From nobody Mon Apr 16 14:05:41 2018 Return-Path: X-Original-To: dsfjdssdfsd@ietfa.amsl.com Delivered-To: dsfjdssdfsd@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B996126CB6 for ; Mon, 16 Apr 2018 14:05:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R4GMLtI9_Zkm for ; Mon, 16 Apr 2018 14:05:36 -0700 (PDT) Received: from smtp-p01.blackberry.com (smtp-p01.blackberry.com [208.65.78.88]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 64121124B0A for ; Mon, 16 Apr 2018 14:05:36 -0700 (PDT) X-Spoof: Received: from xct101cnc.rim.net ([10.65.161.201]) by mhs212cnc.rim.net with ESMTP/TLS/DHE-RSA-AES256-SHA; 16 Apr 2018 17:05:35 -0400 Received: from XMB116CNC.rim.net ([fe80::45d:f4fe:6277:5d1b]) by XCT101CNC.rim.net ([fe80::9c22:d9c:c906:c488%16]) with mapi id 14.03.0319.002; Mon, 16 Apr 2018 17:05:34 -0400 From: Dan Brown To: Dan Brown , "dsfjdssdfsd@ietf.org" Thread-Topic: Risks of entropy available Thread-Index: AdJJlYI5iB70z0jIQMOX0DbzkV0LDFBgHS8AEqfvTuA= Date: Mon, 16 Apr 2018 21:05:34 +0000 Message-ID: <810C31990B57ED40B2062BA10D43FBF501C53BBB@XMB116CNC.rim.net> References: <810C31990B57ED40B2062BA10D43FBF501083C12@XMB116CNC.rim.net> <810C31990B57ED40B2062BA10D43FBF501C15EDD@XMB116CNC.rim.net> In-Reply-To: <810C31990B57ED40B2062BA10D43FBF501C15EDD@XMB116CNC.rim.net> Accept-Language: en-US, en-CA Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.65.160.249] Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_004B_01D3D5A5.1E6211A0" MIME-Version: 1.0 Archived-At: Subject: Re: [dsfjdssdfsd] Risks of entropy available X-BeenThere: dsfjdssdfsd@ietf.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "The dsfjdssdfsd list provides a venue for discussion of randomness in IETF protocols, for example related to updating RFC 4086." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 16 Apr 2018 21:05:39 -0000 ------=_NextPart_000_004B_01D3D5A5.1E6211A0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi again random readers, Just adding some credit and historical background to this thread . The issue of keyboard timing leakage had already been raised long before: http://archive.cert.uni-stuttgart.de/bugtraq/2003/08/msg00213.html where /dev/random blocking (instead of entropy available in this thread) is the keyboard-timing side channel Thanks to https://en.wikipedia.org/wiki/Entropy_(computing)#cite_note-26 Best regards, Dan PS By the way, just so that I could be more sure about the topic of this thread, I had tried to write some shell scripts that distinguish keyboard inputs (button clicks and slow mouse movements) from any other entropy inputs - using the way that the entropy available changes over time. (But without any precise timing info :) Basically, I noticed that with no keyboard input or mouse movement - on my test device, a laptop, - the pattern is that the entropy available usually increases by 1 every second or so, and occasionally decreases by some larger amount. (I have no clue why.) By contrast, any keyboard input, mouse clicks/scrolls, or slow mouse movement, seems to cause a more rapid increase. (No clue why, either.) Based on this pattern, I was able to devise a script that detected keyboard input, with occasional false positives (one a minute?). Of course, other systems, Linux versions, may not have this pattern. I would guess that this pattern would only hold on a subset of personal laptops and Linux versions. # Try this loop to look for a pattern like the one above while true; do printf \\r%5s%5s $(cat /proc/sys/kernel/random/entropy_avail) bits; done ------=_NextPart_000_004B_01D3D5A5.1E6211A0 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIh1TCCBckw ggOxoAMCAQICBQD2V+DAMA0GCSqGSIb3DQEBDQUAMHwxCzAJBgNVBAYTAkNBMRswGQYDVQQKDBJC bGFja0JlcnJ5IExpbWl0ZWQxIjAgBgNVBAsMGUJsYWNrQmVycnkgRW50ZXJwcmlzZSBQS0kxLDAq BgNVBAMMI0JsYWNrQmVycnkgRW50ZXJwcmlzZSBSU0EgUm9vdCBDQSAxMB4XDTEzMTIxMzE3NDU0 N1oXDTM4MTIxMzE3NDU0N1owfDELMAkGA1UEBhMCQ0ExGzAZBgNVBAoMEkJsYWNrQmVycnkgTGlt aXRlZDEiMCAGA1UECwwZQmxhY2tCZXJyeSBFbnRlcnByaXNlIFBLSTEsMCoGA1UEAwwjQmxhY2tC ZXJyeSBFbnRlcnByaXNlIFJTQSBSb290IENBIDEwggIgMA0GCSqGSIb3DQEBAQUAA4ICDQAwggII