From nobody Wed Dec 2 00:49:45 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B479F3A09C1 for ; Wed, 2 Dec 2020 00:49:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.102 X-Spam-Level: X-Spam-Status: No, score=-2.102 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2jUO3y3_DvcU for ; Wed, 2 Dec 2020 00:49:42 -0800 (PST) Received: from EUR04-DB3-obe.outbound.protection.outlook.com (mail-eopbgr60058.outbound.protection.outlook.com [40.107.6.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CD0163A09C0 for ; Wed, 2 Dec 2020 00:49:41 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=hcLrslVAYep3163QG3KoYY1nNVc0KQTXntjSkQIZu0HOgjlbMtj0Z9wBMNbJjANZN/PaWGmBDk7Q7CpFXb+Efwz3zK7Ba/XPlaJtafuDgTu1GeWGdAkVTiZeZHImvQB60yIIsAT9KyceK4Unm4P8QzONpqKWtn2o1Ve/AqRMSivXPso3iIbnsWK3mU1GYRTw7lNTDGFgrK7HhsrcXuW5aqHIPsFjJvWyh6O3hAG181QtTDE7NnwvVa4e0ctVMVtBWeMGvrKenLGJ8fPrLv1sBWBoXihZWDpPoMdoMe3JQfKttrWNO96sR3RoeL7q8frmAluj0Rd7eMWdOm2MlCfIyw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=/w3XfevNxG2+9XluqAPvynPI8KphdQLHR7ctV1sYLP8=; b=glhfdbPj+d9i8bLSeZAwZWITM78y6INDVxxBZC02X9s8hxYl+Y+JvKrwqPWv+VHGro85U0ToswWzbBifi6QIj8njC8LnplrDWjiLP3U06lmB7TAz9LL9JDLiIe+46fWkhPxq+BkXT+X3NroWzswUvCXVe58X3QpGWSUIJ2u+ktks9XDMmxab4gFA5GsOiTI14PV7uzDU5iXFgrcswuwD8KvtaEKXbWsQgHexmXhYClFcG+Nop3asd3/4xVM+A86QXyUg7SjAwEmaJWP+jBT2YMLMYJ7OJejWK9+I6qc6VCCis80qEQjuUVO4NTkdFQeWwM1IagWsX380+ce1oJtu4g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=/w3XfevNxG2+9XluqAPvynPI8KphdQLHR7ctV1sYLP8=; b=hufvB+/TDgLA1E6dU3GVT/v296EGvPa0SaXyWuAH9Tdcc9MuaXh4da3wt2mXaBJyGWBzCUaTipOxJxCgBq8rQ3q3eKtaq5HlJKukfWlI4SebAmWVMXq5BNQ1KDhLY0d51aXfHtwYRrtIJ4dRNbELvsbOl2x2uUg54vpvpIjTPH4= Received: from DB6PR0701MB3047.eurprd07.prod.outlook.com (2603:10a6:4:74::7) by DB9PR07MB7321.eurprd07.prod.outlook.com (2603:10a6:10:21c::20) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3632.6; Wed, 2 Dec 2020 08:49:35 +0000 Received: from DB6PR0701MB3047.eurprd07.prod.outlook.com ([fe80::b89e:1074:9805:42d]) by DB6PR0701MB3047.eurprd07.prod.outlook.com ([fe80::b89e:1074:9805:42d%6]) with mapi id 15.20.3632.016; Wed, 2 Dec 2020 08:49:35 +0000 From: John Mattsson To: cose Thread-Topic: New Version Notification for draft-mattsson-cose-cbor-cert-compress-05.txt Thread-Index: AQHWyICzoMPytwic8Eu6+ki1Vc2ncqnjj98A Date: Wed, 2 Dec 2020 08:49:34 +0000 Message-ID: <4A0FDEA0-1264-418D-801C-6C710A3BE6AD@ericsson.com> References: <160689580542.14210.17819515187695761515@ietfa.amsl.com> In-Reply-To: <160689580542.14210.17819515187695761515@ietfa.amsl.com> Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.42.20101102 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [81.225.97.222] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 0d46c9b4-108f-49e6-9a5c-08d8969f31b6 x-ms-traffictypediagnostic: DB9PR07MB7321: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: NXDSd31cIpyKqCKyj8+6TIU0i7aSWTeqmo/9ivuA2ejJX15NT6A3GoVuQJ/hBJtaWPiudRwvYN66RN93CnzC6HbhGpiKORCS72g0btbHJmOg1WdMEmoMR2ktQpC7mzFM/eXoxHDenTuwushZi5Jr5j5/Rqj2qkCQTwzfpT9wFS0OhFNn+2B2ySW50wyFGoxD85Fq2EZV5BUCYZoiFPTelX7kGh5ebQBbqjQXdqnLpkmrk2YTlp3m/Fmgc0IinrkqiRHuuBYGi3/6HD3/eU2KL7P8AyBfsIBhamSSmYMHpVuUPz+6czbNOSzi1RLAJeg7rqYHlPxTtINrrLQwKEahX7fDvl4ZgJ4lNDpQat7i1dZbHUYPZxvyWorshgngBfXbrawwSUnEBwCTLHDRaTEx2JXDtUBiFcbF3mj7id0jnEsON2bw2ctVFT8C+NzhqlfI4RZezJDXk5FAGxYlV5EGDA== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB6PR0701MB3047.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(396003)(39860400002)(136003)(376002)(346002)(366004)(66946007)(66574015)(186003)(66446008)(966005)(44832011)(2906002)(66556008)(64756008)(76116006)(91956017)(83380400001)(33656002)(6916009)(36756003)(2616005)(316002)(26005)(71200400001)(8936002)(8676002)(6486002)(6512007)(5660300002)(86362001)(478600001)(6506007)(15650500001)(66476007)(53546011)(45980500001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?emhlNnJJNXRHZEV4SU1ZWXBmR29MVC85c3pWejVOaWhlVjBMRUZKT0RMeCtR?= =?utf-8?B?bG5LSFdhZ3ArRnJmMjhJTlNiYUpmQWpJeG5tTmxvTFFaWUREdVQvWmdndmN2?= =?utf-8?B?SmhHbnVDT2VjQXhzMy95S0hodHNkZGZsTVBUTXdhS1BuemRJd1hpSCszQitp?= =?utf-8?B?M1BDck9aemdZTWJndVFnQm50cGlIczZVSEJSMXpCZFpmZytWZzJTRXRnYVho?= =?utf-8?B?VnlJRElxZFNCR3FqY3RaQ0JBWUw4ZDVtMWVKMjhMNEFkWms2WW5UZXNlU0dZ?= =?utf-8?B?NjE5V0ZQV0RLMGE2VUwxYnVsRkhmaFl5RENFMFlCaFM4bFFtZzE3SkpXSXpi?= =?utf-8?B?Q1pNc0RtM3JsaTFRK3FvUy83RldNVFlPYmhXOFVCVHMvckZhdFdjeDVMQjA4?= =?utf-8?B?M0d3MjRVMjFxbDJxR1NOakpjclhmeFZtOC9RM3VTcUdLdHZVcy9vK0pGNzk2?= =?utf-8?B?d2tZWm9jQk9wYitJUE1RYkoyYll6Z2tQN3FtMExEL09ad0YzdmtwMTBQTEtW?= =?utf-8?B?QjRUd0lwSFlwczZMRHJ0VWdzV3F2K2lOdC9yNDIzVmdQK3BJdFJVK0VoeElD?= =?utf-8?B?VHFUQmgyZHJlWmhqb3RPRDdhRG1oOG9WNUJPeHdBZjJTTFRoT29tRGpiUk1x?= =?utf-8?B?T1UyMFJLa2JkY1MvMy9ZZllmWGNla0dPcVJaM2IrbWRWSFFtdGVhQ29Bd1NZ?= =?utf-8?B?NVV1N1dqS3RTcXNYVkdsTFI0TWJlbDNWWCt5WE9nNExrMlViOUhPdndWa0Zi?= =?utf-8?B?MlpUSE8rbmYrZ3JUZ3ZkM0preWlPUXVxYkRUQVBISFQzeUJaSFZLVWtpZUFp?= =?utf-8?B?QjE3VEdMVS9PdC9ibEpEQUVUbWZ6aFNWRTh5YmVoTFJLb0p4bkF1emh4RHBz?= =?utf-8?B?eGtaUkZ4ZmRoUlRMSDdManREUXpnY2YrMHd5L2tEYjR0TjhSUTVqMnRiT2ZB?= =?utf-8?B?V2RVWjd0SUlnbnkzeGdjVzZLR3MwcEc3a3Mwb29STlNjR0kwNzlNYWwyRGcv?= =?utf-8?B?b2d3YXJzSXorVmxrbXVnWkZ4OENYMWpCbFJqVVpBU2wrOUppcnNHcEEyWjN2?= =?utf-8?B?Vi92a09QNW5oOWM2bktJT2dycWdEbFFuOUw0Kzcva0NSMGY0RkJPRDJxOWN4?= =?utf-8?B?Qk5JaGlXOG9qTS9temU2VmJxSmN6OVduNzZDcmRabG9CNXB1ZWpHNXhTS05q?= =?utf-8?B?UDBsZlZDQ2JnM05uYmtFTWZkZHphWjQwbTV4ZjJQT3d3dWQ2WmdpcTJYRE0v?= =?utf-8?B?elFjMmNpMmg5NDJhcFZTNVRRS1JQWGNhMFRnSG8zQTBrVFlLL3pFUktGbGRl?= =?utf-8?Q?Eju3Xiv0TxW8yIprwpEmc5dPYKmbZsBSQA?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DB6PR0701MB3047.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 0d46c9b4-108f-49e6-9a5c-08d8969f31b6 X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Dec 2020 08:49:35.0262 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: D1iYTmcIhdt6HHyoEDSSENRfTDhEcthgBgxWFV28TMIvsUiK9ZWZZ2Qw8hQkVq3Si6WGJN48rn1R5Kqez1JrLfkrj7qHxf0sHJePG5xZfTY= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9PR07MB7321 Archived-At: Subject: Re: [COSE] New Version Notification for draft-mattsson-cose-cbor-cert-compress-05.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Dec 2020 08:49:44 -0000 VGhhbmtzIGFnYWluIGZvciBhbGwgdGhlIGdvb2QgY29tbWVudCBhbmQgZGlzY3Vzc2lvbnMgb24g dGhlIGxpc3QhDQoNCldlIGhhdmUgc3VibWl0dGVkIC0wNS4gQ2hhbmdlcyBhcmU6DQoNCi0gQWRk ZWQgcmVmZXJlbmNlIHRvIElFRUUgODAyLjFBUiBEZXZJRCBhbmQgbWFkZSBvcHRpbWl6YXRpb24g Zm9yIElFRUUgODAyLjFBUiBEZXZJRC4NCi0gUmVwaHJhc2VkICJjb21wcmVzcyIgaW4gdGhlIHdo b2xlIGRvY3VtZW50LiBXZSB3aWxsIGNoYW5nZSB0aGUgZmlsZSBuYW1lIGxhdGVyLg0KLSBNYWRl IGl0IG1vcmUgY2xlYXIgdGhhdCBYLjUwOSB2ZXJzaW9uIGluIGluY2x1ZGVkIGluIHRoZSBDQk9S IGNlcnRpZmljYXRlIHR5cGUuDQotIE9taXR0ZWQgJ3NpZ25hdHVyZScgaW5zdGVhZCBvZiAnc2lu Z2F0dXJlQWxnb3JpdGhtJy4gTm93IHRoZSBhbGdvcml0aG0gY29tZXMganVzdCBiZWZvcmUgdGhl IHNpZ25hdHVyZSB2YWx1ZS4NCi0gQWRkZWQgc3VwcG9ydCBvZiBlbWFpbEFkZHJlc3MgLyBJQTVT dHJpbmcgaW4gaXNzdWVyIGFuZCBzdWJqZWN0LiBUaGlzIHdhcyBlYXN5Lg0KLSBjaGFuZ2VkIHNv IHV0ZjhTdHJpbmdzIGhhdmUgYSBwb3NpdGl2ZSBzaWduLg0KLSBDaGFuZ2UgdGltZSB0byB1bndy YXBwZWQgQ0JPUiBlcG9jaCB0aW1lICh+dGltZSkuIFRoaXMgc2F2ZXMgMSBieXRlIGZvciB0aW1l ID4gMjA1MA0KLSBBZGRlZCB0aGF0IHRoZSB2YWx1ZSAiOTk5OTEyMzEyMzU5NTlaIiAobm8gZXhw aXJhdGlvbiBkYXRlKSBpcyBlbmNvZGVkIGFzIENCT1IgbnVsbC4gVGhpcyBpcyBxdWl0ZSBjb21t b25seSB1c2VkIGluIElvVCBjZXJ0aWZpY2F0ZXMuIFRoaXMgc2F2ZXMgNCBieXRlcyB3aGVuIHVz ZWQuDQotIFVzZSBDRERMIGZvciBDQk9SIE9JRCBhcyBkZWZpbmVkIGluIGRyYWZ0LWlldGYtY2Jv ci10YWdzLW9pZA0KLSBBZGRlZCBDQk9SIGVuY29kaW5nIGZvciB1dGhvcml0eUtleUlkZW50aWZp ZXIgYW5kIHN1YmplY3RLZXlJZGVudGlmaWVyIHdoaWNoIGFyZSBoZWF2aWx5IHVzZWQgYnkgSUVF RSA4MDIuMUFSIERldklEIChhdCBsZWFzdCBvbmUgb2YgdGhlbSBhcmUgbWFuZGF0ZWQgZGVwZW5k aW5nIG9uIHR5cGUgb2YgY2VydCkuDQotIEFkZGVkIG9wdGltaXphdGlvbiBmb3IgdGhlIGhhcmR3 YXJlTW9kdWxlTmFtZSB0eXBlIG9mIG90aGVyTmFtZSwgd2hpY2ggaXMgbWFuZGF0b3J5IHRvIHVz ZSBpbiBJRUVFIDgwMi4xQVIgRGV2SUQNCi0gQWRkZWQgQ0JPUiBlbmNvZGluZyBmb3IgY1JMRGlz dHJpYnV0aW9uUG9pbnRzIGFuZCBhdXRob3JpdHlJbmZvQWNjZXNzLCB3aGljaCBhcmUgYm90aCB1 c2VkIGluIGJhc2ljYWxseSBhbGwgSFRUUFMgY2VydGlmaWNhdGVzIG9uIHRoZSB3ZWIuDQotIEFk ZGVkIHN1cHBvcnQgZm9yIHJlZ2lzdGVyZWRJRC4gVGhpcyB3YXMgdHJpdmlhbCBhbmQgcmVnaXN0 ZXJlZElEIGlzIHVzZWQgZS5nLiBieSB0aGUgR1NNQSBlVUlDQyBQS0kgQ2VydGlmaWNhdGUgUG9s aWN5IChTR1AgMTQpLg0KLSBBZGRlZCBjb25zaWRlcmF0aW9ucyBmb3IgZXhwZXJ0IHJldmlld2Vy cy4NCi0gTW92ZWQgU0hBLTEgc2lnbmF0dXJlIGFsZ29yaXRobXMgdG8gbmVnYXRpdmUgMiBieXRl IGVuY29kaW5nczogLTI1NiBhbmQgLTI1NQ0KLSBBZGRlZCBhIHB1YmxpYyBwcml2YXRlIEVDRFNB IGtleSBwYWlyIHR1cm5pbmcgdGhlIGV4YW1wbGUgY2VydGlmaWNhdGVzIGludG8gdGVzdCB2ZWN0 b3JzLiBBbiBpbXBsZW1lbnRhdGlvbiBjYW4gbm93IGNyZWF0ZSBhbmQgdmVyaWZ5IHRoZSBleGFt cGxlIFJGQyA3OTI1IGNlcnRpZmljYXRlcy4NCg0KQ2hlZXJzLA0KSm9obg0KDQrvu78tLS0tLU9y aWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogImludGVybmV0LWRyYWZ0c0BpZXRmLm9yZyIgPGlu dGVybmV0LWRyYWZ0c0BpZXRmLm9yZz4NCkRhdGU6IFdlZG5lc2RheSwgMiBEZWNlbWJlciAyMDIw IGF0IDA4OjU2DQpUbzogR8O2cmFuIFNlbGFuZGVyIDxnb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5j b20+LCBHw7ZyYW4gU2VsYW5kZXIgPGdvcmFuLnNlbGFuZGVyQGVyaWNzc29uLmNvbT4sIE1hcnRp biBGdXJ1aGVkIDxtYXJ0aW4uZnVydWhlZEBuZXh1c2dyb3VwLmNvbT4sIFNoYWhpZCBSYXphIDxz aGFoaWQucmF6YUByaS5zZT4sIEpvaG4gTWF0dHNzb24gPGpvaG4ubWF0dHNzb25AZXJpY3Nzb24u Y29tPiwgSm9lbCBIb2dsdW5kIDxqb2VsLmhvZ2x1bmRAcmkuc2U+LCBKb2huIE1hdHRzc29uIDxq b2huLm1hdHRzc29uQGVyaWNzc29uLmNvbT4sIEpvZWwgSMO2Z2x1bmQgPGpvZWwuaG9nbHVuZEBy aS5zZT4NClN1YmplY3Q6IE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3IgZHJhZnQtbWF0dHNz b24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3MtMDUudHh0DQoNCg0KQSBuZXcgdmVyc2lvbiBvZiBJ LUQsIGRyYWZ0LW1hdHRzc29uLWNvc2UtY2Jvci1jZXJ0LWNvbXByZXNzLTA1LnR4dA0KaGFzIGJl ZW4gc3VjY2Vzc2Z1bGx5IHN1Ym1pdHRlZCBieSA9P3V0Zi04P3E/Sm9obl9QcmV1PUMzPTlGX01h dHRzc29uPz0gYW5kIHBvc3RlZCB0byB0aGUNCklFVEYgcmVwb3NpdG9yeS4NCg0KTmFtZToJCWRy YWZ0LW1hdHRzc29uLWNvc2UtY2Jvci1jZXJ0LWNvbXByZXNzDQpSZXZpc2lvbjoJMDUNClRpdGxl OgkJQ0JPUiBFbmNvZGluZyBvZiBYLjUwOSBDZXJ0aWZpY2F0ZXMgKENCT1IgQ2VydGlmaWNhdGVz KQ0KRG9jdW1lbnQgZGF0ZToJMjAyMC0xMi0wMQ0KR3JvdXA6CQlJbmRpdmlkdWFsIFN1Ym1pc3Np b24NClBhZ2VzOgkJMjkNClVSTDogICAgICAgICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9hcmNo aXZlL2lkL2RyYWZ0LW1hdHRzc29uLWNvc2UtY2Jvci1jZXJ0LWNvbXByZXNzLTA1LnR4dA0KU3Rh dHVzOiAgICAgICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LW1hdHRz c29uLWNvc2UtY2Jvci1jZXJ0LWNvbXByZXNzLw0KSHRtbGl6ZWQ6ICAgICAgIGh0dHBzOi8vZGF0 YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQtbWF0dHNzb24tY29zZS1jYm9yLWNlcnQt Y29tcHJlc3MNCkh0bWxpemVkOiAgICAgICBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJh ZnQtbWF0dHNzb24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3MtMDUNCkRpZmY6ICAgICAgICAgICBo dHRwczovL3d3dy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtbWF0dHNzb24tY29zZS1jYm9y LWNlcnQtY29tcHJlc3MtMDUNCg0KQWJzdHJhY3Q6DQogICBUaGlzIGRvY3VtZW50IHNwZWNpZmll cyBhIENCT1IgZW5jb2Rpbmcgb2YgWC41MDkgY2VydGlmaWNhdGVzLiAgVGhlDQogICByZXN1bHRp bmcgY2VydGlmaWNhdGVzIGFyZSBjYWxsZWQgQ0JPUiBDZXJ0aWZpY2F0ZXMuICBUaGUgQ0JPUg0K ICAgZW5jb2Rpbmcgc3VwcG9ydHMgYSBsYXJnZSBzdWJzZXQgb2YgUkZDIDUyODAsIHdoaWxlIGF0 IHRoZSBzYW1lIHRpbWUNCiAgIHNpZ25pZmljYW50bHkgcmVkdWNlcyB0aGUgc2l6ZSBvZiBjZXJ0 aWZpY2F0ZXMgY29tcGF0aWJsZSB3aXRoIFJGQw0KICAgNzkyNSBhbmQgSUVFRSA4MDIuMUFSIChE ZXZJRHMpLiAgV2hlbiB1c2VkIHRvIHJlLWVuY29kZSBERVIgZW5jb2RlZA0KICAgWC41MDkgY2Vy dGlmaWNhdGVzLCB0aGUgQ0JPUiBlbmNvZGluZyBjYW4gaW4gbWFueSBjYXNlcyByZWR1Y2UgdGhl DQogICBzaXplIG9mIFJGQyA3OTI1IHByb2ZpbGVkIGNlcnRpZmljYXRlcyB3aXRoIG92ZXIgNTAl LiAgVGhlIENCT1INCiAgIGVuY29kaW5nIGNhbiBhbHNvIGJlIHVzZWQgZW5jb2RlICJuYXRpdmVs eSBzaWduZWQiIENCT1IgY2VydGlmaWNhdGVzLA0KICAgd2hpY2ggZG9lcyBub3QgcmVxdWlyZSBy ZS1lbmNvZGluZyBmb3IgdGhlIHNpZ25hdHVyZSB0byBiZSB2ZXJpZmllZC4NCiAgIFRoZSBkb2N1 bWVudCBhbHNvIHNwZWNpZmllcyBDT1NFIGhlYWRlcnMgYXMgd2VsbCBhcyBhIFRMUyBjZXJ0aWZp Y2F0ZQ0KICAgdHlwZSBmb3IgQ0JPUiBjZXJ0aWZpY2F0ZXMuDQoNCg0KDQoNClBsZWFzZSBub3Rl IHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcyBmcm9tIHRoZSB0aW1lIG9mIHN1 Ym1pc3Npb24NCnVudGlsIHRoZSBodG1saXplZCB2ZXJzaW9uIGFuZCBkaWZmIGFyZSBhdmFpbGFi bGUgYXQgdG9vbHMuaWV0Zi5vcmcuDQoNClRoZSBJRVRGIFNlY3JldGFyaWF0DQoNCg0KDQo= From nobody Wed Dec 2 01:22:52 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 403C23A1207 for ; Wed, 2 Dec 2020 01:22:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.102 X-Spam-Level: X-Spam-Status: No, score=-2.102 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 78VPBNRlnToZ for ; Wed, 2 Dec 2020 01:22:49 -0800 (PST) Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on2042.outbound.protection.outlook.com [40.107.22.42]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A366C3A1120 for ; Wed, 2 Dec 2020 01:22:48 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=W+vwXSU8PglO2fUeD4hHoNnKq5v+LcdB7mf2LZvm2U7LGfnNn+FGisTQb76wP+sRUzpMA3jkDNkq/u6iwlTfknPOhY8em2A2xkAuy+TlJjBN8/Z1X1ouEOFoQDopuw679FzAikM9ecfgrZyY9etV9jx1CRDLzz+2C9agLDKo3SVs5xYTVyMx1kSRwjg5rrs39OE3x+XbIeQ9WxB0Qn30hd8BXGv4a0Qh/Cx2aZtga6eSw8S4Bq2Um8IpQmOIKq4l+Pbb5ptYfawGj1X+MsH+8IZF7FX6gZC0r4HrObcGcMdpMSDyeIqYCYPhdM6tsa2LyAds+uxp8Zjud+FJPJwKPw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=bPamJnGGQ3WBSd5Ll/xCPU8WhMUow7/go2HlhV/vJ3w=; b=WI+4YWT//SV3Hp5zrooyZ1pkemn19azMgT7JiGSJGij5QFPp7ZJvasa5bl9suTsxCAYk5ItJRbdQlnFsCQ0lysD5zsNMe0xnM4cA8ToZc2u2G6tw8QVU2GlA6+F+RBMNb8JUhVCce/cRanURscF+B39DWEFgGm73QDGsLaqQdTjV/fP+ns/e64zbk9XElhRp3dERdaQfozTAtJthB+t2Llf4SG4srt1zd0lzgJvszabtEcRxvBLVG/5TiBrGekg2XHioFzf2pmHDge8k1ZhlNF/Icq8B0nXDQsuObEszZ1vqyzFZ01OO3kH+ghNK7iJnba11FTEyoyCb6tVFnBHQMg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=bPamJnGGQ3WBSd5Ll/xCPU8WhMUow7/go2HlhV/vJ3w=; b=muOd33icrB8g+z1JVn1Rp0iwn9AZCTbsH2skwAsYjXN/zxk7hwN/dBPy/V11F2Z5Gz18pho8/kUpEuJgChkc7mPrZdHbWupMrUZtsuvlyZIiCI4CtHYOSHlIZaRSAXtWG7D3S/PoTcJuqhxHvaA6HbS3kAeutfoxsApDfttWhgQ= Received: from DB6PR0701MB3047.eurprd07.prod.outlook.com (2603:10a6:4:74::7) by DBAPR07MB6664.eurprd07.prod.outlook.com (2603:10a6:10:18e::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3654.5; Wed, 2 Dec 2020 09:22:46 +0000 Received: from DB6PR0701MB3047.eurprd07.prod.outlook.com ([fe80::b89e:1074:9805:42d]) by DB6PR0701MB3047.eurprd07.prod.outlook.com ([fe80::b89e:1074:9805:42d%6]) with mapi id 15.20.3632.016; Wed, 2 Dec 2020 09:22:46 +0000 From: John Mattsson To: cose Thread-Topic: CBOR Certificates Open Issues after -05 Thread-Index: AQHWyIyyDLWXpWUAG0OdBUtEouUwxw== Date: Wed, 2 Dec 2020 09:22:46 +0000 Message-ID: Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.42.20101102 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [81.225.97.222] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 691e22bb-f1e4-4e29-ba86-08d896a3d4a3 x-ms-traffictypediagnostic: DBAPR07MB6664: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: vDqNtPgbdSWyuOWiAaxsjaWRYUXmexQA6p7XyvTXzW69vc/hG2CDS8QYU7u1MRmxHK8/Ge0vrJMsp+pQvNrTSgbVWeRSFhJdu6QZ2B2sCTamGc/HL7XDDuHtCxP/pOjQZFuwdCEkGovkbZ5GqeMgDxCyX/9uFIPMt0+bqJUPjFlMDe92iM3JHcUmcph0iLGTk7ZHoabdyEh0QPAdqBZqJPaPEptOIzEHDjZMnDIJ3awYgQgFNy2nJdp3XnRFsg38oud/rxZHooC7ZMoosnlFF74HrKBEMMzjIYQEkjhzA966nqCxpHCRco5dtmUs6oMNm/eyIcUUclOTfUFQdkfM3HAxikjPUYvG6RAqDDGS/zKGioVhy8rhEugQp7ca7VZyl0ozMKDiASvdZVmeqsJty8z+VqfjlkqpSGvdwwnqBME= x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB6PR0701MB3047.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(39860400002)(136003)(376002)(366004)(346002)(396003)(36756003)(6486002)(6506007)(26005)(186003)(6512007)(44832011)(2616005)(83380400001)(316002)(478600001)(8936002)(71200400001)(8676002)(33656002)(6916009)(66446008)(64756008)(66556008)(66476007)(5660300002)(2906002)(66946007)(76116006)(91956017)(86362001)(403724002)(45980500001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?ekZ3MVZYZGxiQkcrQXlHUGZjRzk1R21GaCs4amdVVzd5am81TDJxQy9Ea3NR?= =?utf-8?B?Wmwvd0kwZ0Z3Y3lnWlFxT0l1T2QrckVlR3pmT3lGS01pUUI2MitoS0xZb0ZF?= =?utf-8?B?cndOQllpRWN4b090Qmx5Ykd1V1hoTVlhR0Jwd2tOc1pvTlVKY0MzMldGMXMz?= =?utf-8?B?YnlZS0VJMkxRTVhIa0R1RGM0d3l2eE5OeTdETzVPQ0F3S2xJS3ZHNlllbkI4?= =?utf-8?B?SVpsaGttVXI2VHRQTHBNY3RkZDR5Mnp2Z1dSRkM4cDZDbGtnNjdVSlZxMVg5?= =?utf-8?B?YURnbGlLc3MyUzZRcGM1bFdkK3VyK3dKM1ErVXpEanp0S2lKdDIxT2h0elEv?= =?utf-8?B?eDBkd1VydGhxWmFuMHRWUWkwTXRDdFJNTkxTY1MrWjJ4VjRxYysyWTlqWUc2?= =?utf-8?B?ZGNEZjB2OUxBb2U5NS9LdTFjdE5DWGJ6WjZ3Q2hIR0M1aFl2U09PU2ZMWjhs?= =?utf-8?B?bHlEU01PaWNDTVJneVFtem11dERlQTlNU0o3VDV6TG9aQ1FuamUwUnVRV2Rx?= =?utf-8?B?TVY4MjFJOElUWWt2WnNJNDJYWThBemFDSUJSS2FmUzhWcEhHNE1Jb1JvSm1O?= =?utf-8?B?d1NFWC9LT2NGaENrRXRvdEEvdUNmeDArY1FKTlV1SG9VT1dkaXhyM2JkajN4?= =?utf-8?B?ekNVR0RFVldzZ201QzNSVFdzR2RiNmlBYnpYOFdLNHlzb0s4Mzl3aVNPRWRK?= =?utf-8?B?c0pJamdJZHd4akxrVjAvalpwaTZ0elJUMnYyNkNYT0Y5alpldVN3bHB3SlNZ?= =?utf-8?B?cjlIR1ZjZ3l0UzAxUzZQQ0pzU0NnM2tpT2xYK3M3eWRzdnV2RFVCNytLL0JZ?= =?utf-8?B?SzdaR3BZVDVuOUxzb1ZhTnhlZC8zVHpCVFl0Yk94OGpmd1hOaVlnUGNjYlFl?= =?utf-8?B?WjZQcXlneUhGMWJwRndGZmcrQVZ0NE1NMUZFN0h5VW1ueXo3YzNOZm9CZzJY?= =?utf-8?B?RlAyZmpocHBYSTVpNnJyOE5KaTdXMGR4SXMxOWp5MExqRk1LNmV6UUM4Vi9N?= =?utf-8?B?cVJHdkJndXRVdTVsMTBEWUx0RXlhc2FITFBhR3pkZjJlNzJ2U2ZNOTB4SlBE?= =?utf-8?B?ckViVWdqNCtTSlJJQ0ROaVJCa0VSa1IvVkpZTWdTdHRsT0Yzc1lyOXNDbXpM?= =?utf-8?B?YjJXdmVwMEF1VzM1ZGxWZDFDWjJQeGIrQ1BWdWJpV0NDR1k0dThDVWNFazlz?= =?utf-8?B?TklnZ1l1R3U5Rm1BU1NNVis1eU1yS3d4czdIdHppS1kwYkdHc3hhMExQWm9H?= =?utf-8?B?dEVCcnV4akZURnI1UzBiK0dnSDhMdW1YblovQUtlakVReXdZKzA1Znp6bjcw?= =?utf-8?Q?iVWsNoWzczq9xgjcqno+gs4+Yby0qkHSnu?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <992D19E15D0ACD4FB90F644E0B61AA1C@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DB6PR0701MB3047.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 691e22bb-f1e4-4e29-ba86-08d896a3d4a3 X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Dec 2020 09:22:46.3770 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: /7kXIbV8acEaun7OymWQL6uM/vrpkpmMms9t9JdffAbuYdhUW9QOZvCSAEbFh91nkwP3CbZBPi/fygLl/1A0QD5eX3FNyuUs8Iu/CDmDfyY= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DBAPR07MB6664 Archived-At: Subject: [COSE] CBOR Certificates Open Issues after -05 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Dec 2020 09:22:51 -0000 SGksDQoNCi0gSSB0aGluayBpdCB3b3VsZCBiZSB2ZXJ5IGdvb2Qgd2l0aCBhbiBleGFtcGxlIENC T1IgZW5jb2Rpbmcgb2YgYSBJRUVFIDgwMi4xQVIgRGV2SUQgY2VydGlmaWNhdGUuIERvZXMgYW55 b25lIGhhdmUgYSBzcGFyZSBEZXZJRCBjZXJ0aWZpY2F0ZSBseWluZyBhcm91bmQgdGhhdCBjb3Vs ZCBiZSB1c2VkPw0KDQotIEFTTi4xLiBEb2VzIHRoZSBkb2N1bWVudCBuZWVkIGFueSBBU04uMT8g Tm93IHdoZW4gdGhlIGRvY3VtZW50IGlzIGNvdmVyaW5nIGEgbGFyZ2Ugc3Vic2V0IG9mIFJGQyA1 MjgwIGl0IHdvdWxkIG1vc3RseSBiZSBkdXBsaWNhdGlvbiBvZiBSRkMgNTI4MCwgYnV0IHN0aWxs IGEgbG90IG9mIHdvcmsuIFdlIHN1Z2dlc3QgdG8gcmVtb3ZlIEFTTi4xIGZyb20gdGhlIGRvY3Vt ZW50LiBXZSBoYXZlIHBvaW50ZWQgb3V0IHRvIFVUQSBhbmQgdGhlIGF1dGhvcnMgb2YgZHJhZnQt aWV0Zi11dGEtdGxzMTMtaW90LXByb2ZpbGUgdGhhdCBBU04uMSBzaG91bGQgYmUgaW5jbHVkZWQg aW4gdGhlaXIgZG9jdW1lbnQuDQoNCi0gV2hhdCBzdWJzZXQgb2YgdGhlIGV4dGVuc2lvbnMgYXJl IGFjdGl2ZWx5IHVzZWQ/IExvb2tpbmcgYXQgSUVFRSA4MDIuMUFSIERldklEIGFuZCBhIGxvdCBv ZiBjZXJ0aWZpY2F0ZXMgb24gdGhlIFdlYiwgbXkgY3VycmVudCB1bmRlcnN0YW5kaW5nIGlzIGFz IGZvbGxvd3M6DQoNCi0tIEF1dGhvcml0eUtleUlkZW50aWZpZXIgc2VlbXMgdG8gdHlwaWNhbGx5 IGJlIHVzZWQgb25seSB3aXRoIEtleUlkZW50aWZpZXIuIElzIGl0IGVub3VnaCB0byBvbmx5IHN1 cHBvcnQgb3B0aW1pemVkIENCT1IgZW5jb2Rpbmcgb2YgS2V5SWRlbnRpZmllcj8gSS5lLiBub3Qg b3B0aW1pemVkIENCT1IgZW5jb2Rpbmcgb2YgQXV0aG9yaXR5S2V5SWRlbnRpZmllciB3aXRoIEdl bmVyYWxOYW1lcyBhbmQgQ2VydGlmaWNhdGVTZXJpYWxOdW1iZXI/DQoNCi0tIGNSTERpc3RyaWJ1 dGlvblBvaW50cyBzZWVtcyB0byB0eXBpY2FsbHkgYmUgdXNlZCBvbmx5IHdpdGggRGlzdHJpYnV0 aW9uUG9pbnROYW1lIG9mIHR5cGUgZnVsbE5hbWUgb2YgdHlwZSB1bmlmb3JtUmVzb3VyY2VJZGVu dGlmaWVyLiBJcyBpdCBlbm91Z2ggdG8gb25seSBzdXBwb3J0IG9wdGltaXplZCBDQk9SIGVuY29k aW5nIG9mICdyZWFzb25zJywgJ2NSTElzc3VlcicsICduYW1lUmVsYXRpdmVUb0NSTElzc3Vlcics IG9yIGdlbmVyYWwgbmFtZXMgb2Ygb3RoZXIgdHlwZXMgdGhhbiB1bmlmb3JtUmVzb3VyY2VJZGVu dGlmaWVyPw0KDQotLSBhdXRob3JpdHlJbmZvQWNjZXNzIHNlZW1zIHRvIHR5cGljYWxseSBiZSB1 c2VkIHdpdGggZ2VuZXJhbCBuYW1lcyBvZiB0eXBlIHVuaWZvcm1SZXNvdXJjZUlkZW50aWZpZXI/ IElzIGl0IGVub3VnaCB0byBvbmx5IHN1cHBvcnQgb3B0aW1pemVkIENCT1IgZW5jb2Rpbmcgb2Yg dW5pZm9ybVJlc291cmNlSWRlbnRpZmllcj8NCg0KQ2hlZXJzLA0KSm9obg0KDQoNCg== From nobody Wed Dec 2 13:45:21 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9275E3A15CE for ; Wed, 2 Dec 2020 13:45:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.098 X-Spam-Level: X-Spam-Status: No, score=-0.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, PDS_TONAME_EQ_TOLOCAL_SHORT=2, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bU2GJ05I2XMw for ; Wed, 2 Dec 2020 13:45:11 -0800 (PST) Received: from mail-oo1-xc36.google.com (mail-oo1-xc36.google.com [IPv6:2607:f8b0:4864:20::c36]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 993CF3A1573 for ; Wed, 2 Dec 2020 13:45:10 -0800 (PST) Received: by mail-oo1-xc36.google.com with SMTP id t142so9983oot.7 for ; Wed, 02 Dec 2020 13:45:10 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=aavcKqGgeH1sJTp2yZl1N1e8M0nqnjV25UL+CDBtjKw=; b=X8nUB+nMMUV9GMfUbREBgZCEgGJoTK8Nr+Go6ZQVj/UHvB4v9rZWzBGOmx78D0Fei0 rZFH1/Pstjy2XvfsQnzYGHvFm5d75Av2TLtQu81cV8szkyV7ts1VnfOST76F42cWuzpQ GTv3bEN1NwzuuXiK70PVccX+yDNYOLKJqTytf3doQ9mFVBCGo2zAoErMnavFJ936XBJO alPJ3l6fX98PwOqz8vMtUK5qKgurXGLsGPPt/37PxAGSNu1VdnwTUc31pFP5ZBanosDQ 1O9vzUdcD9MExO8rNN/EO3z53zulOxXZKJbFne1VDZi/fF1EI1t/IVJIrvfcXQ2vU9Mu eRUQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=aavcKqGgeH1sJTp2yZl1N1e8M0nqnjV25UL+CDBtjKw=; b=kfk/1ioBo+5usPuM+n3Ql2FuIhW1qPP1YMc4f+nK8dRGMhlm+7ujzekHfYPcqaix3l 9Exrvn/I+8BiEv2zZE1kV9wfD694IBrpApqpXHH+inSGP4AK4dQMw699V9GWPaWD4KoW +0/cU+VAp9sjceaRMTKNts2jjMdBeteQRhd8ilGiRxK6AjGv6RNSeJ4OwBsUr0IImEAL Yi1i5hG1kRXe6QMQBhTyTQ75o35a98ftWVGxKcujarUk2VNOiJDPKzQbxoRwWZVD2uVb 4qTsnogB/Yn4x3/YC9h5b5ulns4DrKmXWFrMC6ERcgLfNJWZNinRMinOfCEs5xlKOdoS 6l7g== X-Gm-Message-State: AOAM533R7QEySvGTPacMZZCFHKpNiuv2WokK96T8NPbweIix7t7RaAay mbRiGcgoHdy681chjGjOTszvN5qEcIjV41wjsCYScITwTfeqnA== X-Google-Smtp-Source: ABdhPJyZKOOo13957zRTNsyR5I0cacLOWpMNyZxJB4KawEx8Cq9S/DtYuHGP/FkDUEXPz1bgE6Fnr0NE4jxrWjAEjqQ= X-Received: by 2002:a4a:d1a7:: with SMTP id z7mr3293353oor.92.1606945509798; Wed, 02 Dec 2020 13:45:09 -0800 (PST) MIME-Version: 1.0 From: Jonathan Hammell Date: Wed, 2 Dec 2020 16:44:59 -0500 Message-ID: To: cose Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: [COSE] Examples for draft-ietf-cose-x509 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Dec 2020 21:45:20 -0000 I have created examples using the X.509 header parameters in PR https://github.com/cose-wg/Examples/pull/100. I used the code points for these header parameters that have been (temporarily) allocated in https://www.iana.org/assignments/cose/cose.xhtml#header-parameters. I realize that the document itself is past last call, so I don't expect the examples to be added to the document. Nevertheless, I think it is useful to other implementers to have examples available. Best regards, Jonathan From nobody Mon Dec 7 06:09:03 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E39583A0D78 for ; Mon, 7 Dec 2020 06:09:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.101 X-Spam-Level: X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=rkf-eng.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q0o6PSgye8HD for ; Mon, 7 Dec 2020 06:09:00 -0800 (PST) Received: from NAM12-BN8-obe.outbound.protection.outlook.com (mail-bn8nam12on2069.outbound.protection.outlook.com [40.107.237.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EA9533A13A5 for ; Mon, 7 Dec 2020 06:08:59 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=iXhA3tgZb9ByDYAgULgX/fxCpOTp6DXOZa4Pd7XBiyqbPK0CH3xX/koaJ5iyBslCzgISclDsVcxtn/PykjY/9mCzr/9pDlFDZBbyZFF3Lej7vUeUhpWMX/RcFxlz4KuqVP9dgvxecraOUKSE3ShrQBP9npTJefuWciyL8o97iA9d45lBdLWD9Cg+Pa1jtm0hvf7o+J8cYjvvGxcUWMrjAxFuRmvyuWDWxQFbaKlzXP3zbVnD7Xi1qHC5ThxvQWS1/wOdZEjAz0O6jN940EcQixNwRQ3J+tv32cdwGLGLrpZ1D8iK3py/tbPHBecf1YV0g4FnzspeRORhyaKwyj1j3w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dvPYmgFpNzD1G1LkWyEP6Ylr46AGqma3CzhRa+A0TFw=; b=Zoj9a0EVPtraLuEBg62s022LtkhT8PqccVQYOYSCh3rr+VEyk88+Oc25NqGl5U3d/721fcVqVffKVdPQ3gQZ0aOhM8hcCsiRdsHFVJhuqp6VyfgCbmaoa2MeBlETxt2XxTVUFZuXkx0hlm5wqFMgdIZKNQZU0/WVe0uGB/GZe3BSaDD8uY0IPOLeJUkH2pQgGvKWeOQMWA4gtabP0OqfO365LsGziD4YYxY01KQprUXzsnzUO+S9P/iL6l5y3F2BOnjI90EVkg4wPZQzAsqwj2s73ACOC8Ocu8LfGAHEnjlEkZoDtWvsJNNIqrIk31mtP0Q+vHsyIgoMl0Ka1ZKB9Q== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=rkf-eng.com; dmarc=pass action=none header.from=rkf-eng.com; dkim=pass header.d=rkf-eng.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rkf-eng.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=dvPYmgFpNzD1G1LkWyEP6Ylr46AGqma3CzhRa+A0TFw=; b=YxbQPdoIzrHskcCHkweoWxRFxIHx+aD5g+0Cx09femjk4Yie5jwammZ9nnG0bcRgGGzuCSZEV8tJ4pnNKmhuud7eb2cRStxEGkVi7Pb76ilL6eRAUPHtSSFUGndMvGHpfPMx55HSTEFeQ+zfo71Qnak4hguX3pOLGpkzS+Lttho= Received: from MN2PR13MB3567.namprd13.prod.outlook.com (2603:10b6:208:168::10) by MN2PR13MB3293.namprd13.prod.outlook.com (2603:10b6:208:13e::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3654.10; Mon, 7 Dec 2020 14:08:56 +0000 Received: from MN2PR13MB3567.namprd13.prod.outlook.com ([fe80::54f4:962e:10e5:a2e1]) by MN2PR13MB3567.namprd13.prod.outlook.com ([fe80::54f4:962e:10e5:a2e1%7]) with mapi id 15.20.3654.010; Mon, 7 Dec 2020 14:08:56 +0000 From: Brian Sipos To: "ivaylo@ackl.io" CC: "cose@ietf.org" Thread-Topic: [COSE] draft-ietf-cose-x509-07 x5chain and x5bag in COSE_Key Thread-Index: AQHWshFXZk0Dh+8etk2+LBcLK3QKVKnJjvqAgCJR34A= Date: Mon, 7 Dec 2020 14:08:56 +0000 Message-ID: References: <37c16acadc7b7d6da0789ad8a21c4ca9050c361a.camel@rkf-eng.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.38.1 (3.38.1-1.module_f33+10288+0a1d8bbf) authentication-results: ackl.io; dkim=none (message not signed) header.d=none;ackl.io; dmarc=none action=none header.from=rkf-eng.com; x-originating-ip: [96.241.16.84] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 1a34aaed-d298-4190-c5b8-08d89ab9a2c4 x-ms-traffictypediagnostic: MN2PR13MB3293: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: UObxU5yDeHkB67/U0Zh1NU5lVsXvrOkTsugglpG/45AmHPdqs1sBIZpa/vz66W05PtCn7N40RXr/4OMuF8/ERJVyS1fOmElgABpf0wbFHER+ePRagDMCSdE8DmbwUO4oH/k40EDaZ+cCFgXoEM5Nhd3kasI6LlvozzIrVqy2Q7/c3lkCL2f9MV9Gk0sfre7KNpoHSy0e0AcUYawrV4hnr8ryCjVy07jlklYVB6EOBa11WyNK9KUyx8FUvoXWwFHb1lYbj4j5vbYyjyXB+LInon84G9WvdfGGzxjeaTMLMCLuUatmKG2tkgJ2tWulihvaSFTK94bPjSJBQd9ltMNEGinRbzC+t3ZDhsH4PHHkcY5NClkW9eGDaZnjT2dAkTXrctwqfQUBRMQ/Q69nNiyUrZgiM4S3Whw+PhEtKiniVr0yc+ONKpn92XzqbUHkWO96k4SXkuhVBXLxBJzxMKlvSxqAWLUbdtGxKfHaCtCjboA= x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MN2PR13MB3567.namprd13.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(366004)(346002)(39830400003)(136003)(396003)(376002)(83380400001)(2616005)(66476007)(66446008)(66946007)(66556008)(86362001)(64756008)(4001150100001)(8936002)(966005)(186003)(6506007)(478600001)(26005)(53546011)(6916009)(6512007)(4326008)(36756003)(71200400001)(6486002)(8676002)(2906002)(76116006)(316002)(5660300002)(42413003)(32563001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?SXNrZWl2NmY3VkdoWXNpbEZ4a1VzUSt2N1FKaS8zeHdsSDZQclFmQis0bDln?= =?utf-8?B?SlRTYmNhVUlwdVd3bTJGQkZzelkrNUdtblpOWlQ2bFBYbm93bzh2R0EvVWZ4?= =?utf-8?B?THAxRXdHWHpTUGhxUkFhMGNKNkttV0VSQllhVW5uRlF2b1NZcjdQUkNWKzVP?= =?utf-8?B?cHFreHZIN2x5VVRRNm5nU29vOGN1ZmYyRGtiOEl4NUtBSFl2S0ZoeXNzenFS?= =?utf-8?B?TEVFT3ViVFlPeld6UTZ4OWxFT2N4WnV4Umt4OEdjb2NSZTNXbFVLL0dKMVVi?= =?utf-8?B?bkk0dTlwcUtRc0FmenBKdUViSnptSHllaHFqTGdTbWppY1V5cTEvamZRUmpC?= =?utf-8?B?OG9nNGJIeVNwYStnbjBnV0x5aVJXeGdWWnFvYjYrU21nYUk4Z1paN2ZscEJu?= =?utf-8?B?SzVHRmxkckxYSEV6R25pWTdaZXJaaDdzYUNra2E1VFF0SmptSGZEUkloeFpW?= =?utf-8?B?K0FGQnMwR016RG1neTVPTll3RlRGNEo1bXJNTGhtRWlMTVU1MHBUNXYyYksw?= =?utf-8?B?ekFzRmc5Vjl3ZmdzT0k5dk54VXdYdDRCbHV1RUk0RGIzRkNOZmp5WFJtMXB2?= =?utf-8?B?MXZ2Skg4S1EyRURnTXhQclNscW9oSjdmQ2U4aktJU3VVdzZIc3NpUS8zWmV1?= =?utf-8?B?eHNSbDZiRGN5QW41b2l4VjJLckxnMDJVNGladEhOTmliZjhNbVVESUpjM0pL?= =?utf-8?B?aFZnM2w0YXhYeVpPeDgrZGpBblZlMjNycVFRMndhK3d4WUdqQlBnVHdSNkZJ?= =?utf-8?B?UXJYRTdOSUVyNnQvZFZxclBLcGN3cnZMVkhqL2RyTFRuUDREZ2JlR2puZXAx?= =?utf-8?B?RG9ZUnZzbVVIQ1FVNTlGTlNZRStJNzNRZVltWTVoaG94TWN2bjNYMVdTalFR?= =?utf-8?B?RjN6UHN2TWNpSUVxaEFkYlA5bXMzb0tmRWdOMWtkd0xlbXBwbkZicy9qN24y?= =?utf-8?B?NCtlSTdjc2d6MmhxdGh0bThodklMdzhidlBVVURsQ1F2S3pKbVd4RVZKKzNP?= =?utf-8?B?cElxd2FaSE1KRHNLeVpuU3dLM1E0T1YwcjBJVnQ0SHBTMTZGK2UvTnd2THEy?= =?utf-8?B?T0QrWFhNbkdvWU9pWG5ZdldJczJEdk0wTDZmcjBITG9HRWc5eFltOCtacXNp?= =?utf-8?B?SUMrVzJVV2trNVpFeEd3cUR4QnV2clhFNUx3WmxhMUNiV1RaT2N2QzMyUEY2?= =?utf-8?B?SXpZbW1RUzZRc0ZwKzAwQW4yR09zemxTMEhqVWRHUnhQN2hjcW5GaXhJMnlD?= =?utf-8?B?ZWlkYlYvZnhYa2pQVjJDSWVieFlkNEVDNEpBb05JelpzWHkrMzhubmZ5VGpi?= =?utf-8?Q?GQ/PXEzk4VpuVxIo7uSJp6wy7Kw0JgfPhP?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <919A5FF58E2DF145BC0DAB756DD9A276@namprd13.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: rkf-eng.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MN2PR13MB3567.namprd13.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 1a34aaed-d298-4190-c5b8-08d89ab9a2c4 X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Dec 2020 14:08:56.2597 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4ed8b15b-911f-42bc-8524-d89148858535 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: HuBCZWFMbVu5pOPQ9qcoNFgtt8jw8x1wwEO3TQOIDyGhLP9WKQYUX/gRskXgME+k9GH3hngqyoJig8xivmQn2g== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR13MB3293 Archived-At: Subject: Re: [COSE] draft-ietf-cose-x509-07 x5chain and x5bag in COSE_Key X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Dec 2020 14:09:02 -0000 SXZheWxvLA0KSSBiZWxpZXZlIHRoYXQgeW91ciB1bmRlcnN0YW5kaW5nIG9mIHRoZSBzaXR1YXRp b24gaXMgY29ycmVjdC4gVGhlcmUgaXMNCm5vdGhpbmcgaW4gdGhlIGN1cnJlbnQgZHJhZnQgd2hp Y2ggaXMgKnByZXZlbnRpbmcqIGFuIHg1Y2hhaW4gb3IgeDViYWcNCmZyb20gYmVpbmcgdXNlZCB3 aXRoaW4gYSBDT1NFX0tleSBzdHJ1Y3R1cmUuIFRoZSBvbmx5IG1pc3NpbmcgcGllY2UgaXMNCnRo YXQgdGhlcmUgaXMgbm8gZXhpc3RpbmcgImt0eSIgdmFsdWUgaW4gWzRdIHdoaWNoIHdvdWxkIG1h a2UgdXNlIG9mDQp0aGUgeDVjaGFpbi94NWJhZyBjb250YWluZXJzLg0KDQpUaGUgdXNlIG9mIFBL SVggY2VydGlmaWNhdGVzIGlzIHNsaWdodHkgZGlmZmVyZW50IHRoYW4gZXhpc3RpbmcgdXNlcyBv Zg0KQ09TRV9LZXkgdG8gZXhwcmVzcyByYXcgKHBhcmFtZXRlcml6ZWQpIHB1YmxpYyBrZXkgZGF0 YSwgYnV0IEkgdGhpbmsNCml0J3MgaW4gdGhlIHNhbWUgc3Bpcml0IG9mICJ0cmFuc3BvcnRpbmcg a2V5IGRhdGEgYW5kIG1ldGFkYXRhIG91dHNpZGUNCm9mIENPU0UgbWVzc2FnZXMiIGFzIGV4aXN0 aW5nIHVzZXMuIFRoZSBvbmUgZnVuY3Rpb25hbCBkaWZmZXJlbmNlIGlzDQp0aGF0IGJvdGggeDVj aGFpbiBhbmQgeDViYWcgY2FuIHJlcHJlc2VudCAqbXVsdGlwbGUqIHB1YmxpYyBrZXlzLCB3aGVy ZQ0KYWxsIG90aGVyIGV4aXN0aW5nICJrdHkiIGRlZmluaXRpb25zIGNvbnRhaW4gb25seSBhIHNp bmdsZSBwdWJsaWMga2V5Lg0KU28gaW4gdGhhdCBzZW5zZSBhbnkgImtpZCIgcmVmZXJyaW5nIHRv IHRoZSBDT1NFX0tleSB3aWxsIGJlIHJlZmVycmluZw0KdG8gdGhlIGVudGlyZSB4NWNoYWluL3g1 YmFnLCB3aGlsZSBhICJ4NXQiIHJlZmVyZW5jZSB3b3VsZCByZWZlciB0bw0Kb25seSBhIHNpbmds ZSBjZXJ0IGluIHRoZSB4NWNoYWluL3g1YmFnLg0KDQpXb3VsZCB0aGVyZSBiZSBhbnkgb2JqZWN0 aW9uIGZyb20gQ09TRSBXRyBmb3IgYSBub24tQ09TRSBkcmFmdCB0bw0KcHJvcG9zZSBhZGRpbmcg YSAia3R5IiBmb3IgIlBLSVggQ2VydGlmaWNhdGVzIiB0byBtYWtlIHVzZSBvZiB0aGUNCng1Y2hh aW4gYW5kIHg1YmFnIGNvbnRhaW5lcnMgYXMga2V5IHBhcmFtZXRlcnM/DQpVbmZvcnR1bmF0ZWx5 LCBrZXkgcGFyYW1ldGVyIGNvZGUgcG9pbnRzIGFyZSBuZWdhdGl2ZSBpbnRlZ2Vycywgc28gdGhl DQpleGlzdGluZyB4NSBjb2RlIHBvaW50cyBjYW5ub3QgYmUgdXNlZCBhcyBrZXkgcGFyYW1ldGVy cy4NCg0KT24gU3VuLCAyMDIwLTExLTE1IGF0IDE5OjAzICswMTAwLCBJdmF5bG8gUGV0cm92IHdy b3RlOg0KPiBIZWxsb8KgQnJpYW4sDQo+IA0KPiBJIGFwb2xvZ2l6ZSBmb3IgdGhlIGRlbGF5LiBU aGFuayB5b3UgZm9yIHJlYWNoaW5nIG91dCEgQXMgdGhlIGN1cnJlbnQNCj4gZWRpdG9yIG9mIHRo ZSBjb3NlLXg1MDkgZHJhZnQgSSB3aWxsIHRyeSB0byBwcm92aWRlIHNvbWUgYW5zd2Vycw0KPiBi ZWxvdy4NCj4gDQo+IENoZWVycywNCj4gSXZheWxvDQo+IA0KPiBPbiBUdWUsIE5vdiAzLCAyMDIw IGF0IDc6NDQgUE0gQnJpYW4gU2lwb3MgPEJTaXBvc0Bya2YtZW5nLmNvbT4NCj4gd3JvdGU6DQo+ ID4gQWxsLA0KPiA+IFdoaWxlIGludmVzdGlnYXRpbmcgdGhlIHVzZSBvZiBDT1NFIHdpdGhpbiBh bm90aGVyIHByb3Bvc2VkDQo+ID4gc2VjdXJpdHkNCj4gPiBwcm90b2NvbCBbMV0gSSByYW4gaW50 byBhIHVzZSBjYXNlIHdoaWNoIGlzIG5vdCBkaXNjdXNzZWQgYXMgYQ0KPiA+IHBvc3NpYmlsaXR5 IGluIHRoZSBsYXN0IGRyYWZ0LWlldGYtY29zZS14NTA5IFsyXTogcHJvdmlkaW5nIGENCj4gPiBj ZXJ0aWZpY2F0ZSBjaGFpbiBvciBiYWcgd2l0aGluIGEgQ09TRV9LZXkgKG9yIENPU0VfS2V5U2V0 KQ0KPiA+IHN0cnVjdHVyZS4NCj4gPiANCj4gDQo+IFtJUF06IE15IHVuZGVyc3RhbmRpbmcgaXMg dGhhdCB0aGUgaWRlYSBvZiB0aGUgYXV0aG9yIHdhcyB0aGF0IGl0IGlzDQo+IGJldHRlciBub3Qg dG8gcHJvdmlkZSB0b28gbWFueSBjb25zdHJhaW50cyBvbiBob3cgdGhlIG5ldyBoZWFkZXINCj4g cGFyYW1ldGVycyBhcmUgdXNlZCB3aGVuIHRoYXQgaXMgbm90IG5lZWRlZC4gQ291bGQgeW91IGV4 cGxhaW4gaWYgdGhlDQo+IHdheSB4NWNoYWluwqBvciB4NWJhZyBzb21laG93IHByZXZlbnQgeW91 IGZyb20gZWZmaWNpZW50bHkgdXNpbmcgdGhlbT8NCj4gwqANCj4gPiBUaGlzIHBhcnRpY3VsYXIg dXNlIGNhc2UgaXMgYmVjYXVzZSBhIHRoZXJlIHdpbGwgbGlrZWx5IGJlIG1hbnkNCj4gPiBzaWdu YXR1cmVzIHByZXNlbnQgZnJvbSB0aGUgc2FtZSBwcml2YXRlIGtleSBhc3NvY2lhdGVkIHdpdGgg YW4NCj4gPiBlbmQtDQo+ID4gZW50aXR5IGNlcnRpZmljYXRlLCBhbmQgdGhlIG1lc3NhZ2UgZW5j b2Rpbmcgb2YgWzFdIGFsbG93cyBzZWN1cml0eQ0KPiA+ICJwYXJhbWV0ZXIiIGRhdGEgdG8gYmUg ZW5jb2RlZCBvbmNlIGFuZCB1c2VkIGZvciBtdWx0aXBsZSBzZWN1cml0eQ0KPiA+IG9wZXJhdGlv bnMuIFRoZSBpZGVhIGlzIHRoYXQgdGhlIHg1Y2hhaW4gd291bGQgYmUgcHJvdmlkZWQgb25jZSAo YXMNCj4gPiBhDQo+ID4gQ09TRV9LZXkpIGFuZCB0aGVuIGVhY2ggQ09TRV9TaWduMSB3b3VsZCBj b250YWluIGFuIHg1dCBhc3NvY2lhdGVkDQo+ID4gd2l0aA0KPiA+IHRoZSBlbmQtZW50aXR5IGNl cnRpZmljYXRlLiBUaGlzIHdvdWxkIGF2b2lkIG5lZWRpbmcgdG8gaW5jbHVkZSBhDQo+ID4gZHVw bGljYXRlIHg1Y2hhaW4gaW4gZWFjaCBvZiB0aGUgQ09TRV9TaWduMSBzdHJ1Y3R1cmVzLCB3aGlj aCB3b3VsZA0KPiA+IGJsb2F0IHRoZSBzaXplIG9mIHRoZSBlbmNvZGVkIHNpZ25hdHVyZXMuDQo+ ID4gDQo+IA0KPiBbSVBdOiBJIGFtIG5vdCBzdXJlIEkgdW5kZXJzdG9vZCB0aGlzIGNvcnJlY3Rs eSwgc28gbGV0IG1lIHRyeSB0bw0KPiByZXBocmFzZSBpdC4gSW4geW91ciBwcm90b2NvbCB0aGUg c2VjdXJpdHkgY29udGV4dCBpcyBzcGxpdCBpbiB0d28NCj4gcGFydHMuIE9uZSB0aGF0IGlzIHRy YW5zbWl0dGVkIHdpdGggZWFjaCBtZXNzYWdlIGFuZCBvbmUgdGhhdCBpcyBub3QNCj4gKGl0IGlz IGluIGEgd2F5IHN0YXRpYykuIFlvdXIgaWRlYSBpcyB0byBoYXZlIHRoZSBjZXJ0aWZpY2F0ZSB0 aGF0DQo+IHRoZSBwcm90b2NvbCBuZWVkcyBhcyB0aGXCoCJzdGF0aWMiIHBhcnQgYW5kIHRoZW4g aW4gZWFjaCBtZXNzYWdlIHRvDQo+IHNlbmQgYSB4NXQgcGFyYW1ldGVyIHRvIHJlZmVyIHRvIHRo aXMgY2VydGlmaWNhdGUgaW5zdGVhZCBvZiBlYWNoDQo+IHRpbWUgaW5jbHVkaW5nIHRoZSBjb21w bGV0ZSBjZXJ0aWZpY2F0ZS4gSWYgdGhhdCBpcyB0aGUgY2FzZSwgdGhhdA0KPiBzb3VuZHMgdmVy eSByZWFzb25hYmxlIHRvIG1lLCBidXQgaXMgdGhlcmXCoGFueXRoaW5nIGluIHRoZSBjdXJyZW50 DQo+IGRyYWZ0IHByZXZlbnRpbmcgeW91IGZyb20gZG9pbmcgdGhhdD8NCj4gDQo+ID4gSXMgdGhl cmUgYSB0ZWNobmljYWwgcmVhc29uIHdoeSB4NWNoYWluIG9yIHg1YmFnIGFyZSBpbmFwcHJvcHJp YXRlDQo+ID4gdG8NCj4gPiB1c2Ugd2l0aGluIGEgQ09TRV9LZXkgc3RydWN0dXJlPw0KPiA+IFRo ZXJlIHNlZW1zIHRvIGJlIG5vdGhpbmcgcHJvaGliaXRpbmcgdGhpcyBpbiBbMl0gYnV0IGFsc28g bm90aGluZw0KPiA+IGFkdm9jYXRpbmcgZm9yIHRoaXMga2luZCBvZiB1c2UuIFRoZSBlbmNvZGlu ZyBpdHNlbGYgY291bGQgdXNlIHRoZQ0KPiA+IGV4aXN0aW5nIGNvZGUgcG9pbnRzIGFzc2lnbmVk IGZvciB4NWNoYWluIGFuZCB4NWJhZyBIZWFkZXINCj4gPiBQYXJhbWV0ZXJzDQo+ID4gc3ViLXJl Z2lzdHJ5IFszXSBhbmQgYXNzaWduIGEgbmV3ICJYLjUwOSBDZXJ0aWZpY2F0ZSIgKG9yIHNvbWUN Cj4gPiBvdGhlcg0KPiA+IGFwcHJvcHJpYXRlIG5hbWUpIGNvZGVwb2ludCBLZXkgVHlwZXMgc3Vi LXJlZ2lzdHJ5IFs0XS4NCj4gPiANCj4gDQo+IEhlcmUgYWdhaW4gSSBkb24ndCB0aGluayBJIGZ1 bGx5IHVuZGVyc3RhbmQgeW91ciBxdWVzdGlvbi4gSXQgYXBwZWFycw0KPiB0byBtZSB0aGF0IHlv dSBzdWdnZXN0IHRoYXQgeDViYWcgbGV0J3Mgc2F5IHdpbGwgYmUgcGxhY2VkIGluc2lkZSBhDQo+ IENPU0VfS2V5IHN0cnVjdHVyZS4gTXkgdW5kZXJzdGFuZGluZyBpcyB0aGF0IHlvdSBjb3VsZCB1 c2UgYSB3YXkgdG8NCj4gcmVmZXIgdG8gYSBjZXJ0aWZpY2F0ZSB0aGF0IHdvdWxkIGJlIHVzZWQg Zm9yIHRoZSBjcnlwdG9ncmFwaGljDQo+IG9wZXJhdGlvbnMgaW5zdGVhZCBvZiByZWZlcnJpbmcg dG8gdGhlIGtleSBpbiBhbm90aGVyIHdheS4NCj4gDQo+ID4gQXMgYW4gYWx0ZXJuYXRpdmUsIG15 IHVzZSBjb3VsZCBwcm92aWRlIGZvciBlaXRoZXIgQ09TRV9LZXkgb3INCj4gPiB4NWNoYWluL3g1 YmFnIGJ1dCB0aGF0IHJ1bnMgaW50byB1c2Ugb2YgY29kZXBvaW50cyBmcm9tIG11bHRpcGxlDQo+ ID4gcmVnaXN0cmllcyBmb3IgdGhlIHNhbWUgcHVycG9zZSwgd2hpY2ggc2VlbXMgY29uZnVzaW5n LiBBbmQgSSBmZWVsDQo+ID4gbGlrZQ0KPiA+IHRoaXMgY2VydGlmaWNhdGUtYXMtcHVibGljLWtl eSBzZWVtcyBtb3JlIGdlbmVyYWwgcHVycG9zZSB0aGFuIG15DQo+ID4gdXNlDQo+ID4gaW4gWzFd Lg0KPiA+IA0KPiA+IFRoYW5rcyBmb3IgYW55IGNsYXJpZmljYXRpb24sDQo+ID4gQnJpYW4gUy4N Cj4gPiANCj4gPiBbMV0gaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWJzaXBvcy1k dG4tYnBzZWMtY29zZS0wMg0KPiA+IFsyXSBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJh ZnQtaWV0Zi1jb3NlLXg1MDktMDcNCj4gPiBbM10NCj4gPiBodHRwczovL3d3dy5pYW5hLm9yZy9h c3NpZ25tZW50cy9jb3NlL2Nvc2UueGh0bWwjaGVhZGVyLXBhcmFtZXRlcnMNCj4gPiBbNF0gaHR0 cHM6Ly93d3cuaWFuYS5vcmcvYXNzaWdubWVudHMvY29zZS9jb3NlLnhodG1sI2tleS10eXBlDQo+ ID4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPiBD T1NFIG1haWxpbmcgbGlzdA0KPiA+IENPU0VAaWV0Zi5vcmcNCj4gPiBodHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UNCg0K From nobody Mon Dec 7 14:02:05 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 552583A0B8B for ; Mon, 7 Dec 2020 14:02:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.917 X-Spam-Level: X-Spam-Status: No, score=-1.917 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KIVmKb-wQToO for ; Mon, 7 Dec 2020 14:02:02 -0800 (PST) Received: from p3plsmtpa07-04.prod.phx3.secureserver.net (p3plsmtpa07-04.prod.phx3.secureserver.net [173.201.192.233]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6848F3A0B92 for ; Mon, 7 Dec 2020 14:02:02 -0800 (PST) Received: from [192.168.1.81] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id mOa0ko7CfryUbmOa0kWXuI; Mon, 07 Dec 2020 15:02:01 -0700 X-CMAE-Analysis: v=2.4 cv=ePPWMFl1 c=1 sm=1 tr=0 ts=5fcea659 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=IkcTkHD0fZMA:10 a=48vgC7mUAAAA:8 a=0FD05c-RAAAA:8 a=musJw4uAAAAA:8 a=ilz37INTzIRfDr7NztcA:9 a=QEXdDO2ut3YA:10 a=w1C3t2QeGrPiZgrLijVG:22 a=l1rpMCqCXRGZwUSuRcM3:22 a=1r9cylzjBqEvxtMljPIL:22 X-SECURESERVER-ACCT: lgl@island-resort.com Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) From: Laurence Lundblade In-Reply-To: <4A0FDEA0-1264-418D-801C-6C710A3BE6AD@ericsson.com> Date: Mon, 7 Dec 2020 14:02:00 -0800 Cc: cose Content-Transfer-Encoding: quoted-printable Message-Id: <25A34E20-C4A4-4F15-B457-73CB1752A67F@island-resort.com> References: <160689580542.14210.17819515187695761515@ietfa.amsl.com> <4A0FDEA0-1264-418D-801C-6C710A3BE6AD@ericsson.com> To: John Mattsson X-Mailer: Apple Mail (2.3445.104.17) X-CMAE-Envelope: MS4xfEl0/Jh2iVJv+LZJWjRmJtNlTn3tstxuf7+ox9UddU4+s+XUxYQTof0vIaKhCCEnFldj67ItXKF0wolB1sLWtpMGJaFPJiY+U2RNTLDGZCNzGcbUcBs0 DNUiVZ7qNxbCrU5QjHFzFbFBC7YwAkO5/RDbTr7bhHDGEtnCJzshGRrfhpL8tBIV9LBusPJFgdjV/xWbizz7fmzujbI4fx/ivHXCo/Ek7mpM1ZIzyoFBfFiS a3v172rr+I2dHOOYfR1k5A== Archived-At: Subject: [COSE] bstr wrapping for native signed (was Re: New Version Notification for draft-mattsson-cose-cbor-cert-compress-05.txt) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Dec 2020 22:02:04 -0000 I don=E2=80=99t think it works very well at all to directly sign encoded = CBOR. It should be wrapped in a byte string. In particular issuerSignatureValue should probably be the signature over = a byte string that contains an encoded TBSCertificate. This is what COSE = does. The main reason for this is to allow implementation with off-the-shelf = CBOR encoders and decoders. =46rom some that I=E2=80=99ve looked at and = one I=E2=80=99ve written myself, CBOR decoders don=E2=80=99t allow = access a sub-part of the encoded CBOR so it can be input into the hash. = There would be no way to get just the encoded bytes of the = TBSCertificate out of the CBOR decoder unless you went in and hacked its = source code in a special way. Has anyone implemented verification of Natively Signed CBOR = Certificates? What CBOR decoder was used? Maybe I=E2=80=99m wrong about = this? I realize byte string wrapping TBSCertificate might cause upheaval in = the overall design because cborCertificateType would be inside the byte = string wrapping. Another approach might be to just use COSE for Natively Signed CBOR = Certificates. The COSE payload would be a TBSCertificate. COSE would = take care of the byte string wrapping issues. This would increase the = on-the-wire size of the certificate by about 10 bytes, but might = decrease code size of the implementation by re use of a COSE = implementation. LL > On Dec 2, 2020, at 12:49 AM, John Mattsson = wrote: >=20 > Thanks again for all the good comment and discussions on the list! >=20 > We have submitted -05. Changes are: >=20 > - Added reference to IEEE 802.1AR DevID and made optimization for IEEE = 802.1AR DevID. > - Rephrased "compress" in the whole document. We will change the file = name later. > - Made it more clear that X.509 version in included in the CBOR = certificate type. > - Omitted 'signature' instead of 'singatureAlgorithm'. Now the = algorithm comes just before the signature value. > - Added support of emailAddress / IA5String in issuer and subject. = This was easy. > - changed so utf8Strings have a positive sign. > - Change time to unwrapped CBOR epoch time (~time). This saves 1 byte = for time > 2050 > - Added that the value "99991231235959Z" (no expiration date) is = encoded as CBOR null. This is quite commonly used in IoT certificates. = This saves 4 bytes when used. > - Use CDDL for CBOR OID as defined in draft-ietf-cbor-tags-oid > - Added CBOR encoding for uthorityKeyIdentifier and = subjectKeyIdentifier which are heavily used by IEEE 802.1AR DevID (at = least one of them are mandated depending on type of cert). > - Added optimization for the hardwareModuleName type of otherName, = which is mandatory to use in IEEE 802.1AR DevID > - Added CBOR encoding for cRLDistributionPoints and = authorityInfoAccess, which are both used in basically all HTTPS = certificates on the web. > - Added support for registeredID. This was trivial and registeredID is = used e.g. by the GSMA eUICC PKI Certificate Policy (SGP 14). > - Added considerations for expert reviewers. > - Moved SHA-1 signature algorithms to negative 2 byte encodings: -256 = and -255 > - Added a public private ECDSA key pair turning the example = certificates into test vectors. An implementation can now create and = verify the example RFC 7925 certificates. >=20 > Cheers, > John >=20 > =EF=BB=BF-----Original Message----- > From: "internet-drafts@ietf.org" > Date: Wednesday, 2 December 2020 at 08:56 > To: G=C3=B6ran Selander , G=C3=B6ran = Selander , Martin Furuhed = , Shahid Raza , John = Mattsson , Joel Hoglund = , John Mattsson , Joel = H=C3=B6glund > Subject: New Version Notification for = draft-mattsson-cose-cbor-cert-compress-05.txt >=20 >=20 > A new version of I-D, draft-mattsson-cose-cbor-cert-compress-05.txt > has been successfully submitted by = =3D?utf-8?q?John_Preu=3DC3=3D9F_Mattsson?=3D and posted to the > IETF repository. >=20 > Name: draft-mattsson-cose-cbor-cert-compress > Revision: 05 > Title: CBOR Encoding of X.509 Certificates (CBOR = Certificates) > Document date: 2020-12-01 > Group: Individual Submission > Pages: 29 > URL: = https://www.ietf.org/archive/id/draft-mattsson-cose-cbor-cert-compress-05.= txt > Status: = https://datatracker.ietf.org/doc/draft-mattsson-cose-cbor-cert-compress/ > Htmlized: = https://datatracker.ietf.org/doc/html/draft-mattsson-cose-cbor-cert-compre= ss > Htmlized: = https://tools.ietf.org/html/draft-mattsson-cose-cbor-cert-compress-05 > Diff: = https://www.ietf.org/rfcdiff?url2=3Ddraft-mattsson-cose-cbor-cert-compress= -05 >=20 > Abstract: > This document specifies a CBOR encoding of X.509 certificates. The > resulting certificates are called CBOR Certificates. The CBOR > encoding supports a large subset of RFC 5280, while at the same time > significantly reduces the size of certificates compatible with RFC > 7925 and IEEE 802.1AR (DevIDs). When used to re-encode DER encoded > X.509 certificates, the CBOR encoding can in many cases reduce the > size of RFC 7925 profiled certificates with over 50%. The CBOR > encoding can also be used encode "natively signed" CBOR = certificates, > which does not require re-encoding for the signature to be verified. > The document also specifies COSE headers as well as a TLS = certificate > type for CBOR certificates. >=20 >=20 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > The IETF Secretariat >=20 >=20 >=20 > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Tue Dec 8 00:11:52 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B8823A0DE1 for ; Tue, 8 Dec 2020 00:11:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.102 X-Spam-Level: X-Spam-Status: No, score=-2.102 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uDcIa-YZyGAM for ; Tue, 8 Dec 2020 00:11:48 -0800 (PST) Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-eopbgr30054.outbound.protection.outlook.com [40.107.3.54]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6D8F23A0DED for ; Tue, 8 Dec 2020 00:11:48 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ls0rUQO9DeYHbkdCaUDtm3aVUEkKYywv5ICZkMagjtWfrtsQPv0xBev0v5B2/Kwk+HQR4Hpa+rRq9x6tUaS48AReV33xPYwRf+kBroKc46l4Hf1htnuafNlHUHYhgp7CgYIM/leeZdC3XhoTr7jUtDOwevyCPsolfFO4hTwmkX7zuXHOKsHvxykIDPkyzuWwk+Ul94W1G7bvata4lEGalE+Iy2rvTQtKL3KzGWzhG1BCNurB9kE6IoYCkw2TTkP0+w3stAhB0FfG6zFCLirrxCExAj8zzVNHrVWKsLsHFf7DSggV1acvmabBEeQKIcJgWdRlDKRl+anNvjUhnSYNtw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=UngSVjhBdSo9JIsd7F6S2uOItUqwn5269CkwkTFv4bE=; b=RZeLwNDbLll7jyF4jeuCNHDE+jWQxhn2WGAMndIJaUWMa979/6g1InWAKH9W14CpYfU7k/K3cJNrz5bf3eTQWkhjEaAKrWClV8IegHU7PHjjVO93te1RD1jmgNZUX077ZtZx0Vqo4JYPefK2vt/XGLjJvMThTfls6yAzaoMekCHbMlr+BtztcJl79q3C2zMAGn2yTpplh9NkEiviUmWaHQEue5scUsLMYA1dtU1GoMBbINnL/JXXbr4JtVD17gaAUh64GXhlgYkAJcRBS5bxonaBACy9lnwDygz9Nv0/eZx8BILcbGUwvJ/9z/dGGYqW7QEhmIemSMuTvQ0e74FI5g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=UngSVjhBdSo9JIsd7F6S2uOItUqwn5269CkwkTFv4bE=; b=G2j6fV03BXK+rIJWfk+uKtv+31IQn5qQO3vGdiLpCp+AlwqB0MefQ2InytL6fsWbsftR04QFRn+Z07yIkiYAfMARTa/ToOpYN8cQW50qlIhYPXu/asuhfLVmtq/8TmbbglmzuuSPzWlAxhutq3lZxRnWP4gJyTXGo+CZyR0szgQ= Received: from HE1PR0701MB3050.eurprd07.prod.outlook.com (2603:10a6:3:4b::8) by HE1PR07MB3082.eurprd07.prod.outlook.com (2603:10a6:7:38::25) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3654.9; Tue, 8 Dec 2020 08:11:45 +0000 Received: from HE1PR0701MB3050.eurprd07.prod.outlook.com ([fe80::5c61:f031:a660:fe7]) by HE1PR0701MB3050.eurprd07.prod.outlook.com ([fe80::5c61:f031:a660:fe7%11]) with mapi id 15.20.3654.012; Tue, 8 Dec 2020 08:11:45 +0000 From: John Mattsson To: "cose@ietf.org" Thread-Topic: [COSE] draft-ietf-cose-x509-07 x5chain and x5bag in COSE_Key Thread-Index: AQHWshFXZk0Dh+8etk2+LBcLK3QKVKnJjvqAgCJR34CAAT9PAA== Date: Tue, 8 Dec 2020 08:11:45 +0000 Message-ID: <4E262200-35BC-4C14-AED3-786DAB726D2B@ericsson.com> References: <37c16acadc7b7d6da0789ad8a21c4ca9050c361a.camel@rkf-eng.com> In-Reply-To: Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.42.20101102 authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [81.225.97.222] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 11708da9-05a1-4918-a670-08d89b50e78d x-ms-traffictypediagnostic: HE1PR07MB3082: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR0701MB3050.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(346002)(376002)(136003)(366004)(5660300002)(44832011)(6916009)(86362001)(33656002)(71200400001)(186003)(2616005)(26005)(66556008)(66446008)(4001150100001)(36756003)(83380400001)(508600001)(8676002)(53546011)(6486002)(6506007)(8936002)(64756008)(2906002)(6512007)(966005)(76116006)(66476007)(66946007)(42413003)(32563001)(45980500001); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?cHZIOFRwa2NZSlRxOFdCL0UyQmdkZHJ0OGdwQ3lWaGtIQ0FRRVJJMkVXQi9o?= =?utf-8?B?a3MrNit5cHlPdk1zSXdMTEUzeVhzK0ZXa085cWdxR3ZFREpkT2l1dnQ1Z2RE?= =?utf-8?B?RGpzV3lMSUUreXB0aGl0cVRLcTZ5WHEyVGVlbklmdjJuS1Zpa2xMcDNnUUxw?= =?utf-8?B?YmhWS2ZjdWpVQzRTYmYwRWtXaU12VnhVcC9OcDhNWVRQRHRFZnVUUUZtZkpN?= =?utf-8?B?UDhKV2tjWC8xcXBsK1l1c1BVaDNnZnVNby9wNVEzbWlWZHpTQ1hERFpUUGU2?= =?utf-8?B?d1lqZDBvQWc1UER0bUNBNjJsSHR4UUQ3SGJCejlwbmg0YVhEaEw3WXozSnJx?= =?utf-8?B?YkZGUklYNVNZK1VhMTVBYUFmOXcvWHlHbFhuSi9Ha0hyb3ZlNzZvYVJWbFc4?= =?utf-8?B?NmFmbWdFd2RMYkhpRElJL0d1L2NWL2ZYZUM2MHJxWTFldGlTakZ1SlBEWHl4?= =?utf-8?B?YWozOU01RzZ2ZUtUNmN5SE10V1paWnJ1czByaTFuVkFKMTFESTBjcVFqWmFU?= =?utf-8?B?SDdMZm5uQWR6S2hBa0FJbFBQZDlFK1ZtQktBbG91TzhaNFdMT2l3TGE1OVAy?= =?utf-8?B?blRQcGo0QlJWZFJtY0FJc2gvd29Xc1poblBTL2lBY2ptbHVoODB2WmtiN1VY?= =?utf-8?B?SEpaU3VXREh6RHI1TWJoSjk3alJyTThBT0VWT1ZQNVgySy9GczFDUTAwcURy?= =?utf-8?B?Nzc5OWY1V3VKWlc0V2NNR2F5L1BQNGpYU2ZlVExtWXA2eTRUWXYxa2s3Zko3?= =?utf-8?B?bEVkTG85VTBqenhTL1ZSU3ZhUkdiTEU3dXhoV2o4QzVlcHdQTHhnYng1SDJU?= =?utf-8?B?Mm5Vb0hOb3h1WllPelA5aXJncEJ6Ly9FMk5nSnh5b0NHaFFQcXkyYjYwMG5q?= =?utf-8?B?aUJKN2VFckZDMThuMndwT0VDR2ZwQ0prN3R3eTNTTVYwNDFwZ1V5UWpnY2xB?= =?utf-8?B?dmphN0FEODhHUEFVU2QwYXVRRnErclVQdHpKNVVoMTBiRFNDN2ROTkF0NlVM?= =?utf-8?B?K2NwRXFWVFoyN1lHaDdhL00xaUpZNUx3RjRML1l6bmhxTE5NbkVBLzREdTVw?= =?utf-8?B?TGZobll0dmJsYzlEcEF1cUdHVEI0TWxPNzZ4U1lZVG96cTlockg1YmR4TnlW?= =?utf-8?B?YnFhME9pcEFXOTZ0Z1Z5d25JMExHOGFKZUtxdXVFUVN6ckVHNFVlYTV4bjhI?= =?utf-8?B?b2RGVjhpR0tqdFl0SEkwS1E1WE9vbTlyKzA0T3Uxb25RRW9OQmQ0WnpoT0FK?= =?utf-8?B?NCtiM29MSlA2am5KWmdDMGdPcThlRk1PTm5ub2dVR2t4elRaOHRsTzR1M081?= =?utf-8?Q?zPwSyL5OoTixVCqdz4WnVRmS51F0h2QAoX?= x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="utf-8" Content-ID: <0E0B2E32281DED498A57AAD13AC9FF2F@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: HE1PR0701MB3050.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 11708da9-05a1-4918-a670-08d89b50e78d X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Dec 2020 08:11:45.6594 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: ZBsz0008/0OZBcZQqmBFs6gOZUQU+SVf9BWGDob8SHrOeEeI/ecyOIpCPXUZtvNwjb6aBr5wOM52HsMsD812wGzl719/0WKO34IPESKBM2s= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB3082 Archived-At: Subject: Re: [COSE] draft-ietf-cose-x509-07 x5chain and x5bag in COSE_Key X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Dec 2020 08:11:51 -0000 SGksDQoNCkkgaGF2ZSBhbHNvIHRob3VnaHQgYWJvdXQgaG93IHRvIGlkZW50aWZ5IFguNTA5IHdp dGgga2lkLiBJIHRoaW5rIGl0IHdvdWxkDQpnb29kIHdpdGggYXQgbGVhc3Qgc29tZSBndWlkYW5j ZSB0byBpbXBsZW1lbnRvcnMuIEkgaGF2ZSAyIHJlYXNvbnMNCnRvIGlkZW50aWZ5IGEgWC41MDkg d2l0aCBhIGtpZDoNCg0KKDEpLiB4NXQgYW5kIHg1dSBhcmUgZW5jb2RlcyB0byBtb3JlIGJ5dGVz IHRoYW4gYSBzaG9ydCBraWQuIFRoaXMgbWF0dGVycyBpbg0KICAgdmVyeSBjb25zdHJhaW5lZCBz eXN0ZW1zLiBFREhPQyB3aXRoIGtpZCBmaXRzIGluIHNpbmdsZSBtZXNzYWdlcyBpbiA1MQ0KICAg Ynl0ZSBMb3JhV2FuIGFuZCA1LWhvcCA2VGlTY2guIFg1dCBkb2VzIG5vdC4gIA0KDQooMikuIENP U0VfS2V5IGRvZXMgbm90IGhhdmUgYW55IHN1YmplY3QsIGFuZCBkb2VzIHRoZXJlZm9yZSBub3Qg cHJvdGVjdCBhZ2FpbnMNCiAgIG1pc2JpbmRpbmcgYXR0YWNrcyB3aGVuIHBhcnRpZXMgY2FuIHJl Z2lzdGVyIHB1YmxpYyBrZXlzIHdpdGhvdXQNCiAgIOKAnHByb29mIG9mIHBvc3Nlc3Npb24iIChp dCBpcyBhIHN0YXRlZCBnb2FsIG9mIHRoZSBTSUdNQSBwcm90b2NvbCB0bw0KICAgcHJvdGVjdCBh Z2FpbnN0IHN1Y2ggYXR0YWNrcykuIFNlbGYtc2lnbmVkIGNlcnRpZmljYXRlcyBtaWdodCB0aGVy ZWZvcmUNCiAgIGJlIG1vcmUgc2VjdXJlIFBSSyB0aGFuIENPU0VfS2V5IGluIHNvbWUgc2NlbmFy aW9zLiANCg0KQXMgZGlzY3Vzc2VkIGVhcmxpZXIgaW4gdGhpcyBtYWlsIHRocmVhZCwgSSB0aGlu ayB0aGVyZSBhcmUgMyBzb2x1dGlvbnMgdG8gKDEpLg0KDQpbMV0uIFRoZSBzb2x1dGlvbiB0b2Rh eSBpcyB0byBwdXQga2lkIGFuZCB4LjUwOSBpbiBhIGRpY3Rpb25hcnkvbWFwLiBraWQgY2FuDQog ICBiZSB1c2VkIGZvciBhbnkga2V5IHN0cnVjdHVyZXMuIFN1Y2ggdXNlIGlzIGhpbnRlZCBhdCBp bg0KICAgZHJhZnQtbWF0dHNzb24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3MgYW5kIGlzIGFsc28g aG93IGNUTFMgZG8gdGhpbmdzLg0KDQpbMl0uIGFkZCBraWQgZmllbGQgaW4gWC41MDkNCg0KWzNd LiBhZGQga3R5IGZpZWxkIGZvciBYLjUwOSBpbiBDT1NFX0tleSAgDQoNCkFuZCBvbmUgYWRkaXRp b25hbCBzb2x1dGlvbiB0byByMg0KDQpbNF0uIFB1dCBzdWJqZWN0IG5hbWUgaW4gQ09TRV9LZXku DQoNCkNoZWVycw0KSm9obg0KDQrvu78tLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTog Q09TRSA8Y29zZS1ib3VuY2VzQGlldGYub3JnPiBvbiBiZWhhbGYgb2YgQnJpYW4gU2lwb3MgPEJT aXBvc0Bya2YtZW5nLmNvbT4NCkRhdGU6IE1vbmRheSwgNyBEZWNlbWJlciAyMDIwIGF0IDE1OjA5 DQpUbzogIml2YXlsb0BhY2tsLmlvIiA8aXZheWxvQGFja2wuaW8+DQpDYzogImNvc2VAaWV0Zi5v cmciIDxjb3NlQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtDT1NFXSBkcmFmdC1pZXRmLWNvc2Ut eDUwOS0wNyB4NWNoYWluIGFuZCB4NWJhZyBpbiBDT1NFX0tleQ0KDQpJdmF5bG8sDQpJIGJlbGll dmUgdGhhdCB5b3VyIHVuZGVyc3RhbmRpbmcgb2YgdGhlIHNpdHVhdGlvbiBpcyBjb3JyZWN0LiBU aGVyZSBpcw0Kbm90aGluZyBpbiB0aGUgY3VycmVudCBkcmFmdCB3aGljaCBpcyAqcHJldmVudGlu ZyogYW4geDVjaGFpbiBvciB4NWJhZw0KZnJvbSBiZWluZyB1c2VkIHdpdGhpbiBhIENPU0VfS2V5 IHN0cnVjdHVyZS4gVGhlIG9ubHkgbWlzc2luZyBwaWVjZSBpcw0KdGhhdCB0aGVyZSBpcyBubyBl eGlzdGluZyAia3R5IiB2YWx1ZSBpbiBbNF0gd2hpY2ggd291bGQgbWFrZSB1c2Ugb2YNCnRoZSB4 NWNoYWluL3g1YmFnIGNvbnRhaW5lcnMuDQoNClRoZSB1c2Ugb2YgUEtJWCBjZXJ0aWZpY2F0ZXMg aXMgc2xpZ2h0eSBkaWZmZXJlbnQgdGhhbiBleGlzdGluZyB1c2VzIG9mDQpDT1NFX0tleSB0byBl eHByZXNzIHJhdyAocGFyYW1ldGVyaXplZCkgcHVibGljIGtleSBkYXRhLCBidXQgSSB0aGluaw0K aXQncyBpbiB0aGUgc2FtZSBzcGlyaXQgb2YgInRyYW5zcG9ydGluZyBrZXkgZGF0YSBhbmQgbWV0 YWRhdGEgb3V0c2lkZQ0Kb2YgQ09TRSBtZXNzYWdlcyIgYXMgZXhpc3RpbmcgdXNlcy4gVGhlIG9u ZSBmdW5jdGlvbmFsIGRpZmZlcmVuY2UgaXMNCnRoYXQgYm90aCB4NWNoYWluIGFuZCB4NWJhZyBj YW4gcmVwcmVzZW50ICptdWx0aXBsZSogcHVibGljIGtleXMsIHdoZXJlDQphbGwgb3RoZXIgZXhp c3RpbmcgImt0eSIgZGVmaW5pdGlvbnMgY29udGFpbiBvbmx5IGEgc2luZ2xlIHB1YmxpYyBrZXku DQpTbyBpbiB0aGF0IHNlbnNlIGFueSAia2lkIiByZWZlcnJpbmcgdG8gdGhlIENPU0VfS2V5IHdp bGwgYmUgcmVmZXJyaW5nDQp0byB0aGUgZW50aXJlIHg1Y2hhaW4veDViYWcsIHdoaWxlIGEgIng1 dCIgcmVmZXJlbmNlIHdvdWxkIHJlZmVyIHRvDQpvbmx5IGEgc2luZ2xlIGNlcnQgaW4gdGhlIHg1 Y2hhaW4veDViYWcuDQoNCldvdWxkIHRoZXJlIGJlIGFueSBvYmplY3Rpb24gZnJvbSBDT1NFIFdH IGZvciBhIG5vbi1DT1NFIGRyYWZ0IHRvDQpwcm9wb3NlIGFkZGluZyBhICJrdHkiIGZvciAiUEtJ WCBDZXJ0aWZpY2F0ZXMiIHRvIG1ha2UgdXNlIG9mIHRoZQ0KeDVjaGFpbiBhbmQgeDViYWcgY29u dGFpbmVycyBhcyBrZXkgcGFyYW1ldGVycz8NClVuZm9ydHVuYXRlbHksIGtleSBwYXJhbWV0ZXIg Y29kZSBwb2ludHMgYXJlIG5lZ2F0aXZlIGludGVnZXJzLCBzbyB0aGUNCmV4aXN0aW5nIHg1IGNv ZGUgcG9pbnRzIGNhbm5vdCBiZSB1c2VkIGFzIGtleSBwYXJhbWV0ZXJzLg0KDQpPbiBTdW4sIDIw MjAtMTEtMTUgYXQgMTk6MDMgKzAxMDAsIEl2YXlsbyBQZXRyb3Ygd3JvdGU6DQo+IEhlbGxvIEJy aWFuLA0KPiANCj4gSSBhcG9sb2dpemUgZm9yIHRoZSBkZWxheS4gVGhhbmsgeW91IGZvciByZWFj aGluZyBvdXQhIEFzIHRoZSBjdXJyZW50DQo+IGVkaXRvciBvZiB0aGUgY29zZS14NTA5IGRyYWZ0 IEkgd2lsbCB0cnkgdG8gcHJvdmlkZSBzb21lIGFuc3dlcnMNCj4gYmVsb3cuDQo+IA0KPiBDaGVl cnMsDQo+IEl2YXlsbw0KPiANCj4gT24gVHVlLCBOb3YgMywgMjAyMCBhdCA3OjQ0IFBNIEJyaWFu IFNpcG9zIDxCU2lwb3NAcmtmLWVuZy5jb20+DQo+IHdyb3RlOg0KPiA+IEFsbCwNCj4gPiBXaGls ZSBpbnZlc3RpZ2F0aW5nIHRoZSB1c2Ugb2YgQ09TRSB3aXRoaW4gYW5vdGhlciBwcm9wb3NlZA0K PiA+IHNlY3VyaXR5DQo+ID4gcHJvdG9jb2wgWzFdIEkgcmFuIGludG8gYSB1c2UgY2FzZSB3aGlj aCBpcyBub3QgZGlzY3Vzc2VkIGFzIGENCj4gPiBwb3NzaWJpbGl0eSBpbiB0aGUgbGFzdCBkcmFm dC1pZXRmLWNvc2UteDUwOSBbMl06IHByb3ZpZGluZyBhDQo+ID4gY2VydGlmaWNhdGUgY2hhaW4g b3IgYmFnIHdpdGhpbiBhIENPU0VfS2V5IChvciBDT1NFX0tleVNldCkNCj4gPiBzdHJ1Y3R1cmUu DQo+ID4gDQo+IA0KPiBbSVBdOiBNeSB1bmRlcnN0YW5kaW5nIGlzIHRoYXQgdGhlIGlkZWEgb2Yg dGhlIGF1dGhvciB3YXMgdGhhdCBpdCBpcw0KPiBiZXR0ZXIgbm90IHRvIHByb3ZpZGUgdG9vIG1h bnkgY29uc3RyYWludHMgb24gaG93IHRoZSBuZXcgaGVhZGVyDQo+IHBhcmFtZXRlcnMgYXJlIHVz ZWQgd2hlbiB0aGF0IGlzIG5vdCBuZWVkZWQuIENvdWxkIHlvdSBleHBsYWluIGlmIHRoZQ0KPiB3 YXkgeDVjaGFpbiBvciB4NWJhZyBzb21laG93IHByZXZlbnQgeW91IGZyb20gZWZmaWNpZW50bHkg dXNpbmcgdGhlbT8NCj4gIA0KPiA+IFRoaXMgcGFydGljdWxhciB1c2UgY2FzZSBpcyBiZWNhdXNl IGEgdGhlcmUgd2lsbCBsaWtlbHkgYmUgbWFueQ0KPiA+IHNpZ25hdHVyZXMgcHJlc2VudCBmcm9t IHRoZSBzYW1lIHByaXZhdGUga2V5IGFzc29jaWF0ZWQgd2l0aCBhbg0KPiA+IGVuZC0NCj4gPiBl bnRpdHkgY2VydGlmaWNhdGUsIGFuZCB0aGUgbWVzc2FnZSBlbmNvZGluZyBvZiBbMV0gYWxsb3dz IHNlY3VyaXR5DQo+ID4gInBhcmFtZXRlciIgZGF0YSB0byBiZSBlbmNvZGVkIG9uY2UgYW5kIHVz ZWQgZm9yIG11bHRpcGxlIHNlY3VyaXR5DQo+ID4gb3BlcmF0aW9ucy4gVGhlIGlkZWEgaXMgdGhh dCB0aGUgeDVjaGFpbiB3b3VsZCBiZSBwcm92aWRlZCBvbmNlIChhcw0KPiA+IGENCj4gPiBDT1NF X0tleSkgYW5kIHRoZW4gZWFjaCBDT1NFX1NpZ24xIHdvdWxkIGNvbnRhaW4gYW4geDV0IGFzc29j aWF0ZWQNCj4gPiB3aXRoDQo+ID4gdGhlIGVuZC1lbnRpdHkgY2VydGlmaWNhdGUuIFRoaXMgd291 bGQgYXZvaWQgbmVlZGluZyB0byBpbmNsdWRlIGENCj4gPiBkdXBsaWNhdGUgeDVjaGFpbiBpbiBl YWNoIG9mIHRoZSBDT1NFX1NpZ24xIHN0cnVjdHVyZXMsIHdoaWNoIHdvdWxkDQo+ID4gYmxvYXQg dGhlIHNpemUgb2YgdGhlIGVuY29kZWQgc2lnbmF0dXJlcy4NCj4gPiANCj4gDQo+IFtJUF06IEkg YW0gbm90IHN1cmUgSSB1bmRlcnN0b29kIHRoaXMgY29ycmVjdGx5LCBzbyBsZXQgbWUgdHJ5IHRv DQo+IHJlcGhyYXNlIGl0LiBJbiB5b3VyIHByb3RvY29sIHRoZSBzZWN1cml0eSBjb250ZXh0IGlz IHNwbGl0IGluIHR3bw0KPiBwYXJ0cy4gT25lIHRoYXQgaXMgdHJhbnNtaXR0ZWQgd2l0aCBlYWNo IG1lc3NhZ2UgYW5kIG9uZSB0aGF0IGlzIG5vdA0KPiAoaXQgaXMgaW4gYSB3YXkgc3RhdGljKS4g WW91ciBpZGVhIGlzIHRvIGhhdmUgdGhlIGNlcnRpZmljYXRlIHRoYXQNCj4gdGhlIHByb3RvY29s IG5lZWRzIGFzIHRoZSAic3RhdGljIiBwYXJ0IGFuZCB0aGVuIGluIGVhY2ggbWVzc2FnZSB0bw0K PiBzZW5kIGEgeDV0IHBhcmFtZXRlciB0byByZWZlciB0byB0aGlzIGNlcnRpZmljYXRlIGluc3Rl YWQgb2YgZWFjaA0KPiB0aW1lIGluY2x1ZGluZyB0aGUgY29tcGxldGUgY2VydGlmaWNhdGUuIElm IHRoYXQgaXMgdGhlIGNhc2UsIHRoYXQNCj4gc291bmRzIHZlcnkgcmVhc29uYWJsZSB0byBtZSwg YnV0IGlzIHRoZXJlIGFueXRoaW5nIGluIHRoZSBjdXJyZW50DQo+IGRyYWZ0IHByZXZlbnRpbmcg eW91IGZyb20gZG9pbmcgdGhhdD8NCj4gDQo+ID4gSXMgdGhlcmUgYSB0ZWNobmljYWwgcmVhc29u IHdoeSB4NWNoYWluIG9yIHg1YmFnIGFyZSBpbmFwcHJvcHJpYXRlDQo+ID4gdG8NCj4gPiB1c2Ug d2l0aGluIGEgQ09TRV9LZXkgc3RydWN0dXJlPw0KPiA+IFRoZXJlIHNlZW1zIHRvIGJlIG5vdGhp bmcgcHJvaGliaXRpbmcgdGhpcyBpbiBbMl0gYnV0IGFsc28gbm90aGluZw0KPiA+IGFkdm9jYXRp bmcgZm9yIHRoaXMga2luZCBvZiB1c2UuIFRoZSBlbmNvZGluZyBpdHNlbGYgY291bGQgdXNlIHRo ZQ0KPiA+IGV4aXN0aW5nIGNvZGUgcG9pbnRzIGFzc2lnbmVkIGZvciB4NWNoYWluIGFuZCB4NWJh ZyBIZWFkZXINCj4gPiBQYXJhbWV0ZXJzDQo+ID4gc3ViLXJlZ2lzdHJ5IFszXSBhbmQgYXNzaWdu IGEgbmV3ICJYLjUwOSBDZXJ0aWZpY2F0ZSIgKG9yIHNvbWUNCj4gPiBvdGhlcg0KPiA+IGFwcHJv cHJpYXRlIG5hbWUpIGNvZGVwb2ludCBLZXkgVHlwZXMgc3ViLXJlZ2lzdHJ5IFs0XS4NCj4gPiAN Cj4gDQo+IEhlcmUgYWdhaW4gSSBkb24ndCB0aGluayBJIGZ1bGx5IHVuZGVyc3RhbmQgeW91ciBx dWVzdGlvbi4gSXQgYXBwZWFycw0KPiB0byBtZSB0aGF0IHlvdSBzdWdnZXN0IHRoYXQgeDViYWcg bGV0J3Mgc2F5IHdpbGwgYmUgcGxhY2VkIGluc2lkZSBhDQo+IENPU0VfS2V5IHN0cnVjdHVyZS4g TXkgdW5kZXJzdGFuZGluZyBpcyB0aGF0IHlvdSBjb3VsZCB1c2UgYSB3YXkgdG8NCj4gcmVmZXIg dG8gYSBjZXJ0aWZpY2F0ZSB0aGF0IHdvdWxkIGJlIHVzZWQgZm9yIHRoZSBjcnlwdG9ncmFwaGlj DQo+IG9wZXJhdGlvbnMgaW5zdGVhZCBvZiByZWZlcnJpbmcgdG8gdGhlIGtleSBpbiBhbm90aGVy IHdheS4NCj4gDQo+ID4gQXMgYW4gYWx0ZXJuYXRpdmUsIG15IHVzZSBjb3VsZCBwcm92aWRlIGZv ciBlaXRoZXIgQ09TRV9LZXkgb3INCj4gPiB4NWNoYWluL3g1YmFnIGJ1dCB0aGF0IHJ1bnMgaW50 byB1c2Ugb2YgY29kZXBvaW50cyBmcm9tIG11bHRpcGxlDQo+ID4gcmVnaXN0cmllcyBmb3IgdGhl IHNhbWUgcHVycG9zZSwgd2hpY2ggc2VlbXMgY29uZnVzaW5nLiBBbmQgSSBmZWVsDQo+ID4gbGlr ZQ0KPiA+IHRoaXMgY2VydGlmaWNhdGUtYXMtcHVibGljLWtleSBzZWVtcyBtb3JlIGdlbmVyYWwg cHVycG9zZSB0aGFuIG15DQo+ID4gdXNlDQo+ID4gaW4gWzFdLg0KPiA+IA0KPiA+IFRoYW5rcyBm b3IgYW55IGNsYXJpZmljYXRpb24sDQo+ID4gQnJpYW4gUy4NCj4gPiANCj4gPiBbMV0gaHR0cHM6 Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWJzaXBvcy1kdG4tYnBzZWMtY29zZS0wMg0KPiA+ IFsyXSBodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jb3NlLXg1MDktMDcN Cj4gPiBbM10NCj4gPiBodHRwczovL3d3dy5pYW5hLm9yZy9hc3NpZ25tZW50cy9jb3NlL2Nvc2Uu eGh0bWwjaGVhZGVyLXBhcmFtZXRlcnMNCj4gPiBbNF0gaHR0cHM6Ly93d3cuaWFuYS5vcmcvYXNz aWdubWVudHMvY29zZS9jb3NlLnhodG1sI2tleS10eXBlDQo+ID4gX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gPiBDT1NFIG1haWxpbmcgbGlzdA0KPiA+ IENPU0VAaWV0Zi5vcmcNCj4gPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L2Nvc2UNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18N CkNPU0UgbWFpbGluZyBsaXN0DQpDT1NFQGlldGYub3JnDQpodHRwczovL3d3dy5pZXRmLm9yZy9t YWlsbWFuL2xpc3RpbmZvL2Nvc2UNCg0K From nobody Tue Dec 8 10:28:04 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 97D713A109B for ; Tue, 8 Dec 2020 10:28:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KitQ7KB5sl4E for ; Tue, 8 Dec 2020 10:28:01 -0800 (PST) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3F3BE3A1091 for ; Tue, 8 Dec 2020 10:28:01 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id C0C81300B53 for ; Tue, 8 Dec 2020 13:27:58 -0500 (EST) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id g5EQ-N9ySfaA for ; Tue, 8 Dec 2020 13:27:56 -0500 (EST) Received: from a860b60074bd.fios-router.home (pool-141-156-161-153.washdc.fios.verizon.net [141.156.161.153]) by mail.smeinc.net (Postfix) with ESMTPSA id 87F65300A48; Tue, 8 Dec 2020 13:27:56 -0500 (EST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) From: Russ Housley In-Reply-To: <4E262200-35BC-4C14-AED3-786DAB726D2B@ericsson.com> Date: Tue, 8 Dec 2020 13:27:58 -0500 Cc: "cose@ietf.org" Content-Transfer-Encoding: quoted-printable Message-Id: <285DB49A-0BF9-4124-9568-E3DC1B7BC149@vigilsec.com> References: <37c16acadc7b7d6da0789ad8a21c4ca9050c361a.camel@rkf-eng.com> <4E262200-35BC-4C14-AED3-786DAB726D2B@ericsson.com> To: John Mattsson X-Mailer: Apple Mail (2.3445.104.17) Archived-At: Subject: Re: [COSE] draft-ietf-cose-x509-07 x5chain and x5bag in COSE_Key X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Dec 2020 18:28:04 -0000 I like the Add KID approach. Russ > On Dec 8, 2020, at 3:11 AM, John Mattsson = wrote: >=20 > Hi, >=20 > I have also thought about how to identify X.509 with kid. I think it = would > good with at least some guidance to implementors. I have 2 reasons > to identify a X.509 with a kid: >=20 > (1). x5t and x5u are encodes to more bytes than a short kid. This = matters in > very constrained systems. EDHOC with kid fits in single messages in = 51 > byte LoraWan and 5-hop 6TiSch. X5t does not. =20 >=20 > (2). COSE_Key does not have any subject, and does therefore not = protect agains > misbinding attacks when parties can register public keys without > =E2=80=9Cproof of possession" (it is a stated goal of the SIGMA = protocol to > protect against such attacks). Self-signed certificates might = therefore > be more secure PRK than COSE_Key in some scenarios.=20 >=20 > As discussed earlier in this mail thread, I think there are 3 = solutions to (1). >=20 > [1]. The solution today is to put kid and x.509 in a dictionary/map. = kid can > be used for any key structures. Such use is hinted at in > draft-mattsson-cose-cbor-cert-compress and is also how cTLS do = things. >=20 > [2]. add kid field in X.509 >=20 > [3]. add kty field for X.509 in COSE_Key =20 >=20 > And one additional solution to r2 >=20 > [4]. Put subject name in COSE_Key. >=20 > Cheers > John >=20 > =EF=BB=BF-----Original Message----- > From: COSE on behalf of Brian Sipos = > Date: Monday, 7 December 2020 at 15:09 > To: "ivaylo@ackl.io" > Cc: "cose@ietf.org" > Subject: Re: [COSE] draft-ietf-cose-x509-07 x5chain and x5bag in = COSE_Key >=20 > Ivaylo, > I believe that your understanding of the situation is correct. There = is > nothing in the current draft which is *preventing* an x5chain or x5bag > from being used within a COSE_Key structure. The only missing piece is > that there is no existing "kty" value in [4] which would make use of > the x5chain/x5bag containers. >=20 > The use of PKIX certificates is slighty different than existing uses = of > COSE_Key to express raw (parameterized) public key data, but I think > it's in the same spirit of "transporting key data and metadata outside > of COSE messages" as existing uses. The one functional difference is > that both x5chain and x5bag can represent *multiple* public keys, = where > all other existing "kty" definitions contain only a single public key. > So in that sense any "kid" referring to the COSE_Key will be referring > to the entire x5chain/x5bag, while a "x5t" reference would refer to > only a single cert in the x5chain/x5bag. >=20 > Would there be any objection from COSE WG for a non-COSE draft to > propose adding a "kty" for "PKIX Certificates" to make use of the > x5chain and x5bag containers as key parameters? > Unfortunately, key parameter code points are negative integers, so the > existing x5 code points cannot be used as key parameters. >=20 > On Sun, 2020-11-15 at 19:03 +0100, Ivaylo Petrov wrote: >> Hello Brian, >>=20 >> I apologize for the delay. Thank you for reaching out! As the current >> editor of the cose-x509 draft I will try to provide some answers >> below. >>=20 >> Cheers, >> Ivaylo >>=20 >> On Tue, Nov 3, 2020 at 7:44 PM Brian Sipos >> wrote: >>> All, >>> While investigating the use of COSE within another proposed >>> security >>> protocol [1] I ran into a use case which is not discussed as a >>> possibility in the last draft-ietf-cose-x509 [2]: providing a >>> certificate chain or bag within a COSE_Key (or COSE_KeySet) >>> structure. >>>=20 >>=20 >> [IP]: My understanding is that the idea of the author was that it is >> better not to provide too many constraints on how the new header >> parameters are used when that is not needed. Could you explain if the >> way x5chain or x5bag somehow prevent you from efficiently using them? >>=20 >>> This particular use case is because a there will likely be many >>> signatures present from the same private key associated with an >>> end- >>> entity certificate, and the message encoding of [1] allows security >>> "parameter" data to be encoded once and used for multiple security >>> operations. The idea is that the x5chain would be provided once (as >>> a >>> COSE_Key) and then each COSE_Sign1 would contain an x5t associated >>> with >>> the end-entity certificate. This would avoid needing to include a >>> duplicate x5chain in each of the COSE_Sign1 structures, which would >>> bloat the size of the encoded signatures. >>>=20 >>=20 >> [IP]: I am not sure I understood this correctly, so let me try to >> rephrase it. In your protocol the security context is split in two >> parts. One that is transmitted with each message and one that is not >> (it is in a way static). Your idea is to have the certificate that >> the protocol needs as the "static" part and then in each message to >> send a x5t parameter to refer to this certificate instead of each >> time including the complete certificate. If that is the case, that >> sounds very reasonable to me, but is there anything in the current >> draft preventing you from doing that? >>=20 >>> Is there a technical reason why x5chain or x5bag are inappropriate >>> to >>> use within a COSE_Key structure? >>> There seems to be nothing prohibiting this in [2] but also nothing >>> advocating for this kind of use. The encoding itself could use the >>> existing code points assigned for x5chain and x5bag Header >>> Parameters >>> sub-registry [3] and assign a new "X.509 Certificate" (or some >>> other >>> appropriate name) codepoint Key Types sub-registry [4]. >>>=20 >>=20 >> Here again I don't think I fully understand your question. It appears >> to me that you suggest that x5bag let's say will be placed inside a >> COSE_Key structure. My understanding is that you could use a way to >> refer to a certificate that would be used for the cryptographic >> operations instead of referring to the key in another way. >>=20 >>> As an alternative, my use could provide for either COSE_Key or >>> x5chain/x5bag but that runs into use of codepoints from multiple >>> registries for the same purpose, which seems confusing. And I feel >>> like >>> this certificate-as-public-key seems more general purpose than my >>> use >>> in [1]. >>>=20 >>> Thanks for any clarification, >>> Brian S. >>>=20 >>> [1] https://tools.ietf.org/html/draft-bsipos-dtn-bpsec-cose-02 >>> [2] https://tools.ietf.org/html/draft-ietf-cose-x509-07 >>> [3] >>> https://www.iana.org/assignments/cose/cose.xhtml#header-parameters >>> [4] https://www.iana.org/assignments/cose/cose.xhtml#key-type >>> _______________________________________________ >>> COSE mailing list >>> COSE@ietf.org >>> https://www.ietf.org/mailman/listinfo/cose >=20 > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose >=20 > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Tue Dec 8 13:53:38 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4088E3A11F9 for ; Tue, 8 Dec 2020 13:53:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.898 X-Spam-Level: X-Spam-Status: No, score=-1.898 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ackl-io.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Guqlmc4VtP27 for ; Tue, 8 Dec 2020 13:53:35 -0800 (PST) Received: from mail-wm1-x335.google.com (mail-wm1-x335.google.com [IPv6:2a00:1450:4864:20::335]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0ABFB3A1211 for ; Tue, 8 Dec 2020 13:53:32 -0800 (PST) Received: by mail-wm1-x335.google.com with SMTP id x22so3195529wmc.5 for ; Tue, 08 Dec 2020 13:53:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ackl-io.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to; bh=CRc8MEPfM6AhbUQVwXIkHwbdvw1qo7vOZPiQqTY6to4=; b=lwofgVdmZ3roEq6JbSeD2i5vTv1WrokR/3VfkBPNrsrdRZiEEw5n7wblfak8+tvihj mQT/m1m2WFeySQSKLHLAmLHD3oRmb0eo4/rd3wuKcg1hKRCPC1+qXZBePOmxvmEd1tYS LTHo3f7YIndsueAjf4zqCStYda8+hFORsla0+2dT5GSNhamiBuOfae4JH2qQqDy5FI7Y F2TjwFrvdCLA5Okekt5WDD8K1yIo9HpEViBxXyEXFalxDq3O+Z5MuboXiGaJ3x+5FRq8 3CeYn2EqiC7lOjHbwmB/QgU/Ps9Lk8aWItnn5yfTizPwLYzXbyOzjAOUXpnb9Daycj8v a1gA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=CRc8MEPfM6AhbUQVwXIkHwbdvw1qo7vOZPiQqTY6to4=; b=j2SaEscil8HBMfmfTCvzYDgYbZe6LzmarDY/DXdx3OGIll67bJ+WaGmdqjtoC/vSqQ HK+1b2SetCcMCGwVDAPCtP+ct2ViaC7m5NSWzCtjmslOucCeu7RrRONzWZI5F4wJoUVb M3FKigZ1iNEJ08GQPUludkCcYsoX2JBaKtE4wV1j49/mopEiYi5mWyo7F7wCTCxlLICV V5XcszoJ2t2bap/zBTkqJLabmsSTFchiXd6D9yz0Tud6dIG7XnrBmGEzYP3+fzemMKjE eUL4Nod1Xy8MkpdYMzvGmKy4V9N4mesB+mVz0f3yDuxWNUpqgqgkGd/TpVqlS9rIDSa9 qPWg== X-Gm-Message-State: AOAM531WtcurN10+OHLtGMdG3a2tU+HgAScMjNBZ68+TGdEPb5nsuqnZ e7Ehyu6D93qayxawsytGHnumf5QW4AvLx83R+k3q4mzOHwoD0w== X-Google-Smtp-Source: ABdhPJyg3mR5hxtP5AwLSz97uAWYNJY5M8FPMLdbuzAEZScF/T2pJYKyDmbLLHqlX8tnrj5DL+ihhtD4dPPix+VWa3A= X-Received: by 2002:a1c:2bc2:: with SMTP id r185mr5565323wmr.13.1607464410611; Tue, 08 Dec 2020 13:53:30 -0800 (PST) MIME-Version: 1.0 From: Ivaylo Petrov Date: Tue, 8 Dec 2020 22:53:04 +0100 Message-ID: To: cose Content-Type: multipart/alternative; boundary="0000000000002f186b05b5faf9f9" Archived-At: Subject: [COSE] Agenda proposal for interim on 16 Dec 2020 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Dec 2020 21:53:37 -0000 --0000000000002f186b05b5faf9f9 Content-Type: text/plain; charset="UTF-8" Dear all, Our next interim will be on 16 Dec 2020 from 16:00 UTC. The proposed agenda has been uploaded on the datatracker. Please let us know if you think some changes would be needed for that agenda. # 1. Administrivia (Chairs) - Note Well - Blue sheets (in the minutes) - Minutes: https://codimd.ietf.org/notes-ietf-interim-2020-cose-06-cose?both - Jabber: cose@jabber.ietf.org - Agenda Bartering # 2. Update on drafts status and charter (Chairs) - hash-algs - rfc8152bis-algs - rfc8152bis-struct - x509 + making it standard track document + From Ben's review: Should we do anything about COSE_Countersignature - Counter-sign - rechartering # 3. CBOR Certificates # 4. AOB - Matthew and Ivaylo COSE WG Chairs --0000000000002f186b05b5faf9f9 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Dear all,

