From nobody Tue Mar 1 01:48:06 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 10FBF1B3B05 for ; Tue, 1 Mar 2016 01:48:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.151 X-Spam-Level: X-Spam-Status: No, score=-0.151 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, HELO_EQ_SE=0.35, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TT7dlrE0eSS9 for ; Tue, 1 Mar 2016 01:48:02 -0800 (PST) Received: from duva.sjd.se (duva.sjd.se [IPv6:2001:9b0:1:1702::100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4EB911B397D for ; Tue, 1 Mar 2016 01:48:02 -0800 (PST) Received: from latte.josefsson.org ([155.4.17.2]) (authenticated bits=0) by duva.sjd.se (8.14.4/8.14.4/Debian-4) with ESMTP id u219lopr004729 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=NOT); Tue, 1 Mar 2016 10:47:51 +0100 From: Simon Josefsson To: "Paul Hoffman" References: OpenPGP: id=54265E8C; url=http://josefsson.org/54265e8c.txt X-Hashcash: 1:22:160301:curdle@ietf.org::fOKOJ/UgT/qJQbuH:1OVH X-Hashcash: 1:22:160301:paul.hoffman@vpnc.org::9f5a8zxnjgPn9uag:4H0K Date: Tue, 01 Mar 2016 10:47:49 +0100 In-Reply-To: (Paul Hoffman's message of "Sat, 20 Feb 2016 09:16:44 -0800") Message-ID: <87d1rettq2.fsf@latte.josefsson.org> User-Agent: Gnus/5.130014 (Ma Gnus v0.14) Emacs/24.4 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Virus-Scanned: clamav-milter 0.98.7 at duva.sjd.se X-Virus-Status: Clean Archived-At: Cc: "curdle@ietf.org" Subject: Re: [Curdle] Multiple choices and authentication-only X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Mar 2016 09:48:05 -0000 --=-=-= Content-Type: text/plain "Paul Hoffman" writes: > Some of the drafts proposed here are for algorithms that are only for > authentication. If we have two options for those, "strong" and > "stronger", essentially no one will choose "strong" because they would > look "weak" doing so even if the authentication they need is > completely satisfied by "strong". So we are in essence telling people > "to look secure, you should always use 'stronger'". > > Fortunately, for EC, the message size and signing/verifying time is > not a big issue, particularly because in most protocols these will > (still!) be replacing RSA authentication. However, having two sizes > means more operational complexity because each signer needs to decide > (without enough guidance) which size to use. > > If you truly believe that 128 bit work factor is not sufficient for a > particular IETF protocol, it would be good for this WG to hear > why. "Because the NSA uses it for 'top secret' which most of us don't > even know the definition of" isn't sufficient for me, but it might be > for others. +1 I believe 25519 is sufficient for IETF protocols, and I haven't seen any strong technical arguments for anything else. The hedge aspect has some merit, but the cost of adding 448 to some protocols is really large compared to the small gain we get from having a hedge variant available. Complicating things with 448 was a CFRG political compromise to allow things to move forward, in my perception. There is no need to repeat the same mistake for all protocols. /Simon --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCAAGBQJW1WVFAAoJEIYLf7sy+BGdt+4H/2XKPBZ0irzpmF1SP5uHd86w n6Mhb0p1XQxbErih6YeiIUtvZ5DiDAue3inlQev1WlrJSHL7FViETdEKjQ3BteWT bIESME0ky+QvIVyyJYUCWjYfmnrAhpvgFzfWUvMct4oQ9vQAFkBeRDBzepWi7ZDs 6KTgYpBhme7OXzPolrHcJ+AdXdZK80CWWBf1woHB5o5XWOIQnT2zKvGitJjxjL3w C72f7aDTSzv+9/9xbYld/VXB6Ot/cPLxWzonTYuwAVns1D9HHRx2g2AEtWJYUbh0 1UmtwdUmOOVxkVNqlNx7+bLnWMLLIblva6UkUEtBIky91HngFLzrQMD/thj0S4A= =D3WX -----END PGP SIGNATURE----- --=-=-=-- From nobody Tue Mar 1 02:08:29 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E49A81B3E17 for ; Tue, 1 Mar 2016 02:08:28 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.551 X-Spam-Level: X-Spam-Status: No, score=-1.551 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_SE=0.35, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dYYuxeEihF1x for ; Tue, 1 Mar 2016 02:08:28 -0800 (PST) Received: from duva.sjd.se (duva.sjd.se [IPv6:2001:9b0:1:1702::100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CA5451B3E30 for ; Tue, 1 Mar 2016 02:08:27 -0800 (PST) Received: from latte.josefsson.org ([155.4.17.2]) (authenticated bits=0) by duva.sjd.se (8.14.4/8.14.4/Debian-4) with ESMTP id u21A8Esr006641 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=NOT); Tue, 1 Mar 2016 11:08:16 +0100 X-Hashcash: 1:22:160301:ietf-ssh@netbsd.org::BjAeJqkG0faS13N7:UJNA X-Hashcash: 1:22:160301:curdle@ietf.org::4lRuAGJlEinKGxpz:dDri From: Simon Josefsson To: ietf-ssh@netbsd.org, curdle@ietf.org OpenPGP: id=54265E8C; url=http://josefsson.org/54265e8c.txt Date: Tue, 01 Mar 2016 11:08:13 +0100 Message-ID: <8737satss2.fsf@latte.josefsson.org> User-Agent: Gnus/5.130014 (Ma Gnus v0.14) Emacs/24.4 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Virus-Scanned: clamav-milter 0.98.7 at duva.sjd.se X-Virus-Status: Clean Archived-At: Subject: [Curdle] draft-josefsson-ssh-curves-04 X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Mar 2016 10:08:29 -0000 --=-=-= Content-Type: text/plain All, I have updated ssh-curves to use SHA-512 for Curve448 as requested by several people. We are waiting for a Curve448 implementation to confirm that the description is correct. Otherwise I am not aware of any open issues with the document. All feedback is welcome. https://tools.ietf.org/html/draft-josefsson-ssh-curves-04 Thanks, /Simon --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCAAGBQJW1WoNAAoJEIYLf7sy+BGdqPkH/2tDViZg1PektBLBP7466ltc aEO8Dbc+71pcOdjl7ayhJjkwrP9fYZt6TM/20hpTsNH++wil7fUo5jlk5vYngP9O 6xNqMJQ672krJKdk8hm63L7g65B9ChteBgPsadKFb6GCK9rKkVLLlPBRnpqL+DRs 4pqt+qIr4zJDiWOf2i0BppnJDkzIWHV08uLZRFf0SDltsVZnlc+z+hIvCHalBoif GdAZLW6xNaSCNzweKdFXWY7tcaZtMRnSXPQdH/VD/wj+dsAAa1AJPd9ArXBdwIu4 gMldNcxNLVSoCAYQLrzyKQqgTBUbN/BRq5xO32cN0ladRwJTDp/FO5BOpKoloGE= =KMHd -----END PGP SIGNATURE----- --=-=-=-- From nobody Tue Mar 1 06:00:04 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 56BD01A8712; Tue, 1 Mar 2016 06:00:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.944 X-Spam-Level: X-Spam-Status: No, score=-3.944 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FU_ENDS_2_WRDS=0.255, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wC2GbWjyg-Rp; Tue, 1 Mar 2016 05:59:59 -0800 (PST) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 73BE61A870C; Tue, 1 Mar 2016 05:59:59 -0800 (PST) X-AuditID: c618062d-f79dd6d000003091-90-56d59be870e2 Received: from EUSAAHC007.ericsson.se (Unknown_Domain [147.117.188.93]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id F8.87.12433.8EB95D65; Tue, 1 Mar 2016 14:40:57 +0100 (CET) Received: from EUSAAMB107.ericsson.se ([147.117.188.124]) by EUSAAHC007.ericsson.se ([147.117.188.93]) with mapi id 14.03.0248.002; Tue, 1 Mar 2016 08:59:57 -0500 From: Daniel Migault To: Daniel Migault , "curdle@ietf.org" Thread-Topic: [Curdle] Adoption Thread-Index: AQHRa3522Vv8L/KaTUqjkOUPfq17tp9Ergew Date: Tue, 1 Mar 2016 13:59:56 +0000 Message-ID: <2DD56D786E600F45AC6BDE7DA4E8A8C1122068A1@eusaamb107.ericsson.se> References: <2DD56D786E600F45AC6BDE7DA4E8A8C1121E5EAC@eusaamb107.ericsson.se> <2DD56D786E600F45AC6BDE7DA4E8A8C1121E5F4C@eusaamb107.ericsson.se> In-Reply-To: <2DD56D786E600F45AC6BDE7DA4E8A8C1121E5F4C@eusaamb107.ericsson.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.10] Content-Type: multipart/related; boundary="_005_2DD56D786E600F45AC6BDE7DA4E8A8C1122068A1eusaamb107erics_"; type="multipart/alternative" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrMKsWRmVeSWpSXmKPExsUyuXRPrO7L2VfDDL7NELCY2bOB2WLrwlnM DkweS5b8ZApgjOKySUnNySxLLdK3S+DKeLNuN0vBnF9MFadPtDI1MD56xtTFyMkhIWAi8XvR UmYIW0ziwr31bF2MXBxCAkcYJRbNnAHlLGOU6P15BqyKTcBIou1QPzuILSIQLvHo4imwScwC WhLrnnYA1XBwCAvISTT8zAExRQTkJdo+CkJUG0ncmvGIEcRmEVCRuHb6FdhEXgFfienzN7FC rJrIKNFx5j3YeE4BP4nXLe1gDYxAx30/tQZqlbjErSfzoR4QkXh48TQbhC0q8fLxP1YIW0li 0tJzYEOZBboZJW5taWKC2CYocXLmE5YJjKKzkMyahaxuFpI6iKJ8ibbjXUwQto7Egt2f2CBs bYllC18zw9hnDjxmwhTXkdh8aSfUHEWJts7ZUMuWMkp8m7MZrqj7TAc7TNGU7ofsMPGlbdOA lnGAxbvulEH0AiNk9uxrrDA1n57sQdG7gFFoFSNHaXFBTm66kcEmRmByOSbBpruD8f50z0OM AhyMSjy8BWevhAmxJpYVV+YeYlQBan20YfUFRimWvPy8VCURXsb5V8OEeFMSK6tSi/Lji0pz UosPMUpzsCiJ865/ezlMSCA9sSQ1OzW1ILUIJsvEwSnVwFiw/N8pN2vXqcxSWfyTeIIXvAso jwu6cshNp3NZ4I/2yZ8nr3l89eF31l8BM87Etz+2fvm0Sbkr5Lf65Ukuit+6/ynqCe7jmPDK 88jSLK4EqSpNad5Vnvd7fWb8vNlxoEOk7vQlH6eenap7W2Zs4S9nPRi15H7LiQtBgusX6hQn 8mx1VrxVxa/EUpyRaKjFXFScCACSSEsSNgMAAA== Archived-At: Cc: Curdle Chairs Subject: Re: [Curdle] Adoption X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Mar 2016 14:00:02 -0000 --_005_2DD56D786E600F45AC6BDE7DA4E8A8C1122068A1eusaamb107erics_ Content-Type: multipart/alternative; boundary="_000_2DD56D786E600F45AC6BDE7DA4E8A8C1122068A1eusaamb107erics_" --_000_2DD56D786E600F45AC6BDE7DA4E8A8C1122068A1eusaamb107erics_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi, Thank you all for the discussions. Our understanding is that there is a rou= gh consensus on having ed448 and ed25519 standardized and that document sho= uld provide some guidance when one or the other should be chosen. The following documents are then expected to be merged and adopted: draft-sury-dnskey-ed25519-03 draft-sury-dnskey-ed448-00 And other documents are adopted: draft-bjh21-ssh-ed25519-02 draft-josefsson-ssh-curves-00 draft-josefsson-pkix-newcurves-01 draft-josefsson-pkix-eddsa-04 draft-ssh-ext-info draft-rsa-dsa-sha2-256 draft-baushke-ssh-dh-group-sha2 Please update the names of these documents in draft-ietf-curdle-* and submi= t them so we can accept them as WG documents. BR Rich and Daniel From: Curdle [mailto:curdle-bounces@ietf.org] On Behalf Of Daniel Migault Sent: Friday, February 19, 2016 8:32 PM To: curdle@ietf.org Cc: curdle@ietf.org Subject: Re: [Curdle] Adoption Hi, The URLs were badly displayed on the previous mail. For clarification, I am= re-sending the list of draft we think there is a consensus for adoption. I= f anyone object, please let us know by Feb 26. draft-bjh21-ssh-ed25519-02 draft-josefsson-ssh-curves-00 draft-sury-dnskey-ed25519-03 draft-sury-dnskey-ed448-00 draft-josefsson-pkix-newcurves-01 draft-josefsson-pkix-eddsa-04 draft-ssh-ext-info draft-rsa-dsa-sha2-256 draft-baushke-ssh-dh-group-sha2 BR, Rich and Daniel From: Curdle [mailto:curdle-bounces@ietf.org] On Behalf Of Daniel Migault Sent: Friday, February 19, 2016 5:06 PM To: curdle@ietf.org Cc: curdle@ietf.org Subject: [Curdle] Adoption Hi, Does anyone object that we declare there is a consensus to adopt the follow= ing drafts? If so please let us know by Feb 26. https://tools.ietf.org/html/draft-bjh21-ssh-ed25519-02 https://tools.ietf.org/html/draft-josefsson-ssh-curves-00 https://tools.ietf.org/html/draft-sury-dnskey-ed25519-03 https://tools.ietf.org/html/draft-sury-dnskey-ed448-00 https://tools.ietf.org/html/draft-josefsson-pkix-newcurves-01 https://tools.ietf.org/html/draft-josefsson-pkix-eddsa-04 https://datatracker.ietf.org/doc/draft-ssh-ext-info https://datatracker.ietf.org/doc/draft-rsa-dsa-sha2-256 https://datatracker.ietf.org/doc/draft-baushke-ssh-dh-group-sha2 BR, Rich and Daniel [Ericsson] DANIEL MIGAULT Researcher Research Ericsson 8500 Boulevard Decarie H4P 2N2 Montreal, Canada Phone +1 514 345 7900 46628 Mobile +1 514 452 2160 daniel.migault@ericsson.com www.ericsson.com [http://www.ericsson.com/current_campaign] Legal entity: Ericsson Canada Inc., registered office in Montreal. This Com= munication is Confidential. We only send and receive email on the basis of = the terms set out at www.ericsson.com/email_disclaimer --_000_2DD56D786E600F45AC6BDE7DA4E8A8C1122068A1eusaamb107erics_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi, =

 

Thank you all for the = discussions. Our understanding is that there is a rough consensus on having= ed448 and ed25519 standardized and that document should provide some guida= nce when one or the other should be chosen.

 

The following document= s are then expected to be merged and adopted:

draft-sury-dnskey-ed25= 519-03

draft-sury-dnskey-ed44= 8-00

 

And other documents ar= e adopted:

draft-bjh21-ssh-ed2551= 9-02

draft-josefsson-ssh-cu= rves-00

draft-josefsson-pkix-n= ewcurves-01

draft-josefsson-pkix-e= ddsa-04

draft-ssh-ext-info

draft-rsa-dsa-sha2-256=

draft-baushke-ssh-dh-g= roup-sha2

 

Please update the name= s of these documents in draft-ietf-curdle-* and submit them so we can accep= t them as WG documents.

 

BR

Rich and Daniel

 

From: Curdle [= mailto:curdle-bounces@ietf.org] On Behalf Of Daniel Migault
Sent: Friday, February 19, 2016 8:32 PM
To: curdle@ietf.org
Cc: curdle@ietf.org
Subject: Re: [Curdle] Adoption

 

Hi,

 

The URLs were badly displayed on the previous mail. For clari= fication, I am re-sending the list of draft we think there is a consensus f= or adoption. If anyone object, please let us know by Feb 26.

 

 

draft-bjh21-ssh-ed25519-02

draft-josefsson-ssh-curves-00

draft-sury-dnskey-ed25519-03

draft-sury-dnskey-ed448-00

draft-josefsson-pkix-newcurves-01

draft-josefsson-pkix-eddsa-04

draft-ssh-ext-info

draft-rsa-dsa-sha2-256

draft-baushke-ssh-dh-group-sha2

 

BR,

 

Rich and Daniel

 

 

Hi,

 

Does anyone object that we declare there is a consen= sus to adopt the following drafts? If so please let us know by Feb 26.=

 

https://tools.ietf.org/html/draft-bjh= 21-ssh-ed25519-02

https://tools.ietf.org/html/draft-= josefsson-ssh-curves-00

https://tools.ietf.org/html/draft-s= ury-dnskey-ed25519-03

https://tools.ietf.org/html/draft-sur= y-dnskey-ed448-00

https://tools.ietf.org/html/dr= aft-josefsson-pkix-newcurves-01

https://tools.ietf.org/html/draft-= josefsson-pkix-eddsa-04

https://datatracker.ietf.org/doc/draft-ssh-ex= t-info

https://datatracker.ietf.org/doc/dra= ft-rsa-dsa-sha2-256

https://datatracker.ietf.= org/doc/draft-baushke-ssh-dh-group-sha2

 

 

BR,

 

Rich and Daniel

 

3D"Ericsson"

DANIEL MIGAULT
Researcher
Research


Ericsson
8500 Boulevard Decarie
H4P 2N2 Montreal, Canada
Phone +1 514 345 7900 46628
Mobile +1 514 452 2160
daniel.migault@ericsson.com<= /a>
www.ericsson.com



3D"=<= /o:p>

 

Legal entity: Ericsson Canad= a Inc., registered office in Montreal. This Communication is Confidential. = We only send and receive email on the basis of the terms set out at www.ericsson.com/email_disclaimer

