From nobody Mon May 5 14:33:10 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DD1341A01C1 for ; Mon, 5 May 2014 14:33:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.557 X-Spam-Level: X-Spam-Status: No, score=-1.557 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, IP_NOT_FRIENDLY=0.334, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001, T_FSL_HELO_BARE_IP_2=0.01] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YdE8WD9EJ7gP for ; Mon, 5 May 2014 14:33:07 -0700 (PDT) Received: from gateway06.websitewelcome.com (gateway06.websitewelcome.com [69.93.154.20]) by ietfa.amsl.com (Postfix) with ESMTP id 649BE1A011A for ; Mon, 5 May 2014 14:33:07 -0700 (PDT) Received: by gateway06.websitewelcome.com (Postfix, from userid 5007) id A69F04882347F; Mon, 5 May 2014 16:33:03 -0500 (CDT) Received: from gator3286.hostgator.com (gator3286.hostgator.com [198.57.247.250]) by gateway06.websitewelcome.com (Postfix) with ESMTP id 2DE0D48823202 for ; Mon, 5 May 2014 16:33:03 -0500 (CDT) Received: from [96.231.225.192] (port=55549 helo=192.168.1.4) by gator3286.hostgator.com with esmtpsa (TLSv1:AES128-SHA:128) (Exim 4.82) (envelope-from ) id 1WhQVS-0002Ml-7J for dtls-iot@ietf.org; Mon, 05 May 2014 16:33:02 -0500 Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 7.2 \(1874\)) From: Sean Turner In-Reply-To: <20140331191041.31628.28322.idtracker@ietfa.amsl.com> Date: Mon, 5 May 2014 17:33:00 -0400 Content-Transfer-Encoding: quoted-printable Message-Id: <54EFD370-8916-4FCF-8FE1-8154964FB31E@ieca.com> References: <20140331191041.31628.28322.idtracker@ietfa.amsl.com> To: dtls-iot@ietf.org X-Mailer: Apple Mail (2.1874) X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - gator3286.hostgator.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - ieca.com X-BWhitelist: no X-Source-IP: 96.231.225.192 X-Exim-ID: 1WhQVS-0002Ml-7J X-Source: X-Source-Args: X-Source-Dir: X-Source-Sender: (192.168.1.4) [96.231.225.192]:55549 X-Source-Auth: sean.turner@ieca.com X-Email-Count: 2 X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IzMjg2Lmhvc3RnYXRvci5jb20= Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/2e92HHup7TOh8yrHrOxIVlxW-Ys Subject: Re: [Dtls-iot] I-D Action: draft-ietf-dice-profile-00.txt X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 May 2014 21:33:09 -0000 HI, Some comments on the profile. I only got to s9. My general comment is that it would be great if there was one section = that listed the differences between the base specification requirements = and this/these profile/profiles. 0) abstract/s1/s2: Probably being pedantic here but aren=92t there = really a number of different profiles in this drat? There=92s 3 sections and I = assume an implementer is just going to pick the one that suites there needs = right and not all of =91em? 1) s1: The first sentence says =93communications security=94 and later =93channel security=94 is used. I guess I=92d just pick one and stick = with it. 2) s1: I=92m not sure how the 1st goal is really do-able. If it=92s = one-stop shop then I don=92t have to go read any of the other = specifications and this draft really can=92t do. Maybe it=92s just that = you want to provide a =93roadmap=94 to help implementers figure out = where to go to find more detail? Maybe: OLD: o One-stop shop for implementers through the specification jungle. o This document does not alter the DTLS 1.2 specification. o This document does not introduce new extensions. o This profile aligns with the DTLS security modes of the Constrained Application Protocol (CoAP) [I-D.ietf-core-coap]. NEW: o Serve as a one-stop shop for implementers to know which pieces of the specification jungle contain relevant details. o Not alter the DTLS specification. o Not introduce any new extensions. o Align with the DTLS security modes of the =85. Constrained Application Protocol (CoAP) [I-D.ietf-core-coap]. 3) s1: I think =93using=94 isn=92t needed in the following sentence: r/CoAP can be secured using a number of different ways,/ CoAP can be secured a number of different ways, 4) s1: A pointer to the later sections would nice right before the intro = to the different security modes: OLD: These security modes are: NEW: These security modes are as follows, see Sections 4-6 for additional = details: 5) s1, shared secret bullet: The bullets are about methods so maybe: r/This credential/This mode=20 6) s1, cert-based bullet: In the following, maybe the 1st sentence should be about =93cryptography=94 as opposed to =93credentials=94: r/... using asymmetric credentials/ ... asymmetric cryptography 7) s1, cert-based bullet: r/Two approaches for validating these public key are available./ Two approaches for validating these public keys are available. 8) s1, 1st paragraph after the security mode bullets: Maybe add something about the security services so it leads better in to the next sentences: OLD: As described in [I-D.ietf-lwig-tls-minimal] an application designer developing an IoT device needs to think about the security threats that need to be mitigated.=20 NEW: As described in [I-D.ietf-lwig-tls-minimal], an application designer developing an IoT device needs to consider the security threats and the security services that can be used to mitigate the threats. 9) s1, same paragraph as above but on the 2nd and 3rd sentences: The =93for many=94 sentence makes me wonder about the =93some=94 that = don=92t require authentication - which are those? In the 3rd sentence, the need for confidentiality lead in I understand but maybe the following would work?: =20 OLD: For many Internet connected devices it is, however, likely that authentication of the device and the server infrastructure will be required. Along with the ability to upload sensor data and to retrieve configuration information the need for integrity and confidentiality protection will arise. =20 NEW: Enabling devices to upload data and retrieve configuration = information, inevitably requires that Internet-connected devices be able to authenticate themselves to servers and vice versa as well as to ensure that the data and information exchanged is integrity and = confidentiality protected. 10) s1, intro to DTLS vs TLS: I think you included the list for those not familiar with the differences: r/As a short summary, for those familiar with TLS the differences are:/ As a short summary, for those not familiar with DTLS the differences are: 11) s2, 1st paragraph: When you say =93Which server to contact is pre-configured", I assume you=92re talking about an IP address to directly contact the server or = is it a DNS servers address that will resolve a name? Maybe it doesn=92t matter, but I=92m curious nonetheless. =20 The parenthetical about (in case of symmetric credentials) seems redundant because PSK is the =93symmetric credential=94. The section then later goes on to say the document is just about client-side functionality but the previous paragraph is about some server-side functionality. Would the following work: Clients are preconfigured with the address or addresses of servers (e.g., as part of the firmware) they will communicate with as well as authentication information: o For PSK-based authentication (see Section 4), this includes the paired =93PSK identity=94 and shared secret to be used with each = server. o For raw public key-based authentication (see Section 5), this includes either the server=92s public key or the hash of the server=92s public key. o For certificate-based authentication (see Section 6), this may include a pre-populated trust anchor store that allows the client to perform path validation for the certificate obtained during the handshake with the server. 12) s2: Should this section address how many certificates should be in the TA store? Is there a discussion someplace about explicit vs implicit trust stores (i.e., accept any certificate that chains to = the TA store)? 13) s3: Do we really need an entire section on how to read the ciphersuite? I=92m not entire sure why the last paragraphs are included. 14) I=92m also not sure they were introduced by TLS and the registry isn=92t to keep track of them it=92s to register them ;) = I=92d probably also add somewhere that the registered suites need to indicate whether they apply to TLS, DTLS, or both. OLD: TLS (and consequently DTLS) introduced the concept of ciphersuites and an IANA registry [IANA-TLS] was created to keep track of the specified suites. NEW: TLS (and consequently DTLS) has the concept of ciphersuites and an IANA registry [IANA-TLS] was created to register the suites. 15) s3, r/A ciphersuites/A ciphersuite s3, r/Length(e.g.,/Length (e.g., s3, 5th bullet: r/(e.g./(e.g., 16) s3: Wouldn=92t it be better to describe the TLS_PSK_WITH_AES_128_CCM_8 suite because it=92s the one mandated in [I-D.ietf-core-coap]. 17) s4: I certainly don=92t disagree that PSK is both computational efficient and bandwidth conserving but it=92s probably worth also addressing the downside - i.e., no key management. Shouldn=92t this section address how or maybe if there=92s going to be any ability to key rollover. Kind of like the way s5 discusses firmware/ software update to update the key? 18) s4: Is the server always going to return the cookie? I.e., is it making the following SHOULD in RFC 5347 a MUST: Therefore, DTLS servers SHOULD use the cookie exchange unless there is good reason to believe that amplification is not a threat in their environment. Actually, it might be good to have a section that highlights any requirements that are different than those in the base specifications. 19) s4: Is the following really a MUST NOT: For use with this profile the PSK identities MUST NOT assume a structured format (as domain names, Distinguished Names, or IP addresses have) and a bit-by-bit comparison operation can then be used by the server-side infrastructure. Is the world going to end if I implement a server that does assume a structured format - i.e., shouldn=92t this really be a SHOULD NOT? 20) s4: R/Iot environments/IoT environments 21) s4: Should it be noted that the requirements on the server not = sending PSK identity and the client ignoring it as the same as in 4279? 22) s4: wrt the PSK lengths and identities, don=92t we need to say what = the new requirements are if the old ones don=92t apply? 23) s6: Is cached info required? 24) s6: wrt the question about depths. I think we can safely say fewer = is better ;) 25) s6: wrt multiple OCSP stapling it=92s about an additional handshake = to get the rest of the path=92s status. While multiple OCSP stapling [RFC6961] has recently been introduced as a mechanism to piggyback OCSP request/responses inside the DTLS/TLS handshake to avoid the cost of a separate protocol handshake to determine the entire certificate path=92s status further investigations are needed to determine its suitability for the IoT environment. 26) s7: wrt to error codes, what=92s the behavior for an error received = that are not applicable -silently ignored? 27) s9: Is the MUST NOT requirements a drop dead thing? If I did = implement it would the world end? I think this really ought to be a SHOULD NOT. spt= From nobody Mon May 5 14:45:50 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D2B9B1A064E for ; Mon, 5 May 2014 14:45:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.15 X-Spam-Level: X-Spam-Status: No, score=-1.15 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.651] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id A31hMOVQotm8 for ; Mon, 5 May 2014 14:45:45 -0700 (PDT) Received: from smtp-in1.interdigital.com (smtp-in1.interdigital.com [64.208.228.133]) by ietfa.amsl.com (Postfix) with ESMTP id 27A281A0662 for ; Mon, 5 May 2014 14:45:45 -0700 (PDT) X-ASG-Debug-ID: 1399326340-06daaa09f082510001-roOjxa Received: from smtp-out1.interdigital.com (sahara.interdigital.com [10.0.128.27]) by smtp-in1.interdigital.com with ESMTP id CG1NB5M2pOVzECZn for ; Mon, 05 May 2014 17:45:40 -0400 (EDT) X-Barracuda-Envelope-From: Akbar.Rahman@InterDigital.com Received: from SAM.InterDigital.com ([10.30.2.11]) by smtp-out1.interdigital.com with Microsoft SMTPSVC(6.0.3790.4675); Mon, 5 May 2014 17:45:39 -0400 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01CF68AB.5ACF8B5A" Date: Mon, 5 May 2014 17:45:38 -0400 X-ASG-Orig-Subj: RE: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 Message-ID: In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 Thread-Index: AQHPTchhm7+YxKyF2EiKYxVcXZ3UGJr98qZQgDTHZSA= References: From: "Rahman, Akbar" To: "Marco Tiloca" X-OriginalArrivalTime: 05 May 2014 21:45:39.0652 (UTC) FILETIME=[5B3E0040:01CF68AB] X-Barracuda-Connect: sahara.interdigital.com[10.0.128.27] X-Barracuda-Start-Time: 1399326340 X-Barracuda-URL: http://10.1.245.3:8000/cgi-mod/mark.cgi X-Virus-Scanned: by bsmtpd at interdigital.com X-Barracuda-BRTS-Status: 1 X-Barracuda-Spam-Score: 0.00 X-Barracuda-Spam-Status: No, SCORE=0.00 using per-user scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=9.0 tests=BSF_SC0_MISMATCH_TO, HTML_MESSAGE X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.5562 Rule breakdown below pts rule name description ---- ---------------------- -------------------------------------------------- 0.00 BSF_SC0_MISMATCH_TO Envelope rcpt doesn't match header 0.00 HTML_MESSAGE BODY: HTML included in message Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/TBq5wSTVzROTObc-p3yLL8eamUE Cc: "Kumar, Sandeep" , dtls-iot@ietf.org Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 May 2014 21:45:48 -0000 This is a multi-part message in MIME format. ------_=_NextPart_001_01CF68AB.5ACF8B5A Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Marco, =20 =20 =20 The authors have made an update to the draft to address fully your good question regarding how to handle the unicast responses to the multicast response. Specifically, please review the new section 4.5 and tell us if you have any more questions: =20 =20 http://tools.ietf.org/html/draft-keoh-dice-multicast-security-06#section -4.5 =20 4.5. Unicast Responses to Multicast Messages =20 In CoAP, responses to multicast messages are always sent back as unicast. That is, the group members that receive a multicast message may individually decide to send (or suppress) a unicast response as described in Section 2.5 of [I-D.ietf-core-groupcomm]. The unicast responses to a DTLS-based multicast message may optionally be secure. Specifically, the unicast response may be sent back as a unicast DTLS as described in Section 9.1 of [I-D.ietf-core-coap]. This requires that a unicast DTLS handshake was previously initiated between the multicast message sender and listener. In the extreme scenario, a multicast sender may attempt to initiate the unicast DTLS handshake with all or a subset of known listeners just before or just after it sends out the DTLS-based multicast message. This may result in the multicast sender (i.e. unicast DTLS client) having to process unicast DTLS handshake messages from multiple multicast listeners (i.e. unicast DTLS servers) in a short period. =20 Note: There is an obvious timing and processing load issue for the multicast sender in the scenario where it attempts to initiate the unicast DTLS handshakes with all/some of its known listeners just after it sends out the DTLS-based multicast message. In this case, the processing load in the multicast sender (i.e. unicast DTLS client) is reduced somewhat by the fact that CoAP requires a back-off and randomization of the unicast response by the Leisure timer mechanism as described in Section 8.2 of [I-D.ietf-core-coap]. =20 =20 =20 =20 Best Regards, =20 =20 Akbar =20 =20 =20 From: dtls-iot [mailto:dtls-iot-bounces@ietf.org] On Behalf Of Kumar, Sandeep Sent: Wednesday, April 02, 2014 3:47 AM To: Marco Tiloca; dtls-iot@ietf.org Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 =20 Hi Marco =20 The draft only addresses the protection of multicast traffic. If unicast responses are expected and if protection is required for such messages, then existing unicast protection mechanisms based on DTLS as suggested in draft-ietf-core-coap-18 should be used. Protection of all unicast messages should be treated as would be done normally.=20 =20 Hope that answers your question. =20 Regards Sandeep=20 =20 From: dtls-iot [mailto:dtls-iot-bounces@ietf.org] On Behalf Of Marco Tiloca Sent: Tuesday, April 01, 2014 6:35 PM To: dtls-iot@ietf.org Subject: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 =20 Dear all, =20 As to possible responses to multicast requests, Section 2.1 states that they are sent back in unicast. Then, no further details are provided about their protection. =20 Are such responses supposed to be protected through a "regular" DTLS session, which must be (or has previously been) established between the sender and listener? =20 Cheers, Marco =20 =20 =20 =20 =20 ________________________________ The information contained in this message may be confidential and legally protected under applicable law. The message is intended solely for the addressee(s). If you are not the intended recipient, you are hereby notified that any use, forwarding, dissemination, or reproduction of this message is strictly prohibited and may be unlawful. If you are not the intended recipient, please contact the sender by return e-mail and destroy all copies of the original message. ------_=_NextPart_001_01CF68AB.5ACF8B5A Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Marco,

 

 

 

The authors have made an update to the draft to address fully your = good question regarding how to handle the unicast responses to the = multicast response.  Specifically, please review the new section = 4.5 and tell us if you have any more questions:

 

 

http://tools.ietf.org/html/draft-keoh-dice-multicast-securit= y-06#section-4.5

 

4.5.  Unicast = Responses to Multicast Messages

 

   In = CoAP, responses to multicast messages are always sent back = as

   = unicast.  That is, the group members that receive a multicast = message

   may = individually decide to send (or suppress) a unicast response = as

   = described in Section 2.5 of [I-D.ietf-core-groupcomm].  The = unicast

   = responses to a DTLS-based multicast message may optionally be = secure.

   = Specifically, the unicast response may be sent back as a unicast = DTLS

   as = described in Section 9.1 of [I-D.ietf-core-coap].  This = requires

   that a = unicast DTLS handshake was previously initiated between = the

   = multicast message sender and listener.  In the extreme scenario, = a

   = multicast sender may attempt to initiate the unicast DTLS = handshake

   with = all or a subset of known listeners just before or just after = it

   sends = out the DTLS-based multicast message.  This may result in = the

   = multicast sender (i.e. unicast DTLS client) having to process = unicast

   DTLS = handshake messages from multiple multicast listeners = (i.e.

   = unicast DTLS servers) in a short period.

 

   Note: = There is an obvious timing and processing load issue for = the

   = multicast sender in the scenario where it attempts to initiate = the

   = unicast DTLS handshakes with all/some of its known listeners = just

   after = it sends out the DTLS-based multicast message.  In this = case,

   the = processing load in the multicast sender (i.e. unicast = DTLS

   = client) is reduced somewhat by the fact that CoAP requires a = back-off

   and = randomization of the unicast response by the Leisure = timer

   = mechanism as described in Section 8.2 of = [I-D.ietf-core-coap].

 

 

 

 

Best Regards,

 

 

Akbar

 

 

 

From:= = dtls-iot [mailto:dtls-iot-bounces@ietf.org] On Behalf Of Kumar, = Sandeep
Sent: Wednesday, April 02, 2014 3:47 AM
To: = Marco Tiloca; dtls-iot@ietf.org
Subject: Re: [Dtls-iot] = Unicast responses in = draft-keoh-dice-multicast-security-05

 

Hi Marco

 

The draft only addresses the protection of multicast traffic. If = unicast responses are expected and if protection is required for such = messages, then existing unicast protection mechanisms based on DTLS as = suggested in draft-ietf-core-coap-18 should be used. Protection of all = unicast messages should be treated as would be done normally. =

 

Hope that answers your question.

 

Regards

Sandeep

 

From:= = dtls-iot [mailto:dtls-iot-bounces@ietf.or= g] On Behalf Of Marco Tiloca
Sent: Tuesday, April = 01, 2014 6:35 PM
To: dtls-iot@ietf.org
Subject: [Dtls-iot] Unicast responses in = draft-keoh-dice-multicast-security-05

 

Dear all,

 

As to possible responses to multicast requests, = Section 2.1 states that they are sent back in unicast. Then, no further = details are provided about their protection.

 

Are such responses supposed to be protected through a = "regular" DTLS session, which must be (or has previously been) = established between the sender and listener?

 

Cheers,

Marco

 

 

 

 

 

The= information contained in this message may be confidential and legally = protected under applicable law. The message is intended solely for the = addressee(s). If you are not the intended recipient, you are hereby = notified that any use, forwarding, dissemination, or reproduction of = this message is strictly prohibited and may be unlawful. If you are not = the intended recipient, please contact the sender by return e-mail and = destroy all copies of the original = message.

------_=_NextPart_001_01CF68AB.5ACF8B5A-- From nobody Mon May 5 21:12:57 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 76F731A0700 for ; Mon, 5 May 2014 21:12:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.551 X-Spam-Level: X-Spam-Status: No, score=-2.551 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-0.651, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5BySMJ-B035Z for ; Mon, 5 May 2014 21:12:52 -0700 (PDT) Received: from mout.gmx.net (mout.gmx.net [212.227.15.19]) by ietfa.amsl.com (Postfix) with ESMTP id A4D001A06FA for ; Mon, 5 May 2014 21:12:51 -0700 (PDT) Received: from [192.168.10.130] ([64.134.225.177]) by mail.gmx.com (mrgmx103) with ESMTPSA (Nemesis) id 0LwJko-1WuFA02cIQ-017zn3; Tue, 06 May 2014 06:12:44 +0200 Message-ID: <53686133.5080209@gmx.net> Date: Tue, 06 May 2014 06:12:35 +0200 From: Hannes Tschofenig User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: Sean Turner , dtls-iot@ietf.org References: <20140331191041.31628.28322.idtracker@ietfa.amsl.com> <54EFD370-8916-4FCF-8FE1-8154964FB31E@ieca.com> In-Reply-To: <54EFD370-8916-4FCF-8FE1-8154964FB31E@ieca.com> X-Enigmail-Version: 1.5.2 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="GNrNOPFKwC6ES7ErfpCWbq7CV2the7t3a" X-Provags-ID: V03:K0:UvhBi+yYvaE0ZxljdvO2/iy/ivoRDGc+n1kw0v0qbHkyYz1T5rb tCKFT6QgvDl35h73QLnVpNEIySeg6BGkk+Nx73/2Yv+YvMUgXG2sSGdB95DeP0OmDXe0LW7 S6jVXkkir1CllT7ykTgfvOhFCTikdj3+N9lS3h6iVCrDVJXvHQyLfMquUKIQvaM9te861Wj sNbDAGtx7+spnoXwPLmLQ== Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/SwzJQE6Tb5N_JQv9BRANENSvMbs Subject: Re: [Dtls-iot] I-D Action: draft-ietf-dice-profile-00.txt X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 May 2014 04:12:55 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --GNrNOPFKwC6ES7ErfpCWbq7CV2the7t3a Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Hi Sean, thanks for your review comments. On 05/05/2014 11:33 PM, Sean Turner wrote: > HI, >=20 > Some comments on the profile. I only got to s9. >=20 > My general comment is that it would be great if there was one section > that listed the differences between the base specification > requirements and this/these profile/profiles. >=20 > 0) abstract/s1/s2: Probably being pedantic here but aren=92t there > really a number of different profiles in this drat? There=92s 3 > sections and I assume an implementer is just going to pick the one > that suites there needs right and not all of =91em? It depends what you call a profile. For me it a profile was a reference to the communication model, where a constrained client talks to a regular TLS server. >=20 > 1) s1: The first sentence says =93communications security=94 and later = > =93channel security=94 is used. I guess I=92d just pick one and stick = with > it. Makes sense. >=20 > 2) s1: I=92m not sure how the 1st goal is really do-able. If it=92s > one-stop shop then I don=92t have to go read any of the other > specifications and this draft really can=92t do. Maybe it=92s just tha= t > you want to provide a =93roadmap=94 to help implementers figure out whe= re > to go to find more detail? Maybe: >=20 > OLD: >=20 > o One-stop shop for implementers through the specification jungle. >=20 > o This document does not alter the DTLS 1.2 specification. >=20 > o This document does not introduce new extensions. >=20 > o This profile aligns with the DTLS security modes of the=20 > Constrained Application Protocol (CoAP) [I-D.ietf-core-coap]. >=20 > NEW: >=20 > o Serve as a one-stop shop for implementers to know which pieces of > the specification jungle contain relevant details. >=20 > o Not alter the DTLS specification. >=20 > o Not introduce any new extensions. >=20 > o Align with the DTLS security modes of the =85. Constrained > Application Protocol (CoAP) [I-D.ietf-core-coap]. >=20 Sounds good. > 3) s1: I think =93using=94 isn=92t needed in the following sentence: >=20 > r/CoAP can be secured using a number of different ways,/ CoAP can be > secured a number of different ways, >=20 OK. > 4) s1: A pointer to the later sections would nice right before the > intro to the different security modes: >=20 > OLD: >=20 > These security modes are: >=20 > NEW: >=20 > These security modes are as follows, see Sections 4-6 for additional > details: >=20 OK. > 5) s1, shared secret bullet: The bullets are about methods so maybe: >=20 > r/This credential/This mode OK. >=20 > 6) s1, cert-based bullet: In the following, maybe the 1st sentence=20 > should be about =93cryptography=94 as opposed to =93credentials=94: >=20 > r/... using asymmetric credentials/ ... asymmetric cryptography OK >=20 > 7) s1, cert-based bullet: >=20 > r/Two approaches for validating these public key are available./ Two > approaches for validating these public keys are available. OK >=20 > 8) s1, 1st paragraph after the security mode bullets: Maybe add=20 > something about the security services so it leads better in to the > next sentences: >=20 > OLD: As described in [I-D.ietf-lwig-tls-minimal] an application > designer developing an IoT device needs to think about the security > threats that need to be mitigated. >=20 > NEW: As described in [I-D.ietf-lwig-tls-minimal], an application > designer developing an IoT device needs to consider the security > threats and the security services that can be used to mitigate the > threats. OK. >=20 > 9) s1, same paragraph as above but on the 2nd and 3rd sentences: The > =93for many=94 sentence makes me wonder about the =93some=94 that don=92= t=20 > require authentication - which are those? In the 3rd sentence, the > need for confidentiality lead in I understand but maybe the following > would work?: >=20 > OLD: For many Internet connected devices it is, however, likely that > authentication of the device and the server infrastructure will be > required. Along with the ability to upload sensor data and to > retrieve configuration information the need for integrity and > confidentiality protection will arise. >=20 > NEW: Enabling devices to upload data and retrieve configuration > information, inevitably requires that Internet-connected devices be > able to authenticate themselves to servers and vice versa as well as > to ensure that the data and information exchanged is integrity and > confidentiality protected. OK >=20 > 10) s1, intro to DTLS vs TLS: I think you included the list for > those not familiar with the differences: >=20 > r/As a short summary, for those familiar with TLS the differences=20 > are:/ As a short summary, for those not familiar with DTLS the > differences are: OK >=20 > 11) s2, 1st paragraph: >=20 > When you say =93Which server to contact is pre-configured", I assume=20 > you=92re talking about an IP address to directly contact the server or > is it a DNS servers address that will resolve a name? Maybe it > doesn=92t matter, but I=92m curious nonetheless. It should not matter in context of the DTLS profile as currently described but I guess deployments will benefit from using the additional layer of indirection with DNS. > The parenthetical about (in case of symmetric credentials) seems=20 > redundant because PSK is the =93symmetric credential=94. >=20 > The section then later goes on to say the document is just about=20 > client-side functionality but the previous paragraph is about some=20 > server-side functionality. >=20 > Would the following work: >=20 > Clients are preconfigured with the address or addresses of servers > (e.g., as part of the firmware) they will communicate with as well as > authentication information: >=20 > o For PSK-based authentication (see Section 4), this includes the=20 > paired =93PSK identity=94 and shared secret to be used with each server= =2E >=20 > o For raw public key-based authentication (see Section 5), this=20 > includes either the server=92s public key or the hash of the server=92s= =20 > public key. >=20 > o For certificate-based authentication (see Section 6), this may=20 > include a pre-populated trust anchor store that allows the client to > perform path validation for the certificate obtained during the=20 > handshake with the server. >=20 Looks much better to have this structure. > 12) s2: Should this section address how many certificates should be > in the TA store? Is there a discussion someplace about explicit vs > implicit trust stores (i.e., accept any certificate that chains to > the TA store)? Good question. I am not sure what guidance I should give. >=20 > 13) s3: Do we really need an entire section on how to read the=20 > ciphersuite? I=92m not entire sure why the last paragraphs are=20 > included. I thought it would be useful background information. >=20 > 14) I=92m also not sure they were introduced by TLS and the registry > isn=92t to keep track of them it=92s to register them ;) I=92d probabl= y > also add somewhere that the registered suites need to indicate > whether they apply to TLS, DTLS, or both. >=20 > OLD: TLS (and consequently DTLS) introduced the concept of > ciphersuites and an IANA registry [IANA-TLS] was created to keep > track of the specified suites. >=20 > NEW: TLS (and consequently DTLS) has the concept of ciphersuites and > an IANA registry [IANA-TLS] was created to register the suites. OK. >=20 > 15) s3, r/A ciphersuites/A ciphersuite s3, r/Length(e.g.,/Length > (e.g., s3, 5th bullet: r/(e.g./(e.g., OK. >=20 > 16) s3: Wouldn=92t it be better to describe the=20 > TLS_PSK_WITH_AES_128_CCM_8 suite because it=92s the one mandated in > [I-D.ietf-core-coap]. Makes sense. >=20 > 17) s4: I certainly don=92t disagree that PSK is both computational=20 > efficient and bandwidth conserving but it=92s probably worth also=20 > addressing the downside - i.e., no key management. Shouldn=92t this > section address how or maybe if there=92s going to be any ability to > key rollover. Kind of like the way s5 discusses firmware/ software > update to update the key? In sense sense for the communication model presented in the document the cert, raw public key, and the PSK use is somewhat similar. All require an out-of-band mechanism (such as a firmware update protocol). >=20 > 18) s4: Is the server always going to return the cookie? I.e., is it > making the following SHOULD in RFC 5347 a MUST: >=20 > Therefore, DTLS servers SHOULD use the cookie exchange unless there > is good reason to believe that amplification is not a threat in their > environment. >=20 > Actually, it might be good to have a section that highlights any > requirements that are different than those in the base=20 > specifications. I believe the client stack has to support it since otherwise it will not be able to react on it when the server switches to the DoS protecting mod= e. >=20 > 19) s4: Is the following really a MUST NOT: >=20 > For use with this profile the PSK identities MUST NOT assume a > structured format (as domain names, Distinguished Names, or IP > addresses have) and a bit-by-bit comparison operation can then be > used by the server-side infrastructure. >=20 > Is the world going to end if I implement a server that does assume a=20 > structured format - i.e., shouldn=92t this really be a SHOULD NOT? Re-reading the text, I believe the MUST NOT is indeed a bit strong. >=20 > 20) s4: R/Iot environments/IoT environments OK >=20 > 21) s4: Should it be noted that the requirements on the server not > sending PSK identity and the client ignoring it as the same as in > 4279? >=20 Added it > 22) s4: wrt the PSK lengths and identities, don=92t we need to say what= > the new requirements are if the old ones don=92t apply? I believe the entire discussion regarding PSK lengths and identitis in RFC 4279 are just not applicable because they relate to the provisioning model, which is very different in the embedded environment. At least that's my thinking. >=20 > 23) s6: Is cached info required? Yes. Made this explicit. >=20 > 24) s6: wrt the question about depths. I think we can safely say > fewer is better ;) Yes, certainly ;-) >=20 > 25) s6: wrt multiple OCSP stapling it=92s about an additional handshake= > to get the rest of the path=92s status. True. But for the embedded environment I have not heard anyone who plans to use CRLs or OCSP. Instead the grand plan is to use the (not further specified) software update mechanism.... >=20 > While multiple OCSP stapling [RFC6961] has recently been introduced > as a mechanism to piggyback OCSP request/responses inside the > DTLS/TLS handshake to avoid the cost of a separate protocol handshake > to determine the entire certificate path=92s status further=20 > investigations are needed to determine its suitability for the IoT=20 > environment. >=20 > 26) s7: wrt to error codes, what=92s the behavior for an error received= > that are not applicable -silently ignored? In general, I had the question what a DTLS should be doing with regards to errors anyway. It can only re-try. It will rarely be able to log something or notify the user.. >=20 > 27) s9: Is the MUST NOT requirements a drop dead thing? If I did > implement it would the world end? I think this really ought to be a > SHOULD NOT. I wonder whether a MUST NOT has to be placed on the compression. Ciao Hannes >=20 > spt _______________________________________________ dtls-iot mailing > list dtls-iot@ietf.org=20 > https://www.ietf.org/mailman/listinfo/dtls-iot >=20 --GNrNOPFKwC6ES7ErfpCWbq7CV2the7t3a Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (GNU/Linux) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBCgAGBQJTaGEzAAoJEGhJURNOOiAtIhEH/2V/YRStMVka2JhdCJBPw0DY /Y0JE0cl7Lw/jRW2ie8dOrVLfS5BWw5PjaWXJOZF26EEFD1ZeKCMU8gRvpu4bGXt E/yjesNLjVvN8iIFuzR1hjLmjajewzwcJLxOB5xHkh4w3VFX4/IOMForAmgJdWKU Tl0+j7rPk+T/FWIFaC0z0sizzBKfYFn7ZpUdCFN3shdJJ+NXo7V2bc1bZonLFu05 BI5jVkHtJBy0ahdnuRjcGuYPKFAH32+ua8U6r1MlwWYLgRrevAW7zDrRhXC9iDzd nBNDu0ntbIiPoeIxW8UDoHeTLxqfxEMxOBkRps8MaS9ZsojAc/HFKsCA+znBNrY= =5T5z -----END PGP SIGNATURE----- --GNrNOPFKwC6ES7ErfpCWbq7CV2the7t3a-- From nobody Tue May 6 09:32:02 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C380F1A017E for ; Tue, 6 May 2014 09:31:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.578 X-Spam-Level: X-Spam-Status: No, score=-1.578 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HELO_EQ_SE=0.35, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.651] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k65JuOs_lRwS for ; Tue, 6 May 2014 09:31:53 -0700 (PDT) Received: from fsmsg2.sics.se (fsmsg2.sics.se [IPv6:2001:6b0:3a:1:250:56ff:fea9:52ad]) by ietfa.amsl.com (Postfix) with ESMTP id 8B43A1A0185 for ; Tue, 6 May 2014 09:31:52 -0700 (PDT) Received: from pps.filterd (fsmsg2 [127.0.0.1]) by fsmsg2.sics.se (8.14.5/8.14.5) with SMTP id s46GPmxh013932 for ; Tue, 6 May 2014 18:31:47 +0200 Received: from letter.sics.se (letter.sics.se [193.10.64.6]) by fsmsg2.sics.se with ESMTP id 1kppjugcs5-1 for ; Tue, 06 May 2014 18:31:47 +0200 Received: from mail-wi0-f179.google.com (mail-wi0-f179.google.com [209.85.212.179]) (Authenticated sender: marco@sics.se) by letter.sics.se (Postfix) with ESMTPSA id 4912C40116 for ; Tue, 6 May 2014 18:31:47 +0200 (CEST) Received: by mail-wi0-f179.google.com with SMTP id bs8so1278336wib.6 for ; Tue, 06 May 2014 09:31:45 -0700 (PDT) MIME-Version: 1.0 X-Received: by 10.194.203.170 with SMTP id kr10mr34073186wjc.19.1399393905834; Tue, 06 May 2014 09:31:45 -0700 (PDT) Received: by 10.194.167.67 with HTTP; Tue, 6 May 2014 09:31:45 -0700 (PDT) In-Reply-To: References: Date: Tue, 6 May 2014 18:31:45 +0200 Message-ID: From: Marco Tiloca To: "Rahman, Akbar" Content-Type: multipart/alternative; boundary=047d7b6d87dea8822304f8bdc811 X-Proofpoint-Spam-Reason: safe X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.11.96, 1.0.14, 0.0.0000 definitions=2014-05-06_05:2014-05-06,2014-05-06,1970-01-01 signatures=0 Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/zKz3wJbIvyVAyhOocHQ_O_AEH70 Cc: "Kumar, Sandeep" , dtls-iot@ietf.org Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 May 2014 16:31:57 -0000 --047d7b6d87dea8822304f8bdc811 Content-Type: text/plain; charset=UTF-8 Hello Akbar, Thanks for having considered my question. The new Section 4.5 looks fine to me. Also, I have the two following comments. 1) In order to perform a DTLS handshake before/after sending a multicast message, a sender node should be aware of the group membership, especially what are the listener nodes currently present in the group. Of course, such a group membership may change over time, upon new nodes joining the group. However, Section 3.1 in the draft states that "Any device can in principle decide to listen to any IPv6 multicast address. This also means applications on the other devices do not know, or do not get notified, when new listeners join the network.". Couldn't this be a problem for the suggested approach? 2) An alternative approach to the one suggested in Section 4.5 may consist in a listener node establishing a unicast DTLS session (i.e. starting a DTLS handshake) with the sender node, upon receiving a multicast message for the first time. Best regards, Marco On 5 May 2014 23:45, Rahman, Akbar wrote: > Hi Marco, > > > > > > > > The authors have made an update to the draft to address fully your good > question regarding how to handle the unicast responses to the multicast > response. Specifically, please review the new section 4.5 and tell us if > you have any more questions: > > > > > > > http://tools.ietf.org/html/draft-keoh-dice-multicast-security-06#section-4.5 > > > > 4.5. Unicast Responses to Multicast Messages > > > > In CoAP, responses to multicast messages are always sent back as > > unicast. That is, the group members that receive a multicast message > > may individually decide to send (or suppress) a unicast response as > > described in Section 2.5 of [I-D.ietf-core-groupcomm]. The unicast > > responses to a DTLS-based multicast message may optionally be secure. > > Specifically, the unicast response may be sent back as a unicast DTLS > > as described in Section 9.1 of [I-D.ietf-core-coap]. This requires > > that a unicast DTLS handshake was previously initiated between the > > multicast message sender and listener. In the extreme scenario, a > > multicast sender may attempt to initiate the unicast DTLS handshake > > with all or a subset of known listeners just before or just after it > > sends out the DTLS-based multicast message. This may result in the > > multicast sender (i.e. unicast DTLS client) having to process unicast > > DTLS handshake messages from multiple multicast listeners (i.e. > > unicast DTLS servers) in a short period. > > > > Note: There is an obvious timing and processing load issue for the > > multicast sender in the scenario where it attempts to initiate the > > unicast DTLS handshakes with all/some of its known listeners just > > after it sends out the DTLS-based multicast message. In this case, > > the processing load in the multicast sender (i.e. unicast DTLS > > client) is reduced somewhat by the fact that CoAP requires a back-off > > and randomization of the unicast response by the Leisure timer > > mechanism as described in Section 8.2 of [I-D.ietf-core-coap]. > > > > > > > > > > Best Regards, > > > > > > Akbar > > > > > > > > *From:* dtls-iot [mailto:dtls-iot-bounces@ietf.org] *On Behalf Of *Kumar, > Sandeep > *Sent:* Wednesday, April 02, 2014 3:47 AM > *To:* Marco Tiloca; dtls-iot@ietf.org > *Subject:* Re: [Dtls-iot] Unicast responses in > draft-keoh-dice-multicast-security-05 > > > > Hi Marco > > > > The draft only addresses the protection of multicast traffic. If unicast > responses are expected and if protection is required for such messages, > then existing unicast protection mechanisms based on DTLS as suggested in > draft-ietf-core-coap-18 should be used. Protection of all unicast messages > should be treated as would be done normally. > > > > Hope that answers your question. > > > > Regards > > Sandeep > > > > *From:* dtls-iot [mailto:dtls-iot-bounces@ietf.org] > *On Behalf Of *Marco Tiloca > *Sent:* Tuesday, April 01, 2014 6:35 PM > *To:* dtls-iot@ietf.org > *Subject:* [Dtls-iot] Unicast responses in > draft-keoh-dice-multicast-security-05 > > > > Dear all, > > > > As to possible responses to multicast requests, Section 2.1 states that > they are sent back in unicast. Then, no further details are provided about > their protection. > > > > Are such responses supposed to be protected through a "regular" DTLS > session, which must be (or has previously been) established between the > sender and listener? > > > > Cheers, > > Marco > > > > > > > > > > > ------------------------------ > > The information contained in this message may be confidential and legally > protected under applicable law. The message is intended solely for the > addressee(s). If you are not the intended recipient, you are hereby > notified that any use, forwarding, dissemination, or reproduction of this > message is strictly prohibited and may be unlawful. If you are not the > intended recipient, please contact the sender by return e-mail and destroy > all copies of the original message. > --047d7b6d87dea8822304f8bdc811 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hello Akbar,

Thanks for having consider= ed my question. The new Section 4.5 looks fine to me. Also, I have the two = following comments.

1) In order to perform a DTLS = handshake before/after sending a multicast message, a sender node should be= aware of the group membership, especially what are the listener nodes curr= ently present in the group. Of course, such a group membership may change o= ver time, upon new nodes joining the group. However, Section 3.1 in the dra= ft states that "Any device can in principle decide to listen to any IP= v6 multicast address. This also means applications on the other devices do = not know, or do not get notified, when new listeners join the network."= ;. Couldn't this be a problem for the suggested approach?

2) An alternative approach to the one suggested in Sect= ion 4.5 may consist in a listener node establishing a unicast DTLS session = (i.e. starting a DTLS handshake) with the sender node, upon receiving a mul= ticast message for the first time.

Best regards,
Marco

=



On 5 May 2014 23:45, Rahman, Akbar <= Akbar.Ra= hman@interdigital.com> wrote:

Hi Marco,<= /u>

=C2=A0

=C2=A0

=C2=A0

The authors have ma= de an update to the draft to address fully your good question regarding how= to handle the unicast responses to the multicast response.=C2=A0 Specifica= lly, please review the new section 4.5 and tell us if you have any more que= stions:

=C2=A0

=C2=A0

http://tools.ietf.org/html/draft-keoh-dice-multicast-security-06#sec= tion-4.5

=C2=A0

4.5.=C2=A0 Unicast Responses to Multicast Messages

=C2=A0

=C2=A0=C2= =A0 In CoAP, responses to multicast messages are always sent back as=

=C2=A0=C2=A0 unicast.=C2=A0 That is, the group members tha= t receive a multicast message

=C2= =A0=C2=A0 may individually decide to send (or suppress) a unicast response = as

=C2=A0=C2=A0 described in Section 2.5 of [I-D.ietf-core-gr= oupcomm].=C2=A0 The unicast

= =C2=A0= =C2=A0 responses to a DTLS-based multicast message may optionally be secure= .

=C2=A0=C2=A0 Specifically, the unicast response may be sen= t back as a unicast DTLS

=C2=A0=C2= =A0 as described in Section 9.1 of [I-D.ietf-core-coap].=C2=A0 This require= s

=C2=A0=C2=A0 that a unicast DTLS handshake was previously = initiated between the

=C2=A0=C2=A0= multicast message sender and listener.=C2=A0 In the extreme scenario, a=

=C2=A0=C2=A0 multicast sender may attempt to initiate the = unicast DTLS handshake

=C2=A0=C2= =A0 with all or a subset of known listeners just before or just after it=

=C2=A0=C2=A0 sends out the DTLS-based multicast message.= =C2=A0 This may result in the

=C2= =A0=C2=A0 multicast sender (i.e. unicast DTLS client) having to process uni= cast

=C2=A0=C2=A0 DTLS handshake messages from multiple multica= st listeners (i.e.

=C2=A0=C2=A0 un= icast DTLS servers) in a short period.

=C2=A0

=C2=A0=C2= =A0 Note: There is an obvious timing and processing load issue for the

=C2=A0=C2=A0 multicast sender in the scenario where it att= empts to initiate the

=C2=A0=C2=A0= unicast DTLS handshakes with all/some of its known listeners just

=C2=A0=C2=A0 after it sends out the DTLS-based multicast m= essage.=C2=A0 In this case,

= =C2=A0= =C2=A0 the processing load in the multicast sender (i.e. unicast DTLS

=C2=A0=C2=A0 client) is reduced somewhat by the fact that = CoAP requires a back-off

=C2=A0=C2= =A0 and randomization of the unicast response by the Leisure timer

=C2=A0=C2=A0 mechanism as described in Section 8.2 of [I-D= .ietf-core-coap].

=C2=A0=

=C2=A0

=C2=A0

=C2=A0

Best Regards,

=C2=A0

=C2=A0

Akbar

=C2=A0=

=C2=A0

=C2=A0

From: dtls-iot [mailto:dtls-iot-bounces@ietf.org] On Behalf Of Kumar, Sande= ep
Sent: Wednesday, April 02, 2014 3:47 AM
To: Marco Tiloca; = dtls-iot@ietf.org
Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-mu= lticast-security-05

=C2=A0<= /u>

Hi Marco=

=C2=A0

The draft only addr= esses the protection of multicast traffic. If unicast responses are expecte= d and if protection is required for such messages, then existing unicast pr= otection mechanisms based on DTLS as suggested in draft-ietf-core-coap-18 s= hould be used. Protection of all unicast messages should be treated as woul= d be done normally.

=C2=A0

Hope that answers y= our question.

=C2=A0

Regards

Sandeep

=C2=A0<= /u>

From:= dtls-iot [mailto:dtls-iot-bounces@ietf.org] On Behalf Of Marco= Tiloca
Sent: Tuesday, April 01, 2014 6:35 PM
To: dtls-iot@ietf.org
Subject:= [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05<= u>

=C2=A0

Dear all,

=C2=A0

As to possible= responses to multicast requests, Section 2.1 states that they are sent bac= k in unicast. Then, no further details are provided about their protection.=

=C2=A0

Are such responses supposed to be protected through a &quo= t;regular" DTLS session, which must be (or has previously been) establ= ished between the sender and listener?

=C2=A0

Cheers,

Marco

=C2=A0<= /u>

=C2=A0

=C2=A0

=C2= =A0

=C2=A0=

The information contained in this message may be conf= idential and legally protected under applicable law. The message is intende= d solely for the addressee(s). If you are not the intended recipient, you a= re hereby notified that any use, forwarding, dissemination, or reproduction= of this message is strictly prohibited and may be unlawful. If you are not= the intended recipient, please contact the sender by return e-mail and des= troy all copies of the original message.


--047d7b6d87dea8822304f8bdc811-- From nobody Tue May 6 10:55:03 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6FD7A1A02AC; Tue, 6 May 2014 10:55:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u4QdyXeEi6Mp; Tue, 6 May 2014 10:54:59 -0700 (PDT) Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 11B631A01C4; Tue, 6 May 2014 10:54:59 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 5.4.2 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20140506175459.3558.61263.idtracker@ietfa.amsl.com> Date: Tue, 06 May 2014 10:54:59 -0700 Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/h-M4f-dn4ZJA3915axlPag3lucY Cc: dtls-iot@ietf.org Subject: [Dtls-iot] I-D Action: draft-ietf-dice-profile-01.txt X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 May 2014 17:55:00 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the DTLS In Constrained Environments Working Group of the IETF. Title : A DTLS 1.2 Profile for the Internet of Things Authors : Klaus Hartke Hannes Tschofenig Filename : draft-ietf-dice-profile-01.txt Pages : 21 Date : 2014-05-06 Abstract: This document defines a DTLS profile that is suitable for Internet of Things applications and is reasonably implementable on many constrained devices. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-dice-profile/ There's also a htmlized version available at: http://tools.ietf.org/html/draft-ietf-dice-profile-01 A diff from the previous version is available at: http://www.ietf.org/rfcdiff?url2=draft-ietf-dice-profile-01 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Tue May 6 13:44:29 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C5D821A03EE for ; Tue, 6 May 2014 13:44:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.55 X-Spam-Level: X-Spam-Status: No, score=-2.55 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.651] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BPPoECxkzmnW for ; Tue, 6 May 2014 13:44:24 -0700 (PDT) Received: from smtp-in1.interdigital.com (smtp-in1.interdigital.com [64.208.228.133]) by ietfa.amsl.com (Postfix) with ESMTP id B34801A03D3 for ; Tue, 6 May 2014 13:44:23 -0700 (PDT) X-ASG-Debug-ID: 1399409058-06daaa09ef939f0001-roOjxa Received: from smtp-out1.interdigital.com (sahara.interdigital.com [10.0.128.27]) by smtp-in1.interdigital.com with ESMTP id pK59sm4lcFPOWXgZ for ; Tue, 06 May 2014 16:44:18 -0400 (EDT) X-Barracuda-Envelope-From: Akbar.Rahman@InterDigital.com Received: from SAM.InterDigital.com ([10.30.2.11]) by smtp-out1.interdigital.com with Microsoft SMTPSVC(6.0.3790.4675); Tue, 6 May 2014 16:44:16 -0400 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01CF696B.F2417958" Date: Tue, 6 May 2014 16:44:15 -0400 X-ASG-Orig-Subj: RE: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 Message-ID: In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 Thread-Index: Ac9pSK60kHQwDbt0T9ez8QNoGNKbqAAHwfMg References: From: "Rahman, Akbar" To: "Marco Tiloca" X-OriginalArrivalTime: 06 May 2014 20:44:16.0616 (UTC) FILETIME=[F2650E80:01CF696B] X-Barracuda-Connect: sahara.interdigital.com[10.0.128.27] X-Barracuda-Start-Time: 1399409058 X-Barracuda-URL: http://10.1.245.3:8000/cgi-mod/mark.cgi X-Virus-Scanned: by bsmtpd at interdigital.com X-Barracuda-BRTS-Status: 1 X-Barracuda-Spam-Score: 0.00 X-Barracuda-Spam-Status: No, SCORE=0.00 using per-user scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=9.0 tests=BSF_SC0_MISMATCH_TO, HTML_MESSAGE X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.5592 Rule breakdown below pts rule name description ---- ---------------------- -------------------------------------------------- 0.00 BSF_SC0_MISMATCH_TO Envelope rcpt doesn't match header 0.00 HTML_MESSAGE BODY: HTML included in message Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/3bCWSpYibKn7yxoicooUyRgUuCs Cc: "Kumar, Sandeep" , dtls-iot@ietf.org Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 May 2014 20:44:27 -0000 This is a multi-part message in MIME format. ------_=_NextPart_001_01CF696B.F2417958 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgTWFyY28sDQoNCiANCg0KIA0KDQpUaGFua3MgZm9yIHJldmlld2luZyB0aGUgdXBkYXRlZCBk cmFmdC4gIEFsc28gaGVyZSBpcyBteSBmZWVkYmFjayB0byB5b3VyIHR3byBuZXcgcXVlc3Rpb25z Og0KDQogDQoNCiANCg0KPjEpIEluIG9yZGVyIHRvIHBlcmZvcm0gYSBEVExTIGhhbmRzaGFrZSBi ZWZvcmUvYWZ0ZXIgc2VuZGluZyBhIG11bHRpY2FzdCBtZXNzYWdlLCBhIHNlbmRlcg0KDQo+IG5v ZGUgc2hvdWxkIGJlIGF3YXJlIG9mIHRoZSBncm91cCBtZW1iZXJzaGlwLCBlc3BlY2lhbGx5IHdo YXQgYXJlIHRoZSBsaXN0ZW5lciBub2RlcyBjdXJyZW50bHkNCg0KPiBwcmVzZW50IGluIHRoZSBn cm91cC4gT2YgY291cnNlLCBzdWNoIGEgZ3JvdXAgbWVtYmVyc2hpcCBtYXkgY2hhbmdlIG92ZXIg dGltZSwgdXBvbiBuZXcgbm9kZXMNCj5qb2luaW5nIHRoZSBncm91cC4gSG93ZXZlciwgU2VjdGlv biAzLjEgaW4gdGhlIGRyYWZ0IHN0YXRlcyB0aGF0ICJBbnkgZGV2aWNlIGNhbiBpbiBwcmluY2lw bGUgZGVjaWRlDQoNCj50byBsaXN0ZW4gdG8gYW55IElQdjYgbXVsdGljYXN0IGFkZHJlc3MuIFRo aXMgYWxzbyBtZWFucyBhcHBsaWNhdGlvbnMgb24gdGhlIG90aGVyIGRldmljZXMgZG8gbm90DQoN Cj5rbm93LCBvciBkbyBub3QgZ2V0IG5vdGlmaWVkLCB3aGVuIG5ldyBsaXN0ZW5lcnMgam9pbiB0 aGUgbmV0d29yay4iLiBDb3VsZG4ndCB0aGlzIGJlIGEgcHJvYmxlbQ0KDQo+Zm9yIHRoZSBzdWdn ZXN0ZWQgYXBwcm9hY2g/DQoNCiANCg0KWWVzLCBpbiBwcmluY2lwbGUsIGFueSBkZXZpY2UgY2Fu IGRlY2lkZSB0byBsaXN0ZW4gZm9yIGFueSBJUHY2IG11bHRpY2FzdCBhZGRyZXNzLiAgQnV0IGlu IHByYWN0aWNlIG9mIGNvdXJzZSB0aGVyZSBhcmUgSVB2NiBtdWx0aWNhc3QgcmVsYXRlZCBwcm90 b2NvbHMgZm9yIHJvdXRpbmcvam9pbmluZyB0aGF0IGRpY3RhdGUgd2hvIGNhbiBzdWNjZXNzZnVs bHkgbGlzdGVuIGZvciBhbmQgcmVjZWl2ZSBhbiBJUHY2IG11bHRpY2FzdCBwYWNrZXQuICBGb3Ig ZXhhbXBsZSwgdW5sZXNzIGEgZGV2aWNlIHVzZXMgYSBwcm90b2NvbCBsaWtlIE1MRCB0byBleHBs aWNpdGx5IGpvaW4gYSBtdWx0aWNhc3QgZ3JvdXAsIHRoZSBuZXR3b3JrIHdpbGwgbmV2ZXIgcm91 dGUgdGhlIG11bHRpY2FzdCBwYWNrZXRzIG9mIGludGVyZXN0IHRvIHRoZSBzdWItbmV0d29yayBv ZiB0aGUgZGV2aWNlLiAgVGhpcyBpcyBhbGwgZXhwbGFpbmVkIGF0IGEgaGlnaCBsZXZlbCBpbiB0 aGUgSS5ELmdyb3VwY29tbSByZWZlcmVuY2UgKGh0dHA6Ly90b29scy5pZXRmLm9yZy9odG1sL2Ry YWZ0LWlldGYtY29yZS1ncm91cGNvbW0tMTgjc2VjdGlvbi0yLjEgKSAuDQoNCiANCg0KVGhlIG90 aGVyIHBhcnQgb2YgeW91ciBxdWVzdGlvbiByZWZlcnMgdG8gaG93IGRvZXMgdGhlIHNlbmRlciBu b2RlIGtub3cgd2hvIGlzIHBhcnQgb2YgdGhlIGdyb3VwLiAgWW91IGFyZSBjb3JyZWN0IHRoYXQg aXQgaXMgdmVyeSBkaWZmaWN1bHQgdG8ga25vdyBwcmVjaXNlbHkgdGhlIG1lbWJlcnNoaXAgb2Yg YSBncm91cC4gIFRoYXQgaXMgd2h5IHdlIGhhZCB0aGUgc3VidGxlIHJlZmVyZW5jZSB0byDigJxr bm93biBsaXN0ZW5lcnPigJ0uICBIb3cgeW91IGFjdHVhbGx5IGtub3cgdGhlIG1lbWJlcnNoaXAg ZGVwZW5kcyBvbiB0aGUgbWl4IG9mIHByb3RvY29scyB1c2VkIChhbmQgaXMgaW4gZmFjdCBpdCBp cyBub3QgYWx3YXlzIHBvc3NpYmxlIHRvIGtub3cgYWxsIHRoZSBtZW1iZXJzIGFjY3VyYXRlbHkp LiAgQnV0IGZvciBDb0FQIGdyb3VwIG1lbWJlciBkaXNjb3ZlcnksIHRoZXJlIGlzICBhZ2FpbiBn dWlkYW5jZSBnaXZlbiBpbiB0aGUgSS5ELmdyb3VwY29tbSByZWZlcmVuY2UgKHNwZWNpZmljYWxs eSBpbiBodHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNvcmUtZ3JvdXBjb21t LTE4I3NlY3Rpb24tMi42ICkuICBXZSBjYW4gbWFrZSB0aGlzIHBvaW50IGEgYml0IG1vcmUgZXhw bGljaXQgaW4gdGhlIG5leHQgdXBkYXRlIG9mIG91ciBJLUQuDQoNCiANCg0KIA0KDQogDQoNCj4y KSBBbiBhbHRlcm5hdGl2ZSBhcHByb2FjaCB0byB0aGUgb25lIHN1Z2dlc3RlZCBpbiBTZWN0aW9u IDQuNSBtYXkgY29uc2lzdCBpbiBhIGxpc3RlbmVyIG5vZGUgZXN0YWJsaXNoaW5nDQoNCj4gYSB1 bmljYXN0IERUTFMgc2Vzc2lvbiAoaS5lLiBzdGFydGluZyBhIERUTFMgaGFuZHNoYWtlKSB3aXRo IHRoZSBzZW5kZXIgbm9kZSwgdXBvbiByZWNlaXZpbmcgYSBtdWx0aWNhc3QNCg0KPiBtZXNzYWdl IGZvciB0aGUgZmlyc3QgdGltZS4NCg0KIA0KDQpZZXMsIGdvb2QgcG9pbnQhICBXZSBjYW4gYWRk IHRoaXMgdG8gdGhlIEktRCBpbiBvdXIgbmV4dCB1cGRhdGUuIA0KDQogDQoNCiANCg0KQmVzdCBS ZWdhcmRzLA0KDQogDQoNCiANCg0KQWtiYXINCg0KIA0KDQogDQoNCiANCg0KRnJvbTogTWFyY28g VGlsb2NhIFttYWlsdG86bWFyY29Ac2ljcy5zZV0gDQpTZW50OiBUdWVzZGF5LCBNYXkgMDYsIDIw MTQgMTI6MzIgUE0NClRvOiBSYWhtYW4sIEFrYmFyDQpDYzogS3VtYXIsIFNhbmRlZXA7IGR0bHMt aW90QGlldGYub3JnDQpTdWJqZWN0OiBSZTogW0R0bHMtaW90XSBVbmljYXN0IHJlc3BvbnNlcyBp biBkcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA1DQoNCiANCg0KSGVsbG8gQWti YXIsDQoNCiANCg0KVGhhbmtzIGZvciBoYXZpbmcgY29uc2lkZXJlZCBteSBxdWVzdGlvbi4gVGhl IG5ldyBTZWN0aW9uIDQuNSBsb29rcyBmaW5lIHRvIG1lLiBBbHNvLCBJIGhhdmUgdGhlIHR3byBm b2xsb3dpbmcgY29tbWVudHMuDQoNCiANCg0KMSkgSW4gb3JkZXIgdG8gcGVyZm9ybSBhIERUTFMg aGFuZHNoYWtlIGJlZm9yZS9hZnRlciBzZW5kaW5nIGEgbXVsdGljYXN0IG1lc3NhZ2UsIGEgc2Vu ZGVyIG5vZGUgc2hvdWxkIGJlIGF3YXJlIG9mIHRoZSBncm91cCBtZW1iZXJzaGlwLCBlc3BlY2lh bGx5IHdoYXQgYXJlIHRoZSBsaXN0ZW5lciBub2RlcyBjdXJyZW50bHkgcHJlc2VudCBpbiB0aGUg Z3JvdXAuIE9mIGNvdXJzZSwgc3VjaCBhIGdyb3VwIG1lbWJlcnNoaXAgbWF5IGNoYW5nZSBvdmVy IHRpbWUsIHVwb24gbmV3IG5vZGVzIGpvaW5pbmcgdGhlIGdyb3VwLiBIb3dldmVyLCBTZWN0aW9u IDMuMSBpbiB0aGUgZHJhZnQgc3RhdGVzIHRoYXQgIkFueSBkZXZpY2UgY2FuIGluIHByaW5jaXBs ZSBkZWNpZGUgdG8gbGlzdGVuIHRvIGFueSBJUHY2IG11bHRpY2FzdCBhZGRyZXNzLiBUaGlzIGFs c28gbWVhbnMgYXBwbGljYXRpb25zIG9uIHRoZSBvdGhlciBkZXZpY2VzIGRvIG5vdCBrbm93LCBv ciBkbyBub3QgZ2V0IG5vdGlmaWVkLCB3aGVuIG5ldyBsaXN0ZW5lcnMgam9pbiB0aGUgbmV0d29y ay4iLiBDb3VsZG4ndCB0aGlzIGJlIGEgcHJvYmxlbSBmb3IgdGhlIHN1Z2dlc3RlZCBhcHByb2Fj aD8NCg0KIA0KDQoyKSBBbiBhbHRlcm5hdGl2ZSBhcHByb2FjaCB0byB0aGUgb25lIHN1Z2dlc3Rl ZCBpbiBTZWN0aW9uIDQuNSBtYXkgY29uc2lzdCBpbiBhIGxpc3RlbmVyIG5vZGUgZXN0YWJsaXNo aW5nIGEgdW5pY2FzdCBEVExTIHNlc3Npb24gKGkuZS4gc3RhcnRpbmcgYSBEVExTIGhhbmRzaGFr ZSkgd2l0aCB0aGUgc2VuZGVyIG5vZGUsIHVwb24gcmVjZWl2aW5nIGEgbXVsdGljYXN0IG1lc3Nh Z2UgZm9yIHRoZSBmaXJzdCB0aW1lLg0KDQogDQoNCkJlc3QgcmVnYXJkcywNCg0KTWFyY28NCg0K IA0KDQogDQoNCiANCg0KIA0KDQpPbiA1IE1heSAyMDE0IDIzOjQ1LCBSYWhtYW4sIEFrYmFyIDxB a2Jhci5SYWhtYW5AaW50ZXJkaWdpdGFsLmNvbT4gd3JvdGU6DQoNCkhpIE1hcmNvLA0KDQogDQoN CiANCg0KIA0KDQpUaGUgYXV0aG9ycyBoYXZlIG1hZGUgYW4gdXBkYXRlIHRvIHRoZSBkcmFmdCB0 byBhZGRyZXNzIGZ1bGx5IHlvdXIgZ29vZCBxdWVzdGlvbiByZWdhcmRpbmcgaG93IHRvIGhhbmRs ZSB0aGUgdW5pY2FzdCByZXNwb25zZXMgdG8gdGhlIG11bHRpY2FzdCByZXNwb25zZS4gIFNwZWNp ZmljYWxseSwgcGxlYXNlIHJldmlldyB0aGUgbmV3IHNlY3Rpb24gNC41IGFuZCB0ZWxsIHVzIGlm IHlvdSBoYXZlIGFueSBtb3JlIHF1ZXN0aW9uczoNCg0KIA0KDQogDQoNCmh0dHA6Ly90b29scy5p ZXRmLm9yZy9odG1sL2RyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDYjc2VjdGlv bi00LjUNCg0KIA0KDQo0LjUuICBVbmljYXN0IFJlc3BvbnNlcyB0byBNdWx0aWNhc3QgTWVzc2Fn ZXMNCg0KIA0KDQogICBJbiBDb0FQLCByZXNwb25zZXMgdG8gbXVsdGljYXN0IG1lc3NhZ2VzIGFy ZSBhbHdheXMgc2VudCBiYWNrIGFzDQoNCiAgIHVuaWNhc3QuICBUaGF0IGlzLCB0aGUgZ3JvdXAg bWVtYmVycyB0aGF0IHJlY2VpdmUgYSBtdWx0aWNhc3QgbWVzc2FnZQ0KDQogICBtYXkgaW5kaXZp ZHVhbGx5IGRlY2lkZSB0byBzZW5kIChvciBzdXBwcmVzcykgYSB1bmljYXN0IHJlc3BvbnNlIGFz DQoNCiAgIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDIuNSBvZiBbSS1ELmlldGYtY29yZS1ncm91cGNv bW1dLiAgVGhlIHVuaWNhc3QNCg0KICAgcmVzcG9uc2VzIHRvIGEgRFRMUy1iYXNlZCBtdWx0aWNh c3QgbWVzc2FnZSBtYXkgb3B0aW9uYWxseSBiZSBzZWN1cmUuDQoNCiAgIFNwZWNpZmljYWxseSwg dGhlIHVuaWNhc3QgcmVzcG9uc2UgbWF5IGJlIHNlbnQgYmFjayBhcyBhIHVuaWNhc3QgRFRMUw0K DQogICBhcyBkZXNjcmliZWQgaW4gU2VjdGlvbiA5LjEgb2YgW0ktRC5pZXRmLWNvcmUtY29hcF0u ICBUaGlzIHJlcXVpcmVzDQoNCiAgIHRoYXQgYSB1bmljYXN0IERUTFMgaGFuZHNoYWtlIHdhcyBw cmV2aW91c2x5IGluaXRpYXRlZCBiZXR3ZWVuIHRoZQ0KDQogICBtdWx0aWNhc3QgbWVzc2FnZSBz ZW5kZXIgYW5kIGxpc3RlbmVyLiAgSW4gdGhlIGV4dHJlbWUgc2NlbmFyaW8sIGENCg0KICAgbXVs dGljYXN0IHNlbmRlciBtYXkgYXR0ZW1wdCB0byBpbml0aWF0ZSB0aGUgdW5pY2FzdCBEVExTIGhh bmRzaGFrZQ0KDQogICB3aXRoIGFsbCBvciBhIHN1YnNldCBvZiBrbm93biBsaXN0ZW5lcnMganVz dCBiZWZvcmUgb3IganVzdCBhZnRlciBpdA0KDQogICBzZW5kcyBvdXQgdGhlIERUTFMtYmFzZWQg bXVsdGljYXN0IG1lc3NhZ2UuICBUaGlzIG1heSByZXN1bHQgaW4gdGhlDQoNCiAgIG11bHRpY2Fz dCBzZW5kZXIgKGkuZS4gdW5pY2FzdCBEVExTIGNsaWVudCkgaGF2aW5nIHRvIHByb2Nlc3MgdW5p Y2FzdA0KDQogICBEVExTIGhhbmRzaGFrZSBtZXNzYWdlcyBmcm9tIG11bHRpcGxlIG11bHRpY2Fz dCBsaXN0ZW5lcnMgKGkuZS4NCg0KICAgdW5pY2FzdCBEVExTIHNlcnZlcnMpIGluIGEgc2hvcnQg cGVyaW9kLg0KDQogDQoNCiAgIE5vdGU6IFRoZXJlIGlzIGFuIG9idmlvdXMgdGltaW5nIGFuZCBw cm9jZXNzaW5nIGxvYWQgaXNzdWUgZm9yIHRoZQ0KDQogICBtdWx0aWNhc3Qgc2VuZGVyIGluIHRo ZSBzY2VuYXJpbyB3aGVyZSBpdCBhdHRlbXB0cyB0byBpbml0aWF0ZSB0aGUNCg0KICAgdW5pY2Fz dCBEVExTIGhhbmRzaGFrZXMgd2l0aCBhbGwvc29tZSBvZiBpdHMga25vd24gbGlzdGVuZXJzIGp1 c3QNCg0KICAgYWZ0ZXIgaXQgc2VuZHMgb3V0IHRoZSBEVExTLWJhc2VkIG11bHRpY2FzdCBtZXNz YWdlLiAgSW4gdGhpcyBjYXNlLA0KDQogICB0aGUgcHJvY2Vzc2luZyBsb2FkIGluIHRoZSBtdWx0 aWNhc3Qgc2VuZGVyIChpLmUuIHVuaWNhc3QgRFRMUw0KDQogICBjbGllbnQpIGlzIHJlZHVjZWQg c29tZXdoYXQgYnkgdGhlIGZhY3QgdGhhdCBDb0FQIHJlcXVpcmVzIGEgYmFjay1vZmYNCg0KICAg YW5kIHJhbmRvbWl6YXRpb24gb2YgdGhlIHVuaWNhc3QgcmVzcG9uc2UgYnkgdGhlIExlaXN1cmUg dGltZXINCg0KICAgbWVjaGFuaXNtIGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDguMiBvZiBbSS1E LmlldGYtY29yZS1jb2FwXS4NCg0KIA0KDQogDQoNCiANCg0KIA0KDQpCZXN0IFJlZ2FyZHMsDQoN CiANCg0KIA0KDQpBa2Jhcg0KDQogDQoNCiANCg0KIA0KDQpGcm9tOiBkdGxzLWlvdCBbbWFpbHRv OmR0bHMtaW90LWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBLdW1hciwgU2FuZGVlcA0K U2VudDogV2VkbmVzZGF5LCBBcHJpbCAwMiwgMjAxNCAzOjQ3IEFNDQpUbzogTWFyY28gVGlsb2Nh OyBkdGxzLWlvdEBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtEdGxzLWlvdF0gVW5pY2FzdCByZXNw b25zZXMgaW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNQ0KDQogDQoNCkhp IE1hcmNvDQoNCiANCg0KVGhlIGRyYWZ0IG9ubHkgYWRkcmVzc2VzIHRoZSBwcm90ZWN0aW9uIG9m IG11bHRpY2FzdCB0cmFmZmljLiBJZiB1bmljYXN0IHJlc3BvbnNlcyBhcmUgZXhwZWN0ZWQgYW5k IGlmIHByb3RlY3Rpb24gaXMgcmVxdWlyZWQgZm9yIHN1Y2ggbWVzc2FnZXMsIHRoZW4gZXhpc3Rp bmcgdW5pY2FzdCBwcm90ZWN0aW9uIG1lY2hhbmlzbXMgYmFzZWQgb24gRFRMUyBhcyBzdWdnZXN0 ZWQgaW4gZHJhZnQtaWV0Zi1jb3JlLWNvYXAtMTggc2hvdWxkIGJlIHVzZWQuIFByb3RlY3Rpb24g b2YgYWxsIHVuaWNhc3QgbWVzc2FnZXMgc2hvdWxkIGJlIHRyZWF0ZWQgYXMgd291bGQgYmUgZG9u ZSBub3JtYWxseS4gDQoNCiANCg0KSG9wZSB0aGF0IGFuc3dlcnMgeW91ciBxdWVzdGlvbi4NCg0K IA0KDQpSZWdhcmRzDQoNClNhbmRlZXAgDQoNCiANCg0KRnJvbTogZHRscy1pb3QgW21haWx0bzpk dGxzLWlvdC1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgTWFyY28gVGlsb2NhDQpTZW50 OiBUdWVzZGF5LCBBcHJpbCAwMSwgMjAxNCA2OjM1IFBNDQpUbzogZHRscy1pb3RAaWV0Zi5vcmcN ClN1YmplY3Q6IFtEdGxzLWlvdF0gVW5pY2FzdCByZXNwb25zZXMgaW4gZHJhZnQta2VvaC1kaWNl LW11bHRpY2FzdC1zZWN1cml0eS0wNQ0KDQogDQoNCkRlYXIgYWxsLA0KDQogDQoNCkFzIHRvIHBv c3NpYmxlIHJlc3BvbnNlcyB0byBtdWx0aWNhc3QgcmVxdWVzdHMsIFNlY3Rpb24gMi4xIHN0YXRl cyB0aGF0IHRoZXkgYXJlIHNlbnQgYmFjayBpbiB1bmljYXN0LiBUaGVuLCBubyBmdXJ0aGVyIGRl dGFpbHMgYXJlIHByb3ZpZGVkIGFib3V0IHRoZWlyIHByb3RlY3Rpb24uDQoNCiANCg0KQXJlIHN1 Y2ggcmVzcG9uc2VzIHN1cHBvc2VkIHRvIGJlIHByb3RlY3RlZCB0aHJvdWdoIGEgInJlZ3VsYXIi IERUTFMgc2Vzc2lvbiwgd2hpY2ggbXVzdCBiZSAob3IgaGFzIHByZXZpb3VzbHkgYmVlbikgZXN0 YWJsaXNoZWQgYmV0d2VlbiB0aGUgc2VuZGVyIGFuZCBsaXN0ZW5lcj8NCg0KIA0KDQpDaGVlcnMs DQoNCk1hcmNvDQoNCiANCg0KIA0KDQogDQoNCiANCg0KIA0KDQpfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXw0KDQpUaGUgaW5mb3JtYXRpb24gY29udGFpbmVkIGluIHRoaXMgbWVzc2Fn ZSBtYXkgYmUgY29uZmlkZW50aWFsIGFuZCBsZWdhbGx5IHByb3RlY3RlZCB1bmRlciBhcHBsaWNh YmxlIGxhdy4gVGhlIG1lc3NhZ2UgaXMgaW50ZW5kZWQgc29sZWx5IGZvciB0aGUgYWRkcmVzc2Vl KHMpLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCB5b3UgYXJlIGhlcmVi eSBub3RpZmllZCB0aGF0IGFueSB1c2UsIGZvcndhcmRpbmcsIGRpc3NlbWluYXRpb24sIG9yIHJl cHJvZHVjdGlvbiBvZiB0aGlzIG1lc3NhZ2UgaXMgc3RyaWN0bHkgcHJvaGliaXRlZCBhbmQgbWF5 IGJlIHVubGF3ZnVsLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVh c2UgY29udGFjdCB0aGUgc2VuZGVyIGJ5IHJldHVybiBlLW1haWwgYW5kIGRlc3Ryb3kgYWxsIGNv cGllcyBvZiB0aGUgb3JpZ2luYWwgbWVzc2FnZS4NCg0KIA0KDQo= ------_=_NextPart_001_01CF696B.F2417958 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+PGhlYWQ+PG1ldGEgaHR0cC1lcXVpdj1Db250ZW50LVR5cGUgY29udGVu dD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij48bWV0YSBuYW1lPUdlbmVyYXRvciBjb250ZW50 PSJNaWNyb3NvZnQgV29yZCAxNCAoZmlsdGVyZWQgbWVkaXVtKSI+PCEtLVtpZiAhbXNvXT48c3R5 bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7YmVoYXZpb3I6dXJs KCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0KLnNo YXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwhW2VuZGlmXS0tPjxz dHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJcGFub3NlLTE6MiAxMSA2IDQgMyA1IDQgNCAyIDQ7 fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRp di5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9u dC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIiwic2VyaWYiO30N CmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNv bG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4u TXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1 cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAuTXNvQWNldGF0ZSwgbGkuTXNv QWNldGF0ZSwgZGl2Lk1zb0FjZXRhdGUNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1z dHlsZS1saW5rOiJCYWxsb29uIFRleHQgQ2hhciI7DQoJbWFyZ2luOjBpbjsNCgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjguMHB0Ow0KCWZvbnQtZmFtaWx5OiJUYWhvbWEiLCJz YW5zLXNlcmlmIjt9DQpzcGFuLkJhbGxvb25UZXh0Q2hhcg0KCXttc28tc3R5bGUtbmFtZToiQmFs bG9vbiBUZXh0IENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGlu azoiQmFsbG9vbiBUZXh0IjsNCglmb250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJpZiI7fQ0K c3Bhbi5FbWFpbFN0eWxlMTkNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9u dC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCgljb2xvcjojMUY0OTdEO30NCi5Nc29D aHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtZmFtaWx5OiJD YWxpYnJpIiwic2Fucy1zZXJpZiI7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4g MTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rp b24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDld Pjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0K PC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91 dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpz aGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT48L2hlYWQ+PGJvZHkgbGFuZz1FTi1VUyBsaW5r PWJsdWUgdmxpbms9cHVycGxlPjxkaXYgY2xhc3M9V29yZFNlY3Rpb24xPjxwIGNsYXNzPU1zb05v cm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIs InNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPkhpIE1hcmNvLDxvOnA+PC9vOnA+PC9zcGFuPjwv cD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHls ZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2Nv bG9yOiMxRjQ5N0QnPlRoYW5rcyBmb3IgcmV2aWV3aW5nIHRoZSB1cGRhdGVkIGRyYWZ0LsKgIEFs c28gaGVyZSBpcyBteSBmZWVkYmFjayB0byB5b3VyIHR3byBuZXcgcXVlc3Rpb25zOjxvOnA+PC9v OnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD4mZ3Q7MSkgSW4gb3JkZXIgdG8gcGVyZm9ybSBh IERUTFMgaGFuZHNoYWtlIGJlZm9yZS9hZnRlciBzZW5kaW5nIGEgbXVsdGljYXN0IG1lc3NhZ2Us IGEgc2VuZGVyPG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPiZndDsgbm9kZSBzaG91 bGQgYmUgYXdhcmUgb2YgdGhlIGdyb3VwIG1lbWJlcnNoaXAsIGVzcGVjaWFsbHkgd2hhdCBhcmUg dGhlIGxpc3RlbmVyIG5vZGVzIGN1cnJlbnRseTxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05v cm1hbD4mZ3Q7IHByZXNlbnQgaW4gdGhlIGdyb3VwLiBPZiBjb3Vyc2UsIHN1Y2ggYSBncm91cCBt ZW1iZXJzaGlwIG1heSBjaGFuZ2Ugb3ZlciB0aW1lLCB1cG9uIG5ldyBub2Rlczxicj4mZ3Q7am9p bmluZyB0aGUgZ3JvdXAuIEhvd2V2ZXIsIFNlY3Rpb24gMy4xIGluIHRoZSBkcmFmdCBzdGF0ZXMg dGhhdCAmcXVvdDtBbnkgZGV2aWNlIGNhbiBpbiBwcmluY2lwbGUgZGVjaWRlPG86cD48L286cD48 L3A+PHAgY2xhc3M9TXNvTm9ybWFsPiZndDt0byBsaXN0ZW4gdG8gYW55IElQdjYgbXVsdGljYXN0 IGFkZHJlc3MuIFRoaXMgYWxzbyBtZWFucyBhcHBsaWNhdGlvbnMgb24gdGhlIG90aGVyIGRldmlj ZXMgZG8gbm90PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPiZndDtrbm93LCBvciBk byBub3QgZ2V0IG5vdGlmaWVkLCB3aGVuIG5ldyBsaXN0ZW5lcnMgam9pbiB0aGUgbmV0d29yay4m cXVvdDsuIENvdWxkbid0IHRoaXMgYmUgYSBwcm9ibGVtPG86cD48L286cD48L3A+PHAgY2xhc3M9 TXNvTm9ybWFsPiZndDtmb3IgdGhlIHN1Z2dlc3RlZCBhcHByb2FjaD88bzpwPjwvbzpwPjwvcD48 cCBjbGFzcz1Nc29Ob3JtYWw+PG86cD4mbmJzcDs8L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFs PjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fu cy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+WWVzLCBpbiBwcmluY2lwbGUsIGFueSBkZXZpY2UgY2Fu IGRlY2lkZSB0byBsaXN0ZW4gZm9yIGFueSBJUHY2IG11bHRpY2FzdCBhZGRyZXNzLsKgIEJ1dCBp biBwcmFjdGljZSBvZiBjb3Vyc2UgdGhlcmUgYXJlIElQdjYgbXVsdGljYXN0IHJlbGF0ZWQgcHJv dG9jb2xzIGZvciByb3V0aW5nL2pvaW5pbmcgdGhhdCBkaWN0YXRlIHdobyBjYW4gPHU+c3VjY2Vz c2Z1bGx5PC91PiBsaXN0ZW4gZm9yIGFuZCByZWNlaXZlIGFuIElQdjYgbXVsdGljYXN0IHBhY2tl dC7CoCBGb3IgZXhhbXBsZSwgdW5sZXNzIGEgZGV2aWNlIHVzZXMgYSBwcm90b2NvbCBsaWtlIE1M RCB0byBleHBsaWNpdGx5IGpvaW4gYSBtdWx0aWNhc3QgZ3JvdXAsIHRoZSBuZXR3b3JrIHdpbGwg bmV2ZXIgcm91dGUgdGhlIG11bHRpY2FzdCBwYWNrZXRzIG9mIGludGVyZXN0IHRvIHRoZSBzdWIt bmV0d29yayBvZiB0aGUgZGV2aWNlLsKgIFRoaXMgaXMgYWxsIGV4cGxhaW5lZCBhdCBhIGhpZ2gg bGV2ZWwgaW4gdGhlIEkuRC5ncm91cGNvbW0gcmVmZXJlbmNlICg8YSBocmVmPSJodHRwOi8vdG9v bHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNvcmUtZ3JvdXBjb21tLTE4I3NlY3Rpb24tMi4x Ij5odHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNvcmUtZ3JvdXBjb21tLTE4 I3NlY3Rpb24tMi4xPC9hPiApIC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9y bWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwi c2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxw IGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPlRoZSBvdGhlciBwYXJ0IG9m IHlvdXIgcXVlc3Rpb24gcmVmZXJzIHRvIGhvdyBkb2VzIHRoZSBzZW5kZXIgbm9kZSBrbm93IHdo byBpcyBwYXJ0IG9mIHRoZSBncm91cC7CoCBZb3UgYXJlIGNvcnJlY3QgdGhhdCBpdCBpcyB2ZXJ5 IGRpZmZpY3VsdCB0byBrbm93IHByZWNpc2VseSB0aGUgbWVtYmVyc2hpcCBvZiBhIGdyb3VwLsKg IFRoYXQgaXMgd2h5IHdlIGhhZCB0aGUgc3VidGxlIHJlZmVyZW5jZSB0byDigJxrbm93biBsaXN0 ZW5lcnPigJ0uwqAgSG93IHlvdSBhY3R1YWxseSBrbm93IHRoZSBtZW1iZXJzaGlwIGRlcGVuZHMg b24gdGhlIG1peCBvZiBwcm90b2NvbHMgdXNlZCAoYW5kIGlzIGluIGZhY3QgaXQgaXMgbm90IGFs d2F5cyBwb3NzaWJsZSB0byBrbm93IGFsbCB0aGUgbWVtYmVycyBhY2N1cmF0ZWx5KS7CoCBCdXQg Zm9yIENvQVAgZ3JvdXAgbWVtYmVyIGRpc2NvdmVyeSwgdGhlcmUgaXMgwqBhZ2FpbiBndWlkYW5j ZSBnaXZlbiBpbiB0aGUgSS5ELmdyb3VwY29tbSByZWZlcmVuY2UgKHNwZWNpZmljYWxseSBpbiA8 YSBocmVmPSJodHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNvcmUtZ3JvdXBj b21tLTE4I3NlY3Rpb24tMi42Ij5odHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRm LWNvcmUtZ3JvdXBjb21tLTE4I3NlY3Rpb24tMi42PC9hPiApLsKgIFdlIGNhbiBtYWtlIHRoaXMg cG9pbnQgYSBiaXQgbW9yZSBleHBsaWNpdCBpbiB0aGUgbmV4dCB1cGRhdGUgb2Ygb3VyIEktRC48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48bzpwPiZuYnNwOzwvbzpwPjwvcD48cCBjbGFzcz1Nc29O b3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmki LCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ PHAgY2xhc3M9TXNvTm9ybWFsPiZndDsyKSBBbiBhbHRlcm5hdGl2ZSBhcHByb2FjaCB0byB0aGUg b25lIHN1Z2dlc3RlZCBpbiBTZWN0aW9uIDQuNSBtYXkgY29uc2lzdCBpbiBhIGxpc3RlbmVyIG5v ZGUgZXN0YWJsaXNoaW5nPG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPiZndDsgYSB1 bmljYXN0IERUTFMgc2Vzc2lvbiAoaS5lLiBzdGFydGluZyBhIERUTFMgaGFuZHNoYWtlKSB3aXRo IHRoZSBzZW5kZXIgbm9kZSwgdXBvbiByZWNlaXZpbmcgYSBtdWx0aWNhc3Q8bzpwPjwvbzpwPjwv cD48cCBjbGFzcz1Nc29Ob3JtYWw+Jmd0OyBtZXNzYWdlIGZvciB0aGUgZmlyc3QgdGltZS48bzpw PjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6 IzFGNDk3RCc+WWVzLCBnb29kIHBvaW50IcKgIFdlIGNhbiBhZGQgdGhpcyB0byB0aGUgSS1EIGlu IG91ciBuZXh0IHVwZGF0ZS4gPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1h bD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNh bnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBj bGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+QmVzdCBS ZWdhcmRzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5 bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtj b2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9y bWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwi c2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxw IGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPkFrYmFyPG86cD48L286cD48 L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2Zv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjoj MUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxz cGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1z ZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNz PU1zb05vcm1hbD48Yj48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToi VGFob21hIiwic2Fucy1zZXJpZiInPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0nZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJpZiInPiBNYXJjbyBUaWxv Y2EgW21haWx0bzptYXJjb0BzaWNzLnNlXSA8YnI+PGI+U2VudDo8L2I+IFR1ZXNkYXksIE1heSAw NiwgMjAxNCAxMjozMiBQTTxicj48Yj5Ubzo8L2I+IFJhaG1hbiwgQWtiYXI8YnI+PGI+Q2M6PC9i PiBLdW1hciwgU2FuZGVlcDsgZHRscy1pb3RAaWV0Zi5vcmc8YnI+PGI+U3ViamVjdDo8L2I+IFJl OiBbRHRscy1pb3RdIFVuaWNhc3QgcmVzcG9uc2VzIGluIGRyYWZ0LWtlb2gtZGljZS1tdWx0aWNh c3Qtc2VjdXJpdHktMDU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsPkhlbGxvIEFrYmFyLDxv OnA+PC9vOnA+PC9wPjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+Jm5ic3A7PC9vOnA+PC9w PjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsPlRoYW5rcyBmb3IgaGF2aW5nIGNvbnNpZGVy ZWQgbXkgcXVlc3Rpb24uIFRoZSBuZXcgU2VjdGlvbiA0LjUgbG9va3MgZmluZSB0byBtZS4gQWxz bywgSSBoYXZlIHRoZSB0d28gZm9sbG93aW5nIGNvbW1lbnRzLjxvOnA+PC9vOnA+PC9wPjwvZGl2 PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPjwvZGl2PjxkaXY+ PHAgY2xhc3M9TXNvTm9ybWFsPjEpIEluIG9yZGVyIHRvIHBlcmZvcm0gYSBEVExTIGhhbmRzaGFr ZSBiZWZvcmUvYWZ0ZXIgc2VuZGluZyBhIG11bHRpY2FzdCBtZXNzYWdlLCBhIHNlbmRlciBub2Rl IHNob3VsZCBiZSBhd2FyZSBvZiB0aGUgZ3JvdXAgbWVtYmVyc2hpcCwgZXNwZWNpYWxseSB3aGF0 IGFyZSB0aGUgbGlzdGVuZXIgbm9kZXMgY3VycmVudGx5IHByZXNlbnQgaW4gdGhlIGdyb3VwLiBP ZiBjb3Vyc2UsIHN1Y2ggYSBncm91cCBtZW1iZXJzaGlwIG1heSBjaGFuZ2Ugb3ZlciB0aW1lLCB1 cG9uIG5ldyBub2RlcyBqb2luaW5nIHRoZSBncm91cC4gSG93ZXZlciwgU2VjdGlvbiAzLjEgaW4g dGhlIGRyYWZ0IHN0YXRlcyB0aGF0ICZxdW90O0FueSBkZXZpY2UgY2FuIGluIHByaW5jaXBsZSBk ZWNpZGUgdG8gbGlzdGVuIHRvIGFueSBJUHY2IG11bHRpY2FzdCBhZGRyZXNzLiBUaGlzIGFsc28g bWVhbnMgYXBwbGljYXRpb25zIG9uIHRoZSBvdGhlciBkZXZpY2VzIGRvIG5vdCBrbm93LCBvciBk byBub3QgZ2V0IG5vdGlmaWVkLCB3aGVuIG5ldyBsaXN0ZW5lcnMgam9pbiB0aGUgbmV0d29yay4m cXVvdDsuIENvdWxkbid0IHRoaXMgYmUgYSBwcm9ibGVtIGZvciB0aGUgc3VnZ2VzdGVkIGFwcHJv YWNoPzxvOnA+PC9vOnA+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsPjIpIEFuIGFsdGVybmF0 aXZlIGFwcHJvYWNoIHRvIHRoZSBvbmUgc3VnZ2VzdGVkIGluIFNlY3Rpb24gNC41IG1heSBjb25z aXN0IGluIGEgbGlzdGVuZXIgbm9kZSBlc3RhYmxpc2hpbmcgYSB1bmljYXN0IERUTFMgc2Vzc2lv biAoaS5lLiBzdGFydGluZyBhIERUTFMgaGFuZHNoYWtlKSB3aXRoIHRoZSBzZW5kZXIgbm9kZSwg dXBvbiByZWNlaXZpbmcgYSBtdWx0aWNhc3QgbWVzc2FnZSBmb3IgdGhlIGZpcnN0IHRpbWUuPG86 cD48L286cD48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWw+PG86cD4mbmJzcDs8L286 cD48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWw+QmVzdCByZWdhcmRzLDxvOnA+PC9v OnA+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsPk1hcmNvPG86cD48L286cD48L3A+ PC9kaXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWw+PG86cD4mbmJzcDs8L286cD48L3A+PC9kaXY+ PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWw+PG86cD4mbmJzcDs8L286cD48L3A+PC9kaXY+PGRpdj48 cCBjbGFzcz1Nc29Ob3JtYWw+PG86cD4mbmJzcDs8L286cD48L3A+PC9kaXY+PC9kaXY+PGRpdj48 cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21hcmdpbi1ib3R0b206MTIuMHB0Jz48bzpwPiZuYnNw OzwvbzpwPjwvcD48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbD5PbiA1IE1heSAyMDE0IDIzOjQ1LCBS YWhtYW4sIEFrYmFyICZsdDs8YSBocmVmPSJtYWlsdG86QWtiYXIuUmFobWFuQGludGVyZGlnaXRh bC5jb20iIHRhcmdldD0iX2JsYW5rIj5Ba2Jhci5SYWhtYW5AaW50ZXJkaWdpdGFsLmNvbTwvYT4m Z3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPjxkaXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5 bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48 c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMt c2VyaWYiO2NvbG9yOiMxRjQ5N0QnPkhpIE1hcmNvLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBj bGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPiZu YnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHls ZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2Nv bG9yOiMxRjQ5N0QnPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3Jt YWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIs InNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPlRoZSBhdXRob3JzIGhhdmUgbWFkZSBhbiB1cGRh dGUgdG8gdGhlIGRyYWZ0IHRvIGFkZHJlc3MgZnVsbHkgeW91ciBnb29kIHF1ZXN0aW9uIHJlZ2Fy ZGluZyBob3cgdG8gaGFuZGxlIHRoZSB1bmljYXN0IHJlc3BvbnNlcyB0byB0aGUgbXVsdGljYXN0 IHJlc3BvbnNlLiZuYnNwOyBTcGVjaWZpY2FsbHksIHBsZWFzZSByZXZpZXcgdGhlIG5ldyBzZWN0 aW9uIDQuNSBhbmQgdGVsbCB1cyBpZiB5b3UgaGF2ZSBhbnkgbW9yZSBxdWVzdGlvbnM6PC9zcGFu PjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3 RCc+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0n bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFu IHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJp ZiI7Y29sb3I6IzFGNDk3RCc+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1z b05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxp YnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PGEgaHJlZj0iaHR0cDovL3Rvb2xzLmll dGYub3JnL2h0bWwvZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNiNzZWN0aW9u LTQuNSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHA6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWtl b2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDYjc2VjdGlvbi00LjU8L2E+PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxl PSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPjQuNS4mbmJzcDsg VW5pY2FzdCBSZXNwb25zZXMgdG8gTXVsdGljYXN0IE1lc3NhZ2VzPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBj bGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgSW4gQ29BUCwgcmVzcG9uc2VzIHRvIG11bHRp Y2FzdCBtZXNzYWdlcyBhcmUgYWx3YXlzIHNlbnQgYmFjayBhczwvc3Bhbj48bzpwPjwvbzpwPjwv cD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgdW5pY2FzdC4mbmJzcDsgVGhhdCBp cywgdGhlIGdyb3VwIG1lbWJlcnMgdGhhdCByZWNlaXZlIGEgbXVsdGljYXN0IG1lc3NhZ2U8L3Nw YW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IG1heSBp bmRpdmlkdWFsbHkgZGVjaWRlIHRvIHNlbmQgKG9yIHN1cHByZXNzKSBhIHVuaWNhc3QgcmVzcG9u c2UgYXM8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5 bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5i c3A7IGRlc2NyaWJlZCBpbiBTZWN0aW9uIDIuNSBvZiBbSS1ELmlldGYtY29yZS1ncm91cGNvbW1d LiZuYnNwOyBUaGUgdW5pY2FzdDwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3Jt YWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBO ZXciJz4mbmJzcDsmbmJzcDsgcmVzcG9uc2VzIHRvIGEgRFRMUy1iYXNlZCBtdWx0aWNhc3QgbWVz c2FnZSBtYXkgb3B0aW9uYWxseSBiZSBzZWN1cmUuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNs YXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBTcGVjaWZpY2FsbHksIHRoZSB1bmljYXN0IHJl c3BvbnNlIG1heSBiZSBzZW50IGJhY2sgYXMgYSB1bmljYXN0IERUTFM8L3NwYW4+PG86cD48L286 cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IGFzIGRlc2NyaWJlZCBpbiBT ZWN0aW9uIDkuMSBvZiBbSS1ELmlldGYtY29yZS1jb2FwXS4mbmJzcDsgVGhpcyByZXF1aXJlczwv c3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgdGhh dCBhIHVuaWNhc3QgRFRMUyBoYW5kc2hha2Ugd2FzIHByZXZpb3VzbHkgaW5pdGlhdGVkIGJldHdl ZW4gdGhlPC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0 eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZu YnNwOyBtdWx0aWNhc3QgbWVzc2FnZSBzZW5kZXIgYW5kIGxpc3RlbmVyLiZuYnNwOyBJbiB0aGUg ZXh0cmVtZSBzY2VuYXJpbywgYTwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3Jt YWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBO ZXciJz4mbmJzcDsmbmJzcDsgbXVsdGljYXN0IHNlbmRlciBtYXkgYXR0ZW1wdCB0byBpbml0aWF0 ZSB0aGUgdW5pY2FzdCBEVExTIGhhbmRzaGFrZTwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFz cz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToi Q291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgd2l0aCBhbGwgb3IgYSBzdWJzZXQgb2Yga25vd24g bGlzdGVuZXJzIGp1c3QgYmVmb3JlIG9yIGp1c3QgYWZ0ZXIgaXQ8L3NwYW4+PG86cD48L286cD48 L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IHNlbmRzIG91dCB0aGUgRFRMUy1i YXNlZCBtdWx0aWNhc3QgbWVzc2FnZS4mbmJzcDsgVGhpcyBtYXkgcmVzdWx0IGluIHRoZTwvc3Bh bj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgbXVsdGlj YXN0IHNlbmRlciAoaS5lLiB1bmljYXN0IERUTFMgY2xpZW50KSBoYXZpbmcgdG8gcHJvY2VzcyB1 bmljYXN0PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0 eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZu YnNwOyBEVExTIGhhbmRzaGFrZSBtZXNzYWdlcyBmcm9tIG11bHRpcGxlIG11bHRpY2FzdCBsaXN0 ZW5lcnMgKGkuZS48L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxl PSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNw YW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5i c3A7Jm5ic3A7IHVuaWNhc3QgRFRMUyBzZXJ2ZXJzKSBpbiBhIHNob3J0IHBlcmlvZC48L3NwYW4+ PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7PC9zcGFuPjxvOnA+PC9v OnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBOb3RlOiBUaGVyZSBpcyBh biBvYnZpb3VzIHRpbWluZyBhbmQgcHJvY2Vzc2luZyBsb2FkIGlzc3VlIGZvciB0aGU8L3NwYW4+ PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IG11bHRpY2Fz dCBzZW5kZXIgaW4gdGhlIHNjZW5hcmlvIHdoZXJlIGl0IGF0dGVtcHRzIHRvIGluaXRpYXRlIHRo ZTwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0n Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsg dW5pY2FzdCBEVExTIGhhbmRzaGFrZXMgd2l0aCBhbGwvc29tZSBvZiBpdHMga25vd24gbGlzdGVu ZXJzIGp1c3Q8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4g c3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7 Jm5ic3A7IGFmdGVyIGl0IHNlbmRzIG91dCB0aGUgRFRMUy1iYXNlZCBtdWx0aWNhc3QgbWVzc2Fn ZS4mbmJzcDsgSW4gdGhpcyBjYXNlLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29O b3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmll ciBOZXciJz4mbmJzcDsmbmJzcDsgdGhlIHByb2Nlc3NpbmcgbG9hZCBpbiB0aGUgbXVsdGljYXN0 IHNlbmRlciAoaS5lLiB1bmljYXN0IERUTFM8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9 TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNv dXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IGNsaWVudCkgaXMgcmVkdWNlZCBzb21ld2hhdCBieSB0 aGUgZmFjdCB0aGF0IENvQVAgcmVxdWlyZXMgYSBiYWNrLW9mZjwvc3Bhbj48bzpwPjwvbzpwPjwv cD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgYW5kIHJhbmRvbWl6YXRpb24gb2Yg dGhlIHVuaWNhc3QgcmVzcG9uc2UgYnkgdGhlIExlaXN1cmUgdGltZXI8L3NwYW4+PG86cD48L286 cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IG1lY2hhbmlzbSBhcyBkZXNj cmliZWQgaW4gU2VjdGlvbiA4LjIgb2YgW0ktRC5pZXRmLWNvcmUtY29hcF0uPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPiZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5 N0QnPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9 J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3Bh biBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2Vy aWYiO2NvbG9yOiMxRjQ5N0QnPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1N c29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2Fs aWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPkJlc3QgUmVnYXJkcyw8L3NwYW4+PG86 cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5 bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtj b2xvcjojMUY0OTdEJz4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9y bWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmki LCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5Ba2Jhcjwvc3Bhbj48bzpwPjwvbzpwPjwvcD48 cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPiZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0Qn PiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBz dHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYi O2NvbG9yOiMxRjQ5N0QnPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD48ZGl2PjxkaXYgc3R5 bGU9J2JvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMu MHB0IDBpbiAwaW4gMGluJz48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48Yj48c3BhbiBzdHlsZT0nZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJpZiInPkZyb206PC9z cGFuPjwvYj48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiVGFob21h Iiwic2Fucy1zZXJpZiInPiBkdGxzLWlvdCBbbWFpbHRvOjxhIGhyZWY9Im1haWx0bzpkdGxzLWlv dC1ib3VuY2VzQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+ZHRscy1pb3QtYm91bmNlc0BpZXRm Lm9yZzwvYT5dIDxiPk9uIEJlaGFsZiBPZiA8L2I+S3VtYXIsIFNhbmRlZXA8YnI+PGI+U2VudDo8 L2I+IFdlZG5lc2RheSwgQXByaWwgMDIsIDIwMTQgMzo0NyBBTTxicj48Yj5Ubzo8L2I+IE1hcmNv IFRpbG9jYTsgPGEgaHJlZj0ibWFpbHRvOmR0bHMtaW90QGlldGYub3JnIiB0YXJnZXQ9Il9ibGFu ayI+ZHRscy1pb3RAaWV0Zi5vcmc8L2E+PGJyPjxiPlN1YmplY3Q6PC9iPiBSZTogW0R0bHMtaW90 XSBVbmljYXN0IHJlc3BvbnNlcyBpbiBkcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5 LTA1PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjwvZGl2PjwvZGl2PjxkaXY+PGRpdj48cCBjbGFzcz1N c29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvJz4mbmJzcDs8bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9 J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3Bh biBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2Vy aWYiO2NvbG9yOiMxRjQ5N0QnPkhpIE1hcmNvPC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNz PU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJD YWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+Jm5ic3A7PC9zcGFuPjxvOnA+PC9v OnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+VGhlIGRy YWZ0IG9ubHkgYWRkcmVzc2VzIHRoZSBwcm90ZWN0aW9uIG9mIG11bHRpY2FzdCB0cmFmZmljLiBJ ZiB1bmljYXN0IHJlc3BvbnNlcyBhcmUgZXhwZWN0ZWQgYW5kIGlmIHByb3RlY3Rpb24gaXMgcmVx dWlyZWQgZm9yIHN1Y2ggbWVzc2FnZXMsIHRoZW4gZXhpc3RpbmcgdW5pY2FzdCBwcm90ZWN0aW9u IG1lY2hhbmlzbXMgYmFzZWQgb24gRFRMUyBhcyBzdWdnZXN0ZWQgaW4gZHJhZnQtaWV0Zi1jb3Jl LWNvYXAtMTggc2hvdWxkIGJlIHVzZWQuIFByb3RlY3Rpb24gb2YgYWxsIHVuaWNhc3QgbWVzc2Fn ZXMgc2hvdWxkIGJlIHRyZWF0ZWQgYXMgd291bGQgYmUgZG9uZSBub3JtYWxseS4gPC9zcGFuPjxv OnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+ Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0 eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7 Y29sb3I6IzFGNDk3RCc+SG9wZSB0aGF0IGFuc3dlcnMgeW91ciBxdWVzdGlvbi48L3NwYW4+PG86 cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5 bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtj b2xvcjojMUY0OTdEJz5SZWdhcmRzPC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05v cm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJp Iiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+U2FuZGVlcCA8L3NwYW4+PG86cD48L286cD48 L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3A+PGRpdiBzdHlsZT0nYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29s aWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0Jz48ZGl2PjxkaXYgc3R5bGU9 J2JvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0 IDBpbiAwaW4gMGluJz48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48Yj48c3BhbiBzdHlsZT0nZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJpZiInPkZyb206PC9zcGFu PjwvYj48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiVGFob21hIiwi c2Fucy1zZXJpZiInPiBkdGxzLWlvdCBbPGEgaHJlZj0ibWFpbHRvOmR0bHMtaW90LWJvdW5jZXNA aWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5tYWlsdG86ZHRscy1pb3QtYm91bmNlc0BpZXRmLm9y ZzwvYT5dIDxiPk9uIEJlaGFsZiBPZiA8L2I+TWFyY28gVGlsb2NhPGJyPjxiPlNlbnQ6PC9iPiBU dWVzZGF5LCBBcHJpbCAwMSwgMjAxNCA2OjM1IFBNPGJyPjxiPlRvOjwvYj4gPGEgaHJlZj0ibWFp bHRvOmR0bHMtaW90QGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+ZHRscy1pb3RAaWV0Zi5vcmc8 L2E+PGJyPjxiPlN1YmplY3Q6PC9iPiBbRHRscy1pb3RdIFVuaWNhc3QgcmVzcG9uc2VzIGluIGRy YWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDU8L3NwYW4+PG86cD48L286cD48L3A+ PC9kaXY+PC9kaXY+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+Jm5ic3A7PG86cD48L286cD48L3A+PGRp dj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPkRlYXIgYWxsLDxvOnA+PC9vOnA+PC9wPjwvZGl2 PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+Jm5ic3A7PG86cD48L286cD48L3A+PC9kaXY+PGRp dj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvJz5BcyB0byBwb3NzaWJsZSByZXNwb25zZXMgdG8gbXVsdGlj YXN0IHJlcXVlc3RzLCBTZWN0aW9uIDIuMSBzdGF0ZXMgdGhhdCB0aGV5IGFyZSBzZW50IGJhY2sg aW4gdW5pY2FzdC4gVGhlbiwgbm8gZnVydGhlciBkZXRhaWxzIGFyZSBwcm92aWRlZCBhYm91dCB0 aGVpciBwcm90ZWN0aW9uLjxvOnA+PC9vOnA+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9y bWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byc+Jm5ic3A7PG86cD48L286cD48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWwg c3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Jz5BcmUgc3VjaCByZXNwb25zZXMgc3VwcG9zZWQgdG8gYmUgcHJvdGVjdGVkIHRocm91Z2ggYSAm cXVvdDtyZWd1bGFyJnF1b3Q7IERUTFMgc2Vzc2lvbiwgd2hpY2ggbXVzdCBiZSAob3IgaGFzIHBy ZXZpb3VzbHkgYmVlbikgZXN0YWJsaXNoZWQgYmV0d2VlbiB0aGUgc2VuZGVyIGFuZCBsaXN0ZW5l cj88bzpwPjwvbzpwPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPiZuYnNwOzxv OnA+PC9vOnA+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+Q2hlZXJzLDxvOnA+ PC9vOnA+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+TWFyY288bzpwPjwvbzpw PjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPiZuYnNwOzxvOnA+PC9vOnA+PC9w PjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+Jm5ic3A7PG86cD48L286cD48L3A+PC9k aXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz4mbmJzcDs8bzpwPjwvbzpwPjwvcD48L2Rpdj48 ZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPiZuYnNwOzxvOnA+PC9vOnA+PC9wPjwvZGl2PjwvZGl2 PjwvZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPiZuYnNwOzxvOnA+PC9vOnA+PC9wPjxkaXYgY2xh c3M9TXNvTm9ybWFsIGFsaWduPWNlbnRlciBzdHlsZT0ndGV4dC1hbGlnbjpjZW50ZXInPjxociBz aXplPTIgd2lkdGg9IjEwMCUiIGFsaWduPWNlbnRlcj48L2Rpdj48cCBjbGFzcz1Nc29Ob3JtYWwg c3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Jz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjcuNXB0O2ZvbnQtZmFtaWx5OiJBcmlhbCIsInNhbnMt c2VyaWYiO2NvbG9yOmdyYXknPlRoZSBpbmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhpcyBtZXNz YWdlIG1heSBiZSBjb25maWRlbnRpYWwgYW5kIGxlZ2FsbHkgcHJvdGVjdGVkIHVuZGVyIGFwcGxp Y2FibGUgbGF3LiBUaGUgbWVzc2FnZSBpcyBpbnRlbmRlZCBzb2xlbHkgZm9yIHRoZSBhZGRyZXNz ZWUocykuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHlvdSBhcmUgaGVy ZWJ5IG5vdGlmaWVkIHRoYXQgYW55IHVzZSwgZm9yd2FyZGluZywgZGlzc2VtaW5hdGlvbiwgb3Ig cmVwcm9kdWN0aW9uIG9mIHRoaXMgbWVzc2FnZSBpcyBzdHJpY3RseSBwcm9oaWJpdGVkIGFuZCBt YXkgYmUgdW5sYXdmdWwuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBs ZWFzZSBjb250YWN0IHRoZSBzZW5kZXIgYnkgcmV0dXJuIGUtbWFpbCBhbmQgZGVzdHJveSBhbGwg Y29waWVzIG9mIHRoZSBvcmlnaW5hbCBtZXNzYWdlLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD48L2Rp dj48L2Rpdj48L2Rpdj48L2Rpdj48L2Rpdj48cCBjbGFzcz1Nc29Ob3JtYWw+PG86cD4mbmJzcDs8 L286cD48L3A+PC9kaXY+PC9kaXY+PC9ib2R5PjwvaHRtbD4= ------_=_NextPart_001_01CF696B.F2417958-- From nobody Tue May 6 15:24:52 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9D81D1A0640 for ; Tue, 6 May 2014 15:24:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.551 X-Spam-Level: X-Spam-Status: No, score=-2.551 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RP_MATCHES_RCVD=-0.651, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id W8J41weSBKIM for ; Tue, 6 May 2014 15:24:48 -0700 (PDT) Received: from mout.gmx.net (mout.gmx.net [212.227.15.15]) by ietfa.amsl.com (Postfix) with ESMTP id 4FB0F1A049F for ; Tue, 6 May 2014 15:24:48 -0700 (PDT) Received: from [192.168.10.134] ([64.71.18.60]) by mail.gmx.com (mrgmx102) with ESMTPSA (Nemesis) id 0MfBsk-1WSudU3oB0-00OkUx for ; Wed, 07 May 2014 00:24:43 +0200 Message-ID: <53696127.7010306@gmx.net> Date: Wed, 07 May 2014 00:24:39 +0200 From: Hannes Tschofenig User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: "dtls-iot@ietf.org" X-Enigmail-Version: 1.5.2 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="gfCMiK0vclCcMTxfXOJGRWIttRcMHcfMM" X-Provags-ID: V03:K0:9LB4L97yPP+K+VORqNQT/vh8O625zm5F+qDVH8n/w2xLjpXLWef +QfLM841kTxnue0Sw8dqQt8Sv+s3g1oMbVIoEHcUFJ8ON7xVBT5YfSYUjaApqXPws6QoJLh ftVUVKXisGfOfoi1x7k6/xtaqdIRkTZdzag9iS6PakcMNpq3DQ6YcyutEug3QMtR7z4/zHV qdmBbe6ONa70Z7Ou0lHgw== Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/Af_66GnqpiV2dzeHpxuWtdNuHR8 Subject: [Dtls-iot] draft-ietf-dice-profile-01.txt X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 May 2014 22:24:50 -0000 This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --gfCMiK0vclCcMTxfXOJGRWIttRcMHcfMM Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Hi all, I just updated the DTLS 1.2 profile based on review comments from Zach and from Sean. Zach provided review comments around the London IETF meeting and Sean submitted his comments this week. The are many editorial changes that improve the quality of the document. Here is the diff: http://tools.ietf.org/rfcdiff?url2=3Ddraft-ietf-dice-profile-01.txt In an upcoming version we are planning to address feedback received during the IETF meeting. I tried to include the constrained DTLS server-based scenario and ran into problems adding meaningful text but the currently missing specifications (such as described in http://www.ietf.org/proceedings/89/slides/slides-89-dice-1.pdf). Ciao Hannes --gfCMiK0vclCcMTxfXOJGRWIttRcMHcfMM Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (GNU/Linux) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBCgAGBQJTaWEnAAoJEGhJURNOOiAtg0sH/jbsf7gUx9aYNyg1G03P2mJA xwI47r9hGArQ66NDn2pi013eBsbHnEhy/4hcab6FedHBwCEYjAuvdvjoM0VeqSmJ 4jU3m2iszw/4hMiDzKUEb6tkXbmcgiI2qm27KdPZ3ypKICX7+p9aLdBN4mfOKKL9 sKFKDgE0qNOBza52ZDlT8/q2Evy34oeL3RO6Yn4fMC2/42Hsokl4nSUDpdV1GsM6 LgkCazUwn6wNuwyaUUuOnkIYol4apm+TjIiXY/8u7qLn3bDiCRGjhX6MvjnA/PIp mU2cw0g8UJabT1keUHw39f0fz/BJIphb9ZoYwWiMPI41Se3ODCR+yPEz/kJmzCw= =kSac -----END PGP SIGNATURE----- --gfCMiK0vclCcMTxfXOJGRWIttRcMHcfMM-- From nobody Fri May 9 12:40:31 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CC6761A032B for ; Fri, 9 May 2014 12:40:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.55 X-Spam-Level: X-Spam-Status: No, score=-2.55 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.651] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id s9F_1lIFioUc for ; Fri, 9 May 2014 12:40:24 -0700 (PDT) Received: from smtp-in1.interdigital.com (smtp-in1.interdigital.com [64.208.228.133]) by ietfa.amsl.com (Postfix) with ESMTP id 1DE3C1A0327 for ; Fri, 9 May 2014 12:40:23 -0700 (PDT) X-ASG-Debug-ID: 1399664414-06daaa09efc3c70001-roOjxa Received: from smtp-out1.interdigital.com (sahara.interdigital.com [10.0.128.27]) by smtp-in1.interdigital.com with ESMTP id KK6JNlAiAJltiQrj for ; Fri, 09 May 2014 15:40:14 -0400 (EDT) X-Barracuda-Envelope-From: Akbar.Rahman@InterDigital.com Received: from SAM.InterDigital.com ([10.30.2.11]) by smtp-out1.interdigital.com with Microsoft SMTPSVC(6.0.3790.4675); Fri, 9 May 2014 15:40:12 -0400 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01CF6BBE.7DFF10D5" Date: Fri, 9 May 2014 15:40:10 -0400 X-ASG-Orig-Subj: RE: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 Message-ID: In-Reply-To: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 Thread-Index: Ac9pSK60kHQwDbt0T9ez8QNoGNKbqAAHwfMgAJWQq4A= References: From: "Rahman, Akbar" To: "Marco Tiloca" X-OriginalArrivalTime: 09 May 2014 19:40:12.0750 (UTC) FILETIME=[7E82E6E0:01CF6BBE] X-Barracuda-Connect: sahara.interdigital.com[10.0.128.27] X-Barracuda-Start-Time: 1399664414 X-Barracuda-URL: http://10.1.245.3:8000/cgi-mod/mark.cgi X-Virus-Scanned: by bsmtpd at interdigital.com X-Barracuda-BRTS-Status: 1 X-Barracuda-Spam-Score: 0.00 X-Barracuda-Spam-Status: No, SCORE=0.00 using per-user scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=9.0 tests=BSF_SC0_MISMATCH_TO, HTML_MESSAGE X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.5676 Rule breakdown below pts rule name description ---- ---------------------- -------------------------------------------------- 0.00 BSF_SC0_MISMATCH_TO Envelope rcpt doesn't match header 0.00 HTML_MESSAGE BODY: HTML included in message Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/hBNgy2rSu5ZzXPwrs0IsAJWaei0 Cc: "Kumar, Sandeep" , dtls-iot@ietf.org Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 May 2014 19:40:29 -0000 This is a multi-part message in MIME format. ------_=_NextPart_001_01CF6BBE.7DFF10D5 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgTWFyY28sDQoNCiANCg0KIA0KDQpXZSBoYXZlIHVwZGF0ZWQgdGhlIGRyYWZ0IHRvIGNhcHR1 cmUgeW91ciByZW1haW5pbmcgY29tbWVudHMgYmVsb3cuICBQbGVhc2UgcmV2aWV3IGFuZCB0ZWxs IHVzIGlmIHlvdSBoYXZlIGFueSBvdGhlciBjb21tZW50cy4NCg0KIA0KDQogDQoNCmh0dHA6Ly90 b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDcj c2VjdGlvbi00LjUgDQoNCiANCg0KIA0KDQo0LjUuICBVbmljYXN0IFJlc3BvbnNlcyB0byBNdWx0 aWNhc3QgTWVzc2FnZXMNCg0KIA0KDQogICBJbiBDb0FQLCByZXNwb25zZXMgdG8gbXVsdGljYXN0 IG1lc3NhZ2VzIGFyZSBhbHdheXMgc2VudCBiYWNrIGFzDQoNCiAgIHVuaWNhc3QuICBUaGF0IGlz LCB0aGUgZ3JvdXAgbWVtYmVycyB0aGF0IHJlY2VpdmUgYSBtdWx0aWNhc3QgbWVzc2FnZQ0KDQog ICBtYXkgaW5kaXZpZHVhbGx5IGRlY2lkZSB0byBzZW5kIChvciBzdXBwcmVzcykgYSB1bmljYXN0 IHJlc3BvbnNlIGFzDQoNCiAgIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDIuNSBvZiBbSS1ELmlldGYt Y29yZS1ncm91cGNvbW1dLiAgVGhlIHVuaWNhc3QNCg0KICAgcmVzcG9uc2VzIHRvIGEgRFRMUy1i YXNlZCBtdWx0aWNhc3QgbWVzc2FnZSBtYXkgb3B0aW9uYWxseSBiZSBzZWN1cmUuDQoNCiAgIFNw ZWNpZmljYWxseSwgdGhlIHVuaWNhc3QgcmVzcG9uc2UgbWF5IGJlIHNlbnQgYmFjayBhcyBhIHVu aWNhc3QgRFRMUw0KDQogICBhcyBkZXNjcmliZWQgaW4gU2VjdGlvbiA5LjEgb2YgW0ktRC5pZXRm LWNvcmUtY29hcF0uICBUaGlzIHJlcXVpcmVzDQoNCiAgIHRoYXQgYSB1bmljYXN0IERUTFMgaGFu ZHNoYWtlIHdhcyBwcmV2aW91c2x5IGluaXRpYXRlZCBiZXR3ZWVuIHRoZQ0KDQogICBtdWx0aWNh c3QgbWVzc2FnZSBzZW5kZXIgYW5kIGxpc3RlbmVyLg0KDQogDQoNCiAgIEVpdGhlciB0aGUgbXVs dGljYXN0IG1lc3NhZ2Ugc2VuZGVyIG9yIGxpc3RlbmVyIG1heSBpbml0aWF0ZSB0aGUNCg0KICAg dW5pY2FzdCBEVExTIGhhbmRzaGFrZS4gIElmIHRoZSBEVExTIGhhbmRzaGFrZSB3YXMgaW5pdGlh dGVkIGJ5IHRoZQ0KDQogICBtdWx0aWNhc3QgbWVzc2FnZSBzZW5kZXIsIGl0IHJlcXVpcmVzIHRo YXQgdGhlIHNlbmRlciBiZSBhd2FyZSBvZiB0aGUNCg0KICAgbWVtYmVyc2hpcCBvZiB0aGUgbXVs dGljYXN0IGdyb3VwLiAgVGhpcyBjYW4gYmUgYWNjb21wbGlzaGVkLCBmb3INCg0KICAgZXhhbXBs ZSwgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gMi42IG9mIFtJLUQuaWV0Zi1jb3JlLWNvYXBdLiAg SWYgdGhlDQoNCiAgIGxpc3RlbmVyIGluaXRpYXRlZCB0aGUgRFRMUyBoYW5kc2hha2UsIGl0IG1h eSBoYXZlIGRvbmUgc28sIGZvcg0KDQogICBleGFtcGxlLCBhZnRlciByZWNlaXZpbmcgYSBtdWx0 aWNhc3QgbWVzc2FnZSBmb3IgdGhlIGZpcnN0IHRpbWUuDQoNCiANCg0KICAgSW4gdGhlIGV4dHJl bWUgc2NlbmFyaW8sIGEgbXVsdGljYXN0IHNlbmRlciBtYXkgYXR0ZW1wdCB0byBpbml0aWF0ZQ0K DQogICB0aGUgdW5pY2FzdCBEVExTIGhhbmRzaGFrZSB3aXRoIGFsbCwgb3IgYSBzdWJzZXQgb2Ys IGtub3duIGxpc3RlbmVycw0KDQogICBqdXN0IGFmdGVyIGl0IHNlbmRzIG91dCB0aGUgRFRMUy1i YXNlZCBtdWx0aWNhc3QgbWVzc2FnZS4gIFRoaXMgbWF5DQoNCiAgIHJlc3VsdCBpbiB0aGUgbXVs dGljYXN0IHNlbmRlciBoYXZpbmcgdG8gcHJvY2VzcyB1bmljYXN0IERUTFMNCg0KICAgaGFuZHNo YWtlIG1lc3NhZ2VzIGZyb20gbXVsdGlwbGUgbXVsdGljYXN0IGxpc3RlbmVycyBpbiBhIHNob3J0 DQoNCiAgIHBlcmlvZC4NCg0KIA0KDQogICBOb3RlOiBUaGVyZSBpcyBhbiBvYnZpb3VzIHRpbWlu ZyBhbmQgcHJvY2Vzc2luZyBsb2FkIGlzc3VlIGZvciB0aGUNCg0KICAgbXVsdGljYXN0IHNlbmRl ciBpbiB0aGUgc2NlbmFyaW8gd2hlcmUgaXQgYXR0ZW1wdHMgdG8gaW5pdGlhdGUgdGhlDQoNCiAg IHVuaWNhc3QgRFRMUyBoYW5kc2hha2VzIHdpdGggYWxsL3NvbWUgb2YgaXRzIGtub3duIGxpc3Rl bmVycyBqdXN0DQoNCiAgIGFmdGVyIGl0IHNlbmRzIG91dCB0aGUgRFRMUy1iYXNlZCBtdWx0aWNh c3QgbWVzc2FnZS4gIEluIHRoaXMgY2FzZSwNCg0KICAgdGhlIHByb2Nlc3NpbmcgbG9hZCBpbiB0 aGUgbXVsdGljYXN0IHNlbmRlciAoaS5lLiB1bmljYXN0IERUTFMNCg0KICAgY2xpZW50KSBpcyBy ZWR1Y2VkIHNvbWV3aGF0IGJ5IHRoZSBmYWN0IHRoYXQgQ29BUCByZXF1aXJlcyBhIGJhY2stb2Zm DQoNCiAgIGFuZCByYW5kb21pemF0aW9uIG9mIHRoZSB1bmljYXN0IHJlc3BvbnNlIGJ5IHRoZSBM ZWlzdXJlIHRpbWVyDQoNCiAgIG1lY2hhbmlzbSBhcyBkZXNjcmliZWQgaW4gU2VjdGlvbiA4LjIg b2YgW0ktRC5pZXRmLWNvcmUtY29hcF0uDQoNCiANCg0KIA0KDQogDQoNCkJlc3QgUmVnYXJkcywN Cg0KIA0KDQogDQoNCkFrYmFyDQoNCiANCg0KIA0KDQogDQoNCkZyb206IGR0bHMtaW90IFttYWls dG86ZHRscy1pb3QtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIFJhaG1hbiwgQWtiYXIN ClNlbnQ6IFR1ZXNkYXksIE1heSAwNiwgMjAxNCA0OjQ0IFBNDQpUbzogTWFyY28gVGlsb2NhDQpD YzogS3VtYXIsIFNhbmRlZXA7IGR0bHMtaW90QGlldGYub3JnDQpTdWJqZWN0OiBSZTogW0R0bHMt aW90XSBVbmljYXN0IHJlc3BvbnNlcyBpbiBkcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3Vy aXR5LTA1DQoNCiANCg0KSGkgTWFyY28sDQoNCiANCg0KIA0KDQpUaGFua3MgZm9yIHJldmlld2lu ZyB0aGUgdXBkYXRlZCBkcmFmdC4gIEFsc28gaGVyZSBpcyBteSBmZWVkYmFjayB0byB5b3VyIHR3 byBuZXcgcXVlc3Rpb25zOg0KDQogDQoNCiANCg0KPjEpIEluIG9yZGVyIHRvIHBlcmZvcm0gYSBE VExTIGhhbmRzaGFrZSBiZWZvcmUvYWZ0ZXIgc2VuZGluZyBhIG11bHRpY2FzdCBtZXNzYWdlLCBh IHNlbmRlcg0KDQo+IG5vZGUgc2hvdWxkIGJlIGF3YXJlIG9mIHRoZSBncm91cCBtZW1iZXJzaGlw LCBlc3BlY2lhbGx5IHdoYXQgYXJlIHRoZSBsaXN0ZW5lciBub2RlcyBjdXJyZW50bHkNCg0KPiBw cmVzZW50IGluIHRoZSBncm91cC4gT2YgY291cnNlLCBzdWNoIGEgZ3JvdXAgbWVtYmVyc2hpcCBt YXkgY2hhbmdlIG92ZXIgdGltZSwgdXBvbiBuZXcgbm9kZXMNCj5qb2luaW5nIHRoZSBncm91cC4g SG93ZXZlciwgU2VjdGlvbiAzLjEgaW4gdGhlIGRyYWZ0IHN0YXRlcyB0aGF0ICJBbnkgZGV2aWNl IGNhbiBpbiBwcmluY2lwbGUgZGVjaWRlDQoNCj50byBsaXN0ZW4gdG8gYW55IElQdjYgbXVsdGlj YXN0IGFkZHJlc3MuIFRoaXMgYWxzbyBtZWFucyBhcHBsaWNhdGlvbnMgb24gdGhlIG90aGVyIGRl dmljZXMgZG8gbm90DQoNCj5rbm93LCBvciBkbyBub3QgZ2V0IG5vdGlmaWVkLCB3aGVuIG5ldyBs aXN0ZW5lcnMgam9pbiB0aGUgbmV0d29yay4iLiBDb3VsZG4ndCB0aGlzIGJlIGEgcHJvYmxlbQ0K DQo+Zm9yIHRoZSBzdWdnZXN0ZWQgYXBwcm9hY2g/DQoNCiANCg0KWWVzLCBpbiBwcmluY2lwbGUs IGFueSBkZXZpY2UgY2FuIGRlY2lkZSB0byBsaXN0ZW4gZm9yIGFueSBJUHY2IG11bHRpY2FzdCBh ZGRyZXNzLiAgQnV0IGluIHByYWN0aWNlIG9mIGNvdXJzZSB0aGVyZSBhcmUgSVB2NiBtdWx0aWNh c3QgcmVsYXRlZCBwcm90b2NvbHMgZm9yIHJvdXRpbmcvam9pbmluZyB0aGF0IGRpY3RhdGUgd2hv IGNhbiBzdWNjZXNzZnVsbHkgbGlzdGVuIGZvciBhbmQgcmVjZWl2ZSBhbiBJUHY2IG11bHRpY2Fz dCBwYWNrZXQuICBGb3IgZXhhbXBsZSwgdW5sZXNzIGEgZGV2aWNlIHVzZXMgYSBwcm90b2NvbCBs aWtlIE1MRCB0byBleHBsaWNpdGx5IGpvaW4gYSBtdWx0aWNhc3QgZ3JvdXAsIHRoZSBuZXR3b3Jr IHdpbGwgbmV2ZXIgcm91dGUgdGhlIG11bHRpY2FzdCBwYWNrZXRzIG9mIGludGVyZXN0IHRvIHRo ZSBzdWItbmV0d29yayBvZiB0aGUgZGV2aWNlLiAgVGhpcyBpcyBhbGwgZXhwbGFpbmVkIGF0IGEg aGlnaCBsZXZlbCBpbiB0aGUgSS5ELmdyb3VwY29tbSByZWZlcmVuY2UgKGh0dHA6Ly90b29scy5p ZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtY29yZS1ncm91cGNvbW0tMTgjc2VjdGlvbi0yLjEgKSAu DQoNCiANCg0KVGhlIG90aGVyIHBhcnQgb2YgeW91ciBxdWVzdGlvbiByZWZlcnMgdG8gaG93IGRv ZXMgdGhlIHNlbmRlciBub2RlIGtub3cgd2hvIGlzIHBhcnQgb2YgdGhlIGdyb3VwLiAgWW91IGFy ZSBjb3JyZWN0IHRoYXQgaXQgaXMgdmVyeSBkaWZmaWN1bHQgdG8ga25vdyBwcmVjaXNlbHkgdGhl IG1lbWJlcnNoaXAgb2YgYSBncm91cC4gIFRoYXQgaXMgd2h5IHdlIGhhZCB0aGUgc3VidGxlIHJl ZmVyZW5jZSB0byDigJxrbm93biBsaXN0ZW5lcnPigJ0uICBIb3cgeW91IGFjdHVhbGx5IGtub3cg dGhlIG1lbWJlcnNoaXAgZGVwZW5kcyBvbiB0aGUgbWl4IG9mIHByb3RvY29scyB1c2VkIChhbmQg aXMgaW4gZmFjdCBpdCBpcyBub3QgYWx3YXlzIHBvc3NpYmxlIHRvIGtub3cgYWxsIHRoZSBtZW1i ZXJzIGFjY3VyYXRlbHkpLiAgQnV0IGZvciBDb0FQIGdyb3VwIG1lbWJlciBkaXNjb3ZlcnksIHRo ZXJlIGlzICBhZ2FpbiBndWlkYW5jZSBnaXZlbiBpbiB0aGUgSS5ELmdyb3VwY29tbSByZWZlcmVu Y2UgKHNwZWNpZmljYWxseSBpbiBodHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRm LWNvcmUtZ3JvdXBjb21tLTE4I3NlY3Rpb24tMi42ICkuICBXZSBjYW4gbWFrZSB0aGlzIHBvaW50 IGEgYml0IG1vcmUgZXhwbGljaXQgaW4gdGhlIG5leHQgdXBkYXRlIG9mIG91ciBJLUQuDQoNCiAN Cg0KIA0KDQogDQoNCj4yKSBBbiBhbHRlcm5hdGl2ZSBhcHByb2FjaCB0byB0aGUgb25lIHN1Z2dl c3RlZCBpbiBTZWN0aW9uIDQuNSBtYXkgY29uc2lzdCBpbiBhIGxpc3RlbmVyIG5vZGUgZXN0YWJs aXNoaW5nDQoNCj4gYSB1bmljYXN0IERUTFMgc2Vzc2lvbiAoaS5lLiBzdGFydGluZyBhIERUTFMg aGFuZHNoYWtlKSB3aXRoIHRoZSBzZW5kZXIgbm9kZSwgdXBvbiByZWNlaXZpbmcgYSBtdWx0aWNh c3QNCg0KPiBtZXNzYWdlIGZvciB0aGUgZmlyc3QgdGltZS4NCg0KIA0KDQpZZXMsIGdvb2QgcG9p bnQhICBXZSBjYW4gYWRkIHRoaXMgdG8gdGhlIEktRCBpbiBvdXIgbmV4dCB1cGRhdGUuIA0KDQog DQoNCiANCg0KQmVzdCBSZWdhcmRzLA0KDQogDQoNCiANCg0KQWtiYXINCg0KIA0KDQogDQoNCiAN Cg0KRnJvbTogTWFyY28gVGlsb2NhIFttYWlsdG86bWFyY29Ac2ljcy5zZV0gDQpTZW50OiBUdWVz ZGF5LCBNYXkgMDYsIDIwMTQgMTI6MzIgUE0NClRvOiBSYWhtYW4sIEFrYmFyDQpDYzogS3VtYXIs IFNhbmRlZXA7IGR0bHMtaW90QGlldGYub3JnDQpTdWJqZWN0OiBSZTogW0R0bHMtaW90XSBVbmlj YXN0IHJlc3BvbnNlcyBpbiBkcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA1DQoN CiANCg0KSGVsbG8gQWtiYXIsDQoNCiANCg0KVGhhbmtzIGZvciBoYXZpbmcgY29uc2lkZXJlZCBt eSBxdWVzdGlvbi4gVGhlIG5ldyBTZWN0aW9uIDQuNSBsb29rcyBmaW5lIHRvIG1lLiBBbHNvLCBJ IGhhdmUgdGhlIHR3byBmb2xsb3dpbmcgY29tbWVudHMuDQoNCiANCg0KMSkgSW4gb3JkZXIgdG8g cGVyZm9ybSBhIERUTFMgaGFuZHNoYWtlIGJlZm9yZS9hZnRlciBzZW5kaW5nIGEgbXVsdGljYXN0 IG1lc3NhZ2UsIGEgc2VuZGVyIG5vZGUgc2hvdWxkIGJlIGF3YXJlIG9mIHRoZSBncm91cCBtZW1i ZXJzaGlwLCBlc3BlY2lhbGx5IHdoYXQgYXJlIHRoZSBsaXN0ZW5lciBub2RlcyBjdXJyZW50bHkg cHJlc2VudCBpbiB0aGUgZ3JvdXAuIE9mIGNvdXJzZSwgc3VjaCBhIGdyb3VwIG1lbWJlcnNoaXAg bWF5IGNoYW5nZSBvdmVyIHRpbWUsIHVwb24gbmV3IG5vZGVzIGpvaW5pbmcgdGhlIGdyb3VwLiBI b3dldmVyLCBTZWN0aW9uIDMuMSBpbiB0aGUgZHJhZnQgc3RhdGVzIHRoYXQgIkFueSBkZXZpY2Ug Y2FuIGluIHByaW5jaXBsZSBkZWNpZGUgdG8gbGlzdGVuIHRvIGFueSBJUHY2IG11bHRpY2FzdCBh ZGRyZXNzLiBUaGlzIGFsc28gbWVhbnMgYXBwbGljYXRpb25zIG9uIHRoZSBvdGhlciBkZXZpY2Vz IGRvIG5vdCBrbm93LCBvciBkbyBub3QgZ2V0IG5vdGlmaWVkLCB3aGVuIG5ldyBsaXN0ZW5lcnMg am9pbiB0aGUgbmV0d29yay4iLiBDb3VsZG4ndCB0aGlzIGJlIGEgcHJvYmxlbSBmb3IgdGhlIHN1 Z2dlc3RlZCBhcHByb2FjaD8NCg0KIA0KDQoyKSBBbiBhbHRlcm5hdGl2ZSBhcHByb2FjaCB0byB0 aGUgb25lIHN1Z2dlc3RlZCBpbiBTZWN0aW9uIDQuNSBtYXkgY29uc2lzdCBpbiBhIGxpc3RlbmVy IG5vZGUgZXN0YWJsaXNoaW5nIGEgdW5pY2FzdCBEVExTIHNlc3Npb24gKGkuZS4gc3RhcnRpbmcg YSBEVExTIGhhbmRzaGFrZSkgd2l0aCB0aGUgc2VuZGVyIG5vZGUsIHVwb24gcmVjZWl2aW5nIGEg bXVsdGljYXN0IG1lc3NhZ2UgZm9yIHRoZSBmaXJzdCB0aW1lLg0KDQogDQoNCkJlc3QgcmVnYXJk cywNCg0KTWFyY28NCg0KIA0KDQogDQoNCiANCg0KIA0KDQpPbiA1IE1heSAyMDE0IDIzOjQ1LCBS YWhtYW4sIEFrYmFyIDxBa2Jhci5SYWhtYW5AaW50ZXJkaWdpdGFsLmNvbT4gd3JvdGU6DQoNCkhp IE1hcmNvLA0KDQogDQoNCiANCg0KIA0KDQpUaGUgYXV0aG9ycyBoYXZlIG1hZGUgYW4gdXBkYXRl IHRvIHRoZSBkcmFmdCB0byBhZGRyZXNzIGZ1bGx5IHlvdXIgZ29vZCBxdWVzdGlvbiByZWdhcmRp bmcgaG93IHRvIGhhbmRsZSB0aGUgdW5pY2FzdCByZXNwb25zZXMgdG8gdGhlIG11bHRpY2FzdCBy ZXNwb25zZS4gIFNwZWNpZmljYWxseSwgcGxlYXNlIHJldmlldyB0aGUgbmV3IHNlY3Rpb24gNC41 IGFuZCB0ZWxsIHVzIGlmIHlvdSBoYXZlIGFueSBtb3JlIHF1ZXN0aW9uczoNCg0KIA0KDQogDQoN Cmh0dHA6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2Vj dXJpdHktMDYjc2VjdGlvbi00LjUNCg0KIA0KDQo0LjUuICBVbmljYXN0IFJlc3BvbnNlcyB0byBN dWx0aWNhc3QgTWVzc2FnZXMNCg0KIA0KDQogICBJbiBDb0FQLCByZXNwb25zZXMgdG8gbXVsdGlj YXN0IG1lc3NhZ2VzIGFyZSBhbHdheXMgc2VudCBiYWNrIGFzDQoNCiAgIHVuaWNhc3QuICBUaGF0 IGlzLCB0aGUgZ3JvdXAgbWVtYmVycyB0aGF0IHJlY2VpdmUgYSBtdWx0aWNhc3QgbWVzc2FnZQ0K DQogICBtYXkgaW5kaXZpZHVhbGx5IGRlY2lkZSB0byBzZW5kIChvciBzdXBwcmVzcykgYSB1bmlj YXN0IHJlc3BvbnNlIGFzDQoNCiAgIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDIuNSBvZiBbSS1ELmll dGYtY29yZS1ncm91cGNvbW1dLiAgVGhlIHVuaWNhc3QNCg0KICAgcmVzcG9uc2VzIHRvIGEgRFRM Uy1iYXNlZCBtdWx0aWNhc3QgbWVzc2FnZSBtYXkgb3B0aW9uYWxseSBiZSBzZWN1cmUuDQoNCiAg IFNwZWNpZmljYWxseSwgdGhlIHVuaWNhc3QgcmVzcG9uc2UgbWF5IGJlIHNlbnQgYmFjayBhcyBh IHVuaWNhc3QgRFRMUw0KDQogICBhcyBkZXNjcmliZWQgaW4gU2VjdGlvbiA5LjEgb2YgW0ktRC5p ZXRmLWNvcmUtY29hcF0uICBUaGlzIHJlcXVpcmVzDQoNCiAgIHRoYXQgYSB1bmljYXN0IERUTFMg aGFuZHNoYWtlIHdhcyBwcmV2aW91c2x5IGluaXRpYXRlZCBiZXR3ZWVuIHRoZQ0KDQogICBtdWx0 aWNhc3QgbWVzc2FnZSBzZW5kZXIgYW5kIGxpc3RlbmVyLiAgSW4gdGhlIGV4dHJlbWUgc2NlbmFy aW8sIGENCg0KICAgbXVsdGljYXN0IHNlbmRlciBtYXkgYXR0ZW1wdCB0byBpbml0aWF0ZSB0aGUg dW5pY2FzdCBEVExTIGhhbmRzaGFrZQ0KDQogICB3aXRoIGFsbCBvciBhIHN1YnNldCBvZiBrbm93 biBsaXN0ZW5lcnMganVzdCBiZWZvcmUgb3IganVzdCBhZnRlciBpdA0KDQogICBzZW5kcyBvdXQg dGhlIERUTFMtYmFzZWQgbXVsdGljYXN0IG1lc3NhZ2UuICBUaGlzIG1heSByZXN1bHQgaW4gdGhl DQoNCiAgIG11bHRpY2FzdCBzZW5kZXIgKGkuZS4gdW5pY2FzdCBEVExTIGNsaWVudCkgaGF2aW5n IHRvIHByb2Nlc3MgdW5pY2FzdA0KDQogICBEVExTIGhhbmRzaGFrZSBtZXNzYWdlcyBmcm9tIG11 bHRpcGxlIG11bHRpY2FzdCBsaXN0ZW5lcnMgKGkuZS4NCg0KICAgdW5pY2FzdCBEVExTIHNlcnZl cnMpIGluIGEgc2hvcnQgcGVyaW9kLg0KDQogDQoNCiAgIE5vdGU6IFRoZXJlIGlzIGFuIG9idmlv dXMgdGltaW5nIGFuZCBwcm9jZXNzaW5nIGxvYWQgaXNzdWUgZm9yIHRoZQ0KDQogICBtdWx0aWNh c3Qgc2VuZGVyIGluIHRoZSBzY2VuYXJpbyB3aGVyZSBpdCBhdHRlbXB0cyB0byBpbml0aWF0ZSB0 aGUNCg0KICAgdW5pY2FzdCBEVExTIGhhbmRzaGFrZXMgd2l0aCBhbGwvc29tZSBvZiBpdHMga25v d24gbGlzdGVuZXJzIGp1c3QNCg0KICAgYWZ0ZXIgaXQgc2VuZHMgb3V0IHRoZSBEVExTLWJhc2Vk IG11bHRpY2FzdCBtZXNzYWdlLiAgSW4gdGhpcyBjYXNlLA0KDQogICB0aGUgcHJvY2Vzc2luZyBs b2FkIGluIHRoZSBtdWx0aWNhc3Qgc2VuZGVyIChpLmUuIHVuaWNhc3QgRFRMUw0KDQogICBjbGll bnQpIGlzIHJlZHVjZWQgc29tZXdoYXQgYnkgdGhlIGZhY3QgdGhhdCBDb0FQIHJlcXVpcmVzIGEg YmFjay1vZmYNCg0KICAgYW5kIHJhbmRvbWl6YXRpb24gb2YgdGhlIHVuaWNhc3QgcmVzcG9uc2Ug YnkgdGhlIExlaXN1cmUgdGltZXINCg0KICAgbWVjaGFuaXNtIGFzIGRlc2NyaWJlZCBpbiBTZWN0 aW9uIDguMiBvZiBbSS1ELmlldGYtY29yZS1jb2FwXS4NCg0KIA0KDQogDQoNCiANCg0KIA0KDQpC ZXN0IFJlZ2FyZHMsDQoNCiANCg0KIA0KDQpBa2Jhcg0KDQogDQoNCiANCg0KIA0KDQpGcm9tOiBk dGxzLWlvdCBbbWFpbHRvOmR0bHMtaW90LWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBL dW1hciwgU2FuZGVlcA0KU2VudDogV2VkbmVzZGF5LCBBcHJpbCAwMiwgMjAxNCAzOjQ3IEFNDQpU bzogTWFyY28gVGlsb2NhOyBkdGxzLWlvdEBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtEdGxzLWlv dF0gVW5pY2FzdCByZXNwb25zZXMgaW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0 eS0wNQ0KDQogDQoNCkhpIE1hcmNvDQoNCiANCg0KVGhlIGRyYWZ0IG9ubHkgYWRkcmVzc2VzIHRo ZSBwcm90ZWN0aW9uIG9mIG11bHRpY2FzdCB0cmFmZmljLiBJZiB1bmljYXN0IHJlc3BvbnNlcyBh cmUgZXhwZWN0ZWQgYW5kIGlmIHByb3RlY3Rpb24gaXMgcmVxdWlyZWQgZm9yIHN1Y2ggbWVzc2Fn ZXMsIHRoZW4gZXhpc3RpbmcgdW5pY2FzdCBwcm90ZWN0aW9uIG1lY2hhbmlzbXMgYmFzZWQgb24g RFRMUyBhcyBzdWdnZXN0ZWQgaW4gZHJhZnQtaWV0Zi1jb3JlLWNvYXAtMTggc2hvdWxkIGJlIHVz ZWQuIFByb3RlY3Rpb24gb2YgYWxsIHVuaWNhc3QgbWVzc2FnZXMgc2hvdWxkIGJlIHRyZWF0ZWQg YXMgd291bGQgYmUgZG9uZSBub3JtYWxseS4gDQoNCiANCg0KSG9wZSB0aGF0IGFuc3dlcnMgeW91 ciBxdWVzdGlvbi4NCg0KIA0KDQpSZWdhcmRzDQoNClNhbmRlZXAgDQoNCiANCg0KRnJvbTogZHRs cy1pb3QgW21haWx0bzpkdGxzLWlvdC1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgTWFy Y28gVGlsb2NhDQpTZW50OiBUdWVzZGF5LCBBcHJpbCAwMSwgMjAxNCA2OjM1IFBNDQpUbzogZHRs cy1pb3RAaWV0Zi5vcmcNClN1YmplY3Q6IFtEdGxzLWlvdF0gVW5pY2FzdCByZXNwb25zZXMgaW4g ZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNQ0KDQogDQoNCkRlYXIgYWxsLA0K DQogDQoNCkFzIHRvIHBvc3NpYmxlIHJlc3BvbnNlcyB0byBtdWx0aWNhc3QgcmVxdWVzdHMsIFNl Y3Rpb24gMi4xIHN0YXRlcyB0aGF0IHRoZXkgYXJlIHNlbnQgYmFjayBpbiB1bmljYXN0LiBUaGVu LCBubyBmdXJ0aGVyIGRldGFpbHMgYXJlIHByb3ZpZGVkIGFib3V0IHRoZWlyIHByb3RlY3Rpb24u DQoNCiANCg0KQXJlIHN1Y2ggcmVzcG9uc2VzIHN1cHBvc2VkIHRvIGJlIHByb3RlY3RlZCB0aHJv dWdoIGEgInJlZ3VsYXIiIERUTFMgc2Vzc2lvbiwgd2hpY2ggbXVzdCBiZSAob3IgaGFzIHByZXZp b3VzbHkgYmVlbikgZXN0YWJsaXNoZWQgYmV0d2VlbiB0aGUgc2VuZGVyIGFuZCBsaXN0ZW5lcj8N Cg0KIA0KDQpDaGVlcnMsDQoNCk1hcmNvDQoNCiANCg0KIA0KDQogDQoNCiANCg0KIA0KDQpfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KDQpUaGUgaW5mb3JtYXRpb24gY29udGFpbmVk IGluIHRoaXMgbWVzc2FnZSBtYXkgYmUgY29uZmlkZW50aWFsIGFuZCBsZWdhbGx5IHByb3RlY3Rl ZCB1bmRlciBhcHBsaWNhYmxlIGxhdy4gVGhlIG1lc3NhZ2UgaXMgaW50ZW5kZWQgc29sZWx5IGZv ciB0aGUgYWRkcmVzc2VlKHMpLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50 LCB5b3UgYXJlIGhlcmVieSBub3RpZmllZCB0aGF0IGFueSB1c2UsIGZvcndhcmRpbmcsIGRpc3Nl bWluYXRpb24sIG9yIHJlcHJvZHVjdGlvbiBvZiB0aGlzIG1lc3NhZ2UgaXMgc3RyaWN0bHkgcHJv aGliaXRlZCBhbmQgbWF5IGJlIHVubGF3ZnVsLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQg cmVjaXBpZW50LCBwbGVhc2UgY29udGFjdCB0aGUgc2VuZGVyIGJ5IHJldHVybiBlLW1haWwgYW5k IGRlc3Ryb3kgYWxsIGNvcGllcyBvZiB0aGUgb3JpZ2luYWwgbWVzc2FnZS4NCg0KIA0KDQo= ------_=_NextPart_001_01CF6BBE.7DFF10D5 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+PGhlYWQ+PG1ldGEgaHR0cC1lcXVpdj1Db250ZW50LVR5cGUgY29udGVu dD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij48bWV0YSBuYW1lPUdlbmVyYXRvciBjb250ZW50 PSJNaWNyb3NvZnQgV29yZCAxNCAoZmlsdGVyZWQgbWVkaXVtKSI+PCEtLVtpZiAhbXNvXT48c3R5 bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7YmVoYXZpb3I6dXJs KCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0KLnNo YXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwhW2VuZGlmXS0tPjxz dHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJcGFub3NlLTE6MiAxMSA2IDQgMyA1IDQgNCAyIDQ7 fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRp di5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9u dC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIiwic2VyaWYiO30N CmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNv bG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4u TXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1 cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnByZQ0KCXttc28tc3R5bGUtcHJp b3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1h cmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJ Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpwLk1zb0FjZXRhdGUsIGxpLk1zb0FjZXRhdGUs IGRpdi5Nc29BY2V0YXRlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGlu azoiQmFsbG9vbiBUZXh0IENoYXIiOw0KCW1hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAw MXB0Ow0KCWZvbnQtc2l6ZTo4LjBwdDsNCglmb250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJp ZiI7fQ0Kc3Bhbi5CYWxsb29uVGV4dENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IkJhbGxvb24gVGV4 dCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkJhbGxv b24gVGV4dCI7DQoJZm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiO30NCnNwYW4uRW1h aWxTdHlsZTE5DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxp YnJpIiwic2Fucy1zZXJpZiI7DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFuLkVtYWlsU3R5bGUyMA0K CXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIs InNhbnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5IVE1MUHJlZm9ybWF0dGVkQ2hh cg0KCXttc28tc3R5bGUtbmFtZToiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbXNvLXN0eWxl LXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJIVE1MIFByZWZvcm1hdHRlZCI7DQoJZm9u dC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlw ZTpleHBvcnQtb25seTsNCglmb250LXNpemU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0K CXtzaXplOjguNWluIDExLjBpbjsNCgltYXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0K ZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1b aWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1h eD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0K PG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9 IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+PC9oZWFkPjxib2R5IGxh bmc9RU4tVVMgbGluaz1ibHVlIHZsaW5rPXB1cnBsZT48ZGl2IGNsYXNzPVdvcmRTZWN0aW9uMT48 cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5IaSBNYXJjbyw8bzpwPjwv bzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHls ZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2Nv bG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3Jt YWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJz YW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5XZSBoYXZlIHVwZGF0ZWQgdGhlIGRyYWZ0IHRvIGNh cHR1cmUgeW91ciByZW1haW5pbmcgY29tbWVudHMgYmVsb3cuwqAgUGxlYXNlIHJldmlldyBhbmQg dGVsbCB1cyBpZiB5b3UgaGF2ZSBhbnkgb3RoZXIgY29tbWVudHMuPG86cD48L286cD48L3NwYW4+ PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdE Jz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0 eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7 Y29sb3I6IzFGNDk3RCc+PGEgaHJlZj0iaHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQt a2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNyNzZWN0aW9uLTQuNSI+aHR0cDovL3Rvb2xz LmlldGYub3JnL2h0bWwvZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNyNzZWN0 aW9uLTQuNTwvYT4gPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3Bh biBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2Vy aWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1N c29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGli cmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiJDb3VyaWVyIE5ldyInPjQuNS7CoCBVbmljYXN0IFJlc3BvbnNlcyB0byBNdWx0aWNh c3QgTWVzc2FnZXM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFu IHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2Zv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+wqDCoCBJbiBDb0FQLCBy ZXNwb25zZXMgdG8gbXVsdGljYXN0IG1lc3NhZ2VzIGFyZSBhbHdheXMgc2VudCBiYWNrIGFzPG86 cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz7CoMKgIHVuaWNhc3QuwqAgVGhh dCBpcywgdGhlIGdyb3VwIG1lbWJlcnMgdGhhdCByZWNlaXZlIGEgbXVsdGljYXN0IG1lc3NhZ2U8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPsKgwqAgbWF5IGluZGl2aWR1 YWxseSBkZWNpZGUgdG8gc2VuZCAob3Igc3VwcHJlc3MpIGEgdW5pY2FzdCByZXNwb25zZSBhczxv OnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+wqDCoCBkZXNjcmliZWQgaW4g U2VjdGlvbiAyLjUgb2YgW0ktRC5pZXRmLWNvcmUtZ3JvdXBjb21tXS7CoCBUaGUgdW5pY2FzdDxv OnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+wqDCoCByZXNwb25zZXMgdG8g YSBEVExTLWJhc2VkIG11bHRpY2FzdCBtZXNzYWdlIG1heSBvcHRpb25hbGx5IGJlIHNlY3VyZS48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPsKgwqAgU3BlY2lmaWNhbGx5 LCB0aGUgdW5pY2FzdCByZXNwb25zZSBtYXkgYmUgc2VudCBiYWNrIGFzIGEgdW5pY2FzdCBEVExT PG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz7CoMKgIGFzIGRlc2NyaWJl ZCBpbiBTZWN0aW9uIDkuMSBvZiBbSS1ELmlldGYtY29yZS1jb2FwXS7CoCBUaGlzIHJlcXVpcmVz PG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz7CoMKgIHRoYXQgYSB1bmlj YXN0IERUTFMgaGFuZHNoYWtlIHdhcyBwcmV2aW91c2x5IGluaXRpYXRlZCBiZXR3ZWVuIHRoZTxv OnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+wqDCoCBtdWx0aWNhc3QgbWVz c2FnZSBzZW5kZXIgYW5kIGxpc3RlbmVyLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1N c29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJp ZXIgTmV3Iic+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48 c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz7C oMKgIEVpdGhlciB0aGUgbXVsdGljYXN0IG1lc3NhZ2Ugc2VuZGVyIG9yIGxpc3RlbmVyIG1heSBp bml0aWF0ZSB0aGU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFu IHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPsKgwqAg dW5pY2FzdCBEVExTIGhhbmRzaGFrZS7CoCBJZiB0aGUgRFRMUyBoYW5kc2hha2Ugd2FzIGluaXRp YXRlZCBieSB0aGU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFu IHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPsKgwqAg bXVsdGljYXN0IG1lc3NhZ2Ugc2VuZGVyLCBpdCByZXF1aXJlcyB0aGF0IHRoZSBzZW5kZXIgYmUg YXdhcmUgb2YgdGhlPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3Bh biBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz7CoMKg IG1lbWJlcnNoaXAgb2YgdGhlIG11bHRpY2FzdCBncm91cC7CoCBUaGlzIGNhbiBiZSBhY2NvbXBs aXNoZWQsIGZvcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4g c3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+wqDCoCBl eGFtcGxlLCBhcyBkZXNjcmliZWQgaW4gU2VjdGlvbiAyLjYgb2YgW0ktRC5pZXRmLWNvcmUtY29h cF0uwqAgSWYgdGhlPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3Bh biBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz7CoMKg IGxpc3RlbmVyIGluaXRpYXRlZCB0aGUgRFRMUyBoYW5kc2hha2UsIGl0IG1heSBoYXZlIGRvbmUg c28sIGZvcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5 bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+wqDCoCBleGFt cGxlLCBhZnRlciByZWNlaXZpbmcgYSBtdWx0aWNhc3QgbWVzc2FnZSBmb3IgdGhlIGZpcnN0IHRp bWUuPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0n Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPsKgwqAgSW4gdGhlIGV4dHJlbWUgc2Nl bmFyaW8sIGEgbXVsdGljYXN0IHNlbmRlciBtYXkgYXR0ZW1wdCB0byBpbml0aWF0ZTxvOnA+PC9v OnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+wqDCoCB0aGUgdW5pY2FzdCBEVExTIGhh bmRzaGFrZSB3aXRoIGFsbCwgb3IgYSBzdWJzZXQgb2YsIGtub3duIGxpc3RlbmVyczxvOnA+PC9v OnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+wqDCoCBqdXN0IGFmdGVyIGl0IHNlbmRz IG91dCB0aGUgRFRMUy1iYXNlZCBtdWx0aWNhc3QgbWVzc2FnZS7CoCBUaGlzIG1heTxvOnA+PC9v OnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+wqDCoCByZXN1bHQgaW4gdGhlIG11bHRp Y2FzdCBzZW5kZXIgaGF2aW5nIHRvIHByb2Nlc3MgdW5pY2FzdCBEVExTPG86cD48L286cD48L3Nw YW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseToiQ291cmllciBOZXciJz7CoMKgIGhhbmRzaGFrZSBtZXNzYWdlcyBmcm9tIG11 bHRpcGxlIG11bHRpY2FzdCBsaXN0ZW5lcnMgaW4gYSBzaG9ydDxvOnA+PC9vOnA+PC9zcGFuPjwv cD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6IkNvdXJpZXIgTmV3Iic+wqDCoCBwZXJpb2QuPG86cD48L286cD48L3NwYW4+PC9wPjxw IGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eToiQ291cmllciBOZXciJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNv Tm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVy IE5ldyInPsKgwqAgTm90ZTogVGhlcmUgaXMgYW4gb2J2aW91cyB0aW1pbmcgYW5kIHByb2Nlc3Np bmcgbG9hZCBpc3N1ZSBmb3IgdGhlPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05v cm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBO ZXciJz7CoMKgIG11bHRpY2FzdCBzZW5kZXIgaW4gdGhlIHNjZW5hcmlvIHdoZXJlIGl0IGF0dGVt cHRzIHRvIGluaXRpYXRlIHRoZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3Jt YWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3 Iic+wqDCoCB1bmljYXN0IERUTFMgaGFuZHNoYWtlcyB3aXRoIGFsbC9zb21lIG9mIGl0cyBrbm93 biBsaXN0ZW5lcnMganVzdDxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+ PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+ wqDCoCBhZnRlciBpdCBzZW5kcyBvdXQgdGhlIERUTFMtYmFzZWQgbXVsdGljYXN0IG1lc3NhZ2Uu wqAgSW4gdGhpcyBjYXNlLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+ PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+ wqDCoCB0aGUgcHJvY2Vzc2luZyBsb2FkIGluIHRoZSBtdWx0aWNhc3Qgc2VuZGVyIChpLmUuIHVu aWNhc3QgRFRMUzxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4g c3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+wqDCoCBj bGllbnQpIGlzIHJlZHVjZWQgc29tZXdoYXQgYnkgdGhlIGZhY3QgdGhhdCBDb0FQIHJlcXVpcmVz IGEgYmFjay1vZmY8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFu IHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPsKgwqAg YW5kIHJhbmRvbWl6YXRpb24gb2YgdGhlIHVuaWNhc3QgcmVzcG9uc2UgYnkgdGhlIExlaXN1cmUg dGltZXI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxl PSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPsKgwqAgbWVjaGFu aXNtIGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDguMiBvZiBbSS1ELmlldGYtY29yZS1jb2FwXS48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6 IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48 c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMt c2VyaWYiO2NvbG9yOiMxRjQ5N0QnPkJlc3QgUmVnYXJkcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9 J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xv cjojMUY0OTdEJz5Ba2JhcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+ PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5z LXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xh c3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJD YWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD48ZGl2PjxkaXYgc3R5bGU9J2JvcmRlcjpub25lO2JvcmRlci10 b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluJz48cCBjbGFz cz1Nc29Ob3JtYWw+PGI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 IlRhaG9tYSIsInNhbnMtc2VyaWYiJz5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9J2ZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiJz4gZHRscy1pb3Qg W21haWx0bzpkdGxzLWlvdC1ib3VuY2VzQGlldGYub3JnXSA8Yj5PbiBCZWhhbGYgT2YgPC9iPlJh aG1hbiwgQWtiYXI8YnI+PGI+U2VudDo8L2I+IFR1ZXNkYXksIE1heSAwNiwgMjAxNCA0OjQ0IFBN PGJyPjxiPlRvOjwvYj4gTWFyY28gVGlsb2NhPGJyPjxiPkNjOjwvYj4gS3VtYXIsIFNhbmRlZXA7 IGR0bHMtaW90QGlldGYub3JnPGJyPjxiPlN1YmplY3Q6PC9iPiBSZTogW0R0bHMtaW90XSBVbmlj YXN0IHJlc3BvbnNlcyBpbiBkcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA1PG86 cD48L286cD48L3NwYW4+PC9wPjwvZGl2PjwvZGl2PjxwIGNsYXNzPU1zb05vcm1hbD48bzpwPiZu YnNwOzwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5I aSBNYXJjbyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0 eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7 Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05v cm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIs InNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48 cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5UaGFua3MgZm9yIHJldmll d2luZyB0aGUgdXBkYXRlZCBkcmFmdC4mbmJzcDsgQWxzbyBoZXJlIGlzIG15IGZlZWRiYWNrIHRv IHlvdXIgdHdvIG5ldyBxdWVzdGlvbnM6PG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1z b05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJy aSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD48cCBjbGFzcz1Nc29Ob3JtYWw+PG86cD4mbmJzcDs8L286cD48L3A+PHAgY2xhc3M9TXNvTm9y bWFsPiZndDsxKSBJbiBvcmRlciB0byBwZXJmb3JtIGEgRFRMUyBoYW5kc2hha2UgYmVmb3JlL2Fm dGVyIHNlbmRpbmcgYSBtdWx0aWNhc3QgbWVzc2FnZSwgYSBzZW5kZXI8bzpwPjwvbzpwPjwvcD48 cCBjbGFzcz1Nc29Ob3JtYWw+Jmd0OyBub2RlIHNob3VsZCBiZSBhd2FyZSBvZiB0aGUgZ3JvdXAg bWVtYmVyc2hpcCwgZXNwZWNpYWxseSB3aGF0IGFyZSB0aGUgbGlzdGVuZXIgbm9kZXMgY3VycmVu dGx5PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPiZndDsgcHJlc2VudCBpbiB0aGUg Z3JvdXAuIE9mIGNvdXJzZSwgc3VjaCBhIGdyb3VwIG1lbWJlcnNoaXAgbWF5IGNoYW5nZSBvdmVy IHRpbWUsIHVwb24gbmV3IG5vZGVzPGJyPiZndDtqb2luaW5nIHRoZSBncm91cC4gSG93ZXZlciwg U2VjdGlvbiAzLjEgaW4gdGhlIGRyYWZ0IHN0YXRlcyB0aGF0ICZxdW90O0FueSBkZXZpY2UgY2Fu IGluIHByaW5jaXBsZSBkZWNpZGU8bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+Jmd0 O3RvIGxpc3RlbiB0byBhbnkgSVB2NiBtdWx0aWNhc3QgYWRkcmVzcy4gVGhpcyBhbHNvIG1lYW5z IGFwcGxpY2F0aW9ucyBvbiB0aGUgb3RoZXIgZGV2aWNlcyBkbyBub3Q8bzpwPjwvbzpwPjwvcD48 cCBjbGFzcz1Nc29Ob3JtYWw+Jmd0O2tub3csIG9yIGRvIG5vdCBnZXQgbm90aWZpZWQsIHdoZW4g bmV3IGxpc3RlbmVycyBqb2luIHRoZSBuZXR3b3JrLiZxdW90Oy4gQ291bGRuJ3QgdGhpcyBiZSBh IHByb2JsZW08bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+Jmd0O2ZvciB0aGUgc3Vn Z2VzdGVkIGFwcHJvYWNoPzxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48bzpwPiZu YnNwOzwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5Z ZXMsIGluIHByaW5jaXBsZSwgYW55IGRldmljZSBjYW4gZGVjaWRlIHRvIGxpc3RlbiBmb3IgYW55 IElQdjYgbXVsdGljYXN0IGFkZHJlc3MuJm5ic3A7IEJ1dCBpbiBwcmFjdGljZSBvZiBjb3Vyc2Ug dGhlcmUgYXJlIElQdjYgbXVsdGljYXN0IHJlbGF0ZWQgcHJvdG9jb2xzIGZvciByb3V0aW5nL2pv aW5pbmcgdGhhdCBkaWN0YXRlIHdobyBjYW4gPHU+c3VjY2Vzc2Z1bGx5PC91PiBsaXN0ZW4gZm9y IGFuZCByZWNlaXZlIGFuIElQdjYgbXVsdGljYXN0IHBhY2tldC4mbmJzcDsgRm9yIGV4YW1wbGUs IHVubGVzcyBhIGRldmljZSB1c2VzIGEgcHJvdG9jb2wgbGlrZSBNTEQgdG8gZXhwbGljaXRseSBq b2luIGEgbXVsdGljYXN0IGdyb3VwLCB0aGUgbmV0d29yayB3aWxsIG5ldmVyIHJvdXRlIHRoZSBt dWx0aWNhc3QgcGFja2V0cyBvZiBpbnRlcmVzdCB0byB0aGUgc3ViLW5ldHdvcmsgb2YgdGhlIGRl dmljZS4mbmJzcDsgVGhpcyBpcyBhbGwgZXhwbGFpbmVkIGF0IGEgaGlnaCBsZXZlbCBpbiB0aGUg SS5ELmdyb3VwY29tbSByZWZlcmVuY2UgKDxhIGhyZWY9Imh0dHA6Ly90b29scy5pZXRmLm9yZy9o dG1sL2RyYWZ0LWlldGYtY29yZS1ncm91cGNvbW0tMTgjc2VjdGlvbi0yLjEiPmh0dHA6Ly90b29s cy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtY29yZS1ncm91cGNvbW0tMTgjc2VjdGlvbi0yLjE8 L2E+ICkgLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5 bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtj b2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9y bWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwi c2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+VGhlIG90aGVyIHBhcnQgb2YgeW91ciBxdWVzdGlv biByZWZlcnMgdG8gaG93IGRvZXMgdGhlIHNlbmRlciBub2RlIGtub3cgd2hvIGlzIHBhcnQgb2Yg dGhlIGdyb3VwLiZuYnNwOyBZb3UgYXJlIGNvcnJlY3QgdGhhdCBpdCBpcyB2ZXJ5IGRpZmZpY3Vs dCB0byBrbm93IHByZWNpc2VseSB0aGUgbWVtYmVyc2hpcCBvZiBhIGdyb3VwLiZuYnNwOyBUaGF0 IGlzIHdoeSB3ZSBoYWQgdGhlIHN1YnRsZSByZWZlcmVuY2UgdG8g4oCca25vd24gbGlzdGVuZXJz 4oCdLiZuYnNwOyBIb3cgeW91IGFjdHVhbGx5IGtub3cgdGhlIG1lbWJlcnNoaXAgZGVwZW5kcyBv biB0aGUgbWl4IG9mIHByb3RvY29scyB1c2VkIChhbmQgaXMgaW4gZmFjdCBpdCBpcyBub3QgYWx3 YXlzIHBvc3NpYmxlIHRvIGtub3cgYWxsIHRoZSBtZW1iZXJzIGFjY3VyYXRlbHkpLiZuYnNwOyBC dXQgZm9yIENvQVAgZ3JvdXAgbWVtYmVyIGRpc2NvdmVyeSwgdGhlcmUgaXMgJm5ic3A7YWdhaW4g Z3VpZGFuY2UgZ2l2ZW4gaW4gdGhlIEkuRC5ncm91cGNvbW0gcmVmZXJlbmNlIChzcGVjaWZpY2Fs bHkgaW4gPGEgaHJlZj0iaHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jb3Jl LWdyb3VwY29tbS0xOCNzZWN0aW9uLTIuNiI+aHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJh ZnQtaWV0Zi1jb3JlLWdyb3VwY29tbS0xOCNzZWN0aW9uLTIuNjwvYT4gKS4mbmJzcDsgV2UgY2Fu IG1ha2UgdGhpcyBwb2ludCBhIGJpdCBtb3JlIGV4cGxpY2l0IGluIHRoZSBuZXh0IHVwZGF0ZSBv ZiBvdXIgSS1ELjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PG86cD4m bmJzcDs8L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPjxw IGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+Jmd0OzIpIEFuIGFsdGVybmF0aXZlIGFwcHJv YWNoIHRvIHRoZSBvbmUgc3VnZ2VzdGVkIGluIFNlY3Rpb24gNC41IG1heSBjb25zaXN0IGluIGEg bGlzdGVuZXIgbm9kZSBlc3RhYmxpc2hpbmc8bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3Jt YWw+Jmd0OyBhIHVuaWNhc3QgRFRMUyBzZXNzaW9uIChpLmUuIHN0YXJ0aW5nIGEgRFRMUyBoYW5k c2hha2UpIHdpdGggdGhlIHNlbmRlciBub2RlLCB1cG9uIHJlY2VpdmluZyBhIG11bHRpY2FzdDxv OnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD4mZ3Q7IG1lc3NhZ2UgZm9yIHRoZSBmaXJz dCB0aW1lLjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMx RjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNw YW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNl cmlmIjtjb2xvcjojMUY0OTdEJz5ZZXMsIGdvb2QgcG9pbnQhJm5ic3A7IFdlIGNhbiBhZGQgdGhp cyB0byB0aGUgSS1EIGluIG91ciBuZXh0IHVwZGF0ZS4gPG86cD48L286cD48L3NwYW4+PC9wPjxw IGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6 IzFGNDk3RCc+QmVzdCBSZWdhcmRzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29O b3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmki LCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPkFr YmFyPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0n Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9y OiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+ PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5z LXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xh c3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJD YWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48Yj48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJpZiInPkZyb206PC9zcGFuPjwvYj48c3Bh biBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJp ZiInPiBNYXJjbyBUaWxvY2EgWzxhIGhyZWY9Im1haWx0bzptYXJjb0BzaWNzLnNlIj5tYWlsdG86 bWFyY29Ac2ljcy5zZTwvYT5dIDxicj48Yj5TZW50OjwvYj4gVHVlc2RheSwgTWF5IDA2LCAyMDE0 IDEyOjMyIFBNPGJyPjxiPlRvOjwvYj4gUmFobWFuLCBBa2Jhcjxicj48Yj5DYzo8L2I+IEt1bWFy LCBTYW5kZWVwOyA8YSBocmVmPSJtYWlsdG86ZHRscy1pb3RAaWV0Zi5vcmciPmR0bHMtaW90QGll dGYub3JnPC9hPjxicj48Yj5TdWJqZWN0OjwvYj4gUmU6IFtEdGxzLWlvdF0gVW5pY2FzdCByZXNw b25zZXMgaW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNTxvOnA+PC9vOnA+ PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PG86cD4mbmJzcDs8L286cD48L3A+PGRpdj48 cCBjbGFzcz1Nc29Ob3JtYWw+SGVsbG8gQWtiYXIsPG86cD48L286cD48L3A+PGRpdj48cCBjbGFz cz1Nc29Ob3JtYWw+PG86cD4mbmJzcDs8L286cD48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz1Nc29O b3JtYWw+VGhhbmtzIGZvciBoYXZpbmcgY29uc2lkZXJlZCBteSBxdWVzdGlvbi4gVGhlIG5ldyBT ZWN0aW9uIDQuNSBsb29rcyBmaW5lIHRvIG1lLiBBbHNvLCBJIGhhdmUgdGhlIHR3byBmb2xsb3dp bmcgY29tbWVudHMuPG86cD48L286cD48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWw+ PG86cD4mbmJzcDs8L286cD48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWw+MSkgSW4g b3JkZXIgdG8gcGVyZm9ybSBhIERUTFMgaGFuZHNoYWtlIGJlZm9yZS9hZnRlciBzZW5kaW5nIGEg bXVsdGljYXN0IG1lc3NhZ2UsIGEgc2VuZGVyIG5vZGUgc2hvdWxkIGJlIGF3YXJlIG9mIHRoZSBn cm91cCBtZW1iZXJzaGlwLCBlc3BlY2lhbGx5IHdoYXQgYXJlIHRoZSBsaXN0ZW5lciBub2RlcyBj dXJyZW50bHkgcHJlc2VudCBpbiB0aGUgZ3JvdXAuIE9mIGNvdXJzZSwgc3VjaCBhIGdyb3VwIG1l bWJlcnNoaXAgbWF5IGNoYW5nZSBvdmVyIHRpbWUsIHVwb24gbmV3IG5vZGVzIGpvaW5pbmcgdGhl IGdyb3VwLiBIb3dldmVyLCBTZWN0aW9uIDMuMSBpbiB0aGUgZHJhZnQgc3RhdGVzIHRoYXQgJnF1 b3Q7QW55IGRldmljZSBjYW4gaW4gcHJpbmNpcGxlIGRlY2lkZSB0byBsaXN0ZW4gdG8gYW55IElQ djYgbXVsdGljYXN0IGFkZHJlc3MuIFRoaXMgYWxzbyBtZWFucyBhcHBsaWNhdGlvbnMgb24gdGhl IG90aGVyIGRldmljZXMgZG8gbm90IGtub3csIG9yIGRvIG5vdCBnZXQgbm90aWZpZWQsIHdoZW4g bmV3IGxpc3RlbmVycyBqb2luIHRoZSBuZXR3b3JrLiZxdW90Oy4gQ291bGRuJ3QgdGhpcyBiZSBh IHByb2JsZW0gZm9yIHRoZSBzdWdnZXN0ZWQgYXBwcm9hY2g/PG86cD48L286cD48L3A+PC9kaXY+ PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWw+PG86cD4mbmJzcDs8L286cD48L3A+PC9kaXY+PGRpdj48 cCBjbGFzcz1Nc29Ob3JtYWw+MikgQW4gYWx0ZXJuYXRpdmUgYXBwcm9hY2ggdG8gdGhlIG9uZSBz dWdnZXN0ZWQgaW4gU2VjdGlvbiA0LjUgbWF5IGNvbnNpc3QgaW4gYSBsaXN0ZW5lciBub2RlIGVz dGFibGlzaGluZyBhIHVuaWNhc3QgRFRMUyBzZXNzaW9uIChpLmUuIHN0YXJ0aW5nIGEgRFRMUyBo YW5kc2hha2UpIHdpdGggdGhlIHNlbmRlciBub2RlLCB1cG9uIHJlY2VpdmluZyBhIG11bHRpY2Fz dCBtZXNzYWdlIGZvciB0aGUgZmlyc3QgdGltZS48bzpwPjwvbzpwPjwvcD48L2Rpdj48ZGl2Pjxw IGNsYXNzPU1zb05vcm1hbD48bzpwPiZuYnNwOzwvbzpwPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNz PU1zb05vcm1hbD5CZXN0IHJlZ2FyZHMsPG86cD48L286cD48L3A+PC9kaXY+PGRpdj48cCBjbGFz cz1Nc29Ob3JtYWw+TWFyY288bzpwPjwvbzpwPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05v cm1hbD48bzpwPiZuYnNwOzwvbzpwPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbD48 bzpwPiZuYnNwOzwvbzpwPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbD48bzpwPiZu YnNwOzwvbzpwPjwvcD48L2Rpdj48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0n bWFyZ2luLWJvdHRvbToxMi4wcHQnPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPjxkaXY+PHAgY2xhc3M9 TXNvTm9ybWFsPk9uIDUgTWF5IDIwMTQgMjM6NDUsIFJhaG1hbiwgQWtiYXIgJmx0OzxhIGhyZWY9 Im1haWx0bzpBa2Jhci5SYWhtYW5AaW50ZXJkaWdpdGFsLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPkFr YmFyLlJhaG1hbkBpbnRlcmRpZ2l0YWwuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+ PGRpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+SGkg TWFyY28sPC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0 eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7 Y29sb3I6IzFGNDk3RCc+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05v cm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJp Iiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9w PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+Jm5ic3A7PC9zcGFu PjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3 RCc+VGhlIGF1dGhvcnMgaGF2ZSBtYWRlIGFuIHVwZGF0ZSB0byB0aGUgZHJhZnQgdG8gYWRkcmVz cyBmdWxseSB5b3VyIGdvb2QgcXVlc3Rpb24gcmVnYXJkaW5nIGhvdyB0byBoYW5kbGUgdGhlIHVu aWNhc3QgcmVzcG9uc2VzIHRvIHRoZSBtdWx0aWNhc3QgcmVzcG9uc2UuJm5ic3A7IFNwZWNpZmlj YWxseSwgcGxlYXNlIHJldmlldyB0aGUgbmV3IHNlY3Rpb24gNC41IGFuZCB0ZWxsIHVzIGlmIHlv dSBoYXZlIGFueSBtb3JlIHF1ZXN0aW9uczo8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9 TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNh bGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz4mbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz4mbmJzcDs8 L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2Zv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjoj MUY0OTdEJz48YSBocmVmPSJodHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1rZW9oLWRp Y2UtbXVsdGljYXN0LXNlY3VyaXR5LTA2I3NlY3Rpb24tNC41IiB0YXJnZXQ9Il9ibGFuayI+aHR0 cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0 eS0wNiNzZWN0aW9uLTQuNTwvYT48L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9y bWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmki LCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+ PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6IkNvdXJpZXIgTmV3Iic+NC41LiZuYnNwOyBVbmljYXN0IFJlc3BvbnNlcyB0byBNdWx0 aWNhc3QgTWVzc2FnZXM8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0 eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+ PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+ Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0 eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZu YnNwOyBJbiBDb0FQLCByZXNwb25zZXMgdG8gbXVsdGljYXN0IG1lc3NhZ2VzIGFyZSBhbHdheXMg c2VudCBiYWNrIGFzPC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHls ZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxz cGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZu YnNwOyZuYnNwOyB1bmljYXN0LiZuYnNwOyBUaGF0IGlzLCB0aGUgZ3JvdXAgbWVtYmVycyB0aGF0 IHJlY2VpdmUgYSBtdWx0aWNhc3QgbWVzc2FnZTwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFz cz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToi Q291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgbWF5IGluZGl2aWR1YWxseSBkZWNpZGUgdG8gc2Vu ZCAob3Igc3VwcHJlc3MpIGEgdW5pY2FzdCByZXNwb25zZSBhczwvc3Bhbj48bzpwPjwvbzpwPjwv cD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgZGVzY3JpYmVkIGluIFNlY3Rpb24g Mi41IG9mIFtJLUQuaWV0Zi1jb3JlLWdyb3VwY29tbV0uJm5ic3A7IFRoZSB1bmljYXN0PC9zcGFu PjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyByZXNwb25z ZXMgdG8gYSBEVExTLWJhc2VkIG11bHRpY2FzdCBtZXNzYWdlIG1heSBvcHRpb25hbGx5IGJlIHNl Y3VyZS48L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5 bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5i c3A7IFNwZWNpZmljYWxseSwgdGhlIHVuaWNhc3QgcmVzcG9uc2UgbWF5IGJlIHNlbnQgYmFjayBh cyBhIHVuaWNhc3QgRFRMUzwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwg c3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Jz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXci Jz4mbmJzcDsmbmJzcDsgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gOS4xIG9mIFtJLUQuaWV0Zi1j b3JlLWNvYXBdLiZuYnNwOyBUaGlzIHJlcXVpcmVzPC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNs YXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyB0aGF0IGEgdW5pY2FzdCBEVExTIGhhbmRzaGFr ZSB3YXMgcHJldmlvdXNseSBpbml0aWF0ZWQgYmV0d2VlbiB0aGU8L3NwYW4+PG86cD48L286cD48 L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IG11bHRpY2FzdCBtZXNzYWdlIHNl bmRlciBhbmQgbGlzdGVuZXIuJm5ic3A7IEluIHRoZSBleHRyZW1lIHNjZW5hcmlvLCBhPC9zcGFu PjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBtdWx0aWNh c3Qgc2VuZGVyIG1heSBhdHRlbXB0IHRvIGluaXRpYXRlIHRoZSB1bmljYXN0IERUTFMgaGFuZHNo YWtlPC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxl PSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNw OyB3aXRoIGFsbCBvciBhIHN1YnNldCBvZiBrbm93biBsaXN0ZW5lcnMganVzdCBiZWZvcmUgb3Ig anVzdCBhZnRlciBpdDwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5 bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48 c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4m bmJzcDsmbmJzcDsgc2VuZHMgb3V0IHRoZSBEVExTLWJhc2VkIG11bHRpY2FzdCBtZXNzYWdlLiZu YnNwOyBUaGlzIG1heSByZXN1bHQgaW4gdGhlPC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNz PU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJD b3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBtdWx0aWNhc3Qgc2VuZGVyIChpLmUuIHVuaWNhc3Qg RFRMUyBjbGllbnQpIGhhdmluZyB0byBwcm9jZXNzIHVuaWNhc3Q8L3NwYW4+PG86cD48L286cD48 L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IERUTFMgaGFuZHNoYWtlIG1lc3Nh Z2VzIGZyb20gbXVsdGlwbGUgbXVsdGljYXN0IGxpc3RlbmVycyAoaS5lLjwvc3Bhbj48bzpwPjwv bzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgdW5pY2FzdCBEVExTIHNl cnZlcnMpIGluIGEgc2hvcnQgcGVyaW9kLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1N c29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291 cmllciBOZXciJz4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFs IHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3 Iic+Jm5ic3A7Jm5ic3A7IE5vdGU6IFRoZXJlIGlzIGFuIG9idmlvdXMgdGltaW5nIGFuZCBwcm9j ZXNzaW5nIGxvYWQgaXNzdWUgZm9yIHRoZTwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1N c29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291 cmllciBOZXciJz4mbmJzcDsmbmJzcDsgbXVsdGljYXN0IHNlbmRlciBpbiB0aGUgc2NlbmFyaW8g d2hlcmUgaXQgYXR0ZW1wdHMgdG8gaW5pdGlhdGUgdGhlPC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxw IGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyB1bmljYXN0IERUTFMgaGFuZHNoYWtlcyB3 aXRoIGFsbC9zb21lIG9mIGl0cyBrbm93biBsaXN0ZW5lcnMganVzdDwvc3Bhbj48bzpwPjwvbzpw PjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgYWZ0ZXIgaXQgc2VuZHMgb3V0 IHRoZSBEVExTLWJhc2VkIG11bHRpY2FzdCBtZXNzYWdlLiZuYnNwOyBJbiB0aGlzIGNhc2UsPC9z cGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyB0aGUg cHJvY2Vzc2luZyBsb2FkIGluIHRoZSBtdWx0aWNhc3Qgc2VuZGVyIChpLmUuIHVuaWNhc3QgRFRM Uzwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0n Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsg Y2xpZW50KSBpcyByZWR1Y2VkIHNvbWV3aGF0IGJ5IHRoZSBmYWN0IHRoYXQgQ29BUCByZXF1aXJl cyBhIGJhY2stb2ZmPC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHls ZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxz cGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZu YnNwOyZuYnNwOyBhbmQgcmFuZG9taXphdGlvbiBvZiB0aGUgdW5pY2FzdCByZXNwb25zZSBieSB0 aGUgTGVpc3VyZSB0aW1lcjwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwg c3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Jz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXci Jz4mbmJzcDsmbmJzcDsgbWVjaGFuaXNtIGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDguMiBvZiBb SS1ELmlldGYtY29yZS1jb2FwXS48L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9y bWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIg TmV3Iic+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHls ZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxz cGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1z ZXJpZiI7Y29sb3I6IzFGNDk3RCc+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNz PU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJD YWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+Jm5ic3A7PC9zcGFuPjxvOnA+PC9v OnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+Jm5ic3A7 PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6 IzFGNDk3RCc+QmVzdCBSZWdhcmRzLDwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29O b3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJy aSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPiZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5 N0QnPkFrYmFyPC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0n bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFu IHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJp ZiI7Y29sb3I6IzFGNDk3RCc+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1z b05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxp YnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+Jm5ic3A7PC9z cGFuPjxvOnA+PC9vOnA+PC9wPjxkaXY+PGRpdiBzdHlsZT0nYm9yZGVyOm5vbmU7Ym9yZGVyLXRv cDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4nPjxwIGNsYXNz PU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8nPjxiPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiJUYWhvbWEiLCJzYW5zLXNlcmlmIic+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSdmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIic+IGR0bHMtaW90 IFttYWlsdG86PGEgaHJlZj0ibWFpbHRvOmR0bHMtaW90LWJvdW5jZXNAaWV0Zi5vcmciIHRhcmdl dD0iX2JsYW5rIj5kdGxzLWlvdC1ib3VuY2VzQGlldGYub3JnPC9hPl0gPGI+T24gQmVoYWxmIE9m IDwvYj5LdW1hciwgU2FuZGVlcDxicj48Yj5TZW50OjwvYj4gV2VkbmVzZGF5LCBBcHJpbCAwMiwg MjAxNCAzOjQ3IEFNPGJyPjxiPlRvOjwvYj4gTWFyY28gVGlsb2NhOyA8YSBocmVmPSJtYWlsdG86 ZHRscy1pb3RAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5kdGxzLWlvdEBpZXRmLm9yZzwvYT48 YnI+PGI+U3ViamVjdDo8L2I+IFJlOiBbRHRscy1pb3RdIFVuaWNhc3QgcmVzcG9uc2VzIGluIGRy YWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDU8L3NwYW4+PG86cD48L286cD48L3A+ PC9kaXY+PC9kaXY+PGRpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPiZuYnNwOzxvOnA+PC9v OnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+SGkgTWFy Y288L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9 J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xv cjojMUY0OTdEJz4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFs IHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJz YW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5UaGUgZHJhZnQgb25seSBhZGRyZXNzZXMgdGhlIHBy b3RlY3Rpb24gb2YgbXVsdGljYXN0IHRyYWZmaWMuIElmIHVuaWNhc3QgcmVzcG9uc2VzIGFyZSBl eHBlY3RlZCBhbmQgaWYgcHJvdGVjdGlvbiBpcyByZXF1aXJlZCBmb3Igc3VjaCBtZXNzYWdlcywg dGhlbiBleGlzdGluZyB1bmljYXN0IHByb3RlY3Rpb24gbWVjaGFuaXNtcyBiYXNlZCBvbiBEVExT IGFzIHN1Z2dlc3RlZCBpbiBkcmFmdC1pZXRmLWNvcmUtY29hcC0xOCBzaG91bGQgYmUgdXNlZC4g UHJvdGVjdGlvbiBvZiBhbGwgdW5pY2FzdCBtZXNzYWdlcyBzaG91bGQgYmUgdHJlYXRlZCBhcyB3 b3VsZCBiZSBkb25lIG5vcm1hbGx5LiA8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNv Tm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGli cmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz4mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5Ib3BlIHRoYXQg YW5zd2VycyB5b3VyIHF1ZXN0aW9uLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29O b3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJy aSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPlJlZ2FyZHM8L3Nw YW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0 OTdEJz5TYW5kZWVwIDwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5 bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48 c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMt c2VyaWYiO2NvbG9yOiMxRjQ5N0QnPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD48ZGl2IHN0 eWxlPSdib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6MGlu IDBpbiAwaW4gNC4wcHQnPjxkaXY+PGRpdiBzdHlsZT0nYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpz b2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4nPjxwIGNsYXNzPU1z b05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8nPjxiPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJU YWhvbWEiLCJzYW5zLXNlcmlmIic+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSdmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIic+IGR0bHMtaW90IFs8 YSBocmVmPSJtYWlsdG86ZHRscy1pb3QtYm91bmNlc0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsi Pm1haWx0bzpkdGxzLWlvdC1ib3VuY2VzQGlldGYub3JnPC9hPl0gPGI+T24gQmVoYWxmIE9mIDwv Yj5NYXJjbyBUaWxvY2E8YnI+PGI+U2VudDo8L2I+IFR1ZXNkYXksIEFwcmlsIDAxLCAyMDE0IDY6 MzUgUE08YnI+PGI+VG86PC9iPiA8YSBocmVmPSJtYWlsdG86ZHRscy1pb3RAaWV0Zi5vcmciIHRh cmdldD0iX2JsYW5rIj5kdGxzLWlvdEBpZXRmLm9yZzwvYT48YnI+PGI+U3ViamVjdDo8L2I+IFtE dGxzLWlvdF0gVW5pY2FzdCByZXNwb25zZXMgaW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1z ZWN1cml0eS0wNTwvc3Bhbj48bzpwPjwvbzpwPjwvcD48L2Rpdj48L2Rpdj48cCBjbGFzcz1Nc29O b3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvJz4mbmJzcDs8bzpwPjwvbzpwPjwvcD48ZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFs IHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byc+RGVhciBhbGwsPG86cD48L286cD48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWwg c3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Jz4mbmJzcDs8bzpwPjwvbzpwPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBzdHls ZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPkFz IHRvIHBvc3NpYmxlIHJlc3BvbnNlcyB0byBtdWx0aWNhc3QgcmVxdWVzdHMsIFNlY3Rpb24gMi4x IHN0YXRlcyB0aGF0IHRoZXkgYXJlIHNlbnQgYmFjayBpbiB1bmljYXN0LiBUaGVuLCBubyBmdXJ0 aGVyIGRldGFpbHMgYXJlIHByb3ZpZGVkIGFib3V0IHRoZWlyIHByb3RlY3Rpb24uPG86cD48L286 cD48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz4mbmJzcDs8bzpwPjwvbzpwPjwv cD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPkFyZSBzdWNoIHJlc3BvbnNlcyBzdXBw b3NlZCB0byBiZSBwcm90ZWN0ZWQgdGhyb3VnaCBhICZxdW90O3JlZ3VsYXImcXVvdDsgRFRMUyBz ZXNzaW9uLCB3aGljaCBtdXN0IGJlIChvciBoYXMgcHJldmlvdXNseSBiZWVuKSBlc3RhYmxpc2hl ZCBiZXR3ZWVuIHRoZSBzZW5kZXIgYW5kIGxpc3RlbmVyPzxvOnA+PC9vOnA+PC9wPjwvZGl2Pjxk aXY+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+Jm5ic3A7PG86cD48L286cD48L3A+PC9kaXY+PGRpdj48 cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvJz5DaGVlcnMsPG86cD48L286cD48L3A+PC9kaXY+PGRpdj48cCBj bGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvJz5NYXJjbzxvOnA+PC9vOnA+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9 TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byc+Jm5ic3A7PG86cD48L286cD48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz1Nc29O b3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvJz4mbmJzcDs8bzpwPjwvbzpwPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1h bCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8nPiZuYnNwOzxvOnA+PC9vOnA+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsIHN0 eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+ Jm5ic3A7PG86cD48L286cD48L3A+PC9kaXY+PC9kaXY+PC9kaXY+PHAgY2xhc3M9TXNvTm9ybWFs IHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byc+Jm5ic3A7PG86cD48L286cD48L3A+PGRpdiBjbGFzcz1Nc29Ob3JtYWwgYWxpZ249Y2VudGVy IHN0eWxlPSd0ZXh0LWFsaWduOmNlbnRlcic+PGhyIHNpemU9MiB3aWR0aD0iMTAwJSIgYWxpZ249 Y2VudGVyPjwvZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6 Ny41cHQ7Zm9udC1mYW1pbHk6IkFyaWFsIiwic2Fucy1zZXJpZiI7Y29sb3I6Z3JheSc+VGhlIGlu Zm9ybWF0aW9uIGNvbnRhaW5lZCBpbiB0aGlzIG1lc3NhZ2UgbWF5IGJlIGNvbmZpZGVudGlhbCBh bmQgbGVnYWxseSBwcm90ZWN0ZWQgdW5kZXIgYXBwbGljYWJsZSBsYXcuIFRoZSBtZXNzYWdlIGlz IGludGVuZGVkIHNvbGVseSBmb3IgdGhlIGFkZHJlc3NlZShzKS4gSWYgeW91IGFyZSBub3QgdGhl IGludGVuZGVkIHJlY2lwaWVudCwgeW91IGFyZSBoZXJlYnkgbm90aWZpZWQgdGhhdCBhbnkgdXNl LCBmb3J3YXJkaW5nLCBkaXNzZW1pbmF0aW9uLCBvciByZXByb2R1Y3Rpb24gb2YgdGhpcyBtZXNz YWdlIGlzIHN0cmljdGx5IHByb2hpYml0ZWQgYW5kIG1heSBiZSB1bmxhd2Z1bC4gSWYgeW91IGFy ZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIGNvbnRhY3QgdGhlIHNlbmRlciBi eSByZXR1cm4gZS1tYWlsIGFuZCBkZXN0cm95IGFsbCBjb3BpZXMgb2YgdGhlIG9yaWdpbmFsIG1l c3NhZ2UuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPjwvZGl2PjwvZGl2PjwvZGl2PjwvZGl2PjwvZGl2 PjxwIGNsYXNzPU1zb05vcm1hbD48bzpwPiZuYnNwOzwvbzpwPjwvcD48L2Rpdj48L2Rpdj48L2Jv ZHk+PC9odG1sPg== ------_=_NextPart_001_01CF6BBE.7DFF10D5-- From nobody Mon May 12 01:24:52 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D8C281A04A8 for ; Mon, 12 May 2014 01:24:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.578 X-Spam-Level: X-Spam-Status: No, score=-1.578 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FM_FORGED_GMAIL=0.622, HELO_EQ_SE=0.35, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.651] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FsHT8ACFuPgd for ; Mon, 12 May 2014 01:24:41 -0700 (PDT) Received: from fsmsg2.sics.se (fsmsg2.sics.se [IPv6:2001:6b0:3a:1:250:56ff:fea9:52ad]) by ietfa.amsl.com (Postfix) with ESMTP id 2D2FC1A04AA for ; Mon, 12 May 2014 01:24:35 -0700 (PDT) Received: from pps.filterd (fsmsg2 [127.0.0.1]) by fsmsg2.sics.se (8.14.5/8.14.5) with SMTP id s4C8LZ95010687 for ; Mon, 12 May 2014 10:24:29 +0200 Received: from letter.sics.se (letter.sics.se [193.10.64.6]) by fsmsg2.sics.se with ESMTP id 1kppjujknq-1 for ; Mon, 12 May 2014 10:24:29 +0200 Received: from mail-we0-f169.google.com (mail-we0-f169.google.com [74.125.82.169]) (Authenticated sender: marco@sics.se) by letter.sics.se (Postfix) with ESMTPSA id 0025A400E2 for ; Mon, 12 May 2014 10:24:28 +0200 (CEST) Received: by mail-we0-f169.google.com with SMTP id u56so6584405wes.0 for ; Mon, 12 May 2014 01:24:26 -0700 (PDT) MIME-Version: 1.0 X-Received: by 10.180.14.233 with SMTP id s9mr14595824wic.53.1399883066451; Mon, 12 May 2014 01:24:26 -0700 (PDT) Received: by 10.194.167.67 with HTTP; Mon, 12 May 2014 01:24:26 -0700 (PDT) In-Reply-To: References: Date: Mon, 12 May 2014 10:24:26 +0200 Message-ID: From: Marco Tiloca To: "Rahman, Akbar" Content-Type: multipart/alternative; boundary=f46d040fa03ce72e9304f92fac74 X-Proofpoint-Spam-Reason: safe X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10432:5.11.96, 1.0.14, 0.0.0000 definitions=2014-05-11_03:2014-05-09,2014-05-11,1970-01-01 signatures=0 Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/x_BZhEj8--i0fWjHoQ5IuGhq3k0 Cc: "Kumar, Sandeep" , dtls-iot@ietf.org Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 May 2014 08:24:47 -0000 --f46d040fa03ce72e9304f92fac74 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hello Akbar, The updated version looks really good to me. Best regards, Marco On 9 May 2014 21:40, Rahman, Akbar wrote: > Hi Marco, > > > > > > We have updated the draft to capture your remaining comments below. > Please review and tell us if you have any other comments. > > > > > > > http://tools.ietf.org/html/draft-keoh-dice-multicast-security-07#section-= 4.5 > > > > > > 4.5. Unicast Responses to Multicast Messages > > > > In CoAP, responses to multicast messages are always sent back as > > unicast. That is, the group members that receive a multicast message > > may individually decide to send (or suppress) a unicast response as > > described in Section 2.5 of [I-D.ietf-core-groupcomm]. The unicast > > responses to a DTLS-based multicast message may optionally be secure. > > Specifically, the unicast response may be sent back as a unicast DTLS > > as described in Section 9.1 of [I-D.ietf-core-coap]. This requires > > that a unicast DTLS handshake was previously initiated between the > > multicast message sender and listener. > > > > Either the multicast message sender or listener may initiate the > > unicast DTLS handshake. If the DTLS handshake was initiated by the > > multicast message sender, it requires that the sender be aware of the > > membership of the multicast group. This can be accomplished, for > > example, as described in Section 2.6 of [I-D.ietf-core-coap]. If the > > listener initiated the DTLS handshake, it may have done so, for > > example, after receiving a multicast message for the first time. > > > > In the extreme scenario, a multicast sender may attempt to initiate > > the unicast DTLS handshake with all, or a subset of, known listeners > > just after it sends out the DTLS-based multicast message. This may > > result in the multicast sender having to process unicast DTLS > > handshake messages from multiple multicast listeners in a short > > period. > > > > Note: There is an obvious timing and processing load issue for the > > multicast sender in the scenario where it attempts to initiate the > > unicast DTLS handshakes with all/some of its known listeners just > > after it sends out the DTLS-based multicast message. In this case, > > the processing load in the multicast sender (i.e. unicast DTLS > > client) is reduced somewhat by the fact that CoAP requires a back-off > > and randomization of the unicast response by the Leisure timer > > mechanism as described in Section 8.2 of [I-D.ietf-core-coap]. > > > > > > > > Best Regards, > > > > > > Akbar > > > > > > > > *From:* dtls-iot [mailto:dtls-iot-bounces@ietf.org] *On Behalf Of *Rahman= , > Akbar > *Sent:* Tuesday, May 06, 2014 4:44 PM > *To:* Marco Tiloca > > *Cc:* Kumar, Sandeep; dtls-iot@ietf.org > *Subject:* Re: [Dtls-iot] Unicast responses in > draft-keoh-dice-multicast-security-05 > > > > Hi Marco, > > > > > > Thanks for reviewing the updated draft. Also here is my feedback to your > two new questions: > > > > > > >1) In order to perform a DTLS handshake before/after sending a multicast > message, a sender > > > node should be aware of the group membership, especially what are the > listener nodes currently > > > present in the group. Of course, such a group membership may change ove= r > time, upon new nodes > >joining the group. However, Section 3.1 in the draft states that "Any > device can in principle decide > > >to listen to any IPv6 multicast address. This also means applications on > the other devices do not > > >know, or do not get notified, when new listeners join the network.". > Couldn't this be a problem > > >for the suggested approach? > > > > Yes, in principle, any device can decide to listen for any IPv6 multicast > address. But in practice of course there are IPv6 multicast related > protocols for routing/joining that dictate who can *successfully* listen > for and receive an IPv6 multicast packet. For example, unless a device > uses a protocol like MLD to explicitly join a multicast group, the networ= k > will never route the multicast packets of interest to the sub-network of > the device. This is all explained at a high level in the I.D.groupcomm > reference ( > http://tools.ietf.org/html/draft-ietf-core-groupcomm-18#section-2.1 ) . > > > > The other part of your question refers to how does the sender node know > who is part of the group. You are correct that it is very difficult to > know precisely the membership of a group. That is why we had the subtle > reference to =E2=80=9Cknown listeners=E2=80=9D. How you actually know th= e membership > depends on the mix of protocols used (and is in fact it is not always > possible to know all the members accurately). But for CoAP group member > discovery, there is again guidance given in the I.D.groupcomm reference > (specifically in > http://tools.ietf.org/html/draft-ietf-core-groupcomm-18#section-2.6 ). > We can make this point a bit more explicit in the next update of our I-D. > > > > > > > > >2) An alternative approach to the one suggested in Section 4.5 may > consist in a listener node establishing > > > a unicast DTLS session (i.e. starting a DTLS handshake) with the sender > node, upon receiving a multicast > > > message for the first time. > > > > Yes, good point! We can add this to the I-D in our next update. > > > > > > Best Regards, > > > > > > Akbar > > > > > > > > *From:* Marco Tiloca [mailto:marco@sics.se ] > *Sent:* Tuesday, May 06, 2014 12:32 PM > *To:* Rahman, Akbar > *Cc:* Kumar, Sandeep; dtls-iot@ietf.org > *Subject:* Re: [Dtls-iot] Unicast responses in > draft-keoh-dice-multicast-security-05 > > > > Hello Akbar, > > > > Thanks for having considered my question. The new Section 4.5 looks fine > to me. Also, I have the two following comments. > > > > 1) In order to perform a DTLS handshake before/after sending a multicast > message, a sender node should be aware of the group membership, especiall= y > what are the listener nodes currently present in the group. Of course, su= ch > a group membership may change over time, upon new nodes joining the group= . > However, Section 3.1 in the draft states that "Any device can in principl= e > decide to listen to any IPv6 multicast address. This also means > applications on the other devices do not know, or do not get notified, wh= en > new listeners join the network.". Couldn't this be a problem for the > suggested approach? > > > > 2) An alternative approach to the one suggested in Section 4.5 may consis= t > in a listener node establishing a unicast DTLS session (i.e. starting a > DTLS handshake) with the sender node, upon receiving a multicast message > for the first time. > > > > Best regards, > > Marco > > > > > > > > > > On 5 May 2014 23:45, Rahman, Akbar wrote: > > Hi Marco, > > > > > > > > The authors have made an update to the draft to address fully your good > question regarding how to handle the unicast responses to the multicast > response. Specifically, please review the new section 4.5 and tell us if > you have any more questions: > > > > > > > http://tools.ietf.org/html/draft-keoh-dice-multicast-security-06#section-= 4.5 > > > > 4.5. Unicast Responses to Multicast Messages > > > > In CoAP, responses to multicast messages are always sent back as > > unicast. That is, the group members that receive a multicast message > > may individually decide to send (or suppress) a unicast response as > > described in Section 2.5 of [I-D.ietf-core-groupcomm]. The unicast > > responses to a DTLS-based multicast message may optionally be secure. > > Specifically, the unicast response may be sent back as a unicast DTLS > > as described in Section 9.1 of [I-D.ietf-core-coap]. This requires > > that a unicast DTLS handshake was previously initiated between the > > multicast message sender and listener. In the extreme scenario, a > > multicast sender may attempt to initiate the unicast DTLS handshake > > with all or a subset of known listeners just before or just after it > > sends out the DTLS-based multicast message. This may result in the > > multicast sender (i.e. unicast DTLS client) having to process unicast > > DTLS handshake messages from multiple multicast listeners (i.e. > > unicast DTLS servers) in a short period. > > > > Note: There is an obvious timing and processing load issue for the > > multicast sender in the scenario where it attempts to initiate the > > unicast DTLS handshakes with all/some of its known listeners just > > after it sends out the DTLS-based multicast message. In this case, > > the processing load in the multicast sender (i.e. unicast DTLS > > client) is reduced somewhat by the fact that CoAP requires a back-off > > and randomization of the unicast response by the Leisure timer > > mechanism as described in Section 8.2 of [I-D.ietf-core-coap]. > > > > > > > > > > Best Regards, > > > > > > Akbar > > > > > > > > *From:* dtls-iot [mailto:dtls-iot-bounces@ietf.org] *On Behalf Of *Kumar, > Sandeep > *Sent:* Wednesday, April 02, 2014 3:47 AM > *To:* Marco Tiloca; dtls-iot@ietf.org > *Subject:* Re: [Dtls-iot] Unicast responses in > draft-keoh-dice-multicast-security-05 > > > > Hi Marco > > > > The draft only addresses the protection of multicast traffic. If unicast > responses are expected and if protection is required for such messages, > then existing unicast protection mechanisms based on DTLS as suggested in > draft-ietf-core-coap-18 should be used. Protection of all unicast message= s > should be treated as would be done normally. > > > > Hope that answers your question. > > > > Regards > > Sandeep > > > > *From:* dtls-iot [mailto:dtls-iot-bounces@ietf.org] > *On Behalf Of *Marco Tiloca > *Sent:* Tuesday, April 01, 2014 6:35 PM > *To:* dtls-iot@ietf.org > *Subject:* [Dtls-iot] Unicast responses in > draft-keoh-dice-multicast-security-05 > > > > Dear all, > > > > As to possible responses to multicast requests, Section 2.1 states that > they are sent back in unicast. Then, no further details are provided abou= t > their protection. > > > > Are such responses supposed to be protected through a "regular" DTLS > session, which must be (or has previously been) established between the > sender and listener? > > > > Cheers, > > Marco > > > > > > > > > > > ------------------------------ > > The information contained in this message may be confidential and legally > protected under applicable law. The message is intended solely for the > addressee(s). If you are not the intended recipient, you are hereby > notified that any use, forwarding, dissemination, or reproduction of this > message is strictly prohibited and may be unlawful. If you are not the > intended recipient, please contact the sender by return e-mail and destro= y > all copies of the original message. > > > --f46d040fa03ce72e9304f92fac74 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hello Akbar,