Our next interim will be on 16 Dec 2020 from 16:00 UTC. The pro= posed agenda has been uploaded on the datatracker. Please let us know if yo= u think some changes would be needed for that agenda.

# 1. Administrivia (Chairs)
=C2=A0 - Note Well
=C2=A0 - B= lue sheets (in the minutes)
=C2=A0 - Minutes: https://codimd.ietf.org= /notes-ietf-interim-2020-cose-06-cose?both
=C2=A0 - Jabber: cose@jabber.ietf.org
=C2=A0 - Agend= a Bartering
# 2. Update on drafts status and charter (Chairs)
=C2=A0 = - hash-algs
=C2=A0 - rfc8152bis-algs
=C2=A0 - rfc8152bis-struct
= =C2=A0 - x509
=C2=A0 =C2=A0 + making it standard track document
=C2= =A0 =C2=A0 + From Ben's review: Should we do anything about COSE_Counte= rsignature=C2=A0
=C2=A0 - Counter-sign
=C2=A0 - recharteri= ng
# 3. CBOR Certificates
# 4. AOB

- Matthew and Ivaylo
COSE = WG Chairs
--0000000000002f186b05b5faf9f9-- From nobody Sun Dec 13 14:11:17 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A11A63A0B2D for ; Sun, 13 Dec 2020 14:11:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.002 X-Spam-Level: X-Spam-Status: No, score=0.002 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ackl-io.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0lzcGWmTG3Io for ; Sun, 13 Dec 2020 14:11:12 -0800 (PST) Received: from mail-wr1-x436.google.com (mail-wr1-x436.google.com [IPv6:2a00:1450:4864:20::436]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9B75E3A0B22 for ; Sun, 13 Dec 2020 14:11:11 -0800 (PST) Received: by mail-wr1-x436.google.com with SMTP id 91so14550267wrj.7 for ; Sun, 13 Dec 2020 14:11:11 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ackl-io.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=2mZyvZM3YultN5f2RUzkiVn/S7wqEVEjOSYa1RnDCKU=; b=IpwRxa2NINs5lpV8CvlO8y4OqzkcKlwLz1t1Hn0Iipl7bnJhQprZQrD1MTSK2/gzNi Lk8xk/9AjzPGjsb49gPGl0wDVYiibyWeVnRfGtuDGJ/Ftien0HNffSMMZVTAJNSxKnxT ucZ7mAkZ9rSs4BNKk+L+FYXmGlxlt3mYy/zZ6fsvKuSldEn9VIUijjcewbdxL49NCyjz XjC7TRPXDTU8JF0JJJXl9olsJyyszo6sAhUT2hKN2EA899gnzRw45TmPoibs9PbO29RI Ua2vQck7K0E682BbNR06ZUt/Q6ZX6LKSdlqKqsZor7HYmSlDXM6Q4gnWrQZj37wMrArt HftQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=2mZyvZM3YultN5f2RUzkiVn/S7wqEVEjOSYa1RnDCKU=; b=F0i5cdwBb8WwS0yh0Jrv0dKNEAPZrLyNzJvRQAwSsmIn8b7sYCh8jgpSnU0HhOe4X3 oTOZ34XY0Lh8zPloCpe5vgT7AGAGX9ki9mAC+snirCwJ0U9NZqz9ac/5x+Vp7ODs1P4X Qy2g5quZaLzqZMSKT7+vg9REol0fqPsrMNS7vtznlJ0DVLjyMnocheXLJ2QqtmUafhBU ZmNO2/1ORIxFXTV6/N2enGPm+A6GCaSCeCTVoi1pjb8jXGvQGBG2Z8cuIQ+wuEvEWCnG 0Cah87S4+sQJbksGMdq/bGTgvYOgeLFLnTEs/Xf9hVkUvUutH/2oOg9G9Z3LbY4tIJEq S1CA== X-Gm-Message-State: AOAM532rHM0j58RiMHcVMnGS5xnzBJa1TGjQAVuxWnYv6PNc2RV7EmfW JnjnsSi8Qkf1ZzkGt95SCN4HBGvHpmVQNQidRxw0Gg== X-Google-Smtp-Source: ABdhPJzYEkP71ga8vw6lCqBj5CirNs15GnLivcjl5M7DYD7wVdcTIn7F4YblXUjwPv484RvSBj/dDvwEqTS8ObCzS4I= X-Received: by 2002:a5d:4112:: with SMTP id l18mr25368963wrp.116.1607897469878; Sun, 13 Dec 2020 14:11:09 -0800 (PST) MIME-Version: 1.0 References: <160330309778.31613.17554753154209688241@ietfa.amsl.com> In-Reply-To: <160330309778.31613.17554753154209688241@ietfa.amsl.com> From: Ivaylo Petrov Date: Sun, 13 Dec 2020 23:10:43 +0100 Message-ID: To: Benjamin Kaduk Cc: The IESG , draft-ietf-cose-x509@ietf.org, Cose Chairs Wg , cose Content-Type: multipart/alternative; boundary="000000000000871f1805b65fcd42" Archived-At: Subject: Re: [COSE] Benjamin Kaduk's Yes on draft-ietf-cose-x509-07: (with COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Dec 2020 22:11:15 -0000 --000000000000871f1805b65fcd42 Content-Type: text/plain; charset="UTF-8" Hello Ben, Thank you for your review and apologies for the delay. Please find below my answers. The latest version of the draft is available here https://cose-wg.github.io/X509/draft-ietf-cose-x509.html. There are some technical issues that currently prevent me from uploading it to datatracker, but that should be resolved very soon. Best regards, Ivaylo On Wed, Oct 21, 2020 at 7:58 PM Benjamin Kaduk via Datatracker < noreply@ietf.org> wrote: > Benjamin Kaduk has entered the following ballot position for > draft-ietf-cose-x509-07: Yes > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-cose-x509/ > > > > ---------------------------------------------------------------------- > COMMENT: > ---------------------------------------------------------------------- > > It's still hard to believe we've lost Jim. Thank you for taking up the > mantle to finish this work. > [IP]: Indeed, such a great loss... I hope I will be able to do justice to this work. As Roman noted already, the secdir review had some good points (and > perhaps also some that do not require changes to the text), which > deserves a response. > > [The missing examples in the linked github repo have already been noted a > few times so I have nothing further to say about it.] > > It's interesting that JOSE does not have an 'x5bag' parameter, though I > don't think that there is a need for this document to do anything in that > regard. > > Abstract > > The CBOR Signing And Encrypted Message (COSE) structure uses > references to keys in general. For some algorithms, additional > properties are defined which carry parts of keys as needed. The COSE > > (nit) I'm not sure that "parts of keys" covers all cases; the boundary > between a "key" and various attributes or parameters associated with it > can be fuzzy at times. Perhaps something like "parameters relating to > keys" would be more encompassing? > [IP]: Applied the suggested change. > Section 2 > > required certificate evaluation and processing. It is also > reasonable that a constrained device would have the hash of a > certificate associated with a public key and be configured use a > public key for that thumbprint, but without performing the > certificate evaluation or even having the entire certificate. > > This implies that the constrained device is not doing the required > revocation checking, which probably merits some form of caveat (a > management system that monitors revocation and updates the device if > needed?). This is particularly poingnant given the following paragraphs > admonition that "[c]ertificates [...] MUST still be validated". > [IP]: I have added text to clarify this. You can find it in commit bd066fa . Please let me know if further clarifications could be useful. a chain length of one as well as longer chains. If the application > cannot establish trust in the certificate, that certificate cannot be > used. > > The secdir review already noted some potential issues with the blanket > "cannot be used"; another possible rewording would be "the public key > contained in the certificate cannot be used for cryptographic > operations". > [IP]: For now I put your wording, but could you share what parts of the certificate it might make sense to use in that case. x5chain: This header parameter contains an ordered array of X.509 > certificates. The certificates are to be ordered starting with > the certificate containing the end-entity key followed by the > certificate which signed it and so on. There is no requirement > for the entire chain to be present in the element if there is > reason to believe that the relying party already has, or can > locate the missing certificates. This means that the relying > > Are the missing certificates required to be contiguous and contain the > root? That is, is it okay to leave a gap in the middle of the chain? > [IP]: My reading of the text is that it would not make sense to have a gap in the middle. My understanding is that each certificate in the chain after the first one should sign the one that came before it. [still x5chain] > This header parameter allows for a single X.509 certificate or a > chain of X.509 certificates to be carried in the message. > > It's slightly surprising that the "chain" structure allows for a single > certificate not in an array container; it might be intuitively more > simple to just always use the array encoding for a chain, even a > one-element chain. But I'm sure there's some reason to allow it, too, > just not one that I thought of right away. > [IP]: I can only see this as saving us 1 byte, but probably there are other reasons as well. x5t: This header parameter provides the ability to identify an X.509 > certificate by a hash value. The attribute is an array of two > > I suggest using the word "thumbprint" somewhere to motivate the 't' in > "x5t". > [IP]: Done. Also, we may want to make a pass to check for consistent usage of > "attribute", "parameter", etc. -- I think this is the first time we say > "the attribute is". > [IP]: Apart from `protected attribute bucket` I am not sure if there should be any other usage of attribute or they should all be changed to header parameter. I have already changed some of them and I will think some more for the others. For interoperability, applications which use this header parameter > MUST support the hash algorithm 'SHA-256', but can use other hash > algorithms. > > In light of the following notes, perhaps we should add another sentence > along the lines of "This requirement allows for different > implementations to be configured to use an interoperable algorithm, but > does not preclude the use (by prior agreement) of other algorithms." > [IP]: I like this wording and I added it as you suggested it. x5u: This header parameter provides the ability to identify an X.509 > [...] > As this header parameter implies a trust relationship, the > attribute MUST be in the protected attribute bucket. > > In light of the secdir reviewer's comments, perhaps "a trust > relationship between the party generating the x5u parameter and the > party hosting the referred-to resource" would help? > [IP]: Done. The URI provided MUST provide integrity protection and server > authentication. For example, an HTTP or CoAP GET request to > retrieve a certificate MUST use TLS [RFC8446] or DTLS > [I-D.ietf-tls-dtls13]. If the certificate does not chain to an > existing trust anchor, the certificate MUST NOT be trusted unless > > I think we should probably clarify that it is the "received" or > "retrieved" certificate (as opposed to the certificate used to > authenticate the (D)TLS connection used to dereference the URI). > [IP]: That is a good clarification indeed. Done. > the server is configured as trusted to provide new trust anchors. > In particular, self-signed certificates MUST NOT be trusted > without an out-of-band confirmation. I agree with the secdir reviewer that some rewording/clarification is in > order here. > [IP]: I reformulated it as If the retrieved certificate does not chain to an existing trust anchor, the certificate MUST NOT be trusted unless the server is configured as trusted to provide new trust anchors or if an out-of-band confirmation can be received for trusting the retrieved certificate. Please let me know if you think this is clear enough. > +---------+-------+---------------+---------------------+ > | x5u | TBD2 | uri | URI pointing to an | > | | | | X.509 certificate | > +---------+-------+---------------+---------------------+ > > I agree with Roman that a more explicit statement of where the uri type > is defined (or inline definition) is needed. > [IP]: I added a reference to RFC 3986 and a mention that the CBOR type of this field is text string. The header parameters are used in the following locations: > [...] > > I guess draft-ietf-cose-countersign is on the hook for specifying > anything needed about the X.509-related parameter usage? It looks like > COSE_Countersignature reuses the COSE_Signature sturcture, but I would > not (naively) expect that to also inherit the ability to use these > parameters. COSE_Countersignature0 does not have any place to stow > metadata, so I guess these parameters are not useful at all there. > [IP]: Is my understanding correct that you are wondering if we should do anything about COSE_Countersignature in this document or should we only add some text to draft-ietf-cose-countersign? I think we can discuss this during the interim on 16 Dec 2020. In Table 2, I think all the "AES192KW" and "AES256KW" should be "A192KW" > and "A256KW", respectively. > [IP]: Fixed. > Section 5 > > I think we need to explicitly pull in (by reference) the security > considerations from RFC 3986, arguably with specific call-out to the > "reliability and consistency" portions. > [IP]: I added it. > We might also mention that path validation is an important part of > establishing trust in a certificate and point to RFC 5280. I don't feel > a huge need to also mention the possibility of constructing alternative > chains, though we could do that as well if desired. > [IP]: Done. We should probably also have some pro-forma mention of the strength of > the hash used for a certificate thumbprint being a factor in the > security of the system. > [IP]: Is this related to x5t? My understanding is that the algorithm does not affect the security of the system as it is only used to select a certificate that is already on the system. Even if a different thumbprint is provided, could that lead to some attack? I tried to add a sentence about this. Please let me know if you believe the text needs to be improved or if you meant something else. > Section 6.2 > > I feel like RFC 8152 (or the bis) ought to be present as a normative > reference; you cannot implement these new parameters outside the context > of a broader COSE implementation. > [IP]: I agree. For now I made RFC 8152 as the normative reference as I don't believe it is worth blocking this document due to missref. --000000000000871f1805b65fcd42 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hello Ben,

Thank you for your review and apologies for the delay. Please f= ind below my answers.

The latest version o= f the draft is available here=C2=A0https://cose-wg.github.io/X509/draft-ietf-cose= -x509.html. There are some technical issues that currently prevent me f= rom uploading it to datatracker, but that should be resolved very soon.
<= div style=3D"font-family:Roboto,RobotoDraft,Helvetica,Arial,sans-serif;font= -size:16px">
Best regards,
Ivaylo

On Wed, Oct 21, 2020 at 7:58 PM Benjamin Kaduk via Datatr= acker <noreply@iet= f.org> wrote:
Benjamin Kaduk has entered the following ballot position for
draft-ietf-cose-x509-07: Yes

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/s= tatement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-co= se-x509/



----------------------------------------------------------------------
COMMENT:
----------------------------------------------------------------------

It's still hard to believe we've lost Jim.=C2=A0 Thank you for taki= ng up the
mantle to finish this work.

= [IP]: Indeed, such a great loss... I hope I will be able to do justice to t= his work.

As Roman noted already, the secdir review had some good points (and
perhaps also some that do not require changes to the text), which
deserves a response.

[The missing examples in the linked github repo have already been noted a few times so I have nothing further to say about it.]

It's interesting that JOSE does not have an 'x5bag' parameter, = though I
don't think that there is a need for this document to do anything in th= at
regard.

Abstract

=C2=A0 =C2=A0The CBOR Signing And Encrypted Message (COSE) structure uses =C2=A0 =C2=A0references to keys in general.=C2=A0 For some algorithms, addi= tional
=C2=A0 =C2=A0properties are defined which carry parts of keys as needed.=C2= =A0 The COSE

(nit) I'm not sure that "parts of keys" covers all cases; the= boundary
between a "key" and various attributes or parameters associated w= ith it
can be fuzzy at times.=C2=A0 Perhaps something like "= parameters relating to
keys" would be more encompassing?

=
[IP]: Applied the suggested change.
=C2=A0<= /div>
Section 2

=C2=A0 =C2=A0required certificate evaluation and processing.=C2=A0 It is al= so
=C2=A0 =C2=A0reasonable that a constrained device would have the hash of a<= br> =C2=A0 =C2=A0certificate associated with a public key and be configured use= a
=C2=A0 =C2=A0public key for that thumbprint, but wi= thout performing the
=C2=A0 =C2=A0certificate evaluation or even having the entire certificate.<= br>
This implies that the constrained device is not doing the required
revocation checking, which probably merits some form of caveat (a
management system that monitors revocation and updates the device if
needed?).=C2=A0 This is particularly poingnant given the following paragrap= hs
admonition that "[c]ertificates [...] MUST still be validated".

[IP]: I have added text to cl= arify this. You can find it in commit=C2=A0bd066fa. Please let me know if further clarifications could be usefu= l.

=C2=A0 =C2=A0a chain length of one as well as longer chains.=C2=A0 If the a= pplication
=C2=A0 =C2=A0cannot establish trust in the certificate, that certificate ca= nnot be
=C2=A0 =C2=A0used.

The secdir review already noted some potential issues with the blanket
"cannot be used"; another possible rewording would be "the public key
contained in the certificate cannot be used for cryptographic
operations".

[IP]: For = now I put your wording, but could you share what parts of the certificate i= t might make sense to use in that case.

=C2=A0 =C2=A0x5chain:=C2=A0 This header parameter contains an ordered array= of X.509
=C2=A0 =C2=A0 =C2=A0 certificates.=C2=A0 The certificates are to be ordered= starting with
=C2=A0 =C2=A0 =C2=A0 the certificate containing the end-entity key followed= by the
=C2=A0 =C2=A0 =C2=A0 certificate which signed it and so on.=C2=A0 There is = no requirement
=C2=A0 =C2=A0 =C2=A0 for the entire chain to be present in the element if t= here is
=C2=A0 =C2=A0 =C2=A0 reason to believe that the relying party already has, = or can
=C2=A0 =C2=A0 =C2=A0 locate the missing certificates.=C2=A0 This means that= the relying

Are the missing certificates required to be contiguous and contain the
root?=C2=A0 That is, is it okay to leave a gap in the middle of the chain?<= br>

[IP]: My reading of the text= is that it would not make sense to have a gap in the middle. My understand= ing is that each certificate in the chain after the first one should sign t= he one that came before it.

=C2=A0 =C2=A0[still x5chain]
=C2=A0 =C2=A0 =C2=A0 This header parameter allows for a single X.509 certif= icate or a
=C2=A0 =C2=A0 =C2=A0 chain of X.509 certificates to be carried in the messa= ge.

It's slightly surprising that the "chain" structure allows fo= r a single
certificate not in an array container; it might be intuitively more
simple to just always use the array encoding for a chain, even a
one-element chain.=C2=A0 But I'm sure there's some reason to allow = it, too,
just not one that I thought of right away.

<= div class=3D"gmail_default" style=3D"font-family:verdana,sans-serif;color:r= gb(11,83,148)">[IP]: I can only see this as saving us 1 byte, but probably = there are other reasons as well.

=C2=A0 =C2=A0x5t:=C2=A0 This header parameter provides the ability to ident= ify an X.509
=C2=A0 =C2=A0 =C2=A0 certificate by a hash value.=C2=A0 The attribute is an= array of two

I suggest using the word "thumbprint" somewhere to motivate the &= #39;t' in
"x5t".

[IP]: Done.=

Also, we may want to make a pass to check for consistent usage of
"attribute", "parameter", etc. -- I think this is the f= irst time we say
"the attribute is".

[IP]: Apart from `protected attribute bucket` I am not sure if there shou= ld be any other usage of attribute or they should all be changed to header = parameter. I have already changed some of them and I will think some more f= or the others.

=C2=A0 =C2=A0 =C2=A0 For interoperability, applications which use this head= er parameter
=C2=A0 =C2=A0 =C2=A0 MUST support the hash algorithm 'SHA-256', but= can use other hash
=C2=A0 =C2=A0 =C2=A0 algorithms.

In light of the following notes, perhaps we should add another sentence
along the lines of "This requirement allows fo= r different
implementations to be configured to use an interoperable algorithm, but
does not preclude the use (by prior agreement) of other algorithms."

[IP]: I like this wording and= I added it as you suggested it.

=C2=A0 =C2=A0x5u:=C2=A0 This header parameter provides the ability to ident= ify an X.509
=C2=A0 =C2=A0[...]
=C2=A0 =C2=A0 =C2=A0 As this header parameter impli= es a trust relationship, the
=C2=A0 =C2=A0 =C2=A0 attribute MUST be in the protected attribute bucket.
In light of the secdir reviewer's comments, perhaps "a trust
relationship between the pa= rty generating the x5u parameter and the
party hosting the referred-to resource" would help?

[IP]: Done.

=C2=A0 =C2=A0 =C2=A0 The URI provided MUST provide integrity protection and= server
=C2=A0 =C2=A0 =C2=A0 authentication.=C2=A0 For example, an HTTP or CoAP GET= request to
=C2=A0 =C2=A0 =C2=A0 retrieve a certificate MUST use TLS [RFC8446] or DTLS<= br> =C2=A0 =C2=A0 =C2=A0 [I-D.ietf-tls-dtls13].=C2=A0 If the certificate does n= ot chain to an
=C2=A0 =C2=A0 =C2=A0 existing trust anchor, the certificate MUST NOT be tru= sted unless

I think we should probably clarify that it is the "received" or "retrieved" certificate (as opposed to the certificate used to authenticate the (D)TLS connection used to dereference the URI).

[IP]: That is a good clarificatio= n indeed. Done.
=C2=A0
=C2=A0 =C2=A0 =C2=A0 the server is configured as tr= usted to provide new trust anchors.
=C2=A0 =C2=A0 =C2=A0 In particular, self-signed certificates MUST NOT be tr= usted
=C2=A0 =C2=A0 =C2=A0 without an out-of-band confirmation.
I agree with the secdir reviewer that some rewording/clarification is in order here.

[IP]: I refo= rmulated it as=C2=A0

=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 If the retrieved certificate does not c= hain to an existing trust anchor,=C2=A0
= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 the certificate MUST NOT be trusted unle= ss the server is configured=C2=A0
=C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 as trusted to provide new trust anchors or if a= n out-of-band confirmation=C2=A0
=C2=A0 = =C2=A0 =C2=A0 =C2=A0 =C2=A0 can be received for trusting the retrieved cert= ificate.

Ple= ase let me know if you think this is clear enough.


=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0+---------+-------+---------------+------= ---------------+
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0| x5u=C2=A0 =C2=A0 =C2=A0| TBD2=C2=A0 | u= ri=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0| URI pointing to an=C2=A0 |
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0|=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0|=C2= =A0 =C2=A0 =C2=A0 =C2=A0|=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 = =C2=A0| X.509 certificate=C2=A0 =C2=A0|
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0+---------+-------+---------------+------= ---------------+

I agree with Roman that a more explicit statement of where the uri type
is defined (or inline definition) is needed.
[IP]: I added a reference to RFC 3986 and a mention that the CBOR type= of this field is text string.

=C2=A0 =C2=A0The header parameters are used in the following locations:
=C2=A0 =C2=A0[...]

I guess draft-ietf-cose-countersign is on the hook = for specifying
anything needed about the X.509-related parameter usage?=C2=A0 It looks lik= e
COSE_Countersignature reuses the COSE_Signature stu= rcture, but I would
not (naively) expect that to also inherit the ability to use these
parameters.=C2=A0 COSE_Countersignature0 does not have any place to stow metadata, so I guess these parameters are not useful at all there.

[IP]: Is my understanding correct th= at you are wondering if we should do anything about COSE_Countersignature i= n this document or should we only add some text to draft-ietf-cose-counters= ign? I think we can discuss this during the interim on 16 Dec 2020.=C2=A0

In Table 2, I think all the "AES192KW" an= d "AES256KW" should be "A192KW"= ;
and "A256KW", respectively.

<= div class=3D"gmail_default" style=3D"font-family:verdana,sans-serif;color:r= gb(11,83,148)">[IP]: Fixed.
=C2=A0
Section 5

I think we need to explicitly pull in (by reference) the security
considerations from RFC 3986, arguably with specifi= c call-out to the
"reliability and consistency" portions.

=
[IP]: I added it.
=C2=A0
We might also mention that path validation is an im= portant part of
establishing trust in a certificate and point to RF= C 5280.=C2=A0 I don't feel
a huge need to also mention the possibility of constructing alternative
chains, though we could do that as well if desired.
[IP]: Done.

We should probably also have some pro-forma mention of the strength of
the hash used for a certificate thumbprint being a factor in the
security of the system.

[IP]= : Is this related to x5t? My understanding is that the algorithm does not a= ffect the security of the system as it is only used to select a certificate= that is already on the system. Even if a different=C2=A0thumbprint=C2=A0is= provided, could that lead to some attack? I tried to add a sentence about = this. Please let me know if you believe the text needs to be improved or if= you meant something else.
=C2=A0
Section 6.2

I feel like RFC 8152 (or the bis) ought to be present as a normative
reference; you cannot implement these new parameters outside the context of a broader COSE implementation.

[IP]: I agree. For now I made RFC 8152 as the normative referenc= e as I don't believe it is worth blocking this document due to missref.=

--000000000000871f1805b65fcd42-- From nobody Sun Dec 13 14:13:10 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5B5413A0B37 for ; Sun, 13 Dec 2020 14:13:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.002 X-Spam-Level: X-Spam-Status: No, score=0.002 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ackl-io.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IMVh5hRyYsDR for ; Sun, 13 Dec 2020 14:13:06 -0800 (PST) Received: from mail-wr1-x42f.google.com (mail-wr1-x42f.google.com [IPv6:2a00:1450:4864:20::42f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A170E3A0B35 for ; Sun, 13 Dec 2020 14:13:06 -0800 (PST) Received: by mail-wr1-x42f.google.com with SMTP id y17so14543879wrr.10 for ; Sun, 13 Dec 2020 14:13:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ackl-io.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ciSUerF6R3CBRaLI5Xf2xdp86dHy9NBaFAemwp+dolY=; b=N4guDh7ROZBbea9V9oWCMewrGd5dVHl3Vr9MRpQWSe+Qx+Q6arQeMMHt3e+hYhYt/0 bAWi8o0+zf6jV1mGxk1S0wnv4q/CQcksbYG4X1Z3TdgDF8RdWZr5Yk10uQ23ezUntnpd /WChKRqFE6HPfhDVM4wjpdGO8ijFqjsDfBMlzzscVhpu6grDvqpVRCQueZj6+55dXxnG /I5FzDNNj8ZaAtt9H59WwUmfDzsHZDKRRajuoHqhe6OU/vSW76QJBUESEBXUeW+VJLYO eS/S6XTE8mgu3qfP3Te/+Ox3lEdyRmf9x8LXGeKHU1Cawc5RawJqpQsKlfg7J4MP8mep VTFw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ciSUerF6R3CBRaLI5Xf2xdp86dHy9NBaFAemwp+dolY=; b=LBUVTGxAuahbz5sK3+wDcgWQE1Fq3lzAsl8fIRKl1lRbsUvSbKk/Pz66qK4lkQgYHI MwBIFSuVsVu2qU23bb0/7HqeCd6UTFUhvY8NtBtS77FZHMvSGE1Dmofw9uZwGd68LD0i BIcplOsubQN7Cc+Se/RtQTvnjM5EsjjKbOocrprLtCwtm9x5Yk6enN1TU8P9YGOMj7yX Mk8COBOO6uejCb74T2TOQJDiMY++klP6yP/I0fo2rD2vkkQAujTVcnO/9CfAufb8Eopd MzflD26cDEYPMrGNEk1jUkfJgHJJfFlvB6NWZtJSckH38lmu2BXuVOmSM8YKv9lhpVt4 aUgA== X-Gm-Message-State: AOAM531Z8+gAC2tTG4NURaDPRPOVsUBkeDJ/g6Bp79+EjTv+HjO4kOtk A5/mrHnZpKpnC0gvsynmajq5P3HkCUrKKoi7aNH9hPBbK8w= X-Google-Smtp-Source: ABdhPJxbwiFDPLjS99UW3yrK5SfSgufZRm8IWZG0eWnc0/SckHdf8OmYyLmBDoJ4Lt0oibHyYiD1Il35t+IXYAbcSYw= X-Received: by 2002:adf:92a4:: with SMTP id 33mr25421484wrn.347.1607897584977; Sun, 13 Dec 2020 14:13:04 -0800 (PST) MIME-Version: 1.0 References: <160336909147.3199.13133404901002626604@ietfa.amsl.com> In-Reply-To: <160336909147.3199.13133404901002626604@ietfa.amsl.com> From: Ivaylo Petrov Date: Sun, 13 Dec 2020 23:12:39 +0100 Message-ID: To: Magnus Westerlund , Barry Leiba Cc: The IESG , draft-ietf-cose-x509@ietf.org, Cose Chairs Wg , cose Content-Type: multipart/alternative; boundary="00000000000063618305b65fd444" Archived-At: Subject: Re: [COSE] Magnus Westerlund's Discuss on draft-ietf-cose-x509-07: (with DISCUSS) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Dec 2020 22:13:08 -0000 --00000000000063618305b65fd444 Content-Type: text/plain; charset="UTF-8" Hello Magnus, Thank you for your review and apologies for the delay! I have changed the document status as you requested. The change could be seen in commitdf4c50d . I have some technical difficulties and after they are resolved, I will upload a new version of the draft. After that I will work with Barry Leiba to have the new IETF last call. Best regards, Ivaylo On Thu, Oct 22, 2020 at 2:18 PM Magnus Westerlund via Datatracker < noreply@ietf.org> wrote: > Magnus Westerlund has entered the following ballot position for > draft-ietf-cose-x509-07: Discuss > > When responding, please keep the subject line intact and reply to all > email addresses included in the To and CC lines. (Feel free to cut this > introductory paragraph, however.) > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > for more information about IESG DISCUSS and COMMENT positions. > > > The document, along with other ballot positions, can be found here: > https://datatracker.ietf.org/doc/draft-ietf-cose-x509/ > > > > ---------------------------------------------------------------------- > DISCUSS: > ---------------------------------------------------------------------- > > I think the topic should be fairly easily to resolve one way or another. > However, even after having read the reply to Marin's comment I don't think > this > document is published with the right status. > > - The document defines new CBOR attributes, that is standard track work as > it > comes out as consensus document from a IETF WG. - It does not define or > document crypto algorithm just refer to existing ones. - The charter item > might > have been reasonable as informational if existing attributes could have > been > used. With the choice to define new attributes I think this has entered > standards track. - The status of the document I think will also affect the > value that IANA might assign to these COSE Header Parameters. > > If there are additional considerations I am happy to learn about them. > > Else, I would propose a change of status to proposed standard and redo the > IETF > last call. > > > > > > --00000000000063618305b65fd444 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hello Magnus,

T= hank you for your review and apologies for the delay! I have changed the do= cument status as you=C2=A0requested. The change could be seen in commitdf4c50d=C2=A0. I have some technical difficulti= es and after they are resolved, I will upload a new version of the draft. A= fter that I will work with Barry Leiba to have the new IETF last call.

Best regards,
Ivaylo
<= div dir=3D"ltr" data-smartmail=3D"gmail_signature">
<= /div>


On Thu, Oct 22, 2020 at 2:18 PM Magnus Westerlund v= ia Datatracker <no= reply@ietf.org> wrote:
Magnus Westerlund has entered the following ballot position f= or
draft-ietf-cose-x509-07: Discuss

When responding, please keep the subject line intact and reply to all
email addresses included in the To and CC lines. (Feel free to cut this
introductory paragraph, however.)


Please refer to https://www.ietf.org/iesg/s= tatement/discuss-criteria.html
for more information about IESG DISCUSS and COMMENT positions.


The document, along with other ballot positions, can be found here:
https://datatracker.ietf.org/doc/draft-ietf-co= se-x509/



----------------------------------------------------------------------
DISCUSS:
----------------------------------------------------------------------

I think the topic should be fairly easily to resolve one way or another. However, even after having read the reply to Marin's comment I don'= t think this
document is published with the right status.

- The document defines new CBOR attributes, that is standard track work as = it
comes out as consensus document from a IETF WG. - It does not define or
document crypto algorithm just refer to existing ones. - The charter item m= ight
have been reasonable as informational if existing attributes could have bee= n
used. With the choice to define new attributes I think this has entered
standards track. - The status of the document I think will also affect the<= br> value that IANA might assign to these COSE Header Parameters.

If there are additional considerations I am happy to learn about them.

Else, I would propose a change of status to proposed standard and redo the = IETF
last call.





--00000000000063618305b65fd444-- From nobody Sun Dec 13 14:13:55 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 580FE3A0B44 for ; Sun, 13 Dec 2020 14:13:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.002 X-Spam-Level: X-Spam-Status: No, score=0.002 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ackl-io.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 486TPFicmv1c for ; Sun, 13 Dec 2020 14:13:51 -0800 (PST) Received: from mail-wr1-x42d.google.com (mail-wr1-x42d.google.com [IPv6:2a00:1450:4864:20::42d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A00F33A0B32 for ; Sun, 13 Dec 2020 14:13:51 -0800 (PST) Received: by mail-wr1-x42d.google.com with SMTP id r7so14561848wrc.5 for ; Sun, 13 Dec 2020 14:13:51 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ackl-io.20150623.gappssmtp.com; s=20150623; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=PKNWDMY5pe1AqYY2a4ivMkJPp2qQTSKHaE10SA+yEdY=; b=xup69BJka7tE7VL3L54fAxvIIYVl3RLl4jOfoh1xcARJQlP9hElJWjdxwwps85B520 Naj6zbvRfGh7fMdc45AO9yL3/APfkXijgbVtonBIoD1095iuesP3G0y2OJjyqGbuXiZ3 kY+tzWg279BWOfq7aanuu4dM8llZTuYTr2vVkhHCJJawQpoFEaMglzPtdGTRPpc2xGaK nuG3sXro/DB3DYupANrd48nw3rowR7TnYOmen+B1EMBrgWJLx9fkGY3W+0rCDBsJx7xJ CR9ctXhQuVBsTvjToaHU566A3lMT55mRe3+Pc9EPhrGMxKNDj/emah5DWgMpxkPET17Y IU/Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=PKNWDMY5pe1AqYY2a4ivMkJPp2qQTSKHaE10SA+yEdY=; b=sXBRZ7AT1/kYPf+qPsXDupDF1I6YKfeHIbSdOoTm7ZGKI21x7LxlpnB27GKHBXcD2Z 0ddJR/MrlsAafLzxZN8CsbaaEViRjTnuKbHmwVbZWxxx3eM+hcSDN8e4MnilmgYxcQe9 QwB9O1uX8SJ/5IU+IR1Bpg+w5s9m1pNUTizfuR+mQNJ0fbxJUePRuTPPt6va3Jgkg50s KFqKaiS2uSOe0tAgnkezvovTQKquejgs1iCs546BCbH0vOOcz4TW+cqjaEqiaMVMS5/H EaeVMl1SFsfW5DalcNHWgHcC3f6KGOErCqfqEx5cXB7jdrhGtRvG/X64jHO9pgVUuWSL jWBQ== X-Gm-Message-State: AOAM531bf4kiy+Ja6cC6LGOLdW+CIBg7wz29mIOLSxTu9y2pXhisJEVk +mZwTByZplfd6qnnT/SfYibCUh+wL5ML9pFHh1mUog== X-Google-Smtp-Source: ABdhPJxwqh8U0DlN7ExMILUNADo7DQARA5coAkkrWjvsOSBAbkbC/em3SOSGnd8Vewyr440eEi2M/1wdcbhj+DOagbY= X-Received: by 2002:a5d:4112:: with SMTP id l18mr25376777wrp.116.1607897629982; Sun, 13 Dec 2020 14:13:49 -0800 (PST) MIME-Version: 1.0 References: <160336909147.3199.13133404901002626604@ietfa.amsl.com> <0CF2598E-61CD-4011-9E97-1B28C7DB4065@island-resort.com> In-Reply-To: From: Ivaylo Petrov Date: Sun, 13 Dec 2020 23:13:24 +0100 Message-ID: To: Laurence Lundblade Cc: Magnus Westerlund , cose , Cose Chairs Wg , draft-ietf-cose-x509@ietf.org, The IESG Content-Type: multipart/alternative; boundary="000000000000120cbb05b65fd779" Archived-At: Subject: Re: [COSE] Magnus Westerlund's Discuss on draft-ietf-cose-x509-07: (with DISCUSS) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 13 Dec 2020 22:13:53 -0000 --000000000000120cbb05b65fd779 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Laurence, That sounds great! - Ivaylo On Fri, Oct 23, 2020 at 9:11 PM Laurence Lundblade wrote: > We had a good discussion on key / cert identification for EAT / RATS at > our virtual interim meeting today. There seems to be consensus support fo= r > use of cose-x509. > > LL > > > On Oct 22, 2020, at 11:17 AM, Laurence Lundblade > wrote: > > I would like to see it as standards track. > > I would like EAT / RATS to make normative reference to it. Some forms of > Attestation use Endorsements to convey a signature verification key to th= e > Verifier and some Endorsements are in the form of an X.509 certificate. > > I will present some of this at the RATS virtual interim tomorrow > . > Slides are here > . > This is why I=E2=80=99ve been so interested in this lately. > > Also, it seems pretty important for COSE to be usable with the all the > X.509 infrastructure out there. > > LL > > > On Oct 22, 2020, at 5:18 AM, Magnus Westerlund via Datatracker < > noreply@ietf.org> wrote: > > ... > I think the topic should be fairly easily to resolve one way or another. > However, even after having read the reply to Marin's comment I don't thin= k > this > document is published with the right status. > > - The document defines new CBOR attributes, that is standard track work a= s > it > comes out as consensus document from a IETF WG. - It does not define or > document crypto algorithm just refer to existing ones. - The charter item > might > have been reasonable as informational if existing attributes could have > been > used. With the choice to define new attributes I think this has entered > standards track. - The status of the document I think will also affect th= e > value that IANA might assign to these COSE Header Parameters. > > If there are additional considerations I am happy to learn about them. > > Else, I would propose a change of status to proposed standard and redo th= e > IETF > last call. > > > > > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose > > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose > > > --000000000000120cbb05b65fd779 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Laurence,

T= hat sounds=C2=A0great!

- Ivaylo<= /font>
<= /div>


On Fri, Oct 23, 2020 at 9:11 PM L= aurence Lundblade <lgl@island-resort.com> wrote:
We had a good discussion on key / cert= identification for EAT / RATS at our virtual interim meeting today. There = seems to be consensus support for use of cose-x509.

LL


On Oct 22, 2020,= at 11:17 AM, Laurence Lundblade <lgl@island-resort.com> wrote:

I would like to see it as stan= dards track.

I would like EAT / RATS to make normative reference to it. Some forms of A= ttestation use Endorsements to convey a signature verification key to the V= erifier and some Endorsements are in the form of an X.509 certificate.

I will present s= ome of this at the=C2=A0RATS virtual interim tomor= row. Slides are=C2=A0here. This is why I=E2=80=99ve been so interested in this l= ately.

Also, it se= ems pretty important for COSE to be usable with the all the X.509 infrastru= cture out there.

L= L


On Oct 22, 2020, at 5:18 AM, Magnus Westerlund via = Datatracker <norep= ly@ietf.org> wrote:

...
I think the topic shou= ld be fairly easily to resolve one way or another.
However, even after h= aving read the reply to Marin's comment I don't think this
docum= ent is published with the right status.

- The document defines new C= BOR attributes, that is standard track work as it
comes out as consensus= document from a IETF WG. - It does not define or
document crypto algori= thm just refer to existing ones. - The charter item might
have been reas= onable as informational if existing attributes could have been
used. Wit= h the choice to define new attributes I think this has entered
standards= track. - The status of the document I think will also affect the
value = that IANA might assign to these COSE Header Parameters.

If there are= additional considerations I am happy to learn about them.

Else, I w= ould propose a change of status to proposed standard and redo the IETF
l= ast call.





__________________________________________= _____
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose
=

_______________________________________________COSE maili= ng list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/co= se

