From nobody Sun Nov 1 23:26:27 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A9EA1B33CA for ; Sun, 1 Nov 2015 23:26:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -100.701 X-Spam-Level: X-Spam-Status: No, score=-100.701 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, RCVD_IN_DNSWL_LOW=-0.7, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r_AEYUB9emQH for ; Sun, 1 Nov 2015 23:26:26 -0800 (PST) Received: from asmtp1.iomartmail.com (asmtp1.iomartmail.com [62.128.201.248]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9F5211B33C4 for ; Sun, 1 Nov 2015 23:26:25 -0800 (PST) Received: from asmtp1.iomartmail.com (localhost.localdomain [127.0.0.1]) by asmtp1.iomartmail.com (8.13.8/8.13.8) with ESMTP id tA27QNft023544 for ; Mon, 2 Nov 2015 07:26:23 GMT Received: from 950129200 (dhcp-28-129.meeting.ietf94.jp [133.93.28.129]) (authenticated bits=0) by asmtp1.iomartmail.com (8.13.8/8.13.8) with ESMTP id tA27QJFh023524 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Mon, 2 Nov 2015 07:26:22 GMT From: "Adrian Farrel" To: Date: Mon, 2 Nov 2015 07:26:18 -0000 Message-ID: <02a501d1153f$c679f7a0$536de6e0$@olddog.co.uk> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdEVP6ut6/LWoX0sRgyw6et9bEzliA== Content-Language: en-gb X-TM-AS-MML: disable X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-21916.005 X-TM-AS-Result: No--4.546-10.0-31-10 X-imss-scan-details: No--4.546-10.0-31-10 X-TMASE-MatchedRID: XrcigEIn+bPrGP22mXF7WvC1l8GignprpHTu027282PagsZM0qVv1wOR 3tZA0vji4vM1YF6AJbZcLc3sLtjOt7bmZosI/5Zy3QfwsVk0UbuGrPnef/I+ehVl+2EMyKuNhyo mOVs8jcLyv9VQZ5u963QM/hUtp35H5uCRj3q10/OvcsTuUejg0omQ2vqumwAFVUH85vIcwrl2A/ 3Nl4P8kQ== Archived-At: Subject: [I2nsf] Reminder on slides X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: adrian@olddog.co.uk List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Nov 2015 07:26:27 -0000 It seems to me that I2NSF meets tomorrow morning. Having the slides before we sit down to chair the meeting will facilitate us projecting the slides :-) Having the slides before I go to bed tonight will make sure they are uploaded and people can see them. Not having the slides will make for an uncomfortable and embarrassing pause before skipping your slot on the agenda. Thanks! Adrian From nobody Mon Nov 2 15:46:51 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 898161A90A0 for ; Mon, 2 Nov 2015 15:46:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.209 X-Spam-Level: X-Spam-Status: No, score=-4.209 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01, WEIRD_PORT=0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0NRT65rhcGBe for ; Mon, 2 Nov 2015 15:46:38 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 229831A90C3 for ; Mon, 2 Nov 2015 15:46:37 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml402-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CDO66641; Mon, 02 Nov 2015 23:46:35 +0000 (GMT) Received: from DFWEML706-CHM.china.huawei.com (10.193.5.225) by lhreml402-hub.china.huawei.com (10.201.5.241) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 2 Nov 2015 23:46:34 +0000 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml706-chm ([10.193.5.225]) with mapi id 14.03.0235.001; Mon, 2 Nov 2015 15:46:21 -0800 From: Linda Dunbar To: "i2nsf@ietf.org" Thread-Topic: Link to the Etherpad note taking for today's I2NSF session Thread-Index: AdEVyK11Jc8sP0wWQEGPYHwJHGEjkw== Date: Mon, 2 Nov 2015 23:46:21 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D7A3B0@dfweml701-chm> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.194.187.191] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657D7A3B0dfweml701chm_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020204.5637F5DB.0184, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=0.0.0.0, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: 60796491463d4acd957eed8aad6fc221 Archived-At: Subject: [I2nsf] Link to the Etherpad note taking for today's I2NSF session X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 02 Nov 2015 23:46:42 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F657D7A3B0dfweml701chm_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Here is the link for taking meeting minutes for today's I2NSF session: http://etherpad.tools.ietf.org:9000/p/notes-ietf-94-i2nsf?useMonospaceFont= =3Dtrue Linda --_000_4A95BA014132FF49AE685FAB4B9F17F657D7A3B0dfweml701chm_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Here is the link for taking meeting minutes for toda= y’s I2NSF  session:

http://etherpad.tools.ietf.org:90= 00/p/notes-ietf-94-i2nsf?useMonospaceFont=3Dtrue

 

 

Linda

--_000_4A95BA014132FF49AE685FAB4B9F17F657D7A3B0dfweml701chm_-- From nobody Mon Nov 2 20:13:25 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C71111B2CF6 for ; Mon, 2 Nov 2015 20:13:24 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -99.9 X-Spam-Level: X-Spam-Status: No, score=-99.9 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_LOW=-0.7, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6pFhQMBLd6mZ for ; Mon, 2 Nov 2015 20:13:23 -0800 (PST) Received: from asmtp3.iomartmail.com (asmtp3.iomartmail.com [62.128.201.159]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C50411B2CF4 for ; Mon, 2 Nov 2015 20:13:21 -0800 (PST) Received: from asmtp3.iomartmail.com (localhost.localdomain [127.0.0.1]) by asmtp3.iomartmail.com (8.13.8/8.13.8) with ESMTP id tA34DJss025931 for ; Tue, 3 Nov 2015 04:13:19 GMT Received: from 950129200 (dhcp-28-129.meeting.ietf94.jp [133.93.28.129]) (authenticated bits=0) by asmtp3.iomartmail.com (8.13.8/8.13.8) with ESMTP id tA34DEsM025906 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Tue, 3 Nov 2015 04:13:17 GMT From: "Adrian Farrel" To: Date: Tue, 3 Nov 2015 04:13:12 -0000 Message-ID: <055501d115ed$f76e79e0$e64b6da0$@olddog.co.uk> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdEV7eUAVPwuh+zGQXq2u6IZwVz6xA== Content-Language: en-gb X-TM-AS-MML: disable X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-21918.004 X-TM-AS-Result: No--5.884-10.0-31-10 X-imss-scan-details: No--5.884-10.0-31-10 X-TMASE-MatchedRID: S05r5h69z2ILd3u89FoqUcn9tWHiLD2GKx5ICGp/WtEGgDV8o5u6E95D SfLjEt8zmlqZJ/+LXjrRtAPsu6l/+HjxgHkp9duC020eWoALA9dD1uDlLDbp2dUykPK1RFAoLuy t5Ak2dzsdp4Txl116a38vHqIwBzQYNLRiJDKMJupCvapcIkxJX3LhUU/qa4OGxXry9SlzFG+jxY yRBa/qJX3mXSdV7KK4FAX4EtUi0PgLbigRnpKlKSPzRlrdFGDwtNvkXum+kQLAHcxuULrlOXzhm NzopeoWvnL+2mfXEV187w5TF2Z3ww== Archived-At: Subject: [I2nsf] Thanks for today's meting X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: adrian@olddog.co.uk List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Nov 2015 04:13:24 -0000 Just to reiterate... Thanks to all for making today's meeting successful: - everyone who prepared for the meeting - the presenters who handled questions with grace and scurried when we asked them to - everyone who discussed so constructively in the meeting - everyone who understood when we ran out of time for more questions I'm not kidding when I say I can't recall such a constructive WG meeting in the time I've been around the IETF. So thanks and please carry this attitude forward in your work. Adrian -- Read my latest... Tales from the Wood - Eighteen new fairy tales http://www.feedaread.com/books/Tales-from-the-Wood-9781786100924.aspx http://www.amazon.co.uk/Tales-Wood-Adrian-Farrel/dp/1786100924 Or buy from me direct. From nobody Mon Nov 2 20:19:39 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 96DBA1B2D14 for ; Mon, 2 Nov 2015 20:19:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.6 X-Spam-Level: X-Spam-Status: No, score=-102.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=-0.7, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rhPuGp1X21ip for ; Mon, 2 Nov 2015 20:19:37 -0800 (PST) Received: from asmtp3.iomartmail.com (asmtp3.iomartmail.com [62.128.201.159]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 325FE1B2D17 for ; Mon, 2 Nov 2015 20:19:37 -0800 (PST) Received: from asmtp3.iomartmail.com (localhost.localdomain [127.0.0.1]) by asmtp3.iomartmail.com (8.13.8/8.13.8) with ESMTP id tA34JZec028000 for ; Tue, 3 Nov 2015 04:19:35 GMT Received: from 950129200 (dhcp-28-129.meeting.ietf94.jp [133.93.28.129]) (authenticated bits=0) by asmtp3.iomartmail.com (8.13.8/8.13.8) with ESMTP id tA34JVQs027981 (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO) for ; Tue, 3 Nov 2015 04:19:34 GMT From: "Adrian Farrel" To: Date: Tue, 3 Nov 2015 04:19:30 -0000 Message-ID: <055601d115ee$d806f770$8814e650$@olddog.co.uk> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 14.0 Thread-Index: AdEV7sek+Y4HWANdTamez3LGV8IYJw== Content-Language: en-gb X-TM-AS-MML: disable X-TM-AS-Product-Ver: IMSS-7.1.0.1679-8.0.0.1202-21918.005 X-TM-AS-Result: No--10.182-10.0-31-10 X-imss-scan-details: No--10.182-10.0-31-10 X-TMASE-MatchedRID: M+7COJ9Hi9wAU9TVxN2Vglu4M/xm4KZeAHN/Ezu9EnEM74Nf6tTB9g/8 Vsf0O62dq03l+sq3oX8mNpzri1sed0aWGOeKmQYQKWuiyZLRI4DAWTziWGaDPLBOE9APtGEp4qc 77t4pg7mR9M4SFvvjHsUVUCB+hEygTCJODAjEQuUER9Ta+6BEXQeDbc64+XV0+xeak3AEFyABRE haHC0n3VpZL9LyXuafacpE1GlTeUunykMun0J1wp4CIKY/Hg3AtOt1ofVlaoKYGUPdON1eXvoLR 4+zsDTtjoczmuoPCq1AOUUEJAkhuekrfrGpCzRzf4neVphC4lKae+8t4slmm0SfLtuBDEgz Archived-At: Subject: [I2nsf] Top-level actions from today's meeting X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list Reply-To: adrian@olddog.co.uk List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 03 Nov 2015 04:19:38 -0000 Hi, I took a note of the top-level actions taken away from the meeting this morning. Don't let this preclude you also doing other work. Ed to lead on a terminology document. Please contact Ed if you believe you have cycles to help. Otherwise wait until he pushes something out and then review it. Sue to merge problem statement document with use case and gap analysis document. Also add a section on "outputs" or "outcomes" per discussion at the mic. Chairs to move the merged document forward as a candidate for adoption to satisfy our deliverable. Chairs to ensure coordination with other WGs especially: SUPA, SFC, DOTS John Strassner to send mail about framework document and some broken models (John asked to be reminded :-) WG to review and discuss documents and not wait for Buenos Aires to make progress. Everyone to use the wiki and issue tracker to help with the work. Thanks! Adrian From nobody Mon Nov 9 10:01:25 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DEB8F1A8F36 for ; Mon, 9 Nov 2015 10:01:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sKMyO977bbJ8 for ; Mon, 9 Nov 2015 10:01:14 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 27E1A1A8F35 for ; Mon, 9 Nov 2015 10:01:14 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml403-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CDW31518; Mon, 09 Nov 2015 18:01:11 +0000 (GMT) Received: from DFWEML706-CHM.china.huawei.com (10.193.5.225) by lhreml403-hub.china.huawei.com (10.201.5.217) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 9 Nov 2015 18:01:11 +0000 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml706-chm ([10.193.5.225]) with mapi id 14.03.0235.001; Mon, 9 Nov 2015 10:01:02 -0800 From: Linda Dunbar To: "i2nsf@ietf.org" Thread-Topic: IETF94 I2NSF meeting minutes has been posted Thread-Index: AdEbGCOlYCu46bpoQS6wbSBHbpp8fA== Date: Mon, 9 Nov 2015 18:01:01 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D7F71A@dfweml701-chm> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.236] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657D7F71Adfweml701chm_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A090205.5640DF68.0002, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=0.0.0.0, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: 4d7de3b8c64e5b5ff9f8ced4b2216dd0 Archived-At: Subject: [I2nsf] IETF94 I2NSF meeting minutes has been posted X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Nov 2015 18:01:24 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F657D7F71Adfweml701chm_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Thanks everyone for the productive meeting last week. Many thanks to Cathy = Zhou, Diego Lopez, and Sue Hares for taking the minutes. Here are the combined meeting minutes of the I2NSF session. Please let us k= now if we missed anything: https://www.ietf.org/proceedings/94/minutes/minu= tes-94-i2nsf Cheers, Linda and Adrian --_000_4A95BA014132FF49AE685FAB4B9F17F657D7F71Adfweml701chm_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Thanks everyone for the productive meeting last week= . Many thanks to Cathy Zhou, Diego Lopez, and Sue Hares for taking the minu= tes.

 

Here are the combined meeting minutes of the I2NSF s= ession. Please let us know if we missed anything: ht= tps://www.ietf.org/proceedings/94/minutes/minutes-94-i2nsf

 

Cheers,

 

Linda and Adrian

 

 

 

 

--_000_4A95BA014132FF49AE685FAB4B9F17F657D7F71Adfweml701chm_-- From nobody Mon Nov 9 12:13:22 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 373961B832F for ; Mon, 9 Nov 2015 12:13:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.21 X-Spam-Level: X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id evDgEsaPDwHk for ; Mon, 9 Nov 2015 12:13:17 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 008521B832B for ; Mon, 9 Nov 2015 12:13:15 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml404-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CDW39158; Mon, 09 Nov 2015 20:13:13 +0000 (GMT) Received: from DFWEML705-CHM.china.huawei.com (10.193.5.142) by lhreml404-hub.china.huawei.com (10.201.5.218) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 9 Nov 2015 20:13:11 +0000 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml705-chm ([10.193.5.142]) with mapi id 14.03.0235.001; Mon, 9 Nov 2015 12:12:57 -0800 From: Linda Dunbar To: Edward Lopez , "i2nsf@ietf.org" Thread-Topic: Controversial Terminologies that need to be clarified for I2NSF: Thread-Index: AdEbKwXPq8l6jVWjSDqjgUJvJAh2Jw== Date: Mon, 9 Nov 2015 20:12:56 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D7F839@dfweml701-chm> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.236] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657D7F839dfweml701chm_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020206.5640FE59.02BF, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=0.0.0.0, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: 9f74cfe2a4a7613c8b8b0fe388818227 Archived-At: Subject: [I2nsf] Controversial Terminologies that need to be clarified for I2NSF: X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Nov 2015 20:13:21 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F657D7F839dfweml701chm_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Ed, Since you volunteered for writing a draft to clarify the I1NSF terminologie= s, I put down some controversial terminologies I have captured: Object vs. Contextual State: both for describing the contextual or environm= ent for the rule sets. WG needs to agree on one terminology. Asymmetrical vs. Direction of traffic: Some people use "Asymmetrical" & "symmetrical" to refer to the requirement = of both directions of the traffic have to go through the same path. In anot= her word: congruent paths for both directions. "Direction" is also used by some people to refer to one direction of traffi= c is allowed, where the other is not. E.g. A group can only originate traff= ic and can only receive traffic for the responses of their own originated t= raffic. Differentiation from SFC: SFC is about delivering traffic to the door. I2NSF is about how to treat pa= ckets delivered to my door. I2NSF is really focusing how to treat packets, but not how the traffic is d= elivered to my door. Thanks, Linda Dunbar --_000_4A95BA014132FF49AE685FAB4B9F17F657D7F839dfweml701chm_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Ed,

 

Since you volunteered for writing a draft to clar= ify the I1NSF terminologies, I put down some controversial terminologies I = have captured:

 

Object vs. Contextual = State: both for describing the contextual or environment for the rule sets.= WG needs to agree on one terminology.