The updated version looks = really good to me.

Best regards,
Marco






On 9 May 2014 21:40, Rahman, Akbar <Akbar.Rahman@interdigital.com> wrote:

Hi Marco,

=C2=A0

=C2=A0

We have updated the draft= to capture your remaining comments below.=C2=A0 Please review and tell us = if you have any other comments.

=C2=A0

=C2=A0

http://tools.ietf.org/html/draft-keoh-dice-multicast-security-07#sec= tion-4.5

= =C2=A0

<= u>=C2=A0

4.5.=C2=A0 Unicast Responses to Multicast Messages<= u>

=C2=A0

=C2=A0=C2=A0 In CoAP, responses to multicast messages are = always sent back as

=C2=A0=C2=A0 u= nicast.=C2=A0 That is, the group members that receive a multicast message

=C2=A0=C2=A0 may individually decide to send (or suppress)= a unicast response as

=C2=A0=C2= =A0 described in Section 2.5 of [I-D.ietf-core-groupcomm].=C2=A0 The unicas= t

=C2=A0=C2=A0 responses to a DTLS-based multicast message m= ay optionally be secure.

=C2=A0=C2= =A0 Specifically, the unicast response may be sent back as a unicast DTLS

=C2=A0=C2=A0 as described in Section 9.1 of [I-D.ietf-core= -coap].=C2=A0 This requires

= =C2=A0= =C2=A0 that a unicast DTLS handshake was previously initiated between the

=C2=A0=C2=A0 multicast message sender and listener.=

=C2=A0

=C2=A0=C2=A0 Either the multicast message sender or = listener may initiate the

=C2=A0= =C2=A0 unicast DTLS handshake.=C2=A0 If the DTLS handshake was initiated by= the

=C2=A0=C2=A0 multicast message sender, it requires that th= e sender be aware of the

=C2=A0=C2= =A0 membership of the multicast group.=C2=A0 This can be accomplished, for<= u>

=C2=A0=C2=A0 example, as described in Section 2.6 of [I-D.= ietf-core-coap].=C2=A0 If the

=C2= =A0=C2=A0 listener initiated the DTLS handshake, it may have done so, for

=C2=A0=C2=A0 example, after receiving a multicast message = for the first time.

=C2=A0=C2=A0 In the extreme scenario, a multicast sender m= ay attempt to initiate

=C2= =A0=C2=A0 the unicast DTLS handshake with all, or a subset of, known listen= ers

=C2=A0=C2=A0 just after it sends out the DTLS-based multic= ast message.=C2=A0 This may

= =C2=A0= =C2=A0 result in the multicast sender having to process unicast DTLS=

=C2=A0=C2=A0 handshake messages from multiple multicast li= steners in a short

=C2=A0=C2=A0 period.

=C2=A0

=C2=A0=C2= =A0 Note: There is an obvious timing and processing load issue for the

=C2=A0=C2=A0 multicast sender in the scenario where it att= empts to initiate the

=C2=A0=C2=A0= unicast DTLS handshakes with all/some of its known listeners just

=C2=A0=C2=A0 after it sends out the DTLS-based multicast m= essage.=C2=A0 In this case,

= =C2=A0= =C2=A0 the processing load in the multicast sender (i.e. unicast DTLS

=C2=A0=C2=A0 client) is reduced somewhat by the fact that = CoAP requires a back-off

=C2=A0=C2= =A0 and randomization of the unicast response by the Leisure timer

=C2=A0=C2=A0 mechanism as described in Section 8.2 of [I-D= .ietf-core-coap].

=C2=A0=

=C2=A0

=C2=A0

Best Regards,

=C2= =A0

=C2=A0

Akbar=

=C2=A0

=C2=A0

=C2=A0

From: dtls-iot= [mailto:dtl= s-iot-bounces@ietf.org] On Behalf Of Rahman, Akbar
Sent: Tuesday, May 06, 2014 4:44 PM
To: Marco Tiloca


Cc: Kumar, Sandeep; dtls-iot@ietf.org
Subject:= Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security= -05

<= /u>=C2=A0

Hi Ma= rco,

=C2=A0

=C2=A0

Thanks for reviewing the = updated draft.=C2=A0 Also here is my feedback to your two new questions:=

=C2=A0

=C2=A0

>1) In order to perform a DTLS handshake before/after sending a multica= st message, a sender

> node should be aware of the group membership, e= specially what are the listener nodes currently

> present in the group. Of course, such a group membershi= p may change over time, upon new nodes
>joining the group. However, Section 3.1 in the draft states that "= Any device can in principle decide

= >to listen to any IPv6 multicast address. This also means applications o= n the other devices do not

>know, or do not get notified, when new listeners= join the network.". Couldn't this be a problem

<= p class=3D"MsoNormal">>for the suggested approach?

=C2=A0

Y= es, in principle, any device can decide to listen for any IPv6 multicast ad= dress.=C2=A0 But in practice of course there are IPv6 multicast related pro= tocols for routing/joining that dictate who can successfully listen = for and receive an IPv6 multicast packet.=C2=A0 For example, unless a devic= e uses a protocol like MLD to explicitly join a multicast group, the networ= k will never route the multicast packets of interest to the sub-network of = the device.=C2=A0 This is all explained at a high level in the I.D.groupcom= m reference (http://tools.ietf.org/html/draft-ietf-c= ore-groupcomm-18#section-2.1 ) .

=C2=A0

The other part of y= our question refers to how does the sender node know who is part of the gro= up.=C2=A0 You are correct that it is very difficult to know precisely the m= embership of a group.=C2=A0 That is why we had the subtle reference to =E2= =80=9Cknown listeners=E2=80=9D.=C2=A0 How you actually know the membership = depends on the mix of protocols used (and is in fact it is not always possi= ble to know all the members accurately).=C2=A0 But for CoAP group member di= scovery, there is =C2=A0again guidance given in the I.D.groupcomm reference= (specifically in http://tools.ietf.org/html/draft-i= etf-core-groupcomm-18#section-2.6 ).=C2=A0 We can make this point a bit= more explicit in the next update of our I-D.

=C2=A0

=C2=A0

=C2=A0

>2) An alternative approach to the one suggested = in Section 4.5 may consist in a listener node establishing

> a unicast DTLS session (i.e. starting a DTLS h= andshake) with the sender node, upon receiving a multicast

> message for the first time.

=C2=A0=

Yes, good point!=C2=A0 We can add this to the I-= D in our next update.

=C2=A0

=C2=A0

Best Regards,

=C2=A0

=C2=A0

Akbar

=C2=A0=

=C2=A0

=C2=A0

From: Marco Ti= loca [mailto:marco@sics.= se]
Sent: Tuesday, May 06, 2014 12:32 PM
To: Rahman, Akbar
= Cc: Kumar, Sandeep; dtls-iot@ietf.org
Subject: Re: [Dtls-iot] Unicast resp= onses in draft-keoh-dice-multicast-security-05

=C2=A0

= Hello Akbar,

=C2=A0<= /u>

Thanks for having considered my qu= estion. The new Section 4.5 looks fine to me. Also, I have the two followin= g comments.

=C2=A0

1) In order to perform a DTLS handshake before/after sendi= ng a multicast message, a sender node should be aware of the group membersh= ip, especially what are the listener nodes currently present in the group. = Of course, such a group membership may change over time, upon new nodes joi= ning the group. However, Section 3.1 in the draft states that "Any dev= ice can in principle decide to listen to any IPv6 multicast address. This a= lso means applications on the other devices do not know, or do not get noti= fied, when new listeners join the network.". Couldn't this be a pr= oblem for the suggested approach?

=C2=A0

2) An alternative approach to the one suggested in Section= 4.5 may consist in a listener node establishing a unicast DTLS session (i.= e. starting a DTLS handshake) with the sender node, upon receiving a multic= ast message for the first time.

=C2=A0

Best regards,

Marco

=C2= =A0

=C2=A0

=C2=A0

=C2=A0

On 5 May 2014 23:45, Rahman, Akbar <Akbar.Rahman@interdigital.com>= ; wrote:

Hi Marco,

=C2=A0=

=C2=A0

=C2=A0

The authors have made an = update to the draft to address fully your good question regarding how to ha= ndle the unicast responses to the multicast response.=C2=A0 Specifically, p= lease review the new section 4.5 and tell us if you have any more questions= :

=C2=A0

=C2=A0

http://tools.ietf.org/html/draft-keoh-dice-multicast-security-06#sec= tion-4.5

=C2=A0

4.5.=C2=A0 Unicast Responses to Multicast Messages

=C2=A0

=C2=A0=C2= =A0 In CoAP, responses to multicast messages are always sent back as=

=C2=A0=C2=A0 unicast.=C2=A0 That is, the group members tha= t receive a multicast message

=C2= =A0=C2=A0 may individually decide to send (or suppress) a unicast response = as

=C2=A0=C2=A0 described in Section 2.5 of [I-D.ietf-core-gr= oupcomm].=C2=A0 The unicast

= =C2=A0= =C2=A0 responses to a DTLS-based multicast message may optionally be secure= .

=C2=A0=C2=A0 Specifically, the unicast response may be sen= t back as a unicast DTLS

=C2=A0=C2= =A0 as described in Section 9.1 of [I-D.ietf-core-coap].=C2=A0 This require= s

=C2=A0=C2=A0 that a unicast DTLS handshake was previously = initiated between the

=C2=A0=C2=A0= multicast message sender and listener.=C2=A0 In the extreme scenario, a

=C2=A0=C2=A0 multicast sender may attempt to initiate the = unicast DTLS handshake

=C2=A0=C2= =A0 with all or a subset of known listeners just before or just after it

=C2=A0=C2=A0 sends out the DTLS-based multicast message.= =C2=A0 This may result in the

=C2= =A0=C2=A0 multicast sender (i.e. unicast DTLS client) having to process uni= cast

=C2=A0=C2=A0 DTLS handshake messages from multiple multica= st listeners (i.e.

=C2=A0=C2=A0 un= icast DTLS servers) in a short period.

=C2=A0

=C2=A0=C2= =A0 Note: There is an obvious timing and processing load issue for the

=C2=A0=C2=A0 multicast sender in the scenario where it att= empts to initiate the

=C2=A0=C2=A0= unicast DTLS handshakes with all/some of its known listeners just

=C2=A0=C2=A0 after it sends out the DTLS-based multicast m= essage.=C2=A0 In this case,

= =C2=A0= =C2=A0 the processing load in the multicast sender (i.e. unicast DTLS

=C2=A0=C2=A0 client) is reduced somewhat by the fact that = CoAP requires a back-off

=C2=A0=C2= =A0 and randomization of the unicast response by the Leisure timer

=C2=A0=C2=A0 mechanism as described in Section 8.2 of [I-D= .ietf-core-coap].

=C2=A0=

=C2=A0

=C2=A0

=C2=A0

Best Regards,

=C2=A0

=C2=A0

Akbar

=C2=A0=

=C2=A0

=C2=A0

From: dtls-iot [mailto:dtls-iot-bounces@ietf.org] On Behalf Of Kumar, Sande= ep
Sent: Wednesday, April 02, 2014 3:47 AM
To: Marco Tiloca; = dtls-iot@ietf.org
Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-mu= lticast-security-05

=C2=A0

Hi Marco

=C2=A0

The draft only addresses the protection of= multicast traffic. If unicast responses are expected and if protection is = required for such messages, then existing unicast protection mechanisms bas= ed on DTLS as suggested in draft-ietf-core-coap-18 should be used. Protecti= on of all unicast messages should be treated as would be done normally.

=C2=A0

Hope that answers y= our question.

=C2=A0

Regards

Sandeep =

=C2=A0<= /u>

From:= dtls-iot [mailto:dtls-iot-bounces@ietf.org] On Behalf Of Marco= Tiloca
Sent: Tuesday, April 01, 2014 6:35 PM
To: dtls-iot@ietf.org
Subject:= [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05<= /span>

=C2=A0

Dear all,

=C2=A0

As to possible= responses to multicast requests, Section 2.1 states that they are sent bac= k in unicast. Then, no further details are provided about their protection.=

=C2=A0

Are such responses supposed to be protected through a &quo= t;regular" DTLS session, which must be (or has previously been) establ= ished between the sender and listener?

=C2=A0

Cheers,

Marco

=C2=A0<= /u>

=C2=A0

=C2=A0

=C2=A0

=C2=A0<= /p>

The information contained in this message may be conf= idential and legally protected under applicable law. The message is intende= d solely for the addressee(s). If you are not the intended recipient, you a= re hereby notified that any use, forwarding, dissemination, or reproduction= of this message is strictly prohibited and may be unlawful. If you are not= the intended recipient, please contact the sender by return e-mail and des= troy all copies of the original message.