AoICAQDGRcB/8QfFrWiS6iI+cqEd5oN9JFerfmDskffgyqIzZzEywv5Yx7/zv3YMsQB7kuYUtRGa uQGKrCDOSul6MXVYFRqqszScZKTFN873LBcUcpmcrbDLET6410g3krO7OKMQUmmcfFql0mCTxWay BKef7BPJEXwn/YOxopXtQ9g2SgYZm0KCAjoOH3Yb0BQrNkFKN9plF/BK0S/brBWAzwKKpJo7YW7B iuK75OjTfIM2ILRc5oZs8vI8B3IltjvUG53dFATXByJBXScvBefIIGYMrXbs2SN17BjicAVNW4pp NUKoB0YpGjmJ3LClIeSdnLTUC84k268v8GQ302/2d+V6VKaXlMk2F9JraENGYe+vT4mez4Co5ELZ aW8LJtEYeSZOOlgssychWms0FY8IIToH9Fqgu9xO8N5TAFWipjMtJ8tPqMChdVwkz5dP3jxPMCAI pwmDii6mCIy1jIv+iS1qMluemIu1FneNFfaESBFby0llyS+XG2sEbFAthY1V7jw50GFs2c5sHIY3 ajT8YC21+Qzxat2OcI2/lhnV3V5k+oImJxDswvjFHNQ/APW7ti+B1VEWJ0HcKzEz2eeWdqYxhZAh XmdS7Ir/U1ROIASEYFg6wt56aC8/PjVOyMRG6NvMdyPwwzfMx3CFavzoOnXb3YL9vDI2AyY59WCw edlGcQIBA6NUMFIwDwYDVR0TAQH/BAUwAwEB/zAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFPhp ifhjnu9oXoEwYnBSow7dspYIMBAGCSsGAQQBgjcVAQQDAgEAMA0GCSqGSIb3DQEBDQUAA4ICAQCs FUaj+ZL3/7JbMYjTdp7mixMW3e/ZpxBWPU6upIAFlBdN05eMkvfVDhAkAFmXCWXMp4iUWd7dz3Kf f2LdAyGhKOqSfg2Ns+MqKLLM4ugjQ8arlRNC2kabtf8RpeRxgMWGsgecZ8L12YHlZ67AzBd+YrBS 2Is+GC2CMYGqTFI6IUVsFQGIsaz+a4TghhsokY8qqKU4Eul4rUrKnzNciskstDTPOQrpORDHpFQt D6nHeB5LlRaSuwVcIcr/H28HEffXc7tFXu+/C3Y6lzQcXD0vMXnSOJ7/CrH0cPe2bQaC+oMBpu2V qjVXWZ8umTyT6etZ3nz1llIeZAxUW/MROetLQFLjBmywiY5EBu/q1UIdlJ/qC7VcCmfExowfLyqY v2V+ShNrEXtzHPPCuPk/j1eP6fg1lP3kbJg0ChTcCEAWtBX4foFcVM4c1f8Au5thaDnH7G4kWL7s dNxoKNnONIYtYbeSKWqfomRPbb2OBgKXM3wTKV6Ze/fLPW9WNdtNFk0Mr0b+nUmPZLGUEL+ZMG95 0BNuQgxWblbOXxwTesin4D2Vn5tL0J9XHk62EdDFefR+5UJqRanhr4pOxO0WWpu1Ux6x1xRDW4yT xNqnXVfjduQDJfbmXvp6PG5UJlhlo7FkW3rz1tWpEWHgOPJ9qAJG7rl5CA67TXdpmIBzbyJYITCC B0kwggYxoAMCAQICClZxDY0AAAACH3EwDQYJKoZIhvcNAQELBQAwVjETMBEGCgmSJomT8ixkARkW A25ldDETMBEGCgmSJomT8ixkARkWA3JpbTEqMCgGA1UEAxMhQmxhY2tCZXJyeSBDb3Jwb3JhdGUg SXNzdWluZyBDQSAxMB4XDTE4MDIwODE5MjQwMVoXDTE5MDIwODE5MjQwMVowgakxEzARBgoJkiaJ k/IsZAEZFgNuZXQxEzARBgoJkiaJk/IsZAEZFgNyaW0xDTALBgNVBAsTBEFNRVIxCzAJBgNVBAsT AkNBMRQwEgYDVQQLEwtNaXNzaXNzYXVnYTEOMAwGA1UECxMFVXNlcnMxEjAQBgNVBAMTCURhbiBC cm93bjEnMCUGCSqGSIb3DQEJARYYZGFuaWJyb3duQGJsYWNrYmVycnkuY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohJqrR7zCc/JYInUzai/eVD0K2w8BxWQp42YEU4kNA1sCBCJ BI4/7pNSTAnJTG0yMSoyuBbP8mky6PDlo5PYnCCtXmWha8lJBUuAJ9OHzJwDP9ScBCeCam2MQ2Yu rxW52026C/V93IWR8hEY5YEN0ikdCQU+aYMsLXGnt50z4+Kxq0xcPN54N8IsdY7Fa17x/GzV/Dlv vAMlQDPkAAEwNI96az0Wr0YEvZLgAnuwZH9tnWzsO28M4W0r9x+wPRYkSlsavJF2t5UNCA8ZD5Yy b7+NwLKlmfWEQ2fjwT7yl0RsfkF1sOHNdd51ymmO7GSh4X4L7QHOenRA+hYF4LT6GwIDAQABo4ID wzCCA78wPQYJKwYBBAGCNxUHBDAwLgYmKwYBBAGCNxUIh7+XS4a5gSSGwYEyg9vyJYLc2AGBALHD Koef9EACAWQCAQcwHQYDVR0lBBYwFAYIKwYBBQUHAwQGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw TwYDVR0gAQH/BEUwQzBBBgorBgEEAZtKEwECMDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly9jcC5yaW0u bmV0L2Nwcy9DUFN0YXRlbWVudC5odG0wJwYJKwYBBAGCNxUKBBowGDAKBggrBgEFBQcDBDAKBggr BgEFBQcDAjALBgNVHQ8EBAMCBsAwHQYDVR0OBBYEFL/Dm4ZZ67qzpYa3/pf8WhtppWOtMB8GA1Ud IwQYMBaAFBovS0vbB8lJO4nWMggnop4L8w9rMIIBMgYDVR0fBIIBKTCCASUwggEhoIIBHaCCARmG QGh0dHA6Ly9jcmwucmltLm5ldC9CbGFja0JlcnJ5JTIwQ29ycG9yYXRlJTIwSXNzdWluZyUyMENB JTIwMS5jcmyGgdRsZGFwOi8vL0NOPUJsYWNrQmVycnklMjBDb3Jwb3JhdGUlMjBJc3N1aW5nJTIw Q0ElMjAxLENOPU1DQTAxMENOQyxDTj1DRFAsQ049UHVibGljJTIwS2V5JTIwU2VydmljZXMsQ049 U2VydmljZXMsQ049Q29uZmlndXJhdGlvbixEQz13aW5kb3dzLERDPWxvY2FsP2NlcnRpZmljYXRl UmV2b2NhdGlvbkxpc3Q/YmFzZT9vYmplY3RDbGFzcz1jUkxEaXN0cmlidXRpb25Qb2ludDCCAQMG CCsGAQUFBwEBBIH2MIHzMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5yaW0ubmV0L29jc3AwgcoG CCsGAQUFBzAChoG9bGRhcDovLy9DTj1CbGFja0JlcnJ5JTIwQ29ycG9yYXRlJTIwSXNzdWluZyUy MENBJTIwMSxDTj1BSUEsQ049UHVibGljJTIwS2V5JTIwU2VydmljZXMsQ049U2VydmljZXMsQ049 Q29uZmlndXJhdGlvbixEQz13aW5kb3dzLERDPWxvY2FsP2NBQ2VydGlmaWNhdGU/YmFzZT9vYmpl Y3RDbGFzcz1jZXJ0aWZpY2F0aW9uQXV0aG9yaXR5ME0GA1UdEQRGMESgKAYKKwYBBAGCNxQCA6Aa DBhkYW5pYnJvd25AYmxhY2tiZXJyeS5jb22BGGRhbmlicm93bkBibGFja2JlcnJ5LmNvbTANBgkq hkiG9w0BAQsFAAOCAQEAyAMjuNH2sn+U8uhj30d48XfUYSaIR1Z/nGgiJcMbREyoP1H9lIM9jYrL GjzUQ7IIT7xRfRfV8aEKec3gL9xPqyhMaAXv1TiQnG8Xo7d1pHyh9gZRXdv/khGyTNd2Y/4Pf100 cg+INLDZfFnuQ/r/x9yBZqrM9d612GLtrBC/MEnJmxwL+SrcdLO7GT4w4uzeyzTUe32+WM6dlu9O h+8c4c+wTlBU5D6HDN8L5mDgYkBSv5ok8FjsK0hp9ggb2skeXZrdTeiOnHJDvmfYp5BXHBFPyivz