From nobody Sat Apr 2 15:35:18 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 69E8112D599; Sat, 2 Apr 2016 15:35:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 331q4Yylhcxz; Sat, 2 Apr 2016 15:35:15 -0700 (PDT) Received: from usplmg21.ericsson.net (usplmg21.ericsson.net [198.24.6.65]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4092E12D0DE; Sat, 2 Apr 2016 15:35:15 -0700 (PDT) X-AuditID: c6180641-f79fa6d0000057a9-16-570048fd1934 Received: from EUSAAHC001.ericsson.se (Unknown_Domain [147.117.188.75]) by usplmg21.ericsson.net (Symantec Mail Security) with SMTP id F1.2C.22441.DF840075; Sun, 3 Apr 2016 00:34:37 +0200 (CEST) Received: from EUSAAMB107.ericsson.se ([147.117.188.124]) by EUSAAHC001.ericsson.se ([147.117.188.75]) with mapi id 14.03.0248.002; Sat, 2 Apr 2016 18:35:14 -0400 From: Daniel Migault To: Daniel Migault , "curdle@ietf.org" Thread-Topic: proposed agenda Thread-Index: AdGEPnea/tiiWdW4QnO5+qxWC/kMhAI8OpWw Date: Sat, 2 Apr 2016 22:35:13 +0000 Message-ID: <2DD56D786E600F45AC6BDE7DA4E8A8C11223E30E@eusaamb107.ericsson.se> References: <2DD56D786E600F45AC6BDE7DA4E8A8C11221F9F0@eusaamb107.ericsson.se> In-Reply-To: <2DD56D786E600F45AC6BDE7DA4E8A8C11221F9F0@eusaamb107.ericsson.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.11] Content-Type: multipart/related; boundary="_005_2DD56D786E600F45AC6BDE7DA4E8A8C11223E30Eeusaamb107erics_"; type="multipart/alternative" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrEKsWRmVeSWpSXmKPExsUyuXSPt+5fD4Zwg85PWhYzezYwW2xdOIvZ gcljyZKfTAGMUVw2Kak5mWWpRfp2CVwZzdeXsBU83sVc0dGW3cA4aRlzFyMnh4SAicT233MZ IWwxiQv31rN1MXJxCAkcZZTYeKabGcJZxiix6cNeVpAqNgEjibZD/ewgtohAuMSji6eYuhg5 OJgFTCU6u0pAwsICMhJP1qyGKpGVeLB2GQuEbSTxaOl/sDiLgIrE0tk7wY7gFfCV6FjwHewI ISB74eO1YHFOAT+Jjxeng61lBDru+6k1TCA2s4C4xK0n85kgjhaReHjxNBuELSrx8vE/Vghb SeLj7/nsIPczC3QDPXNjDjvEMkGJkzOfsExgFJ2FZNYsZHWzkNRBFOVLNM3ewAZh60gs2P0J ytaWWLbwNTOMfebAYyZMcR2JzZd2Qs1RlGjrnA21bCmjxOWz1+CK+nesZYYpmtL9kB0mvrRt GtAyDrB4150yiF5ghGybt5IFpuZr83U2ZL0LGIVWMXKUFhfk5KYbGW5iBKaWYxJsjjsY9/Z6 HmIU4GBU4uFdoP4/TIg1say4MvcQowpQ66MNqy8wSrHk5eelKonwTnBgCBfiTUmsrEotyo8v Ks1JLT7EKM3BoiTO6x35L0xIID2xJDU7NbUgtQgmy8TBKdXAuP682tmDQZY7bDkurehm3qk+ o6ZHqHFS2JoXu+ScFi2QPitktuCavceTnxnrbr1/uZ953e5N341Y4h9b7dy3YJfUs1+hcbtL 1G5qvPygybZaaf4pu/1RNRKdfGdaFqwR1ud051hXGhiwSryhvGDhzb/HLdZe2vGxb+aClCPl ApeCHmSJ1nDPfqzEUpyRaKjFXFScCAACDyszNQMAAA== Archived-At: Cc: "curdle-chairs@ietf.org" Subject: Re: [Curdle] proposed agenda X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Apr 2016 22:35:18 -0000 --_005_2DD56D786E600F45AC6BDE7DA4E8A8C11223E30Eeusaamb107erics_ Content-Type: multipart/alternative; boundary="_000_2DD56D786E600F45AC6BDE7DA4E8A8C11223E30Eeusaamb107erics_" --_000_2DD56D786E600F45AC6BDE7DA4E8A8C11223E30Eeusaamb107erics_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi all, This is a reminder. Please provide us your presentation by Sunday April 3 5= pm (BA time). If you are not presentation please send us a unicast notifica= tion. BR, Daniel From: Curdle [mailto:curdle-bounces@ietf.org] On Behalf Of Daniel Migault Sent: Tuesday, March 22, 2016 10:29 AM To: curdle@ietf.org Cc: curdle-chairs@ietf.org Subject: [Curdle] proposed agenda Hi, Please find the proposed agenda during the BA session. - Authors please confirm you will be presenting and please provide= your presentation by Sunday April 3. See you in BA! Rich and Daniel 16:20-17:20 - Tuesday Afternoon session II - Buen Ayre B Agenda: - draft-ietf-curdle-dnskey-ed25519-01 / draft-ietf-curdle-dnskey-ed448-0= 0 - draft-ietf-curdle-pkix-eddsa-00 - draft-ietf-curdle-pkix-newcurves-00 - draft-ietf-curdle-rsa-sha2-00 - draft-ietf-curdle-ssh-curves-00 - draft-ietf-curdle-ssh-ext-info-00 - draft-ietf-curdle-ssh-kex-sha2-03 - charter discussion on hosting ssh work: - do we need to re-charter ? - agreement / disagreement on hosting ssh work [Ericsson] DANIEL MIGAULT Researcher Research Ericsson 8500 Boulevard Decarie H4P 2N2 Montreal, Canada Phone +1 514 345 7900 46628 Mobile +1 514 452 2160 daniel.migault@ericsson.com www.ericsson.com [http://www.ericsson.com/current_campaign] Legal entity: Ericsson Canada Inc., registered office in Montreal. This Com= munication is Confidential. We only send and receive email on the basis of = the terms set out at www.ericsson.com/email_disclaimer --_000_2DD56D786E600F45AC6BDE7DA4E8A8C11223E30Eeusaamb107erics_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi all,

 

This is a reminder. Pl= ease provide us your presentation by Sunday April 3 5pm (BA time). If you a= re not presentation please send us a unicast notification.

 

BR, =

Daniel

 

From: Curdle [= mailto:curdle-bounces@ietf.org] On Behalf Of Daniel Migault
Sent: Tuesday, March 22, 2016 10:29 AM
To: curdle@ietf.org
Cc: curdle-chairs@ietf.org
Subject: [Curdle] proposed agenda

 

Hi,

 

Please find the proposed agenda during the BA sessio= n.

-       = ;   Authors please confirm you will be presenting and p= lease provide your presentation by Sunday April 3.

See you in BA!

Rich and Daniel

 

16:20-17:20 - Tuesday Afternoon session II - Buen Ay= re B

Agenda:

   - draft-ietf-curdle-dnskey-ed25519-01 /= draft-ietf-curdle-dnskey-ed448-00 

   - draft-ietf-curdle-pkix-eddsa-00<= o:p>

   - draft-ietf-curdle-pkix-newcurves-00

   - draft-ietf-curdle-rsa-sha2-00  &= nbsp;           &nbs= p;

   - draft-ietf-curdle-ssh-curves-00<= o:p>

   - draft-ietf-curdle-ssh-ext-info-00

   - draft-ietf-curdle-ssh-kex-sha2-03

 

   - charter discussion on hosting ssh wor= k:

       - do we need to= re-charter ?

       - agreement / d= isagreement on hosting ssh work

 

 

 

3D"Ericsson"

DANIEL MIGAULT
Researcher
Research


Ericsson
8500 Boulevard Decarie
H4P 2N2 Montreal, Canada
Phone +1 514 345 7900 46628
Mobile +1 514 452 2160
daniel.migault@ericsson.com<= /a>
www.ericsson.com



3D"=<= /o:p>

 

Legal entity: Ericsson Canad= a Inc., registered office in Montreal. This Communication is Confidential. = We only send and receive email on the basis of the terms set out at www.ericsson.com/email_disclaimer

--_000_2DD56D786E600F45AC6BDE7DA4E8A8C11223E30Eeusaamb107erics_-- --_005_2DD56D786E600F45AC6BDE7DA4E8A8C11223E30Eeusaamb107erics_ Content-Type: image/gif; name="image001.gif" Content-Description: image001.gif Content-Disposition: inline; filename="image001.gif"; size=2367; creation-date="Sat, 02 Apr 2016 22:35:10 GMT"; modification-date="Sat, 02 Apr 2016 22:35:10 GMT" Content-ID: Content-Transfer-Encoding: base64 R0lGODlhRAA8APcAAAIVTgAWUwAWVAQWTwUWUAcXUQkYUgAbUwAbVAoZUwAcVQEdVgMeVwQeWAYf WQAhWQAiWgggWgAjWwAjXAAkXQAlXgEmXwInYAAoYAQnYQApYQAqYQArYgArYwAsZAAuZg0sYA4t YRAtYREuYgQyZAUyZRMvYwczZhQwZAk0ZxYxZQs1aA42ahE3axI4bBQ5bQY9cBU6bgk+cRc7bxg8 cBo9cRo/bRw/bh1Abx5BcB9CcSFDciJEcyNFdCRGdSVHdiZHdylJeStLeyxMfC1NfS5Ofi9Pfy5Q ejBQgC9RezBSfDhQfDFTfTJUfjNUfzRVgDVWgTZXgjdYgzlZhDpahTtbhjxchz1diD5eiT9fikVe hUZfhkFhjEdgh0hhiEljiUtki0xljE1mjU5njk9oj1BpkFFqkVJrklNsk1VulVZvlk9xl1dwl1hx mF1xlFdzlFh0lV9zlll1lmB0l1p2l2F1mGJ2mV56m2V5nF97nGB8nWF9nmJ+n2N/oGSAoWWBomaC o2eDpGyDoG6CpmiEpW2EoW6Fom+Go3aFo3CHpHGIpXKJpnOKp3SMqHWNqXePrHiQrXmRrnqSr3uT sHyUsX6Ws3+XtISYr4easoibs4mctIqdtYueto2guI6huY+iupCjvJKlvZOmvpSnwJmou5WpwZqp vJuqvZyrvp2sv56twJ+uwaCvwqGww6KxxaOyxqS0x6W1yKa2yai4y6m5zKu6zay7zq28z7C8yq69 0bG9y6++0rK+zLO/zbTAzrXBz7bC0LjD0bnE0rrG07vH1bzI1r3J177K2L/L2cDM2sHN28PP3cfP 18TQ3sjQ2MbS4MrS28fT4cvT3MzV3c3W3s7X38/Y4NDZ4dLa4tPb5NTc5dXd5tbe59fg6Nni6trj 69vk7N/k5t3l7uDl6OHm6eLn6uPo6+Tp7OXq7ebs7uft7+nu8Orv8uvw8+zx9O3y9e7z9u/19/D2 +PL3+fP4+/T5/PX6/fb7/vn7+Pz6/vr8+ff9//v9+vn+//z/+/7//CH+EUNyZWF0ZWQgd2l0aCBH SU1QACwAAAAARAA8AAAI/gD/CRxIsKDBgwgN8tOnb1/ChxAjSjR4792vMyAaBLllb6LHjxDtvau2 SMYBCRYsSHAwSx/IlyD5ufMWCkqDBihTppQghB3MnxDhgbPVhsNJnUhTHigHtCnBeuCMKcpRAGfS qxLMOW1qTpmmKQ+OXr16oIu7rS/fPSOlhsQBB2OxPmiAwxg/tB6xtfLTo4HYuDolHOBQZI4xvBPf XYpiNCfgnQ0e5FDDyRniifUuSbD6OKWDAyPAVArW7rJHcSMcAxYcwUkjW99Mf9xnrMDjzQVw8JGF jR5BcrFMKZP90BmBuBEKcCCTSprPgfhs6VFCw8UOQfCIH0SX4wFSwQ2Y/lxqppWgNEdOaHCQwB7l Jd/aCe7D1fhBgheBjJWDL5AdqCo1iMBeUhLIoE58Bd3TjB9VuCELOfEUpEsaNJCgEmAFMIVgQfPA I49LA1mDSA4krNeZBBycs+FD7ISCxAgcdIbUAXRkt2JB9ghjhoUyJuWAEN7cONA+2zByg2o9pkSE J+/849CN6tDhAJKdZcCBDH5UIyRB8exxQJIpgeACGLR0tCVB3nh3ogQeuLBEJuQQdI+ZQvIzjG1x sZeBC0EEMtxA/LCjVyjGPHejNF8SyF4KQLARC53/vIONLGp8UMABB7wxjpDvQCHWSh70EEYnQQ5k Tze9HLLDAZxZMIAi/vPcyE8yRGxw0g1bOIJMQeQIcwkVglEpwQjobIlNJHksQstZA7mDzCdosFDA lBhqeCZB/FBTyh1A3EQlgSykc+1A5LQSyBMctHrbAZLwJ2Q9vjSiRQsOUHuiAwWQ8EexW5pjSRg7 WKDuaic5QckvTW5JDRMj2HuiXzQAYss29Vz7DhYD53nABmawgg2z41rTgIybHZDEJtio8+S4//Aj TKIasyAIM+tUzHJB3IyMFU5j0MKOuzcT9M4aMKv04ybl2HNX0AmZ4wVOErTQxzT5MD3RPWsFI4/V XHft9ddghy322GSX7dEywQijtjDBxDlN2mofwy87vhyjokDY0GLK/iq9lOPQpHsHc6A+zrRSCivI xPqPOr2ggoovB0aaTDDBiPvP29XwM0YOO8hQgwwvrPKPHTjkUEMNQZiRzD/HvOBELf+0s8kUKTwg QQqb/GPKFCVE1kMw9GxSRGNRxKYMG0dKcMMbu2KTBQ41bFIxHTfwYY8QDYiQRRVURGHLP1oc0AIX UWz2xD++DMACK/9cwgEBOdThhxOVYEMvEIoYQscww3DgQBSM4MMdypEOKEwpDnBYyRTQQY0c+GUH 0vhHFQ4ghnoYwQFGqAc60GGOefDDCwcAAzbScYSU/OMXBXCBLKghgwJQIRjskNQ5VpEBC/xBIOpg hycEMAJR/OMe/kzJBAcisAh1nCMRBxCBJrbhgwgIZhL/6IIDyGDBCMhAE5SQhCa48Q8QXoF/MpAA E05YgBe04hVfCkVBlIGSHNhhFaVhBQEyIIRA3EIgX9iABO7mDfaYoRs94MALOHADcnxhihZ0TNRg 5wUHiEAGNLAAEbpBxhekAhQDeEEuCqIPQfglaleYRjrQgKkNvKAN9mCCBFjwJHfAoAFYwEYg8xAF AnwCChGgohGixgc7zAEQ0+jiA1RghBiNQEUoNGMqBAACWRjkHccgxAxs54Z/rMMWcuhdA4YBhZSY yR0ecAAXACmBVFRCAjt4gQR0+YAx3uMeDtkHCKngDVGs5xJk/lRh/xrABkMRxB7heIEDoECQVdCA AKawAwgcsMl/7GIwg+jGDspJjiRIIAPrTKQLAKEHPcBBGF08QBbaUQ8VWAAI+WyFPNxgGydcYhWH +MQ3xtAJW1BCJWrABhlKYYs0cGAAtaBGCSQAg1UYVAIzkAY2JjqKf0ACBBLIZT2w1x4JFIAT/8gC Aaqwjn+kQQIbUEYw1Ce6bogBJ1ZyAB6SwYG2YvQG1ODFANq6gQR8IU6mWE9bh3WKfzijO2osRxFu UsFWcKITiO3EJYLJikasIlbSmMQkhvENRmRCS/+wxzAKcQYy+MEY6thEHMighkyo6BuRaMMY4rAK kHXDEWY4FUMkKPkPc3giEtEQyC4o4YhX3CMgAAA7 --_005_2DD56D786E600F45AC6BDE7DA4E8A8C11223E30Eeusaamb107erics_ Content-Type: image/gif; name="image002.gif" Content-Description: image002.gif Content-Disposition: inline; filename="image002.gif"; size=28241; creation-date="Sat, 02 Apr 2016 22:35:11 GMT"; modification-date="Sat, 02 Apr 2016 22:35:11 GMT" Content-ID: Content-Transfer-Encoding: base64 R0lGODlh9AFQAHAAACH5BAEAAP8ALAAAAAD0AVAAhxkZGRAZGRAQGSEhIRAQEAAQEBkhISkpKTEx MQAAEP//90JCMTo6OqWlpSEpKQgZCDoxKVpaWkpCQntzaykpIUI6KSkxKSkZGSkpMSEQEDo6KXNj WmNaSs7OzoR7e1pKQjpKSnNza0pCSkpSSjpCShlSUmtzhGNCMZyUnL29vULeUntjSkLeGeYQUq0Q UhBaGTFKIZxzWube1u/v71pKUr2cWsWlpaVaUqVSGTExKb2ce0pCITExOq1zGe+l5pSUa60QGeYQ GSkZKc5jUmNrYxAZ7xAZlEIZvUIZY73eWr3eEL0Q3r1jjIyUlN5SGXNKSpQ6nGs6nJQQnGsQnO8Q nO9jWuYxUuZzGa0xUjpCQqWltb0xnAAAAOacpXOUe5zv5pSUhOale5zvraUxGXOc75RrvXOcxWtr vWvOrWvO5r2lEBCMUhCMGXNrEO/eWoyMhGsZCEIZ75Q63kIZlJSlOms63mulOpQQ3pSlEGsQ3mul EJTOa+/eEO8Q3u9jjGvOa8Wl5uYxGXMpWnMZKXMIWubFrWucnDoQEL3ee73eMb0x3r1jrb1z3r1S 3mtjMZzFrUIZMUpaY0IpGaWc5u8xnDpShBDmzhCEzhCEhBDmhBC1zhBSzhC1hJzF3ualUpRr75Tm OmvmOmtr75TmEGvmEO+lEEKMUkKMGToxOmvvrWvv5r2lMRCtUhCtGRDvUhDvGRDOUhDOGRkQCO/e e+9z3pTva+/eMe8x3u9jrWvva+9S3hkhEHNCEJRjjBBShM7vpULmzkKEzkKEhELmhEK1zkJSzkK1 hL0QjBAACDpSpRDm7xCE7xCEpRDmpRC17xBS7xC1pRApvRApY2ucWhAIvRAIY++lMUKtUntCKUKt GRBSpRAQOu/vpULm70KE70KEpULmpUK170JS70K1pb0QrWtajMXm1ubO3ikxQs7v7xkIGUpjEMXF pUJSMQgpEMXO7xAxOikxCBAQAAgpOv/m9wAIGSEpOiEhCAAZGRAAGQAQABkxIRAQIRkZIRAZIQAA AAj/AAkkIFCAoMGCCPMVyKdPIcEEAwY0LDCQokEuBdAR6fRmBD8CBD6CtGjAAAGHCA+qnAjS4EgC JUFWVOmy5kh7CEKCFLmzAL8BLu1FFFhyoMFdIAcgqFBhx5MTQJtWuMHNDbYTjk5oHeKmBg5sO8K4 geQIBwVJkgbs6tdv18e2AzIM6Kd2rloK/VoOjTjAQAahQH+GRCDBpF2+9ijgjICKwFy3OkMa4DvA HsURDcyhyJKFskh+Jj8a4Ad5NMyQbkOXDrnP3kfSr3W+VjvbtVulEnIauE2ZL4ETNShQcHR1KYUV JxAgoBAxNAEEgU2OTg1SAocK+3LgdPTDXIQTH0Y8/4lAvh2YBh4eTSDigU6MFT8cfdgAfofWExxM GDIxoT+HDR9IkBsHDaAgwQcNpPBDAxtwwA4Y53nAYA4HorLUBzsMkINwzBGQwQQ6EFEBB0tNsMAJ YBCB4hsDviGiBExVIJ8EAJ6wwwYRrLDBButxMB8dK6xAhFII5NPSkUgiaRRIoxUkU0sJJGCPfp2k 0MA09iTg1kI7MWmAkzWBOdJHCfDzWUtmvpRkZPjsxI9PLQnlFnUfDfVTbX2JZFJIA6TpmAQROLJA Abt84MgTO9Sgww09rICNJCdggw0ONVSKAy86eHJCP/YwxVw/n/JFV29rDZBWBm7JRcFkEdmTQ5/N Df8gQRYw9TaAcANUEAECBgiVAWiSMflTRLNGYkgHKJhABAO9AlVSSXSNZhiwsP5kWEmgmQmUUnlK 5y1q0jrmKq8/JUbXT8pFhAGuwlWAwwcZVIBKrlrtIEkFkCzHT7T9ZJCuY6NFBNp8qLhawQLQrRAD DBKMMMIKHLTTTgNNNLDHBA38QIQJQNLhIweO8Njfeht40CAHPmZhDwMNiyDBef3FkILJHjzRQAMx QOiBB0od/AEDu1CQQ9AnoJJDDBNkQIEHHJwwQQUfgIGyDR5IsAARUgcowQk8fEADBzoq90HETv/w wdgfBLnCBwvwoBxCZ55J05FLLikQF8Y20UknDRj/Uk5n/OhDwD4lQfbaQm2GBGc+bYoE5kcptdQ4 QW8yjqafck8WrOa1DlDAZHsChWZBnJ9GAAbQKZ02JBVodYgjMeAQQw+S7sDLEJ7MXgMvN3giyW8n pHWBXbsQDytd/fCTAQZpEeAWqLD6hq2sOQwbEQXQVTYAD/OO2lewSL0GOggjEDGBCU14QUQkQpl2 Z2q7hBtT4X1iO510fYILG0ywuc9bDgiwh2FGZQAEfIA5A1iXcECFukOBqnU7+EAFlJODV/0qNZMB YP2+N4CxVcAv9pAAAxDAgBzAIAYRaEf5QOCIJuwhY+eZxs0i8AEibMCGKJvAznA4tgYJKAsIWICA /0RAww2AYWY6/AEYovaGDTTgaTuaAA2gtgMAMucEFCBADBiUgBOYrQIbwIAjUJC2BhAhCzQCQwT6 QQIiiAA8EQDbBhYwAkdEgEcHakcC9CEXAC6FASdAGJLkBhJ8GGlMC0mJk3zCBQIYIh1aMIM5GmAG F5GABELBSZ52IabDtcRJM1GTThxypIIcsie1YlKwRLOnmPBDgNbjE0ycI7D8SScyr8oNU+gFHDf0 YAOOQM4OcNCD2WGDFzXwxFVwUAEMNLMteBGCY+ziPdoETRL92hMBFNOcYfEjXdbrEwUqgJd+VIAH 9kAeX6SDDzPNyVokGIEIQBABio1gAftwlub6Ev8YZwFLWqAxQPKK98+A9k9a/ssWQiuDAA0GrFMS 4MGwhCOEdfUjBjEYTlbyZY8T4AABzNMeP72pnAyYBgEcoAECzMSqfTDgpS9dAR2ywABTVAwFE3gE GDzAjh/8QAdeAMMEAkUylKGsQREQ0KwqICA6AsoEHogBT1HAlA2gAAwbYMcI+rMLjH0APAsYJ6QG gIwn6IADFPiAB1DxgQhgwIhqtUFSFzABA+WDH+gQwQcicVQOIGwHHCCCDX/AA6NQpJHTREB2asKT LrVEIacEySEhl4BIdMIce6tSJ34QiUi0o4QMsAc6XEOTbJXyI4m7a2ReAieftAklBGjTIifzpj3/ 7Q909RNXX1j1ucoI8DTNcR5pPncafpSTAP3gwFOwcYMh1CAGQ4DUDmIQnHgMIXY6mAU2KiAJCtjo AkJQp60WWD9IMEcuoMlAtATal12AEzGT6QdIDRDRbcVFNPvDr3AHwAB0MABrOh2BLdFRP4Wmpn+C oS1BNRfQ05hmftL5J0xuQ4HWBBBWH0DFBPtlDyEwh0Ozo4AQJJgDSOygONChS0O9Gavd8ENXH3CN 5iYzQhgw4LNZcISPvADUBXnAx2AIagq88NkfM2AHI5BAOwSkHAaQIKKzUmoEiIC0CfwARA2whzyc 2IA0Ru0HC/BrDr7auuGtwAYD4ILMpriBi4IB/xUxeMTPJDCBN9CKH/tQHgfiyAFU+JUBDxPsBHiA EZ40ln8F4QlkVvumT8I2cpX9wjsekYJHXCmFI2jHaGEwWk6eJNEOVpzjIOeSRCJpcU4ik2wSmScm 0WmWznJeaEzzHPuGK9QfcYdO5tKhpmDFRiso5iqGoJVj7kISPfBKDJTJD62kJWjFiwhdiseW5DnP MTm4AGRsqTxsBTB+lJnmANBBgoKJmy4hQbBq0mSAl5bPCykwxJdAI1rQ3cadsEFwraxFGun8FqCz FI2D+c0/CmDgVcqRgIVy45iJVtTgCsMmBXZgnwoAhtfryl5cbIkBD9pjmneqDAMsQNMbMyACP/94 BBF+0ASM/YDHJmCHXBEwAiXCFAYIAOJLF8AAIP6QjhyYwA13tqMN/MAGkRhAyTwwAQlcGRJh9lEg T3CBHegABbKQxQ8AJFQh/KAXFViQStU6aP0CCkAHinEEa0iEfQyksYYLWJIU3aVFHtJyBLkrQrhg j3dg1gxEIE8ERhBPEODk4waBjZg+yXhVJ94ncHKJbEltE4HNmn+poU1oRGcSnBggAZorDXGLuxMD SiAw+IiUI5yLgxU8dwdlkdQJXO+JGmAjK62TQKjWwpZ1XjBNuxheRH7PF3TVsviVocA8EBABwLRP WG6BzYHj96bP0twEHBCIg6dnrQNHeE4bRHD/P1pTPek/OFyg6dNtQvIX7RCGMKjAQF/kgjy8nOAG kgAbNr7KvKs05y8GhzC79RP9gAE8kBz2wBsRsQs58FkWgA42lgUw4AVN0EJeEFTToEQRwA4NEAE5 sAMQMkIjUAFZsAAlmHPvJyCosAA0cEc8YjJ9RWc2kDRhZ0QR0DrQcQINcgJkUSCyIAk41RZOg1O7 EAMGYkBMxwMbRxoSQATz0TBzpkKBlWaq5FgCZxIFIVuU4xK2tUh5p30GYSQFgDebNQ2OYArrAwKR QAIqsw8ksC201mjtlG6fFhJGsieHBCZOQkqkxg8OcTiTIUAF0C3FZRqc1yQMxU+8h3nEhRQu/0Ys 0PEaFYANq+AJtYcDOHABV/Fct/cEsjMLNQAp44RFtwIqo2KKphUba/F70cYqQiFu0+MqsiICuyFt r4Fg05dvnNRu5dMAnwcwu1U4AOVPETY9tzFjCCACjsErkoGLATUdChUT2gFAqHB6GgIryMUp/QAc 2HQoikEBkkIuyXMr54QB0kcaqINOvac9K2UANTQCL7UyTUAE09AEKKc+ZuQFGTMC+7ADDxJE8Mgy I9Q2CMMZJihENBQB/XEyOLJnOUBXEwAdTIMKqCA0TfEURkc1r2MDHBAvGLADP4ACL4gwEeABRNAE IqAleKErEfAEC0BDC4BkBzICu2AUn+Ekxf8oGCfhWLKhJpC1k2OSeHeDDoZABOUwDREQCSMAAv6F TiWBSYrzhV3yGY7zSY3WaJaTaAVhWFO5E4YhQBFmWvkzYYKxDwFkDyqTAY4BErp2jscYcuLCA7Rj I9jAATVAOyeGDa+zAlmxbDWgPFtTAbxWTWzRSiaxbYIxKugSicH4ExhAOAMQCYXxSup3hfhVGtBo GgWwMU0gAfwTMHWCb7mIfthCUCGRBZGQBYqhHZ6jW6xUUPp0fNgTiUwBG+pFGWQBFfwgCfZxAmAp Or0HHTDxK3NRa4hxK9xkAC4lMRRgCl6AcjfUBBsQVOsQVF4wAhTQDuzgAUFkNQvAc1bDAwT/SRg8 IAF6NQI8QgQfAyBnIyAVkAMc4AEfgAEwIhwIAAmRogM68AQ/cAMr0AA0QAEV+QEowAGSAAbsMC8c kCIU0DSS8CiAsgAfQBgmyFTtkFQEoA8fARmEohNwMi2RA2pIgSal9iRAWUoEwAXooD6RQAQgkAUg UAKKBUsft2geeqMxUaJAqZUnWndeeUswYRmnB3q39C0sxScBRHMSoGW7YFJ5QRpzGBr7gAHFRSSE 0Q+QwpvLBhb2kgORIhzDFDv3UQGmyE3pFBmq0U5zgl78BB2BeIzao5avxCqmmZmYZ1DPUifSEQEM MIj69JnTBI3UERN5skkrkwUkEAk88CrY/xMRr/IqsIZ5D+VKcfpNGmZt0kYXhjKmzZQBKyo61lJt ltdwvZEYGCAUCDQZI0AeEuAB0zACXjABNRd4XvBj+aSdyyJE9yRCPNdzQVSeJBge82EC7OkjI8AB SbYA57QcbXUCgrkukPIET7AjO7UCKUADhSIJG2ADEiAJW8cBODUBkWAmGTAIOgB2Z8Nz/ZgbQiRC +hB5kWFo0ZejJ3FoW/iFA/GTKtEmiUMm8EAEI1ACAZuk7VM8mhkbNtEkoxSVcGI3CZESCKuZIbQL 9gACDECWt+ROwWIPbvOioQMSJvUaI+oYzpQTBMCxE3Qr76EVrSMpd2kqadFdQtAUyOFdFf8QXnjR J78iXLOmJ5JBG9yUFIBhPaSTobQVGI6xDwM3qNFhP62pHCXhT/r0TwWWmYYxAKAXT4gKsMaFOgfn KqARiZ8pPxGGtJOBASdApea0ACaBKq7XDwvwFBU2JRGwKj+BQIdhGA3nihzCHIBBcwtwoRywDyXZ oj8wAtMwnRMgFO2AAkQQD0F3T+BZkEGkYW1zNjVkAh/QDmczAuHRVAjAAzHSD9P1KOb0H4XBBY4A Bk+AVQ1CAXUlATuAAmsFRikQCUZCsbmSAzTkRwPwnUHEAAtgGaOjTUdimaamfVuZdwshD2KyvDth k2AiJYpKAspxYQlYW5TDoYdUETzhhYz/RzmgxlhzMocF9ZULBhM+cWDCRbFZQAS+0EjulBdz8jmw oRbX2ykgNRcXFQbY8ARZgQ01EAY98ARZNE5CcAE2Kw/eBRXI+aT3VgATdwEEcZijsS8b8qSds049 uROblG4XPK8ANT0BVz9KmKfUxydkyz/58xM1uTGEp4YmEAkGgDqucnC1FECyRFvQ2D/9JCsIEC8f wBareRWkOAAi0KJZsAsTxCHLUUt2y08JlEAGty68Ji8LkAN8OXgnNwGmoJAnuQEUiyAjEA9AlKwU KkKVmxsHEkjrgSHh4TBChDBLYSGs86DJ9gGQ8AQx8AGNcwhnJnQFaoQ5MEYAwlcRQAN1/6I0zURD WcSAJBhEkSyhWWI6OjE5s7YboDQSd1dKRjIQdsMPRhFKCIEM81ABMmoP9pBPfUKVoiSUR3LBl7yT icNacUOHh9lozyIZEWbJ+3OyiRoJJusheSEX6hthBYg6E5RiQMEFJ6ADxOGslIID9gIqznoIIrYD znQizBFeVSoQkuAIGUIAOxB9olMZtqUTgZjO+YZrjiipqHG/AfeMAWOILFWklLp9BsAF/ECBkQAC TNmiPMBNVLwur2gAFsfLa1mat/UTBeBMops85ySYCHAojkBz1gsdyuFM69LRvcEqreLRGMAWEiq6 OcAAwGRHROAFbBcBarQbH7AHH2CWMP9lQEQgQlYDIwhzIFCjLCdwIHOcYW3DFEuxFBUwCCcwBjcw exvwix9xAjawAUbIn1pQASuQIi04ZVlQtAPAVg2SA6ACQKKrHGNNGBMKavgwsl0yLWDIJctrEVzJ yYzVlSMhD/Zwqrqby7txGqi2k6n2yjwqhqLMaNKxvlBqWli4Pv5EJ9SxLYhKW8KVbSCxFs6TOHyx 0cFlJlywAbZ3HysgCetyCANgH8LRXSLmpWRKnHkhHZ7orGpxAoUzGMUHpFF7heq81qihpvcMl65k mt+TUHNSz/f8mT+RAFkwSWjZopFgAvAQiAiHAeuilKCnIR8HUJjJbyl8sq/SM4Rhcfb/4QiOABTu pRwTBN2QMKUGR9CIwSEFWE6YuwFucwIgYChEoEIeMGVNAAJ9EQFegE6Dd9I4twAbAI/deU5noytD BTU4zWTKer3QLQmsYy9okX+eMxqS0LpGJzVgQEbnQQOosAHYhw77AhQY4IRxtBwcQtQUlAMKLiA8 IJSY7BPZMrJc0hBfKDhPoq9yrUjhywWtkj9p/ctVqSaNFq88uYV6GBsCh8uI1if4cNPzIxvrBhME hhp5sU3ho14mkTyhAYChMb9jqJ/7BzbdRX/mhA0UkAEeNhdLwRdNesFtEAPysQNCQ4CDCEvQET50 mH7pbORf4hwS1m8B5332I6gKxW4u/6xuNTkCM9AA/bw+AEvdERFAijECAaSUdaIdAyd3MTFQprVN ZL3Tw7sAkEC6ydFQ5S0JAKRACqTeDPRwbNE0TrcB48QUwYQy+eQFPwADETECa1VhnqtYJFRCQcQY TDVFJzBlEsRk4TnRHF2yJXYvgxAD2BAD1Q0UFKADO+UBjtAAYHACKCCSKUIeb1AJCaBe/dCENFQw oo09FrLROUCfSsUAAYK1jDbZbC0SghNKoKyjBlE3cdNa5YIU8ZM8ItslkzXXi1dIjHWVgL456fZO oJEPBjAPAMNKBOAOSj5jtpUBXACOBKGW36NKs0Z9QNEPXFABXaAwjvIrLL4D4QU1ZP8qYmsxTnJC GiAxiY7CXUKzLQhQKqGzJ1neapBBHT25bpl5vgMXGKlREL8NjVXrGGNoAg3AlE3QBMqCSThBQvmk GOY5DxmAmnli8/GMQaFZmRdspRP0ncOLAFqRQBu9HKhDAZAQ71Wc3h0tYgaXDxRAH1EDBlPEVBIK 3jQkAhOQBb2ikAinHGb5MwDEcwLOAW0sASZwg/KCxeJJ3hsN2mJ1L/fhRSh/KyjzAUpkMxNAICbT AFB1gyigl9DRVgGiHAg0TuS9IVAHKLlRGT/dmo0lPlj4aaTU1pLFJVJ5aInzOAOvUKE2h4yH1tem OF/uJkQRF7IR5Fvy5aUhYSk6tvb/K7Ibqsp8grRC8BVYi/OxEcLs9iuj0UU1AN4V4C+SIs5s0ToS V07rYrD80w9ZsQNN/CsAUQHBAH4DCBIkMMAAAX4MDRhQ6JAhAYcLDTTEyM+ixl0a+XUkcDHkyI8a KZYMWTCkxQEJBhiaYCBSuiYjIoFgkDPLAHsYMPBEYA+ivYL2DCJAutAkwV0XDXTsN3LhAARZGPCo gAqrvYEFMmCogAEpArEIKGA4m5ZCWp8D8lXYsGADmF4RJECSUOFEhQqONkSIMGIgBw8I9iHIwQBp jhERxi5AUCHChwofNkQ6gQpVBQkIOgscK8knAiFrn2yoIEmSkENPJvCg8MNGhEM//7RMcNRgwoYG RGKg+PDhEA7dEiZEooxq7QCwZXOgZTBZwggJA3JkyfKBx0kCuwo0VGogAUWK+QrkIz/evDwC5wmg pzieQAJ+4/mZNJBhF8P9F5nimyhAjCgqgLuG9muPvJM64ok/lDxKaSGpGkqpQIUUkrCkhQBsaIB9 DBJpAIqEwKaGQ/TJ4CnwNmIwpV2iykAHHITYTy+9ToCEoMgo6CeDfno8a5cBOtoFgR0kOQGtDAaA rKABorpQRKFW8i+ii0BKyJ6mCrQoJZKm8ohB8BxSKUQNzeQiEnO8IMAQBRpAZwQiPrDKgp12acso gz6KiCqDeEDAoocu+uhKgsJjCP8BBiBboAIeFuAKA4aoIguxSs9CC4PSfDrLIAk2OIEDMH74YAAJ TljgBKxowCynXewhYoJ9KBir1hwWkODRrCQ4lQMTItALlRPQiaxWsjiVhILMUFnhA0hUrSCDJzzg zLIJfpjgA9uIWKGBDyYAA5UYmDjkg3KIMIEIsEQI6snmBKIAkhw4AOwDCeyVAFcGPkCAnwIpvFIk irgokED4ChxPvgIXJlDBjzL4aKL98BMJPIwKJoBD7gzMuD0KCzCI44tB6tIkiqbMclCGBpzoQZ4A Ju8QXmqgYDx8QDIJP5Oiqm+HBfLpp4K1KMigsgpetEfoJ5/shyohhdSL3wGW5Df/A6M6GlQlEA8K qR+lRmrPAD1b/m6jMyck8j6QOrLYRY0GKICLJhSYgJ8mOvBiBC8m2CEwBqziIQejBDdoT4iGOhRQ pQ56EiKdsWYIK6RQKTYoBDJICKyzhD5WrUwpMCiCGL79i98NTuXhBAnozSunAb41C9DFFKv1XlRE 2EsEFMDgK4tcxyrLJ6Ez/SACrHocgIQPNKNAnQ1WkEAS2SI4AQwP3gBuAyaUfaICDyjb4C9U+O1n 6LXIEmiACiYgAjBHqON1gSwQgGyhf29We7wC0ZNPn/nI2x/G+IGehsjHRfrpB3peFBUJ8Yc8E+uY w8jjLwmShDxKIdnKIlSAij1E/yEFcQqFQvKdDLbtRSLiB892kYEdeIIC+VDblR4HIRFR5El76Qda KJADHj0pXgZZ0gAoIKR95MBIG+AABQhQARHYgwBGSUhBQOifw0kRheFZipCYEjHIOSUlJUGJAb4D RpJArlAJ2MUjzhEJghEhEiRIwQxkkDSdZMEe+/iJh3jiQSfxgwJG0cj8uuSflYSpHxriR9LGwgPF cGUf9xEiUkazFk75RDQ5jMEPULEbCjhCNEiswAI+EIkNSKICNPjACBozK2MtBik54QywTjCBBnhg A8sjS2fIkpawxGsBNKgAUdCDgPFxQATaqYBrPnACFEwAA2CwAWVqOYGYcGEA0v9jwgh2c8sI/GSX QhBeWC5wgQmgwASn24Fe8sUvfuzKif8qVEPco6D//U89DEvQPCX2RB0MQRZe6QeCvCQgeUpQng3k zr8molCM4M9BEhJJ1vgIwAC1jCEOtWANRRTQfGBjB1zAmsXYNlJElg90RBsANk7wox7ypAJLy6NB crCDH6xARBIQwZAooKFDDUohRtHSmVCCpQFR8CEizZkZHSrGjaRkqfzgAjo60AR+6OMiCYBHB2aQ DhMIJif2YIBR/siTwlGpcEIEEQJ4MJWnHKQkbJMhgwRixLFwJQdLCp6lIMGWnwQtkxuYALBQwAF1 IOAEwTksByDBgcBWJgKUqhX/aJACmQr47gQbQMEbOLADtXYGshJABVg+8JNvkcAtK6QAKiLAAXqt lrU5YGYEpGfLN3xgAR4AgxNb8gToTcADu6FMZD4HFh5kQQREIABmDUEEGmBgBzHAFSrmt5l8IeCB UtRfeuqJsQTx7z0KKtgKCTACBVhDHuPEHEZ2obGFnuQ7DWPIv+yXUBEa1aIWKZt6BSYh7lIIPCRk mUaOOrH8pJBoK0sbi3J2JRvyCGIJWQFfDuHHmALqrC5FwAeWZJcL9YiKGGpalZhyuIgmFTwEtpKG IlRGpEpFgyUBWScmwMFJUcQEWohEFkgwv328an5ANYhu++gnsRGEH2ol1Iij/2glDH2kH/bIgRHp GhQoUwotloMyWuTVjw+AwXpgcMQHUsAOCiSTA8EJzg4oQIPricAxUzaWQPhyyrwQhgOc2RUPJDC/ DTCXVwiQFwWe0At5vE0g6xKBCAArAgpg9gOzFQgtOUDk8nEgVtQcXVjCUkl5baAJJkCBF+xBgd/a 5QOO4NVnHCVE7YhHbSLcbnwkImuMnUehCVkSLRtgAy8INEG6CRtFE4ACAL6hAcc+NgqOjVyEUoQI DUAAl7zEjwgQYSGvQna2j50PL2gb2cqG9nFn3ZAIbKCMDCnegNBh7GWrmCHebgAN0LokCbwBiAUh JlVQ0DSkUEAe9tiACeDdgP83+JQfzz72GxiAEZEgPNte+JqAswZXAig7UA9yUMvwYWwGeKkAE1iB PRqAAoknxAsgEIGO3/A2e1i4cCiASEgwtKc3SCAHEOmMARz+hrVGaAACX7hClnS+WBmRK3+UJBhQ IGVaPYkDNrABB3TQix3YoAMpSIENxpx14KBiAGBoQAq0wA4bIHsCSKmAtlMQrhPEqjP2QgAtUxB2 Ipx5ByfAwRMiQAMEDOcJ9jClURAQgXR9gAOwiQEYjGSDCVTLMup6SAbywYFjmwDkpxseBkQjCSOS +tjl+LSIMhwBrXAGMqCVgFg40xmKzFc+5kHP/lZCHtjrM0HjIYIMFLD73Z//gwgYa8DuV+4xCk1A ASZwNu+Vv/sGFOxi/Nj9DFoGORmYAz0G6MDylW+P7Gtf+c9WAAffSl4FrBwjIqp+PjryhhksPwU9 f0jwvd8BDryIAMGX4qx4IoH2U+UnBEAFItgH79s9cwAhHug+3psBNmkZAlQAL1iRJourFOA9J/qv j8CHMTEA41MAA2y9AcgCA9C98iuJAQg+rhA5BTicILsje/AAupmHPbmwNwkyBKABClS+GVg5EYGI 3UuHFLGis5CBObIOrjgKDkwBg8AAfsiBudgABZABE0AHInBAGQCXFyRAaEMA+dO+FJgAzXiCD6CB BOQ9GTgBONABbMAG9kGASn6AA3MyCArgFUubDEDBLQoQlW76ADf7ACeyMH74gEcIFw54HkdwBAyA BNDwieY4AQ/wggiAB3uIBFQYj+BABV26RIEALcqRjCxo/wh7MI/3qLXYowjMIUWKgj2KiIT227cM SIC5mQHk8hcUUIB0UIBooycToJv50EXk+45/ubWImY9afBOHagh86IBzwJ9zMAdCoaCCCcUEwAda 9JdqfEUFQC78KYAGoId06IDWIw8FSIH2oMV0qBt+4IFy9ESKCD6KOKQ1awA5OqT7u0UCMAs9CT4U SB9+oAEOwIB+oMGe+MfvOCSqsMUG4AF+wIcNsEViG4k3uZh8iIRzoJsQug+KAB0DEAFx1MUGeBCc 0SAtUABajIDv2CN7EMcZSAEB44d2VAj88ylKyQFdnICmiQhAQskGgIjXscX3ywd8mICGVAnoO0gw sckOkP8BpDgM//s5YrS3oPmBTPoBcdQGdNDFFFiBbXoCejmBFbCeB1yACRgBrkAKyQm+yAgOSACD 7EuHruzD7EsBD+AFXqABWgSVGOgBR5gAExABCRgcDEAFDqAB0Mqw1PkBDziEFRgsz5AAu8gwExgK BuCNNyi3ZpEER3iCBdCcOUuLZMmBCHCi4qEI26EsxkQFXHEpDhjLHHCPAMoH9pinhXnNhHkP/1GQ GaAHe2APBEHJdAjF4IsEBeiA7GII4zOBAjFOLjiJjJi1iXiT7IsA9boPGeiA+zAAczgHC6qoAAm+ 98II8iI5MlFJWjQABiIA4ySACBBOAsIa4/PIi8C/guj/hxM4AXqMhBShQAnAOq8bAFp8P3vYsOik ijchS7JAIYOgwAnIwCgiAIoUATGCvuYrKgSYgeoEGwRBKwp80BmYgfU6kAUtGeoMTpi7o4Z4g+NL ARk4KhNUAIwIPv8wiofgCuOLiUQSEZ4QEojkCQo0AT+5SN2TgKN6Tmw0GeagTqo4i4EwCuMDAw71 DKWLAahTADPwBWaYm0KIgRgAud3YyjB8QWragMhYFOGqAApcJvAJrOBLAcj4AAXQAsuIAWzAgef5 gTZAIg/oBSIggpTDJc7QM1SggRz4ABQgggwAl7Cwl770SzAwBHs8gTc4Dg8ggufhLEhwhBXYgeaA BPSp/7CDUKUh8Yz5KRYGcKcM4AG7mB//KQB5CEVZSxBRlAeG4S7zOFFiWyEK4QJafAP0oMV80NVj bA+aDNZdZJmMS6iRtAcOtagCQMqBIIBkLBl6ShB+oEUWI4AKRTCUBAOafJJ3U4AKaEkFEAGSuQ98 oEBnpUUECpkCyEmBEMl8CDt5o8IZQIpXmZMsyUnIMtDIEceLvIh+wAcJUIBHwAiInIhBEcmHwJmL ZAgoXIjgg8zlnAhtdNNrfT8U2gWRpEcBo8eH6NjC8amZPD4QIYIsSAieoEEDqABxTIh2YYiN1AKl QFYO9djXwQBzIMLnEAsjosmr1AFbsoFH0AZxNAQdiP8BBSgED/AALY2BFdiA0/iWkSSVxIgMrKCc 4LOXyzKBOzuB7JOuE/UCGvgBL4uBaRjUJoiAcyGCNzAB1MsVzvAM5aA84RhbpMAXXMmCEWiCSpAE FIAJ3XCtJ9iMCpgpbBgtvsiB9BmIPXoKrgirgnjbyMA5uN3DS0SAe6rNVrUP7Uqg75KPhYgjBRGv 86CHBmDH8LtWegUg4xwP4wyvnMk4CRlJAnhBFKAxjaBOQEo/MZogizpdi2oIrXI+WkQHAngTxxmA DkgHAuiHCiUhAFEKKnwDb22a8imI+nwTEthCBVBOD+AAVGg/v8wAwgNXuxoAArUHwRALKDrRSHCb ldH/KjSKUC7JGZhMqomgRaqiNuH8oNaDXQR4E2ZtUfHsgAI4USIAIfzzVomLkgF4QRPIAYMQgRQo STeCSHs40R5NCLu4EqR8mzchgFq1xzOzh3PoAOugFQyAMhekG36gQODQgQbQBl8QThswWuHMpCzV UqeNgQ3wAnHkuyyAW7wtUwVABb/IllAhjPLjASpsABE4vBFAh0XxAHPSU3QhAl0iplzpjBxQzNRo pjLbszH2HRKgnAmwgXKIgAl4g7pLpbDYC8PaLEdpjsIBIycRkggmAF7BirLwDFzpDD2jCH04xfJo mH8JKFYtGA6qT6R0R5DYH5wlRwVQReGciAQQVgII/07k2pgxKVYQFmAETglHfogU+MYLgpsRWs5q lc5pvEXwiKPgTQcnIQB6GEfjhbmVaZvZDdemWRJ+QBXjawKeoEVg0jMKfIOm0VPBGYhX4YE3ERwR 4LtXUQhaRIguqrgW7QgQDpiFMIcZ2KiYy5ns85emoEDTUhmLokl7mBtrWwjy8kjpVZEXhRuXjKK2 MIC5KYygAIF408hnboCOCL7ycSIiGAGCwIcXbViP5Ifsy5bg6AecZY7zoZW4o5t+4AAFmAEbMARt 0AY3KYQfKAR2mIGQzqSlvbwVUMzy2wxcWT3D+gAbUIBvMQFR2spLFEetkIHS7ao4GdQ3+EwOiIQ9 tf8JRdkMzwic3zCAE9ABIhgAzcAK3/EdCYiEvEAXOelLQkSzDRjcyEjEMtshPTmUhGgKi9BeAmAA EeDEl9oFPcMyzK297vouoWuv3qXOBCiAHqEn6vyO7kSP4MNrinBdioiAkfM2C/TQkxjJ+wBgYhMw c7BQAuCBbgM3cHuDf0GQ7jyJ6CXBHjRdAzhLnqBC5ItQlegPAsAciNyF4FsSH6mAHRABW8xAe3gE cdSCkWsCqoq7bioLELEHFGiCCfAC4IbUCRg1/COpkejOhijGpoGkfJQiLwoJ8tICDRLmkIjRMdlG BfDLxvYIWnzQ0tYI+43PndRjHgg+GzABE3Dch8j/wDdpmhfFtzHpzxZVCFB+Zi04Ab4bgNwtnysL CuPTxw3Ivo7GBENQUx3QgULQug4oBEAohA5gh0IAgwnggCdogl2bu7A7tlv6AIi9M8xMpclw08Zc xd3rAAnwAgzgDRKg6r4kPD5mlMiwnl14up2w3NuRABfXsb4UgaE2aBoYAdYJywkg1U1FO0SErSEB Ijse631wI5wDFB4wCkdRlKA4Re76rgJ4laDqDvi4yAJIAA+mJ3lCygKpVoSxh/cb1gmIj/bzvoLz 3QJ4k474juE+CaS8iI0jQOkLkO32FxlqD5VsCCqMCQLYyOkF7W8liDqXIgOhwX4IPpwdQhQ4AQWg /wdRRgccVD7kMIHmMgufY1HvQ4EUlE62SWhKvgiNZkbqHAFarM5BeYqjIgAN7Y/6aACqOhmEwAgK NIp+SAcZIJI4irlgH5JwBQmFfpsQKccUMOgLIYrz1UkW3ZorClchNV17oAxj4wAJaOg5UprRaMom mCV20IYUaAJDsIGp7AAbAAN2GEHt64ANkNR4Xz4UOJX83O9uXwDqUU92sDzqQAFTFknh3FakIAIP CG4JUIxcGQBmmoBdKKeBuIpcMS4QsIlIsIksILxIqJfVGYG7+5AToCu+QAzYaheCiOCfwBopyYKh LgFTUQ6wqCukOA95kI+cJxA/qSD4IoB3sL6NOf+Juw5XAGrTAj7P4xNspccH+vhF6eSOAJ6I7EPg /q7O6fTN+KpGgcmYotcI7xRBpA++DLwPlfwOYm/05oOSATGAN8mADAg+E1ZecQysAplCkbQHCaAB 46OHN0AFroiKlkEK4fQCDwC1N2gCe2NRifBkmDTeCjXh3TMBL1C/K3FupyjAVsdOc2iAEbiID7Ef salQsqLABFj19+wHrZoU8tbmnFEILjhRengEG9g0pLhvj6T2nzCAoFDuFl2Ikcwwfsm+wrB6flAt IfqJCtDV9fHo3bMBD9ABKLSe6JeBBgCDxDNaWwofdlCAJmBMXkGztsu+E6CevFgdanJTwPB4J3L/ iQawRXNc41IL1arAgDzMgLEVms6Yn7/58UgAiEhEyhEhYoJDpAgSRozgIKECAgQVBgyogAoBBQwD TuwYkGNXxYgD+A0wQJEkAxLoSGCwlwMiBgoI7FFEkI9AAQIJCPC8WeCmSZ78dg3lmVNogg4yChg4 SoBfgaQdcKJQIJSqgjcETCiYkJPrhKv8nhIwANUAT7MKGoxFa2/GDAL4lBbtcK4sPwMZxhKw1w8f TwJVh/IlPLhAh6l8H9EbO6OBPZprn44cAJKoAhQjGyjgl4FAvhQKbIyMxAED54sF7HHugCDHZ5JB 55FYG0mCPREjIo3gMYBzWbxo0VY1y2/y2Ehw/xFUJpnXgIFdTeilO5fYul0FHWjSLEnRwFp7CLZm JUAka3R+VXmYBd6UMz/C3vNyTWcOhYcKu8SrZWsAPkUlMfcUgAUokMIJqHzwQQQKzIAAP+bIMEBf EPUjAQ1ejBbDB9oYIloHOtiggAw22ACGAoWwY4MOYegQwwQebLBAVTYwsNAHHHxQwQcTEMFZBAtk 0eMEEUzwRmZPPDHCeATsk0AGNoiWgpG4ISBBFg9RsAEKC0gCRi8y8SBBRFkwkEUkJAgkjAlcokAE gxGMIIGOEpywIwUyVVBBTI6cMAAGklAQQRaykdQddNDhJN4A9lSQEUX2qKTPTT39pE9gRxV2lf9c lRLAWZNjQUUAApnlBB9OZKVDDwJcmYDTBAq8StZwZD1FFFprFcAXAUiiwI8MHeADVbDB3RoYRTt9 2tmteY0V6wQ8KNAEWfwgKUKDbzS6iwzpZNAPARQO0E8/SE5AEoAl8ZOOAnDSsJkCI0ngQQRarEWh SXndWmoDPGQxwEKRRCICArG+MSxRuwzLzwzm9IMAeA0kOgCSHcgWYL4DyKBAAmgBllMBojHHnUn2 nIeCPQxQpIAW/HDGg3PQQgdfXvDhGqllsXrQAQrRDpWDZBIPwNUbJDF34UgymJPWWgbkiMEJVUl8 jjkkUQDRB2RWlUINNhgCxg8dHDhiiStqxyL/Ijp44MEKE+hAhIYpNMHAAgsusIEXHFQwYgUSSLCB j4CLBoYOH/SDigSo1A24BN0iHiSZPEjkARgULGDDBgYggMpFWUiepZoCE4HOjw0QIYIIfiOQ44KS nyARnxU48sEAecYECU1o8WPPPpVBFx9PA8zUDwYaITACOk3hlI9TZHlaFK+A4TRWARLoaitOQO5a 1VU5NdjBeWHlA5atouJD1FPnx3dvYPzkI3YkShlF16bVjiQXqk+ZRRQ+mV1rrD3WgqQRaM4eVZkA hUjSj8+cYwZF4czNLoCAGShAAv2oHWcMIIIJSGAAPNgYAuNDlNq1JDyRMQAPEBIB38xABoQx/44B Tia8AErsdwaQWr5+VxqWmWUk8RkLV9hCkbKYBElvYAiEOjCDAdAlUSNomssUQJQCZJAwZTkJtPoB Bg9ggAhvyIFJ1kKSAbTQHnmZCAIWwBUU9OUDa6kADSASgQ+ILQLmOAc/TrCCrJFpAhtrwgZYNATC 0WM0JFpRa9gRhp79gANEaEITUFCVN/wABRxYHeA4cCd7bcAEfpMAESYwAbiYIAUNWIGcIoCtD9gD A+mQAW4WgjhH/UBbHNBBBIQHkSz5iwRoIsEIIvANdNjDAw1oAG+YBLgRLOgDdUtcBexxgiecICN5 ogC+EiUBHlAgBxTKXUmEIhIUoiN5BthJPv8wxTySGCUw7nQnr3ZFAHuxMSdjqYoWlMWZozgFn7LC VKxMcBTdXeV3eTFQAyJAAQAqoDodSMBYgpWTXaTFnb9bVgG4QERbyeAdKViKqCgaLC04sCS8mwE9 iMDOkYjNC+TqB4DCNa4GuTAjnInEBmZSAd1Q0DcjBJTw1oIABszEAFmYEw8YEDd9DeU86ehLo3RV ErMYQGwTmFiiRCOBoKAFfQSACxG7Y0AFCCQSveOM9VCwK3UdaFeo+k289NVD6LiKC/34QQzAkAIK jGUtXDCAPZCUgkhVgAexSkc+VudGLTRzQRzggIOs87oVMGEXOwCDdaaFig3o4AciYgeJtCP/oh+k iB2V1IEEJsAOUbJDNCY4gQcsCbgI7CACFRDNjCKwgYaMclpESIESPYAlHognC5xpAOIYwIMIMOAE YIiAECYABlQAbJs8+FwWskCC0A0sS6sjgioRsIGE1m0EC9DRghCwAz+RMCMTuZ/wcEOAq6GFVnIV HgJKYEZFpSp4FNVUf0W1K5DJJTAYMAeJ1NqEjS3FKNwT1VOiQsGu4IQrpjwmhk3nrIQ95UAdbCcB PKAAEs3vMRnGsFAUVRV8JJQLz6HKDNKRArHwowkkGqxYiUDBDkygAg2gYAMWOBbgUOSlBLDxYPPB GVZuTgQV4EckSFSZAEW1XwjYBwNowgMQ/2DJHvZ6jGFFM4MPaGRlDWjOuFypgBGMhKpfdSFgE0hV KspqLN8ZgDlmYIhvjCAvDUKwCeAboXNEJ4OkOu6Jj8mPWF24ASm4sASO04EI6M9eLKtAKR1k2wVZ LwWooMGOciQBrpDoUU9YwQ1ukAIU2Pi5MdABrMFgg40poLUNQFGwgtUApaSAHR3ggGhk0AAbsEMG prSBcIGtABEAlx0NoDUKNrCBcryBgo9pwhu0ILYH3YhM+4gBCiIhhB+A4QM8iOY2r8SAlWxXTSQQ QSRQMScuVIAIDIjtCHLATEeg15l65FNGBEUBmoTVOyQYnVmYYsW0+AYoI9nJTvTVk3eOyv+eYuEJ YNyHAnZZLx0oUFZO3oBYiwcmEvSQgT14kgN2jbjlI57xUPoxFnt8YAZvSACFKDMWezUh41VxuctF kBPAHjkdA/hGAndhFvOMONLBGYoIRmwCkJTkgsbVDlfOMSt2NuGpe9nFBSkC3AL42FsRke9TqlIA KqOlAI+JjN8YsA97LEAE/8I0CN+RGeJSQOYDSMcb5pEB6FSGCPR4lXcMEOVAm2R/ouJHqdjoZiJU xwREIEGA7DXYqYZr7NZ6Kj/6ESugtzwCbyH9iN/gdhM04ANrH8AExGaCjTUgjo1NBxhOEAGo0eA0 /RANCjDwAWz8gNhM+IAJZuABHdRARLD/NtHGZE0HGtCa9Ong0o9Rf6AedR1JI57BOxqgI8bZAxUN YPn3G5DuLEREughw7gSEsDrPXclfCMiumkCQpu1+AAz48QAHvMEbRITu0ckenUAFcMAK7AAGSMQ1 YRPwGM0+8AARRAIxtZ2t5ESjpAXhHUU//BfzZEr5uBOByVN/3QTEGcVYMI+n2BM/HQU6OUcCREXG ydRQ2IMEfAAFcIE99BjOuZOyjAVg4EM+4AMR4kMB7Ar1lMRNIINGEQaEoU614AU+pA5gcYdJjdG4 8AS5EMVYZECbhUt3xIcE5FIGbA6EDN2oxMdF2dmVnYkELIBvGFUH2QMPPMV4iAoEEkUG/3AHruQQ 4TnLFdlDotyK48kTWuRDCaSAIdiDCYwAFlIZcywdXviQ/ewKBphFP9BEzIXeD7Eh8OQDDFiQ/piF RJwdDzSTBEACj7AOqMVOA97JE+CADnTAkkjADwxBDYSBZ+kA4SAbDdDBCnCAI0yA6ZxAA1hSMnIA O4ABl/xAA2iB3ozXBOxDGaICXxHANhABCrRNHJFJBSwAA0ACBlRAJHgAEdzfmPwLApDbRjSAB6Dh mGDJ/eEfCYCAu6EDwexAAzSBDiRjOuZAO5pA3fjJBzgCKp1AOcoEJORJSVAUAYwAq6HD7iBK+/SF rVBVUDjHZ8ATCaZKDUZcqvDKLgDYRf+2E6+Uj6JoYDjFR5stnUlABE+kFgdcZH2NBUXxCoRhj1Dk ZGBAh8JVC/rUl3E4CXPcWaPkQN8dAlqAi+44pdVs4QB8QBb0hUSknFDKVVu8GKkk1brNHUVkgT2A RBas3VgeCr7YWYCsFFXlhbg0ikn40NItXLhEhXS8AxHYAwGBxEygZaOoSw8lTD/kS7iIxBBhzAWZ BNhVhtIl0BDFpeZIzpgwSNZ8wJVwgILoSDmyor9tACTcQAfkB6w1H6yBWw0snw5sgCPg1Q80km6t TQrISAqw1gRUErl9QA58QAN4wUWAy+AhABGk1gYUFhpCREQQ5+ZUgJlsBBhMgOiVGxz/0WO3kcD9 +ZK7RYJ2+RIGZMDfvEEkRET/5WXfcMATIOQGlACZlWNMFI/wENcA/IghVAJFNaaAFUAWoIM99RBc YszyNE+BTSHI8IUJ5kQNUg9Z8FM88aT+UIZRDAeuyJRGPAXjFMCAPF2ATuFeTKGGVouoZNPFPaix AJaIxmU/vBe4yId80MQF9QWZ9EOecGJa7IXjWZHu6A5YgqV35MBfDEChnKE9YJNwzNfIZFNegMRw RCIhBgdMQoXJbFA7mIEhmEAWnI94SEQOuGWAKKnvJBCpIIBG6JBb5ssIPYcXNp5J5KGXIsC5ZYlj 7QgC6AgFfMATWCYqJEgFcMQJYAMY/wRL85EmGDABaw7BD2zADuzACrSmJ1Em5ejVBjQB5qDAo9rA D0TAm9rAEySAi3LTjrioRZwbRHyqmsrhNpHJAHAACtBAP+SVZUoOM7EfD4gACOAfCKDD/vlSFsRR DmyAQpDJBlAOEXRTDg7jCZRhDsJiniBABIzOmaAJ8rQlgwZPWypdd1SGCNoKESaogPaXPG0KQVmc gEKYwrRFII6kc9zPmfZduDREDnABAqDAB3CBV13kgyZMUdRXWSghhw3FXJbkveLF09XXnREelYVL 6H0G4XnTFo7JSFhTP+SDF9Jrvgapm0UGznwHP2TEUDFFREyiv5ZnnBWpzOlr7hDcSf8oHWHkRBZU YDqkg2GZARFEB02kEZkg7LRuGGFMYkSUGWU05UlUXcakXA+RRAEATgLsAipABOLkIAfQwOY81gfQ gJLgpkUsgELeSQ10ANcwn6DilQdMQAy82grsww7EQGtuAE7NUQS0wwY8wgRA6tqCwQqwg2y6Kxzc wARIwiFIBAZIAAVAAlHtieQgJ3GSSbptABg8yhZlhGWuziOynz7uH2+wmy9RV3iGY4+8gQd8wBtM AN2NgCPMzjOlF0YUz1BJwA7kwFbZw32Opcz9FBsqaVzqlwGsqE50D1/45KiM4KZID6cU1Dthz3O4 ZUER5gAoDgbswhkerU5EQBMgkAn/TuFcUSKE6STuZmSN9u6C/utLauJiXtDNtERLkolJQIpGjFBB Pd75KGlbEABfBgghmgTQYBmEyFTumMTa/QlYMih05M5r6A/OUI8BHBw/ZIE5eEEMRcJ+XBlNCOTm lBnO3IzRNCDAyeUVOQthKqY9JM9UcdWbkITkXAmdNBNmyukJkOcCSPCffAAqOIINeEINYMMNvAhe 1eYPUM4Cjm0NRwAH6CoHRIAOa5INNMAGpMCgzuYEzKZeMUQK2MANfMuxLkBhIa1FlKOaDhUDEJV4 /UA52sAElCPivAYOUqWZ8MBugACsUmd2+QYHTOqP9kgDTAAHNEGPeIDwfMAG6M2C//Sekz0KNlUE 0LZDzOZOHw7A3EFPmTaKe2bpRwpFSoIYEVYLgA0UrVxov9pT7zSeuSYKyt4xBQye8CwU7AkxMtTO Vfxhs4RTs7DvsBBUUxCUTurOg17v+o5R45HLAIDhXjTKjwoZ3aVcxQYIVPqrZYCiVsJQxepQdxAV d3jyuDgld1yyX/InUYjHJZuECJBAVIAXqTTFDHWHTLxGFvQxlaGoRzCHOP8hYdBr4v3lUGww+zYB cwzu0+qwZZ7ABsShM+UA1PQdnURALt7A1/LCCsQA4MSABxj0CdjDegFOaDLIHW9AnNjxD7DDBvxA Cqyx6fjfBNhABMRADTwNBbzOKf8ebXIe7bmdogQQFQ1gwBO4a3URbtzpJRHc51FVwgiQgASoRET0 KjbGaSUZiQk4whGJEgg7AtPasQ6LwEVEBKmECxgywJnSxNp5U4o9R8mgAwKgAzAn0LYKKPpMbzs9 r7c2KE9SIgEMJid6x2GOBA9GwEHsBcMSgGFlLhfA3gK4mHA4HiCCGPAAmBDSa4ju5KZ4lcWOhC23 WVIOUQK/JZUJWq2kM2THspK+LyZbBiHG1wLMxEj8qDhTREuYRO/8ZVviwxWbUXcsgD10DENc9vri F0V0k5pGE5Vl4nBQiIuy5+teUVpCh4x+ByAWohheCQijF9Ts8KlhoyRU0wD0Htv/rAA2rAAOfK2c StsGrMA9U8AOSNsHtMPONMECBBMPfwARULes9R8KRIANWBIYrDcHbIR0ddC5xXcUp5F8XzFRkckC ZK41CkkcZoGQgAADoEJBjEB2MYQvMde9TQBGUAAHgMEbfAC9dBKEz/FMnMAJpM5jbUBBRAB1RQAJ /JVe7MJRlkyGOt5QAhYPlIBWj8sQ/e70lmS26uSGjuD0HEtZuAQ2xdm0XtS89NhTWESePMwcEQAX COcCpAXnjQQ6t+TTpdgUCiFYKwpkPwVU7I5YElE4JeVM5HhZSA4zs3iR9SRTffVwQCFgG4BM7Gyi XBDEiEfK5EDvgOFEgAu44Ez9/97K2mHJPFAdSaCDPgAnfrYZrswcOuzDBXVT30yid6T1FcWEkBHF RORD0IJEXiQmUiZe4x1K6TKIjpzABLyWdefpEMSAPUubJk3TCli3An5ACUtboTrCEEzDBwTTAsSe uwbTDreJM5kqN0YbF6O3jNzaHdtxuRVvFMc3fvNAZhMV3ZSuTPhNlhA44Y5ArGIIvHnOtZfhG+Tl 1UiXtE2A5upWkUzACABOFtypQlTAa366ZfpfyjEF/SalK7tZD9khCVTCVnvVx1QUWLcT72pKAQwl X3uMXF9EZajosTaK93QthbypDpILBmAjT+hWqN840L6kkr8kWTc5+1rR+hqLx//b+ABk2Qk5Rw6p ae/M3L9gqXeE3SyXOV4Mesw7i9VoBBHwAFNkDEl409wtAEX4xl8WWQ/l71b2xX0ClUdkQR8eT2QQ xULJFVq8Nrl8M6nuzmuLi3igq3PowxN4wgAwhcXmUF5Q7DxsL+HBLJs+Vu8ZAoQ3QQWMQbHFwA5H wAkkNzY4wt0/AQfsQNacQDvswD4Q30zHYQ/fTQo8wqzjDZyoIuaq1nizw3jbAITbQHAyyHMNgBxm /v1FRGbjtxyG4/2JY3/PCbU/ROmjAwOYAHaOCXC+gULlACrkFQdEuBeMgAeUuyf5iEJkmd+gAgeI 0gQ0avCjgPrxxS0DDAL0A7z/p0eQ8k4WVEIJUFkXZqioKI+YF1j08GTuZiWVW2VHyoRJKEgFfKDw DbkGQTSFlCNV0xzrRNNM8HmWG4o7bwr0QNi8b+tNTlG4ZME+hAtAMDAwwAABggXt5RjQjwACHgb4 DZBIkJ+BfgsR2CNAgN8uiLsqEhgosmPFkvsQYKBAIZIXBP0iEhxgMOFEewMQDIhYUOcugxh0itxo j4FGezclRpAwgMG8DCAHhoRIMuLFfhcqIKig0yYFiQgoMOzJb+OGGhc4DsjQk2CGgSgH7Lo50ABd gvYkfOCw4QSPEym0SBrToUOhJxw4VMBw4sQHbB8+OKpAgcOJnBRWrBixAAGCfwkeIDOY0KHBBhQT IEf4sHkBkQYRPDT4EPvDDzAfTktQDSbCgAo8OGftmwXBAgYLUC3gISHLAgkSnI+QMGLE6iwSRIAY kSUCkRE8GHhBIaKzo9MbJnB4EwH9CA+qvUQYMYDoceccPHj4jAJFJNO8B8CHrF1yKIisAwviaSB7 0In/RISJYmLIoI0K2OhACskioEIC8NlIQw4t5KjCCFIgqwC5PMRrJgMQ0IKdD756bpcUPjNHAoP8 4q8fDCp4boEc7MmJq7pEkqmuqA6yECQC0ikADBRK4kgojpYEySctiGDyoXwMYCALuuqKKMiZcLJH QYlgemMhGXBCIEGOICKSq5JCkogClTDIIYEReqtLpxSI+GoAE3qTS0gEqpopBRnMkYEIiDwwRwEF ZmhiH4W4QGA+g94kayo5uZqpHwo6k2ggOzHIiaOICLhoJi4qqGCjU6Eyib6MJorKzCPl2mAvSWjo 4A1JbpChg3NQOKEyxgZhrALITsBggR0Q2IGBE374/6CzBcAAY7MIfvCAA3ZS8ODZ1JyDrLZkG2gC WzBQ+QE9MF6SAAwiKOAhqywYYCC55BCAbjnooGOgugWqi8CeEUQggWHpeGA4AjAmCFgCDu71gIgN QAMjEvUk2FipAfjtdzpUJNjgDQ/AaKLdDYhAQWFVYRKqpARNOrUEdLKYSKIMPSyIygyJrpCfAvIB seig+ZnAnKSllHIA7AxIQITTLtIqp6YnaOCcAgbYIAIKGmiAgqyy8ionMHc68si2d8KQAAUIKHtD kQq40NO8IZJhAnsU2DWLLNDZJ6YFVQ1So4OQnECGiAK/K8Q4deKJ1QSB8g0DSYA6HKIB/L6Jh31k yP9NorwMsMctnRQwYYIJ0BkABQVQIMCe2YnohwsTOqgozJxx/shzgkYF6nP6BlCJn35AWl2rsJKO M9GBPKIJ+SNN5eemhvbioJcOJsgHB2MnKISdJ3bABpsdnP3gBAlOWOCEfSjYYYcNekZgNjB6/OAN eQnVgBctYAObEZtzQjYCL0zgBA2YACpssAEJrGwDFehHBe5FAZQVpzmo+MBzArYA5zSHYFmozgeU spoRkEAC2hFBFmI2ARIELFzowdgGOOY/ItDgPQrbByqIwwALGCwCe+nFG1DwhiaAoQFE6I08gDKh ysGJJApKHQbQUQL6UGAXzAMb0URkIqGFyEMbSQD/aXjgobxpyAQyIMAIkmisRzUAHejoADs8sEB7 fGBRKXiOFmAmgwbMIAULSEDZFIMC8s2lLghYVAcYwI/TpOAcRHiDOTqwtQY0qgEbUQA+UNBJAxXg DR2QQRM2wrvSaegcXgBcRmyASROIoEgGkEADZAAodLxukx14SOVSMAMUDEABoxHWTFRZO5FAZAKl 7N1oSgcUDOBSkANxpCBlYAIEgAA36ehACryAy2PSh5kyuImYZjCBLNjDhKHsRyQM0YQVeYpIdSqJ qT63vFH5bCJhIUAGqjIqCpxgK1LiiUHuaRK5IM93SEEeBnzFgUdEwJE2YBk2VlEDXqhPfe+rQPz0 /3KCAbDPERKowD4W4IE3fCAHuglXd4hA0AakYAP7SJkHUqAtETwLh7LhAAqmAwZlOXArJ6BYDvRX HIKJkGDPgc51GPAc6lAnAvKRznWyMAGZIYA7+vEAet7w042Z4AMTEBmLwFMcdjIAAexpZstmg4Im NCFQXuEHWYIiPL0uaADoIEHsBuAVMu0jAzbziaek1CENkaVDHbrlDBowgpBsZDQFmIACGmCCYBag A00wwDvOwUQtnOAdKdBsJrN5WRngVAYIsEEDpjkDE7yhmDsZwDdNQC4DMMoEg+zABlJQIlxOwASV mhs/GlC7DF3WBF6ghwk2oIA3tLEBBcjmKxuQDv/TzCB1X7KHsXobuEGeJh0puMhAgulZBaRDqwog gQmkS4R0dNJTDSjmAhXQhDekAwWuZa8XhMmPXGq2mCOIRAQaQI8UIHhSHZjBGy6yjwFkd1Ip0N8M smgCIsxjJh/QgitnhVCSQIUkRcKrQXpiFX4u5KCBTclkfgYSmHRxSG9C3kHEZM2q0oADPIjAOcK6 ghus4AQ46MEN1Ce/HsHvA9TaxUdR0RkE2CYrCOCYWV93QAzSFAw0+gFNLTblsvJvA/SaAP+eBBQM egCpznGOvyRwHIru44NxHoHBpqobFDJscG94www9c54bTuAHGBOXuGCHEraytT5s1Z8JXOdnLyD/ Ua4msMdkrIJQkNzsc3U5yqdXYg+QTGRJM/GQifT2IQIkrQAFSAAKzEFfNrqxuBVKAN08kI43IMC9 r+XjIziAOmENMgdgo4drGjCAGXzAHv1oQgrmwg/SRIAHiOrAMPmhAES1cReEumsKOqmAApSNTilQ pgkkkIImVCgLChCwNhXAA0Vm6Ub7MJMEZiAXA5gbBR2AyAbOcaoMtBEiCvjA0bKpbgNk4QP0sBkK SmQPc9+k4RiYAEUxAO4RcFckss1CJKZBBBnQawYekIECbJCCrdAn5VMjTRtFwIOYlQ0FI2jAjeBU EYKQGLGVY5zOf6YTV/ksQhSQhNFXMs9R6xyh/ytCylHAZEsRcMBBIihlJBDAmBj0ABsxiMFjHMEY +MUPEkiNH3Emwx6tcUBe7EGiBD94AnIF1wZPCOu5Dr6BH+QgPxQIl2cmUGZUkCo/WVkqwZi9kX2w VToIk6puqPNCjE2A8Z95AxE+M3nTsD3wRFC0o3MQgQUEKQsRIwrMJtCEJL4BDEo0QWApgFADbJrE wpMIXL6yan6WUWhAM9ph83Y3IizKBKceDT5GcyB339oQKeiACMpGASLMYL0eAN3KZJCAzsjgDa8l 5qQm9Tg/iXy9asqmQRQwEKfxYwMOphSU6JbcvIEkmxuyLvgnlYVstptFHaBUA6rCAJyGB2aibP+S yyOcZujWj5juahcc5eTwD7HKZiCyKbCICQF4hx7eb/2CRAZcQjfkCwWIQAFy4C8UoHdQQSJuojPa aALSIQtIQJJmyhwwQAQSwHeKRCduxqASyi14gnFkwlWiKFGSZyXCQip2wndGwpYkwNMW4CCmRgLs gQi+oRwaoANIgAfCoAZWYAiGYOtuAAcqI1YIajGyLs6kTDFQ4Tes7AdoAIXAwAYi4FlCJrgeQd0W gANUh4EWQFt6JIPkBQPkxTPyA0Zy4O8CJoSmYx/KiB8cTzra4QNIiM+6hgjQgQHi6uJ+wPJ+KvDe oMw8IFWqjK3ojAiy4IeIwx5QAvOayQQ84Af/3iD1iEB1cKwjPsUWfQd5Lk0lDMIjpigkomRJwuhu Ugm8xGjW8qGNpMTd6gYFzqG6ZuoETOAEaMC+ECCbNiAdJAIZ0gHZsi0jbMlNZEKybsndzGEC6iL9 DMAEzqEf5ouWJlDcyoYAQIKz3oAjJIB33iBv7OFvzpHX+EECMqIJFIAIlqS4fAfcJnBQZGDo2ugm 6IYhOoB3vGAAeIAfRiBMQKkBYEJY7iQCFIACIGs+yiYSZqBMZMtkIqB0LmsWL4sedsEiDaCTMIAH LglwFMZAiOAcNGT2KkcJDWSZ8ComgA5J1EKf0ORO4oIIheAiukiKikTE8KJn5sIhFoJPBiAS/0xA C8zhEdDBHmqAMIYAB27gyFZgWRqjR8jQMoLDIWKlM15nNT6gzDigpRjA67oMfJ5FdU7gftxnK/Tn BFCABoyKBjBINcJl8CigmbblOjaFjAZAOiRzOqaDrX5AZiogCzhGBCfAC3DjdcDA0DiGBi4zyvhF yoKECB7kKBiAADEA81zndfSDCEwgEigCTKgIIqKEnJqMAhKgIWbCJ+iRIYDGRMrIQiqkQxogEigk aprGHBLAafIBJOjGAMhvI2YK36AkujDAb+CrdnDpkBrAHr6JOEjDSIRpAIiAHgRsAjhMHZ1mbrLk Ow3A3ZLLABSrCWSAPMwhidLBMJ0vAa4rcP+cryFmIBL6gSEMID0vKwvIbQAchygdhz7cTSeyCQzO QQTwAZeGxm5kJx04ABW+idcigB+cqwFyQJAQYHY8wEtMSJCm4RzMgWNmoAN+ICyusQEQYPpMIAOy 6wPqggEIo+lwcdQIosQMJCbXptMYxyIWIixWQhLYIqCE4Cixp9MKIKkywt7u4jnMigi8QAuMpQm0 sgZ0wAZ+4AbCcFkcATIk4AkgwX0QAEiqzPB4ZAJWoEdG4HVi5VkmoAZ+ABK+ChUi4ATqxys44AMY IAdUoh9Qw38w4APgBWNQQaueEDPoRX+yYBd+ryT0YQAgozqYYwT0p/U6Y08bwDMvrxApCAX/MCY0 DZNleIBUHC0jKoAIcgIliOImLGkCyoFQMqM7SMAiam8H48RP6CMhGEA1TK1V4mIjaA/VpORu7ipq pCRDlLGN+KFD6IYfEoCQCoAHyoYHJoD6iokAsinXTs4csqRs9igFKowEyIkfpo9SJmAX3mECWAeZ eHJ2FCCXSiT+OmlVQKnCEODVGmwDvsv6FGAA9sH/MIt5MiQSTm4GvGAmAZAAHnIiEID6LnDVzlGS wi8S4oQAQgkp7EsBUuBBCPJfg2sdT87BvIDxylELPABiTcsGdABRRODk6CHZJAIF6KFRVLZElzAk 9okuPAUYT0UmdsV2ViQDElQIkg4sgI55/yQ2KiiHLPowSChqoTQCASJhrCLB+c7AEL7p67ABB2IA BzbgCd62MQgz7uqUR1QCLMoqMUQPh2IlUuXlA15rCDYAFS5CpOJiF/ZBMUgFAd4oFPHDyjzAylAD DGhAIoiANxBljVLtRBJGhBigzLQpYCoxjyLg8ppJPT4RBXwFhfRFq6SwyjpjIOZwIIAEV2jTiSLg Y4LNQXwuIpjWZowkEn7gYnahsGJCLaYCjJozsS6EjDqCQvKhQowm1fAqjdQOSAvAAJyiM/LhQDoi e7UDrxxKa7U3V5o0TMSWcYkkSAxgjZh3IyiCB0RgBHBVB4OiWoPifglCCDJkjI4XIvImxv+IUzeD YpmaViWSBwOGsgGdNCMSQsqmoztSb6bYwQbwtBBwwC0ExNGQYheIS33poh/cIgfz9032KlcionPE gh/cQqCMEK8StAEjYtR8wpYiACVEz2dkF4ewjgi+yQtwKgWe4AliIFg54Ak8wFnexzL2gUfu5E6U hQfKyjLmUC/OBgHYDodWIAZSgB0qQBYkAQH24QJich+kNCVy4E7AIgYmYDE3IAdeJwdw6OJWAma4 4NSWZCjveC5Fr2tGAKkktQnEilU3RpBZz6xoQDUkgAfk+A2esDMUwkz6IQKyICKABEgyYE+9Qzoi w0XHwiOYDnjowi/UQkFxYiJGeEqE8Wj/QkR5o+SuwAiMhKcn2UoEPqCLMucmgkQokhcdngMhVFAm +CnqhJkg0vdEEmKXSwxogiQnPoBQFCIuLOdnDMRURMIeFCpnagmgZuKVJRYKpeeUERiBDaIf7CIm Fq8zBqZfYMoLXIYwdEBcquAKJEESsAEBHO0nI2TpIGKfZDh1gnIqgs5PgATFjlVqqZZqcyAH0gJ+ zZkr+gEfQHUE7GEBRuZp7SECzEoCKMAE+q0DbIBiImAFnmAFVtdXNkB+FgAS9OWJEWANlUVcOGAC YkVbICFaFINj9OwHdGAFJOEQYsUrYvKJ7WElwAIDdkFTUooDFpMI4BhXP2MO9SYon3dv/3pFpTiD gJooLkXQA5qABmIRdNODAyLAllUDAXbBA8ZjAICE6H7ZTuxt4byjhbKgL4uiZ0yCl0ti1LAHLD4E J7zCrk6NjDakWgP6WlX5QKzklXdBQKaVH3ICLG5CsHZZeBpbUyQAbMb3Li5iV4bETG4ML4oaAxqC AGclKC+NTyhAPi4gjWOSVwoiWuvpsIo1Z+iExETYdy5HKJCHUX8GoQCKcjhWILkKqix6rFgv5QqB ZTzBCarAE06AKH5wKRdir0VYIuAXr+hjVg6kiSlCIpDaSIK7I0ZFSvtBEhYHUZYOJPTBxxgZhTJC CjlCcgcXQnWACIjAA4YgPzDPpHP3Df8JCixwYjIiVV04gAaIQC82QBKWo0+1AqI24AOe4ATyoR9u YAfgYAwEPCbTGE+eWCV6ZJI/oAJAIwpJXC/AwB7umKobW7GrVUMWADVECD1yaIEkdWNkRqVeh8c+ RpEZAD/0AgUOLphNhTmCeXvaSgT6xQKU7CjiAiaOdCzCJHMG3CvwJCdqeEp6ErELghgRK9UCmnpL zEM4ep+SmWQ0Qpv5QeY+gIRB21RUbC74SdQymnHx4gMwwGgSxCHKqmJ+5AK4qJi9l7uj8p+pSGIn RGhERSSWJEx081S8YnsCqnixu2m7JM7qI4hGAGbyGwVsgDC0oAOcwA0q0JjPyStGeCH/hgTFftLT Zi8mMocfgIQoK6cupDZBd+ToXjgr6Gkj8oI4UIgC9kE1fP11Lm4AfuARKNMGpmsDmGADarOImG05 AisHFGMuEyMr5lLBB+AEBi/AFSPwMsAesOHC8+EEvm4HJGKoVyJVOCd5cAJGnrRiysoRPSAvdk1K 6jEobUYoCYALFiAGElxsdmEDmkAC9GM2xiq/i4isEaOq8vA0NILEI4DVrTlgHGq7FwYEoiohdqDK sLlWZPsrFvc56rSwlOQYU/5DvpweFat9qVpE8MZAkrRaEyIrysS7SaaboaJCHAZRboycTIWaD+LN zykROaMzqAQiOmOCEhyyhQSf8qqK/6giTFY5QYLblB89t21M0ZFCVaRiQhhCee4iI6IKBrjKS7wW pn7gCo0lBWygC0CUCxauZ/gJGJtHt004x1InmOeUTI5Ha91iLUal7D6c1wcgb1aDKOTDADAAMW4C NiYgXYDrt6TjqzidUCKBBnoBG9CBCEhgoRV3LjFACKwsUX3FN9YQEn6DR76qfUmbWM5mA8KC0rcC A/AETy5oKYr6ifeCMjYAVN9Axfs91agkaro8B7onUT93AvYB8xB+Yx6oqsj6PXhMpT7gUnYBP97D ek6FRUQt6A3izqSsWhZajC9ixBrwdL7SMA1AXypAIZBzSojmsAabsTZtVVo5e4vfoP8AgoABAgUG ZuHAz0QFCggQMBwwIMsAgQT6EeBnwB6CiQMyQuxoz4CBjyM/2vuIQKOEChhFTCRgUsSbCBsN5Pg4 gB/GiwIL8uS3C6YBjDsHDh2YcwAFe0GRCgQKFeK+pCN38st5MQMBChhEDkBwc589CQjENtzHYIQE DiZMpDiXztyMGeka0IjA4ypEjBD75dyFUeRQwICNQjyJkoJRvh0b5xxpIEM/ChQG9KuAgSEDmBtG jN0gwV4FIh80bvAwgayBDx4adBCxmgiHDyaIEBGxIUYMHiBcinaIod8HIhIifPiwoYLoExgqIMD8 YQKCC9goXDWQT1KFDBB3DfiAYUD/5vFKUW20xzU8BfMbiCDgEIEAl6H88BHmR3HoRaM8CSTIsUKA K3CwwAcbbbABB+4h8MFdEWwwAQccgIHCBFydACFxP8SnV0kwQQTZXrswwENDGDTnXENEYbXXAESM wBAFfvFwwgDIFEBAjvgNlGN/OeKI3088GVDAjhThZyRUF+2Cj5EFIIBKFhGceN5hG+kE00keeXVY iwMgJpJfIaa0S0Yw8RDBPv10hdEIE3jwQQQLDLDPVJblh+SSGAEG1X37HbmLRR8RRdifQNljEZ/5 XdTRUwRw96VjKn25DyoiZMGABCMQMUETHaQzlwzpdOBBaAzkJMtVH1bUTwZ5HgUV/1KICYQBYnwN BWJSjVrGTwaU+UUBJGAhEAFxEURgjz3tEIGKPQtAuMECIEA0wggN6LALKkRssAIRx5JARC8xoPKV PTnkkB5mAzw7W3IYMIfBc5B8N8ETJyDDy7w5oSsjBbswuNF4XH1FFkSUkZdBnJJMQAQXCbwE2JBA 5shjnlfht8sHHAgowQIrkdbcBwHCt0EEHqDQhAQTTMDPDmAYyMAO7X2oK07XiXRdDg2lVIEk9jDA lKo5ZJEFAvxQsAECJ0LEwwK74KhfjhHjo2PEAxUZFJIRH/mTfRb7hKR++CFQADobfEkZYl8Z4N1J OX7JqGOROjZPrgTYw4Nieg0gQf/f4W3k0BtNNHTsQns9tdh9gPlEH+J/+nUxP/30Y7VOi+k5UJKD 4cdiBuElpTYCEsRLggQkSoAKW4a8oYUWKcjQARhE5CDWvwjMp2thhemXeeZCZQ5RTY8J5lVVA2Tg nWWTDaAzSwhk6u25EXBA1nBxMiARAu0xwMEPpCHoLREMMJACGBToTEEFC423/nE0cICZcyiCxcEE PBwyBjYf+nrTIZSlvxGuDIx5BQtPPxBVmXgFZwMfSMCQghQ2rPjuVRQZQAIyNjJHzIYGSkNFD1bg iB0sYHoTQNkHKiAB2fRjAe0AGmeIEDfLlCQwGOmHSGCyM6UtYAcMIAEPBlCA4iD/QARiuYpDKPMl BEjiLzqaWJCcyLWIWYww7phik4TEH6AUIAEGyEITNoBDnByGKUfZhUYEUjwQZeQqfulIRq5UJgPw oG9ko95GJPCGcrzIOAsgVz9i9afMYaRIlhNIYZ5yyD5l5SgE8FPE/tKkx+DpKa5iXhtN8qUcMAAB WeBBFkLzSRGMIBImMEQTUqCFCbhrL14gQj5wNjmLWKUwsdpcUZLYEcAkxT9uFFEsJyNAsPAtAiP4 yoOyYI/6EWsDTEEAGCZwAglEZ2UMk00kijOBD0wlBydYCgZ05jMKcIAGA0ofKuJ3IgqoUjuSwEf+ 8sG8/+VgFwMEzsBQyI8CGEwp/5ZZD+AsqKdG7gRxV+vTFXuEsQs64gMSOMEJHMED7TTUEY44QQUc sYEGpIZ69sjAmx51LnscQhIrYJlQLjaAQKUUKH/sCAYWkEMJ7KAdkZBIBSYQiSJ9YARbWdrx1vQ0 /xCkRwG9mu+E5LXFKWpHFMyifRjlLHuAIAVg7BJGUrIROiEmJftpTEjE+JiGsA2lYxkAFyIwgw0k gAdeqA1q4CXJzflOP4UiktgYx1RdYg5QhWTkjogXSKBEZi9cwsk+mmaPop0Fb5balB4hFIEKkGsi 6JgAxSZiEbcBcnOBdBREcuC2G54AG3phjGR+SgFJxIuTJWsIfFayAUNsawOb+f8AGEp1ggDlZgIj IEEkSHOcdizgXDr7ymqbQ4MPxIAG6zmncyCRmRhs4HyQ+JXPJPE/fyGguukUGAJ4QIAcLGBvwWlO ViH4NN95DY37yedPDpm5XeSDAAxyjvpOWIF+SAIbOdhBDIiwA2ky119PAAMNCrCLc0kCBxt4AhFa +pHJPSYp3sHPWEpUNAk4wrdEsAcG3kCCBawsEuLhZ0cmIyilLCkoBAlS1bSopFdhTUl+epXWDEBH hnihATlo40m0FKnz2OOw9vhdrgRjpZNgxFw3LPIEFNCABWRgBLGzgQcWoNlAFSVWMXYUU+mzmLnm pyAF2clEbClXRvoVZ8lD8pD/40UWZO7jbwz5LglIkOENwCurmW2VqkhiS/gu5swCUcrAoOIJbuyg 0DjjSCy5wpIRfIAB7ZhAmm6aypVF4AQRaICeG8oBOnhgA0SLBA9E8CKg7SMHzvnKzr5jHNCI9wTP QQUq0jcBSGTgBJJQIiQOwWpDH2IAyjmYADODnnzk4AeoyIcZDaYcMQ3pvXl6L864JiQk4aghwaoA JFDh0KPt4ALr2MEONoye+35FygSQRAyaYA95rOBsMGEpR66zookMrWh4HsEKItCWsTShEh/4QQM+ pxTJTc5fBnAEu/sDlCW1ONsXWa+Swtw1KdJyADyoAGhJ0IQJgBa06Ejpl4CG/9WGJBYBjLJhiEai ERY5S4IDaIACwCAJ4uCjF4XI5ngvd+Yv76d3aOzTZhEZtmljPL5GdyPTezc8Se1MI1n15pdKVBYG eMy56tNLeBsVZjXnVSePtIqrQ8IPd6wgBlRJCkZOC6z8ouVBBpLAKd9wmgY0AAzPbGhxpPmDD5Sg t0TTJnGdY66d5UCaypXA4leCOuXk9kGIYt9CKMOd86FHYAKbSMExkA9mwyRebXzxomws0F66mChg C0ol/0gBWhua2CvYwX7zy+sKlMxhsCbABTgwXYsA39ETXulICjORxIpAAiSo1rwNYQh0fCAFJpiA CdBWGYi4qo072EdPhDTtov9mm5ZPAcoVJ8ikiz0tiRTIAhG+uAssfylZ42MAOjZZtCGTYB5CyYmS XQ06Jkcx/IAAGnUCREBVXFACClEicUUUSFcYZYZFgVV+VuMOe7UjFtFSXMY5RgErhoErjXYSoDVk OTQ35oIe6PEctRZNzuEXflEBOVEU7CVXgeUUhvEcGAATBaAPkCESGcA2YsJGa/IcwDcCDPIInaBK HuABMsAOFXICx6ExH5AF6JAFkXAp6EAE7bBq6qOCJkIBxrEt+1BfqBB5GCAykfUmqiUJkNBNQuAd 9KQux3ZsE3EaBKAOOrABFiFAkyNxRsE4YEMx+6ER8aVPKWUoOeI2xFYjENT/D8+RW7zGCzEwATTA EidWXL5nIBYRHQMAT5EBKx2Bb44xSiAQCaREByZAIZHQAOaQAjDSHDJSfMfnHQJFVBHnYl4zY1JU RbTEJ1L0E4SmE/o0RDwQCRHgBdLxAXRyf/ZghRZQhehAAimBAT9kOcenESEhEA2REwWBGAVgHBLg Ac/kCGNxRx2mJ/AFSH/FXn21WfhRRWOWNfpBObVkSA9IgEW2O4NxFGI0FefBEDcBVsYWL1xxThRw AS8IaI5CH+roi5aDJegRI/14K/SRE5TTRo+oICKge2+BGo/gARzQADYwAQEiXU8QAXe2Kb3FALYR M164MykiTQjyHPj1AQeJ/yAS4AtEAAlgsAKXQWtx+BWYsQ/QRYdGcwgrkwCSoAMRAE8bIWE74hPl B3EEgA9HBREEYRgXgyNbQxGQIAl/NBL9AREfgAO8IAmpMzlGkyMPsxHttgAyQgAnIB0PQ2EUxhe7 Yw+jNAIRUAlE8AMmsGPloAXp8A4m4hAYeTi7gDzIAyRZs2IQRHFE0ldW2VR6MlD6gQ4pEAORQAOR gAIRcBAY0YxWWAKcRHUaIRF3U2TooByFxkkv4SyVkQ/2MAEigAA0cAL104gbgAILMoNoViS8Eyv3 8Y7A2CS9QxixBIT1BoEjgUxFxxEhKEaI8WNfkX1qU2L/kxkycjTZCSlkN7ODVgGB41kZMoIB5oEU PtgYMCGQWdkPNNA3HmAO59AAHqADOtAAJaUDuiFdCEI0RFAJohkdx1g05qFYd2Qc2bQPDsUDZuh4 NxUD6IAOkVACxiEEFXACTEEB3KE+J/JNdBgcFCBdXPABNpAFXPAVPXY8g1hIg6iOpmcoX5I8ExEk 8WWjwTgku4ANK5APGeCGlrEL8/I2+aVwEJEPO7ACFeBsMrhSokidI0FKttEWJlAODfAIb//wOpmR A90ZSwOIFUBFSPKRFS6mJxYnUIkjlUlni5lTNgpQCCmkIB1RMh3xjDyAp0STjVfXEWSBAP1YIpRp RuRCX51Wd+qzEgNgAp6GAGoBRGt2cYLhKBdBKFbROxfXRMAjdJAaKS3nFZLDnmBFEiUmqv2kFGFZ qn8xnnJlqeJZaDmgFzqjGu0VV3lTWl9xHGAgAw3wBmDQBDUQBjrADv2pG7lBakRwihwAAr6lAz+g FnHGSQyweAv6ARSwEh13QhSwAB4QAx9AodJ4ElHoL8nzoZyXHjpYAT8gAlywAmCwDwmgnURHEYcU UD8xQTxREBegJdfxFE/CK4/yEvwxFMj/8wQrAEBkkQFMkRMJwA/dtBVZmQFP8AQsBxRRdxUVBnNS WqUm8AaGgAIp0AGGkAIiGihAmCgfQQEfcAJEtRJdKUsTpDVYEjVrShhF0h+4YqektAEmoBU8MAKd USbokCzoAAJWiEyqhjcjwQMhuEYw0SzNKQKpkSAeAyX9gA58B1M0EEpFdpxVgTNsZnRq6oFHsnSU tDmCdhgVpktsoyth0iVzszd68Wj9NBnqkX0suhQnFZxQ0YtRUWiVYURU1zFUIYIx2CILMBqPIAMo MI7sUAPswA6F0J/cSontQUomUC2Zuy0tOQHIBFP2wGnREZcnBCUOZQ8F1yBfxAHowAOi/7GMk5EB DZoSx4Yu45EBNPADPJAAP9ALE5EZH/En6fd9ftUTUIEjAlUmXXUT4cGvYEGoOmIAFvFAPEEB2LCh 3BEBNvoS+LOhk3MBG7oLu8ABRuMXenVijZGxA2AKbdFWbzCSn4ICDVFdS5F9fKETfOMcKhsUBTAC jqAjWmGzWzNXtdRlDKkjb3M3BSAPFTq+fSknEQAbIwI0mPIzQqs0YrG0WzKWYZQ5KWQCH5ADHwBT fyoBjIsKaHIpRCMBNppFN8R0NNiqBNUo+GGzuChXrkJ0D/ipXlt89rA3qWozygMRQoBiSjEZdtJN kXKxUbFlhpI5S8FGMPddGjMnZhZeEf9iZtmKCueQAj9gAz8grIUwrDHwA/5ZG4JZGyUDAsXSEETg AV7wBqVBLD87AZJXATRiUd/hATRAIxNQPuhhUf5yAUtBa1xxLtzVHMfTPf2ADM80elb1IbyjJwgG jxXjohIoEAkbPDajrTp4wAIlKBgDQZDAEhdBEw8LBydwCKCLAL6SNFyggjlQEYHhdoRVEifxfm3R BCL7FumQeANTGTCxP/wgGuozJw7EsBYxEFuzI1dkdNPLHweMEfsAZpRKXyfRBD9wAiIwHBLgjWLx jBZQgj8GOLZyNxLAO+4nJ1RrLv1ABG8wviIQAZoiAZ4kZ19WzUumqk+HSJDhw+tHsen/J7ZIhyfI 10s+2CE/jBNqg2+BImH9JAR9IUAntFq2YjVCQdBXkX1mW2cawwGyLIrOxA4TsQsVQANqEh0jOZLs 4AmRqwM1oANDEAOoUUqC6S28NRzO0RpMGHLtEGsbsA8a+l0NJbQlZVEMRZcRIAl57C+M+MtKozM6 4xcQkgCQYAMckA/7kEBZOYAuaiiKMkmDyF6HGDCVEb3iQQFCEFB/9hOukiM3wRP4yw8LBglIQWsw YSASsZsYAIR/kVJKazRjNADzEAGGYH2GoAWd8Ag2oBRdamKW4XZBIRoSQAFEVQDII3FrTckVV4Pa pnQgglCJkw/vwA0YYRyiuY32YAEW/4AOWAVaWXUSp1IQkKGIUsKROiNMA7ABTWAeotQ3dIQpKSFB aoZDZEIU/DwUX0UR+UAaE9PCSBdXSLfD010SYGUr0bu2HQF3sqgUkLBwxIEBWWAWX4IUfKGNvJNV ohh0h+HRSzsRESDG2Sc64lEBHIACsVPGOtABjlsDN9Csz2R9TVB9p+gtRxgBTdAEb/ADTYAab8Ap REBsBoLH4YEgzuExLQgJpHsBSrEAWOYQOsOlxYUBMcABXDAhC7AV6QERr/lXMqY4BUyexMko42G3 QtofWiE2WdMUSncRNIAKD40VBuJsZ5MApEZsnAM5SaEaKIEBuxAJAu6+neA6Co0edP/SnNp3Nwsx Xz1CdLIkzUtSAC9bNVyOr187GEMiGCRAAxkANAVCHAIxZHGejVNRaBxXZFhRJAwiJ2BoHQjgASaQ Psu3fBKgwinxuSDR1XMOuOTHO7RtPOjsQLBCgRlhnPoBIrTcaMYz2GJS3dfRtkzLRtlXZ88RCQsR GikxZ6KoUpAhWGBiJIPxEQuQXCkyAB3QAYfgMcH2HLrdAf2ph/kJ0zFArH/e4B7wW0RgAh2zAV7g AT8ABq3UKc6uTSr7oAYiHvO2EiprX6abWuiiPmBxLgW5WsSmrgnQrpeoNFvtITwiwA+kcUnCJIky UF2yFA7RUWN+5pKpKANMGDe5cG3/1LCb8b1/ehHF8TYhMhH1fBhzFh4jYAiq+AgpUAkTBuSVgcM4 nA/pMzXISxGndyRMVWZ2RamCSBQUhCT2QDXzDBPFQgRZcM1mNN5RKRYxV0GN6qeOnRMqs4wPmgXL 50l0ROjPUzT0RfD9QIbcuM/SjWQQeUOME1jI58OMthhLTFhQimQQsQ0zdENBhysrIhlbxQAigJtp wwPjo3I0Kjn9hysbHlq4Um9GJE1YlwMi50w5GC8eFwM20KxerAOekJ9gzHfjyDBvgFO2sVMToOAo gxob4OxvsEk3iQ4NFYM3tQGRICHg5lwWNciVUQEGUpA5KE4/rlzgNdMyYk9LA6tr/6OVe0JX6DcU lAyzUbMPEmFcApSjn/xH0xazDIkf+aAgC9FGQMgPFbAAzjZpFiABu4Ah+FGPrM58MPcl6NAPPIDs KCBbFVSxRnwSwl+y/JAZkEkkX26VCMU1gPhe5x9xlOnuVzHPsMxAozEBOsgRX6Em9QgpXyGDcjQC 5nETiAEQ/WgQ4WEPgQQJqLIclLAQAQIeCOxlyWLPQMUBBh/aI8BvAL9d/AwQMCDy40eSKQ0U4Mev 48iSI1sa2EXA3r6ZL1OeNGBgQMmfJz36/GkyZNCgNH/2LLmrHwYEDCQO6EchKgOsC+0NwJChKb8c Qe05/dkxrEgC+zBAlYogR9hdC68qDPhQAUMFGivA/Khh44eOGjoAM/kBppeHHyY8bIhAZAIHIm9Q gGkCBswED2BQ/Hj4YQEDCScwUKiwYQMR0zRO1D0hAcGAHBRy7JCQA2qOhwNK0xjw5Me2XT8m8KNA YfTxAQM2uh35cqXIliRLukzJUmV1BBseajVO1aXLmh4JEAg5njpMkGjHZ48UgQaGfslLZkA4fsEG ewUqrIjBMfl/nxDq6Sao+EGACBPK+SAgADs= --_005_2DD56D786E600F45AC6BDE7DA4E8A8C11223E30Eeusaamb107erics_-- From nobody Sat Apr 2 16:22:58 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A8FA12D1D4; Sat, 2 Apr 2016 16:22:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7jFhhfwcbQPW; Sat, 2 Apr 2016 16:22:53 -0700 (PDT) Received: from skroderider.denisbider.com (skroderider.denisbider.com [50.18.172.175]) (using TLSv1.1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CEC9712D145; Sat, 2 Apr 2016 16:22:53 -0700 (PDT) X-Footer: ZGVuaXNiaWRlci5jb20= Received: from localhost ([127.0.0.1]) by skroderider.denisbider.com for daniel.migault@ericsson.com; Sun, 3 Apr 2016 00:22:50 +0100 Date: Sun, 3 Apr 2016 00:22:50 +0100 X-User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0 Message-ID: <2142765258-1292@skroderider.denisbider.com> X-Priority: 3 Importance: Normal MIME-Version: 1.0 From: denis bider To: Daniel Migault , curdle@ietf.org Content-Type: multipart/alternative; boundary="=-mMz8iONGv+/72BEXohJ9" Archived-At: Cc: curdle-chairs@ietf.org Subject: Re: [Curdle] proposed agenda X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 02 Apr 2016 23:22:56 -0000 --=-mMz8iONGv+/72BEXohJ9 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable I have multiple reasons to oppose the idea of meeting in a physical locatio= n to discuss standards that can be discussed and advanced online. These meetings are - including but not limited to: - Economically wasteful. Each participant has to dedicate 3 - 7 days, two o= f which are wasted on unpleasant air travel, to discuss something in person= that we can discuss online equally effectively - using technology as ubiqu= itous as an HTML 5 browser. - Ecologically wasteful. A physical meeting with 1334 participants, traveli= ng an average of 5,000 miles each, return trip, burns 360,000 liters of je= t fuel, and releases 910 metric tons of CO2 into the atmosphere.=20 - Exclusionary. Participation in standardization should not be limited to c= ompanies and individuals willing and able to travel to in-person meetings. = The people who don't have time for this sort of thing are not a good metric= for people you want to exclude. "Convince another attendee to represent yo= u" does not cut it. Whether it's ISO or IETF, I think standards organizations need to evolve to= ward a model where this sort of thing is done online. To encourage evolution towards an acceptable online model, I prefer not to = participate in this kind of thing. Good luck to you all who will be there. ----- Original Message ----- From: Daniel Migault=20 Sent: Saturday, April 2, 2016 16:35 To: Daniel Migault ; curdle@ietf.org=20 Cc: curdle-chairs@ietf.org=20 Subject: Re: [Curdle] proposed agenda Hi all,=20 This is a reminder. Please provide us your presentation by Sunday April 3 5= pm (BA time). If you are not presentation please send us a unicast notifica= tion.=20 BR,=20 Daniel ----- Original Message ----- From: Curdle [mailto:curdle-bounces@ietf.org] On Behalf Of Daniel Migault Sent: Tuesday, March 22, 2016 10:29 AM To: curdle@ietf.org Cc: curdle-chairs@ietf.org Subject: [Curdle] proposed agenda Hi,=20 Please find the proposed agenda during the BA session.=20 - Authors please confirm you will be presenting and please provide your pre= sentation by Sunday April 3. See you in BA! Rich and Daniel 16:20-17:20 - Tuesday Afternoon session II - Buen Ayre B Agenda: =C2=A0=C2=A0 - draft-ietf-curdle-dnskey-ed25519-01 / draft-ietf-curdle-dnsk= ey-ed448-00 =C2=A0 =C2=A0=C2=A0 - draft-ietf-curdle-pkix-eddsa-00 =C2=A0=C2=A0 - draft-ietf-curdle-pkix-newcurves-00 =C2=A0=C2=A0 - draft-ietf-curdle-rsa-sha2-00=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0= =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0 =C2=A0=C2=A0 - draft-ietf-curdle-ssh-curves-00 =C2=A0=C2=A0 - draft-ietf-curdle-ssh-ext-info-00 =C2=A0=C2=A0 - draft-ietf-curdle-ssh-kex-sha2-03 =C2=A0=C2=A0 - charter discussion on hosting ssh work: =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 - do we need to re-charter ? =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 - agreement / disagreement on hosting = ssh work DANIEL MIGAULT=20 Researcher=20 Research Ericsson 8500 Boulevard Decarie H4P 2N2 Montreal, Canada Phone +1 514 345 7900 46628 Mobile +1 514 452 2160 daniel.migault@ericsson.com www.ericsson.com=20 Legal entity: Ericsson Canada Inc., registered office in Montreal. This Com= munication is Confidential. We only send and receive email on the basis of = the terms set out at www.ericsson.com/email_disclaimer=20 _______________________________________________ Curdle mailing list Curdle@ietf.org https://www.ietf.org/mailman/listinfo/curdle = --=-mMz8iONGv+/72BEXohJ9 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable I have multiple reasons to oppose the idea of meet= ing in a physical location to discuss standards that can be discussed and a= dvanced online.