=C2=A0


--f46d040fa03ce72e9304f92fac74-- From nobody Mon May 19 09:03:06 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B1BD11A0193 for ; Mon, 19 May 2014 09:03:04 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GRvBVeky1nWX for ; Mon, 19 May 2014 09:02:59 -0700 (PDT) Received: from va3outboundpool.messaging.microsoft.com (va3ehsobe006.messaging.microsoft.com [216.32.180.16]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 614B61A017A for ; Mon, 19 May 2014 09:02:56 -0700 (PDT) Received: from mail86-va3-R.bigfish.com (10.7.14.236) by VA3EHSOBE007.bigfish.com (10.7.40.11) with Microsoft SMTP Server id 14.1.225.22; Mon, 19 May 2014 16:02:55 +0000 Received: from mail86-va3 (localhost [127.0.0.1]) by mail86-va3-R.bigfish.com (Postfix) with ESMTP id 779FE300436; Mon, 19 May 2014 16:02:55 +0000 (UTC) X-Forefront-Antispam-Report: CIP:206.191.242.69; KIP:(null); UIP:(null); IPV:NLI; H:mail.philips.com; RD:error; EFVD:FOP X-SpamScore: -24 X-BigFish: VPS-24(z579ehz98dI15d6I9371Ic89bh148cIe0eah1432Ic857h9251I217bIdd85kzz1f42h208ch1ee6h1de0h1fdah2073h2146h1202h1e76h2189h1d1ah1d2ah21bch1fc6hzz1d7338h1de098h1033IL1df219h17326ah8275bh8275dh18c673h1de097h186068hz2dh109h2a8h839hd25hf0ah1288h12a5h12bdh137ah1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h19b5h19ceh1ad9h1b0ah1b2fh1bceh2222h224fh1fb3h1d0ch1d2eh1d3fh1dfeh1dffh1e1dh1fe8h1ff5h20f0h2216h22d0h2336h2438h2461h2487h24ach24d7h2516h2545h255eh25f6h2605h268bh26d3h27e2h) Received: from mail86-va3 (localhost.localdomain [127.0.0.1]) by mail86-va3 (MessageSwitch) id 1400515372222153_20924; Mon, 19 May 2014 16:02:52 +0000 (UTC) Received: from VA3EHSMHS023.bigfish.com (unknown [10.7.14.247]) by mail86-va3.bigfish.com (Postfix) with ESMTP id 21D0F360167; Mon, 19 May 2014 16:02:52 +0000 (UTC) Received: from mail.philips.com (206.191.242.69) by VA3EHSMHS023.bigfish.com (10.7.99.33) with Microsoft SMTP Server (TLS) id 14.16.227.3; Mon, 19 May 2014 16:02:51 +0000 Received: from AMSPRD9003MB066.MGDPHG.emi.philips.com ([169.254.5.203]) by AMSPRD9003HT003.MGDPHG.emi.philips.com ([141.251.33.80]) with mapi id 14.16.0423.000; Mon, 19 May 2014 16:01:40 +0000 From: "Dijk, Esko" To: "Rahman, Akbar" , Marco Tiloca Thread-Topic: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 Thread-Index: AQHPTke1MAdfpqid3kOruFyexTfVEJsyuiUAgAE6ooCAAEaMgIAEpRcAgA93i1A= Date: Mon, 19 May 2014 16:01:39 +0000 Message-ID: <031DD135F9160444ABBE3B0C36CED61836D7A1E1@AMSPRD9003MB066.MGDPHG.emi.philips.com> References: In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [92.69.202.204] Content-Type: multipart/alternative; boundary="_000_031DD135F9160444ABBE3B0C36CED61836D7A1E1AMSPRD9003MB066_" MIME-Version: 1.0 X-OriginatorOrg: philips.com X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn% Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/RaIjR7D9qen8VR2LjYOAg1EUpAg Cc: "Kumar, Sandeep" , "dtls-iot@ietf.org" Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 May 2014 16:03:04 -0000 --_000_031DD135F9160444ABBE3B0C36CED61836D7A1E1AMSPRD9003MB066_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgQWtiYXIsDQoNCmFwb2xvZ2llcyBmb3IgbXkgbGF0ZSBpbnB1dCEgT24gdGhlIG5ldyB0ZXh0 LCB0d28gcG9pbnRzIChzZWUgYmVsb3cpIG1heSBuZWVkIHNvbWUgZnVydGhlciBkaXNjdXNzaW9u LiBIZXJlIHdlIGRldmlhdGUgZnJvbSB0aGUgc3Bpcml0IG9mIGNvcmUtY29hcC0xOCwgd2hpY2gg bWF5IG5lZWQgdG8gYmUgcG9pbnRlZCBvdXQgaW4gdGhlIHRleHQgZXhwbGljaXRseSwgaWYgdGhl IGRldmlhdGlvbiBpcyBjb25zaWRlcmVkIGFjY2VwdGFibGUuDQoNCjEuIFVuc2VjdXJlZCByZXNw b25zZXMNCuKAnFRoZSB1bmljYXN0IHJlc3BvbnNlcyB0byBhIERUTFMtYmFzZWQgbXVsdGljYXN0 IG1lc3NhZ2UgbWF5IG9wdGlvbmFsbHkgYmUgc2VjdXJl4oCdDQotPiBDb21wYXJlIHRvIHNlY3Rp b24gOS4xLjIgb2YgY29yZS1jb2FwOg0K4oCcVGhpcyBtZWFucyB0aGUgcmVzcG9uc2UgdG8gYSBE VExTIHNlY3VyZWQgcmVxdWVzdCBNVVNUIGFsd2F5cyBiZSBEVExTDQogICBzZWN1cmVkIHVzaW5n IHRoZSBzYW1lIHNlY3VyaXR5IHNlc3Npb24gYW5kIGVwb2NoLiAgQW55IGF0dGVtcHQgdG8NCiAg IHN1cHBseSBhIE5vU2VjIHJlc3BvbnNlIHRvIGEgRFRMUyByZXF1ZXN0IHNpbXBseSBkb2VzIG5v dCBtYXRjaCB0aGUNCiAgIHJlcXVlc3QgYW5kICh1bmxlc3MgaXQgZG9lcyBtYXRjaCBhbiB1bnJl bGF0ZWQgTm9TZWMgcmVxdWVzdCkNCiAgIHRoZXJlZm9yZSBNVVNUIGJlIHJlamVjdGVkLuKAnA0K DQpJdCBzZWVtcyB1bnNlY3VyZWQgcmVzcG9uc2VzIGFyZSBub3QgcG9zc2libGUgd2l0aG91dCBh bHRlcmluZyB0aGUgQ29BUCByZXF1ZXN0L3Jlc3BvbnNlIG1hdGNoaW5nIHJ1bGVzLg0KDQoyLiBX aG8gaW5pdGlhdGVzIHRoZSBoYW5kc2hha2UNCuKAnEVpdGhlciB0aGUgbXVsdGljYXN0IG1lc3Nh Z2Ugc2VuZGVyIG9yIGxpc3RlbmVyIG1heSBpbml0aWF0ZSB0aGUNCiAgIHVuaWNhc3QgRFRMUyBo YW5kc2hha2UuIOKAnA0KLT4gQ29tcGFyZSB0byBzZWN0aW9uIDkuMS4xIG9mIGNvcmUtY29hcDoN CuKAnFRoZSBlbmRwb2ludCBhY3RpbmcgYXMgdGhlIENvQVAgY2xpZW50IHNob3VsZCBhbHNvIGFj dCBhcyB0aGUgRFRMUw0KICAgY2xpZW50LiAgSXQgc2hvdWxkIGluaXRpYXRlIGEgc2Vzc2lvbiB0 byB0aGUgc2VydmVyIG9uIHRoZQ0KICAgYXBwcm9wcmlhdGUgcG9ydC7igJ0NCg0KYmVzdCByZWdh cmRzLA0KRXNrbw0KDQpGcm9tOiBkdGxzLWlvdCBbbWFpbHRvOmR0bHMtaW90LWJvdW5jZXNAaWV0 Zi5vcmddIE9uIEJlaGFsZiBPZiBSYWhtYW4sIEFrYmFyDQpTZW50OiBGcmlkYXksIE1heSAwOSwg MjAxNCAyMTo0MA0KVG86IE1hcmNvIFRpbG9jYQ0KQ2M6IEt1bWFyLCBTYW5kZWVwOyBkdGxzLWlv dEBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtEdGxzLWlvdF0gVW5pY2FzdCByZXNwb25zZXMgaW4g ZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNQ0KDQpIaSBNYXJjbywNCg0KDQpX ZSBoYXZlIHVwZGF0ZWQgdGhlIGRyYWZ0IHRvIGNhcHR1cmUgeW91ciByZW1haW5pbmcgY29tbWVu dHMgYmVsb3cuICBQbGVhc2UgcmV2aWV3IGFuZCB0ZWxsIHVzIGlmIHlvdSBoYXZlIGFueSBvdGhl ciBjb21tZW50cy4NCg0KDQpodHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1rZW9oLWRp Y2UtbXVsdGljYXN0LXNlY3VyaXR5LTA3I3NlY3Rpb24tNC41DQoNCg0KNC41LiAgVW5pY2FzdCBS ZXNwb25zZXMgdG8gTXVsdGljYXN0IE1lc3NhZ2VzDQoNCiAgIEluIENvQVAsIHJlc3BvbnNlcyB0 byBtdWx0aWNhc3QgbWVzc2FnZXMgYXJlIGFsd2F5cyBzZW50IGJhY2sgYXMNCiAgIHVuaWNhc3Qu ICBUaGF0IGlzLCB0aGUgZ3JvdXAgbWVtYmVycyB0aGF0IHJlY2VpdmUgYSBtdWx0aWNhc3QgbWVz c2FnZQ0KICAgbWF5IGluZGl2aWR1YWxseSBkZWNpZGUgdG8gc2VuZCAob3Igc3VwcHJlc3MpIGEg dW5pY2FzdCByZXNwb25zZSBhcw0KICAgZGVzY3JpYmVkIGluIFNlY3Rpb24gMi41IG9mIFtJLUQu aWV0Zi1jb3JlLWdyb3VwY29tbV0uICBUaGUgdW5pY2FzdA0KICAgcmVzcG9uc2VzIHRvIGEgRFRM Uy1iYXNlZCBtdWx0aWNhc3QgbWVzc2FnZSBtYXkgb3B0aW9uYWxseSBiZSBzZWN1cmUuDQogICBT cGVjaWZpY2FsbHksIHRoZSB1bmljYXN0IHJlc3BvbnNlIG1heSBiZSBzZW50IGJhY2sgYXMgYSB1 bmljYXN0IERUTFMNCiAgIGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDkuMSBvZiBbSS1ELmlldGYt Y29yZS1jb2FwXS4gIFRoaXMgcmVxdWlyZXMNCiAgIHRoYXQgYSB1bmljYXN0IERUTFMgaGFuZHNo YWtlIHdhcyBwcmV2aW91c2x5IGluaXRpYXRlZCBiZXR3ZWVuIHRoZQ0KICAgbXVsdGljYXN0IG1l c3NhZ2Ugc2VuZGVyIGFuZCBsaXN0ZW5lci4NCg0KICAgRWl0aGVyIHRoZSBtdWx0aWNhc3QgbWVz c2FnZSBzZW5kZXIgb3IgbGlzdGVuZXIgbWF5IGluaXRpYXRlIHRoZQ0KICAgdW5pY2FzdCBEVExT IGhhbmRzaGFrZS4gIElmIHRoZSBEVExTIGhhbmRzaGFrZSB3YXMgaW5pdGlhdGVkIGJ5IHRoZQ0K ICAgbXVsdGljYXN0IG1lc3NhZ2Ugc2VuZGVyLCBpdCByZXF1aXJlcyB0aGF0IHRoZSBzZW5kZXIg YmUgYXdhcmUgb2YgdGhlDQogICBtZW1iZXJzaGlwIG9mIHRoZSBtdWx0aWNhc3QgZ3JvdXAuICBU aGlzIGNhbiBiZSBhY2NvbXBsaXNoZWQsIGZvcg0KICAgZXhhbXBsZSwgYXMgZGVzY3JpYmVkIGlu IFNlY3Rpb24gMi42IG9mIFtJLUQuaWV0Zi1jb3JlLWNvYXBdLiAgSWYgdGhlDQogICBsaXN0ZW5l ciBpbml0aWF0ZWQgdGhlIERUTFMgaGFuZHNoYWtlLCBpdCBtYXkgaGF2ZSBkb25lIHNvLCBmb3IN CiAgIGV4YW1wbGUsIGFmdGVyIHJlY2VpdmluZyBhIG11bHRpY2FzdCBtZXNzYWdlIGZvciB0aGUg Zmlyc3QgdGltZS4NCg0KICAgSW4gdGhlIGV4dHJlbWUgc2NlbmFyaW8sIGEgbXVsdGljYXN0IHNl bmRlciBtYXkgYXR0ZW1wdCB0byBpbml0aWF0ZQ0KICAgdGhlIHVuaWNhc3QgRFRMUyBoYW5kc2hh a2Ugd2l0aCBhbGwsIG9yIGEgc3Vic2V0IG9mLCBrbm93biBsaXN0ZW5lcnMNCiAgIGp1c3QgYWZ0 ZXIgaXQgc2VuZHMgb3V0IHRoZSBEVExTLWJhc2VkIG11bHRpY2FzdCBtZXNzYWdlLiAgVGhpcyBt YXkNCiAgIHJlc3VsdCBpbiB0aGUgbXVsdGljYXN0IHNlbmRlciBoYXZpbmcgdG8gcHJvY2VzcyB1 bmljYXN0IERUTFMNCiAgIGhhbmRzaGFrZSBtZXNzYWdlcyBmcm9tIG11bHRpcGxlIG11bHRpY2Fz dCBsaXN0ZW5lcnMgaW4gYSBzaG9ydA0KICAgcGVyaW9kLg0KDQogICBOb3RlOiBUaGVyZSBpcyBh biBvYnZpb3VzIHRpbWluZyBhbmQgcHJvY2Vzc2luZyBsb2FkIGlzc3VlIGZvciB0aGUNCiAgIG11 bHRpY2FzdCBzZW5kZXIgaW4gdGhlIHNjZW5hcmlvIHdoZXJlIGl0IGF0dGVtcHRzIHRvIGluaXRp YXRlIHRoZQ0KICAgdW5pY2FzdCBEVExTIGhhbmRzaGFrZXMgd2l0aCBhbGwvc29tZSBvZiBpdHMg a25vd24gbGlzdGVuZXJzIGp1c3QNCiAgIGFmdGVyIGl0IHNlbmRzIG91dCB0aGUgRFRMUy1iYXNl ZCBtdWx0aWNhc3QgbWVzc2FnZS4gIEluIHRoaXMgY2FzZSwNCiAgIHRoZSBwcm9jZXNzaW5nIGxv YWQgaW4gdGhlIG11bHRpY2FzdCBzZW5kZXIgKGkuZS4gdW5pY2FzdCBEVExTDQogICBjbGllbnQp IGlzIHJlZHVjZWQgc29tZXdoYXQgYnkgdGhlIGZhY3QgdGhhdCBDb0FQIHJlcXVpcmVzIGEgYmFj ay1vZmYNCiAgIGFuZCByYW5kb21pemF0aW9uIG9mIHRoZSB1bmljYXN0IHJlc3BvbnNlIGJ5IHRo ZSBMZWlzdXJlIHRpbWVyDQogICBtZWNoYW5pc20gYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gOC4y IG9mIFtJLUQuaWV0Zi1jb3JlLWNvYXBdLg0KDQoNCg0KQmVzdCBSZWdhcmRzLA0KDQoNCkFrYmFy DQoNCg0KDQpGcm9tOiBkdGxzLWlvdCBbbWFpbHRvOmR0bHMtaW90LWJvdW5jZXNAaWV0Zi5vcmdd IE9uIEJlaGFsZiBPZiBSYWhtYW4sIEFrYmFyDQpTZW50OiBUdWVzZGF5LCBNYXkgMDYsIDIwMTQg NDo0NCBQTQ0KVG86IE1hcmNvIFRpbG9jYQ0KQ2M6IEt1bWFyLCBTYW5kZWVwOyBkdGxzLWlvdEBp ZXRmLm9yZzxtYWlsdG86ZHRscy1pb3RAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW0R0bHMtaW90 XSBVbmljYXN0IHJlc3BvbnNlcyBpbiBkcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5 LTA1DQoNCkhpIE1hcmNvLA0KDQoNClRoYW5rcyBmb3IgcmV2aWV3aW5nIHRoZSB1cGRhdGVkIGRy YWZ0LiAgQWxzbyBoZXJlIGlzIG15IGZlZWRiYWNrIHRvIHlvdXIgdHdvIG5ldyBxdWVzdGlvbnM6 DQoNCg0KPjEpIEluIG9yZGVyIHRvIHBlcmZvcm0gYSBEVExTIGhhbmRzaGFrZSBiZWZvcmUvYWZ0 ZXIgc2VuZGluZyBhIG11bHRpY2FzdCBtZXNzYWdlLCBhIHNlbmRlcg0KPiBub2RlIHNob3VsZCBi ZSBhd2FyZSBvZiB0aGUgZ3JvdXAgbWVtYmVyc2hpcCwgZXNwZWNpYWxseSB3aGF0IGFyZSB0aGUg bGlzdGVuZXIgbm9kZXMgY3VycmVudGx5DQo+IHByZXNlbnQgaW4gdGhlIGdyb3VwLiBPZiBjb3Vy c2UsIHN1Y2ggYSBncm91cCBtZW1iZXJzaGlwIG1heSBjaGFuZ2Ugb3ZlciB0aW1lLCB1cG9uIG5l dyBub2Rlcw0KPmpvaW5pbmcgdGhlIGdyb3VwLiBIb3dldmVyLCBTZWN0aW9uIDMuMSBpbiB0aGUg ZHJhZnQgc3RhdGVzIHRoYXQgIkFueSBkZXZpY2UgY2FuIGluIHByaW5jaXBsZSBkZWNpZGUNCj50 byBsaXN0ZW4gdG8gYW55IElQdjYgbXVsdGljYXN0IGFkZHJlc3MuIFRoaXMgYWxzbyBtZWFucyBh cHBsaWNhdGlvbnMgb24gdGhlIG90aGVyIGRldmljZXMgZG8gbm90DQo+a25vdywgb3IgZG8gbm90 IGdldCBub3RpZmllZCwgd2hlbiBuZXcgbGlzdGVuZXJzIGpvaW4gdGhlIG5ldHdvcmsuIi4gQ291 bGRuJ3QgdGhpcyBiZSBhIHByb2JsZW0NCj5mb3IgdGhlIHN1Z2dlc3RlZCBhcHByb2FjaD8NCg0K WWVzLCBpbiBwcmluY2lwbGUsIGFueSBkZXZpY2UgY2FuIGRlY2lkZSB0byBsaXN0ZW4gZm9yIGFu eSBJUHY2IG11bHRpY2FzdCBhZGRyZXNzLiAgQnV0IGluIHByYWN0aWNlIG9mIGNvdXJzZSB0aGVy ZSBhcmUgSVB2NiBtdWx0aWNhc3QgcmVsYXRlZCBwcm90b2NvbHMgZm9yIHJvdXRpbmcvam9pbmlu ZyB0aGF0IGRpY3RhdGUgd2hvIGNhbiBzdWNjZXNzZnVsbHkgbGlzdGVuIGZvciBhbmQgcmVjZWl2 ZSBhbiBJUHY2IG11bHRpY2FzdCBwYWNrZXQuICBGb3IgZXhhbXBsZSwgdW5sZXNzIGEgZGV2aWNl IHVzZXMgYSBwcm90b2NvbCBsaWtlIE1MRCB0byBleHBsaWNpdGx5IGpvaW4gYSBtdWx0aWNhc3Qg Z3JvdXAsIHRoZSBuZXR3b3JrIHdpbGwgbmV2ZXIgcm91dGUgdGhlIG11bHRpY2FzdCBwYWNrZXRz IG9mIGludGVyZXN0IHRvIHRoZSBzdWItbmV0d29yayBvZiB0aGUgZGV2aWNlLiAgVGhpcyBpcyBh bGwgZXhwbGFpbmVkIGF0IGEgaGlnaCBsZXZlbCBpbiB0aGUgSS5ELmdyb3VwY29tbSByZWZlcmVu Y2UgKGh0dHA6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtY29yZS1ncm91cGNvbW0t MTgjc2VjdGlvbi0yLjEgKSAuDQoNClRoZSBvdGhlciBwYXJ0IG9mIHlvdXIgcXVlc3Rpb24gcmVm ZXJzIHRvIGhvdyBkb2VzIHRoZSBzZW5kZXIgbm9kZSBrbm93IHdobyBpcyBwYXJ0IG9mIHRoZSBn cm91cC4gIFlvdSBhcmUgY29ycmVjdCB0aGF0IGl0IGlzIHZlcnkgZGlmZmljdWx0IHRvIGtub3cg cHJlY2lzZWx5IHRoZSBtZW1iZXJzaGlwIG9mIGEgZ3JvdXAuICBUaGF0IGlzIHdoeSB3ZSBoYWQg dGhlIHN1YnRsZSByZWZlcmVuY2UgdG8g4oCca25vd24gbGlzdGVuZXJz4oCdLiAgSG93IHlvdSBh Y3R1YWxseSBrbm93IHRoZSBtZW1iZXJzaGlwIGRlcGVuZHMgb24gdGhlIG1peCBvZiBwcm90b2Nv bHMgdXNlZCAoYW5kIGlzIGluIGZhY3QgaXQgaXMgbm90IGFsd2F5cyBwb3NzaWJsZSB0byBrbm93 IGFsbCB0aGUgbWVtYmVycyBhY2N1cmF0ZWx5KS4gIEJ1dCBmb3IgQ29BUCBncm91cCBtZW1iZXIg ZGlzY292ZXJ5LCB0aGVyZSBpcyAgYWdhaW4gZ3VpZGFuY2UgZ2l2ZW4gaW4gdGhlIEkuRC5ncm91 cGNvbW0gcmVmZXJlbmNlIChzcGVjaWZpY2FsbHkgaW4gaHR0cDovL3Rvb2xzLmlldGYub3JnL2h0 bWwvZHJhZnQtaWV0Zi1jb3JlLWdyb3VwY29tbS0xOCNzZWN0aW9uLTIuNiApLiAgV2UgY2FuIG1h a2UgdGhpcyBwb2ludCBhIGJpdCBtb3JlIGV4cGxpY2l0IGluIHRoZSBuZXh0IHVwZGF0ZSBvZiBv dXIgSS1ELg0KDQoNCg0KPjIpIEFuIGFsdGVybmF0aXZlIGFwcHJvYWNoIHRvIHRoZSBvbmUgc3Vn Z2VzdGVkIGluIFNlY3Rpb24gNC41IG1heSBjb25zaXN0IGluIGEgbGlzdGVuZXIgbm9kZSBlc3Rh Ymxpc2hpbmcNCj4gYSB1bmljYXN0IERUTFMgc2Vzc2lvbiAoaS5lLiBzdGFydGluZyBhIERUTFMg aGFuZHNoYWtlKSB3aXRoIHRoZSBzZW5kZXIgbm9kZSwgdXBvbiByZWNlaXZpbmcgYSBtdWx0aWNh c3QNCj4gbWVzc2FnZSBmb3IgdGhlIGZpcnN0IHRpbWUuDQoNClllcywgZ29vZCBwb2ludCEgIFdl IGNhbiBhZGQgdGhpcyB0byB0aGUgSS1EIGluIG91ciBuZXh0IHVwZGF0ZS4NCg0KDQpCZXN0IFJl Z2FyZHMsDQoNCg0KQWtiYXINCg0KDQoNCkZyb206IE1hcmNvIFRpbG9jYSBbbWFpbHRvOm1hcmNv QHNpY3Muc2VdDQpTZW50OiBUdWVzZGF5LCBNYXkgMDYsIDIwMTQgMTI6MzIgUE0NClRvOiBSYWht YW4sIEFrYmFyDQpDYzogS3VtYXIsIFNhbmRlZXA7IGR0bHMtaW90QGlldGYub3JnPG1haWx0bzpk dGxzLWlvdEBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbRHRscy1pb3RdIFVuaWNhc3QgcmVzcG9u c2VzIGluIGRyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDUNCg0KSGVsbG8gQWti YXIsDQoNClRoYW5rcyBmb3IgaGF2aW5nIGNvbnNpZGVyZWQgbXkgcXVlc3Rpb24uIFRoZSBuZXcg U2VjdGlvbiA0LjUgbG9va3MgZmluZSB0byBtZS4gQWxzbywgSSBoYXZlIHRoZSB0d28gZm9sbG93 aW5nIGNvbW1lbnRzLg0KDQoxKSBJbiBvcmRlciB0byBwZXJmb3JtIGEgRFRMUyBoYW5kc2hha2Ug YmVmb3JlL2FmdGVyIHNlbmRpbmcgYSBtdWx0aWNhc3QgbWVzc2FnZSwgYSBzZW5kZXIgbm9kZSBz aG91bGQgYmUgYXdhcmUgb2YgdGhlIGdyb3VwIG1lbWJlcnNoaXAsIGVzcGVjaWFsbHkgd2hhdCBh cmUgdGhlIGxpc3RlbmVyIG5vZGVzIGN1cnJlbnRseSBwcmVzZW50IGluIHRoZSBncm91cC4gT2Yg Y291cnNlLCBzdWNoIGEgZ3JvdXAgbWVtYmVyc2hpcCBtYXkgY2hhbmdlIG92ZXIgdGltZSwgdXBv biBuZXcgbm9kZXMgam9pbmluZyB0aGUgZ3JvdXAuIEhvd2V2ZXIsIFNlY3Rpb24gMy4xIGluIHRo ZSBkcmFmdCBzdGF0ZXMgdGhhdCAiQW55IGRldmljZSBjYW4gaW4gcHJpbmNpcGxlIGRlY2lkZSB0 byBsaXN0ZW4gdG8gYW55IElQdjYgbXVsdGljYXN0IGFkZHJlc3MuIFRoaXMgYWxzbyBtZWFucyBh cHBsaWNhdGlvbnMgb24gdGhlIG90aGVyIGRldmljZXMgZG8gbm90IGtub3csIG9yIGRvIG5vdCBn ZXQgbm90aWZpZWQsIHdoZW4gbmV3IGxpc3RlbmVycyBqb2luIHRoZSBuZXR3b3JrLiIuIENvdWxk bid0IHRoaXMgYmUgYSBwcm9ibGVtIGZvciB0aGUgc3VnZ2VzdGVkIGFwcHJvYWNoPw0KDQoyKSBB biBhbHRlcm5hdGl2ZSBhcHByb2FjaCB0byB0aGUgb25lIHN1Z2dlc3RlZCBpbiBTZWN0aW9uIDQu NSBtYXkgY29uc2lzdCBpbiBhIGxpc3RlbmVyIG5vZGUgZXN0YWJsaXNoaW5nIGEgdW5pY2FzdCBE VExTIHNlc3Npb24gKGkuZS4gc3RhcnRpbmcgYSBEVExTIGhhbmRzaGFrZSkgd2l0aCB0aGUgc2Vu ZGVyIG5vZGUsIHVwb24gcmVjZWl2aW5nIGEgbXVsdGljYXN0IG1lc3NhZ2UgZm9yIHRoZSBmaXJz dCB0aW1lLg0KDQpCZXN0IHJlZ2FyZHMsDQpNYXJjbw0KDQoNCg0KDQpPbiA1IE1heSAyMDE0IDIz OjQ1LCBSYWhtYW4sIEFrYmFyIDxBa2Jhci5SYWhtYW5AaW50ZXJkaWdpdGFsLmNvbTxtYWlsdG86 QWtiYXIuUmFobWFuQGludGVyZGlnaXRhbC5jb20+PiB3cm90ZToNCkhpIE1hcmNvLA0KDQoNCg0K VGhlIGF1dGhvcnMgaGF2ZSBtYWRlIGFuIHVwZGF0ZSB0byB0aGUgZHJhZnQgdG8gYWRkcmVzcyBm dWxseSB5b3VyIGdvb2QgcXVlc3Rpb24gcmVnYXJkaW5nIGhvdyB0byBoYW5kbGUgdGhlIHVuaWNh c3QgcmVzcG9uc2VzIHRvIHRoZSBtdWx0aWNhc3QgcmVzcG9uc2UuICBTcGVjaWZpY2FsbHksIHBs ZWFzZSByZXZpZXcgdGhlIG5ldyBzZWN0aW9uIDQuNSBhbmQgdGVsbCB1cyBpZiB5b3UgaGF2ZSBh bnkgbW9yZSBxdWVzdGlvbnM6DQoNCg0KaHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQt a2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNiNzZWN0aW9uLTQuNQ0KDQo0LjUuICBVbmlj YXN0IFJlc3BvbnNlcyB0byBNdWx0aWNhc3QgTWVzc2FnZXMNCg0KICAgSW4gQ29BUCwgcmVzcG9u c2VzIHRvIG11bHRpY2FzdCBtZXNzYWdlcyBhcmUgYWx3YXlzIHNlbnQgYmFjayBhcw0KICAgdW5p Y2FzdC4gIFRoYXQgaXMsIHRoZSBncm91cCBtZW1iZXJzIHRoYXQgcmVjZWl2ZSBhIG11bHRpY2Fz dCBtZXNzYWdlDQogICBtYXkgaW5kaXZpZHVhbGx5IGRlY2lkZSB0byBzZW5kIChvciBzdXBwcmVz cykgYSB1bmljYXN0IHJlc3BvbnNlIGFzDQogICBkZXNjcmliZWQgaW4gU2VjdGlvbiAyLjUgb2Yg W0ktRC5pZXRmLWNvcmUtZ3JvdXBjb21tXS4gIFRoZSB1bmljYXN0DQogICByZXNwb25zZXMgdG8g YSBEVExTLWJhc2VkIG11bHRpY2FzdCBtZXNzYWdlIG1heSBvcHRpb25hbGx5IGJlIHNlY3VyZS4N CiAgIFNwZWNpZmljYWxseSwgdGhlIHVuaWNhc3QgcmVzcG9uc2UgbWF5IGJlIHNlbnQgYmFjayBh cyBhIHVuaWNhc3QgRFRMUw0KICAgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gOS4xIG9mIFtJLUQu aWV0Zi1jb3JlLWNvYXBdLiAgVGhpcyByZXF1aXJlcw0KICAgdGhhdCBhIHVuaWNhc3QgRFRMUyBo YW5kc2hha2Ugd2FzIHByZXZpb3VzbHkgaW5pdGlhdGVkIGJldHdlZW4gdGhlDQogICBtdWx0aWNh c3QgbWVzc2FnZSBzZW5kZXIgYW5kIGxpc3RlbmVyLiAgSW4gdGhlIGV4dHJlbWUgc2NlbmFyaW8s IGENCiAgIG11bHRpY2FzdCBzZW5kZXIgbWF5IGF0dGVtcHQgdG8gaW5pdGlhdGUgdGhlIHVuaWNh c3QgRFRMUyBoYW5kc2hha2UNCiAgIHdpdGggYWxsIG9yIGEgc3Vic2V0IG9mIGtub3duIGxpc3Rl bmVycyBqdXN0IGJlZm9yZSBvciBqdXN0IGFmdGVyIGl0DQogICBzZW5kcyBvdXQgdGhlIERUTFMt YmFzZWQgbXVsdGljYXN0IG1lc3NhZ2UuICBUaGlzIG1heSByZXN1bHQgaW4gdGhlDQogICBtdWx0 aWNhc3Qgc2VuZGVyIChpLmUuIHVuaWNhc3QgRFRMUyBjbGllbnQpIGhhdmluZyB0byBwcm9jZXNz IHVuaWNhc3QNCiAgIERUTFMgaGFuZHNoYWtlIG1lc3NhZ2VzIGZyb20gbXVsdGlwbGUgbXVsdGlj YXN0IGxpc3RlbmVycyAoaS5lLg0KICAgdW5pY2FzdCBEVExTIHNlcnZlcnMpIGluIGEgc2hvcnQg cGVyaW9kLg0KDQogICBOb3RlOiBUaGVyZSBpcyBhbiBvYnZpb3VzIHRpbWluZyBhbmQgcHJvY2Vz c2luZyBsb2FkIGlzc3VlIGZvciB0aGUNCiAgIG11bHRpY2FzdCBzZW5kZXIgaW4gdGhlIHNjZW5h cmlvIHdoZXJlIGl0IGF0dGVtcHRzIHRvIGluaXRpYXRlIHRoZQ0KICAgdW5pY2FzdCBEVExTIGhh bmRzaGFrZXMgd2l0aCBhbGwvc29tZSBvZiBpdHMga25vd24gbGlzdGVuZXJzIGp1c3QNCiAgIGFm dGVyIGl0IHNlbmRzIG91dCB0aGUgRFRMUy1iYXNlZCBtdWx0aWNhc3QgbWVzc2FnZS4gIEluIHRo aXMgY2FzZSwNCiAgIHRoZSBwcm9jZXNzaW5nIGxvYWQgaW4gdGhlIG11bHRpY2FzdCBzZW5kZXIg KGkuZS4gdW5pY2FzdCBEVExTDQogICBjbGllbnQpIGlzIHJlZHVjZWQgc29tZXdoYXQgYnkgdGhl IGZhY3QgdGhhdCBDb0FQIHJlcXVpcmVzIGEgYmFjay1vZmYNCiAgIGFuZCByYW5kb21pemF0aW9u IG9mIHRoZSB1bmljYXN0IHJlc3BvbnNlIGJ5IHRoZSBMZWlzdXJlIHRpbWVyDQogICBtZWNoYW5p c20gYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gOC4yIG9mIFtJLUQuaWV0Zi1jb3JlLWNvYXBdLg0K DQoNCg0KDQpCZXN0IFJlZ2FyZHMsDQoNCg0KQWtiYXINCg0KDQoNCkZyb206IGR0bHMtaW90IFtt YWlsdG86ZHRscy1pb3QtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86ZHRscy1pb3QtYm91bmNlc0Bp ZXRmLm9yZz5dIE9uIEJlaGFsZiBPZiBLdW1hciwgU2FuZGVlcA0KU2VudDogV2VkbmVzZGF5LCBB cHJpbCAwMiwgMjAxNCAzOjQ3IEFNDQpUbzogTWFyY28gVGlsb2NhOyBkdGxzLWlvdEBpZXRmLm9y ZzxtYWlsdG86ZHRscy1pb3RAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW0R0bHMtaW90XSBVbmlj YXN0IHJlc3BvbnNlcyBpbiBkcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA1DQoN CkhpIE1hcmNvDQoNClRoZSBkcmFmdCBvbmx5IGFkZHJlc3NlcyB0aGUgcHJvdGVjdGlvbiBvZiBt dWx0aWNhc3QgdHJhZmZpYy4gSWYgdW5pY2FzdCByZXNwb25zZXMgYXJlIGV4cGVjdGVkIGFuZCBp ZiBwcm90ZWN0aW9uIGlzIHJlcXVpcmVkIGZvciBzdWNoIG1lc3NhZ2VzLCB0aGVuIGV4aXN0aW5n IHVuaWNhc3QgcHJvdGVjdGlvbiBtZWNoYW5pc21zIGJhc2VkIG9uIERUTFMgYXMgc3VnZ2VzdGVk IGluIGRyYWZ0LWlldGYtY29yZS1jb2FwLTE4IHNob3VsZCBiZSB1c2VkLiBQcm90ZWN0aW9uIG9m IGFsbCB1bmljYXN0IG1lc3NhZ2VzIHNob3VsZCBiZSB0cmVhdGVkIGFzIHdvdWxkIGJlIGRvbmUg bm9ybWFsbHkuDQoNCkhvcGUgdGhhdCBhbnN3ZXJzIHlvdXIgcXVlc3Rpb24uDQoNClJlZ2FyZHMN ClNhbmRlZXANCg0KRnJvbTogZHRscy1pb3QgW21haWx0bzpkdGxzLWlvdC1ib3VuY2VzQGlldGYu b3JnXSBPbiBCZWhhbGYgT2YgTWFyY28gVGlsb2NhDQpTZW50OiBUdWVzZGF5LCBBcHJpbCAwMSwg MjAxNCA2OjM1IFBNDQpUbzogZHRscy1pb3RAaWV0Zi5vcmc8bWFpbHRvOmR0bHMtaW90QGlldGYu b3JnPg0KU3ViamVjdDogW0R0bHMtaW90XSBVbmljYXN0IHJlc3BvbnNlcyBpbiBkcmFmdC1rZW9o LWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA1DQoNCkRlYXIgYWxsLA0KDQpBcyB0byBwb3NzaWJs ZSByZXNwb25zZXMgdG8gbXVsdGljYXN0IHJlcXVlc3RzLCBTZWN0aW9uIDIuMSBzdGF0ZXMgdGhh dCB0aGV5IGFyZSBzZW50IGJhY2sgaW4gdW5pY2FzdC4gVGhlbiwgbm8gZnVydGhlciBkZXRhaWxz IGFyZSBwcm92aWRlZCBhYm91dCB0aGVpciBwcm90ZWN0aW9uLg0KDQpBcmUgc3VjaCByZXNwb25z ZXMgc3VwcG9zZWQgdG8gYmUgcHJvdGVjdGVkIHRocm91Z2ggYSAicmVndWxhciIgRFRMUyBzZXNz aW9uLCB3aGljaCBtdXN0IGJlIChvciBoYXMgcHJldmlvdXNseSBiZWVuKSBlc3RhYmxpc2hlZCBi ZXR3ZWVuIHRoZSBzZW5kZXIgYW5kIGxpc3RlbmVyPw0KDQpDaGVlcnMsDQpNYXJjbw0KDQoNCg0K DQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpUaGUgaW5mb3JtYXRpb24gY29u dGFpbmVkIGluIHRoaXMgbWVzc2FnZSBtYXkgYmUgY29uZmlkZW50aWFsIGFuZCBsZWdhbGx5IHBy b3RlY3RlZCB1bmRlciBhcHBsaWNhYmxlIGxhdy4gVGhlIG1lc3NhZ2UgaXMgaW50ZW5kZWQgc29s ZWx5IGZvciB0aGUgYWRkcmVzc2VlKHMpLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVj aXBpZW50LCB5b3UgYXJlIGhlcmVieSBub3RpZmllZCB0aGF0IGFueSB1c2UsIGZvcndhcmRpbmcs IGRpc3NlbWluYXRpb24sIG9yIHJlcHJvZHVjdGlvbiBvZiB0aGlzIG1lc3NhZ2UgaXMgc3RyaWN0 bHkgcHJvaGliaXRlZCBhbmQgbWF5IGJlIHVubGF3ZnVsLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50 ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2UgY29udGFjdCB0aGUgc2VuZGVyIGJ5IHJldHVybiBlLW1h aWwgYW5kIGRlc3Ryb3kgYWxsIGNvcGllcyBvZiB0aGUgb3JpZ2luYWwgbWVzc2FnZS4NCg0K --_000_031DD135F9160444ABBE3B0C36CED61836D7A1E1AMSPRD9003MB066_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7 fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJcGFub3NlLTE6MiAxMSA2IDQg MyA1IDQgNCAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5N c29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4w MDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFu Iiwic2VyaWYiO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9y aXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZp c2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5 Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnByZQ0KCXtt c28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVk IENoYXIiOw0KCW1hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6 ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpwLk1zb0FjZXRhdGUsIGxp Lk1zb0FjZXRhdGUsIGRpdi5Nc29BY2V0YXRlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglt c28tc3R5bGUtbGluazoiQmFsbG9vbiBUZXh0IENoYXIiOw0KCW1hcmdpbjowaW47DQoJbWFyZ2lu LWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZTo4LjBwdDsNCglmb250LWZhbWlseToiVGFob21h Iiwic2Fucy1zZXJpZiI7fQ0KcC5Nc29MaXN0UGFyYWdyYXBoLCBsaS5Nc29MaXN0UGFyYWdyYXBo LCBkaXYuTXNvTGlzdFBhcmFncmFwaA0KCXttc28tc3R5bGUtcHJpb3JpdHk6MzQ7DQoJbWFyZ2lu LXRvcDowaW47DQoJbWFyZ2luLXJpZ2h0OjBpbjsNCgltYXJnaW4tYm90dG9tOjBpbjsNCgltYXJn aW4tbGVmdDouNWluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0 Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0Kc3Bhbi5IVE1MUHJl Zm9ybWF0dGVkQ2hhcg0KCXttc28tc3R5bGUtbmFtZToiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7 DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJIVE1MIFByZWZvcm1h dHRlZCI7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpzcGFuLkJhbGxvb25UZXh0Q2hh cg0KCXttc28tc3R5bGUtbmFtZToiQmFsbG9vbiBUZXh0IENoYXIiOw0KCW1zby1zdHlsZS1wcmlv cml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiQmFsbG9vbiBUZXh0IjsNCglmb250LWZhbWlseToi VGFob21hIiwic2Fucy1zZXJpZiI7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjENCgl7bXNvLXN0eWxlLXR5 cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCgljb2xv cjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTIyDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFs Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJY29sb3I6IzFGNDk3RDt9 DQpzcGFuLkVtYWlsU3R5bGUyMw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBseTsNCglm b250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1z b0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEw LjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2lu OjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3Jk U2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBl ZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0t LT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4N CjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1s PjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZs aW5rPSJwdXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5IaSBBa2Jh ciw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2Nv bG9yOiMxRjQ5N0QiPmFwb2xvZ2llcyBmb3IgbXkgbGF0ZSBpbnB1dCEgT24gdGhlIG5ldyB0ZXh0 LCB0d28gcG9pbnRzIChzZWUgYmVsb3cpIG1heSBuZWVkIHNvbWUgZnVydGhlciBkaXNjdXNzaW9u LiBIZXJlIHdlIGRldmlhdGUgZnJvbSB0aGUgc3Bpcml0IG9mIGNvcmUtY29hcC0xOCwgd2hpY2gN CiBtYXkgbmVlZCB0byBiZSBwb2ludGVkIG91dCBpbiB0aGUgdGV4dCBleHBsaWNpdGx5LCBpZiB0 aGUgZGV2aWF0aW9uIGlzIGNvbnNpZGVyZWQgYWNjZXB0YWJsZS48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjEuIFVuc2Vj dXJlZCByZXNwb25zZXM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+4oCcVGhlIHVuaWNh c3QgcmVzcG9uc2VzIHRvIGEgRFRMUy1iYXNlZCBtdWx0aWNhc3QgbWVzc2FnZSBtYXkgb3B0aW9u YWxseSBiZSBzZWN1cmXigJ08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+LSZndDsgQ29t cGFyZSB0byBzZWN0aW9uIDkuMS4yIG9mIGNvcmUtY29hcDo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 IzFGNDk3RCI+4oCcVGhpcyBtZWFucyB0aGUgcmVzcG9uc2UgdG8gYSBEVExTIHNlY3VyZWQgcmVx dWVzdCBNVVNUIGFsd2F5cyBiZSBEVExTPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZu YnNwOyZuYnNwOyBzZWN1cmVkIHVzaW5nIHRoZSBzYW1lIHNlY3VyaXR5IHNlc3Npb24gYW5kIGVw b2NoLiZuYnNwOyBBbnkgYXR0ZW1wdCB0bzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4m bmJzcDsmbmJzcDsgc3VwcGx5IGEgTm9TZWMgcmVzcG9uc2UgdG8gYSBEVExTIHJlcXVlc3Qgc2lt cGx5IGRvZXMgbm90IG1hdGNoIHRoZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJz cDsmbmJzcDsgcmVxdWVzdCBhbmQgKHVubGVzcyBpdCBkb2VzIG1hdGNoIGFuIHVucmVsYXRlZCBO b1NlYyByZXF1ZXN0KTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsg dGhlcmVmb3JlIE1VU1QgYmUgcmVqZWN0ZWQu4oCcPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5 N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5JdCBzZWVtcyB1bnNlY3Vy ZWQgcmVzcG9uc2VzIGFyZSBub3QgcG9zc2libGUgd2l0aG91dCBhbHRlcmluZyB0aGUgQ29BUCBy ZXF1ZXN0L3Jlc3BvbnNlIG1hdGNoaW5nIHJ1bGVzLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0 OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Mi4gV2hvIGluaXRpYXRl cyB0aGUgaGFuZHNoYWtlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPuKAnEVpdGhlciB0 aGUgbXVsdGljYXN0IG1lc3NhZ2Ugc2VuZGVyIG9yIGxpc3RlbmVyIG1heSBpbml0aWF0ZSB0aGU8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7IHVuaWNhc3QgRFRMUyBo YW5kc2hha2UuIOKAnDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4tJmd0OyBDb21wYXJl IHRvIHNlY3Rpb24gOS4xLjEgb2YgY29yZS1jb2FwOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0 OTdEIj7igJxUaGUgZW5kcG9pbnQgYWN0aW5nIGFzIHRoZSBDb0FQIGNsaWVudCBzaG91bGQgYWxz byBhY3QgYXMgdGhlIERUTFM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5i c3A7IGNsaWVudC4mbmJzcDsgSXQgc2hvdWxkIGluaXRpYXRlIGEgc2Vzc2lvbiB0byB0aGUgc2Vy dmVyIG9uIHRoZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsgYXBw cm9wcmlhdGUgcG9ydC7igJ08bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPmJlc3QgcmVnYXJkcyw8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6IzFGNDk3RCI+RXNrbzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkZyb206 PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+IGR0bHMtaW90IFttYWlsdG86 ZHRscy1pb3QtYm91bmNlc0BpZXRmLm9yZ10NCjxiPk9uIEJlaGFsZiBPZiA8L2I+UmFobWFuLCBB a2Jhcjxicj4NCjxiPlNlbnQ6PC9iPiBGcmlkYXksIE1heSAwOSwgMjAxNCAyMTo0MDxicj4NCjxi PlRvOjwvYj4gTWFyY28gVGlsb2NhPGJyPg0KPGI+Q2M6PC9iPiBLdW1hciwgU2FuZGVlcDsgZHRs cy1pb3RAaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtEdGxzLWlvdF0gVW5pY2Fz dCByZXNwb25zZXMgaW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNTxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5IaSBNYXJjbyw8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5XZSBoYXZlIHVwZGF0ZWQgdGhlIGRyYWZ0IHRv IGNhcHR1cmUgeW91ciByZW1haW5pbmcgY29tbWVudHMgYmVsb3cuJm5ic3A7IFBsZWFzZSByZXZp ZXcgYW5kIHRlbGwgdXMgaWYgeW91IGhhdmUgYW55IG90aGVyIGNvbW1lbnRzLjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxhIGhyZWY9Imh0dHA6Ly90b29s cy5pZXRmLm9yZy9odG1sL2RyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDcjc2Vj dGlvbi00LjUiPmh0dHA6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWtlb2gtZGljZS1tdWx0 aWNhc3Qtc2VjdXJpdHktMDcjc2VjdGlvbi00LjU8L2E+DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij40LjUuJm5i c3A7IFVuaWNhc3QgUmVzcG9uc2VzIHRvIE11bHRpY2FzdCBNZXNzYWdlczxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7 IEluIENvQVAsIHJlc3BvbnNlcyB0byBtdWx0aWNhc3QgbWVzc2FnZXMgYXJlIGFsd2F5cyBzZW50 IGJhY2sgYXM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyI+Jm5ic3A7Jm5ic3A7IHVuaWNhc3QuJm5ic3A7IFRoYXQgaXMsIHRoZSBncm91cCBtZW1i ZXJzIHRoYXQgcmVjZWl2ZSBhIG11bHRpY2FzdCBtZXNzYWdlPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBtYXkgaW5kaXZp ZHVhbGx5IGRlY2lkZSB0byBzZW5kIChvciBzdXBwcmVzcykgYSB1bmljYXN0IHJlc3BvbnNlIGFz PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZu YnNwOyZuYnNwOyBkZXNjcmliZWQgaW4gU2VjdGlvbiAyLjUgb2YgW0ktRC5pZXRmLWNvcmUtZ3Jv dXBjb21tXS4mbmJzcDsgVGhlIHVuaWNhc3Q8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IHJlc3BvbnNlcyB0byBhIERUTFMt YmFzZWQgbXVsdGljYXN0IG1lc3NhZ2UgbWF5IG9wdGlvbmFsbHkgYmUgc2VjdXJlLjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJz cDsgU3BlY2lmaWNhbGx5LCB0aGUgdW5pY2FzdCByZXNwb25zZSBtYXkgYmUgc2VudCBiYWNrIGFz IGEgdW5pY2FzdCBEVExTPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmll ciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBhcyBkZXNjcmliZWQgaW4gU2VjdGlvbiA5LjEgb2Yg W0ktRC5pZXRmLWNvcmUtY29hcF0uJm5ic3A7IFRoaXMgcmVxdWlyZXM8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IHRoYXQg YSB1bmljYXN0IERUTFMgaGFuZHNoYWtlIHdhcyBwcmV2aW91c2x5IGluaXRpYXRlZCBiZXR3ZWVu IHRoZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7 Ij4mbmJzcDsmbmJzcDsgbXVsdGljYXN0IG1lc3NhZ2Ugc2VuZGVyIGFuZCBsaXN0ZW5lci48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZu YnNwOyZuYnNwOyBFaXRoZXIgdGhlIG11bHRpY2FzdCBtZXNzYWdlIHNlbmRlciBvciBsaXN0ZW5l ciBtYXkgaW5pdGlhdGUgdGhlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyB1bmljYXN0IERUTFMgaGFuZHNoYWtlLiZuYnNw OyBJZiB0aGUgRFRMUyBoYW5kc2hha2Ugd2FzIGluaXRpYXRlZCBieSB0aGU8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IG11 bHRpY2FzdCBtZXNzYWdlIHNlbmRlciwgaXQgcmVxdWlyZXMgdGhhdCB0aGUgc2VuZGVyIGJlIGF3 YXJlIG9mIHRoZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgbWVtYmVyc2hpcCBvZiB0aGUgbXVsdGljYXN0IGdyb3VwLiZu YnNwOyBUaGlzIGNhbiBiZSBhY2NvbXBsaXNoZWQsIGZvcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgZXhhbXBsZSwgYXMg ZGVzY3JpYmVkIGluIFNlY3Rpb24gMi42IG9mIFtJLUQuaWV0Zi1jb3JlLWNvYXBdLiZuYnNwOyBJ ZiB0aGU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+Jm5ic3A7Jm5ic3A7IGxpc3RlbmVyIGluaXRpYXRlZCB0aGUgRFRMUyBoYW5kc2hha2UsIGl0 IG1heSBoYXZlIGRvbmUgc28sIGZvcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgZXhhbXBsZSwgYWZ0ZXIgcmVjZWl2aW5n IGEgbXVsdGljYXN0IG1lc3NhZ2UgZm9yIHRoZSBmaXJzdCB0aW1lLjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IElu IHRoZSBleHRyZW1lIHNjZW5hcmlvLCBhIG11bHRpY2FzdCBzZW5kZXIgbWF5IGF0dGVtcHQgdG8g aW5pdGlhdGU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyI+Jm5ic3A7Jm5ic3A7IHRoZSB1bmljYXN0IERUTFMgaGFuZHNoYWtlIHdpdGggYWxsLCBv ciBhIHN1YnNldCBvZiwga25vd24gbGlzdGVuZXJzPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBqdXN0IGFmdGVyIGl0IHNl bmRzIG91dCB0aGUgRFRMUy1iYXNlZCBtdWx0aWNhc3QgbWVzc2FnZS4mbmJzcDsgVGhpcyBtYXk8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5i c3A7Jm5ic3A7IHJlc3VsdCBpbiB0aGUgbXVsdGljYXN0IHNlbmRlciBoYXZpbmcgdG8gcHJvY2Vz cyB1bmljYXN0IERUTFM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IGhhbmRzaGFrZSBtZXNzYWdlcyBmcm9tIG11bHRpcGxl IG11bHRpY2FzdCBsaXN0ZW5lcnMgaW4gYSBzaG9ydDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgcGVyaW9kLjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7 Jm5ic3A7IE5vdGU6IFRoZXJlIGlzIGFuIG9idmlvdXMgdGltaW5nIGFuZCBwcm9jZXNzaW5nIGxv YWQgaXNzdWUgZm9yIHRoZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgbXVsdGljYXN0IHNlbmRlciBpbiB0aGUgc2NlbmFy aW8gd2hlcmUgaXQgYXR0ZW1wdHMgdG8gaW5pdGlhdGUgdGhlPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyB1bmljYXN0IERU TFMgaGFuZHNoYWtlcyB3aXRoIGFsbC9zb21lIG9mIGl0cyBrbm93biBsaXN0ZW5lcnMganVzdDxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJz cDsmbmJzcDsgYWZ0ZXIgaXQgc2VuZHMgb3V0IHRoZSBEVExTLWJhc2VkIG11bHRpY2FzdCBtZXNz YWdlLiZuYnNwOyBJbiB0aGlzIGNhc2UsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyB0aGUgcHJvY2Vzc2luZyBsb2FkIGlu IHRoZSBtdWx0aWNhc3Qgc2VuZGVyIChpLmUuIHVuaWNhc3QgRFRMUzxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgY2xpZW50 KSBpcyByZWR1Y2VkIHNvbWV3aGF0IGJ5IHRoZSBmYWN0IHRoYXQgQ29BUCByZXF1aXJlcyBhIGJh Y2stb2ZmPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPiZuYnNwOyZuYnNwOyBhbmQgcmFuZG9taXphdGlvbiBvZiB0aGUgdW5pY2FzdCByZXNwb25z ZSBieSB0aGUgTGVpc3VyZSB0aW1lcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgbWVjaGFuaXNtIGFzIGRlc2NyaWJlZCBp biBTZWN0aW9uIDguMiBvZiBbSS1ELmlldGYtY29yZS1jb2FwXS48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+QmVzdCBSZWdhcmRzLDxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkFrYmFyPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1 QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1Rh aG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDsiPiBkdGxzLWlvdCBbPGEgaHJlZj0ibWFpbHRvOmR0bHMtaW90 LWJvdW5jZXNAaWV0Zi5vcmciPm1haWx0bzpkdGxzLWlvdC1ib3VuY2VzQGlldGYub3JnPC9hPl0N CjxiPk9uIEJlaGFsZiBPZiA8L2I+UmFobWFuLCBBa2Jhcjxicj4NCjxiPlNlbnQ6PC9iPiBUdWVz ZGF5LCBNYXkgMDYsIDIwMTQgNDo0NCBQTTxicj4NCjxiPlRvOjwvYj4gTWFyY28gVGlsb2NhPGJy Pg0KPGI+Q2M6PC9iPiBLdW1hciwgU2FuZGVlcDsgPGEgaHJlZj0ibWFpbHRvOmR0bHMtaW90QGll dGYub3JnIj5kdGxzLWlvdEBpZXRmLm9yZzwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtE dGxzLWlvdF0gVW5pY2FzdCByZXNwb25zZXMgaW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1z ZWN1cml0eS0wNTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5IaSBNYXJjbyw8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMx RjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5UaGFua3MgZm9yIHJl dmlld2luZyB0aGUgdXBkYXRlZCBkcmFmdC4mbmJzcDsgQWxzbyBoZXJlIGlzIG15IGZlZWRiYWNr IHRvIHlvdXIgdHdvIG5ldyBxdWVzdGlvbnM6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0Qi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jmd0OzEpIEluIG9yZGVyIHRv IHBlcmZvcm0gYSBEVExTIGhhbmRzaGFrZSBiZWZvcmUvYWZ0ZXIgc2VuZGluZyBhIG11bHRpY2Fz dCBtZXNzYWdlLCBhIHNlbmRlcjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Jmd0OyBub2RlIHNob3VsZCBiZSBhd2FyZSBvZiB0aGUgZ3JvdXAgbWVtYmVyc2hpcCwgZXNwZWNp YWxseSB3aGF0IGFyZSB0aGUgbGlzdGVuZXIgbm9kZXMgY3VycmVudGx5PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mZ3Q7IHByZXNlbnQgaW4gdGhlIGdyb3VwLiBPZiBjb3Vy c2UsIHN1Y2ggYSBncm91cCBtZW1iZXJzaGlwIG1heSBjaGFuZ2Ugb3ZlciB0aW1lLCB1cG9uIG5l dyBub2Rlczxicj4NCiZndDtqb2luaW5nIHRoZSBncm91cC4gSG93ZXZlciwgU2VjdGlvbiAzLjEg aW4gdGhlIGRyYWZ0IHN0YXRlcyB0aGF0ICZxdW90O0FueSBkZXZpY2UgY2FuIGluIHByaW5jaXBs ZSBkZWNpZGU8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZndDt0byBsaXN0 ZW4gdG8gYW55IElQdjYgbXVsdGljYXN0IGFkZHJlc3MuIFRoaXMgYWxzbyBtZWFucyBhcHBsaWNh dGlvbnMgb24gdGhlIG90aGVyIGRldmljZXMgZG8gbm90PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj4mZ3Q7a25vdywgb3IgZG8gbm90IGdldCBub3RpZmllZCwgd2hlbiBuZXcg bGlzdGVuZXJzIGpvaW4gdGhlIG5ldHdvcmsuJnF1b3Q7LiBDb3VsZG4ndCB0aGlzIGJlIGEgcHJv YmxlbTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jmd0O2ZvciB0aGUgc3Vn Z2VzdGVkIGFwcHJvYWNoPzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+WWVzLCBpbiBwcmluY2lwbGUsIGFueSBkZXZpY2Ug Y2FuIGRlY2lkZSB0byBsaXN0ZW4gZm9yIGFueSBJUHY2IG11bHRpY2FzdCBhZGRyZXNzLiZuYnNw OyBCdXQgaW4gcHJhY3RpY2Ugb2YgY291cnNlIHRoZXJlIGFyZSBJUHY2IG11bHRpY2FzdCByZWxh dGVkIHByb3RvY29scyBmb3INCiByb3V0aW5nL2pvaW5pbmcgdGhhdCBkaWN0YXRlIHdobyBjYW4g PHU+c3VjY2Vzc2Z1bGx5PC91PiBsaXN0ZW4gZm9yIGFuZCByZWNlaXZlIGFuIElQdjYgbXVsdGlj YXN0IHBhY2tldC4mbmJzcDsgRm9yIGV4YW1wbGUsIHVubGVzcyBhIGRldmljZSB1c2VzIGEgcHJv dG9jb2wgbGlrZSBNTEQgdG8gZXhwbGljaXRseSBqb2luIGEgbXVsdGljYXN0IGdyb3VwLCB0aGUg bmV0d29yayB3aWxsIG5ldmVyIHJvdXRlIHRoZSBtdWx0aWNhc3QgcGFja2V0cyBvZiBpbnRlcmVz dA0KIHRvIHRoZSBzdWItbmV0d29yayBvZiB0aGUgZGV2aWNlLiZuYnNwOyBUaGlzIGlzIGFsbCBl eHBsYWluZWQgYXQgYSBoaWdoIGxldmVsIGluIHRoZSBJLkQuZ3JvdXBjb21tIHJlZmVyZW5jZSAo PGEgaHJlZj0iaHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jb3JlLWdyb3Vw Y29tbS0xOCNzZWN0aW9uLTIuMSI+aHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0 Zi1jb3JlLWdyb3VwY29tbS0xOCNzZWN0aW9uLTIuMTwvYT4gKQ0KIC48bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPlRoZSBv dGhlciBwYXJ0IG9mIHlvdXIgcXVlc3Rpb24gcmVmZXJzIHRvIGhvdyBkb2VzIHRoZSBzZW5kZXIg bm9kZSBrbm93IHdobyBpcyBwYXJ0IG9mIHRoZSBncm91cC4mbmJzcDsgWW91IGFyZSBjb3JyZWN0 IHRoYXQgaXQgaXMgdmVyeSBkaWZmaWN1bHQgdG8ga25vdyBwcmVjaXNlbHkNCiB0aGUgbWVtYmVy c2hpcCBvZiBhIGdyb3VwLiZuYnNwOyBUaGF0IGlzIHdoeSB3ZSBoYWQgdGhlIHN1YnRsZSByZWZl cmVuY2UgdG8g4oCca25vd24gbGlzdGVuZXJz4oCdLiZuYnNwOyBIb3cgeW91IGFjdHVhbGx5IGtu b3cgdGhlIG1lbWJlcnNoaXAgZGVwZW5kcyBvbiB0aGUgbWl4IG9mIHByb3RvY29scyB1c2VkIChh bmQgaXMgaW4gZmFjdCBpdCBpcyBub3QgYWx3YXlzIHBvc3NpYmxlIHRvIGtub3cgYWxsIHRoZSBt ZW1iZXJzIGFjY3VyYXRlbHkpLiZuYnNwOyBCdXQgZm9yIENvQVANCiBncm91cCBtZW1iZXIgZGlz Y292ZXJ5LCB0aGVyZSBpcyAmbmJzcDthZ2FpbiBndWlkYW5jZSBnaXZlbiBpbiB0aGUgSS5ELmdy b3VwY29tbSByZWZlcmVuY2UgKHNwZWNpZmljYWxseSBpbg0KPGEgaHJlZj0iaHR0cDovL3Rvb2xz LmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jb3JlLWdyb3VwY29tbS0xOCNzZWN0aW9uLTIuNiI+ aHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jb3JlLWdyb3VwY29tbS0xOCNz ZWN0aW9uLTIuNjwvYT4gKS4mbmJzcDsgV2UgY2FuIG1ha2UgdGhpcyBwb2ludCBhIGJpdCBtb3Jl IGV4cGxpY2l0IGluIHRoZSBuZXh0IHVwZGF0ZSBvZiBvdXIgSS1ELjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jmd0OzIpIEFuIGFsdGVybmF0 aXZlIGFwcHJvYWNoIHRvIHRoZSBvbmUgc3VnZ2VzdGVkIGluIFNlY3Rpb24gNC41IG1heSBjb25z aXN0IGluIGEgbGlzdGVuZXIgbm9kZSBlc3RhYmxpc2hpbmc8bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPiZndDsgYSB1bmljYXN0IERUTFMgc2Vzc2lvbiAoaS5lLiBzdGFydGlu ZyBhIERUTFMgaGFuZHNoYWtlKSB3aXRoIHRoZSBzZW5kZXIgbm9kZSwgdXBvbiByZWNlaXZpbmcg YSBtdWx0aWNhc3Q8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZndDsgbWVz c2FnZSBmb3IgdGhlIGZpcnN0IHRpbWUuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPlllcywgZ29vZCBwb2ludCEmbmJzcDsgV2UgY2Fu IGFkZCB0aGlzIHRvIHRoZSBJLUQgaW4gb3VyIG5leHQgdXBkYXRlLg0KPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+QmVzdCBSZWdhcmRzLDxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkFrYmFyPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsi PkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+IE1hcmNvIFRpbG9j YSBbPGEgaHJlZj0ibWFpbHRvOm1hcmNvQHNpY3Muc2UiPm1haWx0bzptYXJjb0BzaWNzLnNlPC9h Pl0NCjxicj4NCjxiPlNlbnQ6PC9iPiBUdWVzZGF5LCBNYXkgMDYsIDIwMTQgMTI6MzIgUE08YnI+ DQo8Yj5Ubzo8L2I+IFJhaG1hbiwgQWtiYXI8YnI+DQo8Yj5DYzo8L2I+IEt1bWFyLCBTYW5kZWVw OyA8YSBocmVmPSJtYWlsdG86ZHRscy1pb3RAaWV0Zi5vcmciPmR0bHMtaW90QGlldGYub3JnPC9h Pjxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW0R0bHMtaW90XSBVbmljYXN0IHJlc3BvbnNlcyBp biBkcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA1PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+SGVsbG8gQWtiYXIsPG86cD48L286cD48L3A+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFua3MgZm9yIGhhdmluZyBjb25zaWRlcmVkIG15IHF1 ZXN0aW9uLiBUaGUgbmV3IFNlY3Rpb24gNC41IGxvb2tzIGZpbmUgdG8gbWUuIEFsc28sIEkgaGF2 ZSB0aGUgdHdvIGZvbGxvd2luZyBjb21tZW50cy48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+MSkgSW4gb3JkZXIgdG8gcGVyZm9ybSBhIERUTFMg aGFuZHNoYWtlIGJlZm9yZS9hZnRlciBzZW5kaW5nIGEgbXVsdGljYXN0IG1lc3NhZ2UsIGEgc2Vu ZGVyIG5vZGUgc2hvdWxkIGJlIGF3YXJlIG9mIHRoZSBncm91cCBtZW1iZXJzaGlwLCBlc3BlY2lh bGx5IHdoYXQgYXJlIHRoZSBsaXN0ZW5lciBub2RlcyBjdXJyZW50bHkgcHJlc2VudCBpbiB0aGUg Z3JvdXAuIE9mIGNvdXJzZSwgc3VjaCBhIGdyb3VwIG1lbWJlcnNoaXANCiBtYXkgY2hhbmdlIG92 ZXIgdGltZSwgdXBvbiBuZXcgbm9kZXMgam9pbmluZyB0aGUgZ3JvdXAuIEhvd2V2ZXIsIFNlY3Rp b24gMy4xIGluIHRoZSBkcmFmdCBzdGF0ZXMgdGhhdCAmcXVvdDtBbnkgZGV2aWNlIGNhbiBpbiBw cmluY2lwbGUgZGVjaWRlIHRvIGxpc3RlbiB0byBhbnkgSVB2NiBtdWx0aWNhc3QgYWRkcmVzcy4g VGhpcyBhbHNvIG1lYW5zIGFwcGxpY2F0aW9ucyBvbiB0aGUgb3RoZXIgZGV2aWNlcyBkbyBub3Qg a25vdywgb3IgZG8gbm90IGdldA0KIG5vdGlmaWVkLCB3aGVuIG5ldyBsaXN0ZW5lcnMgam9pbiB0 aGUgbmV0d29yay4mcXVvdDsuIENvdWxkbid0IHRoaXMgYmUgYSBwcm9ibGVtIGZvciB0aGUgc3Vn Z2VzdGVkIGFwcHJvYWNoPzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj4yKSBBbiBhbHRlcm5hdGl2ZSBhcHByb2FjaCB0byB0aGUgb25lIHN1Z2dl c3RlZCBpbiBTZWN0aW9uIDQuNSBtYXkgY29uc2lzdCBpbiBhIGxpc3RlbmVyIG5vZGUgZXN0YWJs aXNoaW5nIGEgdW5pY2FzdCBEVExTIHNlc3Npb24gKGkuZS4gc3RhcnRpbmcgYSBEVExTIGhhbmRz aGFrZSkgd2l0aCB0aGUgc2VuZGVyIG5vZGUsIHVwb24gcmVjZWl2aW5nIGEgbXVsdGljYXN0IG1l c3NhZ2UgZm9yIHRoZSBmaXJzdCB0aW1lLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CZXN0IHJlZ2FyZHMsPG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5NYXJjbzxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWJvdHRvbToxMi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPk9uIDUgTWF5IDIwMTQgMjM6NDUsIFJhaG1hbiwgQWtiYXIgJmx0OzxhIGhy ZWY9Im1haWx0bzpBa2Jhci5SYWhtYW5AaW50ZXJkaWdpdGFsLmNvbSIgdGFyZ2V0PSJfYmxhbmsi PkFrYmFyLlJhaG1hbkBpbnRlcmRpZ2l0YWwuY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48 L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkhpIE1hcmNvLDwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2Nv bG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNw Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPlRoZSBhdXRob3JzIGhhdmUgbWFkZSBhbiB1cGRhdGUgdG8gdGhlIGRy YWZ0IHRvIGFkZHJlc3MgZnVsbHkgeW91ciBnb29kIHF1ZXN0aW9uIHJlZ2FyZGluZyBob3cgdG8N CiBoYW5kbGUgdGhlIHVuaWNhc3QgcmVzcG9uc2VzIHRvIHRoZSBtdWx0aWNhc3QgcmVzcG9uc2Uu Jm5ic3A7IFNwZWNpZmljYWxseSwgcGxlYXNlIHJldmlldyB0aGUgbmV3IHNlY3Rpb24gNC41IGFu ZCB0ZWxsIHVzIGlmIHlvdSBoYXZlIGFueSBtb3JlIHF1ZXN0aW9uczo8L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48YSBocmVmPSJodHRwOi8vdG9v bHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA2I3Nl Y3Rpb24tNC41IiB0YXJnZXQ9Il9ibGFuayI+aHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJh ZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNiNzZWN0aW9uLTQuNTwvYT48L3NwYW4+ PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij40LjUuJm5ic3A7IFVuaWNhc3QgUmVzcG9u c2VzIHRvIE11bHRpY2FzdCBNZXNzYWdlczwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBJbiBDb0FQLCByZXNw b25zZXMgdG8gbXVsdGljYXN0IG1lc3NhZ2VzIGFyZSBhbHdheXMgc2VudCBiYWNrIGFzPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7 Jm5ic3A7IHVuaWNhc3QuJm5ic3A7IFRoYXQgaXMsIHRoZSBncm91cCBtZW1iZXJzIHRoYXQgcmVj ZWl2ZSBhIG11bHRpY2FzdCBtZXNzYWdlPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IG1heSBpbmRpdmlkdWFsbHkgZGVj aWRlIHRvIHNlbmQgKG9yIHN1cHByZXNzKSBhIHVuaWNhc3QgcmVzcG9uc2UgYXM8L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJz cDsgZGVzY3JpYmVkIGluIFNlY3Rpb24gMi41IG9mIFtJLUQuaWV0Zi1jb3JlLWdyb3VwY29tbV0u Jm5ic3A7IFRoZSB1bmljYXN0PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IHJlc3BvbnNlcyB0byBhIERUTFMtYmFzZWQg bXVsdGljYXN0IG1lc3NhZ2UgbWF5IG9wdGlvbmFsbHkgYmUgc2VjdXJlLjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBT cGVjaWZpY2FsbHksIHRoZSB1bmljYXN0IHJlc3BvbnNlIG1heSBiZSBzZW50IGJhY2sgYXMgYSB1 bmljYXN0IERUTFM8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gOS4xIG9mIFtJ LUQuaWV0Zi1jb3JlLWNvYXBdLiZuYnNwOyBUaGlzIHJlcXVpcmVzPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IHRoYXQg YSB1bmljYXN0IERUTFMgaGFuZHNoYWtlIHdhcyBwcmV2aW91c2x5IGluaXRpYXRlZCBiZXR3ZWVu IHRoZTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPiZuYnNwOyZuYnNwOyBtdWx0aWNhc3QgbWVzc2FnZSBzZW5kZXIgYW5kIGxpc3RlbmVyLiZu YnNwOyBJbiB0aGUgZXh0cmVtZSBzY2VuYXJpbywgYTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBtdWx0aWNhc3Qgc2Vu ZGVyIG1heSBhdHRlbXB0IHRvIGluaXRpYXRlIHRoZSB1bmljYXN0IERUTFMgaGFuZHNoYWtlPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5i c3A7Jm5ic3A7IHdpdGggYWxsIG9yIGEgc3Vic2V0IG9mIGtub3duIGxpc3RlbmVycyBqdXN0IGJl Zm9yZSBvciBqdXN0IGFmdGVyIGl0PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IHNlbmRzIG91dCB0aGUgRFRMUy1iYXNl ZCBtdWx0aWNhc3QgbWVzc2FnZS4mbmJzcDsgVGhpcyBtYXkgcmVzdWx0IGluIHRoZTwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZu YnNwOyBtdWx0aWNhc3Qgc2VuZGVyIChpLmUuIHVuaWNhc3QgRFRMUyBjbGllbnQpIGhhdmluZyB0 byBwcm9jZXNzIHVuaWNhc3Q8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgRFRMUyBoYW5kc2hha2UgbWVzc2FnZXMgZnJv bSBtdWx0aXBsZSBtdWx0aWNhc3QgbGlzdGVuZXJzIChpLmUuPC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IHVuaWNhc3Qg RFRMUyBzZXJ2ZXJzKSBpbiBhIHNob3J0IHBlcmlvZC48L3NwYW4+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgTm90ZTog VGhlcmUgaXMgYW4gb2J2aW91cyB0aW1pbmcgYW5kIHByb2Nlc3NpbmcgbG9hZCBpc3N1ZSBmb3Ig dGhlPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+Jm5ic3A7Jm5ic3A7IG11bHRpY2FzdCBzZW5kZXIgaW4gdGhlIHNjZW5hcmlvIHdoZXJlIGl0 IGF0dGVtcHRzIHRvIGluaXRpYXRlIHRoZTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyB1bmljYXN0IERUTFMgaGFuZHNo YWtlcyB3aXRoIGFsbC9zb21lIG9mIGl0cyBrbm93biBsaXN0ZW5lcnMganVzdDwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNw OyBhZnRlciBpdCBzZW5kcyBvdXQgdGhlIERUTFMtYmFzZWQgbXVsdGljYXN0IG1lc3NhZ2UuJm5i c3A7IEluIHRoaXMgY2FzZSw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgdGhlIHByb2Nlc3NpbmcgbG9hZCBpbiB0aGUg bXVsdGljYXN0IHNlbmRlciAoaS5lLiB1bmljYXN0IERUTFM8L3NwYW4+PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgY2xpZW50KSBp cyByZWR1Y2VkIHNvbWV3aGF0IGJ5IHRoZSBmYWN0IHRoYXQgQ29BUCByZXF1aXJlcyBhIGJhY2st b2ZmPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+Jm5ic3A7Jm5ic3A7IGFuZCByYW5kb21pemF0aW9uIG9mIHRoZSB1bmljYXN0IHJlc3BvbnNl IGJ5IHRoZSBMZWlzdXJlIHRpbWVyPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IG1lY2hhbmlzbSBhcyBkZXNjcmliZWQg aW4gU2VjdGlvbiA4LjIgb2YgW0ktRC5pZXRmLWNvcmUtY29hcF0uPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3 RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+QmVzdCBSZWdhcmRzLDwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2Nv bG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNw Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkFrYmFyPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9v OnA+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQg I0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPkZyb206PC9zcGFuPjwvYj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+IGR0bHMtaW90IFttYWlsdG86PGEgaHJlZj0ibWFp bHRvOmR0bHMtaW90LWJvdW5jZXNAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5kdGxzLWlvdC1i b3VuY2VzQGlldGYub3JnPC9hPl0NCjxiPk9uIEJlaGFsZiBPZiA8L2I+S3VtYXIsIFNhbmRlZXA8 YnI+DQo8Yj5TZW50OjwvYj4gV2VkbmVzZGF5LCBBcHJpbCAwMiwgMjAxNCAzOjQ3IEFNPGJyPg0K PGI+VG86PC9iPiBNYXJjbyBUaWxvY2E7IDxhIGhyZWY9Im1haWx0bzpkdGxzLWlvdEBpZXRmLm9y ZyIgdGFyZ2V0PSJfYmxhbmsiPmR0bHMtaW90QGlldGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6 PC9iPiBSZTogW0R0bHMtaW90XSBVbmljYXN0IHJlc3BvbnNlcyBpbiBkcmFmdC1rZW9oLWRpY2Ut bXVsdGljYXN0LXNlY3VyaXR5LTA1PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPkhpIE1hcmNvPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+VGhlIGRyYWZ0IG9ubHkgYWRk cmVzc2VzIHRoZSBwcm90ZWN0aW9uIG9mIG11bHRpY2FzdCB0cmFmZmljLiBJZiB1bmljYXN0IHJl c3BvbnNlcyBhcmUgZXhwZWN0ZWQgYW5kDQogaWYgcHJvdGVjdGlvbiBpcyByZXF1aXJlZCBmb3Ig c3VjaCBtZXNzYWdlcywgdGhlbiBleGlzdGluZyB1bmljYXN0IHByb3RlY3Rpb24gbWVjaGFuaXNt cyBiYXNlZCBvbiBEVExTIGFzIHN1Z2dlc3RlZCBpbiBkcmFmdC1pZXRmLWNvcmUtY29hcC0xOCBz aG91bGQgYmUgdXNlZC4gUHJvdGVjdGlvbiBvZiBhbGwgdW5pY2FzdCBtZXNzYWdlcyBzaG91bGQg YmUgdHJlYXRlZCBhcyB3b3VsZCBiZSBkb25lIG5vcm1hbGx5Lg0KPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+SG9w ZSB0aGF0IGFuc3dlcnMgeW91ciBxdWVzdGlvbi48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0 OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5SZWdhcmRzPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+U2FuZGVlcA0KPC9zcGFuPjxvOnA+PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPGRpdiBzdHlsZT0iYm9y ZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBpbiAwaW4gMGlu IDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlk ICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Gcm9tOjwvc3Bhbj48L2I+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiBkdGxzLWlvdCBbPGEgaHJlZj0ibWFpbHRvOmR0 bHMtaW90LWJvdW5jZXNAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5tYWlsdG86ZHRscy1pb3Qt Ym91bmNlc0BpZXRmLm9yZzwvYT5dDQo8Yj5PbiBCZWhhbGYgT2YgPC9iPk1hcmNvIFRpbG9jYTxi cj4NCjxiPlNlbnQ6PC9iPiBUdWVzZGF5LCBBcHJpbCAwMSwgMjAxNCA2OjM1IFBNPGJyPg0KPGI+ VG86PC9iPiA8YSBocmVmPSJtYWlsdG86ZHRscy1pb3RAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5r Ij5kdGxzLWlvdEBpZXRmLm9yZzwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj4gW0R0bHMtaW90XSBV bmljYXN0IHJlc3BvbnNlcyBpbiBkcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA1 PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+RGVhciBhbGwsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj5BcyB0byBwb3NzaWJsZSByZXNwb25zZXMgdG8gbXVsdGljYXN0 IHJlcXVlc3RzLCBTZWN0aW9uIDIuMSBzdGF0ZXMgdGhhdCB0aGV5IGFyZSBzZW50IGJhY2sgaW4g dW5pY2FzdC4gVGhlbiwgbm8gZnVydGhlciBkZXRhaWxzIGFyZSBwcm92aWRlZCBhYm91dCB0aGVp ciBwcm90ZWN0aW9uLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+QXJlIHN1Y2ggcmVzcG9uc2VzIHN1cHBvc2VkIHRvIGJlIHByb3RlY3Rl ZCB0aHJvdWdoIGEgJnF1b3Q7cmVndWxhciZxdW90OyBEVExTIHNlc3Npb24sIHdoaWNoIG11c3Qg YmUgKG9yIGhhcyBwcmV2aW91c2x5IGJlZW4pIGVzdGFibGlzaGVkIGJldHdlZW4gdGhlIHNlbmRl ciBhbmQgbGlzdGVuZXI/PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj5DaGVlcnMsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPk1hcmNvPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8 bzpwPjwvbzpwPjwvcD4NCjxkaXYgY2xhc3M9Ik1zb05vcm1hbCIgYWxpZ249ImNlbnRlciIgc3R5 bGU9InRleHQtYWxpZ246Y2VudGVyIj4NCjxociBzaXplPSIyIiB3aWR0aD0iMTAwJSIgYWxpZ249 ImNlbnRlciI+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZTo3LjVwdDtmb250LWZhbWlseTomcXVvdDtBcmlhbCZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7O2NvbG9yOmdyYXkiPlRoZSBpbmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhpcyBt ZXNzYWdlIG1heSBiZSBjb25maWRlbnRpYWwgYW5kIGxlZ2FsbHkgcHJvdGVjdGVkIHVuZGVyIGFw cGxpY2FibGUgbGF3Lg0KIFRoZSBtZXNzYWdlIGlzIGludGVuZGVkIHNvbGVseSBmb3IgdGhlIGFk ZHJlc3NlZShzKS4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgeW91IGFy ZSBoZXJlYnkgbm90aWZpZWQgdGhhdCBhbnkgdXNlLCBmb3J3YXJkaW5nLCBkaXNzZW1pbmF0aW9u LCBvciByZXByb2R1Y3Rpb24gb2YgdGhpcyBtZXNzYWdlIGlzIHN0cmljdGx5IHByb2hpYml0ZWQg YW5kIG1heSBiZSB1bmxhd2Z1bC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkDQogcmVjaXBp ZW50LCBwbGVhc2UgY29udGFjdCB0aGUgc2VuZGVyIGJ5IHJldHVybiBlLW1haWwgYW5kIGRlc3Ry b3kgYWxsIGNvcGllcyBvZiB0aGUgb3JpZ2luYWwgbWVzc2FnZS48L3NwYW4+PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0K PC9odG1sPg0K --_000_031DD135F9160444ABBE3B0C36CED61836D7A1E1AMSPRD9003MB066_-- From nobody Mon May 19 13:34:15 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3C36A1A0389 for ; Mon, 19 May 2014 13:34:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.55 X-Spam-Level: X-Spam-Status: No, score=-2.55 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.651] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vR9DmX2egH5N for ; Mon, 19 May 2014 13:34:07 -0700 (PDT) Received: from smtp-in1.interdigital.com (smtp-in1.interdigital.com [64.208.228.133]) by ietfa.amsl.com (Postfix) with ESMTP id 0F5271A02C8 for ; Mon, 19 May 2014 13:34:07 -0700 (PDT) X-ASG-Debug-ID: 1400531640-06daaa09ef158ae0001-roOjxa Received: from smtp-out1.interdigital.com (sahara.interdigital.com [10.0.128.27]) by smtp-in1.interdigital.com with ESMTP id hqAcLpwsoK3j6nJ8 for ; Mon, 19 May 2014 16:34:00 -0400 (EDT) X-Barracuda-Envelope-From: Akbar.Rahman@InterDigital.com Received: from SAM.InterDigital.com ([10.30.2.11]) by smtp-out1.interdigital.com with Microsoft SMTPSVC(6.0.3790.4675); Mon, 19 May 2014 16:33:59 -0400 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01CF73A1.A9F11445" Date: Mon, 19 May 2014 16:33:57 -0400 X-ASG-Orig-Subj: RE: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 Message-ID: In-Reply-To: <031DD135F9160444ABBE3B0C36CED61836D7A1E1@AMSPRD9003MB066.MGDPHG.emi.philips.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 Thread-Index: AQHPTke1MAdfpqid3kOruFyexTfVEJsyuiUAgAE6ooCAAEaMgIAEpRcAgA93i1CAAEkTgA== References: <031DD135F9160444ABBE3B0C36CED61836D7A1E1@AMSPRD9003MB066.MGDPHG.emi.philips.com> From: "Rahman, Akbar" To: "Dijk, Esko" X-OriginalArrivalTime: 19 May 2014 20:33:59.0811 (UTC) FILETIME=[AA1ED530:01CF73A1] X-Barracuda-Connect: sahara.interdigital.com[10.0.128.27] X-Barracuda-Start-Time: 1400531640 X-Barracuda-URL: http://10.1.245.3:8000/cgi-mod/mark.cgi X-Virus-Scanned: by bsmtpd at interdigital.com X-Barracuda-BRTS-Status: 1 X-Barracuda-Spam-Score: 0.00 X-Barracuda-Spam-Status: No, SCORE=0.00 using per-user scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=9.0 tests=BSF_SC0_MISMATCH_TO, HTML_MESSAGE X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.5942 Rule breakdown below pts rule name description ---- ---------------------- -------------------------------------------------- 0.00 BSF_SC0_MISMATCH_TO Envelope rcpt doesn't match header 0.00 HTML_MESSAGE BODY: HTML included in message Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/CkbnkP5HK7sqVG2AG65QGIZ3M7s Cc: Marco Tiloca , "Kumar, Sandeep" , dtls-iot@ietf.org Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 May 2014 20:34:13 -0000 This is a multi-part message in MIME format. ------_=_NextPart_001_01CF73A1.A9F11445 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgRXNrbywNCg0KIA0KDQogDQoNClRoYW5rcyBmb3IgdGhlIGZlZWRiYWNrLg0KDQogDQoNCiAN Cg0KPiBJdCBzZWVtcyB1bnNlY3VyZWQgcmVzcG9uc2VzIGFyZSBub3QgcG9zc2libGUgd2l0aG91 dCBhbHRlcmluZyB0aGUgQ29BUCByZXF1ZXN0L3Jlc3BvbnNlIG1hdGNoaW5nIHJ1bGVzLg0KDQog DQoNClllcywgYnV0IGFzIHlvdSBrbm93IHRoZSBjdXJyZW50IGNvcmUtY29hcC0xOCB0ZXh0IGlz IG9idmlvdXNseSB3cml0dGVuIGZvciB1bmljYXN0IERUTFMgcmVxdWVzdCBhbmQgcmVzcG9uc2Uu ICBXZSBhcmUgbm8gbG9uZ2VyIGRlYWxpbmcgd2l0aCB0aGF0IGFzIHdlIGhhdmUgbXVsdGljYXN0 IERUTFMgcmVxdWVzdCwgYW5kIHBvdGVudGlhbGx5IHVuaWNhc3QgRFRMUyByZXNwb25zZS4gIChU aGF0IHdhcyB0aGUgb3JpZ2luYWwgdmFsdWUgaW4gdGhlIHF1ZXN0aW9uIGFza2VkIGJ5IE1hcmNv KS4gIEJ1dCBJIGRvIGFncmVlIHdpdGggeW91ciBwb2ludCB0aGF0IHRoZSBiYXNlIGNvcmUtY29h cC0xOCBvcGVyYXRpb24gd291bGQgYmUgYWZmZWN0ZWQsIGFuZCB0aGEgIHRoaXMgY2hhbmdlIG11 c3QgYmUgY2xlYXJseSBjYXB0dXJlZC4gICBBbmQgSSBndWVzcyBodHRwOi8vdG9vbHMuaWV0Zi5v cmcvaHRtbC9kcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA3I3NlY3Rpb24tNC41 IHdvdWxkIGJlIHRoZSBub3JtYXRpdmUgdXBkYXRlLiAgU28gd2UgaGF2ZSB0byBtYWtlIHRoZSB0 ZXh0IGNsZWFyLiAgRG8geW91IHRoaW5rIHdlIG5lZWQgdG8gZXhwbGFpbiBpdCBiZXR0ZXI/DQoN CiANCg0KIA0KDQotPiBDb21wYXJlIHRvIHNlY3Rpb24gOS4xLjEgb2YgY29yZS1jb2FwOiDigJxU aGUgZW5kcG9pbnQgYWN0aW5nIGFzIHRoZSBDb0FQIGNsaWVudCBzaG91bGQgYWxzbyBhY3QgYXMg dGhlIERUTFMgY2xpZW50LiAgSXQgc2hvdWxkIGluaXRpYXRlIGEgc2Vzc2lvbiB0byB0aGUgc2Vy dmVyIG9uIHRoZSBhcHByb3ByaWF0ZSBwb3J0LuKAnQ0KDQogDQoNCkFnYWluLCBJIHVuZGVyc3Rv b2QgdGhhdCB0aGlzIHdhcyBvcmlnaW5hbGx5IHdyaXR0ZW4gZnJvbSB0aGUgcG9pbnQgb2Ygdmll dyBvZiBhIG5vcm1hbCB1bmljYXN0IENvQVAgcmVxdWVzdC4gIE1lYW5pbmcgdGhhdCBhIENvQVAg Y2xpZW50IHdvdWxkIGhhdmUgaW5pdGlhbGx5IHBlcmZvcm1lZCBhIHJlcXVlc3QgKGUuZy4gR0VU KSBhbmQgdGh1cyBzaG91bGQgYmUgdGhlIG9uZSB0aGF0IGRlY2lkZXMgaWYgdGhlIEdFVCBzaG91 bGQgYmUgc2VjdXJlIG9yIG5vdC4gIEFnYWluIHRoaXMgbG9naWMgZG9lcyBub3QgYXBwbHkgZGly ZWN0bHkgZm9yIHRoZSBtdWx0aWNhc3QgY2FzZSBiZWNhdXNlIHRoZSBpbnRlcmFjdGlvbnMgYXJl IGRpZmZlcmVudC4gIFNvIEkgYWdyZWUgdGhhdCB3ZSBuZWVkIHRvIGV4cGxpY2l0bHkgc3RhdGUg aW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdCB0aGF0IHdlIGFyZSBkZXZpYXRpbmcgZnJvbSB0 aGUgb3JpZ2luYWwgY29yZS1jb2FwLTE4IGFwcHJvYWNoLg0KDQogDQoNCiANCg0KIA0KDQpCZXN0 IFJlZ2FyZHMsDQoNCiANCg0KIA0KDQpBa2Jhcg0KDQogDQoNCkZyb206IERpamssIEVza28gW21h aWx0bzplc2tvLmRpamtAcGhpbGlwcy5jb21dIA0KU2VudDogTW9uZGF5LCBNYXkgMTksIDIwMTQg MTI6MDIgUE0NClRvOiBSYWhtYW4sIEFrYmFyOyBNYXJjbyBUaWxvY2ENCkNjOiBLdW1hciwgU2Fu ZGVlcDsgZHRscy1pb3RAaWV0Zi5vcmcNClN1YmplY3Q6IFJFOiBbRHRscy1pb3RdIFVuaWNhc3Qg cmVzcG9uc2VzIGluIGRyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDUNCg0KIA0K DQpIaSBBa2JhciwNCg0KIA0KDQphcG9sb2dpZXMgZm9yIG15IGxhdGUgaW5wdXQhIE9uIHRoZSBu ZXcgdGV4dCwgdHdvIHBvaW50cyAoc2VlIGJlbG93KSBtYXkgbmVlZCBzb21lIGZ1cnRoZXIgZGlz Y3Vzc2lvbi4gSGVyZSB3ZSBkZXZpYXRlIGZyb20gdGhlIHNwaXJpdCBvZiBjb3JlLWNvYXAtMTgs IHdoaWNoIG1heSBuZWVkIHRvIGJlIHBvaW50ZWQgb3V0IGluIHRoZSB0ZXh0IGV4cGxpY2l0bHks IGlmIHRoZSBkZXZpYXRpb24gaXMgY29uc2lkZXJlZCBhY2NlcHRhYmxlLg0KDQogDQoNCjEuIFVu c2VjdXJlZCByZXNwb25zZXMNCg0K4oCcVGhlIHVuaWNhc3QgcmVzcG9uc2VzIHRvIGEgRFRMUy1i YXNlZCBtdWx0aWNhc3QgbWVzc2FnZSBtYXkgb3B0aW9uYWxseSBiZSBzZWN1cmXigJ0NCg0KLT4g Q29tcGFyZSB0byBzZWN0aW9uIDkuMS4yIG9mIGNvcmUtY29hcDoNCg0K4oCcVGhpcyBtZWFucyB0 aGUgcmVzcG9uc2UgdG8gYSBEVExTIHNlY3VyZWQgcmVxdWVzdCBNVVNUIGFsd2F5cyBiZSBEVExT DQoNCiAgIHNlY3VyZWQgdXNpbmcgdGhlIHNhbWUgc2VjdXJpdHkgc2Vzc2lvbiBhbmQgZXBvY2gu ICBBbnkgYXR0ZW1wdCB0bw0KDQogICBzdXBwbHkgYSBOb1NlYyByZXNwb25zZSB0byBhIERUTFMg cmVxdWVzdCBzaW1wbHkgZG9lcyBub3QgbWF0Y2ggdGhlDQoNCiAgIHJlcXVlc3QgYW5kICh1bmxl c3MgaXQgZG9lcyBtYXRjaCBhbiB1bnJlbGF0ZWQgTm9TZWMgcmVxdWVzdCkNCg0KICAgdGhlcmVm b3JlIE1VU1QgYmUgcmVqZWN0ZWQu4oCcDQoNCiANCg0KSXQgc2VlbXMgdW5zZWN1cmVkIHJlc3Bv bnNlcyBhcmUgbm90IHBvc3NpYmxlIHdpdGhvdXQgYWx0ZXJpbmcgdGhlIENvQVAgcmVxdWVzdC9y ZXNwb25zZSBtYXRjaGluZyBydWxlcy4NCg0KIA0KDQoyLiBXaG8gaW5pdGlhdGVzIHRoZSBoYW5k c2hha2UNCg0K4oCcRWl0aGVyIHRoZSBtdWx0aWNhc3QgbWVzc2FnZSBzZW5kZXIgb3IgbGlzdGVu ZXIgbWF5IGluaXRpYXRlIHRoZQ0KDQogICB1bmljYXN0IERUTFMgaGFuZHNoYWtlLiDigJwNCg0K LT4gQ29tcGFyZSB0byBzZWN0aW9uIDkuMS4xIG9mIGNvcmUtY29hcDoNCg0K4oCcVGhlIGVuZHBv aW50IGFjdGluZyBhcyB0aGUgQ29BUCBjbGllbnQgc2hvdWxkIGFsc28gYWN0IGFzIHRoZSBEVExT DQoNCiAgIGNsaWVudC4gIEl0IHNob3VsZCBpbml0aWF0ZSBhIHNlc3Npb24gdG8gdGhlIHNlcnZl ciBvbiB0aGUNCg0KICAgYXBwcm9wcmlhdGUgcG9ydC7igJ0NCg0KIA0KDQpiZXN0IHJlZ2FyZHMs DQoNCkVza28NCg0KIA0KDQpGcm9tOiBkdGxzLWlvdCBbbWFpbHRvOmR0bHMtaW90LWJvdW5jZXNA aWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBSYWhtYW4sIEFrYmFyDQpTZW50OiBGcmlkYXksIE1heSAw OSwgMjAxNCAyMTo0MA0KVG86IE1hcmNvIFRpbG9jYQ0KQ2M6IEt1bWFyLCBTYW5kZWVwOyBkdGxz LWlvdEBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtEdGxzLWlvdF0gVW5pY2FzdCByZXNwb25zZXMg aW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNQ0KDQogDQoNCkhpIE1hcmNv LA0KDQogDQoNCiANCg0KV2UgaGF2ZSB1cGRhdGVkIHRoZSBkcmFmdCB0byBjYXB0dXJlIHlvdXIg cmVtYWluaW5nIGNvbW1lbnRzIGJlbG93LiAgUGxlYXNlIHJldmlldyBhbmQgdGVsbCB1cyBpZiB5 b3UgaGF2ZSBhbnkgb3RoZXIgY29tbWVudHMuDQoNCiANCg0KIA0KDQpodHRwOi8vdG9vbHMuaWV0 Zi5vcmcvaHRtbC9kcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA3I3NlY3Rpb24t NC41IA0KDQogDQoNCiANCg0KNC41LiAgVW5pY2FzdCBSZXNwb25zZXMgdG8gTXVsdGljYXN0IE1l c3NhZ2VzDQoNCiANCg0KICAgSW4gQ29BUCwgcmVzcG9uc2VzIHRvIG11bHRpY2FzdCBtZXNzYWdl cyBhcmUgYWx3YXlzIHNlbnQgYmFjayBhcw0KDQogICB1bmljYXN0LiAgVGhhdCBpcywgdGhlIGdy b3VwIG1lbWJlcnMgdGhhdCByZWNlaXZlIGEgbXVsdGljYXN0IG1lc3NhZ2UNCg0KICAgbWF5IGlu ZGl2aWR1YWxseSBkZWNpZGUgdG8gc2VuZCAob3Igc3VwcHJlc3MpIGEgdW5pY2FzdCByZXNwb25z ZSBhcw0KDQogICBkZXNjcmliZWQgaW4gU2VjdGlvbiAyLjUgb2YgW0ktRC5pZXRmLWNvcmUtZ3Jv dXBjb21tXS4gIFRoZSB1bmljYXN0DQoNCiAgIHJlc3BvbnNlcyB0byBhIERUTFMtYmFzZWQgbXVs dGljYXN0IG1lc3NhZ2UgbWF5IG9wdGlvbmFsbHkgYmUgc2VjdXJlLg0KDQogICBTcGVjaWZpY2Fs bHksIHRoZSB1bmljYXN0IHJlc3BvbnNlIG1heSBiZSBzZW50IGJhY2sgYXMgYSB1bmljYXN0IERU TFMNCg0KICAgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gOS4xIG9mIFtJLUQuaWV0Zi1jb3JlLWNv YXBdLiAgVGhpcyByZXF1aXJlcw0KDQogICB0aGF0IGEgdW5pY2FzdCBEVExTIGhhbmRzaGFrZSB3 YXMgcHJldmlvdXNseSBpbml0aWF0ZWQgYmV0d2VlbiB0aGUNCg0KICAgbXVsdGljYXN0IG1lc3Nh Z2Ugc2VuZGVyIGFuZCBsaXN0ZW5lci4NCg0KIA0KDQogICBFaXRoZXIgdGhlIG11bHRpY2FzdCBt ZXNzYWdlIHNlbmRlciBvciBsaXN0ZW5lciBtYXkgaW5pdGlhdGUgdGhlDQoNCiAgIHVuaWNhc3Qg RFRMUyBoYW5kc2hha2UuICBJZiB0aGUgRFRMUyBoYW5kc2hha2Ugd2FzIGluaXRpYXRlZCBieSB0 aGUNCg0KICAgbXVsdGljYXN0IG1lc3NhZ2Ugc2VuZGVyLCBpdCByZXF1aXJlcyB0aGF0IHRoZSBz ZW5kZXIgYmUgYXdhcmUgb2YgdGhlDQoNCiAgIG1lbWJlcnNoaXAgb2YgdGhlIG11bHRpY2FzdCBn cm91cC4gIFRoaXMgY2FuIGJlIGFjY29tcGxpc2hlZCwgZm9yDQoNCiAgIGV4YW1wbGUsIGFzIGRl c2NyaWJlZCBpbiBTZWN0aW9uIDIuNiBvZiBbSS1ELmlldGYtY29yZS1jb2FwXS4gIElmIHRoZQ0K DQogICBsaXN0ZW5lciBpbml0aWF0ZWQgdGhlIERUTFMgaGFuZHNoYWtlLCBpdCBtYXkgaGF2ZSBk b25lIHNvLCBmb3INCg0KICAgZXhhbXBsZSwgYWZ0ZXIgcmVjZWl2aW5nIGEgbXVsdGljYXN0IG1l c3NhZ2UgZm9yIHRoZSBmaXJzdCB0aW1lLg0KDQogDQoNCiAgIEluIHRoZSBleHRyZW1lIHNjZW5h cmlvLCBhIG11bHRpY2FzdCBzZW5kZXIgbWF5IGF0dGVtcHQgdG8gaW5pdGlhdGUNCg0KICAgdGhl IHVuaWNhc3QgRFRMUyBoYW5kc2hha2Ugd2l0aCBhbGwsIG9yIGEgc3Vic2V0IG9mLCBrbm93biBs aXN0ZW5lcnMNCg0KICAganVzdCBhZnRlciBpdCBzZW5kcyBvdXQgdGhlIERUTFMtYmFzZWQgbXVs dGljYXN0IG1lc3NhZ2UuICBUaGlzIG1heQ0KDQogICByZXN1bHQgaW4gdGhlIG11bHRpY2FzdCBz ZW5kZXIgaGF2aW5nIHRvIHByb2Nlc3MgdW5pY2FzdCBEVExTDQoNCiAgIGhhbmRzaGFrZSBtZXNz YWdlcyBmcm9tIG11bHRpcGxlIG11bHRpY2FzdCBsaXN0ZW5lcnMgaW4gYSBzaG9ydA0KDQogICBw ZXJpb2QuDQoNCiANCg0KICAgTm90ZTogVGhlcmUgaXMgYW4gb2J2aW91cyB0aW1pbmcgYW5kIHBy b2Nlc3NpbmcgbG9hZCBpc3N1ZSBmb3IgdGhlDQoNCiAgIG11bHRpY2FzdCBzZW5kZXIgaW4gdGhl IHNjZW5hcmlvIHdoZXJlIGl0IGF0dGVtcHRzIHRvIGluaXRpYXRlIHRoZQ0KDQogICB1bmljYXN0 IERUTFMgaGFuZHNoYWtlcyB3aXRoIGFsbC9zb21lIG9mIGl0cyBrbm93biBsaXN0ZW5lcnMganVz dA0KDQogICBhZnRlciBpdCBzZW5kcyBvdXQgdGhlIERUTFMtYmFzZWQgbXVsdGljYXN0IG1lc3Nh Z2UuICBJbiB0aGlzIGNhc2UsDQoNCiAgIHRoZSBwcm9jZXNzaW5nIGxvYWQgaW4gdGhlIG11bHRp Y2FzdCBzZW5kZXIgKGkuZS4gdW5pY2FzdCBEVExTDQoNCiAgIGNsaWVudCkgaXMgcmVkdWNlZCBz b21ld2hhdCBieSB0aGUgZmFjdCB0aGF0IENvQVAgcmVxdWlyZXMgYSBiYWNrLW9mZg0KDQogICBh bmQgcmFuZG9taXphdGlvbiBvZiB0aGUgdW5pY2FzdCByZXNwb25zZSBieSB0aGUgTGVpc3VyZSB0 aW1lcg0KDQogICBtZWNoYW5pc20gYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gOC4yIG9mIFtJLUQu aWV0Zi1jb3JlLWNvYXBdLg0KDQogDQoNCiANCg0KIA0KDQpCZXN0IFJlZ2FyZHMsDQoNCiANCg0K IA0KDQpBa2Jhcg0KDQogDQoNCiANCg0KIA0KDQpGcm9tOiBkdGxzLWlvdCBbbWFpbHRvOmR0bHMt aW90LWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBSYWhtYW4sIEFrYmFyDQpTZW50OiBU dWVzZGF5LCBNYXkgMDYsIDIwMTQgNDo0NCBQTQ0KVG86IE1hcmNvIFRpbG9jYQ0KQ2M6IEt1bWFy LCBTYW5kZWVwOyBkdGxzLWlvdEBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtEdGxzLWlvdF0gVW5p Y2FzdCByZXNwb25zZXMgaW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNQ0K DQogDQoNCkhpIE1hcmNvLA0KDQogDQoNCiANCg0KVGhhbmtzIGZvciByZXZpZXdpbmcgdGhlIHVw ZGF0ZWQgZHJhZnQuICBBbHNvIGhlcmUgaXMgbXkgZmVlZGJhY2sgdG8geW91ciB0d28gbmV3IHF1 ZXN0aW9uczoNCg0KIA0KDQogDQoNCj4xKSBJbiBvcmRlciB0byBwZXJmb3JtIGEgRFRMUyBoYW5k c2hha2UgYmVmb3JlL2FmdGVyIHNlbmRpbmcgYSBtdWx0aWNhc3QgbWVzc2FnZSwgYSBzZW5kZXIN Cg0KPiBub2RlIHNob3VsZCBiZSBhd2FyZSBvZiB0aGUgZ3JvdXAgbWVtYmVyc2hpcCwgZXNwZWNp YWxseSB3aGF0IGFyZSB0aGUgbGlzdGVuZXIgbm9kZXMgY3VycmVudGx5DQoNCj4gcHJlc2VudCBp biB0aGUgZ3JvdXAuIE9mIGNvdXJzZSwgc3VjaCBhIGdyb3VwIG1lbWJlcnNoaXAgbWF5IGNoYW5n ZSBvdmVyIHRpbWUsIHVwb24gbmV3IG5vZGVzDQo+am9pbmluZyB0aGUgZ3JvdXAuIEhvd2V2ZXIs IFNlY3Rpb24gMy4xIGluIHRoZSBkcmFmdCBzdGF0ZXMgdGhhdCAiQW55IGRldmljZSBjYW4gaW4g cHJpbmNpcGxlIGRlY2lkZQ0KDQo+dG8gbGlzdGVuIHRvIGFueSBJUHY2IG11bHRpY2FzdCBhZGRy ZXNzLiBUaGlzIGFsc28gbWVhbnMgYXBwbGljYXRpb25zIG9uIHRoZSBvdGhlciBkZXZpY2VzIGRv IG5vdA0KDQo+a25vdywgb3IgZG8gbm90IGdldCBub3RpZmllZCwgd2hlbiBuZXcgbGlzdGVuZXJz IGpvaW4gdGhlIG5ldHdvcmsuIi4gQ291bGRuJ3QgdGhpcyBiZSBhIHByb2JsZW0NCg0KPmZvciB0 aGUgc3VnZ2VzdGVkIGFwcHJvYWNoPw0KDQogDQoNClllcywgaW4gcHJpbmNpcGxlLCBhbnkgZGV2 aWNlIGNhbiBkZWNpZGUgdG8gbGlzdGVuIGZvciBhbnkgSVB2NiBtdWx0aWNhc3QgYWRkcmVzcy4g IEJ1dCBpbiBwcmFjdGljZSBvZiBjb3Vyc2UgdGhlcmUgYXJlIElQdjYgbXVsdGljYXN0IHJlbGF0 ZWQgcHJvdG9jb2xzIGZvciByb3V0aW5nL2pvaW5pbmcgdGhhdCBkaWN0YXRlIHdobyBjYW4gc3Vj Y2Vzc2Z1bGx5IGxpc3RlbiBmb3IgYW5kIHJlY2VpdmUgYW4gSVB2NiBtdWx0aWNhc3QgcGFja2V0 LiAgRm9yIGV4YW1wbGUsIHVubGVzcyBhIGRldmljZSB1c2VzIGEgcHJvdG9jb2wgbGlrZSBNTEQg dG8gZXhwbGljaXRseSBqb2luIGEgbXVsdGljYXN0IGdyb3VwLCB0aGUgbmV0d29yayB3aWxsIG5l dmVyIHJvdXRlIHRoZSBtdWx0aWNhc3QgcGFja2V0cyBvZiBpbnRlcmVzdCB0byB0aGUgc3ViLW5l dHdvcmsgb2YgdGhlIGRldmljZS4gIFRoaXMgaXMgYWxsIGV4cGxhaW5lZCBhdCBhIGhpZ2ggbGV2 ZWwgaW4gdGhlIEkuRC5ncm91cGNvbW0gcmVmZXJlbmNlIChodHRwOi8vdG9vbHMuaWV0Zi5vcmcv aHRtbC9kcmFmdC1pZXRmLWNvcmUtZ3JvdXBjb21tLTE4I3NlY3Rpb24tMi4xICkgLg0KDQogDQoN ClRoZSBvdGhlciBwYXJ0IG9mIHlvdXIgcXVlc3Rpb24gcmVmZXJzIHRvIGhvdyBkb2VzIHRoZSBz ZW5kZXIgbm9kZSBrbm93IHdobyBpcyBwYXJ0IG9mIHRoZSBncm91cC4gIFlvdSBhcmUgY29ycmVj dCB0aGF0IGl0IGlzIHZlcnkgZGlmZmljdWx0IHRvIGtub3cgcHJlY2lzZWx5IHRoZSBtZW1iZXJz aGlwIG9mIGEgZ3JvdXAuICBUaGF0IGlzIHdoeSB3ZSBoYWQgdGhlIHN1YnRsZSByZWZlcmVuY2Ug dG8g4oCca25vd24gbGlzdGVuZXJz4oCdLiAgSG93IHlvdSBhY3R1YWxseSBrbm93IHRoZSBtZW1i ZXJzaGlwIGRlcGVuZHMgb24gdGhlIG1peCBvZiBwcm90b2NvbHMgdXNlZCAoYW5kIGlzIGluIGZh Y3QgaXQgaXMgbm90IGFsd2F5cyBwb3NzaWJsZSB0byBrbm93IGFsbCB0aGUgbWVtYmVycyBhY2N1 cmF0ZWx5KS4gIEJ1dCBmb3IgQ29BUCBncm91cCBtZW1iZXIgZGlzY292ZXJ5LCB0aGVyZSBpcyAg YWdhaW4gZ3VpZGFuY2UgZ2l2ZW4gaW4gdGhlIEkuRC5ncm91cGNvbW0gcmVmZXJlbmNlIChzcGVj aWZpY2FsbHkgaW4gaHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jb3JlLWdy b3VwY29tbS0xOCNzZWN0aW9uLTIuNiApLiAgV2UgY2FuIG1ha2UgdGhpcyBwb2ludCBhIGJpdCBt b3JlIGV4cGxpY2l0IGluIHRoZSBuZXh0IHVwZGF0ZSBvZiBvdXIgSS1ELg0KDQogDQoNCiANCg0K IA0KDQo+MikgQW4gYWx0ZXJuYXRpdmUgYXBwcm9hY2ggdG8gdGhlIG9uZSBzdWdnZXN0ZWQgaW4g U2VjdGlvbiA0LjUgbWF5IGNvbnNpc3QgaW4gYSBsaXN0ZW5lciBub2RlIGVzdGFibGlzaGluZw0K DQo+IGEgdW5pY2FzdCBEVExTIHNlc3Npb24gKGkuZS4gc3RhcnRpbmcgYSBEVExTIGhhbmRzaGFr ZSkgd2l0aCB0aGUgc2VuZGVyIG5vZGUsIHVwb24gcmVjZWl2aW5nIGEgbXVsdGljYXN0DQoNCj4g bWVzc2FnZSBmb3IgdGhlIGZpcnN0IHRpbWUuDQoNCiANCg0KWWVzLCBnb29kIHBvaW50ISAgV2Ug Y2FuIGFkZCB0aGlzIHRvIHRoZSBJLUQgaW4gb3VyIG5leHQgdXBkYXRlLiANCg0KIA0KDQogDQoN CkJlc3QgUmVnYXJkcywNCg0KIA0KDQogDQoNCkFrYmFyDQoNCiANCg0KIA0KDQogDQoNCkZyb206 IE1hcmNvIFRpbG9jYSBbbWFpbHRvOm1hcmNvQHNpY3Muc2VdIA0KU2VudDogVHVlc2RheSwgTWF5 IDA2LCAyMDE0IDEyOjMyIFBNDQpUbzogUmFobWFuLCBBa2Jhcg0KQ2M6IEt1bWFyLCBTYW5kZWVw OyBkdGxzLWlvdEBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtEdGxzLWlvdF0gVW5pY2FzdCByZXNw b25zZXMgaW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNQ0KDQogDQoNCkhl bGxvIEFrYmFyLA0KDQogDQoNClRoYW5rcyBmb3IgaGF2aW5nIGNvbnNpZGVyZWQgbXkgcXVlc3Rp b24uIFRoZSBuZXcgU2VjdGlvbiA0LjUgbG9va3MgZmluZSB0byBtZS4gQWxzbywgSSBoYXZlIHRo ZSB0d28gZm9sbG93aW5nIGNvbW1lbnRzLg0KDQogDQoNCjEpIEluIG9yZGVyIHRvIHBlcmZvcm0g YSBEVExTIGhhbmRzaGFrZSBiZWZvcmUvYWZ0ZXIgc2VuZGluZyBhIG11bHRpY2FzdCBtZXNzYWdl LCBhIHNlbmRlciBub2RlIHNob3VsZCBiZSBhd2FyZSBvZiB0aGUgZ3JvdXAgbWVtYmVyc2hpcCwg ZXNwZWNpYWxseSB3aGF0IGFyZSB0aGUgbGlzdGVuZXIgbm9kZXMgY3VycmVudGx5IHByZXNlbnQg aW4gdGhlIGdyb3VwLiBPZiBjb3Vyc2UsIHN1Y2ggYSBncm91cCBtZW1iZXJzaGlwIG1heSBjaGFu Z2Ugb3ZlciB0aW1lLCB1cG9uIG5ldyBub2RlcyBqb2luaW5nIHRoZSBncm91cC4gSG93ZXZlciwg U2VjdGlvbiAzLjEgaW4gdGhlIGRyYWZ0IHN0YXRlcyB0aGF0ICJBbnkgZGV2aWNlIGNhbiBpbiBw cmluY2lwbGUgZGVjaWRlIHRvIGxpc3RlbiB0byBhbnkgSVB2NiBtdWx0aWNhc3QgYWRkcmVzcy4g VGhpcyBhbHNvIG1lYW5zIGFwcGxpY2F0aW9ucyBvbiB0aGUgb3RoZXIgZGV2aWNlcyBkbyBub3Qg a25vdywgb3IgZG8gbm90IGdldCBub3RpZmllZCwgd2hlbiBuZXcgbGlzdGVuZXJzIGpvaW4gdGhl IG5ldHdvcmsuIi4gQ291bGRuJ3QgdGhpcyBiZSBhIHByb2JsZW0gZm9yIHRoZSBzdWdnZXN0ZWQg YXBwcm9hY2g/DQoNCiANCg0KMikgQW4gYWx0ZXJuYXRpdmUgYXBwcm9hY2ggdG8gdGhlIG9uZSBz dWdnZXN0ZWQgaW4gU2VjdGlvbiA0LjUgbWF5IGNvbnNpc3QgaW4gYSBsaXN0ZW5lciBub2RlIGVz dGFibGlzaGluZyBhIHVuaWNhc3QgRFRMUyBzZXNzaW9uIChpLmUuIHN0YXJ0aW5nIGEgRFRMUyBo YW5kc2hha2UpIHdpdGggdGhlIHNlbmRlciBub2RlLCB1cG9uIHJlY2VpdmluZyBhIG11bHRpY2Fz dCBtZXNzYWdlIGZvciB0aGUgZmlyc3QgdGltZS4NCg0KIA0KDQpCZXN0IHJlZ2FyZHMsDQoNCk1h cmNvDQoNCiANCg0KIA0KDQogDQoNCiANCg0KT24gNSBNYXkgMjAxNCAyMzo0NSwgUmFobWFuLCBB a2JhciA8QWtiYXIuUmFobWFuQGludGVyZGlnaXRhbC5jb20+IHdyb3RlOg0KDQpIaSBNYXJjbywN Cg0KIA0KDQogDQoNCiANCg0KVGhlIGF1dGhvcnMgaGF2ZSBtYWRlIGFuIHVwZGF0ZSB0byB0aGUg ZHJhZnQgdG8gYWRkcmVzcyBmdWxseSB5b3VyIGdvb2QgcXVlc3Rpb24gcmVnYXJkaW5nIGhvdyB0 byBoYW5kbGUgdGhlIHVuaWNhc3QgcmVzcG9uc2VzIHRvIHRoZSBtdWx0aWNhc3QgcmVzcG9uc2Uu ICBTcGVjaWZpY2FsbHksIHBsZWFzZSByZXZpZXcgdGhlIG5ldyBzZWN0aW9uIDQuNSBhbmQgdGVs bCB1cyBpZiB5b3UgaGF2ZSBhbnkgbW9yZSBxdWVzdGlvbnM6DQoNCiANCg0KIA0KDQpodHRwOi8v dG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA2 I3NlY3Rpb24tNC41DQoNCiANCg0KNC41LiAgVW5pY2FzdCBSZXNwb25zZXMgdG8gTXVsdGljYXN0 IE1lc3NhZ2VzDQoNCiANCg0KICAgSW4gQ29BUCwgcmVzcG9uc2VzIHRvIG11bHRpY2FzdCBtZXNz YWdlcyBhcmUgYWx3YXlzIHNlbnQgYmFjayBhcw0KDQogICB1bmljYXN0LiAgVGhhdCBpcywgdGhl IGdyb3VwIG1lbWJlcnMgdGhhdCByZWNlaXZlIGEgbXVsdGljYXN0IG1lc3NhZ2UNCg0KICAgbWF5 IGluZGl2aWR1YWxseSBkZWNpZGUgdG8gc2VuZCAob3Igc3VwcHJlc3MpIGEgdW5pY2FzdCByZXNw b25zZSBhcw0KDQogICBkZXNjcmliZWQgaW4gU2VjdGlvbiAyLjUgb2YgW0ktRC5pZXRmLWNvcmUt Z3JvdXBjb21tXS4gIFRoZSB1bmljYXN0DQoNCiAgIHJlc3BvbnNlcyB0byBhIERUTFMtYmFzZWQg bXVsdGljYXN0IG1lc3NhZ2UgbWF5IG9wdGlvbmFsbHkgYmUgc2VjdXJlLg0KDQogICBTcGVjaWZp Y2FsbHksIHRoZSB1bmljYXN0IHJlc3BvbnNlIG1heSBiZSBzZW50IGJhY2sgYXMgYSB1bmljYXN0 IERUTFMNCg0KICAgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gOS4xIG9mIFtJLUQuaWV0Zi1jb3Jl LWNvYXBdLiAgVGhpcyByZXF1aXJlcw0KDQogICB0aGF0IGEgdW5pY2FzdCBEVExTIGhhbmRzaGFr ZSB3YXMgcHJldmlvdXNseSBpbml0aWF0ZWQgYmV0d2VlbiB0aGUNCg0KICAgbXVsdGljYXN0IG1l c3NhZ2Ugc2VuZGVyIGFuZCBsaXN0ZW5lci4gIEluIHRoZSBleHRyZW1lIHNjZW5hcmlvLCBhDQoN CiAgIG11bHRpY2FzdCBzZW5kZXIgbWF5IGF0dGVtcHQgdG8gaW5pdGlhdGUgdGhlIHVuaWNhc3Qg RFRMUyBoYW5kc2hha2UNCg0KICAgd2l0aCBhbGwgb3IgYSBzdWJzZXQgb2Yga25vd24gbGlzdGVu ZXJzIGp1c3QgYmVmb3JlIG9yIGp1c3QgYWZ0ZXIgaXQNCg0KICAgc2VuZHMgb3V0IHRoZSBEVExT LWJhc2VkIG11bHRpY2FzdCBtZXNzYWdlLiAgVGhpcyBtYXkgcmVzdWx0IGluIHRoZQ0KDQogICBt dWx0aWNhc3Qgc2VuZGVyIChpLmUuIHVuaWNhc3QgRFRMUyBjbGllbnQpIGhhdmluZyB0byBwcm9j ZXNzIHVuaWNhc3QNCg0KICAgRFRMUyBoYW5kc2hha2UgbWVzc2FnZXMgZnJvbSBtdWx0aXBsZSBt dWx0aWNhc3QgbGlzdGVuZXJzIChpLmUuDQoNCiAgIHVuaWNhc3QgRFRMUyBzZXJ2ZXJzKSBpbiBh IHNob3J0IHBlcmlvZC4NCg0KIA0KDQogICBOb3RlOiBUaGVyZSBpcyBhbiBvYnZpb3VzIHRpbWlu ZyBhbmQgcHJvY2Vzc2luZyBsb2FkIGlzc3VlIGZvciB0aGUNCg0KICAgbXVsdGljYXN0IHNlbmRl ciBpbiB0aGUgc2NlbmFyaW8gd2hlcmUgaXQgYXR0ZW1wdHMgdG8gaW5pdGlhdGUgdGhlDQoNCiAg IHVuaWNhc3QgRFRMUyBoYW5kc2hha2VzIHdpdGggYWxsL3NvbWUgb2YgaXRzIGtub3duIGxpc3Rl bmVycyBqdXN0DQoNCiAgIGFmdGVyIGl0IHNlbmRzIG91dCB0aGUgRFRMUy1iYXNlZCBtdWx0aWNh c3QgbWVzc2FnZS4gIEluIHRoaXMgY2FzZSwNCg0KICAgdGhlIHByb2Nlc3NpbmcgbG9hZCBpbiB0 aGUgbXVsdGljYXN0IHNlbmRlciAoaS5lLiB1bmljYXN0IERUTFMNCg0KICAgY2xpZW50KSBpcyBy ZWR1Y2VkIHNvbWV3aGF0IGJ5IHRoZSBmYWN0IHRoYXQgQ29BUCByZXF1aXJlcyBhIGJhY2stb2Zm DQoNCiAgIGFuZCByYW5kb21pemF0aW9uIG9mIHRoZSB1bmljYXN0IHJlc3BvbnNlIGJ5IHRoZSBM ZWlzdXJlIHRpbWVyDQoNCiAgIG1lY2hhbmlzbSBhcyBkZXNjcmliZWQgaW4gU2VjdGlvbiA4LjIg b2YgW0ktRC5pZXRmLWNvcmUtY29hcF0uDQoNCiANCg0KIA0KDQogDQoNCiANCg0KQmVzdCBSZWdh cmRzLA0KDQogDQoNCiANCg0KQWtiYXINCg0KIA0KDQogDQoNCiANCg0KRnJvbTogZHRscy1pb3Qg W21haWx0bzpkdGxzLWlvdC1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgS3VtYXIsIFNh bmRlZXANClNlbnQ6IFdlZG5lc2RheSwgQXByaWwgMDIsIDIwMTQgMzo0NyBBTQ0KVG86IE1hcmNv IFRpbG9jYTsgZHRscy1pb3RAaWV0Zi5vcmcNClN1YmplY3Q6IFJlOiBbRHRscy1pb3RdIFVuaWNh c3QgcmVzcG9uc2VzIGluIGRyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDUNCg0K IA0KDQpIaSBNYXJjbw0KDQogDQoNClRoZSBkcmFmdCBvbmx5IGFkZHJlc3NlcyB0aGUgcHJvdGVj dGlvbiBvZiBtdWx0aWNhc3QgdHJhZmZpYy4gSWYgdW5pY2FzdCByZXNwb25zZXMgYXJlIGV4cGVj dGVkIGFuZCBpZiBwcm90ZWN0aW9uIGlzIHJlcXVpcmVkIGZvciBzdWNoIG1lc3NhZ2VzLCB0aGVu IGV4aXN0aW5nIHVuaWNhc3QgcHJvdGVjdGlvbiBtZWNoYW5pc21zIGJhc2VkIG9uIERUTFMgYXMg c3VnZ2VzdGVkIGluIGRyYWZ0LWlldGYtY29yZS1jb2FwLTE4IHNob3VsZCBiZSB1c2VkLiBQcm90 ZWN0aW9uIG9mIGFsbCB1bmljYXN0IG1lc3NhZ2VzIHNob3VsZCBiZSB0cmVhdGVkIGFzIHdvdWxk IGJlIGRvbmUgbm9ybWFsbHkuIA0KDQogDQoNCkhvcGUgdGhhdCBhbnN3ZXJzIHlvdXIgcXVlc3Rp b24uDQoNCiANCg0KUmVnYXJkcw0KDQpTYW5kZWVwIA0KDQogDQoNCkZyb206IGR0bHMtaW90IFtt YWlsdG86ZHRscy1pb3QtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIE1hcmNvIFRpbG9j YQ0KU2VudDogVHVlc2RheSwgQXByaWwgMDEsIDIwMTQgNjozNSBQTQ0KVG86IGR0bHMtaW90QGll dGYub3JnDQpTdWJqZWN0OiBbRHRscy1pb3RdIFVuaWNhc3QgcmVzcG9uc2VzIGluIGRyYWZ0LWtl b2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDUNCg0KIA0KDQpEZWFyIGFsbCwNCg0KIA0KDQpB cyB0byBwb3NzaWJsZSByZXNwb25zZXMgdG8gbXVsdGljYXN0IHJlcXVlc3RzLCBTZWN0aW9uIDIu MSBzdGF0ZXMgdGhhdCB0aGV5IGFyZSBzZW50IGJhY2sgaW4gdW5pY2FzdC4gVGhlbiwgbm8gZnVy dGhlciBkZXRhaWxzIGFyZSBwcm92aWRlZCBhYm91dCB0aGVpciBwcm90ZWN0aW9uLg0KDQogDQoN CkFyZSBzdWNoIHJlc3BvbnNlcyBzdXBwb3NlZCB0byBiZSBwcm90ZWN0ZWQgdGhyb3VnaCBhICJy ZWd1bGFyIiBEVExTIHNlc3Npb24sIHdoaWNoIG11c3QgYmUgKG9yIGhhcyBwcmV2aW91c2x5IGJl ZW4pIGVzdGFibGlzaGVkIGJldHdlZW4gdGhlIHNlbmRlciBhbmQgbGlzdGVuZXI/DQoNCiANCg0K Q2hlZXJzLA0KDQpNYXJjbw0KDQogDQoNCiANCg0KIA0KDQogDQoNCiANCg0KX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18NCg0KVGhlIGluZm9ybWF0aW9uIGNvbnRhaW5lZCBpbiB0aGlz IG1lc3NhZ2UgbWF5IGJlIGNvbmZpZGVudGlhbCBhbmQgbGVnYWxseSBwcm90ZWN0ZWQgdW5kZXIg YXBwbGljYWJsZSBsYXcuIFRoZSBtZXNzYWdlIGlzIGludGVuZGVkIHNvbGVseSBmb3IgdGhlIGFk ZHJlc3NlZShzKS4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgeW91IGFy ZSBoZXJlYnkgbm90aWZpZWQgdGhhdCBhbnkgdXNlLCBmb3J3YXJkaW5nLCBkaXNzZW1pbmF0aW9u LCBvciByZXByb2R1Y3Rpb24gb2YgdGhpcyBtZXNzYWdlIGlzIHN0cmljdGx5IHByb2hpYml0ZWQg YW5kIG1heSBiZSB1bmxhd2Z1bC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVu dCwgcGxlYXNlIGNvbnRhY3QgdGhlIHNlbmRlciBieSByZXR1cm4gZS1tYWlsIGFuZCBkZXN0cm95 IGFsbCBjb3BpZXMgb2YgdGhlIG9yaWdpbmFsIG1lc3NhZ2UuDQoNCiANCg0K ------_=_NextPart_001_01CF73A1.A9F11445 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+PGhlYWQ+PG1ldGEgaHR0cC1lcXVpdj1Db250ZW50LVR5cGUgY29udGVu dD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij48bWV0YSBuYW1lPUdlbmVyYXRvciBjb250ZW50 PSJNaWNyb3NvZnQgV29yZCAxNCAoZmlsdGVyZWQgbWVkaXVtKSI+PCEtLVtpZiAhbXNvXT48c3R5 bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7YmVoYXZpb3I6dXJs KCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0KLnNo YXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwhW2VuZGlmXS0tPjxz dHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJcGFub3NlLTE6MiAxMSA2IDQgMyA1IDQgNCAyIDQ7 fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRp di5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9u dC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIiwic2VyaWYiO30N CmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNv bG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4u TXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1 cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnByZQ0KCXttc28tc3R5bGUtcHJp b3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1h cmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJ Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpwLk1zb0FjZXRhdGUsIGxpLk1zb0FjZXRhdGUs IGRpdi5Nc29BY2V0YXRlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGlu azoiQmFsbG9vbiBUZXh0IENoYXIiOw0KCW1hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAw MXB0Ow0KCWZvbnQtc2l6ZTo4LjBwdDsNCglmb250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJp ZiI7fQ0KcC5Nc29MaXN0UGFyYWdyYXBoLCBsaS5Nc29MaXN0UGFyYWdyYXBoLCBkaXYuTXNvTGlz dFBhcmFncmFwaA0KCXttc28tc3R5bGUtcHJpb3JpdHk6MzQ7DQoJbWFyZ2luLXRvcDowaW47DQoJ bWFyZ2luLXJpZ2h0OjBpbjsNCgltYXJnaW4tYm90dG9tOjBpbjsNCgltYXJnaW4tbGVmdDouNWlu Ow0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFt aWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0Kc3Bhbi5IVE1MUHJlZm9ybWF0dGVkQ2hh cg0KCXttc28tc3R5bGUtbmFtZToiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbXNvLXN0eWxl LXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJIVE1MIFByZWZvcm1hdHRlZCI7DQoJZm9u dC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpzcGFuLkJhbGxvb25UZXh0Q2hhcg0KCXttc28tc3R5 bGUtbmFtZToiQmFsbG9vbiBUZXh0IENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCglt c28tc3R5bGUtbGluazoiQmFsbG9vbiBUZXh0IjsNCglmb250LWZhbWlseToiVGFob21hIiwic2Fu cy1zZXJpZiI7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjINCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7 DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCgljb2xvcjojMUY0OTdEO30N CnNwYW4uRW1haWxTdHlsZTIzDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFt aWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFuLkVtYWls U3R5bGUyNA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJy aSIsInNhbnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjUNCgl7 bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJz YW5zLXNlcmlmIjsNCgljb2xvcjojMUY0OTdEO30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHls ZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rp b24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBp bjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+ PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBz cGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4 bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIg ZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT48L2hlYWQ+PGJv ZHkgbGFuZz1FTi1VUyBsaW5rPWJsdWUgdmxpbms9cHVycGxlPjxkaXYgY2xhc3M9V29yZFNlY3Rp b24xPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPkhpIEVza28sPG86 cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5 N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4g c3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlm Ijtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNv Tm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJp Iiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+VGhhbmtzIGZvciB0aGUgZmVlZGJhY2suPG86 cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5 N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4g c3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlm Ijtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNv Tm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJp Iiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+Jmd0OyA8L3NwYW4+PHNwYW4gc3R5bGU9J2Zv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjoj MUY0OTdEJz5JdCBzZWVtcyB1bnNlY3VyZWQgcmVzcG9uc2VzIGFyZSBub3QgcG9zc2libGUgd2l0 aG91dCBhbHRlcmluZyB0aGUgQ29BUCByZXF1ZXN0L3Jlc3BvbnNlIG1hdGNoaW5nIHJ1bGVzLjxv OnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0 OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFu IHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJp ZiI7Y29sb3I6IzFGNDk3RCc+WWVzLCBidXQgYXMgeW91IGtub3cgdGhlIGN1cnJlbnQgY29yZS1j b2FwLTE4IHRleHQgaXMgb2J2aW91c2x5IHdyaXR0ZW4gZm9yIHVuaWNhc3QgRFRMUyByZXF1ZXN0 IGFuZCByZXNwb25zZS7CoCBXZSBhcmUgbm8gbG9uZ2VyIGRlYWxpbmcgd2l0aCB0aGF0IGFzIHdl IGhhdmUgbXVsdGljYXN0IERUTFMgcmVxdWVzdCwgYW5kIHBvdGVudGlhbGx5IHVuaWNhc3QgRFRM UyByZXNwb25zZS7CoCAoVGhhdCB3YXMgdGhlIG9yaWdpbmFsIHZhbHVlIGluIHRoZSBxdWVzdGlv biBhc2tlZCBieSBNYXJjbykuwqAgQnV0IEkgZG8gYWdyZWUgd2l0aCB5b3VyIHBvaW50IHRoYXQg dGhlIGJhc2UgY29yZS1jb2FwLTE4IG9wZXJhdGlvbiB3b3VsZCBiZSBhZmZlY3RlZCwgYW5kIHRo YSDCoHRoaXMgY2hhbmdlIG11c3QgYmUgY2xlYXJseSBjYXB0dXJlZC4gwqDCoEFuZCBJIGd1ZXNz IDxhIGhyZWY9Imh0dHA6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWtlb2gtZGljZS1tdWx0 aWNhc3Qtc2VjdXJpdHktMDcjc2VjdGlvbi00LjUiPmh0dHA6Ly90b29scy5pZXRmLm9yZy9odG1s L2RyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDcjc2VjdGlvbi00LjU8L2E+IHdv dWxkIGJlIHRoZSBub3JtYXRpdmUgdXBkYXRlLsKgIFNvIHdlIGhhdmUgdG8gbWFrZSB0aGUgdGV4 dCBjbGVhci7CoCBEbyB5b3UgdGhpbmsgd2UgbmVlZCB0byBleHBsYWluIGl0IGJldHRlcj88bzpw PjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3 RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBz dHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYi O2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29O b3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmki LCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz4tJmd0OyBDb21wYXJlIHRvIHNlY3Rpb24gOS4x LjEgb2YgY29yZS1jb2FwOiDigJxUaGUgZW5kcG9pbnQgYWN0aW5nIGFzIHRoZSBDb0FQIGNsaWVu dCBzaG91bGQgYWxzbyBhY3QgYXMgdGhlIERUTFMgY2xpZW50LiZuYnNwOyBJdCBzaG91bGQgaW5p dGlhdGUgYSBzZXNzaW9uIHRvIHRoZSBzZXJ2ZXIgb24gdGhlIGFwcHJvcHJpYXRlIHBvcnQu4oCd PG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMx RjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNw YW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNl cmlmIjtjb2xvcjojMUY0OTdEJz5BZ2FpbiwgSSB1bmRlcnN0b29kIHRoYXQgdGhpcyB3YXMgb3Jp Z2luYWxseSB3cml0dGVuIGZyb20gdGhlIHBvaW50IG9mIHZpZXcgb2YgYSBub3JtYWwgdW5pY2Fz dCBDb0FQIHJlcXVlc3QuwqAgTWVhbmluZyB0aGF0IGEgQ29BUCBjbGllbnQgd291bGQgaGF2ZSBp bml0aWFsbHkgcGVyZm9ybWVkIGEgcmVxdWVzdCAoZS5nLiBHRVQpIGFuZCB0aHVzIHNob3VsZCBi ZSB0aGUgb25lIHRoYXQgZGVjaWRlcyBpZiB0aGUgR0VUIHNob3VsZCBiZSBzZWN1cmUgb3Igbm90 LiDCoEFnYWluIHRoaXMgbG9naWMgZG9lcyBub3QgYXBwbHkgZGlyZWN0bHkgZm9yIHRoZSBtdWx0 aWNhc3QgY2FzZSBiZWNhdXNlIHRoZSBpbnRlcmFjdGlvbnMgYXJlIGRpZmZlcmVudC7CoCBTbyBJ IGFncmVlIHRoYXQgd2UgbmVlZCB0byBleHBsaWNpdGx5IHN0YXRlIGluIGRyYWZ0LWtlb2gtZGlj ZS1tdWx0aWNhc3QgdGhhdCB3ZSBhcmUgZGV2aWF0aW5nIGZyb20gdGhlIG9yaWdpbmFsIGNvcmUt Y29hcC0xOCBhcHByb2FjaC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFs PjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fu cy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNs YXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToi Q2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFG NDk3RCc+QmVzdCBSZWdhcmRzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3Jt YWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJz YW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAg Y2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPkFrYmFy PG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMx RjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48ZGl2PjxkaXYgc3R5bGU9J2JvcmRl cjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAw aW4gMGluJz48cCBjbGFzcz1Nc29Ob3JtYWw+PGI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiJz5Gcm9tOjwvc3Bhbj48L2I+PHNw YW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2Vy aWYiJz4gRGlqaywgRXNrbyBbbWFpbHRvOmVza28uZGlqa0BwaGlsaXBzLmNvbV0gPGJyPjxiPlNl bnQ6PC9iPiBNb25kYXksIE1heSAxOSwgMjAxNCAxMjowMiBQTTxicj48Yj5Ubzo8L2I+IFJhaG1h biwgQWtiYXI7IE1hcmNvIFRpbG9jYTxicj48Yj5DYzo8L2I+IEt1bWFyLCBTYW5kZWVwOyBkdGxz LWlvdEBpZXRmLm9yZzxicj48Yj5TdWJqZWN0OjwvYj4gUkU6IFtEdGxzLWlvdF0gVW5pY2FzdCBy ZXNwb25zZXMgaW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNTxvOnA+PC9v OnA+PC9zcGFuPjwvcD48L2Rpdj48L2Rpdj48cCBjbGFzcz1Nc29Ob3JtYWw+PG86cD4mbmJzcDs8 L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+SGkgQWti YXIsPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0n Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9y OiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+ PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5z LXNlcmlmIjtjb2xvcjojMUY0OTdEJz5hcG9sb2dpZXMgZm9yIG15IGxhdGUgaW5wdXQhIE9uIHRo ZSBuZXcgdGV4dCwgdHdvIHBvaW50cyAoc2VlIGJlbG93KSBtYXkgbmVlZCBzb21lIGZ1cnRoZXIg ZGlzY3Vzc2lvbi4gSGVyZSB3ZSBkZXZpYXRlIGZyb20gdGhlIHNwaXJpdCBvZiBjb3JlLWNvYXAt MTgsIHdoaWNoIG1heSBuZWVkIHRvIGJlIHBvaW50ZWQgb3V0IGluIHRoZSB0ZXh0IGV4cGxpY2l0 bHksIGlmIHRoZSBkZXZpYXRpb24gaXMgY29uc2lkZXJlZCBhY2NlcHRhYmxlLjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6 IzFGNDk3RCc+MS4gVW5zZWN1cmVkIHJlc3BvbnNlczxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBj bGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz7igJxUaGUgdW5pY2FzdCByZXNw b25zZXMgdG8gYSBEVExTLWJhc2VkIG11bHRpY2FzdCBtZXNzYWdlIG1heSBvcHRpb25hbGx5IGJl IHNlY3VyZeKAnTxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4g c3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlm Ijtjb2xvcjojMUY0OTdEJz4tJmd0OyBDb21wYXJlIHRvIHNlY3Rpb24gOS4xLjIgb2YgY29yZS1j b2FwOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9 J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xv cjojMUY0OTdEJz7igJxUaGlzIG1lYW5zIHRoZSByZXNwb25zZSB0byBhIERUTFMgc2VjdXJlZCBy ZXF1ZXN0IE1VU1QgYWx3YXlzIGJlIERUTFM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9 TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxp YnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+Jm5ic3A7Jm5ic3A7IHNlY3VyZWQgdXNp bmcgdGhlIHNhbWUgc2VjdXJpdHkgc2Vzc2lvbiBhbmQgZXBvY2guJm5ic3A7IEFueSBhdHRlbXB0 IHRvPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0n Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9y OiMxRjQ5N0QnPiZuYnNwOyZuYnNwOyBzdXBwbHkgYSBOb1NlYyByZXNwb25zZSB0byBhIERUTFMg cmVxdWVzdCBzaW1wbHkgZG9lcyBub3QgbWF0Y2ggdGhlPG86cD48L286cD48L3NwYW4+PC9wPjxw IGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPiZuYnNwOyZuYnNwOyByZXF1 ZXN0IGFuZCAodW5sZXNzIGl0IGRvZXMgbWF0Y2ggYW4gdW5yZWxhdGVkIE5vU2VjIHJlcXVlc3Qp PG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMx RjQ5N0QnPiZuYnNwOyZuYnNwOyB0aGVyZWZvcmUgTVVTVCBiZSByZWplY3RlZC7igJw8bzpwPjwv bzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHls ZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2Nv bG9yOiMxRjQ5N0QnPkl0IHNlZW1zIHVuc2VjdXJlZCByZXNwb25zZXMgYXJlIG5vdCBwb3NzaWJs ZSB3aXRob3V0IGFsdGVyaW5nIHRoZSBDb0FQIHJlcXVlc3QvcmVzcG9uc2UgbWF0Y2hpbmcgcnVs ZXMuPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0n Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9y OiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+ PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5z LXNlcmlmIjtjb2xvcjojMUY0OTdEJz4yLiBXaG8gaW5pdGlhdGVzIHRoZSBoYW5kc2hha2U8bzpw PjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3 RCc+4oCcRWl0aGVyIHRoZSBtdWx0aWNhc3QgbWVzc2FnZSBzZW5kZXIgb3IgbGlzdGVuZXIgbWF5 IGluaXRpYXRlIHRoZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNw YW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNl cmlmIjtjb2xvcjojMUY0OTdEJz4mbmJzcDsmbmJzcDsgdW5pY2FzdCBEVExTIGhhbmRzaGFrZS4g 4oCcPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0n Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9y OiMxRjQ5N0QnPi0mZ3Q7IENvbXBhcmUgdG8gc2VjdGlvbiA5LjEuMSBvZiBjb3JlLWNvYXA6PG86 cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5 N0QnPuKAnFRoZSBlbmRwb2ludCBhY3RpbmcgYXMgdGhlIENvQVAgY2xpZW50IHNob3VsZCBhbHNv IGFjdCBhcyB0aGUgRFRMUzxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+ PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5z LXNlcmlmIjtjb2xvcjojMUY0OTdEJz4mbmJzcDsmbmJzcDsgY2xpZW50LiZuYnNwOyBJdCBzaG91 bGQgaW5pdGlhdGUgYSBzZXNzaW9uIHRvIHRoZSBzZXJ2ZXIgb24gdGhlPG86cD48L286cD48L3Nw YW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPiZuYnNwOyZu YnNwOyBhcHByb3ByaWF0ZSBwb3J0LuKAnTxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1N c29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGli cmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+YmVzdCByZWdhcmRz LDxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2Zv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjoj MUY0OTdEJz5Fc2tvPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3Bh biBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2Vy aWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48ZGl2PjxkaXYg c3R5bGU9J2JvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5n OjMuMHB0IDBpbiAwaW4gMGluJz48cCBjbGFzcz1Nc29Ob3JtYWw+PGI+PHNwYW4gc3R5bGU9J2Zv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiJz5Gcm9tOjwv c3Bhbj48L2I+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IlRhaG9t YSIsInNhbnMtc2VyaWYiJz4gZHRscy1pb3QgWzxhIGhyZWY9Im1haWx0bzpkdGxzLWlvdC1ib3Vu Y2VzQGlldGYub3JnIj5tYWlsdG86ZHRscy1pb3QtYm91bmNlc0BpZXRmLm9yZzwvYT5dIDxiPk9u IEJlaGFsZiBPZiA8L2I+UmFobWFuLCBBa2Jhcjxicj48Yj5TZW50OjwvYj4gRnJpZGF5LCBNYXkg MDksIDIwMTQgMjE6NDA8YnI+PGI+VG86PC9iPiBNYXJjbyBUaWxvY2E8YnI+PGI+Q2M6PC9iPiBL dW1hciwgU2FuZGVlcDsgPGEgaHJlZj0ibWFpbHRvOmR0bHMtaW90QGlldGYub3JnIj5kdGxzLWlv dEBpZXRmLm9yZzwvYT48YnI+PGI+U3ViamVjdDo8L2I+IFJlOiBbRHRscy1pb3RdIFVuaWNhc3Qg cmVzcG9uc2VzIGluIGRyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDU8bzpwPjwv bzpwPjwvc3Bhbj48L3A+PC9kaXY+PC9kaXY+PHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPkhpIE1h cmNvLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9 J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xv cjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFs PjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fu cy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNs YXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToi Q2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPldlIGhhdmUgdXBkYXRlZCB0aGUg ZHJhZnQgdG8gY2FwdHVyZSB5b3VyIHJlbWFpbmluZyBjb21tZW50cyBiZWxvdy4mbmJzcDsgUGxl YXNlIHJldmlldyBhbmQgdGVsbCB1cyBpZiB5b3UgaGF2ZSBhbnkgb3RoZXIgY29tbWVudHMuPG86 cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5 N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4g c3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlm Ijtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNv Tm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJp Iiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PGEgaHJlZj0iaHR0cDovL3Rvb2xzLmlldGYu b3JnL2h0bWwvZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNyNzZWN0aW9uLTQu NSI+aHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1z ZWN1cml0eS0wNyNzZWN0aW9uLTQuNTwvYT4gPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNz PU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2Fs aWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPjQuNS4mbmJzcDsgVW5pY2FzdCBS ZXNwb25zZXMgdG8gTXVsdGljYXN0IE1lc3NhZ2VzPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNs YXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToi Q291cmllciBOZXciJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9y bWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5l dyInPiZuYnNwOyZuYnNwOyBJbiBDb0FQLCByZXNwb25zZXMgdG8gbXVsdGljYXN0IG1lc3NhZ2Vz IGFyZSBhbHdheXMgc2VudCBiYWNrIGFzPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1z b05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmll ciBOZXciJz4mbmJzcDsmbmJzcDsgdW5pY2FzdC4mbmJzcDsgVGhhdCBpcywgdGhlIGdyb3VwIG1l bWJlcnMgdGhhdCByZWNlaXZlIGEgbXVsdGljYXN0IG1lc3NhZ2U8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBtYXkgaW5kaXZpZHVhbGx5IGRlY2lk ZSB0byBzZW5kIChvciBzdXBwcmVzcykgYSB1bmljYXN0IHJlc3BvbnNlIGFzPG86cD48L286cD48 L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgZGVzY3JpYmVkIGluIFNl Y3Rpb24gMi41IG9mIFtJLUQuaWV0Zi1jb3JlLWdyb3VwY29tbV0uJm5ic3A7IFRoZSB1bmljYXN0 PG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgcmVz cG9uc2VzIHRvIGEgRFRMUy1iYXNlZCBtdWx0aWNhc3QgbWVzc2FnZSBtYXkgb3B0aW9uYWxseSBi ZSBzZWN1cmUuPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBz dHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsm bmJzcDsgU3BlY2lmaWNhbGx5LCB0aGUgdW5pY2FzdCByZXNwb25zZSBtYXkgYmUgc2VudCBiYWNr IGFzIGEgdW5pY2FzdCBEVExTPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1h bD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXci Jz4mbmJzcDsmbmJzcDsgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gOS4xIG9mIFtJLUQuaWV0Zi1j b3JlLWNvYXBdLiZuYnNwOyBUaGlzIHJlcXVpcmVzPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNs YXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToi Q291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgdGhhdCBhIHVuaWNhc3QgRFRMUyBoYW5kc2hha2Ug d2FzIHByZXZpb3VzbHkgaW5pdGlhdGVkIGJldHdlZW4gdGhlPG86cD48L286cD48L3NwYW4+PC9w PjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgbXVsdGljYXN0IG1lc3NhZ2Ugc2VuZGVy IGFuZCBsaXN0ZW5lci48bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxz cGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9 J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7 IEVpdGhlciB0aGUgbXVsdGljYXN0IG1lc3NhZ2Ugc2VuZGVyIG9yIGxpc3RlbmVyIG1heSBpbml0 aWF0ZSB0aGU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0 eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZu YnNwOyB1bmljYXN0IERUTFMgaGFuZHNoYWtlLiZuYnNwOyBJZiB0aGUgRFRMUyBoYW5kc2hha2Ug d2FzIGluaXRpYXRlZCBieSB0aGU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9y bWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5l dyInPiZuYnNwOyZuYnNwOyBtdWx0aWNhc3QgbWVzc2FnZSBzZW5kZXIsIGl0IHJlcXVpcmVzIHRo YXQgdGhlIHNlbmRlciBiZSBhd2FyZSBvZiB0aGU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xh c3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJD b3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBtZW1iZXJzaGlwIG9mIHRoZSBtdWx0aWNhc3QgZ3Jv dXAuJm5ic3A7IFRoaXMgY2FuIGJlIGFjY29tcGxpc2hlZCwgZm9yPG86cD48L286cD48L3NwYW4+ PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgZXhhbXBsZSwgYXMgZGVzY3JpYmVk IGluIFNlY3Rpb24gMi42IG9mIFtJLUQuaWV0Zi1jb3JlLWNvYXBdLiZuYnNwOyBJZiB0aGU8bzpw PjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBsaXN0ZW5l ciBpbml0aWF0ZWQgdGhlIERUTFMgaGFuZHNoYWtlLCBpdCBtYXkgaGF2ZSBkb25lIHNvLCBmb3I8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBleGFt cGxlLCBhZnRlciByZWNlaXZpbmcgYSBtdWx0aWNhc3QgbWVzc2FnZSBmb3IgdGhlIGZpcnN0IHRp bWUuPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0n Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBJbiB0aGUgZXh0 cmVtZSBzY2VuYXJpbywgYSBtdWx0aWNhc3Qgc2VuZGVyIG1heSBhdHRlbXB0IHRvIGluaXRpYXRl PG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgdGhl IHVuaWNhc3QgRFRMUyBoYW5kc2hha2Ugd2l0aCBhbGwsIG9yIGEgc3Vic2V0IG9mLCBrbm93biBs aXN0ZW5lcnM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0 eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZu YnNwOyBqdXN0IGFmdGVyIGl0IHNlbmRzIG91dCB0aGUgRFRMUy1iYXNlZCBtdWx0aWNhc3QgbWVz c2FnZS4mbmJzcDsgVGhpcyBtYXk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9y bWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5l dyInPiZuYnNwOyZuYnNwOyByZXN1bHQgaW4gdGhlIG11bHRpY2FzdCBzZW5kZXIgaGF2aW5nIHRv IHByb2Nlc3MgdW5pY2FzdCBEVExTPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05v cm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBO ZXciJz4mbmJzcDsmbmJzcDsgaGFuZHNoYWtlIG1lc3NhZ2VzIGZyb20gbXVsdGlwbGUgbXVsdGlj YXN0IGxpc3RlbmVycyBpbiBhIHNob3J0PG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1z b05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmll ciBOZXciJz4mbmJzcDsmbmJzcDsgcGVyaW9kLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFz cz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNv dXJpZXIgTmV3Iic+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1h bD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXci Jz4mbmJzcDsmbmJzcDsgTm90ZTogVGhlcmUgaXMgYW4gb2J2aW91cyB0aW1pbmcgYW5kIHByb2Nl c3NpbmcgbG9hZCBpc3N1ZSBmb3IgdGhlPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1z b05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmll ciBOZXciJz4mbmJzcDsmbmJzcDsgbXVsdGljYXN0IHNlbmRlciBpbiB0aGUgc2NlbmFyaW8gd2hl cmUgaXQgYXR0ZW1wdHMgdG8gaW5pdGlhdGUgdGhlPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNs YXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToi Q291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgdW5pY2FzdCBEVExTIGhhbmRzaGFrZXMgd2l0aCBh bGwvc29tZSBvZiBpdHMga25vd24gbGlzdGVuZXJzIGp1c3Q8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBhZnRlciBpdCBzZW5kcyBvdXQgdGhlIERU TFMtYmFzZWQgbXVsdGljYXN0IG1lc3NhZ2UuJm5ic3A7IEluIHRoaXMgY2FzZSw8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyB0aGUgcHJvY2Vzc2lu ZyBsb2FkIGluIHRoZSBtdWx0aWNhc3Qgc2VuZGVyIChpLmUuIHVuaWNhc3QgRFRMUzxvOnA+PC9v OnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IGNsaWVudCkgaXMg cmVkdWNlZCBzb21ld2hhdCBieSB0aGUgZmFjdCB0aGF0IENvQVAgcmVxdWlyZXMgYSBiYWNrLW9m ZjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2Zv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IGFu ZCByYW5kb21pemF0aW9uIG9mIHRoZSB1bmljYXN0IHJlc3BvbnNlIGJ5IHRoZSBMZWlzdXJlIHRp bWVyPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0n Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsg bWVjaGFuaXNtIGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDguMiBvZiBbSS1ELmlldGYtY29yZS1j b2FwXS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxl PSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdE Jz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0 eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7 Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05v cm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIs InNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPkJlc3QgUmVnYXJkcyw8bzpwPjwvbzpwPjwvc3Bh bj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5 N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4g c3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlm Ijtjb2xvcjojMUY0OTdEJz5Ba2JhcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29O b3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmki LCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48ZGl2PjxkaXYgc3R5bGU9J2JvcmRlcjpub25lO2Jv cmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluJz48 cCBjbGFzcz1Nc29Ob3JtYWw+PGI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiJz5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9 J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiJz4gZHRs cy1pb3QgWzxhIGhyZWY9Im1haWx0bzpkdGxzLWlvdC1ib3VuY2VzQGlldGYub3JnIj5tYWlsdG86 ZHRscy1pb3QtYm91bmNlc0BpZXRmLm9yZzwvYT5dIDxiPk9uIEJlaGFsZiBPZiA8L2I+UmFobWFu LCBBa2Jhcjxicj48Yj5TZW50OjwvYj4gVHVlc2RheSwgTWF5IDA2LCAyMDE0IDQ6NDQgUE08YnI+ PGI+VG86PC9iPiBNYXJjbyBUaWxvY2E8YnI+PGI+Q2M6PC9iPiBLdW1hciwgU2FuZGVlcDsgPGEg aHJlZj0ibWFpbHRvOmR0bHMtaW90QGlldGYub3JnIj5kdGxzLWlvdEBpZXRmLm9yZzwvYT48YnI+ PGI+U3ViamVjdDo8L2I+IFJlOiBbRHRscy1pb3RdIFVuaWNhc3QgcmVzcG9uc2VzIGluIGRyYWZ0 LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PC9k aXY+PC9kaXY+PHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPjxwIGNsYXNz PU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2Fs aWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPkhpIE1hcmNvLDxvOnA+PC9vOnA+PC9z cGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFG NDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3Bh biBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2Vy aWYiO2NvbG9yOiMxRjQ5N0QnPlRoYW5rcyBmb3IgcmV2aWV3aW5nIHRoZSB1cGRhdGVkIGRyYWZ0 LiZuYnNwOyBBbHNvIGhlcmUgaXMgbXkgZmVlZGJhY2sgdG8geW91ciB0d28gbmV3IHF1ZXN0aW9u czo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6 IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48 bzpwPiZuYnNwOzwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+Jmd0OzEpIEluIG9yZGVyIHRv IHBlcmZvcm0gYSBEVExTIGhhbmRzaGFrZSBiZWZvcmUvYWZ0ZXIgc2VuZGluZyBhIG11bHRpY2Fz dCBtZXNzYWdlLCBhIHNlbmRlcjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD4mZ3Q7 IG5vZGUgc2hvdWxkIGJlIGF3YXJlIG9mIHRoZSBncm91cCBtZW1iZXJzaGlwLCBlc3BlY2lhbGx5 IHdoYXQgYXJlIHRoZSBsaXN0ZW5lciBub2RlcyBjdXJyZW50bHk8bzpwPjwvbzpwPjwvcD48cCBj bGFzcz1Nc29Ob3JtYWw+Jmd0OyBwcmVzZW50IGluIHRoZSBncm91cC4gT2YgY291cnNlLCBzdWNo IGEgZ3JvdXAgbWVtYmVyc2hpcCBtYXkgY2hhbmdlIG92ZXIgdGltZSwgdXBvbiBuZXcgbm9kZXM8 YnI+Jmd0O2pvaW5pbmcgdGhlIGdyb3VwLiBIb3dldmVyLCBTZWN0aW9uIDMuMSBpbiB0aGUgZHJh ZnQgc3RhdGVzIHRoYXQgJnF1b3Q7QW55IGRldmljZSBjYW4gaW4gcHJpbmNpcGxlIGRlY2lkZTxv OnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD4mZ3Q7dG8gbGlzdGVuIHRvIGFueSBJUHY2 IG11bHRpY2FzdCBhZGRyZXNzLiBUaGlzIGFsc28gbWVhbnMgYXBwbGljYXRpb25zIG9uIHRoZSBv dGhlciBkZXZpY2VzIGRvIG5vdDxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD4mZ3Q7 a25vdywgb3IgZG8gbm90IGdldCBub3RpZmllZCwgd2hlbiBuZXcgbGlzdGVuZXJzIGpvaW4gdGhl IG5ldHdvcmsuJnF1b3Q7LiBDb3VsZG4ndCB0aGlzIGJlIGEgcHJvYmxlbTxvOnA+PC9vOnA+PC9w PjxwIGNsYXNzPU1zb05vcm1hbD4mZ3Q7Zm9yIHRoZSBzdWdnZXN0ZWQgYXBwcm9hY2g/PG86cD48 L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPjxwIGNsYXNz PU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2Fs aWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPlllcywgaW4gcHJpbmNpcGxlLCBhbnkg ZGV2aWNlIGNhbiBkZWNpZGUgdG8gbGlzdGVuIGZvciBhbnkgSVB2NiBtdWx0aWNhc3QgYWRkcmVz cy4mbmJzcDsgQnV0IGluIHByYWN0aWNlIG9mIGNvdXJzZSB0aGVyZSBhcmUgSVB2NiBtdWx0aWNh c3QgcmVsYXRlZCBwcm90b2NvbHMgZm9yIHJvdXRpbmcvam9pbmluZyB0aGF0IGRpY3RhdGUgd2hv IGNhbiA8dT5zdWNjZXNzZnVsbHk8L3U+IGxpc3RlbiBmb3IgYW5kIHJlY2VpdmUgYW4gSVB2NiBt dWx0aWNhc3QgcGFja2V0LiZuYnNwOyBGb3IgZXhhbXBsZSwgdW5sZXNzIGEgZGV2aWNlIHVzZXMg YSBwcm90b2NvbCBsaWtlIE1MRCB0byBleHBsaWNpdGx5IGpvaW4gYSBtdWx0aWNhc3QgZ3JvdXAs IHRoZSBuZXR3b3JrIHdpbGwgbmV2ZXIgcm91dGUgdGhlIG11bHRpY2FzdCBwYWNrZXRzIG9mIGlu dGVyZXN0IHRvIHRoZSBzdWItbmV0d29yayBvZiB0aGUgZGV2aWNlLiZuYnNwOyBUaGlzIGlzIGFs bCBleHBsYWluZWQgYXQgYSBoaWdoIGxldmVsIGluIHRoZSBJLkQuZ3JvdXBjb21tIHJlZmVyZW5j ZSAoPGEgaHJlZj0iaHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jb3JlLWdy b3VwY29tbS0xOCNzZWN0aW9uLTIuMSI+aHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQt aWV0Zi1jb3JlLWdyb3VwY29tbS0xOCNzZWN0aW9uLTIuMTwvYT4gKSAuPG86cD48L286cD48L3Nw YW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0 OTdEJz5UaGUgb3RoZXIgcGFydCBvZiB5b3VyIHF1ZXN0aW9uIHJlZmVycyB0byBob3cgZG9lcyB0 aGUgc2VuZGVyIG5vZGUga25vdyB3aG8gaXMgcGFydCBvZiB0aGUgZ3JvdXAuJm5ic3A7IFlvdSBh cmUgY29ycmVjdCB0aGF0IGl0IGlzIHZlcnkgZGlmZmljdWx0IHRvIGtub3cgcHJlY2lzZWx5IHRo ZSBtZW1iZXJzaGlwIG9mIGEgZ3JvdXAuJm5ic3A7IFRoYXQgaXMgd2h5IHdlIGhhZCB0aGUgc3Vi dGxlIHJlZmVyZW5jZSB0byDigJxrbm93biBsaXN0ZW5lcnPigJ0uJm5ic3A7IEhvdyB5b3UgYWN0 dWFsbHkga25vdyB0aGUgbWVtYmVyc2hpcCBkZXBlbmRzIG9uIHRoZSBtaXggb2YgcHJvdG9jb2xz IHVzZWQgKGFuZCBpcyBpbiBmYWN0IGl0IGlzIG5vdCBhbHdheXMgcG9zc2libGUgdG8ga25vdyBh bGwgdGhlIG1lbWJlcnMgYWNjdXJhdGVseSkuJm5ic3A7IEJ1dCBmb3IgQ29BUCBncm91cCBtZW1i ZXIgZGlzY292ZXJ5LCB0aGVyZSBpcyAmbmJzcDthZ2FpbiBndWlkYW5jZSBnaXZlbiBpbiB0aGUg SS5ELmdyb3VwY29tbSByZWZlcmVuY2UgKHNwZWNpZmljYWxseSBpbiA8YSBocmVmPSJodHRwOi8v dG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNvcmUtZ3JvdXBjb21tLTE4I3NlY3Rpb24t Mi42Ij5odHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNvcmUtZ3JvdXBjb21t LTE4I3NlY3Rpb24tMi42PC9hPiApLiZuYnNwOyBXZSBjYW4gbWFrZSB0aGlzIHBvaW50IGEgYml0 IG1vcmUgZXhwbGljaXQgaW4gdGhlIG5leHQgdXBkYXRlIG9mIG91ciBJLUQuPG86cD48L286cD48 L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48bzpwPiZuYnNwOzwvbzpwPjwvcD48cCBjbGFz cz1Nc29Ob3JtYWw+PG86cD4mbmJzcDs8L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFu IHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJp ZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1z b05vcm1hbD4mZ3Q7MikgQW4gYWx0ZXJuYXRpdmUgYXBwcm9hY2ggdG8gdGhlIG9uZSBzdWdnZXN0 ZWQgaW4gU2VjdGlvbiA0LjUgbWF5IGNvbnNpc3QgaW4gYSBsaXN0ZW5lciBub2RlIGVzdGFibGlz aGluZzxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD4mZ3Q7IGEgdW5pY2FzdCBEVExT IHNlc3Npb24gKGkuZS4gc3RhcnRpbmcgYSBEVExTIGhhbmRzaGFrZSkgd2l0aCB0aGUgc2VuZGVy IG5vZGUsIHVwb24gcmVjZWl2aW5nIGEgbXVsdGljYXN0PG86cD48L286cD48L3A+PHAgY2xhc3M9 TXNvTm9ybWFsPiZndDsgbWVzc2FnZSBmb3IgdGhlIGZpcnN0IHRpbWUuPG86cD48L286cD48L3A+ PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPlll cywgZ29vZCBwb2ludCEmbmJzcDsgV2UgY2FuIGFkZCB0aGlzIHRvIHRoZSBJLUQgaW4gb3VyIG5l eHQgdXBkYXRlLiA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFu IHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJp ZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1z b05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJy aSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5CZXN0IFJlZ2FyZHMs PG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMx RjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNw YW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNl cmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9 TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxp YnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+QWtiYXI8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8 L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0Qn PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5 bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtj b2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9y bWFsPjxiPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJUYWhvbWEi LCJzYW5zLXNlcmlmIic+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIic+IE1hcmNvIFRpbG9jYSBbPGEg aHJlZj0ibWFpbHRvOm1hcmNvQHNpY3Muc2UiPm1haWx0bzptYXJjb0BzaWNzLnNlPC9hPl0gPGJy PjxiPlNlbnQ6PC9iPiBUdWVzZGF5LCBNYXkgMDYsIDIwMTQgMTI6MzIgUE08YnI+PGI+VG86PC9i PiBSYWhtYW4sIEFrYmFyPGJyPjxiPkNjOjwvYj4gS3VtYXIsIFNhbmRlZXA7IDxhIGhyZWY9Im1h aWx0bzpkdGxzLWlvdEBpZXRmLm9yZyI+ZHRscy1pb3RAaWV0Zi5vcmc8L2E+PGJyPjxiPlN1Ympl Y3Q6PC9iPiBSZTogW0R0bHMtaW90XSBVbmljYXN0IHJlc3BvbnNlcyBpbiBkcmFmdC1rZW9oLWRp Y2UtbXVsdGljYXN0LXNlY3VyaXR5LTA1PG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1z b05vcm1hbD48bzpwPiZuYnNwOzwvbzpwPjwvcD48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbD5IZWxs byBBa2Jhciw8bzpwPjwvbzpwPjwvcD48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbD48bzpwPiZuYnNw OzwvbzpwPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbD5UaGFua3MgZm9yIGhhdmlu ZyBjb25zaWRlcmVkIG15IHF1ZXN0aW9uLiBUaGUgbmV3IFNlY3Rpb24gNC41IGxvb2tzIGZpbmUg dG8gbWUuIEFsc28sIEkgaGF2ZSB0aGUgdHdvIGZvbGxvd2luZyBjb21tZW50cy48bzpwPjwvbzpw PjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbD48bzpwPiZuYnNwOzwvbzpwPjwvcD48 L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbD4xKSBJbiBvcmRlciB0byBwZXJmb3JtIGEgRFRM UyBoYW5kc2hha2UgYmVmb3JlL2FmdGVyIHNlbmRpbmcgYSBtdWx0aWNhc3QgbWVzc2FnZSwgYSBz ZW5kZXIgbm9kZSBzaG91bGQgYmUgYXdhcmUgb2YgdGhlIGdyb3VwIG1lbWJlcnNoaXAsIGVzcGVj aWFsbHkgd2hhdCBhcmUgdGhlIGxpc3RlbmVyIG5vZGVzIGN1cnJlbnRseSBwcmVzZW50IGluIHRo ZSBncm91cC4gT2YgY291cnNlLCBzdWNoIGEgZ3JvdXAgbWVtYmVyc2hpcCBtYXkgY2hhbmdlIG92 ZXIgdGltZSwgdXBvbiBuZXcgbm9kZXMgam9pbmluZyB0aGUgZ3JvdXAuIEhvd2V2ZXIsIFNlY3Rp b24gMy4xIGluIHRoZSBkcmFmdCBzdGF0ZXMgdGhhdCAmcXVvdDtBbnkgZGV2aWNlIGNhbiBpbiBw cmluY2lwbGUgZGVjaWRlIHRvIGxpc3RlbiB0byBhbnkgSVB2NiBtdWx0aWNhc3QgYWRkcmVzcy4g VGhpcyBhbHNvIG1lYW5zIGFwcGxpY2F0aW9ucyBvbiB0aGUgb3RoZXIgZGV2aWNlcyBkbyBub3Qg a25vdywgb3IgZG8gbm90IGdldCBub3RpZmllZCwgd2hlbiBuZXcgbGlzdGVuZXJzIGpvaW4gdGhl IG5ldHdvcmsuJnF1b3Q7LiBDb3VsZG4ndCB0aGlzIGJlIGEgcHJvYmxlbSBmb3IgdGhlIHN1Z2dl c3RlZCBhcHByb2FjaD88bzpwPjwvbzpwPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1h bD48bzpwPiZuYnNwOzwvbzpwPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbD4yKSBB biBhbHRlcm5hdGl2ZSBhcHByb2FjaCB0byB0aGUgb25lIHN1Z2dlc3RlZCBpbiBTZWN0aW9uIDQu NSBtYXkgY29uc2lzdCBpbiBhIGxpc3RlbmVyIG5vZGUgZXN0YWJsaXNoaW5nIGEgdW5pY2FzdCBE VExTIHNlc3Npb24gKGkuZS4gc3RhcnRpbmcgYSBEVExTIGhhbmRzaGFrZSkgd2l0aCB0aGUgc2Vu ZGVyIG5vZGUsIHVwb24gcmVjZWl2aW5nIGEgbXVsdGljYXN0IG1lc3NhZ2UgZm9yIHRoZSBmaXJz dCB0aW1lLjxvOnA+PC9vOnA+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsPkJlc3QgcmVnYXJk cyw8bzpwPjwvbzpwPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbD5NYXJjbzxvOnA+ PC9vOnA+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPjwv ZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPjwvZGl2Pjwv ZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtYXJnaW4tYm90dG9tOjEyLjBwdCc+ PG86cD4mbmJzcDs8L286cD48L3A+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWw+T24gNSBNYXkgMjAx NCAyMzo0NSwgUmFobWFuLCBBa2JhciAmbHQ7PGEgaHJlZj0ibWFpbHRvOkFrYmFyLlJhaG1hbkBp bnRlcmRpZ2l0YWwuY29tIiB0YXJnZXQ9Il9ibGFuayI+QWtiYXIuUmFobWFuQGludGVyZGlnaXRh bC5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD48ZGl2PjxkaXY+PHAgY2xhc3M9TXNv Tm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGli cmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5IaSBNYXJjbyw8L3NwYW4+PG86cD48L286 cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz4mbmJzcDs8 L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2Zv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjoj MUY0OTdEJz4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0 eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+ PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5z LXNlcmlmIjtjb2xvcjojMUY0OTdEJz4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xh c3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5UaGUgYXV0aG9ycyBoYXZlIG1h ZGUgYW4gdXBkYXRlIHRvIHRoZSBkcmFmdCB0byBhZGRyZXNzIGZ1bGx5IHlvdXIgZ29vZCBxdWVz dGlvbiByZWdhcmRpbmcgaG93IHRvIGhhbmRsZSB0aGUgdW5pY2FzdCByZXNwb25zZXMgdG8gdGhl IG11bHRpY2FzdCByZXNwb25zZS4mbmJzcDsgU3BlY2lmaWNhbGx5LCBwbGVhc2UgcmV2aWV3IHRo ZSBuZXcgc2VjdGlvbiA0LjUgYW5kIHRlbGwgdXMgaWYgeW91IGhhdmUgYW55IG1vcmUgcXVlc3Rp b25zOjwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHls ZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2Nv bG9yOiMxRjQ5N0QnPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3Jt YWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIs InNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD48 cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxhIGhyZWY9Imh0dHA6 Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHkt MDYjc2VjdGlvbi00LjUiIHRhcmdldD0iX2JsYW5rIj5odHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9kcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA2I3NlY3Rpb24tNC41PC9hPjwv c3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMx RjQ5N0QnPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5 bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48 c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz40 LjUuJm5ic3A7IFVuaWNhc3QgUmVzcG9uc2VzIHRvIE11bHRpY2FzdCBNZXNzYWdlczwvc3Bhbj48 bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IEluIENvQVAsIHJlc3BvbnNl cyB0byBtdWx0aWNhc3QgbWVzc2FnZXMgYXJlIGFsd2F5cyBzZW50IGJhY2sgYXM8L3NwYW4+PG86 cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IHVuaWNhc3QuJm5i c3A7IFRoYXQgaXMsIHRoZSBncm91cCBtZW1iZXJzIHRoYXQgcmVjZWl2ZSBhIG11bHRpY2FzdCBt ZXNzYWdlPC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0 eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZu YnNwOyBtYXkgaW5kaXZpZHVhbGx5IGRlY2lkZSB0byBzZW5kIChvciBzdXBwcmVzcykgYSB1bmlj YXN0IHJlc3BvbnNlIGFzPC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBz dHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8n PjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyIn PiZuYnNwOyZuYnNwOyBkZXNjcmliZWQgaW4gU2VjdGlvbiAyLjUgb2YgW0ktRC5pZXRmLWNvcmUt Z3JvdXBjb21tXS4mbmJzcDsgVGhlIHVuaWNhc3Q8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xh c3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IHJlc3BvbnNlcyB0byBhIERUTFMtYmFzZWQgbXVs dGljYXN0IG1lc3NhZ2UgbWF5IG9wdGlvbmFsbHkgYmUgc2VjdXJlLjwvc3Bhbj48bzpwPjwvbzpw PjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgU3BlY2lmaWNhbGx5LCB0aGUg dW5pY2FzdCByZXNwb25zZSBtYXkgYmUgc2VudCBiYWNrIGFzIGEgdW5pY2FzdCBEVExTPC9zcGFu PjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBhcyBkZXNj cmliZWQgaW4gU2VjdGlvbiA5LjEgb2YgW0ktRC5pZXRmLWNvcmUtY29hcF0uJm5ic3A7IFRoaXMg cmVxdWlyZXM8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4g c3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7 Jm5ic3A7IHRoYXQgYSB1bmljYXN0IERUTFMgaGFuZHNoYWtlIHdhcyBwcmV2aW91c2x5IGluaXRp YXRlZCBiZXR3ZWVuIHRoZTwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwg c3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Jz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXci Jz4mbmJzcDsmbmJzcDsgbXVsdGljYXN0IG1lc3NhZ2Ugc2VuZGVyIGFuZCBsaXN0ZW5lci4mbmJz cDsgSW4gdGhlIGV4dHJlbWUgc2NlbmFyaW8sIGE8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xh c3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IG11bHRpY2FzdCBzZW5kZXIgbWF5IGF0dGVtcHQg dG8gaW5pdGlhdGUgdGhlIHVuaWNhc3QgRFRMUyBoYW5kc2hha2U8L3NwYW4+PG86cD48L286cD48 L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IHdpdGggYWxsIG9yIGEgc3Vic2V0 IG9mIGtub3duIGxpc3RlbmVycyBqdXN0IGJlZm9yZSBvciBqdXN0IGFmdGVyIGl0PC9zcGFuPjxv OnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBzZW5kcyBvdXQg dGhlIERUTFMtYmFzZWQgbXVsdGljYXN0IG1lc3NhZ2UuJm5ic3A7IFRoaXMgbWF5IHJlc3VsdCBp biB0aGU8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5 bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5i c3A7IG11bHRpY2FzdCBzZW5kZXIgKGkuZS4gdW5pY2FzdCBEVExTIGNsaWVudCkgaGF2aW5nIHRv IHByb2Nlc3MgdW5pY2FzdDwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwg c3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Jz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXci Jz4mbmJzcDsmbmJzcDsgRFRMUyBoYW5kc2hha2UgbWVzc2FnZXMgZnJvbSBtdWx0aXBsZSBtdWx0 aWNhc3QgbGlzdGVuZXJzIChpLmUuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05v cm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVy IE5ldyInPiZuYnNwOyZuYnNwOyB1bmljYXN0IERUTFMgc2VydmVycykgaW4gYSBzaG9ydCBwZXJp b2QuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxl PSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgTm90ZTog VGhlcmUgaXMgYW4gb2J2aW91cyB0aW1pbmcgYW5kIHByb2Nlc3NpbmcgbG9hZCBpc3N1ZSBmb3Ig dGhlPC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxl PSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNw OyBtdWx0aWNhc3Qgc2VuZGVyIGluIHRoZSBzY2VuYXJpbyB3aGVyZSBpdCBhdHRlbXB0cyB0byBp bml0aWF0ZSB0aGU8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxl PSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNw YW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5i c3A7Jm5ic3A7IHVuaWNhc3QgRFRMUyBoYW5kc2hha2VzIHdpdGggYWxsL3NvbWUgb2YgaXRzIGtu b3duIGxpc3RlbmVycyBqdXN0PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1h bCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5l dyInPiZuYnNwOyZuYnNwOyBhZnRlciBpdCBzZW5kcyBvdXQgdGhlIERUTFMtYmFzZWQgbXVsdGlj YXN0IG1lc3NhZ2UuJm5ic3A7IEluIHRoaXMgY2FzZSw8L3NwYW4+PG86cD48L286cD48L3A+PHAg Y2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IHRoZSBwcm9jZXNzaW5nIGxvYWQgaW4gdGhl IG11bHRpY2FzdCBzZW5kZXIgKGkuZS4gdW5pY2FzdCBEVExTPC9zcGFuPjxvOnA+PC9vOnA+PC9w PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBjbGllbnQpIGlzIHJlZHVjZWQgc29t ZXdoYXQgYnkgdGhlIGZhY3QgdGhhdCBDb0FQIHJlcXVpcmVzIGEgYmFjay1vZmY8L3NwYW4+PG86 cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IGFuZCByYW5kb21p emF0aW9uIG9mIHRoZSB1bmljYXN0IHJlc3BvbnNlIGJ5IHRoZSBMZWlzdXJlIHRpbWVyPC9zcGFu PjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBtZWNoYW5p c20gYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gOC4yIG9mIFtJLUQuaWV0Zi1jb3JlLWNvYXBdLjwv c3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDs8L3NwYW4+PG86 cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5 bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtj b2xvcjojMUY0OTdEJz4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9y bWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmki LCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+ PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5CZXN0IFJlZ2FyZHMs PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6 IzFGNDk3RCc+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBz dHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8n PjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fu cy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNs YXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+QWtiYXI8L3NwYW4+PG86cD48 L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz4mbmJz cDs8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9 J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xv cjojMUY0OTdEJz4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFs IHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJz YW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+PGRp dj48ZGl2IHN0eWxlPSdib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7 cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbic+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PGI+PHNwYW4g c3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYi Jz5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiJz4gZHRscy1pb3QgW21haWx0bzo8YSBocmVmPSJtYWls dG86ZHRscy1pb3QtYm91bmNlc0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmR0bHMtaW90LWJv dW5jZXNAaWV0Zi5vcmc8L2E+XSA8Yj5PbiBCZWhhbGYgT2YgPC9iPkt1bWFyLCBTYW5kZWVwPGJy PjxiPlNlbnQ6PC9iPiBXZWRuZXNkYXksIEFwcmlsIDAyLCAyMDE0IDM6NDcgQU08YnI+PGI+VG86 PC9iPiBNYXJjbyBUaWxvY2E7IDxhIGhyZWY9Im1haWx0bzpkdGxzLWlvdEBpZXRmLm9yZyIgdGFy Z2V0PSJfYmxhbmsiPmR0bHMtaW90QGlldGYub3JnPC9hPjxicj48Yj5TdWJqZWN0OjwvYj4gUmU6 IFtEdGxzLWlvdF0gVW5pY2FzdCByZXNwb25zZXMgaW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2Fz dC1zZWN1cml0eS0wNTwvc3Bhbj48bzpwPjwvbzpwPjwvcD48L2Rpdj48L2Rpdj48ZGl2PjxkaXY+ PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byc+Jm5ic3A7PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9y bWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmki LCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5IaSBNYXJjbzwvc3Bhbj48bzpwPjwvbzpwPjwv cD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPiZuYnNwOzwvc3Bh bj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5 N0QnPlRoZSBkcmFmdCBvbmx5IGFkZHJlc3NlcyB0aGUgcHJvdGVjdGlvbiBvZiBtdWx0aWNhc3Qg dHJhZmZpYy4gSWYgdW5pY2FzdCByZXNwb25zZXMgYXJlIGV4cGVjdGVkIGFuZCBpZiBwcm90ZWN0 aW9uIGlzIHJlcXVpcmVkIGZvciBzdWNoIG1lc3NhZ2VzLCB0aGVuIGV4aXN0aW5nIHVuaWNhc3Qg cHJvdGVjdGlvbiBtZWNoYW5pc21zIGJhc2VkIG9uIERUTFMgYXMgc3VnZ2VzdGVkIGluIGRyYWZ0 LWlldGYtY29yZS1jb2FwLTE4IHNob3VsZCBiZSB1c2VkLiBQcm90ZWN0aW9uIG9mIGFsbCB1bmlj YXN0IG1lc3NhZ2VzIHNob3VsZCBiZSB0cmVhdGVkIGFzIHdvdWxkIGJlIGRvbmUgbm9ybWFsbHku IDwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0n Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9y OiMxRjQ5N0QnPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwg c3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Jz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNh bnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPkhvcGUgdGhhdCBhbnN3ZXJzIHlvdXIgcXVlc3Rpb24u PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6 IzFGNDk3RCc+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBz dHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8n PjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fu cy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+UmVnYXJkczwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBj bGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPlNhbmRlZXAgPC9zcGFuPjxv OnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+ Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxkaXYgc3R5bGU9J2JvcmRlcjpub25lO2JvcmRl ci1sZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCc+PGRpdj48 ZGl2IHN0eWxlPSdib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFk ZGluZzozLjBwdCAwaW4gMGluIDBpbic+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PGI+PHNwYW4gc3R5 bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiJz5G cm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 IlRhaG9tYSIsInNhbnMtc2VyaWYiJz4gZHRscy1pb3QgWzxhIGhyZWY9Im1haWx0bzpkdGxzLWlv dC1ib3VuY2VzQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+bWFpbHRvOmR0bHMtaW90LWJvdW5j ZXNAaWV0Zi5vcmc8L2E+XSA8Yj5PbiBCZWhhbGYgT2YgPC9iPk1hcmNvIFRpbG9jYTxicj48Yj5T ZW50OjwvYj4gVHVlc2RheSwgQXByaWwgMDEsIDIwMTQgNjozNSBQTTxicj48Yj5Ubzo8L2I+IDxh IGhyZWY9Im1haWx0bzpkdGxzLWlvdEBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmR0bHMtaW90 QGlldGYub3JnPC9hPjxicj48Yj5TdWJqZWN0OjwvYj4gW0R0bHMtaW90XSBVbmljYXN0IHJlc3Bv bnNlcyBpbiBkcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA1PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPjwvZGl2PjwvZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPiZuYnNwOzxvOnA+PC9v OnA+PC9wPjxkaXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz5EZWFyIGFsbCw8bzpwPjwvbzpw PjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPiZuYnNwOzxvOnA+PC9vOnA+PC9w PjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+QXMgdG8gcG9zc2libGUgcmVzcG9uc2Vz IHRvIG11bHRpY2FzdCByZXF1ZXN0cywgU2VjdGlvbiAyLjEgc3RhdGVzIHRoYXQgdGhleSBhcmUg c2VudCBiYWNrIGluIHVuaWNhc3QuIFRoZW4sIG5vIGZ1cnRoZXIgZGV0YWlscyBhcmUgcHJvdmlk ZWQgYWJvdXQgdGhlaXIgcHJvdGVjdGlvbi48bzpwPjwvbzpwPjwvcD48L2Rpdj48ZGl2PjxwIGNs YXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8nPiZuYnNwOzxvOnA+PC9vOnA+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9 TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byc+QXJlIHN1Y2ggcmVzcG9uc2VzIHN1cHBvc2VkIHRvIGJlIHByb3RlY3RlZCB0 aHJvdWdoIGEgJnF1b3Q7cmVndWxhciZxdW90OyBEVExTIHNlc3Npb24sIHdoaWNoIG11c3QgYmUg KG9yIGhhcyBwcmV2aW91c2x5IGJlZW4pIGVzdGFibGlzaGVkIGJldHdlZW4gdGhlIHNlbmRlciBh bmQgbGlzdGVuZXI/PG86cD48L286cD48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWwg c3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Jz4mbmJzcDs8bzpwPjwvbzpwPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBzdHls ZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPkNo ZWVycyw8bzpwPjwvbzpwPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0n bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPk1hcmNv PG86cD48L286cD48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz4mbmJzcDs8bzpw PjwvbzpwPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPiZuYnNwOzxvOnA+PC9v OnA+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+Jm5ic3A7PG86cD48L286cD48 L3A+PC9kaXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz4mbmJzcDs8bzpwPjwvbzpwPjwvcD48 L2Rpdj48L2Rpdj48L2Rpdj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz4mbmJzcDs8bzpwPjwvbzpwPjwv cD48ZGl2IGNsYXNzPU1zb05vcm1hbCBhbGlnbj1jZW50ZXIgc3R5bGU9J3RleHQtYWxpZ246Y2Vu dGVyJz48aHIgc2l6ZT0yIHdpZHRoPSIxMDAlIiBhbGlnbj1jZW50ZXI+PC9kaXY+PHAgY2xhc3M9 TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTo3LjVwdDtmb250LWZhbWlseToiQXJp YWwiLCJzYW5zLXNlcmlmIjtjb2xvcjpncmF5Jz5UaGUgaW5mb3JtYXRpb24gY29udGFpbmVkIGlu IHRoaXMgbWVzc2FnZSBtYXkgYmUgY29uZmlkZW50aWFsIGFuZCBsZWdhbGx5IHByb3RlY3RlZCB1 bmRlciBhcHBsaWNhYmxlIGxhdy4gVGhlIG1lc3NhZ2UgaXMgaW50ZW5kZWQgc29sZWx5IGZvciB0 aGUgYWRkcmVzc2VlKHMpLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCB5 b3UgYXJlIGhlcmVieSBub3RpZmllZCB0aGF0IGFueSB1c2UsIGZvcndhcmRpbmcsIGRpc3NlbWlu YXRpb24sIG9yIHJlcHJvZHVjdGlvbiBvZiB0aGlzIG1lc3NhZ2UgaXMgc3RyaWN0bHkgcHJvaGli aXRlZCBhbmQgbWF5IGJlIHVubGF3ZnVsLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVj aXBpZW50LCBwbGVhc2UgY29udGFjdCB0aGUgc2VuZGVyIGJ5IHJldHVybiBlLW1haWwgYW5kIGRl c3Ryb3kgYWxsIGNvcGllcyBvZiB0aGUgb3JpZ2luYWwgbWVzc2FnZS48L3NwYW4+PG86cD48L286 cD48L3A+PC9kaXY+PC9kaXY+PC9kaXY+PC9kaXY+PC9kaXY+PHAgY2xhc3M9TXNvTm9ybWFsPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPjwvZGl2PjwvZGl2PjwvYm9keT48L2h0bWw+ ------_=_NextPart_001_01CF73A1.A9F11445-- From nobody Tue May 20 05:29:19 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 66A4A1A06DA for ; Tue, 20 May 2014 05:29:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xhXBfwLAyfcm for ; Tue, 20 May 2014 05:29:13 -0700 (PDT) Received: from ch1outboundpool.messaging.microsoft.com (ch1ehsobe002.messaging.microsoft.com [216.32.181.182]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 021971A06D6 for ; Tue, 20 May 2014 05:29:12 -0700 (PDT) Received: from mail54-ch1-R.bigfish.com (10.43.68.250) by CH1EHSOBE020.bigfish.com (10.43.70.77) with Microsoft SMTP Server id 14.1.225.22; Tue, 20 May 2014 12:29:12 +0000 Received: from mail54-ch1 (localhost [127.0.0.1]) by mail54-ch1-R.bigfish.com (Postfix) with ESMTP id 008F240232; Tue, 20 May 2014 12:29:12 +0000 (UTC) X-Forefront-Antispam-Report: CIP:206.191.242.69; KIP:(null); UIP:(null); IPV:NLI; H:mail.philips.com; RD:error; EFVD:FOP X-SpamScore: -25 X-BigFish: VPS-25(z579ehz98dI15d6I9371Ic89bh148cIe0eah1432Ic857h9251I1447I217bIdd85kzz1f42h1ee6h1de0h1fdah2073h2146h1202h1e76h2189h1d1ah1d2ah21bch1fc6h208chzz1d7338h1de098h1033IL1df219h17326ah18de19h8275bh8275dh18c673h1de097h186068hz2dh109h2a8h839hd25hf0ah1288h12a5h12bdh137ah1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h19b5h19ceh1ad9h1b0ah1b2fh1bceh2222h224fh1fb3h1d0ch1d2eh1d3fh1dfeh1dffh1e1dh1fe8h1ff5h20f0h2216h22d0h2336h2438h2461h2487h24ach24d7h2516h2545h255eh25f6h2605h268bh26d3h27e2h) Received: from mail54-ch1 (localhost.localdomain [127.0.0.1]) by mail54-ch1 (MessageSwitch) id 140058894976275_29681; Tue, 20 May 2014 12:29:09 +0000 (UTC) Received: from CH1EHSMHS002.bigfish.com (snatpool2.int.messaging.microsoft.com [10.43.68.238]) by mail54-ch1.bigfish.com (Postfix) with ESMTP id 035FD201D9; Tue, 20 May 2014 12:29:09 +0000 (UTC) Received: from mail.philips.com (206.191.242.69) by CH1EHSMHS002.bigfish.com (10.43.70.2) with Microsoft SMTP Server (TLS) id 14.16.227.3; Tue, 20 May 2014 12:29:08 +0000 Received: from AMSPRD9003MB066.MGDPHG.emi.philips.com ([169.254.5.57]) by AMSPRD9003HT003.MGDPHG.emi.philips.com ([141.251.33.80]) with mapi id 14.16.0423.000; Tue, 20 May 2014 12:28:56 +0000 From: "Dijk, Esko" To: "Rahman, Akbar" Thread-Topic: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 Thread-Index: AQHPTke1MAdfpqid3kOruFyexTfVEJsyuiUAgAE6ooCAAEaMgIAEpRcAgA93i1CAAEkTgIABCnEg Date: Tue, 20 May 2014 12:28:56 +0000 Message-ID: <031DD135F9160444ABBE3B0C36CED61836D7B49E@AMSPRD9003MB066.MGDPHG.emi.philips.com> References: <031DD135F9160444ABBE3B0C36CED61836D7A1E1@AMSPRD9003MB066.MGDPHG.emi.philips.com> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [194.171.252.106] Content-Type: multipart/alternative; boundary="_000_031DD135F9160444ABBE3B0C36CED61836D7B49EAMSPRD9003MB066_" MIME-Version: 1.0 X-OriginatorOrg: philips.com X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn% Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/hi7cxO_Zba1V66MMBP_SQj7JxO4 Cc: Marco Tiloca , "Kumar, Sandeep" , "dtls-iot@ietf.org" Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 May 2014 12:29:17 -0000 --_000_031DD135F9160444ABBE3B0C36CED61836D7B49EAMSPRD9003MB066_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgQWtiYXIsDQoNCm9uIHBvaW50IDEuIHRoZXJlIGFyZSB0d28gY29uY2VybnMgdGhhdCBuZWVk IHRvIGJlIGFkZHJlc3NlZDoNCg0KMUEuIHJlc3BvbmRpbmcgdW5zZWN1cmVkIGFmdGVyIGEgc2Vj dXJlZCByZXF1ZXN0IHNlZW1zIGEgdmlvbGF0aW9uIG9mIHNlY3VyaXR5IHByaW5jaXBsZXMgYW5k IHRoZSDigJhzcGlyaXTigJkgb2YgQ29BUC0xOC4gRS5nLiB0aGUgcmVzcG9uc2UgY291bGQgYmUg dGFtcGVyZWQgd2l0aC4gV2hhdCB3ZSBjb3VsZCBkbyBpcyB0byBlLmcuIGhhdmUgYSBTSE9VTEQg cmVxdWlyZW1lbnQgZm9yIHNlY3VyZWQgcmVzcG9uc2U7IHdoaWNoIHRoZSBleGNlcHRpb24gY2Fz ZSBiZWluZyBhIHJlc3BvbnNlIHRoYXQgZG9lcyBub3QgY29udGFpbiBhbnkgY3JpdGljYWwvY29u ZmlkZW50aWFsIGluZm9ybWF0aW9uLiBTdWNoIGFzIGEg4oCcMi4wNCBDaGFuZ2Vk4oCdIG9yIOKA nDIuMDIgRGVsZXRlZOKAnSByZXNwb25zZSB3aGljaCBkb2VzIG5vdCBjb250YWluIGFueSBmdXJ0 aGVyIHBheWxvYWQuIEJ1dCBldmVuIGRvaW5nIHRoYXQgdGhlcmUgbWF5IGJlIHVuaW50ZW5kZWQg c2VjdXJpdHkgY29uc2VxdWVuY2VzLCBlLmcuIHJlc3BvbnNlIHNwb29maW5nIG9yIHRhbXBlcmlu Zy4NCg0KMUIuIGlmIHN0YW5kYXJkIENvQVAgbWF0Y2hpbmcgcnVsZXMgYXJlIG5vdCBmb2xsb3dl ZCwgdGhlIG5ldyBtYXRjaGluZyBydWxlcyBuZWVkIHRvIGJlIGRlZmluZWQuIFdoYXQgY29tcGxp Y2F0ZXMgdGhpcyBpcyB0aGF0IGEgY2xpZW50IGRvZXNu4oCZdCBrbm93IGEgcHJpb3JpIGlmIHRo ZSBzZXJ2ZXIgd291bGQgcmVzcG9uZCBEVExTLXNlY3VyZWQgb3Igbm90LiBTbyBpdCBuZWVkcyB0 d28gbWV0aG9kcyBvZiBtYXRjaGluZywgb25lIGZvciBzZWN1cmVkIHJlc3BvbnNlcyBhbmQgYW5v dGhlciBmb3IgdW5zZWN1cmVkIG9uZXMuDQoNClRoZSBhYm92ZSBpc3N1ZXMgdG9nZXRoZXIgc2Vl bSBxdWl0ZSBzZXJpb3VzLiAgUGVyaGFwcyBhbiBhbHRlcm5hdGl2ZSBzb2x1dGlvbiBpcyBiZXR0 ZXIgaW4gd2hpY2ggdGhlIGdyb3VwIGtleSBpcyB1c2VkIHRvIERUTFMtcHJvdGVjdCB0aGUgcmVz cG9uc2UuIE9yIGFsdGVybmF0aXZlbHksIGEgc2VwYXJhdGUg4oCccmVjZWl2ZXJz4oCdIHNlY3Vy aXR5IGdyb3VwIGNvdWxkIGJlIGNyZWF0ZWQgdGhhdCBhbGxvd3MgZWFjaCByZWNlaXZlciB0byBy ZXNwb25kIGFuZCB0aGUgc2VuZGVyIHRvIHJlYWQgdGhlIHJlc3BvbnNlLCBidXQgbm9kZXMgb3V0 c2lkZSB0aGUgc2VuZGVyL3JlY2VpdmVyIGdyb3VwcyBjYW5ub3QgYWNjZXNzIHRoZSBtZXNzYWdl cyB0aHVzIGV4Y2hhbmdlZC4NCg0KT24gcG9pbnQgMi4gSSBhZ3JlZS4NCg0KRXNrbw0KDQpGcm9t OiBSYWhtYW4sIEFrYmFyIFttYWlsdG86QWtiYXIuUmFobWFuQEludGVyRGlnaXRhbC5jb21dDQpT ZW50OiBNb25kYXksIE1heSAxOSwgMjAxNCAyMjozNA0KVG86IERpamssIEVza28NCkNjOiBLdW1h ciwgU2FuZGVlcDsgZHRscy1pb3RAaWV0Zi5vcmc7IE1hcmNvIFRpbG9jYQ0KU3ViamVjdDogUkU6 IFtEdGxzLWlvdF0gVW5pY2FzdCByZXNwb25zZXMgaW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2Fz dC1zZWN1cml0eS0wNQ0KDQpIaSBFc2tvLA0KDQoNClRoYW5rcyBmb3IgdGhlIGZlZWRiYWNrLg0K DQoNCj4gSXQgc2VlbXMgdW5zZWN1cmVkIHJlc3BvbnNlcyBhcmUgbm90IHBvc3NpYmxlIHdpdGhv dXQgYWx0ZXJpbmcgdGhlIENvQVAgcmVxdWVzdC9yZXNwb25zZSBtYXRjaGluZyBydWxlcy4NCg0K WWVzLCBidXQgYXMgeW91IGtub3cgdGhlIGN1cnJlbnQgY29yZS1jb2FwLTE4IHRleHQgaXMgb2J2 aW91c2x5IHdyaXR0ZW4gZm9yIHVuaWNhc3QgRFRMUyByZXF1ZXN0IGFuZCByZXNwb25zZS4gIFdl IGFyZSBubyBsb25nZXIgZGVhbGluZyB3aXRoIHRoYXQgYXMgd2UgaGF2ZSBtdWx0aWNhc3QgRFRM UyByZXF1ZXN0LCBhbmQgcG90ZW50aWFsbHkgdW5pY2FzdCBEVExTIHJlc3BvbnNlLiAgKFRoYXQg d2FzIHRoZSBvcmlnaW5hbCB2YWx1ZSBpbiB0aGUgcXVlc3Rpb24gYXNrZWQgYnkgTWFyY28pLiAg QnV0IEkgZG8gYWdyZWUgd2l0aCB5b3VyIHBvaW50IHRoYXQgdGhlIGJhc2UgY29yZS1jb2FwLTE4 IG9wZXJhdGlvbiB3b3VsZCBiZSBhZmZlY3RlZCwgYW5kIHRoYSAgdGhpcyBjaGFuZ2UgbXVzdCBi ZSBjbGVhcmx5IGNhcHR1cmVkLiAgIEFuZCBJIGd1ZXNzIGh0dHA6Ly90b29scy5pZXRmLm9yZy9o dG1sL2RyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDcjc2VjdGlvbi00LjUgd291 bGQgYmUgdGhlIG5vcm1hdGl2ZSB1cGRhdGUuICBTbyB3ZSBoYXZlIHRvIG1ha2UgdGhlIHRleHQg Y2xlYXIuICBEbyB5b3UgdGhpbmsgd2UgbmVlZCB0byBleHBsYWluIGl0IGJldHRlcj8NCg0KDQot PiBDb21wYXJlIHRvIHNlY3Rpb24gOS4xLjEgb2YgY29yZS1jb2FwOiDigJxUaGUgZW5kcG9pbnQg YWN0aW5nIGFzIHRoZSBDb0FQIGNsaWVudCBzaG91bGQgYWxzbyBhY3QgYXMgdGhlIERUTFMgY2xp ZW50LiAgSXQgc2hvdWxkIGluaXRpYXRlIGEgc2Vzc2lvbiB0byB0aGUgc2VydmVyIG9uIHRoZSBh cHByb3ByaWF0ZSBwb3J0LuKAnQ0KDQpBZ2FpbiwgSSB1bmRlcnN0b29kIHRoYXQgdGhpcyB3YXMg b3JpZ2luYWxseSB3cml0dGVuIGZyb20gdGhlIHBvaW50IG9mIHZpZXcgb2YgYSBub3JtYWwgdW5p Y2FzdCBDb0FQIHJlcXVlc3QuICBNZWFuaW5nIHRoYXQgYSBDb0FQIGNsaWVudCB3b3VsZCBoYXZl IGluaXRpYWxseSBwZXJmb3JtZWQgYSByZXF1ZXN0IChlLmcuIEdFVCkgYW5kIHRodXMgc2hvdWxk IGJlIHRoZSBvbmUgdGhhdCBkZWNpZGVzIGlmIHRoZSBHRVQgc2hvdWxkIGJlIHNlY3VyZSBvciBu b3QuICBBZ2FpbiB0aGlzIGxvZ2ljIGRvZXMgbm90IGFwcGx5IGRpcmVjdGx5IGZvciB0aGUgbXVs dGljYXN0IGNhc2UgYmVjYXVzZSB0aGUgaW50ZXJhY3Rpb25zIGFyZSBkaWZmZXJlbnQuICBTbyBJ IGFncmVlIHRoYXQgd2UgbmVlZCB0byBleHBsaWNpdGx5IHN0YXRlIGluIGRyYWZ0LWtlb2gtZGlj ZS1tdWx0aWNhc3QgdGhhdCB3ZSBhcmUgZGV2aWF0aW5nIGZyb20gdGhlIG9yaWdpbmFsIGNvcmUt Y29hcC0xOCBhcHByb2FjaC4NCg0KDQoNCkJlc3QgUmVnYXJkcywNCg0KDQpBa2Jhcg0KDQpGcm9t OiBEaWprLCBFc2tvIFttYWlsdG86ZXNrby5kaWprQHBoaWxpcHMuY29tXQ0KU2VudDogTW9uZGF5 LCBNYXkgMTksIDIwMTQgMTI6MDIgUE0NClRvOiBSYWhtYW4sIEFrYmFyOyBNYXJjbyBUaWxvY2EN CkNjOiBLdW1hciwgU2FuZGVlcDsgZHRscy1pb3RAaWV0Zi5vcmc8bWFpbHRvOmR0bHMtaW90QGll dGYub3JnPg0KU3ViamVjdDogUkU6IFtEdGxzLWlvdF0gVW5pY2FzdCByZXNwb25zZXMgaW4gZHJh ZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNQ0KDQpIaSBBa2JhciwNCg0KYXBvbG9n aWVzIGZvciBteSBsYXRlIGlucHV0ISBPbiB0aGUgbmV3IHRleHQsIHR3byBwb2ludHMgKHNlZSBi ZWxvdykgbWF5IG5lZWQgc29tZSBmdXJ0aGVyIGRpc2N1c3Npb24uIEhlcmUgd2UgZGV2aWF0ZSBm cm9tIHRoZSBzcGlyaXQgb2YgY29yZS1jb2FwLTE4LCB3aGljaCBtYXkgbmVlZCB0byBiZSBwb2lu dGVkIG91dCBpbiB0aGUgdGV4dCBleHBsaWNpdGx5LCBpZiB0aGUgZGV2aWF0aW9uIGlzIGNvbnNp ZGVyZWQgYWNjZXB0YWJsZS4NCg0KMS4gVW5zZWN1cmVkIHJlc3BvbnNlcw0K4oCcVGhlIHVuaWNh c3QgcmVzcG9uc2VzIHRvIGEgRFRMUy1iYXNlZCBtdWx0aWNhc3QgbWVzc2FnZSBtYXkgb3B0aW9u YWxseSBiZSBzZWN1cmXigJ0NCi0+IENvbXBhcmUgdG8gc2VjdGlvbiA5LjEuMiBvZiBjb3JlLWNv YXA6DQrigJxUaGlzIG1lYW5zIHRoZSByZXNwb25zZSB0byBhIERUTFMgc2VjdXJlZCByZXF1ZXN0 IE1VU1QgYWx3YXlzIGJlIERUTFMNCiAgIHNlY3VyZWQgdXNpbmcgdGhlIHNhbWUgc2VjdXJpdHkg c2Vzc2lvbiBhbmQgZXBvY2guICBBbnkgYXR0ZW1wdCB0bw0KICAgc3VwcGx5IGEgTm9TZWMgcmVz cG9uc2UgdG8gYSBEVExTIHJlcXVlc3Qgc2ltcGx5IGRvZXMgbm90IG1hdGNoIHRoZQ0KICAgcmVx dWVzdCBhbmQgKHVubGVzcyBpdCBkb2VzIG1hdGNoIGFuIHVucmVsYXRlZCBOb1NlYyByZXF1ZXN0 KQ0KICAgdGhlcmVmb3JlIE1VU1QgYmUgcmVqZWN0ZWQu4oCcDQoNCkl0IHNlZW1zIHVuc2VjdXJl ZCByZXNwb25zZXMgYXJlIG5vdCBwb3NzaWJsZSB3aXRob3V0IGFsdGVyaW5nIHRoZSBDb0FQIHJl cXVlc3QvcmVzcG9uc2UgbWF0Y2hpbmcgcnVsZXMuDQoNCjIuIFdobyBpbml0aWF0ZXMgdGhlIGhh bmRzaGFrZQ0K4oCcRWl0aGVyIHRoZSBtdWx0aWNhc3QgbWVzc2FnZSBzZW5kZXIgb3IgbGlzdGVu ZXIgbWF5IGluaXRpYXRlIHRoZQ0KICAgdW5pY2FzdCBEVExTIGhhbmRzaGFrZS4g4oCcDQotPiBD b21wYXJlIHRvIHNlY3Rpb24gOS4xLjEgb2YgY29yZS1jb2FwOg0K4oCcVGhlIGVuZHBvaW50IGFj dGluZyBhcyB0aGUgQ29BUCBjbGllbnQgc2hvdWxkIGFsc28gYWN0IGFzIHRoZSBEVExTDQogICBj bGllbnQuICBJdCBzaG91bGQgaW5pdGlhdGUgYSBzZXNzaW9uIHRvIHRoZSBzZXJ2ZXIgb24gdGhl DQogICBhcHByb3ByaWF0ZSBwb3J0LuKAnQ0KDQpiZXN0IHJlZ2FyZHMsDQpFc2tvDQoNCkZyb206 IGR0bHMtaW90IFttYWlsdG86ZHRscy1pb3QtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9m IFJhaG1hbiwgQWtiYXINClNlbnQ6IEZyaWRheSwgTWF5IDA5LCAyMDE0IDIxOjQwDQpUbzogTWFy Y28gVGlsb2NhDQpDYzogS3VtYXIsIFNhbmRlZXA7IGR0bHMtaW90QGlldGYub3JnPG1haWx0bzpk dGxzLWlvdEBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbRHRscy1pb3RdIFVuaWNhc3QgcmVzcG9u c2VzIGluIGRyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDUNCg0KSGkgTWFyY28s DQoNCg0KV2UgaGF2ZSB1cGRhdGVkIHRoZSBkcmFmdCB0byBjYXB0dXJlIHlvdXIgcmVtYWluaW5n IGNvbW1lbnRzIGJlbG93LiAgUGxlYXNlIHJldmlldyBhbmQgdGVsbCB1cyBpZiB5b3UgaGF2ZSBh bnkgb3RoZXIgY29tbWVudHMuDQoNCg0KaHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQt a2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNyNzZWN0aW9uLTQuNQ0KDQoNCjQuNS4gIFVu aWNhc3QgUmVzcG9uc2VzIHRvIE11bHRpY2FzdCBNZXNzYWdlcw0KDQogICBJbiBDb0FQLCByZXNw b25zZXMgdG8gbXVsdGljYXN0IG1lc3NhZ2VzIGFyZSBhbHdheXMgc2VudCBiYWNrIGFzDQogICB1 bmljYXN0LiAgVGhhdCBpcywgdGhlIGdyb3VwIG1lbWJlcnMgdGhhdCByZWNlaXZlIGEgbXVsdGlj YXN0IG1lc3NhZ2UNCiAgIG1heSBpbmRpdmlkdWFsbHkgZGVjaWRlIHRvIHNlbmQgKG9yIHN1cHBy ZXNzKSBhIHVuaWNhc3QgcmVzcG9uc2UgYXMNCiAgIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDIuNSBv ZiBbSS1ELmlldGYtY29yZS1ncm91cGNvbW1dLiAgVGhlIHVuaWNhc3QNCiAgIHJlc3BvbnNlcyB0 byBhIERUTFMtYmFzZWQgbXVsdGljYXN0IG1lc3NhZ2UgbWF5IG9wdGlvbmFsbHkgYmUgc2VjdXJl Lg0KICAgU3BlY2lmaWNhbGx5LCB0aGUgdW5pY2FzdCByZXNwb25zZSBtYXkgYmUgc2VudCBiYWNr IGFzIGEgdW5pY2FzdCBEVExTDQogICBhcyBkZXNjcmliZWQgaW4gU2VjdGlvbiA5LjEgb2YgW0kt RC5pZXRmLWNvcmUtY29hcF0uICBUaGlzIHJlcXVpcmVzDQogICB0aGF0IGEgdW5pY2FzdCBEVExT IGhhbmRzaGFrZSB3YXMgcHJldmlvdXNseSBpbml0aWF0ZWQgYmV0d2VlbiB0aGUNCiAgIG11bHRp Y2FzdCBtZXNzYWdlIHNlbmRlciBhbmQgbGlzdGVuZXIuDQoNCiAgIEVpdGhlciB0aGUgbXVsdGlj YXN0IG1lc3NhZ2Ugc2VuZGVyIG9yIGxpc3RlbmVyIG1heSBpbml0aWF0ZSB0aGUNCiAgIHVuaWNh c3QgRFRMUyBoYW5kc2hha2UuICBJZiB0aGUgRFRMUyBoYW5kc2hha2Ugd2FzIGluaXRpYXRlZCBi eSB0aGUNCiAgIG11bHRpY2FzdCBtZXNzYWdlIHNlbmRlciwgaXQgcmVxdWlyZXMgdGhhdCB0aGUg c2VuZGVyIGJlIGF3YXJlIG9mIHRoZQ0KICAgbWVtYmVyc2hpcCBvZiB0aGUgbXVsdGljYXN0IGdy b3VwLiAgVGhpcyBjYW4gYmUgYWNjb21wbGlzaGVkLCBmb3INCiAgIGV4YW1wbGUsIGFzIGRlc2Ny aWJlZCBpbiBTZWN0aW9uIDIuNiBvZiBbSS1ELmlldGYtY29yZS1jb2FwXS4gIElmIHRoZQ0KICAg bGlzdGVuZXIgaW5pdGlhdGVkIHRoZSBEVExTIGhhbmRzaGFrZSwgaXQgbWF5IGhhdmUgZG9uZSBz bywgZm9yDQogICBleGFtcGxlLCBhZnRlciByZWNlaXZpbmcgYSBtdWx0aWNhc3QgbWVzc2FnZSBm b3IgdGhlIGZpcnN0IHRpbWUuDQoNCiAgIEluIHRoZSBleHRyZW1lIHNjZW5hcmlvLCBhIG11bHRp Y2FzdCBzZW5kZXIgbWF5IGF0dGVtcHQgdG8gaW5pdGlhdGUNCiAgIHRoZSB1bmljYXN0IERUTFMg aGFuZHNoYWtlIHdpdGggYWxsLCBvciBhIHN1YnNldCBvZiwga25vd24gbGlzdGVuZXJzDQogICBq dXN0IGFmdGVyIGl0IHNlbmRzIG91dCB0aGUgRFRMUy1iYXNlZCBtdWx0aWNhc3QgbWVzc2FnZS4g IFRoaXMgbWF5DQogICByZXN1bHQgaW4gdGhlIG11bHRpY2FzdCBzZW5kZXIgaGF2aW5nIHRvIHBy b2Nlc3MgdW5pY2FzdCBEVExTDQogICBoYW5kc2hha2UgbWVzc2FnZXMgZnJvbSBtdWx0aXBsZSBt dWx0aWNhc3QgbGlzdGVuZXJzIGluIGEgc2hvcnQNCiAgIHBlcmlvZC4NCg0KICAgTm90ZTogVGhl cmUgaXMgYW4gb2J2aW91cyB0aW1pbmcgYW5kIHByb2Nlc3NpbmcgbG9hZCBpc3N1ZSBmb3IgdGhl DQogICBtdWx0aWNhc3Qgc2VuZGVyIGluIHRoZSBzY2VuYXJpbyB3aGVyZSBpdCBhdHRlbXB0cyB0 byBpbml0aWF0ZSB0aGUNCiAgIHVuaWNhc3QgRFRMUyBoYW5kc2hha2VzIHdpdGggYWxsL3NvbWUg b2YgaXRzIGtub3duIGxpc3RlbmVycyBqdXN0DQogICBhZnRlciBpdCBzZW5kcyBvdXQgdGhlIERU TFMtYmFzZWQgbXVsdGljYXN0IG1lc3NhZ2UuICBJbiB0aGlzIGNhc2UsDQogICB0aGUgcHJvY2Vz c2luZyBsb2FkIGluIHRoZSBtdWx0aWNhc3Qgc2VuZGVyIChpLmUuIHVuaWNhc3QgRFRMUw0KICAg Y2xpZW50KSBpcyByZWR1Y2VkIHNvbWV3aGF0IGJ5IHRoZSBmYWN0IHRoYXQgQ29BUCByZXF1aXJl cyBhIGJhY2stb2ZmDQogICBhbmQgcmFuZG9taXphdGlvbiBvZiB0aGUgdW5pY2FzdCByZXNwb25z ZSBieSB0aGUgTGVpc3VyZSB0aW1lcg0KICAgbWVjaGFuaXNtIGFzIGRlc2NyaWJlZCBpbiBTZWN0 aW9uIDguMiBvZiBbSS1ELmlldGYtY29yZS1jb2FwXS4NCg0KDQoNCkJlc3QgUmVnYXJkcywNCg0K DQpBa2Jhcg0KDQoNCg0KRnJvbTogZHRscy1pb3QgW21haWx0bzpkdGxzLWlvdC1ib3VuY2VzQGll dGYub3JnXSBPbiBCZWhhbGYgT2YgUmFobWFuLCBBa2Jhcg0KU2VudDogVHVlc2RheSwgTWF5IDA2 LCAyMDE0IDQ6NDQgUE0NClRvOiBNYXJjbyBUaWxvY2ENCkNjOiBLdW1hciwgU2FuZGVlcDsgZHRs cy1pb3RAaWV0Zi5vcmc8bWFpbHRvOmR0bHMtaW90QGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtE dGxzLWlvdF0gVW5pY2FzdCByZXNwb25zZXMgaW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1z ZWN1cml0eS0wNQ0KDQpIaSBNYXJjbywNCg0KDQpUaGFua3MgZm9yIHJldmlld2luZyB0aGUgdXBk YXRlZCBkcmFmdC4gIEFsc28gaGVyZSBpcyBteSBmZWVkYmFjayB0byB5b3VyIHR3byBuZXcgcXVl c3Rpb25zOg0KDQoNCj4xKSBJbiBvcmRlciB0byBwZXJmb3JtIGEgRFRMUyBoYW5kc2hha2UgYmVm b3JlL2FmdGVyIHNlbmRpbmcgYSBtdWx0aWNhc3QgbWVzc2FnZSwgYSBzZW5kZXINCj4gbm9kZSBz aG91bGQgYmUgYXdhcmUgb2YgdGhlIGdyb3VwIG1lbWJlcnNoaXAsIGVzcGVjaWFsbHkgd2hhdCBh cmUgdGhlIGxpc3RlbmVyIG5vZGVzIGN1cnJlbnRseQ0KPiBwcmVzZW50IGluIHRoZSBncm91cC4g T2YgY291cnNlLCBzdWNoIGEgZ3JvdXAgbWVtYmVyc2hpcCBtYXkgY2hhbmdlIG92ZXIgdGltZSwg dXBvbiBuZXcgbm9kZXMNCj5qb2luaW5nIHRoZSBncm91cC4gSG93ZXZlciwgU2VjdGlvbiAzLjEg aW4gdGhlIGRyYWZ0IHN0YXRlcyB0aGF0ICJBbnkgZGV2aWNlIGNhbiBpbiBwcmluY2lwbGUgZGVj aWRlDQo+dG8gbGlzdGVuIHRvIGFueSBJUHY2IG11bHRpY2FzdCBhZGRyZXNzLiBUaGlzIGFsc28g bWVhbnMgYXBwbGljYXRpb25zIG9uIHRoZSBvdGhlciBkZXZpY2VzIGRvIG5vdA0KPmtub3csIG9y IGRvIG5vdCBnZXQgbm90aWZpZWQsIHdoZW4gbmV3IGxpc3RlbmVycyBqb2luIHRoZSBuZXR3b3Jr LiIuIENvdWxkbid0IHRoaXMgYmUgYSBwcm9ibGVtDQo+Zm9yIHRoZSBzdWdnZXN0ZWQgYXBwcm9h Y2g/DQoNClllcywgaW4gcHJpbmNpcGxlLCBhbnkgZGV2aWNlIGNhbiBkZWNpZGUgdG8gbGlzdGVu IGZvciBhbnkgSVB2NiBtdWx0aWNhc3QgYWRkcmVzcy4gIEJ1dCBpbiBwcmFjdGljZSBvZiBjb3Vy c2UgdGhlcmUgYXJlIElQdjYgbXVsdGljYXN0IHJlbGF0ZWQgcHJvdG9jb2xzIGZvciByb3V0aW5n L2pvaW5pbmcgdGhhdCBkaWN0YXRlIHdobyBjYW4gc3VjY2Vzc2Z1bGx5IGxpc3RlbiBmb3IgYW5k IHJlY2VpdmUgYW4gSVB2NiBtdWx0aWNhc3QgcGFja2V0LiAgRm9yIGV4YW1wbGUsIHVubGVzcyBh IGRldmljZSB1c2VzIGEgcHJvdG9jb2wgbGlrZSBNTEQgdG8gZXhwbGljaXRseSBqb2luIGEgbXVs dGljYXN0IGdyb3VwLCB0aGUgbmV0d29yayB3aWxsIG5ldmVyIHJvdXRlIHRoZSBtdWx0aWNhc3Qg cGFja2V0cyBvZiBpbnRlcmVzdCB0byB0aGUgc3ViLW5ldHdvcmsgb2YgdGhlIGRldmljZS4gIFRo aXMgaXMgYWxsIGV4cGxhaW5lZCBhdCBhIGhpZ2ggbGV2ZWwgaW4gdGhlIEkuRC5ncm91cGNvbW0g cmVmZXJlbmNlIChodHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNvcmUtZ3Jv dXBjb21tLTE4I3NlY3Rpb24tMi4xICkgLg0KDQpUaGUgb3RoZXIgcGFydCBvZiB5b3VyIHF1ZXN0 aW9uIHJlZmVycyB0byBob3cgZG9lcyB0aGUgc2VuZGVyIG5vZGUga25vdyB3aG8gaXMgcGFydCBv ZiB0aGUgZ3JvdXAuICBZb3UgYXJlIGNvcnJlY3QgdGhhdCBpdCBpcyB2ZXJ5IGRpZmZpY3VsdCB0 byBrbm93IHByZWNpc2VseSB0aGUgbWVtYmVyc2hpcCBvZiBhIGdyb3VwLiAgVGhhdCBpcyB3aHkg d2UgaGFkIHRoZSBzdWJ0bGUgcmVmZXJlbmNlIHRvIOKAnGtub3duIGxpc3RlbmVyc+KAnS4gIEhv dyB5b3UgYWN0dWFsbHkga25vdyB0aGUgbWVtYmVyc2hpcCBkZXBlbmRzIG9uIHRoZSBtaXggb2Yg cHJvdG9jb2xzIHVzZWQgKGFuZCBpcyBpbiBmYWN0IGl0IGlzIG5vdCBhbHdheXMgcG9zc2libGUg dG8ga25vdyBhbGwgdGhlIG1lbWJlcnMgYWNjdXJhdGVseSkuICBCdXQgZm9yIENvQVAgZ3JvdXAg bWVtYmVyIGRpc2NvdmVyeSwgdGhlcmUgaXMgIGFnYWluIGd1aWRhbmNlIGdpdmVuIGluIHRoZSBJ LkQuZ3JvdXBjb21tIHJlZmVyZW5jZSAoc3BlY2lmaWNhbGx5IGluIGh0dHA6Ly90b29scy5pZXRm Lm9yZy9odG1sL2RyYWZ0LWlldGYtY29yZS1ncm91cGNvbW0tMTgjc2VjdGlvbi0yLjYgKS4gIFdl IGNhbiBtYWtlIHRoaXMgcG9pbnQgYSBiaXQgbW9yZSBleHBsaWNpdCBpbiB0aGUgbmV4dCB1cGRh dGUgb2Ygb3VyIEktRC4NCg0KDQoNCj4yKSBBbiBhbHRlcm5hdGl2ZSBhcHByb2FjaCB0byB0aGUg b25lIHN1Z2dlc3RlZCBpbiBTZWN0aW9uIDQuNSBtYXkgY29uc2lzdCBpbiBhIGxpc3RlbmVyIG5v ZGUgZXN0YWJsaXNoaW5nDQo+IGEgdW5pY2FzdCBEVExTIHNlc3Npb24gKGkuZS4gc3RhcnRpbmcg YSBEVExTIGhhbmRzaGFrZSkgd2l0aCB0aGUgc2VuZGVyIG5vZGUsIHVwb24gcmVjZWl2aW5nIGEg bXVsdGljYXN0DQo+IG1lc3NhZ2UgZm9yIHRoZSBmaXJzdCB0aW1lLg0KDQpZZXMsIGdvb2QgcG9p bnQhICBXZSBjYW4gYWRkIHRoaXMgdG8gdGhlIEktRCBpbiBvdXIgbmV4dCB1cGRhdGUuDQoNCg0K QmVzdCBSZWdhcmRzLA0KDQoNCkFrYmFyDQoNCg0KDQpGcm9tOiBNYXJjbyBUaWxvY2EgW21haWx0 bzptYXJjb0BzaWNzLnNlXQ0KU2VudDogVHVlc2RheSwgTWF5IDA2LCAyMDE0IDEyOjMyIFBNDQpU bzogUmFobWFuLCBBa2Jhcg0KQ2M6IEt1bWFyLCBTYW5kZWVwOyBkdGxzLWlvdEBpZXRmLm9yZzxt YWlsdG86ZHRscy1pb3RAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW0R0bHMtaW90XSBVbmljYXN0 IHJlc3BvbnNlcyBpbiBkcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA1DQoNCkhl bGxvIEFrYmFyLA0KDQpUaGFua3MgZm9yIGhhdmluZyBjb25zaWRlcmVkIG15IHF1ZXN0aW9uLiBU aGUgbmV3IFNlY3Rpb24gNC41IGxvb2tzIGZpbmUgdG8gbWUuIEFsc28sIEkgaGF2ZSB0aGUgdHdv IGZvbGxvd2luZyBjb21tZW50cy4NCg0KMSkgSW4gb3JkZXIgdG8gcGVyZm9ybSBhIERUTFMgaGFu ZHNoYWtlIGJlZm9yZS9hZnRlciBzZW5kaW5nIGEgbXVsdGljYXN0IG1lc3NhZ2UsIGEgc2VuZGVy IG5vZGUgc2hvdWxkIGJlIGF3YXJlIG9mIHRoZSBncm91cCBtZW1iZXJzaGlwLCBlc3BlY2lhbGx5 IHdoYXQgYXJlIHRoZSBsaXN0ZW5lciBub2RlcyBjdXJyZW50bHkgcHJlc2VudCBpbiB0aGUgZ3Jv dXAuIE9mIGNvdXJzZSwgc3VjaCBhIGdyb3VwIG1lbWJlcnNoaXAgbWF5IGNoYW5nZSBvdmVyIHRp bWUsIHVwb24gbmV3IG5vZGVzIGpvaW5pbmcgdGhlIGdyb3VwLiBIb3dldmVyLCBTZWN0aW9uIDMu MSBpbiB0aGUgZHJhZnQgc3RhdGVzIHRoYXQgIkFueSBkZXZpY2UgY2FuIGluIHByaW5jaXBsZSBk ZWNpZGUgdG8gbGlzdGVuIHRvIGFueSBJUHY2IG11bHRpY2FzdCBhZGRyZXNzLiBUaGlzIGFsc28g bWVhbnMgYXBwbGljYXRpb25zIG9uIHRoZSBvdGhlciBkZXZpY2VzIGRvIG5vdCBrbm93LCBvciBk byBub3QgZ2V0IG5vdGlmaWVkLCB3aGVuIG5ldyBsaXN0ZW5lcnMgam9pbiB0aGUgbmV0d29yay4i LiBDb3VsZG4ndCB0aGlzIGJlIGEgcHJvYmxlbSBmb3IgdGhlIHN1Z2dlc3RlZCBhcHByb2FjaD8N Cg0KMikgQW4gYWx0ZXJuYXRpdmUgYXBwcm9hY2ggdG8gdGhlIG9uZSBzdWdnZXN0ZWQgaW4gU2Vj dGlvbiA0LjUgbWF5IGNvbnNpc3QgaW4gYSBsaXN0ZW5lciBub2RlIGVzdGFibGlzaGluZyBhIHVu aWNhc3QgRFRMUyBzZXNzaW9uIChpLmUuIHN0YXJ0aW5nIGEgRFRMUyBoYW5kc2hha2UpIHdpdGgg dGhlIHNlbmRlciBub2RlLCB1cG9uIHJlY2VpdmluZyBhIG11bHRpY2FzdCBtZXNzYWdlIGZvciB0 aGUgZmlyc3QgdGltZS4NCg0KQmVzdCByZWdhcmRzLA0KTWFyY28NCg0KDQoNCg0KT24gNSBNYXkg MjAxNCAyMzo0NSwgUmFobWFuLCBBa2JhciA8QWtiYXIuUmFobWFuQGludGVyZGlnaXRhbC5jb208 bWFpbHRvOkFrYmFyLlJhaG1hbkBpbnRlcmRpZ2l0YWwuY29tPj4gd3JvdGU6DQpIaSBNYXJjbywN Cg0KDQoNClRoZSBhdXRob3JzIGhhdmUgbWFkZSBhbiB1cGRhdGUgdG8gdGhlIGRyYWZ0IHRvIGFk ZHJlc3MgZnVsbHkgeW91ciBnb29kIHF1ZXN0aW9uIHJlZ2FyZGluZyBob3cgdG8gaGFuZGxlIHRo ZSB1bmljYXN0IHJlc3BvbnNlcyB0byB0aGUgbXVsdGljYXN0IHJlc3BvbnNlLiAgU3BlY2lmaWNh bGx5LCBwbGVhc2UgcmV2aWV3IHRoZSBuZXcgc2VjdGlvbiA0LjUgYW5kIHRlbGwgdXMgaWYgeW91 IGhhdmUgYW55IG1vcmUgcXVlc3Rpb25zOg0KDQoNCmh0dHA6Ly90b29scy5pZXRmLm9yZy9odG1s L2RyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDYjc2VjdGlvbi00LjUNCg0KNC41 LiAgVW5pY2FzdCBSZXNwb25zZXMgdG8gTXVsdGljYXN0IE1lc3NhZ2VzDQoNCiAgIEluIENvQVAs IHJlc3BvbnNlcyB0byBtdWx0aWNhc3QgbWVzc2FnZXMgYXJlIGFsd2F5cyBzZW50IGJhY2sgYXMN CiAgIHVuaWNhc3QuICBUaGF0IGlzLCB0aGUgZ3JvdXAgbWVtYmVycyB0aGF0IHJlY2VpdmUgYSBt dWx0aWNhc3QgbWVzc2FnZQ0KICAgbWF5IGluZGl2aWR1YWxseSBkZWNpZGUgdG8gc2VuZCAob3Ig c3VwcHJlc3MpIGEgdW5pY2FzdCByZXNwb25zZSBhcw0KICAgZGVzY3JpYmVkIGluIFNlY3Rpb24g Mi41IG9mIFtJLUQuaWV0Zi1jb3JlLWdyb3VwY29tbV0uICBUaGUgdW5pY2FzdA0KICAgcmVzcG9u c2VzIHRvIGEgRFRMUy1iYXNlZCBtdWx0aWNhc3QgbWVzc2FnZSBtYXkgb3B0aW9uYWxseSBiZSBz ZWN1cmUuDQogICBTcGVjaWZpY2FsbHksIHRoZSB1bmljYXN0IHJlc3BvbnNlIG1heSBiZSBzZW50 IGJhY2sgYXMgYSB1bmljYXN0IERUTFMNCiAgIGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDkuMSBv ZiBbSS1ELmlldGYtY29yZS1jb2FwXS4gIFRoaXMgcmVxdWlyZXMNCiAgIHRoYXQgYSB1bmljYXN0 IERUTFMgaGFuZHNoYWtlIHdhcyBwcmV2aW91c2x5IGluaXRpYXRlZCBiZXR3ZWVuIHRoZQ0KICAg bXVsdGljYXN0IG1lc3NhZ2Ugc2VuZGVyIGFuZCBsaXN0ZW5lci4gIEluIHRoZSBleHRyZW1lIHNj ZW5hcmlvLCBhDQogICBtdWx0aWNhc3Qgc2VuZGVyIG1heSBhdHRlbXB0IHRvIGluaXRpYXRlIHRo ZSB1bmljYXN0IERUTFMgaGFuZHNoYWtlDQogICB3aXRoIGFsbCBvciBhIHN1YnNldCBvZiBrbm93 biBsaXN0ZW5lcnMganVzdCBiZWZvcmUgb3IganVzdCBhZnRlciBpdA0KICAgc2VuZHMgb3V0IHRo ZSBEVExTLWJhc2VkIG11bHRpY2FzdCBtZXNzYWdlLiAgVGhpcyBtYXkgcmVzdWx0IGluIHRoZQ0K ICAgbXVsdGljYXN0IHNlbmRlciAoaS5lLiB1bmljYXN0IERUTFMgY2xpZW50KSBoYXZpbmcgdG8g cHJvY2VzcyB1bmljYXN0DQogICBEVExTIGhhbmRzaGFrZSBtZXNzYWdlcyBmcm9tIG11bHRpcGxl IG11bHRpY2FzdCBsaXN0ZW5lcnMgKGkuZS4NCiAgIHVuaWNhc3QgRFRMUyBzZXJ2ZXJzKSBpbiBh IHNob3J0IHBlcmlvZC4NCg0KICAgTm90ZTogVGhlcmUgaXMgYW4gb2J2aW91cyB0aW1pbmcgYW5k IHByb2Nlc3NpbmcgbG9hZCBpc3N1ZSBmb3IgdGhlDQogICBtdWx0aWNhc3Qgc2VuZGVyIGluIHRo