hcfYja7P8wUTSKivxVVNTGBLXBhGvj2xTiEblt5lzmCq0aVecHUnP9/cvzCCCAUwggXtoAMCAQIC BEMVWF8wDQYJKoZIhvcNAQENBQAwfDELMAkGA1UEBhMCQ0ExGzAZBgNVBAoMEkJsYWNrQmVycnkg TGltaXRlZDEiMCAGA1UECwwZQmxhY2tCZXJyeSBFbnRlcnByaXNlIFBLSTEsMCoGA1UEAwwjQmxh Y2tCZXJyeSBFbnRlcnByaXNlIFJTQSBSb290IENBIDEwHhcNMTQwMjI2MTYyMzU2WhcNMjQwMjI2 MTYyMzU2WjB5MQswCQYDVQQGEwJDQTEbMBkGA1UECgwSQmxhY2tCZXJyeSBMaW1pdGVkMSIwIAYD VQQLDBlCbGFja0JlcnJ5IEVudGVycHJpc2UgUEtJMSkwJwYDVQQDDCBCbGFja0JlcnJ5IENvcnBv cmF0ZSBQb2xpY3kgQ0EgMTCCAiAwDQYJKoZIhvcNAQEBBQADggINADCCAggCggIBALom9kCQ+lPa 4g4nzDj+EFbwiF3CYO2/MwRWadgSaavVydBoPc1VIjEN80UbZ1VV5kkHiqYvAuSMx/R2AOgu1o9F qpnaRb59a4R5aobixHEIhYyCt2mmRCgJ6dYYiJbtDn1t00uT0yyI/YU+AUxWFK9c3fy+X20ASyxA ObA9Wev2cFsGFbg6dozYkPDQHlgSczJcEnCyUD6fhgM5N/NsgHmvN3OQb8LL5Kzs204QgbUd966v lHOu6ppVEg2xuTzzhPVONHirYEyFMTa5KNoA1eSX4gzVix+YiAKP8AqvgqEQB4zi2jXSYDzd9RUt nOflg+jz+OKTNDSpOB7/tiPa959++RiRYbWlkYm+Wh+X9uL/ra+uatOTH2UMosyXnO4ryoXOe9JZ WGe0awdY7Rkj65LPmHsCWvR05N1M6vX5JHZLOov65F7J/ZWLLCIAR/sm1mPhBTauU3uvE6JK5/ub PQPxF6UDpNdoaUB7+rfmSoBxyIlmMy6A7v5cbZyHONyLlz+r4sklPDPcz5CBIjbUyFNzK0KK0GXR YVKD++YTbqdCe6vKFZSg2+vIYQ/bFqtp7+gKIpmjjWdzotxVcKgl+r+kTk4pSECLU39Efbo50Nve Q6N0N0sgpj/JVOF53XMRKy4JQ2SDL0A+PkuBL3mdIb+hD0uUsvmDhhB3xavB0UhlAgEDo4ICkjCC Ao4wEgYDVR0TAQH/BAgwBgEB/wIBATAOBgNVHQ8BAf8EBAMCAQYwHQYDVR0OBBYEFDu4wXcNnq1D WPwlrhXQt/KRMoWbMB8GA1UdIwQYMBaAFPhpifhjnu9oXoEwYnBSow7dspYIMIGGBggrBgEFBQcB AQR6MHgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnJpbS5uZXQvb2NzcDBQBggrBgEFBQcwAoZE aHR0cDovL2NydC5yaW0ubmV0L0JsYWNrQmVycnklMjBFbnRlcnByaXNlJTIwUlNBJTIwUm9vdCUy MENBJTIwMS5jcnQwggE3BgNVHR8EggEuMIIBKjCCASagggEioIIBHoZEaHR0cDovL2NybC5yaW0u bmV0L0JsYWNrQmVycnklMjBFbnRlcnByaXNlJTIwUlNBJTIwUm9vdCUyMENBJTIwMS5jcmyGgdVs ZGFwOi8vL0NOPUJsYWNrQmVycnklMjBFbnRlcnByaXNlJTIwUlNBJTIwUm9vdCUyMENBJTIwMSxD Tj1Sb290Q0EsQ049Q0RQLENOPVB1YmxpYyUyMEtleSUyMFNlcnZpY2VzLENOPVNlcnZpY2VzLENO PUNvbmZpZ3VyYXRpb24sREM9d2luZG93cyxEQz1sb2NhbD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25M aXN0P2Jhc2U/b2JqZWN0Q2xhc3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnQwNwYDVR0gBDAwLjAsBgRV