--_000_2DD56D786E600F45AC6BDE7DA4E8A8C1122068A1eusaamb107erics_-- --_005_2DD56D786E600F45AC6BDE7DA4E8A8C1122068A1eusaamb107erics_ Content-Type: image/gif; name="image001.gif" Content-Description: image001.gif Content-Disposition: inline; filename="image001.gif"; size=2367; creation-date="Tue, 01 Mar 2016 13:59:55 GMT"; modification-date="Tue, 01 Mar 2016 13:59:55 GMT" Content-ID: Content-Transfer-Encoding: base64 R0lGODlhRAA8APcAAAIVTgAWUwAWVAQWTwUWUAcXUQkYUgAbUwAbVAoZUwAcVQEdVgMeVwQeWAYf WQAhWQAiWgggWgAjWwAjXAAkXQAlXgEmXwInYAAoYAQnYQApYQAqYQArYgArYwAsZAAuZg0sYA4t YRAtYREuYgQyZAUyZRMvYwczZhQwZAk0ZxYxZQs1aA42ahE3axI4bBQ5bQY9cBU6bgk+cRc7bxg8 cBo9cRo/bRw/bh1Abx5BcB9CcSFDciJEcyNFdCRGdSVHdiZHdylJeStLeyxMfC1NfS5Ofi9Pfy5Q ejBQgC9RezBSfDhQfDFTfTJUfjNUfzRVgDVWgTZXgjdYgzlZhDpahTtbhjxchz1diD5eiT9fikVe hUZfhkFhjEdgh0hhiEljiUtki0xljE1mjU5njk9oj1BpkFFqkVJrklNsk1VulVZvlk9xl1dwl1hx mF1xlFdzlFh0lV9zlll1lmB0l1p2l2F1mGJ2mV56m2V5nF97nGB8nWF9nmJ+n2N/oGSAoWWBomaC o2eDpGyDoG6CpmiEpW2EoW6Fom+Go3aFo3CHpHGIpXKJpnOKp3SMqHWNqXePrHiQrXmRrnqSr3uT sHyUsX6Ws3+XtISYr4easoibs4mctIqdtYueto2guI6huY+iupCjvJKlvZOmvpSnwJmou5WpwZqp vJuqvZyrvp2sv56twJ+uwaCvwqGww6KxxaOyxqS0x6W1yKa2yai4y6m5zKu6zay7zq28z7C8yq69 0bG9y6++0rK+zLO/zbTAzrXBz7bC0LjD0bnE0rrG07vH1bzI1r3J177K2L/L2cDM2sHN28PP3cfP 18TQ3sjQ2MbS4MrS28fT4cvT3MzV3c3W3s7X38/Y4NDZ4dLa4tPb5NTc5dXd5tbe59fg6Nni6trj 69vk7N/k5t3l7uDl6OHm6eLn6uPo6+Tp7OXq7ebs7uft7+nu8Orv8uvw8+zx9O3y9e7z9u/19/D2 +PL3+fP4+/T5/PX6/fb7/vn7+Pz6/vr8+ff9//v9+vn+//z/+/7//CH+EUNyZWF0ZWQgd2l0aCBH SU1QACwAAAAARAA8AAAI/gD/CRxIsKDBgwgN8tOnb1/ChxAjSjR4792vMyAaBLllb6LHjxDtvau2 SMYBCRYsSHAwSx/IlyD5ufMWCkqDBihTppQghB3MnxDhgbPVhsNJnUhTHigHtCnBeuCMKcpRAGfS qxLMOW1qTpmmKQ+OXr16oIu7rS/fPSOlhsQBB2OxPmiAwxg/tB6xtfLTo4HYuDolHOBQZI4xvBPf XYpiNCfgnQ0e5FDDyRniifUuSbD6OKWDAyPAVArW7rJHcSMcAxYcwUkjW99Mf9xnrMDjzQVw8JGF jR5BcrFMKZP90BmBuBEKcCCTSprPgfhs6VFCw8UOQfCIH0SX4wFSwQ2Y/lxqppWgNEdOaHCQwB7l Jd/aCe7D1fhBgheBjJWDL5AdqCo1iMBeUhLIoE58Bd3TjB9VuCELOfEUpEsaNJCgEmAFMIVgQfPA I49LA1mDSA4krNeZBBycs+FD7ISCxAgcdIbUAXRkt2JB9ghjhoUyJuWAEN7cONA+2zByg2o9pkSE J+/849CN6tDhAJKdZcCBDH5UIyRB8exxQJIpgeACGLR0tCVB3nh3ogQeuLBEJuQQdI+ZQvIzjG1x sZeBC0EEMtxA/LCjVyjGPHejNF8SyF4KQLARC53/vIONLGp8UMABB7wxjpDvQCHWSh70EEYnQQ5k Tze9HLLDAZxZMIAi/vPcyE8yRGxw0g1bOIJMQeQIcwkVglEpwQjobIlNJHksQstZA7mDzCdosFDA lBhqeCZB/FBTyh1A3EQlgSykc+1A5LQSyBMctHrbAZLwJ2Q9vjSiRQsOUHuiAwWQ8EexW5pjSRg7 WKDuaic5QckvTW5JDRMj2HuiXzQAYss29Vz7DhYD53nABmawgg2z41rTgIybHZDEJtio8+S4//Aj TKIasyAIM+tUzHJB3IyMFU5j0MKOuzcT9M4aMKv04ybl2HNX0AmZ4wVOErTQxzT5MD3RPWsFI4/V XHft9ddghy322GSX7dEywQijtjDBxDlN2mofwy87vhyjokDY0GLK/iq9lOPQpHsHc6A+zrRSCivI xPqPOr2ggoovB0aaTDDBiPvP29XwM0YOO8hQgwwvrPKPHTjkUEMNQZiRzD/HvOBELf+0s8kUKTwg QQqb/GPKFCVE1kMw9GxSRGNRxKYMG0dKcMMbu2KTBQ41bFIxHTfwYY8QDYiQRRVURGHLP1oc0AIX UWz2xD++DMACK/9cwgEBOdThhxOVYEMvEIoYQscww3DgQBSM4MMdypEOKEwpDnBYyRTQQY0c+GUH 0vhHFQ4ghnoYwQFGqAc60GGOefDDCwcAAzbScYSU/OMXBXCBLKghgwJQIRjskNQ5VpEBC/xBIOpg hycEMAJR/OMe/kzJBAcisAh1nCMRBxCBJrbhgwgIZhL/6IIDyGDBCMhAE5SQhCa48Q8QXoF/MpAA E05YgBe04hVfCkVBlIGSHNhhFaVhBQEyIIRA3EIgX9iABO7mDfaYoRs94MALOHADcnxhihZ0TNRg 5wUHiEAGNLAAEbpBxhekAhQDeEEuCqIPQfglaleYRjrQgKkNvKAN9mCCBFjwJHfAoAFYwEYg8xAF AnwCChGgohGixgc7zAEQ0+jiA1RghBiNQEUoNGMqBAACWRjkHccgxAxs54Z/rMMWcuhdA4YBhZSY yR0ecAAXACmBVFRCAjt4gQR0+YAx3uMeDtkHCKngDVGs5xJk/lRh/xrABkMRxB7heIEDoECQVdCA AKawAwgcsMl/7GIwg+jGDspJjiRIIAPrTKQLAKEHPcBBGF08QBbaUQ8VWAAI+WyFPNxgGydcYhWH +MQ3xtAJW1BCJWrABhlKYYs0cGAAtaBGCSQAg1UYVAIzkAY2JjqKf0ACBBLIZT2w1x4JFIAT/8gC Aaqwjn+kQQIbUEYw1Ce6bogBJ1ZyAB6SwYG2YvQG1ODFANq6gQR8IU6mWE9bh3WKfzijO2osRxFu UsFWcKITiO3EJYLJikasIlbSmMQkhvENRmRCS/+wxzAKcQYy+MEY6thEHMighkyo6BuRaMMY4rAK kHXDEWY4FUMkKPkPc3giEtEQyC4o4YhX3CMgAAA7 --_005_2DD56D786E600F45AC6BDE7DA4E8A8C1122068A1eusaamb107erics_ Content-Type: image/gif; name="image002.gif" Content-Description: image002.gif Content-Disposition: inline; filename="image002.gif"; size=15442; creation-date="Tue, 01 Mar 2016 13:59:55 GMT"; modification-date="Tue, 01 Mar 2016 13:59:55 GMT" Content-ID: Content-Transfer-Encoding: base64 R0lGODlh9AFQAPcAAFpEOQcGBnKJroVVTrmHkrm5uWpqanx8fJOpx6x7iSUnNtHR0WJKQGhCOjY3 R42MjWhSR8XFxhUaKenp6RYpSbjE17uftwJutjQkG0JCQlQ9MpdmZkRFVKZzeKa0ykI8SjpBWGQ6 MntWVhoiNp2dnQaMy83Y5jlGZGRdaSQiI0tXdSohG3ZMRXeEmnZUTFhYWFVadlhWaERKYpWkvEUn GUs1KARUjVhnhmdyihoRDEgyJCk3VWd5ljsxKzIpJSsySDY8USojIRMREUg5MqSioTJYjG1YT0Qt ISIdGlE5LLK5xoqVqZqeqxwaHCMZExaBu93d3TItKzIyMlhheay60WRjemRrhHWn04djZVCQyUZ0 riwqLaurq6OquAZGeUtTbCIrQiNEdoCVtoZcX0UwJHF5izsqIbbL5hgVE1RFRxc1YnBHPWuZySEi LTw7PpJgXVw6LC1CaExihiuW0ICIlvX19UIzK1AzIyU9ZLS/0wB6wiocFHhrabuTn09IVTMzPWx+ pEVag0hnl9bV1U43KzR5sJl1ejNJclEzKlOEuzAtNBITHXZhWQ0LCjpSfL/K2ZuIiYZ0d9bX2x8e Il50mgoLDx4UDqimpY1nbz40L6OmrXF9lnhicDctKCwtOzUdFM24vODf4J1rcK+xuLqvr9FkgFNr kIGMohwYFjw0PCclLZOSk4224S0nJaeuwS8lIFROYg0PG+Tk5lg2LSAWEF00I+Ln78Guukae0Ccd GHJthkNObxcVG5Kfsjpkn8bS4m5KUIJvbuvt8Obp7jYZDg8OD+Dk69fa4PHu7WsmLmQ/MdvZ1x4w UtrX1kIqLlo3J/n5+tPV1y8mLCYmJzU2OBcXGK+pp08fJFU3J0QSGFRQUiMNBz0lHEpNXkk+PTgO Ej4hE////9XV09PT0zg3NgBfo7++wKCWlRFjn5qXoTEwQ9TT0tXT1e/x93JydaulrczKypCVn08t KabA3ClOgpE4PjxObVo/MjAKDIODv09uoSUXFw0fOuvl54WewQAAACH/C1hNUCBEYXRhWE1QPD94 cGFja2V0IGJlZ2luPSLvu78iIGlkPSJXNU0wTXBDZWhpSHpyZVN6TlRjemtjOWQiPz4gPHg6eG1w bWV0YSB4bWxuczp4PSJhZG9iZTpuczptZXRhLyIgeDp4bXB0az0iQWRvYmUgWE1QIENvcmUgNS42 LWMxMTEgNzkuMTU4MzI1LCAyMDE1LzA5LzEwLTAxOjEwOjIwICAgICAgICAiPiA8cmRmOlJERiB4 bWxuczpyZGY9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkvMDIvMjItcmRmLXN5bnRheC1ucyMiPiA8 cmRmOkRlc2NyaXB0aW9uIHJkZjphYm91dD0iIiB4bWxuczp4bXBNTT0iaHR0cDovL25zLmFkb2Jl LmNvbS94YXAvMS4wL21tLyIgeG1sbnM6c3RSZWY9Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEu MC9zVHlwZS9SZXNvdXJjZVJlZiMiIHhtbG5zOnhtcD0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAv MS4wLyIgeG1wTU06T3JpZ2luYWxEb2N1bWVudElEPSJ4bXAuZGlkOmE4YWU0MjY1LWM5MGItNDZm My1hZDI4LWZiODE4YmVhZjcyYiIgeG1wTU06RG9jdW1lbnRJRD0ieG1wLmRpZDpDRTIzRDZGQkM5 MTAxMUU1OTE3MjhDMzMzNUIzQjc2OCIgeG1wTU06SW5zdGFuY2VJRD0ieG1wLmlpZDpDRTIzRDZG QUM5MTAxMUU1OTE3MjhDMzMzNUIzQjc2OCIgeG1wOkNyZWF0b3JUb29sPSJBZG9iZSBQaG90b3No b3AgQ0MgMjAxNSAoTWFjaW50b3NoKSI+IDx4bXBNTTpEZXJpdmVkRnJvbSBzdFJlZjppbnN0YW5j ZUlEPSJ4bXAuaWlkOmRhNGU4MzA5LWEzZjAtNDJmNi1hYjc0LTFjMzZlOTA0ZGZmMiIgc3RSZWY6 ZG9jdW1lbnRJRD0iYWRvYmU6ZG9jaWQ6cGhvdG9zaG9wOmI3YmMxNTRhLWIyMmUtMTE3OC1iMGJi LWM0ZTZkNzM2YmVmZiIvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRGPiA8L3g6eG1wbWV0 YT4gPD94cGFja2V0IGVuZD0iciI/PgH//v38+/r5+Pf29fTz8vHw7+7t7Ovq6ejn5uXk4+Lh4N/e 3dzb2tnY19bV1NPS0dDPzs3My8rJyMfGxcTDwsHAv769vLu6ubi3trW0s7KxsK+urayrqqmop6al pKOioaCfnp2cm5qZmJeWlZSTkpGQj46NjIuKiYiHhoWEg4KBgH9+fXx7enl4d3Z1dHNycXBvbm1s a2ppaGdmZWRjYmFgX15dXFtaWVhXVlVUU1JRUE9OTUxLSklIR0ZFRENCQUA/Pj08Ozo5ODc2NTQz MjEwLy4tLCsqKSgnJiUkIyIhIB8eHRwbGhkYFxYVFBMSERAPDg0MCwoJCAcGBQQDAgEAACH5BAAA AAAALAAAAAD0AVAAAAj/AP8JHEiwoMGDCBMqXMiwocOHECNKnEixosWLGDMODPCPY4CPID82CtCo pMlGxVIKWckSjcuXqGI6QYXECZKbuZDkoiUkh8+fQIP6tESUKC0nR53sWbp0xacVKzBgeEULlQYN hO5gw/YshLKvXxuIbbBmjVhlIeA82ypPBw1u3MBhAEeDxp0jOu5wy3Hy0xEaSZQR0kG4cGEyZHQg Xrz4iOPHRzRKnky5suXLmDNrxugxZMiRJ0umVMkyh5CXaGKqtmlTJ85cqEwLnQ20KK3bTnIzbfpU qtROSABgzat1FpwQIcSWXc4CmFg4s2YhOgJ3rtRP4MwQv3PXUskcxO48/6NxBM5gw+gRK2aM+Eh7 x2Y2y59Pv779+/gZeuzomSTJ0MWgRNpKqLmkGipONNGaayvkAptstNFmCS0T3kbLHkox5VRUUq1Q gwgreAMAGdyQdwciximjHAtrsOCCCCww0MA9sxAyix3O5OgYXHXlRZwOtJTkBHezUHdPDTogiSR6 hrHXHhmQ5SfllFRWaeWVnfXnH4CjsdRTgQcmuKBruaxQExoRSmiUhbrttqFvGBxxDwZDaOADBp9g wM0RKN6zBjAsuPjiGCKIAAwwDKQBTBppzKgBIpAiohV33B0R5DbccHePDkdoUMOnSRa2ZJPrsRfl laimquqqrOrXEX+egf/GZTFenobagU3QdBNOSJgJlRMQRmhJbWvilqGGvcFJhh1DAGCGnhiY4Qwi 99wDjAsvFjoGJphwwkmhInBCKDBmwQGdudhQyl2QToBDjDwMEIIIIZ/WC2qo6RHm5GOt9uvvvwDT l2Ws/4k2Gq0t2ZragUjoumuZUKWwAipozkaUxRUae+weK3CcJ5xm2JEEA0O4N4sGDQDQAAPXikDo GFhwi8UYY3DC7bgNhBDdLPdAly5Xd1iyDXbgyANAEvYmnaSSTJbKmGMBRy311FQ/NPBnlZx0sJe3 qpbrrmD3KjFUSAT707Booz1Uxrm12dQeGHAo1bNkDMEAAPegTNahzbn/6DK3mMzssiGGYAGjWTpH h+JWWqVrSbt0yfNoDYTQm3S9+KbnJJRVd+755/9eDVJoAiLMNUwMh43E2BIHYWbFteWg9uwZ47Zb U3HDCW3IDPTulXIvHrqGCzAHLgIEwHCrLSYiiDWLPEfII8+kQOtJAzHEgIONDvN+arnlSjftNOeg l2/++feJvqVJW59uIMNNqA6V60HU7wTsadN+sW1HJbXxUx8DmRnM0DsAMEBFZAnXGJwzPBEwAkZi +RagtgUMnckjLjTIy8/gsL2/EGMbNMDGESpHr8pdDlRLGpW+2IO+FrrwhRpR3/oMNiACuaQaXmtC /MAmsdbVr35IGJbs/4a4v6LMzkL+cxPcdBetAZpBAwyoVs7I4q1DwUEZLXIBouBwD7GEoFHAeB4Z PrEPuzROKxy8gw4+SBfyYIOE4AOfvQijwhUuBoZ4zKMeFyLDRmSNhqZTGBpwGBMdhi0FYvthEF4R hAfJzoiQjCQS23a7N/nmWU7UADDugQg7ROeL3viAM8SzN7MkAREhIOM+eDEJXuwjCDnwi3i2spU0 6gAfdAEHOHSQBDiWUI5KY1qTELPHYhoTj33UWpdOVw1CosKQN5nE6laQAh+2ohWMnNgjI8nNYlFy NxhYIsi44UQ7QIABd9jDPnKxD1oUgyh8UpFZGoAIMszCGXCRhjTYmf8neSDCXM9YC7q210ZwHKGX vjQhME84TGIe86EQBd1HYBWSP5YukKghZPx2uKseKhKb15wYGrpJUjZ9k2Nwk1u0mjhAMvQOG5/4 yT728QliHAEbV2wAWuBwInm8BS7OiN4svnJFZZiLi+k6gi7pQogkODWhvzyhMO1Ihoha9aoBU5+s /Ng+AlVjkBo1pDSr6dFpXPOsrZiYbUgKSZNiCFkqXakTB6gBCCjjLuCoKTE+QQN5POM4aTEXpBSH IsAi8CzK6FkaaeAugzq1lwhNKOXqBcx8VRWrmM1sqtRn0YNhFKw4NOQOEUnWH6LVB2lFxVopdJtu IjEpStQdJudqhhr/QECnarnLEWapFq+oRaAIPOxYlgOWe6RLB9qryx0eG1lfUk6hJZzjMDVL3eri R6skyVpXT/PVZj7zmUiQ5lirWT+0tsIH6A2Cal+LRG6aVCkZcgoTZzvAI5iBDBBggU6N6hWimmun AIUDWVoUqAIHqizFPa48dKoB5kIWqs4NX3qsS+EKa4az7FumDZsZWmiOl7zTMOtZt5De+7G3vW11 69ugIlvaPoYBLliOjMHyjFoE9L/JWcMADDyAHbNoDQm+AyEAcLIGM7epD4awCTFXRx1Y+MlQzohW /QhIrnG4GjoU6+pKG+IR+yAKUfBBEJDApv6x14jvPRZUAihXJ9rX/z33cMGPW0RnINu4FngWcFlc 1OMeGxjIZjGqGglhZAc/tnLNlSz4MqevKDv60RGZsnY1zF0cYnmjY91yCoLQCrNuoRUkBnMUgjCT oyCoba9Fc//c1rH5utg9ZCDEgXnMIqPWQhk1fkYDWCCCPvvaz8uZEQd5mYQGF/rIT30qVCWcmMRA +tnQPojo/BiArFWC0t1tZpY3Gl4um3UaPgi1qMfsv7blxsytZRur2UxO2jLGDjqAMQt+PYCiIjgE Na6FCDaAiTe8YQP+foOfa62MXuogb1fRAByMfGxDJ3nJmENPtCc+cS3JatKmQ4MQrvzMLIdX00H4 9qejsAVRR6EVDf8zt8qRYiFvuo1jKnXxYuzwKQD4OuBjuLWv13CHuoTAEAnogNA7sAGAA1vYiBhZ tZaO8IQnvNgNVzbE8YUkilv90aKrRLWrvJJFbJzDWRbvJMiagi5fs+QmPzlsVr7ylpfbTS12ImLs sKznJsEFAS860ZUxgH8bnQXKwHMHEkCAwged6AIP1IxOyYBzAuDxeGO60ydvaBJeLlRXz3yFOfKq /lj7oszUtse7TdYufxrtYJbCyWvihFy0nu3nZi1S2tTqmNf3vvCmOSGGUGwG9H0DohC6KP49+D4k YAMsADgLOlD4PhRe+AKP8eIREQQHGKF3BYT8PSLP9KZD/dAQt5f/5sdv3az/59oargYvwB728I4d xJ5GfRSkoHof3CQ3rs8/29Osobjftwd1Rzm8dxUAwAj/FnwdQDj/RgB90AEDsAYbIHQJQHh94HwE 0AHDNwZytnhkkAMZUAZGsAbYJyOQ93jd13RPJ3XQVQPk14KaNW3W1j4aB1rb5n7vt2mmtwVoR3/0 l1Y14SCtB4RAaG5vpyEccif11QnLogPMsntQdxUQgAV6J3x9N3hAlwCiAHzM13wEEHTDNwBaNCPU Fwsc4A58AAFoOILZhzdsWC0agIJXoYIl5IJ0GFHmZxLoF0hXdmlNMAl9SHZlF3+ixoM9oHpmEoQO kohDiGrm1n9S//EKLBUyATgEhEaAkGeAWkh0MTYAG2AIWTgGPbYBE8iAXYiBiccCRHYEucBKbqAN jICGaTiCJbh9kfeGcFhsCIVQdbiLD3U1WheDtIIwXndlHjcJxlh6IXZ6JceDUkAO5BAFZqKI0rgH i9g2uWCEUQGJc9UDdtCNNcB7daIBkNc7UUh8ojAGa4Bn6vg7LRKBhXeBnygCMTYLOvAJQmAJQrAF 1AAB2AKL5ySLJWiC4uiGKdhgTUUIvJiQeTRlJZGHpkOMOuSHN1hNObiD9OeMbtADjaQT0iiNr6cb 1wgxjxiJZACANDcE4SiOj4d9EMAIYwB859giPVYPbwCKB7ZvzP93eBswBs3BSdwQJCgxDVuQBozQ j/6IfQYUkNu3lHBobISmkFAJQ1lXCQ6ZcewXkTcYYkLpaVGgCPPHg+TgBlLwChyZiA0yja7XetQI c1MhFT5gBp1gBiZ5kilZguTYksHwksxzKA0wAGOQAJhQQQ1QQQwQgV4ocM4xCzRACzmwDxo3CVGg AYzACEZgBC5wlEh5NwH5eG/4dE6XBFEZmuZzhw2pYet3lcaYlRXZlTxIDc5IDj3QCmYJMWXSkfl3 jSzWlk4EgNzYhAMoIit5l0bwAEsAMzTjAiFwDcp5Dd+AD9+QDdcgD8AwBgh4jqh4T3vQCLKDBk3A C1uQCZM5AJX/eZmwqIabaYLCMXnh2C8ZYADTcD7uqRkvkAGtEp8J0Z7vmR8vkJ8PYZ+RlgEZUFHV BowIo3EQ2QQGoA2qmYw66JVgGZbkIAVp5SANAhUVWpvTaKGvAIlv2QlHYABG4I0oqQHAGZx3yQgz sASwQDw0YyjJ8KIwihzTWXSiMHyJeQR7sA2iYQna4A4Z4AOTOZmVaZmYiZSbuX2Tl3AVcQBQgBDT MAHhEKVSGg4R8AJTeqVU+g/TQAJ1IKUTQAIHEQFYOqUvcAATgBBcUAAC8aRX+qUE8QJ1sAD8ORAZ MAH0iRAGsABe+gAEYQBdOqVQcAAEQQJjGg4vUBBcEKV8KhBi/1qohloQdXqnfnqlEbCoA9GoV1oH BgEF4VAHh1oQW/qn4eCmBxGpAvEA4cAFB8Gk/0Cojgqm/5ABmEqqCpGne0oQXKCqCLEFXPCndcAF W/ARWeOqgLoKXyd6iRoOq4CM0zAKo1ByitCarhmWY+kOohqlofAAtEkEhWoA0RKXPUAKUUoC35hw AFAABWBAI2gEfGAO7XAKyVqooLAB/dAHMGMIyDCmEVASncClXkoKWFCUQ+oCRlCe/1hAmhmQ4tiZ V1ERhIqn4VAAJDCxFOueFEsCenqxBvAPC1AHJGAABnAABRAOsNqnFxsOC3CxWxoOCLEACyAQBhCx FzuyLysQhP/6qwYRsxt7EKi6AAcQsiOrpjZLshebsQOxAF96sRM7pxlAshGgqTB7silLsXP6Dzo7 tErLqXI6ECirtCRgqacaDmYaAQbRsR8LtCR7EFfLsV0qqAXxsBlwsROQtBNLn3A6AQ8AskGrED37 syIbsUdbswYxDVDgsSDLpaEQrNWGtBRLBCQwsiRAjNoQDkQAD3VAkVopDuKwBQ5Kf9PqBhHaCtxK BKRLuutAuRYqDhNQuqzrDR3aCUYQDpdguSMKnMuwDCvJrg+gCUpgAuHQArpAAkRgDaSADMhwC6CQ vAQgCuEACpiwAecQDvBACtZgDaRLAnzwEeNQB0RwAGXwAOb/EA7LQALBILADW7CxiLDnKRzsqwEO y7JqGw47qxAPSxAHIL+QyhBpO6jwW7Y1u7YDEbOLSqiEOr8wi785u78DgapuW7/8e6cuyxBcOg1N C7ZcW7Lxu7MOHMB1QLYCocAJEcGoeqcCcb8GHKsQu7Mu+7RVu8ECEcEEMQ0dXBBWisF9CsL/wMAv LLgFgbRbACtbMAELUG0BMA4L4FlCQKjUsH46RAR10IrKqpVCKQ6DMH/RepEYmZGiGw4WaqHcqg1Q obkVmo2vsJs9cAl1wAAoQLIqKRy3awTuEA+j4AEVQAWu4LstEAMpIASNwA23SzM1+W/Q4LxYEL2Q cA/yEFMj/0ES9+sOEhALI6AOf0AHHsAKVEC+AkuwEIC+B3s3nqywnAkA75vCEty/QzsROOzCgXvA J/wPUODBD4u0cwrABAEFPDwQBaCrqjwN+wvDCjEBQuvLBIHDBbG2qpzDj/oPxAyp4cCnMozBx0zK HCunM8y//vu2dVC1rZrNB2HLB5HLO5zBnfcRMesOJLEA45CHK+EO4eAOYAfMxrgO0RCIQjkI0bCM rZnF5LDFXfwKIYK6KyDGULGhr4BecsmNwmAOvNcMy+AN4uiKoRAKveABCOAKvZAHvdC7vzsFf5AK 0hAA69AMIuBvNNq8AgcJ0AAJzvAJ26CjiwAEMqAJ4bAIsf9QCRJQCdUwBVSQBQggBlSgBOcQDAVL sOSZvp+8vqJMEdFMywjhwiMsEalsygQBw0w9zaecATgbwAgcw828EMfcy7dsEPf7qU9dEMus1Ros 1QPhsR9swwbRq7h8pgscDiS8EGsbwffrtqfcw7cMBULLzHo9ELxswdf81nI9MBPABX7ksu1zv36g bfeLAmO3CuGgDQwaDeJwxQ/qBpydCfy8Av4c2pQ7FesgDizGoR3KjajKBw5NqJFgALvrCsJgC0rg AVTQCzPQ03nwCxvNARKgCqpgxBjgAjTaAc1LKJAQDpEADtuQA5MgA44QBztA2RzwD5AsASPwBQKg BR5ACR7/cAZn8Aia8AB8gL5FrYYJu5mjfBBW+qn0K9UyjLfarBBR3bL/u9VrmtX1W8BoncCt/LZq HbNuGwEenBARINcCkdXD7NY3nNYt68FsrRB18NdWqtfx/QDzXcwIDMMsPBCqLMzKzOAh7t8LAeLh PM4fgc7nnM5dggKhMA5g1QTwMAGpmQJ1MApauQXiEA2s6bmuydmgy8+uQ9Ds/AD+DA/wQMboBa7d CA/CoAF1ggLQIAkZjQBKMAzDoAT+oARi4A8C4Ap3HA6nAAOeEAAj8AKSMAiNmXw12rwwEgnyuw1C AASHsAM7AAaLoAh1gLeKAAZgIAFxIAZs8AtisAQIkAhU/yAAeVAB/oC9/mjUR12C683eEeCylr4A FqzKGaCndRC3gZ0Q9X0QVI3f0/C0d+rAldrfGm7AD0Cxpy7VLwAFTerhl77C+dm0GFwAs77gtYrA 0QzD01AAtb4AuorM7v0PiU0Qm96pnp4Qd12zhOveH37LZ03MtNzqdXvifC0QA+OyIzEO+koNYDW5 RNCHY2cOUMCgVKzZUvC5nL3P3LpIBG0AET0VG0oE4lDag6C58JAG3LjG1jAEaXAAvRAKwtAFMzAD o2AMwlDRrnAKAiAAXO67S2APHxELL9APUCADI7AP8rAGIhAOpAAMAOAMjBAB7CAJKq/y8TAClcAB nN4N4//9BUugBb1wA1MgAInwCAJABWfACibgDw8QCY+O3kkJeZMOqns+7Jmu1gKRAXzK6Z9uEKFe 2DG7p1yq1xvMBbBa1QBspV46tFIKBS8QAWTv4Shb6xGQn4T6syD79lQv4qy814XdscNe7Ej79iB7 AHX99FHfqVNvtRvOwz5L96vM6wdh7VsN9lEq1yZu1SgeAC5LlYw7sY47sqvAYUQADQ/gDu5wAJ5/ ADm+71sgrVkMuj7ArWNvAPAABQZA0NyquYMw++LQ791oDcr6AF1gDh6gBK4wCv7gAUvA8GIg/IU+ 0f4QDeGwBDIgrEJwDKEABidwAj/QBo1AudyAAVKw55L/cAzRIAnRwA6rUAxaVwwcsApgoPx1oAmH MAUnYAUIwAZB7/Ns8AiAgADzIABnWKTqCxAAAPwjWNDgQYQkwiEkaCCcAYYHFUY0mCHCQ4r/wpGQ uJDhggUNwxUgQeLig2kGJxZUCNEhxIMvGa5UWJIElDowC4LMOCHcT6A/uRzcmFHmv5UIF0QgWDRi hqBRD1C0iDGmVZ4FI9RJmXRnSINOEYoteLQjwawHswb4F8BtAJCNGoEsVreYECEK/aCp5jPqz1HT tmwRN0iRFMTUqJEj58YxuVZEwhGhHKrOgVeZM4sTl9mHDzOdOvWwM8Tv32MzRgEaJsyfEkAzTnUR MwNe/7hNIwLEWgQ32qJFYQIFOrExQCM+4eic8ARkh4RFlWJNjyVEgjogMW63wGGPzrwrv1qc8lfI g75erFhV0AXBvXsG8eUDYDAwY0avBs1SzE9xQoGMyPrngXBSQgiKof4xq4BwXlDJo50mmGY/gqYJ 54GZPEpqGigkNCgthA640AASS1Qog7A4ouio/giqQ0UBDeIipxJLjGCC+/5D6CgQp6mDqf5A/AcK ABGCaqqDLMQwIY+EJIgLHNtq660JuAigkgXGqcQuvISYrBoRV3FnTHcOcEeyFwQbRJzDElPMMTcy gEyyIDLzJpQJvPHslcI86yQ00uwgkAsllNBECQ9cWf8gHCV6aUEYWxDoBZAuWnBFDCYeCaebWHjh QJtJxonGk1iYwWOXHcJ5J4dt3AmnhRN+AIGCHYBQhwMJRhhhEQnAAEKVNoSp4BQeenmEDQ/kmEIQ epaQA4EzWMmDkkjee08+bO/DD8KrdOKP24ycTPEgqJas6EKRvMUJRYLyy6AOLigkCAqwDioALK/e heLDehEqIMok4R13RataJNBBjVRkSMcdw0EyIid57PcfEQ8IcuIZDVSJK4boZehetCYmSEQD2Hor gJfkAmlLLr0koZoChGmiiUlqTiEFN+oIbItoxEHMzcbidGPOcDR75YU6QnnFh6X7/Ey0QIcwB5kq Wlj/ooxTxFiiC2iOEaAXSJU4ZewZxNBa00oWaQMFFLYYZxxPFhmBHxnUCccVB7YRsYUdQACCAmY4 OOCAD34AYhEFwPhBlT+OSW2TU2bwBQcwOKBHnxn0iSBaBOTwpz1rIcA2Pm2/jUheJmNSuKAXYhzY oALqQLjCA8zdz0coDOyvJqsOEnF1BdFFClyHivxH3H8sBL6g2F9niEVwFRS4qeVHbjCiCZgyYPnW l5cYoa24iF7Id5kyqPUEQxTQoSWR73ALgtzaYoJQKrly5ZYVcoeajWameZKbTcMcXOEZm4AGpwzI KTJF25OIzPEZH6wJgmboQaC0EY5RnGI8PDjFEpbQ/4tj1IEHo7CFLVYDCCZ0wYP20EQ4KpErIIxA FdFgxx9GAAZ+/GAE4ejCD/5wCuXsAAy7UMMJuqGLA9CBCG2QgCdGYENXeSAeKqgCDpjhgEl0gx5s qIAYTJAIOcBABWLwxwOMEDrRyad0EamJTWwyoZG4sSTeGp7vwlElE9UhdwFaHodeRKIHTKAO+ukd QZBWpBYtqpAGIdACpvIC8RmvPwRq3wTkWJJpKERjB2ndw1xXloIVyI1QCMcCNFbKS2IoAvtiY4FE hEcSkUCPm0xXyBDio58oRWQH0COGMsAgkTGylI+MZIQuyZEMCJIEg5HlBDLQiOOA5AVEKAkRGDQO NP8ohBwzqxkAUwBHlAxiApfQxCXMyYVLOCYDQ1ugZj7zinOE4xyfEcc4iWBOfKbBGsoZzxLo4KgW UGIGPOyCMerwiDyYIwJKGIUmYqEQxIHhA5NQRDTg1gYHUAAIEgjHJUZgDyCaQxOa6AJJNXGAbtDh jqMw0wGIUAdZyAEHIODACZhBDQlYIRHzoII/EKCGLeSUEgIQwxTOeK00MmCNz6vDXy40jdMEZWIH YGVF/gWUOhSAlgd6mEEy2dSfFIBdBEnmWAvygEFSrKoVmcAeI0LVh9xxdVT9mPkU4lQDRMB4H1EY FLpqJGcSJJB3/UkEzEWQi/yFK3U4bMAc9MvTZHX/q/8o65PSZxBe7tWyDHnBRahqSW3B1SGgZYlT w4GiacSOCzMqQBTe0ogCFCCxP7EkNaqhV/91E4DTmMY4iLCFS5gWBXFS4AOUxjQI+sAc8PhMcJ16 AHjAgwd0aEE8PgiCD8QhEMdQghgqYNqUhoIXihgBFjkwilFMogl/k8EHoPAALX5BGE6NhgL4gQJz RNYcMGDGCzxBjR+AAQwyoMIVHiEGQHxBFYYDhC+IagpGoBE+S6VwhY1iVgtXZHYZ5nCHPfxhEHfY ABgOcYlNHL8pvaUSK15xI1omhGrEuBrctFkAeTuYNilmMQhMIDl8EIQ6LS25yTXD00ZDmkwM4QV0 /+ABDhw1th2MwHAgkMENBHGKKfSCB8yYRDG2IENVqOJv3VAAB+IABE94ihkgcMAiPnCIOJxADTJo gwLmFrdJeIIfnmhCG/7gjhhIQBFAAIMfJjGNEYAABFaYgRaoAIgTbEERFLACD4ogCAFQogpGOCp8 RHdiUIda1KMmdalNfWpUo/hkJ5MLy+rSJRnP+H/e5K1gcOwmavC4x1vITCuG7INOgCbYwx5NJuyQ iTRsogVl4CAOWtACK4DBAWDwhCdO4AgrqKAXmT5cRoHgAAeoAA8x8ERNd5CKWKgDDDtwQBvkcAhP oAoE1wEDBRzQxB9QgAMAVIAEtjDejIJgEjbsBv8IYiCGRHhAEApIgQRA0AJfOAIIQJApJyDQ6Qmn WuMb53jHPf5xjZts1farRCNcfZdFwDjGufVmG3irilvjOmjqHNqPWyFkCA4b2KKBWtRisGxKtIAO m9iEICg3bQf8QQaH+EIcWqAFf8DqBsKRARBggAdYKMANJzhBDNpA3jZI4wv02MEHdsCMD7gZDOXl xQf+dm9V9FsRi9iCGyjghiaogwI3gIHnEjGDE9CsDV+4wS5+gARVOIIS7jgjxpUKcshHXvKTp3zH Rc7qkhfD1bCWMctpXWtbS1oKbZKCYhgjhZvj/Gk75znPkWyHF5ShCpvggSniUQaI46BvilMAEPD/ 0A0g3CAQS7hBGZZQBCv4DQZxqMIPOLCLMKgADCAAgwL+oIJDDPjMH5AAoX+QdhuOIBWLQPQI3MCL LXhC0E1wAzOsMAVGa4EHbZjEIn6Agx9MQwFNoEYYboADTuM0a6k8AixAAzxABGSIyzuZkmtAu7gL vFgEvoi13PqfFPCmm8nADJwGIAMy1QM21mu90bADO/AGKygDOjAFHMCaG2gBejAFEKiVH1AEs+OA NgABPJgCICgDAdCHePgCwguDKXA+FWA+dYCFAIOFONgBdYCBIpo3DtCojeIAAfuDRVAEAeM+RQgw RaiGP2CGKfgCHBADX5iCSYCxKeABIJiE/bMc/zkwBQO4uNBJQDqsQzu8Q1MzmRRziwY0uVbbEhd7 QCGAwC4RAjQwRENEA0VcRDRABUfMhSDwtZwTwdZDskx4AdqjBDoQwxYIhE6UA+qLIVXYwg/whG44 hCnYAV3QB304hS8oAxw4hCpQhw+QAWbIOlg4ATAIhEPoN1hgBhloNw5gBiD4Awn4gCrkhVT4gTJr AkXwBAVQgDbgADUogylogUSgByDghUbYAkfoxTYAlhMQhCKYAhQIwE7DQ3VcR3ZsR4pgCymJH8xb tdc6juOQC3zMRxcLxLrIgWLIAYBEhVxoBUk0MkrsgWKzgzTAAWfbhP+bgjJQgTIIBHpoNyBghv8/ +IOJ8xU8sIcfmIIiMIUyOAE6oASZcr5uYAYYcIAv2IVdcAR7eIE00DsbVAAZsDdpUMYRsD5ltDMp EIItUIAf2AJVoEYc2AUruAFm8IRKEIIYcAQKWAEJyLMfuAF6AEJ0lEN33Equ7Ep1FLk9pEd6hCay 1Ee58Md/FIKAXIFXKMgQrMQKMrYp2ARYXEFKkMj3k4MwUD8QYAZmrBUH4ACm+4EYOIRAgIH7c4RA sAJPgAVbhIURkIFdkIETeIBzIIIpUAMY8BUn3AV1GIEPoIAfuDezkyheiII6O7RuwIPkswI5oIBJ CIBpqLpFoJkR6AYwwIEiAIJuOMesDLUXAAn/4WwswcIQLtiwVJuQg+ACU2KeYBqQxjrO47mPCNCY BVCY7ckI6ZQR5IQryZI84QSJy2Kd8dSPCLhOA3kAkCBORlrPCgnPOtRDtwjLejTLs2wEgPxHgMwB NMgBgWzL5DrIChrQhVxBZ2sBZYkH11RKMJAAm0KzGPwDB+ibxowDFfgCB7ACw4wBBYgBm/IDP4MF GNgBIngHItiEMNgEB5ABOdBMHRpGmjrGenOAWFAEBfAEAOKAHbgBIJgCXWyCRkiBNqAGXkCDLaAA VJEDR/AEKkLHMwo1A4CCGiExpOCIBaAjVCsJtbiMCmkqNgKeNNGI+ygAJHkBnCgILmDPnaCj/yvF LClNHpCJvIcoEeRsiOd8lwfIK6Z4AL+iquoZkD6FAo6I0hI5QHiUT7FktXvMxxw4y7TkT0tAA1pA BSdAAgAFQQGNy0yIAYacLlPYBBwwBe6QARXYAQXghb/5gTZwDppyBBgAARigh0D4gh2wgjAIox+o AkdwhCooNxkIBDyABBOtAjWoAgX4gF0ARk8oSo36AF5wg+pLBSGIghtqgy1YzVT8AhAYgWJAgz5T hCaoBGpQAzmQgxMAgWlQgRtgBCflMJKYLAMQmV9Czyo9HoiYVxKYhgxYkjxtF/2AiX2F0wXQKt85 T63KAJDwloEtkgdgkAohgYFFERLggntRkf8HQBGPyKsFaKwHSJDVcqR5SaCKTYkHOIDrbNNpYE6I 9ZYJ2LAIQBF8JdkXqNgKqdiLzYADkC2RpVekWAqEgdgIQM7oyaSIVZCT5YJN6tgKWQgyHZnnbFqK CQktpUNETVR7tE+0BMj+VMRJrVQkyAVIvNS3HFCy9QYcgEge4CD4M4VA4FH+6reA+4NdOIRzldUd wL5AoMwyoIcb+AIwqIIwoAcYQNK+UwNYiAFO2IU4QIE2+IBZ4QAFkAY/4Ad1kIZi8AEJkIBWqARp eKI2aANstT5PaINGqAZViIWaEVc1KAIckKEUkAEYMIB2zbAMIAFLwrB4DRgS0Nh6vVIf2d3/8/QR gsiefzBTlVCR3I0tA4gt/biMvBKrhP0QtEIsAkGLCNgerqiJKLVSiFgIpMlTQa0IVoKCF5jY5JGQ PzrP45HSeIWIgc2r3nkBgPGq9A2JBehTxjqeAoBfEtkIlLCk5Q0JPt0eHBlg2yUK8LleWYKj641T hJBfidCsmQAQkAiH/DVA+aTP19LHfsSLHIhUR0QFJBhhJFiBFehAsR1bsq0gP1hBU6ADa3RIU5CD MrCHWVE/BzCVHzgBepCBL2jb7IgDbXUAJ5wCEFAHwIWBWYQBWJhbFOiGbogDPICBETAzZogBP3CA blADPNioGNQ3CVAAb3ODPwCBLyhGBegS/0WYjhQoBhAwhR5OAesDgi9AAXYNwA9Tz9VxCKAQYONx Ji290oYtCGe6UoQdpKltF+QNiQjgggzgrYqACfWs1w+JUgfhioVIJuZ5ABIoEk1uU6ZdEk02iNzR ZE0+gDT9Y4RFEkMGmAnQidxFiEEeXoRdkpIY5X945SgVLFWG2Mfq2V8Oi6CgLIApgDx1ZRLjkK6S Xyo9n8B6L2KuU5CrWrE0y1dTS/5UxBBGAq8t4RQ4YQ90y0wd0ExAAWcrAxjAAdrbBBVg3R1oA36A 2zXbYRuWgTCAAQVYzV34AAeYgjDQhQ9owiLiPj+ogiXkgBGABRBgPgVAgV3AgyooRmKVAf9YkACF vsWvi0IQ+INYyKgZ5LO7iIImiAVqGAE8eM0RmIQRONcLvWNO87CZ9Sv9mJhEvtJA3h6Fsek0vQkz 3bCpzV0zDQeZLojUIqUJkFrgudLVoquFiOUqTeSFAOXjiYrltJgiaVkusJicbl+0IJF6aVNDWiuW 2GqwnqOv9up2iQoDmIaLAC22lisEJqSg2N2zThJoZp2WpSybeOC8log/3bhD1eCrzUe7yIEuYcQQ FmESXoESRmGxjQLWQ0iyzQTKhsgpWEFla7I48D8QYKI2WARPYAYB2wEbngJeJcxDUAHlC4PkOwFd uGdYGLAqOIRdyDo/2IHvk4DbpgA/UAD/VfCDZnWzfDO0LeAAfvCDVJCADBgBRUjN3YixRQABj5SB EZiGFNhFe/Bh2cXjDDNZsJ5piUiflr1p8x3eF8gAIjGA1ZpfSs5dmJUl2CkAB8ndRO7qKOUCjvDe qiKJ8hZeqY6Ah8EwVAbwJ7mJTBLv4ISJKzXeefGWOjArMi3vXE5wRWbwIUFrpEgf1OIttEoTDped sOCkqkKRXZ6XDZPfwwokhKnd+h6Qvg7YApc8alZUDn6xRNRmR2yCbi5hcA4ygpxE1yPnTOiBDOCA aqA4U/hU3SvCQ0BMfmgDXgjtWjmBQLDQMEhWGAgDR/CbQPjnHfgCW1WBExiBGLDVXdDF/9k+gaxD gRNYXHVIhRgAxg9oAj8IsDTgBWlIBX5wgC0oBmMkymmoi0VoBCTghxOQAQloOCRYL3o4VxnwzZfO MBKQZqMll5xAChy56XeBiAMeEhw5gCqRCFOaBp6YAAxBGoOIAGTyGAnv6n+og7z2CNAygAeXpTQp gKGQaj6VWJEhJdbxmE3HdHt19fAlEG+B2PTkimA/4LLmCFMfkDkFi2Cn9dQCEKiaWWvv66ZACNBK pv7FkJtw5g3j08liJLdKnks3gMCKPLCs5kWVi2IIxEJE7BBuAhL+2m8Gspv78c+IArjsAco2tgxI gUpQBX4Yt8/sBhmwhym2qX7zhLPbgf842HKrjOjZhgEOcIAYUAMU8AQZyMwqOGJYqIIp9oO/DYND iAEyxwM14FB1+AIKwC7dPjtDS4Uo9IM/aIIPkKFJ4IVKaAIhCIAtYIY4kIEmABZFUAUVUIMvONdd QEco3SWfWAAHuWmKmfqf3RcLQc63tqSQkN878hawrxIcofW9atN/2fbiXZQJmAqT8AmClWqkaCqq T2CDeJGRwfphH/bgLKU3lZE6uN++BvVScpBmL15Sul8Mv/o7mgpSt2COeHy8D3FOWhS8j9JFqXut oGqw+onn7PxSKl6faHsZlxKrLUt8LGxCPEQcRwV7J+FcyPcO5HeDPDJNpWxvYEoJiAX/Vai/5oh5 CrAHHgCBHwjjswOCQ3cAe4iDzfyCOVOHl2/5xrw6GFAHBRh5w7V+FDgVWPAEToiDxfUEOFeDbiBo 0eaAKHcAfgCCU3UA5lYFXhACoK8EIIgDZlAA0La3EQACNQAIeyfkTDFg5OC/hAoXMmzo8CHEiBIn Uqxo8SLGjAmnGTCA8YHCCRk0kixp8iTKhAH+rWwZ4CXMRgEa0aRZrFGxYkJ2CkHjEw2qoEGREF2B ZEWQpK1etfLh1EenqJ16UO2R6Wombw4kLKrUJJanP4tGOACxQwUQEBLagKHwY8cJICoCVXEwJQ4M EB9g4P0BK1AYXUAcVLkRmIO6GDs4/3yQ4MetHwmKPvBzoIiXNzBg0vCS8oGCH0+TPoxQNSlnLCHF zI7YUo0DBRCTQOAJBEKOnCoHjaTs7fs38OC/F0QgsWCB8OTKl6tkyRIm9Jkza+LMqZPnT6BCiXJP sSJFUqZNn0qdSjWT1avePLX5UylWIyESWjfZwuyLCnttJPygAMSePSA4Qs8JFHyhxi477LCLGjCA IQNgujDzQxWAwfADhXjswoE0fkwIiyKpwMIMB6lgBsYIqQihiiL8/NEGL6kosEUblRRTiRCLSLGf FIv8MYInEnzgSBggOAAEDLsxtySTTTr50DQPkADSk1VaGVFLz0UnHXU2WYfdT0I1gf8Kd0aBF554 T0UhVVXpXeWGAgrYM8KNOLaRQiXVgIFHfjtIsINbeNgDYSAxAGFFGFN8wAEMeKCgjh+7xFGFJ0Bw AsMhujjwQRV4wPBBG4/t4EcbCnwAxgfqNJHGD5s1MRk/GajSmQSTNBFAJV7FMokqI3DQhidgGHkC IPSAMI0qIKCA0JXNOvsstNFK61CWW8Y0XU3WFZMDmD4JRSZ3SKSQS1JBiDeeD2tG1SZWQ7ihzg8g xMEPTry8p4oqizCTn1r9wQUCEIfEAYQnB8qgwJE/AONMGhzsAIsECsRwwsNtqDMiLKkoMiIIsEij yGOWNXHqCB/EIo06/HygQBMOzHj/K66KSLAFCGqooIAqFMQRiBqUhNGGKp7AYBBv0xp9NNJJK21R tdbK1OVNOfHUU5jblXlUuUG0srWabFrlphtugCADNWow00Qji6S2yFr8ORAHfyOMgCEI9qgggwyG VRHHDQkkQAABpQheSj0NcLLLIZx0iLE6+zTmiTe8SJOKZNIIkQoYkPPSgwMUfKBKE56UxstLlSgw ggKOqAHEJFvsQI8AAXqChAKe2MMDs0vrvjvvvTvZ9JZPQ31dt9oNFe5RZ6bZ9bpVtQsEBw548kMc DuAYC+mV8CIBEN3sAIYCFMx9ggxhOBIHhPQU8sQcuLg/R/ts5JOA4MB0zA8HIz7a/yGqaUySCmk+ IA1eZGI+ihCCNP7Aj1SoIgV/UMA0SNeISijCEwr4AjPAMAlPqMALgAABL9qACpqBgAfL8h0KU6jC FV4EeNERXra+VLxvNSFc3skaU56SLq+5KRND4EA3yAYGNdiDK5VAw0xyRQF7MCMO/eEHGNB3CBWA QAWFKEEJ2jePM1wBflj8ohbyIYoxtOEDIGAGLIBGGXWYLBUOqMwASeMJFUkjSH9oQgpU0YYmLCIA qlnEJGLhANTVDhC+oMcWpnEn29nthCx8JCQjyTsXvhBbMVTNTnKABqrRMFzfQUp4uOYUdZnnPOrp hkC2AIazgOEHqZlgrkYgAyAA4f97/AlQHGjzBCxqURImOAMrgomLL5ZADxfQhww+8AFmAKMN0qDM pmI0SFDFiB8KUEQxFKGABfJCFXFKwSL+EZ9K8GgED2IGD3xBgSYoIHMOoAcl7GGFokmynva8Z7Nc 4jRLVkdqU8tOUMbkyVycSWui3GHzTJmJDHzhCyD4kbBGAAIwxCKJ7wGDA+BCAQkwA2BAiMMueXmF eTziDL/4hQlMwIo5YFEPLjUmPUT3gUVMjh/SkEYsnOGJBdrKDUBSEeZK1k25neYfXimGBGIxjREw gxJx2MUu8PAFGTjCNkXQghxugAJ8crWrXgUOJa8Fter8E6BDqWF3QGmug5KyTVb/+eEuQFCq1hxM XusMQDECEIsH7cAeYODHvxwR0l3i4goI2OIvgIkLlhbzpS69AD1+4Id9OMMPYEiFM2KRiiClYpNb iMWdKLhNE21hRpOoxEuKEYtZKQIEYTAFCBbhADWYYheUwOoNCgGIQHjkq779LXAnEtaXwNBL/txJ dowHrjLhcGvj6YS6olCVVFCjG1OYggz+ILomAAGweFgd9mIRixEAIYo7AGwMYrCJLDS2BOzDBQKo 8IgKeIANjXXsBS6gh3KE4QOK4EQkOMGJNDQhqG5owv/44YktFENG/JDCrtbSBCHgyo9t2FXNTuCA WLihid04QSK0wIMQ3yAGwT0x/4qDO1wuDQ+T3epkd5DQXFFGASrr6kQGOLCINvyAGTFQweomESfN UGAHbOsK92iJAhREAhJ9OMcmHKuHJ4jBFVTIA5bzgIAn6De/Xs6vPiKRAEgYAhOYMEIavDECCahD CKGTgCdw6ob+HHgLI5BGE+yV10rMahIyEF+N9iMBVcQCCGEQRAsSIQgTp7jRjrbniotrXOJRzVuo aIIT0FqUghpUh9BdFzm68QNd6WsHRuJFLCK2Zk/sWG3j1UYkDNGBc/QhARt4wZcvwAZXeEAJWaYC Ffzx5XLkNxGusIAFDIEFRrjABQ1gADDgZKIgKPAPiljEqfihCNCOoA2TOG3pvP8dCwVIQAI3SSog KxGE+ThABVqYwqPjLW8Vrpifxp2aJqt2aSQ4Ia0FXQq61EWVOasDdYtYhBAm8YNF4Izha65RUl+S BixgwQUsEIUhxhACdRD7AuUoRBc8cOUK5KECwKZCIcqhcpWjwxWgsAAkONGABtxDHkeQBxwY0ANp VAIJMlPEFhbhBhRtgZ0j+HbE39OGGk0CkLFAwzR23IRKTIIrKZiEKUwx761zXWnDlYm9tVVWS19a 00S5YSgD/ukePHA/g+RFXn20gxE43JqgjcUiGMAIBgAADndodgiuIQEbsJwNHvBAyU1+8jywYeUq t4EhEpBxYCBCHjQABzhoQIP/JNwjE5Jr0R+kUYwtlDvPawkhOI2a6kCqLV9CIL23+cw2dUjgBPbo Ou5zDy19Oq1L/ZxapY2HaeStQK3OHSVCM4H0JrDl6JVYhCcowIz98GMtlSi3EbCgAc1rfhbyuAYx JOAFls9A5CXPA7A9MI88XMEG7ne/F7wBjPkDQwPcwDz+aaCDIZzsjRrzUcSEUK3IhwQIwT+oFt4l HGjBncxIAJ6owg+EASAcggK0ge5dIAY2SaRZkrZQmlkFlA2JS7lwzXisyZqkwtWt2cEdWSBhFGjN R1K1AQOIwPbl3+XtQSzwgxe4HzrE1+KhH+Kx3/vBnwTIwyzMnOXhnxKSQRNIr0HK0N64rcWOSZi3 hdMK5kQgpYC9SAMgTUMswIAA2MAuVKAqZKAZnuFv1JukkdXYKRcSaFoufJJSANwoQVcPKMKFqU0l TNAiVMNXHNmFGZEqMMAsaB7+EQM+bA8/UMAOuh8CKAGwYZnJId4ZJIIX7OAlegE/8MIncMP9fQIx fIIoiiI4HIEZeBOcIRi5SUATlBsglZsB5gh8CEEKxEITIFGvUIAcHEIgBMLRtSISBAQAOw== --_005_2DD56D786E600F45AC6BDE7DA4E8A8C1122068A1eusaamb107erics_-- From nobody Tue Mar 1 06:51:56 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D5A771A8BB0 for ; Tue, 1 Mar 2016 06:51:54 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CUykzaRF6KDN for ; Tue, 1 Mar 2016 06:51:49 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0122.outbound.protection.outlook.com [65.55.169.122]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E502B1A9027 for ; Tue, 1 Mar 2016 06:51:48 -0800 (PST) Received: from BY1PR0501CA0006.namprd05.prod.outlook.com (10.162.139.16) by BY1PR0501MB1605.namprd05.prod.outlook.com (10.160.203.154) with Microsoft SMTP Server (TLS) id 15.1.415.20; Tue, 1 Mar 2016 14:51:47 +0000 Received: from BN1BFFO11FD034.protection.gbl (2a01:111:f400:7c10::1:120) by BY1PR0501CA0006.outlook.office365.com (2a01:111:e400:4821::16) with Microsoft SMTP Server (TLS) id 15.1.427.16 via Frontend Transport; Tue, 1 Mar 2016 14:51:46 +0000 Authentication-Results: spf=softfail (sender IP is 66.129.239.19) smtp.mailfrom=juniper.net; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=juniper.net; Received-SPF: SoftFail (protection.outlook.com: domain of transitioning juniper.net discourages use of 66.129.239.19 as permitted sender) Received: from p-emfe01b-sac.jnpr.net (66.129.239.19) by BN1BFFO11FD034.mail.protection.outlook.com (10.58.144.97) with Microsoft SMTP Server (TLS) id 15.1.427.7 via Frontend Transport; Tue, 1 Mar 2016 14:51:46 +0000 Received: from magenta.juniper.net (172.17.27.123) by p-emfe01b-sac.jnpr.net (172.24.192.21) with Microsoft SMTP Server (TLS) id 14.3.123.3; Tue, 1 Mar 2016 06:51:39 -0800 Received: from eng-mail01.juniper.net (eng-mail01.juniper.net [172.17.28.114]) by magenta.juniper.net (8.11.3/8.11.3) with ESMTP id u21EpcD48418; Tue, 1 Mar 2016 06:51:38 -0800 (PST) (envelope-from mdb@juniper.net) Received: from eng-mail01.juniper.net (localhost [127.0.0.1]) by eng-mail01.juniper.net (Postfix) with ESMTP id ADF431144F; Tue, 1 Mar 2016 06:51:37 -0800 (PST) To: , From: "Mark D. Baushke" X-Phone: +1 408 745-2952 (Work) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha1; protocol="application/pgp-signature" Date: Tue, 1 Mar 2016 06:51:37 -0800 Message-ID: <84277.1456843897@eng-mail01.juniper.net> Sender: X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CPI:66.129.239.19; IPV:NLI; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(6009001)(2980300002)(189002)(164054003)(199003)(54356999)(50986999)(189998001)(76506005)(53416004)(5000100001)(15975445007)(77096005)(117636001)(87936001)(230783001)(6806005)(106466001)(1220700001)(1096002)(5001770100001)(586003)(2810700001)(19580395003)(229853001)(105596002)(11100500001)(92566002)(107886002)(5001960100003)(84326002)(2906002)(86362001)(5003600100002)(81156008)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY1PR0501MB1605; H:p-emfe01b-sac.jnpr.net; FPR:; SPF:SoftFail; MLV:sfv; MX:1; A:1; LANG:en; X-Microsoft-Exchange-Diagnostics: 1; BN1BFFO11FD034; 1:slJPd0Wv6Xf9cmXDiVmCFbRBWppEHgm2yh7VBM7LO0sUGoA/HMk+dEpABeiAEC/BBhlZUwVzsmKuwyY5lxpQ2nmbNUwNug2RA9XkupSkSUUyhEOgb4mfZMSfkdEl3VCPCDCZIKkW2PP2X0YDt+IEVH/wpxdHvOjp4FA0nHoKUvhyjWxrPvY53ekUZEQRXNcre3oh1ftibqAKwJ/c1/vVFTPbM28WS+hZNiyrCfowT+6kjzcE+DiZxxJwlddp8Tj3eeqh/MvtJoLj3gcZqjLbsqc4NKwR2/2/Vd2ql76pdEoVjY2rRXi7n0RxYQm084r1qLiBu21RSMGx55xMY/Fc+yfHHXzeBdHZk+/J+RbZujUnrRITczp7zIFbuOZLj/zx0RkLGcqcu9N7WVL+cv7Bhrf/uU8vRrerLZZxw4QxqnjMQAhNowjFjgU9mSWFTz1+s7HdsO3OFEymcj233AhD6g== X-Microsoft-Exchange-Diagnostics: 1; BY1PR0501MB1605; 2:yPvCAFOPTDRsLKh/MfoApq91gdzw3pdk6l5yvFiFND737sPtdD0HBqENeK0ZR51h4wVJna5LcOJbvgAjzp5nF0wWZ3Ma66bYnZOHf5EFuWE61nPQZKnBcVzGYMdLv20qj6pSHeZBphPkPFnb5t/2lg==; 3:8Lr+EeogEevkbnmonMp9DIxlBWz3hpD+DfjhT5pm9wLGXyamon7mrRRm8QZL6ZPAODqZL18WnkjabLG9gKCcE+j9XvlTClzLNbrv89XV3kYXIkeuFWSckwnN4+SkCd0F227uF3BFrqdCS5cC/FrsN/g6Akx5jWyYzhYHqqQMSZs=; 25:gLR2U8OQ1cSxL9/iuKr3Psb5AmzPEM77lnWBZBHZXv999y8CIrGJvrDTS6s0WHahKgpEYx9Its4gQ4DieYpwFnL9ms9mNp/cG9RJVwc4RvDn50CfDRyVdvyPwvCnbB2Vo4M/eMRRQ3w/r4uQBRYxKJ8ufDQWjcrN6zZxMKvGWf/eSmW6t9BpZ5pv5zJRvgnWCpsqG1E5M6v2RT/hyeMme60q+t/loPIxwSArVZ7sDNrOYVOk8AwMQiSZWnnHIkrnjBFJSM4Re6OVnwfPs6DU6RUw36jz49dvQP4/uEbJE9FjcNchHsVmRu+8dBv3w8wvAdOhwSIsZvk2N5FnM2B5Fw== X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY1PR0501MB1605; X-MS-Office365-Filtering-Correlation-Id: 85e49622-55bd-4794-ba14-08d341e10305 X-Microsoft-Exchange-Diagnostics: 1; BY1PR0501MB1605; 20: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 X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(601004)(2401047)(13024025)(8121501046)(13018025)(13015025)(13017025)(13023025)(5005006)(10201501046)(3002001); SRVR:BY1PR0501MB1605; BCL:0; PCL:0; RULEID:; SRVR:BY1PR0501MB1605; X-Microsoft-Exchange-Diagnostics: 1; BY1PR0501MB1605; 4:bRroAbkJTRomYj9tiZ0Il8uD1w06ofLKqCvK1h7hF6BAaMsR6+L+JARllxiOIBhgYJifRU5zfyJufENu6GzvZheA53ZsIAKBulD41v3xP8LoyU7wecsN4fv7Zi8bOHnqNbxp+IgdsnhW6cJ/r5FMrCtb1kMZXlDJI1yV/FJBk6tMPwIb0etM1RMHXuuIrrTs9l71yMeh8p1ywteYFM+oHPBJxs5jG3vXNRQsYUOQQlFDLHvlO7z82yFl+xTugbxpwzT1qS6PAX1WUhWwnAD49Fx0O/jaiavL3+sN8dynRerabZOrJvS8KSU8a4906UUpkENV/SzAfM0BsMAlmnz4xeDMsh0vn19XKDuW5oOpXpi44SVo/xwEeXYRRS3bWSsEQDH4nQ7ICZYxDQp5xmH3eu2CaAAVSTPS/n4VVvFdyZSPXaGCCK7MNUT5hHDqz5CS/y21FNLEVJvKD83mPwWixw== X-Forefront-PRVS: 086831DFB4 X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; BY1PR0501MB1605; 23:diT1AYYvRl7s7YWaMVlgYvRfq/VqP3d6LsTrUVp?= =?us-ascii?Q?YClDNxEsYpfOIkJk+wk0FzVvL/2nahlKgNb/uC/IsCRdjoWm63DR3lmUj2Ok?= =?us-ascii?Q?5TcoCdZemrSOqPWaDpr31kiYaScpCOYjsDeoLW7SYkb3k4skJg6VE3GU8+dS?= =?us-ascii?Q?jDbMn86bpsu04eXYTS5EgB0jdW7bejJiuBlb35rYAQWmmZs1f4Nu64hdQxrr?= =?us-ascii?Q?4N5CExenepwBdn20AfLe80k76TDXiqBYLtsDh5+JzymldmmXJNmQrwOt6N9q?= =?us-ascii?Q?8x6E+F5OQXFSgrvpL8oGmWsjDsq+k4HeGIdk1NGwYFZgSAIiI82lN0kAF9JM?= =?us-ascii?Q?/W1eCQvOS37CsXXVHWT4ryTT9j/orJdh1mJD8K0LkJf/LMM6eGdASDogblB+?= =?us-ascii?Q?18/iJZiL6fqvcc/dzfmpkWRuTEp0drATTDjFp9p3xl1L4nZCWeLun1FYppFR?= =?us-ascii?Q?usq9Zu946tVQdnc+GUoWO13MVyMzrKKzZLzg6heSyNBBr5rtN0/rs7KbOnCS?= =?us-ascii?Q?C3FvUHpP41tvFOQbQNXQOuX61jPEHZZ1sTZu79kS1aldUcl5GarG8Zfk88n5?= =?us-ascii?Q?6DgeuOYVTw3UUoEG77vfMSrEePHcIlzta7pjzOYF2irxvJsW1+Esfriu117p?= =?us-ascii?Q?rN60L25XB0u/A9l+9y2ynaTCOZld1reT8ZRIbv/qvX+mXQBSb+RNs9hyUA9R?= =?us-ascii?Q?tMCI/lcucCAX/TjC+nSLUmqpnuyxgi/YWHW8vRciQ48cJ7pDOdx89p6xdUTl?= =?us-ascii?Q?mXshQBCUFKynWdcJSi5WT+7TY1r6bWhyvFzJc8VOFjuLnw94QWO6pNHfHD7G?= =?us-ascii?Q?r5AeIbpi/uUnIyeyhTYcDQ801XfO2TwbPi7x9+y0VDaZadwmJ/dy8s5kJgDt?= =?us-ascii?Q?J570sXT0Tgt9II0N0i8AiNqBJU/YhiyN4WsbbKJQmITs51eJJ5TDLYC/K/7E?= =?us-ascii?Q?QV0/im2fvUvMXafvM3B/hUdftVU4Ppop0HCaUUC1fDGVVIrlAYmwWb4vxZlU?= =?us-ascii?Q?89UE=3D?= X-Microsoft-Exchange-Diagnostics: 1; BY1PR0501MB1605; 5:btUp7GD/AgytF6zBYblgMrEAQTDHrN3+OxWblbmLVfeONB6+VdLj9+OEoFCpoeEf6hyOsJ6QgoyMvWAl4GdIqInpKyOJeTR+7cOPPnCYNAoOlvsUViU6Gsazz8wNLUa60iRGG60TBS1UOlUuqLe5IQ==; 24:4FDcMAWlaxln5fXCxjObza77wT1FaJIPxO77Eprrm7LljVl64339ENMh7n2idk8oZg2XEDdtfmZxeQYcIeL62yM8rae7b3SnQxNSKQBbJjc= SpamDiagnosticOutput: 1:23 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-OriginalArrivalTime: 01 Mar 2016 14:51:46.0093 (UTC) X-MS-Exchange-CrossTenant-Id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=bea78b3c-4cdb-4130-854a-1d193232e5f4; Ip=[66.129.239.19]; Helo=[p-emfe01b-sac.jnpr.net] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY1PR0501MB1605 Archived-At: Subject: [Curdle] draft-baushke-ssh-dh-group-sha2-06 X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Mar 2016 14:51:55 -0000 --=-=-= Content-Type: text/plain All, I have updated draft-baushke-ssh-dh-group-sha2 to reference draft-josefsson-ssh-curves-04 and added curve448-sha512 to the list of key exchange methods. I have also added an acknowledgements section. All feedback is welcome. https://tools.ietf.org/html/draft-baushke-ssh-dh-group-sha2-06 Thanks, -- Mark --=-=-= Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (FreeBSD) iD8DBQFW1ax0DsmuPPFOO2cRAmc6AJwJUIBcOxWAvZyt09IhVZ+swBx8DwCcC1aH 36YXlz3TSTKcJ+cLxhR3fLM= =d3t2 -----END PGP SIGNATURE----- --=-=-=-- From nobody Tue Mar 1 09:03:55 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CAEAC1B2F75 for ; Tue, 1 Mar 2016 09:03:53 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.706 X-Spam-Level: X-Spam-Status: No, score=-2.706 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.006, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4wzB6hgIThZA for ; Tue, 1 Mar 2016 09:03:47 -0800 (PST) Received: from prod-mail-xrelay07.akamai.com (prod-mail-xrelay07.akamai.com [23.79.238.175]) by ietfa.amsl.com (Postfix) with ESMTP id 8EAA61B2FA0 for ; Tue, 1 Mar 2016 09:03:25 -0800 (PST) Received: from prod-mail-xrelay07.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id 115D6433432 for ; Tue, 1 Mar 2016 17:03:25 +0000 (GMT) Received: from prod-mail-relay10.akamai.com (prod-mail-relay10.akamai.com [172.27.118.251]) by prod-mail-xrelay07.akamai.com (Postfix) with ESMTP id E447443341F for ; Tue, 1 Mar 2016 17:03:24 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; s=a1; t=1456851804; bh=6Y9nVK2M0CAAyx2S6UYC48Unai1orgDOYlwkrTxKwc4=; l=3365; h=From:To:Date:From; b=tndObJcrpDgZ3Hkz6y1bJZ08jSy3PBi4yWMbz2pCr+b0aO+dAaNoA4zd9pyMJPLF1 VBbgWWTbClxQMSvpNR2Tw4WdNDk5y1NGf5vSaBy7t+Bm8vd4L/GRnioVi8P7/WcBpU KrmG20M7X7Z2wQpvvXU/mDHquI7BsgH6Z21n8Q8Y= Received: from email.msg.corp.akamai.com (ecp.msg.corp.akamai.com [172.27.123.34]) by prod-mail-relay10.akamai.com (Postfix) with ESMTP id E12641FC86 for ; Tue, 1 Mar 2016 17:03:24 +0000 (GMT) Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com (172.27.123.101) by usma1ex-dag1mb1.msg.corp.akamai.com (172.27.123.101) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Tue, 1 Mar 2016 12:03:24 -0500 Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com ([172.27.123.101]) by usma1ex-dag1mb1.msg.corp.akamai.com ([172.27.123.101]) with mapi id 15.00.1130.005; Tue, 1 Mar 2016 12:03:24 -0500 From: "Salz, Rich" To: "curdle@ietf.org" Thread-Topic: A note on adoption Thread-Index: AdFz3A5WkM0T2u6PREi9CscDT2jdCg== Date: Tue, 1 Mar 2016 17:03:24 +0000 Message-ID: <0881f7b2a40a440e89f1d5a1a6c44699@usma1ex-dag1mb1.msg.corp.akamai.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.113.142] Content-Type: multipart/alternative; boundary="_000_0881f7b2a40a440e89f1d5a1a6c44699usma1exdag1mb1msgcorpak_" MIME-Version: 1.0 Archived-At: Subject: [Curdle] A note on adoption X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 01 Mar 2016 17:03:53 -0000 --_000_0881f7b2a40a440e89f1d5a1a6c44699usma1exdag1mb1msgcorpak_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Since this is a new WG and definitely has some new participants, it's worth= pointing this out: Adopting a draft just means that the WG agrees it is a= good starting point. It does not mean "adopt and ratify" It means now th= e real work of establishing consensus, rather than individual author views. So if folks want to take out multiple curves, for example, that is entirely= a reasonable thing to work on. -- Senior Architect, Akamai Technologies IM: richsalz@jabber.at Twitter: RichSalz --_000_0881f7b2a40a440e89f1d5a1a6c44699usma1exdag1mb1msgcorpak_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Since this is a new WG and definitely has some new p= articipants, it’s worth pointing this out:  Adopting a draft jus= t means that the WG agrees it is a good starting point.  It does not m= ean “adopt and ratify”  It means now the real work of establishing consensus, rather than individual author views.=

 

So if folks want to take out multiple curves, for ex= ample, that is entirely a reasonable thing to work on.