ZSBzY2VuYXJpbyB3aGVyZSBpdCBhdHRlbXB0cyB0byBpbml0aWF0ZSB0aGUNCiAgIHVuaWNhc3Qg RFRMUyBoYW5kc2hha2VzIHdpdGggYWxsL3NvbWUgb2YgaXRzIGtub3duIGxpc3RlbmVycyBqdXN0 DQogICBhZnRlciBpdCBzZW5kcyBvdXQgdGhlIERUTFMtYmFzZWQgbXVsdGljYXN0IG1lc3NhZ2Uu ICBJbiB0aGlzIGNhc2UsDQogICB0aGUgcHJvY2Vzc2luZyBsb2FkIGluIHRoZSBtdWx0aWNhc3Qg c2VuZGVyIChpLmUuIHVuaWNhc3QgRFRMUw0KICAgY2xpZW50KSBpcyByZWR1Y2VkIHNvbWV3aGF0 IGJ5IHRoZSBmYWN0IHRoYXQgQ29BUCByZXF1aXJlcyBhIGJhY2stb2ZmDQogICBhbmQgcmFuZG9t aXphdGlvbiBvZiB0aGUgdW5pY2FzdCByZXNwb25zZSBieSB0aGUgTGVpc3VyZSB0aW1lcg0KICAg bWVjaGFuaXNtIGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDguMiBvZiBbSS1ELmlldGYtY29yZS1j b2FwXS4NCg0KDQoNCg0KQmVzdCBSZWdhcmRzLA0KDQoNCkFrYmFyDQoNCg0KDQpGcm9tOiBkdGxz LWlvdCBbbWFpbHRvOmR0bHMtaW90LWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOmR0bHMtaW90LWJv dW5jZXNAaWV0Zi5vcmc+XSBPbiBCZWhhbGYgT2YgS3VtYXIsIFNhbmRlZXANClNlbnQ6IFdlZG5l c2RheSwgQXByaWwgMDIsIDIwMTQgMzo0NyBBTQ0KVG86IE1hcmNvIFRpbG9jYTsgZHRscy1pb3RA aWV0Zi5vcmc8bWFpbHRvOmR0bHMtaW90QGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtEdGxzLWlv dF0gVW5pY2FzdCByZXNwb25zZXMgaW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0 eS0wNQ0KDQpIaSBNYXJjbw0KDQpUaGUgZHJhZnQgb25seSBhZGRyZXNzZXMgdGhlIHByb3RlY3Rp b24gb2YgbXVsdGljYXN0IHRyYWZmaWMuIElmIHVuaWNhc3QgcmVzcG9uc2VzIGFyZSBleHBlY3Rl ZCBhbmQgaWYgcHJvdGVjdGlvbiBpcyByZXF1aXJlZCBmb3Igc3VjaCBtZXNzYWdlcywgdGhlbiBl eGlzdGluZyB1bmljYXN0IHByb3RlY3Rpb24gbWVjaGFuaXNtcyBiYXNlZCBvbiBEVExTIGFzIHN1 Z2dlc3RlZCBpbiBkcmFmdC1pZXRmLWNvcmUtY29hcC0xOCBzaG91bGQgYmUgdXNlZC4gUHJvdGVj dGlvbiBvZiBhbGwgdW5pY2FzdCBtZXNzYWdlcyBzaG91bGQgYmUgdHJlYXRlZCBhcyB3b3VsZCBi ZSBkb25lIG5vcm1hbGx5Lg0KDQpIb3BlIHRoYXQgYW5zd2VycyB5b3VyIHF1ZXN0aW9uLg0KDQpS ZWdhcmRzDQpTYW5kZWVwDQoNCkZyb206IGR0bHMtaW90IFttYWlsdG86ZHRscy1pb3QtYm91bmNl c0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIE1hcmNvIFRpbG9jYQ0KU2VudDogVHVlc2RheSwgQXBy aWwgMDEsIDIwMTQgNjozNSBQTQ0KVG86IGR0bHMtaW90QGlldGYub3JnPG1haWx0bzpkdGxzLWlv dEBpZXRmLm9yZz4NClN1YmplY3Q6IFtEdGxzLWlvdF0gVW5pY2FzdCByZXNwb25zZXMgaW4gZHJh ZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNQ0KDQpEZWFyIGFsbCwNCg0KQXMgdG8g cG9zc2libGUgcmVzcG9uc2VzIHRvIG11bHRpY2FzdCByZXF1ZXN0cywgU2VjdGlvbiAyLjEgc3Rh dGVzIHRoYXQgdGhleSBhcmUgc2VudCBiYWNrIGluIHVuaWNhc3QuIFRoZW4sIG5vIGZ1cnRoZXIg ZGV0YWlscyBhcmUgcHJvdmlkZWQgYWJvdXQgdGhlaXIgcHJvdGVjdGlvbi4NCg0KQXJlIHN1Y2gg cmVzcG9uc2VzIHN1cHBvc2VkIHRvIGJlIHByb3RlY3RlZCB0aHJvdWdoIGEgInJlZ3VsYXIiIERU TFMgc2Vzc2lvbiwgd2hpY2ggbXVzdCBiZSAob3IgaGFzIHByZXZpb3VzbHkgYmVlbikgZXN0YWJs aXNoZWQgYmV0d2VlbiB0aGUgc2VuZGVyIGFuZCBsaXN0ZW5lcj8NCg0KQ2hlZXJzLA0KTWFyY28N Cg0KDQoNCg0KDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KVGhlIGluZm9ybWF0 aW9uIGNvbnRhaW5lZCBpbiB0aGlzIG1lc3NhZ2UgbWF5IGJlIGNvbmZpZGVudGlhbCBhbmQgbGVn YWxseSBwcm90ZWN0ZWQgdW5kZXIgYXBwbGljYWJsZSBsYXcuIFRoZSBtZXNzYWdlIGlzIGludGVu ZGVkIHNvbGVseSBmb3IgdGhlIGFkZHJlc3NlZShzKS4gSWYgeW91IGFyZSBub3QgdGhlIGludGVu ZGVkIHJlY2lwaWVudCwgeW91IGFyZSBoZXJlYnkgbm90aWZpZWQgdGhhdCBhbnkgdXNlLCBmb3J3 YXJkaW5nLCBkaXNzZW1pbmF0aW9uLCBvciByZXByb2R1Y3Rpb24gb2YgdGhpcyBtZXNzYWdlIGlz IHN0cmljdGx5IHByb2hpYml0ZWQgYW5kIG1heSBiZSB1bmxhd2Z1bC4gSWYgeW91IGFyZSBub3Qg dGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIGNvbnRhY3QgdGhlIHNlbmRlciBieSByZXR1 cm4gZS1tYWlsIGFuZCBkZXN0cm95IGFsbCBjb3BpZXMgb2YgdGhlIG9yaWdpbmFsIG1lc3NhZ2Uu DQoNCg== --_000_031DD135F9160444ABBE3B0C36CED61836D7B49EAMSPRD9003MB066_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTQgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OldpbmdkaW5nczsNCglwYW5vc2UtMTo1IDAgMCAwIDAgMCAwIDAgMCAw O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6V2luZ2RpbmdzOw0KCXBhbm9zZS0xOjUgMCAw IDAgMCAwIDAgMCAwIDA7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBh bm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 VGFob21hOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDMgNSA0IDQgMiA0O30NCi8qIFN0eWxlIERlZmlu aXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNvTm9ybWFsDQoJe21h cmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMi4wcHQ7DQoJ Zm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsInNlcmlmIjt9DQphOmxpbmssIHNwYW4uTXNv SHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQt ZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxv d2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNv cmF0aW9uOnVuZGVybGluZTt9DQpwcmUNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1zby1z dHlsZS1saW5rOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltYXJnaW46MGluOw0KCW1hcmdp bi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTAuMHB0Ow0KCWZvbnQtZmFtaWx5OiJDb3Vy aWVyIE5ldyI7fQ0KcC5Nc29BY2V0YXRlLCBsaS5Nc29BY2V0YXRlLCBkaXYuTXNvQWNldGF0ZQ0K CXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkJhbGxvb24gVGV4dCBD aGFyIjsNCgltYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6 OC4wcHQ7DQoJZm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiO30NCnAuTXNvTGlzdFBh cmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1zb0xpc3RQYXJhZ3JhcGgNCgl7bXNv LXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbi10b3A6MGluOw0KCW1hcmdpbi1yaWdodDowaW47 DQoJbWFyZ2luLWJvdHRvbTowaW47DQoJbWFyZ2luLWxlZnQ6LjVpbjsNCgltYXJnaW4tYm90dG9t Oi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJv bWFuIiwic2VyaWYiO30NCnNwYW4uSFRNTFByZWZvcm1hdHRlZENoYXINCgl7bXNvLXN0eWxlLW5h bWU6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCglt c28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQiOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVy IE5ldyI7fQ0Kc3Bhbi5CYWxsb29uVGV4dENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IkJhbGxvb24g VGV4dCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkJh bGxvb24gVGV4dCI7DQoJZm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiO30NCnNwYW4u RW1haWxTdHlsZTIyDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJD YWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFuLkVtYWlsU3R5bGUy Mw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNh bnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjQNCgl7bXNvLXN0 eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsN Cgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTI1DQoJe21zby1zdHlsZS10eXBlOnBl cnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJY29sb3I6IzFG NDk3RDt9DQpzcGFuLkVtYWlsU3R5bGUyNg0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBs eTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7 fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1z aXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJ bWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFn ZTpXb3JkU2VjdGlvbjE7fQ0KLyogTGlzdCBEZWZpbml0aW9ucyAqLw0KQGxpc3QgbDANCgl7bXNv LWxpc3QtaWQ6ODM4MjczNjI1Ow0KCW1zby1saXN0LXR5cGU6aHlicmlkOw0KCW1zby1saXN0LXRl bXBsYXRlLWlkczo4MTE2MDM5ODYgNDU4MDY2NjQgNjc2OTg2OTEgNjc2OTg2OTMgNjc2OTg2ODkg Njc2OTg2OTEgNjc2OTg2OTMgNjc2OTg2ODkgNjc2OTg2OTEgNjc2OTg2OTM7fQ0KQGxpc3QgbDA6 bGV2ZWwxDQoJe21zby1sZXZlbC1zdGFydC1hdDoyOw0KCW1zby1sZXZlbC1udW1iZXItZm9ybWF0 OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDotOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0K CW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJ Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCgltc28tZmFyZWFzdC1mb250LWZh bWlseTpDYWxpYnJpO30NCkBsaXN0IGwwOmxldmVsMg0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1h dDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsN Cgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0K CWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDA6bGV2ZWwzDQoJe21zby1sZXZl bC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVs LXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQt aW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDA6bGV2ZWw0 DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7 DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjps ZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3Qg bDA6bGV2ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwt dGV4dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIg TmV3Ijt9DQpAbGlzdCBsMDpsZXZlbDYNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0 Ow0KCW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQt ZmFtaWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDcNCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6 bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4y NWluOw0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDgNCgl7bXNvLWxldmVs LW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRh Yi1zdG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5k ZW50Oi0uMjVpbjsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGwwOmxldmVs OQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674Kn Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246 bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCm9s DQoJe21hcmdpbi1ib3R0b206MGluO30NCnVsDQoJe21hcmdpbi1ib3R0b206MGluO30NCi0tPjwv c3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJl ZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNv IDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0i ZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwv aGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxlIj4NCjxk aXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+SGkgQWtiYXIsPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5vbiBw b2ludCAxLiB0aGVyZSBhcmUgdHdvIGNvbmNlcm5zIHRoYXQgbmVlZCB0byBiZSBhZGRyZXNzZWQ6 PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj4xQS4gcmVzcG9uZGluZyB1bnNlY3VyZWQgYWZ0ZXIgYSBzZWN1cmVkIHJlcXVl c3Qgc2VlbXMgYSB2aW9sYXRpb24gb2Ygc2VjdXJpdHkgcHJpbmNpcGxlcyBhbmQgdGhlIOKAmHNw aXJpdOKAmSBvZiBDb0FQLTE4LiBFLmcuIHRoZSByZXNwb25zZSBjb3VsZCBiZSB0YW1wZXJlZCB3 aXRoLg0KIFdoYXQgd2UgY291bGQgZG8gaXMgdG8gZS5nLiBoYXZlIGEgU0hPVUxEIHJlcXVpcmVt ZW50IGZvciBzZWN1cmVkIHJlc3BvbnNlOyB3aGljaCB0aGUgZXhjZXB0aW9uIGNhc2UgYmVpbmcg YSByZXNwb25zZSB0aGF0IGRvZXMgbm90IGNvbnRhaW4gYW55IGNyaXRpY2FsL2NvbmZpZGVudGlh bCBpbmZvcm1hdGlvbi4gU3VjaCBhcyBhIOKAnDIuMDQgQ2hhbmdlZOKAnSBvciDigJwyLjAyIERl bGV0ZWTigJ0gcmVzcG9uc2Ugd2hpY2ggZG9lcyBub3QgY29udGFpbiBhbnkNCiBmdXJ0aGVyIHBh eWxvYWQuIEJ1dCBldmVuIGRvaW5nIHRoYXQgdGhlcmUgbWF5IGJlIHVuaW50ZW5kZWQgc2VjdXJp dHkgY29uc2VxdWVuY2VzLCBlLmcuIHJlc3BvbnNlIHNwb29maW5nIG9yIHRhbXBlcmluZy48bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMx RjQ5N0QiPjFCLiBpZiBzdGFuZGFyZCBDb0FQIG1hdGNoaW5nIHJ1bGVzIGFyZSBub3QgZm9sbG93 ZWQsIHRoZSBuZXcgbWF0Y2hpbmcgcnVsZXMgbmVlZCB0byBiZSBkZWZpbmVkLiBXaGF0IGNvbXBs aWNhdGVzIHRoaXMgaXMgdGhhdCBhIGNsaWVudCBkb2VzbuKAmXQga25vdyBhIHByaW9yaQ0KIGlm IHRoZSBzZXJ2ZXIgd291bGQgcmVzcG9uZCBEVExTLXNlY3VyZWQgb3Igbm90LiBTbyBpdCBuZWVk cyB0d28gbWV0aG9kcyBvZiBtYXRjaGluZywgb25lIGZvciBzZWN1cmVkIHJlc3BvbnNlcyBhbmQg YW5vdGhlciBmb3IgdW5zZWN1cmVkIG9uZXMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0Qi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5UaGUgYWJvdmUgaXNzdWVzIHRv Z2V0aGVyIHNlZW0gcXVpdGUgc2VyaW91cy4mbmJzcDsgUGVyaGFwcyBhbiBhbHRlcm5hdGl2ZSBz b2x1dGlvbiBpcyBiZXR0ZXIgaW4gd2hpY2ggdGhlIGdyb3VwIGtleSBpcyB1c2VkIHRvIERUTFMt cHJvdGVjdCB0aGUgcmVzcG9uc2UuIE9yIGFsdGVybmF0aXZlbHksDQogYSBzZXBhcmF0ZSDigJxy ZWNlaXZlcnPigJ0gc2VjdXJpdHkgZ3JvdXAgY291bGQgYmUgY3JlYXRlZCB0aGF0IGFsbG93cyBl YWNoIHJlY2VpdmVyIHRvIHJlc3BvbmQgYW5kIHRoZSBzZW5kZXIgdG8gcmVhZCB0aGUgcmVzcG9u c2UsIGJ1dCBub2RlcyBvdXRzaWRlIHRoZSBzZW5kZXIvcmVjZWl2ZXIgZ3JvdXBzIGNhbm5vdCBh Y2Nlc3MgdGhlIG1lc3NhZ2VzIHRodXMgZXhjaGFuZ2VkLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjoj MUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+T24gcG9pbnQgMi4g SSBhZ3JlZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7O2NvbG9yOiMxRjQ5N0QiPkVza288bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25l O2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGlu Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5G cm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiBSYWhtYW4sIEFrYmFy IFttYWlsdG86QWtiYXIuUmFobWFuQEludGVyRGlnaXRhbC5jb21dDQo8YnI+DQo8Yj5TZW50Ojwv Yj4gTW9uZGF5LCBNYXkgMTksIDIwMTQgMjI6MzQ8YnI+DQo8Yj5Ubzo8L2I+IERpamssIEVza288 YnI+DQo8Yj5DYzo8L2I+IEt1bWFyLCBTYW5kZWVwOyBkdGxzLWlvdEBpZXRmLm9yZzsgTWFyY28g VGlsb2NhPGJyPg0KPGI+U3ViamVjdDo8L2I+IFJFOiBbRHRscy1pb3RdIFVuaWNhc3QgcmVzcG9u c2VzIGluIGRyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDU8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJz cDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6IzFGNDk3RCI+SGkgRXNrbyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3 RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90Oztjb2xvcjojMUY0OTdEIj5UaGFua3MgZm9yIHRoZSBmZWVkYmFjay48bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mZ3Q7IEl0IHNlZW1zIHVuc2VjdXJl ZCByZXNwb25zZXMgYXJlIG5vdCBwb3NzaWJsZSB3aXRob3V0IGFsdGVyaW5nIHRoZSBDb0FQIHJl cXVlc3QvcmVzcG9uc2UgbWF0Y2hpbmcgcnVsZXMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5 N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5ZZXMsIGJ1dCBhcyB5b3Ug a25vdyB0aGUgY3VycmVudCBjb3JlLWNvYXAtMTggdGV4dCBpcyBvYnZpb3VzbHkgd3JpdHRlbiBm b3IgdW5pY2FzdCBEVExTIHJlcXVlc3QgYW5kIHJlc3BvbnNlLiZuYnNwOyBXZSBhcmUgbm8gbG9u Z2VyIGRlYWxpbmcgd2l0aCB0aGF0IGFzIHdlIGhhdmUNCiBtdWx0aWNhc3QgRFRMUyByZXF1ZXN0 LCBhbmQgcG90ZW50aWFsbHkgdW5pY2FzdCBEVExTIHJlc3BvbnNlLiZuYnNwOyAoVGhhdCB3YXMg dGhlIG9yaWdpbmFsIHZhbHVlIGluIHRoZSBxdWVzdGlvbiBhc2tlZCBieSBNYXJjbykuJm5ic3A7 IEJ1dCBJIGRvIGFncmVlIHdpdGggeW91ciBwb2ludCB0aGF0IHRoZSBiYXNlIGNvcmUtY29hcC0x OCBvcGVyYXRpb24gd291bGQgYmUgYWZmZWN0ZWQsIGFuZCB0aGEgJm5ic3A7dGhpcyBjaGFuZ2Ug bXVzdCBiZSBjbGVhcmx5IGNhcHR1cmVkLg0KICZuYnNwOyZuYnNwO0FuZCBJIGd1ZXNzIDxhIGhy ZWY9Imh0dHA6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qt c2VjdXJpdHktMDcjc2VjdGlvbi00LjUiPg0KaHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJh ZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNyNzZWN0aW9uLTQuNTwvYT4gd291bGQg YmUgdGhlIG5vcm1hdGl2ZSB1cGRhdGUuJm5ic3A7IFNvIHdlIGhhdmUgdG8gbWFrZSB0aGUgdGV4 dCBjbGVhci4mbmJzcDsgRG8geW91IHRoaW5rIHdlIG5lZWQgdG8gZXhwbGFpbiBpdCBiZXR0ZXI/ PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+LSZndDsgQ29t cGFyZSB0byBzZWN0aW9uIDkuMS4xIG9mIGNvcmUtY29hcDog4oCcVGhlIGVuZHBvaW50IGFjdGlu ZyBhcyB0aGUgQ29BUCBjbGllbnQgc2hvdWxkIGFsc28gYWN0IGFzIHRoZSBEVExTIGNsaWVudC4m bmJzcDsgSXQgc2hvdWxkIGluaXRpYXRlIGEgc2Vzc2lvbiB0byB0aGUgc2VydmVyDQogb24gdGhl IGFwcHJvcHJpYXRlIHBvcnQu4oCdPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5BZ2FpbiwgSSB1bmRlcnN0b29kIHRoYXQg dGhpcyB3YXMgb3JpZ2luYWxseSB3cml0dGVuIGZyb20gdGhlIHBvaW50IG9mIHZpZXcgb2YgYSBu b3JtYWwgdW5pY2FzdCBDb0FQIHJlcXVlc3QuJm5ic3A7IE1lYW5pbmcgdGhhdCBhIENvQVAgY2xp ZW50IHdvdWxkIGhhdmUgaW5pdGlhbGx5DQogcGVyZm9ybWVkIGEgcmVxdWVzdCAoZS5nLiBHRVQp IGFuZCB0aHVzIHNob3VsZCBiZSB0aGUgb25lIHRoYXQgZGVjaWRlcyBpZiB0aGUgR0VUIHNob3Vs ZCBiZSBzZWN1cmUgb3Igbm90LiAmbmJzcDtBZ2FpbiB0aGlzIGxvZ2ljIGRvZXMgbm90IGFwcGx5 IGRpcmVjdGx5IGZvciB0aGUgbXVsdGljYXN0IGNhc2UgYmVjYXVzZSB0aGUgaW50ZXJhY3Rpb25z IGFyZSBkaWZmZXJlbnQuJm5ic3A7IFNvIEkgYWdyZWUgdGhhdCB3ZSBuZWVkIHRvIGV4cGxpY2l0 bHkgc3RhdGUNCiBpbiBkcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0IHRoYXQgd2UgYXJlIGRldmlh dGluZyBmcm9tIHRoZSBvcmlnaW5hbCBjb3JlLWNvYXAtMTggYXBwcm9hY2guPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPkJlc3QgUmVnYXJkcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3 RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90Oztjb2xvcjojMUY0OTdEIj5Ba2JhcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5v bmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAw aW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsi PkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+IERpamssIEVza28g WzxhIGhyZWY9Im1haWx0bzplc2tvLmRpamtAcGhpbGlwcy5jb20iPm1haWx0bzplc2tvLmRpamtA cGhpbGlwcy5jb208L2E+XQ0KPGJyPg0KPGI+U2VudDo8L2I+IE1vbmRheSwgTWF5IDE5LCAyMDE0 IDEyOjAyIFBNPGJyPg0KPGI+VG86PC9iPiBSYWhtYW4sIEFrYmFyOyBNYXJjbyBUaWxvY2E8YnI+ DQo8Yj5DYzo8L2I+IEt1bWFyLCBTYW5kZWVwOyA8YSBocmVmPSJtYWlsdG86ZHRscy1pb3RAaWV0 Zi5vcmciPmR0bHMtaW90QGlldGYub3JnPC9hPjxicj4NCjxiPlN1YmplY3Q6PC9iPiBSRTogW0R0 bHMtaW90XSBVbmljYXN0IHJlc3BvbnNlcyBpbiBkcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNl Y3VyaXR5LTA1PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkhpIEFrYmFyLDxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFG NDk3RCI+YXBvbG9naWVzIGZvciBteSBsYXRlIGlucHV0ISBPbiB0aGUgbmV3IHRleHQsIHR3byBw b2ludHMgKHNlZSBiZWxvdykgbWF5IG5lZWQgc29tZSBmdXJ0aGVyIGRpc2N1c3Npb24uIEhlcmUg d2UgZGV2aWF0ZSBmcm9tIHRoZSBzcGlyaXQgb2YgY29yZS1jb2FwLTE4LCB3aGljaA0KIG1heSBu ZWVkIHRvIGJlIHBvaW50ZWQgb3V0IGluIHRoZSB0ZXh0IGV4cGxpY2l0bHksIGlmIHRoZSBkZXZp YXRpb24gaXMgY29uc2lkZXJlZCBhY2NlcHRhYmxlLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0 OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+MS4gVW5zZWN1cmVkIHJl c3BvbnNlczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj7igJxUaGUgdW5pY2FzdCByZXNw b25zZXMgdG8gYSBEVExTLWJhc2VkIG11bHRpY2FzdCBtZXNzYWdlIG1heSBvcHRpb25hbGx5IGJl IHNlY3VyZeKAnTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4tJmd0OyBDb21wYXJlIHRv IHNlY3Rpb24gOS4xLjIgb2YgY29yZS1jb2FwOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdE Ij7igJxUaGlzIG1lYW5zIHRoZSByZXNwb25zZSB0byBhIERUTFMgc2VjdXJlZCByZXF1ZXN0IE1V U1QgYWx3YXlzIGJlIERUTFM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7Jm5i c3A7IHNlY3VyZWQgdXNpbmcgdGhlIHNhbWUgc2VjdXJpdHkgc2Vzc2lvbiBhbmQgZXBvY2guJm5i c3A7IEFueSBhdHRlbXB0IHRvPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZu YnNwOyBzdXBwbHkgYSBOb1NlYyByZXNwb25zZSB0byBhIERUTFMgcmVxdWVzdCBzaW1wbHkgZG9l cyBub3QgbWF0Y2ggdGhlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNw OyByZXF1ZXN0IGFuZCAodW5sZXNzIGl0IGRvZXMgbWF0Y2ggYW4gdW5yZWxhdGVkIE5vU2VjIHJl cXVlc3QpPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyB0aGVyZWZv cmUgTVVTVCBiZSByZWplY3RlZC7igJw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkl0IHNlZW1zIHVuc2VjdXJlZCByZXNw b25zZXMgYXJlIG5vdCBwb3NzaWJsZSB3aXRob3V0IGFsdGVyaW5nIHRoZSBDb0FQIHJlcXVlc3Qv cmVzcG9uc2UgbWF0Y2hpbmcgcnVsZXMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4yLiBXaG8gaW5pdGlhdGVzIHRoZSBo YW5kc2hha2U8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+4oCcRWl0aGVyIHRoZSBtdWx0 aWNhc3QgbWVzc2FnZSBzZW5kZXIgb3IgbGlzdGVuZXIgbWF5IGluaXRpYXRlIHRoZTxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsgdW5pY2FzdCBEVExTIGhhbmRzaGFr ZS4g4oCcPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPi0mZ3Q7IENvbXBhcmUgdG8gc2Vj dGlvbiA5LjEuMSBvZiBjb3JlLWNvYXA6PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPuKA nFRoZSBlbmRwb2ludCBhY3RpbmcgYXMgdGhlIENvQVAgY2xpZW50IHNob3VsZCBhbHNvIGFjdCBh cyB0aGUgRFRMUzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsgY2xp ZW50LiZuYnNwOyBJdCBzaG91bGQgaW5pdGlhdGUgYSBzZXNzaW9uIHRvIHRoZSBzZXJ2ZXIgb24g dGhlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyBhcHByb3ByaWF0 ZSBwb3J0LuKAnTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6IzFGNDk3RCI+YmVzdCByZWdhcmRzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjoj MUY0OTdEIj5Fc2tvPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9w OnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+RnJvbTo8L3NwYW4+ PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9t YSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4gZHRscy1pb3QgWzxhIGhyZWY9Im1haWx0 bzpkdGxzLWlvdC1ib3VuY2VzQGlldGYub3JnIj5tYWlsdG86ZHRscy1pb3QtYm91bmNlc0BpZXRm Lm9yZzwvYT5dDQo8Yj5PbiBCZWhhbGYgT2YgPC9iPlJhaG1hbiwgQWtiYXI8YnI+DQo8Yj5TZW50 OjwvYj4gRnJpZGF5LCBNYXkgMDksIDIwMTQgMjE6NDA8YnI+DQo8Yj5Ubzo8L2I+IE1hcmNvIFRp bG9jYTxicj4NCjxiPkNjOjwvYj4gS3VtYXIsIFNhbmRlZXA7IDxhIGhyZWY9Im1haWx0bzpkdGxz LWlvdEBpZXRmLm9yZyI+ZHRscy1pb3RAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+ IFJlOiBbRHRscy1pb3RdIFVuaWNhc3QgcmVzcG9uc2VzIGluIGRyYWZ0LWtlb2gtZGljZS1tdWx0 aWNhc3Qtc2VjdXJpdHktMDU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+SGkgTWFy Y28sPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztj b2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+V2UgaGF2 ZSB1cGRhdGVkIHRoZSBkcmFmdCB0byBjYXB0dXJlIHlvdXIgcmVtYWluaW5nIGNvbW1lbnRzIGJl bG93LiZuYnNwOyBQbGVhc2UgcmV2aWV3IGFuZCB0ZWxsIHVzIGlmIHlvdSBoYXZlIGFueSBvdGhl ciBjb21tZW50cy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdE Ij48YSBocmVmPSJodHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1rZW9oLWRpY2UtbXVs dGljYXN0LXNlY3VyaXR5LTA3I3NlY3Rpb24tNC41Ij5odHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9kcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA3I3NlY3Rpb24tNC41PC9hPg0K PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90OyI+NC41LiZuYnNwOyBVbmljYXN0IFJlc3BvbnNlcyB0byBNdWx0aWNhc3Qg TWVzc2FnZXM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZx dW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBO ZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBJbiBDb0FQLCByZXNwb25zZXMgdG8gbXVsdGljYXN0IG1l c3NhZ2VzIGFyZSBhbHdheXMgc2VudCBiYWNrIGFzPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyB1bmljYXN0LiZuYnNwOyBU aGF0IGlzLCB0aGUgZ3JvdXAgbWVtYmVycyB0aGF0IHJlY2VpdmUgYSBtdWx0aWNhc3QgbWVzc2Fn ZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4m bmJzcDsmbmJzcDsgbWF5IGluZGl2aWR1YWxseSBkZWNpZGUgdG8gc2VuZCAob3Igc3VwcHJlc3Mp IGEgdW5pY2FzdCByZXNwb25zZSBhczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgZGVzY3JpYmVkIGluIFNlY3Rpb24gMi41 IG9mIFtJLUQuaWV0Zi1jb3JlLWdyb3VwY29tbV0uJm5ic3A7IFRoZSB1bmljYXN0PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNw OyByZXNwb25zZXMgdG8gYSBEVExTLWJhc2VkIG11bHRpY2FzdCBtZXNzYWdlIG1heSBvcHRpb25h bGx5IGJlIHNlY3VyZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IFNwZWNpZmljYWxseSwgdGhlIHVuaWNhc3QgcmVzcG9u c2UgbWF5IGJlIHNlbnQgYmFjayBhcyBhIHVuaWNhc3QgRFRMUzxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgYXMgZGVzY3Jp YmVkIGluIFNlY3Rpb24gOS4xIG9mIFtJLUQuaWV0Zi1jb3JlLWNvYXBdLiZuYnNwOyBUaGlzIHJl cXVpcmVzPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPiZuYnNwOyZuYnNwOyB0aGF0IGEgdW5pY2FzdCBEVExTIGhhbmRzaGFrZSB3YXMgcHJldmlv dXNseSBpbml0aWF0ZWQgYmV0d2VlbiB0aGU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IG11bHRpY2FzdCBtZXNzYWdlIHNl bmRlciBhbmQgbGlzdGVuZXIuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgRWl0aGVyIHRoZSBtdWx0aWNhc3QgbWVz c2FnZSBzZW5kZXIgb3IgbGlzdGVuZXIgbWF5IGluaXRpYXRlIHRoZTxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgdW5pY2Fz dCBEVExTIGhhbmRzaGFrZS4mbmJzcDsgSWYgdGhlIERUTFMgaGFuZHNoYWtlIHdhcyBpbml0aWF0 ZWQgYnkgdGhlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPiZuYnNwOyZuYnNwOyBtdWx0aWNhc3QgbWVzc2FnZSBzZW5kZXIsIGl0IHJlcXVpcmVz IHRoYXQgdGhlIHNlbmRlciBiZSBhd2FyZSBvZiB0aGU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IG1lbWJlcnNoaXAgb2Yg dGhlIG11bHRpY2FzdCBncm91cC4mbmJzcDsgVGhpcyBjYW4gYmUgYWNjb21wbGlzaGVkLCBmb3I8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5i c3A7Jm5ic3A7IGV4YW1wbGUsIGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDIuNiBvZiBbSS1ELmll dGYtY29yZS1jb2FwXS4mbmJzcDsgSWYgdGhlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBsaXN0ZW5lciBpbml0aWF0ZWQg dGhlIERUTFMgaGFuZHNoYWtlLCBpdCBtYXkgaGF2ZSBkb25lIHNvLCBmb3I8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IGV4 YW1wbGUsIGFmdGVyIHJlY2VpdmluZyBhIG11bHRpY2FzdCBtZXNzYWdlIGZvciB0aGUgZmlyc3Qg dGltZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPiZuYnNwOyZuYnNwOyBJbiB0aGUgZXh0cmVtZSBzY2VuYXJpbywgYSBtdWx0aWNhc3Qg c2VuZGVyIG1heSBhdHRlbXB0IHRvIGluaXRpYXRlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyB0aGUgdW5pY2FzdCBEVExT IGhhbmRzaGFrZSB3aXRoIGFsbCwgb3IgYSBzdWJzZXQgb2YsIGtub3duIGxpc3RlbmVyczxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsm bmJzcDsganVzdCBhZnRlciBpdCBzZW5kcyBvdXQgdGhlIERUTFMtYmFzZWQgbXVsdGljYXN0IG1l c3NhZ2UuJm5ic3A7IFRoaXMgbWF5PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyByZXN1bHQgaW4gdGhlIG11bHRpY2FzdCBz ZW5kZXIgaGF2aW5nIHRvIHByb2Nlc3MgdW5pY2FzdCBEVExTPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBoYW5kc2hha2Ug bWVzc2FnZXMgZnJvbSBtdWx0aXBsZSBtdWx0aWNhc3QgbGlzdGVuZXJzIGluIGEgc2hvcnQ8bzpw PjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7 Jm5ic3A7IHBlcmlvZC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBOb3RlOiBUaGVyZSBpcyBhbiBvYnZpb3VzIHRp bWluZyBhbmQgcHJvY2Vzc2luZyBsb2FkIGlzc3VlIGZvciB0aGU8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IG11bHRpY2Fz dCBzZW5kZXIgaW4gdGhlIHNjZW5hcmlvIHdoZXJlIGl0IGF0dGVtcHRzIHRvIGluaXRpYXRlIHRo ZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4m bmJzcDsmbmJzcDsgdW5pY2FzdCBEVExTIGhhbmRzaGFrZXMgd2l0aCBhbGwvc29tZSBvZiBpdHMg a25vd24gbGlzdGVuZXJzIGp1c3Q8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IGFmdGVyIGl0IHNlbmRzIG91dCB0aGUgRFRM Uy1iYXNlZCBtdWx0aWNhc3QgbWVzc2FnZS4mbmJzcDsgSW4gdGhpcyBjYXNlLDxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsg dGhlIHByb2Nlc3NpbmcgbG9hZCBpbiB0aGUgbXVsdGljYXN0IHNlbmRlciAoaS5lLiB1bmljYXN0 IERUTFM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+Jm5ic3A7Jm5ic3A7IGNsaWVudCkgaXMgcmVkdWNlZCBzb21ld2hhdCBieSB0aGUgZmFjdCB0 aGF0IENvQVAgcmVxdWlyZXMgYSBiYWNrLW9mZjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgYW5kIHJhbmRvbWl6YXRpb24g b2YgdGhlIHVuaWNhc3QgcmVzcG9uc2UgYnkgdGhlIExlaXN1cmUgdGltZXI8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IG1l Y2hhbmlzbSBhcyBkZXNjcmliZWQgaW4gU2VjdGlvbiA4LjIgb2YgW0ktRC5pZXRmLWNvcmUtY29h cF0uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkJl c3QgUmVnYXJkcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdE Ij5Ba2JhcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9u ZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBp biI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+ RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4gZHRscy1pb3QgWzxh IGhyZWY9Im1haWx0bzpkdGxzLWlvdC1ib3VuY2VzQGlldGYub3JnIj5tYWlsdG86ZHRscy1pb3Qt Ym91bmNlc0BpZXRmLm9yZzwvYT5dDQo8Yj5PbiBCZWhhbGYgT2YgPC9iPlJhaG1hbiwgQWtiYXI8 YnI+DQo8Yj5TZW50OjwvYj4gVHVlc2RheSwgTWF5IDA2LCAyMDE0IDQ6NDQgUE08YnI+DQo8Yj5U bzo8L2I+IE1hcmNvIFRpbG9jYTxicj4NCjxiPkNjOjwvYj4gS3VtYXIsIFNhbmRlZXA7IDxhIGhy ZWY9Im1haWx0bzpkdGxzLWlvdEBpZXRmLm9yZyI+ZHRscy1pb3RAaWV0Zi5vcmc8L2E+PGJyPg0K PGI+U3ViamVjdDo8L2I+IFJlOiBbRHRscy1pb3RdIFVuaWNhc3QgcmVzcG9uc2VzIGluIGRyYWZ0 LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 IzFGNDk3RCI+SGkgTWFyY28sPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 IzFGNDk3RCI+VGhhbmtzIGZvciByZXZpZXdpbmcgdGhlIHVwZGF0ZWQgZHJhZnQuJm5ic3A7IEFs c28gaGVyZSBpcyBteSBmZWVkYmFjayB0byB5b3VyIHR3byBuZXcgcXVlc3Rpb25zOjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPiZndDsxKSBJbiBvcmRlciB0byBwZXJmb3JtIGEgRFRMUyBoYW5kc2hha2UgYmVmb3JlL2Fm dGVyIHNlbmRpbmcgYSBtdWx0aWNhc3QgbWVzc2FnZSwgYSBzZW5kZXI8bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZndDsgbm9kZSBzaG91bGQgYmUgYXdhcmUgb2YgdGhlIGdy b3VwIG1lbWJlcnNoaXAsIGVzcGVjaWFsbHkgd2hhdCBhcmUgdGhlIGxpc3RlbmVyIG5vZGVzIGN1 cnJlbnRseTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jmd0OyBwcmVzZW50 IGluIHRoZSBncm91cC4gT2YgY291cnNlLCBzdWNoIGEgZ3JvdXAgbWVtYmVyc2hpcCBtYXkgY2hh bmdlIG92ZXIgdGltZSwgdXBvbiBuZXcgbm9kZXM8YnI+DQomZ3Q7am9pbmluZyB0aGUgZ3JvdXAu IEhvd2V2ZXIsIFNlY3Rpb24gMy4xIGluIHRoZSBkcmFmdCBzdGF0ZXMgdGhhdCAmcXVvdDtBbnkg ZGV2aWNlIGNhbiBpbiBwcmluY2lwbGUgZGVjaWRlPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mZ3Q7dG8gbGlzdGVuIHRvIGFueSBJUHY2IG11bHRpY2FzdCBhZGRyZXNzLiBU aGlzIGFsc28gbWVhbnMgYXBwbGljYXRpb25zIG9uIHRoZSBvdGhlciBkZXZpY2VzIGRvIG5vdDxv OnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jmd0O2tub3csIG9yIGRvIG5vdCBn ZXQgbm90aWZpZWQsIHdoZW4gbmV3IGxpc3RlbmVycyBqb2luIHRoZSBuZXR3b3JrLiZxdW90Oy4g Q291bGRuJ3QgdGhpcyBiZSBhIHByb2JsZW08bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiZndDtmb3IgdGhlIHN1Z2dlc3RlZCBhcHByb2FjaD88bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPlllcywgaW4g cHJpbmNpcGxlLCBhbnkgZGV2aWNlIGNhbiBkZWNpZGUgdG8gbGlzdGVuIGZvciBhbnkgSVB2NiBt dWx0aWNhc3QgYWRkcmVzcy4mbmJzcDsgQnV0IGluIHByYWN0aWNlIG9mIGNvdXJzZSB0aGVyZSBh cmUgSVB2NiBtdWx0aWNhc3QgcmVsYXRlZCBwcm90b2NvbHMgZm9yDQogcm91dGluZy9qb2luaW5n IHRoYXQgZGljdGF0ZSB3aG8gY2FuIDx1PnN1Y2Nlc3NmdWxseTwvdT4gbGlzdGVuIGZvciBhbmQg cmVjZWl2ZSBhbiBJUHY2IG11bHRpY2FzdCBwYWNrZXQuJm5ic3A7IEZvciBleGFtcGxlLCB1bmxl c3MgYSBkZXZpY2UgdXNlcyBhIHByb3RvY29sIGxpa2UgTUxEIHRvIGV4cGxpY2l0bHkgam9pbiBh IG11bHRpY2FzdCBncm91cCwgdGhlIG5ldHdvcmsgd2lsbCBuZXZlciByb3V0ZSB0aGUgbXVsdGlj YXN0IHBhY2tldHMgb2YgaW50ZXJlc3QNCiB0byB0aGUgc3ViLW5ldHdvcmsgb2YgdGhlIGRldmlj ZS4mbmJzcDsgVGhpcyBpcyBhbGwgZXhwbGFpbmVkIGF0IGEgaGlnaCBsZXZlbCBpbiB0aGUgSS5E Lmdyb3VwY29tbSByZWZlcmVuY2UgKDxhIGhyZWY9Imh0dHA6Ly90b29scy5pZXRmLm9yZy9odG1s L2RyYWZ0LWlldGYtY29yZS1ncm91cGNvbW0tMTgjc2VjdGlvbi0yLjEiPmh0dHA6Ly90b29scy5p ZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtY29yZS1ncm91cGNvbW0tMTgjc2VjdGlvbi0yLjE8L2E+ ICkNCiAuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Oztjb2xvcjojMUY0OTdEIj5UaGUgb3RoZXIgcGFydCBvZiB5b3VyIHF1ZXN0aW9uIHJlZmVycyB0 byBob3cgZG9lcyB0aGUgc2VuZGVyIG5vZGUga25vdyB3aG8gaXMgcGFydCBvZiB0aGUgZ3JvdXAu Jm5ic3A7IFlvdSBhcmUgY29ycmVjdCB0aGF0IGl0IGlzIHZlcnkgZGlmZmljdWx0IHRvIGtub3cg cHJlY2lzZWx5DQogdGhlIG1lbWJlcnNoaXAgb2YgYSBncm91cC4mbmJzcDsgVGhhdCBpcyB3aHkg d2UgaGFkIHRoZSBzdWJ0bGUgcmVmZXJlbmNlIHRvIOKAnGtub3duIGxpc3RlbmVyc+KAnS4mbmJz cDsgSG93IHlvdSBhY3R1YWxseSBrbm93IHRoZSBtZW1iZXJzaGlwIGRlcGVuZHMgb24gdGhlIG1p eCBvZiBwcm90b2NvbHMgdXNlZCAoYW5kIGlzIGluIGZhY3QgaXQgaXMgbm90IGFsd2F5cyBwb3Nz aWJsZSB0byBrbm93IGFsbCB0aGUgbWVtYmVycyBhY2N1cmF0ZWx5KS4mbmJzcDsgQnV0IGZvciBD b0FQDQogZ3JvdXAgbWVtYmVyIGRpc2NvdmVyeSwgdGhlcmUgaXMgJm5ic3A7YWdhaW4gZ3VpZGFu Y2UgZ2l2ZW4gaW4gdGhlIEkuRC5ncm91cGNvbW0gcmVmZXJlbmNlIChzcGVjaWZpY2FsbHkgaW4N CjxhIGhyZWY9Imh0dHA6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtY29yZS1ncm91 cGNvbW0tMTgjc2VjdGlvbi0yLjYiPmh0dHA6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWll dGYtY29yZS1ncm91cGNvbW0tMTgjc2VjdGlvbi0yLjY8L2E+ICkuJm5ic3A7IFdlIGNhbiBtYWtl IHRoaXMgcG9pbnQgYSBiaXQgbW9yZSBleHBsaWNpdCBpbiB0aGUgbmV4dCB1cGRhdGUgb2Ygb3Vy IEktRC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPiZndDsyKSBBbiBhbHRlcm5hdGl2ZSBhcHByb2FjaCB0byB0aGUgb25lIHN1Z2dlc3RlZCBp biBTZWN0aW9uIDQuNSBtYXkgY29uc2lzdCBpbiBhIGxpc3RlbmVyIG5vZGUgZXN0YWJsaXNoaW5n PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mZ3Q7IGEgdW5pY2FzdCBEVExT IHNlc3Npb24gKGkuZS4gc3RhcnRpbmcgYSBEVExTIGhhbmRzaGFrZSkgd2l0aCB0aGUgc2VuZGVy IG5vZGUsIHVwb24gcmVjZWl2aW5nIGEgbXVsdGljYXN0PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj4mZ3Q7IG1lc3NhZ2UgZm9yIHRoZSBmaXJzdCB0aW1lLjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2Nv bG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5ZZXMsIGdv b2QgcG9pbnQhJm5ic3A7IFdlIGNhbiBhZGQgdGhpcyB0byB0aGUgSS1EIGluIG91ciBuZXh0IHVw ZGF0ZS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkJl c3QgUmVnYXJkcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdE Ij5Ba2JhcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDsiPiBNYXJjbyBUaWxvY2EgWzxhIGhyZWY9Im1haWx0bzptYXJjb0BzaWNzLnNlIj5t YWlsdG86bWFyY29Ac2ljcy5zZTwvYT5dDQo8YnI+DQo8Yj5TZW50OjwvYj4gVHVlc2RheSwgTWF5 IDA2LCAyMDE0IDEyOjMyIFBNPGJyPg0KPGI+VG86PC9iPiBSYWhtYW4sIEFrYmFyPGJyPg0KPGI+ Q2M6PC9iPiBLdW1hciwgU2FuZGVlcDsgPGEgaHJlZj0ibWFpbHRvOmR0bHMtaW90QGlldGYub3Jn Ij5kdGxzLWlvdEBpZXRmLm9yZzwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtEdGxzLWlv dF0gVW5pY2FzdCByZXNwb25zZXMgaW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0 eS0wNTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhlbGxvIEFrYmFyLDxv OnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtzIGZvciBo YXZpbmcgY29uc2lkZXJlZCBteSBxdWVzdGlvbi4gVGhlIG5ldyBTZWN0aW9uIDQuNSBsb29rcyBm aW5lIHRvIG1lLiBBbHNvLCBJIGhhdmUgdGhlIHR3byBmb2xsb3dpbmcgY29tbWVudHMuPG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNw OzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjEpIEluIG9y ZGVyIHRvIHBlcmZvcm0gYSBEVExTIGhhbmRzaGFrZSBiZWZvcmUvYWZ0ZXIgc2VuZGluZyBhIG11 bHRpY2FzdCBtZXNzYWdlLCBhIHNlbmRlciBub2RlIHNob3VsZCBiZSBhd2FyZSBvZiB0aGUgZ3Jv dXAgbWVtYmVyc2hpcCwgZXNwZWNpYWxseSB3aGF0IGFyZSB0aGUgbGlzdGVuZXIgbm9kZXMgY3Vy cmVudGx5IHByZXNlbnQgaW4gdGhlIGdyb3VwLiBPZiBjb3Vyc2UsIHN1Y2ggYSBncm91cCBtZW1i ZXJzaGlwDQogbWF5IGNoYW5nZSBvdmVyIHRpbWUsIHVwb24gbmV3IG5vZGVzIGpvaW5pbmcgdGhl IGdyb3VwLiBIb3dldmVyLCBTZWN0aW9uIDMuMSBpbiB0aGUgZHJhZnQgc3RhdGVzIHRoYXQgJnF1 b3Q7QW55IGRldmljZSBjYW4gaW4gcHJpbmNpcGxlIGRlY2lkZSB0byBsaXN0ZW4gdG8gYW55IElQ djYgbXVsdGljYXN0IGFkZHJlc3MuIFRoaXMgYWxzbyBtZWFucyBhcHBsaWNhdGlvbnMgb24gdGhl IG90aGVyIGRldmljZXMgZG8gbm90IGtub3csIG9yIGRvIG5vdCBnZXQNCiBub3RpZmllZCwgd2hl biBuZXcgbGlzdGVuZXJzIGpvaW4gdGhlIG5ldHdvcmsuJnF1b3Q7LiBDb3VsZG4ndCB0aGlzIGJl IGEgcHJvYmxlbSBmb3IgdGhlIHN1Z2dlc3RlZCBhcHByb2FjaD88bzpwPjwvbzpwPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+MikgQW4gYWx0ZXJuYXRpdmUgYXBw cm9hY2ggdG8gdGhlIG9uZSBzdWdnZXN0ZWQgaW4gU2VjdGlvbiA0LjUgbWF5IGNvbnNpc3QgaW4g YSBsaXN0ZW5lciBub2RlIGVzdGFibGlzaGluZyBhIHVuaWNhc3QgRFRMUyBzZXNzaW9uIChpLmUu IHN0YXJ0aW5nIGEgRFRMUyBoYW5kc2hha2UpIHdpdGggdGhlIHNlbmRlciBub2RlLCB1cG9uIHJl Y2VpdmluZyBhIG11bHRpY2FzdCBtZXNzYWdlIGZvciB0aGUgZmlyc3QgdGltZS48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QmVzdCByZWdhcmRz LDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+TWFy Y288bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiA1IE1heSAyMDE0IDIzOjQ1LCBS YWhtYW4sIEFrYmFyICZsdDs8YSBocmVmPSJtYWlsdG86QWtiYXIuUmFobWFuQGludGVyZGlnaXRh bC5jb20iIHRhcmdldD0iX2JsYW5rIj5Ba2Jhci5SYWhtYW5AaW50ZXJkaWdpdGFsLmNvbTwvYT4m Z3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5IaSBNYXJj byw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4m bmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5UaGUgYXV0aG9ycyBoYXZlIG1h ZGUgYW4gdXBkYXRlIHRvIHRoZSBkcmFmdCB0byBhZGRyZXNzIGZ1bGx5IHlvdXIgZ29vZCBxdWVz dGlvbiByZWdhcmRpbmcgaG93IHRvDQogaGFuZGxlIHRoZSB1bmljYXN0IHJlc3BvbnNlcyB0byB0 aGUgbXVsdGljYXN0IHJlc3BvbnNlLiZuYnNwOyBTcGVjaWZpY2FsbHksIHBsZWFzZSByZXZpZXcg dGhlIG5ldyBzZWN0aW9uIDQuNSBhbmQgdGVsbCB1cyBpZiB5b3UgaGF2ZSBhbnkgbW9yZSBxdWVz dGlvbnM6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3 RCI+PGEgaHJlZj0iaHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQta2VvaC1kaWNlLW11 bHRpY2FzdC1zZWN1cml0eS0wNiNzZWN0aW9uLTQuNSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHA6Ly90 b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDYj c2VjdGlvbi00LjU8L2E+PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+NC41 LiZuYnNwOyBVbmljYXN0IFJlc3BvbnNlcyB0byBNdWx0aWNhc3QgTWVzc2FnZXM8L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJz cDsmbmJzcDsgSW4gQ29BUCwgcmVzcG9uc2VzIHRvIG11bHRpY2FzdCBtZXNzYWdlcyBhcmUgYWx3 YXlzIHNlbnQgYmFjayBhczwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291 cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyB1bmljYXN0LiZuYnNwOyBUaGF0IGlzLCB0aGUg Z3JvdXAgbWVtYmVycyB0aGF0IHJlY2VpdmUgYSBtdWx0aWNhc3QgbWVzc2FnZTwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNw OyBtYXkgaW5kaXZpZHVhbGx5IGRlY2lkZSB0byBzZW5kIChvciBzdXBwcmVzcykgYSB1bmljYXN0 IHJlc3BvbnNlIGFzPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IGRlc2NyaWJlZCBpbiBTZWN0aW9uIDIuNSBvZiBbSS1E LmlldGYtY29yZS1ncm91cGNvbW1dLiZuYnNwOyBUaGUgdW5pY2FzdDwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyByZXNw b25zZXMgdG8gYSBEVExTLWJhc2VkIG11bHRpY2FzdCBtZXNzYWdlIG1heSBvcHRpb25hbGx5IGJl IHNlY3VyZS48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgU3BlY2lmaWNhbGx5LCB0aGUgdW5pY2FzdCByZXNwb25zZSBt YXkgYmUgc2VudCBiYWNrIGFzIGEgdW5pY2FzdCBEVExTPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IGFzIGRlc2NyaWJl ZCBpbiBTZWN0aW9uIDkuMSBvZiBbSS1ELmlldGYtY29yZS1jb2FwXS4mbmJzcDsgVGhpcyByZXF1 aXJlczwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPiZuYnNwOyZuYnNwOyB0aGF0IGEgdW5pY2FzdCBEVExTIGhhbmRzaGFrZSB3YXMgcHJldmlv dXNseSBpbml0aWF0ZWQgYmV0d2VlbiB0aGU8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgbXVsdGljYXN0IG1lc3NhZ2Ug c2VuZGVyIGFuZCBsaXN0ZW5lci4mbmJzcDsgSW4gdGhlIGV4dHJlbWUgc2NlbmFyaW8sIGE8L3Nw YW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJz cDsmbmJzcDsgbXVsdGljYXN0IHNlbmRlciBtYXkgYXR0ZW1wdCB0byBpbml0aWF0ZSB0aGUgdW5p Y2FzdCBEVExTIGhhbmRzaGFrZTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyB3aXRoIGFsbCBvciBhIHN1YnNldCBvZiBr bm93biBsaXN0ZW5lcnMganVzdCBiZWZvcmUgb3IganVzdCBhZnRlciBpdDwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBz ZW5kcyBvdXQgdGhlIERUTFMtYmFzZWQgbXVsdGljYXN0IG1lc3NhZ2UuJm5ic3A7IFRoaXMgbWF5 IHJlc3VsdCBpbiB0aGU8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgbXVsdGljYXN0IHNlbmRlciAoaS5lLiB1bmljYXN0 IERUTFMgY2xpZW50KSBoYXZpbmcgdG8gcHJvY2VzcyB1bmljYXN0PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IERUTFMg aGFuZHNoYWtlIG1lc3NhZ2VzIGZyb20gbXVsdGlwbGUgbXVsdGljYXN0IGxpc3RlbmVycyAoaS5l Ljwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi PiZuYnNwOyZuYnNwOyB1bmljYXN0IERUTFMgc2VydmVycykgaW4gYSBzaG9ydCBwZXJpb2QuPC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+Jm5ic3A7Jm5ic3A7IE5vdGU6IFRoZXJlIGlzIGFuIG9idmlvdXMgdGltaW5nIGFuZCBwcm9j ZXNzaW5nIGxvYWQgaXNzdWUgZm9yIHRoZTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBtdWx0aWNhc3Qgc2VuZGVyIGlu IHRoZSBzY2VuYXJpbyB3aGVyZSBpdCBhdHRlbXB0cyB0byBpbml0aWF0ZSB0aGU8L3NwYW4+PG86 cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJz cDsgdW5pY2FzdCBEVExTIGhhbmRzaGFrZXMgd2l0aCBhbGwvc29tZSBvZiBpdHMga25vd24gbGlz dGVuZXJzIGp1c3Q8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8i PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgYWZ0ZXIgaXQgc2VuZHMgb3V0IHRoZSBEVExTLWJhc2Vk IG11bHRpY2FzdCBtZXNzYWdlLiZuYnNwOyBJbiB0aGlzIGNhc2UsPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IHRoZSBw cm9jZXNzaW5nIGxvYWQgaW4gdGhlIG11bHRpY2FzdCBzZW5kZXIgKGkuZS4gdW5pY2FzdCBEVExT PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+ Jm5ic3A7Jm5ic3A7IGNsaWVudCkgaXMgcmVkdWNlZCBzb21ld2hhdCBieSB0aGUgZmFjdCB0aGF0 IENvQVAgcmVxdWlyZXMgYSBiYWNrLW9mZjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBhbmQgcmFuZG9taXphdGlvbiBv ZiB0aGUgdW5pY2FzdCByZXNwb25zZSBieSB0aGUgTGVpc3VyZSB0aW1lcjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBt ZWNoYW5pc20gYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gOC4yIG9mIFtJLUQuaWV0Zi1jb3JlLWNv YXBdLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMx RjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkJlc3QgUmVnYXJk cyw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5B a2Jhcjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0Qi PiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6 bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGlu IDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7Ij5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiBkdGxzLWlv dCBbbWFpbHRvOjxhIGhyZWY9Im1haWx0bzpkdGxzLWlvdC1ib3VuY2VzQGlldGYub3JnIiB0YXJn ZXQ9Il9ibGFuayI+ZHRscy1pb3QtYm91bmNlc0BpZXRmLm9yZzwvYT5dDQo8Yj5PbiBCZWhhbGYg T2YgPC9iPkt1bWFyLCBTYW5kZWVwPGJyPg0KPGI+U2VudDo8L2I+IFdlZG5lc2RheSwgQXByaWwg MDIsIDIwMTQgMzo0NyBBTTxicj4NCjxiPlRvOjwvYj4gTWFyY28gVGlsb2NhOyA8YSBocmVmPSJt YWlsdG86ZHRscy1pb3RAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5kdGxzLWlvdEBpZXRmLm9y ZzwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtEdGxzLWlvdF0gVW5pY2FzdCByZXNwb25z ZXMgaW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNTwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5IaSBNYXJjbzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5 N0QiPlRoZSBkcmFmdCBvbmx5IGFkZHJlc3NlcyB0aGUgcHJvdGVjdGlvbiBvZiBtdWx0aWNhc3Qg dHJhZmZpYy4gSWYgdW5pY2FzdCByZXNwb25zZXMgYXJlIGV4cGVjdGVkIGFuZA0KIGlmIHByb3Rl Y3Rpb24gaXMgcmVxdWlyZWQgZm9yIHN1Y2ggbWVzc2FnZXMsIHRoZW4gZXhpc3RpbmcgdW5pY2Fz dCBwcm90ZWN0aW9uIG1lY2hhbmlzbXMgYmFzZWQgb24gRFRMUyBhcyBzdWdnZXN0ZWQgaW4gZHJh ZnQtaWV0Zi1jb3JlLWNvYXAtMTggc2hvdWxkIGJlIHVzZWQuIFByb3RlY3Rpb24gb2YgYWxsIHVu aWNhc3QgbWVzc2FnZXMgc2hvdWxkIGJlIHRyZWF0ZWQgYXMgd291bGQgYmUgZG9uZSBub3JtYWxs eS4NCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7O2NvbG9yOiMxRjQ5N0QiPkhvcGUgdGhhdCBhbnN3ZXJzIHlvdXIgcXVlc3Rpb24uPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 IzFGNDk3RCI+UmVnYXJkczwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPlNhbmRlZXAN Cjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJsdWUgMS41 cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVy Om5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBp biAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90OyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4gZHRscy1p b3QgWzxhIGhyZWY9Im1haWx0bzpkdGxzLWlvdC1ib3VuY2VzQGlldGYub3JnIiB0YXJnZXQ9Il9i bGFuayI+bWFpbHRvOmR0bHMtaW90LWJvdW5jZXNAaWV0Zi5vcmc8L2E+XQ0KPGI+T24gQmVoYWxm IE9mIDwvYj5NYXJjbyBUaWxvY2E8YnI+DQo8Yj5TZW50OjwvYj4gVHVlc2RheSwgQXByaWwgMDEs IDIwMTQgNjozNSBQTTxicj4NCjxiPlRvOjwvYj4gPGEgaHJlZj0ibWFpbHRvOmR0bHMtaW90QGll dGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+ZHRscy1pb3RAaWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3Vi amVjdDo8L2I+IFtEdGxzLWlvdF0gVW5pY2FzdCByZXNwb25zZXMgaW4gZHJhZnQta2VvaC1kaWNl LW11bHRpY2FzdC1zZWN1cml0eS0wNTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9k aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkRlYXIgYWxsLDxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+QXMgdG8gcG9zc2libGUg cmVzcG9uc2VzIHRvIG11bHRpY2FzdCByZXF1ZXN0cywgU2VjdGlvbiAyLjEgc3RhdGVzIHRoYXQg dGhleSBhcmUgc2VudCBiYWNrIGluIHVuaWNhc3QuIFRoZW4sIG5vIGZ1cnRoZXIgZGV0YWlscyBh cmUgcHJvdmlkZWQgYWJvdXQgdGhlaXIgcHJvdGVjdGlvbi48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkFyZSBzdWNoIHJlc3BvbnNlcyBz dXBwb3NlZCB0byBiZSBwcm90ZWN0ZWQgdGhyb3VnaCBhICZxdW90O3JlZ3VsYXImcXVvdDsgRFRM UyBzZXNzaW9uLCB3aGljaCBtdXN0IGJlIChvciBoYXMgcHJldmlvdXNseSBiZWVuKSBlc3RhYmxp c2hlZCBiZXR3ZWVuIHRoZSBzZW5kZXIgYW5kIGxpc3RlbmVyPzxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Q2hlZXJzLDxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJn aW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5NYXJjbzxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZu YnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2IGNsYXNzPSJNc29Ob3Jt YWwiIGFsaWduPSJjZW50ZXIiIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+DQo8aHIgc2l6ZT0i MiIgd2lkdGg9IjEwMCUiIGFsaWduPSJjZW50ZXIiPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0 OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7QXJp YWwmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjpncmF5Ij5UaGUgaW5mb3JtYXRp b24gY29udGFpbmVkIGluIHRoaXMgbWVzc2FnZSBtYXkgYmUgY29uZmlkZW50aWFsIGFuZCBsZWdh bGx5IHByb3RlY3RlZCB1bmRlciBhcHBsaWNhYmxlIGxhdy4NCiBUaGUgbWVzc2FnZSBpcyBpbnRl bmRlZCBzb2xlbHkgZm9yIHRoZSBhZGRyZXNzZWUocykuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRl bmRlZCByZWNpcGllbnQsIHlvdSBhcmUgaGVyZWJ5IG5vdGlmaWVkIHRoYXQgYW55IHVzZSwgZm9y d2FyZGluZywgZGlzc2VtaW5hdGlvbiwgb3IgcmVwcm9kdWN0aW9uIG9mIHRoaXMgbWVzc2FnZSBp cyBzdHJpY3RseSBwcm9oaWJpdGVkIGFuZCBtYXkgYmUgdW5sYXdmdWwuIElmIHlvdSBhcmUgbm90 IHRoZSBpbnRlbmRlZA0KIHJlY2lwaWVudCwgcGxlYXNlIGNvbnRhY3QgdGhlIHNlbmRlciBieSBy ZXR1cm4gZS1tYWlsIGFuZCBkZXN0cm95IGFsbCBjb3BpZXMgb2YgdGhlIG9yaWdpbmFsIG1lc3Nh Z2UuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_031DD135F9160444ABBE3B0C36CED61836D7B49EAMSPRD9003MB066_-- From nobody Tue May 20 06:04:50 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 36A161A06E0 for ; Tue, 20 May 2014 06:04:47 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.551 X-Spam-Level: X-Spam-Status: No, score=-1.551 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, SPF_HELO_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5bnwlnV8c1lN for ; Tue, 20 May 2014 06:04:46 -0700 (PDT) Received: from informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4032D1A06DD for ; Tue, 20 May 2014 06:04:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from smtp-fb3.informatik.uni-bremen.de (smtp-fb3.informatik.uni-bremen.de [134.102.224.120]) by informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id s4KD4c5a014598; Tue, 20 May 2014 15:04:38 +0200 (CEST) Received: from [192.168.217.145] (p5489092F.dip0.t-ipconnect.de [84.137.9.47]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtp-fb3.informatik.uni-bremen.de (Postfix) with ESMTPSA id 214B71877; Tue, 20 May 2014 15:04:36 +0200 (CEST) Content-Type: text/plain; charset=windows-1252 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.2\)) From: Carsten Bormann In-Reply-To: <031DD135F9160444ABBE3B0C36CED61836D7B49E@AMSPRD9003MB066.MGDPHG.emi.philips.com> Date: Tue, 20 May 2014 15:04:35 +0200 X-Mao-Original-Outgoing-Id: 422283875.290912-99f0e06104093ecd2920ced365312ae5 Content-Transfer-Encoding: quoted-printable Message-Id: References: <031DD135F9160444ABBE3B0C36CED61836D7A1E1@AMSPRD9003MB066.MGDPHG.emi.philips.com> <031DD135F9160444ABBE3B0C36CED61836D7B49E@AMSPRD9003MB066.MGDPHG.emi.philips.com> To: "Dijk, Esko" X-Mailer: Apple Mail (2.1878.2) Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/abhyzDEGAB-v4I7JCUjJPUQkB-Y Cc: "Rahman, Akbar" , Marco Tiloca , "Kumar, Sandeep" , "dtls-iot@ietf.org" Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 May 2014 13:04:47 -0000 On 20 May 2014, at 14:28, Dijk, Esko wrote: > 1B. if standard CoAP matching rules are not followed, the new matching = rules need to be defined. What complicates this is that a client doesn=92t= know a priori if the server would respond DTLS-secured or not. So it = needs two methods of matching, one for secured responses and another for = unsecured ones. We have similar problems in other alternate-transports scenarios, where = the response channel is not necessarily tightly bound to the request = channel. I would expect we will arrive at similar solutions here. Gr=FC=DFe, Carsten From nobody Wed May 21 07:20:33 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E0E141A0687 for ; Wed, 21 May 2014 07:20:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.55 X-Spam-Level: X-Spam-Status: No, score=-2.55 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.651] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zy_udaWMR16R for ; Wed, 21 May 2014 07:20:24 -0700 (PDT) Received: from smtp-in1.interdigital.com (smtp-in1.interdigital.com [64.208.228.133]) by ietfa.amsl.com (Postfix) with ESMTP id A18761A04B1 for ; Wed, 21 May 2014 07:20:23 -0700 (PDT) X-ASG-Debug-ID: 1400682020-06daaa09ef182a80001-roOjxa Received: from smtp-out1.interdigital.com (sahara.interdigital.com [10.0.128.27]) by smtp-in1.interdigital.com with ESMTP id f6yRQpPyBpycxgaD for ; Wed, 21 May 2014 10:20:20 -0400 (EDT) X-Barracuda-Envelope-From: Akbar.Rahman@InterDigital.com Received: from SAM.InterDigital.com ([10.30.2.11]) by smtp-out1.interdigital.com with Microsoft SMTPSVC(6.0.3790.4675); Wed, 21 May 2014 10:20:19 -0400 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01CF74FF.CB182794" Date: Wed, 21 May 2014 10:20:18 -0400 X-ASG-Orig-Subj: RE: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 Message-ID: In-Reply-To: <031DD135F9160444ABBE3B0C36CED61836D7B49E@AMSPRD9003MB066.MGDPHG.emi.philips.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 Thread-Index: AQHPTke1MAdfpqid3kOruFyexTfVEJsyuiUAgAE6ooCAAEaMgIAEpRcAgA93i1CAAEkTgIABCnEggAG2R3A= References: <031DD135F9160444ABBE3B0C36CED61836D7A1E1@AMSPRD9003MB066.MGDPHG.emi.philips.com> <031DD135F9160444ABBE3B0C36CED61836D7B49E@AMSPRD9003MB066.MGDPHG.emi.philips.com> From: "Rahman, Akbar" To: "Dijk, Esko" X-OriginalArrivalTime: 21 May 2014 14:20:19.0509 (UTC) FILETIME=[CB67BE50:01CF74FF] X-Barracuda-Connect: sahara.interdigital.com[10.0.128.27] X-Barracuda-Start-Time: 1400682020 X-Barracuda-URL: http://10.1.245.3:8000/cgi-mod/mark.cgi X-Virus-Scanned: by bsmtpd at interdigital.com X-Barracuda-BRTS-Status: 1 X-Barracuda-Spam-Score: 0.00 X-Barracuda-Spam-Status: No, SCORE=0.00 using per-user scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=9.0 tests=BSF_SC0_MISMATCH_TO, HTML_MESSAGE X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.5990 Rule breakdown below pts rule name description ---- ---------------------- -------------------------------------------------- 0.00 BSF_SC0_MISMATCH_TO Envelope rcpt doesn't match header 0.00 HTML_MESSAGE BODY: HTML included in message Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/gwRrqWkJrFlzANgV4J-5N3rgvis Cc: Marco Tiloca , "Kumar, Sandeep" , dtls-iot@ietf.org Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 May 2014 14:20:29 -0000 This is a multi-part message in MIME format. ------_=_NextPart_001_01CF74FF.CB182794 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgRXNrbywNCg0KIA0KDQogDQoNCkkgYWdyZWUgb24geW91ciBwb2ludHMgMUEgYW5kIDFCIGFu ZCB3aWxsIHdvcmsgd2l0aCB5b3Ugb2ZmIGxpbmUgdG8gdXBkYXRlIHRoZSBkcmFmdCB0byBjYXB0 dXJlIHRoZXNlIHBvaW50cy4NCg0KIA0KDQpJIGRpZCBoYXZlIG9uZSBpbXBvcnRhbnQgcXVlc3Rp b24gdGhvdWdoIG9uIHlvdXIgbGFzdCBwb2ludDoNCg0KIA0KDQo+VGhlIGFib3ZlIGlzc3VlcyB0 b2dldGhlciBzZWVtIHF1aXRlIHNlcmlvdXMuICBQZXJoYXBzIGFuIGFsdGVybmF0aXZlIHNvbHV0 aW9uIGlzIGJldHRlciBpbiB3aGljaCB0aGUgZ3JvdXAga2V5DQoNCj4gaXMgdXNlZCB0byBEVExT LXByb3RlY3QgdGhlIHJlc3BvbnNlLiBPciBhbHRlcm5hdGl2ZWx5LCBhIHNlcGFyYXRlIOKAnHJl Y2VpdmVyc+KAnSBzZWN1cml0eSBncm91cCBjb3VsZCBiZSBjcmVhdGVkDQoNCj50aGF0IGFsbG93 cyBlYWNoIHJlY2VpdmVyIHRvIHJlc3BvbmQgYW5kIHRoZSBzZW5kZXIgdG8gcmVhZCB0aGUgcmVz cG9uc2UsIGJ1dCBub2RlcyBvdXRzaWRlIHRoZSANCg0KPnNlbmRlci9yZWNlaXZlciBncm91cHMg Y2Fubm90IGFjY2VzcyB0aGUgbWVzc2FnZXMgdGh1cyBleGNoYW5nZWQuDQoNCiANCg0KQXJlICB5 b3UgcHJvcG9zaW5nIGNoYW5naW5nIHRoZSBjdXJyZW50IEdyb3VwY29tbSBJLUQgbW9kZWwgb2Yg c3RyaWN0bHkgdW5pY2FzdCByZXNwb25zZXMgdG8gYSBtdWx0aWNhc3QgQ29BUCByZXF1ZXN0PyAg WW91ciBzdWdnZXN0aW9uIGFib3ZlIHNlZW1zIHRvIGltcGx5IGNoYW5naW5nIHRoZSBtb2RlbCB0 byBtdWx0aWNhc3QgcmVzcG9uc2VzPw0KDQogDQoNCiANCg0KIA0KDQpCZXN0IFJlZ2FyZHMsDQoN CiANCg0KIA0KDQpBa2Jhcg0KDQogDQoNCkZyb206IERpamssIEVza28gW21haWx0bzplc2tvLmRp amtAcGhpbGlwcy5jb21dIA0KU2VudDogVHVlc2RheSwgTWF5IDIwLCAyMDE0IDg6MjkgQU0NClRv OiBSYWhtYW4sIEFrYmFyDQpDYzogS3VtYXIsIFNhbmRlZXA7IGR0bHMtaW90QGlldGYub3JnOyBN YXJjbyBUaWxvY2ENClN1YmplY3Q6IFJFOiBbRHRscy1pb3RdIFVuaWNhc3QgcmVzcG9uc2VzIGlu IGRyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDUNCg0KIA0KDQpIaSBBa2JhciwN Cg0KIA0KDQpvbiBwb2ludCAxLiB0aGVyZSBhcmUgdHdvIGNvbmNlcm5zIHRoYXQgbmVlZCB0byBi ZSBhZGRyZXNzZWQ6DQoNCiANCg0KMUEuIHJlc3BvbmRpbmcgdW5zZWN1cmVkIGFmdGVyIGEgc2Vj dXJlZCByZXF1ZXN0IHNlZW1zIGEgdmlvbGF0aW9uIG9mIHNlY3VyaXR5IHByaW5jaXBsZXMgYW5k IHRoZSDigJhzcGlyaXTigJkgb2YgQ29BUC0xOC4gRS5nLiB0aGUgcmVzcG9uc2UgY291bGQgYmUg dGFtcGVyZWQgd2l0aC4gV2hhdCB3ZSBjb3VsZCBkbyBpcyB0byBlLmcuIGhhdmUgYSBTSE9VTEQg cmVxdWlyZW1lbnQgZm9yIHNlY3VyZWQgcmVzcG9uc2U7IHdoaWNoIHRoZSBleGNlcHRpb24gY2Fz ZSBiZWluZyBhIHJlc3BvbnNlIHRoYXQgZG9lcyBub3QgY29udGFpbiBhbnkgY3JpdGljYWwvY29u ZmlkZW50aWFsIGluZm9ybWF0aW9uLiBTdWNoIGFzIGEg4oCcMi4wNCBDaGFuZ2Vk4oCdIG9yIOKA nDIuMDIgRGVsZXRlZOKAnSByZXNwb25zZSB3aGljaCBkb2VzIG5vdCBjb250YWluIGFueSBmdXJ0 aGVyIHBheWxvYWQuIEJ1dCBldmVuIGRvaW5nIHRoYXQgdGhlcmUgbWF5IGJlIHVuaW50ZW5kZWQg c2VjdXJpdHkgY29uc2VxdWVuY2VzLCBlLmcuIHJlc3BvbnNlIHNwb29maW5nIG9yIHRhbXBlcmlu Zy4NCg0KIA0KDQoxQi4gaWYgc3RhbmRhcmQgQ29BUCBtYXRjaGluZyBydWxlcyBhcmUgbm90IGZv bGxvd2VkLCB0aGUgbmV3IG1hdGNoaW5nIHJ1bGVzIG5lZWQgdG8gYmUgZGVmaW5lZC4gV2hhdCBj b21wbGljYXRlcyB0aGlzIGlzIHRoYXQgYSBjbGllbnQgZG9lc27igJl0IGtub3cgYSBwcmlvcmkg aWYgdGhlIHNlcnZlciB3b3VsZCByZXNwb25kIERUTFMtc2VjdXJlZCBvciBub3QuIFNvIGl0IG5l ZWRzIHR3byBtZXRob2RzIG9mIG1hdGNoaW5nLCBvbmUgZm9yIHNlY3VyZWQgcmVzcG9uc2VzIGFu ZCBhbm90aGVyIGZvciB1bnNlY3VyZWQgb25lcy4NCg0KIA0KDQpUaGUgYWJvdmUgaXNzdWVzIHRv Z2V0aGVyIHNlZW0gcXVpdGUgc2VyaW91cy4gIFBlcmhhcHMgYW4gYWx0ZXJuYXRpdmUgc29sdXRp b24gaXMgYmV0dGVyIGluIHdoaWNoIHRoZSBncm91cCBrZXkgaXMgdXNlZCB0byBEVExTLXByb3Rl Y3QgdGhlIHJlc3BvbnNlLiBPciBhbHRlcm5hdGl2ZWx5LCBhIHNlcGFyYXRlIOKAnHJlY2VpdmVy c+KAnSBzZWN1cml0eSBncm91cCBjb3VsZCBiZSBjcmVhdGVkIHRoYXQgYWxsb3dzIGVhY2ggcmVj ZWl2ZXIgdG8gcmVzcG9uZCBhbmQgdGhlIHNlbmRlciB0byByZWFkIHRoZSByZXNwb25zZSwgYnV0 IG5vZGVzIG91dHNpZGUgdGhlIHNlbmRlci9yZWNlaXZlciBncm91cHMgY2Fubm90IGFjY2VzcyB0 aGUgbWVzc2FnZXMgdGh1cyBleGNoYW5nZWQuDQoNCiANCg0KT24gcG9pbnQgMi4gSSBhZ3JlZS4N Cg0KIA0KDQpFc2tvDQoNCiANCg0KRnJvbTogUmFobWFuLCBBa2JhciBbbWFpbHRvOkFrYmFyLlJh aG1hbkBJbnRlckRpZ2l0YWwuY29tXSANClNlbnQ6IE1vbmRheSwgTWF5IDE5LCAyMDE0IDIyOjM0 DQpUbzogRGlqaywgRXNrbw0KQ2M6IEt1bWFyLCBTYW5kZWVwOyBkdGxzLWlvdEBpZXRmLm9yZzsg TWFyY28gVGlsb2NhDQpTdWJqZWN0OiBSRTogW0R0bHMtaW90XSBVbmljYXN0IHJlc3BvbnNlcyBp biBkcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA1DQoNCiANCg0KSGkgRXNrbywN Cg0KIA0KDQogDQoNClRoYW5rcyBmb3IgdGhlIGZlZWRiYWNrLg0KDQogDQoNCiANCg0KPiBJdCBz ZWVtcyB1bnNlY3VyZWQgcmVzcG9uc2VzIGFyZSBub3QgcG9zc2libGUgd2l0aG91dCBhbHRlcmlu ZyB0aGUgQ29BUCByZXF1ZXN0L3Jlc3BvbnNlIG1hdGNoaW5nIHJ1bGVzLg0KDQogDQoNClllcywg YnV0IGFzIHlvdSBrbm93IHRoZSBjdXJyZW50IGNvcmUtY29hcC0xOCB0ZXh0IGlzIG9idmlvdXNs eSB3cml0dGVuIGZvciB1bmljYXN0IERUTFMgcmVxdWVzdCBhbmQgcmVzcG9uc2UuICBXZSBhcmUg bm8gbG9uZ2VyIGRlYWxpbmcgd2l0aCB0aGF0IGFzIHdlIGhhdmUgbXVsdGljYXN0IERUTFMgcmVx dWVzdCwgYW5kIHBvdGVudGlhbGx5IHVuaWNhc3QgRFRMUyByZXNwb25zZS4gIChUaGF0IHdhcyB0 aGUgb3JpZ2luYWwgdmFsdWUgaW4gdGhlIHF1ZXN0aW9uIGFza2VkIGJ5IE1hcmNvKS4gIEJ1dCBJ IGRvIGFncmVlIHdpdGggeW91ciBwb2ludCB0aGF0IHRoZSBiYXNlIGNvcmUtY29hcC0xOCBvcGVy YXRpb24gd291bGQgYmUgYWZmZWN0ZWQsIGFuZCB0aGEgIHRoaXMgY2hhbmdlIG11c3QgYmUgY2xl YXJseSBjYXB0dXJlZC4gICBBbmQgSSBndWVzcyBodHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9k cmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA3I3NlY3Rpb24tNC41IHdvdWxkIGJl IHRoZSBub3JtYXRpdmUgdXBkYXRlLiAgU28gd2UgaGF2ZSB0byBtYWtlIHRoZSB0ZXh0IGNsZWFy LiAgRG8geW91IHRoaW5rIHdlIG5lZWQgdG8gZXhwbGFpbiBpdCBiZXR0ZXI/DQoNCiANCg0KIA0K DQotPiBDb21wYXJlIHRvIHNlY3Rpb24gOS4xLjEgb2YgY29yZS1jb2FwOiDigJxUaGUgZW5kcG9p bnQgYWN0aW5nIGFzIHRoZSBDb0FQIGNsaWVudCBzaG91bGQgYWxzbyBhY3QgYXMgdGhlIERUTFMg Y2xpZW50LiAgSXQgc2hvdWxkIGluaXRpYXRlIGEgc2Vzc2lvbiB0byB0aGUgc2VydmVyIG9uIHRo ZSBhcHByb3ByaWF0ZSBwb3J0LuKAnQ0KDQogDQoNCkFnYWluLCBJIHVuZGVyc3Rvb2QgdGhhdCB0 aGlzIHdhcyBvcmlnaW5hbGx5IHdyaXR0ZW4gZnJvbSB0aGUgcG9pbnQgb2YgdmlldyBvZiBhIG5v cm1hbCB1bmljYXN0IENvQVAgcmVxdWVzdC4gIE1lYW5pbmcgdGhhdCBhIENvQVAgY2xpZW50IHdv dWxkIGhhdmUgaW5pdGlhbGx5IHBlcmZvcm1lZCBhIHJlcXVlc3QgKGUuZy4gR0VUKSBhbmQgdGh1 cyBzaG91bGQgYmUgdGhlIG9uZSB0aGF0IGRlY2lkZXMgaWYgdGhlIEdFVCBzaG91bGQgYmUgc2Vj dXJlIG9yIG5vdC4gIEFnYWluIHRoaXMgbG9naWMgZG9lcyBub3QgYXBwbHkgZGlyZWN0bHkgZm9y IHRoZSBtdWx0aWNhc3QgY2FzZSBiZWNhdXNlIHRoZSBpbnRlcmFjdGlvbnMgYXJlIGRpZmZlcmVu dC4gIFNvIEkgYWdyZWUgdGhhdCB3ZSBuZWVkIHRvIGV4cGxpY2l0bHkgc3RhdGUgaW4gZHJhZnQt a2VvaC1kaWNlLW11bHRpY2FzdCB0aGF0IHdlIGFyZSBkZXZpYXRpbmcgZnJvbSB0aGUgb3JpZ2lu YWwgY29yZS1jb2FwLTE4IGFwcHJvYWNoLg0KDQogDQoNCiANCg0KIA0KDQpCZXN0IFJlZ2FyZHMs DQoNCiANCg0KIA0KDQpBa2Jhcg0KDQogDQoNCkZyb206IERpamssIEVza28gW21haWx0bzplc2tv LmRpamtAcGhpbGlwcy5jb21dIA0KU2VudDogTW9uZGF5LCBNYXkgMTksIDIwMTQgMTI6MDIgUE0N ClRvOiBSYWhtYW4sIEFrYmFyOyBNYXJjbyBUaWxvY2ENCkNjOiBLdW1hciwgU2FuZGVlcDsgZHRs cy1pb3RAaWV0Zi5vcmcNClN1YmplY3Q6IFJFOiBbRHRscy1pb3RdIFVuaWNhc3QgcmVzcG9uc2Vz IGluIGRyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDUNCg0KIA0KDQpIaSBBa2Jh ciwNCg0KIA0KDQphcG9sb2dpZXMgZm9yIG15IGxhdGUgaW5wdXQhIE9uIHRoZSBuZXcgdGV4dCwg dHdvIHBvaW50cyAoc2VlIGJlbG93KSBtYXkgbmVlZCBzb21lIGZ1cnRoZXIgZGlzY3Vzc2lvbi4g SGVyZSB3ZSBkZXZpYXRlIGZyb20gdGhlIHNwaXJpdCBvZiBjb3JlLWNvYXAtMTgsIHdoaWNoIG1h eSBuZWVkIHRvIGJlIHBvaW50ZWQgb3V0IGluIHRoZSB0ZXh0IGV4cGxpY2l0bHksIGlmIHRoZSBk ZXZpYXRpb24gaXMgY29uc2lkZXJlZCBhY2NlcHRhYmxlLg0KDQogDQoNCjEuIFVuc2VjdXJlZCBy ZXNwb25zZXMNCg0K4oCcVGhlIHVuaWNhc3QgcmVzcG9uc2VzIHRvIGEgRFRMUy1iYXNlZCBtdWx0 aWNhc3QgbWVzc2FnZSBtYXkgb3B0aW9uYWxseSBiZSBzZWN1cmXigJ0NCg0KLT4gQ29tcGFyZSB0 byBzZWN0aW9uIDkuMS4yIG9mIGNvcmUtY29hcDoNCg0K4oCcVGhpcyBtZWFucyB0aGUgcmVzcG9u c2UgdG8gYSBEVExTIHNlY3VyZWQgcmVxdWVzdCBNVVNUIGFsd2F5cyBiZSBEVExTDQoNCiAgIHNl Y3VyZWQgdXNpbmcgdGhlIHNhbWUgc2VjdXJpdHkgc2Vzc2lvbiBhbmQgZXBvY2guICBBbnkgYXR0 ZW1wdCB0bw0KDQogICBzdXBwbHkgYSBOb1NlYyByZXNwb25zZSB0byBhIERUTFMgcmVxdWVzdCBz aW1wbHkgZG9lcyBub3QgbWF0Y2ggdGhlDQoNCiAgIHJlcXVlc3QgYW5kICh1bmxlc3MgaXQgZG9l cyBtYXRjaCBhbiB1bnJlbGF0ZWQgTm9TZWMgcmVxdWVzdCkNCg0KICAgdGhlcmVmb3JlIE1VU1Qg YmUgcmVqZWN0ZWQu4oCcDQoNCiANCg0KSXQgc2VlbXMgdW5zZWN1cmVkIHJlc3BvbnNlcyBhcmUg bm90IHBvc3NpYmxlIHdpdGhvdXQgYWx0ZXJpbmcgdGhlIENvQVAgcmVxdWVzdC9yZXNwb25zZSBt YXRjaGluZyBydWxlcy4NCg0KIA0KDQoyLiBXaG8gaW5pdGlhdGVzIHRoZSBoYW5kc2hha2UNCg0K 4oCcRWl0aGVyIHRoZSBtdWx0aWNhc3QgbWVzc2FnZSBzZW5kZXIgb3IgbGlzdGVuZXIgbWF5IGlu aXRpYXRlIHRoZQ0KDQogICB1bmljYXN0IERUTFMgaGFuZHNoYWtlLiDigJwNCg0KLT4gQ29tcGFy ZSB0byBzZWN0aW9uIDkuMS4xIG9mIGNvcmUtY29hcDoNCg0K4oCcVGhlIGVuZHBvaW50IGFjdGlu ZyBhcyB0aGUgQ29BUCBjbGllbnQgc2hvdWxkIGFsc28gYWN0IGFzIHRoZSBEVExTDQoNCiAgIGNs aWVudC4gIEl0IHNob3VsZCBpbml0aWF0ZSBhIHNlc3Npb24gdG8gdGhlIHNlcnZlciBvbiB0aGUN Cg0KICAgYXBwcm9wcmlhdGUgcG9ydC7igJ0NCg0KIA0KDQpiZXN0IHJlZ2FyZHMsDQoNCkVza28N Cg0KIA0KDQpGcm9tOiBkdGxzLWlvdCBbbWFpbHRvOmR0bHMtaW90LWJvdW5jZXNAaWV0Zi5vcmdd IE9uIEJlaGFsZiBPZiBSYWhtYW4sIEFrYmFyDQpTZW50OiBGcmlkYXksIE1heSAwOSwgMjAxNCAy MTo0MA0KVG86IE1hcmNvIFRpbG9jYQ0KQ2M6IEt1bWFyLCBTYW5kZWVwOyBkdGxzLWlvdEBpZXRm Lm9yZw0KU3ViamVjdDogUmU6IFtEdGxzLWlvdF0gVW5pY2FzdCByZXNwb25zZXMgaW4gZHJhZnQt a2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNQ0KDQogDQoNCkhpIE1hcmNvLA0KDQogDQoN CiANCg0KV2UgaGF2ZSB1cGRhdGVkIHRoZSBkcmFmdCB0byBjYXB0dXJlIHlvdXIgcmVtYWluaW5n IGNvbW1lbnRzIGJlbG93LiAgUGxlYXNlIHJldmlldyBhbmQgdGVsbCB1cyBpZiB5b3UgaGF2ZSBh bnkgb3RoZXIgY29tbWVudHMuDQoNCiANCg0KIA0KDQpodHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRt bC9kcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA3I3NlY3Rpb24tNC41IA0KDQog DQoNCiANCg0KNC41LiAgVW5pY2FzdCBSZXNwb25zZXMgdG8gTXVsdGljYXN0IE1lc3NhZ2VzDQoN CiANCg0KICAgSW4gQ29BUCwgcmVzcG9uc2VzIHRvIG11bHRpY2FzdCBtZXNzYWdlcyBhcmUgYWx3 YXlzIHNlbnQgYmFjayBhcw0KDQogICB1bmljYXN0LiAgVGhhdCBpcywgdGhlIGdyb3VwIG1lbWJl cnMgdGhhdCByZWNlaXZlIGEgbXVsdGljYXN0IG1lc3NhZ2UNCg0KICAgbWF5IGluZGl2aWR1YWxs eSBkZWNpZGUgdG8gc2VuZCAob3Igc3VwcHJlc3MpIGEgdW5pY2FzdCByZXNwb25zZSBhcw0KDQog ICBkZXNjcmliZWQgaW4gU2VjdGlvbiAyLjUgb2YgW0ktRC5pZXRmLWNvcmUtZ3JvdXBjb21tXS4g IFRoZSB1bmljYXN0DQoNCiAgIHJlc3BvbnNlcyB0byBhIERUTFMtYmFzZWQgbXVsdGljYXN0IG1l c3NhZ2UgbWF5IG9wdGlvbmFsbHkgYmUgc2VjdXJlLg0KDQogICBTcGVjaWZpY2FsbHksIHRoZSB1 bmljYXN0IHJlc3BvbnNlIG1heSBiZSBzZW50IGJhY2sgYXMgYSB1bmljYXN0IERUTFMNCg0KICAg YXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gOS4xIG9mIFtJLUQuaWV0Zi1jb3JlLWNvYXBdLiAgVGhp cyByZXF1aXJlcw0KDQogICB0aGF0IGEgdW5pY2FzdCBEVExTIGhhbmRzaGFrZSB3YXMgcHJldmlv dXNseSBpbml0aWF0ZWQgYmV0d2VlbiB0aGUNCg0KICAgbXVsdGljYXN0IG1lc3NhZ2Ugc2VuZGVy IGFuZCBsaXN0ZW5lci4NCg0KIA0KDQogICBFaXRoZXIgdGhlIG11bHRpY2FzdCBtZXNzYWdlIHNl bmRlciBvciBsaXN0ZW5lciBtYXkgaW5pdGlhdGUgdGhlDQoNCiAgIHVuaWNhc3QgRFRMUyBoYW5k c2hha2UuICBJZiB0aGUgRFRMUyBoYW5kc2hha2Ugd2FzIGluaXRpYXRlZCBieSB0aGUNCg0KICAg bXVsdGljYXN0IG1lc3NhZ2Ugc2VuZGVyLCBpdCByZXF1aXJlcyB0aGF0IHRoZSBzZW5kZXIgYmUg YXdhcmUgb2YgdGhlDQoNCiAgIG1lbWJlcnNoaXAgb2YgdGhlIG11bHRpY2FzdCBncm91cC4gIFRo aXMgY2FuIGJlIGFjY29tcGxpc2hlZCwgZm9yDQoNCiAgIGV4YW1wbGUsIGFzIGRlc2NyaWJlZCBp biBTZWN0aW9uIDIuNiBvZiBbSS1ELmlldGYtY29yZS1jb2FwXS4gIElmIHRoZQ0KDQogICBsaXN0 ZW5lciBpbml0aWF0ZWQgdGhlIERUTFMgaGFuZHNoYWtlLCBpdCBtYXkgaGF2ZSBkb25lIHNvLCBm b3INCg0KICAgZXhhbXBsZSwgYWZ0ZXIgcmVjZWl2aW5nIGEgbXVsdGljYXN0IG1lc3NhZ2UgZm9y IHRoZSBmaXJzdCB0aW1lLg0KDQogDQoNCiAgIEluIHRoZSBleHRyZW1lIHNjZW5hcmlvLCBhIG11 bHRpY2FzdCBzZW5kZXIgbWF5IGF0dGVtcHQgdG8gaW5pdGlhdGUNCg0KICAgdGhlIHVuaWNhc3Qg RFRMUyBoYW5kc2hha2Ugd2l0aCBhbGwsIG9yIGEgc3Vic2V0IG9mLCBrbm93biBsaXN0ZW5lcnMN Cg0KICAganVzdCBhZnRlciBpdCBzZW5kcyBvdXQgdGhlIERUTFMtYmFzZWQgbXVsdGljYXN0IG1l c3NhZ2UuICBUaGlzIG1heQ0KDQogICByZXN1bHQgaW4gdGhlIG11bHRpY2FzdCBzZW5kZXIgaGF2 aW5nIHRvIHByb2Nlc3MgdW5pY2FzdCBEVExTDQoNCiAgIGhhbmRzaGFrZSBtZXNzYWdlcyBmcm9t IG11bHRpcGxlIG11bHRpY2FzdCBsaXN0ZW5lcnMgaW4gYSBzaG9ydA0KDQogICBwZXJpb2QuDQoN CiANCg0KICAgTm90ZTogVGhlcmUgaXMgYW4gb2J2aW91cyB0aW1pbmcgYW5kIHByb2Nlc3Npbmcg bG9hZCBpc3N1ZSBmb3IgdGhlDQoNCiAgIG11bHRpY2FzdCBzZW5kZXIgaW4gdGhlIHNjZW5hcmlv IHdoZXJlIGl0IGF0dGVtcHRzIHRvIGluaXRpYXRlIHRoZQ0KDQogICB1bmljYXN0IERUTFMgaGFu ZHNoYWtlcyB3aXRoIGFsbC9zb21lIG9mIGl0cyBrbm93biBsaXN0ZW5lcnMganVzdA0KDQogICBh ZnRlciBpdCBzZW5kcyBvdXQgdGhlIERUTFMtYmFzZWQgbXVsdGljYXN0IG1lc3NhZ2UuICBJbiB0 aGlzIGNhc2UsDQoNCiAgIHRoZSBwcm9jZXNzaW5nIGxvYWQgaW4gdGhlIG11bHRpY2FzdCBzZW5k ZXIgKGkuZS4gdW5pY2FzdCBEVExTDQoNCiAgIGNsaWVudCkgaXMgcmVkdWNlZCBzb21ld2hhdCBi eSB0aGUgZmFjdCB0aGF0IENvQVAgcmVxdWlyZXMgYSBiYWNrLW9mZg0KDQogICBhbmQgcmFuZG9t aXphdGlvbiBvZiB0aGUgdW5pY2FzdCByZXNwb25zZSBieSB0aGUgTGVpc3VyZSB0aW1lcg0KDQog ICBtZWNoYW5pc20gYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gOC4yIG9mIFtJLUQuaWV0Zi1jb3Jl LWNvYXBdLg0KDQogDQoNCiANCg0KIA0KDQpCZXN0IFJlZ2FyZHMsDQoNCiANCg0KIA0KDQpBa2Jh cg0KDQogDQoNCiANCg0KIA0KDQpGcm9tOiBkdGxzLWlvdCBbbWFpbHRvOmR0bHMtaW90LWJvdW5j ZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBSYWhtYW4sIEFrYmFyDQpTZW50OiBUdWVzZGF5LCBN YXkgMDYsIDIwMTQgNDo0NCBQTQ0KVG86IE1hcmNvIFRpbG9jYQ0KQ2M6IEt1bWFyLCBTYW5kZWVw OyBkdGxzLWlvdEBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtEdGxzLWlvdF0gVW5pY2FzdCByZXNw b25zZXMgaW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNQ0KDQogDQoNCkhp IE1hcmNvLA0KDQogDQoNCiANCg0KVGhhbmtzIGZvciByZXZpZXdpbmcgdGhlIHVwZGF0ZWQgZHJh ZnQuICBBbHNvIGhlcmUgaXMgbXkgZmVlZGJhY2sgdG8geW91ciB0d28gbmV3IHF1ZXN0aW9uczoN Cg0KIA0KDQogDQoNCj4xKSBJbiBvcmRlciB0byBwZXJmb3JtIGEgRFRMUyBoYW5kc2hha2UgYmVm b3JlL2FmdGVyIHNlbmRpbmcgYSBtdWx0aWNhc3QgbWVzc2FnZSwgYSBzZW5kZXINCg0KPiBub2Rl IHNob3VsZCBiZSBhd2FyZSBvZiB0aGUgZ3JvdXAgbWVtYmVyc2hpcCwgZXNwZWNpYWxseSB3aGF0 IGFyZSB0aGUgbGlzdGVuZXIgbm9kZXMgY3VycmVudGx5DQoNCj4gcHJlc2VudCBpbiB0aGUgZ3Jv dXAuIE9mIGNvdXJzZSwgc3VjaCBhIGdyb3VwIG1lbWJlcnNoaXAgbWF5IGNoYW5nZSBvdmVyIHRp bWUsIHVwb24gbmV3IG5vZGVzDQo+am9pbmluZyB0aGUgZ3JvdXAuIEhvd2V2ZXIsIFNlY3Rpb24g My4xIGluIHRoZSBkcmFmdCBzdGF0ZXMgdGhhdCAiQW55IGRldmljZSBjYW4gaW4gcHJpbmNpcGxl IGRlY2lkZQ0KDQo+dG8gbGlzdGVuIHRvIGFueSBJUHY2IG11bHRpY2FzdCBhZGRyZXNzLiBUaGlz IGFsc28gbWVhbnMgYXBwbGljYXRpb25zIG9uIHRoZSBvdGhlciBkZXZpY2VzIGRvIG5vdA0KDQo+ a25vdywgb3IgZG8gbm90IGdldCBub3RpZmllZCwgd2hlbiBuZXcgbGlzdGVuZXJzIGpvaW4gdGhl IG5ldHdvcmsuIi4gQ291bGRuJ3QgdGhpcyBiZSBhIHByb2JsZW0NCg0KPmZvciB0aGUgc3VnZ2Vz dGVkIGFwcHJvYWNoPw0KDQogDQoNClllcywgaW4gcHJpbmNpcGxlLCBhbnkgZGV2aWNlIGNhbiBk ZWNpZGUgdG8gbGlzdGVuIGZvciBhbnkgSVB2NiBtdWx0aWNhc3QgYWRkcmVzcy4gIEJ1dCBpbiBw cmFjdGljZSBvZiBjb3Vyc2UgdGhlcmUgYXJlIElQdjYgbXVsdGljYXN0IHJlbGF0ZWQgcHJvdG9j b2xzIGZvciByb3V0aW5nL2pvaW5pbmcgdGhhdCBkaWN0YXRlIHdobyBjYW4gc3VjY2Vzc2Z1bGx5 IGxpc3RlbiBmb3IgYW5kIHJlY2VpdmUgYW4gSVB2NiBtdWx0aWNhc3QgcGFja2V0LiAgRm9yIGV4 YW1wbGUsIHVubGVzcyBhIGRldmljZSB1c2VzIGEgcHJvdG9jb2wgbGlrZSBNTEQgdG8gZXhwbGlj aXRseSBqb2luIGEgbXVsdGljYXN0IGdyb3VwLCB0aGUgbmV0d29yayB3aWxsIG5ldmVyIHJvdXRl IHRoZSBtdWx0aWNhc3QgcGFja2V0cyBvZiBpbnRlcmVzdCB0byB0aGUgc3ViLW5ldHdvcmsgb2Yg dGhlIGRldmljZS4gIFRoaXMgaXMgYWxsIGV4cGxhaW5lZCBhdCBhIGhpZ2ggbGV2ZWwgaW4gdGhl IEkuRC5ncm91cGNvbW0gcmVmZXJlbmNlIChodHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFm dC1pZXRmLWNvcmUtZ3JvdXBjb21tLTE4I3NlY3Rpb24tMi4xICkgLg0KDQogDQoNClRoZSBvdGhl ciBwYXJ0IG9mIHlvdXIgcXVlc3Rpb24gcmVmZXJzIHRvIGhvdyBkb2VzIHRoZSBzZW5kZXIgbm9k ZSBrbm93IHdobyBpcyBwYXJ0IG9mIHRoZSBncm91cC4gIFlvdSBhcmUgY29ycmVjdCB0aGF0IGl0 IGlzIHZlcnkgZGlmZmljdWx0IHRvIGtub3cgcHJlY2lzZWx5IHRoZSBtZW1iZXJzaGlwIG9mIGEg Z3JvdXAuICBUaGF0IGlzIHdoeSB3ZSBoYWQgdGhlIHN1YnRsZSByZWZlcmVuY2UgdG8g4oCca25v d24gbGlzdGVuZXJz4oCdLiAgSG93IHlvdSBhY3R1YWxseSBrbm93IHRoZSBtZW1iZXJzaGlwIGRl cGVuZHMgb24gdGhlIG1peCBvZiBwcm90b2NvbHMgdXNlZCAoYW5kIGlzIGluIGZhY3QgaXQgaXMg bm90IGFsd2F5cyBwb3NzaWJsZSB0byBrbm93IGFsbCB0aGUgbWVtYmVycyBhY2N1cmF0ZWx5KS4g IEJ1dCBmb3IgQ29BUCBncm91cCBtZW1iZXIgZGlzY292ZXJ5LCB0aGVyZSBpcyAgYWdhaW4gZ3Vp ZGFuY2UgZ2l2ZW4gaW4gdGhlIEkuRC5ncm91cGNvbW0gcmVmZXJlbmNlIChzcGVjaWZpY2FsbHkg aW4gaHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jb3JlLWdyb3VwY29tbS0x OCNzZWN0aW9uLTIuNiApLiAgV2UgY2FuIG1ha2UgdGhpcyBwb2ludCBhIGJpdCBtb3JlIGV4cGxp Y2l0IGluIHRoZSBuZXh0IHVwZGF0ZSBvZiBvdXIgSS1ELg0KDQogDQoNCiANCg0KIA0KDQo+Mikg QW4gYWx0ZXJuYXRpdmUgYXBwcm9hY2ggdG8gdGhlIG9uZSBzdWdnZXN0ZWQgaW4gU2VjdGlvbiA0 LjUgbWF5IGNvbnNpc3QgaW4gYSBsaXN0ZW5lciBub2RlIGVzdGFibGlzaGluZw0KDQo+IGEgdW5p Y2FzdCBEVExTIHNlc3Npb24gKGkuZS4gc3RhcnRpbmcgYSBEVExTIGhhbmRzaGFrZSkgd2l0aCB0 aGUgc2VuZGVyIG5vZGUsIHVwb24gcmVjZWl2aW5nIGEgbXVsdGljYXN0DQoNCj4gbWVzc2FnZSBm b3IgdGhlIGZpcnN0IHRpbWUuDQoNCiANCg0KWWVzLCBnb29kIHBvaW50ISAgV2UgY2FuIGFkZCB0 aGlzIHRvIHRoZSBJLUQgaW4gb3VyIG5leHQgdXBkYXRlLiANCg0KIA0KDQogDQoNCkJlc3QgUmVn YXJkcywNCg0KIA0KDQogDQoNCkFrYmFyDQoNCiANCg0KIA0KDQogDQoNCkZyb206IE1hcmNvIFRp bG9jYSBbbWFpbHRvOm1hcmNvQHNpY3Muc2VdIA0KU2VudDogVHVlc2RheSwgTWF5IDA2LCAyMDE0 IDEyOjMyIFBNDQpUbzogUmFobWFuLCBBa2Jhcg0KQ2M6IEt1bWFyLCBTYW5kZWVwOyBkdGxzLWlv dEBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtEdGxzLWlvdF0gVW5pY2FzdCByZXNwb25zZXMgaW4g ZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNQ0KDQogDQoNCkhlbGxvIEFrYmFy LA0KDQogDQoNClRoYW5rcyBmb3IgaGF2aW5nIGNvbnNpZGVyZWQgbXkgcXVlc3Rpb24uIFRoZSBu ZXcgU2VjdGlvbiA0LjUgbG9va3MgZmluZSB0byBtZS4gQWxzbywgSSBoYXZlIHRoZSB0d28gZm9s bG93aW5nIGNvbW1lbnRzLg0KDQogDQoNCjEpIEluIG9yZGVyIHRvIHBlcmZvcm0gYSBEVExTIGhh bmRzaGFrZSBiZWZvcmUvYWZ0ZXIgc2VuZGluZyBhIG11bHRpY2FzdCBtZXNzYWdlLCBhIHNlbmRl ciBub2RlIHNob3VsZCBiZSBhd2FyZSBvZiB0aGUgZ3JvdXAgbWVtYmVyc2hpcCwgZXNwZWNpYWxs eSB3aGF0IGFyZSB0aGUgbGlzdGVuZXIgbm9kZXMgY3VycmVudGx5IHByZXNlbnQgaW4gdGhlIGdy b3VwLiBPZiBjb3Vyc2UsIHN1Y2ggYSBncm91cCBtZW1iZXJzaGlwIG1heSBjaGFuZ2Ugb3ZlciB0 aW1lLCB1cG9uIG5ldyBub2RlcyBqb2luaW5nIHRoZSBncm91cC4gSG93ZXZlciwgU2VjdGlvbiAz LjEgaW4gdGhlIGRyYWZ0IHN0YXRlcyB0aGF0ICJBbnkgZGV2aWNlIGNhbiBpbiBwcmluY2lwbGUg ZGVjaWRlIHRvIGxpc3RlbiB0byBhbnkgSVB2NiBtdWx0aWNhc3QgYWRkcmVzcy4gVGhpcyBhbHNv IG1lYW5zIGFwcGxpY2F0aW9ucyBvbiB0aGUgb3RoZXIgZGV2aWNlcyBkbyBub3Qga25vdywgb3Ig ZG8gbm90IGdldCBub3RpZmllZCwgd2hlbiBuZXcgbGlzdGVuZXJzIGpvaW4gdGhlIG5ldHdvcmsu Ii4gQ291bGRuJ3QgdGhpcyBiZSBhIHByb2JsZW0gZm9yIHRoZSBzdWdnZXN0ZWQgYXBwcm9hY2g/ DQoNCiANCg0KMikgQW4gYWx0ZXJuYXRpdmUgYXBwcm9hY2ggdG8gdGhlIG9uZSBzdWdnZXN0ZWQg aW4gU2VjdGlvbiA0LjUgbWF5IGNvbnNpc3QgaW4gYSBsaXN0ZW5lciBub2RlIGVzdGFibGlzaGlu ZyBhIHVuaWNhc3QgRFRMUyBzZXNzaW9uIChpLmUuIHN0YXJ0aW5nIGEgRFRMUyBoYW5kc2hha2Up IHdpdGggdGhlIHNlbmRlciBub2RlLCB1cG9uIHJlY2VpdmluZyBhIG11bHRpY2FzdCBtZXNzYWdl IGZvciB0aGUgZmlyc3QgdGltZS4NCg0KIA0KDQpCZXN0IHJlZ2FyZHMsDQoNCk1hcmNvDQoNCiAN Cg0KIA0KDQogDQoNCiANCg0KT24gNSBNYXkgMjAxNCAyMzo0NSwgUmFobWFuLCBBa2JhciA8QWti YXIuUmFobWFuQGludGVyZGlnaXRhbC5jb20+IHdyb3RlOg0KDQpIaSBNYXJjbywNCg0KIA0KDQog DQoNCiANCg0KVGhlIGF1dGhvcnMgaGF2ZSBtYWRlIGFuIHVwZGF0ZSB0byB0aGUgZHJhZnQgdG8g YWRkcmVzcyBmdWxseSB5b3VyIGdvb2QgcXVlc3Rpb24gcmVnYXJkaW5nIGhvdyB0byBoYW5kbGUg dGhlIHVuaWNhc3QgcmVzcG9uc2VzIHRvIHRoZSBtdWx0aWNhc3QgcmVzcG9uc2UuICBTcGVjaWZp Y2FsbHksIHBsZWFzZSByZXZpZXcgdGhlIG5ldyBzZWN0aW9uIDQuNSBhbmQgdGVsbCB1cyBpZiB5 b3UgaGF2ZSBhbnkgbW9yZSBxdWVzdGlvbnM6DQoNCiANCg0KIA0KDQpodHRwOi8vdG9vbHMuaWV0 Zi5vcmcvaHRtbC9kcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA2I3NlY3Rpb24t NC41DQoNCiANCg0KNC41LiAgVW5pY2FzdCBSZXNwb25zZXMgdG8gTXVsdGljYXN0IE1lc3NhZ2Vz DQoNCiANCg0KICAgSW4gQ29BUCwgcmVzcG9uc2VzIHRvIG11bHRpY2FzdCBtZXNzYWdlcyBhcmUg YWx3YXlzIHNlbnQgYmFjayBhcw0KDQogICB1bmljYXN0LiAgVGhhdCBpcywgdGhlIGdyb3VwIG1l bWJlcnMgdGhhdCByZWNlaXZlIGEgbXVsdGljYXN0IG1lc3NhZ2UNCg0KICAgbWF5IGluZGl2aWR1 YWxseSBkZWNpZGUgdG8gc2VuZCAob3Igc3VwcHJlc3MpIGEgdW5pY2FzdCByZXNwb25zZSBhcw0K DQogICBkZXNjcmliZWQgaW4gU2VjdGlvbiAyLjUgb2YgW0ktRC5pZXRmLWNvcmUtZ3JvdXBjb21t XS4gIFRoZSB1bmljYXN0DQoNCiAgIHJlc3BvbnNlcyB0byBhIERUTFMtYmFzZWQgbXVsdGljYXN0 IG1lc3NhZ2UgbWF5IG9wdGlvbmFsbHkgYmUgc2VjdXJlLg0KDQogICBTcGVjaWZpY2FsbHksIHRo ZSB1bmljYXN0IHJlc3BvbnNlIG1heSBiZSBzZW50IGJhY2sgYXMgYSB1bmljYXN0IERUTFMNCg0K ICAgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gOS4xIG9mIFtJLUQuaWV0Zi1jb3JlLWNvYXBdLiAg VGhpcyByZXF1aXJlcw0KDQogICB0aGF0IGEgdW5pY2FzdCBEVExTIGhhbmRzaGFrZSB3YXMgcHJl dmlvdXNseSBpbml0aWF0ZWQgYmV0d2VlbiB0aGUNCg0KICAgbXVsdGljYXN0IG1lc3NhZ2Ugc2Vu ZGVyIGFuZCBsaXN0ZW5lci4gIEluIHRoZSBleHRyZW1lIHNjZW5hcmlvLCBhDQoNCiAgIG11bHRp Y2FzdCBzZW5kZXIgbWF5IGF0dGVtcHQgdG8gaW5pdGlhdGUgdGhlIHVuaWNhc3QgRFRMUyBoYW5k c2hha2UNCg0KICAgd2l0aCBhbGwgb3IgYSBzdWJzZXQgb2Yga25vd24gbGlzdGVuZXJzIGp1c3Qg YmVmb3JlIG9yIGp1c3QgYWZ0ZXIgaXQNCg0KICAgc2VuZHMgb3V0IHRoZSBEVExTLWJhc2VkIG11 bHRpY2FzdCBtZXNzYWdlLiAgVGhpcyBtYXkgcmVzdWx0IGluIHRoZQ0KDQogICBtdWx0aWNhc3Qg c2VuZGVyIChpLmUuIHVuaWNhc3QgRFRMUyBjbGllbnQpIGhhdmluZyB0byBwcm9jZXNzIHVuaWNh c3QNCg0KICAgRFRMUyBoYW5kc2hha2UgbWVzc2FnZXMgZnJvbSBtdWx0aXBsZSBtdWx0aWNhc3Qg bGlzdGVuZXJzIChpLmUuDQoNCiAgIHVuaWNhc3QgRFRMUyBzZXJ2ZXJzKSBpbiBhIHNob3J0IHBl cmlvZC4NCg0KIA0KDQogICBOb3RlOiBUaGVyZSBpcyBhbiBvYnZpb3VzIHRpbWluZyBhbmQgcHJv Y2Vzc2luZyBsb2FkIGlzc3VlIGZvciB0aGUNCg0KICAgbXVsdGljYXN0IHNlbmRlciBpbiB0aGUg c2NlbmFyaW8gd2hlcmUgaXQgYXR0ZW1wdHMgdG8gaW5pdGlhdGUgdGhlDQoNCiAgIHVuaWNhc3Qg RFRMUyBoYW5kc2hha2VzIHdpdGggYWxsL3NvbWUgb2YgaXRzIGtub3duIGxpc3RlbmVycyBqdXN0 DQoNCiAgIGFmdGVyIGl0IHNlbmRzIG91dCB0aGUgRFRMUy1iYXNlZCBtdWx0aWNhc3QgbWVzc2Fn ZS4gIEluIHRoaXMgY2FzZSwNCg0KICAgdGhlIHByb2Nlc3NpbmcgbG9hZCBpbiB0aGUgbXVsdGlj YXN0IHNlbmRlciAoaS5lLiB1bmljYXN0IERUTFMNCg0KICAgY2xpZW50KSBpcyByZWR1Y2VkIHNv bWV3aGF0IGJ5IHRoZSBmYWN0IHRoYXQgQ29BUCByZXF1aXJlcyBhIGJhY2stb2ZmDQoNCiAgIGFu ZCByYW5kb21pemF0aW9uIG9mIHRoZSB1bmljYXN0IHJlc3BvbnNlIGJ5IHRoZSBMZWlzdXJlIHRp bWVyDQoNCiAgIG1lY2hhbmlzbSBhcyBkZXNjcmliZWQgaW4gU2VjdGlvbiA4LjIgb2YgW0ktRC5p ZXRmLWNvcmUtY29hcF0uDQoNCiANCg0KIA0KDQogDQoNCiANCg0KQmVzdCBSZWdhcmRzLA0KDQog DQoNCiANCg0KQWtiYXINCg0KIA0KDQogDQoNCiANCg0KRnJvbTogZHRscy1pb3QgW21haWx0bzpk dGxzLWlvdC1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgS3VtYXIsIFNhbmRlZXANClNl bnQ6IFdlZG5lc2RheSwgQXByaWwgMDIsIDIwMTQgMzo0NyBBTQ0KVG86IE1hcmNvIFRpbG9jYTsg ZHRscy1pb3RAaWV0Zi5vcmcNClN1YmplY3Q6IFJlOiBbRHRscy1pb3RdIFVuaWNhc3QgcmVzcG9u c2VzIGluIGRyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDUNCg0KIA0KDQpIaSBN YXJjbw0KDQogDQoNClRoZSBkcmFmdCBvbmx5IGFkZHJlc3NlcyB0aGUgcHJvdGVjdGlvbiBvZiBt dWx0aWNhc3QgdHJhZmZpYy4gSWYgdW5pY2FzdCByZXNwb25zZXMgYXJlIGV4cGVjdGVkIGFuZCBp ZiBwcm90ZWN0aW9uIGlzIHJlcXVpcmVkIGZvciBzdWNoIG1lc3NhZ2VzLCB0aGVuIGV4aXN0aW5n IHVuaWNhc3QgcHJvdGVjdGlvbiBtZWNoYW5pc21zIGJhc2VkIG9uIERUTFMgYXMgc3VnZ2VzdGVk IGluIGRyYWZ0LWlldGYtY29yZS1jb2FwLTE4IHNob3VsZCBiZSB1c2VkLiBQcm90ZWN0aW9uIG9m IGFsbCB1bmljYXN0IG1lc3NhZ2VzIHNob3VsZCBiZSB0cmVhdGVkIGFzIHdvdWxkIGJlIGRvbmUg bm9ybWFsbHkuIA0KDQogDQoNCkhvcGUgdGhhdCBhbnN3ZXJzIHlvdXIgcXVlc3Rpb24uDQoNCiAN Cg0KUmVnYXJkcw0KDQpTYW5kZWVwIA0KDQogDQoNCkZyb206IGR0bHMtaW90IFttYWlsdG86ZHRs cy1pb3QtYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9mIE1hcmNvIFRpbG9jYQ0KU2VudDog VHVlc2RheSwgQXByaWwgMDEsIDIwMTQgNjozNSBQTQ0KVG86IGR0bHMtaW90QGlldGYub3JnDQpT dWJqZWN0OiBbRHRscy1pb3RdIFVuaWNhc3QgcmVzcG9uc2VzIGluIGRyYWZ0LWtlb2gtZGljZS1t dWx0aWNhc3Qtc2VjdXJpdHktMDUNCg0KIA0KDQpEZWFyIGFsbCwNCg0KIA0KDQpBcyB0byBwb3Nz aWJsZSByZXNwb25zZXMgdG8gbXVsdGljYXN0IHJlcXVlc3RzLCBTZWN0aW9uIDIuMSBzdGF0ZXMg dGhhdCB0aGV5IGFyZSBzZW50IGJhY2sgaW4gdW5pY2FzdC4gVGhlbiwgbm8gZnVydGhlciBkZXRh aWxzIGFyZSBwcm92aWRlZCBhYm91dCB0aGVpciBwcm90ZWN0aW9uLg0KDQogDQoNCkFyZSBzdWNo IHJlc3BvbnNlcyBzdXBwb3NlZCB0byBiZSBwcm90ZWN0ZWQgdGhyb3VnaCBhICJyZWd1bGFyIiBE VExTIHNlc3Npb24sIHdoaWNoIG11c3QgYmUgKG9yIGhhcyBwcmV2aW91c2x5IGJlZW4pIGVzdGFi bGlzaGVkIGJldHdlZW4gdGhlIHNlbmRlciBhbmQgbGlzdGVuZXI/DQoNCiANCg0KQ2hlZXJzLA0K DQpNYXJjbw0KDQogDQoNCiANCg0KIA0KDQogDQoNCiANCg0KX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX18NCg0KVGhlIGluZm9ybWF0aW9uIGNvbnRhaW5lZCBpbiB0aGlzIG1lc3NhZ2Ug bWF5IGJlIGNvbmZpZGVudGlhbCBhbmQgbGVnYWxseSBwcm90ZWN0ZWQgdW5kZXIgYXBwbGljYWJs ZSBsYXcuIFRoZSBtZXNzYWdlIGlzIGludGVuZGVkIHNvbGVseSBmb3IgdGhlIGFkZHJlc3NlZShz KS4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgeW91IGFyZSBoZXJlYnkg bm90aWZpZWQgdGhhdCBhbnkgdXNlLCBmb3J3YXJkaW5nLCBkaXNzZW1pbmF0aW9uLCBvciByZXBy b2R1Y3Rpb24gb2YgdGhpcyBtZXNzYWdlIGlzIHN0cmljdGx5IHByb2hpYml0ZWQgYW5kIG1heSBi ZSB1bmxhd2Z1bC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNl IGNvbnRhY3QgdGhlIHNlbmRlciBieSByZXR1cm4gZS1tYWlsIGFuZCBkZXN0cm95IGFsbCBjb3Bp ZXMgb2YgdGhlIG9yaWdpbmFsIG1lc3NhZ2UuDQoNCiANCg0K ------_=_NextPart_001_01CF74FF.CB182794 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+PGhlYWQ+PG1ldGEgaHR0cC1lcXVpdj1Db250ZW50LVR5cGUgY29udGVu dD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij48bWV0YSBuYW1lPUdlbmVyYXRvciBjb250ZW50 PSJNaWNyb3NvZnQgV29yZCAxNCAoZmlsdGVyZWQgbWVkaXVtKSI+PCEtLVtpZiAhbXNvXT48c3R5 bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7YmVoYXZpb3I6dXJs KCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0KLnNo YXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwhW2VuZGlmXS0tPjxz dHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFj ZQ0KCXtmb250LWZhbWlseTpUYWhvbWE7DQoJcGFub3NlLTE6MiAxMSA2IDQgMyA1IDQgNCAyIDQ7 fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRp di5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9u dC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIiwic2VyaWYiO30N CmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNv bG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4u TXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1 cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnByZQ0KCXttc28tc3R5bGUtcHJp b3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1h cmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJ Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpwLk1zb0FjZXRhdGUsIGxpLk1zb0FjZXRhdGUs IGRpdi5Nc29BY2V0YXRlDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGlu azoiQmFsbG9vbiBUZXh0IENoYXIiOw0KCW1hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAw MXB0Ow0KCWZvbnQtc2l6ZTo4LjBwdDsNCglmb250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJp ZiI7fQ0KcC5Nc29MaXN0UGFyYWdyYXBoLCBsaS5Nc29MaXN0UGFyYWdyYXBoLCBkaXYuTXNvTGlz dFBhcmFncmFwaA0KCXttc28tc3R5bGUtcHJpb3JpdHk6MzQ7DQoJbWFyZ2luLXRvcDowaW47DQoJ bWFyZ2luLXJpZ2h0OjBpbjsNCgltYXJnaW4tYm90dG9tOjBpbjsNCgltYXJnaW4tbGVmdDouNWlu Ow0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFt aWx5OiJUaW1lcyBOZXcgUm9tYW4iLCJzZXJpZiI7fQ0Kc3Bhbi5IVE1MUHJlZm9ybWF0dGVkQ2hh cg0KCXttc28tc3R5bGUtbmFtZToiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbXNvLXN0eWxl LXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJIVE1MIFByZWZvcm1hdHRlZCI7DQoJZm9u dC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpzcGFuLkJhbGxvb25UZXh0Q2hhcg0KCXttc28tc3R5 bGUtbmFtZToiQmFsbG9vbiBUZXh0IENoYXIiOw0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCglt c28tc3R5bGUtbGluazoiQmFsbG9vbiBUZXh0IjsNCglmb250LWZhbWlseToiVGFob21hIiwic2Fu cy1zZXJpZiI7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjINCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7 DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCgljb2xvcjojMUY0OTdEO30N CnNwYW4uRW1haWxTdHlsZTIzDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFt aWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFuLkVtYWls U3R5bGUyNA0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJy aSIsInNhbnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjUNCgl7 bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNl cmlmIjsNCgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTI2DQoJe21zby1zdHlsZS10 eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJY29s b3I6IzFGNDk3RDt9DQpzcGFuLkVtYWlsU3R5bGUyNw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25h bC1yZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCWNvbG9yOiMx RjQ5N0Q7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJ Zm9udC1zaXplOjEwLjBwdDt9DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4w aW47DQoJbWFyZ2luOjEuMGluIDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjEN Cgl7cGFnZTpXb3JkU2VjdGlvbjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHht bD4NCjxvOnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3ht bD48IVtlbmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6 ZXh0PSJlZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBl bGF5b3V0PjwveG1sPjwhW2VuZGlmXS0tPjwvaGVhZD48Ym9keSBsYW5nPUVOLVVTIGxpbms9Ymx1 ZSB2bGluaz1wdXJwbGU+PGRpdiBjbGFzcz1Xb3JkU2VjdGlvbjE+PHAgY2xhc3M9TXNvTm9ybWFs PjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fu cy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+SGkgRXNrbyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAg Y2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2Zv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjoj MUY0OTdEJz5JIGFncmVlIG9uIHlvdXIgcG9pbnRzIDFBIGFuZCAxQiBhbmQgd2lsbCB3b3JrIHdp dGggeW91IG9mZiBsaW5lIHRvIHVwZGF0ZSB0aGUgZHJhZnQgdG8gY2FwdHVyZSB0aGVzZSBwb2lu dHMuPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0n Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9y OiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+ PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5z LXNlcmlmIjtjb2xvcjojMUY0OTdEJz5JIGRpZCBoYXZlIG9uZSBpbXBvcnRhbnQgcXVlc3Rpb24g dGhvdWdoIG9uIHlvdXIgbGFzdCBwb2ludDo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9 TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxp YnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPiZndDtUaGUgYWJv dmUgaXNzdWVzIHRvZ2V0aGVyIHNlZW0gcXVpdGUgc2VyaW91cy4mbmJzcDsgUGVyaGFwcyBhbiBh bHRlcm5hdGl2ZSBzb2x1dGlvbiBpcyBiZXR0ZXIgaW4gd2hpY2ggdGhlIGdyb3VwIGtleTxvOnA+ PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdE Jz4mZ3Q7IGlzIHVzZWQgdG8gRFRMUy1wcm90ZWN0IHRoZSByZXNwb25zZS4gT3IgYWx0ZXJuYXRp dmVseSwgYSBzZXBhcmF0ZSDigJxyZWNlaXZlcnPigJ0gc2VjdXJpdHkgZ3JvdXAgY291bGQgYmUg Y3JlYXRlZDxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5 bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtj b2xvcjojMUY0OTdEJz4gJmd0O3RoYXQgYWxsb3dzIGVhY2ggcmVjZWl2ZXIgdG8gcmVzcG9uZCBh bmQgdGhlIHNlbmRlciB0byByZWFkIHRoZSByZXNwb25zZSwgYnV0IG5vZGVzIG91dHNpZGUgdGhl IDxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2Zv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjoj MUY0OTdEJz4mZ3Q7c2VuZGVyL3JlY2VpdmVyIGdyb3VwcyBjYW5ub3QgYWNjZXNzIHRoZSBtZXNz YWdlcyB0aHVzIGV4Y2hhbmdlZC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9y bWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwi c2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxw IGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPkFyZcKgIHlvdSBwcm9wb3Np bmcgY2hhbmdpbmcgdGhlIGN1cnJlbnQgR3JvdXBjb21tIEktRCBtb2RlbCBvZiBzdHJpY3RseSB1 bmljYXN0IHJlc3BvbnNlcyB0byBhIG11bHRpY2FzdCBDb0FQIHJlcXVlc3Q/wqAgWW91ciBzdWdn ZXN0aW9uIGFib3ZlIHNlZW1zIHRvIGltcGx5IGNoYW5naW5nIHRoZSBtb2RlbCB0byBtdWx0aWNh c3QgcmVzcG9uc2VzPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNw YW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNl cmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9 TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxp YnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7 PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdE Jz5CZXN0IFJlZ2FyZHMsPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48 c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMt c2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFz cz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNh bGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+QWtiYXI8bzpw PjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3 RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxkaXY+PGRpdiBzdHlsZT0nYm9yZGVyOm5v bmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAw aW4nPjxwIGNsYXNzPU1zb05vcm1hbD48Yj48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJpZiInPkZyb206PC9zcGFuPjwvYj48c3BhbiBz dHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJpZiIn PiBEaWprLCBFc2tvIFttYWlsdG86ZXNrby5kaWprQHBoaWxpcHMuY29tXSA8YnI+PGI+U2VudDo8 L2I+IFR1ZXNkYXksIE1heSAyMCwgMjAxNCA4OjI5IEFNPGJyPjxiPlRvOjwvYj4gUmFobWFuLCBB a2Jhcjxicj48Yj5DYzo8L2I+IEt1bWFyLCBTYW5kZWVwOyBkdGxzLWlvdEBpZXRmLm9yZzsgTWFy Y28gVGlsb2NhPGJyPjxiPlN1YmplY3Q6PC9iPiBSRTogW0R0bHMtaW90XSBVbmljYXN0IHJlc3Bv bnNlcyBpbiBkcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA1PG86cD48L286cD48 L3NwYW4+PC9wPjwvZGl2PjwvZGl2PjxwIGNsYXNzPU1zb05vcm1hbD48bzpwPiZuYnNwOzwvbzpw PjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5IaSBBa2Jhciw8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFG NDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3Bh biBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2Vy aWYiO2NvbG9yOiMxRjQ5N0QnPm9uIHBvaW50IDEuIHRoZXJlIGFyZSB0d28gY29uY2VybnMgdGhh dCBuZWVkIHRvIGJlIGFkZHJlc3NlZDo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNv Tm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJp Iiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w PjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjFBLiByZXNwb25kaW5n IHVuc2VjdXJlZCBhZnRlciBhIHNlY3VyZWQgcmVxdWVzdCBzZWVtcyBhIHZpb2xhdGlvbiBvZiBz ZWN1cml0eSBwcmluY2lwbGVzIGFuZCB0aGUg4oCYc3Bpcml04oCZIG9mIENvQVAtMTguIEUuZy4g dGhlIHJlc3BvbnNlIGNvdWxkIGJlIHRhbXBlcmVkIHdpdGguIFdoYXQgd2UgY291bGQgZG8gaXMg dG8gZS5nLiBoYXZlIGEgU0hPVUxEIHJlcXVpcmVtZW50IGZvciBzZWN1cmVkIHJlc3BvbnNlOyB3 aGljaCB0aGUgZXhjZXB0aW9uIGNhc2UgYmVpbmcgYSByZXNwb25zZSB0aGF0IGRvZXMgbm90IGNv bnRhaW4gYW55IGNyaXRpY2FsL2NvbmZpZGVudGlhbCBpbmZvcm1hdGlvbi4gU3VjaCBhcyBhIOKA nDIuMDQgQ2hhbmdlZOKAnSBvciDigJwyLjAyIERlbGV0ZWTigJ0gcmVzcG9uc2Ugd2hpY2ggZG9l cyBub3QgY29udGFpbiBhbnkgZnVydGhlciBwYXlsb2FkLiBCdXQgZXZlbiBkb2luZyB0aGF0IHRo ZXJlIG1heSBiZSB1bmludGVuZGVkIHNlY3VyaXR5IGNvbnNlcXVlbmNlcywgZS5nLiByZXNwb25z ZSBzcG9vZmluZyBvciB0YW1wZXJpbmcuPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1z b05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJy aSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz4xQi4gaWYgc3RhbmRh cmQgQ29BUCBtYXRjaGluZyBydWxlcyBhcmUgbm90IGZvbGxvd2VkLCB0aGUgbmV3IG1hdGNoaW5n IHJ1bGVzIG5lZWQgdG8gYmUgZGVmaW5lZC4gV2hhdCBjb21wbGljYXRlcyB0aGlzIGlzIHRoYXQg YSBjbGllbnQgZG9lc27igJl0IGtub3cgYSBwcmlvcmkgaWYgdGhlIHNlcnZlciB3b3VsZCByZXNw b25kIERUTFMtc2VjdXJlZCBvciBub3QuIFNvIGl0IG5lZWRzIHR3byBtZXRob2RzIG9mIG1hdGNo aW5nLCBvbmUgZm9yIHNlY3VyZWQgcmVzcG9uc2VzIGFuZCBhbm90aGVyIGZvciB1bnNlY3VyZWQg b25lcy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxl PSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29s b3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1h bD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNh bnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPlRoZSBhYm92ZSBpc3N1ZXMgdG9nZXRoZXIgc2VlbSBx dWl0ZSBzZXJpb3VzLiZuYnNwOyBQZXJoYXBzIGFuIGFsdGVybmF0aXZlIHNvbHV0aW9uIGlzIGJl dHRlciBpbiB3aGljaCB0aGUgZ3JvdXAga2V5IGlzIHVzZWQgdG8gRFRMUy1wcm90ZWN0IHRoZSBy ZXNwb25zZS4gT3IgYWx0ZXJuYXRpdmVseSwgYSBzZXBhcmF0ZSDigJxyZWNlaXZlcnPigJ0gc2Vj dXJpdHkgZ3JvdXAgY291bGQgYmUgY3JlYXRlZCB0aGF0IGFsbG93cyBlYWNoIHJlY2VpdmVyIHRv IHJlc3BvbmQgYW5kIHRoZSBzZW5kZXIgdG8gcmVhZCB0aGUgcmVzcG9uc2UsIGJ1dCBub2RlcyBv dXRzaWRlIHRoZSBzZW5kZXIvcmVjZWl2ZXIgZ3JvdXBzIGNhbm5vdCBhY2Nlc3MgdGhlIG1lc3Nh Z2VzIHRodXMgZXhjaGFuZ2VkLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3Jt YWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJz YW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAg Y2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+T24gcG9pbnQgMi4gSSBhZ3Jl ZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6 IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48 c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMt c2VyaWYiO2NvbG9yOiMxRjQ5N0QnPkVza288bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9 TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxp YnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPjxkaXY+PGRpdiBzdHlsZT0nYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERG IDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4nPjxwIGNsYXNzPU1zb05vcm1hbD48Yj48 c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiVGFob21hIiwic2Fucy1z ZXJpZiInPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJpZiInPiBSYWhtYW4sIEFrYmFyIFs8YSBocmVmPSJt YWlsdG86QWtiYXIuUmFobWFuQEludGVyRGlnaXRhbC5jb20iPm1haWx0bzpBa2Jhci5SYWhtYW5A SW50ZXJEaWdpdGFsLmNvbTwvYT5dIDxicj48Yj5TZW50OjwvYj4gTW9uZGF5LCBNYXkgMTksIDIw MTQgMjI6MzQ8YnI+PGI+VG86PC9iPiBEaWprLCBFc2tvPGJyPjxiPkNjOjwvYj4gS3VtYXIsIFNh bmRlZXA7IDxhIGhyZWY9Im1haWx0bzpkdGxzLWlvdEBpZXRmLm9yZyI+ZHRscy1pb3RAaWV0Zi5v cmc8L2E+OyBNYXJjbyBUaWxvY2E8YnI+PGI+U3ViamVjdDo8L2I+IFJFOiBbRHRscy1pb3RdIFVu aWNhc3QgcmVzcG9uc2VzIGluIGRyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDU8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+PC9kaXY+PC9kaXY+PHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0Qn PkhpIEVza28sPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBz dHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYi O2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29O b3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmki LCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+VGhhbmtzIGZvciB0aGUg ZmVlZGJhY2suPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBz dHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYi O2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29O b3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmki LCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+Jmd0OyBJdCBzZWVtcyB1 bnNlY3VyZWQgcmVzcG9uc2VzIGFyZSBub3QgcG9zc2libGUgd2l0aG91dCBhbHRlcmluZyB0aGUg Q29BUCByZXF1ZXN0L3Jlc3BvbnNlIG1hdGNoaW5nIHJ1bGVzLjxvOnA+PC9vOnA+PC9zcGFuPjwv cD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+ WWVzLCBidXQgYXMgeW91IGtub3cgdGhlIGN1cnJlbnQgY29yZS1jb2FwLTE4IHRleHQgaXMgb2J2 aW91c2x5IHdyaXR0ZW4gZm9yIHVuaWNhc3QgRFRMUyByZXF1ZXN0IGFuZCByZXNwb25zZS4mbmJz cDsgV2UgYXJlIG5vIGxvbmdlciBkZWFsaW5nIHdpdGggdGhhdCBhcyB3ZSBoYXZlIG11bHRpY2Fz dCBEVExTIHJlcXVlc3QsIGFuZCBwb3RlbnRpYWxseSB1bmljYXN0IERUTFMgcmVzcG9uc2UuJm5i c3A7IChUaGF0IHdhcyB0aGUgb3JpZ2luYWwgdmFsdWUgaW4gdGhlIHF1ZXN0aW9uIGFza2VkIGJ5 IE1hcmNvKS4mbmJzcDsgQnV0IEkgZG8gYWdyZWUgd2l0aCB5b3VyIHBvaW50IHRoYXQgdGhlIGJh c2UgY29yZS1jb2FwLTE4IG9wZXJhdGlvbiB3b3VsZCBiZSBhZmZlY3RlZCwgYW5kIHRoYSAmbmJz cDt0aGlzIGNoYW5nZSBtdXN0IGJlIGNsZWFybHkgY2FwdHVyZWQuICZuYnNwOyZuYnNwO0FuZCBJ IGd1ZXNzIDxhIGhyZWY9Imh0dHA6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWtlb2gtZGlj ZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDcjc2VjdGlvbi00LjUiPmh0dHA6Ly90b29scy5pZXRmLm9y Zy9odG1sL2RyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDcjc2VjdGlvbi00LjU8 L2E+IHdvdWxkIGJlIHRoZSBub3JtYXRpdmUgdXBkYXRlLiZuYnNwOyBTbyB3ZSBoYXZlIHRvIG1h a2UgdGhlIHRleHQgY2xlYXIuJm5ic3A7IERvIHlvdSB0aGluayB3ZSBuZWVkIHRvIGV4cGxhaW4g aXQgYmV0dGVyPzxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4g c3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlm Ijtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNv Tm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJp Iiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w PjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPi0mZ3Q7IENvbXBhcmUg dG8gc2VjdGlvbiA5LjEuMSBvZiBjb3JlLWNvYXA6IOKAnFRoZSBlbmRwb2ludCBhY3RpbmcgYXMg dGhlIENvQVAgY2xpZW50IHNob3VsZCBhbHNvIGFjdCBhcyB0aGUgRFRMUyBjbGllbnQuJm5ic3A7 IEl0IHNob3VsZCBpbml0aWF0ZSBhIHNlc3Npb24gdG8gdGhlIHNlcnZlciBvbiB0aGUgYXBwcm9w cmlhdGUgcG9ydC7igJ08bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxz cGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1z ZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNz PU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2Fs aWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPkFnYWluLCBJIHVuZGVyc3Rvb2QgdGhh dCB0aGlzIHdhcyBvcmlnaW5hbGx5IHdyaXR0ZW4gZnJvbSB0aGUgcG9pbnQgb2YgdmlldyBvZiBh IG5vcm1hbCB1bmljYXN0IENvQVAgcmVxdWVzdC4mbmJzcDsgTWVhbmluZyB0aGF0IGEgQ29BUCBj bGllbnQgd291bGQgaGF2ZSBpbml0aWFsbHkgcGVyZm9ybWVkIGEgcmVxdWVzdCAoZS5nLiBHRVQp IGFuZCB0aHVzIHNob3VsZCBiZSB0aGUgb25lIHRoYXQgZGVjaWRlcyBpZiB0aGUgR0VUIHNob3Vs ZCBiZSBzZWN1cmUgb3Igbm90LiAmbmJzcDtBZ2FpbiB0aGlzIGxvZ2ljIGRvZXMgbm90IGFwcGx5 IGRpcmVjdGx5IGZvciB0aGUgbXVsdGljYXN0IGNhc2UgYmVjYXVzZSB0aGUgaW50ZXJhY3Rpb25z IGFyZSBkaWZmZXJlbnQuJm5ic3A7IFNvIEkgYWdyZWUgdGhhdCB3ZSBuZWVkIHRvIGV4cGxpY2l0 bHkgc3RhdGUgaW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdCB0aGF0IHdlIGFyZSBkZXZpYXRp bmcgZnJvbSB0aGUgb3JpZ2luYWwgY29yZS1jb2FwLTE4IGFwcHJvYWNoLjxvOnA+PC9vOnA+PC9z cGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFG NDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3Bh biBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2Vy aWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1N c29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGli cmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5CZXN0IFJlZ2FyZHMsPG86cD48L286cD48 L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2Zv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjoj MUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxz cGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1z ZXJpZiI7Y29sb3I6IzFGNDk3RCc+QWtiYXI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9 TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxp YnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPjxkaXY+PGRpdiBzdHlsZT0nYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERG IDEuMHB0O3BhZGRpbmc6My4wcHQgMGluIDBpbiAwaW4nPjxwIGNsYXNzPU1zb05vcm1hbD48Yj48 c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiVGFob21hIiwic2Fucy1z ZXJpZiInPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseToiVGFob21hIiwic2Fucy1zZXJpZiInPiBEaWprLCBFc2tvIFs8YSBocmVmPSJtYWls dG86ZXNrby5kaWprQHBoaWxpcHMuY29tIj5tYWlsdG86ZXNrby5kaWprQHBoaWxpcHMuY29tPC9h Pl0gPGJyPjxiPlNlbnQ6PC9iPiBNb25kYXksIE1heSAxOSwgMjAxNCAxMjowMiBQTTxicj48Yj5U bzo8L2I+IFJhaG1hbiwgQWtiYXI7IE1hcmNvIFRpbG9jYTxicj48Yj5DYzo8L2I+IEt1bWFyLCBT YW5kZWVwOyA8YSBocmVmPSJtYWlsdG86ZHRscy1pb3RAaWV0Zi5vcmciPmR0bHMtaW90QGlldGYu b3JnPC9hPjxicj48Yj5TdWJqZWN0OjwvYj4gUkU6IFtEdGxzLWlvdF0gVW5pY2FzdCByZXNwb25z ZXMgaW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNTxvOnA+PC9vOnA+PC9z cGFuPjwvcD48L2Rpdj48L2Rpdj48cCBjbGFzcz1Nc29Ob3JtYWw+PG86cD4mbmJzcDs8L286cD48 L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+SGkgQWtiYXIsPG86 cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5 N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4g c3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlm Ijtjb2xvcjojMUY0OTdEJz5hcG9sb2dpZXMgZm9yIG15IGxhdGUgaW5wdXQhIE9uIHRoZSBuZXcg dGV4dCwgdHdvIHBvaW50cyAoc2VlIGJlbG93KSBtYXkgbmVlZCBzb21lIGZ1cnRoZXIgZGlzY3Vz c2lvbi4gSGVyZSB3ZSBkZXZpYXRlIGZyb20gdGhlIHNwaXJpdCBvZiBjb3JlLWNvYXAtMTgsIHdo aWNoIG1heSBuZWVkIHRvIGJlIHBvaW50ZWQgb3V0IGluIHRoZSB0ZXh0IGV4cGxpY2l0bHksIGlm IHRoZSBkZXZpYXRpb24gaXMgY29uc2lkZXJlZCBhY2NlcHRhYmxlLjxvOnA+PC9vOnA+PC9zcGFu PjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3 RCc+MS4gVW5zZWN1cmVkIHJlc3BvbnNlczxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1N c29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGli cmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz7igJxUaGUgdW5pY2FzdCByZXNwb25zZXMg dG8gYSBEVExTLWJhc2VkIG11bHRpY2FzdCBtZXNzYWdlIG1heSBvcHRpb25hbGx5IGJlIHNlY3Vy ZeKAnTxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9 J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xv cjojMUY0OTdEJz4tJmd0OyBDb21wYXJlIHRvIHNlY3Rpb24gOS4xLjIgb2YgY29yZS1jb2FwOjxv OnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0 OTdEJz7igJxUaGlzIG1lYW5zIHRoZSByZXNwb25zZSB0byBhIERUTFMgc2VjdXJlZCByZXF1ZXN0 IE1VU1QgYWx3YXlzIGJlIERUTFM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9y bWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwi c2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+Jm5ic3A7Jm5ic3A7IHNlY3VyZWQgdXNpbmcgdGhl IHNhbWUgc2VjdXJpdHkgc2Vzc2lvbiBhbmQgZXBvY2guJm5ic3A7IEFueSBhdHRlbXB0IHRvPG86 cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5 N0QnPiZuYnNwOyZuYnNwOyBzdXBwbHkgYSBOb1NlYyByZXNwb25zZSB0byBhIERUTFMgcmVxdWVz dCBzaW1wbHkgZG9lcyBub3QgbWF0Y2ggdGhlPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNz PU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2Fs aWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPiZuYnNwOyZuYnNwOyByZXF1ZXN0IGFu ZCAodW5sZXNzIGl0IGRvZXMgbWF0Y2ggYW4gdW5yZWxhdGVkIE5vU2VjIHJlcXVlc3QpPG86cD48 L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0Qn PiZuYnNwOyZuYnNwOyB0aGVyZWZvcmUgTVVTVCBiZSByZWplY3RlZC7igJw8bzpwPjwvbzpwPjwv c3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMx RjQ5N0QnPkl0IHNlZW1zIHVuc2VjdXJlZCByZXNwb25zZXMgYXJlIG5vdCBwb3NzaWJsZSB3aXRo b3V0IGFsdGVyaW5nIHRoZSBDb0FQIHJlcXVlc3QvcmVzcG9uc2UgbWF0Y2hpbmcgcnVsZXMuPG86 cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5 N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4g c3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlm Ijtjb2xvcjojMUY0OTdEJz4yLiBXaG8gaW5pdGlhdGVzIHRoZSBoYW5kc2hha2U8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+4oCc RWl0aGVyIHRoZSBtdWx0aWNhc3QgbWVzc2FnZSBzZW5kZXIgb3IgbGlzdGVuZXIgbWF5IGluaXRp YXRlIHRoZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5 bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtj b2xvcjojMUY0OTdEJz4mbmJzcDsmbmJzcDsgdW5pY2FzdCBEVExTIGhhbmRzaGFrZS4g4oCcPG86 cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5 N0QnPi0mZ3Q7IENvbXBhcmUgdG8gc2VjdGlvbiA5LjEuMSBvZiBjb3JlLWNvYXA6PG86cD48L286 cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPuKA nFRoZSBlbmRwb2ludCBhY3RpbmcgYXMgdGhlIENvQVAgY2xpZW50IHNob3VsZCBhbHNvIGFjdCBh cyB0aGUgRFRMUzxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4g c3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlm Ijtjb2xvcjojMUY0OTdEJz4mbmJzcDsmbmJzcDsgY2xpZW50LiZuYnNwOyBJdCBzaG91bGQgaW5p dGlhdGUgYSBzZXNzaW9uIHRvIHRoZSBzZXJ2ZXIgb24gdGhlPG86cD48L286cD48L3NwYW4+PC9w PjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPiZuYnNwOyZuYnNwOyBh cHByb3ByaWF0ZSBwb3J0LuKAnTxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3Jt YWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJz YW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAg Y2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+YmVzdCByZWdhcmRzLDxvOnA+ PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdE Jz5Fc2tvPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHls ZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2Nv bG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48ZGl2PjxkaXYgc3R5bGU9 J2JvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0 IDBpbiAwaW4gMGluJz48cCBjbGFzcz1Nc29Ob3JtYWw+PGI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiJz5Gcm9tOjwvc3Bhbj48 L2I+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IlRhaG9tYSIsInNh bnMtc2VyaWYiJz4gZHRscy1pb3QgWzxhIGhyZWY9Im1haWx0bzpkdGxzLWlvdC1ib3VuY2VzQGll dGYub3JnIj5tYWlsdG86ZHRscy1pb3QtYm91bmNlc0BpZXRmLm9yZzwvYT5dIDxiPk9uIEJlaGFs ZiBPZiA8L2I+UmFobWFuLCBBa2Jhcjxicj48Yj5TZW50OjwvYj4gRnJpZGF5LCBNYXkgMDksIDIw MTQgMjE6NDA8YnI+PGI+VG86PC9iPiBNYXJjbyBUaWxvY2E8YnI+PGI+Q2M6PC9iPiBLdW1hciwg U2FuZGVlcDsgPGEgaHJlZj0ibWFpbHRvOmR0bHMtaW90QGlldGYub3JnIj5kdGxzLWlvdEBpZXRm Lm9yZzwvYT48YnI+PGI+U3ViamVjdDo8L2I+IFJlOiBbRHRscy1pb3RdIFVuaWNhc3QgcmVzcG9u c2VzIGluIGRyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDU8bzpwPjwvbzpwPjwv c3Bhbj48L3A+PC9kaXY+PC9kaXY+PHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPkhpIE1hcmNvLDxv OnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0 OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFu IHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJp ZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1z b05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJy aSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPldlIGhhdmUgdXBkYXRlZCB0aGUgZHJhZnQg dG8gY2FwdHVyZSB5b3VyIHJlbWFpbmluZyBjb21tZW50cyBiZWxvdy4mbmJzcDsgUGxlYXNlIHJl dmlldyBhbmQgdGVsbCB1cyBpZiB5b3UgaGF2ZSBhbnkgb3RoZXIgY29tbWVudHMuPG86cD48L286 cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9 J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xv cjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFs PjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fu cy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PGEgaHJlZj0iaHR0cDovL3Rvb2xzLmlldGYub3JnL2h0 bWwvZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNyNzZWN0aW9uLTQuNSI+aHR0 cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0 eS0wNyNzZWN0aW9uLTQuNTwvYT4gPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05v cm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIs InNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48 cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPjQuNS4mbmJzcDsgVW5pY2FzdCBSZXNwb25z ZXMgdG8gTXVsdGljYXN0IE1lc3NhZ2VzPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1z b05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmll ciBOZXciJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxz cGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZu YnNwOyZuYnNwOyBJbiBDb0FQLCByZXNwb25zZXMgdG8gbXVsdGljYXN0IG1lc3NhZ2VzIGFyZSBh bHdheXMgc2VudCBiYWNrIGFzPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1h bD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXci Jz4mbmJzcDsmbmJzcDsgdW5pY2FzdC4mbmJzcDsgVGhhdCBpcywgdGhlIGdyb3VwIG1lbWJlcnMg dGhhdCByZWNlaXZlIGEgbXVsdGljYXN0IG1lc3NhZ2U8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAg Y2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBtYXkgaW5kaXZpZHVhbGx5IGRlY2lkZSB0byBz ZW5kIChvciBzdXBwcmVzcykgYSB1bmljYXN0IHJlc3BvbnNlIGFzPG86cD48L286cD48L3NwYW4+ PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgZGVzY3JpYmVkIGluIFNlY3Rpb24g Mi41IG9mIFtJLUQuaWV0Zi1jb3JlLWdyb3VwY29tbV0uJm5ic3A7IFRoZSB1bmljYXN0PG86cD48 L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgcmVzcG9uc2Vz IHRvIGEgRFRMUy1iYXNlZCBtdWx0aWNhc3QgbWVzc2FnZSBtYXkgb3B0aW9uYWxseSBiZSBzZWN1 cmUuPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0n Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsg U3BlY2lmaWNhbGx5LCB0aGUgdW5pY2FzdCByZXNwb25zZSBtYXkgYmUgc2VudCBiYWNrIGFzIGEg dW5pY2FzdCBEVExTPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3Bh biBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJz cDsmbmJzcDsgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gOS4xIG9mIFtJLUQuaWV0Zi1jb3JlLWNv YXBdLiZuYnNwOyBUaGlzIHJlcXVpcmVzPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1z b05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmll ciBOZXciJz4mbmJzcDsmbmJzcDsgdGhhdCBhIHVuaWNhc3QgRFRMUyBoYW5kc2hha2Ugd2FzIHBy ZXZpb3VzbHkgaW5pdGlhdGVkIGJldHdlZW4gdGhlPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNs YXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToi Q291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgbXVsdGljYXN0IG1lc3NhZ2Ugc2VuZGVyIGFuZCBs aXN0ZW5lci48bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0 eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IEVpdGhl ciB0aGUgbXVsdGljYXN0IG1lc3NhZ2Ugc2VuZGVyIG9yIGxpc3RlbmVyIG1heSBpbml0aWF0ZSB0 aGU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyB1 bmljYXN0IERUTFMgaGFuZHNoYWtlLiZuYnNwOyBJZiB0aGUgRFRMUyBoYW5kc2hha2Ugd2FzIGlu aXRpYXRlZCBieSB0aGU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxz cGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZu YnNwOyZuYnNwOyBtdWx0aWNhc3QgbWVzc2FnZSBzZW5kZXIsIGl0IHJlcXVpcmVzIHRoYXQgdGhl IHNlbmRlciBiZSBhd2FyZSBvZiB0aGU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNv Tm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVy IE5ldyInPiZuYnNwOyZuYnNwOyBtZW1iZXJzaGlwIG9mIHRoZSBtdWx0aWNhc3QgZ3JvdXAuJm5i c3A7IFRoaXMgY2FuIGJlIGFjY29tcGxpc2hlZCwgZm9yPG86cD48L286cD48L3NwYW4+PC9wPjxw IGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWls eToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgZXhhbXBsZSwgYXMgZGVzY3JpYmVkIGluIFNl Y3Rpb24gMi42IG9mIFtJLUQuaWV0Zi1jb3JlLWNvYXBdLiZuYnNwOyBJZiB0aGU8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBsaXN0ZW5lciBpbml0 aWF0ZWQgdGhlIERUTFMgaGFuZHNoYWtlLCBpdCBtYXkgaGF2ZSBkb25lIHNvLCBmb3I8bzpwPjwv bzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBleGFtcGxlLCBh ZnRlciByZWNlaXZpbmcgYSBtdWx0aWNhc3QgbWVzc2FnZSBmb3IgdGhlIGZpcnN0IHRpbWUuPG86 cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz48bzpwPiZuYnNwOzwvbzpwPjwv c3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBJbiB0aGUgZXh0cmVtZSBz Y2VuYXJpbywgYSBtdWx0aWNhc3Qgc2VuZGVyIG1heSBhdHRlbXB0IHRvIGluaXRpYXRlPG86cD48 L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgdGhlIHVuaWNh c3QgRFRMUyBoYW5kc2hha2Ugd2l0aCBhbGwsIG9yIGEgc3Vic2V0IG9mLCBrbm93biBsaXN0ZW5l cnM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBq dXN0IGFmdGVyIGl0IHNlbmRzIG91dCB0aGUgRFRMUy1iYXNlZCBtdWx0aWNhc3QgbWVzc2FnZS4m bmJzcDsgVGhpcyBtYXk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxz cGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZu YnNwOyZuYnNwOyByZXN1bHQgaW4gdGhlIG11bHRpY2FzdCBzZW5kZXIgaGF2aW5nIHRvIHByb2Nl c3MgdW5pY2FzdCBEVExTPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48 c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4m bmJzcDsmbmJzcDsgaGFuZHNoYWtlIG1lc3NhZ2VzIGZyb20gbXVsdGlwbGUgbXVsdGljYXN0IGxp c3RlbmVycyBpbiBhIHNob3J0PG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1h bD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXci Jz4mbmJzcDsmbmJzcDsgcGVyaW9kLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29O b3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIg TmV3Iic+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3Bh biBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJz cDsmbmJzcDsgTm90ZTogVGhlcmUgaXMgYW4gb2J2aW91cyB0aW1pbmcgYW5kIHByb2Nlc3Npbmcg bG9hZCBpc3N1ZSBmb3IgdGhlPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1h bD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXci Jz4mbmJzcDsmbmJzcDsgbXVsdGljYXN0IHNlbmRlciBpbiB0aGUgc2NlbmFyaW8gd2hlcmUgaXQg YXR0ZW1wdHMgdG8gaW5pdGlhdGUgdGhlPG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1z b05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmll ciBOZXciJz4mbmJzcDsmbmJzcDsgdW5pY2FzdCBEVExTIGhhbmRzaGFrZXMgd2l0aCBhbGwvc29t ZSBvZiBpdHMga25vd24gbGlzdGVuZXJzIGp1c3Q8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xh c3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJD b3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBhZnRlciBpdCBzZW5kcyBvdXQgdGhlIERUTFMtYmFz ZWQgbXVsdGljYXN0IG1lc3NhZ2UuJm5ic3A7IEluIHRoaXMgY2FzZSw8bzpwPjwvbzpwPjwvc3Bh bj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyB0aGUgcHJvY2Vzc2luZyBsb2Fk IGluIHRoZSBtdWx0aWNhc3Qgc2VuZGVyIChpLmUuIHVuaWNhc3QgRFRMUzxvOnA+PC9vOnA+PC9z cGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IGNsaWVudCkgaXMgcmVkdWNl ZCBzb21ld2hhdCBieSB0aGUgZmFjdCB0aGF0IENvQVAgcmVxdWlyZXMgYSBiYWNrLW9mZjxvOnA+ PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IGFuZCByYW5k b21pemF0aW9uIG9mIHRoZSB1bmljYXN0IHJlc3BvbnNlIGJ5IHRoZSBMZWlzdXJlIHRpbWVyPG86 cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgbWVjaGFu aXNtIGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDguMiBvZiBbSS1ELmlldGYtY29yZS1jb2FwXS48 bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpw PiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6 IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48 c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMt c2VyaWYiO2NvbG9yOiMxRjQ5N0QnPkJlc3QgUmVnYXJkcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9 J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xv cjojMUY0OTdEJz5Ba2JhcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+ PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5z LXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xh c3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJD YWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD48ZGl2PjxkaXYgc3R5bGU9J2JvcmRlcjpub25lO2JvcmRlci10 b3A6c29saWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluJz48cCBjbGFz cz1Nc29Ob3JtYWw+PGI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 IlRhaG9tYSIsInNhbnMtc2VyaWYiJz5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9J2ZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiJz4gZHRscy1pb3Qg WzxhIGhyZWY9Im1haWx0bzpkdGxzLWlvdC1ib3VuY2VzQGlldGYub3JnIj5tYWlsdG86ZHRscy1p b3QtYm91bmNlc0BpZXRmLm9yZzwvYT5dIDxiPk9uIEJlaGFsZiBPZiA8L2I+UmFobWFuLCBBa2Jh cjxicj48Yj5TZW50OjwvYj4gVHVlc2RheSwgTWF5IDA2LCAyMDE0IDQ6NDQgUE08YnI+PGI+VG86 PC9iPiBNYXJjbyBUaWxvY2E8YnI+PGI+Q2M6PC9iPiBLdW1hciwgU2FuZGVlcDsgPGEgaHJlZj0i bWFpbHRvOmR0bHMtaW90QGlldGYub3JnIj5kdGxzLWlvdEBpZXRmLm9yZzwvYT48YnI+PGI+U3Vi amVjdDo8L2I+IFJlOiBbRHRscy1pb3RdIFVuaWNhc3QgcmVzcG9uc2VzIGluIGRyYWZ0LWtlb2gt ZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PC9kaXY+PC9k aXY+PHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05v cm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIs InNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPkhpIE1hcmNvLDxvOnA+PC9vOnA+PC9zcGFuPjwv cD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHls ZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2Nv bG9yOiMxRjQ5N0QnPlRoYW5rcyBmb3IgcmV2aWV3aW5nIHRoZSB1cGRhdGVkIGRyYWZ0LiZuYnNw OyBBbHNvIGhlcmUgaXMgbXkgZmVlZGJhY2sgdG8geW91ciB0d28gbmV3IHF1ZXN0aW9uczo8bzpw PjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3 RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48bzpwPiZu YnNwOzwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+Jmd0OzEpIEluIG9yZGVyIHRvIHBlcmZv cm0gYSBEVExTIGhhbmRzaGFrZSBiZWZvcmUvYWZ0ZXIgc2VuZGluZyBhIG11bHRpY2FzdCBtZXNz YWdlLCBhIHNlbmRlcjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD4mZ3Q7IG5vZGUg c2hvdWxkIGJlIGF3YXJlIG9mIHRoZSBncm91cCBtZW1iZXJzaGlwLCBlc3BlY2lhbGx5IHdoYXQg YXJlIHRoZSBsaXN0ZW5lciBub2RlcyBjdXJyZW50bHk8bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1N c29Ob3JtYWw+Jmd0OyBwcmVzZW50IGluIHRoZSBncm91cC4gT2YgY291cnNlLCBzdWNoIGEgZ3Jv dXAgbWVtYmVyc2hpcCBtYXkgY2hhbmdlIG92ZXIgdGltZSwgdXBvbiBuZXcgbm9kZXM8YnI+Jmd0 O2pvaW5pbmcgdGhlIGdyb3VwLiBIb3dldmVyLCBTZWN0aW9uIDMuMSBpbiB0aGUgZHJhZnQgc3Rh dGVzIHRoYXQgJnF1b3Q7QW55IGRldmljZSBjYW4gaW4gcHJpbmNpcGxlIGRlY2lkZTxvOnA+PC9v OnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD4mZ3Q7dG8gbGlzdGVuIHRvIGFueSBJUHY2IG11bHRp Y2FzdCBhZGRyZXNzLiBUaGlzIGFsc28gbWVhbnMgYXBwbGljYXRpb25zIG9uIHRoZSBvdGhlciBk ZXZpY2VzIGRvIG5vdDxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD4mZ3Q7a25vdywg b3IgZG8gbm90IGdldCBub3RpZmllZCwgd2hlbiBuZXcgbGlzdGVuZXJzIGpvaW4gdGhlIG5ldHdv cmsuJnF1b3Q7LiBDb3VsZG4ndCB0aGlzIGJlIGEgcHJvYmxlbTxvOnA+PC9vOnA+PC9wPjxwIGNs YXNzPU1zb05vcm1hbD4mZ3Q7Zm9yIHRoZSBzdWdnZXN0ZWQgYXBwcm9hY2g/PG86cD48L286cD48 L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05v cm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIs InNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPlllcywgaW4gcHJpbmNpcGxlLCBhbnkgZGV2aWNl IGNhbiBkZWNpZGUgdG8gbGlzdGVuIGZvciBhbnkgSVB2NiBtdWx0aWNhc3QgYWRkcmVzcy4mbmJz cDsgQnV0IGluIHByYWN0aWNlIG9mIGNvdXJzZSB0aGVyZSBhcmUgSVB2NiBtdWx0aWNhc3QgcmVs YXRlZCBwcm90b2NvbHMgZm9yIHJvdXRpbmcvam9pbmluZyB0aGF0IGRpY3RhdGUgd2hvIGNhbiA8 dT5zdWNjZXNzZnVsbHk8L3U+IGxpc3RlbiBmb3IgYW5kIHJlY2VpdmUgYW4gSVB2NiBtdWx0aWNh c3QgcGFja2V0LiZuYnNwOyBGb3IgZXhhbXBsZSwgdW5sZXNzIGEgZGV2aWNlIHVzZXMgYSBwcm90 b2NvbCBsaWtlIE1MRCB0byBleHBsaWNpdGx5IGpvaW4gYSBtdWx0aWNhc3QgZ3JvdXAsIHRoZSBu ZXR3b3JrIHdpbGwgbmV2ZXIgcm91dGUgdGhlIG11bHRpY2FzdCBwYWNrZXRzIG9mIGludGVyZXN0 IHRvIHRoZSBzdWItbmV0d29yayBvZiB0aGUgZGV2aWNlLiZuYnNwOyBUaGlzIGlzIGFsbCBleHBs YWluZWQgYXQgYSBoaWdoIGxldmVsIGluIHRoZSBJLkQuZ3JvdXBjb21tIHJlZmVyZW5jZSAoPGEg aHJlZj0iaHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1jb3JlLWdyb3VwY29t bS0xOCNzZWN0aW9uLTIuMSI+aHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1j b3JlLWdyb3VwY29tbS0xOCNzZWN0aW9uLTIuMTwvYT4gKSAuPG86cD48L286cD48L3NwYW4+PC9w PjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5U aGUgb3RoZXIgcGFydCBvZiB5b3VyIHF1ZXN0aW9uIHJlZmVycyB0byBob3cgZG9lcyB0aGUgc2Vu ZGVyIG5vZGUga25vdyB3aG8gaXMgcGFydCBvZiB0aGUgZ3JvdXAuJm5ic3A7IFlvdSBhcmUgY29y cmVjdCB0aGF0IGl0IGlzIHZlcnkgZGlmZmljdWx0IHRvIGtub3cgcHJlY2lzZWx5IHRoZSBtZW1i ZXJzaGlwIG9mIGEgZ3JvdXAuJm5ic3A7IFRoYXQgaXMgd2h5IHdlIGhhZCB0aGUgc3VidGxlIHJl ZmVyZW5jZSB0byDigJxrbm93biBsaXN0ZW5lcnPigJ0uJm5ic3A7IEhvdyB5b3UgYWN0dWFsbHkg a25vdyB0aGUgbWVtYmVyc2hpcCBkZXBlbmRzIG9uIHRoZSBtaXggb2YgcHJvdG9jb2xzIHVzZWQg KGFuZCBpcyBpbiBmYWN0IGl0IGlzIG5vdCBhbHdheXMgcG9zc2libGUgdG8ga25vdyBhbGwgdGhl IG1lbWJlcnMgYWNjdXJhdGVseSkuJm5ic3A7IEJ1dCBmb3IgQ29BUCBncm91cCBtZW1iZXIgZGlz Y292ZXJ5LCB0aGVyZSBpcyAmbmJzcDthZ2FpbiBndWlkYW5jZSBnaXZlbiBpbiB0aGUgSS5ELmdy b3VwY29tbSByZWZlcmVuY2UgKHNwZWNpZmljYWxseSBpbiA8YSBocmVmPSJodHRwOi8vdG9vbHMu aWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNvcmUtZ3JvdXBjb21tLTE4I3NlY3Rpb24tMi42Ij5o dHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1pZXRmLWNvcmUtZ3JvdXBjb21tLTE4I3Nl Y3Rpb24tMi42PC9hPiApLiZuYnNwOyBXZSBjYW4gbWFrZSB0aGlzIHBvaW50IGEgYml0IG1vcmUg ZXhwbGljaXQgaW4gdGhlIG5leHQgdXBkYXRlIG9mIG91ciBJLUQuPG86cD48L286cD48L3NwYW4+ PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48bzpwPiZuYnNwOzwvbzpwPjwvcD48cCBjbGFzcz1Nc29O b3JtYWw+PG86cD4mbmJzcDs8L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxl PSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29s b3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1h bD4mZ3Q7MikgQW4gYWx0ZXJuYXRpdmUgYXBwcm9hY2ggdG8gdGhlIG9uZSBzdWdnZXN0ZWQgaW4g U2VjdGlvbiA0LjUgbWF5IGNvbnNpc3QgaW4gYSBsaXN0ZW5lciBub2RlIGVzdGFibGlzaGluZzxv OnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD4mZ3Q7IGEgdW5pY2FzdCBEVExTIHNlc3Np b24gKGkuZS4gc3RhcnRpbmcgYSBEVExTIGhhbmRzaGFrZSkgd2l0aCB0aGUgc2VuZGVyIG5vZGUs IHVwb24gcmVjZWl2aW5nIGEgbXVsdGljYXN0PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9y bWFsPiZndDsgbWVzc2FnZSBmb3IgdGhlIGZpcnN0IHRpbWUuPG86cD48L286cD48L3A+PHAgY2xh c3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJD YWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPlllcywgZ29v ZCBwb2ludCEmbmJzcDsgV2UgY2FuIGFkZCB0aGlzIHRvIHRoZSBJLUQgaW4gb3VyIG5leHQgdXBk YXRlLiA8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxl PSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29s b3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1h bD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNh bnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBj bGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5CZXN0IFJlZ2FyZHMsPG86cD48 L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0Qn PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5 bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtj b2xvcjojMUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9y bWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwi c2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+QWtiYXI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+PHAg Y2xhc3M9TXNvTm9ybWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1hbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWw+PHNwYW4gc3R5bGU9J2Zv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjoj MUY0OTdEJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+PHAgY2xhc3M9TXNvTm9ybWFsPjxi PjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5z LXNlcmlmIic+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OiJUYWhvbWEiLCJzYW5zLXNlcmlmIic+IE1hcmNvIFRpbG9jYSBbPGEgaHJlZj0i bWFpbHRvOm1hcmNvQHNpY3Muc2UiPm1haWx0bzptYXJjb0BzaWNzLnNlPC9hPl0gPGJyPjxiPlNl bnQ6PC9iPiBUdWVzZGF5LCBNYXkgMDYsIDIwMTQgMTI6MzIgUE08YnI+PGI+VG86PC9iPiBSYWht YW4sIEFrYmFyPGJyPjxiPkNjOjwvYj4gS3VtYXIsIFNhbmRlZXA7IDxhIGhyZWY9Im1haWx0bzpk dGxzLWlvdEBpZXRmLm9yZyI+ZHRscy1pb3RAaWV0Zi5vcmc8L2E+PGJyPjxiPlN1YmplY3Q6PC9i PiBSZTogW0R0bHMtaW90XSBVbmljYXN0IHJlc3BvbnNlcyBpbiBkcmFmdC1rZW9oLWRpY2UtbXVs dGljYXN0LXNlY3VyaXR5LTA1PG86cD48L286cD48L3NwYW4+PC9wPjxwIGNsYXNzPU1zb05vcm1h bD48bzpwPiZuYnNwOzwvbzpwPjwvcD48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbD5IZWxsbyBBa2Jh ciw8bzpwPjwvbzpwPjwvcD48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbD48bzpwPiZuYnNwOzwvbzpw PjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbD5UaGFua3MgZm9yIGhhdmluZyBjb25z aWRlcmVkIG15IHF1ZXN0aW9uLiBUaGUgbmV3IFNlY3Rpb24gNC41IGxvb2tzIGZpbmUgdG8gbWUu IEFsc28sIEkgaGF2ZSB0aGUgdHdvIGZvbGxvd2luZyBjb21tZW50cy48bzpwPjwvbzpwPjwvcD48 L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbD48bzpwPiZuYnNwOzwvbzpwPjwvcD48L2Rpdj48 ZGl2PjxwIGNsYXNzPU1zb05vcm1hbD4xKSBJbiBvcmRlciB0byBwZXJmb3JtIGEgRFRMUyBoYW5k c2hha2UgYmVmb3JlL2FmdGVyIHNlbmRpbmcgYSBtdWx0aWNhc3QgbWVzc2FnZSwgYSBzZW5kZXIg bm9kZSBzaG91bGQgYmUgYXdhcmUgb2YgdGhlIGdyb3VwIG1lbWJlcnNoaXAsIGVzcGVjaWFsbHkg d2hhdCBhcmUgdGhlIGxpc3RlbmVyIG5vZGVzIGN1cnJlbnRseSBwcmVzZW50IGluIHRoZSBncm91 cC4gT2YgY291cnNlLCBzdWNoIGEgZ3JvdXAgbWVtYmVyc2hpcCBtYXkgY2hhbmdlIG92ZXIgdGlt ZSwgdXBvbiBuZXcgbm9kZXMgam9pbmluZyB0aGUgZ3JvdXAuIEhvd2V2ZXIsIFNlY3Rpb24gMy4x IGluIHRoZSBkcmFmdCBzdGF0ZXMgdGhhdCAmcXVvdDtBbnkgZGV2aWNlIGNhbiBpbiBwcmluY2lw bGUgZGVjaWRlIHRvIGxpc3RlbiB0byBhbnkgSVB2NiBtdWx0aWNhc3QgYWRkcmVzcy4gVGhpcyBh bHNvIG1lYW5zIGFwcGxpY2F0aW9ucyBvbiB0aGUgb3RoZXIgZGV2aWNlcyBkbyBub3Qga25vdywg b3IgZG8gbm90IGdldCBub3RpZmllZCwgd2hlbiBuZXcgbGlzdGVuZXJzIGpvaW4gdGhlIG5ldHdv cmsuJnF1b3Q7LiBDb3VsZG4ndCB0aGlzIGJlIGEgcHJvYmxlbSBmb3IgdGhlIHN1Z2dlc3RlZCBh cHByb2FjaD88bzpwPjwvbzpwPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbD48bzpw PiZuYnNwOzwvbzpwPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbD4yKSBBbiBhbHRl cm5hdGl2ZSBhcHByb2FjaCB0byB0aGUgb25lIHN1Z2dlc3RlZCBpbiBTZWN0aW9uIDQuNSBtYXkg Y29uc2lzdCBpbiBhIGxpc3RlbmVyIG5vZGUgZXN0YWJsaXNoaW5nIGEgdW5pY2FzdCBEVExTIHNl c3Npb24gKGkuZS4gc3RhcnRpbmcgYSBEVExTIGhhbmRzaGFrZSkgd2l0aCB0aGUgc2VuZGVyIG5v ZGUsIHVwb24gcmVjZWl2aW5nIGEgbXVsdGljYXN0IG1lc3NhZ2UgZm9yIHRoZSBmaXJzdCB0aW1l LjxvOnA+PC9vOnA+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsPkJlc3QgcmVnYXJkcyw8bzpw PjwvbzpwPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbD5NYXJjbzxvOnA+PC9vOnA+ PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPjwv ZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPjwvZGl2Pjxk aXY+PHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPjwvZGl2PjwvZGl2Pjxk aXY+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtYXJnaW4tYm90dG9tOjEyLjBwdCc+PG86cD4m bmJzcDs8L286cD48L3A+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWw+T24gNSBNYXkgMjAxNCAyMzo0 NSwgUmFobWFuLCBBa2JhciAmbHQ7PGEgaHJlZj0ibWFpbHRvOkFrYmFyLlJhaG1hbkBpbnRlcmRp Z2l0YWwuY29tIiB0YXJnZXQ9Il9ibGFuayI+QWtiYXIuUmFobWFuQGludGVyZGlnaXRhbC5jb208 L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD48ZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFs IHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJz YW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5IaSBNYXJjbyw8L3NwYW4+PG86cD48L286cD48L3A+ PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz4mbmJzcDs8L3NwYW4+ PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdE Jz4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4g c3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlm Ijtjb2xvcjojMUY0OTdEJz4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNv Tm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGli cmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5UaGUgYXV0aG9ycyBoYXZlIG1hZGUgYW4g dXBkYXRlIHRvIHRoZSBkcmFmdCB0byBhZGRyZXNzIGZ1bGx5IHlvdXIgZ29vZCBxdWVzdGlvbiBy ZWdhcmRpbmcgaG93IHRvIGhhbmRsZSB0aGUgdW5pY2FzdCByZXNwb25zZXMgdG8gdGhlIG11bHRp Y2FzdCByZXNwb25zZS4mbmJzcDsgU3BlY2lmaWNhbGx5LCBwbGVhc2UgcmV2aWV3IHRoZSBuZXcg c2VjdGlvbiA0LjUgYW5kIHRlbGwgdXMgaWYgeW91IGhhdmUgYW55IG1vcmUgcXVlc3Rpb25zOjwv c3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMx RjQ5N0QnPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5 bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48 c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMt c2VyaWYiO2NvbG9yOiMxRjQ5N0QnPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFz cz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToi Q2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPjxhIGhyZWY9Imh0dHA6Ly90b29s cy5pZXRmLm9yZy9odG1sL2RyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDYjc2Vj dGlvbi00LjUiIHRhcmdldD0iX2JsYW5rIj5odHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFm dC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA2I3NlY3Rpb24tNC41PC9hPjwvc3Bhbj48 bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0Qn PiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBz dHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz40LjUuJm5i c3A7IFVuaWNhc3QgUmVzcG9uc2VzIHRvIE11bHRpY2FzdCBNZXNzYWdlczwvc3Bhbj48bzpwPjwv bzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+ PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1m YW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IEluIENvQVAsIHJlc3BvbnNlcyB0byBt dWx0aWNhc3QgbWVzc2FnZXMgYXJlIGFsd2F5cyBzZW50IGJhY2sgYXM8L3NwYW4+PG86cD48L286 cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IHVuaWNhc3QuJm5ic3A7IFRo YXQgaXMsIHRoZSBncm91cCBtZW1iZXJzIHRoYXQgcmVjZWl2ZSBhIG11bHRpY2FzdCBtZXNzYWdl PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBt YXkgaW5kaXZpZHVhbGx5IGRlY2lkZSB0byBzZW5kIChvciBzdXBwcmVzcykgYSB1bmljYXN0IHJl c3BvbnNlIGFzPC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0n bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFu IHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNw OyZuYnNwOyBkZXNjcmliZWQgaW4gU2VjdGlvbiAyLjUgb2YgW0ktRC5pZXRmLWNvcmUtZ3JvdXBj b21tXS4mbmJzcDsgVGhlIHVuaWNhc3Q8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNv Tm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJp ZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IHJlc3BvbnNlcyB0byBhIERUTFMtYmFzZWQgbXVsdGljYXN0 IG1lc3NhZ2UgbWF5IG9wdGlvbmFsbHkgYmUgc2VjdXJlLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD48 cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgU3BlY2lmaWNhbGx5LCB0aGUgdW5pY2Fz dCByZXNwb25zZSBtYXkgYmUgc2VudCBiYWNrIGFzIGEgdW5pY2FzdCBEVExTPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBhcyBkZXNjcmliZWQg aW4gU2VjdGlvbiA5LjEgb2YgW0ktRC5pZXRmLWNvcmUtY29hcF0uJm5ic3A7IFRoaXMgcmVxdWly ZXM8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9 J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7 IHRoYXQgYSB1bmljYXN0IERUTFMgaGFuZHNoYWtlIHdhcyBwcmV2aW91c2x5IGluaXRpYXRlZCBi ZXR3ZWVuIHRoZTwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9 J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3Bh biBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJz cDsmbmJzcDsgbXVsdGljYXN0IG1lc3NhZ2Ugc2VuZGVyIGFuZCBsaXN0ZW5lci4mbmJzcDsgSW4g dGhlIGV4dHJlbWUgc2NlbmFyaW8sIGE8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNv Tm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJp ZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IG11bHRpY2FzdCBzZW5kZXIgbWF5IGF0dGVtcHQgdG8gaW5p dGlhdGUgdGhlIHVuaWNhc3QgRFRMUyBoYW5kc2hha2U8L3NwYW4+PG86cD48L286cD48L3A+PHAg Y2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IHdpdGggYWxsIG9yIGEgc3Vic2V0IG9mIGtu b3duIGxpc3RlbmVycyBqdXN0IGJlZm9yZSBvciBqdXN0IGFmdGVyIGl0PC9zcGFuPjxvOnA+PC9v OnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBzZW5kcyBvdXQgdGhlIERU TFMtYmFzZWQgbXVsdGljYXN0IG1lc3NhZ2UuJm5ic3A7IFRoaXMgbWF5IHJlc3VsdCBpbiB0aGU8 L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2Zv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IG11 bHRpY2FzdCBzZW5kZXIgKGkuZS4gdW5pY2FzdCBEVExTIGNsaWVudCkgaGF2aW5nIHRvIHByb2Nl c3MgdW5pY2FzdDwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9 J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3Bh biBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJz cDsmbmJzcDsgRFRMUyBoYW5kc2hha2UgbWVzc2FnZXMgZnJvbSBtdWx0aXBsZSBtdWx0aWNhc3Qg bGlzdGVuZXJzIChpLmUuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBz dHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8n PjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyIn PiZuYnNwOyZuYnNwOyB1bmljYXN0IERUTFMgc2VydmVycykgaW4gYSBzaG9ydCBwZXJpb2QuPC9z cGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDsmbmJzcDsgTm90ZTogVGhlcmUg aXMgYW4gb2J2aW91cyB0aW1pbmcgYW5kIHByb2Nlc3NpbmcgbG9hZCBpc3N1ZSBmb3IgdGhlPC9z cGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10 b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBtdWx0 aWNhc3Qgc2VuZGVyIGluIHRoZSBzY2VuYXJpbyB3aGVyZSBpdCBhdHRlbXB0cyB0byBpbml0aWF0 ZSB0aGU8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5 bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5i c3A7IHVuaWNhc3QgRFRMUyBoYW5kc2hha2VzIHdpdGggYWxsL3NvbWUgb2YgaXRzIGtub3duIGxp c3RlbmVycyBqdXN0PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHls ZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxz cGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZu YnNwOyZuYnNwOyBhZnRlciBpdCBzZW5kcyBvdXQgdGhlIERUTFMtYmFzZWQgbXVsdGljYXN0IG1l c3NhZ2UuJm5ic3A7IEluIHRoaXMgY2FzZSw8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9 TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNv dXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IHRoZSBwcm9jZXNzaW5nIGxvYWQgaW4gdGhlIG11bHRp Y2FzdCBzZW5kZXIgKGkuZS4gdW5pY2FzdCBEVExTPC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNs YXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBjbGllbnQpIGlzIHJlZHVjZWQgc29tZXdoYXQg YnkgdGhlIGZhY3QgdGhhdCBDb0FQIHJlcXVpcmVzIGEgYmFjay1vZmY8L3NwYW4+PG86cD48L286 cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+Jm5ic3A7Jm5ic3A7IGFuZCByYW5kb21pemF0aW9u IG9mIHRoZSB1bmljYXN0IHJlc3BvbnNlIGJ5IHRoZSBMZWlzdXJlIHRpbWVyPC9zcGFuPjxvOnA+ PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAu MHB0O2ZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyInPiZuYnNwOyZuYnNwOyBtZWNoYW5pc20gYXMg ZGVzY3JpYmVkIGluIFNlY3Rpb24gOC4yIG9mIFtJLUQuaWV0Zi1jb3JlLWNvYXBdLjwvc3Bhbj48 bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz4mbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz4mbmJzcDs8 L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2Zv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjoj MUY0OTdEJz4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0 eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+ PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5z LXNlcmlmIjtjb2xvcjojMUY0OTdEJz4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xh c3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz5CZXN0IFJlZ2FyZHMsPC9zcGFu PjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3 RCc+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0n bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFu IHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJp ZiI7Y29sb3I6IzFGNDk3RCc+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1z b05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxp YnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+QWtiYXI8L3NwYW4+PG86cD48L286cD48 L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0OTdEJz4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjtjb2xvcjojMUY0 OTdEJz4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxl PSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PHNw YW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNl cmlmIjtjb2xvcjojMUY0OTdEJz4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+PGRpdj48ZGl2 IHN0eWxlPSdib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGlu ZzozLjBwdCAwaW4gMGluIDBpbic+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PGI+PHNwYW4gc3R5bGU9 J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiJz5Gcm9t Ojwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IlRh aG9tYSIsInNhbnMtc2VyaWYiJz4gZHRscy1pb3QgW21haWx0bzo8YSBocmVmPSJtYWlsdG86ZHRs cy1pb3QtYm91bmNlc0BpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmR0bHMtaW90LWJvdW5jZXNA aWV0Zi5vcmc8L2E+XSA8Yj5PbiBCZWhhbGYgT2YgPC9iPkt1bWFyLCBTYW5kZWVwPGJyPjxiPlNl bnQ6PC9iPiBXZWRuZXNkYXksIEFwcmlsIDAyLCAyMDE0IDM6NDcgQU08YnI+PGI+VG86PC9iPiBN YXJjbyBUaWxvY2E7IDxhIGhyZWY9Im1haWx0bzpkdGxzLWlvdEBpZXRmLm9yZyIgdGFyZ2V0PSJf YmxhbmsiPmR0bHMtaW90QGlldGYub3JnPC9hPjxicj48Yj5TdWJqZWN0OjwvYj4gUmU6IFtEdGxz LWlvdF0gVW5pY2FzdCByZXNwb25zZXMgaW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1 cml0eS0wNTwvc3Bhbj48bzpwPjwvbzpwPjwvcD48L2Rpdj48L2Rpdj48ZGl2PjxkaXY+PHAgY2xh c3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJv dHRvbS1hbHQ6YXV0byc+Jm5ic3A7PG86cD48L286cD48L3A+PHAgY2xhc3M9TXNvTm9ybWFsIHN0 eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+ PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5z LXNlcmlmIjtjb2xvcjojMUY0OTdEJz5IaSBNYXJjbzwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBj bGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPlRo ZSBkcmFmdCBvbmx5IGFkZHJlc3NlcyB0aGUgcHJvdGVjdGlvbiBvZiBtdWx0aWNhc3QgdHJhZmZp Yy4gSWYgdW5pY2FzdCByZXNwb25zZXMgYXJlIGV4cGVjdGVkIGFuZCBpZiBwcm90ZWN0aW9uIGlz IHJlcXVpcmVkIGZvciBzdWNoIG1lc3NhZ2VzLCB0aGVuIGV4aXN0aW5nIHVuaWNhc3QgcHJvdGVj dGlvbiBtZWNoYW5pc21zIGJhc2VkIG9uIERUTFMgYXMgc3VnZ2VzdGVkIGluIGRyYWZ0LWlldGYt Y29yZS1jb2FwLTE4IHNob3VsZCBiZSB1c2VkLiBQcm90ZWN0aW9uIG9mIGFsbCB1bmljYXN0IG1l c3NhZ2VzIHNob3VsZCBiZSB0cmVhdGVkIGFzIHdvdWxkIGJlIGRvbmUgbm9ybWFsbHkuIDwvc3Bh bj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9w LWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5 N0QnPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9 J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz48c3Bh biBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2Vy aWYiO2NvbG9yOiMxRjQ5N0QnPkhvcGUgdGhhdCBhbnN3ZXJzIHlvdXIgcXVlc3Rpb24uPC9zcGFu PjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3 RCc+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0n bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFu IHN0eWxlPSdmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJp ZiI7Y29sb3I6IzFGNDk3RCc+UmVnYXJkczwvc3Bhbj48bzpwPjwvbzpwPjwvcD48cCBjbGFzcz1N c29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvJz48c3BhbiBzdHlsZT0nZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseToiQ2Fs aWJyaSIsInNhbnMtc2VyaWYiO2NvbG9yOiMxRjQ5N0QnPlNhbmRlZXAgPC9zcGFuPjxvOnA+PC9v OnA+PC9wPjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87 bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7Y29sb3I6IzFGNDk3RCc+Jm5ic3A7 PC9zcGFuPjxvOnA+PC9vOnA+PC9wPjxkaXYgc3R5bGU9J2JvcmRlcjpub25lO2JvcmRlci1sZWZ0 OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCc+PGRpdj48ZGl2IHN0 eWxlPSdib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzoz LjBwdCAwaW4gMGluIDBpbic+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+PGI+PHNwYW4gc3R5bGU9J2Zv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMtc2VyaWYiJz5Gcm9tOjwv c3Bhbj48L2I+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IlRhaG9t YSIsInNhbnMtc2VyaWYiJz4gZHRscy1pb3QgWzxhIGhyZWY9Im1haWx0bzpkdGxzLWlvdC1ib3Vu Y2VzQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+bWFpbHRvOmR0bHMtaW90LWJvdW5jZXNAaWV0 Zi5vcmc8L2E+XSA8Yj5PbiBCZWhhbGYgT2YgPC9iPk1hcmNvIFRpbG9jYTxicj48Yj5TZW50Ojwv Yj4gVHVlc2RheSwgQXByaWwgMDEsIDIwMTQgNjozNSBQTTxicj48Yj5Ubzo8L2I+IDxhIGhyZWY9 Im1haWx0bzpkdGxzLWlvdEBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmR0bHMtaW90QGlldGYu b3JnPC9hPjxicj48Yj5TdWJqZWN0OjwvYj4gW0R0bHMtaW90XSBVbmljYXN0IHJlc3BvbnNlcyBp biBkcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA1PC9zcGFuPjxvOnA+PC9vOnA+ PC9wPjwvZGl2PjwvZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPiZuYnNwOzxvOnA+PC9vOnA+PC9w PjxkaXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz5EZWFyIGFsbCw8bzpwPjwvbzpwPjwvcD48 L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPiZuYnNwOzxvOnA+PC9vOnA+PC9wPjwvZGl2 PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+QXMgdG8gcG9zc2libGUgcmVzcG9uc2VzIHRvIG11 bHRpY2FzdCByZXF1ZXN0cywgU2VjdGlvbiAyLjEgc3RhdGVzIHRoYXQgdGhleSBhcmUgc2VudCBi YWNrIGluIHVuaWNhc3QuIFRoZW4sIG5vIGZ1cnRoZXIgZGV0YWlscyBhcmUgcHJvdmlkZWQgYWJv dXQgdGhlaXIgcHJvdGVjdGlvbi48bzpwPjwvbzpwPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1z b05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8nPiZuYnNwOzxvOnA+PC9vOnA+PC9wPjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9y bWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byc+QXJlIHN1Y2ggcmVzcG9uc2VzIHN1cHBvc2VkIHRvIGJlIHByb3RlY3RlZCB0aHJvdWdo IGEgJnF1b3Q7cmVndWxhciZxdW90OyBEVExTIHNlc3Npb24sIHdoaWNoIG11c3QgYmUgKG9yIGhh cyBwcmV2aW91c2x5IGJlZW4pIGVzdGFibGlzaGVkIGJldHdlZW4gdGhlIHNlbmRlciBhbmQgbGlz dGVuZXI/PG86cD48L286cD48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9 J21zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz4mbmJz cDs8bzpwPjwvbzpwPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPkNoZWVycyw8 bzpwPjwvbzpwPjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPk1hcmNvPG86cD48 L286cD48L3A+PC9kaXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz4mbmJzcDs8bzpwPjwvbzpw PjwvcD48L2Rpdj48ZGl2PjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8nPiZuYnNwOzxvOnA+PC9vOnA+PC9w PjwvZGl2PjxkaXY+PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byc+Jm5ic3A7PG86cD48L286cD48L3A+PC9k aXY+PGRpdj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz4mbmJzcDs8bzpwPjwvbzpwPjwvcD48L2Rpdj48 L2Rpdj48L2Rpdj48cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvJz4mbmJzcDs8bzpwPjwvbzpwPjwvcD48ZGl2 IGNsYXNzPU1zb05vcm1hbCBhbGlnbj1jZW50ZXIgc3R5bGU9J3RleHQtYWxpZ246Y2VudGVyJz48 aHIgc2l6ZT0yIHdpZHRoPSIxMDAlIiBhbGlnbj1jZW50ZXI+PC9kaXY+PHAgY2xhc3M9TXNvTm9y bWFsIHN0eWxlPSdtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6 YXV0byc+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTo3LjVwdDtmb250LWZhbWlseToiQXJpYWwiLCJz YW5zLXNlcmlmIjtjb2xvcjpncmF5Jz5UaGUgaW5mb3JtYXRpb24gY29udGFpbmVkIGluIHRoaXMg bWVzc2FnZSBtYXkgYmUgY29uZmlkZW50aWFsIGFuZCBsZWdhbGx5IHByb3RlY3RlZCB1bmRlciBh cHBsaWNhYmxlIGxhdy4gVGhlIG1lc3NhZ2UgaXMgaW50ZW5kZWQgc29sZWx5IGZvciB0aGUgYWRk cmVzc2VlKHMpLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCB5b3UgYXJl IGhlcmVieSBub3RpZmllZCB0aGF0IGFueSB1c2UsIGZvcndhcmRpbmcsIGRpc3NlbWluYXRpb24s IG9yIHJlcHJvZHVjdGlvbiBvZiB0aGlzIG1lc3NhZ2UgaXMgc3RyaWN0bHkgcHJvaGliaXRlZCBh bmQgbWF5IGJlIHVubGF3ZnVsLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50 LCBwbGVhc2UgY29udGFjdCB0aGUgc2VuZGVyIGJ5IHJldHVybiBlLW1haWwgYW5kIGRlc3Ryb3kg YWxsIGNvcGllcyBvZiB0aGUgb3JpZ2luYWwgbWVzc2FnZS48L3NwYW4+PG86cD48L286cD48L3A+ PC9kaXY+PC9kaXY+PC9kaXY+PC9kaXY+PC9kaXY+PHAgY2xhc3M9TXNvTm9ybWFsPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPjwvZGl2PjwvZGl2PjwvYm9keT48L2h0bWw+ ------_=_NextPart_001_01CF74FF.CB182794-- From nobody Thu May 22 04:05:37 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D2DF1A0190 for ; Thu, 22 May 2014 04:05:36 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I49eGZyfAZrB for ; Thu, 22 May 2014 04:05:34 -0700 (PDT) Received: from ch1outboundpool.messaging.microsoft.com (ch1ehsobe003.messaging.microsoft.com [216.32.181.183]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9EA121A018E for ; Thu, 22 May 2014 04:05:33 -0700 (PDT) Received: from mail231-ch1-R.bigfish.com (10.43.68.254) by CH1EHSOBE013.bigfish.com (10.43.70.63) with Microsoft SMTP Server id 14.1.225.22; Thu, 22 May 2014 11:05:32 +0000 Received: from mail231-ch1 (localhost [127.0.0.1]) by mail231-ch1-R.bigfish.com (Postfix) with ESMTP id 41BA2A8030C; Thu, 22 May 2014 11:05:32 +0000 (UTC) X-Forefront-Antispam-Report: CIP:206.191.242.69; KIP:(null); UIP:(null); IPV:NLI; H:mail.philips.com; RD:error; EFVD:FOP X-SpamScore: -22 X-BigFish: VPS-22(z579ehz98dI15d6Ic89bh542I9251I217bIdd85kzz1f42h208ch1ee6h1de0h1fdah2073h2146h1202h1e76h2189h1d1ah1d2ah21bch1fc6hzz1de098h1033IL8275bh8275dh1de097hz2dh109h2a8h839h947hd25hf0ah1288h12a5h12a9h12bdh137ah13b6h1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h19b5h19ceh1ad9h1b0ah1b2fh2222h224fh1fb3h1d0ch1d2eh1d3fh1dfeh1dffh1e1dh1fe8h1ff5h2216h22d0h2336h2438h2461h2487h24ach24d7h2516h2545h255eh25f6h2605h268bh26d3h27e2h) Received: from mail231-ch1 (localhost.localdomain [127.0.0.1]) by mail231-ch1 (MessageSwitch) id 1400756729465020_12371; Thu, 22 May 2014 11:05:29 +0000 (UTC) Received: from CH1EHSMHS018.bigfish.com (snatpool3.int.messaging.microsoft.com [10.43.68.226]) by mail231-ch1.bigfish.com (Postfix) with ESMTP id 62C87120005A; Thu, 22 May 2014 11:05:29 +0000 (UTC) Received: from mail.philips.com (206.191.242.69) by CH1EHSMHS018.bigfish.com (10.43.70.18) with Microsoft SMTP Server (TLS) id 14.16.227.3; Thu, 22 May 2014 11:05:29 +0000 Received: from AMSPRD9003MB066.MGDPHG.emi.philips.com ([169.254.5.106]) by AMSPRD9003HT001.MGDPHG.emi.philips.com ([141.251.33.78]) with mapi id 14.16.0453.000; Thu, 22 May 2014 11:05:28 +0000 From: "Dijk, Esko" To: Carsten Bormann Thread-Topic: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 Thread-Index: AQHPTke1MAdfpqid3kOruFyexTfVEJsyuiUAgAE6ooCAAEaMgIAEpRcAgA93i1CAAEkTgIABCnEggAAQEICAAwK88A== Date: Thu, 22 May 2014 11:05:27 +0000 Message-ID: <031DD135F9160444ABBE3B0C36CED61836D88438@AMSPRD9003MB066.MGDPHG.emi.philips.com> References: <031DD135F9160444ABBE3B0C36CED61836D7A1E1@AMSPRD9003MB066.MGDPHG.emi.philips.com> <031DD135F9160444ABBE3B0C36CED61836D7B49E@AMSPRD9003MB066.MGDPHG.emi.philips.com> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [194.171.252.106] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: philips.com X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn% Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/RGYFYr8up4Xqu-c4GslGwqP7Rp8 Cc: "Rahman, Akbar" , Marco Tiloca , "Kumar, Sandeep" , "dtls-iot@ietf.org" Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 May 2014 11:05:36 -0000 Ok, we're not alone then! First question for us is whether details of doing= an unsecured response to a secured multicast request should be in scope of= this draft, or to be left for other/future work? Any views on this are wel= come (and meanwhile I'll work offline with Akbar to discuss next steps). Esko -----Original Message----- From: Carsten Bormann [mailto:cabo@tzi.org] Sent: Tuesday, May 20, 2014 15:05 To: Dijk, Esko Cc: Rahman, Akbar; Marco Tiloca; Kumar, Sandeep; dtls-iot@ietf.org Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-secu= rity-05 On 20 May 2014, at 14:28, Dijk, Esko wrote: > 1B. if standard CoAP matching rules are not followed, the new matching ru= les need to be defined. What complicates this is that a client doesn't know= a priori if the server would respond DTLS-secured or not. So it needs two = methods of matching, one for secured responses and another for unsecured on= es. We have similar problems in other alternate-transports scenarios, where the= response channel is not necessarily tightly bound to the request channel. I would expect we will arrive at similar solutions here. Gr=FC=DFe, Carsten ________________________________ The information contained in this message may be confidential and legally p= rotected under applicable law. The message is intended solely for the addre= ssee(s). If you are not the intended recipient, you are hereby notified tha= t any use, forwarding, dissemination, or reproduction of this message is st= rictly prohibited and may be unlawful. If you are not the intended recipien= t, please contact the sender by return e-mail and destroy all copies of the= original message. From nobody Thu May 22 06:46:34 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E6D81A0168 for ; Thu, 22 May 2014 06:46:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tP9SaTdHKnhq for ; Thu, 22 May 2014 06:46:31 -0700 (PDT) Received: from mail-pb0-f43.google.com (mail-pb0-f43.google.com [209.85.160.43]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 629FB1A00C2 for ; Thu, 22 May 2014 06:46:31 -0700 (PDT) Received: by mail-pb0-f43.google.com with SMTP id up15so2537005pbc.2 for ; Thu, 22 May 2014 06:46:30 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:message-id:date:from:user-agent:mime-version:to :subject:references:in-reply-to:content-type; bh=WPboFSX7LXvas8SQfBdEzjAzVGP22A2jMx0Jo2Izeac=; b=ez4FED+7hSa/l+5w9cBMRZ/9bXnbvUeo3ZYn0w1/CbGVvXVnaq06OPPlU+FaU+3UTu BkU+Bu/3Jf29E+UlL94HPNo15YN5zEsuxVdFdtOVgJXmu0y4FeOEd/y2evu49vzrGc2P e9kSVVlFGbT++Zlz9PIIn6gI0+Tn06CCQJMXLCVXlF9IF2FgO+DldHwPPQ0TEMK2cpkl 92x5D230Y/s6slG84kgdjE+V06TEMyZRzRXOME8Fl7FliK7jxoupVwP2M7L9PTbSIURr Z5XkNtkRmLfVqTE+PXg3xDRQFivboqWdQouquC5KDEFJEYWsklULjR4N54RXQy6gV/dV sJiA== X-Gm-Message-State: ALoCoQmEcJNDOk2XAdRAUmIpkpSqYG8RukWjVQAUg4MwxJmcW4kvpccAEIUkT7Hv/4eyKT5VPERe X-Received: by 10.68.201.10 with SMTP id jw10mr67551084pbc.25.1400766390013; Thu, 22 May 2014 06:46:30 -0700 (PDT) Received: from [192.168.1.105] (c-68-34-113-195.hsd1.md.comcast.net. [68.34.113.195]) by mx.google.com with ESMTPSA id bq4sm13194551pbb.60.2014.05.22.06.46.28 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 22 May 2014 06:46:29 -0700 (PDT) Message-ID: <537DFFB6.50608@nthpermutation.com> Date: Thu, 22 May 2014 09:46:30 -0400 From: Michael StJohns User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: dtls-iot@ietf.org References: <031DD135F9160444ABBE3B0C36CED61836D7A1E1@AMSPRD9003MB066.MGDPHG.emi.philips.com> <031DD135F9160444ABBE3B0C36CED61836D7B49E@AMSPRD9003MB066.MGDPHG.emi.philips.com> <031DD135F9160444ABBE3B0C36CED61836D88438@AMSPRD9003MB066.MGDPHG.emi.philips.com> In-Reply-To: <031DD135F9160444ABBE3B0C36CED61836D88438@AMSPRD9003MB066.MGDPHG.emi.philips.com> Content-Type: multipart/alternative; boundary="------------030500080204080100040707" Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/Q-ww72FVbGOM9sOO4-C-GdvDHZE Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 May 2014 13:46:33 -0000 This is a multi-part message in MIME format. --------------030500080204080100040707 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit On 5/22/2014 7:05 AM, Dijk, Esko wrote: > Ok, we're not alone then! First question for us is whether details of doing an unsecured response to a secured multicast request should be in scope of this draft, or to be left for other/future work? The first question still remains as to whether or not we should be attempting to secure multicast UDP or an application protocol running on UDP with a DTLS variant. So far, the analysis has strongly suggested NO and that such security - if any - should be applied as part of the application layer and using asymmetric cryptography rather than TLS's symmetric (for records) cryptography. EKR's comment at the mike at the last meeting is specific and on topic: - Eker - You should abandon DTLS record layer to support multicast [if you want to support source authentication]. Source authentication is really required for many IoT use cases. You can't do control applications without source authentication, and the draft was a) written to apply to a control application, and b) does not supply source authentication in any meaningful way. My continued belief is that the current draft-keoh-dice-multicast-security is not viable as a DICE submission in its current form, and that the protection of multicasted data is probably more appropriately done more at the application layer and tailored for specific applications needs (e.g. the representative application that was discussed with me is turn on and off lights). Any DICE based solution needs to be of general applicability, have minimal constraints and actually supply non-trivial security. > Any views on this are welcome (and meanwhile I'll work offline with Akbar to discuss next steps). > > Esko > > -----Original Message----- > From: Carsten Bormann [mailto:cabo@tzi.org] > Sent: Tuesday, May 20, 2014 15:05 > To: Dijk, Esko > Cc: Rahman, Akbar; Marco Tiloca; Kumar, Sandeep; dtls-iot@ietf.org > Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 > > On 20 May 2014, at 14:28, Dijk, Esko wrote: > >> 1B. if standard CoAP matching rules are not followed, the new matching rules need to be defined. What complicates this is that a client doesn't know a priori if the server would respond DTLS-secured or not. So it needs two methods of matching, one for secured responses and another for unsecured ones. > We have similar problems in other alternate-transports scenarios, where the response channel is not necessarily tightly bound to the request channel. > I would expect we will arrive at similar solutions here. > > Grüße, Carsten > > > ________________________________ > The information contained in this message may be confidential and legally protected under applicable law. The message is intended solely for the addressee(s). If you are not the intended recipient, you are hereby notified that any use, forwarding, dissemination, or reproduction of this message is strictly prohibited and may be unlawful. If you are not the intended recipient, please contact the sender by return e-mail and destroy all copies of the original message. > > _______________________________________________ > dtls-iot mailing list > dtls-iot@ietf.org > https://www.ietf.org/mailman/listinfo/dtls-iot --------------030500080204080100040707 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit
On 5/22/2014 7:05 AM, Dijk, Esko wrote:
Ok, we're not alone then! First question for us is whether details of doing an unsecured response to a secured multicast request should be in scope of this draft, or to be left for other/future work?
The first question still remains as to whether or not we should be attempting to secure multicast UDP or an application protocol running on UDP with a DTLS variant.  So far, the analysis has strongly suggested NO and that such security - if any - should be applied as part of the application layer and using asymmetric cryptography rather than TLS's symmetric (for records) cryptography.

