYW5kIHNlbmQgYW55IGNvbW1lbnRzIG9yIGZlZWRiYWNr IHRvIHRoZSB3b3JraW5nIGdyb3VwLiBFdmVuIGlmIHlvdXIgZmVlZGJhY2sgaXMgInRoaXMgaXMg cmVhZHkiLCBwbGVhc2UgbGV0IHVzIGtub3cuDQoNClRoYW5rIHlvdSwNCg0KLSBNYXR0aGV3IGFu ZCBJdmF5bG8NCkNPU0UgQ2hhaXJzDQoNClsxXTogaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9y Zy9kb2MvZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXMvPGh0dHBzOi8vbmFtMDYu c2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRmRhdGF0 cmFja2VyLmlldGYub3JnJTJGZG9jJTJGZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRo bXMlMkYmZGF0YT0wMiU3QzAxJTdDTWljaGFlbC5Kb25lcyU0MG1pY3Jvc29mdC5jb20lN0NiNjUz MDZlMDU0ZGY0YTY4Y2M0YjA4ZDczYmRhMGM5MyU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2Qw MTFkYjQ3JTdDMSU3QzElN0M2MzcwNDM2ODAwMTM5MjUxNDEmc2RhdGE9TXB5RlFmME1keGQ2UEVY dE5VSkpMSkJqU0RXR2FjZkxuQ0lFc01CVHFoZyUzRCZyZXNlcnZlZD0wPg0K --_000_BN8PR00MB05639A215FF3352F58B31F0AF5690BN8PR00MB0563namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpWZXJkYW5hOw0KCXBhbm9zZS0xOjIgMTEg NiA0IDMgNSA0IDQgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlNlZ29lIFVJIEVt b2ppIjsNCglwYW5vc2UtMToyIDExIDUgMiA0IDIgNCAyIDIgMzt9DQpAZm9udC1mYWNlDQoJe2Zv bnQtZmFtaWx5OkNvbnNvbGFzOw0KCXBhbm9zZS0xOjIgMTEgNiA5IDIgMiA0IDMgMiA0O30NCi8q IFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNv Tm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6 ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBz cGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsN Cgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxp bmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRl eHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5Nc29QbGFpblRleHQsIGxpLk1zb1BsYWluVGV4 dCwgZGl2Lk1zb1BsYWluVGV4dA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxl LWxpbms6IlBsYWluIFRleHQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4w MDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1z ZXJpZjt9DQpwLk1zb0xpc3RQYXJhZ3JhcGgsIGxpLk1zb0xpc3RQYXJhZ3JhcGgsIGRpdi5Nc29M aXN0UGFyYWdyYXBoDQoJe21zby1zdHlsZS1wcmlvcml0eTozNDsNCgltYXJnaW4tdG9wOjBpbjsN CgltYXJnaW4tcmlnaHQ6MGluOw0KCW1hcmdpbi1ib3R0b206MGluOw0KCW1hcmdpbi1sZWZ0Oi41 aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1m YW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWww LCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdp bi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZh bWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLlBsYWluVGV4dENoYXINCgl7bXNvLXN0 eWxlLW5hbWU6IlBsYWluIFRleHQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1z by1zdHlsZS1saW5rOiJQbGFpbiBUZXh0IjsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1z ZXJpZjt9DQpzcGFuLkVtYWlsU3R5bGUyMQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglm b250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNw YW4uRW1haWxTdHlsZTIyDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQt ZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOiMwMDIwNjA7fQ0KLk1zb0NocERl ZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9 DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGlu IDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlv bjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6Mjc3 NDk0MzM0Ow0KCW1zby1saXN0LXRlbXBsYXRlLWlkczoxMTc5Nzg1MzA2O30NCkBsaXN0IGwwOmxl dmVsMQ0KCXttc28tbGV2ZWwtc3RhcnQtYXQ6MjsNCgltc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDph bHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsMg0K CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6MS4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxw aGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEuNWluOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3Rv cDoyLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LS4yNWluO30NCkBsaXN0IGwwOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBo YS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9w OjMuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot LjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhh LXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDozLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsOA0KCXtt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 NC4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0u MjVpbjt9DQpAbGlzdCBsMDpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEt dXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDENCgl7bXNvLWxpc3Qt aWQ6Mjk2MTA5NjU3Ow0KCW1zby1saXN0LXRlbXBsYXRlLWlkczotNjkyNzMwODY7fQ0KQGxpc3Qg bDE6bGV2ZWwxDQoJe21zby1sZXZlbC1zdGFydC1hdDozOw0KCW1zby1sZXZlbC1udW1iZXItZm9y bWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDouNWluOw0KCW1zby1sZXZlbC1u dW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDE6bGV2 ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10 YWItc3RvcDoxLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1p bmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS41aW47DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMTpsZXZl bDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRh Yi1zdG9wOjIuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotLjI1aW47fQ0KQGxpc3QgbDE6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0 OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDoyLjVpbjsNCgltc28tbGV2ZWwtbnVt YmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVs Ng0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFi LXN0b3A6My4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0uMjVpbjt9DQpAbGlzdCBsMTpsZXZlbDcNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6 YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuNWluOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDE6bGV2ZWw4 DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWIt c3RvcDo0LjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDph bHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC41aW47DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMg0KCXttc28t bGlzdC1pZDo1ODgyNzQ2ODQ7DQoJbXNvLWxpc3QtdHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3QtdGVt cGxhdGUtaWRzOi0yMDEyOTYwNjA2IC0xOTY2NzE4MTMwIDY3Njk4NzEzIDY3Njk4NzE1IDY3Njk4 NzAzIDY3Njk4NzEzIDY3Njk4NzE1IDY3Njk4NzAzIDY3Njk4NzEzIDY3Njk4NzE1O30NCkBsaXN0 IGwyOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28t bGV2ZWwtdGV4dDoiJTFcKSI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMjps ZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtbG93ZXI7DQoJbXNvLWxldmVs LXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQt aW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMjpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51 bWJlci1wb3NpdGlvbjpyaWdodDsNCgl0ZXh0LWluZGVudDotOS4wcHQ7fQ0KQGxpc3QgbDI6bGV2 ZWw0DQoJe21zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDI6bGV2ZWw1DQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25l Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47 fQ0KQGxpc3QgbDI6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxvd2Vy Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246 cmlnaHQ7DQoJdGV4dC1pbmRlbnQ6LTkuMHB0O30NCkBsaXN0IGwyOmxldmVsNw0KCXttc28tbGV2 ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4 dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwyOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDphbHBoYS1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwt bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwyOmxl dmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpyb21hbi1sb3dlcjsNCgltc28tbGV2ZWwt dGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOnJpZ2h0Ow0KCXRleHQt aW5kZW50Oi05LjBwdDt9DQpAbGlzdCBsMw0KCXttc28tbGlzdC1pZDoxMDA3MjkyMjgzOw0KCW1z by1saXN0LXRlbXBsYXRlLWlkczo2NDc5NDUxNzg7fQ0KQGxpc3QgbDM6bGV2ZWwxDQoJe21zby1s ZXZlbC1zdGFydC1hdDo0Ow0KCW1zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0K CW1zby1sZXZlbC10YWItc3RvcDouNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDM6bGV2ZWwyDQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDoxLjBpbjsNCglt c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBs aXN0IGwzOmxldmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCglt c28tbGV2ZWwtdGFiLXN0b3A6MS41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMzpsZXZlbDQNCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIuMGluOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxp c3QgbDM6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1z by1sZXZlbC10YWItc3RvcDoyLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwzOmxldmVsNg0KCXttc28tbGV2ZWwtbnVt YmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6My4waW47DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlz dCBsMzpsZXZlbDcNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNv LWxldmVsLXRhYi1zdG9wOjMuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN Cgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDM6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDo0LjBpbjsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0 IGwzOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28t bGV2ZWwtdGFiLXN0b3A6NC41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsNA0KCXttc28tbGlzdC1pZDoxNTI1ODI1NzY3 Ow0KCW1zby1saXN0LXRlbXBsYXRlLWlkczoxNDUwODk3Njg4O30NCkBsaXN0IGw0OmxldmVsMQ0K CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LS4yNWluO30NCkBsaXN0IGw0OmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBo YS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsNDpsZXZlbDMNCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9w OjEuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot LjI1aW47fQ0KQGxpc3QgbDQ6bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhh LXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDoyLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGw0OmxldmVsNQ0KCXtt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 Mi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0u MjVpbjt9DQpAbGlzdCBsNDpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEt dXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDQ6bGV2ZWw3DQoJe21z by1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDoz LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y NWluO30NCkBsaXN0IGw0OmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11 cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsNDpsZXZlbDkNCgl7bXNv LWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQu NWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1 aW47fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTowaW47 fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMg djpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lm IGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFw IHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlm XS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJw bGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj5UaGFua3MgZm9yIHlvdXIgcmV2aWV3LCBKaW0uJm5i c3A7IFJlc3BvbnNlcyBhcmUgaW5saW5lLCBwcmVmaXhlZCBieSDigJw8L3NwYW4+PHNwYW4gc3R5 bGU9ImNvbG9yOiMwMEIwNTAiPk1pa2UmZ3Q74oCdLjwvc3Bhbj48c3BhbiBzdHlsZT0iY29sb3I6 IzAwMjA2MCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj4mbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgLS0gTWlrZTxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7 Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4i Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+RnJvbTo8L2I+IEppbSBTY2hhYWQgJmx0O2lldGZA YXVndXN0Y2VsbGFycy5jb20mZ3Q7IDxicj4NCjxiPlNlbnQ6PC9iPiBUdWVzZGF5LCBTZXB0ZW1i ZXIgMTcsIDIwMTkgNjo0NiBQTTxicj4NCjxiPlRvOjwvYj4gJ2Nvc2UnICZsdDtjb3NlQGlldGYu b3JnJmd0Ozxicj4NCjxiPkNjOjwvYj4gZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRo bXNAaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUkU6IFtDT1NFXSA8c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkgRW1vamkmcXVvdDssc2Fucy1zZXJpZiI+DQomIzEy ODI3Njs8L3NwYW4+IFdHTEMgb2YgZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXM8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgc3RhcnQgdGhpcyByZXZp ZXcgYnkgY29weWluZyBmb3J3YXJkIGFsbCBvZiBteSBjb21tZW50cyBvbiBkcmFmdC1qb25lcy1j b3NlLWFkZGl0aW9uYWwtYWxnb3JpdGhtcy0wMDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48cz4x LiZuYnNwOyBJIHdhcyBzdXJwcmlzZWQgdGhhdCB0aGVyZSBhcmUgdHdvIGFsZ29yaXRobXMgc3Rp bGwgaW4gdGhlIFdlYkF1dGhuIGRvY3VtZW50IHRoYXQgYXJlIG5vdCBpbmNsdWRlZCBoZXJlLiZu YnNwOyBJcyB0aGF0IGludGVudGlvbmFsIGFuZCB3aGF0IGlzIHRoZSBwbGFuIGZvcndhcmQgZm9y IHRoZW0/PC9zPiBUaGlzIG9uZSB3YXMgYWRkcmVzc2VkPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPjxzPjIuJm5ic3A7IFRoZSB0aXRsZSBvZiB0aGUgZG9jdW1lbnQgaXMgbm90IGRlc2Ny aXB0aXZlIGluIHRlcm1zIG9mIGEgc3RhbmRhbG9uZSBzZW50ZW5jZSBvbiB3aGF0IHRoaXMgZG9j dW1lbnQgaXMgZG9pbmcuJm5ic3A7IEl0IHNob3VsZCBiZSBtb3JlIHNwZWNpZmljIG9uIHRoZSBh bGdvcml0aG1zLjwvcz4mbmJzcDsgVGhlIG5ldyB0aXRsZSBpcyBmaW5lIGV4Y2VwdCBmb3IgdGhl IGZhY3QgdGhhdCBXZWJBdXRobiBpcyBub3QNCiBleHBhbmRlZCB0byBhbnl0aGluZy48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+My4mbmJzcDsgQWJzdHJhY3Q6Jm5ic3A7IEEgbGlzdCBv ZiB0aGUgYWxnb3JpdGhtcyBiZWluZyBwcm9jZXNzZWQgaW4gdGhpcyBkb2N1bWVudCB3b3VsZCBi ZSByZWFzb25hYmxlLiZuYnNwOyBCYXNlZCBvbiB0aGUgY3VycmVudCB0ZXh0LCB0aGUgYWJzdHJh Y3Qgd291bGQgbmVlZCB0byBiZSByZS13cml0dGVuIGFzIHNvb24gYXMgdGhlIGFsZ29yaXRobXMg YXJlIHJlZ2lzdGVyZWQgYmVjYXVzZSB0aGV5IHdvdWxkIHRoZW4gYmUgcmVnaXN0ZXJlZA0KIGFu ZCB0aHVzIHRoZSBzcGVjaWZpY2F0aW9uIGlzIG5vdCBuZWNlc3NhcnkuJm5ic3A7IEl0IHdvdWxk IGFsc28gYmUgc2xpZ2h0bHkgb2RkIGluIHRoZSBldmVudCB0aGF0IHRoZSBDVEFQIG9yIFdlYkF1 dGhuIHByb3RvY29scyBhcmUgdXBkYXRlZCB0byBhZGQgbmV3IGFsZ29yaXRobXMgYXMgdGhleSB3 b3VsZCBub3QgYmUgaW4gdGhpcyBkb2N1bWVudC4mbmJzcDsgKFNlZSBpc3N1ZSAjMS4pJm5ic3A7 DQo8Yj5ObyBDaGFuZ2U8bzpwPjwvbzpwPjwvYj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPk1p a2UmZ3Q7IFVuZGVyc3Rvb2QuJm5ic3A7IEnigJlsbCByZXdvcmQgc28gdGhhdCB0aGUgdGV4dCBy ZW1haW5zIGNvcnJlY3QgYWZ0ZXIgdGhlIElBTkEgcmVnaXN0cmF0aW9ucyBoYXZlIGJlZW4gcGVy Zm9ybWVkLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxz cGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij40LiZuYnNwOyBTZWN0aW9uIDE6Jm5ic3A7IFNlZSBhYnN0 cmFjdCBjb21tZW50LiZuYnNwOyA8Yj5ObyBjaGFuZ2U8bzpwPjwvbzpwPjwvYj48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9 ImNvbG9yOiMwMEIwNTAiPk1pa2UmZ3Q7IERpdHRvPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjUuJm5ic3A7IFNl Y3Rpb24gMjogVGhlIHJlY29tbWVuZGVkIGNvbHVtbiBuZWVkcyB0byBiZSBhZGRlZCB0byB0aGUg dGFibGUuJm5ic3A7DQo8Yj5ObyBjaGFuZ2U8bzpwPjwvbzpwPjwvYj48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9y OiMwMEIwNTAiPk1pa2UmZ3Q7IEkgYXNzdW1lIHRoZSBjb2x1bW4geW914oCZcmUgdGFsa2luZyBh Ym91dCBpcyB0aGUgb25lIHJlcXVlc3RlZCBpbiB0aGUgbmV4dCBjb21tZW50LjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Ni4mbmJzcDsgU2VjdGlvbiAyOiZuYnNwOyBUaGUg ZGlzY3Vzc2lvbiBvbiB3aGF0IGlzIGFuZCBpcyBub3QgcmVjb21tZW5kZWQgYW5kIHdoeSBiZWxv bmdzIGluIHRoaXMgc2VjdGlvbiBub3QgaW4gdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zLiZu YnNwOw0KPGI+Tm8gY2hhbmdlPC9iPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUw Ij5NaWtlJmd0OyBPSywgSSBjYW4gYWRkIGFuIOKAnEltcGxlbWVudGF0aW9uIFJlcXVpcmVtZW50 c+KAnSBjb2x1bW4sIHBhcmFsbGVsaW5nIHRoZSB0cmVhdG1lbnQgaW48L3NwYW4+PHNwYW4gc3R5 bGU9ImNvbG9yOiMwMDIwNjAiPg0KPC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5v cmcvaHRtbC9yZmM3NTE4I3NlY3Rpb24tMy4xIj5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwv cmZjNzUxOCNzZWN0aW9uLTMuMTwvYT48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+LjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJj b2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij43LiZuYnNwOyBTZWN0aW9uIDI6IFlvdSBhcmUgbWlzc2luZyBzb21lIGNoZWNr cyB0aGF0IHNob3VsZCBiZSBkb25lIG9uIHNpZ25pbmcgYW5kIHZlcmlmaWNhdGlvbi4mbmJzcDsg TG9vayBhdCB0aGUgc3RhbmRhcmQgdGV4dCBhdCB0aGUgZW5kIG9mIHNlY3Rpb25zIGluIFJGQyA4 MTUyIGZvciBhIHBhdHRlcm4uJm5ic3A7IFlvdSBtaWdodCBhbHNvIHdhbnQgdG8gYWRkIGEgY2hl Y2sgb24gbGVuZ3RocyBvZiBrZXlzIGJvdGggZm9yDQogYSBtYXhpbXVtIGFuZCBhIG1pbmltdW0g bGVuZ3RoLiZuYnNwOyA8Yj5ObyBjaGFuZ2U8L2I+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUwIj5NaWtlJmd0OyBLZXkgc2l6ZSBjb25zaWRl cmF0aW9ucyBmb3IgdGhlIFJTQSBhbGdvcml0aG1zIGFyZSBhbHJlYWR5IGNvdmVyZWQgaW4NCjwv c3Bhbj48YSBocmVmPSJodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jb3Nl LXdlYmF1dGhuLWFsZ29yaXRobXMtMDEjc2VjdGlvbi01LjEiPmh0dHBzOi8vdG9vbHMuaWV0Zi5v cmcvaHRtbC9kcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtcy0wMSNzZWN0aW9uLTUu MTwvYT48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+LiZuYnNwOyBGb3IgRVMyNTZLLCBJIGNh biBzYXkgdGhhdCB0aGUgWCBhbmQgWSB2YWx1ZXMgZm9yDQogdGhlIHB1YmxpYyBrZXkgbXVzdCBi b3RoIGJlIGV4YWN0bHkgMjU2IGJpdHMuJm5ic3A7IFdoYXQgYXJlIHRoZSBzcGVjaWZpYyBjaGVj a3MgeW91IHdhbnRlZCBhZGRlZD8mbmJzcDsgSSBjb3VsZG7igJl0IHRlbGwgd2hpY2ggc2VjdGlv bnMgb2YgUkZDIDgxNTIgeW91IHdlcmUgcmVmZXJyaW5nIHRvLiZuYnNwOyBBbHNvLCBub3RlIHRo YXQgYmV0d2VlbiBkcmFmdC1qb25lcy0wMCBhbmQgZHJhZnQtaWV0Zi0wMSwgdGhlIGRlc2NyaXB0 aW9ucyBvZiB0aGUgdXNlIG9mIGhhc2gNCiBmdW5jdGlvbnMgd2VyZSBiZWVmZWQgdXAsIGluIHJl c3BvbnNlIHRvIG90aGVyIGNvbW1lbnRzIHJlY2VpdmVkLjwvc3Bhbj48c3BhbiBzdHlsZT0iY29s b3I6IzAwMjA2MCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij44LiZuYnNw OyBTZWN0aW9uIDM6Jm5ic3A7IFRoaXMgc2hvdWxkIG5vdCBiZSB0aGUgZmlyc3QgdXNlIG9mIEpP U0UgYW5kIENPU0UgYW5kIHRoZXJlZm9yZSB0aGUgZXhwYW5zaW9ucyBoZXJlIG1ha2Ugbm8gc2Vu c2UuJm5ic3A7IFRoYXQgc2hvdWxkIGJlIGluIHRoZSBpbnRyb2R1Y3Rpb24uJm5ic3A7DQo8Yj5O byBjaGFuZ2U8L2I+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJj b2xvcjojMDBCMDUwIj5NaWtlJmd0OyBJ4oCZbGwgbG9vayBpbnRvIGV4cGFuZGluZyBhYmJyZXZp YXRpb25zIG9uIGZpcnN0IHVzZXMgYW5kIG5vdCBvbiBzdWJzZXF1ZW50IHVzZXMuPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9y OiMwMEIwNTAiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPjxzPjkuIFNlY3Rpb24gMy4xOiZuYnNwOyBJIGhhdmUgb25seSByYXJlbHkgc2VlbiB0 aGlzIGN1cnZlIGFzIFAtMjU2SywgaXQgaXMgYWxtb3N0IGFsd2F5cyByZWZlcnJlZCB0byBhcyBz ZWNwMjU2azEuJm5ic3A7IEkgd291bGQgYXNrIHRoYXQgdGhpcyBiZSBjaGFuZ2VkIGluIHRoZSBD T1NFIHJlcHJlc2VudGF0aW9uLiZuYnNwOyBJIGFtIGFnbm9zdGljIGFib3V0IHdoYXQgc2hvdWxk IGJlIGluIHRoZSBKT1NFIHJlcHJlc2VudGF0aW9uLg0KPC9zPiZuYnNwO0ZpeGVkPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPjEwLiBTZWN0aW9uIDMuMTombmJzcDsgSSBkb24ndCB1bmRl cnN0YW5kIHRoZSByZWFzb24gZm9yIHRoZSBsYXN0IHBhcmFncmFwaCBpbiB0aGUgc2VjdGlvbi4m bmJzcDsgSXQgc2VlbXMgdG8gbWUgdGhhdCB0aGlzIHNob3VsZCBqdXN0IHJlZmVyIHRvIGFsbCBv ZiB0aGUgaXRlbXMgZGVmaW5lZCBmb3IgRUMyIGluIENPU0UuJm5ic3A7DQo8Yj5ObyBDaGFuZ2U8 L2I+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBC MDUwIj5NaWtlJmd0OyBPSzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+MTEu IFNlY3Rpb24gMy4xOiZuYnNwOyBJcyB0aGVyZSBhIHJlY29tbWVuZGF0aW9uIG9uIHVzaW5nIGNv bXByZXNzZWQgdnMgbm9uLWNvbXByZXNzZWQgcG9pbnRzPyZuYnNwOw0KPGI+Tm8gY2hhbmdlPC9i PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1 MCI+TWlrZSZndDsgSSB3aWxsIHN0YXRlIHRoYXQgdW5jb21wcmVzc2VkIHBvaW50IHJlcHJlc2Vu dGF0aW9ucyBhcmUgdG8gYmUgdXNlZCBmb3IgSldLcywgYXMgYSBjb21wcmVzc2VkIHJlcHJlc2Vu dGF0aW9uIGZvciBrZXkgdHlwZSDigJxFQ+KAnSBpcyBub3QgZGVmaW5lZC4mbmJzcDsgQW5kIEkg d2lsbCBzdGF0ZSB0aGF0IHRoZSB1bmNvbXByZXNzZWQgbXVzdCBhbHNvIGJlIHVzZWQNCiBmb3Ig Q1dLcywgYXMgSSBkb27igJl0IGtub3cgdGhhdCB0aGUgR2Fsb2lzIHnCsiA9IHjCsyAmIzQzOyA3 IGZpbml0ZSBmaWVsZCBmb3JtIHVzZWQgd2l0aCBzZWNwMjU2azEgaXMgYW1lbmFibGUgdG8gY29t cHJlc3Npb24uJm5ic3A7IChIb3dldmVyLCBpZiB0aGUgQ1JGRyBvciBvdGhlciBleHBlcnRzIHRl bGwgbWUgdGhhdCBpdCBpcywgSSB3aWxsIGFsc28gYWxsb3cgZm9yIHRoZSBjb21wcmVzc2VkIHJl cHJlc2VudGF0aW9uIHdpdGggQ09TRS4pPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4xMi4mbmJzcDsgU2VjdGlvbiAzLjE6Jm5ic3A7IFlvdSBuZWVkIHRvIHRhbGsgYWJvdXQg aWYgdGhpcyBpcyBnb2luZyB0byBiZSBJRVRGIHJlY29tbWVuZGVkIG9yIG5vdC4mbmJzcDsmbmJz cDsgKEFuZCB3aHkpJm5ic3A7DQo8Yj5ObyBjaGFuZ2U8L2I+PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUwIj5NaWtlJmd0OyA8L3NwYW4+PGEg aHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtY29zZS13ZWJhdXRo bi1hbGdvcml0aG1zLTAxI3NlY3Rpb24tNC4xIj5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwv ZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXMtMDEjc2VjdGlvbi00LjE8L2E+PHNw YW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPg0KIGhhcyBpdCBiZWluZyByZWNvbW1lbmRlZC4mbmJz cDsgSSB3aWxsIGRlc2NyaWJlIHdoeSBpbiB0aGUgbmV4dCB2ZXJzaW9uLCBhcyByZXF1ZXN0ZWQu PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4xMy4mbmJzcDsgU2VjdGlvbiAz LjI6Jm5ic3A7IEkgZG9uJ3QgdW5kZXJzdGFuZCB3aGF0IHRoaXMgc2VjdGlvbiBpcyBkb2luZy4m bmJzcDsgSWYgeW91IGFyZSByZWFsbHkgZGVmaW5pbmcgYSBuZXcgc2lnbmF0dXJlIGFsZ29yaXRo bSwgdGhlbiB0aGF0IHNob3VsZCBiZSBub3RlZCBhcyBwYXJ0IG9mIHRoZSByZXF1aXJlbWVudHMg aW4gc2VjdGlvbiAzLjEgb24gdGhlIGtleS4mbmJzcDsgSWYgeW91IGFyZSBub3QgZGVmaW5pbmcg YSBuZXcNCiBzaWduYXR1cmUgYWxnb3JpdGhtIHRoZW4gdGhpcyBzZWN0aW9uIG1ha2VzIHplcm8g c2Vuc2UuJm5ic3A7IChZb3UgYXJlIG5vdCBzYXlpbmcgd2hhdCB0aGUgaGFzaCBhbGdvcml0aG0g aXMuKSZuYnNwOyBCb3RoIG9wdGlvbnMgYXJlIHJlYXNvbmFibGUuJm5ic3A7DQo8Yj5UaGlzIGlz IHBhcnRseSBkZWFsdCB3aXRoOjxvOnA+PC9vOnA+PC9iPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNw YW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPk1pa2UmZ3Q7IFRoaXMgaXMgaW50ZW50aW9uYWxseSBl eGFjdGx5IHBhcmFsbGVsIHRvIFJGQyA3NTE4LCB3aGljaCBkZWZpbmVzIHRoZSDigJxFUzI1NuKA nQ0KPGk+YWxnb3JpdGhtIGlkZW50aWZpZXIgPC9pPnRvIGJlIHVzZWQgd2l0aCB0aGUg4oCcUC0y NTbigJ0gY3VydmUuJm5ic3A7IEluIHRoaXMgY2FzZSwgaXQgaXMgZGVmaW5pbmcgdGhlIOKAnEVT MjU2S+KAnQ0KPGk+YWxnb3JpdGhtIGlkZW50aWZpZXI8L2k+IHRvIGJlIHVzZWQgd2l0aCB0aGUg 4oCcc2VjcDI1Nmsx4oCdIGN1cnZlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPjxiPjxvOnA+Jm5ic3A7PC9vOnA+PC9iPjwvcD4NCjxvbCBzdHlsZT0ibWFy Z2luLXRvcDowaW4iIHN0YXJ0PSIxIiB0eXBlPSJBIj4NCjxsaSBjbGFzcz0iTXNvTGlzdFBhcmFn cmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjBpbjttc28tbGlzdDpsMiBsZXZlbDEgbGZvMyI+U3Rl cCAxIGlzIGluY29ycmVjdCBpbiB0ZXJtcyBvZiBDT1NFLCBpdCBpcyBub3QgdGhlIHBheWxvYWQg dGhhdCBpcyBzaWduZWQuPG86cD48L286cD48L2xpPjwvb2w+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJjb2xvcjojMDBCMDUwIj5NaWtlJmd0OyBJ4oCZbGwgcmV2aXNlIHRoZSBkZXNjcmlwdGlvbiBo ZXJlIHRvIGFsaWduIHdpdGggY29ycmVjdCBDT1NFIHRlcm1pbm9sb2d5LjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPG9s IHN0eWxlPSJtYXJnaW4tdG9wOjBpbiIgc3RhcnQ9IjIiIHR5cGU9IkEiPg0KPGxpIGNsYXNzPSJN c29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwyIGxldmVs MSBsZm8zIj5UaGUgbmV3IHNpZ25hdHVyZSBhbGdvcml0aG0gaXMgYmVpbmcgZGVmaW5lZCB3aXRo b3V0IG1vdGl2YXRpb24uJm5ic3A7IFRoZXJlIHNob3VsZCBiZSB0ZXh0IGRlc2NyaWJpbmcgd2h5 IHRoaXMgaXMgRVMyNTZLIGFuZCBub3QgRVMyNTYgKEVDRFNBIHdpdGggU0hBLTI1NikuJm5ic3A7 IEkgZG8gbm90ZSB0aGF0IHRoZXJlIG1heSBiZQ0KIGRpZmZlcmVudCB0ZXh0IGJlaW5nIGRlc2Ny aWJlZCBoZXJlIGZvciBKT1NFIHRoYW4gZm9yIENPU0UuPG86cD48L286cD48L2xpPjwvb2w+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUwIj5NaWtlJmd0OyDigJxFUzI1NuKAnSBp cyBkZWZpbmVkIGJ5IFJGQyA3NTE4IHRvIGJlIGFsd2F5cyB1c2VkIHdpdGggdGhlIFAtMjU2IGN1 cnZlLiZuYnNwOyBBIGRpZmZlcmVudCBhbGdvcml0aG0gaWRlbnRpZmllciBpcyB0aGVyZWZvcmUg cmVxdWlyZWQgdG8gdXNlIHdpdGggc2VjcDI1NmsxLiZuYnNwOyBUaGlzIGlzIGJ5IGRlc2lnbi4m bmJzcDsgQW5kIHRoZSB1c2Ugb2YgaWRlbnRpZmllcnMgaXMgYmVpbmcNCiBrZXB0IGludGVudGlv bmFsbHkgcGFyYWxsZWwgYmV0d2VlbiBKT1NFIGFuZCBDT1NFLjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPG9sIHN0eWxl PSJtYXJnaW4tdG9wOjBpbiIgc3RhcnQ9IjMiIHR5cGU9IkEiPg0KPGxpIGNsYXNzPSJNc29MaXN0 UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwyIGxldmVsMSBsZm8z Ij5QbGVhc2UgaW5jbHVkZSB0ZXh0IHJlbGF0ZWQgdG8gZGV0ZXJtaW5pc3RpYyBFQ0RTQSBpbiB0 aGlzIHRleHQuPG86cD48L286cD48L2xpPjwvb2w+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xv cjojMDBCMDUwIj5NaWtlJmd0OyBXaGF0IGRvIHlvdSB3YW50IHRoaXMgdGV4dCB0byBzYXk/Jm5i c3A7IEnigJltIHJlbHVjdGFudCB0byB1c2UgdGhlIHRleHQgYXQNCjwvc3Bhbj48YSBocmVmPSJo dHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjODE1MiNzZWN0aW9uLTguMSI+aHR0cHM6Ly90 b29scy5pZXRmLm9yZy9odG1sL3JmYzgxNTIjc2VjdGlvbi04LjE8L2E+PHNwYW4gc3R5bGU9ImNv bG9yOiMwMEIwNTAiPiwgd2hpY2ggc2F5cyB0aGF0IOKAnGltcGxlbWVudGF0aW9ucyBTSE9MVUQg dXNlIGEgZGV0ZXJtaW5pc3RpYyBhbGdvcml0aG3igJ0sIHdoaWNoIGlzIG1pc2xlYWRpbmcsIGlu IHRoYXQgaXQgaW1wbGllcw0KIHRoYXQgdGhlcmUgYXJlIG1hbnkgc3VjaCBhbGdvcml0aG1zIHRo YXQgY291bGQgYmUgdXNlZC4mbmJzcDsgSW4gZmFjdCwgZXhhY3RseSBvbmUgaXMgYmVpbmcgc3Bl Y2lmaWVkLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPG9sIHN0eWxlPSJtYXJnaW4tdG9wOjBpbiIgc3RhcnQ9IjQiIHR5 cGU9IkEiPg0KPGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MGluO21zby1saXN0OmwyIGxldmVsMSBsZm8zIj5UZXh0IHNpbWlsYXIgdG8gdGhlIGVuZCBvZiBz ZWN0aW9uIDIuMSBpbiBkcmFmdC1pZXRmLWNvc2UtcmZjODE1MmJpcy1hbGdzIHNob3VsZCBiZSBp bmNsdWRlZCB0byBuYWlsIHRoaW5ncyBkb3duIHRpZ2h0ZXI8bzpwPjwvbzpwPjwvbGk+PC9vbD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPk1pa2UmZ3Q7IEFyZSB5b3Ug dGFsa2luZyBhYm91dCB0aGUgdGV4dCBzdGFydGluZyDigJw8L3NwYW4+PHNwYW4gc3R5bGU9ImZv bnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMwMEIwNTA7YmFja2dyb3VuZDp3aGl0ZSI+V2hlbiB1 c2luZyBhIENPU0Uga2V5IGZvciB0aGlzIGFsZ29yaXRobSwgdGhlIGZvbGxvd2luZyBjaGVja3Mg YXJlIG1hZGU6PC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUwIj7igJ0/Jm5ic3A7DQog QXJlIHlvdSByZXF1ZXN0aW5nIHRob3NlIHNhbWUgY2hlY2tzPzwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzAwQjA1MDtiYWNrZ3JvdW5kOndoaXRlIj48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzPjE0LiBTZWN0aW9uIDMuMjombmJz cDsgSWYgdGhpcyBpcyBhIG5ldyBzaWduYXR1cmUgYWxnb3JpdGhtIHRoZW4gaXQgc2hvdWxkIHNh eSB3aGF0IGN1cnZlcyBpdCBvcGVyYXRlcyB3aXRoLiZuYnNwOyBFbHNlIHRoZXJlIHNob3VsZCBi ZSBhbiBhZGRpdGlvbiBvZiB0aGUgYWxnb3JpdGhtcyB0aGF0IGFyZSBsZWdhbCBpbiBzZWN0aW9u IDMuMTwvcz4gRG9uZSwgYnV0IHNlZSBjb21tZW50IDEzPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPjxzPjE1LiZuYnNwOyBTZWN0aW9uIDQuMSAtIFRoZSBjb3JyZWN0IHRlcm0gaXMgJ3By b3Zpc2lvbmFsJyBub3QgJ3RlbXBvcmFyeScuPC9zPiBOb3Qgb2Ygc3VmZmljaWVudCBpbXBvcnRh bmNlIHRvIHdvcnJ5IGFib3V0LiZuYnNwOyBIb3dldmVyIHlvdSBjYW4ganVzdCB1c2UgdGhlIHBy b3Zpc2lvbmFsIG51bWJlcnMgd2l0aG91dCBhbnkgY29tbWVudCBvciBUQkQgZ2l2ZW4gdGhleSBh cmUgYXNzaWduZWQuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjE2LiBTZWN0aW9uIDUu NCAtIFNvIGlmIHNvbWVib2R5IGNoYW5nZXMgdGhlIGNydiB2YWx1ZSwgaXMgdGhlcmUgYW55IHdh eSB0byB0ZWxsIHRoZSBkaWZmZXJlbmNlPyZuYnNwOyBJZiBzbyB0aGVuIHRoYXQgc2hvdWxkIGJl IGRlc2NyaWJlZCBoZXJlLiZuYnNwOw0KPGI+Tm8gY2hhbmdlPC9iPjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZndDsgVGhlIHdheSB0 aGF0IHlvdSBjYW4gdGVsbCB0aGF0IHRoZSDigJxjcnbigJ0gdmFsdWUgaGFzIGJlZW4gY2hhbmdl ZCBpcyB0aGF0IOKAnGNyduKAnSBwYXJhbWV0ZXIgd2lsbCBoYXZlIGEgZGlmZmVyZW50IHZhbHVl LiZuYnNwOyBUaGF04oCZcyBzbyBzaW1wbGUgYXMgdG8gYmUgcHJhY3RpY2FsbHkgdGF1dG9sb2dp Y2FsIGFuZCBub3Qgd29ydGggZXhwbGljaXRseSBzYXlpbmcuJm5ic3A7DQogSeKAmW0gZ3Vlc3Np bmcgeW91IHdhbnQgbWUgdG8gc2F5IHNvbWV0aGluZyBlbHNlLCBidXQgSSBkb27igJl0IGtub3cg d2hhdCBpdCBpcy48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9y OiMwMEIwNTA7YmFja2dyb3VuZDp3aGl0ZSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4xNy4mbmJzcDsgU2VjdGlvbiA1LjMgLSBUaGlzIHRleHQgc2VlbXMgdG8gYmUgc2Vs Zi1jb250cmFkaWN0b3J5LiZuYnNwOyBJZiB5b3UgTVVTVCBOT1QgdXNlIGl0LCB0aGVuIGhvdyBj YW4geW91IHRoZW4gdXNlIGl0PyZuYnNwOyBIb3cgZG9lcyBhbiBpbXBsZW1lbnRhdGlvbiBrbm93 IHdoZW4gaXQgaXMgb3IgaXMgbm90IGFjY2VwdGFibGUgcHJhY3RpY2UgdG8gdXNlIHRoaXM/Jm5i c3A7DQo8Yj5ObyBjaGFuZ2U8L2I+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJjb2xvcjojMDBCMDUwIj5NaWtlJmd0OyBJIHdpbGwgYWRkIHRoZSBkZXNjcmlwdGlvbiBh Z3JlZWQgdG8gaW4gdGhlIG9uLWxpc3QgY29udmVyc2F0aW9uIHdpdGggTmVpbCBNYWRkZW4uPC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMDBCMDUwO2JhY2tn cm91bmQ6d2hpdGUiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+TmV3IEl0ZW1zOjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4xOC4mbmJzcDsgRklETzIgbm90IGV4cGFuZGVkIG9uIGZp cnN0IHVzZSBpbiBhYnN0cmFjdCBhbmQgaW50cm9kdWN0aW9uLiZuYnNwOyAmbmJzcDtEaXR0byBm b3IgV2ViQXV0aG4sIENPU0UsPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0 Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJjb2xvcjojMDBCMDUwIj5NaWtlJmd0OyBXaWxsIGRvPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250 LWZhbWlseTpDb25zb2xhcztjb2xvcjojMDBCMDUwO2JhY2tncm91bmQ6d2hpdGUiPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+MTkuJm5ic3A7IEFic3RyYWN0IGRvZXMgbm90IHJlZmVy IHRvIEpTT04g4oCTIHNob3VsZCBpdD88bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImNvbG9yOiMwMEIwNTAiPk1pa2UmZ3Q7IEnigJlsbCBsb29rIGludG8gZWRpdG9yaWFs bHkgd2hlcmUgdG8gYmVzdCBpbnRyb2R1Y2UgSlNPTi48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt ZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMwMEIwNTA7YmFja2dyb3VuZDp3aGl0ZSI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4yMC4mbmJzcDsgU2hvdWxkIGJlIHBvaW50aW5nIHRvIHRo ZSBjdXJyZW50IGRyYWZ0cyBhbmQgbm90IHRvIFJGQyA4MTUyIGluIHRoaXMgZG9jdW1lbnQuPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUwIj5NaWtl Jmd0OyBJ4oCZbGwgcGxhbiB0byB1cGRhdGUgdGhpcyBzcGVjaWZpY2F0aW9uIG9uY2UgdGhlIGJp cyB2ZXJzaW9ucyBhcmUgUkZDcy4mbmJzcDsgQnV0IHRoZXJl4oCZcyBubyBuZWVkIHRvIHRha2Ug YSBub3JtYXRpdmUgZGVwZW5kZW5jZSBvbiB0aGUgbmV3IHZlcnNpb25zLCBhcyB0aGlzIHNwZWMg dXNlcyBub3RoaW5nIG5ldyBiZWluZyBpbnRyb2R1Y2VkIGJ5IHRoZW0uPC9zcGFuPjxzcGFuIHN0 eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMDBCMDUwO2JhY2tncm91bmQ6d2hpdGUi PjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+MjEuJm5ic3A7IEdpdmVuIHRoYXQgdGhl IGFsZ29yaXRobXMgaW4gc2VjdGlvbiAyIGFyZSBhbHJlYWR5IGRlZmluZWQgaW4gSk9TRSwgdGhl cmUgc2hvdWxkIGJlIHRleHQgdGhhdCB0aGlzIHNlY3Rpb24gb25seSBhcHBsaWVzIHRvIENPU0Ug c28gdGhlcmUgaXMgbm8gY29uZnVzaW9uLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZndDsgU3VyZTwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzAwQjA1MDtiYWNrZ3JvdW5kOndoaXRlIj48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkppbTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPkZyb206PC9iPiBD T1NFICZsdDs8YSBocmVmPSJtYWlsdG86Y29zZS1ib3VuY2VzQGlldGYub3JnIj5jb3NlLWJvdW5j ZXNAaWV0Zi5vcmc8L2E+Jmd0Ow0KPGI+T24gQmVoYWxmIE9mIDwvYj5pdmF5bG8gcGV0cm92PGJy Pg0KPGI+U2VudDo8L2I+IFR1ZXNkYXksIFNlcHRlbWJlciAxNywgMjAxOSA3OjMxIEFNPGJyPg0K PGI+VG86PC9iPiBjb3NlICZsdDs8YSBocmVmPSJtYWlsdG86Y29zZUBpZXRmLm9yZyI+Y29zZUBp ZXRmLm9yZzwvYT4mZ3Q7PGJyPg0KPGI+U3ViamVjdDo8L2I+IFtDT1NFXSA8c3BhbiBzdHlsZT0i Zm9udC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkgRW1vamkmcXVvdDssc2Fucy1zZXJpZiI+JiMxMjgy NzY7PC9zcGFuPiBXR0xDIG9mIGRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zPG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTomcXVvdDtWZXJkYW5hJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzBCNTM5NCI+ RGVhciBhbGwsPGJyPg0KPGJyPg0KVGhpcyBtZXNzYWdlIHN0YXJ0cyB0aGUgV29ya2luZyBHcm91 cCBMYXN0IENhbGwgb24gdGhlJm5ic3A7ZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRo bXMmbmJzcDtbMV0uPGJyPg0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtW ZXJkYW5hJnF1b3Q7LHNhbnMtc2VyaWYiPjxicj4NCjxzcGFuIHN0eWxlPSJjb2xvcjojMEI1Mzk0 Ij5UaGUgd29ya2luZyBncm91cCBsYXN0IGNhbGwgd2lsbCBydW4gZm9yICoqdHdvIHdlZWtzKios IGVuZGluZyBvbjwvc3Bhbj48YnI+DQo8c3BhbiBzdHlsZT0iY29sb3I6IzBCNTM5NCI+T2N0b2Jl ciAxLCAyMDE5Ljwvc3Bhbj48YnI+DQo8YnI+DQo8c3BhbiBzdHlsZT0iY29sb3I6IzBCNTM5NCI+ UGxlYXNlIHJldmlldyBhbmQgc2VuZCBhbnkgY29tbWVudHMgb3IgZmVlZGJhY2sgdG8gdGhlIHdv cmtpbmcgZ3JvdXAuJm5ic3A7RXZlbiBpZiB5b3VyIGZlZWRiYWNrIGlzICZxdW90O3RoaXMgaXMg cmVhZHkmcXVvdDssIHBsZWFzZSBsZXQgdXMga25vdy48L3NwYW4+PGJyPg0KPGJyPg0KPHNwYW4g c3R5bGU9ImNvbG9yOiMwQjUzOTQiPlRoYW5rIHlvdSw8L3NwYW4+PGJyPg0KPGJyPg0KPHNwYW4g c3R5bGU9ImNvbG9yOiMwQjUzOTQiPi0mbmJzcDtNYXR0aGV3IGFuZCZuYnNwO0l2YXlsbzwvc3Bh bj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7VmVyZGFuYSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMwQjUzOTQiPkNPU0UgQ2hhaXJzPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZh bWlseTomcXVvdDtWZXJkYW5hJnF1b3Q7LHNhbnMtc2VyaWYiPjxicj4NCjxicj4NCjxzcGFuIHN0 eWxlPSJjb2xvcjojMEI1Mzk0Ij5bMV06Jm5ic3A7PC9zcGFuPjwvc3Bhbj48YSBocmVmPSJodHRw czovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0El MkYlMkZkYXRhdHJhY2tlci5pZXRmLm9yZyUyRmRvYyUyRmRyYWZ0LWlldGYtY29zZS13ZWJhdXRo bi1hbGdvcml0aG1zJTJGJmFtcDtkYXRhPTAyJTdDMDElN0NNaWNoYWVsLkpvbmVzJTQwbWljcm9z b2Z0LmNvbSU3Q2I2NTMwNmUwNTRkZjRhNjhjYzRiMDhkNzNiZGEwYzkzJTdDNzJmOTg4YmY4NmYx NDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMSU3QzYzNzA0MzY4MDAxMzkyNTE0MSZhbXA7c2Rh dGE9TXB5RlFmME1keGQ2UEVYdE5VSkpMSkJqU0RXR2FjZkxuQ0lFc01CVHFoZyUzRCZhbXA7cmVz ZXJ2ZWQ9MCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1ZlcmRhbmEmcXVvdDssc2Fu cy1zZXJpZiI+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1jb3Nl LXdlYmF1dGhuLWFsZ29yaXRobXMvPC9zcGFuPjwvYT48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 JnF1b3Q7VmVyZGFuYSZxdW90OyxzYW5zLXNlcmlmIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_BN8PR00MB05639A215FF3352F58B31F0AF5690BN8PR00MB0563namp_-- From nobody Mon Oct 21 17:54:03 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A2705120AA1; Mon, 21 Oct 2019 17:54:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.798 X-Spam-Level: X-Spam-Status: No, score=-1.798 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KZIThthmp7ko; Mon, 21 Oct 2019 17:53:58 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5FF80120AA4; Mon, 21 Oct 2019 17:53:57 -0700 (PDT) Received: from Jude (192.168.1.159) by mail2.augustcellars.com (192.168.1.201) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Mon, 21 Oct 2019 17:53:46 -0700 From: Jim Schaad To: 'Mike Jones' , 'cose' CC: References: <000001d56dc2$e14f20c0$a3ed6240$@augustcellars.com> In-Reply-To: Date: Mon, 21 Oct 2019 17:53:43 -0700 Message-ID: <00aa01d58873$2900c2f0$7b0248d0$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_00AB_01D58838.7CA56D60" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQItNuZzA1TJsm3o5oYBLHm72ILihwI8b57FAnF7SuGmkQKxkA== Content-Language: en-us X-Originating-IP: [192.168.1.159] Archived-At: Subject: Re: [COSE] =?utf-8?q?=F0=9F=94=94_WGLC_of_draft-ietf-cose-webauthn-a?= =?utf-8?q?lgorithms?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Oct 2019 00:54:02 -0000 ------=_NextPart_000_00AB_01D58838.7CA56D60 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable =20 =20 From: Mike Jones =20 Sent: Monday, October 21, 2019 5:00 PM To: Jim Schaad ; 'cose' Cc: draft-ietf-cose-webauthn-algorithms@ietf.org Subject: RE: [COSE] =F0=9F=94=94 WGLC of = draft-ietf-cose-webauthn-algorithms =20 Thanks for your review, Jim. Responses are inline, prefixed by = =E2=80=9CMike>=E2=80=9D. =20 -- Mike =20 From: Jim Schaad = >=20 Sent: Tuesday, September 17, 2019 6:46 PM To: 'cose' > Cc: draft-ietf-cose-webauthn-algorithms@ietf.org = =20 Subject: RE: [COSE] =F0=9F=94=94 WGLC of = draft-ietf-cose-webauthn-algorithms =20 I start this review by copying forward all of my comments on = draft-jones-cose-additional-algorithms-00 =20 1. I was surprised that there are two algorithms still in the WebAuthn = document that are not included here. Is that intentional and what is = the plan forward for them? This one was addressed =20 2. The title of the document is not descriptive in terms of a = standalone sentence on what this document is doing. It should be more = specific on the algorithms. The new title is fine except for the fact = that WebAuthn is not expanded to anything. =20 3. Abstract: A list of the algorithms being processed in this document = would be reasonable. Based on the current text, the abstract would need = to be re-written as soon as the algorithms are registered because they = would then be registered and thus the specification is not necessary. = It would also be slightly odd in the event that the CTAP or WebAuthn = protocols are updated to add new algorithms as they would not be in this = document. (See issue #1.) No Change =20 Mike> Understood. I=E2=80=99ll reword so that the text remains correct = after the IANA registrations have been performed. =20 4. Section 1: See abstract comment. No change =20 Mike> Ditto =20 5. Section 2: The recommended column needs to be added to the table. = No change =20 Mike> I assume the column you=E2=80=99re talking about is the one = requested in the next comment. =20 6. Section 2: The discussion on what is and is not recommended and why = belongs in this section not in the security considerations. No change =20 Mike> OK, I can add an =E2=80=9CImplementation Requirements=E2=80=9D = column, paralleling the treatment in = https://tools.ietf.org/html/rfc7518#section-3.1. =20 7. Section 2: You are missing some checks that should be done on = signing and verification. Look at the standard text at the end of = sections in RFC 8152 for a pattern. You might also want to add a check = on lengths of keys both for a maximum and a minimum length. No change =20 Mike> Key size considerations for the RSA algorithms are already covered = in = https://tools.ietf.org/html/draft-ietf-cose-webauthn-algorithms-01#sectio= n-5.1. For ES256K, I can say that the X and Y values for the public key = must both be exactly 256 bits. What are the specific checks you wanted = added? I couldn=E2=80=99t tell which sections of RFC 8152 you were = referring to. Also, note that between draft-jones-00 and draft-ietf-01, = the descriptions of the use of hash functions were beefed up, in = response to other comments received. =20 When using a COSE key for this algorithm, the following checks are made: =20 o The 'kty' field MUST be present, and it MUST be 'EC2'. =20 o If the 'alg' field is present, it MUST match the ECDSA signature algorithm being used. =20 o If the 'key_ops' field is present, it MUST include 'sign' when creating an ECDSA signature. =20 o If the 'key_ops' field is present, it MUST include 'verify' when verifying an ECDSA signature. =20 =20 8. Section 3: This should not be the first use of JOSE and COSE and = therefore the expansions here make no sense. That should be in the = introduction. No change =20 Mike> I=E2=80=99ll look into expanding abbreviations on first uses and = not on subsequent uses. =20 9. Section 3.1: I have only rarely seen this curve as P-256K, it is = almost always referred to as secp256k1. I would ask that this be = changed in the COSE representation. I am agnostic about what should be = in the JOSE representation. Fixed =20 10. Section 3.1: I don't understand the reason for the last paragraph = in the section. It seems to me that this should just refer to all of = the items defined for EC2 in COSE. No Change =20 Mike> OK =20 11. Section 3.1: Is there a recommendation on using compressed vs = non-compressed points? No change =20 Mike> I will state that uncompressed point representations are to be = used for JWKs, as a compressed representation for key type = =E2=80=9CEC=E2=80=9D is not defined. And I will state that the = uncompressed must also be used for CWKs, as I don=E2=80=99t know that = the Galois y=C2=B2 =3D x=C2=B3 + 7 finite field form used with secp256k1 = is amenable to compression. (However, if the CRFG or other experts tell = me that it is, I will also allow for the compressed representation with = COSE.) =20 https://bitcoin.stackexchange.com/questions/76181/bitcoin-public-keys-fro= m-uncompressed-to-compressed-version-with-code-sample =20 12. Section 3.1: You need to talk about if this is going to be IETF = recommended or not. (And why) No change =20 Mike> = https://tools.ietf.org/html/draft-ietf-cose-webauthn-algorithms-01#sectio= n-4.1 has it being recommended. I will describe why in the next = version, as requested. =20 13. Section 3.2: I don't understand what this section is doing. If = you are really defining a new signature algorithm, then that should be = noted as part of the requirements in section 3.1 on the key. If you are = not defining a new signature algorithm then this section makes zero = sense. (You are not saying what the hash algorithm is.) Both options = are reasonable. This is partly dealt with: =20 Mike> This is intentionally exactly parallel to RFC 7518, which defines = the =E2=80=9CES256=E2=80=9D algorithm identifier to be used with the = =E2=80=9CP-256=E2=80=9D curve. In this case, it is defining the = =E2=80=9CES256K=E2=80=9D algorithm identifier to be used with the = =E2=80=9Csecp256k1=E2=80=9D curve. [JLS] But that is not the decision that was made for COSE. Only the = hash algorithm was fixed. =20 A. Step 1 is incorrect in terms of COSE, it is not the payload that is = signed. =20 Mike> I=E2=80=99ll revise the description here to align with correct = COSE terminology. =20 B. The new signature algorithm is being defined without motivation. = There should be text describing why this is ES256K and not ES256 (ECDSA = with SHA-256). I do note that there may be different text being = described here for JOSE than for COSE. =20 Mike> =E2=80=9CES256=E2=80=9D is defined by RFC 7518 to be always used = with the P-256 curve. A different algorithm identifier is therefore = required to use with secp256k1. This is by design. And the use of = identifiers is being kept intentionally parallel between JOSE and COSE. =20 C. Please include text related to deterministic ECDSA in this text. =20 Mike> What do you want this text to say? I=E2=80=99m reluctant to use = the text at https://tools.ietf.org/html/rfc8152#section-8.1, which says = that =E2=80=9Cimplementations SHOLUD use a deterministic = algorithm=E2=80=9D, which is misleading, in that it implies that there = are many such algorithms that could be used. In fact, exactly one is = being specified. =20 D. Text similar to the end of section 2.1 in = draft-ietf-cose-rfc8152bis-algs should be included to nail things down = tighter =20 Mike> Are you talking about the text starting =E2=80=9CWhen using a COSE = key for this algorithm, the following checks are made:=E2=80=9D? Are = you requesting those same checks? =20 14. Section 3.2: If this is a new signature algorithm then it should = say what curves it operates with. Else there should be an addition of = the algorithms that are legal in section 3.1 Done, but see comment 13 =20 15. Section 4.1 - The correct term is 'provisional' not 'temporary'. = Not of sufficient importance to worry about. However you can just use = the provisional numbers without any comment or TBD given they are = assigned. =20 16. Section 5.4 - So if somebody changes the crv value, is there any way = to tell the difference? If so then that should be described here. No = change =20 Mike> The way that you can tell that the =E2=80=9Ccrv=E2=80=9D value has = been changed is that =E2=80=9Ccrv=E2=80=9D parameter will have a = different value. That=E2=80=99s so simple as to be practically = tautological and not worth explicitly saying. I=E2=80=99m guessing you = want me to say something else, but I don=E2=80=99t know what it is. =20 [JLS] So, If I take your sep256k1 key and change the curve to P-256 that = cannot be detected? =20 17. Section 5.3 - This text seems to be self-contradictory. If you = MUST NOT use it, then how can you then use it? How does an = implementation know when it is or is not acceptable practice to use = this? No change =20 Mike> I will add the description agreed to in the on-list conversation = with Neil Madden. =20 New Items: =20 18. FIDO2 not expanded on first use in abstract and introduction. = Ditto for WebAuthn, COSE, =20 Mike> Will do =20 19. Abstract does not refer to JSON =E2=80=93 should it? =20 Mike> I=E2=80=99ll look into editorially where to best introduce JSON. =20 20. Should be pointing to the current drafts and not to RFC 8152 in = this document. =20 Mike> I=E2=80=99ll plan to update this specification once the bis = versions are RFCs. But there=E2=80=99s no need to take a normative = dependence on the new versions, as this spec uses nothing new being = introduced by them. =20 21. Given that the algorithms in section 2 are already defined in JOSE, = there should be text that this section only applies to COSE so there is = no confusion. =20 Mike> Sure =20 Jim =20 =20 From: COSE > On = Behalf Of ivaylo petrov Sent: Tuesday, September 17, 2019 7:31 AM To: cose > Subject: [COSE] =F0=9F=94=94 WGLC of draft-ietf-cose-webauthn-algorithms =20 Dear all, This message starts the Working Group Last Call on the = draft-ietf-cose-webauthn-algorithms [1]. The working group last call will run for **two weeks**, ending on October 1, 2019. Please review and send any comments or feedback to the working group. = Even if your feedback is "this is ready", please let us know. Thank you, - Matthew and Ivaylo COSE Chairs [1]: = = https://datatracker.ietf.org/doc/draft-ietf-cose-webauthn-algorithms/ ------=_NextPart_000_00AB_01D58838.7CA56D60 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

 

 

From: Mike Jones = <Michael.Jones@microsoft.com>
Sent: Monday, October 21, = 2019 5:00 PM
To: Jim Schaad <ietf@augustcellars.com>; = 'cose' <cose@ietf.org>
Cc: = draft-ietf-cose-webauthn-algorithms@ietf.org
Subject: RE: = [COSE] 🔔 WGLC of = draft-ietf-cose-webauthn-algorithms

 

Thanks for your review, Jim.  Responses are = inline, prefixed by =E2=80=9CMike>=E2=80=9D.

 

        &= nbsp;           &n= bsp;           &nb= sp;           &nbs= p;          -- = Mike

 

From: Jim Schaad <ietf@augustcellars.com> =
Sent: Tuesday, September 17, 2019 6:46 PM
To: = 'cose' <cose@ietf.org>
Cc: draft-ietf-c= ose-webauthn-algorithms@ietf.org
Subject: RE: [COSE] 🔔 WGLC = of draft-ietf-cose-webauthn-algorithms

 

I start this = review by copying forward all of my comments on = draft-jones-cose-additional-algorithms-00

 

1.  = I was surprised that there are two algorithms still in the WebAuthn = document that are not included here.  Is that intentional and what = is the plan forward for them? This one was = addressed

 

2.  The title of the document is not = descriptive in terms of a standalone sentence on what this document is = doing.  It should be more specific on the algorithms.  The = new title is fine except for the fact that WebAuthn is not expanded to = anything.

 

3.  Abstract:  A list of the algorithms = being processed in this document would be reasonable.  Based on the = current text, the abstract would need to be re-written as soon as the = algorithms are registered because they would then be registered and thus = the specification is not necessary.  It would also be slightly odd = in the event that the CTAP or WebAuthn protocols are updated to add new = algorithms as they would not be in this document.  (See issue = #1.)  No Change

 

Mike> = Understood.  I=E2=80=99ll reword so that the text remains correct = after the IANA registrations have been = performed.

 

4.  Section 1:  See abstract = comment.  No change

 

Mike> = Ditto

 

5.  Section 2: The recommended column needs to = be added to the table.  No change

 

Mike> I assume the = column you=E2=80=99re talking about is the one requested in the next = comment.

 

6.  Section 2:  The discussion on what is = and is not recommended and why belongs in this section not in the = security considerations.  No change

 

Mike> OK, I can = add an =E2=80=9CImplementation Requirements=E2=80=9D column, paralleling = the treatment in https://tools.ie= tf.org/html/rfc7518#section-3.1.

 

7.  Section 2: You are missing some checks = that should be done on signing and verification.  Look at the = standard text at the end of sections in RFC 8152 for a pattern.  = You might also want to add a check on lengths of keys both for a maximum = and a minimum length.  No change

 

Mike> Key size considerations for the RSA = algorithms are already covered in https://tools.ietf.org/html/draft-ietf-cose-webauthn-algor= ithms-01#section-5.1.  For = ES256K, I can say that the X and Y values for the public key must both = be exactly 256 bits.  What are the specific checks you wanted = added?  I couldn=E2=80=99t tell which sections of RFC 8152 you were = referring to.  Also, note that between draft-jones-00 and = draft-ietf-01, the descriptions of the use of hash functions were beefed = up, in response to other comments received.

 

When using a COSE = key for this algorithm, the following checks are

=C2=A0=C2=A0 made:

 

=C2=A0=C2=A0 = o=C2=A0 The 'kty' field MUST be present, and it MUST be = 'EC2'.

 

=C2=A0=C2=A0 = o=C2=A0 If the 'alg' field is present, it MUST match the ECDSA = signature

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 algorithm being = used.

 

=C2=A0=C2=A0 = o=C2=A0 If the 'key_ops' field is present, it MUST include 'sign' = when

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 creating an ECDSA = signature.

 

=C2=A0=C2=A0 = o=C2=A0 If the 'key_ops' field is present, it MUST include 'verify' = when

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 verifying an ECDSA = signature.

 

 

8.  Section 3:  This should not be the = first use of JOSE and COSE and therefore the expansions here make no = sense.  That should be in the introduction.  No = change

 

Mike> I=E2=80=99ll = look into expanding abbreviations on first uses and not on subsequent = uses.

 

9. Section 3.1:  I have only rarely seen = this curve as P-256K, it is almost always referred to as = secp256k1.  I would ask that this be changed in the COSE = representation.  I am agnostic about what should be in the JOSE = representation.  Fixed

 

10. = Section 3.1:  I don't understand the reason for the last paragraph = in the section.  It seems to me that this should just refer to all = of the items defined for EC2 in COSE.  No = Change

 

Mike> = OK

 

11. Section 3.1:  Is there a recommendation on = using compressed vs non-compressed points?  No = change

 

Mike> I will state = that uncompressed point representations are to be used for JWKs, as a = compressed representation for key type =E2=80=9CEC=E2=80=9D is not = defined.  And I will state that the uncompressed must also be used = for CWKs, as I don=E2=80=99t know that the Galois y=C2=B2 =3D x=C2=B3 + = 7 finite field form used with secp256k1 is amenable to = compression.  (However, if the CRFG or other experts tell me that = it is, I will also allow for the compressed representation with = COSE.)

 

https://bitcoin.stackexchange.com/questions/76181/bi= tcoin-public-keys-from-uncompressed-to-compressed-version-with-code-sampl= e

 

12.  Section 3.1:  You need to talk about = if this is going to be IETF recommended or not.   (And = why)  No change

 

Mike> https://tools.ietf.org/html/draft-ietf-cose-webauthn-algor= ithms-01#section-4.1 has it being = recommended.  I will describe why in the next version, as = requested.

 

13.  Section 3.2:  I don't understand = what this section is doing.  If you are really defining a new = signature algorithm, then that should be noted as part of the = requirements in section 3.1 on the key.  If you are not defining a = new signature algorithm then this section makes zero sense.  (You = are not saying what the hash algorithm is.)  Both options are = reasonable.  This is partly dealt with:

 

Mike> This is intentionally exactly parallel = to RFC 7518, which defines the =E2=80=9CES256=E2=80=9D algorithm = identifier to be used with the =E2=80=9CP-256=E2=80=9D curve.  = In this case, it is defining the =E2=80=9CES256K=E2=80=9D algorithm = identifier to be used with the =E2=80=9Csecp256k1=E2=80=9D = curve.

[JLS] But that is = not the decision that was made for COSE.=C2=A0 =C2=A0Only the hash = algorithm was fixed.

 

  1. Step 1 is incorrect in = terms of COSE, it is not the payload that is = signed.

 

Mike> I=E2=80=99ll = revise the description here to align with correct COSE = terminology.

 

  1. The new signature = algorithm is being defined without motivation.  There should be = text describing why this is ES256K and not ES256 (ECDSA with = SHA-256).  I do note that there may be different text being = described here for JOSE than for COSE.

 

Mike> =E2=80=9CES256=E2=80=9D is defined by = RFC 7518 to be always used with the P-256 curve.  A different = algorithm identifier is therefore required to use with secp256k1.  = This is by design.  And the use of identifiers is being kept = intentionally parallel between JOSE and COSE.

 

  1. Please include text = related to deterministic ECDSA in this text.

 

Mike> What do you want this text to = say?  I=E2=80=99m reluctant to use the text at https://tools.ie= tf.org/html/rfc8152#section-8.1, which = says that =E2=80=9Cimplementations SHOLUD use a deterministic = algorithm=E2=80=9D, which is misleading, in that it implies that there = are many such algorithms that could be used.  In fact, exactly one = is being specified.

 

  1. Text similar to the = end of section 2.1 in draft-ietf-cose-rfc8152bis-algs should be included = to nail things down tighter

 

Mike> Are you talking about the text starting = =E2=80=9CWhen using = a COSE key for this algorithm, the following checks are = made:=E2=80=9D?  Are you = requesting those same checks?=

 

14. Section 3.2:  If this is a new = signature algorithm then it should say what curves it operates = with.  Else there should be an addition of the algorithms that are = legal in section 3.1 Done, but see comment 13

 

15.  Section 4.1 - The correct term is = 'provisional' not 'temporary'. Not of sufficient importance to worry = about.  However you can just use the provisional numbers without = any comment or TBD given they are assigned.

 

16. = Section 5.4 - So if somebody changes the crv value, is there any way to = tell the difference?  If so then that should be described = here.  No change

 

Mike> The way that you can tell that the = =E2=80=9Ccrv=E2=80=9D value has been changed is that = =E2=80=9Ccrv=E2=80=9D parameter will have a different value.  = That=E2=80=99s so simple as to be practically tautological and not worth = explicitly saying.  I=E2=80=99m guessing you want me to say = something else, but I don=E2=80=99t know what it = is.

 

[JLS] So, = If I take your sep256k1 key and change the curve to P-256 that cannot be = detected?

 

17.  Section 5.3 - This text seems to be = self-contradictory.  If you MUST NOT use it, then how can you then = use it?  How does an implementation know when it is or is not = acceptable practice to use this?  No change

 

Mike> I will add the description agreed to in = the on-list conversation with Neil Madden.=

 

New Items:

 

18.  = FIDO2 not expanded on first use in abstract and introduction.  =  Ditto for WebAuthn, COSE,

 

Mike> Will do=

 

19.  Abstract does not refer to JSON =E2=80=93 = should it?

 

Mike> I=E2=80=99ll = look into editorially where to best introduce JSON.=

 

20.  Should be pointing to the current drafts and = not to RFC 8152 in this document.

 

Mike> I=E2=80=99ll plan to update this = specification once the bis versions are RFCs.  But there=E2=80=99s = no need to take a normative dependence on the new versions, as this spec = uses nothing new being introduced by them.=

 

21.  Given that the algorithms in section 2 are = already defined in JOSE, there should be text that this section only = applies to COSE so there is no confusion.

 

Mike> Sure=

 

Jim

 

 

From: = COSE <cose-bounces@ietf.org> = On Behalf Of ivaylo petrov
Sent: Tuesday, September 17, = 2019 7:31 AM
To: cose <cose@ietf.org>
Subject: = [COSE] 🔔 WGLC of = draft-ietf-cose-webauthn-algorithms

 

Dear = all,

This message starts the Working Group Last Call on = the draft-ietf-cose-webauthn-algorithms [1].

The working group last call will run for **two = weeks**, ending on
October 1, = 2019.

Please review and send = any comments or feedback to the working group. Even if your = feedback is "this is ready", please let us = know.

Thank = you,

- Matthew = and Ivaylo

------=_NextPart_000_00AB_01D58838.7CA56D60-- From nobody Tue Oct 22 08:05:45 2019 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 9673F120859; Tue, 22 Oct 2019 08:05:36 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: Robert Sparks via Datatracker To: Cc: last-call@ietf.org, draft-ietf-cose-hash-sig.all@ietf.org, cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.107.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: Robert Sparks Message-ID: <157175673652.3089.14383037666901135010@ietfa.amsl.com> Date: Tue, 22 Oct 2019 08:05:36 -0700 Archived-At: Subject: [COSE] Secdir last call review of draft-ietf-cose-hash-sig-04 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Oct 2019 15:05:44 -0000 Reviewer: Robert Sparks Review result: Ready I have reviewed this document as part of the security directorate's ongoing effort to review all IETF documents being processed by the IESG. These comments were written primarily for the benefit of the security area directors. Document editors and WG chairs should treat these comments just like any other last call comments. This document is ready for publication as Proposed Standard RFC. This document specifies conventions for using the HSS/MLS hash-based signature algorithm with COSE. It is straightforward, but relies strongly on its normative references. It adds entries to two registries. From nobody Tue Oct 22 08:15:22 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B941F1208A9; Tue, 22 Oct 2019 08:15:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rjSZVkI8xWR3; Tue, 22 Oct 2019 08:15:17 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 24512120861; Tue, 22 Oct 2019 08:15:12 -0700 (PDT) Received: from Jude (192.168.1.159) by mail2.augustcellars.com (192.168.1.201) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Tue, 22 Oct 2019 08:14:44 -0700 From: Jim Schaad To: 'Mike Jones' , 'cose' CC: References: <000001d56dc2$e14f20c0$a3ed6240$@augustcellars.com> In-Reply-To: Date: Tue, 22 Oct 2019 08:14:40 -0700 Message-ID: <00ce01d588eb$6eee22d0$4cca6870$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_00CF_01D588B0.C2911F90" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQItNuZzA1TJsm3o5oYBLHm72ILihwI8b57FAnF7SuGmkfhCcA== Content-Language: en-us X-Originating-IP: [192.168.1.159] Archived-At: Subject: Re: [COSE] =?utf-8?q?=F0=9F=94=94_WGLC_of_draft-ietf-cose-webauthn-a?= =?utf-8?q?lgorithms?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Oct 2019 15:15:21 -0000 ------=_NextPart_000_00CF_01D588B0.C2911F90 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable I forgot to respond to this one =20 From: Mike Jones =20 Sent: Monday, October 21, 2019 5:00 PM To: Jim Schaad ; 'cose' Cc: draft-ietf-cose-webauthn-algorithms@ietf.org Subject: RE: [COSE] =F0=9F=94=94 WGLC of = draft-ietf-cose-webauthn-algorithms =20 Thanks for your review, Jim. Responses are inline, prefixed by = =E2=80=9CMike>=E2=80=9D. =20 -- Mike =20 From: Jim Schaad = >=20 Sent: Tuesday, September 17, 2019 6:46 PM To: 'cose' > Cc: draft-ietf-cose-webauthn-algorithms@ietf.org = =20 Subject: RE: [COSE] =F0=9F=94=94 WGLC of = draft-ietf-cose-webauthn-algorithms =20 I start this review by copying forward all of my comments on = draft-jones-cose-additional-algorithms-00 =20 =20 A. Please include text related to deterministic ECDSA in this text. =20 Mike> What do you want this text to say? I=E2=80=99m reluctant to use = the text at https://tools.ietf.org/html/rfc8152#section-8.1, which says = that =E2=80=9Cimplementations SHOLUD use a deterministic = algorithm=E2=80=9D, which is misleading, in that it implies that there = are many such algorithms that could be used. In fact, exactly one is = being specified. =20 [JLS] I was unaware that there is only one possible deterministic = algorithm, any keyed hash algorithm can be used to generate the = deterministic =E2=80=98k=E2=80=99 to be used for the signature = algorithm. There is not a requirement that the secret value be the = private key for the signature key pair, one could generate a private = value just for that purpose. Independent of that, the default ECDSA = algorithm specifications all say use a random value of = =E2=80=98k=E2=80=99 rather than a deterministic value and the use of the = deterministic value is far more secure. ------=_NextPart_000_00CF_01D588B0.C2911F90 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable

I forgot = to respond to this one

 

From: Mike Jones = <Michael.Jones@microsoft.com>
Sent: Monday, October 21, = 2019 5:00 PM
To: Jim Schaad <ietf@augustcellars.com>; = 'cose' <cose@ietf.org>
Cc: = draft-ietf-cose-webauthn-algorithms@ietf.org
Subject: RE: = [COSE] 🔔 WGLC of = draft-ietf-cose-webauthn-algorithms

 

Thanks for your review, Jim.  Responses are = inline, prefixed by =E2=80=9CMike>=E2=80=9D.

 

        &= nbsp;           &n= bsp;           &nb= sp;           &nbs= p;          -- = Mike

 

From: Jim Schaad <ietf@augustcellars.com> =
Sent: Tuesday, September 17, 2019 6:46 PM
To: = 'cose' <cose@ietf.org>
Cc: draft-ietf-c= ose-webauthn-algorithms@ietf.org
Subject: RE: [COSE] 🔔 WGLC = of draft-ietf-cose-webauthn-algorithms

 

I start this = review by copying forward all of my comments on = draft-jones-cose-additional-algorithms-00

 

 

  1. Please include text = related to deterministic ECDSA in this text.

 

Mike> What do you want this text to = say?  I=E2=80=99m reluctant to use the text at https://tools.ie= tf.org/html/rfc8152#section-8.1, which = says that =E2=80=9Cimplementations SHOLUD use a deterministic = algorithm=E2=80=9D, which is misleading, in that it implies that there = are many such algorithms that could be used.  In fact, exactly one = is being specified.

 

[JLS] I was unaware that there is only one possible = deterministic algorithm, any keyed hash algorithm can be used to = generate the deterministic =E2=80=98k=E2=80=99 to be used for the = signature algorithm.=C2=A0 There is not a requirement that the secret = value be the private key for the signature key pair, one could generate = a private value just for that purpose.=C2=A0 Independent of that, the = default ECDSA algorithm specifications all say use a random value of = =E2=80=98k=E2=80=99 rather than a deterministic value and the use of the = deterministic value is far more secure.

------=_NextPart_000_00CF_01D588B0.C2911F90-- From nobody Tue Oct 22 09:03:01 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF08A120096; Tue, 22 Oct 2019 09:02:59 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2M_A475SMMah; Tue, 22 Oct 2019 09:02:56 -0700 (PDT) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-eopbgr650121.outbound.protection.outlook.com [40.107.65.121]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A6A1812004A; Tue, 22 Oct 2019 09:02:55 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Sy03L7owWkE1NkXYvYt4MWbNi9RjJxYYTFbkPA1uIAiKTeWd2O/aoFL3LCYX9buq5j0LB6TfXq74PclviKVqvhYu34mMD2yZxL/Bhj9Qq/izyPUHsyT9/WdFQupm6W0qIouDwv5zXnBvw64BDLTJDUoqkjW0dsRw8ACcfK7hx4IZ2LiDNeUNdNZ2yMX8ylcMSacpZdps59at3/MT7Sw4mM3INYgAapANH2tFflx+MulixnOAgkJnjoneX/QLu6Cb4b4exiJLo4FaOsjlxyX5lfI92rgl07Y7a9KW0mbQMIUr3Ckbp8Vk7lclnaPcCH5bH1TUQypiudRdFJBM9YyRMQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=tB4Fz4tKoV4LN9nO5N/A3cHThOo1vnb8v7Cljtv6RRI=; b=VIDvwNi+GNES/fIRZQqLbY+Ho7hh3u8gp6yMUsnVKVzNlZnx969+gRIuCjSKmvaO20B6U0rW83T1ix+Oi+MtFC9WAX8aG1WH4g4J5chiETTjJFg/lg/SbQNwtFCh6qxYHaO+KLo5n5TVYKtzAuxGDx064fw5IuqVwco489tAPwfEQLcmurBocR1q/d1sFfPo+l8yQTz8qNlQh8WdbDG1r/zhk+Nt6WVuvxsWHaYciXM9v+hJL60uvh7seMavxXa8M1R0oPuA/4zYTHb9/Ix7lTD9vaKvBDp5JPT0jYuoiQVwP2VUbgH8Tlzd9nwNzq/MGYZ3fT8uJDvKG8bvTRw+/Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=tB4Fz4tKoV4LN9nO5N/A3cHThOo1vnb8v7Cljtv6RRI=; b=drOdObDU5OKK8Ljg2TBkkvIGH6HEUFa4H33tsBgNqHjul9Wewhb4VlItx1W7diIdWZq9u9H75VFDPchq17291zCZpHlQdEs3ywu5lHpcQ2FwpuGr19gwARanhxMIRCr0eNMCZNfC3MIQnhINdSe/cwSbgTRnm18enwTlFiHHXrc= Received: from DM6PR00MB0569.namprd00.prod.outlook.com (20.179.51.12) by DM6PR00MB0569.namprd00.prod.outlook.com (20.179.51.12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2424.0; Tue, 22 Oct 2019 16:02:53 +0000 Received: from DM6PR00MB0569.namprd00.prod.outlook.com ([fe80::bd43:8b51:d67d:91e3]) by DM6PR00MB0569.namprd00.prod.outlook.com ([fe80::bd43:8b51:d67d:91e3%3]) with mapi id 15.20.2424.000; Tue, 22 Oct 2019 16:02:53 +0000 From: Mike Jones To: Jim Schaad , 'cose' CC: "draft-ietf-cose-webauthn-algorithms@ietf.org" Thread-Topic: =?utf-8?B?W0NPU0VdIPCflJQgV0dMQyBvZiBkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4t?= =?utf-8?Q?algorithms?= Thread-Index: AQHVbWSlFBVJFlStCEe6sWSpGQx0gacwqvUAgDUjSdCAAD1GgIAA+Nyg Date: Tue, 22 Oct 2019 16:02:53 +0000 Message-ID: References: <000001d56dc2$e14f20c0$a3ed6240$@augustcellars.com> <00aa01d58873$2900c2f0$7b0248d0$@augustcellars.com> In-Reply-To: <00aa01d58873$2900c2f0$7b0248d0$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=c058503d-6196-49ec-8a8f-0000624e41f2; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-10-22T15:44:25Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [50.47.93.218] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 623fb93b-052b-452f-12d0-08d757094bcb x-ms-traffictypediagnostic: DM6PR00MB0569: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 01986AE76B x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(39860400002)(346002)(366004)(396003)(376002)(136003)(199004)(189003)(6436002)(10290500003)(7736002)(229853002)(55016002)(8990500004)(14454004)(3846002)(6506007)(53546011)(966005)(6306002)(54896002)(26005)(99286004)(6116002)(790700001)(102836004)(9686003)(236005)(606006)(66574012)(4326008)(186003)(64756008)(81166006)(66476007)(52536014)(446003)(76116006)(66556008)(66946007)(5660300002)(86362001)(30864003)(81156014)(10090500001)(478600001)(74316002)(476003)(486006)(8936002)(11346002)(66446008)(33656002)(14444005)(256004)(110136005)(25786009)(22452003)(2906002)(316002)(71200400001)(71190400001)(6246003)(7696005)(76176011)(66066001); DIR:OUT; SFP:1102; SCL:1; SRVR:DM6PR00MB0569; H:DM6PR00MB0569.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: wJq3/iK8tY/IKt4DeX25IrRweKD3jsAT3BeR0LTupsqFVclt8Fcogu3vRr5UNZn1jbtizgWas/nggSdFlHI4M7kmyD0wrrG5LWkbQcFX8mkl9vXbRoaX6aN4GSvkPKeKvXyXMRm2rzj+/3fFSTG5x97bN+5PpEeejRb+QAp8q6+fh87Vj9lqmcC8owlJ+MNW0kjWjnIuO0HMjlJ3egYMFJbAZFjHAHUWaUaoXdZddf9oEcecB7IA9l3SmqwdLiBFiJS5EVJ6D4oPZ0qS5PX4CegWXDdNP6JArnNvbDCLkT7irFdLOQOItdRGj6ZIUyvXwurpfOycGr5h+ukNXm+H1FlcYuQIq2+tcNY8pPMS4YEVaOptSKGQCJHVZA1F8qZt7IXuinIF9YvQ7mKeu0QAeQR8q+SSsrBw9mHvvlDdxogSKs5eE2E6CvoCxf4nRHJa x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_DM6PR00MB0569056BEAE866D47A63AEADF5680DM6PR00MB0569namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 623fb93b-052b-452f-12d0-08d757094bcb X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Oct 2019 16:02:53.2147 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 6gPiGrOvVUZj+BN8qfTsKNIy8hIWTOrIG0mXVNJdRDApPbl4k5CHikSmI1Dcl+/+mPsgfY3KVENtan8lJUbsxA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR00MB0569 Archived-At: Subject: Re: [COSE] =?utf-8?q?=F0=9F=94=94_WGLC_of_draft-ietf-cose-webauthn-a?= =?utf-8?q?lgorithms?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Oct 2019 16:03:00 -0000 --_000_DM6PR00MB0569056BEAE866D47A63AEADF5680DM6PR00MB0569namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIGZvciB5b3VyIHJlcGxpZXMsIEppbS4gIE15IGFkZGl0aW9uYWwgcmVwbGllcyBhcmUg cHJlZml4ZWQgYnkg4oCcTWlrZTI+4oCdLg0KDQogICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgLS0gTWlrZQ0KDQpGcm9tOiBKaW0gU2NoYWFkIDxp ZXRmQGF1Z3VzdGNlbGxhcnMuY29tPg0KU2VudDogTW9uZGF5LCBPY3RvYmVyIDIxLCAyMDE5IDU6 NTQgUE0NClRvOiBNaWtlIEpvbmVzIDxNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20+OyAnY29z ZScgPGNvc2VAaWV0Zi5vcmc+DQpDYzogZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRo bXNAaWV0Zi5vcmcNClN1YmplY3Q6IFJFOiBbQ09TRV0g8J+UlCBXR0xDIG9mIGRyYWZ0LWlldGYt Y29zZS13ZWJhdXRobi1hbGdvcml0aG1zDQoNCg0KDQpGcm9tOiBNaWtlIEpvbmVzIDxNaWNoYWVs LkpvbmVzQG1pY3Jvc29mdC5jb208bWFpbHRvOk1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbT4+ DQpTZW50OiBNb25kYXksIE9jdG9iZXIgMjEsIDIwMTkgNTowMCBQTQ0KVG86IEppbSBTY2hhYWQg PGlldGZAYXVndXN0Y2VsbGFycy5jb208bWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5jb20+Pjsg J2Nvc2UnIDxjb3NlQGlldGYub3JnPG1haWx0bzpjb3NlQGlldGYub3JnPj4NCkNjOiBkcmFmdC1p ZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtc0BpZXRmLm9yZzxtYWlsdG86ZHJhZnQtaWV0Zi1j b3NlLXdlYmF1dGhuLWFsZ29yaXRobXNAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSRTogW0NPU0VdIPCf lJQgV0dMQyBvZiBkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtcw0KDQpUaGFua3Mg Zm9yIHlvdXIgcmV2aWV3LCBKaW0uICBSZXNwb25zZXMgYXJlIGlubGluZSwgcHJlZml4ZWQgYnkg 4oCcTWlrZT7igJ0uDQoNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAtLSBNaWtlDQoNCkZyb206IEppbSBTY2hhYWQgPGlldGZAYXVndXN0Y2Vs bGFycy5jb208bWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5jb20+Pg0KU2VudDogVHVlc2RheSwg U2VwdGVtYmVyIDE3LCAyMDE5IDY6NDYgUE0NClRvOiAnY29zZScgPGNvc2VAaWV0Zi5vcmc8bWFp bHRvOmNvc2VAaWV0Zi5vcmc+Pg0KQ2M6IGRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0 aG1zQGlldGYub3JnPG1haWx0bzpkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtc0Bp ZXRmLm9yZz4NClN1YmplY3Q6IFJFOiBbQ09TRV0g8J+UlCBXR0xDIG9mIGRyYWZ0LWlldGYtY29z ZS13ZWJhdXRobi1hbGdvcml0aG1zDQoNCkkgc3RhcnQgdGhpcyByZXZpZXcgYnkgY29weWluZyBm b3J3YXJkIGFsbCBvZiBteSBjb21tZW50cyBvbiBkcmFmdC1qb25lcy1jb3NlLWFkZGl0aW9uYWwt YWxnb3JpdGhtcy0wMA0KDQoxLiAgSSB3YXMgc3VycHJpc2VkIHRoYXQgdGhlcmUgYXJlIHR3byBh bGdvcml0aG1zIHN0aWxsIGluIHRoZSBXZWJBdXRobiBkb2N1bWVudCB0aGF0IGFyZSBub3QgaW5j bHVkZWQgaGVyZS4gIElzIHRoYXQgaW50ZW50aW9uYWwgYW5kIHdoYXQgaXMgdGhlIHBsYW4gZm9y d2FyZCBmb3IgdGhlbT8gVGhpcyBvbmUgd2FzIGFkZHJlc3NlZA0KDQoNCg0KMi4gIFRoZSB0aXRs ZSBvZiB0aGUgZG9jdW1lbnQgaXMgbm90IGRlc2NyaXB0aXZlIGluIHRlcm1zIG9mIGEgc3RhbmRh bG9uZSBzZW50ZW5jZSBvbiB3aGF0IHRoaXMgZG9jdW1lbnQgaXMgZG9pbmcuICBJdCBzaG91bGQg YmUgbW9yZSBzcGVjaWZpYyBvbiB0aGUgYWxnb3JpdGhtcy4gIFRoZSBuZXcgdGl0bGUgaXMgZmlu ZSBleGNlcHQgZm9yIHRoZSBmYWN0IHRoYXQgV2ViQXV0aG4gaXMgbm90IGV4cGFuZGVkIHRvIGFu eXRoaW5nLg0KDQoNCg0KMy4gIEFic3RyYWN0OiAgQSBsaXN0IG9mIHRoZSBhbGdvcml0aG1zIGJl aW5nIHByb2Nlc3NlZCBpbiB0aGlzIGRvY3VtZW50IHdvdWxkIGJlIHJlYXNvbmFibGUuICBCYXNl ZCBvbiB0aGUgY3VycmVudCB0ZXh0LCB0aGUgYWJzdHJhY3Qgd291bGQgbmVlZCB0byBiZSByZS13 cml0dGVuIGFzIHNvb24gYXMgdGhlIGFsZ29yaXRobXMgYXJlIHJlZ2lzdGVyZWQgYmVjYXVzZSB0 aGV5IHdvdWxkIHRoZW4gYmUgcmVnaXN0ZXJlZCBhbmQgdGh1cyB0aGUgc3BlY2lmaWNhdGlvbiBp cyBub3QgbmVjZXNzYXJ5LiAgSXQgd291bGQgYWxzbyBiZSBzbGlnaHRseSBvZGQgaW4gdGhlIGV2 ZW50IHRoYXQgdGhlIENUQVAgb3IgV2ViQXV0aG4gcHJvdG9jb2xzIGFyZSB1cGRhdGVkIHRvIGFk ZCBuZXcgYWxnb3JpdGhtcyBhcyB0aGV5IHdvdWxkIG5vdCBiZSBpbiB0aGlzIGRvY3VtZW50LiAg KFNlZSBpc3N1ZSAjMS4pICBObyBDaGFuZ2UNCg0KDQoNCk1pa2U+IFVuZGVyc3Rvb2QuICBJ4oCZ bGwgcmV3b3JkIHNvIHRoYXQgdGhlIHRleHQgcmVtYWlucyBjb3JyZWN0IGFmdGVyIHRoZSBJQU5B IHJlZ2lzdHJhdGlvbnMgaGF2ZSBiZWVuIHBlcmZvcm1lZC4NCg0KDQoNCjQuICBTZWN0aW9uIDE6 ICBTZWUgYWJzdHJhY3QgY29tbWVudC4gIE5vIGNoYW5nZQ0KDQoNCg0KTWlrZT4gRGl0dG8NCg0K DQoNCjUuICBTZWN0aW9uIDI6IFRoZSByZWNvbW1lbmRlZCBjb2x1bW4gbmVlZHMgdG8gYmUgYWRk ZWQgdG8gdGhlIHRhYmxlLiAgTm8gY2hhbmdlDQoNCg0KDQpNaWtlPiBJIGFzc3VtZSB0aGUgY29s dW1uIHlvdeKAmXJlIHRhbGtpbmcgYWJvdXQgaXMgdGhlIG9uZSByZXF1ZXN0ZWQgaW4gdGhlIG5l eHQgY29tbWVudC4NCg0KDQoNCjYuICBTZWN0aW9uIDI6ICBUaGUgZGlzY3Vzc2lvbiBvbiB3aGF0 IGlzIGFuZCBpcyBub3QgcmVjb21tZW5kZWQgYW5kIHdoeSBiZWxvbmdzIGluIHRoaXMgc2VjdGlv biBub3QgaW4gdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zLiAgTm8gY2hhbmdlDQoNCg0KDQpN aWtlPiBPSywgSSBjYW4gYWRkIGFuIOKAnEltcGxlbWVudGF0aW9uIFJlcXVpcmVtZW50c+KAnSBj b2x1bW4sIHBhcmFsbGVsaW5nIHRoZSB0cmVhdG1lbnQgaW4gaHR0cHM6Ly90b29scy5pZXRmLm9y Zy9odG1sL3JmYzc1MTgjc2VjdGlvbi0zLjE8aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVj dGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGdG9vbHMuaWV0Zi5vcmclMkZodG1s JTJGcmZjNzUxOCUyM3NlY3Rpb24tMy4xJmRhdGE9MDIlN0MwMSU3Q01pY2hhZWwuSm9uZXMlNDBt aWNyb3NvZnQuY29tJTdDNjI0ZWQzOWQ0MjdlNDBmNWZkZWUwOGQ3NTY4YTU1MzUlN0M3MmY5ODhi Zjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MDczMDI0NDU0MDY4NjczJnNk YXRhPW9hRDJycXhXVUY4eTM1RiUyQldSZVhSUkQyTFY0aUN0SSUyRnpwa2p3REJOem1rJTNEJnJl c2VydmVkPTA+Lg0KDQoNCg0KNy4gIFNlY3Rpb24gMjogWW91IGFyZSBtaXNzaW5nIHNvbWUgY2hl Y2tzIHRoYXQgc2hvdWxkIGJlIGRvbmUgb24gc2lnbmluZyBhbmQgdmVyaWZpY2F0aW9uLiAgTG9v ayBhdCB0aGUgc3RhbmRhcmQgdGV4dCBhdCB0aGUgZW5kIG9mIHNlY3Rpb25zIGluIFJGQyA4MTUy IGZvciBhIHBhdHRlcm4uICBZb3UgbWlnaHQgYWxzbyB3YW50IHRvIGFkZCBhIGNoZWNrIG9uIGxl bmd0aHMgb2Yga2V5cyBib3RoIGZvciBhIG1heGltdW0gYW5kIGEgbWluaW11bSBsZW5ndGguICBO byBjaGFuZ2UNCg0KDQoNCk1pa2U+IEtleSBzaXplIGNvbnNpZGVyYXRpb25zIGZvciB0aGUgUlNB IGFsZ29yaXRobXMgYXJlIGFscmVhZHkgY292ZXJlZCBpbiBodHRwczovL3Rvb2xzLmlldGYub3Jn L2h0bWwvZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXMtMDEjc2VjdGlvbi01LjE8 aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBz JTNBJTJGJTJGdG9vbHMuaWV0Zi5vcmclMkZodG1sJTJGZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhu LWFsZ29yaXRobXMtMDElMjNzZWN0aW9uLTUuMSZkYXRhPTAyJTdDMDElN0NNaWNoYWVsLkpvbmVz JTQwbWljcm9zb2Z0LmNvbSU3QzYyNGVkMzlkNDI3ZTQwZjVmZGVlMDhkNzU2OGE1NTM1JTdDNzJm OTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzA3MzAyNDQ1NDA3ODY2 NyZzZGF0YT04VjNScWcwTkJodGtPbkJ4cWdkeEpCN0RMRVlpdEo3dkhSZGNwazMzSjZ3JTNEJnJl c2VydmVkPTA+LiAgRm9yIEVTMjU2SywgSSBjYW4gc2F5IHRoYXQgdGhlIFggYW5kIFkgdmFsdWVz IGZvciB0aGUgcHVibGljIGtleSBtdXN0IGJvdGggYmUgZXhhY3RseSAyNTYgYml0cy4gIFdoYXQg YXJlIHRoZSBzcGVjaWZpYyBjaGVja3MgeW91IHdhbnRlZCBhZGRlZD8gIEkgY291bGRu4oCZdCB0 ZWxsIHdoaWNoIHNlY3Rpb25zIG9mIFJGQyA4MTUyIHlvdSB3ZXJlIHJlZmVycmluZyB0by4gIEFs c28sIG5vdGUgdGhhdCBiZXR3ZWVuIGRyYWZ0LWpvbmVzLTAwIGFuZCBkcmFmdC1pZXRmLTAxLCB0 aGUgZGVzY3JpcHRpb25zIG9mIHRoZSB1c2Ugb2YgaGFzaCBmdW5jdGlvbnMgd2VyZSBiZWVmZWQg dXAsIGluIHJlc3BvbnNlIHRvIG90aGVyIGNvbW1lbnRzIHJlY2VpdmVkLg0KDQoNCldoZW4gdXNp bmcgYSBDT1NFIGtleSBmb3IgdGhpcyBhbGdvcml0aG0sIHRoZSBmb2xsb3dpbmcgY2hlY2tzIGFy ZQ0KICAgbWFkZToNCg0KICAgbyAgVGhlICdrdHknIGZpZWxkIE1VU1QgYmUgcHJlc2VudCwgYW5k IGl0IE1VU1QgYmUgJ0VDMicuDQoNCiAgIG8gIElmIHRoZSAnYWxnJyBmaWVsZCBpcyBwcmVzZW50 LCBpdCBNVVNUIG1hdGNoIHRoZSBFQ0RTQSBzaWduYXR1cmUNCiAgICAgIGFsZ29yaXRobSBiZWlu ZyB1c2VkLg0KDQogICBvICBJZiB0aGUgJ2tleV9vcHMnIGZpZWxkIGlzIHByZXNlbnQsIGl0IE1V U1QgaW5jbHVkZSAnc2lnbicgd2hlbg0KICAgICAgY3JlYXRpbmcgYW4gRUNEU0Egc2lnbmF0dXJl Lg0KDQogICBvICBJZiB0aGUgJ2tleV9vcHMnIGZpZWxkIGlzIHByZXNlbnQsIGl0IE1VU1QgaW5j bHVkZSAndmVyaWZ5JyB3aGVuDQogICAgICB2ZXJpZnlpbmcgYW4gRUNEU0Egc2lnbmF0dXJlLg0K DQoNCg0KTWlrZTI+IE9LDQoNCg0KDQo4LiAgU2VjdGlvbiAzOiAgVGhpcyBzaG91bGQgbm90IGJl IHRoZSBmaXJzdCB1c2Ugb2YgSk9TRSBhbmQgQ09TRSBhbmQgdGhlcmVmb3JlIHRoZSBleHBhbnNp b25zIGhlcmUgbWFrZSBubyBzZW5zZS4gIFRoYXQgc2hvdWxkIGJlIGluIHRoZSBpbnRyb2R1Y3Rp b24uICBObyBjaGFuZ2UNCg0KDQoNCk1pa2U+IEnigJlsbCBsb29rIGludG8gZXhwYW5kaW5nIGFi YnJldmlhdGlvbnMgb24gZmlyc3QgdXNlcyBhbmQgbm90IG9uIHN1YnNlcXVlbnQgdXNlcy4NCg0K DQoNCjkuIFNlY3Rpb24gMy4xOiAgSSBoYXZlIG9ubHkgcmFyZWx5IHNlZW4gdGhpcyBjdXJ2ZSBh cyBQLTI1NkssIGl0IGlzIGFsbW9zdCBhbHdheXMgcmVmZXJyZWQgdG8gYXMgc2VjcDI1NmsxLiAg SSB3b3VsZCBhc2sgdGhhdCB0aGlzIGJlIGNoYW5nZWQgaW4gdGhlIENPU0UgcmVwcmVzZW50YXRp b24uICBJIGFtIGFnbm9zdGljIGFib3V0IHdoYXQgc2hvdWxkIGJlIGluIHRoZSBKT1NFIHJlcHJl c2VudGF0aW9uLiAgRml4ZWQNCg0KDQoNCjEwLiBTZWN0aW9uIDMuMTogIEkgZG9uJ3QgdW5kZXJz dGFuZCB0aGUgcmVhc29uIGZvciB0aGUgbGFzdCBwYXJhZ3JhcGggaW4gdGhlIHNlY3Rpb24uICBJ dCBzZWVtcyB0byBtZSB0aGF0IHRoaXMgc2hvdWxkIGp1c3QgcmVmZXIgdG8gYWxsIG9mIHRoZSBp dGVtcyBkZWZpbmVkIGZvciBFQzIgaW4gQ09TRS4gIE5vIENoYW5nZQ0KDQoNCg0KTWlrZT4gT0sN Cg0KDQoNCjExLiBTZWN0aW9uIDMuMTogIElzIHRoZXJlIGEgcmVjb21tZW5kYXRpb24gb24gdXNp bmcgY29tcHJlc3NlZCB2cyBub24tY29tcHJlc3NlZCBwb2ludHM/ICBObyBjaGFuZ2UNCg0KDQoN Ck1pa2U+IEkgd2lsbCBzdGF0ZSB0aGF0IHVuY29tcHJlc3NlZCBwb2ludCByZXByZXNlbnRhdGlv bnMgYXJlIHRvIGJlIHVzZWQgZm9yIEpXS3MsIGFzIGEgY29tcHJlc3NlZCByZXByZXNlbnRhdGlv biBmb3Iga2V5IHR5cGUg4oCcRUPigJ0gaXMgbm90IGRlZmluZWQuICBBbmQgSSB3aWxsIHN0YXRl IHRoYXQgdGhlIHVuY29tcHJlc3NlZCBtdXN0IGFsc28gYmUgdXNlZCBmb3IgQ1dLcywgYXMgSSBk b27igJl0IGtub3cgdGhhdCB0aGUgR2Fsb2lzIHnCsiA9IHjCsyArIDcgZmluaXRlIGZpZWxkIGZv cm0gdXNlZCB3aXRoIHNlY3AyNTZrMSBpcyBhbWVuYWJsZSB0byBjb21wcmVzc2lvbi4gIChIb3dl dmVyLCBpZiB0aGUgQ1JGRyBvciBvdGhlciBleHBlcnRzIHRlbGwgbWUgdGhhdCBpdCBpcywgSSB3 aWxsIGFsc28gYWxsb3cgZm9yIHRoZSBjb21wcmVzc2VkIHJlcHJlc2VudGF0aW9uIHdpdGggQ09T RS4pDQoNCg0KDQpodHRwczovL2JpdGNvaW4uc3RhY2tleGNoYW5nZS5jb20vcXVlc3Rpb25zLzc2 MTgxL2JpdGNvaW4tcHVibGljLWtleXMtZnJvbS11bmNvbXByZXNzZWQtdG8tY29tcHJlc3NlZC12 ZXJzaW9uLXdpdGgtY29kZS1zYW1wbGUNCg0KDQoNCk1pa2UyPiBPSywgdGhlbiBJ4oCZbGwgYWxs b3cgdGhlIGNvbXByZXNzZWQgcmVwcmVzZW50YXRpb24gZm9yIENPU0UuDQoNCg0KDQoxMi4gIFNl Y3Rpb24gMy4xOiAgWW91IG5lZWQgdG8gdGFsayBhYm91dCBpZiB0aGlzIGlzIGdvaW5nIHRvIGJl IElFVEYgcmVjb21tZW5kZWQgb3Igbm90LiAgIChBbmQgd2h5KSAgTm8gY2hhbmdlDQoNCg0KDQpN aWtlPiBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhu LWFsZ29yaXRobXMtMDEjc2VjdGlvbi00LjE8aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVj dGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGdG9vbHMuaWV0Zi5vcmclMkZodG1s JTJGZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXMtMDElMjNzZWN0aW9uLTQuMSZk YXRhPTAyJTdDMDElN0NNaWNoYWVsLkpvbmVzJTQwbWljcm9zb2Z0LmNvbSU3QzYyNGVkMzlkNDI3 ZTQwZjVmZGVlMDhkNzU2OGE1NTM1JTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDcl N0MxJTdDMCU3QzYzNzA3MzAyNDQ1NDA3ODY2NyZzZGF0YT1wa1JWYXZEUlpkZVdkZ1dXNzVZeE9k NU9YUVdxUHFDNiUyRkp5VE9hNUhvZUUlM0QmcmVzZXJ2ZWQ9MD4gaGFzIGl0IGJlaW5nIHJlY29t bWVuZGVkLiAgSSB3aWxsIGRlc2NyaWJlIHdoeSBpbiB0aGUgbmV4dCB2ZXJzaW9uLCBhcyByZXF1 ZXN0ZWQuDQoNCg0KDQoxMy4gIFNlY3Rpb24gMy4yOiAgSSBkb24ndCB1bmRlcnN0YW5kIHdoYXQg dGhpcyBzZWN0aW9uIGlzIGRvaW5nLiAgSWYgeW91IGFyZSByZWFsbHkgZGVmaW5pbmcgYSBuZXcg c2lnbmF0dXJlIGFsZ29yaXRobSwgdGhlbiB0aGF0IHNob3VsZCBiZSBub3RlZCBhcyBwYXJ0IG9m IHRoZSByZXF1aXJlbWVudHMgaW4gc2VjdGlvbiAzLjEgb24gdGhlIGtleS4gIElmIHlvdSBhcmUg bm90IGRlZmluaW5nIGEgbmV3IHNpZ25hdHVyZSBhbGdvcml0aG0gdGhlbiB0aGlzIHNlY3Rpb24g bWFrZXMgemVybyBzZW5zZS4gIChZb3UgYXJlIG5vdCBzYXlpbmcgd2hhdCB0aGUgaGFzaCBhbGdv cml0aG0gaXMuKSAgQm90aCBvcHRpb25zIGFyZSByZWFzb25hYmxlLiAgVGhpcyBpcyBwYXJ0bHkg ZGVhbHQgd2l0aDoNCg0KDQoNCk1pa2U+IFRoaXMgaXMgaW50ZW50aW9uYWxseSBleGFjdGx5IHBh cmFsbGVsIHRvIFJGQyA3NTE4LCB3aGljaCBkZWZpbmVzIHRoZSDigJxFUzI1NuKAnSBhbGdvcml0 aG0gaWRlbnRpZmllciB0byBiZSB1c2VkIHdpdGggdGhlIOKAnFAtMjU24oCdIGN1cnZlLiAgSW4g dGhpcyBjYXNlLCBpdCBpcyBkZWZpbmluZyB0aGUg4oCcRVMyNTZL4oCdIGFsZ29yaXRobSBpZGVu dGlmaWVyIHRvIGJlIHVzZWQgd2l0aCB0aGUg4oCcc2VjcDI1Nmsx4oCdIGN1cnZlLg0KDQpbSkxT XSBCdXQgdGhhdCBpcyBub3QgdGhlIGRlY2lzaW9uIHRoYXQgd2FzIG1hZGUgZm9yIENPU0UuICAg T25seSB0aGUgaGFzaCBhbGdvcml0aG0gd2FzIGZpeGVkLg0KDQoNCg0KTWlrZTI+IFRoZSBwYXJh bGxlbCB0cmVhdG1lbnQgYWxzbyB3b3JrcyBmaW5lIGluIENPU0UuICBPbmUgbXVzdCBvbmx5IHVz ZSDigJxzZWNwMjU2azHigJ0gZm9yIHNpZ25pbmcgd2l0aCDigJxFUzI1NkvigJ0gYW5kIG5vdCB3 aXRoIG90aGVyIGFsZ29yaXRobSBpZGVudGlmaWVycy4gIEnigJlsbCBtYWtlIHRoaXMgY2xlYXJl ciBpbiB0aGUgbmV4dCB2ZXJzaW9uLg0KDQoNCg0KICAxLiAgU3RlcCAxIGlzIGluY29ycmVjdCBp biB0ZXJtcyBvZiBDT1NFLCBpdCBpcyBub3QgdGhlIHBheWxvYWQgdGhhdCBpcyBzaWduZWQuDQoN Ck1pa2U+IEnigJlsbCByZXZpc2UgdGhlIGRlc2NyaXB0aW9uIGhlcmUgdG8gYWxpZ24gd2l0aCBj b3JyZWN0IENPU0UgdGVybWlub2xvZ3kuDQoNCg0KICAxLiAgVGhlIG5ldyBzaWduYXR1cmUgYWxn b3JpdGhtIGlzIGJlaW5nIGRlZmluZWQgd2l0aG91dCBtb3RpdmF0aW9uLiAgVGhlcmUgc2hvdWxk IGJlIHRleHQgZGVzY3JpYmluZyB3aHkgdGhpcyBpcyBFUzI1NksgYW5kIG5vdCBFUzI1NiAoRUNE U0Egd2l0aCBTSEEtMjU2KS4gIEkgZG8gbm90ZSB0aGF0IHRoZXJlIG1heSBiZSBkaWZmZXJlbnQg dGV4dCBiZWluZyBkZXNjcmliZWQgaGVyZSBmb3IgSk9TRSB0aGFuIGZvciBDT1NFLg0KDQpNaWtl PiDigJxFUzI1NuKAnSBpcyBkZWZpbmVkIGJ5IFJGQyA3NTE4IHRvIGJlIGFsd2F5cyB1c2VkIHdp dGggdGhlIFAtMjU2IGN1cnZlLiAgQSBkaWZmZXJlbnQgYWxnb3JpdGhtIGlkZW50aWZpZXIgaXMg dGhlcmVmb3JlIHJlcXVpcmVkIHRvIHVzZSB3aXRoIHNlY3AyNTZrMS4gIFRoaXMgaXMgYnkgZGVz aWduLiAgQW5kIHRoZSB1c2Ugb2YgaWRlbnRpZmllcnMgaXMgYmVpbmcga2VwdCBpbnRlbnRpb25h bGx5IHBhcmFsbGVsIGJldHdlZW4gSk9TRSBhbmQgQ09TRS4NCg0KDQogIDEuICBQbGVhc2UgaW5j bHVkZSB0ZXh0IHJlbGF0ZWQgdG8gZGV0ZXJtaW5pc3RpYyBFQ0RTQSBpbiB0aGlzIHRleHQuDQoN Ck1pa2U+IFdoYXQgZG8geW91IHdhbnQgdGhpcyB0ZXh0IHRvIHNheT8gIEnigJltIHJlbHVjdGFu dCB0byB1c2UgdGhlIHRleHQgYXQgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzgxNTIj c2VjdGlvbi04LjE8aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNv bS8/dXJsPWh0dHBzJTNBJTJGJTJGdG9vbHMuaWV0Zi5vcmclMkZodG1sJTJGcmZjODE1MiUyM3Nl Y3Rpb24tOC4xJmRhdGE9MDIlN0MwMSU3Q01pY2hhZWwuSm9uZXMlNDBtaWNyb3NvZnQuY29tJTdD NjI0ZWQzOWQ0MjdlNDBmNWZkZWUwOGQ3NTY4YTU1MzUlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJk N2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MDczMDI0NDU0MDg4NjU5JnNkYXRhPWNnZmdIMjNNZGk5 VXc5MyUyRmJlRWlIRU1vUUElMkJLU2g5aEdEQUpzQ3FKeU9RJTNEJnJlc2VydmVkPTA+LCB3aGlj aCBzYXlzIHRoYXQg4oCcaW1wbGVtZW50YXRpb25zIFNIT0xVRCB1c2UgYSBkZXRlcm1pbmlzdGlj IGFsZ29yaXRobeKAnSwgd2hpY2ggaXMgbWlzbGVhZGluZywgaW4gdGhhdCBpdCBpbXBsaWVzIHRo YXQgdGhlcmUgYXJlIG1hbnkgc3VjaCBhbGdvcml0aG1zIHRoYXQgY291bGQgYmUgdXNlZC4gIElu IGZhY3QsIGV4YWN0bHkgb25lIGlzIGJlaW5nIHNwZWNpZmllZC4NCg0KDQogIDEuICBUZXh0IHNp bWlsYXIgdG8gdGhlIGVuZCBvZiBzZWN0aW9uIDIuMSBpbiBkcmFmdC1pZXRmLWNvc2UtcmZjODE1 MmJpcy1hbGdzIHNob3VsZCBiZSBpbmNsdWRlZCB0byBuYWlsIHRoaW5ncyBkb3duIHRpZ2h0ZXIN Cg0KDQpNaWtlPiBBcmUgeW91IHRhbGtpbmcgYWJvdXQgdGhlIHRleHQgc3RhcnRpbmcg4oCcV2hl biB1c2luZyBhIENPU0Uga2V5IGZvciB0aGlzIGFsZ29yaXRobSwgdGhlIGZvbGxvd2luZyBjaGVj a3MgYXJlIG1hZGU64oCdPyAgQXJlIHlvdSByZXF1ZXN0aW5nIHRob3NlIHNhbWUgY2hlY2tzPw0K DQoNCg0KMTQuIFNlY3Rpb24gMy4yOiAgSWYgdGhpcyBpcyBhIG5ldyBzaWduYXR1cmUgYWxnb3Jp dGhtIHRoZW4gaXQgc2hvdWxkIHNheSB3aGF0IGN1cnZlcyBpdCBvcGVyYXRlcyB3aXRoLiAgRWxz ZSB0aGVyZSBzaG91bGQgYmUgYW4gYWRkaXRpb24gb2YgdGhlIGFsZ29yaXRobXMgdGhhdCBhcmUg bGVnYWwgaW4gc2VjdGlvbiAzLjEgRG9uZSwgYnV0IHNlZSBjb21tZW50IDEzDQoNCg0KDQoxNS4g IFNlY3Rpb24gNC4xIC0gVGhlIGNvcnJlY3QgdGVybSBpcyAncHJvdmlzaW9uYWwnIG5vdCAndGVt cG9yYXJ5Jy4gTm90IG9mIHN1ZmZpY2llbnQgaW1wb3J0YW5jZSB0byB3b3JyeSBhYm91dC4gIEhv d2V2ZXIgeW91IGNhbiBqdXN0IHVzZSB0aGUgcHJvdmlzaW9uYWwgbnVtYmVycyB3aXRob3V0IGFu eSBjb21tZW50IG9yIFRCRCBnaXZlbiB0aGV5IGFyZSBhc3NpZ25lZC4NCg0KDQoNCjE2LiBTZWN0 aW9uIDUuNCAtIFNvIGlmIHNvbWVib2R5IGNoYW5nZXMgdGhlIGNydiB2YWx1ZSwgaXMgdGhlcmUg YW55IHdheSB0byB0ZWxsIHRoZSBkaWZmZXJlbmNlPyAgSWYgc28gdGhlbiB0aGF0IHNob3VsZCBi ZSBkZXNjcmliZWQgaGVyZS4gIE5vIGNoYW5nZQ0KDQoNCk1pa2U+IFRoZSB3YXkgdGhhdCB5b3Ug Y2FuIHRlbGwgdGhhdCB0aGUg4oCcY3J24oCdIHZhbHVlIGhhcyBiZWVuIGNoYW5nZWQgaXMgdGhh dCDigJxjcnbigJ0gcGFyYW1ldGVyIHdpbGwgaGF2ZSBhIGRpZmZlcmVudCB2YWx1ZS4gIFRoYXTi gJlzIHNvIHNpbXBsZSBhcyB0byBiZSBwcmFjdGljYWxseSB0YXV0b2xvZ2ljYWwgYW5kIG5vdCB3 b3J0aCBleHBsaWNpdGx5IHNheWluZy4gIEnigJltIGd1ZXNzaW5nIHlvdSB3YW50IG1lIHRvIHNh eSBzb21ldGhpbmcgZWxzZSwgYnV0IEkgZG9u4oCZdCBrbm93IHdoYXQgaXQgaXMuDQoNCltKTFNd IFNvLCBJZiBJIHRha2UgeW91ciBzZXAyNTZrMSBrZXkgYW5kIGNoYW5nZSB0aGUgY3VydmUgdG8g UC0yNTYgdGhhdCBjYW5ub3QgYmUgZGV0ZWN0ZWQ/DQoNCk1pa2UyPiAgWWVzLCBpdCBjYW4gYmUg ZGV0ZWN0ZWQgYmVjYXVzZSBpZiB0aGUgYWxnb3JpdGhtIGlkZW50aWZpZXIgdXNlZCBpcyDigJxF UzI1NkvigJ0gYW5kIHRoZSDigJxjcnbigJ0gdmFsdWUgaXMgbm90IOKAnHNlY3AyNTZrMeKAnSwg aXTigJlzIGlsbGVnYWwgaW5wdXQsIGFuZCBNVVNUIGJlIHJlamVjdGVkLiAgSeKAmWxsIGFkZCB0 aGlzIHRvIHRoZSBjaGVja3MuDQoNCg0KDQoxNy4gIFNlY3Rpb24gNS4zIC0gVGhpcyB0ZXh0IHNl ZW1zIHRvIGJlIHNlbGYtY29udHJhZGljdG9yeS4gIElmIHlvdSBNVVNUIE5PVCB1c2UgaXQsIHRo ZW4gaG93IGNhbiB5b3UgdGhlbiB1c2UgaXQ/ICBIb3cgZG9lcyBhbiBpbXBsZW1lbnRhdGlvbiBr bm93IHdoZW4gaXQgaXMgb3IgaXMgbm90IGFjY2VwdGFibGUgcHJhY3RpY2UgdG8gdXNlIHRoaXM/ ICBObyBjaGFuZ2UNCg0KDQpNaWtlPiBJIHdpbGwgYWRkIHRoZSBkZXNjcmlwdGlvbiBhZ3JlZWQg dG8gaW4gdGhlIG9uLWxpc3QgY29udmVyc2F0aW9uIHdpdGggTmVpbCBNYWRkZW4uDQoNCk5ldyBJ dGVtczoNCg0KMTguICBGSURPMiBub3QgZXhwYW5kZWQgb24gZmlyc3QgdXNlIGluIGFic3RyYWN0 IGFuZCBpbnRyb2R1Y3Rpb24uICAgRGl0dG8gZm9yIFdlYkF1dGhuLCBDT1NFLA0KDQoNCk1pa2U+ IFdpbGwgZG8NCg0KMTkuICBBYnN0cmFjdCBkb2VzIG5vdCByZWZlciB0byBKU09OIOKAkyBzaG91 bGQgaXQ/DQoNCg0KTWlrZT4gSeKAmWxsIGxvb2sgaW50byBlZGl0b3JpYWxseSB3aGVyZSB0byBi ZXN0IGludHJvZHVjZSBKU09OLg0KDQoyMC4gIFNob3VsZCBiZSBwb2ludGluZyB0byB0aGUgY3Vy cmVudCBkcmFmdHMgYW5kIG5vdCB0byBSRkMgODE1MiBpbiB0aGlzIGRvY3VtZW50Lg0KDQoNCk1p a2U+IEnigJlsbCBwbGFuIHRvIHVwZGF0ZSB0aGlzIHNwZWNpZmljYXRpb24gb25jZSB0aGUgYmlz IHZlcnNpb25zIGFyZSBSRkNzLiAgQnV0IHRoZXJl4oCZcyBubyBuZWVkIHRvIHRha2UgYSBub3Jt YXRpdmUgZGVwZW5kZW5jZSBvbiB0aGUgbmV3IHZlcnNpb25zLCBhcyB0aGlzIHNwZWMgdXNlcyBu b3RoaW5nIG5ldyBiZWluZyBpbnRyb2R1Y2VkIGJ5IHRoZW0uDQoNCjIxLiAgR2l2ZW4gdGhhdCB0 aGUgYWxnb3JpdGhtcyBpbiBzZWN0aW9uIDIgYXJlIGFscmVhZHkgZGVmaW5lZCBpbiBKT1NFLCB0 aGVyZSBzaG91bGQgYmUgdGV4dCB0aGF0IHRoaXMgc2VjdGlvbiBvbmx5IGFwcGxpZXMgdG8gQ09T RSBzbyB0aGVyZSBpcyBubyBjb25mdXNpb24uDQoNCg0KTWlrZT4gU3VyZQ0KDQpKaW0NCg0KDQpG cm9tOiBDT1NFIDxjb3NlLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOmNvc2UtYm91bmNlc0BpZXRm Lm9yZz4+IE9uIEJlaGFsZiBPZiBpdmF5bG8gcGV0cm92DQpTZW50OiBUdWVzZGF5LCBTZXB0ZW1i ZXIgMTcsIDIwMTkgNzozMSBBTQ0KVG86IGNvc2UgPGNvc2VAaWV0Zi5vcmc8bWFpbHRvOmNvc2VA aWV0Zi5vcmc+Pg0KU3ViamVjdDogW0NPU0VdIPCflJQgV0dMQyBvZiBkcmFmdC1pZXRmLWNvc2Ut d2ViYXV0aG4tYWxnb3JpdGhtcw0KDQpEZWFyIGFsbCwNCg0KVGhpcyBtZXNzYWdlIHN0YXJ0cyB0 aGUgV29ya2luZyBHcm91cCBMYXN0IENhbGwgb24gdGhlIGRyYWZ0LWlldGYtY29zZS13ZWJhdXRo bi1hbGdvcml0aG1zIFsxXS4NCg0KVGhlIHdvcmtpbmcgZ3JvdXAgbGFzdCBjYWxsIHdpbGwgcnVu IGZvciAqKnR3byB3ZWVrcyoqLCBlbmRpbmcgb24NCk9jdG9iZXIgMSwgMjAxOS4NCg0KUGxlYXNl IHJldmlldyBhbmQgc2VuZCBhbnkgY29tbWVudHMgb3IgZmVlZGJhY2sgdG8gdGhlIHdvcmtpbmcg Z3JvdXAuIEV2ZW4gaWYgeW91ciBmZWVkYmFjayBpcyAidGhpcyBpcyByZWFkeSIsIHBsZWFzZSBs ZXQgdXMga25vdy4NCg0KVGhhbmsgeW91LA0KDQotIE1hdHRoZXcgYW5kIEl2YXlsbw0KQ09TRSBD aGFpcnMNCg0KWzFdOiBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRm LWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtcy88aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVj dGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGZGF0YXRyYWNrZXIuaWV0Zi5vcmcl MkZkb2MlMkZkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtcyUyRiZkYXRhPTAyJTdD MDElN0NNaWNoYWVsLkpvbmVzJTQwbWljcm9zb2Z0LmNvbSU3QzYyNGVkMzlkNDI3ZTQwZjVmZGVl MDhkNzU2OGE1NTM1JTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3 QzYzNzA3MzAyNDQ1NDA4ODY1OSZzZGF0YT1Zb1piNkREY3dXWkFXcUxiZnVTaEd3ZThHN3RUTUti SGVTN2dKQkgxNyUyRlUlM0QmcmVzZXJ2ZWQ9MD4NCg== --_000_DM6PR00MB0569056BEAE866D47A63AEADF5680DM6PR00MB0569namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpWZXJkYW5hOw0KCXBhbm9zZS0xOjIgMTEg NiA0IDMgNSA0IDQgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlNlZ29lIFVJIEVt b2ppIjsNCglwYW5vc2UtMToyIDExIDUgMiA0IDIgNCAyIDIgMzt9DQpAZm9udC1mYWNlDQoJe2Zv bnQtZmFtaWx5OkNvbnNvbGFzOw0KCXBhbm9zZS0xOjIgMTEgNiA5IDIgMiA0IDMgMiA0O30NCi8q IFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNv Tm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6 ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBz cGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsN Cgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxp bmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRl eHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5Nc29QbGFpblRleHQsIGxpLk1zb1BsYWluVGV4 dCwgZGl2Lk1zb1BsYWluVGV4dA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxl LWxpbms6IlBsYWluIFRleHQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4w MDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1z ZXJpZjt9DQpwcmUNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJI VE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAw MDFwdDsNCglmb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0K cC5Nc29MaXN0UGFyYWdyYXBoLCBsaS5Nc29MaXN0UGFyYWdyYXBoLCBkaXYuTXNvTGlzdFBhcmFn cmFwaA0KCXttc28tc3R5bGUtcHJpb3JpdHk6MzQ7DQoJbWFyZ2luLXRvcDowaW47DQoJbWFyZ2lu LXJpZ2h0OjBpbjsNCgltYXJnaW4tYm90dG9tOjBpbjsNCgltYXJnaW4tbGVmdDouNWluOw0KCW1h cmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJD YWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uSFRNTFByZWZvcm1hdHRlZENoYXINCgl7bXNvLXN0 eWxlLW5hbWU6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5 OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQiOw0KCWZvbnQtZmFtaWx5OiJD b3VyaWVyIE5ldyI7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFs MA0KCXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJn aW4tbGVmdDowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjt9DQpzcGFuLlBsYWluVGV4dENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IlBsYWlu IFRleHQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJQ bGFpbiBUZXh0IjsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVt YWlsU3R5bGUyMw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2Fs aWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTI0 DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5z LXNlcmlmOw0KCWNvbG9yOiMwMDIwNjA7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjUNCgl7bXNvLXN0eWxl LXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29s b3I6d2luZG93dGV4dDt9DQpzcGFuLmdyZXkNCgl7bXNvLXN0eWxlLW5hbWU6Z3JleTt9DQpzcGFu LkVtYWlsU3R5bGUyNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZh bWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjojMDAyMDYwO30NCi5Nc29DaHBEZWZh dWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0K QHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAx LjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24x O30NCi8qIExpc3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21zby1saXN0LWlkOjU4ODI3 NDY4NDsNCgltc28tbGlzdC10eXBlOmh5YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6LTIw MTI5NjA2MDYgLTE5NjY3MTgxMzAgNjc2OTg3MTMgNjc2OTg3MTUgNjc2OTg3MDMgNjc2OTg3MTMg Njc2OTg3MTUgNjc2OTg3MDMgNjc2OTg3MTMgNjc2OTg3MTU7fQ0KQGxpc3QgbDA6bGV2ZWwxDQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10ZXh0OiIl MVwpIjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsMg0KCXttc28t bGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9u ZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWlu O30NCkBsaXN0IGwwOmxldmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpyb21hbi1sb3dl cjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OnJpZ2h0Ow0KCXRleHQtaW5kZW50Oi05LjBwdDt9DQpAbGlzdCBsMDpsZXZlbDQNCgl7bXNvLWxl dmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YWxwaGEtbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVs LW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDps ZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVs LXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdodDsNCgl0ZXh0 LWluZGVudDotOS4wcHQ7fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC10YWItc3RvcDpu b25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1 aW47fQ0KQGxpc3QgbDA6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLWxv d2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25l Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246cmlnaHQ7DQoJdGV4dC1pbmRlbnQ6LTkuMHB0 O30NCkBsaXN0IGwxDQoJe21zby1saXN0LWlkOjYxNDA5NDI4OTsNCgltc28tbGlzdC10ZW1wbGF0 ZS1pZHM6LTcwNjE2MDQ2MDt9DQpAbGlzdCBsMTpsZXZlbDENCgl7bXNvLWxldmVsLXN0YXJ0LWF0 OjI7DQoJbXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRh Yi1zdG9wOi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0uMjVpbjt9DQpAbGlzdCBsMTpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6 YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEuMGluOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDE6bGV2ZWwz DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWIt c3RvcDoxLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVsNA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDph bHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi4waW47DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMTpsZXZlbDUN Cgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1z dG9wOjIuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotLjI1aW47fQ0KQGxpc3QgbDE6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFs cGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDozLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVsNw0K CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6My41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0uMjVpbjt9DQpAbGlzdCBsMTpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxw aGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQuMGluOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDE6bGV2ZWw5DQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3Rv cDo0LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LS4yNWluO30NCkBsaXN0IGwyDQoJe21zby1saXN0LWlkOjc0NDMwMzQwODsNCgltc28tbGlzdC10 ZW1wbGF0ZS1pZHM6NTU2NDQ5MzE4O30NCkBsaXN0IGwyOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVt YmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6LjVpbjsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0 IGwyOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28t bGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMjpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEuNWluOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3Qg bDI6bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1s ZXZlbC10YWItc3RvcDoyLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ dGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwyOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVy LWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBs MjpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxl dmVsLXRhYi1zdG9wOjMuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDI6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDozLjVpbjsNCgltc28tbGV2 ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwy OmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2 ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRl eHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMjpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQuNWluOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDMN Cgl7bXNvLWxpc3QtaWQ6ODQyODU4NjM2Ow0KCW1zby1saXN0LXRlbXBsYXRlLWlkczo3NDc2OTI4 NDg7fQ0KQGxpc3QgbDM6bGV2ZWwxDQoJe21zby1sZXZlbC1zdGFydC1hdDozOw0KCW1zby1sZXZl bC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDouNWluOw0K CW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0K QGxpc3QgbDM6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0K CW1zby1sZXZlbC10YWItc3RvcDoxLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxl ZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwzOmxldmVsMw0KCXttc28tbGV2ZWwt bnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS41aW47DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpA bGlzdCBsMzpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOjIuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDM6bGV2ZWw1DQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDoyLjVpbjsNCglt c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBs aXN0IGwzOmxldmVsNg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCglt c28tbGV2ZWwtdGFiLXN0b3A6My4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMzpsZXZlbDcNCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuNWluOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxp c3QgbDM6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1z by1sZXZlbC10YWItc3RvcDo0LjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwzOmxldmVsOQ0KCXttc28tbGV2ZWwtbnVt YmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC41aW47DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlz dCBsNA0KCXttc28tbGlzdC1pZDo5MDcxODE5MDA7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOi0x NzI4NjY4ODY2O30NCkBsaXN0IGw0OmxldmVsMQ0KCXttc28tbGV2ZWwtc3RhcnQtYXQ6NDsNCglt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y NWluO30NCkBsaXN0IGw0OmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11 cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsNDpsZXZlbDMNCgl7bXNv LWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEu NWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1 aW47fQ0KQGxpc3QgbDQ6bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVw cGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDoyLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGw0OmxldmVsNQ0KCXttc28t bGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi41 aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVp bjt9DQpAbGlzdCBsNDpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBw ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDQ6bGV2ZWw3DQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDozLjVp bjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWlu O30NCkBsaXN0IGw0OmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBl cjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsNDpsZXZlbDkNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQuNWlu Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47 fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0K LS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpl eHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0 ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6 ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0t Pg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUi Pg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJjb2xvcjojMDAyMDYwIj5UaGFua3MgZm9yIHlvdXIgcmVwbGllcywgSmltLiZuYnNw OyBNeSBhZGRpdGlvbmFsIHJlcGxpZXMgYXJlIHByZWZpeGVkIGJ5IOKAnDwvc3Bhbj48c3BhbiBz dHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZTImZ3Q7PC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjoj MDAyMDYwIj7igJ0uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj4mbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgLS0gTWlrZTxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5v bmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAw aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+RnJvbTo8L2I+IEppbSBTY2hhYWQgJmx0O2ll dGZAYXVndXN0Y2VsbGFycy5jb20mZ3Q7IDxicj4NCjxiPlNlbnQ6PC9iPiBNb25kYXksIE9jdG9i ZXIgMjEsIDIwMTkgNTo1NCBQTTxicj4NCjxiPlRvOjwvYj4gTWlrZSBKb25lcyAmbHQ7TWljaGFl bC5Kb25lc0BtaWNyb3NvZnQuY29tJmd0OzsgJ2Nvc2UnICZsdDtjb3NlQGlldGYub3JnJmd0Ozxi cj4NCjxiPkNjOjwvYj4gZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXNAaWV0Zi5v cmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUkU6IFtDT1NFXSA8c3BhbiBzdHlsZT0iZm9udC1mYW1p bHk6JnF1b3Q7U2Vnb2UgVUkgRW1vamkmcXVvdDssc2Fucy1zZXJpZiI+DQomIzEyODI3Njs8L3Nw YW4+IFdHTEMgb2YgZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXM8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4w cHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+RnJvbTo8L2I+IE1pa2Ug Sm9uZXMgJmx0OzxhIGhyZWY9Im1haWx0bzpNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20iPk1p Y2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbTwvYT4mZ3Q7DQo8YnI+DQo8Yj5TZW50OjwvYj4gTW9u ZGF5LCBPY3RvYmVyIDIxLCAyMDE5IDU6MDAgUE08YnI+DQo8Yj5Ubzo8L2I+IEppbSBTY2hhYWQg Jmx0OzxhIGhyZWY9Im1haWx0bzppZXRmQGF1Z3VzdGNlbGxhcnMuY29tIj5pZXRmQGF1Z3VzdGNl bGxhcnMuY29tPC9hPiZndDs7ICdjb3NlJyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmNvc2VAaWV0Zi5v cmciPmNvc2VAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj4gPGEgaHJlZj0ibWFpbHRv OmRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zQGlldGYub3JnIj5kcmFmdC1pZXRm LWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtc0BpZXRmLm9yZzwvYT48YnI+DQo8Yj5TdWJqZWN0Ojwv Yj4gUkU6IFtDT1NFXSA8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkgRW1v amkmcXVvdDssc2Fucy1zZXJpZiI+DQomIzEyODI3Njs8L3NwYW4+IFdHTEMgb2YgZHJhZnQtaWV0 Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj5UaGFua3MgZm9yIHlvdXIgcmV2 aWV3LCBKaW0uJm5ic3A7IFJlc3BvbnNlcyBhcmUgaW5saW5lLCBwcmVmaXhlZCBieSDigJw8L3Nw YW4+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPk1pa2UmZ3Q74oCdLjwvc3Bhbj48c3BhbiBz dHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYw Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgLS0gTWlrZTxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjoj MDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0i Ym9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQg MGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+RnJvbTo8L2I+IEppbSBTY2hh YWQgJmx0OzxhIGhyZWY9Im1haWx0bzppZXRmQGF1Z3VzdGNlbGxhcnMuY29tIj5pZXRmQGF1Z3Vz dGNlbGxhcnMuY29tPC9hPiZndDsNCjxicj4NCjxiPlNlbnQ6PC9iPiBUdWVzZGF5LCBTZXB0ZW1i ZXIgMTcsIDIwMTkgNjo0NiBQTTxicj4NCjxiPlRvOjwvYj4gJ2Nvc2UnICZsdDs8YSBocmVmPSJt YWlsdG86Y29zZUBpZXRmLm9yZyI+Y29zZUBpZXRmLm9yZzwvYT4mZ3Q7PGJyPg0KPGI+Q2M6PC9i PiA8YSBocmVmPSJtYWlsdG86ZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXNAaWV0 Zi5vcmciPmRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zQGlldGYub3JnPC9hPjxi cj4NCjxiPlN1YmplY3Q6PC9iPiBSRTogW0NPU0VdIDxzcGFuIHN0eWxlPSJmb250LWZhbWlseTom cXVvdDtTZWdvZSBVSSBFbW9qaSZxdW90OyxzYW5zLXNlcmlmIj4NCiYjMTI4Mjc2Ozwvc3Bhbj4g V0dMQyBvZiBkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtczxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SSBzdGFydCB0aGlzIHJldmlldyBieSBjb3B5aW5n IGZvcndhcmQgYWxsIG9mIG15IGNvbW1lbnRzIG9uIGRyYWZ0LWpvbmVzLWNvc2UtYWRkaXRpb25h bC1hbGdvcml0aG1zLTAwPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzPjEuJm5ic3A7IEkgd2Fz IHN1cnByaXNlZCB0aGF0IHRoZXJlIGFyZSB0d28gYWxnb3JpdGhtcyBzdGlsbCBpbiB0aGUgV2Vi QXV0aG4gZG9jdW1lbnQgdGhhdCBhcmUgbm90IGluY2x1ZGVkIGhlcmUuJm5ic3A7IElzIHRoYXQg aW50ZW50aW9uYWwgYW5kIHdoYXQgaXMgdGhlIHBsYW4gZm9yd2FyZCBmb3IgdGhlbT88L3M+IFRo aXMgb25lIHdhcyBhZGRyZXNzZWQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHM+Mi4m bmJzcDsgVGhlIHRpdGxlIG9mIHRoZSBkb2N1bWVudCBpcyBub3QgZGVzY3JpcHRpdmUgaW4gdGVy bXMgb2YgYSBzdGFuZGFsb25lIHNlbnRlbmNlIG9uIHdoYXQgdGhpcyBkb2N1bWVudCBpcyBkb2lu Zy4mbmJzcDsgSXQgc2hvdWxkIGJlIG1vcmUgc3BlY2lmaWMgb24gdGhlIGFsZ29yaXRobXMuPC9z PiZuYnNwOyBUaGUgbmV3IHRpdGxlIGlzIGZpbmUgZXhjZXB0IGZvciB0aGUgZmFjdCB0aGF0IFdl YkF1dGhuIGlzIG5vdA0KIGV4cGFuZGVkIHRvIGFueXRoaW5nLjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij4zLiZuYnNwOyBBYnN0cmFjdDombmJzcDsgQSBsaXN0IG9mIHRoZSBhbGdvcml0 aG1zIGJlaW5nIHByb2Nlc3NlZCBpbiB0aGlzIGRvY3VtZW50IHdvdWxkIGJlIHJlYXNvbmFibGUu Jm5ic3A7IEJhc2VkIG9uIHRoZSBjdXJyZW50IHRleHQsIHRoZSBhYnN0cmFjdCB3b3VsZCBuZWVk IHRvIGJlIHJlLXdyaXR0ZW4gYXMgc29vbiBhcyB0aGUgYWxnb3JpdGhtcyBhcmUgcmVnaXN0ZXJl ZCBiZWNhdXNlIHRoZXkgd291bGQgdGhlbiBiZSByZWdpc3RlcmVkDQogYW5kIHRodXMgdGhlIHNw ZWNpZmljYXRpb24gaXMgbm90IG5lY2Vzc2FyeS4mbmJzcDsgSXQgd291bGQgYWxzbyBiZSBzbGln aHRseSBvZGQgaW4gdGhlIGV2ZW50IHRoYXQgdGhlIENUQVAgb3IgV2ViQXV0aG4gcHJvdG9jb2xz IGFyZSB1cGRhdGVkIHRvIGFkZCBuZXcgYWxnb3JpdGhtcyBhcyB0aGV5IHdvdWxkIG5vdCBiZSBp biB0aGlzIGRvY3VtZW50LiZuYnNwOyAoU2VlIGlzc3VlICMxLikmbmJzcDsNCjxiPk5vIENoYW5n ZTxvOnA+PC9vOnA+PC9iPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxl PSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZndDsgVW5kZXJz dG9vZC4mbmJzcDsgSeKAmWxsIHJld29yZCBzbyB0aGF0IHRoZSB0ZXh0IHJlbWFpbnMgY29ycmVj dCBhZnRlciB0aGUgSUFOQSByZWdpc3RyYXRpb25zIGhhdmUgYmVlbiBwZXJmb3JtZWQuPG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNv bG9yOiMwMDIwNjAiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Q bGFpblRleHQiPjQuJm5ic3A7IFNlY3Rpb24gMTombmJzcDsgU2VlIGFic3RyYWN0IGNvbW1lbnQu Jm5ic3A7IDxiPk5vIGNoYW5nZTxvOnA+PC9vOnA+PC9iPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1 MCI+TWlrZSZndDsgRGl0dG88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+NS4mbmJzcDsgU2VjdGlvbiAyOiBUaGUg cmVjb21tZW5kZWQgY29sdW1uIG5lZWRzIHRvIGJlIGFkZGVkIHRvIHRoZSB0YWJsZS4mbmJzcDsN CjxiPk5vIGNoYW5nZTxvOnA+PC9vOnA+PC9iPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlr ZSZndDsgSSBhc3N1bWUgdGhlIGNvbHVtbiB5b3XigJlyZSB0YWxraW5nIGFib3V0IGlzIHRoZSBv bmUgcmVxdWVzdGVkIGluIHRoZSBuZXh0IGNvbW1lbnQuPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij42LiZuYnNwOyBTZWN0aW9uIDI6Jm5ic3A7IFRoZSBkaXNjdXNzaW9uIG9u IHdoYXQgaXMgYW5kIGlzIG5vdCByZWNvbW1lbmRlZCBhbmQgd2h5IGJlbG9uZ3MgaW4gdGhpcyBz ZWN0aW9uIG5vdCBpbiB0aGUgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMuJm5ic3A7DQo8Yj5ObyBj aGFuZ2U8L2I+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBz dHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPk1pa2UmZ3Q7IE9L LCBJIGNhbiBhZGQgYW4g4oCcSW1wbGVtZW50YXRpb24gUmVxdWlyZW1lbnRz4oCdIGNvbHVtbiwg cGFyYWxsZWxpbmcgdGhlIHRyZWF0bWVudCBpbjwvc3Bhbj48c3BhbiBzdHlsZT0iY29sb3I6IzAw MjA2MCI+DQo8L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlv bi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGdG9vbHMuaWV0Zi5vcmclMkZodG1sJTJG cmZjNzUxOCUyM3NlY3Rpb24tMy4xJmFtcDtkYXRhPTAyJTdDMDElN0NNaWNoYWVsLkpvbmVzJTQw bWljcm9zb2Z0LmNvbSU3QzYyNGVkMzlkNDI3ZTQwZjVmZGVlMDhkNzU2OGE1NTM1JTdDNzJmOTg4 YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzA3MzAyNDQ1NDA2ODY3MyZh bXA7c2RhdGE9b2FEMnJxeFdVRjh5MzVGJTJCV1JlWFJSRDJMVjRpQ3RJJTJGenBrandEQk56bWsl M0QmYW1wO3Jlc2VydmVkPTAiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM3NTE4I3Nl Y3Rpb24tMy4xPC9hPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUwIj4uPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIw NjAiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PjcuJm5ic3A7IFNlY3Rpb24gMjogWW91IGFyZSBtaXNzaW5nIHNvbWUgY2hlY2tzIHRoYXQgc2hv dWxkIGJlIGRvbmUgb24gc2lnbmluZyBhbmQgdmVyaWZpY2F0aW9uLiZuYnNwOyBMb29rIGF0IHRo ZSBzdGFuZGFyZCB0ZXh0IGF0IHRoZSBlbmQgb2Ygc2VjdGlvbnMgaW4gUkZDIDgxNTIgZm9yIGEg cGF0dGVybi4mbmJzcDsgWW91IG1pZ2h0IGFsc28gd2FudCB0byBhZGQgYSBjaGVjayBvbiBsZW5n dGhzIG9mIGtleXMgYm90aCBmb3INCiBhIG1heGltdW0gYW5kIGEgbWluaW11bSBsZW5ndGguJm5i c3A7IDxiPk5vIGNoYW5nZTwvYj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4g c3R5bGU9ImNvbG9yOiMwMEIwNTAiPk1pa2UmZ3Q7IEtleSBzaXplIGNvbnNpZGVyYXRpb25zIGZv ciB0aGUgUlNBIGFsZ29yaXRobXMgYXJlIGFscmVhZHkgY292ZXJlZCBpbg0KPC9zcGFuPjxhIGhy ZWY9Imh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1o dHRwcyUzQSUyRiUyRnRvb2xzLmlldGYub3JnJTJGaHRtbCUyRmRyYWZ0LWlldGYtY29zZS13ZWJh dXRobi1hbGdvcml0aG1zLTAxJTIzc2VjdGlvbi01LjEmYW1wO2RhdGE9MDIlN0MwMSU3Q01pY2hh ZWwuSm9uZXMlNDBtaWNyb3NvZnQuY29tJTdDNjI0ZWQzOWQ0MjdlNDBmNWZkZWUwOGQ3NTY4YTU1 MzUlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MDczMDI0 NDU0MDc4NjY3JmFtcDtzZGF0YT04VjNScWcwTkJodGtPbkJ4cWdkeEpCN0RMRVlpdEo3dkhSZGNw azMzSjZ3JTNEJmFtcDtyZXNlcnZlZD0wIj5odHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJh ZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXMtMDEjc2VjdGlvbi01LjE8L2E+PHNwYW4g c3R5bGU9ImNvbG9yOiMwMEIwNTAiPi4mbmJzcDsNCiBGb3IgRVMyNTZLLCBJIGNhbiBzYXkgdGhh dCB0aGUgWCBhbmQgWSB2YWx1ZXMgZm9yIHRoZSBwdWJsaWMga2V5IG11c3QgYm90aCBiZSBleGFj dGx5IDI1NiBiaXRzLiZuYnNwOyBXaGF0IGFyZSB0aGUgc3BlY2lmaWMgY2hlY2tzIHlvdSB3YW50 ZWQgYWRkZWQ/Jm5ic3A7IEkgY291bGRu4oCZdCB0ZWxsIHdoaWNoIHNlY3Rpb25zIG9mIFJGQyA4 MTUyIHlvdSB3ZXJlIHJlZmVycmluZyB0by4mbmJzcDsgQWxzbywgbm90ZSB0aGF0IGJldHdlZW4g ZHJhZnQtam9uZXMtMDAgYW5kIGRyYWZ0LWlldGYtMDEsDQogdGhlIGRlc2NyaXB0aW9ucyBvZiB0 aGUgdXNlIG9mIGhhc2ggZnVuY3Rpb25zIHdlcmUgYmVlZmVkIHVwLCBpbiByZXNwb25zZSB0byBv dGhlciBjb21tZW50cyByZWNlaXZlZC48L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAi PjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPldoZW4gdXNpbmcg YSBDT1NFIGtleSBmb3IgdGhpcyBhbGdvcml0aG0sIHRoZSBmb2xsb3dpbmcgY2hlY2tzIGFyZTxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJz cDsmbmJzcDsgbWFkZTo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBvJm5ic3A7IFRoZSAna3R5JyBmaWVsZCBNVVNU IGJlIHByZXNlbnQsIGFuZCBpdCBNVVNUIGJlICdFQzInLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IG8mbmJzcDsg SWYgdGhlICdhbGcnIGZpZWxkIGlzIHByZXNlbnQsIGl0IE1VU1QgbWF0Y2ggdGhlIEVDRFNBIHNp Z25hdHVyZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgYWxnb3JpdGhtIGJlaW5nIHVzZWQu PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 Ij4mbmJzcDsmbmJzcDsgbyZuYnNwOyBJZiB0aGUgJ2tleV9vcHMnIGZpZWxkIGlzIHByZXNlbnQs IGl0IE1VU1QgaW5jbHVkZSAnc2lnbicgd2hlbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg Y3JlYXRpbmcgYW4gRUNEU0Egc2lnbmF0dXJlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IG8mbmJzcDsgSWYgdGhl ICdrZXlfb3BzJyBmaWVsZCBpcyBwcmVzZW50LCBpdCBNVVNUIGluY2x1ZGUgJ3ZlcmlmeScgd2hl bjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4m bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgdmVyaWZ5aW5nIGFuIEVDRFNBIHNpZ25hdHVy ZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xv cjojMDBCMDUwIj5NaWtlMiZndDsgT0s8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPjguJm5ic3A7IFNlY3Rpb24gMzombmJzcDsgVGhpcyBzaG91bGQgbm90IGJlIHRoZSBmaXJz dCB1c2Ugb2YgSk9TRSBhbmQgQ09TRSBhbmQgdGhlcmVmb3JlIHRoZSBleHBhbnNpb25zIGhlcmUg bWFrZSBubyBzZW5zZS4mbmJzcDsgVGhhdCBzaG91bGQgYmUgaW4gdGhlIGludHJvZHVjdGlvbi4m bmJzcDsNCjxiPk5vIGNoYW5nZTwvYj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNw YW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPk1pa2UmZ3Q7IEnigJlsbCBsb29rIGludG8gZXhwYW5k aW5nIGFiYnJldmlhdGlvbnMgb24gZmlyc3QgdXNlcyBhbmQgbm90IG9uIHN1YnNlcXVlbnQgdXNl cy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBz dHlsZT0iY29sb3I6IzAwQjA1MCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+PHM+OS4gU2VjdGlvbiAzLjE6Jm5ic3A7IEkgaGF2ZSBvbmx5IHJh cmVseSBzZWVuIHRoaXMgY3VydmUgYXMgUC0yNTZLLCBpdCBpcyBhbG1vc3QgYWx3YXlzIHJlZmVy cmVkIHRvIGFzIHNlY3AyNTZrMS4mbmJzcDsgSSB3b3VsZCBhc2sgdGhhdCB0aGlzIGJlIGNoYW5n ZWQgaW4gdGhlIENPU0UgcmVwcmVzZW50YXRpb24uJm5ic3A7IEkgYW0gYWdub3N0aWMgYWJvdXQg d2hhdCBzaG91bGQgYmUgaW4gdGhlIEpPU0UgcmVwcmVzZW50YXRpb24uDQo8L3M+Jm5ic3A7Rml4 ZWQ8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+MTAuIFNlY3Rpb24gMy4xOiZuYnNwOyBJ IGRvbid0IHVuZGVyc3RhbmQgdGhlIHJlYXNvbiBmb3IgdGhlIGxhc3QgcGFyYWdyYXBoIGluIHRo ZSBzZWN0aW9uLiZuYnNwOyBJdCBzZWVtcyB0byBtZSB0aGF0IHRoaXMgc2hvdWxkIGp1c3QgcmVm ZXIgdG8gYWxsIG9mIHRoZSBpdGVtcyBkZWZpbmVkIGZvciBFQzIgaW4gQ09TRS4mbmJzcDsNCjxi Pk5vIENoYW5nZTwvYj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9 ImNvbG9yOiMwMEIwNTAiPk1pa2UmZ3Q7IE9LPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4xMS4gU2VjdGlvbiAzLjE6Jm5ic3A7IElzIHRoZXJlIGEgcmVjb21tZW5kYXRpb24g b24gdXNpbmcgY29tcHJlc3NlZCB2cyBub24tY29tcHJlc3NlZCBwb2ludHM/Jm5ic3A7DQo8Yj5O byBjaGFuZ2U8L2I+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJj b2xvcjojMDBCMDUwIj5NaWtlJmd0OyBJIHdpbGwgc3RhdGUgdGhhdCB1bmNvbXByZXNzZWQgcG9p bnQgcmVwcmVzZW50YXRpb25zIGFyZSB0byBiZSB1c2VkIGZvciBKV0tzLCBhcyBhIGNvbXByZXNz ZWQgcmVwcmVzZW50YXRpb24gZm9yIGtleSB0eXBlIOKAnEVD4oCdIGlzIG5vdCBkZWZpbmVkLiZu YnNwOyBBbmQgSSB3aWxsIHN0YXRlIHRoYXQgdGhlIHVuY29tcHJlc3NlZCBtdXN0IGFsc28gYmUg dXNlZA0KIGZvciBDV0tzLCBhcyBJIGRvbuKAmXQga25vdyB0aGF0IHRoZSBHYWxvaXMgecKyID0g eMKzICYjNDM7IDcgZmluaXRlIGZpZWxkIGZvcm0gdXNlZCB3aXRoIHNlY3AyNTZrMSBpcyBhbWVu YWJsZSB0byBjb21wcmVzc2lvbi4mbmJzcDsgKEhvd2V2ZXIsIGlmIHRoZSBDUkZHIG9yIG90aGVy IGV4cGVydHMgdGVsbCBtZSB0aGF0IGl0IGlzLCBJIHdpbGwgYWxzbyBhbGxvdyBmb3IgdGhlIGNv bXByZXNzZWQgcmVwcmVzZW50YXRpb24gd2l0aCBDT1NFLik8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPjxhIGhyZWY9Imh0dHBzOi8vYml0Y29pbi5zdGFja2V4Y2hhbmdlLmNv bS9xdWVzdGlvbnMvNzYxODEvYml0Y29pbi1wdWJsaWMta2V5cy1mcm9tLXVuY29tcHJlc3NlZC10 by1jb21wcmVzc2VkLXZlcnNpb24td2l0aC1jb2RlLXNhbXBsZSI+aHR0cHM6Ly9iaXRjb2luLnN0 YWNrZXhjaGFuZ2UuY29tL3F1ZXN0aW9ucy83NjE4MS9iaXRjb2luLXB1YmxpYy1rZXlzLWZyb20t dW5jb21wcmVzc2VkLXRvLWNvbXByZXNzZWQtdmVyc2lvbi13aXRoLWNvZGUtc2FtcGxlPC9hPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9y OiMwMDIwNjAiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFp blRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUwIj5NaWtlMiZndDsgT0ssIHRoZW4gSeKA mWxsIGFsbG93IHRoZSBjb21wcmVzc2VkIHJlcHJlc2VudGF0aW9uIGZvciBDT1NFLjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xv cjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij4xMi4mbmJzcDsgU2VjdGlvbiAzLjE6Jm5ic3A7IFlvdSBuZWVkIHRvIHRhbGsgYWJv dXQgaWYgdGhpcyBpcyBnb2luZyB0byBiZSBJRVRGIHJlY29tbWVuZGVkIG9yIG5vdC4mbmJzcDsm bmJzcDsgKEFuZCB3aHkpJm5ic3A7DQo8Yj5ObyBjaGFuZ2U8L2I+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUwIj5NaWtlJmd0OyA8L3NwYW4+ PGEgaHJlZj0iaHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/ dXJsPWh0dHBzJTNBJTJGJTJGdG9vbHMuaWV0Zi5vcmclMkZodG1sJTJGZHJhZnQtaWV0Zi1jb3Nl LXdlYmF1dGhuLWFsZ29yaXRobXMtMDElMjNzZWN0aW9uLTQuMSZhbXA7ZGF0YT0wMiU3QzAxJTdD TWljaGFlbC5Kb25lcyU0MG1pY3Jvc29mdC5jb20lN0M2MjRlZDM5ZDQyN2U0MGY1ZmRlZTA4ZDc1 NjhhNTUzNSU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2Mzcw NzMwMjQ0NTQwNzg2NjcmYW1wO3NkYXRhPXBrUlZhdkRSWmRlV2RnV1c3NVl4T2Q1T1hRV3FQcUM2 JTJGSnlUT2E1SG9lRSUzRCZhbXA7cmVzZXJ2ZWQ9MCI+aHR0cHM6Ly90b29scy5pZXRmLm9yZy9o dG1sL2RyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zLTAxI3NlY3Rpb24tNC4xPC9h PjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUwIj4NCiBoYXMgaXQgYmVpbmcgcmVjb21tZW5kZWQu Jm5ic3A7IEkgd2lsbCBkZXNjcmliZSB3aHkgaW4gdGhlIG5leHQgdmVyc2lvbiwgYXMgcmVxdWVz dGVkLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+MTMuJm5ic3A7IFNlY3Rp b24gMy4yOiZuYnNwOyBJIGRvbid0IHVuZGVyc3RhbmQgd2hhdCB0aGlzIHNlY3Rpb24gaXMgZG9p bmcuJm5ic3A7IElmIHlvdSBhcmUgcmVhbGx5IGRlZmluaW5nIGEgbmV3IHNpZ25hdHVyZSBhbGdv cml0aG0sIHRoZW4gdGhhdCBzaG91bGQgYmUgbm90ZWQgYXMgcGFydCBvZiB0aGUgcmVxdWlyZW1l bnRzIGluIHNlY3Rpb24gMy4xIG9uIHRoZSBrZXkuJm5ic3A7IElmIHlvdSBhcmUgbm90IGRlZmlu aW5nIGEgbmV3DQogc2lnbmF0dXJlIGFsZ29yaXRobSB0aGVuIHRoaXMgc2VjdGlvbiBtYWtlcyB6 ZXJvIHNlbnNlLiZuYnNwOyAoWW91IGFyZSBub3Qgc2F5aW5nIHdoYXQgdGhlIGhhc2ggYWxnb3Jp dGhtIGlzLikmbmJzcDsgQm90aCBvcHRpb25zIGFyZSByZWFzb25hYmxlLiZuYnNwOw0KPGI+VGhp cyBpcyBwYXJ0bHkgZGVhbHQgd2l0aDo8bzpwPjwvbzpwPjwvYj48L3A+DQo8cCBjbGFzcz0iTXNv UGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUwIj5NaWtlJmd0OyBUaGlzIGlzIGludGVudGlvbmFs bHkgZXhhY3RseSBwYXJhbGxlbCB0byBSRkMgNzUxOCwgd2hpY2ggZGVmaW5lcyB0aGUg4oCcRVMy NTbigJ0NCjxpPmFsZ29yaXRobSBpZGVudGlmaWVyIDwvaT50byBiZSB1c2VkIHdpdGggdGhlIOKA nFAtMjU24oCdIGN1cnZlLiZuYnNwOyBJbiB0aGlzIGNhc2UsIGl0IGlzIGRlZmluaW5nIHRoZSDi gJxFUzI1NkvigJ0NCjxpPmFsZ29yaXRobSBpZGVudGlmaWVyPC9pPiB0byBiZSB1c2VkIHdpdGgg dGhlIOKAnHNlY3AyNTZrMeKAnSBjdXJ2ZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij5bSkxTXSBCdXQgdGhhdCBpcyBub3QgdGhlIGRlY2lzaW9uIHRoYXQg d2FzIG1hZGUgZm9yIENPU0UuJm5ic3A7ICZuYnNwO09ubHkgdGhlIGhhc2ggYWxnb3JpdGhtIHdh cyBmaXhlZC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0 eWxlPSJjb2xvcjojMDBCMDUwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZTImZ3Q7IFRo ZSBwYXJhbGxlbCB0cmVhdG1lbnQgYWxzbyB3b3JrcyBmaW5lIGluIENPU0UuJm5ic3A7IE9uZSBt dXN0IG9ubHkgdXNlIOKAnHNlY3AyNTZrMeKAnSBmb3Igc2lnbmluZyB3aXRoIOKAnEVTMjU2S+KA nSBhbmQgbm90IHdpdGggb3RoZXIgYWxnb3JpdGhtIGlkZW50aWZpZXJzLiZuYnNwOyBJ4oCZbGwg bWFrZSB0aGlzIGNsZWFyZXIgaW4gdGhlIG5leHQgdmVyc2lvbi48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48Yj48bzpwPiZuYnNwOzwvbzpwPjwvYj48L3A+ DQo8b2wgc3R5bGU9Im1hcmdpbi10b3A6MGluIiBzdGFydD0iMSIgdHlwZT0iQSI+DQo8bGkgY2xh c3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDowaW47bXNvLWxpc3Q6bDAg bGV2ZWwxIGxmbzMiPlN0ZXAgMSBpcyBpbmNvcnJlY3QgaW4gdGVybXMgb2YgQ09TRSwgaXQgaXMg bm90IHRoZSBwYXlsb2FkIHRoYXQgaXMgc2lnbmVkLjxvOnA+PC9vOnA+PC9saT48L29sPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZndDsgSeKAmWxsIHJldmlzZSB0 aGUgZGVzY3JpcHRpb24gaGVyZSB0byBhbGlnbiB3aXRoIGNvcnJlY3QgQ09TRSB0ZXJtaW5vbG9n eS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjxvbCBzdHlsZT0ibWFyZ2luLXRvcDowaW4iIHN0YXJ0PSIyIiB0eXBlPSJB Ij4NCjxsaSBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjBpbjtt c28tbGlzdDpsMCBsZXZlbDEgbGZvMyI+VGhlIG5ldyBzaWduYXR1cmUgYWxnb3JpdGhtIGlzIGJl aW5nIGRlZmluZWQgd2l0aG91dCBtb3RpdmF0aW9uLiZuYnNwOyBUaGVyZSBzaG91bGQgYmUgdGV4 dCBkZXNjcmliaW5nIHdoeSB0aGlzIGlzIEVTMjU2SyBhbmQgbm90IEVTMjU2IChFQ0RTQSB3aXRo IFNIQS0yNTYpLiZuYnNwOyBJIGRvIG5vdGUgdGhhdCB0aGVyZSBtYXkgYmUNCiBkaWZmZXJlbnQg dGV4dCBiZWluZyBkZXNjcmliZWQgaGVyZSBmb3IgSk9TRSB0aGFuIGZvciBDT1NFLjxvOnA+PC9v OnA+PC9saT48L29sPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZn dDsg4oCcRVMyNTbigJ0gaXMgZGVmaW5lZCBieSBSRkMgNzUxOCB0byBiZSBhbHdheXMgdXNlZCB3 aXRoIHRoZSBQLTI1NiBjdXJ2ZS4mbmJzcDsgQSBkaWZmZXJlbnQgYWxnb3JpdGhtIGlkZW50aWZp ZXIgaXMgdGhlcmVmb3JlIHJlcXVpcmVkIHRvIHVzZSB3aXRoIHNlY3AyNTZrMS4mbmJzcDsgVGhp cyBpcyBieSBkZXNpZ24uJm5ic3A7IEFuZCB0aGUgdXNlIG9mIGlkZW50aWZpZXJzIGlzIGJlaW5n DQoga2VwdCBpbnRlbnRpb25hbGx5IHBhcmFsbGVsIGJldHdlZW4gSk9TRSBhbmQgQ09TRS48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxvbCBzdHlsZT0ibWFyZ2luLXRvcDowaW4iIHN0YXJ0PSIzIiB0eXBlPSJBIj4NCjxs aSBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjBpbjttc28tbGlz dDpsMCBsZXZlbDEgbGZvMyI+UGxlYXNlIGluY2x1ZGUgdGV4dCByZWxhdGVkIHRvIGRldGVybWlu aXN0aWMgRUNEU0EgaW4gdGhpcyB0ZXh0LjxvOnA+PC9vOnA+PC9saT48L29sPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZndDsgV2hhdCBkbyB5b3Ugd2FudCB0aGlz IHRleHQgdG8gc2F5PyZuYnNwOyBJ4oCZbSByZWx1Y3RhbnQgdG8gdXNlIHRoZSB0ZXh0IGF0DQo8 L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29r LmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGdG9vbHMuaWV0Zi5vcmclMkZodG1sJTJGcmZjODE1MiUy M3NlY3Rpb24tOC4xJmFtcDtkYXRhPTAyJTdDMDElN0NNaWNoYWVsLkpvbmVzJTQwbWljcm9zb2Z0 LmNvbSU3QzYyNGVkMzlkNDI3ZTQwZjVmZGVlMDhkNzU2OGE1NTM1JTdDNzJmOTg4YmY4NmYxNDFh ZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzA3MzAyNDQ1NDA4ODY1OSZhbXA7c2RhdGE9 Y2dmZ0gyM01kaTlVdzkzJTJGYmVFaUhFTW9RQSUyQktTaDloR0RBSnNDcUp5T1ElM0QmYW1wO3Jl c2VydmVkPTAiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM4MTUyI3NlY3Rpb24tOC4x PC9hPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUwIj4sDQogd2hpY2ggc2F5cyB0aGF0IOKAnGlt cGxlbWVudGF0aW9ucyBTSE9MVUQgdXNlIGEgZGV0ZXJtaW5pc3RpYyBhbGdvcml0aG3igJ0sIHdo aWNoIGlzIG1pc2xlYWRpbmcsIGluIHRoYXQgaXQgaW1wbGllcyB0aGF0IHRoZXJlIGFyZSBtYW55 IHN1Y2ggYWxnb3JpdGhtcyB0aGF0IGNvdWxkIGJlIHVzZWQuJm5ic3A7IEluIGZhY3QsIGV4YWN0 bHkgb25lIGlzIGJlaW5nIHNwZWNpZmllZC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxvbCBzdHlsZT0ibWFyZ2luLXRv cDowaW4iIHN0YXJ0PSI0IiB0eXBlPSJBIj4NCjxsaSBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjBpbjttc28tbGlzdDpsMCBsZXZlbDEgbGZvMyI+VGV4dCBzaW1p bGFyIHRvIHRoZSBlbmQgb2Ygc2VjdGlvbiAyLjEgaW4gZHJhZnQtaWV0Zi1jb3NlLXJmYzgxNTJi aXMtYWxncyBzaG91bGQgYmUgaW5jbHVkZWQgdG8gbmFpbCB0aGluZ3MgZG93biB0aWdodGVyPG86 cD48L286cD48L2xpPjwvb2w+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUw Ij5NaWtlJmd0OyBBcmUgeW91IHRhbGtpbmcgYWJvdXQgdGhlIHRleHQgc3RhcnRpbmcg4oCcPC9z cGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMDBCMDUwO2JhY2tn cm91bmQ6d2hpdGUiPldoZW4gdXNpbmcgYSBDT1NFIGtleSBmb3IgdGhpcyBhbGdvcml0aG0sIHRo ZSBmb2xsb3dpbmcgY2hlY2tzIGFyZSBtYWRlOjwvc3Bhbj48c3BhbiBzdHlsZT0iY29sb3I6IzAw QjA1MCI+4oCdPyZuYnNwOw0KIEFyZSB5b3UgcmVxdWVzdGluZyB0aG9zZSBzYW1lIGNoZWNrcz88 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMwMEIwNTA7YmFj a2dyb3VuZDp3aGl0ZSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48cz4x NC4gU2VjdGlvbiAzLjI6Jm5ic3A7IElmIHRoaXMgaXMgYSBuZXcgc2lnbmF0dXJlIGFsZ29yaXRo bSB0aGVuIGl0IHNob3VsZCBzYXkgd2hhdCBjdXJ2ZXMgaXQgb3BlcmF0ZXMgd2l0aC4mbmJzcDsg RWxzZSB0aGVyZSBzaG91bGQgYmUgYW4gYWRkaXRpb24gb2YgdGhlIGFsZ29yaXRobXMgdGhhdCBh cmUgbGVnYWwgaW4gc2VjdGlvbiAzLjE8L3M+IERvbmUsIGJ1dCBzZWUgY29tbWVudCAxMzxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48cz4xNS4mbmJzcDsgU2VjdGlvbiA0LjEgLSBUaGUg Y29ycmVjdCB0ZXJtIGlzICdwcm92aXNpb25hbCcgbm90ICd0ZW1wb3JhcnknLjwvcz4gTm90IG9m IHN1ZmZpY2llbnQgaW1wb3J0YW5jZSB0byB3b3JyeSBhYm91dC4mbmJzcDsgSG93ZXZlciB5b3Ug Y2FuIGp1c3QgdXNlIHRoZSBwcm92aXNpb25hbCBudW1iZXJzIHdpdGhvdXQgYW55IGNvbW1lbnQg b3IgVEJEIGdpdmVuIHRoZXkgYXJlIGFzc2lnbmVkLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5U ZXh0Ij4xNi4gU2VjdGlvbiA1LjQgLSBTbyBpZiBzb21lYm9keSBjaGFuZ2VzIHRoZSBjcnYgdmFs dWUsIGlzIHRoZXJlIGFueSB3YXkgdG8gdGVsbCB0aGUgZGlmZmVyZW5jZT8mbmJzcDsgSWYgc28g dGhlbiB0aGF0IHNob3VsZCBiZSBkZXNjcmliZWQgaGVyZS4mbmJzcDsNCjxiPk5vIGNoYW5nZTwv Yj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAi Pk1pa2UmZ3Q7IFRoZSB3YXkgdGhhdCB5b3UgY2FuIHRlbGwgdGhhdCB0aGUg4oCcY3J24oCdIHZh bHVlIGhhcyBiZWVuIGNoYW5nZWQgaXMgdGhhdCDigJxjcnbigJ0gcGFyYW1ldGVyIHdpbGwgaGF2 ZSBhIGRpZmZlcmVudCB2YWx1ZS4mbmJzcDsgVGhhdOKAmXMgc28gc2ltcGxlIGFzIHRvIGJlIHBy YWN0aWNhbGx5IHRhdXRvbG9naWNhbCBhbmQgbm90IHdvcnRoIGV4cGxpY2l0bHkgc2F5aW5nLiZu YnNwOw0KIEnigJltIGd1ZXNzaW5nIHlvdSB3YW50IG1lIHRvIHNheSBzb21ldGhpbmcgZWxzZSwg YnV0IEkgZG9u4oCZdCBrbm93IHdoYXQgaXQgaXMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImJhY2tncm91bmQ6d2hpdGUiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJj b2xvcjpibGFjaztiYWNrZ3JvdW5kOndoaXRlIj5bSkxTXSBTbywgSWYgSSB0YWtlIHlvdXIgc2Vw MjU2azEga2V5IGFuZCBjaGFuZ2UgdGhlIGN1cnZlIHRvIFAtMjU2IHRoYXQgY2Fubm90IGJlIGRl dGVjdGVkPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJjb2xvcjpibGFjaztiYWNrZ3JvdW5kOndoaXRlIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1 MDtiYWNrZ3JvdW5kOndoaXRlIj5NaWtlMiZndDsmbmJzcDsgWWVzLCBpdCBjYW4gYmUgZGV0ZWN0 ZWQgYmVjYXVzZSBpZiB0aGUgYWxnb3JpdGhtIGlkZW50aWZpZXIgdXNlZCBpcyDigJxFUzI1Nkvi gJ0gYW5kIHRoZSDigJxjcnbigJ0gdmFsdWUgaXMgbm90IOKAnHNlY3AyNTZrMeKAnSwgaXTigJlz IGlsbGVnYWwgaW5wdXQsIGFuZCBNVVNUIGJlIHJlamVjdGVkLiZuYnNwOyBJ4oCZbGwgYWRkIHRo aXMgdG8gdGhlIGNoZWNrcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjE3 LiZuYnNwOyBTZWN0aW9uIDUuMyAtIFRoaXMgdGV4dCBzZWVtcyB0byBiZSBzZWxmLWNvbnRyYWRp Y3RvcnkuJm5ic3A7IElmIHlvdSBNVVNUIE5PVCB1c2UgaXQsIHRoZW4gaG93IGNhbiB5b3UgdGhl biB1c2UgaXQ/Jm5ic3A7IEhvdyBkb2VzIGFuIGltcGxlbWVudGF0aW9uIGtub3cgd2hlbiBpdCBp cyBvciBpcyBub3QgYWNjZXB0YWJsZSBwcmFjdGljZSB0byB1c2UgdGhpcz8mbmJzcDsNCjxiPk5v IGNoYW5nZTwvYj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9y OiMwMEIwNTAiPk1pa2UmZ3Q7IEkgd2lsbCBhZGQgdGhlIGRlc2NyaXB0aW9uIGFncmVlZCB0byBp biB0aGUgb24tbGlzdCBjb252ZXJzYXRpb24gd2l0aCBOZWlsIE1hZGRlbi48L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMwMEIwNTA7YmFja2dyb3VuZDp3aGl0 ZSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5OZXcgSXRlbXM6PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjE4LiZuYnNwOyBGSURPMiBub3QgZXhwYW5kZWQgb24gZmlyc3QgdXNlIGlu IGFic3RyYWN0IGFuZCBpbnRyb2R1Y3Rpb24uJm5ic3A7ICZuYnNwO0RpdHRvIGZvciBXZWJBdXRo biwgQ09TRSw8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMw MEIwNTAiPk1pa2UmZ3Q7IFdpbGwgZG88L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNv bnNvbGFzO2NvbG9yOiMwMEIwNTA7YmFja2dyb3VuZDp3aGl0ZSI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj4xOS4mbmJzcDsgQWJzdHJhY3QgZG9lcyBub3QgcmVmZXIgdG8gSlNPTiDi gJMgc2hvdWxkIGl0PzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29s b3I6IzAwQjA1MCI+TWlrZSZndDsgSeKAmWxsIGxvb2sgaW50byBlZGl0b3JpYWxseSB3aGVyZSB0 byBiZXN0IGludHJvZHVjZSBKU09OLjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29u c29sYXM7Y29sb3I6IzAwQjA1MDtiYWNrZ3JvdW5kOndoaXRlIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjIwLiZuYnNwOyBTaG91bGQgYmUgcG9pbnRpbmcgdG8gdGhlIGN1cnJlbnQg ZHJhZnRzIGFuZCBub3QgdG8gUkZDIDgxNTIgaW4gdGhpcyBkb2N1bWVudC48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPk1pa2UmZ3Q7IEnigJls bCBwbGFuIHRvIHVwZGF0ZSB0aGlzIHNwZWNpZmljYXRpb24gb25jZSB0aGUgYmlzIHZlcnNpb25z IGFyZSBSRkNzLiZuYnNwOyBCdXQgdGhlcmXigJlzIG5vIG5lZWQgdG8gdGFrZSBhIG5vcm1hdGl2 ZSBkZXBlbmRlbmNlIG9uIHRoZSBuZXcgdmVyc2lvbnMsIGFzIHRoaXMgc3BlYyB1c2VzIG5vdGhp bmcgbmV3IGJlaW5nIGludHJvZHVjZWQgYnkgdGhlbS48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQt ZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMwMEIwNTA7YmFja2dyb3VuZDp3aGl0ZSI+PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4yMS4mbmJzcDsgR2l2ZW4gdGhhdCB0aGUgYWxnb3JpdGht cyBpbiBzZWN0aW9uIDIgYXJlIGFscmVhZHkgZGVmaW5lZCBpbiBKT1NFLCB0aGVyZSBzaG91bGQg YmUgdGV4dCB0aGF0IHRoaXMgc2VjdGlvbiBvbmx5IGFwcGxpZXMgdG8gQ09TRSBzbyB0aGVyZSBp cyBubyBjb25mdXNpb24uPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJj b2xvcjojMDBCMDUwIj5NaWtlJmd0OyBTdXJlPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWls eTpDb25zb2xhcztjb2xvcjojMDBCMDUwO2JhY2tncm91bmQ6d2hpdGUiPjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+SmltPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+RnJvbTo8L2I+IENPU0UgJmx0Ozxh IGhyZWY9Im1haWx0bzpjb3NlLWJvdW5jZXNAaWV0Zi5vcmciPmNvc2UtYm91bmNlc0BpZXRmLm9y ZzwvYT4mZ3Q7DQo8Yj5PbiBCZWhhbGYgT2YgPC9iPml2YXlsbyBwZXRyb3Y8YnI+DQo8Yj5TZW50 OjwvYj4gVHVlc2RheSwgU2VwdGVtYmVyIDE3LCAyMDE5IDc6MzEgQU08YnI+DQo8Yj5Ubzo8L2I+ IGNvc2UgJmx0OzxhIGhyZWY9Im1haWx0bzpjb3NlQGlldGYub3JnIj5jb3NlQGlldGYub3JnPC9h PiZndDs8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gW0NPU0VdIDxzcGFuIHN0eWxlPSJmb250LWZhbWls eTomcXVvdDtTZWdvZSBVSSBFbW9qaSZxdW90OyxzYW5zLXNlcmlmIj4mIzEyODI3Njs8L3NwYW4+ IFdHTEMgb2YgZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXM8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5 OiZxdW90O1ZlcmRhbmEmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMEI1Mzk0Ij5EZWFyIGFsbCw8 YnI+DQo8YnI+DQpUaGlzIG1lc3NhZ2Ugc3RhcnRzIHRoZSBXb3JraW5nIEdyb3VwIExhc3QgQ2Fs bCBvbiB0aGUmbmJzcDtkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtcyZuYnNwO1sx XS48YnI+DQo8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1ZlcmRhbmEmcXVv dDssc2Fucy1zZXJpZiI+PGJyPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiMwQjUzOTQiPlRoZSB3b3Jr aW5nIGdyb3VwIGxhc3QgY2FsbCB3aWxsIHJ1biBmb3IgKip0d28gd2Vla3MqKiwgZW5kaW5nIG9u PC9zcGFuPjxicj4NCjxzcGFuIHN0eWxlPSJjb2xvcjojMEI1Mzk0Ij5PY3RvYmVyIDEsIDIwMTku PC9zcGFuPjxicj4NCjxicj4NCjxzcGFuIHN0eWxlPSJjb2xvcjojMEI1Mzk0Ij5QbGVhc2UgcmV2 aWV3IGFuZCBzZW5kIGFueSBjb21tZW50cyBvciBmZWVkYmFjayB0byB0aGUgd29ya2luZyBncm91 cC4mbmJzcDtFdmVuIGlmIHlvdXIgZmVlZGJhY2sgaXMgJnF1b3Q7dGhpcyBpcyByZWFkeSZxdW90 OywgcGxlYXNlIGxldCB1cyBrbm93Ljwvc3Bhbj48YnI+DQo8YnI+DQo8c3BhbiBzdHlsZT0iY29s b3I6IzBCNTM5NCI+VGhhbmsgeW91LDwvc3Bhbj48YnI+DQo8YnI+DQo8c3BhbiBzdHlsZT0iY29s b3I6IzBCNTM5NCI+LSZuYnNwO01hdHRoZXcgYW5kJm5ic3A7SXZheWxvPC9zcGFuPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtWZXJkYW5hJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 IzBCNTM5NCI+Q09TRSBDaGFpcnM8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90 O1ZlcmRhbmEmcXVvdDssc2Fucy1zZXJpZiI+PGJyPg0KPGJyPg0KPHNwYW4gc3R5bGU9ImNvbG9y OiMwQjUzOTQiPlsxXTombmJzcDs8L3NwYW4+PC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8vbmFtMDYu c2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRmRhdGF0 cmFja2VyLmlldGYub3JnJTJGZG9jJTJGZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRo bXMlMkYmYW1wO2RhdGE9MDIlN0MwMSU3Q01pY2hhZWwuSm9uZXMlNDBtaWNyb3NvZnQuY29tJTdD NjI0ZWQzOWQ0MjdlNDBmNWZkZWUwOGQ3NTY4YTU1MzUlN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJk N2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MDczMDI0NDU0MDg4NjU5JmFtcDtzZGF0YT1Zb1piNkRE Y3dXWkFXcUxiZnVTaEd3ZThHN3RUTUtiSGVTN2dKQkgxNyUyRlUlM0QmYW1wO3Jlc2VydmVkPTAi PjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtWZXJkYW5hJnF1b3Q7LHNhbnMtc2VyaWYi Pmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtY29zZS13ZWJhdXRo bi1hbGdvcml0aG1zLzwvc3Bhbj48L2E+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1Zl cmRhbmEmcXVvdDssc2Fucy1zZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_DM6PR00MB0569056BEAE866D47A63AEADF5680DM6PR00MB0569namp_-- From nobody Tue Oct 22 09:04:58 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D73E2120096; Tue, 22 Oct 2019 09:04:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y6UyvegwXzxU; Tue, 22 Oct 2019 09:04:53 -0700 (PDT) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-eopbgr650100.outbound.protection.outlook.com [40.107.65.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0723A12004A; Tue, 22 Oct 2019 09:04:52 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=XoBcnfo45kiNtYfhM3qO1fmnwEbhOjw2zsqKl9tXDSmFdtnZ5X2wYs5Ew2lRoF0ukzlO06L55Kflk7NpcL79ZsynDJIzwBdoXKdWDpHHkcj4y5FaJENsMC9Qi5kXGXNeK60CHFofWDHB0hB2Zoj9hzGZDTrlmLj1+SM1kkZuVMAhGq2L+gWjHo070A2Sye0KOan/NBJiOMVei8gydwrstc+vMVaKboHnWoy6eQQMH6Ny8tYl+2R5fujlhZeqAXJVxuvDpLscYEs/3M9Uyd5Z7vM2lgd6cM8ZdqwGYcL202wMUdRHfPhw7/WJZ4IidKDSo+DeimyySCNKyo6/Z85o5Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=wH3bH3Tfx/r5i/L/DaLMzesHtMuQ+6eyuwPFlSBi0+E=; b=MDFrEfr+0wKTjHgLPAmCMsxmxeDoegtJ/GScbberAnCOAuFJ/JcEO7WtW54Wzl5VhYw6b28JzF0IU0T6xCju5XGhyAkT16QS2BiKrIxfn76GU2Q4VuCkjdG7aWeURqLdSBxRfZoLq1zpoOgQ/XFDOWyr5Mfy/7baFDhFFHOALnIdszxzKk7xW7BzWubWRIZmBEYo7A3s0MPNR9qgw+awdCfTbqbFFsZmL9W245INTxTLdISH9WlS8GCy1h9Vll74Pnq2YpB4JhDVLLXTtTK7+Z7RolyXyQpo+6hbm3LugU++GXeY9HcMuI0YWe/wsfZdvSQXeIwVOhoqnfFN8Jobjg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=wH3bH3Tfx/r5i/L/DaLMzesHtMuQ+6eyuwPFlSBi0+E=; b=JAs3OYy4fNmo7kRFf3qtbHrmXVZfS/OBj5VnBxVhoVIsWZ6NTUCBdzSq8L/4SIytMS4d3evgO4TF9+9Fn+KExkXjR65sbao6h6RyXhEAY6fp7hIWL66O2dTAMWxee8ED5B6ZJ0P0LfOTJz2l4KzLXdajbkatLfHcoXHuAwryUqA= Received: from DM6PR00MB0569.namprd00.prod.outlook.com (20.179.51.12) by DM6PR00MB0569.namprd00.prod.outlook.com (20.179.51.12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2424.0; Tue, 22 Oct 2019 16:04:48 +0000 Received: from DM6PR00MB0569.namprd00.prod.outlook.com ([fe80::bd43:8b51:d67d:91e3]) by DM6PR00MB0569.namprd00.prod.outlook.com ([fe80::bd43:8b51:d67d:91e3%3]) with mapi id 15.20.2424.000; Tue, 22 Oct 2019 16:04:48 +0000 From: Mike Jones To: Jim Schaad , 'cose' CC: "draft-ietf-cose-webauthn-algorithms@ietf.org" Thread-Topic: =?utf-8?B?W0NPU0VdIPCflJQgV0dMQyBvZiBkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4t?= =?utf-8?Q?algorithms?= Thread-Index: AQHVbWSlFBVJFlStCEe6sWSpGQx0gacwqvUAgDUjSdCAAS3SAIAADYwg Date: Tue, 22 Oct 2019 16:04:47 +0000 Message-ID: References: <000001d56dc2$e14f20c0$a3ed6240$@augustcellars.com> <00ce01d588eb$6eee22d0$4cca6870$@augustcellars.com> In-Reply-To: <00ce01d588eb$6eee22d0$4cca6870$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=ae1b5df9-6667-4439-ba13-00006c389be3; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-10-22T16:03:10Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [50.47.93.218] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 40b58947-e4b7-41b4-9526-08d757099029 x-ms-traffictypediagnostic: DM6PR00MB0569: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:8882; x-forefront-prvs: 01986AE76B x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(39860400002)(346002)(366004)(396003)(376002)(136003)(199004)(189003)(6436002)(10290500003)(7736002)(229853002)(55016002)(8990500004)(14454004)(3846002)(6506007)(53546011)(966005)(6306002)(54896002)(26005)(99286004)(6116002)(790700001)(102836004)(9686003)(236005)(606006)(4326008)(186003)(64756008)(81166006)(66476007)(52536014)(446003)(76116006)(66556008)(66946007)(5660300002)(86362001)(81156014)(10090500001)(478600001)(74316002)(476003)(486006)(8936002)(11346002)(66446008)(33656002)(256004)(110136005)(25786009)(22452003)(2906002)(316002)(71200400001)(71190400001)(6246003)(7696005)(76176011)(66066001); DIR:OUT; SFP:1102; SCL:1; SRVR:DM6PR00MB0569; H:DM6PR00MB0569.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: xLe0bPt8Wvn3gSHq2rFCwoPNkNuaxpMBsFGqts8Qg9yVIx9WYtNilWWfmQ9chTNPQpiq0i8pekLdeTjYB8w1bLgPvPSEi7phfdzlQrUTJOkiBQGjgXQ/ShkAMLNo+UZT4Q5+lnTc0HgqHpiFm5DHDOcAwK8ScqUeczfO49L43z3rmAvtZmbRejnJWM/Ppl3Bk6w3HF7xR/pq3AEcgTCW/kwW1h+mbcookMafy2EaJ4bmj9rKOsXYMvuc61G2uD0JZPr2fy7u/iEtQp/MlFXibK8jMD+WT1LTcOjK58o9HXJif55lYOXnQaYTxLg9P7GHYg3tyxtm4jZIRyzxU0tKSbmYiWtXQzweZAzzYiBTHBQ525Q0gpysYdKamQcp0d++84p+UJdIqrWFzYu74hQ4kO4lsy6UZtGbbV/JGrjIOlcYpamtpf2upsA2kQp87I7E x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_DM6PR00MB0569117563202857715E3E04F5680DM6PR00MB0569namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 40b58947-e4b7-41b4-9526-08d757099029 X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Oct 2019 16:04:47.9861 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: hp7Yb9Tm9DC8BklsgYc9KWe6AwPfu6mntlIDCL5oVeiG/8/jg2WpCWn5nnpUDThh88hwkDWPrg0SahjoBY3QfA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR00MB0569 Archived-At: Subject: Re: [COSE] =?utf-8?q?=F0=9F=94=94_WGLC_of_draft-ietf-cose-webauthn-a?= =?utf-8?q?lgorithms?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Oct 2019 16:04:56 -0000 --_000_DM6PR00MB0569117563202857715E3E04F5680DM6PR00MB0569namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 T0ssIEkgbm93IHVuZGVyc3RhbmQgdGhhdCB5b3XigJlyZSB0YWxraW5nIGFib3V0IHRoZSBhbGdv cml0aG0gdG8gZ2VuZXJhdGUg4oCca+KAnSDigJMgbm90IHRoZSBzaWduYXR1cmUgYWxnb3JpdGht LiAgSeKAmWxsIGFkZCB0ZXh0IHN1Z2dlc3RpbmcgdXNpbmcgYSBkZXRlcm1pbmlzdGljIG1ldGhv ZCB0byBnZW5lcmF0ZSDigJxr4oCdLg0KDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgLS0gTWlrZQ0KDQpGcm9tOiBKaW0gU2NoYWFkIDxpZXRm QGF1Z3VzdGNlbGxhcnMuY29tPg0KU2VudDogVHVlc2RheSwgT2N0b2JlciAyMiwgMjAxOSA4OjE1 IEFNDQpUbzogTWlrZSBKb25lcyA8TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPjsgJ2Nvc2Un IDxjb3NlQGlldGYub3JnPg0KQ2M6IGRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1z QGlldGYub3JnDQpTdWJqZWN0OiBSRTogW0NPU0VdIPCflJQgV0dMQyBvZiBkcmFmdC1pZXRmLWNv c2Utd2ViYXV0aG4tYWxnb3JpdGhtcw0KDQpJIGZvcmdvdCB0byByZXNwb25kIHRvIHRoaXMgb25l DQoNCkZyb206IE1pa2UgSm9uZXMgPE1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbTxtYWlsdG86 TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPj4NClNlbnQ6IE1vbmRheSwgT2N0b2JlciAyMSwg MjAxOSA1OjAwIFBNDQpUbzogSmltIFNjaGFhZCA8aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbTxtYWls dG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbT4+OyAnY29zZScgPGNvc2VAaWV0Zi5vcmc8bWFpbHRv OmNvc2VAaWV0Zi5vcmc+Pg0KQ2M6IGRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1z QGlldGYub3JnPG1haWx0bzpkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtc0BpZXRm Lm9yZz4NClN1YmplY3Q6IFJFOiBbQ09TRV0g8J+UlCBXR0xDIG9mIGRyYWZ0LWlldGYtY29zZS13 ZWJhdXRobi1hbGdvcml0aG1zDQoNClRoYW5rcyBmb3IgeW91ciByZXZpZXcsIEppbS4gIFJlc3Bv bnNlcyBhcmUgaW5saW5lLCBwcmVmaXhlZCBieSDigJxNaWtlPuKAnS4NCg0KICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC0tIE1pa2UNCg0KRnJv bTogSmltIFNjaGFhZCA8aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbTxtYWlsdG86aWV0ZkBhdWd1c3Rj ZWxsYXJzLmNvbT4+DQpTZW50OiBUdWVzZGF5LCBTZXB0ZW1iZXIgMTcsIDIwMTkgNjo0NiBQTQ0K VG86ICdjb3NlJyA8Y29zZUBpZXRmLm9yZzxtYWlsdG86Y29zZUBpZXRmLm9yZz4+DQpDYzogZHJh ZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXNAaWV0Zi5vcmc8bWFpbHRvOmRyYWZ0LWll dGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zQGlldGYub3JnPg0KU3ViamVjdDogUkU6IFtDT1NF XSDwn5SUIFdHTEMgb2YgZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXMNCg0KSSBz dGFydCB0aGlzIHJldmlldyBieSBjb3B5aW5nIGZvcndhcmQgYWxsIG9mIG15IGNvbW1lbnRzIG9u IGRyYWZ0LWpvbmVzLWNvc2UtYWRkaXRpb25hbC1hbGdvcml0aG1zLTAwDQoNCg0KDQogIDEuICBQ bGVhc2UgaW5jbHVkZSB0ZXh0IHJlbGF0ZWQgdG8gZGV0ZXJtaW5pc3RpYyBFQ0RTQSBpbiB0aGlz IHRleHQuDQoNCk1pa2U+IFdoYXQgZG8geW91IHdhbnQgdGhpcyB0ZXh0IHRvIHNheT8gIEnigJlt IHJlbHVjdGFudCB0byB1c2UgdGhlIHRleHQgYXQgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1s L3JmYzgxNTIjc2VjdGlvbi04LjE8aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5v dXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGdG9vbHMuaWV0Zi5vcmclMkZodG1sJTJGcmZj ODE1MiUyM3NlY3Rpb24tOC4xJmRhdGE9MDIlN0MwMSU3Q01pY2hhZWwuSm9uZXMlNDBtaWNyb3Nv ZnQuY29tJTdDYTk0OGFkNDhjYTdlNGY5YWM1MGQwOGQ3NTcwMmE5YjAlN0M3MmY5ODhiZjg2ZjE0 MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MDczNTQxMjU2NjM4MDg4JnNkYXRhPUVk bFdJa1VJRldOaTFydWR1aGl0RzI1eEJLUDdSZnZUZW9UJTJCYkY5ckZBcyUzRCZyZXNlcnZlZD0w Piwgd2hpY2ggc2F5cyB0aGF0IOKAnGltcGxlbWVudGF0aW9ucyBTSE9MVUQgdXNlIGEgZGV0ZXJt aW5pc3RpYyBhbGdvcml0aG3igJ0sIHdoaWNoIGlzIG1pc2xlYWRpbmcsIGluIHRoYXQgaXQgaW1w bGllcyB0aGF0IHRoZXJlIGFyZSBtYW55IHN1Y2ggYWxnb3JpdGhtcyB0aGF0IGNvdWxkIGJlIHVz ZWQuICBJbiBmYWN0LCBleGFjdGx5IG9uZSBpcyBiZWluZyBzcGVjaWZpZWQuDQoNCltKTFNdIEkg d2FzIHVuYXdhcmUgdGhhdCB0aGVyZSBpcyBvbmx5IG9uZSBwb3NzaWJsZSBkZXRlcm1pbmlzdGlj IGFsZ29yaXRobSwgYW55IGtleWVkIGhhc2ggYWxnb3JpdGhtIGNhbiBiZSB1c2VkIHRvIGdlbmVy YXRlIHRoZSBkZXRlcm1pbmlzdGljIOKAmGvigJkgdG8gYmUgdXNlZCBmb3IgdGhlIHNpZ25hdHVy ZSBhbGdvcml0aG0uICBUaGVyZSBpcyBub3QgYSByZXF1aXJlbWVudCB0aGF0IHRoZSBzZWNyZXQg dmFsdWUgYmUgdGhlIHByaXZhdGUga2V5IGZvciB0aGUgc2lnbmF0dXJlIGtleSBwYWlyLCBvbmUg Y291bGQgZ2VuZXJhdGUgYSBwcml2YXRlIHZhbHVlIGp1c3QgZm9yIHRoYXQgcHVycG9zZS4gIElu ZGVwZW5kZW50IG9mIHRoYXQsIHRoZSBkZWZhdWx0IEVDRFNBIGFsZ29yaXRobSBzcGVjaWZpY2F0 aW9ucyBhbGwgc2F5IHVzZSBhIHJhbmRvbSB2YWx1ZSBvZiDigJhr4oCZIHJhdGhlciB0aGFuIGEg ZGV0ZXJtaW5pc3RpYyB2YWx1ZSBhbmQgdGhlIHVzZSBvZiB0aGUgZGV0ZXJtaW5pc3RpYyB2YWx1 ZSBpcyBmYXIgbW9yZSBzZWN1cmUuDQo= --_000_DM6PR00MB0569117563202857715E3E04F5680DM6PR00MB0569namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpWZXJkYW5hOw0KCXBhbm9zZS0xOjIgMTEg NiA0IDMgNSA0IDQgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlNlZ29lIFVJIEVt b2ppIjsNCglwYW5vc2UtMToyIDExIDUgMiA0IDIgNCAyIDIgMzt9DQovKiBTdHlsZSBEZWZpbml0 aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJn aW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZv bnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxp bmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0 aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7 bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246 dW5kZXJsaW5lO30NCnAuTXNvUGxhaW5UZXh0LCBsaS5Nc29QbGFpblRleHQsIGRpdi5Nc29QbGFp blRleHQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJQbGFpbiBU ZXh0IENoYXIiOw0KCW1hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQt c2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KcC5Nc29M aXN0UGFyYWdyYXBoLCBsaS5Nc29MaXN0UGFyYWdyYXBoLCBkaXYuTXNvTGlzdFBhcmFncmFwaA0K CXttc28tc3R5bGUtcHJpb3JpdHk6MzQ7DQoJbWFyZ2luLXRvcDowaW47DQoJbWFyZ2luLXJpZ2h0 OjBpbjsNCgltYXJnaW4tYm90dG9tOjBpbjsNCgltYXJnaW4tbGVmdDouNWluOw0KCW1hcmdpbi1i b3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmO30NCnAubXNvbm9ybWFsMCwgbGkubXNvbm9ybWFsMCwgZGl2Lm1zb25vcm1h bDANCgl7bXNvLXN0eWxlLW5hbWU6bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRv Ow0KCW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFy Z2luLWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7fQ0Kc3Bhbi5QbGFpblRleHRDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJQbGFp biBUZXh0IENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoi UGxhaW4gVGV4dCI7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5F bWFpbFN0eWxlMjENCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9DQpzcGFuLkVtYWlsU3R5bGUy Mg0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjsNCgljb2xvcjojMDAyMDYwO30NCnNwYW4uRW1haWxTdHlsZTIzDQoJe21zby1zdHls ZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNv bG9yOndpbmRvd3RleHQ7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjUNCgl7bXNvLXN0eWxlLXR5cGU6cGVy c29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6 IzAwMjA2MDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsN Cglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDEx LjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9u MQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQovKiBMaXN0IERlZmluaXRpb25zICovDQpAbGlzdCBs MA0KCXttc28tbGlzdC1pZDoxMjMwODQwODE7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOjY1NjI3 ODE3Mjt9DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEt dXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDINCgl7bXNv LWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEu MGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1 aW47fQ0KQGxpc3QgbDA6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVw cGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDoxLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsNA0KCXttc28t bGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi4w aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVp bjt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBw ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDozLjBp bjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWlu O30NCkBsaXN0IGwwOmxldmVsNw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBl cjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6My41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDgNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQuMGlu Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47 fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVy Ow0KCW1zby1sZXZlbC10YWItc3RvcDo0LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxDQoJe21zby1saXN0LWlkOjU4 ODI3NDY4NDsNCgltc28tbGlzdC10eXBlOmh5YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6 LTIwMTI5NjA2MDYgLTE5NjY3MTgxMzAgNjc2OTg3MTMgNjc2OTg3MTUgNjc2OTg3MDMgNjc2OTg3 MTMgNjc2OTg3MTUgNjc2OTg3MDMgNjc2OTg3MTMgNjc2OTg3MTU7fQ0KQGxpc3QgbDE6bGV2ZWwx DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10ZXh0 OiIlMVwpIjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVsMg0KCXtt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y NWluO30NCkBsaXN0IGwxOmxldmVsMw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpyb21hbi1s b3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0 aW9uOnJpZ2h0Ow0KCXRleHQtaW5kZW50Oi05LjBwdDt9DQpAbGlzdCBsMTpsZXZlbDQNCgl7bXNv LWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMTpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YWxwaGEtbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBs MTpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxl dmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdodDsNCgl0 ZXh0LWluZGVudDotOS4wcHQ7fQ0KQGxpc3QgbDE6bGV2ZWw3DQoJe21zby1sZXZlbC10YWItc3Rv cDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot LjI1aW47fQ0KQGxpc3QgbDE6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhh LWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDE6bGV2ZWw5DQoJe21z by1sZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpu b25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246cmlnaHQ7DQoJdGV4dC1pbmRlbnQ6LTku MHB0O30NCm9sDQoJe21hcmdpbi1ib3R0b206MGluO30NCnVsDQoJe21hcmdpbi1ib3R0b206MGlu O30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRz IHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtp ZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1h cCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRp Zl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVy cGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+T0ssIEkgbm93IHVuZGVyc3RhbmQgdGhhdCB5b3Xi gJlyZSB0YWxraW5nIGFib3V0IHRoZSBhbGdvcml0aG0gdG8gZ2VuZXJhdGUg4oCca+KAnSDigJMg bm90IHRoZSBzaWduYXR1cmUgYWxnb3JpdGhtLiZuYnNwOyBJ4oCZbGwgYWRkIHRleHQgc3VnZ2Vz dGluZyB1c2luZyBhIGRldGVybWluaXN0aWMgbWV0aG9kIHRvIGdlbmVyYXRlIOKAnGvigJ0uPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNv bG9yOiMwMDIwNjAiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgLS0gTWlrZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpz b2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PGI+RnJvbTo8L2I+IEppbSBTY2hhYWQgJmx0O2lldGZAYXVndXN0Y2VsbGFy cy5jb20mZ3Q7IDxicj4NCjxiPlNlbnQ6PC9iPiBUdWVzZGF5LCBPY3RvYmVyIDIyLCAyMDE5IDg6 MTUgQU08YnI+DQo8Yj5Ubzo8L2I+IE1pa2UgSm9uZXMgJmx0O01pY2hhZWwuSm9uZXNAbWljcm9z b2Z0LmNvbSZndDs7ICdjb3NlJyAmbHQ7Y29zZUBpZXRmLm9yZyZndDs8YnI+DQo8Yj5DYzo8L2I+ IGRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zQGlldGYub3JnPGJyPg0KPGI+U3Vi amVjdDo8L2I+IFJFOiBbQ09TRV0gPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1NlZ29l IFVJIEVtb2ppJnF1b3Q7LHNhbnMtc2VyaWYiPg0KJiMxMjgyNzY7PC9zcGFuPiBXR0xDIG9mIGRy YWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5JIGZvcmdvdCB0byByZXNwb25kIHRvIHRoaXMgb25lPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+ DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7 cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5Gcm9t OjwvYj4gTWlrZSBKb25lcyAmbHQ7PGEgaHJlZj0ibWFpbHRvOk1pY2hhZWwuSm9uZXNAbWljcm9z b2Z0LmNvbSI+TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPC9hPiZndDsNCjxicj4NCjxiPlNl bnQ6PC9iPiBNb25kYXksIE9jdG9iZXIgMjEsIDIwMTkgNTowMCBQTTxicj4NCjxiPlRvOjwvYj4g SmltIFNjaGFhZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5jb20iPmll dGZAYXVndXN0Y2VsbGFycy5jb208L2E+Jmd0OzsgJ2Nvc2UnICZsdDs8YSBocmVmPSJtYWlsdG86 Y29zZUBpZXRmLm9yZyI+Y29zZUBpZXRmLm9yZzwvYT4mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiA8YSBo cmVmPSJtYWlsdG86ZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXNAaWV0Zi5vcmci PmRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zQGlldGYub3JnPC9hPjxicj4NCjxi PlN1YmplY3Q6PC9iPiBSRTogW0NPU0VdIDxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtT ZWdvZSBVSSBFbW9qaSZxdW90OyxzYW5zLXNlcmlmIj4NCiYjMTI4Mjc2Ozwvc3Bhbj4gV0dMQyBv ZiBkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtczxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPlRoYW5rcyBm b3IgeW91ciByZXZpZXcsIEppbS4mbmJzcDsgUmVzcG9uc2VzIGFyZSBpbmxpbmUsIHByZWZpeGVk IGJ5IOKAnDwvc3Bhbj48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZndDvigJ0uPC9z cGFuPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNv bG9yOiMwMDIwNjAiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAtLSBN aWtlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImNvbG9yOiMwMDIwNjAiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8 ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFk ZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5Gcm9tOjwv Yj4gSmltIFNjaGFhZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5jb20i PmlldGZAYXVndXN0Y2VsbGFycy5jb208L2E+Jmd0Ow0KPGJyPg0KPGI+U2VudDo8L2I+IFR1ZXNk YXksIFNlcHRlbWJlciAxNywgMjAxOSA2OjQ2IFBNPGJyPg0KPGI+VG86PC9iPiAnY29zZScgJmx0 OzxhIGhyZWY9Im1haWx0bzpjb3NlQGlldGYub3JnIj5jb3NlQGlldGYub3JnPC9hPiZndDs8YnI+ DQo8Yj5DYzo8L2I+IDxhIGhyZWY9Im1haWx0bzpkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxn b3JpdGhtc0BpZXRmLm9yZyI+ZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXNAaWV0 Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJFOiBbQ09TRV0gPHNwYW4gc3R5bGU9ImZv bnQtZmFtaWx5OiZxdW90O1NlZ29lIFVJIEVtb2ppJnF1b3Q7LHNhbnMtc2VyaWYiPg0KJiMxMjgy NzY7PC9zcGFuPiBXR0xDIG9mIGRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIHN0YXJ0IHRoaXMgcmV2aWV3 IGJ5IGNvcHlpbmcgZm9yd2FyZCBhbGwgb2YgbXkgY29tbWVudHMgb24gZHJhZnQtam9uZXMtY29z ZS1hZGRpdGlvbmFsLWFsZ29yaXRobXMtMDA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8b2wgc3R5bGU9Im1hcmdpbi10b3A6MGluIiBzdGFydD0iMSIgdHlw ZT0iQSI+DQo8bGkgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDow aW47bXNvLWxpc3Q6bDEgbGV2ZWwxIGxmbzMiPlBsZWFzZSBpbmNsdWRlIHRleHQgcmVsYXRlZCB0 byBkZXRlcm1pbmlzdGljIEVDRFNBIGluIHRoaXMgdGV4dC48bzpwPjwvbzpwPjwvbGk+PC9vbD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPk1pa2UmZ3Q7IFdoYXQgZG8geW91 IHdhbnQgdGhpcyB0ZXh0IHRvIHNheT8mbmJzcDsgSeKAmW0gcmVsdWN0YW50IHRvIHVzZSB0aGUg dGV4dCBhdA0KPC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rp b24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnRvb2xzLmlldGYub3JnJTJGaHRtbCUy RnJmYzgxNTIlMjNzZWN0aW9uLTguMSZhbXA7ZGF0YT0wMiU3QzAxJTdDTWljaGFlbC5Kb25lcyU0 MG1pY3Jvc29mdC5jb20lN0NhOTQ4YWQ0OGNhN2U0ZjlhYzUwZDA4ZDc1NzAyYTliMCU3QzcyZjk4 OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzcwNzM1NDEyNTY2MzgwODgm YW1wO3NkYXRhPUVkbFdJa1VJRldOaTFydWR1aGl0RzI1eEJLUDdSZnZUZW9UJTJCYkY5ckZBcyUz RCZhbXA7cmVzZXJ2ZWQ9MCI+aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzgxNTIjc2Vj dGlvbi04LjE8L2E+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPiwNCiB3aGljaCBzYXlzIHRo YXQg4oCcaW1wbGVtZW50YXRpb25zIFNIT0xVRCB1c2UgYSBkZXRlcm1pbmlzdGljIGFsZ29yaXRo beKAnSwgd2hpY2ggaXMgbWlzbGVhZGluZywgaW4gdGhhdCBpdCBpbXBsaWVzIHRoYXQgdGhlcmUg YXJlIG1hbnkgc3VjaCBhbGdvcml0aG1zIHRoYXQgY291bGQgYmUgdXNlZC4mbmJzcDsgSW4gZmFj dCwgZXhhY3RseSBvbmUgaXMgYmVpbmcgc3BlY2lmaWVkLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+W0pMU10gSSB3YXMgdW5hd2FyZSB0aGF0IHRo ZXJlIGlzIG9ubHkgb25lIHBvc3NpYmxlIGRldGVybWluaXN0aWMgYWxnb3JpdGhtLCBhbnkga2V5 ZWQgaGFzaCBhbGdvcml0aG0gY2FuIGJlIHVzZWQgdG8gZ2VuZXJhdGUgdGhlIGRldGVybWluaXN0 aWMg4oCYa+KAmSB0byBiZSB1c2VkIGZvciB0aGUgc2lnbmF0dXJlIGFsZ29yaXRobS4mbmJzcDsg VGhlcmUgaXMgbm90IGEgcmVxdWlyZW1lbnQgdGhhdCB0aGUgc2VjcmV0IHZhbHVlDQogYmUgdGhl IHByaXZhdGUga2V5IGZvciB0aGUgc2lnbmF0dXJlIGtleSBwYWlyLCBvbmUgY291bGQgZ2VuZXJh dGUgYSBwcml2YXRlIHZhbHVlIGp1c3QgZm9yIHRoYXQgcHVycG9zZS4mbmJzcDsgSW5kZXBlbmRl bnQgb2YgdGhhdCwgdGhlIGRlZmF1bHQgRUNEU0EgYWxnb3JpdGhtIHNwZWNpZmljYXRpb25zIGFs bCBzYXkgdXNlIGEgcmFuZG9tIHZhbHVlIG9mIOKAmGvigJkgcmF0aGVyIHRoYW4gYSBkZXRlcm1p bmlzdGljIHZhbHVlIGFuZCB0aGUgdXNlIG9mIHRoZQ0KIGRldGVybWluaXN0aWMgdmFsdWUgaXMg ZmFyIG1vcmUgc2VjdXJlLjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtWZXJkYW5hJnF1 b3Q7LHNhbnMtc2VyaWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_DM6PR00MB0569117563202857715E3E04F5680DM6PR00MB0569namp_-- From nobody Tue Oct 22 09:17:49 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55A37120913; Tue, 22 Oct 2019 09:17:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Nah-Su8W_fTP; Tue, 22 Oct 2019 09:17:40 -0700 (PDT) Received: from NAM06-DM3-obe.outbound.protection.outlook.com (mail-eopbgr640102.outbound.protection.outlook.com [40.107.64.102]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C04EA120962; Tue, 22 Oct 2019 09:17:17 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=FJfE8KT3rnDBcdwaPQvi5gmF4CPPYpbz4iASdqZUZxAdwXW5CsCZ+IVtYVfRFqHSjlx0KkDO4vHybfQe59nCU+XGcgVtalYUPTPrJ7JQVH8nEDbFP18p85r40Of2klmgpuAposjKmJmgJOulzeXEVs7zxepLtNb0VB4/gDMMxLY6t09BdtySdfd0AYKrHibzEXbCQbDGHophLnoQCB/0vXjjy+t1JdVaBadFpK2xyEGw0tvuUXbC5hPwrzrb4XuKbT1lJiXI6ODQc5ULHOAhmBhzwcS4jtztlIjd0ARXXYcYdF/S2oURa3cHtfdxoyK4zpSEyDi1Mdp0UDYEgj9GTg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=oDqnN9XKZahDlxSHJKfxS/GfuSjIUZUKZtG2HpWmgXc=; b=gQ+n8rCA3gtHCvLuIxlE8P6Cg+coeXv3Bx6XfqNc7HzKYjt8z+Jo2KbR7JD4XTB6FMb2JhVx0uK+T6cRAOBxdDiuIqCXAO3xDPsNwGCMHI4IQB9XbcrWuFPVaHpvnge56pYNrfNY7F51bYTByUaTDX8vuBQbMnEz02CkXEWxNBL8yFs7Q7OIWzNOUbzAWbBC8mNetIUMK+3AjbnPe2weW04Lx32u25WXXruSJMUc45JZpcnXg4Vya/0tqwA8VTfe/lLQ9DLmonuceuR0ZRIY0L0trkGrtHY6/w/Op6mhKCFjnHj1JxsmI/6h96Cmt8MYwFQX3rEseGtvxjAdDcEGmA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=oDqnN9XKZahDlxSHJKfxS/GfuSjIUZUKZtG2HpWmgXc=; b=jY0stw+S680BCj1m7UCZI5TVByfEJV0zcrnGWiFAWd6AWbBdNXTkk3IA34O3lBBz0eHbn+gadVsjhgcaWggYWXuZcVvhaPDnBN43cusuSalrSrfZNZmyT+93jL0VjLJwXXxdSLvIl/8V5rKf6f55Z+9hjiJIIB5N3qzItXrIR1w= Received: from DM6PR00MB0569.namprd00.prod.outlook.com (20.179.51.12) by DM6PR00MB0521.namprd00.prod.outlook.com (20.178.30.75) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2424.0; Tue, 22 Oct 2019 16:17:16 +0000 Received: from DM6PR00MB0569.namprd00.prod.outlook.com ([fe80::bd43:8b51:d67d:91e3]) by DM6PR00MB0569.namprd00.prod.outlook.com ([fe80::bd43:8b51:d67d:91e3%3]) with mapi id 15.20.2424.000; Tue, 22 Oct 2019 16:17:16 +0000 From: Mike Jones To: Neil Madden , Jim Schaad CC: "cose@ietf.org" , "jose@ietf.org" , ivaylo petrov Thread-Topic: =?utf-8?B?W0NPU0VdICBbam9zZV0gIPCflJQgV0dMQyBvZiBkcmFmdC1pZXRmLWNvc2Ut?= =?utf-8?Q?webauthn-algorithms?= Thread-Index: AQHVbwCfAPK5Y9lIXUekPxghlw4nSac0T3mAgABSv4CAAApZgIAyXDRw Date: Tue, 22 Oct 2019 16:17:15 +0000 Message-ID: References: <465EE321-1595-4453-8D4E-E3A6A457C86E@forgerock.com> <012001d56fc0$1fb30e90$5f192bb0$@augustcellars.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=03b5b886-7751-4615-96ea-0000eb766e27; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-10-22T16:11:41Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [50.47.93.218] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 55a49ad3-3cb1-442a-f5b4-08d7570b4df3 x-ms-traffictypediagnostic: DM6PR00MB0521: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 01986AE76B x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(366004)(396003)(39860400002)(346002)(136003)(376002)(199004)(189003)(51914003)(71190400001)(25786009)(256004)(316002)(22452003)(10090500001)(8990500004)(110136005)(2906002)(33656002)(790700001)(6116002)(3846002)(81166006)(7696005)(76176011)(86362001)(81156014)(486006)(54906003)(6506007)(53546011)(71200400001)(7736002)(8936002)(99286004)(4326008)(6436002)(9686003)(476003)(11346002)(446003)(54896002)(102836004)(55016002)(6306002)(186003)(236005)(26005)(76116006)(66946007)(66476007)(6246003)(66556008)(66446008)(74316002)(66066001)(64756008)(10290500003)(52536014)(14454004)(5660300002)(229853002)(478600001); DIR:OUT; SFP:1102; SCL:1; SRVR:DM6PR00MB0521; H:DM6PR00MB0569.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 5qBwVqyLcWFGpOK14aS182nXeQXS9mAueT1T0t6zt8LfAqtevhYDRBGdS+vMR3PlPlFI+egldFYXRsvH6LeB8pN1xd2LU6WHJk87DRcGBX4i5rsPRB9WJqw18rA0o0hBetzY8n7TwOr2tC+MDuSRzsZWA7ntde0EATt1sGP7IJpq4UGT4UAV3CWVtg+h0veYtvgvL6Kgip/S1aKhttVj2EqMoJS4hhbAcQPFXu/lepdD4XNpQ2X5l2eOKhnjjhltCRaAFCrUWjJ/wfEVVRCUrRKBEiHftvkCkzA+0Nw+v9DBZz71SJ1Yn3/pxWrQtGlXE37bJRhKgKcybriBW14u0G38lz8RXlp+o6WvX3frlRsPo1MfHBA4oOJCzfIAN5QhnOQpMKE+qSbDu6idHr3ofMiZAWCu2KOHMhjP3WgmD0TqDYHPWO8JofHXUqkEphjF x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_DM6PR00MB05696F42C452640D3F9C09C4F5680DM6PR00MB0569namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 55a49ad3-3cb1-442a-f5b4-08d7570b4df3 X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Oct 2019 16:17:15.9435 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: JqM2xSBqqQSieQmAY/HQ/9wbwjHIK41hacy7iREH/emyXRZFtBPtbfwoZLLIpVpVz17rZtiOZH9Bdt0I/rZYOA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM6PR00MB0521 Archived-At: Subject: Re: [COSE] =?utf-8?q?=5Bjose=5D__=F0=9F=94=94_WGLC_of_draft-ietf-cos?= =?utf-8?q?e-webauthn-algorithms?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Oct 2019 16:17:47 -0000 --_000_DM6PR00MB05696F42C452640D3F9C09C4F5680DM6PR00MB0569namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIGFnYWluIGZvciB0aGUgcmV2aWV3LCBOZWlsLiAgTXkgcmVwbGllcyBhcmUgaW5saW5l LCBwcmVmaXhlZCBieSDigJxNaWtlPuKAnS4NCg0KICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIC0tIE1pa2UNCg0KRnJvbTogQ09TRSA8Y29zZS1i b3VuY2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YgTmVpbCBNYWRkZW4NClNlbnQ6IEZyaWRheSwg U2VwdGVtYmVyIDIwLCAyMDE5IDg6MDkgQU0NClRvOiBKaW0gU2NoYWFkIDxpZXRmQGF1Z3VzdGNl bGxhcnMuY29tPg0KQ2M6IGNvc2VAaWV0Zi5vcmc7IGpvc2VAaWV0Zi5vcmc7IGl2YXlsbyBwZXRy b3YgPGl2YXlsb0BhY2tsLmlvPg0KU3ViamVjdDogUmU6IFtDT1NFXSBbam9zZV0g8J+UlCBXR0xD IG9mIGRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zDQoNClRoYW5rcyBmb3IgdGhl IHJlcGx5LCBjb21tZW50cyBpbi1saW5lIG1hcmtlZCB3aXRoIFtORU1dOg0KDQoNCk9uIDIwIFNl cCAyMDE5LCBhdCAxNTozMSwgSmltIFNjaGFhZCA8aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbTxtYWls dG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbT4+IHdyb3RlOg0KDQoNCg0KRnJvbTogam9zZSA8am9z ZS1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpqb3NlLWJvdW5jZXNAaWV0Zi5vcmc+PiBPbiBCZWhh bGYgT2YgTmVpbCBNYWRkZW4NClNlbnQ6IEZyaWRheSwgU2VwdGVtYmVyIDIwLCAyMDE5IDI6MzUg QU0NClRvOiBpdmF5bG8gcGV0cm92IDxpdmF5bG9AYWNrbC5pbzxtYWlsdG86aXZheWxvQGFja2wu aW8+Pg0KQ2M6IGpvc2VAaWV0Zi5vcmc8bWFpbHRvOmpvc2VAaWV0Zi5vcmc+OyBjb3NlQGlldGYu b3JnPG1haWx0bzpjb3NlQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtqb3NlXSDwn5SUIFdHTEMg b2YgZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXMNCg0KVGhhbmtzLCBJIHdhc24n dCBhd2FyZSBvZiB0aGlzIGRyYWZ0LiBJdCBsb29rcyBvaywganVzdCBhIGZldyBjb21tZW50cyBm cm9tIG1lOg0KDQpzZWNwMjU2azEgaXMgbWVudGlvbmVkIGluIHRoZSBjb250ZXh0IG9mIHNpZ25h dHVyZXMgYW5kIHRoZSBuZXcgRVMyNTZLIEpXUyBhbGdvcml0aG0sIGJ1dCB3aGVuIGl0IGlzIHJl Z2lzdGVyZWQgaW4gdGhlIEpPU0UgRWxsaXB0aWMgQ3VydmUgcmVnaXN0cnkgaXQgd2lsbCBhbHNv IGJlIHVzYWJsZSBmb3IgRUNESC1FUyBlbmNyeXB0aW9uLiBUaGUgY3VycmVudCBkcmFmdCBtZW50 aW9ucyBKT1NFIGJ1dCBvbmx5IGxpbmtzIHRvIFJGQyA3NTE1IChKV1MpLiBJcyB0aGUgaW50ZW50 aW9uIHRoYXQgdGhlIGN1cnZlIGJlIG9ubHkgdXNlZCBmb3Igc2lnbmF0dXJlcywgb3IgaXMgaXQg YWxzbyBpbnRlbmRlZCBmb3IgZW5jcnlwdGlvbj8NCg0KW0pMU10gVGhhdCBpcyBhbiBpbnRlcmVz dGluZyBxdWVzdGlvbi4gIFJpZ2h0IG5vdyBJIHdvdWxkIHNheSB0aGF0IGl0IGlzIG9ubHkgZm9y IHNpZ25hdHVyZXMsIGJ1dCBpdCBjb3VsZCBiZSBleHBhbmRlZCB0byBrZXkgYWdyZWVtZW50IHF1 aXRlIGVhc2lseS4gIElzIHRoZXJlIGFueSBuZWVkIGZvciBpdCBvciBhcmUgeW91IGp1c3Qgc3Bl Y3VsYXRpbmc/ICBUaGUgYmlnIHVzZSBJIGtub3cgb2YgaXMgYml0IGNvaW4gd2hpY2ggaXMgb25s eSBzaWduYXR1cmVzIGFuZCBXZWJBdXRobiB3aGljaCBpcyBvbmx5IHNpZ25hdHVyZXMuDQoNCltO RU1dIEFzIHNvb24gYXMgaXQgaXMgcmVnaXN0ZXJlZCBhcyBhIEpPU0UgZWxsaXB0aWMgY3VydmUg aXQgY2FuIGJlIHVzZWQgZm9yIEVDREgtRVMsIHNvIHRoZSBkcmFmdCBzaG91bGQgbWFrZSBhIHN0 YXRlbWVudCBvbmUgd2F5IG9yIGFub3RoZXIgYXMgdG8gd2hldGhlciB0aGlzIGlzIGludGVuZGVk IHJhdGhlciB0aGFuIHN0YW5kYXJkaXppbmcgdGhhdCB1c2FnZSBieSBzaWRlLWVmZmVjdCBJTU8u DQoNCk1pa2U+IEhhdmluZyB0aG91Z2h0IGFib3V0IHRoaXMgc29tZSBtb3JlLCBnaXZlbiB0aGF0 IG5vIG9uZSBvbiB0aGUgdGhyZWFkIGhhcyBwcmVzZW50ZWQgYW4gYXJndW1lbnQgd2h5IHNlY3Ay NTZrMSBzaG91bGQgb3Igc2hvdWxkIG5vdCBiZSB1c2VkIHdpdGggRUNESC1FUywgSSBub3cgcGxh biB0byBtYWtlIGFuIGV4cGxpY2l0IHN0YXRlbWVudCB0aGF0IHdoZXRoZXIgaXQgY2FuIG9yIGNh bm5vdCBiZSB1c2VkIGlzIGV4cGxpY2l0bHkgb3V0IG9mIHNjb3BlIG9mIHRoaXMgc3BlY2lmaWNh dGlvbiwgYW5kIHRoZSB0b3BpYyBjb3VsZCBiZSBjb3ZlcmVkIGJ5IGEgZnV0dXJlIHNwZWNpZmlj YXRpb24uICBUaGUgcXVlc3Rpb24gZG9lc27igJl0IGhhdmUgdG8gYmUgZGVjaWRlZCB0byBhY2hp ZXZlIHRoZSBnb2FscyBvZiB0aGUgY3VycmVudCBzcGVjaWZpY2F0aW9uLg0KDQpJJ20gZ2xhZCBS UzEgaXMgbm90IGJlaW5nIHJlZ2lzdGVyZWQgZm9yIEpPU0UsIGFsdGhvdWdoIEknbSBzdGlsbCBh IGJpdCBzdXJwcmlzZWQgdGhhdCBpdCBpcyBiZWluZyByZWdpc3RlcmVkIChldmVuIGFzIGRlcHJl Y2F0ZWQpIGZvciBhIHN0YW5kYXJkIGFzIG5ldyBhcyBDT1NFLiBJIGNhbid0IGZpbmQgYW55IGp1 c3RpZmljYXRpb24gaW4gdGhlIGxpbmtlZCBXZWJBdXRobiBvciBDVEFQIHNwZWNzIGZvciB3aHkg dGhpcyBhbGdvcml0aG0gbmVlZHMgdG8gZXhpc3QgYXQgYWxsLiBTZWN0aW9uIDUuMyBzYXlzIHRo YXQgaXQgbmVlZHMgdG8gYmUgcmVnaXN0ZXJlZCBiZWNhdXNlIHNvbWUgV2ViQXV0aG4gVFBNIGF0 dGVzdGF0aW9ucyB1c2UgaXQsIGJ1dCB0aGUgdmVyeSBzYW1lIHNlY3Rpb24gc2F5cyB0aGF0IHRo ZSBhbGdvcml0aG0gTVVTVCBOT1QgYmUgdXNlZCBieSBDT1NFIGltcGxlbWVudGF0aW9ucyAoaXMg YSBXZWJBdXRobiBpbXBsZW1lbnRhdGlvbiBub3QgYSBDT1NFIGltcGxlbWVudGF0aW9uPykuIElm IHRoZSBub3JtYXRpdmUgbGFuZ3VhZ2UgaW4gdGhlIHNwZWMgaXMgb2JleWVkIHRoZW4gdGhlIGFs Z29yaXRobSB3aWxsIG5ldmVyIGJlIHVzZWQgYW5kIHNvIHRoZSByZWdpc3RlcmVkIGlkZW50aWZp ZXIgaXNuJ3QgbmVlZGVkLg0KDQpbSkxTXSBGb3IgYmV0dGVyIG9yIGZvciB3b3JzZSwgUlMxIGlz IGFscmVhZHkgcmVnaXN0ZXJlZCBmb3IgSk9TRSwgc28gdGhhdCBpcyB0aGUgcmVhc29uIGl0IGlz IG5vdCByZWdpc3RlcmVkIGhlcmUuDQoNCk91Y2gsIEkgaGFkbid0IHNlZW4gdGhpcy4gVGhlIFdl YkNyeXB0byBncm91cCByZWFsbHkgZGlkIGEgbnVtYmVyIG9uIHRoZSByZWdpc3RyeS4gVGhhbmtm dWxseSBtb3N0IG9mIHRoZW0gKGluY2x1ZGluZyBSUzEpIGFyZSBvbmx5IHJlZ2lzdGVyZWQgZm9y IEpXSyB1c2FnZSBhbmQgbWFya2VkIGFzIFByb2hpYml0ZWQuIChXaGF0IGRvZXMgaXQgZXZlbiBt ZWFuIGZvciB0aGluZ3MgbGlrZSAiQTEyOENCQyIgdG8gYmUgcmVnaXN0ZXJlZCBhcyBhIEpXSyAi YWxnIiB2YWx1ZT8pDQoNCk15IG1haW4gcG9pbnQgc3RpbGwgc3RhbmRzIHRoYXQgc2VjdGlvbiA1 LjMgb2YgdGhlIGRyYWZ0IGlzIHNlbGYtY29udHJhZGljdG9yeSBhcyBpdCBzYXlzIHRoYXQgdGhl IHJlYXNvbiBmb3IgcmVnaXN0cnkgaXMgYmVjYXVzZSBzb21lIFRQTXMgYXJlIHVzaW5nIHRoZSBh bGdvcml0aG0gYnV0IHRoZW4gYWxzbyBzYXlzIHRoYXQgdGhvc2UgaW1wbGVtZW50YXRpb25zIE1V U1QgTk9UIHVzZSB0aGUgYWxnb3JpdGhtLCBuZWdhdGluZyB0aGUgcmVhc29uIGZvciByZWdpc3Rl cmluZyBpdCBpbiB0aGUgZmlyc3QgcGxhY2UuDQoNCk1pa2U+IEkgd2lsbCBpbmNsdWRlIHRoZSBl eHBsYW5hdGlvbiBhcnJpdmVkIGF0IGluIHRoZSBkaXNjdXNzaW9uIG9uIHRoZSBKT1NFIG1haWxp bmcgbGlzdC4NCg0KLS0gTmVpbA0K --_000_DM6PR00MB05696F42C452640D3F9C09C4F5680DM6PR00MB0569namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiU2Vnb2UgVUkgRW1vamkiOw0KCXBhbm9z ZS0xOjIgMTEgNSAyIDQgMiA0IDIgMiAzO30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1z b05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFy Z2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5 bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5l O30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJp b3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0K cC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUt bmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0 OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJ Zm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpz cGFuLmFwcGxlLWNvbnZlcnRlZC1zcGFjZQ0KCXttc28tc3R5bGUtbmFtZTphcHBsZS1jb252ZXJ0 ZWQtc3BhY2U7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwt cmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzAwMjA2 MDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250 LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsN CgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtw YWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0K PG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwh W2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9 ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlv dXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0i Ymx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPlRoYW5rcyBhZ2FpbiBm b3IgdGhlIHJldmlldywgTmVpbC4mbmJzcDsgTXkgcmVwbGllcyBhcmUgaW5saW5lLCBwcmVmaXhl ZCBieSDigJw8L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPk1pa2UmZ3Q7PC9zcGFu PjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj7igJ0uPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJj b2xvcjojMDAyMDYwIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgLS0g TWlrZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0K PGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3Bh ZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+RnJvbTo8 L2I+IENPU0UgJmx0O2Nvc2UtYm91bmNlc0BpZXRmLm9yZyZndDsgPGI+T24gQmVoYWxmIE9mIDwv Yj4NCk5laWwgTWFkZGVuPGJyPg0KPGI+U2VudDo8L2I+IEZyaWRheSwgU2VwdGVtYmVyIDIwLCAy MDE5IDg6MDkgQU08YnI+DQo8Yj5Ubzo8L2I+IEppbSBTY2hhYWQgJmx0O2lldGZAYXVndXN0Y2Vs bGFycy5jb20mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiBjb3NlQGlldGYub3JnOyBqb3NlQGlldGYub3Jn OyBpdmF5bG8gcGV0cm92ICZsdDtpdmF5bG9AYWNrbC5pbyZndDs8YnI+DQo8Yj5TdWJqZWN0Ojwv Yj4gUmU6IFtDT1NFXSBbam9zZV0gPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1NlZ29l IFVJIEVtb2ppJnF1b3Q7LHNhbnMtc2VyaWYiPg0KJiMxMjgyNzY7PC9zcGFuPiBXR0xDIG9mIGRy YWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5UaGFua3MgZm9yIHRoZSByZXBseSwgY29tbWVudHMgaW4tbGluZSBt YXJrZWQgd2l0aCBbTkVNXTo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJn aW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPk9uIDIwIFNlcCAyMDE5LCBhdCAxNTozMSwgSmltIFNjaGFhZCAmbHQ7PGEgaHJlZj0i bWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5jb20iPmlldGZAYXVndXN0Y2VsbGFycy5jb208L2E+ Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3Jk ZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4g MGluIDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+RnJvbTo8L2I+PHNwYW4g Y2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPmpvc2UgJmx0OzxhIGhy ZWY9Im1haWx0bzpqb3NlLWJvdW5jZXNAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJw bGUiPmpvc2UtYm91bmNlc0BpZXRmLm9yZzwvc3Bhbj48L2E+Jmd0OzxzcGFuIGNsYXNzPSJhcHBs ZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48Yj5PbiBCZWhhbGYgT2Y8c3BhbiBjbGFz cz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9iPk5laWwNCiBNYWRkZW48 YnI+DQo8Yj5TZW50OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJz cDs8L3NwYW4+RnJpZGF5LCBTZXB0ZW1iZXIgMjAsIDIwMTkgMjozNSBBTTxicj4NCjxiPlRvOjwv Yj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+aXZheWxv IHBldHJvdiAmbHQ7PGEgaHJlZj0ibWFpbHRvOml2YXlsb0BhY2tsLmlvIj48c3BhbiBzdHlsZT0i Y29sb3I6cHVycGxlIj5pdmF5bG9AYWNrbC5pbzwvc3Bhbj48L2E+Jmd0Ozxicj4NCjxiPkNjOjwv Yj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJl Zj0ibWFpbHRvOmpvc2VAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmpvc2VA aWV0Zi5vcmc8L3NwYW4+PC9hPjs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmNvc2VAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJj b2xvcjpwdXJwbGUiPmNvc2VAaWV0Zi5vcmc8L3NwYW4+PC9hPjxicj4NCjxiPlN1YmplY3Q6PC9i PjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5SZTogW2pv c2VdPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtTZWdvZSBVSSBFbW9qaSZxdW90OyxzYW5zLXNlcmlm Ij4mIzEyODI3Njs8L3NwYW4+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPldHTEMgb2YgZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXM8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPlRoYW5rcywgSSB3YXNuJ3QgYXdhcmUgb2YgdGhpcyBkcmFmdC4gSXQgbG9va3Mg b2ssIGp1c3QgYSBmZXcgY29tbWVudHMgZnJvbSBtZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPnNlY3Ay NTZrMSBpcyBtZW50aW9uZWQgaW4gdGhlIGNvbnRleHQgb2Ygc2lnbmF0dXJlcyBhbmQgdGhlIG5l dyBFUzI1NksgSldTIGFsZ29yaXRobSwgYnV0IHdoZW4gaXQgaXMgcmVnaXN0ZXJlZCBpbiB0aGUg Sk9TRSBFbGxpcHRpYyBDdXJ2ZSByZWdpc3RyeSBpdCB3aWxsIGFsc28gYmUgdXNhYmxlIGZvciBF Q0RILUVTIGVuY3J5cHRpb24uIFRoZSBjdXJyZW50IGRyYWZ0IG1lbnRpb25zIEpPU0UgYnV0IG9u bHkNCiBsaW5rcyB0byBSRkMgNzUxNSAoSldTKS4gSXMgdGhlIGludGVudGlvbiB0aGF0IHRoZSBj dXJ2ZSBiZSBvbmx5IHVzZWQgZm9yIHNpZ25hdHVyZXMsIG9yIGlzIGl0IGFsc28gaW50ZW5kZWQg Zm9yIGVuY3J5cHRpb24/PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPltKTFNdIFRoYXQgaXMgYW4gaW50ZXJlc3RpbmcgcXVlc3Rpb24uJm5ic3A7 IFJpZ2h0IG5vdyBJIHdvdWxkIHNheSB0aGF0IGl0IGlzIG9ubHkgZm9yIHNpZ25hdHVyZXMsIGJ1 dCBpdCBjb3VsZCBiZSBleHBhbmRlZCB0byBrZXkgYWdyZWVtZW50IHF1aXRlIGVhc2lseS4mbmJz cDsgSXMgdGhlcmUgYW55IG5lZWQgZm9yIGl0IG9yIGFyZSB5b3UganVzdCBzcGVjdWxhdGluZz8m bmJzcDsgVGhlIGJpZyB1c2UgSSBrbm93IG9mIGlzIGJpdCBjb2luDQogd2hpY2ggaXMgb25seSBz aWduYXR1cmVzIGFuZCBXZWJBdXRobiB3aGljaCBpcyBvbmx5IHNpZ25hdHVyZXMuPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj5bTkVNXSBBcyBzb29uIGFzIGl0IGlzIHJlZ2lzdGVyZWQgYXMg YSBKT1NFIGVsbGlwdGljIGN1cnZlIGl0IGNhbiBiZSB1c2VkIGZvciBFQ0RILUVTLCBzbyB0aGUg ZHJhZnQgc2hvdWxkIG1ha2UgYSBzdGF0ZW1lbnQgb25lIHdheSBvciBhbm90aGVyIGFzIHRvIHdo ZXRoZXIgdGhpcyBpcyBpbnRlbmRlZCByYXRoZXIgdGhhbiBzdGFuZGFyZGl6aW5nIHRoYXQgdXNh Z2UgYnkgc2lkZS1lZmZlY3QgSU1PLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48YnI+DQo8c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZndDsgSGF2 aW5nIHRob3VnaHQgYWJvdXQgdGhpcyBzb21lIG1vcmUsIGdpdmVuIHRoYXQgbm8gb25lIG9uIHRo ZSB0aHJlYWQgaGFzIHByZXNlbnRlZCBhbiBhcmd1bWVudCB3aHkgc2VjcDI1NmsxIHNob3VsZCBv ciBzaG91bGQgbm90IGJlIHVzZWQgd2l0aCBFQ0RILUVTLCBJIG5vdyBwbGFuIHRvIG1ha2UgYW4g ZXhwbGljaXQgc3RhdGVtZW50IHRoYXQgd2hldGhlciBpdCBjYW4gb3IgY2Fubm90DQogYmUgdXNl ZCBpcyBleHBsaWNpdGx5IG91dCBvZiBzY29wZSBvZiB0aGlzIHNwZWNpZmljYXRpb24sIGFuZCB0 aGUgdG9waWMgY291bGQgYmUgY292ZXJlZCBieSBhIGZ1dHVyZSBzcGVjaWZpY2F0aW9uLiZuYnNw OyBUaGUgcXVlc3Rpb24gZG9lc27igJl0IGhhdmUgdG8gYmUgZGVjaWRlZCB0byBhY2hpZXZlIHRo ZSBnb2FscyBvZiB0aGUgY3VycmVudCBzcGVjaWZpY2F0aW9uLjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4w cHQiPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PkknbSBnbGFkIFJTMSBpcyBub3QgYmVpbmcgcmVnaXN0ZXJlZCBmb3IgSk9TRSwgYWx0aG91Z2gg SSdtIHN0aWxsIGEgYml0IHN1cnByaXNlZCB0aGF0IGl0IGlzIGJlaW5nIHJlZ2lzdGVyZWQgKGV2 ZW4gYXMgZGVwcmVjYXRlZCkgZm9yIGEgc3RhbmRhcmQgYXMgbmV3IGFzIENPU0UuIEkgY2FuJ3Qg ZmluZCBhbnkganVzdGlmaWNhdGlvbiBpbiB0aGUgbGlua2VkIFdlYkF1dGhuIG9yIENUQVAgc3Bl Y3MgZm9yIHdoeQ0KIHRoaXMgYWxnb3JpdGhtIG5lZWRzIHRvIGV4aXN0IGF0IGFsbC4gU2VjdGlv biA1LjMgc2F5cyB0aGF0IGl0IG5lZWRzIHRvIGJlIHJlZ2lzdGVyZWQgYmVjYXVzZSBzb21lIFdl YkF1dGhuIFRQTSBhdHRlc3RhdGlvbnMgdXNlIGl0LCBidXQgdGhlIHZlcnkgc2FtZSBzZWN0aW9u IHNheXMgdGhhdCB0aGUgYWxnb3JpdGhtIE1VU1QgTk9UIGJlIHVzZWQgYnkgQ09TRSBpbXBsZW1l bnRhdGlvbnMgKGlzIGEgV2ViQXV0aG4gaW1wbGVtZW50YXRpb24gbm90DQogYSBDT1NFIGltcGxl bWVudGF0aW9uPykuIElmIHRoZSBub3JtYXRpdmUgbGFuZ3VhZ2UgaW4gdGhlIHNwZWMgaXMgb2Jl eWVkIHRoZW4gdGhlIGFsZ29yaXRobSB3aWxsIG5ldmVyIGJlIHVzZWQgYW5kIHNvIHRoZSByZWdp c3RlcmVkIGlkZW50aWZpZXIgaXNuJ3QgbmVlZGVkLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5bSkxTXSBGb3IgYmV0dGVyIG9yIGZvciB3b3Jz ZSwgUlMxIGlzIGFscmVhZHkgcmVnaXN0ZXJlZCBmb3IgSk9TRSwgc28gdGhhdCBpcyB0aGUgcmVh c29uIGl0IGlzIG5vdCByZWdpc3RlcmVkIGhlcmUuJm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjwvYmxvY2txdW90ZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T3VjaCwgSSBoYWRuJ3Qg c2VlbiB0aGlzLiBUaGUgV2ViQ3J5cHRvIGdyb3VwIHJlYWxseSBkaWQgYSBudW1iZXIgb24gdGhl IHJlZ2lzdHJ5LiBUaGFua2Z1bGx5IG1vc3Qgb2YgdGhlbSAoaW5jbHVkaW5nIFJTMSkgYXJlIG9u bHkgcmVnaXN0ZXJlZCBmb3IgSldLIHVzYWdlIGFuZCBtYXJrZWQgYXMgUHJvaGliaXRlZC4gKFdo YXQgZG9lcyBpdCBldmVuIG1lYW4gZm9yIHRoaW5ncyBsaWtlICZxdW90O0ExMjhDQkMmcXVvdDsg dG8NCiBiZSByZWdpc3RlcmVkIGFzIGEgSldLICZxdW90O2FsZyZxdW90OyB2YWx1ZT8pPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk15IG1haW4g cG9pbnQgc3RpbGwgc3RhbmRzIHRoYXQgc2VjdGlvbiA1LjMgb2YgdGhlIGRyYWZ0IGlzIHNlbGYt Y29udHJhZGljdG9yeSBhcyBpdCBzYXlzIHRoYXQgdGhlIHJlYXNvbiBmb3IgcmVnaXN0cnkgaXMg YmVjYXVzZSBzb21lIFRQTXMgYXJlIHVzaW5nIHRoZSBhbGdvcml0aG0gYnV0IHRoZW4gYWxzbyBz YXlzIHRoYXQgdGhvc2UgaW1wbGVtZW50YXRpb25zIE1VU1QgTk9UIHVzZSB0aGUgYWxnb3JpdGht LA0KIG5lZ2F0aW5nIHRoZSByZWFzb24gZm9yIHJlZ2lzdGVyaW5nIGl0IGluIHRoZSBmaXJzdCBw bGFjZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZn dDsgSSB3aWxsIGluY2x1ZGUgdGhlIGV4cGxhbmF0aW9uIGFycml2ZWQgYXQgaW4gdGhlIGRpc2N1 c3Npb24gb24gdGhlIEpPU0UgbWFpbGluZyBsaXN0LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4t LSBOZWlsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_DM6PR00MB05696F42C452640D3F9C09C4F5680DM6PR00MB0569namp_-- From nobody Wed Oct 23 06:21:47 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 527C01208DC for ; Wed, 23 Oct 2019 06:21:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.988 X-Spam-Level: X-Spam-Status: No, score=-1.988 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_REMOTE_IMAGE=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=forgerock.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DvtR-_rrNrPg for ; Wed, 23 Oct 2019 06:21:42 -0700 (PDT) Received: from mail-wm1-x331.google.com (mail-wm1-x331.google.com [IPv6:2a00:1450:4864:20::331]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 372391208E2 for ; Wed, 23 Oct 2019 06:21:42 -0700 (PDT) Received: by mail-wm1-x331.google.com with SMTP id v6so2655882wmj.0 for ; Wed, 23 Oct 2019 06:21:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=forgerock.com; s=google; h=from:message-id:mime-version:subject:date:in-reply-to:cc:to :references; bh=Z9lGnkYjleT29c9TFLIwpUkXxm2oVQFuczo+pGXJCX0=; b=jMBE1fgTus9eOv6kSn2wq+nJQmyXSeymmns4sHS8INvWEzzZEt1rKgUK6gHT7Z/7BW abvT3qjXlYiWc2cnDP+B41fY94qudCWYevRJ+iSR9JOunsDNZWo7ASCztyfho7u3NBuo A4G8zdkudgD6P/C49rT0TS0vfjflLiHxJBVJc= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:message-id:mime-version:subject:date :in-reply-to:cc:to:references; bh=Z9lGnkYjleT29c9TFLIwpUkXxm2oVQFuczo+pGXJCX0=; b=oJbPUXQEDYIeAIA1hlzAd7gdAsspSHSo3MV4xDsw7kRAWAa9AurxdSwQe8jsUXfdY0 KzSHfeU5aHEb0IYZOMq408Y4eq3x4osMln/iWmQekQNmuX3Yy0r49GlMFieRt/lIv7/y BBAaatmJJTmDr6VSspbxplXGALMniGCZGh7OEYUnE2oVTOLTsEfxHb+PQo/Jj1BPVwAq mfgHwD20nMFcsVcm68xHs+ro1Jmj212U95KF0i6ayZBAFrqRK5PUpKkmPINyxuyF4sGU CfxFG9oQ3aEIp6DEG3hDPftFy6rpx/fQfIg/+xYqjurA6a3mpsggax7qgkM4agiuCyfb Chdg== X-Gm-Message-State: APjAAAUdZ8Zo00V89d1oP+aiA+HKDKjqhd5pfR/z85Z8tAKEYHJyjUSD PVE++rvVgXxhdsTX3cenkbR4Cg== X-Google-Smtp-Source: APXvYqxAXTIYpIOY9u0pYivrYUMR0K0FcFQgoBeA13QBGZYClf1ZWuHs0JwUiWBfu2hS3QeuDEhQVg== X-Received: by 2002:a7b:cb0b:: with SMTP id u11mr7806977wmj.125.1571836900475; Wed, 23 Oct 2019 06:21:40 -0700 (PDT) Received: from [192.168.2.104] (77-44-110-214.xdsl.murphx.net. [77.44.110.214]) by smtp.gmail.com with ESMTPSA id o70sm28718847wme.29.2019.10.23.06.21.39 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 23 Oct 2019 06:21:39 -0700 (PDT) From: Neil Madden Message-Id: <5B5DD1EA-33F6-4703-B757-66B324CD3706@forgerock.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_0916241F-F107-4C35-BE0B-0F1822E0E526" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Wed, 23 Oct 2019 14:21:36 +0100 In-Reply-To: <00ce01d588eb$6eee22d0$4cca6870$@augustcellars.com> Cc: Mike Jones , cose , draft-ietf-cose-webauthn-algorithms@ietf.org To: Jim Schaad References: <000001d56dc2$e14f20c0$a3ed6240$@augustcellars.com> <00ce01d588eb$6eee22d0$4cca6870$@augustcellars.com> X-Mailer: Apple Mail (2.3445.104.11) Archived-At: Subject: Re: [COSE] =?utf-8?q?=F0=9F=94=94_WGLC_of_draft-ietf-cose-webauthn-a?= =?utf-8?q?lgorithms?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Oct 2019 13:21:45 -0000 --Apple-Mail=_0916241F-F107-4C35-BE0B-0F1822E0E526 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 A couple of additional data points with regard to deterministic ECDSA = (sorry Mike!): - While deterministic ECDSA is generally more secure, I gather that is = not (yet?) a FIPS-approved nonce-generation method. So people with FIPS = requirements won't be able to use it, sigh. - In the specific context of IoT where devices may be physically = vulnerable, deterministic ECDSA and EdDSA have both been shown to be = susceptible to fault attacks (see e.g. [1] and [2]). In particular, = deterministic ECDSA may be *more* vulnerable to such attacks than = randomized ECDSA. The linked papers offer some proposed countermeasures. = For CWT usage, I believe including a fresh random "cti" claim in every = signed token would reduce the effectiveness of these attacks = dramatically as the signature generation will be effectively randomized = while also being nonce reuse misuse-resistant. If I was going to propose wording, perhaps something along these lines: =3D=3D=3D=3D Implementations SHOULD use a deterministic algorithm to generate the = ECDSA nonce, k, such as [RFC 6979]. In situations where devices are = vulnerable to physical attacks, deterministic ECDSA has been shown to be = susceptible to fault injection attacks [refs]. Where this is a = possibility, implementations SHOULD implement appropriate = countermeasures. Where there are specific certification requirements = (such as FIPS approval), implementors should check whether deterministic = ECDSA is an approved nonce generation method. =3D=3D=3D=3D [1]: = https://research.kudelskisecurity.com/2017/10/04/defeating-eddsa-with-faul= ts/ = =20 [2]: https://eprint.iacr.org/2017/1014.pdf = =20 -- Neil Madden Security Director | ForgeRock e neil.madden@forgerock.com web https://www.forgerock.com > On 22 Oct 2019, at 16:14, Jim Schaad wrote: >=20 > I forgot to respond to this one > =20 > From: Mike Jones >=20 > Sent: Monday, October 21, 2019 5:00 PM > To: Jim Schaad >; 'cose' > > Cc: draft-ietf-cose-webauthn-algorithms@ietf.org = > Subject: RE: [COSE] =F0=9F=94=94 WGLC of = draft-ietf-cose-webauthn-algorithms > =20 > Thanks for your review, Jim. Responses are inline, prefixed by = =E2=80=9CMike>=E2=80=9D. > =20 > -- Mike > =20 > From: Jim Schaad >=20 > Sent: Tuesday, September 17, 2019 6:46 PM > To: 'cose' > > Cc: draft-ietf-cose-webauthn-algorithms@ietf.org = > Subject: RE: [COSE] =F0=9F=94=94 WGLC of = draft-ietf-cose-webauthn-algorithms > =20 > I start this review by copying forward all of my comments on = draft-jones-cose-additional-algorithms-00 > =20 > =20 > Please include text related to deterministic ECDSA in this text. > =20 > Mike> What do you want this text to say? I=E2=80=99m reluctant to use = the text at https://tools.ietf.org/html/rfc8152#section-8.1 = , which says that = =E2=80=9Cimplementations SHOLUD use a deterministic algorithm=E2=80=9D, = which is misleading, in that it implies that there are many such = algorithms that could be used. In fact, exactly one is being specified. > =20 > [JLS] I was unaware that there is only one possible deterministic = algorithm, any keyed hash algorithm can be used to generate the = deterministic =E2=80=98k=E2=80=99 to be used for the signature = algorithm. There is not a requirement that the secret value be the = private key for the signature key pair, one could generate a private = value just for that purpose. Independent of that, the default ECDSA = algorithm specifications all say use a random value of =E2=80=98k=E2=80=99= rather than a deterministic value and the use of the deterministic = value is far more secure. > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose = --Apple-Mail=_0916241F-F107-4C35-BE0B-0F1822E0E526 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
A couple of additional data points with regard to = deterministic ECDSA (sorry Mike!):