HSAAMCQwIgYIKwYBBQUHAgEWFmh0dHA6Ly9jcC5yaW0ubmV0L2Nwcy8wEAYJKwYBBAGCNxUBBAMC AQAwGQYJKwYBBAGCNxQCBAweCgBTAHUAYgBDAEEwDQYJKoZIhvcNAQENBQADggIBALfxM34RYrFM 8E5/7K7T54kPvkcjQrX9Vtf7+CTHHG2EH7SuFoFWsnNTeP+J8TxJP0hxz4mA5FnMKNlhTPsuP0Nu /Fu1R1okaLsIeOPGAWbtpCQ9fYG+lgeONh5DTfj1uhrLDDUAbqJfjYX8ab4/j9RPgm/mWjlR6nMz PyaCc6cASqnOjs0VSLFdmctNMwvqDwKj4qnCX+AM61Nxd2K3ZITiq6BQIj37hQh07lwgVQra+S56 /cmyO5QKXSnyD/n3U/IPEhShFa30j7yeR4OZ2Gv8vK6HY5jzY5eoJztN089F0l2jSdYIlm47E+sr Vwk88z8UwzsTBKu5LWYVsywfJdyZQF1+bwu52Q8c+mzMaVDZwBwQ3ODIYJ3Y5aWCCmn7Lfkkij14 qcsLkEaKjp6ejoy980wzkPMivmGhV8uxslS+UgjA5qqFZY8iOJAmBLy8ABkE42HoBdezxMCya7TK 3ZxKnTQe9RYDImLx45VQ6K75/uJddTD7GERw7KCCjgmYniD6ozzDPHylziygpUzHhItdeVH+47dE 1nlk1pVzf6oiqDgRuEY1DHIIYKEVh6Zi9F0uaOo7SwZ+h9hqpF2EgGkpliTu8M7CPRlK3OBNPnk4 BgXSNj4D1FdKK7rGbTgXcL/YbtLX2weWErbw+uN/UCG7k3BOelop0zlSJfj9KsotMIIMrjCCCpag AwIBAgIECxEcnDANBgkqhkiG9w0BAQsFADB5MQswCQYDVQQGEwJDQTEbMBkGA1UECgwSQmxhY2tC ZXJyeSBMaW1pdGVkMSIwIAYDVQQLDBlCbGFja0JlcnJ5IEVudGVycHJpc2UgUEtJMSkwJwYDVQQD DCBCbGFja0JlcnJ5IENvcnBvcmF0ZSBQb2xpY3kgQ0EgMTAeFw0xNDA0MTcxODA4MjVaFw0xOTA0 MTcxODA4MjVaMFYxEzARBgoJkiaJk/IsZAEZFgNuZXQxEzARBgoJkiaJk/IsZAEZFgNyaW0xKjAo BgNVBAMTIUJsYWNrQmVycnkgQ29ycG9yYXRlIElzc3VpbmcgQ0EgMTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBANUcv8oSAXw3NNOhPMafhnN2N+8xE31gbXNo+R6TBeuSdZEo5PDfR+PD ps/sIXrSecnAZJWGhDUOQ2pXPRk8jfl0lbcQERTI1UC04Zv5+I2YOw4qTaBt77PAtvW22s3sE6Ag O6okqW6NQFjEGToKXjgo6grBLO6/G4Uc/tPqh6/bcmH4NmaSbszrSJUsPMeNyEWu7r3orxu9KJzM nDQBWpbKZq6l4W96mut0lTPXL8bRDQah5nc0UfRrMzwlLowHtLPXM7/1J2XG+tG7SYIQ3wQ6BRN8 bWXWwMguzsiEz2BQEX60cml4Vz7G5IenHuymRHOERKa4UPiH7oggn8HtKh8CAwEAAaOCCF8wgghb MBIGA1UdEwEB/wQIMAYBAf8CAQAwDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBQaL0tL2wfJSTuJ 1jIIJ6KeC/MPazAfBgNVHSMEGDAWgBQ7uMF3DZ6tQ1j8Ja4V0LfykTKFmzCBgQYIKwYBBQUHAQEE dTBzMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5yaW0ubmV0L29jc3AwSwYIKwYBBQUHMAKGP2h0 dHA6Ly9jcnQucmltLm5ldC9CbGFja0JlcnJ5JTIwQ29ycG9yYXRlJTIwUG9saWN5JTIwQ0ElMjAx LmNydDCCASwGA1UdHwSCASMwggEfMIIBG6CCARegggEThj9odHRwOi8vY3JsLnJpbS5uZXQvQmxh