EKR's comment at the mike at the last meeting is specific and on topic:

- Eker - You should abandon DTLS record layer to support multicast [if you want to support source authentication].  Source authentication is really required for many IoT use cases.
You can't do control applications without source authentication, and the draft was a) written to apply to a control application, and b) does not supply source authentication in any meaningful way.

My continued belief is that the current draft-keoh-dice-multicast-security is not viable as a DICE submission in its current form, and that the protection of multicasted data is probably more appropriately done more at the application layer and tailored for specific applications needs (e.g. the representative application that was discussed with me is turn on and off lights).  Any DICE based solution needs to be of general applicability, have minimal constraints and actually supply non-trivial security.



 Any views on this are welcome (and meanwhile I'll work offline with Akbar to discuss next steps).

Esko

-----Original Message-----
From: Carsten Bormann [mailto:cabo@tzi.org]
Sent: Tuesday, May 20, 2014 15:05
To: Dijk, Esko
Cc: Rahman, Akbar; Marco Tiloca; Kumar, Sandeep; dtls-iot@ietf.org
Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05

On 20 May 2014, at 14:28, Dijk, Esko <esko.dijk@philips.com> wrote:


1B. if standard CoAP matching rules are not followed, the new matching rules need to be defined. What complicates this is that a client doesn't know a priori if the server would respond DTLS-secured or not. So it needs two methods of matching, one for secured responses and another for unsecured ones.

We have similar problems in other alternate-transports scenarios, where the response channel is not necessarily tightly bound to the request channel.
I would expect we will arrive at similar solutions here.

Grüße, Carsten


________________________________
The information contained in this message may be confidential and legally protected under applicable law. The message is intended solely for the addressee(s). If you are not the intended recipient, you are hereby notified that any use, forwarding, dissemination, or reproduction of this message is strictly prohibited and may be unlawful. If you are not the intended recipient, please contact the sender by return e-mail and destroy all copies of the original message.

_______________________________________________
dtls-iot mailing list
dtls-iot@ietf.org
https://www.ietf.org/mailman/listinfo/dtls-iot

--------------030500080204080100040707-- From nobody Thu May 22 07:23:46 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DE72A1A0019 for ; Thu, 22 May 2014 07:23:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vyg-eKnXBIBa for ; Thu, 22 May 2014 07:23:42 -0700 (PDT) Received: from service88.mimecast.com (service88.mimecast.com [195.130.217.12]) by ietfa.amsl.com (Postfix) with ESMTP id 238071A01B9 for ; Thu, 22 May 2014 07:23:41 -0700 (PDT) Received: from usa-sjc-gw2.usa.Arm.com (fw-tnat.snv.arm.com [217.140.100.22]) (Using TLS) by service88.mimecast.com; Thu, 22 May 2014 15:23:39 +0100 Received: from Spock.usa.Arm.com ([fe80::4116:859a:65b1:2f84]) by usa-sjc-gw2.usa.Arm.com ([::1]) with mapi; Thu, 22 May 2014 07:23:36 -0700 From: Zach Shelby To: Michael StJohns Date: Thu, 22 May 2014 07:23:32 -0700 Thread-Topic: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 Thread-Index: Ac91yWtfI5wlM3gPSCawR+LDsaTzrg== Message-ID: References: <031DD135F9160444ABBE3B0C36CED61836D7A1E1@AMSPRD9003MB066.MGDPHG.emi.philips.com> <031DD135F9160444ABBE3B0C36CED61836D7B49E@AMSPRD9003MB066.MGDPHG.emi.philips.com> <031DD135F9160444ABBE3B0C36CED61836D88438@AMSPRD9003MB066.MGDPHG.emi.philips.com> <537DFFB6.50608@nthpermutation.com> In-Reply-To: <537DFFB6.50608@nthpermutation.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US MIME-Version: 1.0 X-MC-Unique: 114052215233904302 Content-Type: text/plain; charset=WINDOWS-1252 Content-Transfer-Encoding: quoted-printable Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/FXFQ2-1kOYFQxHYLhDOi9x8lO3A Cc: "dtls-iot@ietf.org" Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 May 2014 14:23:45 -0000 Your point is taken Michael, and I agree we now need to be exploring an app= lication layer solution. We are still waiting for the authors to submit a s= traw-man of that approach. So until that time, this is the only draft folks= can discuss. What is currently being discussed with regards to how to respond to a multi= cast request is relevant regardless of how you secure the message. The scop= e question is valid either way. Personally, I don't think we should allow an unsecured response to a secure= request (even for alternative transports). Zach On May 22, 2014, at 4:46 PM, Michael StJohns wrote= : > On 5/22/2014 7:05 AM, Dijk, Esko wrote: >> Ok, we're not alone then! First question for us is whether details of do= ing an unsecured response to a secured multicast request should be in scope= of this draft, or to be left for other/future work? > The first question still remains as to whether or not we should be attemp= ting to secure multicast UDP or an application protocol running on UDP with= a DTLS variant. So far, the analysis has strongly suggested NO and that s= uch security - if any - should be applied as part of the application layer = and using asymmetric cryptography rather than TLS's symmetric (for records)= cryptography. > > EKR's comment at the mike at the last meeting is specific and on topic: > > - Eker - You should abandon DTLS record layer to support multicast [if yo= u want to support source authentication]. Source authentication is really = required for many IoT use cases. > You can't do control applications without source authentication, and the = draft was a) written to apply to a control application, and b) does not sup= ply source authentication in any meaningful way. > > My continued belief is that the current draft-keoh-dice-multicast-securit= y is not viable as a DICE submission in its current form, and that the prot= ection of multicasted data is probably more appropriately done more at the = application layer and tailored for specific applications needs (e.g. the re= presentative application that was discussed with me is turn on and off ligh= ts). Any DICE based solution needs to be of general applicability, have mi= nimal constraints and actually supply non-trivial security. > > > >> Any views on this are welcome (and meanwhile I'll work offline with Akb= ar to discuss next steps). >> >> Esko >> >> -----Original Message----- >> From: Carsten Bormann [ >> mailto:cabo@tzi.org >> ] >> Sent: Tuesday, May 20, 2014 15:05 >> To: Dijk, Esko >> Cc: Rahman, Akbar; Marco Tiloca; Kumar, Sandeep; >> dtls-iot@ietf.org >> >> Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-s= ecurity-05 >> >> On 20 May 2014, at 14:28, Dijk, Esko >> >> wrote: >> >> >>> 1B. if standard CoAP matching rules are not followed, the new matching = rules need to be defined. What complicates this is that a client doesn't kn= ow a priori if the server would respond DTLS-secured or not. So it needs tw= o methods of matching, one for secured responses and another for unsecured = ones. >>> >> We have similar problems in other alternate-transports scenarios, where = the response channel is not necessarily tightly bound to the request channe= l. >> I would expect we will arrive at similar solutions here. >> >> Gr=FC=DFe, Carsten >> >> >> ________________________________ >> The information contained in this message may be confidential and legall= y protected under applicable law. The message is intended solely for the ad= dressee(s). If you are not the intended recipient, you are hereby notified = that any use, forwarding, dissemination, or reproduction of this message is= strictly prohibited and may be unlawful. If you are not the intended recip= ient, please contact the sender by return e-mail and destroy all copies of = the original message. >> >> _______________________________________________ >> dtls-iot mailing list >> >> dtls-iot@ietf.org >> https://www.ietf.org/mailman/listinfo/dtls-iot > > _______________________________________________ > dtls-iot mailing list > dtls-iot@ietf.org > https://www.ietf.org/mailman/listinfo/dtls-iot Zach Shelby Director of Technology ARM Internet of Things BU www.arm.com mobile: +1 (408) 203-9434 Skype: zdshelby LinkedIn: fi.linkedin.com/in/zachshelby/ -- IMPORTANT NOTICE: The contents of this email and any attachments are con= fidential and may also be privileged. If you are not the intended recipient= , please notify the sender immediately and do not disclose the contents to = any other person, use it for any purpose, or store or copy the information = in any medium. Thank you. ARM Limited, Registered office 110 Fulbourn Road, Cambridge CB1 9NJ, Regist= ered in England & Wales, Company No: 2557590 ARM Holdings plc, Registered office 110 Fulbourn Road, Cambridge CB1 9NJ, R= egistered in England & Wales, Company No: 2548782 From nobody Thu May 22 11:15:53 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 551C41A024F for ; Thu, 22 May 2014 11:15:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.551 X-Spam-Level: X-Spam-Status: No, score=-2.551 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RP_MATCHES_RCVD=-0.651, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QMC4IepEScx1 for ; Thu, 22 May 2014 11:15:49 -0700 (PDT) Received: from it-ipcorp-01.silverspringnet.com (it-ipcorp-01.silverspringnet.com [74.121.22.25]) by ietfa.amsl.com (Postfix) with ESMTP id 647321A024B for ; Thu, 22 May 2014 11:15:49 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: AqcEAPs9flMKOQxz/2dsb2JhbABWA4JCgRdYvG8BhzsBgSN0giUBAQEEAQEBAgFoFwYBCBEDAQEBBgEBAR8JBRABDgELFAkIAgQBEQEGAwUNiDPWaxeNbBEBFh8KARYBBguELwSJZ4kggmuDLpcvgXc5 X-IronPort-AV: E=Sophos;i="4.98,888,1392192000"; d="png'150?scan'150,208,217,150";a="8687515" Received: from sfo-barrlb-01.silverspringnet.com (HELO mail.silverspringnet.com) ([10.57.12.115]) by it-ipcorp-01.silverspringnet.com with ESMTP/TLS/AES128-SHA; 22 May 2014 11:15:48 -0700 Received: from SFO-EXMB-03.silverspringnet.com ([fe80::e877:a0b0:2e8d:1b57]) by SFO-EXCA-03.silverspringnet.com ([::1]) with mapi id 14.03.0181.006; Thu, 22 May 2014 11:15:47 -0700 From: Dorothy Gellert To: Michael StJohns , "dtls-iot@ietf.org" Thread-Topic: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 Thread-Index: AQHPTke/AVOR893YjkiK8ZBWigcAUpszL30AgAE6ooCAAEaNgIAEpRYAgA96Q4CAAEwVgIABCtEAgAAJ9oCAAwNhgIAALP8A///V4wA= Date: Thu, 22 May 2014 18:15:47 +0000 Message-ID: In-Reply-To: <537DFFB6.50608@nthpermutation.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: x-originating-ip: [10.57.12.115] Content-Type: multipart/related; boundary="_004_CFA3814E10E2Adgellertsilverspringnetcom_"; type="multipart/alternative" MIME-Version: 1.0 Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/rygyRPXEegfckkE0hCM-MAdPeZs Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 May 2014 18:15:51 -0000 --_004_CFA3814E10E2Adgellertsilverspringnetcom_ Content-Type: multipart/alternative; boundary="_000_CFA3814E10E2Adgellertsilverspringnetcom_" --_000_CFA3814E10E2Adgellertsilverspringnetcom_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi All- It appears that we are still struggling with the issues raised with the mul= ticast draft at the last IETF meeting. In order to move forward at the next WG meeting, can we please document the= se issues in the draft so we know when its appropriate to apply this solut= ion. Specifically, I suggest we take out references to control systems in the A= bstract, as this seems to be the sticking point. From the email below it= s suggested that the authors agreed on the use case to turn on and off ligh= ts, rather than lighting control in general. Can we update the draft to r= eflect this agreement? Thanks, Dorothy Gellert Silver Spring Networks E dgellert@silverspringnet.com O +1 650 839 4378 C +1 650 556-5994 [Description: Description: Description: Description: cid:image001.jpg@01CD8= D1D.E8F2D9D0] From: Mike St Johns > Date: Thursday, May 22, 2014 at 6:46 AM To: "dtls-iot@ietf.org" > Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-secu= rity-05 On 5/22/2014 7:05 AM, Dijk, Esko wrote: Ok, we're not alone then! First question for us is whether details of doing= an unsecured response to a secured multicast request should be in scope of= this draft, or to be left for other/future work? The first question still remains as to whether or not we should be attempti= ng to secure multicast UDP or an application protocol running on UDP with a= DTLS variant. So far, the analysis has strongly suggested NO and that suc= h security - if any - should be applied as part of the application layer an= d using asymmetric cryptography rather than TLS's symmetric (for records) c= ryptography. EKR's comment at the mike at the last meeting is specific and on topic: - Eker - You should abandon DTLS record layer to support multicast [if you = want to support source authentication]. Source authentication is really re= quired for many IoT use cases. You can't do control applications without source authentication, and the dr= aft was a) written to apply to a control application, and b) does not suppl= y source authentication in any meaningful way. My continued belief is that the current draft-keoh-dice-multicast-security = is not viable as a DICE submission in its current form, and that the protec= tion of multicasted data is probably more appropriately done more at the ap= plication layer and tailored for specific applications needs (e.g. the repr= esentative application that was discussed with me is turn on and off lights= ). Any DICE based solution needs to be of general applicability, have mini= mal constraints and actually supply non-trivial security. Any views on this are welcome (and meanwhile I'll work offline with Akbar = to discuss next steps). Esko -----Original Message----- From: Carsten Bormann [mailto:cabo@tzi.org] Sent: Tuesday, May 20, 2014 15:05 To: Dijk, Esko Cc: Rahman, Akbar; Marco Tiloca; Kumar, Sandeep; dtls-iot@ietf.org Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-secu= rity-05 On 20 May 2014, at 14:28, Dijk, Esko wrote: 1B. if standard CoAP matching rules are not followed, the new matching rule= s need to be defined. What complicates this is that a client doesn't know a= priori if the server would respond DTLS-secured or not. So it needs two me= thods of matching, one for secured responses and another for unsecured ones= . We have similar problems in other alternate-transports scenarios, where the= response channel is not necessarily tightly bound to the request channel. I would expect we will arrive at similar solutions here. Gr=FC=DFe, Carsten ________________________________ The information contained in this message may be confidential and legally p= rotected under applicable law. The message is intended solely for the addre= ssee(s). If you are not the intended recipient, you are hereby notified tha= t any use, forwarding, dissemination, or reproduction of this message is st= rictly prohibited and may be unlawful. If you are not the intended recipien= t, please contact the sender by return e-mail and destroy all copies of the= original message. _______________________________________________ dtls-iot mailing list dtls-iot@ietf.orghttps://www.ietf.org/mailman/lis= tinfo/dtls-iot --_000_CFA3814E10E2Adgellertsilverspringnetcom_ Content-Type: text/html; charset="iso-8859-1" Content-ID: Content-Transfer-Encoding: quoted-printable
Hi All-

It appears that we are= still struggling with the issues raised with the multicast draft at the la= st IETF meeting. 
In order to move forwa= rd at the next WG meeting, can we please document these issues in the  = ;draft so we know when its appropriate to apply this solution. 

Specifically,  I = suggest we take out references to control systems in the Abstract, as this = seems to be the sticking point.    From the email below its sugge= sted that the authors agreed on the use case to turn on and off lights, rather than lighting control in general.   Can we = update the draft to reflect this agreement?

Thanks,

Dorothy Gelle= rt

Silver Spring= Networks

E dgellert@silverspringnet.com

O<= span style=3D"font-size: 9pt;"> +1 650 839 4378

C +1 650 556-5994

<= /o:p>


 



From: Mike St Johns <msj@nthpermutation.com>
Date: Thursday, May 22, 2014 at 6:4= 6 AM
To: "dtls-iot@ietf.org" <dtls-iot@ietf.org>
Subject: Re: [Dtls-iot] Unicast res= ponses in draft-keoh-dice-multicast-security-05

On 5/22/2014 7:05 AM, Dijk, Esko wrote:
Ok, we're not alone then! First question for us is whether d=
etails of doing an unsecured response to a secured multicast request should=
 be in scope of this draft, or to be left for other/future work?
The first question still remains as to whether or not we should be attempti= ng to secure multicast UDP or an application protocol running on UDP with a= DTLS variant.  So far, the analysis has strongly suggested NO and tha= t such security - if any - should be applied as part of the application layer and using asymmetric cryptography= rather than TLS's symmetric (for records) cryptography.

EKR's comment at the mike at the last meeting is specific and on topic:

- Eker - You should abandon DTLS record layer to suppor= t multicast [if you want to support source authentication].  Source au= thentication is really required for many IoT use cases.
You can't do control applications without source authentication, and the dr= aft was a) written to apply to a control application, and b) does not suppl= y source authentication in any meaningful way.

My continued belief is that the current draft-keoh-dice-multicast-security = is not viable as a DICE submission in its current form, and that the protec= tion of multicasted data is probably more appropriately done more at the ap= plication layer and tailored for specific applications needs (e.g. the representative application that was = discussed with me is turn on and off lights).  Any DICE based solution= needs to be of general applicability, have minimal constraints and actuall= y supply non-trivial security.



 Any views on this are welcome (and meanwhile I'll work offl=
ine with Akbar to discuss next steps).

Esko

-----Original Message-----
From: Carsten Bormann [mailto:cabo@tzi.org]
Sent: Tuesday, May 20, 2014 15:05
To: Dijk, Esko
Cc: Rahman, Akbar; Marco Tiloca; Kumar, Sandeep; dtls-iot@ietf.org
Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-secu=
rity-05

On 20 May 2014, at 14:28, Dijk, Esko <esko.dijk@philips.com> wrote:


1B. if standard CoAP matching rules are not followed, the ne=
w matching rules need to be defined. What complicates this is that a client=
 doesn't know a priori if the server would respond DTLS-secured or not. So =
it needs two methods of matching, one for secured responses and another for=
 unsecured ones.

We have similar problems in other alternate-transports scena=
rios, where the response channel is not necessarily tightly bound to the re=
quest channel.
I would expect we will arrive at similar solutions here.

Gr=FC=DFe, Carsten


________________________________
The information contained in this message may be confidential and legally p=
rotected under applicable law. The message is intended solely for the addre=
ssee(s). If you are not the intended recipient, you are hereby notified tha=
t any use, forwarding, dissemination, or reproduction of this message is st=
rictly prohibited and may be unlawful. If you are not the intended recipien=
t, please contact the sender by return e-mail and destroy all copies of the=
 original message.

_______________________________________________
dtls-iot mailing list
dtl=
s-iot@ietf.orghttps://www.ietf.org/mailman/listinfo/dtl=
s-iot