 - While deterministic ECDSA is = generally more secure, I gather that is not (yet?) a FIPS-approved = nonce-generation method. So people with FIPS requirements won't be able = to use it, sigh.

 - In the specific context of IoT where devices may be = physically vulnerable, deterministic ECDSA and EdDSA have both been = shown to be susceptible to fault attacks (see e.g. [1] and [2]). In = particular, deterministic ECDSA may be *more* vulnerable to such attacks = than randomized ECDSA. The linked papers offer some proposed = countermeasures. For CWT usage, I believe including a fresh random "cti" = claim in every signed token would reduce the effectiveness of these = attacks dramatically as the signature generation will be effectively = randomized while also being nonce reuse misuse-resistant.

If I was going to = propose wording, perhaps something along these lines:

=3D=3D=3D=3D
Implementations SHOULD use a deterministic algorithm to = generate the ECDSA nonce, k, such as [RFC 6979]. In situations where = devices are vulnerable to physical attacks, deterministic ECDSA has been = shown to be susceptible to fault injection attacks [refs]. Where this is = a possibility, implementations SHOULD implement appropriate = countermeasures. Where there are specific certification requirements = (such as FIPS approval), implementors should check whether deterministic = ECDSA is an approved nonce generation method.
=3D=3D=3D=3D

[1]: https://research.kudelskisecurity.com/2017/10/04/defeating-edds= a-with-faults/ 
[2]: https://eprint.iacr.org/2017/1014.pdf 

--
3D"http://www.forgerock.com"Neil = Madden
Security Director  |  ForgeRock
e neil.madden@forgerock.com
web https://www.forgerock.com





On 22 Oct 2019, at 16:14, Jim Schaad <ietf@augustcellars.com> wrote:

I forgot = to respond to this one
 
From: Mike Jones <Michael.Jones@microsoft.com> 
Sent: Monday, October 21, 2019 = 5:00 PM
To: Jim Schaad <ietf@augustcellars.com>; = 'cose' <cose@ietf.org>
Cc: draft-ietf-cose-webauthn-algorithms@ietf.org
Subject: RE: [COSE] =F0=9F=94=94 WGLC of = draft-ietf-cose-webauthn-algorithms
 
Thanks for = your review, Jim.  Responses are inline, prefixed by = =E2=80=9CMike>=E2=80=9D.
 
          &nb= sp;            = ;            &= nbsp;           &nb= sp;       -- Mike
 
From: Jim Schaad <ietf@augustcellars.com> 
Sent: Tuesday, September 17, 2019 = 6:46 PM
To: 'cose' <cose@ietf.org>
Cc: draft-ietf-cose-webauthn-algorithms@ietf.org
Subject: RE: [COSE] =F0=9F=94=94 WGLC of = draft-ietf-cose-webauthn-algorithms
 
I start this review by copying forward all of my comments on = draft-jones-cose-additional-algorithms-00
 
 
  1. Please = include text related to deterministic ECDSA in this text.
 
Mike> What do you want = this text to say?  I=E2=80=99m reluctant to use the text at https://tools.ietf.org/html/rfc8152#section-8.1, which says that = =E2=80=9Cimplementations SHOLUD use a deterministic algorithm=E2=80=9D, = which is misleading, in that it implies that there are many such = algorithms that could be used.  In fact, exactly one is being = specified.
 
[JLS] I = was unaware that there is only one possible deterministic algorithm, any = keyed hash algorithm can be used to generate the deterministic =E2=80=98k=E2= =80=99 to be used for the signature algorithm.  There is not a = requirement that the secret value be the private key for the signature = key pair, one could generate a private value just for that = purpose.  Independent of that, the default ECDSA algorithm = specifications all say use a random value of =E2=80=98k=E2=80=99 rather = than a deterministic value and the use of the deterministic value is far = more secure.
_______________________________________________
COSE mailing = list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose

= --Apple-Mail=_0916241F-F107-4C35-BE0B-0F1822E0E526-- From nobody Wed Oct 23 12:20:35 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3CCD2120906; Wed, 23 Oct 2019 12:20:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.789 X-Spam-Level: X-Spam-Status: No, score=-1.789 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_REMOTE_IMAGE=0.01, URIBL_BLOCKED=0.001, URI_HEX=0.1] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ktNHOP8InmDH; Wed, 23 Oct 2019 12:20:25 -0700 (PDT) Received: from NAM06-DM3-obe.outbound.protection.outlook.com (mail-eopbgr640095.outbound.protection.outlook.com [40.107.64.95]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2A633120D81; Wed, 23 Oct 2019 12:20:25 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=IhiCKKcm7SWNYc9xeeI2Oefz4+UWrmawVa7J4TYAito/eI8z5Ap2Ual170FpJhm3XJcKQ70jaqSdc7brI7GTu3wSpejGpkqVswoh99VB/K/cMBSmYM9ryvuq/vmRYxIQbBJEA9y/4zS+p24NkNM8CwHJaDG1MwbltMPVaKCrpDlI4p4CCjMzbb6iL59n/ii4+85II7GvJHGtpINnaY5eSlplo9dcdZ0i75TTg+ik4HlEsmRz62r2pYwoA20pENpJj7MRM6mDXGKyXQY7dT+MSikPn0u4sshWo7g5+fKvcA99QHt7QNsvjoHti4q7qmGZC/Vhj8lkmZz07d3xB59U0g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=O/+IQXPHmMv4BwKGn39+KcfWZjmVEfrvimNBGSnPSeQ=; b=St1UgAVCk0R8CPWiuasz8L6q5WC34gv5pDuMzYU3u12qffJtVoLuKhqyUJcmxZk2Si+e5vp41rDWXYNBttQ2re0Xd0Xf8hXzox27Gw/l08DpjhDY2AbfokcvMuFNXu7eQMv3+UBux46dwj6/OktYavPkX3kg8DqLK/cvjSjjwRA1qYkRoQsdJ7FAWvD4q82HP14/hSeKNgP6mIhfTAcSLD7phpYke3Zx9tEh4gDFqSd78HVzWuQpjojUkL4P7LFKu16kd7G+syw7HPmxSddLBrTyPUR4j9YkZidkYnWr+cy4antyRJyqR/37jU/cAwNSEuMebYd+cokOxqXPEfKePw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=O/+IQXPHmMv4BwKGn39+KcfWZjmVEfrvimNBGSnPSeQ=; b=Hsq933yweD53t1yxxs8Nnk+n58jsqAmYPZ4nciS7YDC4huvN4ag888O0ZOojmJ6UeKadm+O0CkCh4AdtCLUwlN1my5azjrxL8pKPZOp34NlVcnJ7xtkQuoUHgkPSAuzxVQUXT5WRkoxDyf+8dJCCZezD0VY+3UF2q26MXzPrJHw= Received: from BYAPR00MB0565.namprd00.prod.outlook.com (20.179.56.23) by BYAPR00MB0647.namprd00.prod.outlook.com (20.178.197.32) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2399.0; Wed, 23 Oct 2019 19:20:22 +0000 Received: from BYAPR00MB0565.namprd00.prod.outlook.com ([fe80::f9aa:3168:3fca:4e98]) by BYAPR00MB0565.namprd00.prod.outlook.com ([fe80::f9aa:3168:3fca:4e98%4]) with mapi id 15.20.2425.000; Wed, 23 Oct 2019 19:20:22 +0000 From: Mike Jones To: Neil Madden , Jim Schaad CC: cose , "draft-ietf-cose-webauthn-algorithms@ietf.org" Thread-Topic: =?utf-8?B?W0NPU0VdIPCflJQgV0dMQyBvZiBkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4t?= =?utf-8?Q?algorithms?= Thread-Index: AQHVbWSlFBVJFlStCEe6sWSpGQx0gacwqvUAgDUjSdCAAS3SAIABcr0AgABkD2A= Date: Wed, 23 Oct 2019 19:20:22 +0000 Message-ID: References: <000001d56dc2$e14f20c0$a3ed6240$@augustcellars.com> <00ce01d588eb$6eee22d0$4cca6870$@augustcellars.com> <5B5DD1EA-33F6-4703-B757-66B324CD3706@forgerock.com> In-Reply-To: <5B5DD1EA-33F6-4703-B757-66B324CD3706@forgerock.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=69e1a472-7080-450f-8a4e-00007169a4a3; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-10-23T19:19:45Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [50.47.93.218] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 206b9449-3e30-4f1b-dbea-08d757ee0cd7 x-ms-traffictypediagnostic: BYAPR00MB0647: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 019919A9E4 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(366004)(396003)(346002)(136003)(39860400002)(376002)(189003)(199004)(33656002)(790700001)(606006)(86362001)(966005)(110136005)(316002)(22452003)(4326008)(81166006)(64756008)(6116002)(71200400001)(54906003)(76116006)(229853002)(66476007)(3846002)(71190400001)(66066001)(25786009)(66446008)(478600001)(81156014)(8936002)(66946007)(66556008)(14454004)(99286004)(446003)(74316002)(52536014)(10290500003)(236005)(53546011)(10090500001)(14444005)(6306002)(26005)(6246003)(8990500004)(7736002)(7696005)(476003)(76176011)(186003)(733005)(102836004)(9686003)(11346002)(6436002)(54896002)(6506007)(55016002)(2906002)(486006)(256004)(5660300002); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR00MB0647; H:BYAPR00MB0565.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: MV9gJ4WNX5Wt/AuaaxP425AWQ/t8tZyR8ptnkQcvXV4Fv8sp20t25JVZ+FZDC1pI4/wQBD4rSwyoqb0oudazWaUUTgAVsjFcKZAgKj9yrX8xH1Bsab76IFy73KnBSQvjRymnln3t3W41z3092RwFBNhXfGEHFJ2BtF5AHIHOeZ+q5ougq2P8sJmp/KNpt2PtA/Ycb6GPQ16dHhv8XzScJ5mYZTlbIJ4TWDpPK9pOQkKJqRPQ2yva5wRPHwVG2QiRsWLbUIiXFZ1ym8XxGhql8t1lsceIb5BNFqmzQkdEV7y9XIpUOUMb5dPgRm1BuBHkYiJwREPdg8BTkaQddPmxHtolF9xPOK6wVvDrHA1jxmm+50gcu+3eSopU8AoLaibTUMBcZyFeR4VH08X95P8eewNYlMWgRaShtI2F5d0/cjw= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BYAPR00MB0565FFE73878304DC8EB94B9F56B0BYAPR00MB0565namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 206b9449-3e30-4f1b-dbea-08d757ee0cd7 X-MS-Exchange-CrossTenant-originalarrivaltime: 23 Oct 2019 19:20:22.4441 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 3B6mw40AdQaLB5C9mUEYnd3zSRsb3UeOZTpiMEdo1tpgYpMpbS1rmKfHCn9Psv0ff5pxGZ4mGGJ5/3Gv/T6R0Q== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR00MB0647 Archived-At: Subject: Re: [COSE] =?utf-8?q?=F0=9F=94=94_WGLC_of_draft-ietf-cose-webauthn-a?= =?utf-8?q?lgorithms?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Oct 2019 19:20:33 -0000 --_000_BYAPR00MB0565FFE73878304DC8EB94B9F56B0BYAPR00MB0565namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 RG9u4oCZdCBhcG9sb2dpemUuICBZb3UgcHJvdmlkZWQgcHJvcG9zZWQgd29yZGluZywgd2hpY2gg aXMgZXh0cmVtZWx5IGhlbHBmdWwhDQoNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBUaGFua3MgTmVpbCwNCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAtLSBNaWtlDQoNCkZyb206IE5laWwg TWFkZGVuIDxuZWlsLm1hZGRlbkBmb3JnZXJvY2suY29tPg0KU2VudDogV2VkbmVzZGF5LCBPY3Rv YmVyIDIzLCAyMDE5IDY6MjIgQU0NClRvOiBKaW0gU2NoYWFkIDxpZXRmQGF1Z3VzdGNlbGxhcnMu Y29tPg0KQ2M6IE1pa2UgSm9uZXMgPE1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbT47IGNvc2Ug PGNvc2VAaWV0Zi5vcmc+OyBkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtc0BpZXRm Lm9yZw0KU3ViamVjdDogUmU6IFtDT1NFXSDwn5SUIFdHTEMgb2YgZHJhZnQtaWV0Zi1jb3NlLXdl YmF1dGhuLWFsZ29yaXRobXMNCg0KQSBjb3VwbGUgb2YgYWRkaXRpb25hbCBkYXRhIHBvaW50cyB3 aXRoIHJlZ2FyZCB0byBkZXRlcm1pbmlzdGljIEVDRFNBIChzb3JyeSBNaWtlISk6DQoNCiAtIFdo aWxlIGRldGVybWluaXN0aWMgRUNEU0EgaXMgZ2VuZXJhbGx5IG1vcmUgc2VjdXJlLCBJIGdhdGhl ciB0aGF0IGlzIG5vdCAoeWV0PykgYSBGSVBTLWFwcHJvdmVkIG5vbmNlLWdlbmVyYXRpb24gbWV0 aG9kLiBTbyBwZW9wbGUgd2l0aCBGSVBTIHJlcXVpcmVtZW50cyB3b24ndCBiZSBhYmxlIHRvIHVz ZSBpdCwgc2lnaC4NCg0KIC0gSW4gdGhlIHNwZWNpZmljIGNvbnRleHQgb2YgSW9UIHdoZXJlIGRl dmljZXMgbWF5IGJlIHBoeXNpY2FsbHkgdnVsbmVyYWJsZSwgZGV0ZXJtaW5pc3RpYyBFQ0RTQSBh bmQgRWREU0EgaGF2ZSBib3RoIGJlZW4gc2hvd24gdG8gYmUgc3VzY2VwdGlibGUgdG8gZmF1bHQg YXR0YWNrcyAoc2VlIGUuZy4gWzFdIGFuZCBbMl0pLiBJbiBwYXJ0aWN1bGFyLCBkZXRlcm1pbmlz dGljIEVDRFNBIG1heSBiZSAqbW9yZSogdnVsbmVyYWJsZSB0byBzdWNoIGF0dGFja3MgdGhhbiBy YW5kb21pemVkIEVDRFNBLiBUaGUgbGlua2VkIHBhcGVycyBvZmZlciBzb21lIHByb3Bvc2VkIGNv dW50ZXJtZWFzdXJlcy4gRm9yIENXVCB1c2FnZSwgSSBiZWxpZXZlIGluY2x1ZGluZyBhIGZyZXNo IHJhbmRvbSAiY3RpIiBjbGFpbSBpbiBldmVyeSBzaWduZWQgdG9rZW4gd291bGQgcmVkdWNlIHRo ZSBlZmZlY3RpdmVuZXNzIG9mIHRoZXNlIGF0dGFja3MgZHJhbWF0aWNhbGx5IGFzIHRoZSBzaWdu YXR1cmUgZ2VuZXJhdGlvbiB3aWxsIGJlIGVmZmVjdGl2ZWx5IHJhbmRvbWl6ZWQgd2hpbGUgYWxz byBiZWluZyBub25jZSByZXVzZSBtaXN1c2UtcmVzaXN0YW50Lg0KDQpJZiBJIHdhcyBnb2luZyB0 byBwcm9wb3NlIHdvcmRpbmcsIHBlcmhhcHMgc29tZXRoaW5nIGFsb25nIHRoZXNlIGxpbmVzOg0K DQo9PT09DQpJbXBsZW1lbnRhdGlvbnMgU0hPVUxEIHVzZSBhIGRldGVybWluaXN0aWMgYWxnb3Jp dGhtIHRvIGdlbmVyYXRlIHRoZSBFQ0RTQSBub25jZSwgaywgc3VjaCBhcyBbUkZDIDY5NzldLiBJ biBzaXR1YXRpb25zIHdoZXJlIGRldmljZXMgYXJlIHZ1bG5lcmFibGUgdG8gcGh5c2ljYWwgYXR0 YWNrcywgZGV0ZXJtaW5pc3RpYyBFQ0RTQSBoYXMgYmVlbiBzaG93biB0byBiZSBzdXNjZXB0aWJs ZSB0byBmYXVsdCBpbmplY3Rpb24gYXR0YWNrcyBbcmVmc10uIFdoZXJlIHRoaXMgaXMgYSBwb3Nz aWJpbGl0eSwgaW1wbGVtZW50YXRpb25zIFNIT1VMRCBpbXBsZW1lbnQgYXBwcm9wcmlhdGUgY291 bnRlcm1lYXN1cmVzLiBXaGVyZSB0aGVyZSBhcmUgc3BlY2lmaWMgY2VydGlmaWNhdGlvbiByZXF1 aXJlbWVudHMgKHN1Y2ggYXMgRklQUyBhcHByb3ZhbCksIGltcGxlbWVudG9ycyBzaG91bGQgY2hl Y2sgd2hldGhlciBkZXRlcm1pbmlzdGljIEVDRFNBIGlzIGFuIGFwcHJvdmVkIG5vbmNlIGdlbmVy YXRpb24gbWV0aG9kLg0KPT09PQ0KDQpbMV06IGh0dHBzOi8vcmVzZWFyY2gua3VkZWxza2lzZWN1 cml0eS5jb20vMjAxNy8xMC8wNC9kZWZlYXRpbmctZWRkc2Etd2l0aC1mYXVsdHMvPGh0dHBzOi8v bmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUy RnJlc2VhcmNoLmt1ZGVsc2tpc2VjdXJpdHkuY29tJTJGMjAxNyUyRjEwJTJGMDQlMkZkZWZlYXRp bmctZWRkc2Etd2l0aC1mYXVsdHMlMkYmZGF0YT0wMiU3QzAxJTdDTWljaGFlbC5Kb25lcyU0MG1p Y3Jvc29mdC5jb20lN0NkY2RiZTI0MDA3YzU0YTlmZjM0YjA4ZDc1N2JiZjE1OCU3QzcyZjk4OGJm ODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzcwNzQzMzgzODE2ODI2OTQmc2Rh dGE9MzJwbzc3OG1laFpxdVZ6elV2V0NZNnpJTFNhU2E5THNWZkViaklFeFNaRSUzRCZyZXNlcnZl ZD0wPg0KWzJdOiBodHRwczovL2VwcmludC5pYWNyLm9yZy8yMDE3LzEwMTQucGRmPGh0dHBzOi8v bmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUy RmVwcmludC5pYWNyLm9yZyUyRjIwMTclMkYxMDE0LnBkZiZkYXRhPTAyJTdDMDElN0NNaWNoYWVs LkpvbmVzJTQwbWljcm9zb2Z0LmNvbSU3Q2RjZGJlMjQwMDdjNTRhOWZmMzRiMDhkNzU3YmJmMTU4 JTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzA3NDMzODM4 MTY5MjY5NCZzZGF0YT16a283ZjhLdXIwYVJBNHduTkdzTUpveGhVNFhvUWcyam0wcFV3b0dVSFNB JTNEJnJlc2VydmVkPTA+DQoNCi0tDQpbaHR0cHM6Ly9kcml2ZS5nb29nbGUuY29tL2EvZm9yZ2Vy b2NrLmNvbS91Yz9pZD0xWlRrU0s0NThNS3UzTjVpLWxjeklhYUlUYVRWNHpuaFYmZXhwb3J0PWRv d25sb2FkXTxodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91 cmw9aHR0cCUzQSUyRiUyRnd3dy5mb3JnZXJvY2suY29tJmRhdGE9MDIlN0MwMSU3Q01pY2hhZWwu Sm9uZXMlNDBtaWNyb3NvZnQuY29tJTdDZGNkYmUyNDAwN2M1NGE5ZmYzNGIwOGQ3NTdiYmYxNTgl N0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MDc0MzM4Mzgx NjkyNjk0JnNkYXRhPVRkWHAxemxCd2Z0OGRUelU3UVdJeWZJWFY4TFhWbTZyNWhaQnZGUHpPMzgl M0QmcmVzZXJ2ZWQ9MD4NCk5laWwgTWFkZGVuDQpTZWN1cml0eSBEaXJlY3RvciAgfCAgRm9yZ2VS b2NrDQplIG5laWwubWFkZGVuQGZvcmdlcm9jay5jb208bWFpbHRvOm5laWwubWFkZGVuQGZvcmdl cm9jay5jb20+DQp3ZWIgaHR0cHM6Ly93d3cuZm9yZ2Vyb2NrLmNvbTxodHRwczovL25hbTA2LnNh ZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cCUzQSUyRiUyRnd3dy5mb3Jn ZXJvY2suY29tJTJGJmRhdGE9MDIlN0MwMSU3Q01pY2hhZWwuSm9uZXMlNDBtaWNyb3NvZnQuY29t JTdDZGNkYmUyNDAwN2M1NGE5ZmYzNGIwOGQ3NTdiYmYxNTglN0M3MmY5ODhiZjg2ZjE0MWFmOTFh YjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MDc0MzM4MzgxNzAyNzEzJnNkYXRhPVdyUEtoam52 ZzRKTEw1bHUlMkJDRU80UCUyRk1wVHQxazRwVXBldVElMkJ0N3dvUEUlM0QmcmVzZXJ2ZWQ9MD4N Cg0KDQoNCg0KDQpPbiAyMiBPY3QgMjAxOSwgYXQgMTY6MTQsIEppbSBTY2hhYWQgPGlldGZAYXVn dXN0Y2VsbGFycy5jb208bWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5jb20+PiB3cm90ZToNCg0K SSBmb3Jnb3QgdG8gcmVzcG9uZCB0byB0aGlzIG9uZQ0KDQpGcm9tOiBNaWtlIEpvbmVzIDxNaWNo YWVsLkpvbmVzQG1pY3Jvc29mdC5jb208bWFpbHRvOk1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNv bT4+DQpTZW50OiBNb25kYXksIE9jdG9iZXIgMjEsIDIwMTkgNTowMCBQTQ0KVG86IEppbSBTY2hh YWQgPGlldGZAYXVndXN0Y2VsbGFycy5jb208bWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5jb20+ PjsgJ2Nvc2UnIDxjb3NlQGlldGYub3JnPG1haWx0bzpjb3NlQGlldGYub3JnPj4NCkNjOiBkcmFm dC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtc0BpZXRmLm9yZzxtYWlsdG86ZHJhZnQtaWV0 Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXNAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSRTogW0NPU0Vd IPCflJQgV0dMQyBvZiBkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtcw0KDQpUaGFu a3MgZm9yIHlvdXIgcmV2aWV3LCBKaW0uICBSZXNwb25zZXMgYXJlIGlubGluZSwgcHJlZml4ZWQg Ynkg4oCcTWlrZT7igJ0uDQoNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAtLSBNaWtlDQoNCkZyb206IEppbSBTY2hhYWQgPGlldGZAYXVndXN0 Y2VsbGFycy5jb208bWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5jb20+Pg0KU2VudDogVHVlc2Rh eSwgU2VwdGVtYmVyIDE3LCAyMDE5IDY6NDYgUE0NClRvOiAnY29zZScgPGNvc2VAaWV0Zi5vcmc8 bWFpbHRvOmNvc2VAaWV0Zi5vcmc+Pg0KQ2M6IGRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdv cml0aG1zQGlldGYub3JnPG1haWx0bzpkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGht c0BpZXRmLm9yZz4NClN1YmplY3Q6IFJFOiBbQ09TRV0g8J+UlCBXR0xDIG9mIGRyYWZ0LWlldGYt Y29zZS13ZWJhdXRobi1hbGdvcml0aG1zDQoNCkkgc3RhcnQgdGhpcyByZXZpZXcgYnkgY29weWlu ZyBmb3J3YXJkIGFsbCBvZiBteSBjb21tZW50cyBvbiBkcmFmdC1qb25lcy1jb3NlLWFkZGl0aW9u YWwtYWxnb3JpdGhtcy0wMA0KDQoNCg0KICAxLiAgUGxlYXNlIGluY2x1ZGUgdGV4dCByZWxhdGVk IHRvIGRldGVybWluaXN0aWMgRUNEU0EgaW4gdGhpcyB0ZXh0Lg0KDQpNaWtlPiBXaGF0IGRvIHlv dSB3YW50IHRoaXMgdGV4dCB0byBzYXk/ICBJ4oCZbSByZWx1Y3RhbnQgdG8gdXNlIHRoZSB0ZXh0 IGF0IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM4MTUyI3NlY3Rpb24tOC4xPGh0dHBz Oi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUy RiUyRnRvb2xzLmlldGYub3JnJTJGaHRtbCUyRnJmYzgxNTIlMjNzZWN0aW9uLTguMSZkYXRhPTAy JTdDMDElN0NNaWNoYWVsLkpvbmVzJTQwbWljcm9zb2Z0LmNvbSU3Q2RjZGJlMjQwMDdjNTRhOWZm MzRiMDhkNzU3YmJmMTU4JTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdD MCU3QzYzNzA3NDMzODM4MTcwMjcxMyZzZGF0YT1lYW5WbmdYQXpyJTJGckRQWkUyckI1S2hubEl2 MHdyU0VONExYYiUyQkNXVThMMCUzRCZyZXNlcnZlZD0wPiwgd2hpY2ggc2F5cyB0aGF0IOKAnGlt cGxlbWVudGF0aW9ucyBTSE9MVUQgdXNlIGEgZGV0ZXJtaW5pc3RpYyBhbGdvcml0aG3igJ0sIHdo aWNoIGlzIG1pc2xlYWRpbmcsIGluIHRoYXQgaXQgaW1wbGllcyB0aGF0IHRoZXJlIGFyZSBtYW55 IHN1Y2ggYWxnb3JpdGhtcyB0aGF0IGNvdWxkIGJlIHVzZWQuICBJbiBmYWN0LCBleGFjdGx5IG9u ZSBpcyBiZWluZyBzcGVjaWZpZWQuDQoNCltKTFNdIEkgd2FzIHVuYXdhcmUgdGhhdCB0aGVyZSBp cyBvbmx5IG9uZSBwb3NzaWJsZSBkZXRlcm1pbmlzdGljIGFsZ29yaXRobSwgYW55IGtleWVkIGhh c2ggYWxnb3JpdGhtIGNhbiBiZSB1c2VkIHRvIGdlbmVyYXRlIHRoZSBkZXRlcm1pbmlzdGljIOKA mGvigJkgdG8gYmUgdXNlZCBmb3IgdGhlIHNpZ25hdHVyZSBhbGdvcml0aG0uICBUaGVyZSBpcyBu b3QgYSByZXF1aXJlbWVudCB0aGF0IHRoZSBzZWNyZXQgdmFsdWUgYmUgdGhlIHByaXZhdGUga2V5 IGZvciB0aGUgc2lnbmF0dXJlIGtleSBwYWlyLCBvbmUgY291bGQgZ2VuZXJhdGUgYSBwcml2YXRl IHZhbHVlIGp1c3QgZm9yIHRoYXQgcHVycG9zZS4gIEluZGVwZW5kZW50IG9mIHRoYXQsIHRoZSBk ZWZhdWx0IEVDRFNBIGFsZ29yaXRobSBzcGVjaWZpY2F0aW9ucyBhbGwgc2F5IHVzZSBhIHJhbmRv bSB2YWx1ZSBvZiDigJhr4oCZIHJhdGhlciB0aGFuIGEgZGV0ZXJtaW5pc3RpYyB2YWx1ZSBhbmQg dGhlIHVzZSBvZiB0aGUgZGV0ZXJtaW5pc3RpYyB2YWx1ZSBpcyBmYXIgbW9yZSBzZWN1cmUuDQpf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KQ09TRSBtYWls aW5nIGxpc3QNCkNPU0VAaWV0Zi5vcmc8bWFpbHRvOkNPU0VAaWV0Zi5vcmc+DQpodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2U8aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3Mu cHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGd3d3LmlldGYub3JnJTJG bWFpbG1hbiUyRmxpc3RpbmZvJTJGY29zZSZkYXRhPTAyJTdDMDElN0NNaWNoYWVsLkpvbmVzJTQw bWljcm9zb2Z0LmNvbSU3Q2RjZGJlMjQwMDdjNTRhOWZmMzRiMDhkNzU3YmJmMTU4JTdDNzJmOTg4 YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzA3NDMzODM4MTcwMjcxMyZz ZGF0YT1FZG1yWHJpdjVYOXJyNkIxTlQ5ZG9ucEJJbmQ4Q2djTU8wSm5tS3ltSUc0JTNEJnJlc2Vy dmVkPTA+DQoNCg== --_000_BYAPR00MB0565FFE73878304DC8EB94B9F56B0BYAPR00MB0565namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIg MTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlNlZ29lIFVJ IEVtb2ppIjsNCglwYW5vc2UtMToyIDExIDUgMiA0IDIgNCAyIDIgMzt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OkZpcmFNb25vLVJlZ3VsYXI7DQoJcGFub3NlLTE6MCAwIDAgMCAwIDAgMCAw IDAgMDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkhlbHZldGljYU5ldWU7DQoJcGFub3Nl LTE6MCAwIDAgMCAwIDAgMCAwIDAgMDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29O b3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdp bi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxp YnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxl LXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAu TXNvTGlzdFBhcmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3Jh cGgNCgl7bXNvLXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0K CW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2lu LWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNh bnMtc2VyaWY7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0K CXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJ bWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4t bGVmdDowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjt9DQpzcGFuLmFwcGxlLWNvbnZlcnRlZC1zcGFjZQ0KCXttc28tc3R5bGUtbmFtZTph cHBsZS1jb252ZXJ0ZWQtc3BhY2U7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjENCgl7bXNvLXN0eWxlLXR5 cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJ Y29sb3I6IzAwMjA2MDt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQt b25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjgu NWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRT ZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQovKiBMaXN0IERlZmluaXRpb25zICovDQpA bGlzdCBsMA0KCXttc28tbGlzdC1pZDo5NjE3NjcyNzI7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRz Oi0xMTAzMDgzOTk4O30NCkBsaXN0IGwwOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6LjVpbjsNCgltc28tbGV2ZWwtbnVt YmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVs Mg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFi LXN0b3A6MS4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6 YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEuNWluOw0KCW1zby1sZXZlbC1udW1i ZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw0 DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWIt c3RvcDoyLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDph bHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDYN Cgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1z dG9wOjMuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFs cGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDozLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsOA0K CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6NC4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxw aGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQuNWluOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0Kb2wNCgl7bWFyZ2luLWJvdHRv bTowaW47fQ0KdWwNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0 ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEw MjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNo YXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAv Pg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFu Zz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNl Y3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYw Ij5Eb27igJl0IGFwb2xvZ2l6ZS4mbmJzcDsgWW91IHByb3ZpZGVkIHByb3Bvc2VkIHdvcmRpbmcs IHdoaWNoIGlzIGV4dHJlbWVseSBoZWxwZnVsITxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6 IzAwMjA2MCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFRoYW5rcyBO ZWlsLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJjb2xvcjojMDAyMDYwIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgLS0gTWlrZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEu MHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+ RnJvbTo8L2I+IE5laWwgTWFkZGVuICZsdDtuZWlsLm1hZGRlbkBmb3JnZXJvY2suY29tJmd0OyA8 YnI+DQo8Yj5TZW50OjwvYj4gV2VkbmVzZGF5LCBPY3RvYmVyIDIzLCAyMDE5IDY6MjIgQU08YnI+ DQo8Yj5Ubzo8L2I+IEppbSBTY2hhYWQgJmx0O2lldGZAYXVndXN0Y2VsbGFycy5jb20mZ3Q7PGJy Pg0KPGI+Q2M6PC9iPiBNaWtlIEpvbmVzICZsdDtNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20m Z3Q7OyBjb3NlICZsdDtjb3NlQGlldGYub3JnJmd0OzsgZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhu LWFsZ29yaXRobXNAaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtDT1NFXSA8c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkgRW1vamkmcXVvdDssc2Fucy1zZXJp ZiI+DQomIzEyODI3Njs8L3NwYW4+IFdHTEMgb2YgZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFs Z29yaXRobXM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5B IGNvdXBsZSBvZiBhZGRpdGlvbmFsIGRhdGEgcG9pbnRzIHdpdGggcmVnYXJkIHRvIGRldGVybWlu aXN0aWMgRUNEU0EgKHNvcnJ5IE1pa2UhKTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7LSBXaGlsZSBkZXRlcm1pbmlzdGljIEVDRFNB IGlzIGdlbmVyYWxseSBtb3JlIHNlY3VyZSwgSSBnYXRoZXIgdGhhdCBpcyBub3QgKHlldD8pIGEg RklQUy1hcHByb3ZlZCBub25jZS1nZW5lcmF0aW9uIG1ldGhvZC4gU28gcGVvcGxlIHdpdGggRklQ UyByZXF1aXJlbWVudHMgd29uJ3QgYmUgYWJsZSB0byB1c2UgaXQsIHNpZ2guPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOy0gSW4gdGhl IHNwZWNpZmljIGNvbnRleHQgb2YgSW9UIHdoZXJlIGRldmljZXMgbWF5IGJlIHBoeXNpY2FsbHkg dnVsbmVyYWJsZSwgZGV0ZXJtaW5pc3RpYyBFQ0RTQSBhbmQgRWREU0EgaGF2ZSBib3RoIGJlZW4g c2hvd24gdG8gYmUgc3VzY2VwdGlibGUgdG8gZmF1bHQgYXR0YWNrcyAoc2VlIGUuZy4gWzFdIGFu ZCBbMl0pLiBJbiBwYXJ0aWN1bGFyLCBkZXRlcm1pbmlzdGljIEVDRFNBIG1heSBiZSAqbW9yZSoN CiB2dWxuZXJhYmxlIHRvIHN1Y2ggYXR0YWNrcyB0aGFuIHJhbmRvbWl6ZWQgRUNEU0EuIFRoZSBs aW5rZWQgcGFwZXJzIG9mZmVyIHNvbWUgcHJvcG9zZWQgY291bnRlcm1lYXN1cmVzLiBGb3IgQ1dU IHVzYWdlLCBJIGJlbGlldmUgaW5jbHVkaW5nIGEgZnJlc2ggcmFuZG9tICZxdW90O2N0aSZxdW90 OyBjbGFpbSBpbiBldmVyeSBzaWduZWQgdG9rZW4gd291bGQgcmVkdWNlIHRoZSBlZmZlY3RpdmVu ZXNzIG9mIHRoZXNlIGF0dGFja3MgZHJhbWF0aWNhbGx5IGFzIHRoZQ0KIHNpZ25hdHVyZSBnZW5l cmF0aW9uIHdpbGwgYmUgZWZmZWN0aXZlbHkgcmFuZG9taXplZCB3aGlsZSBhbHNvIGJlaW5nIG5v bmNlIHJldXNlIG1pc3VzZS1yZXNpc3RhbnQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPklmIEkgd2FzIGdvaW5nIHRvIHByb3Bvc2Ugd29yZGlu ZywgcGVyaGFwcyBzb21ldGhpbmcgYWxvbmcgdGhlc2UgbGluZXM6PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPj09PT08bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkltcGxlbWVudGF0aW9ucyBTSE9V TEQgdXNlIGEgZGV0ZXJtaW5pc3RpYyBhbGdvcml0aG0gdG8gZ2VuZXJhdGUgdGhlIEVDRFNBIG5v bmNlLCBrLCBzdWNoIGFzIFtSRkMgNjk3OV0uIEluIHNpdHVhdGlvbnMgd2hlcmUgZGV2aWNlcyBh cmUgdnVsbmVyYWJsZSB0byBwaHlzaWNhbCBhdHRhY2tzLCBkZXRlcm1pbmlzdGljIEVDRFNBIGhh cyBiZWVuIHNob3duIHRvIGJlIHN1c2NlcHRpYmxlIHRvIGZhdWx0IGluamVjdGlvbg0KIGF0dGFj a3MgW3JlZnNdLiBXaGVyZSB0aGlzIGlzIGEgcG9zc2liaWxpdHksIGltcGxlbWVudGF0aW9ucyBT SE9VTEQgaW1wbGVtZW50IGFwcHJvcHJpYXRlIGNvdW50ZXJtZWFzdXJlcy4gV2hlcmUgdGhlcmUg YXJlIHNwZWNpZmljIGNlcnRpZmljYXRpb24gcmVxdWlyZW1lbnRzIChzdWNoIGFzIEZJUFMgYXBw cm92YWwpLCBpbXBsZW1lbnRvcnMgc2hvdWxkIGNoZWNrIHdoZXRoZXIgZGV0ZXJtaW5pc3RpYyBF Q0RTQSBpcyBhbiBhcHByb3ZlZCBub25jZQ0KIGdlbmVyYXRpb24gbWV0aG9kLjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PT09PTxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5bMV06Jm5ic3A7PGEg aHJlZj0iaHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJs PWh0dHBzJTNBJTJGJTJGcmVzZWFyY2gua3VkZWxza2lzZWN1cml0eS5jb20lMkYyMDE3JTJGMTAl MkYwNCUyRmRlZmVhdGluZy1lZGRzYS13aXRoLWZhdWx0cyUyRiZhbXA7ZGF0YT0wMiU3QzAxJTdD TWljaGFlbC5Kb25lcyU0MG1pY3Jvc29mdC5jb20lN0NkY2RiZTI0MDA3YzU0YTlmZjM0YjA4ZDc1 N2JiZjE1OCU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2Mzcw NzQzMzgzODE2ODI2OTQmYW1wO3NkYXRhPTMycG83NzhtZWhacXVWenpVdldDWTZ6SUxTYVNhOUxz VmZFYmpJRXhTWkUlM0QmYW1wO3Jlc2VydmVkPTAiPmh0dHBzOi8vcmVzZWFyY2gua3VkZWxza2lz ZWN1cml0eS5jb20vMjAxNy8xMC8wNC9kZWZlYXRpbmctZWRkc2Etd2l0aC1mYXVsdHMvPC9hPiZu YnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ WzJdOiZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0 bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRmVwcmludC5pYWNyLm9yZyUyRjIwMTclMkYxMDE0 LnBkZiZhbXA7ZGF0YT0wMiU3QzAxJTdDTWljaGFlbC5Kb25lcyU0MG1pY3Jvc29mdC5jb20lN0Nk Y2RiZTI0MDA3YzU0YTlmZjM0YjA4ZDc1N2JiZjE1OCU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3 Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzcwNzQzMzgzODE2OTI2OTQmYW1wO3NkYXRhPXprbzdmOEt1 cjBhUkE0d25OR3NNSm94aFU0WG9RZzJqbTBwVXdvR1VIU0ElM0QmYW1wO3Jlc2VydmVkPTAiPmh0 dHBzOi8vZXByaW50LmlhY3Iub3JnLzIwMTcvMTAxNC5wZGY8L2E+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7RmlyYU1vbm8tUmVndWxhciZxdW90OyxzZXJpZjtjb2xv cjpibGFjayI+LS08L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtjb2xvcjpibGFj ayI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHRhYmxlIGNsYXNzPSJN c29Ob3JtYWxUYWJsZSIgYm9yZGVyPSIwIiBjZWxsc3BhY2luZz0iMCIgY2VsbHBhZGRpbmc9IjAi Pg0KPHRib2R5Pg0KPHRyPg0KPHRkIHZhbGlnbj0idG9wIiBzdHlsZT0icGFkZGluZzowaW4gMGlu IDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGEgaHJlZj0iaHR0cHM6Ly9uYW0wNi5z YWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHAlM0ElMkYlMkZ3d3cuZm9y Z2Vyb2NrLmNvbSZhbXA7ZGF0YT0wMiU3QzAxJTdDTWljaGFlbC5Kb25lcyU0MG1pY3Jvc29mdC5j b20lN0NkY2RiZTI0MDA3YzU0YTlmZjM0YjA4ZDc1N2JiZjE1OCU3QzcyZjk4OGJmODZmMTQxYWY5 MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzcwNzQzMzgzODE2OTI2OTQmYW1wO3NkYXRhPVRk WHAxemxCd2Z0OGRUelU3UVdJeWZJWFY4TFhWbTZyNWhaQnZGUHpPMzglM0QmYW1wO3Jlc2VydmVk PTAiIHRhcmdldD0iX2JsYW5rIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7VGltZXMg TmV3IFJvbWFuJnF1b3Q7LHNlcmlmO3RleHQtZGVjb3JhdGlvbjpub25lIj48aW1nIGJvcmRlcj0i MCIgd2lkdGg9IjIwMCIgaGVpZ2h0PSI3NSIgc3R5bGU9IndpZHRoOjIuMDgzM2luO2hlaWdodDou NzgxMmluIiBpZD0iX3gwMDAwX2kxMDI1IiBzcmM9Imh0dHBzOi8vZHJpdmUuZ29vZ2xlLmNvbS9h L2Zvcmdlcm9jay5jb20vdWM/aWQ9MVpUa1NLNDU4TUt1M041aS1sY3pJYWFJVGFUVjR6bmhWJmFt cDtleHBvcnQ9ZG93bmxvYWQiPjwvc3Bhbj48L2E+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZx dW90O1RpbWVzIE5ldyBSb21hbiZxdW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0K PC90ZD4NCjx0ZCB2YWxpZ249InRvcCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGU7cGFkZGluZzow aW4gMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImxpbmUtaGVpZ2h0 OjEzLjZwdCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo4LjVwdDtmb250LWZhbWlseTomcXVv dDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMyRjM0MzgiPk5laWwgTWFkZGVuPC9zcGFu PjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjguNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFs JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzJGMzQzOCI+PGJyPg0KU2VjdXJpdHkgRGlyZWN0b3Ig Jm5ic3A7fCZuYnNwOyBGb3JnZVJvY2s8YnI+DQo8L3NwYW4+PHN0cm9uZz48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjguNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7 Y29sb3I6IzdGQjdBQSI+ZTwvc3Bhbj48L3N0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1zaXplOjgu NXB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzJGMzQz OCI+Jm5ic3A7PGEgaHJlZj0ibWFpbHRvOm5laWwubWFkZGVuQGZvcmdlcm9jay5jb20iPm5laWwu bWFkZGVuQGZvcmdlcm9jay5jb208L2E+PGJyPg0KPC9zcGFuPjxzdHJvbmc+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTo4LjVwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiM3RkI3QUEiPndlYjwvc3Bhbj48L3N0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjguNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzJG MzQzOCI+Jm5ic3A7aHR0cHM6Ly88YSBocmVmPSJodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90 ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cCUzQSUyRiUyRnd3dy5mb3JnZXJvY2suY29tJTJG JmFtcDtkYXRhPTAyJTdDMDElN0NNaWNoYWVsLkpvbmVzJTQwbWljcm9zb2Z0LmNvbSU3Q2RjZGJl MjQwMDdjNTRhOWZmMzRiMDhkNzU3YmJmMTU4JTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAx MWRiNDclN0MxJTdDMCU3QzYzNzA3NDMzODM4MTcwMjcxMyZhbXA7c2RhdGE9V3JQS2hqbnZnNEpM TDVsdSUyQkNFTzRQJTJGTXBUdDFrNHBVcGV1USUyQnQ3d29QRSUzRCZhbXA7cmVzZXJ2ZWQ9MCIg dGFyZ2V0PSJfYmxhbmsiPjxzcGFuIHN0eWxlPSJjb2xvcjojMkYzNDM4O3RleHQtZGVjb3JhdGlv bjpub25lIj53d3cuZm9yZ2Vyb2NrLmNvbTwvc3Bhbj48L2E+PG86cD48L286cD48L3NwYW4+PC9w Pg0KPC90ZD4NCjwvdHI+DQo8L3Rib2R5Pg0KPC90YWJsZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2NvbG9yOmJsYWNrIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0 Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdp bi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+T24gMjIgT2N0IDIwMTksIGF0IDE2OjE0LCBKaW0gU2NoYWFkICZsdDs8YSBocmVmPSJt YWlsdG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbSI+aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbTwvYT4m Z3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ SSBmb3Jnb3QgdG8gcmVzcG9uZCB0byB0aGlzIG9uZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEg MS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PGI+RnJvbTo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPk1pa2UgSm9uZXMgJmx0OzxhIGhyZWY9Im1haWx0bzpNaWNoYWVsLkpvbmVzQG1p Y3Jvc29mdC5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPk1pY2hhZWwuSm9uZXNAbWlj cm9zb2Z0LmNvbTwvc3Bhbj48L2E+Jmd0OzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3Bh Y2UiPiZuYnNwOzwvc3Bhbj48YnI+DQo8Yj5TZW50OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+TW9uZGF5LCBPY3RvYmVyIDIxLCAyMDE5IDU6MDAg UE08YnI+DQo8Yj5Ubzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPkppbSBTY2hhYWQgJmx0OzxhIGhyZWY9Im1haWx0bzppZXRmQGF1Z3VzdGNlbGxh cnMuY29tIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5pZXRmQGF1Z3VzdGNlbGxhcnMuY29t PC9zcGFuPjwvYT4mZ3Q7OyAnY29zZScgJmx0OzxhIGhyZWY9Im1haWx0bzpjb3NlQGlldGYub3Jn Ij48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5jb3NlQGlldGYub3JnPC9zcGFuPjwvYT4mZ3Q7 PGJyPg0KPGI+Q2M6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNw Ozwvc3Bhbj48YSBocmVmPSJtYWlsdG86ZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRo bXNAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmRyYWZ0LWlldGYtY29zZS13 ZWJhdXRobi1hbGdvcml0aG1zQGlldGYub3JnPC9zcGFuPjwvYT48YnI+DQo8Yj5TdWJqZWN0Ojwv Yj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+UkU6IFtD T1NFXTxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48c3Bh biBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkgRW1vamkmcXVvdDssc2Fucy1zZXJp ZiI+JiMxMjgyNzY7PC9zcGFuPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZu YnNwOzwvc3Bhbj5XR0xDIG9mIGRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+VGhhbmtzIGZvciB5b3VyIHJl dmlldywgSmltLiZuYnNwOyBSZXNwb25zZXMgYXJlIGlubGluZSwgcHJlZml4ZWQgYnkg4oCcPC9z cGFuPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUwIj5NaWtlJmd0O+KAnS48L3NwYW4+PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iY29sb3I6IzAwMjA2MCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAtLSBNaWtlPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImNvbG9yOiMwMDIwNjAiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAx LjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48Yj5Gcm9tOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJz cDs8L3NwYW4+SmltIFNjaGFhZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlldGZAYXVndXN0Y2VsbGFy cy5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmlldGZAYXVndXN0Y2VsbGFycy5jb208 L3NwYW4+PC9hPiZndDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8 L3NwYW4+PGJyPg0KPGI+U2VudDo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFj ZSI+Jm5ic3A7PC9zcGFuPlR1ZXNkYXksIFNlcHRlbWJlciAxNywgMjAxOSA2OjQ2IFBNPGJyPg0K PGI+VG86PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bh bj4nY29zZScgJmx0OzxhIGhyZWY9Im1haWx0bzpjb3NlQGlldGYub3JnIj48c3BhbiBzdHlsZT0i Y29sb3I6cHVycGxlIj5jb3NlQGlldGYub3JnPC9zcGFuPjwvYT4mZ3Q7PGJyPg0KPGI+Q2M6PC9i PjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVm PSJtYWlsdG86ZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXNAaWV0Zi5vcmciPjxz cGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0 aG1zQGlldGYub3JnPC9zcGFuPjwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj48c3BhbiBjbGFzcz0i YXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+UkU6IFtDT1NFXTxzcGFuIGNsYXNz PSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1m YW1pbHk6JnF1b3Q7U2Vnb2UgVUkgRW1vamkmcXVvdDssc2Fucy1zZXJpZiI+JiMxMjgyNzY7PC9z cGFuPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5XR0xD IG9mIGRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIHN0 YXJ0IHRoaXMgcmV2aWV3IGJ5IGNvcHlpbmcgZm9yd2FyZCBhbGwgb2YgbXkgY29tbWVudHMgb24g ZHJhZnQtam9uZXMtY29zZS1hZGRpdGlvbmFsLWFsZ29yaXRobXMtMDA8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxvbCBzdHlsZT0ibWFyZ2luLXRvcDowaW4iIHN0YXJ0PSIxIiB0eXBlPSJB Ij4NCjxsaSBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdpbi10b3A6MGluO21h cmdpbi1ib3R0b206MGluO21hcmdpbi1ib3R0b206LjAwMDFwdDttc28tbGlzdDpsMCBsZXZlbDEg bGZvMSI+DQpQbGVhc2UgaW5jbHVkZSB0ZXh0IHJlbGF0ZWQgdG8gZGV0ZXJtaW5pc3RpYyBFQ0RT QSBpbiB0aGlzIHRleHQuPG86cD48L286cD48L2xpPjwvb2w+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZndDsgV2hhdCBkbyB5 b3Ugd2FudCB0aGlzIHRleHQgdG8gc2F5PyZuYnNwOyBJ4oCZbSByZWx1Y3RhbnQgdG8gdXNlIHRo ZSB0ZXh0IGF0PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu Pjwvc3Bhbj48YSBocmVmPSJodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxv b2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZ0b29scy5pZXRmLm9yZyUyRmh0bWwlMkZyZmM4MTUy JTIzc2VjdGlvbi04LjEmYW1wO2RhdGE9MDIlN0MwMSU3Q01pY2hhZWwuSm9uZXMlNDBtaWNyb3Nv ZnQuY29tJTdDZGNkYmUyNDAwN2M1NGE5ZmYzNGIwOGQ3NTdiYmYxNTglN0M3MmY5ODhiZjg2ZjE0 MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MDc0MzM4MzgxNzAyNzEzJmFtcDtzZGF0 YT1lYW5WbmdYQXpyJTJGckRQWkUyckI1S2hubEl2MHdyU0VONExYYiUyQkNXVThMMCUzRCZhbXA7 cmVzZXJ2ZWQ9MCI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+aHR0cHM6Ly90b29scy5pZXRm Lm9yZy9odG1sL3JmYzgxNTIjc2VjdGlvbi04LjE8L3NwYW4+PC9hPjxzcGFuIHN0eWxlPSJjb2xv cjojMDBCMDUwIj4sDQogd2hpY2ggc2F5cyB0aGF0IOKAnGltcGxlbWVudGF0aW9ucyBTSE9MVUQg dXNlIGEgZGV0ZXJtaW5pc3RpYyBhbGdvcml0aG3igJ0sIHdoaWNoIGlzIG1pc2xlYWRpbmcsIGlu IHRoYXQgaXQgaW1wbGllcyB0aGF0IHRoZXJlIGFyZSBtYW55IHN1Y2ggYWxnb3JpdGhtcyB0aGF0 IGNvdWxkIGJlIHVzZWQuJm5ic3A7IEluIGZhY3QsIGV4YWN0bHkgb25lIGlzIGJlaW5nIHNwZWNp ZmllZC48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPltKTFNdIEkgd2FzIHVuYXdhcmUgdGhhdCB0 aGVyZSBpcyBvbmx5IG9uZSBwb3NzaWJsZSBkZXRlcm1pbmlzdGljIGFsZ29yaXRobSwgYW55IGtl eWVkIGhhc2ggYWxnb3JpdGhtIGNhbiBiZSB1c2VkIHRvIGdlbmVyYXRlIHRoZSBkZXRlcm1pbmlz dGljIOKAmGvigJkgdG8gYmUgdXNlZCBmb3IgdGhlIHNpZ25hdHVyZSBhbGdvcml0aG0uJm5ic3A7 IFRoZXJlIGlzIG5vdCBhIHJlcXVpcmVtZW50IHRoYXQgdGhlIHNlY3JldCB2YWx1ZQ0KIGJlIHRo ZSBwcml2YXRlIGtleSBmb3IgdGhlIHNpZ25hdHVyZSBrZXkgcGFpciwgb25lIGNvdWxkIGdlbmVy YXRlIGEgcHJpdmF0ZSB2YWx1ZSBqdXN0IGZvciB0aGF0IHB1cnBvc2UuJm5ic3A7IEluZGVwZW5k ZW50IG9mIHRoYXQsIHRoZSBkZWZhdWx0IEVDRFNBIGFsZ29yaXRobSBzcGVjaWZpY2F0aW9ucyBh bGwgc2F5IHVzZSBhIHJhbmRvbSB2YWx1ZSBvZiDigJhr4oCZIHJhdGhlciB0aGFuIGEgZGV0ZXJt aW5pc3RpYyB2YWx1ZSBhbmQgdGhlIHVzZSBvZiB0aGUNCiBkZXRlcm1pbmlzdGljIHZhbHVlIGlz IGZhciBtb3JlIHNlY3VyZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41 cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhTmV1ZSZxdW90OyxzZXJpZiI+X19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQpDT1NFIG1haWxpbmcg bGlzdDxicj4NCjwvc3Bhbj48YSBocmVmPSJtYWlsdG86Q09TRUBpZXRmLm9yZyI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhTmV1ZSZxdW90 OyxzZXJpZjtjb2xvcjpwdXJwbGUiPkNPU0VAaWV0Zi5vcmc8L3NwYW4+PC9hPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYU5ldWUmcXVvdDss c2VyaWYiPjxicj4NCjwvc3Bhbj48YSBocmVmPSJodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90 ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZ3d3cuaWV0Zi5vcmclMkZtYWls bWFuJTJGbGlzdGluZm8lMkZjb3NlJmFtcDtkYXRhPTAyJTdDMDElN0NNaWNoYWVsLkpvbmVzJTQw bWljcm9zb2Z0LmNvbSU3Q2RjZGJlMjQwMDdjNTRhOWZmMzRiMDhkNzU3YmJmMTU4JTdDNzJmOTg4 YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzA3NDMzODM4MTcwMjcxMyZh bXA7c2RhdGE9RWRtclhyaXY1WDlycjZCMU5UOWRvbnBCSW5kOENnY01PMEpubUt5bUlHNCUzRCZh bXA7cmVzZXJ2ZWQ9MCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7SGVsdmV0aWNhTmV1ZSZxdW90OyxzZXJpZjtjb2xvcjpwdXJwbGUiPmh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY29zZTwvc3Bhbj48L2E+PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_BYAPR00MB0565FFE73878304DC8EB94B9F56B0BYAPR00MB0565namp_-- From nobody Thu Oct 24 14:34:43 2019 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 1011A120099; Thu, 24 Oct 2019 14:34:36 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.108.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: cose@ietf.org Message-ID: <157195287600.11547.10420358376781752118@ietfa.amsl.com> Date: Thu, 24 Oct 2019 14:34:36 -0700 Archived-At: Subject: [COSE] I-D Action: draft-ietf-cose-webauthn-algorithms-02.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 21:34:36 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption WG of the IETF. Title : COSE and JOSE Registrations for WebAuthn Algorithms Author : Michael B. Jones Filename : draft-ietf-cose-webauthn-algorithms-02.txt Pages : 13 Date : 2019-10-24 Abstract: The W3C Web Authentication (WebAuthn) specification and the FIDO Alliance FIDO2 Client to Authenticator Protocol (CTAP) specification use CBOR Object Signing and Encryption (COSE) algorithm identifiers. This specification registers the following algorithms in the IANA "COSE Algorithms" registry, which are used by WebAuthn and CTAP implementations: RSASSA-PKCS1-v1_5 using SHA-256, SHA-384, SHA-512, and SHA-1, and ECDSA using the secp256k1 curve and SHA-256. It registers the secp256k1 elliptic curve in the IANA "COSE Elliptic Curves" registry. Also, for use with JSON Object Signing and Encryption (JOSE), it registers the algorithm ECDSA using the secp256k1 curve and SHA-256 in the IANA "JSON Web Signature and Encryption Algorithms" registry and the secp256k1 elliptic curve in the IANA "JSON Web Key Elliptic Curve" registry. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-webauthn-algorithms/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-cose-webauthn-algorithms-02 https://datatracker.ietf.org/doc/html/draft-ietf-cose-webauthn-algorithms-02 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-webauthn-algorithms-02 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Oct 24 15:02:11 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 765681200DE for ; Thu, 24 Oct 2019 15:02:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cQkRKgXSDiDF for ; Thu, 24 Oct 2019 15:02:06 -0700 (PDT) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-eopbgr650096.outbound.protection.outlook.com [40.107.65.96]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B8741200B9 for ; Thu, 24 Oct 2019 15:02:06 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=iaYEw+OWjjYO6+s9/s16fD1bGstIib/pXGYComJWjDrQDipTaS22gvInF4otooEnUWswo4qHEhWUKT31dJS6Uf2qqCJtnlc5JLEZQzLMGcZk8k0EyosCKT4IYVJqdrWH5jZ2IgPwzl0dR7lhBCKMioP/DRfOEUmaisUU3V9k3fgUVXownMmAhJEOstsqg263I/HczDEsqMh5y9z0W6j2buca6BLYDly8xisIetWCHrOpHgyYaLstI+IDIBrzfx7AMCrA/y0Ulk45CQ3jlyjKlLEqsmpSmKwCymSZznBY9zdJ5X08ev+8IWYWoP0ioCVZszK2TIgKnisBDhJ9hD9jTg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5eG9a82N/h4QR/ji+zLQ950hEnTv4DxJghkGVwMCSiM=; b=N1Li7W+nzXAC+iJfPNjEHqVUnWAJ9WHylxsWWM1O28pEDPan7orLkDwA7e/nOOIzS1umh9zePd8YO72vFrNRCGEpoy+l7bYy6XzFaXiKbtrEck7WMIBK8pa8ThJXquv2obHSIADeKlOkXmu4FgQM+LoQhvl9fiw1/CM8zPV9624XyRzmBSvjeoFjKp5GkJSgb0xVmL4eL321usuhPTIm7gwtXz+GwF8QwQW+y1SJVulGqa/zui1223puJaaQVtpZsMlaIInPTknRY2krX3wxlZO/o24iN568IRESfu4ZDl2w9QT2RfY20kARNcw1gdKjhitMQpA9wys+BHDDEiwOkQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=5eG9a82N/h4QR/ji+zLQ950hEnTv4DxJghkGVwMCSiM=; b=IpOBc71YWBWQlln35nKu6z9CxCUgRPTsUg5NBEz8cZlg0dvmGApH4jUSaQFUaHySI4fBUEPnZVFGoLhows4SFL01Us5OvEN4uhLNhPq0dQO/m1dOpvH6aT2dwrVJdLdrCPHvz5Gz4FPIGH/mxtKv0ORVYp9iDl+y2Cf7rMkm+ck= Received: from BYAPR00MB0567.namprd00.prod.outlook.com (20.179.56.25) by BYAPR00MB0645.namprd00.prod.outlook.com (20.178.196.92) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2403.0; Thu, 24 Oct 2019 22:01:58 +0000 Received: from BYAPR00MB0567.namprd00.prod.outlook.com ([fe80::31af:5686:e43b:ed3a]) by BYAPR00MB0567.namprd00.prod.outlook.com ([fe80::31af:5686:e43b:ed3a%9]) with mapi id 15.20.2430.000; Thu, 24 Oct 2019 22:01:57 +0000 From: Mike Jones To: "cose@ietf.org" Thread-Topic: COSE and JOSE Registrations for WebAuthn Algorithms spec addressing WGLC comments Thread-Index: AdWKtJwyiLIhn390Ry+aKUKu2UV13Q== Date: Thu, 24 Oct 2019 22:01:57 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=c7d5183b-1456-40d9-8ecd-00001beb5f2d; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-10-24T21:47:03Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [2001:4898:80e8:b:f986:54b4:a346:c1ea] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 868cbebd-758c-4b5f-5fdc-08d758cdca30 x-ms-traffictypediagnostic: BYAPR00MB0645: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6108; x-forefront-prvs: 0200DDA8BE x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(396003)(346002)(366004)(136003)(39860400002)(376002)(209900001)(199004)(189003)(8936002)(71190400001)(2351001)(316002)(33656002)(5640700003)(236005)(54896002)(9686003)(790700001)(6306002)(71200400001)(2501003)(478600001)(52536014)(606006)(25786009)(55016002)(10090500001)(6116002)(10290500003)(6506007)(22452003)(21615005)(8990500004)(7696005)(86362001)(7736002)(5660300002)(6436002)(966005)(186003)(81156014)(46003)(256004)(102836004)(1730700003)(14454004)(14444005)(81166006)(486006)(4744005)(99286004)(2906002)(66476007)(66946007)(76116006)(476003)(8676002)(74316002)(64756008)(6916009)(66446008)(66556008)(6606295002); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR00MB0645; H:BYAPR00MB0567.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 5rqJzkOC+KFpuU4n4uuLzdb3GFpSgve20cj1OX10nvqEC3BFP3WDNXiR8Xk6RM0xXEgyD9hSHQDADWZAV3yRpmTY6k61LcLq7aHwYpx7h7H0b2Eo3WW1vPPE4snlVpxbEJQ5uNi95aFf/IuPRYMWfiStXesNZVfWxgWFHjgZwO/XR+LOJx3GRE8HIwMSyiREJmVgZNH9iUJFS1IUoFhOnuxKow+09dfumwffYoYhLx3GuwkYg7Tcy/kCZznIk35cKl+8lKQfYJVIs0zwzGY/wvtNc8K8R/gXgYWKQxvT7pWsVVpcxC9xKP+5C1j1WcsCHdEb2H6/PT8e3fEZv6N1jOoF0Dn0yZf3f3YFSAv9evxwi4x0kzmbMFAwIBEqCJ6er2quVE3ED2IWAHn+8w2UOJan2AqJ/Z1Ww0RZHkdqx74= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BYAPR00MB05671091BA247E033DE3B86AF56A0BYAPR00MB0567namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 868cbebd-758c-4b5f-5fdc-08d758cdca30 X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Oct 2019 22:01:57.9232 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: GQQXEKrPLJX75LSwjd2XoRwG1f7h7849Ehk+I7pkTfQK8U7Z7p00Bujc1Q9d9/UEmKoUPtBUTmYrZxsjRcBTGw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR00MB0645 Archived-At: Subject: [COSE] COSE and JOSE Registrations for WebAuthn Algorithms spec addressing WGLC comments X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 22:02:10 -0000 --_000_BYAPR00MB05671091BA247E033DE3B86AF56A0BYAPR00MB0567namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable The "COSE and JOSE Registrations for WebAuthn Algorithms" specification has= been updated to address working group last call (WGLC) feedback received. = Thanks to J.C. Jones, Kevin Jacobs, Jim Schaad, Neil Madden, and Benjamin = Kaduk for their useful reviews. The specification is available at: * https://tools.ietf.org/html/draft-ietf-cose-webauthn-algorithms-02 An HTML-formatted version is also available at: * http://self-issued.info/docs/draft-ietf-cose-webauthn-algorithms-02.h= tml -- Mike P.S. This notice was also posted at http://self-issued.info/?p=3D2022 and = as @selfissued. --_000_BYAPR00MB05671091BA247E033DE3B86AF56A0BYAPR00MB0567namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

The “COSE and JOSE Registrations for WebAuthn = Algorithms” specification has been updated to address working group l= ast call (WGLC) feedback received.  Thanks to J.C. Jones, Kevin Jacobs= , Jim Schaad, Neil Madden, and Benjamin Kaduk for their useful reviews.