These meetings are - including but not limited to:
- Economically wasteful. Each participant has to dedicate 3 - 7 days,= two of which are wasted on unpleasant air travel, to discuss something in = person that we can discuss online equally effectively - using technology as= ubiquitous as an HTML 5 browser.

- Ecologically wasteful. A physica= l meeting with 1334 participants, traveling an average of 5,000 miles each,= return trip, burns 360,000 liters of jet=20 fuel, and releases 910 metric tons of CO2 into the atmosphere.

- Ex= clusionary. Participation in standardization should not be limited to compa= nies and individuals willing and able to travel to in-person meetings. The = people who don't have time for this sort of thing are not a good metric for= people you want to exclude. "Convince another attendee to represent you" d= oes not cut it.

Whether it's ISO or IETF, I think standards organiza= tions need to evolve toward a model where this sort of thing is done online= .

To encourage evolution towards an acceptable online model, I prefe= r not to participate in this kind of thing.

Good luck to you all who= will be there.


----- Original Message -----
From: Daniel Mig= ault
Sent: Saturday, April 2, 2016 16:35
To: Daniel Migault ; curdle= @ietf.org
Cc: curdle-chairs@ietf.org
Subject: Re: [Curdle] proposed= agenda

Hi all,

This is a reminder. Please provide us your p= resentation by Sunday April 3 5pm (BA time). If you are not presentation pl= ease send us a unicast notification.

BR,

Daniel


= ----- Original Message -----
From: Curdle [mailto:curdle-bounces@ietf.or= g] On Behalf Of Daniel Migault
Sent: Tuesday, March 22, 2016 10:29 AMTo: curdle@ietf.org
Cc: curdle-chairs@ietf.org
Subject: [Curdle] pro= posed agenda

Hi,

Please find the proposed agenda during the = BA session.

- Authors please confirm you will be presenting and ple= ase provide your presentation by Sunday April 3.

See you in BA!
<= br>Rich and Daniel

16:20-17:20 - Tuesday Afternoon session II - Buen= Ayre B

Agenda:

   - draft-ietf-curdle-dnskey-ed255= 19-01 / draft-ietf-curdle-dnskey-ed448-00  
   - draft-ie= tf-curdle-pkix-eddsa-00
   - draft-ietf-curdle-pkix-newcurves-= 00
   - draft-ietf-curdle-rsa-sha2-00    &= nbsp;           
 = ;  - draft-ietf-curdle-ssh-curves-00
   - draft-ietf-curd= le-ssh-ext-info-00
   - draft-ietf-curdle-ssh-kex-sha2-03
<= br>   - charter discussion on hosting ssh work:
  &n= bsp;    - do we need to re-charter ?
   &n= bsp;   - agreement / disagreement on hosting ssh work

DANI= EL MIGAULT
Researcher
Research

Ericsson
8500 Boulevard De= carie
H4P 2N2 Montreal, Canada
Phone +1 514 345 7900 46628
Mobile = +1 514 452 2160
daniel.migault@ericsson.com
www.ericsson.com

= Legal entity: Ericsson Canada Inc., registered office in Montreal. This Com= munication is Confidential. We only send and receive email on the basis of = the terms set out at www.ericsson.com/email_disclaimer

____________= ___________________________________
Curdle mailing list
Curdle@ietf.o= rg
https://www.ietf.org/mailman/listinfo/curdle

= --=-mMz8iONGv+/72BEXohJ9-- From nobody Tue Apr 5 08:19:13 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E315212D129; Tue, 5 Apr 2016 08:19:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.22 X-Spam-Level: X-Spam-Status: No, score=-4.22 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dEI4kWpABBLM; Tue, 5 Apr 2016 08:19:10 -0700 (PDT) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 77A3212D0BA; Tue, 5 Apr 2016 08:19:09 -0700 (PDT) X-AuditID: c618062d-f79216d00000767f-e0-5703d143ad30 Received: from EUSAAHC006.ericsson.se (Unknown_Domain [147.117.188.90]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id 39.50.30335.341D3075; Tue, 5 Apr 2016 16:52:52 +0200 (CEST) Received: from EUSAAMB107.ericsson.se ([147.117.188.124]) by EUSAAHC006.ericsson.se ([147.117.188.90]) with mapi id 14.03.0248.002; Tue, 5 Apr 2016 11:19:08 -0400 From: Daniel Migault To: "curdle@ietf.org" Thread-Topic: Jabber scribe / minute taker Thread-Index: AdGPTim83YzCVw0fRN2pIN7Jxy8dhg== Date: Tue, 5 Apr 2016 15:19:06 +0000 Message-ID: <2DD56D786E600F45AC6BDE7DA4E8A8C11223F022@eusaamb107.ericsson.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.12] Content-Type: multipart/related; boundary="_005_2DD56D786E600F45AC6BDE7DA4E8A8C11223F022eusaamb107erics_"; type="multipart/alternative" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupmleLIzCtJLcpLzFFi42KZXLonStflInO4wf9tYhYzezYwW2xdOIvZ gcljyZKfTAGMUVw2Kak5mWWpRfp2CVwZU27NZC64eZ65Yt+hLewNjIv2M3cxcnBICJhIvJ5k 2cXICWSKSVy4t56ti5GLQ0jgKKPE860NzBDOMkaJ3Xd+MINUsQkYSbQd6mcHsUUE1CVOHNrB CmIzC2hJvN50hAXEFhZQlbjz+RgjRI2WxISlnWwQtp7E7HtXmUBsFgEViZfzWsBqeAV8JX78 eQk2hxHoiu+n1jBBzBSXuPVkPhPEdSISDy+eZoOwRSVePv7HCmErScx5fQ3sUGaBbkaJlfO2 s0EMFZQ4OfMJywRG4VlIZs1CVjcLSR1EUb7E0RNf2SBsHYkFuz9B2doSyxa+Zoaxzxx4zIQp riOx+dJOqDmKEm2ds6GWLWWUaNpwnxGm6NbaY3BFU7ofssPEl7ZNA1rGARbvulMG0QsM+Z+9 n+Fqbt9czYqsdwGj0CpGjtLigpzcdCODTYzAZHFMgk13B+P96Z6HGAU4GJV4eBVkmMOFWBPL iitzDzGqALU+2rD6AqMUS15+XqqSCO95YAoS4k1JrKxKLcqPLyrNSS0+xCjNwaIkztsY/C9M SCA9sSQ1OzW1ILUIJsvEwSnVwLin2miW/+Zq5u1FZ8K1l67Ttk6+v2aZf8n0zv48/TeWFndD Ag10Gbm7XXZ2Ofo3K6y5r69e++HPr7bNRruTXZZ6PlOLtw1g+f3Cdp9vbeezPkbm5edkdl0+ VRaXWR4/6wPnmidm3hdOTV7++PHB/5mRYe2qQf/yQ/ZcfBo/fd9SjSlqmefrC5RYijMSDbWY i4oTAQHMSo8eAwAA Archived-At: Cc: curdle-chairs Subject: [Curdle] Jabber scribe / minute taker X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Apr 2016 15:19:12 -0000 --_005_2DD56D786E600F45AC6BDE7DA4E8A8C11223F022eusaamb107erics_ Content-Type: multipart/alternative; boundary="_000_2DD56D786E600F45AC6BDE7DA4E8A8C11223F022eusaamb107erics_" --_000_2DD56D786E600F45AC6BDE7DA4E8A8C11223F022eusaamb107erics_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi, CURLDLE is meeting this afternoon. 16:20-17:20 - Tuesday Afternoon session II - Buen Ayre B Anyone volunteering for being a jabber scribe or a minute taker is more tha= n welcome. Please let us know if you are volunteering. The chairs [Ericsson] DANIEL MIGAULT Researcher Research Ericsson 8500 Boulevard Decarie H4P 2N2 Montreal, Canada Phone +1 514 345 7900 46628 Mobile +1 514 452 2160 daniel.migault@ericsson.com www.ericsson.com [http://www.ericsson.com/current_campaign] Legal entity: Ericsson Canada Inc., registered office in Montreal. This Com= munication is Confidential. We only send and receive email on the basis of = the terms set out at www.ericsson.com/email_disclaimer --_000_2DD56D786E600F45AC6BDE7DA4E8A8C11223F022eusaamb107erics_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi,

CURLDLE is meeting this afternoon.

    16:20-17:20 - Tuesday Afternoon s= ession II - Buen Ayre B

Anyone volunteering for being a jabber scribe or a m= inute taker is more than welcome. Please let us know if you are volunteerin= g.

 

The chairs

 

 

=

DANIEL MIGAULT
Researcher
Research


Ericsson
8500 Boulevard Decarie
H4P 2N2 Montreal, Canada
Phone +1 514 345 7900 46628
Mobile +1 514 452 2160
daniel.migault@ericsson.com
www.ericsson.com



3D"http://www.ericsson.com/current_campaign"

 

Legal entity: Ericsson Canad= a Inc., registered office in Montreal. This Communication is Confidential. = We only send and receive email on the basis of the terms set out at www.ericsson.com/email_disclaimer