 --_000_CFA3814E10E2Adgellertsilverspringnetcom_-- --_004_CFA3814E10E2Adgellertsilverspringnetcom_ Content-Type: image/png; name="6FB6AF3B-86F9-4E67-ABF0-08E361B809CE[42].png" Content-Description: 6FB6AF3B-86F9-4E67-ABF0-08E361B809CE[42].png Content-Disposition: inline; filename="6FB6AF3B-86F9-4E67-ABF0-08E361B809CE[42].png"; size=14034; creation-date="Thu, 22 May 2014 18:15:47 GMT"; modification-date="Thu, 22 May 2014 18:15:47 GMT" Content-ID: Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAAfQAAAAyCAIAAAAlcr7AAAAgAElEQVR4nO29eXxc1ZUtvPa5tzSU hlJpli2pSrINtiRbHjCzJzAzCZDOQCYgnU53J5CxX3deks5ASHenIXnpdPf3+nUGApkTIAFCmAJ4 YjB4km0NBmypSvKgeS5Nde/Z749zzq0r2cnve8E2YNf6JVhSVd26wzn77LP22nsTSwYzBDMEADAT EQAwGOZngAFAEgQzgwgAAQxIwGIXZLH+LIMF9IfAkOaAEhDMZD4rmZnIgu/o3qfSSOMMgtT/MjNZ ataoSaF+gJlj+leAiJhTUw/+V4nUEcg7LISaXOqvgGQI9SozEZEEEwjMBGK4RJaES7D0eyDIO0kW IDMXGWBmQSdrUnpX5L80NmaE1CV4f+Q/Zg3021xAMEOZGyYmZYjUqYP12yRBQKaMm3dY/+HNz1Ld rpN0uW8JEDMby8tEpK7V3F8pwQSLUndNPwZveDFALFyCBbUeAGQelXeoP3UCkgGkRpgE7FN7xWmk cRrB+v+g4+eCz7al/mbsvnKizCvaWjEEGEQSDJAwBzFTMmW8HPLPI2PgUsb/uJOkWb+olUOc8M1/ Nnz2HXqNgu/k/W8DqXNQBte3mHmXDEBCEguatc6xeZEkWKjjq2uQcAWsOQuJ79xcIjrD7LtIAuop ErGUDpOEGnIECSJY2ks3S7r2FNiFFGABJpAUACDV2yTgKp+dAEgCmFn5AdD/VW6CerqCZj25tGVP 40wD6f2qhH/wm92wsWpqCkhlz0mZHzVxAGOMBIOJwBAgwcoxIuNjqY9JBoPYNseUYLAghiAXgIQg 9Tlp5jNDEqTrmUgyX3dKLLtkSJBkSIYLAlj4bDcAh0HKIgOCiPUKyMLcBAmSyphAG2KR8vopCQKT BNQuxNWOI4NgMTOx/kbvrPRFEwHiTLLsAIjNQ2ZzXbOWUCL1jP1+vfYg9OfNZzw3RI9XAclmXdV3 k8ECrMet/7tSv5xgUU0jjbc39NRwQZbezhrXlUlZLsW3GGuqTD8Byu80DryefAwmQLu3PhOc4hf0 J6QmUPUkdQmW2W0zC2Gc39THATV5vdNQNM5Juwlm8zCHdPKZgpStIJ79ce/tyhylrtVYfPVXfUSG MCSEurdziBikSIUTbZ/OENC77v7JkmhNABLskhAumCQRkQu2CQ5LkGWzs6xmfiio3WqWdmFeRmN1 GSCJLJ9Fli6EBXgkoOdQSLBgAvRohrf5Uq96A/iMvMdpnOVQHDBJCRJgCRIgj2k5zpuRPmMn5r4i KBXc0oy5dCEsBkgOjU83dR4RbDMzE8X7hmK9I0Q24DJcF4Hm+LGRxIxktgSkpnbc4cR0U3s3CWYw YEESMZQ/JwSklDgpIGGxW1VaWF1aaEGSZFhCMhFQEAw0RMsECwgL0rXBDbUV4cyAFBaAwpxAQ7TC YjBMfOJ4vtfYcR3J8HMvs5YoyYALYauHAAkWIOWEypNOQ73pILz3Tii+yezFhBBSSkEs2YIl4DoA QDYBBBeKapFCCJI8A7Zh8YbFC0AugHX1VWA7FAwsry0D2+vrKhi2XpO1164WWzl77GqHAmfSrU0j DQDGMZ8VO/XYZxX0Mz8YCkIJE8AQQ1NO88E4iYwkO9vaOpnJRrJ/ytnXcQwQkkRnd3+sf5RJQBln IciVbDEpB18ySHvBLEjZMTCBpSAGhASBiFgyE2CMJ0njBYtUQPgN3gQhNX1rbKi2xdr4qHgvgZgg iQGyJEtAkKZ1dZx53dKFBJeZoyV5tSUhlzJI8ob6Sglhg9csqXEEbEgAas1jaJWH3iYxJJkNjfZB XSbLbJvOKOaANnz1pwwpWLJQgXWLpRQCTFJIdiiwP3Z0ODFDcCCZRYBJWmxLOJZ0HWETCORAMhFJ skhKYsFCPTML7DLJ9fWLwO6l9TULS/OjRUXr6quY9JhWOF4bkEYaZwwUp+xCWD4pizI9u2NHE4mp aRF4vuV128XgTHJ3x1FCxkBiuiXWKclWM0tZ2xTd4gK2gHSVmEWyADtCCCbJkgSxhCWYJLmCZ9Y2 1AnpuBYxk8WCMHNpw0Ihp13KEAxBnGQphE2cbKipKsm2CFIKS7pCCDBcIU9OGOzZtnYAyoNWq5eA ZOYtLV0sLJJJCIshBhMTze3HWFiQEOQwgdkikGDJJCXIYsuFK4gkEwQLhmSGsAQ7km0IkHSJeM2S KCy7MNteWlMm2VpQHIqUF5Ar19fXgBw2NL1Hhel/zizmgJhZGWL/dSn5lI93I1/YGrG+oY7eEeXn u2xvOXCIpEVEu+PdicRYEoFtLR1MgmSSRYBcZiISM2CbSYAcyxV1NZWro0WX1kUva6iJFOf7iMMz auVMI41Y71i8b2AkMbEn3idJNMW6xxKTg4mpfbFuZiLhsrSMA+tRB0a8aEgGFfgTRMtqKgqybaJA fjCwrGaexVKSCGfbK2vmJVWYFc6aulplt/RH9W7AVTFD9oW+DIkvtfDGj1Nj5tgQSv5pnvoqo/zx aPF471Csb0RCCMjBiel9sW5mZsHx3rGOvpEAXIfsbc0HJdnE6oNJFgFIhgVytAYQ5AgOSAGQIySY 0FgVKcwRebnB5ZGy3NzgedVFRO7a+oVnmufuxYvfMDySywWRZBEfGO3s6W/vS3T1De6NHemdohf2 tbLIBHMqjEsiUhK6afXiW9YvWxEtVWJcvVE1w53ncjhppHGCaBhrRwwwouYUS2tGkcq0IN8RfD9o yZYD2N7RjDbOhYpGGhqXZgu0GU2xo4MT7taWQyxoW0sXk9zbfmR4QjI7BLAgHbqULhExuYAlZFJS FsFluADW1i+0QPnBwIpoOZhDuTmNkRKLZV5u7opo6cm9b/onACrQepwp13yRuYfqj/63aLra8wJ9 91/rKoxIXt8lJfNPiTXVrVMRVBNGJm8Tr44j5nydJ/ecJZY3P29tjkmwFPR8S9wlMT4xtjvWD1fE BwY6+gfANiRZJFzpwhJAkthiEsRgJCECxA6ztbY+asG9tK42g/mS+ojFYk1DNc0KYutxkrpeRfQY PYgXHgeER7vNurc+Uk4dSo8lX7DlpJAZJ9G4g1PTRbsJALyItnol3ju0p7Nnd0f3trbOzfs7AGHB ZRKSRU1J/qeuv+jWtQ3hnGy9gONM2yil8f8Kk5AyaxT4BoUEkJJ8zA7Um9hjSsY7y3yoNDqWTF6k x8utc0ysSB1T6wLU925qiY1OTDXF+uK9Q7H+0T2dR4bHppT9FmAXQkU6BbF0hWKKYXFhVtayyDzY 0+vPXQJyK0vzF5QUkjuzsqYyNzcTAMEBbH3OUPywJzA5aR6lJ4FngCS7gi1JIGIvPQUOIJQAYq4n qxWcnt2RqXuuhEDqsJ4Qhf3vVIkvDrOlOYDj4qIsHSJb6y8wNx3SH5xInZJUqUxKieSCLE4p+eZe +dYDrzluoKt/rL1/YCzh7In1MMktzXEBF1DRXclKKmoizoJYgkM5ecujJdGSvJqSksZIcTiYs66h 2kRSGCoADSlBxBJkke+2Mbsgy3cnpbehMKopfbbGi4VvtXtDz/0ke+76gmcJV42NxtxFiYHfvdz2 TFvnYztbO/rHiCVLK5yb/aPbr3vnqiVm2Zekx1kaZyVcQBw3ctglWH6B4OytvXK0tSWzzBTSaUEs mZSZYOElZ6s9vLeKMACMTEztjvV29Q509I929I7F+geaY72DiWmCI7VwWBCxCQySIFdKsW5ZtDA7 szFSJgWvq48QY3l1ZUGuTSyZbDNp1fZglt8z24JLMMMQNeq7TtINVU6w8YW9fCLSskjjaAsGQJ7y OXWvfXIdAYbSNkujgzMHhnkakiRBkE6L1QZLgm2dZ0SzpZ/mJDUHrhNrZ+8OMNse+CzkHCjLS74Q qvcR42ib4Ee8f3wisavj2NjE9L5YT9/41N7O3tHEBAGSSRATC0lgdr1EgXBeRmOkakVNSSiYsXbJ gmhJfrS0QN2d1F7H6F/NGafkOD5/Y9aqaU7Nr/j8M3HSjHvKoPuTmOGZdV8SrHk/jEMEyE2tsa8/ 8OLm5kNKLXbrhhU/+sQ1hAADQJJgpWmZsxSpAe5jY81MSBkSP8mi9B76jUaSa3wOBrS74I1RxsjE xO5Yb6xvLN470BTvG52Y3NwSA7skbCk9va9iKVSqi4yWhiPFBcujZeGczKXR0qLs7DX1UfgVvdKs SQRGykPRC4+x5HJ28odHEKnJ7WeWTipSrrRkW4vC2acENBmekvQd9nxt6ZvhrG+gYdKZVSUS8j81 Fi6ZBTrlrZuFzZyIhLQkgywmv93Q3AWxUKlJxnzouwgyKe6eAgdkFDIMsiCZtcoTZs3RHrQECY9f U76/sane6vFcc4dN9nOtr48mnD2xI7H+RLxngCEEMcNsGckRUrhgCKyvW1hblFddmrumPrKgtCxS kqvSg/2BhFmmXEdWpF6BWMmZvNXhLeK5z5mESC3IBG//kUopNpsOj3STDLGtpevTP36yqb1bEH94 /fIfffwdhuRKW/azFH/UaUi9qiBZu0xkLDiYhM/8S0W4D49P7Y/3tfcOd/b374r3jk5Mb27pNGF/ ByyYBDgJtvWotFBTGIqU56+MzM8PZq2vq8rPyVwRLXMV9WKIAgdsK6M0S4Tu+Yhq0jKItBny0U3m bE/kwqd8zJM4BbRoZ1btGLXL0beamZQp9KszfRyKL+rAJoXFt8jqfYnZGrlgW89080aPHNNlFVSw TTvyLjSp67iwlYRfL47Sl500aySk1C6z2Bzv4piJyNvPzeH4UhEUdTqpn/QqC/1dkllIwr5Y98jE 9ObmjvjAWKx3ZFfn4fHRaYYAOSDLo+aZLQHeUF9dXzu/pjC3saZsfV0UEP40Bcxd87xvByRJSjGG fwZOnnFXfsof2T7r5Ve/NeXC+7Zw+j6OTUx/9r4n792yG7C2fOUja+oqT43nksbbBZoimEP3MTNM HS4yrAILInZhkjaGx6f2dh2L9Y7Fegab4n2jkzOb9x8EWYykgCW9UUoucQDksKQVNfMKcjLX1EcE Y01dbTjHXhGp8PbUqbQjPdpn5ZSmnBspNBOggk/qxLwaJynz4nlzMkVbG7PlN1InM/DEkMSJycnP /ei5e7fsKc3LHpicWlJe/IPb37E/3nP3b7b/58eu+u7ju3Kz7B/d8Y4sO3DCI2jr4xFHPjdOz2lg aGrys/c/87Mt+0J5mYnxZLSs4N9vu+qKxmrA1nGOlFWVpHToRGDXJeuLP3nmd01tj3z+Q4tKcl0K KItsMmxNCutcT9GERjyGxzsrzzTNWhWkdppVYDil6DeLqFr7jALf87gNCQGpzocFCCMTM00dh3fH ew73je+K9zbFusbGHMXZQzActR0QTIgW5y+rrVxRVbyhvrqxpjyUk4U5w+fkPe6TVsuFRcoTSVlj T2Hp8xGk3mg6gK0qugEgIzvNDwa+fevVz7XEY/2j9/z++bX17wNLVU4vjbMSQhrL7vPpvJ27JAKT 6OgfifeMxXuH4v2je2NHhhK0pa2NJZkEGYvgSBJEFmOa2JaWWB4pCwUzNtTVhrIzV9SUVpWGa4tD ekefSoKX0ASOq7fKKqdRABAEQTzjUoaACyKp07MFCwidnm0pxoXgMQqKi2AWhNSKpfIkVeRNV2Qk k6nv6cdOCiS5gq0fb2n5wZYdH1i77NqlC9r7Et99/KVfPd+8cVnN2oZoYTBrMDHBdlaGFZgTKpNE Qp+zIGU32QWsFOtidhiS+Gebm3/87O4PrFt2VUNNfGj4nkdf/sVLzVc01gJgEoSUfVeLgdZ9ElmM BfOKL0ksDNo2ELAkWDhEtmWYFX8RMVIUvFpCCamxYXgP71a7gM3sqktQKcMEHQzVGxRTfA0ASZBQ ZXqITbkULx0MIFUqEXqBDwUz1tXXrqur9Va44URyT+zY/lj3rlhPZ//YlpZ2JiZwrG+go3/okR10 50MQjKqScGNNaWNN6cYl0fpoZThok9nBzGa3/hycTLXMn8ScfaV2Y1yWFs1dMxn4+gNbvvbrzStq ynd/869NKD+NsxMnltjuifUMTDgvtR7qm+DmQzEmwSQ0W0tSsASEFBZcKSi5NBIN59lrlkQLgxkr IvNqSoNVpcW+0J/0ZTMSUs5aKuDp0cSzXDl/2SX4tvPG6fPttXXBJb/XCUOsp6IFvsKrs+7BSXTd GSBsuPOn3cOJHf/yl7lZAUBuaenMsANLa0rYBYOu+Np9kfLwN26+PDszUBXO9WZfz8jYzOTU/LKS obGJne3dWQHZGK0qCGaOJ2cGh8eKCsKDYyOvHxttrC7JCNg33vOrWN/Inn/9WF4wkxibWjszLdFQ XTQ0kSwPZe3vHOgZStRVF0ZLC8Ho6B3Kz8nMFIHdnUcq8/PKi0LTrpOfmdneO1gVLhiZmWyO9YRy s1ZE5lsWCHJkIrk31u267tLayuRkwiVrXjh3JDEVsDNysk1KvGHGwFBymuNtJXuR4VQQIsUBqsOw MEId9g0PFTvh1OA4EXwxDMb++NGDfSP7Yv1bWjt2xY6NTiSJpYriCGLJLIirSopW1FSsXVK9qrro kqULLE1w/Zk4bVUYxfG/MpRjozWtrGqZQhC7LkhNG1eQOHkDO425MKOTDddJmjTzea8+nm1ORRTP EnllWtlswsy4lqlkGfONenYQUnIRb/qlTkoCaO8b6+oZ2d15ZHR8elNr1/DE5L5YN4MtabvkpOJR JNTmnFk21pQV5mRdWL+oLEssr6mIloSqS8N04kni0R7CAmDOCV5hRl8xDMWi0KxXzR98ajY9zgV5 79GvmSwhj5lM/Tr7O8j3agonewJUF+ft6Yg/+HLbbWuXMYm19VGS/L1nd/z8hVfvet+6YDA7Jyvz kVfaHt352rdvu3z1giowxiaTH/7/fnvRgqp3rF7yye8/1tY9bINXLSj/wSduGhhLfPx7j5XkB7sH J5qP9n/31o0f2bByfnHuKwePPvjyq3+5oY7JXl9fSSx+vb3tXx/eNi+cf7C3b3g0GcrNuvP96997 ft0XfvZsz8g42NoZ6/qLC5ctjxa9/PqRz1x9wZce2FKQlREfHNkf6yvLC37sylVfuOGirsHx23/4 +I6DXdMOnVdbPj6dXBEp+cq71z6+qz0UtK5YtTicHQDAEFPJmd0Hjw1PT4Wzcs5bUJFh67wZQ3yr UUOpB+Q9Qe+GC3jbJiLf8FD0Pf3pp+MjzAlLo/OWRufduBqESxiis3dob0f3zq7+ra3xfR2HR8cd l5Lx/qHOvtGHX26DxZDJDXV1y6PhdfW1jdGiSEkRAIYrQL4SXuaEvWXJJ7h800rsEhywzT5NKJGS f8Ela1tLB9gN5+ZaKaYyHVM9BfBGJxsOQdUaYUn+goWGHzUhOJ/dh9lTqyRKbbClSG3IdDxdHYrJ JaXAg1Ke6OqsTbG+0fGZzQcOjSSc3bGj8d6RWP+ocFnaBJbkEgSzlCCbhOOSI4guaVhk8/S6JdHc 3NzV1cWVZUW1xXkn3OT5RetnOZR052+vXP3U3oN3/PCxZ/Z13LZu2cZlEQhxZGRy+6GuxFQy05au 655/TuU//PTZp3bHz19QxSQ3tR164cDRKxsW3XHvU6MTM7/41A3dQ4n/8dOnvvHrrR+/csW+eO/E zMxfblj2Vxsbl0VLLYv+duN5T+3u+My9jz67v/229XVXLDsHwPjkxO5YX//Y5D99YH1xTu4Xf/mH f3pgc115cV9icmtb59r6qm9/8OqasoIHX25tinVPTDmtXT3dg+MfWt/46Wsv/NYjL9796NYbzl/8 3ce3P727/QvvumTNkupvPfHKrpZYQU52YsZNTE8JznKmXc7KeO3Y8LNN7a1HunfFetoO92YH7Hdd tPibH7wqLzNAJPyUh78l0WmA5yVUlxRESsPvvADAGgDt/UN74z1NB49tOxDf3Bpj1yZhbWp5bXOr 9Z0ndloSVWWhFZHS9XW1a+qrVlSXQdAshZWS6PuCQ/xm1k9nm5WUQUXIGSA11eW+WM/mti6C9c5V 52hq8mRGlNKYC3/KHIMEiMjilGsDQEhiAnuuTWrny0JojRpBla4iB+yNq1QTGPUQia3NLYeGJ5ym +JGRhLMn1tPVN9jeO2zKT7BirCVIwGULlitcgfVLIwXZOctriqtLw5GS3JXV80O5mVBMqF+pnRoq XrlyFXQ7SXVrzwAwC6KLFlT89u/f95Wfb3ro5baHXmp+1/l13/nLKwuzMsOZGZmW5Uh7KjlzXqT0 8uXRh3Y0f+KqlUX5wR8+t+f82ooZ19ndfuTOm9esWlAx4ziX7qx5Zv+hWzY0ZNjYuHTpv//V9UE7 oNRKFy+sfPTvb/7yb7b8ZnvLQy+3vOfCuu/edlUwmAWW//PGNR+8tJEA2xI3ffMXj+89GLTtiqL8 //7YjefOC0kWv9/9WpadZWVYWXZgY2Pt//7IO/KCFru4494nnj/QuWV/x3svbbjr5rUMzC/Ov7az R0qnqjjvfZcss4iGJqd/u7t1aHymbn7xuoaqgrzMrfs7P/GDJ/7rqaZ3rlx81YqF7GPnYfwSH7F2 iu9/ispjPfNAAGqLwzVFBTetWqzG7b72Y5tau5rivbs7D+/vOCIpEO8divcOPfzKAZBVkJOxPDpv XV1kXV3ZuvqFKmIvdDhTu8P0Zhp3tcXxgtda7SSI8dn7nySW4WDWLRsbtRE5vvZFGm8QZhyziWUR QD7th/KvdSSJmCCItSLB5+wIxW47xLYWGROkrbJkBieSzbHu9p7heN9AvG+0YzCx9+DhoamkYMfT uhBLlyyVKQpJoVB2Y6Sstig/WhqqLi6sLguvqq7IzwnoAlmQYJt80lhDa3hZphKklpNUCoz/YtMg YgaTEBctrHzqKx9+vu3Qfz3T9NBLLTlBa3F5qZVhOywtMLPIzMy85dLlH/uvx3a2d9dVFr1y8NgX b1zXPzoK1/mPx3f8++932IKnHaqvKh6fSgYC2edWhXLsAHS4VUKIC84tf+IL73/5wOH/fGrnL19s CWYE1tRHCnMCdfOKFZtXUx4OZmW0942MTEw3VpZUF+YAILAULsERcIQQyyNluUFidvOyswqysrr6 R5KSV9aUMVsknLrKknBe0HFkhpWBDOyI9x4+0nPhwvmN0XKvDv771y799ebXHn7lVYeGJM8Isg29 jpQHo+/OqX8AKSpPR9RhhieZCCiBGmsrltVWqLDQSGL6ubZDezt6t7V0PfdaO9gZmpCbW9o3tcaI iaSzZlnNurrIusXVl9XXmGIGkvjNo2Vg0ohJq/wFEYjx5Qe3bm2NEwe+/J614SyVEHG8bjWNNwwT jlc924h8Sfw+uZjZ+mnnGKb7CjQhIyEEgCP9I+09w3vjfSOJic2tXZKdra1HAHVkTdYbF54kLCIK Ba3G2qpocW5NaagxWhHOzlhbX+vVrDM8kBYOsl549PemXmXhs+wC7BpaafakTcNA3b0D3YNlecFw TmBN3YK1dQtuFg8/9vJrfCFl2RaRkMKBDFigDUsjlSXZP39hf2koz2a6/vwF//7Y9vyczO/eelVp Xn5SzuQHs3NyAkNDk44zk2GxN0+nHO7qGSzOyw7nBy5eXHnx4kpm+Yf9h0I5Qdu2Z1xXC+0dnpRO FpEdEBAshW1CoBYzuWRLZghBUkCA5UxSzIQyM8E8MjUFAUCMT87MTCWRk9k+NH1o3CnKybpm4ypV /5hITjuT03JwdKp/1O0XmbJl4LfBzq2FWYsXF1+cIQqISdvT0zhQfBXi9POAcm0BsCBBzC6T5aVP ExDKzbxp1ZIbV9epKbq1uXNTW8fuePe2lvjQ+AyEtbU5tm1/510kCVhbF9lQH11TF9lQH30TjXuq 8oypviTv27z/Gw9uBcS6pVWfum61lhulZ+gpgV5cJUgrO0Qq+VAHNnWXTi/rj8DyuZYuYcktzZ0j icndsb6RifG9sT5A9XoRDIcBWDbIVeVqCVxVEq4tDS2NlhfmBNYvqQnlZi2vKlfPP1WQS+Wf+Csw qXMA4NOrgIT3X4ZQYQChtfDsZ5NMVYBUP/c0YO7Ddf/805tWL77nliv1Ajkzkx3Myg5kSAkmBgvX Ei47VYX5N19Sf/ej2zOtwPsvXVIVzquvnjcwtqNvdPLdF9UT5MM7Dx5o679kYaVLsGTAK/DQN5q4 8u5f3LRqwbdvuVJ946QrMzPs4mDGYCLx+O7XNi6rZrIe2fW64/J5i8pf7+mXDoEdQgYYQkVnHAiW 5DKEBAvYYnJCLqjILy/Ifejllr/asDpSkvu9p3fFensLy4rIkpfOD+aKIATA7pQrDwz2j07Hy/KG D3SMtBwcWr0ob2P9gn19D+w68shA4n1rav/KhiBYZAJIUA7vKY/tzT6+dqSEBAS5DCFMB3M94ZQT IwTDVSe6pqF6TUO12mHviXdvbY1vaunc1HpwLAFJ2NzWtbmlEwARv3nG3ZMeaeshm+L9n/nxH4hl KMf+zefeI9hKZY6lt9UnH0LJVlSqAWnFEjEpNTOGE8l9HV3tA6Ox/vHO7v5D/WP7Y8eGEtMQJJyk JFMSi2wwEwvYLFleXh9x2FpfV1WUnbV0wfzaotzqsvBsVkRKHchKEgcEaV9Spbm7gA0pdV8JNvoZ 3eDF5FUSCMQ+7Yr+gZkV75By29PO+1wwAFSW5P2v3700NjlTXZLfFOt5aPuBf3zP2nB2Rt/oxMy0 O510sqYdl6UNXNNYf88jL85Mzrz/kmW2sN59wcIHX1h0x72PvXLoaHbA/v5zO288b8n6c6omJqZG klNSuWMkwsHsRUWhf3t0x2hipqasYF+s99Ht+++8+cpzKgttO+P/PLujeyQRtO0fv7j3XavPvWbF ud99dFcwJ0CSGBLECccZSTqSncSMnHaTalsvHXdscoos8Z1br3znPb++9hv3LaoqPNgzI+3sPIja giyVEsZMk9MTR6dGJ51kRXb1/OCqpzv39Y4f/Mqai5aXrw7nVPxm/53j1s7E9K2hzOBx2aynnP49 Pt6vtPMWK9GWBHhO7UzJQhAEWzB1dbQ3TCsQAJ8AABaNSURBVFgRLV8RLf/0tasBsSfWvbW5c0tb x+bW+ND4NN5Ezl3RsqQ7lLtNsb7L77x/ZHy6MCf7D1+7JZybaS5Qks56SONkwm9vm+JHhsbc59te dzjjhZZY/9RMc0dckgVYQoJJMoFcguWCCVKAAuFce1m0oqa0MFKcEy0trinOXR4tz88JeqLDlEoS qcoTgPClswVApnIJ6YXe0oqcOeIoQVonbpTLiluHkm+aBDfvyGmD/sfBJMH0i0++5+5Htj3e1O7u 5ayg9aV3r/n8dZfsOHT0E1etWlRa8J4L6gMB2xIZgNNYW/SN921MTM+ct2A+gFAweN8d1/7Hk2VP 7H4tYInPv3PtZ64/f3LK+fi1qy9fXGOZ5IDczMAP77j+2w+/+OS+2DPN8fxM+6vv3/iZa1Y/vPNA KJDxN9ec39bVszN++G8vW/WFd19anJN9w0UL87OyAjaIBcO9oqG2tjA0v7jww2vrLz6nUj3OhRVl n7zmgnmhwtL8jP/+22t3Hux2kfmp62vv+MGjlqM8FGLmpJygAObbRQtCWUTyaN/Y9/6wo25x4boV 5wwMT/YPZOYVTPb1Z3fTcF51ruJHDL93OgbOCdRcZDKkJEMIXfoBKWmjLrhAAKTWafJsvSYEgOXK 0F9/PiCb4n2bmztORxITQ0oItfs29X6kBAtpuQIW0NR+7LK7fjIyNi1td9M/fnBNwyKL9ez11zh+ a0J7C+S5mFp2YihgL3VCpj6j6+R5PRnYb8u8Vc2TmnAqCJ4qGA3f27xPSj3GoSoQeWwGA2CK9w/H eobj/WOH+vr3xfqGEzP74seGJqZAQkiHmYyuUVU6tJhAMllfO78kmNUYLQllZ6+rrxVw1tXVOgR7 VrHcNN4e8Bb1pCPHJqdc1w3Ydn5OtiBIKaWUlmVJKZnZsiw1qh3HISLLSjHFzDySmBICOVnZltAf JEsIEhLSMqn8jktDiWnJToZlhYKZJPC9p3d9+v6nn/nyLSsXVkxPOblZGQFbSLBMEizXVr1gIR2X JEkb5EqAZEDYIClBSZfGp6Yu/uKPFpTn/fMHry4KZt63ae+//Gbzt2+94uNXr3bAltqMwlIEi2Tc +eutdz20+dM3X31pden4+Gg88cC86mdf2nH1yzvnNy4u+sINFzdESo+vF3Zm4NR77uyl6gqo3QfA JAQcCFiQuzt6Nt51/9D4NCz60d/ctKZhkeVP7fM226f8RP+fwV4rB1PBWG0ffY27LChfCZiV0SDA rNY1qDi5hCtg+ART7IIhiQRrL1VoXlwzzg7rmrEeHw2QQ7CJMZxI7OvsH0pM7op1j0+4eztig5Ny b+wIS0tnJ2lOWoLZYpZkSbbCuZlLoxXhnMCyaGVtcU5NSShSGo6UhHXlFpPMKVmA1ATmt+BDSeNP w3tkAVsU5AYVI6fj0UIoOsuyLH8BV8/Kpw5CFMrNZt8HhdAehpVyU4QluCQvy+tPzQzbyswR2ZJk UFjBXMEAJAtBwoYqxU4AE2xBgMXkWIIFAhJMEALItGRmTsbdH1j7+ftfuO6uX+dlBgZHE5+7dv1H Np4PkA2lONHcB7P79IHBbzzw7M2Xn3fH+mUlQTk2kXw8trsgUP+N997+w+wDX3n4D7G+4W1fv80r 8HaG0b+n3nP30rWN3scFLFNivynee9nXfz6amJAO3/vJGz6yrhGQ0G0KhCkJirdsBpO/2j5DMlhR Y8pnn1UYzZdONqvZGBvn2njBbPaJnMri1BnSnCIw1CF5S1tcQmxr7XBhbW2NMdwtzZ2w1LlYBJcJ qlSTCtcwiHhmZU1lXjC4sqY0PxhcWz+fYV9WN8+BbZvvVdfm78nA0BKE45rpvEUfTRonhOm3B3/9 vjeSJHiCnkEq4dkfnGSo4jxd/WOx7sSF5xYF7ExT1B6qKqQktrycOP1XpAg6tRcm6UIIxujEVHNH x9DUZLS8tKFyHqTQ4gApIOAAFtA/lrjh27/t7T322D/+9eJ5IXbx/NGvNB3becOSv6/O3fBa19AV 3/xJ79jk5E8+728PcCbhNHHuqi4eTOjAFWQB+zr61t/1k7HxGYbzg0+++7b1S73cKjYVPI3w8y24 oqbKg6rfTacDZR+NACXlV3vqIICENMnvqn2XFoGkMvtTOcRSgICtLe0S9tbWDhf8YmvMYWtLW4eJ LgqAiKXlMls2CMIVTJIpWV1SHC3Pqy0siJQWRYoLakpzGqJlRTnZzILIAWzTq8EFLBvwEpQkUs9L JRno3jlMqRJ6Ki/h9N70NN4oUi2qfdHmN6A2Pt6yjyaOHezbXT9//Wiih+xAcV7FkaG2Y0Pt4ezS mnkXhvOo9egfEhNDleElZaUNx/rbinLm9461F4dqRsZ6wnmlednlPcPtbV3PZmcWrai5OiOQNZ4Y er1nu032vJL6wmDlwMShDGSfW02upLKCyonpwbYjz2fbwXPmrbdtwexaZHESn/rvR7fvb//VZ95/ 7rwQgP1DP9ke33bxwr+ozt0AkgeO9A2Nja9bXA1V3vGPVfV5O+PUG3dS/jo7YNvUOLU4OZRwLrvr Z2NjCVDgvttvunXtUmbWPDu0nIKha4rKNzL6TiEkEVxm4UuZ8baq0Alj8IIoKlRiYn5mSVBbU1gq tLi1OeaSvbXtEFhsao0JWJtb4mCHCYItSWpDwEIlE7ElwAw3lJ3ZWFMVyslaGSkvCAYbIwX5uaGV kdI590z3QdQ6JZvBQtH9uhmFKe/DQhffMykGLmARTGFrteym+l6m8XaCridhgtAA3gDpebzbLom7 hg48/OJd3XWvZohgWX6kKK9q16HH27t3rohcGalYASDW29TR3VJxfr1gHDz28oFk4rXu7XVVlw8m Dl+z/LPDE92bmr9fmDN/aGzfyMThKxpvPzL66ra27+UGiuePnndV48cPHH7x1a6txfnnLI+sBWNf /OlN+753zXmf1xtPIgb+9dGtv9z56lffedl7Lq1l4ODIk0+/ev/SeRdeUPJREMYm+D+f2zk2437u +kskVHsMmFSMP/vOvuVwutQyij3WUmYeSeDyr/94cGwcwvrRx6+7Zd1yHQCBq2mNWUo4vCVNiCZY hCHcNf0OCYIu4gohIFnXsjBFTYGRxHRLe1fvNPa1H3YJL7TFHcbWlk4il5lAFqQLQDVyJBBbFkmp ArBrl0QIzoaGRczuhvrqvJz85dWFpJuJwdvDsiF0yLSJUGFWgmW2DKk0ObVVZ23aiUwrHEGsynxZ IBU50IVlTCXstNDwbYe57PlJPRpUuoqUkdL6/uFDA4nempWfU/WJinPnlxcvFZKCmXmLKi61YEVL G4msisLFT+76VnXpqo7epsLckrzsovbuV8ZnBv/i4q909e55qum/NzSSZVkTMwFXTl9cdK6K9A4N vxTOra4sX+0C55ZfMD453NW/75yy5dnZJWBx7wv7v/yrbbdvuPgfPngxyOocevr3B/6jpnjhuqrP Wlb2TJLv/M2zf9j76j/csGbj0hphWrsAzGdWmYrTEVBVfQotLXxjsPi7Hz/SFOsjons/ceOt6xoo Vb0ktWdM4S0pyjAuD2kS09taqOrPBEC0xroHE1N7OruHEtOHe0fbewfbB0YP9w1KVSScWcWipJsk YQudjwOGk5+bu6KmFMDauhpmvqIuIsHr6qMeca9rqsBHf/v6zRkxrc4CV+epGRXd9CAlDGDorbpp 8mX0NUReHUSkRKupHjqUrgnxtsTc4tsnmYhg4bJTlrMoWrH61y9/yZEugQK23Z84fKD7+Xnhmrzs Mtd1JeA4TiBARXkVwazwBee8+6VXf1aWvxCEkvDikuzIr7Z8KekkVix4p02wXc4v2GDJmUk5QMQB 5qrqfxieth/a8eR7zrs24Uz2jsQmJzqm3A8HIR4/OPi5B168tqH27o9uCNr268MvPP7av80Pz78s 8tUsu8R1+ZsPb/2332+/8fylX7zxUtWsQzs5bJ1hO9HTE1A1+3sGSG5p6dxw508Z7q3rG+/7+I2z uot5VerhE/Ydn7P7loAD2C7Q1n6sbzIZ6xvq7BsemZza097tCntbcyuxzZQh4EomQEJ1dVHBSsFg JkZ+bt6KSElBbubSSGk4mLUyWhrKzVseKfEq62oXGZg1A30tjlP3NnVWIlUuTotpJEj4mjEfV7pa PSXzRSreq4O3BgwwXE9kNkulk8bbCccVYT4RThAm/f8HhpyYGpp0JwuyintG4uHs8mB2aHi8q3/s sBXIqSxYaNvByenhRHKsJKccZDmOMzLZV5BdMj7ZF8gKBQNBhpiaGj7Y+3JeVqiq5HyLqW9qmjCR LawJt68guHB0fMShbEEz01Pt84qWTE0Nd/btKgrVleRXP9Mx+sGfv7h4qv/Bv7uxsCB375Htz8T+ pb68eE3FP+Vll88k5dcefPaeR7Zf2bjo+5+4dn4o38jS9KmfIMXo7YxTbtwlGJBa9scAcOO3Hnh0 x6vVJflN3/zrUF4WFAcjXFLaPj2qVPD7eKpdN1YxnbSkJN3ldlbWjEmmIEClRBKI4KRq55vQpXFT xexWDElQQHf/IknAc62HbXB7z3C8d2R4cmpvvFuCt7TEBFvSkkKqrMsM4ikALCxIIUipBllIZ2lN VXGQliyMhrOsmpJQbUnY1BlPI400tGGdleFhXklMu1m2JXlSCNsie3zaCWYELFKtMlwiYghiySQe ax+87YHXF7vHHrz98lBO4OHXt+7ruvfauqLzy7+WZZcc7kv8z1889YsX99+6ftU9N28oKsh58672 NOGU0zKCiUlJH1UNSLmlpZ3ZvWX98oK8DCUEBBHpMxF+d8GTfgMAJCQxkVENSiW10i0WjCRRJ/jo IrRqJTASXNgmmqioCU90JQhyb6xnYCI5khjfE+sPQOw5dHR0aqo/4eyPH5YqDupI3TCShIqCgiyG FBKSbGIZLc2NllSEcvIbqwvDwazlNeUSYkN9ZWrlMNflK7F7RnkKaaTxZ2KWdFJ4auDBCXea3Ql3 UvJMwMoYmUA4m12CUH2oyVIhLZB46LXxT/2ufVUo8ctbrnE5+Z3tTwyMPfSu+vMuqLjDtrJ+v/vw l375u47u4X/54NWfu26lJU7UG/aMw+lQy8AXdQRzbXHRnomjj7/y+kfXLY2U5hFsUxMkCQS8MJ0W QaaMvc5TBxOxq4J8iuAgsJLrecWRDQMhVBNbCWqOHxscTbLl7usYGEokiOj5tlhSWp39Qx29YwIz ki1BrhQgKQAL7OhAgAwQuWALtmTmxkhVQV5GOCtjWe18ieTGxQtBzvJIVSjXUg3Wvb4Q7DX8ZDZZ FewVPHlLEk1ppPHmwGNiYfS3YDHmuK+OTlblTvUlpsnNGpoJLCwU4SxrFtMoCIx7W/r/x1OHrq6g +9+//tWhgX/d/kQ5PfeRlR9qKLt6ZkZ+8eHmux98LFoc/OVn333NigWzcsXPaJyWHqqmMIhiWb7z ++2fu/8pMADrhvMXra+Prqwsr64oiBTnz0nExyzuz88VOswWgfbEj40mppksKZ2ugZFY7xg4KYW1 pSWmXPx98WND49MkbMlsEbtSkrKtEGCXBZFLbAOuuhk2IZmfm7U8UkZEjdGKgqxApDQcLc0DsL4u qj0LdnXjb0VbS8ECYJd0N3BpElclJHlVDqUWvf/5bGYaaZx5mDUdPOPOLhHtaB/KCyXDWT2d3bmj ydyGSLgs2/a4VgAMOeXSPa/0fWtb50cWB752Vf2T8dd/su+Ri8J971r2+fqS8mc7E1/5/Y4XX9n3 0dVVf3/junMqComkK4V1dkgBTrlxZ0ACBC/bHgx8/YFt33385eHEBCkxuJCqMRO5tKqmJCcnRwjh yqRFAoKkVFkGkiVtaz1kFgpBqhMxuYAQlpRSAjZBgB1Asgho8kQTKRLMLCwA6+qjxAgHA8siFVJQ bVFBTWkOoLv9mhujev6pc1YVZb1spVmVKPyFstR7IaQDYeu2yy7rLeTcXA8gTcqkkUYKmlNlJnBs cLK9+2h03vjgEA8N519wbnV+TgbDAWxTIRzto1Off7bz6eZjX11fevWSsvtbNh3s3f4X56y6Zsm7 Rqbon18ceXDProqpgX+6ftV1y88JZLisW6daZ8m++fR47oCnvZMM4QL28MTEfZv2Pbzz1f3x3sHx CbBFwgELpSfxSnKnjkFJizNcSBBDkiCW0oFlE2s7C8hIaWGktICky8LeUDdPlTFcHiktygkyu42R ilButgm6Suhi454o0GTes47SqDMnSsVdfdFaaCsupRBKeeJIWCpHy8RvdfTX2Hw2+nLAWPU0557G WY9U7W8zyyBZPNccz8vrZHc61l2xsbGmODeYqoxB0pH85Gt9X3jsNWd6/BvX1lqZI0/FnlgQomsX fTg3OO/+/RM/fOV1a3LgloaKv7nknPJwDpuca5MCclbMu9NUFdILgoOFq+uIGd0L3NGEszt+zGJs autSghnMzo9gZoIEBZjdcDDYWFvBSFogR2JBaWGkNORpB/3RGK8cPDwKBZj1d10aPBXt9LdlSeXb 67NIiWrg5dCqxcBrKsKpM/ancJ55mc1ppHGSIE1RPFNkiSneN/7C63sLizqaWsreu+b82tICknCF tFgwoWd47J9/t+enzx+87Bzr5g0lI9Q0nuyqKVhXmnfxM532vTu73dH+DzSEP3ZRXW1RjnbcWKuD jYd1VnTuPB20DBm3VdX7VRJDVQbIKLIlSVOa5Y8bQZUiTDr3XUJVXfFMs9d51rPXunoX5mp7vSs2 AhtNkfu/16tnazq66UQh8wevwQX73HAwg9hX28t4JTjOV2d/QlAaaZy98Bx2z3l6vqXr+WMPDPXz yopr37duiVf3O+k6T++J3fmLF9uOtH/oyuAVF40kRevAeCRkX7vnaNn3XxkKYvz6RYWf3bBkSUWI WIAcpBQ4DrGtdHSm8PgZjlOullFaQ/WPKXErTHqM1+ZYQPje/KcP5f2g32gkhqnOs94v3hNMlZrD rJ/g/8jsv5rDprI99QfJywydvb9TXz/7r3Nq6s95d7pPUBpnO0xnO1WKTrXlkbvaj8bGd+1/veJD F4QBMCEx7ex4LfbzZ9t//tKecxcd/ruPHq6pmNrRETjYvmRkfEnL0d6CnKHbz4vcfGH90vklpHPu mHz2jWCDoAuPv1lXe3pxWjj3NNJII40TQ5qGNMLbl3/p55uebP1NdnCmoei6D1yyvP1o36OvdG5/ PV5cduiSVZ21lYmjfTkvNFUeai2fXzK/vrr46gurL19SW1marxqBacb1rPec0sY9jTTSeDPhyxLX 5Orjuw59+H89zJnDo+NZITvHyh5YUD68oHYwVDDV3R88GqvMEosbovMvPLd85cKK6qK8nIwMfxUO XQFPqxjOEjf9BEgb9zTSSOPNg7LqXksfAiAdRz7d3PVM0+t2Zm9J4eDENCanM2zk5QZKqosqFpeX zy/KLAjlZqrq17rTkwSrenpC050SoLkc7FmFtHFPI4003jQwu4BFs3tlmBq88JeV9kkzvDzB1Avs q7E36zin/5LeMjjz9UBppJHGWxZElpKfk64aIgG4AJMEOcYFd8HK3AtWvQl0/XV1CAlIXz1Haf53 tiPtuaeRRhpvAUjolgHsApam4SF1U3jTTgDsgiiVHKgLCJoKg8qYKZLnbHbaAaSNexpppPEmwhTW hmkITJpUMRFWnpNpODvFVBcs8GUQzsonObt5mbRxTyONNNI4A5Hm3NNII400zkD8XxCXrM/6ZP69 AAAAAElFTkSuQmCC --_004_CFA3814E10E2Adgellertsilverspringnetcom_-- From nobody Fri May 23 02:23:36 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C78571A0149 for ; Fri, 23 May 2014 02:23:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.199 X-Spam-Level: X-Spam-Status: No, score=-4.199 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V_8QcOXxapVa for ; Fri, 23 May 2014 02:23:29 -0700 (PDT) Received: from va3outboundpool.messaging.microsoft.com (va3ehsobe006.messaging.microsoft.com [216.32.180.16]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AFE8D1A0126 for ; Fri, 23 May 2014 02:23:28 -0700 (PDT) Received: from mail3-va3-R.bigfish.com (10.7.14.249) by VA3EHSOBE008.bigfish.com (10.7.40.28) with Microsoft SMTP Server id 14.1.225.22; Fri, 23 May 2014 09:23:26 +0000 Received: from mail3-va3 (localhost [127.0.0.1]) by mail3-va3-R.bigfish.com (Postfix) with ESMTP id B4C013A039E; Fri, 23 May 2014 09:23:25 +0000 (UTC) X-Forefront-Antispam-Report: CIP:206.191.242.68; KIP:(null); UIP:(null); IPV:NLI; H:mail.philips.com; RD:error; EFVD:FOP X-SpamScore: -25 X-BigFish: VPS-25(z579ehz98dI15d6I9371Ic89bh148cIe0eah1432Ic857h9251I1447I217bIdd85kzz1f42h208ch1ee6h1de0h1fdah2073h2146h1202h1e76h2189h1d1ah1d2ah21bch1fc6hzz1d7338h1de098h1033IL1df219h17326ah18de19h8275bh8275dh18c673h1de097h186068hz2dh109h2a8h839hd25hf0ah1288h12a5h12bdh137ah1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h19b5h19ceh1ad9h1b0ah1b2fh1bceh2222h224fh1fb3h1d0ch1d2eh1d3fh1dfeh1dffh1e1dh1fe8h1ff5h20f0h2216h22d0h2336h2438h2461h2487h24ach24d7h2516h2545h255eh25f6h2605h268bh26d3h27e2h) Received: from mail3-va3 (localhost.localdomain [127.0.0.1]) by mail3-va3 (MessageSwitch) id 1400837002310127_3103; Fri, 23 May 2014 09:23:22 +0000 (UTC) Received: from VA3EHSMHS013.bigfish.com (unknown [10.7.14.241]) by mail3-va3.bigfish.com (Postfix) with ESMTP id 475B9260054; Fri, 23 May 2014 09:23:22 +0000 (UTC) Received: from mail.philips.com (206.191.242.68) by VA3EHSMHS013.bigfish.com (10.7.99.23) with Microsoft SMTP Server (TLS) id 14.16.227.3; Fri, 23 May 2014 09:23:20 +0000 Received: from AMSPRD9003MB066.MGDPHG.emi.philips.com ([169.254.5.106]) by AMSPRD9003HT003.MGDPHG.emi.philips.com ([141.251.33.80]) with mapi id 14.16.0453.000; Fri, 23 May 2014 09:23:08 +0000 From: "Dijk, Esko" To: "Rahman, Akbar" Thread-Topic: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 Thread-Index: AQHPTke1MAdfpqid3kOruFyexTfVEJsyuiUAgAE6ooCAAEaMgIAEpRcAgA93i1CAAEkTgIABCnEggAG2R3CAAtJ6YA== Date: Fri, 23 May 2014 09:23:08 +0000 Message-ID: <031DD135F9160444ABBE3B0C36CED61836DA119D@AMSPRD9003MB066.MGDPHG.emi.philips.com> References: <031DD135F9160444ABBE3B0C36CED61836D7A1E1@AMSPRD9003MB066.MGDPHG.emi.philips.com> <031DD135F9160444ABBE3B0C36CED61836D7B49E@AMSPRD9003MB066.MGDPHG.emi.philips.com> In-Reply-To: Accept-Language: en-GB, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [83.85.142.242] Content-Type: multipart/alternative; boundary="_000_031DD135F9160444ABBE3B0C36CED61836DA119DAMSPRD9003MB066_" MIME-Version: 1.0 X-OriginatorOrg: philips.com X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn% Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/HrJ5N0TMRuDmZ1BurnLQZjhK5iI Cc: Marco Tiloca , "Kumar, Sandeep" , "dtls-iot@ietf.org" Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 May 2014 09:23:34 -0000 --_000_031DD135F9160444ABBE3B0C36CED61836DA119DAMSPRD9003MB066_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 PiBBcmUgIHlvdSBwcm9wb3NpbmcgY2hhbmdpbmcgdGhlIGN1cnJlbnQgR3JvdXBjb21tIEktRCBt b2RlbCBvZiBzdHJpY3RseSB1bmljYXN0IHJlc3BvbnNlcyB0byBhIG11bHRpY2FzdCBDb0FQIHJl cXVlc3Q/ICBZb3VyIHN1Z2dlc3Rpb24gYWJvdmUgc2VlbXMgdG8gaW1wbHkgY2hhbmdpbmcgdGhl IG1vZGVsIHRvIG11bHRpY2FzdCByZXNwb25zZXM/DQpObywgdGhhdCB3YXMgbm90IGludGVuZGVk IOKAkyBJ4oCZbSBub3QgZXZlbiBzdXJlIGlmIHRoaXMgb3B0aW9uIGlzIHJlYWxpc3RpYy4gTGV0 4oCZcyBzdGljayBmb3Igbm93IHdpdGggdW5pY2FzdCByZXNwb25zZSBvciBuby1yZXNwb25zZS4N Cg0KRXNrbw0KDQpGcm9tOiBkdGxzLWlvdCBbbWFpbHRvOmR0bHMtaW90LWJvdW5jZXNAaWV0Zi5v cmddIE9uIEJlaGFsZiBPZiBSYWhtYW4sIEFrYmFyDQpTZW50OiBXZWRuZXNkYXksIE1heSAyMSwg MjAxNCAxNjoyMA0KVG86IERpamssIEVza28NCkNjOiBNYXJjbyBUaWxvY2E7IEt1bWFyLCBTYW5k ZWVwOyBkdGxzLWlvdEBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtEdGxzLWlvdF0gVW5pY2FzdCBy ZXNwb25zZXMgaW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNQ0KDQpIaSBF c2tvLA0KDQoNCkkgYWdyZWUgb24geW91ciBwb2ludHMgMUEgYW5kIDFCIGFuZCB3aWxsIHdvcmsg d2l0aCB5b3Ugb2ZmIGxpbmUgdG8gdXBkYXRlIHRoZSBkcmFmdCB0byBjYXB0dXJlIHRoZXNlIHBv aW50cy4NCg0KSSBkaWQgaGF2ZSBvbmUgaW1wb3J0YW50IHF1ZXN0aW9uIHRob3VnaCBvbiB5b3Vy IGxhc3QgcG9pbnQ6DQoNCj5UaGUgYWJvdmUgaXNzdWVzIHRvZ2V0aGVyIHNlZW0gcXVpdGUgc2Vy aW91cy4gIFBlcmhhcHMgYW4gYWx0ZXJuYXRpdmUgc29sdXRpb24gaXMgYmV0dGVyIGluIHdoaWNo IHRoZSBncm91cCBrZXkNCj4gaXMgdXNlZCB0byBEVExTLXByb3RlY3QgdGhlIHJlc3BvbnNlLiBP ciBhbHRlcm5hdGl2ZWx5LCBhIHNlcGFyYXRlIOKAnHJlY2VpdmVyc+KAnSBzZWN1cml0eSBncm91 cCBjb3VsZCBiZSBjcmVhdGVkDQo+dGhhdCBhbGxvd3MgZWFjaCByZWNlaXZlciB0byByZXNwb25k IGFuZCB0aGUgc2VuZGVyIHRvIHJlYWQgdGhlIHJlc3BvbnNlLCBidXQgbm9kZXMgb3V0c2lkZSB0 aGUNCj5zZW5kZXIvcmVjZWl2ZXIgZ3JvdXBzIGNhbm5vdCBhY2Nlc3MgdGhlIG1lc3NhZ2VzIHRo dXMgZXhjaGFuZ2VkLg0KDQpBcmUgIHlvdSBwcm9wb3NpbmcgY2hhbmdpbmcgdGhlIGN1cnJlbnQg R3JvdXBjb21tIEktRCBtb2RlbCBvZiBzdHJpY3RseSB1bmljYXN0IHJlc3BvbnNlcyB0byBhIG11 bHRpY2FzdCBDb0FQIHJlcXVlc3Q/ICBZb3VyIHN1Z2dlc3Rpb24gYWJvdmUgc2VlbXMgdG8gaW1w bHkgY2hhbmdpbmcgdGhlIG1vZGVsIHRvIG11bHRpY2FzdCByZXNwb25zZXM/DQoNCg0KDQpCZXN0 IFJlZ2FyZHMsDQoNCg0KQWtiYXINCg0KRnJvbTogRGlqaywgRXNrbyBbbWFpbHRvOmVza28uZGlq a0BwaGlsaXBzLmNvbV0NClNlbnQ6IFR1ZXNkYXksIE1heSAyMCwgMjAxNCA4OjI5IEFNDQpUbzog UmFobWFuLCBBa2Jhcg0KQ2M6IEt1bWFyLCBTYW5kZWVwOyBkdGxzLWlvdEBpZXRmLm9yZzxtYWls dG86ZHRscy1pb3RAaWV0Zi5vcmc+OyBNYXJjbyBUaWxvY2ENClN1YmplY3Q6IFJFOiBbRHRscy1p b3RdIFVuaWNhc3QgcmVzcG9uc2VzIGluIGRyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJp dHktMDUNCg0KSGkgQWtiYXIsDQoNCm9uIHBvaW50IDEuIHRoZXJlIGFyZSB0d28gY29uY2VybnMg dGhhdCBuZWVkIHRvIGJlIGFkZHJlc3NlZDoNCg0KMUEuIHJlc3BvbmRpbmcgdW5zZWN1cmVkIGFm dGVyIGEgc2VjdXJlZCByZXF1ZXN0IHNlZW1zIGEgdmlvbGF0aW9uIG9mIHNlY3VyaXR5IHByaW5j aXBsZXMgYW5kIHRoZSDigJhzcGlyaXTigJkgb2YgQ29BUC0xOC4gRS5nLiB0aGUgcmVzcG9uc2Ug Y291bGQgYmUgdGFtcGVyZWQgd2l0aC4gV2hhdCB3ZSBjb3VsZCBkbyBpcyB0byBlLmcuIGhhdmUg YSBTSE9VTEQgcmVxdWlyZW1lbnQgZm9yIHNlY3VyZWQgcmVzcG9uc2U7IHdoaWNoIHRoZSBleGNl cHRpb24gY2FzZSBiZWluZyBhIHJlc3BvbnNlIHRoYXQgZG9lcyBub3QgY29udGFpbiBhbnkgY3Jp dGljYWwvY29uZmlkZW50aWFsIGluZm9ybWF0aW9uLiBTdWNoIGFzIGEg4oCcMi4wNCBDaGFuZ2Vk 4oCdIG9yIOKAnDIuMDIgRGVsZXRlZOKAnSByZXNwb25zZSB3aGljaCBkb2VzIG5vdCBjb250YWlu IGFueSBmdXJ0aGVyIHBheWxvYWQuIEJ1dCBldmVuIGRvaW5nIHRoYXQgdGhlcmUgbWF5IGJlIHVu aW50ZW5kZWQgc2VjdXJpdHkgY29uc2VxdWVuY2VzLCBlLmcuIHJlc3BvbnNlIHNwb29maW5nIG9y IHRhbXBlcmluZy4NCg0KMUIuIGlmIHN0YW5kYXJkIENvQVAgbWF0Y2hpbmcgcnVsZXMgYXJlIG5v dCBmb2xsb3dlZCwgdGhlIG5ldyBtYXRjaGluZyBydWxlcyBuZWVkIHRvIGJlIGRlZmluZWQuIFdo YXQgY29tcGxpY2F0ZXMgdGhpcyBpcyB0aGF0IGEgY2xpZW50IGRvZXNu4oCZdCBrbm93IGEgcHJp b3JpIGlmIHRoZSBzZXJ2ZXIgd291bGQgcmVzcG9uZCBEVExTLXNlY3VyZWQgb3Igbm90LiBTbyBp dCBuZWVkcyB0d28gbWV0aG9kcyBvZiBtYXRjaGluZywgb25lIGZvciBzZWN1cmVkIHJlc3BvbnNl cyBhbmQgYW5vdGhlciBmb3IgdW5zZWN1cmVkIG9uZXMuDQoNClRoZSBhYm92ZSBpc3N1ZXMgdG9n ZXRoZXIgc2VlbSBxdWl0ZSBzZXJpb3VzLiAgUGVyaGFwcyBhbiBhbHRlcm5hdGl2ZSBzb2x1dGlv biBpcyBiZXR0ZXIgaW4gd2hpY2ggdGhlIGdyb3VwIGtleSBpcyB1c2VkIHRvIERUTFMtcHJvdGVj dCB0aGUgcmVzcG9uc2UuIE9yIGFsdGVybmF0aXZlbHksIGEgc2VwYXJhdGUg4oCccmVjZWl2ZXJz 4oCdIHNlY3VyaXR5IGdyb3VwIGNvdWxkIGJlIGNyZWF0ZWQgdGhhdCBhbGxvd3MgZWFjaCByZWNl aXZlciB0byByZXNwb25kIGFuZCB0aGUgc2VuZGVyIHRvIHJlYWQgdGhlIHJlc3BvbnNlLCBidXQg bm9kZXMgb3V0c2lkZSB0aGUgc2VuZGVyL3JlY2VpdmVyIGdyb3VwcyBjYW5ub3QgYWNjZXNzIHRo ZSBtZXNzYWdlcyB0aHVzIGV4Y2hhbmdlZC4NCg0KT24gcG9pbnQgMi4gSSBhZ3JlZS4NCg0KRXNr bw0KDQpGcm9tOiBSYWhtYW4sIEFrYmFyIFttYWlsdG86QWtiYXIuUmFobWFuQEludGVyRGlnaXRh bC5jb21dDQpTZW50OiBNb25kYXksIE1heSAxOSwgMjAxNCAyMjozNA0KVG86IERpamssIEVza28N CkNjOiBLdW1hciwgU2FuZGVlcDsgZHRscy1pb3RAaWV0Zi5vcmc8bWFpbHRvOmR0bHMtaW90QGll dGYub3JnPjsgTWFyY28gVGlsb2NhDQpTdWJqZWN0OiBSRTogW0R0bHMtaW90XSBVbmljYXN0IHJl c3BvbnNlcyBpbiBkcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA1DQoNCkhpIEVz a28sDQoNCg0KVGhhbmtzIGZvciB0aGUgZmVlZGJhY2suDQoNCg0KPiBJdCBzZWVtcyB1bnNlY3Vy ZWQgcmVzcG9uc2VzIGFyZSBub3QgcG9zc2libGUgd2l0aG91dCBhbHRlcmluZyB0aGUgQ29BUCBy ZXF1ZXN0L3Jlc3BvbnNlIG1hdGNoaW5nIHJ1bGVzLg0KDQpZZXMsIGJ1dCBhcyB5b3Uga25vdyB0 aGUgY3VycmVudCBjb3JlLWNvYXAtMTggdGV4dCBpcyBvYnZpb3VzbHkgd3JpdHRlbiBmb3IgdW5p Y2FzdCBEVExTIHJlcXVlc3QgYW5kIHJlc3BvbnNlLiAgV2UgYXJlIG5vIGxvbmdlciBkZWFsaW5n IHdpdGggdGhhdCBhcyB3ZSBoYXZlIG11bHRpY2FzdCBEVExTIHJlcXVlc3QsIGFuZCBwb3RlbnRp YWxseSB1bmljYXN0IERUTFMgcmVzcG9uc2UuICAoVGhhdCB3YXMgdGhlIG9yaWdpbmFsIHZhbHVl IGluIHRoZSBxdWVzdGlvbiBhc2tlZCBieSBNYXJjbykuICBCdXQgSSBkbyBhZ3JlZSB3aXRoIHlv dXIgcG9pbnQgdGhhdCB0aGUgYmFzZSBjb3JlLWNvYXAtMTggb3BlcmF0aW9uIHdvdWxkIGJlIGFm ZmVjdGVkLCBhbmQgdGhhICB0aGlzIGNoYW5nZSBtdXN0IGJlIGNsZWFybHkgY2FwdHVyZWQuICAg QW5kIEkgZ3Vlc3MgaHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQta2VvaC1kaWNlLW11 bHRpY2FzdC1zZWN1cml0eS0wNyNzZWN0aW9uLTQuNSB3b3VsZCBiZSB0aGUgbm9ybWF0aXZlIHVw ZGF0ZS4gIFNvIHdlIGhhdmUgdG8gbWFrZSB0aGUgdGV4dCBjbGVhci4gIERvIHlvdSB0aGluayB3 ZSBuZWVkIHRvIGV4cGxhaW4gaXQgYmV0dGVyPw0KDQoNCi0+IENvbXBhcmUgdG8gc2VjdGlvbiA5 LjEuMSBvZiBjb3JlLWNvYXA6IOKAnFRoZSBlbmRwb2ludCBhY3RpbmcgYXMgdGhlIENvQVAgY2xp ZW50IHNob3VsZCBhbHNvIGFjdCBhcyB0aGUgRFRMUyBjbGllbnQuICBJdCBzaG91bGQgaW5pdGlh dGUgYSBzZXNzaW9uIHRvIHRoZSBzZXJ2ZXIgb24gdGhlIGFwcHJvcHJpYXRlIHBvcnQu4oCdDQoN CkFnYWluLCBJIHVuZGVyc3Rvb2QgdGhhdCB0aGlzIHdhcyBvcmlnaW5hbGx5IHdyaXR0ZW4gZnJv bSB0aGUgcG9pbnQgb2YgdmlldyBvZiBhIG5vcm1hbCB1bmljYXN0IENvQVAgcmVxdWVzdC4gIE1l YW5pbmcgdGhhdCBhIENvQVAgY2xpZW50IHdvdWxkIGhhdmUgaW5pdGlhbGx5IHBlcmZvcm1lZCBh IHJlcXVlc3QgKGUuZy4gR0VUKSBhbmQgdGh1cyBzaG91bGQgYmUgdGhlIG9uZSB0aGF0IGRlY2lk ZXMgaWYgdGhlIEdFVCBzaG91bGQgYmUgc2VjdXJlIG9yIG5vdC4gIEFnYWluIHRoaXMgbG9naWMg ZG9lcyBub3QgYXBwbHkgZGlyZWN0bHkgZm9yIHRoZSBtdWx0aWNhc3QgY2FzZSBiZWNhdXNlIHRo ZSBpbnRlcmFjdGlvbnMgYXJlIGRpZmZlcmVudC4gIFNvIEkgYWdyZWUgdGhhdCB3ZSBuZWVkIHRv IGV4cGxpY2l0bHkgc3RhdGUgaW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdCB0aGF0IHdlIGFy ZSBkZXZpYXRpbmcgZnJvbSB0aGUgb3JpZ2luYWwgY29yZS1jb2FwLTE4IGFwcHJvYWNoLg0KDQoN Cg0KQmVzdCBSZWdhcmRzLA0KDQoNCkFrYmFyDQoNCkZyb206IERpamssIEVza28gW21haWx0bzpl c2tvLmRpamtAcGhpbGlwcy5jb21dDQpTZW50OiBNb25kYXksIE1heSAxOSwgMjAxNCAxMjowMiBQ TQ0KVG86IFJhaG1hbiwgQWtiYXI7IE1hcmNvIFRpbG9jYQ0KQ2M6IEt1bWFyLCBTYW5kZWVwOyBk dGxzLWlvdEBpZXRmLm9yZzxtYWlsdG86ZHRscy1pb3RAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSRTog W0R0bHMtaW90XSBVbmljYXN0IHJlc3BvbnNlcyBpbiBkcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0 LXNlY3VyaXR5LTA1DQoNCkhpIEFrYmFyLA0KDQphcG9sb2dpZXMgZm9yIG15IGxhdGUgaW5wdXQh IE9uIHRoZSBuZXcgdGV4dCwgdHdvIHBvaW50cyAoc2VlIGJlbG93KSBtYXkgbmVlZCBzb21lIGZ1 cnRoZXIgZGlzY3Vzc2lvbi4gSGVyZSB3ZSBkZXZpYXRlIGZyb20gdGhlIHNwaXJpdCBvZiBjb3Jl LWNvYXAtMTgsIHdoaWNoIG1heSBuZWVkIHRvIGJlIHBvaW50ZWQgb3V0IGluIHRoZSB0ZXh0IGV4 cGxpY2l0bHksIGlmIHRoZSBkZXZpYXRpb24gaXMgY29uc2lkZXJlZCBhY2NlcHRhYmxlLg0KDQox LiBVbnNlY3VyZWQgcmVzcG9uc2VzDQrigJxUaGUgdW5pY2FzdCByZXNwb25zZXMgdG8gYSBEVExT LWJhc2VkIG11bHRpY2FzdCBtZXNzYWdlIG1heSBvcHRpb25hbGx5IGJlIHNlY3VyZeKAnQ0KLT4g Q29tcGFyZSB0byBzZWN0aW9uIDkuMS4yIG9mIGNvcmUtY29hcDoNCuKAnFRoaXMgbWVhbnMgdGhl IHJlc3BvbnNlIHRvIGEgRFRMUyBzZWN1cmVkIHJlcXVlc3QgTVVTVCBhbHdheXMgYmUgRFRMUw0K ICAgc2VjdXJlZCB1c2luZyB0aGUgc2FtZSBzZWN1cml0eSBzZXNzaW9uIGFuZCBlcG9jaC4gIEFu eSBhdHRlbXB0IHRvDQogICBzdXBwbHkgYSBOb1NlYyByZXNwb25zZSB0byBhIERUTFMgcmVxdWVz dCBzaW1wbHkgZG9lcyBub3QgbWF0Y2ggdGhlDQogICByZXF1ZXN0IGFuZCAodW5sZXNzIGl0IGRv ZXMgbWF0Y2ggYW4gdW5yZWxhdGVkIE5vU2VjIHJlcXVlc3QpDQogICB0aGVyZWZvcmUgTVVTVCBi ZSByZWplY3RlZC7igJwNCg0KSXQgc2VlbXMgdW5zZWN1cmVkIHJlc3BvbnNlcyBhcmUgbm90IHBv c3NpYmxlIHdpdGhvdXQgYWx0ZXJpbmcgdGhlIENvQVAgcmVxdWVzdC9yZXNwb25zZSBtYXRjaGlu ZyBydWxlcy4NCg0KMi4gV2hvIGluaXRpYXRlcyB0aGUgaGFuZHNoYWtlDQrigJxFaXRoZXIgdGhl IG11bHRpY2FzdCBtZXNzYWdlIHNlbmRlciBvciBsaXN0ZW5lciBtYXkgaW5pdGlhdGUgdGhlDQog ICB1bmljYXN0IERUTFMgaGFuZHNoYWtlLiDigJwNCi0+IENvbXBhcmUgdG8gc2VjdGlvbiA5LjEu MSBvZiBjb3JlLWNvYXA6DQrigJxUaGUgZW5kcG9pbnQgYWN0aW5nIGFzIHRoZSBDb0FQIGNsaWVu dCBzaG91bGQgYWxzbyBhY3QgYXMgdGhlIERUTFMNCiAgIGNsaWVudC4gIEl0IHNob3VsZCBpbml0 aWF0ZSBhIHNlc3Npb24gdG8gdGhlIHNlcnZlciBvbiB0aGUNCiAgIGFwcHJvcHJpYXRlIHBvcnQu 4oCdDQoNCmJlc3QgcmVnYXJkcywNCkVza28NCg0KRnJvbTogZHRscy1pb3QgW21haWx0bzpkdGxz LWlvdC1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgUmFobWFuLCBBa2Jhcg0KU2VudDog RnJpZGF5LCBNYXkgMDksIDIwMTQgMjE6NDANClRvOiBNYXJjbyBUaWxvY2ENCkNjOiBLdW1hciwg U2FuZGVlcDsgZHRscy1pb3RAaWV0Zi5vcmc8bWFpbHRvOmR0bHMtaW90QGlldGYub3JnPg0KU3Vi amVjdDogUmU6IFtEdGxzLWlvdF0gVW5pY2FzdCByZXNwb25zZXMgaW4gZHJhZnQta2VvaC1kaWNl LW11bHRpY2FzdC1zZWN1cml0eS0wNQ0KDQpIaSBNYXJjbywNCg0KDQpXZSBoYXZlIHVwZGF0ZWQg dGhlIGRyYWZ0IHRvIGNhcHR1cmUgeW91ciByZW1haW5pbmcgY29tbWVudHMgYmVsb3cuICBQbGVh c2UgcmV2aWV3IGFuZCB0ZWxsIHVzIGlmIHlvdSBoYXZlIGFueSBvdGhlciBjb21tZW50cy4NCg0K DQpodHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNl Y3VyaXR5LTA3I3NlY3Rpb24tNC41DQoNCg0KNC41LiAgVW5pY2FzdCBSZXNwb25zZXMgdG8gTXVs dGljYXN0IE1lc3NhZ2VzDQoNCiAgIEluIENvQVAsIHJlc3BvbnNlcyB0byBtdWx0aWNhc3QgbWVz c2FnZXMgYXJlIGFsd2F5cyBzZW50IGJhY2sgYXMNCiAgIHVuaWNhc3QuICBUaGF0IGlzLCB0aGUg Z3JvdXAgbWVtYmVycyB0aGF0IHJlY2VpdmUgYSBtdWx0aWNhc3QgbWVzc2FnZQ0KICAgbWF5IGlu ZGl2aWR1YWxseSBkZWNpZGUgdG8gc2VuZCAob3Igc3VwcHJlc3MpIGEgdW5pY2FzdCByZXNwb25z ZSBhcw0KICAgZGVzY3JpYmVkIGluIFNlY3Rpb24gMi41IG9mIFtJLUQuaWV0Zi1jb3JlLWdyb3Vw Y29tbV0uICBUaGUgdW5pY2FzdA0KICAgcmVzcG9uc2VzIHRvIGEgRFRMUy1iYXNlZCBtdWx0aWNh c3QgbWVzc2FnZSBtYXkgb3B0aW9uYWxseSBiZSBzZWN1cmUuDQogICBTcGVjaWZpY2FsbHksIHRo ZSB1bmljYXN0IHJlc3BvbnNlIG1heSBiZSBzZW50IGJhY2sgYXMgYSB1bmljYXN0IERUTFMNCiAg IGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDkuMSBvZiBbSS1ELmlldGYtY29yZS1jb2FwXS4gIFRo aXMgcmVxdWlyZXMNCiAgIHRoYXQgYSB1bmljYXN0IERUTFMgaGFuZHNoYWtlIHdhcyBwcmV2aW91 c2x5IGluaXRpYXRlZCBiZXR3ZWVuIHRoZQ0KICAgbXVsdGljYXN0IG1lc3NhZ2Ugc2VuZGVyIGFu ZCBsaXN0ZW5lci4NCg0KICAgRWl0aGVyIHRoZSBtdWx0aWNhc3QgbWVzc2FnZSBzZW5kZXIgb3Ig bGlzdGVuZXIgbWF5IGluaXRpYXRlIHRoZQ0KICAgdW5pY2FzdCBEVExTIGhhbmRzaGFrZS4gIElm IHRoZSBEVExTIGhhbmRzaGFrZSB3YXMgaW5pdGlhdGVkIGJ5IHRoZQ0KICAgbXVsdGljYXN0IG1l c3NhZ2Ugc2VuZGVyLCBpdCByZXF1aXJlcyB0aGF0IHRoZSBzZW5kZXIgYmUgYXdhcmUgb2YgdGhl DQogICBtZW1iZXJzaGlwIG9mIHRoZSBtdWx0aWNhc3QgZ3JvdXAuICBUaGlzIGNhbiBiZSBhY2Nv bXBsaXNoZWQsIGZvcg0KICAgZXhhbXBsZSwgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gMi42IG9m IFtJLUQuaWV0Zi1jb3JlLWNvYXBdLiAgSWYgdGhlDQogICBsaXN0ZW5lciBpbml0aWF0ZWQgdGhl IERUTFMgaGFuZHNoYWtlLCBpdCBtYXkgaGF2ZSBkb25lIHNvLCBmb3INCiAgIGV4YW1wbGUsIGFm dGVyIHJlY2VpdmluZyBhIG11bHRpY2FzdCBtZXNzYWdlIGZvciB0aGUgZmlyc3QgdGltZS4NCg0K ICAgSW4gdGhlIGV4dHJlbWUgc2NlbmFyaW8sIGEgbXVsdGljYXN0IHNlbmRlciBtYXkgYXR0ZW1w dCB0byBpbml0aWF0ZQ0KICAgdGhlIHVuaWNhc3QgRFRMUyBoYW5kc2hha2Ugd2l0aCBhbGwsIG9y IGEgc3Vic2V0IG9mLCBrbm93biBsaXN0ZW5lcnMNCiAgIGp1c3QgYWZ0ZXIgaXQgc2VuZHMgb3V0 IHRoZSBEVExTLWJhc2VkIG11bHRpY2FzdCBtZXNzYWdlLiAgVGhpcyBtYXkNCiAgIHJlc3VsdCBp biB0aGUgbXVsdGljYXN0IHNlbmRlciBoYXZpbmcgdG8gcHJvY2VzcyB1bmljYXN0IERUTFMNCiAg IGhhbmRzaGFrZSBtZXNzYWdlcyBmcm9tIG11bHRpcGxlIG11bHRpY2FzdCBsaXN0ZW5lcnMgaW4g YSBzaG9ydA0KICAgcGVyaW9kLg0KDQogICBOb3RlOiBUaGVyZSBpcyBhbiBvYnZpb3VzIHRpbWlu ZyBhbmQgcHJvY2Vzc2luZyBsb2FkIGlzc3VlIGZvciB0aGUNCiAgIG11bHRpY2FzdCBzZW5kZXIg aW4gdGhlIHNjZW5hcmlvIHdoZXJlIGl0IGF0dGVtcHRzIHRvIGluaXRpYXRlIHRoZQ0KICAgdW5p Y2FzdCBEVExTIGhhbmRzaGFrZXMgd2l0aCBhbGwvc29tZSBvZiBpdHMga25vd24gbGlzdGVuZXJz IGp1c3QNCiAgIGFmdGVyIGl0IHNlbmRzIG91dCB0aGUgRFRMUy1iYXNlZCBtdWx0aWNhc3QgbWVz c2FnZS4gIEluIHRoaXMgY2FzZSwNCiAgIHRoZSBwcm9jZXNzaW5nIGxvYWQgaW4gdGhlIG11bHRp Y2FzdCBzZW5kZXIgKGkuZS4gdW5pY2FzdCBEVExTDQogICBjbGllbnQpIGlzIHJlZHVjZWQgc29t ZXdoYXQgYnkgdGhlIGZhY3QgdGhhdCBDb0FQIHJlcXVpcmVzIGEgYmFjay1vZmYNCiAgIGFuZCBy YW5kb21pemF0aW9uIG9mIHRoZSB1bmljYXN0IHJlc3BvbnNlIGJ5IHRoZSBMZWlzdXJlIHRpbWVy DQogICBtZWNoYW5pc20gYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gOC4yIG9mIFtJLUQuaWV0Zi1j b3JlLWNvYXBdLg0KDQoNCg0KQmVzdCBSZWdhcmRzLA0KDQoNCkFrYmFyDQoNCg0KDQpGcm9tOiBk dGxzLWlvdCBbbWFpbHRvOmR0bHMtaW90LWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBS YWhtYW4sIEFrYmFyDQpTZW50OiBUdWVzZGF5LCBNYXkgMDYsIDIwMTQgNDo0NCBQTQ0KVG86IE1h cmNvIFRpbG9jYQ0KQ2M6IEt1bWFyLCBTYW5kZWVwOyBkdGxzLWlvdEBpZXRmLm9yZzxtYWlsdG86 ZHRscy1pb3RAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW0R0bHMtaW90XSBVbmljYXN0IHJlc3Bv bnNlcyBpbiBkcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA1DQoNCkhpIE1hcmNv LA0KDQoNClRoYW5rcyBmb3IgcmV2aWV3aW5nIHRoZSB1cGRhdGVkIGRyYWZ0LiAgQWxzbyBoZXJl IGlzIG15IGZlZWRiYWNrIHRvIHlvdXIgdHdvIG5ldyBxdWVzdGlvbnM6DQoNCg0KPjEpIEluIG9y ZGVyIHRvIHBlcmZvcm0gYSBEVExTIGhhbmRzaGFrZSBiZWZvcmUvYWZ0ZXIgc2VuZGluZyBhIG11 bHRpY2FzdCBtZXNzYWdlLCBhIHNlbmRlcg0KPiBub2RlIHNob3VsZCBiZSBhd2FyZSBvZiB0aGUg Z3JvdXAgbWVtYmVyc2hpcCwgZXNwZWNpYWxseSB3aGF0IGFyZSB0aGUgbGlzdGVuZXIgbm9kZXMg Y3VycmVudGx5DQo+IHByZXNlbnQgaW4gdGhlIGdyb3VwLiBPZiBjb3Vyc2UsIHN1Y2ggYSBncm91 cCBtZW1iZXJzaGlwIG1heSBjaGFuZ2Ugb3ZlciB0aW1lLCB1cG9uIG5ldyBub2Rlcw0KPmpvaW5p bmcgdGhlIGdyb3VwLiBIb3dldmVyLCBTZWN0aW9uIDMuMSBpbiB0aGUgZHJhZnQgc3RhdGVzIHRo YXQgIkFueSBkZXZpY2UgY2FuIGluIHByaW5jaXBsZSBkZWNpZGUNCj50byBsaXN0ZW4gdG8gYW55 IElQdjYgbXVsdGljYXN0IGFkZHJlc3MuIFRoaXMgYWxzbyBtZWFucyBhcHBsaWNhdGlvbnMgb24g dGhlIG90aGVyIGRldmljZXMgZG8gbm90DQo+a25vdywgb3IgZG8gbm90IGdldCBub3RpZmllZCwg d2hlbiBuZXcgbGlzdGVuZXJzIGpvaW4gdGhlIG5ldHdvcmsuIi4gQ291bGRuJ3QgdGhpcyBiZSBh IHByb2JsZW0NCj5mb3IgdGhlIHN1Z2dlc3RlZCBhcHByb2FjaD8NCg0KWWVzLCBpbiBwcmluY2lw bGUsIGFueSBkZXZpY2UgY2FuIGRlY2lkZSB0byBsaXN0ZW4gZm9yIGFueSBJUHY2IG11bHRpY2Fz dCBhZGRyZXNzLiAgQnV0IGluIHByYWN0aWNlIG9mIGNvdXJzZSB0aGVyZSBhcmUgSVB2NiBtdWx0 aWNhc3QgcmVsYXRlZCBwcm90b2NvbHMgZm9yIHJvdXRpbmcvam9pbmluZyB0aGF0IGRpY3RhdGUg d2hvIGNhbiBzdWNjZXNzZnVsbHkgbGlzdGVuIGZvciBhbmQgcmVjZWl2ZSBhbiBJUHY2IG11bHRp Y2FzdCBwYWNrZXQuICBGb3IgZXhhbXBsZSwgdW5sZXNzIGEgZGV2aWNlIHVzZXMgYSBwcm90b2Nv bCBsaWtlIE1MRCB0byBleHBsaWNpdGx5IGpvaW4gYSBtdWx0aWNhc3QgZ3JvdXAsIHRoZSBuZXR3 b3JrIHdpbGwgbmV2ZXIgcm91dGUgdGhlIG11bHRpY2FzdCBwYWNrZXRzIG9mIGludGVyZXN0IHRv IHRoZSBzdWItbmV0d29yayBvZiB0aGUgZGV2aWNlLiAgVGhpcyBpcyBhbGwgZXhwbGFpbmVkIGF0 IGEgaGlnaCBsZXZlbCBpbiB0aGUgSS5ELmdyb3VwY29tbSByZWZlcmVuY2UgKGh0dHA6Ly90b29s cy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtY29yZS1ncm91cGNvbW0tMTgjc2VjdGlvbi0yLjEg KSAuDQoNClRoZSBvdGhlciBwYXJ0IG9mIHlvdXIgcXVlc3Rpb24gcmVmZXJzIHRvIGhvdyBkb2Vz IHRoZSBzZW5kZXIgbm9kZSBrbm93IHdobyBpcyBwYXJ0IG9mIHRoZSBncm91cC4gIFlvdSBhcmUg Y29ycmVjdCB0aGF0IGl0IGlzIHZlcnkgZGlmZmljdWx0IHRvIGtub3cgcHJlY2lzZWx5IHRoZSBt ZW1iZXJzaGlwIG9mIGEgZ3JvdXAuICBUaGF0IGlzIHdoeSB3ZSBoYWQgdGhlIHN1YnRsZSByZWZl cmVuY2UgdG8g4oCca25vd24gbGlzdGVuZXJz4oCdLiAgSG93IHlvdSBhY3R1YWxseSBrbm93IHRo ZSBtZW1iZXJzaGlwIGRlcGVuZHMgb24gdGhlIG1peCBvZiBwcm90b2NvbHMgdXNlZCAoYW5kIGlz IGluIGZhY3QgaXQgaXMgbm90IGFsd2F5cyBwb3NzaWJsZSB0byBrbm93IGFsbCB0aGUgbWVtYmVy cyBhY2N1cmF0ZWx5KS4gIEJ1dCBmb3IgQ29BUCBncm91cCBtZW1iZXIgZGlzY292ZXJ5LCB0aGVy ZSBpcyAgYWdhaW4gZ3VpZGFuY2UgZ2l2ZW4gaW4gdGhlIEkuRC5ncm91cGNvbW0gcmVmZXJlbmNl IChzcGVjaWZpY2FsbHkgaW4gaHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQtaWV0Zi1j b3JlLWdyb3VwY29tbS0xOCNzZWN0aW9uLTIuNiApLiAgV2UgY2FuIG1ha2UgdGhpcyBwb2ludCBh IGJpdCBtb3JlIGV4cGxpY2l0IGluIHRoZSBuZXh0IHVwZGF0ZSBvZiBvdXIgSS1ELg0KDQoNCg0K PjIpIEFuIGFsdGVybmF0aXZlIGFwcHJvYWNoIHRvIHRoZSBvbmUgc3VnZ2VzdGVkIGluIFNlY3Rp b24gNC41IG1heSBjb25zaXN0IGluIGEgbGlzdGVuZXIgbm9kZSBlc3RhYmxpc2hpbmcNCj4gYSB1 bmljYXN0IERUTFMgc2Vzc2lvbiAoaS5lLiBzdGFydGluZyBhIERUTFMgaGFuZHNoYWtlKSB3aXRo IHRoZSBzZW5kZXIgbm9kZSwgdXBvbiByZWNlaXZpbmcgYSBtdWx0aWNhc3QNCj4gbWVzc2FnZSBm b3IgdGhlIGZpcnN0IHRpbWUuDQoNClllcywgZ29vZCBwb2ludCEgIFdlIGNhbiBhZGQgdGhpcyB0 byB0aGUgSS1EIGluIG91ciBuZXh0IHVwZGF0ZS4NCg0KDQpCZXN0IFJlZ2FyZHMsDQoNCg0KQWti YXINCg0KDQoNCkZyb206IE1hcmNvIFRpbG9jYSBbbWFpbHRvOm1hcmNvQHNpY3Muc2VdDQpTZW50 OiBUdWVzZGF5LCBNYXkgMDYsIDIwMTQgMTI6MzIgUE0NClRvOiBSYWhtYW4sIEFrYmFyDQpDYzog S3VtYXIsIFNhbmRlZXA7IGR0bHMtaW90QGlldGYub3JnPG1haWx0bzpkdGxzLWlvdEBpZXRmLm9y Zz4NClN1YmplY3Q6IFJlOiBbRHRscy1pb3RdIFVuaWNhc3QgcmVzcG9uc2VzIGluIGRyYWZ0LWtl b2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDUNCg0KSGVsbG8gQWtiYXIsDQoNClRoYW5rcyBm b3IgaGF2aW5nIGNvbnNpZGVyZWQgbXkgcXVlc3Rpb24uIFRoZSBuZXcgU2VjdGlvbiA0LjUgbG9v a3MgZmluZSB0byBtZS4gQWxzbywgSSBoYXZlIHRoZSB0d28gZm9sbG93aW5nIGNvbW1lbnRzLg0K DQoxKSBJbiBvcmRlciB0byBwZXJmb3JtIGEgRFRMUyBoYW5kc2hha2UgYmVmb3JlL2FmdGVyIHNl bmRpbmcgYSBtdWx0aWNhc3QgbWVzc2FnZSwgYSBzZW5kZXIgbm9kZSBzaG91bGQgYmUgYXdhcmUg b2YgdGhlIGdyb3VwIG1lbWJlcnNoaXAsIGVzcGVjaWFsbHkgd2hhdCBhcmUgdGhlIGxpc3RlbmVy IG5vZGVzIGN1cnJlbnRseSBwcmVzZW50IGluIHRoZSBncm91cC4gT2YgY291cnNlLCBzdWNoIGEg Z3JvdXAgbWVtYmVyc2hpcCBtYXkgY2hhbmdlIG92ZXIgdGltZSwgdXBvbiBuZXcgbm9kZXMgam9p bmluZyB0aGUgZ3JvdXAuIEhvd2V2ZXIsIFNlY3Rpb24gMy4xIGluIHRoZSBkcmFmdCBzdGF0ZXMg dGhhdCAiQW55IGRldmljZSBjYW4gaW4gcHJpbmNpcGxlIGRlY2lkZSB0byBsaXN0ZW4gdG8gYW55 IElQdjYgbXVsdGljYXN0IGFkZHJlc3MuIFRoaXMgYWxzbyBtZWFucyBhcHBsaWNhdGlvbnMgb24g dGhlIG90aGVyIGRldmljZXMgZG8gbm90IGtub3csIG9yIGRvIG5vdCBnZXQgbm90aWZpZWQsIHdo ZW4gbmV3IGxpc3RlbmVycyBqb2luIHRoZSBuZXR3b3JrLiIuIENvdWxkbid0IHRoaXMgYmUgYSBw cm9ibGVtIGZvciB0aGUgc3VnZ2VzdGVkIGFwcHJvYWNoPw0KDQoyKSBBbiBhbHRlcm5hdGl2ZSBh cHByb2FjaCB0byB0aGUgb25lIHN1Z2dlc3RlZCBpbiBTZWN0aW9uIDQuNSBtYXkgY29uc2lzdCBp biBhIGxpc3RlbmVyIG5vZGUgZXN0YWJsaXNoaW5nIGEgdW5pY2FzdCBEVExTIHNlc3Npb24gKGku ZS4gc3RhcnRpbmcgYSBEVExTIGhhbmRzaGFrZSkgd2l0aCB0aGUgc2VuZGVyIG5vZGUsIHVwb24g cmVjZWl2aW5nIGEgbXVsdGljYXN0IG1lc3NhZ2UgZm9yIHRoZSBmaXJzdCB0aW1lLg0KDQpCZXN0 IHJlZ2FyZHMsDQpNYXJjbw0KDQoNCg0KDQpPbiA1IE1heSAyMDE0IDIzOjQ1LCBSYWhtYW4sIEFr YmFyIDxBa2Jhci5SYWhtYW5AaW50ZXJkaWdpdGFsLmNvbTxtYWlsdG86QWtiYXIuUmFobWFuQGlu dGVyZGlnaXRhbC5jb20+PiB3cm90ZToNCkhpIE1hcmNvLA0KDQoNCg0KVGhlIGF1dGhvcnMgaGF2 ZSBtYWRlIGFuIHVwZGF0ZSB0byB0aGUgZHJhZnQgdG8gYWRkcmVzcyBmdWxseSB5b3VyIGdvb2Qg cXVlc3Rpb24gcmVnYXJkaW5nIGhvdyB0byBoYW5kbGUgdGhlIHVuaWNhc3QgcmVzcG9uc2VzIHRv IHRoZSBtdWx0aWNhc3QgcmVzcG9uc2UuICBTcGVjaWZpY2FsbHksIHBsZWFzZSByZXZpZXcgdGhl IG5ldyBzZWN0aW9uIDQuNSBhbmQgdGVsbCB1cyBpZiB5b3UgaGF2ZSBhbnkgbW9yZSBxdWVzdGlv bnM6DQoNCg0KaHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwvZHJhZnQta2VvaC1kaWNlLW11bHRp Y2FzdC1zZWN1cml0eS0wNiNzZWN0aW9uLTQuNQ0KDQo0LjUuICBVbmljYXN0IFJlc3BvbnNlcyB0 byBNdWx0aWNhc3QgTWVzc2FnZXMNCg0KICAgSW4gQ29BUCwgcmVzcG9uc2VzIHRvIG11bHRpY2Fz dCBtZXNzYWdlcyBhcmUgYWx3YXlzIHNlbnQgYmFjayBhcw0KICAgdW5pY2FzdC4gIFRoYXQgaXMs IHRoZSBncm91cCBtZW1iZXJzIHRoYXQgcmVjZWl2ZSBhIG11bHRpY2FzdCBtZXNzYWdlDQogICBt YXkgaW5kaXZpZHVhbGx5IGRlY2lkZSB0byBzZW5kIChvciBzdXBwcmVzcykgYSB1bmljYXN0IHJl c3BvbnNlIGFzDQogICBkZXNjcmliZWQgaW4gU2VjdGlvbiAyLjUgb2YgW0ktRC5pZXRmLWNvcmUt Z3JvdXBjb21tXS4gIFRoZSB1bmljYXN0DQogICByZXNwb25zZXMgdG8gYSBEVExTLWJhc2VkIG11 bHRpY2FzdCBtZXNzYWdlIG1heSBvcHRpb25hbGx5IGJlIHNlY3VyZS4NCiAgIFNwZWNpZmljYWxs eSwgdGhlIHVuaWNhc3QgcmVzcG9uc2UgbWF5IGJlIHNlbnQgYmFjayBhcyBhIHVuaWNhc3QgRFRM Uw0KICAgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gOS4xIG9mIFtJLUQuaWV0Zi1jb3JlLWNvYXBd LiAgVGhpcyByZXF1aXJlcw0KICAgdGhhdCBhIHVuaWNhc3QgRFRMUyBoYW5kc2hha2Ugd2FzIHBy ZXZpb3VzbHkgaW5pdGlhdGVkIGJldHdlZW4gdGhlDQogICBtdWx0aWNhc3QgbWVzc2FnZSBzZW5k ZXIgYW5kIGxpc3RlbmVyLiAgSW4gdGhlIGV4dHJlbWUgc2NlbmFyaW8sIGENCiAgIG11bHRpY2Fz dCBzZW5kZXIgbWF5IGF0dGVtcHQgdG8gaW5pdGlhdGUgdGhlIHVuaWNhc3QgRFRMUyBoYW5kc2hh a2UNCiAgIHdpdGggYWxsIG9yIGEgc3Vic2V0IG9mIGtub3duIGxpc3RlbmVycyBqdXN0IGJlZm9y ZSBvciBqdXN0IGFmdGVyIGl0DQogICBzZW5kcyBvdXQgdGhlIERUTFMtYmFzZWQgbXVsdGljYXN0 IG1lc3NhZ2UuICBUaGlzIG1heSByZXN1bHQgaW4gdGhlDQogICBtdWx0aWNhc3Qgc2VuZGVyIChp LmUuIHVuaWNhc3QgRFRMUyBjbGllbnQpIGhhdmluZyB0byBwcm9jZXNzIHVuaWNhc3QNCiAgIERU TFMgaGFuZHNoYWtlIG1lc3NhZ2VzIGZyb20gbXVsdGlwbGUgbXVsdGljYXN0IGxpc3RlbmVycyAo aS5lLg0KICAgdW5pY2FzdCBEVExTIHNlcnZlcnMpIGluIGEgc2hvcnQgcGVyaW9kLg0KDQogICBO b3RlOiBUaGVyZSBpcyBhbiBvYnZpb3VzIHRpbWluZyBhbmQgcHJvY2Vzc2luZyBsb2FkIGlzc3Vl IGZvciB0aGUNCiAgIG11bHRpY2FzdCBzZW5kZXIgaW4gdGhlIHNjZW5hcmlvIHdoZXJlIGl0IGF0 dGVtcHRzIHRvIGluaXRpYXRlIHRoZQ0KICAgdW5pY2FzdCBEVExTIGhhbmRzaGFrZXMgd2l0aCBh bGwvc29tZSBvZiBpdHMga25vd24gbGlzdGVuZXJzIGp1c3QNCiAgIGFmdGVyIGl0IHNlbmRzIG91 dCB0aGUgRFRMUy1iYXNlZCBtdWx0aWNhc3QgbWVzc2FnZS4gIEluIHRoaXMgY2FzZSwNCiAgIHRo ZSBwcm9jZXNzaW5nIGxvYWQgaW4gdGhlIG11bHRpY2FzdCBzZW5kZXIgKGkuZS4gdW5pY2FzdCBE VExTDQogICBjbGllbnQpIGlzIHJlZHVjZWQgc29tZXdoYXQgYnkgdGhlIGZhY3QgdGhhdCBDb0FQ IHJlcXVpcmVzIGEgYmFjay1vZmYNCiAgIGFuZCByYW5kb21pemF0aW9uIG9mIHRoZSB1bmljYXN0 IHJlc3BvbnNlIGJ5IHRoZSBMZWlzdXJlIHRpbWVyDQogICBtZWNoYW5pc20gYXMgZGVzY3JpYmVk IGluIFNlY3Rpb24gOC4yIG9mIFtJLUQuaWV0Zi1jb3JlLWNvYXBdLg0KDQoNCg0KDQpCZXN0IFJl Z2FyZHMsDQoNCg0KQWtiYXINCg0KDQoNCkZyb206IGR0bHMtaW90IFttYWlsdG86ZHRscy1pb3Qt Ym91bmNlc0BpZXRmLm9yZzxtYWlsdG86ZHRscy1pb3QtYm91bmNlc0BpZXRmLm9yZz5dIE9uIEJl aGFsZiBPZiBLdW1hciwgU2FuZGVlcA0KU2VudDogV2VkbmVzZGF5LCBBcHJpbCAwMiwgMjAxNCAz OjQ3IEFNDQpUbzogTWFyY28gVGlsb2NhOyBkdGxzLWlvdEBpZXRmLm9yZzxtYWlsdG86ZHRscy1p b3RAaWV0Zi5vcmc+DQpTdWJqZWN0OiBSZTogW0R0bHMtaW90XSBVbmljYXN0IHJlc3BvbnNlcyBp biBkcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA1DQoNCkhpIE1hcmNvDQoNClRo ZSBkcmFmdCBvbmx5IGFkZHJlc3NlcyB0aGUgcHJvdGVjdGlvbiBvZiBtdWx0aWNhc3QgdHJhZmZp Yy4gSWYgdW5pY2FzdCByZXNwb25zZXMgYXJlIGV4cGVjdGVkIGFuZCBpZiBwcm90ZWN0aW9uIGlz IHJlcXVpcmVkIGZvciBzdWNoIG1lc3NhZ2VzLCB0aGVuIGV4aXN0aW5nIHVuaWNhc3QgcHJvdGVj dGlvbiBtZWNoYW5pc21zIGJhc2VkIG9uIERUTFMgYXMgc3VnZ2VzdGVkIGluIGRyYWZ0LWlldGYt Y29yZS1jb2FwLTE4IHNob3VsZCBiZSB1c2VkLiBQcm90ZWN0aW9uIG9mIGFsbCB1bmljYXN0IG1l c3NhZ2VzIHNob3VsZCBiZSB0cmVhdGVkIGFzIHdvdWxkIGJlIGRvbmUgbm9ybWFsbHkuDQoNCkhv cGUgdGhhdCBhbnN3ZXJzIHlvdXIgcXVlc3Rpb24uDQoNClJlZ2FyZHMNClNhbmRlZXANCg0KRnJv bTogZHRscy1pb3QgW21haWx0bzpkdGxzLWlvdC1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYg T2YgTWFyY28gVGlsb2NhDQpTZW50OiBUdWVzZGF5LCBBcHJpbCAwMSwgMjAxNCA2OjM1IFBNDQpU bzogZHRscy1pb3RAaWV0Zi5vcmc8bWFpbHRvOmR0bHMtaW90QGlldGYub3JnPg0KU3ViamVjdDog W0R0bHMtaW90XSBVbmljYXN0IHJlc3BvbnNlcyBpbiBkcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0 LXNlY3VyaXR5LTA1DQoNCkRlYXIgYWxsLA0KDQpBcyB0byBwb3NzaWJsZSByZXNwb25zZXMgdG8g bXVsdGljYXN0IHJlcXVlc3RzLCBTZWN0aW9uIDIuMSBzdGF0ZXMgdGhhdCB0aGV5IGFyZSBzZW50 IGJhY2sgaW4gdW5pY2FzdC4gVGhlbiwgbm8gZnVydGhlciBkZXRhaWxzIGFyZSBwcm92aWRlZCBh Ym91dCB0aGVpciBwcm90ZWN0aW9uLg0KDQpBcmUgc3VjaCByZXNwb25zZXMgc3VwcG9zZWQgdG8g YmUgcHJvdGVjdGVkIHRocm91Z2ggYSAicmVndWxhciIgRFRMUyBzZXNzaW9uLCB3aGljaCBtdXN0 IGJlIChvciBoYXMgcHJldmlvdXNseSBiZWVuKSBlc3RhYmxpc2hlZCBiZXR3ZWVuIHRoZSBzZW5k ZXIgYW5kIGxpc3RlbmVyPw0KDQpDaGVlcnMsDQpNYXJjbw0KDQoNCg0KDQoNCl9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fDQpUaGUgaW5mb3JtYXRpb24gY29udGFpbmVkIGluIHRoaXMg bWVzc2FnZSBtYXkgYmUgY29uZmlkZW50aWFsIGFuZCBsZWdhbGx5IHByb3RlY3RlZCB1bmRlciBh cHBsaWNhYmxlIGxhdy4gVGhlIG1lc3NhZ2UgaXMgaW50ZW5kZWQgc29sZWx5IGZvciB0aGUgYWRk cmVzc2VlKHMpLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCB5b3UgYXJl IGhlcmVieSBub3RpZmllZCB0aGF0IGFueSB1c2UsIGZvcndhcmRpbmcsIGRpc3NlbWluYXRpb24s IG9yIHJlcHJvZHVjdGlvbiBvZiB0aGlzIG1lc3NhZ2UgaXMgc3RyaWN0bHkgcHJvaGliaXRlZCBh bmQgbWF5IGJlIHVubGF3ZnVsLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50 LCBwbGVhc2UgY29udGFjdCB0aGUgc2VuZGVyIGJ5IHJldHVybiBlLW1haWwgYW5kIGRlc3Ryb3kg YWxsIGNvcGllcyBvZiB0aGUgb3JpZ2luYWwgbWVzc2FnZS4NCg0K --_000_031DD135F9160444ABBE3B0C36CED61836DA119DAMSPRD9003MB066_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6eD0idXJuOnNjaGVtYXMtbWljcm9z b2Z0LWNvbTpvZmZpY2U6ZXhjZWwiIHhtbG5zOm09Imh0dHA6Ly9zY2hlbWFzLm1pY3Jvc29mdC5j b20vb2ZmaWNlLzIwMDQvMTIvb21tbCIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnL1RSL1JFQy1o dG1sNDAiPg0KPGhlYWQ+DQo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNvbnRlbnQ9 InRleHQvaHRtbDsgY2hhcnNldD11dGYtOCI+DQo8bWV0YSBuYW1lPSJHZW5lcmF0b3IiIGNvbnRl bnQ9Ik1pY3Jvc29mdCBXb3JkIDE0IChmaWx0ZXJlZCBtZWRpdW0pIj4NCjwhLS1baWYgIW1zb10+ PHN0eWxlPnZcOioge2JlaGF2aW9yOnVybCgjZGVmYXVsdCNWTUwpO30NCm9cOioge2JlaGF2aW9y OnVybCgjZGVmYXVsdCNWTUwpO30NCndcOioge2JlaGF2aW9yOnVybCgjZGVmYXVsdCNWTUwpO30N Ci5zaGFwZSB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0KPC9zdHlsZT48IVtlbmRpZl0t LT48c3R5bGU+PCEtLQ0KLyogRm9udCBEZWZpbml0aW9ucyAqLw0KQGZvbnQtZmFjZQ0KCXtmb250 LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250 LWZhY2UNCgl7Zm9udC1mYW1pbHk6VGFob21hOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDMgNSA0IDQg MiA0O30NCi8qIFN0eWxlIERlZmluaXRpb25zICovDQpwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFs LCBkaXYuTXNvTm9ybWFsDQoJe21hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0K CWZvbnQtc2l6ZToxMi4wcHQ7DQoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiIsInNlcmlm Ijt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsN Cgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBz cGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xv cjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwcmUNCgl7bXNvLXN0eWxl LXByaW9yaXR5Ojk5Ow0KCW1zby1zdHlsZS1saW5rOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFyIjsN CgltYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTAuMHB0 Ow0KCWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0KcC5Nc29BY2V0YXRlLCBsaS5Nc29BY2V0 YXRlLCBkaXYuTXNvQWNldGF0ZQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxl LWxpbms6IkJhbGxvb24gVGV4dCBDaGFyIjsNCgltYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206 LjAwMDFwdDsNCglmb250LXNpemU6OC4wcHQ7DQoJZm9udC1mYW1pbHk6IlRhaG9tYSIsInNhbnMt c2VyaWYiO30NCnAuTXNvTGlzdFBhcmFncmFwaCwgbGkuTXNvTGlzdFBhcmFncmFwaCwgZGl2Lk1z b0xpc3RQYXJhZ3JhcGgNCgl7bXNvLXN0eWxlLXByaW9yaXR5OjM0Ow0KCW1hcmdpbi10b3A6MGlu Ow0KCW1hcmdpbi1yaWdodDowaW47DQoJbWFyZ2luLWJvdHRvbTowaW47DQoJbWFyZ2luLWxlZnQ6 LjVpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250 LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIiwic2VyaWYiO30NCnNwYW4uSFRNTFByZWZvcm1hdHRl ZENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1zby1z dHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3JtYXR0ZWQiOw0K CWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQ0Kc3Bhbi5CYWxsb29uVGV4dENoYXINCgl7bXNv LXN0eWxlLW5hbWU6IkJhbGxvb24gVGV4dCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7 DQoJbXNvLXN0eWxlLWxpbms6IkJhbGxvb24gVGV4dCI7DQoJZm9udC1mYW1pbHk6IlRhaG9tYSIs InNhbnMtc2VyaWYiO30NCnNwYW4uRW1haWxTdHlsZTIyDQoJe21zby1zdHlsZS10eXBlOnBlcnNv bmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJY29sb3I6IzFGNDk3 RDt9DQpzcGFuLkVtYWlsU3R5bGUyMw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbDsNCglmb250 LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5F bWFpbFN0eWxlMjQNCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWw7DQoJZm9udC1mYW1pbHk6IkNh bGlicmkiLCJzYW5zLXNlcmlmIjsNCgljb2xvcjojMUY0OTdEO30NCnNwYW4uRW1haWxTdHlsZTI1 DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fu cy1zZXJpZiI7DQoJY29sb3I6IzFGNDk3RDt9DQpzcGFuLkVtYWlsU3R5bGUyNg0KCXttc28tc3R5 bGUtdHlwZTpwZXJzb25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsInNhbnMtc2VyaWYiOw0K CWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0eWxlMjcNCgl7bXNvLXN0eWxlLXR5cGU6cGVy c29uYWw7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCgljb2xvcjojMUY0 OTdEO30NCnNwYW4uRW1haWxTdHlsZTI4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5 Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIiwic2Fucy1zZXJpZiI7DQoJY29sb3I6IzFGNDk3RDt9 DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNp emU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCglt YXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdl OldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86 c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2Vu ZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVk aXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+ PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1 ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZn dDsNCjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+QXJl Jm5ic3A7IHlvdSBwcm9wb3NpbmcgY2hhbmdpbmcgdGhlIGN1cnJlbnQgR3JvdXBjb21tIEktRCBt b2RlbCBvZiBzdHJpY3RseSB1bmljYXN0IHJlc3BvbnNlcyB0byBhIG11bHRpY2FzdCBDb0FQIHJl cXVlc3Q/Jm5ic3A7IFlvdXIgc3VnZ2VzdGlvbiBhYm92ZSBzZWVtcyB0byBpbXBseSBjaGFuZ2lu ZyB0aGUNCiBtb2RlbCB0byBtdWx0aWNhc3QgcmVzcG9uc2VzPzxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj5ObywgdGhhdCB3YXMgbm90IGludGVuZGVkIOKAkyBJ4oCZbSBub3QgZXZlbiBz dXJlIGlmIHRoaXMgb3B0aW9uIGlzIHJlYWxpc3RpYy4gTGV04oCZcyBzdGljayBmb3Igbm93IHdp dGggdW5pY2FzdCByZXNwb25zZSBvciBuby1yZXNwb25zZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkVza288bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPGRp dj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0I1QzRERiAxLjBw dDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDsiPiBkdGxzLWlvdCBbbWFpbHRvOmR0bHMtaW90LWJvdW5jZXNAaWV0Zi5vcmdd DQo8Yj5PbiBCZWhhbGYgT2YgPC9iPlJhaG1hbiwgQWtiYXI8YnI+DQo8Yj5TZW50OjwvYj4gV2Vk bmVzZGF5LCBNYXkgMjEsIDIwMTQgMTY6MjA8YnI+DQo8Yj5Ubzo8L2I+IERpamssIEVza288YnI+ DQo8Yj5DYzo8L2I+IE1hcmNvIFRpbG9jYTsgS3VtYXIsIFNhbmRlZXA7IGR0bHMtaW90QGlldGYu b3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbRHRscy1pb3RdIFVuaWNhc3QgcmVzcG9uc2Vz IGluIGRyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDU8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFGNDk3RCI+SGkgRXNrbyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Oztjb2xvcjojMUY0OTdEIj5JIGFncmVlIG9uIHlvdXIgcG9pbnRzIDFBIGFuZCAxQiBhbmQgd2ls bCB3b3JrIHdpdGggeW91IG9mZiBsaW5lIHRvIHVwZGF0ZSB0aGUgZHJhZnQgdG8gY2FwdHVyZSB0 aGVzZSBwb2ludHMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90Oztjb2xvcjojMUY0OTdEIj5JIGRpZCBoYXZlIG9uZSBpbXBvcnRhbnQgcXVlc3Rpb24g dGhvdWdoIG9uIHlvdXIgbGFzdCBwb2ludDo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZndDtUaGUgYWJvdmUgaXNzdWVz IHRvZ2V0aGVyIHNlZW0gcXVpdGUgc2VyaW91cy4mbmJzcDsgUGVyaGFwcyBhbiBhbHRlcm5hdGl2 ZSBzb2x1dGlvbiBpcyBiZXR0ZXIgaW4gd2hpY2ggdGhlIGdyb3VwIGtleTxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Oztjb2xvcjojMUY0OTdEIj4mZ3Q7IGlzIHVzZWQgdG8gRFRMUy1wcm90ZWN0IHRoZSByZXNwb25z ZS4gT3IgYWx0ZXJuYXRpdmVseSwgYSBzZXBhcmF0ZSDigJxyZWNlaXZlcnPigJ0gc2VjdXJpdHkg Z3JvdXAgY291bGQgYmUgY3JlYXRlZDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mZ3Q7 dGhhdCBhbGxvd3MgZWFjaCByZWNlaXZlciB0byByZXNwb25kIGFuZCB0aGUgc2VuZGVyIHRvIHJl YWQgdGhlIHJlc3BvbnNlLCBidXQgbm9kZXMgb3V0c2lkZSB0aGUNCjxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztj b2xvcjojMUY0OTdEIj4mZ3Q7c2VuZGVyL3JlY2VpdmVyIGdyb3VwcyBjYW5ub3QgYWNjZXNzIHRo ZSBtZXNzYWdlcyB0aHVzIGV4Y2hhbmdlZC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkFyZSZuYnNwOyB5b3UgcHJvcG9z aW5nIGNoYW5naW5nIHRoZSBjdXJyZW50IEdyb3VwY29tbSBJLUQgbW9kZWwgb2Ygc3RyaWN0bHkg dW5pY2FzdCByZXNwb25zZXMgdG8gYSBtdWx0aWNhc3QgQ29BUCByZXF1ZXN0PyZuYnNwOyBZb3Vy IHN1Z2dlc3Rpb24gYWJvdmUgc2VlbXMgdG8gaW1wbHkNCiBjaGFuZ2luZyB0aGUgbW9kZWwgdG8g bXVsdGljYXN0IHJlc3BvbnNlcz88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+QmVzdCBSZWdh cmRzLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkFrYmFy PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0 REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhv bWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7Ij4gRGlqaywgRXNrbyBbPGEgaHJlZj0ibWFpbHRvOmVza28uZGlq a0BwaGlsaXBzLmNvbSI+bWFpbHRvOmVza28uZGlqa0BwaGlsaXBzLmNvbTwvYT5dDQo8YnI+DQo8 Yj5TZW50OjwvYj4gVHVlc2RheSwgTWF5IDIwLCAyMDE0IDg6MjkgQU08YnI+DQo8Yj5Ubzo8L2I+ IFJhaG1hbiwgQWtiYXI8YnI+DQo8Yj5DYzo8L2I+IEt1bWFyLCBTYW5kZWVwOyA8YSBocmVmPSJt YWlsdG86ZHRscy1pb3RAaWV0Zi5vcmciPmR0bHMtaW90QGlldGYub3JnPC9hPjsgTWFyY28gVGls b2NhPGJyPg0KPGI+U3ViamVjdDo8L2I+IFJFOiBbRHRscy1pb3RdIFVuaWNhc3QgcmVzcG9uc2Vz IGluIGRyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDU8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVv dDs7Y29sb3I6IzFGNDk3RCI+SGkgQWtiYXIsPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0Qi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5vbiBwb2ludCAxLiB0aGVyZSBh cmUgdHdvIGNvbmNlcm5zIHRoYXQgbmVlZCB0byBiZSBhZGRyZXNzZWQ6PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4xQS4g cmVzcG9uZGluZyB1bnNlY3VyZWQgYWZ0ZXIgYSBzZWN1cmVkIHJlcXVlc3Qgc2VlbXMgYSB2aW9s YXRpb24gb2Ygc2VjdXJpdHkgcHJpbmNpcGxlcyBhbmQgdGhlIOKAmHNwaXJpdOKAmSBvZiBDb0FQ LTE4LiBFLmcuIHRoZSByZXNwb25zZSBjb3VsZCBiZSB0YW1wZXJlZCB3aXRoLg0KIFdoYXQgd2Ug Y291bGQgZG8gaXMgdG8gZS5nLiBoYXZlIGEgU0hPVUxEIHJlcXVpcmVtZW50IGZvciBzZWN1cmVk IHJlc3BvbnNlOyB3aGljaCB0aGUgZXhjZXB0aW9uIGNhc2UgYmVpbmcgYSByZXNwb25zZSB0aGF0 IGRvZXMgbm90IGNvbnRhaW4gYW55IGNyaXRpY2FsL2NvbmZpZGVudGlhbCBpbmZvcm1hdGlvbi4g U3VjaCBhcyBhIOKAnDIuMDQgQ2hhbmdlZOKAnSBvciDigJwyLjAyIERlbGV0ZWTigJ0gcmVzcG9u c2Ugd2hpY2ggZG9lcyBub3QgY29udGFpbiBhbnkNCiBmdXJ0aGVyIHBheWxvYWQuIEJ1dCBldmVu IGRvaW5nIHRoYXQgdGhlcmUgbWF5IGJlIHVuaW50ZW5kZWQgc2VjdXJpdHkgY29uc2VxdWVuY2Vz LCBlLmcuIHJlc3BvbnNlIHNwb29maW5nIG9yIHRhbXBlcmluZy48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjFCLiBpZiBz dGFuZGFyZCBDb0FQIG1hdGNoaW5nIHJ1bGVzIGFyZSBub3QgZm9sbG93ZWQsIHRoZSBuZXcgbWF0 Y2hpbmcgcnVsZXMgbmVlZCB0byBiZSBkZWZpbmVkLiBXaGF0IGNvbXBsaWNhdGVzIHRoaXMgaXMg dGhhdCBhIGNsaWVudCBkb2VzbuKAmXQga25vdyBhIHByaW9yaQ0KIGlmIHRoZSBzZXJ2ZXIgd291 bGQgcmVzcG9uZCBEVExTLXNlY3VyZWQgb3Igbm90LiBTbyBpdCBuZWVkcyB0d28gbWV0aG9kcyBv ZiBtYXRjaGluZywgb25lIGZvciBzZWN1cmVkIHJlc3BvbnNlcyBhbmQgYW5vdGhlciBmb3IgdW5z ZWN1cmVkIG9uZXMuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90Oztjb2xvcjojMUY0OTdEIj5UaGUgYWJvdmUgaXNzdWVzIHRvZ2V0aGVyIHNlZW0gcXVp dGUgc2VyaW91cy4mbmJzcDsgUGVyaGFwcyBhbiBhbHRlcm5hdGl2ZSBzb2x1dGlvbiBpcyBiZXR0 ZXIgaW4gd2hpY2ggdGhlIGdyb3VwIGtleSBpcyB1c2VkIHRvIERUTFMtcHJvdGVjdCB0aGUgcmVz cG9uc2UuIE9yIGFsdGVybmF0aXZlbHksDQogYSBzZXBhcmF0ZSDigJxyZWNlaXZlcnPigJ0gc2Vj dXJpdHkgZ3JvdXAgY291bGQgYmUgY3JlYXRlZCB0aGF0IGFsbG93cyBlYWNoIHJlY2VpdmVyIHRv IHJlc3BvbmQgYW5kIHRoZSBzZW5kZXIgdG8gcmVhZCB0aGUgcmVzcG9uc2UsIGJ1dCBub2RlcyBv dXRzaWRlIHRoZSBzZW5kZXIvcmVjZWl2ZXIgZ3JvdXBzIGNhbm5vdCBhY2Nlc3MgdGhlIG1lc3Nh Z2VzIHRodXMgZXhjaGFuZ2VkLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3Nh bnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+T24gcG9pbnQgMi4gSSBhZ3JlZS48bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5 N0QiPkVza288bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48 L3NwYW4+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29s aWQgI0I1QzRERiAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Gcm9tOjwvc3Bhbj48L2I+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiBSYWhtYW4sIEFrYmFyIFs8YSBocmVmPSJtYWls dG86QWtiYXIuUmFobWFuQEludGVyRGlnaXRhbC5jb20iPm1haWx0bzpBa2Jhci5SYWhtYW5ASW50 ZXJEaWdpdGFsLmNvbTwvYT5dDQo8YnI+DQo8Yj5TZW50OjwvYj4gTW9uZGF5LCBNYXkgMTksIDIw MTQgMjI6MzQ8YnI+DQo8Yj5Ubzo8L2I+IERpamssIEVza288YnI+DQo8Yj5DYzo8L2I+IEt1bWFy LCBTYW5kZWVwOyA8YSBocmVmPSJtYWlsdG86ZHRscy1pb3RAaWV0Zi5vcmciPmR0bHMtaW90QGll dGYub3JnPC9hPjsgTWFyY28gVGlsb2NhPGJyPg0KPGI+U3ViamVjdDo8L2I+IFJFOiBbRHRscy1p b3RdIFVuaWNhc3QgcmVzcG9uc2VzIGluIGRyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJp dHktMDU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+SGkgRXNrbyw8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0Qi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5UaGFua3MgZm9yIHRoZSBmZWVk YmFjay48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mZ3Q7 IEl0IHNlZW1zIHVuc2VjdXJlZCByZXNwb25zZXMgYXJlIG5vdCBwb3NzaWJsZSB3aXRob3V0IGFs dGVyaW5nIHRoZSBDb0FQIHJlcXVlc3QvcmVzcG9uc2UgbWF0Y2hpbmcgcnVsZXMuPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdE Ij5ZZXMsIGJ1dCBhcyB5b3Uga25vdyB0aGUgY3VycmVudCBjb3JlLWNvYXAtMTggdGV4dCBpcyBv YnZpb3VzbHkgd3JpdHRlbiBmb3IgdW5pY2FzdCBEVExTIHJlcXVlc3QgYW5kIHJlc3BvbnNlLiZu YnNwOyBXZSBhcmUgbm8gbG9uZ2VyIGRlYWxpbmcgd2l0aCB0aGF0IGFzIHdlIGhhdmUNCiBtdWx0 aWNhc3QgRFRMUyByZXF1ZXN0LCBhbmQgcG90ZW50aWFsbHkgdW5pY2FzdCBEVExTIHJlc3BvbnNl LiZuYnNwOyAoVGhhdCB3YXMgdGhlIG9yaWdpbmFsIHZhbHVlIGluIHRoZSBxdWVzdGlvbiBhc2tl ZCBieSBNYXJjbykuJm5ic3A7IEJ1dCBJIGRvIGFncmVlIHdpdGggeW91ciBwb2ludCB0aGF0IHRo ZSBiYXNlIGNvcmUtY29hcC0xOCBvcGVyYXRpb24gd291bGQgYmUgYWZmZWN0ZWQsIGFuZCB0aGEg Jm5ic3A7dGhpcyBjaGFuZ2UgbXVzdCBiZSBjbGVhcmx5IGNhcHR1cmVkLg0KICZuYnNwOyZuYnNw O0FuZCBJIGd1ZXNzIDxhIGhyZWY9Imh0dHA6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWtl b2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDcjc2VjdGlvbi00LjUiPg0KaHR0cDovL3Rvb2xz LmlldGYub3JnL2h0bWwvZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNyNzZWN0 aW9uLTQuNTwvYT4gd291bGQgYmUgdGhlIG5vcm1hdGl2ZSB1cGRhdGUuJm5ic3A7IFNvIHdlIGhh dmUgdG8gbWFrZSB0aGUgdGV4dCBjbGVhci4mbmJzcDsgRG8geW91IHRoaW5rIHdlIG5lZWQgdG8g ZXhwbGFpbiBpdCBiZXR0ZXI/PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 IzFGNDk3RCI+LSZndDsgQ29tcGFyZSB0byBzZWN0aW9uIDkuMS4xIG9mIGNvcmUtY29hcDog4oCc VGhlIGVuZHBvaW50IGFjdGluZyBhcyB0aGUgQ29BUCBjbGllbnQgc2hvdWxkIGFsc28gYWN0IGFz IHRoZSBEVExTIGNsaWVudC4mbmJzcDsgSXQgc2hvdWxkIGluaXRpYXRlIGEgc2Vzc2lvbiB0byB0 aGUgc2VydmVyDQogb24gdGhlIGFwcHJvcHJpYXRlIHBvcnQu4oCdPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2Nv bG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5BZ2Fpbiwg SSB1bmRlcnN0b29kIHRoYXQgdGhpcyB3YXMgb3JpZ2luYWxseSB3cml0dGVuIGZyb20gdGhlIHBv aW50IG9mIHZpZXcgb2YgYSBub3JtYWwgdW5pY2FzdCBDb0FQIHJlcXVlc3QuJm5ic3A7IE1lYW5p bmcgdGhhdCBhIENvQVAgY2xpZW50IHdvdWxkIGhhdmUgaW5pdGlhbGx5DQogcGVyZm9ybWVkIGEg cmVxdWVzdCAoZS5nLiBHRVQpIGFuZCB0aHVzIHNob3VsZCBiZSB0aGUgb25lIHRoYXQgZGVjaWRl cyBpZiB0aGUgR0VUIHNob3VsZCBiZSBzZWN1cmUgb3Igbm90LiAmbmJzcDtBZ2FpbiB0aGlzIGxv Z2ljIGRvZXMgbm90IGFwcGx5IGRpcmVjdGx5IGZvciB0aGUgbXVsdGljYXN0IGNhc2UgYmVjYXVz ZSB0aGUgaW50ZXJhY3Rpb25zIGFyZSBkaWZmZXJlbnQuJm5ic3A7IFNvIEkgYWdyZWUgdGhhdCB3 ZSBuZWVkIHRvIGV4cGxpY2l0bHkgc3RhdGUNCiBpbiBkcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0 IHRoYXQgd2UgYXJlIGRldmlhdGluZyBmcm9tIHRoZSBvcmlnaW5hbCBjb3JlLWNvYXAtMTggYXBw cm9hY2guPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVv dDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkJlc3QgUmVnYXJkcyw8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0Qi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5Ba2JhcjxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPGRp diBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3BhZGRp bmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90 O3NhbnMtc2VyaWYmcXVvdDsiPkZyb206PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90OyI+IERpamssIEVza28gWzxhIGhyZWY9Im1haWx0bzplc2tvLmRpamtAcGhpbGlwcy5jb20i Pm1haWx0bzplc2tvLmRpamtAcGhpbGlwcy5jb208L2E+XQ0KPGJyPg0KPGI+U2VudDo8L2I+IE1v bmRheSwgTWF5IDE5LCAyMDE0IDEyOjAyIFBNPGJyPg0KPGI+VG86PC9iPiBSYWhtYW4sIEFrYmFy OyBNYXJjbyBUaWxvY2E8YnI+DQo8Yj5DYzo8L2I+IEt1bWFyLCBTYW5kZWVwOyA8YSBocmVmPSJt YWlsdG86ZHRscy1pb3RAaWV0Zi5vcmciPmR0bHMtaW90QGlldGYub3JnPC9hPjxicj4NCjxiPlN1 YmplY3Q6PC9iPiBSRTogW0R0bHMtaW90XSBVbmljYXN0IHJlc3BvbnNlcyBpbiBkcmFmdC1rZW9o LWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA1PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5 N0QiPkhpIEFrYmFyLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+YXBvbG9naWVzIGZvciBteSBsYXRlIGlucHV0ISBPbiB0 aGUgbmV3IHRleHQsIHR3byBwb2ludHMgKHNlZSBiZWxvdykgbWF5IG5lZWQgc29tZSBmdXJ0aGVy IGRpc2N1c3Npb24uIEhlcmUgd2UgZGV2aWF0ZSBmcm9tIHRoZSBzcGlyaXQgb2YgY29yZS1jb2Fw LTE4LCB3aGljaA0KIG1heSBuZWVkIHRvIGJlIHBvaW50ZWQgb3V0IGluIHRoZSB0ZXh0IGV4cGxp Y2l0bHksIGlmIHRoZSBkZXZpYXRpb24gaXMgY29uc2lkZXJlZCBhY2NlcHRhYmxlLjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3 RCI+MS4gVW5zZWN1cmVkIHJlc3BvbnNlczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj7i gJxUaGUgdW5pY2FzdCByZXNwb25zZXMgdG8gYSBEVExTLWJhc2VkIG11bHRpY2FzdCBtZXNzYWdl IG1heSBvcHRpb25hbGx5IGJlIHNlY3VyZeKAnTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdE Ij4tJmd0OyBDb21wYXJlIHRvIHNlY3Rpb24gOS4xLjIgb2YgY29yZS1jb2FwOjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90Oztjb2xvcjojMUY0OTdEIj7igJxUaGlzIG1lYW5zIHRoZSByZXNwb25zZSB0byBhIERUTFMg c2VjdXJlZCByZXF1ZXN0IE1VU1QgYWx3YXlzIGJlIERUTFM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 IzFGNDk3RCI+Jm5ic3A7Jm5ic3A7IHNlY3VyZWQgdXNpbmcgdGhlIHNhbWUgc2VjdXJpdHkgc2Vz c2lvbiBhbmQgZXBvY2guJm5ic3A7IEFueSBhdHRlbXB0IHRvPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyBzdXBwbHkgYSBOb1NlYyByZXNwb25zZSB0byBhIERUTFMg cmVxdWVzdCBzaW1wbHkgZG9lcyBub3QgbWF0Y2ggdGhlPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMx RjQ5N0QiPiZuYnNwOyZuYnNwOyByZXF1ZXN0IGFuZCAodW5sZXNzIGl0IGRvZXMgbWF0Y2ggYW4g dW5yZWxhdGVkIE5vU2VjIHJlcXVlc3QpPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZu YnNwOyZuYnNwOyB0aGVyZWZvcmUgTVVTVCBiZSByZWplY3RlZC7igJw8bzpwPjwvbzpwPjwvc3Bh bj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBw dDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7 Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkl0IHNl ZW1zIHVuc2VjdXJlZCByZXNwb25zZXMgYXJlIG5vdCBwb3NzaWJsZSB3aXRob3V0IGFsdGVyaW5n IHRoZSBDb0FQIHJlcXVlc3QvcmVzcG9uc2UgbWF0Y2hpbmcgcnVsZXMuPG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4yLiBX aG8gaW5pdGlhdGVzIHRoZSBoYW5kc2hha2U8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ 4oCcRWl0aGVyIHRoZSBtdWx0aWNhc3QgbWVzc2FnZSBzZW5kZXIgb3IgbGlzdGVuZXIgbWF5IGlu aXRpYXRlIHRoZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDsmbmJzcDsgdW5p Y2FzdCBEVExTIGhhbmRzaGFrZS4g4oCcPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPi0m Z3Q7IENvbXBhcmUgdG8gc2VjdGlvbiA5LjEuMSBvZiBjb3JlLWNvYXA6PG86cD48L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPuKAnFRoZSBlbmRwb2ludCBhY3RpbmcgYXMgdGhlIENvQVAgY2xpZW50 IHNob3VsZCBhbHNvIGFjdCBhcyB0aGUgRFRMUzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdE Ij4mbmJzcDsmbmJzcDsgY2xpZW50LiZuYnNwOyBJdCBzaG91bGQgaW5pdGlhdGUgYSBzZXNzaW9u IHRvIHRoZSBzZXJ2ZXIgb24gdGhlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNw OyZuYnNwOyBhcHByb3ByaWF0ZSBwb3J0LuKAnTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdE Ij48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+YmVzdCByZWdhcmRzLDxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5Fc2tvPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5 N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3Jk ZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4g MGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90OyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij4gZHRscy1p b3QgWzxhIGhyZWY9Im1haWx0bzpkdGxzLWlvdC1ib3VuY2VzQGlldGYub3JnIj5tYWlsdG86ZHRs cy1pb3QtYm91bmNlc0BpZXRmLm9yZzwvYT5dDQo8Yj5PbiBCZWhhbGYgT2YgPC9iPlJhaG1hbiwg QWtiYXI8YnI+DQo8Yj5TZW50OjwvYj4gRnJpZGF5LCBNYXkgMDksIDIwMTQgMjE6NDA8YnI+DQo8 Yj5Ubzo8L2I+IE1hcmNvIFRpbG9jYTxicj4NCjxiPkNjOjwvYj4gS3VtYXIsIFNhbmRlZXA7IDxh IGhyZWY9Im1haWx0bzpkdGxzLWlvdEBpZXRmLm9yZyI+ZHRscy1pb3RAaWV0Zi5vcmc8L2E+PGJy Pg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbRHRscy1pb3RdIFVuaWNhc3QgcmVzcG9uc2VzIGluIGRy YWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6IzFGNDk3RCI+SGkgTWFyY28sPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29s b3I6IzFGNDk3RCI+V2UgaGF2ZSB1cGRhdGVkIHRoZSBkcmFmdCB0byBjYXB0dXJlIHlvdXIgcmVt YWluaW5nIGNvbW1lbnRzIGJlbG93LiZuYnNwOyBQbGVhc2UgcmV2aWV3IGFuZCB0ZWxsIHVzIGlm IHlvdSBoYXZlIGFueSBvdGhlciBjb21tZW50cy48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3 RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90Oztjb2xvcjojMUY0OTdEIj48YSBocmVmPSJodHRwOi8vdG9vbHMuaWV0Zi5vcmcvaHRtbC9k cmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA3I3NlY3Rpb24tNC41Ij5odHRwOi8v dG9vbHMuaWV0Zi5vcmcvaHRtbC9kcmFmdC1rZW9oLWRpY2UtbXVsdGljYXN0LXNlY3VyaXR5LTA3 I3NlY3Rpb24tNC41PC9hPg0KPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250 LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+NC41LiZuYnNwOyBVbmljYXN0IFJlc3Bv bnNlcyB0byBNdWx0aWNhc3QgTWVzc2FnZXM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTom cXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBJbiBDb0FQLCByZXNwb25z ZXMgdG8gbXVsdGljYXN0IG1lc3NhZ2VzIGFyZSBhbHdheXMgc2VudCBiYWNrIGFzPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNw OyB1bmljYXN0LiZuYnNwOyBUaGF0IGlzLCB0aGUgZ3JvdXAgbWVtYmVycyB0aGF0IHJlY2VpdmUg YSBtdWx0aWNhc3QgbWVzc2FnZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgbWF5IGluZGl2aWR1YWxseSBkZWNpZGUgdG8g c2VuZCAob3Igc3VwcHJlc3MpIGEgdW5pY2FzdCByZXNwb25zZSBhczxvOnA+PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgZGVzY3Jp YmVkIGluIFNlY3Rpb24gMi41IG9mIFtJLUQuaWV0Zi1jb3JlLWdyb3VwY29tbV0uJm5ic3A7IFRo ZSB1bmljYXN0PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPiZuYnNwOyZuYnNwOyByZXNwb25zZXMgdG8gYSBEVExTLWJhc2VkIG11bHRpY2FzdCBt ZXNzYWdlIG1heSBvcHRpb25hbGx5IGJlIHNlY3VyZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IFNwZWNpZmljYWxseSwg dGhlIHVuaWNhc3QgcmVzcG9uc2UgbWF5IGJlIHNlbnQgYmFjayBhcyBhIHVuaWNhc3QgRFRMUzxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJz cDsmbmJzcDsgYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gOS4xIG9mIFtJLUQuaWV0Zi1jb3JlLWNv YXBdLiZuYnNwOyBUaGlzIHJlcXVpcmVzPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyB0aGF0IGEgdW5pY2FzdCBEVExTIGhh bmRzaGFrZSB3YXMgcHJldmlvdXNseSBpbml0aWF0ZWQgYmV0d2VlbiB0aGU8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IG11 bHRpY2FzdCBtZXNzYWdlIHNlbmRlciBhbmQgbGlzdGVuZXIuPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgRWl0aGVy IHRoZSBtdWx0aWNhc3QgbWVzc2FnZSBzZW5kZXIgb3IgbGlzdGVuZXIgbWF5IGluaXRpYXRlIHRo ZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4m bmJzcDsmbmJzcDsgdW5pY2FzdCBEVExTIGhhbmRzaGFrZS4mbmJzcDsgSWYgdGhlIERUTFMgaGFu ZHNoYWtlIHdhcyBpbml0aWF0ZWQgYnkgdGhlPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBtdWx0aWNhc3QgbWVzc2FnZSBz ZW5kZXIsIGl0IHJlcXVpcmVzIHRoYXQgdGhlIHNlbmRlciBiZSBhd2FyZSBvZiB0aGU8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5i c3A7IG1lbWJlcnNoaXAgb2YgdGhlIG11bHRpY2FzdCBncm91cC4mbmJzcDsgVGhpcyBjYW4gYmUg YWNjb21wbGlzaGVkLCBmb3I8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IGV4YW1wbGUsIGFzIGRlc2NyaWJlZCBpbiBTZWN0 aW9uIDIuNiBvZiBbSS1ELmlldGYtY29yZS1jb2FwXS4mbmJzcDsgSWYgdGhlPG86cD48L286cD48 L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBs aXN0ZW5lciBpbml0aWF0ZWQgdGhlIERUTFMgaGFuZHNoYWtlLCBpdCBtYXkgaGF2ZSBkb25lIHNv LCBmb3I8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+Jm5ic3A7Jm5ic3A7IGV4YW1wbGUsIGFmdGVyIHJlY2VpdmluZyBhIG11bHRpY2FzdCBtZXNz YWdlIGZvciB0aGUgZmlyc3QgdGltZS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBJbiB0aGUgZXh0cmVtZSBzY2Vu YXJpbywgYSBtdWx0aWNhc3Qgc2VuZGVyIG1heSBhdHRlbXB0IHRvIGluaXRpYXRlPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNw OyB0aGUgdW5pY2FzdCBEVExTIGhhbmRzaGFrZSB3aXRoIGFsbCwgb3IgYSBzdWJzZXQgb2YsIGtu b3duIGxpc3RlbmVyczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIg TmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsganVzdCBhZnRlciBpdCBzZW5kcyBvdXQgdGhlIERUTFMt YmFzZWQgbXVsdGljYXN0IG1lc3NhZ2UuJm5ic3A7IFRoaXMgbWF5PG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyByZXN1bHQg aW4gdGhlIG11bHRpY2FzdCBzZW5kZXIgaGF2aW5nIHRvIHByb2Nlc3MgdW5pY2FzdCBEVExTPG86 cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNw OyZuYnNwOyBoYW5kc2hha2UgbWVzc2FnZXMgZnJvbSBtdWx0aXBsZSBtdWx0aWNhc3QgbGlzdGVu ZXJzIGluIGEgc2hvcnQ8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVy IE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IHBlcmlvZC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBOb3RlOiBUaGVy ZSBpcyBhbiBvYnZpb3VzIHRpbWluZyBhbmQgcHJvY2Vzc2luZyBsb2FkIGlzc3VlIGZvciB0aGU8 bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5i c3A7Jm5ic3A7IG11bHRpY2FzdCBzZW5kZXIgaW4gdGhlIHNjZW5hcmlvIHdoZXJlIGl0IGF0dGVt cHRzIHRvIGluaXRpYXRlIHRoZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nv dXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgdW5pY2FzdCBEVExTIGhhbmRzaGFrZXMgd2l0 aCBhbGwvc29tZSBvZiBpdHMga25vd24gbGlzdGVuZXJzIGp1c3Q8bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IGFmdGVyIGl0 IHNlbmRzIG91dCB0aGUgRFRMUy1iYXNlZCBtdWx0aWNhc3QgbWVzc2FnZS4mbmJzcDsgSW4gdGhp cyBjYXNlLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1 b3Q7Ij4mbmJzcDsmbmJzcDsgdGhlIHByb2Nlc3NpbmcgbG9hZCBpbiB0aGUgbXVsdGljYXN0IHNl bmRlciAoaS5lLiB1bmljYXN0IERUTFM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IGNsaWVudCkgaXMgcmVkdWNlZCBzb21l d2hhdCBieSB0aGUgZmFjdCB0aGF0IENvQVAgcmVxdWlyZXMgYSBiYWNrLW9mZjxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsg YW5kIHJhbmRvbWl6YXRpb24gb2YgdGhlIHVuaWNhc3QgcmVzcG9uc2UgYnkgdGhlIExlaXN1cmUg dGltZXI8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90 OyI+Jm5ic3A7Jm5ic3A7IG1lY2hhbmlzbSBhcyBkZXNjcmliZWQgaW4gU2VjdGlvbiA4LjIgb2Yg W0ktRC5pZXRmLWNvcmUtY29hcF0uPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPkJlc3QgUmVnYXJkcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3 RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90Oztjb2xvcjojMUY0OTdEIj5Ba2JhcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXY+DQo8ZGl2 IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGlu ZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90OyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7Ij4gZHRscy1pb3QgWzxhIGhyZWY9Im1haWx0bzpkdGxzLWlvdC1ib3VuY2VzQGlldGYub3Jn Ij5tYWlsdG86ZHRscy1pb3QtYm91bmNlc0BpZXRmLm9yZzwvYT5dDQo8Yj5PbiBCZWhhbGYgT2Yg PC9iPlJhaG1hbiwgQWtiYXI8YnI+DQo8Yj5TZW50OjwvYj4gVHVlc2RheSwgTWF5IDA2LCAyMDE0 IDQ6NDQgUE08YnI+DQo8Yj5Ubzo8L2I+IE1hcmNvIFRpbG9jYTxicj4NCjxiPkNjOjwvYj4gS3Vt YXIsIFNhbmRlZXA7IDxhIGhyZWY9Im1haWx0bzpkdGxzLWlvdEBpZXRmLm9yZyI+ZHRscy1pb3RA aWV0Zi5vcmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbRHRscy1pb3RdIFVuaWNhc3Qg cmVzcG9uc2VzIGluIGRyYWZ0LWtlb2gtZGljZS1tdWx0aWNhc3Qtc2VjdXJpdHktMDU8bzpwPjwv bzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+SGkgTWFyY28sPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNw OzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+VGhhbmtzIGZvciByZXZpZXdpbmcgdGhlIHVwZGF0 ZWQgZHJhZnQuJm5ic3A7IEFsc28gaGVyZSBpcyBteSBmZWVkYmFjayB0byB5b3VyIHR3byBuZXcg cXVlc3Rpb25zOjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZndDsxKSBJbiBvcmRlciB0byBwZXJmb3JtIGEgRFRMUyBo YW5kc2hha2UgYmVmb3JlL2FmdGVyIHNlbmRpbmcgYSBtdWx0aWNhc3QgbWVzc2FnZSwgYSBzZW5k ZXI8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZndDsgbm9kZSBzaG91bGQg YmUgYXdhcmUgb2YgdGhlIGdyb3VwIG1lbWJlcnNoaXAsIGVzcGVjaWFsbHkgd2hhdCBhcmUgdGhl IGxpc3RlbmVyIG5vZGVzIGN1cnJlbnRseTxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+Jmd0OyBwcmVzZW50IGluIHRoZSBncm91cC4gT2YgY291cnNlLCBzdWNoIGEgZ3JvdXAg bWVtYmVyc2hpcCBtYXkgY2hhbmdlIG92ZXIgdGltZSwgdXBvbiBuZXcgbm9kZXM8YnI+DQomZ3Q7 am9pbmluZyB0aGUgZ3JvdXAuIEhvd2V2ZXIsIFNlY3Rpb24gMy4xIGluIHRoZSBkcmFmdCBzdGF0 ZXMgdGhhdCAmcXVvdDtBbnkgZGV2aWNlIGNhbiBpbiBwcmluY2lwbGUgZGVjaWRlPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mZ3Q7dG8gbGlzdGVuIHRvIGFueSBJUHY2IG11 bHRpY2FzdCBhZGRyZXNzLiBUaGlzIGFsc28gbWVhbnMgYXBwbGljYXRpb25zIG9uIHRoZSBvdGhl ciBkZXZpY2VzIGRvIG5vdDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jmd0 O2tub3csIG9yIGRvIG5vdCBnZXQgbm90aWZpZWQsIHdoZW4gbmV3IGxpc3RlbmVycyBqb2luIHRo ZSBuZXR3b3JrLiZxdW90Oy4gQ291bGRuJ3QgdGhpcyBiZSBhIHByb2JsZW08bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZndDtmb3IgdGhlIHN1Z2dlc3RlZCBhcHByb2FjaD88 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPlllcywgaW4gcHJpbmNpcGxlLCBhbnkgZGV2aWNlIGNhbiBkZWNpZGUgdG8gbGlz dGVuIGZvciBhbnkgSVB2NiBtdWx0aWNhc3QgYWRkcmVzcy4mbmJzcDsgQnV0IGluIHByYWN0aWNl IG9mIGNvdXJzZSB0aGVyZSBhcmUgSVB2NiBtdWx0aWNhc3QgcmVsYXRlZCBwcm90b2NvbHMgZm9y DQogcm91dGluZy9qb2luaW5nIHRoYXQgZGljdGF0ZSB3aG8gY2FuIDx1PnN1Y2Nlc3NmdWxseTwv dT4gbGlzdGVuIGZvciBhbmQgcmVjZWl2ZSBhbiBJUHY2IG11bHRpY2FzdCBwYWNrZXQuJm5ic3A7 IEZvciBleGFtcGxlLCB1bmxlc3MgYSBkZXZpY2UgdXNlcyBhIHByb3RvY29sIGxpa2UgTUxEIHRv IGV4cGxpY2l0bHkgam9pbiBhIG11bHRpY2FzdCBncm91cCwgdGhlIG5ldHdvcmsgd2lsbCBuZXZl ciByb3V0ZSB0aGUgbXVsdGljYXN0IHBhY2tldHMgb2YgaW50ZXJlc3QNCiB0byB0aGUgc3ViLW5l dHdvcmsgb2YgdGhlIGRldmljZS4mbmJzcDsgVGhpcyBpcyBhbGwgZXhwbGFpbmVkIGF0IGEgaGln aCBsZXZlbCBpbiB0aGUgSS5ELmdyb3VwY29tbSByZWZlcmVuY2UgKDxhIGhyZWY9Imh0dHA6Ly90 b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtY29yZS1ncm91cGNvbW0tMTgjc2VjdGlvbi0y LjEiPmh0dHA6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWlldGYtY29yZS1ncm91cGNvbW0t MTgjc2VjdGlvbi0yLjE8L2E+ICkNCiAuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxv OnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5UaGUgb3RoZXIgcGFydCBvZiB5b3Vy IHF1ZXN0aW9uIHJlZmVycyB0byBob3cgZG9lcyB0aGUgc2VuZGVyIG5vZGUga25vdyB3aG8gaXMg cGFydCBvZiB0aGUgZ3JvdXAuJm5ic3A7IFlvdSBhcmUgY29ycmVjdCB0aGF0IGl0IGlzIHZlcnkg ZGlmZmljdWx0IHRvIGtub3cgcHJlY2lzZWx5DQogdGhlIG1lbWJlcnNoaXAgb2YgYSBncm91cC4m bmJzcDsgVGhhdCBpcyB3aHkgd2UgaGFkIHRoZSBzdWJ0bGUgcmVmZXJlbmNlIHRvIOKAnGtub3du IGxpc3RlbmVyc+KAnS4mbmJzcDsgSG93IHlvdSBhY3R1YWxseSBrbm93IHRoZSBtZW1iZXJzaGlw IGRlcGVuZHMgb24gdGhlIG1peCBvZiBwcm90b2NvbHMgdXNlZCAoYW5kIGlzIGluIGZhY3QgaXQg aXMgbm90IGFsd2F5cyBwb3NzaWJsZSB0byBrbm93IGFsbCB0aGUgbWVtYmVycyBhY2N1cmF0ZWx5 KS4mbmJzcDsgQnV0IGZvciBDb0FQDQogZ3JvdXAgbWVtYmVyIGRpc2NvdmVyeSwgdGhlcmUgaXMg Jm5ic3A7YWdhaW4gZ3VpZGFuY2UgZ2l2ZW4gaW4gdGhlIEkuRC5ncm91cGNvbW0gcmVmZXJlbmNl IChzcGVjaWZpY2FsbHkgaW4NCjxhIGhyZWY9Imh0dHA6Ly90b29scy5pZXRmLm9yZy9odG1sL2Ry YWZ0LWlldGYtY29yZS1ncm91cGNvbW0tMTgjc2VjdGlvbi0yLjYiPmh0dHA6Ly90b29scy5pZXRm Lm9yZy9odG1sL2RyYWZ0LWlldGYtY29yZS1ncm91cGNvbW0tMTgjc2VjdGlvbi0yLjY8L2E+ICku Jm5ic3A7IFdlIGNhbiBtYWtlIHRoaXMgcG9pbnQgYSBiaXQgbW9yZSBleHBsaWNpdCBpbiB0aGUg bmV4dCB1cGRhdGUgb2Ygb3VyIEktRC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxv OnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZndDsyKSBBbiBhbHRlcm5hdGl2ZSBhcHByb2FjaCB0byB0 aGUgb25lIHN1Z2dlc3RlZCBpbiBTZWN0aW9uIDQuNSBtYXkgY29uc2lzdCBpbiBhIGxpc3RlbmVy IG5vZGUgZXN0YWJsaXNoaW5nPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4m Z3Q7IGEgdW5pY2FzdCBEVExTIHNlc3Npb24gKGkuZS4gc3RhcnRpbmcgYSBEVExTIGhhbmRzaGFr ZSkgd2l0aCB0aGUgc2VuZGVyIG5vZGUsIHVwb24gcmVjZWl2aW5nIGEgbXVsdGljYXN0PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mZ3Q7IG1lc3NhZ2UgZm9yIHRoZSBmaXJz dCB0aW1lLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtz YW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj5ZZXMsIGdvb2QgcG9pbnQhJm5ic3A7IFdlIGNhbiBhZGQgdGhpcyB0byB0aGUg SS1EIGluIG91ciBuZXh0IHVwZGF0ZS4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPkJlc3QgUmVnYXJkcyw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3 RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZx dW90Oztjb2xvcjojMUY0OTdEIj5Ba2JhcjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZx dW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7 O2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Gcm9tOjwvc3Bhbj48L2I+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1 b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDsiPiBNYXJjbyBUaWxvY2EgWzxhIGhyZWY9Im1haWx0 bzptYXJjb0BzaWNzLnNlIj5tYWlsdG86bWFyY29Ac2ljcy5zZTwvYT5dDQo8YnI+DQo8Yj5TZW50 OjwvYj4gVHVlc2RheSwgTWF5IDA2LCAyMDE0IDEyOjMyIFBNPGJyPg0KPGI+VG86PC9iPiBSYWht YW4sIEFrYmFyPGJyPg0KPGI+Q2M6PC9iPiBLdW1hciwgU2FuZGVlcDsgPGEgaHJlZj0ibWFpbHRv OmR0bHMtaW90QGlldGYub3JnIj5kdGxzLWlvdEBpZXRmLm9yZzwvYT48YnI+DQo8Yj5TdWJqZWN0 OjwvYj4gUmU6IFtEdGxzLWlvdF0gVW5pY2FzdCByZXNwb25zZXMgaW4gZHJhZnQta2VvaC1kaWNl LW11bHRpY2FzdC1zZWN1cml0eS0wNTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPkhlbGxvIEFrYmFyLDxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+VGhhbmtzIGZvciBoYXZpbmcgY29uc2lkZXJlZCBteSBxdWVzdGlvbi4gVGhlIG5ldyBT ZWN0aW9uIDQuNSBsb29rcyBmaW5lIHRvIG1lLiBBbHNvLCBJIGhhdmUgdGhlIHR3byBmb2xsb3dp bmcgY29tbWVudHMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjEpIEluIG9yZGVyIHRvIHBlcmZvcm0gYSBEVExTIGhhbmRzaGFrZSBiZWZvcmUv YWZ0ZXIgc2VuZGluZyBhIG11bHRpY2FzdCBtZXNzYWdlLCBhIHNlbmRlciBub2RlIHNob3VsZCBi ZSBhd2FyZSBvZiB0aGUgZ3JvdXAgbWVtYmVyc2hpcCwgZXNwZWNpYWxseSB3aGF0IGFyZSB0aGUg bGlzdGVuZXIgbm9kZXMgY3VycmVudGx5IHByZXNlbnQgaW4gdGhlIGdyb3VwLiBPZiBjb3Vyc2Us IHN1Y2ggYSBncm91cCBtZW1iZXJzaGlwDQogbWF5IGNoYW5nZSBvdmVyIHRpbWUsIHVwb24gbmV3 IG5vZGVzIGpvaW5pbmcgdGhlIGdyb3VwLiBIb3dldmVyLCBTZWN0aW9uIDMuMSBpbiB0aGUgZHJh ZnQgc3RhdGVzIHRoYXQgJnF1b3Q7QW55IGRldmljZSBjYW4gaW4gcHJpbmNpcGxlIGRlY2lkZSB0 byBsaXN0ZW4gdG8gYW55IElQdjYgbXVsdGljYXN0IGFkZHJlc3MuIFRoaXMgYWxzbyBtZWFucyBh cHBsaWNhdGlvbnMgb24gdGhlIG90aGVyIGRldmljZXMgZG8gbm90IGtub3csIG9yIGRvIG5vdCBn ZXQNCiBub3RpZmllZCwgd2hlbiBuZXcgbGlzdGVuZXJzIGpvaW4gdGhlIG5ldHdvcmsuJnF1b3Q7 LiBDb3VsZG4ndCB0aGlzIGJlIGEgcHJvYmxlbSBmb3IgdGhlIHN1Z2dlc3RlZCBhcHByb2FjaD88 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Mikg QW4gYWx0ZXJuYXRpdmUgYXBwcm9hY2ggdG8gdGhlIG9uZSBzdWdnZXN0ZWQgaW4gU2VjdGlvbiA0 LjUgbWF5IGNvbnNpc3QgaW4gYSBsaXN0ZW5lciBub2RlIGVzdGFibGlzaGluZyBhIHVuaWNhc3Qg RFRMUyBzZXNzaW9uIChpLmUuIHN0YXJ0aW5nIGEgRFRMUyBoYW5kc2hha2UpIHdpdGggdGhlIHNl bmRlciBub2RlLCB1cG9uIHJlY2VpdmluZyBhIG11bHRpY2FzdCBtZXNzYWdlIGZvciB0aGUgZmly c3QgdGltZS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+QmVzdCByZWdhcmRzLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+TWFyY288bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0 Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiA1 IE1heSAyMDE0IDIzOjQ1LCBSYWhtYW4sIEFrYmFyICZsdDs8YSBocmVmPSJtYWlsdG86QWtiYXIu UmFobWFuQGludGVyZGlnaXRhbC5jb20iIHRhcmdldD0iX2JsYW5rIj5Ba2Jhci5SYWhtYW5AaW50 ZXJkaWdpdGFsLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj5IaSBNYXJjbyw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJz cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5U aGUgYXV0aG9ycyBoYXZlIG1hZGUgYW4gdXBkYXRlIHRvIHRoZSBkcmFmdCB0byBhZGRyZXNzIGZ1 bGx5IHlvdXIgZ29vZCBxdWVzdGlvbiByZWdhcmRpbmcgaG93IHRvDQogaGFuZGxlIHRoZSB1bmlj YXN0IHJlc3BvbnNlcyB0byB0aGUgbXVsdGljYXN0IHJlc3BvbnNlLiZuYnNwOyBTcGVjaWZpY2Fs bHksIHBsZWFzZSByZXZpZXcgdGhlIG5ldyBzZWN0aW9uIDQuNSBhbmQgdGVsbCB1cyBpZiB5b3Ug aGF2ZSBhbnkgbW9yZSBxdWVzdGlvbnM6PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+ Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYm cXVvdDs7Y29sb3I6IzFGNDk3RCI+PGEgaHJlZj0iaHR0cDovL3Rvb2xzLmlldGYub3JnL2h0bWwv ZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNiNzZWN0aW9uLTQuNSIgdGFyZ2V0 PSJfYmxhbmsiPmh0dHA6Ly90b29scy5pZXRmLm9yZy9odG1sL2RyYWZ0LWtlb2gtZGljZS1tdWx0 aWNhc3Qtc2VjdXJpdHktMDYjc2VjdGlvbi00LjU8L2E+PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6 IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90OyI+NC41LiZuYnNwOyBVbmljYXN0IFJlc3BvbnNlcyB0byBNdWx0aWNhc3Qg TWVzc2FnZXM8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgSW4gQ29BUCwgcmVzcG9uc2VzIHRvIG11bHRpY2Fz dCBtZXNzYWdlcyBhcmUgYWx3YXlzIHNlbnQgYmFjayBhczwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyB1bmljYXN0LiZu YnNwOyBUaGF0IGlzLCB0aGUgZ3JvdXAgbWVtYmVycyB0aGF0IHJlY2VpdmUgYSBtdWx0aWNhc3Qg bWVzc2FnZTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcm cXVvdDsiPiZuYnNwOyZuYnNwOyBtYXkgaW5kaXZpZHVhbGx5IGRlY2lkZSB0byBzZW5kIChvciBz dXBwcmVzcykgYSB1bmljYXN0IHJlc3BvbnNlIGFzPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IGRlc2NyaWJlZCBpbiBT ZWN0aW9uIDIuNSBvZiBbSS1ELmlldGYtY29yZS1ncm91cGNvbW1dLiZuYnNwOyBUaGUgdW5pY2Fz dDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsi PiZuYnNwOyZuYnNwOyByZXNwb25zZXMgdG8gYSBEVExTLWJhc2VkIG11bHRpY2FzdCBtZXNzYWdl IG1heSBvcHRpb25hbGx5IGJlIHNlY3VyZS48L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgU3BlY2lmaWNhbGx5LCB0aGUg dW5pY2FzdCByZXNwb25zZSBtYXkgYmUgc2VudCBiYWNrIGFzIGEgdW5pY2FzdCBEVExTPC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7 Jm5ic3A7IGFzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDkuMSBvZiBbSS1ELmlldGYtY29yZS1jb2Fw XS4mbmJzcDsgVGhpcyByZXF1aXJlczwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyB0aGF0IGEgdW5pY2FzdCBEVExTIGhh bmRzaGFrZSB3YXMgcHJldmlvdXNseSBpbml0aWF0ZWQgYmV0d2VlbiB0aGU8L3NwYW4+PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0 OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsg bXVsdGljYXN0IG1lc3NhZ2Ugc2VuZGVyIGFuZCBsaXN0ZW5lci4mbmJzcDsgSW4gdGhlIGV4dHJl bWUgc2NlbmFyaW8sIGE8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1 dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJp ZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgbXVsdGljYXN0IHNlbmRlciBtYXkgYXR0ZW1wdCB0 byBpbml0aWF0ZSB0aGUgdW5pY2FzdCBEVExTIGhhbmRzaGFrZTwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyB3aXRoIGFs bCBvciBhIHN1YnNldCBvZiBrbm93biBsaXN0ZW5lcnMganVzdCBiZWZvcmUgb3IganVzdCBhZnRl ciBpdDwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPiZuYnNwOyZuYnNwOyBzZW5kcyBvdXQgdGhlIERUTFMtYmFzZWQgbXVsdGljYXN0IG1lc3Nh Z2UuJm5ic3A7IFRoaXMgbWF5IHJlc3VsdCBpbiB0aGU8L3NwYW4+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgbXVsdGljYXN0IHNl bmRlciAoaS5lLiB1bmljYXN0IERUTFMgY2xpZW50KSBoYXZpbmcgdG8gcHJvY2VzcyB1bmljYXN0 PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+ Jm5ic3A7Jm5ic3A7IERUTFMgaGFuZHNoYWtlIG1lc3NhZ2VzIGZyb20gbXVsdGlwbGUgbXVsdGlj YXN0IGxpc3RlbmVycyAoaS5lLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyB1bmljYXN0IERUTFMgc2VydmVycykgaW4g YSBzaG9ydCBwZXJpb2QuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3Vy aWVyIE5ldyZxdW90OyI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVv dDtDb3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IE5vdGU6IFRoZXJlIGlzIGFuIG9idmlv dXMgdGltaW5nIGFuZCBwcm9jZXNzaW5nIGxvYWQgaXNzdWUgZm9yIHRoZTwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBt dWx0aWNhc3Qgc2VuZGVyIGluIHRoZSBzY2VuYXJpbyB3aGVyZSBpdCBhdHRlbXB0cyB0byBpbml0 aWF0ZSB0aGU8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NvdXJpZXIgTmV3 JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgdW5pY2FzdCBEVExTIGhhbmRzaGFrZXMgd2l0aCBhbGwvc29t ZSBvZiBpdHMga25vd24gbGlzdGVuZXJzIGp1c3Q8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NvdXJpZXIgTmV3JnF1b3Q7Ij4mbmJzcDsmbmJzcDsgYWZ0ZXIgaXQgc2VuZHMg b3V0IHRoZSBEVExTLWJhc2VkIG11bHRpY2FzdCBtZXNzYWdlLiZuYnNwOyBJbiB0aGlzIGNhc2Us PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtDb3VyaWVyIE5ldyZxdW90OyI+ Jm5ic3A7Jm5ic3A7IHRoZSBwcm9jZXNzaW5nIGxvYWQgaW4gdGhlIG11bHRpY2FzdCBzZW5kZXIg KGkuZS4gdW5pY2FzdCBEVExTPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtD b3VyaWVyIE5ldyZxdW90OyI+Jm5ic3A7Jm5ic3A7IGNsaWVudCkgaXMgcmVkdWNlZCBzb21ld2hh dCBieSB0aGUgZmFjdCB0aGF0IENvQVAgcmVxdWlyZXMgYSBiYWNrLW9mZjwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOyZuYnNwOyBh bmQgcmFuZG9taXphdGlvbiBvZiB0aGUgdW5pY2FzdCByZXNwb25zZSBieSB0aGUgTGVpc3VyZSB0 aW1lcjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q291cmllciBOZXcmcXVv dDsiPiZuYnNwOyZuYnNwOyBtZWNoYW5pc20gYXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gOC4yIG9m IFtJLUQuaWV0Zi1jb3JlLWNvYXBdLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q291cmllciBOZXcmcXVvdDsiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNs YXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2lu LWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5 N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMx RjQ5N0QiPkJlc3QgUmVnYXJkcyw8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJz cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1 dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90 Oztjb2xvcjojMUY0OTdEIj5Ba2Jhcjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZu YnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8 ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFk ZGluZzozLjBwdCAwaW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LCZxdW90O3NhbnMtc2Vy aWYmcXVvdDsiPiBkdGxzLWlvdCBbbWFpbHRvOjxhIGhyZWY9Im1haWx0bzpkdGxzLWlvdC1ib3Vu Y2VzQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+ZHRscy1pb3QtYm91bmNlc0BpZXRmLm9yZzwv YT5dDQo8Yj5PbiBCZWhhbGYgT2YgPC9iPkt1bWFyLCBTYW5kZWVwPGJyPg0KPGI+U2VudDo8L2I+ IFdlZG5lc2RheSwgQXByaWwgMDIsIDIwMTQgMzo0NyBBTTxicj4NCjxiPlRvOjwvYj4gTWFyY28g VGlsb2NhOyA8YSBocmVmPSJtYWlsdG86ZHRscy1pb3RAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5r Ij5kdGxzLWlvdEBpZXRmLm9yZzwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtEdGxzLWlv dF0gVW5pY2FzdCByZXNwb25zZXMgaW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0 eS0wNTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0 b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5I aSBNYXJjbzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxl PSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPlRoZSBkcmFmdCBvbmx5IGFkZHJlc3NlcyB0aGUgcHJvdGVj dGlvbiBvZiBtdWx0aWNhc3QgdHJhZmZpYy4gSWYgdW5pY2FzdCByZXNwb25zZXMgYXJlIGV4cGVj dGVkIGFuZA0KIGlmIHByb3RlY3Rpb24gaXMgcmVxdWlyZWQgZm9yIHN1Y2ggbWVzc2FnZXMsIHRo ZW4gZXhpc3RpbmcgdW5pY2FzdCBwcm90ZWN0aW9uIG1lY2hhbmlzbXMgYmFzZWQgb24gRFRMUyBh cyBzdWdnZXN0ZWQgaW4gZHJhZnQtaWV0Zi1jb3JlLWNvYXAtMTggc2hvdWxkIGJlIHVzZWQuIFBy b3RlY3Rpb24gb2YgYWxsIHVuaWNhc3QgbWVzc2FnZXMgc2hvdWxkIGJlIHRyZWF0ZWQgYXMgd291 bGQgYmUgZG9uZSBub3JtYWxseS4NCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZu YnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkhvcGUgdGhhdCBhbnN3ZXJzIHlv dXIgcXVlc3Rpb24uPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIg c3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRv Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFu PjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+UmVnYXJkczwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPlNhbmRlZXANCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNw Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1s ZWZ0OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCI+DQo8ZGl2Pg0K PGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjQjVDNERGIDEuMHB0O3Bh ZGRpbmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48Yj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDss JnF1b3Q7c2Fucy1zZXJpZiZxdW90OyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNl cmlmJnF1b3Q7Ij4gZHRscy1pb3QgWzxhIGhyZWY9Im1haWx0bzpkdGxzLWlvdC1ib3VuY2VzQGll dGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+bWFpbHRvOmR0bHMtaW90LWJvdW5jZXNAaWV0Zi5vcmc8 L2E+XQ0KPGI+T24gQmVoYWxmIE9mIDwvYj5NYXJjbyBUaWxvY2E8YnI+DQo8Yj5TZW50OjwvYj4g VHVlc2RheSwgQXByaWwgMDEsIDIwMTQgNjozNSBQTTxicj4NCjxiPlRvOjwvYj4gPGEgaHJlZj0i bWFpbHRvOmR0bHMtaW90QGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+ZHRscy1pb3RAaWV0Zi5v cmc8L2E+PGJyPg0KPGI+U3ViamVjdDo8L2I+IFtEdGxzLWlvdF0gVW5pY2FzdCByZXNwb25zZXMg aW4gZHJhZnQta2VvaC1kaWNlLW11bHRpY2FzdC1zZWN1cml0eS0wNTwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1h cmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+ PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkRlYXIgYWxs LDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+QXMgdG8gcG9zc2libGUgcmVzcG9uc2VzIHRvIG11bHRpY2FzdCByZXF1ZXN0cywgU2VjdGlv biAyLjEgc3RhdGVzIHRoYXQgdGhleSBhcmUgc2VudCBiYWNrIGluIHVuaWNhc3QuIFRoZW4sIG5v IGZ1cnRoZXIgZGV0YWlscyBhcmUgcHJvdmlkZWQgYWJvdXQgdGhlaXIgcHJvdGVjdGlvbi48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPkFy ZSBzdWNoIHJlc3BvbnNlcyBzdXBwb3NlZCB0byBiZSBwcm90ZWN0ZWQgdGhyb3VnaCBhICZxdW90 O3JlZ3VsYXImcXVvdDsgRFRMUyBzZXNzaW9uLCB3aGljaCBtdXN0IGJlIChvciBoYXMgcHJldmlv dXNseSBiZWVuKSBlc3RhYmxpc2hlZCBiZXR3ZWVuIHRoZSBzZW5kZXIgYW5kIGxpc3RlbmVyPzxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9 Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJz cDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0 eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+ Q2hlZXJzLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDph dXRvIj5NYXJjbzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRv bS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1i b3R0b20tYWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 ZGl2IGNsYXNzPSJNc29Ob3JtYWwiIGFsaWduPSJjZW50ZXIiIHN0eWxlPSJ0ZXh0LWFsaWduOmNl bnRlciI+DQo8aHIgc2l6ZT0iMiIgd2lkdGg9IjEwMCUiIGFsaWduPSJjZW50ZXIiPg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNv LW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny41cHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7QXJpYWwmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjpn cmF5Ij5UaGUgaW5mb3JtYXRpb24gY29udGFpbmVkIGluIHRoaXMgbWVzc2FnZSBtYXkgYmUgY29u ZmlkZW50aWFsIGFuZCBsZWdhbGx5IHByb3RlY3RlZCB1bmRlciBhcHBsaWNhYmxlIGxhdy4NCiBU aGUgbWVzc2FnZSBpcyBpbnRlbmRlZCBzb2xlbHkgZm9yIHRoZSBhZGRyZXNzZWUocykuIElmIHlv dSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHlvdSBhcmUgaGVyZWJ5IG5vdGlmaWVk IHRoYXQgYW55IHVzZSwgZm9yd2FyZGluZywgZGlzc2VtaW5hdGlvbiwgb3IgcmVwcm9kdWN0aW9u IG9mIHRoaXMgbWVzc2FnZSBpcyBzdHJpY3RseSBwcm9oaWJpdGVkIGFuZCBtYXkgYmUgdW5sYXdm dWwuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZA0KIHJlY2lwaWVudCwgcGxlYXNlIGNvbnRh Y3QgdGhlIHNlbmRlciBieSByZXR1cm4gZS1tYWlsIGFuZCBkZXN0cm95IGFsbCBjb3BpZXMgb2Yg dGhlIG9yaWdpbmFsIG1lc3NhZ2UuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_031DD135F9160444ABBE3B0C36CED61836DA119DAMSPRD9003MB066_-- From nobody Fri May 23 04:06:28 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 527C31A047C for ; Fri, 23 May 2014 04:06:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.551 X-Spam-Level: X-Spam-Status: No, score=-1.551 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_DE=0.35, SPF_HELO_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mlWM99PXTZtZ for ; Fri, 23 May 2014 04:06:25 -0700 (PDT) Received: from informatik.uni-bremen.de (mailhost.informatik.uni-bremen.de [IPv6:2001:638:708:30c9::12]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A25001A0479 for ; Fri, 23 May 2014 04:06:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at informatik.uni-bremen.de Received: from smtp-fb3.informatik.uni-bremen.de (smtp-fb3.informatik.uni-bremen.de [134.102.224.120]) by informatik.uni-bremen.de (8.14.5/8.14.5) with ESMTP id s4NB6IaA008677; Fri, 23 May 2014 13:06:18 +0200 (CEST) Received: from eduroam-pool7-1947.wlan.uni-bremen.de (eduroam-pool7-1947.wlan.uni-bremen.de [134.102.119.155]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtp-fb3.informatik.uni-bremen.de (Postfix) with ESMTPSA id C6BB61A0D; Fri, 23 May 2014 13:06:17 +0200 (CEST) Content-Type: text/plain; charset=utf-8 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.2\)) From: Carsten Bormann In-Reply-To: Date: Fri, 23 May 2014 13:06:17 +0200 X-Mao-Original-Outgoing-Id: 422535977.148249-e0c9397a13d1bc33a15432d05e290860 Content-Transfer-Encoding: quoted-printable Message-Id: <1F079ADF-51BE-491A-94A2-3FE6D1F12086@tzi.org> References: <031DD135F9160444ABBE3B0C36CED61836D7A1E1@AMSPRD9003MB066.MGDPHG.emi.philips.com> <031DD135F9160444ABBE3B0C36CED61836D7B49E@AMSPRD9003MB066.MGDPHG.emi.philips.com> <031DD135F9160444ABBE3B0C36CED61836D88438@AMSPRD9003MB066.MGDPHG.emi.philips.com> <537DFFB6.50608@nthpermutation.com> To: Zach Shelby X-Mailer: Apple Mail (2.1878.2) Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/CXIC7zKrkva3Dgr8EhEclnV648U Cc: "dtls-iot@ietf.org" , Michael StJohns Subject: Re: [Dtls-iot] Unicast responses in draft-keoh-dice-multicast-security-05 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 May 2014 11:06:26 -0000 On 22 May 2014, at 16:23, Zach Shelby wrote: > Personally, I don't think we should allow an unsecured response to a = secure request (even for alternative transports). Right. What we would need to make this work is either 1) A way to send a unicast response within the same channel (security = envelope) that transported the multicast message. E.g. if the multicast = channel is based on a group key, the security for the response would be = based on the group key as well (with the same limitations as to which = security objectives can be achieved). 2) a way to bind the unicast channel used by the response to the = multicast channel used for the request in such a way that the security = objectives can be maintained. This binding can be done 2a) as a part of the channel setup 2b) mediated through some CoAP-level mechanism 2c) both. And this setup can be done: 2=CE=B1) proactively (as part of the membership protocol) 2=CE=B2) reactively (when a response needs to be sent) Gr=C3=BC=C3=9Fe, Carsten From nobody Tue May 27 13:55:22 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1CC0A1A0272 for ; Tue, 27 May 2014 13:55:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OS9UrG_glbLs for ; Tue, 27 May 2014 13:55:18 -0700 (PDT) Received: from mail-ig0-x230.google.com (mail-ig0-x230.google.com [IPv6:2607:f8b0:4001:c05::230]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 838481A0261 for ; Tue, 27 May 2014 13:55:18 -0700 (PDT) Received: by mail-ig0-f176.google.com with SMTP id hl10so1612128igb.3 for ; Tue, 27 May 2014 13:55:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=b8Wgm8IglB1WXDNJqGRsyUw3a76eszUeUQRL6uqvrIE=; b=XPlxpHLtxmkLZ9x3WBfSvX0fvwd2vPv5hyscZXkrywLCACTEzAdGQ1NL+YAF4GJnX4 l/1/nfSY6T5+rIWPx7GzdqQZ7D4zplANbdjW0U/KoFchaGzav26luor0m0AuVBTuq3bw 9yhYKz7MOFPlQiN1t6vUCijkjxnKT0RPFMfkFh14rDmhDXxLFJLZB1tKZYKOjF+hp24i Hc2ll4jbe2b1vXzFg22JpAey2dvKYbxbZGkzHVBa1z5AGDUZXDn83Ww/TvDyDyRouO+I RP5oUbVITuTH9BZ1wD0IfBQcz7ZjB2PyrWm7skQRdAqLH4STLvQuzynnww6KBrogJHNH FpNA== X-Received: by 10.50.118.69 with SMTP id kk5mr36696859igb.10.1401224115095; Tue, 27 May 2014 13:55:15 -0700 (PDT) Received: from [192.168.1.101] (CPE0013100e2c51-CM001cea35caa6.cpe.net.cable.rogers.com. [99.231.3.110]) by mx.google.com with ESMTPSA id h5sm10320143igi.4.2014.05.27.13.55.14 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Tue, 27 May 2014 13:55:14 -0700 (PDT) Message-ID: <5384FBB0.3040900@gmail.com> Date: Tue, 27 May 2014 16:55:12 -0400 From: Rene Struik User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: "dtls-iot@ietf.org" References: <5384FB1C.60109@gmail.com> In-Reply-To: <5384FB1C.60109@gmail.com> X-Forwarded-Message-Id: <5384FB1C.60109@gmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/f62NEubFxNNarqNYKJFcPbJR6wQ Subject: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 May 2014 20:55:20 -0000 Dear Sandeep, Oscar, Sye Loong: I read draft-kumar-dice-dtls-relay-01 a few days ago. In the security considerations section of that draft, you allude to potential denial of services attacks in the context where a one-hop neighbor of a joining node facilitates messaging between that joining node and the network manager potentially many hops away, where the joining node and the network manager act as DTLS Client and DTLS Server, respectively, and where the one-hop neighbor acts as DTLS Relay. You also suggest some measures to thwart/limit denial of service attack risk. I would be curious as to whether you could provide some more insight as to what type of denial of service attack you counter and how the DTLS Relay "on/off switch" would work in practice. How would one detect a potential DoS attack and turn on the "DTLS Relay on/off" knobs to counter an influx of bogus join protocol messages that could be amplified if this would travel to the network manager (in a scenario where both are many hops away from each other)? Since with DTLS, client authentication only happens in the third protocol flow, it seems that by necessity one has to allow three subsequent message flows (key establishment messages from client to server and back, key confirmation message from client to server), without the DTLS Relay element having a mechanism (except for throttling) to cryptographically arbitrage these flows. When does the newbee device get configuration info and, e.g., a routable address assigned? If you could expand on this scenario, that would be great. Best regards, Rene [excerpt from draft-kumar-dice-dtls-relay-01] 5. Security Considerations Additional security considerations need to be taken into account about forwarding of messages from devices through a network to which it has not yet been admitted. This can lead to denial-of-service attacks or misuse of network resources without proper authentication. One way to overcome any large scale misuse of the network is to have a management message from the Controller that initiates already authenticated devices in the network to enter into a DTLS Relay mode. The devices can stay such a Relay mode for a fixed period of time or until the Controller sends a new management message blocking the DTLS Relay mode in all devices in the network. This is often possible since the administrator of the network can be aware when new devices join the network either because of the "Introduction" phase or commissioning phase. Other mechanisms based on IP destination filtering can be applied by the controller to all Relay nodes to avoid misuse of the network resources. -- email: rstruik.ext@gmail.com | Skype: rstruik cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 From nobody Wed May 28 01:15:19 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 32C3F1A0888 for ; Wed, 28 May 2014 01:15:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aRpfECfl3Egc for ; Wed, 28 May 2014 01:15:14 -0700 (PDT) Received: from ch1outboundpool.messaging.microsoft.com (ch1ehsobe004.messaging.microsoft.com [216.32.181.184]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3D54E1A0887 for ; Wed, 28 May 2014 01:15:11 -0700 (PDT) Received: from mail54-ch1-R.bigfish.com (10.43.68.246) by CH1EHSOBE005.bigfish.com (10.43.70.55) with Microsoft SMTP Server id 14.1.225.22; Wed, 28 May 2014 08:15:06 +0000 Received: from mail54-ch1 (localhost [127.0.0.1]) by mail54-ch1-R.bigfish.com (Postfix) with ESMTP id C085B4046D; Wed, 28 May 2014 08:15:06 +0000 (UTC) X-Forefront-Antispam-Report: CIP:206.191.240.53; KIP:(null); UIP:(null); IPV:NLI; H:mail.philips.com; RD:error; EFVD:FOP X-SpamScore: -23 X-BigFish: VPS-23(zz15d6I9371I542I1432I9251I7f52h217bIdd85kzz1f42h208ch1ee6h1de0h1fdah2073h2146h1202h1e76h2189h1d1ah1d2ah21bch1fc6hzz1de098h1033IL8275bh8275dh1de097h186068hz2dh109h2a8h839h944hd25hf0ah1220h1288h12a5h12a9h12bdh137ah13b6h1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h19b5h19ceh1ad9h1b0ah1b2fh2222h224fh1fb3h1d0ch1d2eh1d3fh1dfeh1dffh1e1dh1fe8h1ff5h2216h22d0h2336h2438h2461h2487h24d7h2516h2545h255eh25f6h2605h262fh268bh26d3h27e2h28a1h) Received: from mail54-ch1 (localhost.localdomain [127.0.0.1]) by mail54-ch1 (MessageSwitch) id 1401264905513406_13914; Wed, 28 May 2014 08:15:05 +0000 (UTC) Received: from CH1EHSMHS004.bigfish.com (snatpool2.int.messaging.microsoft.com [10.43.68.232]) by mail54-ch1.bigfish.com (Postfix) with ESMTP id 6F66C2010A; Wed, 28 May 2014 08:15:05 +0000 (UTC) Received: from mail.philips.com (206.191.240.53) by CH1EHSMHS004.bigfish.com (10.43.70.4) with Microsoft SMTP Server (TLS) id 14.16.227.3; Wed, 28 May 2014 08:14:52 +0000 Received: from DBXPRD9003MB059.MGDPHG.emi.philips.com ([169.254.7.68]) by DBXPRD9003HT002.MGDPHG.emi.philips.com ([141.251.25.207]) with mapi id 14.16.0453.000; Wed, 28 May 2014 08:14:19 +0000 From: "Kumar, Sandeep" To: Rene Struik , "dtls-iot@ietf.org" Thread-Topic: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 Thread-Index: AQHPee2eVkH9qMdWkUC/R7gJ3R2jLptU6AwAgAC156A= Date: Wed, 28 May 2014 08:14:19 +0000 Message-ID: References: <5384FB1C.60109@gmail.com> <5384FBB0.3040900@gmail.com> In-Reply-To: <5384FBB0.3040900@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [194.171.252.106] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: philips.com X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn% Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/-y2_UuEA1Inr-vHUOsssrlzS6kY Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 May 2014 08:15:17 -0000 Hi Rene The security considerations section is not completely baked yet. But to ans= wer your questions, we were considering the following two threats: - DoS where a large number of joining messages are sent by rogue nodes eit= her to flood the lowpan or drain the network manager - misuse of the relay functionality to allow a rogue node to setup a DTLS s= ession with a server which is not the network manager The "on/off switch" is just one option for the DoS where the network manage= r can detect too many failed requests and issue a multicast management mess= age (e.g. a CoAP request to a resource) to stop or further throttle joining= messages being accepted by relay nodes for a limited time. Of course as yo= u mentioned, this will be delayed until the third flow of the DTLS protocol= , but the DTLS cookie should provide some additional resistance initially. = In other scenarios, the timing of a joining device is known (e.g. within a = home) and the relays can be asked to switched on and later switched off to = restrict the window of opportunity to the attacker. The idea is that the new device gets the configuration info within the DTLS= session that is created (e.g. as a CoAP request to a resource). How and fo= rmat needs to be defined (either here or somewhere else more generally). There could be more threats and possible countermeasures, let me know if yo= u have more ideas. Regards Sandeep > -----Original Message----- > From: dtls-iot [mailto:dtls-iot-bounces@ietf.org] On Behalf Of Rene Strui= k > Sent: Tuesday, May 27, 2014 10:55 PM > To: dtls-iot@ietf.org > Subject: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 > > Dear Sandeep, Oscar, Sye Loong: > > I read draft-kumar-dice-dtls-relay-01 a few days ago. In the security > considerations section of that draft, you allude to potential denial of s= ervices > attacks in the context where a one-hop neighbor of a joining node facilit= ates > messaging between that joining node and the network manager potentially > many hops away, where the joining node and the network manager act as > DTLS Client and DTLS Server, respectively, and where the one-hop neighbor > acts as DTLS Relay. You also suggest some measures to thwart/limit denial= of > service attack risk. > > I would be curious as to whether you could provide some more insight as t= o > what type of denial of service attack you counter and how the DTLS Relay > "on/off switch" would work in practice. How would one detect a potential > DoS attack and turn on the "DTLS Relay on/off" knobs to counter an influx= of > bogus join protocol messages that could be amplified if this would travel= to > the network manager (in a scenario where both are many hops away from > each other)? Since with DTLS, client authentication only happens in the t= hird > protocol flow, it seems that by necessity one has to allow three subseque= nt > message flows (key establishment messages from client to server and back, > key confirmation message from client to server), without the DTLS Relay > element having a mechanism (except for throttling) to cryptographically > arbitrage these flows. > > When does the newbee device get configuration info and, e.g., a routable > address assigned? > > If you could expand on this scenario, that would be great. > > Best regards, Rene > > > > [excerpt from draft-kumar-dice-dtls-relay-01] 5. Security Considerations > Additional security considerations need to be taken into account about > forwarding of messages from devices through a network to which it has not > yet been admitted. This can lead to denial-of-service attacks or misuse o= f > network resources without proper authentication. One way to overcome any > large scale misuse of the network is to have a management message from > the Controller that initiates already authenticated devices in the networ= k to > enter into a DTLS Relay mode. The devices can stay such a Relay mode for = a > fixed period of time or until the Controller sends a new management > message blocking the DTLS Relay mode in all devices in the network. This = is > often possible since the administrator of the network can be aware when > new devices join the network either because of the "Introduction" phase o= r > commissioning phase. Other mechanisms based on IP destination filtering > can be applied by the controller to all Relay nodes to avoid misuse of th= e > network resources. > > -- > email: rstruik.ext@gmail.com | Skype: rstruik > cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 > > > > > _______________________________________________ > dtls-iot mailing list > dtls-iot@ietf.org > https://www.ietf.org/mailman/listinfo/dtls-iot ________________________________ The information contained in this message may be confidential and legally p= rotected under applicable law. The message is intended solely for the addre= ssee(s). If you are not the intended recipient, you are hereby notified tha= t any use, forwarding, dissemination, or reproduction of this message is st= rictly prohibited and may be unlawful. If you are not the intended recipien= t, please contact the sender by return e-mail and destroy all copies of the= original message. From nobody Wed May 28 08:10:46 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D4E441A017B for ; Wed, 28 May 2014 08:10:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MgY7VhSY6-nh for ; Wed, 28 May 2014 08:10:44 -0700 (PDT) Received: from mail-ig0-x22c.google.com (mail-ig0-x22c.google.com [IPv6:2607:f8b0:4001:c05::22c]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F1A031A0394 for ; Wed, 28 May 2014 08:10:43 -0700 (PDT) Received: by mail-ig0-f172.google.com with SMTP id uy17so2525234igb.17 for ; Wed, 28 May 2014 08:10:40 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=CbX5Uypd/wWUpux7velczYsqu5vu2gZ27jko79nC+OA=; b=CVJdeV0LNnjEpbaifYv1d2aYNQ8iWUdfXctqejjSzVW9e5X+hnSmaJVWUnpYWM0SKK hOjeDQXALg0i7uWTAXIwSEPha2UuMskk0aZSPO+iHiFQR6j6p/jqkxJeG/IARD9s+i0f GDFBPp+nh7krBdlnajXaX6L1Zzy0tOjt6Cdto3WEefYaQrn2ZER0oK0TDjIB31PGMVVq puqjNYgAe/ii7B6zy1z4/iqzlUkUwY0KXCiLCgLnuAHcF7u+tK1IRxsDdwBL8/RHHh+W o88O2q6WWee8yh2A6CuV8DlqUB7JrQoasnXfFuFME3FfWdzHzIFVrYv6tHQ7bRI6FI4p KDCw== X-Received: by 10.50.43.225 with SMTP id z1mr43329863igl.29.1401289840216; Wed, 28 May 2014 08:10:40 -0700 (PDT) Received: from [192.168.1.101] (CPE0013100e2c51-CM001cea35caa6.cpe.net.cable.rogers.com. [99.231.3.110]) by mx.google.com with ESMTPSA id ri2sm16455442igc.1.2014.05.28.08.10.39 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 28 May 2014 08:10:39 -0700 (PDT) Message-ID: <5385FC6C.8080102@gmail.com> Date: Wed, 28 May 2014 11:10:36 -0400 From: Rene Struik User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: "Kumar, Sandeep" , "dtls-iot@ietf.org" References: <5384FB1C.60109@gmail.com> <5384FBB0.3040900@gmail.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/LjchcmkB5YTC7Ui1kq4VvQheRho Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 May 2014 15:10:46 -0000 Hi Sandeep: Thanks for the quick reply. I do understand your second threat, but not how the "on/off switch" would play a role here. According to Section 3.1, with stateful relay, if the joining node knows the DTLS Server's IP address, the DTLS Relay simply forwards this. If the joining node does *not* know the DTLS Server's IP address, the DTLS Relay is forwarding it to any device it likes (which could of course very well be the network manager). So, in the first case the joining node seems in full control as to which device it connects (perhaps, even a device that is not part of the network); in the second case the relaying node determines who it connects the joining node to (which may be fine in communication security scenarios, but perhaps not in application security settings). If you could elaborate on the role of the "on/off switch" in countering these threats that would help. Rene [2nd threat, excerpted from your email as of May 28, 2014, 10:14am NL] - misuse of the relay functionality to allow a rogue node to setup a DTLS session with a server which is not the network manager On 5/28/2014 4:14 AM, Kumar, Sandeep wrote: > Hi Rene > > The security considerations section is not completely baked yet. But to answer your questions, we were considering the following two threats: > - DoS where a large number of joining messages are sent by rogue nodes either to flood the lowpan or drain the network manager > - misuse of the relay functionality to allow a rogue node to setup a DTLS session with a server which is not the network manager > > The "on/off switch" is just one option for the DoS where the network manager can detect too many failed requests and issue a multicast management message (e.g. a CoAP request to a resource) to stop or further throttle joining messages being accepted by relay nodes for a limited time. Of course as you mentioned, this will be delayed until the third flow of the DTLS protocol, but the DTLS cookie should provide some additional resistance initially. In other scenarios, the timing of a joining device is known (e.g. within a home) and the relays can be asked to switched on and later switched off to restrict the window of opportunity to the attacker. > > The idea is that the new device gets the configuration info within the DTLS session that is created (e.g. as a CoAP request to a resource). How and format needs to be defined (either here or somewhere else more generally). > > There could be more threats and possible countermeasures, let me know if you have more ideas. > > Regards > Sandeep > >> -----Original Message----- >> From: dtls-iot [mailto:dtls-iot-bounces@ietf.org] On Behalf Of Rene Struik >> Sent: Tuesday, May 27, 2014 10:55 PM >> To: dtls-iot@ietf.org >> Subject: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 >> >> Dear Sandeep, Oscar, Sye Loong: >> >> I read draft-kumar-dice-dtls-relay-01 a few days ago. In the security >> considerations section of that draft, you allude to potential denial of services >> attacks in the context where a one-hop neighbor of a joining node facilitates >> messaging between that joining node and the network manager potentially >> many hops away, where the joining node and the network manager act as >> DTLS Client and DTLS Server, respectively, and where the one-hop neighbor >> acts as DTLS Relay. You also suggest some measures to thwart/limit denial of >> service attack risk. >> >> I would be curious as to whether you could provide some more insight as to >> what type of denial of service attack you counter and how the DTLS Relay >> "on/off switch" would work in practice. How would one detect a potential >> DoS attack and turn on the "DTLS Relay on/off" knobs to counter an influx of >> bogus join protocol messages that could be amplified if this would travel to >> the network manager (in a scenario where both are many hops away from >> each other)? Since with DTLS, client authentication only happens in the third >> protocol flow, it seems that by necessity one has to allow three subsequent >> message flows (key establishment messages from client to server and back, >> key confirmation message from client to server), without the DTLS Relay >> element having a mechanism (except for throttling) to cryptographically >> arbitrage these flows. >> >> When does the newbee device get configuration info and, e.g., a routable >> address assigned? >> >> If you could expand on this scenario, that would be great. >> >> Best regards, Rene >> >> >> >> [excerpt from draft-kumar-dice-dtls-relay-01] 5. Security Considerations >> Additional security considerations need to be taken into account about >> forwarding of messages from devices through a network to which it has not >> yet been admitted. This can lead to denial-of-service attacks or misuse of >> network resources without proper authentication. One way to overcome any >> large scale misuse of the network is to have a management message from >> the Controller that initiates already authenticated devices in the network to >> enter into a DTLS Relay mode. The devices can stay such a Relay mode for a >> fixed period of time or until the Controller sends a new management >> message blocking the DTLS Relay mode in all devices in the network. This is >> often possible since the administrator of the network can be aware when >> new devices join the network either because of the "Introduction" phase or >> commissioning phase. Other mechanisms based on IP destination filtering >> can be applied by the controller to all Relay nodes to avoid misuse of the >> network resources. >> >> -- >> email: rstruik.ext@gmail.com | Skype: rstruik >> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >> >> >> >> >> _______________________________________________ >> dtls-iot mailing list >> dtls-iot@ietf.org >> https://www.ietf.org/mailman/listinfo/dtls-iot > ________________________________ > The information contained in this message may be confidential and legally protected under applicable law. The message is intended solely for the addressee(s). If you are not the intended recipient, you are hereby notified that any use, forwarding, dissemination, or reproduction of this message is strictly prohibited and may be unlawful. If you are not the intended recipient, please contact the sender by return e-mail and destroy all copies of the original message. > -- email: rstruik.ext@gmail.com | Skype: rstruik cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 From nobody Wed May 28 08:43:51 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9DF531A09F0 for ; Wed, 28 May 2014 08:43:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hp2bTsvzglNQ for ; Wed, 28 May 2014 08:43:48 -0700 (PDT) Received: from ch1outboundpool.messaging.microsoft.com (ch1ehsobe002.messaging.microsoft.com [216.32.181.182]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C08DE1A04BC for ; Wed, 28 May 2014 08:43:47 -0700 (PDT) Received: from mail216-ch1-R.bigfish.com (10.43.68.241) by CH1EHSOBE008.bigfish.com (10.43.70.58) with Microsoft SMTP Server id 14.1.225.22; Wed, 28 May 2014 15:43:43 +0000 Received: from mail216-ch1 (localhost [127.0.0.1]) by mail216-ch1-R.bigfish.com (Postfix) with ESMTP id 70B4246019A; Wed, 28 May 2014 15:43:43 +0000 (UTC) X-Forefront-Antispam-Report: CIP:206.191.240.53; KIP:(null); UIP:(null); IPV:NLI; H:mail.philips.com; RD:error; EFVD:FOP X-SpamScore: -26 X-BigFish: VPS-26(zzbb2dI98dI15d6I9371I542I1432I9251I7f52h1447I217bIdd85kzz1f42h1ee6h1de0h1fdah2073h2146h1202h1e76h2189h1d1ah1d2ah21bch1fc6h208chzz1de098h1033IL8275bh8275dh1de097h186068hz2dh109h2a8h839h944hd25hf0ah1220h1288h12a5h12a9h12bdh137ah13b6h1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h19b5h19ceh1ad9h1b0ah1b2fh2222h224fh1fb3h1d0ch1d2eh1d3fh1dfeh1dffh1e1dh1fe8h1ff5h2216h22d0h2336h2438h2461h2487h24ach24d7h2516h2545h255eh25f6h2605h262fh268bh26d3h27e2h28a1h) Received: from mail216-ch1 (localhost.localdomain [127.0.0.1]) by mail216-ch1 (MessageSwitch) id 1401291821413405_3856; Wed, 28 May 2014 15:43:41 +0000 (UTC) Received: from CH1EHSMHS003.bigfish.com (snatpool1.int.messaging.microsoft.com [10.43.68.246]) by mail216-ch1.bigfish.com (Postfix) with ESMTP id 60BAC480087; Wed, 28 May 2014 15:43:41 +0000 (UTC) Received: from mail.philips.com (206.191.240.53) by CH1EHSMHS003.bigfish.com (10.43.70.3) with Microsoft SMTP Server (TLS) id 14.16.227.3; Wed, 28 May 2014 15:43:40 +0000 Received: from DBXPRD9003MB059.MGDPHG.emi.philips.com ([169.254.7.68]) by DBXPRD9003HT003.MGDPHG.emi.philips.com ([141.251.25.208]) with mapi id 14.16.0453.000; Wed, 28 May 2014 15:43:07 +0000 From: "Kumar, Sandeep" To: Rene Struik , "dtls-iot@ietf.org" Thread-Topic: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 Thread-Index: AQHPee2eVkH9qMdWkUC/R7gJ3R2jLptU6AwAgAC156CAAHwmAIAABKrg Date: Wed, 28 May 2014 15:43:07 +0000 Message-ID: References: <5384FB1C.60109@gmail.com> <5384FBB0.3040900@gmail.com> <5385FC6C.8080102@gmail.com> In-Reply-To: <5385FC6C.8080102@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [194.171.252.106] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: philips.com X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn% Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/AxkXmJA2dMwWwVuLxlD3XZ0jrXg Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 May 2014 15:43:50 -0000 Hi Rene Sorry for the confusion, I did not intend to say that the "on/off" was for = the second threat. It only addresses the first threat. Regarding the second threat, indeed as you mentioned, either the relay node= decides or as in the security considerations " Other mechanisms based on IP destination filtering can be applied by the controller to all Relay n= odes to avoid misuse of the network resources." I agree this is vague on ho= w the filtering parameters can be determined which can be extended in futur= e based on the use cases. Do you have any specific use case where a joining= node decides which network manager to contact? Regards Sandeep > -----Original Message----- > From: Rene Struik [mailto:rstruik.ext@gmail.com] > Sent: Wednesday, May 28, 2014 5:11 PM > To: Kumar, Sandeep; dtls-iot@ietf.org > Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 > > Hi Sandeep: > > Thanks for the quick reply. I do understand your second threat, but not h= ow > the "on/off switch" would play a role here. > > According to Section 3.1, with stateful relay, if the joining node knows = the > DTLS Server's IP address, the DTLS Relay simply forwards this. If the joi= ning > node does *not* know the DTLS Server's IP address, the DTLS Relay is > forwarding it to any device it likes (which could of course very well be = the > network manager). So, in the first case the joining node seems in full co= ntrol > as to which device it connects (perhaps, even a device that is not part o= f the > network); in the second case the relaying node determines who it connects > the joining node to (which may be fine in communication security scenario= s, > but perhaps not in application security settings). > > If you could elaborate on the role of the "on/off switch" in countering t= hese > threats that would help. > > Rene > > [2nd threat, excerpted from your email as of May 28, 2014, 10:14am NL] > > - misuse of the relay functionality to allow a rogue node to setup a DTLS > session with a server which is not the network manager > > > On 5/28/2014 4:14 AM, Kumar, Sandeep wrote: > > Hi Rene > > > > The security considerations section is not completely baked yet. But to > answer your questions, we were considering the following two threats: > > - DoS where a large number of joining messages are sent by rogue > > nodes either to flood the lowpan or drain the network manager > > - misuse of the relay functionality to allow a rogue node to setup a > > DTLS session with a server which is not the network manager > > > > The "on/off switch" is just one option for the DoS where the network > manager can detect too many failed requests and issue a multicast > management message (e.g. a CoAP request to a resource) to stop or further > throttle joining messages being accepted by relay nodes for a limited tim= e. > Of course as you mentioned, this will be delayed until the third flow of = the > DTLS protocol, but the DTLS cookie should provide some additional resista= nce > initially. In other scenarios, the timing of a joining device is known (e= .g. within > a home) and the relays can be asked to switched on and later switched off= to > restrict the window of opportunity to the attacker. > > > > The idea is that the new device gets the configuration info within the = DTLS > session that is created (e.g. as a CoAP request to a resource). How and > format needs to be defined (either here or somewhere else more > generally). > > > > There could be more threats and possible countermeasures, let me know i= f > you have more ideas. > > > > Regards > > Sandeep > > > >> -----Original Message----- > >> From: dtls-iot [mailto:dtls-iot-bounces@ietf.org] On Behalf Of Rene > >> Struik > >> Sent: Tuesday, May 27, 2014 10:55 PM > >> To: dtls-iot@ietf.org > >> Subject: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 > >> > >> Dear Sandeep, Oscar, Sye Loong: > >> > >> I read draft-kumar-dice-dtls-relay-01 a few days ago. In the security > >> considerations section of that draft, you allude to potential denial > >> of services attacks in the context where a one-hop neighbor of a > >> joining node facilitates messaging between that joining node and the > >> network manager potentially many hops away, where the joining node > >> and the network manager act as DTLS Client and DTLS Server, > >> respectively, and where the one-hop neighbor acts as DTLS Relay. You > >> also suggest some measures to thwart/limit denial of service attack ri= sk. > >> > >> I would be curious as to whether you could provide some more insight > >> as to what type of denial of service attack you counter and how the > >> DTLS Relay "on/off switch" would work in practice. How would one > >> detect a potential DoS attack and turn on the "DTLS Relay on/off" > >> knobs to counter an influx of bogus join protocol messages that could > >> be amplified if this would travel to the network manager (in a > >> scenario where both are many hops away from each other)? Since with > >> DTLS, client authentication only happens in the third protocol flow, > >> it seems that by necessity one has to allow three subsequent message > >> flows (key establishment messages from client to server and back, key > >> confirmation message from client to server), without the DTLS Relay > >> element having a mechanism (except for throttling) to cryptographicall= y > arbitrage these flows. > >> > >> When does the newbee device get configuration info and, e.g., a > >> routable address assigned? > >> > >> If you could expand on this scenario, that would be great. > >> > >> Best regards, Rene > >> > >> > >> > >> [excerpt from draft-kumar-dice-dtls-relay-01] 5. Security > >> Considerations Additional security considerations need to be taken > >> into account about forwarding of messages from devices through a > >> network to which it has not yet been admitted. This can lead to > >> denial-of-service attacks or misuse of network resources without > >> proper authentication. One way to overcome any large scale misuse of > >> the network is to have a management message from the Controller that > >> initiates already authenticated devices in the network to enter into > >> a DTLS Relay mode. The devices can stay such a Relay mode for a fixed > >> period of time or until the Controller sends a new management message > >> blocking the DTLS Relay mode in all devices in the network. This is > >> often possible since the administrator of the network can be aware > >> when new devices join the network either because of the > >> "Introduction" phase or commissioning phase. Other mechanisms based > >> on IP destination filtering can be applied by the controller to all Re= lay > nodes to avoid misuse of the network resources. > >> > >> -- > >> email: rstruik.ext@gmail.com | Skype: rstruik > >> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 > >> > >> > >> > >> > >> _______________________________________________ > >> dtls-iot mailing list > >> dtls-iot@ietf.org > >> https://www.ietf.org/mailman/listinfo/dtls-iot > > ________________________________ > > The information contained in this message may be confidential and legal= ly > protected under applicable law. The message is intended solely for the > addressee(s). If you are not the intended recipient, you are hereby notif= ied > that any use, forwarding, dissemination, or reproduction of this message = is > strictly prohibited and may be unlawful. If you are not the intended reci= pient, > please contact the sender by return e-mail and destroy all copies of the > original message. > > > > > -- > email: rstruik.ext@gmail.com | Skype: rstruik > cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 ________________________________ The information contained in this message may be confidential and legally p= rotected under applicable law. The message is intended solely for the addre= ssee(s). If you are not the intended recipient, you are hereby notified tha= t any use, forwarding, dissemination, or reproduction of this message is st= rictly prohibited and may be unlawful. If you are not the intended recipien= t, please contact the sender by return e-mail and destroy all copies of the= original message. From nobody Wed May 28 09:16:05 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5749B1A00F9 for ; Wed, 28 May 2014 09:16:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2 X-Spam-Level: X-Spam-Status: No, score=-2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id umZzXBDFQ7F7 for ; Wed, 28 May 2014 09:15:58 -0700 (PDT) Received: from mail-ie0-x22a.google.com (mail-ie0-x22a.google.com [IPv6:2607:f8b0:4001:c03::22a]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7D9821A0452 for ; Wed, 28 May 2014 09:15:57 -0700 (PDT) Received: by mail-ie0-f170.google.com with SMTP id at1so10585855iec.1 for ; Wed, 28 May 2014 09:15:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=Y8CQ9c+3kTvvY2jqzhMWOtmkVdCrFPGZDm/gnm4xzdE=; b=P1ukut7LJfYbJyDkrr84gyfCyZk1VxCpIQF9ZWQgaDXWHRUqpfq4QS7SOQzR71qGL0 oGdws4JmElbU68cGaibu4j6MnfNSiICR38soxkqkQAGfn211InoVXo+1vNf4gO6uAe5n MrSpdTyUCGuKlnBjqsuS6D+s5u7SPl7JYGjuXUxjSan4MmYLZTlRVeV6La6sqY7XTMNb jDofaZeJrMgiYKGUTRASM+ZEFAisvcKzgIQdCNz9EcG/8vWa3xnILGYKQ5XQ97gAORQa FwCw6mc4EPO75xT5updG6n5GzOXeNCM0c7cXgtUdAiNtEFHs0aF3VZ8MMEGJFSFOH0+1 uTbQ== X-Received: by 10.50.32.104 with SMTP id h8mr2395446igi.5.1401293753762; Wed, 28 May 2014 09:15:53 -0700 (PDT) Received: from [192.168.1.101] (CPE0013100e2c51-CM001cea35caa6.cpe.net.cable.rogers.com. [99.231.3.110]) by mx.google.com with ESMTPSA id sc2sm16825532igb.5.2014.05.28.09.15.52 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 28 May 2014 09:15:53 -0700 (PDT) Message-ID: <53860BB5.8020908@gmail.com> Date: Wed, 28 May 2014 12:15:49 -0400 From: Rene Struik User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: "Kumar, Sandeep" , "dtls-iot@ietf.org" References: <5384FB1C.60109@gmail.com> <5384FBB0.3040900@gmail.com> <5385FC6C.8080102@gmail.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/LhU8aWxR250ouq_NAzzc28axEmo Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 May 2014 16:16:01 -0000 With 802.11, when a STA device joins a network at an access point AP, the AP may sometimes act as a relay station and the actual authentication is done by a third-party device T. In 802.11 parlance, I believe the STA is called the supplicant, the AP the Authenticator and T the Server (very confusing verbiage indeed, since AP does not do anything from crypto perspective). In fact, any three-party key agreement protocol with inline third party and where the result really depends on this third party being in the loop seems an example of use case you asked about. == Do you have any specific use case where a joining node decides which network manager to contact? On 5/28/2014 11:43 AM, Kumar, Sandeep wrote: > Hi Rene > > Sorry for the confusion, I did not intend to say that the "on/off" was for the second threat. It only addresses the first threat. > > Regarding the second threat, indeed as you mentioned, either the relay node decides or as in the security considerations " Other mechanisms based > on IP destination filtering can be applied by the controller to all Relay nodes to avoid misuse of the network resources." I agree this is vague on how the filtering parameters can be determined which can be extended in future based on the use cases. Do you have any specific use case where a joining node decides which network manager to contact? > > Regards > Sandeep > > >> -----Original Message----- >> From: Rene Struik [mailto:rstruik.ext@gmail.com] >> Sent: Wednesday, May 28, 2014 5:11 PM >> To: Kumar, Sandeep; dtls-iot@ietf.org >> Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 >> >> Hi Sandeep: >> >> Thanks for the quick reply. I do understand your second threat, but not how >> the "on/off switch" would play a role here. >> >> According to Section 3.1, with stateful relay, if the joining node knows the >> DTLS Server's IP address, the DTLS Relay simply forwards this. If the joining >> node does *not* know the DTLS Server's IP address, the DTLS Relay is >> forwarding it to any device it likes (which could of course very well be the >> network manager). So, in the first case the joining node seems in full control >> as to which device it connects (perhaps, even a device that is not part of the >> network); in the second case the relaying node determines who it connects >> the joining node to (which may be fine in communication security scenarios, >> but perhaps not in application security settings). >> >> If you could elaborate on the role of the "on/off switch" in countering these >> threats that would help. >> >> Rene >> >> [2nd threat, excerpted from your email as of May 28, 2014, 10:14am NL] >> >> - misuse of the relay functionality to allow a rogue node to setup a DTLS >> session with a server which is not the network manager >> >> >> On 5/28/2014 4:14 AM, Kumar, Sandeep wrote: >>> Hi Rene >>> >>> The security considerations section is not completely baked yet. But to >> answer your questions, we were considering the following two threats: >>> - DoS where a large number of joining messages are sent by rogue >>> nodes either to flood the lowpan or drain the network manager >>> - misuse of the relay functionality to allow a rogue node to setup a >>> DTLS session with a server which is not the network manager >>> >>> The "on/off switch" is just one option for the DoS where the network >> manager can detect too many failed requests and issue a multicast >> management message (e.g. a CoAP request to a resource) to stop or further >> throttle joining messages being accepted by relay nodes for a limited time. >> Of course as you mentioned, this will be delayed until the third flow of the >> DTLS protocol, but the DTLS cookie should provide some additional resistance >> initially. In other scenarios, the timing of a joining device is known (e.g. within >> a home) and the relays can be asked to switched on and later switched off to >> restrict the window of opportunity to the attacker. >>> The idea is that the new device gets the configuration info within the DTLS >> session that is created (e.g. as a CoAP request to a resource). How and >> format needs to be defined (either here or somewhere else more >> generally). >>> There could be more threats and possible countermeasures, let me know if >> you have more ideas. >>> Regards >>> Sandeep >>> >>>> -----Original Message----- >>>> From: dtls-iot [mailto:dtls-iot-bounces@ietf.org] On Behalf Of Rene >>>> Struik >>>> Sent: Tuesday, May 27, 2014 10:55 PM >>>> To: dtls-iot@ietf.org >>>> Subject: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 >>>> >>>> Dear Sandeep, Oscar, Sye Loong: >>>> >>>> I read draft-kumar-dice-dtls-relay-01 a few days ago. In the security >>>> considerations section of that draft, you allude to potential denial >>>> of services attacks in the context where a one-hop neighbor of a >>>> joining node facilitates messaging between that joining node and the >>>> network manager potentially many hops away, where the joining node >>>> and the network manager act as DTLS Client and DTLS Server, >>>> respectively, and where the one-hop neighbor acts as DTLS Relay. You >>>> also suggest some measures to thwart/limit denial of service attack risk. >>>> >>>> I would be curious as to whether you could provide some more insight >>>> as to what type of denial of service attack you counter and how the >>>> DTLS Relay "on/off switch" would work in practice. How would one >>>> detect a potential DoS attack and turn on the "DTLS Relay on/off" >>>> knobs to counter an influx of bogus join protocol messages that could >>>> be amplified if this would travel to the network manager (in a >>>> scenario where both are many hops away from each other)? Since with >>>> DTLS, client authentication only happens in the third protocol flow, >>>> it seems that by necessity one has to allow three subsequent message >>>> flows (key establishment messages from client to server and back, key >>>> confirmation message from client to server), without the DTLS Relay >>>> element having a mechanism (except for throttling) to cryptographically >> arbitrage these flows. >>>> When does the newbee device get configuration info and, e.g., a >>>> routable address assigned? >>>> >>>> If you could expand on this scenario, that would be great. >>>> >>>> Best regards, Rene >>>> >>>> >>>> >>>> [excerpt from draft-kumar-dice-dtls-relay-01] 5. Security >>>> Considerations Additional security considerations need to be taken >>>> into account about forwarding of messages from devices through a >>>> network to which it has not yet been admitted. This can lead to >>>> denial-of-service attacks or misuse of network resources without >>>> proper authentication. One way to overcome any large scale misuse of >>>> the network is to have a management message from the Controller that >>>> initiates already authenticated devices in the network to enter into >>>> a DTLS Relay mode. The devices can stay such a Relay mode for a fixed >>>> period of time or until the Controller sends a new management message >>>> blocking the DTLS Relay mode in all devices in the network. This is >>>> often possible since the administrator of the network can be aware >>>> when new devices join the network either because of the >>>> "Introduction" phase or commissioning phase. Other mechanisms based >>>> on IP destination filtering can be applied by the controller to all Relay >> nodes to avoid misuse of the network resources. >>>> -- >>>> email: rstruik.ext@gmail.com | Skype: rstruik >>>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >>>> >>>> >>>> >>>> >>>> _______________________________________________ >>>> dtls-iot mailing list >>>> dtls-iot@ietf.org >>>> https://www.ietf.org/mailman/listinfo/dtls-iot >>> ________________________________ >>> The information contained in this message may be confidential and legally >> protected under applicable law. The message is intended solely for the >> addressee(s). If you are not the intended recipient, you are hereby notified >> that any use, forwarding, dissemination, or reproduction of this message is >> strictly prohibited and may be unlawful. If you are not the intended recipient, >> please contact the sender by return e-mail and destroy all copies of the >> original message. >> >> -- >> email: rstruik.ext@gmail.com | Skype: rstruik >> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 > > ________________________________ > The information contained in this message may be confidential and legally protected under applicable law. The message is intended solely for the addressee(s). If you are not the intended recipient, you are hereby notified that any use, forwarding, dissemination, or reproduction of this message is strictly prohibited and may be unlawful. If you are not the intended recipient, please contact the sender by return e-mail and destroy all copies of the original message. > -- email: rstruik.ext@gmail.com | Skype: rstruik cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 From nobody Wed May 28 11:48:44 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BC6AD1A0B80 for ; Wed, 28 May 2014 11:48:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.618 X-Spam-Level: X-Spam-Status: No, score=-1.618 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_FONT_FACE_BAD=0.981, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CcCjVKj4zcfy for ; Wed, 28 May 2014 11:48:32 -0700 (PDT) Received: from ch1outboundpool.messaging.microsoft.com (ch1ehsobe004.messaging.microsoft.com [216.32.181.184]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B93A11A6F0D for ; Wed, 28 May 2014 11:48:31 -0700 (PDT) Received: from mail65-ch1-R.bigfish.com (10.43.68.228) by CH1EHSOBE001.bigfish.com (10.43.70.51) with Microsoft SMTP Server id 14.1.225.22; Wed, 28 May 2014 18:48:27 +0000 Received: from mail65-ch1 (localhost [127.0.0.1]) by mail65-ch1-R.bigfish.com (Postfix) with ESMTP id 9B3841601CB; Wed, 28 May 2014 18:48:27 +0000 (UTC) X-Forefront-Antispam-Report: CIP:206.191.240.53; KIP:(null); UIP:(null); IPV:NLI; H:mail.philips.com; RD:error; EFVD:FOP X-SpamScore: -25 X-BigFish: VPS-25(zzbb2dI98dI15d6I9371Ic89bh542Ie0eah1432I9251I7f52h1447I217bIdd85kzz1f42h1ee6h1de0h1fdah2073h2146h1202h1e76h2189h1d1ah1d2ah21bch1fc6h208chzz1de098h1033IL1df219h8275bh8275dh18c673h1de097h186068h1deb3aiz2dh109h2a8h839hd25hf0ah1288h12a5h12bdh137ah1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h19b5h1ad9h1b0ah1b2fh1bceh2222h224fh1fb3h1d0ch1d2eh1d3fh1dfeh1dffh1e1dh1fe8h1ff5h20f0h2216h22d0h2336h2438h2461h2487h24ach24d7h2516h2545h255eh25f6h2605h268bh26d3h27e2h28a1h) Received: from mail65-ch1 (localhost.localdomain [127.0.0.1]) by mail65-ch1 (MessageSwitch) id 140130288825327_10342; Wed, 28 May 2014 18:48:08 +0000 (UTC) Received: from CH1EHSMHS040.bigfish.com (snatpool2.int.messaging.microsoft.com [10.43.68.234]) by mail65-ch1.bigfish.com (Postfix) with ESMTP id D92C03000A6; Wed, 28 May 2014 18:47:49 +0000 (UTC) Received: from mail.philips.com (206.191.240.53) by CH1EHSMHS040.bigfish.com (10.43.69.249) with Microsoft SMTP Server (TLS) id 14.16.227.3; Wed, 28 May 2014 18:47:49 +0000 Received: from DBXPRD9003MB059.MGDPHG.emi.philips.com ([169.254.7.68]) by DBXPRD9003HT002.MGDPHG.emi.philips.com ([141.251.25.207]) with mapi id 14.16.0453.000; Wed, 28 May 2014 18:47:46 +0000 From: "Kumar, Sandeep" To: Rene Struik , "dtls-iot@ietf.org" Thread-Topic: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 Thread-Index: AQHPee2eVkH9qMdWkUC/R7gJ3R2jLptU6AwAgAC156CAAHwmAIAABKrggAANjoCAACp1DQ== Date: Wed, 28 May 2014 18:47:46 +0000 Message-ID: References: <5384FB1C.60109@gmail.com> <5384FBB0.3040900@gmail.com> <5385FC6C.8080102@gmail.com> , <53860BB5.8020908@gmail.com> In-Reply-To: <53860BB5.8020908@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: multipart/alternative; boundary="_000_BE6D13F6A4554947952B39008B0DC0153E79AF4EDBXPRD9003MB059_" MIME-Version: 1.0 X-OriginatorOrg: philips.com X-FOPE-CONNECTOR: Id%0$Dn%*$RO%0$TLS%0$FQDN%$TlsDn% Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/kaJly_SOZDXBRzwOZLqt4TsNDMg Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 May 2014 18:48:41 -0000 --_000_BE6D13F6A4554947952B39008B0DC0153E79AF4EDBXPRD9003MB059_ Content-Type: text/plain; charset="windows-1256" Content-Transfer-Encoding: quoted-printable In 802.11, if I am not mistaken, the AP acting as the relay decides which a= uthentication server T to use (e.g. which RADIUS server to use is configure= d at the AP and not on the STA). The STA may indicate a domain parameter if= a remote RADIUS server needs to be used but the address of the remote serv= er is configured at the proxy RADIUS server. In both cases the STA cannot c= ontact arbitrary server T. Its similar to the case where the DTLS relay dec= ides which network manager to use. Right? Sandeep From: Rene Struik Sent: =FDWednesday=FD, =FDMay=FD =FD28=FD, =FD2014 =FD6=FD:=FD15=FD =FDPM To: Sandeep Kumar, dtls-iot@ietf.org With 802.11, when a STA device joins a network at an access point AP, the A= P may sometimes act as a relay station and the actual authentication is don= e by a third-party device T. In 802.11 parlance, I believe the STA is calle= d the supplicant, the AP the Authenticator and T the Server (very confusing= verbiage indeed, since AP does not do anything from crypto perspective). I= n fact, any three-party key agreement protocol with inline third party and = where the result really depends on this third party being in the loop seems= an example of use case you asked about. =3D=3D Do you have any specific use case where a joining node decides which networ= k manager to contact? On 5/28/2014 11:43 AM, Kumar, Sandeep wrote: > Hi Rene > > Sorry for the confusion, I did not intend to say that the "on/off" was fo= r the second threat. It only addresses the first threat. > > Regarding the second threat, indeed as you mentioned, either the relay no= de decides or as in the security considerations " Other mechanisms based > on IP destination filtering can be applied by the controller to all Relay= nodes to avoid misuse of the network resources." I agree this is vague on = how the filtering parameters can be determined which can be extended in fut= ure based on the use cases. Do you have any specific use case where a joini= ng node decides which network manager to contact? > > Regards > Sandeep > > >> -----Original Message----- >> From: Rene Struik [mailto:rstruik.ext@gmail.com] >> Sent: Wednesday, May 28, 2014 5:11 PM >> To: Kumar, Sandeep; dtls-iot@ietf.org >> Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 >> >> Hi Sandeep: >> >> Thanks for the quick reply. I do understand your second threat, but not = how >> the "on/off switch" would play a role here. >> >> According to Section 3.1, with stateful relay, if the joining node knows= the >> DTLS Server's IP address, the DTLS Relay simply forwards this. If the jo= ining >> node does *not* know the DTLS Server's IP address, the DTLS Relay is >> forwarding it to any device it likes (which could of course very well be= the >> network manager). So, in the first case the joining node seems in full c= ontrol >> as to which device it connects (perhaps, even a device that is not part = of the >> network); in the second case the relaying node determines who it connect= s >> the joining node to (which may be fine in communication security scenari= os, >> but perhaps not in application security settings). >> >> If you could elaborate on the role of the "on/off switch" in countering = these >> threats that would help. >> >> Rene >> >> [2nd threat, excerpted from your email as of May 28, 2014, 10:14am NL] >> >> - misuse of the relay functionality to allow a rogue node to setup a DTL= S >> session with a server which is not the network manager >> >> >> On 5/28/2014 4:14 AM, Kumar, Sandeep wrote: >>> Hi Rene >>> >>> The security considerations section is not completely baked yet. But to >> answer your questions, we were considering the following two threats: >>> - DoS where a large number of joining messages are sent by rogue >>> nodes either to flood the lowpan or drain the network manager >>> - misuse of the relay functionality to allow a rogue node to setup a >>> DTLS session with a server which is not the network manager >>> >>> The "on/off switch" is just one option for the DoS where the network >> manager can detect too many failed requests and issue a multicast >> management message (e.g. a CoAP request to a resource) to stop or furthe= r >> throttle joining messages being accepted by relay nodes for a limited ti= me. >> Of course as you mentioned, this will be delayed until the third flow of= the >> DTLS protocol, but the DTLS cookie should provide some additional resist= ance >> initially. In other scenarios, the timing of a joining device is known (= e.g. within >> a home) and the relays can be asked to switched on and later switched of= f to >> restrict the window of opportunity to the attacker. >>> The idea is that the new device gets the configuration info within the = DTLS >> session that is created (e.g. as a CoAP request to a resource). How and >> format needs to be defined (either here or somewhere else more >> generally). >>> There could be more threats and possible countermeasures, let me know i= f >> you have more ideas. >>> Regards >>> Sandeep >>> >>>> -----Original Message----- >>>> From: dtls-iot [mailto:dtls-iot-bounces@ietf.org] On Behalf Of Rene >>>> Struik >>>> Sent: Tuesday, May 27, 2014 10:55 PM >>>> To: dtls-iot@ietf.org >>>> Subject: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 >>>> >>>> Dear Sandeep, Oscar, Sye Loong: >>>> >>>> I read draft-kumar-dice-dtls-relay-01 a few days ago. In the security >>>> considerations section of that draft, you allude to potential denial >>>> of services attacks in the context where a one-hop neighbor of a >>>> joining node facilitates messaging between that joining node and the >>>> network manager potentially many hops away, where the joining node >>>> and the network manager act as DTLS Client and DTLS Server, >>>> respectively, and where the one-hop neighbor acts as DTLS Relay. You >>>> also suggest some measures to thwart/limit denial of service attack ri= sk. >>>> >>>> I would be curious as to whether you could provide some more insight >>>> as to what type of denial of service attack you counter and how the >>>> DTLS Relay "on/off switch" would work in practice. How would one >>>> detect a potential DoS attack and turn on the "DTLS Relay on/off" >>>> knobs to counter an influx of bogus join protocol messages that could >>>> be amplified if this would travel to the network manager (in a >>>> scenario where both are many hops away from each other)? Since with >>>> DTLS, client authentication only happens in the third protocol flow, >>>> it seems that by necessity one has to allow three subsequent message >>>> flows (key establishment messages from client to server and back, key >>>> confirmation message from client to server), without the DTLS Relay >>>> element having a mechanism (except for throttling) to cryptographicall= y >> arbitrage these flows. >>>> When does the newbee device get configuration info and, e.g., a >>>> routable address assigned? >>>> >>>> If you could expand on this scenario, that would be great. >>>> >>>> Best regards, Rene >>>> >>>> >>>> >>>> [excerpt from draft-kumar-dice-dtls-relay-01] 5. Security >>>> Considerations Additional security considerations need to be taken >>>> into account about forwarding of messages from devices through a >>>> network to which it has not yet been admitted. This can lead to >>>> denial-of-service attacks or misuse of network resources without >>>> proper authentication. One way to overcome any large scale misuse of >>>> the network is to have a management message from the Controller that >>>> initiates already authenticated devices in the network to enter into >>>> a DTLS Relay mode. The devices can stay such a Relay mode for a fixed >>>> period of time or until the Controller sends a new management message >>>> blocking the DTLS Relay mode in all devices in the network. This is >>>> often possible since the administrator of the network can be aware >>>> when new devices join the network either because of the >>>> "Introduction" phase or commissioning phase. Other mechanisms based >>>> on IP destination filtering can be applied by the controller to all Re= lay >> nodes to avoid misuse of the network resources. >>>> -- >>>> email: rstruik.ext@gmail.com | Skype: rstruik >>>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >>>> >>>> >>>> >>>> >>>> _______________________________________________ >>>> dtls-iot mailing list >>>> dtls-iot@ietf.org >>>> https://www.ietf.org/mailman/listinfo/dtls-iot >>> ________________________________ >>> The information contained in this message may be confidential and legal= ly >> protected under applicable law. The message is intended solely for the >> addressee(s). If you are not the intended recipient, you are hereby noti= fied >> that any use, forwarding, dissemination, or reproduction of this message= is >> strictly prohibited and may be unlawful. If you are not the intended rec= ipient, >> please contact the sender by return e-mail and destroy all copies of the >> original message. >> >> -- >> email: rstruik.ext@gmail.com | Skype: rstruik >> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 > > ________________________________ > The information contained in this message may be confidential and legally= protected under applicable law. The message is intended solely for the add= ressee(s). If you are not the intended recipient, you are hereby notified t= hat any use, forwarding, dissemination, or reproduction of this message is = strictly prohibited and may be unlawful. If you are not the intended recipi= ent, please contact the sender by return e-mail and destroy all copies of t= he original message. > -- email: rstruik.ext@gmail.com | Skype: rstruik cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 --_000_BE6D13F6A4554947952B39008B0DC0153E79AF4EDBXPRD9003MB059_ Content-Type: text/html; charset="windows-1256" Content-Transfer-Encoding: quoted-printable
In 802.11, if I am not mistaken, the AP acting as the relay decid= es which authentication server T to use (e.g. which RADIUS server to u= se is configured at the AP and not on the STA). The STA may indicate a doma= in parameter if a remote RADIUS server needs to be used but the address of the remote server is configured at the proxy= RADIUS server. In both cases the STA cannot contact arbitrary server T. It= s similar to the case where the DTLS relay decides which network manager to= use. Right?