 

The specification is available at:

 

An HTML-formatted version is also available at:=

 

        &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;        -- Mike

 

P.S.  This notice was also posted at http://self-issued.info/?p=3D2022 and as @selfissued.

--_000_BYAPR00MB05671091BA247E033DE3B86AF56A0BYAPR00MB0567namp_-- From nobody Thu Oct 24 16:11:25 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CCD1A120026 for ; Thu, 24 Oct 2019 16:11:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.89 X-Spam-Level: X-Spam-Status: No, score=-1.89 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1T9EMkdIqPel for ; Thu, 24 Oct 2019 16:11:20 -0700 (PDT) Received: from NAM06-DM3-obe.outbound.protection.outlook.com (mail-eopbgr640090.outbound.protection.outlook.com [40.107.64.90]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 97D29120019 for ; Thu, 24 Oct 2019 16:11:20 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=HFazFp90fSJtyWR1BzbxAq+PLAuSYuSdmw8LECm1y3J6Sww2p75HLLbNpiHx6tLhBPKW7YxFX1VUQbiavlduTOUBSu35NkhDdD4O9DeLtE9Hq10q3YZkUfX+PgXLKv7EPIM4gacFbj0j48LbwYvzZdPUs4qbvMHcKpmHet368aQc3EK6/KdMAtzleLQTihgsEyY+TdQyjysP/d4H5K5aIHGxHPVwg+th3hh4/vYZTvn0ED3yzHX3wk8H6pwG++vn07L4z40z4G5eTq+G3yF5Uk8uK7YGv5c7uOAB5wTqQZ2uug7V/qzMvGPe9UHS/mKSchpDEOhtpDLmLZ9lX8krNg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0wEYKOrZPybhRbCURkZzt+3/ab5SAQzsZL0a8WaapJw=; b=n0WMyHpDf7Jtc9u0TVyGMSQGCNk3FxHO6gGZtZbxC54A93YDqkEK2OMFPPbp+10hc0xD8SVuaghTV+/gKOYhQf6U9fJ0Mud07GmGB2KFjJm5qoga22Eovz6eX4NZ9c50G0gy6QaH/OqE7Aw65xH9QqIpHuvP0WTkHGAsDk5Oq+OTOxUsxB7yX41Cct0mgR0BavoCNds3U/kOe0rxBa63/VN+wBA4W2lUPwaAdybJlmdVII30Ug2pF24oCdrH1mWpuuXfNFIs6TjUsPO3i8P3gtZDfz0WwX905u0ZMe7IMLErfNwwbrthyyBuJ+qtsTZ6rbsejqvZwJ5TeucBa//wVQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0wEYKOrZPybhRbCURkZzt+3/ab5SAQzsZL0a8WaapJw=; b=VxdIuEB5NKe217572bAK6whz9iXw8x9qi3rcc0sh3qm34qGdX8zzisCsG6lTlY2Flc91yd2/Yw/plUzRM9Ois9j2qcHFV0sO4AIa4CIRwOG+Tniv5Hh5Ut6En7JHO8AkM4UFHyFN0Au1cSUJ16u1fJNs0OSn2KPwLlVkseKB6Vc= Received: from BYAPR00MB0567.namprd00.prod.outlook.com (20.179.56.25) by BYAPR00MB0600.namprd00.prod.outlook.com (20.179.56.142) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2425.0; Thu, 24 Oct 2019 23:11:15 +0000 Received: from BYAPR00MB0567.namprd00.prod.outlook.com ([fe80::31af:5686:e43b:ed3a]) by BYAPR00MB0567.namprd00.prod.outlook.com ([fe80::31af:5686:e43b:ed3a%9]) with mapi id 15.20.2430.000; Thu, 24 Oct 2019 23:11:15 +0000 From: Mike Jones To: "J.C. Jones" , "cose@ietf.org" CC: Kevin Jacobs Thread-Topic: [COSE] Feedback on draft-ietf-cose-webauthn-algorithms-01 Thread-Index: AQHVU66TKD2WR3BhR0ifVYYdgx1ae6dl/77ggATY4bA= Date: Thu, 24 Oct 2019 23:11:14 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=d7727fdc-2fd5-414f-9d6b-00001fb4df13; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-10-21T21:07:32Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [2001:4898:80e8:2:d470:4f7:8cbd:3a65] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 501346ea-d7ff-4e5e-c8cf-08d758d7780a x-ms-traffictypediagnostic: BYAPR00MB0600: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0200DDA8BE x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(366004)(396003)(346002)(376002)(39860400002)(136003)(189003)(199004)(51914003)(13464003)(316002)(7736002)(229853002)(10090500001)(8990500004)(110136005)(790700001)(74316002)(5660300002)(6116002)(7696005)(6506007)(76176011)(81166006)(81156014)(10290500003)(6436002)(14454004)(53546011)(4326008)(102836004)(966005)(2501003)(186003)(22452003)(478600001)(14444005)(256004)(11346002)(52536014)(446003)(476003)(2906002)(99286004)(486006)(8676002)(33656002)(6246003)(71190400001)(71200400001)(76116006)(25786009)(66946007)(66446008)(46003)(66476007)(64756008)(66556008)(236005)(86362001)(6306002)(54896002)(606006)(8936002)(9686003)(55016002); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR00MB0600; H:BYAPR00MB0567.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: riJQTQIKAuKNbXrFM44rxikohoO/yzw8ajJ6/ubLbLWiMsWE7KTuBTtfdL4+RvfcT5I/qH9Ub9aP6hJTQhr0oEJYXUQKTh0Q7B2V5bAfBYv8R/5BlETuc6noCQjrdwOvQ9xLqSeMZStLDS+zeszHgyWg3TcU2sIXoMf8AK0aF0gJiPjOhTzXEci37nQiazgR/trauBh6DuBg+NzCVdwLpSyza0bwpDeYzvtk8i2E7JPim4B0IrKwp2NvakhCgRp7/aRsmobTByEvvP86CRZCrYmNVdWu9BrnSmEPNRb0YvCZRQaCYT68lrEUBd6E2Ma8Ye3HWY0qWeRtQo7SU2QEiUvPONxNXnOFeL91VLNkqwgp/RcLAzJ1fdzBwmhSk10FgCMkTrnibt8Kh9KAXIqPbnQqzHeoevcGv0aJiOD0UFxIC+WLwymt1dMkTUSgQFo4 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BYAPR00MB0567955569B14A2032EC229AF56A0BYAPR00MB0567namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 501346ea-d7ff-4e5e-c8cf-08d758d7780a X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Oct 2019 23:11:15.0170 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: zZpOG58P4sNzS98+BS7PowogQOnHeC94pxogPuJpiQ84EaO1W3p+0UpWsMYM5JuxCjKibrUy49JBkNnv/99pqw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR00MB0600 Archived-At: Subject: Re: [COSE] Feedback on draft-ietf-cose-webauthn-algorithms-01 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 23:11:24 -0000 --_000_BYAPR00MB0567955569B14A2032EC229AF56A0BYAPR00MB0567namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable These issue resolutions have been incorporated in https://tools.ietf.org/ht= ml/draft-ietf-cose-webauthn-algorithms-02. Thanks again for your useful re= view! -- Mike From: Mike Jones Sent: Monday, October 21, 2019 2:11 PM To: J.C. Jones ; cose@ietf.org Cc: Kevin Jacobs Subject: RE: [COSE] Feedback on draft-ietf-cose-webauthn-algorithms-01 Thanks for the review, J.C. and Kevin. Replies are inline below, prefixed = by "Mike>". Best wishes, -- Mike -----Original Message----- From: COSE > On Behalf = Of J.C. Jones Sent: Thursday, August 15, 2019 2:15 PM To: cose@ietf.org Cc: Kevin Jacobs > Subject: [COSE] Feedback on draft-ietf-cose-webauthn-algorithms-01 All, We reviewed draft-ietf-cose-webauthn-algorithms-01 and only have pair of co= mments about the security considerations. Regarding section 5.3: While section 5.2 refers to RFC7518's guidance, currently 5.3 does not. Per= haps note in 5.3 something akin to "if you have an existing implementation,= the exponent restrictions from RFC7518 also apply." Mike> Good suggestion. I'd be glad to do that. Regarding section 5.4: The first sentence uses the FIPS186-3 form P-256 when everything else in th= is document would imply we'd refer to it as secp256r1, though rfc8152bis us= es the P-256 form. Perhaps all readers of this document would be able to av= oid confusion, but since it's a section _about_ confusion, it seems worth p= ointing out. Perhaps a parenthetical could be added? Mike> I propose to add a reference to "[RFC 7518]" after "P-256" to make it= clear where the definition that we are using originates. Kevin Jacobs and J.C. Jones _______________________________________________ COSE mailing list COSE@ietf.org https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.iet= f.org%2Fmailman%2Flistinfo%2Fcose&data=3D02%7C01%7CMichael.Jones%40micr= osoft.com%7Ca35cc1dc6c6549ca013108d721c5b465%7C72f988bf86f141af91ab2d7cd011= db47%7C1%7C0%7C637015005331095019&sdata=3DMtpdnZjpVDYvFS2Tr0mfFalyhw%2F= iyYQk9H7uKwJGRk8%3D&reserved=3D0 --_000_BYAPR00MB0567955569B14A2032EC229AF56A0BYAPR00MB0567namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

These issue resolution= s have been incorporated in https://tools.ietf.org/html/draft-ietf-cose-webauthn-algorithms-02.=   Thanks again for your useful review!

 

   &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p;          -- Mike=

 

From: Mike Jones
Sent: Monday, October 21, 2019 2:11 PM
To: J.C. Jones <jc@mozilla.com>; cose@ietf.org
Cc: Kevin Jacobs <kjacobs@mozilla.com>
Subject: RE: [COSE] Feedback on draft-ietf-cose-webauthn-algorithms-= 01

 

Thanks for the review, J.C. and Kevin.  Repl= ies are inline below, prefixed by “Mike= >”.

 

        &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p;         Best wishes,<= /p>

        &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p;         -- Mike

 

-----Original Message-----
From: COSE <cose-bounces@ietf.o= rg> On Behalf Of J.C. Jones
Sent: Thursday, August 15, 2019 2:15 PM
To: cose@ietf.org
Cc: Kevin Jacobs <kjacobs@mozilla= .com>
Subject: [COSE] Feedback on draft-ietf-cose-webauthn-algorithms-01

 

All,

 

We reviewed draft-ietf-cose-webauthn-algorithms-0= 1 and only have pair of comments about the security considerations.

 

Regarding section 5.3:

 

While section 5.2 refers to RFC7518's guidance, c= urrently 5.3 does not. Perhaps note in 5.3 something akin to "if you h= ave an existing implementation, the exponent restrictions from RFC7518 also= apply."

 

Mike> Good sugge= stion.  I’d be glad to do that.

 

Regarding section 5.4:

 

The first sentence uses the FIPS186-3 form P-256 = when everything else in this document would imply we'd refer to it as secp2= 56r1, though rfc8152bis uses the P-256 form. Perhaps all readers of this do= cument would be able to avoid confusion, but since it's a section _about_ confusion, it seems worth pointing out. P= erhaps a parenthetical could be added?

 

Mike> I propose = to add a reference to “[RFC 7518]” after “P-256” to= make it clear where the definition that we are using originates.

 

Kevin Jacobs and J.C. Jones

 

_______________________________________________

COSE mailing list

COSE@ietf.org

https://n= am06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.ietf.org%2Fm= ailman%2Flistinfo%2Fcose&amp;data=3D02%7C01%7CMichael.Jones%40microsoft= .com%7Ca35cc1dc6c6549ca013108d721c5b465%7C72f988bf86f141af91ab2d7cd011db47%= 7C1%7C0%7C637015005331095019&amp;sdata=3DMtpdnZjpVDYvFS2Tr0mfFalyhw%2Fi= yYQk9H7uKwJGRk8%3D&amp;reserved=3D0