--000000000000120cbb05b65fd779-- From nobody Mon Dec 14 05:19:05 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 66ED33A08EB for ; Mon, 14 Dec 2020 05:19:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.201 X-Spam-Level: X-Spam-Status: No, score=-0.201 tagged_above=-999 required=5 tests=[DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m6Y0y_QQCUNt for ; Mon, 14 Dec 2020 05:19:01 -0800 (PST) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-eopbgr140045.outbound.protection.outlook.com [40.107.14.45]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 676423A08D6 for ; Mon, 14 Dec 2020 05:19:01 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=CFkrv4ouj3+q7rO9YhyqZld/aiQYqCkqoItuL0eqcmwz7jihi/oUQA3AyrIXenT8WxmyCCgBYqmKKiT69l54cRpIz8yr207RXnO4/wftPjDkawHs8CleOJg4QtvQdNj+axBIJ+Wycj+YIhItffa8I1/qXbyErFlOE9P93tjAGt1kifKIlEzwmPyrGCkDr6rh9BObau324Ry/ylwtYk/WV1Z/TShI5sBsaHr3IJbbfG/34Vw7c6Jc1HJAErPjZ/W9To927Y5+LxEbDgooWWgTNFXO/N82SEAHembWr86kbUnVEAEAGXHJQamBgAkZ/t33f/DlMA1FSboaIluJfvBcBg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=/phncvadWT1Dm6S5y+6uJ+uryLoVcCXLU1FKjQts+GQ=; b=LBfy4ArJUVYnu0g1ijSVYkroWsJ7z4z4nhWGhguwPyRBa4jHRv3AioVMRlSVZcHJQDrbWyIt9yGaYhxjpjJxU3W756Vu12Qh6byq5DsV8BmoKKQQGatNl6/7F5lPkYK73KI1MP0GUQn5PL9DMryGCguRBlC5nsAgs+AgmMnGRp70tu98hknE1cbSN4VxYGJbFwM4XVmfHnqG5MJgk/LFgCMI7CS04IXdzCmkO1AJIt0EBvDv/EruYRdjTGISAruCgsPiOYFiX9hmJrSlNc4TyeQ6WbkswL8pTqQQbcnErK8ukPx1/s51lTQM5TSIDbCNgbLr4WaqBvQ5i+hATU56dw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=/phncvadWT1Dm6S5y+6uJ+uryLoVcCXLU1FKjQts+GQ=; b=c9wgbILWULDcIi0gtjn8lAxPFp4ycCcMw8t+du/wtJQDZF5sDVtvFl2SvB5RJPGMFCFRetiPV2hypKiTWrcGIkfKibbN0UIEzUXpDcX+7YUtRozWF6Losp8PlsmhkYiu1O2dhP6Amt1ALKg2hkxh2LzGusb0xD6Iu7WxZHnfsXA= Received: from HE1PR0702MB3674.eurprd07.prod.outlook.com (2603:10a6:7:82::14) by HE1PR0701MB2298.eurprd07.prod.outlook.com (2603:10a6:3:6d::7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3676.13; Mon, 14 Dec 2020 13:18:49 +0000 Received: from HE1PR0702MB3674.eurprd07.prod.outlook.com ([fe80::fd09:b8f4:2698:e86]) by HE1PR0702MB3674.eurprd07.prod.outlook.com ([fe80::fd09:b8f4:2698:e86%7]) with mapi id 15.20.3676.015; Mon, 14 Dec 2020 13:18:49 +0000 From: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= To: Laurence Lundblade , John Mattsson , Stefan Hristozov CC: cose Thread-Topic: [COSE] bstr wrapping for native signed (was Re: New Version Notification for draft-mattsson-cose-cbor-cert-compress-05.txt) Thread-Index: AQHWzOSgb5aiLsUhZUqTeFxike7Wk6n2lXey Date: Mon, 14 Dec 2020 13:18:49 +0000 Message-ID: References: <160689580542.14210.17819515187695761515@ietfa.amsl.com> <4A0FDEA0-1264-418D-801C-6C710A3BE6AD@ericsson.com>, <25A34E20-C4A4-4F15-B457-73CB1752A67F@island-resort.com> In-Reply-To: <25A34E20-C4A4-4F15-B457-73CB1752A67F@island-resort.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [83.251.145.232] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 02f0c818-3b60-4cbc-4bff-08d8a032cb54 x-ms-traffictypediagnostic: HE1PR0701MB2298: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: FQfGzuyKrwtgwkXelyIuJP/UqYvdkvexFo4rh/KcTfrmjszcbM1mDtLDv8aaHeiZQkddfm7/tcB+K/ZO64h7iB3DzgV2OuBgjOWamLTedUwoWMko7/PPmY38FaZwajqba4S+RcAcFhkPOz97tNHtn7K3akdUZXlJxchIEG/FikE0i/jjmHvB4GVVYEON4UltuCe8pl9st/LIZhsPpk5+iv3NlMr8hq7GQ7nd0WQWEVrfxwFFfa7eyQVzPCv0Ve+Es/NUWdb+YAQ+KzqBV0SuqSB1CYUiHtntCxD/Hsdh+xccRn3nZbOg4EspsidGFh8kro9ks5nfCxmYrCmfqHw6gGKL8z+tXkMElhzAyTHVkrABv0y5v1PEFUeNTYKmOCSWLbSAky8CdINIhCF8qazWU90A2J35zlsUruyv2jfsYWoaQH7mT9U2FesXj1p1Uv9E8ETzRG2KG55GGS+SZR880A== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR0702MB3674.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(39860400002)(396003)(376002)(136003)(366004)(346002)(66476007)(64756008)(166002)(966005)(76116006)(85202003)(66946007)(66446008)(66556008)(15650500001)(478600001)(8936002)(83380400001)(316002)(26005)(110136005)(53546011)(33656002)(6506007)(85182001)(2906002)(71200400001)(9686003)(52536014)(4326008)(186003)(8676002)(7696005)(86362001)(5660300002)(55016002)(66574015); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?d1o4TzNTdytTM2JzWjlMaVlDR2U0ODZkbWR5aUVKTEdKYkIrb0dtS0Rjckpk?= =?utf-8?B?WTVLVTdUN0p2WTF0Rno4cThvYThwUGE1YVFmVjh0WDRjTCt0Y1ZzY0N3Y0hW?= =?utf-8?B?QmMrTm02L01uVWowZzhMR0xEK28xMDBTeDJTTmg4ejlsSUYwZHJnRlNXWHNv?= =?utf-8?B?UE93dmtWVmM0ZTdoL2RRRHR0WGM3OGExQlJJdnU4QzErcUtlUy8rZkZnUjFF?= =?utf-8?B?QlZOR2RrMzgrL1h1R1dIQ1A5djVQNVNFSEF5YjhuOGo5eTYrbWRtOWRJQXha?= =?utf-8?B?WVFzWm44aXZNeVlHZCs0YW5INlNzbzJPOUFrTlZOQnU3ZTJycXByM1JGTkhK?= =?utf-8?B?L0Jxd2Z0MjEzTWhkcXl6R1poK1kzdURXS2wraFNTSnNvMEVBK0dOWVc3Rmta?= =?utf-8?B?U2x6MUFCalFxZExKSjJMc0xrUlhzbENibUMrTU5MSllwQkhqUWo1U0llUDNY?= =?utf-8?B?Q05RcVhxelVXdHhTUy9NQTBIN1lSYWMyKzUva0Z1Z2tPM05nWWNzNkZrUGZx?= =?utf-8?B?anhnOUczWlVNVkZnd3M0Ymh3dlpGdXJLWVh4SXNOVzdtUnArVzZZNUpyMW5p?= =?utf-8?B?R2w0dmkzYUw1c0hhUkU3bFpNL2pMTDRYb2ZmL0l0dmJ3eDlKbGFVVmRkUGs2?= =?utf-8?B?cjJKYXZvbkczVjZjc21rMEd5WTYyN1Z3YTlHR2pxdzdxaTNHclUwQ0hnSFM5?= =?utf-8?B?ZWI4YU8rS3BMMmVnbnNNWFFvWTA5TWV0UVIwY1p5dUg0ZDd0VU1QK1dxY0Fu?= =?utf-8?B?MmYyOVhSOXZ4S3dGbXpNdXpuZGgwTlpYTWI0RGJUUHE4ekgzdDVUUzJxWTFs?= =?utf-8?B?OFZVaXdGLzVzTlBSS3ZNR2pZblczeUVUenhLdlpPMkg5aG5IbUx5T3k5ZWlp?= =?utf-8?B?OFR4dllFZWs5QkZENkZPUzZMV2dmOUVKZ2FDS0s3RXM5VHE4NDNTK1RyaEVh?= =?utf-8?B?dmZYMDdMWm4rcktmMTdwYkJFUVQzNTdmSWRYRElRT3NHUHkyUzE4L0FFUklt?= =?utf-8?B?Mi9lcHZUa2htWkdXYy9oVy8wUFhWeTAwTnp3UXlwY0R1WmVveUYwcmtFNlJO?= =?utf-8?B?bmNkQ29ZMHZCWVJCa3YyR2loNWZ6VkdIU0MvdW1Ja0RYdVBpMmZVYlQ5eTV2?= =?utf-8?B?SVB3VGQxdGdEVXZXck92aGh5dmZvdjFFVkplZGUzcWFUcTcrYmdoMWFYWWxp?= =?utf-8?B?dEExOXJGYTdsTU4xQ3BOcnpzZDhiN0t0WEpYYkFKZWMreEdPOCs1V1I4UjFR?= =?utf-8?B?TmlMZUlrWmlDeXQ4RFRqb0t5UUZGYlFvMXdWMXpycHU5a3o2Y0lqOXhGYVZU?= =?utf-8?B?VVFHWENQdzJUVklsYzRBNU12SWs2a01OR0tPMjJ3VjBGMXZoeDkyd0h3THU1?= =?utf-8?B?cHNSTTNVTE15VUE9PQ==?= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_HE1PR0702MB36741C30718AE04AC07B8D4CF4C70HE1PR0702MB3674_" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: HE1PR0702MB3674.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 02f0c818-3b60-4cbc-4bff-08d8a032cb54 X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Dec 2020 13:18:49.2243 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: jMJsbhxCir3gybCm7RybvALzOK22A0J4xABc1qFuKKYLaVgCjungsaYvJtE/YLpe7JOcvylSi8Nb+DMKcHUnxWld9Cet0sUU4tm+x4iN6z0= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0701MB2298 Archived-At: Subject: Re: [COSE] bstr wrapping for native signed (was Re: New Version Notification for draft-mattsson-cose-cbor-cert-compress-05.txt) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Dec 2020 13:19:03 -0000 --_000_HE1PR0702MB36741C30718AE04AC07B8D4CF4C70HE1PR0702MB3674_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgTGF1cmVuY2UsDQoNCknigJltIGF3YXJlIG9mIHR3byBpbXBsZW1lbnRhdGlvbiBhY3Rpdml0 aWVzOiBieSBKb2huICh0eXBlIDEpIGFuZCBieSBTdGVmYW4gKHR5cGUgMCkuDQoNCkfDtnJhbg0K DQoNCk9uIDIwMjAtMTItMDcsIDIzOjAyLCAiQ09TRSIgPGNvc2UtYm91bmNlc0BpZXRmLm9yZz4g d3JvdGU6DQpJIGRvbuKAmXQgdGhpbmsgaXQgd29ya3MgdmVyeSB3ZWxsIGF0IGFsbCB0byBkaXJl Y3RseSBzaWduIGVuY29kZWQgQ0JPUi4gSXQgc2hvdWxkIGJlIHdyYXBwZWQgaW4gYSBieXRlIHN0 cmluZy4NCg0KSW4gcGFydGljdWxhciBpc3N1ZXJTaWduYXR1cmVWYWx1ZSBzaG91bGQgcHJvYmFi bHkgYmUgdGhlIHNpZ25hdHVyZSBvdmVyIGEgYnl0ZSBzdHJpbmcgdGhhdCBjb250YWlucyBhbiBl bmNvZGVkIFRCU0NlcnRpZmljYXRlLiBUaGlzIGlzIHdoYXQgQ09TRSBkb2VzLg0KDQpUaGUgbWFp biByZWFzb24gZm9yIHRoaXMgaXMgdG8gYWxsb3cgaW1wbGVtZW50YXRpb24gd2l0aCBvZmYtdGhl LXNoZWxmIENCT1IgZW5jb2RlcnMgYW5kIGRlY29kZXJzLiBGcm9tIHNvbWUgdGhhdCBJ4oCZdmUg bG9va2VkIGF0IGFuZCBvbmUgSeKAmXZlIHdyaXR0ZW4gbXlzZWxmLCBDQk9SIGRlY29kZXJzIGRv buKAmXQgYWxsb3cgYWNjZXNzIGEgc3ViLXBhcnQgb2YgdGhlIGVuY29kZWQgQ0JPUiBzbyBpdCBj YW4gYmUgaW5wdXQgaW50byB0aGUgaGFzaC4gVGhlcmUgd291bGQgYmUgbm8gd2F5IHRvIGdldCBq dXN0IHRoZSBlbmNvZGVkIGJ5dGVzIG9mIHRoZSBUQlNDZXJ0aWZpY2F0ZSBvdXQgb2YgdGhlIENC T1IgZGVjb2RlciB1bmxlc3MgeW91IHdlbnQgaW4gYW5kIGhhY2tlZCBpdHMgc291cmNlIGNvZGUg aW4gYSBzcGVjaWFsIHdheS4NCg0KSGFzIGFueW9uZSBpbXBsZW1lbnRlZCB2ZXJpZmljYXRpb24g b2YgTmF0aXZlbHkgU2lnbmVkIENCT1IgQ2VydGlmaWNhdGVzPyBXaGF0IENCT1IgZGVjb2RlciB3 YXMgdXNlZD8gTWF5YmUgSeKAmW0gd3JvbmcgYWJvdXQgdGhpcz8NCg0KSSByZWFsaXplIGJ5dGUg c3RyaW5nIHdyYXBwaW5nIFRCU0NlcnRpZmljYXRlIG1pZ2h0IGNhdXNlIHVwaGVhdmFsIGluIHRo ZSBvdmVyYWxsIGRlc2lnbiBiZWNhdXNlIGNib3JDZXJ0aWZpY2F0ZVR5cGUgd291bGQgYmUgaW5z aWRlIHRoZSBieXRlIHN0cmluZyB3cmFwcGluZy4NCg0KQW5vdGhlciBhcHByb2FjaCBtaWdodCBi ZSB0byBqdXN0IHVzZSBDT1NFIGZvciBOYXRpdmVseSBTaWduZWQgQ0JPUiBDZXJ0aWZpY2F0ZXMu IFRoZSBDT1NFIHBheWxvYWQgd291bGQgYmUgYSBUQlNDZXJ0aWZpY2F0ZS4gQ09TRSB3b3VsZCB0 YWtlIGNhcmUgb2YgdGhlIGJ5dGUgc3RyaW5nIHdyYXBwaW5nIGlzc3Vlcy4gVGhpcyB3b3VsZCBp bmNyZWFzZSB0aGUgb24tdGhlLXdpcmUgc2l6ZSBvZiB0aGUgY2VydGlmaWNhdGUgYnkgYWJvdXQg MTAgYnl0ZXMsIGJ1dCBtaWdodCBkZWNyZWFzZSBjb2RlIHNpemUgb2YgdGhlIGltcGxlbWVudGF0 aW9uIGJ5IHJlIHVzZSBvZiBhIENPU0UgaW1wbGVtZW50YXRpb24uDQoNCkxMDQoNCg0KPiBPbiBE ZWMgMiwgMjAyMCwgYXQgMTI6NDkgQU0sIEpvaG4gTWF0dHNzb24gPGpvaG4ubWF0dHNzb249NDBl cmljc3Nvbi5jb21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOmpvaG4ubWF0dHNzb249NDBlcmljc3Nv bi5jb21AZG1hcmMuaWV0Zi5vcmc+PiB3cm90ZToNCj4NCj4gVGhhbmtzIGFnYWluIGZvciBhbGwg dGhlIGdvb2QgY29tbWVudCBhbmQgZGlzY3Vzc2lvbnMgb24gdGhlIGxpc3QhDQo+DQo+IFdlIGhh dmUgc3VibWl0dGVkIC0wNS4gQ2hhbmdlcyBhcmU6DQo+DQo+IC0gQWRkZWQgcmVmZXJlbmNlIHRv IElFRUUgODAyLjFBUiBEZXZJRCBhbmQgbWFkZSBvcHRpbWl6YXRpb24gZm9yIElFRUUgODAyLjFB UiBEZXZJRC4NCj4gLSBSZXBocmFzZWQgImNvbXByZXNzIiBpbiB0aGUgd2hvbGUgZG9jdW1lbnQu IFdlIHdpbGwgY2hhbmdlIHRoZSBmaWxlIG5hbWUgbGF0ZXIuDQo+IC0gTWFkZSBpdCBtb3JlIGNs ZWFyIHRoYXQgWC41MDkgdmVyc2lvbiBpbiBpbmNsdWRlZCBpbiB0aGUgQ0JPUiBjZXJ0aWZpY2F0 ZSB0eXBlLg0KPiAtIE9taXR0ZWQgJ3NpZ25hdHVyZScgaW5zdGVhZCBvZiAnc2luZ2F0dXJlQWxn b3JpdGhtJy4gTm93IHRoZSBhbGdvcml0aG0gY29tZXMganVzdCBiZWZvcmUgdGhlIHNpZ25hdHVy ZSB2YWx1ZS4NCj4gLSBBZGRlZCBzdXBwb3J0IG9mIGVtYWlsQWRkcmVzcyAvIElBNVN0cmluZyBp biBpc3N1ZXIgYW5kIHN1YmplY3QuIFRoaXMgd2FzIGVhc3kuDQo+IC0gY2hhbmdlZCBzbyB1dGY4 U3RyaW5ncyBoYXZlIGEgcG9zaXRpdmUgc2lnbi4NCj4gLSBDaGFuZ2UgdGltZSB0byB1bndyYXBw ZWQgQ0JPUiBlcG9jaCB0aW1lICh+dGltZSkuIFRoaXMgc2F2ZXMgMSBieXRlIGZvciB0aW1lID4g MjA1MA0KPiAtIEFkZGVkIHRoYXQgdGhlIHZhbHVlICI5OTk5MTIzMTIzNTk1OVoiIChubyBleHBp cmF0aW9uIGRhdGUpIGlzIGVuY29kZWQgYXMgQ0JPUiBudWxsLiBUaGlzIGlzIHF1aXRlIGNvbW1v bmx5IHVzZWQgaW4gSW9UIGNlcnRpZmljYXRlcy4gVGhpcyBzYXZlcyA0IGJ5dGVzIHdoZW4gdXNl ZC4NCj4gLSBVc2UgQ0RETCBmb3IgQ0JPUiBPSUQgYXMgZGVmaW5lZCBpbiBkcmFmdC1pZXRmLWNi b3ItdGFncy1vaWQNCj4gLSBBZGRlZCBDQk9SIGVuY29kaW5nIGZvciB1dGhvcml0eUtleUlkZW50 aWZpZXIgYW5kIHN1YmplY3RLZXlJZGVudGlmaWVyIHdoaWNoIGFyZSBoZWF2aWx5IHVzZWQgYnkg SUVFRSA4MDIuMUFSIERldklEIChhdCBsZWFzdCBvbmUgb2YgdGhlbSBhcmUgbWFuZGF0ZWQgZGVw ZW5kaW5nIG9uIHR5cGUgb2YgY2VydCkuDQo+IC0gQWRkZWQgb3B0aW1pemF0aW9uIGZvciB0aGUg aGFyZHdhcmVNb2R1bGVOYW1lIHR5cGUgb2Ygb3RoZXJOYW1lLCB3aGljaCBpcyBtYW5kYXRvcnkg dG8gdXNlIGluIElFRUUgODAyLjFBUiBEZXZJRA0KPiAtIEFkZGVkIENCT1IgZW5jb2RpbmcgZm9y IGNSTERpc3RyaWJ1dGlvblBvaW50cyBhbmQgYXV0aG9yaXR5SW5mb0FjY2Vzcywgd2hpY2ggYXJl IGJvdGggdXNlZCBpbiBiYXNpY2FsbHkgYWxsIEhUVFBTIGNlcnRpZmljYXRlcyBvbiB0aGUgd2Vi Lg0KPiAtIEFkZGVkIHN1cHBvcnQgZm9yIHJlZ2lzdGVyZWRJRC4gVGhpcyB3YXMgdHJpdmlhbCBh bmQgcmVnaXN0ZXJlZElEIGlzIHVzZWQgZS5nLiBieSB0aGUgR1NNQSBlVUlDQyBQS0kgQ2VydGlm aWNhdGUgUG9saWN5IChTR1AgMTQpLg0KPiAtIEFkZGVkIGNvbnNpZGVyYXRpb25zIGZvciBleHBl cnQgcmV2aWV3ZXJzLg0KPiAtIE1vdmVkIFNIQS0xIHNpZ25hdHVyZSBhbGdvcml0aG1zIHRvIG5l Z2F0aXZlIDIgYnl0ZSBlbmNvZGluZ3M6IC0yNTYgYW5kIC0yNTUNCj4gLSBBZGRlZCBhIHB1Ymxp YyBwcml2YXRlIEVDRFNBIGtleSBwYWlyIHR1cm5pbmcgdGhlIGV4YW1wbGUgY2VydGlmaWNhdGVz IGludG8gdGVzdCB2ZWN0b3JzLiBBbiBpbXBsZW1lbnRhdGlvbiBjYW4gbm93IGNyZWF0ZSBhbmQg dmVyaWZ5IHRoZSBleGFtcGxlIFJGQyA3OTI1IGNlcnRpZmljYXRlcy4NCj4NCj4gQ2hlZXJzLA0K PiBKb2huDQo+DQo+IO+7vy0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+IEZyb206ICJpbnRl cm5ldC1kcmFmdHNAaWV0Zi5vcmc8bWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZz4iIDxp bnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc8bWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZz4+ DQo+IERhdGU6IFdlZG5lc2RheSwgMiBEZWNlbWJlciAyMDIwIGF0IDA4OjU2DQo+IFRvOiBHw7Zy YW4gU2VsYW5kZXIgPGdvcmFuLnNlbGFuZGVyQGVyaWNzc29uLmNvbTxtYWlsdG86Z29yYW4uc2Vs YW5kZXJAZXJpY3Nzb24uY29tPj4sIEfDtnJhbiBTZWxhbmRlciA8Z29yYW4uc2VsYW5kZXJAZXJp Y3Nzb24uY29tPG1haWx0bzpnb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5jb20+PiwgTWFydGluIEZ1 cnVoZWQgPG1hcnRpbi5mdXJ1aGVkQG5leHVzZ3JvdXAuY29tPG1haWx0bzptYXJ0aW4uZnVydWhl ZEBuZXh1c2dyb3VwLmNvbT4+LCBTaGFoaWQgUmF6YSA8c2hhaGlkLnJhemFAcmkuc2U8bWFpbHRv OnNoYWhpZC5yYXphQHJpLnNlPj4sIEpvaG4gTWF0dHNzb24gPGpvaG4ubWF0dHNzb25AZXJpY3Nz b24uY29tPG1haWx0bzpqb2huLm1hdHRzc29uQGVyaWNzc29uLmNvbT4+LCBKb2VsIEhvZ2x1bmQg PGpvZWwuaG9nbHVuZEByaS5zZTxtYWlsdG86am9lbC5ob2dsdW5kQHJpLnNlPj4sIEpvaG4gTWF0 dHNzb24gPGpvaG4ubWF0dHNzb25AZXJpY3Nzb24uY29tPG1haWx0bzpqb2huLm1hdHRzc29uQGVy aWNzc29uLmNvbT4+LCBKb2VsIEjDtmdsdW5kIDxqb2VsLmhvZ2x1bmRAcmkuc2U8bWFpbHRvOmpv ZWwuaG9nbHVuZEByaS5zZT4+DQo+IFN1YmplY3Q6IE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBm b3IgZHJhZnQtbWF0dHNzb24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3MtMDUudHh0DQo+DQo+DQo+ IEEgbmV3IHZlcnNpb24gb2YgSS1ELCBkcmFmdC1tYXR0c3Nvbi1jb3NlLWNib3ItY2VydC1jb21w cmVzcy0wNS50eHQNCj4gaGFzIGJlZW4gc3VjY2Vzc2Z1bGx5IHN1Ym1pdHRlZCBieSA9P3V0Zi04 P3E/Sm9obl9QcmV1PUMzPTlGX01hdHRzc29uPz0gYW5kIHBvc3RlZCB0byB0aGUNCj4gSUVURiBy ZXBvc2l0b3J5Lg0KPg0KPiBOYW1lOiAgICAgICAgIGRyYWZ0LW1hdHRzc29uLWNvc2UtY2Jvci1j ZXJ0LWNvbXByZXNzDQo+IFJldmlzaW9uOiAgICAgMDUNCj4gVGl0bGU6ICAgICAgICAgICAgICAg IENCT1IgRW5jb2Rpbmcgb2YgWC41MDkgQ2VydGlmaWNhdGVzIChDQk9SIENlcnRpZmljYXRlcykN Cj4gRG9jdW1lbnQgZGF0ZTogICAgICAgIDIwMjAtMTItMDENCj4gR3JvdXA6ICAgICAgICAgICAg ICAgIEluZGl2aWR1YWwgU3VibWlzc2lvbg0KPiBQYWdlczogICAgICAgICAgICAgICAgMjkNCj4g VVJMOiAgICAgICAgICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL2FyY2hpdmUvaWQvZHJhZnQtbWF0 dHNzb24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3MtMDUudHh0DQo+IFN0YXR1czogICAgICAgICBo dHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1tYXR0c3Nvbi1jb3NlLWNib3It Y2VydC1jb21wcmVzcy8NCj4gSHRtbGl6ZWQ6ICAgICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0 Zi5vcmcvZG9jL2h0bWwvZHJhZnQtbWF0dHNzb24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3MNCj4g SHRtbGl6ZWQ6ICAgICAgIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1tYXR0c3Nv bi1jb3NlLWNib3ItY2VydC1jb21wcmVzcy0wNQ0KPiBEaWZmOiAgICAgICAgICAgaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LW1hdHRzc29uLWNvc2UtY2Jvci1jZXJ0LWNv bXByZXNzLTA1DQo+DQo+IEFic3RyYWN0Og0KPiAgIFRoaXMgZG9jdW1lbnQgc3BlY2lmaWVzIGEg Q0JPUiBlbmNvZGluZyBvZiBYLjUwOSBjZXJ0aWZpY2F0ZXMuICBUaGUNCj4gICByZXN1bHRpbmcg Y2VydGlmaWNhdGVzIGFyZSBjYWxsZWQgQ0JPUiBDZXJ0aWZpY2F0ZXMuICBUaGUgQ0JPUg0KPiAg IGVuY29kaW5nIHN1cHBvcnRzIGEgbGFyZ2Ugc3Vic2V0IG9mIFJGQyA1MjgwLCB3aGlsZSBhdCB0 aGUgc2FtZSB0aW1lDQo+ICAgc2lnbmlmaWNhbnRseSByZWR1Y2VzIHRoZSBzaXplIG9mIGNlcnRp ZmljYXRlcyBjb21wYXRpYmxlIHdpdGggUkZDDQo+ICAgNzkyNSBhbmQgSUVFRSA4MDIuMUFSIChE ZXZJRHMpLiAgV2hlbiB1c2VkIHRvIHJlLWVuY29kZSBERVIgZW5jb2RlZA0KPiAgIFguNTA5IGNl cnRpZmljYXRlcywgdGhlIENCT1IgZW5jb2RpbmcgY2FuIGluIG1hbnkgY2FzZXMgcmVkdWNlIHRo ZQ0KPiAgIHNpemUgb2YgUkZDIDc5MjUgcHJvZmlsZWQgY2VydGlmaWNhdGVzIHdpdGggb3ZlciA1 MCUuICBUaGUgQ0JPUg0KPiAgIGVuY29kaW5nIGNhbiBhbHNvIGJlIHVzZWQgZW5jb2RlICJuYXRp dmVseSBzaWduZWQiIENCT1IgY2VydGlmaWNhdGVzLA0KPiAgIHdoaWNoIGRvZXMgbm90IHJlcXVp cmUgcmUtZW5jb2RpbmcgZm9yIHRoZSBzaWduYXR1cmUgdG8gYmUgdmVyaWZpZWQuDQo+ICAgVGhl IGRvY3VtZW50IGFsc28gc3BlY2lmaWVzIENPU0UgaGVhZGVycyBhcyB3ZWxsIGFzIGEgVExTIGNl cnRpZmljYXRlDQo+ICAgdHlwZSBmb3IgQ0JPUiBjZXJ0aWZpY2F0ZXMuDQo+DQo+DQo+DQo+DQo+ IFBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWludXRlcyBmcm9tIHRo ZSB0aW1lIG9mIHN1Ym1pc3Npb24NCj4gdW50aWwgdGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRp ZmYgYXJlIGF2YWlsYWJsZSBhdCB0b29scy5pZXRmLm9yZy4NCj4NCj4gVGhlIElFVEYgU2VjcmV0 YXJpYXQNCj4NCj4NCj4NCj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX18NCj4gQ09TRSBtYWlsaW5nIGxpc3QNCj4gQ09TRUBpZXRmLm9yZzxtYWlsdG86Q09T RUBpZXRmLm9yZz4NCj4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3Nl DQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpDT1NF IG1haWxpbmcgbGlzdA0KQ09TRUBpZXRmLm9yZzxtYWlsdG86Q09TRUBpZXRmLm9yZz4NCmh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY29zZQ0KDQoNCg== --_000_HE1PR0702MB36741C30718AE04AC07B8D4CF4C70HE1PR0702MB3674_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIj4NCjxoZWFkPg0KPG1ldGEgaHR0cC1lcXVp dj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiPg0KPG1l dGEgbmFtZT0iR2VuZXJhdG9yIiBjb250ZW50PSJNaWNyb3NvZnQgV29yZCAxNSAoZmlsdGVyZWQg bWVkaXVtKSI+DQo8c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2 IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToy IDE1IDUgMiAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGNtOw0KCWZvbnQtc2l6 ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBz cGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsN Cgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnNwYW4uRW1haWxTdHlsZTE4DQoJe21zby1z dHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNl cmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5 cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjEN Cgl7c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7DQoJbWFyZ2luOjcyLjBwdCA3Mi4wcHQgNzIuMHB0IDcy LjBwdDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5 bGU+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJlbi1TRSIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBs ZSIgc3R5bGU9IndvcmQtd3JhcDpicmVhay13b3JkIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9u MSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1m YXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5IaSBMYXVyZW5jZSw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJl YXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1 YWdlOkVOLVVTIj5J4oCZbSBhd2FyZSBvZiB0d28gaW1wbGVtZW50YXRpb24gYWN0aXZpdGllczog YnkgSm9obiAodHlwZSAxKSBhbmQgYnkgU3RlZmFuICh0eXBlIDApLjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNv LWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3Qt bGFuZ3VhZ2U6RU4tVVMiPkfDtnJhbjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6 RU4tVVMiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIGxhbmc9IkVOLVVTIiBzdHlsZT0ibXNvLWZhcmVhc3QtbGFuZ3VhZ2U6RU4tVVMiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6MGNtO21hcmdpbi1yaWdodDowY207bWFyZ2luLWJvdHRvbToxMi4w cHQ7bWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCk9uIDIwMjAtMTItMDcsIDIzOjAyLCAmcXVvdDtDT1NF JnF1b3Q7ICZsdDtjb3NlLWJvdW5jZXNAaWV0Zi5vcmcmZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9w Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PkkgZG9u4oCZdCB0aGluayBpdCB3b3JrcyB2ZXJ5IHdlbGwgYXQgYWxsIHRvIGRpcmVjdGx5IHNp Z24gZW5jb2RlZCBDQk9SLiBJdCBzaG91bGQgYmUgd3JhcHBlZCBpbiBhIGJ5dGUgc3RyaW5nLjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5JbiBwYXJ0 aWN1bGFyIGlzc3VlclNpZ25hdHVyZVZhbHVlIHNob3VsZCBwcm9iYWJseSBiZSB0aGUgc2lnbmF0 dXJlIG92ZXIgYSBieXRlIHN0cmluZyB0aGF0IGNvbnRhaW5zIGFuIGVuY29kZWQgVEJTQ2VydGlm aWNhdGUuIFRoaXMgaXMgd2hhdCBDT1NFIGRvZXMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpw PiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPlRoZSBtYWluIHJlYXNvbiBmb3IgdGhpcyBpcyB0byBh bGxvdyBpbXBsZW1lbnRhdGlvbiB3aXRoIG9mZi10aGUtc2hlbGYgQ0JPUiBlbmNvZGVycyBhbmQg ZGVjb2RlcnMuIEZyb20gc29tZSB0aGF0IEnigJl2ZSBsb29rZWQgYXQgYW5kIG9uZSBJ4oCZdmUg d3JpdHRlbiBteXNlbGYsIENCT1IgZGVjb2RlcnMgZG9u4oCZdCBhbGxvdyBhY2Nlc3MgYSBzdWIt cGFydCBvZiB0aGUNCiBlbmNvZGVkIENCT1Igc28gaXQgY2FuIGJlIGlucHV0IGludG8gdGhlIGhh c2guIFRoZXJlIHdvdWxkIGJlIG5vIHdheSB0byBnZXQganVzdCB0aGUgZW5jb2RlZCBieXRlcyBv ZiB0aGUgVEJTQ2VydGlmaWNhdGUgb3V0IG9mIHRoZSBDQk9SIGRlY29kZXIgdW5sZXNzIHlvdSB3 ZW50IGluIGFuZCBoYWNrZWQgaXRzIHNvdXJjZSBjb2RlIGluIGEgc3BlY2lhbCB3YXkuPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPkhhcyBhbnlvbmUg aW1wbGVtZW50ZWQgdmVyaWZpY2F0aW9uIG9mIE5hdGl2ZWx5IFNpZ25lZCBDQk9SIENlcnRpZmlj YXRlcz8gV2hhdCBDQk9SIGRlY29kZXIgd2FzIHVzZWQ/IE1heWJlIEnigJltIHdyb25nIGFib3V0 IHRoaXM/PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PkkgcmVhbGl6ZSBieXRlIHN0cmluZyB3cmFwcGluZyBUQlNDZXJ0aWZpY2F0ZSBtaWdodCBjYXVz ZSB1cGhlYXZhbCBpbiB0aGUgb3ZlcmFsbCBkZXNpZ24gYmVjYXVzZSBjYm9yQ2VydGlmaWNhdGVU eXBlIHdvdWxkIGJlIGluc2lkZSB0aGUgYnl0ZSBzdHJpbmcgd3JhcHBpbmcuPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPkFub3RoZXIgYXBwcm9hY2gg bWlnaHQgYmUgdG8ganVzdCB1c2UgQ09TRSBmb3IgTmF0aXZlbHkgU2lnbmVkIENCT1IgQ2VydGlm aWNhdGVzLiBUaGUgQ09TRSBwYXlsb2FkIHdvdWxkIGJlIGEgVEJTQ2VydGlmaWNhdGUuIENPU0Ug d291bGQgdGFrZSBjYXJlIG9mIHRoZSBieXRlIHN0cmluZyB3cmFwcGluZyBpc3N1ZXMuIFRoaXMg d291bGQgaW5jcmVhc2UgdGhlIG9uLXRoZS13aXJlDQogc2l6ZSBvZiB0aGUgY2VydGlmaWNhdGUg YnkgYWJvdXQgMTAgYnl0ZXMsIGJ1dCBtaWdodCBkZWNyZWFzZSBjb2RlIHNpemUgb2YgdGhlIGlt cGxlbWVudGF0aW9uIGJ5IHJlIHVzZSBvZiBhIENPU0UgaW1wbGVtZW50YXRpb24uPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MzYuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPkxMPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+Jmd0OyBPbiBEZWMgMiwgMjAyMCwgYXQgMTI6NDkgQU0sIEpvaG4gTWF0dHNz b24gJmx0OzxhIGhyZWY9Im1haWx0bzpqb2huLm1hdHRzc29uPTQwZXJpY3Nzb24uY29tQGRtYXJj LmlldGYub3JnIj5qb2huLm1hdHRzc29uPTQwZXJpY3Nzb24uY29tQGRtYXJjLmlldGYub3JnPC9h PiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IDxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+Jmd0OyBUaGFua3MgYWdhaW4gZm9yIGFsbCB0aGUgZ29vZCBjb21tZW50IGFuZCBkaXNj dXNzaW9ucyBvbiB0aGUgbGlzdCE8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MzYuMHB0Ij4mZ3Q7IFdlIGhhdmUgc3VibWl0dGVkIC0wNS4gQ2hhbmdlcyBhcmU6PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyAtIEFk ZGVkIHJlZmVyZW5jZSB0byBJRUVFIDgwMi4xQVIgRGV2SUQgYW5kIG1hZGUgb3B0aW1pemF0aW9u IGZvciBJRUVFIDgwMi4xQVIgRGV2SUQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IC0gUmVw aHJhc2VkICZxdW90O2NvbXByZXNzJnF1b3Q7IGluIHRoZSB3aG9sZSBkb2N1bWVudC4gV2Ugd2ls bCBjaGFuZ2UgdGhlIGZpbGUgbmFtZSBsYXRlci48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsg LSBNYWRlIGl0IG1vcmUgY2xlYXIgdGhhdCBYLjUwOSB2ZXJzaW9uIGluIGluY2x1ZGVkIGluIHRo ZSBDQk9SIGNlcnRpZmljYXRlIHR5cGUuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IC0gT21p dHRlZCAnc2lnbmF0dXJlJyBpbnN0ZWFkIG9mICdzaW5nYXR1cmVBbGdvcml0aG0nLiBOb3cgdGhl IGFsZ29yaXRobSBjb21lcyBqdXN0IGJlZm9yZSB0aGUgc2lnbmF0dXJlIHZhbHVlLjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+Jmd0OyAtIEFkZGVkIHN1cHBvcnQgb2YgZW1haWxBZGRyZXNzIC8gSUE1 U3RyaW5nIGluIGlzc3VlciBhbmQgc3ViamVjdC4gVGhpcyB3YXMgZWFzeS48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPiZndDsgLSBjaGFuZ2VkIHNvIHV0ZjhTdHJpbmdzIGhhdmUgYSBwb3NpdGl2ZSBz aWduLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyAtIENoYW5nZSB0aW1lIHRvIHVud3JhcHBl ZCBDQk9SIGVwb2NoIHRpbWUgKH50aW1lKS4gVGhpcyBzYXZlcyAxIGJ5dGUgZm9yIHRpbWUgJmd0 OyAyMDUwPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IC0gQWRkZWQgdGhhdCB0aGUgdmFsdWUg JnF1b3Q7OTk5OTEyMzEyMzU5NTlaJnF1b3Q7IChubyBleHBpcmF0aW9uIGRhdGUpIGlzIGVuY29k ZWQgYXMgQ0JPUiBudWxsLiBUaGlzIGlzIHF1aXRlIGNvbW1vbmx5IHVzZWQgaW4gSW9UIGNlcnRp ZmljYXRlcy4gVGhpcyBzYXZlcyA0IGJ5dGVzIHdoZW4gdXNlZC48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPiZndDsgLSBVc2UgQ0RETCBmb3IgQ0JPUiBPSUQgYXMgZGVmaW5lZCBpbiBkcmFmdC1pZXRm LWNib3ItdGFncy1vaWQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgLSBBZGRlZCBDQk9SIGVu Y29kaW5nIGZvciB1dGhvcml0eUtleUlkZW50aWZpZXIgYW5kIHN1YmplY3RLZXlJZGVudGlmaWVy IHdoaWNoIGFyZSBoZWF2aWx5IHVzZWQgYnkgSUVFRSA4MDIuMUFSIERldklEIChhdCBsZWFzdCBv bmUgb2YgdGhlbSBhcmUgbWFuZGF0ZWQgZGVwZW5kaW5nIG9uIHR5cGUgb2YgY2VydCkuPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IC0gQWRkZWQgb3B0aW1pemF0aW9uIGZvciB0aGUgaGFyZHdh cmVNb2R1bGVOYW1lIHR5cGUgb2Ygb3RoZXJOYW1lLCB3aGljaCBpcyBtYW5kYXRvcnkgdG8gdXNl IGluIElFRUUgODAyLjFBUiBEZXZJRDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyAtIEFkZGVk IENCT1IgZW5jb2RpbmcgZm9yIGNSTERpc3RyaWJ1dGlvblBvaW50cyBhbmQgYXV0aG9yaXR5SW5m b0FjY2Vzcywgd2hpY2ggYXJlIGJvdGggdXNlZCBpbiBiYXNpY2FsbHkgYWxsIEhUVFBTIGNlcnRp ZmljYXRlcyBvbiB0aGUgd2ViLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyAtIEFkZGVkIHN1 cHBvcnQgZm9yIHJlZ2lzdGVyZWRJRC4gVGhpcyB3YXMgdHJpdmlhbCBhbmQgcmVnaXN0ZXJlZElE IGlzIHVzZWQgZS5nLiBieSB0aGUgR1NNQSBlVUlDQyBQS0kgQ2VydGlmaWNhdGUgUG9saWN5IChT R1AgMTQpLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyAtIEFkZGVkIGNvbnNpZGVyYXRpb25z IGZvciBleHBlcnQgcmV2aWV3ZXJzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyAtIE1vdmVk IFNIQS0xIHNpZ25hdHVyZSBhbGdvcml0aG1zIHRvIG5lZ2F0aXZlIDIgYnl0ZSBlbmNvZGluZ3M6 IC0yNTYgYW5kIC0yNTU8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgLSBBZGRlZCBhIHB1Ymxp YyBwcml2YXRlIEVDRFNBIGtleSBwYWlyIHR1cm5pbmcgdGhlIGV4YW1wbGUgY2VydGlmaWNhdGVz IGludG8gdGVzdCB2ZWN0b3JzLiBBbiBpbXBsZW1lbnRhdGlvbiBjYW4gbm93IGNyZWF0ZSBhbmQg dmVyaWZ5IHRoZSBleGFtcGxlIFJGQyA3OTI1IGNlcnRpZmljYXRlcy48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQiPiZndDsgPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IENoZWVycyw8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDozNi4wcHQiPiZndDsgSm9objxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyA8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDozNi4wcHQiPiZndDsg77u/LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS08bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDozNi4wcHQiPiZndDsgRnJvbTogJnF1b3Q7PGEgaHJlZj0ibWFpbHRvOmludGVybmV0 LWRyYWZ0c0BpZXRmLm9yZyI+aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnPC9hPiZxdW90OyAmbHQ7 PGEgaHJlZj0ibWFpbHRvOmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZyI+aW50ZXJuZXQtZHJhZnRz QGlldGYub3JnPC9hPiZndDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgRGF0ZTogV2VkbmVz ZGF5LCAyIERlY2VtYmVyIDIwMjAgYXQgMDg6NTY8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsg VG86IEfDtnJhbiBTZWxhbmRlciAmbHQ7PGEgaHJlZj0ibWFpbHRvOmdvcmFuLnNlbGFuZGVyQGVy aWNzc29uLmNvbSI+Z29yYW4uc2VsYW5kZXJAZXJpY3Nzb24uY29tPC9hPiZndDssIEfDtnJhbiBT ZWxhbmRlciAmbHQ7PGEgaHJlZj0ibWFpbHRvOmdvcmFuLnNlbGFuZGVyQGVyaWNzc29uLmNvbSI+ Z29yYW4uc2VsYW5kZXJAZXJpY3Nzb24uY29tPC9hPiZndDssIE1hcnRpbiBGdXJ1aGVkDQogJmx0 OzxhIGhyZWY9Im1haWx0bzptYXJ0aW4uZnVydWhlZEBuZXh1c2dyb3VwLmNvbSI+bWFydGluLmZ1 cnVoZWRAbmV4dXNncm91cC5jb208L2E+Jmd0OywgU2hhaGlkIFJhemEgJmx0OzxhIGhyZWY9Im1h aWx0bzpzaGFoaWQucmF6YUByaS5zZSI+c2hhaGlkLnJhemFAcmkuc2U8L2E+Jmd0OywgSm9obiBN YXR0c3NvbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmpvaG4ubWF0dHNzb25AZXJpY3Nzb24uY29tIj5q b2huLm1hdHRzc29uQGVyaWNzc29uLmNvbTwvYT4mZ3Q7LCBKb2VsIEhvZ2x1bmQNCiAmbHQ7PGEg aHJlZj0ibWFpbHRvOmpvZWwuaG9nbHVuZEByaS5zZSI+am9lbC5ob2dsdW5kQHJpLnNlPC9hPiZn dDssIEpvaG4gTWF0dHNzb24gJmx0OzxhIGhyZWY9Im1haWx0bzpqb2huLm1hdHRzc29uQGVyaWNz c29uLmNvbSI+am9obi5tYXR0c3NvbkBlcmljc3Nvbi5jb208L2E+Jmd0OywgSm9lbCBIw7ZnbHVu ZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmpvZWwuaG9nbHVuZEByaS5zZSI+am9lbC5ob2dsdW5kQHJp LnNlPC9hPiZndDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgU3ViamVjdDogTmV3IFZlcnNp b24gTm90aWZpY2F0aW9uIGZvciBkcmFmdC1tYXR0c3Nvbi1jb3NlLWNib3ItY2VydC1jb21wcmVz cy0wNS50eHQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0 Ij4mZ3Q7IDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyBBIG5ldyB2ZXJzaW9uIG9mIEktRCwg ZHJhZnQtbWF0dHNzb24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3MtMDUudHh0PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij4mZ3Q7IGhhcyBiZWVuIHN1Y2Nlc3NmdWxseSBzdWJtaXR0ZWQgYnkgPT91dGYt OD9xP0pvaG5fUHJldT1DMz05Rl9NYXR0c3Nvbj89IGFuZCBwb3N0ZWQgdG8gdGhlPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MzYuMHB0Ij4mZ3Q7IElFVEYgcmVwb3NpdG9yeS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PiZndDsgPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IE5hbWU6Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGRyYWZ0LW1hdHRzc29uLWNvc2UtY2Jvci1j ZXJ0LWNvbXByZXNzPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IFJldmlzaW9uOiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyAwNTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyBUaXRsZTombmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtDQk9SIEVuY29kaW5nIG9mIFguNTA5 IENlcnRpZmljYXRlcyAoQ0JPUiBDZXJ0aWZpY2F0ZXMpPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4m Z3Q7IERvY3VtZW50IGRhdGU6Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7MjAyMC0xMi0wMTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyBHcm91cDombmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtJbmRpdmlkdWFsIFN1Ym1pc3Npb248 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgUGFnZXM6Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Mjk8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgVVJMOiZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOzxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL2FyY2hpdmUvaWQvZHJhZnQtbWF0 dHNzb24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3MtMDUudHh0Ij5odHRwczovL3d3dy5pZXRmLm9y Zy9hcmNoaXZlL2lkL2RyYWZ0LW1hdHRzc29uLWNvc2UtY2Jvci1jZXJ0LWNvbXByZXNzLTA1LnR4 dDwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgU3RhdHVzOiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8YSBocmVmPSJodHRwczovL2RhdGF0cmFj a2VyLmlldGYub3JnL2RvYy9kcmFmdC1tYXR0c3Nvbi1jb3NlLWNib3ItY2VydC1jb21wcmVzcy8i Pg0KaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtbWF0dHNzb24tY29zZS1j Ym9yLWNlcnQtY29tcHJlc3MvPC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyBIdG1saXpl ZDombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPGEgaHJlZj0iaHR0cHM6Ly9k YXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC1tYXR0c3Nvbi1jb3NlLWNib3ItY2Vy dC1jb21wcmVzcyI+DQpodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9odG1sL2RyYWZ0 LW1hdHRzc29uLWNvc2UtY2Jvci1jZXJ0LWNvbXByZXNzPC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+Jmd0OyBIdG1saXplZDombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPGEg aHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LW1hdHRzc29uLWNvc2UtY2Jv ci1jZXJ0LWNvbXByZXNzLTA1Ij4NCmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1t YXR0c3Nvbi1jb3NlLWNib3ItY2VydC1jb21wcmVzcy0wNTwvYT48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPiZndDsgRGlmZjombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91 cmwyPWRyYWZ0LW1hdHRzc29uLWNvc2UtY2Jvci1jZXJ0LWNvbXByZXNzLTA1Ij4NCmh0dHBzOi8v d3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1tYXR0c3Nvbi1jb3NlLWNib3ItY2VydC1j b21wcmVzcy0wNTwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MzYuMHB0Ij4mZ3Q7IEFic3RyYWN0OjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyZuYnNwOyZu YnNwOyBUaGlzIGRvY3VtZW50IHNwZWNpZmllcyBhIENCT1IgZW5jb2Rpbmcgb2YgWC41MDkgY2Vy dGlmaWNhdGVzLiZuYnNwOyZuYnNwO1RoZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyZuYnNw OyZuYnNwOyByZXN1bHRpbmcgY2VydGlmaWNhdGVzIGFyZSBjYWxsZWQgQ0JPUiBDZXJ0aWZpY2F0 ZXMuJm5ic3A7Jm5ic3A7VGhlIENCT1I8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsmbmJzcDsm bmJzcDsgZW5jb2Rpbmcgc3VwcG9ydHMgYSBsYXJnZSBzdWJzZXQgb2YgUkZDIDUyODAsIHdoaWxl IGF0IHRoZSBzYW1lIHRpbWU8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsmbmJzcDsmbmJzcDsg c2lnbmlmaWNhbnRseSByZWR1Y2VzIHRoZSBzaXplIG9mIGNlcnRpZmljYXRlcyBjb21wYXRpYmxl IHdpdGggUkZDPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IDc5MjUgYW5k IElFRUUgODAyLjFBUiAoRGV2SURzKS4mbmJzcDsmbmJzcDtXaGVuIHVzZWQgdG8gcmUtZW5jb2Rl IERFUiBlbmNvZGVkPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IFguNTA5 IGNlcnRpZmljYXRlcywgdGhlIENCT1IgZW5jb2RpbmcgY2FuIGluIG1hbnkgY2FzZXMgcmVkdWNl IHRoZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyZuYnNwOyZuYnNwOyBzaXplIG9mIFJGQyA3 OTI1IHByb2ZpbGVkIGNlcnRpZmljYXRlcyB3aXRoIG92ZXIgNTAlLiZuYnNwOyZuYnNwO1RoZSBD Qk9SPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IGVuY29kaW5nIGNhbiBh bHNvIGJlIHVzZWQgZW5jb2RlICZxdW90O25hdGl2ZWx5IHNpZ25lZCZxdW90OyBDQk9SIGNlcnRp ZmljYXRlcyw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsmbmJzcDsmbmJzcDsgd2hpY2ggZG9l cyBub3QgcmVxdWlyZSByZS1lbmNvZGluZyBmb3IgdGhlIHNpZ25hdHVyZSB0byBiZSB2ZXJpZmll ZC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsmbmJzcDsmbmJzcDsgVGhlIGRvY3VtZW50IGFs c28gc3BlY2lmaWVzIENPU0UgaGVhZGVycyBhcyB3ZWxsIGFzIGEgVExTIGNlcnRpZmljYXRlPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IHR5cGUgZm9yIENCT1IgY2VydGlm aWNhdGVzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyA8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PiZndDsgPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ Jmd0OyA8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgUGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkg dGFrZSBhIGNvdXBsZSBvZiBtaW51dGVzIGZyb20gdGhlIHRpbWUgb2Ygc3VibWlzc2lvbjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyB1bnRpbCB0aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlm ZiBhcmUgYXZhaWxhYmxlIGF0IHRvb2xzLmlldGYub3JnLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ Jmd0OyA8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgVGhlIElFVEYgU2VjcmV0YXJpYXQ8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDozNi4wcHQiPiZndDsgPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IDxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyA8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQiPiZndDsgQ09TRSBtYWlsaW5nIGxpc3Q8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsg PGEgaHJlZj0ibWFpbHRvOkNPU0VAaWV0Zi5vcmciPg0KQ09TRUBpZXRmLm9yZzwvYT48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDozNi4wcHQiPiZndDsgPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9jb3NlIj4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8v Y29zZTwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDozNi4wcHQiPkNPU0UgbWFpbGluZyBsaXN0PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48 YSBocmVmPSJtYWlsdG86Q09TRUBpZXRmLm9yZyI+Q09TRUBpZXRmLm9yZzwvYT48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDozNi4wcHQiPjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vY29zZSI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlPC9hPjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0bWw+DQo= --_000_HE1PR0702MB36741C30718AE04AC07B8D4CF4C70HE1PR0702MB3674_-- From nobody Mon Dec 14 05:51:12 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 04F4D3A0ACC for ; Mon, 14 Dec 2020 05:51:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.006 X-Spam-Level: X-Spam-Status: No, score=0.006 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fraunhofer.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JreFHYVJuYHB for ; Mon, 14 Dec 2020 05:51:06 -0800 (PST) Received: from mail-edgeDD24.fraunhofer.de (mail-edgeDD24.fraunhofer.de [192.102.167.24]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D1ECF3A0AD4 for ; Mon, 14 Dec 2020 05:51:00 -0800 (PST) IronPort-PHdr: =?us-ascii?q?9a23=3Aa5AnZx8lY5gefv9uRHGN82YQeigqvan1NQcJ65?= =?us-ascii?q?0hzqhDabmn44+7ZxKN6fBkllSPXIjH5bRDkeWF+6zjWGlV55GHvThCdZFXTB?= =?us-ascii?q?YKhI0QmBBoG8+KD0D3bZuIJyw3FchPThlpqne8N0UGFMP3fVaUo3Cu43gVAB?= =?us-ascii?q?qsfQZwL/7+T4jVicn/3uuu+prVNgNPgjfYA/tyIRy6oB+XuNMRhN5rK708wV?= =?us-ascii?q?3HuHJVfeRRy25yY16ezBs=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2GhAABkpYde/xwBYJlmGQEBAQEBAQE?= =?us-ascii?q?BAQEBAQEBAQEBEQEBAQEBAQEBAQEBgXuBJS8kLAVsWB08hBuDRQOFOYgJmB6?= =?us-ascii?q?CUgNFDwoBAQEBAQEBAQEGAQEYAQwIAgQBAYN/RQIXgjAkOBMCEAEBBgEBAQE?= =?us-ascii?q?BBQQCAmmFVgyGRQEBAQECAQEBEBEdAQEpAwkCAQQHBAIBCBEDAQIBIAMEAwI?= =?us-ascii?q?CAiULFAkIAgQBDQUigwWBfk0DDh8CDqQmAoE5iGJ1gTIfgmABAQWBLwEDAg5?= =?us-ascii?q?BgzkYggwJCQGBLowxgVw+gRE2glo+gmcBAQIBARiBYAkNEYJUgl6OE4JwhgM?= =?us-ascii?q?kmWwDBAOBRneHb482HYJMgQSHNIQxjEuPMod+gSWSegIEAgQFAg4BAQWBaSO?= =?us-ascii?q?BV3EuIYJpCUcYDVaNRwkCARcVgzszgjGCMIVBdAIBgSaOKQEB?= X-IPAS-Result: =?us-ascii?q?A2GhAABkpYde/xwBYJlmGQEBAQEBAQEBAQEBAQEBAQEBE?= =?us-ascii?q?QEBAQEBAQEBAQEBgXuBJS8kLAVsWB08hBuDRQOFOYgJmB6CUgNFDwoBAQEBA?= =?us-ascii?q?QEBAQEGAQEYAQwIAgQBAYN/RQIXgjAkOBMCEAEBBgEBAQEBBQQCAmmFVgyGR?= =?us-ascii?q?QEBAQECAQEBEBEdAQEpAwkCAQQHBAIBCBEDAQIBIAMEAwICAiULFAkIAgQBD?= =?us-ascii?q?QUigwWBfk0DDh8CDqQmAoE5iGJ1gTIfgmABAQWBLwEDAg5BgzkYggwJCQGBL?= =?us-ascii?q?owxgVw+gRE2glo+gmcBAQIBARiBYAkNEYJUgl6OE4JwhgMkmWwDBAOBRneHb?= =?us-ascii?q?482HYJMgQSHNIQxjEuPMod+gSWSegIEAgQFAg4BAQWBaSOBV3EuIYJpCUcYD?= =?us-ascii?q?VaNRwkCARcVgzszgjGCMIVBdAIBgSaOKQEB?= X-URL-LookUp-ScanningError: 1 X-IronPort-AV: E=Sophos; i="5.72,341,1580770800"; d="scan'208,217"; a="36322499" Received: from mail-mtaka28.fraunhofer.de ([153.96.1.28]) by mail-edgeDD24.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 14 Dec 2020 14:50:57 +0100 IronPort-PHdr: =?us-ascii?q?9a23=3AKBlDVRbCcFtACDrSCyKQsjH/LSx94ef9IxIV55?= =?us-ascii?q?w7irlHbqWk+dH4MVfC4el21QSXD4ne4uhPzevbr66mXnYPst6Ns3EHJZpLUR?= =?us-ascii?q?JNycAbhBcpD8PND0rnZOXrYCo3EIUnNhdl8ni3PFITFJP4YFvf8XG35CQZXB?= =?us-ascii?q?TyKQQzIf76Scbeis2t3LW0/JveKwxDmDu6Z+Z0KxO7yGeZtsQfjYZ4bKgrzR?= =?us-ascii?q?6cq3pTdu8Qy3lhOFSTmBjx/IG88c1u?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0CHAQDrbNdf/z6wYZliGwEBAQEBAQE?= =?us-ascii?q?BBQEBARIBAQEDAwEBAUeBSIEjLyMuB3VaXoQ+g0gDhTmIGgOPC4l/glMDVAs?= =?us-ascii?q?BAwEBAQEBBwEBGAEMCAIEAQGEBkQCF4FpAiY4EwIQAQEFAQEBAgEGBHGFYQy?= =?us-ascii?q?FcgEBAQMBAQEQER0BARQVAwkCAQQHBAIBCBEDAQIBIAMEAwICAiULBw0JCAI?= =?us-ascii?q?EAQ0FIoMFgX5XAw4fAg6gJQKBPIhpdoEyH4JlAQEFgTMBAwIOQYMRGIIQCQk?= =?us-ascii?q?BgS6CdYN5iDY+gRE2gmI+gl0BAQIBARWBXQkNEYJZgl+CRgEBSRYEJxwOAgk?= =?us-ascii?q?KDjkWJkQlKS4Ij0mDIYcqKJ05AwQDgWOBEYkikiYigyaBLoh4hSiPSJQDiRi?= =?us-ascii?q?BdJEhHSCEPAIEAgQFAg4BAQWBbSOBV3EuIYJpCUcXAg1WjUsJAgEXFIM6M4I?= =?us-ascii?q?xgjCFREMxAgE0AgYBCQEBAwl8iXIBAQ?= X-IronPort-AV: E=Sophos; i="5.78,419,1599516000"; d="scan'208,217"; a="42028227" Received: from 153-97-176-62.vm.c.fraunhofer.de (HELO XCH-HYBRID-01.ads.fraunhofer.de) ([153.97.176.62]) by mail-mtaKA28.fraunhofer.de with ESMTP; 14 Dec 2020 14:50:54 +0100 Received: from XCH-HYBRID-01.ads.fraunhofer.de (10.225.8.57) by XCH-HYBRID-01.ads.fraunhofer.de (10.225.8.57) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.721.2; Mon, 14 Dec 2020 14:50:50 +0100 Received: from EUR05-DB8-obe.outbound.protection.outlook.com (10.225.8.41) by XCH-HYBRID-01.ads.fraunhofer.de (10.225.8.57) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.721.2 via Frontend Transport; Mon, 14 Dec 2020 14:50:49 +0100 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=lF/chmcAlSea4F2O8QMFGnZpRHgr0pYDWwrI4kf4FYyNUIvYGnIa1QsrzpFBhU2jYlVbVL/2bngiF/ot102KzXZo5yjBN7twXdoMK4FubB1XlEH+/U4z01SQ3v+aJVxJwbqTUOqpjClzZhsy87WmsmeWs5yclP3Z2WVybTs3/99BBnOJoF0sR1/Rn9YS/J5BA722bpVt8tDuGkDceuamGAY+mWwavddI85Dq5gRTUyY0S7jNd0EAt345gXYtygbjPaFDFftSLXEW19TJ6snApLQrOIKfFvZ3GxWJQ4gZV8GdVy7j/kjEuDoCDu3MWhumf6xVWQ7VR+7HW3nKCTfr9w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=WCpQ3FuBKZkgro9a5MLHm28eSlhLtblQGyjTDpkGw/A=; b=Mp4JiZ3Sv/isr6W39AfSvQlJGeUOhcb0Ejol+S0lEjKmYGH+F4PKP8Ge0zAwy5ZMSdmek7Slp+kinfR0+8mX0DUUzMVnpTQRbaj2PSsTC7wjn/3Guf703kvwT0Necbh0G/DV02Pz8KT8XYrHExXNdG4W+Lc7LQcRvxIvDFkA3zsYdIpu6r4ltD27qfsjwejLzOqVeEDFKKy9JKlyFuZTyuRiolihXQsdYI6aJ9lXs3J417p0U58a3kG+aXWEfB7eQROEEbFu1y4EVMdcsvvxZQi5XnfkkhOM0ar+RUr5vT/l/U45PjOZgNVot+flqOOURriJjNHiJffqt+XYRF7igQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=aisec.fraunhofer.de; dmarc=pass action=none header.from=aisec.fraunhofer.de; dkim=pass header.d=aisec.fraunhofer.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fraunhofer.onmicrosoft.com; s=selector2-fraunhofer-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=WCpQ3FuBKZkgro9a5MLHm28eSlhLtblQGyjTDpkGw/A=; b=Efgy2AMv/1Irr1rb6M4XVf/t3esOdCXN7SyvN8e4NMK4cVZyVG8Nq2zSJOUqI4NaDyN/cPijLpXbsUbSMXfFHYCRS2Lk/WQZod+h1NwRJBSGZG8KnDHNRLhQ85fMJaWGf7ZvYJwz2W9tPfjZdu1roD4CibaYgfucMSUCTTfmZpo= Received: from PR3P194MB0828.EURP194.PROD.OUTLOOK.COM (2603:10a6:102:2b::16) by PR3P194MB0889.EURP194.PROD.OUTLOOK.COM (2603:10a6:102:4d::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3654.12; Mon, 14 Dec 2020 13:50:48 +0000 Received: from PR3P194MB0828.EURP194.PROD.OUTLOOK.COM ([fe80::d560:4669:2061:7a1f]) by PR3P194MB0828.EURP194.PROD.OUTLOOK.COM ([fe80::d560:4669:2061:7a1f%7]) with mapi id 15.20.3654.025; Mon, 14 Dec 2020 13:50:48 +0000 From: "Hristozov, Stefan" To: "john.mattsson=40ericsson.com@dmarc.ietf.org" , "goran.selander@ericsson.com" , "lgl@island-resort.com" CC: "cose@ietf.org" Thread-Topic: [COSE] bstr wrapping for native signed (was Re: New Version Notification for draft-mattsson-cose-cbor-cert-compress-05.txt) Thread-Index: AQHWzOSgb5aiLsUhZUqTeFxike7Wk6n2lXeygAARAAA= Date: Mon, 14 Dec 2020 13:50:48 +0000 Message-ID: <14369eac3a2205f3c5cb7f74c579fdf568570914.camel@aisec.fraunhofer.de> References: <160689580542.14210.17819515187695761515@ietfa.amsl.com> <4A0FDEA0-1264-418D-801C-6C710A3BE6AD@ericsson.com> ,<25A34E20-C4A4-4F15-B457-73CB1752A67F@island-resort.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.36.4-0ubuntu1 authentication-results: dmarc.ietf.org; dkim=none (message not signed) header.d=none;dmarc.ietf.org; dmarc=none action=none header.from=aisec.fraunhofer.de; x-originating-ip: [2a01:c22:7629:1b00:fd9b:cb29:3e89:e879] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: be91b49d-45d9-44aa-1e44-08d8a0374372 x-ms-traffictypediagnostic: PR3P194MB0889: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: xo903EitL+GSrM1FtpOmXjr6j3bHFQEQs3C3oU6zPSCZwPfkdT5SHpw3m6LGRlOyhEqV1NKqImHqInXMWGRitDb6RmaiyU3WlASS0HNyFapBdWJmOETdqUWZAR9juBeVQEGEhw4SZ2R3g/H21ZRipWwUnZ854liEDBHM/fnJ/0sYOzanNrJebAu3b/Up3+Ny9zq91qX0BmMWCa1Uc59i4M8rYInWK0RpyDaj9/ATP0QTFpFffQsYfxonfq9qAuzqI+soN3sfSr3nw5V933dRgCAZRt+CJAh6EZsZO/Fo+WB7fWxN7SFkKeIdvGRgo3Ywc+gBlvfzBwuyqltoD8+wglVl5qbhdHPl0TWqgxSCW4XO4kufy8GDw7TjmFNbP2+s+DAHTGO4SyWy3F0dHWRxcSoyHxPXPwIV/rNSOhkJd62rU4IsOfa5VgyVkcO8mOIXCCspt5J9WUNIaOJrjaj3PQ== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:PR3P194MB0828.EURP194.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(4636009)(136003)(366004)(39850400004)(396003)(376002)(346002)(83380400001)(66556008)(66476007)(64756008)(76116006)(66946007)(4001150100001)(91956017)(8936002)(478600001)(66446008)(110136005)(86362001)(4326008)(53546011)(316002)(66574015)(6506007)(186003)(2616005)(71200400001)(2906002)(966005)(8676002)(5660300002)(83080400002)(166002)(6512007)(6486002)(15650500001); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: =?utf-8?B?NVh2S0tnU1dvTTdpbWRRMktsdm5JQVlDME5YWjhKUmJkaUhzVkNQUTg2RFZa?= =?utf-8?B?SUk3T0FqUG8zcHB2SXlDWk91MHkxUWRqRjMvcGVFRVVtemZjdWNpTWs0TGFn?= =?utf-8?B?a2tlOEx2RnB2UjJoR1YrTE94Q3UrUzZPelJuWWxBSEVPcG9ib2taTk45OGJz?= =?utf-8?B?d1pGUVl5RVlRN0xWMUk3cmV3V2tFUkhCelJMMnBTQXhqWUR6RlYvUlNmNDcw?= =?utf-8?B?VUY4bllGcU9pN1I0OG9EVXhVNCt6amJmVlQ3U2pkV1ExUTh5Q3NudEcrUEVp?= =?utf-8?B?d1VxUnR5ZDNWdzVScHFLMXpQWnlocFFiSnJScDlhOWVBRUVUVzBwRS9wYjBT?= =?utf-8?B?T3Q1SHRYMUZLT20xa3BZTDU5Y2lnUTIyS3d4aDdNZUlSU2Vjc2hVM2tDODB6?= =?utf-8?B?Ri9md2E0T1hlV0FjZVZKcnNOa2RINlZkbmtiL01ScXZQVU9OKytXUjJKTEc5?= =?utf-8?B?UlFQZTMzT293bHpKMyt2VjVBOU1uRmVuaTBxMWhqWXh5TWJJYThEZFFvU3pD?= =?utf-8?B?YlJzYWJqckw3aDZ0WSt5SXlrVjFacnhyMjVQTHJOYnpzMWY5TmxqdHJyaUYz?= =?utf-8?B?U2tILzFFcDc2V0ZDSUx4OUQrcFJzc1hJSFBkblVPK3ZZZTZlR1llTXpyWVdL?= =?utf-8?B?dFVjaGwxQ1pQcUIzYldXQk4xK1NLVDRSVlE5RGFHaG1jWEJIZFNZOHdmRVV6?= =?utf-8?B?akVXZWJQSitkc0Jwa3NjeDlDdWNHSm1ickZ5S1VocHpRTEZRWmUyK0N1OHlS?= =?utf-8?B?TGRFdGJ1VHdTWHFRODdIam1uVlhnTzhaUmpDQ0dQVVJIVzlxQ1IrMnBwRGtH?= =?utf-8?B?RHJwVE5iWSs5WjF1TFhSMk9ROU5PZ2dFQW1sRzl1ck13M1VySUlPajJHY3ZL?= =?utf-8?B?TzF0dS94Y2Z1S1F4cmF2RzlTbjJUbmRQTEJSVlAyUmRjS0NYY2NDWCs1dnpK?= =?utf-8?B?cFg4MVRWaWhkTEhUdDN0b3lFSlZ2ZjJVc1hLMmNZZjJGMHJHdW9rd2lDcHRE?= =?utf-8?B?SSs4L1I1bzZmSC9oMmRvYm51WnFCaUNiNjgwSUZuSXQzZldDQmI2ZjYxbDMv?= =?utf-8?B?ZUU1MHJwV0lRYVdhNlVPaGErKys0MTdnSEVhZS80eVhYQlVyMFdCQmc3K0pl?= =?utf-8?B?bms0Ynk0Tjh3ZDRtOTcwTGZ5TzhCdHdGZ2h2cWI3ZDlQN3AxUkZLaENFUDdk?= =?utf-8?B?eERHdHNLcitNdjIwOThnZDF4NEVJZVZVMEtZeGtxKzYwejZGVVhlNEVHUkRU?= =?utf-8?B?UGhIa3psblpQM0kwWnl0Uk96ZDErOEJsMjJiMzlmb0dqMVl2d0ZPM2U1Z2dy?= =?utf-8?B?T1gvRHZLeU9uVU96OC9yNmVCUHlvWFJGZDRQUXB2Z1h4Z09mbGRWRnVXY0Ux?= =?utf-8?B?bnRjNS9rSm9oMUFya2Jrb2NHL2V4bnh6eVFPc2huYWMyeHlIWGowTmE2VmtN?= =?utf-8?Q?C9Ohxrxx?= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_14369eac3a2205f3c5cb7f74c579fdf568570914camelaisecfraun_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: PR3P194MB0828.EURP194.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: be91b49d-45d9-44aa-1e44-08d8a0374372 X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Dec 2020 13:50:48.6977 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f930300c-c97d-4019-be03-add650a171c4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 7CB2sYf6lPT9/LvV71TXGzAgk3iX8Er2qyHbYbI1/T+TOyGviHLXccmIlF3j1NsAfDeUN3qHdHYks20ktpzwRTijwCKLvevP98gwNmG2W7wR3HvzAt0Zqij4o2GvzX9u X-MS-Exchange-Transport-CrossTenantHeadersStamped: PR3P194MB0889 X-OriginatorOrg: aisec.fraunhofer.de Archived-At: Subject: Re: [COSE] bstr wrapping for native signed (was Re: New Version Notification for draft-mattsson-cose-cbor-cert-compress-05.txt) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Dec 2020 13:51:11 -0000 --_000_14369eac3a2205f3c5cb7f74c579fdf568570914camelaisecfraun_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgTGF1cmVuY2UsDQoNCkkgYW0gdXNpbmcgdGhlIEMgbGlicmFyeSB0aW55Y2JvciBbMV0gZm9y IG15IG5hdGl2ZSBDQk9SIGNlcnRpZmljYXRlIGRlY29kZXIuDQpEdXJpbmcgcGFyc2luZyB0aGUg Y2VydGlmaWNhdGUgSSBhbSBjYWxjdWxhdGluZyBhbHNvIGFuIG9mZnNldCBmcm9tIGl0cyBiZWdp bm5pbmcgYWZ0ZXIgZWFjaCBwYXJzZWQgZWxlbWVudC4gVGlueWNib3IgcHJvdmlkZXMgYSBmdW5j dGlvbiBmb3IgZ2V0dGluZyB0aGUgbGVuZ3RoIG9mIHRoZSBieXRlIG9yIHRleHQgc3RyaW5nIGNi b3JfdmFsdWVfY2FsY3VsYXRlX3N0cmluZ19sZW5ndGggWzJdLCB3aGljaCBpcyBoZWxwZnVsIGZv ciB0aGF0Lg0KDQpEb2VzIHRoaXMgYW5zd2VyIHlvdXIgcXVlc3Rpb24/DQoNCkJlc3QgcmVnYXJk cywNClN0ZWZhbg0KDQpbMV06IGh0dHBzOi8vZ2l0aHViLmNvbS9pbnRlbC90aW55Y2Jvcg0KWzJd OiBodHRwczovL2ludGVsLmdpdGh1Yi5pby90aW55Y2Jvci9jdXJyZW50L2EwMDA0Ny5odG1sI2dh ZDViMmRkODAzMjQ0OTQ2YjE1NjAzZTA5Y2UxNDcwNDQNCg0KT24gTW9uLCAyMDIwLTEyLTE0IGF0 IDEzOjE4ICswMDAwLCBHw7ZyYW4gU2VsYW5kZXIgd3JvdGU6DQpIaSBMYXVyZW5jZSwNCg0KSeKA mW0gYXdhcmUgb2YgdHdvIGltcGxlbWVudGF0aW9uIGFjdGl2aXRpZXM6IGJ5IEpvaG4gKHR5cGUg MSkgYW5kIGJ5IFN0ZWZhbiAodHlwZSAwKS4NCg0KR8O2cmFuDQoNCg0KT24gMjAyMC0xMi0wNywg MjM6MDIsICJDT1NFIiA8Y29zZS1ib3VuY2VzQGlldGYub3JnPiB3cm90ZToNCkkgZG9u4oCZdCB0 aGluayBpdCB3b3JrcyB2ZXJ5IHdlbGwgYXQgYWxsIHRvIGRpcmVjdGx5IHNpZ24gZW5jb2RlZCBD Qk9SLiBJdCBzaG91bGQgYmUgd3JhcHBlZCBpbiBhIGJ5dGUgc3RyaW5nLg0KDQpJbiBwYXJ0aWN1 bGFyIGlzc3VlclNpZ25hdHVyZVZhbHVlIHNob3VsZCBwcm9iYWJseSBiZSB0aGUgc2lnbmF0dXJl IG92ZXIgYSBieXRlIHN0cmluZyB0aGF0IGNvbnRhaW5zIGFuIGVuY29kZWQgVEJTQ2VydGlmaWNh dGUuIFRoaXMgaXMgd2hhdCBDT1NFIGRvZXMuDQoNClRoZSBtYWluIHJlYXNvbiBmb3IgdGhpcyBp cyB0byBhbGxvdyBpbXBsZW1lbnRhdGlvbiB3aXRoIG9mZi10aGUtc2hlbGYgQ0JPUiBlbmNvZGVy cyBhbmQgZGVjb2RlcnMuIEZyb20gc29tZSB0aGF0IEnigJl2ZSBsb29rZWQgYXQgYW5kIG9uZSBJ 4oCZdmUgd3JpdHRlbiBteXNlbGYsIENCT1IgZGVjb2RlcnMgZG9u4oCZdCBhbGxvdyBhY2Nlc3Mg YSBzdWItcGFydCBvZiB0aGUgZW5jb2RlZCBDQk9SIHNvIGl0IGNhbiBiZSBpbnB1dCBpbnRvIHRo ZSBoYXNoLiBUaGVyZSB3b3VsZCBiZSBubyB3YXkgdG8gZ2V0IGp1c3QgdGhlIGVuY29kZWQgYnl0 ZXMgb2YgdGhlIFRCU0NlcnRpZmljYXRlIG91dCBvZiB0aGUgQ0JPUiBkZWNvZGVyIHVubGVzcyB5 b3Ugd2VudCBpbiBhbmQgaGFja2VkIGl0cyBzb3VyY2UgY29kZSBpbiBhIHNwZWNpYWwgd2F5Lg0K DQpIYXMgYW55b25lIGltcGxlbWVudGVkIHZlcmlmaWNhdGlvbiBvZiBOYXRpdmVseSBTaWduZWQg Q0JPUiBDZXJ0aWZpY2F0ZXM/IFdoYXQgQ0JPUiBkZWNvZGVyIHdhcyB1c2VkPyBNYXliZSBJ4oCZ bSB3cm9uZyBhYm91dCB0aGlzPw0KDQpJIHJlYWxpemUgYnl0ZSBzdHJpbmcgd3JhcHBpbmcgVEJT Q2VydGlmaWNhdGUgbWlnaHQgY2F1c2UgdXBoZWF2YWwgaW4gdGhlIG92ZXJhbGwgZGVzaWduIGJl Y2F1c2UgY2JvckNlcnRpZmljYXRlVHlwZSB3b3VsZCBiZSBpbnNpZGUgdGhlIGJ5dGUgc3RyaW5n IHdyYXBwaW5nLg0KDQpBbm90aGVyIGFwcHJvYWNoIG1pZ2h0IGJlIHRvIGp1c3QgdXNlIENPU0Ug Zm9yIE5hdGl2ZWx5IFNpZ25lZCBDQk9SIENlcnRpZmljYXRlcy4gVGhlIENPU0UgcGF5bG9hZCB3 b3VsZCBiZSBhIFRCU0NlcnRpZmljYXRlLiBDT1NFIHdvdWxkIHRha2UgY2FyZSBvZiB0aGUgYnl0 ZSBzdHJpbmcgd3JhcHBpbmcgaXNzdWVzLiBUaGlzIHdvdWxkIGluY3JlYXNlIHRoZSBvbi10aGUt d2lyZSBzaXplIG9mIHRoZSBjZXJ0aWZpY2F0ZSBieSBhYm91dCAxMCBieXRlcywgYnV0IG1pZ2h0 IGRlY3JlYXNlIGNvZGUgc2l6ZSBvZiB0aGUgaW1wbGVtZW50YXRpb24gYnkgcmUgdXNlIG9mIGEg Q09TRSBpbXBsZW1lbnRhdGlvbi4NCg0KTEwNCg0KDQo+IE9uIERlYyAyLCAyMDIwLCBhdCAxMjo0 OSBBTSwgSm9obiBNYXR0c3NvbiA8am9obi5tYXR0c3Nvbj00MGVyaWNzc29uLmNvbUBkbWFyYy5p ZXRmLm9yZzxtYWlsdG86am9obi5tYXR0c3Nvbj00MGVyaWNzc29uLmNvbUBkbWFyYy5pZXRmLm9y Zz4+IHdyb3RlOg0KPg0KPiBUaGFua3MgYWdhaW4gZm9yIGFsbCB0aGUgZ29vZCBjb21tZW50IGFu ZCBkaXNjdXNzaW9ucyBvbiB0aGUgbGlzdCENCj4NCj4gV2UgaGF2ZSBzdWJtaXR0ZWQgLTA1LiBD aGFuZ2VzIGFyZToNCj4NCj4gLSBBZGRlZCByZWZlcmVuY2UgdG8gSUVFRSA4MDIuMUFSIERldklE IGFuZCBtYWRlIG9wdGltaXphdGlvbiBmb3IgSUVFRSA4MDIuMUFSIERldklELg0KPiAtIFJlcGhy YXNlZCAiY29tcHJlc3MiIGluIHRoZSB3aG9sZSBkb2N1bWVudC4gV2Ugd2lsbCBjaGFuZ2UgdGhl IGZpbGUgbmFtZSBsYXRlci4NCj4gLSBNYWRlIGl0IG1vcmUgY2xlYXIgdGhhdCBYLjUwOSB2ZXJz aW9uIGluIGluY2x1ZGVkIGluIHRoZSBDQk9SIGNlcnRpZmljYXRlIHR5cGUuDQo+IC0gT21pdHRl ZCAnc2lnbmF0dXJlJyBpbnN0ZWFkIG9mICdzaW5nYXR1cmVBbGdvcml0aG0nLiBOb3cgdGhlIGFs Z29yaXRobSBjb21lcyBqdXN0IGJlZm9yZSB0aGUgc2lnbmF0dXJlIHZhbHVlLg0KPiAtIEFkZGVk IHN1cHBvcnQgb2YgZW1haWxBZGRyZXNzIC8gSUE1U3RyaW5nIGluIGlzc3VlciBhbmQgc3ViamVj dC4gVGhpcyB3YXMgZWFzeS4NCj4gLSBjaGFuZ2VkIHNvIHV0ZjhTdHJpbmdzIGhhdmUgYSBwb3Np dGl2ZSBzaWduLg0KPiAtIENoYW5nZSB0aW1lIHRvIHVud3JhcHBlZCBDQk9SIGVwb2NoIHRpbWUg KH50aW1lKS4gVGhpcyBzYXZlcyAxIGJ5dGUgZm9yIHRpbWUgPiAyMDUwDQo+IC0gQWRkZWQgdGhh dCB0aGUgdmFsdWUgIjk5OTkxMjMxMjM1OTU5WiIgKG5vIGV4cGlyYXRpb24gZGF0ZSkgaXMgZW5j b2RlZCBhcyBDQk9SIG51bGwuIFRoaXMgaXMgcXVpdGUgY29tbW9ubHkgdXNlZCBpbiBJb1QgY2Vy dGlmaWNhdGVzLiBUaGlzIHNhdmVzIDQgYnl0ZXMgd2hlbiB1c2VkLg0KPiAtIFVzZSBDRERMIGZv ciBDQk9SIE9JRCBhcyBkZWZpbmVkIGluIGRyYWZ0LWlldGYtY2Jvci10YWdzLW9pZA0KPiAtIEFk ZGVkIENCT1IgZW5jb2RpbmcgZm9yIHV0aG9yaXR5S2V5SWRlbnRpZmllciBhbmQgc3ViamVjdEtl eUlkZW50aWZpZXIgd2hpY2ggYXJlIGhlYXZpbHkgdXNlZCBieSBJRUVFIDgwMi4xQVIgRGV2SUQg KGF0IGxlYXN0IG9uZSBvZiB0aGVtIGFyZSBtYW5kYXRlZCBkZXBlbmRpbmcgb24gdHlwZSBvZiBj ZXJ0KS4NCj4gLSBBZGRlZCBvcHRpbWl6YXRpb24gZm9yIHRoZSBoYXJkd2FyZU1vZHVsZU5hbWUg dHlwZSBvZiBvdGhlck5hbWUsIHdoaWNoIGlzIG1hbmRhdG9yeSB0byB1c2UgaW4gSUVFRSA4MDIu MUFSIERldklEDQo+IC0gQWRkZWQgQ0JPUiBlbmNvZGluZyBmb3IgY1JMRGlzdHJpYnV0aW9uUG9p bnRzIGFuZCBhdXRob3JpdHlJbmZvQWNjZXNzLCB3aGljaCBhcmUgYm90aCB1c2VkIGluIGJhc2lj YWxseSBhbGwgSFRUUFMgY2VydGlmaWNhdGVzIG9uIHRoZSB3ZWIuDQo+IC0gQWRkZWQgc3VwcG9y dCBmb3IgcmVnaXN0ZXJlZElELiBUaGlzIHdhcyB0cml2aWFsIGFuZCByZWdpc3RlcmVkSUQgaXMg dXNlZCBlLmcuIGJ5IHRoZSBHU01BIGVVSUNDIFBLSSBDZXJ0aWZpY2F0ZSBQb2xpY3kgKFNHUCAx NCkuDQo+IC0gQWRkZWQgY29uc2lkZXJhdGlvbnMgZm9yIGV4cGVydCByZXZpZXdlcnMuDQo+IC0g TW92ZWQgU0hBLTEgc2lnbmF0dXJlIGFsZ29yaXRobXMgdG8gbmVnYXRpdmUgMiBieXRlIGVuY29k aW5nczogLTI1NiBhbmQgLTI1NQ0KPiAtIEFkZGVkIGEgcHVibGljIHByaXZhdGUgRUNEU0Ega2V5 IHBhaXIgdHVybmluZyB0aGUgZXhhbXBsZSBjZXJ0aWZpY2F0ZXMgaW50byB0ZXN0IHZlY3RvcnMu IEFuIGltcGxlbWVudGF0aW9uIGNhbiBub3cgY3JlYXRlIGFuZCB2ZXJpZnkgdGhlIGV4YW1wbGUg UkZDIDc5MjUgY2VydGlmaWNhdGVzLg0KPg0KPiBDaGVlcnMsDQo+IEpvaG4NCj4NCj4g77u/LS0t LS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogImludGVybmV0LWRyYWZ0c0BpZXRmLm9y ZzxtYWlsdG86aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnPiIgPGludGVybmV0LWRyYWZ0c0BpZXRm Lm9yZzxtYWlsdG86aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnPj4NCj4gRGF0ZTogV2VkbmVzZGF5 LCAyIERlY2VtYmVyIDIwMjAgYXQgMDg6NTYNCj4gVG86IEfDtnJhbiBTZWxhbmRlciA8Z29yYW4u c2VsYW5kZXJAZXJpY3Nzb24uY29tPG1haWx0bzpnb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5jb20+ PiwgR8O2cmFuIFNlbGFuZGVyIDxnb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5jb208bWFpbHRvOmdv cmFuLnNlbGFuZGVyQGVyaWNzc29uLmNvbT4+LCBNYXJ0aW4gRnVydWhlZCA8bWFydGluLmZ1cnVo ZWRAbmV4dXNncm91cC5jb208bWFpbHRvOm1hcnRpbi5mdXJ1aGVkQG5leHVzZ3JvdXAuY29tPj4s IFNoYWhpZCBSYXphIDxzaGFoaWQucmF6YUByaS5zZTxtYWlsdG86c2hhaGlkLnJhemFAcmkuc2U+ PiwgSm9obiBNYXR0c3NvbiA8am9obi5tYXR0c3NvbkBlcmljc3Nvbi5jb208bWFpbHRvOmpvaG4u bWF0dHNzb25AZXJpY3Nzb24uY29tPj4sIEpvZWwgSG9nbHVuZCA8am9lbC5ob2dsdW5kQHJpLnNl PG1haWx0bzpqb2VsLmhvZ2x1bmRAcmkuc2U+PiwgSm9obiBNYXR0c3NvbiA8am9obi5tYXR0c3Nv bkBlcmljc3Nvbi5jb208bWFpbHRvOmpvaG4ubWF0dHNzb25AZXJpY3Nzb24uY29tPj4sIEpvZWwg SMO2Z2x1bmQgPGpvZWwuaG9nbHVuZEByaS5zZTxtYWlsdG86am9lbC5ob2dsdW5kQHJpLnNlPj4N Cj4gU3ViamVjdDogTmV3IFZlcnNpb24gTm90aWZpY2F0aW9uIGZvciBkcmFmdC1tYXR0c3Nvbi1j b3NlLWNib3ItY2VydC1jb21wcmVzcy0wNS50eHQNCj4NCj4NCj4gQSBuZXcgdmVyc2lvbiBvZiBJ LUQsIGRyYWZ0LW1hdHRzc29uLWNvc2UtY2Jvci1jZXJ0LWNvbXByZXNzLTA1LnR4dA0KPiBoYXMg YmVlbiBzdWNjZXNzZnVsbHkgc3VibWl0dGVkIGJ5ID0/dXRmLTg/cT9Kb2huX1ByZXU9QzM9OUZf TWF0dHNzb24/PSBhbmQgcG9zdGVkIHRvIHRoZQ0KPiBJRVRGIHJlcG9zaXRvcnkuDQo+DQo+IE5h bWU6ICAgICAgICAgZHJhZnQtbWF0dHNzb24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3MNCj4gUmV2 aXNpb246ICAgICAwNQ0KPiBUaXRsZTogICAgICAgICAgICAgICAgQ0JPUiBFbmNvZGluZyBvZiBY LjUwOSBDZXJ0aWZpY2F0ZXMgKENCT1IgQ2VydGlmaWNhdGVzKQ0KPiBEb2N1bWVudCBkYXRlOiAg ICAgICAgMjAyMC0xMi0wMQ0KPiBHcm91cDogICAgICAgICAgICAgICAgSW5kaXZpZHVhbCBTdWJt aXNzaW9uDQo+IFBhZ2VzOiAgICAgICAgICAgICAgICAyOQ0KPiBVUkw6ICAgICAgICAgICAgaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvYXJjaGl2ZS9pZC9kcmFmdC1tYXR0c3Nvbi1jb3NlLWNib3ItY2Vy dC1jb21wcmVzcy0wNS50eHQNCj4gU3RhdHVzOiAgICAgICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIu aWV0Zi5vcmcvZG9jL2RyYWZ0LW1hdHRzc29uLWNvc2UtY2Jvci1jZXJ0LWNvbXByZXNzLw0KPiBI dG1saXplZDogICAgICAgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFm dC1tYXR0c3Nvbi1jb3NlLWNib3ItY2VydC1jb21wcmVzcw0KPiBIdG1saXplZDogICAgICAgaHR0 cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LW1hdHRzc29uLWNvc2UtY2Jvci1jZXJ0LWNv bXByZXNzLTA1DQo+IERpZmY6ICAgICAgICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9yZmNkaWZm P3VybDI9ZHJhZnQtbWF0dHNzb24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3MtMDUNCj4NCj4gQWJz dHJhY3Q6DQo+ICAgVGhpcyBkb2N1bWVudCBzcGVjaWZpZXMgYSBDQk9SIGVuY29kaW5nIG9mIFgu NTA5IGNlcnRpZmljYXRlcy4gIFRoZQ0KPiAgIHJlc3VsdGluZyBjZXJ0aWZpY2F0ZXMgYXJlIGNh bGxlZCBDQk9SIENlcnRpZmljYXRlcy4gIFRoZSBDQk9SDQo+ICAgZW5jb2Rpbmcgc3VwcG9ydHMg YSBsYXJnZSBzdWJzZXQgb2YgUkZDIDUyODAsIHdoaWxlIGF0IHRoZSBzYW1lIHRpbWUNCj4gICBz aWduaWZpY2FudGx5IHJlZHVjZXMgdGhlIHNpemUgb2YgY2VydGlmaWNhdGVzIGNvbXBhdGlibGUg d2l0aCBSRkMNCj4gICA3OTI1IGFuZCBJRUVFIDgwMi4xQVIgKERldklEcykuICBXaGVuIHVzZWQg dG8gcmUtZW5jb2RlIERFUiBlbmNvZGVkDQo+ICAgWC41MDkgY2VydGlmaWNhdGVzLCB0aGUgQ0JP UiBlbmNvZGluZyBjYW4gaW4gbWFueSBjYXNlcyByZWR1Y2UgdGhlDQo+ICAgc2l6ZSBvZiBSRkMg NzkyNSBwcm9maWxlZCBjZXJ0aWZpY2F0ZXMgd2l0aCBvdmVyIDUwJS4gIFRoZSBDQk9SDQo+ICAg ZW5jb2RpbmcgY2FuIGFsc28gYmUgdXNlZCBlbmNvZGUgIm5hdGl2ZWx5IHNpZ25lZCIgQ0JPUiBj ZXJ0aWZpY2F0ZXMsDQo+ICAgd2hpY2ggZG9lcyBub3QgcmVxdWlyZSByZS1lbmNvZGluZyBmb3Ig dGhlIHNpZ25hdHVyZSB0byBiZSB2ZXJpZmllZC4NCj4gICBUaGUgZG9jdW1lbnQgYWxzbyBzcGVj aWZpZXMgQ09TRSBoZWFkZXJzIGFzIHdlbGwgYXMgYSBUTFMgY2VydGlmaWNhdGUNCj4gICB0eXBl IGZvciBDQk9SIGNlcnRpZmljYXRlcy4NCj4NCj4NCj4NCj4NCj4gUGxlYXNlIG5vdGUgdGhhdCBp dCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51dGVzIGZyb20gdGhlIHRpbWUgb2Ygc3VibWlzc2lv bg0KPiB1bnRpbCB0aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0 IHRvb2xzLmlldGYub3JnLg0KPg0KPiBUaGUgSUVURiBTZWNyZXRhcmlhdA0KPg0KPg0KPg0KPiBf X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBDT1NFIG1h aWxpbmcgbGlzdA0KPiBDT1NFQGlldGYub3JnPG1haWx0bzpDT1NFQGlldGYub3JnPg0KPiBodHRw czovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UNCg0KX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkNPU0UgbWFpbGluZyBsaXN0DQpDT1NF QGlldGYub3JnPG1haWx0bzpDT1NFQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby9jb3NlDQoNCg0KDQotLQ0KDQpTdGVmYW4gSHJpc3Rvem92DQpEZXBhcnRt ZW50IEhhcmR3YXJlIFNlY3VyaXR5DQpGcmF1bmhvZmVyIEluc3RpdHV0ZSBmb3IgQXBwbGllZCBh bmQgSW50ZWdyYXRlZCBTZWN1cml0eSBBSVNFQw0KTGljaHRlbmJlcmdzdHJhw59lIDExLCA4NTc0 OCBHYXJjaGluZyBuZWFyIE11bmljaCwgR2VybWFueQ0KVGVsLiArNDkgODkgMzIyOTkgODYgMTU3 DQpzdGVmYW4uaHJpc3Rvem92QGFpc2VjLmZyYXVuaG9mZXIuZGU8bWFpbHRvOnN0ZWZhbi5ocmlz dG96b3ZAYWlzZWMuZnJhdW5ob2Zlci5kZT4NCmh0dHBzOi8vd3d3LmFpc2VjLmZyYXVuaG9mZXIu ZGUvDQo= --_000_14369eac3a2205f3c5cb7f74c579fdf568570914camelaisecfraun_ Content-Type: text/html; charset="utf-8" Content-ID: Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6bz0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6b2ZmaWNlIiB4 bWxuczp3PSJ1cm46c2NoZW1hcy1taWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIiB4bWxuczptPSJo dHRwOi8vc2NoZW1hcy5taWNyb3NvZnQuY29tL29mZmljZS8yMDA0LzEyL29tbWwiIHhtbG5zPSJo dHRwOi8vd3d3LnczLm9yZy9UUi9SRUMtaHRtbDQwIiBkaXI9Imx0ciI+DQo8aGVhZD4NCjxtZXRh IGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0 Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRvciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUg KGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxlPjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0 IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJ cGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8N CnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsN Cglmb250LXNpemU6MTEuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmO30N CmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNv bG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpzcGFuLkVtYWlsU3R5bGUx OA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJy aSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21z by1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29y ZFNlY3Rpb24xDQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0KCW1hcmdpbjo3Mi4wcHQgNzIuMHB0 IDcyLjBwdCA3Mi4wcHQ7fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9 DQotLT48L3N0eWxlPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iZW4tU0UiIGxpbms9IiM1MzUzNTMi IHZsaW5rPSIjM2QzZDNkIiBzdHlsZT0idGV4dC1hbGlnbjpsZWZ0OyBkaXJlY3Rpb246bHRyOyIg Ymdjb2xvcj0iI2ZmZmZmZiIgdGV4dD0iIzNkM2QzZCI+DQo8ZGl2PkhpIExhdXJlbmNlLDwvZGl2 Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+SSBhbSB1c2luZyB0aGUgQyBsaWJyYXJ5IHRpbnlj Ym9yIFsxXSBmb3IgbXkgbmF0aXZlIENCT1IgY2VydGlmaWNhdGUgZGVjb2Rlci4mbmJzcDs8L2Rp dj4NCjxkaXY+RHVyaW5nIHBhcnNpbmcgdGhlIGNlcnRpZmljYXRlIEkgYW0gY2FsY3VsYXRpbmcg YWxzbyBhbiBvZmZzZXQgZnJvbSBpdHMgYmVnaW5uaW5nIGFmdGVyIGVhY2ggcGFyc2VkIGVsZW1l bnQuIFRpbnljYm9yIHByb3ZpZGVzIGEgZnVuY3Rpb24gZm9yIGdldHRpbmcgdGhlIGxlbmd0aCBv ZiB0aGUgYnl0ZSBvciB0ZXh0IHN0cmluZyBjYm9yX3ZhbHVlX2NhbGN1bGF0ZV9zdHJpbmdfbGVu Z3RoIFsyXSwgd2hpY2ggaXMgaGVscGZ1bCBmb3IgdGhhdC48L2Rpdj4NCjxkaXY+PGJyPg0KPC9k aXY+DQo8ZGl2PkRvZXMgdGhpcyBhbnN3ZXIgeW91ciBxdWVzdGlvbj88L2Rpdj4NCjxkaXY+PGJy Pg0KPC9kaXY+DQo8ZGl2PkJlc3QgcmVnYXJkcyw8L2Rpdj4NCjxkaXY+U3RlZmFuPC9kaXY+DQo8 ZGl2Pjxicj4NCjwvZGl2Pg0KPGRpdj5bMV06IDxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNvbS9p bnRlbC90aW55Y2JvciI+aHR0cHM6Ly9naXRodWIuY29tL2ludGVsL3RpbnljYm9yPC9hPiZuYnNw OyZuYnNwOzwvZGl2Pg0KPGRpdj5bMl06IDxhIGhyZWY9Imh0dHBzOi8vaW50ZWwuZ2l0aHViLmlv L3RpbnljYm9yL2N1cnJlbnQvYTAwMDQ3Lmh0bWwjZ2FkNWIyZGQ4MDMyNDQ5NDZiMTU2MDNlMDlj ZTE0NzA0NCI+DQpodHRwczovL2ludGVsLmdpdGh1Yi5pby90aW55Y2Jvci9jdXJyZW50L2EwMDA0 Ny5odG1sI2dhZDViMmRkODAzMjQ0OTQ2YjE1NjAzZTA5Y2UxNDcwNDQ8L2E+PC9kaXY+DQo8ZGl2 Pjxicj4NCjwvZGl2Pg0KPGRpdj5PbiBNb24sIDIwMjAtMTItMTQgYXQgMTM6MTggKzAwMDAsIEfD tnJhbiBTZWxhbmRlciB3cm90ZTo8L2Rpdj4NCjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiIHN0eWxl PSJtYXJnaW46MCAwIDAgLjhleDsgYm9yZGVyLWxlZnQ6MnB4ICM3MjlmY2Ygc29saWQ7cGFkZGlu Zy1sZWZ0OjFleCI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1V UyI+SGkgTGF1cmVuY2UsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g bGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+SeKAmW0gYXdh cmUgb2YgdHdvIGltcGxlbWVudGF0aW9uIGFjdGl2aXRpZXM6IGJ5IEpvaG4gKHR5cGUgMSkgYW5k IGJ5IFN0ZWZhbiAodHlwZSAwKS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVO LVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5Hw7Zy YW48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5n PSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OjBj bTttYXJnaW4tcmlnaHQ6MGNtO21hcmdpbi1ib3R0b206MTIuMHB0O21hcmdpbi1sZWZ0OjM2LjBw dCI+DQpPbiAyMDIwLTEyLTA3LCAyMzowMiwgJnF1b3Q7Q09TRSZxdW90OyAmbHQ7Y29zZS1ib3Vu Y2VzQGlldGYub3JnJmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5JIGRvbuKAmXQgdGhpbmsgaXQg d29ya3MgdmVyeSB3ZWxsIGF0IGFsbCB0byBkaXJlY3RseSBzaWduIGVuY29kZWQgQ0JPUi4gSXQg c2hvdWxkIGJlIHdyYXBwZWQgaW4gYSBieXRlIHN0cmluZy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+SW4gcGFydGljdWxhciBpc3N1ZXJTaWduYXR1 cmVWYWx1ZSBzaG91bGQgcHJvYmFibHkgYmUgdGhlIHNpZ25hdHVyZSBvdmVyIGEgYnl0ZSBzdHJp bmcgdGhhdCBjb250YWlucyBhbiBlbmNvZGVkIFRCU0NlcnRpZmljYXRlLiBUaGlzIGlzIHdoYXQg Q09TRSBkb2VzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYu MHB0Ij5UaGUgbWFpbiByZWFzb24gZm9yIHRoaXMgaXMgdG8gYWxsb3cgaW1wbGVtZW50YXRpb24g d2l0aCBvZmYtdGhlLXNoZWxmIENCT1IgZW5jb2RlcnMgYW5kIGRlY29kZXJzLiBGcm9tIHNvbWUg dGhhdCBJ4oCZdmUgbG9va2VkIGF0IGFuZCBvbmUgSeKAmXZlIHdyaXR0ZW4gbXlzZWxmLCBDQk9S IGRlY29kZXJzIGRvbuKAmXQgYWxsb3cgYWNjZXNzIGEgc3ViLXBhcnQgb2YgdGhlDQogZW5jb2Rl ZCBDQk9SIHNvIGl0IGNhbiBiZSBpbnB1dCBpbnRvIHRoZSBoYXNoLiBUaGVyZSB3b3VsZCBiZSBu byB3YXkgdG8gZ2V0IGp1c3QgdGhlIGVuY29kZWQgYnl0ZXMgb2YgdGhlIFRCU0NlcnRpZmljYXRl IG91dCBvZiB0aGUgQ0JPUiBkZWNvZGVyIHVubGVzcyB5b3Ugd2VudCBpbiBhbmQgaGFja2VkIGl0 cyBzb3VyY2UgY29kZSBpbiBhIHNwZWNpYWwgd2F5LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5IYXMgYW55b25lIGltcGxlbWVudGVkIHZlcmlmaWNh dGlvbiBvZiBOYXRpdmVseSBTaWduZWQgQ0JPUiBDZXJ0aWZpY2F0ZXM/IFdoYXQgQ0JPUiBkZWNv ZGVyIHdhcyB1c2VkPyBNYXliZSBJ4oCZbSB3cm9uZyBhYm91dCB0aGlzPzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5JIHJlYWxpemUgYnl0ZSBzdHJp bmcgd3JhcHBpbmcgVEJTQ2VydGlmaWNhdGUgbWlnaHQgY2F1c2UgdXBoZWF2YWwgaW4gdGhlIG92 ZXJhbGwgZGVzaWduIGJlY2F1c2UgY2JvckNlcnRpZmljYXRlVHlwZSB3b3VsZCBiZSBpbnNpZGUg dGhlIGJ5dGUgc3RyaW5nIHdyYXBwaW5nLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij5Bbm90aGVyIGFwcHJvYWNoIG1pZ2h0IGJlIHRvIGp1c3QgdXNl IENPU0UgZm9yIE5hdGl2ZWx5IFNpZ25lZCBDQk9SIENlcnRpZmljYXRlcy4gVGhlIENPU0UgcGF5 bG9hZCB3b3VsZCBiZSBhIFRCU0NlcnRpZmljYXRlLiBDT1NFIHdvdWxkIHRha2UgY2FyZSBvZiB0 aGUgYnl0ZSBzdHJpbmcgd3JhcHBpbmcgaXNzdWVzLiBUaGlzIHdvdWxkIGluY3JlYXNlIHRoZSBv bi10aGUtd2lyZQ0KIHNpemUgb2YgdGhlIGNlcnRpZmljYXRlIGJ5IGFib3V0IDEwIGJ5dGVzLCBi dXQgbWlnaHQgZGVjcmVhc2UgY29kZSBzaXplIG9mIHRoZSBpbXBsZW1lbnRhdGlvbiBieSByZSB1 c2Ugb2YgYSBDT1NFIGltcGxlbWVudGF0aW9uLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5MTDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgT24g RGVjIDIsIDIwMjAsIGF0IDEyOjQ5IEFNLCBKb2huIE1hdHRzc29uICZsdDs8YSBocmVmPSJtYWls dG86am9obi5tYXR0c3Nvbj00MGVyaWNzc29uLmNvbUBkbWFyYy5pZXRmLm9yZyI+am9obi5tYXR0 c3Nvbj00MGVyaWNzc29uLmNvbUBkbWFyYy5pZXRmLm9yZzwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+Jmd0OyA8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgVGhhbmtzIGFn YWluIGZvciBhbGwgdGhlIGdvb2QgY29tbWVudCBhbmQgZGlzY3Vzc2lvbnMgb24gdGhlIGxpc3Qh PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyBX ZSBoYXZlIHN1Ym1pdHRlZCAtMDUuIENoYW5nZXMgYXJlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ Jmd0OyA8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgLSBBZGRlZCByZWZlcmVuY2UgdG8gSUVF RSA4MDIuMUFSIERldklEIGFuZCBtYWRlIG9wdGltaXphdGlvbiBmb3IgSUVFRSA4MDIuMUFSIERl dklELjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyAtIFJlcGhyYXNlZCAmcXVvdDtjb21wcmVz cyZxdW90OyBpbiB0aGUgd2hvbGUgZG9jdW1lbnQuIFdlIHdpbGwgY2hhbmdlIHRoZSBmaWxlIG5h bWUgbGF0ZXIuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IC0gTWFkZSBpdCBtb3JlIGNsZWFy IHRoYXQgWC41MDkgdmVyc2lvbiBpbiBpbmNsdWRlZCBpbiB0aGUgQ0JPUiBjZXJ0aWZpY2F0ZSB0 eXBlLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyAtIE9taXR0ZWQgJ3NpZ25hdHVyZScgaW5z dGVhZCBvZiAnc2luZ2F0dXJlQWxnb3JpdGhtJy4gTm93IHRoZSBhbGdvcml0aG0gY29tZXMganVz dCBiZWZvcmUgdGhlIHNpZ25hdHVyZSB2YWx1ZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsg LSBBZGRlZCBzdXBwb3J0IG9mIGVtYWlsQWRkcmVzcyAvIElBNVN0cmluZyBpbiBpc3N1ZXIgYW5k IHN1YmplY3QuIFRoaXMgd2FzIGVhc3kuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IC0gY2hh bmdlZCBzbyB1dGY4U3RyaW5ncyBoYXZlIGEgcG9zaXRpdmUgc2lnbi48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQiPiZndDsgLSBDaGFuZ2UgdGltZSB0byB1bndyYXBwZWQgQ0JPUiBlcG9jaCB0aW1lICh+ dGltZSkuIFRoaXMgc2F2ZXMgMSBieXRlIGZvciB0aW1lICZndDsgMjA1MDxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 OjM2LjBwdCI+Jmd0OyAtIEFkZGVkIHRoYXQgdGhlIHZhbHVlICZxdW90Ozk5OTkxMjMxMjM1OTU5 WiZxdW90OyAobm8gZXhwaXJhdGlvbiBkYXRlKSBpcyBlbmNvZGVkIGFzIENCT1IgbnVsbC4gVGhp cyBpcyBxdWl0ZSBjb21tb25seSB1c2VkIGluIElvVCBjZXJ0aWZpY2F0ZXMuIFRoaXMgc2F2ZXMg NCBieXRlcyB3aGVuIHVzZWQuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IC0gVXNlIENEREwg Zm9yIENCT1IgT0lEIGFzIGRlZmluZWQgaW4gZHJhZnQtaWV0Zi1jYm9yLXRhZ3Mtb2lkPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IC0gQWRkZWQgQ0JPUiBlbmNvZGluZyBmb3IgdXRob3JpdHlL ZXlJZGVudGlmaWVyIGFuZCBzdWJqZWN0S2V5SWRlbnRpZmllciB3aGljaCBhcmUgaGVhdmlseSB1 c2VkIGJ5IElFRUUgODAyLjFBUiBEZXZJRCAoYXQgbGVhc3Qgb25lIG9mIHRoZW0gYXJlIG1hbmRh dGVkIGRlcGVuZGluZyBvbiB0eXBlIG9mIGNlcnQpLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0 OyAtIEFkZGVkIG9wdGltaXphdGlvbiBmb3IgdGhlIGhhcmR3YXJlTW9kdWxlTmFtZSB0eXBlIG9m IG90aGVyTmFtZSwgd2hpY2ggaXMgbWFuZGF0b3J5IHRvIHVzZSBpbiBJRUVFIDgwMi4xQVIgRGV2 SUQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgLSBBZGRlZCBDQk9SIGVuY29kaW5nIGZvciBj UkxEaXN0cmlidXRpb25Qb2ludHMgYW5kIGF1dGhvcml0eUluZm9BY2Nlc3MsIHdoaWNoIGFyZSBi b3RoIHVzZWQgaW4gYmFzaWNhbGx5IGFsbCBIVFRQUyBjZXJ0aWZpY2F0ZXMgb24gdGhlIHdlYi48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgLSBBZGRlZCBzdXBwb3J0IGZvciByZWdpc3RlcmVk SUQuIFRoaXMgd2FzIHRyaXZpYWwgYW5kIHJlZ2lzdGVyZWRJRCBpcyB1c2VkIGUuZy4gYnkgdGhl IEdTTUEgZVVJQ0MgUEtJIENlcnRpZmljYXRlIFBvbGljeSAoU0dQIDE0KS48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPiZndDsgLSBBZGRlZCBjb25zaWRlcmF0aW9ucyBmb3IgZXhwZXJ0IHJldmlld2Vy cy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgLSBNb3ZlZCBTSEEtMSBzaWduYXR1cmUgYWxn b3JpdGhtcyB0byBuZWdhdGl2ZSAyIGJ5dGUgZW5jb2RpbmdzOiAtMjU2IGFuZCAtMjU1PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IC0gQWRkZWQgYSBwdWJsaWMgcHJpdmF0ZSBFQ0RTQSBrZXkg cGFpciB0dXJuaW5nIHRoZSBleGFtcGxlIGNlcnRpZmljYXRlcyBpbnRvIHRlc3QgdmVjdG9ycy4g QW4gaW1wbGVtZW50YXRpb24gY2FuIG5vdyBjcmVhdGUgYW5kIHZlcmlmeSB0aGUgZXhhbXBsZSBS RkMgNzkyNSBjZXJ0aWZpY2F0ZXMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IDxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+Jmd0OyBDaGVlcnMsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IEpv aG48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7 IO+7vy0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7 IEZyb206ICZxdW90OzxhIGhyZWY9Im1haWx0bzppbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmciPmlu dGVybmV0LWRyYWZ0c0BpZXRmLm9yZzwvYT4mcXVvdDsgJmx0OzxhIGhyZWY9Im1haWx0bzppbnRl cm5ldC1kcmFmdHNAaWV0Zi5vcmciPmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZzwvYT4mZ3Q7PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IERhdGU6IFdlZG5lc2RheSwgMiBEZWNlbWJlciAyMDIw IGF0IDA4OjU2PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IFRvOiBHw7ZyYW4gU2VsYW5kZXIg Jmx0OzxhIGhyZWY9Im1haWx0bzpnb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5jb20iPmdvcmFuLnNl bGFuZGVyQGVyaWNzc29uLmNvbTwvYT4mZ3Q7LCBHw7ZyYW4gU2VsYW5kZXIgJmx0OzxhIGhyZWY9 Im1haWx0bzpnb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5jb20iPmdvcmFuLnNlbGFuZGVyQGVyaWNz c29uLmNvbTwvYT4mZ3Q7LCBNYXJ0aW4gRnVydWhlZA0KICZsdDs8YSBocmVmPSJtYWlsdG86bWFy dGluLmZ1cnVoZWRAbmV4dXNncm91cC5jb20iPm1hcnRpbi5mdXJ1aGVkQG5leHVzZ3JvdXAuY29t PC9hPiZndDssIFNoYWhpZCBSYXphICZsdDs8YSBocmVmPSJtYWlsdG86c2hhaGlkLnJhemFAcmku c2UiPnNoYWhpZC5yYXphQHJpLnNlPC9hPiZndDssIEpvaG4gTWF0dHNzb24gJmx0OzxhIGhyZWY9 Im1haWx0bzpqb2huLm1hdHRzc29uQGVyaWNzc29uLmNvbSI+am9obi5tYXR0c3NvbkBlcmljc3Nv bi5jb208L2E+Jmd0OywgSm9lbCBIb2dsdW5kDQogJmx0OzxhIGhyZWY9Im1haWx0bzpqb2VsLmhv Z2x1bmRAcmkuc2UiPmpvZWwuaG9nbHVuZEByaS5zZTwvYT4mZ3Q7LCBKb2huIE1hdHRzc29uICZs dDs8YSBocmVmPSJtYWlsdG86am9obi5tYXR0c3NvbkBlcmljc3Nvbi5jb20iPmpvaG4ubWF0dHNz b25AZXJpY3Nzb24uY29tPC9hPiZndDssIEpvZWwgSMO2Z2x1bmQgJmx0OzxhIGhyZWY9Im1haWx0 bzpqb2VsLmhvZ2x1bmRAcmkuc2UiPmpvZWwuaG9nbHVuZEByaS5zZTwvYT4mZ3Q7PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MzYuMHB0Ij4mZ3Q7IFN1YmplY3Q6IE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3Ig ZHJhZnQtbWF0dHNzb24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3MtMDUudHh0PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij4mZ3Q7IDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyA8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPiZndDsgQSBuZXcgdmVyc2lvbiBvZiBJLUQsIGRyYWZ0LW1hdHRzc29uLWNvc2Ut Y2Jvci1jZXJ0LWNvbXByZXNzLTA1LnR4dDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyBoYXMg YmVlbiBzdWNjZXNzZnVsbHkgc3VibWl0dGVkIGJ5ID0/dXRmLTg/cT9Kb2huX1ByZXU9QzM9OUZf TWF0dHNzb24/PSBhbmQgcG9zdGVkIHRvIHRoZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyBJ RVRGIHJlcG9zaXRvcnkuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IDxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 OjM2LjBwdCI+Jmd0OyBOYW1lOiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyBkcmFmdC1tYXR0c3Nvbi1jb3NlLWNib3ItY2VydC1jb21wcmVzczxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+Jmd0OyBSZXZpc2lvbjombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgMDU8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgVGl0bGU6Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Q0JPUiBFbmNvZGluZyBvZiBYLjUwOSBDZXJ0aWZpY2F0ZXMgKENCT1Ig Q2VydGlmaWNhdGVzKTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyBEb2N1bWVudCBkYXRlOiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzIwMjAtMTItMDE8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgR3JvdXA6Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7SW5kaXZpZHVhbCBTdWJtaXNzaW9uPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0 Ij4mZ3Q7IFBhZ2VzOiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzI5PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IFVSTDombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8YSBocmVmPSJodHRw czovL3d3dy5pZXRmLm9yZy9hcmNoaXZlL2lkL2RyYWZ0LW1hdHRzc29uLWNvc2UtY2Jvci1jZXJ0 LWNvbXByZXNzLTA1LnR4dCI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvYXJjaGl2ZS9pZC9kcmFmdC1t YXR0c3Nvbi1jb3NlLWNib3ItY2VydC1jb21wcmVzcy0wNS50eHQ8L2E+PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MzYuMHB0Ij4mZ3Q7IFN0YXR1czombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgPGEgaHJlZj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJh ZnQtbWF0dHNzb24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3MvIj4NCmh0dHBzOi8vZGF0YXRyYWNr ZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LW1hdHRzc29uLWNvc2UtY2Jvci1jZXJ0LWNvbXByZXNzLzwv YT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgSHRtbGl6ZWQ6Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7IDxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv ZG9jL2h0bWwvZHJhZnQtbWF0dHNzb24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3MiPg0KaHR0cHM6 Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC1tYXR0c3Nvbi1jb3NlLWNib3It Y2VydC1jb21wcmVzczwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgSHRtbGl6ZWQ6Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDxhIGhyZWY9Imh0dHBzOi8vdG9vbHMu aWV0Zi5vcmcvaHRtbC9kcmFmdC1tYXR0c3Nvbi1jb3NlLWNib3ItY2VydC1jb21wcmVzcy0wNSI+ DQpodHRwczovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtbWF0dHNzb24tY29zZS1jYm9yLWNl cnQtY29tcHJlc3MtMDU8L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IERpZmY6Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDxh IGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1tYXR0c3Nvbi1j b3NlLWNib3ItY2VydC1jb21wcmVzcy0wNSI+DQpodHRwczovL3d3dy5pZXRmLm9yZy9yZmNkaWZm P3VybDI9ZHJhZnQtbWF0dHNzb24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3MtMDU8L2E+PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyBBYnN0cmFj dDo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsmbmJzcDsmbmJzcDsgVGhpcyBkb2N1bWVudCBz cGVjaWZpZXMgYSBDQk9SIGVuY29kaW5nIG9mIFguNTA5IGNlcnRpZmljYXRlcy4mbmJzcDsmbmJz cDtUaGU8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsmbmJzcDsmbmJzcDsgcmVzdWx0aW5nIGNl cnRpZmljYXRlcyBhcmUgY2FsbGVkIENCT1IgQ2VydGlmaWNhdGVzLiZuYnNwOyZuYnNwO1RoZSBD Qk9SPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IGVuY29kaW5nIHN1cHBv cnRzIGEgbGFyZ2Ugc3Vic2V0IG9mIFJGQyA1MjgwLCB3aGlsZSBhdCB0aGUgc2FtZSB0aW1lPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IHNpZ25pZmljYW50bHkgcmVkdWNl cyB0aGUgc2l6ZSBvZiBjZXJ0aWZpY2F0ZXMgY29tcGF0aWJsZSB3aXRoIFJGQzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+Jmd0OyZuYnNwOyZuYnNwOyA3OTI1IGFuZCBJRUVFIDgwMi4xQVIgKERldklE cykuJm5ic3A7Jm5ic3A7V2hlbiB1c2VkIHRvIHJlLWVuY29kZSBERVIgZW5jb2RlZDxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+Jmd0OyZuYnNwOyZuYnNwOyBYLjUwOSBjZXJ0aWZpY2F0ZXMsIHRoZSBD Qk9SIGVuY29kaW5nIGNhbiBpbiBtYW55IGNhc2VzIHJlZHVjZSB0aGU8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQiPiZndDsmbmJzcDsmbmJzcDsgc2l6ZSBvZiBSRkMgNzkyNSBwcm9maWxlZCBjZXJ0aWZp Y2F0ZXMgd2l0aCBvdmVyIDUwJS4mbmJzcDsmbmJzcDtUaGUgQ0JPUjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+Jmd0OyZuYnNwOyZuYnNwOyBlbmNvZGluZyBjYW4gYWxzbyBiZSB1c2VkIGVuY29kZSAm cXVvdDtuYXRpdmVseSBzaWduZWQmcXVvdDsgQ0JPUiBjZXJ0aWZpY2F0ZXMsPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IHdoaWNoIGRvZXMgbm90IHJlcXVpcmUgcmUtZW5j b2RpbmcgZm9yIHRoZSBzaWduYXR1cmUgdG8gYmUgdmVyaWZpZWQuPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYu MHB0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IFRoZSBkb2N1bWVudCBhbHNvIHNwZWNpZmllcyBDT1NFIGhl YWRlcnMgYXMgd2VsbCBhcyBhIFRMUyBjZXJ0aWZpY2F0ZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ Jmd0OyZuYnNwOyZuYnNwOyB0eXBlIGZvciBDQk9SIGNlcnRpZmljYXRlcy48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPiZndDsgPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IDxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 OjM2LjBwdCI+Jmd0OyA8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MzYuMHB0Ij4mZ3Q7IFBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWlu dXRlcyBmcm9tIHRoZSB0aW1lIG9mIHN1Ym1pc3Npb248bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZn dDsgdW50aWwgdGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0 b29scy5pZXRmLm9yZy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MzYuMHB0Ij4mZ3Q7IFRoZSBJRVRGIFNlY3JldGFyaWF0PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4m Z3Q7IDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyA8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZn dDsgPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IF9fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IENPU0UgbWFp bGluZyBsaXN0PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IDxhIGhyZWY9Im1haWx0bzpDT1NF QGlldGYub3JnIj4NCkNPU0VAaWV0Zi5vcmc8L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7 IDxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY29zZSI+DQpo dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2U8L2E+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPl9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5DT1NF IG1haWxpbmcgbGlzdDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PGEgaHJlZj0ibWFpbHRvOkNPU0VA aWV0Zi5vcmciPkNPU0VAaWV0Zi5vcmc8L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48YSBocmVm PSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UiPmh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY29zZTwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj48c3Bhbj4NCjxwcmU+LS0gPGJyPjwvcHJl Pg0KPGRpdiBzdHlsZT0id2lkdGg6IDcxY2g7Ij5TdGVmYW4gSHJpc3Rvem92PC9kaXY+DQo8ZGl2 IHN0eWxlPSJ3aWR0aDogNzFjaDsiPkRlcGFydG1lbnQgSGFyZHdhcmUgU2VjdXJpdHk8L2Rpdj4N CjxkaXYgc3R5bGU9IndpZHRoOiA3MWNoOyI+RnJhdW5ob2ZlciBJbnN0aXR1dGUgZm9yIEFwcGxp ZWQgYW5kIEludGVncmF0ZWQgU2VjdXJpdHkgQUlTRUM8L2Rpdj4NCjxkaXYgc3R5bGU9IndpZHRo OiA3MWNoOyI+TGljaHRlbmJlcmdzdHJhw59lIDExLCA4NTc0OCBHYXJjaGluZyBuZWFyIE11bmlj aCwgR2VybWFueTwvZGl2Pg0KPGRpdiBzdHlsZT0id2lkdGg6IDcxY2g7Ij5UZWwuICs0OSA4OSAz MjI5OSA4NiAxNTc8L2Rpdj4NCjxkaXYgc3R5bGU9IndpZHRoOiA3MWNoOyI+PGEgaHJlZj0ibWFp bHRvOnN0ZWZhbi5ocmlzdG96b3ZAYWlzZWMuZnJhdW5ob2Zlci5kZSI+c3RlZmFuLmhyaXN0b3pv dkBhaXNlYy5mcmF1bmhvZmVyLmRlPC9hPjwvZGl2Pg0KPGRpdiBzdHlsZT0id2lkdGg6IDcxY2g7 Ij48YSBocmVmPSJodHRwczovL3d3dy5haXNlYy5mcmF1bmhvZmVyLmRlLyI+aHR0cHM6Ly93d3cu YWlzZWMuZnJhdW5ob2Zlci5kZS88L2E+PC9kaXY+DQo8L3NwYW4+PC9kaXY+DQo8L2JvZHk+DQo8 L2h0bWw+DQo= --_000_14369eac3a2205f3c5cb7f74c579fdf568570914camelaisecfraun_-- From nobody Mon Dec 14 11:09:17 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B2103A163C for ; Mon, 14 Dec 2020 11:09:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.006 X-Spam-Level: X-Spam-Status: No, score=0.006 tagged_above=-999 required=5 tests=[HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3OhN13gRc_BG for ; Mon, 14 Dec 2020 11:09:14 -0800 (PST) Received: from p3plsmtpa06-01.prod.phx3.secureserver.net (p3plsmtpa06-01.prod.phx3.secureserver.net [173.201.192.102]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 32ADC3A1637 for ; Mon, 14 Dec 2020 11:09:14 -0800 (PST) Received: from [192.168.1.81] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id otDckGuFdooDEotDckYtIV; Mon, 14 Dec 2020 12:09:12 -0700 X-CMAE-Analysis: v=2.4 cv=UKQYoATy c=1 sm=1 tr=0 ts=5fd7b859 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=vlGuhjqhAAAA:20 a=BJqUtq7SAAAA:8 a=48vgC7mUAAAA:8 a=0FD05c-RAAAA:8 a=musJw4uAAAAA:8 a=MMDs4E5wAAAA:8 a=uyZKOdIWhxge-HALzw0A:9 a=QEXdDO2ut3YA:10 a=npd4AoLIhcgA:10 a=0omZQAQYt-u1-MFhtsoA:9 a=WR6pYSS4OTR37SPh:21 a=_W_S_7VecoQA:10 a=ohADsLDh_F_VccsSC9KO:22 a=w1C3t2QeGrPiZgrLijVG:22 a=l1rpMCqCXRGZwUSuRcM3:22 a=1r9cylzjBqEvxtMljPIL:22 a=jHvzBIkrrWWn-KvwdDy_:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: <3F4B94C1-FE8F-4AEC-862A-894CDC59D385@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_192E5AEA-3AD6-4C4D-A8F9-BEDACE93A77F" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) Date: Mon, 14 Dec 2020 11:09:12 -0800 In-Reply-To: <14369eac3a2205f3c5cb7f74c579fdf568570914.camel@aisec.fraunhofer.de> Cc: "john.mattsson=40ericsson.com@dmarc.ietf.org" , "goran.selander@ericsson.com" , "cose@ietf.org" To: "Hristozov, Stefan" References: <160689580542.14210.17819515187695761515@ietfa.amsl.com> <4A0FDEA0-1264-418D-801C-6C710A3BE6AD@ericsson.com> <25A34E20-C4A4-4F15-B457-73CB1752A67F@island-resort.com> <14369eac3a2205f3c5cb7f74c579fdf568570914.camel@aisec.fraunhofer.de> X-Mailer: Apple Mail (2.3445.104.17) X-CMAE-Envelope: MS4xfA1aYK4ufnAZl2a4D8Nnc7tpPFlP74J9JMLb3WjJs9FPaVFOVnE/aBFU+beMcuWSy768O0J6sFVjq1Mu22ZZuezIRqO26BFepxn/4BpShn0gey61VL1q F4SBechUpKVxXDyIv0zS23Iy9v+9qyaoqyfMOvoVELjWs/X4ii1r2eZ0SUUsVHd5Z9OD3oDqTt07J2aW5ny35Ddw9r5G92rSg27Oysz1XwbhDIUb/vi7N2UI Cwkv/LTnhxaQyMVdkTiEVtIGrczrKvNNmpro5gsnq7+8jreZe7E/e3XMHaHX0EO0FnUgcXcqnQqGKiilFyeeFEQ/frbT415CvhuhyOtkqO8= Archived-At: Subject: Re: [COSE] bstr wrapping for native signed (was Re: New Version Notification for draft-mattsson-cose-cbor-cert-compress-05.txt) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Dec 2020 19:09:17 -0000 --Apple-Mail=_192E5AEA-3AD6-4C4D-A8F9-BEDACE93A77F Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Stefan, First on the implementation =E2=80=94 my understanding is that you=E2=80=99= d have to hash from the byte offset of the first byte of the CBOR = encoded head of cborCertificateType to the last byte of the Extensions = to correctly implement this. Since the cborCertificateType is the first = item in the sequence, its offset is zero, so that=E2=80=99s easy. I=E2=80=99m not sure how you=E2=80=99d use = cbor_value_calculate_string_length since many of the items in the = TBSCertificate are not strings. Maybe you calculate the length of the = issuerSignatureValue and go back from the end? That wouldn=E2=80=99t = account for CBOR encoded head of issuerSignatureValue though. So, I don=E2=80=99t understand how this works with tinyCBOR or that it = is even correct. It would be good to see an implementation in Python or Go or such to see = if it's possible with those type of CBOR decoders. Second on the design =E2=80=94 I still believe this design is counter to = conventions used in CBOR for signing/hashing data. I think the folks = that designed COSE thought this issue through. (My first design of of EAT did the hashing the way it is being done = here. This was before COSE was publishes as an RFC. The folks using an = off-the-shelf Python CBOR decoder had to hack that decoder to get the = verification to work. Then EAT switched to COSE and I came to understand = the reasons COSE works as it does.) LL > On Dec 14, 2020, at 5:50 AM, Hristozov, Stefan = wrote: >=20 > Hi Laurence, >=20 > I am using the C library tinycbor [1] for my native CBOR certificate = decoder.=20 > During parsing the certificate I am calculating also an offset from = its beginning after each parsed element. Tinycbor provides a function = for getting the length of the byte or text string = cbor_value_calculate_string_length [2], which is helpful for that. >=20 > Does this answer your question? >=20 > Best regards, > Stefan >=20 > [1]: https://github.com/intel/tinycbor = =20 > [2]: = https://intel.github.io/tinycbor/current/a00047.html#gad5b2dd803244946b156= 03e09ce147044 = >=20 > On Mon, 2020-12-14 at 13:18 +0000, G=C3=B6ran Selander wrote: >> Hi Laurence, >> =20 >> I=E2=80=99m aware of two implementation activities: by John (type 1) = and by Stefan (type 0). >> =20 >> G=C3=B6ran >> =20 >> =20 >> On 2020-12-07, 23:02, "COSE" wrote: >>=20 >> I don=E2=80=99t think it works very well at all to directly sign = encoded CBOR. It should be wrapped in a byte string. >> =20 >> In particular issuerSignatureValue should probably be the signature = over a byte string that contains an encoded TBSCertificate. This is what = COSE does. >> =20 >> The main reason for this is to allow implementation with = off-the-shelf CBOR encoders and decoders. =46rom some that I=E2=80=99ve = looked at and one I=E2=80=99ve written myself, CBOR decoders don=E2=80=99t= allow access a sub-part of the encoded CBOR so it can be input into the = hash. There would be no way to get just the encoded bytes of the = TBSCertificate out of the CBOR decoder unless you went in and hacked its = source code in a special way. >> =20 >> Has anyone implemented verification of Natively Signed CBOR = Certificates? What CBOR decoder was used? Maybe I=E2=80=99m wrong about = this? >> =20 >> I realize byte string wrapping TBSCertificate might cause upheaval in = the overall design because cborCertificateType would be inside the byte = string wrapping. >> =20 >> Another approach might be to just use COSE for Natively Signed CBOR = Certificates. The COSE payload would be a TBSCertificate. COSE would = take care of the byte string wrapping issues. This would increase the = on-the-wire size of the certificate by about 10 bytes, but might = decrease code size of the implementation by re use of a COSE = implementation. >> =20 >> LL >> =20 >> =20 >> > On Dec 2, 2020, at 12:49 AM, John Mattsson = > wrote: >> >=20 >> > Thanks again for all the good comment and discussions on the list! >> >=20 >> > We have submitted -05. Changes are: >> >=20 >> > - Added reference to IEEE 802.1AR DevID and made optimization for = IEEE 802.1AR DevID. >> > - Rephrased "compress" in the whole document. We will change the = file name later. >> > - Made it more clear that X.509 version in included in the CBOR = certificate type. >> > - Omitted 'signature' instead of 'singatureAlgorithm'. Now the = algorithm comes just before the signature value. >> > - Added support of emailAddress / IA5String in issuer and subject. = This was easy. >> > - changed so utf8Strings have a positive sign. >> > - Change time to unwrapped CBOR epoch time (~time). This saves 1 = byte for time > 2050 >> > - Added that the value "99991231235959Z" (no expiration date) is = encoded as CBOR null. This is quite commonly used in IoT certificates. = This saves 4 bytes when used. >> > - Use CDDL for CBOR OID as defined in draft-ietf-cbor-tags-oid >> > - Added CBOR encoding for uthorityKeyIdentifier and = subjectKeyIdentifier which are heavily used by IEEE 802.1AR DevID (at = least one of them are mandated depending on type of cert). >> > - Added optimization for the hardwareModuleName type of otherName, = which is mandatory to use in IEEE 802.1AR DevID >> > - Added CBOR encoding for cRLDistributionPoints and = authorityInfoAccess, which are both used in basically all HTTPS = certificates on the web. >> > - Added support for registeredID. This was trivial and registeredID = is used e.g. by the GSMA eUICC PKI Certificate Policy (SGP 14). >> > - Added considerations for expert reviewers. >> > - Moved SHA-1 signature algorithms to negative 2 byte encodings: = -256 and -255 >> > - Added a public private ECDSA key pair turning the example = certificates into test vectors. An implementation can now create and = verify the example RFC 7925 certificates. >> >=20 >> > Cheers, >> > John >> >=20 >> > =EF=BB=BF-----Original Message----- >> > From: "internet-drafts@ietf.org " = > >> > Date: Wednesday, 2 December 2020 at 08:56 >> > To: G=C3=B6ran Selander >, G=C3=B6ran Selander = >, = Martin Furuhed >, Shahid Raza >, John Mattsson >, Joel Hoglund >, John Mattsson >, Joel H=C3=B6glund = > >> > Subject: New Version Notification for = draft-mattsson-cose-cbor-cert-compress-05.txt >> >=20 >> >=20 >> > A new version of I-D, draft-mattsson-cose-cbor-cert-compress-05.txt >> > has been successfully submitted by = =3D?utf-8?q?John_Preu=3DC3=3D9F_Mattsson?=3D and posted to the >> > IETF repository. >> >=20 >> > Name: draft-mattsson-cose-cbor-cert-compress >> > Revision: 05 >> > Title: CBOR Encoding of X.509 Certificates (CBOR = Certificates) >> > Document date: 2020-12-01 >> > Group: Individual Submission >> > Pages: 29 >> > URL: = https://www.ietf.org/archive/id/draft-mattsson-cose-cbor-cert-compress-05.= txt = >> > Status: = https://datatracker.ietf.org/doc/draft-mattsson-cose-cbor-cert-compress/ = = >> > Htmlized: = https://datatracker.ietf.org/doc/html/draft-mattsson-cose-cbor-cert-compre= ss = >> > Htmlized: = https://tools.ietf.org/html/draft-mattsson-cose-cbor-cert-compress-05 = >> > Diff: = https://www.ietf.org/rfcdiff?url2=3Ddraft-mattsson-cose-cbor-cert-compress= -05 = >> >=20 >> > Abstract: >> > This document specifies a CBOR encoding of X.509 certificates. = The >> > resulting certificates are called CBOR Certificates. The CBOR >> > encoding supports a large subset of RFC 5280, while at the same = time >> > significantly reduces the size of certificates compatible with = RFC >> > 7925 and IEEE 802.1AR (DevIDs). When used to re-encode DER = encoded >> > X.509 certificates, the CBOR encoding can in many cases reduce = the >> > size of RFC 7925 profiled certificates with over 50%. The CBOR >> > encoding can also be used encode "natively signed" CBOR = certificates, >> > which does not require re-encoding for the signature to be = verified. >> > The document also specifies COSE headers as well as a TLS = certificate >> > type for CBOR certificates. >> >=20 >> >=20 >> >=20 >> >=20 >> > Please note that it may take a couple of minutes from the time of = submission >> > until the htmlized version and diff are available at = tools.ietf.org. >> >=20 >> > The IETF Secretariat >> >=20 >> >=20 >> >=20 >> > _______________________________________________ >> > COSE mailing list >> > COSE@ietf.org >> > https://www.ietf.org/mailman/listinfo/cose = >> =20 >> _______________________________________________ >> COSE mailing list >> COSE@ietf.org >> https://www.ietf.org/mailman/listinfo/cose = >> =20 >> =20 > --=20 > Stefan Hristozov > Department Hardware Security > Fraunhofer Institute for Applied and Integrated Security AISEC > Lichtenbergstra=C3=9Fe 11, 85748 Garching near Munich, Germany > Tel. +49 89 32299 86 157 > stefan.hristozov@aisec.fraunhofer.de = > https://www.aisec.fraunhofer.de/ = ________________________________________= _______ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose = --Apple-Mail=_192E5AEA-3AD6-4C4D-A8F9-BEDACE93A77F Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi = Stefan,

First on the = implementation =E2=80=94 my understanding is that you=E2=80=99d have to = hash from the byte offset of the first byte of the CBOR encoded head of = cborCertificateType to the last byte of the Extensions to correctly = implement this. Since the cborCertificateType is the first item in = the sequence, its offset is zero, so that=E2=80=99s easy.