Sandeep


From: Rene Struik
Sent: =FDWednesday=FD, =FDMay=FD =FD28=FD, =FD2014 =FD6=FD:=FD1= 5=FD =FDPM
To: Sandeep Kumar, dtls-iot@ietf.org

With 802.11, when a STA device joins a n= etwork at an access point AP, the AP may sometimes act as a relay station a= nd the actual authentication is done by a third-party device T. In 802.11 p= arlance, I believe the STA is called the supplicant, the AP the Authenticator and T the Server (very confusing = verbiage indeed, since AP does not do anything from crypto perspective). In= fact, any three-party key agreement protocol with inline third party and w= here the result really depends on this third party being in the loop seems an example of use case you asked = about.

=3D=3D
Do you have any specific use case where a joining node decides which networ= k manager to contact?


On 5/28/2014 11:43 AM, Kumar, Sandeep wrote:
> Hi Rene
>
> Sorry for the confusion, I did not intend to say that the "on/off= " was for the second threat. It only addresses the first threat.
>
> Regarding the second threat, indeed as you mentioned, either the relay= node decides or as in the security considerations " Other mechanisms = based
> on IP destination filtering can be applied by the controller to all Re= lay nodes to avoid misuse of the network resources." I agree this is v= ague on how the filtering parameters can be determined which can be extende= d in future based on the use cases. Do you have any specific use case where a joining node decides which network mana= ger to contact?
>
> Regards
> Sandeep
>
>
>> -----Original Message-----
>> From: Rene Struik [mailto:rstruik.ext@gmail.com]
>> Sent: Wednesday, May 28, 2014 5:11 PM
>> To: Kumar, Sandeep; dtls-iot@ietf.org
>> Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01=
>>
>> Hi Sandeep:
>>
>> Thanks for the quick reply. I do understand your second threat, bu= t not how
>> the "on/off switch" would play a role here.
>>
>> According to Section 3.1, with stateful relay, if the joining node= knows the
>> DTLS Server's IP address, the DTLS Relay simply forwards this. If = the joining
>> node does *not* know the DTLS Server's IP address, the DTLS Relay = is
>> forwarding it to any device it likes (which could of course very w= ell be the
>> network manager). So, in the first case the joining node seems in = full control
>> as to which device it connects (perhaps, even a device that is not= part of the
>> network); in the second case the relaying node determines who it c= onnects
>> the joining node to (which may be fine in communication security s= cenarios,
>> but perhaps not in application security settings).
>>
>> If you could elaborate on the role of the "on/off switch"= ; in countering these
>> threats that would help.
>>
>> Rene
>>
>> [2nd threat, excerpted from your email as of May 28, 2014, 10:14am= NL]
>>
>> - misuse of the relay functionality to allow a rogue node to setup= a DTLS
>> session with a server which is not the network manager
>>
>>
>> On 5/28/2014 4:14 AM, Kumar, Sandeep wrote:
>>> Hi Rene
>>>
>>> The security considerations section is not completely baked ye= t. But to
>> answer your questions, we were considering the following two threa= ts:
>>> - DoS where a large number of joining messages are sent by&nbs= p; rogue
>>> nodes either to flood the lowpan or drain the network manager<= br> >>> - misuse of the relay functionality to allow a rogue node to s= etup a
>>> DTLS session with a server which is not the network manager >>>
>>> The "on/off switch" is just one option for the DoS w= here the network
>> manager can detect too many failed requests and issue a multicast<= br> >> management message (e.g. a CoAP request to a resource) to stop or = further
>> throttle joining messages being accepted by relay nodes for a limi= ted time.
>> Of course as you mentioned, this will be delayed until the third f= low of the
>> DTLS protocol, but the DTLS cookie should provide some additional = resistance
>> initially. In other scenarios, the timing of a joining device is k= nown (e.g. within
>> a home) and the relays can be asked to switched on and later switc= hed off to
>> restrict the window of opportunity to the attacker.
>>> The idea is that the new device gets the configuration info wi= thin the DTLS
>> session that is created (e.g. as a CoAP request to a resource). Ho= w and
>> format needs to be defined (either here or somewhere else more
>> generally).
>>> There could be more threats and possible countermeasures, let = me know if
>> you have more ideas.
>>> Regards
>>> Sandeep
>>>
>>>> -----Original Message-----
>>>> From: dtls-iot [mailto:dtls-iot-bounces@ietf.org] On Behal= f Of Rene
>>>> Struik
>>>> Sent: Tuesday, May 27, 2014 10:55 PM
>>>> To: dtls-iot@ietf.org
>>>> Subject: [Dtls-iot] question on draft-kumar-dice-dtls-rela= y-01
>>>>
>>>> Dear Sandeep, Oscar, Sye Loong:
>>>>
>>>> I read draft-kumar-dice-dtls-relay-01 a few days ago. In t= he security
>>>> considerations section of that draft, you allude to potent= ial denial
>>>> of services attacks in the context where a one-hop neighbo= r of a
>>>> joining node facilitates messaging between that joining no= de and the
>>>> network manager potentially many hops away, where the join= ing node
>>>> and the network manager act as DTLS Client and DTLS Server= ,
>>>> respectively, and where the one-hop neighbor acts as DTLS = Relay. You
>>>> also suggest some measures to thwart/limit denial of servi= ce attack risk.
>>>>
>>>> I would be curious as to whether you could provide some mo= re insight
>>>> as to what type of denial of service attack you counter an= d how the
>>>> DTLS Relay "on/off switch" would work in practic= e. How would one
>>>> detect a potential DoS attack and turn on the "DTLS R= elay on/off"
>>>> knobs to counter an influx of bogus join protocol messages= that could
>>>> be amplified if this would travel to the network manager (= in a
>>>> scenario where both are many hops away from each other)? S= ince with
>>>> DTLS, client authentication only happens in the third prot= ocol flow,
>>>> it seems that by necessity one has to allow three subseque= nt message
>>>> flows (key establishment messages from client to server an= d back, key
>>>> confirmation message from client to server), without the D= TLS Relay
>>>> element having a mechanism (except for throttling) to cryp= tographically
>> arbitrage these flows.
>>>> When does the newbee device get configuration info and, e.= g., a
>>>> routable address assigned?
>>>>
>>>> If you could expand on this scenario, that would be great.=
>>>>
>>>> Best regards, Rene
>>>>
>>>>
>>>>
>>>> [excerpt from draft-kumar-dice-dtls-relay-01] 5. Security<= br> >>>> Considerations Additional security considerations need to = be taken
>>>> into account about forwarding of messages from devices thr= ough a
>>>> network to which it has not yet been admitted. This can le= ad to
>>>> denial-of-service attacks or misuse of network resources w= ithout
>>>> proper authentication. One way to overcome any large scale= misuse of
>>>> the network is to have a management message from the Contr= oller that
>>>> initiates already authenticated devices in the network to = enter into
>>>> a DTLS Relay mode. The devices can stay such a Relay mode = for a fixed
>>>> period of time or until the Controller sends a new managem= ent message
>>>> blocking the DTLS Relay mode in all devices in the network= . This is
>>>> often possible since the administrator of the network can = be aware
>>>> when new devices join the network either because of the >>>> "Introduction" phase or commissioning phase. Oth= er mechanisms based
>>>> on IP destination filtering can be applied by the controll= er to all Relay
>> nodes to avoid misuse of the network resources.
>>>> --
>>>> email: rstruik.ext@gmail.com | Skype: rstruik
>>>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >>>>
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> dtls-iot mailing list
>>>> dtls-iot@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/dtls-iot
>>> ________________________________
>>> The information contained in this message may be confidential = and legally
>> protected under applicable law. The message is intended solely for= the
>> addressee(s). If you are not the intended recipient, you are hereb= y notified
>> that any use, forwarding, dissemination, or reproduction of this m= essage is
>> strictly prohibited and may be unlawful. If you are not the intend= ed recipient,
>> please contact the sender by return e-mail and destroy all copies = of the
>> original message.
>>
>> --
>> email: rstruik.ext@gmail.com | Skype: rstruik
>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363
>
> ________________________________
> The information contained in this message may be confidential and lega= lly protected under applicable law. The message is intended solely for the = addressee(s). If you are not the intended recipient, you are hereby notifie= d that any use, forwarding, dissemination, or reproduction of this message is strictly prohibited and may be unlawful= . If you are not the intended recipient, please contact the sender by retur= n e-mail and destroy all copies of the original message.
>


--
email: rstruik.ext@gmail.com | Skype: rstruik
cell: +1 (647) 867-5658 | US: +1 (415) 690-7363

--_000_BE6D13F6A4554947952B39008B0DC0153E79AF4EDBXPRD9003MB059_-- From nobody Wed May 28 12:32:15 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 289D11A01EE for ; Wed, 28 May 2014 12:32:11 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.018 X-Spam-Level: X-Spam-Status: No, score=-1.018 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_FONT_FACE_BAD=0.981, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vc-2HJLYW9ZN for ; Wed, 28 May 2014 12:32:08 -0700 (PDT) Received: from mail-ig0-x233.google.com (mail-ig0-x233.google.com [IPv6:2607:f8b0:4001:c05::233]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3D3541A00E5 for ; Wed, 28 May 2014 12:32:08 -0700 (PDT) Received: by mail-ig0-f179.google.com with SMTP id hn18so2908084igb.0 for ; Wed, 28 May 2014 12:32:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type; bh=UbKWRxb5eQ2wlS1xmK5u6AnKkLmX/HSaGuriEp8B9UU=; b=Nqka0iCIyBKZPfeOX6Bn6AiToSEidtAHVpLxfiZum042o4aYu6kaE6o27wXoNiFNW5 uRXgEowRbDG8afkrOztkuIlj7ct4f3fRyU+EobieV40kM+PE3MHC639HZr7hCTb8X8GE xAV9+DeZVIGG3dSKfBSUoq1Dvs+N4U9VwbYGYrQpfwBJMHi/KMMgMhbBLU7TKme+IiFC qa6NWRCBvzdXL8ggbzaYqrT5I7AdcUIjKiKvfpwG9/uTGCb7Gv8ywmdQ198PszC+rgtm Zw2umlfKfbSBhh0oGf+hTxy65qNimE5QGgtNxRo1KimMx5ZQ9Xzyr/J8EH0hVX0EgiH/ 0PVw== X-Received: by 10.50.97.68 with SMTP id dy4mr4306988igb.8.1401305524368; Wed, 28 May 2014 12:32:04 -0700 (PDT) Received: from [192.168.1.101] (CPE0013100e2c51-CM001cea35caa6.cpe.net.cable.rogers.com. [99.231.3.110]) by mx.google.com with ESMTPSA id jh7sm17947119igb.22.2014.05.28.12.32.03 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Wed, 28 May 2014 12:32:03 -0700 (PDT) Message-ID: <538639AF.4050900@gmail.com> Date: Wed, 28 May 2014 15:31:59 -0400 From: Rene Struik User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: "Kumar, Sandeep" , "dtls-iot@ietf.org" References: <5384FB1C.60109@gmail.com> <5384FBB0.3040900@gmail.com> <5385FC6C.8080102@gmail.com> , <53860BB5.8020908@gmail.com> In-Reply-To: Content-Type: multipart/alternative; boundary="------------010400060404060905080900" Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/uoLQ3_5R11pvmW07PS4FDl1dQSQ Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 May 2014 19:32:11 -0000 This is a multi-part message in MIME format. --------------010400060404060905080900 Content-Type: text/plain; charset=windows-1256; format=flowed Content-Transfer-Encoding: 8bit Hi Sandeep: (based on recollection of 802.11ai discussions) Conceptually, the third-party of the STA and AP may be different from one another (if these have pre-established keys with different third-parties). In that case, while logically the third-parties are different, this may still result in AP communicating with its own third-party and delegating any third-party arbitrage stuff to a (for him) black box. (So, communication can still be seemingly decided locally by AP alone, with any other mechanisms occurring invisibly in the background. With 802.11 wifi in a smart phone, third parties of STA and AP could, for example, be Verizon and China Mobile, where "black box" magic would be some heavy-handed infrastructure and business agreements between those two players. Of course, this is all slightly on a tangent w.r.t. security aspects of relayed communications. Rene On 5/28/2014 2:47 PM, Kumar, Sandeep wrote: > In 802.11, if I am not mistaken, the AP acting as the relay decides > which authentication server T to use (e.g. which RADIUS server to use > is configured at the AP and not on the STA). The STA may indicate a > domain parameter if a remote RADIUS server needs to be used but the > address of the remote server is configured at the proxy RADIUS server. > In both cases the STA cannot contact arbitrary server T. Its similar > to the case where the DTLS relay decides which network manager to use. > Right? > > Sandeep > > > *From:* Rene Struik > *Sent:* ýWednesdayý, ýMayý ý28ý, ý2014 ý6ý:ý15ý ýPM > *To:* Sandeep Kumar , > dtls-iot@ietf.org > > With 802.11, when a STA device joins a network at an access point AP, > the AP may sometimes act as a relay station and the actual > authentication is done by a third-party device T. In 802.11 parlance, > I believe the STA is called the supplicant, the AP the Authenticator > and T the Server (very confusing verbiage indeed, since AP does not do > anything from crypto perspective). In fact, any three-party key > agreement protocol with inline third party and where the result really > depends on this third party being in the loop seems an example of use > case you asked about. > > == > Do you have any specific use case where a joining node decides which > network manager to contact? > > > On 5/28/2014 11:43 AM, Kumar, Sandeep wrote: > > Hi Rene > > > > Sorry for the confusion, I did not intend to say that the "on/off" > was for the second threat. It only addresses the first threat. > > > > Regarding the second threat, indeed as you mentioned, either the > relay node decides or as in the security considerations " Other > mechanisms based > > on IP destination filtering can be applied by the controller to all > Relay nodes to avoid misuse of the network resources." I agree this is > vague on how the filtering parameters can be determined which can be > extended in future based on the use cases. Do you have any specific > use case where a joining node decides which network manager to contact? > > > > Regards > > Sandeep > > > > > >> -----Original Message----- > >> From: Rene Struik [mailto:rstruik.ext@gmail.com] > >> Sent: Wednesday, May 28, 2014 5:11 PM > >> To: Kumar, Sandeep; dtls-iot@ietf.org > >> Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 > >> > >> Hi Sandeep: > >> > >> Thanks for the quick reply. I do understand your second threat, but > not how > >> the "on/off switch" would play a role here. > >> > >> According to Section 3.1, with stateful relay, if the joining node > knows the > >> DTLS Server's IP address, the DTLS Relay simply forwards this. If > the joining > >> node does *not* know the DTLS Server's IP address, the DTLS Relay is > >> forwarding it to any device it likes (which could of course very > well be the > >> network manager). So, in the first case the joining node seems in > full control > >> as to which device it connects (perhaps, even a device that is not > part of the > >> network); in the second case the relaying node determines who it > connects > >> the joining node to (which may be fine in communication security > scenarios, > >> but perhaps not in application security settings). > >> > >> If you could elaborate on the role of the "on/off switch" in > countering these > >> threats that would help. > >> > >> Rene > >> > >> [2nd threat, excerpted from your email as of May 28, 2014, 10:14am NL] > >> > >> - misuse of the relay functionality to allow a rogue node to setup > a DTLS > >> session with a server which is not the network manager > >> > >> > >> On 5/28/2014 4:14 AM, Kumar, Sandeep wrote: > >>> Hi Rene > >>> > >>> The security considerations section is not completely baked yet. > But to > >> answer your questions, we were considering the following two threats: > >>> - DoS where a large number of joining messages are sent by rogue > >>> nodes either to flood the lowpan or drain the network manager > >>> - misuse of the relay functionality to allow a rogue node to setup a > >>> DTLS session with a server which is not the network manager > >>> > >>> The "on/off switch" is just one option for the DoS where the network > >> manager can detect too many failed requests and issue a multicast > >> management message (e.g. a CoAP request to a resource) to stop or > further > >> throttle joining messages being accepted by relay nodes for a > limited time. > >> Of course as you mentioned, this will be delayed until the third > flow of the > >> DTLS protocol, but the DTLS cookie should provide some additional > resistance > >> initially. In other scenarios, the timing of a joining device is > known (e.g. within > >> a home) and the relays can be asked to switched on and later > switched off to > >> restrict the window of opportunity to the attacker. > >>> The idea is that the new device gets the configuration info within > the DTLS > >> session that is created (e.g. as a CoAP request to a resource). How and > >> format needs to be defined (either here or somewhere else more > >> generally). > >>> There could be more threats and possible countermeasures, let me > know if > >> you have more ideas. > >>> Regards > >>> Sandeep > >>> > >>>> -----Original Message----- > >>>> From: dtls-iot [mailto:dtls-iot-bounces@ietf.org] On Behalf Of Rene > >>>> Struik > >>>> Sent: Tuesday, May 27, 2014 10:55 PM > >>>> To: dtls-iot@ietf.org > >>>> Subject: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 > >>>> > >>>> Dear Sandeep, Oscar, Sye Loong: > >>>> > >>>> I read draft-kumar-dice-dtls-relay-01 a few days ago. In the security > >>>> considerations section of that draft, you allude to potential denial > >>>> of services attacks in the context where a one-hop neighbor of a > >>>> joining node facilitates messaging between that joining node and the > >>>> network manager potentially many hops away, where the joining node > >>>> and the network manager act as DTLS Client and DTLS Server, > >>>> respectively, and where the one-hop neighbor acts as DTLS Relay. You > >>>> also suggest some measures to thwart/limit denial of service > attack risk. > >>>> > >>>> I would be curious as to whether you could provide some more insight > >>>> as to what type of denial of service attack you counter and how the > >>>> DTLS Relay "on/off switch" would work in practice. How would one > >>>> detect a potential DoS attack and turn on the "DTLS Relay on/off" > >>>> knobs to counter an influx of bogus join protocol messages that could > >>>> be amplified if this would travel to the network manager (in a > >>>> scenario where both are many hops away from each other)? Since with > >>>> DTLS, client authentication only happens in the third protocol flow, > >>>> it seems that by necessity one has to allow three subsequent message > >>>> flows (key establishment messages from client to server and back, key > >>>> confirmation message from client to server), without the DTLS Relay > >>>> element having a mechanism (except for throttling) to > cryptographically > >> arbitrage these flows. > >>>> When does the newbee device get configuration info and, e.g., a > >>>> routable address assigned? > >>>> > >>>> If you could expand on this scenario, that would be great. > >>>> > >>>> Best regards, Rene > >>>> > >>>> > >>>> > >>>> [excerpt from draft-kumar-dice-dtls-relay-01] 5. Security > >>>> Considerations Additional security considerations need to be taken > >>>> into account about forwarding of messages from devices through a > >>>> network to which it has not yet been admitted. This can lead to > >>>> denial-of-service attacks or misuse of network resources without > >>>> proper authentication. One way to overcome any large scale misuse of > >>>> the network is to have a management message from the Controller that > >>>> initiates already authenticated devices in the network to enter into > >>>> a DTLS Relay mode. The devices can stay such a Relay mode for a fixed > >>>> period of time or until the Controller sends a new management message > >>>> blocking the DTLS Relay mode in all devices in the network. This is > >>>> often possible since the administrator of the network can be aware > >>>> when new devices join the network either because of the > >>>> "Introduction" phase or commissioning phase. Other mechanisms based > >>>> on IP destination filtering can be applied by the controller to > all Relay > >> nodes to avoid misuse of the network resources. > >>>> -- > >>>> email: rstruik.ext@gmail.com | Skype: rstruik > >>>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 > >>>> > >>>> > >>>> > >>>> > >>>> _______________________________________________ > >>>> dtls-iot mailing list > >>>> dtls-iot@ietf.org > >>>> https://www.ietf.org/mailman/listinfo/dtls-iot > >>> ________________________________ > >>> The information contained in this message may be confidential and > legally > >> protected under applicable law. The message is intended solely for the > >> addressee(s). If you are not the intended recipient, you are hereby > notified > >> that any use, forwarding, dissemination, or reproduction of this > message is > >> strictly prohibited and may be unlawful. If you are not the > intended recipient, > >> please contact the sender by return e-mail and destroy all copies > of the > >> original message. > >> > >> -- > >> email: rstruik.ext@gmail.com | Skype: rstruik > >> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 > > > > ________________________________ > > The information contained in this message may be confidential and > legally protected under applicable law. The message is intended solely > for the addressee(s). If you are not the intended recipient, you are > hereby notified that any use, forwarding, dissemination, or > reproduction of this message is strictly prohibited and may be > unlawful. If you are not the intended recipient, please contact the > sender by return e-mail and destroy all copies of the original message. > > > > > -- > email: rstruik.ext@gmail.com | Skype: rstruik > cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 > -- email: rstruik.ext@gmail.com | Skype: rstruik cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 --------------010400060404060905080900 Content-Type: text/html; charset=windows-1256 Content-Transfer-Encoding: 8bit
Hi Sandeep:

(based on recollection of 802.11ai discussions) Conceptually, the third-party of the STA and AP may be different from one another (if these have pre-established keys with different third-parties). In that case, while logically the third-parties are different, this may still result in AP communicating with its own third-party and delegating any third-party arbitrage stuff to a (for him) black box. (So, communication can still be seemingly decided locally by AP alone, with any other mechanisms occurring invisibly in the background. With 802.11 wifi in a smart phone, third parties of STA and AP could, for example, be Verizon and China Mobile, where "black box" magic would be some heavy-handed infrastructure and business agreements between those two players.

Of course, this is all slightly on a tangent w.r.t. security aspects of relayed communications.

Rene

On 5/28/2014 2:47 PM, Kumar, Sandeep wrote:
In 802.11, if I am not mistaken, the AP acting as the relay decides which authentication server T to use (e.g. which RADIUS server to use is configured at the AP and not on the STA). The STA may indicate a domain parameter if a remote RADIUS server needs to be used but the address of the remote server is configured at the proxy RADIUS server. In both cases the STA cannot contact arbitrary server T. Its similar to the case where the DTLS relay decides which network manager to use. Right?

Sandeep


From: Rene Struik
Sent: ýWednesdayý, ýMayý ý28ý, ý2014 ý6ý:ý15ý ýPM
To: Sandeep Kumar, dtls-iot@ietf.org

With 802.11, when a STA device joins a network at an access point AP, the AP may sometimes act as a relay station and the actual authentication is done by a third-party device T. In 802.11 parlance, I believe the STA is called the supplicant, the AP the Authenticator and T the Server (very confusing verbiage indeed, since AP does not do anything from crypto perspective). In fact, any three-party key agreement protocol with inline third party and where the result really depends on this third party being in the loop seems an example of use case you asked about.

==
Do you have any specific use case where a joining node decides which network manager to contact?


On 5/28/2014 11:43 AM, Kumar, Sandeep wrote:
> Hi Rene
>
> Sorry for the confusion, I did not intend to say that the "on/off" was for the second threat. It only addresses the first threat.
>
> Regarding the second threat, indeed as you mentioned, either the relay node decides or as in the security considerations " Other mechanisms based
> on IP destination filtering can be applied by the controller to all Relay nodes to avoid misuse of the network resources." I agree this is vague on how the filtering parameters can be determined which can be extended in future based on the use cases. Do you have any specific use case where a joining node decides which network manager to contact?
>
> Regards
> Sandeep
>
>
>> -----Original Message-----
>> From: Rene Struik [mailto:rstruik.ext@gmail.com]
>> Sent: Wednesday, May 28, 2014 5:11 PM
>> To: Kumar, Sandeep; dtls-iot@ietf.org
>> Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01
>>
>> Hi Sandeep:
>>
>> Thanks for the quick reply. I do understand your second threat, but not how
>> the "on/off switch" would play a role here.
>>
>> According to Section 3.1, with stateful relay, if the joining node knows the
>> DTLS Server's IP address, the DTLS Relay simply forwards this. If the joining
>> node does *not* know the DTLS Server's IP address, the DTLS Relay is
>> forwarding it to any device it likes (which could of course very well be the
>> network manager). So, in the first case the joining node seems in full control
>> as to which device it connects (perhaps, even a device that is not part of the
>> network); in the second case the relaying node determines who it connects
>> the joining node to (which may be fine in communication security scenarios,
>> but perhaps not in application security settings).
>>
>> If you could elaborate on the role of the "on/off switch" in countering these
>> threats that would help.
>>
>> Rene
>>
>> [2nd threat, excerpted from your email as of May 28, 2014, 10:14am NL]
>>
>> - misuse of the relay functionality to allow a rogue node to setup a DTLS
>> session with a server which is not the network manager
>>
>>
>> On 5/28/2014 4:14 AM, Kumar, Sandeep wrote:
>>> Hi Rene
>>>
>>> The security considerations section is not completely baked yet. But to
>> answer your questions, we were considering the following two threats:
>>> - DoS where a large number of joining messages are sent by  rogue
>>> nodes either to flood the lowpan or drain the network manager
>>> - misuse of the relay functionality to allow a rogue node to setup a
>>> DTLS session with a server which is not the network manager
>>>
>>> The "on/off switch" is just one option for the DoS where the network
>> manager can detect too many failed requests and issue a multicast
>> management message (e.g. a CoAP request to a resource) to stop or further
>> throttle joining messages being accepted by relay nodes for a limited time.
>> Of course as you mentioned, this will be delayed until the third flow of the
>> DTLS protocol, but the DTLS cookie should provide some additional resistance
>> initially. In other scenarios, the timing of a joining device is known (e.g. within
>> a home) and the relays can be asked to switched on and later switched off to
>> restrict the window of opportunity to the attacker.
>>> The idea is that the new device gets the configuration info within the DTLS
>> session that is created (e.g. as a CoAP request to a resource). How and
>> format needs to be defined (either here or somewhere else more
>> generally).
>>> There could be more threats and possible countermeasures, let me know if
>> you have more ideas.
>>> Regards
>>> Sandeep
>>>
>>>> -----Original Message-----
>>>> From: dtls-iot [mailto:dtls-iot-bounces@ietf.org] On Behalf Of Rene
>>>> Struik
>>>> Sent: Tuesday, May 27, 2014 10:55 PM
>>>> To: dtls-iot@ietf.org
>>>> Subject: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01
>>>>
>>>> Dear Sandeep, Oscar, Sye Loong:
>>>>
>>>> I read draft-kumar-dice-dtls-relay-01 a few days ago. In the security
>>>> considerations section of that draft, you allude to potential denial
>>>> of services attacks in the context where a one-hop neighbor of a
>>>> joining node facilitates messaging between that joining node and the
>>>> network manager potentially many hops away, where the joining node
>>>> and the network manager act as DTLS Client and DTLS Server,
>>>> respectively, and where the one-hop neighbor acts as DTLS Relay. You
>>>> also suggest some measures to thwart/limit denial of service attack risk.
>>>>
>>>> I would be curious as to whether you could provide some more insight
>>>> as to what type of denial of service attack you counter and how the
>>>> DTLS Relay "on/off switch" would work in practice. How would one
>>>> detect a potential DoS attack and turn on the "DTLS Relay on/off"
>>>> knobs to counter an influx of bogus join protocol messages that could
>>>> be amplified if this would travel to the network manager (in a
>>>> scenario where both are many hops away from each other)? Since with
>>>> DTLS, client authentication only happens in the third protocol flow,
>>>> it seems that by necessity one has to allow three subsequent message
>>>> flows (key establishment messages from client to server and back, key
>>>> confirmation message from client to server), without the DTLS Relay
>>>> element having a mechanism (except for throttling) to cryptographically
>> arbitrage these flows.
>>>> When does the newbee device get configuration info and, e.g., a
>>>> routable address assigned?
>>>>
>>>> If you could expand on this scenario, that would be great.
>>>>
>>>> Best regards, Rene
>>>>
>>>>
>>>>
>>>> [excerpt from draft-kumar-dice-dtls-relay-01] 5. Security
>>>> Considerations Additional security considerations need to be taken
>>>> into account about forwarding of messages from devices through a
>>>> network to which it has not yet been admitted. This can lead to
>>>> denial-of-service attacks or misuse of network resources without
>>>> proper authentication. One way to overcome any large scale misuse of
>>>> the network is to have a management message from the Controller that
>>>> initiates already authenticated devices in the network to enter into
>>>> a DTLS Relay mode. The devices can stay such a Relay mode for a fixed
>>>> period of time or until the Controller sends a new management message
>>>> blocking the DTLS Relay mode in all devices in the network. This is
>>>> often possible since the administrator of the network can be aware
>>>> when new devices join the network either because of the
>>>> "Introduction" phase or commissioning phase. Other mechanisms based
>>>> on IP destination filtering can be applied by the controller to all Relay
>> nodes to avoid misuse of the network resources.
>>>> --
>>>> email: rstruik.ext@gmail.com | Skype: rstruik
>>>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363
>>>>
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> dtls-iot mailing list
>>>> dtls-iot@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/dtls-iot
>>> ________________________________
>>> The information contained in this message may be confidential and legally
>> protected under applicable law. The message is intended solely for the
>> addressee(s). If you are not the intended recipient, you are hereby notified
>> that any use, forwarding, dissemination, or reproduction of this message is
>> strictly prohibited and may be unlawful. If you are not the intended recipient,
>> please contact the sender by return e-mail and destroy all copies of the
>> original message.
>>
>> --
>> email: rstruik.ext@gmail.com | Skype: rstruik
>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363
>
> ________________________________
> The information contained in this message may be confidential and legally protected under applicable law. The message is intended solely for the addressee(s). If you are not the intended recipient, you are hereby notified that any use, forwarding, dissemination, or reproduction of this message is strictly prohibited and may be unlawful. If you are not the intended recipient, please contact the sender by return e-mail and destroy all copies of the original message.
>


--
email: rstruik.ext@gmail.com | Skype: rstruik
cell: +1 (647) 867-5658 | US: +1 (415) 690-7363



-- 
email: rstruik.ext@gmail.com | Skype: rstruik
cell: +1 (647) 867-5658 | US: +1 (415) 690-7363
--------------010400060404060905080900-- From nobody Thu May 29 10:38:40 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BDED21A0455 for ; Thu, 29 May 2014 10:38:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.918 X-Spam-Level: X-Spam-Status: No, score=-0.918 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_FONT_FACE_BAD=0.981, HTML_MESSAGE=0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KscK2-fI2xEB for ; Thu, 29 May 2014 10:38:33 -0700 (PDT) Received: from mailscan1.extendcp.co.uk (mailscan30.extendcp.co.uk [176.32.228.4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8FEDB1A0449 for ; Thu, 29 May 2014 10:38:32 -0700 (PDT) Received: from lb1.hi.local ([10.0.1.197] helo=mailscan5.hi.local) by mailscan-g64.hi.local with esmtp (Exim 4.80.1) (envelope-from ) id 1Wq4HY-0004LN-W2; Thu, 29 May 2014 18:38:24 +0100 Received: from lb1.hi.local ([10.0.1.197] helo=mail41.extendcp.co.uk) by mailscan5.hi.local with esmtps (UNKNOWN:DHE-RSA-AES256-GCM-SHA384:256) (Exim 4.80.1) (envelope-from ) id 1Wq4HW-0001zP-93; Thu, 29 May 2014 18:38:25 +0100 Received: from host86-147-26-221.range86-147.btcentralplus.com ([86.147.26.221] helo=[192.168.0.2]) by mail41.extendcp.com with esmtpsa (TLSv1:DHE-RSA-AES128-SHA:128) (Exim 4.80.1) id 1Wq4HU-0006oK-0Z; Thu, 29 May 2014 18:38:21 +0100 Message-ID: <538770D9.2040103@gridmerge.com> Date: Thu, 29 May 2014 18:39:37 +0100 From: Robert Cragie Organization: Gridmerge Ltd. User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: Rene Struik , "Kumar, Sandeep" , "dtls-iot@ietf.org" References: <5384FB1C.60109@gmail.com> <5384FBB0.3040900@gmail.com> <5385FC6C.8080102@gmail.com> , <53860BB5.8020908@gmail.com> <538639AF.4050900@gmail.com> In-Reply-To: <538639AF.4050900@gmail.com> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms060109000709010302070400" X-Authenticated-As: robert.cragie@gridmerge.com X-Extend-Src: mailout Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/UwiSqOu7QamiGS7QZzSTYOV-Fns Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: robert.cragie@gridmerge.com List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 May 2014 17:38:37 -0000 This is a cryptographically signed message in MIME format. --------------ms060109000709010302070400 Content-Type: multipart/alternative; boundary="------------090203050902010501000105" This is a multi-part message in MIME format. --------------090203050902010501000105 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Hi Rene, Regarding the denial of service attack, the aim is to limit the impact=20 an unauthenticated device can have on other network devices from the=20 point of view of network access. The simplest countermeasure, which is widely used, is that whereby a=20 network-wide "permit join" is in force. This is probably the on/off=20 switch alluded to in the security considerations, so I don't think this=20 switch works autonomously based on detecting a large amount of=20 unauthenticated traffic, although this could be fed in to heuristics to=20 decide the state of permit join, especially with regarding to early=20 disabling. This is a simple way of preventing any attempt to appropriate = resources on a node at the perimeter of the network, providing=20 unauthenticated traffic can be easily distinguished. An example of=20 distinguishing traffic from an unauthenticated node from traffic from an = authenticated node is the presence of link layer security using a=20 network-wide key, given as a network access token. Assuming this method=20 is used, the perimeter node would simply silently discard any data=20 traffic unsecured at the network layer (excluding handling any necessary = management commands, e.g. beacon request). The next level of countermeasure needs to be considered when permit join = is enabled. In this case, a perimeter node needs to act as an=20 enforcement point and carefully police data traffic from any=20 unauthenticated node. Assuming the link-layer security method is used,=20 it is also easy to distinguish valid traffic for authentication purposes = from other traffic and to allow only such traffic to be further=20 processed. This further processing should ideally consume as little in=20 the way of resources as possible at the perimeter node. Hence the=20 suggested use of the stateless relay, which ensures there is no need to=20 allocate any resources to maintain state for the purposes of relaying to = another node. The cookie mechanism also provides some protection using spoofing nodes. = This could possibly be generalised into a proof of work/puzzle=20 mechanism, where a cookie exchange is a very simple proof of work which=20 would ask the unauthenticated initiator to do something to prove it is=20 at least attempting an authentication handshake. Further than that, the authentication handshake then of course has to=20 complete successfully. It is the earlier stages which are of interest in the case of the DTLS=20 relay and I think it would be worth expanding on these in the security=20 considerations. With regard to the 802.11 model, the AP acts as pass-through=20 Authenticator (an EAP expression) to an Authentication Server (usually=20 through RADIUS). The EAP model only considers these parties and whilst=20 there could be more intermediates, they don't figure as part of the EAP=20 transaction. The relay model is somewhat different in that an 802.11 STA = - AP model is a star (hub and spoke) model, whereas the relay model is=20 aimed more at mesh networks, hence the concept of a relay at a perimeter = node. Therefore it is possible in EAP terms that the joining node is the = Peer (supplicant in 802.1X-speak), the perimeter node is the relay (not=20 an EAP concept), the border router is the pass-through Authenticator and = some other device outside of the network being accessed is the=20 Authentication Server. Robert On 28/05/2014 8:31 PM, Rene Struik wrote: > Hi Sandeep: > > (based on recollection of 802.11ai discussions) Conceptually, the=20 > third-party of the STA and AP may be different from one another (if=20 > these have pre-established keys with different third-parties). In that = > case, while logically the third-parties are different, this may still=20 > result in AP communicating with its own third-party and delegating any = > third-party arbitrage stuff to a (for him) black box. (So,=20 > communication can still be seemingly decided locally by AP alone, with = > any other mechanisms occurring invisibly in the background. With=20 > 802.11 wifi in a smart phone, third parties of STA and AP could, for=20 > example, be Verizon and China Mobile, where "black box" magic would be = > some heavy-handed infrastructure and business agreements between those = > two players. > > Of course, this is all slightly on a tangent w.r.t. security aspects=20 > of relayed communications. > > Rene > > On 5/28/2014 2:47 PM, Kumar, Sandeep wrote: >> In 802.11, if I am not mistaken, the AP acting as the relay decides=20 >> which authentication server T to use (e.g. which RADIUS server to use = >> is configured at the AP and not on the STA). The STA may indicate a=20 >> domain parameter if a remote RADIUS server needs to be used but the=20 >> address of the remote server is configured at the proxy RADIUS=20 >> server. In both cases the STA cannot contact arbitrary server T. Its=20 >> similar to the case where the DTLS relay decides which network=20 >> manager to use. Right? >> >> Sandeep >> >> >> *From:* Rene Struik >> *Sent:* ?Wednesday?, ?May? ?28?, ?2014 ?6?:?15? ?PM >> *To:* Sandeep Kumar ,=20 >> dtls-iot@ietf.org >> >> With 802.11, when a STA device joins a network at an access point AP, = >> the AP may sometimes act as a relay station and the actual=20 >> authentication is done by a third-party device T. In 802.11 parlance, = >> I believe the STA is called the supplicant, the AP the Authenticator=20 >> and T the Server (very confusing verbiage indeed, since AP does not=20 >> do anything from crypto perspective). In fact, any three-party key=20 >> agreement protocol with inline third party and where the result=20 >> really depends on this third party being in the loop seems an example = >> of use case you asked about. >> >> =3D=3D >> Do you have any specific use case where a joining node decides which=20 >> network manager to contact? >> >> >> On 5/28/2014 11:43 AM, Kumar, Sandeep wrote: >> > Hi Rene >> > >> > Sorry for the confusion, I did not intend to say that the "on/off"=20 >> was for the second threat. It only addresses the first threat. >> > >> > Regarding the second threat, indeed as you mentioned, either the=20 >> relay node decides or as in the security considerations " Other=20 >> mechanisms based >> > on IP destination filtering can be applied by the controller to all = >> Relay nodes to avoid misuse of the network resources." I agree this=20 >> is vague on how the filtering parameters can be determined which can=20 >> be extended in future based on the use cases. Do you have any=20 >> specific use case where a joining node decides which network manager=20 >> to contact? >> > >> > Regards >> > Sandeep >> > >> > >> >> -----Original Message----- >> >> From: Rene Struik [mailto:rstruik.ext@gmail.com] >> >> Sent: Wednesday, May 28, 2014 5:11 PM >> >> To: Kumar, Sandeep; dtls-iot@ietf.org >> >> Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 >> >> >> >> Hi Sandeep: >> >> >> >> Thanks for the quick reply. I do understand your second threat,=20 >> but not how >> >> the "on/off switch" would play a role here. >> >> >> >> According to Section 3.1, with stateful relay, if the joining node = >> knows the >> >> DTLS Server's IP address, the DTLS Relay simply forwards this. If=20 >> the joining >> >> node does *not* know the DTLS Server's IP address, the DTLS Relay i= s >> >> forwarding it to any device it likes (which could of course very=20 >> well be the >> >> network manager). So, in the first case the joining node seems in=20 >> full control >> >> as to which device it connects (perhaps, even a device that is not = >> part of the >> >> network); in the second case the relaying node determines who it=20 >> connects >> >> the joining node to (which may be fine in communication security=20 >> scenarios, >> >> but perhaps not in application security settings). >> >> >> >> If you could elaborate on the role of the "on/off switch" in=20 >> countering these >> >> threats that would help. >> >> >> >> Rene >> >> >> >> [2nd threat, excerpted from your email as of May 28, 2014, 10:14am = NL] >> >> >> >> - misuse of the relay functionality to allow a rogue node to setup = >> a DTLS >> >> session with a server which is not the network manager >> >> >> >> >> >> On 5/28/2014 4:14 AM, Kumar, Sandeep wrote: >> >>> Hi Rene >> >>> >> >>> The security considerations section is not completely baked yet.=20 >> But to >> >> answer your questions, we were considering the following two threat= s: >> >>> - DoS where a large number of joining messages are sent by rogue >> >>> nodes either to flood the lowpan or drain the network manager >> >>> - misuse of the relay functionality to allow a rogue node to setup= a >> >>> DTLS session with a server which is not the network manager >> >>> >> >>> The "on/off switch" is just one option for the DoS where the netwo= rk >> >> manager can detect too many failed requests and issue a multicast >> >> management message (e.g. a CoAP request to a resource) to stop or=20 >> further >> >> throttle joining messages being accepted by relay nodes for a=20 >> limited time. >> >> Of course as you mentioned, this will be delayed until the third=20 >> flow of the >> >> DTLS protocol, but the DTLS cookie should provide some additional=20 >> resistance >> >> initially. In other scenarios, the timing of a joining device is=20 >> known (e.g. within >> >> a home) and the relays can be asked to switched on and later=20 >> switched off to >> >> restrict the window of opportunity to the attacker. >> >>> The idea is that the new device gets the configuration info=20 >> within the DTLS >> >> session that is created (e.g. as a CoAP request to a resource).=20 >> How and >> >> format needs to be defined (either here or somewhere else more >> >> generally). >> >>> There could be more threats and possible countermeasures, let me=20 >> know if >> >> you have more ideas. >> >>> Regards >> >>> Sandeep >> >>> >> >>>> -----Original Message----- >> >>>> From: dtls-iot [mailto:dtls-iot-bounces@ietf.org] On Behalf Of Re= ne >> >>>> Struik >> >>>> Sent: Tuesday, May 27, 2014 10:55 PM >> >>>> To: dtls-iot@ietf.org >> >>>> Subject: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 >> >>>> >> >>>> Dear Sandeep, Oscar, Sye Loong: >> >>>> >> >>>> I read draft-kumar-dice-dtls-relay-01 a few days ago. In the=20 >> security >> >>>> considerations section of that draft, you allude to potential den= ial >> >>>> of services attacks in the context where a one-hop neighbor of a >> >>>> joining node facilitates messaging between that joining node and = the >> >>>> network manager potentially many hops away, where the joining nod= e >> >>>> and the network manager act as DTLS Client and DTLS Server, >> >>>> respectively, and where the one-hop neighbor acts as DTLS Relay. = You >> >>>> also suggest some measures to thwart/limit denial of service=20 >> attack risk. >> >>>> >> >>>> I would be curious as to whether you could provide some more insi= ght >> >>>> as to what type of denial of service attack you counter and how t= he >> >>>> DTLS Relay "on/off switch" would work in practice. How would one >> >>>> detect a potential DoS attack and turn on the "DTLS Relay on/off"= >> >>>> knobs to counter an influx of bogus join protocol messages that=20 >> could >> >>>> be amplified if this would travel to the network manager (in a >> >>>> scenario where both are many hops away from each other)? Since wi= th >> >>>> DTLS, client authentication only happens in the third protocol fl= ow, >> >>>> it seems that by necessity one has to allow three subsequent mess= age >> >>>> flows (key establishment messages from client to server and=20 >> back, key >> >>>> confirmation message from client to server), without the DTLS Rel= ay >> >>>> element having a mechanism (except for throttling) to=20 >> cryptographically >> >> arbitrage these flows. >> >>>> When does the newbee device get configuration info and, e.g., a >> >>>> routable address assigned? >> >>>> >> >>>> If you could expand on this scenario, that would be great. >> >>>> >> >>>> Best regards, Rene >> >>>> >> >>>> >> >>>> >> >>>> [excerpt from draft-kumar-dice-dtls-relay-01] 5. Security >> >>>> Considerations Additional security considerations need to be take= n >> >>>> into account about forwarding of messages from devices through a >> >>>> network to which it has not yet been admitted. This can lead to >> >>>> denial-of-service attacks or misuse of network resources without >> >>>> proper authentication. One way to overcome any large scale misuse= of >> >>>> the network is to have a management message from the Controller t= hat >> >>>> initiates already authenticated devices in the network to enter i= nto >> >>>> a DTLS Relay mode. The devices can stay such a Relay mode for a=20 >> fixed >> >>>> period of time or until the Controller sends a new management=20 >> message >> >>>> blocking the DTLS Relay mode in all devices in the network. This = is >> >>>> often possible since the administrator of the network can be awar= e >> >>>> when new devices join the network either because of the >> >>>> "Introduction" phase or commissioning phase. Other mechanisms bas= ed >> >>>> on IP destination filtering can be applied by the controller to=20 >> all Relay >> >> nodes to avoid misuse of the network resources. >> >>>> -- >> >>>> email: rstruik.ext@gmail.com | Skype: rstruik >> >>>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >> >>>> >> >>>> >> >>>> >> >>>> >> >>>> _______________________________________________ >> >>>> dtls-iot mailing list >> >>>> dtls-iot@ietf.org >> >>>> https://www.ietf.org/mailman/listinfo/dtls-iot >> >>> ________________________________ >> >>> The information contained in this message may be confidential and = >> legally >> >> protected under applicable law. The message is intended solely for = the >> >> addressee(s). If you are not the intended recipient, you are=20 >> hereby notified >> >> that any use, forwarding, dissemination, or reproduction of this=20 >> message is >> >> strictly prohibited and may be unlawful. If you are not the=20 >> intended recipient, >> >> please contact the sender by return e-mail and destroy all copies=20 >> of the >> >> original message. >> >> >> >> -- >> >> email: rstruik.ext@gmail.com | Skype: rstruik >> >> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >> > >> > ________________________________ >> > The information contained in this message may be confidential and=20 >> legally protected under applicable law. The message is intended=20 >> solely for the addressee(s). If you are not the intended recipient,=20 >> you are hereby notified that any use, forwarding, dissemination, or=20 >> reproduction of this message is strictly prohibited and may be=20 >> unlawful. If you are not the intended recipient, please contact the=20 >> sender by return e-mail and destroy all copies of the original message= =2E >> > >> >> >> --=20 >> email: rstruik.ext@gmail.com | Skype: rstruik >> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >> > > > --=20 > email:rstruik.ext@gmail.com | Skype: rstruik > cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 > > > _______________________________________________ > dtls-iot mailing list > dtls-iot@ietf.org > https://www.ietf.org/mailman/listinfo/dtls-iot --------------090203050902010501000105 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Hi Rene,

Regarding the denial of service attack, the aim is to limit the impact an unauthenticated device can have on other network devices from the point of view of network access.

The simplest countermeasure, which is widely used, is that whereby a network-wide "permit join" is in force. This is probably the on/off switch alluded to in the security considerations, so I don't think this switch works autonomously based on detecting a large amount of unauthenticated traffic, although this could be fed in to heuristics to decide the state of permit join, especially with regarding to early disabling. This is a simple way of preventing any attempt to appropriate resources on a node at the perimeter of the network, providing unauthenticated traffic can be easily distinguished. An example of distinguishing traffic from an unauthenticated node from traffic from an authenticated node is the presence of link layer security using a network-wide key, given as a network access token. Assuming this method is used, the perimeter node would simply silently discard any data traffic unsecured at the network layer (excluding handling any necessary management commands, e.g. beacon request).

The next level of countermeasure needs to be considered when permit join is enabled. In this case, a perimeter node needs to act as an enforcement point and carefully police data traffic from any unauthenticated node. Assuming the link-layer security method is used, it is also easy to distinguish valid traffic for authentication purposes from other traffic and to allow only such traffic to be further processed. This further processing should ideally consume as little in the way of resources as possible at the perimeter node. Hence the suggested use of the stateless relay, which ensures there is no need to allocate any resources to maintain state for the purposes of relaying to another node.

The cookie mechanism also provides some protection using spoofing nodes. This could possibly be generalised into a proof of work/puzzle mechanism, where a cookie exchange is a very simple proof of work which would ask the unauthenticated initiator to do something to prove it is at least attempting an authentication handshake.

Further than that, the authentication handshake then of course has to complete successfully.

It is the earlier stages which are of interest in the case of the DTLS relay and I think it would be worth expanding on these in the security considerations.

With regard to the 802.11 model, the AP acts as pass-through Authenticator (an EAP expression) to an Authentication Server (usually through RADIUS). The EAP model only considers these parties and whilst there could be more intermediates, they don't figure as part of the EAP transaction. The relay model is somewhat different in that an 802.11 STA - AP model is a star (hub and spoke) model, whereas the relay model is aimed more at mesh networks, hence the concept of a relay at a perimeter node. Therefore it is possible in EAP terms that the joining node is the Peer (supplicant in 802.1X-speak), the perimeter node is the relay (not an EAP concept), the border router is the pass-through Authenticator and some other device outside of the network being accessed is the Authentication Server.

Robert

On 28/05/2014 8:31 PM, Rene Struik wrote:
Hi Sandeep:

(based on recollection of 802.11ai discussions) Conceptually, the third-party of the STA and AP may be different from one another (if these have pre-established keys with different third-parties). In that case, while logically the third-parties are different, this may still result in AP communicating with its own third-party and delegating any third-party arbitrage stuff to a (for him) black box. (So, communication can still be seemingly decided locally by AP alone, with any other mechanisms occurring invisibly in the background. With 802.11 wifi in a smart phone, third parties of STA and AP could, for example, be Verizon and China Mobile, where "black box" magic would be some heavy-handed infrastructure and business agreements between those two players.

Of course, this is all slightly on a tangent w.r.t. security aspects of relayed communications.

Rene

On 5/28/2014 2:47 PM, Kumar, Sandeep wrote:
In 802.11, if I am not mistaken, the AP acting as the= relay decides which authentication server T to use (e.g. which RADIUS server to use is configured at the AP= and not on the STA). The STA may indicate a domain parameter if a remote RADIUS server needs to be used but the address of the remote server is configured at the proxy RADIUS server. In both cases the STA cannot contact arbitrary server T. Its similar to the case where the DTLS relay decides which network manager to use. Right?

Sandeep


From: Rene Struik
Sent: ‎Wednesday‎, ‎MayR= 06; ‎28‎, ‎2014 ‎6‎:‎15‎ ‎= ;PM
To: Sandeep Kumar, dtls-iot@ietf.org

With 802.11, when a STA device joins a network at an access point AP, the AP may sometimes act as a relay station and the actual authentication is done by a third-party device T. In 802.11 parlance, I believe the STA is called the supplicant, the AP the Authenticator and T the Server (very confusing verbiage indeed, since AP does not do anything from crypto perspective). In fact, any three-party key agreement protocol with inline third party and where the result really depends on this third party being in the loop seems an example of use case you asked about.

=3D=3D
Do you have any specific use case where a joining node decides which network manager to contact?


On 5/28/2014 11:43 AM, Kumar, Sandeep wrote:
> Hi Rene
>
> Sorry for the confusion, I did not intend to say that the "on/off" was for the second threat. It only addresses the first threat.
>
> Regarding the second threat, indeed as you mentioned, either the relay node decides or as in the security considerations " Other mechanisms based
> on IP destination filtering can be applied by the controller to all Relay nodes to avoid misuse of the network resources." I agree this is vague on how the filtering parameters can be determined which can be extended in future based on the use cases. Do you have any specific use case where a joining node decides which network manager to contact?
>
> Regards
> Sandeep
>
>
>> -----Original Message-----
>> From: Rene Struik [mailto:rstruik.ext@= gmail.com]
>> Sent: Wednesday, May 28, 2014 5:11 PM
>> To: Kumar, Sandeep; dtls-iot@ietf.org >> Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01
>>
>> Hi Sandeep:
>>
>> Thanks for the quick reply. I do understand your second threat, but not how
>> the "on/off switch" would play a role here.
>>
>> According to Section 3.1, with stateful relay, if the joining node knows the
>> DTLS Server's IP address, the DTLS Relay simply forwards this. If the joining
>> node does *not* know the DTLS Server's IP address, the DTLS Relay is
>> forwarding it to any device it likes (which could of course very well be the
>> network manager). So, in the first case the joining node seems in full control
>> as to which device it connects (perhaps, even a device that is not part of the
>> network); in the second case the relaying node determines who it connects
>> the joining node to (which may be fine in communication security scenarios,
>> but perhaps not in application security settings).
>>
>> If you could elaborate on the role of the "on/off switch" in countering these
>> threats that would help.
>>
>> Rene
>>
>> [2nd threat, excerpted from your email as of May 28, 2014, 10:14am NL]
>>
>> - misuse of the relay functionality to allow a rogue node to setup a DTLS
>> session with a server which is not the network manager
>>
>>
>> On 5/28/2014 4:14 AM, Kumar, Sandeep wrote:
>>> Hi Rene
>>>
>>> The security considerations section is not completely baked yet. But to
>> answer your questions, we were considering the following two threats:
>>> - DoS where a large number of joining messages are sent by  rogue
>>> nodes either to flood the lowpan or drain the network manager
>>> - misuse of the relay functionality to allow a rogue node to setup a
>>> DTLS session with a server which is not the network manager
>>>
>>> The "on/off switch" is just one option for the DoS where the network
>> manager can detect too many failed requests and issue a multicast
>> management message (e.g. a CoAP request to a resource) to stop or further
>> throttle joining messages being accepted by relay nodes for a limited time.
>> Of course as you mentioned, this will be delayed until the third flow of the
>> DTLS protocol, but the DTLS cookie should provide some additional resistance
>> initially. In other scenarios, the timing of a joining device is known (e.g. within
>> a home) and the relays can be asked to switched on and later switched off to
>> restrict the window of opportunity to the attacker.
>>> The idea is that the new device gets the configuration info within the DTLS
>> session that is created (e.g. as a CoAP request to a resource). How and
>> format needs to be defined (either here or somewhere else more
>> generally).
>>> There could be more threats and possible countermeasures, let me know if
>> you have more ideas.
>>> Regards
>>> Sandeep
>>>
>>>> -----Original Message-----
>>>> From: dtls-iot [mailto:dtls-iot= -bounces@ietf.org] On Behalf Of Rene
>>>> Struik
>>>> Sent: Tuesday, May 27, 2014 10:55 PM
>>>> To: dtls-iot@ietf.org >>>> Subject: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01
>>>>
>>>> Dear Sandeep, Oscar, Sye Loong:
>>>>
>>>> I read draft-kumar-dice-dtls-relay-01 a few days ago. In the security
>>>> considerations section of that draft, you allude to potential denial
>>>> of services attacks in the context where a one-hop neighbor of a
>>>> joining node facilitates messaging between that joining node and the
>>>> network manager potentially many hops away, where the joining node
>>>> and the network manager act as DTLS Client and DTLS Server,
>>>> respectively, and where the one-hop neighbor acts as DTLS Relay. You
>>>> also suggest some measures to thwart/limit denial of service attack risk.
>>>>
>>>> I would be curious as to whether you could provide some more insight
>>>> as to what type of denial of service attack you counter and how the
>>>> DTLS Relay "on/off switch" would work in practice. How would one
>>>> detect a potential DoS attack and turn on the "DTLS Relay on/off"
>>>> knobs to counter an influx of bogus join protocol messages that could
>>>> be amplified if this would travel to the network manager (in a
>>>> scenario where both are many hops away from each other)? Since with
>>>> DTLS, client authentication only happens in the third protocol flow,
>>>> it seems that by necessity one has to allow three subsequent message
>>>> flows (key establishment messages from client to server and back, key
>>>> confirmation message from client to server), without the DTLS Relay
>>>> element having a mechanism (except for throttling) to cryptographically
>> arbitrage these flows.
>>>> When does the newbee device get configuration info and, e.g., a
>>>> routable address assigned?
>>>>
>>>> If you could expand on this scenario, that would be great.
>>>>
>>>> Best regards, Rene
>>>>
>>>>
>>>>
>>>> [excerpt from draft-kumar-dice-dtls-relay-01] 5. Security
>>>> Considerations Additional security considerations need to be taken
>>>> into account about forwarding of messages from devices through a
>>>> network to which it has not yet been admitted. This can lead to
>>>> denial-of-service attacks or misuse of network resources without
>>>> proper authentication. One way to overcome any large scale misuse of
>>>> the network is to have a management message from the Controller that
>>>> initiates already authenticated devices in the network to enter into
>>>> a DTLS Relay mode. The devices can stay such a Relay mode for a fixed
>>>> period of time or until the Controller sends a new management message
>>>> blocking the DTLS Relay mode in all devices in the network. This is
>>>> often possible since the administrator of the network can be aware
>>>> when new devices join the network either because of the
>>>> "Introduction" phase or commissioning phase. Other mechanisms based
>>>> on IP destination filtering can be applied by the controller to all Relay
>> nodes to avoid misuse of the network resources. >>>> --
>>>> email: rstruik.ext@gmail.c= om | Skype: rstruik
>>>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363
>>>>
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> dtls-iot mailing list
>>>> dtls-iot@ietf.org >>>> h= ttps://www.ietf.org/mailman/listinfo/dtls-iot
>>> ________________________________
>>> The information contained in this message may be confidential and legally
>> protected under applicable law. The message is intended solely for the
>> addressee(s). If you are not the intended recipient, you are hereby notified
>> that any use, forwarding, dissemination, or reproduction of this message is
>> strictly prohibited and may be unlawful. If you are not the intended recipient,
>> please contact the sender by return e-mail and destroy all copies of the
>> original message.
>>
>> --
>> email: rstruik.ext@gmail.c= om | Skype: rstruik
>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >
> ________________________________
> The information contained in this message may be confidential and legally protected under applicable law. The message is intended solely for the addressee(s). If you are not the intended recipient, you are hereby notified that any use, forwarding, dissemination, or reproduction of this message is strictly prohibited and may be unlawful. If you are not the intended recipient, please contact the sender by return e-mail and destroy all copies of the original message.
>


--
email: rstruik.ext@gmail.c= om | Skype: rstruik
cell: +1 (647) 867-5658 | US: +1 (415) 690-7363



--=20
email: rstruik.ext@gmail.com | Skype: rst=
ruik
cell: +1 (647) 867-5658 | US: +1 (415) 690-7363


_______________________________________________
dtls-iot mailing list
d=
tls-iot@ietf.org
https://www.ietf.org/mailman/listinfo/dtls-iot

--------------090203050902010501000105-- --------------ms060109000709010302070400 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIILUDCC BRowggQCoAMCAQICEG0Z6qcZT2ozIuYiMnqqcd4wDQYJKoZIhvcNAQEFBQAwga4xCzAJBgNV BAYTAlVTMQswCQYDVQQIEwJVVDEXMBUGA1UEBxMOU2FsdCBMYWtlIENpdHkxHjAcBgNVBAoT FVRoZSBVU0VSVFJVU1QgTmV0d29yazEhMB8GA1UECxMYaHR0cDovL3d3dy51c2VydHJ1c3Qu Y29tMTYwNAYDVQQDEy1VVE4tVVNFUkZpcnN0LUNsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQg RW1haWwwHhcNMTEwNDI4MDAwMDAwWhcNMjAwNTMwMTA0ODM4WjCBkzELMAkGA1UEBhMCR0Ix GzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UE ChMRQ09NT0RPIENBIExpbWl0ZWQxOTA3BgNVBAMTMENPTU9ETyBDbGllbnQgQXV0aGVudGlj YXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJKEhFtLV5jUXi+LpOFAyKNTWF9mZfEyTvefMn1V0HhMVbdClOD5J3EHxcZppLkyxPFA GpDMJ1Zifxe1cWmu5SAb5MtjXmDKokH2auGj/7jfH0htZUOMKi4rYzh337EXrMLaggLW1DJq 1GdvIBOPXDX65VSAr9hxCh03CgJQU2yVHakQFLSZlVkSMf8JotJM3FLb3uJAAVtIaN3FSrTg 7SQfOq9xXwfjrL8UO7AlcWg99A/WF1hGFYE8aIuLgw9teiFX5jSw2zJ+40rhpVJyZCaRTqWS D//gsWD9Gm9oUZljjRqLpcxCm5t9ImPTqaD8zp6Q30QZ9FxbNboW86eb/8ECAwEAAaOCAUsw ggFHMB8GA1UdIwQYMBaAFImCZ33EnSZwAEu0UEh83j2uBG59MB0GA1UdDgQWBBR6E04AdFvG eGNkJ8Ev4qBbvHnFezAOBgNVHQ8BAf8EBAMCAQYwEgYDVR0TAQH/BAgwBgEB/wIBADARBgNV HSAECjAIMAYGBFUdIAAwWAYDVR0fBFEwTzBNoEugSYZHaHR0cDovL2NybC51c2VydHJ1c3Qu Y29tL1VUTi1VU0VSRmlyc3QtQ2xpZW50QXV0aGVudGljYXRpb25hbmRFbWFpbC5jcmwwdAYI KwYBBQUHAQEEaDBmMD0GCCsGAQUFBzAChjFodHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20vVVRO QWRkVHJ1c3RDbGllbnRfQ0EuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1 c3QuY29tMA0GCSqGSIb3DQEBBQUAA4IBAQCF1r54V1VtM39EUv5C1QaoAQOAivsNsv1Kv/av QUn1G1rF0q0bc24+6SZ85kyYwTAo38v7QjyhJT4KddbQPTmGZtGhm7VNm2+vKGwdr+XqdFqo 2rHA8XV6L566k3nK/uKRHlZ0sviN0+BDchvtj/1gOSBH+4uvOmVIPJg9pSW/ve9g4EnlFsjr P0OD8ODuDcHTzTNfm9C9YGqzO/761Mk6PB/tm/+bSTO+Qik5g+4zaS6CnUVNqGnagBsePdIa XXxHmaWbCG0SmYbWXVcHG6cwvktJRLiQfsrReTjrtDP6oDpdJlieYVUYtCHVmdXgQ0BCML7q peeU0rD+83X5f27nMIIGLjCCBRagAwIBAgIQXDFQ28QtqMuYch5f2nTvZjANBgkqhkiG9w0B AQUFADCBkzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxOTA3BgNVBAMTMENP TU9ETyBDbGllbnQgQXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTAeFw0xMTA5 MDIwMDAwMDBaFw0xNDA5MDEyMzU5NTlaMIIBNzELMAkGA1UEBhMCR0IxEDAOBgNVBBETB1dG NCA0V0ExFzAVBgNVBAgTDldlc3QgWW9ya3NoaXJlMRIwEAYDVQQHEwlXYWtlZmllbGQxFDAS BgNVBAkTC0dyYW5nZSBNb29yMR8wHQYDVQQJExY4OSBHcmVlbmZpZWxkIENyZXNjZW50MRcw FQYDVQQKEw5HcmlkbWVyZ2UgTHRkLjE0MDIGA1UECxMrSXNzdWVkIHRocm91Z2ggR3JpZG1l cmdlIEx0ZC4gRS1QS0kgTWFuYWdlcjEfMB0GA1UECxMWQ29ycG9yYXRlIFNlY3VyZSBFbWFp bDEWMBQGA1UEAxMNUm9iZXJ0IENyYWdpZTEqMCgGCSqGSIb3DQEJARYbcm9iZXJ0LmNyYWdp ZUBncmlkbWVyZ2UuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcThqvLe WU1Q1ZJmnb+2UQSwOQKWok3A1Mwk582AdvwaAQyBFliPyJ0kXJqtwNBoZvk+3WJr0QA5ZRr+ J0x3sXVpcxadojP2HNzy1gsgDtIGG8ltoU4vmX1A8BTlOIUT+Pg8p/bSruxV0vz0CR8ho2hs R0Zi5vU+rQKNmbgufbkWhlQnMEYjknemscLQfw1YZz90ta67doNDujFy6+X6I06HpjudgMYx 8bdsNS5xVFFwuBA1eqNQra+xLzhCOeX9PPB/zK68qdNhrni3WPYG9EhSt4Dzk+xIz9hj7wrU ZIVXDTPsY8qbUSBVpwmzI5lCHPgzurH1OK7WwgpDSsl5pwIDAQABo4IB1TCCAdEwHwYDVR0j BBgwFoAUehNOAHRbxnhjZCfBL+KgW7x5xXswHQYDVR0OBBYEFBCOXNH+lDm8U9gy3b3bRvrx vKgrMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwME BggrBgEFBQcDAjBGBgNVHSAEPzA9MDsGDCsGAQQBsjEBAgEDBTArMCkGCCsGAQUFBwIBFh1o dHRwczovL3NlY3VyZS5jb21vZG8ubmV0L0NQUzBXBgNVHR8EUDBOMEygSqBIhkZodHRwOi8v Y3JsLmNvbW9kb2NhLmNvbS9DT01PRE9DbGllbnRBdXRoZW50aWNhdGlvbmFuZFNlY3VyZUVt YWlsQ0EuY3JsMIGIBggrBgEFBQcBAQR8MHowUgYIKwYBBQUHMAKGRmh0dHA6Ly9jcnQuY29t b2RvY2EuY29tL0NPTU9ET0NsaWVudEF1dGhlbnRpY2F0aW9uYW5kU2VjdXJlRW1haWxDQS5j cnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTAmBgNVHREEHzAdgRty b2JlcnQuY3JhZ2llQGdyaWRtZXJnZS5jb20wDQYJKoZIhvcNAQEFBQADggEBAD6b/O0LkPav kR4Znoqxg0Ad7M3duDm4uzfrlX4ecgq56Ccdwd+3Tayz7Ewej30woVMmTKkA/NKRaCd0wVM9 8seF/oZjXKO7o1SH27igRnGSWjCoWXsdwJGfZbYnvcIIhhsxJoCPNbeSR7C0PAFDKsP3xrJy MHMljIJsoRbZu/fnYNyFWh9OXf7fYJOGmKDKAhSabUGfhY7umvU9d/YTqo02Q6YzC7d4zPNG 1a75AuHSEchf6GdKqycG38I5y9jlDaYfXspoS3PlTNCIeZONbOSMZgftnNEVKq+SWytFqyG/ 8+dwpm/a12KMex5J8iHwaUKj++2O2rAFNjDDqXpeEYoxggQZMIIEFQIBATCBqDCBkzELMAkG A1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9y ZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxOTA3BgNVBAMTMENPTU9ETyBDbGllbnQg QXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQQIQXDFQ28QtqMuYch5f2nTvZjAJ BgUrDgMCGgUAoIICRTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEP Fw0xNDA1MjkxNzM5MzdaMCMGCSqGSIb3DQEJBDEWBBQau6zxTz/XaJh6CrZRSlD923CIrzBs BgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYIKoZIhvcNAwcw DgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEo MIG5BgkrBgEEAYI3EAQxgaswgagwgZMxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVy IE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1p dGVkMTkwNwYDVQQDEzBDT01PRE8gQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUg RW1haWwgQ0ECEFwxUNvELajLmHIeX9p072YwgbsGCyqGSIb3DQEJEAILMYGroIGoMIGTMQsw CQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxm b3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDE5MDcGA1UEAxMwQ09NT0RPIENsaWVu dCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhBcMVDbxC2oy5hyHl/adO9m MA0GCSqGSIb3DQEBAQUABIIBAGlXiVk+zvSwvDNVDPXIjE8IbNaSN/IMWOT3VNPUFV7QdnFi +yEl12vOjTt3KAqsfZkGBoOrEj9J67eIvP78mPiTVDE1Y9/aul2lYTYGrwjGuJHkXFvqKFTi ZoCQ89NTO0TcohyIhXGD9GNcDeLysu+JTRQGHKi6xV13VCoJ75oJikUOjUZZ5haszag5IIlT mvOTlOR1Zn+YLYxBCa1FVavGhzOHPgrpv0DSjabiJB1UXzcgOL3nVn4z8GQGzIDihXrmSBtT JqPbvbDopVeNt+n84o0FGxTVHZslDgFRPMD3Hq55k6e6jvh0Os+xZA9PtEZDLEIkr7H+WmEP CRbaBSMAAAAAAAA= --------------ms060109000709010302070400-- From nobody Thu May 29 13:19:27 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 18F451A6EF7 for ; Thu, 29 May 2014 13:19:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.018 X-Spam-Level: X-Spam-Status: No, score=-1.018 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_FONT_FACE_BAD=0.981, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UvIQh5Ycv3nj for ; Thu, 29 May 2014 13:19:18 -0700 (PDT) Received: from mail-ie0-x231.google.com (mail-ie0-x231.google.com [IPv6:2607:f8b0:4001:c03::231]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8A0651A063F for ; Thu, 29 May 2014 13:19:18 -0700 (PDT) Received: by mail-ie0-f177.google.com with SMTP id y20so832224ier.36 for ; Thu, 29 May 2014 13:19:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type; bh=SE0wflOuY4aJFd7vzrUZQTYiQvDMFyqFN8dWEfUKJzA=; b=z9ckyEmQzyuIw+o+9zSsvVMZ9dPNZs3dr2u4v8j9TAyEWvru7Ls1e46JsHK/UPLB3V VBaOy2m0fxhchp7y7iiq6W7tcstVXCPXVvEFB0uHUSuXtuf2+WAdC1g2S1XXgByNsVt9 OsXNfvLCbJ/9DfF45JVId3XUve4yWGUFX3kLB4Irw0K3L1PgNqIRDJRzoRhsJtiwNDMr XJ7MiO/VKHUKcVmWXeTuU0/W9u1l7uE1/+mFArEmGKCDnVq6Pr00tQAm7T2ETNIzRJgG GqlANUwL4YsoT4IIeDUz/jSBtNQPwS/lhcz3bd87oj3aF5WIxqj9jeVnriyDsRNTO/XO n9Tw== X-Received: by 10.50.118.69 with SMTP id kk5mr13783217igb.10.1401394754296; Thu, 29 May 2014 13:19:14 -0700 (PDT) Received: from [192.168.1.105] (CPE0013100e2c51-CM001cea35caa6.cpe.net.cable.rogers.com. [99.231.3.110]) by mx.google.com with ESMTPSA id e6sm26250633igq.6.2014.05.29.13.19.12 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Thu, 29 May 2014 13:19:13 -0700 (PDT) Message-ID: <5387963C.3070304@gmail.com> Date: Thu, 29 May 2014 16:19:08 -0400 From: Rene Struik User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: robert.cragie@gridmerge.com, "Kumar, Sandeep" , "dtls-iot@ietf.org" References: <5384FB1C.60109@gmail.com> <5384FBB0.3040900@gmail.com> <5385FC6C.8080102@gmail.com> , <53860BB5.8020908@gmail.com> <538639AF.4050900@gmail.com> <538770D9.2040103@gridmerge.com> In-Reply-To: <538770D9.2040103@gridmerge.com> Content-Type: multipart/alternative; boundary="------------070302080309080207080604" Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/ajWrLamo7zbul3nRxBA5MXIYoX4 Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 May 2014 20:19:24 -0000 This is a multi-part message in MIME format. --------------070302080309080207080604 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Hi Robert: Thanks for your note. In the scenario where the "permit join" flag is switched ON, the DTLS Relay element can indeed limit the impact on locally maintained state by "making state travel around" (the stateless relay in Section 3.2 of the draft). However, this does not necessarily reduce the impact on consumed network resources (e.g., in terms of used capacity) elsewhere. Hence, my question on how the "relay on/off" switch mentioned in the security consideration section of draft-kumar-dice-dtls-relay-01 would work in practice. I think we all agree that this needs more work. Rene On 5/29/2014 1:39 PM, Robert Cragie wrote: > Hi Rene, > > Regarding the denial of service attack, the aim is to limit the impact > an unauthenticated device can have on other network devices from the > point of view of network access. > > The simplest countermeasure, which is widely used, is that whereby a > network-wide "permit join" is in force. This is probably the on/off > switch alluded to in the security considerations, so I don't think > this switch works autonomously based on detecting a large amount of > unauthenticated traffic, although this could be fed in to heuristics > to decide the state of permit join, especially with regarding to early > disabling. This is a simple way of preventing any attempt to > appropriate resources on a node at the perimeter of the network, > providing unauthenticated traffic can be easily distinguished. An > example of distinguishing traffic from an unauthenticated node from > traffic from an authenticated node is the presence of link layer > security using a network-wide key, given as a network access token. > Assuming this method is used, the perimeter node would simply silently > discard any data traffic unsecured at the network layer (excluding > handling any necessary management commands, e.g. beacon request). > > The next level of countermeasure needs to be considered when permit > join is enabled. In this case, a perimeter node needs to act as an > enforcement point and carefully police data traffic from any > unauthenticated node. Assuming the link-layer security method is used, > it is also easy to distinguish valid traffic for authentication > purposes from other traffic and to allow only such traffic to be > further processed. This further processing should ideally consume as > little in the way of resources as possible at the perimeter node. > Hence the suggested use of the stateless relay, which ensures there is > no need to allocate any resources to maintain state for the purposes > of relaying to another node. > > The cookie mechanism also provides some protection using spoofing > nodes. This could possibly be generalised into a proof of work/puzzle > mechanism, where a cookie exchange is a very simple proof of work > which would ask the unauthenticated initiator to do something to prove > it is at least attempting an authentication handshake. > > Further than that, the authentication handshake then of course has to > complete successfully. > > It is the earlier stages which are of interest in the case of the DTLS > relay and I think it would be worth expanding on these in the security > considerations. > > With regard to the 802.11 model, the AP acts as pass-through > Authenticator (an EAP expression) to an Authentication Server (usually > through RADIUS). The EAP model only considers these parties and whilst > there could be more intermediates, they don't figure as part of the > EAP transaction. The relay model is somewhat different in that an > 802.11 STA - AP model is a star (hub and spoke) model, whereas the > relay model is aimed more at mesh networks, hence the concept of a > relay at a perimeter node. Therefore it is possible in EAP terms that > the joining node is the Peer (supplicant in 802.1X-speak), the > perimeter node is the relay (not an EAP concept), the border router is > the pass-through Authenticator and some other device outside of the > network being accessed is the Authentication Server. > > Robert > > On 28/05/2014 8:31 PM, Rene Struik wrote: >> Hi Sandeep: >> >> (based on recollection of 802.11ai discussions) Conceptually, the >> third-party of the STA and AP may be different from one another (if >> these have pre-established keys with different third-parties). In >> that case, while logically the third-parties are different, this may >> still result in AP communicating with its own third-party and >> delegating any third-party arbitrage stuff to a (for him) black box. >> (So, communication can still be seemingly decided locally by AP >> alone, with any other mechanisms occurring invisibly in the >> background. With 802.11 wifi in a smart phone, third parties of STA >> and AP could, for example, be Verizon and China Mobile, where "black >> box" magic would be some heavy-handed infrastructure and business >> agreements between those two players. >> >> Of course, this is all slightly on a tangent w.r.t. security aspects >> of relayed communications. >> >> Rene >> >> On 5/28/2014 2:47 PM, Kumar, Sandeep wrote: >>> In 802.11, if I am not mistaken, the AP acting as the relay decides >>> which authentication server T to use (e.g. which RADIUS server to >>> use is configured at the AP and not on the STA). The STA may >>> indicate a domain parameter if a remote RADIUS server needs to be >>> used but the address of the remote server is configured at the proxy >>> RADIUS server. In both cases the STA cannot contact arbitrary server >>> T. Its similar to the case where the DTLS relay decides which >>> network manager to use. Right? >>> >>> Sandeep >>> >>> >>> *From:* Rene Struik >>> *Sent:* ?Wednesday?, ?May? ?28?, ?2014 ?6?:?15? ?PM >>> *To:* Sandeep Kumar , >>> dtls-iot@ietf.org >>> >>> With 802.11, when a STA device joins a network at an access point >>> AP, the AP may sometimes act as a relay station and the actual >>> authentication is done by a third-party device T. In 802.11 >>> parlance, I believe the STA is called the supplicant, the AP the >>> Authenticator and T the Server (very confusing verbiage indeed, >>> since AP does not do anything from crypto perspective). In fact, any >>> three-party key agreement protocol with inline third party and where >>> the result really depends on this third party being in the loop >>> seems an example of use case you asked about. >>> >>> == >>> Do you have any specific use case where a joining node decides which >>> network manager to contact? >>> >>> >>> On 5/28/2014 11:43 AM, Kumar, Sandeep wrote: >>> > Hi Rene >>> > >>> > Sorry for the confusion, I did not intend to say that the "on/off" >>> was for the second threat. It only addresses the first threat. >>> > >>> > Regarding the second threat, indeed as you mentioned, either the >>> relay node decides or as in the security considerations " Other >>> mechanisms based >>> > on IP destination filtering can be applied by the controller to >>> all Relay nodes to avoid misuse of the network resources." I agree >>> this is vague on how the filtering parameters can be determined >>> which can be extended in future based on the use cases. Do you have >>> any specific use case where a joining node decides which network >>> manager to contact? >>> > >>> > Regards >>> > Sandeep >>> > >>> > >>> >> -----Original Message----- >>> >> From: Rene Struik [mailto:rstruik.ext@gmail.com] >>> >> Sent: Wednesday, May 28, 2014 5:11 PM >>> >> To: Kumar, Sandeep; dtls-iot@ietf.org >>> >> Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 >>> >> >>> >> Hi Sandeep: >>> >> >>> >> Thanks for the quick reply. I do understand your second threat, >>> but not how >>> >> the "on/off switch" would play a role here. >>> >> >>> >> According to Section 3.1, with stateful relay, if the joining >>> node knows the >>> >> DTLS Server's IP address, the DTLS Relay simply forwards this. If >>> the joining >>> >> node does *not* know the DTLS Server's IP address, the DTLS Relay is >>> >> forwarding it to any device it likes (which could of course very >>> well be the >>> >> network manager). So, in the first case the joining node seems in >>> full control >>> >> as to which device it connects (perhaps, even a device that is >>> not part of the >>> >> network); in the second case the relaying node determines who it >>> connects >>> >> the joining node to (which may be fine in communication security >>> scenarios, >>> >> but perhaps not in application security settings). >>> >> >>> >> If you could elaborate on the role of the "on/off switch" in >>> countering these >>> >> threats that would help. >>> >> >>> >> Rene >>> >> >>> >> [2nd threat, excerpted from your email as of May 28, 2014, >>> 10:14am NL] >>> >> >>> >> - misuse of the relay functionality to allow a rogue node to >>> setup a DTLS >>> >> session with a server which is not the network manager >>> >> >>> >> >>> >> On 5/28/2014 4:14 AM, Kumar, Sandeep wrote: >>> >>> Hi Rene >>> >>> >>> >>> The security considerations section is not completely baked yet. >>> But to >>> >> answer your questions, we were considering the following two threats: >>> >>> - DoS where a large number of joining messages are sent by rogue >>> >>> nodes either to flood the lowpan or drain the network manager >>> >>> - misuse of the relay functionality to allow a rogue node to setup a >>> >>> DTLS session with a server which is not the network manager >>> >>> >>> >>> The "on/off switch" is just one option for the DoS where the network >>> >> manager can detect too many failed requests and issue a multicast >>> >> management message (e.g. a CoAP request to a resource) to stop or >>> further >>> >> throttle joining messages being accepted by relay nodes for a >>> limited time. >>> >> Of course as you mentioned, this will be delayed until the third >>> flow of the >>> >> DTLS protocol, but the DTLS cookie should provide some additional >>> resistance >>> >> initially. In other scenarios, the timing of a joining device is >>> known (e.g. within >>> >> a home) and the relays can be asked to switched on and later >>> switched off to >>> >> restrict the window of opportunity to the attacker. >>> >>> The idea is that the new device gets the configuration info >>> within the DTLS >>> >> session that is created (e.g. as a CoAP request to a resource). >>> How and >>> >> format needs to be defined (either here or somewhere else more >>> >> generally). >>> >>> There could be more threats and possible countermeasures, let me >>> know if >>> >> you have more ideas. >>> >>> Regards >>> >>> Sandeep >>> >>> >>> >>>> -----Original Message----- >>> >>>> From: dtls-iot [mailto:dtls-iot-bounces@ietf.org] On Behalf Of Rene >>> >>>> Struik >>> >>>> Sent: Tuesday, May 27, 2014 10:55 PM >>> >>>> To: dtls-iot@ietf.org >>> >>>> Subject: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 >>> >>>> >>> >>>> Dear Sandeep, Oscar, Sye Loong: >>> >>>> >>> >>>> I read draft-kumar-dice-dtls-relay-01 a few days ago. In the >>> security >>> >>>> considerations section of that draft, you allude to potential >>> denial >>> >>>> of services attacks in the context where a one-hop neighbor of a >>> >>>> joining node facilitates messaging between that joining node >>> and the >>> >>>> network manager potentially many hops away, where the joining node >>> >>>> and the network manager act as DTLS Client and DTLS Server, >>> >>>> respectively, and where the one-hop neighbor acts as DTLS >>> Relay. You >>> >>>> also suggest some measures to thwart/limit denial of service >>> attack risk. >>> >>>> >>> >>>> I would be curious as to whether you could provide some more >>> insight >>> >>>> as to what type of denial of service attack you counter and how the >>> >>>> DTLS Relay "on/off switch" would work in practice. How would one >>> >>>> detect a potential DoS attack and turn on the "DTLS Relay on/off" >>> >>>> knobs to counter an influx of bogus join protocol messages that >>> could >>> >>>> be amplified if this would travel to the network manager (in a >>> >>>> scenario where both are many hops away from each other)? Since with >>> >>>> DTLS, client authentication only happens in the third protocol >>> flow, >>> >>>> it seems that by necessity one has to allow three subsequent >>> message >>> >>>> flows (key establishment messages from client to server and >>> back, key >>> >>>> confirmation message from client to server), without the DTLS Relay >>> >>>> element having a mechanism (except for throttling) to >>> cryptographically >>> >> arbitrage these flows. >>> >>>> When does the newbee device get configuration info and, e.g., a >>> >>>> routable address assigned? >>> >>>> >>> >>>> If you could expand on this scenario, that would be great. >>> >>>> >>> >>>> Best regards, Rene >>> >>>> >>> >>>> >>> >>>> >>> >>>> [excerpt from draft-kumar-dice-dtls-relay-01] 5. Security >>> >>>> Considerations Additional security considerations need to be taken >>> >>>> into account about forwarding of messages from devices through a >>> >>>> network to which it has not yet been admitted. This can lead to >>> >>>> denial-of-service attacks or misuse of network resources without >>> >>>> proper authentication. One way to overcome any large scale >>> misuse of >>> >>>> the network is to have a management message from the Controller >>> that >>> >>>> initiates already authenticated devices in the network to enter >>> into >>> >>>> a DTLS Relay mode. The devices can stay such a Relay mode for a >>> fixed >>> >>>> period of time or until the Controller sends a new management >>> message >>> >>>> blocking the DTLS Relay mode in all devices in the network. This is >>> >>>> often possible since the administrator of the network can be aware >>> >>>> when new devices join the network either because of the >>> >>>> "Introduction" phase or commissioning phase. Other mechanisms based >>> >>>> on IP destination filtering can be applied by the controller to >>> all Relay >>> >> nodes to avoid misuse of the network resources. >>> >>>> -- >>> >>>> email: rstruik.ext@gmail.com | Skype: rstruik >>> >>>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >>> >>>> >>> >>>> >>> >>>> >>> >>>> >>> >>>> _______________________________________________ >>> >>>> dtls-iot mailing list >>> >>>> dtls-iot@ietf.org >>> >>>> https://www.ietf.org/mailman/listinfo/dtls-iot >>> >>> ________________________________ >>> >>> The information contained in this message may be confidential >>> and legally >>> >> protected under applicable law. The message is intended solely >>> for the >>> >> addressee(s). If you are not the intended recipient, you are >>> hereby notified >>> >> that any use, forwarding, dissemination, or reproduction of this >>> message is >>> >> strictly prohibited and may be unlawful. If you are not the >>> intended recipient, >>> >> please contact the sender by return e-mail and destroy all copies >>> of the >>> >> original message. >>> >> >>> >> -- >>> >> email: rstruik.ext@gmail.com | Skype: rstruik >>> >> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >>> > >>> > ________________________________ >>> > The information contained in this message may be confidential and >>> legally protected under applicable law. The message is intended >>> solely for the addressee(s). If you are not the intended recipient, >>> you are hereby notified that any use, forwarding, dissemination, or >>> reproduction of this message is strictly prohibited and may be >>> unlawful. If you are not the intended recipient, please contact the >>> sender by return e-mail and destroy all copies of the original message. >>> > >>> >>> >>> -- >>> email: rstruik.ext@gmail.com | Skype: rstruik >>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >>> >> >> >> -- >> email:rstruik.ext@gmail.com | Skype: rstruik >> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >> >> >> _______________________________________________ >> dtls-iot mailing list >> dtls-iot@ietf.org >> https://www.ietf.org/mailman/listinfo/dtls-iot > -- email: rstruik.ext@gmail.com | Skype: rstruik cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 --------------070302080309080207080604 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit
Hi Robert:

Thanks for your note.