 

-- 

Senior Architect, Akamai Technologies

IM: richsalz@jabber.at Twitter: RichSalz<= /p>

 

--_000_0881f7b2a40a440e89f1d5a1a6c44699usma1exdag1mb1msgcorpak_-- From nobody Wed Mar 2 11:32:40 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7FAF71B2E05 for ; Wed, 2 Mar 2016 11:32:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.007 X-Spam-Level: X-Spam-Status: No, score=-0.007 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.006, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1uUFjulWNgNg for ; Wed, 2 Mar 2016 11:32:37 -0800 (PST) Received: from skroderider.denisbider.com (skroderider.denisbider.com [50.18.172.175]) (using TLSv1.1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 197381B2E06 for ; Wed, 2 Mar 2016 11:32:09 -0800 (PST) X-Footer: ZGVuaXNiaWRlci5jb20= Received: from localhost ([127.0.0.1]) by skroderider.denisbider.com for simon@josefsson.org; Wed, 2 Mar 2016 19:32:08 +0000 Date: Wed, 2 Mar 2016 19:32:08 +0000 X-User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:44.0) Gecko/20100101 Firefox/44.0 Message-ID: <1784120660-3000@skroderider.denisbider.com> X-Priority: 3 Importance: Normal MIME-Version: 1.0 From: denis bider To: Simon Josefsson Content-Type: multipart/alternative; boundary="=-4Am42X05eb6agNaXe3K+" Archived-At: Cc: curdle@ietf.org, ietf-ssh@netbsd.org Subject: Re: [Curdle] draft-josefsson-ssh-curves-04 X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 Mar 2016 19:32:38 -0000 --=-4Am42X05eb6agNaXe3K+ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hello Simon, very nice. :-) Thank you! Work is currently underway to make safe curves available in the next Crypto= ++ version. Assuming that's ready in a reasonable timeframe, I intend to us= e it for both curve25519-sha256, and curve448-sha512, for our SSH Client an= d Server. If Crypto++ takes too long, I will look into alternative implementations. denis ----- Original Message ----- From: Simon Josefsson=20 Sent: Tuesday, March 1, 2016 04:08 To: ietf-ssh@netbsd.org ; curdle@ietf.org=20 Subject: draft-josefsson-ssh-curves-04 All, I have updated ssh-curves to use SHA-512 for Curve448 as requested by several people.=C2=A0 We are waiting for a Curve448 implementation to confi= rm that the description is correct.=C2=A0 Otherwise I am not aware of any open issues with the document.=C2=A0 All feedback is welcome. https://tools.ietf.org/html/draft-josefsson-ssh-curves-04 Thanks, /Simon = --=-4Am42X05eb6agNaXe3K+ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hello Simon,

very nice. :-) Thank you!
<= br>Work is currently underway to make safe curves available in the next Cry= pto++ version. Assuming that's ready in a reasonable timeframe, I intend to= use it for both curve25519-sha256, and curve448-sha512, for our SSH Client= and Server.

If Crypto++ takes too long, I will look into alternativ= e implementations.

denis


----- Original Message -----
= From: Simon Josefsson
Sent: Tuesday, March 1, 2016 04:08
To: ietf-ss= h@netbsd.org ; curdle@ietf.org
Subject: draft-josefsson-ssh-curves-04
All,

I have updated ssh-curves to use SHA-512 for Curve448 as = requested by
several people.  We are waiting for a Curve448 impleme= ntation to confirm
that the description is correct.  Otherwise I am= not aware of any open
issues with the document.  All feedback is w= elcome.

https://tools.ietf.org/html/draft-josefsson-ssh-curves-04
Thanks,
/Simon

= --=-4Am42X05eb6agNaXe3K+-- From nobody Thu Mar 3 00:42:37 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D5731A1B66 for ; Thu, 3 Mar 2016 00:42:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.551 X-Spam-Level: X-Spam-Status: No, score=-1.551 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_SE=0.35, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IF5CUNO2EZI3 for ; Thu, 3 Mar 2016 00:42:34 -0800 (PST) Received: from duva.sjd.se (duva.sjd.se [IPv6:2001:9b0:1:1702::100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4AF091A1B69 for ; Thu, 3 Mar 2016 00:42:33 -0800 (PST) Received: from latte.josefsson.org ([155.4.17.2]) (authenticated bits=0) by duva.sjd.se (8.14.4/8.14.4/Debian-4) with ESMTP id u238gE8V016436 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=NOT); Thu, 3 Mar 2016 09:42:15 +0100 From: Simon Josefsson To: denis bider References: <1784120660-3000@skroderider.denisbider.com> OpenPGP: id=54265E8C; url=http://josefsson.org/54265e8c.txt X-Hashcash: 1:22:160303:ietf-ssh@netbsd.org::3vNW7Py1xeAPdhgX:5Tio X-Hashcash: 1:22:160303:curdle@ietf.org::dcog+g2qR4pZgiA4:Fvy+ X-Hashcash: 1:22:160303:ietf-ssh3@denisbider.com::OCVYwX24qoBFMNDm:MSmh Date: Thu, 03 Mar 2016 09:42:13 +0100 In-Reply-To: <1784120660-3000@skroderider.denisbider.com> (denis bider's message of "Wed, 2 Mar 2016 19:32:08 +0000") Message-ID: <87r3fsrlzu.fsf@latte.josefsson.org> User-Agent: Gnus/5.130014 (Ma Gnus v0.14) Emacs/24.4 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Virus-Scanned: clamav-milter 0.98.7 at duva.sjd.se X-Virus-Status: Clean Archived-At: Cc: curdle@ietf.org, ietf-ssh@netbsd.org Subject: Re: [Curdle] draft-josefsson-ssh-curves-04 X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2016 08:42:36 -0000 --=-=-= Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable denis bider writes: > Hello Simon, > > very nice. :-) Thank you! > > Work is currently underway to make safe curves available in the next > Crypto++ version. Assuming that's ready in a reasonable timeframe, I > intend to use it for both curve25519-sha256, and curve448-sha512, for > our SSH Client and Server. > > If Crypto++ takes too long, I will look into alternative implementations. Thanks. The other SSH implementation that considered Curve448 decided, after looking into it, to postpone it due to lack of suitable Curve448 implementation. If you manage to complete an implementation and ship it in some well known SSH implementation, we could keep the description. Otherwise I'm inclined to remove Curve448 from ssh-curves if nobody is looking to implement. I prefer descriptive standards over prescriptive. Especially related to crypto where the devil is always in the details, and you won't notice the details until you implement it. It can always be done later when there is sufficient groundwork to motivate it. Right now that is long overdue for Curve25519 but far from the case for Curve448. So coupling them comes with a high cost. /Simon > denis > > > ----- Original Message ----- > From: Simon Josefsson=20 > Sent: Tuesday, March 1, 2016 04:08 > To: ietf-ssh@netbsd.org ; curdle@ietf.org=20 > Subject: draft-josefsson-ssh-curves-04 > > All, > > I have updated ssh-curves to use SHA-512 for Curve448 as requested by > several people.=A0 We are waiting for a Curve448 implementation to confirm > that the description is correct.=A0 Otherwise I am not aware of any open > issues with the document.=A0 All feedback is welcome. > > https://tools.ietf.org/html/draft-josefsson-ssh-curves-04 > > Thanks, > /Simon > --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCAAGBQJW1/jlAAoJEIYLf7sy+BGda7AIAKyLSGqBzY18pFQZ64EXwhaD cD3ELS4kBIxhG4WluKYZGH+OzeOrXeGJrYV8KqG98IU+7hKWkyduIRKEfrHKmVsr mSLIZiu7YPP5mi558uXs79aUcO4RS5pIjA6Q9q9nZ0bjelByNXZJFujFIKCJfJCC O/40Yy45LTWlZysiqDso3k0+7aKYV4qWLf3EBFCeDdrKfITHCFs7OPsfC6ApM+sV DZsVWmhRbZ9c+9NJG3lv8AgIollsnfycFXQTqr1Tc2qLISSO0mzhVZPvMgefkqhf jiao6ki3BiZ8jKgBlKUTVPBzHwi05rHezhOUroKeiEiUU3YNX1INHSUcW7SwWQQ= =2AbH -----END PGP SIGNATURE----- --=-=-=-- From nobody Mon Mar 7 08:05:33 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 344DF1B435A; Mon, 7 Mar 2016 08:05:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.277 X-Spam-Level: X-Spam-Status: No, score=-1.277 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, FM_FORGED_GMAIL=0.622, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fsMEKBbhOeSW; Mon, 7 Mar 2016 08:05:28 -0800 (PST) Received: from mail-wm0-x22a.google.com (mail-wm0-x22a.google.com [IPv6:2a00:1450:400c:c09::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 113541B437A; Mon, 7 Mar 2016 08:05:28 -0800 (PST) Received: by mail-wm0-x22a.google.com with SMTP id n186so93022070wmn.1; Mon, 07 Mar 2016 08:05:27 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:sender:date:message-id:subject:from:to:cc; bh=SackRSKabWv573g2Fkl7dFbMAUFqQICdgYsl2dmq5Rc=; b=pzpGREg/PSyT6N/2BVgiWxO1KO+0nkzgHFT3I/PwTbOTKcR1tqYJo7yWXedoRw3fPO IaZ2AjQko1ib1WEzlKg3C0iDoYd5ArddjS9IyVgmo9r1ZULiekQJgjzptLUHnZW7FVY0 L4IkMhaXotc38zBZ+l5sHeO7oBahkv8rhd8UBIoYNa/B7AWG1S07ZkWaQnJbJA9w7fXY wbwwS4s1Xk5V5IGGiGB6jaR4BDH3+/vojjFwgBLbo2qetb19sYhrWl249rn1ftT3lL2/ 3tuIcxTyFH+lJkXQHl6gWtOpqe84MbNpQlhFneYMBskR6n0uvXV84JliKS2D8utDTAlb 9FNw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:sender:date:message-id:subject:from :to:cc; bh=SackRSKabWv573g2Fkl7dFbMAUFqQICdgYsl2dmq5Rc=; b=dFVuHTI/7M1NJyQLst2V0v8EsyHv+FOBIXu7QnVlJfHS0lpRi/qy/aFmXZGG3MQiU7 wZe1xrlw1UqfIeSm8flrih4/WD46W+LoaC5x4cte6oO64zXZECzMsMxd6flNbgqNFG/1 A/A0blZ4NKcGf7gB4kU0Nt7aO61gvN9ZsqrQRwL0/8IsQiZRsR2Ch8qWaXIMA4uFKpIE IgxRQbiPzp8srJMz0p66hFaJX3ksnjFpzeuwZJ1db13/h0aa82RF48eoHLnTjfA+yJul ca77Rlz208zIM/i5px4Jwb4oVCtRu8I2jZUgwvBjmuKWyOEsEEYbuocBPPdmR0A6WsJl OhiA== X-Gm-Message-State: AD7BkJIXeOgMo/l54goiEso5KUAVIXrg8Ry6yK1pKbvqNGyN1MmPwioi4JoPXW5JfduqwnUmfTXaW3Z4ObxK7g== MIME-Version: 1.0 X-Received: by 10.194.3.110 with SMTP id b14mr24098787wjb.116.1457366726617; Mon, 07 Mar 2016 08:05:26 -0800 (PST) Sender: mglt.ietf@gmail.com Received: by 10.194.78.199 with HTTP; Mon, 7 Mar 2016 08:05:26 -0800 (PST) Date: Mon, 7 Mar 2016 16:05:26 +0000 X-Google-Sender-Auth: v9P2l1CTaJvUMbge450sZTJblVw Message-ID: From: Daniel Migault To: curdle@ietf.org Content-Type: multipart/alternative; boundary=047d7b33dc500c315f052d77a2e8 Archived-At: Cc: curdle-chairs@ietf.org Subject: [Curdle] Submit adopted WG draft before dead line. X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Mar 2016 16:05:32 -0000 --047d7b33dc500c315f052d77a2e8 Content-Type: text/plain; charset=UTF-8 Hi, Although documents have been approved as WG document, some of them are still missing the WG document page. Please update your document by changing the name of it and submit it before the dead line of next IETF at BA. 2016-03-21 (Monday): Internet Draft submission cut-off (for all drafts, including -00) by UTC 23:59, upload using IETF ID Submission Tool. For those that are new, in order to make your document a WG doc document, you are expect to change it name so its starts with: draft-ietf-curdle-. BR, Rich and Daniel --047d7b33dc500c315f052d77a2e8 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable

Hi,

=C2=A0

=

Although documents have been approved as = WG document, some of them are still missing the WG document page. Please update your document= by changing the name of it and submit it before the dead line of next IETF at = BA.

=C2=A0

=

2016-03-21 (Monday): Internet Draft submission cut-off (for all drafts, including -00) by UTC 23:59, upload using IETF ID Submission Tool.


For those that are new, in order to= make your document a WG doc document, you are expect to change it name so its starts with:

=C2=A0=C2=A0=C2=A0 draft-ietf-curdle-<your draft name>.

=C2=A0

BR,

Rich and Daniel

--047d7b33dc500c315f052d77a2e8-- From nobody Tue Mar 8 00:25:44 2016 Return-Path: X-Original-To: curdle@ietf.org Delivered-To: curdle@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 1F5ED12D537; Tue, 8 Mar 2016 00:25:38 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.15.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160308082538.17314.56028.idtracker@ietfa.amsl.com> Date: Tue, 08 Mar 2016 00:25:38 -0800 Archived-At: Cc: curdle@ietf.org Subject: [Curdle] I-D Action: draft-ietf-curdle-ssh-curves-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Mar 2016 08:25:38 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CURves, Deprecating and a Little more Encryption of the IETF. Title : Secure Shell (SSH) Key Exchange Method using Curve25519 and Curve448 Authors : Aris Adamantiadis Simon Josefsson Filename : draft-ietf-curdle-ssh-curves-00.txt Pages : 6 Date : 2016-03-08 Abstract: How to implement the Curve25519 and Curve448 key exchange methods in the Secure Shell (SSH) protocol is described. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-curdle-ssh-curves/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-curdle-ssh-curves-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Mar 8 00:44:36 2016 Return-Path: X-Original-To: curdle@ietf.org Delivered-To: curdle@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 337F012D56A; Tue, 8 Mar 2016 00:44:33 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.15.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160308084433.17314.80221.idtracker@ietfa.amsl.com> Date: Tue, 08 Mar 2016 00:44:33 -0800 Archived-At: Cc: curdle@ietf.org Subject: [Curdle] I-D Action: draft-ietf-curdle-ssh-kex-sha2-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Mar 2016 08:44:33 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CURves, Deprecating and a Little more Encryption of the IETF. Title : Key Exchange Method Updates for Secure Shell (SSH) Author : Mark D. Baushke Filename : draft-ietf-curdle-ssh-kex-sha2-00.txt Pages : 8 Date : 2016-03-07 Abstract: This document deprecates some previously specified Key Exchange Method algorithm names as well as defining a few added Modular Exponential (MODP) Groups for the Secure Shell (SSH) protocol. It also updates [RFC4253], [RFC4419], [RFC4462], and [RFC5656] by specifying the set key exchange algorithms that currently exist and which ones MUST, SHOULD, MAY, and SHOULD NOT be implemented. New key exchange methods use the SHA-2 family of hashes. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-curdle-ssh-kex-sha2/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-curdle-ssh-kex-sha2-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Mar 8 05:59:26 2016 Return-Path: X-Original-To: curdle@ietf.org Delivered-To: curdle@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id D8DB212D71E; Tue, 8 Mar 2016 05:59:14 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.15.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160308135914.28215.56842.idtracker@ietfa.amsl.com> Date: Tue, 08 Mar 2016 05:59:14 -0800 Archived-At: Cc: curdle@ietf.org Subject: [Curdle] I-D Action: draft-ietf-curdle-dnskey-ed448-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Mar 2016 13:59:15 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CURves, Deprecating and a Little more Encryption of the IETF. Title : Ed448 for DNSSEC Authors : Ondrej Sury Robert Edmonds Filename : draft-ietf-curdle-dnskey-ed448-00.txt Pages : 7 Date : 2016-03-08 Abstract: This document describes how to specify Ed448 keys and signatures in DNS Security (DNSSEC). It uses the Edwards-curve Digital Security Algorithm (EdDSA) with the Ed448 parameter choice. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-curdle-dnskey-ed448/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-curdle-dnskey-ed448-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Mar 8 22:16:50 2016 Return-Path: X-Original-To: curdle@ietf.org Delivered-To: curdle@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 49AE512DEE9; Tue, 8 Mar 2016 22:16:49 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.15.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160309061649.28334.40857.idtracker@ietfa.amsl.com> Date: Tue, 08 Mar 2016 22:16:49 -0800 Archived-At: Cc: curdle@ietf.org Subject: [Curdle] I-D Action: draft-ietf-curdle-ssh-kex-sha2-01.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Mar 2016 06:16:49 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CURves, Deprecating and a Little more Encryption of the IETF. Title : Key Exchange Method Updates for Secure Shell (SSH) Author : Mark D. Baushke Filename : draft-ietf-curdle-ssh-kex-sha2-01.txt Pages : 8 Date : 2016-03-07 Abstract: This document deprecates some previously specified Key Exchange Method algorithm names as well as defining a few added Modular Exponential (MODP) Groups for the Secure Shell (SSH) protocol. It also updates [RFC4253], [RFC4419], [RFC4462], and [RFC5656] by specifying the set key exchange algorithms that currently exist and which ones MUST, SHOULD, MAY, and SHOULD NOT be implemented. New key exchange methods use the SHA-2 family of hashes. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-curdle-ssh-kex-sha2/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-curdle-ssh-kex-sha2-01 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-curdle-ssh-kex-sha2-01 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue Mar 8 22:27:31 2016 Return-Path: X-Original-To: curdle@ietf.org Delivered-To: curdle@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A15C12DEF0; Tue, 8 Mar 2016 22:27:28 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.15.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160309062728.15032.32255.idtracker@ietfa.amsl.com> Date: Tue, 08 Mar 2016 22:27:28 -0800 Archived-At: Cc: curdle@ietf.org Subject: [Curdle] I-D Action: draft-ietf-curdle-ssh-kex-sha2-02.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Mar 2016 06:27:28 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CURves, Deprecating and a Little more Encryption of the IETF. Title : Key Exchange Method Updates for Secure Shell (SSH) Author : Mark D. Baushke Filename : draft-ietf-curdle-ssh-kex-sha2-02.txt Pages : 8 Date : 2016-03-08 Abstract: This document deprecates some previously specified Key Exchange Method algorithm names as well as defining a few added Modular Exponential (MODP) Groups for the Secure Shell (SSH) protocol. It also updates [RFC4253], [RFC4419], [RFC4462], and [RFC5656] by specifying the set key exchange algorithms that currently exist and which ones MUST, SHOULD, MAY, and SHOULD NOT be implemented. New key exchange methods use the SHA-2 family of hashes. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-curdle-ssh-kex-sha2/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-curdle-ssh-kex-sha2-02 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-curdle-ssh-kex-sha2-02 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Mar 10 01:14:25 2016 Return-Path: X-Original-To: curdle@ietf.org Delivered-To: curdle@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id CD43112D5EE; Thu, 10 Mar 2016 01:14:21 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.16.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160310091421.11180.73355.idtracker@ietfa.amsl.com> Date: Thu, 10 Mar 2016 01:14:21 -0800 Archived-At: Cc: curdle@ietf.org Subject: [Curdle] I-D Action: draft-ietf-curdle-rsa-sha2-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Mar 2016 09:14:22 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CURves, Deprecating and a Little more Encryption of the IETF. Title : Use of RSA Keys with SHA-2 256 and 512 in Secure Shell (SSH) Author : Denis Bider Filename : draft-ietf-curdle-rsa-sha2-00.txt Pages : 6 Date : 2016-03-10 Abstract: This memo defines an algorithm name, public key format, and signature format for use of RSA keys with SHA-2 512 for server and client authentication in SSH connections. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-curdle-rsa-sha2/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-curdle-rsa-sha2-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Mar 10 01:15:03 2016 Return-Path: X-Original-To: curdle@ietf.org Delivered-To: curdle@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 8905112D5BE; Thu, 10 Mar 2016 01:15:01 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.16.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160310091501.29551.4572.idtracker@ietfa.amsl.com> Date: Thu, 10 Mar 2016 01:15:01 -0800 Archived-At: Cc: curdle@ietf.org Subject: [Curdle] I-D Action: draft-ietf-curdle-ssh-ext-info-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Mar 2016 09:15:01 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CURves, Deprecating and a Little more Encryption of the IETF. Title : Extension Negotiation in Secure Shell (SSH) Author : Denis Bider Filename : draft-ietf-curdle-ssh-ext-info-00.txt Pages : 9 Date : 2016-03-10 Abstract: This memo defines a mechanism for SSH clients and servers to exchange information about supported protocol extensions confidentially after completed key exchange. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-curdle-ssh-ext-info/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-curdle-ssh-ext-info-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Mar 10 08:49:35 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4E29B12D716 for ; Thu, 10 Mar 2016 08:49:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xRoW4B9-NQqp for ; Thu, 10 Mar 2016 08:49:33 -0800 (PST) Received: from mail.proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 002E912D715 for ; Thu, 10 Mar 2016 08:49:32 -0800 (PST) Received: from [10.32.60.127] (50-1-98-216.dsl.dynamic.fusionbroadband.com [50.1.98.216]) (authenticated bits=0) by mail.proper.com (8.15.2/8.14.9) with ESMTPSA id u2AGnV0A024779 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Thu, 10 Mar 2016 09:49:32 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) X-Authentication-Warning: mail.proper.com: Host 50-1-98-216.dsl.dynamic.fusionbroadband.com [50.1.98.216] claimed to be [10.32.60.127] From: "Paul Hoffman" To: curdle@ietf.org Date: Thu, 10 Mar 2016 08:49:31 -0800 Message-ID: In-Reply-To: <20160310091421.11180.73355.idtracker@ietfa.amsl.com> References: <20160310091421.11180.73355.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Mailer: MailMate (1.9.3r5187) Archived-At: Subject: Re: [Curdle] I-D Action: draft-ietf-curdle-rsa-sha2-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Mar 2016 16:49:34 -0000 On 10 Mar 2016, at 1:14, internet-drafts@ietf.org wrote: > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > This draft is a work item of the CURves, Deprecating and a Little more > Encryption of the IETF. > > Title : Use of RSA Keys with SHA-2 256 and 512 in > Secure Shell (SSH) > Author : Denis Bider > Filename : draft-ietf-curdle-rsa-sha2-00.txt > Pages : 6 > Date : 2016-03-10 > > Abstract: > This memo defines an algorithm name, public key format, and signature > format for use of RSA keys with SHA-2 512 for server and client > authentication in SSH connections. The chairs (well, a chair) asked me to bring this discussion here. 1) Why is this draft even in this WG? It doesn't seem to be covered by the charter, which is all about the new curves. 2) If for some reason we went to keep this in the WG, it should be renamed to include "-ssh" in the file name so that people are clear it has nothing to do with the other protocols that are being dealt with here. --Paul Hoffman From nobody Thu Mar 10 09:48:35 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B56D212DB1C for ; Thu, 10 Mar 2016 09:48:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NKx9hVdVZAyD for ; Thu, 10 Mar 2016 09:48:32 -0800 (PST) Received: from mail-wm0-x235.google.com (mail-wm0-x235.google.com [IPv6:2a00:1450:400c:c09::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 491F912DB69 for ; Thu, 10 Mar 2016 09:48:03 -0800 (PST) Received: by mail-wm0-x235.google.com with SMTP id l68so38803682wml.0 for ; Thu, 10 Mar 2016 09:48:03 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=ZGyo02vlYPEUJNqfLKa02ks0NFjwCnZu8cOBVxVeNHA=; b=ADnqwSHv0LxlXH65jugTINkFRUfsMn7sOMZeLOyiGjjTO9AyK6A1VazSp99EKUFURi zusDcK/nNFjCS2gz4inwfuzUAqZpm5XICzEkPracTu8BBtaLve3Im+8zTkK03vus0yOx VxN9watg0cLoptaNR7NqKYkpMUXYtiur3Cqwk4RWx9RK9Yoe9gWIYcSWpGwird2ux93h m6lmz+jHFym00a8b1Fz2XVG7Rt5lsTr0hUjMhPTHrTfbo6OATTXCINi3GnsCKS+PopXT WcQXOkv42WUp/M//M8i+7ktODHJPAQDP1jmPCsIblFo3tC+HcsjCxCp7IbKgtyU0zmOf KZ/A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=ZGyo02vlYPEUJNqfLKa02ks0NFjwCnZu8cOBVxVeNHA=; b=QVZj+CLUxrHwBd74hImC71wNw+tH9CVrGh7u+JzUQA2TgWd+c2tiGoSV3MCa0cSwG7 URUqtq0g+hwbKyP3qMzJt4bWzWX6Zn0MYOhJoumC5LlTrCAwt0OC6phnEOg8L82BT4a5 i34Vtw7ot2A8qFaZ1jJHKkDYbAKv1Oz4KN0HxqwqwZgcXgeY6/wjCVEwOn4iRc9mpFlY 5vvnIBnQElLvkvTAP58zaAvuQNvnGuBT4RW3leuKUGhbZqDvjyzFPIMKYTnjdb5u91pG G0D6/NxRLFyNj8BgNcX0NUEKVfVwbTAdx4kbRKvxBJbLB3IIuI/5JtCvCYpGqCn6s6id Sq3Q== X-Gm-Message-State: AD7BkJImBQwZBvH++/NyRSeOHAaDtJ7HfsSfm2DEgj5AtSgqBvZUQfxVszMmG719zbWpjA== X-Received: by 10.195.12.113 with SMTP id ep17mr5193278wjd.102.1457632081868; Thu, 10 Mar 2016 09:48:01 -0800 (PST) Received: from [192.168.1.13] ([46.120.13.132]) by smtp.gmail.com with ESMTPSA id ys9sm4526694wjc.35.2016.03.10.09.48.00 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Thu, 10 Mar 2016 09:48:01 -0800 (PST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 9.2 \(3112\)) From: Yoav Nir In-Reply-To: Date: Thu, 10 Mar 2016 19:47:59 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: <2CBB4011-12E0-45A6-B074-9178A70B7DDD@gmail.com> References: <20160310091421.11180.73355.idtracker@ietfa.amsl.com> To: Paul Hoffman X-Mailer: Apple Mail (2.3112) Archived-At: Cc: curdle@ietf.org Subject: Re: [Curdle] I-D Action: draft-ietf-curdle-rsa-sha2-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Mar 2016 17:48:33 -0000 Well, I=E2=80=99m not involved with this draft or with SSH in any way, = but=E2=80=A6 On 10 Mar 2016, at 6:49 PM, Paul Hoffman wrote: > On 10 Mar 2016, at 1:14, internet-drafts@ietf.org wrote: >=20 >> A New Internet-Draft is available from the on-line Internet-Drafts = directories. >> This draft is a work item of the CURves, Deprecating and a Little = more Encryption of the IETF. >>=20 >> Title : Use of RSA Keys with SHA-2 256 and 512 in = Secure Shell (SSH) >> Author : Denis Bider >> Filename : draft-ietf-curdle-rsa-sha2-00.txt >> Pages : 6 >> Date : 2016-03-10 >>=20 >> Abstract: >> This memo defines an algorithm name, public key format, and signature >> format for use of RSA keys with SHA-2 512 for server and client >> authentication in SSH connections. >=20 > The chairs (well, a chair) asked me to bring this discussion here. And yet the chairs (well, a chair, not necessarily the same one) = approved this draft for submission. > 1) Why is this draft even in this WG? It doesn't seem to be covered by = the charter, which is all about the new curves. I guess this falls under the =E2=80=9Ca Little more Encryption=E2=80=9D = part. More seriously, we have no PKIX and no SSH groups and people see = this group as a catch-all.=20 >=20 > 2) If for some reason we went to keep this in the WG, it should be = renamed to include "-ssh" in the file name so that people are clear it = has nothing to do with the other protocols that are being dealt with = here. Sure. RSA with SHA2 has been done for over a decade in PKIX, IKE, and = TLS. I=E2=80=99m rather surprised it=E2=80=99s new to SSH. Yoav From nobody Thu Mar 10 09:55:23 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8E27212DB20 for ; Thu, 10 Mar 2016 09:55:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.702 X-Spam-Level: X-Spam-Status: No, score=-2.702 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f7bRcxT7Ddfd for ; Thu, 10 Mar 2016 09:55:21 -0800 (PST) Received: from prod-mail-xrelay07.akamai.com (prod-mail-xrelay07.akamai.com [23.79.238.175]) by ietfa.amsl.com (Postfix) with ESMTP id 10AC612D8C1 for ; Thu, 10 Mar 2016 09:55:20 -0800 (PST) Received: from prod-mail-xrelay07.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id 0AE38433419; Thu, 10 Mar 2016 17:55:20 +0000 (GMT) Received: from prod-mail-relay11.akamai.com (prod-mail-relay11.akamai.com [172.27.118.250]) by prod-mail-xrelay07.akamai.com (Postfix) with ESMTP id E8BC2433407; Thu, 10 Mar 2016 17:55:19 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; s=a1; t=1457632519; bh=yawCqkfjVoXXgqiDo+sQkqGdOGCU0tIbazVgbXJBcMo=; l=300; h=From:To:CC:Date:References:In-Reply-To:From; b=zH6mbzp2C0QbFX8xdaTUoAMO7lcjTxef8YfQ1aLH7Bf5/6dDCDPduRyLj6Ci2SaH3 HNwLiYQ4aOgMDRRkM0gyZVlctq5NTIKYhkpupUCBPFgRlaqR0gom/96uPcyUu4WYYE fKJG357Rj67z7wozn8sX6IwSjb3zcVU/KjXzHxPY= Received: from email.msg.corp.akamai.com (ecp.msg.corp.akamai.com [172.27.123.33]) by prod-mail-relay11.akamai.com (Postfix) with ESMTP id D727C1FC98; Thu, 10 Mar 2016 17:55:19 +0000 (GMT) Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com (172.27.123.101) by usma1ex-dag1mb1.msg.corp.akamai.com (172.27.123.101) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Thu, 10 Mar 2016 12:55:19 -0500 Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com ([172.27.123.101]) by usma1ex-dag1mb1.msg.corp.akamai.com ([172.27.123.101]) with mapi id 15.00.1130.005; Thu, 10 Mar 2016 12:55:19 -0500 From: "Salz, Rich" To: Yoav Nir , Paul Hoffman Thread-Topic: [Curdle] I-D Action: draft-ietf-curdle-rsa-sha2-00.txt Thread-Index: AQHReq1m2WjtC9E/r0Gm8I3+gZvzRZ9TOBmAgAAQVoD//64s8A== Date: Thu, 10 Mar 2016 17:55:19 +0000 Message-ID: References: <20160310091421.11180.73355.idtracker@ietfa.amsl.com> <2CBB4011-12E0-45A6-B074-9178A70B7DDD@gmail.com> In-Reply-To: <2CBB4011-12E0-45A6-B074-9178A70B7DDD@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.43.174] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Archived-At: Cc: "curdle@ietf.org" Subject: Re: [Curdle] I-D Action: draft-ietf-curdle-rsa-sha2-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Mar 2016 17:55:22 -0000 PiA+IFRoZSBjaGFpcnMgKHdlbGwsIGEgY2hhaXIpIGFza2VkIG1lIHRvIGJyaW5nIHRoaXMgZGlz Y3Vzc2lvbiBoZXJlLg0KPiANCj4gQW5kIHlldCB0aGUgY2hhaXJzICh3ZWxsLCBhIGNoYWlyLCBu b3QgbmVjZXNzYXJpbHkgdGhlIHNhbWUgb25lKSBhcHByb3ZlZCB0aGlzDQo+IGRyYWZ0IGZvciBz dWJtaXNzaW9uLg0KDQpUaGUgY2hhaXJzIGFyZSBuZXcgdG8gdGhpcyBqb2IuDQo= From nobody Thu Mar 10 10:12:36 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1EFAF12DB7F for ; Thu, 10 Mar 2016 10:12:35 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TO3IYKKvn3TY for ; Thu, 10 Mar 2016 10:12:32 -0800 (PST) Received: from mail-wm0-x232.google.com (mail-wm0-x232.google.com [IPv6:2a00:1450:400c:c09::232]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7586C12DB7D for ; Thu, 10 Mar 2016 10:12:32 -0800 (PST) Received: by mail-wm0-x232.google.com with SMTP id p65so39534766wmp.1 for ; Thu, 10 Mar 2016 10:12:32 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=ATlwhzgQ5gtbRpzCvkldy437M6O+/xi7THXXNOBmXQ8=; b=ESNc85OAbnPdpqGp3jGbUCV1eBSe+Zb/OrNZqHmhMDPrrX9yLQvDovsiwOuMCQO0wH LejtU8uc3ft034NNOUwdEN+GtQ7gMiHJywJG6gbdFng/5Fahi0Ek6UU2IjqPfyQeiZED wsQHtxJ3G2Ig1LIsyBY/gciCXgfpuZTh0nGDDVJQfvTpnjOpYbnHAI/5DGlK8lJv++t+ ATgehjU9OhG6eQw3qSMhAJdT8L+mhlLrYVf1KliZH+eOy3ehIwgae2+liSiOvs1+hJOS bBxPxhPhnnvhVzJNmaX2fH8u9Q0PfaWK1OZ/CK42rfnMeb7xPzjos76oy1lIivGlZ3CK lPWA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=ATlwhzgQ5gtbRpzCvkldy437M6O+/xi7THXXNOBmXQ8=; b=LEuwWw10Z0F77vaIvuG8nlvf/slW2d1jE6N9qGELJmFOoyiJTG6sij7KfB6SA0asMd jpNEBpYEFQfG1ibs/H4NkQsE28u1ujY7S9cWX/6G+sDbpcGA2XC6HBHxxmtUL1ae+OHJ 3xl4ewT9yUEWDEWF6+ZEVimljzEDLEIyDcBSWvl4a3Y3Mm//KyhEgZv6eJmLWcs9X2Iq f0CE83Mh98wBz3chnB09Oi8vby0mVul7B/SYEHxriqwrBpaSPAZyu+sf7EBaugQx3RgV 1jjNfUuSVq6NIPd/o/3EbMuQ9wLb3/pTjPIVSGumZ7W0zis8IiWFUkcLXbnISvevZVWH 5fGA== X-Gm-Message-State: AD7BkJKS9zr0C9Q5B85wRdKpp+EXx9PAJe6xDTW+pCXqttj3PMR2SbvAnZE1cbx06xaMwA== X-Received: by 10.28.182.136 with SMTP id g130mr5576378wmf.10.1457633550945; Thu, 10 Mar 2016 10:12:30 -0800 (PST) Received: from [192.168.1.13] ([46.120.13.132]) by smtp.gmail.com with ESMTPSA id z6sm4669896wme.9.2016.03.10.10.12.29 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Thu, 10 Mar 2016 10:12:29 -0800 (PST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 9.2 \(3112\)) From: Yoav Nir In-Reply-To: Date: Thu, 10 Mar 2016 20:12:27 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: References: <20160310091421.11180.73355.idtracker@ietfa.amsl.com> <2CBB4011-12E0-45A6-B074-9178A70B7DDD@gmail.com> To: Rich Salz X-Mailer: Apple Mail (2.3112) Archived-At: Cc: "curdle@ietf.org" , Paul Hoffman Subject: Re: [Curdle] I-D Action: draft-ietf-curdle-rsa-sha2-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Mar 2016 18:12:35 -0000 On 10 Mar 2016, at 7:55 PM, Salz, Rich wrote: >>> The chairs (well, a chair) asked me to bring this discussion here. >>=20 >> And yet the chairs (well, a chair, not necessarily the same one) = approved this >> draft for submission. >=20 > The chairs are new to this job. Sure, and I=E2=80=99m sorry if this came off as criticism. I am = wondering why we are discussing it here with Paul rather than you = discussing it with the author and the AD(s). Yoav From nobody Thu Mar 10 10:37:39 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8BD3312DBBF for ; Thu, 10 Mar 2016 10:37:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.903 X-Spam-Level: X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B0Hv-uTN5ugS for ; Thu, 10 Mar 2016 10:37:23 -0800 (PST) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0117.outbound.protection.outlook.com [65.55.169.117]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E89FA12DBB7 for ; Thu, 10 Mar 2016 10:37:22 -0800 (PST) Received: from DM2PR0501CA0022.namprd05.prod.outlook.com (10.162.29.160) by CO2PR05MB746.namprd05.prod.outlook.com (10.141.227.142) with Microsoft SMTP Server (TLS) id 15.1.415.20; Thu, 10 Mar 2016 18:37:21 +0000 Received: from BY2FFO11FD037.protection.gbl (2a01:111:f400:7c0c::197) by DM2PR0501CA0022.outlook.office365.com (2a01:111:e400:5148::32) with Microsoft SMTP Server (TLS) id 15.1.434.16 via Frontend Transport; Thu, 10 Mar 2016 18:37:21 +0000 Authentication-Results: spf=softfail (sender IP is 66.129.239.19) smtp.mailfrom=juniper.net; gmail.com; dkim=none (message not signed) header.d=none;gmail.com; dmarc=none action=none header.from=juniper.net; Received-SPF: SoftFail (protection.outlook.com: domain of transitioning juniper.net discourages use of 66.129.239.19 as permitted sender) Received: from p-emfe01b-sac.jnpr.net (66.129.239.19) by BY2FFO11FD037.mail.protection.outlook.com (10.1.14.222) with Microsoft SMTP Server (TLS) id 15.1.434.11 via Frontend Transport; Thu, 10 Mar 2016 18:37:20 +0000 Received: from magenta.juniper.net (172.17.27.123) by p-emfe01b-sac.jnpr.net (172.24.192.21) with Microsoft SMTP Server (TLS) id 14.3.123.3; Thu, 10 Mar 2016 10:37:19 -0800 Received: from eng-mail01.juniper.net (eng-mail01.juniper.net [172.17.28.114]) by magenta.juniper.net (8.11.3/8.11.3) with ESMTP id u2AIbID51781; Thu, 10 Mar 2016 10:37:18 -0800 (PST) (envelope-from mdb@juniper.net) Received: from eng-mail01.juniper.net (localhost [127.0.0.1]) by eng-mail01.juniper.net (Postfix) with ESMTP id 360341145A; Thu, 10 Mar 2016 10:37:17 -0800 (PST) To: Yoav Nir In-Reply-To: <2CBB4011-12E0-45A6-B074-9178A70B7DDD@gmail.com> References: <20160310091421.11180.73355.idtracker@ietfa.amsl.com> <2CBB4011-12E0-45A6-B074-9178A70B7DDD@gmail.com> Comments: In-reply-to: Yoav Nir message dated "Thu, 10 Mar 2016 19:47:59 +0200." From: "Mark D. Baushke" MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Date: Thu, 10 Mar 2016 10:37:17 -0800 Message-ID: <82993.1457635037@eng-mail01.juniper.net> Sender: X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:66.129.239.19; IPV:NLI; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(6009001)(2980300002)(199003)(189002)(469094003)(53484002)(1096002)(11100500001)(19580405001)(86362001)(54356999)(105596002)(117636001)(81166005)(76176999)(50986999)(76506005)(47776003)(19580395003)(5003600100002)(50466002)(230783001)(2810700001)(2950100001)(92566002)(23676002)(189998001)(110136002)(586003)(6806005)(87936001)(106466001)(77096005)(4326007)(53416004)(2906002)(1220700001)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:CO2PR05MB746; H:p-emfe01b-sac.jnpr.net; FPR:; SPF:SoftFail; MLV:sfv; A:1; MX:1; LANG:en; X-Microsoft-Exchange-Diagnostics: 1; BY2FFO11FD037; 1:inwzS1efePRZm8oxaVdO72CqFPKoRqoWeuIB3qHJfhvAl9sMnW+Ky211cOFqfUf5dBsYbzuCpScZwzFdJ6GHyS4n2VoeXHpuxGWw1IvmQHZG35P+w70MUtTCq5Cf9nVidmaUjkz9LALkJmJJiRuff3lVRZgM6GFxB2O48R0+/fx383bFm5uNDBx59iVE5SedTGAJ9jNKkgWsjWZJ3xMcKjUWgtRzVwhnGdVuU9gl8ehDwrZqLjb10WAFUtc944StL52EiH60kyBLMZT7EJoSxfUZ1y+3s3pVnTXetsizBt+IPTPY/esHurxxvJ4aK+Ww/p00QLdtmDhw78lKvZF9YegihSiIg9YFB0x1sHQ/dTQKz8x+yxIs5CrWv9B6TdMRwFuVL6gtoi0M7AjSix/Kciw+rG9bipeTKfHnKoKJ9M8= X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB746; 2:dxRxgBQR/77ZyaQtjbI2S0nnS7QdcLoZoi/e1Ytzqc2MZlbHwBcVWtSh18vOFFk1mZtCYOiyiOS6hma9hvFiqwFEkOidXubuSxQRSvkDJzj/sv+sV0NNsljizUuXf+qA70g2+dTq2tWlZi2+CFd/2Q==; 3:A9DRySFEeN8OYQUVLUQi5rplmeX3xP36MfvBX3yiCqhVqgO1ooPngaOeEiUOfLycZkS3ZtGslaYaqbeNm2J2hclxuX81BMhIOipTBOlTjw/o6gyYCfhu0JjKjgnNVjXfhvMS1Kk//cP81pleXmBnLdGGfep5rS60pb/ZnXL2FZvKVyZSXNQqVkC1MbhkHcHkzonxDv03Ggkwu77LDHGX9M3WDpugjP+kKrAxejaQ920=; 25:BDiSvVaaKOq2SshewGpLHYkRRgUe29s6ee33MTWYitAbCovy+p1Vzj0IY0l6VLl3O88MowRsV6G3haTIIUJJ9JvlYdowVjgE8zuhev1ItnkgBIrcqRaXFuYOwaISOynPVrFce0VGzMXuldlbWxRucyQoUspFIrBzk3+sgj2kZG4LEqDrDtSzzazdhqNNj1kkb6URcdymLGlU6m1BQOoNhRtUwYlZeaBg2UPXS+7p3jJalGIn0Z4nrjQMOURB35v4YSz1KyvOoatt+Z6pq//l8WhGKR/ngoYDPfoaPrWUI0z4RfRSkTu5XXX+l1gz4d9oC2lYFuYQS7uAYgElTXj4awHA0hYO94FCH71pFkzsy/Y= X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:CO2PR05MB746; X-MS-Office365-Filtering-Correlation-Id: f8f13c70-9b2f-4a2f-94fe-08d3491303ec X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB746; 20: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 X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(601004)(2401047)(13015025)(13023025)(8121501046)(13024025)(13018025)(5005006)(13017025)(10201501046)(3002001); SRVR:CO2PR05MB746; BCL:0; PCL:0; RULEID:; SRVR:CO2PR05MB746; X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB746; 4:lhS1v7gAunYGq/c95B6QojLzAIGook5jGkVUBRBsCWt7yKittyoM3kKHNnTXtNrvN7k3N+4AzZnJ0TBFXYXBucDkn9GumBnLNu+RK7KVeQ7A/H5wv1aebsD6+6xig2gQxh19p2TDdjm884Y4HzAmEqv7jlRJV8pDCJ7HVzy3Hu2NpLOfxnb5MBTuEoCQJdSVATlZH3ZWvADcQvSt4JdUBm2euVJBhJKfB+f02m/6sUmbr4u3sIsIYHbv0k3ZfyNatxz1aXJMoksHhWNVAaAlXcvun3H6PpUJZnthpqMdYvSHNHk3F4FMauJ2RggwdPGFMzuw1OJxjOu5/YhdaEoWVlwuV8G3qpCeJiOETr2j2ZLRvdDDUC1QjtROdgl1P3+bMyqcxSK592wPZk8iyv4navz642phjeqtH6kCW+zN3+y1p3NcJsfTSvNLQwTmQwzlZHzEVKTC4oLvWMYQzlGXLw== X-Forefront-PRVS: 08770259B4 X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtDTzJQUjA1TUI3NDY7MjM6ZERPdHMwTy9NNys1dVVaaDJoYW5leG56Ym15?= =?utf-8?B?OVpreWp3cm5PcGxiQWJzOTlwNXh2ZGpJN2k1QVZDbGVqaHUybmltTndIVEo0?= =?utf-8?B?ekxJRE9HUVI4cmo3Wm9IZ2JqZDZpTDA1SUlGREoxSkpDbVY1SysrVkE3Rk5U?= =?utf-8?B?NE1mS0dZazdleWpLMTdCaEI5L2U1aTY0RkFFbk1xSVN1a1BFQUtTTFh5Rlpj?= =?utf-8?B?T1FiWk90MU5ST3JBN290MjRyaTFNZXdTdU55TXJYbWR5RzJMd0h5cVZmdjh2?= =?utf-8?B?T1BxK2VuU0ZscUNnV1pIbFhmVVE2S3plbGRZcFJQTmxzRkJhZnoxa0dSaWhp?= =?utf-8?B?UVdIK1JaN0w2enBLWE5XeGpxMmVPQUlQWm42eE1XOVlEMXdBcmVlTG1CUkpT?= =?utf-8?B?N2JkOUE1eW01WElEY2ZLQnM5TmU2RFpyU0M0dlZ4ZFg0WmJVVHd3US9vWFor?= =?utf-8?B?NkVWUEkzelhmQlo0amo0ZWwxOU1lVzdTeTA5WUwzSDMxNmdQbDFJdTU0NnlL?= =?utf-8?B?RVk3QjFFMklhdFBIbjlyUVJ0MzJnUVVIN091by8yK212emVrMllHYThRNDg0?= =?utf-8?B?SXg2VURKNUl0UVBiZmR3ai95L211bVpFZGdJOUU0MXdFQ0tkaXFBdUNJaThH?= =?utf-8?B?R281S0paeG84Rm0vUFphMS8zUEJENkZkSG1lWWFabzJZT2NZMDJUZW1sbW1L?= =?utf-8?B?OEVsbnRVNnQwWG5XTEM3Qnh3aG5FaW83OFZsRmpUcnNXMjBSSExyQ3VsVTU3?= =?utf-8?B?d3F4QzRTQjR0UEFMUk5RbnBXVDlLTVRPN0h2bFloZE5lUC96bTJTaG90WnFD?= =?utf-8?B?YlVERUVaL0Jvc1U2U09tRzd2L0xkK1BDckluMm5RdElYZXZPcTUzdjZJQzBh?= =?utf-8?B?K0FzTUlTZTh0VGx1TUplZndNTlVsZWl2OGtNcTh2cTdFT1VzS0hFQmVMY3NF?= =?utf-8?B?dVBuV3NOUUQ3WDdQMjJYcWR5UkJ2Mys2b3ZuWHFLS0pSMENKVWZCcjNyM1pa?= =?utf-8?B?dUlxZ042ellBSkFodTRyRTBkcytlOE5TOEJWMytrcEcwa0tMMDBUVlcxamZY?= =?utf-8?B?UE9mSnBTa1Z4QXU5czU4dk8yUDBDOGJuQk5zeFIzWlpKaG84UHVjcEVwa3FV?= =?utf-8?B?akdaMDc3eG92UFFXWkQ1MWJmLzFOS0prVkoyeExMWjIyZDhpSzhlL1F2SXJl?= =?utf-8?B?eE15WDRBVGQ4RjdJQlhYNW9GWk5qMUpQQzJmblBlYkx1ZGJOdHdUWHpVbDVG?= =?utf-8?B?UWMzQ1c2ak5UT0RVSm5rYjR1S3dwZW4xSHczTHpQWjJKbzBWZFJ5UzBNNXZy?= =?utf-8?B?VVJ5L1RHb2pQM29IRHdVL1VVNTJOWi90YjEvZ1JFSFh1aVJJU0I2SFBUWUpm?= =?utf-8?Q?xsXIrCZ?= X-Microsoft-Exchange-Diagnostics: 1; CO2PR05MB746; 5:92a+x8P1a7kJX4s1qckGtOereve2Tb/adu3nfrrM1BywBQuAWNIaUPFOF4kJ2Srv/9AbTcwqUyezaNxOiTIuiQs0k35bHwTmd2mVKhou6mVl5dVPeFjZTVfe2xFsTNEWulOlXmBElW7n2D4+gjOmYQ==; 24:GS23R/Bh7JgF43UENJIrkbV198aCZTNaVubyUoxRdGDpZhXbvw7mxbj4fKdUeyqJUceiL9QCKW4sAOpCbCY4A12D5XP0C1DD9Oyg+2L8KaE= SpamDiagnosticOutput: 1:23 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Mar 2016 18:37:20.6230 (UTC) X-MS-Exchange-CrossTenant-Id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=bea78b3c-4cdb-4130-854a-1d193232e5f4; Ip=[66.129.239.19]; Helo=[p-emfe01b-sac.jnpr.net] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: CO2PR05MB746 Archived-At: Cc: curdle@ietf.org, Paul Hoffman Subject: Re: [Curdle] I-D Action: draft-ietf-curdle-rsa-sha2-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 10 Mar 2016 18:37:36 -0000 Yi Yoav, Yoav Nir writes: > > 2) If for some reason we went to keep this in the WG, it should be > > renamed to include "-ssh" in the file name so that people are clear > > it has nothing to do with the other protocols that are being dealt > > with here. >=20 > Sure. RSA with SHA2 has been done for over a decade in PKIX, IKE, and > TLS. I=E2=80=99m rather surprised it=E2=80=99s new to SSH. The use of RSA with SHA2 rather than SHA1 is what is new to SSH. Current SSH "Public Key Algorithm Names" includes RFC4253 use of "ssh-rsa" based on SHA1 as the hash. The draft-ietf-curdle-rsa-sha2 draft deals with SHA2-256 and SHA2-512 use of "rsa-sha2-256" and "rsa-sha2-512" methods. I hope this helps in understanding what is happening. -- Mark From nobody Fri Mar 11 09:22:51 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 61A4012D9B8 for ; Fri, 11 Mar 2016 09:22:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3_ufOoLdnW3m for ; Fri, 11 Mar 2016 09:22:47 -0800 (PST) Received: from skroderider.denisbider.com (skroderider.denisbider.com [50.18.172.175]) (using TLSv1.1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5A1E912D71D for ; Fri, 11 Mar 2016 09:22:47 -0800 (PST) X-Footer: ZGVuaXNiaWRlci5jb20= Received: from localhost ([127.0.0.1]) by skroderider.denisbider.com for paul.hoffman@vpnc.org; Fri, 11 Mar 2016 17:22:40 +0000 Date: Fri, 11 Mar 2016 17:22:40 +0000 X-User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0 Message-ID: <220654724-3008@skroderider.denisbider.com> X-Priority: 3 Importance: Normal MIME-Version: 1.0 From: denis bider To: Paul Hoffman , Yoav Nir Content-Type: multipart/alternative; boundary="=-6HJEierW+pkGhw5BChbO" Archived-At: Cc: curdle@ietf.org Subject: Re: [Curdle] I-D Action: draft-ietf-curdle-rsa-sha2-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Mar 2016 17:22:49 -0000 --=-6HJEierW+pkGhw5BChbO Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Apologies for the lack of "ssh-" in the rsa-sha2 draft name. I can resubmit= with improved name next time, with any other changes that might come up. These drafts belong here because SSH is somewhat orphaned in terms of activ= e working groups, and this is part of a necessary crypto update to SSH. It'= s covered under the "DLE" part of "CURDLE", which stands for "Deprecating a= nd a Little more Encryption". The new signature algorithms, rsa-sha2-256 and rsa-sha2-512, are needed to = replace "ssh-rsa", which uses RSA with SHA-1.=20 The SSH extension mechanism draft is needed for new signature algorithms to= be usable. Servers exist which will penalize the client for using an unsup= ported signature algorithm. A mechanism is needed for clients to discover t= hat the server supports rsa-sha2-256 or rsa-sha2-512. The alternative to the extension mechanism would be to restrict use of the = new signature algorithms to newly generated keys that would be incompatible= with the "ssh-rsa" signature algorithm. This would create a hurdle for ado= ption. It would prevent use of rsa-sha2 signatures with existing RSA keys, = and would prevent use of new RSA keys with other parties that implement onl= y "ssh-rsa". Creating these hurdles would be unfortunate and unnecessary, g= iven that there is no change to the underlying RSA algorithm or keys. If there is another way we should be pursuing to standardize these new sign= ature algorithms, and the extension mechanism they need, I'm open to any su= ggestions. The extension mechanism is ambitious, but it is part of the "Dep= recating and a Little more Encryption" effort. One thing we could do is, we can definitely cut some of the proposed extens= ions that don't fit this working group's goals. The "server-sig-algs" exten= sion is the main one needed for the rsa-sha2 signature algorithms, and is t= he main one that is going to have multiple implementations initially. I am = currently aware of OpenSSH, SmartFTP, and Bitvise implementing this. ----- Original Message ----- From: Paul Hoffman Sent: Thursday, March 10, 2016 10:49 To: curdle@ietf.or= g Subject: Re: [Curdle] I-D Action: draft-ietf-curdle-rsa-sha2-00.txt =C2= =A0 On 10 Mar 2016, at 1:14, internet-drafts@ietf.org wrote: =C2=A0 > A New= Internet-Draft is available from the on-line Internet-Drafts > directori= es. > This draft is a work item of the CURves, Deprecating and a Little mor= e > Encryption of the IETF. > >=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Title=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 : Use of RSA Keys wi= th SHA-2 256 and 512 in > Secure Shell (SSH) >=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0 Author=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 : Denis Bi= der > Filename=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 : draft-ietf-curdl= e-rsa-sha2-00.txt > Pages=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0 : 6 > Date=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2= =A0=C2=A0=C2=A0 : 2016-03-10 > > Abstract: > This memo defines an algorithm= name, public key format, and signature > format for use of RSA keys with = SHA-2 512 for server and client > authentication in SSH connections. =C2=A0= The chairs (well, a chair) asked me to bring this discussion here. =C2=A0 = 1) Why is this draft even in this WG? It doesn't seem to be covered by th= e charter, which is all about the new curves. =C2=A0 2) If for some reason = we went to keep this in the WG, it should be renamed to include "-ssh" in = the file name so that people are clear it has nothing to do with the othe= r protocols that are being dealt with here. =C2=A0 --Paul Hoffman =C2=A0 _= ______________________________________________ Curdle mailing list Curdle@i= etf.org https://www.ietf.org/mailman/listinfo/curdle = --=-6HJEierW+pkGhw5BChbO Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable Apologies for the lack of "ssh-" in the rsa-sha2 d= raft name. I can resubmit with improved name next time, with any other chan= ges that might come up.