I=E2=80=99m not sure how = you=E2=80=99d use cbor_value_calculate_string_length since many of the = items in the TBSCertificate are not strings. Maybe you calculate the = length of the issuerSignatureValue and go back from the end? That = wouldn=E2=80=99t account for CBOR encoded head = of issuerSignatureValue = though.

So, I don=E2=80=99t understand how this works with tinyCBOR = or that it is even correct.

It would be good to see an implementation in Python or = Go or such to see if it's possible with those type of CBOR = decoders.


Second on the design =E2=80=94 I still believe this = design is counter to conventions used in CBOR for signing/hashing = data. I think the folks that designed COSE thought this issue = through.


(My first design of of EAT = did the hashing the way it is being done here. This was before COSE was = publishes as an RFC. The folks using an off-the-shelf Python CBOR = decoder had to hack that decoder to get the verification to work. Then = EAT switched to COSE and I came to understand the reasons COSE works as = it does.)

LL



On Dec 14, 2020, at 5:50 AM, Hristozov, = Stefan <stefan.hristozov@aisec.fraunhofer.de> wrote:

Hi Laurence,

I= am using the C library tinycbor [1] for my native CBOR certificate = decoder. 
During parsing the certificate I am calculating also an = offset from its beginning after each parsed element. Tinycbor provides a = function for getting the length of the byte or text string = cbor_value_calculate_string_length [2], which is helpful for = that.

Does this answer your = question?

Best regards,
Stefan


On Mon, 2020-12-14 at 13:18 +0000, G=C3=B6ran Selander = wrote:
Hi = Laurence,
 
I=E2=80=99m = aware of two implementation activities: by John (type 1) and by Stefan = (type 0).
 
G=C3=B6ran
 
 

On 2020-12-07, 23:02, "COSE" <cose-bounces@ietf.org> wrote:

I = don=E2=80=99t think it works very well at all to directly sign encoded = CBOR. It should be wrapped in a byte string.
 
In particular issuerSignatureValue = should probably be the signature over a byte string that contains an = encoded TBSCertificate. This is what COSE does.
 
The main reason for this is to allow = implementation with off-the-shelf CBOR encoders and decoders. =46rom = some that I=E2=80=99ve looked at and one I=E2=80=99ve written myself, = CBOR decoders don=E2=80=99t allow access a sub-part of the encoded CBOR = so it can be input into the hash. There would be no way to get just the = encoded bytes of the TBSCertificate out of the CBOR decoder unless you = went in and hacked its source code in a special way.
 
Has anyone implemented verification of = Natively Signed CBOR Certificates? What CBOR decoder was used? Maybe = I=E2=80=99m wrong about this?
 
I realize byte string wrapping TBSCertificate might cause = upheaval in the overall design because cborCertificateType would be = inside the byte string wrapping.
 
Another approach might be to just use COSE for Natively = Signed CBOR Certificates. The COSE payload would be a TBSCertificate. = COSE would take care of the byte string wrapping issues. This would = increase the on-the-wire size of the certificate by about 10 bytes, but = might decrease code size of the implementation by re use of a COSE = implementation.
 
LL
 
 
> On Dec 2, 2020, at 12:49 AM, John = Mattsson <john.mattsson=3D40ericsson.com@dmarc.ietf.org> = wrote:
> 
> Thanks again for all the good comment and discussions on = the list!
> 
> We have submitted -05. Changes are:
> 
> - Added reference to IEEE 802.1AR DevID and made = optimization for IEEE 802.1AR DevID.
> - Rephrased = "compress" in the whole document. We will change the file name = later.
> - Made it more clear that X.509 = version in included in the CBOR certificate type.
> - Omitted 'signature' instead of 'singatureAlgorithm'. = Now the algorithm comes just before the signature value.
> - Added support of emailAddress / IA5String in issuer = and subject. This was easy.
> - changed so = utf8Strings have a positive sign.
> - Change time to = unwrapped CBOR epoch time (~time). This saves 1 byte for time > = 2050
> - Added that the value = "99991231235959Z" (no expiration date) is encoded as CBOR null. This is = quite commonly used in IoT certificates. This saves 4 bytes when = used.
> - Use CDDL for CBOR OID as defined = in draft-ietf-cbor-tags-oid
> - Added CBOR encoding = for uthorityKeyIdentifier and subjectKeyIdentifier which are heavily = used by IEEE 802.1AR DevID (at least one of them are mandated depending = on type of cert).
> - Added optimization for the = hardwareModuleName type of otherName, which is mandatory to use in IEEE = 802.1AR DevID
> - Added CBOR encoding for = cRLDistributionPoints and authorityInfoAccess, which are both used in = basically all HTTPS certificates on the web.
> - Added support for registeredID. This was trivial and = registeredID is used e.g. by the GSMA eUICC PKI Certificate Policy (SGP = 14).
> - Added considerations for expert = reviewers.
> - Moved SHA-1 signature algorithms = to negative 2 byte encodings: -256 and -255
> - Added a public private ECDSA key pair turning the = example certificates into test vectors. An implementation can now create = and verify the example RFC 7925 certificates.
> 
> Cheers,
> John
> 
> =EF=BB=BF-----Original Message-----
> Date: Wednesday, 2 December 2020 at 08:56
> To: G=C3=B6ran Selander <goran.selander@ericsson.com>, G=C3=B6ran Selander = <goran.selander@ericsson.com>, Martin Furuhed <martin.furuhed@nexusgroup.com>, Shahid Raza <shahid.raza@ri.se>, John Mattsson <john.mattsson@ericsson.com>, Joel Hoglund <joel.hoglund@ri.se>, John = Mattsson <john.mattsson@ericsson.com>, Joel H=C3=B6glund <joel.hoglund@ri.se>
> Subject: New Version Notification for = draft-mattsson-cose-cbor-cert-compress-05.txt
> 
> 
> A new version of I-D, = draft-mattsson-cose-cbor-cert-compress-05.txt
> has been successfully submitted by = =3D?utf-8?q?John_Preu=3DC3=3D9F_Mattsson?=3D and posted to the
> IETF repository.
> 
> Name:         = draft-mattsson-cose-cbor-cert-compress
> Revision:     05
> = Title:           &n= bsp;    CBOR Encoding of X.509 Certificates (CBOR = Certificates)
> Document = date:        2020-12-01
> = Group:           &n= bsp;    Individual Submission
> = Pages:           &n= bsp;    29
> = URL:           &nbs= p;https://www.ietf.org/archive/id/draft-mattsson-cose-cbor-cert-c= ompress-05.txt
> = Status:         https://datatracker.ietf.org/doc/draft-mattsson-cose-cbor-cert-= compress/
> = Htmlized:       https://datatracker.ietf.org/doc/html/draft-mattsson-cose-cbor-= cert-compress
> = Htmlized:       https://tools.ietf.org/html/draft-mattsson-cose-cbor-cert-compr= ess-05
> = Diff:           https://www.ietf.org/rfcdiff?url2=3Ddraft-mattsson-cose-cbor-ce= rt-compress-05
> 
> Abstract:
>   This = document specifies a CBOR encoding of X.509 = certificates.  The
>   resulting = certificates are called CBOR Certificates.  The CBOR
>   encoding supports a large subset of RFC = 5280, while at the same time
>   = significantly reduces the size of certificates compatible with RFC
>   7925 and IEEE 802.1AR = (DevIDs).  When used to re-encode DER encoded
>   X.509 certificates, the CBOR encoding can in = many cases reduce the
>   size of = RFC 7925 profiled certificates with over 50%.  The CBOR
>   encoding can also be used encode "natively = signed" CBOR certificates,
>   which = does not require re-encoding for the signature to be verified.
>   The document also specifies COSE headers as = well as a TLS certificate
>   type for = CBOR certificates.
> 
> 
> 
> 
> Please note that it may take a couple of minutes from = the time of submission
> until the htmlized = version and diff are available at tools.ietf.org.
> 
> The IETF Secretariat
> 
> 
> 
> _______________________________________________
> COSE mailing list
> COSE@ietf.org
 
_______________________________________________
COSE mailing list
COSE@ietf.org
 
 
--
Stefan Hristozov
Department Hardware Security
Fraunhofer Institute for Applied and = Integrated Security AISEC
Lichtenbergstra=C3=9Fe 11, 85748 Garching near Munich, = Germany
Tel. +49 89 32299 86 = 157
stefan.hristozov@aisec.fraunhofer.de
https://www.aisec.fraunhofer.de/
_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose

= --Apple-Mail=_192E5AEA-3AD6-4C4D-A8F9-BEDACE93A77F-- From nobody Mon Dec 14 12:53:41 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F19D03A0D84 for ; Mon, 14 Dec 2020 12:53:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.003 X-Spam-Level: X-Spam-Status: No, score=0.003 tagged_above=-999 required=5 tests=[HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e4gUtR3yn5kb for ; Mon, 14 Dec 2020 12:53:38 -0800 (PST) Received: from p3plsmtpa12-03.prod.phx3.secureserver.net (p3plsmtpa12-03.prod.phx3.secureserver.net [68.178.252.232]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E59573A0D94 for ; Mon, 14 Dec 2020 12:53:37 -0800 (PST) Received: from [192.168.1.81] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id ouqfk653fomieouqfkRs1Q; Mon, 14 Dec 2020 13:53:37 -0700 X-CMAE-Analysis: v=2.4 cv=FfLyeLy6 c=1 sm=1 tr=0 ts=5fd7d0d1 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=48vgC7mUAAAA:8 a=jmHx7cGLxN9LdrDVz28A:9 a=QEXdDO2ut3YA:10 a=jt53NZwPl8Kz3fWVWFkA:9 a=RdAx-x6kx4Ms4A_q:21 a=_W_S_7VecoQA:10 a=w1C3t2QeGrPiZgrLijVG:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: <021CCA74-7A0D-4E29-BCF2-2444020E13D1@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_673827CA-61DA-4700-AB14-D3422DF36EE5" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) Date: Mon, 14 Dec 2020 12:53:36 -0800 In-Reply-To: Cc: Benjamin Kaduk , Cose Chairs Wg , draft-ietf-cose-x509@ietf.org, The IESG , cose To: Ivaylo Petrov References: <160330309778.31613.17554753154209688241@ietfa.amsl.com> X-Mailer: Apple Mail (2.3445.104.17) X-CMAE-Envelope: MS4xfC4c+Ol+hZxC3E9TjSH79uRWUw5TB6xZ3X9bV01u2Zc6vtVSvhw9fVAZVGvNesy1+mXzwpH5zKGKHbv47m0/1uvKFb2/c3nCEZVJNd6QcOLSlqSNvV5Y DFPlyYia+p01Z9Ye/VvjveOYg5HoJjS2s3XQGfPhEkZPu2saczn0GW1e5+uxUlNa5vrZmvTDlyKtv7Xd0LPF31+2oEoc8GABJTeWJJjObxYCFpT13X5+u7XG UIyuzISdCBmr5TaHmamjt66RAiCfmJvo35KGTo1uIbfO/UTdLcw0pvCeeldFJUhAx67jlOPTeT0b5go9jdsTB/eq2DRyqJKaQiCgbkL2fHI= Archived-At: Subject: Re: [COSE] Benjamin Kaduk's Yes on draft-ietf-cose-x509-07: (with COMMENT) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Dec 2020 20:53:40 -0000 --Apple-Mail=_673827CA-61DA-4700-AB14-D3422DF36EE5 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Dec 13, 2020, at 2:10 PM, Ivaylo Petrov wrote: >=20 >=20 > x5chain: This header parameter contains an ordered array of X.509 > certificates. The certificates are to be ordered starting with > the certificate containing the end-entity key followed by the > certificate which signed it and so on. There is no requirement > for the entire chain to be present in the element if there is > reason to believe that the relying party already has, or can > locate the missing certificates. This means that the relying >=20 > Are the missing certificates required to be contiguous and contain the > root? That is, is it okay to leave a gap in the middle of the chain? >=20 > [IP]: My reading of the text is that it would not make sense to have a = gap in the middle. My understanding is that each certificate in the = chain after the first one should sign the one that came before it. I agree with Ivaylo on this. JWS is clear about this for the equivalent = x5c parameter: https://tools.ietf.org/html/rfc7515#section-4.1.6 >=20 > [still x5chain] > This header parameter allows for a single X.509 certificate or a > chain of X.509 certificates to be carried in the message. >=20 > It's slightly surprising that the "chain" structure allows for a = single > certificate not in an array container; it might be intuitively more > simple to just always use the array encoding for a chain, even a > one-element chain. But I'm sure there's some reason to allow it, too, > just not one that I thought of right away. >=20 > [IP]: I can only see this as saving us 1 byte, but probably there are = other reasons as well. Seems like it would be less code if it was always an array and more = inline with JWS. > [IP]: I like this wording and I added it as you suggested it. >=20 > x5u: This header parameter provides the ability to identify an = X.509 > [...] > As this header parameter implies a trust relationship, the > attribute MUST be in the protected attribute bucket. >=20 > In light of the secdir reviewer's comments, perhaps "a trust > relationship between the party generating the x5u parameter and the > party hosting the referred-to resource" would help? >=20 > [IP]: Done. Not sure where everyone=E2=80=99s thinking is about replicating section = 6 from JWS . As you know = I=E2=80=99ve mentioned this before and I think it is necessary. LL --Apple-Mail=_673827CA-61DA-4700-AB14-D3422DF36EE5 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
On = Dec 13, 2020, at 2:10 PM, Ivaylo Petrov <ivaylo@ackl.io> = wrote:


   x5chain:  This = header parameter contains an ordered array of X.509
  =     certificates.  The = certificates are to be ordered starting with
    =   the certificate = containing the end-entity key followed by the
  =     certificate which signed it = and so on.  There is no requirement
    =   for the entire = chain to be present in the element if there is
  =     reason = to believe that the relying party already has, or can
 =     locate = the missing certificates.  This means that the relying

Are the missing certificates required to be = contiguous and contain the
root?  That is, is it okay = to leave a gap in the middle of the chain?

[IP]: My reading of the text is that it would not make sense to = have a gap in the middle. My understanding is that each certificate in = the chain after the first one should sign the one that came before = it.

I = agree with Ivaylo on this. JWS is clear about this for the equivalent = x5c parameter: https://tools.ietf.org/html/rfc7515#section-4.1.6



   [still x5chain]
  =     This = header parameter allows for a single X.509 certificate or a
      chain of X.509 certificates = to be carried in the message.

It's slightly = surprising that the "chain" structure allows for a single
certificate not in an array container; it might be = intuitively more
simple to just always use the array = encoding for a chain, even a
one-element chain.  But = I'm sure there's some reason to allow it, too,
just not = one that I thought of right away.

[IP]: I can only see this as saving us 1 byte, but probably there = are other reasons as well.

Seems like it would be less code if it was always an = array and more inline with JWS.


[IP]: I like this wording = and I added it as you suggested it.

  =  x5u:  This header parameter provides the ability to identify = an X.509
   [...]
    =   As this header parameter implies a = trust relationship, the
      attribute MUST be in the = protected attribute bucket.

In light of the = secdir reviewer's comments, perhaps "a trust
relationship between the party generating the x5u parameter and the
party hosting the referred-to resource" would help?

[IP]: = Done.

Not = sure where everyone=E2=80=99s thinking is about replicating section = 6 from JWS. As you know I=E2=80=99ve mentioned this before and I = think it is necessary.

LL


= --Apple-Mail=_673827CA-61DA-4700-AB14-D3422DF36EE5-- From nobody Mon Dec 14 16:48:59 2020 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 838ED3A11FD; Mon, 14 Dec 2020 16:48:57 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.23.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: cose@ietf.org Message-ID: <160799333747.4150.5490601827881683787@ietfa.amsl.com> Date: Mon, 14 Dec 2020 16:48:57 -0800 Archived-At: Subject: [COSE] I-D Action: draft-ietf-cose-x509-08.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Dec 2020 00:48:58 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption WG of the IETF. Title : CBOR Object Signing and Encryption (COSE): Header parameters for carrying and referencing X.509 certificates Author : Jim Schaad Filename : draft-ietf-cose-x509-08.txt Pages : 11 Date : 2020-12-13 Abstract: The CBOR Signing And Encrypted Message (COSE) structure uses references to keys in general. For some algorithms, additional properties are defined which carry parameters relating to keys as needed. The COSE Key structure is used for transporting keys outside of COSE messages. This document extends the way that keys can be identified and transported by providing attributes that refer to or contain X.509 certificates. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-x509/ There is also an HTML version available at: https://www.ietf.org/archive/id/draft-ietf-cose-x509-08.html A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-x509-08 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Dec 15 00:42:04 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 004BE3A0E70; Tue, 15 Dec 2020 00:42:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.202 X-Spam-Level: X-Spam-Status: No, score=-0.202 tagged_above=-999 required=5 tests=[DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id c0vJVSQ5eT52; Tue, 15 Dec 2020 00:41:58 -0800 (PST) Received: from EUR05-AM6-obe.outbound.protection.outlook.com (mail-am6eur05on2056.outbound.protection.outlook.com [40.107.22.56]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B84B33A0E6E; Tue, 15 Dec 2020 00:41:57 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=G+j1gthYG+MVvZQpGFbPI07Wmbwf/SuHCWZW+MM5YWzAZUD0eYEE+NNGv2HPpgd9Qde90zjOmJLuUdcJLFC5zgMfham9dTTHv6GRkiBqooJK21iwZjh77yWi8wnU0DcN4XCxcyNpNNqIs4/Wnbc6SMw+b+qr1uWPQMAKSXVxRyRP8AI5spx7b5g54MCaE8KKOmbbc1g9FN71OWqZQ+ZK/4sfPW+Nms9nYw1JpbjWXyXj7P0ZgYZ8AnowT1CO+BRA5LVxAISa+I0mlVQSSCo0DJUMYdsnPYsDiJymtemZO8SbmXyH+G2up8J1i9+BGzULMKcgJMt10mY2CHYXXEGl3w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ss3gj2+cH5i1+QjsVefzQFbdQzkAGkOgqu1e+gNJAf8=; b=ByFiXwpCIzSClDnnd11gnJKZqjnGykpaPMIG0q2eSXMrKKJAT2p4wZPbcmKkCgczh+d0RUiiYdfRBW5vbjONJ51SuG3e52XahFF0Vr45U5IsU4oE36SH8/oYiy6xcPQwY2ckgiEMxR6q18wTnQmYB0BLkM/Gamw38n4Mj9zMHSwUSCEoMdq4xsR6fSd/kCgx8JmRtP8tDoRySx12jBEkGNlIWsL5Qg7lYe47pw3wv9juPKboDa3RWuAfYiAVlK0F486saGC0h1qBwHRiEPDFM68XHquPpIQ5OVZXgUu5ziNvfZ/HesJoUqGL4sDKeHt9pTutT41NMqChn5aJFxIixw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=ss3gj2+cH5i1+QjsVefzQFbdQzkAGkOgqu1e+gNJAf8=; b=ZBCM3XVsOdd4r/se2G68xS8becdzrdHjrPNe+dQpQ+zfpk9hLuIjRwFx5QMpRjvC3LGx9DB20QwudHKWp/nQVbbU4AI21gBWCUlCUoCFQffuehw9jH2d0l2jWFxr5RDn5T0mSTb66E21iflXC+YBtpM0Bfxh+wIZyiBvbXvE0ns= Received: from HE1PR0702MB3772.eurprd07.prod.outlook.com (2603:10a6:7:8e::14) by HE1PR0701MB2794.eurprd07.prod.outlook.com (2603:10a6:3:9a::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3676.12; Tue, 15 Dec 2020 08:41:54 +0000 Received: from HE1PR0702MB3772.eurprd07.prod.outlook.com ([fe80::8cd:496:65de:4ace]) by HE1PR0702MB3772.eurprd07.prod.outlook.com ([fe80::8cd:496:65de:4ace%7]) with mapi id 15.20.3676.011; Tue, 15 Dec 2020 08:41:54 +0000 From: Magnus Westerlund To: "ivaylo@ackl.io" , "barryleiba@computer.org" CC: "cose-chairs@ietf.org" , "iesg@ietf.org" , "cose@ietf.org" , "draft-ietf-cose-x509@ietf.org" Thread-Topic: Magnus Westerlund's Discuss on draft-ietf-cose-x509-07: (with DISCUSS) Thread-Index: AQHWqG1w4qXlj35TB0ma5Sa+Dbc3y6n16UiAgAJCIgA= Date: Tue, 15 Dec 2020 08:41:53 +0000 Message-ID: <19db903bd17f7aaf0d0bb31d0271f81eeca1028f.camel@ericsson.com> References: <160336909147.3199.13133404901002626604@ietfa.amsl.com> In-Reply-To: Accept-Language: sv-SE, en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-mailer: Evolution 3.28.5-0ubuntu0.18.04.2 authentication-results: ackl.io; dkim=none (message not signed) header.d=none;ackl.io; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [158.174.130.243] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: affe9612-5654-42bd-5859-08d8a0d54646 x-ms-traffictypediagnostic: HE1PR0701MB2794: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR0702MB3772.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(39860400002)(136003)(376002)(346002)(396003)(366004)(26005)(2616005)(99936003)(8676002)(4326008)(316002)(6506007)(5660300002)(2906002)(8936002)(36756003)(53546011)(83380400001)(110136005)(66946007)(66446008)(64756008)(66476007)(76116006)(66616009)(86362001)(54906003)(6486002)(6512007)(186003)(44832011)(4001150100001)(478600001)(966005)(71200400001)(66556008)(99106002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?ak9KUUt5TVNZZ3FGam1VTmFBNkJCcktGVVdxWURlYVMwNlFBY1RsNlNHbDY1?= =?utf-8?B?bEZINTQ3WXlxYTRjaHhsbTN6NERuaGh4OEU3amZvVUV1WGJxOUo4K3A2Z1pG?= =?utf-8?B?MThJNllUQUQ5MmtKeUNRb2tFaXcrcXA5YzNiZytNbUUvS1o0OURiSE5sc2Ro?= =?utf-8?B?YkZDRC83a2o4ZExhd3RLaFRlbHhIQTQrdFdRM2k1a3lyeW9kTjh6eDRyS20y?= =?utf-8?B?dWxnQ3BrbE91WlZhU1lYcjI4VFBRWHI0YWx5ZVVocjlNcDN6b3ZqTjNGRVBo?= =?utf-8?B?blZqN0JXYnBYUFMrNTI2MytGWkFoT3pET3hrOEtBMzRXQy9kajNoZ3lWZFhx?= =?utf-8?B?K1lkZkVwNXVkclhuZjZ6c3huT3dRaXIrOWRJVzJnT1R4Z0JWeEo0d3A0V29r?= =?utf-8?B?N2J4a2JvNjRVMEFlZWxSZEtTQXZzQWtRL245N0w4K3ZnSXBmd1VYVXNKaG9B?= =?utf-8?B?a0d6WTF1NCtuQkZMVThiL2s4ckp3OVdONVc2TnJ2cGxldFN5anZQc0dPekVR?= =?utf-8?B?QnpQYklWSGVnYWZOdmNSUnhiNTRhQ2h1UDZpMWwwKzd6QkJaNWdNOEswVWhW?= =?utf-8?B?eUxWdldGVXZjRHNTa05IVDNaWU1peWV0RXFvTk1Rb0U0Qy9qS04rbi9MQ2Zv?= =?utf-8?B?WTV1dG42amlMelJpWDdwazhqV2dweFRuNk5iclhqMk8wS21YaW5QY1lGdjhE?= =?utf-8?B?aXZSQVEvci9nT3FHV3hvaGxQSStDVk1kS2hQQ2hRemNuV2ZnWTkyYmFRbjl4?= =?utf-8?B?NEdQdUxEZGZ6a29MeU96ekZhOTg1MnEvbmRPNHRSVkQzbkIyVVh4cVVUN0Fv?= =?utf-8?B?cmYxaExVaUJnaTh1SUFFMzNuS0ljdjFSdXlRUnI3ZTZPcmhzQlB3dEhlcS9i?= =?utf-8?B?UWxsOEpvNTBrVGF2T0EzM2sxOGVkUW9PTmRZT2hlb2NmSWNSMUR5QkN2clNY?= =?utf-8?B?cXA0czNIbHJuSytkTDRObGxtZHdJcXhsTENlNGRFN09FOFo4am5oUkttdVFQ?= =?utf-8?B?U2V6ZzdHejhTYkJNV2UzakpXdzN1aDJ6cTBRWVhxc1V1RVQzZHJKa3o3dnlG?= =?utf-8?B?TXdjM0ZLb1JnTUxkYWFRQnZxSXp5WkVXdW5yYjgwQkd3aVp6T0xrQW9MTisv?= =?utf-8?B?NjRTUDRnbVFWTjhBSHNlYStiTzNlZWt4THNMQVlla3VnY2ZqS3czV0NYYkFV?= =?utf-8?B?anFzOVNERU1OYUh6S0htSWNYTDIxMTFCckVjQ1ZLR25NV0UyaFpzaGhXU3J2?= =?utf-8?B?alorbk5ISFdGeTFrQ0dzWUVYaFg1YlhJS2ZhUWRQRGUwZEsxTnI4bllkdXlm?= =?utf-8?Q?8RP1f+ZyyAlu1tXzOsU5krWJ1rSl8syyOr?= x-ms-exchange-transport-forked: True Content-Type: multipart/signed; micalg="sha-256"; protocol="application/x-pkcs7-signature"; boundary="=-fqoTHKMbsdceL0J9OOHo" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: HE1PR0702MB3772.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: affe9612-5654-42bd-5859-08d8a0d54646 X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Dec 2020 08:41:53.9509 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: wUhlmEduzv24GpRzLpv+CEGFLpkHP+lt6DXljuMTZYF/bRQKmYNl2cB9/Wd7SGdPmdNwJrnAS7sDK5/3jFMU17W5inaxBxL64xumg6LCgIM= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR0701MB2794 Archived-At: Subject: Re: [COSE] Magnus Westerlund's Discuss on draft-ietf-cose-x509-07: (with DISCUSS) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Dec 2020 08:42:00 -0000 --=-fqoTHKMbsdceL0J9OOHo Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi, It sounds good that you are making progress. Barry, do you plan to make this an returing item to the IESG telechat when = it is ready due to its elevated status? Cheers Magnus On Sun, 2020-12-13 at 23:12 +0100, Ivaylo Petrov wrote: > Hello Magnus, >=20 > Thank you for your review and apologies for the delay! I have changed the > document status as you requested. The change could be seen in commitdf4c5= 0d . > I have some technical difficulties and after they are resolved, I will up= load > a new version of the draft. After that I will work with Barry Leiba to ha= ve > the new IETF last call. >=20 > Best regards, > Ivaylo >=20 >=20 > On Thu, Oct 22, 2020 at 2:18 PM Magnus Westerlund via Datatracker < > noreply@ietf.org> wrote: > > Magnus Westerlund has entered the following ballot position for > > draft-ietf-cose-x509-07: Discuss > >=20 > > When responding, please keep the subject line intact and reply to all > > email addresses included in the To and CC lines. (Feel free to cut this > > introductory paragraph, however.) > >=20 > >=20 > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.ht= ml > > for more information about IESG DISCUSS and COMMENT positions. > >=20 > >=20 > > The document, along with other ballot positions, can be found here: > > https://datatracker.ietf.org/doc/draft-ietf-cose-x509/ > >=20 > >=20 > >=20 > > ---------------------------------------------------------------------- > > DISCUSS: > > ---------------------------------------------------------------------- > >=20 > > I think the topic should be fairly easily to resolve one way or another= . > > However, even after having read the reply to Marin's comment I don't th= ink > > this > > document is published with the right status. > >=20 > > - The document defines new CBOR attributes, that is standard track work= as > > it > > comes out as consensus document from a IETF WG. - It does not define or > > document crypto algorithm just refer to existing ones. - The charter it= em > > might > > have been reasonable as informational if existing attributes could have= been > > used. With the choice to define new attributes I think this has entered > > standards track. - The status of the document I think will also affect = the > > value that IANA might assign to these COSE Header Parameters. > >=20 > > If there are additional considerations I am happy to learn about them. > >=20 > > Else, I would propose a change of status to proposed standard and redo = the > > IETF > > last call. > >=20 > >=20 > >=20 > >=20 > >=20 --=-fqoTHKMbsdceL0J9OOHo Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Disposition: attachment; filename="smime.p7s" Content-Transfer-Encoding: base64 MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCCErYw ggX0MIID3KADAgECAg8BdlE9InYZOYLl1zGep4IwDQYJKoZIhvcNAQELBQAwRzELMAkGA1UEBhMC U0UxETAPBgNVBAoMCEVyaWNzc29uMSUwIwYDVQQDDBxFcmljc3NvbiBOTCBJbmRpdmlkdWFsIENB IHYzMB4XDTIwMTIxMTA5NTg0OVoXDTIzMTIxMjA5NTg0OVowXjERMA8GA1UECgwIRXJpY3Nzb24x GjAYBgNVBAMMEU1hZ251cyBXZXN0ZXJsdW5kMS0wKwYJKoZIhvcNAQkBFh5tYWdudXMud2VzdGVy bHVuZEBlcmljc3Nvbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIT6U9ddUp UCEryIA27xtF8WsRAIfc5jBavfu0OGDmwITYYRD2PaMEdEK+I4dqz0f6xcCrDnBk2Xj+JxjhaRkq TAifJZima9WE2JoI/uq8UsS2HJWlhspAwKx1osARgtRiMjRZZyyfiRZLbgXHWYpnTt3i9QsuX/uo 9oZFWpDCbZee4Il9uldsUcuBLZx2PyZvBvC8KCUaBXsZX6bwV7hssRVn+BgFCuEievJMx0khTRVh i9goObxu5Jl44RtwbZNYB1UE1IzRWEZw+b3cEvXiQjPl2e3ytMZSmhy+IaKmjxES6ODiuh51KAcm PZfZIaX2djmD76YGi+ETmnb8Xm3dAgMBAAGjggHEMIIBwDAfBgNVHSMEGDAWgBQcexmel5x2rCA9 2NzjkWrj2y2mUzAdBgNVHQ4EFgQUICO/88T0EQvEUm5+HVt/d9Mm+Z8wDgYDVR0PAQH/BAQDAgWg MFUGA1UdIAROMEwwSgYMKwYBBAGCDwIDAQESMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vcmVwb3Np dG9yeS50cnVzdC50ZWxpYXNvbmVyYS5jb20vQ1BTMCkGA1UdEQQiMCCBHm1hZ251cy53ZXN0ZXJs dW5kQGVyaWNzc29uLmNvbTBIBgNVHR8EQTA/MD2gO6A5hjdodHRwOi8vY3JsLnRydXN0LnRlbGlh LmNvbS9lcmljc3Nvbm5saW5kaXZpZHVhbGNhdjMuY3JsMB0GA1UdJQQWMBQGCCsGAQUFBwMEBggr BgEFBQcDAjCBggYIKwYBBQUHAQEEdjB0MCgGCCsGAQUFBzABhhxodHRwOi8vb2NzcDIudHJ1c3Qu dGVsaWEuY29tMEgGCCsGAQUFBzAChjxodHRwOi8vY2EudHJ1c3QudGVsaWFzb25lcmEuY29tL2Vy aWNzc29ubmxpbmRpdmlkdWFsY2F2My5jZXIwDQYJKoZIhvcNAQELBQADggIBANRZXQy+lUW97uaL uApOixnDKLpUoz+N/5Owd/9illmbxQDEY1/pPs4KJSvw88p+F3bmOzb+fLUNa6Mi/2Tw83FzEVmO 3RqzKtca+I9GDpRQ8oWL7hrUPJoNacidSZLmAP4L4kwHIhvGNX4f1c/oB4fAkP/xZsAAxYi7nKxd XA2n/KMWNkezyB9BSsD8ZOS4pWU8UaZjd5r0fzqM5zQbU4EPqHa8jFMSMz1UrYXPKKxl6E4WA3TE w1oLjcli0NWGQHyQ+3Kh7fe6zPoXfLd/2EQjr2o76ssgoqd2V1Mx5TRHdUyxjIMPEOVYpvcerNUB hEBkaOQ9FugYcMhMc8BF7nQZq+hsL/T7idg4gE2sEfNdK9RBf/EVH10GMrmbadqTycztD1gUL3dV Qxik4TCMxIctt9XqtTGHaMewZLQAXp/sHWlU/vmz9brcuzYQ9YVd5hTendGMUyGhWPV/KvxouKPK zdrGeEqUQCeBwWgQASQNOrpTzMJwZAV/Ww3ExQCjHvflvUQzVuU0sC6AEVkgqMATIXS6h6rjLL31 pjt2JV84XRjF5afYkcRIHTsrtcoWeFtOu/GpZNhtq+tde0QvnkSsjczMWU0gKk0hXBmXwEGUimuD Vq/Wvr0mr18d9mKA6xPNQOfn/VL5CWXa11OtOjj8WsTy3XUpyJ6dc9Z72TmKMIIF9DCCA9ygAwIB AgIPAXZRPSJ2GTmC5dcxnqeCMA0GCSqGSIb3DQEBCwUAMEcxCzAJBgNVBAYTAlNFMREwDwYDVQQK DAhFcmljc3NvbjElMCMGA1UEAwwcRXJpY3Nzb24gTkwgSW5kaXZpZHVhbCBDQSB2MzAeFw0yMDEy MTEwOTU4NDlaFw0yMzEyMTIwOTU4NDlaMF4xETAPBgNVBAoMCEVyaWNzc29uMRowGAYDVQQDDBFN YWdudXMgV2VzdGVybHVuZDEtMCsGCSqGSIb3DQEJARYebWFnbnVzLndlc3Rlcmx1bmRAZXJpY3Nz b24uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE+lPXXVKVAhK8iANu8bRfFr EQCH3OYwWr37tDhg5sCE2GEQ9j2jBHRCviOHas9H+sXAqw5wZNl4/icY4WkZKkwInyWYpmvVhNia CP7qvFLEthyVpYbKQMCsdaLAEYLUYjI0WWcsn4kWS24Fx1mKZ07d4vULLl/7qPaGRVqQwm2XnuCJ fbpXbFHLgS2cdj8mbwbwvCglGgV7GV+m8Fe4bLEVZ/gYBQrhInryTMdJIU0VYYvYKDm8buSZeOEb cG2TWAdVBNSM0VhGcPm93BL14kIz5dnt8rTGUpocviGipo8REujg4roedSgHJj2X2SGl9nY5g++m BovhE5p2/F5t3QIDAQABo4IBxDCCAcAwHwYDVR0jBBgwFoAUHHsZnpecdqwgPdjc45Fq49stplMw HQYDVR0OBBYEFCAjv/PE9BELxFJufh1bf3fTJvmfMA4GA1UdDwEB/wQEAwIFoDBVBgNVHSAETjBM MEoGDCsGAQQBgg8CAwEBEjA6MDgGCCsGAQUFBwIBFixodHRwczovL3JlcG9zaXRvcnkudHJ1c3Qu dGVsaWFzb25lcmEuY29tL0NQUzApBgNVHREEIjAggR5tYWdudXMud2VzdGVybHVuZEBlcmljc3Nv bi5jb20wSAYDVR0fBEEwPzA9oDugOYY3aHR0cDovL2NybC50cnVzdC50ZWxpYS5jb20vZXJpY3Nz b25ubGluZGl2aWR1YWxjYXYzLmNybDAdBgNVHSUEFjAUBggrBgEFBQcDBAYIKwYBBQUHAwIwgYIG CCsGAQUFBwEBBHYwdDAoBggrBgEFBQcwAYYcaHR0cDovL29jc3AyLnRydXN0LnRlbGlhLmNvbTBI BggrBgEFBQcwAoY8aHR0cDovL2NhLnRydXN0LnRlbGlhc29uZXJhLmNvbS9lcmljc3Nvbm5saW5k aXZpZHVhbGNhdjMuY2VyMA0GCSqGSIb3DQEBCwUAA4ICAQDUWV0MvpVFve7mi7gKTosZwyi6VKM/ jf+TsHf/YpZZm8UAxGNf6T7OCiUr8PPKfhd25js2/ny1DWujIv9k8PNxcxFZjt0asyrXGviPRg6U UPKFi+4a1DyaDWnInUmS5gD+C+JMByIbxjV+H9XP6AeHwJD/8WbAAMWIu5ysXVwNp/yjFjZHs8gf QUrA/GTkuKVlPFGmY3ea9H86jOc0G1OBD6h2vIxTEjM9VK2FzyisZehOFgN0xMNaC43JYtDVhkB8 kPtyoe33usz6F3y3f9hEI69qO+rLIKKndldTMeU0R3VMsYyDDxDlWKb3HqzVAYRAZGjkPRboGHDI THPARe50GavobC/0+4nYOIBNrBHzXSvUQX/xFR9dBjK5m2nak8nM7Q9YFC93VUMYpOEwjMSHLbfV 6rUxh2jHsGS0AF6f7B1pVP75s/W63Ls2EPWFXeYU3p3RjFMhoVj1fyr8aLijys3axnhKlEAngcFo EAEkDTq6U8zCcGQFf1sNxMUAox735b1EM1blNLAugBFZIKjAEyF0uoeq4yy99aY7diVfOF0YxeWn 2JHESB07K7XKFnhbTrvxqWTYbavrXXtEL55ErI3MzFlNICpNIVwZl8BBlIprg1av1r69Jq9fHfZi gOsTzUDn5/1S+Qll2tdTrTo4/FrE8t11KcienXPWe9k5ijCCBsIwggSqoAMCAQICEFO4foPhnJko k7CbSRzsuOswDQYJKoZIhvcNAQELBQAwNzEUMBIGA1UECgwLVGVsaWFTb25lcmExHzAdBgNVBAMM FlRlbGlhU29uZXJhIFJvb3QgQ0EgdjEwHhcNMTUxMDI3MTIxNjQ2WhcNMjUxMDI3MTIxNjQ2WjBH MQswCQYDVQQGEwJTRTERMA8GA1UECgwIRXJpY3Nzb24xJTAjBgNVBAMMHEVyaWNzc29uIE5MIElu ZGl2aWR1YWwgQ0EgdjMwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDs8t8AALhQ8qe7 2FS3xpP348GqO9TDRjS0s85eQ7Y0LTLZdmSz2cl+lYqs0zfSTm+7meisbhkqUXkL7fFzoe4iIZCh /VuYUaW407CZlDCXes4n4TqTSuoklN6uOPhY7EC9ZVbXILlLhRummTdDdxhVW4Leo0awEhfLf98M vWxzwCHzMj8m6YOmNjx+f9TcJE3qaA0piuvSxlfpVdiCulPTlmsmV2RSBSAwqBshZYRcQBIDfqmd vkaoP9EzNKAh7yjthC0hpgHZyZMIs0eNo4v2PUmE0rhu+Zs0nujnwhljPA2/8b8v9tGixD1zbtT7 zoM2Ot1menJpFp4zJVSfdKVgtoWqg5t2H/E0XY1LwJez89W07nscEocyBmpC+zJAmKxKhzEWqIyP 1UrZaEIFu+hO+s0Nm8sOUMa4TlG4rAUikc5U5TmUIGBRQGxulYhfAzqSYf8oLUMLky1DOa9eRu3s p0FdQDEzQlnF/h1L4AK1MOkX1vS+fLgOvBo5LRU1fLPUZQ7FKrDXC6nl2ldvEtljHWstGBmqv25a EvAA+yrrplCh/kYvSBjvZibz9Obbwx4yqS77/NHN1iyZyVP2s52B2BLdvo4yhzk6nRk8S/8zHaUU kBUrrvijPDaGK5FNVSaioGvkC7IKioITKffYLtT9XuirKrHlh3VzkazG46pAVwIDAQABo4IBuDCC AbQwgYoGCCsGAQUFBwEBBH4wfDAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AudHJ1c3QudGVsaWFz b25lcmEuY29tMEsGCCsGAQUFBzAChj9odHRwOi8vcmVwb3NpdG9yeS50cnVzdC50ZWxpYXNvbmVy YS5jb20vdGVsaWFzb25lcmFyb290Y2F2MS5jZXIwEgYDVR0TAQH/BAgwBgEB/wIBADBVBgNVHSAE TjBMMEoGDCsGAQQBgg8CAwEBAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3JlcG9zaXRvcnkudHJ1 c3QudGVsaWFzb25lcmEuY29tL0NQUzBLBgNVHR8ERDBCMECgPqA8hjpodHRwOi8vY3JsLTMudHJ1 c3QudGVsaWFzb25lcmEuY29tL3RlbGlhc29uZXJhcm9vdGNhdjEuY3JsMB0GA1UdJQQWMBQGCCsG AQUFBwMCBggrBgEFBQcDBDAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFBx7GZ6XnHasID3Y3OOR auPbLaZTMB8GA1UdIwQYMBaAFPCPWTgAs/WPmpYM1ev6e6oX6BMSMA0GCSqGSIb3DQEBCwUAA4IC AQBQWGvx1Yw7tC6rV0PIjKfDyxaanIX+NZLEGOkdQLKGW2gVLtDUJQEPRs5QtaZiObNHCZ7mmSNM Vek4lkt/0dqfVIFutVw/QkyFGwC99ZmNwXSX9z+OoMyoEBHGvw5RY6vRlZrj0uKvdASzYL4KMaB7 m3NwurNDmmNbG52suRIZ76wBOEOddRZcZiTy50ZkBqYnnl2t3D3oBX2NZCQysshUcqRdUbkS13HT CIChMuTV9W0tzPXUOJoJlJlU9nd91IikhGEOrPwfixWms+C8sF0r9qN1uJGx6ELPOiFrLfNtcMNM MbAqRHwpSLxe3wcNkJGxv9T8LswLi1UrRIQ85AKjqzBnLSsjRGgbMgJ+xKtngmvEA155JmoKfUD7 DRbP6Kp14/Y9XFbR/WuDj84bYNKXe4HdDc1P+UMYm16m2L6LkIIoRlx0A5mi+K7jewuGqzFKkaPN mJ0RLCi+4d4/47Zs3DC3PUNOxdOEEHf4kkdWOaSIuj3TQYhNv+LsgF0uijiBmaz2zUFDa2bcIkKa kDZfAFM4HoHz8K2BZRaHKWhd3dZua/tlSiqokUFX2DxmHmZ1n5HM9OiaAIXP/Zo2x10j/Yb1mM3i 0bqGahxlHYzl/QyEG/dujp3lewuVjCI0mPDkZGphvxyqp4Jo8qS94EnOqBvxOgftYug7OY9EKY+W kDGCAsowggLGAgEBMFowRzELMAkGA1UEBhMCU0UxETAPBgNVBAoMCEVyaWNzc29uMSUwIwYDVQQD DBxFcmljc3NvbiBOTCBJbmRpdmlkdWFsIENBIHYzAg8BdlE9InYZOYLl1zGep4IwDQYJYIZIAWUD BAIBBQCgggFBMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTIwMTIx NTA4NDE1MlowLwYJKoZIhvcNAQkEMSIEIMlRHn5kaq/a/yHItipo0AzFdXryvrtKa4PANv2ss3Om MGkGCSsGAQQBgjcQBDFcMFowRzELMAkGA1UEBhMCU0UxETAPBgNVBAoMCEVyaWNzc29uMSUwIwYD VQQDDBxFcmljc3NvbiBOTCBJbmRpdmlkdWFsIENBIHYzAg8BdlE9InYZOYLl1zGep4IwawYLKoZI hvcNAQkQAgsxXKBaMEcxCzAJBgNVBAYTAlNFMREwDwYDVQQKDAhFcmljc3NvbjElMCMGA1UEAwwc RXJpY3Nzb24gTkwgSW5kaXZpZHVhbCBDQSB2MwIPAXZRPSJ2GTmC5dcxnqeCMA0GCSqGSIb3DQEB AQUABIIBAG0/5Q1NEsnf1DFoLcAPVdVVHO5dU7KnpaZSZt3bNK+mHTuZH2PrSe3wV+ch5zNPQUi2 P+bVTlFNu8Yk73Yx0WZA7kVmqTvXNO+cbrKaz7AwKDT5j6p7PuwZWxyq89F3n2aPW+RqC5GG20Ug 3XwdqrkvnacnDrhvY5djEkRe17jKHOUkjuSNkcxE2MGY4UE2o9fz8P+nJUngdN5lqNxggslz0Uc/ 5KjgQOr3xYMb02Prj9qSUWvyJIWklJQNTOJeAhq93kRlEbxkx7c4OwiBxX/nvjLXorlbtvkgXadp G73NQxTcqngRGbRmEBBCgRQO9NIRteFyWHvMmnq0Z41KiuQAAAAAAAA= --=-fqoTHKMbsdceL0J9OOHo-- From nobody Tue Dec 15 03:19:23 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F3B453A0FCF for ; Tue, 15 Dec 2020 03:19:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.197 X-Spam-Level: X-Spam-Status: No, score=-0.197 tagged_above=-999 required=5 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v95iQcwK-5XB for ; Tue, 15 Dec 2020 03:19:19 -0800 (PST) Received: from mail-wm1-x32a.google.com (mail-wm1-x32a.google.com [IPv6:2a00:1450:4864:20::32a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 427433A0F74 for ; Tue, 15 Dec 2020 03:19:19 -0800 (PST) Received: by mail-wm1-x32a.google.com with SMTP id 190so6297565wmz.0 for ; Tue, 15 Dec 2020 03:19:19 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=RjHGLOPq6mTskmx8Xe3R2FfDLwXzmZxyL2Z530GM3GA=; b=AhYn4WsZ41h9Jy0tqGBD9FY+QhFd/1z9jcYd6FbnB8iRQYQwHZ98fzGGVwHgCJOZ5T kEr2sSCB01PY6Tox6YjeElxt0q+ec40pzW/NKJUAD1582+LMcXiYJLvnkma6wRlkicHy /2mqCrdugSmg8LrGE7G8X8LcoP6syMoVw1f7MTPsxw7K5XzP8LKPaUQF3jeZVtH9r6wt LLMEN20G35i6SfRoVDWHwo8og4g0T4AvwMKX05EEPQb0O/pG2kJ1iVz3ogNA+SLzQlNd r2JJgvoG/SKL2UOklWBUdzP4cwHYRoNTLj/jFUnl0ikOgFqM0CSqh+BBfRNZjcM6mfX5 2JDw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=RjHGLOPq6mTskmx8Xe3R2FfDLwXzmZxyL2Z530GM3GA=; b=MoeWuuf0vS40ziZXRg6R7J67dQH2BWSmaLGG9rYFqE01Exu02MvVOKuc7cUm1HirM5 VaRYiOyYnRFAeKiqUY11JSb9qPGxxoirFN5blIK69Df5/Ut7YicxXasHniNv+sIpTRJi 9+cDNUREHNJh/9Kt4U6xLYB5A3eugyDHWag/cYv5HJpaMbyyesG9Tdw5eaE/F//CzhoL m3Tn590DU23Vl3C8RwAixLi7Mvfsvqxcz01Rc0NSq222SrLj4mTctQ/C3Thjk/SXYhCr FUqrkuAVOI1KGcPZdOxx5FU1wQwAnO2iBUbiIQOhWrKbb1RFih3M0s4D2NZQPP6F56Dh WKgw== X-Gm-Message-State: AOAM531GcmACoaMfilw+Ct47sJYdW5uDwBQOcAgz9IC2hCErCOnxS+kf 9EiNMhGgKQ0AfVcIQ2lA0jFvFG/t9LBz0KZTEBs= X-Google-Smtp-Source: ABdhPJzJK529hmJ6LP0vZASYafuAzUuakaM1Tgp0yAPi+p5X4z8G5h+D0MmvIQCDoKewAzUjyJ2uYsnCl0IdFuu89zU= X-Received: by 2002:a1c:7218:: with SMTP id n24mr32536397wmc.186.1608031157416; Tue, 15 Dec 2020 03:19:17 -0800 (PST) MIME-Version: 1.0 References: <160689580542.14210.17819515187695761515@ietfa.amsl.com> <4A0FDEA0-1264-418D-801C-6C710A3BE6AD@ericsson.com> <25A34E20-C4A4-4F15-B457-73CB1752A67F@island-resort.com> <14369eac3a2205f3c5cb7f74c579fdf568570914.camel@aisec.fraunhofer.de> <3F4B94C1-FE8F-4AEC-862A-894CDC59D385@island-resort.com> In-Reply-To: <3F4B94C1-FE8F-4AEC-862A-894CDC59D385@island-resort.com> From: =?UTF-8?Q?Joel_H=C3=B6glund?= Date: Tue, 15 Dec 2020 12:19:03 +0100 Message-ID: To: Laurence Lundblade Cc: "Hristozov, Stefan" , "goran.selander@ericsson.com" , "john.mattsson=40ericsson.com@dmarc.ietf.org" , "cose@ietf.org" Content-Type: multipart/alternative; boundary="000000000000ecf54305b67eedfa" Archived-At: Subject: Re: [COSE] bstr wrapping for native signed (was Re: New Version Notification for draft-mattsson-cose-cbor-cert-compress-05.txt) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Dec 2020 11:19:22 -0000 --000000000000ecf54305b67eedfa Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi Laurence, Thank you for your observations and comments! I can't answer for what operations Stefan are using in his implementation, but to continue discussing the possible solutions I'm interested in clarifying the expectations on an off-the-shelf CBOR implementation: When you talk about using off-the-shelf CBOR implementations, do you expect to not have to do any other byte-level operations at all? Such as knowing/updating an offset to step into a sequence, or byte level array copying. I fully support that we should provide an encoding solution that does not require hacking the CBOR implementation itself, so I think the discussion should be which extra decoding/encoding operations we think are acceptable on top of an existing CBOR implementation. (For me, with the minimal on the wire size perspective, to change the CBOR cert definition to completely align with COSE seems like a less attractive option, but this is of course open for discussion, if the advantages are deemed to outweigh the drawbacks.) Best Regards Joel H=C3=B6glund On Mon, 14 Dec 2020 at 20:09, Laurence Lundblade wrote: > Hi Stefan, > > First on the implementation =E2=80=94 my understanding is that you=E2=80= =99d have to hash > from the byte offset of the first byte of the CBOR encoded head of > cborCertificateType to the last byte of the Extensions to correctly > implement this. Since the cborCertificateType is the first item in the > sequence, its offset is zero, so that=E2=80=99s easy. > > I=E2=80=99m not sure how you=E2=80=99d use cbor_value_calculate_string_le= ngth since many > of the items in the TBSCertificate are not strings. Maybe you calculate t= he > length of the issuerSignatureValue and go back from the end? That > wouldn=E2=80=99t account for CBOR encoded head of issuerSignatureValue th= ough. > > So, I don=E2=80=99t understand how this works with tinyCBOR or that it is= even > correct. > > It would be good to see an implementation in Python or Go or such to see > if it's possible with those type of CBOR decoders. > > > Second on the design =E2=80=94 I still believe this design is counter > to conventions used in CBOR for signing/hashing data. I think the folks > that designed COSE thought this issue through. > > > (My first design of of EAT did the hashing the way it is being done here. > This was before COSE was publishes as an RFC. The folks using an > off-the-shelf Python CBOR decoder had to hack that decoder to get the > verification to work. Then EAT switched to COSE and I came to understand > the reasons COSE works as it does.) > > LL > > > > On Dec 14, 2020, at 5:50 AM, Hristozov, Stefan < > stefan.hristozov@aisec.fraunhofer.de> wrote: > > Hi Laurence, > > I am using the C library tinycbor [1] for my native CBOR certificate > decoder. > During parsing the certificate I am calculating also an offset from its > beginning after each parsed element. Tinycbor provides a function for > getting the length of the byte or text string > cbor_value_calculate_string_length [2], which is helpful for that. > > Does this answer your question? > > Best regards, > Stefan > > [1]: https://github.com/intel/tinycbor > [2]: > https://intel.github.io/tinycbor/current/a00047.html#gad5b2dd803244946b15= 603e09ce147044 > > On Mon, 2020-12-14 at 13:18 +0000, G=C3=B6ran Selander wrote: > > Hi Laurence, > > I=E2=80=99m aware of two implementation activities: by John (type 1) and = by Stefan > (type 0). > > G=C3=B6ran > > > > On 2020-12-07, 23:02, "COSE" wrote: > I don=E2=80=99t think it works very well at all to directly sign encoded = CBOR. It > should be wrapped in a byte string. > > In particular issuerSignatureValue should probably be the signature over = a > byte string that contains an encoded TBSCertificate. This is what COSE do= es. > > The main reason for this is to allow implementation with off-the-shelf > CBOR encoders and decoders. From some that I=E2=80=99ve looked at and one= I=E2=80=99ve > written myself, CBOR decoders don=E2=80=99t allow access a sub-part of th= e encoded > CBOR so it can be input into the hash. There would be no way to get just > the encoded bytes of the TBSCertificate out of the CBOR decoder unless yo= u > went in and hacked its source code in a special way. > > Has anyone implemented verification of Natively Signed CBOR Certificates? > What CBOR decoder was used? Maybe I=E2=80=99m wrong about this? > > I realize byte string wrapping TBSCertificate might cause upheaval in the > overall design because cborCertificateType would be inside the byte strin= g > wrapping. > > Another approach might be to just use COSE for Natively Signed CBOR > Certificates. The COSE payload would be a TBSCertificate. COSE would take > care of the byte string wrapping issues. This would increase the > on-the-wire size of the certificate by about 10 bytes, but might decrease > code size of the implementation by re use of a COSE implementation. > > LL > > > > On Dec 2, 2020, at 12:49 AM, John Mattsson < > john.mattsson=3D40ericsson.com@dmarc.ietf.org> wrote: > > > > Thanks again for all the good comment and discussions on the list! > > > > We have submitted -05. Changes are: > > > > - Added reference to IEEE 802.1AR DevID and made optimization for IEEE > 802.1AR DevID. > > - Rephrased "compress" in the whole document. We will change the file > name later. > > - Made it more clear that X.509 version in included in the CBOR > certificate type. > > - Omitted 'signature' instead of 'singatureAlgorithm'. Now the algorith= m > comes just before the signature value. > > - Added support of emailAddress / IA5String in issuer and subject. This > was easy. > > - changed so utf8Strings have a positive sign. > > - Change time to unwrapped CBOR epoch time (~time). This saves 1 byte > for time > 2050 > > - Added that the value "99991231235959Z" (no expiration date) is encode= d > as CBOR null. This is quite commonly used in IoT certificates. This saves= 4 > bytes when used. > > - Use CDDL for CBOR OID as defined in draft-ietf-cbor-tags-oid > > - Added CBOR encoding for uthorityKeyIdentifier and subjectKeyIdentifie= r > which are heavily used by IEEE 802.1AR DevID (at least one of them are > mandated depending on type of cert). > > - Added optimization for the hardwareModuleName type of otherName, whic= h > is mandatory to use in IEEE 802.1AR DevID > > - Added CBOR encoding for cRLDistributionPoints and authorityInfoAccess= , > which are both used in basically all HTTPS certificates on the web. > > - Added support for registeredID. This was trivial and registeredID is > used e.g. by the GSMA eUICC PKI Certificate Policy (SGP 14). > > - Added considerations for expert reviewers. > > - Moved SHA-1 signature algorithms to negative 2 byte encodings: -256 > and -255 > > - Added a public private ECDSA key pair turning the example certificate= s > into test vectors. An implementation can now create and verify the exampl= e > RFC 7925 certificates. > > > > Cheers, > > John > > > > =EF=BB=BF-----Original Message----- > > From: "internet-drafts@ietf.org" > > Date: Wednesday, 2 December 2020 at 08:56 > > To: G=C3=B6ran Selander , G=C3=B6ran Selan= der < > goran.selander@ericsson.com>, Martin Furuhed < > martin.furuhed@nexusgroup.com>, Shahid Raza , John > Mattsson , Joel Hoglund , > John Mattsson , Joel H=C3=B6glund < > joel.hoglund@ri.se> > > Subject: New Version Notification for > draft-mattsson-cose-cbor-cert-compress-05.txt > > > > > > A new version of I-D, draft-mattsson-cose-cbor-cert-compress-05.txt > > has been successfully submitted by =3D?utf-8?q?John_Preu=3DC3=3D9F_Matt= sson?=3D > and posted to the > > IETF repository. > > > > Name: draft-mattsson-cose-cbor-cert-compress > > Revision: 05 > > Title: CBOR Encoding of X.509 Certificates (CBOR > Certificates) > > Document date: 2020-12-01 > > Group: Individual Submission > > Pages: 29 > > URL: > https://www.ietf.org/archive/id/draft-mattsson-cose-cbor-cert-compress-05= .txt > > Status: > https://datatracker.ietf.org/doc/draft-mattsson-cose-cbor-cert-compress/ > > Htmlized: > https://datatracker.ietf.org/doc/html/draft-mattsson-cose-cbor-cert-compr= ess > > Htmlized: > https://tools.ietf.org/html/draft-mattsson-cose-cbor-cert-compress-05 > > Diff: > https://www.ietf.org/rfcdiff?url2=3Ddraft-mattsson-cose-cbor-cert-compres= s-05 > > > > Abstract: > > This document specifies a CBOR encoding of X.509 certificates. The > > resulting certificates are called CBOR Certificates. The CBOR > > encoding supports a large subset of RFC 5280, while at the same time > > significantly reduces the size of certificates compatible with RFC > > 7925 and IEEE 802.1AR (DevIDs). When used to re-encode DER encoded > > X.509 certificates, the CBOR encoding can in many cases reduce the > > size of RFC 7925 profiled certificates with over 50%. The CBOR > > encoding can also be used encode "natively signed" CBOR certificates, > > which does not require re-encoding for the signature to be verified. > > The document also specifies COSE headers as well as a TLS certificate > > type for CBOR certificates. > > > > > > > > > > Please note that it may take a couple of minutes from the time of > submission > > until the htmlized version and diff are available at tools.ietf.org. > > > > The IETF Secretariat > > > > > > > > _______________________________________________ > > COSE mailing list > > COSE@ietf.org > > https://www.ietf.org/mailman/listinfo/cose > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose > > > > -- > > Stefan Hristozov > Department Hardware Security > Fraunhofer Institute for Applied and Integrated Security AISEC > Lichtenbergstra=C3=9Fe 11, 85748 Garching near Munich, Germany > Tel. +49 89 32299 86 157 > stefan.hristozov@aisec.fraunhofer.de > https://www.aisec.fraunhofer.de/ > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose > > > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose > --000000000000ecf54305b67eedfa Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi Laurence,
Thank you for your observations and=C2=A0comments!=C2=A0
=

I can't answer for what operations Stefan are using= in his implementation, but to continue discussing the possible solutions I= 'm interested in clarifying the expectations on an off-the-shelf CBOR i= mplementation:

When you talk about using off-the-s= helf CBOR implementations, do you expect to not have to do any other byte-l= evel operations at all? Such as knowing/updating an offset to step into a s= equence, or byte level array copying. I fully support that we should provid= e an encoding solution that does not require hacking the CBOR implementatio= n itself, so I think the discussion should be which extra decoding/encoding= operations we think are acceptable on top of an existing CBOR implementati= on.=C2=A0

(For me, with the minimal on the wire size pers= pective, to change the CBOR cert definition to completely align with COSE s= eems like a less attractive option, but this is of course open for discussi= on, if the advantages are deemed to outweigh=C2=A0the drawbacks.)

Best Regards

Joel H=C3=B6glund

On Mon, 14 Dec 2020 at 20:09, Laurence Lundblade <lgl@island-resort.com> wrote:
Hi Stefan,

First on the implementatio= n =E2=80=94 my understanding is that you=E2=80=99d have to hash from the by= te offset of the first byte of the CBOR encoded head of cborCertificateType= to the last byte of the Extensions to correctly implement this. Since the= =C2=A0cborCertificateType is the first item in the sequence, its offset is = zero, so that=E2=80=99s easy.

I=E2=80=99m not sure= how you=E2=80=99d use=C2=A0cbor_value_calculate_string_length since= =C2=A0many of the items in the TBSCertificate are not strings. Maybe you ca= lculate the length of the=C2=A0issuerSignatureValue and go back=C2=A0from the end? That wouldn=E2=80=99t = account for=C2=A0CBOR=C2=A0encoded head of=C2=A0issuerSignatureValue though.

So, = I don=E2=80=99t understand how this works with tinyCBOR or that it is even= =C2=A0correct.
=
It would be good= to see an implementation in Python or Go or such to see if it's possib= le with those type of CBOR decoders.

=
Second on the design= =C2=A0=E2=80=94 I still believe this design is counter to=C2=A0conventions = used in CBOR for signing/hashing data. I think the folks that designed COSE= thought this issue through.

<= /font>

(My first design of of EAT did the hashing the way it is being= done here. This was before COSE was publishes as an RFC. The folks using a= n off-the-shelf Python CBOR decoder had to hack that decoder to get the ver= ification to work. Then EAT switched to COSE and I came to understand the r= easons COSE works as it does.)
LL


=
On Dec 14, 2020, at 5:50 AM, Hristozov, = Stefan <stefan.hristozov@aisec.fraunhofer.de> wrote:


I am using the C library tinycbor [1] for my na= tive CBOR certificate decoder.=C2=A0
During parsing the certificate I a= m calculating also an offset from its beginning after each parsed element. = Tinycbor provides a function for getting the length of the byte or text str= ing cbor_value_calculate_string_length [2], which is helpful for that.
=
Does this answer your question?

Best regards,
Ste= fan

[1]:=C2=A0https://github.com/intel/tinycbor=C2=A0=C2=A0

On Mon, 2020-12-14 at 13:18= +0000, G=C3=B6ran Selander wrote:
Hi Lau= rence,
=C2=A0
I=E2=80=99m aware of two implementation activiti= es: by John (type 1) and by Stefan (type 0).
=C2=A0
G=C3=B6ran=
=C2=A0
= =C2=A0

On 2020-12-07, 23:02, "COSE" <cose-bounces@ietf.org> wrote:<= /u>

I don=E2=80=99t think it works very well at al= l to directly sign encoded CBOR. It should be wrapped in a byte string.<= /u>
=C2=A0
<= div style=3D"margin:0cm 0cm 0cm 36pt;font-size:11pt;font-family:Calibri,san= s-serif">In particular issuerSignatureValue should probably be the signatur= e over a byte string that contains an encoded TBSCertificate. This is what = COSE does.
=C2=A0
The main reason for this is to allow implementation = with off-the-shelf CBOR encoders and decoders. From some that I=E2=80=99ve = looked at and one I=E2=80=99ve written myself, CBOR decoders don=E2=80=99t = allow access a sub-part of the encoded CBOR so it can be input into the has= h. There would be no way to get just the encoded bytes of the TBSCertificat= e out of the CBOR decoder unless you went in and hacked its source code in = a special way.
=C2=A0=
Has anyone implemented verification of Natively = Signed CBOR Certificates? What CBOR decoder was used? Maybe I=E2=80=99m wro= ng about this?
=C2=A0=
I realize byte string wrapping TBSCertificate mi= ght cause upheaval in the overall design because cborCertificateType would = be inside the byte string wrapping.
=C2=A0
Another approach might be t= o just use COSE for Natively Signed CBOR Certificates. The COSE payload wou= ld be a TBSCertificate. COSE would take care of the byte string wrapping is= sues. This would increase the on-the-wire size of the certificate by about = 10 bytes, but might decrease code size of the implementation by re use of a= COSE implementation.
=C2=A0=
LL
=C2=A0
=
> On Dec 2, 2020, at 12:49 AM, John Mattsson <john.mattsson=3D40eric= sson.com@dmarc.ietf.org> wrote:
>=C2=A0
> Th= anks again for all the good comment and discussions on the list!<= /u>
>=C2=A0
> We have submitted -05. Changes are:
>=C2=A0
<= div>
> - Added reference to IEEE 802.1AR DevID and made optimiz= ation for IEEE 802.1AR DevID.
> = - Rephrased "compress" in the whole document. We will change the = file name later.
> - Made it mor= e clear that X.509 version in included in the CBOR certificate type.=
> - Omitted 'signature' instea= d of 'singatureAlgorithm'. Now the algorithm comes just before the = signature value.
> - Added suppo= rt of emailAddress / IA5String in issuer and subject. This was easy.=
> - changed so utf8Strings have a posi= tive sign.
> - Change time to un= wrapped CBOR epoch time (~time). This saves 1 byte for time > 2050
> - Added that the value "999912= 31235959Z" (no expiration date) is encoded as CBOR null. This is quite= commonly used in IoT certificates. This saves 4 bytes when used.=
> - Use CDDL for CBOR OID as defined in d= raft-ietf-cbor-tags-oid
> - Adde= d CBOR encoding for uthorityKeyIdentifier and subjectKeyIdentifier which ar= e heavily used by IEEE 802.1AR DevID (at least one of them are mandated dep= ending on type of cert).
> - Add= ed optimization for the hardwareModuleName type of otherName, which is mand= atory to use in IEEE 802.1AR DevID
= > - Added CBOR encoding for cRLDistributionPoints and authorityInfoAcces= s, which are both used in basically all HTTPS certificates on the web.
> - Added support for registeredID. = This was trivial and registeredID is used e.g. by the GSMA eUICC PKI Certif= icate Policy (SGP 14).
> - Added= considerations for expert reviewers.
> - Moved SHA-1 signature algorithms to negative 2 byte encodings: -2= 56 and -255
> - Added a public p= rivate ECDSA key pair turning the example certificates into test vectors. A= n implementation can now create and verify the example RFC 7925 certificate= s.
>=C2=A0
> Cheers,
=
> John
>=C2= =A0
> =EF=BB=BF-----Origi= nal Message-----
> From: "<= a href=3D"mailto:internet-drafts@ietf.org" style=3D"color:blue;text-decorat= ion:underline" target=3D"_blank">internet-drafts@ietf.org" <internet-drafts@ietf.org>
> Date: Wednesday, 2 December 2020 at 08:56=
> To: G=C3=B6ran Selander <<= a href=3D"mailto:goran.selander@ericsson.com" style=3D"color:blue;text-deco= ration:underline" target=3D"_blank">goran.selander@ericsson.com>, G= =C3=B6ran Selander <goran.selander@= ericsson.com>, Martin Furuhed <martin.furuhed@nexusgroup.com>, Shahid Raza <shahid.raza@ri.se>, John Mattsson <john.mattsson@ericsson.com>, Joel Hoglund <joel.hoglund@ri.se>, John Mattsson <john.mattsson@ericsson.com>, Joel H= =C3=B6glund <joel.hoglund@ri.se>
> Subject: New Version Notification = for draft-mattsson-cose-cbor-cert-compress-05.txt
=
>=C2=A0
>=C2=A0
> A = new version of I-D, draft-mattsson-cose-cbor-cert-compress-05.txt=
> has been successfully submitted by =3D?= utf-8?q?John_Preu=3DC3=3D9F_Mattsson?=3D and posted to the
> IETF repository.
>=C2=A0
= > Name:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 draft-mattsson-c= ose-cbor-cert-compress
> Revisio= n:=C2=A0=C2=A0=C2=A0=C2=A0 05
> = Title:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0CBOR Encoding of X.509 Certificates (CBOR Certif= icates)
> Document date:=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A02020-12-01
> Group:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0Individual Submission=
> Pages:=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A029<= u>
> URL:=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0https://www.ietf.org/a= rchive/id/draft-mattsson-cose-cbor-cert-compress-05.txt
> Status:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0https://datatracker.ietf.org/doc/draft-matts= son-cose-cbor-cert-compress/
> Diff:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0https://www.ietf.org/rfcdiff?url2=3Ddraft-mattsson-cose= -cbor-cert-compress-05
>=C2=A0
> Abstract:
>=C2=A0=C2=A0 This document specifie= s a CBOR encoding of X.509 certificates.=C2=A0=C2=A0The
=
>=C2=A0=C2=A0 resulting certificates are called CBO= R Certificates.=C2=A0=C2=A0The CBOR
>=C2=A0=C2=A0 encoding supports a large subset of RFC 5280, while at th= e same time
>=C2=A0=C2=A0 signif= icantly reduces the size of certificates compatible with RFC<= /div>
>=C2=A0=C2=A0 7925 and IEEE 802.1AR (DevIDs).= =C2=A0=C2=A0When used to re-encode DER encoded
>=C2=A0=C2=A0 X.509 certificates, the CBOR encoding can in m= any cases reduce the
>=C2=A0=C2= =A0 size of RFC 7925 profiled certificates with over 50%.=C2=A0=C2=A0The CB= OR
>=C2=A0=C2=A0 encoding can al= so be used encode "natively signed" CBOR certificates,<= /u>
>=C2=A0=C2=A0 which does not require re-en= coding for the signature to be verified.
>=C2=A0=C2=A0 The document also specifies COSE headers as well as = a TLS certificate
>=C2=A0=C2=A0 = type for CBOR certificates.
>=C2=A0
>=C2=A0
>=C2=A0
>=C2=A0
> Please note that it may take a couple of minut= es from the time of submission
>= until the htmlized version and diff are available at tools.ietf.org.
>=C2=A0
> The IETF Secretariat
>= =C2=A0
>=C2= =A0
>=C2=A0<= u>
> ______________________________= _________________
> COSE mailing= list
=C2=A0
_______________________= ________________________
COSE maili= ng list
=C2=A0
=C2=A0
--
Stefan Hristozov
Department Hardware Security
Fraunhofe= r Institute for Applied and Integrated Security AISEC
Lichtenbergstra=C3=9Fe 11, 85748 Garching near Munich, Germany
Tel. +49 89 32299 86 157
_______________________________________________COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose

_______________________________________________ COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose
--000000000000ecf54305b67eedfa-- From nobody Tue Dec 15 07:33:58 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 24D923A11DE for ; Tue, 15 Dec 2020 07:33:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=fraunhofer.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wS52zPgg1N-2 for ; Tue, 15 Dec 2020 07:33:52 -0800 (PST) Received: from mail-edgeS23.fraunhofer.de (mail-edges23.fraunhofer.de [153.97.7.23]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 266E23A107C for ; Tue, 15 Dec 2020 07:33:50 -0800 (PST) IronPort-PHdr: =?us-ascii?q?9a23=3AXgChyRUOK1N6FROPwLgU5kRsh3fV8LGuZFwc94?= =?us-ascii?q?YnhrRSc6+q45XlOgnF6O5wiEPSBNmBufNfj+PQv+X6VHcH+4rHu3cHI9RAVB?= =?us-ascii?q?4A3MMRmQFoQMuIElbyI/OiaSsmVN9DW1lo8zDeUwBVFc/yakeUrii06jgfSR?= =?us-ascii?q?TkMQNzKqHvF5XVldjx3Oe3qNXfZgxSj2+7ZrV/ZBy9sQTWsJwQho1vT8R5yh?= =?us-ascii?q?bArnZSPepMwmY9LFOIkh266N254Zhj9CpdobQt+p1N?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2FKAAAR19hf/xwBYJliGQEBAQEBAQE?= =?us-ascii?q?BAQEBAQEBAQEBARIBAQEBAQEBAQEBAQGCD4EjLyMufIE4hD+DSAOFOYggA4E?= =?us-ascii?q?FjgaJf4FCgREDGBYdBAULAQEBAQEBAQEBBwEBGAEMCAIEAQEChAREAheBWwE?= =?us-ascii?q?lOBMCEAEBBgEBAQEBBgQCAoZOAQuCcmKBBgEBAQEBAQEBAQEBAQEBAQEBAQE?= =?us-ascii?q?BAQEBAQEBAQEBAQEBAQEBAQEFAggFNhkFKwwSAQEdAQEBAQIBAQEQCAkEGQE?= =?us-ascii?q?BKQMJAgEEBwQCAQgRAwECARULAQIEAwICAiULFAkIAgQOBQ4UgwWCVQMOHwI?= =?us-ascii?q?OoioCgTyIaXZ/Mx+CZQEBBXs4AQMCDkGDIxiCCQcJCQGBLoJ1g3mGNiaBXT6?= =?us-ascii?q?BETaCLjU+gl0BAQIBARV/ThAJDREBgliCX4IDQwEBLxoWBCccCAYBAQkKDAI?= =?us-ascii?q?5FhQSQAQHHikuCBGPMQkpgniHKyiBKopakTYDBAOBY4ERhFyCaIFfkigigya?= =?us-ascii?q?BLoh4hSiPSZQFiRmBdJEiHSCEPAIEAgQFAg4BAQWBQyqBe3EuIYJpCUcXAg1?= =?us-ascii?q?WjUsJAgEXFIM6M4IxgjCFRHQCATQCBgEJAQEDCXyJSwEB?= X-IPAS-Result: =?us-ascii?q?A2FKAAAR19hf/xwBYJliGQEBAQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?RIBAQEBAQEBAQEBAQGCD4EjLyMufIE4hD+DSAOFOYggA4EFjgaJf4FCgREDG?= =?us-ascii?q?BYdBAULAQEBAQEBAQEBBwEBGAEMCAIEAQEChAREAheBWwElOBMCEAEBBgEBA?= =?us-ascii?q?QEBBgQCAoZOAQuCcmKBBgEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBAQEFAggFNhkFKwwSAQEdAQEBAQIBAQEQCAkEGQEBKQMJAgEEBwQCA?= =?us-ascii?q?QgRAwECARULAQIEAwICAiULFAkIAgQOBQ4UgwWCVQMOHwIOoioCgTyIaXZ/M?= =?us-ascii?q?x+CZQEBBXs4AQMCDkGDIxiCCQcJCQGBLoJ1g3mGNiaBXT6BETaCLjU+gl0BA?= =?us-ascii?q?QIBARV/ThAJDREBgliCX4IDQwEBLxoWBCccCAYBAQkKDAI5FhQSQAQHHikuC?= =?us-ascii?q?BGPMQkpgniHKyiBKopakTYDBAOBY4ERhFyCaIFfkigigyaBLoh4hSiPSZQFi?= =?us-ascii?q?RmBdJEiHSCEPAIEAgQFAg4BAQWBQyqBe3EuIYJpCUcXAg1WjUsJAgEXFIM6M?= =?us-ascii?q?4IxgjCFRHQCATQCBgEJAQEDCXyJSwEB?= X-IronPort-AV: E=Sophos;i="5.78,421,1599516000"; d="rs'?scan'208,217";a="22465120" Received: from mail-mtaka28.fraunhofer.de ([153.96.1.28]) by mail-edgeS23.fraunhofer.de with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 15 Dec 2020 16:33:35 +0100 IronPort-PHdr: =?us-ascii?q?9a23=3AICS2+R+qR4VRBP9uRHGN82YQeigqvan1NQcJ65?= =?us-ascii?q?0hzqhDabmn44+7YBaN5O5phVnFGJ/W8PVel6zdtKWzEWAD4JPUtncEfdQMUh?= =?us-ascii?q?IekswZkkQmB9LNEkz0KvPmLklYVMRPXVNo5Te3ZE5SHsutZkbWq3u+qCQfAR?= =?us-ascii?q?LlKUx+IeGmUoLXht68gua1/ZCbag5UhT27NLV1KhjTz03Ru8AajJEkJLw2z0?= =?us-ascii?q?7Ao2BFcKJY32p1I1KUkRvmoMu9r5M=3D?= X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A0BuAAAn1thf/z6wYZliGQEBAQEBAQE?= =?us-ascii?q?BAQEBAQEBAQEBARIBAQEBAQEBAQEBAQFHgUiBIy8jLgd1Wl6EP4NIA4U5iCA?= =?us-ascii?q?DgQWOBol/gUKBEQNPBQsBAwEBAQEBBwEBGAEMCAIEAQGEBkQCF4FYAiY4EwI?= =?us-ascii?q?QAQEFAQEBAgEGBHGFYQELhXIBAQEBAgEBARAICQQZAQEUFQMJAgEEBwQCAQg?= =?us-ascii?q?RAwECARULAQIEAwICAiULBw0JCAIEDgUOFIMFglUDDh8CDqIlAoE8iGl2fzM?= =?us-ascii?q?fgmUBAQWBMwEDAg5Bgx4YggkHCQkBgS6CdYN5hjaCAz6BETaCLjU+gl0BAQI?= =?us-ascii?q?BARV/ThAJDREBgliCX4IDQwEBLxoWBCccCAYBAQkKDAI5FhQSQAQHHikuCBG?= =?us-ascii?q?PMQkpgniHKyiBKopakTYDBAOBY4ERhFyCaIFfkigigyaBLoh4hSiPSZQFiRm?= =?us-ascii?q?BdJEiHSCEPAIEAgQFAg4BAQWBQyojgVdxLiGCaQlHFwINVo1LCQIBFxSDOjO?= =?us-ascii?q?CMYIwhURDMQIBNAIGAQkBAQMJfIlLAQE?= X-IronPort-AV: E=Sophos;i="5.78,421,1599516000"; d="rs'?scan'208,217";a="42140845" Received: from 153-97-176-62.vm.c.fraunhofer.de (HELO XCH-HYBRID-02.ads.fraunhofer.de) ([153.97.176.62]) by mail-mtaKA28.fraunhofer.de with ESMTP; 15 Dec 2020 16:33:32 +0100 Received: from XCH-HYBRID-01.ads.fraunhofer.de (10.225.8.57) by XCH-HYBRID-02.ads.fraunhofer.de (10.225.8.59) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.721.2; Tue, 15 Dec 2020 16:33:32 +0100 Received: from EUR04-HE1-obe.outbound.protection.outlook.com (10.225.8.41) by XCH-HYBRID-01.ads.fraunhofer.de (10.225.8.57) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.721.2 via Frontend Transport; Tue, 15 Dec 2020 16:33:32 +0100 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=XXIM0bSaEH//yWF8sJ8emNhvF9d9aQaPleIFkqpsk9QSqXxBtrIlfQDutlDV4LNSo418oHAVZvoKQnUFLxIXKTkE8qD7VE5zGwhJ/SZqfzIGxO2+ewk4zIEVpN7ObnZevArDgH1kOiEFCbGT+XfU7ZF9Oql3DkL7JmnYdFcfZa+G59ic8v5YY9G6Kb1LsG3h4KoBJUYjc5buUxRHwUBRVmi2g+SijZHZiofa69uWtEaKrOpG/Hl3SFQ1IUJoGj3Wdhfw5oDH+3XjgPswpDk4danKgzy2cLF9NfoqeLRYv6y9S0pRa3mQxUKjr9vkG6ZbKNY0M/1nuc129pSyoMAfHg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=nB+ZLSZXd0IaJunaK5HPLRoTsDIp2vgPmC0qSU1xYo0=; b=YS1s/KQjBVtWnmWAxxLuxx+vJ0n5Cjrq9adizNuy72S6UOKzTkzh0H49jV2w3XbNYyuE5YrWbNyvZmFxKw2rqTy5Rc3nUsRIpspCeT/FMKJPEW0SicTjWiZlPFeahFvbHb7VQBdAI3GjC1exJv0/7x6fMeF0Zou1x5u28lSekW7pkOE5oX52uw9aR6Quz06bCghqlsdrcfTP9MvJaEiKL8gLDaHEcIz3NWZpkSMghkWN+IqwuzzllcAIQukdq5Xp7cDBPatmhCOgsGHOzeogCL9tm3ZsB4a418FsmtCLuFRSeeZsPB5pjf5lJFu62t43VNzVu1mvQkFM+bFYfItzqg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=aisec.fraunhofer.de; dmarc=pass action=none header.from=aisec.fraunhofer.de; dkim=pass header.d=aisec.fraunhofer.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fraunhofer.onmicrosoft.com; s=selector2-fraunhofer-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=nB+ZLSZXd0IaJunaK5HPLRoTsDIp2vgPmC0qSU1xYo0=; b=BUJmZN7meSXfHzJIBUN6VCDN8QOsRZri16XClEc191YmgIebMeeyyQ7wjqo7yqxUkdBUTkULzgGiaDO9yPWzN2QATfgslg4KumAGhWCDybJnORCZP8uO0joSPoVd0PB74mq8DN2kJZPF0txb9cWBtjrSvxMzErcMUMzdTKXGa+c= Received: from PR3P194MB0828.EURP194.PROD.OUTLOOK.COM (2603:10a6:102:2b::16) by PR3P194MB0748.EURP194.PROD.OUTLOOK.COM (2603:10a6:102:48::21) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3654.12; Tue, 15 Dec 2020 15:33:30 +0000 Received: from PR3P194MB0828.EURP194.PROD.OUTLOOK.COM ([fe80::d560:4669:2061:7a1f]) by PR3P194MB0828.EURP194.PROD.OUTLOOK.COM ([fe80::d560:4669:2061:7a1f%7]) with mapi id 15.20.3654.025; Tue, 15 Dec 2020 15:33:30 +0000 From: "Hristozov, Stefan" To: "lgl@island-resort.com" CC: "john.mattsson=40ericsson.com@dmarc.ietf.org" , "goran.selander@ericsson.com" , "cose@ietf.org" Thread-Topic: [COSE] bstr wrapping for native signed (was Re: New Version Notification for draft-mattsson-cose-cbor-cert-compress-05.txt) Thread-Index: AQHWzOSgb5aiLsUhZUqTeFxike7Wk6n2lXeygAARAACAAFj2AIABVhCA Date: Tue, 15 Dec 2020 15:33:30 +0000 Message-ID: <5f48bd620c68728ccb83afef6f4c0dcbda6e6633.camel@aisec.fraunhofer.de> References: <160689580542.14210.17819515187695761515@ietfa.amsl.com> <4A0FDEA0-1264-418D-801C-6C710A3BE6AD@ericsson.com> <25A34E20-C4A4-4F15-B457-73CB1752A67F@island-resort.com> <14369eac3a2205f3c5cb7f74c579fdf568570914.camel@aisec.fraunhofer.de> <3F4B94C1-FE8F-4AEC-862A-894CDC59D385@island-resort.com> In-Reply-To: <3F4B94C1-FE8F-4AEC-862A-894CDC59D385@island-resort.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: user-agent: Evolution 3.36.4-0ubuntu1 authentication-results: island-resort.com; dkim=none (message not signed) header.d=none;island-resort.com; dmarc=none action=none header.from=aisec.fraunhofer.de; x-originating-ip: [2a01:c23:c416:d400:7993:dcad:a66d:bcb5] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 947fd4d6-2e91-4c00-3e74-08d8a10ec678 x-ms-traffictypediagnostic: PR3P194MB0748: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:2887; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: vKB8bE2LLXkykFAY1C+tUR3+8Mo9JpnDlw5tDtdciHBzEDjDJDl9A8uebbdvJTj5PizQEo6FD86VNJIOmwK5uyuz6hUggrdLfhjVOydT15j4WGd6h9w8XliJBXPQcwSfL8g+i4EnM+B0bFBcei6BeLvoylwjGcagbXjIab663++uZbuTU7oRCwrgKDsuLkAMxcTS0+UYQCkdyTQA/vW/4WXq30vMbr55/oa8/JbT6WFPejGl6tCanAxndISx/Ogbi8of3eCDwmejcuYF2PAovSd+TBLm0LVk3SZ1qjiOFrRgdxEDoFjGY/AC1X9VGX3Jz5D1YX8hXsZe+q8IZ+K/Ip/HC6IJjJGMsHJ8qF+Lv8sDTWOLs3oAnouXx5oX24XYYKql+UcHd5KcCCVB7ig2wWr7MQx1/Anw5Fdz91A6B0DvagrtAfhM3mHzLBZut9t2wUZt7iY8uCczCkHsl0wd/w== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:PR3P194MB0828.EURP194.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(4636009)(39850400004)(366004)(346002)(376002)(136003)(396003)(186003)(54906003)(99936003)(83380400001)(53546011)(8676002)(71200400001)(6506007)(66946007)(316002)(6486002)(83080400002)(2906002)(5660300002)(478600001)(4326008)(4001150100001)(66556008)(66616009)(66446008)(66476007)(66574015)(6916009)(64756008)(76116006)(91956017)(166002)(86362001)(6512007)(15650500001)(30864003)(8936002)(966005)(2616005)(579004); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: =?utf-8?B?RmxZSnIrUXIzR3RlOEdCL2tXWGJMTjhvdmEvc1VrWnRUOEdscmEwZ20zUkNY?= =?utf-8?B?cU9iOEFaTEsxYUdjV3RWRy9XdUVkbGZFRVZTUHVTdkh1RjU0aVZWK0pZZ0p1?= =?utf-8?B?VGR3NVREZ3hEeFcvcFNVTkJoTjljR1VKaWNWdllQemYyMVpUYWRzaFMxa3lK?= =?utf-8?B?ZXpmL09DbWlqZUNJL0JoeVZOU3dDL29FMm0rVTZZWnFDV1k2UDdDNEhhOXo0?= =?utf-8?B?em1yS1d0ZEMvZW1nQnp3d0VNU0JhRnpKd2svWlZ3YUZWR2FwankxQWN3aTY4?= =?utf-8?B?VlU0cDYxazg5aDBjT3E2elp1OXpsS1hZcHFNYnVYSmF3azE3RlVkNk5mMkRE?= =?utf-8?B?SnFpdnc2eHBUZDFoaWg1cDJobDljKzUvOWxTR1ZvYzZZZnl3S0R1WUhTbDBr?= =?utf-8?B?MnlGaGV6bFA1K09nZDZ0UWl5OFQzSkxYZW1zbmhEZEZGcVJZbzA4S0grNGVC?= =?utf-8?B?WnFGTVVrcXV2WURyL3BaQmt2WE1TY2FVMVlGZEkxdml4U3ZwbXhjOC9XMmZh?= =?utf-8?B?cjN1Ukl1N1NJVmR3cUdLOXkzRCtBZzVxRE5Fa0paeE9SNkl5M0pJOStHek1O?= =?utf-8?B?NDRmaEdSUm94b0lUTkZVU3RnQWM2Si93c2hqVDdhZ3g0MTNlNm1PSk1HVlFY?= =?utf-8?B?TjJ6SkU5MHpmUEtwYm1sWlkwRDV1NGJ0dTZWQVdLaS9tSm1GeEcyTGd2cktu?= =?utf-8?B?RFhaZHZvdFZIS2xXNkNmVTNiM3BMT2h4ekRDcFNtQ1IxU2tvWkFqWXY4TFZs?= =?utf-8?B?d2RUSFRrM3lhem53ODJFeHZiN2FUdTdSSzVFTWk3ZTRGRHZGY3d1NGplc2hS?= =?utf-8?B?WXBzMHppaTB5akM1T0lUalNVMTNwcnRBQnFvelBDY3d2aUxTcTN6UGRJbUV5?= =?utf-8?B?RElKRUJuSGVVazRKWDd2LzgrS01SMHJyei83VVF6RGVjREs3NnVzYTBHbmhy?= =?utf-8?B?cUpSSVQ1ejVVWkJlWGdmYTlMQ2JWKzBGVUJYSXZlZnBuay9sT3EzYkl4U3Zl?= =?utf-8?B?ZHZKemkrYURKa05Oam9aWTZhYk9KeFUwc0dFeDN6dVpKbmdZN3ZOaFk0cno4?= =?utf-8?B?Znk1bnplbGgwWUdIQWt4MlVKTmdQNXJtdk1FYlRTd3RpT2xpVUZObkNSSi9T?= =?utf-8?B?Mk5vTW50SkpITXBDMGRXQVdLN0QzN2dDU3BPd1VleVpvQU9WVHIvaG1JYWxK?= =?utf-8?B?TDNpTzljMjVUMHFKWURVc2VVazFOdDdlZmxwQ1NwOVpNeWhtejhmTzdWaWpr?= =?utf-8?B?U2JNK0s1dDNRUXd3NGE5YitLUU5vL2tlUUxHNXBUYndHQ0dBNk1nS3dWdnJ6?= =?utf-8?B?V3diVlZmYVhLUlFLM2tmcURpYWxKNDA1bllpdDJ2dldFRzh6bjIxTk13UklK?= =?utf-8?B?R29HcTJaUko5bkd3MWNZRUxxcnhwT0V5YWM4MUdVNmlKc29xVmtaOHcrc2NB?= =?utf-8?Q?SMzaCRya?= x-ms-exchange-transport-forked: True Content-Type: multipart/mixed; boundary="_004_5f48bd620c68728ccb83afef6f4c0dcbda6e6633camelaisecfraun_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: PR3P194MB0828.EURP194.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: 947fd4d6-2e91-4c00-3e74-08d8a10ec678 X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Dec 2020 15:33:30.3611 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: f930300c-c97d-4019-be03-add650a171c4 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: nNb5LdXK1OruGvKMqoCR3LMfwXWJM9+lUjaWDedrCTpR524kFB8dpx0gk0+wZeTikamjcBQMwAxJs8CRPpB9C1K+czdQCziMNPiLrRRfoGg+eaY/j1cuP3HpX2RPeZkj X-MS-Exchange-Transport-CrossTenantHeadersStamped: PR3P194MB0748 X-OriginatorOrg: aisec.fraunhofer.de Archived-At: Subject: Re: [COSE] bstr wrapping for native signed (was Re: New Version Notification for draft-mattsson-cose-cbor-cert-compress-05.txt) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Dec 2020 15:33:56 -0000 --_004_5f48bd620c68728ccb83afef6f4c0dcbda6e6633camelaisecfraun_ Content-Type: multipart/alternative; boundary="_000_5f48bd620c68728ccb83afef6f4c0dcbda6e6633camelaisecfraun_" --_000_5f48bd620c68728ccb83afef6f4c0dcbda6e6633camelaisecfraun_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgTGF1cmVuY2UsDQoNCmkgZG9uJ3QgaGF2ZSBhbiBpbXBsZW1lbnRhdGlvbiBpbiBoaWdoZXIg bGFuZ3VhZ2VzIHN1Y2ggYXMgUHl0aG9uIG9yIEdvLCBzbyBpIGRlY2lkZWQgdG8gY29kZSBpdCB0 b2RheSBpbiBSdXN0ICgganVzdCBmb3IgZnVuKS4gRmluZCBteSBpbXBsZW1lbnRhdGlvbiBhdHRh Y2hlZC4gSSB0ZXN0ZWQgdGhpcyBpbXBsZW1lbnRhdGlvbiB3aXRoIHRlc3QgdmVjdG9yIEEuMS4x Lg0KDQpJIGhhdmUgYSBmdW5jdGlvbiBjYWxsZWQgZGVjb2RlX25hdGl2ZSB3aGljaCByZXR1cm5z IGEgc3RydWN0IGNvbnRhaW5pbmcgdGhlIGRlY29kZWQgY2VydGlmaWNhdGUgZmllbGRzICJkZWNv ZGVkX2RhdGEiLCB0aGUgZW5jb2RlZCBjZXJ0aWZpY2F0ZSBmaWVsZHMgInNpZ25lZF9kYXRhIiBh bmQgdGhlIHNpZ25hdHVyZSAic2lnbmF0dXJlIi4gIFRvIHZlcmlmeSB0aGUgY2VydGlmaWNhdGUg d2UgbmVlZCB0byBwcm92aWRlIHRoZSAgc2lnbmVkX2RhdGEgYW5kIHNpZ25hdHVyZSB0byBhIHZl cmlmaWNhdGlvbiBmdW5jdGlvbiwgd2hpY2ggSSB3YXMgbm90IGNhYmxlIHRvIGRvIGJlY2F1c2Ug dGhlIHB1YmxpYyBrZXkgb2YgdGhlIENBIGlzIG5vdCBnaXZlbiBpbiB0aGUgdGVzdCB2ZWN0b3Iu DQoNCkRlY29kaW5nIHRlc3QgdmVjdG9yIEEuMS4xIG15IGltcGxlbWVudGF0aW9uIGdlbmVyYXRl cyB0aGUgZm93bGluZyByZXN1bHQ6DQoNCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tDQpjYm9yX2NlcnRfdHlwZSBpczogMQ0KY2VydF9zZXJpYWxf bnVtYmVyIGlzOiBbMDEsIGY1LCAwZF0NCmlzc3VlciBpczogWzgyLCA3MCwgNjcsIDMyLCAxMTYs IDEwMSwgMTE1LCAxMTYsIDMyLCA2NywgNjVdDQp2YWxpZGl0eV9ub3RfYmVmb3JlIGlzOiAxNTc3 ODM2ODAwDQp2YWxpZGl0eV9ub3RfYWZ0ZXIgaXM6IDE2MTIyMjQwMDANCnN1YmplY3QgaXM6IFsw MSwgMjMsIDQ1LCA2NywgODksIGFiXQ0Kc3ViamVjdF9wa19hbGcgaXM6IDENCnN1YmplY3RfcGsg aXM6IFswMiwgYjEsIDIxLCA2YSwgYjksIDZlLCA1YiwgM2IsIDMzLCA0MCwgZjUsIGJkLCBmMCwg MmUsIDY5LCAzZiwgMTYsIDIxLCAzYSwgMDQsIDUyLCA1ZSwgZDQsIDQ0LCA1MCwgYjEsIDAxLCA5 YywgMmQsIGZkLCAzOCwgMzgsIGFiXQ0KZXh0ZW5zaW9ucyBpczogMQ0KaXNzdWVyX3Nnbl9hbGcg aXM6IDYNCnNpZ25lZF9kYXRhIGlzOiBbMDEsIDQzLCAwMSwgZjUsIDBkLCA2YiwgNTIsIDQ2LCA0 MywgMjAsIDc0LCA2NSwgNzMsIDc0LCAyMCwgNDMsIDQxLCAxYSwgNWUsIDBiLCBlMSwgMDAsIDFh LCA2MCwgMTgsIDk2LCAwMCwgNDYsIDAxLCAyMywgNDUsIDY3LCA4OSwgYWIsIDAxLCA1OCwgMjEs IDAyLCBiMSwgMjEsIDZhLCBiOSwgNmUsIDViLCAzYiwgMzMsIDQwLCBmNSwgYmQsIGYwLCAyZSwg NjksIDNmLCAxNiwgMjEsIDNhLCAwNCwgNTIsIDVlLCBkNCwgNDQsIDUwLCBiMSwgMDEsIDljLCAy ZCwgZmQsIDM4LCAzOCwgYWIsIDAxLCAwNl0NCnNpZ25hdHVyZSBpczogWzQ0LCA1ZCwgNzksIDhj LCA5MCwgZTcsIGY1LCAwMCwgZGMsIDc0LCA3YSwgNjUsIDRjLCBlYywgNmMsIGZhLCA2ZiwgMDMs IDcyLCA3NiwgZTEsIDRlLCA1MiwgZWQsIDA3LCBmYywgMTYsIDI5LCA0YywgODQsIDY2LCAwZCwg NWEsIDMzLCA5OCwgNWQsIGZiLCBkNCwgYmYsIGRkLCA2ZCwgNGEsIGNmLCAzOCwgMDQsIGMzLCBk NCwgNmUsIGJmLCAzYiwgN2YsIGE2LCAyNiwgNDAsIDY3LCA0ZiwgYzAsIDM1LCA0ZiwgYTAsIDU2 LCBkYiwgYWUsIGE2XQ0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0NCg0KVmVyeSBzaW1pbGFyIGNvZGUgY2FuIGJlIGFjaGlldmVkIGFsc28gd2l0 aCB0aW55Q0JPUiBpbiBDLiBNYW55IHZhbHVlcyBhcmUgbm90IHN0cmluZ3MgeW91IGFyZSByaWdo dCBzbyBjYm9yX3ZhbHVlX2NhbGN1bGF0ZV9zdHJpbmdfbGVuZ3RoIGNhbm5vdCBiZSB1c2VkIGJ1 dCBpbnRlZ2VycyB0aGVyZWZvcmUgdG8gZ2V0IHRoZWlyIGxlbmd0aCBpcyBub3QgZGlmZmljdWx0 Lg0KDQpJIGhvcGUgdGhpcyBjb2RlIGhlbHBzLg0KDQpXaGF0IGV4YWN0bHkgZG8geW91IG1lYW4g YnkgaGFja2luZyB0aGUgZGVjb2Rlcj8gRG8geW91IG1lYW4gdG8gdHJhY2sgdGhlIG9mZnNldD8g V2hhdCBhcmUgdGhlIGFsdGVybmF0aXZlcz8NCg0KQmVzdCByZWdhcmRzLA0KU3RlZmFuDQoNClBT OiBJIGtub3cgdGhlIGNvZGUgY29udGFpbnMgYSBsb3Qgb2YgY29weStwYXN0ZSBhbmQgbmVlZHMg dG8gYmUgcmVmYWN0b3JlZC4NCg0KT24gTW9uLCAyMDIwLTEyLTE0IGF0IDExOjA5IC0wODAwLCBM YXVyZW5jZSBMdW5kYmxhZGUgd3JvdGU6DQpIaSBTdGVmYW4sDQoNCkZpcnN0IG9uIHRoZSBpbXBs ZW1lbnRhdGlvbiDigJQgbXkgdW5kZXJzdGFuZGluZyBpcyB0aGF0IHlvdeKAmWQgaGF2ZSB0byBo YXNoIGZyb20gdGhlIGJ5dGUgb2Zmc2V0IG9mIHRoZSBmaXJzdCBieXRlIG9mIHRoZSBDQk9SIGVu Y29kZWQgaGVhZCBvZiBjYm9yQ2VydGlmaWNhdGVUeXBlIHRvIHRoZSBsYXN0IGJ5dGUgb2YgdGhl IEV4dGVuc2lvbnMgdG8gY29ycmVjdGx5IGltcGxlbWVudCB0aGlzLiBTaW5jZSB0aGUgY2JvckNl cnRpZmljYXRlVHlwZSBpcyB0aGUgZmlyc3QgaXRlbSBpbiB0aGUgc2VxdWVuY2UsIGl0cyBvZmZz ZXQgaXMgemVybywgc28gdGhhdOKAmXMgZWFzeS4NCg0KSeKAmW0gbm90IHN1cmUgaG93IHlvdeKA mWQgdXNlIGNib3JfdmFsdWVfY2FsY3VsYXRlX3N0cmluZ19sZW5ndGggc2luY2UgbWFueSBvZiB0 aGUgaXRlbXMgaW4gdGhlIFRCU0NlcnRpZmljYXRlIGFyZSBub3Qgc3RyaW5ncy4gTWF5YmUgeW91 IGNhbGN1bGF0ZSB0aGUgbGVuZ3RoIG9mIHRoZSBpc3N1ZXJTaWduYXR1cmVWYWx1ZSBhbmQgZ28g YmFjayBmcm9tIHRoZSBlbmQ/IFRoYXQgd291bGRu4oCZdCBhY2NvdW50IGZvciBDQk9SIGVuY29k ZWQgaGVhZCBvZiBpc3N1ZXJTaWduYXR1cmVWYWx1ZSB0aG91Z2guDQoNClNvLCBJIGRvbuKAmXQg dW5kZXJzdGFuZCBob3cgdGhpcyB3b3JrcyB3aXRoIHRpbnlDQk9SIG9yIHRoYXQgaXQgaXMgZXZl biBjb3JyZWN0Lg0KDQpJdCB3b3VsZCBiZSBnb29kIHRvIHNlZSBhbiBpbXBsZW1lbnRhdGlvbiBp biBQeXRob24gb3IgR28gb3Igc3VjaCB0byBzZWUgaWYgaXQncyBwb3NzaWJsZSB3aXRoIHRob3Nl IHR5cGUgb2YgQ0JPUiBkZWNvZGVycy4NCg0KDQpTZWNvbmQgb24gdGhlIGRlc2lnbiDigJQgSSBz dGlsbCBiZWxpZXZlIHRoaXMgZGVzaWduIGlzIGNvdW50ZXIgdG8gY29udmVudGlvbnMgdXNlZCBp biBDQk9SIGZvciBzaWduaW5nL2hhc2hpbmcgZGF0YS4gSSB0aGluayB0aGUgZm9sa3MgdGhhdCBk ZXNpZ25lZCBDT1NFIHRob3VnaHQgdGhpcyBpc3N1ZSB0aHJvdWdoLg0KDQoNCihNeSBmaXJzdCBk ZXNpZ24gb2Ygb2YgRUFUIGRpZCB0aGUgaGFzaGluZyB0aGUgd2F5IGl0IGlzIGJlaW5nIGRvbmUg aGVyZS4gVGhpcyB3YXMgYmVmb3JlIENPU0Ugd2FzIHB1Ymxpc2hlcyBhcyBhbiBSRkMuIFRoZSBm b2xrcyB1c2luZyBhbiBvZmYtdGhlLXNoZWxmIFB5dGhvbiBDQk9SIGRlY29kZXIgaGFkIHRvIGhh Y2sgdGhhdCBkZWNvZGVyIHRvIGdldCB0aGUgdmVyaWZpY2F0aW9uIHRvIHdvcmsuIFRoZW4gRUFU IHN3aXRjaGVkIHRvIENPU0UgYW5kIEkgY2FtZSB0byB1bmRlcnN0YW5kIHRoZSByZWFzb25zIENP U0Ugd29ya3MgYXMgaXQgZG9lcy4pDQoNCkxMDQoNCg0KDQpPbiBEZWMgMTQsIDIwMjAsIGF0IDU6 NTAgQU0sIEhyaXN0b3pvdiwgU3RlZmFuIDxzdGVmYW4uaHJpc3Rvem92QGFpc2VjLmZyYXVuaG9m ZXIuZGU8bWFpbHRvOnN0ZWZhbi5ocmlzdG96b3ZAYWlzZWMuZnJhdW5ob2Zlci5kZT4+IHdyb3Rl Og0KSGkgTGF1cmVuY2UsDQoNCkkgYW0gdXNpbmcgdGhlIEMgbGlicmFyeSB0aW55Y2JvciBbMV0g Zm9yIG15IG5hdGl2ZSBDQk9SIGNlcnRpZmljYXRlIGRlY29kZXIuDQpEdXJpbmcgcGFyc2luZyB0 aGUgY2VydGlmaWNhdGUgSSBhbSBjYWxjdWxhdGluZyBhbHNvIGFuIG9mZnNldCBmcm9tIGl0cyBi ZWdpbm5pbmcgYWZ0ZXIgZWFjaCBwYXJzZWQgZWxlbWVudC4gVGlueWNib3IgcHJvdmlkZXMgYSBm dW5jdGlvbiBmb3IgZ2V0dGluZyB0aGUgbGVuZ3RoIG9mIHRoZSBieXRlIG9yIHRleHQgc3RyaW5n IGNib3JfdmFsdWVfY2FsY3VsYXRlX3N0cmluZ19sZW5ndGggWzJdLCB3aGljaCBpcyBoZWxwZnVs IGZvciB0aGF0Lg0KDQpEb2VzIHRoaXMgYW5zd2VyIHlvdXIgcXVlc3Rpb24/DQoNCkJlc3QgcmVn YXJkcywNClN0ZWZhbg0KDQpbMV06IGh0dHBzOi8vZ2l0aHViLmNvbS9pbnRlbC90aW55Y2Jvcg0K WzJdOiBodHRwczovL2ludGVsLmdpdGh1Yi5pby90aW55Y2Jvci9jdXJyZW50L2EwMDA0Ny5odG1s I2dhZDViMmRkODAzMjQ0OTQ2YjE1NjAzZTA5Y2UxNDcwNDQNCg0KT24gTW9uLCAyMDIwLTEyLTE0 IGF0IDEzOjE4ICswMDAwLCBHw7ZyYW4gU2VsYW5kZXIgd3JvdGU6DQpIaSBMYXVyZW5jZSwNCg0K SeKAmW0gYXdhcmUgb2YgdHdvIGltcGxlbWVudGF0aW9uIGFjdGl2aXRpZXM6IGJ5IEpvaG4gKHR5 cGUgMSkgYW5kIGJ5IFN0ZWZhbiAodHlwZSAwKS4NCg0KR8O2cmFuDQoNCg0KT24gMjAyMC0xMi0w NywgMjM6MDIsICJDT1NFIiA8Y29zZS1ib3VuY2VzQGlldGYub3JnPG1haWx0bzpjb3NlLWJvdW5j ZXNAaWV0Zi5vcmc+PiB3cm90ZToNCkkgZG9u4oCZdCB0aGluayBpdCB3b3JrcyB2ZXJ5IHdlbGwg YXQgYWxsIHRvIGRpcmVjdGx5IHNpZ24gZW5jb2RlZCBDQk9SLiBJdCBzaG91bGQgYmUgd3JhcHBl ZCBpbiBhIGJ5dGUgc3RyaW5nLg0KDQpJbiBwYXJ0aWN1bGFyIGlzc3VlclNpZ25hdHVyZVZhbHVl IHNob3VsZCBwcm9iYWJseSBiZSB0aGUgc2lnbmF0dXJlIG92ZXIgYSBieXRlIHN0cmluZyB0aGF0 IGNvbnRhaW5zIGFuIGVuY29kZWQgVEJTQ2VydGlmaWNhdGUuIFRoaXMgaXMgd2hhdCBDT1NFIGRv ZXMuDQoNClRoZSBtYWluIHJlYXNvbiBmb3IgdGhpcyBpcyB0byBhbGxvdyBpbXBsZW1lbnRhdGlv biB3aXRoIG9mZi10aGUtc2hlbGYgQ0JPUiBlbmNvZGVycyBhbmQgZGVjb2RlcnMuIEZyb20gc29t ZSB0aGF0IEnigJl2ZSBsb29rZWQgYXQgYW5kIG9uZSBJ4oCZdmUgd3JpdHRlbiBteXNlbGYsIENC T1IgZGVjb2RlcnMgZG9u4oCZdCBhbGxvdyBhY2Nlc3MgYSBzdWItcGFydCBvZiB0aGUgZW5jb2Rl ZCBDQk9SIHNvIGl0IGNhbiBiZSBpbnB1dCBpbnRvIHRoZSBoYXNoLiBUaGVyZSB3b3VsZCBiZSBu byB3YXkgdG8gZ2V0IGp1c3QgdGhlIGVuY29kZWQgYnl0ZXMgb2YgdGhlIFRCU0NlcnRpZmljYXRl IG91dCBvZiB0aGUgQ0JPUiBkZWNvZGVyIHVubGVzcyB5b3Ugd2VudCBpbiBhbmQgaGFja2VkIGl0 cyBzb3VyY2UgY29kZSBpbiBhIHNwZWNpYWwgd2F5Lg0KDQpIYXMgYW55b25lIGltcGxlbWVudGVk IHZlcmlmaWNhdGlvbiBvZiBOYXRpdmVseSBTaWduZWQgQ0JPUiBDZXJ0aWZpY2F0ZXM/IFdoYXQg Q0JPUiBkZWNvZGVyIHdhcyB1c2VkPyBNYXliZSBJ4oCZbSB3cm9uZyBhYm91dCB0aGlzPw0KDQpJ IHJlYWxpemUgYnl0ZSBzdHJpbmcgd3JhcHBpbmcgVEJTQ2VydGlmaWNhdGUgbWlnaHQgY2F1c2Ug dXBoZWF2YWwgaW4gdGhlIG92ZXJhbGwgZGVzaWduIGJlY2F1c2UgY2JvckNlcnRpZmljYXRlVHlw ZSB3b3VsZCBiZSBpbnNpZGUgdGhlIGJ5dGUgc3RyaW5nIHdyYXBwaW5nLg0KDQpBbm90aGVyIGFw cHJvYWNoIG1pZ2h0IGJlIHRvIGp1c3QgdXNlIENPU0UgZm9yIE5hdGl2ZWx5IFNpZ25lZCBDQk9S IENlcnRpZmljYXRlcy4gVGhlIENPU0UgcGF5bG9hZCB3b3VsZCBiZSBhIFRCU0NlcnRpZmljYXRl LiBDT1NFIHdvdWxkIHRha2UgY2FyZSBvZiB0aGUgYnl0ZSBzdHJpbmcgd3JhcHBpbmcgaXNzdWVz LiBUaGlzIHdvdWxkIGluY3JlYXNlIHRoZSBvbi10aGUtd2lyZSBzaXplIG9mIHRoZSBjZXJ0aWZp Y2F0ZSBieSBhYm91dCAxMCBieXRlcywgYnV0IG1pZ2h0IGRlY3JlYXNlIGNvZGUgc2l6ZSBvZiB0 aGUgaW1wbGVtZW50YXRpb24gYnkgcmUgdXNlIG9mIGEgQ09TRSBpbXBsZW1lbnRhdGlvbi4NCg0K TEwNCg0KDQo+IE9uIERlYyAyLCAyMDIwLCBhdCAxMjo0OSBBTSwgSm9obiBNYXR0c3NvbiA8am9o bi5tYXR0c3Nvbj00MGVyaWNzc29uLmNvbUBkbWFyYy5pZXRmLm9yZzxtYWlsdG86am9obi5tYXR0 c3Nvbj00MGVyaWNzc29uLmNvbUBkbWFyYy5pZXRmLm9yZz4+IHdyb3RlOg0KPg0KPiBUaGFua3Mg YWdhaW4gZm9yIGFsbCB0aGUgZ29vZCBjb21tZW50IGFuZCBkaXNjdXNzaW9ucyBvbiB0aGUgbGlz dCENCj4NCj4gV2UgaGF2ZSBzdWJtaXR0ZWQgLTA1LiBDaGFuZ2VzIGFyZToNCj4NCj4gLSBBZGRl ZCByZWZlcmVuY2UgdG8gSUVFRSA4MDIuMUFSIERldklEIGFuZCBtYWRlIG9wdGltaXphdGlvbiBm b3IgSUVFRSA4MDIuMUFSIERldklELg0KPiAtIFJlcGhyYXNlZCAiY29tcHJlc3MiIGluIHRoZSB3 aG9sZSBkb2N1bWVudC4gV2Ugd2lsbCBjaGFuZ2UgdGhlIGZpbGUgbmFtZSBsYXRlci4NCj4gLSBN YWRlIGl0IG1vcmUgY2xlYXIgdGhhdCBYLjUwOSB2ZXJzaW9uIGluIGluY2x1ZGVkIGluIHRoZSBD Qk9SIGNlcnRpZmljYXRlIHR5cGUuDQo+IC0gT21pdHRlZCAnc2lnbmF0dXJlJyBpbnN0ZWFkIG9m ICdzaW5nYXR1cmVBbGdvcml0aG0nLiBOb3cgdGhlIGFsZ29yaXRobSBjb21lcyBqdXN0IGJlZm9y ZSB0aGUgc2lnbmF0dXJlIHZhbHVlLg0KPiAtIEFkZGVkIHN1cHBvcnQgb2YgZW1haWxBZGRyZXNz IC8gSUE1U3RyaW5nIGluIGlzc3VlciBhbmQgc3ViamVjdC4gVGhpcyB3YXMgZWFzeS4NCj4gLSBj aGFuZ2VkIHNvIHV0ZjhTdHJpbmdzIGhhdmUgYSBwb3NpdGl2ZSBzaWduLg0KPiAtIENoYW5nZSB0 aW1lIHRvIHVud3JhcHBlZCBDQk9SIGVwb2NoIHRpbWUgKH50aW1lKS4gVGhpcyBzYXZlcyAxIGJ5 dGUgZm9yIHRpbWUgPiAyMDUwDQo+IC0gQWRkZWQgdGhhdCB0aGUgdmFsdWUgIjk5OTkxMjMxMjM1 OTU5WiIgKG5vIGV4cGlyYXRpb24gZGF0ZSkgaXMgZW5jb2RlZCBhcyBDQk9SIG51bGwuIFRoaXMg aXMgcXVpdGUgY29tbW9ubHkgdXNlZCBpbiBJb1QgY2VydGlmaWNhdGVzLiBUaGlzIHNhdmVzIDQg Ynl0ZXMgd2hlbiB1c2VkLg0KPiAtIFVzZSBDRERMIGZvciBDQk9SIE9JRCBhcyBkZWZpbmVkIGlu IGRyYWZ0LWlldGYtY2Jvci10YWdzLW9pZA0KPiAtIEFkZGVkIENCT1IgZW5jb2RpbmcgZm9yIHV0 aG9yaXR5S2V5SWRlbnRpZmllciBhbmQgc3ViamVjdEtleUlkZW50aWZpZXIgd2hpY2ggYXJlIGhl YXZpbHkgdXNlZCBieSBJRUVFIDgwMi4xQVIgRGV2SUQgKGF0IGxlYXN0IG9uZSBvZiB0aGVtIGFy ZSBtYW5kYXRlZCBkZXBlbmRpbmcgb24gdHlwZSBvZiBjZXJ0KS4NCj4gLSBBZGRlZCBvcHRpbWl6 YXRpb24gZm9yIHRoZSBoYXJkd2FyZU1vZHVsZU5hbWUgdHlwZSBvZiBvdGhlck5hbWUsIHdoaWNo IGlzIG1hbmRhdG9yeSB0byB1c2UgaW4gSUVFRSA4MDIuMUFSIERldklEDQo+IC0gQWRkZWQgQ0JP UiBlbmNvZGluZyBmb3IgY1JMRGlzdHJpYnV0aW9uUG9pbnRzIGFuZCBhdXRob3JpdHlJbmZvQWNj ZXNzLCB3aGljaCBhcmUgYm90aCB1c2VkIGluIGJhc2ljYWxseSBhbGwgSFRUUFMgY2VydGlmaWNh dGVzIG9uIHRoZSB3ZWIuDQo+IC0gQWRkZWQgc3VwcG9ydCBmb3IgcmVnaXN0ZXJlZElELiBUaGlz IHdhcyB0cml2aWFsIGFuZCByZWdpc3RlcmVkSUQgaXMgdXNlZCBlLmcuIGJ5IHRoZSBHU01BIGVV SUNDIFBLSSBDZXJ0aWZpY2F0ZSBQb2xpY3kgKFNHUCAxNCkuDQo+IC0gQWRkZWQgY29uc2lkZXJh dGlvbnMgZm9yIGV4cGVydCByZXZpZXdlcnMuDQo+IC0gTW92ZWQgU0hBLTEgc2lnbmF0dXJlIGFs Z29yaXRobXMgdG8gbmVnYXRpdmUgMiBieXRlIGVuY29kaW5nczogLTI1NiBhbmQgLTI1NQ0KPiAt IEFkZGVkIGEgcHVibGljIHByaXZhdGUgRUNEU0Ega2V5IHBhaXIgdHVybmluZyB0aGUgZXhhbXBs ZSBjZXJ0aWZpY2F0ZXMgaW50byB0ZXN0IHZlY3RvcnMuIEFuIGltcGxlbWVudGF0aW9uIGNhbiBu b3cgY3JlYXRlIGFuZCB2ZXJpZnkgdGhlIGV4YW1wbGUgUkZDIDc5MjUgY2VydGlmaWNhdGVzLg0K Pg0KPiBDaGVlcnMsDQo+IEpvaG4NCj4NCj4g77u/LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0N Cj4gRnJvbTogImludGVybmV0LWRyYWZ0c0BpZXRmLm9yZzxtYWlsdG86aW50ZXJuZXQtZHJhZnRz QGlldGYub3JnPiIgPGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZzxtYWlsdG86aW50ZXJuZXQtZHJh ZnRzQGlldGYub3JnPj4NCj4gRGF0ZTogV2VkbmVzZGF5LCAyIERlY2VtYmVyIDIwMjAgYXQgMDg6 NTYNCj4gVG86IEfDtnJhbiBTZWxhbmRlciA8Z29yYW4uc2VsYW5kZXJAZXJpY3Nzb24uY29tPG1h aWx0bzpnb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5jb20+PiwgR8O2cmFuIFNlbGFuZGVyIDxnb3Jh bi5zZWxhbmRlckBlcmljc3Nvbi5jb208bWFpbHRvOmdvcmFuLnNlbGFuZGVyQGVyaWNzc29uLmNv bT4+LCBNYXJ0aW4gRnVydWhlZCA8bWFydGluLmZ1cnVoZWRAbmV4dXNncm91cC5jb208bWFpbHRv Om1hcnRpbi5mdXJ1aGVkQG5leHVzZ3JvdXAuY29tPj4sIFNoYWhpZCBSYXphIDxzaGFoaWQucmF6 YUByaS5zZTxtYWlsdG86c2hhaGlkLnJhemFAcmkuc2U+PiwgSm9obiBNYXR0c3NvbiA8am9obi5t YXR0c3NvbkBlcmljc3Nvbi5jb208bWFpbHRvOmpvaG4ubWF0dHNzb25AZXJpY3Nzb24uY29tPj4s IEpvZWwgSG9nbHVuZCA8am9lbC5ob2dsdW5kQHJpLnNlPG1haWx0bzpqb2VsLmhvZ2x1bmRAcmku c2U+PiwgSm9obiBNYXR0c3NvbiA8am9obi5tYXR0c3NvbkBlcmljc3Nvbi5jb208bWFpbHRvOmpv aG4ubWF0dHNzb25AZXJpY3Nzb24uY29tPj4sIEpvZWwgSMO2Z2x1bmQgPGpvZWwuaG9nbHVuZEBy aS5zZTxtYWlsdG86am9lbC5ob2dsdW5kQHJpLnNlPj4NCj4gU3ViamVjdDogTmV3IFZlcnNpb24g Tm90aWZpY2F0aW9uIGZvciBkcmFmdC1tYXR0c3Nvbi1jb3NlLWNib3ItY2VydC1jb21wcmVzcy0w NS50eHQNCj4NCj4NCj4gQSBuZXcgdmVyc2lvbiBvZiBJLUQsIGRyYWZ0LW1hdHRzc29uLWNvc2Ut Y2Jvci1jZXJ0LWNvbXByZXNzLTA1LnR4dA0KPiBoYXMgYmVlbiBzdWNjZXNzZnVsbHkgc3VibWl0 dGVkIGJ5ID0/dXRmLTg/cT9Kb2huX1ByZXU9QzM9OUZfTWF0dHNzb24/PSBhbmQgcG9zdGVkIHRv IHRoZQ0KPiBJRVRGIHJlcG9zaXRvcnkuDQo+DQo+IE5hbWU6ICAgICAgICAgZHJhZnQtbWF0dHNz b24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3MNCj4gUmV2aXNpb246ICAgICAwNQ0KPiBUaXRsZTog ICAgICAgICAgICAgICAgQ0JPUiBFbmNvZGluZyBvZiBYLjUwOSBDZXJ0aWZpY2F0ZXMgKENCT1Ig Q2VydGlmaWNhdGVzKQ0KPiBEb2N1bWVudCBkYXRlOiAgICAgICAgMjAyMC0xMi0wMQ0KPiBHcm91 cDogICAgICAgICAgICAgICAgSW5kaXZpZHVhbCBTdWJtaXNzaW9uDQo+IFBhZ2VzOiAgICAgICAg ICAgICAgICAyOQ0KPiBVUkw6ICAgICAgICAgICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvYXJjaGl2 ZS9pZC9kcmFmdC1tYXR0c3Nvbi1jb3NlLWNib3ItY2VydC1jb21wcmVzcy0wNS50eHQNCj4gU3Rh dHVzOiAgICAgICAgIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LW1hdHRz c29uLWNvc2UtY2Jvci1jZXJ0LWNvbXByZXNzLw0KPiBIdG1saXplZDogICAgICAgaHR0cHM6Ly9k YXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC1tYXR0c3Nvbi1jb3NlLWNib3ItY2Vy dC1jb21wcmVzcw0KPiBIdG1saXplZDogICAgICAgaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1s L2RyYWZ0LW1hdHRzc29uLWNvc2UtY2Jvci1jZXJ0LWNvbXByZXNzLTA1DQo+IERpZmY6ICAgICAg ICAgICBodHRwczovL3d3dy5pZXRmLm9yZy9yZmNkaWZmP3VybDI9ZHJhZnQtbWF0dHNzb24tY29z ZS1jYm9yLWNlcnQtY29tcHJlc3MtMDUNCj4NCj4gQWJzdHJhY3Q6DQo+ICAgVGhpcyBkb2N1bWVu dCBzcGVjaWZpZXMgYSBDQk9SIGVuY29kaW5nIG9mIFguNTA5IGNlcnRpZmljYXRlcy4gIFRoZQ0K PiAgIHJlc3VsdGluZyBjZXJ0aWZpY2F0ZXMgYXJlIGNhbGxlZCBDQk9SIENlcnRpZmljYXRlcy4g IFRoZSBDQk9SDQo+ICAgZW5jb2Rpbmcgc3VwcG9ydHMgYSBsYXJnZSBzdWJzZXQgb2YgUkZDIDUy ODAsIHdoaWxlIGF0IHRoZSBzYW1lIHRpbWUNCj4gICBzaWduaWZpY2FudGx5IHJlZHVjZXMgdGhl IHNpemUgb2YgY2VydGlmaWNhdGVzIGNvbXBhdGlibGUgd2l0aCBSRkMNCj4gICA3OTI1IGFuZCBJ RUVFIDgwMi4xQVIgKERldklEcykuICBXaGVuIHVzZWQgdG8gcmUtZW5jb2RlIERFUiBlbmNvZGVk DQo+ICAgWC41MDkgY2VydGlmaWNhdGVzLCB0aGUgQ0JPUiBlbmNvZGluZyBjYW4gaW4gbWFueSBj YXNlcyByZWR1Y2UgdGhlDQo+ICAgc2l6ZSBvZiBSRkMgNzkyNSBwcm9maWxlZCBjZXJ0aWZpY2F0 ZXMgd2l0aCBvdmVyIDUwJS4gIFRoZSBDQk9SDQo+ICAgZW5jb2RpbmcgY2FuIGFsc28gYmUgdXNl ZCBlbmNvZGUgIm5hdGl2ZWx5IHNpZ25lZCIgQ0JPUiBjZXJ0aWZpY2F0ZXMsDQo+ICAgd2hpY2gg ZG9lcyBub3QgcmVxdWlyZSByZS1lbmNvZGluZyBmb3IgdGhlIHNpZ25hdHVyZSB0byBiZSB2ZXJp ZmllZC4NCj4gICBUaGUgZG9jdW1lbnQgYWxzbyBzcGVjaWZpZXMgQ09TRSBoZWFkZXJzIGFzIHdl bGwgYXMgYSBUTFMgY2VydGlmaWNhdGUNCj4gICB0eXBlIGZvciBDQk9SIGNlcnRpZmljYXRlcy4N Cj4NCj4NCj4NCj4NCj4gUGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBt aW51dGVzIGZyb20gdGhlIHRpbWUgb2Ygc3VibWlzc2lvbg0KPiB1bnRpbCB0aGUgaHRtbGl6ZWQg dmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0IHRvb2xzLmlldGYub3JnPGh0dHA6Ly90 b29scy5pZXRmLm9yZz4uDQo+DQo+IFRoZSBJRVRGIFNlY3JldGFyaWF0DQo+DQo+DQo+DQo+IF9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+IENPU0UgbWFp bGluZyBsaXN0DQo+IENPU0VAaWV0Zi5vcmc8bWFpbHRvOkNPU0VAaWV0Zi5vcmc+DQo+IGh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY29zZQ0KDQpfX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KQ09TRSBtYWlsaW5nIGxpc3QNCkNPU0VA aWV0Zi5vcmc8bWFpbHRvOkNPU0VAaWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWls bWFuL2xpc3RpbmZvL2Nvc2UNCg0KDQoNCi0tDQoNClN0ZWZhbiBIcmlzdG96b3YNCkRlcGFydG1l bnQgSGFyZHdhcmUgU2VjdXJpdHkNCkZyYXVuaG9mZXIgSW5zdGl0dXRlIGZvciBBcHBsaWVkIGFu ZCBJbnRlZ3JhdGVkIFNlY3VyaXR5IEFJU0VDDQpMaWNodGVuYmVyZ3N0cmHDn2UgMTEsIDg1NzQ4 IEdhcmNoaW5nIG5lYXIgTXVuaWNoLCBHZXJtYW55DQpUZWwuICs0OSA4OSAzMjI5OSA4NiAxNTcN CnN0ZWZhbi5ocmlzdG96b3ZAYWlzZWMuZnJhdW5ob2Zlci5kZTxtYWlsdG86c3RlZmFuLmhyaXN0 b3pvdkBhaXNlYy5mcmF1bmhvZmVyLmRlPg0KaHR0cHM6Ly93d3cuYWlzZWMuZnJhdW5ob2Zlci5k ZS8NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpDT1NF IG1haWxpbmcgbGlzdA0KQ09TRUBpZXRmLm9yZzxtYWlsdG86Q09TRUBpZXRmLm9yZz4NCmh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY29zZQ0KDQoNCi0tDQoNClN0ZWZhbiBI cmlzdG96b3YNCkRlcGFydG1lbnQgSGFyZHdhcmUgU2VjdXJpdHkNCkZyYXVuaG9mZXIgSW5zdGl0 dXRlIGZvciBBcHBsaWVkIGFuZCBJbnRlZ3JhdGVkIFNlY3VyaXR5IEFJU0VDDQpMaWNodGVuYmVy Z3N0cmHDn2UgMTEsIDg1NzQ4IEdhcmNoaW5nIG5lYXIgTXVuaWNoLCBHZXJtYW55DQpUZWwuICs0 OSA4OSAzMjI5OSA4NiAxNTcNCnN0ZWZhbi5ocmlzdG96b3ZAYWlzZWMuZnJhdW5ob2Zlci5kZTxt YWlsdG86c3RlZmFuLmhyaXN0b3pvdkBhaXNlYy5mcmF1bmhvZmVyLmRlPg0KaHR0cHM6Ly93d3cu YWlzZWMuZnJhdW5ob2Zlci5kZS8NCg== --_000_5f48bd620c68728ccb83afef6f4c0dcbda6e6633camelaisecfraun_ Content-Type: text/html; charset="utf-8" Content-ID: <4DB0B35D3814FB42BADC59B855BAC835@EURP194.PROD.OUTLOOK.COM> Content-Transfer-Encoding: base64 PGh0bWwgZGlyPSJsdHIiPg0KPGhlYWQ+DQo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUi IGNvbnRlbnQ9InRleHQvaHRtbDsgY2hhcnNldD11dGYtOCI+DQo8L2hlYWQ+DQo8Ym9keSBjbGFz cz0iIiBzdHlsZT0idGV4dC1hbGlnbjpsZWZ0OyBkaXJlY3Rpb246bHRyOyIgYmdjb2xvcj0iI2Zm ZmZmZiIgdGV4dD0iIzNkM2QzZCIgbGluaz0iIzUzNTM1MyIgdmxpbms9IiMzZDNkM2QiPg0KPGRp dj5IaSBMYXVyZW5jZSw8L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PmkgZG9uJ3QgaGF2 ZSBhbiBpbXBsZW1lbnRhdGlvbiBpbiBoaWdoZXIgbGFuZ3VhZ2VzIHN1Y2ggYXMgUHl0aG9uIG9y IEdvLCBzbyBpIGRlY2lkZWQgdG8gY29kZSBpdCB0b2RheSBpbiBSdXN0ICgganVzdCBmb3IgZnVu KS4gRmluZCBteSBpbXBsZW1lbnRhdGlvbiBhdHRhY2hlZC4gSSB0ZXN0ZWQgdGhpcyBpbXBsZW1l bnRhdGlvbiB3aXRoIHRlc3QgdmVjdG9yIEEuMS4xLjwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4N CjxkaXY+SSBoYXZlIGEgZnVuY3Rpb24gY2FsbGVkJm5ic3A7PHNwYW4gc3R5bGU9ImNvbG9yOiBy Z2IoMTIxLCA5NCwgMzgpOyBmb250LWZhbWlseTogJnF1b3Q7RHJvaWQgU2FucyBNb25vJnF1b3Q7 LCBtb25vc3BhY2UsIG1vbm9zcGFjZSwgJnF1b3Q7RHJvaWQgU2FucyBGYWxsYmFjayZxdW90Ozsg Zm9udC1zaXplOiAxNHB4OyB3aGl0ZS1zcGFjZTogcHJlOyI+ZGVjb2RlX25hdGl2ZQ0KPC9zcGFu PndoaWNoIHJldHVybnMgYSBzdHJ1Y3QgY29udGFpbmluZyB0aGUgZGVjb2RlZCBjZXJ0aWZpY2F0 ZSBmaWVsZHMgJnF1b3Q7PHNwYW4gc3R5bGU9ImNvbG9yOiByZ2IoMCwgMTYsIDEyOCk7IGZvbnQt ZmFtaWx5OiAmcXVvdDtEcm9pZCBTYW5zIE1vbm8mcXVvdDssIG1vbm9zcGFjZSwgbW9ub3NwYWNl LCAmcXVvdDtEcm9pZCBTYW5zIEZhbGxiYWNrJnF1b3Q7OyBmb250LXNpemU6IDE0cHg7IHdoaXRl LXNwYWNlOiBwcmU7Ij5kZWNvZGVkX2RhdGE8L3NwYW4+JnF1b3Q7LCB0aGUgZW5jb2RlZA0KIGNl cnRpZmljYXRlIGZpZWxkcyAmcXVvdDs8c3BhbiBzdHlsZT0iY29sb3I6IHJnYigwLCAxNiwgMTI4 KTsgZm9udC1mYW1pbHk6ICZxdW90O0Ryb2lkIFNhbnMgTW9ubyZxdW90OywgbW9ub3NwYWNlLCBt b25vc3BhY2UsICZxdW90O0Ryb2lkIFNhbnMgRmFsbGJhY2smcXVvdDs7IGZvbnQtc2l6ZTogMTRw eDsgd2hpdGUtc3BhY2U6IHByZTsiPnNpZ25lZF9kYXRhPC9zcGFuPiZxdW90OyBhbmQgdGhlIHNp Z25hdHVyZSAmcXVvdDs8c3BhbiBzdHlsZT0iY29sb3I6IHJnYigwLCAxNiwgMTI4KTsgZm9udC1m YW1pbHk6ICZxdW90O0Ryb2lkIFNhbnMgTW9ubyZxdW90OywgbW9ub3NwYWNlLCBtb25vc3BhY2Us ICZxdW90O0Ryb2lkIFNhbnMgRmFsbGJhY2smcXVvdDs7IGZvbnQtc2l6ZTogMTRweDsgd2hpdGUt c3BhY2U6IHByZTsiPnNpZ25hdHVyZTwvc3Bhbj4mcXVvdDsuDQogJm5ic3A7VG8gdmVyaWZ5IHRo ZSBjZXJ0aWZpY2F0ZSB3ZSBuZWVkIHRvIHByb3ZpZGUgdGhlICZuYnNwOzxzcGFuIHN0eWxlPSJj YXJldC1jb2xvcjogcmdiKDAsIDE2LCAxMjgpOyBjb2xvcjogcmdiKDAsIDE2LCAxMjgpOyBmb250 LWZhbWlseTogJnF1b3Q7RHJvaWQgU2FucyBNb25vJnF1b3Q7LCBtb25vc3BhY2UsIG1vbm9zcGFj ZSwgJnF1b3Q7RHJvaWQgU2FucyBGYWxsYmFjayZxdW90OzsgZm9udC1zaXplOiAxNHB4OyB3aGl0 ZS1zcGFjZTogcHJlOyI+c2lnbmVkX2RhdGEgYW5kDQo8L3NwYW4+PHNwYW4gc3R5bGU9ImNhcmV0 LWNvbG9yOiByZ2IoMCwgMTYsIDEyOCk7IGNvbG9yOiByZ2IoMCwgMTYsIDEyOCk7IGZvbnQtZmFt aWx5OiAmcXVvdDtEcm9pZCBTYW5zIE1vbm8mcXVvdDssIG1vbm9zcGFjZSwgbW9ub3NwYWNlLCAm cXVvdDtEcm9pZCBTYW5zIEZhbGxiYWNrJnF1b3Q7OyBmb250LXNpemU6IDE0cHg7IHdoaXRlLXNw YWNlOiBwcmU7Ij5zaWduYXR1cmUNCjwvc3Bhbj50byBhIHZlcmlmaWNhdGlvbiBmdW5jdGlvbiwg d2hpY2ggSSB3YXMgbm90IGNhYmxlIHRvIGRvIGJlY2F1c2UgdGhlIHB1YmxpYyBrZXkgb2YgdGhl IENBIGlzIG5vdCBnaXZlbiBpbiB0aGUgdGVzdCB2ZWN0b3IuPC9kaXY+DQo8ZGl2Pjxicj4NCjwv ZGl2Pg0KPGRpdj5EZWNvZGluZyB0ZXN0IHZlY3RvciBBLjEuMSBteSBpbXBsZW1lbnRhdGlvbiBn ZW5lcmF0ZXMgdGhlIGZvd2xpbmcgcmVzdWx0OjwvZGl2Pg0KPGRpdj4NCjxkaXY+PGJyPg0KPC9k aXY+DQo8ZGl2Pi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tPC9kaXY+DQo8ZGl2PmNib3JfY2VydF90eXBlIGlzOiAxPC9kaXY+DQo8ZGl2PmNlcnRf c2VyaWFsX251bWJlciBpczogWzAxLCBmNSwgMGRdPC9kaXY+DQo8ZGl2Pmlzc3VlciBpczogWzgy LCA3MCwgNjcsIDMyLCAxMTYsIDEwMSwgMTE1LCAxMTYsIDMyLCA2NywgNjVdPC9kaXY+DQo8ZGl2 PnZhbGlkaXR5X25vdF9iZWZvcmUgaXM6IDE1Nzc4MzY4MDA8L2Rpdj4NCjxkaXY+dmFsaWRpdHlf bm90X2FmdGVyIGlzOiAxNjEyMjI0MDAwPC9kaXY+DQo8ZGl2PnN1YmplY3QgaXM6IFswMSwgMjMs IDQ1LCA2NywgODksIGFiXTwvZGl2Pg0KPGRpdj5zdWJqZWN0X3BrX2FsZyBpczogMTwvZGl2Pg0K PGRpdj5zdWJqZWN0X3BrIGlzOiBbMDIsIGIxLCAyMSwgNmEsIGI5LCA2ZSwgNWIsIDNiLCAzMywg NDAsIGY1LCBiZCwgZjAsIDJlLCA2OSwgM2YsIDE2LCAyMSwgM2EsIDA0LCA1MiwgNWUsIGQ0LCA0 NCwgNTAsIGIxLCAwMSwgOWMsIDJkLCBmZCwgMzgsIDM4LCBhYl08L2Rpdj4NCjxkaXY+ZXh0ZW5z aW9ucyBpczogMTwvZGl2Pg0KPGRpdj5pc3N1ZXJfc2duX2FsZyBpczogNjwvZGl2Pg0KPGRpdj5z aWduZWRfZGF0YSBpczogWzAxLCA0MywgMDEsIGY1LCAwZCwgNmIsIDUyLCA0NiwgNDMsIDIwLCA3 NCwgNjUsIDczLCA3NCwgMjAsIDQzLCA0MSwgMWEsIDVlLCAwYiwgZTEsIDAwLCAxYSwgNjAsIDE4 LCA5NiwgMDAsIDQ2LCAwMSwgMjMsIDQ1LCA2NywgODksIGFiLCAwMSwgNTgsIDIxLCAwMiwgYjEs IDIxLCA2YSwgYjksIDZlLCA1YiwgM2IsIDMzLCA0MCwgZjUsIGJkLCBmMCwgMmUsIDY5LCAzZiwg MTYsIDIxLCAzYSwgMDQsIDUyLCA1ZSwNCiBkNCwgNDQsIDUwLCBiMSwgMDEsIDljLCAyZCwgZmQs IDM4LCAzOCwgYWIsIDAxLCAwNl08L2Rpdj4NCjxkaXY+c2lnbmF0dXJlIGlzOiBbNDQsIDVkLCA3 OSwgOGMsIDkwLCBlNywgZjUsIDAwLCBkYywgNzQsIDdhLCA2NSwgNGMsIGVjLCA2YywgZmEsIDZm LCAwMywgNzIsIDc2LCBlMSwgNGUsIDUyLCBlZCwgMDcsIGZjLCAxNiwgMjksIDRjLCA4NCwgNjYs IDBkLCA1YSwgMzMsIDk4LCA1ZCwgZmIsIGQ0LCBiZiwgZGQsIDZkLCA0YSwgY2YsIDM4LCAwNCwg YzMsIGQ0LCA2ZSwgYmYsIDNiLCA3ZiwgYTYsIDI2LCA0MCwgNjcsIDRmLCBjMCwgMzUsIDRmLCBh MCwNCiA1NiwgZGIsIGFlLCBhNl08L2Rpdj4NCjxkaXY+LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08L2Rpdj4NCjwvZGl2Pg0KPGRpdj48YnI+DQo8 L2Rpdj4NCjxkaXY+VmVyeSBzaW1pbGFyIGNvZGUgY2FuIGJlIGFjaGlldmVkIGFsc28gd2l0aCB0 aW55Q0JPUiBpbiBDLiBNYW55IHZhbHVlcyBhcmUgbm90IHN0cmluZ3MgeW91IGFyZSByaWdodCBz byBjYm9yX3ZhbHVlX2NhbGN1bGF0ZV9zdHJpbmdfbGVuZ3RoIGNhbm5vdCBiZSB1c2VkIGJ1dCBp bnRlZ2VycyB0aGVyZWZvcmUgdG8gZ2V0IHRoZWlyIGxlbmd0aCBpcyBub3QgZGlmZmljdWx0LiZu YnNwOzwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxkaXY+SSBob3BlIHRoaXMgY29kZSBoZWxw cy48L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8ZGl2PldoYXQgZXhhY3RseSBkbyB5b3UgbWVh biBieSBoYWNraW5nIHRoZSBkZWNvZGVyPyBEbyB5b3UgbWVhbiB0byB0cmFjayB0aGUgb2Zmc2V0 PyBXaGF0IGFyZSB0aGUgYWx0ZXJuYXRpdmVzPzwvZGl2Pg0KPGRpdj48YnI+DQo8L2Rpdj4NCjxk aXY+QmVzdCByZWdhcmRzLDwvZGl2Pg0KPGRpdj5TdGVmYW48L2Rpdj4NCjxkaXY+PGJyPg0KPC9k aXY+DQo8ZGl2PlBTOiBJIGtub3cgdGhlIGNvZGUgY29udGFpbnMgYSBsb3Qgb2YgY29weStwYXN0 ZSBhbmQgbmVlZHMgdG8gYmUgcmVmYWN0b3JlZC48L2Rpdj4NCjxkaXY+PGJyPg0KPC9kaXY+DQo8 ZGl2Pk9uIE1vbiwgMjAyMC0xMi0xNCBhdCAxMTowOSAtMDgwMCwgTGF1cmVuY2UgTHVuZGJsYWRl IHdyb3RlOjwvZGl2Pg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgc3R5bGU9Im1hcmdpbjowIDAg MCAuOGV4OyBib3JkZXItbGVmdDoycHggIzcyOWZjZiBzb2xpZDtwYWRkaW5nLWxlZnQ6MWV4Ij4N CkhpIFN0ZWZhbiwNCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPkZpcnN0IG9uIHRoZSBpbXBsZW1lbnRhdGlvbiDigJQgbXkgdW5kZXJzdGFuZGluZyBp cyB0aGF0IHlvdeKAmWQgaGF2ZSB0byBoYXNoIGZyb20gdGhlIGJ5dGUgb2Zmc2V0IG9mIHRoZSBm aXJzdCBieXRlIG9mIHRoZSBDQk9SIGVuY29kZWQgaGVhZCBvZiBjYm9yQ2VydGlmaWNhdGVUeXBl IHRvIHRoZSBsYXN0IGJ5dGUgb2YgdGhlIEV4dGVuc2lvbnMgdG8gY29ycmVjdGx5IGltcGxlbWVu dCB0aGlzLiBTaW5jZSB0aGUmbmJzcDtjYm9yQ2VydGlmaWNhdGVUeXBlDQogaXMgdGhlIGZpcnN0 IGl0ZW0gaW4gdGhlIHNlcXVlbmNlLCBpdHMgb2Zmc2V0IGlzIHplcm8sIHNvIHRoYXTigJlzIGVh c3kuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj5J4oCZbSBub3Qgc3VyZSBob3cgeW914oCZZCB1c2UmbmJzcDs8c3BhbiBzdHlsZT0iYmFj a2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyIgY2xhc3M9IiI+PGZvbnQgY29sb3I9 IiMzZDNkM2QiIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDYxLCA2MSwg NjEpOyIgY2xhc3M9IiI+Y2Jvcl92YWx1ZV9jYWxjdWxhdGVfc3RyaW5nX2xlbmd0aCBzaW5jZSZu YnNwO21hbnkgb2YgdGhlIGl0ZW1zIGluIHRoZSBUQlNDZXJ0aWZpY2F0ZQ0KIGFyZSBub3Qgc3Ry aW5ncy4gTWF5YmUgeW91IGNhbGN1bGF0ZSB0aGUgbGVuZ3RoIG9mIHRoZSZuYnNwOzwvc3Bhbj48 L2ZvbnQ+PC9zcGFuPjxmb250IGNvbG9yPSIjM2QzZDNkIiBjbGFzcz0iIj5pc3N1ZXJTaWduYXR1 cmVWYWx1ZSBhbmQgZ28gYmFjayZuYnNwO2Zyb20gdGhlIGVuZD8gVGhhdCB3b3VsZG7igJl0IGFj Y291bnQgZm9yJm5ic3A7Q0JPUiZuYnNwO2VuY29kZWQgaGVhZCBvZiZuYnNwOzwvZm9udD48c3Bh biBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYig2MSwgNjEsIDYxKTsgY29sb3I6IHJnYig2MSwgNjEs IDYxKTsiIGNsYXNzPSIiPmlzc3VlclNpZ25hdHVyZVZhbHVlDQogdGhvdWdoLjwvc3Bhbj48L2Rp dj4NCjxkaXYgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoNjEsIDYxLCA2 MSk7IGNvbG9yOiByZ2IoNjEsIDYxLCA2MSk7IiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L3Nw YW4+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGNvbG9yPSIjM2QzZDNkIiBjbGFzcz0iIj5T bywgSSBkb27igJl0IHVuZGVyc3RhbmQgaG93IHRoaXMgd29ya3Mgd2l0aCB0aW55Q0JPUiBvciB0 aGF0IGl0IGlzIGV2ZW4mbmJzcDs8c3BhbiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYig2MSwgNjEs IDYxKTsiIGNsYXNzPSIiPmNvcnJlY3QuPC9zcGFuPjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+PGZvbnQgY29sb3I9IiMzZDNkM2QiIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJjYXJldC1jb2xv cjogcmdiKDYxLCA2MSwgNjEpOyIgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9zcGFuPjwvZm9u dD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgY29sb3I9IiMzZDNkM2QiIGNsYXNzPSIiPjxz cGFuIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDYxLCA2MSwgNjEpOyIgY2xhc3M9IiI+SXQgd291 bGQgYmUgZ29vZCB0byBzZWUgYW4gaW1wbGVtZW50YXRpb24gaW4gUHl0aG9uIG9yIEdvIG9yIHN1 Y2ggdG8gc2VlIGlmIGl0J3MgcG9zc2libGUgd2l0aCB0aG9zZSB0eXBlIG9mIENCT1IgZGVjb2Rl cnMuPC9zcGFuPjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgY29sb3I9IiMzZDNk M2QiIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDYxLCA2MSwgNjEpOyIg Y2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9zcGFuPjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+PGZvbnQgY29sb3I9IiMzZDNkM2QiIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJjYXJldC1jb2xv cjogcmdiKDYxLCA2MSwgNjEpOyIgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9zcGFuPjwvZm9u dD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgY29sb3I9IiMzZDNkM2QiIGNsYXNzPSIiPlNl Y29uZCBvbiB0aGUgZGVzaWduJm5ic3A74oCUIEkgc3RpbGwgYmVsaWV2ZSB0aGlzIGRlc2lnbiBp cyBjb3VudGVyIHRvJm5ic3A7Y29udmVudGlvbnMgdXNlZCBpbiBDQk9SIGZvciBzaWduaW5nL2hh c2hpbmcgZGF0YS4gSSB0aGluayB0aGUgZm9sa3MgdGhhdCBkZXNpZ25lZCBDT1NFIHRob3VnaHQg dGhpcyBpc3N1ZSB0aHJvdWdoLjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgY29s b3I9IiMzZDNkM2QiIGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZm9udD48L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+PGZvbnQgY29sb3I9IiMzZDNkM2QiIGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwv Zm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgY29sb3I9IiMzZDNkM2QiIGNsYXNzPSIi PihNeSBmaXJzdCBkZXNpZ24gb2Ygb2YgRUFUIGRpZCB0aGUgaGFzaGluZyB0aGUgd2F5IGl0IGlz IGJlaW5nIGRvbmUgaGVyZS4gVGhpcyB3YXMgYmVmb3JlIENPU0Ugd2FzIHB1Ymxpc2hlcyBhcyBh biBSRkMuIFRoZSBmb2xrcyB1c2luZyBhbiBvZmYtdGhlLXNoZWxmIFB5dGhvbiBDQk9SIGRlY29k ZXIgaGFkIHRvIGhhY2sgdGhhdCBkZWNvZGVyIHRvIGdldCB0aGUgdmVyaWZpY2F0aW9uDQogdG8g d29yay4gVGhlbiBFQVQgc3dpdGNoZWQgdG8gQ09TRSBhbmQgSSBjYW1lIHRvIHVuZGVyc3RhbmQg dGhlIHJlYXNvbnMgQ09TRSB3b3JrcyBhcyBpdCBkb2VzLik8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNs YXNzPSIiPjxmb250IGNvbG9yPSIjM2QzZDNkIiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Zv bnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGNvbG9yPSIjM2QzZDNkIiBjbGFzcz0iIj5M TDwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgY29sb3I9IiMzZDNkM2QiIGNsYXNz PSIiPjxiciBjbGFzcz0iIj4NCjwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgY29s b3I9IiMzZDNkM2QiIGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZm9udD4NCjxkaXY+PGJyIGNs YXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgc3R5bGU9Im1hcmdpbjowIDAgMCAuOGV4 OyBib3JkZXItbGVmdDoycHggIzcyOWZjZiBzb2xpZDtwYWRkaW5nLWxlZnQ6MWV4Ij4NCjxkaXYg Y2xhc3M9IiI+T24gRGVjIDE0LCAyMDIwLCBhdCA1OjUwIEFNLCBIcmlzdG96b3YsIFN0ZWZhbiAm bHQ7PGEgaHJlZj0ibWFpbHRvOnN0ZWZhbi5ocmlzdG96b3ZAYWlzZWMuZnJhdW5ob2Zlci5kZSIg Y2xhc3M9IiI+c3RlZmFuLmhyaXN0b3pvdkBhaXNlYy5mcmF1bmhvZmVyLmRlPC9hPiZndDsgd3Jv dGU6PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYig2 MSwgNjEsIDYxKTsgY29sb3I6IHJnYig2MSwgNjEsIDYxKTsgZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9y cGhhbnM6IGF1dG87IHRleHQtYWxpZ246IGxlZnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyB0 ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCkhpIExhdXJlbmNlLDwvZGl2Pg0KPGRp diBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYig2MSwgNjEsIDYxKTsgY29sb3I6IHJnYig2MSwgNjEs IDYxKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxl OiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7 IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IGxlZnQ7 IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9y bWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc2l6ZS1h ZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgYmFja2dyb3VuZC1j b2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0i Ij4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYig2 MSwgNjEsIDYxKTsgY29sb3I6IHJnYig2MSwgNjEsIDYxKTsgZm9udC1mYW1pbHk6IEhlbHZldGlj YTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9y cGhhbnM6IGF1dG87IHRleHQtYWxpZ246IGxlZnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJh bnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3Bh Y2luZzogMHB4OyAtd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4dC1z dHJva2Utd2lkdGg6IDBweDsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyB0 ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCkkgYW0gdXNpbmcgdGhlIEMgbGlicmFy eSB0aW55Y2JvciBbMV0gZm9yIG15IG5hdGl2ZSBDQk9SIGNlcnRpZmljYXRlIGRlY29kZXIuJm5i c3A7PC9kaXY+DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDYxLCA2MSwgNjEpOyBjb2xv cjogcmdiKDYxLCA2MSwgNjEpOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEy cHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13 ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4 dC1hbGlnbjogbGVmdDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdo aXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJr aXQtdGV4dC1zaXplLWFkanVzdDogYXV0bzsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4 OyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1NSk7IHRleHQtZGVjb3JhdGlvbjog bm9uZTsiIGNsYXNzPSIiPg0KRHVyaW5nIHBhcnNpbmcgdGhlIGNlcnRpZmljYXRlIEkgYW0gY2Fs Y3VsYXRpbmcgYWxzbyBhbiBvZmZzZXQgZnJvbSBpdHMgYmVnaW5uaW5nIGFmdGVyIGVhY2ggcGFy c2VkIGVsZW1lbnQuIFRpbnljYm9yIHByb3ZpZGVzIGEgZnVuY3Rpb24gZm9yIGdldHRpbmcgdGhl IGxlbmd0aCBvZiB0aGUgYnl0ZSBvciB0ZXh0IHN0cmluZyBjYm9yX3ZhbHVlX2NhbGN1bGF0ZV9z dHJpbmdfbGVuZ3RoIFsyXSwgd2hpY2ggaXMgaGVscGZ1bCBmb3IgdGhhdC48L2Rpdj4NCjxkaXYg c3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoNjEsIDYxLCA2MSk7IGNvbG9yOiByZ2IoNjEsIDYxLCA2 MSk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTog bm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBs ZXR0ZXItc3BhY2luZzogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBsZWZ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd2lkb3dzOiBhdXRvOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXNpemUtYWRq dXN0OiBhdXRvOyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGJhY2tncm91bmQtY29s b3I6IHJnYigyNTUsIDI1NSwgMjU1KTsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+ DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgc3R5bGU9ImNhcmV0LWNvbG9yOiByZ2IoNjEs IDYxLCA2MSk7IGNvbG9yOiByZ2IoNjEsIDYxLCA2MSk7IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7 IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQtY2Fwczog bm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0ZXItc3BhY2luZzogbm9ybWFsOyBvcnBo YW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBsZWZ0OyB0ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5z Zm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsgd2lkb3dzOiBhdXRvOyB3b3JkLXNwYWNp bmc6IDBweDsgLXdlYmtpdC10ZXh0LXNpemUtYWRqdXN0OiBhdXRvOyAtd2Via2l0LXRleHQtc3Ry b2tlLXdpZHRoOiAwcHg7IGJhY2tncm91bmQtY29sb3I6IHJnYigyNTUsIDI1NSwgMjU1KTsgdGV4 dC1kZWNvcmF0aW9uOiBub25lOyIgY2xhc3M9IiI+DQpEb2VzIHRoaXMgYW5zd2VyIHlvdXIgcXVl c3Rpb24/PC9kaXY+DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDYxLCA2MSwgNjEpOyBj b2xvcjogcmdiKDYxLCA2MSwgNjEpOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6 IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9u dC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsg dGV4dC1hbGlnbjogbGVmdDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7 IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13 ZWJraXQtdGV4dC1zaXplLWFkanVzdDogYXV0bzsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDog MHB4OyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1NSk7IHRleHQtZGVjb3JhdGlv bjogbm9uZTsiIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IHN0eWxlPSJj YXJldC1jb2xvcjogcmdiKDYxLCA2MSwgNjEpOyBjb2xvcjogcmdiKDYxLCA2MSwgNjEpOyBmb250 LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsg Zm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4dC1hbGlnbjogbGVmdDsgdGV4dC1pbmRl bnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93 czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zaXplLWFkanVzdDogYXV0 bzsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2Io MjU1LCAyNTUsIDI1NSk7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KQmVzdCBy ZWdhcmRzLDwvZGl2Pg0KPGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYig2MSwgNjEsIDYxKTsg Y29sb3I6IHJnYig2MSwgNjEsIDYxKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXpl OiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZv bnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9ycGhhbnM6IGF1dG87 IHRleHQtYWxpZ246IGxlZnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25l OyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAt d2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6 IDBweDsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyB0ZXh0LWRlY29yYXRp b246IG5vbmU7IiBjbGFzcz0iIj4NClN0ZWZhbjwvZGl2Pg0KPGRpdiBzdHlsZT0iY2FyZXQtY29s b3I6IHJnYig2MSwgNjEsIDYxKTsgY29sb3I6IHJnYig2MSwgNjEsIDYxKTsgZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IGxlZnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1 LCAyNTUpOyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4N CjwvZGl2Pg0KPGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYig2MSwgNjEsIDYxKTsgY29sb3I6 IHJnYig2MSwgNjEsIDYxKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQt YWxpZ246IGxlZnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsg YmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyB0ZXh0LWRlY29yYXRpb246IG5v bmU7IiBjbGFzcz0iIj4NClsxXTo8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly9naXRodWIuY29tL2ludGVsL3RpbnljYm9yIiBz dHlsZT0iY29sb3I6IGJsdWU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+ aHR0cHM6Ly9naXRodWIuY29tL2ludGVsL3RpbnljYm9yPC9hPiZuYnNwOyZuYnNwOzwvZGl2Pg0K PGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYig2MSwgNjEsIDYxKTsgY29sb3I6IHJnYig2MSwg NjEsIDYxKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0 eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3Jt YWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IGxl ZnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTog bm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc2l6 ZS1hZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgYmFja2dyb3Vu ZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFz cz0iIj4NClsyXTo8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+PGEgaHJlZj0iaHR0cHM6Ly9pbnRlbC5naXRodWIuaW8vdGlueWNib3IvY3VycmVudC9hMDAw NDcuaHRtbCNnYWQ1YjJkZDgwMzI0NDk0NmIxNTYwM2UwOWNlMTQ3MDQ0IiBzdHlsZT0iY29sb3I6 IGJsdWU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+aHR0cHM6Ly9pbnRl bC5naXRodWIuaW8vdGlueWNib3IvY3VycmVudC9hMDAwNDcuaHRtbCNnYWQ1YjJkZDgwMzI0NDk0 NmIxNTYwM2UwOWNlMTQ3MDQ0PC9hPjwvZGl2Pg0KPGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJn Yig2MSwgNjEsIDYxKTsgY29sb3I6IHJnYig2MSwgNjEsIDYxKTsgZm9udC1mYW1pbHk6IEhlbHZl dGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1j YXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IGxlZnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQt dHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQt c3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweDsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUp OyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjwvZGl2 Pg0KPGRpdiBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYig2MSwgNjEsIDYxKTsgY29sb3I6IHJnYig2 MSwgNjEsIDYxKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250 LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBu b3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246 IGxlZnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFj ZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQt c2l6ZS1hZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgYmFja2dy b3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBj bGFzcz0iIj4NCk9uIE1vbiwgMjAyMC0xMi0xNCBhdCAxMzoxOCArMDAwMCwgR8O2cmFuIFNlbGFu ZGVyIHdyb3RlOjwvZGl2Pg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgc3R5bGU9Im1hcmdpbjow IDAgMCAuOGV4OyBib3JkZXItbGVmdDoycHggIzcyOWZjZiBzb2xpZDtwYWRkaW5nLWxlZnQ6MWV4 Ij4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSIgc3R5bGU9InBhZ2U6IFdvcmRTZWN0aW9uMTsi Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY207IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6 IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBjbGFz cz0iIj5IaSBMYXVyZW5jZSw8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYg c3R5bGU9Im1hcmdpbjogMGNtOyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJp LCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBsYW5nPSJFTi1VUyIgY2xhc3M9IiI+PG86 cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46 IDBjbTsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsi IGNsYXNzPSIiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIGNsYXNzPSIiPknigJltIGF3YXJlIG9mIHR3 byBpbXBsZW1lbnRhdGlvbiBhY3Rpdml0aWVzOiBieSBKb2huICh0eXBlIDEpIGFuZCBieSBTdGVm YW4gKHR5cGUgMCkuPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxl PSJtYXJnaW46IDBjbTsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fu cy1zZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIGNsYXNzPSIiPjxvOnAgY2xh c3M9IiI+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY207 IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFz cz0iIj4NCjxzcGFuIGxhbmc9IkVOLVVTIiBjbGFzcz0iIj5Hw7ZyYW48bzpwIGNsYXNzPSIiPjwv bzpwPjwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtOyBmb250LXNpemU6IDEx cHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8c3BhbiBs YW5nPSJFTi1VUyIgY2xhc3M9IiI+PG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L3NwYW4+PC9k aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbTsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWls eTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gbGFuZz0iRU4tVVMiIGNs YXNzPSIiPjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAxMnB0IDM2cHQ7IGZvbnQtc2l6ZTog MTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7Ij4NCk9uIDIwMjAtMTItMDcs IDIzOjAyLCAmcXVvdDtDT1NFJnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86Y29zZS1ib3VuY2Vz QGlldGYub3JnIiBjbGFzcz0iIj5jb3NlLWJvdW5jZXNAaWV0Zi5vcmc8L2E+Jmd0OyB3cm90ZTo8 bzpwIGNsYXNzPSIiPjwvbzpwPjwvcD4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJn aW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGli cmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCkkgZG9u4oCZdCB0aGluayBpdCB3b3JrcyB2ZXJ5 IHdlbGwgYXQgYWxsIHRvIGRpcmVjdGx5IHNpZ24gZW5jb2RlZCBDQk9SLiBJdCBzaG91bGQgYmUg d3JhcHBlZCBpbiBhIGJ5dGUgc3RyaW5nLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rp dj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7 IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFz cz0iIj4NCjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xh c3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTog MTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCkluIHBh cnRpY3VsYXIgaXNzdWVyU2lnbmF0dXJlVmFsdWUgc2hvdWxkIHByb2JhYmx5IGJlIHRoZSBzaWdu YXR1cmUgb3ZlciBhIGJ5dGUgc3RyaW5nIHRoYXQgY29udGFpbnMgYW4gZW5jb2RlZCBUQlNDZXJ0 aWZpY2F0ZS4gVGhpcyBpcyB3aGF0IENPU0UgZG9lcy48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2 Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBj bSAzNnB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlm OyIgY2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAzNnB0OyBmb250 LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+ DQpUaGUgbWFpbiByZWFzb24gZm9yIHRoaXMgaXMgdG8gYWxsb3cgaW1wbGVtZW50YXRpb24gd2l0 aCBvZmYtdGhlLXNoZWxmIENCT1IgZW5jb2RlcnMgYW5kIGRlY29kZXJzLiBGcm9tIHNvbWUgdGhh dCBJ4oCZdmUgbG9va2VkIGF0IGFuZCBvbmUgSeKAmXZlIHdyaXR0ZW4gbXlzZWxmLCBDQk9SIGRl Y29kZXJzIGRvbuKAmXQgYWxsb3cgYWNjZXNzIGEgc3ViLXBhcnQgb2YgdGhlIGVuY29kZWQgQ0JP UiBzbyBpdCBjYW4gYmUgaW5wdXQgaW50byB0aGUgaGFzaC4gVGhlcmUNCiB3b3VsZCBiZSBubyB3 YXkgdG8gZ2V0IGp1c3QgdGhlIGVuY29kZWQgYnl0ZXMgb2YgdGhlIFRCU0NlcnRpZmljYXRlIG91 dCBvZiB0aGUgQ0JPUiBkZWNvZGVyIHVubGVzcyB5b3Ugd2VudCBpbiBhbmQgaGFja2VkIGl0cyBz b3VyY2UgY29kZSBpbiBhIHNwZWNpYWwgd2F5LjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNtIDM2 cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBj bGFzcz0iIj4NCjxvOnAgY2xhc3M9IiI+Jm5ic3A7PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6 ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCkhh cyBhbnlvbmUgaW1wbGVtZW50ZWQgdmVyaWZpY2F0aW9uIG9mIE5hdGl2ZWx5IFNpZ25lZCBDQk9S IENlcnRpZmljYXRlcz8gV2hhdCBDQk9SIGRlY29kZXIgd2FzIHVzZWQ/IE1heWJlIEnigJltIHdy b25nIGFib3V0IHRoaXM/PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBj bGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwY20gMzZwdDsgZm9udC1zaXpl OiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPG86 cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxk aXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwY20gMzZwdDsgZm9udC1zaXplOiAxMXB0OyBmb250 LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KSSByZWFsaXplIGJ5dGUg c3RyaW5nIHdyYXBwaW5nIFRCU0NlcnRpZmljYXRlIG1pZ2h0IGNhdXNlIHVwaGVhdmFsIGluIHRo ZSBvdmVyYWxsIGRlc2lnbiBiZWNhdXNlIGNib3JDZXJ0aWZpY2F0ZVR5cGUgd291bGQgYmUgaW5z aWRlIHRoZSBieXRlIHN0cmluZyB3cmFwcGluZy48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0K PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAz NnB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIg Y2xhc3M9IiI+DQo8bzpwIGNsYXNzPSIiPiZuYnNwOzwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAzNnB0OyBmb250LXNp emU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQpB bm90aGVyIGFwcHJvYWNoIG1pZ2h0IGJlIHRvIGp1c3QgdXNlIENPU0UgZm9yIE5hdGl2ZWx5IFNp Z25lZCBDQk9SIENlcnRpZmljYXRlcy4gVGhlIENPU0UgcGF5bG9hZCB3b3VsZCBiZSBhIFRCU0Nl cnRpZmljYXRlLiBDT1NFIHdvdWxkIHRha2UgY2FyZSBvZiB0aGUgYnl0ZSBzdHJpbmcgd3JhcHBp bmcgaXNzdWVzLiBUaGlzIHdvdWxkIGluY3JlYXNlIHRoZSBvbi10aGUtd2lyZSBzaXplIG9mIHRo ZSBjZXJ0aWZpY2F0ZSBieSBhYm91dCAxMCBieXRlcywNCiBidXQgbWlnaHQgZGVjcmVhc2UgY29k ZSBzaXplIG9mIHRoZSBpbXBsZW1lbnRhdGlvbiBieSByZSB1c2Ugb2YgYSBDT1NFIGltcGxlbWVu dGF0aW9uLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsg Zm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxvOnAgY2xhc3M9 IiI+Jm5ic3A7PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxl PSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6 IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCkxMPG86cCBjbGFzcz0iIj48L286cD48 L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBj bSAwY20gMzZwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1z ZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjwvZGl2 Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwY20gMzZwdDsg Zm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNz PSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwY20gMzZwdDsgZm9udC1zaXplOiAx MXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KJmd0OyBP biBEZWMgMiwgMjAyMCwgYXQgMTI6NDkgQU0sIEpvaG4gTWF0dHNzb24gJmx0OzxhIGhyZWY9Im1h aWx0bzpqb2huLm1hdHRzc29uPTQwZXJpY3Nzb24uY29tQGRtYXJjLmlldGYub3JnIiBzdHlsZT0i Y29sb3I6IGJsdWU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+am9obi5t YXR0c3Nvbj00MGVyaWNzc29uLmNvbUBkbWFyYy5pZXRmLm9yZzwvYT4mZ3Q7IHdyb3RlOjxvOnAg Y2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxl PSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6 IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZndDs8c3BhbiBjbGFzcz0iQXBwbGUt Y29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4N CjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwY20g MzZwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsi IGNsYXNzPSIiPg0KJmd0OyBUaGFua3MgYWdhaW4gZm9yIGFsbCB0aGUgZ29vZCBjb21tZW50IGFu ZCBkaXNjdXNzaW9ucyBvbiB0aGUgbGlzdCE8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAzNnB0 OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xh c3M9IiI+DQomZ3Q7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9z cGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8 ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9u dC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZndDsgV2UgaGF2ZSBz dWJtaXR0ZWQgLTA1LiBDaGFuZ2VzIGFyZTo8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAzNnB0 OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xh c3M9IiI+DQomZ3Q7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9z cGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8 ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9u dC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZndDsgLSBBZGRlZCBy ZWZlcmVuY2UgdG8gSUVFRSA4MDIuMUFSIERldklEIGFuZCBtYWRlIG9wdGltaXphdGlvbiBmb3Ig SUVFRSA4MDIuMUFSIERldklELjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQt c2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4N CiZndDsgLSBSZXBocmFzZWQgJnF1b3Q7Y29tcHJlc3MmcXVvdDsgaW4gdGhlIHdob2xlIGRvY3Vt ZW50LiBXZSB3aWxsIGNoYW5nZSB0aGUgZmlsZSBuYW1lIGxhdGVyLjxvOnAgY2xhc3M9IiI+PC9v OnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBj bSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNh bnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZndDsgLSBNYWRlIGl0IG1vcmUgY2xlYXIgdGhhdCBYLjUw OSB2ZXJzaW9uIGluIGluY2x1ZGVkIGluIHRoZSBDQk9SIGNlcnRpZmljYXRlIHR5cGUuPG86cCBj bGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9 Im1hcmdpbjogMGNtIDBjbSAwY20gMzZwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTog Q2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KJmd0OyAtIE9taXR0ZWQgJ3NpZ25hdHVy ZScgaW5zdGVhZCBvZiAnc2luZ2F0dXJlQWxnb3JpdGhtJy4gTm93IHRoZSBhbGdvcml0aG0gY29t ZXMganVzdCBiZWZvcmUgdGhlIHNpZ25hdHVyZSB2YWx1ZS48bzpwIGNsYXNzPSIiPjwvbzpwPjwv ZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNt IDBjbSAzNnB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNl cmlmOyIgY2xhc3M9IiI+DQomZ3Q7IC0gQWRkZWQgc3VwcG9ydCBvZiBlbWFpbEFkZHJlc3MgLyBJ QTVTdHJpbmcgaW4gaXNzdWVyIGFuZCBzdWJqZWN0LiBUaGlzIHdhcyBlYXN5LjxvOnAgY2xhc3M9 IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJn aW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGli cmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZndDsgLSBjaGFuZ2VkIHNvIHV0ZjhTdHJpbmdz IGhhdmUgYSBwb3NpdGl2ZSBzaWduLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZv bnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0i Ij4NCiZndDsgLSBDaGFuZ2UgdGltZSB0byB1bndyYXBwZWQgQ0JPUiBlcG9jaCB0aW1lICh+dGlt ZSkuIFRoaXMgc2F2ZXMgMSBieXRlIGZvciB0aW1lICZndDsgMjA1MDxvOnAgY2xhc3M9IiI+PC9v OnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBj bSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNh bnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZndDsgLSBBZGRlZCB0aGF0IHRoZSB2YWx1ZSAmcXVvdDs5 OTk5MTIzMTIzNTk1OVomcXVvdDsgKG5vIGV4cGlyYXRpb24gZGF0ZSkgaXMgZW5jb2RlZCBhcyBD