In the scenario where the "permit join" flag is switched ON, the DTLS Relay element can indeed limit the impact on locally maintained state by "making state travel around" (the stateless relay in Section 3.2 of the draft). However, this does not necessarily reduce the impact on consumed network resources (e.g., in terms of used capacity) elsewhere. Hence, my question on how the "relay on/off" switch mentioned in the security consideration section of draft-kumar-dice-dtls-relay-01 would work in practice.

I think we all agree that this needs more work.

Rene

On 5/29/2014 1:39 PM, Robert Cragie wrote:
Hi Rene,

Regarding the denial of service attack, the aim is to limit the impact an unauthenticated device can have on other network devices from the point of view of network access.

The simplest countermeasure, which is widely used, is that whereby a network-wide "permit join" is in force. This is probably the on/off switch alluded to in the security considerations, so I don't think this switch works autonomously based on detecting a large amount of unauthenticated traffic, although this could be fed in to heuristics to decide the state of permit join, especially with regarding to early disabling. This is a simple way of preventing any attempt to appropriate resources on a node at the perimeter of the network, providing unauthenticated traffic can be easily distinguished. An example of distinguishing traffic from an unauthenticated node from traffic from an authenticated node is the presence of link layer security using a network-wide key, given as a network access token. Assuming this method is used, the perimeter node would simply silently discard any data traffic unsecured at the network layer (excluding handling any necessary management commands, e.g. beacon request).

The next level of countermeasure needs to be considered when permit join is enabled. In this case, a perimeter node needs to act as an enforcement point and carefully police data traffic from any unauthenticated node. Assuming the link-layer security method is used, it is also easy to distinguish valid traffic for authentication purposes from other traffic and to allow only such traffic to be further processed. This further processing should ideally consume as little in the way of resources as possible at the perimeter node. Hence the suggested use of the stateless relay, which ensures there is no need to allocate any resources to maintain state for the purposes of relaying to another node.

The cookie mechanism also provides some protection using spoofing nodes. This could possibly be generalised into a proof of work/puzzle mechanism, where a cookie exchange is a very simple proof of work which would ask the unauthenticated initiator to do something to prove it is at least attempting an authentication handshake.

Further than that, the authentication handshake then of course has to complete successfully.

It is the earlier stages which are of interest in the case of the DTLS relay and I think it would be worth expanding on these in the security considerations.

With regard to the 802.11 model, the AP acts as pass-through Authenticator (an EAP expression) to an Authentication Server (usually through RADIUS). The EAP model only considers these parties and whilst there could be more intermediates, they don't figure as part of the EAP transaction. The relay model is somewhat different in that an 802.11 STA - AP model is a star (hub and spoke) model, whereas the relay model is aimed more at mesh networks, hence the concept of a relay at a perimeter node. Therefore it is possible in EAP terms that the joining node is the Peer (supplicant in 802.1X-speak), the perimeter node is the relay (not an EAP concept), the border router is the pass-through Authenticator and some other device outside of the network being accessed is the Authentication Server.

Robert

On 28/05/2014 8:31 PM, Rene Struik wrote:
Hi Sandeep:

(based on recollection of 802.11ai discussions) Conceptually, the third-party of the STA and AP may be different from one another (if these have pre-established keys with different third-parties). In that case, while logically the third-parties are different, this may still result in AP communicating with its own third-party and delegating any third-party arbitrage stuff to a (for him) black box. (So, communication can still be seemingly decided locally by AP alone, with any other mechanisms occurring invisibly in the background. With 802.11 wifi in a smart phone, third parties of STA and AP could, for example, be Verizon and China Mobile, where "black box" magic would be some heavy-handed infrastructure and business agreements between those two players.

Of course, this is all slightly on a tangent w.r.t. security aspects of relayed communications.

Rene

On 5/28/2014 2:47 PM, Kumar, Sandeep wrote:
In 802.11, if I am not mistaken, the AP acting as the relay decides which authentication server T to use (e.g. which RADIUS server to use is configured at the AP and not on the STA). The STA may indicate a domain parameter if a remote RADIUS server needs to be used but the address of the remote server is configured at the proxy RADIUS server. In both cases the STA cannot contact arbitrary server T. Its similar to the case where the DTLS relay decides which network manager to use. Right?

Sandeep


From: Rene Struik
Sent: ‎Wednesday‎, ‎May‎ ‎28‎, ‎2014 ‎6‎:‎15‎ ‎PM
To: Sandeep Kumar, dtls-iot@ietf.org

With 802.11, when a STA device joins a network at an access point AP, the AP may sometimes act as a relay station and the actual authentication is done by a third-party device T. In 802.11 parlance, I believe the STA is called the supplicant, the AP the Authenticator and T the Server (very confusing verbiage indeed, since AP does not do anything from crypto perspective). In fact, any three-party key agreement protocol with inline third party and where the result really depends on this third party being in the loop seems an example of use case you asked about.

==
Do you have any specific use case where a joining node decides which network manager to contact?


On 5/28/2014 11:43 AM, Kumar, Sandeep wrote:
> Hi Rene
>
> Sorry for the confusion, I did not intend to say that the "on/off" was for the second threat. It only addresses the first threat.
>
> Regarding the second threat, indeed as you mentioned, either the relay node decides or as in the security considerations " Other mechanisms based
> on IP destination filtering can be applied by the controller to all Relay nodes to avoid misuse of the network resources." I agree this is vague on how the filtering parameters can be determined which can be extended in future based on the use cases. Do you have any specific use case where a joining node decides which network manager to contact?
>
> Regards
> Sandeep
>
>
>> -----Original Message-----
>> From: Rene Struik [mailto:rstruik.ext@gmail.com]
>> Sent: Wednesday, May 28, 2014 5:11 PM
>> To: Kumar, Sandeep; dtls-iot@ietf.org
>> Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01
>>
>> Hi Sandeep:
>>
>> Thanks for the quick reply. I do understand your second threat, but not how
>> the "on/off switch" would play a role here.
>>
>> According to Section 3.1, with stateful relay, if the joining node knows the
>> DTLS Server's IP address, the DTLS Relay simply forwards this. If the joining
>> node does *not* know the DTLS Server's IP address, the DTLS Relay is
>> forwarding it to any device it likes (which could of course very well be the
>> network manager). So, in the first case the joining node seems in full control
>> as to which device it connects (perhaps, even a device that is not part of the
>> network); in the second case the relaying node determines who it connects
>> the joining node to (which may be fine in communication security scenarios,
>> but perhaps not in application security settings).
>>
>> If you could elaborate on the role of the "on/off switch" in countering these
>> threats that would help.
>>
>> Rene
>>
>> [2nd threat, excerpted from your email as of May 28, 2014, 10:14am NL]
>>
>> - misuse of the relay functionality to allow a rogue node to setup a DTLS
>> session with a server which is not the network manager
>>
>>
>> On 5/28/2014 4:14 AM, Kumar, Sandeep wrote:
>>> Hi Rene
>>>
>>> The security considerations section is not completely baked yet. But to
>> answer your questions, we were considering the following two threats:
>>> - DoS where a large number of joining messages are sent by  rogue
>>> nodes either to flood the lowpan or drain the network manager
>>> - misuse of the relay functionality to allow a rogue node to setup a
>>> DTLS session with a server which is not the network manager
>>>
>>> The "on/off switch" is just one option for the DoS where the network
>> manager can detect too many failed requests and issue a multicast
>> management message (e.g. a CoAP request to a resource) to stop or further
>> throttle joining messages being accepted by relay nodes for a limited time.
>> Of course as you mentioned, this will be delayed until the third flow of the
>> DTLS protocol, but the DTLS cookie should provide some additional resistance
>> initially. In other scenarios, the timing of a joining device is known (e.g. within
>> a home) and the relays can be asked to switched on and later switched off to
>> restrict the window of opportunity to the attacker.
>>> The idea is that the new device gets the configuration info within the DTLS
>> session that is created (e.g. as a CoAP request to a resource). How and
>> format needs to be defined (either here or somewhere else more
>> generally).
>>> There could be more threats and possible countermeasures, let me know if
>> you have more ideas.
>>> Regards
>>> Sandeep
>>>
>>>> -----Original Message-----
>>>> From: dtls-iot [mailto:dtls-iot-bounces@ietf.org] On Behalf Of Rene
>>>> Struik
>>>> Sent: Tuesday, May 27, 2014 10:55 PM
>>>> To: dtls-iot@ietf.org
>>>> Subject: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01
>>>>
>>>> Dear Sandeep, Oscar, Sye Loong:
>>>>
>>>> I read draft-kumar-dice-dtls-relay-01 a few days ago. In the security
>>>> considerations section of that draft, you allude to potential denial
>>>> of services attacks in the context where a one-hop neighbor of a
>>>> joining node facilitates messaging between that joining node and the
>>>> network manager potentially many hops away, where the joining node
>>>> and the network manager act as DTLS Client and DTLS Server,
>>>> respectively, and where the one-hop neighbor acts as DTLS Relay. You
>>>> also suggest some measures to thwart/limit denial of service attack risk.
>>>>
>>>> I would be curious as to whether you could provide some more insight
>>>> as to what type of denial of service attack you counter and how the
>>>> DTLS Relay "on/off switch" would work in practice. How would one
>>>> detect a potential DoS attack and turn on the "DTLS Relay on/off"
>>>> knobs to counter an influx of bogus join protocol messages that could
>>>> be amplified if this would travel to the network manager (in a
>>>> scenario where both are many hops away from each other)? Since with
>>>> DTLS, client authentication only happens in the third protocol flow,
>>>> it seems that by necessity one has to allow three subsequent message
>>>> flows (key establishment messages from client to server and back, key
>>>> confirmation message from client to server), without the DTLS Relay
>>>> element having a mechanism (except for throttling) to cryptographically
>> arbitrage these flows.
>>>> When does the newbee device get configuration info and, e.g., a
>>>> routable address assigned?
>>>>
>>>> If you could expand on this scenario, that would be great.
>>>>
>>>> Best regards, Rene
>>>>
>>>>
>>>>
>>>> [excerpt from draft-kumar-dice-dtls-relay-01] 5. Security
>>>> Considerations Additional security considerations need to be taken
>>>> into account about forwarding of messages from devices through a
>>>> network to which it has not yet been admitted. This can lead to
>>>> denial-of-service attacks or misuse of network resources without
>>>> proper authentication. One way to overcome any large scale misuse of
>>>> the network is to have a management message from the Controller that
>>>> initiates already authenticated devices in the network to enter into
>>>> a DTLS Relay mode. The devices can stay such a Relay mode for a fixed
>>>> period of time or until the Controller sends a new management message
>>>> blocking the DTLS Relay mode in all devices in the network. This is
>>>> often possible since the administrator of the network can be aware
>>>> when new devices join the network either because of the
>>>> "Introduction" phase or commissioning phase. Other mechanisms based
>>>> on IP destination filtering can be applied by the controller to all Relay
>> nodes to avoid misuse of the network resources.
>>>> --
>>>> email: rstruik.ext@gmail.com | Skype: rstruik
>>>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363
>>>>
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> dtls-iot mailing list
>>>> dtls-iot@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/dtls-iot
>>> ________________________________
>>> The information contained in this message may be confidential and legally
>> protected under applicable law. The message is intended solely for the
>> addressee(s). If you are not the intended recipient, you are hereby notified
>> that any use, forwarding, dissemination, or reproduction of this message is
>> strictly prohibited and may be unlawful. If you are not the intended recipient,
>> please contact the sender by return e-mail and destroy all copies of the
>> original message.
>>
>> --
>> email: rstruik.ext@gmail.com | Skype: rstruik
>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363
>
> ________________________________
> The information contained in this message may be confidential and legally protected under applicable law. The message is intended solely for the addressee(s). If you are not the intended recipient, you are hereby notified that any use, forwarding, dissemination, or reproduction of this message is strictly prohibited and may be unlawful. If you are not the intended recipient, please contact the sender by return e-mail and destroy all copies of the original message.
>


--
email: rstruik.ext@gmail.com | Skype: rstruik
cell: +1 (647) 867-5658 | US: +1 (415) 690-7363



-- 
email: rstruik.ext@gmail.com | Skype: rstruik
cell: +1 (647) 867-5658 | US: +1 (415) 690-7363


_______________________________________________
dtls-iot mailing list
dtls-iot@ietf.org
https://www.ietf.org/mailman/listinfo/dtls-iot




-- 
email: rstruik.ext@gmail.com | Skype: rstruik
cell: +1 (647) 867-5658 | US: +1 (415) 690-7363
--------------070302080309080207080604-- From nobody Fri May 30 02:35:52 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 331C61A03D3 for ; Fri, 30 May 2014 02:35:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.918 X-Spam-Level: X-Spam-Status: No, score=-0.918 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_FONT_FACE_BAD=0.981, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CPKVqjnX58-H for ; Fri, 30 May 2014 02:35:44 -0700 (PDT) Received: from mailscan1.extendcp.co.uk (mailscan26.extendcp.co.uk [176.32.226.72]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D86AF1A6EFC for ; Fri, 30 May 2014 02:35:43 -0700 (PDT) Received: from lb1.hi.local ([10.0.1.197] helo=mailscan5.hi.local) by mailscan-g65.hi.local with esmtp (Exim 4.80.1) (envelope-from ) id 1WqJDt-0004VM-BO; Fri, 30 May 2014 10:35:37 +0100 Received: from lb1.hi.local ([10.0.1.197] helo=mail41.extendcp.co.uk) by mailscan5.hi.local with esmtps (UNKNOWN:DHE-RSA-AES256-GCM-SHA384:256) (Exim 4.80.1) (envelope-from ) id 1WqJDr-00039U-7S; Fri, 30 May 2014 10:35:37 +0100 Received: from host86-147-26-221.range86-147.btcentralplus.com ([86.147.26.221] helo=[192.168.0.2]) by mail41.extendcp.com with esmtpsa (TLSv1:DHE-RSA-AES128-SHA:128) (Exim 4.80.1) id 1WqJDp-0007Q4-1p; Fri, 30 May 2014 10:35:34 +0100 Message-ID: <53885131.7080900@gridmerge.com> Date: Fri, 30 May 2014 10:36:49 +0100 From: Robert Cragie Organization: Gridmerge Ltd. User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: Rene Struik , "Kumar, Sandeep" , "dtls-iot@ietf.org" References: <5384FB1C.60109@gmail.com> <5384FBB0.3040900@gmail.com> <5385FC6C.8080102@gmail.com> , <53860BB5.8020908@gmail.com> <538639AF.4050900@gmail.com> <538770D9.2040103@gridmerge.com> <5387963C.3070304@gmail.com> In-Reply-To: <5387963C.3070304@gmail.com> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms020708020701060407020200" X-Authenticated-As: robert.cragie@gridmerge.com X-Extend-Src: mailout Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/epY0xNb8ufNzk-rrEKkwd0yEi98 Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: robert.cragie@gridmerge.com List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 May 2014 09:35:50 -0000 This is a cryptographically signed message in MIME format. --------------ms020708020701060407020200 Content-Type: multipart/alternative; boundary="------------000403050006030700050302" This is a multi-part message in MIME format. --------------000403050006030700050302 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Hi Rene, The point is to ensure the relay model itself does not introduce state,=20 i.e. the net state change between before a DTLS packet is received and=20 after it has been relayed is zero. It is not really that easy to=20 consider the impact on other network resources as it depends on the=20 network type etc. but we can use examples. In the example given below, if the relay on/off switch is in the OFF=20 position, any data packet which is unsecured would be discarded at the=20 earliest opportunity during the receive process. This would minimise=20 allocation of resources for the purposes of packet processing to simply=20 buffering one incoming packet, reading the header then silently=20 discarding the packet immediately. One could even imagine an intelligent = hardware-based MAC doing this based on setting security policy at the=20 MAC layer, so the packet may not even be received by the CPU/firmware=20 processing the packet. Robert On 29/05/2014 9:19 PM, Rene Struik wrote: > Hi Robert: > > Thanks for your note. > > In the scenario where the "permit join" flag is switched ON, the DTLS=20 > Relay element can indeed limit the impact on locally maintained state=20 > by "making state travel around" (the stateless relay in Section 3.2 of = > the draft). However, this does not necessarily reduce the impact on=20 > consumed network resources (e.g., in terms of used capacity)=20 > elsewhere. Hence, my question on how the "relay on/off" switch=20 > mentioned in the security consideration section of=20 > draft-kumar-dice-dtls-relay-01 would work in practice. > > I think we all agree that this needs more work. > > Rene > > On 5/29/2014 1:39 PM, Robert Cragie wrote: >> Hi Rene, >> >> Regarding the denial of service attack, the aim is to limit the=20 >> impact an unauthenticated device can have on other network devices=20 >> from the point of view of network access. >> >> The simplest countermeasure, which is widely used, is that whereby a=20 >> network-wide "permit join" is in force. This is probably the on/off=20 >> switch alluded to in the security considerations, so I don't think=20 >> this switch works autonomously based on detecting a large amount of=20 >> unauthenticated traffic, although this could be fed in to heuristics=20 >> to decide the state of permit join, especially with regarding to=20 >> early disabling. This is a simple way of preventing any attempt to=20 >> appropriate resources on a node at the perimeter of the network,=20 >> providing unauthenticated traffic can be easily distinguished. An=20 >> example of distinguishing traffic from an unauthenticated node from=20 >> traffic from an authenticated node is the presence of link layer=20 >> security using a network-wide key, given as a network access token.=20 >> Assuming this method is used, the perimeter node would simply=20 >> silently discard any data traffic unsecured at the network layer=20 >> (excluding handling any necessary management commands, e.g. beacon=20 >> request). >> >> The next level of countermeasure needs to be considered when permit=20 >> join is enabled. In this case, a perimeter node needs to act as an=20 >> enforcement point and carefully police data traffic from any=20 >> unauthenticated node. Assuming the link-layer security method is=20 >> used, it is also easy to distinguish valid traffic for authentication = >> purposes from other traffic and to allow only such traffic to be=20 >> further processed. This further processing should ideally consume as=20 >> little in the way of resources as possible at the perimeter node.=20 >> Hence the suggested use of the stateless relay, which ensures there=20 >> is no need to allocate any resources to maintain state for the=20 >> purposes of relaying to another node. >> >> The cookie mechanism also provides some protection using spoofing=20 >> nodes. This could possibly be generalised into a proof of work/puzzle = >> mechanism, where a cookie exchange is a very simple proof of work=20 >> which would ask the unauthenticated initiator to do something to=20 >> prove it is at least attempting an authentication handshake. >> >> Further than that, the authentication handshake then of course has to = >> complete successfully. >> >> It is the earlier stages which are of interest in the case of the=20 >> DTLS relay and I think it would be worth expanding on these in the=20 >> security considerations. >> >> With regard to the 802.11 model, the AP acts as pass-through=20 >> Authenticator (an EAP expression) to an Authentication Server=20 >> (usually through RADIUS). The EAP model only considers these parties=20 >> and whilst there could be more intermediates, they don't figure as=20 >> part of the EAP transaction. The relay model is somewhat different in = >> that an 802.11 STA - AP model is a star (hub and spoke) model,=20 >> whereas the relay model is aimed more at mesh networks, hence the=20 >> concept of a relay at a perimeter node. Therefore it is possible in=20 >> EAP terms that the joining node is the Peer (supplicant in=20 >> 802.1X-speak), the perimeter node is the relay (not an EAP concept),=20 >> the border router is the pass-through Authenticator and some other=20 >> device outside of the network being accessed is the Authentication=20 >> Server. >> >> Robert >> >> On 28/05/2014 8:31 PM, Rene Struik wrote: >>> Hi Sandeep: >>> >>> (based on recollection of 802.11ai discussions) Conceptually, the=20 >>> third-party of the STA and AP may be different from one another (if=20 >>> these have pre-established keys with different third-parties). In=20 >>> that case, while logically the third-parties are different, this may = >>> still result in AP communicating with its own third-party and=20 >>> delegating any third-party arbitrage stuff to a (for him) black box. = >>> (So, communication can still be seemingly decided locally by AP=20 >>> alone, with any other mechanisms occurring invisibly in the=20 >>> background. With 802.11 wifi in a smart phone, third parties of STA=20 >>> and AP could, for example, be Verizon and China Mobile, where "black = >>> box" magic would be some heavy-handed infrastructure and business=20 >>> agreements between those two players. >>> >>> Of course, this is all slightly on a tangent w.r.t. security aspects = >>> of relayed communications. >>> >>> Rene >>> >>> On 5/28/2014 2:47 PM, Kumar, Sandeep wrote: >>>> In 802.11, if I am not mistaken, the AP acting as the relay decides = >>>> which authentication server T to use (e.g. which RADIUS server to=20 >>>> use is configured at the AP and not on the STA). The STA may=20 >>>> indicate a domain parameter if a remote RADIUS server needs to be=20 >>>> used but the address of the remote server is configured at the=20 >>>> proxy RADIUS server. In both cases the STA cannot contact arbitrary = >>>> server T. Its similar to the case where the DTLS relay decides=20 >>>> which network manager to use. Right? >>>> >>>> Sandeep >>>> >>>> >>>> *From:* Rene Struik >>>> *Sent:* ?Wednesday?, ?May? ?28?, ?2014 ?6?:?15? ?PM >>>> *To:* Sandeep Kumar ,=20 >>>> dtls-iot@ietf.org >>>> >>>> With 802.11, when a STA device joins a network at an access point=20 >>>> AP, the AP may sometimes act as a relay station and the actual=20 >>>> authentication is done by a third-party device T. In 802.11=20 >>>> parlance, I believe the STA is called the supplicant, the AP the=20 >>>> Authenticator and T the Server (very confusing verbiage indeed,=20 >>>> since AP does not do anything from crypto perspective). In fact,=20 >>>> any three-party key agreement protocol with inline third party and=20 >>>> where the result really depends on this third party being in the=20 >>>> loop seems an example of use case you asked about. >>>> >>>> =3D=3D >>>> Do you have any specific use case where a joining node decides=20 >>>> which network manager to contact? >>>> >>>> >>>> On 5/28/2014 11:43 AM, Kumar, Sandeep wrote: >>>> > Hi Rene >>>> > >>>> > Sorry for the confusion, I did not intend to say that the=20 >>>> "on/off" was for the second threat. It only addresses the first thre= at. >>>> > >>>> > Regarding the second threat, indeed as you mentioned, either the=20 >>>> relay node decides or as in the security considerations " Other=20 >>>> mechanisms based >>>> > on IP destination filtering can be applied by the controller to=20 >>>> all Relay nodes to avoid misuse of the network resources." I agree=20 >>>> this is vague on how the filtering parameters can be determined=20 >>>> which can be extended in future based on the use cases. Do you have = >>>> any specific use case where a joining node decides which network=20 >>>> manager to contact? >>>> > >>>> > Regards >>>> > Sandeep >>>> > >>>> > >>>> >> -----Original Message----- >>>> >> From: Rene Struik [mailto:rstruik.ext@gmail.com] >>>> >> Sent: Wednesday, May 28, 2014 5:11 PM >>>> >> To: Kumar, Sandeep; dtls-iot@ietf.org >>>> >> Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-0= 1 >>>> >> >>>> >> Hi Sandeep: >>>> >> >>>> >> Thanks for the quick reply. I do understand your second threat,=20 >>>> but not how >>>> >> the "on/off switch" would play a role here. >>>> >> >>>> >> According to Section 3.1, with stateful relay, if the joining=20 >>>> node knows the >>>> >> DTLS Server's IP address, the DTLS Relay simply forwards this.=20 >>>> If the joining >>>> >> node does *not* know the DTLS Server's IP address, the DTLS Relay= is >>>> >> forwarding it to any device it likes (which could of course very = >>>> well be the >>>> >> network manager). So, in the first case the joining node seems=20 >>>> in full control >>>> >> as to which device it connects (perhaps, even a device that is=20 >>>> not part of the >>>> >> network); in the second case the relaying node determines who it = >>>> connects >>>> >> the joining node to (which may be fine in communication security = >>>> scenarios, >>>> >> but perhaps not in application security settings). >>>> >> >>>> >> If you could elaborate on the role of the "on/off switch" in=20 >>>> countering these >>>> >> threats that would help. >>>> >> >>>> >> Rene >>>> >> >>>> >> [2nd threat, excerpted from your email as of May 28, 2014,=20 >>>> 10:14am NL] >>>> >> >>>> >> - misuse of the relay functionality to allow a rogue node to=20 >>>> setup a DTLS >>>> >> session with a server which is not the network manager >>>> >> >>>> >> >>>> >> On 5/28/2014 4:14 AM, Kumar, Sandeep wrote: >>>> >>> Hi Rene >>>> >>> >>>> >>> The security considerations section is not completely baked=20 >>>> yet. But to >>>> >> answer your questions, we were considering the following two=20 >>>> threats: >>>> >>> - DoS where a large number of joining messages are sent by rogu= e >>>> >>> nodes either to flood the lowpan or drain the network manager >>>> >>> - misuse of the relay functionality to allow a rogue node to=20 >>>> setup a >>>> >>> DTLS session with a server which is not the network manager >>>> >>> >>>> >>> The "on/off switch" is just one option for the DoS where the=20 >>>> network >>>> >> manager can detect too many failed requests and issue a multicast= >>>> >> management message (e.g. a CoAP request to a resource) to stop=20 >>>> or further >>>> >> throttle joining messages being accepted by relay nodes for a=20 >>>> limited time. >>>> >> Of course as you mentioned, this will be delayed until the third = >>>> flow of the >>>> >> DTLS protocol, but the DTLS cookie should provide some=20 >>>> additional resistance >>>> >> initially. In other scenarios, the timing of a joining device is = >>>> known (e.g. within >>>> >> a home) and the relays can be asked to switched on and later=20 >>>> switched off to >>>> >> restrict the window of opportunity to the attacker. >>>> >>> The idea is that the new device gets the configuration info=20 >>>> within the DTLS >>>> >> session that is created (e.g. as a CoAP request to a resource).=20 >>>> How and >>>> >> format needs to be defined (either here or somewhere else more >>>> >> generally). >>>> >>> There could be more threats and possible countermeasures, let=20 >>>> me know if >>>> >> you have more ideas. >>>> >>> Regards >>>> >>> Sandeep >>>> >>> >>>> >>>> -----Original Message----- >>>> >>>> From: dtls-iot [mailto:dtls-iot-bounces@ietf.org] On Behalf Of = >>>> Rene >>>> >>>> Struik >>>> >>>> Sent: Tuesday, May 27, 2014 10:55 PM >>>> >>>> To: dtls-iot@ietf.org >>>> >>>> Subject: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 >>>> >>>> >>>> >>>> Dear Sandeep, Oscar, Sye Loong: >>>> >>>> >>>> >>>> I read draft-kumar-dice-dtls-relay-01 a few days ago. In the=20 >>>> security >>>> >>>> considerations section of that draft, you allude to potential=20 >>>> denial >>>> >>>> of services attacks in the context where a one-hop neighbor of = a >>>> >>>> joining node facilitates messaging between that joining node=20 >>>> and the >>>> >>>> network manager potentially many hops away, where the joining n= ode >>>> >>>> and the network manager act as DTLS Client and DTLS Server, >>>> >>>> respectively, and where the one-hop neighbor acts as DTLS=20 >>>> Relay. You >>>> >>>> also suggest some measures to thwart/limit denial of service=20 >>>> attack risk. >>>> >>>> >>>> >>>> I would be curious as to whether you could provide some more=20 >>>> insight >>>> >>>> as to what type of denial of service attack you counter and=20 >>>> how the >>>> >>>> DTLS Relay "on/off switch" would work in practice. How would on= e >>>> >>>> detect a potential DoS attack and turn on the "DTLS Relay on/of= f" >>>> >>>> knobs to counter an influx of bogus join protocol messages=20 >>>> that could >>>> >>>> be amplified if this would travel to the network manager (in a >>>> >>>> scenario where both are many hops away from each other)? Since = >>>> with >>>> >>>> DTLS, client authentication only happens in the third protocol = >>>> flow, >>>> >>>> it seems that by necessity one has to allow three subsequent=20 >>>> message >>>> >>>> flows (key establishment messages from client to server and=20 >>>> back, key >>>> >>>> confirmation message from client to server), without the DTLS=20 >>>> Relay >>>> >>>> element having a mechanism (except for throttling) to=20 >>>> cryptographically >>>> >> arbitrage these flows. >>>> >>>> When does the newbee device get configuration info and, e.g., a= >>>> >>>> routable address assigned? >>>> >>>> >>>> >>>> If you could expand on this scenario, that would be great. >>>> >>>> >>>> >>>> Best regards, Rene >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> [excerpt from draft-kumar-dice-dtls-relay-01] 5. Security >>>> >>>> Considerations Additional security considerations need to be ta= ken >>>> >>>> into account about forwarding of messages from devices through = a >>>> >>>> network to which it has not yet been admitted. This can lead to= >>>> >>>> denial-of-service attacks or misuse of network resources withou= t >>>> >>>> proper authentication. One way to overcome any large scale=20 >>>> misuse of >>>> >>>> the network is to have a management message from the=20 >>>> Controller that >>>> >>>> initiates already authenticated devices in the network to=20 >>>> enter into >>>> >>>> a DTLS Relay mode. The devices can stay such a Relay mode for=20 >>>> a fixed >>>> >>>> period of time or until the Controller sends a new management=20 >>>> message >>>> >>>> blocking the DTLS Relay mode in all devices in the network.=20 >>>> This is >>>> >>>> often possible since the administrator of the network can be aw= are >>>> >>>> when new devices join the network either because of the >>>> >>>> "Introduction" phase or commissioning phase. Other mechanisms=20 >>>> based >>>> >>>> on IP destination filtering can be applied by the controller=20 >>>> to all Relay >>>> >> nodes to avoid misuse of the network resources. >>>> >>>> -- >>>> >>>> email: rstruik.ext@gmail.com | Skype: rstruik >>>> >>>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> >>>> _______________________________________________ >>>> >>>> dtls-iot mailing list >>>> >>>> dtls-iot@ietf.org >>>> >>>> https://www.ietf.org/mailman/listinfo/dtls-iot >>>> >>> ________________________________ >>>> >>> The information contained in this message may be confidential=20 >>>> and legally >>>> >> protected under applicable law. The message is intended solely=20 >>>> for the >>>> >> addressee(s). If you are not the intended recipient, you are=20 >>>> hereby notified >>>> >> that any use, forwarding, dissemination, or reproduction of this = >>>> message is >>>> >> strictly prohibited and may be unlawful. If you are not the=20 >>>> intended recipient, >>>> >> please contact the sender by return e-mail and destroy all=20 >>>> copies of the >>>> >> original message. >>>> >> >>>> >> -- >>>> >> email: rstruik.ext@gmail.com | Skype: rstruik >>>> >> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >>>> > >>>> > ________________________________ >>>> > The information contained in this message may be confidential and = >>>> legally protected under applicable law. The message is intended=20 >>>> solely for the addressee(s). If you are not the intended recipient, = >>>> you are hereby notified that any use, forwarding, dissemination, or = >>>> reproduction of this message is strictly prohibited and may be=20 >>>> unlawful. If you are not the intended recipient, please contact the = >>>> sender by return e-mail and destroy all copies of the original messa= ge. >>>> > >>>> >>>> >>>> --=20 >>>> email: rstruik.ext@gmail.com | Skype: rstruik >>>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >>>> >>> >>> >>> --=20 >>> email:rstruik.ext@gmail.com | Skype: rstruik >>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >>> >>> >>> _______________________________________________ >>> dtls-iot mailing list >>> dtls-iot@ietf.org >>> https://www.ietf.org/mailman/listinfo/dtls-iot >> > > > --=20 > email:rstruik.ext@gmail.com | Skype: rstruik > cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 > > > _______________________________________________ > dtls-iot mailing list > dtls-iot@ietf.org > https://www.ietf.org/mailman/listinfo/dtls-iot --------------000403050006030700050302 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Hi Rene,

The point is to ensure the relay model itself does not introduce state, i.e. the net state change between before a DTLS packet is received and after it has been relayed is zero. It is not really that easy to consider the impact on other network resources as it depends on the network type etc. but we can use examples.

In the example given below, if the relay on/off switch is in the OFF position, any data packet which is unsecured would be discarded at the earliest opportunity during the receive process. This would minimise allocation of resources for the purposes of packet processing to simply buffering one incoming packet, reading the header then silently discarding the packet immediately. One could even imagine an intelligent hardware-based MAC doing this based on setting security policy at the MAC layer, so the packet may not even be received by the CPU/firmware processing the packet.

Robert

On 29/05/2014 9:19 PM, Rene Struik wrote:
Hi Robert:

Thanks for your note.

In the scenario where the "permit join" flag is switched ON, the DTLS Relay element can indeed limit the impact on locally maintained state by "making state travel around" (the stateless relay in Section 3.2 of the draft). However, this does not necessarily reduce the impact on consumed network resources (e.g., in terms of used capacity) elsewhere. Hence, my question on how the "relay on/off" switch mentioned in the security consideration section of draft-kumar-dice-dtls-relay-01 would work in practice.

I think we all agree that this needs more work.

Rene

On 5/29/2014 1:39 PM, Robert Cragie wrote:
Hi Rene,

Regarding the denial of service attack, the aim is to limit the impact an unauthenticated device can have on other network devices from the point of view of network access.

The simplest countermeasure, which is widely used, is that whereby a network-wide "permit join" is in force. This is probably the on/off switch alluded to in the security considerations, so I don't think this switch works autonomously based on detecting a large amount of unauthenticated traffic, although this could be fed in to heuristics to decide the state of permit join, especially with regarding to early disabling. This is a simple way of preventing any attempt to appropriate resources on a node at the perimeter of the network, providing unauthenticated traffic can be easily distinguished. An example of distinguishing traffic from an unauthenticated node from traffic from an authenticated node is the presence of link layer security using a network-wide key, given as a network access token. Assuming this method is used, the perimeter node would simply silently discard any data traffic unsecured at the network layer (excluding handling any necessary management commands, e.g. beacon request).

The next level of countermeasure needs to be considered when permit join is enabled. In this case, a perimeter node needs to act as an enforcement point and carefully police data traffic from any unauthenticated node. Assuming the link-layer security method is used, it is also easy to distinguish valid traffic for authentication purposes from other traffic and to allow only such traffic to be further processed. This further processing should ideally consume as little in the way of resources as possible at the perimeter node. Hence the suggested use of the stateless relay, which ensures there is no need to allocate any resources to maintain state for the purposes of relaying to another node.

The cookie mechanism also provides some protection using spoofing nodes. This could possibly be generalised into a proof of work/puzzle mechanism, where a cookie exchange is a very simple proof of work which would ask the unauthenticated initiator to do something to prove it is at least attempting an authentication handshake.

Further than that, the authentication handshake then of course has to complete successfully.

It is the earlier stages which are of interest in the case of the DTLS relay and I think it would be worth expanding on these in the security considerations.

With regard to the 802.11 model, the AP acts as pass-through Authenticator (an EAP expression) to an Authentication Server (usually through RADIUS). The EAP model only considers these parties and whilst there could be more intermediates, they don't figure as part of the EAP transaction. The relay model is somewhat different in that an 802.11 STA - AP model is a star (hub and spoke) model, whereas the relay model is aimed more at mesh networks, hence the concept of a relay at a perimeter node. Therefore it is possible in EAP terms that the joining node is the Peer (supplicant in 802.1X-speak), the perimeter node is the relay (not an EAP concept), the border router is the pass-through Authenticator and some other device outside of the network being accessed is the Authentication Server.

Robert

On 28/05/2014 8:31 PM, Rene Struik= wrote:
Hi Sandeep:

(based on recollection of 802.11ai discussions) Conceptually, the third-party of the STA and AP may be different from one another (if these have pre-established keys with different third-parties). In that case, while logically the third-parties are different, this may still result in AP communicating with its own third-party and delegating any third-party arbitrage stuff to a (for him) black box. (So, communication can still be seemingly decided locally by AP alone, with any other mechanisms occurring invisibly in the background. With 802.11 wifi in a smart phone, third parties of STA and AP could, for example, be Verizon and China Mobile, where "black box" magic would be some heavy-handed infrastructure and business agreements between those two players.

Of course, this is all slightly on a tangent w.r.t. security aspects of relayed communications.

Rene

On 5/28/2014 2:47 PM, Kumar, Sandeep wrote:
In 802.11, if I am not mistaken, the AP acting as= the relay decides which authentication server T to use (e.g. which RADIUS server to use is configured at th= e AP and not on the STA). The STA may indicate a domain parameter if a remote RADIUS server needs to be used but the address of the remote server is configured at the proxy RADIUS server. In both cases the STA cannot contact arbitrary server T. Its similar to the case where the DTLS relay decides which network manager to use. Right?

Sandeep


From: Rene Struik
Sent: ‎Wednesday‎, ‎May= ‎ ‎28‎, ‎2014 ‎6‎:‎15‎ ‎PM
To: Sandeep Kumar, dtls-iot@ietf.org

With 802.11, when a ST= A device joins a network at an access point AP, the AP may sometimes act as a relay station and the actual authentication is done by a third-party device T. In 802.11 parlance, I believe the STA is called the supplicant, the AP the Authenticator and T the Server (very confusing verbiage indeed, since AP does not do anything from crypto perspective). In fact, any three-party key agreement protocol with inline third party and where the result really depends on this third party being in the loop seems an example of use case you asked about.

=3D=3D
Do you have any specific use case where a joining node decides which network manager to contact?


On 5/28/2014 11:43 AM, Kumar, Sandeep wrote:
> Hi Rene
>
> Sorry for the confusion, I did not intend to say that the "on/off" was for the second threat. It only addresses the first threat.
>
> Regarding the second threat, indeed as you mentioned, either the relay node decides or as in the security considerations " Other mechanisms based
> on IP destination filtering can be applied by the controller to all Relay nodes to avoid misuse of the network resources." I agree this is vague on how the filtering parameters can be determined which can be extended in future based on the use cases. Do you have any specific use case where a joining node decides which network manager to contact?
>
> Regards
> Sandeep
>
>
>> -----Original Message-----
>> From: Rene Struik [mailto:rstruik.= ext@gmail.com]
>> Sent: Wednesday, May 28, 2014 5:11 PM
>> To: Kumar, Sandeep; dtls-iot@ietf.org
>> Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01
>>
>> Hi Sandeep:
>>
>> Thanks for the quick reply. I do understand your second threat, but not how
>> the "on/off switch" would play a role here. >>
>> According to Section 3.1, with stateful relay, if the joining node knows the
>> DTLS Server's IP address, the DTLS Relay simply forwards this. If the joining
>> node does *not* know the DTLS Server's IP address, the DTLS Relay is
>> forwarding it to any device it likes (which could of course very well be the
>> network manager). So, in the first case the joining node seems in full control
>> as to which device it connects (perhaps, even a device that is not part of the
>> network); in the second case the relaying node determines who it connects
>> the joining node to (which may be fine in communication security scenarios,
>> but perhaps not in application security settings).
>>
>> If you could elaborate on the role of the "on/off switch" in countering these
>> threats that would help.
>>
>> Rene
>>
>> [2nd threat, excerpted from your email as of May 28, 2014, 10:14am NL]
>>
>> - misuse of the relay functionality to allow a rogue node to setup a DTLS
>> session with a server which is not the network manager
>>
>>
>> On 5/28/2014 4:14 AM, Kumar, Sandeep wrote: >>> Hi Rene
>>>
>>> The security considerations section is not completely baked yet. But to
>> answer your questions, we were considering the following two threats:
>>> - DoS where a large number of joining messages are sent by  rogue
>>> nodes either to flood the lowpan or drain the network manager
>>> - misuse of the relay functionality to allow a rogue node to setup a
>>> DTLS session with a server which is not the network manager
>>>
>>> The "on/off switch" is just one option for the DoS where the network
>> manager can detect too many failed requests and issue a multicast
>> management message (e.g. a CoAP request to a resource) to stop or further
>> throttle joining messages being accepted by relay nodes for a limited time.
>> Of course as you mentioned, this will be delayed until the third flow of the
>> DTLS protocol, but the DTLS cookie should provide some additional resistance
>> initially. In other scenarios, the timing of a joining device is known (e.g. within
>> a home) and the relays can be asked to switched on and later switched off to
>> restrict the window of opportunity to the attacker.
>>> The idea is that the new device gets the configuration info within the DTLS
>> session that is created (e.g. as a CoAP request to a resource). How and
>> format needs to be defined (either here or somewhere else more
>> generally).
>>> There could be more threats and possible countermeasures, let me know if
>> you have more ideas.
>>> Regards
>>> Sandeep
>>>
>>>> -----Original Message-----
>>>> From: dtls-iot [mailto:dtls= -iot-bounces@ietf.org] On Behalf Of Rene
>>>> Struik
>>>> Sent: Tuesday, May 27, 2014 10:55 PM >>>> To: dtls-iot@ietf.org
>>>> Subject: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01
>>>>
>>>> Dear Sandeep, Oscar, Sye Loong:
>>>>
>>>> I read draft-kumar-dice-dtls-relay-01 a few days ago. In the security
>>>> considerations section of that draft, you allude to potential denial
>>>> of services attacks in the context where a one-hop neighbor of a
>>>> joining node facilitates messaging between that joining node and the
>>>> network manager potentially many hops away, where the joining node
>>>> and the network manager act as DTLS Client and DTLS Server,
>>>> respectively, and where the one-hop neighbor acts as DTLS Relay. You
>>>> also suggest some measures to thwart/limit denial of service attack risk.
>>>>
>>>> I would be curious as to whether you could provide some more insight
>>>> as to what type of denial of service attack you counter and how the
>>>> DTLS Relay "on/off switch" would work in practice. How would one
>>>> detect a potential DoS attack and turn on the "DTLS Relay on/off"
>>>> knobs to counter an influx of bogus join protocol messages that could
>>>> be amplified if this would travel to the network manager (in a
>>>> scenario where both are many hops away from each other)? Since with
>>>> DTLS, client authentication only happens in the third protocol flow,
>>>> it seems that by necessity one has to allow three subsequent message
>>>> flows (key establishment messages from client to server and back, key
>>>> confirmation message from client to server), without the DTLS Relay
>>>> element having a mechanism (except for throttling) to cryptographically
>> arbitrage these flows.
>>>> When does the newbee device get configuration info and, e.g., a
>>>> routable address assigned?
>>>>
>>>> If you could expand on this scenario, that would be great.
>>>>
>>>> Best regards, Rene
>>>>
>>>>
>>>>
>>>> [excerpt from draft-kumar-dice-dtls-relay-01] 5. Security
>>>> Considerations Additional security considerations need to be taken
>>>> into account about forwarding of messages from devices through a
>>>> network to which it has not yet been admitted. This can lead to
>>>> denial-of-service attacks or misuse of network resources without
>>>> proper authentication. One way to overcome any large scale misuse of
>>>> the network is to have a management message from the Controller that
>>>> initiates already authenticated devices in the network to enter into
>>>> a DTLS Relay mode. The devices can stay such a Relay mode for a fixed
>>>> period of time or until the Controller sends a new management message
>>>> blocking the DTLS Relay mode in all devices in the network. This is
>>>> often possible since the administrator of the network can be aware
>>>> when new devices join the network either because of the
>>>> "Introduction" phase or commissioning phase. Other mechanisms based
>>>> on IP destination filtering can be applied by the controller to all Relay
>> nodes to avoid misuse of the network resources.
>>>> --
>>>> email: rstruik.ext@gma= il.com | Skype: rstruik
>>>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363
>>>>
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> dtls-iot mailing list
>>>> dtls-iot@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/dtls-iot
>>> ________________________________
>>> The information contained in this message may be confidential and legally
>> protected under applicable law. The message is intended solely for the
>> addressee(s). If you are not the intended recipient, you are hereby notified
>> that any use, forwarding, dissemination, or reproduction of this message is
>> strictly prohibited and may be unlawful. If you are not the intended recipient,
>> please contact the sender by return e-mail and destroy all copies of the
>> original message.
>>
>> --
>> email: rstruik.ext@gma= il.com | Skype: rstruik
>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363
>
> ________________________________
> The information contained in this message may be confidential and legally protected under applicable law. The message is intended solely for the addressee(s). If you are not the intended recipient, you are hereby notified that any use, forwarding, dissemination, or reproduction of this message is strictly prohibited and may be unlawful. If you are not the intended recipient, please contact the sender by return e-mail and destroy all copies of the original message.
>


--
email: rstruik.ext@gma= il.com | Skype: rstruik
cell: +1 (647) 867-5658 | US: +1 (415) 690-7363



--=20
email: rstruik.ext@gmail.com | Skype: rst=
ruik
cell: +1 (647) 867-5658 | US: +1 (415) 690-7363


_______________________________________________
dtls-iot mailing list
dtls-iot@ietf.org
https://www.ietf.org/mailman/l=
istinfo/dtls-iot




--=20
email: rstruik.ext@gmail.com | Skype: rst=
ruik
cell: +1 (647) 867-5658 | US: +1 (415) 690-7363


_______________________________________________
dtls-iot mailing list
d=
tls-iot@ietf.org
https://www.ietf.org/mailman/listinfo/dtls-iot

--------------000403050006030700050302-- --------------ms020708020701060407020200 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIILUDCC BRowggQCoAMCAQICEG0Z6qcZT2ozIuYiMnqqcd4wDQYJKoZIhvcNAQEFBQAwga4xCzAJBgNV BAYTAlVTMQswCQYDVQQIEwJVVDEXMBUGA1UEBxMOU2FsdCBMYWtlIENpdHkxHjAcBgNVBAoT FVRoZSBVU0VSVFJVU1QgTmV0d29yazEhMB8GA1UECxMYaHR0cDovL3d3dy51c2VydHJ1c3Qu Y29tMTYwNAYDVQQDEy1VVE4tVVNFUkZpcnN0LUNsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQg RW1haWwwHhcNMTEwNDI4MDAwMDAwWhcNMjAwNTMwMTA0ODM4WjCBkzELMAkGA1UEBhMCR0Ix GzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UE ChMRQ09NT0RPIENBIExpbWl0ZWQxOTA3BgNVBAMTMENPTU9ETyBDbGllbnQgQXV0aGVudGlj YXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJKEhFtLV5jUXi+LpOFAyKNTWF9mZfEyTvefMn1V0HhMVbdClOD5J3EHxcZppLkyxPFA GpDMJ1Zifxe1cWmu5SAb5MtjXmDKokH2auGj/7jfH0htZUOMKi4rYzh337EXrMLaggLW1DJq 1GdvIBOPXDX65VSAr9hxCh03CgJQU2yVHakQFLSZlVkSMf8JotJM3FLb3uJAAVtIaN3FSrTg 7SQfOq9xXwfjrL8UO7AlcWg99A/WF1hGFYE8aIuLgw9teiFX5jSw2zJ+40rhpVJyZCaRTqWS D//gsWD9Gm9oUZljjRqLpcxCm5t9ImPTqaD8zp6Q30QZ9FxbNboW86eb/8ECAwEAAaOCAUsw ggFHMB8GA1UdIwQYMBaAFImCZ33EnSZwAEu0UEh83j2uBG59MB0GA1UdDgQWBBR6E04AdFvG eGNkJ8Ev4qBbvHnFezAOBgNVHQ8BAf8EBAMCAQYwEgYDVR0TAQH/BAgwBgEB/wIBADARBgNV HSAECjAIMAYGBFUdIAAwWAYDVR0fBFEwTzBNoEugSYZHaHR0cDovL2NybC51c2VydHJ1c3Qu Y29tL1VUTi1VU0VSRmlyc3QtQ2xpZW50QXV0aGVudGljYXRpb25hbmRFbWFpbC5jcmwwdAYI KwYBBQUHAQEEaDBmMD0GCCsGAQUFBzAChjFodHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20vVVRO QWRkVHJ1c3RDbGllbnRfQ0EuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1 c3QuY29tMA0GCSqGSIb3DQEBBQUAA4IBAQCF1r54V1VtM39EUv5C1QaoAQOAivsNsv1Kv/av QUn1G1rF0q0bc24+6SZ85kyYwTAo38v7QjyhJT4KddbQPTmGZtGhm7VNm2+vKGwdr+XqdFqo 2rHA8XV6L566k3nK/uKRHlZ0sviN0+BDchvtj/1gOSBH+4uvOmVIPJg9pSW/ve9g4EnlFsjr P0OD8ODuDcHTzTNfm9C9YGqzO/761Mk6PB/tm/+bSTO+Qik5g+4zaS6CnUVNqGnagBsePdIa XXxHmaWbCG0SmYbWXVcHG6cwvktJRLiQfsrReTjrtDP6oDpdJlieYVUYtCHVmdXgQ0BCML7q peeU0rD+83X5f27nMIIGLjCCBRagAwIBAgIQXDFQ28QtqMuYch5f2nTvZjANBgkqhkiG9w0B AQUFADCBkzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxOTA3BgNVBAMTMENP TU9ETyBDbGllbnQgQXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTAeFw0xMTA5 MDIwMDAwMDBaFw0xNDA5MDEyMzU5NTlaMIIBNzELMAkGA1UEBhMCR0IxEDAOBgNVBBETB1dG NCA0V0ExFzAVBgNVBAgTDldlc3QgWW9ya3NoaXJlMRIwEAYDVQQHEwlXYWtlZmllbGQxFDAS BgNVBAkTC0dyYW5nZSBNb29yMR8wHQYDVQQJExY4OSBHcmVlbmZpZWxkIENyZXNjZW50MRcw FQYDVQQKEw5HcmlkbWVyZ2UgTHRkLjE0MDIGA1UECxMrSXNzdWVkIHRocm91Z2ggR3JpZG1l cmdlIEx0ZC4gRS1QS0kgTWFuYWdlcjEfMB0GA1UECxMWQ29ycG9yYXRlIFNlY3VyZSBFbWFp bDEWMBQGA1UEAxMNUm9iZXJ0IENyYWdpZTEqMCgGCSqGSIb3DQEJARYbcm9iZXJ0LmNyYWdp ZUBncmlkbWVyZ2UuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcThqvLe WU1Q1ZJmnb+2UQSwOQKWok3A1Mwk582AdvwaAQyBFliPyJ0kXJqtwNBoZvk+3WJr0QA5ZRr+ J0x3sXVpcxadojP2HNzy1gsgDtIGG8ltoU4vmX1A8BTlOIUT+Pg8p/bSruxV0vz0CR8ho2hs R0Zi5vU+rQKNmbgufbkWhlQnMEYjknemscLQfw1YZz90ta67doNDujFy6+X6I06HpjudgMYx 8bdsNS5xVFFwuBA1eqNQra+xLzhCOeX9PPB/zK68qdNhrni3WPYG9EhSt4Dzk+xIz9hj7wrU ZIVXDTPsY8qbUSBVpwmzI5lCHPgzurH1OK7WwgpDSsl5pwIDAQABo4IB1TCCAdEwHwYDVR0j BBgwFoAUehNOAHRbxnhjZCfBL+KgW7x5xXswHQYDVR0OBBYEFBCOXNH+lDm8U9gy3b3bRvrx vKgrMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwME BggrBgEFBQcDAjBGBgNVHSAEPzA9MDsGDCsGAQQBsjEBAgEDBTArMCkGCCsGAQUFBwIBFh1o dHRwczovL3NlY3VyZS5jb21vZG8ubmV0L0NQUzBXBgNVHR8EUDBOMEygSqBIhkZodHRwOi8v Y3JsLmNvbW9kb2NhLmNvbS9DT01PRE9DbGllbnRBdXRoZW50aWNhdGlvbmFuZFNlY3VyZUVt YWlsQ0EuY3JsMIGIBggrBgEFBQcBAQR8MHowUgYIKwYBBQUHMAKGRmh0dHA6Ly9jcnQuY29t b2RvY2EuY29tL0NPTU9ET0NsaWVudEF1dGhlbnRpY2F0aW9uYW5kU2VjdXJlRW1haWxDQS5j cnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTAmBgNVHREEHzAdgRty b2JlcnQuY3JhZ2llQGdyaWRtZXJnZS5jb20wDQYJKoZIhvcNAQEFBQADggEBAD6b/O0LkPav kR4Znoqxg0Ad7M3duDm4uzfrlX4ecgq56Ccdwd+3Tayz7Ewej30woVMmTKkA/NKRaCd0wVM9 8seF/oZjXKO7o1SH27igRnGSWjCoWXsdwJGfZbYnvcIIhhsxJoCPNbeSR7C0PAFDKsP3xrJy MHMljIJsoRbZu/fnYNyFWh9OXf7fYJOGmKDKAhSabUGfhY7umvU9d/YTqo02Q6YzC7d4zPNG 1a75AuHSEchf6GdKqycG38I5y9jlDaYfXspoS3PlTNCIeZONbOSMZgftnNEVKq+SWytFqyG/ 8+dwpm/a12KMex5J8iHwaUKj++2O2rAFNjDDqXpeEYoxggQZMIIEFQIBATCBqDCBkzELMAkG A1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9y ZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxOTA3BgNVBAMTMENPTU9ETyBDbGllbnQg QXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQQIQXDFQ28QtqMuYch5f2nTvZjAJ BgUrDgMCGgUAoIICRTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEP Fw0xNDA1MzAwOTM2NDlaMCMGCSqGSIb3DQEJBDEWBBQV06KPhYTxNOxVtG76tH09/2yFnjBs BgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYIKoZIhvcNAwcw DgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEo MIG5BgkrBgEEAYI3EAQxgaswgagwgZMxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVy IE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1p dGVkMTkwNwYDVQQDEzBDT01PRE8gQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUg RW1haWwgQ0ECEFwxUNvELajLmHIeX9p072YwgbsGCyqGSIb3DQEJEAILMYGroIGoMIGTMQsw CQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxm b3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDE5MDcGA1UEAxMwQ09NT0RPIENsaWVu dCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhBcMVDbxC2oy5hyHl/adO9m MA0GCSqGSIb3DQEBAQUABIIBADMPKVOhwQjTfvjUaXP8ycM0LUP+aEyVg3fb3IWW3mYYcYrE DRAYamv1r1oaP1Nv0Q7XFRgp9aZ8XH2uQ3gF44xyd1xPjr13/ZieNVWYgDBeIJeXCcDmDOqq sW0DSH1W9qh+T8AawuhS1PX4FSw/z4/ZXeUxF65MCiDE8BG3Q+sfJR0Al4Jv+MkE/0noGMbk WK8+QiKnPFisgrGlGSCfJt0WLnmo/FKrllNhzg1LNPXLH3B2gUureUniQOlU3OCMno297jSu fJ97uoddZ/1fzwx8gwk8mlqw665KgkNwwyI34lO4du7gXeFKLet3EyrxWuvb2SYJozIUFw5L q3SMS8IAAAAAAAA= --------------ms020708020701060407020200-- From nobody Fri May 30 07:08:29 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 971891A03FC for ; Fri, 30 May 2014 07:08:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.018 X-Spam-Level: X-Spam-Status: No, score=-1.018 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_FONT_FACE_BAD=0.981, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BXPMilK9JRyV for ; Fri, 30 May 2014 07:08:17 -0700 (PDT) Received: from mail-ie0-x22e.google.com (mail-ie0-x22e.google.com [IPv6:2607:f8b0:4001:c03::22e]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3E7FD1A08FD for ; Fri, 30 May 2014 07:08:17 -0700 (PDT) Received: by mail-ie0-f174.google.com with SMTP id lx4so1710782iec.5 for ; Fri, 30 May 2014 07:08:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type; bh=4gOm6dzTTazDj7efOAz32gfCqvkimpHihCkuycr+FTA=; b=I48f0md86lVebbM/lO3Hv42/QvzzaDKIOYyeuZ5Q3OJHWexwGfcgFIQCkxVxtkTfVM Wb9LQIefSOralAQcC9OnUP+PaqoJxQd9j8yPrxsyBRbY9xbtrG/kfozDm33PzsGTonGQ JbS57oyJPx4UbAV657KBnDNWJtAC0ECQXC7iLmdgQzD932pfUL4sRDQgMseeXUhUJVeJ DrOgysqxCMbW+46hZ5GAeiiEjIFDPmkxtu/wCE2DOMHf7/3amFodZOt2pqnsl4Emktg2 K11umBqqp/kyQN0tgGCrg1Y9cmquxwuPKmVwCBApFsTYNJBrfKDR+lnz8pJfF6J27R+p Yb9Q== X-Received: by 10.50.21.104 with SMTP id u8mr5896850ige.1.1401458892707; Fri, 30 May 2014 07:08:12 -0700 (PDT) Received: from [192.168.1.103] (CPE0013100e2c51-CM001cea35caa6.cpe.net.cable.rogers.com. [99.231.3.110]) by mx.google.com with ESMTPSA id rr2sm5712266igb.19.2014.05.30.07.08.11 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Fri, 30 May 2014 07:08:11 -0700 (PDT) Message-ID: <538890C6.6080901@gmail.com> Date: Fri, 30 May 2014 10:08:06 -0400 From: Rene Struik User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: robert.cragie@gridmerge.com, "Kumar, Sandeep" , "dtls-iot@ietf.org" References: <5384FB1C.60109@gmail.com> <5384FBB0.3040900@gmail.com> <5385FC6C.8080102@gmail.com> , <53860BB5.8020908@gmail.com> <538639AF.4050900@gmail.com> <538770D9.2040103@gridmerge.com> <5387963C.3070304@gmail.com> <53885131.7080900@gridmerge.com> In-Reply-To: <53885131.7080900@gridmerge.com> Content-Type: multipart/alternative; boundary="------------050409050807060404090408" Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/n30_PV8PW_vmSNVKMaPXx83xEvo Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 May 2014 14:08:24 -0000 This is a multi-part message in MIME format. --------------050409050807060404090408 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Hi Robert: Obviously, when the network is locked down and does not allow newly joining devices (the scenario where the relay on/off switch is stuck in the OFF position), my initial question on relaying of messages received from newly joining devices does not play. This would also be the less interesting scenario, though, since this would not allow devices to discover and join the network by themselves. BTW - even with stateless relay, the state of a relaying station may change (e.g., due to impact of sending a MAC frame on MAC state); it just does not accumulate state related to the newbee device. When one uses TSCH, other MAC state may need to be introduced that may relate to the newbee node, e.g., to synchronize timeslots during which the newbee device and the relaying station can communicate. So, the notion of "stateless" may be somewhat a misnomer, at least for sleepy networks. In all cases, as already said, each relay of end-to-end traffic may trigger amplified network traffic, so comes at a price (network latency, consumed energy, capacity use, intra-device computational latency). It is here where denial of service attacks on the network may come into play. So, I am still interested in getting more insight as to how the relay on/off switch would work in practice (which was the question in my original email of Tue [snippet copied below]). A description of device join operations would help (say, with operational network of 1000 nodes with diameter 20 hops, where one wishes to add a newbee node A at neighbor B, where B is 10 hops away from network manager T). I hope this helps. Rene [excerpt of my email as of Tue May 27, 2014, 4:55pm EDT] >>>> I would be curious as to whether you could provide some more insight >>>> as to what type of denial of service attack you counter and how the >>>> DTLS Relay "on/off switch" would work in practice On 5/30/2014 5:36 AM, Robert Cragie wrote: > Hi Rene, > > The point is to ensure the relay model itself does not introduce > state, i.e. the net state change between before a DTLS packet is > received and after it has been relayed is zero. It is not really that > easy to consider the impact on other network resources as it depends > on the network type etc. but we can use examples. > > In the example given below, if the relay on/off switch is in the OFF > position, any data packet which is unsecured would be discarded at the > earliest opportunity during the receive process. This would minimise > allocation of resources for the purposes of packet processing to > simply buffering one incoming packet, reading the header then silently > discarding the packet immediately. One could even imagine an > intelligent hardware-based MAC doing this based on setting security > policy at the MAC layer, so the packet may not even be received by the > CPU/firmware processing the packet. > > Robert > > On 29/05/2014 9:19 PM, Rene Struik wrote: >> Hi Robert: >> >> Thanks for your note. >> >> In the scenario where the "permit join" flag is switched ON, the DTLS >> Relay element can indeed limit the impact on locally maintained state >> by "making state travel around" (the stateless relay in Section 3.2 >> of the draft). However, this does not necessarily reduce the impact >> on consumed network resources (e.g., in terms of used capacity) >> elsewhere. Hence, my question on how the "relay on/off" switch >> mentioned in the security consideration section of >> draft-kumar-dice-dtls-relay-01 would work in practice. >> >> I think we all agree that this needs more work. >> >> Rene >> >> On 5/29/2014 1:39 PM, Robert Cragie wrote: >>> Hi Rene, >>> >>> Regarding the denial of service attack, the aim is to limit the >>> impact an unauthenticated device can have on other network devices >>> from the point of view of network access. >>> >>> The simplest countermeasure, which is widely used, is that whereby a >>> network-wide "permit join" is in force. This is probably the on/off >>> switch alluded to in the security considerations, so I don't think >>> this switch works autonomously based on detecting a large amount of >>> unauthenticated traffic, although this could be fed in to heuristics >>> to decide the state of permit join, especially with regarding to >>> early disabling. This is a simple way of preventing any attempt to >>> appropriate resources on a node at the perimeter of the network, >>> providing unauthenticated traffic can be easily distinguished. An >>> example of distinguishing traffic from an unauthenticated node from >>> traffic from an authenticated node is the presence of link layer >>> security using a network-wide key, given as a network access token. >>> Assuming this method is used, the perimeter node would simply >>> silently discard any data traffic unsecured at the network layer >>> (excluding handling any necessary management commands, e.g. beacon >>> request). >>> >>> The next level of countermeasure needs to be considered when permit >>> join is enabled. In this case, a perimeter node needs to act as an >>> enforcement point and carefully police data traffic from any >>> unauthenticated node. Assuming the link-layer security method is >>> used, it is also easy to distinguish valid traffic for >>> authentication purposes from other traffic and to allow only such >>> traffic to be further processed. This further processing should >>> ideally consume as little in the way of resources as possible at the >>> perimeter node. Hence the suggested use of the stateless relay, >>> which ensures there is no need to allocate any resources to maintain >>> state for the purposes of relaying to another node. >>> >>> The cookie mechanism also provides some protection using spoofing >>> nodes. This could possibly be generalised into a proof of >>> work/puzzle mechanism, where a cookie exchange is a very simple >>> proof of work which would ask the unauthenticated initiator to do >>> something to prove it is at least attempting an authentication >>> handshake. >>> >>> Further than that, the authentication handshake then of course has >>> to complete successfully. >>> >>> It is the earlier stages which are of interest in the case of the >>> DTLS relay and I think it would be worth expanding on these in the >>> security considerations. >>> >>> With regard to the 802.11 model, the AP acts as pass-through >>> Authenticator (an EAP expression) to an Authentication Server >>> (usually through RADIUS). The EAP model only considers these parties >>> and whilst there could be more intermediates, they don't figure as >>> part of the EAP transaction. The relay model is somewhat different >>> in that an 802.11 STA - AP model is a star (hub and spoke) model, >>> whereas the relay model is aimed more at mesh networks, hence the >>> concept of a relay at a perimeter node. Therefore it is possible in >>> EAP terms that the joining node is the Peer (supplicant in >>> 802.1X-speak), the perimeter node is the relay (not an EAP concept), >>> the border router is the pass-through Authenticator and some other >>> device outside of the network being accessed is the Authentication >>> Server. >>> >>> Robert >>> >>> On 28/05/2014 8:31 PM, Rene Struik wrote: >>>> Hi Sandeep: >>>> >>>> (based on recollection of 802.11ai discussions) Conceptually, the >>>> third-party of the STA and AP may be different from one another (if >>>> these have pre-established keys with different third-parties). In >>>> that case, while logically the third-parties are different, this >>>> may still result in AP communicating with its own third-party and >>>> delegating any third-party arbitrage stuff to a (for him) black >>>> box. (So, communication can still be seemingly decided locally by >>>> AP alone, with any other mechanisms occurring invisibly in the >>>> background. With 802.11 wifi in a smart phone, third parties of STA >>>> and AP could, for example, be Verizon and China Mobile, where >>>> "black box" magic would be some heavy-handed infrastructure and >>>> business agreements between those two players. >>>> >>>> Of course, this is all slightly on a tangent w.r.t. security >>>> aspects of relayed communications. >>>> >>>> Rene >>>> >>>> On 5/28/2014 2:47 PM, Kumar, Sandeep wrote: >>>>> In 802.11, if I am not mistaken, the AP acting as the relay >>>>> decides which authentication server T to use (e.g. which RADIUS >>>>> server to use is configured at the AP and not on the STA). The STA >>>>> may indicate a domain parameter if a remote RADIUS server needs to >>>>> be used but the address of the remote server is configured at the >>>>> proxy RADIUS server. In both cases the STA cannot contact >>>>> arbitrary server T. Its similar to the case where the DTLS relay >>>>> decides which network manager to use. Right? >>>>> >>>>> Sandeep >>>>> >>>>> >>>>> *From:* Rene Struik >>>>> *Sent:* ?Wednesday?, ?May? ?28?, ?2014 ?6?:?15? ?PM >>>>> *To:* Sandeep Kumar , >>>>> dtls-iot@ietf.org >>>>> >>>>> With 802.11, when a STA device joins a network at an access point >>>>> AP, the AP may sometimes act as a relay station and the actual >>>>> authentication is done by a third-party device T. In 802.11 >>>>> parlance, I believe the STA is called the supplicant, the AP the >>>>> Authenticator and T the Server (very confusing verbiage indeed, >>>>> since AP does not do anything from crypto perspective). In fact, >>>>> any three-party key agreement protocol with inline third party and >>>>> where the result really depends on this third party being in the >>>>> loop seems an example of use case you asked about. >>>>> >>>>> == >>>>> Do you have any specific use case where a joining node decides >>>>> which network manager to contact? >>>>> >>>>> >>>>> On 5/28/2014 11:43 AM, Kumar, Sandeep wrote: >>>>> > Hi Rene >>>>> > >>>>> > Sorry for the confusion, I did not intend to say that the >>>>> "on/off" was for the second threat. It only addresses the first >>>>> threat. >>>>> > >>>>> > Regarding the second threat, indeed as you mentioned, either the >>>>> relay node decides or as in the security considerations " Other >>>>> mechanisms based >>>>> > on IP destination filtering can be applied by the controller to >>>>> all Relay nodes to avoid misuse of the network resources." I agree >>>>> this is vague on how the filtering parameters can be determined >>>>> which can be extended in future based on the use cases. Do you >>>>> have any specific use case where a joining node decides which >>>>> network manager to contact? >>>>> > >>>>> > Regards >>>>> > Sandeep >>>>> > >>>>> > >>>>> >> -----Original Message----- >>>>> >> From: Rene Struik [mailto:rstruik.ext@gmail.com] >>>>> >> Sent: Wednesday, May 28, 2014 5:11 PM >>>>> >> To: Kumar, Sandeep; dtls-iot@ietf.org >>>>> >> Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 >>>>> >> >>>>> >> Hi Sandeep: >>>>> >> >>>>> >> Thanks for the quick reply. I do understand your second threat, >>>>> but not how >>>>> >> the "on/off switch" would play a role here. >>>>> >> >>>>> >> According to Section 3.1, with stateful relay, if the joining >>>>> node knows the >>>>> >> DTLS Server's IP address, the DTLS Relay simply forwards this. >>>>> If the joining >>>>> >> node does *not* know the DTLS Server's IP address, the DTLS >>>>> Relay is >>>>> >> forwarding it to any device it likes (which could of course >>>>> very well be the >>>>> >> network manager). So, in the first case the joining node seems >>>>> in full control >>>>> >> as to which device it connects (perhaps, even a device that is >>>>> not part of the >>>>> >> network); in the second case the relaying node determines who >>>>> it connects >>>>> >> the joining node to (which may be fine in communication >>>>> security scenarios, >>>>> >> but perhaps not in application security settings). >>>>> >> >>>>> >> If you could elaborate on the role of the "on/off switch" in >>>>> countering these >>>>> >> threats that would help. >>>>> >> >>>>> >> Rene >>>>> >> >>>>> >> [2nd threat, excerpted from your email as of May 28, 2014, >>>>> 10:14am NL] >>>>> >> >>>>> >> - misuse of the relay functionality to allow a rogue node to >>>>> setup a DTLS >>>>> >> session with a server which is not the network manager >>>>> >> >>>>> >> >>>>> >> On 5/28/2014 4:14 AM, Kumar, Sandeep wrote: >>>>> >>> Hi Rene >>>>> >>> >>>>> >>> The security considerations section is not completely baked >>>>> yet. But to >>>>> >> answer your questions, we were considering the following two >>>>> threats: >>>>> >>> - DoS where a large number of joining messages are sent by rogue >>>>> >>> nodes either to flood the lowpan or drain the network manager >>>>> >>> - misuse of the relay functionality to allow a rogue node to >>>>> setup a >>>>> >>> DTLS session with a server which is not the network manager >>>>> >>> >>>>> >>> The "on/off switch" is just one option for the DoS where the >>>>> network >>>>> >> manager can detect too many failed requests and issue a multicast >>>>> >> management message (e.g. a CoAP request to a resource) to stop >>>>> or further >>>>> >> throttle joining messages being accepted by relay nodes for a >>>>> limited time. >>>>> >> Of course as you mentioned, this will be delayed until the >>>>> third flow of the >>>>> >> DTLS protocol, but the DTLS cookie should provide some >>>>> additional resistance >>>>> >> initially. In other scenarios, the timing of a joining device >>>>> is known (e.g. within >>>>> >> a home) and the relays can be asked to switched on and later >>>>> switched off to >>>>> >> restrict the window of opportunity to the attacker. >>>>> >>> The idea is that the new device gets the configuration info >>>>> within the DTLS >>>>> >> session that is created (e.g. as a CoAP request to a resource). >>>>> How and >>>>> >> format needs to be defined (either here or somewhere else more >>>>> >> generally). >>>>> >>> There could be more threats and possible countermeasures, let >>>>> me know if >>>>> >> you have more ideas. >>>>> >>> Regards >>>>> >>> Sandeep >>>>> >>> >>>>> >>>> -----Original Message----- >>>>> >>>> From: dtls-iot [mailto:dtls-iot-bounces@ietf.org] On Behalf >>>>> Of Rene >>>>> >>>> Struik >>>>> >>>> Sent: Tuesday, May 27, 2014 10:55 PM >>>>> >>>> To: dtls-iot@ietf.org >>>>> >>>> Subject: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 >>>>> >>>> >>>>> >>>> Dear Sandeep, Oscar, Sye Loong: >>>>> >>>> >>>>> >>>> I read draft-kumar-dice-dtls-relay-01 a few days ago. In the >>>>> security >>>>> >>>> considerations section of that draft, you allude to potential >>>>> denial >>>>> >>>> of services attacks in the context where a one-hop neighbor of a >>>>> >>>> joining node facilitates messaging between that joining node >>>>> and the >>>>> >>>> network manager potentially many hops away, where the joining >>>>> node >>>>> >>>> and the network manager act as DTLS Client and DTLS Server, >>>>> >>>> respectively, and where the one-hop neighbor acts as DTLS >>>>> Relay. You >>>>> >>>> also suggest some measures to thwart/limit denial of service >>>>> attack risk. >>>>> >>>> >>>>> >>>> I would be curious as to whether you could provide some more >>>>> insight >>>>> >>>> as to what type of denial of service attack you counter and >>>>> how the >>>>> >>>> DTLS Relay "on/off switch" would work in practice. How would one >>>>> >>>> detect a potential DoS attack and turn on the "DTLS Relay on/off" >>>>> >>>> knobs to counter an influx of bogus join protocol messages >>>>> that could >>>>> >>>> be amplified if this would travel to the network manager (in a >>>>> >>>> scenario where both are many hops away from each other)? >>>>> Since with >>>>> >>>> DTLS, client authentication only happens in the third >>>>> protocol flow, >>>>> >>>> it seems that by necessity one has to allow three subsequent >>>>> message >>>>> >>>> flows (key establishment messages from client to server and >>>>> back, key >>>>> >>>> confirmation message from client to server), without the DTLS >>>>> Relay >>>>> >>>> element having a mechanism (except for throttling) to >>>>> cryptographically >>>>> >> arbitrage these flows. >>>>> >>>> When does the newbee device get configuration info and, e.g., a >>>>> >>>> routable address assigned? >>>>> >>>> >>>>> >>>> If you could expand on this scenario, that would be great. >>>>> >>>> >>>>> >>>> Best regards, Rene >>>>> >>>> >>>>> >>>> >>>>> >>>> >>>>> >>>> [excerpt from draft-kumar-dice-dtls-relay-01] 5. Security >>>>> >>>> Considerations Additional security considerations need to be >>>>> taken >>>>> >>>> into account about forwarding of messages from devices through a >>>>> >>>> network to which it has not yet been admitted. This can lead to >>>>> >>>> denial-of-service attacks or misuse of network resources without >>>>> >>>> proper authentication. One way to overcome any large scale >>>>> misuse of >>>>> >>>> the network is to have a management message from the >>>>> Controller that >>>>> >>>> initiates already authenticated devices in the network to >>>>> enter into >>>>> >>>> a DTLS Relay mode. The devices can stay such a Relay mode for >>>>> a fixed >>>>> >>>> period of time or until the Controller sends a new management >>>>> message >>>>> >>>> blocking the DTLS Relay mode in all devices in the network. >>>>> This is >>>>> >>>> often possible since the administrator of the network can be >>>>> aware >>>>> >>>> when new devices join the network either because of the >>>>> >>>> "Introduction" phase or commissioning phase. Other mechanisms >>>>> based >>>>> >>>> on IP destination filtering can be applied by the controller >>>>> to all Relay >>>>> >> nodes to avoid misuse of the network resources. >>>>> >>>> -- >>>>> >>>> email: rstruik.ext@gmail.com | Skype: rstruik >>>>> >>>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >>>>> >>>> >>>>> >>>> >>>>> >>>> >>>>> >>>> >>>>> >>>> _______________________________________________ >>>>> >>>> dtls-iot mailing list >>>>> >>>> dtls-iot@ietf.org >>>>> >>>> https://www.ietf.org/mailman/listinfo/dtls-iot >>>>> >>> ________________________________ >>>>> >>> The information contained in this message may be confidential >>>>> and legally >>>>> >> protected under applicable law. The message is intended solely >>>>> for the >>>>> >> addressee(s). If you are not the intended recipient, you are >>>>> hereby notified >>>>> >> that any use, forwarding, dissemination, or reproduction of >>>>> this message is >>>>> >> strictly prohibited and may be unlawful. If you are not the >>>>> intended recipient, >>>>> >> please contact the sender by return e-mail and destroy all >>>>> copies of the >>>>> >> original message. >>>>> >> >>>>> >> -- >>>>> >> email: rstruik.ext@gmail.com | Skype: rstruik >>>>> >> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >>>>> > >>>>> > ________________________________ >>>>> > The information contained in this message may be confidential >>>>> and legally protected under applicable law. The message is >>>>> intended solely for the addressee(s). If you are not the intended >>>>> recipient, you are hereby notified that any use, forwarding, >>>>> dissemination, or reproduction of this message is strictly >>>>> prohibited and may be unlawful. If you are not the intended >>>>> recipient, please contact the sender by return e-mail and destroy >>>>> all copies of the original message. >>>>> > >>>>> >>>>> >>>>> -- >>>>> email: rstruik.ext@gmail.com | Skype: rstruik >>>>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >>>>> >>>> >>>> >>>> -- >>>> email:rstruik.ext@gmail.com | Skype: rstruik >>>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >>>> >>>> >>>> _______________________________________________ >>>> dtls-iot mailing list >>>> dtls-iot@ietf.org >>>> https://www.ietf.org/mailman/listinfo/dtls-iot >>> >> >> >> -- >> email:rstruik.ext@gmail.com | Skype: rstruik >> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 >> >> >> _______________________________________________ >> dtls-iot mailing list >> dtls-iot@ietf.org >> https://www.ietf.org/mailman/listinfo/dtls-iot > -- email: rstruik.ext@gmail.com | Skype: rstruik cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 --------------050409050807060404090408 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit
Hi Robert:

Obviously, when the network is locked down and does not allow newly joining devices (the scenario where the relay on/off switch is stuck in the OFF position), my initial question on relaying of messages received from newly joining devices does not play. This would also be the less interesting scenario, though, since this would not allow devices to discover and join the network by themselves.

BTW - even with stateless relay, the state of a relaying station may change (e.g., due to impact of sending a MAC frame on MAC state); it just does not accumulate state related to the newbee device. When one uses TSCH, other MAC state may need to be introduced that may relate to the newbee node, e.g., to synchronize timeslots during which the newbee device and the relaying station can communicate. So, the notion of "stateless" may be somewhat a misnomer, at least for sleepy networks. In all cases, as already said, each relay of end-to-end traffic may trigger amplified network traffic, so comes at a price (network latency, consumed energy, capacity use, intra-device computational latency). It is here where denial of service attacks on the network may come into play.

So, I am still interested in getting more insight as to how the relay on/off switch would work in practice (which was the question in my original email of Tue [snippet copied below]). A description of device join operations would help (say, with operational network of 1000 nodes with diameter 20 hops, where one wishes to add a newbee node A at neighbor B, where B is 10 hops away from network manager T).

I hope this helps.

Rene  

[excerpt of my email as of Tue May 27, 2014, 4:55pm EDT]
>>>> I would be curious as to whether you could provide some more insight
>>>> as to what type of denial of service attack you counter and how the
>>>> DTLS Relay "on/off switch" would work in practice
 
On 5/30/2014 5:36 AM, Robert Cragie wrote:
Hi Rene,

The point is to ensure the relay model itself does not introduce state, i.e. the net state change between before a DTLS packet is received and after it has been relayed is zero. It is not really that easy to consider the impact on other network resources as it depends on the network type etc. but we can use examples.

In the example given below, if the relay on/off switch is in the OFF position, any data packet which is unsecured would be discarded at the earliest opportunity during the receive process. This would minimise allocation of resources for the purposes of packet processing to simply buffering one incoming packet, reading the header then silently discarding the packet immediately. One could even imagine an intelligent hardware-based MAC doing this based on setting security policy at the MAC layer, so the packet may not even be received by the CPU/firmware processing the packet.

Robert

On 29/05/2014 9:19 PM, Rene Struik wrote:
Hi Robert:

Thanks for your note.

In the scenario where the "permit join" flag is switched ON, the DTLS Relay element can indeed limit the impact on locally maintained state by "making state travel around" (the stateless relay in Section 3.2 of the draft). However, this does not necessarily reduce the impact on consumed network resources (e.g., in terms of used capacity) elsewhere. Hence, my question on how the "relay on/off" switch mentioned in the security consideration section of draft-kumar-dice-dtls-relay-01 would work in practice.

I think we all agree that this needs more work.

Rene

On 5/29/2014 1:39 PM, Robert Cragie wrote:
Hi Rene,

Regarding the denial of service attack, the aim is to limit the impact an unauthenticated device can have on other network devices from the point of view of network access.

The simplest countermeasure, which is widely used, is that whereby a network-wide "permit join" is in force. This is probably the on/off switch alluded to in the security considerations, so I don't think this switch works autonomously based on detecting a large amount of unauthenticated traffic, although this could be fed in to heuristics to decide the state of permit join, especially with regarding to early disabling. This is a simple way of preventing any attempt to appropriate resources on a node at the perimeter of the network, providing unauthenticated traffic can be easily distinguished. An example of distinguishing traffic from an unauthenticated node from traffic from an authenticated node is the presence of link layer security using a network-wide key, given as a network access token. Assuming this method is used, the perimeter node would simply silently discard any data traffic unsecured at the network layer (excluding handling any necessary management commands, e.g. beacon request).

The next level of countermeasure needs to be considered when permit join is enabled. In this case, a perimeter node needs to act as an enforcement point and carefully police data traffic from any unauthenticated node. Assuming the link-layer security method is used, it is also easy to distinguish valid traffic for authentication purposes from other traffic and to allow only such traffic to be further processed. This further processing should ideally consume as little in the way of resources as possible at the perimeter node. Hence the suggested use of the stateless relay, which ensures there is no need to allocate any resources to maintain state for the purposes of relaying to another node.

The cookie mechanism also provides some protection using spoofing nodes. This could possibly be generalised into a proof of work/puzzle mechanism, where a cookie exchange is a very simple proof of work which would ask the unauthenticated initiator to do something to prove it is at least attempting an authentication handshake.

Further than that, the authentication handshake then of course has to complete successfully.

It is the earlier stages which are of interest in the case of the DTLS relay and I think it would be worth expanding on these in the security considerations.

With regard to the 802.11 model, the AP acts as pass-through Authenticator (an EAP expression) to an Authentication Server (usually through RADIUS). The EAP model only considers these parties and whilst there could be more intermediates, they don't figure as part of the EAP transaction. The relay model is somewhat different in that an 802.11 STA - AP model is a star (hub and spoke) model, whereas the relay model is aimed more at mesh networks, hence the concept of a relay at a perimeter node. Therefore it is possible in EAP terms that the joining node is the Peer (supplicant in 802.1X-speak), the perimeter node is the relay (not an EAP concept), the border router is the pass-through Authenticator and some other device outside of the network being accessed is the Authentication Server.

Robert

On 28/05/2014 8:31 PM, Rene Struik wrote:
Hi Sandeep:

(based on recollection of 802.11ai discussions) Conceptually, the third-party of the STA and AP may be different from one another (if these have pre-established keys with different third-parties). In that case, while logically the third-parties are different, this may still result in AP communicating with its own third-party and delegating any third-party arbitrage stuff to a (for him) black box. (So, communication can still be seemingly decided locally by AP alone, with any other mechanisms occurring invisibly in the background. With 802.11 wifi in a smart phone, third parties of STA and AP could, for example, be Verizon and China Mobile, where "black box" magic would be some heavy-handed infrastructure and business agreements between those two players.

Of course, this is all slightly on a tangent w.r.t. security aspects of relayed communications.

Rene

On 5/28/2014 2:47 PM, Kumar, Sandeep wrote:
In 802.11, if I am not mistaken, the AP acting as the relay decides which authentication server T to use (e.g. which RADIUS server to use is configured at the AP and not on the STA). The STA may indicate a domain parameter if a remote RADIUS server needs to be used but the address of the remote server is configured at the proxy RADIUS server. In both cases the STA cannot contact arbitrary server T. Its similar to the case where the DTLS relay decides which network manager to use. Right?

Sandeep


From: Rene Struik
Sent: ‎Wednesday‎, ‎May‎ ‎28‎, ‎2014 ‎6‎:‎15‎ ‎PM
To: Sandeep Kumar, dtls-iot@ietf.org

With 802.11, when a STA device joins a network at an access point AP, the AP may sometimes act as a relay station and the actual authentication is done by a third-party device T. In 802.11 parlance, I believe the STA is called the supplicant, the AP the Authenticator and T the Server (very confusing verbiage indeed, since AP does not do anything from crypto perspective). In fact, any three-party key agreement protocol with inline third party and where the result really depends on this third party being in the loop seems an example of use case you asked about.

==
Do you have any specific use case where a joining node decides which network manager to contact?


On 5/28/2014 11:43 AM, Kumar, Sandeep wrote:
> Hi Rene
>
> Sorry for the confusion, I did not intend to say that the "on/off" was for the second threat. It only addresses the first threat.
>
> Regarding the second threat, indeed as you mentioned, either the relay node decides or as in the security considerations " Other mechanisms based
> on IP destination filtering can be applied by the controller to all Relay nodes to avoid misuse of the network resources." I agree this is vague on how the filtering parameters can be determined which can be extended in future based on the use cases. Do you have any specific use case where a joining node decides which network manager to contact?
>
> Regards
> Sandeep
>
>
>> -----Original Message-----
>> From: Rene Struik [mailto:rstruik.ext@gmail.com]
>> Sent: Wednesday, May 28, 2014 5:11 PM
>> To: Kumar, Sandeep; dtls-iot@ietf.org
>> Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01
>>
>> Hi Sandeep:
>>
>> Thanks for the quick reply. I do understand your second threat, but not how
>> the "on/off switch" would play a role here.
>>
>> According to Section 3.1, with stateful relay, if the joining node knows the
>> DTLS Server's IP address, the DTLS Relay simply forwards this. If the joining
>> node does *not* know the DTLS Server's IP address, the DTLS Relay is
>> forwarding it to any device it likes (which could of course very well be the
>> network manager). So, in the first case the joining node seems in full control
>> as to which device it connects (perhaps, even a device that is not part of the
>> network); in the second case the relaying node determines who it connects
>> the joining node to (which may be fine in communication security scenarios,
>> but perhaps not in application security settings).
>>
>> If you could elaborate on the role of the "on/off switch" in countering these
>> threats that would help.
>>
>> Rene
>>
>> [2nd threat, excerpted from your email as of May 28, 2014, 10:14am NL]
>>
>> - misuse of the relay functionality to allow a rogue node to setup a DTLS
>> session with a server which is not the network manager
>>
>>
>> On 5/28/2014 4:14 AM, Kumar, Sandeep wrote:
>>> Hi Rene
>>>
>>> The security considerations section is not completely baked yet. But to
>> answer your questions, we were considering the following two threats:
>>> - DoS where a large number of joining messages are sent by  rogue
>>> nodes either to flood the lowpan or drain the network manager
>>> - misuse of the relay functionality to allow a rogue node to setup a
>>> DTLS session with a server which is not the network manager
>>>
>>> The "on/off switch" is just one option for the DoS where the network
>> manager can detect too many failed requests and issue a multicast
>> management message (e.g. a CoAP request to a resource) to stop or further
>> throttle joining messages being accepted by relay nodes for a limited time.
>> Of course as you mentioned, this will be delayed until the third flow of the
>> DTLS protocol, but the DTLS cookie should provide some additional resistance
>> initially. In other scenarios, the timing of a joining device is known (e.g. within
>> a home) and the relays can be asked to switched on and later switched off to
>> restrict the window of opportunity to the attacker.
>>> The idea is that the new device gets the configuration info within the DTLS
>> session that is created (e.g. as a CoAP request to a resource). How and
>> format needs to be defined (either here or somewhere else more
>> generally).
>>> There could be more threats and possible countermeasures, let me know if
>> you have more ideas.
>>> Regards
>>> Sandeep
>>>
>>>> -----Original Message-----
>>>> From: dtls-iot [mailto:dtls-iot-bounces@ietf.org] On Behalf Of Rene
>>>> Struik
>>>> Sent: Tuesday, May 27, 2014 10:55 PM
>>>> To: dtls-iot@ietf.org
>>>> Subject: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01
>>>>
>>>> Dear Sandeep, Oscar, Sye Loong:
>>>>
>>>> I read draft-kumar-dice-dtls-relay-01 a few days ago. In the security
>>>> considerations section of that draft, you allude to potential denial
>>>> of services attacks in the context where a one-hop neighbor of a
>>>> joining node facilitates messaging between that joining node and the
>>>> network manager potentially many hops away, where the joining node
>>>> and the network manager act as DTLS Client and DTLS Server,
>>>> respectively, and where the one-hop neighbor acts as DTLS Relay. You
>>>> also suggest some measures to thwart/limit denial of service attack risk.
>>>>
>>>> I would be curious as to whether you could provide some more insight
>>>> as to what type of denial of service attack you counter and how the
>>>> DTLS Relay "on/off switch" would work in practice. How would one
>>>> detect a potential DoS attack and turn on the "DTLS Relay on/off"
>>>> knobs to counter an influx of bogus join protocol messages that could
>>>> be amplified if this would travel to the network manager (in a
>>>> scenario where both are many hops away from each other)? Since with
>>>> DTLS, client authentication only happens in the third protocol flow,
>>>> it seems that by necessity one has to allow three subsequent message
>>>> flows (key establishment messages from client to server and back, key
>>>> confirmation message from client to server), without the DTLS Relay
>>>> element having a mechanism (except for throttling) to cryptographically
>> arbitrage these flows.
>>>> When does the newbee device get configuration info and, e.g., a
>>>> routable address assigned?
>>>>
>>>> If you could expand on this scenario, that would be great.
>>>>
>>>> Best regards, Rene
>>>>
>>>>
>>>>
>>>> [excerpt from draft-kumar-dice-dtls-relay-01] 5. Security
>>>> Considerations Additional security considerations need to be taken
>>>> into account about forwarding of messages from devices through a
>>>> network to which it has not yet been admitted. This can lead to
>>>> denial-of-service attacks or misuse of network resources without
>>>> proper authentication. One way to overcome any large scale misuse of
>>>> the network is to have a management message from the Controller that
>>>> initiates already authenticated devices in the network to enter into
>>>> a DTLS Relay mode. The devices can stay such a Relay mode for a fixed
>>>> period of time or until the Controller sends a new management message
>>>> blocking the DTLS Relay mode in all devices in the network. This is
>>>> often possible since the administrator of the network can be aware
>>>> when new devices join the network either because of the
>>>> "Introduction" phase or commissioning phase. Other mechanisms based
>>>> on IP destination filtering can be applied by the controller to all Relay
>> nodes to avoid misuse of the network resources.
>>>> --
>>>> email: rstruik.ext@gmail.com | Skype: rstruik
>>>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363
>>>>
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> dtls-iot mailing list
>>>> dtls-iot@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/dtls-iot
>>> ________________________________
>>> The information contained in this message may be confidential and legally
>> protected under applicable law. The message is intended solely for the
>> addressee(s). If you are not the intended recipient, you are hereby notified
>> that any use, forwarding, dissemination, or reproduction of this message is
>> strictly prohibited and may be unlawful. If you are not the intended recipient,
>> please contact the sender by return e-mail and destroy all copies of the
>> original message.
>>
>> --
>> email: rstruik.ext@gmail.com | Skype: rstruik
>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363
>
> ________________________________
> The information contained in this message may be confidential and legally protected under applicable law. The message is intended solely for the addressee(s). If you are not the intended recipient, you are hereby notified that any use, forwarding, dissemination, or reproduction of this message is strictly prohibited and may be unlawful. If you are not the intended recipient, please contact the sender by return e-mail and destroy all copies of the original message.
>


--
email: rstruik.ext@gmail.com | Skype: rstruik
cell: +1 (647) 867-5658 | US: +1 (415) 690-7363



-- 
email: rstruik.ext@gmail.com | Skype: rstruik
cell: +1 (647) 867-5658 | US: +1 (415) 690-7363


_______________________________________________
dtls-iot mailing list
dtls-iot@ietf.org
https://www.ietf.org/mailman/listinfo/dtls-iot




-- 
email: rstruik.ext@gmail.com | Skype: rstruik
cell: +1 (647) 867-5658 | US: +1 (415) 690-7363


_______________________________________________
dtls-iot mailing list
dtls-iot@ietf.org
https://www.ietf.org/mailman/listinfo/dtls-iot




-- 
email: rstruik.ext@gmail.com | Skype: rstruik
cell: +1 (647) 867-5658 | US: +1 (415) 690-7363
--------------050409050807060404090408-- From nobody Fri May 30 07:22:17 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 44D151A802E for ; Fri, 30 May 2014 07:22:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oMC67sodXvN5 for ; Fri, 30 May 2014 07:22:03 -0700 (PDT) Received: from mailscan1.extendcp.co.uk (mailscan17.extendcp.co.uk [79.170.45.29]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F0EE71A6F3E for ; Fri, 30 May 2014 07:21:49 -0700 (PDT) Received: from lb1.hi.local ([10.0.1.197] helo=mailscan3.hi.local) by mailscan-g64.hi.local with esmtp (Exim 4.80.1) (envelope-from ) id 1WqNgl-0007Xq-ON; Fri, 30 May 2014 15:21:43 +0100 Received: from lb1.hi.local ([10.0.1.197] helo=mail41.extendcp.co.uk) by mailscan3.hi.local with esmtps (UNKNOWN:DHE-RSA-AES256-GCM-SHA384:256) (Exim 4.80.1) (envelope-from ) id 1WqNgl-0006Fz-6J; Fri, 30 May 2014 15:21:43 +0100 Received: from host86-147-26-221.range86-147.btcentralplus.com ([86.147.26.221] helo=[192.168.0.2]) by mail41.extendcp.com with esmtpsa (TLSv1:DHE-RSA-AES128-SHA:128) (Exim 4.80.1) id 1WqNgk-0003Xe-Gw; Fri, 30 May 2014 15:21:42 +0100 Message-ID: <53889442.7040404@gridmerge.com> Date: Fri, 30 May 2014 15:22:58 +0100 From: Robert Cragie Organization: Gridmerge Ltd. User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: Rene Struik , "Kumar, Sandeep" , "dtls-iot@ietf.org" References: <5384FB1C.60109@gmail.com> <5384FBB0.3040900@gmail.com> <5385FC6C.8080102@gmail.com> , <53860BB5.8020908@gmail.com> <538639AF.4050900@gmail.com> <538770D9.2040103@gridmerge.com> <5387963C.3070304@gmail.com> <53885131.7080900@gridmerge.com> <538890C6.6080901@gmail.com> In-Reply-To: <538890C6.6080901@gmail.com> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms040308040206080308040209" X-Authenticated-As: robert.cragie@gridmerge.com X-Extend-Src: mailout Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/LTNRJoRJzWbp6NC4MYGEVGBRy9I Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: robert.cragie@gridmerge.com List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 May 2014 14:22:07 -0000 This is a cryptographically signed message in MIME format. --------------ms040308040206080308040209 Content-Type: multipart/alternative; boundary="------------060500000703070204090305" This is a multi-part message in MIME format. --------------060500000703070204090305 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Hi Rene, Comments inline. Robert On 30/05/2014 3:08 PM, Rene Struik wrote: > Hi Robert: > > Obviously, when the network is locked down and does not allow newly=20 > joining devices (the scenario where the relay on/off switch is stuck=20 > in the OFF position), my initial question on relaying of messages=20 > received from newly joining devices does not play. This would also be=20 > the less interesting scenario, though, since this would not allow=20 > devices to discover and join the network by themselves. It would potentially allow devices to discover networks but not to=20 join them > > BTW - even with stateless relay, the state of a relaying station may=20 > change (e.g., due to impact of sending a MAC frame on MAC state); it=20 > just does not accumulate state related to the newbee device. When one=20 > uses TSCH, other MAC state may need to be introduced that may relate=20 > to the newbee node, e.g., to synchronize timeslots during which the=20 > newbee device and the relaying station can communicate. So, the notion = > of "stateless" may be somewhat a misnomer, at least for sleepy=20 > networks. In all cases, as already said, each relay of end-to-end=20 > traffic may trigger amplified network traffic, so comes at a price=20 > (network latency, consumed energy, capacity use, intra-device=20 > computational latency). It is here where denial of service attacks on=20 > the network may come into play. Of course, but the point is not to introduce any additional state=20 through the relay mechanism itself, i.e. the net state change before and = after the relay operation only. Beyond that anything can happen. DoS is=20 a tricky subject to explore and can happen at various layers , for=20 example, swamping a channel with noise is quite an effective localised=20 DoS attack (PHY layer) or continuously sending a beacon request (MAC=20 layer). What you describe above falls outside of the scope of the relay=20 description and is specific to a certain type of network. > > So, I am still interested in getting more insight as to how the relay=20 > on/off switch would work in practice (which was the question in my=20 > original email of Tue [snippet copied below]). A description of device = > join operations would help (say, with operational network of 1000=20 > nodes with diameter 20 hops, where one wishes to add a newbee node A=20 > at neighbor B, where B is 10 hops away from network manager T). This only makes sense when a) considering a specific type of=20 network, as you have done above and b) widening the scope of the=20 discussion beyond just the relaying. Is that what you are proposing? If=20 so, there need to be some bounds or else it could end up being a very=20 long security considerations section. > > I hope this helps. > > Rene > > [excerpt of my email as of Tue May 27, 2014, 4:55pm EDT] > >>>> I would be curious as to whether you could provide some more insig= ht > >>>> as to what type of denial of service attack you counter and how th= e > >>>> DTLS Relay "on/off switch" would work in practice > [snip] --------------060500000703070204090305 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Hi Rene,

Comments inline.

Robert

On 30/05/2014 3:08 PM, Rene Struik wrote:
Hi Robert:

Obviously, when the network is locked down and does not allow newly joining devices (the scenario where the relay on/off switch is stuck in the OFF position), my initial question on relaying of messages received from newly joining devices does not play. This would also be the less interesting scenario, though, since this would not allow devices to discover and join the network by themselves.
<RCC>It would potentially allow devices to discover networks but not to join them</RCC>

BTW - even with stateless relay, the state of a relaying station may change (e.g., due to impact of sending a MAC frame on MAC state); it just does not accumulate state related to the newbee device. When one uses TSCH, other MAC state may need to be introduced that may relate to the newbee node, e.g., to synchronize timeslots during which the newbee device and the relaying station can communicate. So, the notion of "stateless" may be somewhat a misnomer, at least for sleepy networks. In all cases, as already said, each relay of end-to-end traffic may trigger amplified network traffic, so comes at a price (network latency, consumed energy, capacity use, intra-device computational latency). It is here where denial of service attacks on the network may come into play.
<RCC>Of course, but the point is not to introduce any additional state through the relay mechanism itself, i.e. the net state change before and after the relay operation only. Beyond that anything can happen. DoS is a tricky subject to explore and can happen at various layers , for example, swamping a channel with noise is quite an effective localised DoS attack (PHY layer) or continuously sending a beacon request (MAC layer). What you describe above falls outside of the scope of the relay description and is specific to a certain type of network.</RCC>

So, I am still interested in getting more insight as to how the relay on/off switch would work in practice (which was the question in my original email of Tue [snippet copied below]). A description of device join operations would help (say, with operational network of 1000 nodes with diameter 20 hops, where one wishes to add a newbee node A at neighbor B, where B is 10 hops away from network manager T).
<RCC>This only makes sense when a) considering a specific type of network, as you have done above and b) widening the scope of the discussion beyond just the relaying. Is that what you are proposing? If so, there need to be some bounds or else it could end up being a very long security considerations section.</RCC>

I hope this helps.

Rene  

[excerpt of my email as of Tue May 27, 2014, 4:55pm EDT]
>>>> I would be curious as to whether you could provide some more insight
>>>> as to what type of denial of service attack you counter and how the
>>>> DTLS Relay "on/off switch" would work in practice
 
[snip] --------------060500000703070204090305-- --------------ms040308040206080308040209 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIILUDCC BRowggQCoAMCAQICEG0Z6qcZT2ozIuYiMnqqcd4wDQYJKoZIhvcNAQEFBQAwga4xCzAJBgNV BAYTAlVTMQswCQYDVQQIEwJVVDEXMBUGA1UEBxMOU2FsdCBMYWtlIENpdHkxHjAcBgNVBAoT FVRoZSBVU0VSVFJVU1QgTmV0d29yazEhMB8GA1UECxMYaHR0cDovL3d3dy51c2VydHJ1c3Qu Y29tMTYwNAYDVQQDEy1VVE4tVVNFUkZpcnN0LUNsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQg RW1haWwwHhcNMTEwNDI4MDAwMDAwWhcNMjAwNTMwMTA0ODM4WjCBkzELMAkGA1UEBhMCR0Ix GzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UE ChMRQ09NT0RPIENBIExpbWl0ZWQxOTA3BgNVBAMTMENPTU9ETyBDbGllbnQgQXV0aGVudGlj YXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJKEhFtLV5jUXi+LpOFAyKNTWF9mZfEyTvefMn1V0HhMVbdClOD5J3EHxcZppLkyxPFA GpDMJ1Zifxe1cWmu5SAb5MtjXmDKokH2auGj/7jfH0htZUOMKi4rYzh337EXrMLaggLW1DJq 1GdvIBOPXDX65VSAr9hxCh03CgJQU2yVHakQFLSZlVkSMf8JotJM3FLb3uJAAVtIaN3FSrTg 7SQfOq9xXwfjrL8UO7AlcWg99A/WF1hGFYE8aIuLgw9teiFX5jSw2zJ+40rhpVJyZCaRTqWS D//gsWD9Gm9oUZljjRqLpcxCm5t9ImPTqaD8zp6Q30QZ9FxbNboW86eb/8ECAwEAAaOCAUsw ggFHMB8GA1UdIwQYMBaAFImCZ33EnSZwAEu0UEh83j2uBG59MB0GA1UdDgQWBBR6E04AdFvG eGNkJ8Ev4qBbvHnFezAOBgNVHQ8BAf8EBAMCAQYwEgYDVR0TAQH/BAgwBgEB/wIBADARBgNV HSAECjAIMAYGBFUdIAAwWAYDVR0fBFEwTzBNoEugSYZHaHR0cDovL2NybC51c2VydHJ1c3Qu Y29tL1VUTi1VU0VSRmlyc3QtQ2xpZW50QXV0aGVudGljYXRpb25hbmRFbWFpbC5jcmwwdAYI KwYBBQUHAQEEaDBmMD0GCCsGAQUFBzAChjFodHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20vVVRO QWRkVHJ1c3RDbGllbnRfQ0EuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1 c3QuY29tMA0GCSqGSIb3DQEBBQUAA4IBAQCF1r54V1VtM39EUv5C1QaoAQOAivsNsv1Kv/av QUn1G1rF0q0bc24+6SZ85kyYwTAo38v7QjyhJT4KddbQPTmGZtGhm7VNm2+vKGwdr+XqdFqo 2rHA8XV6L566k3nK/uKRHlZ0sviN0+BDchvtj/1gOSBH+4uvOmVIPJg9pSW/ve9g4EnlFsjr P0OD8ODuDcHTzTNfm9C9YGqzO/761Mk6PB/tm/+bSTO+Qik5g+4zaS6CnUVNqGnagBsePdIa XXxHmaWbCG0SmYbWXVcHG6cwvktJRLiQfsrReTjrtDP6oDpdJlieYVUYtCHVmdXgQ0BCML7q peeU0rD+83X5f27nMIIGLjCCBRagAwIBAgIQXDFQ28QtqMuYch5f2nTvZjANBgkqhkiG9w0B AQUFADCBkzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxOTA3BgNVBAMTMENP TU9ETyBDbGllbnQgQXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTAeFw0xMTA5 MDIwMDAwMDBaFw0xNDA5MDEyMzU5NTlaMIIBNzELMAkGA1UEBhMCR0IxEDAOBgNVBBETB1dG NCA0V0ExFzAVBgNVBAgTDldlc3QgWW9ya3NoaXJlMRIwEAYDVQQHEwlXYWtlZmllbGQxFDAS BgNVBAkTC0dyYW5nZSBNb29yMR8wHQYDVQQJExY4OSBHcmVlbmZpZWxkIENyZXNjZW50MRcw FQYDVQQKEw5HcmlkbWVyZ2UgTHRkLjE0MDIGA1UECxMrSXNzdWVkIHRocm91Z2ggR3JpZG1l cmdlIEx0ZC4gRS1QS0kgTWFuYWdlcjEfMB0GA1UECxMWQ29ycG9yYXRlIFNlY3VyZSBFbWFp bDEWMBQGA1UEAxMNUm9iZXJ0IENyYWdpZTEqMCgGCSqGSIb3DQEJARYbcm9iZXJ0LmNyYWdp ZUBncmlkbWVyZ2UuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcThqvLe WU1Q1ZJmnb+2UQSwOQKWok3A1Mwk582AdvwaAQyBFliPyJ0kXJqtwNBoZvk+3WJr0QA5ZRr+ J0x3sXVpcxadojP2HNzy1gsgDtIGG8ltoU4vmX1A8BTlOIUT+Pg8p/bSruxV0vz0CR8ho2hs R0Zi5vU+rQKNmbgufbkWhlQnMEYjknemscLQfw1YZz90ta67doNDujFy6+X6I06HpjudgMYx 8bdsNS5xVFFwuBA1eqNQra+xLzhCOeX9PPB/zK68qdNhrni3WPYG9EhSt4Dzk+xIz9hj7wrU ZIVXDTPsY8qbUSBVpwmzI5lCHPgzurH1OK7WwgpDSsl5pwIDAQABo4IB1TCCAdEwHwYDVR0j BBgwFoAUehNOAHRbxnhjZCfBL+KgW7x5xXswHQYDVR0OBBYEFBCOXNH+lDm8U9gy3b3bRvrx vKgrMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwME BggrBgEFBQcDAjBGBgNVHSAEPzA9MDsGDCsGAQQBsjEBAgEDBTArMCkGCCsGAQUFBwIBFh1o dHRwczovL3NlY3VyZS5jb21vZG8ubmV0L0NQUzBXBgNVHR8EUDBOMEygSqBIhkZodHRwOi8v Y3JsLmNvbW9kb2NhLmNvbS9DT01PRE9DbGllbnRBdXRoZW50aWNhdGlvbmFuZFNlY3VyZUVt YWlsQ0EuY3JsMIGIBggrBgEFBQcBAQR8MHowUgYIKwYBBQUHMAKGRmh0dHA6Ly9jcnQuY29t b2RvY2EuY29tL0NPTU9ET0NsaWVudEF1dGhlbnRpY2F0aW9uYW5kU2VjdXJlRW1haWxDQS5j cnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTAmBgNVHREEHzAdgRty b2JlcnQuY3JhZ2llQGdyaWRtZXJnZS5jb20wDQYJKoZIhvcNAQEFBQADggEBAD6b/O0LkPav kR4Znoqxg0Ad7M3duDm4uzfrlX4ecgq56Ccdwd+3Tayz7Ewej30woVMmTKkA/NKRaCd0wVM9 8seF/oZjXKO7o1SH27igRnGSWjCoWXsdwJGfZbYnvcIIhhsxJoCPNbeSR7C0PAFDKsP3xrJy MHMljIJsoRbZu/fnYNyFWh9OXf7fYJOGmKDKAhSabUGfhY7umvU9d/YTqo02Q6YzC7d4zPNG 1a75AuHSEchf6GdKqycG38I5y9jlDaYfXspoS3PlTNCIeZONbOSMZgftnNEVKq+SWytFqyG/ 8+dwpm/a12KMex5J8iHwaUKj++2O2rAFNjDDqXpeEYoxggQZMIIEFQIBATCBqDCBkzELMAkG A1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9y ZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxOTA3BgNVBAMTMENPTU9ETyBDbGllbnQg QXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQQIQXDFQ28QtqMuYch5f2nTvZjAJ BgUrDgMCGgUAoIICRTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEP Fw0xNDA1MzAxNDIyNThaMCMGCSqGSIb3DQEJBDEWBBQNbpUjs/nB0Ho7669+V5uuRnPUFjBs BgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYIKoZIhvcNAwcw DgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEo MIG5BgkrBgEEAYI3EAQxgaswgagwgZMxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVy IE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1p dGVkMTkwNwYDVQQDEzBDT01PRE8gQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUg RW1haWwgQ0ECEFwxUNvELajLmHIeX9p072YwgbsGCyqGSIb3DQEJEAILMYGroIGoMIGTMQsw CQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxm b3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDE5MDcGA1UEAxMwQ09NT0RPIENsaWVu dCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhBcMVDbxC2oy5hyHl/adO9m MA0GCSqGSIb3DQEBAQUABIIBAC5+vrWfOv3cGEe2drsbD8tR5/8iRP3W/MIzZN4ieodkRLA5 kvfSs8Wa99OpEQN5P7pcWJFh2gbDOI3dXSjLTTtvlzbzkW6tp1T+yS9k5nVt/7gBs637g2fe Br+WzRIVTAoIXfkk+Y5SrBCHOq4uIJ9GHSipDkIrjgV5jCv+lJ7oSqysNcnCJWDxdunJr9nv DhF1em2RumRIuCT+AzM9DTnXof8k4rewlG9R60FkO+FgWKMRpnJUA5qv4jhPl9NEbIC+0koj CcdXX3zTIyz66rw4cq8Yz59vchYdzRyMuJTeYCL/9H7dDCxHlQQaTSTv/5hohNT5M5NWJM/h LYdM5ioAAAAAAAA= --------------ms040308040206080308040209-- From nobody Fri May 30 07:30:05 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F35021A08FB for ; Fri, 30 May 2014 07:30:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZbrnZRbARV9V for ; Fri, 30 May 2014 07:30:01 -0700 (PDT) Received: from mail-ig0-x231.google.com (mail-ig0-x231.google.com [IPv6:2607:f8b0:4001:c05::231]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9A4371A6F50 for ; Fri, 30 May 2014 07:29:56 -0700 (PDT) Received: by mail-ig0-f177.google.com with SMTP id l13so871537iga.10 for ; Fri, 30 May 2014 07:29:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type; bh=xc/0nij5g6dcEB8mkOJxVdOfqNJ7mUROKkcnbG0IUSo=; b=ByZp3fSaQmWRV3Ajmbh0BbDirsBVuc5baXeXqjxpbC+ltmTSQqB1qmrHKlycpOpJPi gHaxwGJXZH7CHSyld65K3CpcjvHzuvHPvhgDn0yHho8DZNrL8AWS8Bs/pfG2eTwn6X3/ wMzgXW5HIRdZ7yi1Cduy4oj+Ij3/36s5B9KMOCezborVnWgUcPOudCSmKQFGm8pHdZaE QBnMN8vp8NSehZBgUeCkiOInLtIe68L1UANwWr534U37gBdli02Fyp/SQXDfzeHQQ4au AYrXDrNjYnSLGxiSjjA0D/PrvsTUDJ0YKfk/+k7PBeiKfDl3NhLIhFaqQWPLg3KZtfne zxoA== X-Received: by 10.50.122.73 with SMTP id lq9mr6213574igb.13.1401460192212; Fri, 30 May 2014 07:29:52 -0700 (PDT) Received: from [192.168.1.103] (CPE0013100e2c51-CM001cea35caa6.cpe.net.cable.rogers.com. [99.231.3.110]) by mx.google.com with ESMTPSA id vu3sm5856930igc.6.2014.05.30.07.29.51 for (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Fri, 30 May 2014 07:29:51 -0700 (PDT) Message-ID: <538895DA.70806@gmail.com> Date: Fri, 30 May 2014 10:29:46 -0400 From: Rene Struik User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: robert.cragie@gridmerge.com, "Kumar, Sandeep" , "dtls-iot@ietf.org" References: <5384FB1C.60109@gmail.com> <5384FBB0.3040900@gmail.com> <5385FC6C.8080102@gmail.com> , <53860BB5.8020908@gmail.com> <538639AF.4050900@gmail.com> <538770D9.2040103@gridmerge.com> <5387963C.3070304@gmail.com> <53885131.7080900@gridmerge.com> <538890C6.6080901@gmail.com> <53889442.7040404@gridmerge.com> In-Reply-To: <53889442.7040404@gridmerge.com> Content-Type: multipart/alternative; boundary="------------070803040106080005000506" Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/U4bJYL5PyvN1mhuRWZVf48U7iYA Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 May 2014 14:30:03 -0000 This is a multi-part message in MIME format. --------------070803040106080005000506 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Well, if you only allow devices to discover networks but not to join them, this sounds like "window shopping", without a network ever being able to form or expand. You seem to suggest that you always want to lock down the network (join permit flag glued to the off position), the scenario I did not bring up in my original email. On 5/30/2014 10:22 AM, Robert Cragie wrote: > Hi Rene, > > Comments inline. > > Robert > > On 30/05/2014 3:08 PM, Rene Struik wrote: >> Hi Robert: >> >> Obviously, when the network is locked down and does not allow newly >> joining devices (the scenario where the relay on/off switch is stuck >> in the OFF position), my initial question on relaying of messages >> received from newly joining devices does not play. This would also be >> the less interesting scenario, though, since this would not allow >> devices to discover and join the network by themselves. > It would potentially allow devices to discover networks but not > to join them >> >> BTW - even with stateless relay, the state of a relaying station may >> change (e.g., due to impact of sending a MAC frame on MAC state); it >> just does not accumulate state related to the newbee device. When one >> uses TSCH, other MAC state may need to be introduced that may relate >> to the newbee node, e.g., to synchronize timeslots during which the >> newbee device and the relaying station can communicate. So, the >> notion of "stateless" may be somewhat a misnomer, at least for sleepy >> networks. In all cases, as already said, each relay of end-to-end >> traffic may trigger amplified network traffic, so comes at a price >> (network latency, consumed energy, capacity use, intra-device >> computational latency). It is here where denial of service attacks on >> the network may come into play. > Of course, but the point is not to introduce any additional state > through the relay mechanism itself, i.e. the net state change before > and after the relay operation only. Beyond that anything can happen. > DoS is a tricky subject to explore and can happen at various layers , > for example, swamping a channel with noise is quite an effective > localised DoS attack (PHY layer) or continuously sending a beacon > request (MAC layer). What you describe above falls outside of the > scope of the relay description and is specific to a certain type of > network. >> >> So, I am still interested in getting more insight as to how the relay >> on/off switch would work in practice (which was the question in my >> original email of Tue [snippet copied below]). A description of >> device join operations would help (say, with operational network of >> 1000 nodes with diameter 20 hops, where one wishes to add a newbee >> node A at neighbor B, where B is 10 hops away from network manager T). > This only makes sense when a) considering a specific type of > network, as you have done above and b) widening the scope of the > discussion beyond just the relaying. Is that what you are proposing? > If so, there need to be some bounds or else it could end up being a > very long security considerations section. >> >> I hope this helps. >> >> Rene >> >> [excerpt of my email as of Tue May 27, 2014, 4:55pm EDT] >> >>>> I would be curious as to whether you could provide some more insight >> >>>> as to what type of denial of service attack you counter and how the >> >>>> DTLS Relay "on/off switch" would work in practice >> > [snip] -- email: rstruik.ext@gmail.com | Skype: rstruik cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 --------------070803040106080005000506 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit
Well, if you only allow devices to discover networks but not to join them, this sounds like "window shopping", without a network ever being able to form or expand.

You seem to suggest that you always want to lock down the network (join permit flag glued to the off position), the scenario I did not bring up in my original email.

On 5/30/2014 10:22 AM, Robert Cragie wrote:
Hi Rene,

Comments inline.

Robert

On 30/05/2014 3:08 PM, Rene Struik wrote:
Hi Robert:

Obviously, when the network is locked down and does not allow newly joining devices (the scenario where the relay on/off switch is stuck in the OFF position), my initial question on relaying of messages received from newly joining devices does not play. This would also be the less interesting scenario, though, since this would not allow devices to discover and join the network by themselves.
<RCC>It would potentially allow devices to discover networks but not to join them</RCC>

BTW - even with stateless relay, the state of a relaying station may change (e.g., due to impact of sending a MAC frame on MAC state); it just does not accumulate state related to the newbee device. When one uses TSCH, other MAC state may need to be introduced that may relate to the newbee node, e.g., to synchronize timeslots during which the newbee device and the relaying station can communicate. So, the notion of "stateless" may be somewhat a misnomer, at least for sleepy networks. In all cases, as already said, each relay of end-to-end traffic may trigger amplified network traffic, so comes at a price (network latency, consumed energy, capacity use, intra-device computational latency). It is here where denial of service attacks on the network may come into play.
<RCC>Of course, but the point is not to introduce any additional state through the relay mechanism itself, i.e. the net state change before and after the relay operation only. Beyond that anything can happen. DoS is a tricky subject to explore and can happen at various layers , for example, swamping a channel with noise is quite an effective localised DoS attack (PHY layer) or continuously sending a beacon request (MAC layer). What you describe above falls outside of the scope of the relay description and is specific to a certain type of network.</RCC>

So, I am still interested in getting more insight as to how the relay on/off switch would work in practice (which was the question in my original email of Tue [snippet copied below]). A description of device join operations would help (say, with operational network of 1000 nodes with diameter 20 hops, where one wishes to add a newbee node A at neighbor B, where B is 10 hops away from network manager T).
<RCC>This only makes sense when a) considering a specific type of network, as you have done above and b) widening the scope of the discussion beyond just the relaying. Is that what you are proposing? If so, there need to be some bounds or else it could end up being a very long security considerations section.</RCC>

I hope this helps.

Rene  

[excerpt of my email as of Tue May 27, 2014, 4:55pm EDT]
>>>> I would be curious as to whether you could provide some more insight
>>>> as to what type of denial of service attack you counter and how the
>>>> DTLS Relay "on/off switch" would work in practice
 
[snip] 


-- 
email: rstruik.ext@gmail.com | Skype: rstruik
cell: +1 (647) 867-5658 | US: +1 (415) 690-7363
--------------070803040106080005000506-- From nobody Fri May 30 10:43:36 2014 Return-Path: X-Original-To: dtls-iot@ietfa.amsl.com Delivered-To: dtls-iot@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E06791A6FC2 for ; Fri, 30 May 2014 10:43:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XWWkIFjJ5BFf for ; Fri, 30 May 2014 10:43:32 -0700 (PDT) Received: from mailscan1.extendcp.co.uk (mailscan26.extendcp.co.uk [176.32.226.72]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 604751A6FB6 for ; Fri, 30 May 2014 10:43:31 -0700 (PDT) Received: from lb1.hi.local ([10.0.1.197] helo=mailscan3.hi.local) by mailscan-g65.hi.local with esmtp (Exim 4.80.1) (envelope-from ) id 1WqQpv-0004Pt-Jy; Fri, 30 May 2014 18:43:23 +0100 Received: from lb1.hi.local ([10.0.1.197] helo=mail41.extendcp.co.uk) by mailscan3.hi.local with esmtps (UNKNOWN:DHE-RSA-AES256-GCM-SHA384:256) (Exim 4.80.1) (envelope-from ) id 1WqQpv-0000fm-3k; Fri, 30 May 2014 18:43:23 +0100 Received: from host86-147-26-221.range86-147.btcentralplus.com ([86.147.26.221] helo=[192.168.0.2]) by mail41.extendcp.com with esmtpsa (TLSv1:DHE-RSA-AES128-SHA:128) (Exim 4.80.1) id 1WqQps-0008Nk-Ol; Fri, 30 May 2014 18:43:21 +0100 Message-ID: <5388C384.90902@gridmerge.com> Date: Fri, 30 May 2014 18:44:36 +0100 From: Robert Cragie Organization: Gridmerge Ltd. User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0 MIME-Version: 1.0 To: Rene Struik , "Kumar, Sandeep" , "dtls-iot@ietf.org" References: <5384FB1C.60109@gmail.com> <5384FBB0.3040900@gmail.com> <5385FC6C.8080102@gmail.com> , <53860BB5.8020908@gmail.com> <538639AF.4050900@gmail.com> <538770D9.2040103@gridmerge.com> <5387963C.3070304@gmail.com> <53885131.7080900@gridmerge.com> <538890C6.6080901@gmail.com> <53889442.7040404@gridmerge.com> <538895DA.70806@gmail.com> In-Reply-To: <538895DA.70806@gmail.com> Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms080809050205090806030605" X-Authenticated-As: robert.cragie@gridmerge.com X-Extend-Src: mailout Archived-At: http://mailarchive.ietf.org/arch/msg/dtls-iot/KW1g7ym3IXVE-s-e30xaAb5-CnQ Subject: Re: [Dtls-iot] question on draft-kumar-dice-dtls-relay-01 X-BeenThere: dtls-iot@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: robert.cragie@gridmerge.com List-Id: DTLS for IoT discussion list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 May 2014 17:43:35 -0000 This is a cryptographically signed message in MIME format. --------------ms080809050205090806030605 Content-Type: multipart/alternative; boundary="------------070304010405050706020504" This is a multi-part message in MIME format. --------------070304010405050706020504 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable You need to be able to discover other networks if you are thinking of=20 starting your own to make sure you don't collide. In this respect, you=20 are an unauthenticated node to the other network. All I was saying is=20 that the lock down mechanism is very commonly used and is a simple but=20 effective way of preventing the ingress of unauthenticated data traffic=20 (legitimate or otherwise) into the network. Robert On 30/05/2014 3:29 PM, Rene Struik wrote: > Well, if you only allow devices to discover networks but not to join=20 > them, this sounds like "window shopping", without a network ever being = > able to form or expand. > > You seem to suggest that you always want to lock down the network=20 > (join permit flag glued to the off position), the scenario I did not=20 > bring up in my original email. > > On 5/30/2014 10:22 AM, Robert Cragie wrote: >> Hi Rene, >> >> Comments inline. >> >> Robert >> >> On 30/05/2014 3:08 PM, Rene Struik wrote: >>> Hi Robert: >>> >>> Obviously, when the network is locked down and does not allow newly=20 >>> joining devices (the scenario where the relay on/off switch is stuck = >>> in the OFF position), my initial question on relaying of messages=20 >>> received from newly joining devices does not play. This would also=20 >>> be the less interesting scenario, though, since this would not allow = >>> devices to discover and join the network by themselves. >> It would potentially allow devices to discover networks but not=20 >> to join them >>> >>> BTW - even with stateless relay, the state of a relaying station may = >>> change (e.g., due to impact of sending a MAC frame on MAC state); it = >>> just does not accumulate state related to the newbee device. When=20 >>> one uses TSCH, other MAC state may need to be introduced that may=20 >>> relate to the newbee node, e.g., to synchronize timeslots during=20 >>> which the newbee device and the relaying station can communicate.=20 >>> So, the notion of "stateless" may be somewhat a misnomer, at least=20 >>> for sleepy networks. In all cases, as already said, each relay of=20 >>> end-to-end traffic may trigger amplified network traffic, so comes=20 >>> at a price (network latency, consumed energy, capacity use,=20 >>> intra-device computational latency). It is here where denial of=20 >>> service attacks on the network may come into play. >> Of course, but the point is not to introduce any additional=20 >> state through the relay mechanism itself, i.e. the net state change=20 >> before and after the relay operation only. Beyond that anything can=20 >> happen. DoS is a tricky subject to explore and can happen at various=20 >> layers , for example, swamping a channel with noise is quite an=20 >> effective localised DoS attack (PHY layer) or continuously sending a=20 >> beacon request (MAC layer). What you describe above falls outside of=20 >> the scope of the relay description and is specific to a certain type=20 >> of network. >>> >>> So, I am still interested in getting more insight as to how the=20 >>> relay on/off switch would work in practice (which was the question=20 >>> in my original email of Tue [snippet copied below]). A description=20 >>> of device join operations would help (say, with operational network=20 >>> of 1000 nodes with diameter 20 hops, where one wishes to add a=20 >>> newbee node A at neighbor B, where B is 10 hops away from network=20 >>> manager T). >> This only makes sense when a) considering a specific type of=20 >> network, as you have done above and b) widening the scope of the=20 >> discussion beyond just the relaying. Is that what you are proposing?=20 >> If so, there need to be some bounds or else it could end up being a=20 >> very long security considerations section. >>> >>> I hope this helps. >>> >>> Rene >>> >>> [excerpt of my email as of Tue May 27, 2014, 4:55pm EDT] >>> >>>> I would be curious as to whether you could provide some more=20 >>> insight >>> >>>> as to what type of denial of service attack you counter and how = the >>> >>>> DTLS Relay "on/off switch" would work in practice >>> >> [snip]=20 > > > --=20 > email:rstruik.ext@gmail.com | Skype: rstruik > cell: +1 (647) 867-5658 | US: +1 (415) 690-7363 > > > _______________________________________________ > dtls-iot mailing list > dtls-iot@ietf.org > https://www.ietf.org/mailman/listinfo/dtls-iot --------------070304010405050706020504 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable You need to be able to discover other networks if you are thinking of starting your own to make sure you don't collide. In this respect, you are an unauthenticated node to the other network. All I was saying is that the lock down mechanism is very commonly used and is a simple but effective way of preventing the ingress of unauthenticated data traffic (legitimate or otherwise) into the network.

Robert

On 30/05/2014 3:29 PM, Rene Struik wrote:
Well, if you only allow devices to discover networks but not to join them, this sounds like "window shopping", without a network ever being able to form or expand.

You seem to suggest that you always want to lock down the network (join permit flag glued to the off position), the scenario I did not bring up in my original email.

On 5/30/2014 10:22 AM, Robert Cragie wrote:
Hi Rene,

Comments inline.

Robert

On 30/05/2014 3:08 PM, Rene Struik= wrote:
Hi Robert:

Obviously, when the network is locked down and does not allow newly joining devices (the scenario where the relay on/off switch is stuck in the OFF position), my initial question on relaying of messages received from newly joining devices does not play. This would also be the less interesting scenario, though, since this would not allow devices to discover and join the network by themselves.
<RCC>It would potentially allow devices to discover networks but not to join them</RCC>

BTW - even with stateless relay, the state of a relaying station may change (e.g., due to impact of sending a MAC frame on MAC state); it just does not accumulate state related to the newbee device. When one uses TSCH, other MAC state may need to be introduced that may relate to the newbee node, e.g., to synchronize timeslots during which the newbee device and the relaying station can communicate. So, the notion of "stateless" may be somewhat a misnomer, at least for sleepy networks. In all cases, as already said, each relay of end-to-end traffic may trigger amplified network traffic, so comes at a price (network latency, consumed energy, capacity use, intra-device computational latency). It is here where denial of service attacks on the network may come into play.
<RCC>Of course, but the point is not to introduce any additional state through the relay mechanism itself, i.e. the net state change before and after the relay operation only. Beyond that anything can happen. DoS is a tricky subject to explore and can happen at various layers , for example, swamping a channel with noise is quite an effective localised DoS attack (PHY layer) or continuously sending a beacon request (MAC layer). What you describe above falls outside of the scope of the relay description and is specific to a certain type of network.</RCC>

So, I am still interested in getting more insight as to how the relay on/off switch would work in practice (which was the question in my original email of Tue [snippet copied below]). A description of device join operations would help (say, with operational network of 1000 nodes with diameter 20 hops, where one wishes to add a newbee node A at neighbor B, where B is 10 hops away from network manager T).
<RCC>This only makes sense when a) considering a specific type of network, as you have done above and b) widening the scope of the discussion beyond just the relaying. Is that what you are proposing? If so, there need to be some bounds or else it could end up being a very long security considerations section.</RCC>

I hope this helps.

Rene  

[excerpt of my email as of Tue May 27, 2014, 4:55pm EDT]
>>>> I would be curious as to whether you could provide some more insight
>>>> as to what type of denial of service attack you counter and how the
>>>> DTLS Relay "on/off switch" would work in practice
 
[snip] 


--=20
email: rstruik.ext@gmail.com | Skype: rst=
ruik
cell: +1 (647) 867-5658 | US: +1 (415) 690-7363


_______________________________________________
dtls-iot mailing list
d=
tls-iot@ietf.org
https://www.ietf.org/mailman/listinfo/dtls-iot

--------------070304010405050706020504-- --------------ms080809050205090806030605 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIILUDCC BRowggQCoAMCAQICEG0Z6qcZT2ozIuYiMnqqcd4wDQYJKoZIhvcNAQEFBQAwga4xCzAJBgNV BAYTAlVTMQswCQYDVQQIEwJVVDEXMBUGA1UEBxMOU2FsdCBMYWtlIENpdHkxHjAcBgNVBAoT FVRoZSBVU0VSVFJVU1QgTmV0d29yazEhMB8GA1UECxMYaHR0cDovL3d3dy51c2VydHJ1c3Qu Y29tMTYwNAYDVQQDEy1VVE4tVVNFUkZpcnN0LUNsaWVudCBBdXRoZW50aWNhdGlvbiBhbmQg RW1haWwwHhcNMTEwNDI4MDAwMDAwWhcNMjAwNTMwMTA0ODM4WjCBkzELMAkGA1UEBhMCR0Ix GzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UE ChMRQ09NT0RPIENBIExpbWl0ZWQxOTA3BgNVBAMTMENPTU9ETyBDbGllbnQgQXV0aGVudGlj YXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJKEhFtLV5jUXi+LpOFAyKNTWF9mZfEyTvefMn1V0HhMVbdClOD5J3EHxcZppLkyxPFA GpDMJ1Zifxe1cWmu5SAb5MtjXmDKokH2auGj/7jfH0htZUOMKi4rYzh337EXrMLaggLW1DJq 1GdvIBOPXDX65VSAr9hxCh03CgJQU2yVHakQFLSZlVkSMf8JotJM3FLb3uJAAVtIaN3FSrTg 7SQfOq9xXwfjrL8UO7AlcWg99A/WF1hGFYE8aIuLgw9teiFX5jSw2zJ+40rhpVJyZCaRTqWS D//gsWD9Gm9oUZljjRqLpcxCm5t9ImPTqaD8zp6Q30QZ9FxbNboW86eb/8ECAwEAAaOCAUsw ggFHMB8GA1UdIwQYMBaAFImCZ33EnSZwAEu0UEh83j2uBG59MB0GA1UdDgQWBBR6E04AdFvG eGNkJ8Ev4qBbvHnFezAOBgNVHQ8BAf8EBAMCAQYwEgYDVR0TAQH/BAgwBgEB/wIBADARBgNV HSAECjAIMAYGBFUdIAAwWAYDVR0fBFEwTzBNoEugSYZHaHR0cDovL2NybC51c2VydHJ1c3Qu Y29tL1VUTi1VU0VSRmlyc3QtQ2xpZW50QXV0aGVudGljYXRpb25hbmRFbWFpbC5jcmwwdAYI KwYBBQUHAQEEaDBmMD0GCCsGAQUFBzAChjFodHRwOi8vY3J0LnVzZXJ0cnVzdC5jb20vVVRO QWRkVHJ1c3RDbGllbnRfQ0EuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1 c3QuY29tMA0GCSqGSIb3DQEBBQUAA4IBAQCF1r54V1VtM39EUv5C1QaoAQOAivsNsv1Kv/av QUn1G1rF0q0bc24+6SZ85kyYwTAo38v7QjyhJT4KddbQPTmGZtGhm7VNm2+vKGwdr+XqdFqo 2rHA8XV6L566k3nK/uKRHlZ0sviN0+BDchvtj/1gOSBH+4uvOmVIPJg9pSW/ve9g4EnlFsjr P0OD8ODuDcHTzTNfm9C9YGqzO/761Mk6PB/tm/+bSTO+Qik5g+4zaS6CnUVNqGnagBsePdIa XXxHmaWbCG0SmYbWXVcHG6cwvktJRLiQfsrReTjrtDP6oDpdJlieYVUYtCHVmdXgQ0BCML7q peeU0rD+83X5f27nMIIGLjCCBRagAwIBAgIQXDFQ28QtqMuYch5f2nTvZjANBgkqhkiG9w0B AQUFADCBkzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxOTA3BgNVBAMTMENP TU9ETyBDbGllbnQgQXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQTAeFw0xMTA5 MDIwMDAwMDBaFw0xNDA5MDEyMzU5NTlaMIIBNzELMAkGA1UEBhMCR0IxEDAOBgNVBBETB1dG NCA0V0ExFzAVBgNVBAgTDldlc3QgWW9ya3NoaXJlMRIwEAYDVQQHEwlXYWtlZmllbGQxFDAS BgNVBAkTC0dyYW5nZSBNb29yMR8wHQYDVQQJExY4OSBHcmVlbmZpZWxkIENyZXNjZW50MRcw FQYDVQQKEw5HcmlkbWVyZ2UgTHRkLjE0MDIGA1UECxMrSXNzdWVkIHRocm91Z2ggR3JpZG1l cmdlIEx0ZC4gRS1QS0kgTWFuYWdlcjEfMB0GA1UECxMWQ29ycG9yYXRlIFNlY3VyZSBFbWFp bDEWMBQGA1UEAxMNUm9iZXJ0IENyYWdpZTEqMCgGCSqGSIb3DQEJARYbcm9iZXJ0LmNyYWdp ZUBncmlkbWVyZ2UuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcThqvLe WU1Q1ZJmnb+2UQSwOQKWok3A1Mwk582AdvwaAQyBFliPyJ0kXJqtwNBoZvk+3WJr0QA5ZRr+ J0x3sXVpcxadojP2HNzy1gsgDtIGG8ltoU4vmX1A8BTlOIUT+Pg8p/bSruxV0vz0CR8ho2hs R0Zi5vU+rQKNmbgufbkWhlQnMEYjknemscLQfw1YZz90ta67doNDujFy6+X6I06HpjudgMYx 8bdsNS5xVFFwuBA1eqNQra+xLzhCOeX9PPB/zK68qdNhrni3WPYG9EhSt4Dzk+xIz9hj7wrU ZIVXDTPsY8qbUSBVpwmzI5lCHPgzurH1OK7WwgpDSsl5pwIDAQABo4IB1TCCAdEwHwYDVR0j BBgwFoAUehNOAHRbxnhjZCfBL+KgW7x5xXswHQYDVR0OBBYEFBCOXNH+lDm8U9gy3b3bRvrx vKgrMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwME BggrBgEFBQcDAjBGBgNVHSAEPzA9MDsGDCsGAQQBsjEBAgEDBTArMCkGCCsGAQUFBwIBFh1o dHRwczovL3NlY3VyZS5jb21vZG8ubmV0L0NQUzBXBgNVHR8EUDBOMEygSqBIhkZodHRwOi8v Y3JsLmNvbW9kb2NhLmNvbS9DT01PRE9DbGllbnRBdXRoZW50aWNhdGlvbmFuZFNlY3VyZUVt YWlsQ0EuY3JsMIGIBggrBgEFBQcBAQR8MHowUgYIKwYBBQUHMAKGRmh0dHA6Ly9jcnQuY29t b2RvY2EuY29tL0NPTU9ET0NsaWVudEF1dGhlbnRpY2F0aW9uYW5kU2VjdXJlRW1haWxDQS5j cnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmNvbW9kb2NhLmNvbTAmBgNVHREEHzAdgRty b2JlcnQuY3JhZ2llQGdyaWRtZXJnZS5jb20wDQYJKoZIhvcNAQEFBQADggEBAD6b/O0LkPav kR4Znoqxg0Ad7M3duDm4uzfrlX4ecgq56Ccdwd+3Tayz7Ewej30woVMmTKkA/NKRaCd0wVM9 8seF/oZjXKO7o1SH27igRnGSWjCoWXsdwJGfZbYnvcIIhhsxJoCPNbeSR7C0PAFDKsP3xrJy MHMljIJsoRbZu/fnYNyFWh9OXf7fYJOGmKDKAhSabUGfhY7umvU9d/YTqo02Q6YzC7d4zPNG 1a75AuHSEchf6GdKqycG38I5y9jlDaYfXspoS3PlTNCIeZONbOSMZgftnNEVKq+SWytFqyG/ 8+dwpm/a12KMex5J8iHwaUKj++2O2rAFNjDDqXpeEYoxggQZMIIEFQIBATCBqDCBkzELMAkG A1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9y ZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxOTA3BgNVBAMTMENPTU9ETyBDbGllbnQg QXV0aGVudGljYXRpb24gYW5kIFNlY3VyZSBFbWFpbCBDQQIQXDFQ28QtqMuYch5f2nTvZjAJ BgUrDgMCGgUAoIICRTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEP Fw0xNDA1MzAxNzQ0MzZaMCMGCSqGSIb3DQEJBDEWBBRgjkNmnvcdYk+Eux6GK1Z/teFApDBs BgkqhkiG9w0BCQ8xXzBdMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAQIwCgYIKoZIhvcNAwcw DgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0GCCqGSIb3DQMCAgEo MIG5BgkrBgEEAYI3EAQxgaswgagwgZMxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVy IE1hbmNoZXN0ZXIxEDAOBgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1p dGVkMTkwNwYDVQQDEzBDT01PRE8gQ2xpZW50IEF1dGhlbnRpY2F0aW9uIGFuZCBTZWN1cmUg RW1haWwgQ0ECEFwxUNvELajLmHIeX9p072YwgbsGCyqGSIb3DQEJEAILMYGroIGoMIGTMQsw CQYDVQQGEwJHQjEbMBkGA1UECBMSR3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxm b3JkMRowGAYDVQQKExFDT01PRE8gQ0EgTGltaXRlZDE5MDcGA1UEAxMwQ09NT0RPIENsaWVu dCBBdXRoZW50aWNhdGlvbiBhbmQgU2VjdXJlIEVtYWlsIENBAhBcMVDbxC2oy5hyHl/adO9m MA0GCSqGSIb3DQEBAQUABIIBAJsEkEk6RfGtb/CzZ59/u4zjG+OiBeTdfyShIsTs9i5swuOR rDLaIYL+5e5uxaEfXbA0QE8rfu4hz4W5YCN4TscM2AQfTYSY+ZWyuy1rOE0GBMvP9RnIHH1w SpNx9Rvb1HEzLAZFYvts9naZQrzIby2iVc/4zJ2GkszRSZ8r4wyLCql9ZbSey3Cjot/tux/P u9UF3UWhhRoSFkAFE9bWmKXXwekHO1IadJCvDgG0OWBpHp2nMpEqfun/hT6VkKJIK1bxl2sO 14dUa5dVVcdvhg3m9K7N0i4m+5cxd3WjGKdYfh6dlOUB3LtAEewGBM/f5gbFiHljXJhYLpRA 8d/HAgUAAAAAAAA= --------------ms080809050205090806030605--