--_000_2DD56D786E600F45AC6BDE7DA4E8A8C11223F022eusaamb107erics_-- --_005_2DD56D786E600F45AC6BDE7DA4E8A8C11223F022eusaamb107erics_ Content-Type: image/gif; name="image001.gif" Content-Description: image001.gif Content-Disposition: inline; filename="image001.gif"; size=2367; creation-date="Tue, 05 Apr 2016 15:19:03 GMT"; modification-date="Tue, 05 Apr 2016 15:19:03 GMT" Content-ID: Content-Transfer-Encoding: base64 R0lGODlhRAA8APcAAAIVTgAWUwAWVAQWTwUWUAcXUQkYUgAbUwAbVAoZUwAcVQEdVgMeVwQeWAYf WQAhWQAiWgggWgAjWwAjXAAkXQAlXgEmXwInYAAoYAQnYQApYQAqYQArYgArYwAsZAAuZg0sYA4t YRAtYREuYgQyZAUyZRMvYwczZhQwZAk0ZxYxZQs1aA42ahE3axI4bBQ5bQY9cBU6bgk+cRc7bxg8 cBo9cRo/bRw/bh1Abx5BcB9CcSFDciJEcyNFdCRGdSVHdiZHdylJeStLeyxMfC1NfS5Ofi9Pfy5Q ejBQgC9RezBSfDhQfDFTfTJUfjNUfzRVgDVWgTZXgjdYgzlZhDpahTtbhjxchz1diD5eiT9fikVe hUZfhkFhjEdgh0hhiEljiUtki0xljE1mjU5njk9oj1BpkFFqkVJrklNsk1VulVZvlk9xl1dwl1hx mF1xlFdzlFh0lV9zlll1lmB0l1p2l2F1mGJ2mV56m2V5nF97nGB8nWF9nmJ+n2N/oGSAoWWBomaC o2eDpGyDoG6CpmiEpW2EoW6Fom+Go3aFo3CHpHGIpXKJpnOKp3SMqHWNqXePrHiQrXmRrnqSr3uT sHyUsX6Ws3+XtISYr4easoibs4mctIqdtYueto2guI6huY+iupCjvJKlvZOmvpSnwJmou5WpwZqp vJuqvZyrvp2sv56twJ+uwaCvwqGww6KxxaOyxqS0x6W1yKa2yai4y6m5zKu6zay7zq28z7C8yq69 0bG9y6++0rK+zLO/zbTAzrXBz7bC0LjD0bnE0rrG07vH1bzI1r3J177K2L/L2cDM2sHN28PP3cfP 18TQ3sjQ2MbS4MrS28fT4cvT3MzV3c3W3s7X38/Y4NDZ4dLa4tPb5NTc5dXd5tbe59fg6Nni6trj 69vk7N/k5t3l7uDl6OHm6eLn6uPo6+Tp7OXq7ebs7uft7+nu8Orv8uvw8+zx9O3y9e7z9u/19/D2 +PL3+fP4+/T5/PX6/fb7/vn7+Pz6/vr8+ff9//v9+vn+//z/+/7//CH+EUNyZWF0ZWQgd2l0aCBH SU1QACwAAAAARAA8AAAI/gD/CRxIsKDBgwgN8tOnb1/ChxAjSjR4792vMyAaBLllb6LHjxDtvau2 SMYBCRYsSHAwSx/IlyD5ufMWCkqDBihTppQghB3MnxDhgbPVhsNJnUhTHigHtCnBeuCMKcpRAGfS qxLMOW1qTpmmKQ+OXr16oIu7rS/fPSOlhsQBB2OxPmiAwxg/tB6xtfLTo4HYuDolHOBQZI4xvBPf XYpiNCfgnQ0e5FDDyRniifUuSbD6OKWDAyPAVArW7rJHcSMcAxYcwUkjW99Mf9xnrMDjzQVw8JGF jR5BcrFMKZP90BmBuBEKcCCTSprPgfhs6VFCw8UOQfCIH0SX4wFSwQ2Y/lxqppWgNEdOaHCQwB7l Jd/aCe7D1fhBgheBjJWDL5AdqCo1iMBeUhLIoE58Bd3TjB9VuCELOfEUpEsaNJCgEmAFMIVgQfPA I49LA1mDSA4krNeZBBycs+FD7ISCxAgcdIbUAXRkt2JB9ghjhoUyJuWAEN7cONA+2zByg2o9pkSE J+/849CN6tDhAJKdZcCBDH5UIyRB8exxQJIpgeACGLR0tCVB3nh3ogQeuLBEJuQQdI+ZQvIzjG1x sZeBC0EEMtxA/LCjVyjGPHejNF8SyF4KQLARC53/vIONLGp8UMABB7wxjpDvQCHWSh70EEYnQQ5k Tze9HLLDAZxZMIAi/vPcyE8yRGxw0g1bOIJMQeQIcwkVglEpwQjobIlNJHksQstZA7mDzCdosFDA lBhqeCZB/FBTyh1A3EQlgSykc+1A5LQSyBMctHrbAZLwJ2Q9vjSiRQsOUHuiAwWQ8EexW5pjSRg7 WKDuaic5QckvTW5JDRMj2HuiXzQAYss29Vz7DhYD53nABmawgg2z41rTgIybHZDEJtio8+S4//Aj TKIasyAIM+tUzHJB3IyMFU5j0MKOuzcT9M4aMKv04ybl2HNX0AmZ4wVOErTQxzT5MD3RPWsFI4/V XHft9ddghy322GSX7dEywQijtjDBxDlN2mofwy87vhyjokDY0GLK/iq9lOPQpHsHc6A+zrRSCivI xPqPOr2ggoovB0aaTDDBiPvP29XwM0YOO8hQgwwvrPKPHTjkUEMNQZiRzD/HvOBELf+0s8kUKTwg QQqb/GPKFCVE1kMw9GxSRGNRxKYMG0dKcMMbu2KTBQ41bFIxHTfwYY8QDYiQRRVURGHLP1oc0AIX UWz2xD++DMACK/9cwgEBOdThhxOVYEMvEIoYQscww3DgQBSM4MMdypEOKEwpDnBYyRTQQY0c+GUH 0vhHFQ4ghnoYwQFGqAc60GGOefDDCwcAAzbScYSU/OMXBXCBLKghgwJQIRjskNQ5VpEBC/xBIOpg hycEMAJR/OMe/kzJBAcisAh1nCMRBxCBJrbhgwgIZhL/6IIDyGDBCMhAE5SQhCa48Q8QXoF/MpAA E05YgBe04hVfCkVBlIGSHNhhFaVhBQEyIIRA3EIgX9iABO7mDfaYoRs94MALOHADcnxhihZ0TNRg 5wUHiEAGNLAAEbpBxhekAhQDeEEuCqIPQfglaleYRjrQgKkNvKAN9mCCBFjwJHfAoAFYwEYg8xAF AnwCChGgohGixgc7zAEQ0+jiA1RghBiNQEUoNGMqBAACWRjkHccgxAxs54Z/rMMWcuhdA4YBhZSY yR0ecAAXACmBVFRCAjt4gQR0+YAx3uMeDtkHCKngDVGs5xJk/lRh/xrABkMRxB7heIEDoECQVdCA AKawAwgcsMl/7GIwg+jGDspJjiRIIAPrTKQLAKEHPcBBGF08QBbaUQ8VWAAI+WyFPNxgGydcYhWH +MQ3xtAJW1BCJWrABhlKYYs0cGAAtaBGCSQAg1UYVAIzkAY2JjqKf0ACBBLIZT2w1x4JFIAT/8gC Aaqwjn+kQQIbUEYw1Ce6bogBJ1ZyAB6SwYG2YvQG1ODFANq6gQR8IU6mWE9bh3WKfzijO2osRxFu UsFWcKITiO3EJYLJikasIlbSmMQkhvENRmRCS/+wxzAKcQYy+MEY6thEHMighkyo6BuRaMMY4rAK kHXDEWY4FUMkKPkPc3giEtEQyC4o4YhX3CMgAAA7 --_005_2DD56D786E600F45AC6BDE7DA4E8A8C11223F022eusaamb107erics_ Content-Type: image/gif; name="image002.gif" Content-Description: image002.gif Content-Disposition: inline; filename="image002.gif"; size=35016; creation-date="Tue, 05 Apr 2016 15:19:04 GMT"; modification-date="Tue, 05 Apr 2016 15:19:04 GMT" Content-ID: Content-Transfer-Encoding: base64 R0lGODlh9AFQAHAAACH5BAEAAP4ALAAAAAD0AVAAh1ZWV0FHRFdURmdVRmZYVGlkV1dENVVGRXZm V2ZIQ0dFNkc2M1U4MzQ3MTU0ITgpKzUmICwlFSYYGUIpKlU1JkczJkUnICsVEGY3M3dHQ3hXRGZE KHY4NnZHN2dGNVUpMVUnJA4MCndUN2F0ZmlmZZl2Vah4VpZ5aHpzaWB1WURVRiQ0IxgiFCQkIUVH JVZWM0ZSNV9jKxcYGTtBGDNENWhUNnZqZYZ1Z4doY4hoVYh6dJiId5aLhqaMhYuEeJiXepuUiqaL eamYiaebl7OllLasp8Gsmrqnc822hZhoVbh5XLmGdqqHY610a4hXRXllQ7CHV5l1SIlYU5dnR4ZW OHdZVIlmR2QnJHtKTIZIRJeFaGY2Jk0YGU05RFJnVXl3V1VWI6iVeaqWZbyZdbqJZFZEJ4d3Qqho WJhYUpVWRotKTWopLWNKVYh2Vyk2Mx1GKVlIUURVWEpSIsuSiciUcKd1SbmFh7N3fbVpYKpbYYZG N5ZKU5dJRhcqIribh6doR7qXaJxnZr2JkWdlQJVZYyQnNouGaGZWJGtZX4hrbm1zNHdrdXh3dWyG b2xqMFVmbpl5dXd3QdikhXZYI6hUUMashSpgO4uGTMu5mNS9i8mrdZuTX9a9lXqDiGh0eImHhLu4 tsa9v4eWiYuReqmnpZqmq5qYlru1rMi7stfOx////+ro5+/v762trt7d3efe5+fe3YyUlNfW1MTG u9LFuc7Oz97e58rJxqy1rN7n55mllejn3kRHWffv79rHmk8RC/f39vr7/K22tWJneoyUZ97n3jdF V7zGx251iU1Uaru3xpuMjTE2TL2Ylk0oEffv93dFIppZNI9tKqecp7est3JLDZyYpYWLmp1GNaE3 O4hWIHg2IGoUC3QYGHsmHnAoDIwyJrxoP4hFIMCQTJYZIIkcDaUmKKiKI6txEbFrJ6M1EqgVIqUF F5xXIJtFHq5LE0tJE4wzD7l7Oq9SJnFhDZJsDcdeJpBMDcl1TLOlSNWQLM6lQ+S4P+/GSgAAAAAA AAj/AAEEGCigoIABBAgUUJiQwAABBg4cODigAAIEBQQkkHjAgIIFCxhM/NhApEeQCiYKOLDAAQQI LC7IhGCBAgMGFCpYeBnzAs2XLy1YwIAhQ4IEDHZaYKChqYYEGDZw6JAhgwcMHyzIFAqiKwihMmWG 8EmBAtYPWSl46CCig4YCI+KSsFjCxIkTKFKoaLDCQV8HgFmwaOHiBQwHgyMMFszCbwvGLmK8cDEY MOLHLg6HCDF4xosXNAYXdmGZBgwVNFasUHCwhoeyNg142GCgdsSJFS3aQHGjNw4EOW7o0CF8xw4e PXjs8OHDuHPkP4BI5xFEufMgQHoAEcJdyBAhRIwQ/yFSqZX48OONdP8u5Lx4I+7Tyydv/r37I/iR 1NjMooKH/yIkYYISSzChhAlNJOGEBgYs8FILMoQQYQgVPAEFFFFEUUIUuT2kUwVHYZCAFFJ08IFP FmhQgwlTUNFBAlVkgIFWEGRgxRMiiKCBjEsx8AFRZpn4Egg//meAVmL9yAEHGFxxQQgfVIWVWRxk 4EQWVTFZhQdCDZXBjv9hRZRQNx1lQAUVDKDDCTbcoIUWN5xwQwA00BCAQQgVoKdFe/apJwI2BGoD Rg4N8FACeK4EkgErHaDAoyo5yEIEEVwggYQXVMAABldhwIBOYYXVH1pRSoFDDlUkUIFPWziRQw5P ef+gwas5SNHUaxb80iUIFeTUJZpBQRBSFyJxBCMCKMSlrBcj2PDFDV94wZdqfzWQWgMBwABDDGA4 EAG1qvn1rWARwEMaDC8A5sIMKwhWQWakBeaAtqStMIO2MzjQgAIqeCGAAg3ce1BV/121Aaec2maQ QsjewNugs8bp3HMTG0eddN6pZ7F1FgMRxnbrETHEeCMT0QoR4AkBcnumgDeey+OhHLN47YlsciVG lDyeGGKMccQTEoZAARVTODEFgmSQscQSSh+YRNEYTHpBHzJQXYYZF2YYhQgVMKoATBZUMONQJDpB gQUf8CpCE2eg4UQGHzBgdggQsHVlFmkIiQEHcWf/IEJVDLCAQRZZjD3mWBZIwSSTV2hqk6eeXpEB GmewjUYWHmwKwQUgaHACrFx+0KtOsNlEARtQuUYBCAwgcEMbCNBZJw1uuAEuuG/k/oYbuc9ummkq 9CuAF38GulBDeg4Ax0cogQRBBBJAL8OTiG8KlZlIysSCAU88ocGSVSVggI8vUUCVATmZRdSmQIr+ wAfDMmAAsV3Ub38XHHEEh/1sxOmwsiNIgRdQQ4MZPCYAKjhN8OKgAjqhCwb5cgBpzOUXxlRAXYiB hwJIM6kVfMsFpIFXX+DxmcM4YAZymAxgTiMA1DRAggYYQBVilAAPVKUDYbpJSgxSw6vIqgoIeEoH /5xQghNYbGIcgw7GhPCJ5uwACEEwTnWqw4OPdQdm6sniy4QQhC6OjDsxC6MYxWiEIgzBBzAbjxai wIQw6EBCDRDBFKYgICUkbQ50yCPTyHCgMzjBAxBogQQuFYIaXKgOUbCCFTygk6RY6ic6sUAWBpQG DBggASBIgh3u0AQpbOECQ+sAmdZSFcWFLQciwAkOMgCiBECAA3jIAwZqlAY9cAAELMjAHtRwhQ8U DgMdKApRiAICPjTBDnNgWxo4AJYLoA02StkcBD6ggSkxUn5E2UJXLAACBAwAAappwLRwtwLdvaGc 5ayTOXW3gj70gZzUmp0CaDBPcT7qng6CwCAntP+ZrbDPRxaYwAS6xAAPQAUtN6kNsW6yUIZ2ASQL uJ/95ne//HGkfvqTSP2ct4AENAUBAtyLA/jlBRjohDVeCMAKQrCCAKRUgobRVmoiYJkW0NQZf/FW CzwzmQi0QIIgXNcMZvDCvijAMPm612T64gIavPAxLWiArEyFAxyQCEwI85T8aoMTEJglAVUhWFRE kAMjUqxiPFCOdZpDnYpd5wdh6I7MgHAeIVSCCGEwjhaM87KZzSeMaSSPy2A2BigcQQxauIAMOpCG NPxhQGTIYx7xqEcymIBFeaPABFggAxmU4AiAuBAUnqCUT0ngJafNAAfqdoZAoKEDEEgKDgQRCL// 2WoBVJklBtrSS0cu4G1MQspLPvUBJlngCmlwwh6ywDcs3EENIIDAHvbANwyoAQtOMNEFOICGPKBB Cli6SlJYQBOhbC5sNPEPBsqCMNL9CANb+MAvDADEFqjGdrdTzTnPWc51qoYGAihAAN7wzna2050I ZgGC+8CYBg+mLxVggQSot5mxvCQkEJ1fgxbwK4hG1KL5k6iIR0ziiNZvfw99AARU/IAHhA0ECxAA AARATy+kAAAJEAEVbuQIADQgqggUgAdqIBkFwCA0lvFgToeKGMEURjIugIdlAEODdSFGgnKAwQZR +AI5rKABLigqpQBTBh89DkirY52nztYVolzl/3E21ECMjPK3L1XhBsdJDseOwx0gKCc7ytGCE6UY BO1csTtAiJkQTLGDE+x1rynr6xgnHTOd2dUUYjgCE4gWOKPNsSknaAId8DiGOYwhj3ysQxKSy7UI tUC0bWgDEwyQqcxVYLhcEZMUAkGIDJAlA1KQkRTucAcZTUkKb1PtiQR3hStkwQkY+EpsGWneoohg mBZIQBMwMGEQNMkCGVAQlpB0BTF5QApooAIHfAUjraL5JhWoigiASwFgkygDFICApj4AML/kV7+8 Y2c8YQAA46nADQl2p4IX7uCGO3h8FWhBhUPwAPxJBA4Yf6iHPfxQjIJYoxbYuMhBcr+Rd9x+Dv96 QAsKEcgWtGBzM4HBAPtVgAE4QUMlmAIC/mVkFQigBkSOQQ0YAJh3oSteloEBZcjVABIOAgzsahdT l3oBFrzAEYOYTGZicJjMOLUC4qwASG5yk9WVjgLOoIn8rhKiT/Xq3DhoQiCCXTCiJMB1zmGOc6KD nTD0YAd/d85ejZOduF6xi+BZmRDyahwwUprSQBiCKUb2HZJxBwpiuHbRJpCGonH1JQaQgglQHVkl KIEJJkguFSgQIQdsSEM5qEFMIOCaW4Mb39zsihTmsIRA7G3Xn8PAsHOAFPh6e5izhBIHCJeEM+gh 2mrxQFaG0gEKfOBsM8GAT9K2kwsIE5gUsFT/riCwgWEfCNqawgIWkG+ANZPOhkko0cFiFG1nggCs dbLnPT3CmgJUYQDztF8wUAAogAI2QAJzoScCMGAFZmDvtGAQ2HCAcUlfAwETAAca5XEHgHInZz8g hoEHAIIVlYFdoGLCEoJsgIEj5jwmGEh9cAGCJEiDJAHTcwEN4AU46AU2JyAl8DRWkBHB83NOYAZP oHWPsnWfUQakMQMuIAcuoBg0RRovMAhcF0JJpXRN5gBTKBmfoUL0JE8KgCYKYENWYRXsJz8yNAA9 9B9bUAHOYBazEghWVUOwIRvf1BtrQhyGIGiDtmdvMnjGER2HpwVBwB2NVzJBoAWO93hjxB5X/1Qy 4uEHmEcFWfAHVMAAU/AHTrAgRcMA+uYEfORHSCE/HuUEVKABMBgFYgAIiXQI4ScD+lYBH1BDGbB+ L8EBRlMCYxAIe8AHHKABOJAEIlJNSwJfWmEBBlBeEGBd39UEd5AHWRBdS7E6xXgFuhJdmTJLP8J9 +oQ2NXE2euAEzLQFePMHy5QVRNEBHcAkPwJWxPQVFCAFTdBJG7AT0pY2V0ABX0hPHWEmBzAAqJIR NPAGNOAFBRgoCVgAJIAAJAAAqYFgq6FlD8lgDrYZESID5FUGhjIAG0iCJOaBHhiCGDeSGKdRF0cA NoADKIAILIE/bJCCG7hR+aRyLicBMQiDg//0ckChTxPWAhUgAHEBADaHc1NgBRowACkwAnEgABow BYkkdB5QGzAABlToCEaphFeIdOrShRwUAhFQGC9gQCygQYMwCIpQhfoyA3USAGEodgpQAxrgBLby JUZxE65jAwKwAJqCJr2iWdfHKTlUFgl1EIDSJr1xmHHCHD4AiG61d4XIHT+AeEIAaYsYWJCnM9/h iIq2M6sYBW6jFlOgBGdABSJwBqlXFlPAR1SgFT6JJhbgAU4gAiGQAxfCilYgAtwkmBSABSSCBf8h FIRgAnJpB0mQB3jAjh5QJVJSXHwjE2KzFhWwBlUSCEmgWldAI8Q0OHmwTLcUXcN0fFixFXH/4yke 4DbVd1xbcAXbVAFZkATzWFs4kQG1pQaFAwIXkACB0Ekzkk1/iWwDUScpEZWIIgBARGMESYAOY4CC UoAMGiheQAMI1gB6uRMvAYOcJSFVIwMSFwItwAA1oIYxmVEfpz8k+ZIkeaIpCAeIsAiMYAOIQAAv CZMSFVEtpnKXMj05uZM5+gAVYII/yQiN0AgjQAA1cHNFc4pfEKSNQAIJQDRW4Ag1sAFtWAEvEANW OQUakC4nJGVQCBhMmEJygBicsVNT+ALw8FNg6Qhcpy0wwJZu+igV8JYaoEjZVTAEYIBw4AYv909o tgFRGZW1AagCKgAEcBEXESg4gJj+s5hv/+JWThQEH/MDOxBXhsdnciVGKfMx47EdY+QdJANYInMh YsAEU5AGz/YHUJA0f8QgCyACf5A0XOMBAvJHsuEEG1ABJcIEULAhG0ABVYJDHJAGtsVKPuEEJhB/ GtAB3XVLLDAB8hgIZsMAJJIFanAVYTUlWBAIbZMB2Dh+v1BceKMGasBMF/ABahBsH/A+cYMTWOFt 9maduQcC5UYUwBZ/VYAVC7B+N7QqoMQjQ4El6yU2GDAQBKERRwFEM6QBCkECBykogcIIOmCAJJAQ C3Fw7/QROgEBgBFIgrEAL+RTj8SjCXVxJzqSKRijKRqjDYEILEsALduyLsuyVcAGHTijKf9Xozib syrmcjrZAMODgwCQg17wCEA7CMSDgwCUgwVQli/AGgKALmXJtAqQQi6gGpPiAPBwdEFFGjSlLk8H A5MyA49ydYrQtAgUhAmkADA0ADuCPh4wAIFCAF/zABJKigmghuLDEe3nZkaCG4ZqqCp5A4Z5mGsy aMbBqI9mHGEQqdTxA4YGMoB1aGBUCZC4RYN1aCgjBqLFBJroBH9genRABsk2R2dAB0pABRiwABog BSKwFpuoFh3wC1YABSZAWsqKBvjWAb44RLZqKQwAbFnQAVvAAXpwnSAgBUtwAhowb27jBK5lS2pA CLhLFCKAIIHge7/AAFngJCEgASywBln/wAfLpX2/MExtsbpVsCTUiiVrkAB3AAm+BwHlmwWXwzfc 9AGd8hL0SiLM1ALSBlZIkQBoEJ4XYCd0cicwcBB7ohBPqwIF4LAI+MAHSAAFEQCO4lQOEBLjwwB6 eUEM5gAX5BKK8QAuAcI2tBH4Q5IiyQYx+6Ipq7IujLIq6JIzbGIox2HCInITQLc9Src1umI5yy90 oqcXegEjFTwBwBcbyh80oAJlqbYrYF+j8QZGpnQvNGVg9hlIt8UKkC9geRg/NQODEAkxAEJGpgBs 6VRgdkmvwQAJsBAAAwFugLNuAAEsx3IqlsFdAF8UsAVEURsKbBGHOiiB8gUo0Aavc5gn/2AIewiI hrDIjrZXkakdUWQxhie5i4gykQce54Eynrp4O7AeYQAIgCAGJaAFZ1A0n0sGkiAJpPe5dGCOSTB0 BpABJnAGmmgBG0AFW2AFpjwJr3QHyeQBW+CMTGIVAiU2m5gFWbEG+5kgHcCelxO8wYQBaHAHgnAH veYpIhAI2sw+WJAqXSM2aEAJe7BMMyITIBAgd3ACCLAGajCPaDCuFlAFlTAGmdMD99wEamAU0igU LSAT9ZYDkAC/GcAAX7EABdAGngMrt1QDCbCWsrMCdWIJvtM7TewFQQsABGQaBTFjqLE7kGIQDfIg LreTlELCfrEv99QA+OOBI+mRIqZRMf/NgRAFxC/BoyS3ACqnL/4WTuLUACw21C3WchDQxHFAJx1s Ad47UjjoAGPRWTToExUQPG6gWJwBBnLAAhZwVCrEVE3nBmC5hEyILoYBQohRAVAmGlXqCJ+Bxr7z Qg2AJgZwpzYQAIXgEoWwcjzb133tBguAPiCwBVsgPxNRqH87KIDyBTlgA8GBmIZwA5FtCIw6aG8y aJW8A8MBeNzBA91xyZg8Ri3DHlHEHd+xAyZwCaLKuY5lR3nUynn0qrH8qksAupZlAlRQAXqgBx1g BRniAVASbp7kJaqlWlWwSuFmAmjATBygOMVIFHpwBs7HAVKKAd7ca8o2FPkJNzOCA37/4AeolAHR nQfGudxZQRNF4QGwkjZroCSdUwlIgAmVcASZUN+aUAMIcAkM4BM08SQSACKnUivMVM89swlagASa MAZMcAJhcAnWIk7qBAOWcGQESZBVrAIb1MW0kzv5BYEJ5nCC0deAcWAQKaEgIdQ5vHETsGIvsYIg 0YI6yaNzveIvdwCIUAAAoAAKdmA7Ti0UKRgcqhqBJAEv6ADC83MacIpDF6deEAcNoG8U4KevEUgI 9GP9UQZJmBn8QgOWsbVyoKZbK0FXPFIwEDAQhKZBNZUv0EL/SScvpAAD4DBwIHEt0BJ7zbN3zrOB pLEhIZi2cScKIciD3Ni88QU4gMiP/7wmj+xojNqYblUcyAFo3FGpn31FYTQElQBG3PGYKPMDF7IJ umjKnmtHkTVqtY0HePQHsDxqoWsCfyAChGMCYnAjXDMWXqVNAZ3cb0MId1Bb3bwEUgACGUAIGAC+ cjcVZzAHSsBc7Z0Bw/s2MwICazDsvhYCC9ADYVCdHIAFptpY0OhV1qdvxxd+PiGdUsAESJAJnJDu mVAJ634EgyAAl1AGNDG8W3CMFKCGWJErVXAElaAJTIAfR6AJmoAfT2BfK1A7bqBO+yXWBwFEGjAb W5ATmhKGGzsYLscYEycYHq7xEsJwHJ/BHpviT96CQCFILM5igWQpNQkULQZ2Oi12B/9gAz7AAzoA AOH0BgEAAAtLAi3akA2UGiyAoZ1VNQ2gAgAwCE6QBKdcAlbwEDjIlrtsBU9DBR5AUk6lFiLwBGf5 KKeRxOpyVFgOZYDxGFdrGRtELxLkCGEGU4aBxjrfb6xBAgcw9BraYhASNJ3FoRqq5x+iEyihABFB qH+b2G3g2DaAyJId2XexyICoBXexV5UMiEbURT1QaIgXyotXyaAdWJy6eD1wRWGQaZpmBiUgBqMO WaErmkogCUvwB2igBJKValMwb0mQCUdQAlAwCBUQAgwgAkwyNmkQf8Ekj3bQBMAGCVhRJT9CCNcb TBxACWjgi1pRAWoQCEuQBPF1vJX/5GJFkQWrSwjQ1hXEe0toYRQfAAEeQAjkKgFrgAaAgATyjwSc UP/sjgRi8AVZNwAy8iMAIYXDhQsQLFQgeMGCEE0NxYwBdORIRE2AaDTA6GbFxhVvPNKgIUAAgRoa diDYsIECBGcHePA4kMCAAQYMbHRy08jTCGSMfPz8ROCAgAMNWrRglJSRJxRMGemAU2HRpwVVH0C4 0ICRAAgQuigF6+bCA7IPpiqYsKDLAQMHfABoAaECIh+ffDBCJMBHKL48BowsYGMIEB6BbRQ4EIAF I2QFQrRwoEBAjR1GwmgpUeIJAS+iGFXY4CRzEiciUAB5RMOBBQ9WrGioUcYADFF2/32O+uEjCJBB L3yM8qEj6Y4vFcqUUQBDgQIXDlD4QPACxvHlnz4hX67AAQBGbmQcZRHiU6tSpniFkJFefQgBjEhA cFChQtUBVRIQaHXqlA8CCGz8FwKIIYQYYsACibjhBB6I8MGQExxs44YiUAGlEhSsuEGLHTYkgogN d+AhiB2IKKKHMIQIY4cwQqGlFlRQFEIIImKkkcYgwjgxCCGCMEEMH024hAkq/jDBBCWUoIMMMvCg QxI6/vhDCSWPNCEJKpww4YgxzIjCjAEqgMCDDAI5IwMLMhABDT44ACEDQpq4IxAPLACBgyyyuOKD Dzg444wsLFjjCjYtuAADKZowof8JJzr4IIM71DhTCj04yACSJtBY9II12LxgTEgCkeIDC7LgoIIM KsCiISRW5YQTJHzcpI1NNhFjk948oAADBjDwgIsQJLDAAgMoCEGLSiqp6IiGAGFWDEDGwOgikAJj BIXDvBAAWwE80EAVVjbwoIwKWGhFFVVQAEkBGlbwdgRz34XXhwWWw6gFeO9V5RMIWFEFgqoYUOAB RlRp5YEFdMDXXFsOWIAmfkOpwIAEEjjgE4K7WuAARGwgAQ5Gnrn3FQGqguDdCmpaACMczGXlVxUK SIEAc2HJrIQcEEjBWwU2oGIKn6no4BRVYlFBAdCcSIMKEbZALuF3eXCA34SFqMD/AReac8ABc105 pIwXRFLAXCHKoMCBdctlxIEHZLgGX1BCQA89GUJwxdyC5FLghSduoOVeVgioggAgnDZ3gAGE5qGG AWIrAt8iLBhACy2IEHsHLXjYkF8tghCx73tR2SFGHFHsgcAwgvjhxBO1MAEQKKBg4ggmPCDySCnp UOIMSZw8w0jboZyigykmMoMJMVwYACsQCLkDjZWqcKKJJvjI1U1CsliDhQSckEINDCAIoQM6lvhj oF+uINSCDjRg34klkuDgzAza9AANOO1YwoQzOsDACTQ4gMCYCCEFKTAAAhTgAAY+AIISNCQTmUDC A48wCBi8wA0wGIQhKoGEI2zC/1iaCEMSPDAIA3wAA21AIRKOpQkxSEQizEoWSGgQABqKhAACCMAb GiCZAgzAAx6AhSq2sAGyRaAWtiAYC9zgBhrwQBWgGFgowOKJpKigASDBSB+WsggbBBEHN9CBD7hS twm05QBs8cHFDqaKUOjAjT7gQd1CITEDIFEVOmiYTBDWipNlDA5/tAC/WrGACxCgFqpwxUwi8C5T WOAqEggBKBQWAgWMoBEjKJfmbPaFRjRCFblQwUgQMEoEDEKSuvBC0QwwAPb9xRFe0MVPdMAvEO1A jPBAoiyf0jhVDMAF0oGHA8q1C1VU4WoCIIEX3iWAHaqmXDpwQAsEYK5PwA0Agv+Em3oAoAoktoIX AVhABRTAAH6BggAWoEAmZzIAWwZHFbsIow92QIEKNO4GsrHAIWEBhApQgAdBrEUFbtCGHphrFyJw Qg5OoAV+LfQEQuvFEDQkNFUI4UNa+MQOdISiDeHoRFAQAxQkYgItuMEDZ6iD75SUBClI6QwiOAMZ lFCHPyRhClTQACB8FAUttIEFCKhACEzFgQ+wIFgcuMMczqArDFAqA3ryYQYyIJA9xfQPeoAAB9KQ BQxgYH05sEMgMtCBlSxwgWcKRCAGeIYpnMkJagDgrhS4hg8wwAmTWsMvmLCqVWXCVWIYxCAcgTwt cMIXfHUVJnyBiVWVgAIeGID/GFSIhIZMRFkNwawmaEjDGWJRhlekwRscIJfGfWI5NFABwVjBij7I EG0Da4USmfjZJa7gKOBhwQXq9otfgGA+E3iFKhhggC4M1wAWK4LEkDufcEIgbMJlS93MBU4GVAC2 zD0AG9jQhUWo4hQsANNViGmDA1hAFYesRQQg0IK5qWIWiHSAF7wwAi/UTZmgkG8q3cDN+Y7AvyNI gReEkS8vBPi//p2vFyxRQTAE0QXK+aUcghgDBXBkBeXCxXIqKAdZqGKarZhBtlL5Llc8Jj5oa8EB QpEvuGXTXC3+zoAfwc1HPCIAEGDBEAiGTgrQs3GncIEBjmMA87rCAmVYgGzK/9A4HxxncLVwRhk8 IOQK1M0HiwvCu1rhASck4An8QsANblC3hW5ocog8gZk1pKMUSU5FGwoCFC7RBsQEIAQGSMIfencG KQyAjhhYAAOkYKSaTsEJHijBES4BhRIcwgGUHAADRMABlZgQBCDYwx3woAcQXEAGFuBDHtDAVQpk AA2i1oMeZCooOzRD05QKhB8EYYcMfK9Oa8AACAyCgVpfgVfoBIGg2ASBrsavAmmwXwa4IFm+RlAL tiKGEPzgqgge61hIwAQnFKttK3BAA0dYlSaOsMHKUlZVmpWhDAOgggCkG4tuUMDAqPEGGrjBYl4o VyoDEIFiqGIxqsDFulUAkv8laoQj4LlACHSrCt5SoAsGWEDdLHDGtiTAicm1uCqSC3GS1c1fEKib jk8hsYwXgQFrIQAiENEFhBUBAhN4QAUs8AlQkLcCiJTk3UIgM4vZosUO8IR7G8CvAnMlBKoohgpU INoAxCEFAXhmtuKwLtTKNwCjdYEAXhDECDjgDRWkQb9jMHAHrKAPKCAYDWCw9gI8kQX8WsG6acCC 89aNERdwALnyZYMbrPgTc2uxKVrRYrip4hnGUIYqkMGLBUBgkaqITY97PABXtELysrm5K4xTBgZQ wAKN20ENPMCvYclmJsNCpHF2oHFzGQADMg9iDnJgBX51wANtOMEJ+IaKNH//SKMW3ZAPJLc5JrQh GYUIgTEaEAK7+uwPVuj8xDSQAw3QJAFW+MNNRZABQGzCBGZ4wgse3YAciCkLSbgeBq4Q7CzwIQMJ tAAG8DCHJfipTRygBK058AcnXAALdziDPFiTQFgCO8gDQgCgD9gDUuGADsCKLGiCPNCDX0CgD0Cg PQiEJACBNfAeC2ABpGqCNfCAZquETBCDSDCDFYCBIzisDcqEShg3vzIsX5hBJBABA9gEygK3cDs3 yqIsdwsAGFC6dlM3gWM3bmoBkDgkGugEgpmBAOgDbnoDiwk4dlMNCzuKuIEbCbgAJOKthjkABvC4 mJiYBEgjkzOAMzw9BlgA/7TbheF6ACS6AJC5AYq5OAbILpU7gAc4Oo1DgEBjw3/JvBvIlwvoAxnI OURqsRYYMC8IAVNQhWvwAgLQACpQBVjwArhggQZQgUlEBVUggpvxAjcIgRXoxAJ4AQN4AekQgH5j gRVoABjQuro5BEdQgPAIgUP6hBewxRkYMAF4xHxRuuVLPXMBgAIQAKEZAjdyIlUwhRYgvGhEBlUo hUdoQmXghQbwF0SqgWGhAAYQlwgQR3QyAA/YgtRDGWeAgHLZAXO8xG9cgG+sARHogCCSCRtQhSEg RFdwhlwJIidIAg34RGDgAQ9AABEIswzZgdxzMxExs4UCowJgBvQohGzsA/8uQ5o0mAIRYJ8MyAIn yIApWwAPmAINEAERsIIjcJYgeYK8c4A2YABHaYZmIIRai586WRQ12AMOUAM8OIOtAgEF4oA8uJND s4A94QAO2AI7CYRRSyBiIxU9wDUP+AA0uIMm2IM2KRM1CIQ4IYRLI6oLkAAO2Mlf8IEXXBWJsBUY cAFHuDa+QhZNQIIZ9AUapEErUAAEkIgxiCBz80u5RAKMiBZpKUIivAg3YIFDWoG5Oy+NQKQ+WAHY 0iJVkIVWaAUisMxW0IVoJDyCqBuFaAuaCKIFSADDGQAzVKM0qrwisMxDuqOJEUNViICgY4Xh2qMK OICUY4MFuAoSeJdnCAX/U5iJLliARSqx85KA3DqvoysxwPMWdpumWhAAK0iCEvCWQUBGBZCvArCC vjGCE0CAAlCABhAxR5i9wHKEGAgis5mhF2gw7woFULBMfqkFrxE9Z/CWrKGB88IiuiuGPsCF89KB ApAkHnAj/CCxVgAAzuyb5TgAfmGBCfi3U8AVCihHD1CJlTgIChCXS3xFZwCTECgXG4iAlpuJznss k1yxHdgCtCsCDQgiI5CCDagb29MACvAcRCqCg4yQEzg0hUIhy9mQG7CBR0gGXmCvQmCGAEC+DrAC J4DSNEiCM0iCJjiSJZAC0SuJk8SAAQiDI2iDHHgCF4BGFhiEBPgA6QkE/ywgqg7ogPa7EykQqzpR Sl/jlUk7PyVYFBA4ASWA06bqqjRwAiygABBQgzw4Aw7ANQzIgjNwggpIyivIA0kIBDwhCAv4BYLY QAsIgROAoLT8AiTYBAcYBC2InVYhwbmsy7rkBL/ahOYIAxgkN1XxQR+0rduCRvQ4ihUou6NICBmw GEZgAZ4zREkKgT4olwVFu4R5hmPlTBnogy5UhQvggowJw7ohzYkJwz3yF4TxmyFABInxsyCyAAiQ JJNruQWAA5VjgzAkzgMoAjsyFxtgQ7pzhcSc1hYIAGdkzhZrwligAfk6JATIASawTlhwhALIrwJ4 ghLoGyKwGUcQgE70gv8BeIKeCqzeCCLlyJtVlC54mQVdcIF5rEQhcEYL0I6+IUJ2cYXIAJlWIFBV AAIdOIwzAgWpQcIWi8K3aQEWgEQeUAAKQDvLSwD2MckNwADPM4h+wk9XKIgNrac7cgYTZYBgkYt+ EhodoACEOYUkqAJzSYIOqBtzDFsIEIJUCIZ3CQUKEIAcCAQMqIEkSAIRqAIxKwBe4IVhGAZjaAG8 NQYAKAQZSJONdIIziII02D6pEgEu0wDb6wADYIFCKITJKIO8gxsHEIAquIAKyAI0CIQ0WAMpSIM9 yAMJzAKxUrj0yYDSyAIp4J73SYMMkNszuIPr8bxGDasE4gA+CEA96Cr/DSAgLMCAXxiVPci1rggW sXwsD0AIBhiDFWKCF/iCtRyEMcg2w5pLFaqEVllVV8kELYgEB3AELRg3HjRfuTS4FliBrmgBcWSB ruiK9WWvgkgiSWoAN2iAWBgauvG3yWwFs+sDFggPAeZMuDmKugkBC2gYiJO4f1kAC9gjBW45CzWA QxoCBW4YBggi5iocbl3Xdp0JmYA4C4gAHlgxVeDNC1CFV4AAJyKBCygXsVBEuDkkW3AFWCiGhykB KEgCb8EpkRCAAbCCKOgbP5iC15jYUHoCK3iC3ljiGthYjnXPIKqG40AYVlCABRABn4mGDmMFWIAF WxAkFyCbd6wBb7UB/0maWRQYmVxlgWuoG5+TARg2vFx4BVcgplRggAS4TQ9IgCmjJwtFUQstA0SC 3x7zgE/sAQ9QQzC5APVqAWd4JgNoOeZtnFQAgboRgVzZAgpIAhzYAgTgJQpNqCeVArlNABJIBmNg hkcYBmiMg1VmhuMLgQSYApvKgClQAv05tG/0AI60PQZ4DGbghT6gIYxYAQNY4jYgiCxYgjm4AzbB gDyYA0FIVADCgE+xAAawPWdWKidFVBHSgzwQhEqlJ4BsArk9NFxTVBCQ0668A+wBgQ/ggl+AgARQ A+FFJ/9xAgOCgGPRqTZwATd4sBdQAGOBoFZ9ILns3sPiBE1ogzCIBP+tG4Py9Uu+aoglKgSNcINd LYT7LTgLc4M+sAVbeLta6IMl2tmjq4VjHRgiKLieDY8+KGC4YQEkesV56YIKQCIIIK4uIE5ubQCu PVEK4BcfYMOukLjqQhhXwMdW6AICaNeaYIBWAAWUaa5yaYVyRST1eqIQeIZaSLgZXgBvwWNW2IW6 AYYpMIEpuEQ9sIISaIMnQKgp+EQjpkcN3YAo+L4nWOKNrJtfqoEacIStU4VJ6AARqAGT3QVnEJ4p sM4vhoVdSGtzGdlChoXjKAOhsUxV4AFrkc9sysK6QQR42xpbgAVXcAV+IQDUg4WaQN5gaYVG6ifZ oICuttAMYB+hmSfL/ISFLUjabyzXfVEFXUmjU6CABdgAftGBGtWAKigCHfihQcuAHDAX7ikBE8iB +yABZDhSXkiGIy2E8O5bYwiABpAAklRnD0gCMqCD95Ypm7rB18tCyVXSOGBlP7OCE6iBFugfNEAD DCiIobyDPKg1LBCEZrADAO8AnoQE0uifq0yC95OCLKi1rkjK83sfKcCA9MEBS7mDO8hdsESfMbGD JOAVNEiCDSCUBYggRaMg7ciaPmiDDWqVB1JouuTeSmgDMbiEQahxF3QVZWn/tiNgtwAYT8EUzItI ciVfR1VILWGgIUsIALujRpBoQim3wgawLVzkTLyrmxngvIZZAEn6hJkItAooFx6YAAgYGIwzHEJU hT6yACQiOQpAL1WYhi7QLoZBiEOyAQggCwUmxCIAkxWWAAnosJsbPOa8AL3jARG4BC0wA0d4rx04 4neygklnAi3IAUeggk8MA9d4gsGugSeIAs3w6ycVgSDymhgYBA0AIlXYABGggieohpALDSpYMSHY gGp4Aml4gve6gdi4RONACHNR4wE1FxkQdA8MxgHVsVDAMZRVgItzAGeoGwSo0K4aAMPbXClb3BV2 BgPQALkVgcaxgfhLBVXA/4Fc6aqkXZlEcobjToBcSQOzVoWQlBlXWNwckAIK6AB+WdxPfgRjSAZk mGVjGIYaQ/hZ5gVjwNsGuAADAEifqb5zp9Ii2cjlFfSODoEllXjJ5QXEUIATaCo7AYFg8ao7KbZP IYQqdYI1WBNfawJC8KrV/Z8OMBMOWJTFtZ8lWIIm0IAtCAEbqIVQmAY7aAK1UgMnwEA0WAO0KiBe ywAKIIgyAIQSQM+suUXJcITnfSAXpEFVtUsaDL8XmIEwmKwIgiDAnCzOooEszpq6x4gFoAG8z44G wEdJ8oIZOu9SeCJV+HsmJJjWkiGNYAHA48wI4BcpIy6IKxennQBHYgBzYf8DC5iAPaqJmGCAcxUW D0Ci0jzNA3gXIwgAqU6ApHYiyn8ARzokHjj0EosASJQkGig8V4CAQlYFZ5gBmRstfISyzANRHIuA I6OAxtFacbGAaHIA+xyEwWbxunGAVVzFMlhPsqEnmYG82ACGOfcAUzcAQkyF8D92ZPdWZ7wBApCk VriA9h1rVTgABTgkEmgAAzAM7q+JpuYZoAEIZ65UmapQwUIFDGVUwdriwUMCAxZaqfKxwQMCVc8g IKRAgQErVTYqXPCh6lQCDAY8nFLl0gIEZ89U7XCiQYOBE6p6ldFAIpmxYciYJWP2KBkvXoWWPuLV NFmDFgycWEniZIoTDwz/LCxgsOCjBxEGWgRYKsNYMqRI0SYLcIADGjRZMGDIYkIJmSkfQHjokCUL BwwJMqDJwwFEIMBVMHhw4gSwBSlZ9GQRIaUJniZn5mLIcINarVBFmi0pfSeNEhG/MHDogIHBBwsg LjC4MOCJAxgvFDjo/UWMGE6ZOPnSNAYJJyRIMikf7gvJGBgKEIgZc+SIpkzMNV3XVClTixAtVqzo 08K8efLkW4SXEYJFCJesxI8f71KVeBaMVKVq5b9VKf4xEgKBBRJ4gQOwqFKGAl4tsIAzIakCSiuh uAQKAwccwMNJByRwgAEGKOBSVwYoGKIBXu3gUhFsEMDGAV5tNVAwQzDy/0ktqrACwQMXqPLKBRJA 4NIzBariSgg6qEILBRVwZAF8IT1RjY6mtGJNEda0coAzLYXSyhD/DXEBCxWAMQgYh5TBwkAsvPDm IRvsoooLDlxwAYEUEbHBiqg4AwGeBYZ0CAVHVlBGGTNYAIpLPizAlUuyfMIIECG1skAAGkWgAAE3 6GDDDTnyYEAFOaoyhA6mDFQLXR/EtAAGDHkEU0xF0NRBDRaY4tIpKDDCqCqtAMrCiqc8FAEDW0gI gQcZFOASLULsYCtNBhAA1CNDFSWUMbx0shQzADAzDC9FQVCBBldh5ZgITUJAwUMaiGBBIQA0YIx7 xhjDTCHJDLNvHHEkkP9HHntwkMEZgCzhBxMYQACBFEsIosEFFnxwBQeH0XWFFTVk4VgSadCVRRp8 ZIBBGmjwocdhWSThwQIFVBgKNc34EUYeJiTAQQ45SPHETTVk4ES7GhgyCAKDfIFbbpGcUAlxvmQC SCXKEbecL1Jfd8kgDkTywg5HVDL2c2IwMQZwD7PwMNttt93Cww88wEKOoFzQ9gUz0XLnBfvd93ew BgrOQi+qOODCgw9maOp9rTyQwAAJLDOhATEmTpErHIVUgVcPSzAQKC4esIBBGRrQ0t+gWNAHoDqy MAEEtgTeR3zz5XjDIWpu0EEHG7R0yiSA3+cDBagIr+M3HpThQg2EsnD/wZwU1LBbBRSEBI8LMW2x gTMuGTDQCWvyHYEzthYRPCuHIopoo2UsEIEDjLvUigUK2Er/AQXo4IMON3DoygAM0CXAEcECHgiR BRBSAR1tIAEUYEEEIMCoHhzQABAogOzuYwsdbGArFTBJKDLAEQ9oABIuuYAHAoEBBEjoPs3QgAIe YRRtGeMaRUkKMpZijEf0axjmgoAIHOMYeYlABB64SFg04IEQFOIRATBGIVqQFH51y1/dikMV7HAH PCghCUsYQzPu4BoLBCIPhBAhYzBAmYNJwQAUwEASkhBEkYHgMRnIQmz2wgEEIOAEJUhCAkBQAQIM QRnUOCQoTvCBDOQg/wo5sEIJTFCCKDjSCoMYxAswGQYkDKIFDmjDb47gC04kx2pRe44muBaJI1wi BIdzBBOYUInrAKIM03uBCwLQAJjABG4Q6M0DLAC7BzjADQ2gATLdUMxj0kABAQiAA/rQB/WgxwEN WEF4COQewRFIAhGAjwMW0IXKeSVFFfiEDlAwgQWEKAHuTJEBFBciBlTgQRV4AAQM8M4FwA4CB2AD HBbwsK5E5H028MEOnre2B1QAbgbp0QVkIINAHagMh5jEBoIYhRJMoQPVuOiaWkCBb6jLClSYxCGq 4QxnWOAbU9joFKhQg+m5wCMboMIUclADBWR0Eo4YRA1EgNMoTKFdzv8oQzXWtzsqiGADFCjDJKb0 1PUZpDeIEmigdKADEiDoQQ6IIKdsgAIU2ECsOjjBDQZgEAvYQKvOQCIFFEgBAzi1iE0F1LsewpgB 1ICE/FsACjWQgIRsICYeKJMHrJCFg1iAAWdkwQc0wAMh4KCOGQAALwIgw6LYsF9AQYYbCtEtNzCj E0B5wARIKESieWALZbhIDeTV0EJ4AgBQbIG+HkGupPgLKLzAASGcgIY0nMEqVGCMBwITiB5okQFr wIMd0JCBO0pBuEloQiAC8wHhokENWABUAoRAC9FISwcIGKwF4GCKQ06DGtPYASQeWRUrPCEKQFNe BXrjgBcQow0saMH/D47whTYcQTuzdE7WMnEE4LzgC5dwAAsUcMlBbGITA3DEC1jAAgcoYAYBQCaI 3SDiBriBBm8IwIlPfExmgrjFNPgwiJ8pYxnTgD3b5KYMIjAeazIARQzIUER6/KF4PipxAmVbPXnE FQZEZJ+o/ScbuiAkCLDzx7SCwAQMMgG51ZN0cmOPBCRwYwKxwKJhmUIJ/mjSSaC0DFsQQQliGcsc FHESiIIGFaLwB6wwtQYxeMFrRRAFE7TBEQoI6hOe4IigTsEEjjYBUychgjh5gApJcHQSmCqCJ4Ch DA8pAwU44gAGuc8BYaZVBOPGowqEVaxjtQEfcxCjHq9EBBqoggeQ/0vXXRugDCvxgJOk54Q4BjBE dPnxR+JZAQNkQCJKPFQNPBJEDMQGWR/pgAFqUAU4YIsZ+8pWUdISFKXwwije0hfpGBDEIbJLBB2w dVZawK8QnKUQ9Q4AM5ChlnAl5RFVyEEck2CFmzjhBExIVwma0AwhaOADasjDHZqVhDM0IQka6JkU bnLpE5jACiIYmgZ0MAQh8AAIPNgBAggw2Hx+ghqGPGQRenCCNgDc430NUQVW8DAXDEIBLXDBCwRQ AEcYohKXiIQfloMEXxxhE9d5QSQg7AJHBAAGvfkz1O2kYTm4uMUNUDEyWdz1GD9z7AFQAdrR/uEV jFmbd6ueQRLnIP8gR8RD7hwd6bpidziE6EEPeBCK+v6oLrgIDl3gsj3PRWtlQ8CXcoPAf8Ms5rbD 7yMisAIlo+DxDtwkXnGOJUepkpXtDXUKMYXG5Z8QCUUoog1teAJQg0oF+jpCBFOog6PrYFLRN5UK j+54EaOtbiPG1QEVcEEZ6An5t1+ZmMRcgAIGAKob3ADWfMRBAnoMkQR4oEnOuHYGjHhEj1Sv1yuB XEQqwFILvFEwNWDARyrgAUI4UANWeCNOGJCBXGMAIY7ZQAQYgAZcFmYVBVvwgrYARTLEgbfRVjIU gngoAOc0BlYUERUQTRHJVgskQ3vMmzGQ1r4MwzB4mzEgA2YBQPX/gQrHyVmapVkOpJkf5QCa+ZEk mUASYEUkOdqgRcFjiEAS5EESdAAOmBwPnFz/2EABDAADUJkOuFwrtBc1/McJ9JWvgVpVsYALCMA1 KYB0BMAXzNImDIIYIIEmAIIjyEEkyAEuvYeE9QZvVEANYJILPE8LKMLY0cCKed16sMcKlBge3qHY vZggwpgbwIfgCIlBlI6RtdM7/VjiOMmDuNMATCIlRo7lJM6qER4bbGIXeJncPACTJUANRA6psE0L BEmYSVTbFQhHlE4QTYFJPYQTVJcRDVsS5IBjVIVVaEVGUQFTdUBY+KIIMIYTwN5MhQVVPEFf2Z7p xZTtTZwTvNvt/9VBBTqGVpBfBNUT8pVBfsmAkDiA2vCIA8hNA0SfWFUfAlSBOlZBBiweXVXA2iBE Z0hBxr3bQzTJBIbf/jkJA0CEAYAAAyAXA4DABmSFB8SWEUkBXSgkCTXLFChBDmhAHFUBUjyCuADA bnUCMxAFLxhDWTADLwyDGxCIGxwAWOBUUT3EQ7ybCNSGG/ACvYXAbW1kIZSbDyFDAHSkJ+iLViFA ASDAJOGeUEZBHRRlFCRBCQilEpiA5jkGGlygE6SME1DBFgxNcS1BEniGVvFP/9wACvQPAowFBJBA K7jXNKxXKxSBFFQQqDVJAhmAD2ihAjRAAwhAJIhB0/EcXkbCCv/shgvkwCAMgAgEpgFAkGG2QARc wDe5QCSwh2O2gHtIFH04ZmTG5H+1AHxcpmMa4mOyh4ZF5iqSWSLWkyO6o1fEHWk6iEHokzu9E4iY E1f0nQGwASIQAN+RDtuAoj7N05ZxxT21gASAmSpS1IEoHj2N5lrNlUrq1Ud0xY8ZAHItp3Sq5Ltp QA2cnwcIJu/wDrukyyzaBEuKnk1YgRO8n5PcyS8dylM5iUStDduM4z2FU/6UFajsgA/gABxEhErE Cz0mgAXcSQt8H3LxzgEZhKd1XpNsgQbQowewHwMEQhM4wRbIYxBZXANhAF9gAFVkQBIwQSA4wRhg JQnYZLkNRUf/+pAbFAVNjgtMuocbDIBBUkEaVKC7wZsH8EiLugcvhNZGokVplds1oAUvkIAxkMAO 4ACS4sAUJAEl1QEl/QFR3YQVGCU1dkAa4AEdLMFcDBsa6IFHsIZmVFwGgEgCuFpb6YB9egoKWBAE wAEPTAMUKkMzZAM2bEECIIAFDIAW7JQAKIAAGEIbDIIAKIIZmIEiKIALMOYLcFgbVA1zKMfYiEEJ UEAEVOqGKQCmfkEAKEAz4aEzYeqmYioNLABddkEDEAAPzGUDFMA1FMCLqUDZXYMPvIEKfAIydEIn fEInMAIyMMKAGAgA+EcR4KkzVE+G0JpXFAD/+IAPfAIP0Fon/0LAJyyCkTmJAZjCKRTBEBDAArjm JkYZAwgA//jqV3aBluGTDzCC3/2XDAgAIzSAZBJIJ4RJLCjABRzE85CADnAOBPjqBTBGXF0QD0gB AB7AVwbBDugAI+wPBT1QxeRAtrbCvhbRYYUAChXBKZwCD2jAuznQnTTWAeka/FVABNBKRHlSOKEI iCiAQH1TpZ5LAzyIAhyA9HkKEiaAAMwasv6aREgABD0MVxzQcsKfctITvNgEqXSEROKiB9yry+TA EnrEw2TAEpiACARCx0mBH3RcuRiDJ4AkSJYbL3wtD5GWaD2CKoYAMyDCGaxLM1LBuzlGB8BEA+RQ C0BgIXxkIf/4EC98AkcGaVAYAwCIFQ4gwBNgXjOankyRkBQInFARTRmgBhBSgQdMXBD2YwdQAIei AQewHwaEGgGQFQFUzpnyQAEELJVBQhFQQygoQytkQTbsQREYQBtEgiMMQBtoQRhgAtO9XqGCAYdh qgOswAAoh/EaLyYQBxMgiJNswoNJmNs8jwQEyd3cDQQIyQWcIkUwwsNQBCu0QIv1gY70QSccz31I JgBkkAYhgHEiKwRQhPBMw7KFiI7spjgBy9/UwockABwAVLQqifCAQtvoCI9AQGKGAEWgQIGUL+Ao wwXATgiERJmAgEsIQQeRRAjYyg5swBZYiPluz+UNBODcQO//UMAVoM7fDAFjsOQGXDDkWQDOsYA3 RhQLLMAAEICffiWa8g8B2EmlftO5sCymHoAADEABFAAB5KwALHHlxNO51FPcMUCDKEDgUXGvydOP CVmv/Zj7dAUJVcFWzJVBzFUHbAEE4EAP/BFONFY0JgAvYFZTjFu+MYMnhGQIZJZoxYEMuIEM1CQi OFrbnsGeTUEazKgTYMAGHIBSMEOKSlRohdZR8MI1cOSQEgW5EEAHUIUVWAEscrLHNWhjNK4R6SMI YIAIZEEGpEwW3MT+LSgGxCMFcAAqewAI1OV0za0/2QAPqNVaccQCEIAOtEK28gAk6ADOCgEpDQcZ ZkLWMB0m/31BGIaHA2hBKS2HdigdElQCE+wUC0QCJiTNEdyhOJ+YG+CCKnQCMsEvLtAqrLrBkTSA CuAqruqIrzJCJ8AHAMwPDYRAAMBvAURAas4TRbSCp4hcSOhAtxoAQ/TYg+gNCVDZDQzELlhAAnzr AcyNkoCCr+gADwxEEXTOkZBJkLgHRSwCgWSKKiADgQCApSBICAzEW1HBfWjAFjgJC1CEDnRANNDC SSSsr2qVDmyBE9RBKvBHFdwr/DLATRmBjuAA+XCISHTAFEABFMhRInYElKAimYTrEROxDnNlD3vT y54L9GmIAQgAApAVCqRcEUdEiFDAAiRfXDOAr7VT4N11Bf/dtT69gFuzpigOQGBWogFM4l8PgAas LBV7ABw0RbmU6N4OQxP5UAs8AhTxS94WQr5VARn8ngn8wRmYgCCnQRARwCPIm1FE0WWD5A1NcloQ qTEsguAGkUlt8iYTjVNRQAegwRlkgDNw6CxSwL+SDBqs5XShcgZIQQecDAQQhhA5TGM4Bhb8J1s9 ykEYBAskUC63AiiIRhFmDSdgQvIuBykRhxY8wRcQw5qwgCEsx3doh3tD6nJowVfBAC1owSZoAqzO 2NnJWH7r9xtQBDr/930wwn7TgCrYwiDioSoUwwrQgBuURwjMxAEUCJ7k8zNUjJH9mK3oAOwcRKZk jkAdOJX/QcD9tAA7uZMFDIQPGED/wkgX9GuwqJqPqAJX+IgtyADbSEAITIMqmDQCq8KvGgl+QMBL qwI0OOl9wMIGHAQEEIEqQAIV1AFP+wEVNIkbsZ8I4N5OwK36XQBFDAEV/IGCyFFcscAN8McUkIGa k8HLxBX5GTCVNcCHnR0B4DBaFzSzFkAD/HBirs3MEoASHgAC3IAP8IAOjG4RF1tdPwSK5HWIQMRB iqKjQ3pfcZ9bi6IGGPZtWEEOPEEVcDrQ3MStPUHPVEGiIcAwUDYAIMW4jItoGUMnKAVlE8VGlttR 2MBm34US7DoZ7LoSTMEf3EBR4NZpy5sOeVtHJsMkl6C3/61FDUAlVLIWPsJFHpwBBhxAEzSBFFBA CCx3NLZGB8AFVmioCThBa0jBGaS7Vhz3Z6PBsTXJj3XG/r1w3GGEyBmB1CTveAuHdkQNE+BSCyBA JWDCwAuHNbt3v2dCCVQAD2CCFlwCfqcdf8Nq2qkdjVHDOeMhxlvDgcv5hx2JH76YO9uCehCISejC IV4Ao3AvVwBtBWy4BTifjV/AA0jAkVgAiJBIipRIF9gAK3zCAkDZAXTBBCjJR8fTBHyOKqxNfCCJ 3BxZSRMIjwc5gVhJCByT7Ej1FDCEggSBB+QsRezA7RkPlWeu+lWAVJtAHehINDTVQRDAKfTA7YVE THWAI/+CghGYABnIWccBG0OD6tnBAIxhagMYHwiAwBUIhgX9MHAKiZ8mcTnpABGgigAYwKDbQACt T6Mf5Ex1vuePYue700xpeufz1STeWqZ7uup3eueROiTd4ibngA3kJDP8hL4Mhb4wQwjEuo/uEEee 9gKoOWj7uprv+mfbFhN55L6ESyGQFiPTum6NyxNFsgA8hGvBCzAGLOJjTOdaQCbzNvbvX3KjQRxN gbunkBNkQHJ7URN8BIc2AUchshqkwVwEpBPcQRLUBpLpU48JPEBUwuTLVyYknDj5QpjQl5gYLMRw QlIpU0EkSDJlQqiRoBEjtGgZ0XIkAA2TJ1GmLGmylar/TixVMQKlqlUDGitUFXNzMoCbnDsbvAnR kkQIo0YvXGCkChSLBw4qPHhwoaUNCBMqQNBBk0EXCKpsVUjAQ1URCwssQFCrNgKELnDYsOmyQGtZ AwYYQLCgqpaFCizAhmihtkUIIqoQGQWgSpWpo0cDNBrBStULEVRUwSrB+IYoUcdU7fg2BZWqH/dE bKjgjAKVP69hqXLFBNqWpFuivS7Nyk+NG8ga2dAwpU7xOlOm3GjUSXIcFQEUQDfZgPoKBxC4/PqV nQuECN8jSJAAYcEBBQrOHkDg4wYBAwN06EAwgAHeu/dr1NCgIX+CGgPy468G//TTb78nEHzCigSt yMEK/yuqWLDBKnKoEIESSjjBBAxLyKEENgoBgBlGeGGGl2GYMcYYXnhBxphkSmyRGReZSaaPLppY gg4ylOiRjB9NMAGOQgIohBlmAkgRgBKPNCbEGgsxhhkUYVwyDrUq2KCDDFTTiwUIKMBAjwwsuECv CjxAA4080OiAgzTUdCKDKToAIQMnskDDCQycQEMEDxIQQYQ0pkijAzSWWAIDCyjIIAkrMFgrhAtC cKCMBDxQgIQbdqCoIoQsSggJBwqopBJOKjnIIIw04qQig0BKxZWQKqGuATdsdWOFFXClrldcW2iJ EV2FfYMxABrAyRUWbLIJp2JsuikEyh4zSgIWLsjMTP8LpIKAhZZCaUXcWpiygAG6ZGPBgiJU0QGC B1hoIakHFmCAgQPYQAQROLxayhVxWzlFtgUqQNeVC+SVwKiWFjlKFMZUYQUXRgJQwYsRvChGFUsI ECCzA2aa5ZERZoqlgEEEpgWUU07BxeUfNHgi5l4grqUVABypsA0nXIG4mFp0CQ4FDE8ooY0bfPBM FMm8AMALAVRQQQEaGojXAQUSyICDNdb4AAIJWgAPAgcWOO8A8w4QgAAb2C7A7Y4HIMDtAgiom4Aq EMi7igH4ToBADwIcgL8DnVBQ5gYdbLDBJNooQcEKEW+whA1LYEKBFRtAJsUTj+R8GBallBEZIyUo BJn/E8jYUYk/euzRhAGYCeFFJJORsvbaV2wBmdoZSTEZT0ys8oIKREgiECc6sOBLMzHIIJAknLDA KAY6wOOOJZpos4Pt03AijT+ckCKDHNHAwAMNvM8CgysQVSINKZZQIvkKKPAgizSygOAChVv4rwYD vrSAAACABDoIwxESkolU+UILApgIEnxxkYu4iiMbqcQYQuGLVIQCE6gYQx9asIIW9AGELTAhCEVI whMOJSYs6MNhGNGHT4CFBSGImGBMuAIbsgKHNezZUWSwv7BlyxYX+NJaItASiEHMFXQpmCpekRZh vasCFlAGK15hC1uEAl9xOQBdlrJExjwDAGayoS0k/9CtwhDlMQE4BWUYk4ueFKZnZnLAT1hAmQKE oBSqQIED3oALMUKsFQ7wghdU0IBWyGKJpnDDIb1gCR+QC2KgoIHFEBmHOHjBOVHbZNQCUJKp7cqE DrjauR5ggQlMoGwKONsrzyYAARTABjrgQRFAUQRT8GAIRfClLwE2jVb8shWmaMUQjmkKIACBBz7Q wQ1skDcE1C1uVXhC3iAnIclxKAkdipyHKseEEnRhRcwAgIoA8AgVPYIZhYCRMeLAotrxohC8cBIv IME6JZjgNf3UgIlkAIDRpVNKKHpEPJ3kTmOMjkWaM4Yn4PklD1jBCehbVBUt0DwcnCADFBgPA7Jw hv8mNOEMafDAFjLwvTSsFE4cyEIWKEA9NDRBCWfowAeckIQznCELehBBBjTAAAqgoUdnyMAFZCCY NnjIADJwqmAcEMoDoEALYUjgEy5xBEwMRCJHOJVEKqKQCAJCE0bYqkfCYKtc3apZ06EO1VYgLDf0 QVgj7Jlj0hVCXj0rXizwoSqMIoMvsSAClJLNBb5D2LZQo4VnSQC7ngGBBBggM1lpCQ8WUK8KhIIV ruiZLboQFzYcoAsWWMoQQhCeC8xQFQf4WroeAIEWJJWN1TKKKXIRMQc0AAK5DcGXciKABRSAMSEw hSoWwYIyCCMmSZmUEfVSBgEcsgGUioMSGeEMBXj/IQAOMMoCSkGzVqTWYt19jBGhst2oTUeEJjTh lxrgSlnGUm5sQ4EOfJBfHgBhmLWoxSxO0Qoh9NKXpygCywycSwMvGBWoCMUsHBxhUEy4CK3gwSd0 YAO6EUCaFUqch3MQBQ5x00NMeII92RmAEn2unSiip+2SYSIptWChySgEAaZwBhOcoZ9/SEKNRPQ7 d8JoRqaLsY1T1DkVOZSdvLgAoxgwBQ9IwQlCzQuaPGCArDDAA/TjQAa0hoENZGCneNgpGlaKARCU yQKHUkL8spAAN2UBCzfFwEq3hIc5JAoNFbjWBaqghRJAAIhHWYBwB2iDG2ghBgjQqqi8uhFXcQIT /xvRRCXMSotKCMEIKTHJStrKExq8MCbEKrVJGOMTV/ThVibxiS12QjUWFgWxbFktTd6llwhgS1is rI8FQoFcAywALAsYiypCYS+C7doCEpBNF/kFRlVQo2DngsBxixDbzLRFAkk1riqKMpRYVCsCtoiJ BzwQGwpQADC2UIF3WzKEIajiBrsWZCdaYIENUCEKj6pBBUQBihGErQJb6MAO0kUCUIjCDfJqAWsY 05bpSo1+G7A4BQzgAQKkAJE0cIMDVmC188w3lrS0L355kHIfpJyZQmgFSGpBiwrLmwhE+KXNgfnL BbMMFKgAhX9p8d8Hg2QWIAkFKHRQN7ohIJoL0v/Agx7k4W4+CEM3MAYijlyid5ozRS2oUTJgZM92 8iIZ1yjEAZDTY+QgghmPUHEyhlGIR7xzdMhgp5MO4IYh21NzM2oAM6qWFg1IgaLoZjcEKiDUChBv ex7gAAWUZ64kzGHPiTqDFM6wBcT7hQIc0ENPP2A/NCRByh3gAx4o8dIzFBUNJiBDDvhzgheEQAYL 0EAVznUCKNChBB4YTADgAAdL3EAgCvFqpRmCEYQgwQ9GaHAo/CAETHj6JG+NNUrc0BJkwGT7JdEF X36SErDsyq8yCABfwHQfBlSgZzhYv/5YMIEIHMYGZiKPBVqig/XLxgJ4YcwBooJe/IbYmij45uL/ a5aiFchj8SDABmgiKahlf7zth4yiuB4jWFSBB0TACXZBFSiqDMAiahxgL1QhFVQhCDbAAJjrExTA A/iNCYLECmqgJYQhADxABKLABKJAFXbBA1BANmhAATYAB6cgNjqgBgjgkAoAfXJQB58ACQ8JOqgj 8VzpldSmAJjOBlBgC7cQv/SL5YBA3gKGZVrBCIoJmcoQYHCuCIhgDGfuwFABwXoOwU4hDiFsFips l4BAPqAJBxzk6RQnB5IgCqxAAxyEEdxJRMiuRPrOEwrhEUNgd5ghDmKMRVJEEgnlNaYADaIBB/iO SFjEdBaxE6YERYwhBEIRGZhEnRaRnsbDApzA/wSmYE8yIAHUIuO4JExCqk0qwCgY5VDKDA/MLA3M RwMCJQuSR38uoFECYQmSAMzUQA/S4AwwgAI64KUqZwyYgAyY4AUuYAEggQnGABAAgQm2sRIAAQqs oAUYIEMQ4AAIYBM2wQ+0UQwOgiDwcQyO4CNoARM8wiNQwiZ2AldwBftuha5KLftcggZCiQY0JicY MpQCwFiKgSHPowEsgFyMgALK4C4oYN5cIfHuAwMUAAKEBakk4AJ8QhUyKwLAQgIswAJmqBbogl7W jyxswQLgQi6mIgFDQDwohVw+IanIZRoe4wAsMARmwhqqhTEGYAMpYwqswANCMAAswBkQjjHCwP8D lsslLIXfNiQKpiBuGEMAygAsMaEENUAAKIMRFmADpsD1VKEXCrEADkkAhgMKfoQMkuAJ7BI6GOAs zkMBZElusJBtSCBv2EYLt/AGvDDl9gsIhCAM5c0UeikNWWYIeGAMDYyYaq4IUAHCVoYOh+nAWMYM jYDngIBtHFMHYE9nGqdoTuAEdiAIgkxFSADsmAGieEGdmMENQuAaTpHIhuER3IkXSoEZEgA5kKN7 SKBGriEEaudIOuFFPCfuILF2PudFXCTs7OlrEG8D1o0BJovL7gdPqCcQmkAKFsWpEK/zOMDz0oAP DCWjRCBP9CRS0K0aOUAKpEADtOQM8IAPNM//ADAgB7ZxDCinYLYREMZgDMggCLixHCunBMhgHAFB AxCgDWZT0MKg0hQCEyoBCkogCD7CI/yRCIyAV6ivRU+iJV6CBmDUIhmAABgjJDMrvipgYAgELxKA MmBhCHTAFMyNFRLvP6qgBhSAYNiFFgBGiYxSf2QDAr4I2BijFWyAEYrA3FRhCBYADhBhtLrgAX7w XwDms0Lga84vYkzBGijpE35LMBijFhiBBGIhGFShBgeAA1UBOWoALOLAGBaAAraBFhgjCKCBAZjr GIbpFEKhwWjhBDQAAJirLHbADwxVFUrACQagExgDFHYgDDLVD6JAAwrgER4BAPISClg1CnKA/wTi IACoo2zSRuncJm/m5lbtiwvZRgd2YL/kbQiWCVjlrcAQzMKIYBYmbDSLQAxDsxYcjGVwjmXikAhi oZfkbQ/j45lu4Ab4Bm885ATaABJ4YMB8R0pUMcZcxBg+hxecCkXkjhGTQQaGwRgeYRggwAkKhQr0 AAdsxzhphBlI8UXqFewKIQT6IEqmBOySoTrBbnZKSy9iCwOkAA0aRadIKg2owAPArBoxoBonAALW 7GO352PLZAFEAA1WDw2ywAOuMQs6KqYC0wOSQAqSYBu50RxNAAaToAYewEIfdAw04UHJcUN01kHN cTZ3FhByFvkqDRCeoA3awA/8gAhQwQgywf+s4mUF3urTXJQGHGAFTWIFFeAuFoAF2MVIs+Is9oIV KABTMAUvKoBdlugUvmgBMs4A0MOU6HaJXMExnCJbWOEbW3IRemaJQCGz4IAA2AAOMqsuxIgVWmEB xEMxuBRihhI8CAs0EFeTBKAGKKOiPIYVNEkFzqYKGIMHCAAAOHeQupQAUNUaIncHcgABSOARkAGO IMYPHsV2PQFVBYAKiKM4XtUTPCEZQokwZUltDBMLc3VuFpNXUcAHKFNYWW7AgrU0x7BYQeHoVqZZ TcH5UqHoHtXA1pAMU3OZmGnl2CPDdABADsADqgBvNOAGIKEHbMBELLET5klzyC5FHjHGpgT/XZ1E N3HXBUVgCxLAf4chSdjpElVkGGpHxWSgBQAgxhbqRYzhGr5u7ho44zQAqDKgyyogAxJlCe7ABJxg CyjAW6wRDTTAA9TMAhIADQLhDJzgAxYPA0YvR/DAUHgYzTJAfyBgAJKgm8xRHJkWCvqtaExADMxR E4Z2aLkxZy80iZMAQZmgHKGAaUsUCSqtEr7AEZ6ABQagav0gCIKACYJgV6KFBiCgV6hjLdaiAQim YBYvLSrgPhTAAZLC/ljA2GpA8RaPPDGlAiLAAm6AB24g8cpgAS6FP7SMARTgLyYlpsogJutFy34S KIHyG/NLB+rlXrwoLWKL0P7Yr5wrqZ4q/00ZgWKMIpAnYAT1JwQYoRMYYQWMIQA0KRniYBID1eNo QJPiAFWJWZOMwQ3giZhVRAWQ+Tns9Ro+QZ2S4aC8wJfjAABiIRYYIZ1QdWTAGQAOE5psgAQ8YQRS VQAOIADoyzDtxm50VdF4tZb4a5jsmZluqVmFVZlSbgeAwObksAgG7MCWdRZiDhQa1cA0Ewh2wJ95 oKHzSwszTP0UgG8YAD6AAA5UhMjWdRjqVYORxEQeEUVmhHbkTu6QAQMMAARIoF6ZgYPrqUlcWhKP JATqiUZ2p3augeySARmSZBgOYPBsVgTKpALuTAlGqgmoYFtgsnlSCg04AARoNkeWIAs4AEkDOuAM jnjHzkCGm1FNMCAEquBHMGSLtxEKgkQDJqcEyEoTYFAMmJYJuthB43oMoEADRKByHFQbS+AGSgAK zGoTXuAFLGRqwyAH/8/aTBaAahogtgohvs6GAX7hCn6BG64ABDDbLyoAK+5Db5XNXhSAywYgU/yi lerDbDPrLrJCLRhAP0RAbitgBPc4bgnmjjNrSenYhNRilM9lAbrgt+filNdCXvZHPNgiAlpAPILI iFqg2lY78VrYKFpgmJOZGYb5lyelBXg5DtxgJ+DpFI1CmZNZV74bOH+LBlTEu5H5YFkAvb97mePg DQpDmY3ZmDWJBgoBhBogbdSZed8ZnrNQC5HGmXQABRxTCJq1FYjAwFohDNOwNH/J5Rg6WIdgwY8u DllmFiCswRrsFIhgCJRJWH81v5wJmgRgACZrSd+jXnJgB2xMgtWpo/9dul7/t50GeEpqJHak050G oIo0B0aQoQUUlnbQtZ1ktYLr6Xa2U4LBjkaMgQCS4A7ugAmm4GsM4BqdwAmoQH1a4E7SQDW2IAvw IA9aNstDyqYYAKt1rARIagogz1E0AA0+QAPIABDEIIsnxwTUUQP2GAbZehyZgKJKwApKQGilWBPI kQxKgAI0QBz1URutwAQUVAv84AkGQJx+BK3CyRx/AQTIg7caO7ZA4Aq6odRLnRtQHdW1wxkYxQME JwFC2z+0zAHqY0AIprUxpbYNYLLy9o4N4AD0Vi3MxT4GBNYLJrM2uZLrxdX9JgHy4oiIO7a64GwW ILYKw6meajw0Cyv/1oKV9CcCyKa26aJalJkGzhueglcqJ5W7S4e6DUA/BkAA4uBgp1uTDqADfEre jUGElFmTEkBfq+Cg3CBelvkAxMwDCCq/3QCZqwUCBAAAOmZ539ltFjMLDdwL42Pl/tlRFbrCIZyg cwmXWCYUyLCXTmHCfI7kJwzBiMAyg9UUhEDldsCZCiB+EwBA9HaPC0YDUKBG5q7JV2R3irxeH/FI ptM4zakQZMCdCsErFsChPNpEkmxFnOQR9K4BlB4Ul2SDO5jvxI4XnOd5hjj+umwL9AB5GOA+s8AJ /sQJtJoDOsD1fuQMOCCj0oASsGGl+EAPPtbxzAcDWGAKtpgMRODp/zKkQ2BPracgxILEBHKgDDAu B8RAiitBiiEUEAr/Qh+UDEzACrZYDJaWG3cWCpjACMLACTxkZ7mAC479Ax5g1LuBG0y91L2h9rvh G1J91R351s8js+rDbwYk4/wny+zltPHCXgAnPxQgtsSiPE97/Xh7lHnbXu7iXOxlKtzzAex4AVpA jcTj+5t71w2gDNZPJIftAQpG/RxAYcjdGKimYuAg0tG6BKogDsxDReDgCcLJBBAAAAAigIIAAYwJ oPLHhAkrBAQOjAPgiQkyZJjYADDAQIMAcQhMMQGlTg4AARw4cGOMWZ8QLFuGWECgQAECB2oKiFkA gY2dMnfe+LlTh/8OH59MDRnyyccOHkyb+hi6A4gpIq2IlCJyNOvUq62GdG3VahkPIEOoCum61IcN AX0sGHhrIAGDAwIUGBhAgBkyY8mMDRvGyxgyXoGHMUvGzE0hZgH6Hi5UqHEhGcyM9bnw6FFKZMwA xGHGixloZoUQF3LTQkYIAH4rc07Gq5Mxv8kcMzDgAYMFCxQuhLDAIU0SJx0wcMDiJAmZI4CccDiz hM4cOkqyYDiTR4kSSmkoAEcDPkmSDhVElChhpYaBE2QAjRkDCJCJHOfFn7fiwQADDSDj09EEICBQ aMBEe0yUcEMJJ5yAIBljkHEeEw8yUQUDJVRExi8WfEDBFR52A2L/iN14A06J23gDwjdXcMOFhhQs AGMFFkAQQQVxJQBXAh7omEANNWigwY8iPKHBE1YYeaQGBiwwwA1C3YACCk6igEABA+A1EwFXJpCA AAfApR+MDASwJAQSXPDAAg9cwMKMELz5pgMVMEBnmAvcVgOOYDLgAASpucQCSnEYA4cGSTCB6HwD HFAQRiUgGkQQJyAgQByWHsAfokyckEMCjMahAgEXFnggAgMQFAABVoBEBhQmIEATQSq5xJIMEoTQ ggMC7GTDTAL8ilMBJFQpk0wk7ISCDlEiq8MnPHwilA5AVGWKKWMJYdQQpkjVShGgfAtKK0CMNW61 WQ3BgxFECKEW/wEKOODbAvrNtYgy1FQAwQFsDNaaJ7AxIxtihoUWwmL/RoZrrpC1UJoMe82GDGSF GBOAaBUXQgIzDIcgA2U0DJNSMpoZcw1ftfkFwAJu5eeBCJ7epoIXMgmQgxN1QEEHIHVs0MEZSkRH xh966OHzEkqEk8WMSTQBEhOAkOEEBgnk8MQCyo1RSSUAjgHFppqWkIMIBmiQQBkaWHEzFPGNQUcd VlRkwnmPMtE0RVA4UcIYAQKp9tMaMoDBFmtsA4433nxDojjgcLDNNiuu+Evkv7QIAggUMFCGBx7U kB9uNYgAZJFPIPmEE0geaToVT4jwIwI68OBD7E8JJftTtc9O+/9TUcJ6ZRVaHqCAAnQpMIG8V9bU 5QBVLE9A81c+/4J6L5QBRhnBL4AvCy25EccjcQjgRBQK3VeFF14YpMHcJcRtxQA0uKGABx8pFMUU aYigAA0BCLBqRYlaIQCOCEADf3CVQkyQhCogggSLYISzkAIA1YRAAn5qia5sIBRG2IAEBQAAsGTS PGEdiwQk5FVQdMCrZD0JBTZAgAtd6JMbjIUpzmrKs4CAw0/sIHY80KAA3HCBCDiABRJgwQIocABr TMNeKlMACRBTG2YM42SdqAwvHgGayTDMGIopBC8WsxiGMUMCXhzGxJIRh0LQQDSIYQxpAFCI1HQs BG4gDABccxj/2NQGi8x4RAMcQAED+OhzOfACDSzxhjdYwhJeMMQXvuDIG7TBCeD5wx/SoAcIgAAb aPgDJbChBxBAQDwTeQ8ZkiCAKmyKPmQAkCYeFDdAiOFAiOKUej53tvXVYQp1iAJ+cnAgK9AHURTR 24Os0IESuOeVJhDBqqCQoQ8YAAMf8BDivEG4xh2OG9yQnDe5UDkQRA4EHjjSE3zkgbOVzkhEcoII qKABEQyJCu+Upz2HdIPb2e52Q4lWtPQ5lNn9xJ8ZRACQEDBQfhJUBzfYiQuLBUIFtIBjLGmAFxrR CC8IwJnjm0IOvoDRRoxgAHiLWwmmMAUNeGA30LDkH+o3hWjo/2EDEbiAB+pgArrFzaM2GIEnWniC JQRBCEIYQhFOAa5QKDUUp+BBF1pygQuYySUQaMCuAho7FG6weVwFAFdjEqwRgvCrxfpqCEGYEwRU QSdOyiojUEACAAyRJWy6XAXkBJNpLFEZXahABRBhxb544jCtkWJo4FirFii2BQBAiRQhUxAZ/KsF zAgBYUgz2MQYoxBwjOMcvciMzGomNIYxmTF4sQAHLKAMYHLfG2iQyEQuMqMpmK0htBAGP5hgC79I QBB2wKk2PDIFXnhBDqAJH0AwRG5PeBRFWuW2KMjNaWIQQ0VqZoUTiOFpULCCBVgAgQSY4ARTAF0O pJvT9jwoCv8VcMJExiEgQVohCVa4gAXkRQEQdHNyv1iRfvfLzQCPcwsZyE3knLGBIQ0Sl6MjUoPv CeHPgU50VXgCAnIw0NzpU3Ya5vBCb4CADKxhDVfgQAawcBwcfNhJDI3WTxgBpRb6agENoIEKVJAM L4zAfDuWWQoK8GMdj2DIO07BFwrwK7oMoEpDRoGVNHAlLSUgeAdwYRsWdIJmmQIsp2jFt5QBrjAX oQhdGcIyllGAiYbgAuBkwAT+hCsIwGggMQkKD45iraTIDlrKsoGTYrxBEo7wWClkoVA+4SxE88Ao pkChB2sSAK9KFa8OmACcInAAvU5jETKCAAC+iIy+cIYvIJP/4mm/qBrVTIaOpynEYPkSsYh50Rgh eMTECmHGxCQDMqjpmARBM1pjZFZklXkEL5Ih1wqw9i23WQFsY6vIRUp72pbwwRdSkAKMEpfab0hf gSohoHTKrWbi26UTgPQE9hyBOQU6gRZKkD4HwQcKUKhBBbRAKiY8QXOgM1IOJmKCKFCgBvM7oNys AIH7vqUM+XVGi7wZOW524xsCHicGMCBOZ2yhBqtjncchDHLWcc4DG9hAy+wZT5DnSXkIwIENcuBC KfmTn3seSiIyIKIM4ODPWH3KT37OUBZWSUteYgC+qnrjpANABXW5ngXwVYEFKAB7zvBr8BTwBhUE oALO+EUF/zjihTgcgAFdOAAAAHAAG3wiFrG4cytwEWakUmPudJ/7mLvCg6IeRQg9QMAC6KpJEl9u 64vNlQMagD03VFXqCgAWoV9HLnNlS1s4fNYNcRgLqWwLWiQgANqPLsQD1NkGS7kNA0hugGXjpgqt sAEc4FCBB7CgYoA5rbEF0xfHBMANteKYHGUwURl0sQ/JcEMAGJZZMxqjC4tgQwLgQBrFckyCuOIL a/RyGOyHZjC8cABvMJd6A9AAti2AdrSpTW0v1Bb9iVyfhLjmBAt4IN2IQo8V5GkF9ABzDMz596bu 8yjuIR8L0T9OAx9WYAARYAEJQCTo9m9AMjf5Rjd9sAKMp/8AYOACZaBaFvALFxA5FPcNIEJx3CQ5 XPBwv0ABCiZPPiJym6M5G5B6FEABfjWDvGFyHaA5m4NyEGZyJqeDOnhPoSOEQLI8GtABHHCDHbAF HaABL1QFUDYAOrIjObhwMiiDVfcmRHQBLbACXcgC1NcSLNCFtOISLTB+DXArtDJ7AOAJDuR2rXAK RUANZNYKdVd3YHF30zAERaV3QsADO6AFC4IADKBmEGCCLUIBHjAIUNYlTdcAGzF1qbUAbhB1DQAn EPAAcMICF9AHitUHEtCJLQCKotgHEOAbUYWKMzInCcByCHUCV9YGMPc8KpWDOVgFm0YCAnBXF8AL ANBGxFb/e52RGJU1fR2jRQzTMQ/wiAFAY1LHjCEQADYgBWeQBCagHUrwd38yRx1TAKJhGIZFGiCT EppRfBVAAWWAOQygACvwBl34Bo3gA49gPl6AfvU4bbE1ADkFH2SAgC1TAyUQBg8Cbx4wN1pQjV+D NUyQBE9AHwpBN/S1KojiHgL5BC8yN1ZAAfnXXU9ABiYwkR0JBSXgAvqhANMDBnIgBy7gAjPgfc4Q goZjOAG2X5HTImxWARvAORtghX4FAjToVz8JlOaYYDVQckVZcppTAx3wOUvJgiJwch6HTkX5gkYp lS6Yk1SJlSXHcGXAlQxHAd7HAjWlGizQAO04USvREp04/37aQ4YsYWM0oIxwsECMwAPTABbdQg1g MXd3SRV3mZd7WWbnsod/CFxYtgOHOSkNwBLgBA3aYAbS8AIwwHFUoAccYJmWqU0lcpkcYBxTOE2A 4x288QGjySHi1CLc0A2oGSLcQA7kUA6tSQ7mUDiayQEe0AE3sCA3kAM20CRwwVoecIuMoAMHMCMy AAdxUBiIwQKkkRIB4EW8kGq+NhkyABnK+IiiqD2p8YVdoAR5YI0HNBFT8HvThys+4Jy96EWjtmuQ ERrJsHVHFEhL0o5duAIwcGPwOApbZgo+oAuN4AkYZT7TRo+WoAJvgAAm8B4hqTlWEAVOAEyIEpIB eCBy8/8oeaMJgABvzmQFG7qhNXAoBdIeTzMfP5IE7gEFUdAqSVBOFWFK9GYCTvACHkAnL/ACMXCS KamSM9Ah26AHWZAF3/AMOECCv1A5FvBwXOCBkTMEoeBNM4mFVcd1NNiDrHACN8AKWYmVJJeDSqmU 9rQBqVAECfaCRZAKW1ALYdqDWIqVqbcBXHmODNdpEVBEcXJ4NPBHUedX2KOMdvonnNgAXZAMamcN d0mohcoVVfEVesVoQzAuO9AGj9oGWrADv4UDOJADloplWCaph0kAplgGZnAOoYoO0iAN6HAO6JAO 0SAOhqMO5qAO2YAN2eCa32AOsWkOt1qrsBmbuqqr68D/q+SwDsG6DtmQDZQgq+zADutgDsoKm9zw AW2AAKzIJQxwjvoBnNbACIzQBRUUAMdmDBAQR+sZGRYDGdHZMRNwG4biAbSyEhKUBJKgBGmAUlSQ BUpAB3ezABDwhS3RADcAGYQlGI8xDA6wWWeEPWWwWnxCn+wIbYjESOqXbaLQCrowsbogsVs2BD7w A16wf2PQTB4KTVGQA0kQIcIEgCdajQsRBADCBCr1FppjABBAkJpyQEzgBN5BcIBwoVGAoklQARoA TXbjKuWlHlJHozFgozeqkipZBtrUDapwAt9UOS2CpDqgCs5gAafACkR6Td4wpFbrDDXyk2XQARug CloA/wmqsAVr2qZtq5VYSnKsgKY9uANFQAFym6Z5i6Vd6ZVW+HTf1ZNbEH7MdhvzQifyAgcEYAOL oArVYpd4iHdHogfQIA56AA5SAAlGoYfWwLmxYC1MIRQ58JikKg2gSqrVMDo4ICW4iZuaepiTagOp Nwmheg7jYLvwNQ51kKrt4A7voA7ugA3Biw18kA0wWau4irzJu6zIK6zKWqx4cAfNQA1KBQpFYAeU sKy+aqvk0A2TE1XgRYPghwA9pAP6CgGSBTJxtBlstGvGJxoMI0cHMBxOQL8VUCtzRJ4JoATEURwe kARKQBH76wRpoCQP0AK8QAKEMY6G1RfDUEeV1RdbR/+t6OgAC2t+58dI9UiP0RZbK5AD2+Wx6QMF 8FEC9LaQ6cFOTtAGAZc+SQBMFHEgIvB0HJc+DGJw4nEk6ZEAIjAFruIE/ouABjA/63NSGpADLjB1 t/ECioC0YHCjOConK8INqhAI++WBF5AAOHCOXnAKqvADkVADrAAP8MADorAFgnMFRNoKqqADBhA5 anVgquADabsFZfA6tFgGCEUBO0ABW+ABfFwGG7AFFIAAHkABG+AMcusMO2DIW1AFN5DIdusdN1AF ziCDXknJBgDJzqC4luwdzmADFmDJHbAD33ACFQkXNcADBqC4Q9As0xIKXgEWoKAKoGCXRDANPCAF 4iD/Du4QD/Hgy74MDo3TAVTgBFmQA1TzhESSA1SgOPGwqvcADfegDdrgDu5wD3oQPpfAzY+6IJCw IOKhB+JwD9JwCVBwDvKgzrV7DunQDvPwDvAMz+9wzdhACXxgDuXwmsrLz9kbrOZACXkQvdNbC8cg DLhQCrpgChR7DNQACdngq8jbmt7QDVcAAXjVtwmgAyRwABBAARHAWI/AEojBC9/IR9n3GnEUAEkw Bf9rAtSYBBhwK+YaAhBAv5pDAVlgjQFMv1Ygr1PgBAmwAJWhR4ixF6GREnpha8YwJ+hIAVhHgX3Q ByxwwYwkCrpABLhw1URgCqJw1V4QW1KdAyG6oQgK/wU5MAWtwgQJ2AIXoAENejZiw5CPsgQ6ZQXe NhHxUX8RshAfCjb54ZTNlVNgk3/nAZ6qNRdHi7RJi5I5qqMnogpNIGDOYAuqYNmGYAisoAqsoAND gAIxsNmW/QWHsAXOgACazQrLE9qqcAC/wMaGoAplQASqUAROPAgxQMvBoNlFYNmqUAUV4AO9rQoE QAGwgNqqQAQUoLW/kAtFwMmh7QoGcI7ewQqavdm1YN0X4Ay8/Qyq4ArOEASqkAqaHQobFwq9bQQ4 4N1S8Qy2oERDoFdrXAucawMc8MvqcA/XrN+/HA/b8A3QMM3aUA30QA/1UA2TIM3krN+927vqQM/0 fP8P4HAPDHoJZqAIo0MF0RDh1/zO6XAP0UAFEz660TAPJW4P9pAOKZ4O9OwOMLkG4IAN4MDh7dAO 92AOsUqslIAHdiCHYFYEjPoDsJMUPECxYFHkQxAIx2sOskoOJeINWWB0MhiUcDIjDYAIKdECiLEZ p+YGvigao8YYD+BOZ0Bv9koHkkAH2gOGLKA5FoABU3CNJoBSQO0EVuAEdN4BDBACURQYyTBFpKEX KbFZAHA5mPMuqfUGFWx+iFSgiwRk2ZZtGIVIiUQDK5AAUeAqZSACdUBfho1AZVDTDECy6IEeQII3 7zcGCul/6iWQ+ec0gKBvJZxT9QYB8daRUzDXTED/b7t+eIn9Ao6w2E6ckjMwA0urX6pwBxNHTqCw C4cABrLACjOAAqqwZtqDC8DgAPDgCriAtC8AyqoQOacwDZHDCkZwAapwA7AN20QQA4oQCYrgCLzt CPDACrUADw6gCqfgDLTtDM7gCrDg76qAAdt9ta2wC5Hs763gDBBA229aAbYA8BagCqXwCwfAxgig CgIHBqqAC7Bdyn6gtjegCgwQAbMdD+ddDepNDa/zuc8CC6BQBXoQD+VQzZMwCdUcDdYcD9CwDVsA DQdOD9JQD0Mv9NogzZR7ze8QzyXO9O8ADvPgDuDwDVRAqo7gCDevDfNA4yn+zu0QDaV7Th2Q9fNg /w91gA9KIA/hkOJa7w7Q8DnVLA3tEPc03g4e3g5TkAdFcAwNLQQmoLuo6s7YgM3YEA1O4Ag6kcxA coQcsAVIyJkYsAEYYIVS7lcTYAETMAH4YgOMoDGjgdTeOhuBIRkB0AUakAHu1AF3zktKIAmSsAW9 pxoXkIhpTQbaMQUdkNYmoAH0a8z0O8AbAAHs6+fj6AkNUBml4QksYBJwYo6XDIM+wiUYoABTdo+L pEiJBAOjkid3vQAeAE8MOV/3tx92zrM1ix41kANa4CDxQV9B+x5cw1FioDbddQIK8Vy+NDcv6r+s 0irQBBAVFixQYKBMDIRgFMpx0dDFjBkWfqkKxP9tyyFHrlSx4qiKBQpVF1pAiCBAlapdpxwhjAHG h6pfv74VCQVLVauJhl6e/OLoyYsKLIqwgheD1Sl48HYVsaHK2ZYKOpwurbDBmaobQ53tanV11y5W G39ZuLK1iIWrNyqkPcUqHjRnrWQ13VINktNTql6x0rjDiaogRVTV8PnkibZ7d3F8gwZtkjbI4u6J E6dN3IYNW6CJU6cu3ufK7dqJ2/ZtWzl38+b9wZNHyZ8/87C9c+fZG+NJ0qRNehwt3e/f894NJ34P 3LvVfyhh62xOnfNslbXppp4uWrR5169HEVJkyAlp6M6Nn9IOuPB32ah4eFHDg4cO7z1swWwA8wb/ CvkplKFQwX+FCRyoAAIFgEAkhEKY4cUTZh5pMBljkpGQmRAm6ICKNKbQIIkpnNgABBAp4GALCSSA AIILQghBAifIoIOM16jo4Aw66IDCCSemoAJHHp3w4IIGH+FlGGaYSaZIYwpBJhleWnAyghVYqEA/ CjCDTwQssdTACSusMEyDGsB0rwQXTcjhTMMQsMKJGrp8woMEcjAhiSdyNIEJMpgoYYo2S7iTCROm MIEMQOgYYwxAojBAhBKgIKOOJEyQdFBEyTChBD9N6DIHQSd1VCAGFHBBgZbkMPXUhmZwYNULVMHh opVkqWWHH3y4wQGpynhh1xe++CEvVxxxZBCX/5zihhVYIPlGFSKuGoUYVUbZKIYXHEixFVhmiCEl MJTCxRFVPNigDB6cggWV/LZQpQo/XPmFFSOuagWHE2xw4ht8uVnKmQpU0aECC7Ay4hnJqkEllRNU 2eaKu74hghUbdDiBiWjUYQWUoxSYoQw5DqkmFFXEiYeye+55x+R3OivnrdI+U8cdmD8zTY8p0NDD G2/A4eOMOuqIQponqAiaChHEgZm0bRybBBrItGlHmnTQkUeecZQIJxzVhPMMHG/i6Qw51WCr45JL zokiGpjdiaYOSWPLWjbfpBlv7nOAs2eee6ioAQwPasCyg7/dk28DAwyiwKD/HLAAAgdYEACIYf/6 MKZIXnhBhplhjozQjRAqECHDDp2QdArSOyT9DBOUoKOZJSBIQPUaTaCCgg4GhRENEXLkcYo0QP8x c16OHMYTXgpRMoAiR3LgAQcg0K+MMjYQF3Asd6x+R6I1wFJ6EwDRFIEcvMwBCig0pcADCxaYNFAq pmAb0C6p0MDLSDsk1FBNxqkDUy+nWNNR8pWPCYCAwhQwJSk86UkEVphCFEwAhQUwIFRlcAEYTnUq B0BEVRFgQQhuYogf/MAQgtHCIVzBCkUIQRWRYGEkaKGKSyhCFrKIwUpiIK0yXKUZ3DCCKorgAFUQ A1ox+IEqZkEtB4SgFbY4CCtQAQ8wpASItaj/gQ2eMQsL2AIrv3jhL4zwCm64Aie0gMUWOKCKU3BD jfoqwjcioIpOSEQVJ6CCKjAhjWaoQghaUNg3mKCKcqRBFX74BipUoakeqkIRFqzgBlxRiz+UTB3v QEc6ftaOlHVmMi2LR9pgtiPEWGZh39BDNOQmnnrU4xC8qkEHtAEz0cDMaaKZh2hEQAUr1EEeSiAD GaAgj9+0AxucSc3V5AGFfEBhE5cwQzPNUDZpzMMd2LgOeuxxN+HgzR3imVs9DBONdjjhENTyWwfi I4IOtFJw7yGcfQygH/9MgCRQWkAAIlQkJl1uScYwRhIXQAUMhe6WGUrCHwZVoxfxUhKSOAOM/5Sg BCcMiAqpU8IUzjCFDkzhD04gWhqsADonQKB4wWOG8SjXAGZMDgLKO9F+7BM96UkvSwDlKI8AKgIP VMADDBRfCXLwhBIUahxQEEGKanDAElihBjoSVM+6ND8NzO8JVnCUJgAxDtIRylIasIAVCAXAigrK CpmCAiDMSoYnOMMCNXBCFARSOAVcMFXw0OCqWNDBk+T1GNUAxUlcEcNLhMUILLyERlQBC0UMCyGO CIsPhnCSWvQ1EqoIoSoQUosgOkIODmhLDBTBClrEQA7AAAU8BmBYUCCPFakIC0W+EQpWfKMXRfgF CEDmw19wI7fHKoJu/ZVbVSjLB2FhRSiqsf8Dp3wjCKqIxz2WEBZYMEFky9pFNWyoG1RIA20loyQ6 MAm2dODtHtvYRidTkx3dgLOW7RgvN76hjXqgQzzyTaU06kGdV7bDHaIxzznGMTXdDKIGNWiHavib DmlMQRpWoAI25hGOY54jH/k4RwypBQZHOFMa7vDGO+xxtXDgIxx3o0I0/mDKuUnDES8YxFT1AI0N QKMa8XmPOWksH3G1E54DOlEFPvCBQkTIQRJCRiE8MQwitaACWeBoGniUAXTKFHRR4B0V9NCBJDRD CWnoQD0tMIWHYlR0SegAR62HPSdkiAEI8kQ/jWe8ELSgpA1YwYkEJCD92Acz5rzlLbFHU6L/iYBw FWjTCS6V1CdEoUb5M0EFLpCAJJAvUBUoA0cbiKkc+BRTSXBCosv6qApooKxmNYEHggqIr2rKA53u 1AAR5b0FXAACDBCBf0LlkIZkUIMQcUCU7uoAKNawhitRhCJayEJjRyKxxWb2IBDCEHisJSa/mAE8 TMUSZjN7xS4oiiMUIexumQoezvjFBWJyAXPHZI3u3cIVpr1uNb77G7rN7TeccW9nVEPf+h63MyiA r88EPB74+kYHVGEEuZmBOvYtWTyIM5x5hDcdJ2avyMwbDSv4pMR/qENsRlMXbYhnaseUx3jkew50 3DcaVGhHNOSRj/9OLR2imQxl9ltLKji7/wYxEIF2nybhCR+BwnSjm34fTIY50EHE0RhWJMzwBDNs AhAUlkY1diUCbBjHG9Cgnjn79h7BFe6lFFiABSrAAAq0GwQWsECSmIHS4F0uGY9IRiEu4IHQOTl3 IhBUh6K8drY7AwIW8IASssCCC1goDSY4AzpFh1GzV2ALNbZxlB+AjMk1wBgQcEPl3FAIAHwABABq gANaYAGD3Ed61CMaQAEd6A7IqQRAzZOerGAAD5igRgScQgWecD9NQIEKFyA0UBuFKeRjeks62sAF vty9MQg/qGM4go3qEFEGLKqBd+olFJIgNBHUYC3+wfUMHqKqVa1qBRy8qwuGLaxjI7uFl/84trGL bUMwvKBb0f7GFTIoBzBAiEnwrGzTtkMIQGFZCQuSg2qbAXJLt5gIgXeLtwmEN3pTNy6ot26YN264 ty1wgW+oAHu7N27ohoEbuHwJi16gB3pIJResh2oomXswj9/QJWDir9EwGtWIBhF4gQqqAW2ADdhI h8mIwXqImt8YuZI7h/iqh8gwD6mRGqr5L9Vwh5Fxh3TAGm2YhAETgXuIOAQbj3w4AjIUugk7w/GQ hgILBxd5kRNbpRqgAm1YmzEcOmmwDHcoB/LigL65MRrDvcIpA7EzgC1YgytwNy7IQAiQAF4oqQQx kssZkmQIABbwgAzBEdhLAyVom9IxKCj/YIJNTLOQ8gDUcQJ04rspEAEKeIAQkDW2mzwM2IAOkJ4K OABeaIBHLIQWKARcLAQI4IZD7IZDBIG0ow/Vk0XXS0bXQ6ca+BOgAoToSyoPgAADqINeehQNmIKy ooOrqgMNqIIw8RNHMYE2wBTD+Clj04AVq4EciBRJiQ9tJKDrowAGeAIwyZ0GKp8oWJMo6BknaJ4K cAFdq6teixIOYr8IqCCWEJZki7/6uz9hSYgFZAgXoABn+L8ARIjE8jZtsyGWYAlGggeNsYAMnDZ0 S7c1Orfd4oZy+IaWpMBf4AJ88YaVITjdIrh4qMl52618iYkquIELqAYWhEEWvId9Ewcc/zSPJmSv 8eqk1aCCDQjIMphDJSCfOkgHy4jBGWyHVEq5+PLKVKqG03iHdrCHdJjCGyTLyUCNP+il14CNqwEO 3TADoBtDM0TDKHil1LAHEcMHEVsvvJkH3Zgb+RqN0riC/cAxxZQPDDCNNfCGK7jAC+ACkZC1B0Cp ANDFCDmSIxmJC1lGPgOcZMwRjTKBjTrF8+kQ9KkKDzCAE3mAFpCBEJABFhi8KdmCLYhFCwiBySmE PoCzNyuEmFzJbihOnLkN8voGDuAzPfCzm9oS7RmrKBABDXCgEnDH2RMdJoCCKMClB5oaBGIC/9m+ EogCDXiCNtCCKCiBNhgAFouEnhgEM/8oAUAJKQrgOx+ZHwd6oOvLEhyxggeyylWpAIJUv4JkAfYL AQSdAYX4yPcrtviLSAdViIkUSAfgoBkwlYxcLA5NiJb4yIVwiBlAkXIr0ZVct2kDAZd0yXIoh5SU ia4RB2zQA2wAB06yuIB7yWnzN4t0hpOEh0NgQXrYt7Vwhg24B6dB0nZAjMnASXe4B+0gnZVzB+TQ L3eohi34Bq3krhd0QSz9huYaDuCQr5MpGXEwjXiIuJHDByXAB3nAGvYaUkWYGzSkG2mAhm/whkma h7v5ML+8G3UAh+lwhPu6QzyFCgdoiPaQDw7gAOXM028oTphMREqFAC5YnF3kRV4wBhb/YAYAMB5j uAAWWD34iA/pwYAt0JEL8ToMAJwOyIIsEAEM6I/BMzsI4EUZiE0Z2FUVacXaBJj+eIAgYwY4uLID gIPPcwMUmUwu0K0SNM5y8AZyAIds4JpswIZrxQYnSAI68ZPrXJMBq4EFKIN2/JOkAgSr8pFbcqD1 xBNVm6opaMd9LIFonAIIEIGVKoMaaA8EUIQveLpBcIQaoIDqJB1P4U5nWAArCJ8o0AJMMYP0y6DG iYDGMUj2uyvEYwFra1AHTcBsk1CQXAhUEUgEpVgX0FAHnVAApNAF5DaIWIuSfLfizFNwAAcOXKNu iFZvyAaXjDdu2AZx6ADKeLFtMMYN/yAvr7kHbygN3Nw3IdU3Z2ABZwBSFowBekiKfpOxahCHcqgG FPwGcwNTcHibaLCMrjGv0vDAaigHGbyHenBbJ8yhmFgZKo0adDgZdbgHd9gGcvsFb6BS1Qivt9Fb aDgIuSG6ChsPR5gEcrsCPZ0kiNMaK1QHptlKJIUGEdgMcYCGQxinGKACpaVJSe0GNcpALgABSj03 LlhE2WyBzyuEACgeXlwACJABCUg7+9CPxUHQDeA72ACdnomGDjiAskOR5emDAGiB2dxV5pVN2ZzN FYEAFigEN8icbdADcaAAcbCHDJCnk/zeyYzJ4uwGaQUHczCHbEjfa/WTLmECQDGB7kD0gOyzgEoE UPe9lDEIPuSzgpzSgASSFCuYTyuYGIcdYPGMAvcYEAE4TyuIhEEI2C+AT/lTtnJUhDZopicIWAhV /yxFiNgL5aD1i4CDxNgOUlAHoNCUXcgEBFGWpUhcg4eLhQiUBcmQPRV44DYRfdm+nbZ6o1Y90Jnb cFZuyBlsSINhCuKbNI3SwBcKOL+q8AajmVFooAAogh6t3Dd4oOIA7BgwEFJ6AIOoZYFfuDeZwBdn KEluyMnPWJl4KC+ZiQcfRben2IZ9i8FqKNRJOAT7Yq88NJmGg4Y2puMN2NoZNA6TwaQZ3Fx6ONzx ACYEcwRpUAR6KAM8o4DrpcnOyGSa9BqwEQ5sEAFtsDJtwF4qkAYzUARpEIFtKE4OUAMpOMQrAAFD TEkQeIAFaMTnjTPjaQEDGAAGSBrfSIcKADy2W//WXnWew2lNBkgAFAmBAPi8AOiDBlDeXdXVXKXm OFPeXkUQzEmGBtCDkaAAcHCHu9kGygRfdEa3mHBcnDnfNEgqK3CgXoKf+eEUA1gADRgU9/UTQEgC ByIfDbiA3ysBtqmoZ1IEe4Q6LzEDFmJowiIbiI5o+pPoiSasSJjoir5oD16BiUVQEr6rFAmBPkhU jgXRFKbQkx1ZgeS1xkE8ijW/k21hCrXh8mNpAXGGnTTREoxUSU1J99pZG+WanB5jgsO3/VAAmErO LbjIRC0DoawHIT2EpFhAjmlQIU2KCEgRC9gAyRAZKxw491rRlYnWSFWje/vee6uAasgNRi4bukn/ udIYYxDYgnvgJn04OflCh3uIh65JGvgiTEuqg1/6GW2Ahi1IGhEYFsPI3J1s1r/l02u6pux4AhYy DKF5AkVoMWlo2BPoASMYghtwXNLVrTX4AFvc1CIphGpGt38yy30YB31oh21oBz2wgNGA3m2OTRXJ ZRloEhVpADeQAN1m3th0EtfV1d1WbZFOEBsYhgNwudz0hlqqjHCgJm8wN+xOZ3SOCRHwGQaLAktx Kut8IE37EyvAgC5hm3EMtUBxFCsQgSeIIYTWAEWogSdwhAG4aIhONgWUAxjg2BdAiF1RiBXjlQoK cAGPgUFIv/X7aAdnXl81P5adcApnJJh24V2D/4cL7SAW4GiISOmGuOGUFvFdK9B7i1ketkCYVCPS LYcNJN1yU2d8k+sywM3NaIxxueFE1eNILrYvrgYwOAQXloNFZiZJroZxkzHeyGOurg0UVMncatEW XYdMnjd0k9pJqIc0jASfiISpYmRVIrd8s+vXnppz2Ad9OId7IDcKmAQx1AeYAyZTJhszYLBQxsEn MGUzSANz/oVtIOcQ80t8kGwqeAEYeAE/m4RdabFL2IEwEAIhsIFfWIM1YIBjrRx+mhxHVN7aFFVs 0Ac0Twd90Ad5iDhtkO5wEAfnXV5dRe5tbl1enU0nkYFeNB43aN5dpd5dHJJHgAN1sAcZhYBP1/+H aLiAQnQHediGmKTU1I0J0zVddAOBMKkBA2ArBgMc+y1PJ8CTKPBnnFogQfkq9HEf76FOJzhlYYE6 CniBFagAUSGVQahsB94VGHCIjmYcB8A9jVGAQ1/0B/73jr5YB++gPihhE5bwCec2U8HhEMe1XFMV XpsBBE0R2owADUoVhz8/m/ZgB9hhKFc3eONh4ozM2jIAACAARKgCA5AIc1MrFVXib6iLzl1r6mBB rA1yeogBIQ9yZhNSMNDKdshj8ysDQK4Nz7A3cyuHrzHLdMCmzsCXDaAHolOlMlCAF8hzMKcHBqiG +UKHKPj6rz+HKUA5GDSAagC6fdAETXjt35D/Bi73AkfQgASbuKsxy1oyMK+eB3yoEUlIOjrAGr15 4BLThp0zjAE+gRMggOCZOwmBkExnhs9D7j5YqS349H2YGjTfB2iYmisgQnHwAFnP1eXVRWZo3t12 3uKeZhlwg13ERdVfXlkPgQdBBAtADgj4gC3QB36Yh7ENh6bfhnlAXUotQS6YgA+gAOE/RC4QRg0w AGcAxLGaAg+oguS7zk+cgg2ogUgzAb8R7BIwqKiqAyuAqik45WEzA/0zgOZvnlVpABaL9y9gJgl2 4AyOdwk+RxaKYBZyNgW/UIBwwCICi4IhCiI02CcEwwssHDhwIUcOvIkWLbrI6AKeixkeP85w/xDS QYQIFxoSFOmx4wyWHiHCjAnRmYVfv7hw+XXhgk2b3H7+4gYC5y8QGBJUsYFi0TAbOj7x4PEJgASG IXbadMbNGVcH1eiBDQsWHrwZ8A7RU6QohiIzZhTRA0OPbDVt7bRtqACxwrZ47v7G+6a1nDp18+SN y5cPSrh52dSV+6at3rlziqFEkTZpszTKlc/Vq2cXnTx56aQ5GpT6iTRp6dCJbm1Z8b4jmugo+aPN kaMnVtq1C0dmTKVKuNMhT9cOnLt59sJBD4dvHL7G7u5hazevnTho0ERoKIDAmLFkj5KhT2aMGbNC LWTAjy/jQottV+Tx0/fOnr59+kBAI484yv8Bd4EMLYQgXyFuuFeIg+6F8GADC7ZXSAMHttACgxm+ 5yB8hfBywBUQXAECBx+sMY8+9thjmj76pDNFOjhxwQ0XVzCgQAIIGLDAT91cwc0WOVjxRAklWMGE CUnkUEKTJphQgglQQFGHB0ZSaYITTkxBJZVTOKFBFBo4EYUVMUSiyCWKyOHIAGZcEqcZTwzyRCRf RBJJnHvGSQyfe0ZSpJ6X5FloJAMRlJCiLIRQlVVWRbDSRhpR6hJIL40E00MsnMQQohBdmqmmBK3w 0F4UeFCFeCQgUgUBCXiQABYEJIWADTYscqsNJIiHgg+fAMsDEDzocIAMj17Vk047OQNPNc7/ghEt WQJFAI9cYoUFBllbVFNPa5pVA8090fwRTTvuBPYTYeq880476KCTzjzzFBZZt59Bkdg456QTxTnj 7HsObKLVI48+AEOhWQ01SDOFPFAIHJo0leWzTz4Aj0OHPPN8S2A76Tw8DhnyhCOvcn2p4w6LK7M4 77x/3fOXN+B4IIACC5Sn3nrM9JFhCO+9J9+Bk4QTzT78YIONPtG4xmI7ICjnjjZXMLRQghjC58Z7 briRYAMteFgIfEAf+KF7YHNooQEXSABBCxw4x3I8FnijYj/6rIGTjVdUcMAAgQgQAANB4gSCATVU 4WQOJtRhxRRJRHFkFFF4ScbjUAAyBh1Q/zhhBRRQjmmAFaM/0cYJZlhxZCQxDFLDCwrUWcMTL7ig wAuD4J6m7oYaSqgZU9iZp1qROBJJSYuygODPB4XQB3yPPiQpRxmFGpL1IskEE0GdepoSqBCVShCp EaxQUgUEVWCAAQccQAAjvwKrAyPyo1A/CozML78NBywAh1M+6AAFSikAHB5wLKxw4xvfSKBNTuKQ GTTLLGQZCKdYYBZtaSsuZIGgM6pxD2+1JgrpMBdg4hGYwRQGGy5zzrwKExhuhQYd+ArYZyJWDw96 JjGAAMQ48rUPQOxDHhGjx8Q+o49z6EMe8QJZadBxl3ZIozSmMdlrxOGMK4DjHiucR7vY9f8Od4gj HuWIhzq+UYEyvOB1Hrrazx7koAzFp1EbgJHB9pEObOxjH/a4gnbQsQZ5tOMb4rgCFxiCoa0dy5AJ YiOyFAkfCHhAAQEQm4IKAQB3qOMKcNuPPTA5jzVAwB77gdE2bKQ3LqRvfQYYChc4kIQpaMAAGoCc CcgACCgQCXJcylcPTTCFKQxHE5owQQc8RwYogKkCHhCBFWqQuiTYyTdPOIQBXHA4CCigDM3LJu1q p4DaSQQGEknjC2LAukGYwAqqUQTu1klBRR2EUTJgFKMaGYIIqGQll1JJ9vr5ToeUpAXVihZB4QGR kiA0oeKrwAxeMAABvMAAAhgAAipqK13/6ap+OvCBDQBwgATYAH46IMACuMesb5gwpYH5RgMvwBUK cGUg3LsKC8hiU7I4g1Mu9eAH76GNewA1pdsQjE/WhY13qFAd3igHU7mhkw52K4YDi2FobgjTDWhD hkhEomIU8xnYbIECkyjiV+Fl1sqIRhvQgGJykOPEe4ijOSzj4jsKc49ygGOo29iGOEQggkkcAo0v qECE3MgeN1TobEFrATTskRx98IMfemxRydLxDn20Yxs02cYFnPezsblBBmIb7aPKJoOvoQ0CW/DG Bnx2tQOxhxki2MYW9GAPFn5ADxbIgju4kKJobCFvNboRF6hwJA1goAMicEIJoECGMeUgTgpkoIMw 6ZDOIznOBHSgAxnq8EvMAeK5CxBBLT8ngoWh1wpt0AAYeAODGhjAAQxYmAEGcbtBxUl4gzDnftmS pv3iDgwmkEYFXiDOjmQkIAA7 --_005_2DD56D786E600F45AC6BDE7DA4E8A8C11223F022eusaamb107erics_-- From nobody Tue Apr 5 11:16:43 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 603EA12D7A9 for ; Tue, 5 Apr 2016 11:16:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.9 X-Spam-Level: X-Spam-Status: No, score=-101.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, USER_IN_WHITELIST=-100] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VIgxXbtoXzML for ; Tue, 5 Apr 2016 11:16:40 -0700 (PDT) Received: from odin.smetech.net (x-bolt-wan.smeinc.net [209.135.219.146]) by ietfa.amsl.com (Postfix) with ESMTP id AFD8E12D761 for ; Tue, 5 Apr 2016 11:16:40 -0700 (PDT) Received: from localhost (ronin.smetech.net [209.135.209.5]) by odin.smetech.net (Postfix) with ESMTP id 385F29A4003; Tue, 5 Apr 2016 14:16:40 -0400 (EDT) X-Virus-Scanned: amavisd-new at smetech.net Received: from odin.smetech.net ([209.135.209.4]) by localhost (ronin.smeinc.net [209.135.209.5]) (amavisd-new, port 10024) with ESMTP id e3PKN2wOT35u; Tue, 5 Apr 2016 14:02:10 -0400 (EDT) Received: from dhcp-b4d9.meeting.ietf.org (dhcp-b4d9.meeting.ietf.org [31.133.180.217]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by odin.smetech.net (Postfix) with ESMTP id 0F2219A4001; Tue, 5 Apr 2016 14:16:38 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Russ Housley In-Reply-To: <029701d18935$89182cf0$9b4886d0$@augustcellars.com> Date: Tue, 5 Apr 2016 14:16:36 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: References: <029701d18935$89182cf0$9b4886d0$@augustcellars.com> To: Simon Josefsson X-Mailer: Apple Mail (2.1878.6) Archived-At: Cc: curdle@ietf.org Subject: Re: [Curdle] draft-ietf-curdle-pkix-newcurves X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 05 Apr 2016 18:16:42 -0000 I expect that CMS will be one of the protocols where we make use of the = new curves. ECDH will be used for key agreement with Enveloped-Data and EdDSA will = we used for digital signature with Signed-Data. For ECDH, the ECPoint will carry the public key, and the parameter will = identify the named curve. I gather that this is the intended us of: id-Curve25519 OBJECT IDENTIFIER ::=3D { 1.3.6.1.4.1.11591.15.1 = } id-Curve448 OBJECT IDENTIFIER ::=3D { 1.3.6.1.4.1.11591.15.2 = } If I got that right, something like id-ecdh-with-curveXXX seems like a = name that will help the human. I think the other two object identifiers in the document are only for = use with EdDSA. id-Curve25519ph OBJECT IDENTIFIER ::=3D { 1.3.6.1.4.1.11591.15.3 = } id-Curve448ph OBJECT IDENTIFIER ::=3D { 1.3.6.1.4.1.11591.15.4 = } If I got that right, something like id-eddsa-with-curveXXX seems like a = name that will help the human. Russ On Mar 28, 2016, at 5:05 PM, Jim Schaad wrote: > I am confused on reading this draft. I read the DSA draft first and = it had > one way of encoding the public keys. This draft appears to have a = different > way of doing this. What are the authors recommending? >=20 > Jim From nobody Thu Apr 7 07:37:51 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2D3C712D876 for ; Thu, 7 Apr 2016 07:37:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V5kLBmJutsVd for ; Thu, 7 Apr 2016 07:37:44 -0700 (PDT) Received: from duva.sjd.se (duva.sjd.se [IPv6:2001:9b0:1:1702::100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 03FB612D872 for ; Thu, 7 Apr 2016 07:22:39 -0700 (PDT) Received: from latte.josefsson.org ([155.4.17.2]) (authenticated bits=0) by duva.sjd.se (8.14.4/8.14.4/Debian-4+deb7u1) with ESMTP id u37EKGb9004634 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=NOT); Thu, 7 Apr 2016 16:20:17 +0200 From: Simon Josefsson To: "Jim Schaad" References: <029701d18935$89182cf0$9b4886d0$@augustcellars.com> OpenPGP: id=54265E8C; url=http://josefsson.org/54265e8c.txt X-Hashcash: 1:22:160407:draft-ietf-curdle-pkix-newcurves@tools.ietf.org::i1H/cH5GhWce/Yu9:5WF8 X-Hashcash: 1:22:160407:ietf@augustcellars.com::q17EdRZUzdM+EgZs:6pym X-Hashcash: 1:22:160407:curdle@ietf.org::rH9U0QUy63RCqvT+:VqVz Date: Thu, 07 Apr 2016 16:20:15 +0200 In-Reply-To: <029701d18935$89182cf0$9b4886d0$@augustcellars.com> (Jim Schaad's message of "Mon, 28 Mar 2016 14:05:17 -0700") Message-ID: <87egah5wm8.fsf@latte.josefsson.org> User-Agent: Gnus/5.130014 (Ma Gnus v0.14) Emacs/24.4 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Virus-Scanned: clamav-milter 0.99 at duva.sjd.se X-Virus-Status: Clean Archived-At: Cc: curdle@ietf.org, draft-ietf-curdle-pkix-newcurves@tools.ietf.org Subject: Re: [Curdle] draft-ietf-curdle-pkix-newcurves X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Apr 2016 14:37:50 -0000 --=-=-= Content-Type: text/plain "Jim Schaad" writes: > I am confused on reading this draft. I read the DSA draft first and it had > one way of encoding the public keys. This draft appears to have a different > way of doing this. What are the authors recommending? Depends what your application is. :-) It is not clear to me which approach is preferable. Further, it is not clear that they are exclusive. It seems that in some PKIX applications (e.g., PKCS#11, XMLSecurity, Java, maybe CMS), a NamedCurve OID is needed to move forward, so that existing infrastructure for NIST/Brainpool EC can be reused/abused. Thus draft-ietf-curdle-pkix-newcurves. It seems that in some PKIX applications (e.g., Certificates, TLS), a new public key algorithm and digital signature algorithm is a cleaner and easier way to introduce EdDSA. I don't think the situation is as easy as say that The NamedCurve OIDs are for ECDH and the pkix-eddsa approach is for digital signatures. We could go that route, but I believe it is a simplification that will hurt some application in the long run. For example, when you want to chose a curve before knowing what operation it will be used for (think PKCS#11). Right now, I'm of the mind that we need NamedCurve OIDs for the curves (including the ph-variant for signatures) but also believe a new EdDSA certificate/signature format is needed. Further thoughts on this would be welcome, especially from implementers. /Simon --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCAAGBQJXBmyfAAoJEIYLf7sy+BGdJO0H/iMAX0IvQ6FUDMSagLAI+/Kx ELIbA7ZKaq1ctysahfqpELCiMA4IMp7koTLPaN6crr69H4MPRNunVzwlDrN9w4Sr GJXkIQJhBjTkuNbGPnUjboAhs3jt2yk6wC/2RcWpwijXiAeCnXIqnVB7+K/ZCFsl 2sz9BzDCDtwQaiuaUjGYjhX8gfmmKEanfVgjcD5mgSmFOCVGL3TmlorUo434zz7/ JR1sru+829VCveUyEqc8ACbVK/7CAEXYKz2piUI7pThRkFKA0IjvVOPZ1TrUw7H0 4tv8Rd1aWl8IZiv3uyavuJ5MA0/7ByhoMvxOEw8SoEAGpLyavqx2bSkev/h2waY= =LuS/ -----END PGP SIGNATURE----- --=-=-=-- From nobody Thu Apr 7 07:48:03 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6042412D99E for ; Thu, 7 Apr 2016 07:48:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IXwmpt3bLE0Z for ; Thu, 7 Apr 2016 07:47:50 -0700 (PDT) Received: from duva.sjd.se (duva.sjd.se [IPv6:2001:9b0:1:1702::100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4CA2812D5CF for ; Thu, 7 Apr 2016 07:34:52 -0700 (PDT) Received: from latte.josefsson.org ([155.4.17.2]) (authenticated bits=0) by duva.sjd.se (8.14.4/8.14.4/Debian-4+deb7u1) with ESMTP id u37EWC7I005565 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=NOT); Thu, 7 Apr 2016 16:32:13 +0200 From: Simon Josefsson To: "Jim Schaad" References: <029601d18935$00515fe0$00f41fa0$@augustcellars.com> OpenPGP: id=54265E8C; url=http://josefsson.org/54265e8c.txt X-Hashcash: 1:22:160407:ietf@augustcellars.com::bvj6EY6++/do3Jmu:365h X-Hashcash: 1:22:160407:curdle@ietf.org::CitTZSptUpZmS/LL:JFwf X-Hashcash: 1:22:160407:draft-ietf-curdle-pkix-eddsa@tools.ietf.org::mkjqHa0/BI06ETmc:Ovb3 Date: Thu, 07 Apr 2016 16:32:11 +0200 In-Reply-To: <029601d18935$00515fe0$00f41fa0$@augustcellars.com> (Jim Schaad's message of "Mon, 28 Mar 2016 14:01:28 -0700") Message-ID: <87a8l55w2c.fsf@latte.josefsson.org> User-Agent: Gnus/5.130014 (Ma Gnus v0.14) Emacs/24.4 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Virus-Scanned: clamav-milter 0.99 at duva.sjd.se X-Virus-Status: Clean Archived-At: Cc: curdle@ietf.org, draft-ietf-curdle-pkix-eddsa@tools.ietf.org Subject: Re: [Curdle] draft-ietf-curdle-pkix-eddsa-00 X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Apr 2016 14:48:01 -0000 --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable "Jim Schaad" writes: > I have read through this draft and I have a couple of issues that I would > like to raise: > > 1. Although there is a private key in the examples, there is no private > key ASN.1 structure defined in the document. I would prefer to see the > re-use of ECPrivateKey from RFC 5915. However, it needs to be redefined = as > the parameters field would not be correct=20 The current example uses a new ASN.1 construct as implemented in GnuTLS: EdDSAParameters ::=3D ENUMERATED { ed25519 (1), ed25519ph (2) } EdDSAPrivateKey ::=3D SEQUENCE { curve EdDSAParameters, priv OCTET STRING } We considered the ECPrivateKey construct but the definition of it uses the RSA Integer-to-Octet-String-Primitive (I2OSP) function to convert values from integers, and this is not applicable to EdDSA which uses opaque binary strings. I'll include the EdDSAPrivateKey ASN.1 structure. > 2. There is not an ASN.1 module defined for the document. I find this to > be useful as it centralized the information I need to feed to a compiler = in > one location. I would have a preference for using 2008 syntax, but would > understand if you kept the current 1988 syntax that the PKIX group strong= ly > preferred. Agreed. We could include both, to (not) please everyone. > 3. If you are going to include the random art in the examples, then a > pointer to what it is should be included as well. This is a new concept = to > me. It is only an illustration. > 4. I would believe that it would be remiss not to suggest that only the > pure versions of EdDSA be used to sign certificates. I would not outlaw = the > use of the pre-hash versions but a strong recommendation to use the pure > versions seems in order. Which text are you thinking of here? I don't see text like you describe, but I may be missing it. /Simon --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCAAGBQJXBm9rAAoJEIYLf7sy+BGdNnwH+wWMnsDdU0Y0xO+MUI6XjoLc 54nCsUmA7SY3aGUBk1NjGi84vVJkAzqHzWkqjldHJ1NHwanzbAEU7lzceSnjlEX6 eMv/DxihopsyQFqHrk7z1U+Ogy7Vg3rtdzVCuo6RSYtZ6V41B0yZvYyxjEAvo9Yp lrFAh3Gz3oMH1ASWvbAjqr2IOtbabt3wDpy67Ae99DTk7ev9MMwxmp/jhUmpjYNQ rMvkRM0cWKK41RMesC4aHDsrQz53gbIj9HFFnlU8KKvOvuoDl0FftssLg4PSS90/ sl/DbUCxRBkUkXGgPG1ePg8KMr/RYclYxySMSWpdL0jQX/QvtSjvUFPL/UwNUEQ= =ssIy -----END PGP SIGNATURE----- --=-=-=-- From nobody Thu Apr 7 07:49:14 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F1F2A12D196 for ; Thu, 7 Apr 2016 07:49:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WymmmeSPGyvq for ; Thu, 7 Apr 2016 07:49:08 -0700 (PDT) Received: from duva.sjd.se (duva.sjd.se [IPv6:2001:9b0:1:1702::100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5DC8A12D94E for ; Thu, 7 Apr 2016 07:36:15 -0700 (PDT) Received: from latte.josefsson.org ([155.4.17.2]) (authenticated bits=0) by duva.sjd.se (8.14.4/8.14.4/Debian-4+deb7u1) with ESMTP id u37EZxMq006023 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=NOT); Thu, 7 Apr 2016 16:36:01 +0200 From: Simon Josefsson To: Russ Housley References: <029701d18935$89182cf0$9b4886d0$@augustcellars.com> OpenPGP: id=54265E8C; url=http://josefsson.org/54265e8c.txt X-Hashcash: 1:22:160407:housley@vigilsec.com::K3z8XHowzAonNMgq:us8 X-Hashcash: 1:22:160407:curdle@ietf.org::OnUC7ZmoVDU8kx/n:XHzE Date: Thu, 07 Apr 2016 16:35:58 +0200 In-Reply-To: (Russ Housley's message of "Tue, 5 Apr 2016 14:16:36 -0400") Message-ID: <8760vt5vw1.fsf@latte.josefsson.org> User-Agent: Gnus/5.130014 (Ma Gnus v0.14) Emacs/24.4 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Virus-Scanned: clamav-milter 0.99 at duva.sjd.se X-Virus-Status: Clean Archived-At: Cc: curdle@ietf.org Subject: Re: [Curdle] draft-ietf-curdle-pkix-newcurves X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Apr 2016 14:49:12 -0000 --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Russ Housley writes: > I expect that CMS will be one of the protocols where we make use of the n= ew curves. > > ECDH will be used for key agreement with Enveloped-Data and EdDSA will > we used for digital signature with Signed-Data. > > For ECDH, the ECPoint will carry the public key, and the parameter > will identify the named curve. Right. > I gather that this is the intended us of: > > id-Curve25519 OBJECT IDENTIFIER ::=3D { 1.3.6.1.4.1.11591.15.1 } > id-Curve448 OBJECT IDENTIFIER ::=3D { 1.3.6.1.4.1.11591.15.2 } > > If I got that right, something like id-ecdh-with-curveXXX seems like a > name that will help the human. NamedCurve OIDs are used for other purposes than ECDH, so I believe this would be confusing. Compare the NIST and Brainpool NamedCurve OIDs, none of them include 'ecdh-with'. Or am I missing something? Compare the more recent RFC 5639. > I think the other two object identifiers in the document are only for use= with EdDSA. > > id-Curve25519ph OBJECT IDENTIFIER ::=3D { 1.3.6.1.4.1.11591.15.3 } > id-Curve448ph OBJECT IDENTIFIER ::=3D { 1.3.6.1.4.1.11591.15.4 } > > If I got that right, something like id-eddsa-with-curveXXX seems like > a name that will help the human. I have the same concern here. I believe NamedCurve OIDs are used to identify the curves themselves, not the purpose for what the curve is be used for. Otherwise we would have different OIDs for DH or MQV, for example, and we don't. Thanks, /Simon > Russ > > > On Mar 28, 2016, at 5:05 PM, Jim Schaad wrote: > >> I am confused on reading this draft. I read the DSA draft first and it = had >> one way of encoding the public keys. This draft appears to have a diffe= rent >> way of doing this. What are the authors recommending? >>=20 >> Jim > > _______________________________________________ > Curdle mailing list > Curdle@ietf.org > https://www.ietf.org/mailman/listinfo/curdle --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCAAGBQJXBnBPAAoJEIYLf7sy+BGdyuYH/05oKli+QtF4HcMSi0POR5+4 pNPkWID6Px/Lo5MwBUWWKd+VuMyAxAPAVHcxw5762uujWjeB5klO7BuQTMQxMHaK TJP44/x8GihbAv42h7CmGdXET+C1OKknIgMnz4KUacvtJ1L6np+Ljo8k6jGXyt5v wGEoFVQAIHZP8zvFpqdVyz823zQX3Lf2bp1mBZjdCUpBPAVoA0Cs2bbo1Ncso11F kqpyRHbYivfaqEQ+S0OKlr1T+nxHeQg5av7qgC+Mebj0gbczpwqmM65WInZ7f+gq Ma13FqtzMzhyArQNXMMJ9yARe4El6Jr8cpAnMl1j5lXWlhDAkbSz5nPwodta3NM= =t4UU -----END PGP SIGNATURE----- --=-=-=-- From nobody Thu Apr 7 07:52:05 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D85D12D119 for ; Thu, 7 Apr 2016 07:52:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.9 X-Spam-Level: X-Spam-Status: No, score=-101.