 

Asymmetrical vs. Direc= tion of traffic:

Some people use ̶= 0;Asymmetrical” & “symmetrical” to refer to the requi= rement of both directions of the traffic have to go through the same path. = In another word: congruent paths for both directions.

 

“Direction̶= 1; is also used by some people to refer to one direction of traffic is allo= wed, where the other is not. E.g. A group can only originate traffic and ca= n only receive traffic for the responses of their own originated traffic.

 

 

Differentiation from S= FC:

SFC is about deliveri= ng traffic to the door. I2NSF is about how to treat packets delivered to my= door.

I2NSF is really focus= ing how to treat packets, but not how the traffic is delivered to my door.

 

 

Thanks, Linda Du= nbar

 

--_000_4A95BA014132FF49AE685FAB4B9F17F657D7F839dfweml701chm_-- From nobody Tue Nov 17 08:34:47 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 862D61A020B for ; Tue, 17 Nov 2015 08:34:46 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.785 X-Spam-Level: X-Spam-Status: No, score=-4.785 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.585, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ueQgcDff5prD for ; Tue, 17 Nov 2015 08:34:44 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 288FA1A022C for ; Tue, 17 Nov 2015 08:34:44 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml405-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CEG04714; Tue, 17 Nov 2015 16:34:41 +0000 (GMT) Received: from DFWEML704-CHM.china.huawei.com (10.193.5.141) by lhreml405-hub.china.huawei.com (10.201.5.242) with Microsoft SMTP Server (TLS) id 14.3.235.1; Tue, 17 Nov 2015 16:34:40 +0000 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml704-chm ([10.193.5.141]) with mapi id 14.03.0235.001; Tue, 17 Nov 2015 08:34:29 -0800 From: Linda Dunbar To: Susan Hares Thread-Topic: What does it mean by saying "federated policies"? Thread-Index: AdEhVdOqQvckJGdHTyaMcFs+MQw0UA== Date: Tue, 17 Nov 2015 16:34:28 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657D9DCB9@dfweml701-chm> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.213] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657D9DCB9dfweml701chm_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020202.564B5721.01D6, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=0.0.0.0, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: 95759a755fbecbbd6e32daec2b07bd60 Archived-At: Cc: "i2nsf@ietf.org" , John Strassner Subject: [I2nsf] What does it mean by saying "federated policies"? X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Nov 2015 16:34:46 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F657D9DCB9dfweml701chm_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Sue, During the I2NSF WG session in Yokohama, you asked a question (see the Meet= ing minutes for the context): Sue: my question: are you considering federate policies, or individual poli= cies on top of another? What does it mean by saying "federate policies"? Thanks, Linda --_000_4A95BA014132FF49AE685FAB4B9F17F657D9DCB9dfweml701chm_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Sue,

 

During the I2NSF WG session in Yokohama, you asked a= question (see the Meeting minutes for the context):

 

Sue: my question: a= re you considering federate policies, or individual policies on top of anot= her?

 

What does it mean by saying “federate policies= ”?

 

Thanks, Linda

--_000_4A95BA014132FF49AE685FAB4B9F17F657D9DCB9dfweml701chm_-- From nobody Fri Nov 20 03:11:11 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 816AC1B2DC6 for ; Fri, 20 Nov 2015 03:11:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.086 X-Spam-Level: X-Spam-Status: No, score=-2.086 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.585, SPF_PASS=-0.001] autolearn=unavailable Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id koPCIRLuJ56A for ; Fri, 20 Nov 2015 03:11:07 -0800 (PST) Received: from xenon22.um.es (xenon22.um.es [155.54.212.162]) by ietfa.amsl.com (Postfix) with ESMTP id 278571B2DC4 for ; Fri, 20 Nov 2015 03:11:06 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by xenon22.um.es (Postfix) with ESMTP id 5E0D6741E; Fri, 20 Nov 2015 12:11:05 +0100 (CET) X-Virus-Scanned: by antispam in UMU at xenon22.um.es Received: from xenon22.um.es ([127.0.0.1]) by localhost (xenon22.um.es [127.0.0.1]) (amavisd-new, port 10024) with LMTP id gZbhnx7pFmdK; Fri, 20 Nov 2015 12:11:05 +0100 (CET) Received: from inf-205-187.inf.um.es (inf-205-187.inf.um.es [155.54.205.187]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: rafa) by xenon22.um.es (Postfix) with ESMTPSA id 2B704589; Fri, 20 Nov 2015 12:11:03 +0100 (CET) From: Rafa Marin Lopez Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Fri, 20 Nov 2015 12:11:03 +0100 Message-Id: To: sdn@irtf.org, i2nsf@ietf.org Mime-Version: 1.0 (Mac OS X Mail 9.1 \(3096.5\)) X-Mailer: Apple Mail (2.3096.5) Archived-At: Cc: Gabriel Lopez , Rafa Marin Lopez Subject: [I2nsf] SDN-based AAA Infrastructures Management X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Nov 2015 11:11:09 -0000 Dear all: A few days ago we submitted a draft with the idea of the management of = AAA infrastructures using SDN paradigm. "Software-Defined Networking (SDN)-based AAA Infrastructures Management" https://tools.ietf.org/html/draft-marin-sdnrg-sdn-aaa-mng-00 "This document describes the management of Authentication, Authorization and Accounting (AAA) infrasctrutures by means of a Software-Defined Network (SDN) controller and raises the requirements to support this service. It considers the management of AAA routing and the establishment of security associations between AAA entities." Any comment is welcome. Best Regards. ------------------------------------------------------- Rafael Marin Lopez, PhD Dept. Information and Communications Engineering (DIIC) Faculty of Computer Science-University of Murcia 30100 Murcia - Spain Telf: +34868888501 Fax: +34868884151 e-mail: rafa@um.es ------------------------------------------------------- From nobody Fri Nov 20 08:01:11 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F3D9D1A0029 for ; Thu, 19 Nov 2015 18:23:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.785 X-Spam-Level: X-Spam-Status: No, score=-4.785 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.585, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id v5Pgqwk4Z67o for ; Thu, 19 Nov 2015 18:22:56 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1F4671A0021 for ; Thu, 19 Nov 2015 18:22:54 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml404-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CAO62221; Fri, 20 Nov 2015 02:22:51 +0000 (GMT) Received: from NKGEML410-HUB.china.huawei.com (10.98.56.41) by lhreml404-hub.china.huawei.com (10.201.5.218) with Microsoft SMTP Server (TLS) id 14.3.235.1; Fri, 20 Nov 2015 02:22:50 +0000 Received: from NKGEML512-MBX.china.huawei.com ([169.254.7.181]) by nkgeml410-hub.china.huawei.com ([10.98.56.41]) with mapi id 14.03.0235.001; Fri, 20 Nov 2015 10:22:39 +0800 From: "Anil Kumar S N (VRP Network BL)" To: "draft-dunbar-i2nsf-problem-statement-05@ietf.org" Thread-Topic: Comments on draft-dunbar-i2nsf-problem-statement-05 Thread-Index: AdEioAyIQfd93omoRVuyqnHeGuMT8AAmR5vw Date: Fri, 20 Nov 2015 02:22:38 +0000 Message-ID: <327562D94EA7BF428CD805F338C31EF06C07EC8B@nkgeml512-mbx.china.huawei.com> Accept-Language: en-US, zh-CN Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.18.213.92] Content-Type: multipart/alternative; boundary="_000_327562D94EA7BF428CD805F338C31EF06C07EC8Bnkgeml512mbxchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A0B0203.564E83FC.00E6, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=169.254.7.181, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: 4dc847aa0f093d86f08b473668597671 Archived-At: X-Mailman-Approved-At: Fri, 20 Nov 2015 08:01:10 -0800 Cc: Jayaraghavendran k , "i2nsf@ietf.org" , Linda Dunbar Subject: [I2nsf] Comments on draft-dunbar-i2nsf-problem-statement-05 X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Nov 2015 02:23:01 -0000 --_000_327562D94EA7BF428CD805F338C31EF06C07EC8Bnkgeml512mbxchi_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Authors, I was reading the draft for understanding and contributing toward= s I2NSF working group and found few comments : * Introduction section : I think all these use cases are merged as= "draft-pastor-i2nsf-merged-use-cases-00" request you to update the same This document does not elaborate on specific use case. The reader should refer to [I2NSF-ACCESS], [I2NSF-DC] and [I2NSF-Mobile] for a more in-depth discussion on the I2NSF use cases. * Requirements Language, terms and acronyms section : We need to de= scribe following abbreviations which are used in the documents as it the fi= rst document to be referred by any newcomer into I2NSF WG IPS, IDS, ACL, FWs, AAA, CA, VNFpool, Etc... * 3.1.1. Diverse types of Security Functions Section : Below state= ment is contradicting each other, I2NSF wants to standardize the interface = to control the behavior of NSF but doesn't want to standardize the interface which carries the information= of firewall filter and its application on specific flow. I Feel we could a= dd more clarity on the scope of I2NSF with respect to what is under its perview and what is not in this document if at all we wan= t to talk about "what is needed" in this document. there is no need to standardize on how a firewall filters are created or applied. What is needed is having an interface to control and monitor the behavior of NSFs. * 3.1.2. Diverse Interface to monitor the behavior of NSFs : Repa= rsed as below You Can't Monitor What You Can't See. So enabling a security function (e.g., firewall [I-D.ietf-opsawg-firewalls]) does not mean that a network i= s protected. As such, it is necessary to have a mechanism to monitor and provide executi= on status of NSFs to security and compliance management tools. There exist various network secur= ity monitoring vendor specific interfaces for forensics and troubleshooting * Adding new section : 3.1.9 Lack of mechanism for Key Management/Deterministic Generation and Pro= visioning for communicating protocols There is a need for a framework/data model for a key management protocol th= at may be used to create and manage session keys for message authentication and integrity. As of now there is no much f= ocus on an abstraction for keying information that describes the interface between protocols, operators, and automated key management. In March 2006, the Internet Architecture Board (IAB) held a workshop on the topic of "Unwanted Internet Traffic". The report from that workshop= is documented in RFC 4948 [RFC4948]. Section 8.1 of that document states that "A simple risk analysis would sugg= est that an ideal attack target of minimal cost but maximal disruption is the core routing infrastructure". Section 8= .2 calls for "Tightening the security of the core routing infrastructure". One of the four main steps were identified for that tightening the security= for the protocol packets on the wire. It is concerned with guidelines for describing issues and techniques for pr= otecting the messages between directly communicating peers. Conceptually, when routing protocols send or receive messages, they might need to look up the key to use in this abstract key table. Conceptually, there must be an interface defined for a protocols to make requests of automated key management when it is being used; when keys become available, they might be made available in the key table. There might not be any requirement that this abstraction be used for implementation: 1) I2NSF need to design the key table abstraction, the interface between key management protocols and routing/other protocols, and possibly security protocols at other layers. 2) For each routing/other protocol, I2NSF need to define the mapping bet= ween how the protocol represents key material and the protocol- independent key table abstraction. When routing/other protocols shar= e a common mechanism for authentication, such as the TCP Authentication Option, the same mapping is likely to be reused between protocols. An implementation may be able to move much of the keying logic into code related to this shared authentication primitive rather than code specific to routing/other protocols. 3) When designing automated key management for both symmetric keys and group keys, we will only need to use the abstractions designed ba= sed on point 1 above to communicate between automated key management and routing/other protocols. With Regards Anil S N "Be liberal in what you accept, and conservative in what you send" - Jon Po= stel --_000_327562D94EA7BF428CD805F338C31EF06C07EC8Bnkgeml512mbxchi_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Authors,

 

     &nbs= p;    I was reading the draft for understanding and contribu= ting towards I2NSF working group and found few comments :=

 

·         Introduction section :&nbs= p; I think all these use cases are merged as “draft-pastor-i2nsf-merg= ed-use-cases-00” request you to update the same

 

This document does not elaborate o= n specific use case. The reader

should refer to [I2NSF-ACCESS], [I= 2NSF-DC] and [I2NSF-Mobile] for a

more in-depth discussion on the I2= NSF use cases.       

 

·         Requirements Language, ter= ms and acronyms section : We need to describe following abbreviations which= are used in the documents as it the first document

to be referred by any newcomer int= o I2NSF WG

 

IPS, IDS, ACL, FWs, AAA, CA, VNFpo= ol, Etc...

 

·         3.1.1. Diverse types of Se= curity Functions Section :  Below statement is contradicting each othe= r, I2NSF wants to standardize the interface to control the behavior of NSF

but doesn’t want to standard= ize the interface which carries the information of firewall filter and its = application on specific flow. I Feel we could add more clarity on the scope of I2NSF with respect to

what is under its perview and what= is not in this document if at all we want to talk about “what is nee= ded” in this document.

 

     there is = no need to standardize on how a

     firewall = filters are created or applied. What is needed is having<= /p>

     an interf= ace to control and monitor the behavior of NSFs.

 

     &nbs= p;   

·         3.1.2.  Diverse Inter= face to monitor the behavior of NSFs :  Reparsed as below 

You Can’t Monitor What You CanR=
17;t See. So enabling a security function 
(e.g., firewall [I-D.ietf-opsawg-firewal=
ls]) does not mean that a network is protected. 
As such, it is necessary to have a mecha=
nism to monitor and provide execution status of NSFs to

security and compliance management tools. There exis=
t various network security monitoring vendor specific interfaces 


for forensics and troubleshooting =



 


 


·      &nbs=
p;  Add=
ing new section :


3.1.9 Lack of mechanism for Key Manage=
ment/Deterministic Generation and Provisioning for communicating protocols<=
o:p>


 


There is a need for a framework/data m=
odel for a key management protocol that may be used to create and manage se=
ssion


key=
s for message authentication and integrity. As of now there is no much focu=
s on an abstraction for keying information that describes the interface


bet=
ween protocols, operators, and automated key management.<=
/pre>

 


In =
March 2006, the Internet Architecture Board (IAB) held a workshop


on =
the topic of "Unwanted Internet Traffic".  The report from t=
hat workshop is documented in RFC 4948 [RFC4948]. 


Sec=
tion 8.1 of that document states that "A simple risk analysis would su=
ggest that an ideal attack target of minimal 


cos=
t but maximal disruption is the core routing infrastructure".  Se=
ction 8.2 calls for "Tightening the security of 

the=
 core routing infrastructure".  


 


One=
 of the four main steps were identified for that tightening the security fo=
r the protocol packets on the wire.