Y2tCZXJyeSUyMENvcnBvcmF0ZSUyMFBvbGljeSUyMENBJTIwMS5jcmyGgc9sZGFwOi8vL0NOPUJs YWNrQmVycnklMjBDb3Jwb3JhdGUlMjBQb2xpY3klMjBDQSUyMDEsQ049U3ViQ0EsQ049Q0RQLENO PVB1YmxpYyUyMEtleSUyMFNlcnZpY2VzLENOPVNlcnZpY2VzLENOPUNvbmZpZ3VyYXRpb24sREM9 d2luZG93cyxEQz1sb2NhbD9jZXJ0aWZpY2F0ZVJldm9jYXRpb25MaXN0P2Jhc2U/b2JqZWN0Q2xh c3M9Y1JMRGlzdHJpYnV0aW9uUG9pbnQwggYSBgNVHSAEggYJMIIGBTBBBgorBgEEAZtKFAIBMDMw MQYIKwYBBQUHAgEWJWh0dHA6Ly9jcC5yaW0ubmV0L2Nwcy9DUFN0YXRlbWVudC5odG0wQQYKKwYB BAGbShMBAzAzMDEGCCsGAQUFBwIBFiVodHRwOi8vY3AucmltLm5ldC9jcHMvQ1BTdGF0ZW1lbnQu aHRtMEEGCisGAQQBm0oTAQIwMzAxBggrBgEFBQcCARYlaHR0cDovL2NwLnJpbS5uZXQvY3BzL0NQ U3RhdGVtZW50Lmh0bTBBBgorBgEEAZtKEwEBMDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly9jcC5yaW0u bmV0L2Nwcy9DUFN0YXRlbWVudC5odG0wQQYKKwYBBAGbShMCAzAzMDEGCCsGAQUFBwIBFiVodHRw Oi8vY3AucmltLm5ldC9jcHMvQ1BTdGF0ZW1lbnQuaHRtMEEGCisGAQQBm0oTAgIwMzAxBggrBgEF BQcCARYlaHR0cDovL2NwLnJpbS5uZXQvY3BzL0NQU3RhdGVtZW50Lmh0bTBBBgorBgEEAZtKEwIB MDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly9jcC5yaW0ubmV0L2Nwcy9DUFN0YXRlbWVudC5odG0wQQYK KwYBBAGbShMDAzAzMDEGCCsGAQUFBwIBFiVodHRwOi8vY3AucmltLm5ldC9jcHMvQ1BTdGF0ZW1l bnQuaHRtMEEGCisGAQQBm0oTAwIwMzAxBggrBgEFBQcCARYlaHR0cDovL2NwLnJpbS5uZXQvY3Bz L0NQU3RhdGVtZW50Lmh0bTBBBgorBgEEAZtKEwMBMDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly9jcC5y aW0ubmV0L2Nwcy9DUFN0YXRlbWVudC5odG0wQQYKKwYBBAGbShMEADAzMDEGCCsGAQUFBwIBFiVo dHRwOi8vY3AucmltLm5ldC9jcHMvQ1BTdGF0ZW1lbnQuaHRtMEEGCisGAQQBm0oTBQMwMzAxBggr BgEFBQcCARYlaHR0cDovL2NwLnJpbS5uZXQvY3BzL0NQU3RhdGVtZW50Lmh0bTBBBgorBgEEAZtK EwUCMDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly9jcC5yaW0ubmV0L2Nwcy9DUFN0YXRlbWVudC5odG0w QQYKKwYBBAGbShMFATAzMDEGCCsGAQUFBwIBFiVodHRwOi8vY3AucmltLm5ldC9jcHMvQ1BTdGF0 ZW1lbnQuaHRtMEEGCisGAQQBm0oTBgMwMzAxBggrBgEFBQcCARYlaHR0cDovL2NwLnJpbS5uZXQv Y3BzL0NQU3RhdGVtZW50Lmh0bTBBBgorBgEEAZtKEwYCMDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly9j cC5yaW0ubmV0L2Nwcy9DUFN0YXRlbWVudC5odG0wQQYKKwYBBAGbShMGATAzMDEGCCsGAQUFBwIB FiVodHRwOi8vY3AucmltLm5ldC9jcHMvQ1BTdGF0ZW1lbnQuaHRtMEEGCisGAQQBm0oTBwMwMzAx