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, USER_IN_WHITELIST=-100] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZASR5dycu07t for ; Thu, 7 Apr 2016 07:51:56 -0700 (PDT) Received: from odin.smetech.net (x-bolt-wan.smeinc.net [209.135.219.146]) by ietfa.amsl.com (Postfix) with ESMTP id 9285612D521 for ; Thu, 7 Apr 2016 07:39:16 -0700 (PDT) Received: from localhost (ronin.smetech.net [209.135.209.5]) by odin.smetech.net (Postfix) with ESMTP id 6998BF24036; Thu, 7 Apr 2016 10:39:16 -0400 (EDT) X-Virus-Scanned: amavisd-new at smetech.net Received: from odin.smetech.net ([209.135.209.4]) by localhost (ronin.smeinc.net [209.135.209.5]) (amavisd-new, port 10024) with ESMTP id r+jEwGgV3lli; Thu, 7 Apr 2016 10:24:39 -0400 (EDT) Received: from dhcp-b4d9.meeting.ietf.org (dhcp-b4d9.meeting.ietf.org [31.133.180.217]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by odin.smetech.net (Postfix) with ESMTP id 0FF17F2402A; Thu, 7 Apr 2016 10:39:14 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Russ Housley In-Reply-To: <8760vt5vw1.fsf@latte.josefsson.org> Date: Thu, 7 Apr 2016 10:39:10 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <864A473F-C4D1-40DF-992F-1ECBE23E1421@vigilsec.com> References: <029701d18935$89182cf0$9b4886d0$@augustcellars.com> <8760vt5vw1.fsf@latte.josefsson.org> To: Simon Josefsson X-Mailer: Apple Mail (2.1878.6) Archived-At: Cc: curdle@ietf.org Subject: Re: [Curdle] draft-ietf-curdle-pkix-newcurves X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Apr 2016 14:52:04 -0000 Okay. I understand your point. Russ On Apr 7, 2016, at 10:35 AM, Simon Josefsson = wrote: > Russ Housley writes: >=20 >> I expect that CMS will be one of the protocols where we make use of = the new curves. >>=20 >> ECDH will be used for key agreement with Enveloped-Data and EdDSA = will >> we used for digital signature with Signed-Data. >>=20 >> For ECDH, the ECPoint will carry the public key, and the parameter >> will identify the named curve. >=20 > Right. >=20 >> I gather that this is the intended us of: >>=20 >> id-Curve25519 OBJECT IDENTIFIER ::=3D { = 1.3.6.1.4.1.11591.15.1 } >> id-Curve448 OBJECT IDENTIFIER ::=3D { = 1.3.6.1.4.1.11591.15.2 } >>=20 >> If I got that right, something like id-ecdh-with-curveXXX seems like = a >> name that will help the human. >=20 > NamedCurve OIDs are used for other purposes than ECDH, so I believe = this > would be confusing. Compare the NIST and Brainpool NamedCurve OIDs, > none of them include 'ecdh-with'. Or am I missing something? Compare > the more recent RFC 5639. >=20 >> I think the other two object identifiers in the document are only for = use with EdDSA. >>=20 >> id-Curve25519ph OBJECT IDENTIFIER ::=3D { = 1.3.6.1.4.1.11591.15.3 } >> id-Curve448ph OBJECT IDENTIFIER ::=3D { = 1.3.6.1.4.1.11591.15.4 } >>=20 >> If I got that right, something like id-eddsa-with-curveXXX seems like >> a name that will help the human. >=20 > I have the same concern here. I believe NamedCurve OIDs are used to > identify the curves themselves, not the purpose for what the curve is = be > used for. Otherwise we would have different OIDs for DH or MQV, for > example, and we don't. >=20 > Thanks, > /Simon >=20 >> Russ >>=20 >>=20 >> On Mar 28, 2016, at 5:05 PM, Jim Schaad = wrote: >>=20 >>> I am confused on reading this draft. I read the DSA draft first and = it had >>> one way of encoding the public keys. This draft appears to have a = different >>> way of doing this. What are the authors recommending? >>>=20 >>> Jim >>=20 >> _______________________________________________ >> Curdle mailing list >> Curdle@ietf.org >> https://www.ietf.org/mailman/listinfo/curdle From nobody Thu Apr 7 08:06:49 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4AEF512D0A6 for ; Thu, 7 Apr 2016 08:06:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oh_365763Oxq for ; Thu, 7 Apr 2016 08:06:45 -0700 (PDT) Received: from usplmg21.ericsson.net (usplmg21.ericsson.net [198.24.6.65]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2E51D12D909 for ; Thu, 7 Apr 2016 07:54:26 -0700 (PDT) X-AuditID: c6180641-f79fa6d0000057a9-e1-5706747a4383 Received: from EUSAAHC006.ericsson.se (Unknown_Domain [147.117.188.90]) by usplmg21.ericsson.net (Symantec Mail Security) with SMTP id 1A.9F.22441.A7476075; Thu, 7 Apr 2016 16:53:47 +0200 (CEST) Received: from EUSAAMB107.ericsson.se ([147.117.188.124]) by EUSAAHC006.ericsson.se ([147.117.188.90]) with mapi id 14.03.0248.002; Thu, 7 Apr 2016 10:54:24 -0400 From: Daniel Migault To: Simon Josefsson , Jim Schaad Thread-Topic: [Curdle] draft-ietf-curdle-pkix-eddsa-00 Thread-Index: AdGJMwsylPP7mUd8TyGeiW34yZ+/EAHqXQnlAAAO4eA= Date: Thu, 7 Apr 2016 14:54:24 +0000 Message-ID: <2DD56D786E600F45AC6BDE7DA4E8A8C11223FBA1@eusaamb107.ericsson.se> References: <029601d18935$00515fe0$00f41fa0$@augustcellars.com> <87a8l55w2c.fsf@latte.josefsson.org> In-Reply-To: <87a8l55w2c.fsf@latte.josefsson.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.11] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprIIsWRmVeSWpSXmKPExsUyuXRPlG51CVu4wYf93BZbF85itnjwbTaz xerp39ks7m25xO7A4rFxznQ2jyVLfjJ5zDxzkd3jy+XPbAEsUVw2Kak5mWWpRfp2CVwZRy8u Yi24JlQxt2kWWwPjR74uRk4OCQETifUnfjFB2GISF+6tZ+ti5OIQEjjKKNE49x47hLOMUeLC ypusIFVsAkYSbYf62UFsEQE/ibYjh5hAipgFOhgl+hZPARslLGAq8W/yLhaIIjOJvta1rBC2 lcSOP7cYQWwWARWJ/e+/gg3iFfCV6Dy7HKxeSCBN4vyc42A1nAKGEltvXWMDsRmBzvt+ag3Y fGYBcYlbT+ZDnS0gsWTPeWYIW1Ti5eN/rBC2ksTH3/PZIep1JBbs/sQGYWtLLFv4mhlir6DE yZlPWCYwis1CMnYWkpZZSFpmIWlZwMiyipGjtLggJzfdyHATIzCijkmwOe5g3NvreYhRgINR iYdXYT9ruBBrYllxZe4hRgkOZiUR3gWZbOFCvCmJlVWpRfnxRaU5qcWHGKU5WJTEeb0j/4UJ CaQnlqRmp6YWpBbBZJk4OKUaGDdlX6j+8+QcY/OMtc7Vy1SPrxZYmzNl/poDYUZPtv47IOj1 8VqME/+xjSc1mhmFD++cVXf9+u2LqgW3pf3NMjYsYRO5bv1fsXjKaZWKN6uOnr/hrDG5+mSy mtbxL2mRGzdkrrH+xn6/VGuXpM68TwsTzDZUFhWZcwbs1Cj7M3VtxuuVMiEXGF8psRRnJBpq MRcVJwIATS0kEqQCAAA= Archived-At: Cc: "curdle@ietf.org" , "draft-ietf-curdle-pkix-eddsa@tools.ietf.org" Subject: Re: [Curdle] draft-ietf-curdle-pkix-eddsa-00 X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Apr 2016 15:06:47 -0000 Thanks for the updates Simon. We would appreciate that the WG review the dr= aft as soon as possible before so we proceed to the WGLC. BR,=20 Daniel -----Original Message----- From: Curdle [mailto:curdle-bounces@ietf.org] On Behalf Of Simon Josefsson Sent: Thursday, April 07, 2016 11:32 AM To: Jim Schaad Cc: curdle@ietf.org; draft-ietf-curdle-pkix-eddsa@tools.ietf.org Subject: Re: [Curdle] draft-ietf-curdle-pkix-eddsa-00 "Jim Schaad" writes: > I have read through this draft and I have a couple of issues that I=20 > would like to raise: > > 1. Although there is a private key in the examples, there is no private > key ASN.1 structure defined in the document. I would prefer to see=20 > the re-use of ECPrivateKey from RFC 5915. However, it needs to be=20 > redefined as the parameters field would not be correct The current example uses a new ASN.1 construct as implemented in GnuTLS: EdDSAParameters ::=3D ENUMERATED { ed25519 (1), ed25519ph (2) } EdDSAPrivat= eKey ::=3D SEQUENCE { curve EdDSAParameters, priv OCTET STRING } We considered the ECPrivateKey construct but the definition of it uses the = RSA Integer-to-Octet-String-Primitive (I2OSP) function to convert values fr= om integers, and this is not applicable to EdDSA which uses opaque binary s= trings. I'll include the EdDSAPrivateKey ASN.1 structure. > 2. There is not an ASN.1 module defined for the document. I find=20 > this to be useful as it centralized the information I need to feed to=20 > a compiler in one location. I would have a preference for using 2008=20 > syntax, but would understand if you kept the current 1988 syntax that=20 > the PKIX group strongly preferred. Agreed. We could include both, to (not) please everyone. > 3. If you are going to include the random art in the examples, then a=20 > pointer to what it is should be included as well. This is a new=20 > concept to me. It is only an illustration. > 4. I would believe that it would be remiss not to suggest that only=20 > the pure versions of EdDSA be used to sign certificates. I would not=20 > outlaw the use of the pre-hash versions but a strong recommendation to=20 > use the pure versions seems in order. Which text are you thinking of here? I don't see text like you describe, b= ut I may be missing it. /Simon From nobody Thu Apr 7 08:15:45 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A4A612D968 for ; Thu, 7 Apr 2016 08:15:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Szv2vwOO_U8g for ; Thu, 7 Apr 2016 08:15:28 -0700 (PDT) Received: from duva.sjd.se (duva.sjd.se [IPv6:2001:9b0:1:1702::100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D8CA312D87C for ; Thu, 7 Apr 2016 08:03:07 -0700 (PDT) Received: from latte.josefsson.org ([155.4.17.2]) (authenticated bits=0) by duva.sjd.se (8.14.4/8.14.4/Debian-4+deb7u1) with ESMTP id u37F0X6K008498 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=NOT); Thu, 7 Apr 2016 17:00:34 +0200 From: Simon Josefsson To: Daniel Migault References: <029601d18935$00515fe0$00f41fa0$@augustcellars.com> <87a8l55w2c.fsf@latte.josefsson.org> <2DD56D786E600F45AC6BDE7DA4E8A8C11223FBA1@eusaamb107.ericsson.se> OpenPGP: id=54265E8C; url=http://josefsson.org/54265e8c.txt X-Hashcash: 1:22:160407:curdle@ietf.org::VWLKaKqda2QL7yJq:1ON1 X-Hashcash: 1:22:160407:daniel.migault@ericsson.com::pZkkLSTCirFhmfqI:0iGq X-Hashcash: 1:22:160407:ietf@augustcellars.com::uR/+gVQdNjC/dFMG:1v7N X-Hashcash: 1:22:160407:draft-ietf-curdle-pkix-eddsa@tools.ietf.org::Q/XrFX/xaN3JeVxI:6Gni Date: Thu, 07 Apr 2016 17:00:32 +0200 In-Reply-To: <2DD56D786E600F45AC6BDE7DA4E8A8C11223FBA1@eusaamb107.ericsson.se> (Daniel Migault's message of "Thu, 7 Apr 2016 14:54:24 +0000") Message-ID: <871t6h5ur3.fsf@latte.josefsson.org> User-Agent: Gnus/5.130014 (Ma Gnus v0.14) Emacs/24.4 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Virus-Scanned: clamav-milter 0.99 at duva.sjd.se X-Virus-Status: Clean Archived-At: Cc: Jim Schaad , "draft-ietf-curdle-pkix-eddsa@tools.ietf.org" , "curdle@ietf.org" Subject: Re: [Curdle] draft-ietf-curdle-pkix-eddsa-00 X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Apr 2016 15:15:32 -0000 --=-=-= Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Daniel Migault writes: > Thanks for the updates Simon. We would appreciate that the WG review > the draft as soon as possible before so we proceed to the WGLC. What do you and the WG think of merging the content of these two drafts into one? They are both PKIX and Curve25519/448-related, and if we are going to push both ideas forward, having them in the same document make sense. The purpose behing separating the ideas into two separate documents was that we may end up with using only one of the approaches and saying the other one is not a good idea. There haven't been a lot of feedback/discussion on that aspect as far as I have seen. /Simon > BR,=20 > Daniel > > -----Original Message----- > From: Curdle [mailto:curdle-bounces@ietf.org] On Behalf Of Simon Josefsson > Sent: Thursday, April 07, 2016 11:32 AM > To: Jim Schaad > Cc: curdle@ietf.org; draft-ietf-curdle-pkix-eddsa@tools.ietf.org > Subject: Re: [Curdle] draft-ietf-curdle-pkix-eddsa-00 > > "Jim Schaad" writes: > >> I have read through this draft and I have a couple of issues that I=20 >> would like to raise: >> >> 1. Although there is a private key in the examples, there is no private >> key ASN.1 structure defined in the document. I would prefer to see=20 >> the re-use of ECPrivateKey from RFC 5915. However, it needs to be=20 >> redefined as the parameters field would not be correct > > The current example uses a new ASN.1 construct as implemented in GnuTLS: > > EdDSAParameters ::=3D ENUMERATED { ed25519 (1), ed25519ph (2) } EdDSAPriv= ateKey ::=3D SEQUENCE { > curve EdDSAParameters, > priv OCTET STRING > } > > We considered the ECPrivateKey construct but the definition of it uses >> the RSA Integer-to-Octet-String-Primitive (I2OSP) function to >> convert values from integers, and this is not applicable to EdDSA >> which uses opaque binary strings. > > I'll include the EdDSAPrivateKey ASN.1 structure. > >> 2. There is not an ASN.1 module defined for the document. I find=20 >> this to be useful as it centralized the information I need to feed to=20 >> a compiler in one location. I would have a preference for using 2008=20 >> syntax, but would understand if you kept the current 1988 syntax that=20 >> the PKIX group strongly preferred. > > Agreed. We could include both, to (not) please everyone. > >> 3. If you are going to include the random art in the examples, then a=20 >> pointer to what it is should be included as well. This is a new=20 >> concept to me. > > It is only an illustration. > >> 4. I would believe that it would be remiss not to suggest that only=20 >> the pure versions of EdDSA be used to sign certificates. I would not=20 >> outlaw the use of the pre-hash versions but a strong recommendation to=20 >> use the pure versions seems in order. > > Which text are you thinking of here? I don't see text like you describe,= but I may be missing it. > > /Simon --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBCAAGBQJXBnYQAAoJEIYLf7sy+BGdJZUH+wTM3A7ipvSE7GperIEug+cs yxyyn3Nvqlcyvrim3BAD5xkajpRHBvjnL4MQTjWya1bJ5g32nG8OX/FUTNl0mhsZ w4vYV6AQtWBe+oIWrIhKunLzWYaL6phlCOQ88xX7qdG4Vzd6N/K9MqBHw+At7E5p r9viq5G+DrX0BHwsg8dXA+FP3GZ09VWeeR7xesvksC2ERAgpWL0UjMIuIXwdpPRu Pr2PyFbQLatx/TgTQhX6sQn6LsC9zaeMUjVVZzQiaC2qdQ9EF7R8/6TifOoES6Ch PBrOFBbKe9C7gNGjuvdJ9p5pCkfQug0XWDD68//5OfKCuc0n0IUshqyZdoY7Ns0= =fz5p -----END PGP SIGNATURE----- --=-=-=-- From nobody Thu Apr 7 09:02:38 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 59AAF12D18F for ; Thu, 7 Apr 2016 09:02:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id swTxNUzCpL8Z for ; Thu, 7 Apr 2016 09:02:31 -0700 (PDT) Received: from mail-wm0-x231.google.com (mail-wm0-x231.google.com [IPv6:2a00:1450:400c:c09::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 62F8012D16D for ; Thu, 7 Apr 2016 09:02:31 -0700 (PDT) Received: by mail-wm0-x231.google.com with SMTP id u206so93537961wme.1 for ; Thu, 07 Apr 2016 09:02:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:to:references:cc:from:message-id:date:user-agent :mime-version:in-reply-to:content-transfer-encoding; bh=qMikAcmNguFMMMBfLt6vF8vIsUlyriYz5kQo+BqNVRE=; b=AETtXLJwlp+bQpW3D/57G7obQB4MTs5OUkF0xsKMzn1paQHSUKGT/YpXYy3o0vwL3d tP26F531LfEhxigwcjiUv9wDmFpeQwEsk88im1Kx4P2w0d0lFKblbFG216eZm2zDt3RB MfOnjaB44euVgzWAxsOY5IVYNpfUc7v/0HPwkNoClZPPLCUdFcaEtCLt8MMIS6e8GOsr DY8Vjq+XuyKGED+jsCTxjGi9R0Gij/7oqRDuduz43+FlpNnPAYnxlK4YBc/aahUZbRgM EXmsnFpf+ZAgbtk/xonj0hAA/ckxRJ+THEblFhvGh5E/uDlkWkRm1oTCMKK4C5xeT1PF V0ag== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:to:references:cc:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=qMikAcmNguFMMMBfLt6vF8vIsUlyriYz5kQo+BqNVRE=; b=Yb2B8611PTKYjWMEir14n8fi82KYHikrlBD0fyWBF2HC0toZCr2agL1U0VcAjhcSox H+My/O6VrmTq3d8MG0h6CGEV5n6MByHnGqhfDU32M3bP1NoWqnuFFfzg1k+vVIKh8oeO qiLDM7dm3lxkh2xWqHmOSwiMC/Vt03Ot4U5knbbu0GkGrz5RjuwYL26CtGB1J/9Mg+A1 YZRVTfRwD3YpOU772c1HCuwCB6lVdhWmzo/N86FYerGrNF/ASAAgRWSbsdJ+mr//KNa1 okk1wnJak8oKU4lI0myIcSwLV8N0Fmd5u0bEdM9LdGCytKj1/Fjhwp668OcOcF8HUijj E2OQ== X-Gm-Message-State: AD7BkJK3YStlo7EDQrLCGrpaZqUfhoO1XztLdV+ArSVT8BBlH/ATy/2w1xg2y/hGSELTAw== X-Received: by 10.28.100.132 with SMTP id y126mr27320687wmb.91.1460044949899; Thu, 07 Apr 2016 09:02:29 -0700 (PDT) Received: from [192.168.1.79] (124.25.176.95.rev.sfr.net. [95.176.25.124]) by smtp.googlemail.com with ESMTPSA id m6sm9123427wje.21.2016.04.07.09.02.28 (version=TLSv1/SSLv3 cipher=OTHER); Thu, 07 Apr 2016 09:02:29 -0700 (PDT) To: Simon Josefsson , Jim Schaad References: <029701d18935$89182cf0$9b4886d0$@augustcellars.com> <87egah5wm8.fsf@latte.josefsson.org> From: Anders Rundgren Message-ID: <57068493.5000603@gmail.com> Date: Thu, 7 Apr 2016 18:02:27 +0200 User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.7.2 MIME-Version: 1.0 In-Reply-To: <87egah5wm8.fsf@latte.josefsson.org> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Cc: curdle@ietf.org, draft-ietf-curdle-pkix-newcurves@tools.ietf.org Subject: Re: [Curdle] draft-ietf-curdle-pkix-newcurves X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Apr 2016 16:02:36 -0000 If I do this in openssl: openssl ecparam -name prime256v1 -genkey -out prime256v1.pem -noout The resulting PEM file -----BEGIN EC PRIVATE KEY----- MHcCAQEEIBCJ4KQUK24oUNEz/m3E9Fzu115J3btbUWICmEAezudtoAoGCCqGSM49 AwEHoUQDQgAE99m5W2jLA0KUld2QIWUq440ZngvUFgaMpeJ+ng9diJ+JrnHFb5Zx BElOa6uZQbey3Mp7ajnYfKG6uCt3IbpB6g== -----END EC PRIVATE KEY----- after base64 decoding holds the following: 0: SEQUENCE { 2: INTEGER 1 5: OCTET STRING, 32 bytes 0000: 10 89 E0 A4 14 2B 6E 28 50 D1 33 FE 6D C4 F4 5C '.....+n(P.3.m..\' 0010: EE D7 5E 49 DD BB 5B 51 62 02 98 40 1E CE E7 6D '..^I..[Qb..@...m' 39: [0] { 41: OBJECT IDENTIFIER NIST-P-256 (1.2.840.10045.3.1.7) } 51: [1] { 53: BIT STRING, 65 bytes 0000: 04 F7 D9 B9 5B 68 CB 03 42 94 95 DD 90 21 65 2A '....[h..B....!e*' 0010: E3 8D 19 9E 0B D4 16 06 8C A5 E2 7E 9E 0F 5D 88 '...........~..].' 0020: 9F 89 AE 71 C5 6F 96 71 04 49 4E 6B AB 99 41 B7 '...q.o.q.INk..A.' 0030: B2 DC CA 7B 6A 39 D8 7C A1 BA B8 2B 77 21 BA 41 '...{j9.|...+w!.A' 0040: EA '.' } } That is, the public key is also available. This is BTW marked as a SHOULD in RFC 5915. I would be happy if the private key ASN.1 definition followed this scheme. Anders From nobody Thu Apr 7 10:47:52 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E144412D56A for ; Thu, 7 Apr 2016 10:47:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.711 X-Spam-Level: X-Spam-Status: No, score=-2.711 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aDLSaq8rSf8D for ; Thu, 7 Apr 2016 10:47:49 -0700 (PDT) Received: from prod-mail-xrelay06.akamai.com (prod-mail-xrelay06.akamai.com [96.6.114.98]) by ietfa.amsl.com (Postfix) with ESMTP id 55BB712D531 for ; Thu, 7 Apr 2016 10:47:49 -0700 (PDT) Received: from prod-mail-xrelay06.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id 9070D16CB49; Thu, 7 Apr 2016 17:47:48 +0000 (GMT) Received: from prod-mail-relay08.akamai.com (prod-mail-relay08.akamai.com [172.27.22.71]) by prod-mail-xrelay06.akamai.com (Postfix) with ESMTP id 7A2C716CB4F; Thu, 7 Apr 2016 17:47:48 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; s=a1; t=1460051268; bh=fGsryWV9tTIRGOfmkMAVRuJ051RHb/cFyoRYxwdWddk=; l=271; h=From:To:CC:Date:References:In-Reply-To:From; b=iWN4khK7yJNEj2QozrBKZ31u0+CbIUsOY9EFN8As85Vp83XtatV82bj0ZzEU31Saq YVocy7sYiaRBvJiLOS2JeQFinTMgRsOF+Nk3M7klEiVet1KAY4gdpfxnDiXGBKnZYT ASOqOZK18FD+ERo9QAUbL++RsfsqsUMcQgDb09o0= Received: from email.msg.corp.akamai.com (usma1ex-cas2.msg.corp.akamai.com [172.27.123.31]) by prod-mail-relay08.akamai.com (Postfix) with ESMTP id 60FF998082; Thu, 7 Apr 2016 17:47:48 +0000 (GMT) Received: from USMA1EX-EXJRNL1.msg.corp.akamai.com (172.27.123.99) by usma1ex-dag1mb5.msg.corp.akamai.com (172.27.123.105) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Thu, 7 Apr 2016 13:47:48 -0400 Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com (172.27.123.101) by USMA1EX-EXJRNL1.msg.corp.akamai.com (172.27.123.99) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Thu, 7 Apr 2016 13:47:47 -0400 Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com ([172.27.123.101]) by usma1ex-dag1mb1.msg.corp.akamai.com ([172.27.123.101]) with mapi id 15.00.1130.005; Thu, 7 Apr 2016 13:47:47 -0400 From: "Salz, Rich" To: Simon Josefsson , Daniel Migault Thread-Topic: [Curdle] draft-ietf-curdle-pkix-eddsa-00 Thread-Index: AdGJMwsylPP7mUd8TyGeiW34yZ+/EAHqXPniAAiZ8gD//8Mecf//1fRA Date: Thu, 7 Apr 2016 17:47:46 +0000 Message-ID: <350e0f12725742549ec1d2bf83265abd@usma1ex-dag1mb1.msg.corp.akamai.com> References: <029601d18935$00515fe0$00f41fa0$@augustcellars.com> <87a8l55w2c.fsf@latte.josefsson.org> <2DD56D786E600F45AC6BDE7DA4E8A8C11223FBA1@eusaamb107.ericsson.se> <871t6h5ur3.fsf@latte.josefsson.org> In-Reply-To: <871t6h5ur3.fsf@latte.josefsson.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.48.46] Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Cc: Jim Schaad , "draft-ietf-curdle-pkix-eddsa@tools.ietf.org" , "curdle@ietf.org" Subject: Re: [Curdle] draft-ietf-curdle-pkix-eddsa-00 X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Apr 2016 17:47:51 -0000 Since the WG agreed to merge the DNS documents into one, I suggest the same= thing makes sense here. And to repeat what Daniel said: thanks very much for your work on these! -- =20 Senior Architect, Akamai Technologies IM: richsalz@jabber.at Twitter: RichSalz From nobody Thu Apr 7 10:53:58 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A13D12D595 for ; Thu, 7 Apr 2016 10:53:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RzXEQSxdS6Mq for ; Thu, 7 Apr 2016 10:53:53 -0700 (PDT) Received: from welho-filter2.welho.com (welho-filter2.welho.com [83.102.41.24]) by ietfa.amsl.com (Postfix) with ESMTP id 4853E12D578 for ; Thu, 7 Apr 2016 10:53:52 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by welho-filter2.welho.com (Postfix) with ESMTP id 20D9A27B2; Thu, 7 Apr 2016 20:53:51 +0300 (EEST) X-Virus-Scanned: Debian amavisd-new at pp.htv.fi Received: from welho-smtp1.welho.com ([IPv6:::ffff:83.102.41.84]) by localhost (welho-filter2.welho.com [::ffff:83.102.41.24]) (amavisd-new, port 10024) with ESMTP id wuFl2roTxbvE; Thu, 7 Apr 2016 20:53:50 +0300 (EEST) Received: from LK-Perkele-V2 (87-100-143-35.bb.dnainternet.fi [87.100.143.35]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by welho-smtp1.welho.com (Postfix) with ESMTPSA id BCBE228A; Thu, 7 Apr 2016 20:53:50 +0300 (EEST) Date: Thu, 7 Apr 2016 20:53:49 +0300 From: Ilari Liusvaara To: Simon Josefsson Message-ID: <20160407175349.GA27211@LK-Perkele-V2.elisa-laajakaista.fi> References: <029701d18935$89182cf0$9b4886d0$@augustcellars.com> <87egah5wm8.fsf@latte.josefsson.org> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <87egah5wm8.fsf@latte.josefsson.org> User-Agent: Mutt/1.5.24 (2015-08-30) Sender: ilariliusvaara@welho.com Archived-At: Cc: Jim Schaad , curdle@ietf.org, draft-ietf-curdle-pkix-newcurves@tools.ietf.org Subject: Re: [Curdle] draft-ietf-curdle-pkix-newcurves X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 07 Apr 2016 17:53:57 -0000 On Thu, Apr 07, 2016 at 04:20:15PM +0200, Simon Josefsson wrote: > "Jim Schaad" writes: > > > I am confused on reading this draft. I read the DSA draft first and it had > > one way of encoding the public keys. This draft appears to have a different > > way of doing this. What are the authors recommending? > > I don't think the situation is as easy as say that The NamedCurve OIDs > are for ECDH and the pkix-eddsa approach is for digital signatures. We > could go that route, but I believe it is a simplification that will hurt > some application in the long run. For example, when you want to chose a > curve before knowing what operation it will be used for (think PKCS#11). The problem is that to use the same public key for ECDH and EdDSA requires special peer side support. This is not about security, but what mathematically works. ECDH and ECDSA with full-group curves do not have the same problem (it isn't cryptographically good practice, but that's about security). -Ilari From nobody Fri Apr 8 10:40:12 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F14B612D13C for ; Fri, 8 Apr 2016 10:40:10 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.9 X-Spam-Level: X-Spam-Status: No, score=-101.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, USER_IN_WHITELIST=-100] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tZ3NtVsdpav0 for ; Fri, 8 Apr 2016 10:40:01 -0700 (PDT) Received: from odin.smetech.net (x-bolt-wan.smeinc.net [209.135.219.146]) by ietfa.amsl.com (Postfix) with ESMTP id BEC2112D95A for ; Fri, 8 Apr 2016 10:40:01 -0700 (PDT) Received: from localhost (ronin.smetech.net [209.135.209.5]) by odin.smetech.net (Postfix) with ESMTP id 38F72F2402A for ; Fri, 8 Apr 2016 13:40:01 -0400 (EDT) X-Virus-Scanned: amavisd-new at smetech.net Received: from odin.smetech.net ([209.135.209.4]) by localhost (ronin.smeinc.net [209.135.209.5]) (amavisd-new, port 10024) with ESMTP id csq-kavs6JRb for ; Fri, 8 Apr 2016 13:25:09 -0400 (EDT) Received: from dhcp-b4d9.meeting.ietf.org (dhcp-b4d9.meeting.ietf.org [31.133.180.217]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by odin.smetech.net (Postfix) with ESMTP id 4723CF24036 for ; Fri, 8 Apr 2016 13:39:49 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Russ Housley In-Reply-To: (Russ Housley's message of "Tue, 5 Apr 2016 14:16:36 -0400") Date: Fri, 8 Apr 2016 13:39:47 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <93754E03-E4E2-4DD4-AFA9-E0C92F35C14E@vigilsec.com> References: <029701d18935$89182cf0$9b4886d0$@augustcellars.com> To: curdle@ietf.org X-Mailer: Apple Mail (2.1878.6) Archived-At: Subject: [Curdle] draft-housley-cms-chacha20-poly1305-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Apr 2016 17:40:11 -0000 We already have RFC 5084 that specifies the use of AES-CCM and AES-GCM = with CMS. A few days ago, I posted an I-D that specifies the use of ChaCha20 with = Poly1305 with CMS: = https://www.ietf.org/id/draft-housley-cms-chacha20-poly1305-00.txt Stephen Farrell told me that he would like this document to go through = this working group. Please read and review. Is this working group = willing to adopt it? Russ= From nobody Fri Apr 8 10:54:59 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A0B4E12D0EA for ; Fri, 8 Apr 2016 10:54:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lTBv6DszspKh for ; Fri, 8 Apr 2016 10:54:48 -0700 (PDT) Received: from duva.sjd.se (duva.sjd.se [IPv6:2001:9b0:1:1702::100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8652312D526 for ; Fri, 8 Apr 2016 10:54:48 -0700 (PDT) Received: from latte.josefsson.org ([IPv6:2001:9b0:104:42::a86]) (authenticated bits=0) by duva.sjd.se (8.14.4/8.14.4/Debian-4+deb7u1) with ESMTP id u38HqW8a032392 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=NOT); Fri, 8 Apr 2016 19:52:33 +0200 Date: Fri, 8 Apr 2016 19:52:30 +0200 From: Simon Josefsson To: Ilari Liusvaara Message-ID: <20160408195230.279b8b97@latte.josefsson.org> In-Reply-To: <20160407175349.GA27211@LK-Perkele-V2.elisa-laajakaista.fi> References: <029701d18935$89182cf0$9b4886d0$@augustcellars.com> <87egah5wm8.fsf@latte.josefsson.org> <20160407175349.GA27211@LK-Perkele-V2.elisa-laajakaista.fi> X-Mailer: Claws Mail 3.11.1 (GTK+ 2.24.25; x86_64-pc-linux-gnu) MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; boundary="Sig_/QSGyvHGXCKEHa5oB67WwReu"; protocol="application/pgp-signature" X-Virus-Scanned: clamav-milter 0.99 at duva.sjd.se X-Virus-Status: Clean Archived-At: Cc: Jim Schaad , curdle@ietf.org, draft-ietf-curdle-pkix-newcurves@tools.ietf.org Subject: Re: [Curdle] draft-ietf-curdle-pkix-newcurves X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 08 Apr 2016 17:54:57 -0000 --Sig_/QSGyvHGXCKEHa5oB67WwReu Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable > On Thu, Apr 07, 2016 at 04:20:15PM +0200, Simon Josefsson wrote: > > "Jim Schaad" writes: > >=20 > > > I am confused on reading this draft. I read the DSA draft first > > > and it had one way of encoding the public keys. This draft > > > appears to have a different way of doing this. What are the > > > authors recommending? > >=20 > > I don't think the situation is as easy as say that The NamedCurve > > OIDs are for ECDH and the pkix-eddsa approach is for digital > > signatures. We could go that route, but I believe it is a > > simplification that will hurt some application in the long run. > > For example, when you want to chose a curve before knowing what > > operation it will be used for (think PKCS#11). >=20 > The problem is that to use the same public key for ECDH and EdDSA > requires special peer side support. This is not about security, but > what mathematically works. > > ECDH and ECDSA with full-group curves do not have the same problem > (it isn't cryptographically good practice, but that's about security). Why would we want people to use the same public key for ECDH and EdDSA? That seems like a terrible idea that we should simply recommend against. /Simon --Sig_/QSGyvHGXCKEHa5oB67WwReu Content-Type: application/pgp-signature Content-Description: OpenPGP digital signatur -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAEBCAAGBQJXB+/fAAoJEIYLf7sy+BGddXYIALVYfBzn1GMiP/6/yMa0JfIx B0OkRFLMjwuYETouqQrhLUGR7lS1AMcYYaHWodOqIplEoboayeBzTeC3eh6M7KQf Gpd89aGNOyYh5FF9q2YPFshNTJL2OTFNNsdHq2/Qy3wcu2eztLueIhksFMqnKMKY MfwvaMBj/9G6Gr4dcv3SfbnMqWqifhyvJgA+wXlkzXMD48DfLDVoEpjfn7LDlO2Y 6RFLFzVhXyjBgkt7jbT1wo6YM42vr7OXgD25ubhXku42A3sdHH6Tv2Iiagji/AYm +m+dI7d9i52yQK09I4MNAt5rt5CJ4HXWLUb91NlAuO4V7/s/wT+2J5cUI2aj26A= =B7ur -----END PGP SIGNATURE----- --Sig_/QSGyvHGXCKEHa5oB67WwReu-- From nobody Fri Apr 8 20:27:01 2016 Return-Path: X-Original-To: curdle@ietf.org Delivered-To: curdle@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id EDAC412D531; Fri, 8 Apr 2016 20:26:59 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.19.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160409032659.23044.45734.idtracker@ietfa.amsl.com> Date: Fri, 08 Apr 2016 20:26:59 -0700 Archived-At: Cc: curdle@ietf.org Subject: [Curdle] I-D Action: draft-ietf-curdle-pkix-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 Apr 2016 03:27:00 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CURves, Deprecating and a Little more Encryption of the IETF. Title : EdDSA, Ed25519, Ed448, Curve25519 and Curve448 for X.509 Author : Simon Josefsson Filename : draft-ietf-curdle-pkix-00.txt Pages : 12 Date : 2016-04-08 Abstract: This document specify algorithm identifiers and ASN.1 encoding formats for EdDSA digital signatures, subject public keys, and a "named curve" object identifier, used in the Internet X.509 Public Key Infrastructure. Parameters for Ed25519, Ed25519ph, Ed448, Ed448ph, Curve25519 and Curve448 are defined. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-curdle-pkix/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-curdle-pkix-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Fri Apr 8 21:53:55 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8562512D732 for ; Fri, 8 Apr 2016 21:53:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w8Xlvr3ips7Y for ; Fri, 8 Apr 2016 21:53:52 -0700 (PDT) Received: from mail-wm0-x22d.google.com (mail-wm0-x22d.google.com [IPv6:2a00:1450:400c:c09::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 46BE412D6E6 for ; Fri, 8 Apr 2016 21:53:52 -0700 (PDT) Received: by mail-wm0-x22d.google.com with SMTP id f198so85144732wme.0 for ; Fri, 08 Apr 2016 21:53:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:references:to:from:message-id:date:user-agent:mime-version :in-reply-to:content-transfer-encoding; bh=G850pyX/6EwY2gmQ440bC0xlRTqfT64H5g8mL+LQQw4=; b=svrbdxlu7A/zmyDrwcpLqq6JXby+cqXRL438yUhTb2merpWfgtaXqeVBcqqN11hCoR zE8qULeZV6THXtdLyeOKxSbViN65JPpZ6/FevVlMxO0MXK8mdmBqNdHAIMjZW2Jpzo2a nwMylMqEOL3pO8OOOmZWQxjhRKlBCHxSUdWtfbJZXL+1u8hnO2w9tIgicyQKkfnTM+Ql ejXyNr6wJfBY3CFwKWdsAU/2MLb3UJzPblP0Zom1IpaGl1KyP+jslXNfkk/u1NSGQYBe BsWgr8oZtEeZBY07e1CJzqsGRFQCrD5ApNdvUCGEE9vlixLsXuenrluhF3/VUVmI35oY bCPQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:references:to:from:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=G850pyX/6EwY2gmQ440bC0xlRTqfT64H5g8mL+LQQw4=; b=UVieNdFcutXWIjLASPbmjA7IbnhJ8e3MZt5LzJL+jvNjDOzN0G5mYgJCdguXOOVs8k b5DUTOvToYkEUa5vxkULMsagzD0naqjMGwn+6JyQdZnLLIYPBWNBtXkCwv4yDJEPks6q YFJCFmf+ZV2E9mOTZb0enM7lx/Ve6lnP0/Q02bUkyz9jzCesdKKLRnoI1AoqZpraXSP4 bEbIi2/wSL3x1EVYuBU2Bluj0hs+WQf3/mrBrN5KuQ9Jic9ljpstV9mSRa0+zfqYDyJk ofLJJJrwUZeUz7uemr5F+bqa8qGIzLzoN9z+39N/7E0WmxMJtZDqzMuNHTbMFKt6yTkx 1YOA== X-Gm-Message-State: AD7BkJIptzW1XkFfTjUkmdASCwOqfUWvUHnjHKPpUxIyp9YMXJO+UY+jA1R5B/Lfxh6HCA== X-Received: by 10.194.123.102 with SMTP id lz6mr14120622wjb.2.1460177630807; Fri, 08 Apr 2016 21:53:50 -0700 (PDT) Received: from [192.168.1.79] (124.25.176.95.rev.sfr.net. [95.176.25.124]) by smtp.googlemail.com with ESMTPSA id o1sm9884305wjm.11.2016.04.08.21.53.49 for (version=TLSv1/SSLv3 cipher=OTHER); Fri, 08 Apr 2016 21:53:49 -0700 (PDT) References: <20160409032659.23044.45734.idtracker@ietfa.amsl.com> To: curdle@ietf.org From: Anders Rundgren Message-ID: <57088ADA.5010104@gmail.com> Date: Sat, 9 Apr 2016 06:53:46 +0200 User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:38.0) Gecko/20100101 Thunderbird/38.7.2 MIME-Version: 1.0 In-Reply-To: <20160409032659.23044.45734.idtracker@ietfa.amsl.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [Curdle] I-D Action: draft-ietf-curdle-pkix-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 Apr 2016 04:53:54 -0000 It seems that private keys now follows the scheme I proposed but it didn't fully make it to the PEM sample in the draft. Anders On 2016-04-09 05:26, internet-drafts@ietf.org wrote: > > A New Internet-Draft is available from the on-line Internet-Drafts directories. > This draft is a work item of the CURves, Deprecating and a Little more Encryption of the IETF. > > Title : EdDSA, Ed25519, Ed448, Curve25519 and Curve448 for X.509 > Author : Simon Josefsson > Filename : draft-ietf-curdle-pkix-00.txt > Pages : 12 > Date : 2016-04-08 > > Abstract: > This document specify algorithm identifiers and ASN.1 encoding > formats for EdDSA digital signatures, subject public keys, and a > "named curve" object identifier, used in the Internet X.509 Public > Key Infrastructure. Parameters for Ed25519, Ed25519ph, Ed448, > Ed448ph, Curve25519 and Curve448 are defined. > > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-curdle-pkix/ > > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-ietf-curdle-pkix-00 > > > Please note that it may take a couple of minutes from the time of submission > until the htmlized version and diff are available at tools.ietf.org. > > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ > > _______________________________________________ > Curdle mailing list > Curdle@ietf.org > https://www.ietf.org/mailman/listinfo/curdle > From nobody Sat Apr 9 00:32:55 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 57CA812D1D6 for ; Sat, 9 Apr 2016 00:32:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.91 X-Spam-Level: X-Spam-Status: No, score=-1.91 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vO8F89_zQMzf for ; Sat, 9 Apr 2016 00:32:51 -0700 (PDT) Received: from welho-filter3.welho.com (welho-filter3.welho.com [83.102.41.25]) by ietfa.amsl.com (Postfix) with ESMTP id A7B2A12D1B7 for ; Sat, 9 Apr 2016 00:32:49 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by welho-filter3.welho.com (Postfix) with ESMTP id EE2CB33EB for ; Sat, 9 Apr 2016 10:32:47 +0300 (EEST) X-Virus-Scanned: Debian amavisd-new at pp.htv.fi Received: from welho-smtp1.welho.com ([IPv6:::ffff:83.102.41.84]) by localhost (welho-filter3.welho.com [::ffff:83.102.41.25]) (amavisd-new, port 10024) with ESMTP id sTt6A8ZUuYGw for ; Sat, 9 Apr 2016 10:32:47 +0300 (EEST) Received: from LK-Perkele-V2 (87-100-143-35.bb.dnainternet.fi [87.100.143.35]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by welho-smtp1.welho.com (Postfix) with ESMTPSA id 0DFC3C4 for ; Sat, 9 Apr 2016 10:32:47 +0300 (EEST) Date: Sat, 9 Apr 2016 10:32:45 +0300 From: Ilari Liusvaara To: curdle@ietf.org Message-ID: <20160409073245.GA4216@LK-Perkele-V2.elisa-laajakaista.fi> References: <20160409032659.23044.45734.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <20160409032659.23044.45734.idtracker@ietfa.amsl.com> User-Agent: Mutt/1.5.24 (2015-08-30) Sender: ilariliusvaara@welho.com Archived-At: Subject: Re: [Curdle] I-D Action: draft-ietf-curdle-pkix-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 Apr 2016 07:32:54 -0000 On Fri, Apr 08, 2016 at 08:26:59PM -0700, internet-drafts@ietf.org wrote: > > A New Internet-Draft is available from the on-line Internet-Drafts directories. > This draft is a work item of the CURves, Deprecating and a Little more Encryption of the IETF. > > Filename : draft-ietf-curdle-pkix-00.txt > > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-curdle-pkix/ > > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-ietf-curdle-pkix-00 Some questions / notes: 1) What is the public key format for each OID? I presume: id-Curve25519: X25519 format id-Curve448: X448 format id-Cure25519ph: ???Ed25519 format??? id-Curve448ph: ???Ed448 format??? id-EdDSAPublicKey/ed25519: Ed25519 format id-EdDSAPublicKey/ed25519ph: Ed25519 format id-EdDSAPublicKey/ed448 Ed448 format id-EdDSAPublicKey/ed448ph: Ed448 format But this assignment is odd, since there are NamedCurve entries corresponding to Ed25519ph/Ed448ph keys but not Ed25519/Ed448 keys. (The choises here are: a) X25519 format (from RFC7748) b) X448 format (from RFC7748) c) Ed25519 format (from I.D-irtf-cfrg-eddsa) d) Ed448 format (from I.D-irtf-cfrg-eddsa) e) Other format (specify)) 2) There is still example with 1.3.101.100.1 OID for the signature, when prose says 1.3.101.101. Which one is correct? -Ilari From nobody Sat Apr 9 05:34:12 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC78512D649 for ; Sat, 9 Apr 2016 05:34:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.711 X-Spam-Level: X-Spam-Status: No, score=-2.711 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gQvDFhTjxxOx for ; Sat, 9 Apr 2016 05:34:10 -0700 (PDT) Received: from prod-mail-xrelay06.akamai.com (prod-mail-xrelay06.akamai.com [96.6.114.98]) by ietfa.amsl.com (Postfix) with ESMTP id 28A6C12D580 for ; Sat, 9 Apr 2016 05:34:10 -0700 (PDT) Received: from prod-mail-xrelay06.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id E2467496C2B; Sat, 9 Apr 2016 12:34:09 +0000 (GMT) Received: from prod-mail-relay09.akamai.com (prod-mail-relay09.akamai.com [172.27.22.68]) by prod-mail-xrelay06.akamai.com (Postfix) with ESMTP id CCB34496C28; Sat, 9 Apr 2016 12:34:09 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; s=a1; t=1460205249; bh=yA6q7EKDjLqmG/BH3ynvVKL3qzFTgVVJEEG+rqoBxMo=; l=475; h=From:To:Date:References:In-Reply-To:From; b=Nxr1TNountI4+wO5WvvA8boZdxZIcYZMKiZEbSvnt5IKJXUkT522InnyQkkasbw2E qQZX4Zfihtot+A/4q+aEz/pl4YsX5/7e5SiYfhCW5vcbHej8ubFO7aQNd5QVpmFw2v 5oUSrSiLnCb4yPiQH3rGh3EmO4twnLTyiTXYkgI8= Received: from email.msg.corp.akamai.com (usma1ex-cas2.msg.corp.akamai.com [172.27.123.31]) by prod-mail-relay09.akamai.com (Postfix) with ESMTP id B4A741E07C; Sat, 9 Apr 2016 12:34:09 +0000 (GMT) Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com (172.27.123.101) by usma1ex-dag1mb2.msg.corp.akamai.com (172.27.123.102) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Sat, 9 Apr 2016 08:34:08 -0400 Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com ([172.27.123.101]) by usma1ex-dag1mb1.msg.corp.akamai.com ([172.27.123.101]) with mapi id 15.00.1130.005; Sat, 9 Apr 2016 08:34:08 -0400 From: "Salz, Rich" To: Russ Housley , "curdle@ietf.org" Thread-Topic: [Curdle] draft-housley-cms-chacha20-poly1305-00.txt Thread-Index: AQHRkb22phAV5LxZYEq1x4KPb/QdEp+BlHkg Date: Sat, 9 Apr 2016 12:34:08 +0000 Message-ID: References: <029701d18935$89182cf0$9b4886d0$@augustcellars.com> <93754E03-E4E2-4DD4-AFA9-E0C92F35C14E@vigilsec.com> In-Reply-To: <93754E03-E4E2-4DD4-AFA9-E0C92F35C14E@vigilsec.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.34.69] Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Archived-At: Subject: Re: [Curdle] draft-housley-cms-chacha20-poly1305-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 Apr 2016 12:34:11 -0000 > https://www.ietf.org/id/draft-housley-cms-chacha20-poly1305- > 00.txt >=20 > Stephen Farrell told me that he would like this document to go through th= is > working group. Please read and review. Is this working group willing to > adopt it? This is exactly the kind of thing that we should cover. Let's wait a few d= ays and then call for adoption next week. If anyone knows of a reason why = *not* to adopt this, of course speak up now -- no need to wait :) From nobody Sun Apr 10 08:10:58 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 62CA612D5BF for ; Sun, 10 Apr 2016 08:10:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.9 X-Spam-Level: X-Spam-Status: No, score=-101.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, USER_IN_WHITELIST=-100] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uKVpyF_V4RUE for ; Sun, 10 Apr 2016 08:10:56 -0700 (PDT) Received: from odin.smetech.net (x-bolt-wan.smeinc.net [209.135.219.146]) by ietfa.amsl.com (Postfix) with ESMTP id 8E72712D0A2 for ; Sun, 10 Apr 2016 08:10:55 -0700 (PDT) Received: from localhost (ronin.smetech.net [209.135.209.5]) by odin.smetech.net (Postfix) with ESMTP id AFA43F2405B for ; Sun, 10 Apr 2016 11:10:55 -0400 (EDT) X-Virus-Scanned: amavisd-new at smetech.net Received: from odin.smetech.net ([209.135.209.4]) by localhost (ronin.smeinc.net [209.135.209.5]) (amavisd-new, port 10024) with ESMTP id UUJ8anpRbN24 for ; Sun, 10 Apr 2016 10:56:06 -0400 (EDT) Received: from russellsleysmbp.home (pool-108-51-128-219.washdc.fios.verizon.net [108.51.128.219]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by odin.smetech.net (Postfix) with ESMTP id 2FA91F2404B for ; Sun, 10 Apr 2016 11:10:55 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Russ Housley In-Reply-To: <20160409032659.23044.45734.idtracker@ietfa.amsl.com> Date: Sun, 10 Apr 2016 11:10:28 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: References: <20160409032659.23044.45734.idtracker@ietfa.amsl.com> To: curdle@ietf.org X-Mailer: Apple Mail (2.1878.6) Archived-At: Subject: Re: [Curdle] I-D Action: draft-ietf-curdle-pkix-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 10 Apr 2016 15:10:57 -0000 The ASN.1 module does not compile. Here is one that does: SafeCurves-PKIX-0 { 1 3 101 120 } DEFINITIONS ::=3D BEGIN id-EdDSAPublicKey OBJECT IDENTIFIER ::=3D { 1 3 101 100 } id-EdDSASignature OBJECT IDENTIFIER ::=3D { 1 3 101 101 } id-Curve25519 OBJECT IDENTIFIER ::=3D { 1 3 101 110 } id-Curve448 OBJECT IDENTIFIER ::=3D { 1 3 101 111 } id-Curve25519ph OBJECT IDENTIFIER ::=3D { 1 3 101 112 } id-Curve448ph OBJECT IDENTIFIER ::=3D { 1 3 101 113 } EdDSAParameters ::=3D ENUMERATED { ed25519 (1), ed25519ph (2), ed448 (3), ed448ph (4) } END On Apr 8, 2016, at 11:26 PM, internet-drafts@ietf.org wrote: >=20 > A New Internet-Draft is available from the on-line Internet-Drafts = directories. > This draft is a work item of the CURves, Deprecating and a Little more = Encryption of the IETF. >=20 > Title : EdDSA, Ed25519, Ed448, Curve25519 and = Curve448 for X.509 > Author : Simon Josefsson > Filename : draft-ietf-curdle-pkix-00.txt > Pages : 12 > Date : 2016-04-08 >=20 > Abstract: > This document specify algorithm identifiers and ASN.1 encoding > formats for EdDSA digital signatures, subject public keys, and a > "named curve" object identifier, used in the Internet X.509 Public > Key Infrastructure. Parameters for Ed25519, Ed25519ph, Ed448, > Ed448ph, Curve25519 and Curve448 are defined. >=20 >=20 > The IETF datatracker status page for this draft is: > https://datatracker.ietf.org/doc/draft-ietf-curdle-pkix/ >=20 > There's also a htmlized version available at: > https://tools.ietf.org/html/draft-ietf-curdle-pkix-00 >=20 >=20 > Please note that it may take a couple of minutes from the time of = submission > until the htmlized version and diff are available at tools.ietf.org. >=20 > Internet-Drafts are also available by anonymous FTP at: > ftp://ftp.ietf.org/internet-drafts/ >=20 > _______________________________________________ > Curdle mailing list > Curdle@ietf.org > https://www.ietf.org/mailman/listinfo/curdle From nobody Mon Apr 11 14:05:16 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BD61F12D148 for ; Mon, 11 Apr 2016 14:05:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8KxSNZbApl6g for ; Mon, 11 Apr 2016 14:05:12 -0700 (PDT) Received: from che.mayfirst.org (che.mayfirst.org [162.247.75.118]) by ietfa.amsl.com (Postfix) with ESMTP id 930B712EB8D for ; Mon, 11 Apr 2016 14:05:12 -0700 (PDT) Received: from fifthhorseman.net (unknown [38.109.115.130]) by che.mayfirst.org (Postfix) with ESMTPSA id 82750F991; Mon, 11 Apr 2016 17:05:10 -0400 (EDT) Received: by fifthhorseman.net (Postfix, from userid 1000) id 442F820143; Mon, 11 Apr 2016 17:05:10 -0400 (EDT) From: Daniel Kahn Gillmor To: "Salz\, Rich" , Simon Josefsson , Daniel Migault In-Reply-To: <350e0f12725742549ec1d2bf83265abd@usma1ex-dag1mb1.msg.corp.akamai.com> References: <029601d18935$00515fe0$00f41fa0$@augustcellars.com> <87a8l55w2c.fsf@latte.josefsson.org> <2DD56D786E600F45AC6BDE7DA4E8A8C11223FBA1@eusaamb107.ericsson.se> <871t6h5ur3.fsf@latte.josefsson.org> <350e0f12725742549ec1d2bf83265abd@usma1ex-dag1mb1.msg.corp.akamai.com> User-Agent: Notmuch/0.21+124~gbf604e9 (http://notmuchmail.org) Emacs/24.5.1 (x86_64-pc-linux-gnu) Date: Mon, 11 Apr 2016 17:05:10 -0400 Message-ID: <87k2k3ua9l.fsf@alice.fifthhorseman.net> MIME-Version: 1.0 Content-Type: text/plain Archived-At: Cc: Jim Schaad , "draft-ietf-curdle-pkix-eddsa@tools.ietf.org" , "curdle@ietf.org" Subject: Re: [Curdle] draft-ietf-curdle-pkix-eddsa-00 X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Apr 2016 21:05:14 -0000 On Thu 2016-04-07 13:47:46 -0400, Salz, Rich wrote: > Since the WG agreed to merge the DNS documents into one, I suggest the same thing makes sense here. I'd agree with Rich on this. One doc should be fine. --dkg From nobody Mon Apr 11 14:14:10 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4596612DC74 for ; Mon, 11 Apr 2016 14:14:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id F82ivieVO_El for ; Mon, 11 Apr 2016 14:14:04 -0700 (PDT) Received: from che.mayfirst.org (che.mayfirst.org [162.247.75.118]) by ietfa.amsl.com (Postfix) with ESMTP id 4E58E12DC7A for ; Mon, 11 Apr 2016 14:14:03 -0700 (PDT) Received: from fifthhorseman.net (unknown [38.109.115.130]) by che.mayfirst.org (Postfix) with ESMTPSA id AEB47F991; Mon, 11 Apr 2016 17:14:02 -0400 (EDT) Received: by fifthhorseman.net (Postfix, from userid 1000) id 921F120143; Mon, 11 Apr 2016 17:14:02 -0400 (EDT) From: Daniel Kahn Gillmor To: curdle@ietf.org In-Reply-To: <20160409032659.23044.45734.idtracker@ietfa.amsl.com> References: <20160409032659.23044.45734.idtracker@ietfa.amsl.com> User-Agent: Notmuch/0.21+124~gbf604e9 (http://notmuchmail.org) Emacs/24.5.1 (x86_64-pc-linux-gnu) Date: Mon, 11 Apr 2016 17:13:59 -0400 Message-ID: <87inznu9uw.fsf@alice.fifthhorseman.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Archived-At: Cc: Benjamin Kaduk , Martin Thomson Subject: [Curdle] use of EdDSA context string in draft-ietf-curdle-pkix-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Apr 2016 21:14:08 -0000 --=-=-= Content-Type: text/plain On Fri 2016-04-08 23:26:59 -0400, internet-drafts@ietf.org wrote: > A New Internet-Draft is available from the on-line Internet-Drafts directories. > This draft is a work item of the CURves, Deprecating and a Little more Encryption of the IETF. > > Title : EdDSA, Ed25519, Ed448, Curve25519 and Curve448 for X.509 > Author : Simon Josefsson > Filename : draft-ietf-curdle-pkix-00.txt > Pages : 12 > Date : 2016-04-08 Thanks for writing this and submitting it, Simon! I note that section 7 (EdDSA signatures) doesn't mention anything about a choice of context: https://tools.ietf.org/html/draft-ietf-curdle-pkix-00#section-7 The EdDSA CFRG draft makes it clear that a context string can be used during signature creation and verification to avoid cross-protocol attacks for other systems that use distinct context strings: https://tools.ietf.org/html/draft-irtf-cfrg-eddsa-05 I recommend explicitly selecting a context string for the use of EdDSA in PKIX. Perhaps the context string would just be "PKIX\0". This would mean that the examples would probably need to change, but since i don't think this is currently deployed, now is the time to make that change. Martin Thomson, Ben Kaduk and myself are in the process of writing up the use of context strings as a best practice, and it would be great to have more good examples to point at :) --dkg --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQJ8BAEBCgBmBQJXDBOXXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXRFREIyRTc0RjU2RkNGMkI2NzI5N0I3MzUy NEVDRkY1QUZGNjgzNzBBAAoJECTs/1r/aDcKM8YP/1SNhvNUNynNIh/YLWCa3pgY 26ZD5gO99tsvt/kXD8xmiF8WERP5USVn3LnLOVtrCoAyEcIHiKm/HLz5+U8YqmEg E9dpWJA7wAzwlE2gAASsbLpMYIcjOatFlILEwWWpe4CQzyF+9tjhd85VaqRTh34s oDE7S0vzp8UkHZnaljqBfdojeV12WqS48FKIP6cy6hZi5DzP3p2wq0BDYpNMa4uz ajF+8Fvs6oX2dmYMTnBpnttqFTdlD1oTaMvxqGoRNJNjw/gLGFMGRayC7mnMK29v 3WKG8hRq+ukUtxxQI0+G7nG40ampsf7onJqu29Kanl9dzPms2Aiig6+K1T7+DfPV Bv2vInr1FyNLn5h990ACwCqhtv30Vi7SVcSWeeIzeXCeVkIvGtQnUXrxbYlSqliO +XK7IjxpLWaZZ3WE1dyyfUriFErSI6O9PeXGoXIKtEZRcdyI9cbZXEhx+WqKi9LK b2EJmCzayQy/lvkJwz2wOw7FjFpX1E+6+gO6Gib/VyZTRiVfaTR7/4JgezLbYucG qH8d/6wUk29cq6UVdStibt8vwtV1zVzlUIkRzaaGA8HjXzxqeJ3yp2dcaQeuoIMX nrucL0mVSuLtzEtJ7wJYmShLLRkvjpaZHzsKcSJLgwWBxmWFTr3SvqZJ1QR8XZiD NdtX4R2bfaQ9qFCJcZSS =3pon -----END PGP SIGNATURE----- --=-=-=-- From nobody Mon Apr 11 17:43:42 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 78A4812D803 for ; Mon, 11 Apr 2016 17:43:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OwQX_m-XyqPL for ; Mon, 11 Apr 2016 17:43:39 -0700 (PDT) Received: from che.mayfirst.org (che.mayfirst.org [162.247.75.118]) by ietfa.amsl.com (Postfix) with ESMTP id A9DBC12D76A for ; Mon, 11 Apr 2016 17:43:39 -0700 (PDT) Received: from fifthhorseman.net (unknown [38.109.115.130]) by che.mayfirst.org (Postfix) with ESMTPSA id C16E6F991; Mon, 11 Apr 2016 20:43:37 -0400 (EDT) Received: by fifthhorseman.net (Postfix, from userid 1000) id 9892520143; Mon, 11 Apr 2016 20:43:37 -0400 (EDT) From: Daniel Kahn Gillmor To: Simon Josefsson , Ilari Liusvaara In-Reply-To: <20160408195230.279b8b97@latte.josefsson.org> References: <029701d18935$89182cf0$9b4886d0$@augustcellars.com> <87egah5wm8.fsf@latte.josefsson.org> <20160407175349.GA27211@LK-Perkele-V2.elisa-laajakaista.fi> <20160408195230.279b8b97@latte.josefsson.org> User-Agent: Notmuch/0.21+124~gbf604e9 (http://notmuchmail.org) Emacs/24.5.1 (x86_64-pc-linux-gnu) Date: Mon, 11 Apr 2016 20:43:37 -0400 Message-ID: <87r3ebsll2.fsf@alice.fifthhorseman.net> MIME-Version: 1.0 Content-Type: text/plain Archived-At: Cc: Jim Schaad , curdle@ietf.org, draft-ietf-curdle-pkix-newcurves@tools.ietf.org Subject: Re: [Curdle] draft-ietf-curdle-pkix-newcurves X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Apr 2016 00:43:40 -0000 On Fri 2016-04-08 13:52:30 -0400, Simon Josefsson wrote: > Why would we want people to use the same public key for ECDH and > EdDSA? That seems like a terrible idea that we should simply > recommend against. Agreed with Simon here, we should actively discourage reuse of any key in different contexts. --dkg From nobody Tue Apr 12 00:21:47 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3019012DC6E for ; Tue, 12 Apr 2016 00:21:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.896 X-Spam-Level: X-Spam-Status: No, score=-2.896 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RP_MATCHES_RCVD=-0.996] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id q1KYGKXsbeTC for ; Tue, 12 Apr 2016 00:21:43 -0700 (PDT) Received: from welho-filter4.welho.com (welho-filter4.welho.com [83.102.41.26]) by ietfa.amsl.com (Postfix) with ESMTP id 2A4DB12D859 for ; Tue, 12 Apr 2016 00:21:42 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by welho-filter4.welho.com (Postfix) with ESMTP id 0F5C46EB4; Tue, 12 Apr 2016 10:21:40 +0300 (EEST) X-Virus-Scanned: Debian amavisd-new at pp.htv.fi Received: from welho-smtp2.welho.com ([IPv6:::ffff:83.102.41.85]) by localhost (welho-filter4.welho.com [::ffff:83.102.41.26]) (amavisd-new, port 10024) with ESMTP id m7PzHp0jGxMS; Tue, 12 Apr 2016 10:21:39 +0300 (EEST) Received: from LK-Perkele-V2 (87-100-143-35.bb.dnainternet.fi [87.100.143.35]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by welho-smtp2.welho.com (Postfix) with ESMTPSA id C2DDE27B; Tue, 12 Apr 2016 10:21:39 +0300 (EEST) Date: Tue, 12 Apr 2016 10:21:37 +0300 From: Ilari Liusvaara To: Daniel Kahn Gillmor Message-ID: <20160412072137.GA14652@LK-Perkele-V2.elisa-laajakaista.fi> References: <029701d18935$89182cf0$9b4886d0$@augustcellars.com> <87egah5wm8.fsf@latte.josefsson.org> <20160407175349.GA27211@LK-Perkele-V2.elisa-laajakaista.fi> <20160408195230.279b8b97@latte.josefsson.org> <87r3ebsll2.fsf@alice.fifthhorseman.net> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <87r3ebsll2.fsf@alice.fifthhorseman.net> User-Agent: Mutt/1.5.24 (2015-08-30) Sender: ilariliusvaara@welho.com Archived-At: Cc: Simon Josefsson , Jim Schaad , curdle@ietf.org, draft-ietf-curdle-pkix-newcurves@tools.ietf.org Subject: Re: [Curdle] draft-ietf-curdle-pkix-newcurves X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 12 Apr 2016 07:21:45 -0000 On Mon, Apr 11, 2016 at 08:43:37PM -0400, Daniel Kahn Gillmor wrote: > On Fri 2016-04-08 13:52:30 -0400, Simon Josefsson wrote: > > Why would we want people to use the same public key for ECDH and > > EdDSA? That seems like a terrible idea that we should simply > > recommend against. > > Agreed with Simon here, we should actively discourage reuse of any key > in different contexts. My point was that such reuse won't even work, since the two algorithms interpret their keys differently (if implemented to spec). And yes, even if it worked, such reuse would be bad idea. E.g. the ECDH vs. ECDSA reuse has been exploited in at least one attack against TLS (didn't work with DH vs. DSA because key types were separate). -Ilari From nobody Wed Apr 13 18:06:24 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 18DA312D129 for ; Wed, 13 Apr 2016 18:06:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.695 X-Spam-Level: X-Spam-Status: No, score=-3.695 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=chromium.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2viEbkZ1Ee9J for ; Wed, 13 Apr 2016 18:06:21 -0700 (PDT) Received: from mail-io0-x233.google.com (mail-io0-x233.google.com [IPv6:2607:f8b0:4001:c06::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 24D5012D74C for ; Wed, 13 Apr 2016 18:06:21 -0700 (PDT) Received: by mail-io0-x233.google.com with SMTP id g185so89449225ioa.2 for ; Wed, 13 Apr 2016 18:06:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=chromium.org; s=google; h=mime-version:from:date:message-id:subject:to; bh=B2RScLbIE5CmlnndDDx2B2eyPFizZYb2Z1CqsKP07F8=; b=TkAP9P1GMNdSflExwHRHZMzKyOeQCESB9w1d+zQWKw936Puh/lCsaNaICdq1ILFlMJ KHt5LJhxZ38Yl9sG39fdI6BejGTD/7adcq6MiQuIFmJzGUeDZbbA67uK/g1MgBE3/zAf AJLjkhxTTLXwYQFFOZDGWj8BUtgYgKR7dl2ZE= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=B2RScLbIE5CmlnndDDx2B2eyPFizZYb2Z1CqsKP07F8=; b=R/llVDvJL3T9QfI3ncJCpjYSho4C1CRf14GWFzqNPYgUHLgVKLCdyFcj/Yr8RByL7K 3A/1fxqCEyRgGk1OA/ZYd7S8tIUL7TFGTwSryIlEWAt/Z75UshaRLEfnmEGa7wa6HaCz 4h4F76To5IFLtvCNynYxTYU8TdSWCH4xDY+X8YvemKtCDA1A+j1se1qDfejMdt3/TwfS y2HzoL6LN1GGTp9MjTwlICLLOQzu4mPlWIMgwCG3jGoXM2ZoJrbpdXWwHv7EC59wzooh +/HiZosvKGYETWYzs0rklnKkYbtjUIb+xtlbhcoWQbBFvZORtyHZwTkKTZY6e/m5jK/N TnSQ== X-Gm-Message-State: AOPr4FUdI3kBKU5F93R2eBD6DMWNiozMtf4flz1dy+DgwQLkwnWK4NEdbi8dFNsALqP+Nm5g/E/NwZZqF7sfbqU5 X-Received: by 10.107.165.140 with SMTP id o134mr15336848ioe.62.1460595980348; Wed, 13 Apr 2016 18:06:20 -0700 (PDT) MIME-Version: 1.0 From: David Benjamin Date: Thu, 14 Apr 2016 01:06:09 +0000 Message-ID: To: curdle@ietf.org Content-Type: multipart/alternative; boundary=001a1141fb90922ced053067804a Archived-At: Subject: [Curdle] Comments on draft-ietf-curdle-pkix-00 X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 14 Apr 2016 01:06:23 -0000 --001a1141fb90922ced053067804a Content-Type: text/plain; charset=UTF-8 Hi folks, I have some comments on draft-ietf-curdle-pkix-00. This is largely coming from having recently written fresh ECPrivateKey, PrivateKeyInfo, and SubjectPublicKeyInfo code for BoringSSL and also from thinking how this draft might be implemented. First, a small editorial nitpick: The raw binary EdDSA public key is encoded directly in the subjectPublicKey BIT STRING object. Note that unlike some other schemes, there is no additional OCTET STRING encoding step. This is like RFC 3279's "The DER encoded RSAPublicKey is the value of the BIT STRING subjectPublicKey", but I think this is a type error. As far as I know, an abstract BIT STRING has no inherent a grouping into bytes (of course the grouping that aligns with DER is most natural). RFC 4055 instead explicitly says like: To convert a signature value to a bit string, the most significant bit of the first octet of the signature value SHALL become the first bit of the bit string, and so on through the least significant bit of the last octet of the signature value, which SHALL become the last bit of the bit string. While more verbose, I think we should be explicit about the type mismatch. (These fields should never have been BIT STRINGs to begin with, but we've lost that one.) Section 3 is confusing. What is the difference between an id-ecPublicKey + id-Curve25519ph certificate vs. id-EdDSAPublicKey + ed25519ph? There shouldn't be two ways to spell the same thing. I think the second one is better. X9.62 ECC is shaped very differently from curve25519/curve448 and I think it is a mistake to try to shoehorn things here. Even ditching X9.62, why an id-EdDSAPublicKey top-level OID with ENUMERATED parameters? Instead, I'd suggest four separate parameter-less algorithm OIDs for ed25519, ed25519ph, ed448, and ed448ph. (Of course, specify whether the parameters are omitted or NULL.) Likewise, if anyone wants X25519 or X448 certificates, allocate those too. This aligns with presenting Ed25519 and Ed448 as distinct named algorithms which is I think fairly common and desirable. And between Ed25519 and Ed25519ph, the PureEdDSA and HashEdDSA versions don't even share type signatures, so sharing an algorithm is odd. (PureEdDSA is one function and HashEdDSA is an IUF triple.) We only have curve25519, but as an analogy, this is BoringSSL's low-level curve25519 API: https://commondatastorage.googleapis.com/chromium-boringssl-docs/curve25519.h.html Internally, X25519 and Ed25519 functions share code, but it's simplest to present them as separate free-standing APIs. (Indeed this draft would be slightly awkward for me to implement because there will no longer be a clean one-to-one correspondence between signature algorithm and EVP_PKEY type.) More generally, I think X.509 key types going forward should follow this pattern, without all the complex layers of extensible substructure. To borrow a phrase: have only one joint and keep it well-oiled. David --001a1141fb90922ced053067804a Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi folks,