These drafts belong here because SSH is some= what orphaned in terms of active working groups, and this is part of a nece= ssary crypto update to SSH. It's covered under the "DLE" part of "CURDLE", = which stands for "Deprecating and a Little more Encryption".

The new= signature algorithms, rsa-sha2-256 and rsa-sha2-512, are needed to replace= "ssh-rsa", which uses RSA with SHA-1.

The SSH extension mechanism = draft is needed for new signature algorithms to be usable. Servers exist wh= ich will penalize the client for using an unsupported signature algorithm. = A mechanism is needed for clients to discover that the server supports rsa-= sha2-256 or rsa-sha2-512.

The alternative to the extension mechanism= would be to restrict use of the new signature algorithms to newly generate= d keys that would be incompatible with the "ssh-rsa" signature algorithm. T= his would create a hurdle for adoption. It would prevent use of rsa-sha2 si= gnatures with existing RSA keys, and would prevent use of new RSA keys with= other parties that implement only "ssh-rsa". Creating these hurdles would = be unfortunate and unnecessary, given that there is no change to the underl= ying RSA algorithm or keys.

If there is another way we should be pur= suing to standardize these new signature algorithms, and the extension mech= anism they need, I'm open to any suggestions. The extension mechanism is am= bitious, but it is part of the "Deprecating and a Little more Encryption" e= ffort.

One thing we could do is, we can definitely cut some of the p= roposed extensions that don't fit this working group's goals. The "server-s= ig-algs" extension is the main one needed for the rsa-sha2 signature algori= thms, and is the main one that is going to have multiple implementations in= itially. I am currently aware of OpenSSH, SmartFTP, and Bitvise implementin= g this.


----- Original Message -----
From: Paul Hoffman =
Sent: Thursday, March 10, 2016 10:49
To: curdle@ietf.org
Subject: Re: [Curdle] I-D Action: draft-ietf-curdle-rsa-sha2-00.txt
 
On 10 Mar 2016, at 1:14, internet-drafts@ietf.org wrote:
 
> A New Internet-Draft is available from the on-line Internet-Draft= s=20
> directories.
> This draft is a work item of the CURves, Deprecating and a Little= more=20
> Encryption of the IETF.
>
>      Title     =       : Use of RSA Keys with SHA-2 256 and 512 in=20
> Secure Shell (SSH)
>      Author     = ;     : Denis Bider
> Filename        : draft-ietf-c= urdle-rsa-sha2-00.txt
> Pages          = : 6
> Date          &= nbsp; : 2016-03-10
>
> Abstract:
> This memo defines an algorithm name, public key format, and=20 signature
> format for use of RSA keys with SHA-2 512 for server and client
> authentication in SSH connections.
 
The chairs (well, a chair) asked me to bring this discussion here.
 
1) Why is this draft even in this WG? It doesn't seem to be covered by= =20
the charter, which is all about the new curves.
 
2) If for some reason we went to keep this in the WG, it should be
renamed to include "-ssh" in the file name so that people are clear it= =20
has nothing to do with the other protocols that are being dealt with <= /div>
here.
 
--Paul Hoffman
 
_______________________________________________
Curdle mailing list
Curdle@ietf.org
https://www.ietf.org/mailman/listinfo/curdle


<= /html>= --=-6HJEierW+pkGhw5BChbO-- From nobody Fri Mar 11 16:06:03 2016 Return-Path: X-Original-To: curdle@ietf.org Delivered-To: curdle@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id CE49D12DD84; Fri, 11 Mar 2016 15:05:22 -0800 (PST) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , X-Test-IDTracker: no X-IETF-IDTracker: 6.16.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160311230522.15028.50655.idtracker@ietfa.amsl.com> Date: Fri, 11 Mar 2016 15:05:22 -0800 Archived-At: X-Mailman-Approved-At: Fri, 11 Mar 2016 16:06:01 -0800 Cc: curdle@ietf.org, stephen.farrell@cs.tcd.ie Subject: [Curdle] curdle - Requested session has been scheduled for IETF 95 X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Mar 2016 23:05:23 -0000 Dear Rich Salz, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. curdle Session 1 (1:00:00) Tuesday, Afternoon Session II 1620-1720 Room Name: Buen Ayre B size: 125 --------------------------------------------- Request Information: --------------------------------------------------------- Working Group Name: CURves, Deprecating and a Little more Encryption Area Name: Security Area Session Requester: Rich Salz Number of Sessions: 1 Length of Session(s): 1 Hour Number of Attendees: 50 Conflicts to Avoid: First Priority: saag tls acme ipsecme Special Requests: --------------------------------------------------------- From nobody Sat Mar 12 09:20:45 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F86012D76A for ; Sat, 12 Mar 2016 09:20:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pSKRRIYFboZI for ; Sat, 12 Mar 2016 09:20:35 -0800 (PST) Received: from mail.proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1EBFC12D730 for ; Sat, 12 Mar 2016 09:20:35 -0800 (PST) Received: from [10.32.60.37] (50-1-98-216.dsl.dynamic.fusionbroadband.com [50.1.98.216]) (authenticated bits=0) by mail.proper.com (8.15.2/8.14.9) with ESMTPSA id u2CHKXlW046704 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Sat, 12 Mar 2016 10:20:33 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) X-Authentication-Warning: mail.proper.com: Host 50-1-98-216.dsl.dynamic.fusionbroadband.com [50.1.98.216] claimed to be [10.32.60.37] From: "Paul Hoffman" To: "denis bider" Date: Sat, 12 Mar 2016 09:20:32 -0800 Message-ID: <816BE0C0-2BD3-45C8-A577-D8133F9836E1@vpnc.org> In-Reply-To: <220654724-3008@skroderider.denisbider.com> References: <220654724-3008@skroderider.denisbider.com> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Mailer: MailMate (1.9.3r5187) Archived-At: Cc: curdle@ietf.org Subject: Re: [Curdle] I-D Action: draft-ietf-curdle-rsa-sha2-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Mar 2016 17:20:39 -0000 On 11 Mar 2016, at 9:22, denis bider wrote: > These drafts belong here because SSH is somewhat orphaned in terms of > active working groups, and this is part of a necessary crypto update > to SSH. It's covered under the "DLE" part of "CURDLE", which stands > for "Deprecating and a Little more Encryption". And it seems to be directly prohibited by the last paragraph of the charter that was agreed to by the IETF: "The CURDLE working group is not chartered to consider allocating new codepoints for any algorithms or modes other than those mentioned above. Should someone wish to propose such work, a re-charter will be required. At this time, there is no expectation that such a re-charter will be requested." There is nothing preventing you from moving the RSA/SHA2 work as an Individual Submission; in fact, that would be a much better option than asking us to do a charter revision before we have started anything on the main work we agreed to do, namely the new curves and deprecating creaky crypto. --Paul Hoffman From nobody Sat Mar 12 09:37:48 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 55F5F12D795 for ; Sat, 12 Mar 2016 09:37:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.722 X-Spam-Level: X-Spam-Status: No, score=-2.722 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I7P9YcXbeXGc for ; Sat, 12 Mar 2016 09:37:45 -0800 (PST) Received: from prod-mail-xrelay05.akamai.com (prod-mail-xrelay05.akamai.com [23.79.238.179]) by ietfa.amsl.com (Postfix) with ESMTP id 0F67112D515 for ; Sat, 12 Mar 2016 09:37:44 -0800 (PST) Received: from prod-mail-xrelay05.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id 2FB57423730; Sat, 12 Mar 2016 17:37:44 +0000 (GMT) Received: from prod-mail-relay11.akamai.com (prod-mail-relay11.akamai.com [172.27.118.250]) by prod-mail-xrelay05.akamai.com (Postfix) with ESMTP id 160DE423727; Sat, 12 Mar 2016 17:37:44 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; s=a1; t=1457804264; bh=rkSDLtU0HHx4k/UL+rPfo0b9mBTakSG23vrlTnxfB14=; l=333; h=From:To:CC:Date:References:In-Reply-To:From; b=uCo+z/KkhA+UrrdwVGhPBJCa0KpyfsWNO6zhu2FkgGcayVdaF6Z7n42bETPLa9yff n7M3sWJoSIJb1OH1KfqgXwHZnianyviopg+jOoK93GhdgIBH9f29gbHsIgyNgLBtE/ 7JBWCgS660gG7QHIkyf+su2uKefE6fgrznad1i5w= Received: from email.msg.corp.akamai.com (usma1ex-cas2.msg.corp.akamai.com [172.27.123.31]) by prod-mail-relay11.akamai.com (Postfix) with ESMTP id 128FA1FC95; Sat, 12 Mar 2016 17:37:44 +0000 (GMT) Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com (172.27.123.101) by usma1ex-dag1mb3.msg.corp.akamai.com (172.27.123.103) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Sat, 12 Mar 2016 12:37:43 -0500 Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com ([172.27.123.101]) by usma1ex-dag1mb1.msg.corp.akamai.com ([172.27.123.101]) with mapi id 15.00.1130.005; Sat, 12 Mar 2016 12:37:43 -0500 From: "Salz, Rich" To: Paul Hoffman , denis bider Thread-Topic: [Curdle] I-D Action: draft-ietf-curdle-rsa-sha2-00.txt Thread-Index: AQHRe7qd2WjtC9E/r0Gm8I3+gZvzRZ9WY1IA//+wfjA= Date: Sat, 12 Mar 2016 17:37:43 +0000 Message-ID: <14e7135a49ef4e469371cf96002f8538@usma1ex-dag1mb1.msg.corp.akamai.com> References: <220654724-3008@skroderider.denisbider.com> <816BE0C0-2BD3-45C8-A577-D8133F9836E1@vpnc.org> In-Reply-To: <816BE0C0-2BD3-45C8-A577-D8133F9836E1@vpnc.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.36.40] Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: "curdle@ietf.org" Subject: Re: [Curdle] I-D Action: draft-ietf-curdle-rsa-sha2-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Mar 2016 17:37:47 -0000 > And it seems to be directly prohibited by the last paragraph of the chart= er > that was agreed to by the IETF. I think that you're right. If the working group feels strongly that we sh= ould ask to amend the charter to include things such as "RSA with SHA2", or= prefers to not expand in that area, please speak up here. From nobody Sat Mar 12 10:53:41 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E81C612D6F9 for ; Sat, 12 Mar 2016 10:53:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.302 X-Spam-Level: X-Spam-Status: No, score=-4.302 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=cs.tcd.ie Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rmaHoGOu8c-a for ; Sat, 12 Mar 2016 10:53:37 -0800 (PST) Received: from mercury.scss.tcd.ie (mercury.scss.tcd.ie [134.226.56.6]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CB12412D5C9 for ; Sat, 12 Mar 2016 10:53:36 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by mercury.scss.tcd.ie (Postfix) with ESMTP id 39049BE32; Sat, 12 Mar 2016 18:53:34 +0000 (GMT) X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from mercury.scss.tcd.ie ([127.0.0.1]) by localhost (mercury.scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id huI8Kslfox5C; Sat, 12 Mar 2016 18:53:32 +0000 (GMT) Received: from [10.87.49.100] (unknown [86.46.23.221]) by mercury.scss.tcd.ie (Postfix) with ESMTPSA id E69EABE49; Sat, 12 Mar 2016 18:53:31 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; s=mail; t=1457808812; bh=LOl9Nf5U6FgK8kASJ4VJiIEbFYjtK734gBJ7JHKcVt8=; h=Subject:To:References:Cc:From:Date:In-Reply-To:From; b=uKhC/s7iFjvF7a5cPGdUCck8e6FbGNcyRPqo2Y+Om9RbaxvMEFG1r4DNRvx0KcwVt k1RuKykwLlVYGYrugPg3gn6D5HQ3G4VBbiwsQdMJKiU1lxPZQEQC08cS602vM5Regn MfRAk6YlKiY1hoN+wMfY8S3ztVgcOIV6gO8rMJ2o= To: "Salz, Rich" , Paul Hoffman , denis bider References: <220654724-3008@skroderider.denisbider.com> <816BE0C0-2BD3-45C8-A577-D8133F9836E1@vpnc.org> <14e7135a49ef4e469371cf96002f8538@usma1ex-dag1mb1.msg.corp.akamai.com> From: Stephen Farrell Openpgp: id=D66EA7906F0B897FB2E97D582F3C8736805F8DA2; url= Message-ID: <56E465AB.3040609@cs.tcd.ie> Date: Sat, 12 Mar 2016 18:53:31 +0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.5.1 MIME-Version: 1.0 In-Reply-To: <14e7135a49ef4e469371cf96002f8538@usma1ex-dag1mb1.msg.corp.akamai.com> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha-256; boundary="------------ms070900060404060800050703" Archived-At: Cc: "curdle@ietf.org" Subject: Re: [Curdle] I-D Action: draft-ietf-curdle-rsa-sha2-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Mar 2016 18:53:40 -0000 This is a cryptographically signed message in MIME format. --------------ms070900060404060800050703 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 12/03/16 17:37, Salz, Rich wrote: >> And it seems to be directly prohibited by the last paragraph of the >> charter that was agreed to by the IETF. >=20 > I think that you're right. If the working group feels strongly that > we should ask to amend the charter to include things such as "RSA > with SHA2", or prefers to not expand in that area, please speak up > here. FYI, if the WG don't want to take this on, then I'll be happy to look at AD sponsoring it. So, saying "not in curdle" here is not the same as saying "let's not do the work." (That said, I've not read the draft yet.) Cheers, S. >=20 > _______________________________________________ Curdle mailing list=20 > Curdle@ietf.org https://www.ietf.org/mailman/listinfo/curdle >=20 --------------ms070900060404060800050703 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC CvIwggUIMIID8KADAgECAhBPzaE7pzYviUJyhmHTFBdnMA0GCSqGSIb3DQEBCwUAMHUxCzAJ BgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSkwJwYDVQQLEyBTdGFydENvbSBD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEjMCEGA1UEAxMaU3RhcnRDb20gQ2xhc3MgMSBDbGll bnQgQ0EwHhcNMTYwMjA5MDkyODE1WhcNMTcwMjA5MDkyODE1WjBOMSIwIAYDVQQDDBlzdGVw aGVuLmZhcnJlbGxAY3MudGNkLmllMSgwJgYJKoZIhvcNAQkBFhlzdGVwaGVuLmZhcnJlbGxA Y3MudGNkLmllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuC0rYze/2JinSra C9F2RjGdQZjNALLcW9C3WKTwYII3wBslobmHuPEYE5JaGItmzuKnAW619R1rD/kfoNWC19N3 rBZ6UX9Cmb9D9exCwYIwVuSwjrCQWGxgCtNQTrwKzCCpI790GRiMTvxvO7UmzmBrCaBLiZW5 R0fBjK5Yn6hUhAzGBkNbkIEL28cLJqH0yVz7Kl92OlzrQqTPEts5m6cDnNdY/ADfeAX18c1r dxZqcAxhLotrCqgsVA4ilbQDMMXGTLlB5TP35HeWZuGBU7xu003rLcFLdOkD8xvpJoYZy9Kt 3oABXPS5yqtMK+XCNdqmMn+4mOtLwQSMmPCSiQIDAQABo4IBuTCCAbUwCwYDVR0PBAQDAgSw MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDBDAJBgNVHRMEAjAAMB0GA1UdDgQWBBQJ QhvwQ5Fl372Z6xqo6fdn8XejTTAfBgNVHSMEGDAWgBQkgWw5Yb5JD4+3G0YrySi1J0htaDBv BggrBgEFBQcBAQRjMGEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbTA5 BggrBgEFBQcwAoYtaHR0cDovL2FpYS5zdGFydHNzbC5jb20vY2VydHMvc2NhLmNsaWVudDEu Y3J0MDgGA1UdHwQxMC8wLaAroCmGJ2h0dHA6Ly9jcmwuc3RhcnRzc2wuY29tL3NjYS1jbGll bnQxLmNybDAkBgNVHREEHTAbgRlzdGVwaGVuLmZhcnJlbGxAY3MudGNkLmllMCMGA1UdEgQc MBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzBGBgNVHSAEPzA9MDsGCysGAQQBgbU3AQIE MCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeTANBgkqhkiG 9w0BAQsFAAOCAQEArzrSv2C8PlBBmGuiGrzm2Wma46/KHtXmZYS0bsd43pM66Pc/MsqPE0HD C1GzMFfwB6BfkJn8ijNSIhlgj898WzjvnpM/SO8KStjlB8719ig/xKISrOl5mX55XbFlQtX9 U6MrqRgbDIATxhD9IDr+ryvovDzChqgQj7mt2jYr4mdlRjsjod3H1VY6XglRmaaNGZfsCARM aE/TU5SXIiqauwt5KxNGYAY67QkOBs7O1FkSXpTk7+1MmzJMF4nP8QQ5n8vhVNseF+/Wm7ai 9mtnrkLbaznMsy/ULo/C2yuLUWTbZZbf4EKNmVdme6tUDgYkFjAFOblfA7W1fSPiQGagYzCC BeIwggPKoAMCAQICEGunin0K14jWUQr5WeTntOEwDQYJKoZIhvcNAQELBQAwfTELMAkGA1UE BhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFs IENlcnRpZmljYXRlIFNpZ25pbmcxKTAnBgNVBAMTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24g QXV0aG9yaXR5MB4XDTE1MTIxNjAxMDAwNVoXDTMwMTIxNjAxMDAwNVowdTELMAkGA1UEBhMC SUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmlj YXRpb24gQXV0aG9yaXR5MSMwIQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQTCC ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL192vfDon2D9luC/dtbX64eG3XAtRmv mCSsu1d52DXsCR58zJQbCtB2/A5uFqNxWacpXGGtTCRk9dEDBlmixEd8QiLkUfvHpJX/xKnm VkS6Iye8wUbYzMsDzgnpazlPg19dnSqfhM+Cevdfa89VLnUztRr2cgmCfyO9Otrh7LJDPG+4 D8ZnAqDtVB8MKYJL6QgKyVhhaBc4y3bGWxKyXEtx7QIZZGxPwSkzK3WIN+VKNdkiwTubW5PI dopmykwvIjLPqbJK7yPwFZYekKE015OsW6FV+s4DIM8UlVS8pkIsoGGJtMuWjLL4tq2hYQuu N0jhrxK1ljz50hH23gA9cbMCAwEAAaOCAWQwggFgMA4GA1UdDwEB/wQEAwIBBjAdBgNVHSUE FjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwEgYDVR0TAQH/BAgwBgEB/wIBADAyBgNVHR8EKzAp MCegJaAjhiFodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9zZnNjYS5jcmwwZgYIKwYBBQUHAQEE WjBYMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5zdGFydHNzbC5jb20wMAYIKwYBBQUHMAKG JGh0dHA6Ly9haWEuc3RhcnRzc2wuY29tL2NlcnRzL2NhLmNydDAdBgNVHQ4EFgQUJIFsOWG+ SQ+PtxtGK8kotSdIbWgwHwYDVR0jBBgwFoAUTgvvGqRAW6UXaYcwyjRoQ9BBrvIwPwYDVR0g BDgwNjA0BgRVHSAAMCwwKgYIKwYBBQUHAgEWHmh0dHA6Ly93d3cuc3RhcnRzc2wuY29tL3Bv bGljeTANBgkqhkiG9w0BAQsFAAOCAgEAi+P3h+wBi4StDwECW5zhIycjBL008HACblIf26HY 0JdOruKbrWDsXUsiI0j/7Crft9S5oxvPiDtVqspBOB/y5uzSns1lZwh7sG96bYBZpcGzGxpF NjDmQbcM3yl3WFIRS4WhNrsOY14V7y2IrUGsvetsD+bjyOngCIVeC/GmsmtbuLOzJ606tEc9 uRbhjTu/b0x2Fo+/e7UkQvKzNeo7OMhijixaULyINBfCBJb+e29bLafgu6JqjOUJ9eXXj20p 6q/CW+uVrZiSW57+q5an2P2i7hP85jQJcy5j4HzA0rSiF3YPhKGAWUxKPMAVGgcYoXzWydOv Z3UDsTDTagXpRDIKQLZo02wrlxY6iMFqvlzsemVf1odhQJmi7Eh5TbxI40kDGcBOBHhwnaOu mZhLP+SWJQnjpLpSlUOj95uf1zo9oz9e0NgIJoz/tdfrBzez76xtDsK0KfUDHt1/q59BvDI7 RX6gVr0fQoCyMczNzCTcRXYHY0tq2J0oT+bsb6sH2b4WVWAiJKnSYaWDjdA70qHX4mq9MIjO /ZskmSY8wtAk24orAc0vwXgYanqNsBX5Yv4sN4Z9VyrwMdLcusP7HJgRdAGKpkR2I9U4zEsN JQJewM7S4Jalo1DyPrLpL2nTET8ZrSl5Utp1UeGp/2deoprGevfnxWB+vHNQiu85o6MxggPM MIIDyAIBATCBiTB1MQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjEpMCcG A1UECxMgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxIzAhBgNVBAMTGlN0YXJ0 Q29tIENsYXNzIDEgQ2xpZW50IENBAhBPzaE7pzYviUJyhmHTFBdnMA0GCWCGSAFlAwQCAQUA oIICEzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xNjAzMTIx ODUzMzFaMC8GCSqGSIb3DQEJBDEiBCDs9XR6xP4LVqJOTRQbDmsLSaSv1DecD6sJQ0Z948nj 9zBsBgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYIKoZIhvcN AwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMC AgEoMIGaBgkrBgEEAYI3EAQxgYwwgYkwdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0 Q29tIEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMw IQYDVQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQT82hO6c2L4lCcoZh0xQXZzCB nAYLKoZIhvcNAQkQAgsxgYyggYkwdTELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29t IEx0ZC4xKTAnBgNVBAsTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MSMwIQYD VQQDExpTdGFydENvbSBDbGFzcyAxIENsaWVudCBDQQIQT82hO6c2L4lCcoZh0xQXZzANBgkq hkiG9w0BAQEFAASCAQAUilofQNsyW2XTOtc0gPiIskfrpdBTihBq7HmQ9li7q6wq6lD87BGO hSQ7yy47l2xPgV6zZHgq5/ZRHx+Qb4rOzg6C46YvtbO0mzopXtbT3MDQB5ZXgkrwAvErOTMk 7IZ5acyaTiQj3QRgZFG86tZymMA4YUq+159cMca1jVXyB9YTP4/h40C555mDX0T+SoP7RpYW vtgFvNvqu+HejN4GQg36WqolDC7mxpwfyhXUJQRvmh6IwcmKBAKkJbw4CkPQG6oHRcR4zaSr TBRg2ex9BVkfm4SRAYn/F8tx47Lk0Kzy9vx1TS1FXOo7L+ZxJNJPHb62QJCaSUws5DcUkL9v AAAAAAAA --------------ms070900060404060800050703-- From nobody Sat Mar 12 11:10:51 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5892D12D714 for ; Sat, 12 Mar 2016 11:10:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K69VM-mdQn_q for ; Sat, 12 Mar 2016 11:10:47 -0800 (PST) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0796.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::796]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E150212D567 for ; Sat, 12 Mar 2016 11:10:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=GPu+bYo/1ebX+PsxWfcQMNpkVRz3XT61kiwYuZB4LhY=; b=XPdgrgl0lkDOL3y6CPyNE2k690rNHbaEoUk4GTey4FIAgjlbLXtPLNmIP+xlUqvzzKRXKexIcIp9InBEFzQhrX0h/voQSPqWXQYHn/L666YQSYHb9nDHaEajZVI5bxoVN/eq6MaX5Qk58yuMPzI6jjx6wxzyU6ykfTzu2v0nn3U= Received: from CY1PR05MB1947.namprd05.prod.outlook.com (10.162.216.17) by CY1PR05MB1946.namprd05.prod.outlook.com (10.162.216.16) with Microsoft SMTP Server (TLS) id 15.1.427.16; Sat, 12 Mar 2016 19:10:29 +0000 Received: from CY1PR05MB1947.namprd05.prod.outlook.com ([10.162.216.17]) by CY1PR05MB1947.namprd05.prod.outlook.com ([10.162.216.17]) with mapi id 15.01.0427.020; Sat, 12 Mar 2016 19:10:29 +0000 From: Mark Baushke To: Stephen Farrell Thread-Topic: [Curdle] I-D Action: draft-ietf-curdle-rsa-sha2-00.txt Thread-Index: AQHRe7qd15UlSLgVoECVVGPeu3zSCZ9WD4EAgAAEzYCAABUtgIAABL6A Date: Sat, 12 Mar 2016 19:10:29 +0000 Message-ID: <08228DC3-117C-497E-A8D4-C8DB28A0C06B@juniper.net> References: <220654724-3008@skroderider.denisbider.com> <816BE0C0-2BD3-45C8-A577-D8133F9836E1@vpnc.org> <14e7135a49ef4e469371cf96002f8538@usma1ex-dag1mb1.msg.corp.akamai.com> <56E465AB.3040609@cs.tcd.ie> In-Reply-To: <56E465AB.3040609@cs.tcd.ie> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: cs.tcd.ie; dkim=none (message not signed) header.d=none;cs.tcd.ie; dmarc=none action=none header.from=juniper.net; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [66.129.239.15] x-ms-office365-filtering-correlation-id: 47b3fb4b-7615-46ed-ce26-08d34aa9fa39 x-microsoft-exchange-diagnostics: 1; CY1PR05MB1946; 5:pCyeK+55OsRC6Bp732FJ2uxPyYyI93hVc3XNBnO9bdLhf98Eqpa8+/XctIWvLBJLy2Apu11r+N5EZOtg2CPdl4SXVYQq9zVI0Y/TQd/4/dG2Bq80VI6nHApdkFHuPb076GxlVrjdYFFC0xfzhtdDnA==; 24:pruGuWeIKGwjgBTm772uhdknwEDCkcs/qyQ1gZw7MmLRevMcmId+V34PlZL+R2w4qZXeh4e8bs3n3i2fDt1+p0l8X2xGy7RjAXYo0X4ME2M= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:CY1PR05MB1946; x-ld-processed: bea78b3c-4cdb-4130-854a-1d193232e5f4,ExtAddr x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046); SRVR:CY1PR05MB1946; BCL:0; PCL:0; RULEID:; SRVR:CY1PR05MB1946; x-forefront-prvs: 0879599414 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(24454002)(69234005)(377454003)(479174004)(6116002)(66066001)(5002640100001)(2900100001)(15975445007)(92566002)(10400500002)(586003)(93886004)(5004730100002)(3280700002)(3660700001)(2906002)(1096002)(3846002)(102836003)(81166005)(11100500001)(2950100001)(77096005)(5008740100001)(36756003)(86362001)(19580395003)(110136002)(19580405001)(1220700001)(4326007)(87936001)(230783001)(33656002)(54356999)(76176999)(106116001)(189998001)(99286002)(122556002)(50986999)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR05MB1946; H:CY1PR05MB1947.namprd05.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; Content-Type: text/plain; charset="us-ascii" Content-ID: <8797A43AE54FE0428AF87CE8527F9EF9@namprd05.prod.outlook.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-originalarrivaltime: 12 Mar 2016 19:10:29.4423 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR05MB1946 Archived-At: Cc: "Salz, Rich" , denis bider , "curdle@ietf.org" , Paul Hoffman Subject: Re: [Curdle] I-D Action: draft-ietf-curdle-rsa-sha2-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Mar 2016 19:10:49 -0000 > On Mar 12, 2016, at 10:53 AM, Stephen Farrell = wrote: >=20 >=20 >=20 > On 12/03/16 17:37, Salz, Rich wrote: >>> And it seems to be directly prohibited by the last paragraph of the >>> charter that was agreed to by the IETF. >>=20 >> I think that you're right. If the working group feels strongly that >> we should ask to amend the charter to include things such as "RSA >> with SHA2", or prefers to not expand in that area, please speak up >> here. >=20 > FYI, if the WG don't want to take this on, then I'll be happy to > look at AD sponsoring it. So, saying "not in curdle" here is not > the same as saying "let's not do the work." (That said, I've not > read the draft yet.) For what it may be worth, draft-ietf-curdle-ssh-kex-sha2 also adds three Diffie-Helman key exchange groups (code points) with sha2 as well as indicating the relative merits of the all of the current key exchange methods including the new curve25519 and curve448 methods. So, that draft is sort of a hybrid for SSH and the WG. If you want to separate out the two concepts into a WG draft and an individual draft for SSH, let me know. I have no objection to amending the charter if that is not too much or a burden to the WG chairs and members. > Cheers, > S. >=20 >>=20 >> _______________________________________________ Curdle mailing list=20 >> Curdle@ietf.org https://www.ietf.org/mailman/listinfo/curdle >>=20 >=20 > _______________________________________________ > Curdle mailing list > Curdle@ietf.org > https://www.ietf.org/mailman/listinfo/curdle Enjoy! -- Mark From nobody Sat Mar 12 11:54:36 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB14112D804 for ; Sat, 12 Mar 2016 11:54:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.702 X-Spam-Level: X-Spam-Status: No, score=-2.702 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BA-7_t5iCzDA for ; Sat, 12 Mar 2016 11:54:33 -0800 (PST) Received: from prod-mail-xrelay07.akamai.com (prod-mail-xrelay07.akamai.com [23.79.238.175]) by ietfa.amsl.com (Postfix) with ESMTP id 1D32A12D821 for ; Sat, 12 Mar 2016 11:54:33 -0800 (PST) Received: from prod-mail-xrelay07.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id 5AABE433435; Sat, 12 Mar 2016 19:54:32 +0000 (GMT) Received: from prod-mail-relay10.akamai.com (prod-mail-relay10.akamai.com [172.27.118.251]) by prod-mail-xrelay07.akamai.com (Postfix) with ESMTP id 44965433404; Sat, 12 Mar 2016 19:54:32 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; s=a1; t=1457812472; bh=Kve+tr1nP7I7VvnKjcPbopCenaTZAlu8rQTYndqC/Og=; l=724; h=From:To:CC:Date:References:In-Reply-To:From; b=T2suoe2XrwwQn2lb7Hm4kn+b0NUbLzFvZwztvTNbm9hCciazF69hjia60Vea2y8dk uYpCqkDgeJaxPKnZZ2q2hU4k3hi23p8PG/3VbWPZ6h2hhPK7kX7QUJ6UkXhp9PfJV3 sQeKg/GfJD+eE89v8YXthGSdweUatnz1NJUzdE4g= Received: from email.msg.corp.akamai.com (usma1ex-cas2.msg.corp.akamai.com [172.27.123.31]) by prod-mail-relay10.akamai.com (Postfix) with ESMTP id 421891FCBF; Sat, 12 Mar 2016 19:54:32 +0000 (GMT) Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com (172.27.123.101) by usma1ex-dag1mb6.msg.corp.akamai.com (172.27.123.65) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Sat, 12 Mar 2016 11:54:31 -0800 Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com ([172.27.123.101]) by usma1ex-dag1mb1.msg.corp.akamai.com ([172.27.123.101]) with mapi id 15.00.1130.005; Sat, 12 Mar 2016 14:54:31 -0500 From: "Salz, Rich" To: Mark Baushke , Stephen Farrell Thread-Topic: [Curdle] I-D Action: draft-ietf-curdle-rsa-sha2-00.txt Thread-Index: AQHRe7qd2WjtC9E/r0Gm8I3+gZvzRZ9WY1IA//+wfjCAAGl9gIAABL6A//+4CyA= Date: Sat, 12 Mar 2016 19:54:31 +0000 Message-ID: <125d47e7dd1c42a5be479d634d48726e@usma1ex-dag1mb1.msg.corp.akamai.com> References: <220654724-3008@skroderider.denisbider.com> <816BE0C0-2BD3-45C8-A577-D8133F9836E1@vpnc.org> <14e7135a49ef4e469371cf96002f8538@usma1ex-dag1mb1.msg.corp.akamai.com> <56E465AB.3040609@cs.tcd.ie> <08228DC3-117C-497E-A8D4-C8DB28A0C06B@juniper.net> In-Reply-To: <08228DC3-117C-497E-A8D4-C8DB28A0C06B@juniper.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.36.40] Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: denis bider , "curdle@ietf.org" , Paul Hoffman Subject: Re: [Curdle] I-D Action: draft-ietf-curdle-rsa-sha2-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 12 Mar 2016 19:54:34 -0000 > For what it may be worth, draft-ietf-curdle-ssh-kex-sha2 also adds three > Diffie-Helman key exchange groups (code points) with sha2 as well as > indicating the relative merits of the all of the current key exchange met= hods > including the new curve25519 and curve448 methods. So, that draft is sort= of > a hybrid for SSH and the WG. > If you want to separate out the two concepts into a WG draft and an > individual draft for SSH, let me know. Regardless of what happens, I think it makes sense to have two documents. = Small simple docs covering an individual "thing" make sense. If you want to do it now, before many have read the existing one, great. I= f you don't have time, that's also fine. From nobody Mon Mar 14 08:43:44 2016 Return-Path: X-Original-To: curdle@ietf.org Delivered-To: curdle@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id BA68612DBC0; Mon, 14 Mar 2016 08:43:42 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.16.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160314154342.20188.48226.idtracker@ietfa.amsl.com> Date: Mon, 14 Mar 2016 08:43:42 -0700 Archived-At: Cc: curdle@ietf.org Subject: [Curdle] I-D Action: draft-ietf-curdle-ssh-kex-sha2-03.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Mar 2016 15:43:42 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CURves, Deprecating and a Little more Encryption of the IETF. Title : Key Exchange (KEX) Method Updates and Recommendations for Secure Shell (SSH) Author : Mark D. Baushke Filename : draft-ietf-curdle-ssh-kex-sha2-03.txt Pages : 8 Date : 2016-03-14 Abstract: This document adds recommendations for adoption of ssh-curves from the [I-D.ietf-curdle-ssh-curves], adds some new Modular Exponential (MODP) Groups, and deprecates some previously specified Key Exchange Method algorithm names for the Secure Shell (SSH) protocol. It also updates [RFC4253], [RFC4419], [RFC4462], and [RFC5656] by specifying the set key exchange algorithms that currently exist and which ones MUST, SHOULD, MAY, and SHOULD NOT be implemented. New key exchange methods use the SHA-2 family of hashes. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-curdle-ssh-kex-sha2/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-curdle-ssh-kex-sha2-03 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-curdle-ssh-kex-sha2-03 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Mar 18 09:33:26 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D69B12D68E for ; Fri, 18 Mar 2016 09:33:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.701 X-Spam-Level: X-Spam-Status: No, score=-2.701 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fbW8iUUxqtYh for ; Fri, 18 Mar 2016 09:33:23 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (prod-mail-xrelay07.akamai.com [23.79.238.175]) by ietfa.amsl.com (Postfix) with ESMTP id 931E512D571 for ; Fri, 18 Mar 2016 09:33:23 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id A27AF433435 for ; Fri, 18 Mar 2016 16:33:22 +0000 (GMT) Received: from prod-mail-relay10.akamai.com (prod-mail-relay10.akamai.com [172.27.118.251]) by prod-mail-xrelay07.akamai.com (Postfix) with ESMTP id 8BB17433431 for ; Fri, 18 Mar 2016 16:33:22 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; s=a1; t=1458318802; bh=ZRO/cfKbzP5Ki0McUyl8AvZ7ZwtOlcwJDvYftoscGMA=; l=5263; h=From:To:Date:From; b=ZO43GM+S/jJZkoEmNU8URoeaB+zDv0+gwcT/Ph2ALVTlgkMOf5ZCzWs6FJxsvFe6n RF5oIOMY86lchHrvaVythRVR2yauNBw6yVtUlL0SFtEua173xainGtvDqWzOzCjszU 5EB2R1r7J21RmRZH0AqRN9fmEO3+INg7stRzmIw8= Received: from email.msg.corp.akamai.com (ecp.msg.corp.akamai.com [172.27.123.34]) by prod-mail-relay10.akamai.com (Postfix) with ESMTP id 81D481FC8E for ; Fri, 18 Mar 2016 16:33:22 +0000 (GMT) Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com (172.27.123.101) by usma1ex-dag1mb1.msg.corp.akamai.com (172.27.123.101) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Fri, 18 Mar 2016 12:33:21 -0400 Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com ([172.27.123.101]) by usma1ex-dag1mb1.msg.corp.akamai.com ([172.27.123.101]) with mapi id 15.00.1130.005; Fri, 18 Mar 2016 12:33:21 -0400 From: "Salz, Rich" To: "curdle@ietf.org" Thread-Topic: Reminder -- submit your drafts! Thread-Index: AdGBMZc4pEDmSXnlTtmQ1WsppnPTEg== Date: Fri, 18 Mar 2016 16:33:21 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.45.114] Content-Type: multipart/alternative; boundary="_000_f182f5116fb74ef293402b73bca1bcaeusma1exdag1mb1msgcorpak_" MIME-Version: 1.0 Archived-At: Subject: [Curdle] Reminder -- submit your drafts! X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 18 Mar 2016 16:33:25 -0000 --_000_f182f5116fb74ef293402b73bca1bcaeusma1exdag1mb1msgcorpak_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Monday is the cut-off for submitting documents for IETF-95 next month. The current doc list can be found here: https://datatracker.ietf.org/wg/cur= dle/documents/ Summarized here: draft-ietf-curdle-dnskey-ed25519 Ed25519 for DNSSEC draft-ietf-curdle-dnskey-ed448 Ed448 for DNSSEC draft-ietf-curdle-rsa-sha2 Use of RSA Keys with SHA-2 256 and 512 in Secure= Shell (SSH) draft-ietf-curdle-ssh-curves Secure Shell (SSH) Key Exchange Method using C= urve25519 and Curve448 draft-ietf-curdle-ssh-ext-info Extension Negotiation in Secure Shell (SSH) draft-ietf-curdle-ssh-kex-sha2 Key Exchange (KEX) Method Updates and Recomm= endations for Secure Shell (SSH) Note that none of them are more than eight pages. Adopting some might need= a charter modification, and some are subject of moving to DNSOPS, with col= laborative review here. Is anyone looking at new curves for S/MIME-CMS? Working with OPENPGP? You've got all weekend... start writing :) -- Senior Architect, Akamai Technologies IM: richsalz@jabber.at Twitter: RichSalz --_000_f182f5116fb74ef293402b73bca1bcaeusma1exdag1mb1msgcorpak_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Monday is the cut-off for submitting documents for I= ETF-95 next month.