Qk9SIG51bGwuIFRoaXMgaXMgcXVpdGUgY29tbW9ubHkgdXNlZCBpbiBJb1QgY2VydGlmaWNhdGVz LiBUaGlzIHNhdmVzIDQgYnl0ZXMgd2hlbiB1c2VkLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+ DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNt IDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7 IiBjbGFzcz0iIj4NCiZndDsgLSBVc2UgQ0RETCBmb3IgQ0JPUiBPSUQgYXMgZGVmaW5lZCBpbiBk cmFmdC1pZXRmLWNib3ItdGFncy1vaWQ8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAzNnB0OyBm b250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9 IiI+DQomZ3Q7IC0gQWRkZWQgQ0JPUiBlbmNvZGluZyBmb3IgdXRob3JpdHlLZXlJZGVudGlmaWVy IGFuZCBzdWJqZWN0S2V5SWRlbnRpZmllciB3aGljaCBhcmUgaGVhdmlseSB1c2VkIGJ5IElFRUUg ODAyLjFBUiBEZXZJRCAoYXQgbGVhc3Qgb25lIG9mIHRoZW0gYXJlIG1hbmRhdGVkIGRlcGVuZGlu ZyBvbiB0eXBlIG9mIGNlcnQpLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQt c2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4N CiZndDsgLSBBZGRlZCBvcHRpbWl6YXRpb24gZm9yIHRoZSBoYXJkd2FyZU1vZHVsZU5hbWUgdHlw ZSBvZiBvdGhlck5hbWUsIHdoaWNoIGlzIG1hbmRhdG9yeSB0byB1c2UgaW4gSUVFRSA4MDIuMUFS IERldklEPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4N CjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwY20gMzZwdDsgZm9udC1zaXplOiAxMXB0OyBm b250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KJmd0OyAtIEFkZGVk IENCT1IgZW5jb2RpbmcgZm9yIGNSTERpc3RyaWJ1dGlvblBvaW50cyBhbmQgYXV0aG9yaXR5SW5m b0FjY2Vzcywgd2hpY2ggYXJlIGJvdGggdXNlZCBpbiBiYXNpY2FsbHkgYWxsIEhUVFBTIGNlcnRp ZmljYXRlcyBvbiB0aGUgd2ViLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQt c2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4N CiZndDsgLSBBZGRlZCBzdXBwb3J0IGZvciByZWdpc3RlcmVkSUQuIFRoaXMgd2FzIHRyaXZpYWwg YW5kIHJlZ2lzdGVyZWRJRCBpcyB1c2VkIGUuZy4gYnkgdGhlIEdTTUEgZVVJQ0MgUEtJIENlcnRp ZmljYXRlIFBvbGljeSAoU0dQIDE0KS48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAzNnB0OyBm b250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9 IiI+DQomZ3Q7IC0gQWRkZWQgY29uc2lkZXJhdGlvbnMgZm9yIGV4cGVydCByZXZpZXdlcnMuPG86 cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5 bGU9Im1hcmdpbjogMGNtIDBjbSAwY20gMzZwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWls eTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KJmd0OyAtIE1vdmVkIFNIQS0xIHNp Z25hdHVyZSBhbGdvcml0aG1zIHRvIG5lZ2F0aXZlIDIgYnl0ZSBlbmNvZGluZ3M6IC0yNTYgYW5k IC0yNTU8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0K PGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAzNnB0OyBmb250LXNpemU6IDExcHQ7IGZv bnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQomZ3Q7IC0gQWRkZWQg YSBwdWJsaWMgcHJpdmF0ZSBFQ0RTQSBrZXkgcGFpciB0dXJuaW5nIHRoZSBleGFtcGxlIGNlcnRp ZmljYXRlcyBpbnRvIHRlc3QgdmVjdG9ycy4gQW4gaW1wbGVtZW50YXRpb24gY2FuIG5vdyBjcmVh dGUgYW5kIHZlcmlmeSB0aGUgZXhhbXBsZSBSRkMgNzkyNSBjZXJ0aWZpY2F0ZXMuPG86cCBjbGFz cz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1h cmdpbjogMGNtIDBjbSAwY20gMzZwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2Fs aWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KJmd0OzxzcGFuIGNsYXNzPSJBcHBsZS1jb252 ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAzNnB0 OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xh c3M9IiI+DQomZ3Q7IENoZWVycyw8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAzNnB0OyBmb250 LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+ DQomZ3Q7IEpvaG48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAzNnB0OyBmb250LXNpemU6IDEx cHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQomZ3Q7PHNw YW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnAgY2xhc3M9 IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJn aW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGli cmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZndDsg77u/LS0tLS1PcmlnaW5hbCBNZXNzYWdl LS0tLS08bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0K PGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAzNnB0OyBmb250LXNpemU6IDExcHQ7IGZv bnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQomZ3Q7IEZyb206ICZx dW90OzxhIGhyZWY9Im1haWx0bzppbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmciIHN0eWxlPSJjb2xv cjogYmx1ZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7IiBjbGFzcz0iIj5pbnRlcm5ldC1k cmFmdHNAaWV0Zi5vcmc8L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86aW50ZXJuZXQtZHJh ZnRzQGlldGYub3JnIiBzdHlsZT0iY29sb3I6IGJsdWU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJs aW5lOyIgY2xhc3M9IiI+aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnPC9hPiZndDs8bzpwIGNsYXNz PSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFy Z2luOiAwY20gMGNtIDBjbSAzNnB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxp YnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQomZ3Q7IERhdGU6IFdlZG5lc2RheSwgMiBEZWNl bWJlciAyMDIwIGF0IDA4OjU2PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRp diBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwY20gMzZwdDsgZm9udC1z aXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0K Jmd0OyBUbzogR8O2cmFuIFNlbGFuZGVyICZsdDs8YSBocmVmPSJtYWlsdG86Z29yYW4uc2VsYW5k ZXJAZXJpY3Nzb24uY29tIiBzdHlsZT0iY29sb3I6IGJsdWU7IHRleHQtZGVjb3JhdGlvbjogdW5k ZXJsaW5lOyIgY2xhc3M9IiI+Z29yYW4uc2VsYW5kZXJAZXJpY3Nzb24uY29tPC9hPiZndDssIEfD tnJhbiBTZWxhbmRlciAmbHQ7PGEgaHJlZj0ibWFpbHRvOmdvcmFuLnNlbGFuZGVyQGVyaWNzc29u LmNvbSIgc3R5bGU9ImNvbG9yOiBibHVlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiIGNs YXNzPSIiPmdvcmFuLnNlbGFuZGVyQGVyaWNzc29uLmNvbTwvYT4mZ3Q7LA0KIE1hcnRpbiBGdXJ1 aGVkICZsdDs8YSBocmVmPSJtYWlsdG86bWFydGluLmZ1cnVoZWRAbmV4dXNncm91cC5jb20iIHN0 eWxlPSJjb2xvcjogYmx1ZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7IiBjbGFzcz0iIj5t YXJ0aW4uZnVydWhlZEBuZXh1c2dyb3VwLmNvbTwvYT4mZ3Q7LCBTaGFoaWQgUmF6YSAmbHQ7PGEg aHJlZj0ibWFpbHRvOnNoYWhpZC5yYXphQHJpLnNlIiBzdHlsZT0iY29sb3I6IGJsdWU7IHRleHQt ZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+c2hhaGlkLnJhemFAcmkuc2U8L2E+Jmd0 OywNCiBKb2huIE1hdHRzc29uICZsdDs8YSBocmVmPSJtYWlsdG86am9obi5tYXR0c3NvbkBlcmlj c3Nvbi5jb20iIHN0eWxlPSJjb2xvcjogYmx1ZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7 IiBjbGFzcz0iIj5qb2huLm1hdHRzc29uQGVyaWNzc29uLmNvbTwvYT4mZ3Q7LCBKb2VsIEhvZ2x1 bmQgJmx0OzxhIGhyZWY9Im1haWx0bzpqb2VsLmhvZ2x1bmRAcmkuc2UiIHN0eWxlPSJjb2xvcjog Ymx1ZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7IiBjbGFzcz0iIj5qb2VsLmhvZ2x1bmRA cmkuc2U8L2E+Jmd0OywNCiBKb2huIE1hdHRzc29uICZsdDs8YSBocmVmPSJtYWlsdG86am9obi5t YXR0c3NvbkBlcmljc3Nvbi5jb20iIHN0eWxlPSJjb2xvcjogYmx1ZTsgdGV4dC1kZWNvcmF0aW9u OiB1bmRlcmxpbmU7IiBjbGFzcz0iIj5qb2huLm1hdHRzc29uQGVyaWNzc29uLmNvbTwvYT4mZ3Q7 LCBKb2VsIEjDtmdsdW5kICZsdDs8YSBocmVmPSJtYWlsdG86am9lbC5ob2dsdW5kQHJpLnNlIiBz dHlsZT0iY29sb3I6IGJsdWU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+ am9lbC5ob2dsdW5kQHJpLnNlPC9hPiZndDs8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAzNnB0 OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xh c3M9IiI+DQomZ3Q7IFN1YmplY3Q6IE5ldyBWZXJzaW9uIE5vdGlmaWNhdGlvbiBmb3IgZHJhZnQt bWF0dHNzb24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3MtMDUudHh0PG86cCBjbGFzcz0iIj48L286 cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNt IDBjbSAwY20gMzZwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fu cy1zZXJpZjsiIGNsYXNzPSIiPg0KJmd0OzxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3Bh Y2UiPiZuYnNwOzwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAzNnB0OyBmb250LXNp emU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQom Z3Q7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnAg Y2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxl PSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6 IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZndDsgQSBuZXcgdmVyc2lvbiBvZiBJ LUQsIGRyYWZ0LW1hdHRzc29uLWNvc2UtY2Jvci1jZXJ0LWNvbXByZXNzLTA1LnR4dDxvOnAgY2xh c3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJt YXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENh bGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZndDsgaGFzIGJlZW4gc3VjY2Vzc2Z1bGx5 IHN1Ym1pdHRlZCBieSA9P3V0Zi04P3E/Sm9obl9QcmV1PUMzPTlGX01hdHRzc29uPz0gYW5kIHBv c3RlZCB0byB0aGU8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNz PSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAzNnB0OyBmb250LXNpemU6IDEx cHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQomZ3Q7IElF VEYgcmVwb3NpdG9yeS48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAzNnB0OyBmb250LXNpemU6 IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQomZ3Q7 PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnAgY2xh c3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJt YXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENh bGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZndDsgTmFtZTombmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgZHJhZnQtbWF0dHNzb24tY29zZS1jYm9y LWNlcnQtY29tcHJlc3M8bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNs YXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAzNnB0OyBmb250LXNpemU6 IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQomZ3Q7 IFJldmlzaW9uOiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyAwNTxvOnAgY2xhc3M9IiI+PC9vOnA+ PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAw Y20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMt c2VyaWY7IiBjbGFzcz0iIj4NCiZndDsgVGl0bGU6Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Q0JPUiBFbmNvZGluZyBvZiBYLjUwOSBDZXJ0aWZpY2F0ZXMgKENCT1IgQ2Vy dGlmaWNhdGVzKTxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFw dDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZndDsgRG9j dW1lbnQgZGF0ZTombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsyMDIwLTEyLTAxPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwY20gMzZwdDsgZm9udC1zaXplOiAx MXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KJmd0OyBH cm91cDombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtJbmRpdmlkdWFsIFN1 Ym1pc3Npb248bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIi Pg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAzNnB0OyBmb250LXNpemU6IDExcHQ7 IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQomZ3Q7IFBhZ2Vz OiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzI5PG86cCBjbGFzcz0iIj48 L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjog MGNtIDBjbSAwY20gMzZwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwg c2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KJmd0OyBVUkw6Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PGEgaHJlZj0i aHR0cHM6Ly93d3cuaWV0Zi5vcmcvYXJjaGl2ZS9pZC9kcmFmdC1tYXR0c3Nvbi1jb3NlLWNib3It Y2VydC1jb21wcmVzcy0wNS50eHQiIHN0eWxlPSJjb2xvcjogYmx1ZTsgdGV4dC1kZWNvcmF0aW9u OiB1bmRlcmxpbmU7IiBjbGFzcz0iIj5odHRwczovL3d3dy5pZXRmLm9yZy9hcmNoaXZlL2lkL2Ry YWZ0LW1hdHRzc29uLWNvc2UtY2Jvci1jZXJ0LWNvbXByZXNzLTA1LnR4dDwvYT48bzpwIGNsYXNz PSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFy Z2luOiAwY20gMGNtIDBjbSAzNnB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxp YnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQomZ3Q7IFN0YXR1czombmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVy dGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRm Lm9yZy9kb2MvZHJhZnQtbWF0dHNzb24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3MvIiBzdHlsZT0i Y29sb3I6IGJsdWU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+aHR0cHM6 Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtbWF0dHNzb24tY29zZS1jYm9yLWNlcnQt Y29tcHJlc3MvPC9hPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xh c3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTog MTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZndDsg SHRtbGl6ZWQ6Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9 IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8vZGF0 YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQtbWF0dHNzb24tY29zZS1jYm9yLWNlcnQt Y29tcHJlc3MiIHN0eWxlPSJjb2xvcjogYmx1ZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7 IiBjbGFzcz0iIj5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9odG1sL2RyYWZ0LW1h dHRzc29uLWNvc2UtY2Jvci1jZXJ0LWNvbXByZXNzPC9hPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9k aXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20g MGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2Vy aWY7IiBjbGFzcz0iIj4NCiZndDsgSHRtbGl6ZWQ6Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu PjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1tYXR0c3Nvbi1jb3Nl LWNib3ItY2VydC1jb21wcmVzcy0wNSIgc3R5bGU9ImNvbG9yOiBibHVlOyB0ZXh0LWRlY29yYXRp b246IHVuZGVybGluZTsiIGNsYXNzPSIiPmh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFm dC1tYXR0c3Nvbi1jb3NlLWNib3ItY2VydC1jb21wcmVzcy0wNTwvYT48bzpwIGNsYXNzPSIiPjwv bzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAw Y20gMGNtIDBjbSAzNnB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBz YW5zLXNlcmlmOyIgY2xhc3M9IiI+DQomZ3Q7IERpZmY6Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9IkFwcGxlLWNv bnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3Jn L3JmY2RpZmY/dXJsMj1kcmFmdC1tYXR0c3Nvbi1jb3NlLWNib3ItY2VydC1jb21wcmVzcy0wNSIg c3R5bGU9ImNvbG9yOiBibHVlOyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiIGNsYXNzPSIi Pmh0dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1tYXR0c3Nvbi1jb3NlLWNi b3ItY2VydC1jb21wcmVzcy0wNTwvYT48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAzNnB0OyBm b250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9 IiI+DQomZ3Q7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu PjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2 IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1m YW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZndDsgQWJzdHJhY3Q6PG86 cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5 bGU9Im1hcmdpbjogMGNtIDBjbSAwY20gMzZwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWls eTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KJmd0OyZuYnNwOyZuYnNwOyBUaGlz IGRvY3VtZW50IHNwZWNpZmllcyBhIENCT1IgZW5jb2Rpbmcgb2YgWC41MDkgY2VydGlmaWNhdGVz LiZuYnNwOyZuYnNwO1RoZTxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6 ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZn dDsmbmJzcDsmbmJzcDsgcmVzdWx0aW5nIGNlcnRpZmljYXRlcyBhcmUgY2FsbGVkIENCT1IgQ2Vy dGlmaWNhdGVzLiZuYnNwOyZuYnNwO1RoZSBDQk9SPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4N CjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwY20g MzZwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsi IGNsYXNzPSIiPg0KJmd0OyZuYnNwOyZuYnNwOyBlbmNvZGluZyBzdXBwb3J0cyBhIGxhcmdlIHN1 YnNldCBvZiBSRkMgNTI4MCwgd2hpbGUgYXQgdGhlIHNhbWUgdGltZTxvOnAgY2xhc3M9IiI+PC9v OnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBj bSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNh bnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZndDsmbmJzcDsmbmJzcDsgc2lnbmlmaWNhbnRseSByZWR1 Y2VzIHRoZSBzaXplIG9mIGNlcnRpZmljYXRlcyBjb21wYXRpYmxlIHdpdGggUkZDPG86cCBjbGFz cz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1h cmdpbjogMGNtIDBjbSAwY20gMzZwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2Fs aWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KJmd0OyZuYnNwOyZuYnNwOyA3OTI1IGFuZCBJ RUVFIDgwMi4xQVIgKERldklEcykuJm5ic3A7Jm5ic3A7V2hlbiB1c2VkIHRvIHJlLWVuY29kZSBE RVIgZW5jb2RlZDxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFw dDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZndDsmbmJz cDsmbmJzcDsgWC41MDkgY2VydGlmaWNhdGVzLCB0aGUgQ0JPUiBlbmNvZGluZyBjYW4gaW4gbWFu eSBjYXNlcyByZWR1Y2UgdGhlPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRp diBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwY20gMzZwdDsgZm9udC1z aXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0K Jmd0OyZuYnNwOyZuYnNwOyBzaXplIG9mIFJGQyA3OTI1IHByb2ZpbGVkIGNlcnRpZmljYXRlcyB3 aXRoIG92ZXIgNTAlLiZuYnNwOyZuYnNwO1RoZSBDQk9SPG86cCBjbGFzcz0iIj48L286cD48L2Rp dj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAw Y20gMzZwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJp ZjsiIGNsYXNzPSIiPg0KJmd0OyZuYnNwOyZuYnNwOyBlbmNvZGluZyBjYW4gYWxzbyBiZSB1c2Vk IGVuY29kZSAmcXVvdDtuYXRpdmVseSBzaWduZWQmcXVvdDsgQ0JPUiBjZXJ0aWZpY2F0ZXMsPG86 cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5 bGU9Im1hcmdpbjogMGNtIDBjbSAwY20gMzZwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWls eTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KJmd0OyZuYnNwOyZuYnNwOyB3aGlj aCBkb2VzIG5vdCByZXF1aXJlIHJlLWVuY29kaW5nIGZvciB0aGUgc2lnbmF0dXJlIHRvIGJlIHZl cmlmaWVkLjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsg Zm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZndDsmbmJzcDsm bmJzcDsgVGhlIGRvY3VtZW50IGFsc28gc3BlY2lmaWVzIENPU0UgaGVhZGVycyBhcyB3ZWxsIGFz IGEgVExTIGNlcnRpZmljYXRlPG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRp diBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwY20gMzZwdDsgZm9udC1z aXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0K Jmd0OyZuYnNwOyZuYnNwOyB0eXBlIGZvciBDQk9SIGNlcnRpZmljYXRlcy48bzpwIGNsYXNzPSIi PjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2lu OiAwY20gMGNtIDBjbSAzNnB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJp LCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQomZ3Q7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4N CjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZv bnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0i Ij4NCiZndDs8c3BhbiBjbGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+ PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYg c3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwY20gMzZwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZh bWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KJmd0OzxzcGFuIGNsYXNzPSJB cHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwv ZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNt IDBjbSAzNnB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNl cmlmOyIgY2xhc3M9IiI+DQomZ3Q7PHNwYW4gY2xhc3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+ Jm5ic3A7PC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xh c3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTog MTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZndDsg UGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51dGVzIGZyb20gdGhl IHRpbWUgb2Ygc3VibWlzc2lvbjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxk aXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQt c2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4N CiZndDsgdW50aWwgdGhlIGh0bWxpemVkIHZlcnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBh dCA8YSBocmVmPSJodHRwOi8vdG9vbHMuaWV0Zi5vcmciIGNsYXNzPSIiPg0KdG9vbHMuaWV0Zi5v cmc8L2E+LjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsg Zm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZndDs8c3BhbiBj bGFzcz0iQXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cCBjbGFzcz0iIj48 L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjog MGNtIDBjbSAwY20gMzZwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwg c2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KJmd0OyBUaGUgSUVURiBTZWNyZXRhcmlhdDxvOnAgY2xh c3M9IiI+PC9vOnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJt YXJnaW46IDBjbSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENh bGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZndDs8c3BhbiBjbGFzcz0iQXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwY20gMzZw dDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNs YXNzPSIiPg0KJmd0OzxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwv c3Bhbj48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0K PGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAzNnB0OyBmb250LXNpemU6IDExcHQ7IGZv bnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQomZ3Q7PHNwYW4gY2xh c3M9IkFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnAgY2xhc3M9IiI+PC9v OnA+PC9kaXY+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBj bSAwY20gMGNtIDM2cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNh bnMtc2VyaWY7IiBjbGFzcz0iIj4NCiZndDsgX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX188bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAzNnB0OyBmb250LXNp emU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQom Z3Q7IENPU0UgbWFpbGluZyBsaXN0PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0K PGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwY20gMzZwdDsgZm9u dC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIi Pg0KJmd0OzxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 YSBocmVmPSJtYWlsdG86Q09TRUBpZXRmLm9yZyIgc3R5bGU9ImNvbG9yOiBibHVlOyB0ZXh0LWRl Y29yYXRpb246IHVuZGVybGluZTsiIGNsYXNzPSIiPkNPU0VAaWV0Zi5vcmc8L2E+PG86cCBjbGFz cz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1h cmdpbjogMGNtIDBjbSAwY20gMzZwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2Fs aWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KJmd0OzxzcGFuIGNsYXNzPSJBcHBsZS1jb252 ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9t YWlsbWFuL2xpc3RpbmZvL2Nvc2UiIHN0eWxlPSJjb2xvcjogYmx1ZTsgdGV4dC1kZWNvcmF0aW9u OiB1bmRlcmxpbmU7IiBjbGFzcz0iIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3Rp bmZvL2Nvc2U8L2E+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFz cz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwY20gMzZwdDsgZm9udC1zaXplOiAx MXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPG86cCBj bGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYg c3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwY20gMzZwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZh bWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX188bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0K PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAz NnB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQtZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIg Y2xhc3M9IiI+DQpDT1NFIG1haWxpbmcgbGlzdDxvOnAgY2xhc3M9IiI+PC9vOnA+PC9kaXY+DQo8 L2Rpdj4NCjxkaXYgY2xhc3M9IiI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMGNtIDM2 cHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBj bGFzcz0iIj4NCjxhIGhyZWY9Im1haWx0bzpDT1NFQGlldGYub3JnIiBzdHlsZT0iY29sb3I6IGJs dWU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyIgY2xhc3M9IiI+Q09TRUBpZXRmLm9yZzwv YT48bzpwIGNsYXNzPSIiPjwvbzpwPjwvZGl2Pg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRp diBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDBjbSAzNnB0OyBmb250LXNpemU6IDExcHQ7IGZvbnQt ZmFtaWx5OiBDYWxpYnJpLCBzYW5zLXNlcmlmOyIgY2xhc3M9IiI+DQo8YSBocmVmPSJodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UiIHN0eWxlPSJjb2xvcjogYmx1ZTsg dGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7IiBjbGFzcz0iIj5odHRwczovL3d3dy5pZXRmLm9y Zy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2U8L2E+PG86cCBjbGFzcz0iIj48L286cD48L2Rpdj4NCjwv ZGl2Pg0KPGRpdiBjbGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwY20gMzZw dDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNs YXNzPSIiPg0KPG86cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjwvZGl2Pg0KPGRpdiBj bGFzcz0iIj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwY20gMzZwdDsgZm9udC1zaXpl OiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPG86 cCBjbGFzcz0iIj4mbmJzcDs8L286cD48L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVv dGU+DQo8ZGl2IHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDYxLCA2MSwgNjEpOyBjb2xvcjogcmdi KDYxLCA2MSwgNjEpOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZv bnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4dC1hbGln bjogbGVmdDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNw YWNlOiBub3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4 dC1zaXplLWFkanVzdDogYXV0bzsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBiYWNr Z3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1NSk7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsi IGNsYXNzPSIiPg0KPHNwYW4gY2xhc3M9IiI+DQo8cHJlPi0tIDwvcHJlPg0KPGJyIGNsYXNzPSIi Pg0KPGRpdiBzdHlsZT0id2lkdGg6IDcxY2g7IiBjbGFzcz0iIj5TdGVmYW4gSHJpc3Rvem92PC9k aXY+DQo8ZGl2IHN0eWxlPSJ3aWR0aDogNzFjaDsiIGNsYXNzPSIiPkRlcGFydG1lbnQgSGFyZHdh cmUgU2VjdXJpdHk8L2Rpdj4NCjxkaXYgc3R5bGU9IndpZHRoOiA3MWNoOyIgY2xhc3M9IiI+RnJh dW5ob2ZlciBJbnN0aXR1dGUgZm9yIEFwcGxpZWQgYW5kIEludGVncmF0ZWQgU2VjdXJpdHkgQUlT RUM8L2Rpdj4NCjxkaXYgc3R5bGU9IndpZHRoOiA3MWNoOyIgY2xhc3M9IiI+TGljaHRlbmJlcmdz dHJhw59lIDExLCA4NTc0OCBHYXJjaGluZyBuZWFyIE11bmljaCwgR2VybWFueTwvZGl2Pg0KPGRp diBzdHlsZT0id2lkdGg6IDcxY2g7IiBjbGFzcz0iIj5UZWwuICs0OSA4OSAzMjI5OSA4NiAxNTc8 L2Rpdj4NCjxkaXYgc3R5bGU9IndpZHRoOiA3MWNoOyIgY2xhc3M9IiI+PGEgaHJlZj0ibWFpbHRv OnN0ZWZhbi5ocmlzdG96b3ZAYWlzZWMuZnJhdW5ob2Zlci5kZSIgc3R5bGU9ImNvbG9yOiBibHVl OyB0ZXh0LWRlY29yYXRpb246IHVuZGVybGluZTsiIGNsYXNzPSIiPnN0ZWZhbi5ocmlzdG96b3ZA YWlzZWMuZnJhdW5ob2Zlci5kZTwvYT48L2Rpdj4NCjxkaXYgc3R5bGU9IndpZHRoOiA3MWNoOyIg Y2xhc3M9IiI+PGEgaHJlZj0iaHR0cHM6Ly93d3cuYWlzZWMuZnJhdW5ob2Zlci5kZS8iIHN0eWxl PSJjb2xvcjogYmx1ZTsgdGV4dC1kZWNvcmF0aW9uOiB1bmRlcmxpbmU7IiBjbGFzcz0iIj5odHRw czovL3d3dy5haXNlYy5mcmF1bmhvZmVyLmRlLzwvYT48L2Rpdj4NCjwvc3Bhbj48L2Rpdj4NCjxz cGFuIHN0eWxlPSJjYXJldC1jb2xvcjogcmdiKDYxLCA2MSwgNjEpOyBjb2xvcjogcmdiKDYxLCA2 MSwgNjEpOyBmb250LWZhbWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5 bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4dC1hbGlnbjogbGVm dDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBu b3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zaXpl LWFkanVzdDogYXV0bzsgLXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBiYWNrZ3JvdW5k LWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1NSk7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsgZGlzcGxh eTogaW5saW5lICFpbXBvcnRhbnQ7IGZsb2F0OiBub25lOyIgY2xhc3M9IiI+X19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188L3NwYW4+PGJyIHN0eWxlPSJjYXJl dC1jb2xvcjogcmdiKDYxLCA2MSwgNjEpOyBjb2xvcjogcmdiKDYxLCA2MSwgNjEpOyBmb250LWZh bWlseTogSGVsdmV0aWNhOyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50LWNhcHM6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNp bmc6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4dC1hbGlnbjogbGVmdDsgdGV4dC1pbmRlbnQ6 IDBweDsgdGV4dC10cmFuc2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czog YXV0bzsgd29yZC1zcGFjaW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zaXplLWFkanVzdDogYXV0bzsg LXdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjU1 LCAyNTUsIDI1NSk7IHRleHQtZGVjb3JhdGlvbjogbm9uZTsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5 bGU9ImNhcmV0LWNvbG9yOiByZ2IoNjEsIDYxLCA2MSk7IGNvbG9yOiByZ2IoNjEsIDYxLCA2MSk7 IGZvbnQtZmFtaWx5OiBIZWx2ZXRpY2E7IGZvbnQtc2l6ZTogMTJweDsgZm9udC1zdHlsZTogbm9y bWFsOyBmb250LXZhcmlhbnQtY2Fwczogbm9ybWFsOyBmb250LXdlaWdodDogbm9ybWFsOyBsZXR0 ZXItc3BhY2luZzogbm9ybWFsOyBvcnBoYW5zOiBhdXRvOyB0ZXh0LWFsaWduOiBsZWZ0OyB0ZXh0 LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1hbDsg d2lkb3dzOiBhdXRvOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXNpemUtYWRqdXN0 OiBhdXRvOyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7IGJhY2tncm91bmQtY29sb3I6 IHJnYigyNTUsIDI1NSwgMjU1KTsgdGV4dC1kZWNvcmF0aW9uOiBub25lOyBkaXNwbGF5OiBpbmxp bmUgIWltcG9ydGFudDsgZmxvYXQ6IG5vbmU7IiBjbGFzcz0iIj5DT1NFDQogbWFpbGluZyBsaXN0 PC9zcGFuPjxiciBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYig2MSwgNjEsIDYxKTsgY29sb3I6IHJn Yig2MSwgNjEsIDYxKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBm b250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0 OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxp Z246IGxlZnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1z cGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRl eHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgYmFj a2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyB0ZXh0LWRlY29yYXRpb246IG5vbmU7 IiBjbGFzcz0iIj4NCjxhIGhyZWY9Im1haWx0bzpDT1NFQGlldGYub3JnIiBzdHlsZT0iY29sb3I6 IGJsdWU7IHRleHQtZGVjb3JhdGlvbjogdW5kZXJsaW5lOyBmb250LWZhbWlseTogSGVsdmV0aWNh OyBmb250LXNpemU6IDEycHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6 IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1hbDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgb3Jw aGFuczogYXV0bzsgdGV4dC1hbGlnbjogbGVmdDsgdGV4dC1pbmRlbnQ6IDBweDsgdGV4dC10cmFu c2Zvcm06IG5vbmU7IHdoaXRlLXNwYWNlOiBub3JtYWw7IHdpZG93czogYXV0bzsgd29yZC1zcGFj aW5nOiAwcHg7IC13ZWJraXQtdGV4dC1zaXplLWFkanVzdDogYXV0bzsgLXdlYmtpdC10ZXh0LXN0 cm9rZS13aWR0aDogMHB4OyBiYWNrZ3JvdW5kLWNvbG9yOiByZ2IoMjU1LCAyNTUsIDI1NSk7IiBj bGFzcz0iIj5DT1NFQGlldGYub3JnPC9hPjxiciBzdHlsZT0iY2FyZXQtY29sb3I6IHJnYig2MSwg NjEsIDYxKTsgY29sb3I6IHJnYig2MSwgNjEsIDYxKTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsg Zm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBu b3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9ycGhh bnM6IGF1dG87IHRleHQtYWxpZ246IGxlZnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNm b3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2lu ZzogMHB4OyAtd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4dC1zdHJv a2Utd2lkdGg6IDBweDsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyB0ZXh0 LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYu b3JnL21haWxtYW4vbGlzdGluZm8vY29zZSIgc3R5bGU9ImNvbG9yOiBibHVlOyB0ZXh0LWRlY29y YXRpb246IHVuZGVybGluZTsgZm9udC1mYW1pbHk6IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4 OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFyaWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2Vp Z2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQt YWxpZ246IGxlZnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0 ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0 LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsg YmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1LCAyNTUpOyIgY2xhc3M9IiI+aHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9jb3NlPC9hPjxiciBzdHlsZT0iY2FyZXQtY29s b3I6IHJnYig2MSwgNjEsIDYxKTsgY29sb3I6IHJnYig2MSwgNjEsIDYxKTsgZm9udC1mYW1pbHk6 IEhlbHZldGljYTsgZm9udC1zaXplOiAxMnB4OyBmb250LXN0eWxlOiBub3JtYWw7IGZvbnQtdmFy aWFudC1jYXBzOiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBu b3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IGxlZnQ7IHRleHQtaW5kZW50OiAwcHg7 IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87 IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IC13ZWJr aXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweDsgYmFja2dyb3VuZC1jb2xvcjogcmdiKDI1NSwgMjU1 LCAyNTUpOyB0ZXh0LWRlY29yYXRpb246IG5vbmU7IiBjbGFzcz0iIj4NCjwvZGl2Pg0KPC9ibG9j a3F1b3RlPg0KPC9kaXY+DQo8YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxk aXY+PHNwYW4+DQo8cHJlPi0tIDxicj48L3ByZT4NCjxkaXYgc3R5bGU9IndpZHRoOiA3MWNoOyI+ U3RlZmFuIEhyaXN0b3pvdjwvZGl2Pg0KPGRpdiBzdHlsZT0id2lkdGg6IDcxY2g7Ij5EZXBhcnRt ZW50IEhhcmR3YXJlIFNlY3VyaXR5PC9kaXY+DQo8ZGl2IHN0eWxlPSJ3aWR0aDogNzFjaDsiPkZy YXVuaG9mZXIgSW5zdGl0dXRlIGZvciBBcHBsaWVkIGFuZCBJbnRlZ3JhdGVkIFNlY3VyaXR5IEFJ U0VDPC9kaXY+DQo8ZGl2IHN0eWxlPSJ3aWR0aDogNzFjaDsiPkxpY2h0ZW5iZXJnc3RyYcOfZSAx MSwgODU3NDggR2FyY2hpbmcgbmVhciBNdW5pY2gsIEdlcm1hbnk8L2Rpdj4NCjxkaXYgc3R5bGU9 IndpZHRoOiA3MWNoOyI+VGVsLiArNDkgODkgMzIyOTkgODYgMTU3PC9kaXY+DQo8ZGl2IHN0eWxl PSJ3aWR0aDogNzFjaDsiPjxhIGhyZWY9Im1haWx0bzpzdGVmYW4uaHJpc3Rvem92QGFpc2VjLmZy YXVuaG9mZXIuZGUiPnN0ZWZhbi5ocmlzdG96b3ZAYWlzZWMuZnJhdW5ob2Zlci5kZTwvYT48L2Rp dj4NCjxkaXYgc3R5bGU9IndpZHRoOiA3MWNoOyI+PGEgaHJlZj0iaHR0cHM6Ly93d3cuYWlzZWMu ZnJhdW5ob2Zlci5kZS8iPmh0dHBzOi8vd3d3LmFpc2VjLmZyYXVuaG9mZXIuZGUvPC9hPjwvZGl2 Pg0KPC9zcGFuPjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_5f48bd620c68728ccb83afef6f4c0dcbda6e6633camelaisecfraun_-- --_004_5f48bd620c68728ccb83afef6f4c0dcbda6e6633camelaisecfraun_ Content-Type: text/rust; name="cert.rs" Content-Description: cert.rs Content-Disposition: attachment; filename="cert.rs"; size=7853; creation-date="Tue, 15 Dec 2020 15:33:30 GMT"; modification-date="Tue, 15 Dec 2020 15:33:30 GMT" Content-ID: <128A7DF4838C4D45A47560DD69A0D4CA@EURP194.PROD.OUTLOOK.COM> Content-Transfer-Encoding: base64 dXNlIHNlcmRlX2Nib3I6OkRlc2VyaWFsaXplcjsKCnN0cnVjdCBUQlNDZXJ0aWZpY2F0ZSB7CiAg ICBjYm9yX2NlcnRfdHlwZTogdTgsCiAgICBjZXJ0X3NlcmlhbF9udW1iZXI6IFZlYzx1OD4sCiAg ICBpc3N1ZXI6IFZlYzx1OD4sCiAgICB2YWxpZGl0eV9ub3RfYmVmb3JlOiBpMTI4LAogICAgdmFs aWRpdHlfbm90X2FmdGVyOiBpMTI4LAogICAgc3ViamVjdDogVmVjPHU4PiwKICAgIHN1YmplY3Rf cGtfYWxnOiBpMTYsCiAgICBzdWJqZWN0X3BrOiBWZWM8dTg+LAogICAgZXh0ZW5zaW9uczogaTE2 LAogICAgaXNzdWVyX3Nnbl9hbGc6IGkxNiwKfQoKc3RydWN0IENCT1JDZXJ0aWZpY2F0ZSB7CiAg ICBzaWduZWRfZGF0YTogVmVjPHU4PiwKICAgIGRlY29kZWRfZGF0YTogVEJTQ2VydGlmaWNhdGUs CiAgICBzaWduYXR1cmU6IFZlYzx1OD4sCn0KCmZuIGRlY29kZV9uYXRpdmUoY2VydDogVmVjPHU4 PikgLT4gUmVzdWx0PENCT1JDZXJ0aWZpY2F0ZSwgJidzdGF0aWMgc3RyPiB7CiAgICBsZXQgbXV0 IGQgPSBEZXNlcmlhbGl6ZXI6OmZyb21fc2xpY2UoJmNlcnQpOwoKICAgIC8vMSkgdHlwZQogICAg bGV0IGNib3JfY2VydF90eXBlOiB1OCA9IHNlcmRlOjpkZTo6RGVzZXJpYWxpemU6OmRlc2VyaWFs aXplKCZtdXQgZCkudW53cmFwKCk7CgogICAgLy8yKSBzZXJpYWwgbnVtYmVyCiAgICBsZXQgbXV0 IG9mZnNldDogdXNpemUgPSBkLmJ5dGVfb2Zmc2V0KCk7CiAgICBsZXQgciA9ICZjZXJ0W29mZnNl dC4uXTsKICAgIGxldCBtdXQgZCA9IERlc2VyaWFsaXplcjo6ZnJvbV9zbGljZSgmcik7CiAgICBs ZXQgY2VydF9zZXJpYWxfbnVtYmVyOiAmW3U4XSA9IHNlcmRlOjpkZTo6RGVzZXJpYWxpemU6OmRl c2VyaWFsaXplKCZtdXQgZCkudW53cmFwKCk7CgogICAgLy8zKSBpc3N1ZXIKICAgIG9mZnNldCAr PSBkLmJ5dGVfb2Zmc2V0KCk7CiAgICBsZXQgciA9ICZjZXJ0W29mZnNldC4uXTsKICAgIGxldCBt dXQgZCA9IERlc2VyaWFsaXplcjo6ZnJvbV9zbGljZSgmcik7CiAgICBsZXQgaXNzdWVyOiAmW3U4 XSA9IHNlcmRlOjpkZTo6RGVzZXJpYWxpemU6OmRlc2VyaWFsaXplKCZtdXQgZCkudW53cmFwKCk7 CgogICAgLy80KSBWYWxpZGl0eSBub3QgYmVmb3JlCiAgICBvZmZzZXQgKz0gZC5ieXRlX29mZnNl dCgpOwogICAgbGV0IHIgPSAmY2VydFtvZmZzZXQuLl07CiAgICBsZXQgbXV0IGQgPSBEZXNlcmlh bGl6ZXI6OmZyb21fc2xpY2UoJnIpOwogICAgbGV0IHZhbGlkaXR5X25vdF9iZWZvcmU6IGkxMjgg PSBzZXJkZTo6ZGU6OkRlc2VyaWFsaXplOjpkZXNlcmlhbGl6ZSgmbXV0IGQpLnVud3JhcCgpOwoK ICAgIC8vNCkgVmFsaWRpdHkgbm90IGFmdGVyCiAgICBvZmZzZXQgKz0gZC5ieXRlX29mZnNldCgp OwogICAgbGV0IHIgPSAmY2VydFtvZmZzZXQuLl07CiAgICBsZXQgbXV0IGQgPSBEZXNlcmlhbGl6 ZXI6OmZyb21fc2xpY2UoJnIpOwogICAgbGV0IHZhbGlkaXR5X25vdF9hZnRlcjogaTEyOCA9IHNl cmRlOjpkZTo6RGVzZXJpYWxpemU6OmRlc2VyaWFsaXplKCZtdXQgZCkudW53cmFwKCk7CgogICAg Ly80KSBzdWJqZWN0CiAgICBvZmZzZXQgKz0gZC5ieXRlX29mZnNldCgpOwogICAgbGV0IHIgPSAm Y2VydFtvZmZzZXQuLl07CiAgICBsZXQgbXV0IGQgPSBEZXNlcmlhbGl6ZXI6OmZyb21fc2xpY2Uo JnIpOwogICAgbGV0IHN1YmplY3Q6ICZbdThdID0gc2VyZGU6OmRlOjpEZXNlcmlhbGl6ZTo6ZGVz ZXJpYWxpemUoJm11dCBkKS51bndyYXAoKTsKCiAgICAvLzUgc3ViamVjdF9wa19hbGcKICAgIG9m ZnNldCArPSBkLmJ5dGVfb2Zmc2V0KCk7CiAgICBsZXQgciA9ICZjZXJ0W29mZnNldC4uXTsKICAg IGxldCBtdXQgZCA9IERlc2VyaWFsaXplcjo6ZnJvbV9zbGljZSgmcik7CiAgICBsZXQgc3ViamVj dF9wa19hbGc6IGkxNiA9IHNlcmRlOjpkZTo6RGVzZXJpYWxpemU6OmRlc2VyaWFsaXplKCZtdXQg ZCkudW53cmFwKCk7CgogICAgLy82KSBzdWJqZWN0X3BrCiAgICBvZmZzZXQgKz0gZC5ieXRlX29m ZnNldCgpOwogICAgbGV0IHIgPSAmY2VydFtvZmZzZXQuLl07CiAgICBsZXQgbXV0IGQgPSBEZXNl cmlhbGl6ZXI6OmZyb21fc2xpY2UoJnIpOwogICAgbGV0IHN1YmplY3RfcGs6ICZbdThdID0gc2Vy ZGU6OmRlOjpEZXNlcmlhbGl6ZTo6ZGVzZXJpYWxpemUoJm11dCBkKS51bndyYXAoKTsKCiAgICAv LzcpIGV4dGVuc2lvbnMKICAgIG9mZnNldCArPSBkLmJ5dGVfb2Zmc2V0KCk7CiAgICBsZXQgciA9 ICZjZXJ0W29mZnNldC4uXTsKICAgIGxldCBtdXQgZCA9IERlc2VyaWFsaXplcjo6ZnJvbV9zbGlj ZSgmcik7CiAgICBsZXQgZXh0ZW5zaW9uczogaTE2ID0gc2VyZGU6OmRlOjpEZXNlcmlhbGl6ZTo6 ZGVzZXJpYWxpemUoJm11dCBkKS51bndyYXAoKTsKCiAgICAvLzgpIGlzc3Vlcl9zZ25fYWxnCiAg ICBvZmZzZXQgKz0gZC5ieXRlX29mZnNldCgpOwogICAgbGV0IHIgPSAmY2VydFtvZmZzZXQuLl07 CiAgICBsZXQgbXV0IGQgPSBEZXNlcmlhbGl6ZXI6OmZyb21fc2xpY2UoJnIpOwogICAgbGV0IGlz c3Vlcl9zZ25fYWxnOiBpMTYgPSBzZXJkZTo6ZGU6OkRlc2VyaWFsaXplOjpkZXNlcmlhbGl6ZSgm bXV0IGQpLnVud3JhcCgpOwoKICAgIC8vOSkgc2lnbmF0dXJlIGFuZCBzaWduZWQgZGF0YQogICAg b2Zmc2V0ICs9IGQuYnl0ZV9vZmZzZXQoKTsKICAgIGxldCByID0gJmNlcnRbb2Zmc2V0Li5dOwog ICAgbGV0IG11dCBkID0gRGVzZXJpYWxpemVyOjpmcm9tX3NsaWNlKCZyKTsKICAgIGxldCBzaWdu YXR1cmU6ICZbdThdID0gc2VyZGU6OmRlOjpEZXNlcmlhbGl6ZTo6ZGVzZXJpYWxpemUoJm11dCBk KS51bndyYXAoKTsKCiAgICAvL2hlcmUgd2UgZ2V0IHRoZSBzaWduZWQgZGF0YQogICAgbGV0IHNp Z25lZF9kYXRhID0gY2VydFsuLm9mZnNldF0udG9fdmVjKCk7CgogICAgcHJpbnRsbiEoIi0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tIik7CiAgICBw cmludGxuISgiY2Jvcl9jZXJ0X3R5cGUgaXM6IHs6P30iLCBjYm9yX2NlcnRfdHlwZSk7CiAgICBw cmludGxuISgiY2VydF9zZXJpYWxfbnVtYmVyIGlzOiB7OjAyeD99IiwgY2VydF9zZXJpYWxfbnVt YmVyKTsKICAgIHByaW50bG4hKCJpc3N1ZXIgaXM6IHs6P30iLCBpc3N1ZXIpOwogICAgcHJpbnRs biEoInZhbGlkaXR5X25vdF9iZWZvcmUgaXM6IHs6P30iLCB2YWxpZGl0eV9ub3RfYmVmb3JlKTsK ICAgIHByaW50bG4hKCJ2YWxpZGl0eV9ub3RfYWZ0ZXIgaXM6IHs6P30iLCB2YWxpZGl0eV9ub3Rf YWZ0ZXIpOwogICAgcHJpbnRsbiEoInN1YmplY3QgaXM6IHs6MDJ4P30iLCBzdWJqZWN0KTsKICAg IHByaW50bG4hKCJzdWJqZWN0X3BrX2FsZyBpczogezp9Iiwgc3ViamVjdF9wa19hbGcpOwogICAg cHJpbnRsbiEoInN1YmplY3RfcGsgaXM6IHs6MDJ4P30iLCBzdWJqZWN0X3BrKTsKICAgIHByaW50 bG4hKCJleHRlbnNpb25zIGlzOiB7On0iLCBleHRlbnNpb25zKTsKICAgIHByaW50bG4hKCJpc3N1 ZXJfc2duX2FsZyBpczogezp9IiwgaXNzdWVyX3Nnbl9hbGcpOwogICAgcHJpbnRsbiEoInNpZ25l ZF9kYXRhIGlzOiB7OjAyeD99Iiwgc2lnbmVkX2RhdGEpOwogICAgcHJpbnRsbiEoInNpZ25hdHVy ZSBpczogezowMng/fSIsIHNpZ25hdHVyZSk7CiAgICBwcmludGxuISgiLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0iKTsKCiAgICBsZXQgZGVjb2Rl ZF9kYXRhID0gVEJTQ2VydGlmaWNhdGUgewogICAgICAgIGNib3JfY2VydF90eXBlLAogICAgICAg IGNlcnRfc2VyaWFsX251bWJlcjogY2VydF9zZXJpYWxfbnVtYmVyLnRvX3ZlYygpLAogICAgICAg IGlzc3VlcjogaXNzdWVyLnRvX3ZlYygpLAogICAgICAgIHZhbGlkaXR5X25vdF9iZWZvcmUsCiAg ICAgICAgdmFsaWRpdHlfbm90X2FmdGVyLAogICAgICAgIHN1YmplY3Q6IHN1YmplY3QudG9fdmVj KCksCiAgICAgICAgc3ViamVjdF9wa19hbGcsCiAgICAgICAgc3ViamVjdF9wazogc3ViamVjdF9w ay50b192ZWMoKSwKICAgICAgICBleHRlbnNpb25zLAogICAgICAgIGlzc3Vlcl9zZ25fYWxnLAog ICAgfTsKCiAgICBPayhDQk9SQ2VydGlmaWNhdGUgewogICAgICAgIHNpZ25lZF9kYXRhLAogICAg ICAgIGRlY29kZWRfZGF0YSwKICAgICAgICBzaWduYXR1cmU6IHNpZ25hdHVyZS50b192ZWMoKSwK ICAgIH0pCn0KCiNbY2ZnKHRlc3QpXQptb2QgdGVzdHMgewogICAgdXNlIHN1cGVyOjoqOwoKICAg ICNbdGVzdF0KICAgIGZuIGRlY29kZV9uYXRpdmVfdGVzdCgpIHsKICAgICAgICBsZXQgY2VydCA9 IHZlYyFbCiAgICAgICAgICAgIDB4MDEsIDB4NDMsIDB4MDEsIDB4RjUsIDB4MEQsIDB4NkIsIDB4 NTIsIDB4NDYsIDB4NDMsIDB4MjAsIDB4NzQsIDB4NjUsIDB4NzMsIDB4NzQsCiAgICAgICAgICAg IDB4MjAsIDB4NDMsIDB4NDEsIDB4MUEsIDB4NUUsIDB4MEIsIDB4RTEsIDB4MDAsIDB4MUEsIDB4 NjAsIDB4MTgsIDB4OTYsIDB4MDAsIDB4NDYsCiAgICAgICAgICAgIDB4MDEsIDB4MjMsIDB4NDUs IDB4NjcsIDB4ODksIDB4QUIsIDB4MDEsIDB4NTgsIDB4MjEsIDB4MDIsIDB4QjEsIDB4MjEsIDB4 NkEsIDB4QjksCiAgICAgICAgICAgIDB4NkUsIDB4NUIsIDB4M0IsIDB4MzMsIDB4NDAsIDB4RjUs IDB4QkQsIDB4RjAsIDB4MkUsIDB4NjksIDB4M0YsIDB4MTYsIDB4MjEsIDB4M0EsCiAgICAgICAg ICAgIDB4MDQsIDB4NTIsIDB4NUUsIDB4RDQsIDB4NDQsIDB4NTAsIDB4QjEsIDB4MDEsIDB4OUMs IDB4MkQsIDB4RkQsIDB4MzgsIDB4MzgsIDB4QUIsCiAgICAgICAgICAgIDB4MDEsIDB4MDYsIDB4 NTgsIDB4NDAsIDB4NDQsIDB4NUQsIDB4NzksIDB4OEMsIDB4OTAsIDB4RTcsIDB4RjUsIDB4MDAs IDB4REMsIDB4NzQsCiAgICAgICAgICAgIDB4N0EsIDB4NjUsIDB4NEMsIDB4RUMsIDB4NkMsIDB4 RkEsIDB4NkYsIDB4MDMsIDB4NzIsIDB4NzYsIDB4RTEsIDB4NEUsIDB4NTIsIDB4RUQsCiAgICAg ICAgICAgIDB4MDcsIDB4RkMsIDB4MTYsIDB4MjksIDB4NEMsIDB4ODQsIDB4NjYsIDB4MEQsIDB4 NUEsIDB4MzMsIDB4OTgsIDB4NUQsIDB4RkIsIDB4RDQsCiAgICAgICAgICAgIDB4QkYsIDB4REQs IDB4NkQsIDB4NEEsIDB4Q0YsIDB4MzgsIDB4MDQsIDB4QzMsIDB4RDQsIDB4NkUsIDB4QkYsIDB4 M0IsIDB4N0YsIDB4QTYsCiAgICAgICAgICAgIDB4MjYsIDB4NDAsIDB4NjcsIDB4NEYsIDB4QzAs IDB4MzUsIDB4NEYsIDB4QTAsIDB4NTYsIDB4REIsIDB4QUUsIDB4QTYsCiAgICAgICAgXTsKICAg ICAgICBsZXQgZCA9IGRlY29kZV9uYXRpdmUoY2VydCkudW53cmFwKCk7CiAgICAgICAgbGV0IGUg PSBUQlNDZXJ0aWZpY2F0ZSB7CiAgICAgICAgICAgIGNib3JfY2VydF90eXBlOiAxLAogICAgICAg ICAgICBjZXJ0X3NlcmlhbF9udW1iZXI6IHZlYyFbMHgwMSwgMHhmNSwgMHgwZF0sCiAgICAgICAg ICAgIGlzc3VlcjogdmVjIVs4MiwgNzAsIDY3LCAzMiwgMTE2LCAxMDEsIDExNSwgMTE2LCAzMiwg NjcsIDY1XSwKICAgICAgICAgICAgdmFsaWRpdHlfbm90X2JlZm9yZTogMTU3NzgzNjgwMCwKICAg ICAgICAgICAgdmFsaWRpdHlfbm90X2FmdGVyOiAxNjEyMjI0MDAwLAogICAgICAgICAgICBzdWJq ZWN0OiB2ZWMhWzB4MDEsIDB4MjMsIDB4NDUsIDB4NjcsIDB4ODksIDB4YWJdLAogICAgICAgICAg ICBzdWJqZWN0X3BrX2FsZzogMSwKICAgICAgICAgICAgc3ViamVjdF9wazogdmVjIVsKICAgICAg ICAgICAgICAgIDB4MDIsIDB4QjEsIDB4MjEsIDB4NkEsIDB4QjksIDB4NkUsIDB4NUIsIDB4M0Is IDB4MzMsIDB4NDAsIDB4RjUsIDB4QkQsIDB4RjAsIDB4MkUsCiAgICAgICAgICAgICAgICAweDY5 LCAweDNGLCAweDE2LCAweDIxLCAweDNBLCAweDA0LCAweDUyLCAweDVFLCAweEQ0LCAweDQ0LCAw eDUwLCAweEIxLCAweDAxLCAweDlDLAogICAgICAgICAgICAgICAgMHgyRCwgMHhGRCwgMHgzOCwg MHgzOCwgMHhBQiwKICAgICAgICAgICAgXSwKICAgICAgICAgICAgZXh0ZW5zaW9uczogMSwKICAg ICAgICAgICAgaXNzdWVyX3Nnbl9hbGc6IDYsCiAgICAgICAgfTsKCiAgICAgICAgbGV0IGV4cGVj dGVkX3NnbiA9IHZlYyFbCiAgICAgICAgICAgIDB4NDQsIDB4NUQsIDB4NzksIDB4OEMsIDB4OTAs IDB4RTcsIDB4RjUsIDB4MDAsIDB4REMsIDB4NzQsIDB4N0EsIDB4NjUsIDB4NEMsIDB4RUMsCiAg ICAgICAgICAgIDB4NkMsIDB4RkEsIDB4NkYsIDB4MDMsIDB4NzIsIDB4NzYsIDB4RTEsIDB4NEUs IDB4NTIsIDB4RUQsIDB4MDcsIDB4RkMsIDB4MTYsIDB4MjksCiAgICAgICAgICAgIDB4NEMsIDB4 ODQsIDB4NjYsIDB4MEQsIDB4NUEsIDB4MzMsIDB4OTgsIDB4NUQsIDB4RkIsIDB4RDQsIDB4QkYs IDB4REQsIDB4NkQsIDB4NEEsCiAgICAgICAgICAgIDB4Q0YsIDB4MzgsIDB4MDQsIDB4QzMsIDB4 RDQsIDB4NkUsIDB4QkYsIDB4M0IsIDB4N0YsIDB4QTYsIDB4MjYsIDB4NDAsIDB4NjcsIDB4NEYs CiAgICAgICAgICAgIDB4QzAsIDB4MzUsIDB4NEYsIDB4QTAsIDB4NTYsIDB4REIsIDB4QUUsIDB4 QTYsCiAgICAgICAgXTsKCiAgICAgICAgbGV0IGV4cGVjdGVkX3NpZ25lZF9kYXRhID0gdmVjIVsK ICAgICAgICAgICAgMHgwMSwgMHg0MywgMHgwMSwgMHhGNSwgMHgwRCwgMHg2QiwgMHg1MiwgMHg0 NiwgMHg0MywgMHgyMCwgMHg3NCwgMHg2NSwgMHg3MywgMHg3NCwKICAgICAgICAgICAgMHgyMCwg MHg0MywgMHg0MSwgMHgxQSwgMHg1RSwgMHgwQiwgMHhFMSwgMHgwMCwgMHgxQSwgMHg2MCwgMHgx OCwgMHg5NiwgMHgwMCwgMHg0NiwKICAgICAgICAgICAgMHgwMSwgMHgyMywgMHg0NSwgMHg2Nywg MHg4OSwgMHhBQiwgMHgwMSwgMHg1OCwgMHgyMSwgMHgwMiwgMHhCMSwgMHgyMSwgMHg2QSwgMHhC OSwKICAgICAgICAgICAgMHg2RSwgMHg1QiwgMHgzQiwgMHgzMywgMHg0MCwgMHhGNSwgMHhCRCwg MHhGMCwgMHgyRSwgMHg2OSwgMHgzRiwgMHgxNiwgMHgyMSwgMHgzQSwKICAgICAgICAgICAgMHgw NCwgMHg1MiwgMHg1RSwgMHhENCwgMHg0NCwgMHg1MCwgMHhCMSwgMHgwMSwgMHg5QywgMHgyRCwg MHhGRCwgMHgzOCwgMHgzOCwgMHhBQiwKICAgICAgICAgICAgMHgwMSwgMHgwNiwKICAgICAgICBd OwoKICAgICAgICBhc3NlcnRfZXEhKGQuZGVjb2RlZF9kYXRhLmNib3JfY2VydF90eXBlLCBlLmNi b3JfY2VydF90eXBlKTsKICAgICAgICBhc3NlcnRfZXEhKGQuZGVjb2RlZF9kYXRhLmNlcnRfc2Vy aWFsX251bWJlciwgZS5jZXJ0X3NlcmlhbF9udW1iZXIpOwogICAgICAgIGFzc2VydF9lcSEoZC5k ZWNvZGVkX2RhdGEuaXNzdWVyLCBlLmlzc3Vlcik7CiAgICAgICAgYXNzZXJ0X2VxIShkLmRlY29k ZWRfZGF0YS52YWxpZGl0eV9ub3RfYmVmb3JlLCBlLnZhbGlkaXR5X25vdF9iZWZvcmUpOwogICAg ICAgIGFzc2VydF9lcSEoZC5kZWNvZGVkX2RhdGEudmFsaWRpdHlfbm90X2FmdGVyLCBlLnZhbGlk aXR5X25vdF9hZnRlcik7CiAgICAgICAgYXNzZXJ0X2VxIShkLmRlY29kZWRfZGF0YS5zdWJqZWN0 LCBlLnN1YmplY3QpOwogICAgICAgIGFzc2VydF9lcSEoZC5kZWNvZGVkX2RhdGEuc3ViamVjdF9w a19hbGcsIGUuc3ViamVjdF9wa19hbGcpOwogICAgICAgIGFzc2VydF9lcSEoZC5kZWNvZGVkX2Rh dGEuc3ViamVjdF9waywgZS5zdWJqZWN0X3BrKTsKICAgICAgICBhc3NlcnRfZXEhKGQuZGVjb2Rl ZF9kYXRhLmV4dGVuc2lvbnMsIGUuZXh0ZW5zaW9ucyk7CiAgICAgICAgYXNzZXJ0X2VxIShkLmRl Y29kZWRfZGF0YS5pc3N1ZXJfc2duX2FsZywgZS5pc3N1ZXJfc2duX2FsZyk7CiAgICAgICAgYXNz ZXJ0X2VxIShkLnNpZ25hdHVyZSwgZXhwZWN0ZWRfc2duKTsKICAgICAgICBhc3NlcnRfZXEhKGQu c2lnbmVkX2RhdGEsIGV4cGVjdGVkX3NpZ25lZF9kYXRhKTsKICAgIH0KfQo= --_004_5f48bd620c68728ccb83afef6f4c0dcbda6e6633camelaisecfraun_-- From nobody Tue Dec 15 08:54:07 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C258C3A1255 for ; Tue, 15 Dec 2020 08:54:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9h9VwreMjGhy for ; Tue, 15 Dec 2020 08:54:03 -0800 (PST) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B6AF83A1256 for ; Tue, 15 Dec 2020 08:54:02 -0800 (PST) Received: from [192.168.217.120] (p548dca87.dip0.t-ipconnect.de [84.141.202.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 4CwPVH6hJRzyVk; Tue, 15 Dec 2020 17:53:59 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) From: Carsten Bormann In-Reply-To: <25A34E20-C4A4-4F15-B457-73CB1752A67F@island-resort.com> Date: Tue, 15 Dec 2020 17:53:59 +0100 Cc: John Mattsson , cose X-Mao-Original-Outgoing-Id: 629744039.478704-8f9e66bda5e910fc88aa1b1223fdf1cb Content-Transfer-Encoding: quoted-printable Message-Id: <309573EB-E750-411E-ABED-D6492993493D@tzi.org> References: <160689580542.14210.17819515187695761515@ietfa.amsl.com> <4A0FDEA0-1264-418D-801C-6C710A3BE6AD@ericsson.com> <25A34E20-C4A4-4F15-B457-73CB1752A67F@island-resort.com> To: Laurence Lundblade X-Mailer: Apple Mail (2.3608.120.23.2.4) Archived-At: Subject: Re: [COSE] bstr wrapping for native signed (was Re: New Version Notification for draft-mattsson-cose-cbor-cert-compress-05.txt) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Dec 2020 16:54:06 -0000 On 2020-12-07, at 23:02, Laurence Lundblade = wrote: >=20 > I don=E2=80=99t think it works very well at all to directly sign = encoded CBOR. It should be wrapped in a byte string. Sorry for coming in late; I=E2=80=99m having a hard time following this = thread. Generally, we don=E2=80=99t want to do the =E2=80=9CXMLDsig=E2=80=9D = thing and require canonical (the new word is =E2=80=9Cdeterministic=E2=80=9D= in RFC 8949) encoding of CBOR data items re-encoded as signature input. But it seems to me that the structure described on page 8 of = draft-mattsson-cose-cbor-cert-compress-05.txt doesn=E2=80=99t need that: = https://tools.ietf.org/html/draft-mattsson-cose-cbor-cert-compress-05#page= -8 This is a CBOR sequence (RFC 8742) of 11 CBOR data items, 10 of which = form a subsequence that would be the signing input, and the 11th being a = byte string with the signature. I=E2=80=99m not sure the current draft defines how to do that for native = signing, and I hope the procedure will be culturally compatible with = COSE at some point (i.e., facilitate some code reuse/sharing). RFC 8949 does not prescribe an API for a generic CBOR decoder. But we = can go by the 60+ implementations documented on = https://cbor.io/impls.html =E2=80=94 generally these do not provide ways = to decode an encoded data item and then ask the decoder for the position = and length of a specific subtree in the encoded input. I think this is = what Laurence has in mind. But the situation here is somewhat different: The top level of a = X.509-compatible CBOR certificate is that sequence. Many CBOR = implementations do not address CBOR sequences (RFC 8742) explicitly, = they just allow you to decode an item from a start position and give you = the end position. Applying that 10 times gives you an end position that = can be used with the start of the encoded certificate as the extent of = the signing input. The result of signing that can then be compared with = the content of the 11th item. So I think that we do not have the same level of problem we would have = if we needed to obtain start/end positions for something deep in the = structure. Gr=C3=BC=C3=9Fe, Carsten From nobody Tue Dec 15 12:29:21 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 80E503A171A; Tue, 15 Dec 2020 12:29:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.399 X-Spam-Level: X-Spam-Status: No, score=-1.399 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FORGED_FROMDOMAIN=0.25, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.25, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UmJD1lqBTJl2; Tue, 15 Dec 2020 12:29:18 -0800 (PST) Received: from mail-lf1-f54.google.com (mail-lf1-f54.google.com [209.85.167.54]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D22C03A171E; Tue, 15 Dec 2020 12:29:17 -0800 (PST) Received: by mail-lf1-f54.google.com with SMTP id s26so8120963lfc.8; Tue, 15 Dec 2020 12:29:17 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=LcL3eoavefVpToM74ZUr0yGG80rTnusqNqVVUeFmYDI=; b=sn2E8BeadquKRy4LAMEwiGTZUNzKK1mwCGby4rKZWWO4Xt8FHG7bN6xuVkreGNwRlC D3MhNiuDU7xc5vK+4hq6xvtNW+BfhHpdrBFImdr/GTt1In2044TBOfDdohrKh0uTggrF VHU3yQyxywuii4uHMDCG0kL8fUlZRDSdPUfyHPKWnsnBoWpO/yp9SbLESK+Iat4qJawg hQ+5TZ2fmGOrcJuICAHohjfkwV9AyOGn+0ET1WD8ewPHF80+ru7I0NMnE9SwObEWs2jm Y4PaMauHzXpd6r8cbNVTySkY72Wx1c+5YS5CRko9OF9KqhYOZozIbZ0B8XRSXWdnC2vc gnUg== X-Gm-Message-State: AOAM530BYtjwHL3hEfstJJlqECI/TmZSYco3pG0xfRUUscFm0RQFvF+1 jgSvVaDq41Ps/R7eJKn+XLb5XVGrSrrA1d6DQ55imXsGih8= X-Google-Smtp-Source: ABdhPJwr36uhJ/1JEQEK1cnxD3xYhM2Z0KcnJzynPCG59zEOMuH+Mw7dsdgo6fSeQJbN/CYTKeXTlSRNX+XY6v1qbzs= X-Received: by 2002:a2e:920b:: with SMTP id k11mr13192852ljg.313.1608064155727; Tue, 15 Dec 2020 12:29:15 -0800 (PST) MIME-Version: 1.0 References: <160336909147.3199.13133404901002626604@ietfa.amsl.com> <19db903bd17f7aaf0d0bb31d0271f81eeca1028f.camel@ericsson.com> In-Reply-To: <19db903bd17f7aaf0d0bb31d0271f81eeca1028f.camel@ericsson.com> From: Barry Leiba Date: Tue, 15 Dec 2020 15:29:04 -0500 Message-ID: To: Magnus Westerlund Cc: "ivaylo@ackl.io" , "cose-chairs@ietf.org" , "iesg@ietf.org" , "cose@ietf.org" , "draft-ietf-cose-x509@ietf.org" Content-Type: text/plain; charset="UTF-8" Archived-At: Subject: Re: [COSE] Magnus Westerlund's Discuss on draft-ietf-cose-x509-07: (with DISCUSS) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Dec 2020 20:29:20 -0000 Indeed, it will get a new IETF last call, and then come back on the IESG agenda. b On Tue, Dec 15, 2020 at 3:42 AM Magnus Westerlund wrote: > > Hi, > > It sounds good that you are making progress. > > Barry, do you plan to make this an returing item to the IESG telechat when it is > ready due to its elevated status? > > Cheers > > Magnus > > On Sun, 2020-12-13 at 23:12 +0100, Ivaylo Petrov wrote: > > Hello Magnus, > > > > Thank you for your review and apologies for the delay! I have changed the > > document status as you requested. The change could be seen in commitdf4c50d . > > I have some technical difficulties and after they are resolved, I will upload > > a new version of the draft. After that I will work with Barry Leiba to have > > the new IETF last call. > > > > Best regards, > > Ivaylo > > > > > > On Thu, Oct 22, 2020 at 2:18 PM Magnus Westerlund via Datatracker < > > noreply@ietf.org> wrote: > > > Magnus Westerlund has entered the following ballot position for > > > draft-ietf-cose-x509-07: Discuss > > > > > > When responding, please keep the subject line intact and reply to all > > > email addresses included in the To and CC lines. (Feel free to cut this > > > introductory paragraph, however.) > > > > > > > > > Please refer to https://www.ietf.org/iesg/statement/discuss-criteria.html > > > for more information about IESG DISCUSS and COMMENT positions. > > > > > > > > > The document, along with other ballot positions, can be found here: > > > https://datatracker.ietf.org/doc/draft-ietf-cose-x509/ > > > > > > > > > > > > ---------------------------------------------------------------------- > > > DISCUSS: > > > ---------------------------------------------------------------------- > > > > > > I think the topic should be fairly easily to resolve one way or another. > > > However, even after having read the reply to Marin's comment I don't think > > > this > > > document is published with the right status. > > > > > > - The document defines new CBOR attributes, that is standard track work as > > > it > > > comes out as consensus document from a IETF WG. - It does not define or > > > document crypto algorithm just refer to existing ones. - The charter item > > > might > > > have been reasonable as informational if existing attributes could have been > > > used. With the choice to define new attributes I think this has entered > > > standards track. - The status of the document I think will also affect the > > > value that IANA might assign to these COSE Header Parameters. > > > > > > If there are additional considerations I am happy to learn about them. > > > > > > Else, I would propose a change of status to proposed standard and redo the > > > IETF > > > last call. > > > > > > > > > > > > > > > From nobody Tue Dec 15 12:38:16 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 236C63A1729 for ; Tue, 15 Dec 2020 12:38:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jln315HF8TtJ for ; Tue, 15 Dec 2020 12:38:13 -0800 (PST) Received: from p3plsmtpa07-05.prod.phx3.secureserver.net (p3plsmtpa07-05.prod.phx3.secureserver.net [173.201.192.234]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 663023A1726 for ; Tue, 15 Dec 2020 12:38:13 -0800 (PST) Received: from [192.168.1.44] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id pH5Hk5vfDHJb8pH5IkrTEC; Tue, 15 Dec 2020 13:38:12 -0700 X-CMAE-Analysis: v=2.4 cv=KdIXDSUD c=1 sm=1 tr=0 ts=5fd91eb4 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=IkcTkHD0fZMA:10 a=gKmFwSsBAAAA:8 a=K6EGIJCdAAAA:8 a=48vgC7mUAAAA:8 a=PHF3khtbAAAA:8 a=I51eZ8ofxG07gA8cNXcA:9 a=QEXdDO2ut3YA:10 a=kK6gr09sxA8A:10 a=nnPW6aIcBuj1ljLj_o6Q:22 a=L6pVIi0Kn1GYQfi8-iRI:22 a=w1C3t2QeGrPiZgrLijVG:22 a=Lvbtw_NH3wiGVeKmUjfz:22 X-SECURESERVER-ACCT: lgl@island-resort.com Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.1\)) From: Laurence Lundblade In-Reply-To: <309573EB-E750-411E-ABED-D6492993493D@tzi.org> Date: Tue, 15 Dec 2020 12:38:11 -0800 Cc: John Mattsson , cose Content-Transfer-Encoding: quoted-printable Message-Id: <6FD36AA0-E5FE-4D2D-AB25-0EF379D97841@island-resort.com> References: <160689580542.14210.17819515187695761515@ietfa.amsl.com> <4A0FDEA0-1264-418D-801C-6C710A3BE6AD@ericsson.com> <25A34E20-C4A4-4F15-B457-73CB1752A67F@island-resort.com> <309573EB-E750-411E-ABED-D6492993493D@tzi.org> To: Carsten Bormann X-Mailer: Apple Mail (2.3608.120.23.2.1) X-CMAE-Envelope: MS4xfLVbwZKudNP8AkqqL3tHE1jYht40pkZ5wETw3pGBMqaP7ZaXEcsm/aiY5RWoICfFys8SVGrE5nWk5QHjSzQmT9J54I2YWdY5fgumAs+m1F/13o0otK5l LkjrYZk3mxDoVw+yoBKQyOE1WDSDxiDj58RGOpPCh4A/yVlywuslEF/OsiqKTmjVr2oLZ4B1sAuF7SY6DIwJwCCECEV/iQg1bMNqaBSXdsKlQPWiZ2UtCrm/ pxpWusauXgTTs9nvmxdkA+6gK8MY/ZhdAnBDYAt+O5k= Archived-At: Subject: Re: [COSE] bstr wrapping for native signed (was Re: New Version Notification for draft-mattsson-cose-cbor-cert-compress-05.txt) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Dec 2020 20:38:15 -0000 > On Dec 15, 2020, at 8:53 AM, Carsten Bormann wrote: >=20 > On 2020-12-07, at 23:02, Laurence Lundblade = wrote: >>=20 >> I don=E2=80=99t think it works very well at all to directly sign = encoded CBOR. It should be wrapped in a byte string. >=20 > Sorry for coming in late; I=E2=80=99m having a hard time following = this thread. >=20 > Generally, we don=E2=80=99t want to do the =E2=80=9CXMLDsig=E2=80=9D = thing and require canonical (the new word is =E2=80=9Cdeterministic=E2=80=9D= in RFC 8949) encoding of CBOR data items re-encoded as signature input. >=20 > But it seems to me that the structure described on page 8 of = draft-mattsson-cose-cbor-cert-compress-05.txt doesn=E2=80=99t need that: >=20 > = https://tools.ietf.org/html/draft-mattsson-cose-cbor-cert-compress-05#page= -8 >=20 > This is a CBOR sequence (RFC 8742) of 11 CBOR data items, 10 of which = form a subsequence that would be the signing input, and the 11th being a = byte string with the signature. > I=E2=80=99m not sure the current draft defines how to do that for = native signing, and I hope the procedure will be culturally compatible = with COSE at some point (i.e., facilitate some code reuse/sharing). >=20 > RFC 8949 does not prescribe an API for a generic CBOR decoder. But we = can go by the 60+ implementations documented on = https://cbor.io/impls.html =E2=80=94 generally these do not provide ways = to decode an encoded data item and then ask the decoder for the position = and length of a specific subtree in the encoded input. I think this is = what Laurence has in mind. Yes, you need the offset of the end of the to-be-hashed data returned by = the CBOR decoder (or some equivalent way of knowing what to hash). I = wouldn=E2=80=99t expect CBOR decoders to return this offset as it = doesn=E2=80=99t seem necessary for anything but this particularly use = case, not even for COSE. > But the situation here is somewhat different: The top level of a = X.509-compatible CBOR certificate is that sequence. Many CBOR = implementations do not address CBOR sequences (RFC 8742) explicitly, = they just allow you to decode an item from a start position and give you = the end position. Applying that 10 times gives you an end position that = can be used with the start of the encoded certificate as the extent of = the signing input. The result of signing that can then be compared with = the content of the 11th item. >=20 > So I think that we do not have the same level of problem we would have = if we needed to obtain start/end positions for something deep in the = structure. I agree that this is not the same level of problem because the start = position is 0 and the end position is not as hard to find as in COSE. = But it still seems like a problem that may require change to many = otherwise complete CBOR decoders. My decoder, QCBOR, works on sequence = but doesn=E2=80=99t return offsets.. Some other decoder might process = the CBOR into an internal tree structure first and not record the = offsets and thus not be able to return them. When I spoke of hacking the decoder previously, it was modifications to = know the offset.=20 LL From nobody Tue Dec 15 12:46:25 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 67B243A172D for ; Tue, 15 Dec 2020 12:46:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HCL28N7ywHqE for ; Tue, 15 Dec 2020 12:46:20 -0800 (PST) Received: from p3plsmtpa07-07.prod.phx3.secureserver.net (p3plsmtpa07-07.prod.phx3.secureserver.net [173.201.192.236]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3B5643A172E for ; Tue, 15 Dec 2020 12:46:20 -0800 (PST) Received: from [192.168.1.44] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id pHD9kqTYFsWMDpHD9k4ULZ; Tue, 15 Dec 2020 13:46:19 -0700 X-CMAE-Analysis: v=2.4 cv=WZ/J12tX c=1 sm=1 tr=0 ts=5fd9209b a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=xkuYR-lJ8PZcQY-UfpoA:9 a=QEXdDO2ut3YA:10 a=OQiMAfhh0-gRzDQG:21 a=_W_S_7VecoQA:10 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: <05EBC54F-6765-448F-A5D0-7052C3D2B454@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_B180E8E4-0324-47D2-B6D8-3E6290F15258" Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.1\)) Date: Tue, 15 Dec 2020 12:46:19 -0800 In-Reply-To: <5f48bd620c68728ccb83afef6f4c0dcbda6e6633.camel@aisec.fraunhofer.de> Cc: "goran.selander@ericsson.com" , "john.mattsson=40ericsson.com@dmarc.ietf.org" , "cose@ietf.org" To: "Hristozov, Stefan" References: <160689580542.14210.17819515187695761515@ietfa.amsl.com> <4A0FDEA0-1264-418D-801C-6C710A3BE6AD@ericsson.com> <25A34E20-C4A4-4F15-B457-73CB1752A67F@island-resort.com> <14369eac3a2205f3c5cb7f74c579fdf568570914.camel@aisec.fraunhofer.de> <3F4B94C1-FE8F-4AEC-862A-894CDC59D385@island-resort.com> <5f48bd620c68728ccb83afef6f4c0dcbda6e6633.camel@aisec.fraunhofer.de> X-Mailer: Apple Mail (2.3608.120.23.2.1) X-CMAE-Envelope: MS4xfInVdaFpFPinXdyMLkTLIPsEfJi3rnFMETpywOfkBUsTW3QquI1VjxDnILbfTvf7y4UdBcCDHarDtsV+B31A5X6yKUBTUsmaP8F6hAHVn39HJ4wkSEte L0g4tNNFWdzITKfnS3J7eSnUvGdkbcWmiahMaaVJ0JEsQ3skgTQrQ6YqL5n7+waTeixw8SQo6oJssRTAf801OK+Oa/3HtfZR+Zq1naKRPZWJQxSFkMOFQFEv tPC+OiBz3mmOCgSFnzG29WMZWuCsEoGS+LMrixS1QCdMkFgn900BB3WwtjzgdrBO7rwSVCH5dTIwTfHUCr2xXuUHE2EjkXt9t+H/M0p3DUU= Archived-At: Subject: Re: [COSE] bstr wrapping for native signed (was Re: New Version Notification for draft-mattsson-cose-cbor-cert-compress-05.txt) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Dec 2020 20:46:24 -0000 --Apple-Mail=_B180E8E4-0324-47D2-B6D8-3E6290F15258 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 > On Dec 15, 2020, at 7:33 AM, Hristozov, Stefan = wrote: >=20 > What exactly do you mean by hacking the decoder? Do you mean to track = the offset? What are the alternatives? I mean modifying the decoder to return the offset (or some other access = to to-be-hashed data). Not all, maybe only very few, return the offset. = There is no need return it. My own decoder, QCBOR, maintains an internal cursor for the position in = the CBOR tree, but doesn=E2=80=99t return byte offsets. There is no need = to. The alternative is to change the CBOR cert design so the to-be-signed = data is wrapped in a byte string like COSE does (or just use COSE for = signing native CBOR (which gets you code re use)). LL --Apple-Mail=_B180E8E4-0324-47D2-B6D8-3E6290F15258 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
On = Dec 15, 2020, at 7:33 AM, Hristozov, Stefan <stefan.hristozov@aisec.fraunhofer.de> wrote:

What exactly do you mean by = hacking the decoder? Do you mean to track the offset? What are the = alternatives?

I mean = modifying the decoder to return the offset (or some other access to = to-be-hashed data). Not all, maybe only very few, return the offset. = There is no need return it.

My own = decoder, QCBOR, maintains an internal cursor for the position in the = CBOR tree, but doesn=E2=80=99t return byte offsets. There is no need = to.

The alternative is to change the = CBOR cert design so the to-be-signed data is wrapped in a byte string = like COSE does (or just use COSE for signing native CBOR (which gets you = code re use)).

LL


= --Apple-Mail=_B180E8E4-0324-47D2-B6D8-3E6290F15258-- From nobody Tue Dec 15 12:53:15 2020 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 417203A1338; Tue, 15 Dec 2020 12:53:11 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: The IESG To: "IETF-Announce" X-Test-IDTracker: no X-IETF-IDTracker: 7.23.0 Auto-Submitted: auto-generated Precedence: bulk CC: ivaylo@ackl.io, barryleiba@gmail.com, Ivaylo Petrov , cose-chairs@ietf.org, cose@ietf.org, draft-ietf-cose-x509@ietf.org Reply-To: last-call@ietf.org Sender: MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit Message-ID: <160806559117.13034.12608615978306043795@ietfa.amsl.com> Date: Tue, 15 Dec 2020 12:53:11 -0800 Archived-At: Subject: [COSE] Last Call: (CBOR Object Signing and Encryption (COSE): Header parameters for carrying and referencing X.509 certificates) to Proposed Standard X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Dec 2020 20:53:11 -0000 The IESG has received a request from the CBOR Object Signing and Encryption WG (cose) to consider the following document: - 'CBOR Object Signing and Encryption (COSE): Header parameters for carrying and referencing X.509 certificates' as Proposed Standard This document went through Last Call in September as an Informational document. During IESG evaluation, and in discussion with the working group, it was decided to recast it as Proposed Standard. The IESG is, therefore, doing a second last call so that the community can weigh in on the change to Proposed Standard. The IESG plans to make a decision in the next few weeks, and solicits final comments on this action. Please send substantive comments to the last-call@ietf.org mailing lists by 2020-12-29. Exceptionally, comments may be sent to iesg@ietf.org instead. In either case, please retain the beginning of the Subject line to allow automated sorting. Abstract The CBOR Signing And Encrypted Message (COSE) structure uses references to keys in general. For some algorithms, additional properties are defined which carry parameters relating to keys as needed. The COSE Key structure is used for transporting keys outside of COSE messages. This document extends the way that keys can be identified and transported by providing attributes that refer to or contain X.509 certificates. The file can be obtained via https://datatracker.ietf.org/doc/draft-ietf-cose-x509/ No IPR declarations have been submitted directly on this I-D. From nobody Tue Dec 15 14:34:46 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E408E3A0408 for ; Tue, 15 Dec 2020 14:34:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.896 X-Spam-Level: X-Spam-Status: No, score=-1.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NBtijebnoYCr for ; Tue, 15 Dec 2020 14:34:44 -0800 (PST) Received: from p3plsmtpa07-07.prod.phx3.secureserver.net (p3plsmtpa07-07.prod.phx3.secureserver.net [173.201.192.236]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 066193A03FC for ; Tue, 15 Dec 2020 14:34:43 -0800 (PST) Received: from [192.168.1.81] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id pIu2kqvNRsWMDpIu2k4cQi; Tue, 15 Dec 2020 15:34:42 -0700 X-CMAE-Analysis: v=2.4 cv=WZ/J12tX c=1 sm=1 tr=0 ts=5fd93a02 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=IkcTkHD0fZMA:10 a=mCPnbFMpI2iZ6OZ_2hIA:9 a=QEXdDO2ut3YA:10 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) Message-Id: <488A7092-4D81-46E1-8E5C-B3CAB0B2D67F@island-resort.com> Date: Tue, 15 Dec 2020 14:34:42 -0800 To: cose X-Mailer: Apple Mail (2.3445.104.17) X-CMAE-Envelope: MS4xfAqZVUN2xHwvnU98rTnC7YuKcbdcQWl7KGy92jzBm2ZKG2PgO5QacTn5X05UawiYLFEg8EDUAKyQlNuy0ogUET4QSgCbV1kPNBKHEXAlnPqr5lhjN8mz jDod1m8moVeab+HFMSIfOrcR8jipVXmPZKAbeofZMKfFrtr24xFTCK0YALs4X+T7dlj8F7nHOXlTIQ== Archived-At: Subject: [COSE] Identifying the end-entity cert X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 15 Dec 2020 22:34:45 -0000 Was looking over the -08 draft and comparing to JWS header parameters. = I think the -08 draft would be much improved by explicitly saying how = the end-entity cert is determined.=20 JWS is clear and explicit about this: - x5t always refers to an end-entity - In x5u the first cert is always the end-entity - In x5c the first cert is always the end-entity JWS uses the phrase "The certificate containing the public key = corresponding to the key used to digitally sign=E2=80=9D rather than = "end-entity=E2=80=9D. I prefer end-entity, but either is fine. By contrast, COSE X.509 only explicitly says how the end-entity is = determined for an x5chain. Nothing is said for x5t, x5bag or x5u. Seems to me that COSE X.509 should be made identical to JWS for x5t, = x5chain and x5u.=20 Then COSE has the add-on bonus of x5bag. x5bag never determines the = end-entity since it is un ordered. You have to have an x5t, kid or some = other means of knowing which in the x5bag is the end-entity. And it is = OK that x5bag doesn=E2=80=99t even contain the end-entity. LL From nobody Tue Dec 15 16:27:50 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ACA6F3A09BD for ; Tue, 15 Dec 2020 16:27:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WmHw42CjIsQI for ; Tue, 15 Dec 2020 16:27:47 -0800 (PST) Received: from gabriel-vm-2.zfn.uni-bremen.de (gabriel-vm-2.zfn.uni-bremen.de [134.102.50.17]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EC3A43A09AD for ; Tue, 15 Dec 2020 16:27:45 -0800 (PST) Received: from [192.168.217.118] (p548dca87.dip0.t-ipconnect.de [84.141.202.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-vm-2.zfn.uni-bremen.de (Postfix) with ESMTPSA id 4CwbYn5BWZzyVy; Wed, 16 Dec 2020 01:27:41 +0100 (CET) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.4\)) From: Carsten Bormann In-Reply-To: <05EBC54F-6765-448F-A5D0-7052C3D2B454@island-resort.com> Date: Wed, 16 Dec 2020 01:27:43 +0100 Cc: "Hristozov, Stefan" , "Apple Inc." , "john.mattsson=40ericsson.com@dmarc.ietf.org" , "cose@ietf.org" X-Mao-Original-Outgoing-Id: 629771263.108651-3d0b9e152ed336ace91d41df467f4d3c Content-Transfer-Encoding: quoted-printable Message-Id: <2A406331-EE2E-42BE-B84B-518F4E628DBF@tzi.org> References: <160689580542.14210.17819515187695761515@ietfa.amsl.com> <4A0FDEA0-1264-418D-801C-6C710A3BE6AD@ericsson.com> <25A34E20-C4A4-4F15-B457-73CB1752A67F@island-resort.com> <14369eac3a2205f3c5cb7f74c579fdf568570914.camel@aisec.fraunhofer.de> <3F4B94C1-FE8F-4AEC-862A-894CDC59D385@island-resort.com> <5f48bd620c68728ccb83afef6f4c0dcbda6e6633.camel@aisec.fraunhofer.de> <05EBC54F-6765-448F-A5D0-7052C3D2B454@island-resort.com> To: Laurence Lundblade X-Mailer: Apple Mail (2.3608.120.23.2.4) Archived-At: Subject: Re: [COSE] bstr wrapping for native signed (was Re: New Version Notification for draft-mattsson-cose-cbor-cert-compress-05.txt) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Dec 2020 00:27:49 -0000 On 2020-12-15, at 21:46, Laurence Lundblade = wrote: >=20 > I mean modifying the decoder to return the offset (or some other = access to to-be-hashed data). Not all, maybe only very few, return the = offset. There is no need return it. One valid use of CBOR is to prefix a single CBOR data item to a byte = sequence (not itself packaged as a CBOR string). Any CBOR = implementation that supports this usage can be used here. (E.g., in the = Ruby cbor-diag gem or in Elixir excbor, the relevant interface method = would be =E2=80=9Cdecode_with_rest=E2=80=9D; in the C/Ruby cbor gem, it = gets only slightly more complicated with StringIO, unpackers, and = buffers.) Gr=C3=BC=C3=9Fe, Carsten From nobody Wed Dec 16 06:46:22 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 429813A0EAE for ; Wed, 16 Dec 2020 06:46:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.101 X-Spam-Level: X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X8PSTNbOpXMp for ; Wed, 16 Dec 2020 06:46:18 -0800 (PST) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-eopbgr140058.outbound.protection.outlook.com [40.107.14.58]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9F6353A0EAD for ; Wed, 16 Dec 2020 06:46:17 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=fcufDzQo+HeKeG8nY4yQQ+N+FJYD9bESEGTicuc9jYAl0QeAEtD5dikKJwx7KNDDSE8AsphSK9m3WywJySxEYG4omd1S8GcVl/XQljQjxdXWBHD4YOVeEFHzszjoPdu7nz8ekO/4LHCAlkfML6KW3gJfpeSsx+2csBbgwZGGkfn08vA98zgRrlkzfZT6RCT12cyVUyL3dXqWaZOT1msHquxW8JLNJB6pCOifJ9/KsdMXyTUUBA3tsLbMfLzRqGN6DVwQpeTUewfLFF8rVqCMTyrtDbIWcEL13T0WXRmdM9uU4a6/sbH0cM4PYVd/xGUeJv8t89NCBBf9oFEIsXTJFw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=xrXvMEmHeP9KWKAlV34dw6JNi2b/XVrBqX16t8glz7Q=; b=Q7JbvWmDzmJHc78tOC2vrW0pnrNXP3zgaltfGO36ZTnc311IuwUXnv781YDlt2xjxrgRL7BEuLlbLz2r//5RaRYgJuK1ipCQAmsXFsatoy//wBgPlNivjkymR2g3eosBDzgx6cOQP45MR6ctOT3cTAiaojEkvGnFpsYFyFK65CJPSCFS0iyzhyrZk/HuS3Jorl+mZbh0Wl2hHQ2L2hN73VgqtzA0xyu+wAiSGHO/gSdvX1K3f8qgqadkXXovdfyYScZ3f98/9FXjHHvSfNj2MsxwIfubkLBP1PfrfRQHn55+BJzxWFzp/MHsnrlPoxgOKP0qKNuKFbrv8sbuKv3Vkg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=xrXvMEmHeP9KWKAlV34dw6JNi2b/XVrBqX16t8glz7Q=; b=lA+sTsDySD3FwG9gfIyXkS0i9FXn14LXPXRXRrUHyHw9xjIqq416f+f4ZBe+XYH8XRxvWjPowiEujYyU3RVvhcUoJJAu+Q4SNETA2Sy3iDGp2Ap5Gkq0Pp4IwjLKglWDheOi059oUa7nJueNtu1yhNtexK11JNabcS4OgaZy/ZQ= Received: from HE1PR0701MB3050.eurprd07.prod.outlook.com (2603:10a6:3:4b::8) by HE1PR07MB4281.eurprd07.prod.outlook.com (2603:10a6:7:95::24) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3676.12; Wed, 16 Dec 2020 14:46:10 +0000 Received: from HE1PR0701MB3050.eurprd07.prod.outlook.com ([fe80::c555:6e47:970c:1268]) by HE1PR0701MB3050.eurprd07.prod.outlook.com ([fe80::c555:6e47:970c:1268%11]) with mapi id 15.20.3654.025; Wed, 16 Dec 2020 14:46:10 +0000 From: John Mattsson To: "Hristozov, Stefan" , "lgl@island-resort.com" CC: =?utf-8?B?R8O2cmFuIFNlbGFuZGVy?= , "cose@ietf.org" Thread-Topic: [COSE] bstr wrapping for native signed (was Re: New Version Notification for draft-mattsson-cose-cbor-cert-compress-05.txt) Thread-Index: AQHW0hu1v1oMdAQqSUWvLTFJb1T5Eqn2nAkAgABY9gCAAVYRAIABld2A Date: Wed, 16 Dec 2020 14:46:10 +0000 Message-ID: <663F4F9B-673A-42A9-BD19-122E9C117092@ericsson.com> References: <160689580542.14210.17819515187695761515@ietfa.amsl.com> <4A0FDEA0-1264-418D-801C-6C710A3BE6AD@ericsson.com> <25A34E20-C4A4-4F15-B457-73CB1752A67F@island-resort.com> <14369eac3a2205f3c5cb7f74c579fdf568570914.camel@aisec.fraunhofer.de> <3F4B94C1-FE8F-4AEC-862A-894CDC59D385@island-resort.com> <5f48bd620c68728ccb83afef6f4c0dcbda6e6633.camel@aisec.fraunhofer.de> In-Reply-To: <5f48bd620c68728ccb83afef6f4c0dcbda6e6633.camel@aisec.fraunhofer.de> Accept-Language: en-US Content-Language: en-GB X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Microsoft-MacOutlook/16.43.20110804 authentication-results: aisec.fraunhofer.de; dkim=none (message not signed) header.d=none;aisec.fraunhofer.de; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [81.225.97.222] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 93611df9-4f3e-44f5-fa26-08d8a1d15436 x-ms-traffictypediagnostic: HE1PR07MB4281: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:4125; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR0701MB3050.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(376002)(396003)(366004)(39860400002)(346002)(136003)(966005)(478600001)(6486002)(4326008)(86362001)(44832011)(71200400001)(8676002)(26005)(4001150100001)(33656002)(66446008)(8936002)(6512007)(30864003)(2906002)(53546011)(66946007)(83080400002)(186003)(36756003)(110136005)(64756008)(66476007)(66556008)(5660300002)(76116006)(166002)(316002)(2616005)(66574015)(83380400001)(15650500001)(6506007)(54906003)(45980500001)(579004); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: =?utf-8?B?OUYydHJIWm5YTGozS0kyaXN3UHpBZSswV0FmdTZkamtPU3pUNldiTGU3bnlW?= =?utf-8?B?Ym9MdXZXSGVRUUg1UHpvaTkvWUppZHZmYWt6ZFNUa0RpK2d6R0VoYTJma3J3?= =?utf-8?B?NTgrcEVVQXQrdGRLQjlMWE5xTUlydnNhUGcrTjJ1NDUzM24xMGhDc2t6U3Ja?= =?utf-8?B?bDdrZXZaVXNKb0pwbHloMkhwR2J5MmJBZitHWXZNOVFVZktZYkp3MkkyN2k4?= =?utf-8?B?c3pnRThDUG5EZjlzVWRuKzU2eDZkMVVRMkxnNFNJNXp0OFA3Y245WWNxcTNM?= =?utf-8?B?NHJvZis4T1JHQWlRTURrNE5zdWdsbmV4UTZkSmJXZEIrUEpwNmladnRDSjFF?= =?utf-8?B?V0RYT0FNTTBMMTR2UzVYak5hWEtpbXhQcVFyanl1SFFxRGNvaitzcGFPdUg4?= =?utf-8?B?RFc1Yzd2TkpTZUJUcEc3dDNjTVFCY0IybVhCb3l6UzdHbVp6d010TGlYR1JF?= =?utf-8?B?ZDVZM29RTkNwU2FEOHdHOWx0azJrY2NKRlpmeDMyNUNJNmlEK1FOaU9kZTM4?= =?utf-8?B?ZTR5a1JJclZVNEZkYkxGTWJQSDdZMFpsT1BqTXN4WFVxMzh2aG80VmFKL1pR?= =?utf-8?B?YVoxKzcwYlBMdi9STWNmelByZEEzU3lsQ1FZeDJ5TUxweURjWHBTMno0UWhP?= =?utf-8?B?bWNYbmtyb1I3VHU2TzNYRXpyRk4wcmlxUGdiNnRNZ0xFeDRqaC9KdmE3S0lK?= =?utf-8?B?dFFSc3BHNTc3MFZQdDIzWkZYc0UxTjN1WkhlWHh2aXdWUW5HTGtWYUhaTGQ3?= =?utf-8?B?S1VIZ1o1Rlk3bndYYXZtb0VVMG4xcVFFVlgxVU5SbGRUZUNpNnlkbmwzTmJ0?= =?utf-8?B?NmNpeE1WZExDWUZVSzdudnFpNFM1ckdBcnMwM1pnM2xFcmZrY3RRTmJKWUFa?= =?utf-8?B?NUY0b3k3NG5Mb21ZTDB1S1hmYytvRzRkWjArNHZuQ0pnYWFxWExuelgzWG41?= =?utf-8?B?cXkwUkh3a1J5RXp1UmJUdmtDcU9vS21aV3FDVmR5dEpDakVzbGhhSnFnejdU?= =?utf-8?B?SlIwcjhQVnZqUE0rQWpWa0p0TDFFaDhUb3VzcUk5WjN0WGNjUkM2VEN4VldN?= =?utf-8?B?UlcwTldIK1NLR25aam9LZTcwcFBxQ0dUNkxMMFZycG1Sb1YyemlQT282Nm4w?= =?utf-8?B?S2ZKTWxXREFmRnFVME43QlY5TGZOWUxDMFNUeHE0c3NoOTFBMjNuRVpFQndh?= =?utf-8?B?aEhKbk43UldKS1F0ZnhzWENUWGx4alhONE92WnRDdVJnTmpLc3cyV1o0VlFB?= =?utf-8?B?d3NwMmtBaHdkd0VsZDQ4aVZCTFlmL2IvYWg0ZFlBQmJmRW8xWURLMU9YQlB0?= =?utf-8?Q?bl0+V69SXs8XkG7KOReP5oMUTyGgSCqKTI?= Content-Type: multipart/alternative; boundary="_000_663F4F9B673A42A9BD19122E9C117092ericssoncom_" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: HE1PR0701MB3050.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 93611df9-4f3e-44f5-fa26-08d8a1d15436 X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Dec 2020 14:46:10.4711 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: OJHDJ/QY5CD3haChL597+X2gqFsmq3O5NhfHxW+qUr1IVKhzihh9+DNMs3fA7lAFWhgnrLXLPDwnU0CrB/HEYD51ph4r8XUcQC17m3iee3U= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB4281 Archived-At: Subject: Re: [COSE] bstr wrapping for native signed (was Re: New Version Notification for draft-mattsson-cose-cbor-cert-compress-05.txt) X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Dec 2020 14:46:21 -0000 --_000_663F4F9B673A42A9BD19122E9C117092ericssoncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNClRoYW5rIHRoZSBncmVhdCBkaXNjdXNzaW9uLiBJIGhvcGUgd2UgY2FuIGRpc2N1c3Mg c29tZSBtb3JlIGR1cmluZyB0b2RheeKAmXMgaW50ZXJpbS4NCg0KU3RlZmFuIEhyaXN0b3pvdiB3 cm90ZToNCj4gd2hpY2ggSSB3YXMgbm90IGNhYmxlIHRvIGRvIGJlY2F1c2UgdGhlIHB1YmxpYyBr ZXkgb2YgdGhlIENBIGlzIG5vdCBnaXZlbiBpbiB0aGUgdGVzdCB2ZWN0b3IuDQoNCkluIHZlcnNp b24gLTA1IG9mIHRoZSBkcmFmdCwgdGhlIHB1YmxpYyBhbmQgcHJpdmF0ZSBrZXkgb2YgdGhlIENB IGFyZSBpbmNsdWRlZDoNCg0KICAgQWxsIG9mIHRoZSB0aGUgYWJvdmUgZXhhbXBsZSBjZXJ0aWZp Y2F0ZSB3ZXJlIHNpZ25lZCBhbmQgY2FuIGJlDQogICB2ZXJpZmllZCB3aXRoIHRoZSBmb2xsb3dp bmcga2V5IHBhaXIgd2hlcmUgdGhlIHByaXZhdGUga2V5IGlzIGVuY29kZWQNCiAgIGFzIGluIENP U0UgW1JGQzgxNTI8aHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3JmYzgxNTI+XS4NCg0KICAg aXNzdWVyUHVibGljS2V5QWxnb3JpdGhtIDoNCiAgIDEgKGlkLWVjUHVibGljS2V5ICsgc2VjcDI1 NnIxKQ0KDQogICBpc3N1ZXJQdWJsaWNLZXkgOg0KICAgaCcwMkFFNENEQjAxRjYxNERFRkM3MTIx Mjg1RkRDN0Y1QzZEMUQ0MkM5NTY0N0YwNjFCQTAwODBERjY3ODg2Nzg0NUUnDQoNCiAgIGlzc3Vl clByaXZhdGVLZXkgOg0KICAgaCdEQzY2QjM0MTU0NTZENjQ5NDI5QjUzMjIzREY3NTMyQjk0MkQ2 QjBFMDg0MkMzMEJDQTRDMEFDRjkxNTQ3QkIyJw0KDQooVmVyc2lvbiAtMDYgb2YgdGhlIGRyYWZ0 IHdpbGwgYWxzbyBpbmNsdWRlIHRoZSBwcml2YXRlIGtleSBvZiB0aGUgc3ViamVjdCBpbiB0aGUg ZXhhbXBsZSBjZXJ0aWZpY2F0ZS4gVGhpcyBtYWtlcyBpdCBwb3NzaWJsZSB0byB1c2UgdGhlIGV4 YW1wbGUgY2VydGlmaWNhdGUgaW4gZS5nLiwgRURIT0MgdGVzdCB2ZWN0b3JzKQ0KDQoNCkfDtnJh biBTZWxhbmRlciB3cm90ZToNCknigJltIGF3YXJlIG9mIHR3byBpbXBsZW1lbnRhdGlvbiBhY3Rp dml0aWVzOiBieSBKb2huICh0eXBlIDEpIGFuZCBieSBTdGVmYW4gKHR5cGUgMCkuDQoNCkkgaGF2 ZSBzbyBmYXIgb25seSBpbXBsZW1lbnRlZCBERVIgLT4gQ0JPUiAodHlwZSAxKS4gSSBzdGFydGVk IGluIEMrKzE3IGJ1dCBoYXZlIG5vdyBtb3ZlZCB0byBSdXN0LiBJIHdyb3RlIG15IG93biBERVIg ZGVjb2RlciBhbmQgQ0JPUiBlbmNvZGVyLiBUaGUgcmVhc29uIEkgd3JvdGUgZXZlcnl0aGluZyBt eXNlbGYgd2FzIHRvIG1ha2Ugc3VyZSBJIHVuZGVyc3RhbmQgYWxsIHRoZSBuaXR0eSBncml0dHkg ZGV0YWlscyBvZiBERVIgYW5kIENCT1IuIEkgcGxhbiB0byByZWxlYXNlIHRoZSBzb3VyY2UgY29k ZSB3aGVuIEkgaGF2ZSBjbGVhbmVkIGl0IHVwIGEgYml0Lg0KDQpKb2huDQoNCkZyb206ICJIcmlz dG96b3YsIFN0ZWZhbiIgPHN0ZWZhbi5ocmlzdG96b3ZAYWlzZWMuZnJhdW5ob2Zlci5kZT4NCkRh dGU6IFR1ZXNkYXksIDE1IERlY2VtYmVyIDIwMjAgYXQgMTY6MzQNClRvOiAibGdsQGlzbGFuZC1y ZXNvcnQuY29tIiA8bGdsQGlzbGFuZC1yZXNvcnQuY29tPg0KQ2M6IEpvaG4gTWF0dHNzb24gPGpv aG4ubWF0dHNzb25AZXJpY3Nzb24uY29tPiwgR8O2cmFuIFNlbGFuZGVyIDxnb3Jhbi5zZWxhbmRl ckBlcmljc3Nvbi5jb20+LCAiY29zZUBpZXRmLm9yZyIgPGNvc2VAaWV0Zi5vcmc+DQpTdWJqZWN0 OiBSZTogW0NPU0VdIGJzdHIgd3JhcHBpbmcgZm9yIG5hdGl2ZSBzaWduZWQgKHdhcyBSZTogTmV3 IFZlcnNpb24gTm90aWZpY2F0aW9uIGZvciBkcmFmdC1tYXR0c3Nvbi1jb3NlLWNib3ItY2VydC1j b21wcmVzcy0wNS50eHQpDQoNCkhpIExhdXJlbmNlLA0KDQppIGRvbid0IGhhdmUgYW4gaW1wbGVt ZW50YXRpb24gaW4gaGlnaGVyIGxhbmd1YWdlcyBzdWNoIGFzIFB5dGhvbiBvciBHbywgc28gaSBk ZWNpZGVkIHRvIGNvZGUgaXQgdG9kYXkgaW4gUnVzdCAoIGp1c3QgZm9yIGZ1bikuIEZpbmQgbXkg aW1wbGVtZW50YXRpb24gYXR0YWNoZWQuIEkgdGVzdGVkIHRoaXMgaW1wbGVtZW50YXRpb24gd2l0 aCB0ZXN0IHZlY3RvciBBLjEuMS4NCg0KSSBoYXZlIGEgZnVuY3Rpb24gY2FsbGVkIGRlY29kZV9u YXRpdmUgd2hpY2ggcmV0dXJucyBhIHN0cnVjdCBjb250YWluaW5nIHRoZSBkZWNvZGVkIGNlcnRp ZmljYXRlIGZpZWxkcyAiZGVjb2RlZF9kYXRhIiwgdGhlIGVuY29kZWQgY2VydGlmaWNhdGUgZmll bGRzICJzaWduZWRfZGF0YSIgYW5kIHRoZSBzaWduYXR1cmUgInNpZ25hdHVyZSIuICBUbyB2ZXJp ZnkgdGhlIGNlcnRpZmljYXRlIHdlIG5lZWQgdG8gcHJvdmlkZSB0aGUgIHNpZ25lZF9kYXRhIGFu ZCBzaWduYXR1cmUgdG8gYSB2ZXJpZmljYXRpb24gZnVuY3Rpb24sIHdoaWNoIEkgd2FzIG5vdCBj YWJsZSB0byBkbyBiZWNhdXNlIHRoZSBwdWJsaWMga2V5IG9mIHRoZSBDQSBpcyBub3QgZ2l2ZW4g aW4gdGhlIHRlc3QgdmVjdG9yLg0KDQpEZWNvZGluZyB0ZXN0IHZlY3RvciBBLjEuMSBteSBpbXBs ZW1lbnRhdGlvbiBnZW5lcmF0ZXMgdGhlIGZvd2xpbmcgcmVzdWx0Og0KDQotLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KY2Jvcl9jZXJ0X3R5cGUg aXM6IDENCmNlcnRfc2VyaWFsX251bWJlciBpczogWzAxLCBmNSwgMGRdDQppc3N1ZXIgaXM6IFs4 MiwgNzAsIDY3LCAzMiwgMTE2LCAxMDEsIDExNSwgMTE2LCAzMiwgNjcsIDY1XQ0KdmFsaWRpdHlf bm90X2JlZm9yZSBpczogMTU3NzgzNjgwMA0KdmFsaWRpdHlfbm90X2FmdGVyIGlzOiAxNjEyMjI0 MDAwDQpzdWJqZWN0IGlzOiBbMDEsIDIzLCA0NSwgNjcsIDg5LCBhYl0NCnN1YmplY3RfcGtfYWxn IGlzOiAxDQpzdWJqZWN0X3BrIGlzOiBbMDIsIGIxLCAyMSwgNmEsIGI5LCA2ZSwgNWIsIDNiLCAz MywgNDAsIGY1LCBiZCwgZjAsIDJlLCA2OSwgM2YsIDE2LCAyMSwgM2EsIDA0LCA1MiwgNWUsIGQ0 LCA0NCwgNTAsIGIxLCAwMSwgOWMsIDJkLCBmZCwgMzgsIDM4LCBhYl0NCmV4dGVuc2lvbnMgaXM6 IDENCmlzc3Vlcl9zZ25fYWxnIGlzOiA2DQpzaWduZWRfZGF0YSBpczogWzAxLCA0MywgMDEsIGY1 LCAwZCwgNmIsIDUyLCA0NiwgNDMsIDIwLCA3NCwgNjUsIDczLCA3NCwgMjAsIDQzLCA0MSwgMWEs IDVlLCAwYiwgZTEsIDAwLCAxYSwgNjAsIDE4LCA5NiwgMDAsIDQ2LCAwMSwgMjMsIDQ1LCA2Nywg ODksIGFiLCAwMSwgNTgsIDIxLCAwMiwgYjEsIDIxLCA2YSwgYjksIDZlLCA1YiwgM2IsIDMzLCA0 MCwgZjUsIGJkLCBmMCwgMmUsIDY5LCAzZiwgMTYsIDIxLCAzYSwgMDQsIDUyLCA1ZSwgZDQsIDQ0 LCA1MCwgYjEsIDAxLCA5YywgMmQsIGZkLCAzOCwgMzgsIGFiLCAwMSwgMDZdDQpzaWduYXR1cmUg aXM6IFs0NCwgNWQsIDc5LCA4YywgOTAsIGU3LCBmNSwgMDAsIGRjLCA3NCwgN2EsIDY1LCA0Yywg ZWMsIDZjLCBmYSwgNmYsIDAzLCA3MiwgNzYsIGUxLCA0ZSwgNTIsIGVkLCAwNywgZmMsIDE2LCAy OSwgNGMsIDg0LCA2NiwgMGQsIDVhLCAzMywgOTgsIDVkLCBmYiwgZDQsIGJmLCBkZCwgNmQsIDRh LCBjZiwgMzgsIDA0LCBjMywgZDQsIDZlLCBiZiwgM2IsIDdmLCBhNiwgMjYsIDQwLCA2NywgNGYs IGMwLCAzNSwgNGYsIGEwLCA1NiwgZGIsIGFlLCBhNl0NCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQoNClZlcnkgc2ltaWxhciBjb2RlIGNhbiBi ZSBhY2hpZXZlZCBhbHNvIHdpdGggdGlueUNCT1IgaW4gQy4gTWFueSB2YWx1ZXMgYXJlIG5vdCBz dHJpbmdzIHlvdSBhcmUgcmlnaHQgc28gY2Jvcl92YWx1ZV9jYWxjdWxhdGVfc3RyaW5nX2xlbmd0 aCBjYW5ub3QgYmUgdXNlZCBidXQgaW50ZWdlcnMgdGhlcmVmb3JlIHRvIGdldCB0aGVpciBsZW5n dGggaXMgbm90IGRpZmZpY3VsdC4NCg0KSSBob3BlIHRoaXMgY29kZSBoZWxwcy4NCg0KV2hhdCBl eGFjdGx5IGRvIHlvdSBtZWFuIGJ5IGhhY2tpbmcgdGhlIGRlY29kZXI/IERvIHlvdSBtZWFuIHRv IHRyYWNrIHRoZSBvZmZzZXQ/IFdoYXQgYXJlIHRoZSBhbHRlcm5hdGl2ZXM/DQoNCkJlc3QgcmVn YXJkcywNClN0ZWZhbg0KDQpQUzogSSBrbm93IHRoZSBjb2RlIGNvbnRhaW5zIGEgbG90IG9mIGNv cHkrcGFzdGUgYW5kIG5lZWRzIHRvIGJlIHJlZmFjdG9yZWQuDQoNCk9uIE1vbiwgMjAyMC0xMi0x NCBhdCAxMTowOSAtMDgwMCwgTGF1cmVuY2UgTHVuZGJsYWRlIHdyb3RlOg0KSGkgU3RlZmFuLA0K DQpGaXJzdCBvbiB0aGUgaW1wbGVtZW50YXRpb24g4oCUIG15IHVuZGVyc3RhbmRpbmcgaXMgdGhh dCB5b3XigJlkIGhhdmUgdG8gaGFzaCBmcm9tIHRoZSBieXRlIG9mZnNldCBvZiB0aGUgZmlyc3Qg Ynl0ZSBvZiB0aGUgQ0JPUiBlbmNvZGVkIGhlYWQgb2YgY2JvckNlcnRpZmljYXRlVHlwZSB0byB0 aGUgbGFzdCBieXRlIG9mIHRoZSBFeHRlbnNpb25zIHRvIGNvcnJlY3RseSBpbXBsZW1lbnQgdGhp cy4gU2luY2UgdGhlIGNib3JDZXJ0aWZpY2F0ZVR5cGUgaXMgdGhlIGZpcnN0IGl0ZW0gaW4gdGhl IHNlcXVlbmNlLCBpdHMgb2Zmc2V0IGlzIHplcm8sIHNvIHRoYXTigJlzIGVhc3kuDQoNCknigJlt IG5vdCBzdXJlIGhvdyB5b3XigJlkIHVzZSBjYm9yX3ZhbHVlX2NhbGN1bGF0ZV9zdHJpbmdfbGVu Z3RoIHNpbmNlIG1hbnkgb2YgdGhlIGl0ZW1zIGluIHRoZSBUQlNDZXJ0aWZpY2F0ZSBhcmUgbm90 IHN0cmluZ3MuIE1heWJlIHlvdSBjYWxjdWxhdGUgdGhlIGxlbmd0aCBvZiB0aGUgaXNzdWVyU2ln bmF0dXJlVmFsdWUgYW5kIGdvIGJhY2sgZnJvbSB0aGUgZW5kPyBUaGF0IHdvdWxkbuKAmXQgYWNj b3VudCBmb3IgQ0JPUiBlbmNvZGVkIGhlYWQgb2YgaXNzdWVyU2lnbmF0dXJlVmFsdWUgdGhvdWdo Lg0KDQoNClNvLCBJIGRvbuKAmXQgdW5kZXJzdGFuZCBob3cgdGhpcyB3b3JrcyB3aXRoIHRpbnlD Qk9SIG9yIHRoYXQgaXQgaXMgZXZlbiBjb3JyZWN0Lg0KDQoNCkl0IHdvdWxkIGJlIGdvb2QgdG8g c2VlIGFuIGltcGxlbWVudGF0aW9uIGluIFB5dGhvbiBvciBHbyBvciBzdWNoIHRvIHNlZSBpZiBp dCdzIHBvc3NpYmxlIHdpdGggdGhvc2UgdHlwZSBvZiBDQk9SIGRlY29kZXJzLg0KDQoNCg0KDQpT ZWNvbmQgb24gdGhlIGRlc2lnbiDigJQgSSBzdGlsbCBiZWxpZXZlIHRoaXMgZGVzaWduIGlzIGNv dW50ZXIgdG8gY29udmVudGlvbnMgdXNlZCBpbiBDQk9SIGZvciBzaWduaW5nL2hhc2hpbmcgZGF0 YS4gSSB0aGluayB0aGUgZm9sa3MgdGhhdCBkZXNpZ25lZCBDT1NFIHRob3VnaHQgdGhpcyBpc3N1 ZSB0aHJvdWdoLg0KDQoNCihNeSBmaXJzdCBkZXNpZ24gb2Ygb2YgRUFUIGRpZCB0aGUgaGFzaGlu ZyB0aGUgd2F5IGl0IGlzIGJlaW5nIGRvbmUgaGVyZS4gVGhpcyB3YXMgYmVmb3JlIENPU0Ugd2Fz IHB1Ymxpc2hlcyBhcyBhbiBSRkMuIFRoZSBmb2xrcyB1c2luZyBhbiBvZmYtdGhlLXNoZWxmIFB5 dGhvbiBDQk9SIGRlY29kZXIgaGFkIHRvIGhhY2sgdGhhdCBkZWNvZGVyIHRvIGdldCB0aGUgdmVy aWZpY2F0aW9uIHRvIHdvcmsuIFRoZW4gRUFUIHN3aXRjaGVkIHRvIENPU0UgYW5kIEkgY2FtZSB0 byB1bmRlcnN0YW5kIHRoZSByZWFzb25zIENPU0Ugd29ya3MgYXMgaXQgZG9lcy4pDQoNCkxMDQoN Cg0KDQoNCk9uIERlYyAxNCwgMjAyMCwgYXQgNTo1MCBBTSwgSHJpc3Rvem92LCBTdGVmYW4gPHN0 ZWZhbi5ocmlzdG96b3ZAYWlzZWMuZnJhdW5ob2Zlci5kZTxtYWlsdG86c3RlZmFuLmhyaXN0b3pv dkBhaXNlYy5mcmF1bmhvZmVyLmRlPj4gd3JvdGU6DQpIaSBMYXVyZW5jZSwNCg0KSSBhbSB1c2lu ZyB0aGUgQyBsaWJyYXJ5IHRpbnljYm9yIFsxXSBmb3IgbXkgbmF0aXZlIENCT1IgY2VydGlmaWNh dGUgZGVjb2Rlci4NCkR1cmluZyBwYXJzaW5nIHRoZSBjZXJ0aWZpY2F0ZSBJIGFtIGNhbGN1bGF0 aW5nIGFsc28gYW4gb2Zmc2V0IGZyb20gaXRzIGJlZ2lubmluZyBhZnRlciBlYWNoIHBhcnNlZCBl bGVtZW50LiBUaW55Y2JvciBwcm92aWRlcyBhIGZ1bmN0aW9uIGZvciBnZXR0aW5nIHRoZSBsZW5n dGggb2YgdGhlIGJ5dGUgb3IgdGV4dCBzdHJpbmcgY2Jvcl92YWx1ZV9jYWxjdWxhdGVfc3RyaW5n X2xlbmd0aCBbMl0sIHdoaWNoIGlzIGhlbHBmdWwgZm9yIHRoYXQuDQoNCkRvZXMgdGhpcyBhbnN3 ZXIgeW91ciBxdWVzdGlvbj8NCg0KQmVzdCByZWdhcmRzLA0KU3RlZmFuDQoNClsxXTogaHR0cHM6 Ly9naXRodWIuY29tL2ludGVsL3RpbnljYm9yPGh0dHBzOi8vcHJvdGVjdDIuZmlyZWV5ZS5jb20v djEvdXJsP2s9NWMwYmIxMTEtMDM5MDg4NTItNWMwYmYxOGEtODYxZmNiOTcyYmZjLTA2Y2Q3M2Mw OTIxNjNiOTMmcT0xJmU9NWUyOTVhOTMtYTQ0Yy00ZjMwLTk2NDItNjVmNjgxYTZiNWVjJnU9aHR0 cHMlM0ElMkYlMkZnaXRodWIuY29tJTJGaW50ZWwlMkZ0aW55Y2Jvcj4NClsyXTogaHR0cHM6Ly9p bnRlbC5naXRodWIuaW8vdGlueWNib3IvY3VycmVudC9hMDAwNDcuaHRtbCNnYWQ1YjJkZDgwMzI0 NDk0NmIxNTYwM2UwOWNlMTQ3MDQ0PGh0dHBzOi8vcHJvdGVjdDIuZmlyZWV5ZS5jb20vdjEvdXJs P2s9NzMzNzNjMDktMmNhYzA1NGEtNzMzNzdjOTItODYxZmNiOTcyYmZjLTc5OGNlMGQyNzY3Yjll NjMmcT0xJmU9NWUyOTVhOTMtYTQ0Yy00ZjMwLTk2NDItNjVmNjgxYTZiNWVjJnU9aHR0cHMlM0El MkYlMkZpbnRlbC5naXRodWIuaW8lMkZ0aW55Y2JvciUyRmN1cnJlbnQlMkZhMDAwNDcuaHRtbCUy M2dhZDViMmRkODAzMjQ0OTQ2YjE1NjAzZTA5Y2UxNDcwNDQ+DQoNCk9uIE1vbiwgMjAyMC0xMi0x NCBhdCAxMzoxOCArMDAwMCwgR8O2cmFuIFNlbGFuZGVyIHdyb3RlOg0KSGkgTGF1cmVuY2UsDQoN CknigJltIGF3YXJlIG9mIHR3byBpbXBsZW1lbnRhdGlvbiBhY3Rpdml0aWVzOiBieSBKb2huICh0 eXBlIDEpIGFuZCBieSBTdGVmYW4gKHR5cGUgMCkuDQoNCkfDtnJhbg0KDQoNCk9uIDIwMjAtMTIt MDcsIDIzOjAyLCAiQ09TRSIgPGNvc2UtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86Y29zZS1ib3Vu Y2VzQGlldGYub3JnPj4gd3JvdGU6DQpJIGRvbuKAmXQgdGhpbmsgaXQgd29ya3MgdmVyeSB3ZWxs IGF0IGFsbCB0byBkaXJlY3RseSBzaWduIGVuY29kZWQgQ0JPUi4gSXQgc2hvdWxkIGJlIHdyYXBw ZWQgaW4gYSBieXRlIHN0cmluZy4NCg0KSW4gcGFydGljdWxhciBpc3N1ZXJTaWduYXR1cmVWYWx1 ZSBzaG91bGQgcHJvYmFibHkgYmUgdGhlIHNpZ25hdHVyZSBvdmVyIGEgYnl0ZSBzdHJpbmcgdGhh dCBjb250YWlucyBhbiBlbmNvZGVkIFRCU0NlcnRpZmljYXRlLiBUaGlzIGlzIHdoYXQgQ09TRSBk b2VzLg0KDQpUaGUgbWFpbiByZWFzb24gZm9yIHRoaXMgaXMgdG8gYWxsb3cgaW1wbGVtZW50YXRp b24gd2l0aCBvZmYtdGhlLXNoZWxmIENCT1IgZW5jb2RlcnMgYW5kIGRlY29kZXJzLiBGcm9tIHNv bWUgdGhhdCBJ4oCZdmUgbG9va2VkIGF0IGFuZCBvbmUgSeKAmXZlIHdyaXR0ZW4gbXlzZWxmLCBD Qk9SIGRlY29kZXJzIGRvbuKAmXQgYWxsb3cgYWNjZXNzIGEgc3ViLXBhcnQgb2YgdGhlIGVuY29k ZWQgQ0JPUiBzbyBpdCBjYW4gYmUgaW5wdXQgaW50byB0aGUgaGFzaC4gVGhlcmUgd291bGQgYmUg bm8gd2F5IHRvIGdldCBqdXN0IHRoZSBlbmNvZGVkIGJ5dGVzIG9mIHRoZSBUQlNDZXJ0aWZpY2F0 ZSBvdXQgb2YgdGhlIENCT1IgZGVjb2RlciB1bmxlc3MgeW91IHdlbnQgaW4gYW5kIGhhY2tlZCBp dHMgc291cmNlIGNvZGUgaW4gYSBzcGVjaWFsIHdheS4NCg0KSGFzIGFueW9uZSBpbXBsZW1lbnRl ZCB2ZXJpZmljYXRpb24gb2YgTmF0aXZlbHkgU2lnbmVkIENCT1IgQ2VydGlmaWNhdGVzPyBXaGF0 IENCT1IgZGVjb2RlciB3YXMgdXNlZD8gTWF5YmUgSeKAmW0gd3JvbmcgYWJvdXQgdGhpcz8NCg0K SSByZWFsaXplIGJ5dGUgc3RyaW5nIHdyYXBwaW5nIFRCU0NlcnRpZmljYXRlIG1pZ2h0IGNhdXNl IHVwaGVhdmFsIGluIHRoZSBvdmVyYWxsIGRlc2lnbiBiZWNhdXNlIGNib3JDZXJ0aWZpY2F0ZVR5 cGUgd291bGQgYmUgaW5zaWRlIHRoZSBieXRlIHN0cmluZyB3cmFwcGluZy4NCg0KQW5vdGhlciBh cHByb2FjaCBtaWdodCBiZSB0byBqdXN0IHVzZSBDT1NFIGZvciBOYXRpdmVseSBTaWduZWQgQ0JP UiBDZXJ0aWZpY2F0ZXMuIFRoZSBDT1NFIHBheWxvYWQgd291bGQgYmUgYSBUQlNDZXJ0aWZpY2F0 ZS4gQ09TRSB3b3VsZCB0YWtlIGNhcmUgb2YgdGhlIGJ5dGUgc3RyaW5nIHdyYXBwaW5nIGlzc3Vl cy4gVGhpcyB3b3VsZCBpbmNyZWFzZSB0aGUgb24tdGhlLXdpcmUgc2l6ZSBvZiB0aGUgY2VydGlm aWNhdGUgYnkgYWJvdXQgMTAgYnl0ZXMsIGJ1dCBtaWdodCBkZWNyZWFzZSBjb2RlIHNpemUgb2Yg dGhlIGltcGxlbWVudGF0aW9uIGJ5IHJlIHVzZSBvZiBhIENPU0UgaW1wbGVtZW50YXRpb24uDQoN CkxMDQoNCg0KPiBPbiBEZWMgMiwgMjAyMCwgYXQgMTI6NDkgQU0sIEpvaG4gTWF0dHNzb24gPGpv aG4ubWF0dHNzb249NDBlcmljc3Nvbi5jb21AZG1hcmMuaWV0Zi5vcmc8bWFpbHRvOmpvaG4ubWF0 dHNzb249NDBlcmljc3Nvbi5jb21AZG1hcmMuaWV0Zi5vcmc+PiB3cm90ZToNCj4NCj4gVGhhbmtz IGFnYWluIGZvciBhbGwgdGhlIGdvb2QgY29tbWVudCBhbmQgZGlzY3Vzc2lvbnMgb24gdGhlIGxp c3QhDQo+DQo+IFdlIGhhdmUgc3VibWl0dGVkIC0wNS4gQ2hhbmdlcyBhcmU6DQo+DQo+IC0gQWRk ZWQgcmVmZXJlbmNlIHRvIElFRUUgODAyLjFBUiBEZXZJRCBhbmQgbWFkZSBvcHRpbWl6YXRpb24g Zm9yIElFRUUgODAyLjFBUiBEZXZJRC4NCj4gLSBSZXBocmFzZWQgImNvbXByZXNzIiBpbiB0aGUg d2hvbGUgZG9jdW1lbnQuIFdlIHdpbGwgY2hhbmdlIHRoZSBmaWxlIG5hbWUgbGF0ZXIuDQo+IC0g TWFkZSBpdCBtb3JlIGNsZWFyIHRoYXQgWC41MDkgdmVyc2lvbiBpbiBpbmNsdWRlZCBpbiB0aGUg Q0JPUiBjZXJ0aWZpY2F0ZSB0eXBlLg0KPiAtIE9taXR0ZWQgJ3NpZ25hdHVyZScgaW5zdGVhZCBv ZiAnc2luZ2F0dXJlQWxnb3JpdGhtJy4gTm93IHRoZSBhbGdvcml0aG0gY29tZXMganVzdCBiZWZv cmUgdGhlIHNpZ25hdHVyZSB2YWx1ZS4NCj4gLSBBZGRlZCBzdXBwb3J0IG9mIGVtYWlsQWRkcmVz cyAvIElBNVN0cmluZyBpbiBpc3N1ZXIgYW5kIHN1YmplY3QuIFRoaXMgd2FzIGVhc3kuDQo+IC0g Y2hhbmdlZCBzbyB1dGY4U3RyaW5ncyBoYXZlIGEgcG9zaXRpdmUgc2lnbi4NCj4gLSBDaGFuZ2Ug dGltZSB0byB1bndyYXBwZWQgQ0JPUiBlcG9jaCB0aW1lICh+dGltZSkuIFRoaXMgc2F2ZXMgMSBi eXRlIGZvciB0aW1lID4gMjA1MA0KPiAtIEFkZGVkIHRoYXQgdGhlIHZhbHVlICI5OTk5MTIzMTIz NTk1OVoiIChubyBleHBpcmF0aW9uIGRhdGUpIGlzIGVuY29kZWQgYXMgQ0JPUiBudWxsLiBUaGlz IGlzIHF1aXRlIGNvbW1vbmx5IHVzZWQgaW4gSW9UIGNlcnRpZmljYXRlcy4gVGhpcyBzYXZlcyA0 IGJ5dGVzIHdoZW4gdXNlZC4NCj4gLSBVc2UgQ0RETCBmb3IgQ0JPUiBPSUQgYXMgZGVmaW5lZCBp biBkcmFmdC1pZXRmLWNib3ItdGFncy1vaWQNCj4gLSBBZGRlZCBDQk9SIGVuY29kaW5nIGZvciB1 dGhvcml0eUtleUlkZW50aWZpZXIgYW5kIHN1YmplY3RLZXlJZGVudGlmaWVyIHdoaWNoIGFyZSBo ZWF2aWx5IHVzZWQgYnkgSUVFRSA4MDIuMUFSIERldklEIChhdCBsZWFzdCBvbmUgb2YgdGhlbSBh cmUgbWFuZGF0ZWQgZGVwZW5kaW5nIG9uIHR5cGUgb2YgY2VydCkuDQo+IC0gQWRkZWQgb3B0aW1p emF0aW9uIGZvciB0aGUgaGFyZHdhcmVNb2R1bGVOYW1lIHR5cGUgb2Ygb3RoZXJOYW1lLCB3aGlj aCBpcyBtYW5kYXRvcnkgdG8gdXNlIGluIElFRUUgODAyLjFBUiBEZXZJRA0KPiAtIEFkZGVkIENC T1IgZW5jb2RpbmcgZm9yIGNSTERpc3RyaWJ1dGlvblBvaW50cyBhbmQgYXV0aG9yaXR5SW5mb0Fj Y2Vzcywgd2hpY2ggYXJlIGJvdGggdXNlZCBpbiBiYXNpY2FsbHkgYWxsIEhUVFBTIGNlcnRpZmlj YXRlcyBvbiB0aGUgd2ViLg0KPiAtIEFkZGVkIHN1cHBvcnQgZm9yIHJlZ2lzdGVyZWRJRC4gVGhp cyB3YXMgdHJpdmlhbCBhbmQgcmVnaXN0ZXJlZElEIGlzIHVzZWQgZS5nLiBieSB0aGUgR1NNQSBl VUlDQyBQS0kgQ2VydGlmaWNhdGUgUG9saWN5IChTR1AgMTQpLg0KPiAtIEFkZGVkIGNvbnNpZGVy YXRpb25zIGZvciBleHBlcnQgcmV2aWV3ZXJzLg0KPiAtIE1vdmVkIFNIQS0xIHNpZ25hdHVyZSBh bGdvcml0aG1zIHRvIG5lZ2F0aXZlIDIgYnl0ZSBlbmNvZGluZ3M6IC0yNTYgYW5kIC0yNTUNCj4g LSBBZGRlZCBhIHB1YmxpYyBwcml2YXRlIEVDRFNBIGtleSBwYWlyIHR1cm5pbmcgdGhlIGV4YW1w bGUgY2VydGlmaWNhdGVzIGludG8gdGVzdCB2ZWN0b3JzLiBBbiBpbXBsZW1lbnRhdGlvbiBjYW4g bm93IGNyZWF0ZSBhbmQgdmVyaWZ5IHRoZSBleGFtcGxlIFJGQyA3OTI1IGNlcnRpZmljYXRlcy4N Cj4NCj4gQ2hlZXJzLA0KPiBKb2huDQo+DQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ IEZyb206ICJpbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc8bWFpbHRvOmludGVybmV0LWRyYWZ0c0Bp ZXRmLm9yZz4iIDxpbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc8bWFpbHRvOmludGVybmV0LWRyYWZ0 c0BpZXRmLm9yZz4+DQo+IERhdGU6IFdlZG5lc2RheSwgMiBEZWNlbWJlciAyMDIwIGF0IDA4OjU2 DQo+IFRvOiBHw7ZyYW4gU2VsYW5kZXIgPGdvcmFuLnNlbGFuZGVyQGVyaWNzc29uLmNvbTxtYWls dG86Z29yYW4uc2VsYW5kZXJAZXJpY3Nzb24uY29tPj4sIEfDtnJhbiBTZWxhbmRlciA8Z29yYW4u c2VsYW5kZXJAZXJpY3Nzb24uY29tPG1haWx0bzpnb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5jb20+ PiwgTWFydGluIEZ1cnVoZWQgPG1hcnRpbi5mdXJ1aGVkQG5leHVzZ3JvdXAuY29tPG1haWx0bzpt YXJ0aW4uZnVydWhlZEBuZXh1c2dyb3VwLmNvbT4+LCBTaGFoaWQgUmF6YSA8c2hhaGlkLnJhemFA cmkuc2U8bWFpbHRvOnNoYWhpZC5yYXphQHJpLnNlPj4sIEpvaG4gTWF0dHNzb24gPGpvaG4ubWF0 dHNzb25AZXJpY3Nzb24uY29tPG1haWx0bzpqb2huLm1hdHRzc29uQGVyaWNzc29uLmNvbT4+LCBK b2VsIEhvZ2x1bmQgPGpvZWwuaG9nbHVuZEByaS5zZTxtYWlsdG86am9lbC5ob2dsdW5kQHJpLnNl Pj4sIEpvaG4gTWF0dHNzb24gPGpvaG4ubWF0dHNzb25AZXJpY3Nzb24uY29tPG1haWx0bzpqb2hu Lm1hdHRzc29uQGVyaWNzc29uLmNvbT4+LCBKb2VsIEjDtmdsdW5kIDxqb2VsLmhvZ2x1bmRAcmku c2U8bWFpbHRvOmpvZWwuaG9nbHVuZEByaS5zZT4+DQo+IFN1YmplY3Q6IE5ldyBWZXJzaW9uIE5v dGlmaWNhdGlvbiBmb3IgZHJhZnQtbWF0dHNzb24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3MtMDUu dHh0DQo+DQo+DQo+IEEgbmV3IHZlcnNpb24gb2YgSS1ELCBkcmFmdC1tYXR0c3Nvbi1jb3NlLWNi b3ItY2VydC1jb21wcmVzcy0wNS50eHQNCj4gaGFzIGJlZW4gc3VjY2Vzc2Z1bGx5IHN1Ym1pdHRl ZCBieSA9P3V0Zi04P3E/Sm9obl9QcmV1PUMzPTlGX01hdHRzc29uPz0gYW5kIHBvc3RlZCB0byB0 aGUNCj4gSUVURiByZXBvc2l0b3J5Lg0KPg0KPiBOYW1lOiAgICAgICAgIGRyYWZ0LW1hdHRzc29u LWNvc2UtY2Jvci1jZXJ0LWNvbXByZXNzDQo+IFJldmlzaW9uOiAgICAgMDUNCj4gVGl0bGU6ICAg ICAgICAgICAgICAgIENCT1IgRW5jb2Rpbmcgb2YgWC41MDkgQ2VydGlmaWNhdGVzIChDQk9SIENl cnRpZmljYXRlcykNCj4gRG9jdW1lbnQgZGF0ZTogICAgICAgIDIwMjAtMTItMDENCj4gR3JvdXA6 ICAgICAgICAgICAgICAgIEluZGl2aWR1YWwgU3VibWlzc2lvbg0KPiBQYWdlczogICAgICAgICAg ICAgICAgMjkNCj4gVVJMOiAgICAgICAgICAgIGh0dHBzOi8vd3d3LmlldGYub3JnL2FyY2hpdmUv aWQvZHJhZnQtbWF0dHNzb24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3MtMDUudHh0DQo+IFN0YXR1 czogICAgICAgICBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1tYXR0c3Nv bi1jb3NlLWNib3ItY2VydC1jb21wcmVzcy8NCj4gSHRtbGl6ZWQ6ICAgICAgIGh0dHBzOi8vZGF0 YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2h0bWwvZHJhZnQtbWF0dHNzb24tY29zZS1jYm9yLWNlcnQt Y29tcHJlc3MNCj4gSHRtbGl6ZWQ6ICAgICAgIGh0dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9k cmFmdC1tYXR0c3Nvbi1jb3NlLWNib3ItY2VydC1jb21wcmVzcy0wNQ0KPiBEaWZmOiAgICAgICAg ICAgaHR0cHM6Ly93d3cuaWV0Zi5vcmcvcmZjZGlmZj91cmwyPWRyYWZ0LW1hdHRzc29uLWNvc2Ut Y2Jvci1jZXJ0LWNvbXByZXNzLTA1DQo+DQo+IEFic3RyYWN0Og0KPiAgIFRoaXMgZG9jdW1lbnQg c3BlY2lmaWVzIGEgQ0JPUiBlbmNvZGluZyBvZiBYLjUwOSBjZXJ0aWZpY2F0ZXMuICBUaGUNCj4g ICByZXN1bHRpbmcgY2VydGlmaWNhdGVzIGFyZSBjYWxsZWQgQ0JPUiBDZXJ0aWZpY2F0ZXMuICBU aGUgQ0JPUg0KPiAgIGVuY29kaW5nIHN1cHBvcnRzIGEgbGFyZ2Ugc3Vic2V0IG9mIFJGQyA1Mjgw LCB3aGlsZSBhdCB0aGUgc2FtZSB0aW1lDQo+ICAgc2lnbmlmaWNhbnRseSByZWR1Y2VzIHRoZSBz aXplIG9mIGNlcnRpZmljYXRlcyBjb21wYXRpYmxlIHdpdGggUkZDDQo+ICAgNzkyNSBhbmQgSUVF RSA4MDIuMUFSIChEZXZJRHMpLiAgV2hlbiB1c2VkIHRvIHJlLWVuY29kZSBERVIgZW5jb2RlZA0K PiAgIFguNTA5IGNlcnRpZmljYXRlcywgdGhlIENCT1IgZW5jb2RpbmcgY2FuIGluIG1hbnkgY2Fz ZXMgcmVkdWNlIHRoZQ0KPiAgIHNpemUgb2YgUkZDIDc5MjUgcHJvZmlsZWQgY2VydGlmaWNhdGVz IHdpdGggb3ZlciA1MCUuICBUaGUgQ0JPUg0KPiAgIGVuY29kaW5nIGNhbiBhbHNvIGJlIHVzZWQg ZW5jb2RlICJuYXRpdmVseSBzaWduZWQiIENCT1IgY2VydGlmaWNhdGVzLA0KPiAgIHdoaWNoIGRv ZXMgbm90IHJlcXVpcmUgcmUtZW5jb2RpbmcgZm9yIHRoZSBzaWduYXR1cmUgdG8gYmUgdmVyaWZp ZWQuDQo+ICAgVGhlIGRvY3VtZW50IGFsc28gc3BlY2lmaWVzIENPU0UgaGVhZGVycyBhcyB3ZWxs IGFzIGEgVExTIGNlcnRpZmljYXRlDQo+ICAgdHlwZSBmb3IgQ0JPUiBjZXJ0aWZpY2F0ZXMuDQo+ DQo+DQo+DQo+DQo+IFBsZWFzZSBub3RlIHRoYXQgaXQgbWF5IHRha2UgYSBjb3VwbGUgb2YgbWlu dXRlcyBmcm9tIHRoZSB0aW1lIG9mIHN1Ym1pc3Npb24NCj4gdW50aWwgdGhlIGh0bWxpemVkIHZl cnNpb24gYW5kIGRpZmYgYXJlIGF2YWlsYWJsZSBhdCB0b29scy5pZXRmLm9yZzxodHRwOi8vdG9v bHMuaWV0Zi5vcmc+Lg0KPg0KPiBUaGUgSUVURiBTZWNyZXRhcmlhdA0KPg0KPg0KPg0KPiBfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBDT1NFIG1haWxp bmcgbGlzdA0KPiBDT1NFQGlldGYub3JnPG1haWx0bzpDT1NFQGlldGYub3JnPg0KPiBodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UNCg0KX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkNPU0UgbWFpbGluZyBsaXN0DQpDT1NFQGll dGYub3JnPG1haWx0bzpDT1NFQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9jb3NlDQoNCg0KDQotLQ0KDQpTdGVmYW4gSHJpc3Rvem92DQpEZXBhcnRtZW50 IEhhcmR3YXJlIFNlY3VyaXR5DQpGcmF1bmhvZmVyIEluc3RpdHV0ZSBmb3IgQXBwbGllZCBhbmQg SW50ZWdyYXRlZCBTZWN1cml0eSBBSVNFQw0KTGljaHRlbmJlcmdzdHJhw59lIDExLCA4NTc0OCBH YXJjaGluZyBuZWFyIE11bmljaCwgR2VybWFueQ0KVGVsLiArNDkgODkgMzIyOTkgODYgMTU3DQpz dGVmYW4uaHJpc3Rvem92QGFpc2VjLmZyYXVuaG9mZXIuZGU8bWFpbHRvOnN0ZWZhbi5ocmlzdG96 b3ZAYWlzZWMuZnJhdW5ob2Zlci5kZT4NCmh0dHBzOi8vd3d3LmFpc2VjLmZyYXVuaG9mZXIuZGUv DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KQ09TRSBt YWlsaW5nIGxpc3QNCkNPU0VAaWV0Zi5vcmc8bWFpbHRvOkNPU0VAaWV0Zi5vcmc+DQpodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UNCg0KDQotLQ0KU3RlZmFuIEhyaXN0 b3pvdg0KRGVwYXJ0bWVudCBIYXJkd2FyZSBTZWN1cml0eQ0KRnJhdW5ob2ZlciBJbnN0aXR1dGUg Zm9yIEFwcGxpZWQgYW5kIEludGVncmF0ZWQgU2VjdXJpdHkgQUlTRUMNCkxpY2h0ZW5iZXJnc3Ry YcOfZSAxMSwgODU3NDggR2FyY2hpbmcgbmVhciBNdW5pY2gsIEdlcm1hbnkNClRlbC4gKzQ5IDg5 IDMyMjk5IDg2IDE1Nw0Kc3RlZmFuLmhyaXN0b3pvdkBhaXNlYy5mcmF1bmhvZmVyLmRlPG1haWx0 bzpzdGVmYW4uaHJpc3Rvem92QGFpc2VjLmZyYXVuaG9mZXIuZGU+DQpodHRwczovL3d3dy5haXNl Yy5mcmF1bmhvZmVyLmRlLw0K --_000_663F4F9B673A42A9BD19122E9C117092ericssoncom_ Content-Type: text/html; charset="utf-8" Content-ID: <389F53652928C64BA1AD176CC74C2CF0@eurprd07.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjAgMCAwIDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0K CXtmb250LWZhbWlseToiQ2FtYnJpYSBNYXRoIjsNCglwYW5vc2UtMToyIDQgNSAzIDUgNCA2IDMg MiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q2FsaWJyaTsNCglwYW5vc2UtMToyIDE1 IDUgMiAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNvbnNvbGFzOw0K CXBhbm9zZS0xOjIgMTEgNiA5IDIgMiA0IDMgMiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICov DQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowY207 DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjt9 DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglj b2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KcHJlDQoJe21zby1zdHls ZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7 DQoJbWFyZ2luOjBjbTsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEwLjBw dDsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCnNwYW4uYXBwbGUtY29udmVydGVkLXNw YWNlDQoJe21zby1zdHlsZS1uYW1lOmFwcGxlLWNvbnZlcnRlZC1zcGFjZTt9DQpzcGFuLkhUTUxQ cmVmb3JtYXR0ZWRDaGFyDQoJe21zby1zdHlsZS1uYW1lOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFy IjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9y bWF0dGVkIjsNCglmb250LWZhbWlseToiQ29uc29sYXMiLHNlcmlmO30NCnNwYW4uRW1haWxTdHls ZTIxDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxp YnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOndpbmRvd3RleHQ7fQ0KLk1zb0NocERlZmF1bHQNCgl7 bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBX b3JkU2VjdGlvbjENCgl7c2l6ZTo2MTIuMHB0IDc5Mi4wcHQ7DQoJbWFyZ2luOjcyLjBwdCA3Mi4w cHQgNzIuMHB0IDcyLjBwdDt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24x O30NCi0tPjwvc3R5bGU+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJlbi1TRSIgbGluaz0iYmx1ZSIg dmxpbms9InB1cnBsZSIgc3R5bGU9IndvcmQtd3JhcDpicmVhay13b3JkIj4NCjxkaXYgY2xhc3M9 IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIg c3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5IaSw8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1m YXJlYXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxh bmd1YWdlOkVOLVVTIj5UaGFuayB0aGUgZ3JlYXQgZGlzY3Vzc2lvbi4gSSBob3BlIHdlIGNhbiBk aXNjdXNzIHNvbWUgbW9yZSBkdXJpbmcgdG9kYXnigJlzIGludGVyaW0uPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJt c28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tR0IiIHN0eWxlPSJtc28tZmFyZWFz dC1sYW5ndWFnZTpFTi1VUyI+U3RlZmFuIEhyaXN0b3pvdiB3cm90ZTo8L3NwYW4+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiPiZndDsg PC9zcGFuPndoaWNoIEkgd2FzIG5vdCBjYWJsZSB0byBkbyBiZWNhdXNlIHRoZSBwdWJsaWMga2V5 IG9mIHRoZSBDQSBpcyBub3QgZ2l2ZW4gaW4gdGhlIHRlc3QgdmVjdG9yLjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdl OkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdlOkVOLVVTIj5J biB2ZXJzaW9uIC0wNSBvZiB0aGUgZHJhZnQsIHRoZSBwdWJsaWMgYW5kIHByaXZhdGUga2V5IG9m IHRoZSBDQSBhcmUgaW5jbHVkZWQ6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpF Ti1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBBbGwgb2YgdGhlIHRoZSBhYm92ZSBleGFtcGxlIGNlcnRp ZmljYXRlIHdlcmUgc2lnbmVkIGFuZCBjYW4gYmU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IHZlcmlmaWVkIHdpdGggdGhl IGZvbGxvd2luZyBrZXkgcGFpciB3aGVyZSB0aGUgcHJpdmF0ZSBrZXkgaXMgZW5jb2RlZDxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsm bmJzcDsgYXMgaW4gQ09TRSBbPGEgaHJlZj0iaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL3Jm YzgxNTIiIHRpdGxlPSImcXVvdDtDQk9SIE9iamVjdCBTaWduaW5nIGFuZCBFbmNyeXB0aW9uIChD T1NFKSZxdW90OyI+UkZDODE1MjwvYT5dLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IGlzc3VlclB1YmxpY0tleUFs Z29yaXRobSA6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPiZuYnNwOyZuYnNwOyAxIChpZC1lY1B1YmxpY0tleSArIHNlY3AyNTZyMSk8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNw OyZuYnNwOyBpc3N1ZXJQdWJsaWNLZXkgOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgaCcwMkFFNENEQjAxRjYxNERFRkM3 MTIxMjg1RkRDN0Y1QzZEMUQ0MkM5NTY0N0YwNjFCQTAwODBERjY3ODg2Nzg0NUUnPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsm bmJzcDsgaXNzdWVyUHJpdmF0ZUtleSA6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBoJ0RDNjZCMzQxNTQ1NkQ2NDk0MjlC NTMyMjNERjc1MzJCOTQyRDZCMEUwODQyQzMwQkNBNEMwQUNGOTE1NDdCQjInPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxl PSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFy ZWFzdC1sYW5ndWFnZTpFTi1VUyI+KFZlcnNpb24gLTA2IG9mIHRoZSBkcmFmdCB3aWxsIGFsc28g aW5jbHVkZSB0aGUgcHJpdmF0ZSBrZXkgb2YgdGhlIHN1YmplY3QgaW4gdGhlIGV4YW1wbGUgY2Vy dGlmaWNhdGUuIFRoaXMgbWFrZXMgaXQgcG9zc2libGUgdG8gdXNlIHRoZSBleGFtcGxlIGNlcnRp ZmljYXRlIGluIGUuZy4sIEVESE9DIHRlc3QgdmVjdG9ycyk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJl YXN0LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1 YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBsYW5nPSJFTi1VUyI+R8O2cmFuIFNlbGFuZGVyIHdyb3RlOjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIGxhbmc9IkVOLVVTIj5J4oCZ bSBhd2FyZSBvZiB0d28gaW1wbGVtZW50YXRpb24gYWN0aXZpdGllczogYnkgSm9obiAodHlwZSAx KSBhbmQgYnkgU3RlZmFuICh0eXBlIDApLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gbGFu Zz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+SSBoYXZlIHNvIGZh ciBvbmx5IGltcGxlbWVudGVkIERFUiAtJmd0OyBDQk9SICh0eXBlIDEpLiBJIHN0YXJ0ZWQgaW4g QysrMTcgYnV0IGhhdmUgbm93IG1vdmVkIHRvIFJ1c3QuIEkgd3JvdGUgbXkgb3duIERFUiBkZWNv ZGVyIGFuZCBDQk9SIGVuY29kZXIuIFRoZSByZWFzb24gSSB3cm90ZSBldmVyeXRoaW5nIG15c2Vs Zg0KIHdhcyB0byBtYWtlIHN1cmUgSSB1bmRlcnN0YW5kIGFsbCB0aGUgbml0dHkgZ3JpdHR5IGRl dGFpbHMgb2YgREVSIGFuZCBDQk9SLiBJIHBsYW4gdG8gcmVsZWFzZSB0aGUgc291cmNlIGNvZGUg d2hlbiBJIGhhdmUgY2xlYW5lZCBpdCB1cCBhIGJpdC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0 LWxhbmd1YWdlOkVOLVVTIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBsYW5nPSJFTi1VUyIgc3R5bGU9Im1zby1mYXJlYXN0LWxhbmd1YWdl OkVOLVVTIj5Kb2huPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gbGFuZz0iRU4tVVMiIHN0eWxlPSJtc28tZmFyZWFzdC1sYW5ndWFnZTpFTi1VUyI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVy LXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGNtIDBjbSAwY20iPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PGI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2siPkZyb206DQo8L3NwYW4+PC9iPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrIj4mcXVvdDtIcmlzdG96b3YsIFN0 ZWZhbiZxdW90OyAmbHQ7c3RlZmFuLmhyaXN0b3pvdkBhaXNlYy5mcmF1bmhvZmVyLmRlJmd0Ozxi cj4NCjxiPkRhdGU6IDwvYj5UdWVzZGF5LCAxNSBEZWNlbWJlciAyMDIwIGF0IDE2OjM0PGJyPg0K PGI+VG86IDwvYj4mcXVvdDtsZ2xAaXNsYW5kLXJlc29ydC5jb20mcXVvdDsgJmx0O2xnbEBpc2xh bmQtcmVzb3J0LmNvbSZndDs8YnI+DQo8Yj5DYzogPC9iPkpvaG4gTWF0dHNzb24gJmx0O2pvaG4u bWF0dHNzb25AZXJpY3Nzb24uY29tJmd0OywgR8O2cmFuIFNlbGFuZGVyICZsdDtnb3Jhbi5zZWxh bmRlckBlcmljc3Nvbi5jb20mZ3Q7LCAmcXVvdDtjb3NlQGlldGYub3JnJnF1b3Q7ICZsdDtjb3Nl QGlldGYub3JnJmd0Ozxicj4NCjxiPlN1YmplY3Q6IDwvYj5SZTogW0NPU0VdIGJzdHIgd3JhcHBp bmcgZm9yIG5hdGl2ZSBzaWduZWQgKHdhcyBSZTogTmV3IFZlcnNpb24gTm90aWZpY2F0aW9uIGZv ciBkcmFmdC1tYXR0c3Nvbi1jb3NlLWNib3ItY2VydC1jb21wcmVzcy0wNS50eHQpPG86cD48L286 cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5IaSBMYXVy ZW5jZSw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ aSBkb24ndCBoYXZlIGFuIGltcGxlbWVudGF0aW9uIGluIGhpZ2hlciBsYW5ndWFnZXMgc3VjaCBh cyBQeXRob24gb3IgR28sIHNvIGkgZGVjaWRlZCB0byBjb2RlIGl0IHRvZGF5IGluIFJ1c3QgKCBq dXN0IGZvciBmdW4pLiBGaW5kIG15IGltcGxlbWVudGF0aW9uIGF0dGFjaGVkLiBJIHRlc3RlZCB0 aGlzIGltcGxlbWVudGF0aW9uIHdpdGggdGVzdCB2ZWN0b3IgQS4xLjEuPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MzYuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPkkgaGF2ZSBhIGZ1bmN0aW9uIGNh bGxlZCZuYnNwOzxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiM3OTVFMjYiPmRlY29kZV9uYXRpdmUNCjwvc3Bhbj53 aGljaCByZXR1cm5zIGEgc3RydWN0IGNvbnRhaW5pbmcgdGhlIGRlY29kZWQgY2VydGlmaWNhdGUg ZmllbGRzICZxdW90OzxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuNXB0O2ZvbnQtZmFtaWx5OiZx dW90O0NvdXJpZXIgTmV3JnF1b3Q7O2NvbG9yOiMwMDEwODAiPmRlY29kZWRfZGF0YTwvc3Bhbj4m cXVvdDssIHRoZSBlbmNvZGVkIGNlcnRpZmljYXRlIGZpZWxkcyAmcXVvdDs8c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90Oztjb2xv cjojMDAxMDgwIj5zaWduZWRfZGF0YTwvc3Bhbj4mcXVvdDsNCiBhbmQgdGhlIHNpZ25hdHVyZSAm cXVvdDs8c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjVwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90Oztjb2xvcjojMDAxMDgwIj5zaWduYXR1cmU8L3NwYW4+JnF1b3Q7LiAmbmJz cDtUbyB2ZXJpZnkgdGhlIGNlcnRpZmljYXRlIHdlIG5lZWQgdG8gcHJvdmlkZSB0aGUgJm5ic3A7 PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDs7Y29sb3I6IzAwMTA4MCI+c2lnbmVkX2RhdGEgYW5kIHNpZ25hdHVyZQ0KPC9zcGFu PnRvIGEgdmVyaWZpY2F0aW9uIGZ1bmN0aW9uLCB3aGljaCBJIHdhcyBub3QgY2FibGUgdG8gZG8g YmVjYXVzZSB0aGUgcHVibGljIGtleSBvZiB0aGUgQ0EgaXMgbm90IGdpdmVuIGluIHRoZSB0ZXN0 IHZlY3Rvci48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+RGVjb2RpbmcgdGVzdCB2ZWN0b3IgQS4xLjEgbXkgaW1wbGVtZW50YXRpb24gZ2VuZXJhdGVz IHRoZSBmb3dsaW5nIHJlc3VsdDo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQiPi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5jYm9yX2NlcnRfdHlwZSBp czogMTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Y2VydF9zZXJpYWxfbnVtYmVyIGlzOiBbMDEsIGY1 LCAwZF08bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPmlzc3VlciBpczogWzgyLCA3MCwgNjcsIDMyLCAx MTYsIDEwMSwgMTE1LCAxMTYsIDMyLCA2NywgNjVdPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij52YWxp ZGl0eV9ub3RfYmVmb3JlIGlzOiAxNTc3ODM2ODAwPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij52YWxp ZGl0eV9ub3RfYWZ0ZXIgaXM6IDE2MTIyMjQwMDA8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPnN1Ympl Y3QgaXM6IFswMSwgMjMsIDQ1LCA2NywgODksIGFiXTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+c3Vi amVjdF9wa19hbGcgaXM6IDE8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPnN1YmplY3RfcGsgaXM6IFsw MiwgYjEsIDIxLCA2YSwgYjksIDZlLCA1YiwgM2IsIDMzLCA0MCwgZjUsIGJkLCBmMCwgMmUsIDY5 LCAzZiwgMTYsIDIxLCAzYSwgMDQsIDUyLCA1ZSwgZDQsIDQ0LCA1MCwgYjEsIDAxLCA5YywgMmQs IGZkLCAzOCwgMzgsIGFiXTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ZXh0ZW5zaW9ucyBpczogMTxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+aXNzdWVyX3Nnbl9hbGcgaXM6IDY8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQiPnNpZ25lZF9kYXRhIGlzOiBbMDEsIDQzLCAwMSwgZjUsIDBkLCA2YiwgNTIsIDQ2LCA0 MywgMjAsIDc0LCA2NSwgNzMsIDc0LCAyMCwgNDMsIDQxLCAxYSwgNWUsIDBiLCBlMSwgMDAsIDFh LCA2MCwgMTgsIDk2LCAwMCwgNDYsIDAxLCAyMywgNDUsIDY3LCA4OSwgYWIsIDAxLCA1OCwgMjEs IDAyLCBiMSwgMjEsIDZhLCBiOSwgNmUsIDViLCAzYiwgMzMsIDQwLCBmNSwNCiBiZCwgZjAsIDJl LCA2OSwgM2YsIDE2LCAyMSwgM2EsIDA0LCA1MiwgNWUsIGQ0LCA0NCwgNTAsIGIxLCAwMSwgOWMs IDJkLCBmZCwgMzgsIDM4LCBhYiwgMDEsIDA2XTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+c2lnbmF0 dXJlIGlzOiBbNDQsIDVkLCA3OSwgOGMsIDkwLCBlNywgZjUsIDAwLCBkYywgNzQsIDdhLCA2NSwg NGMsIGVjLCA2YywgZmEsIDZmLCAwMywgNzIsIDc2LCBlMSwgNGUsIDUyLCBlZCwgMDcsIGZjLCAx NiwgMjksIDRjLCA4NCwgNjYsIDBkLCA1YSwgMzMsIDk4LCA1ZCwgZmIsIGQ0LCBiZiwgZGQsIDZk LCA0YSwgY2YsIDM4LCAwNCwgYzMsIGQ0LCA2ZSwgYmYsDQogM2IsIDdmLCBhNiwgMjYsIDQwLCA2 NywgNGYsIGMwLCAzNSwgNGYsIGEwLCA1NiwgZGIsIGFlLCBhNl08bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+VmVyeSBzaW1pbGFyIGNvZGUgY2FuIGJlIGFjaGlldmVkIGFsc28gd2l0aCB0aW55Q0JPUiBp biBDLiBNYW55IHZhbHVlcyBhcmUgbm90IHN0cmluZ3MgeW91IGFyZSByaWdodCBzbyBjYm9yX3Zh bHVlX2NhbGN1bGF0ZV9zdHJpbmdfbGVuZ3RoIGNhbm5vdCBiZSB1c2VkIGJ1dCBpbnRlZ2VycyB0 aGVyZWZvcmUgdG8gZ2V0IHRoZWlyIGxlbmd0aCBpcyBub3QgZGlmZmljdWx0LiZuYnNwOzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5JIGhvcGUgdGhp cyBjb2RlIGhlbHBzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MzYuMHB0Ij5XaGF0IGV4YWN0bHkgZG8geW91IG1lYW4gYnkgaGFja2luZyB0aGUgZGVjb2Rlcj8g RG8geW91IG1lYW4gdG8gdHJhY2sgdGhlIG9mZnNldD8gV2hhdCBhcmUgdGhlIGFsdGVybmF0aXZl cz88bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+QmVz dCByZWdhcmRzLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+U3RlZmFuPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYu MHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPlBTOiBJIGtub3cgdGhlIGNvZGUgY29u dGFpbnMgYSBsb3Qgb2YgY29weStwYXN0ZSBhbmQgbmVlZHMgdG8gYmUgcmVmYWN0b3JlZC48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+T24gTW9uLCAy MDIwLTEyLTE0IGF0IDExOjA5IC0wODAwLCBMYXVyZW5jZSBMdW5kYmxhZGUgd3JvdGU6PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXIt bGVmdDpzb2xpZCAjNzI5RkNGIDEuNXB0O3BhZGRpbmc6MGNtIDBjbSAwY20gNi4wcHQ7bWFyZ2lu LWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5IaSBTdGVmYW4sIDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Rmlyc3Qgb24gdGhlIGltcGxlbWVudGF0aW9uIOKAlCBteSB1 bmRlcnN0YW5kaW5nIGlzIHRoYXQgeW914oCZZCBoYXZlIHRvIGhhc2ggZnJvbSB0aGUgYnl0ZSBv ZmZzZXQgb2YgdGhlIGZpcnN0IGJ5dGUgb2YgdGhlIENCT1IgZW5jb2RlZCBoZWFkIG9mIGNib3JD ZXJ0aWZpY2F0ZVR5cGUgdG8gdGhlIGxhc3QgYnl0ZSBvZiB0aGUgRXh0ZW5zaW9ucyB0byBjb3Jy ZWN0bHkNCiBpbXBsZW1lbnQgdGhpcy4gU2luY2UgdGhlJm5ic3A7Y2JvckNlcnRpZmljYXRlVHlw ZSBpcyB0aGUgZmlyc3QgaXRlbSBpbiB0aGUgc2VxdWVuY2UsIGl0cyBvZmZzZXQgaXMgemVybywg c28gdGhhdOKAmXMgZWFzeS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+SeKAmW0gbm90IHN1cmUgaG93IHlvdeKAmWQgdXNlJm5ic3A7PHNwYW4gc3R5 bGU9ImNvbG9yOiMzRDNEM0Q7YmFja2dyb3VuZDp3aGl0ZSI+Y2Jvcl92YWx1ZV9jYWxjdWxhdGVf c3RyaW5nX2xlbmd0aCBzaW5jZSZuYnNwO21hbnkgb2YgdGhlIGl0ZW1zIGluIHRoZSBUQlNDZXJ0 aWZpY2F0ZSBhcmUgbm90IHN0cmluZ3MuIE1heWJlIHlvdSBjYWxjdWxhdGUgdGhlIGxlbmd0aCBv ZiB0aGUmbmJzcDs8L3NwYW4+PHNwYW4gc3R5bGU9ImNvbG9yOiMzRDNEM0QiPmlzc3VlclNpZ25h dHVyZVZhbHVlDQogYW5kIGdvIGJhY2smbmJzcDtmcm9tIHRoZSBlbmQ/IFRoYXQgd291bGRu4oCZ dCBhY2NvdW50IGZvciZuYnNwO0NCT1ImbmJzcDtlbmNvZGVkIGhlYWQgb2YmbmJzcDtpc3N1ZXJT aWduYXR1cmVWYWx1ZSB0aG91Z2guPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4g c3R5bGU9ImNvbG9yOiMzRDNEM0QiPjxicj4NCjxicj4NCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojM0QzRDNEIj5TbywgSSBkb27igJl0IHVuZGVyc3Rh bmQgaG93IHRoaXMgd29ya3Mgd2l0aCB0aW55Q0JPUiBvciB0aGF0IGl0IGlzIGV2ZW4mbmJzcDtj b3JyZWN0Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJjb2xvcjoj M0QzRDNEIj48YnI+DQo8YnI+DQo8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBz dHlsZT0iY29sb3I6IzNEM0QzRCI+SXQgd291bGQgYmUgZ29vZCB0byBzZWUgYW4gaW1wbGVtZW50 YXRpb24gaW4gUHl0aG9uIG9yIEdvIG9yIHN1Y2ggdG8gc2VlIGlmIGl0J3MgcG9zc2libGUgd2l0 aCB0aG9zZSB0eXBlIG9mIENCT1IgZGVjb2RlcnMuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+PHNwYW4gc3R5bGU9ImNvbG9yOiMzRDNEM0QiPjxicj4NCjxicj4NCjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDozNi4wcHQiPjxzcGFuIHN0eWxlPSJjb2xvcjojM0QzRDNEIj48YnI+DQo8YnI+DQo8 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iY29sb3I6IzNEM0QzRCI+ U2Vjb25kIG9uIHRoZSBkZXNpZ24mbmJzcDvigJQgSSBzdGlsbCBiZWxpZXZlIHRoaXMgZGVzaWdu IGlzIGNvdW50ZXIgdG8mbmJzcDtjb252ZW50aW9ucyB1c2VkIGluIENCT1IgZm9yIHNpZ25pbmcv aGFzaGluZyBkYXRhLiBJIHRoaW5rIHRoZSBmb2xrcyB0aGF0IGRlc2lnbmVkIENPU0UgdGhvdWdo dCB0aGlzIGlzc3VlIHRocm91Z2guPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFu IHN0eWxlPSJjb2xvcjojM0QzRDNEIj4oTXkgZmlyc3QgZGVzaWduIG9mIG9mIEVBVCBkaWQgdGhl IGhhc2hpbmcgdGhlIHdheSBpdCBpcyBiZWluZyBkb25lIGhlcmUuIFRoaXMgd2FzIGJlZm9yZSBD T1NFIHdhcyBwdWJsaXNoZXMgYXMgYW4gUkZDLiBUaGUgZm9sa3MgdXNpbmcgYW4gb2ZmLXRoZS1z aGVsZiBQeXRob24gQ0JPUiBkZWNvZGVyIGhhZCB0byBoYWNrDQogdGhhdCBkZWNvZGVyIHRvIGdl dCB0aGUgdmVyaWZpY2F0aW9uIHRvIHdvcmsuIFRoZW4gRUFUIHN3aXRjaGVkIHRvIENPU0UgYW5k IEkgY2FtZSB0byB1bmRlcnN0YW5kIHRoZSByZWFzb25zIENPU0Ugd29ya3MgYXMgaXQgZG9lcy4p PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0 Ij48c3BhbiBzdHlsZT0iY29sb3I6IzNEM0QzRCI+TEw8L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYu MHB0Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxi cj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25l O2JvcmRlci1sZWZ0OnNvbGlkICM3MjlGQ0YgMS41cHQ7cGFkZGluZzowY20gMGNtIDBjbSA2LjBw dDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGNtIj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij5PbiBEZWMgMTQsIDIwMjAsIGF0 IDU6NTAgQU0sIEhyaXN0b3pvdiwgU3RlZmFuICZsdDs8YSBocmVmPSJtYWlsdG86c3RlZmFuLmhy aXN0b3pvdkBhaXNlYy5mcmF1bmhvZmVyLmRlIj5zdGVmYW4uaHJpc3Rvem92QGFpc2VjLmZyYXVu aG9mZXIuZGU8L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQ7YmFja2dyb3VuZDp3 aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2E7 Y29sb3I6IzNEM0QzRCI+SGkgTGF1cmVuY2UsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdDtiYWNrZ3JvdW5kOndoaXRl Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYTtjb2xv cjojM0QzRDNEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0O2JhY2tncm91bmQ6d2hpdGUiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhO2NvbG9yOiMzRDNEM0Qi PkkgYW0gdXNpbmcgdGhlIEMgbGlicmFyeSB0aW55Y2JvciBbMV0gZm9yIG15IG5hdGl2ZSBDQk9S IGNlcnRpZmljYXRlIGRlY29kZXIuJm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdDtiYWNrZ3JvdW5kOndoaXRl Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYTtjb2xv cjojM0QzRDNEIj5EdXJpbmcgcGFyc2luZyB0aGUgY2VydGlmaWNhdGUgSSBhbSBjYWxjdWxhdGlu ZyBhbHNvIGFuIG9mZnNldCBmcm9tIGl0cyBiZWdpbm5pbmcgYWZ0ZXIgZWFjaCBwYXJzZWQgZWxl bWVudC4gVGlueWNib3IgcHJvdmlkZXMNCiBhIGZ1bmN0aW9uIGZvciBnZXR0aW5nIHRoZSBsZW5n dGggb2YgdGhlIGJ5dGUgb3IgdGV4dCBzdHJpbmcgY2Jvcl92YWx1ZV9jYWxjdWxhdGVfc3RyaW5n X2xlbmd0aCBbMl0sIHdoaWNoIGlzIGhlbHBmdWwgZm9yIHRoYXQuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdDtiYWNr Z3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5Okhl bHZldGljYTtjb2xvcjojM0QzRDNEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0O2JhY2tncm91bmQ6d2hp dGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhO2Nv bG9yOiMzRDNEM0QiPkRvZXMgdGhpcyBhbnN3ZXIgeW91ciBxdWVzdGlvbj88bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0 O2JhY2tncm91bmQ6d2hpdGUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1p bHk6SGVsdmV0aWNhO2NvbG9yOiMzRDNEM0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQ7YmFja2dyb3Vu ZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpIZWx2ZXRp Y2E7Y29sb3I6IzNEM0QzRCI+QmVzdCByZWdhcmRzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQ7YmFja2dyb3VuZDp3 aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2E7 Y29sb3I6IzNEM0QzRCI+U3RlZmFuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdDtiYWNrZ3JvdW5kOndoaXRlIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYTtjb2xvcjojM0Qz RDNEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0O2JhY2tncm91bmQ6d2hpdGUiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhO2NvbG9yOiMzRDNEM0QiPlsxXTo8 c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0i aHR0cHM6Ly9wcm90ZWN0Mi5maXJlZXllLmNvbS92MS91cmw/az01YzBiYjExMS0wMzkwODg1Mi01 YzBiZjE4YS04NjFmY2I5NzJiZmMtMDZjZDczYzA5MjE2M2I5MyZhbXA7cT0xJmFtcDtlPTVlMjk1 YTkzLWE0NGMtNGYzMC05NjQyLTY1ZjY4MWE2YjVlYyZhbXA7dT1odHRwcyUzQSUyRiUyRmdpdGh1 Yi5jb20lMkZpbnRlbCUyRnRpbnljYm9yIj5odHRwczovL2dpdGh1Yi5jb20vaW50ZWwvdGlueWNi b3I8L2E+Jm5ic3A7Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdDtiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYTtjb2xvcjojM0QzRDNE Ij5bMl06PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxh IGhyZWY9Imh0dHBzOi8vcHJvdGVjdDIuZmlyZWV5ZS5jb20vdjEvdXJsP2s9NzMzNzNjMDktMmNh YzA1NGEtNzMzNzdjOTItODYxZmNiOTcyYmZjLTc5OGNlMGQyNzY3YjllNjMmYW1wO3E9MSZhbXA7 ZT01ZTI5NWE5My1hNDRjLTRmMzAtOTY0Mi02NWY2ODFhNmI1ZWMmYW1wO3U9aHR0cHMlM0ElMkYl MkZpbnRlbC5naXRodWIuaW8lMkZ0aW55Y2JvciUyRmN1cnJlbnQlMkZhMDAwNDcuaHRtbCUyM2dh ZDViMmRkODAzMjQ0OTQ2YjE1NjAzZTA5Y2UxNDcwNDQiPmh0dHBzOi8vaW50ZWwuZ2l0aHViLmlv L3RpbnljYm9yL2N1cnJlbnQvYTAwMDQ3Lmh0bWwjZ2FkNWIyZGQ4MDMyNDQ5NDZiMTU2MDNlMDlj ZTE0NzA0NDwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0O2JhY2tncm91bmQ6d2hpdGUiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhO2NvbG9yOiMzRDNEM0QiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDozNi4wcHQ7YmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5 LjBwdDtmb250LWZhbWlseTpIZWx2ZXRpY2E7Y29sb3I6IzNEM0QzRCI+T24gTW9uLCAyMDIwLTEy LTE0IGF0IDEzOjE4ICswMDAwLCBHw7ZyYW4gU2VsYW5kZXIgd3JvdGU6PG86cD48L286cD48L3Nw YW4+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlk ICM3MjlGQ0YgMS41cHQ7cGFkZGluZzowY20gMGNtIDBjbSA2LjBwdDttYXJnaW4tbGVmdDo0Ljhw dDttYXJnaW4tcmlnaHQ6MGNtIj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBsYW5nPSJFTi1VUyI+SGkgTGF1cmVuY2UsPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMiPiZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIj5J4oCZbSBhd2FyZSBvZiB0 d28gaW1wbGVtZW50YXRpb24gYWN0aXZpdGllczogYnkgSm9obiAodHlwZSAxKSBhbmQgYnkgU3Rl ZmFuICh0eXBlIDApLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxhbmc9IkVO LVVTIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBsYW5nPSJFTi1V UyI+R8O2cmFuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PHNwYW4gbGFuZz0iRU4tVVMi PiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxzcGFuIGxhbmc9IkVOLVVTIj4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6MGNtO21hcmdpbi1yaWdodDowY207bWFyZ2luLWJv dHRvbToxMi4wcHQ7bWFyZ2luLWxlZnQ6NzIuMHB0Ij4NCk9uIDIwMjAtMTItMDcsIDIzOjAyLCAm cXVvdDtDT1NFJnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86Y29zZS1ib3VuY2VzQGlldGYub3Jn Ij5jb3NlLWJvdW5jZXNAaWV0Zi5vcmc8L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjxk aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+SSBkb27igJl0IHRoaW5rIGl0IHdvcmtzIHZl cnkgd2VsbCBhdCBhbGwgdG8gZGlyZWN0bHkgc2lnbiBlbmNvZGVkIENCT1IuIEl0IHNob3VsZCBi ZSB3cmFwcGVkIGluIGEgYnl0ZSBzdHJpbmcuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPkluIHBhcnRp Y3VsYXIgaXNzdWVyU2lnbmF0dXJlVmFsdWUgc2hvdWxkIHByb2JhYmx5IGJlIHRoZSBzaWduYXR1 cmUgb3ZlciBhIGJ5dGUgc3RyaW5nIHRoYXQgY29udGFpbnMgYW4gZW5jb2RlZCBUQlNDZXJ0aWZp Y2F0ZS4gVGhpcyBpcyB3aGF0IENPU0UgZG9lcy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+VGhlIG1h aW4gcmVhc29uIGZvciB0aGlzIGlzIHRvIGFsbG93IGltcGxlbWVudGF0aW9uIHdpdGggb2ZmLXRo ZS1zaGVsZiBDQk9SIGVuY29kZXJzIGFuZCBkZWNvZGVycy4gRnJvbSBzb21lIHRoYXQgSeKAmXZl IGxvb2tlZCBhdCBhbmQgb25lIEnigJl2ZSB3cml0dGVuIG15c2VsZiwgQ0JPUiBkZWNvZGVycyBk b27igJl0IGFsbG93IGFjY2VzcyBhIHN1Yi1wYXJ0IG9mIHRoZQ0KIGVuY29kZWQgQ0JPUiBzbyBp dCBjYW4gYmUgaW5wdXQgaW50byB0aGUgaGFzaC4gVGhlcmUgd291bGQgYmUgbm8gd2F5IHRvIGdl dCBqdXN0IHRoZSBlbmNvZGVkIGJ5dGVzIG9mIHRoZSBUQlNDZXJ0aWZpY2F0ZSBvdXQgb2YgdGhl IENCT1IgZGVjb2RlciB1bmxlc3MgeW91IHdlbnQgaW4gYW5kIGhhY2tlZCBpdHMgc291cmNlIGNv ZGUgaW4gYSBzcGVjaWFsIHdheS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+SGFzIGFueW9uZSBpbXBs ZW1lbnRlZCB2ZXJpZmljYXRpb24gb2YgTmF0aXZlbHkgU2lnbmVkIENCT1IgQ2VydGlmaWNhdGVz PyBXaGF0IENCT1IgZGVjb2RlciB3YXMgdXNlZD8gTWF5YmUgSeKAmW0gd3JvbmcgYWJvdXQgdGhp cz88bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+SSByZWFsaXplIGJ5dGUgc3RyaW5nIHdyYXBwaW5nIFRC U0NlcnRpZmljYXRlIG1pZ2h0IGNhdXNlIHVwaGVhdmFsIGluIHRoZSBvdmVyYWxsIGRlc2lnbiBi ZWNhdXNlIGNib3JDZXJ0aWZpY2F0ZVR5cGUgd291bGQgYmUgaW5zaWRlIHRoZSBieXRlIHN0cmlu ZyB3cmFwcGluZy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tbGVmdDozNi4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+QW5vdGhlciBhcHByb2FjaCBtaWdodCBi ZSB0byBqdXN0IHVzZSBDT1NFIGZvciBOYXRpdmVseSBTaWduZWQgQ0JPUiBDZXJ0aWZpY2F0ZXMu IFRoZSBDT1NFIHBheWxvYWQgd291bGQgYmUgYSBUQlNDZXJ0aWZpY2F0ZS4gQ09TRSB3b3VsZCB0 YWtlIGNhcmUgb2YgdGhlIGJ5dGUgc3RyaW5nIHdyYXBwaW5nIGlzc3Vlcy4gVGhpcyB3b3VsZCBp bmNyZWFzZSB0aGUgb24tdGhlLXdpcmUNCiBzaXplIG9mIHRoZSBjZXJ0aWZpY2F0ZSBieSBhYm91 dCAxMCBieXRlcywgYnV0IG1pZ2h0IGRlY3JlYXNlIGNvZGUgc2l6ZSBvZiB0aGUgaW1wbGVtZW50 YXRpb24gYnkgcmUgdXNlIG9mIGEgQ09TRSBpbXBsZW1lbnRhdGlvbi48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZuYnNwOzxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4t bGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+TEw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDozNi4wcHQiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxk aXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IE9uIERlYyAy LCAyMDIwLCBhdCAxMjo0OSBBTSwgSm9obiBNYXR0c3NvbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmpv aG4ubWF0dHNzb249NDBlcmljc3Nvbi5jb21AZG1hcmMuaWV0Zi5vcmciPmpvaG4ubWF0dHNzb249 NDBlcmljc3Nvbi5jb21AZG1hcmMuaWV0Zi5vcmc8L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0 Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDs8 c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4m Z3Q7IFRoYW5rcyBhZ2FpbiBmb3IgYWxsIHRoZSBnb29kIGNvbW1lbnQgYW5kIGRpc2N1c3Npb25z IG9uIHRoZSBsaXN0ITxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2 IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3Bh Y2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgV2UgaGF2ZSBzdWJtaXR0ZWQgLTA1LiBDaGFu Z2VzIGFyZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJn aW4tbGVmdDozNi4wcHQiPiZndDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IC0gQWRkZWQgcmVmZXJlbmNlIHRvIElFRUUgODAyLjFB UiBEZXZJRCBhbmQgbWFkZSBvcHRpbWl6YXRpb24gZm9yIElFRUUgODAyLjFBUiBEZXZJRC48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPiZndDsgLSBSZXBocmFzZWQgJnF1b3Q7Y29tcHJlc3MmcXVvdDsgaW4gdGhlIHdob2xlIGRv Y3VtZW50LiBXZSB3aWxsIGNoYW5nZSB0aGUgZmlsZSBuYW1lIGxhdGVyLjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyAt IE1hZGUgaXQgbW9yZSBjbGVhciB0aGF0IFguNTA5IHZlcnNpb24gaW4gaW5jbHVkZWQgaW4gdGhl IENCT1IgY2VydGlmaWNhdGUgdHlwZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgLSBPbWl0dGVkICdzaWduYXR1cmUn IGluc3RlYWQgb2YgJ3NpbmdhdHVyZUFsZ29yaXRobScuIE5vdyB0aGUgYWxnb3JpdGhtIGNvbWVz IGp1c3QgYmVmb3JlIHRoZSBzaWduYXR1cmUgdmFsdWUuPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IC0gQWRkZWQgc3Vw cG9ydCBvZiBlbWFpbEFkZHJlc3MgLyBJQTVTdHJpbmcgaW4gaXNzdWVyIGFuZCBzdWJqZWN0LiBU aGlzIHdhcyBlYXN5LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2 IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyAtIGNoYW5nZWQgc28gdXRmOFN0cmluZ3MgaGF2ZSBh IHBvc2l0aXZlIHNpZ24uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxk aXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IC0gQ2hhbmdlIHRpbWUgdG8gdW53cmFwcGVkIENC T1IgZXBvY2ggdGltZSAofnRpbWUpLiBUaGlzIHNhdmVzIDEgYnl0ZSBmb3IgdGltZSAmZ3Q7IDIw NTA8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPiZndDsgLSBBZGRlZCB0aGF0IHRoZSB2YWx1ZSAmcXVvdDs5OTk5MTIzMTIzNTk1 OVomcXVvdDsgKG5vIGV4cGlyYXRpb24gZGF0ZSkgaXMgZW5jb2RlZCBhcyBDQk9SIG51bGwuIFRo aXMgaXMgcXVpdGUgY29tbW9ubHkgdXNlZCBpbiBJb1QgY2VydGlmaWNhdGVzLiBUaGlzIHNhdmVz IDQgYnl0ZXMgd2hlbiB1c2VkLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyAtIFVzZSBDRERMIGZvciBDQk9SIE9JRCBh cyBkZWZpbmVkIGluIGRyYWZ0LWlldGYtY2Jvci10YWdzLW9pZDxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyAtIEFkZGVk IENCT1IgZW5jb2RpbmcgZm9yIHV0aG9yaXR5S2V5SWRlbnRpZmllciBhbmQgc3ViamVjdEtleUlk ZW50aWZpZXIgd2hpY2ggYXJlIGhlYXZpbHkgdXNlZCBieSBJRUVFIDgwMi4xQVIgRGV2SUQgKGF0 IGxlYXN0IG9uZSBvZiB0aGVtIGFyZSBtYW5kYXRlZCBkZXBlbmRpbmcgb24gdHlwZSBvZiBjZXJ0 KS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPiZndDsgLSBBZGRlZCBvcHRpbWl6YXRpb24gZm9yIHRoZSBoYXJkd2FyZU1vZHVs ZU5hbWUgdHlwZSBvZiBvdGhlck5hbWUsIHdoaWNoIGlzIG1hbmRhdG9yeSB0byB1c2UgaW4gSUVF RSA4MDIuMUFSIERldklEPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxk aXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IC0gQWRkZWQgQ0JPUiBlbmNvZGluZyBmb3IgY1JM RGlzdHJpYnV0aW9uUG9pbnRzIGFuZCBhdXRob3JpdHlJbmZvQWNjZXNzLCB3aGljaCBhcmUgYm90 aCB1c2VkIGluIGJhc2ljYWxseSBhbGwgSFRUUFMgY2VydGlmaWNhdGVzIG9uIHRoZSB3ZWIuPG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYu MHB0Ij4mZ3Q7IC0gQWRkZWQgc3VwcG9ydCBmb3IgcmVnaXN0ZXJlZElELiBUaGlzIHdhcyB0cml2 aWFsIGFuZCByZWdpc3RlcmVkSUQgaXMgdXNlZCBlLmcuIGJ5IHRoZSBHU01BIGVVSUNDIFBLSSBD ZXJ0aWZpY2F0ZSBQb2xpY3kgKFNHUCAxNCkuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IC0gQWRkZWQgY29uc2lkZXJh dGlvbnMgZm9yIGV4cGVydCByZXZpZXdlcnMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IC0gTW92ZWQgU0hBLTEgc2ln bmF0dXJlIGFsZ29yaXRobXMgdG8gbmVnYXRpdmUgMiBieXRlIGVuY29kaW5nczogLTI1NiBhbmQg LTI1NTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJt YXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+Jmd0OyAtIEFkZGVkIGEgcHVibGljIHByaXZhdGUgRUNEU0Ega2V5IHBhaXIg dHVybmluZyB0aGUgZXhhbXBsZSBjZXJ0aWZpY2F0ZXMgaW50byB0ZXN0IHZlY3RvcnMuIEFuIGlt cGxlbWVudGF0aW9uIGNhbiBub3cgY3JlYXRlIGFuZCB2ZXJpZnkgdGhlIGV4YW1wbGUgUkZDIDc5 MjUgY2VydGlmaWNhdGVzLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQt c3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgQ2hlZXJzLDxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyBKb2hu PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MzYuMHB0Ij4mZ3Q7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJt YXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdCI+Jmd0OyAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLTxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyBG cm9tOiAmcXVvdDs8YSBocmVmPSJtYWlsdG86aW50ZXJuZXQtZHJhZnRzQGlldGYub3JnIj5pbnRl cm5ldC1kcmFmdHNAaWV0Zi5vcmc8L2E+JnF1b3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86aW50ZXJu ZXQtZHJhZnRzQGlldGYub3JnIj5pbnRlcm5ldC1kcmFmdHNAaWV0Zi5vcmc8L2E+Jmd0OzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+Jmd0OyBEYXRlOiBXZWRuZXNkYXksIDIgRGVjZW1iZXIgMjAyMCBhdCAwODo1NjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ Jmd0OyBUbzogR8O2cmFuIFNlbGFuZGVyICZsdDs8YSBocmVmPSJtYWlsdG86Z29yYW4uc2VsYW5k ZXJAZXJpY3Nzb24uY29tIj5nb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5jb208L2E+Jmd0OywgR8O2 cmFuIFNlbGFuZGVyICZsdDs8YSBocmVmPSJtYWlsdG86Z29yYW4uc2VsYW5kZXJAZXJpY3Nzb24u Y29tIj5nb3Jhbi5zZWxhbmRlckBlcmljc3Nvbi5jb208L2E+Jmd0OywgTWFydGluIEZ1cnVoZWQN CiAmbHQ7PGEgaHJlZj0ibWFpbHRvOm1hcnRpbi5mdXJ1aGVkQG5leHVzZ3JvdXAuY29tIj5tYXJ0 aW4uZnVydWhlZEBuZXh1c2dyb3VwLmNvbTwvYT4mZ3Q7LCBTaGFoaWQgUmF6YSAmbHQ7PGEgaHJl Zj0ibWFpbHRvOnNoYWhpZC5yYXphQHJpLnNlIj5zaGFoaWQucmF6YUByaS5zZTwvYT4mZ3Q7LCBK b2huIE1hdHRzc29uICZsdDs8YSBocmVmPSJtYWlsdG86am9obi5tYXR0c3NvbkBlcmljc3Nvbi5j b20iPmpvaG4ubWF0dHNzb25AZXJpY3Nzb24uY29tPC9hPiZndDssIEpvZWwgSG9nbHVuZA0KICZs dDs8YSBocmVmPSJtYWlsdG86am9lbC5ob2dsdW5kQHJpLnNlIj5qb2VsLmhvZ2x1bmRAcmkuc2U8 L2E+Jmd0OywgSm9obiBNYXR0c3NvbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmpvaG4ubWF0dHNzb25A ZXJpY3Nzb24uY29tIj5qb2huLm1hdHRzc29uQGVyaWNzc29uLmNvbTwvYT4mZ3Q7LCBKb2VsIEjD tmdsdW5kICZsdDs8YSBocmVmPSJtYWlsdG86am9lbC5ob2dsdW5kQHJpLnNlIj5qb2VsLmhvZ2x1 bmRAcmkuc2U8L2E+Jmd0OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyBTdWJqZWN0OiBOZXcgVmVyc2lvbiBOb3RpZmlj YXRpb24gZm9yIGRyYWZ0LW1hdHRzc29uLWNvc2UtY2Jvci1jZXJ0LWNvbXByZXNzLTA1LnR4dDxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4t bGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+Jmd0OzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPiZndDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8 L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWxlZnQ6MzYuMHB0Ij4mZ3Q7IEEgbmV3IHZlcnNpb24gb2YgSS1ELCBkcmFmdC1tYXR0c3Nvbi1j b3NlLWNib3ItY2VydC1jb21wcmVzcy0wNS50eHQ8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgaGFzIGJlZW4gc3VjY2Vz c2Z1bGx5IHN1Ym1pdHRlZCBieSA9P3V0Zi04P3E/Sm9obl9QcmV1PUMzPTlGX01hdHRzc29uPz0g YW5kIHBvc3RlZCB0byB0aGU8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgSUVURiByZXBvc2l0b3J5LjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0 OzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQi PiZndDsgTmFtZTombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgZHJhZnQtbWF0dHNzb24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3M8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgUmV2 aXNpb246Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IDA1PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IFRpdGxlOiZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwO0NCT1IgRW5jb2Rpbmcgb2YgWC41MDkg Q2VydGlmaWNhdGVzIChDQk9SIENlcnRpZmljYXRlcyk8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgRG9jdW1lbnQgZGF0 ZTombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsyMDIwLTEy LTAxPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1h cmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij4mZ3Q7IEdyb3VwOiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwO0luZGl2aWR1YWwgU3VibWlzc2lvbjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4N CjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyBQYWdlczombmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsyOTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyBVUkw6Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7PGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvYXJjaGl2ZS9pZC9kcmFmdC1tYXR0c3Nv bi1jb3NlLWNib3ItY2VydC1jb21wcmVzcy0wNS50eHQiPmh0dHBzOi8vd3d3LmlldGYub3JnL2Fy Y2hpdmUvaWQvZHJhZnQtbWF0dHNzb24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3MtMDUudHh0PC9h PjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJn aW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0 OjM2LjBwdCI+Jmd0OyBTdGF0dXM6Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9z cGFuPjxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LW1hdHRz c29uLWNvc2UtY2Jvci1jZXJ0LWNvbXByZXNzLyI+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9y Zy9kb2MvZHJhZnQtbWF0dHNzb24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3MvPC9hPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ Jmd0OyBIdG1saXplZDombmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDs8c3BhbiBj bGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0iaHR0cHM6 Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC1tYXR0c3Nvbi1jb3NlLWNib3It Y2VydC1jb21wcmVzcyI+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFm dC1tYXR0c3Nvbi1jb3NlLWNib3ItY2VydC1jb21wcmVzczwvYT48bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsgSHRtbGl6 ZWQ6Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7PHNwYW4gY2xhc3M9ImFwcGxl LWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxhIGhyZWY9Imh0dHBzOi8vdG9vbHMuaWV0 Zi5vcmcvaHRtbC9kcmFmdC1tYXR0c3Nvbi1jb3NlLWNib3ItY2VydC1jb21wcmVzcy0wNSI+aHR0 cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LW1hdHRzc29uLWNvc2UtY2Jvci1jZXJ0LWNv bXByZXNzLTA1PC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2 IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyBEaWZmOiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxzcGFuIGNsYXNzPSJhcHBsZS1jb252 ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9y ZmNkaWZmP3VybDI9ZHJhZnQtbWF0dHNzb24tY29zZS1jYm9yLWNlcnQtY29tcHJlc3MtMDUiPmh0 dHBzOi8vd3d3LmlldGYub3JnL3JmY2RpZmY/dXJsMj1kcmFmdC1tYXR0c3Nvbi1jb3NlLWNib3It Y2VydC1jb21wcmVzcy0wNTwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVy dGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IEFic3RyYWN0OjxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0 OyZuYnNwOyZuYnNwOyBUaGlzIGRvY3VtZW50IHNwZWNpZmllcyBhIENCT1IgZW5jb2Rpbmcgb2Yg WC41MDkgY2VydGlmaWNhdGVzLiZuYnNwOyZuYnNwO1RoZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyZuYnNwOyZuYnNw OyByZXN1bHRpbmcgY2VydGlmaWNhdGVzIGFyZSBjYWxsZWQgQ0JPUiBDZXJ0aWZpY2F0ZXMuJm5i c3A7Jm5ic3A7VGhlIENCT1I8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsmbmJzcDsmbmJzcDsgZW5jb2Rpbmcgc3VwcG9y dHMgYSBsYXJnZSBzdWJzZXQgb2YgUkZDIDUyODAsIHdoaWxlIGF0IHRoZSBzYW1lIHRpbWU8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPiZndDsmbmJzcDsmbmJzcDsgc2lnbmlmaWNhbnRseSByZWR1Y2VzIHRoZSBzaXplIG9mIGNl cnRpZmljYXRlcyBjb21wYXRpYmxlIHdpdGggUkZDPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwv ZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IDc5 MjUgYW5kIElFRUUgODAyLjFBUiAoRGV2SURzKS4mbmJzcDsmbmJzcDtXaGVuIHVzZWQgdG8gcmUt ZW5jb2RlIERFUiBlbmNvZGVkPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4N CjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7Jm5ic3A7Jm5ic3A7IFguNTA5IGNlcnRpZmlj YXRlcywgdGhlIENCT1IgZW5jb2RpbmcgY2FuIGluIG1hbnkgY2FzZXMgcmVkdWNlIHRoZTxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+Jmd0OyZuYnNwOyZuYnNwOyBzaXplIG9mIFJGQyA3OTI1IHByb2ZpbGVkIGNlcnRpZmljYXRl cyB3aXRoIG92ZXIgNTAlLiZuYnNwOyZuYnNwO1RoZSBDQk9SPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7Jm5ic3A7Jm5i c3A7IGVuY29kaW5nIGNhbiBhbHNvIGJlIHVzZWQgZW5jb2RlICZxdW90O25hdGl2ZWx5IHNpZ25l ZCZxdW90OyBDQk9SIGNlcnRpZmljYXRlcyw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDsmbmJzcDsmbmJzcDsgd2hpY2gg ZG9lcyBub3QgcmVxdWlyZSByZS1lbmNvZGluZyBmb3IgdGhlIHNpZ25hdHVyZSB0byBiZSB2ZXJp ZmllZC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t bGVmdDozNi4wcHQiPiZndDsmbmJzcDsmbmJzcDsgVGhlIGRvY3VtZW50IGFsc28gc3BlY2lmaWVz IENPU0UgaGVhZGVycyBhcyB3ZWxsIGFzIGEgVExTIGNlcnRpZmljYXRlPG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7Jm5i c3A7Jm5ic3A7IHR5cGUgZm9yIENCT1IgY2VydGlmaWNhdGVzLjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OzxzcGFuIGNs YXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDs8c3Bh biBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7 PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ Jmd0OzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPiZndDsgUGxlYXNlIG5vdGUgdGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51dGVz IGZyb20gdGhlIHRpbWUgb2Ygc3VibWlzc2lvbjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OyB1bnRpbCB0aGUgaHRtbGl6 ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0DQo8YSBocmVmPSJodHRwOi8vdG9v bHMuaWV0Zi5vcmciPnRvb2xzLmlldGYub3JnPC9hPi48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDs8c3BhbiBjbGFzcz0i YXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IFRoZSBJRVRG IFNlY3JldGFyaWF0PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFj ZSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8 ZGl2IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jmd0OzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQt c3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZndDs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVy dGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IF9fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mZ3Q7IENPU0UgbWFpbGluZyBsaXN0 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6 MzYuMHB0Ij4mZ3Q7PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9z cGFuPjxhIGhyZWY9Im1haWx0bzpDT1NFQGlldGYub3JnIj5DT1NFQGlldGYub3JnPC9hPjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4tbGVm dDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dCI+Jmd0OzxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UiPmh0dHBz Oi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY29zZTwvYT48bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPiZuYnNwOzxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW4t bGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2 LjBwdCI+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxl ZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4w cHQiPkNPU0UgbWFpbGluZyBsaXN0PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij48YSBocmVmPSJtYWlsdG86Q09TRUBpZXRmLm9y ZyI+Q09TRUBpZXRmLm9yZzwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2 Pg0KPGRpdiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vY29zZSI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0 aW5mby9jb3NlPC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2 IHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1hcmdpbi1sZWZ0OjM2LjBwdCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDoz Ni4wcHQ7YmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImNvbG9yOiMzRDNEM0QiPi0tIDxv OnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1sZWZ0OjM2LjBwdDtiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjku MHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYTtjb2xvcjojM0QzRDNEIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1s ZWZ0OjM2LjBwdDtiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0 O2ZvbnQtZmFtaWx5OkhlbHZldGljYTtjb2xvcjojM0QzRDNEIj5TdGVmYW4gSHJpc3Rvem92PG86 cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdDtiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYTtjb2xvcjojM0QzRDNEIj5EZXBh cnRtZW50IEhhcmR3YXJlIFNlY3VyaXR5PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdDtiYWNr Z3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5Okhl bHZldGljYTtjb2xvcjojM0QzRDNEIj5GcmF1bmhvZmVyIEluc3RpdHV0ZSBmb3IgQXBwbGllZCBh bmQgSW50ZWdyYXRlZCBTZWN1cml0eSBBSVNFQzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQ7 YmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWls eTpIZWx2ZXRpY2E7Y29sb3I6IzNEM0QzRCI+TGljaHRlbmJlcmdzdHJhw59lIDExLCA4NTc0OCBH YXJjaGluZyBuZWFyIE11bmljaCwgR2VybWFueTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQ7 YmFja2dyb3VuZDp3aGl0ZSI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWls eTpIZWx2ZXRpY2E7Y29sb3I6IzNEM0QzRCI+VGVsLiArNDkgODkgMzIyOTkgODYgMTU3PG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdDtiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OkhlbHZldGljYTtjb2xvcjojM0QzRDNEIj48YSBocmVm PSJtYWlsdG86c3RlZmFuLmhyaXN0b3pvdkBhaXNlYy5mcmF1bmhvZmVyLmRlIj5zdGVmYW4uaHJp c3Rvem92QGFpc2VjLmZyYXVuaG9mZXIuZGU8L2E+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBw dDtiYWNrZ3JvdW5kOndoaXRlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFt aWx5OkhlbHZldGljYTtjb2xvcjojM0QzRDNEIj48YSBocmVmPSJodHRwczovL3d3dy5haXNlYy5m cmF1bmhvZmVyLmRlLyI+aHR0cHM6Ly93d3cuYWlzZWMuZnJhdW5ob2Zlci5kZS88L2E+PG86cD48 L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWxlZnQ6MzYuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5 OkhlbHZldGljYTtjb2xvcjojM0QzRDNEO2JhY2tncm91bmQ6d2hpdGUiPl9fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhO2NvbG9yOiMzRDNEM0QiPjxicj4NCjxz cGFuIHN0eWxlPSJiYWNrZ3JvdW5kOndoaXRlIj5DT1NFIG1haWxpbmcgbGlzdDwvc3Bhbj48YnI+ DQo8L3NwYW4+PGEgaHJlZj0ibWFpbHRvOkNPU0VAaWV0Zi5vcmciPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhO2JhY2tncm91bmQ6d2hpdGUiPkNPU0VA aWV0Zi5vcmc8L3NwYW4+PC9hPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1p bHk6SGVsdmV0aWNhO2NvbG9yOiMzRDNEM0QiPjxicj4NCjwvc3Bhbj48YSBocmVmPSJodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Nvc2UiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6OS4wcHQ7Zm9udC1mYW1pbHk6SGVsdmV0aWNhO2JhY2tncm91bmQ6d2hpdGUiPmh0dHBzOi8v d3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vY29zZTwvc3Bhbj48L2E+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4N CjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cHJlIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPi0t IDxvOnA+PC9vOnA+PC9wcmU+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1h cmdpbi1sZWZ0OjM2LjBwdCI+U3RlZmFuIEhyaXN0b3pvdjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ RGVwYXJ0bWVudCBIYXJkd2FyZSBTZWN1cml0eTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+RnJhdW5o b2ZlciBJbnN0aXR1dGUgZm9yIEFwcGxpZWQgYW5kIEludGVncmF0ZWQgU2VjdXJpdHkgQUlTRUM8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtYXJnaW4tbGVmdDozNi4wcHQiPkxpY2h0ZW5iZXJnc3RyYcOfZSAxMSwgODU3NDggR2FyY2hp bmcgbmVhciBNdW5pY2gsIEdlcm1hbnk8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tbGVmdDozNi4wcHQiPlRlbC4gKzQ5IDg5 IDMyMjk5IDg2IDE1NzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PGEgaHJlZj0ibWFpbHRvOnN0ZWZh bi5ocmlzdG96b3ZAYWlzZWMuZnJhdW5ob2Zlci5kZSI+c3RlZmFuLmhyaXN0b3pvdkBhaXNlYy5m cmF1bmhvZmVyLmRlPC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+PGEgaHJlZj0iaHR0cHM6Ly93 d3cuYWlzZWMuZnJhdW5ob2Zlci5kZS8iPmh0dHBzOi8vd3d3LmFpc2VjLmZyYXVuaG9mZXIuZGUv PC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9o dG1sPg0K --_000_663F4F9B673A42A9BD19122E9C117092ericssoncom_-- From nobody Wed Dec 16 07:38:50 2020 Return-Path: X-Original-To: cose@ietf.org Delivered-To: cose@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 140B63A1011; Wed, 16 Dec 2020 07:38:49 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: Cc: cose@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 7.23.0 Auto-Submitted: auto-generated Precedence: bulk Reply-To: cose@ietf.org Message-ID: <160813312902.12321.5203024346229609131@ietfa.amsl.com> Date: Wed, 16 Dec 2020 07:38:49 -0800 Archived-At: Subject: [COSE] I-D Action: draft-ietf-cose-countersign-02.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Dec 2020 15:38:49 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CBOR Object Signing and Encryption WG of the IETF. Title : CBOR Object Signing and Encryption (COSE): Countersignatures Authors : Jim Schaad Russ Housley Filename : draft-ietf-cose-countersign-02.txt Pages : 24 Date : 2020-12-16 Abstract: Concise Binary Object Representation (CBOR) is a data format designed for small code size and small message size. CBOR Object Signing and Encryption (COSE) defines a set of security services for CBOR. This document defines a countersignature algorithm along with the needed header parameters and CBOR tags for COSE. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-cose-countersign/ There is also an HTML version available at: https://www.ietf.org/archive/id/draft-ietf-cose-countersign-02.html A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-cose-countersign-02 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Dec 16 07:43:59 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 67ABF3A0FFB for ; Wed, 16 Dec 2020 07:43:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.897 X-Spam-Level: X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iVuwaoRwNwMf for ; Wed, 16 Dec 2020 07:43:56 -0800 (PST) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A94EA3A0F47 for ; Wed, 16 Dec 2020 07:43:56 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 1746D300BA4 for ; Wed, 16 Dec 2020 10:43:54 -0500 (EST) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id 3eq7RL9mlv4k for ; Wed, 16 Dec 2020 10:43:52 -0500 (EST) Received: from a860b60074bd.fios-router.home (pool-141-156-161-153.washdc.fios.verizon.net [141.156.161.153]) by mail.smeinc.net (Postfix) with ESMTPSA id 92F56300ADB for ; Wed, 16 Dec 2020 10:43:52 -0500 (EST) From: Russ Housley Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) Date: Wed, 16 Dec 2020 10:43:53 -0500 References: <160813312902.12321.5203024346229609131@ietfa.amsl.com> To: cose In-Reply-To: <160813312902.12321.5203024346229609131@ietfa.amsl.com> Message-Id: <4FD10705-CB01-4E27-841B-A7E806E912F5@vigilsec.com> X-Mailer: Apple Mail (2.3445.104.17) Archived-At: Subject: Re: [COSE] I-D Action: draft-ietf-cose-countersign-02.txt X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Dec 2020 15:43:58 -0000 Jonathan Hammell provided the examples. I made some editorial clean up. For example, the tables now fit in 73 = columns. I think that the document is now ready for WG Last Call. Hopefully, the = examples will be confirmed to be correct by others. Russ > On Dec 16, 2020, at 10:38 AM, internet-drafts@ietf.org wrote: >=20 >=20 > A New Internet-Draft is available from the on-line Internet-Drafts = directories. > This draft is a work item of the CBOR Object Signing and Encryption WG = of the IETF. >=20 > Title : CBOR Object Signing and Encryption (COSE): = Countersignatures > Authors : Jim Schaad > Russ Housley > Filename : draft-ietf-cose-countersign-02.txt > Pages : 24 > Date : 2020-12-16 >=20 > Abstract: > Concise Binary Object Representation (CBOR) is a data format = designed > for small code size and small message size. CBOR Object Signing and > Encryption (COSE) defines a set of security services for CBOR. This > document defines a countersignature algorithm along with the needed > header parameters and CBOR tags for COSE. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-cose-countersign/ >=20 > There is also an HTML version available at: > https://www.ietf.org/archive/id/draft-ietf-cose-countersign-02.html >=20 > A diff from the previous version is available at: > https://www.ietf.org/rfcdiff?url2=3Ddraft-ietf-cose-countersign-02 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 >=20 > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose From nobody Wed Dec 16 09:29:05 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16C6F3A11C4 for ; Wed, 16 Dec 2020 09:29:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.101 X-Spam-Level: X-Spam-Status: No, score=-2.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIMWL_WL_HIGH=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=ericsson.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I8pN7oerVLiC for ; Wed, 16 Dec 2020 09:29:01 -0800 (PST) Received: from EUR04-HE1-obe.outbound.protection.outlook.com (mail-eopbgr70074.outbound.protection.outlook.com [40.107.7.74]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D98923A11C3 for ; Wed, 16 Dec 2020 09:29:00 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=RMWE7dItYGGdUbEmPIazQl+rtdHhB/vjUakdT0ToXxBIvHEjgU1E+Deza+vXRfUGZ4OoxXYBgUxEGsjKoO3I/EsP8iSZUj6YAR/UrP4NGmcPf06SS5uN5gAm4cBpeNVv4r+0MVlkeeuEJpozUv5bZLhOaBqqRUbCg7HoaelkoWmG7gFBXm1neOyMj9ij9TvhBo1CCg2/HzMiR6GQTNzYN4u8oG/NKTengBJKI6S7Q7Oopd8lphjiXP+v6t8lOVjsPltZVKVJ3n43/ZWmOAsoH+ZOsfHETgrCUQIraknj8Kc4O4GIFj4h1qfrW5mzNWxago7CqPKiE6Cw0DkxqhUCpw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=6YEkB6gl3c8puZve89c77OKwY+1XAbUeyaCOOuAUjNc=; b=Kpr/dGPd4YkhfCzZx7J6XD2bCho0VdzBcxyWOHIFX0yd++FnF/S1U5eQKpiA2n3WjC2s54IyTJKte9R2VOfEiiYrkVwpdNIXrVQyvmq3KQlTK3WkemOB7csEV7nAHwOO5wOlZUCQr2oUM7hdZ+xqpuSUpUiTYR4Muu03coH9Rxn3zDQWln7Ru5zB1d5jchDd6hQ+HNZqQru1omZ3PCLmshExno0q+u+eV7IwesC3xTw1yLviuQa4/gJcn6iBqJRyy2pF5QVL2ea5D0Z2iJng32uJQC6akxUtodmZRbY1dr9SwCujifYkNqG3riV9jFdRVed4+TsCrsVT6HSgEbLf7g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ericsson.com; dmarc=pass action=none header.from=ericsson.com; dkim=pass header.d=ericsson.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ericsson.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=6YEkB6gl3c8puZve89c77OKwY+1XAbUeyaCOOuAUjNc=; b=ST7on1xGQA3vik+3H+bA4tAtK+F/QDO0/zt7DoS40LK2sYdIxkVhGZ36FauPDY9C07tHQYKeaU/4qnaYKkK5yNsrTiThmetMkN9z5NwXyPDwCMrswbV2UJVCm0pSdfirM/tVw33DITZeL9jm6YIhKmBdleoGwZflR5nuPIgT6dc= Received: from HE1PR0702MB3674.eurprd07.prod.outlook.com (2603:10a6:7:82::14) by HE1PR07MB3066.eurprd07.prod.outlook.com (2603:10a6:7:2f::31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3676.12; Wed, 16 Dec 2020 17:28:58 +0000 Received: from HE1PR0702MB3674.eurprd07.prod.outlook.com ([fe80::fd09:b8f4:2698:e86]) by HE1PR0702MB3674.eurprd07.prod.outlook.com ([fe80::fd09:b8f4:2698:e86%7]) with mapi id 15.20.3676.015; Wed, 16 Dec 2020 17:28:58 +0000 From: =?Windows-1252?Q?G=F6ran_Selander?= To: "cose@ietf.org" Thread-Topic: Proposed charter update Thread-Index: AQHWw+PiSTpwt5sn0E+7fht4I5BdoKn6F/jB Date: Wed, 16 Dec 2020 17:28:58 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=ericsson.com; x-originating-ip: [83.249.67.87] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 479617de-b238-456c-413e-08d8a1e8122a x-ms-traffictypediagnostic: HE1PR07MB3066: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:9508; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: +rlcMsHN6rvxRZEQUe/lV7WfNq81lHvbXvE++vpJ9AURHgoGoaHXnD1cKNgLN+dfnGefu2+GyHV3dvi5zVggvEXMIGS85EBXJ7jIo4MhcA09S7GTTlOOKTZlFxWehGh9vgiHhI8NJDDK5XSR9JHqW5LbVhK+HIW2XodiNpBGhc88P299nRcLT2pETekKeTGEWhDccUXkWYCEWQp5HrkybCqyvjPpby3NJzLVTSbfW4i9l2Bc4mrq0o7OHEbvHQFkYyM2n+AYZ+f8SZAquoyn3tkAYvjCfFmxcoQkKfep0vYOUjdvhcT8reIb7vz2zTPnZ38y6QbPW3q5i5na+7i7+JBuASq9oR72N4IxElBDiZFHh7XfMXuEgbCkanxdiAW4B9jKypyAdES8fLFGJraY6zk1kwHo58XqQRX66BPIoTIMZ5/fOAz80+TOmmp+zGW3 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:HE1PR0702MB3674.eurprd07.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(376002)(396003)(366004)(346002)(136003)(39860400002)(52536014)(6506007)(66476007)(55016002)(33656002)(8676002)(66556008)(9686003)(186003)(26005)(66446008)(8936002)(3480700007)(316002)(83380400001)(86362001)(6916009)(15650500001)(19627405001)(64756008)(2906002)(166002)(478600001)(66946007)(5660300002)(76116006)(966005)(71200400001)(7116003)(7696005)(66574015); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: =?Windows-1252?Q?/jfFWI0Ovy1i6tvO4Y/IOjotXjUE2UYBXn+5aolBeH5Z2AEh0Ec+SSUi?= =?Windows-1252?Q?7HAyf1yfrKpHn/qnRrnyMzv3GCQk2I+dBXE54iQAUeU6AAYt67TbKhUR?= =?Windows-1252?Q?Q/MCzUM6xTWKG8eRjdCL099jGCAX1pb8Qb0/2y1HOcxhRmU8ilWByEBb?= =?Windows-1252?Q?PTA7FUh4e5Msq6NXdI0D3a497gUzv+PK1geh65oj+fv2B0BeZs/UqDcQ?= =?Windows-1252?Q?dYzBJzU+TfXt605ochXTnzg2U2+Io8vz542A0Hrw3/q4+Q5QYvni3bzf?= =?Windows-1252?Q?EiUyLeuJrlUb5j1dXaYIo//JF7CLOda3gnWOLqv6HGDyEaZhOFzGe5ON?= =?Windows-1252?Q?NpMO+27Ii8VLouCcnTlHGo8AR2jES3PJg5Wsx5/Ty/WlkjtnFXlBrOt4?= =?Windows-1252?Q?b/EwwvoEFYY3XOK+0JnOWme9UCHYp+mH/LLMwF3t3TtcU04EvoJoG6Ng?= =?Windows-1252?Q?u2T2EkP1GcPGUYQBK7zFi2sH4NDR/B8s5j4xJHVliwHS4FZoEFD7Nt0F?= =?Windows-1252?Q?O28p4gbqjpgNz+S1KKZV4W7oc49yAkv5l3jTvJgaVYUW8BHN5/nPwcIa?= =?Windows-1252?Q?6hXFMlxrHlDgsDO9T6wKsqBGxwrgTuooYls5TP++42XUD9AhQWY9TAUt?= =?Windows-1252?Q?2oWzuT3Mkz2+QYT3ejIYpIWi1pptAp+tQzT/AL9tNhzR5Ag5gGbdEBOZ?= =?Windows-1252?Q?a5s4rxIYPYK8KJZbZmsS5rjo36o5jGujW2XsKEaWeIlUsUmzoj655guI?= =?Windows-1252?Q?yNxWDJhvsW0XsTE2t98YGLwO2cX0zmqobifT6VO3vrpP5TTj33zze7o6?= =?Windows-1252?Q?pu+/HDBC3g5q6WBzbhW3686g+n4zxMRtC75i5auj4gVYD4+TWt8zGmkH?= =?Windows-1252?Q?e96nA19D0J07OaRQQO1zMaZeT0oSQafYjxxtyeyHi42uSvQwkxvjr/Hn?= =?Windows-1252?Q?GUJVs4PohOvlhvXkfZfAB8aVOYA6vdyjkxDmMzU6Tyk2iu3eM77/42cA?= =?Windows-1252?Q?ieMH4tQpudi9BWvJi3EZ1XtSr1lLrVU+Ct3EVDcuISELNhT5ax0=3D?= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_HE1PR0702MB367461ED93BDEA30C624A46DF4C50HE1PR0702MB3674_" MIME-Version: 1.0 X-OriginatorOrg: ericsson.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: HE1PR0702MB3674.eurprd07.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 479617de-b238-456c-413e-08d8a1e8122a X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Dec 2020 17:28:58.1629 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 92e84ceb-fbfd-47ab-be52-080c6b87953f X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 8fbGYIomUuViR8+TJAcQs5Hgz8w8Tcic5W/4ACtrSRk8sDOWr8tiXpkUXQcOiLZZBTRAHR/bugFz5dwtwlEvpvZ+HV+19+L+l+lK48LL5L8= X-MS-Exchange-Transport-CrossTenantHeadersStamped: HE1PR07MB3066 Archived-At: Subject: Re: [COSE] Proposed charter update X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Dec 2020 17:29:03 -0000 --_000_HE1PR0702MB367461ED93BDEA30C624A46DF4C50HE1PR0702MB3674_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable All, Here is a PR reflecting the change proposed below: https://github.com/cose-wg/Charter/pull/7 The changes are in the two first sentences, and =93native COSE certificate = encoding=94 is changed to =93natively signed CBOR certificate encoding=94 OLD A CBOR encoding of the compressed certificate profile defined in RFC 7925. = It is expected that the compression works with a large subset of RFC 7925 a= nd takes into consideration any updates in draft-ietf-uta-tls13-iot-profile= -00. The compression may also include other important IoT certificate profi= les like IEEE 802.1AR. The main objective is to define a method of compress= ing current X.509 certificates that meet a specific profile into a smaller = format. This compression algorithm is loss-less so they can be expanded and= normal X.509 certificate processing used. The data structures used to enco= de such compressed X.509 certificates are expected to produce a compact enc= oding for certificate information, and are not necessarily tied specificall= y to X.509 certificates. Accordingly, a secondary objective is to reuse the= se data structures to produce a native COSE certificate encoding; such a st= ructure is relevant in situations where DER parsing and the compression/dec= ompression machinery to convert between CBOR and DER encodings are unnecess= ary overhead, such as embedded implementations. The possibility of a joint = certificate artifact, conveyed in CBOR encoding but including signatures ov= er both the CBOR and DER encodings, may be explored. This work will be base= d on draft-mattsson-cose-cbor-cert-compress. The working group will collabo= rate and coordinate with other IETF WGs such as TLS, UTA, LAKE to understan= d and validate the requirements and solution. NEW A CBOR encoding of the certificate profile defined in RFC 5280. It is expec= ted that the compression works with RFC 7925 and takes into consideration a= ny updates in draft-ietf-uta-tls13-iot-profile-00. The compression may also= include other important IoT certificate profiles like IEEE 802.1AR. The ma= in objective is to define a method of compressing current X.509 certificate= s that meet a specific profile into a smaller format. This compression algo= rithm is loss-less so they can be expanded and normal X.509 certificate pro= cessing used. The data structures used to encode such compressed X.509 cert= ificates are expected to produce a compact encoding for certificate informa= tion, and are not necessarily tied specifically to X.509 certificates. Acco= rdingly, a secondary objective is to reuse these data structures to produce= a natively signed CBOR certificate encoding; such a structure is relevant = in situations where DER parsing and the compression/decompression machinery= to convert between CBOR and DER encodings are unnecessary overhead, such a= s embedded implementations. The possibility of a joint certificate artifact= , conveyed in CBOR encoding but including signatures over both the CBOR and= DER encodings, may be explored. This work will be based on draft-mattsson-= cose-cbor-cert-compress. The working group will collaborate and coordinate = with other IETF WGs such as TLS, UTA, LAKE to understand and validate the r= equirements and solution. G=F6ran --_000_HE1PR0702MB367461ED93BDEA30C624A46DF4C50HE1PR0702MB3674_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable
All,