--_000_BYAPR00MB0567955569B14A2032EC229AF56A0BYAPR00MB0567namp_-- From nobody Thu Oct 24 16:13:13 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D989120026; Thu, 24 Oct 2019 16:13:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jj7sZ59Ip5cR; Thu, 24 Oct 2019 16:13:06 -0700 (PDT) Received: from NAM06-DM3-obe.outbound.protection.outlook.com (mail-eopbgr640130.outbound.protection.outlook.com [40.107.64.130]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9453D120019; Thu, 24 Oct 2019 16:13:06 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=FfN+w/xpa1XM6QawYr8xFwqJN/CUY+elIZFk8F5pSKoYEIs3J3f+f3zgTlyO+w8NmOV+hMewTFnr5pTgq8mlbIO0iQZXri0gcug1iOMUPUc5nhUKLtwaR0P9oJiktkicetgXqqWeAYwbhNLjzO+GtiZto0CzbOCcqeo0aQhaOTJ0LPLyvWv6fWw8thkMapVmfZUWvgJC0MFg1t0dID7zqYspA3rhQgTEcQGVS2eixsZiB3U8M90OkcZpQ2L4OEO+XOsuA8YSLrpT15f6tZWvq4hgUrac/3mIMw4V+kKcELMsq0k057N3uuI0EBRuehhnHPQHmrWkEIyKl/0iMluJyg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=jKUMXFTXgEq7hq1qtTmFgbtYGfX8JN0m4gROQrnzxts=; b=UfIcDU8FfASXv9FWgw2/qBt/hSxL0OS6kWzhqrbj8jFhAq1bfxQPJKt32mnbLqHPYHTZvsUm4ki1JHocCnKyi3K66HkEMpOTSrhrer5FR+6fXww3PTbOMk37JspZjc5eRG5Rm9UlypR2nBoCp73YzB7zh59w+zJJvDN74J/E1XYha4H/yMzkPN726baci76+ebwowrn/H/z+r13GrWFz+2heDfQQiNagNQrjbPiNcwL7JIjE9yhCYJp+R3qQlz71xld0ngGnEpbBA8HkRlB0GxgS1z7lYKHX3ws2HhVLFVZ3YcbL72VmnjhLQ7bEV64defsgosro9deEwXuWxNFALw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=jKUMXFTXgEq7hq1qtTmFgbtYGfX8JN0m4gROQrnzxts=; b=JBM6A8VULFwRhaNf/wsK8hYMsf19Ws0Gc79icrfG/Z89KtKGFd7oDbRpoYFA3QmFUQlzVzaRr070vkRqWNeWvtoRcT52RZb5oNVMv50Hqch8dQ/b4cGS6NNlsc5Q4WNWkKiItVh8EsQErzkVt+DfcPeD4P8A+Qgi+NRGRyOlHSo= Received: from BYAPR00MB0567.namprd00.prod.outlook.com (20.179.56.25) by BYAPR00MB0600.namprd00.prod.outlook.com (20.179.56.142) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2425.0; Thu, 24 Oct 2019 23:12:34 +0000 Received: from BYAPR00MB0567.namprd00.prod.outlook.com ([fe80::31af:5686:e43b:ed3a]) by BYAPR00MB0567.namprd00.prod.outlook.com ([fe80::31af:5686:e43b:ed3a%9]) with mapi id 15.20.2430.000; Thu, 24 Oct 2019 23:12:34 +0000 From: Mike Jones To: Jim Schaad , 'cose' CC: "draft-ietf-cose-webauthn-algorithms@ietf.org" Thread-Topic: =?utf-8?B?W0NPU0VdIPCflJQgV0dMQyBvZiBkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4t?= =?utf-8?Q?algorithms?= Thread-Index: AQHVbWSlFBVJFlStCEe6sWSpGQx0gacwqvUAgDUjSdCAAD1GgIAA+NyggAOhxMA= Date: Thu, 24 Oct 2019 23:12:34 +0000 Message-ID: References: <000001d56dc2$e14f20c0$a3ed6240$@augustcellars.com> <00aa01d58873$2900c2f0$7b0248d0$@augustcellars.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=c058503d-6196-49ec-8a8f-0000624e41f2; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-10-22T15:44:25Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [2001:4898:80e8:2:d470:4f7:8cbd:3a65] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: f818c078-8c66-4818-21a1-08d758d7a78d x-ms-traffictypediagnostic: BYAPR00MB0600: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0200DDA8BE x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(366004)(396003)(346002)(376002)(39860400002)(136003)(189003)(199004)(316002)(7736002)(229853002)(10090500001)(8990500004)(110136005)(790700001)(74316002)(5660300002)(6116002)(7696005)(6506007)(76176011)(81166006)(81156014)(10290500003)(6436002)(14454004)(53546011)(4326008)(102836004)(966005)(186003)(22452003)(478600001)(14444005)(256004)(11346002)(52536014)(446003)(476003)(2906002)(66574012)(99286004)(486006)(33656002)(30864003)(6246003)(71190400001)(71200400001)(76116006)(25786009)(66946007)(66446008)(46003)(66476007)(64756008)(66556008)(236005)(86362001)(6306002)(54896002)(606006)(8936002)(9686003)(55016002); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR00MB0600; H:BYAPR00MB0567.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: joel1e+cum2dW9OYzNMp4qWp2oOsG2dYy7hXL90st7nKkMOadCbdWP/kkC5YkpVGgCwLvo1njeSyRTw4ori+bLUX9my6kwcm4AjNYs0P/OxQsTsMYPtGZLQnhVQzFkYke6EF0GYTWLjv8Fdd6AKr5Al2DCYHCvBeHNNLpm/WbVSwazuD2hqJuTvqmnty8yAi1PuRyp57w32CYBFsFP3O46x5gw9O0mbiK9jYaedeiTflWy0HYdw+5DxUcHhiScva71JscLw9ANiTe2ipSCeD2BkRA5uaMupMqhPKANYF+F5VIYYGSlY+6x/uox9ky9x4YD+Ujafke3kTKPevwNiawUHwhEIm5OUjiknIOCaR27FeR1hi0uqHKVYvfq8zt2LGobsA1zFaHQgm6ExvP3qHg66nwtQOWFoHsSFJLT/odSBK+aoggM2GDPoR64fg7Ivh x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BYAPR00MB05676A4980B07DB87CDE5831F56A0BYAPR00MB0567namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: f818c078-8c66-4818-21a1-08d758d7a78d X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Oct 2019 23:12:34.7232 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: UlhixsrbvMxHb0RUBwOnrcz87rh+ZM8bBDT0NXUUJAmFP7sujuxMVYOyPLFHT0edjv9rMs7FQPnFCF8KGcbyHQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR00MB0600 Archived-At: Subject: Re: [COSE] =?utf-8?q?=F0=9F=94=94_WGLC_of_draft-ietf-cose-webauthn-a?= =?utf-8?q?lgorithms?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 23:13:10 -0000 --_000_BYAPR00MB05676A4980B07DB87CDE5831F56A0BYAPR00MB0567namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhlc2UgaXNzdWUgcmVzb2x1dGlvbnMgaGF2ZSBiZWVuIGluY29ycG9yYXRlZCBpbiBodHRwczov L3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXMt MDIuICBUaGFua3MgYWdhaW4gZm9yIHlvdXIgdXNlZnVsIHJldmlldyENCg0KICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC0tIE1p a2UNCg0KRnJvbTogTWlrZSBKb25lcw0KU2VudDogVHVlc2RheSwgT2N0b2JlciAyMiwgMjAxOSA5 OjAzIEFNDQpUbzogSmltIFNjaGFhZCA8aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbT47ICdjb3NlJyA8 Y29zZUBpZXRmLm9yZz4NCkNjOiBkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtc0Bp ZXRmLm9yZw0KU3ViamVjdDogUkU6IFtDT1NFXSDwn5SUIFdHTEMgb2YgZHJhZnQtaWV0Zi1jb3Nl LXdlYmF1dGhuLWFsZ29yaXRobXMNCg0KVGhhbmtzIGZvciB5b3VyIHJlcGxpZXMsIEppbS4gIE15 IGFkZGl0aW9uYWwgcmVwbGllcyBhcmUgcHJlZml4ZWQgYnkg4oCcTWlrZTI+4oCdLg0KDQogICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLS0gTWlr ZQ0KDQpGcm9tOiBKaW0gU2NoYWFkIDxpZXRmQGF1Z3VzdGNlbGxhcnMuY29tPG1haWx0bzppZXRm QGF1Z3VzdGNlbGxhcnMuY29tPj4NClNlbnQ6IE1vbmRheSwgT2N0b2JlciAyMSwgMjAxOSA1OjU0 IFBNDQpUbzogTWlrZSBKb25lcyA8TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPG1haWx0bzpN aWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20+PjsgJ2Nvc2UnIDxjb3NlQGlldGYub3JnPG1haWx0 bzpjb3NlQGlldGYub3JnPj4NCkNjOiBkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGht c0BpZXRmLm9yZzxtYWlsdG86ZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXNAaWV0 Zi5vcmc+DQpTdWJqZWN0OiBSRTogW0NPU0VdIPCflJQgV0dMQyBvZiBkcmFmdC1pZXRmLWNvc2Ut d2ViYXV0aG4tYWxnb3JpdGhtcw0KDQoNCg0KRnJvbTogTWlrZSBKb25lcyA8TWljaGFlbC5Kb25l c0BtaWNyb3NvZnQuY29tPG1haWx0bzpNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20+Pg0KU2Vu dDogTW9uZGF5LCBPY3RvYmVyIDIxLCAyMDE5IDU6MDAgUE0NClRvOiBKaW0gU2NoYWFkIDxpZXRm QGF1Z3VzdGNlbGxhcnMuY29tPG1haWx0bzppZXRmQGF1Z3VzdGNlbGxhcnMuY29tPj47ICdjb3Nl JyA8Y29zZUBpZXRmLm9yZzxtYWlsdG86Y29zZUBpZXRmLm9yZz4+DQpDYzogZHJhZnQtaWV0Zi1j b3NlLXdlYmF1dGhuLWFsZ29yaXRobXNAaWV0Zi5vcmc8bWFpbHRvOmRyYWZ0LWlldGYtY29zZS13 ZWJhdXRobi1hbGdvcml0aG1zQGlldGYub3JnPg0KU3ViamVjdDogUkU6IFtDT1NFXSDwn5SUIFdH TEMgb2YgZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXMNCg0KVGhhbmtzIGZvciB5 b3VyIHJldmlldywgSmltLiAgUmVzcG9uc2VzIGFyZSBpbmxpbmUsIHByZWZpeGVkIGJ5IOKAnE1p a2U+4oCdLg0KDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgLS0gTWlrZQ0KDQpGcm9tOiBKaW0gU2NoYWFkIDxpZXRmQGF1Z3VzdGNlbGxhcnMu Y29tPG1haWx0bzppZXRmQGF1Z3VzdGNlbGxhcnMuY29tPj4NClNlbnQ6IFR1ZXNkYXksIFNlcHRl bWJlciAxNywgMjAxOSA2OjQ2IFBNDQpUbzogJ2Nvc2UnIDxjb3NlQGlldGYub3JnPG1haWx0bzpj b3NlQGlldGYub3JnPj4NCkNjOiBkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtc0Bp ZXRmLm9yZzxtYWlsdG86ZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXNAaWV0Zi5v cmc+DQpTdWJqZWN0OiBSRTogW0NPU0VdIPCflJQgV0dMQyBvZiBkcmFmdC1pZXRmLWNvc2Utd2Vi YXV0aG4tYWxnb3JpdGhtcw0KDQpJIHN0YXJ0IHRoaXMgcmV2aWV3IGJ5IGNvcHlpbmcgZm9yd2Fy ZCBhbGwgb2YgbXkgY29tbWVudHMgb24gZHJhZnQtam9uZXMtY29zZS1hZGRpdGlvbmFsLWFsZ29y aXRobXMtMDANCg0KMS4gIEkgd2FzIHN1cnByaXNlZCB0aGF0IHRoZXJlIGFyZSB0d28gYWxnb3Jp dGhtcyBzdGlsbCBpbiB0aGUgV2ViQXV0aG4gZG9jdW1lbnQgdGhhdCBhcmUgbm90IGluY2x1ZGVk IGhlcmUuICBJcyB0aGF0IGludGVudGlvbmFsIGFuZCB3aGF0IGlzIHRoZSBwbGFuIGZvcndhcmQg Zm9yIHRoZW0/IFRoaXMgb25lIHdhcyBhZGRyZXNzZWQNCg0KDQoNCjIuICBUaGUgdGl0bGUgb2Yg dGhlIGRvY3VtZW50IGlzIG5vdCBkZXNjcmlwdGl2ZSBpbiB0ZXJtcyBvZiBhIHN0YW5kYWxvbmUg c2VudGVuY2Ugb24gd2hhdCB0aGlzIGRvY3VtZW50IGlzIGRvaW5nLiAgSXQgc2hvdWxkIGJlIG1v cmUgc3BlY2lmaWMgb24gdGhlIGFsZ29yaXRobXMuICBUaGUgbmV3IHRpdGxlIGlzIGZpbmUgZXhj ZXB0IGZvciB0aGUgZmFjdCB0aGF0IFdlYkF1dGhuIGlzIG5vdCBleHBhbmRlZCB0byBhbnl0aGlu Zy4NCg0KDQoNCjMuICBBYnN0cmFjdDogIEEgbGlzdCBvZiB0aGUgYWxnb3JpdGhtcyBiZWluZyBw cm9jZXNzZWQgaW4gdGhpcyBkb2N1bWVudCB3b3VsZCBiZSByZWFzb25hYmxlLiAgQmFzZWQgb24g dGhlIGN1cnJlbnQgdGV4dCwgdGhlIGFic3RyYWN0IHdvdWxkIG5lZWQgdG8gYmUgcmUtd3JpdHRl biBhcyBzb29uIGFzIHRoZSBhbGdvcml0aG1zIGFyZSByZWdpc3RlcmVkIGJlY2F1c2UgdGhleSB3 b3VsZCB0aGVuIGJlIHJlZ2lzdGVyZWQgYW5kIHRodXMgdGhlIHNwZWNpZmljYXRpb24gaXMgbm90 IG5lY2Vzc2FyeS4gIEl0IHdvdWxkIGFsc28gYmUgc2xpZ2h0bHkgb2RkIGluIHRoZSBldmVudCB0 aGF0IHRoZSBDVEFQIG9yIFdlYkF1dGhuIHByb3RvY29scyBhcmUgdXBkYXRlZCB0byBhZGQgbmV3 IGFsZ29yaXRobXMgYXMgdGhleSB3b3VsZCBub3QgYmUgaW4gdGhpcyBkb2N1bWVudC4gIChTZWUg aXNzdWUgIzEuKSAgTm8gQ2hhbmdlDQoNCg0KDQpNaWtlPiBVbmRlcnN0b29kLiAgSeKAmWxsIHJl d29yZCBzbyB0aGF0IHRoZSB0ZXh0IHJlbWFpbnMgY29ycmVjdCBhZnRlciB0aGUgSUFOQSByZWdp c3RyYXRpb25zIGhhdmUgYmVlbiBwZXJmb3JtZWQuDQoNCg0KDQo0LiAgU2VjdGlvbiAxOiAgU2Vl IGFic3RyYWN0IGNvbW1lbnQuICBObyBjaGFuZ2UNCg0KDQoNCk1pa2U+IERpdHRvDQoNCg0KDQo1 LiAgU2VjdGlvbiAyOiBUaGUgcmVjb21tZW5kZWQgY29sdW1uIG5lZWRzIHRvIGJlIGFkZGVkIHRv IHRoZSB0YWJsZS4gIE5vIGNoYW5nZQ0KDQoNCg0KTWlrZT4gSSBhc3N1bWUgdGhlIGNvbHVtbiB5 b3XigJlyZSB0YWxraW5nIGFib3V0IGlzIHRoZSBvbmUgcmVxdWVzdGVkIGluIHRoZSBuZXh0IGNv bW1lbnQuDQoNCg0KDQo2LiAgU2VjdGlvbiAyOiAgVGhlIGRpc2N1c3Npb24gb24gd2hhdCBpcyBh bmQgaXMgbm90IHJlY29tbWVuZGVkIGFuZCB3aHkgYmVsb25ncyBpbiB0aGlzIHNlY3Rpb24gbm90 IGluIHRoZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucy4gIE5vIGNoYW5nZQ0KDQoNCg0KTWlrZT4g T0ssIEkgY2FuIGFkZCBhbiDigJxJbXBsZW1lbnRhdGlvbiBSZXF1aXJlbWVudHPigJ0gY29sdW1u LCBwYXJhbGxlbGluZyB0aGUgdHJlYXRtZW50IGluIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9yZmM3NTE4I3NlY3Rpb24tMy4xPGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24u b3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnRvb2xzLmlldGYub3JnJTJGaHRtbCUyRnJm Yzc1MTglMjNzZWN0aW9uLTMuMSZkYXRhPTAyJTdDMDElN0NNaWNoYWVsLkpvbmVzJTQwbWljcm9z b2Z0LmNvbSU3QzYyNGVkMzlkNDI3ZTQwZjVmZGVlMDhkNzU2OGE1NTM1JTdDNzJmOTg4YmY4NmYx NDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzA3MzAyNDQ1NDA2ODY3MyZzZGF0YT1v YUQycnF4V1VGOHkzNUYlMkJXUmVYUlJEMkxWNGlDdEklMkZ6cGtqd0RCTnptayUzRCZyZXNlcnZl ZD0wPi4NCg0KDQoNCjcuICBTZWN0aW9uIDI6IFlvdSBhcmUgbWlzc2luZyBzb21lIGNoZWNrcyB0 aGF0IHNob3VsZCBiZSBkb25lIG9uIHNpZ25pbmcgYW5kIHZlcmlmaWNhdGlvbi4gIExvb2sgYXQg dGhlIHN0YW5kYXJkIHRleHQgYXQgdGhlIGVuZCBvZiBzZWN0aW9ucyBpbiBSRkMgODE1MiBmb3Ig YSBwYXR0ZXJuLiAgWW91IG1pZ2h0IGFsc28gd2FudCB0byBhZGQgYSBjaGVjayBvbiBsZW5ndGhz IG9mIGtleXMgYm90aCBmb3IgYSBtYXhpbXVtIGFuZCBhIG1pbmltdW0gbGVuZ3RoLiAgTm8gY2hh bmdlDQoNCg0KDQpNaWtlPiBLZXkgc2l6ZSBjb25zaWRlcmF0aW9ucyBmb3IgdGhlIFJTQSBhbGdv cml0aG1zIGFyZSBhbHJlYWR5IGNvdmVyZWQgaW4gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1s L2RyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zLTAxI3NlY3Rpb24tNS4xPGh0dHBz Oi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUy RiUyRnRvb2xzLmlldGYub3JnJTJGaHRtbCUyRmRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdv cml0aG1zLTAxJTIzc2VjdGlvbi01LjEmZGF0YT0wMiU3QzAxJTdDTWljaGFlbC5Kb25lcyU0MG1p Y3Jvc29mdC5jb20lN0M2MjRlZDM5ZDQyN2U0MGY1ZmRlZTA4ZDc1NjhhNTUzNSU3QzcyZjk4OGJm ODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzcwNzMwMjQ0NTQwNzg2Njcmc2Rh dGE9OFYzUnFnME5CaHRrT25CeHFnZHhKQjdETEVZaXRKN3ZIUmRjcGszM0o2dyUzRCZyZXNlcnZl ZD0wPi4gIEZvciBFUzI1NkssIEkgY2FuIHNheSB0aGF0IHRoZSBYIGFuZCBZIHZhbHVlcyBmb3Ig dGhlIHB1YmxpYyBrZXkgbXVzdCBib3RoIGJlIGV4YWN0bHkgMjU2IGJpdHMuICBXaGF0IGFyZSB0 aGUgc3BlY2lmaWMgY2hlY2tzIHlvdSB3YW50ZWQgYWRkZWQ/ICBJIGNvdWxkbuKAmXQgdGVsbCB3 aGljaCBzZWN0aW9ucyBvZiBSRkMgODE1MiB5b3Ugd2VyZSByZWZlcnJpbmcgdG8uICBBbHNvLCBu b3RlIHRoYXQgYmV0d2VlbiBkcmFmdC1qb25lcy0wMCBhbmQgZHJhZnQtaWV0Zi0wMSwgdGhlIGRl c2NyaXB0aW9ucyBvZiB0aGUgdXNlIG9mIGhhc2ggZnVuY3Rpb25zIHdlcmUgYmVlZmVkIHVwLCBp biByZXNwb25zZSB0byBvdGhlciBjb21tZW50cyByZWNlaXZlZC4NCg0KDQpXaGVuIHVzaW5nIGEg Q09TRSBrZXkgZm9yIHRoaXMgYWxnb3JpdGhtLCB0aGUgZm9sbG93aW5nIGNoZWNrcyBhcmUNCiAg IG1hZGU6DQoNCiAgIG8gIFRoZSAna3R5JyBmaWVsZCBNVVNUIGJlIHByZXNlbnQsIGFuZCBpdCBN VVNUIGJlICdFQzInLg0KDQogICBvICBJZiB0aGUgJ2FsZycgZmllbGQgaXMgcHJlc2VudCwgaXQg TVVTVCBtYXRjaCB0aGUgRUNEU0Egc2lnbmF0dXJlDQogICAgICBhbGdvcml0aG0gYmVpbmcgdXNl ZC4NCg0KICAgbyAgSWYgdGhlICdrZXlfb3BzJyBmaWVsZCBpcyBwcmVzZW50LCBpdCBNVVNUIGlu Y2x1ZGUgJ3NpZ24nIHdoZW4NCiAgICAgIGNyZWF0aW5nIGFuIEVDRFNBIHNpZ25hdHVyZS4NCg0K ICAgbyAgSWYgdGhlICdrZXlfb3BzJyBmaWVsZCBpcyBwcmVzZW50LCBpdCBNVVNUIGluY2x1ZGUg J3ZlcmlmeScgd2hlbg0KICAgICAgdmVyaWZ5aW5nIGFuIEVDRFNBIHNpZ25hdHVyZS4NCg0KDQoN Ck1pa2UyPiBPSw0KDQoNCg0KOC4gIFNlY3Rpb24gMzogIFRoaXMgc2hvdWxkIG5vdCBiZSB0aGUg Zmlyc3QgdXNlIG9mIEpPU0UgYW5kIENPU0UgYW5kIHRoZXJlZm9yZSB0aGUgZXhwYW5zaW9ucyBo ZXJlIG1ha2Ugbm8gc2Vuc2UuICBUaGF0IHNob3VsZCBiZSBpbiB0aGUgaW50cm9kdWN0aW9uLiAg Tm8gY2hhbmdlDQoNCg0KDQpNaWtlPiBJ4oCZbGwgbG9vayBpbnRvIGV4cGFuZGluZyBhYmJyZXZp YXRpb25zIG9uIGZpcnN0IHVzZXMgYW5kIG5vdCBvbiBzdWJzZXF1ZW50IHVzZXMuDQoNCg0KDQo5 LiBTZWN0aW9uIDMuMTogIEkgaGF2ZSBvbmx5IHJhcmVseSBzZWVuIHRoaXMgY3VydmUgYXMgUC0y NTZLLCBpdCBpcyBhbG1vc3QgYWx3YXlzIHJlZmVycmVkIHRvIGFzIHNlY3AyNTZrMS4gIEkgd291 bGQgYXNrIHRoYXQgdGhpcyBiZSBjaGFuZ2VkIGluIHRoZSBDT1NFIHJlcHJlc2VudGF0aW9uLiAg SSBhbSBhZ25vc3RpYyBhYm91dCB3aGF0IHNob3VsZCBiZSBpbiB0aGUgSk9TRSByZXByZXNlbnRh dGlvbi4gIEZpeGVkDQoNCg0KDQoxMC4gU2VjdGlvbiAzLjE6ICBJIGRvbid0IHVuZGVyc3RhbmQg dGhlIHJlYXNvbiBmb3IgdGhlIGxhc3QgcGFyYWdyYXBoIGluIHRoZSBzZWN0aW9uLiAgSXQgc2Vl bXMgdG8gbWUgdGhhdCB0aGlzIHNob3VsZCBqdXN0IHJlZmVyIHRvIGFsbCBvZiB0aGUgaXRlbXMg ZGVmaW5lZCBmb3IgRUMyIGluIENPU0UuICBObyBDaGFuZ2UNCg0KDQoNCk1pa2U+IE9LDQoNCg0K DQoxMS4gU2VjdGlvbiAzLjE6ICBJcyB0aGVyZSBhIHJlY29tbWVuZGF0aW9uIG9uIHVzaW5nIGNv bXByZXNzZWQgdnMgbm9uLWNvbXByZXNzZWQgcG9pbnRzPyAgTm8gY2hhbmdlDQoNCg0KDQpNaWtl PiBJIHdpbGwgc3RhdGUgdGhhdCB1bmNvbXByZXNzZWQgcG9pbnQgcmVwcmVzZW50YXRpb25zIGFy ZSB0byBiZSB1c2VkIGZvciBKV0tzLCBhcyBhIGNvbXByZXNzZWQgcmVwcmVzZW50YXRpb24gZm9y IGtleSB0eXBlIOKAnEVD4oCdIGlzIG5vdCBkZWZpbmVkLiAgQW5kIEkgd2lsbCBzdGF0ZSB0aGF0 IHRoZSB1bmNvbXByZXNzZWQgbXVzdCBhbHNvIGJlIHVzZWQgZm9yIENXS3MsIGFzIEkgZG9u4oCZ dCBrbm93IHRoYXQgdGhlIEdhbG9pcyB5wrIgPSB4wrMgKyA3IGZpbml0ZSBmaWVsZCBmb3JtIHVz ZWQgd2l0aCBzZWNwMjU2azEgaXMgYW1lbmFibGUgdG8gY29tcHJlc3Npb24uICAoSG93ZXZlciwg aWYgdGhlIENSRkcgb3Igb3RoZXIgZXhwZXJ0cyB0ZWxsIG1lIHRoYXQgaXQgaXMsIEkgd2lsbCBh bHNvIGFsbG93IGZvciB0aGUgY29tcHJlc3NlZCByZXByZXNlbnRhdGlvbiB3aXRoIENPU0UuKQ0K DQoNCg0KaHR0cHM6Ly9iaXRjb2luLnN0YWNrZXhjaGFuZ2UuY29tL3F1ZXN0aW9ucy83NjE4MS9i aXRjb2luLXB1YmxpYy1rZXlzLWZyb20tdW5jb21wcmVzc2VkLXRvLWNvbXByZXNzZWQtdmVyc2lv bi13aXRoLWNvZGUtc2FtcGxlDQoNCg0KDQpNaWtlMj4gT0ssIHRoZW4gSeKAmWxsIGFsbG93IHRo ZSBjb21wcmVzc2VkIHJlcHJlc2VudGF0aW9uIGZvciBDT1NFLg0KDQoNCg0KMTIuICBTZWN0aW9u IDMuMTogIFlvdSBuZWVkIHRvIHRhbGsgYWJvdXQgaWYgdGhpcyBpcyBnb2luZyB0byBiZSBJRVRG IHJlY29tbWVuZGVkIG9yIG5vdC4gICAoQW5kIHdoeSkgIE5vIGNoYW5nZQ0KDQoNCg0KTWlrZT4g aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdv cml0aG1zLTAxI3NlY3Rpb24tNC4xPGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24u b3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnRvb2xzLmlldGYub3JnJTJGaHRtbCUyRmRy YWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zLTAxJTIzc2VjdGlvbi00LjEmZGF0YT0w MiU3QzAxJTdDTWljaGFlbC5Kb25lcyU0MG1pY3Jvc29mdC5jb20lN0M2MjRlZDM5ZDQyN2U0MGY1 ZmRlZTA4ZDc1NjhhNTUzNSU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3 QzAlN0M2MzcwNzMwMjQ0NTQwNzg2Njcmc2RhdGE9cGtSVmF2RFJaZGVXZGdXVzc1WXhPZDVPWFFX cVBxQzYlMkZKeVRPYTVIb2VFJTNEJnJlc2VydmVkPTA+IGhhcyBpdCBiZWluZyByZWNvbW1lbmRl ZC4gIEkgd2lsbCBkZXNjcmliZSB3aHkgaW4gdGhlIG5leHQgdmVyc2lvbiwgYXMgcmVxdWVzdGVk Lg0KDQoNCg0KMTMuICBTZWN0aW9uIDMuMjogIEkgZG9uJ3QgdW5kZXJzdGFuZCB3aGF0IHRoaXMg c2VjdGlvbiBpcyBkb2luZy4gIElmIHlvdSBhcmUgcmVhbGx5IGRlZmluaW5nIGEgbmV3IHNpZ25h dHVyZSBhbGdvcml0aG0sIHRoZW4gdGhhdCBzaG91bGQgYmUgbm90ZWQgYXMgcGFydCBvZiB0aGUg cmVxdWlyZW1lbnRzIGluIHNlY3Rpb24gMy4xIG9uIHRoZSBrZXkuICBJZiB5b3UgYXJlIG5vdCBk ZWZpbmluZyBhIG5ldyBzaWduYXR1cmUgYWxnb3JpdGhtIHRoZW4gdGhpcyBzZWN0aW9uIG1ha2Vz IHplcm8gc2Vuc2UuICAoWW91IGFyZSBub3Qgc2F5aW5nIHdoYXQgdGhlIGhhc2ggYWxnb3JpdGht IGlzLikgIEJvdGggb3B0aW9ucyBhcmUgcmVhc29uYWJsZS4gIFRoaXMgaXMgcGFydGx5IGRlYWx0 IHdpdGg6DQoNCg0KDQpNaWtlPiBUaGlzIGlzIGludGVudGlvbmFsbHkgZXhhY3RseSBwYXJhbGxl bCB0byBSRkMgNzUxOCwgd2hpY2ggZGVmaW5lcyB0aGUg4oCcRVMyNTbigJ0gYWxnb3JpdGhtIGlk ZW50aWZpZXIgdG8gYmUgdXNlZCB3aXRoIHRoZSDigJxQLTI1NuKAnSBjdXJ2ZS4gIEluIHRoaXMg Y2FzZSwgaXQgaXMgZGVmaW5pbmcgdGhlIOKAnEVTMjU2S+KAnSBhbGdvcml0aG0gaWRlbnRpZmll ciB0byBiZSB1c2VkIHdpdGggdGhlIOKAnHNlY3AyNTZrMeKAnSBjdXJ2ZS4NCg0KW0pMU10gQnV0 IHRoYXQgaXMgbm90IHRoZSBkZWNpc2lvbiB0aGF0IHdhcyBtYWRlIGZvciBDT1NFLiAgIE9ubHkg dGhlIGhhc2ggYWxnb3JpdGhtIHdhcyBmaXhlZC4NCg0KDQoNCk1pa2UyPiBUaGUgcGFyYWxsZWwg dHJlYXRtZW50IGFsc28gd29ya3MgZmluZSBpbiBDT1NFLiAgT25lIG11c3Qgb25seSB1c2Ug4oCc c2VjcDI1Nmsx4oCdIGZvciBzaWduaW5nIHdpdGgg4oCcRVMyNTZL4oCdIGFuZCBub3Qgd2l0aCBv dGhlciBhbGdvcml0aG0gaWRlbnRpZmllcnMuICBJ4oCZbGwgbWFrZSB0aGlzIGNsZWFyZXIgaW4g dGhlIG5leHQgdmVyc2lvbi4NCg0KDQoNCiAgMS4gIFN0ZXAgMSBpcyBpbmNvcnJlY3QgaW4gdGVy bXMgb2YgQ09TRSwgaXQgaXMgbm90IHRoZSBwYXlsb2FkIHRoYXQgaXMgc2lnbmVkLg0KDQpNaWtl PiBJ4oCZbGwgcmV2aXNlIHRoZSBkZXNjcmlwdGlvbiBoZXJlIHRvIGFsaWduIHdpdGggY29ycmVj dCBDT1NFIHRlcm1pbm9sb2d5Lg0KDQoNCiAgMS4gIFRoZSBuZXcgc2lnbmF0dXJlIGFsZ29yaXRo bSBpcyBiZWluZyBkZWZpbmVkIHdpdGhvdXQgbW90aXZhdGlvbi4gIFRoZXJlIHNob3VsZCBiZSB0 ZXh0IGRlc2NyaWJpbmcgd2h5IHRoaXMgaXMgRVMyNTZLIGFuZCBub3QgRVMyNTYgKEVDRFNBIHdp dGggU0hBLTI1NikuICBJIGRvIG5vdGUgdGhhdCB0aGVyZSBtYXkgYmUgZGlmZmVyZW50IHRleHQg YmVpbmcgZGVzY3JpYmVkIGhlcmUgZm9yIEpPU0UgdGhhbiBmb3IgQ09TRS4NCg0KTWlrZT4g4oCc RVMyNTbigJ0gaXMgZGVmaW5lZCBieSBSRkMgNzUxOCB0byBiZSBhbHdheXMgdXNlZCB3aXRoIHRo ZSBQLTI1NiBjdXJ2ZS4gIEEgZGlmZmVyZW50IGFsZ29yaXRobSBpZGVudGlmaWVyIGlzIHRoZXJl Zm9yZSByZXF1aXJlZCB0byB1c2Ugd2l0aCBzZWNwMjU2azEuICBUaGlzIGlzIGJ5IGRlc2lnbi4g IEFuZCB0aGUgdXNlIG9mIGlkZW50aWZpZXJzIGlzIGJlaW5nIGtlcHQgaW50ZW50aW9uYWxseSBw YXJhbGxlbCBiZXR3ZWVuIEpPU0UgYW5kIENPU0UuDQoNCg0KICAxLiAgUGxlYXNlIGluY2x1ZGUg dGV4dCByZWxhdGVkIHRvIGRldGVybWluaXN0aWMgRUNEU0EgaW4gdGhpcyB0ZXh0Lg0KDQpNaWtl PiBXaGF0IGRvIHlvdSB3YW50IHRoaXMgdGV4dCB0byBzYXk/ICBJ4oCZbSByZWx1Y3RhbnQgdG8g dXNlIHRoZSB0ZXh0IGF0IGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9yZmM4MTUyI3NlY3Rp b24tOC4xPGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3Vy bD1odHRwcyUzQSUyRiUyRnRvb2xzLmlldGYub3JnJTJGaHRtbCUyRnJmYzgxNTIlMjNzZWN0aW9u LTguMSZkYXRhPTAyJTdDMDElN0NNaWNoYWVsLkpvbmVzJTQwbWljcm9zb2Z0LmNvbSU3QzYyNGVk MzlkNDI3ZTQwZjVmZGVlMDhkNzU2OGE1NTM1JTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAx MWRiNDclN0MxJTdDMCU3QzYzNzA3MzAyNDQ1NDA4ODY1OSZzZGF0YT1jZ2ZnSDIzTWRpOVV3OTMl MkZiZUVpSEVNb1FBJTJCS1NoOWhHREFKc0NxSnlPUSUzRCZyZXNlcnZlZD0wPiwgd2hpY2ggc2F5 cyB0aGF0IOKAnGltcGxlbWVudGF0aW9ucyBTSE9MVUQgdXNlIGEgZGV0ZXJtaW5pc3RpYyBhbGdv cml0aG3igJ0sIHdoaWNoIGlzIG1pc2xlYWRpbmcsIGluIHRoYXQgaXQgaW1wbGllcyB0aGF0IHRo ZXJlIGFyZSBtYW55IHN1Y2ggYWxnb3JpdGhtcyB0aGF0IGNvdWxkIGJlIHVzZWQuICBJbiBmYWN0 LCBleGFjdGx5IG9uZSBpcyBiZWluZyBzcGVjaWZpZWQuDQoNCg0KICAxLiAgVGV4dCBzaW1pbGFy IHRvIHRoZSBlbmQgb2Ygc2VjdGlvbiAyLjEgaW4gZHJhZnQtaWV0Zi1jb3NlLXJmYzgxNTJiaXMt YWxncyBzaG91bGQgYmUgaW5jbHVkZWQgdG8gbmFpbCB0aGluZ3MgZG93biB0aWdodGVyDQoNCg0K TWlrZT4gQXJlIHlvdSB0YWxraW5nIGFib3V0IHRoZSB0ZXh0IHN0YXJ0aW5nIOKAnFdoZW4gdXNp bmcgYSBDT1NFIGtleSBmb3IgdGhpcyBhbGdvcml0aG0sIHRoZSBmb2xsb3dpbmcgY2hlY2tzIGFy ZSBtYWRlOuKAnT8gIEFyZSB5b3UgcmVxdWVzdGluZyB0aG9zZSBzYW1lIGNoZWNrcz8NCg0KDQoN CjE0LiBTZWN0aW9uIDMuMjogIElmIHRoaXMgaXMgYSBuZXcgc2lnbmF0dXJlIGFsZ29yaXRobSB0 aGVuIGl0IHNob3VsZCBzYXkgd2hhdCBjdXJ2ZXMgaXQgb3BlcmF0ZXMgd2l0aC4gIEVsc2UgdGhl cmUgc2hvdWxkIGJlIGFuIGFkZGl0aW9uIG9mIHRoZSBhbGdvcml0aG1zIHRoYXQgYXJlIGxlZ2Fs IGluIHNlY3Rpb24gMy4xIERvbmUsIGJ1dCBzZWUgY29tbWVudCAxMw0KDQoNCg0KMTUuICBTZWN0 aW9uIDQuMSAtIFRoZSBjb3JyZWN0IHRlcm0gaXMgJ3Byb3Zpc2lvbmFsJyBub3QgJ3RlbXBvcmFy eScuIE5vdCBvZiBzdWZmaWNpZW50IGltcG9ydGFuY2UgdG8gd29ycnkgYWJvdXQuICBIb3dldmVy IHlvdSBjYW4ganVzdCB1c2UgdGhlIHByb3Zpc2lvbmFsIG51bWJlcnMgd2l0aG91dCBhbnkgY29t bWVudCBvciBUQkQgZ2l2ZW4gdGhleSBhcmUgYXNzaWduZWQuDQoNCg0KDQoxNi4gU2VjdGlvbiA1 LjQgLSBTbyBpZiBzb21lYm9keSBjaGFuZ2VzIHRoZSBjcnYgdmFsdWUsIGlzIHRoZXJlIGFueSB3 YXkgdG8gdGVsbCB0aGUgZGlmZmVyZW5jZT8gIElmIHNvIHRoZW4gdGhhdCBzaG91bGQgYmUgZGVz Y3JpYmVkIGhlcmUuICBObyBjaGFuZ2UNCg0KDQpNaWtlPiBUaGUgd2F5IHRoYXQgeW91IGNhbiB0 ZWxsIHRoYXQgdGhlIOKAnGNyduKAnSB2YWx1ZSBoYXMgYmVlbiBjaGFuZ2VkIGlzIHRoYXQg4oCc Y3J24oCdIHBhcmFtZXRlciB3aWxsIGhhdmUgYSBkaWZmZXJlbnQgdmFsdWUuICBUaGF04oCZcyBz byBzaW1wbGUgYXMgdG8gYmUgcHJhY3RpY2FsbHkgdGF1dG9sb2dpY2FsIGFuZCBub3Qgd29ydGgg ZXhwbGljaXRseSBzYXlpbmcuICBJ4oCZbSBndWVzc2luZyB5b3Ugd2FudCBtZSB0byBzYXkgc29t ZXRoaW5nIGVsc2UsIGJ1dCBJIGRvbuKAmXQga25vdyB3aGF0IGl0IGlzLg0KDQpbSkxTXSBTbywg SWYgSSB0YWtlIHlvdXIgc2VwMjU2azEga2V5IGFuZCBjaGFuZ2UgdGhlIGN1cnZlIHRvIFAtMjU2 IHRoYXQgY2Fubm90IGJlIGRldGVjdGVkPw0KDQpNaWtlMj4gIFllcywgaXQgY2FuIGJlIGRldGVj dGVkIGJlY2F1c2UgaWYgdGhlIGFsZ29yaXRobSBpZGVudGlmaWVyIHVzZWQgaXMg4oCcRVMyNTZL 4oCdIGFuZCB0aGUg4oCcY3J24oCdIHZhbHVlIGlzIG5vdCDigJxzZWNwMjU2azHigJ0sIGl04oCZ cyBpbGxlZ2FsIGlucHV0LCBhbmQgTVVTVCBiZSByZWplY3RlZC4gIEnigJlsbCBhZGQgdGhpcyB0 byB0aGUgY2hlY2tzLg0KDQoNCg0KMTcuICBTZWN0aW9uIDUuMyAtIFRoaXMgdGV4dCBzZWVtcyB0 byBiZSBzZWxmLWNvbnRyYWRpY3RvcnkuICBJZiB5b3UgTVVTVCBOT1QgdXNlIGl0LCB0aGVuIGhv dyBjYW4geW91IHRoZW4gdXNlIGl0PyAgSG93IGRvZXMgYW4gaW1wbGVtZW50YXRpb24ga25vdyB3 aGVuIGl0IGlzIG9yIGlzIG5vdCBhY2NlcHRhYmxlIHByYWN0aWNlIHRvIHVzZSB0aGlzPyAgTm8g Y2hhbmdlDQoNCg0KTWlrZT4gSSB3aWxsIGFkZCB0aGUgZGVzY3JpcHRpb24gYWdyZWVkIHRvIGlu IHRoZSBvbi1saXN0IGNvbnZlcnNhdGlvbiB3aXRoIE5laWwgTWFkZGVuLg0KDQpOZXcgSXRlbXM6 DQoNCjE4LiAgRklETzIgbm90IGV4cGFuZGVkIG9uIGZpcnN0IHVzZSBpbiBhYnN0cmFjdCBhbmQg aW50cm9kdWN0aW9uLiAgIERpdHRvIGZvciBXZWJBdXRobiwgQ09TRSwNCg0KDQpNaWtlPiBXaWxs IGRvDQoNCjE5LiAgQWJzdHJhY3QgZG9lcyBub3QgcmVmZXIgdG8gSlNPTiDigJMgc2hvdWxkIGl0 Pw0KDQoNCk1pa2U+IEnigJlsbCBsb29rIGludG8gZWRpdG9yaWFsbHkgd2hlcmUgdG8gYmVzdCBp bnRyb2R1Y2UgSlNPTi4NCg0KMjAuICBTaG91bGQgYmUgcG9pbnRpbmcgdG8gdGhlIGN1cnJlbnQg ZHJhZnRzIGFuZCBub3QgdG8gUkZDIDgxNTIgaW4gdGhpcyBkb2N1bWVudC4NCg0KDQpNaWtlPiBJ 4oCZbGwgcGxhbiB0byB1cGRhdGUgdGhpcyBzcGVjaWZpY2F0aW9uIG9uY2UgdGhlIGJpcyB2ZXJz aW9ucyBhcmUgUkZDcy4gIEJ1dCB0aGVyZeKAmXMgbm8gbmVlZCB0byB0YWtlIGEgbm9ybWF0aXZl IGRlcGVuZGVuY2Ugb24gdGhlIG5ldyB2ZXJzaW9ucywgYXMgdGhpcyBzcGVjIHVzZXMgbm90aGlu ZyBuZXcgYmVpbmcgaW50cm9kdWNlZCBieSB0aGVtLg0KDQoyMS4gIEdpdmVuIHRoYXQgdGhlIGFs Z29yaXRobXMgaW4gc2VjdGlvbiAyIGFyZSBhbHJlYWR5IGRlZmluZWQgaW4gSk9TRSwgdGhlcmUg c2hvdWxkIGJlIHRleHQgdGhhdCB0aGlzIHNlY3Rpb24gb25seSBhcHBsaWVzIHRvIENPU0Ugc28g dGhlcmUgaXMgbm8gY29uZnVzaW9uLg0KDQoNCk1pa2U+IFN1cmUNCg0KSmltDQoNCg0KRnJvbTog Q09TRSA8Y29zZS1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpjb3NlLWJvdW5jZXNAaWV0Zi5vcmc+ PiBPbiBCZWhhbGYgT2YgaXZheWxvIHBldHJvdg0KU2VudDogVHVlc2RheSwgU2VwdGVtYmVyIDE3 LCAyMDE5IDc6MzEgQU0NClRvOiBjb3NlIDxjb3NlQGlldGYub3JnPG1haWx0bzpjb3NlQGlldGYu b3JnPj4NClN1YmplY3Q6IFtDT1NFXSDwn5SUIFdHTEMgb2YgZHJhZnQtaWV0Zi1jb3NlLXdlYmF1 dGhuLWFsZ29yaXRobXMNCg0KRGVhciBhbGwsDQoNClRoaXMgbWVzc2FnZSBzdGFydHMgdGhlIFdv cmtpbmcgR3JvdXAgTGFzdCBDYWxsIG9uIHRoZSBkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxn b3JpdGhtcyBbMV0uDQoNClRoZSB3b3JraW5nIGdyb3VwIGxhc3QgY2FsbCB3aWxsIHJ1biBmb3Ig Kip0d28gd2Vla3MqKiwgZW5kaW5nIG9uDQpPY3RvYmVyIDEsIDIwMTkuDQoNClBsZWFzZSByZXZp ZXcgYW5kIHNlbmQgYW55IGNvbW1lbnRzIG9yIGZlZWRiYWNrIHRvIHRoZSB3b3JraW5nIGdyb3Vw LiBFdmVuIGlmIHlvdXIgZmVlZGJhY2sgaXMgInRoaXMgaXMgcmVhZHkiLCBwbGVhc2UgbGV0IHVz IGtub3cuDQoNClRoYW5rIHlvdSwNCg0KLSBNYXR0aGV3IGFuZCBJdmF5bG8NCkNPU0UgQ2hhaXJz DQoNClsxXTogaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1jb3Nl LXdlYmF1dGhuLWFsZ29yaXRobXMvPGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24u b3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRmRhdGF0cmFja2VyLmlldGYub3JnJTJGZG9j JTJGZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXMlMkYmZGF0YT0wMiU3QzAxJTdD TWljaGFlbC5Kb25lcyU0MG1pY3Jvc29mdC5jb20lN0M2MjRlZDM5ZDQyN2U0MGY1ZmRlZTA4ZDc1 NjhhNTUzNSU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2Mzcw NzMwMjQ0NTQwODg2NTkmc2RhdGE9WW9aYjZERGN3V1pBV3FMYmZ1U2hHd2U4Rzd0VE1LYkhlUzdn SkJIMTclMkZVJTNEJnJlc2VydmVkPTA+DQo= --_000_BYAPR00MB05676A4980B07DB87CDE5831F56A0BYAPR00MB0567namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpWZXJkYW5hOw0KCXBhbm9zZS0xOjIgMTEg NiA0IDMgNSA0IDQgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlNlZ29lIFVJIEVt b2ppIjsNCglwYW5vc2UtMToyIDExIDUgMiA0IDIgNCAyIDIgMzt9DQpAZm9udC1mYWNlDQoJe2Zv bnQtZmFtaWx5OkNvbnNvbGFzOw0KCXBhbm9zZS0xOjIgMTEgNiA5IDIgMiA0IDMgMiA0O30NCi8q IFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNv Tm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6 ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBz cGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsN Cgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxp bmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRl eHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcC5Nc29QbGFpblRleHQsIGxpLk1zb1BsYWluVGV4 dCwgZGl2Lk1zb1BsYWluVGV4dA0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxl LWxpbms6IlBsYWluIFRleHQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4w MDAxcHQ7DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1z ZXJpZjt9DQpwcmUNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJI VE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAw MDFwdDsNCglmb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0K cC5Nc29MaXN0UGFyYWdyYXBoLCBsaS5Nc29MaXN0UGFyYWdyYXBoLCBkaXYuTXNvTGlzdFBhcmFn cmFwaA0KCXttc28tc3R5bGUtcHJpb3JpdHk6MzQ7DQoJbWFyZ2luLXRvcDowaW47DQoJbWFyZ2lu LXJpZ2h0OjBpbjsNCgltYXJnaW4tYm90dG9tOjBpbjsNCgltYXJnaW4tbGVmdDouNWluOw0KCW1h cmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJD YWxpYnJpIixzYW5zLXNlcmlmO30NCnNwYW4uSFRNTFByZWZvcm1hdHRlZENoYXINCgl7bXNvLXN0 eWxlLW5hbWU6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5 OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQiOw0KCWZvbnQtZmFtaWx5OiJD b3VyaWVyIE5ldyI7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFs MA0KCXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJn aW4tbGVmdDowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs c2Fucy1zZXJpZjt9DQpzcGFuLlBsYWluVGV4dENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IlBsYWlu IFRleHQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJQ bGFpbiBUZXh0IjsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkVt YWlsU3R5bGUyMw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2Fs aWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCnNwYW4uRW1haWxTdHlsZTI0 DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5z LXNlcmlmOw0KCWNvbG9yOiMwMDIwNjA7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjUNCgl7bXNvLXN0eWxl LXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29s b3I6d2luZG93dGV4dDt9DQpzcGFuLmdyZXkNCgl7bXNvLXN0eWxlLW5hbWU6Z3JleTt9DQpzcGFu LkVtYWlsU3R5bGUyNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToi Q2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjojMDAyMDYwO30NCnNwYW4uRW1haWxTdHlsZTI5 DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJp IixzYW5zLXNlcmlmOw0KCWNvbG9yOiMwMDIwNjA7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0 eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2Vj dGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEu MGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBE ZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNvLWxpc3QtaWQ6MzQ2MDk4NDUwOw0KCW1zby1s aXN0LXRlbXBsYXRlLWlkczotNDQzNjcyNDA0O30NCkBsaXN0IGwwOmxldmVsMQ0KCXttc28tbGV2 ZWwtc3RhcnQtYXQ6MjsNCgltc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCglt c28tbGV2ZWwtdGFiLXN0b3A6LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsMg0KCXttc28tbGV2ZWwtbnVt YmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlz dCBsMDpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNv LWxldmVsLXRhYi1zdG9wOjEuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN Cgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDoyLjBpbjsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0 IGwwOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28t bGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuMGluOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3Qg bDA6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1s ZXZlbC10YWItc3RvcDozLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ dGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVy LWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBs MDpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxl dmVsLXRhYi1zdG9wOjQuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0 ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDENCgl7bXNvLWxpc3QtaWQ6NDYwNTM4MTUxOw0K CW1zby1saXN0LXRlbXBsYXRlLWlkczoxODI4NzI4Mzk0O30NCkBsaXN0IGwxOmxldmVsMQ0KCXtt c28tbGV2ZWwtc3RhcnQtYXQ6MzsNCgltc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBl cjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVsMg0KCXttc28tbGV2 ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9 DQpAbGlzdCBsMTpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7 DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246 bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDE6bGV2ZWw0DQoJe21zby1sZXZl bC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDoyLjBpbjsN Cgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30N CkBsaXN0IGwxOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsN Cgltc28tbGV2ZWwtdGFiLXN0b3A6Mi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMTpsZXZlbDYNCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuMGluOw0K CW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0K QGxpc3QgbDE6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0K CW1zby1sZXZlbC10YWItc3RvcDozLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxl ZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVsOA0KCXttc28tbGV2ZWwt bnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpA bGlzdCBsMTpsZXZlbDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOjQuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDINCgl7bXNvLWxpc3QtaWQ6NTg4Mjc0 Njg0Ow0KCW1zby1saXN0LXR5cGU6aHlicmlkOw0KCW1zby1saXN0LXRlbXBsYXRlLWlkczotMjAx Mjk2MDYwNiAtMTk2NjcxODEzMCA2NzY5ODcxMyA2NzY5ODcxNSA2NzY5ODcwMyA2NzY5ODcxMyA2 NzY5ODcxNSA2NzY5ODcwMyA2NzY5ODcxMyA2NzY5ODcxNTt9DQpAbGlzdCBsMjpsZXZlbDENCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRleHQ6IiUx XCkiOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDI6bGV2ZWwyDQoJe21zby1s ZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLWxvd2VyOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25l Ow0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47 fQ0KQGxpc3QgbDI6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OnJvbWFuLWxvd2Vy Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246 cmlnaHQ7DQoJdGV4dC1pbmRlbnQ6LTkuMHB0O30NCkBsaXN0IGwyOmxldmVsNA0KCXttc28tbGV2 ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4 dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwyOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZv cm1hdDphbHBoYS1sb3dlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwt bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwyOmxl dmVsNg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpyb21hbi1sb3dlcjsNCgltc28tbGV2ZWwt dGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOnJpZ2h0Ow0KCXRleHQt aW5kZW50Oi05LjBwdDt9DQpAbGlzdCBsMjpsZXZlbDcNCgl7bXNvLWxldmVsLXRhYi1zdG9wOm5v bmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVp bjt9DQpAbGlzdCBsMjpsZXZlbDgNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtbG93 ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlv bjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMjpsZXZlbDkNCgl7bXNvLWxl dmVsLW51bWJlci1mb3JtYXQ6cm9tYW4tbG93ZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpyaWdodDsNCgl0ZXh0LWluZGVudDotOS4wcHQ7 fQ0KQGxpc3QgbDMNCgl7bXNvLWxpc3QtaWQ6OTcxMTc5ODU2Ow0KCW1zby1saXN0LXRlbXBsYXRl LWlkczoyMDk3Mjk4MjgyO30NCkBsaXN0IGwzOmxldmVsMQ0KCXttc28tbGV2ZWwtc3RhcnQtYXQ6 NDsNCgltc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFi LXN0b3A6LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRl bnQ6LS4yNWluO30NCkBsaXN0IGwzOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDph bHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47DQoJbXNvLWxldmVsLW51bWJl ci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMzpsZXZlbDMN Cgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1z dG9wOjEuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotLjI1aW47fQ0KQGxpc3QgbDM6bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFs cGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDoyLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwzOmxldmVsNQ0K CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6Mi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0uMjVpbjt9DQpAbGlzdCBsMzpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxw aGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuMGluOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDM6bGV2ZWw3DQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3Rv cDozLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LS4yNWluO30NCkBsaXN0IGwzOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBo YS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC4waW47DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMzpsZXZlbDkNCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9w OjQuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot LjI1aW47fQ0KQGxpc3QgbDQNCgl7bXNvLWxpc3QtaWQ6MTQxNzI0MjUzMjsNCgltc28tbGlzdC10 ZW1wbGF0ZS1pZHM6LTEyMjQ1ODA2MTY7fQ0KQGxpc3QgbDQ6bGV2ZWwxDQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDouNWluOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxp c3QgbDQ6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1z by1sZXZlbC10YWItc3RvcDoxLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGw0OmxldmVsMw0KCXttc28tbGV2ZWwtbnVt YmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6MS41aW47DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlz dCBsNDpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNv LWxldmVsLXRhYi1zdG9wOjIuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN Cgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDQ6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDoyLjVpbjsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0 IGw0OmxldmVsNg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28t bGV2ZWwtdGFiLXN0b3A6My4waW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0K CXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsNDpsZXZlbDcNCgl7bXNvLWxldmVsLW51bWJl ci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuNWluOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3Qg bDQ6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1s ZXZlbC10YWItc3RvcDo0LjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJ dGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGw0OmxldmVsOQ0KCXttc28tbGV2ZWwtbnVtYmVy LWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6NC41aW47DQoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpvbA0KCXtt YXJnaW4tYm90dG9tOjBpbjt9DQp1bA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQotLT48L3N0eWxl PjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIg c3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48 eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQi IGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+ DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNs YXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNv bG9yOiMwMDIwNjAiPlRoZXNlIGlzc3VlIHJlc29sdXRpb25zIGhhdmUgYmVlbiBpbmNvcnBvcmF0 ZWQgaW4NCjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNv c2Utd2ViYXV0aG4tYWxnb3JpdGhtcy0wMiI+aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2Ry YWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zLTAyPC9hPi4mbmJzcDsgVGhhbmtzIGFn YWluIGZvciB5b3VyIHVzZWZ1bCByZXZpZXchPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjoj MDAyMDYwIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgLS0gTWlrZTxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xv cjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4w cHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+RnJvbTo8L2I+IE1pa2Ug Sm9uZXMgPGJyPg0KPGI+U2VudDo8L2I+IFR1ZXNkYXksIE9jdG9iZXIgMjIsIDIwMTkgOTowMyBB TTxicj4NCjxiPlRvOjwvYj4gSmltIFNjaGFhZCAmbHQ7aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbSZn dDs7ICdjb3NlJyAmbHQ7Y29zZUBpZXRmLm9yZyZndDs8YnI+DQo8Yj5DYzo8L2I+IGRyYWZ0LWll dGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zQGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+ IFJFOiBbQ09TRV0gPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1NlZ29lIFVJIEVtb2pp JnF1b3Q7LHNhbnMtc2VyaWYiPg0KJiMxMjgyNzY7PC9zcGFuPiBXR0xDIG9mIGRyYWZ0LWlldGYt Y29zZS13ZWJhdXRobi1hbGdvcml0aG1zPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+VGhhbmtzIGZvciB5b3VyIHJlcGxp ZXMsIEppbS4mbmJzcDsgTXkgYWRkaXRpb25hbCByZXBsaWVzIGFyZSBwcmVmaXhlZCBieSDigJw8 L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPk1pa2UyJmd0Ozwvc3Bhbj48c3BhbiBz dHlsZT0iY29sb3I6IzAwMjA2MCI+4oCdLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAw MjA2MCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IC0tIE1pa2U8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29s b3I6IzAwMjA2MCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXYgc3R5 bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMu MHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPkZyb206PC9iPiBKaW0g U2NoYWFkICZsdDs8YSBocmVmPSJtYWlsdG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbSI+aWV0ZkBh dWd1c3RjZWxsYXJzLmNvbTwvYT4mZ3Q7DQo8YnI+DQo8Yj5TZW50OjwvYj4gTW9uZGF5LCBPY3Rv YmVyIDIxLCAyMDE5IDU6NTQgUE08YnI+DQo8Yj5Ubzo8L2I+IE1pa2UgSm9uZXMgJmx0OzxhIGhy ZWY9Im1haWx0bzpNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb20iPk1pY2hhZWwuSm9uZXNAbWlj cm9zb2Z0LmNvbTwvYT4mZ3Q7OyAnY29zZScgJmx0OzxhIGhyZWY9Im1haWx0bzpjb3NlQGlldGYu b3JnIj5jb3NlQGlldGYub3JnPC9hPiZndDs8YnI+DQo8Yj5DYzo8L2I+IDxhIGhyZWY9Im1haWx0 bzpkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtc0BpZXRmLm9yZyI+ZHJhZnQtaWV0 Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXNAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8 L2I+IFJFOiBbQ09TRV0gPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1NlZ29lIFVJIEVt b2ppJnF1b3Q7LHNhbnMtc2VyaWYiPg0KJiMxMjgyNzY7PC9zcGFuPiBXR0xDIG9mIGRyYWZ0LWll dGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRl ci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxiPkZyb206PC9iPiBNaWtlIEpvbmVzICZsdDs8YSBocmVmPSJt YWlsdG86TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tIj5NaWNoYWVsLkpvbmVzQG1pY3Jvc29m dC5jb208L2E+Jmd0Ow0KPGJyPg0KPGI+U2VudDo8L2I+IE1vbmRheSwgT2N0b2JlciAyMSwgMjAx OSA1OjAwIFBNPGJyPg0KPGI+VG86PC9iPiBKaW0gU2NoYWFkICZsdDs8YSBocmVmPSJtYWlsdG86 aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbSI+aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbTwvYT4mZ3Q7OyAn Y29zZScgJmx0OzxhIGhyZWY9Im1haWx0bzpjb3NlQGlldGYub3JnIj5jb3NlQGlldGYub3JnPC9h PiZndDs8YnI+DQo8Yj5DYzo8L2I+IDxhIGhyZWY9Im1haWx0bzpkcmFmdC1pZXRmLWNvc2Utd2Vi YXV0aG4tYWxnb3JpdGhtc0BpZXRmLm9yZyI+ZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29y aXRobXNAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJFOiBbQ09TRV0gPHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1NlZ29lIFVJIEVtb2ppJnF1b3Q7LHNhbnMtc2VyaWYi Pg0KJiMxMjgyNzY7PC9zcGFuPiBXR0xDIG9mIGRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdv cml0aG1zPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iY29sb3I6IzAwMjA2MCI+VGhhbmtzIGZvciB5b3VyIHJldmlldywgSmltLiZuYnNwOyBSZXNw b25zZXMgYXJlIGlubGluZSwgcHJlZml4ZWQgYnkg4oCcPC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xv cjojMDBCMDUwIj5NaWtlJmd0O+KAnS48L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAi PjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IC0tIE1pa2U8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10 b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxiPkZyb206PC9iPiBKaW0gU2NoYWFkICZsdDs8YSBocmVmPSJtYWls dG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbSI+aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbTwvYT4mZ3Q7 DQo8YnI+DQo8Yj5TZW50OjwvYj4gVHVlc2RheSwgU2VwdGVtYmVyIDE3LCAyMDE5IDY6NDYgUE08 YnI+DQo8Yj5Ubzo8L2I+ICdjb3NlJyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmNvc2VAaWV0Zi5vcmci PmNvc2VAaWV0Zi5vcmc8L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj4gPGEgaHJlZj0ibWFpbHRvOmRy YWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zQGlldGYub3JnIj5kcmFmdC1pZXRmLWNv c2Utd2ViYXV0aG4tYWxnb3JpdGhtc0BpZXRmLm9yZzwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj4g UkU6IFtDT1NFXSA8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkgRW1vamkm cXVvdDssc2Fucy1zZXJpZiI+DQomIzEyODI3Njs8L3NwYW4+IFdHTEMgb2YgZHJhZnQtaWV0Zi1j b3NlLXdlYmF1dGhuLWFsZ29yaXRobXM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPkkgc3RhcnQgdGhpcyByZXZpZXcgYnkgY29weWluZyBmb3J3YXJkIGFsbCBvZiBteSBj b21tZW50cyBvbiBkcmFmdC1qb25lcy1jb3NlLWFkZGl0aW9uYWwtYWxnb3JpdGhtcy0wMDxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48cz4xLiZuYnNwOyBJIHdhcyBzdXJwcmlzZWQgdGhhdCB0aGVy ZSBhcmUgdHdvIGFsZ29yaXRobXMgc3RpbGwgaW4gdGhlIFdlYkF1dGhuIGRvY3VtZW50IHRoYXQg YXJlIG5vdCBpbmNsdWRlZCBoZXJlLiZuYnNwOyBJcyB0aGF0IGludGVudGlvbmFsIGFuZCB3aGF0 IGlzIHRoZSBwbGFuIGZvcndhcmQgZm9yIHRoZW0/PC9zPiBUaGlzIG9uZSB3YXMgYWRkcmVzc2Vk PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzPjIuJm5ic3A7IFRoZSB0aXRsZSBvZiB0 aGUgZG9jdW1lbnQgaXMgbm90IGRlc2NyaXB0aXZlIGluIHRlcm1zIG9mIGEgc3RhbmRhbG9uZSBz ZW50ZW5jZSBvbiB3aGF0IHRoaXMgZG9jdW1lbnQgaXMgZG9pbmcuJm5ic3A7IEl0IHNob3VsZCBi ZSBtb3JlIHNwZWNpZmljIG9uIHRoZSBhbGdvcml0aG1zLjwvcz4mbmJzcDsgVGhlIG5ldyB0aXRs ZSBpcyBmaW5lIGV4Y2VwdCBmb3IgdGhlIGZhY3QgdGhhdCBXZWJBdXRobiBpcyBub3QNCiBleHBh bmRlZCB0byBhbnl0aGluZy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+My4mbmJzcDsg QWJzdHJhY3Q6Jm5ic3A7IEEgbGlzdCBvZiB0aGUgYWxnb3JpdGhtcyBiZWluZyBwcm9jZXNzZWQg aW4gdGhpcyBkb2N1bWVudCB3b3VsZCBiZSByZWFzb25hYmxlLiZuYnNwOyBCYXNlZCBvbiB0aGUg Y3VycmVudCB0ZXh0LCB0aGUgYWJzdHJhY3Qgd291bGQgbmVlZCB0byBiZSByZS13cml0dGVuIGFz IHNvb24gYXMgdGhlIGFsZ29yaXRobXMgYXJlIHJlZ2lzdGVyZWQgYmVjYXVzZSB0aGV5IHdvdWxk IHRoZW4gYmUgcmVnaXN0ZXJlZA0KIGFuZCB0aHVzIHRoZSBzcGVjaWZpY2F0aW9uIGlzIG5vdCBu ZWNlc3NhcnkuJm5ic3A7IEl0IHdvdWxkIGFsc28gYmUgc2xpZ2h0bHkgb2RkIGluIHRoZSBldmVu dCB0aGF0IHRoZSBDVEFQIG9yIFdlYkF1dGhuIHByb3RvY29scyBhcmUgdXBkYXRlZCB0byBhZGQg bmV3IGFsZ29yaXRobXMgYXMgdGhleSB3b3VsZCBub3QgYmUgaW4gdGhpcyBkb2N1bWVudC4mbmJz cDsgKFNlZSBpc3N1ZSAjMS4pJm5ic3A7DQo8Yj5ObyBDaGFuZ2U8bzpwPjwvbzpwPjwvYj48L3A+ DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4g c3R5bGU9ImNvbG9yOiMwMEIwNTAiPk1pa2UmZ3Q7IFVuZGVyc3Rvb2QuJm5ic3A7IEnigJlsbCBy ZXdvcmQgc28gdGhhdCB0aGUgdGV4dCByZW1haW5zIGNvcnJlY3QgYWZ0ZXIgdGhlIElBTkEgcmVn aXN0cmF0aW9ucyBoYXZlIGJlZW4gcGVyZm9ybWVkLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij40LiZuYnNwOyBT ZWN0aW9uIDE6Jm5ic3A7IFNlZSBhYnN0cmFjdCBjb21tZW50LiZuYnNwOyA8Yj5ObyBjaGFuZ2U8 bzpwPjwvbzpwPjwvYj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0i Y29sb3I6IzAwMjA2MCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPk1pa2UmZ3Q7IERpdHRvPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9 ImNvbG9yOiMwMDIwNjAiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPjUuJm5ic3A7IFNlY3Rpb24gMjogVGhlIHJlY29tbWVuZGVkIGNvbHVtbiBu ZWVkcyB0byBiZSBhZGRlZCB0byB0aGUgdGFibGUuJm5ic3A7DQo8Yj5ObyBjaGFuZ2U8bzpwPjwv bzpwPjwvYj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6 IzAwMjA2MCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPk1pa2UmZ3Q7IEkgYXNzdW1lIHRoZSBj b2x1bW4geW914oCZcmUgdGFsa2luZyBhYm91dCBpcyB0aGUgb25lIHJlcXVlc3RlZCBpbiB0aGUg bmV4dCBjb21tZW50LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRl eHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+Ni4mbmJz cDsgU2VjdGlvbiAyOiZuYnNwOyBUaGUgZGlzY3Vzc2lvbiBvbiB3aGF0IGlzIGFuZCBpcyBub3Qg cmVjb21tZW5kZWQgYW5kIHdoeSBiZWxvbmdzIGluIHRoaXMgc2VjdGlvbiBub3QgaW4gdGhlIHNl Y3VyaXR5IGNvbnNpZGVyYXRpb25zLiZuYnNwOw0KPGI+Tm8gY2hhbmdlPC9iPjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxz cGFuIHN0eWxlPSJjb2xvcjojMDBCMDUwIj5NaWtlJmd0OyBPSywgSSBjYW4gYWRkIGFuIOKAnElt cGxlbWVudGF0aW9uIFJlcXVpcmVtZW50c+KAnSBjb2x1bW4sIHBhcmFsbGVsaW5nIHRoZSB0cmVh dG1lbnQgaW48L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPg0KPC9zcGFuPjxhIGhy ZWY9Imh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1o dHRwcyUzQSUyRiUyRnRvb2xzLmlldGYub3JnJTJGaHRtbCUyRnJmYzc1MTglMjNzZWN0aW9uLTMu MSZhbXA7ZGF0YT0wMiU3QzAxJTdDTWljaGFlbC5Kb25lcyU0MG1pY3Jvc29mdC5jb20lN0M2MjRl ZDM5ZDQyN2U0MGY1ZmRlZTA4ZDc1NjhhNTUzNSU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2Qw MTFkYjQ3JTdDMSU3QzAlN0M2MzcwNzMwMjQ0NTQwNjg2NzMmYW1wO3NkYXRhPW9hRDJycXhXVUY4 eTM1RiUyQldSZVhSUkQyTFY0aUN0SSUyRnpwa2p3REJOem1rJTNEJmFtcDtyZXNlcnZlZD0wIj5o dHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvcmZjNzUxOCNzZWN0aW9uLTMuMTwvYT48c3BhbiBz dHlsZT0iY29sb3I6IzAwQjA1MCI+LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij43LiZuYnNwOyBTZWN0aW9uIDI6 IFlvdSBhcmUgbWlzc2luZyBzb21lIGNoZWNrcyB0aGF0IHNob3VsZCBiZSBkb25lIG9uIHNpZ25p bmcgYW5kIHZlcmlmaWNhdGlvbi4mbmJzcDsgTG9vayBhdCB0aGUgc3RhbmRhcmQgdGV4dCBhdCB0 aGUgZW5kIG9mIHNlY3Rpb25zIGluIFJGQyA4MTUyIGZvciBhIHBhdHRlcm4uJm5ic3A7IFlvdSBt aWdodCBhbHNvIHdhbnQgdG8gYWRkIGEgY2hlY2sgb24gbGVuZ3RocyBvZiBrZXlzIGJvdGggZm9y DQogYSBtYXhpbXVtIGFuZCBhIG1pbmltdW0gbGVuZ3RoLiZuYnNwOyA8Yj5ObyBjaGFuZ2U8L2I+ PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUw Ij5NaWtlJmd0OyBLZXkgc2l6ZSBjb25zaWRlcmF0aW9ucyBmb3IgdGhlIFJTQSBhbGdvcml0aG1z IGFyZSBhbHJlYWR5IGNvdmVyZWQgaW4NCjwvc3Bhbj48YSBocmVmPSJodHRwczovL25hbTA2LnNh ZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZ0b29scy5p ZXRmLm9yZyUyRmh0bWwlMkZkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtcy0wMSUy M3NlY3Rpb24tNS4xJmFtcDtkYXRhPTAyJTdDMDElN0NNaWNoYWVsLkpvbmVzJTQwbWljcm9zb2Z0 LmNvbSU3QzYyNGVkMzlkNDI3ZTQwZjVmZGVlMDhkNzU2OGE1NTM1JTdDNzJmOTg4YmY4NmYxNDFh ZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzA3MzAyNDQ1NDA3ODY2NyZhbXA7c2RhdGE9 OFYzUnFnME5CaHRrT25CeHFnZHhKQjdETEVZaXRKN3ZIUmRjcGszM0o2dyUzRCZhbXA7cmVzZXJ2 ZWQ9MCI+aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtY29zZS13ZWJhdXRo bi1hbGdvcml0aG1zLTAxI3NlY3Rpb24tNS4xPC9hPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUw Ij4uJm5ic3A7DQogRm9yIEVTMjU2SywgSSBjYW4gc2F5IHRoYXQgdGhlIFggYW5kIFkgdmFsdWVz IGZvciB0aGUgcHVibGljIGtleSBtdXN0IGJvdGggYmUgZXhhY3RseSAyNTYgYml0cy4mbmJzcDsg V2hhdCBhcmUgdGhlIHNwZWNpZmljIGNoZWNrcyB5b3Ugd2FudGVkIGFkZGVkPyZuYnNwOyBJIGNv dWxkbuKAmXQgdGVsbCB3aGljaCBzZWN0aW9ucyBvZiBSRkMgODE1MiB5b3Ugd2VyZSByZWZlcnJp bmcgdG8uJm5ic3A7IEFsc28sIG5vdGUgdGhhdCBiZXR3ZWVuIGRyYWZ0LWpvbmVzLTAwIGFuZCBk cmFmdC1pZXRmLTAxLA0KIHRoZSBkZXNjcmlwdGlvbnMgb2YgdGhlIHVzZSBvZiBoYXNoIGZ1bmN0 aW9ucyB3ZXJlIGJlZWZlZCB1cCwgaW4gcmVzcG9uc2UgdG8gb3RoZXIgY29tbWVudHMgcmVjZWl2 ZWQuPC9zcGFuPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij5XaGVuIHVzaW5nIGEgQ09TRSBrZXkgZm9yIHRoaXMg YWxnb3JpdGhtLCB0aGUgZm9sbG93aW5nIGNoZWNrcyBhcmU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IG1hZGU6PG86cD48 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJz cDsmbmJzcDsgbyZuYnNwOyBUaGUgJ2t0eScgZmllbGQgTVVTVCBiZSBwcmVzZW50LCBhbmQgaXQg TVVTVCBiZSAnRUMyJy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBvJm5ic3A7IElmIHRoZSAnYWxnJyBmaWVsZCBp cyBwcmVzZW50LCBpdCBNVVNUIG1hdGNoIHRoZSBFQ0RTQSBzaWduYXR1cmU8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IGFsZ29yaXRobSBiZWluZyB1c2VkLjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IG8mbmJz cDsgSWYgdGhlICdrZXlfb3BzJyBmaWVsZCBpcyBwcmVzZW50LCBpdCBNVVNUIGluY2x1ZGUgJ3Np Z24nIHdoZW48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGNyZWF0aW5nIGFuIEVDRFNBIHNp Z25hdHVyZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBvJm5ic3A7IElmIHRoZSAna2V5X29wcycgZmllbGQgaXMg cHJlc2VudCwgaXQgTVVTVCBpbmNsdWRlICd2ZXJpZnknIHdoZW48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7IHZlcmlmeWluZyBhbiBFQ0RTQSBzaWduYXR1cmUuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZTImZ3Q7 IE9LPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij44LiZuYnNwOyBTZWN0aW9u IDM6Jm5ic3A7IFRoaXMgc2hvdWxkIG5vdCBiZSB0aGUgZmlyc3QgdXNlIG9mIEpPU0UgYW5kIENP U0UgYW5kIHRoZXJlZm9yZSB0aGUgZXhwYW5zaW9ucyBoZXJlIG1ha2Ugbm8gc2Vuc2UuJm5ic3A7 IFRoYXQgc2hvdWxkIGJlIGluIHRoZSBpbnRyb2R1Y3Rpb24uJm5ic3A7DQo8Yj5ObyBjaGFuZ2U8 L2I+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBC MDUwIj5NaWtlJmd0OyBJ4oCZbGwgbG9vayBpbnRvIGV4cGFuZGluZyBhYmJyZXZpYXRpb25zIG9u IGZpcnN0IHVzZXMgYW5kIG5vdCBvbiBzdWJzZXF1ZW50IHVzZXMuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxz PjkuIFNlY3Rpb24gMy4xOiZuYnNwOyBJIGhhdmUgb25seSByYXJlbHkgc2VlbiB0aGlzIGN1cnZl IGFzIFAtMjU2SywgaXQgaXMgYWxtb3N0IGFsd2F5cyByZWZlcnJlZCB0byBhcyBzZWNwMjU2azEu Jm5ic3A7IEkgd291bGQgYXNrIHRoYXQgdGhpcyBiZSBjaGFuZ2VkIGluIHRoZSBDT1NFIHJlcHJl c2VudGF0aW9uLiZuYnNwOyBJIGFtIGFnbm9zdGljIGFib3V0IHdoYXQgc2hvdWxkIGJlIGluIHRo ZSBKT1NFIHJlcHJlc2VudGF0aW9uLg0KPC9zPiZuYnNwO0ZpeGVkPG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29QbGFpblRleHQiPjEwLiBTZWN0aW9uIDMuMTombmJzcDsgSSBkb24ndCB1bmRlcnN0YW5kIHRo ZSByZWFzb24gZm9yIHRoZSBsYXN0IHBhcmFncmFwaCBpbiB0aGUgc2VjdGlvbi4mbmJzcDsgSXQg c2VlbXMgdG8gbWUgdGhhdCB0aGlzIHNob3VsZCBqdXN0IHJlZmVyIHRvIGFsbCBvZiB0aGUgaXRl bXMgZGVmaW5lZCBmb3IgRUMyIGluIENPU0UuJm5ic3A7DQo8Yj5ObyBDaGFuZ2U8L2I+PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUwIj5NaWtl Jmd0OyBPSzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+MTEuIFNlY3Rpb24g My4xOiZuYnNwOyBJcyB0aGVyZSBhIHJlY29tbWVuZGF0aW9uIG9uIHVzaW5nIGNvbXByZXNzZWQg dnMgbm9uLWNvbXByZXNzZWQgcG9pbnRzPyZuYnNwOw0KPGI+Tm8gY2hhbmdlPC9iPjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZn dDsgSSB3aWxsIHN0YXRlIHRoYXQgdW5jb21wcmVzc2VkIHBvaW50IHJlcHJlc2VudGF0aW9ucyBh cmUgdG8gYmUgdXNlZCBmb3IgSldLcywgYXMgYSBjb21wcmVzc2VkIHJlcHJlc2VudGF0aW9uIGZv ciBrZXkgdHlwZSDigJxFQ+KAnSBpcyBub3QgZGVmaW5lZC4mbmJzcDsgQW5kIEkgd2lsbCBzdGF0 ZSB0aGF0IHRoZSB1bmNvbXByZXNzZWQgbXVzdCBhbHNvIGJlIHVzZWQNCiBmb3IgQ1dLcywgYXMg SSBkb27igJl0IGtub3cgdGhhdCB0aGUgR2Fsb2lzIHnCsiA9IHjCsyAmIzQzOyA3IGZpbml0ZSBm aWVsZCBmb3JtIHVzZWQgd2l0aCBzZWNwMjU2azEgaXMgYW1lbmFibGUgdG8gY29tcHJlc3Npb24u Jm5ic3A7IChIb3dldmVyLCBpZiB0aGUgQ1JGRyBvciBvdGhlciBleHBlcnRzIHRlbGwgbWUgdGhh dCBpdCBpcywgSSB3aWxsIGFsc28gYWxsb3cgZm9yIHRoZSBjb21wcmVzc2VkIHJlcHJlc2VudGF0 aW9uIHdpdGggQ09TRS4pPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48YSBo cmVmPSJodHRwczovL2JpdGNvaW4uc3RhY2tleGNoYW5nZS5jb20vcXVlc3Rpb25zLzc2MTgxL2Jp dGNvaW4tcHVibGljLWtleXMtZnJvbS11bmNvbXByZXNzZWQtdG8tY29tcHJlc3NlZC12ZXJzaW9u LXdpdGgtY29kZS1zYW1wbGUiPmh0dHBzOi8vYml0Y29pbi5zdGFja2V4Y2hhbmdlLmNvbS9xdWVz dGlvbnMvNzYxODEvYml0Y29pbi1wdWJsaWMta2V5cy1mcm9tLXVuY29tcHJlc3NlZC10by1jb21w cmVzc2VkLXZlcnNpb24td2l0aC1jb2RlLXNhbXBsZTwvYT48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29QbGFpblRleHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0i Y29sb3I6IzAwQjA1MCI+TWlrZTImZ3Q7IE9LLCB0aGVuIEnigJlsbCBhbGxvdyB0aGUgY29tcHJl c3NlZCByZXByZXNlbnRhdGlvbiBmb3IgQ09TRS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+MTIuJm5ic3A7IFNl Y3Rpb24gMy4xOiZuYnNwOyBZb3UgbmVlZCB0byB0YWxrIGFib3V0IGlmIHRoaXMgaXMgZ29pbmcg dG8gYmUgSUVURiByZWNvbW1lbmRlZCBvciBub3QuJm5ic3A7Jm5ic3A7IChBbmQgd2h5KSZuYnNw Ow0KPGI+Tm8gY2hhbmdlPC9iPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4 dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBz dHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZndDsgPC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8vbmFt MDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnRv b2xzLmlldGYub3JnJTJGaHRtbCUyRmRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1z LTAxJTIzc2VjdGlvbi00LjEmYW1wO2RhdGE9MDIlN0MwMSU3Q01pY2hhZWwuSm9uZXMlNDBtaWNy b3NvZnQuY29tJTdDNjI0ZWQzOWQ0MjdlNDBmNWZkZWUwOGQ3NTY4YTU1MzUlN0M3MmY5ODhiZjg2 ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MDczMDI0NDU0MDc4NjY3JmFtcDtz ZGF0YT1wa1JWYXZEUlpkZVdkZ1dXNzVZeE9kNU9YUVdxUHFDNiUyRkp5VE9hNUhvZUUlM0QmYW1w O3Jlc2VydmVkPTAiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNvc2Ut d2ViYXV0aG4tYWxnb3JpdGhtcy0wMSNzZWN0aW9uLTQuMTwvYT48c3BhbiBzdHlsZT0iY29sb3I6 IzAwQjA1MCI+DQogaGFzIGl0IGJlaW5nIHJlY29tbWVuZGVkLiZuYnNwOyBJIHdpbGwgZGVzY3Jp YmUgd2h5IGluIHRoZSBuZXh0IHZlcnNpb24sIGFzIHJlcXVlc3RlZC48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29QbGFpblRleHQiPjEzLiZuYnNwOyBTZWN0aW9uIDMuMjombmJzcDsgSSBkb24n dCB1bmRlcnN0YW5kIHdoYXQgdGhpcyBzZWN0aW9uIGlzIGRvaW5nLiZuYnNwOyBJZiB5b3UgYXJl IHJlYWxseSBkZWZpbmluZyBhIG5ldyBzaWduYXR1cmUgYWxnb3JpdGhtLCB0aGVuIHRoYXQgc2hv dWxkIGJlIG5vdGVkIGFzIHBhcnQgb2YgdGhlIHJlcXVpcmVtZW50cyBpbiBzZWN0aW9uIDMuMSBv biB0aGUga2V5LiZuYnNwOyBJZiB5b3UgYXJlIG5vdCBkZWZpbmluZyBhIG5ldw0KIHNpZ25hdHVy ZSBhbGdvcml0aG0gdGhlbiB0aGlzIHNlY3Rpb24gbWFrZXMgemVybyBzZW5zZS4mbmJzcDsgKFlv dSBhcmUgbm90IHNheWluZyB3aGF0IHRoZSBoYXNoIGFsZ29yaXRobSBpcy4pJm5ic3A7IEJvdGgg b3B0aW9ucyBhcmUgcmVhc29uYWJsZS4mbmJzcDsNCjxiPlRoaXMgaXMgcGFydGx5IGRlYWx0IHdp dGg6PG86cD48L286cD48L2I+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6 IzAwQjA1MCI+TWlrZSZndDsgVGhpcyBpcyBpbnRlbnRpb25hbGx5IGV4YWN0bHkgcGFyYWxsZWwg dG8gUkZDIDc1MTgsIHdoaWNoIGRlZmluZXMgdGhlIOKAnEVTMjU24oCdDQo8aT5hbGdvcml0aG0g aWRlbnRpZmllciA8L2k+dG8gYmUgdXNlZCB3aXRoIHRoZSDigJxQLTI1NuKAnSBjdXJ2ZS4mbmJz cDsgSW4gdGhpcyBjYXNlLCBpdCBpcyBkZWZpbmluZyB0aGUg4oCcRVMyNTZL4oCdDQo8aT5hbGdv cml0aG0gaWRlbnRpZmllcjwvaT4gdG8gYmUgdXNlZCB3aXRoIHRoZSDigJxzZWNwMjU2azHigJ0g Y3VydmUuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+W0pM U10gQnV0IHRoYXQgaXMgbm90IHRoZSBkZWNpc2lvbiB0aGF0IHdhcyBtYWRlIGZvciBDT1NFLiZu YnNwOyAmbmJzcDtPbmx5IHRoZSBoYXNoIGFsZ29yaXRobSB3YXMgZml4ZWQuPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHNw YW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPk1pa2UyJmd0OyBUaGUgcGFyYWxsZWwgdHJlYXRtZW50 IGFsc28gd29ya3MgZmluZSBpbiBDT1NFLiZuYnNwOyBPbmUgbXVzdCBvbmx5IHVzZSDigJxzZWNw MjU2azHigJ0gZm9yIHNpZ25pbmcgd2l0aCDigJxFUzI1NkvigJ0gYW5kIG5vdCB3aXRoIG90aGVy IGFsZ29yaXRobSBpZGVudGlmaWVycy4mbmJzcDsgSeKAmWxsIG1ha2UgdGhpcyBjbGVhcmVyIGlu IHRoZSBuZXh0IHZlcnNpb24uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1Bs YWluVGV4dCI+PGI+PG86cD4mbmJzcDs8L286cD48L2I+PC9wPg0KPG9sIHN0eWxlPSJtYXJnaW4t dG9wOjBpbiIgc3RhcnQ9IjEiIHR5cGU9IkEiPg0KPGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBo IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwyIGxldmVsMSBsZm8zIj5TdGVwIDEg aXMgaW5jb3JyZWN0IGluIHRlcm1zIG9mIENPU0UsIGl0IGlzIG5vdCB0aGUgcGF5bG9hZCB0aGF0 IGlzIHNpZ25lZC48bzpwPjwvbzpwPjwvbGk+PC9vbD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNv bG9yOiMwMEIwNTAiPk1pa2UmZ3Q7IEnigJlsbCByZXZpc2UgdGhlIGRlc2NyaXB0aW9uIGhlcmUg dG8gYWxpZ24gd2l0aCBjb3JyZWN0IENPU0UgdGVybWlub2xvZ3kuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8b2wgc3R5 bGU9Im1hcmdpbi10b3A6MGluIiBzdGFydD0iMiIgdHlwZT0iQSI+DQo8bGkgY2xhc3M9Ik1zb0xp c3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDowaW47bXNvLWxpc3Q6bDIgbGV2ZWwxIGxm bzMiPlRoZSBuZXcgc2lnbmF0dXJlIGFsZ29yaXRobSBpcyBiZWluZyBkZWZpbmVkIHdpdGhvdXQg bW90aXZhdGlvbi4mbmJzcDsgVGhlcmUgc2hvdWxkIGJlIHRleHQgZGVzY3JpYmluZyB3aHkgdGhp cyBpcyBFUzI1NksgYW5kIG5vdCBFUzI1NiAoRUNEU0Egd2l0aCBTSEEtMjU2KS4mbmJzcDsgSSBk byBub3RlIHRoYXQgdGhlcmUgbWF5IGJlDQogZGlmZmVyZW50IHRleHQgYmVpbmcgZGVzY3JpYmVk IGhlcmUgZm9yIEpPU0UgdGhhbiBmb3IgQ09TRS48bzpwPjwvbzpwPjwvbGk+PC9vbD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPk1pa2UmZ3Q7IOKAnEVTMjU24oCdIGlzIGRl ZmluZWQgYnkgUkZDIDc1MTggdG8gYmUgYWx3YXlzIHVzZWQgd2l0aCB0aGUgUC0yNTYgY3VydmUu Jm5ic3A7IEEgZGlmZmVyZW50IGFsZ29yaXRobSBpZGVudGlmaWVyIGlzIHRoZXJlZm9yZSByZXF1 aXJlZCB0byB1c2Ugd2l0aCBzZWNwMjU2azEuJm5ic3A7IFRoaXMgaXMgYnkgZGVzaWduLiZuYnNw OyBBbmQgdGhlIHVzZSBvZiBpZGVudGlmaWVycyBpcyBiZWluZw0KIGtlcHQgaW50ZW50aW9uYWxs eSBwYXJhbGxlbCBiZXR3ZWVuIEpPU0UgYW5kIENPU0UuPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8b2wgc3R5bGU9Im1h cmdpbi10b3A6MGluIiBzdGFydD0iMyIgdHlwZT0iQSI+DQo8bGkgY2xhc3M9Ik1zb0xpc3RQYXJh Z3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDowaW47bXNvLWxpc3Q6bDIgbGV2ZWwxIGxmbzMiPlBs ZWFzZSBpbmNsdWRlIHRleHQgcmVsYXRlZCB0byBkZXRlcm1pbmlzdGljIEVDRFNBIGluIHRoaXMg dGV4dC48bzpwPjwvbzpwPjwvbGk+PC9vbD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMw MEIwNTAiPk1pa2UmZ3Q7IFdoYXQgZG8geW91IHdhbnQgdGhpcyB0ZXh0IHRvIHNheT8mbmJzcDsg SeKAmW0gcmVsdWN0YW50IHRvIHVzZSB0aGUgdGV4dCBhdA0KPC9zcGFuPjxhIGhyZWY9Imh0dHBz Oi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUy RiUyRnRvb2xzLmlldGYub3JnJTJGaHRtbCUyRnJmYzgxNTIlMjNzZWN0aW9uLTguMSZhbXA7ZGF0 YT0wMiU3QzAxJTdDTWljaGFlbC5Kb25lcyU0MG1pY3Jvc29mdC5jb20lN0M2MjRlZDM5ZDQyN2U0 MGY1ZmRlZTA4ZDc1NjhhNTUzNSU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdD MSU3QzAlN0M2MzcwNzMwMjQ0NTQwODg2NTkmYW1wO3NkYXRhPWNnZmdIMjNNZGk5VXc5MyUyRmJl RWlIRU1vUUElMkJLU2g5aEdEQUpzQ3FKeU9RJTNEJmFtcDtyZXNlcnZlZD0wIj5odHRwczovL3Rv b2xzLmlldGYub3JnL2h0bWwvcmZjODE1MiNzZWN0aW9uLTguMTwvYT48c3BhbiBzdHlsZT0iY29s b3I6IzAwQjA1MCI+LA0KIHdoaWNoIHNheXMgdGhhdCDigJxpbXBsZW1lbnRhdGlvbnMgU0hPTFVE IHVzZSBhIGRldGVybWluaXN0aWMgYWxnb3JpdGht4oCdLCB3aGljaCBpcyBtaXNsZWFkaW5nLCBp biB0aGF0IGl0IGltcGxpZXMgdGhhdCB0aGVyZSBhcmUgbWFueSBzdWNoIGFsZ29yaXRobXMgdGhh dCBjb3VsZCBiZSB1c2VkLiZuYnNwOyBJbiBmYWN0LCBleGFjdGx5IG9uZSBpcyBiZWluZyBzcGVj aWZpZWQuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8b2wgc3R5bGU9Im1hcmdpbi10b3A6MGluIiBzdGFydD0iNCIgdHlw ZT0iQSI+DQo8bGkgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxlPSJtYXJnaW4tbGVmdDow aW47bXNvLWxpc3Q6bDIgbGV2ZWwxIGxmbzMiPlRleHQgc2ltaWxhciB0byB0aGUgZW5kIG9mIHNl Y3Rpb24gMi4xIGluIGRyYWZ0LWlldGYtY29zZS1yZmM4MTUyYmlzLWFsZ3Mgc2hvdWxkIGJlIGlu Y2x1ZGVkIHRvIG5haWwgdGhpbmdzIGRvd24gdGlnaHRlcjxvOnA+PC9vOnA+PC9saT48L29sPg0K PHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZndDsgQXJlIHlvdSB0 YWxraW5nIGFib3V0IHRoZSB0ZXh0IHN0YXJ0aW5nIOKAnDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzAwQjA1MDtiYWNrZ3JvdW5kOndoaXRlIj5XaGVuIHVz aW5nIGEgQ09TRSBrZXkgZm9yIHRoaXMgYWxnb3JpdGhtLCB0aGUgZm9sbG93aW5nIGNoZWNrcyBh cmUgbWFkZTo8L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPuKAnT8mbmJzcDsNCiBB cmUgeW91IHJlcXVlc3RpbmcgdGhvc2Ugc2FtZSBjaGVja3M/PC9zcGFuPjxzcGFuIHN0eWxlPSJm b250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMDBCMDUwO2JhY2tncm91bmQ6d2hpdGUiPjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PHM+MTQuIFNlY3Rpb24gMy4yOiZuYnNw OyBJZiB0aGlzIGlzIGEgbmV3IHNpZ25hdHVyZSBhbGdvcml0aG0gdGhlbiBpdCBzaG91bGQgc2F5 IHdoYXQgY3VydmVzIGl0IG9wZXJhdGVzIHdpdGguJm5ic3A7IEVsc2UgdGhlcmUgc2hvdWxkIGJl IGFuIGFkZGl0aW9uIG9mIHRoZSBhbGdvcml0aG1zIHRoYXQgYXJlIGxlZ2FsIGluIHNlY3Rpb24g My4xPC9zPiBEb25lLCBidXQgc2VlIGNvbW1lbnQgMTM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWlu VGV4dCI+PHM+MTUuJm5ic3A7IFNlY3Rpb24gNC4xIC0gVGhlIGNvcnJlY3QgdGVybSBpcyAncHJv dmlzaW9uYWwnIG5vdCAndGVtcG9yYXJ5Jy48L3M+IE5vdCBvZiBzdWZmaWNpZW50IGltcG9ydGFu Y2UgdG8gd29ycnkgYWJvdXQuJm5ic3A7IEhvd2V2ZXIgeW91IGNhbiBqdXN0IHVzZSB0aGUgcHJv dmlzaW9uYWwgbnVtYmVycyB3aXRob3V0IGFueSBjb21tZW50IG9yIFRCRCBnaXZlbiB0aGV5IGFy ZSBhc3NpZ25lZC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+MTYuIFNlY3Rpb24gNS40 IC0gU28gaWYgc29tZWJvZHkgY2hhbmdlcyB0aGUgY3J2IHZhbHVlLCBpcyB0aGVyZSBhbnkgd2F5 IHRvIHRlbGwgdGhlIGRpZmZlcmVuY2U/Jm5ic3A7IElmIHNvIHRoZW4gdGhhdCBzaG91bGQgYmUg ZGVzY3JpYmVkIGhlcmUuJm5ic3A7DQo8Yj5ObyBjaGFuZ2U8L2I+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUwIj5NaWtlJmd0OyBUaGUgd2F5IHRo YXQgeW91IGNhbiB0ZWxsIHRoYXQgdGhlIOKAnGNyduKAnSB2YWx1ZSBoYXMgYmVlbiBjaGFuZ2Vk IGlzIHRoYXQg4oCcY3J24oCdIHBhcmFtZXRlciB3aWxsIGhhdmUgYSBkaWZmZXJlbnQgdmFsdWUu Jm5ic3A7IFRoYXTigJlzIHNvIHNpbXBsZSBhcyB0byBiZSBwcmFjdGljYWxseSB0YXV0b2xvZ2lj