 

The current doc list can be found here: https://datatracker.ietf.org/wg/curdle/documents/  Summarized here= :

 

draft-ietf-curdle-dnskey-ed25519 Ed25519 for DNSSEC<= o:p>

draft-ietf-curdle-dnskey-ed448 Ed448 for DNSSEC=

draft-ietf-curdle-rsa-sha2 Use of RSA Keys with SHA-= 2 256 and 512 in Secure Shell (SSH)

draft-ietf-curdle-ssh-curves Secure Shell (SSH) Key = Exchange Method using Curve25519 and Curve448

draft-ietf-curdle-ssh-ext-info Extension Negotiation= in Secure Shell (SSH)

draft-ietf-curdle-ssh-kex-sha2 Key Exchange (KEX) Me= thod Updates and Recommendations for Secure Shell (SSH)

 

Note that none of them are more than eight pages.&nb= sp; Adopting some might need a charter modification, and some are subject o= f moving to DNSOPS, with collaborative review here.

 

Is anyone looking at new curves for S/MIME-CMS? = ; Working with OPENPGP?  

 

You’ve got all weekend… start writing J

 

-- 

Senior Architect, Akamai Technologies

IM: richsalz@jabber.at Twitter: RichSalz<= /p>

 

--_000_f182f5116fb74ef293402b73bca1bcaeusma1exdag1mb1msgcorpak_-- From nobody Sat Mar 19 16:37:56 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 42B8112D505; Sat, 19 Mar 2016 12:53:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.101 X-Spam-Level: X-Spam-Status: No, score=-1.101 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_ADSP_ALL=0.8, RP_MATCHES_RCVD=-0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 86gGpuCcllZS; Sat, 19 Mar 2016 12:53:43 -0700 (PDT) Received: from mx.nohats.ca (mx.nohats.ca [193.110.157.68]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6B18612D5BC; Sat, 19 Mar 2016 12:44:03 -0700 (PDT) Received: from localhost (localhost [IPv6:::1]) by mx.nohats.ca (Postfix) with ESMTP id 3qSCFr1Vmtz377; Sat, 19 Mar 2016 20:44:00 +0100 (CET) X-OPENPGPKEY: Message passed unmodified X-Virus-Scanned: amavisd-new at mx.nohats.ca Received: from mx.nohats.ca ([IPv6:::1]) by localhost (mx.nohats.ca [IPv6:::1]) (amavisd-new, port 10024) with ESMTP id W2QyoYQFUca0; Sat, 19 Mar 2016 20:43:59 +0100 (CET) Received: from bofh.nohats.ca (206-248-139-105.dsl.teksavvy.com [206.248.139.105]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by mx.nohats.ca (Postfix) with ESMTPS; Sat, 19 Mar 2016 20:43:59 +0100 (CET) Received: by bofh.nohats.ca (Postfix, from userid 1000) id 4928C6019B73; Sat, 19 Mar 2016 15:43:58 -0400 (EDT) DKIM-Filter: OpenDKIM Filter v2.10.3 bofh.nohats.ca 4928C6019B73 Received: from localhost (localhost [127.0.0.1]) by bofh.nohats.ca (Postfix) with ESMTP id 44D4226087; Sat, 19 Mar 2016 15:43:58 -0400 (EDT) Date: Sat, 19 Mar 2016 15:43:58 -0400 (EDT) From: Paul Wouters To: dnsop Message-ID: User-Agent: Alpine 2.20 (LFD 67 2015-01-07) MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset=US-ASCII Archived-At: X-Mailman-Approved-At: Sat, 19 Mar 2016 16:37:55 -0700 Cc: curdle@ietf.org Subject: [Curdle] Introducing draft-wouters-sury-dnsop-algorithm-update X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 19 Mar 2016 19:53:44 -0000 Hi, there was an interest in deprecating some DNSSEC related algorithms. Ondrey and I wrote a draft that tries to introduce and depricate DNSSEC algorithms similar to how it has been done for IKE in RFC4307 and 4307bis: Comments, feedback would be great :) https://tools.ietf.org/html/draft-wouters-sury-dnsop-algorithm-update Paul From nobody Sun Mar 20 12:44:18 2016 Return-Path: X-Original-To: curdle@ietf.org Delivered-To: curdle@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 45C2A12D546; Sun, 20 Mar 2016 12:44:14 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.17.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160320194414.8969.92761.idtracker@ietfa.amsl.com> Date: Sun, 20 Mar 2016 12:44:14 -0700 Archived-At: Cc: curdle@ietf.org Subject: [Curdle] I-D Action: draft-ietf-curdle-pkix-eddsa-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Mar 2016 19:44:14 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CURves, Deprecating and a Little more Encryption of the IETF. Title : Using EdDSA with Ed25519/Ed448 in the Internet X.509 Public Key Infrastructure Authors : Simon Josefsson Nikos Mavrogiannopoulos Filename : draft-ietf-curdle-pkix-eddsa-00.txt Pages : 10 Date : 2016-03-20 Abstract: This document specify algorithm identifiers and ASN.1 encoding formats for EdDSA digital signatures and subject public keys used in the Internet X.509 Public Key Infrastructure (PKIX) for Certificates and CRLs. Parameters for Ed25519, Ed25519ph, Ed448, and Ed448ph are defined. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-curdle-pkix-eddsa/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-curdle-pkix-eddsa-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sun Mar 20 12:54:24 2016 Return-Path: X-Original-To: curdle@ietf.org Delivered-To: curdle@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 348FA12D611; Sun, 20 Mar 2016 12:54:21 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.17.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160320195421.8918.52766.idtracker@ietfa.amsl.com> Date: Sun, 20 Mar 2016 12:54:21 -0700 Archived-At: Cc: curdle@ietf.org Subject: [Curdle] I-D Action: draft-ietf-curdle-pkix-newcurves-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Mar 2016 19:54:21 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CURves, Deprecating and a Little more Encryption of the IETF. Title : Using Curve25519 and Curve448 in PKIX Author : Simon Josefsson Filename : draft-ietf-curdle-pkix-newcurves-00.txt Pages : 4 Date : 2016-03-20 Abstract: This document specify "named curve" object identifiers for the Curve25519 and Curve448 curves, for use in various X.509 PKIX structures. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-curdle-pkix-newcurves/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-curdle-pkix-newcurves-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Sun Mar 20 13:26:29 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 75A1A12D625 for ; Sun, 20 Mar 2016 13:26:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IUBQdqWEmHmB for ; Sun, 20 Mar 2016 13:26:26 -0700 (PDT) Received: from welho-filter2.welho.com (welho-filter2.welho.com [83.102.41.24]) by ietfa.amsl.com (Postfix) with ESMTP id 364A112D5AC for ; Sun, 20 Mar 2016 13:26:26 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by welho-filter2.welho.com (Postfix) with ESMTP id ADB1B1707 for ; Sun, 20 Mar 2016 22:26:24 +0200 (EET) X-Virus-Scanned: Debian amavisd-new at pp.htv.fi Received: from welho-smtp2.welho.com ([IPv6:::ffff:83.102.41.85]) by localhost (welho-filter2.welho.com [::ffff:83.102.41.24]) (amavisd-new, port 10024) with ESMTP id A3EjpVQSHh9h for ; Sun, 20 Mar 2016 22:26:24 +0200 (EET) Received: from LK-Perkele-V2 (87-100-143-35.bb.dnainternet.fi [87.100.143.35]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by welho-smtp2.welho.com (Postfix) with ESMTPSA id 615B021C for ; Sun, 20 Mar 2016 22:26:24 +0200 (EET) Date: Sun, 20 Mar 2016 22:26:22 +0200 From: Ilari Liusvaara To: curdle@ietf.org Message-ID: <20160320202622.GA31182@LK-Perkele-V2.elisa-laajakaista.fi> References: <20160320194414.8969.92761.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <20160320194414.8969.92761.idtracker@ietfa.amsl.com> User-Agent: Mutt/1.5.24 (2015-08-30) Sender: ilariliusvaara@welho.com Archived-At: Subject: Re: [Curdle] I-D Action: draft-ietf-curdle-pkix-eddsa-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Mar 2016 20:26:28 -0000 On Sun, Mar 20, 2016 at 12:44:14PM -0700, internet-drafts@ietf.org wrote: > > Filename : draft-ietf-curdle-pkix-eddsa-00.txt The certificate example contains signature OID 1.3.101.100.1, whereas the prose says the signature OID is 1.3.101.101. Which one is correct? -Ilari From nobody Sun Mar 20 13:32:13 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 12B0812D711 for ; Sun, 20 Mar 2016 13:32:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6a10FcsLFMBF for ; Sun, 20 Mar 2016 13:32:10 -0700 (PDT) Received: from welho-filter1.welho.com (welho-filter1.welho.com [83.102.41.23]) by ietfa.amsl.com (Postfix) with ESMTP id 7F2EE12D57C for ; Sun, 20 Mar 2016 13:32:10 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by welho-filter1.welho.com (Postfix) with ESMTP id 714101919 for ; Sun, 20 Mar 2016 22:32:09 +0200 (EET) X-Virus-Scanned: Debian amavisd-new at pp.htv.fi Received: from welho-smtp2.welho.com ([IPv6:::ffff:83.102.41.85]) by localhost (welho-filter1.welho.com [::ffff:83.102.41.23]) (amavisd-new, port 10024) with ESMTP id AXt3_wG_65a7 for ; Sun, 20 Mar 2016 22:32:09 +0200 (EET) Received: from LK-Perkele-V2 (87-100-143-35.bb.dnainternet.fi [87.100.143.35]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by welho-smtp2.welho.com (Postfix) with ESMTPSA id 1847221C for ; Sun, 20 Mar 2016 22:32:09 +0200 (EET) Date: Sun, 20 Mar 2016 22:32:07 +0200 From: Ilari Liusvaara To: curdle@ietf.org Message-ID: <20160320203207.GB31182@LK-Perkele-V2.elisa-laajakaista.fi> References: <20160320195421.8918.52766.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <20160320195421.8918.52766.idtracker@ietfa.amsl.com> User-Agent: Mutt/1.5.24 (2015-08-30) Sender: ilariliusvaara@welho.com Archived-At: Subject: Re: [Curdle] I-D Action: draft-ietf-curdle-pkix-newcurves-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 20 Mar 2016 20:32:12 -0000 On Sun, Mar 20, 2016 at 12:54:21PM -0700, internet-drafts@ietf.org wrote: > Filename : draft-ietf-curdle-pkix-newcurves-00.txt Doesn't PKIX-eddsa already document how to do prehashed variants (if one actually wants to use those) in superrior way? (But id-Curve25519 and id-Curve448 could be useful for some purposes). -Ilari From nobody Mon Mar 21 22:14:59 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C77512D577 for ; Mon, 21 Mar 2016 22:14:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9qDY42qgnX4f for ; Mon, 21 Mar 2016 22:14:56 -0700 (PDT) Received: from mail-wm0-x22b.google.com (mail-wm0-x22b.google.com [IPv6:2a00:1450:400c:c09::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7D50A12D0C9 for ; Mon, 21 Mar 2016 22:14:56 -0700 (PDT) Received: by mail-wm0-x22b.google.com with SMTP id l68so136034394wml.0 for ; Mon, 21 Mar 2016 22:14:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=to:from:subject:message-id:date:user-agent:mime-version :content-transfer-encoding; bh=HH6mYQTQ1+SrzopGyzEmGuRBbM8cn64Odhsb5D3OnRQ=; b=gLnNHmBnzelPkMD784v+wVy2aZTnN6uFd8e5IedhB3vQPdoLHSrvtX+QFcapQ9iKrs I/9y5iWgI2W0eqloTAmO8Dn7+TksyYPYs4Yjk8bhK3ueEE+E+zQ2QZHZAoaBearOuImB qJbmWA/WYNpCKlZuAYksX2hile8qKC0B5sakyBkM2XPmmQtM7/aOOwF/n03RidUToC4X Yg7ibiuTiFIJtB5krBcTxP0hctBEvGPT9PB8JmNMPFYcsr5ZF2+/SskBo3fMUmAtBLT5 xQOz6Vc95snmigZCxAKj0V48QtLCopvd3BxizgqEOvoh6/5H6VMkd2/rdtfFDBEEi0PO moAA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version:content-transfer-encoding; bh=HH6mYQTQ1+SrzopGyzEmGuRBbM8cn64Odhsb5D3OnRQ=; b=Z6pSq157thbJ4NQ5OvSI6YdJnpkMZEGvNDBgulrCSIklcJApUYAMr6bPYhBe7ggs5A QpJifmBaSJkJi6rt0JzpBuZs+cb0c6SHkcL3P0s2DDe59VMsi4xrGqB8wNbapuxz5U1o VNM0AGl/RFnDCvlO8hRzMn145uSjHyd2K16yvv7CRmMW6lA+wEhXWcS3kSEgEqe314n6 ycxKEfNIEQ99p0jvlRuvn9HRrCRml+wSn+C+sAbtXdSw08z5YvjvPzRjg2jWzUwtfRFo DrqgNBPPCa4nk0QycRTDdf9uGOvDQTOQKtHI+N9cxCDVIDRz4GVcnt0EQRmvb95HLxOp d77A== X-Gm-Message-State: AD7BkJIMqV0wHpxgWVVh3CDF4a0nRRUIYaFoBgnkQeRipUEbxWbQAYNC3a85QCtc0O9gCQ== X-Received: by 10.194.103.198 with SMTP id fy6mr38655436wjb.48.1458623694930; Mon, 21 Mar 2016 22:14:54 -0700 (PDT) Received: from [192.168.1.79] (83.203.130.77.rev.sfr.net. [77.130.203.83]) by smtp.googlemail.com with ESMTPSA id m6sm28321900wje.21.2016.03.21.22.14.53 for (version=TLSv1/SSLv3 cipher=OTHER); Mon, 21 Mar 2016 22:14:54 -0700 (PDT) To: curdle@ietf.org From: Anders Rundgren Message-ID: <56F0D4C7.30909@gmail.com> Date: Tue, 22 Mar 2016 06:14:47 +0100 User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [Curdle] draft-ietf-curdle-pkix-eddsa-00 X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Mar 2016 05:14:58 -0000 Hi, I'm a bit concerned about the transport of these new key types. The de-facto standard seems (nowadays) be including the public key in private key formats but it doesn't appear to be a part of the current PEM private key definition. I would prefer if keys followed the existing (PKCS #1?) PEM blob format. JOSE (for examples) mandates the inclusion of public key data for private keys. How about PKCS #8 and PKCS #12? Anders From nobody Tue Mar 22 06:29:20 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 086A012D747; Tue, 22 Mar 2016 06:29:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.22 X-Spam-Level: X-Spam-Status: No, score=-4.22 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DMQqokjZGq4D; Tue, 22 Mar 2016 06:29:17 -0700 (PDT) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 95AED12D740; Tue, 22 Mar 2016 06:29:16 -0700 (PDT) X-AuditID: c618062d-f79216d00000767f-92-56f143316607 Received: from EUSAAHC004.ericsson.se (Unknown_Domain [147.117.188.84]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id EE.9C.30335.13341F65; Tue, 22 Mar 2016 14:05:54 +0100 (CET) Received: from EUSAAMB107.ericsson.se ([147.117.188.124]) by EUSAAHC004.ericsson.se ([147.117.188.84]) with mapi id 14.03.0248.002; Tue, 22 Mar 2016 09:29:03 -0400 From: Daniel Migault To: "curdle@ietf.org" Thread-Topic: proposed agenda Thread-Index: AdGEPnea/tiiWdW4QnO5+qxWC/kMhA== Date: Tue, 22 Mar 2016 13:29:01 +0000 Message-ID: <2DD56D786E600F45AC6BDE7DA4E8A8C11221F9F0@eusaamb107.ericsson.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.9] Content-Type: multipart/related; boundary="_005_2DD56D786E600F45AC6BDE7DA4E8A8C11221F9F0eusaamb107erics_"; type="multipart/alternative" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupileLIzCtJLcpLzFFi42KZXLonRNfI+WOYwek9/BYzezYwW2xdOIvZ gcljyZKfTAGMUVw2Kak5mWWpRfp2CVwZL/ZcYS6Yvoa5on3fObYGxhkzmbsYOTkkBEwkDr0/ ygZhi0lcuLceyObiEBI4wiixZ9ItZghnOaPE602NYB1sAkYSbYf62UFsEQF1iROHdrB2MXJw MAuYSnR2lYCEhQUkJFbu/MICUSIr8WDtMihbT2L/3QVgy1gEVCWadnxhBbF5BXwlVs9dBVbD CHTE91NrmEBsZgFxiVtP5jNBHCci8fDiaahDRSVePv7HCmErSuzrn84OciezQDejxJsZ91kg hgpKnJz5hGUCo/AsJLNmIaubhaQOoihfovH7DTYIW0diwe5PULa2xLKFr5lh7DMHHjNhiutI bL60E2qOokRb52yomqWMEo/fGsDUnFj2kR2mZkr3Q3aY+NK2aUC7OMDiXXfKIO5cxiix5OlL FpiaWQ0nGZH1LmAUWsXIUVpckJObbmSwiRGYKo5JsOnuYLw/3fMQowAHoxIPr8HWD2FCrIll xZW5hxhVgFofbVh9gVGKJS8/L1VJhDff/WOYEG9KYmVValF+fFFpTmrxIUZpDhYlcd71by+H CQmkJ5akZqemFqQWwWSZODilGhhTwlSnbd7/8VqEW29c6cpfcw+v33+P4Y3xqiPffKu/POgy cwhhtkph89hVFZN1Xk2DqeGh9fq5N8QqPBctbZoXfohl0uPoqogZnJe8115WZ//zSyLgnJrz 5kXs7+0mXzasvxv8Vj38+5zJLOfWWOYLBh100+u4PIO9dqLN1hn86vt8udMdpykpsRRnJBpq MRcVJwIAt4t35x0DAAA= Archived-At: Cc: "curdle-chairs@ietf.org" Subject: [Curdle] proposed agenda X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Mar 2016 13:29:19 -0000 --_005_2DD56D786E600F45AC6BDE7DA4E8A8C11221F9F0eusaamb107erics_ Content-Type: multipart/alternative; boundary="_000_2DD56D786E600F45AC6BDE7DA4E8A8C11221F9F0eusaamb107erics_" --_000_2DD56D786E600F45AC6BDE7DA4E8A8C11221F9F0eusaamb107erics_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi, Please find the proposed agenda during the BA session. - Authors please confirm you will be presenting and please provide= your presentation by Sunday April 3. See you in BA! Rich and Daniel 16:20-17:20 - Tuesday Afternoon session II - Buen Ayre B Agenda: - draft-ietf-curdle-dnskey-ed25519-01 / draft-ietf-curdle-dnskey-ed448-0= 0 - draft-ietf-curdle-pkix-eddsa-00 - draft-ietf-curdle-pkix-newcurves-00 - draft-ietf-curdle-rsa-sha2-00 - draft-ietf-curdle-ssh-curves-00 - draft-ietf-curdle-ssh-ext-info-00 - draft-ietf-curdle-ssh-kex-sha2-03 - charter discussion on hosting ssh work: - do we need to re-charter ? - agreement / disagreement on hosting ssh work [Ericsson] DANIEL MIGAULT Researcher Research Ericsson 8500 Boulevard Decarie H4P 2N2 Montreal, Canada Phone +1 514 345 7900 46628 Mobile +1 514 452 2160 daniel.migault@ericsson.com www.ericsson.com [http://www.ericsson.com/current_campaign] Legal entity: Ericsson Canada Inc., registered office in Montreal. This Com= munication is Confidential. We only send and receive email on the basis of = the terms set out at www.ericsson.com/email_disclaimer --_000_2DD56D786E600F45AC6BDE7DA4E8A8C11221F9F0eusaamb107erics_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi,

 

Please find the proposed agenda during the BA sessio= n.

-       = ;   Authors please confirm you will be presenting and p= lease provide your presentation by Sunday April 3.

See you in BA!

Rich and Daniel

 

16:20-17:20 - Tuesday Afternoon session II - Buen Ay= re B

Agenda:

   - draft-ietf-curdle-dnskey-ed25519-01 /= draft-ietf-curdle-dnskey-ed448-00 

   - draft-ietf-curdle-pkix-eddsa-00<= o:p>

   - draft-ietf-curdle-pkix-newcurves-00

   - draft-ietf-curdle-rsa-sha2-00  &= nbsp;           &nbs= p;

   - draft-ietf-curdle-ssh-curves-00<= o:p>

   - draft-ietf-curdle-ssh-ext-info-00

   - draft-ietf-curdle-ssh-kex-sha2-03

 

   - charter discussion on hosting ssh wor= k:

       - do we need to= re-charter ?

       - agreement / d= isagreement on hosting ssh work

 

 

 

=

DANIEL MIGAULT
Researcher
Research


Ericsson
8500 Boulevard Decarie
H4P 2N2 Montreal, Canada
Phone +1 514 345 7900 46628
Mobile +1 514 452 2160
daniel.migault@ericsson.com
www.ericsson.com



3D"http://www.ericsson.com/current_campaign"

 

Legal entity: Ericsson Canad= a Inc., registered office in Montreal. This Communication is Confidential. = We only send and receive email on the basis of the terms set out at www.ericsson.com/email_disclaimer