It =
is concerned with guidelines for describing issues and techniques for prote=
cting the messages between directly communicating peers.<=
/pre>

=
 


Con=
ceptually, when routing protocols send or receive messages, they=



&nb=
sp;  might need to look up the key to use in this abstract key table.<=
o:p>


&nb=
sp;  Conceptually, there must be an interface defined for a protocols =
to


&nb=
sp;  make requests of automated key management when it is being used; =
when


&nb=
sp;  keys become available, they might be made available in the key ta=
ble.


&nb=
sp;  There might not be any requirement that this abstraction be used =
for


&nb=
sp;  implementation:


 


&nb=
sp;  1) I2NSF need to design the key table abstraction, the interface =
between


&nb=
sp;     key management protocols and routing/other prot=
ocols, and possibly


&nb=
sp;     security protocols at other layers.<=
/span>


 


&nb=
sp;  2) For each routing/other protocol, I2NSF need to define the mapp=
ing between


&nb=
sp;     how the protocol represents key material and th=
e protocol-


&nb=
sp;     independent key table abstraction.  When r=
outing/other protocols share a


&nb=
sp;     common mechanism for authentication, such as th=
e TCP


&nb=
sp;     Authentication Option, the same mapping is like=
ly to be reused


&nb=
sp;     between protocols.  An implementation may =
be able to move much of


&nb=
sp;     the keying logic into code related to this shar=
ed authentication


&nb=
sp;     primitive rather than code specific to routing/=
other protocols.


 


&nb=
sp;  3) When designing automated key management for both symmetric key=
s


&nb=
sp;     and group keys, we will only need to use the ab=
stractions designed based on


&nb=
sp;     point 1 above to communicate between automated =
key management and


&nb=
sp;     routing/other protocols.

 


With =
Regards


Anil =
S N


 


“Be liberal in what you acce=
pt, and conservative in what you send” - Jon Postel=
--_000_327562D94EA7BF428CD805F338C31EF06C07EC8Bnkgeml512mbxchi_-- From nobody Fri Nov 20 14:07:29 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 579B01B3EE2 for ; Fri, 20 Nov 2015 14:07:27 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.785 X-Spam-Level: X-Spam-Status: No, score=-4.785 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.585, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oxtLOA-lnb7h for ; Fri, 20 Nov 2015 14:07:22 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4877A1B3EE3 for ; Fri, 20 Nov 2015 14:07:12 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml406-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CEJ99213; Fri, 20 Nov 2015 22:07:10 +0000 (GMT) Received: from DFWEML702-CHM.china.huawei.com (10.193.5.72) by lhreml406-hub.china.huawei.com (10.201.5.243) with Microsoft SMTP Server (TLS) id 14.3.235.1; Fri, 20 Nov 2015 22:07:09 +0000 Received: from DFWEML701-CHM.china.huawei.com ([10.193.5.50]) by dfweml702-chm ([10.193.5.72]) with mapi id 14.03.0235.001; Fri, 20 Nov 2015 14:06:54 -0800 From: Linda Dunbar To: "Anil Kumar S N (VRP Network BL)" , "draft-dunbar-i2nsf-problem-statement-05@ietf.org" Thread-Topic: Comments on draft-dunbar-i2nsf-problem-statement-05 Thread-Index: AdEioAyIQfd93omoRVuyqnHeGuMT8AAmR5vwACd+fyA= Date: Fri, 20 Nov 2015 22:06:53 +0000 Message-ID: <4A95BA014132FF49AE685FAB4B9F17F657DA6474@dfweml701-chm> References: <327562D94EA7BF428CD805F338C31EF06C07EC8B@nkgeml512-mbx.china.huawei.com> In-Reply-To: <327562D94EA7BF428CD805F338C31EF06C07EC8B@nkgeml512-mbx.china.huawei.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.192.11.213] Content-Type: multipart/alternative; boundary="_000_4A95BA014132FF49AE685FAB4B9F17F657DA6474dfweml701chm_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020201.564F998F.0099, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=0.0.0.0, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: 1d2d13dabd616f755d8e28c3846f2490 Archived-At: Cc: Jayaraghavendran k , "i2nsf@ietf.org" Subject: Re: [I2nsf] Comments on draft-dunbar-i2nsf-problem-statement-05 X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Nov 2015 22:07:27 -0000 --_000_4A95BA014132FF49AE685FAB4B9F17F657DA6474dfweml701chm_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Anil, Thank you very much for the comments. Reply are inserted below: From: Anil Kumar S N (VRP Network BL) Sent: Thursday, November 19, 2015 8:23 PM To: draft-dunbar-i2nsf-problem-statement-05@ietf.org Cc: Linda Dunbar; Jayaraghavendran k; i2nsf@ietf.org Subject: Comments on draft-dunbar-i2nsf-problem-statement-05 Hi Authors, I was reading the draft for understanding and contributing toward= s I2NSF working group and found few comments : * Introduction section : I think all these use cases are merged as "= draft-pastor-i2nsf-merged-use-cases-00" request you to update the same This document does not elaborate on specific use case. The reader should refer to [I2NSF-ACCESS], [I2NSF-DC] and [I2NSF-Mobile] for a more in-depth discussion on the I2NSF use cases. [Linda] you are correct. Actually all of them will be merged together with = the problem statement. * Requirements Language, terms and acronyms section : We need to desc= ribe following abbreviations which are used in the documents as it the firs= t document to be referred by any newcomer into I2NSF WG IPS, IDS, ACL, FWs, AAA, CA, VNFpool, Etc... [Linda] Good point. Has been added. * 3.1.1. Diverse types of Security Functions Section : Below stateme= nt is contradicting each other, I2NSF wants to standardize the interface to= control the behavior of NSF but doesn't want to standardize the interface which carries the information= of firewall filter and its application on specific flow. I Feel we could a= dd more clarity on the scope of I2NSF with respect to what is under its perview and what is not in this document if at all we wan= t to talk about "what is needed" in this document. there is no need to standardize on how a firewall filters are created or applied. What is needed is having an interface to control and monitor the behavior of NSFs. [Linda] What in the I2NSF scope is "Rule Set" to those "Firewall filter". How about this: "What is needed is having an interface to control and monit= or the rule sets that NSFs use to treat packets traversing through." * 3.1.2. Diverse Interface to monitor the behavior of NSFs : Repars= ed as below You Can't Monitor What You Can't See. So enabling a security function (e.g., firewall [I-D.ietf-opsawg-firewalls]) does not mean that a network i= s protected. As such, it is necessary to have a mechanism to monitor and provide executi= on status of NSFs to security and compliance management tools. There exist various network secur= ity monitoring vendor specific interfaces for forensics and troubleshooting * Adding new section : 3.1.9 Lack of mechanism for Key Management/Deterministic Generation and Pro= visioning for communicating protocols [Linda] Do you see it as challenge facing providers? Or the customers? Do = you mean "Lack of Mechanism for security keys distribution to NSFs by diff= erent vendors"? There is a need for a framework/data model for a key management protocol th= at may be used to create and manage session [Linda] You need to provide more wording: Manage What Session? Is it IPSec = session ? is VPN session? What do you think of this "There is a need for controller to distribute various keys to distributed N= SFs." keys for message authentication and integrity. As of now there is no much f= ocus on an abstraction for keying information that describes the interface between protocols, operators, and automated key management. In March 2006, the Internet Architecture Board (IAB) held a workshop on the topic of "Unwanted Internet Traffic". The report from that workshop= is documented in RFC 4948 [RFC4948]. Section 8.1 of that document states that "A simple risk analysis would sugg= est that an ideal attack target of minimal cost but maximal disruption is the core routing infrastructure". Section 8= .2 calls for "Tightening the security of the core routing infrastructure". One of the four main steps were identified for that tightening the security= for the protocol packets on the wire. It is concerned with guidelines for describing issues and techniques for pr= otecting the messages between directly communicating peers. Conceptually, when routing protocols send or receive messages, they might need to look up the key to use in this abstract key table. Conceptually, there must be an interface defined for a protocols to make requests of automated key management when it is being used; when keys become available, they might be made available in the key table. There might not be any requirement that this abstraction be used for implementation: 1) I2NSF need to design the key table abstraction, the interface between key management protocols and routing/other protocols, and possibly security protocols at other layers. 2) For each routing/other protocol, I2NSF need to define the mapping bet= ween how the protocol represents key material and the protocol- independent key table abstraction. When routing/other protocols shar= e a common mechanism for authentication, such as the TCP Authentication Option, the same mapping is likely to be reused between protocols. An implementation may be able to move much of the keying logic into code related to this shared authentication primitive rather than code specific to routing/other protocols. 3) When designing automated key management for both symmetric keys and group keys, we will only need to use the abstractions designed ba= sed on point 1 above to communicate between automated key management and routing/other protocols. With Regards Anil S N "Be liberal in what you accept, and conservative in what you send" - Jon Po= stel --_000_4A95BA014132FF49AE685FAB4B9F17F657DA6474dfweml701chm_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Anil,

 

Thank you very much fo= r the comments. Reply are inserted below:

 

 

From: Anil Kum= ar S N (VRP Network BL)
Sent: Thursday, November 19, 2015 8:23 PM
To: draft-dunbar-i2nsf-problem-statement-05@ietf.org
Cc: Linda Dunbar; Jayaraghavendran k; i2nsf@ietf.org
Subject: Comments on draft-dunbar-i2nsf-problem-statement-05

 

Hi Authors,

 

     &nbs= p;    I was reading the draft for understanding and contribu= ting towards I2NSF working group and found few comments :=

 

·       Introduction section :&nbs= p; I think all these use cases are merged as “draft-pastor-i2nsf-merg= ed-use-cases-00” request you to update the same

 

 

This d= ocument does not elaborate on specific use case. The reader

should= refer to [I2NSF-ACCESS], [I2NSF-DC] and [I2NSF-Mobile] for a

more i= n-depth discussion on the I2NSF use cases.     &nb= sp; 

 

[Linda] you are correc= t. Actually all of them will be merged together with the problem statement.

 

·       Requirements Language, ter= ms and acronyms section : We need to describe following abbreviations which= are used in the documents as it the first document

to be referred by any newcomer int= o I2NSF WG

 

IPS, IDS, ACL, FWs, AAA, CA, VNFpo= ol, Etc...

 

[Linda] Good point. Ha= s been added.

 

 

·       3.1.1. Diverse types of Se= curity Functions Section :  Below statement is contradicting each othe= r, I2NSF wants to standardize the interface to control the behavior of NSF

but doesn’t want to standard= ize the interface which carries the information of firewall filter and its = application on specific flow. I Feel we could add more clarity on the scope of I2NSF with respect to

what is under its perview and what= is not in this document if at all we want to talk about “what is nee= ded” in this document.

 

     there is = no need to standardize on how a

     firewall = filters are created or applied. What is needed is having<= /p>

     an interf= ace to control and monitor the behavior of NSFs.

[Linda]  What in = the I2NSF scope is “Rule Set” to those “Firewall filter&#= 8221;.

How about this: “= ;What is needed is having an interface to control and monitor the rule sets= that NSFs use to treat packets traversing through.”

 

     &nbs= p;   

·       3.1.2.  Diverse Inter= face to monitor the behavior of NSFs :  Reparsed as below 

You Can’t Monitor What You CanR=
17;t See. So enabling a security function 
(e.g., firewall [I-D.ietf-opsawg-firewal=
ls]) does not mean that a network is protected. 
As such, it is necessary to have a mecha=
nism to monitor and provide execution status of NSFs to

security and compliance management tools. There exis=
t various network security monitoring vendor specific interfaces 


for forensics and troubleshooting =



 


 


=
·       Adding new section=
 :


3.1.9 Lack of mechanism for Key Manage=
ment/Deterministic Generation and Provisioning for communicating protocols<=
o:p>


 


[Linda] Do you see it as challenge facing p=
roviders? Or the customers?  Do you mean  “Lack of Mechanis=
m for security keys distribution to NSFs by different vendors”? =



 


 


There is a need for a framework/data m=
odel for a key management protocol that may be used to create and manage se=
ssion


 


[Linda] You need to provide more wording: M=
anage What Session? Is it IPSec session ? is VPN session? 


What do you think of this 


“There is a need for controller to di=
stribute various keys to distributed NSFs.” 


 


 


key=
s for message authentication and integrity. As of now there is no much focu=
s on an abstraction for keying information that describes the interface


bet=
ween protocols, operators, and automated key management.<=
/pre>

 


In =
March 2006, the Internet Architecture Board (IAB) held a workshop


on =
the topic of "Unwanted Internet Traffic".  The report from t=
hat workshop is documented in RFC 4948 [RFC4948]. 


Sec=
tion 8.1 of that document states that "A simple risk analysis would su=
ggest that an ideal attack target of minimal 


cos=
t but maximal disruption is the core routing infrastructure".  Se=
ction 8.2 calls for "Tightening the security of 

the=
 core routing infrastructure".  


 


One=
 of the four main steps were identified for that tightening the security fo=
r the protocol packets on the wire.


It =
is concerned with guidelines for describing issues and techniques for prote=
cting the messages between directly communicating peers.<=
/pre>

=
 


Con=
ceptually, when routing protocols send or receive messages, they=



&nb=
sp;  might need to look up the key to use in this abstract key table.<=
o:p>


&nb=
sp;  Conceptually, there must be an interface defined for a protocols =
to


&nb=
sp;  make requests of automated key management when it is being used; =
when


&nb=
sp;  keys become available, they might be made available in the key ta=
ble.


&nb=
sp;  There might not be any requirement that this abstraction be used =
for


&nb=
sp;  implementation:


 


&nb=
sp;  1) I2NSF need to design the key table abstraction, the interface =
between


&nb=
sp;     key management protocols and routing/other prot=
ocols, and possibly


&nb=
sp;     security protocols at other layers.<=
/span>


 


&nb=
sp;  2) For each routing/other protocol, I2NSF need to define the mapp=
ing between


&nb=
sp;     how the protocol represents key material and th=
e protocol-


&nb=
sp;     independent key table abstraction.  When r=
outing/other protocols share a


&nb=
sp;     common mechanism for authentication, such as th=
e TCP


&nb=
sp;     Authentication Option, the same mapping is like=
ly to be reused


&nb=
sp;     between protocols.  An implementation may =
be able to move much of


&nb=
sp;     the keying logic into code related to this shar=
ed authentication


&nb=
sp;     primitive rather than code specific to routing/=
other protocols.


 


&nb=
sp;  3) When designing automated key management for both symmetric key=
s


&nb=
sp;     and group keys, we will only need to use the ab=
stractions designed based on


&nb=
sp;     point 1 above to communicate between automated =
key management and


&nb=
sp;     routing/other protocols.