YWwgYW5kIG5vdCB3b3J0aCBleHBsaWNpdGx5IHNheWluZy4mbmJzcDsNCiBJ4oCZbSBndWVzc2lu ZyB5b3Ugd2FudCBtZSB0byBzYXkgc29tZXRoaW5nIGVsc2UsIGJ1dCBJIGRvbuKAmXQga25vdyB3 aGF0IGl0IGlzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2s7YmFja2dyb3Vu ZDp3aGl0ZSI+W0pMU10gU28sIElmIEkgdGFrZSB5b3VyIHNlcDI1NmsxIGtleSBhbmQgY2hhbmdl IHRoZSBjdXJ2ZSB0byBQLTI1NiB0aGF0IGNhbm5vdCBiZSBkZXRlY3RlZD88bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6YmxhY2s7 YmFja2dyb3VuZDp3aGl0ZSI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMEIwNTA7YmFja2dyb3VuZDp3aGl0ZSI+ TWlrZTImZ3Q7Jm5ic3A7IFllcywgaXQgY2FuIGJlIGRldGVjdGVkIGJlY2F1c2UgaWYgdGhlIGFs Z29yaXRobSBpZGVudGlmaWVyIHVzZWQgaXMg4oCcRVMyNTZL4oCdIGFuZCB0aGUg4oCcY3J24oCd IHZhbHVlIGlzIG5vdCDigJxzZWNwMjU2azHigJ0sIGl04oCZcyBpbGxlZ2FsIGlucHV0LCBhbmQg TVVTVCBiZSByZWplY3RlZC4mbmJzcDsgSeKAmWxsIGFkZCB0aGlzIHRvIHRoZSBjaGVja3MuPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij4xNy4mbmJzcDsgU2VjdGlvbiA1LjMg LSBUaGlzIHRleHQgc2VlbXMgdG8gYmUgc2VsZi1jb250cmFkaWN0b3J5LiZuYnNwOyBJZiB5b3Ug TVVTVCBOT1QgdXNlIGl0LCB0aGVuIGhvdyBjYW4geW91IHRoZW4gdXNlIGl0PyZuYnNwOyBIb3cg ZG9lcyBhbiBpbXBsZW1lbnRhdGlvbiBrbm93IHdoZW4gaXQgaXMgb3IgaXMgbm90IGFjY2VwdGFi bGUgcHJhY3RpY2UgdG8gdXNlIHRoaXM/Jm5ic3A7DQo8Yj5ObyBjaGFuZ2U8L2I+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUwIj5NaWtlJmd0OyBJ IHdpbGwgYWRkIHRoZSBkZXNjcmlwdGlvbiBhZ3JlZWQgdG8gaW4gdGhlIG9uLWxpc3QgY29udmVy c2F0aW9uIHdpdGggTmVpbCBNYWRkZW4uPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpD b25zb2xhcztjb2xvcjojMDBCMDUwO2JhY2tncm91bmQ6d2hpdGUiPjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+TmV3IEl0ZW1zOjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4xOC4mbmJz cDsgRklETzIgbm90IGV4cGFuZGVkIG9uIGZpcnN0IHVzZSBpbiBhYnN0cmFjdCBhbmQgaW50cm9k dWN0aW9uLiZuYnNwOyAmbmJzcDtEaXR0byBmb3IgV2ViQXV0aG4sIENPU0UsPG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvUGxhaW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUwIj5NaWtlJmd0OyBXaWxs IGRvPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xvcjojMDBCMDUw O2JhY2tncm91bmQ6d2hpdGUiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+MTkuJm5i c3A7IEFic3RyYWN0IGRvZXMgbm90IHJlZmVyIHRvIEpTT04g4oCTIHNob3VsZCBpdD88bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29QbGFpblRleHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPk1pa2UmZ3Q7 IEnigJlsbCBsb29rIGludG8gZWRpdG9yaWFsbHkgd2hlcmUgdG8gYmVzdCBpbnRyb2R1Y2UgSlNP Ti48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OkNvbnNvbGFzO2NvbG9yOiMwMEIwNTA7 YmFja2dyb3VuZDp3aGl0ZSI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4yMC4mbmJz cDsgU2hvdWxkIGJlIHBvaW50aW5nIHRvIHRoZSBjdXJyZW50IGRyYWZ0cyBhbmQgbm90IHRvIFJG QyA4MTUyIGluIHRoaXMgZG9jdW1lbnQuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvUGxh aW5UZXh0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJjb2xvcjojMDBCMDUwIj5NaWtlJmd0OyBJ4oCZbGwgcGxhbiB0byB1cGRhdGUgdGhp cyBzcGVjaWZpY2F0aW9uIG9uY2UgdGhlIGJpcyB2ZXJzaW9ucyBhcmUgUkZDcy4mbmJzcDsgQnV0 IHRoZXJl4oCZcyBubyBuZWVkIHRvIHRha2UgYSBub3JtYXRpdmUgZGVwZW5kZW5jZSBvbiB0aGUg bmV3IHZlcnNpb25zLCBhcyB0aGlzIHNwZWMgdXNlcyBub3RoaW5nIG5ldyBiZWluZyBpbnRyb2R1 Y2VkIGJ5IHRoZW0uPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTpDb25zb2xhcztjb2xv cjojMDBCMDUwO2JhY2tncm91bmQ6d2hpdGUiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+MjEuJm5ic3A7IEdpdmVuIHRoYXQgdGhlIGFsZ29yaXRobXMgaW4gc2VjdGlvbiAyIGFyZSBh bHJlYWR5IGRlZmluZWQgaW4gSk9TRSwgdGhlcmUgc2hvdWxkIGJlIHRleHQgdGhhdCB0aGlzIHNl Y3Rpb24gb25seSBhcHBsaWVzIHRvIENPU0Ugc28gdGhlcmUgaXMgbm8gY29uZnVzaW9uLjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb1BsYWluVGV4dCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZn dDsgU3VyZTwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6Q29uc29sYXM7Y29sb3I6IzAw QjA1MDtiYWNrZ3JvdW5kOndoaXRlIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkpp bTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxiPkZyb206PC9iPiBDT1NFICZsdDs8YSBocmVmPSJtYWlsdG86Y29zZS1i b3VuY2VzQGlldGYub3JnIj5jb3NlLWJvdW5jZXNAaWV0Zi5vcmc8L2E+Jmd0Ow0KPGI+T24gQmVo YWxmIE9mIDwvYj5pdmF5bG8gcGV0cm92PGJyPg0KPGI+U2VudDo8L2I+IFR1ZXNkYXksIFNlcHRl bWJlciAxNywgMjAxOSA3OjMxIEFNPGJyPg0KPGI+VG86PC9iPiBjb3NlICZsdDs8YSBocmVmPSJt YWlsdG86Y29zZUBpZXRmLm9yZyI+Y29zZUBpZXRmLm9yZzwvYT4mZ3Q7PGJyPg0KPGI+U3ViamVj dDo8L2I+IFtDT1NFXSA8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkgRW1v amkmcXVvdDssc2Fucy1zZXJpZiI+JiMxMjgyNzY7PC9zcGFuPiBXR0xDIG9mIGRyYWZ0LWlldGYt Y29zZS13ZWJhdXRobi1hbGdvcml0aG1zPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtWZXJkYW5hJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6IzBCNTM5NCI+RGVhciBhbGwsPGJyPg0KPGJyPg0KVGhpcyBtZXNz YWdlIHN0YXJ0cyB0aGUgV29ya2luZyBHcm91cCBMYXN0IENhbGwgb24gdGhlJm5ic3A7ZHJhZnQt aWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXMmbmJzcDtbMV0uPGJyPg0KPC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtWZXJkYW5hJnF1b3Q7LHNhbnMtc2VyaWYiPjxicj4N CjxzcGFuIHN0eWxlPSJjb2xvcjojMEI1Mzk0Ij5UaGUgd29ya2luZyBncm91cCBsYXN0IGNhbGwg d2lsbCBydW4gZm9yICoqdHdvIHdlZWtzKiosIGVuZGluZyBvbjwvc3Bhbj48YnI+DQo8c3BhbiBz dHlsZT0iY29sb3I6IzBCNTM5NCI+T2N0b2JlciAxLCAyMDE5Ljwvc3Bhbj48YnI+DQo8YnI+DQo8 c3BhbiBzdHlsZT0iY29sb3I6IzBCNTM5NCI+UGxlYXNlIHJldmlldyBhbmQgc2VuZCBhbnkgY29t bWVudHMgb3IgZmVlZGJhY2sgdG8gdGhlIHdvcmtpbmcgZ3JvdXAuJm5ic3A7RXZlbiBpZiB5b3Vy IGZlZWRiYWNrIGlzICZxdW90O3RoaXMgaXMgcmVhZHkmcXVvdDssIHBsZWFzZSBsZXQgdXMga25v dy48L3NwYW4+PGJyPg0KPGJyPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiMwQjUzOTQiPlRoYW5rIHlv dSw8L3NwYW4+PGJyPg0KPGJyPg0KPHNwYW4gc3R5bGU9ImNvbG9yOiMwQjUzOTQiPi0mbmJzcDtN YXR0aGV3IGFuZCZuYnNwO0l2YXlsbzwvc3Bhbj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 JnF1b3Q7VmVyZGFuYSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMwQjUzOTQiPkNPU0UgQ2hhaXJz PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtWZXJkYW5hJnF1b3Q7LHNhbnMt c2VyaWYiPjxicj4NCjxicj4NCjxzcGFuIHN0eWxlPSJjb2xvcjojMEI1Mzk0Ij5bMV06Jm5ic3A7 PC9zcGFuPjwvc3Bhbj48YSBocmVmPSJodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9u Lm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZkYXRhdHJhY2tlci5pZXRmLm9yZyUyRmRv YyUyRmRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zJTJGJmFtcDtkYXRhPTAyJTdD MDElN0NNaWNoYWVsLkpvbmVzJTQwbWljcm9zb2Z0LmNvbSU3QzYyNGVkMzlkNDI3ZTQwZjVmZGVl MDhkNzU2OGE1NTM1JTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3 QzYzNzA3MzAyNDQ1NDA4ODY1OSZhbXA7c2RhdGE9WW9aYjZERGN3V1pBV3FMYmZ1U2hHd2U4Rzd0 VE1LYkhlUzdnSkJIMTclMkZVJTNEJmFtcDtyZXNlcnZlZD0wIj48c3BhbiBzdHlsZT0iZm9udC1m YW1pbHk6JnF1b3Q7VmVyZGFuYSZxdW90OyxzYW5zLXNlcmlmIj5odHRwczovL2RhdGF0cmFja2Vy LmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtcy88L3NwYW4+ PC9hPjxzcGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtWZXJkYW5hJnF1b3Q7LHNhbnMtc2Vy aWYiPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_BYAPR00MB05676A4980B07DB87CDE5831F56A0BYAPR00MB0567namp_-- From nobody Thu Oct 24 16:13:54 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 73E8B120026; Thu, 24 Oct 2019 16:13:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u-8vP3MGpc1e; Thu, 24 Oct 2019 16:13:45 -0700 (PDT) Received: from NAM06-DM3-obe.outbound.protection.outlook.com (mail-eopbgr640124.outbound.protection.outlook.com [40.107.64.124]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9B8FC120019; Thu, 24 Oct 2019 16:13:45 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=GPiti10wcLqPj0k/HMcyuIY64k70s3exBcELrNvOQvs+9/w13bhyHyr+zjjVDa/rY4SDOO2fyUZm+VSfdD64+Ixi3Y9Pqbv0dfbW4aC6j0iygACCxvPRzAW/BjLpspYIzYd7BN9cJuRWUWVZ//lVCIbOk44Gb+dfeSu1uoiwhsED0gnBROjCaerPRi15Dg5pBAnsp8Aj5xBHyU961JtoSxsWCO1xPHXc3DqEvov82DCZI9DpnAiT6rvdOVNQ+BDfE8prSkVwMuzPxN/IPfoYJG8iftw73Z3qWaM1G036c9yrxjwSEi6LoI7WIWcoPoSkwzWsfXpF6aWkLzOJtQnm1w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9ToEu6WK+lUXnuIDQc6J0oSbCWcbxgqhxUkTScxhqE0=; b=Lr/hk6KBtt+gLHCiykT/jgD4Y2SOjtv22+8jc7vryNbphEApzGNyrOqd0Yd0JXQicXRdjlQdZHWBcDg1jgd35/tKddOnsfut9A+5iFNGTVm3f0xRIKp7z8nAMaGnOiyZj00gbDkZjBsUvtBQY1cpVaMItuvs1X0uIgvq2GWqRt8jDeijmOLZIWYZfSC1fA1bCJOspHfh2neyl11xgiKi955PF7Lun0pcy3sxv+1fFaov1FEQAMjvQNRc/gem7Q09TS+7TSNdnZ9qRxwfVQcrNuRJSL96fBMwT0HfuZioiCZF+LJHPM/17C2FzV2PNQIxuwrr3C9PUeGE4jK0W1zJQw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=9ToEu6WK+lUXnuIDQc6J0oSbCWcbxgqhxUkTScxhqE0=; b=ZQBQxIVXltrsPyYcWYFEVuJweA4MR/zY09qNrkHdjJznN9MGCJMKPLASjTQc+XSRZpk5BN8zt0srcQNzTtBel3CA1GhVcLEuFoSAwq7njhofb2ZraUrcXeGrfGDbvb2y063as08hvUFoMDMc7WRUgYz1/thvWy1o7QPCcY9/Zi8= Received: from BYAPR00MB0567.namprd00.prod.outlook.com (20.179.56.25) by BYAPR00MB0600.namprd00.prod.outlook.com (20.179.56.142) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2425.0; Thu, 24 Oct 2019 23:13:43 +0000 Received: from BYAPR00MB0567.namprd00.prod.outlook.com ([fe80::31af:5686:e43b:ed3a]) by BYAPR00MB0567.namprd00.prod.outlook.com ([fe80::31af:5686:e43b:ed3a%9]) with mapi id 15.20.2430.000; Thu, 24 Oct 2019 23:13:43 +0000 From: Mike Jones To: Neil Madden , Jim Schaad CC: "cose@ietf.org" , "jose@ietf.org" , ivaylo petrov Thread-Topic: =?utf-8?B?W0NPU0VdICBbam9zZV0gIPCflJQgV0dMQyBvZiBkcmFmdC1pZXRmLWNvc2Ut?= =?utf-8?Q?webauthn-algorithms?= Thread-Index: AQHVbwCfAPK5Y9lIXUekPxghlw4nSac0T3mAgABSv4CAAApZgIAyXDRwgAOaiKA= Date: Thu, 24 Oct 2019 23:13:43 +0000 Message-ID: References: <465EE321-1595-4453-8D4E-E3A6A457C86E@forgerock.com> <012001d56fc0$1fb30e90$5f192bb0$@augustcellars.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=03b5b886-7751-4615-96ea-0000eb766e27; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-10-22T16:11:41Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [2001:4898:80e8:2:d470:4f7:8cbd:3a65] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: cd58db05-40bd-4686-aad7-08d758d7d09c x-ms-traffictypediagnostic: BYAPR00MB0600: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 0200DDA8BE x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(366004)(396003)(346002)(376002)(39860400002)(136003)(189003)(199004)(51914003)(316002)(7736002)(229853002)(54906003)(10090500001)(8990500004)(110136005)(790700001)(74316002)(5660300002)(6116002)(7696005)(6506007)(76176011)(81166006)(81156014)(10290500003)(6436002)(14454004)(53546011)(4326008)(102836004)(966005)(186003)(22452003)(478600001)(256004)(11346002)(52536014)(446003)(476003)(2906002)(99286004)(486006)(33656002)(6246003)(71190400001)(71200400001)(76116006)(25786009)(66946007)(66446008)(46003)(66476007)(64756008)(66556008)(236005)(86362001)(6306002)(54896002)(606006)(8936002)(9686003)(55016002); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR00MB0600; H:BYAPR00MB0567.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: zxntUnISDl/rfjjc3qV3AysvB2TWLVchGyIjIu7id6qXJF1FUSfg+tXt3nEi3pGQEchz0+zSLZrHG4rWwn0btuJgAMrZkZR09gBJ63FFHf3ebEkT/z5JH1QnUbVWa9QapFSLD7UMxo9OplbnTZ6HBfTh7fI5K5PuF0UQjdhIOZdbFr+p+RCjihd9EIEIIhcU66vURcePbFp7Y5YCgjXP4KlCLySS8HpAh7RiYIpeq5ZgMuxBkjY1f3frdiRFO15y/UBirG+AbAaeFLT65BWWwXNLgYTQTX4fpoMIN6KzPzc4h/gndBunQOrquXD+EuGVKQaq49Dqh8OGSq1FTbV1EA0QkTUv3V4manKaU5KAaEj6WYR+W0ditNhpgTneL2nmvzQ15TMA2/Kb2Ec/u7KjA7+54GbEnakWm9ngmFlYhvvxtNRjqUFaQu3ZtCtyXUNZ x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BYAPR00MB05673AE6B5C1E9FDBF862B36F56A0BYAPR00MB0567namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: cd58db05-40bd-4686-aad7-08d758d7d09c X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Oct 2019 23:13:43.5846 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: +SHryyD2Vgv3k4KCz5lKOIJR5AZ0wgXg3BTl69JgLO/CuvZgv8tw0Q9FfxjW5BvqXEFn642+MqXbUlIP5K9Avw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR00MB0600 Archived-At: Subject: Re: [COSE] =?utf-8?q?=5Bjose=5D__=F0=9F=94=94_WGLC_of_draft-ietf-cos?= =?utf-8?q?e-webauthn-algorithms?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 23:13:49 -0000 --_000_BYAPR00MB05673AE6B5C1E9FDBF862B36F56A0BYAPR00MB0567namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhlc2UgaXNzdWUgcmVzb2x1dGlvbnMgaGF2ZSBiZWVuIGluY29ycG9yYXRlZCBpbiBodHRwczov L3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXMt MDIuICBUaGFua3MgYWdhaW4gZm9yIHlvdXIgdXNlZnVsIHJldmlldyENCg0KICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIC0tIE1p a2UNCg0KRnJvbTogTWlrZSBKb25lcw0KU2VudDogVHVlc2RheSwgT2N0b2JlciAyMiwgMjAxOSA5 OjE3IEFNDQpUbzogTmVpbCBNYWRkZW4gPG5laWwubWFkZGVuQGZvcmdlcm9jay5jb20+OyBKaW0g U2NoYWFkIDxpZXRmQGF1Z3VzdGNlbGxhcnMuY29tPg0KQ2M6IGNvc2VAaWV0Zi5vcmc7IGpvc2VA aWV0Zi5vcmc7IGl2YXlsbyBwZXRyb3YgPGl2YXlsb0BhY2tsLmlvPg0KU3ViamVjdDogUkU6IFtD T1NFXSBbam9zZV0g8J+UlCBXR0xDIG9mIGRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0 aG1zDQoNClRoYW5rcyBhZ2FpbiBmb3IgdGhlIHJldmlldywgTmVpbC4gIE15IHJlcGxpZXMgYXJl IGlubGluZSwgcHJlZml4ZWQgYnkg4oCcTWlrZT7igJ0uDQoNCiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAtLSBNaWtlDQoNCkZyb206IENPU0Ug PGNvc2UtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86Y29zZS1ib3VuY2VzQGlldGYub3JnPj4gT24g QmVoYWxmIE9mIE5laWwgTWFkZGVuDQpTZW50OiBGcmlkYXksIFNlcHRlbWJlciAyMCwgMjAxOSA4 OjA5IEFNDQpUbzogSmltIFNjaGFhZCA8aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbTxtYWlsdG86aWV0 ZkBhdWd1c3RjZWxsYXJzLmNvbT4+DQpDYzogY29zZUBpZXRmLm9yZzxtYWlsdG86Y29zZUBpZXRm Lm9yZz47IGpvc2VAaWV0Zi5vcmc8bWFpbHRvOmpvc2VAaWV0Zi5vcmc+OyBpdmF5bG8gcGV0cm92 IDxpdmF5bG9AYWNrbC5pbzxtYWlsdG86aXZheWxvQGFja2wuaW8+Pg0KU3ViamVjdDogUmU6IFtD T1NFXSBbam9zZV0g8J+UlCBXR0xDIG9mIGRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0 aG1zDQoNClRoYW5rcyBmb3IgdGhlIHJlcGx5LCBjb21tZW50cyBpbi1saW5lIG1hcmtlZCB3aXRo IFtORU1dOg0KDQpPbiAyMCBTZXAgMjAxOSwgYXQgMTU6MzEsIEppbSBTY2hhYWQgPGlldGZAYXVn dXN0Y2VsbGFycy5jb208bWFpbHRvOmlldGZAYXVndXN0Y2VsbGFycy5jb20+PiB3cm90ZToNCg0K DQoNCkZyb206IGpvc2UgPGpvc2UtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86am9zZS1ib3VuY2Vz QGlldGYub3JnPj4gT24gQmVoYWxmIE9mIE5laWwgTWFkZGVuDQpTZW50OiBGcmlkYXksIFNlcHRl bWJlciAyMCwgMjAxOSAyOjM1IEFNDQpUbzogaXZheWxvIHBldHJvdiA8aXZheWxvQGFja2wuaW88 bWFpbHRvOml2YXlsb0BhY2tsLmlvPj4NCkNjOiBqb3NlQGlldGYub3JnPG1haWx0bzpqb3NlQGll dGYub3JnPjsgY29zZUBpZXRmLm9yZzxtYWlsdG86Y29zZUBpZXRmLm9yZz4NClN1YmplY3Q6IFJl OiBbam9zZV0g8J+UlCBXR0xDIG9mIGRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1z DQoNClRoYW5rcywgSSB3YXNuJ3QgYXdhcmUgb2YgdGhpcyBkcmFmdC4gSXQgbG9va3Mgb2ssIGp1 c3QgYSBmZXcgY29tbWVudHMgZnJvbSBtZToNCg0Kc2VjcDI1NmsxIGlzIG1lbnRpb25lZCBpbiB0 aGUgY29udGV4dCBvZiBzaWduYXR1cmVzIGFuZCB0aGUgbmV3IEVTMjU2SyBKV1MgYWxnb3JpdGht LCBidXQgd2hlbiBpdCBpcyByZWdpc3RlcmVkIGluIHRoZSBKT1NFIEVsbGlwdGljIEN1cnZlIHJl Z2lzdHJ5IGl0IHdpbGwgYWxzbyBiZSB1c2FibGUgZm9yIEVDREgtRVMgZW5jcnlwdGlvbi4gVGhl IGN1cnJlbnQgZHJhZnQgbWVudGlvbnMgSk9TRSBidXQgb25seSBsaW5rcyB0byBSRkMgNzUxNSAo SldTKS4gSXMgdGhlIGludGVudGlvbiB0aGF0IHRoZSBjdXJ2ZSBiZSBvbmx5IHVzZWQgZm9yIHNp Z25hdHVyZXMsIG9yIGlzIGl0IGFsc28gaW50ZW5kZWQgZm9yIGVuY3J5cHRpb24/DQoNCltKTFNd IFRoYXQgaXMgYW4gaW50ZXJlc3RpbmcgcXVlc3Rpb24uICBSaWdodCBub3cgSSB3b3VsZCBzYXkg dGhhdCBpdCBpcyBvbmx5IGZvciBzaWduYXR1cmVzLCBidXQgaXQgY291bGQgYmUgZXhwYW5kZWQg dG8ga2V5IGFncmVlbWVudCBxdWl0ZSBlYXNpbHkuICBJcyB0aGVyZSBhbnkgbmVlZCBmb3IgaXQg b3IgYXJlIHlvdSBqdXN0IHNwZWN1bGF0aW5nPyAgVGhlIGJpZyB1c2UgSSBrbm93IG9mIGlzIGJp dCBjb2luIHdoaWNoIGlzIG9ubHkgc2lnbmF0dXJlcyBhbmQgV2ViQXV0aG4gd2hpY2ggaXMgb25s eSBzaWduYXR1cmVzLg0KDQpbTkVNXSBBcyBzb29uIGFzIGl0IGlzIHJlZ2lzdGVyZWQgYXMgYSBK T1NFIGVsbGlwdGljIGN1cnZlIGl0IGNhbiBiZSB1c2VkIGZvciBFQ0RILUVTLCBzbyB0aGUgZHJh ZnQgc2hvdWxkIG1ha2UgYSBzdGF0ZW1lbnQgb25lIHdheSBvciBhbm90aGVyIGFzIHRvIHdoZXRo ZXIgdGhpcyBpcyBpbnRlbmRlZCByYXRoZXIgdGhhbiBzdGFuZGFyZGl6aW5nIHRoYXQgdXNhZ2Ug Ynkgc2lkZS1lZmZlY3QgSU1PLg0KDQpNaWtlPiBIYXZpbmcgdGhvdWdodCBhYm91dCB0aGlzIHNv bWUgbW9yZSwgZ2l2ZW4gdGhhdCBubyBvbmUgb24gdGhlIHRocmVhZCBoYXMgcHJlc2VudGVkIGFu IGFyZ3VtZW50IHdoeSBzZWNwMjU2azEgc2hvdWxkIG9yIHNob3VsZCBub3QgYmUgdXNlZCB3aXRo IEVDREgtRVMsIEkgbm93IHBsYW4gdG8gbWFrZSBhbiBleHBsaWNpdCBzdGF0ZW1lbnQgdGhhdCB3 aGV0aGVyIGl0IGNhbiBvciBjYW5ub3QgYmUgdXNlZCBpcyBleHBsaWNpdGx5IG91dCBvZiBzY29w ZSBvZiB0aGlzIHNwZWNpZmljYXRpb24sIGFuZCB0aGUgdG9waWMgY291bGQgYmUgY292ZXJlZCBi eSBhIGZ1dHVyZSBzcGVjaWZpY2F0aW9uLiAgVGhlIHF1ZXN0aW9uIGRvZXNu4oCZdCBoYXZlIHRv IGJlIGRlY2lkZWQgdG8gYWNoaWV2ZSB0aGUgZ29hbHMgb2YgdGhlIGN1cnJlbnQgc3BlY2lmaWNh dGlvbi4NCg0KSSdtIGdsYWQgUlMxIGlzIG5vdCBiZWluZyByZWdpc3RlcmVkIGZvciBKT1NFLCBh bHRob3VnaCBJJ20gc3RpbGwgYSBiaXQgc3VycHJpc2VkIHRoYXQgaXQgaXMgYmVpbmcgcmVnaXN0 ZXJlZCAoZXZlbiBhcyBkZXByZWNhdGVkKSBmb3IgYSBzdGFuZGFyZCBhcyBuZXcgYXMgQ09TRS4g SSBjYW4ndCBmaW5kIGFueSBqdXN0aWZpY2F0aW9uIGluIHRoZSBsaW5rZWQgV2ViQXV0aG4gb3Ig Q1RBUCBzcGVjcyBmb3Igd2h5IHRoaXMgYWxnb3JpdGhtIG5lZWRzIHRvIGV4aXN0IGF0IGFsbC4g U2VjdGlvbiA1LjMgc2F5cyB0aGF0IGl0IG5lZWRzIHRvIGJlIHJlZ2lzdGVyZWQgYmVjYXVzZSBz b21lIFdlYkF1dGhuIFRQTSBhdHRlc3RhdGlvbnMgdXNlIGl0LCBidXQgdGhlIHZlcnkgc2FtZSBz ZWN0aW9uIHNheXMgdGhhdCB0aGUgYWxnb3JpdGhtIE1VU1QgTk9UIGJlIHVzZWQgYnkgQ09TRSBp bXBsZW1lbnRhdGlvbnMgKGlzIGEgV2ViQXV0aG4gaW1wbGVtZW50YXRpb24gbm90IGEgQ09TRSBp bXBsZW1lbnRhdGlvbj8pLiBJZiB0aGUgbm9ybWF0aXZlIGxhbmd1YWdlIGluIHRoZSBzcGVjIGlz IG9iZXllZCB0aGVuIHRoZSBhbGdvcml0aG0gd2lsbCBuZXZlciBiZSB1c2VkIGFuZCBzbyB0aGUg cmVnaXN0ZXJlZCBpZGVudGlmaWVyIGlzbid0IG5lZWRlZC4NCg0KW0pMU10gRm9yIGJldHRlciBv ciBmb3Igd29yc2UsIFJTMSBpcyBhbHJlYWR5IHJlZ2lzdGVyZWQgZm9yIEpPU0UsIHNvIHRoYXQg aXMgdGhlIHJlYXNvbiBpdCBpcyBub3QgcmVnaXN0ZXJlZCBoZXJlLg0KDQpPdWNoLCBJIGhhZG4n dCBzZWVuIHRoaXMuIFRoZSBXZWJDcnlwdG8gZ3JvdXAgcmVhbGx5IGRpZCBhIG51bWJlciBvbiB0 aGUgcmVnaXN0cnkuIFRoYW5rZnVsbHkgbW9zdCBvZiB0aGVtIChpbmNsdWRpbmcgUlMxKSBhcmUg b25seSByZWdpc3RlcmVkIGZvciBKV0sgdXNhZ2UgYW5kIG1hcmtlZCBhcyBQcm9oaWJpdGVkLiAo V2hhdCBkb2VzIGl0IGV2ZW4gbWVhbiBmb3IgdGhpbmdzIGxpa2UgIkExMjhDQkMiIHRvIGJlIHJl Z2lzdGVyZWQgYXMgYSBKV0sgImFsZyIgdmFsdWU/KQ0KDQpNeSBtYWluIHBvaW50IHN0aWxsIHN0 YW5kcyB0aGF0IHNlY3Rpb24gNS4zIG9mIHRoZSBkcmFmdCBpcyBzZWxmLWNvbnRyYWRpY3Rvcnkg YXMgaXQgc2F5cyB0aGF0IHRoZSByZWFzb24gZm9yIHJlZ2lzdHJ5IGlzIGJlY2F1c2Ugc29tZSBU UE1zIGFyZSB1c2luZyB0aGUgYWxnb3JpdGhtIGJ1dCB0aGVuIGFsc28gc2F5cyB0aGF0IHRob3Nl IGltcGxlbWVudGF0aW9ucyBNVVNUIE5PVCB1c2UgdGhlIGFsZ29yaXRobSwgbmVnYXRpbmcgdGhl IHJlYXNvbiBmb3IgcmVnaXN0ZXJpbmcgaXQgaW4gdGhlIGZpcnN0IHBsYWNlLg0KDQpNaWtlPiBJ IHdpbGwgaW5jbHVkZSB0aGUgZXhwbGFuYXRpb24gYXJyaXZlZCBhdCBpbiB0aGUgZGlzY3Vzc2lv biBvbiB0aGUgSk9TRSBtYWlsaW5nIGxpc3QuDQoNCi0tIE5laWwNCg== --_000_BYAPR00MB05673AE6B5C1E9FDBF862B36F56A0BYAPR00MB0567namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiU2Vnb2UgVUkgRW1vamkiOw0KCXBhbm9z ZS0xOjIgMTEgNSAyIDQgMiA0IDIgMiAzO30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1z b05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFy Z2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5 bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5l O30NCmE6dmlzaXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZA0KCXttc28tc3R5bGUtcHJp b3JpdHk6OTk7DQoJY29sb3I6cHVycGxlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0K cC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0KCXttc28tc3R5bGUt bmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJbWFyZ2luLXJpZ2h0 OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4tbGVmdDowaW47DQoJ Zm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9DQpz cGFuLmFwcGxlLWNvbnZlcnRlZC1zcGFjZQ0KCXttc28tc3R5bGUtbmFtZTphcHBsZS1jb252ZXJ0 ZWQtc3BhY2U7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7 DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6IzAwMjA2MDt9DQpz cGFuLkVtYWlsU3R5bGUyMQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250 LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjojMDAyMDYwO30NCi5Nc29DaHBE ZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7 fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBp biAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rp b24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1 bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEt LVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzpp ZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtl bmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0i cHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+VGhlc2UgaXNzdWUgcmVzb2x1dGlvbnMgaGF2 ZSBiZWVuIGluY29ycG9yYXRlZCBpbg0KPGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9o dG1sL2RyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zLTAyIj5odHRwczovL3Rvb2xz LmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXMtMDI8L2E+ LiZuYnNwOyBUaGFua3MgYWdhaW4gZm9yIHlvdXIgdXNlZnVsIHJldmlldyE8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2 MCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyAtLSBNaWtlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEg MS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 Yj5Gcm9tOjwvYj4gTWlrZSBKb25lcyA8YnI+DQo8Yj5TZW50OjwvYj4gVHVlc2RheSwgT2N0b2Jl ciAyMiwgMjAxOSA5OjE3IEFNPGJyPg0KPGI+VG86PC9iPiBOZWlsIE1hZGRlbiAmbHQ7bmVpbC5t YWRkZW5AZm9yZ2Vyb2NrLmNvbSZndDs7IEppbSBTY2hhYWQgJmx0O2lldGZAYXVndXN0Y2VsbGFy cy5jb20mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiBjb3NlQGlldGYub3JnOyBqb3NlQGlldGYub3JnOyBp dmF5bG8gcGV0cm92ICZsdDtpdmF5bG9AYWNrbC5pbyZndDs8YnI+DQo8Yj5TdWJqZWN0OjwvYj4g UkU6IFtDT1NFXSBbam9zZV0gPHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1NlZ29lIFVJ IEVtb2ppJnF1b3Q7LHNhbnMtc2VyaWYiPg0KJiMxMjgyNzY7PC9zcGFuPiBXR0xDIG9mIGRyYWZ0 LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+VGhhbmtzIGFnYWluIGZv ciB0aGUgcmV2aWV3LCBOZWlsLiZuYnNwOyBNeSByZXBsaWVzIGFyZSBpbmxpbmUsIHByZWZpeGVk IGJ5IOKAnDwvc3Bhbj48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZndDs8L3NwYW4+ PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPuKAnS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNv bG9yOiMwMDIwNjAiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAtLSBN aWtlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImNvbG9yOiMwMDIwNjAiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8 ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFk ZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5Gcm9tOjwv Yj4gQ09TRSAmbHQ7PGEgaHJlZj0ibWFpbHRvOmNvc2UtYm91bmNlc0BpZXRmLm9yZyI+Y29zZS1i b3VuY2VzQGlldGYub3JnPC9hPiZndDsNCjxiPk9uIEJlaGFsZiBPZiA8L2I+TmVpbCBNYWRkZW48 YnI+DQo8Yj5TZW50OjwvYj4gRnJpZGF5LCBTZXB0ZW1iZXIgMjAsIDIwMTkgODowOSBBTTxicj4N CjxiPlRvOjwvYj4gSmltIFNjaGFhZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlldGZAYXVndXN0Y2Vs bGFycy5jb20iPmlldGZAYXVndXN0Y2VsbGFycy5jb208L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj4g PGEgaHJlZj0ibWFpbHRvOmNvc2VAaWV0Zi5vcmciPmNvc2VAaWV0Zi5vcmc8L2E+OyA8YSBocmVm PSJtYWlsdG86am9zZUBpZXRmLm9yZyI+DQpqb3NlQGlldGYub3JnPC9hPjsgaXZheWxvIHBldHJv diAmbHQ7PGEgaHJlZj0ibWFpbHRvOml2YXlsb0BhY2tsLmlvIj5pdmF5bG9AYWNrbC5pbzwvYT4m Z3Q7PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbQ09TRV0gW2pvc2VdIDxzcGFuIHN0eWxlPSJm b250LWZhbWlseTomcXVvdDtTZWdvZSBVSSBFbW9qaSZxdW90OyxzYW5zLXNlcmlmIj4NCiYjMTI4 Mjc2Ozwvc3Bhbj4gV0dMQyBvZiBkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtczxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtzIGZvciB0aGUgcmVw bHksIGNvbW1lbnRzIGluLWxpbmUgbWFya2VkIHdpdGggW05FTV06PG86cD48L286cD48L3A+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0 O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIDIw IFNlcCAyMDE5LCBhdCAxNTozMSwgSmltIFNjaGFhZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlldGZA YXVndXN0Y2VsbGFycy5jb20iPmlldGZAYXVndXN0Y2VsbGFycy5jb208L2E+Jmd0OyB3cm90ZTo8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3Jk ZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+RnJvbTo8L2I+PHNwYW4gY2xhc3M9ImFwcGxl LWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPmpvc2UgJmx0OzxhIGhyZWY9Im1haWx0bzpq b3NlLWJvdW5jZXNAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmpvc2UtYm91 bmNlc0BpZXRmLm9yZzwvc3Bhbj48L2E+Jmd0OzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQt c3BhY2UiPiZuYnNwOzwvc3Bhbj48Yj5PbiBCZWhhbGYgT2Y8c3BhbiBjbGFzcz0iYXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PC9iPk5laWwNCiBNYWRkZW48YnI+DQo8Yj5TZW50 OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+RnJp ZGF5LCBTZXB0ZW1iZXIgMjAsIDIwMTkgMjozNSBBTTxicj4NCjxiPlRvOjwvYj48c3BhbiBjbGFz cz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+aXZheWxvIHBldHJvdiAmbHQ7 PGEgaHJlZj0ibWFpbHRvOml2YXlsb0BhY2tsLmlvIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxl Ij5pdmF5bG9AYWNrbC5pbzwvc3Bhbj48L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj48c3BhbiBjbGFz cz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOmpv c2VAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmpvc2VAaWV0Zi5vcmc8L3Nw YW4+PC9hPjs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+ PGEgaHJlZj0ibWFpbHRvOmNvc2VAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUi PmNvc2VAaWV0Zi5vcmc8L3NwYW4+PC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPjxzcGFuIGNsYXNz PSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5SZTogW2pvc2VdPHNwYW4gY2xh c3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250 LWZhbWlseTomcXVvdDtTZWdvZSBVSSBFbW9qaSZxdW90OyxzYW5zLXNlcmlmIj4mIzEyODI3Njs8 L3NwYW4+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPldH TEMgb2YgZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXM8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRo YW5rcywgSSB3YXNuJ3QgYXdhcmUgb2YgdGhpcyBkcmFmdC4gSXQgbG9va3Mgb2ssIGp1c3QgYSBm ZXcgY29tbWVudHMgZnJvbSBtZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPnNlY3AyNTZrMSBpcyBtZW50 aW9uZWQgaW4gdGhlIGNvbnRleHQgb2Ygc2lnbmF0dXJlcyBhbmQgdGhlIG5ldyBFUzI1NksgSldT IGFsZ29yaXRobSwgYnV0IHdoZW4gaXQgaXMgcmVnaXN0ZXJlZCBpbiB0aGUgSk9TRSBFbGxpcHRp YyBDdXJ2ZSByZWdpc3RyeSBpdCB3aWxsIGFsc28gYmUgdXNhYmxlIGZvciBFQ0RILUVTIGVuY3J5 cHRpb24uIFRoZSBjdXJyZW50IGRyYWZ0IG1lbnRpb25zIEpPU0UgYnV0IG9ubHkNCiBsaW5rcyB0 byBSRkMgNzUxNSAoSldTKS4gSXMgdGhlIGludGVudGlvbiB0aGF0IHRoZSBjdXJ2ZSBiZSBvbmx5 IHVzZWQgZm9yIHNpZ25hdHVyZXMsIG9yIGlzIGl0IGFsc28gaW50ZW5kZWQgZm9yIGVuY3J5cHRp b24/PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PltKTFNdIFRoYXQgaXMgYW4gaW50ZXJlc3RpbmcgcXVlc3Rpb24uJm5ic3A7IFJpZ2h0IG5vdyBJ IHdvdWxkIHNheSB0aGF0IGl0IGlzIG9ubHkgZm9yIHNpZ25hdHVyZXMsIGJ1dCBpdCBjb3VsZCBi ZSBleHBhbmRlZCB0byBrZXkgYWdyZWVtZW50IHF1aXRlIGVhc2lseS4mbmJzcDsgSXMgdGhlcmUg YW55IG5lZWQgZm9yIGl0IG9yIGFyZSB5b3UganVzdCBzcGVjdWxhdGluZz8mbmJzcDsgVGhlIGJp ZyB1c2UgSSBrbm93IG9mIGlzIGJpdCBjb2luDQogd2hpY2ggaXMgb25seSBzaWduYXR1cmVzIGFu ZCBXZWJBdXRobiB3aGljaCBpcyBvbmx5IHNpZ25hdHVyZXMuPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5bTkVNXSBBcyBzb29uIGFzIGl0IGlzIHJlZ2lzdGVyZWQgYXMgYSBKT1NFIGVsbGlw dGljIGN1cnZlIGl0IGNhbiBiZSB1c2VkIGZvciBFQ0RILUVTLCBzbyB0aGUgZHJhZnQgc2hvdWxk IG1ha2UgYSBzdGF0ZW1lbnQgb25lIHdheSBvciBhbm90aGVyIGFzIHRvIHdoZXRoZXIgdGhpcyBp cyBpbnRlbmRlZCByYXRoZXIgdGhhbiBzdGFuZGFyZGl6aW5nIHRoYXQgdXNhZ2UgYnkgc2lkZS1l ZmZlY3QgSU1PLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 YnI+DQo8c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZndDsgSGF2aW5nIHRob3VnaHQg YWJvdXQgdGhpcyBzb21lIG1vcmUsIGdpdmVuIHRoYXQgbm8gb25lIG9uIHRoZSB0aHJlYWQgaGFz IHByZXNlbnRlZCBhbiBhcmd1bWVudCB3aHkgc2VjcDI1NmsxIHNob3VsZCBvciBzaG91bGQgbm90 IGJlIHVzZWQgd2l0aCBFQ0RILUVTLCBJIG5vdyBwbGFuIHRvIG1ha2UgYW4gZXhwbGljaXQgc3Rh dGVtZW50IHRoYXQgd2hldGhlciBpdCBjYW4gb3IgY2Fubm90DQogYmUgdXNlZCBpcyBleHBsaWNp dGx5IG91dCBvZiBzY29wZSBvZiB0aGlzIHNwZWNpZmljYXRpb24sIGFuZCB0aGUgdG9waWMgY291 bGQgYmUgY292ZXJlZCBieSBhIGZ1dHVyZSBzcGVjaWZpY2F0aW9uLiZuYnNwOyBUaGUgcXVlc3Rp b24gZG9lc27igJl0IGhhdmUgdG8gYmUgZGVjaWRlZCB0byBhY2hpZXZlIHRoZSBnb2FscyBvZiB0 aGUgY3VycmVudCBzcGVjaWZpY2F0aW9uLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxibG9ja3F1 b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkknbSBnbGFkIFJT MSBpcyBub3QgYmVpbmcgcmVnaXN0ZXJlZCBmb3IgSk9TRSwgYWx0aG91Z2ggSSdtIHN0aWxsIGEg Yml0IHN1cnByaXNlZCB0aGF0IGl0IGlzIGJlaW5nIHJlZ2lzdGVyZWQgKGV2ZW4gYXMgZGVwcmVj YXRlZCkgZm9yIGEgc3RhbmRhcmQgYXMgbmV3IGFzIENPU0UuIEkgY2FuJ3QgZmluZCBhbnkganVz dGlmaWNhdGlvbiBpbiB0aGUgbGlua2VkIFdlYkF1dGhuIG9yIENUQVAgc3BlY3MgZm9yIHdoeQ0K IHRoaXMgYWxnb3JpdGhtIG5lZWRzIHRvIGV4aXN0IGF0IGFsbC4gU2VjdGlvbiA1LjMgc2F5cyB0 aGF0IGl0IG5lZWRzIHRvIGJlIHJlZ2lzdGVyZWQgYmVjYXVzZSBzb21lIFdlYkF1dGhuIFRQTSBh dHRlc3RhdGlvbnMgdXNlIGl0LCBidXQgdGhlIHZlcnkgc2FtZSBzZWN0aW9uIHNheXMgdGhhdCB0 aGUgYWxnb3JpdGhtIE1VU1QgTk9UIGJlIHVzZWQgYnkgQ09TRSBpbXBsZW1lbnRhdGlvbnMgKGlz IGEgV2ViQXV0aG4gaW1wbGVtZW50YXRpb24gbm90DQogYSBDT1NFIGltcGxlbWVudGF0aW9uPyku IElmIHRoZSBub3JtYXRpdmUgbGFuZ3VhZ2UgaW4gdGhlIHNwZWMgaXMgb2JleWVkIHRoZW4gdGhl IGFsZ29yaXRobSB3aWxsIG5ldmVyIGJlIHVzZWQgYW5kIHNvIHRoZSByZWdpc3RlcmVkIGlkZW50 aWZpZXIgaXNuJ3QgbmVlZGVkLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5bSkxTXSBGb3IgYmV0dGVyIG9yIGZvciB3b3JzZSwgUlMxIGlzIGFs cmVhZHkgcmVnaXN0ZXJlZCBmb3IgSk9TRSwgc28gdGhhdCBpcyB0aGUgcmVhc29uIGl0IGlzIG5v dCByZWdpc3RlcmVkIGhlcmUuJm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFj ZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxvY2tx dW90ZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T3VjaCwgSSBoYWRuJ3Qgc2VlbiB0aGlzLiBU aGUgV2ViQ3J5cHRvIGdyb3VwIHJlYWxseSBkaWQgYSBudW1iZXIgb24gdGhlIHJlZ2lzdHJ5LiBU aGFua2Z1bGx5IG1vc3Qgb2YgdGhlbSAoaW5jbHVkaW5nIFJTMSkgYXJlIG9ubHkgcmVnaXN0ZXJl ZCBmb3IgSldLIHVzYWdlIGFuZCBtYXJrZWQgYXMgUHJvaGliaXRlZC4gKFdoYXQgZG9lcyBpdCBl dmVuIG1lYW4gZm9yIHRoaW5ncyBsaWtlICZxdW90O0ExMjhDQkMmcXVvdDsgdG8NCiBiZSByZWdp c3RlcmVkIGFzIGEgSldLICZxdW90O2FsZyZxdW90OyB2YWx1ZT8pPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk15IG1haW4gcG9pbnQgc3RpbGwg c3RhbmRzIHRoYXQgc2VjdGlvbiA1LjMgb2YgdGhlIGRyYWZ0IGlzIHNlbGYtY29udHJhZGljdG9y eSBhcyBpdCBzYXlzIHRoYXQgdGhlIHJlYXNvbiBmb3IgcmVnaXN0cnkgaXMgYmVjYXVzZSBzb21l IFRQTXMgYXJlIHVzaW5nIHRoZSBhbGdvcml0aG0gYnV0IHRoZW4gYWxzbyBzYXlzIHRoYXQgdGhv c2UgaW1wbGVtZW50YXRpb25zIE1VU1QgTk9UIHVzZSB0aGUgYWxnb3JpdGhtLA0KIG5lZ2F0aW5n IHRoZSByZWFzb24gZm9yIHJlZ2lzdGVyaW5nIGl0IGluIHRoZSBmaXJzdCBwbGFjZS48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwQjA1MCI+TWlrZSZndDsgSSB3aWxsIGlu Y2x1ZGUgdGhlIGV4cGxhbmF0aW9uIGFycml2ZWQgYXQgaW4gdGhlIGRpc2N1c3Npb24gb24gdGhl IEpPU0UgbWFpbGluZyBsaXN0LjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tLSBOZWlsPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_BYAPR00MB05673AE6B5C1E9FDBF862B36F56A0BYAPR00MB0567namp_-- From nobody Thu Oct 24 16:14:43 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D3D55120026; Thu, 24 Oct 2019 16:14:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.789 X-Spam-Level: X-Spam-Status: No, score=-1.789 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_REMOTE_IMAGE=0.01, URIBL_BLOCKED=0.001, URI_HEX=0.1] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IjhpTgXQAZCX; Thu, 24 Oct 2019 16:14:39 -0700 (PDT) Received: from NAM06-DM3-obe.outbound.protection.outlook.com (mail-eopbgr640125.outbound.protection.outlook.com [40.107.64.125]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9EB89120019; Thu, 24 Oct 2019 16:14:39 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=MrxlhAat8evTa5rT4V1W4+kROTogNhC108AlZfLZgLVVuEfDCp9driDzqZ5DTUJ6F3xPAiDLKAAlHF0gH1boZSSJhOr0ekawAGH12q2ju/FhFiqhyB5aaa0b2OboTK0FnvL13x7EHNJ8yvewJI/1yewpJb9GwkwuMukiOVTJQLYDT1I8iV1ETno32IcqJ4saTkD9M0nmsNKiARpBqwc2Z6Hg8RzvcN23NSbrdIVvGD9QSffI0ClhWYuzJdXrxWO/LV/23AdACKGLWRPiIYIftelmCPzHupHmILucY1v0jQ9mj2Cy9Xe8lrr79ZSsWhBa6zMVe5w4RiX75ElPJ2io1Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Ntdjk4HirhEO/SuOjwXi/e5vnkZ52+sWtT+vN/aDNnM=; b=YRO9VgEeCcHt9nhiN+HDczZ4ajx49PTlq9SdqSmJu4YoyALIqtOlTOg6m6M4tsSy0m+/mNbJylUai6z71FQZ37XFwXGdUg6ArvnpZlzpODVscuNEBQoXegWDkKDw0MqQbUFgIlb3TsBatu73kfZeYrrZ6XYh2nOUPx2GZOMtSXu4O2g7yZl9JVpYbCJQeBmCpN4bb/Dy9LBvCDC4VKJFSDua3s87gkHqoJU08FUes7au9C1yIANN9mjAYXeMZ0HD8s9/6PAf8VAGEokgpDOP69jrrkwALF+wu/AdbTpjcyfp/00FfWjnX0/quVReyGTt3RHYIaX+QzELZrj6MDq1oA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Ntdjk4HirhEO/SuOjwXi/e5vnkZ52+sWtT+vN/aDNnM=; b=DMybS8ywaxjpIYX8PksrQK9xB/CTfYNJaSmObqaaJH87xL87BNDiUz6VGX+cdH9rWpEGnp1jxNAvj+MqTNKZOzws5XSLqfqtFzVDkMJWDiju+AFNQFkp9M/gxBmSGX/3CZFLWD5ypECWltt9YhVY4t0d0SFLMJzmNew1bvWmUGY= Received: from BYAPR00MB0567.namprd00.prod.outlook.com (20.179.56.25) by BYAPR00MB0600.namprd00.prod.outlook.com (20.179.56.142) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2425.0; Thu, 24 Oct 2019 23:14:37 +0000 Received: from BYAPR00MB0567.namprd00.prod.outlook.com ([fe80::31af:5686:e43b:ed3a]) by BYAPR00MB0567.namprd00.prod.outlook.com ([fe80::31af:5686:e43b:ed3a%9]) with mapi id 15.20.2430.000; Thu, 24 Oct 2019 23:14:37 +0000 From: Mike Jones To: Neil Madden , Jim Schaad CC: cose , "draft-ietf-cose-webauthn-algorithms@ietf.org" Thread-Topic: =?utf-8?B?W0NPU0VdIPCflJQgV0dMQyBvZiBkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4t?= =?utf-8?Q?algorithms?= Thread-Index: AQHVbWSlFBVJFlStCEe6sWSpGQx0gacwqvUAgDUjSdCAAS3SAIABcr0AgABkD2CAAdPcEA== Date: Thu, 24 Oct 2019 23:14:37 +0000 Message-ID: References: <000001d56dc2$e14f20c0$a3ed6240$@augustcellars.com> <00ce01d588eb$6eee22d0$4cca6870$@augustcellars.com> <5B5DD1EA-33F6-4703-B757-66B324CD3706@forgerock.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=69e1a472-7080-450f-8a4e-00007169a4a3; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-10-23T19:19:45Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [2001:4898:80e8:2:d470:4f7:8cbd:3a65] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 855593e1-ee3a-4152-f438-08d758d7f0c2 x-ms-traffictypediagnostic: BYAPR00MB0600: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-forefront-prvs: 0200DDA8BE x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(366004)(396003)(346002)(376002)(39860400002)(136003)(189003)(199004)(316002)(7736002)(229853002)(54906003)(10090500001)(8990500004)(110136005)(790700001)(74316002)(5660300002)(6116002)(7696005)(733005)(6506007)(76176011)(81166006)(81156014)(10290500003)(6436002)(14454004)(53546011)(4326008)(102836004)(966005)(186003)(22452003)(478600001)(14444005)(256004)(11346002)(52536014)(446003)(476003)(2906002)(99286004)(486006)(33656002)(6246003)(71190400001)(71200400001)(76116006)(25786009)(66946007)(66446008)(46003)(66476007)(64756008)(66556008)(236005)(86362001)(6306002)(54896002)(606006)(8936002)(9686003)(55016002); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR00MB0600; H:BYAPR00MB0567.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: s0zKMeLMBKnfVFSw1JWq5L/Eq9zBpOVl9/Evsp19+rh6WzHT23tnaS9pbM8EykvJaBmkm/VHCHgqLqfKkk89o1OT5z7kQ+5xvmkh3hdbWG0QJCoSId1iTTD6vvdjg8M4QNRNQ4ozfQV/fGhadu+oX67nw7Rhbptbq/orRunBVq6THeJ3zjDdg4FvgmlMk5Ul+YKYPEAu9YmsOA8lk1uyP9eaYz7dscLPWyLLnHEha7OJ94KEQzjBeB0f3GjpvsDJ3Yp8MLDkGB8ErGnyLYftLOYgOpKdbuse1nw3Zt1DEUnfaWU/UKuZR0JqJBArPv0qVET9BBnliIgTeOUd1+EHaKmx46kDxyAaUXcx3VB8kBniNaWuiLv8jJ+ap/xeYrTO96QIh5WUvl1j+tSc9lkHBQxtlzFUvswZ7zILLp0FgyC2PTjTl5H0FpouFWLxYrFB x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_BYAPR00MB0567243DF06C29701ABB1198F56A0BYAPR00MB0567namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 855593e1-ee3a-4152-f438-08d758d7f0c2 X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Oct 2019 23:14:37.5726 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: DSi6KBF4lYp0jV6Uo/P6dy7JVarr+dBE7KCDrpwEYlAG+GATsfyuSHr6sJC3No06u97vnjcr2B15t+RRPA1GMQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR00MB0600 Archived-At: Subject: Re: [COSE] =?utf-8?q?=F0=9F=94=94_WGLC_of_draft-ietf-cose-webauthn-a?= =?utf-8?q?lgorithms?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 23:14:42 -0000 --_000_BYAPR00MB0567243DF06C29701ABB1198F56A0BYAPR00MB0567namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhlc2UgaXNzdWUgcmVzb2x1dGlvbnMgaGF2ZSBiZWVuIGluY29ycG9yYXRlZCBpbiBodHRwczov L3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXMt MDIuICBUaGFua3MgYWdhaW4gZm9yIHlvdXIgdXNlZnVsIHJldmlldywgYW5kIGVzcGVjaWFsbHkg Zm9yIHByb3ZpZGluZyB3b3JkaW5nIQ0KDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLS0gTWlrZQ0KDQpGcm9tOiBNaWtlIEpv bmVzDQpTZW50OiBXZWRuZXNkYXksIE9jdG9iZXIgMjMsIDIwMTkgMTI6MjAgUE0NClRvOiBOZWls IE1hZGRlbiA8bmVpbC5tYWRkZW5AZm9yZ2Vyb2NrLmNvbT47IEppbSBTY2hhYWQgPGlldGZAYXVn dXN0Y2VsbGFycy5jb20+DQpDYzogY29zZSA8Y29zZUBpZXRmLm9yZz47IGRyYWZ0LWlldGYtY29z ZS13ZWJhdXRobi1hbGdvcml0aG1zQGlldGYub3JnDQpTdWJqZWN0OiBSRTogW0NPU0VdIPCflJQg V0dMQyBvZiBkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtcw0KDQpEb27igJl0IGFw b2xvZ2l6ZS4gIFlvdSBwcm92aWRlZCBwcm9wb3NlZCB3b3JkaW5nLCB3aGljaCBpcyBleHRyZW1l bHkgaGVscGZ1bCENCg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIFRoYW5rcyBOZWlsLA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIC0tIE1pa2UNCg0KRnJvbTogTmVpbCBNYWRkZW4gPG5l aWwubWFkZGVuQGZvcmdlcm9jay5jb208bWFpbHRvOm5laWwubWFkZGVuQGZvcmdlcm9jay5jb20+ Pg0KU2VudDogV2VkbmVzZGF5LCBPY3RvYmVyIDIzLCAyMDE5IDY6MjIgQU0NClRvOiBKaW0gU2No YWFkIDxpZXRmQGF1Z3VzdGNlbGxhcnMuY29tPG1haWx0bzppZXRmQGF1Z3VzdGNlbGxhcnMuY29t Pj4NCkNjOiBNaWtlIEpvbmVzIDxNaWNoYWVsLkpvbmVzQG1pY3Jvc29mdC5jb208bWFpbHRvOk1p Y2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbT4+OyBjb3NlIDxjb3NlQGlldGYub3JnPG1haWx0bzpj b3NlQGlldGYub3JnPj47IGRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zQGlldGYu b3JnPG1haWx0bzpkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtc0BpZXRmLm9yZz4N ClN1YmplY3Q6IFJlOiBbQ09TRV0g8J+UlCBXR0xDIG9mIGRyYWZ0LWlldGYtY29zZS13ZWJhdXRo bi1hbGdvcml0aG1zDQoNCkEgY291cGxlIG9mIGFkZGl0aW9uYWwgZGF0YSBwb2ludHMgd2l0aCBy ZWdhcmQgdG8gZGV0ZXJtaW5pc3RpYyBFQ0RTQSAoc29ycnkgTWlrZSEpOg0KDQogLSBXaGlsZSBk ZXRlcm1pbmlzdGljIEVDRFNBIGlzIGdlbmVyYWxseSBtb3JlIHNlY3VyZSwgSSBnYXRoZXIgdGhh dCBpcyBub3QgKHlldD8pIGEgRklQUy1hcHByb3ZlZCBub25jZS1nZW5lcmF0aW9uIG1ldGhvZC4g U28gcGVvcGxlIHdpdGggRklQUyByZXF1aXJlbWVudHMgd29uJ3QgYmUgYWJsZSB0byB1c2UgaXQs IHNpZ2guDQoNCiAtIEluIHRoZSBzcGVjaWZpYyBjb250ZXh0IG9mIElvVCB3aGVyZSBkZXZpY2Vz IG1heSBiZSBwaHlzaWNhbGx5IHZ1bG5lcmFibGUsIGRldGVybWluaXN0aWMgRUNEU0EgYW5kIEVk RFNBIGhhdmUgYm90aCBiZWVuIHNob3duIHRvIGJlIHN1c2NlcHRpYmxlIHRvIGZhdWx0IGF0dGFj a3MgKHNlZSBlLmcuIFsxXSBhbmQgWzJdKS4gSW4gcGFydGljdWxhciwgZGV0ZXJtaW5pc3RpYyBF Q0RTQSBtYXkgYmUgKm1vcmUqIHZ1bG5lcmFibGUgdG8gc3VjaCBhdHRhY2tzIHRoYW4gcmFuZG9t aXplZCBFQ0RTQS4gVGhlIGxpbmtlZCBwYXBlcnMgb2ZmZXIgc29tZSBwcm9wb3NlZCBjb3VudGVy bWVhc3VyZXMuIEZvciBDV1QgdXNhZ2UsIEkgYmVsaWV2ZSBpbmNsdWRpbmcgYSBmcmVzaCByYW5k b20gImN0aSIgY2xhaW0gaW4gZXZlcnkgc2lnbmVkIHRva2VuIHdvdWxkIHJlZHVjZSB0aGUgZWZm ZWN0aXZlbmVzcyBvZiB0aGVzZSBhdHRhY2tzIGRyYW1hdGljYWxseSBhcyB0aGUgc2lnbmF0dXJl IGdlbmVyYXRpb24gd2lsbCBiZSBlZmZlY3RpdmVseSByYW5kb21pemVkIHdoaWxlIGFsc28gYmVp bmcgbm9uY2UgcmV1c2UgbWlzdXNlLXJlc2lzdGFudC4NCg0KSWYgSSB3YXMgZ29pbmcgdG8gcHJv cG9zZSB3b3JkaW5nLCBwZXJoYXBzIHNvbWV0aGluZyBhbG9uZyB0aGVzZSBsaW5lczoNCg0KPT09 PQ0KSW1wbGVtZW50YXRpb25zIFNIT1VMRCB1c2UgYSBkZXRlcm1pbmlzdGljIGFsZ29yaXRobSB0 byBnZW5lcmF0ZSB0aGUgRUNEU0Egbm9uY2UsIGssIHN1Y2ggYXMgW1JGQyA2OTc5XS4gSW4gc2l0 dWF0aW9ucyB3aGVyZSBkZXZpY2VzIGFyZSB2dWxuZXJhYmxlIHRvIHBoeXNpY2FsIGF0dGFja3Ms IGRldGVybWluaXN0aWMgRUNEU0EgaGFzIGJlZW4gc2hvd24gdG8gYmUgc3VzY2VwdGlibGUgdG8g ZmF1bHQgaW5qZWN0aW9uIGF0dGFja3MgW3JlZnNdLiBXaGVyZSB0aGlzIGlzIGEgcG9zc2liaWxp dHksIGltcGxlbWVudGF0aW9ucyBTSE9VTEQgaW1wbGVtZW50IGFwcHJvcHJpYXRlIGNvdW50ZXJt ZWFzdXJlcy4gV2hlcmUgdGhlcmUgYXJlIHNwZWNpZmljIGNlcnRpZmljYXRpb24gcmVxdWlyZW1l bnRzIChzdWNoIGFzIEZJUFMgYXBwcm92YWwpLCBpbXBsZW1lbnRvcnMgc2hvdWxkIGNoZWNrIHdo ZXRoZXIgZGV0ZXJtaW5pc3RpYyBFQ0RTQSBpcyBhbiBhcHByb3ZlZCBub25jZSBnZW5lcmF0aW9u IG1ldGhvZC4NCj09PT0NCg0KWzFdOiBodHRwczovL3Jlc2VhcmNoLmt1ZGVsc2tpc2VjdXJpdHku Y29tLzIwMTcvMTAvMDQvZGVmZWF0aW5nLWVkZHNhLXdpdGgtZmF1bHRzLzxodHRwczovL25hbTA2 LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZyZXNl YXJjaC5rdWRlbHNraXNlY3VyaXR5LmNvbSUyRjIwMTclMkYxMCUyRjA0JTJGZGVmZWF0aW5nLWVk ZHNhLXdpdGgtZmF1bHRzJTJGJmRhdGE9MDIlN0MwMSU3Q01pY2hhZWwuSm9uZXMlNDBtaWNyb3Nv ZnQuY29tJTdDZGNkYmUyNDAwN2M1NGE5ZmYzNGIwOGQ3NTdiYmYxNTglN0M3MmY5ODhiZjg2ZjE0 MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MDc0MzM4MzgxNjgyNjk0JnNkYXRhPTMy cG83NzhtZWhacXVWenpVdldDWTZ6SUxTYVNhOUxzVmZFYmpJRXhTWkUlM0QmcmVzZXJ2ZWQ9MD4N ClsyXTogaHR0cHM6Ly9lcHJpbnQuaWFjci5vcmcvMjAxNy8xMDE0LnBkZjxodHRwczovL25hbTA2 LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZlcHJp bnQuaWFjci5vcmclMkYyMDE3JTJGMTAxNC5wZGYmZGF0YT0wMiU3QzAxJTdDTWljaGFlbC5Kb25l cyU0MG1pY3Jvc29mdC5jb20lN0NkY2RiZTI0MDA3YzU0YTlmZjM0YjA4ZDc1N2JiZjE1OCU3Qzcy Zjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzcwNzQzMzgzODE2OTI2 OTQmc2RhdGE9emtvN2Y4S3VyMGFSQTR3bk5Hc01Kb3hoVTRYb1FnMmptMHBVd29HVUhTQSUzRCZy ZXNlcnZlZD0wPg0KDQotLQ0KW2h0dHBzOi8vZHJpdmUuZ29vZ2xlLmNvbS9hL2Zvcmdlcm9jay5j b20vdWM/aWQ9MVpUa1NLNDU4TUt1M041aS1sY3pJYWFJVGFUVjR6bmhWJmV4cG9ydD1kb3dubG9h ZF08aHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0 dHAlM0ElMkYlMkZ3d3cuZm9yZ2Vyb2NrLmNvbSZkYXRhPTAyJTdDMDElN0NNaWNoYWVsLkpvbmVz JTQwbWljcm9zb2Z0LmNvbSU3Q2RjZGJlMjQwMDdjNTRhOWZmMzRiMDhkNzU3YmJmMTU4JTdDNzJm OTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzA3NDMzODM4MTY5MjY5 NCZzZGF0YT1UZFhwMXpsQndmdDhkVHpVN1FXSXlmSVhWOExYVm02cjVoWkJ2RlB6TzM4JTNEJnJl c2VydmVkPTA+DQpOZWlsIE1hZGRlbg0KU2VjdXJpdHkgRGlyZWN0b3IgIHwgIEZvcmdlUm9jaw0K ZSBuZWlsLm1hZGRlbkBmb3JnZXJvY2suY29tPG1haWx0bzpuZWlsLm1hZGRlbkBmb3JnZXJvY2su Y29tPg0Kd2ViIGh0dHBzOi8vd3d3LmZvcmdlcm9jay5jb208aHR0cHM6Ly9uYW0wNi5zYWZlbGlu a3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHAlM0ElMkYlMkZ3d3cuZm9yZ2Vyb2Nr LmNvbSUyRiZkYXRhPTAyJTdDMDElN0NNaWNoYWVsLkpvbmVzJTQwbWljcm9zb2Z0LmNvbSU3Q2Rj ZGJlMjQwMDdjNTRhOWZmMzRiMDhkNzU3YmJmMTU4JTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdj ZDAxMWRiNDclN0MxJTdDMCU3QzYzNzA3NDMzODM4MTcwMjcxMyZzZGF0YT1XclBLaGpudmc0SkxM NWx1JTJCQ0VPNFAlMkZNcFR0MWs0cFVwZXVRJTJCdDd3b1BFJTNEJnJlc2VydmVkPTA+DQoNCg0K DQoNCk9uIDIyIE9jdCAyMDE5LCBhdCAxNjoxNCwgSmltIFNjaGFhZCA8aWV0ZkBhdWd1c3RjZWxs YXJzLmNvbTxtYWlsdG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbT4+IHdyb3RlOg0KDQpJIGZvcmdv dCB0byByZXNwb25kIHRvIHRoaXMgb25lDQoNCkZyb206IE1pa2UgSm9uZXMgPE1pY2hhZWwuSm9u ZXNAbWljcm9zb2Z0LmNvbTxtYWlsdG86TWljaGFlbC5Kb25lc0BtaWNyb3NvZnQuY29tPj4NClNl bnQ6IE1vbmRheSwgT2N0b2JlciAyMSwgMjAxOSA1OjAwIFBNDQpUbzogSmltIFNjaGFhZCA8aWV0 ZkBhdWd1c3RjZWxsYXJzLmNvbTxtYWlsdG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbT4+OyAnY29z ZScgPGNvc2VAaWV0Zi5vcmc8bWFpbHRvOmNvc2VAaWV0Zi5vcmc+Pg0KQ2M6IGRyYWZ0LWlldGYt Y29zZS13ZWJhdXRobi1hbGdvcml0aG1zQGlldGYub3JnPG1haWx0bzpkcmFmdC1pZXRmLWNvc2Ut d2ViYXV0aG4tYWxnb3JpdGhtc0BpZXRmLm9yZz4NClN1YmplY3Q6IFJFOiBbQ09TRV0g8J+UlCBX R0xDIG9mIGRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zDQoNClRoYW5rcyBmb3Ig eW91ciByZXZpZXcsIEppbS4gIFJlc3BvbnNlcyBhcmUgaW5saW5lLCBwcmVmaXhlZCBieSDigJxN aWtlPuKAnS4NCg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIC0tIE1pa2UNCg0KRnJvbTogSmltIFNjaGFhZCA8aWV0ZkBhdWd1c3RjZWxsYXJz LmNvbTxtYWlsdG86aWV0ZkBhdWd1c3RjZWxsYXJzLmNvbT4+DQpTZW50OiBUdWVzZGF5LCBTZXB0 ZW1iZXIgMTcsIDIwMTkgNjo0NiBQTQ0KVG86ICdjb3NlJyA8Y29zZUBpZXRmLm9yZzxtYWlsdG86 Y29zZUBpZXRmLm9yZz4+DQpDYzogZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXNA aWV0Zi5vcmc8bWFpbHRvOmRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zQGlldGYu b3JnPg0KU3ViamVjdDogUkU6IFtDT1NFXSDwn5SUIFdHTEMgb2YgZHJhZnQtaWV0Zi1jb3NlLXdl YmF1dGhuLWFsZ29yaXRobXMNCg0KSSBzdGFydCB0aGlzIHJldmlldyBieSBjb3B5aW5nIGZvcndh cmQgYWxsIG9mIG15IGNvbW1lbnRzIG9uIGRyYWZ0LWpvbmVzLWNvc2UtYWRkaXRpb25hbC1hbGdv cml0aG1zLTAwDQoNCg0KDQogIDEuICBQbGVhc2UgaW5jbHVkZSB0ZXh0IHJlbGF0ZWQgdG8gZGV0 ZXJtaW5pc3RpYyBFQ0RTQSBpbiB0aGlzIHRleHQuDQoNCk1pa2U+IFdoYXQgZG8geW91IHdhbnQg dGhpcyB0ZXh0IHRvIHNheT8gIEnigJltIHJlbHVjdGFudCB0byB1c2UgdGhlIHRleHQgYXQgaHR0 cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzgxNTIjc2VjdGlvbi04LjE8aHR0cHM6Ly9uYW0w Ni5zYWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGdG9v bHMuaWV0Zi5vcmclMkZodG1sJTJGcmZjODE1MiUyM3NlY3Rpb24tOC4xJmRhdGE9MDIlN0MwMSU3 Q01pY2hhZWwuSm9uZXMlNDBtaWNyb3NvZnQuY29tJTdDZGNkYmUyNDAwN2M1NGE5ZmYzNGIwOGQ3 NTdiYmYxNTglN0M3MmY5ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3 MDc0MzM4MzgxNzAyNzEzJnNkYXRhPWVhblZuZ1hBenIlMkZyRFBaRTJyQjVLaG5sSXYwd3JTRU40 TFhiJTJCQ1dVOEwwJTNEJnJlc2VydmVkPTA+LCB3aGljaCBzYXlzIHRoYXQg4oCcaW1wbGVtZW50 YXRpb25zIFNIT0xVRCB1c2UgYSBkZXRlcm1pbmlzdGljIGFsZ29yaXRobeKAnSwgd2hpY2ggaXMg bWlzbGVhZGluZywgaW4gdGhhdCBpdCBpbXBsaWVzIHRoYXQgdGhlcmUgYXJlIG1hbnkgc3VjaCBh bGdvcml0aG1zIHRoYXQgY291bGQgYmUgdXNlZC4gIEluIGZhY3QsIGV4YWN0bHkgb25lIGlzIGJl aW5nIHNwZWNpZmllZC4NCg0KW0pMU10gSSB3YXMgdW5hd2FyZSB0aGF0IHRoZXJlIGlzIG9ubHkg b25lIHBvc3NpYmxlIGRldGVybWluaXN0aWMgYWxnb3JpdGhtLCBhbnkga2V5ZWQgaGFzaCBhbGdv cml0aG0gY2FuIGJlIHVzZWQgdG8gZ2VuZXJhdGUgdGhlIGRldGVybWluaXN0aWMg4oCYa+KAmSB0 byBiZSB1c2VkIGZvciB0aGUgc2lnbmF0dXJlIGFsZ29yaXRobS4gIFRoZXJlIGlzIG5vdCBhIHJl cXVpcmVtZW50IHRoYXQgdGhlIHNlY3JldCB2YWx1ZSBiZSB0aGUgcHJpdmF0ZSBrZXkgZm9yIHRo ZSBzaWduYXR1cmUga2V5IHBhaXIsIG9uZSBjb3VsZCBnZW5lcmF0ZSBhIHByaXZhdGUgdmFsdWUg anVzdCBmb3IgdGhhdCBwdXJwb3NlLiAgSW5kZXBlbmRlbnQgb2YgdGhhdCwgdGhlIGRlZmF1bHQg RUNEU0EgYWxnb3JpdGhtIHNwZWNpZmljYXRpb25zIGFsbCBzYXkgdXNlIGEgcmFuZG9tIHZhbHVl IG9mIOKAmGvigJkgcmF0aGVyIHRoYW4gYSBkZXRlcm1pbmlzdGljIHZhbHVlIGFuZCB0aGUgdXNl IG9mIHRoZSBkZXRlcm1pbmlzdGljIHZhbHVlIGlzIGZhciBtb3JlIHNlY3VyZS4NCl9fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpDT1NFIG1haWxpbmcgbGlz dA0KQ09TRUBpZXRmLm9yZzxtYWlsdG86Q09TRUBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYu b3JnL21haWxtYW4vbGlzdGluZm8vY29zZTxodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0 aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMlM0ElMkYlMkZ3d3cuaWV0Zi5vcmclMkZtYWlsbWFu JTJGbGlzdGluZm8lMkZjb3NlJmRhdGE9MDIlN0MwMSU3Q01pY2hhZWwuSm9uZXMlNDBtaWNyb3Nv ZnQuY29tJTdDZGNkYmUyNDAwN2M1NGE5ZmYzNGIwOGQ3NTdiYmYxNTglN0M3MmY5ODhiZjg2ZjE0 MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MDc0MzM4MzgxNzAyNzEzJnNkYXRhPUVk bXJYcml2NVg5cnI2QjFOVDlkb25wQkluZDhDZ2NNTzBKbm1LeW1JRzQlM0QmcmVzZXJ2ZWQ9MD4N Cg0K --_000_BYAPR00MB0567243DF06C29701ABB1198F56A0BYAPR00MB0567namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIg MTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IlNlZ29lIFVJ IEVtb2ppIjsNCglwYW5vc2UtMToyIDExIDUgMiA0IDIgNCAyIDIgMzt9DQpAZm9udC1mYWNlDQoJ e2ZvbnQtZmFtaWx5OkhlbHZldGljYU5ldWU7DQoJcGFub3NlLTE6MCAwIDAgMCAwIDAgMCAwIDAg MDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkZpcmFNb25vLVJlZ3VsYXI7DQoJcGFub3Nl LTE6MCAwIDAgMCAwIDAgMCAwIDAgMDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29O b3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdp bi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxp YnJpIixzYW5zLXNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxl LXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9 DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAu TXNvTGlzdFBhcmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3Jh cGgNCgl7bXNvLXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0K CW1hcmdpbi1yaWdodDowaW47DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2lu LWxlZnQ6MGluOw0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNh bnMtc2VyaWY7fQ0KcC5tc29ub3JtYWwwLCBsaS5tc29ub3JtYWwwLCBkaXYubXNvbm9ybWFsMA0K CXttc28tc3R5bGUtbmFtZTptc29ub3JtYWw7DQoJbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87DQoJ bWFyZ2luLXJpZ2h0OjBpbjsNCgltc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzsNCgltYXJnaW4t bGVmdDowaW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fu cy1zZXJpZjt9DQpzcGFuLmFwcGxlLWNvbnZlcnRlZC1zcGFjZQ0KCXttc28tc3R5bGUtbmFtZTph cHBsZS1jb252ZXJ0ZWQtc3BhY2U7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjANCgl7bXNvLXN0eWxlLXR5 cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6 IzAwMjA2MDt9DQpzcGFuLkVtYWlsU3R5bGUyMw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1y ZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjojMDAyMDYw O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQt c2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0K CW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3Bh Z2U6V29yZFNlY3Rpb24xO30NCi8qIExpc3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21z by1saXN0LWlkOjc4Nzc3Mjc1MTsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6MTcxNjcwODcyNDt9 DQpAbGlzdCBsMDpsZXZlbDENCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7 DQoJbXNvLWxldmVsLXRhYi1zdG9wOi41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDINCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEuMGluOw0K CW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0K QGxpc3QgbDA6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0K CW1zby1sZXZlbC10YWItc3RvcDoxLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxl ZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwwOmxldmVsNA0KCXttc28tbGV2ZWwt bnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6Mi4waW47DQoJ bXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpA bGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJ bXNvLWxldmVsLXRhYi1zdG9wOjIuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDozLjBpbjsNCglt c28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBs aXN0IGwwOmxldmVsNw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCglt c28tbGV2ZWwtdGFiLXN0b3A6My41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0 Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMDpsZXZlbDgNCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQuMGluOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxp c3QgbDA6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1z by1sZXZlbC10YWItc3RvcDo0LjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7 DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxDQoJe21zby1saXN0LWlkOjk2MTc2NzI3 MjsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6LTExMDMwODM5OTg7fQ0KQGxpc3QgbDE6bGV2ZWwx DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWIt c3RvcDouNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotLjI1aW47fQ0KQGxpc3QgbDE6bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFs cGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDoxLjBpbjsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVsMw0K CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0 b3A6MS41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0uMjVpbjt9DQpAbGlzdCBsMTpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxw aGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIuMGluOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47fQ0KQGxpc3QgbDE6bGV2ZWw1DQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhhLXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3Rv cDoyLjVpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6 LS4yNWluO30NCkBsaXN0IGwxOmxldmVsNg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBo YS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6My4waW47DQoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjt9DQpAbGlzdCBsMTpsZXZlbDcNCgl7 bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YWxwaGEtdXBwZXI7DQoJbXNvLWxldmVsLXRhYi1zdG9w OjMuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDot LjI1aW47fQ0KQGxpc3QgbDE6bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmFscGhh LXVwcGVyOw0KCW1zby1sZXZlbC10YWItc3RvcDo0LjBpbjsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluO30NCkBsaXN0IGwxOmxldmVsOQ0KCXtt c28tbGV2ZWwtbnVtYmVyLWZvcm1hdDphbHBoYS11cHBlcjsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 NC41aW47DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0u MjVpbjt9DQpvbA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQp1bA0KCXttYXJnaW4tYm90dG9tOjBp bjt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0 cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1b aWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRt YXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5k aWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1 cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIwNjAiPlRoZXNlIGlzc3VlIHJlc29sdXRpb25zIGhhdmUg YmVlbiBpbmNvcnBvcmF0ZWQgaW4NCjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9kcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtcy0wMiI+aHR0cHM6Ly90b29scy5p ZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zLTAyPC9hPi4m bmJzcDsgVGhhbmtzIGFnYWluIGZvciB5b3VyIHVzZWZ1bCByZXZpZXcsIGFuZCBlc3BlY2lhbGx5 IGZvciBwcm92aWRpbmcgd29yZGluZyE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMDIw NjAiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAtLSBNaWtlPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMw MDIwNjAiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJi b3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAw aW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj5Gcm9tOjwvYj4gTWlrZSBKb25l cyA8YnI+DQo8Yj5TZW50OjwvYj4gV2VkbmVzZGF5LCBPY3RvYmVyIDIzLCAyMDE5IDEyOjIwIFBN PGJyPg0KPGI+VG86PC9iPiBOZWlsIE1hZGRlbiAmbHQ7bmVpbC5tYWRkZW5AZm9yZ2Vyb2NrLmNv bSZndDs7IEppbSBTY2hhYWQgJmx0O2lldGZAYXVndXN0Y2VsbGFycy5jb20mZ3Q7PGJyPg0KPGI+ Q2M6PC9iPiBjb3NlICZsdDtjb3NlQGlldGYub3JnJmd0OzsgZHJhZnQtaWV0Zi1jb3NlLXdlYmF1 dGhuLWFsZ29yaXRobXNAaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUkU6IFtDT1NFXSA8 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7U2Vnb2UgVUkgRW1vamkmcXVvdDssc2Fucy1z ZXJpZiI+DQomIzEyODI3Njs8L3NwYW4+IFdHTEMgb2YgZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhu LWFsZ29yaXRobXM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJjb2xvcjojMDAyMDYwIj5Eb27igJl0IGFwb2xvZ2l6ZS4mbmJzcDsgWW91IHByb3Zp ZGVkIHByb3Bvc2VkIHdvcmRpbmcsIHdoaWNoIGlzIGV4dHJlbWVseSBoZWxwZnVsITxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjoj MDAyMDYwIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IFRoYW5rcyBOZWlsLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj4mbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgLS0gTWlrZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVy LXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PGI+RnJvbTo8L2I+IE5laWwgTWFkZGVuICZsdDs8YSBocmVmPSJt YWlsdG86bmVpbC5tYWRkZW5AZm9yZ2Vyb2NrLmNvbSI+bmVpbC5tYWRkZW5AZm9yZ2Vyb2NrLmNv bTwvYT4mZ3Q7DQo8YnI+DQo8Yj5TZW50OjwvYj4gV2VkbmVzZGF5LCBPY3RvYmVyIDIzLCAyMDE5 IDY6MjIgQU08YnI+DQo8Yj5Ubzo8L2I+IEppbSBTY2hhYWQgJmx0OzxhIGhyZWY9Im1haWx0bzpp ZXRmQGF1Z3VzdGNlbGxhcnMuY29tIj5pZXRmQGF1Z3VzdGNlbGxhcnMuY29tPC9hPiZndDs8YnI+ DQo8Yj5DYzo8L2I+IE1pa2UgSm9uZXMgJmx0OzxhIGhyZWY9Im1haWx0bzpNaWNoYWVsLkpvbmVz QG1pY3Jvc29mdC5jb20iPk1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbTwvYT4mZ3Q7OyBjb3Nl ICZsdDs8YSBocmVmPSJtYWlsdG86Y29zZUBpZXRmLm9yZyI+Y29zZUBpZXRmLm9yZzwvYT4mZ3Q7 Ow0KPGEgaHJlZj0ibWFpbHRvOmRyYWZ0LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zQGll dGYub3JnIj5kcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtc0BpZXRmLm9yZzwvYT48 YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtDT1NFXSA8c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6 JnF1b3Q7U2Vnb2UgVUkgRW1vamkmcXVvdDssc2Fucy1zZXJpZiI+DQomIzEyODI3Njs8L3NwYW4+ IFdHTEMgb2YgZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXM8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5BIGNvdXBsZSBvZiBhZGRpdGlvbmFs IGRhdGEgcG9pbnRzIHdpdGggcmVnYXJkIHRvIGRldGVybWluaXN0aWMgRUNEU0EgKHNvcnJ5IE1p a2UhKTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+Jm5ic3A7LSBXaGlsZSBkZXRlcm1pbmlzdGljIEVDRFNBIGlzIGdlbmVyYWxseSBtb3JlIHNl Y3VyZSwgSSBnYXRoZXIgdGhhdCBpcyBub3QgKHlldD8pIGEgRklQUy1hcHByb3ZlZCBub25jZS1n ZW5lcmF0aW9uIG1ldGhvZC4gU28gcGVvcGxlIHdpdGggRklQUyByZXF1aXJlbWVudHMgd29uJ3Qg YmUgYWJsZSB0byB1c2UgaXQsIHNpZ2guPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOy0gSW4gdGhlIHNwZWNpZmljIGNvbnRleHQgb2Yg SW9UIHdoZXJlIGRldmljZXMgbWF5IGJlIHBoeXNpY2FsbHkgdnVsbmVyYWJsZSwgZGV0ZXJtaW5p c3RpYyBFQ0RTQSBhbmQgRWREU0EgaGF2ZSBib3RoIGJlZW4gc2hvd24gdG8gYmUgc3VzY2VwdGli bGUgdG8gZmF1bHQgYXR0YWNrcyAoc2VlIGUuZy4gWzFdIGFuZCBbMl0pLiBJbiBwYXJ0aWN1bGFy LCBkZXRlcm1pbmlzdGljIEVDRFNBIG1heSBiZSAqbW9yZSoNCiB2dWxuZXJhYmxlIHRvIHN1Y2gg YXR0YWNrcyB0aGFuIHJhbmRvbWl6ZWQgRUNEU0EuIFRoZSBsaW5rZWQgcGFwZXJzIG9mZmVyIHNv bWUgcHJvcG9zZWQgY291bnRlcm1lYXN1cmVzLiBGb3IgQ1dUIHVzYWdlLCBJIGJlbGlldmUgaW5j bHVkaW5nIGEgZnJlc2ggcmFuZG9tICZxdW90O2N0aSZxdW90OyBjbGFpbSBpbiBldmVyeSBzaWdu ZWQgdG9rZW4gd291bGQgcmVkdWNlIHRoZSBlZmZlY3RpdmVuZXNzIG9mIHRoZXNlIGF0dGFja3Mg ZHJhbWF0aWNhbGx5IGFzIHRoZQ0KIHNpZ25hdHVyZSBnZW5lcmF0aW9uIHdpbGwgYmUgZWZmZWN0 aXZlbHkgcmFuZG9taXplZCB3aGlsZSBhbHNvIGJlaW5nIG5vbmNlIHJldXNlIG1pc3VzZS1yZXNp c3RhbnQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPklmIEkgd2FzIGdvaW5nIHRvIHByb3Bvc2Ugd29yZGluZywgcGVyaGFwcyBzb21ldGhpbmcg YWxvbmcgdGhlc2UgbGluZXM6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPj09PT08bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPkltcGxlbWVudGF0aW9ucyBTSE9VTEQgdXNlIGEgZGV0ZXJtaW5pc3Rp YyBhbGdvcml0aG0gdG8gZ2VuZXJhdGUgdGhlIEVDRFNBIG5vbmNlLCBrLCBzdWNoIGFzIFtSRkMg Njk3OV0uIEluIHNpdHVhdGlvbnMgd2hlcmUgZGV2aWNlcyBhcmUgdnVsbmVyYWJsZSB0byBwaHlz aWNhbCBhdHRhY2tzLCBkZXRlcm1pbmlzdGljIEVDRFNBIGhhcyBiZWVuIHNob3duIHRvIGJlIHN1 c2NlcHRpYmxlIHRvIGZhdWx0IGluamVjdGlvbg0KIGF0dGFja3MgW3JlZnNdLiBXaGVyZSB0aGlz IGlzIGEgcG9zc2liaWxpdHksIGltcGxlbWVudGF0aW9ucyBTSE9VTEQgaW1wbGVtZW50IGFwcHJv cHJpYXRlIGNvdW50ZXJtZWFzdXJlcy4gV2hlcmUgdGhlcmUgYXJlIHNwZWNpZmljIGNlcnRpZmlj YXRpb24gcmVxdWlyZW1lbnRzIChzdWNoIGFzIEZJUFMgYXBwcm92YWwpLCBpbXBsZW1lbnRvcnMg c2hvdWxkIGNoZWNrIHdoZXRoZXIgZGV0ZXJtaW5pc3RpYyBFQ0RTQSBpcyBhbiBhcHByb3ZlZCBu b25jZQ0KIGdlbmVyYXRpb24gbWV0aG9kLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PT09PTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5bMV06Jm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly9uYW0wNi5z YWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGcmVzZWFy Y2gua3VkZWxza2lzZWN1cml0eS5jb20lMkYyMDE3JTJGMTAlMkYwNCUyRmRlZmVhdGluZy1lZGRz YS13aXRoLWZhdWx0cyUyRiZhbXA7ZGF0YT0wMiU3QzAxJTdDTWljaGFlbC5Kb25lcyU0MG1pY3Jv c29mdC5jb20lN0NkY2RiZTI0MDA3YzU0YTlmZjM0YjA4ZDc1N2JiZjE1OCU3QzcyZjk4OGJmODZm MTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzcwNzQzMzgzODE2ODI2OTQmYW1wO3Nk YXRhPTMycG83NzhtZWhacXVWenpVdldDWTZ6SUxTYVNhOUxzVmZFYmpJRXhTWkUlM0QmYW1wO3Jl c2VydmVkPTAiPmh0dHBzOi8vcmVzZWFyY2gua3VkZWxza2lzZWN1cml0eS5jb20vMjAxNy8xMC8w NC9kZWZlYXRpbmctZWRkc2Etd2l0aC1mYXVsdHMvPC9hPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+WzJdOiZuYnNwOzxhIGhyZWY9Imh0 dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUz QSUyRiUyRmVwcmludC5pYWNyLm9yZyUyRjIwMTclMkYxMDE0LnBkZiZhbXA7ZGF0YT0wMiU3QzAx JTdDTWljaGFlbC5Kb25lcyU0MG1pY3Jvc29mdC5jb20lN0NkY2RiZTI0MDA3YzU0YTlmZjM0YjA4 ZDc1N2JiZjE1OCU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2 MzcwNzQzMzgzODE2OTI2OTQmYW1wO3NkYXRhPXprbzdmOEt1cjBhUkE0d25OR3NNSm94aFU0WG9R ZzJqbTBwVXdvR1VIU0ElM0QmYW1wO3Jlc2VydmVkPTAiPmh0dHBzOi8vZXByaW50LmlhY3Iub3Jn LzIwMTcvMTAxNC5wZGY8L2E+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0K PGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7RmlyYU1vbm8tUmVndWxhciZxdW90OyxzZXJpZjtjb2xvcjpibGFjayI+LS08L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtjb2xvcjpibGFjayI+PG86cD48L286cD48L3NwYW4+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHRhYmxlIGNsYXNzPSJNc29Ob3JtYWxUYWJsZSIgYm9yZGVy PSIwIiBjZWxsc3BhY2luZz0iMCIgY2VsbHBhZGRpbmc9IjAiPg0KPHRib2R5Pg0KPHRyPg0KPHRk IHZhbGlnbj0idG9wIiBzdHlsZT0icGFkZGluZzowaW4gMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PGEgaHJlZj0iaHR0cHM6Ly9uYW0wNi5zYWZlbGlua3MucHJvdGVjdGlvbi5v dXRsb29rLmNvbS8/dXJsPWh0dHAlM0ElMkYlMkZ3d3cuZm9yZ2Vyb2NrLmNvbSZhbXA7ZGF0YT0w MiU3QzAxJTdDTWljaGFlbC5Kb25lcyU0MG1pY3Jvc29mdC5jb20lN0NkY2RiZTI0MDA3YzU0YTlm ZjM0YjA4ZDc1N2JiZjE1OCU3QzcyZjk4OGJmODZmMTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3 QzAlN0M2MzcwNzQzMzgzODE2OTI2OTQmYW1wO3NkYXRhPVRkWHAxemxCd2Z0OGRUelU3UVdJeWZJ WFY4TFhWbTZyNWhaQnZGUHpPMzglM0QmYW1wO3Jlc2VydmVkPTAiIHRhcmdldD0iX2JsYW5rIj48 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7VGltZXMgTmV3IFJvbWFuJnF1b3Q7LHNlcmlm O3RleHQtZGVjb3JhdGlvbjpub25lIj48aW1nIGJvcmRlcj0iMCIgd2lkdGg9IjIwMCIgaGVpZ2h0 PSI3NSIgc3R5bGU9IndpZHRoOjIuMDgzM2luO2hlaWdodDouNzgxMmluIiBpZD0iX3gwMDAwX2kx MDI1IiBzcmM9Imh0dHBzOi8vZHJpdmUuZ29vZ2xlLmNvbS9hL2Zvcmdlcm9jay5jb20vdWM/aWQ9 MVpUa1NLNDU4TUt1M041aS1sY3pJYWFJVGFUVjR6bmhWJmFtcDtleHBvcnQ9ZG93bmxvYWQiPjwv c3Bhbj48L2E+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O1RpbWVzIE5ldyBSb21hbiZx dW90OyxzZXJpZiI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC90ZD4NCjx0ZCB2YWxpZ249InRv