--_000_2DD56D786E600F45AC6BDE7DA4E8A8C11221F9F0eusaamb107erics_-- --_005_2DD56D786E600F45AC6BDE7DA4E8A8C11221F9F0eusaamb107erics_ Content-Type: image/gif; name="image001.gif" Content-Description: image001.gif Content-Disposition: inline; filename="image001.gif"; size=2367; creation-date="Tue, 22 Mar 2016 13:29:01 GMT"; modification-date="Tue, 22 Mar 2016 13:29:01 GMT" Content-ID: Content-Transfer-Encoding: base64 R0lGODlhRAA8APcAAAIVTgAWUwAWVAQWTwUWUAcXUQkYUgAbUwAbVAoZUwAcVQEdVgMeVwQeWAYf WQAhWQAiWgggWgAjWwAjXAAkXQAlXgEmXwInYAAoYAQnYQApYQAqYQArYgArYwAsZAAuZg0sYA4t YRAtYREuYgQyZAUyZRMvYwczZhQwZAk0ZxYxZQs1aA42ahE3axI4bBQ5bQY9cBU6bgk+cRc7bxg8 cBo9cRo/bRw/bh1Abx5BcB9CcSFDciJEcyNFdCRGdSVHdiZHdylJeStLeyxMfC1NfS5Ofi9Pfy5Q ejBQgC9RezBSfDhQfDFTfTJUfjNUfzRVgDVWgTZXgjdYgzlZhDpahTtbhjxchz1diD5eiT9fikVe hUZfhkFhjEdgh0hhiEljiUtki0xljE1mjU5njk9oj1BpkFFqkVJrklNsk1VulVZvlk9xl1dwl1hx mF1xlFdzlFh0lV9zlll1lmB0l1p2l2F1mGJ2mV56m2V5nF97nGB8nWF9nmJ+n2N/oGSAoWWBomaC o2eDpGyDoG6CpmiEpW2EoW6Fom+Go3aFo3CHpHGIpXKJpnOKp3SMqHWNqXePrHiQrXmRrnqSr3uT sHyUsX6Ws3+XtISYr4easoibs4mctIqdtYueto2guI6huY+iupCjvJKlvZOmvpSnwJmou5WpwZqp vJuqvZyrvp2sv56twJ+uwaCvwqGww6KxxaOyxqS0x6W1yKa2yai4y6m5zKu6zay7zq28z7C8yq69 0bG9y6++0rK+zLO/zbTAzrXBz7bC0LjD0bnE0rrG07vH1bzI1r3J177K2L/L2cDM2sHN28PP3cfP 18TQ3sjQ2MbS4MrS28fT4cvT3MzV3c3W3s7X38/Y4NDZ4dLa4tPb5NTc5dXd5tbe59fg6Nni6trj 69vk7N/k5t3l7uDl6OHm6eLn6uPo6+Tp7OXq7ebs7uft7+nu8Orv8uvw8+zx9O3y9e7z9u/19/D2 +PL3+fP4+/T5/PX6/fb7/vn7+Pz6/vr8+ff9//v9+vn+//z/+/7//CH+EUNyZWF0ZWQgd2l0aCBH SU1QACwAAAAARAA8AAAI/gD/CRxIsKDBgwgN8tOnb1/ChxAjSjR4792vMyAaBLllb6LHjxDtvau2 SMYBCRYsSHAwSx/IlyD5ufMWCkqDBihTppQghB3MnxDhgbPVhsNJnUhTHigHtCnBeuCMKcpRAGfS qxLMOW1qTpmmKQ+OXr16oIu7rS/fPSOlhsQBB2OxPmiAwxg/tB6xtfLTo4HYuDolHOBQZI4xvBPf XYpiNCfgnQ0e5FDDyRniifUuSbD6OKWDAyPAVArW7rJHcSMcAxYcwUkjW99Mf9xnrMDjzQVw8JGF jR5BcrFMKZP90BmBuBEKcCCTSprPgfhs6VFCw8UOQfCIH0SX4wFSwQ2Y/lxqppWgNEdOaHCQwB7l Jd/aCe7D1fhBgheBjJWDL5AdqCo1iMBeUhLIoE58Bd3TjB9VuCELOfEUpEsaNJCgEmAFMIVgQfPA I49LA1mDSA4krNeZBBycs+FD7ISCxAgcdIbUAXRkt2JB9ghjhoUyJuWAEN7cONA+2zByg2o9pkSE J+/849CN6tDhAJKdZcCBDH5UIyRB8exxQJIpgeACGLR0tCVB3nh3ogQeuLBEJuQQdI+ZQvIzjG1x sZeBC0EEMtxA/LCjVyjGPHejNF8SyF4KQLARC53/vIONLGp8UMABB7wxjpDvQCHWSh70EEYnQQ5k Tze9HLLDAZxZMIAi/vPcyE8yRGxw0g1bOIJMQeQIcwkVglEpwQjobIlNJHksQstZA7mDzCdosFDA lBhqeCZB/FBTyh1A3EQlgSykc+1A5LQSyBMctHrbAZLwJ2Q9vjSiRQsOUHuiAwWQ8EexW5pjSRg7 WKDuaic5QckvTW5JDRMj2HuiXzQAYss29Vz7DhYD53nABmawgg2z41rTgIybHZDEJtio8+S4//Aj TKIasyAIM+tUzHJB3IyMFU5j0MKOuzcT9M4aMKv04ybl2HNX0AmZ4wVOErTQxzT5MD3RPWsFI4/V XHft9ddghy322GSX7dEywQijtjDBxDlN2mofwy87vhyjokDY0GLK/iq9lOPQpHsHc6A+zrRSCivI xPqPOr2ggoovB0aaTDDBiPvP29XwM0YOO8hQgwwvrPKPHTjkUEMNQZiRzD/HvOBELf+0s8kUKTwg QQqb/GPKFCVE1kMw9GxSRGNRxKYMG0dKcMMbu2KTBQ41bFIxHTfwYY8QDYiQRRVURGHLP1oc0AIX UWz2xD++DMACK/9cwgEBOdThhxOVYEMvEIoYQscww3DgQBSM4MMdypEOKEwpDnBYyRTQQY0c+GUH 0vhHFQ4ghnoYwQFGqAc60GGOefDDCwcAAzbScYSU/OMXBXCBLKghgwJQIRjskNQ5VpEBC/xBIOpg hycEMAJR/OMe/kzJBAcisAh1nCMRBxCBJrbhgwgIZhL/6IIDyGDBCMhAE5SQhCa48Q8QXoF/MpAA E05YgBe04hVfCkVBlIGSHNhhFaVhBQEyIIRA3EIgX9iABO7mDfaYoRs94MALOHADcnxhihZ0TNRg 5wUHiEAGNLAAEbpBxhekAhQDeEEuCqIPQfglaleYRjrQgKkNvKAN9mCCBFjwJHfAoAFYwEYg8xAF AnwCChGgohGixgc7zAEQ0+jiA1RghBiNQEUoNGMqBAACWRjkHccgxAxs54Z/rMMWcuhdA4YBhZSY yR0ecAAXACmBVFRCAjt4gQR0+YAx3uMeDtkHCKngDVGs5xJk/lRh/xrABkMRxB7heIEDoECQVdCA AKawAwgcsMl/7GIwg+jGDspJjiRIIAPrTKQLAKEHPcBBGF08QBbaUQ8VWAAI+WyFPNxgGydcYhWH +MQ3xtAJW1BCJWrABhlKYYs0cGAAtaBGCSQAg1UYVAIzkAY2JjqKf0ACBBLIZT2w1x4JFIAT/8gC Aaqwjn+kQQIbUEYw1Ce6bogBJ1ZyAB6SwYG2YvQG1ODFANq6gQR8IU6mWE9bh3WKfzijO2osRxFu UsFWcKITiO3EJYLJikasIlbSmMQkhvENRmRCS/+wxzAKcQYy+MEY6thEHMighkyo6BuRaMMY4rAK kHXDEWY4FUMkKPkPc3giEtEQyC4o4YhX3CMgAAA7 --_005_2DD56D786E600F45AC6BDE7DA4E8A8C11221F9F0eusaamb107erics_ Content-Type: image/gif; name="image002.gif" Content-Description: image002.gif Content-Disposition: inline; filename="image002.gif"; size=28241; creation-date="Tue, 22 Mar 2016 13:29:01 GMT"; modification-date="Tue, 22 Mar 2016 13:29:01 GMT" Content-ID: Content-Transfer-Encoding: base64 R0lGODlh9AFQAHAAACH5BAEAAP8ALAAAAAD0AVAAhxkZGRAZGRAQGSEhIRAQEAAQEBkhISkpKTEx MQAAEP//90JCMTo6OqWlpSEpKQgZCDoxKVpaWkpCQntzaykpIUI6KSkxKSkZGSkpMSEQEDo6KXNj WmNaSs7OzoR7e1pKQjpKSnNza0pCSkpSSjpCShlSUmtzhGNCMZyUnL29vULeUntjSkLeGeYQUq0Q UhBaGTFKIZxzWube1u/v71pKUr2cWsWlpaVaUqVSGTExKb2ce0pCITExOq1zGe+l5pSUa60QGeYQ GSkZKc5jUmNrYxAZ7xAZlEIZvUIZY73eWr3eEL0Q3r1jjIyUlN5SGXNKSpQ6nGs6nJQQnGsQnO8Q nO9jWuYxUuZzGa0xUjpCQqWltb0xnAAAAOacpXOUe5zv5pSUhOale5zvraUxGXOc75RrvXOcxWtr vWvOrWvO5r2lEBCMUhCMGXNrEO/eWoyMhGsZCEIZ75Q63kIZlJSlOms63mulOpQQ3pSlEGsQ3mul EJTOa+/eEO8Q3u9jjGvOa8Wl5uYxGXMpWnMZKXMIWubFrWucnDoQEL3ee73eMb0x3r1jrb1z3r1S 3mtjMZzFrUIZMUpaY0IpGaWc5u8xnDpShBDmzhCEzhCEhBDmhBC1zhBSzhC1hJzF3ualUpRr75Tm OmvmOmtr75TmEGvmEO+lEEKMUkKMGToxOmvvrWvv5r2lMRCtUhCtGRDvUhDvGRDOUhDOGRkQCO/e e+9z3pTva+/eMe8x3u9jrWvva+9S3hkhEHNCEJRjjBBShM7vpULmzkKEzkKEhELmhEK1zkJSzkK1 hL0QjBAACDpSpRDm7xCE7xCEpRDmpRC17xBS7xC1pRApvRApY2ucWhAIvRAIY++lMUKtUntCKUKt GRBSpRAQOu/vpULm70KE70KEpULmpUK170JS70K1pb0QrWtajMXm1ubO3ikxQs7v7xkIGUpjEMXF pUJSMQgpEMXO7xAxOikxCBAQAAgpOv/m9wAIGSEpOiEhCAAZGRAAGQAQABkxIRAQIRkZIRAZIQAA AAj/AAkkIFCAoMGCCPMVyKdPIcEEAwY0LDCQokEuBdAR6fRmBD8CBD6CtGjAAAGHCA+qnAjS4EgC JUFWVOmy5kh7CEKCFLmzAL8BLu1FFFhyoMFdIAcgqFBhx5MTQJtWuMHNDbYTjk5oHeKmBg5sO8K4 geQIBwVJkgbs6tdv18e2AzIM6Kd2rloK/VoOjTjAQAahQH+GRCDBpF2+9ijgjICKwFy3OkMa4DvA HsURDcyhyJKFskh+Jj8a4Ad5NMyQbkOXDrnP3kfSr3W+VjvbtVulEnIauE2ZL4ETNShQcHR1KYUV JxAgoBAxNAEEgU2OTg1SAocK+3LgdPTDXIQTH0Y8/4lAvh2YBh4eTSDigU6MFT8cfdgAfofWExxM GDIxoT+HDR9IkBsHDaAgwQcNpPBDAxtwwA4Y53nAYA4HorLUBzsMkINwzBGQwQQ6EFEBB0tNsMAJ YBCB4hsDviGiBExVIJ8EAJ6wwwYRrLDBButxMB8dK6xAhFII5NPSkUgiaRRIoxUkU0sJJGCPfp2k 0MA09iTg1kI7MWmAkzWBOdJHCfDzWUtmvpRkZPjsxI9PLQnlFnUfDfVTbX2JZFJIA6TpmAQROLJA Abt84MgTO9Sgww09rICNJCdggw0ONVSKAy86eHJCP/YwxVw/n/JFV29rDZBWBm7JRcFkEdmTQ5/N Df8gQRYw9TaAcANUEAECBgiVAWiSMflTRLNGYkgHKJhABAO9AlVSSXSNZhiwsP5kWEmgmQmUUnlK 5y1q0jrmKq8/JUbXT8pFhAGuwlWAwwcZVIBKrlrtIEkFkCzHT7T9ZJCuY6NFBNp8qLhawQLQrRAD DBKMMMIKHLTTTgNNNLDHBA38QIQJQNLhIweO8Njfeht40CAHPmZhDwMNiyDBef3FkILJHjzRQAMx QOiBB0od/AEDu1CQQ9AnoJJDDBNkQIEHHJwwQQUfgIGyDR5IsAARUgcowQk8fEADBzoq90HETv/w wdgfBLnCBwvwoBxCZ55J05FLLikQF8Y20UknDRj/Uk5n/OhDwD4lQfbaQm2GBGc+bYoE5kcptdQ4 QW8yjqafck8WrOa1DlDAZHsChWZBnJ9GAAbQKZ02JBVodYgjMeAQQw+S7sDLEJ7MXgMvN3giyW8n pHWBXbsQDytd/fCTAQZpEeAWqLD6hq2sOQwbEQXQVTYAD/OO2lewSL0GOggjEDGBCU14QUQkQpl2 Z2q7hBtT4X1iO510fYILG0ywuc9bDgiwh2FGZQAEfIA5A1iXcECFukOBqnU7+EAFlJODV/0qNZMB YP2+N4CxVcAv9pAAAxDAgBzAIAYRaEf5QOCIJuwhY+eZxs0i8AEibMCGKJvAznA4tgYJKAsIWICA /0RAww2AYWY6/AEYovaGDTTgaTuaAA2gtgMAMucEFCBADBiUgBOYrQIbwIAjUJC2BhAhCzQCQwT6 QQIiiAA8EQDbBhYwAkdEgEcHakcC9CEXAC6FASdAGJLkBhJ8GGlMC0mJk3zCBQIYIh1aMIM5GmAG F5GABELBSZ52IabDtcRJM1GTThxypIIcsie1YlKwRLOnmPBDgNbjE0ycI7D8SScyr8oNU+gFHDf0 YAOOQM4OcNCD2WGDFzXwxFVwUAEMNLMteBGCY+ziPdoETRL92hMBFNOcYfEjXdbrEwUqgJd+VIAH 9kAeX6SDDzPNyVokGIEIQBABio1gAftwlub6Ev8YZwFLWqAxQPKK98+A9k9a/ssWQiuDAA0GrFMS 4MGwhCOEdfUjBjEYTlbyZY8T4AABzNMeP72pnAyYBgEcoAECzMSqfTDgpS9dAR2ywABTVAwFE3gE GDzAjh/8QAdeAMMEAkUylKGsQREQ0KwqICA6AsoEHogBT1HAlA2gAAwbYMcI+rMLjH0APAsYJ6QG gIwn6IADFPiAB1DxgQhgwIhqtUFSFzABA+WDH+gQwQcicVQOIGwHHCCCDX/AA6NQpJHTREB2asKT LrVEIacEySEhl4BIdMIce6tSJ34QiUi0o4QMsAc6XEOTbJXyI4m7a2ReAieftAklBGjTIifzpj3/ 7Q909RNXX1j1ucoI8DTNcR5pPncafpSTAP3gwFOwcYMh1CAGQ4DUDmIQnHgMIXY6mAU2KiAJCtjo AkJQp60WWD9IMEcuoMlAtATal12AEzGT6QdIDRDRbcVFNPvDr3AHwAB0MABrOh2BLdFRP4Wmpn+C oS1BNRfQ05hmftL5J0xuQ4HWBBBWH0DFBPtlDyEwh0Ozo4AQJJgDSOygONChS0O9Gavd8ENXH3CN 5iYzQhgw4LNZcISPvADUBXnAx2AIagq88NkfM2AHI5BAOwSkHAaQIKKzUmoEiIC0CfwARA2whzyc 2IA0Ru0HC/BrDr7auuGtwAYD4ILMpriBi4IB/xUxeMTPJDCBN9CKH/tQHgfiyAFU+JUBDxPsBHiA EZ40ln8F4QlkVvumT8I2cpX9wjsekYJHXCmFI2jHaGEwWk6eJNEOVpzjIOeSRCJpcU4ik2wSmScm 0WmWznJeaEzzHPuGK9QfcYdO5tKhpmDFRiso5iqGoJVj7kISPfBKDJTJD62kJWjFiwhdiseW5DnP MTm4AGRsqTxsBTB+lJnmANBBgoKJmy4hQbBq0mSAl5bPCykwxJdAI1rQ3cadsEFwraxFGun8FqCz FI2D+c0/CmDgVcqRgIVy45iJVtTgCsMmBXZgnwoAhtfryl5cbIkBD9pjmneqDAMsQNMbMyACP/94 BBF+0ASM/YDHJmCHXBEwAiXCFAYIAOJLF8AAIP6QjhyYwA13tqMN/MAGkRhAyTwwAQlcGRJh9lEg T3CBHegABbKQxQ8AJFQh/KAXFViQStU6aP0CCkAHinEEa0iEfQyksYYLWJIU3aVFHtJyBLkrQrhg j3dg1gxEIE8ERhBPEODk4waBjZg+yXhVJ94ncHKJbEltE4HNmn+poU1oRGcSnBggAZorDXGLuxMD SiAw+IiUI5yLgxU8dwdlkdQJXO+JGmAjK62TQKjWwpZ1XjBNuxheRH7PF3TVsviVocA8EBABwLRP WG6BzYHj96bP0twEHBCIg6dnrQNHeE4bRHD/P1pTPek/OFyg6dNtQvIX7RCGMKjAQF/kgjy8nOAG kgAbNr7KvKs05y8GhzC79RP9gAE8kBz2wBsRsQs58FkWgA42lgUw4AVN0EJeEFTToEQRwA4NEAE5 sAMQMkIjUAFZsAAlmHPvJyCosAA0cEc8YjJ9RWc2kDRhZ0QR0DrQcQINcgJkUSCyIAk41RZOg1O7 EAMGYkBMxwMbRxoSQATz0TBzpkKBlWaq5FgCZxIFIVuU4xK2tUh5p30GYSQFgDebNQ2OYArrAwKR QAIqsw8ksC201mjtlG6fFhJGsieHBCZOQkqkxg8OcTiTIUAF0C3FZRqc1yQMxU+8h3nEhRQu/0Ys 0PEaFYANq+AJtYcDOHABV/Fct/cEsjMLNQAp44RFtwIqo2KKphUba/F70cYqQiFu0+MqsiICuyFt r4Fg05dvnNRu5dMAnwcwu1U4AOVPETY9tzFjCCACjsErkoGLATUdChUT2gFAqHB6GgIryMUp/QAc 2HQoikEBkkIuyXMr54QB0kcaqINOvac9K2UANTQCL7UyTUAE09AEKKc+ZuQFGTMC+7ADDxJE8Mgy I9Q2CMMZJihENBQB/XEyOLJnOUBXEwAdTIMKqCA0TfEURkc1r2MDHBAvGLADP4ACL4gwEeABRNAE IqAleKErEfAEC0BDC4BkBzICu2AUn+Ekxf8oGCfhWLKhJpC1k2OSeHeDDoZABOUwDREQCSMAAv6F TiWBSYrzhV3yGY7zSY3WaJaTaAVhWFO5E4YhQBFmWvkzYYKxDwFkDyqTAY4BErp2jscYcuLCA7Rj I9jAATVAOyeGDa+zAlmxbDWgPFtTAbxWTWzRSiaxbYIxKugSicH4ExhAOAMQCYXxSup3hfhVGtBo GgWwMU0gAfwTMHWCb7mIfthCUCGRBZGQBYqhHZ6jW6xUUPp0fNgTiUwBG+pFGWQBFfwgCfZxAmAp Or0HHTDxK3NRa4hxK9xkAC4lMRRgCl6AcjfUBBsQVOsQVF4wAhTQDuzgAUFkNQvAc1bDAwT/SRg8 IAF6NQI8QgQfAyBnIyAVkAMc4AEfgAEwIhwIAAmRogM68AQ/cAMr0AA0QAEV+QEowAGSAAbsMC8c kCIU0DSS8CiAsgAfQBgmyFTtkFQEoA8fARmEohNwMi2RA2pIgSal9iRAWUoEwAXooD6RQAQgkAUg UAKKBUsft2geeqMxUaJAqZUnWndeeUswYRmnB3q39C0sxScBRHMSoGW7YFJ5QRpzGBr7gAHFRSSE 0Q+QwpvLBhb2kgORIhzDFDv3UQGmyE3pFBmq0U5zgl78BB2BeIzao5avxCqmmZmYZ1DPUifSEQEM MIj69JnTBI3UERN5skkrkwUkEAk88CrY/xMRr/IqsIZ5D+VKcfpNGmZt0kYXhjKmzZQBKyo61lJt ltdwvZEYGCAUCDQZI0AeEuAB0zACXjABNRd4XvBj+aSdyyJE9yRCPNdzQVSeJBge82EC7OkjI8AB SbYA57QcbXUCgrkukPIET7AjO7UCKUADhSIJG2ADEiAJW8cBODUBkWAmGTAIOgB2Z8Nz/ZgbQiRC +hB5kWFo0ZejJ3FoW/iFA/GTKtEmiUMm8EAEI1ACAZuk7VM8mhkbNtEkoxSVcGI3CZESCKuZIbQL 9gACDECWt+ROwWIPbvOioQMSJvUaI+oYzpQTBMCxE3Qr76EVrSMpd2kqadFdQtAUyOFdFf8QXnjR J78iXLOmJ5JBG9yUFIBhPaSTobQVGI6xDwM3qNFhP62pHCXhT/r0TwWWmYYxAKAXT4gKsMaFOgfn KqARiZ8pPxGGtJOBASdApea0ACaBKq7XDwvwFBU2JRGwKj+BQIdhGA3nihzCHIBBcwtwoRywDyXZ oj8wAtMwnRMgFO2AAkQQD0F3T+BZkEGkYW1zNjVkAh/QDmczAuHRVAjAAzHSD9P1KOb0H4XBBY4A Bk+AVQ1CAXUlATuAAmsFRikQCUZCsbmSAzTkRwPwnUHEAAtgGaOjTUdimaamfVuZdwshD2KyvDth k2AiJYpKAspxYQlYW5TDoYdUETzhhYz/RzmgxlhzMocF9ZULBhM+cWDCRbFZQAS+0EjulBdz8jmw oRbX2ykgNRcXFQbY8ARZgQ01EAY98ARZNE5CcAE2Kw/eBRXI+aT3VgATdwEEcZijsS8b8qSds049 uROblG4XPK8ANT0BVz9KmKfUxydkyz/58xM1uTGEp4YmEAkGgDqucnC1FECyRFvQ2D/9JCsIEC8f wBareRWkOAAi0KJZsAsTxCHLUUt2y08JlEAGty68Ji8LkAN8OXgnNwGmoJAnuQEUiyAjEA9AlKwU KkKVmxsHEkjrgSHh4TBChDBLYSGs86DJ9gGQ8AQx8AGNcwhnJnQFaoQ5MEYAwlcRQAN1/6I0zURD WcSAJBhEkSyhWWI6OjE5s7YboDQSd1dKRjIQdsMPRhFKCIEM81ABMmoP9pBPfUKVoiSUR3LBl7yT icNacUOHh9lozyIZEWbJ+3OyiRoJJusheSEX6hthBYg6E5RiQMEFJ6ADxOGslIID9gIqznoIIrYD znQizBFeVSoQkuAIGUIAOxB9olMZtqUTgZjO+YZrjiipqHG/AfeMAWOILFWklLp9BsAF/ECBkQAC TNmiPMBNVLwur2gAFsfLa1mat/UTBeBMops85ySYCHAojkBz1gsdyuFM69LRvcEqreLRGMAWEiq6 OcAAwGRHROAFbBcBarQbH7AHH2CWMP9lQEQgQlYDIwhzIFCjLCdwIHOcYW3DFEuxFBUwCCcwBjcw exvwix9xAjawAUbIn1pQASuQIi04ZVlQtAPAVg2SA6ACQKKrHGNNGBMKavgwsl0yLWDIJctrEVzJ yYzVlSMhD/Zwqrqby7txGqi2k6n2yjwqhqLMaNKxvlBqWli4Pv5EJ9SxLYhKW8KVbSCxFs6TOHyx 0cFlJlywAbZ3HysgCetyCANgH8LRXSLmpWRKnHkhHZ7orGpxAoUzGMUHpFF7heq81qihpvcMl65k mt+TUHNSz/f8mT+RAFkwSWjZopFgAvAQiAiHAeuilKCnIR8HUJjJbyl8sq/SM4Rhcfb/4QiOABTu pRwTBN2QMKUGR9CIwSEFWE6YuwFucwIgYChEoEIeMGVNAAJ9EQFegE6Dd9I4twAbAI/deU5noytD BTU4zWTKer3QLQmsYy9okX+eMxqS0LpGJzVgQEbnQQOosAHYhw77AhQY4IRxtBwcQtQUlAMKLiA8 IJSY7BPZMrJc0hBfKDhPoq9yrUjhywWtkj9p/ctVqSaNFq88uYV6GBsCh8uI1if4cNPzIxvrBhME hhp5sU3ho14mkTyhAYChMb9jqJ/7BzbdRX/mhA0UkAEeNhdLwRdNesFtEAPysQNCQ4CDCEvQET50 mH7pbORf4hwS1m8B5332I6gKxW4u/6xuNTkCM9AA/bw+AEvdERFAijECAaSUdaIdAyd3MTFQprVN ZL3Tw7sAkEC6ydFQ5S0JAKRACqTeDPRwbNE0TrcB48QUwYQy+eQFPwADETECa1VhnqtYJFRCQcQY TDVFJzBlEsRk4TnRHF2yJXYvgxAD2BAD1Q0UFKADO+UBjtAAYHACKCCSKUIeb1AJCaBe/dCENFQw oo09FrLROUCfSsUAAYK1jDbZbC0SghNKoKyjBlE3cdNa5YIU8ZM8ItslkzXXi1dIjHWVgL456fZO oJEPBjAPAMNKBOAOSj5jtpUBXACOBKGW36NKs0Z9QNEPXFABXaAwjvIrLL4D4QU1ZP8qYmsxTnJC GiAxiY7CXUKzLQhQKqGzJ1neapBBHT25bpl5vgMXGKlREL8NjVXrGGNoAg3AlE3QBMqCSThBQvmk GOY5DxmAmnli8/GMQaFZmRdspRP0ncOLAFqRQBu9HKhDAZAQ71Wc3h0tYgaXDxRAH1EDBlPEVBIK 3jQkAhOQBb2ikAinHGb5MwDEcwLOAW0sASZwg/KCxeJJ3hsN2mJ1L/fhRSh/KyjzAUpkMxNAICbT AFB1gyigl9DRVgGiHAg0TuS9IVAHKLlRGT/dmo0lPlj4aaTU1pLFJVJ5aInzOAOvUKE2h4yH1tem OF/uJkQRF7IR5Fvy5aUhYSk6tvb/K7Ibqsp8grRC8BVYi/OxEcLs9iuj0UU1AN4V4C+SIs5s0ToS V07rYrD80w9ZsQNN/CsAUQHBAH4DCBIkMMAAAX4MDRhQ6JAhAYcLDTTEyM+ixl0a+XUkcDHkyI8a KZYMWTCkxQEJBhiaYCBSuiYjIoFgkDPLAHsYMPBEYA+ivYL2DCJAutAkwV0XDXTsN3LhAARZGPCo gAqrvYEFMmCogAEpArEIKGA4m5ZCWp8D8lXYsGADmF4RJECSUOFEhQqONkSIMGIgBw8I9iHIwQBp jhERxi5AUCHChwofNkQ6gQpVBQkIOgscK8knAiFrn2yoIEmSkENPJvCg8MNGhEM//7RMcNRgwoYG RGKg+PDhEA7dEiZEooxq7QCwZXOgZTBZwggJA3JkyfKBx0kCuwo0VGogAUWK+QrkIz/evDwC5wmg pzieQAJ+4/mZNJBhF8P9F5nimyhAjCgqgLuG9muPvJM64ok/lDxKaSGpGkqpQIUUkrCkhQBsaIB9 DBJpAIqEwKaGQ/TJ4CnwNmIwpV2iykAHHITYTy+9ToCEoMgo6CeDfno8a5cBOtoFgR0kOQGtDAaA rKABorpQRKFW8i+ii0BKyJ6mCrQoJZKm8ohB8BxSKUQNzeQiEnO8IMAQBRpAZwQiPrDKgp12acso gz6KiCqDeEDAoocu+uhKgsJjCP8BBiBboAIeFuAKA4aoIguxSs9CC4PSfDrLIAk2OIEDMH74YAAJ TljgBKxowCynXewhYoJ9KBir1hwWkODRrCQ4lQMTItALlRPQiaxWsjiVhILMUFnhA0hUrSCDJzzg zLIJfpjgA9uIWKGBDyYAA5UYmDjkg3KIMIEIsEQI6snmBKIAkhw4AOwDCeyVAFcGPkCAnwIpvFIk irgokED4ChxPvgIXJlDBjzL4aKL98BMJPIwKJoBD7gzMuD0KCzCI44tB6tIkiqbMclCGBpzoQZ4A Ju8QXmqgYDx8QDIJP5Oiqm+HBfLpp4K1KMigsgpetEfoJ5/shyohhdSL3wGW5Df/A6M6GlQlEA8K qR+lRmrPAD1b/m6jMyck8j6QOrLYRY0GKICLJhSYgJ8mOvBiBC8m2CEwBqziIQejBDdoT4iGOhRQ pQ56EiKdsWYIK6RQKTYoBDJICKyzhD5WrUwpMCiCGL79i98NTuXhBAnozSunAb41C9DFFKv1XlRE 2EsEFMDgK4tcxyrLJ6Ez/SACrHocgIQPNKNAnQ1WkEAS2SI4AQwP3gBuAyaUfaICDyjb4C9U+O1n 6LXIEmiACiYgAjBHqON1gSwQgGyhf29We7wC0ZNPn/nI2x/G+IGehsjHRfrpB3peFBUJ8Yc8E+uY w8jjLwmShDxKIdnKIlSAij1E/yEFcQqFQvKdDLbtRSLiB892kYEdeIIC+VDblR4HIRFR5El76Qda KJADHj0pXgZZ0gAoIKR95MBIG+AABQhQARHYgwBGSUhBQOifw0kRheFZipCYEjHIOSUlJUGJAb4D RpJArlAJ2MUjzhEJghEhEiRIwQxkkDSdZMEe+/iJh3jiQSfxgwJG0cj8uuSflYSpHxriR9LGwgPF cGUf9xEiUkazFk75RDQ5jMEPULEbCjhCNEiswAI+EIkNSKICNPjACBozK2MtBik54QywTjCBBnhg A8sjS2fIkpawxGsBNKgAUdCDgPFxQATaqYBrPnACFEwAA2CwAWVqOYGYcGEA0v9jwgh2c8sI/GSX QhBeWC5wgQmgwASn24Fe8sUvfuzKif8qVEPco6D//U89DEvQPCX2RB0MQRZe6QeCvCQgeUpQng3k zr8molCM4M9BEhJJ1vgIwAC1jCEOtWANRRTQfGBjB1zAmsXYNlJElg90RBsANk7wox7ypAJLy6NB crCDH6xARBIQwZAooKFDDUohRtHSmVCCpQFR8CEizZkZHSrGjaRkqfzgAjo60AR+6OMiCYBHB2aQ DhMIJif2YIBR/siTwlGpcEIEEQJ4MJWnHKQkbJMhgwRixLFwJQdLCp6lIMGWnwQtkxuYALBQwAF1 IOAEwTksByDBgcBWJgKUqhX/aJACmQr47gQbQMEbOLADtXYGshJABVg+8JNvkcAtK6QAKiLAAXqt lrU5YGYEpGfLN3xgAR4AgxNb8gToTcADu6FMZD4HFh5kQQREIABmDUEEGmBgBzHAFSrmt5l8IeCB UtRfeuqJsQTx7z0KKtgKCTACBVhDHuPEHEZ2obGFnuQ7DWPIv+yXUBEa1aIWKZt6BSYh7lIIPCRk mUaOOrH8pJBoK0sbi3J2JRvyCGIJWQFfDuHHmALqrC5FwAeWZJcL9YiKGGpalZhyuIgmFTwEtpKG IlRGpEpFgyUBWScmwMFJUcQEWohEFkgwv328an5ANYhu++gnsRGEH2ol1Iij/2glDH2kH/bIgRHp GhQoUwotloMyWuTVjw+AwXpgcMQHUsAOCiSTA8EJzg4oQIPricAxUzaWQPhyyrwQhgOc2RUPJDC/ DTCXVwiQFwWe0At5vE0g6xKBCAArAgpg9gOzFQgtOUDk8nEgVtQcXVjCUkl5baAJJkCBF+xBgd/a 5QOO4NVnHCVE7YhHbSLcbnwkImuMnUehCVkSLRtgAy8INEG6CRtFE4ACAL6hAcc+NgqOjVyEUoQI DUAAl7zEjwgQYSGvQna2j50PL2gb2cqG9nFn3ZAIbKCMDCnegNBh7GWrmCHebgAN0LokCbwBiAUh JlVQ0DSkUEAe9tiACeDdgP83+JQfzz72GxiAEZEgPNte+JqAswZXAig7UA9yUMvwYWwGeKkAE1iB PRqAAoknxAsgEIGO3/A2e1i4cCiASEgwtKc3SCAHEOmMARz+hrVGaAACX7hClnS+WBmRK3+UJBhQ IGVaPYkDNrABB3TQix3YoAMpSIENxpx14KBiAGBoQAq0wA4bIHsCSKmAtlMQrhPEqjP2QgAtUxB2 Ipx5ByfAwRMiQAMEDOcJ9jClURAQgXR9gAOwiQEYjGSDCVTLMup6SAbywYFjmwDkpxseBkQjCSOS +tjl+LSIMhwBrXAGMqCVgFg40xmKzFc+5kHP/lZCHtjrM0HjIYIMFLD73Z//gwgYa8DuV+4xCk1A ASZwNu+Vv/sGFOxi/Nj9DFoGORmYAz0G6MDylW+P7Gtf+c9WAAffSl4FrBwjIqp+PjryhhksPwU9 f0jwvd8BDryIAMGX4qx4IoH2U+UnBEAFItgH79s9cwAhHug+3psBNmkZAlQAL1iRJourFOA9J/qv j8CHMTEA41MAA2y9AcgCA9C98iuJAQg+rhA5BTicILsje/AAupmHPbmwNwkyBKABClS+GVg5EYGI 3UuHFLGis5CBObIOrjgKDkwBg8AAfsiBudgABZABE0AHInBAGQCXFyRAaEMA+dO+FJgAzXiCD6CB BOQ9GTgBONABbMAG9kGASn6AA3MyCArgFUubDEDBLQoQlW76ADf7ACeyMH74gEcIFw54HkdwBAyA BNDwieY4AQ/wggiAB3uIBFQYj+BABV26RIEALcqRjCxo/wh7MI/3qLXYowjMIUWKgj2KiIT227cM SIC5mQHk8hcUUIB0UIBooycToJv50EXk+45/ubWImY9afBOHagh86IBzwJ9zMAdCoaCCCcUEwAda 9JdqfEUFQC78KYAGoId06IDWIw8FSIH2oMV0qBt+4IFy9ESKCD6KOKQ1awA5OqT7u0UCMAs9CT4U SB9+oAEOwIB+oMGe+MfvOCSqsMUG4AF+wIcNsEViG4k3uZh8iIRzoJsQug+KAB0DEAFx1MUGeBCc 0SAtUABajIDv2CN7EMcZSAEB44d2VAj88ylKyQFdnICmiQhAQskGgIjXscX3ywd8mICGVAnoO0gw sckOkP8BpDgM//s5YrS3oPmBTPoBcdQGdNDFFFiBbXoCejmBFbCeB1yACRgBrkAKyQm+yAgOSACD 7EuHruzD7EsBD+AFXqABWgSVGOgBR5gAExABCRgcDEAFDqAB0Mqw1PkBDziEFRgsz5AAu8gwExgK BuCNNyi3ZpEER3iCBdCcOUuLZMmBCHCi4qEI26EsxkQFXHEpDhjLHHCPAMoH9pinhXnNhHkP/1GQ GaAHe2APBEHJdAjF4IsEBeiA7GII4zOBAjFOLjiJjJi1iXiT7IsA9boPGeiA+zAAczgHC6qoAAm+ 98II8iI5MlFJWjQABiIA4ySACBBOAsIa4/PIi8C/guj/hxM4AXqMhBShQAnAOq8bAFp8P3vYsOik ijchS7JAIYOgwAnIwCgiAIoUATGCvuYrKgSYgeoEGwRBKwp80BmYgfU6kAUtGeoMTpi7o4Z4g+NL ARk4KhNUAIwIPv8wiofgCuOLiUQSEZ4QEojkCQo0AT+5SN2TgKN6Tmw0GeagTqo4i4EwCuMDAw71 DKWLAahTADPwBWaYm0KIgRgAud3YyjB8QWragMhYFOGqAApcJvAJrOBLAcj4AAXQAsuIAWzAgef5 gTZAIg/oBSIggpTDJc7QM1SggRz4ABQgggwAl7Cwl770SzAwBHs8gTc4Dg8ggufhLEhwhBXYgeaA BPSp/7CDUKUh8Yz5KRYGcKcM4AG7mB//KQB5CEVZSxBRlAeG4S7zOFFiWyEK4QJafAP0oMV80NVj bA+aDNZdZJmMS6iRtAcOtagCQMqBIIBkLBl6ShB+oEUWI4AKRTCUBAOafJJ3U4AKaEkFEAGSuQ98 oEBnpUUECpkCyEmBEMl8CDt5o8IZQIpXmZMsyUnIMtDIEceLvIh+wAcJUIBHwAiInIhBEcmHwJmL ZAgoXIjgg8zlnAhtdNNrfT8U2gWRpEcBo8eH6NjC8amZPD4QIYIsSAieoEEDqABxTIh2YYiN1AKl QFYO9djXwQBzIMLnEAsjosmr1AFbsoFH0AZxNAQdiP8BBSgED/AALY2BFdiA0/iWkSSVxIgMrKCc 4LOXyzKBOzuB7JOuE/UCGvgBL4uBaRjUJoiAcyGCNzAB1MsVzvAM5aA84RhbpMAXXMmCEWiCSpAE FIAJ3XCtJ9iMCpgpbBgtvsiB9BmIPXoKrgirgnjbyMA5uN3DS0SAe6rNVrUP7Uqg75KPhYgjBRGv 86CHBmDH8LtWegUg4xwP4wyvnMk4CRlJAnhBFKAxjaBOQEo/MZogizpdi2oIrXI+WkQHAngTxxmA DkgHAuiHCiUhAFEKKnwDb22a8imI+nwTEthCBVBOD+AAVGg/v8wAwgNXuxoAArUHwRALKDrRSHCb ldH/KjSKUC7JGZhMqomgRaqiNuH8oNaDXQR4E2ZtUfHsgAI4USIAIfzzVomLkgF4QRPIAYMQgRQo STeCSHs40R5NCLu4EqR8mzchgFq1xzOzh3PoAOugFQyAMhekG36gQODQgQbQBl8QThswWuHMpCzV UqeNgQ3wAnHkuyyAW7wtUwVABb/IllAhjPLjASpsABE4vBFAh0XxAHPSU3QhAl0iplzpjBxQzNRo pjLbszH2HRKgnAmwgXKIgAl4g7pLpbDYC8PaLEdpjsIBIycRkggmAF7BirLwDFzpDD2jCH04xfJo mH8JKFYtGA6qT6R0R5DYH5wlRwVQReGciAQQVgII/07k2pgxKVYQFmAETglHfogU+MYLgpsRWs5q lc5pvEXwiKPgTQcnIQB6GEfjhbmVaZvZDdemWRJ+QBXjawKeoEVg0jMKfIOm0VPBGYhX4YE3ERwR 4LtXUQhaRIguqrgW7QgQDpiFMIcZ2KiYy5ns85emoEDTUhmLokl7mBtrWwjy8kjpVZEXhRuXjKK2 MIC5KYygAIF408hnboCOCL7ycSIiGAGCwIcXbViP5Ifsy5bg6AecZY7zoZW4o5t+4AAFmAEbMARt 0AY3KYQfKAR2mIGQzqSlvbwVUMzy2wxcWT3D+gAbUIBvMQFR2spLFEetkIHS7ao4GdQ3+EwOiIQ9 tf8JRdkMzwic3zCAE9ABIhgAzcAK3/EdCYiEvEAXOelLQkSzDRjcyEjEMtshPTmUhGgKi9BeAmAA EeDEl9oFPcMyzK297vouoWuv3qXOBCiAHqEn6vyO7kSP4MNrinBdioiAkfM2C/TQkxjJ+wBgYhMw c7BQAuCBbgM3cHuDf0GQ7jyJ6CXBHjRdAzhLnqBC5ItQlegPAsAciNyF4FsSH6mAHRABW8xAe3gE cdSCkWsCqoq7bioLELEHFGiCCfAC4IbUCRg1/COpkejOhijGpoGkfJQiLwoJ8tICDRLmkIjRMdlG BfDLxvYIWnzQ0tYI+43PndRjHgg+GzABE3Dch8j/wDdpmhfFtzHpzxZVCFB+Zi04Ab4bgNwtnysL CuPTxw3Ivo7GBENQUx3QgULQug4oBEAohA5gh0IAgwnggCdogl2bu7A7tlv6AIi9M8xMpclw08Zc xd3rAAnwAgzgDRKg6r4kPD5mlMiwnl14up2w3NuRABfXsb4UgaE2aBoYAdYJywkg1U1FO0SErSEB Ijse631wI5wDFB4wCkdRlKA4Re76rgJ4laDqDvi4yAJIAA+mJ3lCygKpVoSxh/cb1gmIj/bzvoLz 3QJ4k474juE+CaS8iI0jQOkLkO32FxlqD5VsCCqMCQLYyOkF7W8liDqXIgOhwX4IPpwdQhQ4AQWg /wdRRgccVD7kMIHmMgufY1HvQ4EUlE62SWhKvgiNZkbqHAFarM5BeYqjIgAN7Y/6aACqOhmEwAgK NIp+SAcZIJI4irlgH5JwBQmFfpsQKccUMOgLIYrz1UkW3ZorClchNV17oAxj4wAJaOg5UprRaMom mCV20IYUaAJDsIGp7AAbAAN2GEHt64ANkNR4Xz4UOJX83O9uXwDqUU92sDzqQAFTFknh3FakIAIP CG4JUIxcGQBmmoBdKKeBuIpcMS4QsIlIsIksILxIqJfVGYG7+5AToCu+QAzYaheCiOCfwBopyYKh LgFTUQ6wqCukOA95kI+cJxA/qSD4IoB3sL6NOf+Juw5XAGrTAj7P4xNspccH+vhF6eSOAJ6I7EPg /q7O6fTN+KpGgcmYotcI7xRBpA++DLwPlfwOYm/05oOSATGAN8mADAg+E1ZecQysAplCkbQHCaAB 46OHN0AFroiKlkEK4fQCDwC1N2gCe2NRifBkmDTeCjXh3TMBL1C/K3FupyjAVsdOc2iAEbiID7Ef salQsqLABFj19+wHrZoU8tbmnFEILjhRengEG9g0pLhvj6T2nzCAoFDuFl2Ikcwwfsm+wrB6flAt IfqJCtDV9fHo3bMBD9ABKLSe6JeBBgCDxDNaWwofdlCAJmBMXkGztsu+E6CevFgdanJTwPB4J3L/ iQawRXNc41IL1arAgDzMgLEVms6Yn7/58UgAiEhEyhEhYoJDpAgSRozgIKECAgQVBgyogAoBBQwD TuwYkGNXxYgD+A0wQJEkAxLoSGCwlwMiBgoI7FFEkI9AAQIJCPC8WeCmSZ78dg3lmVNogg4yChg4 SoBfgaQdcKJQIJSqgjcETCiYkJPrhKv8nhIwANUAT7MKGoxFa2/GDAL4lBbtcK4sPwMZxhKw1w8f TwJVh/IlPLhAh6l8H9EbO6OBPZprn44cAJKoAhQjGyjgl4FAvhQKbIyMxAED54sF7HHugCDHZ5JB 55FYG0mCPREjIo3gMYBzWbxo0VY1y2/y2Ehw/xFUJpnXgIFdTeilO5fYul0FHWjSLEnRwFp7CLZm JUAka3R+VXmYBd6UMz/C3vNyTWcOhYcKu8SrZWsAPkUlMfcUgAUokMIJqHzwQQQKzIAAP+bIMEBf EPUjAQ1ejBbDB9oYIloHOtiggAw22ACGAoWwY4MOYegQwwQebLBAVTYwsNAHHHxQwQcTEMFZBAtk 0eMEEUzwRmZPPDHCeATsk0AGNoiWgpG4ISBBFg9RsAEKC0gCRi8y8SBBRFkwkEUkJAgkjAlcokAE gxGMIIGOEpywIwUyVVBBTI6cMAAGklAQQRaykdQddNDhJN4A9lSQEUX2qKTPTT39pE9gRxV2lf9c lRLAWZNjQUUAApnlBB9OZKVDDwJcmYDTBAq8StZwZD1FFFprFcAXAUiiwI8MHeADVbDB3RoYRTt9 2tmteY0V6wQ8KNAEWfwgKUKDbzS6iwzpZNAPARQO0E8/SE5AEoAl8ZOOAnDSsJkCI0ngQQRarEWh SXndWmoDPGQxwEKRRCICArG+MSxRuwzLzwzm9IMAeA0kOgCSHcgWYL4DyKBAAmgBllMBojHHnUn2 nIeCPQxQpIAW/HDGg3PQQgdfXvDhGqllsXrQAQrRDpWDZBIPwNUbJDF34UgymJPWWgbkiMEJVUl8 jjkkUQDRB2RWlUINNhgCxg8dHDhiiStqxyL/Ijp44MEKE+hAhIYpNMHAAgsusIEXHFQwYgUSSLCB j4CLBoYOH/SDigSo1A24BN0iHiSZPEjkARgULGDDBgYggMpFWUiepZoCE4HOjw0QIYIIfiOQ44KS nyARnxU48sEAecYECU1o8WPPPpVBFx9PA8zUDwYaITACOk3hlI9TZHlaFK+A4TRWARLoaitOQO5a 1VU5NdjBeWHlA5atouJD1FPnx3dvYPzkI3YkShlF16bVjiQXqk+ZRRQ+mV1rrD3WgqQRaM4eVZkA hUjSj8+cYwZF4czNLoCAGShAAv2oHWcMIIIJSGAAPNgYAuNDlNq1JDyRMQAPEBIB38xABoQx/44B Tia8AErsdwaQWr5+VxqWmWUk8RkLV9hCkbKYBElvYAiEOjCDAdAlUSNomssUQJQCZJAwZTkJtPoB Bg9ggAhvyIFJ1kKSAbTQHnmZCAIWwBUU9OUDa6kADSASgQ+ILQLmOAc/TrCCrJFpAhtrwgZYNATC 0WM0JFpRa9gRhp79gANEaEITUFCVN/wABRxYHeA4cCd7bcAEfpMAESYwAbiYIAUNWIGcIoCtD9gD A+mQAW4WgjhH/UBbHNBBBIQHkSz5iwRoIsEIIvANdNjDAw1oAG+YBLgRLOgDdUtcBexxgiecICN5 ogC+EiUBHlAgBxTKXUmEIhIUoiN5BthJPv8wxTySGCUw7nQnr3ZFAHuxMSdjqYoWlMWZozgFn7LC VKxMcBTdXeV3eTFQAyJAAQAqoDodSMBYgpWTXaTFnb9bVgG4QERbyeAdKViKqCgaLC04sCS8mwE9 iMDOkYjNC+TqB4DCNa4GuTAjnInEBmZSAd1Q0DcjBJTw1oIABszEAFmYEw8YEDd9DeU86ehLo3RV ErMYQGwTmFiiRCOBoKAFfQSACxG7Y0AFCCQSveOM9VCwK3UdaFeo+k289NVD6LiKC/34QQzAkAIK jGUtXDCAPZCUgkhVgAexSkc+VudGLTRzQRzggIOs87oVMGEXOwCDdaaFig3o4AciYgeJtCP/oh+k iB2V1IEEJsAOUbJDNCY4gQcsCbgI7CACFRDNjCKwgYaMclpESIESPYAlHognC5xpAOIYwIMIMOAE YIiAECYABlQAbJs8+FwWskCC0A0sS6sjgioRsIGE1m0EC9DRghCwAz+RMCMTuZ/wcEOAq6GFVnIV HgJKYEZFpSp4FNVUf0W1K5DJJTAYMAeJ1NqEjS3FKNwT1VOiQsGu4IQrpjwmhk3nrIQ95UAdbCcB PKAAEs3vMRnGsFAUVRV8JJQLz6HKDNKRArHwowkkGqxYiUDBDkygAg2gYAMWOBbgUOSlBLDxYPPB GVZuTgQV4EckSFSZAEW1XwjYBwNowgMQ/2DJHvZ6jGFFM4MPaGRlDWjOuFypgBGMhKpfdSFgE0hV KspqLN8ZgDlmYIhvjCAvDUKwCeAboXNEJ4OkOu6Jj8mPWF24ASm4sASO04EI6M9eLKtAKR1k2wVZ LwWooMGOciQBrpDoUU9YwQ1ukAIU2Pi5MdABrMFgg40poLUNQFGwgtUApaSAHR3ggGhk0AAbsEMG prSBcIGtABEAlx0NoDUKNrCBcryBgo9pwhu0ILYH3YhM+4gBCiIhhB+A4QM8iOY2r8SAlWxXTSQQ QSRQMScuVIAIDIjtCHLATEeg15l65FNGBEUBmoTVOyQYnVmYYsW0+AYoI9nJTvTVk3eOyv+eYuEJ YNyHAnZZLx0oUFZO3oBYiwcmEvSQgT14kgN2jbjlI57xUPoxFnt8YAZvSACFKDMWezUh41VxuctF kBPAHjkdA/hGAndhFvOMONLBGYoIRmwCkJTkgsbVDlfOMSt2NuGpe9nFBSkC3AL42FsRke9TqlIA KqOlAI+JjN8YsA97LEAE/8I0CN+RGeJSQOYDSMcb5pEB6FSGCPR4lXcMEOVAm2R/ouJHqdjoZiJU xwREIEGA7DXYqYZr7NZ6Kj/6ESugtzwCbyH9iN/gdhM04ANrH8AExGaCjTUgjo1NBxhOEAGo0eA0 /RANCjDwAWz8gNhM+IAJZuABHdRARLD/NtHGZE0HGtCa9Ong0o9Rf6AedR1JI57BOxqgI8bZAxUN YPn3G5DuLEREughw7gSEsDrPXclfCMiumkCQpu1+AAz48QAHvMEbRITu0ckenUAFcMAK7AAGSMQ1 YRPwGM0+8AARRAIxtZ2t5ESjpAXhHUU//BfzZEr5uBOByVN/3QTEGcVYMI+n2BM/HQU6OUcCREXG ydRQ2IMEfAAFcIE99BjOuZOyjAVg4EM+4AMR4kMB7Ar1lMRNIINGEQaEoU614AU+pA5gcYdJjdG4 8AS5EMVYZECbhUt3xIcE5FIGbA6EDN2oxMdF2dmVnYkELIBvGFUH2QMPPMV4iAoEEkUG/3AHruQQ 4TnLFdlDotyK48kTWuRDCaSAIdiDCYwAFlIZcywdXviQ/ewKBphFP9BEzIXeD7Eh8OQDDFiQ/piF RJwdDzSTBEACj7AOqMVOA97JE+CADnTAkkjADwxBDYSBZ+kA4SAbDdDBCnCAI0yA6ZxAA1hSMnIA O4ABl/xAA2iB3ozXBOxDGaICXxHANhABCrRNHJFJBSwAA0ACBlRAJHgAEdzfmPwLApDbRjSAB6Dh mGDJ/eEfCYCAu6EDwexAAzSBDiRjOuZAO5pA3fjJBzgCKp1AOcoEJORJSVAUAYwAq6HD7iBK+/SF rVBVUDjHZ8ATCaZKDUZcqvDKLgDYRf+2E6+Uj6JoYDjFR5stnUlABE+kFgdcZH2NBUXxCoRhj1Dk ZGBAh8JVC/rUl3E4CXPcWaPkQN8dAlqAi+44pdVs4QB8QBb0hUSknFDKVVu8GKkk1brNHUVkgT2A RBas3VgeCr7YWYCsFFXlhbg0ikn40NItXLhEhXS8AxHYAwGBxEygZaOoSw8lTD/kS7iIxBBhzAWZ BNhVhtIl0BDFpeZIzpgwSNZ8wJVwgILoSDmyor9tACTcQAfkB6w1H6yBWw0snw5sgCPg1Q80km6t TQrISAqw1gRUErl9QA58QAN4wUWAy+AhABGk1gYUFhpCREQQ5+ZUgJlsBBhMgOiVGxz/0WO3kcD9 +ZK7RYJ2+RIGZMDfvEEkRET/5WXfcMATIOQGlACZlWNMFI/wENcA/IghVAJFNaaAFUAWoIM99RBc YszyNE+BTSHI8IUJ5kQNUg9Z8FM88aT+UIZRDAeuyJRGPAXjFMCAPF2ATuFeTKGGVouoZNPFPaix AJaIxmU/vBe4yId80MQF9QWZ9EOecGJa7IXjWZHu6A5YgqV35MBfDEChnKE9YJNwzNfIZFNegMRw RCIhBgdMQoXJbFA7mIEhmEAWnI94SEQOuGWAKKnvJBCpIIBG6JBb5ssIPYcXNp5J5KGXIsC5ZYlj 7QgC6AgFfMATWCYqJEgFcMQJYAMY/wRL85EmGDABaw7BD2zADuzACrSmJ1Em5ejVBjQB5qDAo9rA D0TAm9rAEySAi3LTjrioRZwbRHyqmsrhNpHJAHAACtBAP+SVZUoOM7EfD4gACOAfCKDD/vlSFsRR DmyAQpDJBlAOEXRTDg7jCZRhDsJiniBABIzOmaAJ8rQlgwZPWypdd1SGCNoKESaogPaXPG0KQVmc gEKYwrRFII6kc9zPmfZduDREDnABAqDAB3CBV13kgyZMUdRXWSghhw3FXJbkveLF09XXnREelYVL 6H0G4XnTFo7JSFhTP+SDF9Jrvgapm0UGznwHP2TEUDFFREyiv5ZnnBWpzOlr7hDcSf8oHWHkRBZU YDqkg2GZARFEB02kEZkg7LRuGGFMYkSUGWU05UlUXcakXA+RRAEATgLsAipABOLkIAfQwOY81gfQ gJLgpkUsgELeSQ10ANcwn6DilQdMQAy82grsww7EQGtuAE7NUQS0wwY8wgRA6tqCwQqwg2y6Kxzc wARIwiFIBAZIAAVAAlHtieQgJ3GSSbptABg8yhZlhGWuziOynz7uH2+wmy9RV3iGY4+8gQd8wBtM AN2NgCPMzjOlF0YUz1BJwA7kwFbZw32Opcz9FBsqaVzqlwGsqE50D1/45KiM4KZID6cU1Dthz3O4 ZUER5gAoDgbswhkerU5EQBMgkAn/TuFcUSKE6STuZmSN9u6C/utLauJiXtDNtERLkolJQIpGjFBB Pd75KGlbEABfBgghmgTQYBmEyFTumMTa/QlYMih05M5r6A/OUI8BHBw/ZIE5eEEMRcJ+XBlNCOTm lBnO3IzRNCDAyeUVOQthKqY9JM9UcdWbkITkXAmdNBNmyukJkOcCSPCffAAqOIINeEINYMMNvAhe 1eYPUM4Cjm0NRwAH6CoHRIAOa5INNMAGpMCgzuYEzKZeMUQK2MANfMuxLkBhIa1FlKOaDhUDEJV4 /UA52sAElCPivAYOUqWZ8MBugACsUmd2+QYHTOqP9kgDTAAHNEGPeIDwfMAG6M2C//Sekz0KNlUE 0LZDzOZOHw7A3EFPmTaKe2bpRwpFSoIYEVYLgA0UrVxov9pT7zSeuSYKyt4xBQye8CwU7AkxMtTO Vfxhs4RTs7DvsBBUUxCUTurOg17v+o5R45HLAIDhXjTKjwoZ3aVcxQYIVPqrZYCiVsJQxepQdxAV d3jyuDgld1yyX/InUYjHJZuECJBAVIAXqTTFDHWHTLxGFvQxlaGoRzCHOP8hYdBr4v3lUGww+zYB cwzu0+qwZZ7ABsShM+UA1PQdnURALt7A1/LCCsQA4MSABxj0CdjDegFOaDLIHW9AnNjxD7DDBvxA Cqyx6fjfBNhABMRADTwNBbzOKf8ebXIe7bmdogQQFQ1gwBO4a3URbtzpJRHc51FVwgiQgASoRET0 KjbGaSUZiQk4whGJEgg7AtPasQ6LwEVEBKmECxgywJnSxNp5U4o9R8mgAwKgAzAn0LYKKPpMbzs9 r7c2KE9SIgEMJid6x2GOBA9GwEHsBcMSgGFlLhfA3gK4mHA4HiCCGPAAmBDSa4ju5KZ4lcWOhC23 