 


With =
Regards


Anil =
S N


 


“Be liberal in what you acce=
pt, and conservative in what you send” - Jon Postel=
--_000_4A95BA014132FF49AE685FAB4B9F17F657DA6474dfweml701chm_-- From nobody Sat Nov 21 04:28:19 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4E1831A8930 for ; Sat, 21 Nov 2015 04:28:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.185 X-Spam-Level: X-Spam-Status: No, score=-3.185 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RP_MATCHES_RCVD=-0.585, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NdhxMPfw29sA for ; Sat, 21 Nov 2015 04:28:12 -0800 (PST) Received: from smtpjc.telefonica.com (smtpjc.telefonica.com [81.47.204.76]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A79F61A892B for ; Sat, 21 Nov 2015 04:28:11 -0800 (PST) Received: from smtpjc.telefonica.com (unknown [127.0.0.1]) by IMSVA (Postfix) with ESMTP id 1C9E82F013A; Sat, 21 Nov 2015 13:28:09 +0100 (CET) Received: from ESTGVMSP113.EUROPE.telefonica.corp (unknown [10.92.4.9]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by smtpjc.telefonica.com (Postfix) with ESMTPS id 0277E2F0136; Sat, 21 Nov 2015 13:28:09 +0100 (CET) Received: from emea01-am1-obe.outbound.protection.outlook.com (10.92.5.139) by tls.telefonica.com (10.92.6.55) with Microsoft SMTP Server (TLS) id 14.3.235.1; Sat, 21 Nov 2015 13:28:07 +0100 Received: from DB4PR06MB0624.eurprd06.prod.outlook.com (10.161.13.142) by DB4PR06MB0621.eurprd06.prod.outlook.com (10.161.13.139) with Microsoft SMTP Server (TLS) id 15.1.325.17; Sat, 21 Nov 2015 12:28:06 +0000 Received: from DB4PR06MB0624.eurprd06.prod.outlook.com ([10.161.13.142]) by DB4PR06MB0624.eurprd06.prod.outlook.com ([10.161.13.142]) with mapi id 15.01.0325.019; Sat, 21 Nov 2015 12:28:06 +0000 From: DIEGO LOPEZ GARCIA To: "Anil Kumar S N (VRP Network BL)" Thread-Topic: [I2nsf] Comments on draft-dunbar-i2nsf-problem-statement-05 Thread-Index: AdEioAyIQfd93omoRVuyqnHeGuMT8AAmR5vwAEe5yYA= Date: Sat, 21 Nov 2015 12:28:06 +0000 Message-ID: References: <327562D94EA7BF428CD805F338C31EF06C07EC8B@nkgeml512-mbx.china.huawei.com> In-Reply-To: <327562D94EA7BF428CD805F338C31EF06C07EC8B@nkgeml512-mbx.china.huawei.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=diego.r.lopez@telefonica.com; x-ms-exchange-messagesentrepresentingtype: 1 x-originating-ip: [83.36.36.154] x-microsoft-exchange-diagnostics: 1; DB4PR06MB0621; 5:pJjsj+dgj8h1YkKPI8VLm0IgCyeJTpSaPvyn1pUas4TPNy6U8aZ6qkUicOEoB94liBxJGBgxh8UbSraOp2NAPlkWlgCSWU1c+sHrYogb11RhBdELI5fqG0fP+dx5foahqeo1J6x/HNrj+6ijjaX0Yw==; 24:4Oacu4K6ADTk5RshWDU/BhIN4K8ho7EVNFuZHyWksM8bb82t13HT6bDlP8vWDefI9Z+kGot0PFqAC1tFFOpEenNnpqEJeh16MAjd5ol3pXY=; 20:rh3FbCIQsK3sHuwLpf7tVirOoLhDtgLHEXhWm2nAs0nMQswP8ZWz5eNSsaCCdpK0uqsMBdQpBUC+XqPLCSGb6Q== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DB4PR06MB0621; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(40392960112811); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(520078)(8121501046)(5005006)(10201501046)(3002001); SRVR:DB4PR06MB0621; BCL:0; PCL:0; RULEID:; SRVR:DB4PR06MB0621; x-forefront-prvs: 076777155F x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(189002)(199003)(24454002)(252514010)(54356999)(11100500001)(92566002)(50986999)(2950100001)(40100003)(87936001)(83716003)(2900100001)(19617315012)(66066001)(76176999)(82746002)(16236675004)(33656002)(586003)(5001960100002)(19580395003)(106356001)(230783001)(5004730100002)(10400500002)(122556002)(5007970100001)(5002640100001)(6116002)(36756003)(110136002)(105586002)(102836003)(77096005)(189998001)(97736004)(86362001)(15975445007)(81156007)(101416001)(19580405001)(3846002)(5008740100001)(104396002); DIR:OUT; SFP:1102; SCL:1; SRVR:DB4PR06MB0621; H:DB4PR06MB0624.eurprd06.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: telefonica.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_C9100DC81CD149A4AB60D5BCC60499F3telefonicacom_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Nov 2015 12:28:06.0500 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 9744600e-3e04-492e-baa1-25ec245c6f10 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB4PR06MB0621 X-OriginatorOrg: telefonica.com X-TM-AS-MML: No Archived-At: Cc: Jayaraghavendran k , "i2nsf@ietf.org" , "draft-dunbar-i2nsf-problem-statement-05@ietf.org" , Linda Dunbar Subject: Re: [I2nsf] Comments on draft-dunbar-i2nsf-problem-statement-05 X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Nov 2015 12:28:17 -0000 --_000_C9100DC81CD149A4AB60D5BCC60499F3telefonicacom_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGksDQoNCkEgY291cGxlIG9mIGNvbW1lbnRzIGluIGxpbmUgYmVsb3figKYNCg0KT24gMjAgTm92 IDIwMTUsIGF0IDAzOjIyICwgQW5pbCBLdW1hciBTIE4gKFZSUCBOZXR3b3JrIEJMKSA8YW5pbC5z bkBodWF3ZWkuY29tPG1haWx0bzphbmlsLnNuQGh1YXdlaS5jb20+PiB3cm90ZToNCuKAoiAgICAg ICAgIFJlcXVpcmVtZW50cyBMYW5ndWFnZSwgdGVybXMgYW5kIGFjcm9ueW1zIHNlY3Rpb24gOiBX ZSBuZWVkIHRvIGRlc2NyaWJlIGZvbGxvd2luZyBhYmJyZXZpYXRpb25zIHdoaWNoIGFyZSB1c2Vk IGluIHRoZSBkb2N1bWVudHMgYXMgaXQgdGhlIGZpcnN0IGRvY3VtZW50DQp0byBiZSByZWZlcnJl ZCBieSBhbnkgbmV3Y29tZXIgaW50byBJMk5TRiBXRw0KDQpJUFMsIElEUywgQUNMLCBGV3MsIEFB QSwgQ0EsIFZORnBvb2wsIEV0Y+KApg0KDQpEUkw+IEkgZGlzYWdyZWUuIFRlcm1zIGxpa2UgSURT LCBBQUEsIEFDTCBvciBDQSBhcmUgd2VsbCBkZWZpbmVkIGVsc2V3aGVyZSwgaGF2ZSBiZWVuIG9m IGNvbW1vbiB1c2FnZSBmb3IgcXVpdGUgYSB3aGlsZSwgYW5kIHRoZXJlIGlzIG5vIGFkdmFudGFn ZSBpbiByZWRlZmluaW5nIHRoZW0gaW4gdGhpcyBkb2N1bWVudC4gRm9yIHdoYXQgaXMgd29ydGgs IHdlIGNvdWxkIG5lZWQgdG8gZGVmaW5lIHRlcm1zIGxpa2Ug4oCcbmV0d29ya+KAnSBvciDigJxU Q1DigJ3igKYgVGhlcmUgbWF5IGJlIG90aGVycyBsaWtlIFZORnBvb2wgdGhhdCB3b3VsZCBuZWVk IGEgZGVmaW5pdGlvbiBiZWNhdXNlIHRoZXkgYXJlIGJ5IG5vIG1lYW5zIHdpZGVzcHJlYWQsIHRo b3VnaCBpbiB0aG9zZSBjYXNlIHdlIHNob3VsZCBmaXJzdCBjb25zaWRlciB3aGV0aGVyIHRoZSB0 ZXJtIG1ha2VzIHNlbnNlIGluIHRoZSBkb2N1bWVudCwgd2hpY2ggSeKAmWQgc2F5IGl0IGlzIG5v dCB0aGUgY2FzZSBmb3Ig4oCcVk5GcG9vbOKAnSBpbiBwYXJ0aWN1bGFyLg0KDQoNCuKAoiAgICAg ICAgIEFkZGluZyBuZXcgc2VjdGlvbiA6DQoNCjMuMS45IExhY2sgb2YgbWVjaGFuaXNtIGZvciBL ZXkgTWFuYWdlbWVudC9EZXRlcm1pbmlzdGljIEdlbmVyYXRpb24gYW5kIFByb3Zpc2lvbmluZyBm b3IgY29tbXVuaWNhdGluZyBwcm90b2NvbHMNCg0KDQoNClRoZXJlIGlzIGEgbmVlZCBmb3IgYSBm cmFtZXdvcmsvZGF0YSBtb2RlbCBmb3IgYSBrZXkgbWFuYWdlbWVudCBwcm90b2NvbCB0aGF0IG1h eSBiZSB1c2VkIHRvIGNyZWF0ZSBhbmQgbWFuYWdlIHNlc3Npb24NCg0Ka2V5cyBmb3IgbWVzc2Fn ZSBhdXRoZW50aWNhdGlvbiBhbmQgaW50ZWdyaXR5LiBBcyBvZiBub3cgdGhlcmUgaXMgbm8gbXVj aCBmb2N1cyBvbiBhbiBhYnN0cmFjdGlvbiBmb3Iga2V5aW5nIGluZm9ybWF0aW9uIHRoYXQgZGVz Y3JpYmVzIHRoZSBpbnRlcmZhY2UNCg0KYmV0d2VlbiBwcm90b2NvbHMsIG9wZXJhdG9ycywgYW5k IGF1dG9tYXRlZCBrZXkgbWFuYWdlbWVudC4NCg0KDQoNCkluIE1hcmNoIDIwMDYsIHRoZSBJbnRl cm5ldCBBcmNoaXRlY3R1cmUgQm9hcmQgKElBQikgaGVsZCBhIHdvcmtzaG9wDQoNCm9uIHRoZSB0 b3BpYyBvZiAiVW53YW50ZWQgSW50ZXJuZXQgVHJhZmZpYyIuICBUaGUgcmVwb3J0IGZyb20gdGhh dCB3b3Jrc2hvcCBpcyBkb2N1bWVudGVkIGluIFJGQyA0OTQ4IFtSRkM0OTQ4XS4NCg0KU2VjdGlv biA4LjEgb2YgdGhhdCBkb2N1bWVudCBzdGF0ZXMgdGhhdCAiQSBzaW1wbGUgcmlzayBhbmFseXNp cyB3b3VsZCBzdWdnZXN0IHRoYXQgYW4gaWRlYWwgYXR0YWNrIHRhcmdldCBvZiBtaW5pbWFsDQoN CmNvc3QgYnV0IG1heGltYWwgZGlzcnVwdGlvbiBpcyB0aGUgY29yZSByb3V0aW5nIGluZnJhc3Ry dWN0dXJlIi4gIFNlY3Rpb24gOC4yIGNhbGxzIGZvciAiVGlnaHRlbmluZyB0aGUgc2VjdXJpdHkg b2YNCg0KdGhlIGNvcmUgcm91dGluZyBpbmZyYXN0cnVjdHVyZSIuDQoNCg0KDQpPbmUgb2YgdGhl IGZvdXIgbWFpbiBzdGVwcyB3ZXJlIGlkZW50aWZpZWQgZm9yIHRoYXQgdGlnaHRlbmluZyB0aGUg c2VjdXJpdHkgZm9yIHRoZSBwcm90b2NvbCBwYWNrZXRzIG9uIHRoZSB3aXJlLg0KDQpJdCBpcyBj b25jZXJuZWQgd2l0aCBndWlkZWxpbmVzIGZvciBkZXNjcmliaW5nIGlzc3VlcyBhbmQgdGVjaG5p cXVlcyBmb3IgcHJvdGVjdGluZyB0aGUgbWVzc2FnZXMgYmV0d2VlbiBkaXJlY3RseSBjb21tdW5p Y2F0aW5nIHBlZXJzLg0KDQoNCg0KQ29uY2VwdHVhbGx5LCB3aGVuIHJvdXRpbmcgcHJvdG9jb2xz IHNlbmQgb3IgcmVjZWl2ZSBtZXNzYWdlcywgdGhleQ0KDQogICBtaWdodCBuZWVkIHRvIGxvb2sg dXAgdGhlIGtleSB0byB1c2UgaW4gdGhpcyBhYnN0cmFjdCBrZXkgdGFibGUuDQoNCiAgIENvbmNl cHR1YWxseSwgdGhlcmUgbXVzdCBiZSBhbiBpbnRlcmZhY2UgZGVmaW5lZCBmb3IgYSBwcm90b2Nv bHMgdG8NCg0KICAgbWFrZSByZXF1ZXN0cyBvZiBhdXRvbWF0ZWQga2V5IG1hbmFnZW1lbnQgd2hl biBpdCBpcyBiZWluZyB1c2VkOyB3aGVuDQoNCiAgIGtleXMgYmVjb21lIGF2YWlsYWJsZSwgdGhl eSBtaWdodCBiZSBtYWRlIGF2YWlsYWJsZSBpbiB0aGUga2V5IHRhYmxlLg0KDQogICBUaGVyZSBt aWdodCBub3QgYmUgYW55IHJlcXVpcmVtZW50IHRoYXQgdGhpcyBhYnN0cmFjdGlvbiBiZSB1c2Vk IGZvcg0KDQogICBpbXBsZW1lbnRhdGlvbjoNCg0KDQoNCiAgIDEpIEkyTlNGIG5lZWQgdG8gZGVz aWduIHRoZSBrZXkgdGFibGUgYWJzdHJhY3Rpb24sIHRoZSBpbnRlcmZhY2UgYmV0d2Vlbg0KDQog ICAgICBrZXkgbWFuYWdlbWVudCBwcm90b2NvbHMgYW5kIHJvdXRpbmcvb3RoZXIgcHJvdG9jb2xz LCBhbmQgcG9zc2libHkNCg0KICAgICAgc2VjdXJpdHkgcHJvdG9jb2xzIGF0IG90aGVyIGxheWVy cy4NCg0KDQoNCiAgIDIpIEZvciBlYWNoIHJvdXRpbmcvb3RoZXIgcHJvdG9jb2wsIEkyTlNGIG5l ZWQgdG8gZGVmaW5lIHRoZSBtYXBwaW5nIGJldHdlZW4NCg0KICAgICAgaG93IHRoZSBwcm90b2Nv bCByZXByZXNlbnRzIGtleSBtYXRlcmlhbCBhbmQgdGhlIHByb3RvY29sLQ0KDQogICAgICBpbmRl cGVuZGVudCBrZXkgdGFibGUgYWJzdHJhY3Rpb24uICBXaGVuIHJvdXRpbmcvb3RoZXIgcHJvdG9j b2xzIHNoYXJlIGENCg0KICAgICAgY29tbW9uIG1lY2hhbmlzbSBmb3IgYXV0aGVudGljYXRpb24s IHN1Y2ggYXMgdGhlIFRDUA0KDQogICAgICBBdXRoZW50aWNhdGlvbiBPcHRpb24sIHRoZSBzYW1l IG1hcHBpbmcgaXMgbGlrZWx5IHRvIGJlIHJldXNlZA0KDQogICAgICBiZXR3ZWVuIHByb3RvY29s cy4gIEFuIGltcGxlbWVudGF0aW9uIG1heSBiZSBhYmxlIHRvIG1vdmUgbXVjaCBvZg0KDQogICAg ICB0aGUga2V5aW5nIGxvZ2ljIGludG8gY29kZSByZWxhdGVkIHRvIHRoaXMgc2hhcmVkIGF1dGhl bnRpY2F0aW9uDQoNCiAgICAgIHByaW1pdGl2ZSByYXRoZXIgdGhhbiBjb2RlIHNwZWNpZmljIHRv IHJvdXRpbmcvb3RoZXIgcHJvdG9jb2xzLg0KDQoNCg0KICAgMykgV2hlbiBkZXNpZ25pbmcgYXV0 b21hdGVkIGtleSBtYW5hZ2VtZW50IGZvciBib3RoIHN5bW1ldHJpYyBrZXlzDQoNCiAgICAgIGFu ZCBncm91cCBrZXlzLCB3ZSB3aWxsIG9ubHkgbmVlZCB0byB1c2UgdGhlIGFic3RyYWN0aW9ucyBk ZXNpZ25lZCBiYXNlZCBvbg0KDQogICAgICBwb2ludCAxIGFib3ZlIHRvIGNvbW11bmljYXRlIGJl dHdlZW4gYXV0b21hdGVkIGtleSBtYW5hZ2VtZW50IGFuZA0KDQogICAgICByb3V0aW5nL290aGVy IHByb3RvY29scy4NCg0KRFJMPiBBcyBMaW5kYSBzYWlkLCB5b3Ugc2hvdWxkIGNsYXJpZnkgd2hh dCBpcyB0aGUgcHVycG9zZSBmb3IgdGhpcy4gVGhlIGludGVudCBvZiBJMk5TRiBpcyBub3QgdG8g ZGVmaW5lIG5ldyBzZWN1cml0eSBmdW5jdGlvbnMsIGJ1dCB0byBkZWZpbmUgYW4gaW50ZXJmYWNl IHRvIHRoZW0uIEFuZCBJ4oCZZCBzYXkgeW91IGFyZSBwcm9wb3NpbmcgdGhlIGRlZmluaXRpb24g b2YgYSBuZXcga2V5IG1hbmFnZW1lbnQgc2VydmljZSB0byBiZSB1c2VkIGJ5IHJvdXRpbmcgYW5k IG90aGVyIHByb3RvY29scy4NCg0KQmUgZ29vZGUsDQoNCi0tDQoiRXN0YSB2ZXogbm8gZmFsbGFy ZW1vcywgRG9jdG9yIEluZmllcm5vIg0KDQpEciBEaWVnbyBSLiBMb3Bleg0KVGVsZWZvbmljYSBJ K0QNCmh0dHA6Ly9wZW9wbGUudGlkLmVzL2RpZWdvLmxvcGV6Lw0KDQplLW1haWw6IGRpZWdvLnIu bG9wZXpAdGVsZWZvbmljYS5jb20NClRlbDogICAgKzM0IDkxMyAxMjkgMDQxDQpNb2JpbGU6ICsz