I have some comments on draft= -ietf-curdle-pkix-00. This is largely coming from having recently written f= resh ECPrivateKey, PrivateKeyInfo, and SubjectPublicKeyInfo code for Boring= SSL and also from thinking how this draft might be implemented.
<= span style=3D"line-height:1.5">
First, a small editorial nitpick:

=C2=A0 =C2=A0The raw binary EdDSA public key is encoded directly in t= he
=C2=A0 =C2=A0subjectPublicKey BIT STRING object.=C2=A0 Note th= at unlike some other
=C2=A0 =C2=A0schemes, there is no additional= OCTET STRING encoding step.

This is like RF= C 3279's "The DER encoded RSAPublicKey is the value of the BIT=C2=A0STRING subjectPublicKey", but I thin= k this is a type error. As far as I know, an abstract BIT STRING has no inh= erent a grouping into bytes (of course the grouping that aligns with DER is= most natural). RFC 4055 instead explicitly says like:

=C2=A0 =C2=A0To con= vert a signature value to a bit string, the most significant
=C2= =A0 =C2=A0bit of the first octet of the signature value SHALL become the fi= rst
=C2=A0 =C2=A0bit of the bit string, and so on through the lea= st significant bit of
=C2=A0 =C2=A0the last octet of the signatur= e value, which SHALL become the last
=C2=A0 =C2=A0bit of the bit = string.

While more verbose, I think we shoul= d be explicit about the type mismatch. (These fields should never have been= BIT STRINGs to begin with, but we've lost that one.)

Section 3 is confusing. What is the= difference between an id-ecPublicKey + id-Curve25519ph certificate vs. id-= EdDSAPublicKey + ed25519ph? There shouldn't be two ways to spell the sa= me thing. I think the second one is better. X9.62 ECC is shaped very differ= ently from curve25519/curve448 and I think it is a mistake to try to shoeho= rn things here.

Even ditching X9.62, wh= y an id-EdDSAPublicKey top-level OID with ENUMERATED parameters? Instead,= =C2=A0I'd suggest four separate paramet= er-less algorithm OIDs for ed25519, ed25519ph, ed448, and ed448ph. (Of cour= se, specify whether the parameters are omitted or NULL.)=C2=A0Likewi= se, if anyone wants X25519 or X448 certificates, allocate those too.
<= div>
This aligns with presenting Ed25519 and Ed448 as distinct na= med algorithms which is I think fairly common and desirable. And between Ed= 25519 and Ed25519ph, the PureEdDSA a= nd HashEdDSA versions don't even share type signatures, so sharing an a= lgorithm is odd. (PureEdDSA is one function and HashEdDSA is an IUF triple.= )

We only have curve25519, but as an analogy, t= his is=C2=A0BoringSSL's low-leve= l curve25519 API:
Internally, X25519 and Ed25519 functions share code, but it= 9;s simplest to present them as separate free-standing APIs. (Indeed this d= raft would be slightly awkward for me to implement because there will no lo= nger be a clean one-to-one correspondence between signature algorithm and E= VP_PKEY type.)

More generally, I think X.509 = key types going forward should follow this pattern, without all the complex= layers of extensible substructure. To borrow a phrase: have only one joint= and keep it well-oiled.

David
--001a1141fb90922ced053067804a-- From nobody Fri Apr 15 10:41:58 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C3D912E6AE for ; Fri, 15 Apr 2016 10:41:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.9 X-Spam-Level: X-Spam-Status: No, score=-101.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, USER_IN_WHITELIST=-100] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xg_pgn_xqSjO for ; Fri, 15 Apr 2016 10:41:55 -0700 (PDT) Received: from odin.smetech.net (x-bolt-wan.smeinc.net [209.135.219.146]) by ietfa.amsl.com (Postfix) with ESMTP id BC7B512E2CD for ; Fri, 15 Apr 2016 10:41:55 -0700 (PDT) Received: from localhost (ronin.smetech.net [209.135.209.5]) by odin.smetech.net (Postfix) with ESMTP id 89B2C9A4007 for ; Fri, 15 Apr 2016 13:41:55 -0400 (EDT) X-Virus-Scanned: amavisd-new at smetech.net Received: from odin.smetech.net ([209.135.209.4]) by localhost (ronin.smeinc.net [209.135.209.5]) (amavisd-new, port 10024) with ESMTP id uWbyXQzPhkpc for ; Fri, 15 Apr 2016 13:26:47 -0400 (EDT) Received: from [192.168.2.100] (pool-108-51-128-219.washdc.fios.verizon.net [108.51.128.219]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by odin.smetech.net (Postfix) with ESMTP id 35EFC9A4003 for ; Fri, 15 Apr 2016 13:41:55 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Russ Housley In-Reply-To: (Russ Housley's message of "Tue, 5 Apr 2016 14:16:36 -0400") Date: Fri, 15 Apr 2016 13:41:54 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: References: <029701d18935$89182cf0$9b4886d0$@augustcellars.com> To: curdle@ietf.org X-Mailer: Apple Mail (2.1878.6) Archived-At: Subject: [Curdle] draft-housley-cms-ecdh-new-curves-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Apr 2016 17:41:57 -0000 We already have RFC 5753 that specifies the use of ECC with CMS. I just posted an I-D that specifies the use of ECDH with Curve 25519 and = Curve 448 with CMS: https://www.ietf.org/id/draft-housley-cms-ecdh-new-curves-00.txt There are a few open issues in the document. Please read and review. = Is this working group willing to adopt it? Russ= From nobody Fri Apr 15 10:51:36 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 11C9D12E216 for ; Fri, 15 Apr 2016 10:51:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.221 X-Spam-Level: X-Spam-Status: No, score=-4.221 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V4DXYQnPH8vc for ; Fri, 15 Apr 2016 10:51:33 -0700 (PDT) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 523E312DE0B for ; Fri, 15 Apr 2016 10:51:33 -0700 (PDT) X-AuditID: c618062d-f79886d000002334-89-5711237e127c Received: from EUSAAHC005.ericsson.se (Unknown_Domain [147.117.188.87]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id 34.D6.09012.E7321175; Fri, 15 Apr 2016 19:23:10 +0200 (CEST) Received: from EUSAAMB107.ericsson.se ([147.117.188.124]) by EUSAAHC005.ericsson.se ([147.117.188.87]) with mapi id 14.03.0248.002; Fri, 15 Apr 2016 13:51:32 -0400 From: Daniel Migault To: Russ Housley , "curdle@ietf.org" Thread-Topic: Call for Adoption for draft-housley-cms-ecdh-new-curves-00.txt Thread-Index: AdGXP3Gt2LipsZ15TDyoFcTOYLj7dA== Date: Fri, 15 Apr 2016 17:51:31 +0000 Message-ID: <2DD56D786E600F45AC6BDE7DA4E8A8C1122418FD@eusaamb107.ericsson.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.9] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrKLMWRmVeSWpSXmKPExsUyuXRPuG6dsmC4Qc8ma4utC2cxW7x6cZPd gcljyZKfTB6r7nxhDWCK4rJJSc3JLEst0rdL4MrYv/UaW8ES1oq/H+YzNTAuZeli5OSQEDCR WPS3jw3CFpO4cG89kM3FISRwlFHi6tYTTBDOckaJ15PmM4FUsQkYSbQd6mcHsUUEfCQ+HHjA CmILC7hLTHw7G8jmAIv//+kGYepJ3N/EDmKyCKhKzG1WAynmFfCVmN52GmwtI9Da76fWgA1n FhCXuPUEYpGEgIDEkj3nmSFsUYmXj/+xQtiKEvv6p7ND1OtILNj9iQ3C1pZYtvA1M8R8QYmT M5+wTGAUnoVk7CwkLbOQtMxC0rKAkWUVI0dpcUFObrqRwSZGYGAfk2DT3cF4f7rnIUYBDkYl Ht6EZoFwIdbEsuLK3EOMEhzMSiK86aqC4UK8KYmVValF+fFFpTmpxYcYpTlYlMR5G4P/hQkJ pCeWpGanphakFsFkmTg4pRoY+3WMixr/1LKE35raaM25cVqYkRJrZmthz7zT61fNfCJTNP1c /H0eH0HGTsOzAa26Pc9erhe49lZ05pvvF8SXveO7MvXzxuijAjPubNCQ8Zbfc+zFnQdWK6co yUQEyoVqddVremsXmXP1CORPqjZcaejhz/SXP5+PU6a//Yyn0pfZOh6+tX+UWIozEg21mIuK EwGNrJqRaAIAAA== Archived-At: Subject: [Curdle] Call for Adoption for draft-housley-cms-ecdh-new-curves-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Apr 2016 17:51:35 -0000 Hi,=20 As mentioned last week, this is a call for adoption for draft-housley-cms-e= cdh-new-curves-00.txt.=20 This starts a Call for Adoption for "Use of the Elliptic Curve Diffie-Hellm= an Key Agreement Algorithm with Curve 25519 and Curve 448 in the Cryptographic Message Syntax (CMS)" The document is available here: https://www.ietf.org/id/draft-housley-cms-ecdh-new-curves-00.txt Please review this draft to see if you think it is suitable for adoption by= CURLDE, and comment to the list, clearly stating your view. *Speak Up* if= you have strong opposition to this work. This call for adoption ends on April 29. BR,=20 Rich and Daniel=20 From nobody Sun Apr 17 10:04:24 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7BAA812D6A8; Sun, 17 Apr 2016 10:04:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.22 X-Spam-Level: X-Spam-Status: No, score=-4.22 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TIAOxb3UpB8u; Sun, 17 Apr 2016 10:04:21 -0700 (PDT) Received: from usplmg20.ericsson.net (usplmg20.ericsson.net [198.24.6.45]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 363E512D92A; Sun, 17 Apr 2016 10:04:21 -0700 (PDT) X-AuditID: c618062d-f79886d000002334-c5-5713bb550b53 Received: from EUSAAHC007.ericsson.se (Unknown_Domain [147.117.188.93]) by usplmg20.ericsson.net (Symantec Mail Security) with SMTP id AD.14.09012.55BB3175; Sun, 17 Apr 2016 18:35:34 +0200 (CEST) Received: from EUSAAMB107.ericsson.se ([147.117.188.124]) by EUSAAHC007.ericsson.se ([147.117.188.93]) with mapi id 14.03.0248.002; Sun, 17 Apr 2016 13:04:19 -0400 From: Daniel Migault To: "curdle@ietf.org" Thread-Topic: Call for Adoption for draft-housley-cms-chacha20-poly1305-00.txt Thread-Index: AdGYyl+Q8hZOWiIjSr+YFism18tpdg== Date: Sun, 17 Apr 2016 17:04:19 +0000 Message-ID: <2DD56D786E600F45AC6BDE7DA4E8A8C11224A680@eusaamb107.ericsson.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.12] Content-Type: multipart/related; boundary="_005_2DD56D786E600F45AC6BDE7DA4E8A8C11224A680eusaamb107erics_"; type="multipart/alternative" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprGKsWRmVeSWpSXmKPExsUyuXRPrG7YbuFwgxffeC1m9mxgtti6cBaz xasXN9kdmD2WLPnJ5LHqzhfWAKYoLpuU1JzMstQifbsEroz9l18xFazoY6q4O38VawPjgkam LkZODgkBE4mz5xazQdhiEhfurQeyuTiEBI4ySpzYP48RwlnOKHFw6T6wKjYBI4m2Q/3sILaI gLrEiUM7WEFsZoFAiVebOphBbGEBT4nFm4+wQdQESLydsYsJwtaTeP15Glgvi4CqxLH9j8B6 eQV8JZYf6mAEsRmBrvh+ag0TxExxiVtP5kNdKiLx8OJpqEtFJV4+/scKYStJzHl9jRnkUGaB bkaJL1MXMkIMFZQ4OfMJywRG4VlIZs1CVjcLSR1EUb7ExDP/2SFsHYkFuz+xQdjaEssWvmaG sc8ceMyEKa4jsfnSTqg5ihJtnbOhli1llPh6axcrTNH15VvZYYqmdD+EW7a0bRrQMg6weNed MojeZYwSPze8hes9sPsEM7LeBYxCqxg5SosLcnLTjQw2MQJTyDEJNt0djPenex5iFOBgVOLh VXgnFC7EmlhWXJl7iFEFqPXRhtUXGKVY8vLzUpVEeFn2CocL8aYkVlalFuXHF5XmpBYfYpTm YFES520M/hcmJJCeWJKanZpakFoEk2Xi4JRqYJzeNlP/3dpTTAqLO1551YqG8Kmz/J3iKnR1 aQBf2pb0xQdWf8qau9KTw9//U+fH5PennsYtqys0iO+N+jzFx27DsTKJhSE3C9mysqfeleHg 2+rxoHHdXp8vlz7lKUTuiTF7Z/7xJ3t9wsQP5zcdY3VZ1lH6LHKH75S69XaHHm5TuyfX6mv8 UF6JpTgj0VCLuag4EQCRcFmIKQMAAA== Archived-At: Cc: curdle-chairs , Russ Housley Subject: [Curdle] Call for Adoption for draft-housley-cms-chacha20-poly1305-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Apr 2016 17:04:23 -0000 --_005_2DD56D786E600F45AC6BDE7DA4E8A8C11224A680eusaamb107erics_ Content-Type: multipart/alternative; boundary="_000_2DD56D786E600F45AC6BDE7DA4E8A8C11224A680eusaamb107erics_" --_000_2DD56D786E600F45AC6BDE7DA4E8A8C11224A680eusaamb107erics_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi, As mentioned last week, this is a call for adoption for draft-housley-cms-c= hacha20-poly1305-00.txt. This starts a Call for Adoption for "Using ChaCha20-Poly1305 Authenticated = Encryption in the Cryptographic Message Syntax (CMS)" The document is available here: https://tools.ietf.org/id/draft-housley-cms-chacha20-poly1305-00.txt Please review this draft to see if you think it is suitable for adoption by= CURLDE, and comment to the list, clearly stating your view. *Speak Up* if= you have strong opposition to this work. This call for adoption ends on May 2. BR, Rich and Daniel [Ericsson] DANIEL MIGAULT Researcher Research Ericsson 8500 Boulevard Decarie H4P 2N2 Montreal, Canada Phone +1 514 345 7900 46628 Mobile +1 514 452 2160 daniel.migault@ericsson.com www.ericsson.com [http://www.ericsson.com/current_campaign] Legal entity: Ericsson Canada Inc., registered office in Montreal. This Com= munication is Confidential. We only send and receive email on the basis of = the terms set out at www.ericsson.com/email_disclaimer --_000_2DD56D786E600F45AC6BDE7DA4E8A8C11224A680eusaamb107erics_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi,

 

As mentioned last week, this is a call for adopti= on for draft-housley-cms-chacha20-poly1305-00.txt.

 

This starts a Call for Adoption for "Using C= haCha20-Poly1305 Authenticated Encryption in the Cryptographic Message Synt= ax (CMS)"

 

The document is available here:

https://tools.ietf.org/id/draft-housley-cms= -chacha20-poly1305-00.txt

 

Please review this draft to see if you think it i= s suitable for adoption by CURLDE, and comment to the list, clearly stating= your view.  *Speak Up* if you have strong opposition to this work.