WVIOUQK/JZUJWq2kM2THspK+LyZbBiHG1wLMxEj8qDhTREuYRO/8ZVviwxWbUXcsgD10DENc9vri F0V0k5pGE5Vl4nBQiIuy5+teUVpCh4x+ByAWohheCQijF9Ts8KlhoyRU0wD0Htv/rAA2rAAOfK2c StsGrMA9U8AOSNsHtMPONMECBBMPfwARULes9R8KRIANWBIYrDcHbIR0ddC5xXcUp5F8XzFRkckC ZK41CkkcZoGQgAADoEJBjEB2MYQvMde9TQBGUAAHgMEbfAC9dBKEz/FMnMAJpM5jbUBBRAB1RQAJ /JVe7MJRlkyGOt5QAhYPlIBWj8sQ/e70lmS26uSGjuD0HEtZuAQ2xdm0XtS89NhTWESePMwcEQAX COcCpAXnjQQ6t+TTpdgUCiFYKwpkPwVU7I5YElE4JeVM5HhZSA4zs3iR9SRTffVwQCFgG4BM7Gyi XBDEiEfK5EDvgOFEgAu44Ez9/97K2mHJPFAdSaCDPgAnfrYZrswcOuzDBXVT30yid6T1FcWEkBHF RORD0IJEXiQmUiZe4x1K6TKIjpzABLyWdefpEMSAPUubJk3TCli3An5ACUtboTrCEEzDBwTTAsSe uwbTDreJM5kqN0YbF6O3jNzaHdtxuRVvFMc3fvNAZhMV3ZSuTPhNlhA44Y5ArGIIvHnOtZfhG+Tl 1UiXtE2A5upWkUzACABOFtypQlTAa366ZfpfyjEF/SalK7tZD9khCVTCVnvVx1QUWLcT72pKAQwl X3uMXF9EZajosTaK93QthbypDpILBmAjT+hWqN840L6kkr8kWTc5+1rR+hqLx//b+ABk2Qk5Rw6p ae/M3L9gqXeE3SyXOV4Mesw7i9VoBBHwAFNkDEl409wtAEX4xl8WWQ/l71b2xX0ClUdkQR8eT2QQ xULJFVq8Nrl8M6nuzmuLi3igq3PowxN4wgAwhcXmUF5Q7DxsL+HBLJs+Vu8ZAoQ3QQWMQbHFwA5H wAkkNzY4wt0/AQfsQNacQDvswD4Q30zHYQ/fTQo8wqzjDZyoIuaq1nizw3jbAITbQHAyyHMNgBxm /v1FRGbjtxyG4/2JY3/PCbU/ROmjAwOYAHaOCXC+gULlACrkFQdEuBeMgAeUuyf5iEJkmd+gAgeI 0gQ0avCjgPrxxS0DDAL0A7z/p0eQ8k4WVEIJUFkXZqioKI+YF1j08GTuZiWVW2VHyoRJKEgFfKDw DbkGQTSFlCNV0xzrRNNM8HmWG4o7bwr0QNi8b+tNTlG4ZME+hAtAMDAwwAABggXt5RjQjwACHgb4 DZBIkJ+BfgsR2CNAgN8uiLsqEhgosmPFkvsQYKBAIZIXBP0iEhxgMOFEewMQDIhYUOcugxh0itxo j4FGezclRpAwgMG8DCAHhoRIMuLFfhcqIKig0yYFiQgoMOzJb+OGGhc4DsjQk2CGgSgH7Lo50ABd gvYkfOCw4QSPEym0SBrToUOhJxw4VMBw4sQHbB8+OKpAgcOJnBRWrBixAAGCfwkeIDOY0KHBBhQT IEf4sHkBkQYRPDT4EPvDDzAfTktQDSbCgAo8OGftmwXBAgYLUC3gISHLAgkSnI+QMGLE6iwSRIAY kSUCkRE8GHhBIaKzo9MbJnB4EwH9CA+qvUQYMYDoceccPHj4jAJFJNO8B8CHrF1yKIisAwviaSB7 0In/RISJYmLIoI0K2OhACskioEIC8NlIQw4t5KjCCFIgqwC5PMRrJgMQ0IKdD756bpcUPjNHAoP8 4q8fDCp4boEc7MmJq7pEkqmuqA6yECQC0ikADBRK4kgojpYEySctiGDyoXwMYCALuuqKKMiZcLJH QYlgemMhGXBCIEGOICKSq5JCkogClTDIIYEReqtLpxSI+GoAE3qTS0gEqpopBRnMkYEIiDwwRwEF ZmhiH4W4QGA+g94kayo5uZqpHwo6k2ggOzHIiaOICLhoJi4qqGCjU6Eyib6MJorKzCPl2mAvSWjo 4A1JbpChg3NQOKEyxgZhrALITsBggR0Q2IGBE374/6CzBcAAY7MIfvCAA3ZS8ODZ1JyDrLZkG2gC WzBQ+QE9MF6SAAwiKOAhqywYYCC55BCAbjnooGOgugWqi8CeEUQggWHpeGA4AjAmCFgCDu71gIgN QAMjEvUk2FipAfjtdzpUJNjgDQ/AaKLdDYhAQWFVYRKqpARNOrUEdLKYSKIMPSyIygyJrpCfAvIB seig+ZnAnKSllHIA7AxIQITTLtIqp6YnaOCcAgbYIAIKGmiAgqyy8ionMHc68si2d8KQAAUIKHtD kQq40NO8IZJhAnsU2DWLLNDZJ6YFVQ1So4OQnECGiAK/K8Q4deKJ1QSB8g0DSYA6HKIB/L6Jh31k yP9NorwMsMctnRQwYYIJ0BkABQVQIMCe2YnohwsTOqgozJxx/shzgkYF6nP6BlCJn35AWl2rsJKO M9GBPKIJ+SNN5eemhvbioJcOJsgHB2MnKISdJ3bABpsdnP3gBAlOWOCEfSjYYYcNekZgNjB6/OAN eQnVgBctYAObEZtzQjYCL0zgBA2YACpssAEJrGwDFehHBe5FAZQVpzmo+MBzArYA5zSHYFmozgeU spoRkEAC2hFBFmI2ARIELFzowdgGOOY/ItDgPQrbByqIwwALGCwCe+nFG1DwhiaAoQFE6I08gDKh ysGJJApKHQbQUQL6UGAXzAMb0URkIqGFyEMbSQD/aXjgobxpyAQyIMAIkmisRzUAHejoADs8sEB7 fGBRKXiOFmAmgwbMIAULSEDZFIMC8s2lLghYVAcYwI/TpOAcRHiDOTqwtQY0qgEbUQA+UNBJAxXg DR2QQRM2wrvSaegcXgBcRmyASROIoEgGkEADZAAodLxukx14SOVSMAMUDEABoxHWTFRZO5FAZAKl 7N1oSgcUDOBSkANxpCBlYAIEgAA36ehACryAy2PSh5kyuImYZjCBLNjDhKHsRyQM0YQVeYpIdSqJ qT63vFH5bCJhIUAGqjIqCpxgK1LiiUHuaRK5IM93SEEeBnzFgUdEwJE2YBk2VlEDXqhPfe+rQPz0 /3KCAbDPERKowD4W4IE3fCAHuglXd4hA0AakYAP7SJkHUqAtETwLh7LhAAqmAwZlOXArJ6BYDvRX HIKJkGDPgc51GPAc6lAnAvKRznWyMAGZIYA7+vEAet7w042Z4AMTEBmLwFMcdjIAAexpZstmg4Im NCFQXuEHWYIiPL0uaADoIEHsBuAVMu0jAzbziaek1CENkaVDHbrlDBowgpBsZDQFmIACGmCCYBag A00wwDvOwUQtnOAdKdBsJrN5WRngVAYIsEEDpjkDE7yhmDsZwDdNQC4DMMoEg+zABlJQIlxOwASV mhs/GlC7DF3WBF6ghwk2oIA3tLEBBcjmKxuQDv/TzCB1X7KHsXobuEGeJh0puMhAgulZBaRDqwog gQmkS4R0dNJTDSjmAhXQhDekAwWuZa8XhMmPXGq2mCOIRAQaQI8UIHhSHZjBGy6yjwFkd1Ip0N8M smgCIsxjJh/QgitnhVCSQIUkRcKrQXpiFX4u5KCBTclkfgYSmHRxSG9C3kHEZM2q0oADPIjAOcK6 ghus4AQ46MEN1Ce/HsHvA9TaxUdR0RkE2CYrCOCYWV93QAzSFAw0+gFNLTblsvJvA/SaAP+eBBQM egCpznGOvyRwHIru44NxHoHBpqobFDJscG94www9c54bTuAHGBOXuGCHEraytT5s1Z8JXOdnLyD/ Ua4msMdkrIJQkNzsc3U5yqdXYg+QTGRJM/GQifT2IQIkrQAFSAAKzEFfNrqxuBVKAN08kI43IMC9 r+XjIziAOmENMgdgo4drGjCAGXzAHv1oQgrmwg/SRIAHiOrAMPmhAES1cReEumsKOqmAApSNTilQ pgkkkIImVCgLChCwNhXAA0Vm6Ub7MJMEZiAXA5gbBR2AyAbOcaoMtBEiCvjA0bKpbgNk4QP0sBkK SmQPc9+k4RiYAEUxAO4RcFckss1CJKZBBBnQawYekIECbJCCrdAn5VMjTRtFwIOYlQ0FI2jAjeBU EYKQGLGVY5zOf6YTV/ksQhSQhNFXMs9R6xyh/ytCylHAZEsRcMBBIihlJBDAmBj0ABsxiMFjHMEY +MUPEkiNH3Emwx6tcUBe7EGiBD94AnIF1wZPCOu5Dr6BH+QgPxQIl2cmUGZUkCo/WVkqwZi9kX2w VToIk6puqPNCjE2A8Z95AxE+M3nTsD3wRFC0o3MQgQUEKQsRIwrMJtCEJL4BDEo0QWApgFADbJrE wpMIXL6yan6WUWhAM9ph83Y3IizKBKceDT5GcyB339oQKeiACMpGASLMYL0eAN3KZJCAzsjgDa8l 5qQm9Tg/iXy9asqmQRQwEKfxYwMOphSU6JbcvIEkmxuyLvgnlYVstptFHaBUA6rCAJyGB2aibP+S yyOcZujWj5juahcc5eTwD7HKZiCyKbCICQF4hx7eb/2CRAZcQjfkCwWIQAFy4C8UoHdQQSJuojPa aALSIQtIQJJmyhwwQAQSwHeKRCduxqASyi14gnFkwlWiKFGSZyXCQip2wndGwpYkwNMW4CCmRgLs gQi+oRwaoANIgAfCoAZWYAiGYOtuAAcqI1YIajGyLs6kTDFQ4Tes7AdoAIXAwAYi4FlCJrgeQd0W gANUh4EWQFt6JIPkBQPkxTPyA0Zy4O8CJoSmYx/KiB8cTzra4QNIiM+6hgjQgQHi6uJ+wPJ+KvDe oMw8IFWqjK3ojAiy4IeIwx5QAvOayQQ84Af/3iD1iEB1cKwjPsUWfQd5Lk0lDMIjpigkomRJwuhu Ugm8xGjW8qGNpMTd6gYFzqG6ZuoETOAEaMC+ECCbNiAdJAIZ0gHZsi0jbMlNZEKybsndzGEC6iL9 DMAEzqEf5ouWJlDcyoYAQIKz3oAjJIB33iBv7OFvzpHX+EECMqIJFIAIlqS4fAfcJnBQZGDo2ugm 6IYhOoB3vGAAeIAfRiBMQKkBYEJY7iQCFIACIGs+yiYSZqBMZMtkIqB0LmsWL4sedsEiDaCTMIAH LglwFMZAiOAcNGT2KkcJDWSZ8ComgA5J1EKf0ORO4oIIheAiukiKikTE8KJn5sIhFoJPBiAS/0xA C8zhEdDBHmqAMIYAB27gyFZgWRqjR8jQMoLDIWKlM15nNT6gzDigpRjA67oMfJ5FdU7gftxnK/Tn BFCABoyKBjBINcJl8CigmbblOjaFjAZAOiRzOqaDrX5AZiogCzhGBCfAC3DjdcDA0DiGBi4zyvhF yoKECB7kKBiAADEA81zndfSDCEwgEigCTKgIIqKEnJqMAhKgIWbCJ+iRIYDGRMrIQiqkQxogEigk aprGHBLAafIBJOjGAMhvI2YK36AkujDAb+CrdnDpkBrAHr6JOEjDSIRpAIiAHgRsAjhMHZ1mbrLk Ow3A3ZLLABSrCWSAPMwhidLBMJ0vAa4rcP+cryFmIBL6gSEMID0vKwvIbQAchygdhz7cTSeyCQzO QQTwAZeGxm5kJx04ABW+idcigB+cqwFyQJAQYHY8wEtMSJCm4RzMgWNmoAN+ICyusQEQYPpMIAOy 6wPqggEIo+lwcdQIosQMJCbXptMYxyIWIixWQhLYIqCE4Cixp9MKIKkywt7u4jnMigi8QAuMpQm0 sgZ0wAZ+4AbCcFkcATIk4AkgwX0QAEiqzPB4ZAJWoEdG4HVi5VkmoAZ+ABK+ChUi4ATqxys44AMY IAdUoh9Qw38w4APgBWNQQaueEDPoRX+yYBd+ryT0YQAgozqYYwT0p/U6Y08bwDMvrxApCAX/MCY0 DZNleIBUHC0jKoAIcgIliOImLGkCyoFQMqM7SMAiam8H48RP6CMhGEA1TK1V4mIjaA/VpORu7ipq pCRDlLGN+KFD6IYfEoCQCoAHyoYHJoD6iokAsinXTs4csqRs9igFKowEyIkfpo9SJmAX3mECWAeZ eHJ2FCCXSiT+OmlVQKnCEODVGmwDvsv6FGAA9sH/MIt5MiQSTm4GvGAmAZAAHnIiEID6LnDVzlGS wi8S4oQAQgkp7EsBUuBBCPJfg2sdT87BvIDxylELPABiTcsGdABRRODk6CHZJAIF6KFRVLZElzAk 9okuPAUYT0UmdsV2ViQDElQIkg4sgI55/yQ2KiiHLPowSChqoTQCASJhrCLB+c7AEL7p67ABB2IA BzbgCd62MQgz7uqUR1QCLMoqMUQPh2IlUuXlA15rCDYAFS5CpOJiF/ZBMUgFAd4oFPHDyjzAylAD DGhAIoiANxBljVLtRBJGhBigzLQpYCoxjyLg8ppJPT4RBXwFhfRFq6SwyjpjIOZwIIAEV2jTiSLg Y4LNQXwuIpjWZowkEn7gYnahsGJCLaYCjJozsS6EjDqCQvKhQowm1fAqjdQOSAvAAJyiM/LhQDoi e7UDrxxKa7U3V5o0TMSWcYkkSAxgjZh3IyiCB0RgBHBVB4OiWoPifglCCDJkjI4XIvImxv+IUzeD YpmaViWSBwOGsgGdNCMSQsqmoztSb6bYwQbwtBBwwC0ExNGQYheIS33poh/cIgfz9032KlcionPE gh/cQqCMEK8StAEjYtR8wpYiACVEz2dkF4ewjgi+yQtwKgWe4AliIFg54Ak8wFnexzL2gUfu5E6U hQfKyjLmUC/OBgHYDodWIAZSgB0qQBYkAQH24QJich+kNCVy4E7AIgYmYDE3IAdeJwdw6OJWAma4 4NSWZCjveC5Fr2tGAKkktQnEilU3RpBZz6xoQDUkgAfk+A2esDMUwkz6IQKyICKABEgyYE+9Qzoi w0XHwiOYDnjowi/UQkFxYiJGeEqE8Wj/QkR5o+SuwAiMhKcn2UoEPqCLMucmgkQokhcdngMhVFAm +CnqhJkg0vdEEmKXSwxogiQnPoBQFCIuLOdnDMRURMIeFCpnagmgZuKVJRYKpeeUERiBDaIf7CIm Fq8zBqZfYMoLXIYwdEBcquAKJEESsAEBHO0nI2TpIGKfZDh1gnIqgs5PgATFjlVqqZZqcyAH0gJ+ zZkr+gEfQHUE7GEBRuZp7SECzEoCKMAE+q0DbIBiImAFnmAFVtdXNkB+FgAS9OWJEWANlUVcOGAC YkVbICFaFINj9OwHdGAFJOEQYsUrYvKJ7WElwAIDdkFTUooDFpMI4BhXP2MO9SYon3dv/3pFpTiD gJooLkXQA5qABmIRdNODAyLAllUDAXbBA8ZjAICE6H7ZTuxt4byjhbKgL4uiZ0yCl0ti1LAHLD4E J7zCrk6NjDakWgP6WlX5QKzklXdBQKaVH3ICLG5CsHZZeBpbUyQAbMb3Li5iV4bETG4ML4oaAxqC AGclKC+NTyhAPi4gjWOSVwoiWuvpsIo1Z+iExETYdy5HKJCHUX8GoQCKcjhWILkKqix6rFgv5QqB ZTzBCarAE06AKH5wKRdir0VYIuAXr+hjVg6kiSlCIpDaSIK7I0ZFSvtBEhYHUZYOJPTBxxgZhTJC CjlCcgcXQnWACIjAA4YgPzDPpHP3Df8JCixwYjIiVV04gAaIQC82QBKWo0+1AqI24AOe4ATyoR9u YAfgYAwEPCbTGE+eWCV6ZJI/oAJAIwpJXC/AwB7umKobW7GrVUMWADVECD1yaIEkdWNkRqVeh8c+ RpEZAD/0AgUOLphNhTmCeXvaSgT6xQKU7CjiAiaOdCzCJHMG3CvwJCdqeEp6ErELghgRK9UCmnpL zEM4ep+SmWQ0Qpv5QeY+gIRB21RUbC74SdQymnHx4gMwwGgSxCHKqmJ+5AK4qJi9l7uj8p+pSGIn RGhERSSWJEx081S8YnsCqnixu2m7JM7qI4hGAGbyGwVsgDC0oAOcwA0q0JjPyStGeCH/hgTFftLT Zi8mMocfgIQoK6cupDZBd+ToXjgr6Gkj8oI4UIgC9kE1fP11Lm4AfuARKNMGpmsDmGADarOImG05 AisHFGMuEyMr5lLBB+AEBi/AFSPwMsAesOHC8+EEvm4HJGKoVyJVOCd5cAJGnrRiysoRPSAvdk1K 6jEobUYoCYALFiAGElxsdmEDmkAC9GM2xiq/i4isEaOq8vA0NILEI4DVrTlgHGq7FwYEoiohdqDK sLlWZPsrFvc56rSwlOQYU/5DvpweFat9qVpE8MZAkrRaEyIrysS7SaaboaJCHAZRboycTIWaD+LN zykROaMzqAQiOmOCEhyyhQSf8qqK/6giTFY5QYLblB89t21M0ZFCVaRiQhhCee4iI6IKBrjKS7wW pn7gCo0lBWygC0CUCxauZ/gJGJtHt004x1InmOeUTI5Ha91iLUal7D6c1wcgb1aDKOTDADAAMW4C NiYgXYDrt6TjqzidUCKBBnoBG9CBCEhgoRV3LjFACKwsUX3FN9YQEn6DR76qfUmbWM5mA8KC0rcC A/AETy5oKYr6ifeCMjYAVN9Axfs91agkaro8B7onUT93AvYB8xB+Yx6oqsj6PXhMpT7gUnYBP97D ek6FRUQt6A3izqSsWhZajC9ixBrwdL7SMA1AXypAIZBzSojmsAabsTZtVVo5e4vfoP8AgoABAgUG ZuHAz0QFCggQMBwwIMsAgQT6EeBnwB6CiQMyQuxoz4CBjyM/2vuIQKOEChhFTCRgUsSbCBsN5Pg4 gB/GiwIL8uS3C6YBjDsHDh2YcwAFe0GRCgQKFeK+pCN38st5MQMBChhEDkBwc589CQjENtzHYIQE DiZMpDiXztyMGeka0IjA4ypEjBD75dyFUeRQwICNQjyJkoJRvh0b5xxpIEM/ChQG9KuAgSEDmBtG jN0gwV4FIh80bvAwgayBDx4adBCxmgiHDyaIEBGxIUYMHiBcinaIod8HIhIifPiwoYLoExgqIMD8 YQKCC9goXDWQT1KFDBB3DfiAYUD/5vFKUW20xzU8BfMbiCDgEIEAl6H88BHmR3HoRaM8CSTIsUKA K3CwwAcbbbABB+4h8MFdEWwwAQccgIHCBFydACFxP8SnV0kwQQTZXrswwENDGDTnXENEYbXXAESM wBAFfvFwwgDIFEBAjvgNlGN/OeKI3088GVDAjhThZyRUF+2Cj5EFIIBKFhGceN5hG+kE00keeXVY iwMgJpJfIaa0S0Yw8RDBPv10hdEIE3jwQQQLDLDPVJblh+SSGAEG1X37HbmLRR8RRdifQNljEZ/5 XdTRUwRw96VjKn25DyoiZMGABCMQMUETHaQzlwzpdOBBaAzkJMtVH1bUTwZ5HgUV/1KICYQBYnwN BWJSjVrGTwaU+UUBJGAhEAFxEURgjz3tEIGKPQtAuMECIEA0wggN6LALKkRssAIRx5JARC8xoPKV PTnkkB5mAzw7W3IYMIfBc5B8N8ETJyDDy7w5oSsjBbswuNF4XH1FFkSUkZdBnJJMQAQXCbwE2JBA 5shjnlfht8sHHAgowQIrkdbcBwHCt0EEHqDQhAQTTMDPDmAYyMAO7X2oK07XiXRdDg2lVIEk9jDA lKo5ZJEFAvxQsAECJ0LEwwK74KhfjhHjo2PEAxUZFJIRH/mTfRb7hKR++CFQADobfEkZYl8Z4N1J OX7JqGOROjZPrgTYw4Nieg0gQf/f4W3k0BtNNHTsQns9tdh9gPlEH+J/+nUxP/30Y7VOi+k5UJKD 4cdiBuElpTYCEsRLggQkSoAKW4a8oYUWKcjQARhE5CDWvwjMp2thhemXeeZCZQ5RTY8J5lVVA2Tg nWWTDaAzSwhk6u25EXBA1nBxMiARAu0xwMEPpCHoLREMMJACGBToTEEFC423/nE0cICZcyiCxcEE PBwyBjYf+nrTIZSlvxGuDIx5BQtPPxBVmXgFZwMfSMCQghQ2rPjuVRQZQAIyNjJHzIYGSkNFD1bg iB0sYHoTQNkHKiAB2fRjAe0AGmeIEDfLlCQwGOmHSGCyM6UtYAcMIAEPBlCA4iD/QARiuYpDKPMl BEjiLzqaWJCcyLWIWYww7phik4TEH6AUIAEGyEITNoBDnByGKUfZhUYEUjwQZeQqfulIRq5UJgPw oG9ko95GJPCGcrzIOAsgVz9i9afMYaRIlhNIYZ5yyD5l5SgE8FPE/tKkx+DpKa5iXhtN8qUcMAAB WeBBFkLzSRGMIBImMEQTUqCFCbhrL14gQj5wNjmLWKUwsdpcUZLYEcAkxT9uFFEsJyNAsPAtAiP4 yoOyYI/6EWsDTEEAGCZwAglEZ2UMk00kijOBD0wlBydYCgZ05jMKcIAGA0ofKuJ3IgqoUjuSwEf+ 8sG8/+VgFwMEzsBQyI8CGEwp/5ZZD+AsqKdG7gRxV+vTFXuEsQs64gMSOMEJHMED7TTUEY44QQUc sYEGpIZ69sjAmx51LnscQhIrYJlQLjaAQKUUKH/sCAYWkEMJ7KAdkZBIBSYQiSJ9YARbWdrx1vQ0 /xCkRwG9mu+E5LXFKWpHFMyifRjlLHuAIAVg7BJGUrIROiEmJftpTEjE+JiGsA2lYxkAFyIwgw0k gAdeqA1q4CXJzflOP4UiktgYx1RdYg5QhWTkjogXSKBEZi9cwsk+mmaPop0Fb5balB4hFIEKkGsi 6JgAxSZiEbcBcnOBdBREcuC2G54AG3phjGR+SgFJxIuTJWsIfFayAUNsawOb+f8AGEp1ggDlZgIj IEEkSHOcdizgXDr7ymqbQ4MPxIAG6zmncyCRmRhs4HyQ+JXPJPE/fyGguukUGAJ4QIAcLGBvwWlO ViH4NN95DY37yedPDpm5XeSDAAxyjvpOWIF+SAIbOdhBDIiwA2ky119PAAMNCrCLc0kCBxt4AhFa +pHJPSYp3sHPWEpUNAk4wrdEsAcG3kCCBawsEuLhZ0cmIyilLCkoBAlS1bSopFdhTUl+epXWDEBH hnihATlo40m0FKnz2OOw9vhdrgRjpZNgxFw3LPIEFNCABWRgBLGzgQcWoNlAFSVWMXYUU+mzmLnm pyAF2clEbClXRvoVZ8lD8pD/40UWZO7jbwz5LglIkOENwCurmW2VqkhiS/gu5swCUcrAoOIJbuyg 0DjjSCy5wpIRfIAB7ZhAmm6aypVF4AQRaICeG8oBOnhgA0SLBA9E8CKg7SMHzvnKzr5jHNCI9wTP QQUq0jcBSGTgBJJQIiQOwWpDH2IAyjmYADODnnzk4AeoyIcZDaYcMQ3pvXl6L864JiQk4aghwaoA JFDh0KPt4ALr2MEONoye+35FygSQRAyaYA95rOBsMGEpR66zookMrWh4HsEKItCWsTShEh/4QQM+ pxTJTc5fBnAEu/sDlCW1ONsXWa+Swtw1KdJyADyoAGhJ0IQJgBa06Ejpl4CG/9WGJBYBjLJhiEai ERY5S4IDaIACwCAJ4uCjF4XI5ngvd+Yv76d3aOzTZhEZtmljPL5GdyPTezc8Se1MI1n15pdKVBYG eMy56tNLeBsVZjXnVSePtIqrQ8IPd6wgBlRJCkZOC6z8ouVBBpLAKd9wmgY0AAzPbGhxpPmDD5Sg t0TTJnGdY66d5UCaypXA4leCOuXk9kGIYt9CKMOd86FHYAKbSMExkA9mwyRebXzxomws0F66mChg C0ol/0gBWhua2CvYwX7zy+sKlMxhsCbABTgwXYsA39ETXulICjORxIpAAiSo1rwNYQh0fCAFJpiA CdBWGYi4qo072EdPhDTtov9mm5ZPAcoVJ8ikiz0tiRTIAhG+uAssfylZ42MAOjZZtCGTYB5CyYmS XQ06Jkcx/IAAGnUCREBVXFACClEicUUUSFcYZYZFgVV+VuMOe7UjFtFSXMY5RgErhoErjXYSoDVk OTQ35oIe6PEctRZNzuEXflEBOVEU7CVXgeUUhvEcGAATBaAPkCESGcA2YsJGa/IcwDcCDPIInaBK HuABMsAOFXICx6ExH5AF6JAFkXAp6EAE7bBq6qOCJkIBxrEt+1BfqBB5GCAykfUmqiUJkNBNQuAd 9KQux3ZsE3EaBKAOOrABFiFAkyNxRsE4YEMx+6ER8aVPKWUoOeI2xFYjENT/D8+RW7zGCzEwATTA EidWXL5nIBYRHQMAT5EBKx2Bb44xSiAQCaREByZAIZHQAOaQAjDSHDJSfMfnHQJFVBHnYl4zY1JU RbTEJ1L0E4SmE/o0RDwQCRHgBdLxAXRyf/ZghRZQhehAAimBAT9kOcenESEhEA2REwWBGAVgHBLg Ac/kCGNxRx2mJ/AFSH/FXn21WfhRRWOWNfpBObVkSA9IgEW2O4NxFGI0FefBEDcBVsYWL1xxThRw AS8IaI5CH+roi5aDJegRI/14K/SRE5TTRo+oICKge2+BGo/gARzQADYwAQEiXU8QAXe2Kb3FALYR M164MykiTQjyHPj1AQeJ/yAS4AtEAAlgsAKXQWtx+BWYsQ/QRYdGcwgrkwCSoAMRAE8bIWE74hPl B3EEgA9HBREEYRgXgyNbQxGQIAl/NBL9AREfgAO8IAmpMzlGkyMPsxHttgAyQgAnIB0PQ2EUxhe7 Yw+jNAIRUAlE8AMmsGPloAXp8A4m4hAYeTi7gDzIAyRZs2IQRHFE0ldW2VR6MlD6gQ4pEAORQAOR gAIRcBAY0YxWWAKcRHUaIRF3U2TooByFxkkv4SyVkQ/2MAEigAA0cAL104gbgAILMoNoViS8Eyv3 8Y7A2CS9QxixBIT1BoEjgUxFxxEhKEaI8WNfkX1qU2L/kxkycjTZCSlkN7ODVgGB41kZMoIB5oEU PtgYMCGQWdkPNNA3HmAO59AAHqADOtAAJaUDuiFdCEI0RFAJohkdx1g05qFYd2Qc2bQPDsUDZuh4 NxUD6IAOkVACxiEEFXACTEEB3KE+J/JNdBgcFCBdXPABNpAFXPAVPXY8g1hIg6iOpmcoX5I8ExEk 8WWjwTgku4ANK5APGeCGlrEL8/I2+aVwEJEPO7ACFeBsMrhSokidI0FKttEWJlAODfAIb//wOpmR A90ZSwOIFUBFSPKRFS6mJxYnUIkjlUlni5lTNgpQCCmkIB1RMh3xjDyAp0STjVfXEWSBAP1YIpRp RuRCX51Wd+qzEgNgAp6GAGoBRGt2cYLhKBdBKFbROxfXRMAjdJAaKS3nFZLDnmBFEiUmqv2kFGFZ qn8xnnJlqeJZaDmgFzqjGu0VV3lTWl9xHGAgAw3wBmDQBDUQBjrADv2pG7lBakRwihwAAr6lAz+g FnHGSQyweAv6ARSwEh13QhSwAB4QAx9AodJ4ElHoL8nzoZyXHjpYAT8gAlywAmCwDwmgnURHEYcU UD8xQTxREBegJdfxFE/CK4/yEvwxFMj/8wQrAEBkkQFMkRMJwA/dtBVZmQFP8AQsBxRRdxUVBnNS WqUm8AaGgAIp0AGGkAIiGihAmCgfQQEfcAJEtRJdKUsTpDVYEjVrShhF0h+4YqektAEmoBU8MAKd USbokCzoAAJWiEyqhjcjwQMhuEYw0SzNKQKpkSAeAyX9gA58B1M0EEpFdpxVgTNsZnRq6oFHsnSU tDmCdhgVpktsoyth0iVzszd68Wj9NBnqkX0suhQnFZxQ0YtRUWiVYURU1zFUIYIx2CILMBqPIAMo MI7sUAPswA6F0J/cSontQUomUC2Zuy0tOQHIBFP2wGnREZcnBCUOZQ8F1yBfxAHowAOi/7GMk5EB DZoSx4Yu45EBNPADPJAAP9ALE5EZH/En6fd9ftUTUIEjAlUmXXUT4cGvYEGoOmIAFvFAPEEB2LCh 3BEBNvoS+LOhk3MBG7oLu8ABRuMXenVijZGxA2AKbdFWbzCSn4ICDVFdS5F9fKETfOMcKhsUBTAC jqAjWmGzWzNXtdRlDKkjb3M3BSAPFTq+fSknEQAbIwI0mPIzQqs0YrG0WzKWYZQ5KWQCH5ADHwBT fyoBjIsKaHIpRCMBNppFN8R0NNiqBNUo+GGzuChXrkJ0D/ipXlt89rA3qWozygMRQoBiSjEZdtJN kXKxUbFlhpI5S8FGMPddGjMnZhZeEf9iZtmKCueQAj9gAz8grIUwrDHwA/5ZG4JZGyUDAsXSEETg AV7wBqVBLD87AZJXATRiUd/hATRAIxNQPuhhUf5yAUtBa1xxLtzVHMfTPf2ADM80elb1IbyjJwgG jxXjohIoEAkbPDajrTp4wAIlKBgDQZDAEhdBEw8LBydwCKCLAL6SNFyggjlQEYHhdoRVEifxfm3R BCL7FumQeANTGTCxP/wgGuozJw7EsBYxEFuzI1dkdNPLHweMEfsAZpRKXyfRBD9wAiIwHBLgjWLx jBZQgj8GOLZyNxLAO+4nJ1RrLv1ABG8wviIQAZoiAZ4kZ19WzUumqk+HSJDhw+tHsen/J7ZIhyfI 10s+2CE/jBNqg2+BImH9JAR9IUAntFq2YjVCQdBXkX1mW2cawwGyLIrOxA4TsQsVQANqEh0jOZLs 4AmRqwM1oANDEAOoUUqC6S28NRzO0RpMGHLtEGsbsA8a+l0NJbQlZVEMRZcRIAl57C+M+MtKozM6 4xcQkgCQYAMckA/7kEBZOYAuaiiKMkmDyF6HGDCVEb3iQQFCEFB/9hOukiM3wRP4yw8LBglIQWsw YSASsZsYAIR/kVJKazRjNADzEAGGYH2GoAWd8Ag2oBRdamKW4XZBIRoSQAFEVQDII3FrTckVV4Pa pnQgglCJkw/vwA0YYRyiuY32YAEW/4AOWAVaWXUSp1IQkKGIUsKROiNMA7ABTWAeotQ3dIQpKSFB aoZDZEIU/DwUX0UR+UAaE9PCSBdXSLfD010SYGUr0bu2HQF3sqgUkLBwxIEBWWAWX4IUfKGNvJNV ohh0h+HRSzsRESDG2Sc64lEBHIACsVPGOtABjlsDN9Csz2R9TVB9p+gtRxgBTdAEb/ADTYAab8Ap REBsBoLH4YEgzuExLQgJpHsBSrEAWOYQOsOlxYUBMcABXDAhC7AV6QERr/lXMqY4BUyexMko42G3 QtofWiE2WdMUSncRNIAKD40VBuJsZ5MApEZsnAM5SaEaKIEBuxAJAu6+neA6Co0edP/SnNp3Nwsx Xz1CdLIkzUtSAC9bNVyOr187GEMiGCRAAxkANAVCHAIxZHGejVNRaBxXZFhRJAwiJ2BoHQjgASaQ Psu3fBKgwinxuSDR1XMOuOTHO7RtPOjsQLBCgRlhnPoBIrTcaMYz2GJS3dfRtkzLRtlXZ88RCQsR GikxZ6KoUpAhWGBiJIPxEQuQXCkyAB3QAYfgMcH2HLrdAf2ph/kJ0zFArH/e4B7wW0RgAh2zAV7g AT8ABq3UKc6uTSr7oAYiHvO2EiprX6abWuiiPmBxLgW5WsSmrgnQrpeoNFvtITwiwA+kcUnCJIky UF2yFA7RUWN+5pKpKANMGDe5cG3/1LCb8b1/ehHF8TYhMhH1fBhzFh4jYAiq+AgpUAkTBuSVgcM4 nA/pMzXISxGndyRMVWZ2RamCSBQUhCT2QDXzDBPFQgRZcM1mNN5RKRYxV0GN6qeOnRMqs4wPmgXL 50l0ROjPUzT0RfD9QIbcuM/SjWQQeUOME1jI58OMthhLTFhQimQQsQ0zdENBhysrIhlbxQAigJtp wwPjo3I0Kjn9hysbHlq4Um9GJE1YlwMi50w5GC8eFwM20KxerAOekJ9gzHfjyDBvgFO2sVMToOAo gxob4OxvsEk3iQ4NFYM3tQGRICHg5lwWNciVUQEGUpA5KE4/rlzgNdMyYk9LA6tr/6OVe0JX6DcU lAyzUbMPEmFcApSjn/xH0xazDIkf+aAgC9FGQMgPFbAAzjZpFiABu4Ah+FGPrM58MPcl6NAPPIDs KCBbFVSxRnwSwl+y/JAZkEkkX26VCMU1gPhe5x9xlOnuVzHPsMxAozEBOsgRX6Em9QgpXyGDcjQC 5nETiAEQ/WgQ4WEPgQQJqLIclLAQAQIeCOxlyWLPQMUBBh/aI8BvAL9d/AwQMCDy40eSKQ0U4Mev 48iSI1sa2EXA3r6ZL1OeNGBgQMmfJz36/GkyZNCgNH/2LLmrHwYEDCQO6EchKgOsC+0NwJChKb8c Qe05/dkxrEgC+zBAlYogR9hdC68qDPhQAUMFGivA/Khh44eOGjoAM/kBppeHHyY8bIhAZAIHIm9Q gGkCBswED2BQ/Hj4YQEDCScwUKiwYQMR0zRO1D0hAcGAHBRy7JCQA2qOhwNK0xjw5Me2XT8m8KNA YfTxAQM2uh35cqXIliRLukzJUmV1BBseajVO1aXLmh4JEAg5njpMkGjHZ48UgQaGfslLZkA4fsEG ewUqrIjBMfl/nxDq6Sao+EGACBPK+SAgADs= --_005_2DD56D786E600F45AC6BDE7DA4E8A8C11221F9F0eusaamb107erics_-- From nobody Tue Mar 22 09:12:07 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AE26D12DA7B for ; Tue, 22 Mar 2016 09:12:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=docusign2com.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ilpXk0LN0MTL for ; Tue, 22 Mar 2016 09:12:02 -0700 (PDT) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0726.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::726]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9E18812DA8B for ; Tue, 22 Mar 2016 09:11:37 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=DOCUSIGN2COM.onmicrosoft.com; s=selector1-docusign-com; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=xNCLIORlfbiJN/fXBkM1NOH4IMbqaaNKG68+13Tt470=; b=cbAozgY/m/g5zrUV4Wvbrnhc06kBm6OxzLv1tMe7cP0MBC0rNh98do9E3k9wWxl9qumv47xHrptpJPk+9CXVelPElxyizAZ++YqkxGS/SdqgBTbnTr7yZMMv8ZbeadD8JQZ872dTS659f+54lW1BEYafXXbjbTN/JcFHKxQyw7Y= Received: from BN3PR0401MB1395.namprd04.prod.outlook.com (10.161.209.154) by BN3PR0401MB1394.namprd04.prod.outlook.com (10.161.209.153) with Microsoft SMTP Server (TLS) id 15.1.443.12; Tue, 22 Mar 2016 16:11:17 +0000 Received: from BN3PR0401MB1395.namprd04.prod.outlook.com ([10.161.209.154]) by BN3PR0401MB1395.namprd04.prod.outlook.com ([10.161.209.154]) with mapi id 15.01.0443.015; Tue, 22 Mar 2016 16:11:17 +0000 From: Erwann Abalea To: "curdle@ietf.org" Thread-Topic: [Curdle] I-D Action: draft-ietf-curdle-pkix-eddsa-00.txt Thread-Index: AQHRhFV2cInBaXGPgEWupcqYC0FVgA== Date: Tue, 22 Mar 2016 16:11:16 +0000 Message-ID: <01C8B7FC-B9A3-4ABB-8BBB-0A58E153E717@docusign.com> References: <20160320194414.8969.92761.idtracker@ietfa.amsl.com> In-Reply-To: <20160320194414.8969.92761.idtracker@ietfa.amsl.com> Accept-Language: fr-FR, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=docusign.com; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [192.93.124.97] x-ms-office365-filtering-correlation-id: 37fa2846-046f-49d9-25e3-08d3526c9942 x-microsoft-exchange-diagnostics: 1; BN3PR0401MB1394; 5:taCk9nhgmiGeO27z29qNobHBxtCLm8Rx8z+e4PiPzFhqLiBhFRRx0i/jORBsVv5E7aa3/IzUaLPJJcsBsId90vo4lmI1MZ0BotGwg8mHKtN+3f3r7M9qxXdudjnF3coGfdGd/4TG9huqjQrzzN//gg==; 24:0xJliT+UYouu5P1IbEmdxihwnLDhBfXOqYsP0PmEH+OhRWbYlT4QoLxTT8XDEzeus08/02RureGWajMYBO/M68+nZn1tv2o3fSnpfNkwOts= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN3PR0401MB1394; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:; x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046); SRVR:BN3PR0401MB1394; BCL:0; PCL:0; RULEID:; SRVR:BN3PR0401MB1394; x-forefront-prvs: 08897B549D x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(377424004)(33656002)(1220700001)(2900100001)(110136002)(107886002)(1096002)(5640700001)(2950100001)(86362001)(189998001)(16236675004)(15975445007)(586003)(19617315012)(5004730100002)(2351001)(5002640100001)(11100500001)(66066001)(2501003)(92566002)(6116002)(102836003)(3846002)(81166005)(77096005)(122556002)(50986999)(3660700001)(106116001)(54356999)(87936001)(10400500002)(2906002)(76176999)(230783001)(3280700002)(19580395003)(19580405001)(1730700002)(5008740100001)(83716003)(82746002)(99286002)(450100001)(36756003); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR0401MB1394; H:BN3PR0401MB1395.namprd04.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_01C8B7FCB9A34ABB8BBB0A58E153E717docusigncom_" MIME-Version: 1.0 X-OriginatorOrg: docusign.com X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Mar 2016 16:11:16.9316 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 237e701c-327f-4cad-a5a1-dda2412d89d9 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR0401MB1394 Archived-At: Subject: Re: [Curdle] I-D Action: draft-ietf-curdle-pkix-eddsa-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Mar 2016 16:12:05 -0000 --_000_01C8B7FCB9A34ABB8BBB0A58E153E717docusigncom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Qm9uam91ciwNCg0KU2VjdGlvbiA0LCB0aGUgRWREU0FQYXJhbWV0ZXJzIGRlZmluaXRpb24gaXMg bm90IGNvcnJlY3QgQVNOLjEuDQoNCkl0IHNob3VsZCBiZToNCkVkRFNBUGFyYW1ldGVycyA6Oj0g RU5VTUVSQVRFRCB7DQogIGVkMjU1MTkgICAoMSksDQogIGVkMjU1MTlwaCAoMiksDQogIGVkNDQ4 ICAgICAoMyksDQogIGVkNDQ4cGggICAoNCksDQogIC4uLg0KfQ0KDQppZiB5b3Ugd2FudCB0aGUg ZW51bWVyYXRpb24gdG8gYmUgZXh0ZW5zaWJsZSwgeW91IE1VU1QgaW5jbHVkZSB0aGUgZXh0ZW5z aWJpbGl0eSBtYXJrZXIgKHRoZSAzIGRvdHMpLg0KDQpTZWN0aW9uIDMgYW5kIDYsIHNvbWUgZGF0 YSBzdHJ1Y3R1cmUgZGVmaW5pdGlvbnMgYXJlIHJlY2FsbGVkIChBbGdvcml0aG1JZGVudGlmaWVy KS4gSSB0aGluayBpdCBtYXkgYmUgd2lzZXIgdG8gdXNlIHRoZSBkZWZpbml0aW9uIGZyb20gdGhl IEFsZ29yaXRobUluZm9ybWF0aW9uLTIwMDkgbW9kdWxlIChSRkM1OTEyKSB0aGFuIG1lbnRpb25p bmcgdGhlIG5vdyByZWFsbHkgb2Jzb2xldGUgQU5ZLWJhc2VkIG9uZSAoQU5ZIGhhcyBiZWVuIHJl bW92ZWQgZnJvbSB0aGUgc3RhbmRhcmQgaW4gMTk5NCwgYW5kIHJlcGxhY2VkIGJ5IGluZm9ybWF0 aW9uIG9iamVjdCBjbGFzc2VzIGFuZCBpbmZvcm1hdGlvbiBvYmplY3RzKS4NCg0KVGhlIHRleHQg aW4gc2VjdGlvbiA2IGlzIGZvY3VzZWQgb24gY2VydGlmaWNhdGVzLCB3aGVyZSB0aGUgc2lnbmF0 dXJlIGlzIGVuY29kZWQgYXMgYSBCSVQgU1RSSU5HOyBidXQgdGhpcyBhbGdvcml0aG0gZGVmaW5p dGlvbiBjYW4gYWxzbyBiZSB1c2VkIHdpdGggQ01TLCB3aGVyZSBhIHNpZ25hdHVyZSBpcyBlbmNv ZGVkIGFzIGFuIE9DVEVUIFNUUklORy4gSXQgbWF5IGJlIG5pY2UgdG8gc3BlY2lmeSBhbGdvcml0 aG1zIGFuZCBjb250ZW50IG9mIHRoZSBzaWduYXR1cmUgKHRoZSBFTkMoUil8fEVOQyhTKSBwYXJ0 LCBhbmQgZG9u4oCZdCBkaXNjdXNzIGFib3V0IHRoZSBlbmNsb3Npbmcgb2YgdGhlIHNpZ25hdHVy ZSAoQklUIFNUUklORyB2cyBPQ1RFVCBTVFJJTkcpLg0KDQpGb2xsb3dpbmcgdGhlIGlkZWEgcHJv cG9zZWQgaW4gdGhpcyBkcmFmdCwgSeKAmWQgdGhlbiBwcm9wb3NlIHRoaXM6DQoNCnBrLWVkZHNh IFBVQkxJQy1LRVkgOjo9IHsNCiAgSURFTlRJRklFUiBpZC1FZERTQVB1YmxpY0tleQ0KICBQQVJB TVMgVFlQRSBFZERTQVBhcmFtZXRlcnMgQVJFIHJlcXVpcmVkDQogIENFUlQtS0VZLVVTQUdFIHsg ZGlnaXRhbFNpZ25hdHVyZSwgbm9uUmVwdWRpYXRpb24sIGtleUNlcnRTaWduLCBjUkxTaWduIH0N Cn0NCg0KZm9yIHRoZSBwdWJsaWMga2V5Lg0KDQpBbmQ6DQoNCnNhLWVkZHNhIFNJR05BVFVSRS1B TEdPUklUSE0gOjo9IHsNCiAgSURFTlRJRklFUiBpZC1FZERTQVNpZ25hdHVyZQ0KICBQQVJBTVMg VFlQRSBOVUxMIEFSRSBhYnNlbnQNCiAgUFVCTElDLUtFWVMgeyBway1lZGRzYSB9DQp9DQoNCmZv ciB0aGUgc2lnbmF0dXJlLiBOb3RlIHRoYXQgVkFMVUUgYW5kIEhBU0hFUyBhcmUgYWJzZW50IGhl cmUuIFlvdSBjYW4gYWxzbyByZW1vdmUgdGhlIMKrIFBBUkFNUyBUWVBFIE5VTEwgQVJFIGFic2Vu dCDCuyBpZiB5b3Ugd2FudC4NCg0KSXNu4oCZdCBpdCBlbWJhcnJhc3NpbmcgdGhhdCB0aGVyZeKA mXMgbGl0dGxlIHJvb20gZm9yIGFnaWxpdHkgaGVyZT8uIEVkMjU1MTkgY2FuIG9ubHkgYmUgdXNl ZCB3aXRoIFNIQS01MTIgKG5vIFNIQS0zIG9wdGlvbiksIGFuZCBFZDQ0OCBvbmx5IHdpdGggU0hB S0UyNTYuDQoNCg0KQ29yZGlhbGVtZW50LA0KRXJ3YW5uIEFiYWxlYQ0KDQpMZSAyMCBtYXJzIDIw MTYgw6AgMjA6NDQsIGludGVybmV0LWRyYWZ0c0BpZXRmLm9yZzxtYWlsdG86aW50ZXJuZXQtZHJh ZnRzQGlldGYub3JnPiBhIMOpY3JpdCA6DQoNCg0KQSBOZXcgSW50ZXJuZXQtRHJhZnQgaXMgYXZh aWxhYmxlIGZyb20gdGhlIG9uLWxpbmUgSW50ZXJuZXQtRHJhZnRzIGRpcmVjdG9yaWVzLg0KVGhp cyBkcmFmdCBpcyBhIHdvcmsgaXRlbSBvZiB0aGUgQ1VSdmVzLCBEZXByZWNhdGluZyBhbmQgYSBM aXR0bGUgbW9yZSBFbmNyeXB0aW9uIG9mIHRoZSBJRVRGLg0KDQogICAgICAgVGl0bGUgICAgICAg ICAgIDogVXNpbmcgRWREU0Egd2l0aCBFZDI1NTE5L0VkNDQ4IGluIHRoZSBJbnRlcm5ldCBYLjUw OSBQdWJsaWMgS2V5IEluZnJhc3RydWN0dXJlDQogICAgICAgQXV0aG9ycyAgICAgICAgIDogU2lt b24gSm9zZWZzc29uDQogICAgICAgICAgICAgICAgICAgICAgICAgTmlrb3MgTWF2cm9naWFubm9w b3Vsb3MNCkZpbGVuYW1lICAgICAgICA6IGRyYWZ0LWlldGYtY3VyZGxlLXBraXgtZWRkc2EtMDAu dHh0DQpQYWdlcyAgICAgICAgICAgOiAxMA0KRGF0ZSAgICAgICAgICAgIDogMjAxNi0wMy0yMA0K DQpBYnN0cmFjdDoNCiAgVGhpcyBkb2N1bWVudCBzcGVjaWZ5IGFsZ29yaXRobSBpZGVudGlmaWVy cyBhbmQgQVNOLjEgZW5jb2RpbmcNCiAgZm9ybWF0cyBmb3IgRWREU0EgZGlnaXRhbCBzaWduYXR1 cmVzIGFuZCBzdWJqZWN0IHB1YmxpYyBrZXlzIHVzZWQgaW4NCiAgdGhlIEludGVybmV0IFguNTA5 IFB1YmxpYyBLZXkgSW5mcmFzdHJ1Y3R1cmUgKFBLSVgpIGZvciBDZXJ0aWZpY2F0ZXMNCiAgYW5k IENSTHMuICBQYXJhbWV0ZXJzIGZvciBFZDI1NTE5LCBFZDI1NTE5cGgsIEVkNDQ4LCBhbmQgRWQ0 NDhwaCBhcmUNCiAgZGVmaW5lZC4NCg0KDQpUaGUgSUVURiBkYXRhdHJhY2tlciBzdGF0dXMgcGFn ZSBmb3IgdGhpcyBkcmFmdCBpczoNCmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2Ry YWZ0LWlldGYtY3VyZGxlLXBraXgtZWRkc2EvDQoNClRoZXJlJ3MgYWxzbyBhIGh0bWxpemVkIHZl cnNpb24gYXZhaWxhYmxlIGF0Og0KaHR0cHM6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWll dGYtY3VyZGxlLXBraXgtZWRkc2EtMDANCg0KDQpQbGVhc2Ugbm90ZSB0aGF0IGl0IG1heSB0YWtl IGEgY291cGxlIG9mIG1pbnV0ZXMgZnJvbSB0aGUgdGltZSBvZiBzdWJtaXNzaW9uDQp1bnRpbCB0 aGUgaHRtbGl6ZWQgdmVyc2lvbiBhbmQgZGlmZiBhcmUgYXZhaWxhYmxlIGF0IHRvb2xzLmlldGYu b3JnLg0KDQpJbnRlcm5ldC1EcmFmdHMgYXJlIGFsc28gYXZhaWxhYmxlIGJ5IGFub255bW91cyBG VFAgYXQ6DQpmdHA6Ly9mdHAuaWV0Zi5vcmcvaW50ZXJuZXQtZHJhZnRzLw0KDQpfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KQ3VyZGxlIG1haWxpbmcgbGlz dA0KQ3VyZGxlQGlldGYub3JnDQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L2N1cmRsZQ0KDQoNCg== --_000_01C8B7FCB9A34ABB8BBB0A58E153E717docusigncom_ Content-Type: text/html; charset="utf-8" Content-ID: <45FC47CABF58ED42A961FB87C866ECF8@namprd04.