NCA2ODIgMDUxIDA5MQ0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQoNCl9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQoNCkVzdGUgbWVuc2FqZSB5IHN1cyBhZGp1 bnRvcyBzZSBkaXJpZ2VuIGV4Y2x1c2l2YW1lbnRlIGEgc3UgZGVzdGluYXRhcmlvLCBwdWVkZSBj b250ZW5lciBpbmZvcm1hY2nDs24gcHJpdmlsZWdpYWRhIG8gY29uZmlkZW5jaWFsIHkgZXMgcGFy YSB1c28gZXhjbHVzaXZvIGRlIGxhIHBlcnNvbmEgbyBlbnRpZGFkIGRlIGRlc3Rpbm8uIFNpIG5v IGVzIHVzdGVkLiBlbCBkZXN0aW5hdGFyaW8gaW5kaWNhZG8sIHF1ZWRhIG5vdGlmaWNhZG8gZGUg cXVlIGxhIGxlY3R1cmEsIHV0aWxpemFjacOzbiwgZGl2dWxnYWNpw7NuIHkvbyBjb3BpYSBzaW4g YXV0b3JpemFjacOzbiBwdWVkZSBlc3RhciBwcm9oaWJpZGEgZW4gdmlydHVkIGRlIGxhIGxlZ2lz bGFjacOzbiB2aWdlbnRlLiBTaSBoYSByZWNpYmlkbyBlc3RlIG1lbnNhamUgcG9yIGVycm9yLCBs ZSByb2dhbW9zIHF1ZSBub3MgbG8gY29tdW5pcXVlIGlubWVkaWF0YW1lbnRlIHBvciBlc3RhIG1p c21hIHbDrWEgeSBwcm9jZWRhIGEgc3UgZGVzdHJ1Y2Npw7NuLg0KDQpUaGUgaW5mb3JtYXRpb24g Y29udGFpbmVkIGluIHRoaXMgdHJhbnNtaXNzaW9uIGlzIHByaXZpbGVnZWQgYW5kIGNvbmZpZGVu dGlhbCBpbmZvcm1hdGlvbiBpbnRlbmRlZCBvbmx5IGZvciB0aGUgdXNlIG9mIHRoZSBpbmRpdmlk dWFsIG9yIGVudGl0eSBuYW1lZCBhYm92ZS4gSWYgdGhlIHJlYWRlciBvZiB0aGlzIG1lc3NhZ2Ug aXMgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHlvdSBhcmUgaGVyZWJ5IG5vdGlmaWVkIHRo YXQgYW55IGRpc3NlbWluYXRpb24sIGRpc3RyaWJ1dGlvbiBvciBjb3B5aW5nIG9mIHRoaXMgY29t bXVuaWNhdGlvbiBpcyBzdHJpY3RseSBwcm9oaWJpdGVkLiBJZiB5b3UgaGF2ZSByZWNlaXZlZCB0 aGlzIHRyYW5zbWlzc2lvbiBpbiBlcnJvciwgZG8gbm90IHJlYWQgaXQuIFBsZWFzZSBpbW1lZGlh dGVseSByZXBseSB0byB0aGUgc2VuZGVyIHRoYXQgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyBjb21t dW5pY2F0aW9uIGluIGVycm9yIGFuZCB0aGVuIGRlbGV0ZSBpdC4NCg0KRXN0YSBtZW5zYWdlbSBl IHNldXMgYW5leG9zIHNlIGRpcmlnZW0gZXhjbHVzaXZhbWVudGUgYW8gc2V1IGRlc3RpbmF0w6Fy aW8sIHBvZGUgY29udGVyIGluZm9ybWHDp8OjbyBwcml2aWxlZ2lhZGEgb3UgY29uZmlkZW5jaWFs IGUgw6kgcGFyYSB1c28gZXhjbHVzaXZvIGRhIHBlc3NvYSBvdSBlbnRpZGFkZSBkZSBkZXN0aW5v LiBTZSBuw6NvIMOpIHZvc3NhIHNlbmhvcmlhIG8gZGVzdGluYXTDoXJpbyBpbmRpY2FkbywgZmlj YSBub3RpZmljYWRvIGRlIHF1ZSBhIGxlaXR1cmEsIHV0aWxpemHDp8OjbywgZGl2dWxnYcOnw6Nv IGUvb3UgY8OzcGlhIHNlbSBhdXRvcml6YcOnw6NvIHBvZGUgZXN0YXIgcHJvaWJpZGEgZW0gdmly dHVkZSBkYSBsZWdpc2xhw6fDo28gdmlnZW50ZS4gU2UgcmVjZWJldSBlc3RhIG1lbnNhZ2VtIHBv ciBlcnJvLCByb2dhbW9zLWxoZSBxdWUgbm9zIG8gY29tdW5pcXVlIGltZWRpYXRhbWVudGUgcG9y IGVzdGEgbWVzbWEgdmlhIGUgcHJvY2VkYSBhIHN1YSBkZXN0cnVpw6fDo28NCg== --_000_C9100DC81CD149A4AB60D5BCC60499F3telefonicacom_ Content-Type: text/html; charset="utf-8" Content-ID: <2F17DB9E681D9F4EBBBD24D6E3FDECF9@eurprd06.prod.outlook.com> Content-Transfer-Encoding: base64 PGh0bWw+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0i dGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjwvaGVhZD4NCjxib2R5IHN0eWxlPSJ3b3JkLXdy YXA6IGJyZWFrLXdvcmQ7IC13ZWJraXQtbmJzcC1tb2RlOiBzcGFjZTsgLXdlYmtpdC1saW5lLWJy ZWFrOiBhZnRlci13aGl0ZS1zcGFjZTsiIGNsYXNzPSIiPg0KSGksDQo8ZGl2IGNsYXNzPSIiPjxi ciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdiBjbGFzcz0iIj5BIGNvdXBsZSBvZiBjb21tZW50cyBp biBsaW5lIGJlbG934oCmPC9kaXY+DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxkaXY+ DQo8YmxvY2txdW90ZSB0eXBlPSJjaXRlIiBjbGFzcz0iIj4NCjxkaXYgY2xhc3M9IiI+T24gMjAg Tm92IDIwMTUsIGF0IDAzOjIyICwgQW5pbCBLdW1hciBTIE4gKFZSUCBOZXR3b3JrIEJMKSAmbHQ7 PGEgaHJlZj0ibWFpbHRvOmFuaWwuc25AaHVhd2VpLmNvbSIgY2xhc3M9IiI+YW5pbC5zbkBodWF3 ZWkuY29tPC9hPiZndDsgd3JvdGU6PC9kaXY+DQo8ZGl2IGNsYXNzPSIiPg0KPGRpdiBjbGFzcz0i V29yZFNlY3Rpb24xIiBzdHlsZT0icGFnZTogV29yZFNlY3Rpb24xOyBmb250LWZhbWlseTogTHVj aWRhR3JhbmRlOyBmb250LXNpemU6IDExcHg7IGZvbnQtc3R5bGU6IG5vcm1hbDsgZm9udC12YXJp YW50OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGxldHRlci1zcGFjaW5nOiBub3JtYWw7 IGxpbmUtaGVpZ2h0OiBub3JtYWw7IG9ycGhhbnM6IGF1dG87IHRleHQtYWxpZ246IHN0YXJ0OyB0 ZXh0LWluZGVudDogMHB4OyB0ZXh0LXRyYW5zZm9ybTogbm9uZTsgd2hpdGUtc3BhY2U6IG5vcm1h bDsgd2lkb3dzOiBhdXRvOyB3b3JkLXNwYWNpbmc6IDBweDsgLXdlYmtpdC10ZXh0LXN0cm9rZS13 aWR0aDogMHB4OyI+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQgMzZwdDsg Zm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgdGV4dC1p bmRlbnQ6IC0xOHB0OyIgY2xhc3M9IiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMnB0OyBm b250LWZhbWlseTogU3ltYm9sOyIgY2xhc3M9IiI+PHNwYW4gY2xhc3M9IiI+wrc8c3BhbiBzdHls ZT0iZm9udC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQ6IG5vcm1hbDsgZm9udC13ZWlnaHQ6 IG5vcm1hbDsgZm9udC1zaXplOiA3cHQ7IGxpbmUtaGVpZ2h0OiBub3JtYWw7IGZvbnQtZmFtaWx5 OiAnVGltZXMgTmV3IFJvbWFuJzsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxzcGFuIGNsYXNzPSJBcHBsZS1jb252ZXJ0ZWQtc3BhY2Ui PiZuYnNwOzwvc3Bhbj48L3NwYW4+PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OiAxMnB0OyBmb250LWZhbWlseTogJ0Jvb2ttYW4gT2xkIFN0eWxlJywgc2VyaWY7IiBjbGFzcz0i Ij5SZXF1aXJlbWVudHMNCiBMYW5ndWFnZSwgdGVybXMgYW5kIGFjcm9ueW1zIHNlY3Rpb24gOiBX ZSBuZWVkIHRvIGRlc2NyaWJlIGZvbGxvd2luZyBhYmJyZXZpYXRpb25zIHdoaWNoIGFyZSB1c2Vk IGluIHRoZSBkb2N1bWVudHMgYXMgaXQgdGhlIGZpcnN0IGRvY3VtZW50PG86cCBjbGFzcz0iIj48 L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7 IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1mYW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFz cz0iIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnQm9va21h biBPbGQgU3R5bGUnLCBzZXJpZjsiIGNsYXNzPSIiPnRvIGJlIHJlZmVycmVkIGJ5IGFueSBuZXdj b21lciBpbnRvIEkyTlNGIFdHPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8ZGl2 IHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTFwdDsgZm9udC1m YW1pbHk6IENhbGlicmksIHNhbnMtc2VyaWY7IiBjbGFzcz0iIj4NCjxzcGFuIHN0eWxlPSJmb250 LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnQm9va21hbiBPbGQgU3R5bGUnLCBzZXJpZjsiIGNs YXNzPSIiPiZuYnNwOzwvc3Bhbj48L2Rpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAw LjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJyaSwgc2Fucy1zZXJp ZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6 ICdCb29rbWFuIE9sZCBTdHlsZScsIHNlcmlmOyIgY2xhc3M9IiI+SVBTLCBJRFMsIEFDTCwgRldz LCBBQUEsIENBLCBWTkZwb29sLCBFdGPigKY8L3NwYW4+PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0K PC9ibG9ja3F1b3RlPg0KPGRpdj48YnIgY2xhc3M9IiI+DQo8L2Rpdj4NCjxkaXY+RFJMJmd0OyBJ IGRpc2FncmVlLiBUZXJtcyBsaWtlIElEUywgQUFBLCBBQ0wgb3IgQ0EgYXJlIHdlbGwgZGVmaW5l ZCBlbHNld2hlcmUsIGhhdmUgYmVlbiBvZiBjb21tb24gdXNhZ2UgZm9yIHF1aXRlIGEgd2hpbGUs IGFuZCB0aGVyZSBpcyBubyBhZHZhbnRhZ2UgaW4gcmVkZWZpbmluZyB0aGVtIGluIHRoaXMgZG9j dW1lbnQuIEZvciB3aGF0IGlzIHdvcnRoLCB3ZSBjb3VsZCBuZWVkIHRvIGRlZmluZSB0ZXJtcyBs aWtlIOKAnG5ldHdvcmvigJ0gb3Ig4oCcVENQ4oCd4oCmDQogVGhlcmUgbWF5IGJlIG90aGVycyBs aWtlIFZORnBvb2wgdGhhdCB3b3VsZCBuZWVkIGEgZGVmaW5pdGlvbiBiZWNhdXNlIHRoZXkgYXJl IGJ5IG5vIG1lYW5zIHdpZGVzcHJlYWQsIHRob3VnaCBpbiB0aG9zZSBjYXNlIHdlIHNob3VsZCBm aXJzdCBjb25zaWRlciB3aGV0aGVyIHRoZSB0ZXJtIG1ha2VzIHNlbnNlIGluIHRoZSBkb2N1bWVu dCwgd2hpY2ggSeKAmWQgc2F5IGl0IGlzIG5vdCB0aGUgY2FzZSBmb3Ig4oCcVk5GcG9vbOKAnSBp biBwYXJ0aWN1bGFyLjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPGJsb2NrcXVvdGUgdHlwZT0iY2l0 ZSIgY2xhc3M9IiI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiIHN0eWxlPSJwYWdlOiBXb3Jk U2VjdGlvbjE7IGZvbnQtZmFtaWx5OiBMdWNpZGFHcmFuZGU7IGZvbnQtc2l6ZTogMTFweDsgZm9u dC1zdHlsZTogbm9ybWFsOyBmb250LXZhcmlhbnQ6IG5vcm1hbDsgZm9udC13ZWlnaHQ6IG5vcm1h bDsgbGV0dGVyLXNwYWNpbmc6IG5vcm1hbDsgbGluZS1oZWlnaHQ6IG5vcm1hbDsgb3JwaGFuczog YXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5kZW50OiAwcHg7IHRleHQtdHJhbnNmb3Jt OiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRvd3M6IGF1dG87IHdvcmQtc3BhY2luZzog MHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7Ij4NCjxkaXYgc3R5bGU9Im1hcmdp bjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMXB0OyBmb250LWZhbWlseTogQ2FsaWJy aSwgc2Fucy1zZXJpZjsiIGNsYXNzPSIiPg0KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTJwdDsg Zm9udC1mYW1pbHk6ICdCb29rbWFuIE9sZCBTdHlsZScsIHNlcmlmOyIgY2xhc3M9IiI+PG86cCBj bGFzcz0iIj48L286cD48L3NwYW4+PC9kaXY+DQo8cHJlIHN0eWxlPSJtYXJnaW46IDBjbSAwY20g MC4wMDAxcHQgMzZwdDsgZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3 JzsgdGV4dC1pbmRlbnQ6IC0xOHB0OyIgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTog MTJwdDsgZm9udC1mYW1pbHk6IFN5bWJvbDsgY29sb3I6IHJnYigyMywgNTQsIDkzKTsiIGNsYXNz PSIiPjxzcGFuIGNsYXNzPSIiPsK3PHNwYW4gc3R5bGU9ImZvbnQtc3R5bGU6IG5vcm1hbDsgZm9u dC12YXJpYW50OiBub3JtYWw7IGZvbnQtd2VpZ2h0OiBub3JtYWw7IGZvbnQtc2l6ZTogN3B0OyBs aW5lLWhlaWdodDogbm9ybWFsOyBmb250LWZhbWlseTogJ1RpbWVzIE5ldyBSb21hbic7IiBjbGFz cz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPC9z cGFuPjwvc3Bhbj48L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1p bHk6ICdCb29rbWFuIE9sZCBTdHlsZScsIHNlcmlmOyBjb2xvcjogcmdiKDIzLCA1NCwgOTMpOyIg Y2xhc3M9IiI+QWRkaW5nIG5ldyBzZWN0aW9uIDo8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48 L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1zaXplOiAx MHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsiIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnQm9va21hbiBPbGQgU3R5bGUnLCBzZXJpZjsg Y29sb3I6IHJnYigyMywgNTQsIDkzKTsiIGNsYXNzPSIiPjMuMS45IExhY2sgb2YgbWVjaGFuaXNt IGZvciBLZXkgTWFuYWdlbWVudC9EZXRlcm1pbmlzdGljIEdlbmVyYXRpb24gYW5kIFByb3Zpc2lv bmluZyBmb3IgY29tbXVuaWNhdGluZyBwcm90b2NvbHM8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bh bj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1zaXpl OiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsiIGNsYXNzPSIiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnQm9va21hbiBPbGQgU3R5bGUnLCBzZXJp ZjsgY29sb3I6IHJnYigyMywgNTQsIDkzKTsiIGNsYXNzPSIiPiZuYnNwOzwvc3Bhbj48L3ByZT4N CjxwcmUgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMHB0OyBm b250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsiIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnQm9va21hbiBPbGQgU3R5bGUnLCBzZXJpZjsgY29sb3I6 IHJnYigyMywgNTQsIDkzKTsiIGNsYXNzPSIiPlRoZXJlIGlzIGEgbmVlZCBmb3IgYSBmcmFtZXdv cmsvZGF0YSBtb2RlbCBmb3IgYSBrZXkgbWFuYWdlbWVudCBwcm90b2NvbCB0aGF0IG1heSBiZSB1 c2VkIHRvIGNyZWF0ZSBhbmQgbWFuYWdlIHNlc3Npb248bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bh bj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1zaXpl OiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsgcGFnZS1icmVhay1iZWZvcmU6IGFs d2F5czsiIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5 OiAnQm9va21hbiBPbGQgU3R5bGUnLCBzZXJpZjsgY29sb3I6IHJnYigyMywgNTQsIDkzKTsiIGNs YXNzPSIiPmtleXMgZm9yIG1lc3NhZ2UgYXV0aGVudGljYXRpb24gYW5kIGludGVncml0eS4gQXMg b2Ygbm93IHRoZXJlIGlzIG5vIG11Y2ggZm9jdXMgb24gYW4gYWJzdHJhY3Rpb24gZm9yIGtleWlu ZyBpbmZvcm1hdGlvbiB0aGF0IGRlc2NyaWJlcyB0aGUgaW50ZXJmYWNlPG86cCBjbGFzcz0iIj48 L286cD48L3NwYW4+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7 IGZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IHBhZ2UtYnJlYWst YmVmb3JlOiBhbHdheXM7IiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMnB0OyBm b250LWZhbWlseTogJ0Jvb2ttYW4gT2xkIFN0eWxlJywgc2VyaWY7IGNvbG9yOiByZ2IoMjMsIDU0 LCA5Myk7IiBjbGFzcz0iIj5iZXR3ZWVuIHByb3RvY29scywgb3BlcmF0b3JzLCBhbmQgYXV0b21h dGVkIGtleSBtYW5hZ2VtZW50LjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHBy ZSBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDEwcHQ7IGZvbnQt ZmFtaWx5OiAnQ291cmllciBOZXcnOyBwYWdlLWJyZWFrLWJlZm9yZTogYWx3YXlzOyIgY2xhc3M9 IiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdCb29rbWFuIE9s ZCBTdHlsZScsIHNlcmlmOyBjb2xvcjogcmdiKDIzLCA1NCwgOTMpOyIgY2xhc3M9IiI+Jm5ic3A7 PC9zcGFuPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDAuMDAwMXB0OyBmb250 LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyBwYWdlLWJyZWFrLWJlZm9y ZTogYWx3YXlzOyIgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTJwdDsgZm9udC1m YW1pbHk6ICdCb29rbWFuIE9sZCBTdHlsZScsIHNlcmlmOyBjb2xvcjogcmdiKDIzLCA1NCwgOTMp OyIgY2xhc3M9IiI+SW4gTWFyY2ggMjAwNiwgdGhlIEludGVybmV0IEFyY2hpdGVjdHVyZSBCb2Fy ZCAoSUFCKSBoZWxkIGEgd29ya3Nob3A8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3ByZT4N CjxwcmUgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMHB0OyBm b250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsgcGFnZS1icmVhay1iZWZvcmU6IGFsd2F5czsiIGNs YXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnQm9va21h biBPbGQgU3R5bGUnLCBzZXJpZjsgY29sb3I6IHJnYigyMywgNTQsIDkzKTsiIGNsYXNzPSIiPm9u IHRoZSB0b3BpYyBvZiAmcXVvdDtVbndhbnRlZCBJbnRlcm5ldCBUcmFmZmljJnF1b3Q7LiZuYnNw OyBUaGUgcmVwb3J0IGZyb20gdGhhdCB3b3Jrc2hvcCBpcyBkb2N1bWVudGVkIGluIFJGQyA0OTQ4 IFtSRkM0OTQ4XS4gPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlIHN0eWxl PSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6 ICdDb3VyaWVyIE5ldyc7IHBhZ2UtYnJlYWstYmVmb3JlOiBhbHdheXM7IiBjbGFzcz0iIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ0Jvb2ttYW4gT2xkIFN0eWxl Jywgc2VyaWY7IGNvbG9yOiByZ2IoMjMsIDU0LCA5Myk7IiBjbGFzcz0iIj5TZWN0aW9uIDguMSBv ZiB0aGF0IGRvY3VtZW50IHN0YXRlcyB0aGF0ICZxdW90O0Egc2ltcGxlIHJpc2sgYW5hbHlzaXMg d291bGQgc3VnZ2VzdCB0aGF0IGFuIGlkZWFsIGF0dGFjayB0YXJnZXQgb2YgbWluaW1hbCA8bzpw IGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbjogMGNtIDBj bSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3Jzsg cGFnZS1icmVhay1iZWZvcmU6IGFsd2F5czsiIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnQm9va21hbiBPbGQgU3R5bGUnLCBzZXJpZjsgY29sb3I6 IHJnYigyMywgNTQsIDkzKTsiIGNsYXNzPSIiPmNvc3QgYnV0IG1heGltYWwgZGlzcnVwdGlvbiBp cyB0aGUgY29yZSByb3V0aW5nIGluZnJhc3RydWN0dXJlJnF1b3Q7LiZuYnNwOyBTZWN0aW9uIDgu MiBjYWxscyBmb3IgJnF1b3Q7VGlnaHRlbmluZyB0aGUgc2VjdXJpdHkgb2YgPG86cCBjbGFzcz0i Ij48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAx cHQ7IGZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IHBhZ2UtYnJl YWstYmVmb3JlOiBhbHdheXM7IiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMnB0 OyBmb250LWZhbWlseTogJ0Jvb2ttYW4gT2xkIFN0eWxlJywgc2VyaWY7IGNvbG9yOiByZ2IoMjMs IDU0LCA5Myk7IiBjbGFzcz0iIj50aGUgY29yZSByb3V0aW5nIGluZnJhc3RydWN0dXJlJnF1b3Q7 LiZuYnNwOyA8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmUgc3R5bGU9Im1h cmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0Nv dXJpZXIgTmV3JzsgcGFnZS1icmVhay1iZWZvcmU6IGFsd2F5czsiIGNsYXNzPSIiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnQm9va21hbiBPbGQgU3R5bGUnLCBz ZXJpZjsgY29sb3I6IHJnYigyMywgNTQsIDkzKTsiIGNsYXNzPSIiPiZuYnNwOzwvc3Bhbj48L3By ZT4NCjxwcmUgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMHB0 OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsgcGFnZS1icmVhay1iZWZvcmU6IGFsd2F5czsi IGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnQm9v a21hbiBPbGQgU3R5bGUnLCBzZXJpZjsgY29sb3I6IHJnYigyMywgNTQsIDkzKTsiIGNsYXNzPSIi Pk9uZSBvZiB0aGUgZm91ciBtYWluIHN0ZXBzIHdlcmUgaWRlbnRpZmllZCBmb3IgdGhhdCB0aWdo dGVuaW5nIHRoZSBzZWN1cml0eSBmb3IgdGhlIHByb3RvY29sIHBhY2tldHMgb24gdGhlIHdpcmUu PG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW46IDBj bSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5l dyc7IHBhZ2UtYnJlYWstYmVmb3JlOiBhbHdheXM7IiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ0Jvb2ttYW4gT2xkIFN0eWxlJywgc2VyaWY7IGNv bG9yOiByZ2IoMjMsIDU0LCA5Myk7IiBjbGFzcz0iIj5JdCBpcyBjb25jZXJuZWQgd2l0aCBndWlk ZWxpbmVzIGZvciBkZXNjcmliaW5nIGlzc3VlcyBhbmQgdGVjaG5pcXVlcyBmb3IgcHJvdGVjdGlu ZyB0aGUgbWVzc2FnZXMgYmV0d2VlbiBkaXJlY3RseSBjb21tdW5pY2F0aW5nIHBlZXJzLjxvOnAg Y2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luOiAwY20gMGNt IDAuMDAwMXB0OyBmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyBw YWdlLWJyZWFrLWJlZm9yZTogYWx3YXlzOyIgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdCb29rbWFuIE9sZCBTdHlsZScsIHNlcmlmOyIgY2xhc3M9 IiI+Jm5ic3A7PC9zcGFuPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDAuMDAw MXB0OyBmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyBwYWdlLWJy ZWFrLWJlZm9yZTogYWx3YXlzOyIgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTJw dDsgZm9udC1mYW1pbHk6ICdCb29rbWFuIE9sZCBTdHlsZScsIHNlcmlmOyBjb2xvcjogcmdiKDIz LCA1NCwgOTMpOyIgY2xhc3M9IiI+Q29uY2VwdHVhbGx5LCB3aGVuIHJvdXRpbmcgcHJvdG9jb2xz IHNlbmQgb3IgcmVjZWl2ZSBtZXNzYWdlcywgdGhleTxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFu PjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDAuMDAwMXB0OyBmb250LXNpemU6 IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyBwYWdlLWJyZWFrLWJlZm9yZTogYWx3 YXlzOyIgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6 ICdCb29rbWFuIE9sZCBTdHlsZScsIHNlcmlmOyBjb2xvcjogcmdiKDIzLCA1NCwgOTMpOyIgY2xh c3M9IiI+Jm5ic3A7Jm5ic3A7IG1pZ2h0IG5lZWQgdG8gbG9vayB1cCB0aGUga2V5IHRvIHVzZSBp biB0aGlzIGFic3RyYWN0IGtleSB0YWJsZS48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3By ZT4NCjxwcmUgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMHB0 OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsgcGFnZS1icmVhay1iZWZvcmU6IGFsd2F5czsi IGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnQm9v a21hbiBPbGQgU3R5bGUnLCBzZXJpZjsgY29sb3I6IHJnYigyMywgNTQsIDkzKTsiIGNsYXNzPSIi PiZuYnNwOyZuYnNwOyBDb25jZXB0dWFsbHksIHRoZXJlIG11c3QgYmUgYW4gaW50ZXJmYWNlIGRl ZmluZWQgZm9yIGEgcHJvdG9jb2xzIHRvPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wcmU+ DQo8cHJlIHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTBwdDsg Zm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IHBhZ2UtYnJlYWstYmVmb3JlOiBhbHdheXM7IiBj bGFzcz0iIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ0Jvb2tt YW4gT2xkIFN0eWxlJywgc2VyaWY7IGNvbG9yOiByZ2IoMjMsIDU0LCA5Myk7IiBjbGFzcz0iIj4m bmJzcDsmbmJzcDsgbWFrZSByZXF1ZXN0cyBvZiBhdXRvbWF0ZWQga2V5IG1hbmFnZW1lbnQgd2hl biBpdCBpcyBiZWluZyB1c2VkOyB3aGVuPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wcmU+ DQo8cHJlIHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTBwdDsg Zm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IHBhZ2UtYnJlYWstYmVmb3JlOiBhbHdheXM7IiBj bGFzcz0iIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ0Jvb2tt YW4gT2xkIFN0eWxlJywgc2VyaWY7IGNvbG9yOiByZ2IoMjMsIDU0LCA5Myk7IiBjbGFzcz0iIj4m bmJzcDsmbmJzcDsga2V5cyBiZWNvbWUgYXZhaWxhYmxlLCB0aGV5IG1pZ2h0IGJlIG1hZGUgYXZh aWxhYmxlIGluIHRoZSBrZXkgdGFibGUuPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wcmU+ DQo8cHJlIHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTBwdDsg Zm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IHBhZ2UtYnJlYWstYmVmb3JlOiBhbHdheXM7IiBj bGFzcz0iIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ0Jvb2tt YW4gT2xkIFN0eWxlJywgc2VyaWY7IGNvbG9yOiByZ2IoMjMsIDU0LCA5Myk7IiBjbGFzcz0iIj4m bmJzcDsmbmJzcDsgVGhlcmUgbWlnaHQgbm90IGJlIGFueSByZXF1aXJlbWVudCB0aGF0IHRoaXMg YWJzdHJhY3Rpb24gYmUgdXNlZCBmb3I8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3ByZT4N CjxwcmUgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMHB0OyBm b250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsgcGFnZS1icmVhay1iZWZvcmU6IGFsd2F5czsiIGNs YXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnQm9va21h biBPbGQgU3R5bGUnLCBzZXJpZjsgY29sb3I6IHJnYigyMywgNTQsIDkzKTsiIGNsYXNzPSIiPiZu YnNwOyZuYnNwOyBpbXBsZW1lbnRhdGlvbjo8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3By ZT4NCjxwcmUgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMHB0 OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsgcGFnZS1icmVhay1iZWZvcmU6IGFsd2F5czsi IGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnQm9v a21hbiBPbGQgU3R5bGUnLCBzZXJpZjsgY29sb3I6IHJnYigyMywgNTQsIDkzKTsiIGNsYXNzPSIi PiZuYnNwOzwvc3Bhbj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFw dDsgZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsgcGFnZS1icmVh ay1iZWZvcmU6IGFsd2F5czsiIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEycHQ7 IGZvbnQtZmFtaWx5OiAnQm9va21hbiBPbGQgU3R5bGUnLCBzZXJpZjsgY29sb3I6IHJnYigyMywg NTQsIDkzKTsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwOyAxKSBJMk5TRiBuZWVkIHRvIGRlc2lnbiB0 aGUga2V5IHRhYmxlIGFic3RyYWN0aW9uLCB0aGUgaW50ZXJmYWNlIGJldHdlZW48bzpwIGNsYXNz PSIiPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAw MDFwdDsgZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsgcGFnZS1i cmVhay1iZWZvcmU6IGFsd2F5czsiIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEy cHQ7IGZvbnQtZmFtaWx5OiAnQm9va21hbiBPbGQgU3R5bGUnLCBzZXJpZjsgY29sb3I6IHJnYigy MywgNTQsIDkzKTsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBrZXkg bWFuYWdlbWVudCBwcm90b2NvbHMgYW5kIHJvdXRpbmcvb3RoZXIgcHJvdG9jb2xzLCBhbmQgcG9z c2libHk8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdp bjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJp ZXIgTmV3JzsgcGFnZS1icmVhay1iZWZvcmU6IGFsd2F5czsiIGNsYXNzPSIiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnQm9va21hbiBPbGQgU3R5bGUnLCBzZXJp ZjsgY29sb3I6IHJnYigyMywgNTQsIDkzKTsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyBzZWN1cml0eSBwcm90b2NvbHMgYXQgb3RoZXIgbGF5ZXJzLjxvOnAgY2xhc3M9 IiI+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDAuMDAw MXB0OyBmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyBwYWdlLWJy ZWFrLWJlZm9yZTogYWx3YXlzOyIgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTJw dDsgZm9udC1mYW1pbHk6ICdCb29rbWFuIE9sZCBTdHlsZScsIHNlcmlmOyBjb2xvcjogcmdiKDIz LCA1NCwgOTMpOyIgY2xhc3M9IiI+Jm5ic3A7PC9zcGFuPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFy Z2luOiAwY20gMGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291 cmllciBOZXcnOyBwYWdlLWJyZWFrLWJlZm9yZTogYWx3YXlzOyIgY2xhc3M9IiI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdCb29rbWFuIE9sZCBTdHlsZScsIHNl