 

This call for adoption ends on May 2.<= /p>

 

BR,

Rich and Daniel

 

 

 

=

DANIEL MIGAULT
Researcher
Research


Ericsson
8500 Boulevard Decarie
H4P 2N2 Montreal, Canada
Phone +1 514 345 7900 46628
Mobile +1 514 452 2160
daniel.migault@ericsson.com
www.ericsson.com



3D"http://www.ericsson.com/current_campaign"

 

Legal entity: Ericsson Canad= a Inc., registered office in Montreal. This Communication is Confidential. = We only send and receive email on the basis of the terms set out at www.ericsson.com/email_disclaimer

--_000_2DD56D786E600F45AC6BDE7DA4E8A8C11224A680eusaamb107erics_-- --_005_2DD56D786E600F45AC6BDE7DA4E8A8C11224A680eusaamb107erics_ Content-Type: image/gif; name="image001.gif" Content-Description: image001.gif Content-Disposition: inline; filename="image001.gif"; size=2367; creation-date="Sun, 17 Apr 2016 17:04:17 GMT"; modification-date="Sun, 17 Apr 2016 17:04:17 GMT" Content-ID: Content-Transfer-Encoding: base64 R0lGODlhRAA8APcAAAIVTgAWUwAWVAQWTwUWUAcXUQkYUgAbUwAbVAoZUwAcVQEdVgMeVwQeWAYf WQAhWQAiWgggWgAjWwAjXAAkXQAlXgEmXwInYAAoYAQnYQApYQAqYQArYgArYwAsZAAuZg0sYA4t YRAtYREuYgQyZAUyZRMvYwczZhQwZAk0ZxYxZQs1aA42ahE3axI4bBQ5bQY9cBU6bgk+cRc7bxg8 cBo9cRo/bRw/bh1Abx5BcB9CcSFDciJEcyNFdCRGdSVHdiZHdylJeStLeyxMfC1NfS5Ofi9Pfy5Q ejBQgC9RezBSfDhQfDFTfTJUfjNUfzRVgDVWgTZXgjdYgzlZhDpahTtbhjxchz1diD5eiT9fikVe hUZfhkFhjEdgh0hhiEljiUtki0xljE1mjU5njk9oj1BpkFFqkVJrklNsk1VulVZvlk9xl1dwl1hx mF1xlFdzlFh0lV9zlll1lmB0l1p2l2F1mGJ2mV56m2V5nF97nGB8nWF9nmJ+n2N/oGSAoWWBomaC o2eDpGyDoG6CpmiEpW2EoW6Fom+Go3aFo3CHpHGIpXKJpnOKp3SMqHWNqXePrHiQrXmRrnqSr3uT sHyUsX6Ws3+XtISYr4easoibs4mctIqdtYueto2guI6huY+iupCjvJKlvZOmvpSnwJmou5WpwZqp vJuqvZyrvp2sv56twJ+uwaCvwqGww6KxxaOyxqS0x6W1yKa2yai4y6m5zKu6zay7zq28z7C8yq69 0bG9y6++0rK+zLO/zbTAzrXBz7bC0LjD0bnE0rrG07vH1bzI1r3J177K2L/L2cDM2sHN28PP3cfP 18TQ3sjQ2MbS4MrS28fT4cvT3MzV3c3W3s7X38/Y4NDZ4dLa4tPb5NTc5dXd5tbe59fg6Nni6trj 69vk7N/k5t3l7uDl6OHm6eLn6uPo6+Tp7OXq7ebs7uft7+nu8Orv8uvw8+zx9O3y9e7z9u/19/D2 +PL3+fP4+/T5/PX6/fb7/vn7+Pz6/vr8+ff9//v9+vn+//z/+/7//CH+EUNyZWF0ZWQgd2l0aCBH SU1QACwAAAAARAA8AAAI/gD/CRxIsKDBgwgN8tOnb1/ChxAjSjR4792vMyAaBLllb6LHjxDtvau2 SMYBCRYsSHAwSx/IlyD5ufMWCkqDBihTppQghB3MnxDhgbPVhsNJnUhTHigHtCnBeuCMKcpRAGfS qxLMOW1qTpmmKQ+OXr16oIu7rS/fPSOlhsQBB2OxPmiAwxg/tB6xtfLTo4HYuDolHOBQZI4xvBPf XYpiNCfgnQ0e5FDDyRniifUuSbD6OKWDAyPAVArW7rJHcSMcAxYcwUkjW99Mf9xnrMDjzQVw8JGF jR5BcrFMKZP90BmBuBEKcCCTSprPgfhs6VFCw8UOQfCIH0SX4wFSwQ2Y/lxqppWgNEdOaHCQwB7l Jd/aCe7D1fhBgheBjJWDL5AdqCo1iMBeUhLIoE58Bd3TjB9VuCELOfEUpEsaNJCgEmAFMIVgQfPA I49LA1mDSA4krNeZBBycs+FD7ISCxAgcdIbUAXRkt2JB9ghjhoUyJuWAEN7cONA+2zByg2o9pkSE J+/849CN6tDhAJKdZcCBDH5UIyRB8exxQJIpgeACGLR0tCVB3nh3ogQeuLBEJuQQdI+ZQvIzjG1x sZeBC0EEMtxA/LCjVyjGPHejNF8SyF4KQLARC53/vIONLGp8UMABB7wxjpDvQCHWSh70EEYnQQ5k Tze9HLLDAZxZMIAi/vPcyE8yRGxw0g1bOIJMQeQIcwkVglEpwQjobIlNJHksQstZA7mDzCdosFDA lBhqeCZB/FBTyh1A3EQlgSykc+1A5LQSyBMctHrbAZLwJ2Q9vjSiRQsOUHuiAwWQ8EexW5pjSRg7 WKDuaic5QckvTW5JDRMj2HuiXzQAYss29Vz7DhYD53nABmawgg2z41rTgIybHZDEJtio8+S4//Aj TKIasyAIM+tUzHJB3IyMFU5j0MKOuzcT9M4aMKv04ybl2HNX0AmZ4wVOErTQxzT5MD3RPWsFI4/V XHft9ddghy322GSX7dEywQijtjDBxDlN2mofwy87vhyjokDY0GLK/iq9lOPQpHsHc6A+zrRSCivI xPqPOr2ggoovB0aaTDDBiPvP29XwM0YOO8hQgwwvrPKPHTjkUEMNQZiRzD/HvOBELf+0s8kUKTwg QQqb/GPKFCVE1kMw9GxSRGNRxKYMG0dKcMMbu2KTBQ41bFIxHTfwYY8QDYiQRRVURGHLP1oc0AIX UWz2xD++DMACK/9cwgEBOdThhxOVYEMvEIoYQscww3DgQBSM4MMdypEOKEwpDnBYyRTQQY0c+GUH 0vhHFQ4ghnoYwQFGqAc60GGOefDDCwcAAzbScYSU/OMXBXCBLKghgwJQIRjskNQ5VpEBC/xBIOpg hycEMAJR/OMe/kzJBAcisAh1nCMRBxCBJrbhgwgIZhL/6IIDyGDBCMhAE5SQhCa48Q8QXoF/MpAA E05YgBe04hVfCkVBlIGSHNhhFaVhBQEyIIRA3EIgX9iABO7mDfaYoRs94MALOHADcnxhihZ0TNRg 5wUHiEAGNLAAEbpBxhekAhQDeEEuCqIPQfglaleYRjrQgKkNvKAN9mCCBFjwJHfAoAFYwEYg8xAF AnwCChGgohGixgc7zAEQ0+jiA1RghBiNQEUoNGMqBAACWRjkHccgxAxs54Z/rMMWcuhdA4YBhZSY yR0ecAAXACmBVFRCAjt4gQR0+YAx3uMeDtkHCKngDVGs5xJk/lRh/xrABkMRxB7heIEDoECQVdCA AKawAwgcsMl/7GIwg+jGDspJjiRIIAPrTKQLAKEHPcBBGF08QBbaUQ8VWAAI+WyFPNxgGydcYhWH +MQ3xtAJW1BCJWrABhlKYYs0cGAAtaBGCSQAg1UYVAIzkAY2JjqKf0ACBBLIZT2w1x4JFIAT/8gC Aaqwjn+kQQIbUEYw1Ce6bogBJ1ZyAB6SwYG2YvQG1ODFANq6gQR8IU6mWE9bh3WKfzijO2osRxFu UsFWcKITiO3EJYLJikasIlbSmMQkhvENRmRCS/+wxzAKcQYy+MEY6thEHMighkyo6BuRaMMY4rAK kHXDEWY4FUMkKPkPc3giEtEQyC4o4YhX3CMgAAA7 --_005_2DD56D786E600F45AC6BDE7DA4E8A8C11224A680eusaamb107erics_ Content-Type: image/gif; name="image002.gif" Content-Description: image002.gif Content-Disposition: inline; filename="image002.gif"; size=15454; creation-date="Sun, 17 Apr 2016 17:04:18 GMT"; modification-date="Sun, 17 Apr 2016 17:04:18 GMT" Content-ID: Content-Transfer-Encoding: base64 R0lGODlh9AFQAPcAAGY7JTMiGptoRahyTFtYU67q6g9vjmlIMcXFxWy3ylc3JI25xS6wzIRcQ6nG ygKWuC2RriBYa0dEQBkXFWdCLCcmI9KzrbaPb1dSS9jj40yzzHNKMWZjXLfU2N3d3eWssjYpJACs zM+OkygaE2pqamBbVezRzvX19XhXROLj48Pl5kZBOnFDKolhRzo3Mp2dnQW31LTKzEglFrSZg1FL RKqqq3PB08vc273Nzenp6QMCAnx8e9d6iI54a3HU5UE8NSzC3gKBpYnd52mqvTcxLLmjkQCiw4mt ta/e4p3j5xmqyNzCtovH002bssvV07m5uZrByIRaPKp4eOW3votcPUQzK1XN5D9odnpUOReXue3t 7TIdE7PHyprL09econNSPYVnVeKKlo2NjaCGcJJhQajU2qXM01IpGCQUDtTc3HpQNAKyz4NTNQGd v5rY31gyH8rRzxeKqOedp9vKw9Xa1RYRD1WnvwwLChMLCZ55XVxDNXZzbMmnmnKIi5RcPcPc3U+J mcLT09Pg33NPNIFVOkfF3hwjI+ri3eXy8mA0IdbW1mlTSe7p5KO+xLSAWRK82PLu5wutytLX0uLo 6H1YPpBmTkIrIDAXDkEeEC2EnwGOsbTP0a26tRmwzM3g4DmivxtBTVFcX8TOzRl/nLSqnorT356T iNja1yoyMQYEBHlqYOzm4t/O0lQuHsGypoG/zgwUFl8+K8lsd3peT1M7LYpTNNXX02VMPgCpyaSM gYiWmZifo4tVQm1NOMbt7kpSVoxYOM/Y1gCmx4FOMSEeHE0vHo9tXX1OQK/FyB4OCQ+gwgQJC9HV 1WBqb4SMjvDw8ACuzxccHIZXN2d2ewkICH6Cf55wTTdNVwcOEDAtKXxOMBIQD4ZOMTIOBf///wgG Bg8PDtHR0QIGB8DY2QuPse/r5z4+OycqKdPV0TExMJdaWm1tZGJfWCafv+bn5tzs71BPShWQstvz 865lcs/z8wmpyLrJzOPZ1JpTMo+iobaXmpOTjOvr6+/r7+/u7QAAACH/C1hNUCBEYXRhWE1QPD94 cGFja2V0IGJlZ2luPSLvu78iIGlkPSJXNU0wTXBDZWhpSHpyZVN6TlRjemtjOWQiPz4gPHg6eG1w bWV0YSB4bWxuczp4PSJhZG9iZTpuczptZXRhLyIgeDp4bXB0az0iQWRvYmUgWE1QIENvcmUgNS42 LWMxMTEgNzkuMTU4MzI1LCAyMDE1LzA5LzEwLTAxOjEwOjIwICAgICAgICAiPiA8cmRmOlJERiB4 bWxuczpyZGY9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkvMDIvMjItcmRmLXN5bnRheC1ucyMiPiA8 cmRmOkRlc2NyaXB0aW9uIHJkZjphYm91dD0iIiB4bWxuczp4bXBNTT0iaHR0cDovL25zLmFkb2Jl LmNvbS94YXAvMS4wL21tLyIgeG1sbnM6c3RSZWY9Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEu MC9zVHlwZS9SZXNvdXJjZVJlZiMiIHhtbG5zOnhtcD0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAv MS4wLyIgeG1wTU06T3JpZ2luYWxEb2N1bWVudElEPSJ4bXAuZGlkOmE4YWU0MjY1LWM5MGItNDZm My1hZDI4LWZiODE4YmVhZjcyYiIgeG1wTU06RG9jdW1lbnRJRD0ieG1wLmRpZDoyNTk5NzcwNEY4 MEExMUU1OUQxQzg2MzZGQUZDRjk3MyIgeG1wTU06SW5zdGFuY2VJRD0ieG1wLmlpZDoyNTk5Nzcw M0Y4MEExMUU1OUQxQzg2MzZGQUZDRjk3MyIgeG1wOkNyZWF0b3JUb29sPSJBZG9iZSBQaG90b3No b3AgQ0MgMjAxNSAoTWFjaW50b3NoKSI+IDx4bXBNTTpEZXJpdmVkRnJvbSBzdFJlZjppbnN0YW5j ZUlEPSJ4bXAuaWlkOjI0YjIyZDk0LTFmNTctNDY1MC1hNDViLWM3NzQ1OGVmNWMxNiIgc3RSZWY6 ZG9jdW1lbnRJRD0iYWRvYmU6ZG9jaWQ6cGhvdG9zaG9wOjFhNTdiMTBlLTE2MDQtMTE3OS1hNjk3 LTlkNDcwNzU4ZWEwNiIvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRGPiA8L3g6eG1wbWV0 YT4gPD94cGFja2V0IGVuZD0iciI/PgH//v38+/r5+Pf29fTz8vHw7+7t7Ovq6ejn5uXk4+Lh4N/e 3dzb2tnY19bV1NPS0dDPzs3My8rJyMfGxcTDwsHAv769vLu6ubi3trW0s7KxsK+urayrqqmop6al pKOioaCfnp2cm5qZmJeWlZSTkpGQj46NjIuKiYiHhoWEg4KBgH9+fXx7enl4d3Z1dHNycXBvbm1s a2ppaGdmZWRjYmFgX15dXFtaWVhXVlVUU1JRUE9OTUxLSklIR0ZFRENCQUA/Pj08Ozo5ODc2NTQz MjEwLy4tLCsqKSgnJiUkIyIhIB8eHRwbGhkYFxYVFBMSERAPDg0MCwoJCAcGBQQDAgEAACH5BAAA AAAALAAAAAD0AVAAAAj/AP8JHEiwoMGDCBMqXMiwocOHECNKnEixosWFOjJmFMeR47KPy7CFxEaS JKyTKGFFUxnNkMtzMFGhSofKRToXLszl3Imzp88fLn4IFbrix4qjRyUolUCjKTx4GKKWYMdh3bo9 WHdgNZYnjzUyFA4c6EVFgFky1i6ovSCAygBHF4q44oTMQSMoCxxscoJOkd9THgJ7SEE4hbsciHPw 8/esceMTJ+YY6yV27JdBWLBQ2syZEqHMn0FLIyStNBs1arQNQp35S69eFPTQAjGCGAgiFQxV2E3M kDlywkIIHw6t+Jo1MDoBuci8ufPn0KNLn15R48aO4kB+LMkdFjaU0cK7/zQEszyqbOnSz6TJHj36 dETgE/H5M+hQo0hXKG3qNCqBqVVhldUequQxRh4CbKDGF1iQYZYAZOQxw4QzfPXWBXyQQpcDeC0A xSZw+KXIKYAJVpg7KCbGjxb+MPYMZCcsMZlYvQyCmWaUNNAZJZphERohQLIhpJDaFDnIBkh+oeQg lN1ShSW3gUAMbxVMQIwLQbRhxHDEQXMcDI90Qt2YZJZp5ploTmSdDthlp91IJYEXnni6VXCOneWV Z+ee2cCUzZ+AZkOEoPIRMd98Pd2X31JM0fCUfyVwUNVVAu7Rw4ECRKFZFA4OAOEYExZRBIJwxTVX I6gu4OFeIpIo2GCEof94mGIs+lMOYyc8c0geX1TWi5Jf5NjAsJ1lthkhm0VRmjRDqrGBNkgesIGN g7jWyy16WBIACBUQc44hxIRrCCpx4CIMLlyGYBwMkYCZ5rvwxivvvA9ZJw6bHb3Z3TawTOBvNMQA 3FtuvYVr8JRT7qbwwtlUEGighkacqKJI7ecUVJBKalWlxoxxYAuagWFNVx6LarIjAjgCFx9FcNII h6p+yNdfJQZWmGGJ0WrrY7vKRoseY1ESLBYNzNICsZxhEUUUOS5NRRRULEuIGp8dqUa1Nv56LS0B BCAuuAanM4q56arrJXLu0qv22my3Dd2abYJ0B0ng8FsHLHVM0O8E0fj/67eVVgp8cLjdFr4wwxAL KjFOQxW1aKOO+ocBAVRNKuClB/ZgTA+mvHCpKTPUwAkpoqKs8gUzaPgyFHiZAWJff716YoqIrVjO Ko1Bog/X21bx82tKojBsC8QjTQnTDRxNRQtPS7P00jp2xuRrW9MWAMC8eUuEAdCcCw2XxZ2NnNvk l2/++QXZ2xE1y1Bzxx3gxF/3NvTXv00def+tPzFWDk54wofjFggSZygXzEco9sGPfiAXuahMDkBW 2Vg1Ote5fbygBjWYBgmmsYMLmiIXufDK6eLiMgdwCApdwAEcmEEz2Z1IRSxiBCMawwoUBGAEExjB CHpHC1ocIFjDOxqx/6IwvOQxrwVRAJJnMsPEzWCBeq/RAxHQ4K+EhQsmo1gD2b7XpS/BAH1gDKMY 0WQvNn1DHNRI4/vWCD/4yY9+dajfBPKWP/0Bzn/dmlIAdtMwhwEqYgVkHMWSsgL+NDBjk7qKM17A yBrsYheObMYvfsGOHVSDAyWYSh5Olzq61IVDroMD7Ebkwli5YxKotF05ngEJUkjRElUAwbZg2UM9 fAEFwivisJLHS6Zt5kjSOgAFKBCLWAyzF5qh3gFu8YMAoOF/V8zGKL4XnHQZB21jzKY2t2mRNaXi m9/4RhrHycY2vrF+ccQf/uzIPzwS7nAVAME5/qg4AzLOPo5LCg0gh/8x/1CuKpNaZCMhuQtnhIKS oZgGPHZSyFls8gIaQgYXYtAFFG5CFCwcUc1gRZgMoHISOdCCFg4xw3uMQQ8oXSYtfuC7n90CBcHL UfF0+UTKEFMBxXhS1wJgiZ4W4wBYUFIUZ5NHsJGnAgbQIi7QZU0vcvOpUI3qQTSSCh18MxXhHCc5 y+nG+aFTnezs3+AMtxtuxfNhgJxY4yrGwH4+kB3r4AAJ1rEDge5CDAWVZDPYMY1QpONPMEmHOSRQ gh7sgy4xqAvrNhGIjLqqlDirnRZWIdI59OAWt7hWjQ4gm5T+SkkyRSLSniiWWNBCAT3Vlg7RsEOe /hRYW6sCEbgVsIH/BSCpwhAGF8G3hnZ9UarADe4YvXlVrIZTnFtlIzi6+tU52vGOYwWgwuSJ1kAK cq360QMDHejPykVwBzvQhRhIsIODHpSv5shjb9ajlF9U4wjIiAFeoGCGQMzssYHJwM1mtaKRPqMc 98gFjYBn05TewjUoENawfElaYZ42p8UohiwDsIUdQikAb/ihkm5BCyJUoWEFa4k017Cl3QpHfOMT ropX7LY1WdWq4DyuVrnKXHRuw7n7E+vBDLfHshLQuglUoAQKyU/uPlBSGrtKNfr6C3P8Ah6/kGQe rVSBdJzjJjcxBwH64CEPua6xGi2RIDhKO1rN0B/3AAPQKsPm2Iyl/0a5PB6PMjOI0sZCAXjGczEU UMw7K4AWxdAWLXoB0y/QApa4yY1LHBaH3JpYXeo6TopZTOlKw8vFxTVuVtVYzuXGz8brrGMVdfw/ eFL3TwOUGKKC/Djt8sfI/0FyXNcxVwJIwCaDPWg2/ranPJXHHM3owxFexlgnOEERaUh2slPgAf3S bkWMWAVjiiAW2QR6z8VcM2V6IaxjYeFqdSamn/Mci2CyWTYBeC1MpWgobo3nHKgghxGYak3x/dbS +M73mLwJ4xgjl9PK/bT96PjcdkYXng4b4B8NVYV7DnKBhnTrfyqnMRKwAx7pvYlS0sG/KnaLb+KJ SU1+MY18fCgQ9v8NRjBOkexmC8LZs1JMDla5ijwM8w0X3mkxjEmjQTTteK0BZp8BgGdjsuAAR6fA BqRFmUDbEqa3AIElBtWtllSAXFsKAb1P7KVItEvfYA+7czBdXBnPWLk1BquoR41HU58V1YpbNasr ZsimwJpy3o1rCRY6z/Sko0qj1l9LviVyFzTjCGboQMqDoWxBvJwwk5BVfxkzhwboIRY6leWELVHu sVRrM8P6zGWWLu5YEB0AwwQA6lUflrHooRhPR8EiYjmfgOnGENcgRxvOha6t9xabYg++8CHC77Kb 3X1cFbiNccxOd8Lzx4ube1IYSAPuEmDiHKD43l2wsI7TEX94y1//Swwx/peE4ghlWDzj0+B4QcwO pCtijAUGgXlnTqBKqbiDhbWtmV1qykbCVHoAEAtv8AYRVgyt0ApvgHpHdwA+dEu4VAXbkg22pxvX 0Aa7x3tbF2lrICbD94EgiBDEdVXHl1zmpHxq13wHtzDcUl3Rpyj4wRTbBWtTQXHZRwPcFy7+gj91 41VxVD/9QifjEQoJsBcq13iOB3mRJ1nT5oABUAcuQADmcAfRgAepUAfpVhk+t2A6ggVLV0x8RoAy sAVb0DWYsAWXIAOtkAjDJEyEhgKzMAt6MIHiEg3nEAFGsHtLtVTCQW/Q8HUhGIgh6GL9pmn/BnAn 6FX3c2Nr5zfO/xdAEFNAcodd0xdxd8cOmIhkF/cDgIc/9YMH8hOK8wNy5ecS1zAEHaByN5AGNyAI nuB+sQJDLZILsWAJyUAEzbAOxAAOhgAO1JAKaGAJsREWx1M8lABMRHdnxUCGUpdaT3IJmLCAYUEB bxiHi9A1CDN+1yAMWrKH3th7HRgJgjiOw0d2xneIyQc/9gNHzMd2bceCfhSJ9HEfQuZqr2Z911eD lcMOGMCJE7CI9QMOePA+53Q/ekOKLtES1/AKqXgDDumKGaBfS0grIsUIk6EHOIgBHEAMsGAIyxBO O1Ru5aY0DkIGDYAFdZZnY4gJ2PgNWJUMlkALWyADbBgWEBiHs/9ABAdjdRGAgUZwLsPhjSHgdR5I jkapb4SYaSWIfAGniHC0To5IagZDVvEUj39iXUBBj2xVd9WHj/pIFRe3Aufgicq3jsuXN0I4HlfQ BTcQDA75ii/nbLXTX+7gCq6gCPewCD2kcHiQDHiwRz4EAEAVBS0gAJVABlSgBgdwZ28gAzckARxQ Act1B1U1AsUgA2/QehDYAmAwC7RQG/xjhxUQAcLwAD9Jb0LZCQygAUfZmvlmjv52dmgniqL4lH/z iArTMNmgcGl1XURhFEuxT/folZiYiWF5Dv84cOnkiep0P3U0J4M3LkMwDg55A57wihGZAiDFhI/x DK7QAtbiMzj/FWgiSQFqIA0OAiFME26tQIYYsA97oBLY8A2wcAd4EIytIJg/lGCzAAZg8AM6aCUw EQG48AC5FZRahwv1sJo2YAOu+aCUBpuaJps0dgdalVwCV0c7Jl1WOSi9+XAQV3cORACT8x+ZpI8Y sAK75pzpxKLq9H3h9zd0QgwRwATVeZ2u6H7ucAiHgBgs0hhaYAFgYBm9QgFhCDTDNEyDgJ4l+TSX cQAycAk/wAH7sAPnEA1WZSVEkAyXcAaJIC1fUDScCQZcM0fjRwR4+AB8GJSRoAQMkAA2wARmAKF0 KlyweVybBnDjdFyZppTIRZAGKVYKs0fypHBxN4k/YA6PQ33W/1eiJ5pJmIgBErCizPlVT0lH7Og3 ffMvhgAISPCWr+gJGYAiJnAPq0BZWvAMq8AHDVBMwzRufBaASboBbEAFiEkFT4OSpacHt8AOLkAM 9lkHICCBW3AGCkABmEEJY6oKelAldRAeV3cFbWCaTIUubqoBCfAKTFAGHVCn3ipVI2iIh0gN4XRV hEhVfYpValQ3+fNODhOPHgpkREFIwdko8NCV/nR9JlqDkkoE/yiQ2xA/eBCwZnk39FM3sMCI/MIS oMAEf/CWj4ci91CqlEV5xkBMSRoL2tYLSxeAB6AGJYmYUJMZsmpnCtBSKHV5pscCWzgLleCfK4BD aAlvozCtu/+ndSHAAG+arV2wCR1wA98atNxkHVVFgnhKruVaVecarun6p+DQrgmzmwuHlUKhqNNH ffg6OSW6rxNnazoJigMZtvYJigH7RvGjjkBokOHhqdYpqvqlnSZgAnNwCD8qI1czYJdxGc7isYNQ FgJgDW2Bq5qCBYuZCAqQCMZEAai3AVpjI8airJxpDGAQs85FHrk3rQ+wewuKrdraBYnnkEIbumJU fFglrt+0tOearn2aVerYP7sxT1P7E/O6QBZjSPiYj//RtThIDC8qtmj3u2gLhP1So38Al9m5Ckuw BPfgDiIFCawwBi0gDd+WGleDGnsrFkvaKZ5CBtwruISwAUb/moBvcLiqN4AHsIVC1AKVUAmSWwUy yzeocAVxkLnkoAzXmq1M4LkdQJ2CQBGM9L8A/L8C0UEBzEgEUBAVIAb/KwEFcX0JsQMVMBAV8AIM fBAVsAMGIQEK/AJiUMEE4cALQQL/SwIKQcAvcMADQQIefBAQzMIFbMAFIcKMRMIGYcL/i8IMIQH/ KwYRbMEmjMMGccE3fBAFTMP/QLrgVLpKi7qpq7qr6z51Q2Xw+oIUYzHU10/6aqImyg4lQAM/QBsj QEVogD8D+T5MCbxOeRKGMJ04KqqEsQQmwAjlUCusUASOYAx+EDXAIA2oIb3hNgicQgYDMMhfEbK4 mpiKmwit/4CA4nusg0AIRjQs62sMs1AF3kcMRDALPdAE7dAOn4CtNqCtrrO/D0kRJ+ANqJzKqnwC /0AAqvzKL0AQL3DKqlwDBBEO4ZAQ3hDLAoEA3nACKzwQL+ANBTHLq8zLA4HLCkEA4fDK4QDEAkEC OeDMFewBOdDDBjHMGNzAr6zKyMzMzgzErtzN3uAB0IzANfDKJ4DMA7ED06zKT4DN7fzOqRzPskzO 63zERFuIp8vETOzEq8u6T0s4U7tqVStktftqWIy7JTBxJZCiE1ZhOjQBY7wNA/kNFmqhZ+w+Znl/ V+AGxXudEXkIcDwHIdUiJD0DjlDIiGkaRxILX2AM3CsAg/+8vel501TwvRvAAoprekqHGoQANcSz vuw7C5aQQ3kTAAfgGcbQBBowBEPQuWaQeONAna3YHMocw95gxAiRzgiAwhLgy0+QzLmMELuczDlw AmVdzMQ8EE/gDQhQwWHtDWNN1glBAJAhBgMhBpABxDtQztucwJDBwK681gRBAnB9EIjN1QaB1yeg 1wLB1yeAw4tdEO58AvJcEB6wyxVMAL5sy3tdzjQ8weUsz2Ig2gJB2h6AzcMcw2/tAfqMruaaEQLh z0tbtABttOIUxVNylfJKiQkNFVm7tZnk0JIqgTvVNToUxvhzB+N6xsF7f8RgDgnwByH9tnMgAo4g UoxxCBb/cAFecRbdSzzERAoVQtNvMQAsnZ4P0tJsQBqloSzPszxDPclgAAJ1EMYjcKy1mAh98AoA vgCu47OKB7FYbdjRvNUKgdh1TRDpvM1ZfRBnLRC4PMzsLBCtPcATfs/b/A8RbhAegNkIfAKwndok ntl4XdanDdoDIQEnrtgKnhAhntkVQOIpHOMfvOFsDdkE8dY07OII/g+IzeJAbhBDLsxtXRCn/QLm qBEEYdtJidu5HWNQTGXzFH0JtKj8ca9GRtwNTTkPfWvJPeZhjAYDibSyCcX0Ey6wcA5DgATFW7wZ QNICUAT95d0XoN6AC7jqmQcXoAC5AAkXYA1voTIrzb2I/8neDyLei869LeDoZEDUlTALT6hzxYAJ mL4HHsI6ibe/4xAID9m/zPHhCc7YBREOOYAQHlDXpE4QG67M4QDMbD0Q1owQOVDiHh7kGs7jBHHa 2zzM5/wPYoDrb83jFRDiwS7kOF7D3sDrob3NlQ3iul7jCGDBHrDN6RzMAvHWPZztB8HtGJ7kBfEE J4BpTp4+UI7EU26I1PC0AHOVsju7EGevXb61WZxJKYrcY05hxMDcFl2C5XRjvGslgADS1q0CEckH +GAB/MAPjPDd1hDxEg8hZBAFg9ADLeAKfDDIjsDxXtG9uKq9NI3ehOwp7X2Ykk7JT7gFPZVumI4J qgAFev/hAFwwDvvrBNX5cgdu5MuOwDpOENjc6gPx6rlc5Pec2j+P5D0s9P9QA6yMECcA2uGA6wuB 7NvuDR3O86Y+EE6fEFFf6gch9Iid9ape7QfhytvsAWbf2Fgf7lO12IQ4VenexOsem3eQN1MCH/Eu ZEQ2nI2qr4563PtOYRRW5nWAB3jgkuqKiPNDR1dQCnCOBCrgCSmg8HOwGKzAFmax5xQvDRswA3PQ FV6h55sPIW1RGsCgvTW9+qR/FpL+sjaEBukmAzEpA5i+AzK/CZsQA1Vt1avoeDvPzcmu7Ft/6rou EEQf7uyc4dGu9RR+/Eyf68jP4gtR49ds4Qve87d8/NL/T/xB/PXZ7A2ZLeEX7uq8nPRDz8sZTv4u JoJzH+V1b7QcTWXZkChZfrW2e3dZnI8PDRA0qoDYEiBAwS1bRigcgaZOHTx4qH2jSM3iHYx3wIHb NmFCKCZIRKrwNMkRvns5DvERQEbAS2styUQZNGiMgChRyFjjScbPTwHWBlijomYYMJcDlDpiqlQp z5eVBFSq1KISmF4Ht1iyROGApUtnekBp5KBDjA7jxv25ccOTIEH/5M6lW9cu3XDh7hJ40ddv3wr/ JJyQcLduXr5//Xp7MTevYwR0X3iTS8IbCcOWMf97fLezZ73/GBveeyKctyek574g0do1CQJyP9vt rLlu/4Un3mLbnax67mjDwIHfBd47+AsdyZP7/qfc+XPoylNNp17denWKFcFNIFYhmwvwP8T/WFFe wnka6dNjYM+eAAYC8eWXKEGAxg+DCbUeHNG/YTKIJKrooow46oiYK2xAogw3VFDBgwHw8YCfOfJo oQWXXiKDCmk22EANLBSQQQEsqKiEDGCAqYWbWpIiYwNthvHjpaUGYMoRp6Aio6qrLrwlAEtGkCEW PXqhpRsZnIGCLDPQ6iCttdqKiznmZpvLA2+y1DLLHeTqsspwathyzMZkC00uvlaj7B/b7mrTSsfO pC204f7ZYcsTAqNLDG880FO13MbMsjA446ysz7zCef+hAgS8EcMw467cssw66xKuTOLKjNQuxpyj MjpQoZtOh+tKxS47au6YIBrvwhuvvBXQU4+G9tyTL7766GPHPlpA0Aoh//xDY9iH8ECVQIw48ihB N9woQ4UMMhiAl0NWqoQKMrI9UZphNvDqgFjO2AINS9SghJAYWUjkjFZYqIWKDVjQRpqknLLxXqim murCWWbRAwRMLrlEhjd60QOTVvpIYIEFoDDDjDI2KUMttjyhEky7LPvSzcswPs7QufjUdM02M+6Y MznxSlllueqswK/cNqOr0r0Ye6213Qo181APEu0TNtI2ZdOvHOjElFNKj7Z0ZNI6Xe7TUKN2LhVS TTX/FdU76mD1u1dhPU+CWWmAp1b4CKDv7BI4KIGGFQjSaqEtLukPjYYaGjaib1L5JtU7+FZ2gmts aBYJTwpnZY5D5hgjpwZaoCIKNrwFgAIWDjhAAcyLUcBDbRLBBI9UkjmDBXUT2UAaoOxVPaaWeGyh AX8t2aKbbi7B5I1YMFEAkCFeYZgJJrroAmIo/7jYNzhLtosARz3OFGTHCPvHOOZlrsuynFeWCwHt ZYvsnxO+N9n6lpXmmHy6uCctnO9L5lP8uybbbU65TjD/tzLtb5rpuyTwZoenQU1qA6ya1UqFNa21 SjywihXYZkW2W6FNVyXAQK/elhD/yI1uc3NIHSai/ze+FWgCdYiA4ErRoMJN4h734EMe1ECIKBCC EGooHQAOsIFBqIECCogFuChAuVacQQYyaMUbjAgAALCgRDMSgL2a+JKo7IhfKECBHhRwCdoNDAC5 wwAgmjCEISTgFa8A3vCe9KTjqSZ5JzPMCVJzlx1sRmeiwZSVBqOXSHmjBoYRE/TqMpk/0aUCwEHA CTKjG6QxR3l/9EYg5zLIMilPTPdDE828JxsPGOZOcswkHE8mtJB5ozBpbA4Bo2ZAVFYka1tzAXm8 Jiv1jK09EUQbOyjYtl8xRG4j2CXd0DABh0hkOt/IiEbAUYdtXKEQbihFKRyUAXessAgt+BAWIkeB N/+0IhYUwKEaBuHDA/TiAD9EIhIT8YYkxoubbACGH/ABRXi2pCUXuhAVv2BFTNCuG5hIBAvOEAoI eHEIdkhAAmxAxoeVoQxmIKVh1og+uuRmfnPx3xvnOBw4TaYva/rHE/Jklwq40Y908d/9JjNKkd3F o8/zzSJJasmTHop8p4GoXHKQA0cKBjh8gmg4chDKnv5ULqD8RwWK1lC5mFJqqLSaKjvSKnO8kgYO FBut3FM2s9XylpZ4WwZ5WbdhDQuYEKEGCJOlkTpMIAJWaJbgoOWBGSxhBijwkBo2AIBWDMkrOcTC Ny13Q3GOEwCJICwAPBQvFlBgXrX4CT5+8lgq+IH/DA2gQuNmYc9YKOAMWNyn6RJxBUBAoAl2aIIG DGqD4A2vC0xAKv2ux8a7hNQDo5RLBTwgPZTtb6SycSNHB+MnQd6WtnMU06P2pEe8nIB8KU1kS2Fr l+LWhU97lOltcvBRjj0hkLbF7j9uO9GO/o8u361LbjYGSglgCbzHU+pSmXpAitxhG6xKhwui+rWp qgcDVrVVVrWKAQlU4VfCaogGwyrWEd4hb3szprIMUIgTMhMJKlDcEnJBiQ3cMFyYKAblDjCIvvo1 sH8d7BsUMDkWwEgbd2WBGthQi1qkyA8pSpE0KsuLBjTAnrfY5ob3qQAWcCATmYAABEirAdOiFnhM /7CBDVp7mJVZ5gmK6cv8CHACN8axBlg2bm4/tjO7DCZLe8JyDSRgji2fYGOcyQGVX9ClCpwmHI8S g5xvg6Un0Pk0b2yualwqSDnr2RtycumVO3kXPrX5zGmeKAFygBoSvOzRSnM0pCVdJ0D+5TRq1kFr 23vK98I3VfOtABFc0EBYpkeWWPVvLTGgBwEnRCG75KUv7ebLEeJBwWbdBjjwoFYgNNMNSVDBJFyR BwuMAQU3vKsMihGLXnxzENGuSU3G+a0f7hULMmSDNrSBxBQPYxjcIDeMa8EGNsiQELDbMQUSQYHc 7RMAWIDAA0ZR5CZ8wrQFPegrmlyIJ9OlBtQNrv+gskRwwXhUSwiY6MBJ44GNORzRIiVpbjb6BNrK hU8GP7QYrjuYHHRZkC94NPPa/PA1G0YCOci4YTxOmBOEvC4rb7nGu5uxRr2gUQwH6QtMY5lwQPRl Px80+XYAcS2ZZlEBL+WnoxNqUcuXvuRBD1XhwV+sSlBX+x2IrBfy1WD5coMNIeuAjsmRCDDABkIY NhIyYIoNuEIKX7DcBmJh4g9brhfU/gIWvqCGXmxg7zkcBAwbRwUOaUNd4Fb8uMX9+GFg4RiUuCwK vtALALyBXTLgpxo4kIU2ELnI+kbyvm2AZAYwXfUkrenqXf962Mde9rOnfdOdLh2ow5eYpE7HffP/ q19Z0rKW7FiEQAgia4Uk/+t16w8xRkAMNGxDwU7dBh5AUQ8ID7sLKtjEHvgwBrofQBvwjsU2MUeB XnxB/V/YwDEal+Ntw/BC2XIcG9R1RNKRrlsrXvEx1EBFy/uCHyqGM6AASgi8L8iEB8iCIsO3dmCA 0isECGSAR6g9C7xADMxADdxADbw93Mu9q2GwOugO+0q19ZglXNG6XTE+5AuW/sAg/yiICgiAEZgA cBiQVEEmUGiDQvCBUkgCZ/GFDBAF8Ks7b8msYrAEHoI3BWiFVlCARDAs0jGsF5KhnEA8dMm8N4jC /OtCDxkE97OnL+inG5KGWbirZsiCB1CCIWsH/wh4QAZggE6IQzpMPQ68QzzMQz3cQwvsNA8kleQA wetQpRE8h1OjKlWrlflQQV4BAQ4CprCKQYYIgAoAAUuEvolIlVQ5JlDQBCCwgh9MglKImHEowhsa BG8REbnZAkywBEyQgVtAgVi4BT3IpnNCpxZLNzXQBlQssVZIoiTqwhTTBiyAnS9YBAqQgX4aBkKo og3IBE1QhiwgMjfMgnpQAiXoBG3UxjjkQ2/8RnAMR3G0vU+jmgKiGkEckKwxhO8wQQhKwVwpAVui ARcIAIiovoiIiDoAkGSYgP4wiACwxEs0FgLBg20AhQfohB4UAiRIApHIgFwIPxzShgMAAAUAi/9v CIBFQIFZGIMZMIYxyIVjOABjwAoeerfKYQEUQyJcFEbS8RDKs7xekIEzKKcNwIpQiANyYMA4yAQG zAJhiIRt1Eah7IRxPEqkTEqlfLI/xL0PBEGzmwDv+AFEvDoUbLVcmccqIIZ8vIN8/Mp9rIMRoESB tMQA2Ia9GTWDREgYAIK1c4MCILZ3IIXwOwA1sCsK2CIFCABi2ANTMIUZUIUxcAVXCEl9MIU86AFj iAUnJKwt3CJwc8kUaz9esKdFoMn804YWUIVMiAfRiwMIiAcIyAJciIRs7AQliISiXErWbE3XXEo/ bEp0PEfqoE1Rs4jtKDVzqEpFhMesWsEf4Mr/fNxHfkwGNEgG5BTLgLREIrDECYgvatgG6URIaPhE HxAChyyAAuCCZbOcHPKWbFOAYqiCHuAA2ZkBBEAAUnAFBHCFXHjPflkETEgIzcnLFJPMFAvDL0CB K7iGM4hCAACGFgitePBMz4wDBG2DoMRG1cSFejDN14xQCZ3QPGxKUYHKY4lOVjk1/eKv94hHrboP e8QD5DzOAzvRsQQBIrAEFQWBCbAIatDHaIgATcAFGOjBH5wwB+mBb2G2D8uwHWqFgdCDLeiBIiiC MVhPV+gBS7gFWgCDRUg+E5scb+vCYMxPSjiGY2CHUTCAIPpPbpgGBoQAcsiEOBgFchiFB2gD/yN4 UNVUgnqIUyWgUDqtUzt1vdi00Kd8r+zAmm0gBkN0oP2apazTKnjAj7AEEIcwTuOMxBRl0eZ0UYnA CIOEBRoVhuq0Ah8YtgJQAV+ogXH6qwzDoWmDtx9aBK6ghWKQAT2golZ4xVagxfKzHMqBEXmx0pfU UhQghCvo0iu4gl+4BUDIAtCMBwQdhVEIgjhoA2UQBgd9UyVgAGx8MjHoMjFAgJxSDUYJh2y9jdbT OEVRvQrAjGo9ngrYMm+QObmQgCcIhzUjgEbxBp77hxpIlDDp1tUjgJq709jLUz21TabqU0I0hN4D m1XrLxW8JRflx4coTuRs1EtYThAYCBDgyv+9MUg8MAQD0AQjWINHWMgkIDZf+AN22KYf+quaoKL2 01Je0FKXXVleiNmYVbdBqNVbncIrXdlj4ABkRdZeHdadNFZj7dkHMAJlwAWkxYVohUAke7K+sLn1 8g2d+9bVoKTf2IF9JaWnfdqLeQHtYpMc2Iw22wHcWjnj8rnAUBTXUB/aCzp+zcB/nRqAHUSBVSWp 7L0TvEqsZAd2wIC2SYbhHKFFJdES/UfmHAiu7BuDxAZQMIAHEIYQWAPrxM5O9YVdKD+THado+wIw aAGWjVl1UAcyCF2ZxZANyQlpGL/7zD9gDEaYvYIgCIJ40IRrENMHIId4IAdyONNR6ExlaFP/OI1T CCyognLaxhCDE5ifOkMAzNiB3WiNuSCBvHiUHeCer50e9tHXvMCMF8heyWAMCRCDHQjX5d0M1kjP lwlXitreF6iB7q0BPSnfw5AZ6AWfwPCA3ZgyyegSt/0N6ereSOtejGOTHahXTJHffxADAM6BAR4q M3vbfiXHf+VTitAbvdkbcIiGQBWb3sRKeezbtpkAXfNKX9NHACFcuikIELAEIiACYpC+6MSDGQ0C No3cj73OkC0AX0CCReAhPaDVDytGqrgQXsAQP4jZGJOsE9kQKgCGyEksYSwn19XSWUBTZc2CdlBD 3SUHTQgCTUDWeGiHdljaODStMSIjKDBe/+SdnxeAOLIlATF4I/yN3uklATUjAQRIjTYmAZ8jgO0V Aw/gY6EaKvANh0DmY4hDXsyANARoMxLwgC6TAPa1GQ/YozbegTeWjDYDL0DO47nArfldjUFumSfA 2vTk4zzxOdbwgMa4ZEUWjVL2uAYuKlmOWghmyridmlSqYOzIGmLIht082LJRwb6VACIQ4TtIhWWA hb2RThIlzhRezipwYYjwtWUwhAigYSPABWhoS02lXE/NBwWghW0Cl3DCAkrAEKoYYsTjBT+gAl6I rMcBBmnotngpJ5WU4iTipl44hmnQBE3A3TfMAjUE6NhFVk3Igk/4BAb4BDsw41dwGDMYHv+nva3k nQuW0zjtaqTB+KPGkIDNqLN/yGg7eZlWDofYaLk1cVebQqnUECU26SSuHapWfiPpHWmX/iMsObmi eoKj8l/P2BKUtpTAWLm5yDOdW9efIuk4Fg096d/raddb7tdcFkTqIKa7XQEPjY9FOBtb0hV9rQLu IIZUUJVUIYYAQAOvjEQVZuGtvMdjqgBzuIZR2OYQgIEbxs4k0GEkKAEeugVx+uEvoAQqcJzGaQF1 4zY2kAbGZuxuIx1yUkkAlWIWOIZemIVMwF2FbgLRyuIH8OLYjYMHUIZ2WOiC8h0mcIBN2IQYWG2n TV4SwKmWEep/QAAF5jOa7umd1guOym3/RklXpVnpzeComyaZ0Jjp6WnlSOJt2gYpj2uMcIXkp705 x8AMR1svkiGTmaYM4ubt6g6zNrbaqUaquEVHq9YODXYBCVg1eJSgFdzK7tiGsv6GOrDERa2DFFbh iSWCCqgDjhjBgwgACYgDyF2DG/3mvdbhI+ChjRQnCgCxKLiQBogCyppwaYgCaaBnNnCxYVA8nDUn wiqsyaEALd2DOAjjT2gCFVfxIgsCLgbo0VaCdti31DaDTQgEHMdx4x2qN8KuCgiM5U25p32CJ4iN m8YuEpCAp/3xCljjmZGNzcCuaxWNyjjuo9na5bbf2gokbp2L8aXyosIyzLDtPdmj/j06/0daEwI4 tMJo39oyJCmPDI6C6n8gAJ8WufFmOgu16qbaPWLA2/7y4LRZGxeogOebAAX7tRpU1BcESK6Y5gCw wY6gwRKNgHrg5rZcSMr1BRUgAVroBTCYhb3DIUqIAsQr7MI+Xccehl30ECsN8RAfrCQ6hg1QB0CI B4W2AzAagiNQ8U/IYi4ebTHWt95xgBjAgUBwAmVX9h2XC0juKO1ilMYYpFHObQT46J6B9gpYOT7e IyIvqhyYKOGWCyLf9mc37txeDUvO8nKX9vThM4cL1/RqntjejSvDDKi+dkvB6I8O2z7GDW/XrvR6 lDlfM0zOczz9Q/Pm86tJFalU7+Brb/+vXpsfcNEOeoh9jIhhKQiABBIimGYX3YYRHIGHTQZzIAdM /1gE105fgAI9uIWSnAUs8CYQMfVswZZscexua3UrHSxYF3EKuIVjMIbRbAddX5gjWIAjGCg7+ITR NAKjZYAZFyPVXvZgCAYnCIZmF4xwx40sud4ngJ/crrQcqIGf8nr9sWPt2rTghvLayg39AfObTm66 UHuuvWmvR43t8im+D4w48wb7cTQgN41wOAHjguqQyjiO8mPAb+VG1vuebvyWURM8R/iG6jQJNkcC Mu+5vWA+145fNgdaWcQJmiAMqHiyO06IeNhoBhIgWeEqGIgR4o6ST4ZsiANuNvAbxmH/lncGPTAG Y5B5mrd5eZKJd+YWnlencvr5yXbZHYCAhW6ChWGYRmCYI0iAIci3emBTZmWAIUhtUbD6q9d6DCRz y585oKGS1sDXNELu85c9pdL8ARoVA8oOho+vbaiAdFjvQgWIEgIFciiBYQWREWgWMmS4ZUsATAEC WAoAwhKRKiCIjSC2UGGyZOdG4YK2BgYMIFZ8CBFS4GWZW7OMtcAySA2hKGTICOgpwM9OP9JqsdFm dAMLAEoTMW2aSCkLCsfA7IDQpImdIwugNOoKZcGCBEM0tFNm5Gy7BAsc4IDjJFgwOnRO/atr9y7e vHr1kqiRYy/gwIIHEy5s+DBivC9e/yRu7PgxZME6JlOubPkyZsupNnPu3PnbN8+iR28G/Y0auAnn XNDAgIEAgYHsZLNbtKLKiNy6R1wa8RCiRBkUMVbRyPEjxBHJAowK4fzkI5Usk7ws0OcWmFk2KbHR yVMATyp+/AADRnTYURZJAThlqvTYrWNTAVm1M2Rr1/yNwC4Yq6wNgGm9wpZbwUgiVxqRDSbBCxIo +CCEEUpIAgkSWnhhZJlpuCFmpIkWmochlgYaNdsQk84K8MA2UAmzCcQOOxjQUMUWu9X4W0Q5TgTC RVW4AEJHyeCRDBoPoZFNHMLgEsJJKa3UEnUFHKEHCij0MggW0uhUCRnikeEHFeWxMf8mekitx157 AFAQ1QbHGGPHJ00MkcARXCGjHzIOhJXAJ/+1oYQda7XlxFtz0YUhookquiijjTpq14abUZbKZJRy OKmHlXFWqQ4ijgbaHaqx9lpsL9K2yIwB3PjbQzlKJFEAMvRo3Ah14PENkQ+ZE4QwSjKJknRCRNmF HnosQkEvamARRQtdUvFsedKwgZ5R6qmnFJqJvNGUUlIdU80R9mm1QFcONIIMunl+lQCcyijTzhAD 2hNIgYY+ei+++eq7L4YcWtrppQEL7OlnqZBoIorwYMBiiy9yQIAeP1jCKsVbSISjRSAUB0IFyuHx MR4QXUOOEb2GAA0MjzzypEu+IFH/ggKxxELBBjflJA0VWpJplDbWJpWUU29s656aG6DgzCtHKI1f uk1z4QAUUCTA7ief3NeIPXC4deBc/Hr9Ndhh86tDXWQLfDbamnZKMGemhVrBqCs2/OJsNNBSEY4Q VYzjRRkBCdLHRFpyTRZtlKwkytE9+RI9O5xRDC0zH7DBBmpYbrk2ZlqL7VJMndHKGYm08lS3MukC 1lflIsOF03lCve4QcwqqtROS2CKX2Lnrvjvv+FJ2V9qXse3hwcSgkmKpDMO4CAYSu6oqJqxessX0 O2rMYwDKhTTkCJZc8YDhJZcE7OK+yLOLJcUU84YCFLh/gHpmAnDmUmiCfgb+oI8e/wtTyM6iT34c IEAuxIB16OICAWMQg9ctYFxQQAYORLE1W9yudxa8IAYz+Jjgfco0HhweiUK1mtYkz0UlKAgNVlCR ibxKetR7oUUsoZGNAG5Il/Ae+M4ivsSpRFi+QAQyaFEMSzxOAaSjAOfq1x78MZGJrRjd6BKhB+x4 4QlmKODqCmjAAyowBptYYNTA0gguRNAtzLDdoTSoxjWycXcDE5EHTUONOBIsNAczRDokoCLZDKQg B6nCq1Slqt9MzzfVAwERLIE97S3kEpeoggEAFL6ShSBlQPCBD5LwwwzcQn1DLMYThdaepzSFiTKQ ASZOKYMmfi4RM9ODMbwwhS52Ef+BBkRgF7+4QHM5ABkxEIUE4SCJA6WxjcY8JjIldDZKgTCOphkR aJpJDRGaozUMa5Ef9VAFFkaEYtMrJEQuwiMQBAANyYCII7cwMkmepVfjW1kmzfcMVXjSkzKwxCof 98RQtgKVmPjnP1Gpyny6kgIz04ccpoAAX9pDgbZcHS5jYA9dLjBPXLAHMLU2TFsUM5ke/ShI8RI8 zQyvpHUE1TbgJoHX8BGbGJBAFYQzSOk58pvhTCT2FqK3RxrgAeCbJOJSVoh4IuIE+6hnPe/pT4Ay tamp/Cf+tgUAmbXCGB+QwwcsUEsCIhCiBGzoJhpaQAcQEAdlhAM6bEeHkLK1rW3/HClc0WZSOYIj Gtkwh4pKNRsY1WZGIKhYTQPrG4qMU5EKQQNvQBABcoAvh+0Uxq8uiQR6IOIZT2iFAtaH1GLIgLOv cupTTxlVolGgFcfwAlY/MAV72LK1rItoDMy6VYmeNa0cdStuc6tbs8U1M51ZGxxPQ40JwM2afGTH w+w204d8s6Zo6M0WCjtOVf01ANcYhU9/Gj5foawQpUDCD5+BgFisL7ObfdxA06vK0RINAK3ghRdE EIYPeOEDc3Coa20Z29iG1aEKtEdt0XFb3RK4wB7l7cACxky2kQg1J0Iei2DEAVT9YLnNdW5uwqnI i4STFgq4riay2wbHmmwNDLBB/yn+8I6iekEPCnjxGzbrycfhb5X5ZC/plFIMFnjBCzxA7QdUiwAt 5veisTUrDiSqZABnNBySQMdaDSzlKYNtMiKN66b8BdzghlA11VxYhOumEZo69xLPHYH1EFlONASg GAQYhSZC7FN2ii8SDEgAE8qgghXnwAsb8HAxXhzo9Qmt0Oqjsf5EmWMdU+DHYehxfacgaSJ3tbUA RjIO7NFQTWNUa+EQsC2oLOpRP+p3wKvMP+SaZd+WNI53qINKWSobFNICBIEN7HNzDRGLEDYd53gI La5AjjiLGEDtxEUnEmADM4zDE+94hgekoIdYvFjQ1WYftt/QCm2HUqrswVYiiv8BAB5YIAzzfXSk pzCH1WnatZrGNJLfHUEJfpqCpL43vvtFNkhZJtXLXLVmKtVquj5Y1n0sAQ0qbOZcm7nhH7nERDJm iQhQnOKZiLOc5xw+XNjZBl3owB8ygAhEsEIE0672tV8MACMqoNCF5hbnwn2MeYiAB+eWgxfOrVrW srbSRoY30INZ71Dnu+hG3+C+y9bvSV3qt5FaMINBZddqJq9Fs7lFhRuS624wxMyD5ZEMI2CAsRsg CEHAeLHPsiQNeLwDzhaEBabghVtQG+Uoj8VUVw6AobUXWzHmxY9FMA85yOHRhs+5HBCwxXR9Nehm BWaTQX30yVOeMFbmN6ub/i//zTfzbaNiGAfYAY+sh4RIuUYD18+8ax6Zo+xkPzvaNa72SGjgFWZw OwKkoA+5zyJyMbs73vGe90Un8e+y+EAYAs+DD4gA5zwofH21BgfIZ5qW8BZFpjMKh6FXvvveP/Wp M69lBZvUYKdJqQtWGuHQNy8AtgoJ6heS+kbu2hKDK7vZzY5xYv9U7SFguxlswhNIAc3JnSpYQrXV XczIDBIhURLF3Bm8QSXYHOIVngjIF+HlHPPJgQlI2hSYAAiaACuEQ6bJWwTNm9Chg4B9HwtW3uUp nfgJHMBISoIJXNR9wzYYAhGoX5g1TwUEDpEEYUik3mBZhDmIXf7l3/7JHiVpu8AR7II+SIE6zAOk SYH92d2LyYyaOKACJJG2nAEtqIMsiMAH2NwUmBsfyALhYVUYEF6Q8QActmG6iWA4ANPj4QACaN+n rWAL9mHRvaC/+VZvkRTTgVBdEQGE9REHHMQPDknpwZ/pndlE3B/+JeES9p8w1EMT5IIUdOI8TKE+ BJk+6AEaBFrKGVHwDR/LaZsMUEAezIMU+FgYTIHNlaEIaGBCtaEJJB8c8kDzuWHhBVlCzQErTN9Z 7aEtBAQAOw== --_005_2DD56D786E600F45AC6BDE7DA4E8A8C11224A680eusaamb107erics_-- From nobody Sun Apr 17 12:58:06 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 69B7212DE61 for ; Sun, 17 Apr 2016 12:58:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rcZbXAt20_sP for ; Sun, 17 Apr 2016 12:58:03 -0700 (PDT) Received: from smtp2.pacifier.net (smtp2.pacifier.net [64.255.237.172]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F269912DE5F for ; Sun, 17 Apr 2016 12:58:02 -0700 (PDT) Received: from hebrews (unknown [186.39.211.125]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: schaad@nwlink.com) by smtp2.pacifier.net (Postfix) with ESMTPSA id C29CE2C9B7; Sun, 17 Apr 2016 12:58:00 -0700 (PDT) From: "Jim Schaad" To: "'Daniel Migault'" , "'Russ Housley'" , References: <2DD56D786E600F45AC6BDE7DA4E8A8C1122418FD@eusaamb107.ericsson.se> In-Reply-To: <2DD56D786E600F45AC6BDE7DA4E8A8C1122418FD@eusaamb107.ericsson.se> Date: Sun, 17 Apr 2016 16:57:56 -0300 Message-ID: <090b01d198e3$72cde7b0$5869b710$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQF1f+BBt/K3ExzVp+bJ0jwMkDlqCaBGXOmQ Content-Language: en-us Archived-At: Subject: Re: [Curdle] Call for Adoption for draft-housley-cms-ecdh-new-curves-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 17 Apr 2016 19:58:04 -0000 I have reviewed early drafts of this document and feel that it should be adopted by the working group. I have some issues with some parts of the document, but that is normal for documents adopted into a working group. Jim > -----Original Message----- > From: Curdle [mailto:curdle-bounces@ietf.org] On Behalf Of Daniel Migault > Sent: Friday, April 15, 2016 2:52 PM > To: Russ Housley ; curdle@ietf.org > Subject: [Curdle] Call for Adoption for draft-housley-cms-ecdh-new-curves- > 00.txt > > Hi, > > As mentioned last week, this is a call for adoption for draft-housley-cms-ecdh- > new-curves-00.txt. > > This starts a Call for Adoption for "Use of the Elliptic Curve Diffie-Hellman Key > Agreement Algorithm with > Curve 25519 and Curve 448 in the Cryptographic Message Syntax (CMS)" > > The document is available here: > https://www.ietf.org/id/draft-housley-cms-ecdh-new-curves-00.txt > > Please review this draft to see if you think it is suitable for adoption by CURLDE, > and comment to the list, clearly stating your view. *Speak Up* if you have > strong opposition to this work. > > This call for adoption ends on April 29. > > BR, > Rich and Daniel > > _______________________________________________ > Curdle mailing list > Curdle@ietf.org > https://www.ietf.org/mailman/listinfo/curdle From nobody Mon Apr 18 12:40:51 2016 Return-Path: X-Original-To: curdle@ietf.org Delivered-To: curdle@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 3116012E694; Mon, 18 Apr 2016 12:40:50 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.19.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160418194050.11122.84238.idtracker@ietfa.amsl.com> Date: Mon, 18 Apr 2016 12:40:50 -0700 Archived-At: Cc: curdle@ietf.org Subject: [Curdle] I-D Action: draft-ietf-curdle-dnskey-eddsa-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 18 Apr 2016 19:40:50 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the CURves, Deprecating and a Little more Encryption of the IETF. Title : EdDSA for DNSSEC Authors : Ondrej Sury Robert Edmonds Filename : draft-ietf-curdle-dnskey-eddsa-00.txt Pages : 8 Date : 2016-04-18 Abstract: This document describes how to specify EdDSA keys and signatures in DNS Security (DNSSEC). It uses the Edwards-curve Digital Security Algorithm (EdDSA) with the choice of two curves, Ed25519 and Ed448. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-curdle-dnskey-eddsa/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-curdle-dnskey-eddsa-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Mon Apr 18 17:04:19 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D53812D522 for ; Mon, 18 Apr 2016 17:04:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.9 X-Spam-Level: X-Spam-Status: No, score=-101.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, USER_IN_WHITELIST=-100] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JvZvyBrqQFEN for ; Mon, 18 Apr 2016 17:04:16 -0700 (PDT) Received: from odin.smetech.net (x-bolt-wan.smeinc.net [209.135.219.146]) by ietfa.amsl.com (Postfix) with ESMTP id 6CD4F12D13B for ; Mon, 18 Apr 2016 17:04:16 -0700 (PDT) Received: from localhost (ronin.smetech.net [209.135.209.5]) by odin.smetech.net (Postfix) with ESMTP id 3F7929A4003 for ; Mon, 18 Apr 2016 20:04:16 -0400 (EDT) X-Virus-Scanned: amavisd-new at smetech.net Received: from odin.smetech.net ([209.135.209.4]) by localhost (ronin.smeinc.net [209.135.209.5]) (amavisd-new, port 10024) with ESMTP id TOxGTl+S9Ncs for ; Mon, 18 Apr 2016 19:48:44 -0400 (EDT) Received: from [192.168.2.100] (pool-108-51-128-219.washdc.fios.verizon.net [108.51.128.219]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by odin.smetech.net (Postfix) with ESMTP id CFB309A4002 for ; Mon, 18 Apr 2016 20:04:04 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Russ Housley In-Reply-To: (Russ Housley's message of "Tue, 5 Apr 2016 14:16:36 -0400") Date: Mon, 18 Apr 2016 20:04:04 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <1D8ED835-28DA-4A35-AB0B-442FF43A6770@vigilsec.com> References: <029701d18935$89182cf0$9b4886d0$@augustcellars.com> To: curdle@ietf.org X-Mailer: Apple Mail (2.1878.6) Archived-At: Subject: [Curdle] draft-housley-cms-ecdh-new-curves-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Apr 2016 00:04:17 -0000 I just posted an I-D that specifies the use of EdDSA with CMS: = https://www.ietf.org/id/draft-housley-cms-eddsa-signatures-00.txt It makes use of the sam object identifies that Simon used for the = PKIX-related document. Please read and review. Is this working group willing to adopt it? Russ= From nobody Tue Apr 19 06:33:35 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4584412DCF1 for ; Tue, 19 Apr 2016 06:33:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.696 X-Spam-Level: X-Spam-Status: No, score=-3.696 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bFu8DjE3FRR4 for ; Tue, 19 Apr 2016 06:33:34 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (prod-mail-xrelay07.akamai.com [23.79.238.175]) by ietfa.amsl.com (Postfix) with ESMTP id EC7A112DCD6 for ; Tue, 19 Apr 2016 06:33:33 -0700 (PDT) Received: from prod-mail-xrelay07.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id 7EC9843348D for ; Tue, 19 Apr 2016 13:33:33 +0000 (GMT) Received: from prod-mail-relay10.akamai.com (prod-mail-relay10.akamai.com [172.27.118.251]) by prod-mail-xrelay07.akamai.com (Postfix) with ESMTP id 64E83433485 for ; Tue, 19 Apr 2016 13:33:33 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; s=a1; t=1461072813; bh=ta0NLiCI6Gx0zsXcfKQ3qv2EqHfc1EKJ9mZ4obXEirE=; l=2716; h=From:To:Date:From; b=b2XGtqpziYLCxDXU3+79wPL0swSAfjIMxs8ZeAfy/Sh+6++yngwYleaRj6ADKHE7U vGB1YBYG0yYOXD6dwLrUCgTEmP8s7O6kjL1K+GSxt/q6A9vj/w1sWXs06SgSLzLQDO +e+V9dvdQA1gsTqM16sThbCpVUansyQFqA77CItI= Received: from email.msg.corp.akamai.com (ecp.msg.corp.akamai.com [172.27.123.33]) by prod-mail-relay10.akamai.com (Postfix) with ESMTP id 5FA8C1FC86 for ; Tue, 19 Apr 2016 13:33:33 +0000 (GMT) Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com (172.27.123.101) by usma1ex-dag1mb5.msg.corp.akamai.com (172.27.123.105) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Tue, 19 Apr 2016 09:33:32 -0400 Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com ([172.27.123.101]) by usma1ex-dag1mb1.msg.corp.akamai.com ([172.27.123.101]) with mapi id 15.00.1130.005; Tue, 19 Apr 2016 09:33:32 -0400 From: "Salz, Rich" To: "curdle@ietf.org" Thread-Topic: Minutes, please Thread-Index: AdGaQAfGhGqoFpV6Qw6F7pKRPBh6EA== Date: Tue, 19 Apr 2016 13:33:31 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.37.159] Content-Type: multipart/alternative; boundary="_000_e3b9399a6fa14cb0bd4dc6dfa83a7372usma1exdag1mb1msgcorpak_" MIME-Version: 1.0 Archived-At: Subject: [Curdle] Minutes, please X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Apr 2016 13:33:35 -0000 --_000_e3b9399a6fa14cb0bd4dc6dfa83a7372usma1exdag1mb1msgcorpak_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable If you took minutes for the CURDLE WG meeting, please post them here for fo= lks to review and correct. Thanks. -- Senior Architect, Akamai Technologies IM: richsalz@jabber.at Twitter: RichSalz --_000_e3b9399a6fa14cb0bd4dc6dfa83a7372usma1exdag1mb1msgcorpak_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

If you took minutes for the CURDLE WG meeting, pleas= e post them here for folks to review and correct.

 

Thanks.

 

-- 

Senior Architect, Akamai Technologies

IM: richsalz@jabber.at Twitter: RichSalz<= /p>

 

--_000_e3b9399a6fa14cb0bd4dc6dfa83a7372usma1exdag1mb1msgcorpak_-- From nobody Tue Apr 19 11:38:00 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E975F12E40A; Tue, 19 Apr 2016 11:37:56 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.996 X-Spam-Level: X-Spam-Status: No, score=-7.996 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.996] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nic.cz Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TUJs2DXKRlkR; Tue, 19 Apr 2016 11:37:54 -0700 (PDT) Received: from mail.nic.cz (mail.nic.cz [IPv6:2001:1488:800:400::400]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 09CE012DD55; Tue, 19 Apr 2016 11:37:53 -0700 (PDT) Received: from zimbra.rfc1925.org (calcifer.labs.nic.cz [217.31.192.138]) by mail.nic.cz (Postfix) with ESMTP id CAB851800D1; Tue, 19 Apr 2016 20:37:50 +0200 (CEST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=nic.cz; s=default; t=1461091070; bh=MhE7i23z4LWChJJWZ/m9E6N4axfmpX2eItAsykXwr3I=; h=Date:From:To; b=tUIAJl2/LfYMLTjNCu7t90B+pDKdclSaIAZetTouAgiDbH1Yru4WjK7I2QwrTHhfi JbaQJe2cRgnzTSfo2dcnd8gW3zeB8m2zjf0UtPhW2ejUdIEpvtFXXAWgeMq0C8WyN5 f+EeX1kTYR+gTjS8SKol6HQBYntqULfw2u5T9ybE= Date: Tue, 19 Apr 2016 20:37:50 +0200 (CEST) From: =?utf-8?Q?Ond=C5=99ej_Sur=C3=BD?= To: dnsop@ietf.org, curdle@ietf.org Message-ID: <114014258.1350.1461091070803.JavaMail.zimbra@nic.cz> In-Reply-To: <20160418194050.11122.84238.idtracker@ietfa.amsl.com> References: <20160418194050.11122.84238.idtracker@ietfa.amsl.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Originating-IP: [217.31.192.138] X-Mailer: Zimbra 8.6.0_GA_1178 (ZimbraWebClient - FF46 (Linux)/8.6.0_GA_1178) Thread-Topic: I-D Action: draft-ietf-curdle-dnskey-eddsa-00.txt Thread-Index: rxmzgns5gdTN+B+GFtGPp9EfqcdHXw== X-Virus-Scanned: clamav-milter 0.98.7 at mail X-Virus-Status: Clean Archived-At: Subject: [Curdle] Fwd: I-D Action: draft-ietf-curdle-dnskey-eddsa-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 19 Apr 2016 18:37:57 -0000 Dear colleagues, a new EdDSA for DNSSEC draft has been posted in CURDLE WG and is in need of= more reviewers ;). I merged Ed25519 and Ed448 drafts into one, removed reasoning why EdDSA is = superior for RFC and I-D in Normative references (thanks goes to Paul Hoffm= an's review), and introduced using Signature Context[1] in the signatures (= thanks dkg for introducing me this idea) <-- this one needs more work, beca= use using Context is defined just for Ed448 and we want to have it also for= Ed25519. Otherwise it's almost ready for WGLC, so if we can get some more reviews be= fore that, it would be awesome. Thanks. 1. TL;DR just prepend the prepared data with "DNSSEC SIGNATURE\0" before si= gning or verifying them.=20 Cheers, -- Ond=C5=99ej Sur=C3=BD -- Technical Fellow -------------------------------------------- CZ.NIC, z.s.p.o. -- Laborato=C5=99e CZ.NIC Milesovska 5, 130 00 Praha 3, Czech Republic mailto:ondrej.sury@nic.cz https://nic.cz/ -------------------------------------------- ----- Forwarded Message ----- From: internet-drafts@ietf.org To: i-d-announce@ietf.org Cc: curdle@ietf.org Sent: Monday, April 18, 2016 9:40:50 PM Subject: [Curdle] I-D Action: draft-ietf-curdle-dnskey-eddsa-00.txt A New Internet-Draft is available from the on-line Internet-Drafts director= ies. This draft is a work item of the CURves, Deprecating and a Little more Encr= yption of the IETF. Title : EdDSA for DNSSEC Authors : Ondrej Sury Robert Edmonds =09Filename : draft-ietf-curdle-dnskey-eddsa-00.txt =09Pages : 8 =09Date : 2016-04-18 Abstract: This document describes how to specify EdDSA keys and signatures in DNS Security (DNSSEC). It uses the Edwards-curve Digital Security Algorithm (EdDSA) with the choice of two curves, Ed25519 and Ed448. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-curdle-dnskey-eddsa/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-curdle-dnskey-eddsa-00 Please note that it may take a couple of minutes from the time of submissio= n until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ _______________________________________________ Curdle mailing list Curdle@ietf.org https://www.ietf.org/mailman/listinfo/curdle From nobody Tue Apr 26 13:57:33 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 877D112D58E; Tue, 26 Apr 2016 13:57:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.201 X-Spam-Level: X-Spam-Status: No, score=-4.201 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x2Za4Vl7pANk; Tue, 26 Apr 2016 13:57:29 -0700 (PDT) Received: from usplmg21.ericsson.net (usplmg21.ericsson.net [198.24.6.65]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 76D2112D588; Tue, 26 Apr 2016 13:57:29 -0700 (PDT) X-AuditID: c6180641-f796f6d000000e1e-1b-571fd60c5ce2 Received: from EUSAAHC005.ericsson.se (Unknown_Domain [147.117.188.87]) by usplmg21.ericsson.net (Symantec Mail Security) with SMTP id 55.F4.03614.C06DF175; Tue, 26 Apr 2016 22:56:44 +0200 (CEST) Received: from EUSAAMB107.ericsson.se ([147.117.188.124]) by EUSAAHC005.ericsson.se ([147.117.188.87]) with mapi id 14.03.0248.002; Tue, 26 Apr 2016 16:57:27 -0400 From: Daniel Migault To: "curdle@ietf.org" Thread-Topic: Call for Adoption for draft-housley-cms-chacha20-poly1305-00.txt Thread-Index: AdGYyl+Q8hZOWiIjSr+YFism18tpdgHM6cxw Date: Tue, 26 Apr 2016 20:57:27 +0000 Message-ID: <2DD56D786E600F45AC6BDE7DA4E8A8C1122501DD@eusaamb107.ericsson.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.10] Content-Type: multipart/related; boundary="_005_2DD56D786E600F45AC6BDE7DA4E8A8C1122501DDeusaamb107erics_"; type="multipart/alternative" MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprMKsWRmVeSWpSXmKPExsUyuXRPuC7PNflwg39XNC1m9mxgtti6cBaz xasXN9kdmD2WLPnJ5LHqzhfWAKYoLpuU1JzMstQifbsErozHr+ewF9yYzVQxqfEoewPj5F6m LkZODgkBE4lZK+axQthiEhfurWfrYuTiEBI4yijx/9wPdghnOaPEs99/wTrYBIwk2g71s4PY IgLqEicO7QDrZhYIlHi1qYO5i5GDQ1jAV2LJFjWIkgCJtzN2MUHYRhLzGjaBlbMIqEr8v/OE EcTmBSrfPHcnC4jNCHTE91NrmCBGikvcejIf6lARiYcXT7NB2KISLx//gzpaSWLS0nOsIHcy C3QzShzc/5gFYqigxMmZT1gmMArPQjJrFrK6WUjqZgHdzSyQLzG7OQuiXkdiwe5PbBC2tsSy ha+ZYewzBx4zYYrrSGy+tJMFwlaUaOucDVWzlFFi8dlwmJppnzuYYGqmdD9kh4kvbZvGBnGC okTXnTKIM5cxSrxYexSuZkbbQTZkvQsYhVYxcpQWF+TkphsZbmIEJo9jEmyOOxj39noeYhTg YFTi4V1wWi5ciDWxrLgy9xCjClDrow2rLzBKseTl56UqifBqXpIPF+JNSaysSi3Kjy8qzUkt PsQozcGiJM7rHfkvTEggPbEkNTs1tSC1CCbLxMEp1cAIdOEDses+auyrN147elRwDqNxjp7T g4VcT/ackp9yU73ntWmy+u6tacceHLTcNemO8q/TYgFLEuXL/I1uqV7d4x6n0SV68+6Pf/2v E/P3zDSRTC5Q9jD+xH75cufLazOOLfxim9AzV3s3806f8CtT905/7Bupu81g/uI7EWdeHd+6 K/lwSNBMJZbijERDLeai4kQAn7rqTCYDAAA= Archived-At: Cc: curdle-chairs , Russ Housley Subject: Re: [Curdle] Call for Adoption for draft-housley-cms-chacha20-poly1305-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Apr 2016 20:57:31 -0000 --_005_2DD56D786E600F45AC6BDE7DA4E8A8C1122501DDeusaamb107erics_ Content-Type: multipart/alternative; boundary="_000_2DD56D786E600F45AC6BDE7DA4E8A8C1122501DDeusaamb107erics_" --_000_2DD56D786E600F45AC6BDE7DA4E8A8C1122501DDeusaamb107erics_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi, This is a reminder of the call for adoption. Please provide reviews and fee= d backs by May 2. BR, Daniel From: Daniel Migault Sent: Sunday, April 17, 2016 1:04 PM To: curdle@ietf.org Cc: 'Russ Housley'; curdle-chairs Subject: Call for Adoption for draft-housley-cms-chacha20-poly1305-00.txt Hi, As mentioned last week, this is a call for adoption for draft-housley-cms-c= hacha20-poly1305-00.txt. This starts a Call for Adoption for "Using ChaCha20-Poly1305 Authenticated = Encryption in the Cryptographic Message Syntax (CMS)" The document is available here: https://tools.ietf.org/id/draft-housley-cms-chacha20-poly1305-00.txt Please review this draft to see if you think it is suitable for adoption by= CURLDE, and comment to the list, clearly stating your view. *Speak Up* if= you have strong opposition to this work. This call for adoption ends on May 2. BR, Rich and Daniel [Ericsson] DANIEL MIGAULT Researcher Research Ericsson 8500 Boulevard Decarie H4P 2N2 Montreal, Canada Phone +1 514 345 7900 46628 Mobile +1 514 452 2160 daniel.migault@ericsson.com www.ericsson.com [http://www.ericsson.com/current_campaign] Legal entity: Ericsson Canada Inc., registered office in Montreal. This Com= munication is Confidential. We only send and receive email on the basis of = the terms set out at www.ericsson.com/email_disclaimer --_000_2DD56D786E600F45AC6BDE7DA4E8A8C1122501DDeusaamb107erics_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi, =

 

This is a reminder of = the call for adoption. Please provide reviews and feed backs by May 2.=

 

BR, =

Daniel

 

From: Daniel M= igault
Sent: Sunday, April 17, 2016 1:04 PM
To: curdle@ietf.org
Cc: 'Russ Housley'; curdle-chairs
Subject: Call for Adoption for draft-housley-cms-chacha20-poly1305-0= 0.txt

 

Hi,

 

As mentioned last week, this is a call for adopti= on for draft-housley-cms-chacha20-poly1305-00.txt.