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj5Cb25qb3Vy LDwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9 IiI+U2VjdGlvbiA0LCB0aGUgRWREU0FQYXJhbWV0ZXJzIGRlZmluaXRpb24gaXMgbm90IGNvcnJl Y3QgQVNOLjEuPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRp diBjbGFzcz0iIj5JdCBzaG91bGQgYmU6PC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2lu OiAwIDAgMCA0MHB4OyBib3JkZXI6IG5vbmU7IHBhZGRpbmc6IDBweDsiIGNsYXNzPSIiPg0KPGRp diBjbGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgY2xhc3M9IiI+RWREU0FQYXJhbWV0 ZXJzIDo6PSBFTlVNRVJBVEVEIHsmbmJzcDs8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxm b250IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0iIj4mbmJzcDsgZWQyNTUxOSAmbmJzcDsgKDEp LDwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIGNs YXNzPSIiPiZuYnNwOyBlZDI1NTE5cGggKDIpLDwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+ PGZvbnQgZmFjZT0iQ291cmllciBOZXciIGNsYXNzPSIiPiZuYnNwOyBlZDQ0OCAmbmJzcDsgJm5i c3A7ICgzKSw8L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIg TmV3IiBjbGFzcz0iIj4mbmJzcDsgZWQ0NDhwaCAmbmJzcDsgKDQpLDwvZm9udD48L2Rpdj4NCjxk aXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIGNsYXNzPSIiPiZuYnNwOyAuLi48 L2ZvbnQ+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFz cz0iIj59PC9mb250PjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdiBjbGFzcz0iIj48YnIgY2xh c3M9IiI+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9IiI+aWYgeW91IHdhbnQgdGhlIGVudW1lcmF0aW9u IHRvIGJlIGV4dGVuc2libGUsIHlvdSBNVVNUIGluY2x1ZGUgdGhlIGV4dGVuc2liaWxpdHkgbWFy a2VyICh0aGUgMyBkb3RzKS48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9k aXY+DQo8ZGl2IGNsYXNzPSIiPlNlY3Rpb24gMyBhbmQgNiwgc29tZSBkYXRhIHN0cnVjdHVyZSBk ZWZpbml0aW9ucyBhcmUgcmVjYWxsZWQgKEFsZ29yaXRobUlkZW50aWZpZXIpLiBJIHRoaW5rIGl0 IG1heSBiZSB3aXNlciB0byB1c2UgdGhlIGRlZmluaXRpb24gZnJvbSB0aGUmbmJzcDs8c3BhbiBj bGFzcz0iIj5BbGdvcml0aG1JbmZvcm1hdGlvbi0yMDA5IG1vZHVsZSAoUkZDNTkxMikgdGhhbiBt ZW50aW9uaW5nIHRoZSBub3cgcmVhbGx5IG9ic29sZXRlIEFOWS1iYXNlZA0KIG9uZSAoQU5ZIGhh cyBiZWVuIHJlbW92ZWQgZnJvbSB0aGUgc3RhbmRhcmQgaW4gMTk5NCwgYW5kIHJlcGxhY2VkIGJ5 IGluZm9ybWF0aW9uIG9iamVjdCBjbGFzc2VzIGFuZCZuYnNwO2luZm9ybWF0aW9uIG9iamVjdHMp Ljwvc3Bhbj48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+PGJyIGNsYXNzPSIi Pg0KPC9zcGFuPjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj5UaGUgdGV4dCBp biBzZWN0aW9uIDYgaXMgZm9jdXNlZCBvbiZuYnNwO2NlcnRpZmljYXRlcywgd2hlcmUgdGhlIHNp Z25hdHVyZSBpcyBlbmNvZGVkIGFzIGEgQklUIFNUUklORzsgYnV0IHRoaXMgYWxnb3JpdGhtIGRl ZmluaXRpb24gY2FuIGFsc28gYmUgdXNlZCB3aXRoIENNUywgd2hlcmUgYSBzaWduYXR1cmUgaXMg ZW5jb2RlZCBhcyBhbiBPQ1RFVCBTVFJJTkcuIEl0IG1heSBiZSBuaWNlIHRvIHNwZWNpZnkNCiBh bGdvcml0aG1zIGFuZCBjb250ZW50IG9mIHRoZSBzaWduYXR1cmUgKHRoZSBFTkMoUil8fEVOQyhT KSBwYXJ0LCBhbmQgZG9u4oCZdCBkaXNjdXNzIGFib3V0IHRoZSBlbmNsb3Npbmcgb2YgdGhlIHNp Z25hdHVyZSAoQklUIFNUUklORyB2cyBPQ1RFVCBTVFJJTkcpLjwvc3Bhbj48L2Rpdj4NCjxkaXYg Y2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxzcGFuIGNsYXNz PSIiPkZvbGxvd2luZyB0aGUgaWRlYSBwcm9wb3NlZCBpbiB0aGlzIGRyYWZ0LCBJ4oCZZCB0aGVu IHByb3Bvc2UgdGhpczo8L3NwYW4+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxzcGFuIGNsYXNzPSIi PjxiciBjbGFzcz0iIj4NCjwvc3Bhbj48L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW46 IDAgMCAwIDQwcHg7IGJvcmRlcjogbm9uZTsgcGFkZGluZzogMHB4OyIgY2xhc3M9IiI+PGZvbnQg ZmFjZT0iQ291cmllciBOZXciIGNsYXNzPSIiPjxzcGFuIGNsYXNzPSIiPnBrLWVkZHNhIFBVQkxJ Qzwvc3Bhbj4tS0VZIDo6PSB7PC9mb250Pjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0i Ij48c3BhbiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+Jm5ic3A7IElERU5USUZJRVImbmJzcDs8 c3BhbiBjbGFzcz0iIj5pZC1FZERTQVB1YmxpY0tleTwvc3Bhbj48L2Rpdj4NCjwvc3Bhbj48L2Zv bnQ+PHNwYW4gY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3 IiBjbGFzcz0iIj4mbmJzcDsgUEFSQU1TIFRZUEUgRWREU0FQYXJhbWV0ZXJzIEFSRSByZXF1aXJl ZDwvZm9udD48L2Rpdj4NCjwvc3Bhbj48c3BhbiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+PGZv bnQgZmFjZT0iQ291cmllciBOZXciIGNsYXNzPSIiPiZuYnNwOyBDRVJULUtFWS1VU0FHRSB7IGRp Z2l0YWxTaWduYXR1cmUsIG5vblJlcHVkaWF0aW9uLCBrZXlDZXJ0U2lnbiwgY1JMU2lnbiB9PC9m b250PjwvZGl2Pg0KPC9zcGFuPjxzcGFuIGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0iIj48Zm9udCBm YWNlPSJDb3VyaWVyIE5ldyIgY2xhc3M9IiI+fTwvZm9udD48L2Rpdj4NCjwvc3Bhbj48L2Jsb2Nr cXVvdGU+DQo8c3BhbiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+PGJy IGNsYXNzPSIiPg0KPC9zcGFuPjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj5m b3IgdGhlIHB1YmxpYyBrZXkuPC9zcGFuPjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48YnIgY2xhc3M9 IiI+DQo8L2Rpdj4NCjwvc3Bhbj48c3BhbiBjbGFzcz0iIj5BbmQ6PC9zcGFuPg0KPGRpdiBjbGFz cz0iIj48c3BhbiBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQo8L3NwYW4+DQo8YmxvY2txdW90ZSBz dHlsZT0ibWFyZ2luOiAwIDAgMCA0MHB4OyBib3JkZXI6IG5vbmU7IHBhZGRpbmc6IDBweDsiIGNs YXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0iIj5zYS1lZGRzYTwvZm9udD48 Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgY2xhc3M9IiI+Jm5ic3A7U0lHTkFUVVJFLUFMR09SSVRI TSA6Oj0gezwvZm9udD4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0iQ291cmllciBOZXciIGNs YXNzPSIiPiZuYnNwOyBJREVOVElGSUVSJm5ic3A7PC9mb250PjxzcGFuIGNsYXNzPSIiPjxmb250 IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0iIj5pZC1FZERTQVNpZ25hdHVyZTwvZm9udD48L3Nw YW4+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxmb250IGZhY2U9IkNvdXJpZXIgTmV3IiBjbGFzcz0i Ij4mbmJzcDsgUEFSQU1TIFRZUEUgTlVMTCBBUkUgYWJzZW50PC9mb250PjwvZGl2Pg0KPGRpdiBj bGFzcz0iIj48Zm9udCBmYWNlPSJDb3VyaWVyIE5ldyIgY2xhc3M9IiI+Jm5ic3A7IFBVQkxJQy1L RVlTIHsgcGstZWRkc2EgfTwvZm9udD48L2Rpdj4NCjxkaXYgY2xhc3M9IiI+PGZvbnQgZmFjZT0i Q291cmllciBOZXciIGNsYXNzPSIiPn08L2ZvbnQ+PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8c3Bh biBjbGFzcz0iIj48YnIgY2xhc3M9IiI+DQpmb3IgdGhlIHNpZ25hdHVyZS4gTm90ZSB0aGF0IFZB TFVFIGFuZCBIQVNIRVMgYXJlIGFic2VudCBoZXJlLiBZb3UgY2FuIGFsc28gcmVtb3ZlIHRoZSZu YnNwO8KrJm5ic3A7UEFSQU1TIFRZUEUgTlVMTCBBUkUgYWJzZW50Jm5ic3A7wrsgaWYgeW91IHdh bnQuPC9zcGFuPjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj48c3BhbiBjbGFzcz0iIj48YnIgY2xhc3M9 IiI+DQo8L3NwYW4+PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxzcGFuIGNsYXNzPSIiPklzbuKAmXQg aXQgZW1iYXJyYXNzaW5nIHRoYXQgdGhlcmXigJlzIGxpdHRsZSByb29tIGZvciBhZ2lsaXR5IGhl cmU/LiBFZDI1NTE5IGNhbiBvbmx5IGJlIHVzZWQgd2l0aCBTSEEtNTEyIChubyBTSEEtMyBvcHRp b24pLCBhbmQgRWQ0NDggb25seSB3aXRoIFNIQUtFMjU2Ljwvc3Bhbj48L2Rpdj4NCjxkaXYgY2xh c3M9IiI+PHNwYW4gY2xhc3M9IiI+PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPGRpdiBj bGFzcz0iIj5Db3JkaWFsZW1lbnQsPGJyIGNsYXNzPSIiPg0KRXJ3YW5uIEFiYWxlYTxiciBjbGFz cz0iIj4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSIgY2xh c3M9IiI+TGUgMjAgbWFycyAyMDE2IMOgIDIwOjQ0LCA8YSBocmVmPSJtYWlsdG86aW50ZXJuZXQt ZHJhZnRzQGlldGYub3JnIiBjbGFzcz0iIj4NCmludGVybmV0LWRyYWZ0c0BpZXRmLm9yZzwvYT4g YSDDqWNyaXQgOjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCkEg TmV3IEludGVybmV0LURyYWZ0IGlzIGF2YWlsYWJsZSBmcm9tIHRoZSBvbi1saW5lIEludGVybmV0 LURyYWZ0cyBkaXJlY3Rvcmllcy48YnIgY2xhc3M9IiI+DQpUaGlzIGRyYWZ0IGlzIGEgd29yayBp dGVtIG9mIHRoZSBDVVJ2ZXMsIERlcHJlY2F0aW5nIGFuZCBhIExpdHRsZSBtb3JlIEVuY3J5cHRp b24gb2YgdGhlIElFVEYuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNw OyAmbmJzcDsgJm5ic3A7VGl0bGUgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyA6 IFVzaW5nIEVkRFNBIHdpdGggRWQyNTUxOS9FZDQ0OCBpbiB0aGUgSW50ZXJuZXQgWC41MDkgUHVi bGljIEtleSBJbmZyYXN0cnVjdHVyZTxiciBjbGFzcz0iIj4NCiZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwO0F1dGhvcnMgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7IDogU2ltb24gSm9zZWZz c29uPGJyIGNsYXNzPSIiPg0KJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJz cDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7Tmlrb3Mg TWF2cm9naWFubm9wb3Vsb3M8YnIgY2xhc3M9IiI+DQo8c3BhbiBjbGFzcz0iQXBwbGUtdGFiLXNw YW4iIHN0eWxlPSJ3aGl0ZS1zcGFjZTpwcmUiPjwvc3Bhbj5GaWxlbmFtZSAmbmJzcDsgJm5ic3A7 ICZuYnNwOyAmbmJzcDs6IGRyYWZ0LWlldGYtY3VyZGxlLXBraXgtZWRkc2EtMDAudHh0PGJyIGNs YXNzPSIiPg0KPHNwYW4gY2xhc3M9IkFwcGxlLXRhYi1zcGFuIiBzdHlsZT0id2hpdGUtc3BhY2U6 cHJlIj48L3NwYW4+UGFnZXMgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7ICZuYnNwOyA6IDEw PGJyIGNsYXNzPSIiPg0KPHNwYW4gY2xhc3M9IkFwcGxlLXRhYi1zcGFuIiBzdHlsZT0id2hpdGUt c3BhY2U6cHJlIj48L3NwYW4+RGF0ZSAmbmJzcDsgJm5ic3A7ICZuYnNwOyAmbmJzcDsgJm5ic3A7 ICZuYnNwOzogMjAxNi0wMy0yMDxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCkFic3RyYWN0 OjxiciBjbGFzcz0iIj4NCiZuYnNwOyBUaGlzIGRvY3VtZW50IHNwZWNpZnkgYWxnb3JpdGhtIGlk ZW50aWZpZXJzIGFuZCBBU04uMSBlbmNvZGluZzxiciBjbGFzcz0iIj4NCiZuYnNwOyBmb3JtYXRz IGZvciBFZERTQSBkaWdpdGFsIHNpZ25hdHVyZXMgYW5kIHN1YmplY3QgcHVibGljIGtleXMgdXNl ZCBpbjxiciBjbGFzcz0iIj4NCiZuYnNwOyB0aGUgSW50ZXJuZXQgWC41MDkgUHVibGljIEtleSBJ bmZyYXN0cnVjdHVyZSAoUEtJWCkgZm9yIENlcnRpZmljYXRlczxiciBjbGFzcz0iIj4NCiZuYnNw OyBhbmQgQ1JMcy4gJm5ic3A7UGFyYW1ldGVycyBmb3IgRWQyNTUxOSwgRWQyNTUxOXBoLCBFZDQ0 OCwgYW5kIEVkNDQ4cGggYXJlPGJyIGNsYXNzPSIiPg0KJm5ic3A7IGRlZmluZWQuPGJyIGNsYXNz PSIiPg0KPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KVGhlIElFVEYgZGF0YXRyYWNrZXIg c3RhdHVzIHBhZ2UgZm9yIHRoaXMgZHJhZnQgaXM6PGJyIGNsYXNzPSIiPg0KPGEgaHJlZj0iaHR0 cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtaWV0Zi1jdXJkbGUtcGtpeC1lZGRz YS8iIGNsYXNzPSIiPmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYt Y3VyZGxlLXBraXgtZWRkc2EvPC9hPjxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NClRoZXJl J3MgYWxzbyBhIGh0bWxpemVkIHZlcnNpb24gYXZhaWxhYmxlIGF0OjxiciBjbGFzcz0iIj4NCmh0 dHBzOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWN1cmRsZS1wa2l4LWVkZHNhLTAw PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KUGxlYXNlIG5vdGUg dGhhdCBpdCBtYXkgdGFrZSBhIGNvdXBsZSBvZiBtaW51dGVzIGZyb20gdGhlIHRpbWUgb2Ygc3Vi bWlzc2lvbjxiciBjbGFzcz0iIj4NCnVudGlsIHRoZSBodG1saXplZCB2ZXJzaW9uIGFuZCBkaWZm IGFyZSBhdmFpbGFibGUgYXQgdG9vbHMuaWV0Zi5vcmcuPGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNz PSIiPg0KSW50ZXJuZXQtRHJhZnRzIGFyZSBhbHNvIGF2YWlsYWJsZSBieSBhbm9ueW1vdXMgRlRQ IGF0OjxiciBjbGFzcz0iIj4NCmZ0cDovL2Z0cC5pZXRmLm9yZy9pbnRlcm5ldC1kcmFmdHMvPGJy IGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX188YnIgY2xhc3M9IiI+DQpDdXJkbGUgbWFpbGluZyBsaXN0PGJyIGNs YXNzPSIiPg0KQ3VyZGxlQGlldGYub3JnPGJyIGNsYXNzPSIiPg0KaHR0cHM6Ly93d3cuaWV0Zi5v cmcvbWFpbG1hbi9saXN0aW5mby9jdXJkbGU8YnIgY2xhc3M9IiI+DQo8YnIgY2xhc3M9IiI+DQo8 L2Jsb2NrcXVvdGU+DQo8YnIgY2xhc3M9IiI+DQo8L3NwYW4+PC9kaXY+DQo8L2JvZHk+DQo8L2h0 bWw+DQo= --_000_01C8B7FCB9A34ABB8BBB0A58E153E717docusigncom_-- From nobody Wed Mar 23 07:18:03 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9CF3712D838; Wed, 23 Mar 2016 07:17:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id izkwf3xquS_c; Wed, 23 Mar 2016 07:17:47 -0700 (PDT) Received: from mail.proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3292012DC42; Wed, 23 Mar 2016 07:03:45 -0700 (PDT) Received: from [10.32.60.84] (50-1-98-216.dsl.dynamic.fusionbroadband.com [50.1.98.216]) (authenticated bits=0) by mail.proper.com (8.15.2/8.14.9) with ESMTPSA id u2NE3hgX069975 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 23 Mar 2016 07:03:44 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) X-Authentication-Warning: mail.proper.com: Host 50-1-98-216.dsl.dynamic.fusionbroadband.com [50.1.98.216] claimed to be [10.32.60.84] From: "Paul Hoffman" To: "curdle@ietf.org" Date: Wed, 23 Mar 2016 07:03:43 -0700 Message-ID: In-Reply-To: <2DD56D786E600F45AC6BDE7DA4E8A8C11221F9F0@eusaamb107.ericsson.se> References: <2DD56D786E600F45AC6BDE7DA4E8A8C11221F9F0@eusaamb107.ericsson.se> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Mailer: MailMate (1.9.4r5234) Archived-At: Cc: "curdle-chairs@ietf.org" Subject: Re: [Curdle] proposed agenda X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Mar 2016 14:17:50 -0000 Greetings. I recognize that we only have an hour, but I would like 5-10 minutes to discuss the question of the level of support and the naming we give to the 448 variants. We started the conversation here on the list, and can continue to do so before the meeting. --Paul Hoffman From nobody Wed Mar 23 10:34:43 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9083012D16C; Wed, 23 Mar 2016 10:34:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.221 X-Spam-Level: X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DNP4cXHYfrjV; Wed, 23 Mar 2016 10:34:41 -0700 (PDT) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D9FA012D0B6; Wed, 23 Mar 2016 10:34:40 -0700 (PDT) X-AuditID: c618062d-f79216d00000767f-88-56f2ce2707ef Received: from EUSAAHC006.ericsson.se (Unknown_Domain [147.117.188.90]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id 2B.41.30335.72EC2F65; Wed, 23 Mar 2016 18:11:04 +0100 (CET) Received: from EUSAAMB107.ericsson.se ([147.117.188.124]) by EUSAAHC006.ericsson.se ([147.117.188.90]) with mapi id 14.03.0248.002; Wed, 23 Mar 2016 13:34:39 -0400 From: Daniel Migault To: Paul Hoffman , "curdle@ietf.org" Thread-Topic: [Curdle] proposed agenda Thread-Index: AdGEPnea/tiiWdW4QnO5+qxWC/kMhAA796CAAAHij7A= Date: Wed, 23 Mar 2016 17:34:38 +0000 Message-ID: <2DD56D786E600F45AC6BDE7DA4E8A8C1122220AB@eusaamb107.ericsson.se> References: <2DD56D786E600F45AC6BDE7DA4E8A8C11221F9F0@eusaamb107.ericsson.se> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.9] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrPLMWRmVeSWpSXmKPExsUyuXRPlK7GuU9hBttes1nM7NnAbLF14Sxm i1vrv7A6MHssWfKTyePz7KvMAUxRXDYpqTmZZalF+nYJXBkbr1cXPGWpmPvuCGsD4zvmLkZO DgkBE4k931+zQthiEhfurWfrYuTiEBI4wihxf8N6ZghnOaPE9I79bCBVbAJGEm2H+tlBbBEB X4nus0+B4hwczAKmEp1dJSBhYQFViTevJrFBlKhJnHn6hRnCtpLo2HAALM4CVPN67jMmEJsX aMzGn3/AbCGBeonJR1pZQGxOARuJIxN3gcUZgY77fmoNmM0sIC5x68l8JoijBSSW7DkP9Yyo xMvH/6CeUZTY1z+dHaJeR2LB7k9sELa2xLKFr5kh9gpKnJz5hGUCo9gsJGNnIWmZhaRlFpKW BYwsqxg5SosLcnLTjQw2MQKj5ZgEm+4OxvvTPQ8xCnAwKvHwFpz7GCbEmlhWXJl7iFGCg1lJ hHfp+U9hQrwpiZVVqUX58UWlOanFhxilOViUxHnXv70cJiSQnliSmp2aWpBaBJNl4uCUamAs kt1hs6/3atX9FR/TGgvcQ06wPn49r5fT+ccRtiesH9cf5jzV8u04t+rpNX0+97+yzTv+bPfE hqv6F7b57C7/Ve9zlO1r5lxr7T3Fj97OiGBjrn1/wb1G29Rx3qqF60P2Or3aWVqdJ7v5pqOn cNXlxdOWRsgdmymdsWhx6MZvOZoFu997GZxgU2Ipzkg01GIuKk4EAMMjNCqSAgAA Archived-At: Cc: "curdle-chairs@ietf.org" Subject: Re: [Curdle] proposed agenda X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Mar 2016 17:34:42 -0000 Hi Paul,=20 You can have 5 minutes, but DNS ops/deployment goes to dnsop. BR,=20 Daniel and Rich -----Original Message----- From: Paul Hoffman [mailto:paul.hoffman@vpnc.org]=20 Sent: Wednesday, March 23, 2016 11:04 AM To: curdle@ietf.org Cc: curdle-chairs@ietf.org Subject: Re: [Curdle] proposed agenda Greetings. I recognize that we only have an hour, but I would like 5-10 min= utes to discuss the question of the level of support and the naming we give= to the 448 variants. We started the conversation here on the list, and can= continue to do so before the meeting. --Paul Hoffman From nobody Wed Mar 23 11:03:33 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F65B12D0FC; Wed, 23 Mar 2016 11:03:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qg6A8wcB2bKO; Wed, 23 Mar 2016 11:03:31 -0700 (PDT) Received: from mail.proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 490E112D0EF; Wed, 23 Mar 2016 11:03:31 -0700 (PDT) Received: from [10.32.60.84] (50-1-98-216.dsl.dynamic.fusionbroadband.com [50.1.98.216]) (authenticated bits=0) by mail.proper.com (8.15.2/8.14.9) with ESMTPSA id u2NI3PVE097012 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 23 Mar 2016 11:03:27 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) X-Authentication-Warning: mail.proper.com: Host 50-1-98-216.dsl.dynamic.fusionbroadband.com [50.1.98.216] claimed to be [10.32.60.84] From: "Paul Hoffman" To: "Daniel Migault" Date: Wed, 23 Mar 2016 11:03:25 -0700 Message-ID: <1DEFB481-1AE8-40A9-BBFF-383300F94346@vpnc.org> In-Reply-To: <2DD56D786E600F45AC6BDE7DA4E8A8C1122220AB@eusaamb107.ericsson.se> References: <2DD56D786E600F45AC6BDE7DA4E8A8C11221F9F0@eusaamb107.ericsson.se> <2DD56D786E600F45AC6BDE7DA4E8A8C1122220AB@eusaamb107.ericsson.se> MIME-Version: 1.0 X-Mailer: MailMate (1.9.4r5234) Archived-At: Cc: "curdle@ietf.org" , "curdle-chairs@ietf.org" Subject: Re: [Curdle] proposed agenda X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Mar 2016 18:03:32 -0000 On 23 Mar 2016, at 10:34, Daniel Migault wrote: > You can have 5 minutes, but DNS ops/deployment goes to dnsop. Thanks, but this goes beyond DNSOP: it includes (at least) PKIX as well. --Paul Hoffman From nobody Wed Mar 23 11:07:14 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9A25212D199; Wed, 23 Mar 2016 11:07:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.711 X-Spam-Level: X-Spam-Status: No, score=-2.711 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 92MahM79Rtst; Wed, 23 Mar 2016 11:07:11 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (prod-mail-xrelay07.akamai.com [23.79.238.175]) by ietfa.amsl.com (Postfix) with ESMTP id F3C9712D11F; Wed, 23 Mar 2016 11:07:10 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id 1660F43342A; Wed, 23 Mar 2016 18:07:10 +0000 (GMT) Received: from prod-mail-relay11.akamai.com (prod-mail-relay11.akamai.com [172.27.118.250]) by prod-mail-xrelay07.akamai.com (Postfix) with ESMTP id 0062343341F; Wed, 23 Mar 2016 18:07:10 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; s=a1; t=1458756430; bh=QFhFAZIPldipt73yGvA5/rffDwIBTZp0p/xHiiAPVsE=; l=125; h=From:To:CC:Date:References:In-Reply-To:From; b=S2rDfySlPf09xDNszlLJYBHuodRZuaz8g5i3Mp4bu63TR+37nOHush5a7XqY94rRt +0U4xdVfkEfXQkHI8gJlcDIK4/9IVWqw3RnWEeZRyrXZrWEHD5gI38CgRqMmS7gif8 PZegje4YhMgcLexpx6DN3rQSWK7mDyP2avcUegao= Received: from email.msg.corp.akamai.com (ecp.msg.corp.akamai.com [172.27.123.33]) by prod-mail-relay11.akamai.com (Postfix) with ESMTP id F18A61FC88; Wed, 23 Mar 2016 18:07:09 +0000 (GMT) Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com (172.27.123.101) by usma1ex-dag1mb4.msg.corp.akamai.com (172.27.123.104) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Wed, 23 Mar 2016 14:07:09 -0400 Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com ([172.27.123.101]) by usma1ex-dag1mb1.msg.corp.akamai.com ([172.27.123.101]) with mapi id 15.00.1130.005; Wed, 23 Mar 2016 14:07:09 -0400 From: "Salz, Rich" To: Paul Hoffman , Daniel Migault Thread-Topic: [Curdle] proposed agenda Thread-Index: AdGEPnea/tiiWdW4QnO5+qxWC/kMhAA796CAAAHij7AABnyGgAAIRLvg Date: Wed, 23 Mar 2016 18:07:08 +0000 Message-ID: <3c219266e80a433aaf413e759e53192c@usma1ex-dag1mb1.msg.corp.akamai.com> References: <2DD56D786E600F45AC6BDE7DA4E8A8C11221F9F0@eusaamb107.ericsson.se> <2DD56D786E600F45AC6BDE7DA4E8A8C1122220AB@eusaamb107.ericsson.se> <1DEFB481-1AE8-40A9-BBFF-383300F94346@vpnc.org> In-Reply-To: <1DEFB481-1AE8-40A9-BBFF-383300F94346@vpnc.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.33.143] Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: "curdle@ietf.org" , "curdle-chairs@ietf.org" Subject: Re: [Curdle] proposed agenda X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Mar 2016 18:07:12 -0000 > Thanks, but this goes beyond DNSOP: it includes (at least) PKIX as well. We only have an hour, we'll have to be quick. From nobody Wed Mar 23 11:29:07 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D491812D64E; Wed, 23 Mar 2016 11:29:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dS4JyO0b6bFK; Wed, 23 Mar 2016 11:29:04 -0700 (PDT) Received: from mail.proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A211C12D52B; Wed, 23 Mar 2016 11:29:04 -0700 (PDT) Received: from [10.32.60.84] (50-1-98-216.dsl.dynamic.fusionbroadband.com [50.1.98.216]) (authenticated bits=0) by mail.proper.com (8.15.2/8.14.9) with ESMTPSA id u2NISvN8000655 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 23 Mar 2016 11:28:58 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) X-Authentication-Warning: mail.proper.com: Host 50-1-98-216.dsl.dynamic.fusionbroadband.com [50.1.98.216] claimed to be [10.32.60.84] From: "Paul Hoffman" To: "Salz, Rich" Date: Wed, 23 Mar 2016 11:28:57 -0700 Message-ID: <9DD0C15A-02C9-48B8-B9DC-74B1B465EFA1@vpnc.org> In-Reply-To: <3c219266e80a433aaf413e759e53192c@usma1ex-dag1mb1.msg.corp.akamai.com> References: <2DD56D786E600F45AC6BDE7DA4E8A8C11221F9F0@eusaamb107.ericsson.se> <2DD56D786E600F45AC6BDE7DA4E8A8C1122220AB@eusaamb107.ericsson.se> <1DEFB481-1AE8-40A9-BBFF-383300F94346@vpnc.org> <3c219266e80a433aaf413e759e53192c@usma1ex-dag1mb1.msg.corp.akamai.com> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Mailer: MailMate (1.9.4r5234) Archived-At: Cc: Daniel Migault , "curdle-chairs@ietf.org" , "curdle@ietf.org" Subject: Re: [Curdle] proposed agenda X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Mar 2016 18:29:06 -0000 On 23 Mar 2016, at 11:07, Salz, Rich wrote: >> Thanks, but this goes beyond DNSOP: it includes (at least) PKIX as >> well. > > We only have an hour, we'll have to be quick. Indeed, and I think the 5 minutes Daniel gave is sufficient to bring up the point. --Paul Hoffman From nobody Sun Mar 27 16:09:19 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F57812D5E3 for ; Sun, 27 Mar 2016 16:09:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6BqscXcNo39g for ; Sun, 27 Mar 2016 16:09:15 -0700 (PDT) Received: from mail.proper.com (Opus1.Proper.COM [207.182.41.91]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EF08212D5E2 for ; Sun, 27 Mar 2016 16:09:14 -0700 (PDT) Received: from [10.32.60.32] (50-1-98-216.dsl.dynamic.fusionbroadband.com [50.1.98.216]) (authenticated bits=0) by mail.proper.com (8.15.2/8.14.9) with ESMTPSA id u2RN9DoS065428 (version=TLSv1 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Sun, 27 Mar 2016 16:09:14 -0700 (MST) (envelope-from paul.hoffman@vpnc.org) X-Authentication-Warning: mail.proper.com: Host 50-1-98-216.dsl.dynamic.fusionbroadband.com [50.1.98.216] claimed to be [10.32.60.32] From: "Paul Hoffman" To: "curdle@ietf.org" Date: Sun, 27 Mar 2016 16:09:13 -0700 Message-ID: <8C4E6296-1209-4F0F-A981-8FC1991CAB24@vpnc.org> MIME-Version: 1.0 Content-Type: text/plain; format=flowed X-Mailer: MailMate (1.9.4r5234) Archived-At: Subject: [Curdle] Comments on draft-ietf-curdle-dnskey-ed25519 and draft-ietf-curdle-dnskey-ed448 X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 27 Mar 2016 23:09:16 -0000 Greetings. This draft is pretty good, but it muddles some of the reasoning for using EdDSA and X25519. Compare this to the two other non-SSH WG drafts, draft-ietf-curdle-pkix-newcurves and draft-ietf-curdle-pkix-eddsa, which don't try to restate the crypto advantages of the curves and signature scheme but rely instead on the already-clear descriptions in the CFRG documents. I propose that draft-ietf-curdle-dnskey-ed25519 and draft-ietf-curdle-dnskey-ed448 would be fine with replacing the paragraphs describing the advantages of the new curves and signatures schemes with a reference to [RFC774] in addition to the existing reference to [I-D.irtf-cfrg-eddsa]. This way, the two sets of WG documents are parallel in their brevity and pointing to the base documents. I also have a preference to roll draft-ietf-curdle-dnskey-ed448 into draft-ietf-curdle-dnskey-ed25519, similar to the way that Simon did for his drafts, but if the WG really wants two separate but highly-redundant documents, that's fine too. --Paul Hoffman From nobody Mon Mar 28 14:01:35 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 509F912D145 for ; Mon, 28 Mar 2016 14:01:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.001 X-Spam-Level: X-Spam-Status: No, score=-0.001 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id E0P03Veq0HZC for ; Mon, 28 Mar 2016 14:01:30 -0700 (PDT) Received: from smtp4.pacifier.net (smtp4.pacifier.net [64.255.237.176]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 89A1A12D0E1 for ; Mon, 28 Mar 2016 14:01:30 -0700 (PDT) Received: from hebrews (static-50-39-87-194.bvtn.or.frontiernet.net [50.39.87.194]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp4.pacifier.net (Postfix) with ESMTPSA id B289338EF9; Mon, 28 Mar 2016 14:01:29 -0700 (PDT) From: "Jim Schaad" To: Date: Mon, 28 Mar 2016 14:01:28 -0700 Message-ID: <029601d18935$00515fe0$00f41fa0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Thread-Index: AdGJMwsylPP7mUd8TyGeiW34yZ+/EA== Content-Language: en-us Archived-At: Cc: curdle@ietf.org Subject: [Curdle] draft-ietf-curdle-pkix-eddsa-00 X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Mar 2016 21:01:33 -0000 I have read through this draft and I have a couple of issues that I would like to raise: 1. Although there is a private key in the examples, there is no private key ASN.1 structure defined in the document. I would prefer to see the re-use of ECPrivateKey from RFC 5915. However, it needs to be redefined as the parameters field would not be correct 2. There is not an ASN.1 module defined for the document. I find this to be useful as it centralized the information I need to feed to a compiler in one location. I would have a preference for using 2008 syntax, but would understand if you kept the current 1988 syntax that the PKIX group strongly preferred. 3. If you are going to include the random art in the examples, then a pointer to what it is should be included as well. This is a new concept to me. 4. I would believe that it would be remiss not to suggest that only the pure versions of EdDSA be used to sign certificates. I would not outlaw the use of the pre-hash versions but a strong recommendation to use the pure versions seems in order. Jim From nobody Mon Mar 28 14:05:21 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2DF2312D0E1 for ; Mon, 28 Mar 2016 14:05:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.406 X-Spam-Level: X-Spam-Status: No, score=0.406 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, LOCALPART_IN_SUBJECT=1.107, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C0Tcs2rL5C0c for ; Mon, 28 Mar 2016 14:05:20 -0700 (PDT) Received: from smtp2.pacifier.net (smtp2.pacifier.net [64.255.237.172]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 12E9D12D145 for ; Mon, 28 Mar 2016 14:05:20 -0700 (PDT) Received: from hebrews (static-50-39-87-194.bvtn.or.frontiernet.net [50.39.87.194]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: jimsch@nwlink.com) by smtp2.pacifier.net (Postfix) with ESMTPSA id 322DC2C9F2; Mon, 28 Mar 2016 14:05:19 -0700 (PDT) From: "Jim Schaad" To: Date: Mon, 28 Mar 2016 14:05:17 -0700 Message-ID: <029701d18935$89182cf0$9b4886d0$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Thread-Index: AdGJNXBkZ8+nSvzYSkCIRCJP2C3A1g== Content-Language: en-us Archived-At: Cc: curdle@ietf.org Subject: [Curdle] draft-ietf-curdle-pkix-newcurves X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Mar 2016 21:05:21 -0000 I am confused on reading this draft. I read the DSA draft first and it had one way of encoding the public keys. This draft appears to have a different way of doing this. What are the authors recommending? Jim