BggrBgEFBQcCARYlaHR0cDovL2NwLnJpbS5uZXQvY3BzL0NQU3RhdGVtZW50Lmh0bTBBBgorBgEE AZtKEwcCMDMwMQYIKwYBBQUHAgEWJWh0dHA6Ly9jcC5yaW0ubmV0L2Nwcy9DUFN0YXRlbWVudC5o dG0wQQYKKwYBBAGbShMHATAzMDEGCCsGAQUFBwIBFiVodHRwOi8vY3AucmltLm5ldC9jcHMvQ1BT dGF0ZW1lbnQuaHRtMEEGCisGAQQBm0oTCAMwMzAxBggrBgEFBQcCARYlaHR0cDovL2NwLnJpbS5u ZXQvY3BzL0NQU3RhdGVtZW50Lmh0bTBBBgorBgEEAZtKEwgCMDMwMQYIKwYBBQUHAgEWJWh0dHA6 Ly9jcC5yaW0ubmV0L2Nwcy9DUFN0YXRlbWVudC5odG0wQQYKKwYBBAGbShMIATAzMDEGCCsGAQUF BwIBFiVodHRwOi8vY3AucmltLm5ldC9jcHMvQ1BTdGF0ZW1lbnQuaHRtMBAGCSsGAQQBgjcVAQQD AgEAMBkGCSsGAQQBgjcUAgQMHgoAUwB1AGIAQwBBMA0GCSqGSIb3DQEBCwUAA4ICAQAeVuw/L3Zy FbBCOhKq5sL9OrBp4G1j4r6C2WJN2BuAoN4fOdzw7H27Y60d8otCRquP8G/AvQ43dJCsE7kld10v tOs2L4T17T3OHxVoMEU39zoIjgu3x7pVUWNf6HCd3QDwWbQZrLIpPWh4ipvIRipQlizCBfDxmbsJ H/BBiiWl5RC7fnWHbEfdbbHPDWyZ/9CsM2XpGdMgYg82LXWBUzGbKSwtoya0wHEEMlhM9D5MaQkm DmYwJOI9m+ryyZMnYYo28ZvW6khFl/Frd/Y77aSOIgtNTXQ+S86xW4PBJJ1jqoal1xt4jYrWWRBE 0wvpZygMoRFCRMsBGvr/r5rqZ9QcN+OX3tmUOC2rtqH9qQKzABJCDetqB16Oyynx1cvUN/x3p1LM Cd3YcqE4ppRxwvX+377msqZamYjHRMuwM1I2RpuVbMdbEwTIHeb17WgRmHkRWF1yKf1XRxN9ywp0 BzkK0tBvN+yMjJSXiZITYAb0U6WxrtEHWdr1CyJPuSrUzwkx0NdCrImlvwo6froM5h3crRXhUgkm +eNPZhiZ2cBG2OaOX8XKUtounkbqVEbblUy1tLIaxUwYw2j+BcKWrbQsoW798S37b7hJWVVE048I gOfRemUiP7yZ5nh0+SQ6+jTVRaWAba8nawivkrv0ja/k1QwzZD9p7nUSvmizKhbCYzGCAiwwggIo AgEBMGQwVjETMBEGCgmSJomT8ixkARkWA25ldDETMBEGCgmSJomT8ixkARkWA3JpbTEqMCgGA1UE AxMhQmxhY2tCZXJyeSBDb3Jwb3JhdGUgSXNzdWluZyBDQSAxAgpWcQ2NAAAAAh9xMAkGBSsOAwIa BQCggZ4wGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTgwNDE2MjEw NTI3WjAjBgkqhkiG9w0BCQQxFgQUF9UFLk91tXLCGc/yX+C139/wfFIwPwYJKoZIhvcNAQkPMTIw MDAHBgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATANBgkqhkiG 9w0BAQEFAASCAQB+8WeKsbAzqj+NRj6A5oehIKVAz3w7W+W+LNAM8NHduLSCzUagqUr9jQhLGy0P P6cjWuNsS8MsIcmA35E+D1QemPiWToFv43mOTGgVJZkWVvFvs5oQyyPccOx8kTY5fEv3sQ2SaDRk R3Qcq0swvgQLM9gJcbVzmF6u4qi9MIpvU+XIGrLulQeeNWTglC7/HZgEY33rt2qYJi1MBiiVt6hD VUZrpwD1LS/BPnVrUBWDDgz0MrEVgFwf1mkgRW1YWFG2qhR54R/KvptPpBe4n9pW8ZdKWxNz/vbr oAt9FBUqji4LgCMgwO3/b/pXp9LIVxPThkhZhf32zjergc+QSgTTAAAAAAAA ------=_NextPart_000_004B_01D3D5A5.1E6211A0--