Here is a PR reflecting the change proposed below:

The changes are in the two first sentences, and =93nat= ive COSE certificate encoding=94 is changed to =93natively signed CBOR cert= ificate encoding=94

 

OLD

A CBOR encoding of the compressed certificate profile defi= ned in RFC 7925. It is expected that the compression works with a large sub= set of RFC 7925 and takes into consideration any updates in draft-ietf-uta-= tls13-iot-profile-00. The compression may also include other important IoT certificate profiles like IEEE 802.1A= R. The main objective is to define a method of compressing current X.509 ce= rtificates that meet a specific profile into a smaller format. This compres= sion algorithm is loss-less so they can be expanded and normal X.509 certificate processing used. The data str= uctures used to encode such compressed X.509 certificates are expected to p= roduce a compact encoding for certificate information, and are not necessar= ily tied specifically to X.509 certificates. Accordingly, a secondary objective is to reuse these data structures to pr= oduce a native COSE certificate encoding; such a structure is relevant in s= ituations where DER parsing and the compression/decompression machinery to = convert between CBOR and DER encodings are unnecessary overhead, such as embedded implementations. The possibilit= y of a joint certificate artifact, conveyed in CBOR encoding but including = signatures over both the CBOR and DER encodings, may be explored. This work= will be based on draft-mattsson-cose-cbor-cert-compress. The working group will collaborate and coordinate with other IETF WGs such= as TLS, UTA, LAKE to understand and validate the requirements and solution= .

 

NEW

A CBOR encoding of the certificate profile defined in RFC = 5280. It is expected that the compression works with RFC 7925 and takes int= o consideration any updates in draft-ietf-uta-tls13-iot-profile-00. The com= pression may also include other important IoT certificate profiles like IEEE 802.1AR. The main objective is to defin= e a method of compressing current X.509 certificates that meet a specific p= rofile into a smaller format. This compression algorithm is loss-less so th= ey can be expanded and normal X.509 certificate processing used. The data structures used to encode such compr= essed X.509 certificates are expected to produce a compact encoding for cer= tificate information, and are not necessarily tied specifically to X.509 ce= rtificates. Accordingly, a secondary objective is to reuse these data structures to produce a natively signed CBOR certific= ate encoding; such a structure is relevant in situations where DER parsing = and the compression/decompression machinery to convert between CBOR and DER encodings are unnecessary overhead, such a= s embedded implementations. The possibility of a joint certificate artifact= , conveyed in CBOR encoding but including signatures over both the CBOR and= DER encodings, may be explored. This work will be based on draft-mattsson-cose-cbor-cert-compress. The wor= king group will collaborate and coordinate with other IETF WGs such as TLS,= UTA, LAKE to understand and validate the requirements and solution.=

 

 


G=F6ran


 

--_000_HE1PR0702MB367461ED93BDEA30C624A46DF4C50HE1PR0702MB3674_-- From nobody Wed Dec 16 10:09:27 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A9573A0A97 for ; Wed, 16 Dec 2020 10:09:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id epCTn1h6UIyI for ; Wed, 16 Dec 2020 10:09:22 -0800 (PST) Received: from mail.smeinc.net (mail.smeinc.net [209.135.209.11]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7CDA43A0A71 for ; Wed, 16 Dec 2020 10:09:22 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mail.smeinc.net (Postfix) with ESMTP id 0FDF6300BAF for ; Wed, 16 Dec 2020 13:09:20 -0500 (EST) X-Virus-Scanned: amavisd-new at mail.smeinc.net Received: from mail.smeinc.net ([127.0.0.1]) by localhost (mail.smeinc.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id bG-0gIFn7Ms2 for ; Wed, 16 Dec 2020 13:09:17 -0500 (EST) Received: from a860b60074bd.fios-router.home (pool-141-156-161-153.washdc.fios.verizon.net [141.156.161.153]) by mail.smeinc.net (Postfix) with ESMTPSA id CDA5F300B45 for ; Wed, 16 Dec 2020 13:09:17 -0500 (EST) From: Russ Housley Content-Type: multipart/alternative; boundary="Apple-Mail=_BB78B5EE-8603-483E-8DBB-59C8DE8B15BD" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) Date: Wed, 16 Dec 2020 13:09:19 -0500 References: To: "cose@ietf.org" In-Reply-To: Message-Id: <73B5F5DE-97AF-4C73-BDE9-34C91EAC8BB0@vigilsec.com> X-Mailer: Apple Mail (2.3445.104.17) Archived-At: Subject: Re: [COSE] Proposed charter update X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 16 Dec 2020 18:09:25 -0000 --Apple-Mail=_BB78B5EE-8603-483E-8DBB-59C8DE8B15BD Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Seems reasonable to me. Russ > On Dec 16, 2020, at 12:28 PM, G=C3=B6ran Selander = wrote: >=20 > All, >=20 > Here is a PR reflecting the change proposed below: > https://github.com/cose-wg/Charter/pull/7 = >=20 > The changes are in the two first sentences, and =E2=80=9Cnative COSE = certificate encoding=E2=80=9D is changed to =E2=80=9Cnatively signed = CBOR certificate encoding=E2=80=9D > =20 > OLD > A CBOR encoding of the compressed certificate profile defined in RFC = 7925. It is expected that the compression works with a large subset of = RFC 7925 and takes into consideration any updates in = draft-ietf-uta-tls13-iot-profile-00. The compression may also include = other important IoT certificate profiles like IEEE 802.1AR. The main = objective is to define a method of compressing current X.509 = certificates that meet a specific profile into a smaller format. This = compression algorithm is loss-less so they can be expanded and normal = X.509 certificate processing used. The data structures used to encode = such compressed X.509 certificates are expected to produce a compact = encoding for certificate information, and are not necessarily tied = specifically to X.509 certificates. Accordingly, a secondary objective = is to reuse these data structures to produce a native COSE certificate = encoding; such a structure is relevant in situations where DER parsing = and the compression/decompression machinery to convert between CBOR and = DER encodings are unnecessary overhead, such as embedded = implementations. The possibility of a joint certificate artifact, = conveyed in CBOR encoding but including signatures over both the CBOR = and DER encodings, may be explored. This work will be based on = draft-mattsson-cose-cbor-cert-compress. The working group will = collaborate and coordinate with other IETF WGs such as TLS, UTA, LAKE to = understand and validate the requirements and solution. > =20 > NEW > A CBOR encoding of the certificate profile defined in RFC 5280. It is = expected that the compression works with RFC 7925 and takes into = consideration any updates in draft-ietf-uta-tls13-iot-profile-00. The = compression may also include other important IoT certificate profiles = like IEEE 802.1AR. The main objective is to define a method of = compressing current X.509 certificates that meet a specific profile into = a smaller format. This compression algorithm is loss-less so they can be = expanded and normal X.509 certificate processing used. The data = structures used to encode such compressed X.509 certificates are = expected to produce a compact encoding for certificate information, and = are not necessarily tied specifically to X.509 certificates. = Accordingly, a secondary objective is to reuse these data structures to = produce a natively signed CBOR certificate encoding; such a structure is = relevant in situations where DER parsing and the = compression/decompression machinery to convert between CBOR and DER = encodings are unnecessary overhead, such as embedded implementations. = The possibility of a joint certificate artifact, conveyed in CBOR = encoding but including signatures over both the CBOR and DER encodings, = may be explored. This work will be based on = draft-mattsson-cose-cbor-cert-compress. The working group will = collaborate and coordinate with other IETF WGs such as TLS, UTA, LAKE to = understand and validate the requirements and solution. > =20 > =20 >=20 > G=C3=B6ran >=20 > =20 > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose = --Apple-Mail=_BB78B5EE-8603-483E-8DBB-59C8DE8B15BD Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Seems= reasonable to me.

Russ

On Dec 16, 2020, at 12:28 PM, = G=C3=B6ran Selander <goran.selander=3D40ericsson.com@dmarc.ietf.org> = wrote:

All,

Here = is a PR reflecting the change proposed below:
https://github.com/cose-wg/Charter/pull/7

The changes are in the two first sentences, and =E2=80=9Cnative= COSE certificate encoding=E2=80=9D is changed to =E2=80=9Cnatively = signed CBOR certificate encoding=E2=80=9D

 

OLD
A CBOR = encoding of the compressed certificate profile defined in RFC 7925. It = is expected that the compression works with a large subset of RFC 7925 = and takes into consideration any updates in = draft-ietf-uta-tls13-iot-profile-00. The compression may also include = other important IoT certificate profiles like IEEE 802.1AR. The main = objective is to define a method of compressing current X.509 = certificates that meet a specific profile into a smaller format. This = compression algorithm is loss-less so they can be expanded and normal = X.509 certificate processing used. The data structures used to encode = such compressed X.509 certificates are expected to produce a compact = encoding for certificate information, and are not necessarily tied = specifically to X.509 certificates. Accordingly, a secondary objective = is to reuse these data structures to produce a native COSE certificate = encoding; such a structure is relevant in situations where DER parsing = and the compression/decompression machinery to convert between CBOR and = DER encodings are unnecessary overhead, such as embedded = implementations. The possibility of a joint certificate artifact, = conveyed in CBOR encoding but including signatures over both the CBOR = and DER encodings, may be explored. This work will be based on = draft-mattsson-cose-cbor-cert-compress. The working group will = collaborate and coordinate with other IETF WGs such as TLS, UTA, LAKE to = understand and validate the requirements and solution.

 

NEW
A CBOR = encoding of the certificate profile defined in RFC 5280. It is expected = that the compression works with RFC 7925 and takes into consideration = any updates in draft-ietf-uta-tls13-iot-profile-00. The compression may = also include other important IoT certificate profiles like IEEE 802.1AR. = The main objective is to define a method of compressing current X.509 = certificates that meet a specific profile into a smaller format. This = compression algorithm is loss-less so they can be expanded and normal = X.509 certificate processing used. The data structures used to encode = such compressed X.509 certificates are expected to produce a compact = encoding for certificate information, and are not necessarily tied = specifically to X.509 certificates. Accordingly, a secondary objective = is to reuse these data structures to produce a natively signed CBOR certificate encoding; = such a structure is relevant in situations where DER parsing and the = compression/decompression machinery to convert between CBOR and DER = encodings are unnecessary overhead, such as embedded implementations. = The possibility of a joint certificate artifact, conveyed in CBOR = encoding but including signatures over both the CBOR and DER encodings, = may be explored. This work will be based on = draft-mattsson-cose-cbor-cert-compress. The working group will = collaborate and coordinate with other IETF WGs such as TLS, UTA, LAKE to = understand and validate the requirements and solution.

 

 


G=C3=B6ran

 

_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose

= --Apple-Mail=_BB78B5EE-8603-483E-8DBB-59C8DE8B15BD-- From nobody Fri Dec 18 12:43:10 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 977323A0880 for ; Fri, 18 Dec 2020 12:43:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EHvC2QVaWiiU for ; Fri, 18 Dec 2020 12:43:07 -0800 (PST) Received: from p3plsmtpa06-06.prod.phx3.secureserver.net (p3plsmtpa06-06.prod.phx3.secureserver.net [173.201.192.107]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3313E3A08AB for ; Fri, 18 Dec 2020 12:42:48 -0800 (PST) Received: from [192.168.1.81] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id qMaNkJchidkdMqMaNkz6Ky; Fri, 18 Dec 2020 13:42:47 -0700 X-CMAE-Analysis: v=2.4 cv=RbFVt3hv c=1 sm=1 tr=0 ts=5fdd1447 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=NeJZvmmVAAAA:20 a=21OxoVP7c482fsmb07sA:9 a=QEXdDO2ut3YA:10 a=y0m_qKjeghT3YJ-FA3gA:9 a=pTGGq5MqUSPAUgdf:21 a=_W_S_7VecoQA:10 a=WQnItmPV2fbdzLaCP6-h:22 a=ApmT8IYWVU_m-XHnEi-O:22 a=p-dnK0njbqwfn1k4-x12:22 a=jjky5lfK57Ii_Ajn6BuG:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Content-Type: multipart/alternative; boundary="Apple-Mail=_196C4C93-B4E0-4B99-A812-23F4D8CC2D6E" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) Message-Id: <57D39647-F791-4645-BD52-4D27581AACA1@island-resort.com> Date: Fri, 18 Dec 2020 12:42:47 -0800 To: cose X-Mailer: Apple Mail (2.3445.104.17) X-CMAE-Envelope: MS4xfL5lHxde6yGq3OB1GuiTT1ZBOWi5KDGhuvoAknceeRl1HsS9eyyCWfrxNoO8ozu1K0fo+al0Vz6h4bEvZM4n8S6CBrTColysc9Q/6z4k+aIPcN/og+nO zszcV0z7wPWJHbmvJl5CFGyc3fwcoTRnVgqBpxWqb5s0TjXXe9g1ys3UJj2w5OR2lEE0RHgH/mr8/A== Archived-At: Subject: [COSE] GitHub issues and -08 release X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Dec 2020 20:43:09 -0000 --Apple-Mail=_196C4C93-B4E0-4B99-A812-23F4D8CC2D6E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I closed three issues in the cose x509 GitHub = I=E2=80=99d opened a year or so = ago as they have been resolved in the -08 and/or previous drafts. I opened two new issues that are about consistency with JWS. Exact = consistency with JWS seems valuable. It comes up with EAT as we=E2=80=99re= trying to use CWT and JWT as semantically equivalent (but syntactically = different). I also opened an issue on x5u as to the nature of the =E2=80=9Ctrust = relationship=E2=80=9D between the signer and the URI host. Since = =E2=80=9Ctrust relationships=E2=80=9D are important and central here I = think it should be spelled out in full detail (and I=E2=80=99m not = entirely sure what is intended) LL= --Apple-Mail=_196C4C93-B4E0-4B99-A812-23F4D8CC2D6E Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 I = closed three issues in the cose x509 = GitHub I=E2=80=99d opened a year or so ago as they have been = resolved in the -08 and/or previous drafts.

I opened two new issues that are about = consistency with JWS. Exact consistency with JWS seems valuable. It = comes up with EAT as we=E2=80=99re trying to use CWT and JWT as = semantically equivalent (but syntactically different).

I also opened an issue = on x5u as to the nature of the =E2=80=9Ctrust relationship=E2=80=9D = between the signer and the URI host. Since =E2=80=9Ctrust = relationships=E2=80=9D are important and central here I think it should = be spelled out in full detail (and I=E2=80=99m not entirely sure what is = intended)

LL
= --Apple-Mail=_196C4C93-B4E0-4B99-A812-23F4D8CC2D6E-- From nobody Sat Dec 19 08:01:20 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9BA863A0AE5; Sat, 19 Dec 2020 08:01:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.098 X-Spam-Level: X-Spam-Status: No, score=-2.098 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, NICE_REPLY_A=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uhGo1yOSJWE6; Sat, 19 Dec 2020 08:01:09 -0800 (PST) Received: from mail-qk1-x729.google.com (mail-qk1-x729.google.com [IPv6:2607:f8b0:4864:20::729]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5CAC53A0AE1; Sat, 19 Dec 2020 08:01:09 -0800 (PST) Received: by mail-qk1-x729.google.com with SMTP id 186so5088625qkj.3; Sat, 19 Dec 2020 08:01:09 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=to:references:from:subject:message-id:date:user-agent:mime-version :in-reply-to:content-language; bh=07CuseXzx5nEredZQwLotBcwbUOxtoPZJsIu8c9BFHY=; b=L/lzrAGmynYKvzBbxpP164/s+RHNoB2xlg4PtVONsrc3r25wrLOg35vaswQqn2Pw4G 56ExUQQoP4rjBOhu9mfNF1Hxe8HdWULoZtj4WBW49Qpw9cVAIR6+ElkLxs3zPuwyPa++ F8x1X/Jut/mfhbrgo+O1P9vyEv8cBUlq0q84FnEBm9Dmbj+fpdvSFJCIWQkmCzTIsfoy +CNYTnaztGkZHn8dgCk+wdIDXGbj66L8EU2KjkhSCkNIf8bJWqGESdfjVJEQMNAVGmZC A0DNPODq4YQSvIzqQCQG+0OjbpZYUlbXnRtux1bG6nHCweAETcM1dzeFvQU5h85wCbDx wF5w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:references:from:subject:message-id:date :user-agent:mime-version:in-reply-to:content-language; bh=07CuseXzx5nEredZQwLotBcwbUOxtoPZJsIu8c9BFHY=; b=h3ifTRwc+7YqSVgnzhp6CAeIv3COcI1h3lMkcKVDVnqBpUHg5DqzxAxv6SZ+IvN5EQ 98BChga4o4cTQtS1qcqbRLPUihh6+H6AqmSBxHCTQUq+dyH0QZ0GvVEg3kOAwYt4yaOJ mfkG7HWVY5Wd8rSnosq4itoF/vX+YDuYYiusXo2JBmRSkTHbLL+5z4bAPrLOiDl7EonB dar9B3g3M6BmmjMai17BdQRjK/Abp4GMOLN1ouazQ2BB8rHS1kOLJ02SIFeWaK/OcNwy 2UPNvMwch9yjafzdwPIaI9XWUvSvkYu7Tr4Vc3bfM2f83tDdufS2zRiep/klO3qAVe+Q 4GvQ== X-Gm-Message-State: AOAM530T6+vzbA8fdu8elQg1D4BQyi18nO9e8gYpzjrW5YplmLV5a4Yw TbZbsiSTpCHU/KZRCxQho8ry/oyKSX8= X-Google-Smtp-Source: ABdhPJyoHsxGV1r61ustdZZGatuFwqAFb98mFoz6aZEdDHxFjd7hW2gQW9hwxNuBiLC+RoYjB22N2Q== X-Received: by 2002:a37:6611:: with SMTP id a17mr10611187qkc.150.1608393667895; Sat, 19 Dec 2020 08:01:07 -0800 (PST) Received: from ?IPv6:2607:fea8:8a0:1397:79d3:33ed:256f:36ab? ([2607:fea8:8a0:1397:79d3:33ed:256f:36ab]) by smtp.gmail.com with ESMTPSA id o5sm7265736qti.47.2020.12.19.08.01.06 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sat, 19 Dec 2020 08:01:07 -0800 (PST) To: John Mattsson , =?UTF-8?Q?G=c3=b6ran_Selander?= , "lwip@ietf.org" , "cose@ietf.org" References: <3DEA816D-EBFE-4914-B327-5EA11ECABF45@ericsson.com> From: Rene Struik Message-ID: <15a95ece-d580-1a28-24f0-0ecb71631c70@gmail.com> Date: Sat, 19 Dec 2020 11:01:03 -0500 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Thunderbird/78.6.0 MIME-Version: 1.0 In-Reply-To: <3DEA816D-EBFE-4914-B327-5EA11ECABF45@ericsson.com> Content-Type: multipart/alternative; boundary="------------4FA1FA28CB5F4AD3F2285B37" Content-Language: en-US Archived-At: Subject: Re: [COSE] draft-ietf-lwig-curve-representations-13 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 19 Dec 2020 16:01:15 -0000 This is a multi-part message in MIME format. --------------4FA1FA28CB5F4AD3F2285B37 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Dear John: Based on your review and other feedback received, I slightly updated the = draft and posted the latest revision as [1]. Your review below (of Nov 6, 2020) seems to bring up three topics, viz.: = (1) definition of Wei25519 and Wei448 vs. verbiage in NIST docs; (2)=20 need for iana registrations for ECDSA25519 and ECDSA448; (3) need for=20 iana registrations ECDH25519 and ECDH448. Please find below some feedback. General feedback: Please bear in mind that the specifications of ECDSA25519 and ECDH25519=20 in the lwig curve document aim to yield schemes that are strictly=20 NIST-compliant (i.e., these would allow FIPS 140-2 accreditation if the=20 curves would be in the "NIST recommended" set). See also Note 2 of=20 Section 4.1 of [1]. A similar remark applies to ECDSA448 and ECDH448. Detailed feedback: (1) Definition of Wei25519 and Wei448 vs. verbiage in NIST docs. Draft NIST SP 800-186 indeed defines a short-Weierstrass version of=20 Curve25519 [dubbed W-25519] and FIPS 186-5 allows its use; similar for=20 Curve448 [dubbed W-448 there]). I have now added references to these=20 draft specifications in the lwig-curve draft. I have double-checked all=20 domain parameters, mappings between curve models, tables of isogeny=20 details in the lwig draft and provided Sage scripts for the CFRG crypto=20 panel review at the time. I do anticipate that NIST will arrive at the=20 same values in their final publication when they decide to publish this. = (I am happy to share Sage scripts for this purpose.) (2) Need for iana registrations for ECDSA25519 and ECDSA448. ECDSA is determined by an instantiation of hash function, curves, and=20 representation conventions for inputs and outputs (i.e., message=20 representation, curve point representation, and signature representation)= =2E a) ECDSA448 uses SHAKE256 under the hood, which is currently not defined = with COSE. Hence, my request to register ECDSA w/ SHAKE256 and Wei448 as = "ECDSA448". b) ECSA25519 uses SHA256 and Wei25519 under the hood. I thought to=20 request to register "ECDSA25519" since this would allow referencing the=20 quite careful write-up (Section 4.3), including bit/byte ordering,=20 checks, and nondeterministic behavior (and, thereby, keeping this=20 concise). Please note that this is very similar to the COSE IANA=20 registry for "ES256k1" (ECDSA w/ SHA256 and Bitcoin curve secp256k1). (3) Need for iana registrations ECDH25519 and ECDH448. ECDH25519 and ECDH448 are co-factor Diffie-Hellman key establishment=20 schemes and can, therefore, not be based on (cofactorless)=20 Diffie-Hellman, as defined in RFC 8152. (Please note that there is no=20 difference for the NIST curves, which all of co-factor h=3D1, but in our = case one has h=3D8 and h=3D4, respectively). Here, one should note that t= he=20 ECDH25519 and ECDH448 write-ups (Section 4.1 and 4.3) quite carefully=20 cross-reference co-factor ECDH in a NIST-compliant way. Apart from the=20 co-factor ECDH vs. ECDH issue and objective to comply with all strict=20 NIST validation checks, the objective was also to make sure that=20 ECDH25519 and ECDH448 can be used in settings where either or both=20 parties uses ephemeral keys (which is more flexible than what RFC 8152=20 allows).=C2=A0 Hence, the request to register "ECDH25519" and "ECDH448", = to=20 make sure this covers the intent of these schemes accurately and with=20 precise description. It is possible that I overlooked something in this assessment. If so,=20 any constructive suggestions are welcome. Ref: [1]=20 https://datatracker.ietf.org/doc/html/draft-ietf-lwig-curve-representatio= ns-19 Best regards, Rene On 2020-11-06 5:04 p.m., John Mattsson wrote: > > Hi, > > I looked through this draft again. I think it is a very good draft and = > I think it will be a solution to some of the problems IoT devices have = > with Ed25519. I will bring up this draft for discussion in the LAKE WG = > at IETF 109. > > I find it strange that the IANA registration has not been coordinated=20 > with COSE WG at all. I am a bit surprised to see IANA registrations=20 > for COSE/JOSE/PKIX/CMS at all in a LWIG draft (is that in charter?).=20 > If LWIG wants to register new algorithms, I think LWIG at a minimum=20 > should coordinate with COSE WG and other groups. I think this draft=20 > should be presented at the next COSE WG meeting. > > I support registration of W-25519 and W-448 curves as long they agree=20 > with NIST. I would like answers to the questions why ECDSA25519 and=20 > ECDH25519 are needed at all. There is no ECDSAP256 and no ECDHP256, so = > why are specific algorithm registration needed for W-25519?=C2=A0 It ma= kes=20 > no sense to me that a special signature registration is needed for=20 > COSE but not for PKIX? If PKIX can use ecdsa-with-SHA256 why cannot=20 > COSE use ES256? > > I don't think ANSI X9.62 is an acceptable normative reference. NIST=20 > just removed the normative reference to ANSI X9.62 in SP 186-5. > > Cheers, > > John > > *From: *COSE on behalf of Rene Struik=20 > > *Date: *Friday, 6 November 2020 at 20:37 > *To: *G=C3=B6ran Selander ,=20 > "lwip@ietf.org" , "cose@ietf.org" > *Subject: *Re: [COSE] draft-ietf-lwig-curve-representations-13 > > Hi Goran: > > Please find below some brief feedback on your note: > > - the naming wei25519 has been around since the first draft (Nov 13,=20 > 2017, i.e., 3 years minus 1 week ago), see [1]. NIST indeed produced=20 > two draft documents, viz. Draft NIST SP 800-186 and Draft FIPS Pub=20 > 186-5 (on October 31, 2019), which generated lots of (to my knowledge=20 > still unresolved) comments during public review. It is hard to refer=20 > to that document, since it is only a draft and unfortunately has quite = > a few errors. > > - earlier versions of the lwig draft have received reviews by the=20 > crypto review panel (Stanislavslav Smyshlyaev), iotdir early-review=20 > (Daniel Migault); the sections on COSE/JOSE code point assignments=20 > resulted from a phone call and various email exchanges with Jim=20 > Schaad; the section on PKIX/CMS was suggested during IETF Last-Call=20 > secdir-review (Russ Housley) and reviewed by him. The document had=20 > IETF Last-Call Aug 24, 2020. See, e.g., the status pages [1]. > > - ECDSA has been around since 1999, has been widely standardized, and=20 > has seen lots of analysis, where ECDSA25519 is simply yet another=20 > instantiation. Signature generation and verification times for=20 > ECDSA25519 should be similar to those of Ed25519 (since timing is=20 > dominated by scalar multiplication, where one could simply use=20 > Montgomery arithmetic [3]). In my personal view, ECDSA25519 may be=20 > more secure than Ed25519 (if only because it is non-deterministic, see = > Security section [6]); similar side-channel care has to be taken in=20 > either case. > > =C2=A0- As mentioned in the draft, one can easily switch between Wei255= 19=20 > and Curve25519 (which requires a single field addition or subtraction=20 > only, i.e., <.01%, see Appendix E.2 [7]). As mentioned in the draft,=20 > one could use Wei25519.-3 with an existing generic implementation that = > hardcodes the domain parameter a=3D-3, but needs to compute an isogeny = > and dual isogeny for this (adding 5-10% cost, see Appendix G.2 [8]])=20 > and a ~9.5kB table (see Section 5.3 [4]). However, if one already has=20 > generic hardware support, one may still have a significant win (see=20 > Section 6 [5]). > > - The isogeny for Wei25519.-3 has odd degree l=3D47, which is co-prime = > with the order of the curve, so is in fact invertible. With Wei448.-3, = > the isogeny has degree l=3D2, so is not invertible; however, this does = > not really matter, since it is invertible with correctly generated=20 > public-private key pairs (which have prime/odd order) and the factor=20 > two is absorbed with co-factor ECDH, where h=3D4 then. > > I hope this helps. > > (*) For ease of tracking, it would help if iana related comments are=20 > flagged in the subject line (e.g., include (iana) in the beginning=20 > hereof). > > Best regards, Rene > > Ref with hyperlinks: > > [1]=20 > https://datatracker.ietf.org/doc/html/draft-struik-lwig-curve-represent= ations-00=20 > > > [2]=20 > https://datatracker.ietf.org/doc/draft-ietf-lwig-curve-representations/= =20 > > > [3]=20 > https://datatracker.ietf.org/doc/html/draft-ietf-lwig-curve-representat= ions-13#section-4.3=20 > > > [4]=20 > https://datatracker.ietf.org/doc/html/draft-ietf-lwig-curve-representat= ions-13#section-5.3=20 > > > [5]=20 > https://datatracker.ietf.org/doc/html/draft-ietf-lwig-curve-representat= ions-13#section-6=20 > > > [6]=20 > https://datatracker.ietf.org/doc/html/draft-ietf-lwig-curve-representat= ions-13#section-8=20 > > > [7]=20 > https://datatracker.ietf.org/doc/html/draft-ietf-lwig-curve-representat= ions-13#appendix-E.2=20 > > > [8]=20 > https://datatracker.ietf.org/doc/html/draft-ietf-lwig-curve-representat= ions-13#appendix-G.2=20 > > > On 2020-11-06 11:19 a.m., G=C3=B6ran Selander wrote: > > Hi, > > Apologies for cross-posting LWIG and COSE. I had a brief look at > draft-ietf-lwig-curve-representations-13 and noticed it registers > a lot of new COSE(andJOSE, PKIX, and CMS)algorithms. Has this > draft been discussed in COSE(JOSE/CURDLE)? If not, perhaps it > should be before being progressed? > > 1.The draft needs to manage the overlap with NIST SP 800-186, > which should be referenced and mappings, name of curves, etc. > aligned. The draft defines Wei25519 and Wei448. It is unclear if > these are identical to W-25519, W-448 as defined in NIST SP > 800-186. We probably would not want two slightly different > definitions and/or names, multiple COSE code points, etc. > > 1.The draft registers the COSE algorithm "ECDSA25519" as "ECDSA > with SHA-256 and curve Wei25519". That is not how the other COSE > signature algorithms work. They work like PKIX where the curve is > given by the public key. Also, why cannot W-25519 be used with the > existing ES256 signature algorithm? > > 2.The draft registers the COSE algorithm "ECDH25519". There are no > COSE ECDH algorithms for P-256, why is anECDH algorithm for > W-25519 be needed? > > Other questions. I may have missed it, but > > 2.is it described what are the expected security properties of > ECDSA25519(including mapping) compared to Ed25519? For example > w.r.t. side channel attacks? > > 3.has any performance measurements been made comparing ECDSA25519 > (including mapping) and Ed25519? > > 4.similar questions on security and performance with Wei25519.-3 > instead of Wei25519. If I understand right, the former mapping is > not reversible, but could benefit from optimized code with > hardcoded domain parameters. > > 5.ANSI X9.62-2005 was withdrawn in 2015 and is behind a paywall, > is this reference necessary? > > G=C3=B6ran > > > > _______________________________________________ > > COSE mailing list > > COSE@ietf.org > > https://www.ietf.org/mailman/listinfo/cose > > --=20 > email:rstruik.ext@gmail.com | Skype: r= struik > cell: +1 (647) 867-5658 | US: +1 (415) 287-3867 > > --> > --=20 email: rstruik.ext@gmail.com | Skype: rstruik cell: +1 (647) 867-5658 | US: +1 (415) 287-3867 --------------4FA1FA28CB5F4AD3F2285B37 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit

Dear John:

Based on your review and other feedback received, I slightly updated the draft and posted the latest revision as [1].

Your review below (of Nov 6, 2020) seems to bring up three topics, viz.: (1) definition of Wei25519 and Wei448 vs. verbiage in NIST docs; (2) need for iana registrations for ECDSA25519 and ECDSA448; (3) need for iana registrations ECDH25519 and ECDH448. 

Please find below some feedback.

General feedback:

Please bear in mind that the specifications of ECDSA25519 and ECDH25519 in the lwig curve document aim to yield schemes that are strictly NIST-compliant (i.e., these would allow FIPS 140-2 accreditation if the curves would be in the "NIST recommended" set). See also Note 2 of Section 4.1 of [1]. A similar remark applies to ECDSA448 and ECDH448.

Detailed feedback:

(1) Definition of Wei25519 and Wei448 vs. verbiage in NIST docs.

Draft NIST SP 800-186 indeed defines a short-Weierstrass version of Curve25519 [dubbed W-25519] and FIPS 186-5 allows its use; similar for Curve448 [dubbed W-448 there]). I have now added references to these draft specifications in the lwig-curve draft. I have double-checked all domain parameters, mappings between curve models, tables of isogeny details in the lwig draft and provided Sage scripts for the CFRG crypto panel review at the time. I do anticipate that NIST will arrive at the same values in their final publication when they decide to publish this. (I am happy to share Sage scripts for this purpose.)  

(2) Need for iana registrations for ECDSA25519 and ECDSA448.

ECDSA is determined by an instantiation of hash function, curves, and representation conventions for inputs and outputs (i.e., message representation, curve point representation, and signature representation).
a) ECDSA448 uses SHAKE256 under the hood, which is currently not defined with COSE. Hence, my request to register ECDSA w/ SHAKE256 and Wei448 as "ECDSA448".
b) ECSA25519 uses SHA256 and Wei25519 under the hood. I thought to request to register "ECDSA25519" since this would allow referencing the quite careful write-up (Section 4.3), including bit/byte ordering, checks, and nondeterministic behavior (and, thereby, keeping this concise). Please note that this is very similar to the COSE IANA registry for "ES256k1" (ECDSA w/ SHA256 and Bitcoin curve secp256k1).

(3) Need for iana registrations ECDH25519 and ECDH448.

ECDH25519 and ECDH448 are co-factor Diffie-Hellman key establishment schemes and can, therefore, not be based on (cofactorless) Diffie-Hellman, as defined in RFC 8152. (Please note that there is no difference for the NIST curves, which all of co-factor h=1, but in our case one has h=8 and h=4, respectively). Here, one should note that the ECDH25519 and ECDH448 write-ups (Section 4.1 and 4.3) quite carefully cross-reference co-factor ECDH in a NIST-compliant way. Apart from the co-factor ECDH vs. ECDH issue and objective to comply with all strict NIST validation checks, the objective was also to make sure that ECDH25519 and ECDH448 can be used in settings where either or both parties uses ephemeral keys (which is more flexible than what RFC 8152 allows).  Hence, the request to register "ECDH25519" and "ECDH448", to make sure this covers the intent of these schemes accurately and with precise description.

It is possible that I overlooked something in this assessment. If so, any constructive suggestions are welcome.

Ref: [1] https://datatracker.ietf.org/doc/html/draft-ietf-lwig-curve-representations-19

Best regards, Rene

On 2020-11-06 5:04 p.m., John Mattsson wrote:

Hi,

 

I looked through this draft again. I think it is a very good draft and I think it will be a solution to some of the problems IoT devices have with Ed25519. I will bring up this draft for discussion in the LAKE WG at IETF 109.

 

I find it strange that the IANA registration has not been coordinated with COSE WG at all. I am a bit surprised to see IANA registrations for COSE/JOSE/PKIX/CMS at all in a LWIG draft (is that in charter?). If LWIG wants to register new algorithms, I think LWIG at a minimum should coordinate with COSE WG and other groups. I think this draft should be presented at the next COSE WG meeting.

 

I support registration of W-25519 and W-448 curves as long they agree with NIST. I would like answers to the questions why ECDSA25519 and ECDH25519 are needed at all. There is no ECDSAP256 and no ECDHP256, so why are specific algorithm registration needed for W-25519?  It makes no sense to me that a special signature registration is needed for COSE but not for PKIX? If PKIX can use ecdsa-with-SHA256 why cannot COSE use ES256?

 

I don't think ANSI X9.62 is an acceptable normative reference. NIST just removed the normative reference to ANSI X9.62 in SP 186-5.

 

Cheers,

John

 

From: COSE <cose-bounces@ietf.org> on behalf of Rene Struik <rstruik.ext@gmail.com>
Date: Friday, 6 November 2020 at 20:37
To: Göran Selander <goran.selander=40ericsson.com@dmarc.ietf.org>, "lwip@ietf.org" <lwip@ietf.org>, "cose@ietf.org" <cose@ietf.org>
Subject: Re: [COSE] draft-ietf-lwig-curve-representations-13

 

Hi Goran:

 

Please find below some brief feedback on your note:

- the naming wei25519 has been around since the first draft (Nov 13, 2017, i.e., 3 years minus 1 week ago), see [1]. NIST indeed produced two draft documents, viz. Draft NIST SP 800-186 and Draft FIPS Pub 186-5 (on October 31, 2019), which generated lots of (to my knowledge still unresolved) comments during public review. It is hard to refer to that document, since it is only a draft and unfortunately has quite a few errors.

- earlier versions of the lwig draft have received reviews by the crypto review panel (Stanislavslav Smyshlyaev), iotdir early-review (Daniel Migault); the sections on COSE/JOSE code point assignments resulted from a phone call and various email exchanges with Jim Schaad; the section on PKIX/CMS was suggested during IETF Last-Call secdir-review (Russ Housley) and reviewed by him. The document had IETF Last-Call Aug 24, 2020. See, e.g., the status pages [1].

- ECDSA has been around since 1999, has been widely standardized, and has seen lots of analysis, where ECDSA25519 is simply yet another instantiation. Signature generation and verification times for ECDSA25519 should be similar to those of Ed25519 (since timing is dominated by scalar multiplication, where one could simply use Montgomery arithmetic [3]). In my personal view, ECDSA25519 may be more secure than Ed25519 (if only because it is non-deterministic, see Security section [6]); similar side-channel care has to be taken in either case.

 - As mentioned in the draft, one can easily switch between Wei25519 and Curve25519 (which requires a single field addition or subtraction only, i.e., <.01%, see Appendix E.2 [7]). As mentioned in the draft, one could use Wei25519.-3 with an existing generic implementation that hardcodes the domain parameter a=-3, but needs to compute an isogeny and dual isogeny for this (adding 5-10% cost, see Appendix G.2 [8]]) and a ~9.5kB table (see Section 5.3 [4]). However, if one already has generic hardware support, one may still have a significant win (see Section 6 [5]).

- The isogeny for Wei25519.-3 has odd degree l=47, which is co-prime with the order of the curve, so is in fact invertible. With Wei448.-3, the isogeny has degree l=2, so is not invertible; however, this does not really matter, since it is invertible with correctly generated public-private key pairs (which have prime/odd order) and the factor two is absorbed with co-factor ECDH, where h=4 then.

 

I hope this helps.

 

(*) For ease of tracking, it would help if iana related comments are flagged in the subject line (e.g., include (iana) in the beginning hereof).

 

Best regards, Rene

 

 

Ref with hyperlinks:

 

On 2020-11-06 11:19 a.m., Göran Selander wrote:

Hi,

 

Apologies for cross-posting LWIG and COSE. I had a brief look at draft-ietf-lwig-curve-representations-13 and noticed it registers a lot of new COSE (and JOSE, PKIX, and CMS) algorithms. Has this draft been discussed in COSE (JOSE/CURDLE)? If not, perhaps it should be before being progressed?

 

 

1.       The draft needs to manage the overlap with NIST SP 800-186, which should be referenced and mappings, name of curves, etc. aligned. The draft defines Wei25519 and Wei448. It is unclear if these are identical to W-25519, W-448 as defined in NIST SP 800-186. We probably would not want two slightly different definitions and/or names, multiple COSE code points, etc.

 

1.       The draft registers the COSE algorithm "ECDSA25519" as "ECDSA with SHA-256 and curve Wei25519". That is not how the other COSE signature algorithms work. They work like PKIX where the curve is given by the public key. Also, why cannot W-25519 be used with the existing ES256 signature algorithm?

 

2.       The draft registers the COSE algorithm "ECDH25519". There are no COSE ECDH algorithms for P-256, why is an ECDH algorithm for W-25519 be needed?

 

Other questions. I may have missed it, but

 

2.       is it described what are the expected security properties of ECDSA25519 (including mapping) compared to Ed25519? For example w.r.t. side channel attacks?

 

3.       has any performance measurements been made comparing ECDSA25519 (including mapping) and Ed25519?

 

4.       similar questions on security and performance with Wei25519.-3 instead of Wei25519. If I understand right, the former mapping is not reversible, but could benefit from optimized code with hardcoded domain parameters.

 

5.       ANSI X9.62-2005 was withdrawn in 2015 and is behind a paywall, is this reference necessary?

 

 

Göran



_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose

 

-- 
email: rstruik.ext@gmail.com | Skype: rstruik
cell: +1 (647) 867-5658 | US: +1 (415) 287-3867

-->


-- 
email: rstruik.ext@gmail.com | Skype: rstruik
cell: +1 (647) 867-5658 | US: +1 (415) 287-3867
--------------4FA1FA28CB5F4AD3F2285B37-- From nobody Fri Dec 25 04:41:34 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE10C3A12EA for ; Fri, 25 Dec 2020 04:41:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.001 X-Spam-Level: X-Spam-Status: No, score=0.001 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=ackl-io.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 81pVDdc5Xi9S for ; Fri, 25 Dec 2020 04:41:31 -0800 (PST) Received: from mail-wr1-x42e.google.com (mail-wr1-x42e.google.com [IPv6:2a00:1450:4864:20::42e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CB9113A12E9 for ; Fri, 25 Dec 2020 04:41:30 -0800 (PST) Received: by mail-wr1-x42e.google.com with SMTP id 91so4376618wrj.7 for ; Fri, 25 Dec 2020 04:41:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ackl-io.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to:cc; bh=QAUlSA2u3wXX/QZ/zJ3Gq8/b6+NpqpdjWT644n1phBw=; b=rroNZUn3cPxmtFjLB5Yp0AVyd1yczI2QOLq0ddwysMbF5OE+LtHbohnMpxa4RGv48Q qU+vl5S3chzyJe7n3+Y6GgtYtxBA8LzoaZbfvHtJT9oZgGDP13G2gyUyvgAbzwIxUz3B cwiCCMTPNhoYss1JbxjkfZ1cf8X+nndrx2JrieJvzs6XSmQKw7dBx/7aX6BScmQtv41j 2DRTH1qWMJcbTO8clBMf2cdUog/+t6Vxf1XtLH4eM7bgYhWrRxsihMc42nX19JEhkU8V +ONVwJ8GFA7giHQhOd/EmfzLec92D6QnYrcihatXndaAERN8yww5mk6uNBs2fSDTkNBO P/5A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=QAUlSA2u3wXX/QZ/zJ3Gq8/b6+NpqpdjWT644n1phBw=; b=K1gecHKOjaIkhd+DaLawBRwIyq6if/2SOEwT7r1r/DbWIxtZdUaED0psOp+2KKHHWJ O2dHbJfVYsnTm/YoRlHn+PPA6xjxHDgbh+O4qk83KmjrVBoKKdv+nH0eVHXHihVfFuuu zCzrtHoI0zOi14G3kFDm5jiAsRpd1cHZXj9Vv4f2ricnBlG6X7X3U9gKAxWxOBgcHxLo kyNmuX1mMDfpESb86OzAG8943qwWg5iXXR2B9KYawU6Yu81ZcgGCQ7TZ6DHp8F0BbZ5k xbVSntpQ7Ox614qrj7togpLtE4nUIxmHipZXpCBF4e990LxXSLlRsmajxrhpbA6/Mo6M Nbaw== X-Gm-Message-State: AOAM533fAdWqPBTSYxKtcAfP+5CAd6fosjiyVXnRQDkDtgVSZ8QZgGlx zvGi0ofFG7S///8Ix04s3WAmd3gTWZPQeInx4wEZUbDHsmkdmwU9 X-Google-Smtp-Source: ABdhPJwh04wwYhrl3LGeQms53rviLFl9IxIJVUlfRwc971MuLo4QtKpez5+awIIVb1K1e33Be7kA9DOjs2rA8cG6j58= X-Received: by 2002:adf:db43:: with SMTP id f3mr39839518wrj.70.1608900088284; Fri, 25 Dec 2020 04:41:28 -0800 (PST) MIME-Version: 1.0 From: Ivaylo Petrov Date: Fri, 25 Dec 2020 13:41:02 +0100 Message-ID: To: cose Cc: Russ Housley Content-Type: multipart/alternative; boundary="0000000000003ddebd05b7493ee7" Archived-At: Subject: [COSE] Minutes and Recording from Dec interim session X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 25 Dec 2020 12:41:33 -0000 --0000000000003ddebd05b7493ee7 Content-Type: text/plain; charset="UTF-8" Hello WG! The minutes from our last interim meeting have been uploaded to datatracker: < https://datatracker.ietf.org/doc/minutes-interim-2020-cose-06-202012161600/ >. Thank you, Russ, for your help with that! The recording of the session is also available: < https://www.youtube.com/watch?v=TB0rrz6GoBU > Please send any corrections of the minutes to this list or to cose-chairs@ietf.org. Happy holidays and see you soon ! - Matthew and Ivaylo COSE WG Chairs --0000000000003ddebd05b7493ee7 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hello WG!

The=C2=A0m= inutes from our last interim meeting=C2=A0have been uploaded to datatracker= : <=C2=A0https://datatracker.ietf.org/doc/minutes-interim-2= 020-cose-06-202012161600/=C2=A0>. Thank you, Russ, for your help wit= h=C2=A0that!

The recording of the session is also available: &= lt;=C2=A0https://= www.youtube.com/watch?v=3DTB0rrz6GoBU=C2=A0>

Please sen= d any corrections of the minutes to this list or to=C2=A0cose-chairs@ietf.org.

<= /div>
Happy holidays and see you soon !

- Matthew and Ivayl= o
COSE WG Chairs

<= div>
=
--0000000000003ddebd05b7493ee7-- From nobody Mon Dec 28 11:54:59 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0AB603A0D4B for ; Mon, 28 Dec 2020 11:54:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.895 X-Spam-Level: X-Spam-Status: No, score=-1.895 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HjW9mrgjHKMz for ; Mon, 28 Dec 2020 11:54:57 -0800 (PST) Received: from p3plsmtpa09-08.prod.phx3.secureserver.net (p3plsmtpa09-08.prod.phx3.secureserver.net [173.201.193.237]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 280F73A0D48 for ; Mon, 28 Dec 2020 11:54:57 -0800 (PST) Received: from [192.168.1.81] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id tybYkSYf3CLVctybYklVXD; Mon, 28 Dec 2020 12:54:56 -0700 X-CMAE-Analysis: v=2.4 cv=Uommi88B c=1 sm=1 tr=0 ts=5fea3810 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=IkcTkHD0fZMA:10 a=GIftsCSbEZ2B8ijWS78A:9 a=QEXdDO2ut3YA:10 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) Message-Id: <31D27317-D59D-4A3F-B11D-12922BE5E676@island-resort.com> Date: Mon, 28 Dec 2020 11:54:55 -0800 To: cose X-Mailer: Apple Mail (2.3445.104.17) X-CMAE-Envelope: MS4xfDj1uHl3OXSN300mnWM0Ycw7Y9dsiEpjvBCA14YO/WU/V2hNLsatHk7pDwjz7K2JomSwBhcgbxbbeJMAUpO97v6bZwXHXkYuMFxJnxaRPW2H7D+rJ2+U 83wmfr0Dya4oVv+JX4oy9voHxyouQfeqceQgVY57g3SZ+jjz2iNXKADS88LTiXm9kzxgYjAlEysc1g== Archived-At: Subject: [COSE] Use of CBOR sequence for CBOR Cert, c5chain and other X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Dec 2020 19:54:58 -0000 Maybe this has been discussed already=E2=80=A6 A CBOR sequence can=E2=80=99t be an item in a CBOR array or the value of = a CBOR map entry. The only way to use a CBOR sequence in a CBOR protocol = is to wrap it in a byte string. That means whenever a CBOR Certificate = is used in another CBOR protocol is must be wrapped in a byte string. This is in contrast to many other CBOR protocols that are not CBOR = sequences and thus don=E2=80=99t need the byte string wrapping when = incorporated into another CBOR protocol. CBOR Cert seems unusual in its = design choice. The c5chain and c5bag COSE headers are the incorporation of CBOR Cert = into the COSE protocol. The way they are defined now, there is byte = string wrapping inherited from the x5bag and x5chain header parameters, = so it does work. It seems very easy an inexpensive to make CBOR Cert like the other = protocols by just making it into a CBOR array. It would add one byte to = the start of the cert. I=E2=80=99m not voicing an opinion on how it should be. I=E2=80=99m = mostly wondering if this has been considered. LL From nobody Mon Dec 28 15:13:06 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 085FE3A0EAE for ; Mon, 28 Dec 2020 15:13:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.099 X-Spam-Level: X-Spam-Status: No, score=-2.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=rkf-eng.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iudmVOrwraPv for ; Mon, 28 Dec 2020 15:13:01 -0800 (PST) Received: from NAM04-BN8-obe.outbound.protection.outlook.com (mail-bn8nam08on2044.outbound.protection.outlook.com [40.107.100.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D875D3A0CF9 for ; Mon, 28 Dec 2020 15:13:01 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=QlBSeYtsa++KN3x/WXPPcMqYFFq2XHBC8uigIcG1BepGESIqfsV7UEe8soT8ZZlqdxu9VgCuYItyp97TPotSseW2yQp84jrQAUgHKfnR9LHhOnVW7evsCZYq5mMhkuXs8Uq2Uq96C9Q8/p82HvORDvOHp3BJmSTjl6Oamc7F6E8IFdmaxy42znqm8SnoQEHJh6OU0ZPiEFZ9CXMKZFrDE349nKnXT8tTIAEk8DBgxUNjfKzPLhPhcso6VjbtxCXF/ENEs9OoRX3FkHq44+Zn+Jy3Hz2s8bJNv5VFilYJDTdd0DHJ0fL2kxi7dxXnhYGyuc4K9DOlLQP+474oU4cStQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=WPWaCU+2LgmDNZtjxumxVjizZIgUhwgj802vR72Flp4=; b=jxOBLYlMJ2m7xcVKYe2MfhXehx/9UVtx3BbgFWx9yi7VHd3vjyy4izTS6xrYHQRBgJ4jz69v50VoDPakQN5Fzc38KQlfwCIvubcdkaAgUgTRN3s0+UvzhbbJxptReC2GGod40OL2HQJs0dcp9yjSSkyw+00xnDXvoF0C0pFX5sBBi73Shvotk5go9ieUyfBSNqgGhWmxqOTbk3+4tCGy1rCL8bIQvkZN/NheOCyQZr2dspaXm1P8+XAIGaP0ZEJyEYCMyNLow6Y7UoVEhYmL27J+s6rNJKbTgM09yfPLqFvFrZMhU6LlMAzrYTi8l9FtgcIbUO/iSu+T3aXvDtudqw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=rkf-eng.com; dmarc=pass action=none header.from=rkf-eng.com; dkim=pass header.d=rkf-eng.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rkf-eng.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=WPWaCU+2LgmDNZtjxumxVjizZIgUhwgj802vR72Flp4=; b=Wq8bTfPIkynbwyH7WQiBionOfFjO3ZtH4Pc+oVjIqwhB5ophyuawxiKXAy+eXFrZQvG5hZB46SYJvZvBY21Q7s+w7ki+57nHmP4CtbE01WezhwVENW+K0O+QeCNpQs7mj1s874Xo3vHJ8MPp5i804XNoEzLVn9vkAw8nuOmieDQ= Received: from MN2PR13MB3567.namprd13.prod.outlook.com (2603:10b6:208:168::10) by MN2PR13MB2976.namprd13.prod.outlook.com (2603:10b6:208:151::19) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3721.13; Mon, 28 Dec 2020 23:12:58 +0000 Received: from MN2PR13MB3567.namprd13.prod.outlook.com ([fe80::54f4:962e:10e5:a2e1]) by MN2PR13MB3567.namprd13.prod.outlook.com ([fe80::54f4:962e:10e5:a2e1%7]) with mapi id 15.20.3721.019; Mon, 28 Dec 2020 23:12:58 +0000 From: Brian Sipos To: "cose@ietf.org" Thread-Topic: COSE messages with kid in layer-1 Thread-Index: AQHW2hem4OayHCdeNESFEY3/o6eqrw== Date: Mon, 28 Dec 2020 23:12:57 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=rkf-eng.com; x-originating-ip: [96.241.16.84] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 9872d967-755c-4676-493e-08d8ab861d83 x-ms-traffictypediagnostic: MN2PR13MB2976: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: IzQkK2Nf5vOZUPYCIHwF2NzDQYaPFUZT6j5wpcJbW5uakgeCnNqxKQTFFsMWsIYLixn96abmWeHYcZbpgbsSvS6kCzdJ342T8W66ueMoV+4LDaNyzrlw7oLw+saIn7sEpMhTwpQeTNbC1NpZERL8IoC+ttTSwF0D4CcaHqR81hof1FrRIoDxho+fTqeTYeN+iWK5PF2GR6yJfTn24xCsHYcfa8EQgAfZ0z3YIQ5n9W8Oh1ZChsSOd41nhYjOiRsSMU2qP5A2+2HM6980bK0aHJjk2gGY27J0v/NEfyJjrvFERvK0W4fESA5DO/hSNZEYwrIv97kgTgoB+r7Dse+UsnwDSTvRaHj8xVOn66dZ4CoQc/NiFR5rcsb3UQeA9buVGKKLNF7VrC0xZm4hvtBZNHuoGlXK4aJyzrm0SJNkNN2rh8JAAqIHcrfTbE6V7REsoeGCXna/V1MZ+Ae/kXqBkA== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MN2PR13MB3567.namprd13.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(136003)(376002)(39830400003)(396003)(366004)(346002)(16799955002)(52536014)(8936002)(83380400001)(86362001)(966005)(6916009)(166002)(66946007)(76116006)(66476007)(66556008)(64756008)(66446008)(7696005)(9686003)(55016002)(6506007)(478600001)(5660300002)(15650500001)(186003)(19627235002)(316002)(71200400001)(8676002)(2906002)(19627405001)(26005)(33656002); DIR:OUT; SFP:1101; x-ms-exchange-antispam-messagedata: =?iso-8859-1?Q?+ToWWMJU7SA5WmIySV3h/d61NGrW3elGkxoJpvA4gntvqwmG7Cts3TBnVF?= =?iso-8859-1?Q?YT54IC7kEIrl7yZ9OQgMVfbsEiHIhvZ68bZBNe8Pgk3sHtfNgRvkLziLSV?= =?iso-8859-1?Q?d9bCvWEwCKXdk3xQ53NQccTm4Ciahy9WkpKM4sQ3Gl6fB9VtNPsbdYFjk9?= =?iso-8859-1?Q?FDftJG3l803IsKJeTtRGiDhFupKpSpvac1wdhMqWRAjmVcotD76YU43QOF?= =?iso-8859-1?Q?/LwLucSMasmP5oNhVD0o2hGrJPQWp/OGjI216Hyr4WXhr7NU+w4eWwy61y?= =?iso-8859-1?Q?bDPoBoL+5hpra5y/48UH52TY1/t0kHqttKnDs7v63j62HSKlB93AAMVIue?= =?iso-8859-1?Q?BuZSRVxQv8NxTUhpNNA70k2cdJgo0zGMHRL5LvyGGQayorYzyE+LvONX62?= =?iso-8859-1?Q?8i65NFrkjzcOPC155kzQvOaFeNAF3idxn153ODhgN3ogaW7uY0VykkGvgg?= =?iso-8859-1?Q?PRU1ulsC4MyW8onwBcSiBurDjOpuSAoXi2lW3gVz+CMIV8v1+IiTP/6OHJ?= =?iso-8859-1?Q?eO6L2DPABb1Smjjhv8Fvsv8lhpViO8MyJTKk7KaNfCKaIijwntEwLK3FNn?= =?iso-8859-1?Q?oPN/gQc6oLUanLRNwd+Tnmxk0dB1XpKFmPqGbe+n3o9uEAwzJul0N1Whbf?= =?iso-8859-1?Q?SWpzCdQHHFWlZB2LUXRs1Jvo9TDpFqfT7uwDlplNuwKZ/IS6YBkBZPnZNR?= =?iso-8859-1?Q?cWsQ4/hD2D0HuKI2DHXxx0c/7KhycmRt3CGr42omLu0XhZWuMco70Lg+bn?= =?iso-8859-1?Q?1G/9i2vjBugdaNLnWnA9vuYg98ZdvehnbmKj1u0rYxbYkgVy9mjVwM7bNh?= =?iso-8859-1?Q?XR05YF6MXkHH8mixP8EDitLNFvbUU4Cma9VQiM103JrP0f9UOvVaqnubI8?= =?iso-8859-1?Q?lBLOcYqeKOhY2HE4ltk/P+budxyEIQMPO3RvDtpLTmD7yWIY/z81q4PUS5?= =?iso-8859-1?Q?xdUHCgXRunGNsbtBirUx3+Oa35oSY4CmuTLgb/Orjt1K8Z1xhqjkxv1rFX?= =?iso-8859-1?Q?rLGp8Oj8gmbDQBStY=3D?= x-ms-exchange-transport-forked: True Content-Type: multipart/alternative; boundary="_000_MN2PR13MB35673439D210EC237ECD92239FDD0MN2PR13MB3567namp_" MIME-Version: 1.0 X-OriginatorOrg: rkf-eng.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MN2PR13MB3567.namprd13.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 9872d967-755c-4676-493e-08d8ab861d83 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Dec 2020 23:12:58.0236 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 4ed8b15b-911f-42bc-8524-d89148858535 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: fYelHws68NL96EP6PF5RD7wtsZ2Fwb4C//DY/DQfsyNHEanTaNhL0/CxOqJlsbELeeJaYN2RYP8hsXGiV3+qvg== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR13MB2976 Archived-At: Subject: [COSE] COSE messages with kid in layer-1 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Dec 2020 23:13:04 -0000 --_000_MN2PR13MB35673439D210EC237ECD92239FDD0MN2PR13MB3567namp_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable All, In the examples of RFC 8152 [1] the COSE_Mac0 and COSE_Encrypt0 examples do= n't include a key identifier ("kid" parameter) in the top-level unprotected= headers, and there is no example of COSE_Sign1 message. The informative te= xt implies that there should not be a kid parameter, but I don't see this i= n any normative statement of RFC 8152 or in the errata [2]. I also don't se= e any difference in the upcoming 8152bis document [3]. I thought that the algorithm itself determined which protected/unprotected = headers were acceptable within a particular layer, while the message type d= etermined the top-level structure and whether there are sub-layers. Is there a fundamental reason why the single-signer example (from C.1.1) of= : 98( [ / protected / h'', / unprotected / {}, / payload / 'This is the content.', / signatures / [ [ / protected h'a10126' / << { / alg / 1:-7 / ECDSA 256 / } >>, / unprotected / { / kid / 4:'11' }, / signature / h'...' ] ] ] ) could not be rewritten as a COSE_Sign1 message of: 18( [ / protected h'a10126' / << { / alg / 1:-7 / ECDSA 256 / } >>, / unprotected / { / kid / 4:'11' }, / payload / 'This is the content.', / signature / h'...' ] ) I thought that the point of the COSE_Mac0, COSE_Sign1, COSE_Encrypt0 messag= es were just to reduce the framing overhead of allowing multiple signatures= . Thanks for any clarification, Brian S. [1] https://tools.ietf.org/html/rfc8152#appendix-C [2] https://www.rfc-editor.org/errata_search.php?rfc=3D8152 [3] https://tools.ietf.org/html/draft-ietf-cose-rfc8152bis-struct-14 --_000_MN2PR13MB35673439D210EC237ECD92239FDD0MN2PR13MB3567namp_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
All,
In the examples of RFC 8152 [1] the COSE_Mac0 and COSE_Encrypt0 examples do= n't include a key identifier ("kid" parameter) in the top-level u= nprotected headers, and there is no example of COSE_Sign1 message. The= informative text implies that there should not be a kid parameter, but I don't see this in any normative statement of RFC= 8152 or in the errata [2]. I also don't see any difference in the upcoming= 8152bis document [3].

I thought that the algorithm itself determined which protected/unprotected = headers were acceptable within a particular layer, while the message type d= etermined the top-level structure and whether there are sub-layers.

Is there a fundamental reason why the single-signer example (from C.1.1) of= :
   98(=0A=
     [=0A=
       / protected / h'',=0A=
       / unprotected / {},=0A=
       / payload / 'This is the content.',=0A=
       / signatures / [=0A=
         [=0A=
           / protected h'a10126' / << {=
=0A=
               / alg / 1:-7 / ECDSA=
 256 /=0A=
             } >>,=0A=
           / unprotected / {=0A=
             / kid / 4:'11'=0A=
           },=0A=
           / signature / h'...'=0A=
         ]=0A=
       ]=0A=
     ]=0A=
   )
could not be rewritten as a COSE_Sign1 message of:
   18(=0A=
     [=0A=
       / protected h'a10126' / << {=0A=
           / alg / 1:-7 / ECDSA 256 /=0A=
         } >>,=0A=
       / unprotected / {=0A=
         / kid / 4:'11'=0A=
       },=0A=
       / payload / 'This is the content.',=0A=
       / signature / h'...'=0A=
     ]=0A=
   )
I thought that the point of the COSE_Mac0, COSE_Sign1, COSE_Encrypt0 messag= es were just to reduce the framing overhead of allowing multiple signatures= .

Thanks for any clarification,
Brian S.


--_000_MN2PR13MB35673439D210EC237ECD92239FDD0MN2PR13MB3567namp_-- From nobody Tue Dec 29 10:45:45 2020 Return-Path: X-Original-To: cose@ietfa.amsl.com Delivered-To: cose@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B2183A07F4 for ; Tue, 29 Dec 2020 10:45:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.894 X-Spam-Level: X-Spam-Status: No, score=-1.894 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wFhpWy8UamYn for ; Tue, 29 Dec 2020 10:45:41 -0800 (PST) Received: from p3plsmtpa06-01.prod.phx3.secureserver.net (p3plsmtpa06-01.prod.phx3.secureserver.net [173.201.192.102]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 939F73A07E8 for ; Tue, 29 Dec 2020 10:45:41 -0800 (PST) Received: from [192.168.1.81] ([76.167.193.86]) by :SMTPAUTH: with ESMTPA id uK04kXE5Q6hYKuK04krHU1; Tue, 29 Dec 2020 11:45:40 -0700 X-CMAE-Analysis: v=2.4 cv=AvsrYMxP c=1 sm=1 tr=0 ts=5feb7954 a=t2DvPg6iSvRzsOFYbaV4uQ==:117 a=t2DvPg6iSvRzsOFYbaV4uQ==:17 a=Sre3oC0MAAAA:8 a=48vgC7mUAAAA:8 a=BqEg4_3jAAAA:8 a=314mHLxeJTQuyJ-xW7AA:9 a=QEXdDO2ut3YA:10 a=mhd2NDuUijAA:10 a=zjinifLwQYwA:10 a=q3BxyNVm6bjZr6aa:21 a=_W_S_7VecoQA:10 a=r-ye3kos_LfCSxau1HCK:22 a=w1C3t2QeGrPiZgrLijVG:22 a=0mFWnFbQd5xWBqmg7tTt:22 X-SECURESERVER-ACCT: lgl@island-resort.com From: Laurence Lundblade Message-Id: <39A023C1-8287-4CF2-9279-7D36B577B8AE@island-resort.com> Content-Type: multipart/alternative; boundary="Apple-Mail=_D6FA4F8F-8058-4925-AEA9-477AB75B81A2" Mime-Version: 1.0 (Mac OS X Mail 12.4 \(3445.104.17\)) Date: Tue, 29 Dec 2020 10:45:40 -0800 In-Reply-To: Cc: "cose@ietf.org" To: Brian Sipos References: X-Mailer: Apple Mail (2.3445.104.17) X-CMAE-Envelope: MS4xfPKxru5Bv+gVojRFNhNH5sAwey1oSKQ2t4tssYXk8kdRvfdL2OJ8XL5jwboFWE908guUV1OkAHq3Vpu+aXC+t6an6v67wlND2DJegd9HwR61SJisqlQx EEyV2og3wup3/gIAq3egzKW2uEJ6n9CTLGAuvmH433JooV+HcXLBWkxbEI0f2yitFOWp7ywpht32fcPjFrfutluvzocvTZwDMgk= Archived-At: Subject: Re: [COSE] COSE messages with kid in layer-1 X-BeenThere: cose@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: CBOR Object Signing and Encryption List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Dec 2020 18:45:43 -0000 --Apple-Mail=_D6FA4F8F-8058-4925-AEA9-477AB75B81A2 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Brian, Looks to me like there is an example of COSE_Sign1 that is pretty much = identical to what you=E2=80=99ve requested below in C.2.1.=20 My understanding is that the kid can as needed in any of the COSE = message types. It is usually unprotected, but I don=E2=80=99t see any = requirement that precludes it from being protected (and section 6 of RFC = 7515, JSON Web Signature, suggests the kid should be protected at = times). I would say it is the key identification scheme that determines which = headers are used and which are protected. The key identification scheme = varies from one COSE use case to another. LL > On Dec 28, 2020, at 3:12 PM, Brian Sipos wrote: >=20 > All, > In the examples of RFC 8152 [1] the COSE_Mac0 and COSE_Encrypt0 = examples don't include a key identifier ("kid" parameter) in the = top-level unprotected headers, and there is no example of COSE_Sign1 = message. The informative text implies that there should not be a kid = parameter, but I don't see this in any normative statement of RFC 8152 = or in the errata [2]. I also don't see any difference in the upcoming = 8152bis document [3]. >=20 > I thought that the algorithm itself determined which = protected/unprotected headers were acceptable within a particular layer, = while the message type determined the top-level structure and whether = there are sub-layers. >=20 > Is there a fundamental reason why the single-signer example (from = C.1.1) of: > 98( > [ > / protected / h'', > / unprotected / {}, > / payload / 'This is the content.', > / signatures / [ > [ > / protected h'a10126' / << { > / alg / 1:-7 / ECDSA 256 / > } >>, > / unprotected / { > / kid / 4:'11' > }, > / signature / h'...' > ] > ] > ] > ) > could not be rewritten as a COSE_Sign1 message of: > 18( > [ > / protected h'a10126' / << { > / alg / 1:-7 / ECDSA 256 / > } >>, > / unprotected / { > / kid / 4:'11' > }, > / payload / 'This is the content.', > / signature / h'...' > ] > ) > I thought that the point of the COSE_Mac0, COSE_Sign1, COSE_Encrypt0 = messages were just to reduce the framing overhead of allowing multiple = signatures. >=20 > Thanks for any clarification, > Brian S. >=20 > [1] https://tools.ietf.org/html/rfc8152#appendix-C = > [2] https://www.rfc-editor.org/errata_search.php?rfc=3D8152 = > [3] https://tools.ietf.org/html/draft-ietf-cose-rfc8152bis-struct-14 = >=20 > _______________________________________________ > COSE mailing list > COSE@ietf.org > https://www.ietf.org/mailman/listinfo/cose = --Apple-Mail=_D6FA4F8F-8058-4925-AEA9-477AB75B81A2 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi = Brian,

Looks to me = like there is an example of COSE_Sign1 that is pretty much identical to = what you=E2=80=99ve requested below in C.2.1. 

My understanding is that = the kid can as needed in any of the COSE message types. It is usually = unprotected, but I don=E2=80=99t see any requirement that precludes it = from being protected (and section 6 of RFC 7515, JSON Web Signature, = suggests the kid should be protected at times).

I would say it is the key = identification scheme that determines which headers are used and which = are protected. The key identification scheme varies from one COSE use = case to another.

LL

On Dec 28, 2020, at 3:12 PM, Brian Sipos = <BSipos@rkf-eng.com> wrote:

All,
In the examples of RFC 8152 [1] = the COSE_Mac0 and COSE_Encrypt0 examples don't include a key identifier = ("kid" parameter) in the top-level unprotected headers, and there is no = example of COSE_Sign1 message. The informative text implies that = there should not be a kid parameter, but I don't see this in any = normative statement of RFC 8152 or in the errata [2]. I also don't see = any difference in the upcoming 8152bis document [3].

I thought that the algorithm itself determined which = protected/unprotected headers were acceptable within a particular layer, = while the message type determined the top-level structure and whether = there are sub-layers.

Is = there a fundamental reason why the single-signer example (from C.1.1) = of:
   98(
     [
       / protected / h'',
       / unprotected / {},
       / payload / 'This is the content.',
       / signatures / [
         [
           / protected h'a10126' / =
<< {
               / alg / 1:-7 / =
ECDSA 256 /
             } >>,
           / unprotected / {
             / kid / 4:'11'
           },
           / signature / h'...'
         ]
       ]
     ]
   )
could not be rewritten as a COSE_Sign1 message = of:
  =
 18(
     [
       / protected h'a10126' / << {
           / alg / 1:-7 / ECDSA 256 /
         } >>,
       / unprotected / {
         / kid / 4:'11'
       },
       / payload / 'This is the content.',
       / signature / h'...'
     ]
   )
I thought that the point of the = COSE_Mac0, COSE_Sign1, COSE_Encrypt0 messages were just to reduce the = framing overhead of allowing multiple signatures.

Thanks for any clarification,
Brian = S.

[2] https://www.rfc-editor.org/errata_search.php?rfc=3D8152
[3] https://tools.ietf.org/html/draft-ietf-cose-rfc8152bis-struct-1= 4

_______________________________________________
COSE mailing list
COSE@ietf.org
https://www.ietf.org/mailman/listinfo/cose

= --Apple-Mail=_D6FA4F8F-8058-4925-AEA9-477AB75B81A2--