 

This starts a Call for Adoption for "Using C= haCha20-Poly1305 Authenticated Encryption in the Cryptographic Message Synt= ax (CMS)"

 

The document is available here:

https://tools.ietf.org/id/draft-housley-cms= -chacha20-poly1305-00.txt

 

Please review this draft to see if you think it i= s suitable for adoption by CURLDE, and comment to the list, clearly stating= your view.  *Speak Up* if you have strong opposition to this work.

 

This call for adoption ends on May 2.<= /p>

 

BR,

Rich and Daniel

 

 

 

3D"Ericsson"

DANIEL MIGAULT
Researcher
Research


Ericsson
8500 Boulevard Decarie
H4P 2N2 Montreal, Canada
Phone +1 514 345 7900 46628
Mobile +1 514 452 2160
daniel.migault@ericsson.com<= /a>
www.ericsson.com



3D"=<= /o:p>

 

Legal entity: Ericsson Canad= a Inc., registered office in Montreal. This Communication is Confidential. = We only send and receive email on the basis of the terms set out at www.ericsson.com/email_disclaimer

--_000_2DD56D786E600F45AC6BDE7DA4E8A8C1122501DDeusaamb107erics_-- --_005_2DD56D786E600F45AC6BDE7DA4E8A8C1122501DDeusaamb107erics_ Content-Type: image/gif; name="image001.gif" Content-Description: image001.gif Content-Disposition: inline; filename="image001.gif"; size=2367; creation-date="Tue, 26 Apr 2016 20:57:27 GMT"; modification-date="Tue, 26 Apr 2016 20:57:27 GMT" Content-ID: Content-Transfer-Encoding: base64 R0lGODlhRAA8APcAAAIVTgAWUwAWVAQWTwUWUAcXUQkYUgAbUwAbVAoZUwAcVQEdVgMeVwQeWAYf WQAhWQAiWgggWgAjWwAjXAAkXQAlXgEmXwInYAAoYAQnYQApYQAqYQArYgArYwAsZAAuZg0sYA4t YRAtYREuYgQyZAUyZRMvYwczZhQwZAk0ZxYxZQs1aA42ahE3axI4bBQ5bQY9cBU6bgk+cRc7bxg8 cBo9cRo/bRw/bh1Abx5BcB9CcSFDciJEcyNFdCRGdSVHdiZHdylJeStLeyxMfC1NfS5Ofi9Pfy5Q ejBQgC9RezBSfDhQfDFTfTJUfjNUfzRVgDVWgTZXgjdYgzlZhDpahTtbhjxchz1diD5eiT9fikVe hUZfhkFhjEdgh0hhiEljiUtki0xljE1mjU5njk9oj1BpkFFqkVJrklNsk1VulVZvlk9xl1dwl1hx mF1xlFdzlFh0lV9zlll1lmB0l1p2l2F1mGJ2mV56m2V5nF97nGB8nWF9nmJ+n2N/oGSAoWWBomaC o2eDpGyDoG6CpmiEpW2EoW6Fom+Go3aFo3CHpHGIpXKJpnOKp3SMqHWNqXePrHiQrXmRrnqSr3uT sHyUsX6Ws3+XtISYr4easoibs4mctIqdtYueto2guI6huY+iupCjvJKlvZOmvpSnwJmou5WpwZqp vJuqvZyrvp2sv56twJ+uwaCvwqGww6KxxaOyxqS0x6W1yKa2yai4y6m5zKu6zay7zq28z7C8yq69 0bG9y6++0rK+zLO/zbTAzrXBz7bC0LjD0bnE0rrG07vH1bzI1r3J177K2L/L2cDM2sHN28PP3cfP 18TQ3sjQ2MbS4MrS28fT4cvT3MzV3c3W3s7X38/Y4NDZ4dLa4tPb5NTc5dXd5tbe59fg6Nni6trj 69vk7N/k5t3l7uDl6OHm6eLn6uPo6+Tp7OXq7ebs7uft7+nu8Orv8uvw8+zx9O3y9e7z9u/19/D2 +PL3+fP4+/T5/PX6/fb7/vn7+Pz6/vr8+ff9//v9+vn+//z/+/7//CH+EUNyZWF0ZWQgd2l0aCBH SU1QACwAAAAARAA8AAAI/gD/CRxIsKDBgwgN8tOnb1/ChxAjSjR4792vMyAaBLllb6LHjxDtvau2 SMYBCRYsSHAwSx/IlyD5ufMWCkqDBihTppQghB3MnxDhgbPVhsNJnUhTHigHtCnBeuCMKcpRAGfS qxLMOW1qTpmmKQ+OXr16oIu7rS/fPSOlhsQBB2OxPmiAwxg/tB6xtfLTo4HYuDolHOBQZI4xvBPf XYpiNCfgnQ0e5FDDyRniifUuSbD6OKWDAyPAVArW7rJHcSMcAxYcwUkjW99Mf9xnrMDjzQVw8JGF jR5BcrFMKZP90BmBuBEKcCCTSprPgfhs6VFCw8UOQfCIH0SX4wFSwQ2Y/lxqppWgNEdOaHCQwB7l Jd/aCe7D1fhBgheBjJWDL5AdqCo1iMBeUhLIoE58Bd3TjB9VuCELOfEUpEsaNJCgEmAFMIVgQfPA I49LA1mDSA4krNeZBBycs+FD7ISCxAgcdIbUAXRkt2JB9ghjhoUyJuWAEN7cONA+2zByg2o9pkSE J+/849CN6tDhAJKdZcCBDH5UIyRB8exxQJIpgeACGLR0tCVB3nh3ogQeuLBEJuQQdI+ZQvIzjG1x sZeBC0EEMtxA/LCjVyjGPHejNF8SyF4KQLARC53/vIONLGp8UMABB7wxjpDvQCHWSh70EEYnQQ5k Tze9HLLDAZxZMIAi/vPcyE8yRGxw0g1bOIJMQeQIcwkVglEpwQjobIlNJHksQstZA7mDzCdosFDA lBhqeCZB/FBTyh1A3EQlgSykc+1A5LQSyBMctHrbAZLwJ2Q9vjSiRQsOUHuiAwWQ8EexW5pjSRg7 WKDuaic5QckvTW5JDRMj2HuiXzQAYss29Vz7DhYD53nABmawgg2z41rTgIybHZDEJtio8+S4//Aj TKIasyAIM+tUzHJB3IyMFU5j0MKOuzcT9M4aMKv04ybl2HNX0AmZ4wVOErTQxzT5MD3RPWsFI4/V XHft9ddghy322GSX7dEywQijtjDBxDlN2mofwy87vhyjokDY0GLK/iq9lOPQpHsHc6A+zrRSCivI xPqPOr2ggoovB0aaTDDBiPvP29XwM0YOO8hQgwwvrPKPHTjkUEMNQZiRzD/HvOBELf+0s8kUKTwg QQqb/GPKFCVE1kMw9GxSRGNRxKYMG0dKcMMbu2KTBQ41bFIxHTfwYY8QDYiQRRVURGHLP1oc0AIX UWz2xD++DMACK/9cwgEBOdThhxOVYEMvEIoYQscww3DgQBSM4MMdypEOKEwpDnBYyRTQQY0c+GUH 0vhHFQ4ghnoYwQFGqAc60GGOefDDCwcAAzbScYSU/OMXBXCBLKghgwJQIRjskNQ5VpEBC/xBIOpg hycEMAJR/OMe/kzJBAcisAh1nCMRBxCBJrbhgwgIZhL/6IIDyGDBCMhAE5SQhCa48Q8QXoF/MpAA E05YgBe04hVfCkVBlIGSHNhhFaVhBQEyIIRA3EIgX9iABO7mDfaYoRs94MALOHADcnxhihZ0TNRg 5wUHiEAGNLAAEbpBxhekAhQDeEEuCqIPQfglaleYRjrQgKkNvKAN9mCCBFjwJHfAoAFYwEYg8xAF AnwCChGgohGixgc7zAEQ0+jiA1RghBiNQEUoNGMqBAACWRjkHccgxAxs54Z/rMMWcuhdA4YBhZSY yR0ecAAXACmBVFRCAjt4gQR0+YAx3uMeDtkHCKngDVGs5xJk/lRh/xrABkMRxB7heIEDoECQVdCA AKawAwgcsMl/7GIwg+jGDspJjiRIIAPrTKQLAKEHPcBBGF08QBbaUQ8VWAAI+WyFPNxgGydcYhWH +MQ3xtAJW1BCJWrABhlKYYs0cGAAtaBGCSQAg1UYVAIzkAY2JjqKf0ACBBLIZT2w1x4JFIAT/8gC Aaqwjn+kQQIbUEYw1Ce6bogBJ1ZyAB6SwYG2YvQG1ODFANq6gQR8IU6mWE9bh3WKfzijO2osRxFu UsFWcKITiO3EJYLJikasIlbSmMQkhvENRmRCS/+wxzAKcQYy+MEY6thEHMighkyo6BuRaMMY4rAK kHXDEWY4FUMkKPkPc3giEtEQyC4o4YhX3CMgAAA7 --_005_2DD56D786E600F45AC6BDE7DA4E8A8C1122501DDeusaamb107erics_ Content-Type: image/gif; name="image002.gif" Content-Description: image002.gif Content-Disposition: inline; filename="image002.gif"; size=15454; creation-date="Tue, 26 Apr 2016 20:57:27 GMT"; modification-date="Tue, 26 Apr 2016 20:57:27 GMT" Content-ID: Content-Transfer-Encoding: base64 R0lGODlh9AFQAPcAAGY7JTMiGptoRahyTFtYU67q6g9vjmlIMcXFxWy3ylc3JI25xS6wzIRcQ6nG ygKWuC2RriBYa0dEQBkXFWdCLCcmI9KzrbaPb1dSS9jj40yzzHNKMWZjXLfU2N3d3eWssjYpJACs zM+OkygaE2pqamBbVezRzvX19XhXROLj48Pl5kZBOnFDKolhRzo3Mp2dnQW31LTKzEglFrSZg1FL RKqqq3PB08vc273Nzenp6QMCAnx8e9d6iI54a3HU5UE8NSzC3gKBpYnd52mqvTcxLLmjkQCiw4mt ta/e4p3j5xmqyNzCtovH002bssvV07m5uZrByIRaPKp4eOW3votcPUQzK1XN5D9odnpUOReXue3t 7TIdE7PHyprL09econNSPYVnVeKKlo2NjaCGcJJhQajU2qXM01IpGCQUDtTc3HpQNAKyz4NTNQGd v5rY31gyH8rRzxeKqOedp9vKw9Xa1RYRD1WnvwwLChMLCZ55XVxDNXZzbMmnmnKIi5RcPcPc3U+J mcLT09Pg33NPNIFVOkfF3hwjI+ri3eXy8mA0IdbW1mlTSe7p5KO+xLSAWRK82PLu5wutytLX0uLo 6H1YPpBmTkIrIDAXDkEeEC2EnwGOsbTP0a26tRmwzM3g4DmivxtBTVFcX8TOzRl/nLSqnorT356T iNja1yoyMQYEBHlqYOzm4t/O0lQuHsGypoG/zgwUFl8+K8lsd3peT1M7LYpTNNXX02VMPgCpyaSM gYiWmZifo4tVQm1NOMbt7kpSVoxYOM/Y1gCmx4FOMSEeHE0vHo9tXX1OQK/FyB4OCQ+gwgQJC9HV 1WBqb4SMjvDw8ACuzxccHIZXN2d2ewkICH6Cf55wTTdNVwcOEDAtKXxOMBIQD4ZOMTIOBf///wgG Bg8PDtHR0QIGB8DY2QuPse/r5z4+OycqKdPV0TExMJdaWm1tZGJfWCafv+bn5tzs71BPShWQstvz 865lcs/z8wmpyLrJzOPZ1JpTMo+iobaXmpOTjOvr6+/r7+/u7QAAACH/C1hNUCBEYXRhWE1QPD94 cGFja2V0IGJlZ2luPSLvu78iIGlkPSJXNU0wTXBDZWhpSHpyZVN6TlRjemtjOWQiPz4gPHg6eG1w bWV0YSB4bWxuczp4PSJhZG9iZTpuczptZXRhLyIgeDp4bXB0az0iQWRvYmUgWE1QIENvcmUgNS42 LWMxMTEgNzkuMTU4MzI1LCAyMDE1LzA5LzEwLTAxOjEwOjIwICAgICAgICAiPiA8cmRmOlJERiB4 bWxuczpyZGY9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkvMDIvMjItcmRmLXN5bnRheC1ucyMiPiA8 cmRmOkRlc2NyaXB0aW9uIHJkZjphYm91dD0iIiB4bWxuczp4bXBNTT0iaHR0cDovL25zLmFkb2Jl LmNvbS94YXAvMS4wL21tLyIgeG1sbnM6c3RSZWY9Imh0dHA6Ly9ucy5hZG9iZS5jb20veGFwLzEu MC9zVHlwZS9SZXNvdXJjZVJlZiMiIHhtbG5zOnhtcD0iaHR0cDovL25zLmFkb2JlLmNvbS94YXAv MS4wLyIgeG1wTU06T3JpZ2luYWxEb2N1bWVudElEPSJ4bXAuZGlkOmE4YWU0MjY1LWM5MGItNDZm My1hZDI4LWZiODE4YmVhZjcyYiIgeG1wTU06RG9jdW1lbnRJRD0ieG1wLmRpZDoyNTk5NzcwNEY4 MEExMUU1OUQxQzg2MzZGQUZDRjk3MyIgeG1wTU06SW5zdGFuY2VJRD0ieG1wLmlpZDoyNTk5Nzcw M0Y4MEExMUU1OUQxQzg2MzZGQUZDRjk3MyIgeG1wOkNyZWF0b3JUb29sPSJBZG9iZSBQaG90b3No b3AgQ0MgMjAxNSAoTWFjaW50b3NoKSI+IDx4bXBNTTpEZXJpdmVkRnJvbSBzdFJlZjppbnN0YW5j ZUlEPSJ4bXAuaWlkOjI0YjIyZDk0LTFmNTctNDY1MC1hNDViLWM3NzQ1OGVmNWMxNiIgc3RSZWY6 ZG9jdW1lbnRJRD0iYWRvYmU6ZG9jaWQ6cGhvdG9zaG9wOjFhNTdiMTBlLTE2MDQtMTE3OS1hNjk3 LTlkNDcwNzU4ZWEwNiIvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRGPiA8L3g6eG1wbWV0 YT4gPD94cGFja2V0IGVuZD0iciI/PgH//v38+/r5+Pf29fTz8vHw7+7t7Ovq6ejn5uXk4+Lh4N/e 3dzb2tnY19bV1NPS0dDPzs3My8rJyMfGxcTDwsHAv769vLu6ubi3trW0s7KxsK+urayrqqmop6al pKOioaCfnp2cm5qZmJeWlZSTkpGQj46NjIuKiYiHhoWEg4KBgH9+fXx7enl4d3Z1dHNycXBvbm1s a2ppaGdmZWRjYmFgX15dXFtaWVhXVlVUU1JRUE9OTUxLSklIR0ZFRENCQUA/Pj08Ozo5ODc2NTQz MjEwLy4tLCsqKSgnJiUkIyIhIB8eHRwbGhkYFxYVFBMSERAPDg0MCwoJCAcGBQQDAgEAACH5BAAA AAAALAAAAAD0AVAAAAj/AP8JHEiwoMGDCBMqXMiwocOHECNKnEixosWFOjJmFMeR47KPy7CFxEaS JKyTKGFFUxnNkMtzMFGhSofKRToXLszl3Imzp88fLn4IFbrix4qjRyUolUCjKTx4GKKWYMdh3bo9 WHdgNZYnjzUyFA4c6EVFgFky1i6ovSCAygBHF4q44oTMQSMoCxxscoJOkd9THgJ7SEE4hbsciHPw 8/esceMTJ+YY6yV27JdBWLBQ2syZEqHMn0FLIyStNBs1arQNQp35S69eFPTQAjGCGAgiFQxV2E3M kDlywkIIHw6t+Jo1MDoBuci8ufPn0KNLn15R48aO4kB+LMkdFjaU0cK7/zQEszyqbOnSz6TJHj36 dETgE/H5M+hQo0hXKG3qNCqBqVVhldUequQxRh4CbKDGF1iQYZYAZOQxw4QzfPXWBXyQQpcDeC0A xSZw+KXIKYAJVpg7KCbGjxb+MPYMZCcsMZlYvQyCmWaUNNAZJZphERohQLIhpJDaFDnIBkh+oeQg lN1ShSW3gUAMbxVMQIwLQbRhxHDEQXMcDI90Qt2YZJZp5ploTmSdDthlp91IJYEXnni6VXCOneWV Z+ee2cCUzZ+AZkOEoPIRMd98Pd2X31JM0fCUfyVwUNVVAu7Rw4ECRKFZFA4OAOEYExZRBIJwxTVX I6gu4OFeIpIo2GCEof94mGIs+lMOYyc8c0geX1TWi5Jf5NjAsJ1lthkhm0VRmjRDqrGBNkgesIGN g7jWyy16WBIACBUQc44hxIRrCCpx4CIMLlyGYBwMkYCZ5rvwxivvvA9ZJw6bHb3Z3TawTOBvNMQA 3FtuvYVr8JRT7qbwwtlUEGighkacqKJI7ecUVJBKalWlxoxxYAuagWFNVx6LarIjAjgCFx9FcNII h6p+yNdfJQZWmGGJ0WrrY7vKRoseY1ESLBYNzNICsZxhEUUUOS5NRRRULEuIGp8dqUa1Nv56LS0B BCAuuAanM4q56arrJXLu0qv22my3Dd2abYJ0B0ng8FsHLHVM0O8E0fj/67eVVgp8cLjdFr4wwxAL KjFOQxW1aKOO+ocBAVRNKuClB/ZgTA+mvHCpKTPUwAkpoqKs8gUzaPgyFHiZAWJff716YoqIrVjO Ko1Bog/X21bx82tKojBsC8QjTQnTDRxNRQtPS7P00jp2xuRrW9MWAMC8eUuEAdCcCw2XxZ2NnNvk l2/++QXZ2xE1y1Bzxx3gxF/3NvTXv00def+tPzFWDk54wofjFggSZygXzEco9sGPfiAXuahMDkBW 2Vg1Ote5fbygBjWYBgmmsYMLmiIXufDK6eLiMgdwCApdwAEcmEEz2Z1IRSxiBCMawwoUBGAEExjB CHpHC1ocIFjDOxqx/6IwvOQxrwVRAJJnMsPEzWCBeq/RAxHQ4K+EhQsmo1gD2b7XpS/BAH1gDKMY 0WQvNn1DHNRI4/vWCD/4yY9+dajfBPKWP/0Bzn/dmlIAdtMwhwEqYgVkHMWSsgL+NDBjk7qKM17A yBrsYheObMYvfsGOHVSDAyWYSh5Olzq61IVDroMD7Ebkwli5YxKotF05ngEJUkjRElUAwbZg2UM9 fAEFwivisJLHS6Zt5kjSOgAFKBCLWAyzF5qh3gFu8YMAoOF/V8zGKL4XnHQZB21jzKY2t2mRNaXi m9/4RhrHycY2vrF+ccQf/uzIPzwS7nAVAME5/qg4AzLOPo5LCg0gh/8x/1CuKpNaZCMhuQtnhIKS oZgGPHZSyFls8gIaQgYXYtAFFG5CFCwcUc1gRZgMoHISOdCCFg4xw3uMQQ8oXSYtfuC7n90CBcHL UfF0+UTKEFMBxXhS1wJgiZ4W4wBYUFIUZ5NHsJGnAgbQIi7QZU0vcvOpUI3qQTSSCh18MxXhHCc5 y+nG+aFTnezs3+AMtxtuxfNhgJxY4yrGwH4+kB3r4AAJ1rEDge5CDAWVZDPYMY1QpONPMEmHOSRQ gh7sgy4xqAvrNhGIjLqqlDirnRZWIdI59OAWt7hWjQ4gm5T+SkkyRSLSniiWWNBCAT3Vlg7RsEOe /hRYW6sCEbgVsIH/BSCpwhAGF8G3hnZ9UarADe4YvXlVrIZTnFtlIzi6+tU52vGOYwWgwuSJ1kAK cq360QMDHejPykVwBzvQhRhIsIODHpSv5shjb9ajlF9U4wjIiAFeoGCGQMzssYHJwM1mtaKRPqMc 98gFjYBn05TewjUoENawfElaYZ42p8UohiwDsIUdQikAb/ihkm5BCyJUoWEFa4k017Cl3QpHfOMT ropX7LY1WdWq4DyuVrnKXHRuw7n7E+vBDLfHshLQuglUoAQKyU/uPlBSGrtKNfr6C3P8Ah6/kGQe rVSBdJzjJjcxBwH64CEPua6xGi2RIDhKO1rN0B/3AAPQKsPm2Iyl/0a5PB6PMjOI0sZCAXjGczEU UMw7K4AWxdAWLXoB0y/QApa4yY1LHBaH3JpYXeo6TopZTOlKw8vFxTVuVtVYzuXGz8brrGMVdfw/ eFL3TwOUGKKC/Djt8sfI/0FyXNcxVwJIwCaDPWg2/ranPJXHHM3owxFexlgnOEERaUh2slPgAf3S bkWMWAVjiiAW2QR6z8VcM2V6IaxjYeFqdSamn/Mci2CyWTYBeC1MpWgobo3nHKgghxGYak3x/dbS +M73mLwJ4xgjl9PK/bT96PjcdkYXng4b4B8NVYV7DnKBhnTrfyqnMRKwAx7pvYlS0sG/KnaLb+KJ SU1+MY18fCgQ9v8NRjBOkexmC8LZs1JMDla5ijwM8w0X3mkxjEmjQTTteK0BZp8BgGdjsuAAR6fA BqRFmUDbEqa3AIElBtWtllSAXFsKAb1P7KVItEvfYA+7czBdXBnPWLk1BquoR41HU58V1YpbNasr ZsimwJpy3o1rCRY6z/Sko0qj1l9LviVyFzTjCGboQMqDoWxBvJwwk5BVfxkzhwboIRY6leWELVHu sVRrM8P6zGWWLu5YEB0AwwQA6lUflrHooRhPR8EiYjmfgOnGENcgRxvOha6t9xabYg++8CHC77Kb 3X1cFbiNccxOd8Lzx4ube1IYSAPuEmDiHKD43l2wsI7TEX94y1//Swwx/peE4ghlWDzj0+B4QcwO pCtijAUGgXlnTqBKqbiDhbWtmV1qykbCVHoAEAtv8AYRVgyt0ApvgHpHdwA+dEu4VAXbkg22pxvX 0Aa7x3tbF2lrICbD94EgiBDEdVXHl1zmpHxq13wHtzDcUl3Rpyj4wRTbBWtTQXHZRwPcFy7+gj91 41VxVD/9QifjEQoJsBcq13iOB3mRJ1nT5oABUAcuQADmcAfRgAepUAfpVhk+t2A6ggVLV0x8RoAy sAVb0DWYsAWXIAOtkAjDJEyEhgKzMAt6MIHiEg3nEAFGsHtLtVTCQW/Q8HUhGIgh6GL9pmn/BnAn 6FX3c2Nr5zfO/xdAEFNAcodd0xdxd8cOmIhkF/cDgIc/9YMH8hOK8wNy5ecS1zAEHaByN5AGNyAI nuB+sQJDLZILsWAJyUAEzbAOxAAOhgAO1JAKaGAJsREWx1M8lABMRHdnxUCGUpdaT3IJmLCAYUEB bxiHi9A1CDN+1yAMWrKH3th7HRgJgjiOw0d2xneIyQc/9gNHzMd2bceCfhSJ9HEfQuZqr2Z911eD lcMOGMCJE7CI9QMOePA+53Q/ekOKLtES1/AKqXgDDumKGaBfS0grIsUIk6EHOIgBHEAMsGAIyxBO O1Ru5aY0DkIGDYAFdZZnY4gJ2PgNWJUMlkALWyADbBgWEBiHs/9ABAdjdRGAgUZwLsPhjSHgdR5I jkapb4SYaSWIfAGniHC0To5IagZDVvEUj39iXUBBj2xVd9WHj/pIFRe3Aufgicq3jsuXN0I4HlfQ BTcQDA75ii/nbLXTX+7gCq6gCPewCD2kcHiQDHiwRz4EAEAVBS0gAJVABlSgBgdwZ28gAzckARxQ Act1B1U1AsUgA2/QehDYAmAwC7RQG/xjhxUQAcLwAD9Jb0LZCQygAUfZmvlmjv52dmgniqL4lH/z iArTMNmgcGl1XURhFEuxT/folZiYiWF5Dv84cOnkiep0P3U0J4M3LkMwDg55A57wihGZAiDFhI/x DK7QAtbiMzj/FWgiSQFqIA0OAiFME26tQIYYsA97oBLY8A2wcAd4EIytIJg/lGCzAAZg8AM6aCUw EQG48AC5FZRahwv1sJo2YAOu+aCUBpuaJps0dgdalVwCV0c7Jl1WOSi9+XAQV3cORACT8x+ZpI8Y sAK75pzpxKLq9H3h9zd0QgwRwATVeZ2u6H7ucAiHgBgs0hhaYAFgYBm9QgFhCDTDNEyDgJ4l+TSX cQAycAk/wAH7sAPnEA1WZSVEkAyXcAaJIC1fUDScCQZcM0fjRwR4+AB8GJSRoAQMkAA2wARmAKF0 KlyweVybBnDjdFyZppTIRZAGKVYKs0fypHBxN4k/YA6PQ33W/1eiJ5pJmIgBErCizPlVT0lH7Og3 ffMvhgAISPCWr+gJGYAiJnAPq0BZWvAMq8AHDVBMwzRufBaASboBbEAFiEkFT4OSpacHt8AOLkAM 9lkHICCBW3AGCkABmEEJY6oKelAldRAeV3cFbWCaTIUubqoBCfAKTFAGHVCn3ipVI2iIh0gN4XRV hEhVfYpValQ3+fNODhOPHgpkREFIwdko8NCV/nR9JlqDkkoE/yiQ2xA/eBCwZnk39FM3sMCI/MIS oMAEf/CWj4ci91CqlEV5xkBMSRoL2tYLSxeAB6AGJYmYUJMZsmpnCtBSKHV5pscCWzgLleCfK4BD aAlvozCtu/+ndSHAAG+arV2wCR1wA98atNxkHVVFgnhKruVaVecarun6p+DQrgmzmwuHlUKhqNNH ffg6OSW6rxNnazoJigMZtvYJigH7RvGjjkBokOHhqdYpqvqlnSZgAnNwCD8qI1czYJdxGc7isYNQ FgJgDW2Bq5qCBYuZCAqQCMZEAai3AVpjI8airJxpDGAQs85FHrk3rQ+wewuKrdraBYnnkEIbumJU fFglrt+0tOearn2aVerYP7sxT1P7E/O6QBZjSPiYj//RtThIDC8qtmj3u2gLhP1So38Al9m5Ckuw BPfgDiIFCawwBi0gDd+WGleDGnsrFkvaKZ5CBtwruISwAUb/moBvcLiqN4AHsIVC1AKVUAmSWwUy yzeocAVxkLnkoAzXmq1M4LkdQJ2CQBGM9L8A/L8C0UEBzEgEUBAVIAb/KwEFcX0JsQMVMBAV8AIM fBAVsAMGIQEK/AJiUMEE4cALQQL/SwIKQcAvcMADQQIefBAQzMIFbMAFIcKMRMIGYcL/i8IMIQH/ KwYRbMEmjMMGccE3fBAFTMP/QLrgVLpKi7qpq7qr6z51Q2Xw+oIUYzHU10/6aqImyg4lQAM/QBsj QEVogD8D+T5MCbxOeRKGMJ04KqqEsQQmwAjlUCusUASOYAx+EDXAIA2oIb3hNgicQgYDMMhfEbK4 mpiKmwit/4CA4nusg0AIRjQs62sMs1AF3kcMRDALPdAE7dAOn4CtNqCtrrO/D0kRJ+ANqJzKqnwC /0AAqvzKL0AQL3DKqlwDBBEO4ZAQ3hDLAoEA3nACKzwQL+ANBTHLq8zLA4HLCkEA4fDK4QDEAkEC OeDMFewBOdDDBjHMGNzAr6zKyMzMzgzErtzN3uAB0IzANfDKJ4DMA7ED06zKT4DN7fzOqRzPskzO 63zERFuIp8vETOzEq8u6T0s4U7tqVStktftqWIy7JTBxJZCiE1ZhOjQBY7wNA/kNFmqhZ+w+Znl/ V+AGxXudEXkIcDwHIdUiJD0DjlDIiGkaRxILX2AM3CsAg/+8vel501TwvRvAAoprekqHGoQANcSz vuw7C5aQQ3kTAAfgGcbQBBowBEPQuWaQeONAna3YHMocw95gxAiRzgiAwhLgy0+QzLmMELuczDlw AmVdzMQ8EE/gDQhQwWHtDWNN1glBAJAhBgMhBpABxDtQztucwJDBwK681gRBAnB9EIjN1QaB1yeg 1wLB1yeAw4tdEO58AvJcEB6wyxVMAL5sy3tdzjQ8weUsz2Ig2gJB2h6AzcMcw2/tAfqMruaaEQLh z0tbtABttOIUxVNylfJKiQkNFVm7tZnk0JIqgTvVNToUxvhzB+N6xsF7f8RgDgnwByH9tnMgAo4g UoxxCBb/cAFecRbdSzzERAoVQtNvMQAsnZ4P0tJsQBqloSzPszxDPclgAAJ1EMYjcKy1mAh98AoA vgCu47OKB7FYbdjRvNUKgdh1TRDpvM1ZfRBnLRC4PMzsLBCtPcATfs/b/A8RbhAegNkIfAKwndok ntl4XdanDdoDIQEnrtgKnhAhntkVQOIpHOMfvOFsDdkE8dY07OII/g+IzeJAbhBDLsxtXRCn/QLm qBEEYdtJidu5HWNQTGXzFH0JtKj8ca9GRtwNTTkPfWvJPeZhjAYDibSyCcX0Ey6wcA5DgATFW7wZ QNICUAT95d0XoN6AC7jqmQcXoAC5AAkXYA1voTIrzb2I/8neDyLei869LeDoZEDUlTALT6hzxYAJ mL4HHsI6ibe/4xAID9m/zPHhCc7YBREOOYAQHlDXpE4QG67M4QDMbD0Q1owQOVDiHh7kGs7jBHHa 2zzM5/wPYoDrb83jFRDiwS7kOF7D3sDrob3NlQ3iul7jCGDBHrDN6RzMAvHWPZztB8HtGJ7kBfEE J4BpTp4+UI7EU26I1PC0AHOVsju7EGevXb61WZxJKYrcY05hxMDcFl2C5XRjvGslgADS1q0CEckH +GAB/MAPjPDd1hDxEg8hZBAFg9ADLeAKfDDIjsDxXtG9uKq9NI3ehOwp7X2Ykk7JT7gFPZVumI4J qgAFev/hAFwwDvvrBNX5cgdu5MuOwDpOENjc6gPx6rlc5Pec2j+P5D0s9P9QA6yMECcA2uGA6wuB 7NvuDR3O86Y+EE6fEFFf6gch9Iid9ape7QfhytvsAWbf2Fgf7lO12IQ4VenexOsem3eQN1MCH/Eu ZEQ2nI2qr4563PtOYRRW5nWAB3jgkuqKiPNDR1dQCnCOBCrgCSmg8HOwGKzAFmax5xQvDRswA3PQ FV6h55sPIW1RGsCgvTW9+qR/FpL+sjaEBukmAzEpA5i+AzK/CZsQA1Vt1avoeDvPzcmu7Ft/6rou EEQf7uyc4dGu9RR+/Eyf68jP4gtR49ds4Qve87d8/NL/T/xB/PXZ7A2ZLeEX7uq8nPRDz8sZTv4u JoJzH+V1b7QcTWXZkChZfrW2e3dZnI8PDRA0qoDYEiBAwS1bRigcgaZOHTx4qH2jSM3iHYx3wIHb NmFCKCZIRKrwNMkRvns5DvERQEbAS2styUQZNGiMgChRyFjjScbPTwHWBlijomYYMJcDlDpiqlQp z5eVBFSq1KISmF4Ht1iyROGApUtnekBp5KBDjA7jxv25ccOTIEH/5M6lW9cu3XDh7hJ40ddv3wr/ JJyQcLduXr5//Xp7MTevYwR0X3iTS8IbCcOWMf97fLezZ73/GBveeyKctyek574g0do1CQJyP9vt rLlu/4Un3mLbnax67mjDwIHfBd47+AsdyZP7/qfc+XPoylNNp17denWKFcFNIFYhmwvwP8T/WFFe wnka6dNjYM+eAAYC8eWXKEGAxg+DCbUeHNG/YTKIJKrooow46oiYK2xAogw3VFDBgwHw8YCfOfJo oQWXXiKDCmk22EANLBSQQQEsqKiEDGCAqYWbWpIiYwNthvHjpaUGYMoRp6Aio6qrLrwlAEtGkCEW PXqhpRsZnIGCLDPQ6iCttdqKiznmZpvLA2+y1DLLHeTqsspwathyzMZkC00uvlaj7B/b7mrTSsfO pC204f7ZYcsTAqNLDG880FO13MbMsjA446ysz7zCef+hAgS8EcMw467cssw66xKuTOLKjNQuxpyj MjpQoZtOh+tKxS47au6YIBrvwhuvvBXQU4+G9tyTL7766GPHPlpA0Aoh//xDY9iH8ECVQIw48ihB N9woQ4UMMhiAl0NWqoQKMrI9UZphNvDqgFjO2AINS9SghJAYWUjkjFZYqIWKDVjQRpqknLLxXqim murCWWbRAwRMLrlEhjd60QOTVvpIYIEFoDDDjDI2KUMttjyhEky7LPvSzcswPs7QufjUdM02M+6Y MznxSlllueqswK/cNqOr0r0Ye6213Qo181APEu0TNtI2ZdOvHOjElFNKj7Z0ZNI6Xe7TUKN2LhVS TTX/FdU76mD1u1dhPU+CWWmAp1b4CKDv7BI4KIGGFQjSaqEtLukPjYYaGjaib1L5JtU7+FZ2gmts aBYJTwpnZY5D5hgjpwZaoCIKNrwFgAIWDjhAAcyLUcBDbRLBBI9UkjmDBXUT2UAaoOxVPaaWeGyh AX8t2aKbbi7B5I1YMFEAkCFeYZgJJrroAmIo/7jYNzhLtosARz3OFGTHCPvHOOZlrsuynFeWCwHt ZYvsnxO+N9n6lpXmmHy6uCctnO9L5lP8uybbbU65TjD/tzLtb5rpuyTwZoenQU1qA6ya1UqFNa21 SjywihXYZkW2W6FNVyXAQK/elhD/yI1uc3NIHSai/ze+FWgCdYiA4ErRoMJN4h734EMe1ECIKBCC EGooHQAOsIFBqIECCogFuChAuVacQQYyaMUbjAgAALCgRDMSgL2a+JKo7IhfKECBHhRwCdoNDAC5 wwAgmjCEISTgFa8A3vCe9KTjqSZ5JzPMCVJzlx1sRmeiwZSVBqOXSHmjBoYRE/TqMpk/0aUCwEHA CTKjG6QxR3l/9EYg5zLIMilPTPdDE828JxsPGOZOcswkHE8mtJB5ozBpbA4Bo2ZAVFYka1tzAXm8 Jiv1jK09EUQbOyjYtl8xRG4j2CXd0DABh0hkOt/IiEbAUYdtXKEQbihFKRyUAXessAgt+BAWIkeB N/+0IhYUwKEaBuHDA/TiAD9EIhIT8YYkxoubbACGH/ABRXi2pCUXuhAVv2BFTNCuG5hIBAvOEAoI eHEIdkhAAmxAxoeVoQxmIKVh1og+uuRmfnPx3xvnOBw4TaYva/rHE/Jklwq40Y908d/9JjNKkd3F o8/zzSJJasmTHop8p4GoXHKQA0cKBjh8gmg4chDKnv5ULqD8RwWK1lC5mFJqqLSaKjvSKnO8kgYO FBut3FM2s9XylpZ4WwZ5WbdhDQuYEKEGCJOlkTpMIAJWaJbgoOWBGSxhBijwkBo2AIBWDMkrOcTC Ny13Q3GOEwCJICwAPBQvFlBgXrX4CT5+8lgq+IH/DA2gQuNmYc9YKOAMWNyn6RJxBUBAoAl2aIIG DGqD4A2vC0xAKv2ux8a7hNQDo5RLBTwgPZTtb6SycSNHB+MnQd6WtnMU06P2pEe8nIB8KU1kS2Fr l+LWhU97lOltcvBRjj0hkLbF7j9uO9GO/o8u361LbjYGSglgCbzHU+pSmXpAitxhG6xKhwui+rWp qgcDVrVVVrWKAQlU4VfCaogGwyrWEd4hb3szprIMUIgTMhMJKlDcEnJBiQ3cMFyYKAblDjCIvvo1 sH8d7BsUMDkWwEgbd2WBGthQi1qkyA8pSpE0KsuLBjTAnrfY5ob3qQAWcCATmYAABEirAdOiFnhM /7CBDVp7mJVZ5gmK6cv8CHACN8axBlg2bm4/tjO7DCZLe8JyDSRgji2fYGOcyQGVX9ClCpwmHI8S g5xvg6Un0Pk0b2yualwqSDnr2RtycumVO3kXPrX5zGmeKAFygBoSvOzRSnM0pCVdJ0D+5TRq1kFr 23vK98I3VfOtABFc0EBYpkeWWPVvLTGgBwEnRCG75KUv7ebLEeJBwWbdBjjwoFYgNNMNSVDBJFyR BwuMAQU3vKsMihGLXnxzENGuSU3G+a0f7hULMmSDNrSBxBQPYxjcIDeMa8EGNsiQELDbMQUSQYHc 7RMAWIDAA0ZR5CZ8wrQFPegrmlyIJ9OlBtQNrv+gskRwwXhUSwiY6MBJ44GNORzRIiVpbjb6BNrK hU8GP7QYrjuYHHRZkC94NPPa/PA1G0YCOci4YTxOmBOEvC4rb7nGu5uxRr2gUQwH6QtMY5lwQPRl Px80+XYAcS2ZZlEBL+WnoxNqUcuXvuRBD1XhwV+sSlBX+x2IrBfy1WD5coMNIeuAjsmRCDDABkIY NhIyYIoNuEIKX7DcBmJh4g9brhfU/gIWvqCGXmxg7zkcBAwbRwUOaUNd4Fb8uMX9+GFg4RiUuCwK vtALALyBXTLgpxo4kIU2ELnI+kbyvm2AZAYwXfUkrenqXf962Mde9rOnfdOdLh2ow5eYpE7HffP/ q19Z0rKW7FiEQAgia4Uk/+t16w8xRkAMNGxDwU7dBh5AUQ8ID7sLKtjEHvgwBrofQBvwjsU2MUeB XnxB/V/YwDEal+Ntw/BC2XIcG9R1RNKRrlsrXvEx1EBFy/uCHyqGM6AASgi8L8iEB8iCIsO3dmCA 0isECGSAR6g9C7xADMxADdxADbw93Mu9q2GwOugO+0q19ZglXNG6XTE+5AuW/sAg/yiICgiAEZgA cBiQVEEmUGiDQvCBUkgCZ/GFDBAF8Ks7b8msYrAEHoI3BWiFVlCARDAs0jGsF5KhnEA8dMm8N4jC /OtCDxkE97OnL+inG5KGWbirZsiCB1CCIWsH/wh4QAZggE6IQzpMPQ68QzzMQz3cQwvsNA8kleQA wetQpRE8h1OjKlWrlflQQV4BAQ4CprCKQYYIgAoAAUuEvolIlVQ5JlDQBCCwgh9MglKImHEowhsa BG8REbnZAkywBEyQgVtAgVi4BT3IpnNCpxZLNzXQBlQssVZIoiTqwhTTBiyAnS9YBAqQgX4aBkKo og3IBE1QhiwgMjfMgnpQAiXoBG3UxjjkQ2/8RnAMR3G0vU+jmgKiGkEckKwxhO8wQQhKwVwpAVui ARcIAIiovoiIiDoAkGSYgP4wiACwxEs0FgLBg20AhQfohB4UAiRIApHIgFwIPxzShgMAAAUAi/9v CIBFQIFZGIMZMIYxyIVjOABjwAoeerfKYQEUQyJcFEbS8RDKs7xekIEzKKcNwIpQiANyYMA4yAQG zAJhiIRt1Eah7IRxPEqkTEqlfLI/xL0PBEGzmwDv+AFEvDoUbLVcmccqIIZ8vIN8/Mp9rIMRoESB tMQA2Ia9GTWDREgYAIK1c4MCILZ3IIXwOwA1sCsK2CIFCABi2ANTMIUZUIUxcAVXCEl9MIU86AFj iAUnJKwt3CJwc8kUaz9esKdFoMn804YWUIVMiAfRiwMIiAcIyAJciIRs7AQliISiXErWbE3XXEo/ bEp0PEfqoE1Rs4jtKDVzqEpFhMesWsEf4Mr/fNxHfkwGNEgG5BTLgLREIrDECYgvatgG6URIaPhE HxAChyyAAuCCZbOcHPKWbFOAYqiCHuAA2ZkBBEAAUnAFBHCFXHjPflkETEgIzcnLFJPMFAvDL0CB K7iGM4hCAACGFgitePBMz4wDBG2DoMRG1cSFejDN14xQCZ3QPGxKUYHKY4lOVjk1/eKv94hHrboP e8QD5DzOAzvRsQQBIrAEFQWBCbAIatDHaIgATcAFGOjBH5wwB+mBb2G2D8uwHWqFgdCDLeiBIiiC MVhPV+gBS7gFWgCDRUg+E5scb+vCYMxPSjiGY2CHUTCAIPpPbpgGBoQAcsiEOBgFchiFB2gD/yN4 UNVUgnqIUyWgUDqtUzt1vdi00Kd8r+zAmm0gBkN0oP2apazTKnjAj7AEEIcwTuOMxBRl0eZ0UYnA CIOEBRoVhuq0Ah8YtgJQAV+ogXH6qwzDoWmDtx9aBK6ghWKQAT2golZ4xVagxfKzHMqBEXmx0pfU UhQghCvo0iu4gl+4BUDIAtCMBwQdhVEIgjhoA2UQBgd9UyVgAGx8MjHoMjFAgJxSDUYJh2y9jdbT OEVRvQrAjGo9ngrYMm+QObmQgCcIhzUjgEbxBp77hxpIlDDp1tUjgJq709jLUz21TabqU0I0hN4D m1XrLxW8JRflx4coTuRs1EtYThAYCBDgyv+9MUg8MAQD0AQjWINHWMgkIDZf+AN22KYf+quaoKL2 01Je0FKXXVleiNmYVbdBqNVbncIrXdlj4ABkRdZeHdadNFZj7dkHMAJlwAWkxYVohUAke7K+sLn1 8g2d+9bVoKTf2IF9JaWnfdqLeQHtYpMc2Iw22wHcWjnj8rnAUBTXUB/aCzp+zcB/nRqAHUSBVSWp 7L0TvEqsZAd2wIC2SYbhHKFFJdES/UfmHAiu7BuDxAZQMIAHEIYQWAPrxM5O9YVdKD+THado+wIw aAGWjVl1UAcyCF2ZxZANyQlpGL/7zD9gDEaYvYIgCIJ40IRrENMHIId4IAdyONNR6ExlaFP/OI1T CCyognLaxhCDE5ifOkMAzNiB3WiNuSCBvHiUHeCer50e9tHXvMCMF8heyWAMCRCDHQjX5d0M1kjP lwlXitreF6iB7q0BPSnfw5AZ6AWfwPCA3ZgyyegSt/0N6ereSOtejGOTHahXTJHffxADAM6BAR4q M3vbfiXHf+VTitAbvdkbcIiGQBWb3sRKeezbtpkAXfNKX9NHACFcuikIELAEIiACYpC+6MSDGQ0C No3cj73OkC0AX0CCReAhPaDVDytGqrgQXsAQP4jZGJOsE9kQKgCGyEksYSwn19XSWUBTZc2CdlBD 3SUHTQgCTUDWeGiHdljaODStMSIjKDBe/+SdnxeAOLIlATF4I/yN3uklATUjAQRIjTYmAZ8jgO0V Aw/gY6EaKvANh0DmY4hDXsyANARoMxLwgC6TAPa1GQ/YozbegTeWjDYDL0DO47nArfldjUFumSfA 2vTk4zzxOdbwgMa4ZEUWjVL2uAYuKlmOWghmyridmlSqYOzIGmLIht082LJRwb6VACIQ4TtIhWWA hb2RThIlzhRezipwYYjwtWUwhAigYSPABWhoS02lXE/NBwWghW0Cl3DCAkrAEKoYYsTjBT+gAl6I rMcBBmnotngpJ5WU4iTipl44hmnQBE3A3TfMAjUE6NhFVk3Igk/4BAb4BDsw41dwGDMYHv+nva3k nQuW0zjtaqTB+KPGkIDNqLN/yGg7eZlWDofYaLk1cVebQqnUECU26SSuHapWfiPpHWmX/iMsObmi eoKj8l/P2BKUtpTAWLm5yDOdW9efIuk4Fg096d/raddb7tdcFkTqIKa7XQEPjY9FOBtb0hV9rQLu IIZUUJVUIYYAQAOvjEQVZuGtvMdjqgBzuIZR2OYQgIEbxs4k0GEkKAEeugVx+uEvoAQqcJzGaQF1 4zY2kAbGZuxuIx1yUkkAlWIWOIZemIVMwF2FbgLRyuIH8OLYjYMHUIZ2WOiC8h0mcIBN2IQYWG2n TV4SwKmWEep/QAAF5jOa7umd1guOym3/RklXpVnpzeComyaZ0Jjp6WnlSOJt2gYpj2uMcIXkp705 x8AMR1svkiGTmaYM4ubt6g6zNrbaqUaquEVHq9YODXYBCVg1eJSgFdzK7tiGsv6GOrDERa2DFFbh iSWCCqgDjhjBgwgACYgDyF2DG/3mvdbhI+ChjRQnCgCxKLiQBogCyppwaYgCaaBnNnCxYVA8nDUn wiqsyaEALd2DOAjjT2gCFVfxIgsCLgbo0VaCdti31DaDTQgEHMdx4x2qN8KuCgiM5U25p32CJ4iN m8YuEpCAp/3xCljjmZGNzcCuaxWNyjjuo9na5bbf2gokbp2L8aXyosIyzLDtPdmj/j06/0daEwI4 tMJo39oyJCmPDI6C6n8gAJ8WufFmOgu16qbaPWLA2/7y4LRZGxeogOebAAX7tRpU1BcESK6Y5gCw wY6gwRKNgHrg5rZcSMr1BRUgAVroBTCYhb3DIUqIAsQr7MI+Xccehl30ECsN8RAfrCQ6hg1QB0CI B4W2AzAagiNQ8U/IYi4ebTHWt95xgBjAgUBwAmVX9h2XC0juKO1ilMYYpFHObQT46J6B9gpYOT7e IyIvqhyYKOGWCyLf9mc37txeDUvO8nKX9vThM4cL1/RqntjejSvDDKi+dkvB6I8O2z7GDW/XrvR6 lDlfM0zOczz9Q/Pm86tJFalU7+Brb/+vXpsfcNEOeoh9jIhhKQiABBIimGYX3YYRHIGHTQZzIAdM /1gE105fgAI9uIWSnAUs8CYQMfVswZZscexua3UrHSxYF3EKuIVjMIbRbAddX5gjWIAjGCg7+ITR NAKjZYAZFyPVXvZgCAYnCIZmF4xwx40sud4ngJ/crrQcqIGf8nr9sWPt2rTghvLayg39AfObTm66 UHuuvWmvR43t8im+D4w48wb7cTQgN41wOAHjguqQyjiO8mPAb+VG1vuebvyWURM8R/iG6jQJNkcC Mu+5vWA+145fNgdaWcQJmiAMqHiyO06IeNhoBhIgWeEqGIgR4o6ST4ZsiANuNvAbxmH/lncGPTAG Y5B5mrd5eZKJd+YWnlencvr5yXbZHYCAhW6ChWGYRmCYI0iAIci3emBTZmWAIUhtUbD6q9d6DCRz y585oKGS1sDXNELu85c9pdL8ARoVA8oOho+vbaiAdFjvQgWIEgIFciiBYQWREWgWMmS4ZUsATAEC WAoAwhKRKiCIjSC2UGGyZOdG4YK2BgYMIFZ8CBFS4GWZW7OMtcAySA2hKGTICOgpwM9OP9JqsdFm dAMLAEoTMW2aSCkLCsfA7IDQpImdIwugNOoKZcGCBEM0tFNm5Gy7BAsc4IDjJFgwOnRO/atr9y7e vHr1kqiRYy/gwIIHEy5s+DBivC9e/yRu7PgxZME6JlOubPkyZsupNnPu3PnbN8+iR28G/Y0auAnn XNDAgIEAgYHsZLNbtKLKiNy6R1wa8RCiRBkUMVbRyPEjxBHJAowK4fzkI5Usk7ws0OcWmFk2KbHR yVMATyp+/AADRnTYURZJAThlqvTYrWNTAVm1M2Rr1/yNwC4Yq6wNgGm9wpZbwUgiVxqRDSbBCxIo +CCEEUpIAgkSWnhhZJlpuCFmpIkWmochlgYaNdsQk84K8MA2UAmzCcQOOxjQUMUWu9X4W0Q5TgTC RVW4AEJHyeCRDBoPoZFNHMLgEsJJKa3UEnUFHKEHCij0MggW0uhUCRnikeEHFeWxMf8mekitx157 AFAQ1QbHGGPHJ00MkcARXCGjHzIOhJXAJ/+1oYQda7XlxFtz0YUhookquiijjTpq14abUZbKZJRy OKmHlXFWqQ4ijgbaHaqx9lpsL9K2yIwB3PjbQzlKJFEAMvRo3Ah14PENkQ+ZE4QwSjKJknRCRNmF HnosQkEvamARRQtdUvFsedKwgZ5R6qmnFJqJvNGUUlIdU80R9mm1QFcONIIMunl+lQCcyijTzhAD 2hNIgYY+ei+++eq7L4YcWtrppQEL7OlnqZBoIorwYMBiiy9yQIAeP1jCKsVbSISjRSAUB0IFyuHx MR4QXUOOEb2GAA0MjzzypEu+IFH/ggKxxELBBjflJA0VWpJplDbWJpWUU29s656aG6DgzCtHKI1f uk1z4QAUUCTA7ief3NeIPXC4deBc/Hr9Ndhh86tDXWQLfDbamnZKMGemhVrBqCs2/OJsNNBSEY4Q VYzjRRkBCdLHRFpyTRZtlKwkytE9+RI9O5xRDC0zH7DBBmpYbrk2ZlqL7VJMndHKGYm08lS3MukC 1lflIsOF03lCve4QcwqqtROS2CKX2Lnrvjvv+FJ2V9qXse3hwcSgkmKpDMO4CAYSu6oqJqxessX0 O2rMYwDKhTTkCJZc8YDhJZcE7OK+yLOLJcUU84YCFLh/gHpmAnDmUmiCfgb+oI8e/wtTyM6iT34c IEAuxIB16OICAWMQg9ctYFxQQAYORLE1W9yudxa8IAYz+Jjgfco0HhweiUK1mtYkz0UlKAgNVlCR ibxKetR7oUUsoZGNAG5Il/Ae+M4ivsSpRFi+QAQyaFEMSzxOAaSjAOfq1x78MZGJrRjd6BKhB+x4 4QlmKODqCmjAAyowBptYYNTA0gguRNAtzLDdoTSoxjWycXcDE5EHTUONOBIsNAczRDokoCLZDKQg B6nCq1Slqt9MzzfVAwERLIE97S3kEpeoggEAFL6ShSBlQPCBD5LwwwzcQn1DLMYThdaepzSFiTKQ ASZOKYMmfi4RM9ODMbwwhS52Ef+BBkRgF7+4QHM5ABkxEIUE4SCJA6WxjcY8JjIldDZKgTCOphkR aJpJDRGaozUMa5Ef9VAFFkaEYtMrJEQuwiMQBAANyYCII7cwMkmepVfjW1kmzfcMVXjSkzKwxCof 98RQtgKVmPjnP1Gpyny6kgIz04ccpoAAX9pDgbZcHS5jYA9dLjBPXLAHMLU2TFsUM5ke/ShI8RI8 zQyvpHUE1TbgJoHX8BGbGJBAFYQzSOk58pvhTCT2FqK3RxrgAeCbJOJSVoh4IuIE+6hnPe/pT4Ay tamp/Cf+tgUAmbXCGB+QwwcsUEsCIhCiBGzoJhpaQAcQEAdlhAM6bEeHkLK1rW3/HClc0WZSOYIj Gtkwh4pKNRsY1WZGIKhYTQPrG4qMU5EKQQNvQBABcoAvh+0Uxq8uiQR6IOIZT2iFAtaH1GLIgLOv cupTTxlVolGgFcfwAlY/MAV72LK1rItoDMy6VYmeNa0cdStuc6tbs8U1M51ZGxxPQ40JwM2afGTH w+w204d8s6Zo6M0WCjtOVf01ANcYhU9/Gj5foawQpUDCD5+BgFisL7ObfdxA06vK0RINAK3ghRdE EIYPeOEDc3Coa20Z29iG1aEKtEdt0XFb3RK4wB7l7cACxky2kQg1J0Iei2DEAVT9YLnNdW5uwqnI i4STFgq4riay2wbHmmwNDLBB/yn+8I6iekEPCnjxGzbrycfhb5X5ZC/plFIMFnjBCzxA7QdUiwAt 5veisTUrDiSqZABnNBySQMdaDSzlKYNtMiKN66b8BdzghlA11VxYhOumEZo69xLPHYH1EFlONASg GAQYhSZC7FN2ii8SDEgAE8qgghXnwAsb8HAxXhzo9Qmt0Oqjsf5EmWMdU+DHYehxfacgaSJ3tbUA RjIO7NFQTWNUa+EQsC2oLOpRP+p3wKvMP+SaZd+WNI53qINKWSobFNICBIEN7HNzDRGLEDYd53gI La5AjjiLGEDtxEUnEmADM4zDE+94hgekoIdYvFjQ1WYftt/QCm2HUqrswVYiiv8BAB5YIAzzfXSk pzCH1WnatZrGNJLfHUEJfpqCpL43vvtFNkhZJtXLXLVmKtVquj5Y1n0sAQ0qbOZcm7nhH7nERDJm iQhQnOKZiLOc5xw+XNjZBl3owB8ygAhEsEIE0672tV8MACMqoNCF5hbnwn2MeYiAB+eWgxfOrVrW srbSRoY30INZ71Dnu+hG3+C+y9bvSV3qt5FaMINBZddqJq9Fs7lFhRuS624wxMyD5ZEMI2CAsRsg CEHAeLHPsiQNeLwDzhaEBabghVtQG+Uoj8VUVw6AobUXWzHmxY9FMA85yOHRhs+5HBCwxXR9Nehm BWaTQX30yVOeMFbmN6ub/i//zTfzbaNiGAfYAY+sh4RIuUYD18+8ax6Zo+xkPzvaNa72SGjgFWZw OwKkoA+5zyJyMbs73vGe90Un8e+y+EAYAs+DD4gA5zwofH21BgfIZ5qW8BZFpjMKh6FXvvveP/Wp M69lBZvUYKdJqQtWGuHQNy8AtgoJ6heS+kbu2hKDK7vZzY5xYv9U7SFguxlswhNIAc3JnSpYQrXV XczIDBIhURLF3Bm8QSXYHOIVngjIF+HlHPPJgQlI2hSYAAiaACuEQ6bJWwTNm9Chg4B9HwtW3uUp nfgJHMBISoIJXNR9wzYYAhGoX5g1TwUEDpEEYUik3mBZhDmIXf7l3/7JHiVpu8AR7II+SIE6zAOk SYH92d2LyYyaOKACJJG2nAEtqIMsiMAH2NwUmBsfyALhYVUYEF6Q8QActmG6iWA4ANPj4QACaN+n rWAL9mHRvaC/+VZvkRTTgVBdEQGE9REHHMQPDknpwZ/pndlE3B/+JeES9p8w1EMT5IIUdOI8TKE+ BJk+6AEaBFrKGVHwDR/LaZsMUEAezIMU+FgYTIHNlaEIaGBCtaEJJB8c8kDzuWHhBVlCzQErTN9Z 7aEtBAQAOw== --_005_2DD56D786E600F45AC6BDE7DA4E8A8C1122501DDeusaamb107erics_-- From nobody Tue Apr 26 13:58:15 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AB3F612D57A; Tue, 26 Apr 2016 13:58:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.202 X-Spam-Level: X-Spam-Status: No, score=-4.202 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fyTtDG7YaKzL; Tue, 26 Apr 2016 13:58:03 -0700 (PDT) Received: from usplmg21.ericsson.net (usplmg21.ericsson.net [198.24.6.65]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DE76112D58B; Tue, 26 Apr 2016 13:58:02 -0700 (PDT) X-AuditID: c6180641-f796f6d000000e1e-3b-571fd62edbf2 Received: from EUSAAHC005.ericsson.se (Unknown_Domain [147.117.188.87]) by usplmg21.ericsson.net (Symantec Mail Security) with SMTP id 3E.F4.03614.E26DF175; Tue, 26 Apr 2016 22:57:18 +0200 (CEST) Received: from EUSAAMB107.ericsson.se ([147.117.188.124]) by EUSAAHC005.ericsson.se ([147.117.188.87]) with mapi id 14.03.0248.002; Tue, 26 Apr 2016 16:58:01 -0400 From: Daniel Migault To: "curdle@ietf.org" Thread-Topic: Call for Adoption for draft-housley-cms-ecdh-new-curves-00.txt Thread-Index: AdGXP3Gt2LipsZ15TDyoFcTOYLj7dAIvs1NQ Date: Tue, 26 Apr 2016 20:58:01 +0000 Message-ID: <2DD56D786E600F45AC6BDE7DA4E8A8C1122501F5@eusaamb107.ericsson.se> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [147.117.188.10] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrGLMWRmVeSWpSXmKPExsUyuXRPuK7eNflwgwfTZS1m9mxgtti6cBaz xasXN9kdmD2WLPnJ5LHqzhfWAKYoLpuU1JzMstQifbsEroyWrw8ZCz6yV5z+t4a9gXELWxcj J4eEgInEj9NL2CFsMYkL99aDxYUEjjJKrDug2cXIBWQvZ5S4/uYtI0iCTcBIou1QP1iDiIC6 xIlDO1hBbGaBQIlXmzqYQWxhAW+JvyevsnQxcgDV+Ej8/+kGYRpJtDdUgVSwCKhKHP+wAKyT V8BX4uiWs2ATGYFO+H5qDRPERHGJW0/mM0GcJiCxZM95ZghbVOLl43+sELaSxKSl56Au0JFY sPsTG4StLbFs4WtmiPmCEidnPmGZwCgyC8nYWUhaZiFpmYWkZQEjyypGjtLigpzcdCPDTYzA 0D8mwea4g3Fvr+chRgEORiUe3gWn5cKFWBPLiitzDzFKcDArifBqXpIPF+JNSaysSi3Kjy8q zUktPsQozcGiJM7rHfkvTEggPbEkNTs1tSC1CCbLxMEp1cCYXp13WuaLkdfbWxdDpzhKiDkl bl27+b4j9x+1H0+OLX1X5vhy560tT3+apboclOVb7rq0wERm8r2tF7pDEpk67qmf7T+342az 6t45Bww91ZedTXjFyN2j+/pkX/H/CXvsVkiYtFxbKylYfnpRsRCf2fkf7H9PLOFVXn39rdcG 0Q03jG5cv8fZpcRSnJFoqMVcVJwIAJlmFPR5AgAA Archived-At: Cc: curdle-chairs , Russ Housley Subject: Re: [Curdle] Call for Adoption for draft-housley-cms-ecdh-new-curves-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 26 Apr 2016 20:58:13 -0000 Hi,=20 This is a reminder of the call for adoption. Please provide reviews and fee= d backs by April 29. BR,=20 Daniel -----Original Message----- From: Daniel Migault=20 Sent: Friday, April 15, 2016 1:52 PM To: 'Russ Housley'; curdle@ietf.org Subject: Call for Adoption for draft-housley-cms-ecdh-new-curves-00.txt Hi,=20 As mentioned last week, this is a call for adoption for draft-housley-cms-e= cdh-new-curves-00.txt.=20 This starts a Call for Adoption for "Use of the Elliptic Curve Diffie-Hellm= an Key Agreement Algorithm with Curve 25519 and Curve 448 in the Cryptographic Message Syntax (CMS)" The document is available here: https://www.ietf.org/id/draft-housley-cms-ecdh-new-curves-00.txt Please review this draft to see if you think it is suitable for adoption by= CURLDE, and comment to the list, clearly stating your view. *Speak Up* if= you have strong opposition to this work. This call for adoption ends on April 29. BR,=20 Rich and Daniel=20 From nobody Tue Apr 26 19:24:07 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B92F312D5BD for ; Tue, 26 Apr 2016 19:24:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.696 X-Spam-Level: X-Spam-Status: No, score=-3.696 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.996, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=akamai.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4gpgN-7P1lDr for ; Tue, 26 Apr 2016 19:24:04 -0700 (PDT) Received: from prod-mail-xrelay06.akamai.com (prod-mail-xrelay06.akamai.com [96.6.114.98]) by ietfa.amsl.com (Postfix) with ESMTP id 0752712D5BF for ; Tue, 26 Apr 2016 19:24:02 -0700 (PDT) Received: from prod-mail-xrelay06.akamai.com (localhost.localdomain [127.0.0.1]) by postfix.imss70 (Postfix) with ESMTP id 28F5316BEBB for ; Wed, 27 Apr 2016 02:24:02 +0000 (GMT) Received: from prod-mail-relay09.akamai.com (prod-mail-relay09.akamai.com [172.27.22.68]) by prod-mail-xrelay06.akamai.com (Postfix) with ESMTP id 1314316BDE1 for ; Wed, 27 Apr 2016 02:24:02 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=akamai.com; s=a1; t=1461723842; bh=1ukKh2PhTOeulV8R4XFQ2tZUoI/Pu+rBGmsnXmr71OQ=; l=2797; h=From:To:Date:From; b=urwep0kXPZHjxuBXlGElYiRhoEjiyB4/jDmvDYMiko6Fm0v+Py7VF1gGAUTdoCRoc eSuu52D9ijooc4oncK0uj4b+muXt0WRDg17A8WNGdbv8tbwU5V6gfOlt3elXaF5SrV Z7au843Mj/NHfxEXbV5hNA8DbiV+U/Ah12GMOHGs= Received: from email.msg.corp.akamai.com (usma1ex-cas3.msg.corp.akamai.com [172.27.123.32]) by prod-mail-relay09.akamai.com (Postfix) with ESMTP id CFCFA1E07C for ; Wed, 27 Apr 2016 02:24:01 +0000 (GMT) Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com (172.27.123.101) by usma1ex-dag1mb3.msg.corp.akamai.com (172.27.123.103) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Tue, 26 Apr 2016 22:24:01 -0400 Received: from USMA1EX-DAG1MB1.msg.corp.akamai.com ([172.27.123.101]) by usma1ex-dag1mb1.msg.corp.akamai.com ([172.27.123.101]) with mapi id 15.00.1130.005; Tue, 26 Apr 2016 22:24:01 -0400 From: "Salz, Rich" To: "curdle@ietf.org" Thread-Topic: If you took minutes in B-A Thread-Index: AdGgK9RG3O8BH6R6Shegphup8sOaRA== Date: Wed, 27 Apr 2016 02:24:00 +0000 Message-ID: <43f315bfe81a4a0dacec2273a2b2b6a2@usma1ex-dag1mb1.msg.corp.akamai.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted x-originating-ip: [172.19.38.63] Content-Type: multipart/alternative; boundary="_000_43f315bfe81a4a0dacec2273a2b2b6a2usma1exdag1mb1msgcorpak_" MIME-Version: 1.0 Archived-At: Subject: [Curdle] If you took minutes in B-A X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Apr 2016 02:24:06 -0000 --_000_43f315bfe81a4a0dacec2273a2b2b6a2usma1exdag1mb1msgcorpak_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Please post them. We lost our notes on who did so. :( -- Senior Architect, Akamai Technologies IM: richsalz@jabber.at Twitter: RichSalz --_000_43f315bfe81a4a0dacec2273a2b2b6a2usma1exdag1mb1msgcorpak_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Please post them. We lost our notes on who did so. <= span style=3D"font-family:Wingdings"> L

 

 

 

-- 

Senior Architect, Akamai Technologies

IM: richsalz@jabber.at Twitter: RichSalz<= /p>

 

--_000_43f315bfe81a4a0dacec2273a2b2b6a2usma1exdag1mb1msgcorpak_-- From nobody Wed Apr 27 14:24:20 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CCAD412DC19 for ; Wed, 27 Apr 2016 14:24:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bqar_LyPmSqu for ; Wed, 27 Apr 2016 14:24:17 -0700 (PDT) Received: from smtp2.pacifier.net (smtp2.pacifier.net [64.255.237.172]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DD7E112D1C8 for ; Wed, 27 Apr 2016 14:24:16 -0700 (PDT) Received: from hebrews (c-24-21-96-37.hsd1.or.comcast.net [24.21.96.37]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: schaad@nwlink.com) by smtp2.pacifier.net (Postfix) with ESMTPSA id 38B052CA03 for ; Wed, 27 Apr 2016 14:24:16 -0700 (PDT) From: "Jim Schaad" To: References: <2DD56D786E600F45AC6BDE7DA4E8A8C1122501DD@eusaamb107.ericsson.se> In-Reply-To: <2DD56D786E600F45AC6BDE7DA4E8A8C1122501DD@eusaamb107.ericsson.se> Date: Wed, 27 Apr 2016 14:24:13 -0700 Message-ID: <081701d1a0cb$26e67de0$74b379a0$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/related; boundary="----=_NextPart_000_0818_01D1A090.7A889040" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQJtN1Oo/2EtyvFumqt//Sxf8Tb9c55nJ4JQ Content-Language: en-us Archived-At: Subject: Re: [Curdle] Call for Adoption for draft-housley-cms-chacha20-poly1305-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Apr 2016 21:24:19 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0818_01D1A090.7A889040 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0819_01D1A090.7A889040" ------=_NextPart_001_0819_01D1A090.7A889040 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit I support adoption of and will review this document. Jim From: Curdle [mailto:curdle-bounces@ietf.org] On Behalf Of Daniel Migault Sent: Tuesday, April 26, 2016 1:57 PM To: curdle@ietf.org Cc: curdle-chairs ; Russ Housley Subject: Re: [Curdle] Call for Adoption for draft-housley-cms-chacha20-poly1305-00.txt Hi, This is a reminder of the call for adoption. Please provide reviews and feed backs by May 2. BR, Daniel From: Daniel Migault Sent: Sunday, April 17, 2016 1:04 PM To: curdle@ietf.org Cc: 'Russ Housley'; curdle-chairs Subject: Call for Adoption for draft-housley-cms-chacha20-poly1305-00.txt Hi, As mentioned last week, this is a call for adoption for draft-housley-cms-chacha20-poly1305-00.txt. This starts a Call for Adoption for "Using ChaCha20-Poly1305 Authenticated Encryption in the Cryptographic Message Syntax (CMS)" The document is available here: https://tools.ietf.org/id/draft-housley-cms-chacha20-poly1305-00.txt Please review this draft to see if you think it is suitable for adoption by CURLDE, and comment to the list, clearly stating your view. *Speak Up* if you have strong opposition to this work. This call for adoption ends on May 2. BR, Rich and Daniel DANIEL MIGAULT Researcher Research Ericsson 8500 Boulevard Decarie H4P 2N2 Montreal, Canada Phone +1 514 345 7900 46628 Mobile +1 514 452 2160 daniel.migault@ericsson.com www.ericsson.com Legal entity: Ericsson Canada Inc., registered office in Montreal. This Communication is Confidential. We only send and receive email on the basis of the terms set out at www.ericsson.com/email_disclaimer ------=_NextPart_001_0819_01D1A090.7A889040 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

I support = adoption of and will review this document.