cCIgc3R5bGU9ImJhY2tncm91bmQ6d2hpdGU7cGFkZGluZzowaW4gMGluIDBpbiAwaW4iPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9ImxpbmUtaGVpZ2h0OjEzLjZwdCI+PGI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTo4LjVwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMyRjM0MzgiPk5laWwgTWFkZGVuPC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjguNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6IzJGMzQzOCI+PGJyPg0KU2VjdXJpdHkgRGlyZWN0b3IgJm5ic3A7fCZuYnNwOyBGb3JnZVJv Y2s8YnI+DQo8L3NwYW4+PHN0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1zaXplOjguNXB0O2ZvbnQt ZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzdGQjdBQSI+ZTwvc3Bh bj48L3N0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1zaXplOjguNXB0O2ZvbnQtZmFtaWx5OiZxdW90 O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzJGMzQzOCI+Jm5ic3A7PGEgaHJlZj0ibWFp bHRvOm5laWwubWFkZGVuQGZvcmdlcm9jay5jb20iPm5laWwubWFkZGVuQGZvcmdlcm9jay5jb208 L2E+PGJyPg0KPC9zcGFuPjxzdHJvbmc+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo4LjVwdDtmb250 LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM3RkI3QUEiPndlYjwv c3Bhbj48L3N0cm9uZz48c3BhbiBzdHlsZT0iZm9udC1zaXplOjguNXB0O2ZvbnQtZmFtaWx5OiZx dW90O0FyaWFsJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzJGMzQzOCI+Jm5ic3A7aHR0cHM6Ly88 YSBocmVmPSJodHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91 cmw9aHR0cCUzQSUyRiUyRnd3dy5mb3JnZXJvY2suY29tJTJGJmFtcDtkYXRhPTAyJTdDMDElN0NN aWNoYWVsLkpvbmVzJTQwbWljcm9zb2Z0LmNvbSU3Q2RjZGJlMjQwMDdjNTRhOWZmMzRiMDhkNzU3 YmJmMTU4JTdDNzJmOTg4YmY4NmYxNDFhZjkxYWIyZDdjZDAxMWRiNDclN0MxJTdDMCU3QzYzNzA3 NDMzODM4MTcwMjcxMyZhbXA7c2RhdGE9V3JQS2hqbnZnNEpMTDVsdSUyQkNFTzRQJTJGTXBUdDFr NHBVcGV1USUyQnQ3d29QRSUzRCZhbXA7cmVzZXJ2ZWQ9MCIgdGFyZ2V0PSJfYmxhbmsiPjxzcGFu IHN0eWxlPSJjb2xvcjojMkYzNDM4O3RleHQtZGVjb3JhdGlvbjpub25lIj53d3cuZm9yZ2Vyb2Nr LmNvbTwvc3Bhbj48L2E+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC90ZD4NCjwvdHI+DQo8L3Ri b2R5Pg0KPC90YWJsZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjkuMHB0O2NvbG9yOmJsYWNrIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6 YmxhY2siPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90 dG9tOjEyLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFy Z2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj5PbiAyMiBPY3QgMjAxOSwgYXQgMTY6MTQsIEppbSBTY2hhYWQgJmx0OzxhIGhyZWY9 Im1haWx0bzppZXRmQGF1Z3VzdGNlbGxhcnMuY29tIj5pZXRmQGF1Z3VzdGNlbGxhcnMuY29tPC9h PiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5JIGZvcmdvdCB0byByZXNwb25kIHRvIHRoaXMgb25lPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFF MSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48Yj5Gcm9tOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+TWlrZSBKb25lcyAmbHQ7PGEgaHJlZj0ibWFpbHRvOk1pY2hhZWwuSm9uZXNA bWljcm9zb2Z0LmNvbSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+TWljaGFlbC5Kb25lc0Bt aWNyb3NvZnQuY29tPC9zcGFuPjwvYT4mZ3Q7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1z cGFjZSI+Jm5ic3A7PC9zcGFuPjxicj4NCjxiPlNlbnQ6PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1j b252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5Nb25kYXksIE9jdG9iZXIgMjEsIDIwMTkgNTow MCBQTTxicj4NCjxiPlRvOjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+SmltIFNjaGFhZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlldGZAYXVndXN0Y2Vs bGFycy5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmlldGZAYXVndXN0Y2VsbGFycy5j b208L3NwYW4+PC9hPiZndDs7ICdjb3NlJyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmNvc2VAaWV0Zi5v cmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmNvc2VAaWV0Zi5vcmc8L3NwYW4+PC9hPiZn dDs8YnI+DQo8Yj5DYzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5i c3A7PC9zcGFuPjxhIGhyZWY9Im1haWx0bzpkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3Jp dGhtc0BpZXRmLm9yZyI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+ZHJhZnQtaWV0Zi1jb3Nl LXdlYmF1dGhuLWFsZ29yaXRobXNAaWV0Zi5vcmc8L3NwYW4+PC9hPjxicj4NCjxiPlN1YmplY3Q6 PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5SRTog W0NPU0VdPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxz cGFuIHN0eWxlPSJmb250LWZhbWlseTomcXVvdDtTZWdvZSBVSSBFbW9qaSZxdW90OyxzYW5zLXNl cmlmIj4mIzEyODI3Njs8L3NwYW4+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+ Jm5ic3A7PC9zcGFuPldHTEMgb2YgZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXM8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDAyMDYwIj5UaGFua3MgZm9yIHlvdXIg cmV2aWV3LCBKaW0uJm5ic3A7IFJlc3BvbnNlcyBhcmUgaW5saW5lLCBwcmVmaXhlZCBieSDigJw8 L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOiMwMEIwNTAiPk1pa2UmZ3Q74oCdLjwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJjb2xvcjojMDAyMDYwIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iY29sb3I6IzAwMjA2MCI+ Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IC0tIE1pa2U8L3NwYW4+PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iY29sb3I6IzAwMjA2MCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUx IDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxiPkZyb206PC9iPjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZu YnNwOzwvc3Bhbj5KaW0gU2NoYWFkICZsdDs8YSBocmVmPSJtYWlsdG86aWV0ZkBhdWd1c3RjZWxs YXJzLmNvbSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+aWV0ZkBhdWd1c3RjZWxsYXJzLmNv bTwvc3Bhbj48L2E+Jmd0OzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNw Ozwvc3Bhbj48YnI+DQo8Yj5TZW50OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNw YWNlIj4mbmJzcDs8L3NwYW4+VHVlc2RheSwgU2VwdGVtYmVyIDE3LCAyMDE5IDY6NDYgUE08YnI+ DQo8Yj5Ubzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9z cGFuPidjb3NlJyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmNvc2VAaWV0Zi5vcmciPjxzcGFuIHN0eWxl PSJjb2xvcjpwdXJwbGUiPmNvc2VAaWV0Zi5vcmc8L3NwYW4+PC9hPiZndDs8YnI+DQo8Yj5DYzo8 L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhy ZWY9Im1haWx0bzpkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4tYWxnb3JpdGhtc0BpZXRmLm9yZyI+ PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+ZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29y aXRobXNAaWV0Zi5vcmc8L3NwYW4+PC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPjxzcGFuIGNsYXNz PSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj5SRTogW0NPU0VdPHNwYW4gY2xh c3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxzcGFuIHN0eWxlPSJmb250 LWZhbWlseTomcXVvdDtTZWdvZSBVSSBFbW9qaSZxdW90OyxzYW5zLXNlcmlmIj4mIzEyODI3Njs8 L3NwYW4+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPldH TEMgb2YgZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXM8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkg c3RhcnQgdGhpcyByZXZpZXcgYnkgY29weWluZyBmb3J3YXJkIGFsbCBvZiBteSBjb21tZW50cyBv biBkcmFmdC1qb25lcy1jb3NlLWFkZGl0aW9uYWwtYWxnb3JpdGhtcy0wMDxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPG9sIHN0eWxlPSJtYXJnaW4tdG9wOjBpbiIgc3RhcnQ9IjEiIHR5cGU9 IkEiPg0KPGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFyZ2luLXRvcDowaW47 bWFyZ2luLWJvdHRvbTowaW47bWFyZ2luLWJvdHRvbTouMDAwMXB0O21zby1saXN0OmwxIGxldmVs MSBsZm8zIj4NClBsZWFzZSBpbmNsdWRlIHRleHQgcmVsYXRlZCB0byBkZXRlcm1pbmlzdGljIEVD RFNBIGluIHRoaXMgdGV4dC48bzpwPjwvbzpwPjwvbGk+PC9vbD4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJjb2xvcjojMDBCMDUwIj5NaWtlJmd0OyBXaGF0IGRv IHlvdSB3YW50IHRoaXMgdGV4dCB0byBzYXk/Jm5ic3A7IEnigJltIHJlbHVjdGFudCB0byB1c2Ug dGhlIHRleHQgYXQ8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+PC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0 bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnRvb2xzLmlldGYub3JnJTJGaHRtbCUyRnJmYzgx NTIlMjNzZWN0aW9uLTguMSZhbXA7ZGF0YT0wMiU3QzAxJTdDTWljaGFlbC5Kb25lcyU0MG1pY3Jv c29mdC5jb20lN0NkY2RiZTI0MDA3YzU0YTlmZjM0YjA4ZDc1N2JiZjE1OCU3QzcyZjk4OGJmODZm MTQxYWY5MWFiMmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzcwNzQzMzgzODE3MDI3MTMmYW1wO3Nk YXRhPWVhblZuZ1hBenIlMkZyRFBaRTJyQjVLaG5sSXYwd3JTRU40TFhiJTJCQ1dVOEwwJTNEJmFt cDtyZXNlcnZlZD0wIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5odHRwczovL3Rvb2xzLmll dGYub3JnL2h0bWwvcmZjODE1MiNzZWN0aW9uLTguMTwvc3Bhbj48L2E+PHNwYW4gc3R5bGU9ImNv bG9yOiMwMEIwNTAiPiwNCiB3aGljaCBzYXlzIHRoYXQg4oCcaW1wbGVtZW50YXRpb25zIFNIT0xV RCB1c2UgYSBkZXRlcm1pbmlzdGljIGFsZ29yaXRobeKAnSwgd2hpY2ggaXMgbWlzbGVhZGluZywg aW4gdGhhdCBpdCBpbXBsaWVzIHRoYXQgdGhlcmUgYXJlIG1hbnkgc3VjaCBhbGdvcml0aG1zIHRo YXQgY291bGQgYmUgdXNlZC4mbmJzcDsgSW4gZmFjdCwgZXhhY3RseSBvbmUgaXMgYmVpbmcgc3Bl Y2lmaWVkLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxk aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+W0pMU10gSSB3YXMgdW5hd2FyZSB0aGF0 IHRoZXJlIGlzIG9ubHkgb25lIHBvc3NpYmxlIGRldGVybWluaXN0aWMgYWxnb3JpdGhtLCBhbnkg a2V5ZWQgaGFzaCBhbGdvcml0aG0gY2FuIGJlIHVzZWQgdG8gZ2VuZXJhdGUgdGhlIGRldGVybWlu aXN0aWMg4oCYa+KAmSB0byBiZSB1c2VkIGZvciB0aGUgc2lnbmF0dXJlIGFsZ29yaXRobS4mbmJz cDsgVGhlcmUgaXMgbm90IGEgcmVxdWlyZW1lbnQgdGhhdCB0aGUgc2VjcmV0IHZhbHVlDQogYmUg dGhlIHByaXZhdGUga2V5IGZvciB0aGUgc2lnbmF0dXJlIGtleSBwYWlyLCBvbmUgY291bGQgZ2Vu ZXJhdGUgYSBwcml2YXRlIHZhbHVlIGp1c3QgZm9yIHRoYXQgcHVycG9zZS4mbmJzcDsgSW5kZXBl bmRlbnQgb2YgdGhhdCwgdGhlIGRlZmF1bHQgRUNEU0EgYWxnb3JpdGhtIHNwZWNpZmljYXRpb25z IGFsbCBzYXkgdXNlIGEgcmFuZG9tIHZhbHVlIG9mIOKAmGvigJkgcmF0aGVyIHRoYW4gYSBkZXRl cm1pbmlzdGljIHZhbHVlIGFuZCB0aGUgdXNlIG9mIHRoZQ0KIGRldGVybWluaXN0aWMgdmFsdWUg aXMgZmFyIG1vcmUgc2VjdXJlLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjVwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2FOZXVlJnF1b3Q7LHNlcmlmIj5fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NCkNPU0UgbWFpbGlu ZyBsaXN0PGJyPg0KPC9zcGFuPjxhIGhyZWY9Im1haWx0bzpDT1NFQGlldGYub3JnIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2FOZXVlJnF1 b3Q7LHNlcmlmO2NvbG9yOnB1cnBsZSI+Q09TRUBpZXRmLm9yZzwvc3Bhbj48L2E+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhTmV1ZSZxdW90 OyxzZXJpZiI+PGJyPg0KPC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnBy b3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1odHRwcyUzQSUyRiUyRnd3dy5pZXRmLm9yZyUyRm1h aWxtYW4lMkZsaXN0aW5mbyUyRmNvc2UmYW1wO2RhdGE9MDIlN0MwMSU3Q01pY2hhZWwuSm9uZXMl NDBtaWNyb3NvZnQuY29tJTdDZGNkYmUyNDAwN2M1NGE5ZmYzNGIwOGQ3NTdiYmYxNTglN0M3MmY5 ODhiZjg2ZjE0MWFmOTFhYjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MDc0MzM4MzgxNzAyNzEz JmFtcDtzZGF0YT1FZG1yWHJpdjVYOXJyNkIxTlQ5ZG9ucEJJbmQ4Q2djTU8wSm5tS3ltSUc0JTNE JmFtcDtyZXNlcnZlZD0wIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWls eTomcXVvdDtIZWx2ZXRpY2FOZXVlJnF1b3Q7LHNlcmlmO2NvbG9yOnB1cnBsZSI+aHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlPC9zcGFuPjwvYT48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_BYAPR00MB0567243DF06C29701ABB1198F56A0BYAPR00MB0567namp_-- From nobody Thu Oct 24 16:16:17 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 394BB120847; Thu, 24 Oct 2019 16:16:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.001 X-Spam-Level: X-Spam-Status: No, score=-2.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Nv0rpqJD5dcp; Thu, 24 Oct 2019 16:16:06 -0700 (PDT) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-bl2nam06on071e.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe55::71e]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5214012084F; Thu, 24 Oct 2019 16:16:06 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=QvK4Ifc+VJ37rqAMvnm87MmBfebaIhJX7e6qTJArNdPdVlGLsVMvviqUUVg53ANkMtG8tdahzIxJrTG2QFT5OgEguJwUfap+Fm1xwxTPhebuySohVCAmyZYxctrYuIzmIk8f2GViNUvB89LQNQqWu7S6Ttu+cu3KZ9NCkFV+vn4NZWupRw89k8t4g6/MLPTAhf30CVmn6FiqsW0gwNc7GJoVZpa4GHZFDMYQayOqiocWi5sH8SM5aHuQ4jS/XEt1SVkhEh5rTUCFNUDFiHNWY/opblO0MpeCnfzFphKuB1hjuSSmRT7NRSG1Hp1UlkCDG6MJ871ezHgMftqVqCchDA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TFfv5FgfJVediRRkqGPSQnwNnJIKjbqUZ7DXTQXAoLA=; b=g2+A+Ll7nKCT5A7PahlRWlU10iAnrZcicZxPnJTxUBgk83JSeXO+WatZz5vomORi9gl8Fcl6DQkQxEhHJ+xidvXpoRlSEY+NCr3g+/6pcbHOKdsJjEvh2K24/iNMORbJ/6Ti7dGZXVosoH7GQ+h+wvNdeBFV/N7YpfK3TIcMEkyNzrsxEm3ulPbzYHEzAG8/APB+DgLcAEPddbL6VHn/SZWodb6MALHvZSuFlyfYevIANsb+kClaYDtHefmNSHSgUn/+3xl9/YKp/UUF68ycxoQVyzpUn1I/kUI2DSPAQGKeLA0dtmEe9g6tTJy0LTrd3ZQj5UZ8W5y6DoKNQgLFhg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=TFfv5FgfJVediRRkqGPSQnwNnJIKjbqUZ7DXTQXAoLA=; b=jIVmATrIjsWFeVOYPgvH16Wb8/LwCP+Hc2cdW+l3VehhuvGGuQJZiPu2IhnpfxrIWgvwG4bakO+G90nBrnLdhQg3i9gHVTrtYoWiVViiabkHsrgwsstxd2U235bCcbuGh/p1kf0r5zCKe2y3phd1Yf9u1ZbSbvn5WhKl/4a19N4= Received: from BYAPR00MB0567.namprd00.prod.outlook.com (20.179.56.25) by BYAPR00MB0646.namprd00.prod.outlook.com (20.178.197.31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2403.0; Thu, 24 Oct 2019 23:16:03 +0000 Received: from BYAPR00MB0567.namprd00.prod.outlook.com ([fe80::31af:5686:e43b:ed3a]) by BYAPR00MB0567.namprd00.prod.outlook.com ([fe80::31af:5686:e43b:ed3a%9]) with mapi id 15.20.2430.000; Thu, 24 Oct 2019 23:16:03 +0000 From: Mike Jones To: Benjamin Kaduk , Neil Madden CC: Jim Schaad , "cose@ietf.org" , "jose@ietf.org" , ivaylo petrov Thread-Topic: =?utf-8?B?W2pvc2VdIPCflJQgV0dMQyBvZiBkcmFmdC1pZXRmLWNvc2Utd2ViYXV0aG4t?= =?utf-8?Q?algorithms?= Thread-Index: AQHVcGoPDyyosQB19kOQLL6i8Pbxfqc5ijaAgDEWyYA= Date: Thu, 24 Oct 2019 23:16:02 +0000 Message-ID: References: <465EE321-1595-4453-8D4E-E3A6A457C86E@forgerock.com> <012001d56fc0$1fb30e90$5f192bb0$@augustcellars.com> <013c01d56fc8$56cb8b20$0462a160$@augustcellars.com> <6D55D5B5-0F0C-4674-92CD-61D5CA25FBC5@forgerock.com> <20190923173707.GM6424@kduck.mit.edu> In-Reply-To: <20190923173707.GM6424@kduck.mit.edu> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=85c7ff30-657f-44b0-98df-0000e88661bd; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-10-24T23:15:24Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [2001:4898:80e8:2:d470:4f7:8cbd:3a65] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 9dfd2758-d00d-46de-b239-08d758d823ac x-ms-traffictypediagnostic: BYAPR00MB0646: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:6790; x-forefront-prvs: 0200DDA8BE x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(4636009)(366004)(346002)(396003)(136003)(376002)(39860400002)(51444003)(189003)(199004)(13464003)(10290500003)(66556008)(64756008)(186003)(53546011)(102836004)(46003)(6506007)(81166006)(6116002)(25786009)(8990500004)(8936002)(256004)(76116006)(66946007)(33656002)(66446008)(14444005)(66476007)(76176011)(10090500001)(81156014)(5660300002)(52536014)(2906002)(71190400001)(71200400001)(14454004)(6246003)(99286004)(4326008)(478600001)(22452003)(316002)(2171002)(229853002)(7696005)(6436002)(86362001)(446003)(74316002)(7736002)(11346002)(966005)(9686003)(486006)(6306002)(110136005)(55016002)(54906003)(476003)(305945005); DIR:OUT; SFP:1102; SCL:1; SRVR:BYAPR00MB0646; H:BYAPR00MB0567.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: RC+DogWRWG0oxlcVyeXAmSqEMV0K0Ug77dhrANgAvOKNr1QqyGZU+fHMQ5kjgzX0vbqjMg9J8giDyIIM/9yTXIWwVcwsW/4sN4w4FaFuYjQ8HlIWRsbzlh1DFoVESl22Y6KW0ESGqo2C/offwbQmWCT+5azYAI3dAoMhrs2YMPWN/GgJH/HMaUVGtwdUsSfbP2pwuoypTFr8AlUWIgLTkQjh54JAPYXwq6HXKYZVZgW7yHMv/r5YzLLYCcOGElNmiXKp43ms1UAAZgdJ/Kq66YEJxeZGJ+wedbP6SUep2fJS2Y4AJowxuEP+cSbDufTxg1b/az/0kj307QMFtDP3La9TS1Wv0t64pszc/FSzzOYj0Hz+VfAdXwcBSRdern/9Bs+kYJmfx37Zgt/jmwBvfrweIoN6csK8tH/6DbxhWLc= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9dfd2758-d00d-46de-b239-08d758d823ac X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Oct 2019 23:16:03.0105 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: m6/aBUVE3JplvsWqo80oKqhqyklB3ucO3H/plAdjKtkh9P1AdAx1bmDofW5HSQHgseNxnPewpoadcupQ9UVCoA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BYAPR00MB0646 Archived-At: Subject: Re: [COSE] =?utf-8?q?=5Bjose=5D_=F0=9F=94=94_WGLC_of_draft-ietf-cose?= =?utf-8?q?-webauthn-algorithms?= X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Oct 2019 23:16:15 -0000 VGhlc2UgaXNzdWUgcmVzb2x1dGlvbnMgaGF2ZSBiZWVuIGluY29ycG9yYXRlZCBpbiBodHRwczov L3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jb3NlLXdlYmF1dGhuLWFsZ29yaXRobXMt MDIuICBUaGFua3MgYWdhaW4gZm9yIHlvdXIgdXNlZnVsIHJldmlld3MhDQoNCgkJCQktLSBNaWtl DQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBCZW5qYW1pbiBLYWR1ayA8a2Fk dWtAbWl0LmVkdT4gDQpTZW50OiBNb25kYXksIFNlcHRlbWJlciAyMywgMjAxOSAxMDozNyBBTQ0K VG86IE5laWwgTWFkZGVuIDxuZWlsLm1hZGRlbkBmb3JnZXJvY2suY29tPg0KQ2M6IE1pa2UgSm9u ZXMgPE1pY2hhZWwuSm9uZXNAbWljcm9zb2Z0LmNvbT47IEppbSBTY2hhYWQgPGlldGZAYXVndXN0 Y2VsbGFycy5jb20+OyBjb3NlQGlldGYub3JnOyBqb3NlQGlldGYub3JnOyBpdmF5bG8gcGV0cm92 IDxpdmF5bG9AYWNrbC5pbz4NClN1YmplY3Q6IFJlOiBbam9zZV0g8J+UlCBXR0xDIG9mIGRyYWZ0 LWlldGYtY29zZS13ZWJhdXRobi1hbGdvcml0aG1zDQoNCk9uIFNhdCwgU2VwIDIxLCAyMDE5IGF0 IDExOjQ3OjUzQU0gKzAxMDAsIE5laWwgTWFkZGVuIHdyb3RlOg0KPiBPbiAyMSBTZXAgMjAxOSwg YXQgMDE6NDQsIE1pa2UgSm9uZXMgPE1pY2hhZWwuSm9uZXM9NDBtaWNyb3NvZnQuY29tQGRtYXJj LmlldGYub3JnPiB3cm90ZToNCj4gPiANCj4gPiBSU0EgU0hBLTEgaXMgdXNlZCBieSBUUE1zLCB3 aGljaCBwcm9kdWNlIGF0dGVzdGF0aW9ucyB1c2VkIGJ5IFczQyBXZWJDcnlwdG8uICBUaGF0IGNh buKAmXQgYmUgY2hhbmdlZC4gIFRoYXTigJlzIHdoeSBhbiBhbGdvcml0aG0gaWRlbnRpZmllciBp cyBuZWVkZWQgZm9yIGl0LiAgSXTigJlzIHVzZSBpcyBwcm9oaWJpdGVkIGZvciBuZXcgYXBwbGlj YXRpb25zIGJ1dCBUUE1zIGFyZSBhbiBleGlzdGluZyBhcHBsaWNhdGlvbi4gIEkgY2FuIHdvcmsg dG8gbWFrZSB0aGlzIGNsZWFyZXIgd2hlbiByZXNvbHZpbmcgdGhlIFdHTEMgY29tbWVudHMuDQo+ IA0KPiBJIHRoaW5rIGNsYXJpZnlpbmcgdGhlIHRleHQgYWxvbmcgdGhvc2UgbGluZXMgd291bGQg aGVscCBhIGxvdC4gSXQgaXMgd29ycnlpbmcgdGhhdCB0aGVzZSBUUE1zIGhhdmUgdG8gY29udGlu dWUgdG8gdXNlIGEga25vd24gd2VhayBzaWduYXR1cmUgbWV0aG9kIGFuZCB0aGV5IGFwcGFyZW50 bHkgY2Fubm90IGJlIGNoYW5nZWQsIGJ1dCBhdCBsZWFzdCB3aXRoIHRoZSBNVVNUIE5PVCB5b3Ug Z2l2ZSBwZW9wbGUgYSBjbHVlIHRoYXQgdGhpcyBpcyBzb21ldGhpbmcgdGhleSB3YW50IHRvIHJ1 biBhd2F5IGZyb20gcHJldHR5IHF1aWNrbHkuDQo+IA0KPiA+ICANCj4gPiBBcyBmb3Igc2VjcDI1 NmsxLCB0aGUg4oCcRVMyNTZL4oCdIGFsZ29yaXRobSBpcyByZWdpc3RlcmVkLCB3aG9zZSBkZWZp bml0aW9uIGlzIOKAnEVDRFNBIHVzaW5nIHNlY3AyNTZrMSBjdXJ2ZSBhbmQgU0hBLTI1NuKAnS4g IFRoYXTigJlzIG9ubHkgZm9yIHNpZ25pbmcuICBUaGUgZHJhZnQgaXMgY3VycmVudGx5IHNpbGVu dCBvbiB3aGV0aGVyIHRoZSByZWdpc3RlcmVkIGN1cnZlIGNhbiBhbHNvIGJlIHVzZWQgZm9yIG90 aGVyIHRoaW5ncy4gIEkgdGhpbmsgdGhhdOKAmXMgaG93IGl0IHNob3VsZCBiZSwgdW5sZXNzIHRo ZXJlIGFyZSBzZWN1cml0eSByZWFzb25zIHRvIHRoZSBjb250cmFyeS4NCj4gDQo+IFdlbGwgc2Vj dGlvbiA0LjQgcmVnaXN0ZXJzIHNlY3AyNTZrMSBhcyBhIEpXSyBFbGxpcHRpYyBDdXJ2ZSBzbyBp dCB3aWxsIGJlIHVzYWJsZSB3aXRoIHRoZSBleGlzdGluZyBFQ0RILUVTIGZhbWlseSBvZiBhbGdv cml0aG1zIHdpdGhvdXQgYW55IGFkZGl0aW9uYWwgcmVnaXN0cmF0aW9ucy4gVGhlcmUgKmFyZSog c29tZSBzZWN1cml0eSBjb25jZXJucyBhYm91dCB1c2luZyBzZWNwMjU2azEgb3V0c2lkZSBvZiBz aWduYXR1cmVzIC0gc2VlIGUuZy4gWzFdIHdoaWNoIGxpc3RzIHRoZSB0aGVvcmV0aWNhbCBwcm9i bGVtcyB3aXRoIHRoZSBjdXJ2ZS4gSW4gcGFydGljdWxhciwgZmFzdCBpbXBsZW1lbnRhdGlvbnMg b2Ygc2NhbGFyIG11bHRpcGxpY2F0aW9uICh1c2VkIGluIEVDREgpIGZvciBzZWNwMjU2azEgYXJl IG5vdCBjb25zdGFudCB0aW1lIG1ha2luZyBpdCBhIHJpc2tpZXIgY2hvaWNlIGZvciBFQ0RIIHRo YW4gZm9yIEVDRFNBLiBBcyBmYXIgYXMgSSdtIGF3YXJlIHRob3VnaCwgdGhhdCBqdXN0IHB1dHMg aXQgaW4gdGhlIHNhbWUgY2F0ZWdvcnkgYXMgdGhlIG90aGVyIE5JU1QvU0VDRyBzdGFuZGFyZCBj dXJ2ZXMgdGhhdCBhcmUgYWxyZWFkeSByZWdpc3RlcmVkIGZvciBKT1NFLiBTbyBJJ20gbm90IGFn YWluc3QgaXQgYmVpbmcgYXZhaWxhYmxlIGZvciBib3RoIEpXUyBhbmQgSldFIHVzYWdlLCBJJ2Qg anVzdCBsaWtlIHRoYXQgdG8gYmUgYW4gZXhwbGljaXQgZG9jdW1lbnRlZCBkZWNpc2lvbiByYXRo ZXIgdGhhbiBhbiBhY2NpZGVudC4NCg0KSSdtIGFsc28gaW5jbGluZWQgdG8gYWdyZWUgdGhhdCBt YWtpbmcgYW4gZXhwbGljaXQgc3RhdGVtZW50IGlzIHByZWZlcnJlZDsgSSBoYXZlIGxlc3Mtc3Ry b25nIGZlZWxpbmdzIGFib3V0IHdoZXRoZXIgdGhhdCBzdGF0ZW1lbnQgaXMgdG8gYWxsb3cgb3Ig ZGlzYWxsb3cgdGhlIHVzYWdlLg0KDQotQmVuDQoNCj4gWzFdOiANCj4gaHR0cHM6Ly9uYW0wNi5z YWZlbGlua3MucHJvdGVjdGlvbi5vdXRsb29rLmNvbS8/dXJsPWh0dHBzJTNBJTJGJTJGY3J5cA0K PiB0by5zdGFja2V4Y2hhbmdlLmNvbSUyRmElMkY2ODI4NiUyRjI2MDI4JmFtcDtkYXRhPTAyJTdD MDElN0NNaWNoYWVsLkpvDQo+IG5lcyU0MG1pY3Jvc29mdC5jb20lN0NmYTk2OTk2NmI5ZWI0NWFm YTI0ODA4ZDc0MDRjYmRjYSU3QzcyZjk4OGJmODZmMTQNCj4gMWFmOTFhYjJkN2NkMDExZGI0NyU3 QzElN0MwJTdDNjM3MDQ4NTcwNjY2NDEzMzk3JmFtcDtzZGF0YT1IV3h3YkpJWlpmTg0KPiBnSGh5 WDFHSUo4JTJGYWhRQzhGc3JNSDBTbkx4cnJYJTJCRG8lM0QmYW1wO3Jlc2VydmVkPTAgDQo+IDxo dHRwczovL25hbTA2LnNhZmVsaW5rcy5wcm90ZWN0aW9uLm91dGxvb2suY29tLz91cmw9aHR0cHMl M0ElMkYlMkZjcnkNCj4gcHRvLnN0YWNrZXhjaGFuZ2UuY29tJTJGYSUyRjY4Mjg2JTJGMjYwMjgm YW1wO2RhdGE9MDIlN0MwMSU3Q01pY2hhZWwuSg0KPiBvbmVzJTQwbWljcm9zb2Z0LmNvbSU3Q2Zh OTY5OTY2YjllYjQ1YWZhMjQ4MDhkNzQwNGNiZGNhJTdDNzJmOTg4YmY4NmYxDQo+IDQxYWY5MWFi MmQ3Y2QwMTFkYjQ3JTdDMSU3QzAlN0M2MzcwNDg1NzA2NjY0MTMzOTcmYW1wO3NkYXRhPUhXeHdi SklaWmYNCj4gTmdIaHlYMUdJSjglMkZhaFFDOEZzck1IMFNuTHhyclglMkJEbyUzRCZhbXA7cmVz ZXJ2ZWQ9MD4NCj4gDQo+IC0tIE5laWwNCg0KPiBfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXw0KPiBqb3NlIG1haWxpbmcgbGlzdA0KPiBqb3NlQGlldGYub3Jn DQo+IGh0dHBzOi8vbmFtMDYuc2FmZWxpbmtzLnByb3RlY3Rpb24ub3V0bG9vay5jb20vP3VybD1o dHRwcyUzQSUyRiUyRnd3dy4NCj4gaWV0Zi5vcmclMkZtYWlsbWFuJTJGbGlzdGluZm8lMkZqb3Nl JmFtcDtkYXRhPTAyJTdDMDElN0NNaWNoYWVsLkpvbmVzJQ0KPiA0MG1pY3Jvc29mdC5jb20lN0Nm YTk2OTk2NmI5ZWI0NWFmYTI0ODA4ZDc0MDRjYmRjYSU3QzcyZjk4OGJmODZmMTQxYWY5DQo+IDFh YjJkN2NkMDExZGI0NyU3QzElN0MwJTdDNjM3MDQ4NTcwNjY2NDEzMzk3JmFtcDtzZGF0YT1RNkR1 V1FkdXdUZ1VZY3gNCj4gT25aN3puejBid2ZNU0dZZENlU1NiMVBaaVJqcyUzRCZhbXA7cmVzZXJ2 ZWQ9MA0KDQo= From nobody Fri Oct 25 14:19:29 2019 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id B93CC120930; Fri, 25 Oct 2019 14:12:20 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , Cc: kaduk@mit.edu, cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.108.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <157203794075.2724.4692500273957366459.idtracker@ietfa.amsl.com> Date: Fri, 25 Oct 2019 14:12:20 -0700 Archived-At: Subject: [COSE] cose - Requested session has been scheduled for IETF 106 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 21:14:07 -0000 Dear Matthew Miller, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. cose Session 1 (1:30 requested) Thursday, 21 November 2019, Afternoon Session II 1550-1720 Room Name: Sophia size: 200 --------------------------------------------- iCalendar: https://datatracker.ietf.org/meeting/106/sessions/cose.ics Request Information: --------------------------------------------------------- Working Group Name: CBOR Object Signing and Encryption Area Name: Security Area Session Requester: Matthew Miller Number of Sessions: 1 Length of Session(s): 1.5 Hours Number of Attendees: 60 Conflicts to Avoid: Chair Conflict: core dispatch lamps lpwan saag secdispatch t2trg Technology Overlap: cfrg rats teep Key Participant Conflict: ace cbor People who must be present: Matthew A. Miller Benjamin Kaduk Ivaylo Petrov Resources Requested: Special Requests: --------------------------------------------------------- From nobody Fri Oct 25 14:39:27 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 23B2812008F; Fri, 25 Oct 2019 14:39:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Rc5mlMtssYzY; Fri, 25 Oct 2019 14:39:02 -0700 (PDT) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 27CC912004A; Fri, 25 Oct 2019 14:39:02 -0700 (PDT) Received: from [192.168.217.110] (p5089AE1C.dip0.t-ipconnect.de [80.137.174.28]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 470HYc0qPczyY2; Fri, 25 Oct 2019 23:39:00 +0200 (CEST) From: Carsten Bormann Content-Type: text/plain; charset=utf-8 X-Mao-Original-Outgoing-Id: 593732337.7825429-22303503c08916d892453144e1d146d6 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 11.5 \(3445.9.1\)) Date: Fri, 25 Oct 2019 23:38:59 +0200 Message-Id: To: ace@ietf.org, core@ietf.org, cose@ietf.org, cbor@ietf.org, t2trg@irtf.org X-Mailer: Apple Mail (2.3445.9.1) Archived-At: Subject: [COSE] Constrained Node/Network Cluster @ IETF106: FINAL AGENDA X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Oct 2019 21:39:05 -0000 Here is my usual eclectic condensed agenda based on the FINAL AGENDA for IETF106. Remember that, occasionally, futher agenda changes do happen. Quite a bit has been moved around from the draft agenda. LAKE no longer conflicts with SUIT, TMRID is now on top of ROLL and TEEP which is maybe a bit less of a problem for most. ACE/RATS still conflict (and the other RATS meeting has moved from Monday to Friday on top of COINRG, but you can do this RATS thing without me, can you?). WPACK no longer conflicts with COSE (but now does with LAKE, which again probably just is a personal problem), LAKE/ANIMA is a technology and a potential user again. All times are SGT (Singapore Time) =3D=3D UTC + 8 hours (=3D=3D China = time). Singapore doesn't obey the daylight savings myth. (Pure UTC times at https://datatracker.ietf.org/meeting/agenda-utc are useful for those who want to listen from remote.) Gr=C3=BC=C3=9Fe, Carsten FRIDAY, November 15, 2019 -- T2TRG/W3C WoT Workshop @ NUSS (https://is.gd/XWSfi8) SATURDAY, November 16, 2019 0830-2200 IETF Hackathon - Moor/Morrison SUNDAY, November 17, 2019 0830-1600 IETF Hackathon - Moor/Morrison 1700-1900 Welcome Reception - Fairmont Ballroom Foyer 1800-2000 Hot RFC Lightning Talks -- Padang MONDAY, November 18, 2019 1000-1200 Morning Session I Sophia ART dispatch Dispatch WG - Joint with ARTAREA Olivia IRTF icnrg Information-Centric Networking Collyer SEC mathmesh MatheMatical Mesh BOF 1330-1530 Afternoon Session I VIP A INT dnssd Extensions for Scalable DNS Service = Discovery WG - Joint with HOMENET VIP A INT homenet Home Networking WG - Joint with DNSSD Olivia IRTF*** dinrg Decentralized Internet Infrastructure Canning IRTF pearg Privacy Enhancements and Assessments = Research Group Padang SEC txauth Transactional Authorization and = Delegation BOF Sophia TSV tsvwg Transport Area Working Group WG 1550-1750 Afternoon Session II Canning ART httpbis Hypertext Transfer Protocol WG Padang IRTF irtfopen IRTF Open Meeting Collyer OPS v6ops IPv6 Operations WG Orchard RTG *** roll Routing Over Low power and Lossy = networks WG 1810-1910 Afternoon Session III Olivia INT *** lwig Light-Weight Implementation Guidance WG Padang IRTF maprg Measurement and Analysis for Protocols TUESDAY, November 19, 2019 1000-1200 Morning Session I VIP A INT tmrid Trustworthy Multipurpose Remote ID BOF Olivia RTG *** roll Routing Over Low power and Lossy = networks WG Sophia SEC *** teep Trusted Execution Environment = Provisioning WG Padang TSV quic QUIC WG 1330-1500 Afternoon Session I Padang ART abcd Application Behavior Considering DNS BOF VIP A RTG babel Babel routing protocol WG Sophia SEC *** suit Software Updates for Internet of Things = WG Hullet TSV rmcat RTP Media Congestion Avoidance = Techniques WG 1520-1650 Afternoon Session II Sophia GEN git GitHub Integration and Tooling WG Collyer INT *** lpwan IPv6 over Low Power Wide-Area Networks = WG Olivia SEC *** ace Authentication and Authorization for = Constrained Environments WG VIP A SEC *** rats Remote ATtestation ProcedureS WG Hullet TSV taps Transport Services WG 1710-1840 Afternoon Session III Hullet IRTF qirg Quantum Internet Proposed Research Group Sophia OPS anima Autonomic Networking Integrated Model = and Approach WG Padang SEC secdispatch Security Dispatch WG WEDNESDAY, November 20, 2019 1000-1200 Morning Session I Sophia ART *** core Constrained RESTful Environments WG Canning RTG raw Reliable and Available Wireless BOF Olivia SEC *** teep Trusted Execution Environment = Provisioning WG Padang TSV quic QUIC WG 1330-1500 Afternoon Session I Collyer ART webtrans WebTransport BOF Sophia INT *** 6lo IPv6 over Networks of = Resource-constrained Nodes WG Canning IRTF cfrg Crypto Forum Olivia SEC oauth Web Authorization Protocol WG 1520-1650 Afternoon Session II Collyer ART wpack Web Packaging BOF Hullet OPS anima Autonomic Networking Integrated Model = and Approach WG Sophia SEC *** lake Lightweight Authenticated Key Exchange = WG 1710-1940 IETF Plenary - Canning/Padang THURSDAY, November 21, 2019 1000-1200 Morning Session I Sophia IRTF*** t2trg Thing-to-Thing Orchard RTG bier Bit Indexed Explicit Replication WG Padang SEC tls Transport Layer Security WG Canning TSV tsvwg Transport Area Working Group WG 1330-1530 Afternoon Session I Collyer ART httpbis Hypertext Transfer Protocol WG Sophia INT 6man IPv6 Maintenance WG Olivia RTG rift Routing In Fat Trees WG Canning SEC saag Security Area Open Meeting 1550-1720 Afternoon Session II Padang INT intarea Internet Area Working Group WG Collyer RTG detnet Deterministic Networking WG Sophia SEC *** cose CBOR Object Signing and Encryption WG Hullet SEC oauth Web Authorization Protocol WG 1740-1840 Afternoon Session III Hullet ART *** cbor Concise Binary Object Representation = Maintenance and Extensions WG Sophia INT 6man IPv6 Maintenance WG Collyer RTG detnet Deterministic Networking WG Canning SEC tls Transport Layer Security WG Padang TSV tsvarea Transport Area Open Meeting FRIDAY, November 22, 2019 1000-1200 Morning Session I Hullet INT *** 6tisch IPv6 over the TSCH mode of IEEE = 802.15.4e WG Sophia IRTF coinrg Computing in the Network Proposed = Research Group Canning SEC mls Messaging Layer Security WG Orchard SEC *** rats Remote ATtestation ProcedureS WG 1220-1350 Morning Session II Hullet ART *** core Constrained RESTful Environments WG Sophia IRTF panrg Path Aware Networking RG Olivia SEC acme Automated Certificate Management = Environment WG From nobody Mon Oct 28 13:08:25 2019 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id A21D6120123; Mon, 28 Oct 2019 13:08:23 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.108.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: cose@ietf.org Message-ID: <157229330357.16151.16310499786744830907@ietfa.amsl.com> Date: Mon, 28 Oct 2019 13:08:23 -0700 Archived-At: Subject: [COSE] I-D Action: draft-ietf-cose-hash-sig-05.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2019 20:08:24 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption WG of the IETF. Title : Use of the HSS/LMS Hash-based Signature Algorithm with CBOR Object Signing and Encryption (COSE) Author : Russ Housley Filename : draft-ietf-cose-hash-sig-05.txt Pages : 21 Date : 2019-10-28 Abstract: This document specifies the conventions for using the Hierarchical Signature System (HSS) / Leighton-Micali Signature (LMS) hash-based signature algorithm with the CBOR Object Signing and Encryption (COSE) syntax. The HSS/LMS algorithm is one form of hash-based digital signature; it is described in RFC 8554. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-hash-sig/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-cose-hash-sig-05 https://datatracker.ietf.org/doc/html/draft-ietf-cose-hash-sig-05 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-hash-sig-05 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Oct 28 13:10:14 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 63FD4120112 for ; Mon, 28 Oct 2019 13:10:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cb2ZkGi2FPIS for ; Mon, 28 Oct 2019 13:10:04 -0700 (PDT) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C1E7212009E for ; Mon, 28 Oct 2019 13:10:04 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 4A5CA300B0A for ; Mon, 28 Oct 2019 16:10:03 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id zsY6kYuHcf5P for ; Mon, 28 Oct 2019 16:10:01 -0400 (EDT) Received: from a860b60074bd.fios-router.home (pool-108-51-198-163.washdc.fios.verizon.net [108.51.198.163]) by mail.smeinc.net (Postfix) with ESMTPSA id 87A53300460 for ; Mon, 28 Oct 2019 16:10:01 -0400 (EDT) From: Russ Housley Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.11\)) Date: Mon, 28 Oct 2019 16:10:02 -0400 References: <157229330357.16151.16310499786744830907@ietfa.amsl.com> To: cose In-Reply-To: <157229330357.16151.16310499786744830907@ietfa.amsl.com> Message-Id: X-Mailer: Apple Mail (2.3445.104.11) Archived-At: Subject: Re: [COSE] I-D Action: draft-ietf-cose-hash-sig-05.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2019 20:10:06 -0000 The changes are in response to IETF Last Call comments, including IANA = asking which range should be used for the assignment. Russ > On Oct 28, 2019, at 4:08 PM, internet-drafts@ietf.org wrote: >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts = directories. > This draft is a work item of the CBOR Object Signing and Encryption WG = of the IETF. >=20 > Title : Use of the HSS/LMS Hash-based Signature = Algorithm with CBOR Object Signing and Encryption (COSE) > Author : Russ Housley > Filename : draft-ietf-cose-hash-sig-05.txt > Pages : 21 > Date : 2019-10-28 >=20 > Abstract: > This document specifies the conventions for using the Hierarchical > Signature System (HSS) / Leighton-Micali Signature (LMS) hash-based > signature algorithm with the CBOR Object Signing and Encryption > (COSE) syntax. The HSS/LMS algorithm is one form of hash-based > digital signature; it is described in RFC 8554. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-cose-hash-sig/ >=20 > There are also htmlized versions available at: > https://tools.ietf.org/html/draft-ietf-cose-hash-sig-05 > https://datatracker.ietf.org/doc/html/draft-ietf-cose-hash-sig-05 >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cose-hash-sig-05 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Mon Oct 28 16:30:49 2019 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E8CA1200B2; Mon, 28 Oct 2019 16:30:47 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Elwyn Davies via Datatracker To: Cc: last-call@ietf.org, draft-ietf-cose-hash-sig.all@ietf.org, cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 6.108.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: Elwyn Davies Message-ID: <157230544744.16080.11317427545621451267@ietfa.amsl.com> Date: Mon, 28 Oct 2019 16:30:47 -0700 Archived-At: Subject: [COSE] Genart last call review of draft-ietf-cose-hash-sig-05 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Oct 2019 23:30:48 -0000 Reviewer: Elwyn Davies Review result: Almost Ready I am the assigned Gen-ART reviewer for this draft. The General Area Review Team (Gen-ART) reviews all IETF documents being processed by the IESG for the IETF Chair. Please treat these comments just like any other last call comments. For more information, please see the FAQ at . Document: draft-ietf-cose-hash-sig-05 Reviewer: Elwyn Davies Review Date: 2019-10-28 IETF LC End Date: 2019-10-29 IESG Telechat date: Not scheduled for a telechat I am the assigned Gen-ART reviewer for this draft. The General Area Review Team (Gen-ART) reviews all IETF documents being processed by the IESG for the IETF Chair.  Please treat these comments just like any other last call comments. For more information, please see the FAQ at <" dir="auto">https://trac.ietf.org/trac/gen/wiki/GenArtfaq>;. Document: draft-ietf-cose-hash-sig-05 Reviewer: Elwyn Davies Review Date: 2019/10/28 IETF LC End Date: 2019/10/29 IESG Telechat date: (if known) N/A Summary: Almost ready,  There is one minor issue (barely above editorial) and a number of nits.  I haven't checked the details of the HSS/LMS summary derived from RFC 8554 and I am taking the contents of the Appendix on trust! Major issues: None Minor issues: s1.1, last para:  I found the note which provides particular motivation for this proposal rather obscure on first reading.  After thinking about it, I now understand why this is here, but another sentence or so reinforcing the idea that getting the software distribution system post-quantum secure at the earlest opportunity is key to avoiding melt down should quantum computing develop more quickly than we might expect.   Also referring to the SUIT WG is not future proof. Nits/editorial comments: s1, HASHSIG reference anchor:  I would be inclined to stick with the 'standard' anchor for RFC 8554 i.e. [RFC8554]. s1, para 2: Expand DSA, ECDSA and EdDSA on first use ( RSA is claimed to be well-known).  Arguably references for the various mechanisms might be desirable. s2, last para: s/The the/The/ s2 and subsections:  The terminology and symbology used (e.g, || for concatenation) are (I believe) those defined in RFC 8554. This should be mentioned. s2.2, para 1:  'This specification supports only SHA-256':  I think this is a cut-and-paste from RFC 8554.   Suggest: s/This specification supports/[RFC8554] initially only supports/ and add at the end 'This specification would automatically support any such additional hash functions.' s4/s4.1: Rather than leaving an empty s4 and having a single subsection (generally frowned upon), the phraseology used at the start of s17 of RFC 8152 would be an improvement. s4: The security considerations of RFCs 8152 and 8554 are also relevant to implementations of this specification. s6: References to the relevant IANA registries for 'COSE Algrithms' and 'COSE Key Types' should be added. From nobody Tue Oct 29 07:29:41 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4E8E51200A4 for ; Tue, 29 Oct 2019 07:29:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.099 X-Spam-Level: X-Spam-Status: No, score=0.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, PDS_TONAME_EQ_TOLOCAL_SHORT=1.999, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=outer-planes-net.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dNEx6fdliAR0 for ; Tue, 29 Oct 2019 07:29:39 -0700 (PDT) Received: from mail-io1-xd2e.google.com (mail-io1-xd2e.google.com [IPv6:2607:f8b0:4864:20::d2e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 15523120018 for ; Tue, 29 Oct 2019 07:29:39 -0700 (PDT) Received: by mail-io1-xd2e.google.com with SMTP id c6so14944194ioo.13 for ; Tue, 29 Oct 2019 07:29:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outer-planes-net.20150623.gappssmtp.com; s=20150623; h=sender:to:from:subject:openpgp:autocrypt:message-id:date:user-agent :mime-version:content-language:content-transfer-encoding; bh=1mO5uWnhWtTZn4jOOuOf0DSuZewu5kcY8A5hlYvMTwc=; b=kc1xlgCxc9lRNqT6V2u/04lQr38+58DbZpBm+CDAUbAoYL07sysnncBpBPwQOZ4u4m 0wJ9V2XNlhXkpuosVs2JvOr7nlk/h8g8BC8n7SIs4DWBVttNocz86xvohQqHYWgOGg+D Y1WVFodqfVRcn3t/fBa+16n0l9L1Krg6X6yQaWEi290BUZ2mVx8MTsNR69HEyrrA0ea0 oYNqWCA7iGAlWXDU6ANlkAytqqT4lombUZ0RVA+W1zGDBil3tghz5LvCM5DRL5WQflQn 0TRgNyOkIFqPGUtb5LKmFZMpXqx1849uy6HQd1Ca/kVAaJnUGwijDEBIOj4UHyl1ADkt REvw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:sender:to:from:subject:openpgp:autocrypt :message-id:date:user-agent:mime-version:content-language :content-transfer-encoding; bh=1mO5uWnhWtTZn4jOOuOf0DSuZewu5kcY8A5hlYvMTwc=; b=aSFn7QNAjHo3eZ4uOYZDuTkyN3BKGIitlAoP3Le3cchWNehtS9vOF9mbqofgU4+tp8 e1YUm/UBZo8QfXZ2AKC5WC6+i2/HWPo4v/yL3bt318N45i/iMbgau6OSAigf7DvMP3dv QLLMdNVTbvfMfid7g/EDex6zIAWwuSWUrRcXBo+1ucCvekzw3/JXkac7f8IYq09zuLTx WG+0BF1PNDRCqAili0KK0h1W+K6ktEMbreMYq0e+QEBxE7rPCQX3erOFcpCBZsV+WLS6 NerVbVtkkdWxoTs01n08R1HFqaMFPjj44iJ3+JrJbu52op8bKfcp39ZYu3h8tmolafH9 b8Sg== X-Gm-Message-State: APjAAAW+tsHQP5nf6AGbeS1BVbAhZR20lW82pa3lvAABlTNOwX0gv3L/ rOV1RaS7f7VdiCbYtAcSgeYZgKkNuPLEjw== X-Google-Smtp-Source: APXvYqxuIrzfb8W0YBgv3AOBQ8QjeslmlFMmyhyZ+vqxAVHx2SFChnx4sOsrWSL2ZMrSszJxpKar7g== X-Received: by 2002:a5d:8043:: with SMTP id b3mr3992096ior.146.1572359377887; Tue, 29 Oct 2019 07:29:37 -0700 (PDT) Received: from mmiller-44677.local ([2601:280:4f00:14a:59b3:12f:6de5:aebc]) by smtp.gmail.com with ESMTPSA id 2sm1990926ilw.50.2019.10.29.07.29.37 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 29 Oct 2019 07:29:37 -0700 (PDT) Sender: Matthew Miller To: cose From: "Matthew A. Miller" Openpgp: preference=signencrypt Autocrypt: addr=linuxwolf+ietf@outer-planes.net; prefer-encrypt=mutual; keydata= mQENBFJoAooBCADQmEtpbpY/4wTeKgZIuyG7HkxIFgiUeqOvtiBKj/pCA73d7Q5hCvQdGcKJ 6uZsYz3Il9oKoKFxVt90iEXspbE39g6ek19e6RsB4j0Q10l4QvH+EqeD760gs0H2yf/eYj9i uk9/VY6axdQlPsmid1zoQgCNjSM7X4/K26WGMs03sbXJpKdoonelzIlJSNfzi0q546iplo72 D2cCm9BriMkQvcGnsm4B9eBIBn3GKmVx1tsmPNeNTyun2DvaLnrYxbA0Ivo1DzZReds9NZ25 uROI/+b+lcg9/kmHzhK+q8NMQCFWmqpS/lZRKxVBSijKGpGr5h8VLVf5iURHtwG+B/QxABEB AAG0M01hdHRoZXcgQS4gTWlsbGVyIDxsaW51eHdvbGYraWV0ZkBvdXRlci1wbGFuZXMubmV0 PokBPQQTAQoAJwUCWKsJ1AIbAwUJC8ckMQULCQgHAwUVCgkICwUWAgMBAAIeAQIXgAAKCRDs 9HJOEJ4Fu1iBCADAcW06d/7GTlBjTlYuMGgjzDBoWeQ9/zxgMnSrgNb6yO7wHzE65CeFs6OI 6LQ4A34CNM3hhcWDIzlqrV25fVyy7qCh6bCNMs1pOT63+Od4kcjHtUnGGTONT5fXSGY7mCtl XJFjb3TwyLUZXQCifhCIaUdF/4SVoGk96W9ssbDKN+5xq7B7gyVkwB0WM67zxt/kC6TPcXXL 5m7jsNRpRmFQqOlIF+HrQAcSr1lKRWgetb1VHfXCgcmDaTKn1QC7s0Ml+27dc0SoIkBI8cnv inJ4oFYWrvnTlOvv+v8AFXZnPrxZ/JYvnVD/y5PX7v08Z8RFXm1AmVxIWjXPI6TySkGvuQEN BFJoAooBCADA/ruHwYlQ7pdjJY6twkZcMmedkQNL6r5tNBeQkwVrvitUjHTKKipjxB2kEkUZ oxPgMI1h7/enDrVlMMMqq6RIJ86H+yx13zNIZNBlJfmVHgHj7TT8spa6A/qIccdiIRNsFVvl vFxpH8sTjVbHfPYexbdOR5kHpZWTzYxNyVLXMK5jen0B4K+vjbgFJAvsoLfzLZ5Bz3kb6dpu xUNzqhDyhk5/UPaCIFvZWBtiRKmkqPwEq8G2aMJq5Z4Sr8CRkpoMB25rxCPS8R+ByiHxpq+U 8mKuqPVg1LJzcA7hHmms8aBN6lxSlbyKnzEg8AWgld+6+xlJXu5U/fqDAClTj5mfABEBAAGJ ATwEGAEKACYCGwwWIQQx11iN7JBpDWvMmODs9HJOEJ4FuwUCWm+kiwUJC8tagQAKCRDs9HJO EJ4Fu40cB/9xyEnuQegivmL6OBVG5HvUAaXGUxtWiWdLm3NrduL0h7rctF060xQTekNRCjbl xZ1w/unPDBEEIMPYbF8i7IwJZoRLTG1B1MjI04AUU60G0IU6uw0ST6IsC7oYGvhDNJApbVBb j9u9x+kzaktCftl3qdpSKgRh9McIyZgevuFBdo80RDtX8niktUA3xsfJWBD1yJA33UNSzqOe 54wFRbsM2+4erREPMD659h2lACPCXjPW/6ucnv0/cdPF8V2JNMCT0yPJVCSUfFLTrtyYtiRI 6S52cI4eEOZIXCQp30TA4E27O2mMLOYzlKA5P5T+Icf4gz8e/puNUKIBDlY6KF7p Message-ID: Date: Tue, 29 Oct 2019 08:29:36 -0600 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:60.0) Gecko/20100101 Thunderbird/60.9.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit Archived-At: Subject: [COSE] IETF 106 Call for Agenda Items X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 14:29:40 -0000 Hello all, This is a call for agenda items for our session at IETF 106. Please send them to the chairs and/or this list. We have a slot for Thursday II (15:50 - 17:20) in Singapore. Thank you, -- COSE WG Chairs Ivaylo and Matthew From nobody Tue Oct 29 12:39:45 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C7261208EA for ; Tue, 29 Oct 2019 12:39:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gu9VFwYNgkpQ for ; Tue, 29 Oct 2019 12:39:35 -0700 (PDT) Received: from mail2.augustcellars.com (augustcellars.com [50.45.239.150]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5E9AE120AB1 for ; Tue, 29 Oct 2019 12:39:35 -0700 (PDT) Received: from Jude (192.168.0.11) by mail2.augustcellars.com (192.168.0.56) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Tue, 29 Oct 2019 12:39:28 -0700 From: Jim Schaad To: Date: Tue, 29 Oct 2019 12:39:27 -0700 Message-ID: <041a01d58e90$9449ff90$bcddfeb0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Thread-Index: AdWKzH1ZtLW2gCD0TXmPehr3YYoMsA== Content-Language: en-us X-Originating-IP: [192.168.0.11] Archived-At: Subject: [COSE] Review draft-ietf-cose-webauthn-algorithms-02.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 19:39:44 -0000 1. The document needs to have a short title added to it. 2. Abstract - The text "FIDO Alliance FIDO2 Client to Authenticator Protocol" needs to get cleaned up. It is not clear to me if FIDO2 is supposed to be an abbreviation of the previous FIDO Alliance or not. Flip the sentence to use from or insert specification earlier. 3. Section 1 - I am not sure why you are using the term "related" rather than "the" in this section. This seems to be different than the abstract in that feature. Relate makes me think that it is something that is different but similar in this case. 4. While I guess it is reasonable to have the description of why things are not recommended in the security considerations, I myself would not really think of them as such. However not having a pointer from section 2 to that information seems harsh as we are saying the are not recommended without have a pointer to the discussion. 5. I have problems with the following text: "Implementation of this algorithm is RECOMMENDED because of its widespread use in decentralized systems and those that chose it over the NIST curves." Firstly, this is an incorrect use of the RFC 2119 language, this is not a protocol statement. Secondly, this is not what the recommended column in table 2 means and thus is trying to overload that column with something that is not real. Third, the fact that people chose this over the NIST curves is not necessarily a reason for the IETF to recommended it's implementation. 6. I still want to see in the text the reasoning behind not just using the current ECDSA algorithm in COSE. 7. Add text on checking point is on the curve to section 5.4 -----Original Message----- From: COSE On Behalf Of internet-drafts@ietf.org Sent: Thursday, October 24, 2019 2:35 PM To: i-d-announce@ietf.org Cc: cose@ietf.org Subject: [COSE] I-D Action: draft-ietf-cose-webauthn-algorithms-02.txt A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption WG of the IETF. Title : COSE and JOSE Registrations for WebAuthn Algorithms Author : Michael B. Jones Filename : draft-ietf-cose-webauthn-algorithms-02.txt Pages : 13 Date : 2019-10-24 Abstract: The W3C Web Authentication (WebAuthn) specification and the FIDO Alliance FIDO2 Client to Authenticator Protocol (CTAP) specification use CBOR Object Signing and Encryption (COSE) algorithm identifiers. This specification registers the following algorithms in the IANA "COSE Algorithms" registry, which are used by WebAuthn and CTAP implementations: RSASSA-PKCS1-v1_5 using SHA-256, SHA-384, SHA-512, and SHA-1, and ECDSA using the secp256k1 curve and SHA-256. It registers the secp256k1 elliptic curve in the IANA "COSE Elliptic Curves" registry. Also, for use with JSON Object Signing and Encryption (JOSE), it registers the algorithm ECDSA using the secp256k1 curve and SHA-256 in the IANA "JSON Web Signature and Encryption Algorithms" registry and the secp256k1 elliptic curve in the IANA "JSON Web Key Elliptic Curve" registry. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-webauthn-algorithms/ There are also htmlized versions available at: https://tools.ietf.org/html/draft-ietf-cose-webauthn-algorithms-02 https://datatracker.ietf.org/doc/html/draft-ietf-cose-webauthn-algorithms-02 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-webauthn-algorithms-02 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ _______________________________________________ COSE mailing list COSE@ietf.org https://www.ietf.org/mailman/listinfo/cose From nobody Tue Oct 29 16:20:14 2019 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 605931200A3 for ; Tue, 29 Oct 2019 16:20:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.89 X-Spam-Level: X-Spam-Status: No, score=-1.89 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, HTTPS_HTTP_MISMATCH=0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YHOfWhXM8SLS for ; Tue, 29 Oct 2019 16:20:09 -0700 (PDT) Received: from NAM06-BL2-obe.outbound.protection.outlook.com (mail-eopbgr650135.outbound.protection.outlook.com [40.107.65.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 00D00120098 for ; Tue, 29 Oct 2019 16:20:08 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=NDtPLXyn18q4NEMjrdPIQPrpqD4GJWUNlUx1l175c7RaERfLFxn6XMYBjKmh5HH9U7Aw1RSb2XnmxuM8P3H/Jb8v83N9RAmXJ59WlV8zdlN3/vAVPEGae3C55XxiQk3l8nZM8rtDLMF+WEYRhPfHSDS1AeNiq8nV2tftgwy038cS42A10GrohBBNFMf4i3A5Wece0vXFw1R5MLFJsj0lSBoGK1sdOkND6t8Sc9V2Q9yFbaMbkrLRo3xdYxUldlqu3p8KqNeXiHlB9QysKOKcY9TzQncnUF4XQBs48lM5YITA1MjiFLLjXyuJVF9nSTL8v2ZyOw14wjp2Lcc+ELR1AA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=B5DaRfxpYFkqZSaH00QvkN360j6iqIf8a5VRy/fexiw=; b=m5uGIKDLi8IeYHYvAxJ5X4kSYA/3jHXHcX4OmpFy/nwPWN1YAx8jd3TdV3rzYG1MvmQ7UuWRbr7WeiE/OP+rc5GAEF3yfuwT1j4n8c5fOMN8unq7894Op87oUyQJQGc+0zBmB+FtS7V5KZ0mKnG9MLdL2jrBGAQVoaHnN2RskoSlQAmfa2fq2vjGPlfDpxIZN3kiLh7KKMiwuCZGZJlhm97UdeQC+UC7yp6KfEIBVNdBvBLYLWCFdLTsb27eodBaa6bVGCZli9voqX+Sb6bf8uEJit0OXOo7ioLNnh7IMHt4WvlehyYDUd/XSKeOJv5VaL1xhTGbqX5/qNqoJB7sIQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=microsoft.com; dmarc=pass action=none header.from=microsoft.com; dkim=pass header.d=microsoft.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=B5DaRfxpYFkqZSaH00QvkN360j6iqIf8a5VRy/fexiw=; b=Vr7wfjeo7wgNhXpitAAQKVBlnZJCof6J9Z8Bz8fxqLB5b43garZiHKNnqrO3TyFkTl7EsbTB4KiBfpwROEbxkhY/1oVtuWtKvoOest8nCo5ZtCSvYsc+JsceNU6cvmepk4huJu6+TWtjwFDqoPq+txbagu+4ZUtMjeXeUuCzo08= Received: from MN2PR00MB0574.namprd00.prod.outlook.com (20.178.255.147) by MN2PR00MB0461.namprd00.prod.outlook.com (20.178.240.143) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2445.0; Tue, 29 Oct 2019 23:20:04 +0000 Received: from MN2PR00MB0574.namprd00.prod.outlook.com ([fe80::403a:d20f:844d:4d8a]) by MN2PR00MB0574.namprd00.prod.outlook.com ([fe80::403a:d20f:844d:4d8a%4]) with mapi id 15.20.2446.000; Tue, 29 Oct 2019 23:20:04 +0000 From: Mike Jones To: Jim Schaad , "cose@ietf.org" Thread-Topic: [COSE] Review draft-ietf-cose-webauthn-algorithms-02.txt Thread-Index: AdWKzH1ZtLW2gCD0TXmPehr3YYoMsAD0VUcw Date: Tue, 29 Oct 2019 23:20:04 +0000 Message-ID: References: <041a01d58e90$9449ff90$bcddfeb0$@augustcellars.com> In-Reply-To: <041a01d58e90$9449ff90$bcddfeb0$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ActionId=493681de-f555-455f-931b-0000516ad6f2; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_ContentBits=0; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Enabled=true; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Method=Standard; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_Name=Internal; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SetDate=2019-10-29T21:14:17Z; MSIP_Label_f42aa342-8706-4288-bd11-ebb85995028c_SiteId=72f988bf-86f1-41af-91ab-2d7cd011db47; authentication-results: spf=none (sender IP is ) smtp.mailfrom=Michael.Jones@microsoft.com; x-originating-ip: [2001:4898:80e8:3:eccb:76f3:540c:f8e1] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: f5a37b3f-d9d8-43ac-fc45-08d75cc687e0 x-ms-traffictypediagnostic: MN2PR00MB0461: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-forefront-prvs: 0205EDCD76 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(136003)(39860400002)(366004)(346002)(396003)(376002)(199004)(189003)(13464003)(9686003)(66476007)(66946007)(66556008)(110136005)(5660300002)(76116006)(64756008)(6246003)(52536014)(316002)(46003)(66446008)(66574012)(54896002)(6306002)(186003)(6436002)(236005)(7696005)(2501003)(76176011)(8936002)(22452003)(4001150100001)(99286004)(81166006)(81156014)(8676002)(229853002)(102836004)(6506007)(53546011)(55016002)(8990500004)(10090500001)(2906002)(86362001)(25786009)(6116002)(14444005)(966005)(74316002)(10290500003)(256004)(790700001)(478600001)(476003)(486006)(33656002)(11346002)(446003)(71200400001)(71190400001)(7736002)(14454004)(606006); DIR:OUT; SFP:1102; SCL:1; SRVR:MN2PR00MB0461; H:MN2PR00MB0574.namprd00.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 8tuar+Vtz4aawpecugvTPdXT6og+IicCNFN96oC8D6nOl7l+oEGKrzOMG4+dYNC3iFwiwuzP2+8SkyQO80UyYYZMtDx9GCXb26v+hVhTbEl+YEwYG9gB46tsI5++8+UQZZ7FYf29IXjPB1CvJFNfYA1vMT6MFV+Fr7gHh3kNWC5+mNa45R5zRVN6TAdKndnVTB0h20gB41oGeDm1eFa78oVhzC/fbSoameQgxArXIDElcU9Bq30l+NO236mXV0eOHUjwbSXm7IfulLd2S1/F3u06j2lw5ko9udGL7C4CMAmfgMsO+VywkND/c8nGe+068JA9etpbWgmy/n5QBgBdr8zhKEl6heh06ZvboXk3Zf0xUFfDtoc9yKQqVRGy0i1pmLp3Le3W+c1a+f97kyDkrUtwlGktYLZN95O2zx0c/V3172pgzXpib2RDRwbEL5A8 x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_MN2PR00MB0574F4672E2BD1F23E074F89F5610MN2PR00MB0574namp_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-Network-Message-Id: f5a37b3f-d9d8-43ac-fc45-08d75cc687e0 X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Oct 2019 23:20:04.8143 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: +TT1iVJS+lLaKxRwMotiAr6GeeR45ErmPlZP3GfvD2/6h4nFYrT2+qylyHbopCzLea/p1pDOWLATi6JuA2GjFg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR00MB0461 Archived-At: Subject: Re: [COSE] Review draft-ietf-cose-webauthn-algorithms-02.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Oct 2019 23:20:12 -0000 --_000_MN2PR00MB0574F4672E2BD1F23E074F89F5610MN2PR00MB0574namp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Replies are inline, prefixed by "Mike>". -----Original Message----- From: COSE On Behalf Of Jim Schaad Sent: Tuesday, October 29, 2019 12:39 PM To: cose@ietf.org Subject: [COSE] Review draft-ietf-cose-webauthn-algorithms-02.txt 1. The document needs to have a short title added to it. Mike> I've added this "abbrev" value in the current editor's draft "COSE & = JOSE Registrations for WebAuthn Algs", which fits in the available space. 2. Abstract - The text "FIDO Alliance FIDO2 Client to Authenticator Protoco= l" needs to get cleaned up. It is not clear to me if FIDO2 is supposed to = be an abbreviation of the previous FIDO Alliance or not. Flip the sentence= to use from or insert specification earlier. Mike> I've deleted "FIDO2" (which was being used as an adjective applying t= he spec name). 3. Section 1 - I am not sure why you are using the term "related" rather t= han "the" in this section. This seems to be different than the abstract in= that feature. Relate makes me think that it is something that is differen= t but similar in this case. Mike> I've deleted "related". 4. While I guess it is reasonable to have the description of why things ar= e not recommended in the security considerations, I myself would not really= think of them as such. However not having a pointer from section 2 to tha= t information seems harsh as we are saying the are not recommended without = have a pointer to the discussion. Mike> I've added the pointers. 5. I have problems with the following text: "Implementation of this algori= thm is RECOMMENDED because of its widespread use in decentralized systems a= nd those that chose it over the NIST curves." Firstly, this is an incorrec= t use of the RFC 2119 language, this is not a protocol statement. Mike> I've lowercased "recommended". Secondly, this is not what the recommended column in table 2 means and thus= is trying to overload that column with something that is not real. Third,= the fact that people chose this over the NIST curves is not necessarily a = reason for the IETF to recommended its implementation. Mike> Recall that the JOSE algorithms come with Implementation Requirements= (see https://tools.ietf.org/html/rfc7518#section-7.1.1), whose values are = one of Required, Recommended, Optional, Deprecated, or Prohibited. It's in= that sense that the word "Recommended" is being used - more than Optional = but less than Required. The COSE registry value that seems to most closely= correspond with this is "Recommended: True". (As I see it, it's unfortuna= te that COSE compressed these five values down to two, but I realize that t= hat's water under the bridge, unless we want to reconsider this choice in t= he BIS COSE registry instructions.) 6. I still want to see in the text the reasoning behind not just using the= current ECDSA algorithm in COSE. Mike> I provided the reasoning in my response to your previous review. Hav= ing a curve-specific algorithm identifier lets implementations do what you = asked about - ensuring that the curve associated with a key cannot be chang= ed and the modified key still be used. 7. Add text on checking point is on the curve to section 5.4 Mike> I assume you're talking about adding text like that in https://tools.= ietf.org/html/draft-ietf-oauth-jwt-bcp-07#section-3.4. I'll admit that I'm= not enough of an expert on secp256k1 usage to know whether an on-curve che= ck is what is called for or a different validation procedure. A definitive= reference would be highly appreciated. In particular, I don't know whethe= r the Galois y=B2 =3D x=B3 + 7 finite field form used with secp256k1 is ame= nable to a check that the (x, y) pair are on the curve or whether a differe= nt check is needed. Thanks again for your detailed reviews, Jim. I'll plan to publish a new dr= aft incorporating these issue resolutions before Monday's submission cutoff= . -- Mike -----Original Message----- From: COSE > On Behalf = Of internet-drafts@ietf.org Sent: Thursday, October 24, 2019 2:35 PM To: i-d-announce@ietf.org Cc: cose@ietf.org Subject: [COSE] I-D Action: draft-ietf-cose-webauthn-algorithms-02.txt A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the CBOR Object Signing and Encryption WG of t= he IETF. Title : COSE and JOSE Registrations for WebAuthn Algorithms Author : Michael B. Jones Filename : draft-ietf-cose-webauthn-algorithms-02.tx= t Pages : 13 Date : 2019-10-24 Abstract: The W3C Web Authentication (WebAuthn) specification and the FIDO Alliance FIDO2 Client to Authenticator Protocol (CTAP) specification use CBOR Object Signing and Encryption (COSE) algorithm identifiers. This specification registers the following algorithms in the IANA "COSE Algorithms" registry, which are used by WebAuthn and CTAP implementations: RSASSA-PKCS1-v1_5 using SHA-256, SHA-384, SHA-512, and SHA-1, and ECDSA using the secp256k1 curve and SHA-256. It registers the secp256k1 elliptic curve in the IANA "COSE Elliptic Curves" registry. Also, for use with JSON Object Signing and Encryption (JOSE), it registers the algorithm ECDSA using the secp256k1 curve and SHA-256 in the IANA "JSON Web Signature and Encryption Algorithms" registry and the secp256k1 elliptic curve in the IANA "JSON Web Key Elliptic Curve" registry. The IETF datatracker status page for this draft is: https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fdatatra= cker.ietf.org%2Fdoc%2Fdraft-ietf-cose-webauthn-algorithms%2F&data=3D02%= 7C01%7CMichael.Jones%40microsoft.com%7Ce279955f279c4ac5a9a908d75ca7c308%7C7= 2f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637079747916555344&sdata=3DP5= WknFu56wOZwH1i%2BRJMvqjHYjF9VD32CSrkWBg5bA8%3D&reserved=3D0 There are also htmlized versions available at: https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Ftools.i= etf.org%2Fhtml%2Fdraft-ietf-cose-webauthn-algorithms-02&data=3D02%7C01%= 7CMichael.Jones%40microsoft.com%7Ce279955f279c4ac5a9a908d75ca7c308%7C72f988= bf86f141af91ab2d7cd011db47%7C1%7C0%7C637079747916555344&sdata=3DZutAl6J= aemEvVdC5KZFeTthXl75YYP1ebBgrNWcSi1A%3D&reserved=3D0 https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fdatatra= cker.ietf.org%2Fdoc%2Fhtml%2Fdraft-ietf-cose-webauthn-algorithms-02&dat= a=3D02%7C01%7CMichael.Jones%40microsoft.com%7Ce279955f279c4ac5a9a908d75ca7c= 308%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637079747916555344&sda= ta=3DR%2FKt7qEM0q3v4%2FFvm0WSLoHPkQP8vHK5I4qXyFQXBIk%3D&reserved=3D0 A diff from the previous version is available at: https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.iet= f.org%2Frfcdiff%3Furl2%3Ddraft-ietf-cose-webauthn-algorithms-02&data=3D= 02%7C01%7CMichael.Jones%40microsoft.com%7Ce279955f279c4ac5a9a908d75ca7c308%= 7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637079747916555344&sdata= =3DZt9aIA57AKdF2PlPPtlm2E%2F6OjAvizDxU%2BoRrkpTwKI%3D&reserved=3D0 Please note that it may take a couple of minutes from the time of submissio= n until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ _______________________________________________ COSE mailing list COSE@ietf.org https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.iet= f.org%2Fmailman%2Flistinfo%2Fcose&data=3D02%7C01%7CMichael.Jones%40micr= osoft.com%7Ce279955f279c4ac5a9a908d75ca7c308%7C72f988bf86f141af91ab2d7cd011= db47%7C1%7C0%7C637079747916555344&sdata=3Dk6n9t50ylb2R8YbKl6x479T253Zw0= iLSMbIex5nYmV0%3D&reserved=3D0 _______________________________________________ COSE mailing list COSE@ietf.org https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.iet= f.org%2Fmailman%2Flistinfo%2Fcose&data=3D02%7C01%7CMichael.Jones%40micr= osoft.com%7Ce279955f279c4ac5a9a908d75ca7c308%7C72f988bf86f141af91ab2d7cd011= db47%7C1%7C0%7C637079747916555344&sdata=3Dk6n9t50ylb2R8YbKl6x479T253Zw0= iLSMbIex5nYmV0%3D&reserved=3D0 --_000_MN2PR00MB0574F4672E2BD1F23E074F89F5610MN2PR00MB0574namp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Replies are inline, prefixed by “Mike>”.