cmlmOyBjb2xvcjogcmdiKDIzLCA1NCwgOTMpOyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7IDIpIEZv ciBlYWNoIHJvdXRpbmcvb3RoZXIgcHJvdG9jb2wsIEkyTlNGIG5lZWQgdG8gZGVmaW5lIHRoZSBt YXBwaW5nIGJldHdlZW48bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmUgc3R5 bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWls eTogJ0NvdXJpZXIgTmV3JzsgcGFnZS1icmVhay1iZWZvcmU6IGFsd2F5czsiIGNsYXNzPSIiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnQm9va21hbiBPbGQgU3R5 bGUnLCBzZXJpZjsgY29sb3I6IHJnYigyMywgNTQsIDkzKTsiIGNsYXNzPSIiPiZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyBob3cgdGhlIHByb3RvY29sIHJlcHJlc2VudHMga2V5IG1hdGVy aWFsIGFuZCB0aGUgcHJvdG9jb2wtPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wcmU+DQo8 cHJlIHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTBwdDsgZm9u dC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IHBhZ2UtYnJlYWstYmVmb3JlOiBhbHdheXM7IiBjbGFz cz0iIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ0Jvb2ttYW4g T2xkIFN0eWxlJywgc2VyaWY7IGNvbG9yOiByZ2IoMjMsIDU0LCA5Myk7IiBjbGFzcz0iIj4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgaW5kZXBlbmRlbnQga2V5IHRhYmxlIGFic3RyYWN0 aW9uLiZuYnNwOyBXaGVuIHJvdXRpbmcvb3RoZXIgcHJvdG9jb2xzIHNoYXJlIGE8bzpwIGNsYXNz PSIiPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbjogMGNtIDBjbSAwLjAw MDFwdDsgZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIgTmV3JzsgcGFnZS1i cmVhay1iZWZvcmU6IGFsd2F5czsiIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6IDEy cHQ7IGZvbnQtZmFtaWx5OiAnQm9va21hbiBPbGQgU3R5bGUnLCBzZXJpZjsgY29sb3I6IHJnYigy MywgNTQsIDkzKTsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBjb21t b24gbWVjaGFuaXNtIGZvciBhdXRoZW50aWNhdGlvbiwgc3VjaCBhcyB0aGUgVENQPG86cCBjbGFz cz0iIj48L286cD48L3NwYW4+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4w MDAxcHQ7IGZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IHBhZ2Ut YnJlYWstYmVmb3JlOiBhbHdheXM7IiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAx MnB0OyBmb250LWZhbWlseTogJ0Jvb2ttYW4gT2xkIFN0eWxlJywgc2VyaWY7IGNvbG9yOiByZ2Io MjMsIDU0LCA5Myk7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgQXV0 aGVudGljYXRpb24gT3B0aW9uLCB0aGUgc2FtZSBtYXBwaW5nIGlzIGxpa2VseSB0byBiZSByZXVz ZWQ8bzpwIGNsYXNzPSIiPjwvbzpwPjwvc3Bhbj48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbjog MGNtIDBjbSAwLjAwMDFwdDsgZm9udC1zaXplOiAxMHB0OyBmb250LWZhbWlseTogJ0NvdXJpZXIg TmV3JzsgcGFnZS1icmVhay1iZWZvcmU6IGFsd2F5czsiIGNsYXNzPSIiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6IDEycHQ7IGZvbnQtZmFtaWx5OiAnQm9va21hbiBPbGQgU3R5bGUnLCBzZXJpZjsg Y29sb3I6IHJnYigyMywgNTQsIDkzKTsiIGNsYXNzPSIiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyBiZXR3ZWVuIHByb3RvY29scy4mbmJzcDsgQW4gaW1wbGVtZW50YXRpb24gbWF5IGJl IGFibGUgdG8gbW92ZSBtdWNoIG9mPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wcmU+DQo8 cHJlIHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7IGZvbnQtc2l6ZTogMTBwdDsgZm9u dC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IHBhZ2UtYnJlYWstYmVmb3JlOiBhbHdheXM7IiBjbGFz cz0iIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMnB0OyBmb250LWZhbWlseTogJ0Jvb2ttYW4g T2xkIFN0eWxlJywgc2VyaWY7IGNvbG9yOiByZ2IoMjMsIDU0LCA5Myk7IiBjbGFzcz0iIj4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgdGhlIGtleWluZyBsb2dpYyBpbnRvIGNvZGUgcmVs YXRlZCB0byB0aGlzIHNoYXJlZCBhdXRoZW50aWNhdGlvbjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9z cGFuPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDAuMDAwMXB0OyBmb250LXNp emU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyBwYWdlLWJyZWFrLWJlZm9yZTog YWx3YXlzOyIgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1p bHk6ICdCb29rbWFuIE9sZCBTdHlsZScsIHNlcmlmOyBjb2xvcjogcmdiKDIzLCA1NCwgOTMpOyIg Y2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHByaW1pdGl2ZSByYXRoZXIg dGhhbiBjb2RlIHNwZWNpZmljIHRvIHJvdXRpbmcvb3RoZXIgcHJvdG9jb2xzLjxvOnAgY2xhc3M9 IiI+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDAuMDAw MXB0OyBmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyBwYWdlLWJy ZWFrLWJlZm9yZTogYWx3YXlzOyIgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTJw dDsgZm9udC1mYW1pbHk6ICdCb29rbWFuIE9sZCBTdHlsZScsIHNlcmlmOyBjb2xvcjogcmdiKDIz LCA1NCwgOTMpOyIgY2xhc3M9IiI+Jm5ic3A7PC9zcGFuPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFy Z2luOiAwY20gMGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291 cmllciBOZXcnOyBwYWdlLWJyZWFrLWJlZm9yZTogYWx3YXlzOyIgY2xhc3M9IiI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdCb29rbWFuIE9sZCBTdHlsZScsIHNl cmlmOyBjb2xvcjogcmdiKDIzLCA1NCwgOTMpOyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7IDMpIFdo ZW4gZGVzaWduaW5nIGF1dG9tYXRlZCBrZXkgbWFuYWdlbWVudCBmb3IgYm90aCBzeW1tZXRyaWMg a2V5czxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHByZSBzdHlsZT0ibWFyZ2lu OiAwY20gMGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDEwcHQ7IGZvbnQtZmFtaWx5OiAnQ291cmll ciBOZXcnOyBwYWdlLWJyZWFrLWJlZm9yZTogYWx3YXlzOyIgY2xhc3M9IiI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdCb29rbWFuIE9sZCBTdHlsZScsIHNlcmlm OyBjb2xvcjogcmdiKDIzLCA1NCwgOTMpOyIgY2xhc3M9IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7IGFuZCBncm91cCBrZXlzLCB3ZSB3aWxsIG9ubHkgbmVlZCB0byB1c2UgdGhlIGFi c3RyYWN0aW9ucyBkZXNpZ25lZCBiYXNlZCBvbjxvOnAgY2xhc3M9IiI+PC9vOnA+PC9zcGFuPjwv cHJlPg0KPHByZSBzdHlsZT0ibWFyZ2luOiAwY20gMGNtIDAuMDAwMXB0OyBmb250LXNpemU6IDEw cHQ7IGZvbnQtZmFtaWx5OiAnQ291cmllciBOZXcnOyBwYWdlLWJyZWFrLWJlZm9yZTogYWx3YXlz OyIgY2xhc3M9IiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogMTJwdDsgZm9udC1mYW1pbHk6ICdC b29rbWFuIE9sZCBTdHlsZScsIHNlcmlmOyBjb2xvcjogcmdiKDIzLCA1NCwgOTMpOyIgY2xhc3M9 IiI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHBvaW50IDEgYWJvdmUgdG8gY29tbXVu aWNhdGUgYmV0d2VlbiBhdXRvbWF0ZWQga2V5IG1hbmFnZW1lbnQgYW5kPG86cCBjbGFzcz0iIj48 L286cD48L3NwYW4+PC9wcmU+DQo8cHJlIHN0eWxlPSJtYXJnaW46IDBjbSAwY20gMC4wMDAxcHQ7 IGZvbnQtc2l6ZTogMTBwdDsgZm9udC1mYW1pbHk6ICdDb3VyaWVyIE5ldyc7IHBhZ2UtYnJlYWst YmVmb3JlOiBhbHdheXM7IiBjbGFzcz0iIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOiAxMnB0OyBm b250LWZhbWlseTogJ0Jvb2ttYW4gT2xkIFN0eWxlJywgc2VyaWY7IGNvbG9yOiByZ2IoMjMsIDU0 LCA5Myk7IiBjbGFzcz0iIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgcm91dGluZy9v dGhlciBwcm90b2NvbHMuPG86cCBjbGFzcz0iIj48L286cD48L3NwYW4+PC9wcmU+DQo8L2Rpdj4N CjwvYmxvY2txdW90ZT4NCjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KPGRpdj5EUkwmZ3Q7IEFzIExp bmRhIHNhaWQsIHlvdSBzaG91bGQgY2xhcmlmeSB3aGF0IGlzIHRoZSBwdXJwb3NlIGZvciB0aGlz LiBUaGUgaW50ZW50IG9mIEkyTlNGIGlzIG5vdCB0byBkZWZpbmUgbmV3IHNlY3VyaXR5IGZ1bmN0 aW9ucywgYnV0IHRvIGRlZmluZSBhbiBpbnRlcmZhY2UgdG8gdGhlbS4gQW5kIEnigJlkIHNheSB5 b3UgYXJlIHByb3Bvc2luZyB0aGUgZGVmaW5pdGlvbiBvZiBhIG5ldyBrZXkgbWFuYWdlbWVudCBz ZXJ2aWNlIHRvIGJlIHVzZWQNCiBieSByb3V0aW5nIGFuZCBvdGhlciBwcm90b2NvbHMuPC9kaXY+ DQo8ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjwvZGl2Pg0KQmUgZ29vZGUsPC9kaXY+DQo8 ZGl2IGNsYXNzPSIiPjxiciBjbGFzcz0iIj4NCjxkaXYgYXBwbGUtY29udGVudC1lZGl0ZWQ9InRy dWUiIGNsYXNzPSIiPg0KPGRpdiBzdHlsZT0iY29sb3I6IHJnYigwLCAwLCAwKTsgbGV0dGVyLXNw YWNpbmc6IG5vcm1hbDsgb3JwaGFuczogYXV0bzsgdGV4dC1hbGlnbjogc3RhcnQ7IHRleHQtaW5k ZW50OiAwcHg7IHRleHQtdHJhbnNmb3JtOiBub25lOyB3aGl0ZS1zcGFjZTogbm9ybWFsOyB3aWRv d3M6IGF1dG87IHdvcmQtc3BhY2luZzogMHB4OyAtd2Via2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAw cHg7IHdvcmQtd3JhcDogYnJlYWstd29yZDsgLXdlYmtpdC1uYnNwLW1vZGU6IHNwYWNlOyAtd2Vi a2l0LWxpbmUtYnJlYWs6IGFmdGVyLXdoaXRlLXNwYWNlOyIgY2xhc3M9IiI+DQotLTxiciBjbGFz cz0iIj4NCiZxdW90O0VzdGEgdmV6IG5vIGZhbGxhcmVtb3MsIERvY3RvciBJbmZpZXJubyZxdW90 OzxiciBjbGFzcz0iIj4NCjxiciBjbGFzcz0iIj4NCkRyIERpZWdvIFIuIExvcGV6PGJyIGNsYXNz PSIiPg0KVGVsZWZvbmljYSBJJiM0MztEPGJyIGNsYXNzPSIiPg0KPGEgaHJlZj0iaHR0cDovL3Bl b3BsZS50aWQuZXMvZGllZ28ubG9wZXovIiBjbGFzcz0iIj5odHRwOi8vcGVvcGxlLnRpZC5lcy9k aWVnby5sb3Blei88L2E+PGJyIGNsYXNzPSIiPg0KPGJyIGNsYXNzPSIiPg0KZS1tYWlsOiBkaWVn by5yLmxvcGV6QHRlbGVmb25pY2EuY29tPGJyIGNsYXNzPSIiPg0KVGVsOiAmbmJzcDsgJm5ic3A7 JiM0MzszNCA5MTMgMTI5IDA0MTxiciBjbGFzcz0iIj4NCk1vYmlsZTogJiM0MzszNCA2ODIgMDUx IDA5MTxiciBjbGFzcz0iIj4NCi0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS08L2Rp dj4NCjwvZGl2Pg0KPGJyIGNsYXNzPSIiPg0KPC9kaXY+DQo8YnI+DQo8aHI+DQo8Zm9udCBmYWNl PSJBcmlhbCIgY29sb3I9IkdyYXkiIHNpemU9IjEiPjxicj4NCkVzdGUgbWVuc2FqZSB5IHN1cyBh ZGp1bnRvcyBzZSBkaXJpZ2VuIGV4Y2x1c2l2YW1lbnRlIGEgc3UgZGVzdGluYXRhcmlvLCBwdWVk ZSBjb250ZW5lciBpbmZvcm1hY2nDs24gcHJpdmlsZWdpYWRhIG8gY29uZmlkZW5jaWFsIHkgZXMg cGFyYSB1c28gZXhjbHVzaXZvIGRlIGxhIHBlcnNvbmEgbyBlbnRpZGFkIGRlIGRlc3Rpbm8uIFNp IG5vIGVzIHVzdGVkLiBlbCBkZXN0aW5hdGFyaW8gaW5kaWNhZG8sIHF1ZWRhIG5vdGlmaWNhZG8g ZGUgcXVlIGxhDQogbGVjdHVyYSwgdXRpbGl6YWNpw7NuLCBkaXZ1bGdhY2nDs24geS9vIGNvcGlh IHNpbiBhdXRvcml6YWNpw7NuIHB1ZWRlIGVzdGFyIHByb2hpYmlkYSBlbiB2aXJ0dWQgZGUgbGEg bGVnaXNsYWNpw7NuIHZpZ2VudGUuIFNpIGhhIHJlY2liaWRvIGVzdGUgbWVuc2FqZSBwb3IgZXJy b3IsIGxlIHJvZ2Ftb3MgcXVlIG5vcyBsbyBjb211bmlxdWUgaW5tZWRpYXRhbWVudGUgcG9yIGVz dGEgbWlzbWEgdsOtYSB5IHByb2NlZGEgYSBzdSBkZXN0cnVjY2nDs24uPGJyPg0KPGJyPg0KVGhl IGluZm9ybWF0aW9uIGNvbnRhaW5lZCBpbiB0aGlzIHRyYW5zbWlzc2lvbiBpcyBwcml2aWxlZ2Vk IGFuZCBjb25maWRlbnRpYWwgaW5mb3JtYXRpb24gaW50ZW5kZWQgb25seSBmb3IgdGhlIHVzZSBv ZiB0aGUgaW5kaXZpZHVhbCBvciBlbnRpdHkgbmFtZWQgYWJvdmUuIElmIHRoZSByZWFkZXIgb2Yg dGhpcyBtZXNzYWdlIGlzIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCB5b3UgYXJlIGhlcmVi eSBub3RpZmllZCB0aGF0IGFueSBkaXNzZW1pbmF0aW9uLA0KIGRpc3RyaWJ1dGlvbiBvciBjb3B5 aW5nIG9mIHRoaXMgY29tbXVuaWNhdGlvbiBpcyBzdHJpY3RseSBwcm9oaWJpdGVkLiBJZiB5b3Ug aGF2ZSByZWNlaXZlZCB0aGlzIHRyYW5zbWlzc2lvbiBpbiBlcnJvciwgZG8gbm90IHJlYWQgaXQu IFBsZWFzZSBpbW1lZGlhdGVseSByZXBseSB0byB0aGUgc2VuZGVyIHRoYXQgeW91IGhhdmUgcmVj ZWl2ZWQgdGhpcyBjb21tdW5pY2F0aW9uIGluIGVycm9yIGFuZCB0aGVuIGRlbGV0ZSBpdC48YnI+ DQo8YnI+DQpFc3RhIG1lbnNhZ2VtIGUgc2V1cyBhbmV4b3Mgc2UgZGlyaWdlbSBleGNsdXNpdmFt ZW50ZSBhbyBzZXUgZGVzdGluYXTDoXJpbywgcG9kZSBjb250ZXIgaW5mb3JtYcOnw6NvIHByaXZp bGVnaWFkYSBvdSBjb25maWRlbmNpYWwgZSDDqSBwYXJhIHVzbyBleGNsdXNpdm8gZGEgcGVzc29h IG91IGVudGlkYWRlIGRlIGRlc3Rpbm8uIFNlIG7Do28gw6kgdm9zc2Egc2VuaG9yaWEgbyBkZXN0 aW5hdMOhcmlvIGluZGljYWRvLCBmaWNhIG5vdGlmaWNhZG8gZGUgcXVlIGENCiBsZWl0dXJhLCB1 dGlsaXphw6fDo28sIGRpdnVsZ2HDp8OjbyBlL291IGPDs3BpYSBzZW0gYXV0b3JpemHDp8OjbyBw b2RlIGVzdGFyIHByb2liaWRhIGVtIHZpcnR1ZGUgZGEgbGVnaXNsYcOnw6NvIHZpZ2VudGUuIFNl IHJlY2ViZXUgZXN0YSBtZW5zYWdlbSBwb3IgZXJybywgcm9nYW1vcy1saGUgcXVlIG5vcyBvIGNv bXVuaXF1ZSBpbWVkaWF0YW1lbnRlIHBvciBlc3RhIG1lc21hIHZpYSBlIHByb2NlZGEgYSBzdWEg