 

Jim

 

 

From: = Curdle [mailto:curdle-bounces@ietf.org] On Behalf Of Daniel = Migault
Sent: Tuesday, April 26, 2016 1:57 PM
To: = curdle@ietf.org
Cc: curdle-chairs = <curdle-chairs@ietf.org>; Russ Housley = <housley@vigilsec.com>
Subject: Re: [Curdle] Call for = Adoption for = draft-housley-cms-chacha20-poly1305-00.txt

 

Hi,

 

This is a = reminder of the call for adoption. Please provide reviews and feed backs = by May 2.

 

BR, =

Daniel

 

From: = Daniel Migault
Sent: Sunday, April 17, 2016 1:04 = PM
To: curdle@ietf.org
Cc: 'Russ = Housley'; curdle-chairs
Subject: Call for Adoption for = draft-housley-cms-chacha20-poly1305-00.txt

 

Hi,

 

As mentioned last week, this is a call for = adoption for draft-housley-cms-chacha20-poly1305-00.txt. =

 

This starts a Call for Adoption for = "Using ChaCha20-Poly1305 Authenticated Encryption in the = Cryptographic Message Syntax (CMS)"

 

The document is = available here:

https://tools.ietf.org/id/draft-housley-cms-chacha20-poly1305-00.txt=

 

Please review this draft to see if you think = it is suitable for adoption by CURLDE, and comment to the list, clearly = stating your view.  *Speak Up* if you have strong opposition to = this work.

 

This call for adoption ends on May = 2.

 

BR,

Rich and Daniel

 

 

 

3DEricsson

D= ANIEL MIGAULT <= br>Researcher
Research


E= ricsson<= br>8500 Boulevard Decarie
H4P 2N2 Montreal, Canada
Phone +1 514 = 345 7900 46628
Mobile +1 514 452 2160
daniel.migault@ericsson.com
www.ericsson.com =



<= a href=3D"http://www.ericsson.com/current_campaign" = target=3D"_blank">3D"http://www.ericsson.com/current_campaign"

 

Le= gal entity: Ericsson Canada Inc., registered office in Montreal. This = Communication is Confidential. We only send and receive email on the = basis of the terms set out at www.ericsson.com/email= _disclaimer

------=_NextPart_001_0819_01D1A090.7A889040-- ------=_NextPart_000_0818_01D1A090.7A889040 Content-Type: image/jpeg; name="image003.jpg" Content-Transfer-Encoding: base64 Content-ID: /9j/4AAQSkZJRgABAQEAeAB4AAD/2wBDAAgGBgcGBQgHBwcJCQgKDBQNDAsLDBkSEw8UHRofHh0a HBwgJC4nICIsIxwcKDcpLDAxNDQ0Hyc5PTgyPC4zNDL/2wBDAQkJCQwLDBgNDRgyIRwhMjIyMjIy MjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjL/wAARCABLAFUDASIA AhEBAxEB/8QAHwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQA AAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3 ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWm p6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEA AwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSEx BhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElK U1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3 uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwD36iii kAUVHPMltbyzyHCRoXY+wGa+efEvxu1rUJ5odGVLK1yQkmMuR6+1a0qMqj90idRQ3Pfr/VdP0qEy 315DboBnMjgV5xr/AMctB0/dFpUMmozDow+WPP1618/6hqd9qkzTaheTXLk5JkckflVjSfD+r65K I9N0+e4J/iVTt/Ou2ODhHWbOd15PSKOo1v4u+LdYkPlXx0+HOVS1+Uj6t1NepfBrxjqviWwvrPVZ WuJLMrtuG+8wbPBPcjFcZovwOvnRbjX9QhsYeCUU5P0zXs3hTwrpPhTShaaUnyOdzyk5Mh9SajET o8nLBFUo1Oa8jeooorgOkKKKKACiiigCO4gS5tpbeQZSVCjfQjFeD3XwDvxqrrb6rAmnFiVd1+ZF 9Md692vLgWdlPcsMiGNnI9cDNfLHiT4meJPEk8u6+ktbNmOyCA7QF9CR1rrwqqNvkdjCs4K3Megj wz8NPAoD6xfDUr5AD5ed5z7KP8azdW+NxgiNr4Z0iGzhHAkkUZI+g6V5CA0j4AZ3Y9uSa63Qfhr4 o8QFWg094ISeZZ/kAHrz1rsdKC96o7+ph7ST0gjJ1fxXruuTGXUNTuJT2G/AH4CvZfgNqmp3um6n bXUkktnAy+Q7nOCc5AP5VQsvhN4W8PKk3ivXYpJP+eKybFP9TXrfh630a30iJNBW3Fj/AAmAggn3 I71z4itBw5Yo0pU5KV2alFFFcB1BRRRQAUUUUANkRZY2jcBkcFWB7g14/qvwV8N22oyX0+rtZ2DN uMLEDHsDXrV/O9tp1zPGu54omdV9SBmvj3WvEWq+IL2W61K8lkZ2J2FjtX2ArrwsJyb5XYwrSirX Vz1xvFfw58EoY9F05dQu1BHmFd3PuTXJ698Y/EurBorN0063PAEI+bH1rh9O0q/1adYdOsprmRjg CJCR+fSvSNA+Buu6htl1aePT4T1QfNJ+XSutwo09Zu78zBSnLSJ5jdXU97KZbueSeQnJaRixr3b4 B2mpQaXqctwkiWEjr9nV+AW53ED8q6nQPhP4W0LbJ9k+13C8+ZcHdg+wrto4o4Y1jiRUReAqjAFc 1fExnHkijanScXdsfRRRXEdAUUUUAFFcjJ8TfCMTMr6vGCvXg1dvvG/h7TYLWe71BI47tPMhJH31 9av2c+xPPHudCQCCCMg9Qa4q5+FHhC71Z9Ql0z947bmRXIQt64rb0vxboWswTzWGoRTLApeQA8qB 3xT7TxRo17o76tDfxfYUOGmY4Apr2kNroHyy3LthptjpcAhsbSG2jAxtiQLmrVcxpfxC8M6zqS2F jqKyXDZ2rtIDY9DTJ/iP4Vt9S+wPqiGfdswikjPpmk4Tb1Qc0bbnVUVzmteO/DmgXC2+oaikczDO xQWIHvirVx4r0S00WLV7i/jjsphmORjjd9BS5Jdh8y7mzRWDofjPQPEbvHpmoJLIgyYzw2PpUmme LdD1i/msbG/jluYQS8Y6jHWhwkugcy7m1RWbpOvabriztp1ys4gfy5Cv8LelFJprRgmmfPXgmHVp ItV/s2x0e4j88bzflQwOO2e1dF8REuv+Ej8GpHZWs935GBbKR5TNnoPamzeE9CEkpGnoMk5w7DP6 11tzo+nnUvCbm2UtbRgQkk/Jz9a9CVRcyl/Wxyxi7WOO8EwrN4q8Y3d5Aun6lFZyobCIYQAryfww PzrmGeQfDHQYZWddNk1Ii5K9Me9euX+kWEfxBvLtLZVnuLZllcE5cEc5qz4V8OaPceA5dNmsIns2 ZmMTZIz61PtUve9ClC+hr2Wj+F20y3WxSxTMO2GWMruGR1B9a8hWHU/hY++6tdL1fR7q54mBDPnP 55q94P0bT4vGXlJBiOLf5a72wv4Zpnhvw7pN542jtbm0EtvHKWWN3YqCD6ZoilG93dCb5rWRN4h0 bU9C1688aaV/Z9/Z3ESSTW1yQXiUqOMGs7VdYtPE/irwTPe2y2uizIpMB4iVsnI+mcVoeM9G0+Xx 1JE9vmOaRRIgdgrduma9A8V+F9Dk8Ci2bTYTDZRBrdQCPLPsetHOly36j5W72OG8YW9lp3xg8O/2 Ascc8iYuUt+mM98e1chpcd3omr6h4wsstHY6k8NzGveNia9K+FehaYsV1qf2RWvl+QTsSzAY6cmr /h3RNNXQ/EVuLSPybiRzKhyQxo9oo+7vayFyuWplfA2VZ9L1ydBhZbzeB9QaK3vhnptnpml3sdlA sKNMCQpPPX1ornrO820a017qP//Z ------=_NextPart_000_0818_01D1A090.7A889040 Content-Type: image/jpeg; name="image004.jpg" Content-Transfer-Encoding: base64 Content-ID: /9j/4AAQSkZJRgABAQEAeAB4AAD/2wBDAAgGBgcGBQgHBwcJCQgKDBQNDAsLDBkSEw8UHRofHh0a HBwgJC4nICIsIxwcKDcpLDAxNDQ0Hyc5PTgyPC4zNDL/2wBDAQkJCQwLDBgNDRgyIRwhMjIyMjIy MjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjIyMjL/wAARCABkAnEDASIA AhEBAxEB/8QAHwAAAQUBAQEBAQEAAAAAAAAAAAECAwQFBgcICQoL/8QAtRAAAgEDAwIEAwUFBAQA AAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS0fAkM2JyggkKFhcYGRolJicoKSo0NTY3 ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWm p6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEA AwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQoL/8QAtREAAgECBAQDBAcFBAQAAQJ3AAECAxEEBSEx BhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2Nzg5OkNERUZHSElK U1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0tba3 uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/9oADAMBAAIRAxEAPwD5/ooo oAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiig AooooAKKKKACiiigAooooAKKKKACnCm0ooAlHWpFBqIGng07hYsKoHU1Onlj3qmDUgOaVwsjQWaN RwtTLdegFZqnmpQeaQ7I0Rdt2NPFwx71RU8fSpU/nSAurMakWVqqIeanQ0hlxHJHWp1buKqIasJQ BejY8e9aFtcFTisqM1bRuQaQG9E+8rjrnirGoaPNdyRukefr71l28xQq3cVrXXikWNqruoLZ5HrS dNTepUakobAthFbzraT3CRyDHFa2prbfYmhEqNICMAHmuDuNbSYy6hckFsZUd89hXLjWbuW5M3nM vOS2al4eNtC1iJt3Z7lo5CjYAa2QrG5Q149ovjy4sJE84CdB94d8V6ZpHifT9bETW0gV/wCKNuor bDRcI8rOXGSU5cyOyj6CrSdapQsCoq2jc0yk1YtL0qZTzz06mq6DiodVuEtdJvLiRyiJEcsO3FJu xS1PGfiX49g1LWDpkMebe1YqZMdW71ytreW0ija/J7VDc3FoJ5HlAPmMTyMk5pkIgL7oCCM9PSuW Vpas7Ipx0RuBQy5U0zYcmmW7E5bPSpJJtuSBWLNkO8rA61C6g/xgVnXN1IScMaz3trq4HyzMvfOa ah3YnPsjdCnB+cN7Vn6hbJNbN8vzDkcVRjtL62HmCXeV5FasUgvLPzMYbHI96tKzuiG7o5IyGRyB xgY+lb/hDP8Aabjn5lPSse6iUEsowc81r+EB/wATXdnhUPSvSwv8WPqeLmX+61PRndjpUsZwaiHS npxX0Z+dlzzj/ff86KhopWQc8u589UUUV8wfp4UUVcTStRkRXSwumRhlWWFiCPyoAp0Vd/sfU/8A oHXf/fhv8Kjh0+9uU3wWdxKoONyRFhn8BQBWoq3JpmoQxmSWxuURerNEwA/HFVo45JpFjiRndjgK oyT+FADaKmuLO6tNv2m2mh3dPMQrn86j8t/LMmxtgOC2OM/WgBtFFOaN0YK6MrEZAIwaAG0U+WKS GQpLG8bjqrrg0iRvIcIjMQM4UZ4oAbRSgFiAASTwAKnmsLy2j8ye0niQ/wATxlR+ZoAr0U5I3kbb GjOx7KMmm9Dg0AFFKASQACSeABU89heWyB7i0niQ8BpIyoP50AV6KKsRWF7PD50VpPJF/fSMlfzo Ar0U5I3kJCIzEDJ2jOBTaACinBHZWZUYqv3iBwPrTQCSABknoBQAUVd/sfU/+gdd/wDfhv8ACoJ7 W4tWC3FvLCx5AkQrn86AIaKsQ2F5cRmSC0nljHVkjLD8xVcgg4PWgAoq3HpmoTRrJFY3Lo3IZYmI P44qCa3mtpPLnhkifGdsilT+RoAjooqSGCa5kEcETyyHoqKWP5CgCOipZ7ae1cJcQSQsRkLIhU/r UYBZgqgkk4AHegBKKsT2F5bRiSe0niQ8BpIyo/Wq9ABRVmLT72eLzYbO4kj/AL6REj88VW6UAFKK tR6XqEsayR2F06MMqywsQR7HFV3jkhlMciMjrwVYYI/CgAWnimCnigY9akWod4FJ5p7UAWwcVKDW d5retOEj+tKwGqlTIayFuXXvVqK9GcNQBpp1qdetVIZkfkGraUmMsIDVhKgj7VZTGKQFiPpVlPui q0Y4qzH0FIZbibiqGvZNmWz71cTgVV1VTJYtx2piOImu5JBtJ49Kg8x+nNDhlY5U8Gmb/WqETxzO pwDwa0bLUrq0nSe3meORDkEGsjzBTlm7U7iaufRngDxtH4ktza3AEd9EvzL/AHx6iu9Q818m6Br1 xoms29/C5BiYZHqvcV9UaZeRajYQXkJzHMgcH61e6uYaxfKaqciue8fpeT+E5raxgkmnmYKFQc4r beXyhGFySx6etQ6/f3OnaDcXNooNwq/KD2NZStZo6oJppnzFqukXunrdLqUcsV/GQEt/QHvWHY3V zbX+w7yueSwruLx9Qu7qWa6kLzSHLMwqn9jVQWbDfhXP7VWtY6PZO97lqyk3Pt9qsXkTIuf1qHTr Z5Jgw4FaNzE/KHnArnb1OlR0OTubsxcbCzscAYrOutTms5vJuN8bjnbs6V0E9sba9W82EuhypxkD 8KytVtI9Y1A3cs3lyOctgdTW8HC2phP2l/dH6ffNMQN6urdGHet2xiUKQB949Kx7PRoxKr28vQYI HQ10lpAUwGxkdaltJ6Fq7WpxWrp9nvJoD03bhWv4P/187EfwjFZfiph/bLgdsZrd8J27i1knwSG4 GK9PA/xYnhZu7YaZ1Y6ZqSLczYUE/SpbOzluiMKQp74rrdJ0OOJgzLk+te3WxEaaPjcLl9XES7I5 jyJv+eRor0X+zYP7g/KiuL6/5Hrf2Cv5j4xoooryz6kK73wx8SfF8Oo6RpcetSCyWaKAReWhGzcB t+7npXBVp+Hf+Rm0r/r8h/8AQxQB6P8AET4j+LdJ8d6zplhrEkFnDLsjiWJMKu0cfd96muvE+r+F /hL4Yl0G9+yTXMsxnMcasX575BrkPir/AMlP17/r4/8AZRXWprs3gj4U+HrzSbSye4v5pWne7gEu cdMZ6UAcdqXxI8Zarp81jf6xNLazLtkRokAYfgtdV9vT4YeCtJl0+0hbxFrMRuJLqZAxto+iqoPc 9c1zesfE3W9c0qbTru00lYZhhjFZKjD6EdKv+PtLWTwn4T12ze5mtJbIW8jSSbxFIp+77fSgC1pX xN/tyCfR/HoGoadOjbLsQr51u+PlK7QMjPaobeKH/hRuqtEocDWUCOV+Yrt4rj/D3h3UfFGqrp+m Q+ZMVZ2JOFVQMkk9hXoXh3VLrw38HtRvLdLeS4t9aRcTRiRCdo7HrQB5T5b/ANxvyr1rxbBF/wAL D8Ep5KBXs7Heu0Ybp1rF/wCFx+I/+fLRP/BcldF43uHu/ij4NupQokmt7ORggwoJIJwOwoA0fiRp dp45GtXGm2qxa74emMU8MYA+0W/ZwPUVxvwljR9T17eitjR7kjcucHaaj8Va1PoPxh1m9heUILxl mSN9vmRnG5SfQiu90fwvZ6XrWp65oSlvD+q6HcSW7A58p9h3Rn3FAHH+EEs/CPgO68az2UV3qUlz 9k0+OdcpGcZaTHemaR8XNduNTW28RGDVdKuXEc1tNCoCqTg7SBwRTn3ap8BYhaoXbTdSP2hRyVVh w30968/0u1nvdVtLW2jaSaWZVRFGSSTQB6z4e8M23hv47jTYF8yxaKSa38wZyjRlh+WcfhXkd9/y ELnH/PVv5mvdhcxzftC21ujBms7HyJCDkbhDzivCb7/kIXP/AF1b+ZoA9E8KGx8GeAJPGM1nDear d3JtdOSdNyRbeWcjufSo9G+Les3GpLbeJ2h1bSLhgk9vNAvyKTyUwBgikuYZNS+A+nm0Xzf7N1OQ 3QXkxhwdpPtXB6XZXOpapa2dpE0s80iqiKMknNAHpln8PdNtvixf6fdMZNFsLdtRZe7w4yq/qBWZ e/GPxL/aOdJe30/TYziKxigTy9nYNkZJx1rvvOhv/i/4i0uGZGuJdCaxQA/emVVyo9+K8Y0TUl8M 61I+oaLaagY90clrepkK3+IoA7G48f6JD4i0jxLpulRxXskTRaxZ+WBDIDgEr9R/KqvivwCJdR0/ UfCSve6RrT/6KFGTC56xt6Y/pV34gx6VceA/DurxaDZ6PqF7JK3lWqbQ8YwATU/wk13UbLQ/FlvB cFY4NOa5hBGfLkyF3L6HBNAFXxldab4M8NjwRpDQ3F9IRJq94FBy/aNT6CuS8EIknjjRUlVWQ3aZ DdDzWFJI8sjSSMWdiSzE5JNbHhC0jv8AxhpFrNu8uW6RW2nBxmgDvPG3xL8Y6X401axsNZkhtYLh kijSJMKo7D5ay/DU2pfEzxvYweJ797m2tY3nlJRVPlKMsBgDrXQ+LfiU+h+K9S0yHw5o0sdtOY1e WDLMB3J7mq3gPxOPEfxN86WzsrCS506a0ijt02KzleM+5oAy9U+L+upqJTw60GlaTC22C1hgXDID xvyCSSOtS+L0sPFfgiz8aWtpDZ38dx9k1GKFNqO55V1HbivO7y0nsL2a0uominhco6MMEEV6EYpN M+BHl3a+U+o6qJbZG4LoqjLY9KAN/wAfeNPEHhRPD9loWomytm0uJ2jjiTBbHXkGqWla5c/EPwR4 kg8Rxx3Fzplt9rt9Q8pVkDZ+4SAMg1s+OPFOj6IPD1tqXhSw1YtpsTGadiHVfQVk+NpPsnw+t5vB yxR+FdQk3XOxf30cv/PORuuAelAHkSqXdVXkscCvW9a1k/CvR9N0TQY4U1u4t1ub+/eMNIpcZCLn oAK8nhYJPG56KwJ/OvRPjFaNLrmma9CTJY6np8LQyAcfKoUjPrxQAW/xGg8R6Ne6V44jF3mItaX8 UKiaKUdASMZU1L4Vay8GfD+Txi1nDeatd3RtLATpuSHb95yO5rV8Aaro/im4l0u88FaMlvbWMkk9 6kWGXavDE9iTWPeQPf8AwKsTaL5q6fqkxuAvJjV/uk+1ACaN8WtYutRW08UtDquj3LBJ4JoVHlqT yVIAwRVqz+H2nwfF670e7Zn0e0hfUMd3gADAfrivNtN0+51XU7awtIzJcXEgjRQM8k17oLqC7+OO r2MEqNM2iPYLzw0wRflHr0oA4a/+MfiT+0P+JO9vpumRtthsoYE2bAeN2RknHWpPGltp/iLwrpnj bT7SK0uJpza6jBCMIJRyGA9xXnVxbzWtxJb3EbRzRsVdGGCpHavRruF9J+B+n215+7n1LVDdW8ZH JjChST+NAG18RfHfiXwvr1lpui6m1lZLpts6wxxJgEpyeRVTSNZT4paVqGja3a2x16C2a4sL6JAj yMgyyPjg5A61kfGP/kcbT/sF2v8A6BUnwhtZLfWdS8QTApYabYTNLIR8uWUqFz680AeekFHKt1U4 NNLelOmcSTSOOjMT+tR0AOopo606gYUoNJRQA+img06gCSOZozkGte0vw2FasSnKxByDRYDr4mBA INWkNc3YaiVIVzxXQwusi7lPWoaGi3GasqOM1Wj6VZTpSGTqeOaZc/NasMVImKWRQYXHtTEcXKi+ YwIHBqrNBGRwOauXXyzv25qqxyai5tYzJEKH2pAavOit161RkQxt7VoncykrE8TLnLc+1fQ/wk1R 7vwkIZGJaByoz6V85p1zXuXwfkP9gXRPIEnT2rakrto5MVLkgpeZ6Rr17NbxWMdu+ya4uFiDDqAe uKPF3iCLS7RbQBXnlXoe1TXdtZXYsrq5cj7NIHhwcZb3rynxLrDXniC6lkb7p2j2xXJXbi35nfhr TjF9hLlkkJkfGT6VXhsbW7hWWeVYoBOFch/mZe+B/WsSTUpLuQpEfkHBNV721aURgyOMHI2nGK5I xs9Ttk7rQ7Wb7BHdPJbx+XBnEa+gqlcnLtJECVA61zrXFyltsEm5gOGNVLC51KKV9115qt/DjAFL ke5SkrWOqjWK7j28fSmHQrdvmKcfSs3T52ikKyH5ic1vJfLtyGIOOlQ7p6FqzRS/s6OD7gwBT0G2 ppblHzjFU5ZQF4q4XZErI4nWYxc69c5+6DxWzoF5dxa7YWagJC7AGP1FYertJFf+cmcFs5xW9oYe TVrG7PJjUndiuuF3KKRxVEo05SltZnt9lZRRt8oG09vQ1sQxhcY6VyVhq+/b1BIz1ret735NzHFe jUhPqeJRq09kbHHrRWb/AGonrRWXJI6PbQ7nxpRRRWZ1BU9ldPY39vdxgF4JVlUHoSpyP5VBWp/w j9+dIs9SSNZIbycwQohy7OO2KAE8Q63ceI9fvNXukRJ7p97qn3QcAcflXU6P8TZtN8OWmiXmgaXq lvaMxha6ViVz24Nc1rfhvUNA1COwvBG140YdoYW3tHns2Oh9qy2ikQsGjZSvDAjGPrQB2uq/EK01 PS7iyTwfolq0q7RNCjB09xzVLwt491HwxaT6f9mttQ0yc7pLK7TdHu9R6GuW2OCAVbLdOOtbeseE 9U0O3sJLxYxJep5kcCMWkVf9oY4oA6PUfijOdMuNO0DRbDRILlds0lspMrg9QWPauaj8TXcXg+fw 2I4zazXK3LOQd24DGPpWQYJhN5RicSf3Npz+VXbPQ9RvoryWG2cpZx+bOSCNgoAzq6XUvGt/qet6 TqssMKzaZFDFEqg4YR4xn8q54wTLEJTE4jPRypwfxrX8P+FtR8RreSWfkpDZxiSeWZ9qqCcDnHWg Cprurz6/rl5q1yiJNdSGR1ToCfSuh8NfEjWPDHhzUdDtkhmtL1GXEwJMW4EMV+oNco9rOh5ifBba DtOCfamtBMknlvE6v/dKkH8qANvwt4v1TwjeSzWDRvDOuy4t5l3RzL6MK3bX4nT6ZLe3GkaBpVhe XLZW5ijJaH/cyeK4n7Jc7iv2eXcBuI2Hp6/SpNO0+61W/hsbOIy3EzbUQd6ANPw94rv/AA94oj1+ MJc3aszOJ8kPu65/Oupb4pWbsWbwN4eLMckmN+T+dcjeeGNUsdPhvZYd0csrxBUyWBQ4ORjgVlxw TTEiKJ3K8kKpOKAOusviLqGl+IrrU9MsbO0trtQlxpypm3kUDGCpqza/E640s6hNpGhaXp95eOXW 5ijJeAEYITPQVxEUMk86QRoWldgiqOpJOAK6yX4c6rHDc+XfaXPeW0fmzWMVzmdB3yuOo9M0Aczb 6le2uppqUNzIt4knmrNu+bd65rtLn4nNqGoWeoaj4Z0a7vLcsXleIjzyRjLgHB9ax9G8Ca1rul/2 haLAI2LiFJZQrzlBlgg74qnofhfUNdN08LQW9vaDNxc3UmyOL6n1oAPE/ijUvFmqm/1GRchQkUMY xHEg6Ko7Cl0DxNd+HrfVIbaKJxqNqbaUuD8qkg5HvxV6fwDq8d9plvDLZ3cWpOY7a6t5t0LMOoLY 4/Kp7v4b6xb29zLFd6bePbqXkhtrkPIFHU4x2oA4+rukalLo+r2mpQKrS20qyqG6Ej1qoiPI21FL N6AZNSC1uCzKIJSycsNh+X60AWtc1efXtbvNUuVRZrqQyMqdAT6VUtrmazuYrm3kaOaJg6OpwVI6 Gkjt5pRmOGRx1yqk0RwyzEiKJ3IGSFUnFAHcXXxOn1O50+71XQNJvry0bc9xJEQ1xxj58cH1rA8U eLdT8W6kt3qDqqRLsgt4l2xwqP4VFYyQSyZ8uJ3x12qTireq6NfaLcpb30JileNZFH+ywyKALviX xReeJ5LF7yOJDZ2y2yeWDyq9z71LoHjC+0DS9T0xIobmx1GIxywTglVbs49GFYDxvE22RGRsZwww abQAV1+hfELUNI0KTRLqztNU01smOC8Td5RPdT1FchRQB2V/8Q7ybw0dC03TbHSrSQYuGtFIecej MecVm+FfGOqeEbqV7ExSW9wu24tZ03RzL6MK5+igDvLb4nXGmfbpNH0LStPu7psi5ijJeEEYITPS uNg1K9ttTTUobmRbxJPNWbPzBuuc1VooA764+J8t/fWd/qXhzR7y9tyS80kRBnOMZcA4Nc54l8Va p4q1QX2pSglAFiiQbUiUdFUdhWJRQB6D/wALSM9wbjUfDGkX8xhjhDzqxIVBgY5rN8R/EXVdf0wa VFBa6bpYO5rSyj2K59W7muQooAKKKKAClFJQKAHUUUUDCnimUZoAfRSA8UtACgkGtjTNRMThHPFY 1PBIORQB30Dh1DKatR9K5fRtS+YRua6eIgjIqGhotJTjyjD2piGpMcH6UAcbqTIl2wYgZqh5kZPD Cp9cQC/JJ61n7U9KVjTmLW0MflOaJ7MtFuHNRQlQ4KkitZAGTjnihaA9TnEO1sV7F8I70xWssLH5 S/HvXkMi7blx716X4B3WlksmMbm3c13YOPNUt5Hj5vU9nhubzR7Tf2st9BBHFN5JhkEgwuQ49K8Y 1ZTJqV2h7uRXtekXazRIwNeVeN9PbSPFE3H7qf8Aexnsc9RXJjKTi7nblWJVSHLc457uPTgI2Tao PLYrQtp3vGC29rNLldwYDjFNaGO53K4B3etWIv7VtbIWVvc+VGvKhRgkZ6Z9K41Z7nqu99BrxhNi va3AZxkKV61JbvZj5duG7hhiuoj8VTM8RuNFhKxx7ch+a568kudRmcy2VukIJMe0/MM9Mmk4ruUu bqijfsoIeBvmXtSQXbsgJz6GqqadPbNmaffuPA9KssFRRt7VDS2LTZYW4Zmp9zKIoCzkYAqrAcuK tzW4u4WjYfe6e1a0KMqkuWJz4qvChT9pN6GV9hW+ik8yU+XjcFUc1v6ZbR29iqgYGAfeoNMsngzJ LIHU8Lxgmr0kmOEHXtXq4DCyg3UqL0Pn84zCnUSoUnfq/wDI17G58psZB9K1P7UfywoJHua562WQ DcwP+FaMVrPOA6g167pxteR8v9YquTjTLf2yb/nrRUX2C5/u0Urw7i5K3ZnzlRRRXgH3gV7B4T8S aZ4X+Huj3l/YG4kkvpYo58/8ewOcyKO7CvH6eZpTEsRkcxqchCxwD9KAPYfDOiy6Jq3iSeZru8vJ YI59Ou7RElnmiZiWeMNwTjGe9aVxHZ69rNt4cvLO4tLnV9P2me9SNJmlUgqzKv3TtBHPWvEY9QvY nieO7uEaIYjKykFB6Dnitvw/4qOjahNqdxbG/wBR2H7PcTykmJ8EbvfrQBP421KL/hMXGn7Uh07Z bwgL0MYAJ9/mBNerT3epX/iG8uHmYCy0mJl+y2wkuQXHJjH4V4FLLJPM80rFpJGLMx6knkmp4tSv oJ/PivbmObbt8xJWDY9M56UAe66vb3Ed/De2VpIdfbQy9p9rjTz3kEoDEgcbwmeKoWV34tGias2o 28S6lLpYZYUi/fOAx+aReucV4y2pXzTpO17cmZPuSGVty/Q54oOp6gbhrg31z57LtaXzW3EehOc4 oA9q16O41HwPewNFNpYttPjdoJIFa0kwRzFIOje1cP4Q1q/074feMI7WRVQLbNygPLShT+lcY+o3 0lqLV7y4a3HSFpWKD8M4qFZZEjeNZGVHxvUHhsdMjvQB7hearfS+OrvSYVt2a20rztOtmjXabnau 0gd2wWpdMk1FjoV/4itY/wC3Y1vWVJogsjRLCxBdfTI4zXiP2q4Nws5uJfOXGJN53DHv1p8uo308 /nzXlxJNt2+Y8rFsemc5xQB6/YeJ9Wl0fwldO8Rnvr17e4k8oZkiBGEPsMniuZ0CQ6Z8alS0VIV+ 3PGqhRgDngCuCFzOqxqJ5AsZ3IA5wp9R6UnnyibzhK/m53b9x3Z9c0Ae0ar4j13SNM0heLe4uNWl WbfCAxXfgDB7YrTjjg00asdLtdRF2dYdZ10m3jkcJhSgYN0Qkt0rwia+u7lg091PKwOQXkLEH15p 0Op6hbyySwX1zFJJ990lZS31IPNAHU+LhH/wsxvsEQ01jcRECQriKTIyx28DnnFdvJZHXNXvrTXv DUumalFC7HXbBnSJiF++38JDfXvXi7u0jl3YszHJZjkmtB/EOsy6d/Z8mqXbWfTyTKSuPT6e1AHs XhKydNF0nRbS2d47u2e4j14oHWxmb76jsoxwc85IrndT8M3dv4V13w5pbS3VzY6mtzMm3Mk8JjAD ADqM815tFqN9BbNbRXtxHA33oklYKfwzinQapf212t1Be3EdwoAEqyENgdBn09qAO/8ABnh7WNJ1 jw5d6i7wW9xfnybCUsrthTl9p6DtmtOwvdIuYPEb+HdBis/EsKzDD3LyiSE5EhQN/Hgn8K8vu9X1 K/vBd3V9cTXC/dkeQll+np+FVo7iaKXzY5pEkOfnViDz15oA674cXEljq+r3sSI09rpF1NFvXcFc KMHFeieHtSmvPDOj6jANWury6uXW/bT7aKTe+4YWXdyFx+FeGJLJEWMcjoWUq21iMg9QfaprbUb6 yVltby4gV/vCKVlB+uDQB7jqR1y20azfwbpQiV9SlWZFRZCvPRiOAmc+1Ubr+0LJL1/A1rFJK+sS JeG3jDsqYTaMdkyX9q80l8WXn/CN2WkW0k1ubd3Z5YpSpk3djisa2v7yzZ2tbueBn+8YpCu76460 AeueJ9Vk8NaRrlxootoZZ9WhhneNAQGMBZ1X0G6ue+LM+oXOvafJcqRA1lC0MmzarZUZwe/NcA08 zRtG0rlGbeVLHBb1+vvTpru5uEjSe4llWMYRXcsFHoM9KAPR7zV9Hg0AWvia6g1u9MOLdbOMLJAc cF5f4h04FeZUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFOooAQZpaKKBhRRTsigBNtOHSk3U buKAFoozRQBJDIY5AwPSuz0a9FxEFJ5riK0dKvGt7hecAmk0B6FHUo61WtZRLErA9RVkdRUjOP1+ BftRLZxg4+tYcKqHzNnaB2711XiCLc4OKw/JXuKXMWoX1IIYS7ZHTPFalspAquu1RxVq3YE1N7l2 sjIliBu3BOBnk12fhTXBLOLBkwAPkauRvGKSkgA5PNbHhaMS6zFMgxtHIrqw1SUaseU87MKFOrhZ qa2TZ7d4dvdmI2b8M1c8caH/AMJB4d86BQby0+ePHVh3FcpaXBjlVlOCDXf6NeCeNRn73UGvTxtB SVz5jKMY4SUeqPE1tnWGKdeh6g9qvwyl0AAyR61Y8VqNI8RXtgV2oz+ZGPY8mqdtcRqucjPavmaq cXY/QKMlOKl3JXV/vE/hioXnKDGeBUsl2uMlhVCa4T2zWW5v0ILmYvkk/QVTMpJx2p08ikk5HIqJ CC3rWiRJoWETSyKo7nFdXYaX574x93oPWsjw5b/a75Y1G3g9O1d/plg0BG4ZbpXqYBqnGU+p4Obx dacKXRav9DAvNGnCAqPmI61lxWrxT/vBjB716UYA3B6Vh6vpBkUmJRkHivSo4m75ZnhYvL3GLnSI 9HtI7rG4A/Surh06OOMAKK5jw3HJA7JIpHNdtEeK5cVNqdk9Dvy6lF0lKS1Kv2NPQUVf49qK5edn peyifE1FFFSahRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFA BRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABRRRQAUUUUAFFFFABS4pKKAFxRig0YoAdx60cUgooGO4 pcrTR1pD1oAfkUUynUALTlODkdqbSigDtfD955kQQnmuiFcBodwYrkDPFd5G26NT7VDGjK11Pl3V zzMK6TX+LXPtXJ+bu6VDRtB6DyRmrcBxGT61Q3ZNX4OQAO9CGypcx758MSFx1rp/CNi8W+cghDwP eobPSHW6V5nVom6qRXUwKkaBEXao6CvTwWFlz881ax89m+YwVF0qTu5b+SL0bEEEV2Hha4LTCPJ6 1x0QyQPWvQPDFhHBGJ2YDjLEngV6WKmo09T5zLqE6uIXL0OP+M+nCPVNO1BRjzYjGxHqOa8zFxNG MA5x616x8Wrlb2DT3hYPbqSAw9a8pKAnmvl6usmfo9JOMEhragw+8rVC9+x+4p/GrJt8jOKj+zc9 Ky0NrsqiWRzyCatwJITk/KO9SpCkYyePWuh0Hw9JqTLdXKMtgp5A+9J7CjfRFRi27G/8P9Ofc99K pWL7sYYct6n6V6HtC9sVkwhIVTy1AUKBtHQAdvwrSinS4GEzuHb2rrpO2hz43D+5zLoO709kDKci kKkH7p/KpV6Vvc8qxWht0jlyBitSLpVTbzVmKpm7l01Ys0U3JoqDU+KKKKKYwooooAKKKKACiiig AooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKACiiigAooooAKKKKAC iiigAooooAKKKKACiiigAooooAU0tFFAxR3pKKKACiiigAp3eiigBaKKKALmnEi7THrXoloc26/S iipYIp+Ih/xLifauIQkKMUUVJcSVM561saWokuUDdKKKcPjQ6rfs5eh1yfcX6Vcj/h+lFFfTRPz2 ruX7cZdQfWtO+1G6Fk1uspWPIGBxRRXm5o3aKPoeFoRdSba7EXjWNT4EWbnfFtKe1eaoxaJWPUjN FFeJM+un8RYjYkHNNZip4oorIaLuhW0d/fyC4BZYhuVe2fevV7fEVsdigCNVCgDjnv8AWiitYbG9 AmiAW7kUdN23mrX+oiuZIztaOMFT6Z60UVZqypYajdlyhnYr15rS+1yGTaQh+XdnHNFFNNmeIpw1 0LqDdArnqamioorboeJJJTaRNRRRUiP/2Q== ------=_NextPart_000_0818_01D1A090.7A889040-- From nobody Wed Apr 27 16:55:21 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 32E0512D15C; Wed, 27 Apr 2016 16:55:19 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tnD_AFgOJMlv; Wed, 27 Apr 2016 16:55:17 -0700 (PDT) Received: from smtp4.pacifier.net (smtp4.pacifier.net [64.255.237.176]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 312B312D509; Wed, 27 Apr 2016 16:55:14 -0700 (PDT) Received: from hebrews (c-24-21-96-37.hsd1.or.comcast.net [24.21.96.37]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: schaad@nwlink.com) by smtp4.pacifier.net (Postfix) with ESMTPSA id 89B9B38EED; Wed, 27 Apr 2016 16:55:13 -0700 (PDT) From: "Jim Schaad" To: Date: Wed, 27 Apr 2016 16:55:12 -0700 Message-ID: <085f01d1a0e0$3d963e30$b8c2ba90$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Thread-Index: AdGg02eq3MX9T0YRQZmWJqvRK5F+sw== Content-Language: en-us Archived-At: Cc: curdle@ietf.org Subject: [Curdle] comments on draft-ietf-curdle-pkix-00 X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Apr 2016 23:55:19 -0000 1. It is not completely clear which of the three PKIX related documents are the current documents. I am operating under the assumption that this is the current document and that it replaces the other two documents. If this is true, then getting the relationships in the tracker would be nice. 2. I pass this comment on that I got from Ilari on a document that I am doing for the COSE working group. It seems like this document mixes up Curve25519 (X25519) and Ed25519 keys. Problem is that Curve25519 public key for some private key does not equal Ed25519 public key for the same private key... The same also applies to Curve448 vs. Ed448. I found this reasoning to be compelling and changed my document so that I had different curves for the ECDH and EdDSA algorithms. 3. I would request that the OIDs for id-Curve25519ph and id-Curve448ph be removed from section 3. Having these values in this location makes thing confusing as they should never appear in a PKIX certificate. This is because they are only for the EdDSA algorithms and those algorithms do not use these values to identify a curve. 4. Section 3 should reference RFC 5480 which added to the set of algorithm identifier that use for algorithm identification. 5. Section 4 - the description of subjectPublicKey should be updated as this is not restricted to being an EdDSA public key. Unless you are planning to duplicate this to deal with ECDH keys separately. 6. Section 5 - I would like to adamantly argue for the definition of two different EdDSA signature algorithms. I would really prefer to have the pre-hash and the pure versions of EcDSA to be separate algorithms. They have different procedures for doing signing. Additionally, I believe that it will be quite reasonable for some protocols to define that they will only support the pure version and not support the pre-hash version. This is a much easier thing to define if one can separate the signature algorithms and not have to make the support statement based on the enumeration 7. Section 6 - need to talk about Key Usage bits for ECDH or tag that this is only dealing with EdDSA. 8. Section 5 and 7 - I do not see any reason to have distinct OIDs for the signature and public key algorithms unless you believe that this is going to be useful in the future. Using the same OID makes life easier since it automatically allows for an easy way to say that this key is only to be used with this algorithm. 9. Section 8 - Remove the OPTIONAL on the parameters field. I would really prefer that you defined a different structure for the EdDSA keys as the use of NamedCurve means that one needs to create an association between an OID and an enumeration. I think this is a bad idea, the same value should be used in both cases. Having different parameters for the algorithm depending on where it is encoded (public or private key). Additionally, one wants to be able to do the restriction to an EdDSA-ph algorithm. This means that one does not use the ECParameters field for those keys. 10. General - please note that the structure ECParameters from RFC5915 and RFC5480 is the same as EcpkParameters from RFC3279. Using two different names for the same structure looks somewhat confusing. It would be better to use ECParameters and not reference 3279 at all. Jim From nobody Thu Apr 28 14:20:41 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8D3C712D9E7 for ; Thu, 28 Apr 2016 14:20:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (768-bit key) header.d=kingsmountain.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hn5oPGkr75b7 for ; Thu, 28 Apr 2016 14:20:27 -0700 (PDT) Received: from gproxy5-pub.mail.unifiedlayer.com (gproxy5-pub.mail.unifiedlayer.com [67.222.38.55]) by ietfa.amsl.com (Postfix) with SMTP id 790A712D9F1 for ; Thu, 28 Apr 2016 14:20:27 -0700 (PDT) Received: (qmail 2713 invoked by uid 0); 28 Apr 2016 21:20:27 -0000 Received: from unknown (HELO cmgw2) (10.0.90.83) by gproxy5.mail.unifiedlayer.com with SMTP; 28 Apr 2016 21:20:26 -0000 Received: from box514.bluehost.com ([74.220.219.114]) by cmgw2 with id nxKn1s00A2UhLwi01xKqCF; Thu, 28 Apr 2016 15:19:55 -0600 X-Authority-Analysis: v=2.1 cv=Nal1iQz4 c=1 sm=1 tr=0 a=9W6Fsu4pMcyimqnCr1W0/w==:117 a=9W6Fsu4pMcyimqnCr1W0/w==:17 a=L9H7d07YOLsA:10 a=9cW_t1CCXrUA:10 a=s5jvgZ67dGcA:10 a=IkcTkHD0fZMA:10 a=XYUc-DgfXtMA:10 a=RT5OEuPXORIA:10 a=kziv93cY1bsA:10 a=X7Ea-ya5AAAA:8 a=48vgC7mUAAAA:8 a=Kmh1rLNFNJxPDx-zGsMA:9 a=QEXdDO2ut3YA:10 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=kingsmountain.com; s=default; h=Content-Transfer-Encoding:Content-Type: MIME-Version:Date:Message-ID:Subject:From:To; bh=GaIYCNt7+F60UjenCjnDvNadrOuh5mkc/SUtGPuLuho=; b=zlLqqjFK+r6dWA5a7weOOqjNV3 diydhZK21EyMSOzY0ENLp/CUhDuCO6QfwOo1iVNguyiZltrR3zJP2V9ZU84Y6e4uTQM8Msas+xqdS +XQ9E+EcobdQZorjoYyEZacOO; Received: from [70.213.14.128] (port=3120 helo=[10.0.0.1]) by box514.bluehost.com with esmtpsa (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128) (Exim 4.86_2) (envelope-from ) id 1avtLg-0000Cv-Q8 for curdle@ietf.org; Thu, 28 Apr 2016 15:19:49 -0600 To: curdle@ietf.org From: =JeffH Message-ID: <57227E6A.9030603@KingsMountain.com> Date: Thu, 28 Apr 2016 14:19:38 -0700 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.6.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable X-Identified-User: {11025:box514.bluehost.com:kingsmou:kingsmountain.com} {sentby:smtp auth 70.213.14.128 authed with jeff.hodges+kingsmountain.com} Archived-At: Subject: Re: [Curdle] If you took minutes in B-A X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Apr 2016 21:20:34 -0000 On 4/26/16, 7:24 PM, "Salz, Rich" wrote: >Please post them. We lost our notes on who did so. here's my personal notes in case they are helpful (they are sparse and somewhat incomplete).. curdle wg ---------- rsalz presiding EdDSA in DNSSEC (DNSKEY, RRSIG) -- Ond=C5=99ej Sur=C3=BD, CZ.NIC see slides https://www.ietf.org/proceedings/95/slides/slides-95-curdle-0.pdf =E2=97=8F Two drafts =E2=97=8B draft-ietf-curdle-dnskey-ed25519 =E2=97=8B draft-ietf-curdle-dnskey-ed448 =E2=97=8F What to do next (hum, hum, hum)? =E2=97=8B Keep them separate? =E2=97=8B Merge them? =E2=97=8B Drop Ed448? paulh: don't drop ed448 there was successful hum to merge the specs SIP-Authn using EC-srp5 this work will be done in sip-core draft-ietf-curdle-ssh-kex-sha2 -- rsalz presents on behalf of Mark Baushk= e see slides: https://www.ietf.org/proceedings/95/slides/slides-95-curdle-1.pdf this is larger DH groups for ssh key exchg no-one has read it, various will try to do so... dkg: thinks using ed448 is fine discussion of other drafts sfarrell- make the changes and go to wglc paulh: prob with the pkix ones is the pre-hash thing that cfrg didn't like... yoav: cfrg didn't like either, firewall needs to sign all of it, don't want to buffer jim schaad(js): most protocols we use will not use pre-hash version, bu= t we shuold have the oids for those that may use them end From nobody Thu Apr 28 16:25:10 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 24AFA12D117 for ; Thu, 28 Apr 2016 16:25:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.9 X-Spam-Level: X-Spam-Status: No, score=-101.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, USER_IN_WHITELIST=-100] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cvBo1CU_B0W1 for ; Thu, 28 Apr 2016 16:25:06 -0700 (PDT) Received: from mail.smetech.net (x-bolt-wan.smeinc.net [209.135.219.146]) by ietfa.amsl.com (Postfix) with ESMTP id 9FDA512D13F for ; Thu, 28 Apr 2016 16:25:06 -0700 (PDT) Received: from localhost (ronin.smetech.net [209.135.209.5]) by mail.smetech.net (Postfix) with ESMTP id 57F9FF2402E for ; Thu, 28 Apr 2016 19:25:06 -0400 (EDT) X-Virus-Scanned: amavisd-new at smetech.net Received: from mail.smetech.net ([209.135.209.4]) by localhost (ronin.smeinc.net [209.135.209.5]) (amavisd-new, port 10024) with ESMTP id 1K+jIBytt5zE for ; Thu, 28 Apr 2016 19:08:54 -0400 (EDT) Received: from [172.20.1.174] (c-73-99-75-174.hsd1.va.comcast.net [73.99.75.174]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by mail.smetech.net (Postfix) with ESMTP id 84FD1F24013 for ; Thu, 28 Apr 2016 19:24:53 -0400 (EDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Russ Housley In-Reply-To: (Russ Housley's message of "Tue, 5 Apr 2016 14:16:36 -0400") Date: Thu, 28 Apr 2016 19:24:51 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <69B0E444-171E-4C2E-9BE2-7DCCD33677EC@vigilsec.com> References: <029701d18935$89182cf0$9b4886d0$@augustcellars.com> To: curdle@ietf.org X-Mailer: Apple Mail (2.1878.6) Archived-At: Subject: [Curdle] draft-housley-cms-eddsa-signatures-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Apr 2016 23:25:09 -0000 I just posted an I-D that specifies the use of EdDSA with CMS: = https://www.ietf.org/id/draft-housley-cms-eddsa-signatures-00.txt It makes use of the sam object identifies that Simon used for the = PKIX-related document. Please read and review. Is this working group willing to adopt it? Russ= From nobody Thu Apr 28 16:56:51 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E620D12D126 for ; Thu, 28 Apr 2016 16:56:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HYMA-HnRKRh1 for ; Thu, 28 Apr 2016 16:56:49 -0700 (PDT) Received: from mail-io0-x22a.google.com (mail-io0-x22a.google.com [IPv6:2607:f8b0:4001:c06::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 36EB712B041 for ; Thu, 28 Apr 2016 16:56:49 -0700 (PDT) Received: by mail-io0-x22a.google.com with SMTP id 190so87564443iow.1 for ; Thu, 28 Apr 2016 16:56:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=nJWYBNlytANK9DkvtFUi9HOwhwnqu8aMXh8VekjzYwU=; b=hbQPH2SH8/+rc4HJZlxltDcSIBWnR0h3VrtadswVQjMIT05FQz8l9BN4e5KHJdWu1v KDxUzi3Icqhgx85iixtWChfxXxMMQHim1jXOjmn+82YWzTXvb7HxYqs+DS8F8x0ESEv5 xPj/RF8ZZtpZKwY0dVEPcE5prHw11lXzOdKhL4w5YQOlMigarDUo8j2382qMqJJXHW5m eds1d0wkfuOmyV8s+dvBpM+54Tj9olO8/zDbLHwRMrJBubwY1Y/6JBtseIXrZFwcob71 +B/54ABF0Yrvdjc5WDly9zIWx0HWd23Uf/8J0zPwh9kfjphLVVjMZvrKplny7aC3fo6Z kV+g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=nJWYBNlytANK9DkvtFUi9HOwhwnqu8aMXh8VekjzYwU=; b=Mn2YkRidIEUl2spECGfrnFGCt7luBZGD9MMZ4pcmygLvfN/XQmuusaViU8D3PiajjD uEXuEK4hiPRZvgYWQL4/vlvVhwpuRQykdGniQ8GS9sNt1p51P71/Whx+1yzruizEnMAB kIJwsAqumY1bStLB/j5OdnhILrf3tnBWJrk5ekxlT0d2iz1UOgDDLgCF/yKvMZpLMxwz IYVr14g4IkSdPf/7raTp1CnqXMy9lEU7dT3BwGu8n89AnBIKQKUR4tkz08qTouVxd96L omVCGp8BMKxF2FFNjgXzeulsxfaYkjYtiQPvRaAFsYIMacn5ivTydkp1KW+PdwcdDvXW an2w== X-Gm-Message-State: AOPr4FWGjywuiGtLTjmRDBXOTrGJr30eQKzHb3TWrnV5oYXoMLh72bWMAkOB0gtZv35bYjVKs8YTiC4mU+nodg== MIME-Version: 1.0 X-Received: by 10.107.161.140 with SMTP id k134mr22110982ioe.190.1461887808562; Thu, 28 Apr 2016 16:56:48 -0700 (PDT) Received: by 10.36.43.82 with HTTP; Thu, 28 Apr 2016 16:56:48 -0700 (PDT) In-Reply-To: <69B0E444-171E-4C2E-9BE2-7DCCD33677EC@vigilsec.com> References: <029701d18935$89182cf0$9b4886d0$@augustcellars.com> <69B0E444-171E-4C2E-9BE2-7DCCD33677EC@vigilsec.com> Date: Fri, 29 Apr 2016 09:56:48 +1000 Message-ID: From: Martin Thomson To: Russ Housley Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: curdle@ietf.org Subject: Re: [Curdle] draft-housley-cms-eddsa-signatures-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Apr 2016 23:56:51 -0000 On 29 April 2016 at 09:24, Russ Housley wrote: > It makes use of the sam object identifies that Simon used for the PKIX-related document. Which doesn't define what to put in the "context" argument to Ed448[ph]. Though that's an open discussion in the CFRG currently. From nobody Thu Apr 28 19:36:08 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E517112D0AD for ; Thu, 28 Apr 2016 19:36:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.9 X-Spam-Level: X-Spam-Status: No, score=-101.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, USER_IN_WHITELIST=-100] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sxf17-hjvv1f for ; Thu, 28 Apr 2016 19:36:05 -0700 (PDT) Received: from mail.smetech.net (x-bolt-wan.smeinc.net [209.135.219.146]) by ietfa.amsl.com (Postfix) with ESMTP id 1FF8112B040 for ; Thu, 28 Apr 2016 19:36:05 -0700 (PDT) Received: from localhost (ronin.smetech.net [209.135.209.5]) by mail.smetech.net (Postfix) with ESMTP id 5705DF24036; Thu, 28 Apr 2016 22:36:04 -0400 (EDT) X-Virus-Scanned: amavisd-new at smetech.net Received: from mail.smetech.net ([209.135.209.4]) by localhost (ronin.smeinc.net [209.135.209.5]) (amavisd-new, port 10024) with ESMTP id jrEOKKCfaTpO; Thu, 28 Apr 2016 22:20:04 -0400 (EDT) Received: from [172.20.1.174] (c-73-99-75-174.hsd1.va.comcast.net [73.99.75.174]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by mail.smetech.net (Postfix) with ESMTP id C8BEFF24013; Thu, 28 Apr 2016 22:36:03 -0400 (EDT) Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: Russ Housley In-Reply-To: Date: Thu, 28 Apr 2016 22:36:02 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: References: <029701d18935$89182cf0$9b4886d0$@augustcellars.com> <69B0E444-171E-4C2E-9BE2-7DCCD33677EC@vigilsec.com> To: Martin Thomson X-Mailer: Apple Mail (2.1878.6) Archived-At: Cc: curdle@ietf.org Subject: Re: [Curdle] draft-housley-cms-eddsa-signatures-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Apr 2016 02:36:07 -0000 On Apr 28, 2016, at 7:56 PM, Martin Thomson = wrote: > On 29 April 2016 at 09:24, Russ Housley wrote: >> It makes use of the sam object identifies that Simon used for the = PKIX-related document. >=20 > Which doesn't define what to put in the "context" argument to > Ed448[ph]. Though that's an open discussion in the CFRG currently. I=92m watching that discussion. In addition, Jim Schaad sent me a note = asking whether the pre-hash versions actually make any sense with CMS. Russ From nobody Fri Apr 29 11:35:34 2016 Return-Path: X-Original-To: curdle@ietfa.amsl.com Delivered-To: curdle@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CCE0512D6AF; Fri, 29 Apr 2016 11:35:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.903 X-Spam-Level: X-Spam-Status: No, score=-1.903 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=junipernetworks.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UQVQS6jIC5n1; Fri, 29 Apr 2016 11:35:31 -0700 (PDT) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0103.outbound.protection.outlook.com [65.55.169.103]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 996B712D6F8; Fri, 29 Apr 2016 11:35:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=junipernetworks.onmicrosoft.com; s=selector1-juniper-net; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=m5fOm/UEFgmzG2EzE1KPHViITGrzOlvKmPla2ZYeKkw=; b=YvVq6TQ1vZAGTdV8e3QFCRCeNZkOnCcK1oecJRlE34pCPQroUly3++GXWkTYzyyPprhnisjJJiGfuHzhxENRQaUHEZ7K8BAJXXroS00oYu+0ZSaBhI9KACzp/va7DMXPup7UqHQV2hnMECBQZMfiuctKCA34HzNGHJ6zTFK0Wt8= Received: from BLUPR05CA0074.namprd05.prod.outlook.com (10.141.20.44) by CY1PR05MB2492.namprd05.prod.outlook.com (10.167.10.25) with Microsoft SMTP Server (TLS) id 15.1.477.8; Fri, 29 Apr 2016 18:35:28 +0000 Received: from BN1BFFO11FD044.protection.gbl (2a01:111:f400:7c10::1:140) by BLUPR05CA0074.outlook.office365.com (2a01:111:e400:855::44) with Microsoft SMTP Server (TLS) id 15.1.477.8 via Frontend Transport; Fri, 29 Apr 2016 18:35:28 +0000 Authentication-Results: spf=softfail (sender IP is 66.129.239.18) smtp.mailfrom=juniper.net; ietf.org; dkim=none (message not signed) header.d=none;ietf.org; dmarc=none action=none header.from=juniper.net; Received-SPF: SoftFail (protection.outlook.com: domain of transitioning juniper.net discourages use of 66.129.239.18 as permitted sender) Received: from p-emfe01a-sac.jnpr.net (66.129.239.18) by BN1BFFO11FD044.mail.protection.outlook.com (10.58.144.107) with Microsoft SMTP Server (TLS) id 15.1.477.4 via Frontend Transport; Fri, 29 Apr 2016 18:35:25 +0000 Received: from magenta.juniper.net (172.17.27.123) by p-emfe01a-sac.jnpr.net (172.24.192.21) with Microsoft SMTP Server (TLS) id 14.3.123.3; Fri, 29 Apr 2016 11:35:20 -0700 Received: from eng-mail01.juniper.net (eng-mail01.juniper.net [172.17.28.114]) by magenta.juniper.net (8.11.3/8.11.3) with ESMTP id u3TIZBZ88784; Fri, 29 Apr 2016 11:35:14 -0700 (PDT) (envelope-from mdb@juniper.net) Received: from eng-mail01.juniper.net (localhost [127.0.0.1]) by eng-mail01.juniper.net (Postfix) with ESMTP id C70CB114A4; Fri, 29 Apr 2016 11:35:10 -0700 (PDT) To: Daniel Migault In-Reply-To: <2DD56D786E600F45AC6BDE7DA4E8A8C1122501F5@eusaamb107.ericsson.se> References: <2DD56D786E600F45AC6BDE7DA4E8A8C1122501F5@eusaamb107.ericsson.se> Comments: In-reply-to: Daniel Migault message dated "Tue, 26 Apr 2016 20:58:01 -0000." From: "Mark D. Baushke" X-Phone: +1 408 745-2952 (Office) X-Mailer: MH-E 8.6; nmh 1.2; GNU Emacs 24.3.1 X-Face: #8D_6URD2G%vC.hzU Sender: MIME-Version: 1.0 Content-Type: text/plain X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:66.129.239.18; IPV:NLI; CTRY:US; EFV:NLI; SFV:NSPM; SFS:(10019020)(6009001)(2980300002)(199003)(189002)(50226002)(6806005)(19580395003)(86362001)(558084003)(1096002)(5003600100002)(586003)(5003940100001)(1220700001)(230783001)(92566002)(4326007)(117636001)(11100500001)(15975445007)(105596002)(106466001)(77096005)(2906002)(2810700001)(110136002)(53416004)(76506005)(81166005)(50986999)(48376002)(2950100001)(47776003)(189998001)(50466002)(76176999)(87936001)(42262002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR05MB2492; H:p-emfe01a-sac.jnpr.net; FPR:; SPF:SoftFail; MLV:sfv; A:1; MX:1; LANG:en; X-Microsoft-Exchange-Diagnostics: 1; BN1BFFO11FD044; 1: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 X-MS-Office365-Filtering-Correlation-Id: ae43db47-0d3f-44bc-fd14-08d3705d0902 X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2492; 2:0DkFoeGoSLQUrqXt5fVV9RzwJ1yrakfXh0QZ1K8EBGBhG5C+PzMtbZgWLpZNqCP91IuYuLru4oIAeonEeFU7XQsd8CJN1hmpWOE9wD/0fSx3LC8O0nzzwMQnSUTIbkeUpq54qq5jxPHKEnpVPt/2rpG3YJesXwqwb3HMkLLVJ0KW66LNxHNu9qb862/yaYOO; 3:rE5Wr5R4+YnB3eFl2JKJ3Gk9DyW8ztt9zyzfPiRmza3l6+QG6UlPgHITgmKF3JB+epiypBVQs53cElG6+ctGm6uMaO6ujpcNIGWY0/BjtBelx900CXF9WCX9tFTdL/Iw3PQUuXw8PF2BO7J5e9hPnK2aC/bQVBV12YioJvi+tOMDy0JWgejYdNG8TKFtKhFBVrZlzHdQKjI9UCoJtxmSvNWkcYvATjiSkJD3fFlWTRY= X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:CY1PR05MB2492; X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2492; 25: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 X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2492; 20: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 X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(9101521072)(601004)(2401047)(13024025)(13023025)(13015025)(13017025)(13018025)(8121501046)(5005006)(3002001)(10201501046)(6055026); SRVR:CY1PR05MB2492; BCL:0; PCL:0; RULEID:; SRVR:CY1PR05MB2492; X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2492; 4:SU2JWwIwIER8CHkn4D6AjTYL+hJhHV19aUDwYp6V8CZrccSk/hKkUxqtDMSRrjP+mxIbJo2A5SuEiYF+NosBhEdwwa+/sU8bjJFHEMim03MoaROHnr524otX5TYvBXbJZZ6I6bcnnnvQ7U0qU7dzdmz9pptkxQ5v4DNJkfMhZO78oVbLwAChRy0jmDU6rB/VPZIeSLnUeu3i4RS7ThyxzQr0QZQaEDKv3sU3jtX/sevOMrD5z0gnC8e4JXZl+5J1/lIdMm5k8LmKKwHfglv22zQ0I5Vqmr+NzXdh8V+S/Ue3FENqZM3xOOMU+0gcv+JXMVN9lmQP+dMD8oMUO+WTRyo3glXPY7IHoEjYyXksMDSwB6lzxq8tgxJLMIqyyae/aNXbTyUh7dLeHc3k8Hvlpu79pyIwZWVvZ3cM/Btpg04zuwpssfCeKBvOLNWFCVY1KtmNJS7clQnig+Wnn6ycK5YwN8jpERx22LpPC5N5wKTAUFLM+dQNI3kjLB9yQLHp X-Forefront-PRVS: 0927AA37C7 X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; CY1PR05MB2492; 23:OYNEgXEnEHpig7fwtway5iCKXfEekqAHFtOr5k/my?= =?us-ascii?Q?D/3FnihPxIANW79fnS0yGbWRwVUNVoNoIn6eLUZ2q3ZbzQcxI1s4Z1oBKsLm?= =?us-ascii?Q?Ch9L0RS7zh/VpMQcnSJdGpA5XWZx/dPbWI3tDWhWc4srIKUnSNb5lbGu4Wgb?= =?us-ascii?Q?Befy13pHfB0U0PV+gOyhFB8Qds6HMv/j3Xap645UOpAq4x01a6d5+NDRoZGG?= =?us-ascii?Q?IK51H7UxzvHS7pgRS+YJZ6W1cEGg21EodVv0T75aOWBKbRiacUIfXd824eXX?= =?us-ascii?Q?CYZ7EScZcWXDVhCYu8pkXwN0GZFOfAWddStlX5iVaTKuK/+wY9c3sp8uvh8/?= =?us-ascii?Q?hJ/Q/cJOv+iFmaOMmefCuaCSX+M5H0B0LBWLgeOn1VrLRUZ2dFJbsDO5Itmh?= =?us-ascii?Q?SCULia41lCWClWXXRqursXy1/D3vPEL5DsA88pU/kZ6cJ5Wnqp467UelKNOp?= =?us-ascii?Q?gJYKq2SwmmGya0qe6MPg9R28jcs7sSByFbAr12kjN3BKgQd5TrnG9RFBSY+T?= =?us-ascii?Q?6Q/bUdX9TkIEUostXkOCLUGG6MZEy66O5Tv1DHVFpXORLfyplI11gZxu9v9R?= =?us-ascii?Q?o7Vy5mOXQNMmLYG0UQbZVJuYbCLZlAkxaUkx6i1zL5zRHiXa+YhQ7mMcOYxq?= =?us-ascii?Q?UA5i1UfTsicJ3KxEPeBTnh4eYf9YyqPqhN/z/WPIzi40TVlfOsEQsqvgTTlL?= =?us-ascii?Q?6QFB/1t6Eh0RmxkUns2aERZAOsdFHYlEHU9oJ6QS0Wy+viN/ZOi4KwvQ1HKc?= =?us-ascii?Q?vWwTr8PvPfHD+h9nOJc7f0b4sh27iKyGmagrySEYKPGqRddefpZnmK6Tp+9s?= =?us-ascii?Q?J8bTjD6T8AqvNs39jX9uCCNG1Gy8KPEArSdIrmFc8Cc8THWXoMoQGekjQ22w?= =?us-ascii?Q?rl3xSxXsnCMrrP8gKKSeodEtKxuxjM3APG1JPP7SsE8O0eTrjFlBcj2bwW1D?= =?us-ascii?Q?IXOqKC7nIrDIgafpBkLya1Ak/cIhiXBxDeYmX9qtsyXOdOtZmdjnTyqmfpi9?= =?us-ascii?Q?uYLyRKSFvO61OQSfPcbeC9N?= X-Microsoft-Exchange-Diagnostics: 1; CY1PR05MB2492; 5:MieLvDzTD+MvtYxBSbd2xPrCWouhxS1rnBLDNG6/eXZOMTF+xStkUaut9KKDWzHRrcdKKgOD4Xcu+xu1MJ32lfX/HfyUrA3olf1RlPh9kJNAk/SJthuUGUbX9yFzYX5GMW0qnlkiWN1SvFqDiB+UWw==; 24:jb/oMHA+FfsEzgkXVDnyeKeYirRt9eOrjbjIEn1NRIADrt7x3KCcrnEkdfo2v8gc6RQ/pldt34M+whwhxDCfdlJ/RHDj+lxwkUG0/QL05vk=; 7:QNf3RaSY9LJ0Uh9Z3o7hI7IHaNhtkoFTQMkF1dgfJl821qRLwaXkmCJedggqDQqKAEx2skhHXC3QDRQfYWmFFbuSAgi7plJBymdN1RSBbGMHHwMQlOwVpzwxWgPvYUWTN2k3PErejHngiEeRsSdufLn82E6qVl/FSnOhHbIPs/n8oCwwBfw9XeM9i78QPT8V SpamDiagnosticOutput: 1:23 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: juniper.net X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Apr 2016 18:35:25.8764 (UTC) X-MS-Exchange-CrossTenant-Id: bea78b3c-4cdb-4130-854a-1d193232e5f4 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=bea78b3c-4cdb-4130-854a-1d193232e5f4; Ip=[66.129.239.18]; Helo=[p-emfe01a-sac.jnpr.net] X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR05MB2492 Archived-At: Cc: Russ Housley , "curdle@ietf.org" , curdle-chairs Subject: Re: [Curdle] Call for Adoption for draft-housley-cms-ecdh-new-curves-00.txt X-BeenThere: curdle@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: "List for discussion of potential new security area wg." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 29 Apr 2016 18:35:33 -0000 > https://www.ietf.org/id/draft-housley-cms-ecdh-new-curves-00.txt +1 support for adoption. fwiw: I do not have strong opinions about specifying a way to use HKDF of RFC 5869 as asked in section 2.2 and section 7. -- Mark