 

-----Original Message-----
From: COSE <cose-bounces@ietf.org> On Behalf Of Jim Schaad
Sent: Tuesday, October 29, 2019 12:39 PM
To: cose@ietf.org
Subject: [COSE] Review draft-ietf-cose-webauthn-algorithms-02.txt

 

1.  The document needs to have a short title= added to it.

 

Mike> I’ve= added this “abbrev” value in the current editor’s draft = “COSE & JOSE Registrations for WebAuthn Algs”, which fits i= n the available space.

 

2. Abstract - The text "FIDO Alliance FIDO2 = Client to Authenticator Protocol" needs to get cleaned up.  It is= not clear to me if FIDO2 is supposed to be an abbreviation of the previous= FIDO Alliance or not.  Flip the sentence to use from or insert specification earlier.

 

Mike> I’ve= deleted “FIDO2” (which was being used as an adjective applying= the spec name).

 

3.  Section 1 - I am not sure why you are us= ing the term "related" rather than "the" in this sectio= n.  This seems to be different than the abstract in that feature. = ; Relate makes me think that it is something that is different but similar in this case.

 

Mike> I’ve= deleted “related”.

 

4.  While I guess it is reasonable to have t= he description of why things are not recommended in the security considerat= ions, I myself would not really think of them as such.  However not ha= ving a pointer from section 2 to that information seems harsh as we are saying the are not recommended without have a pointe= r to the discussion.

 

Mike> I’ve= added the pointers.

 

5.  I have problems with the following text:= "Implementation of this algorithm is RECOMMENDED because of its wides= pread use in decentralized systems and those that chose it over the NIST cu= rves."  Firstly, this is an incorrect use of the RFC 2119 language, this is not a protocol statement.

 

Mike> I’ve= lowercased “recommended”.

 

Secondly, this is not what the recommended column= in table 2 means and thus is trying to overload that column with something= that is not real.  Third, the fact that people chose this over the NI= ST curves is not necessarily a reason for the IETF to recommended its implementation.

 

Mike> Recall tha= t the JOSE algorithms come with Implementation Requirements (see https://tools= .ietf.org/html/rfc7518#section-7.1.1), whose values are one of Required, Recommended, Optional, Deprecated, = or Prohibited.  It’s in that sense that the word “Recommen= ded” is being used – more than Optional but less than Required.=   The COSE registry value that seems to most closely correspond with this is “Recommended: True”.  (As I see it, it’= ;s unfortunate that COSE compressed these five values down to two, but I re= alize that that’s water under the bridge, unless we want to reconside= r this choice in the BIS COSE registry instructions.)

 

6.  I still want to see in the text the reas= oning behind not just using the current ECDSA algorithm in COSE. 

 

Mike> I provided= the reasoning in my response to your previous review.  Having a curve= -specific algorithm identifier lets implementations do what you asked about= – ensuring that the curve associated with a key cannot be changed and the modified key still be used.

 

7.  Add text on checking point is on the cur= ve to section 5.4

 

Mike> I assume y= ou’re talking about adding text like that in https://tools.ietf.org/html/draft-ietf-oauth-jwt-bcp-07#section-3.4.  I’ll admit that I’m not enough of an expert on secp256= k1 usage to know whether an on-curve check is what is called for or a different validation procedure.  A definitive refe= rence would be highly appreciated.  In particular, I don’t know = whether the Galois y=B2 =3D x=B3 + 7 finite field form used with secp25= 6k1 is amenable to a check that the (x, y) pair are on the curve or whether a different check is needed.

 

Thanks again for yo= ur detailed reviews, Jim.  I’ll plan to publish a new draft inco= rporating these issue resolutions before Monday’s submission cutoff.<= o:p>

 

   &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;          -- Mike

 

-----Original Message-----

From: COSE <cose-bounces@i= etf.org> On Behalf Of internet-drafts@ietf.org

Sent: Thursday, October 24, 2019 2:35 PM

To: i-d-announce@ietf.org

Cc: cose@ietf.org

Subject: [COSE] I-D Action: draft-ietf-cose-webau= thn-algorithms-02.txt

 

 

A New Internet-Draft is available from the on-lin= e Internet-Drafts directories.

This draft is a work item of the CBOR Object Sign= ing and Encryption WG of the IETF.

 

        Title =           : COSE and JOSE= Registrations for WebAuthn

Algorithms

        Author=           : Michael B. Jones

        &= nbsp;       Filename    &= nbsp;   : draft-ietf-cose-webauthn-algorithms-02.txt

        &= nbsp;       Pages    &nbs= p;      : 13

        &= nbsp;       Date     = ;       : 2019-10-24

 

Abstract:

   The W3C Web Authentication (WebAuthn= ) specification and the FIDO

   Alliance FIDO2 Client to Authenticat= or Protocol (CTAP) specification

   use CBOR Object Signing and Encrypti= on (COSE) algorithm identifiers.

   This specification registers the fol= lowing algorithms in the IANA

   "COSE Algorithms" registry= , which are used by WebAuthn and CTAP

   implementations: RSASSA-PKCS1-v1_5 u= sing SHA-256, SHA-384, SHA-512,

   and SHA-1, and ECDSA using the secp2= 56k1 curve and SHA-256.  It

   registers the secp256k1 elliptic cur= ve in the IANA "COSE Elliptic

   Curves" registry.  Also, f= or use with JSON Object Signing and

   Encryption (JOSE), it registers the = algorithm ECDSA using the

   secp256k1 curve and SHA-256 in the I= ANA "JSON Web Signature and

   Encryption Algorithms" registry= and the secp256k1 elliptic curve in

   the IANA "JSON Web Key Elliptic= Curve" registry.

 

 

The IETF datatracker status page for this draft i= s:

https://nam06.safelinks.protection.outlook.com/?url=3Dhtt= ps%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fdraft-ietf-cose-webauthn-algorithms= %2F&amp;data=3D02%7C01%7CMichael.Jones%40microsoft.com%7Ce279955f279c4a= c5a9a908d75ca7c308%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C63707974791= 6555344&amp;sdata=3DP5WknFu56wOZwH1i%2BRJMvqjHYjF9VD32CSrkWBg5bA8%3D&am= p;amp;reserved=3D0

 

There are also htmlized versions available at:

https://nam06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2= F%2Ftools.ietf.org%2Fhtml%2Fdraft-ietf-cose-webauthn-algorithms-02&amp;= data=3D02%7C01%7CMichael.Jones%40microsoft.com%7Ce279955f279c4ac5a9a908d75c= a7c308%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637079747916555344&= amp;sdata=3DZutAl6JaemEvVdC5KZFeTthXl75YYP1ebBgrNWcSi1A%3D&amp;reserved= =3D0

https://nam06.safelinks.protection.outlook.com/?= url=3Dhttps%3A%2F%2Fdatatracker.ietf.org%2Fdoc%2Fhtml%2Fdraft-ietf-cose-web= authn-algorithms-02&amp;data=3D02%7C01%7CMichael.Jones%40microsoft.com%= 7Ce279955f279c4ac5a9a908d75ca7c308%7C72f988bf86f141af91ab2d7cd011db47%7C1%7= C0%7C637079747916555344&amp;sdata=3DR%2FKt7qEM0q3v4%2FFvm0WSLoHPkQP8vHK= 5I4qXyFQXBIk%3D&amp;reserved=3D0

 

A diff from the previous version is available at:=

https://nam06.safelinks.protection.outlook.com/?url= =3Dhttps%3A%2F%2Fwww.ietf.org%2Frfcdiff%3Furl2%3Ddraft-ietf-cose-webauthn-a= lgorithms-02&amp;data=3D02%7C01%7CMichael.Jones%40microsoft.com%7Ce2799= 55f279c4ac5a9a908d75ca7c308%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C63= 7079747916555344&amp;sdata=3DZt9aIA57AKdF2PlPPtlm2E%2F6OjAvizDxU%2BoRrk= pTwKI%3D&amp;reserved=3D0

 

 

Please note that it may take a couple of minutes = from the time of submission until the htmlized version and diff are availab= le at tools.ietf.org.

 

Internet-Drafts are also available by anonymous F= TP at:

<= span style=3D"color:windowtext;text-decoration:none">ftp://ftp.ietf.org/int= ernet-drafts/

 

_______________________________________________

COSE mailing list

COSE@ietf.org

https://nam= 06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.ietf.org%2Fmai= lman%2Flistinfo%2Fcose&amp;data=3D02%7C01%7CMichael.Jones%40microsoft.c= om%7Ce279955f279c4ac5a9a908d75ca7c308%7C72f988bf86f141af91ab2d7cd011db47%7C= 1%7C0%7C637079747916555344&amp;sdata=3Dk6n9t50ylb2R8YbKl6x479T253Zw0iLS= MbIex5nYmV0%3D&amp;reserved=3D0

 

_______________________________________________

COSE mailing list

COSE@ietf.org

https://nam= 06.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fwww.ietf.org%2Fmai= lman%2Flistinfo%2Fcose&amp;data=3D02%7C01%7CMichael.Jones%40microsoft.c= om%7Ce279955f279c4ac5a9a908d75ca7c308%7C72f988bf86f141af91ab2d7cd011db47%7C= 1%7C0%7C637079747916555344&amp;sdata=3Dk6n9t50ylb2R8YbKl6x479T253Zw0iLS= MbIex5nYmV0%3D&amp;reserved=3D0

--_000_MN2PR00MB0574F4672E2BD1F23E074F89F5610MN2PR00MB0574namp_--