ZGVzdHJ1acOnw6NvPGJyPg0KPC9mb250Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_C9100DC81CD149A4AB60D5BCC60499F3telefonicacom_-- From nobody Sat Nov 21 11:09:18 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3AE531B2A4C for ; Sat, 21 Nov 2015 11:09:16 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.585 X-Spam-Level: X-Spam-Status: No, score=-7.585 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-0.585, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3MLKBDpJU8i4 for ; Sat, 21 Nov 2015 11:09:13 -0800 (PST) Received: from mail.f5.com (mail.f5.com [208.85.209.139]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EA66F1B2A3E for ; Sat, 21 Nov 2015 11:09:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=f5.com; i=@f5.com; q=dns/txt; s=seattle; t=1448132953; x=1479668953; h=from:to:cc:subject:date:message-id:references: in-reply-to:mime-version; bh=hWHKejT16ZeQlQRPpFIOHMQ5r4Bt/HuaSwh0mwE2ZeI=; b=ZLpStq4Z/qCymy/rakfU2Bl6PZYjJR3z61YbEDs8b/ddrZ3hin/Z0JDM pRSlx8A7RbQI8VhSOETcCnctOF7mQufiPDFv6CEaXUVC7uqbpZFY+yS+N 0P3m8r2eeeg/FiLgSJ4HBJX2P8wEMRT+1P0xo3H+mZ/tWPKs/XvKb6hgU o=; X-IronPort-AV: E=Sophos;i="5.20,329,1444694400"; d="scan'208,217";a="189668900" X-IPAS-Result: A2CmBAB2wFBW/+sKqMBeGQEBAQEPAQEBAYI+gSBvt2mJFwEDFwEJhW4CgXwBAQEBAQGBC4Q1AQEBAwEBAWsLEAIBCBImAQYHJwIJFAMOAQEEDgWIO789AQEBAQEBAQECAQEBAQEBAQEBAQEYhlSCEIJuhQiDHIEVBYdHAo8HhSSGMYM3SYN3gyWTCxGCYx2BVnIBhSoBAQE Received: from oracle-apps.f5net.com (HELO exchmail.f5net.com) ([192.168.10.235]) by mail.f5.com with ESMTP/TLS/AES256-SHA; 21 Nov 2015 19:09:11 +0000 Received: from SEAEXCHMBX02.olympus.F5Net.com (192.168.15.224) by seaexchmbx03.olympus.F5Net.com (192.168.15.225) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Sat, 21 Nov 2015 11:09:10 -0800 Received: from SEAEXCHMBX02.olympus.F5Net.com ([fe80::dd5e:c398:17d9:927f]) by seaexchmbx02.olympus.F5Net.com ([fe80::dd5e:c398:17d9:927f%13]) with mapi id 15.00.1130.005; Sat, 21 Nov 2015 11:09:10 -0800 From: Sumandra Majee To: DIEGO LOPEZ GARCIA Thread-Topic: [I2nsf] Comments on draft-dunbar-i2nsf-problem-statement-05 Thread-Index: AdEioAyIQfd93omoRVuyqnHeGuMT8AAmR5vwAEe5yYAADgHZ+A== Date: Sat, 21 Nov 2015 19:09:09 +0000 Message-ID: References: <327562D94EA7BF428CD805F338C31EF06C07EC8B@nkgeml512-mbx.china.huawei.com>, In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-exchange-transport-fromentityheader: Hosted Content-Type: multipart/alternative; boundary="_000_A00862EF35D24A8FBE07B54AE6046B50F5com_" MIME-Version: 1.0 Archived-At: Cc: Jayaraghavendran k , "Anil Kumar S N \(VRP Network BL\)" , "i2nsf@ietf.org" , "draft-dunbar-i2nsf-problem-statement-05@ietf.org" , Linda Dunbar Subject: Re: [I2nsf] Comments on draft-dunbar-i2nsf-problem-statement-05 X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Nov 2015 19:09:16 -0000 --_000_A00862EF35D24A8FBE07B54AE6046B50F5com_ Content-Type: text/plain; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable Agree that FW IDS IPS etc are commonly understood network component and try= ing to define them here might lead to more confusion. Having a section for = abbreviation is ok. Sent from my iPhone On Nov 21, 2015, at 4:28 AM, DIEGO LOPEZ GARCIA > wrote: Hi, A couple of comments in line below=85 On 20 Nov 2015, at 03:22 , Anil Kumar S N (VRP Network BL) > wrote: =95 Requirements Language, terms and acronyms section : We need to = describe following abbreviations which are used in the documents as it the = first document to be referred by any newcomer into I2NSF WG IPS, IDS, ACL, FWs, AAA, CA, VNFpool, Etc=85 DRL> I disagree. Terms like IDS, AAA, ACL or CA are well defined elsewhere,= have been of common usage for quite a while, and there is no advantage in = redefining them in this document. For what is worth, we could need to defin= e terms like =93network=94 or =93TCP=94=85 There may be others like VNFpool= that would need a definition because they are by no means widespread, thou= gh in those case we should first consider whether the term makes sense in t= he document, which I=92d say it is not the case for =93VNFpool=94 in partic= ular. =95 Adding new section : 3.1.9 Lack of mechanism for Key Management/Deterministic Generation and Pro= visioning for communicating protocols There is a need for a framework/data model for a key management protocol th= at may be used to create and manage session keys for message authentication and integrity. As of now there is no much f= ocus on an abstraction for keying information that describes the interface between protocols, operators, and automated key management. In March 2006, the Internet Architecture Board (IAB) held a workshop on the topic of "Unwanted Internet Traffic". The report from that workshop= is documented in RFC 4948 [RFC4948]. Section 8.1 of that document states that "A simple risk analysis would sugg= est that an ideal attack target of minimal cost but maximal disruption is the core routing infrastructure". Section 8= .2 calls for "Tightening the security of the core routing infrastructure". One of the four main steps were identified for that tightening the security= for the protocol packets on the wire. It is concerned with guidelines for describing issues and techniques for pr= otecting the messages between directly communicating peers. Conceptually, when routing protocols send or receive messages, they might need to look up the key to use in this abstract key table. Conceptually, there must be an interface defined for a protocols to make requests of automated key management when it is being used; when keys become available, they might be made available in the key table. There might not be any requirement that this abstraction be used for implementation: 1) I2NSF need to design the key table abstraction, the interface between key management protocols and routing/other protocols, and possibly security protocols at other layers. 2) For each routing/other protocol, I2NSF need to define the mapping bet= ween how the protocol represents key material and the protocol- independent key table abstraction. When routing/other protocols shar= e a common mechanism for authentication, such as the TCP Authentication Option, the same mapping is likely to be reused between protocols. An implementation may be able to move much of the keying logic into code related to this shared authentication primitive rather than code specific to routing/other protocols. 3) When designing automated key management for both symmetric keys and group keys, we will only need to use the abstractions designed ba= sed on point 1 above to communicate between automated key management and routing/other protocols. DRL> As Linda said, you should clarify what is the purpose for this. The in= tent of I2NSF is not to define new security functions, but to define an int= erface to them. And I=92d say you are proposing the definition of a new key= management service to be used by routing and other protocols. Be goode, -- "Esta vez no fallaremos, Doctor Infierno" Dr Diego R. Lopez Telefonica I+D http://people.tid.es/diego.lopez/ e-mail: diego.r.lopez@telefonica.com Tel: +34 913 129 041 Mobile: +34 682 051 091 ---------------------------------- ________________________________ Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, pu= ede contener informaci=F3n privilegiada o confidencial y es para uso exclus= ivo de la persona o entidad de destino. Si no es usted. el destinatario ind= icado, queda notificado de que la lectura, utilizaci=F3n, divulgaci=F3n y/o= copia sin autorizaci=F3n puede estar prohibida en virtud de la legislaci= =F3n vigente. Si ha recibido este mensaje por error, le rogamos que nos lo = comunique inmediatamente por esta misma v=EDa y proceda a su destrucci=F3n. The information contained in this transmission is privileged and confidenti= al information intended only for the use of the individual or entity named = above. If the reader of this message is not the intended recipient, you are= hereby notified that any dissemination, distribution or copying of this co= mmunication is strictly prohibited. If you have received this transmission = in error, do not read it. Please immediately reply to the sender that you h= ave received this communication in error and then delete it. Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinat=E1rio= , pode conter informa=E7=E3o privilegiada ou confidencial e =E9 para uso ex= clusivo da pessoa ou entidade de destino. Se n=E3o =E9 vossa senhoria o des= tinat=E1rio indicado, fica notificado de que a leitura, utiliza=E7=E3o, div= ulga=E7=E3o e/ou c=F3pia sem autoriza=E7=E3o pode estar proibida em virtude= da legisla=E7=E3o vigente. Se recebeu esta mensagem por erro, rogamos-lhe = que nos o comunique imediatamente por esta mesma via e proceda a sua destru= i=E7=E3o _______________________________________________ I2nsf mailing list I2nsf@ietf.org https://www.ietf.org/mailman/listinfo/i2nsf --_000_A00862EF35D24A8FBE07B54AE6046B50F5com_ Content-Type: text/html; charset="Windows-1252" Content-Transfer-Encoding: quoted-printable
Agree that FW IDS IPS etc are commonly understood network component an= d trying to define them here might lead to more confusion. Having a section= for abbreviation is ok. 

Sent from my iPhone

On Nov 21, 2015, at 4:28 AM, DIEGO LOPEZ GARCIA <diego.r.lopez@telefonica.com> wrote:

Hi,

A couple of comments in line below=85

On 20 Nov 2015, at 03:22 , Anil Kumar S N (VRP Network BL) = <anil.sn@huawei.com= > wrote:
=B7         R= equirements Language, terms and acronyms section : We need to describe following abbre= viations which are used in the documents as it the first document
to be referred by any newcomer into I2NSF WG
 
IPS, IDS, ACL, FWs, AAA, CA, VNFpool, Etc=85

DRL> I disagree. Terms like IDS, AAA, ACL or CA are well defined el= sewhere, have been of common usage for quite a while, and there is no advan= tage in redefining them in this document. For what is worth, we could need = to define terms like =93network=94 or =93TCP=94=85 There may be others like VNFpool that would need a definition because they= are by no means widespread, though in those case we should first consider = whether the term makes sense in the document, which I=92d say it is not the= case for =93VNFpool=94 in particular.

=B7Adding new section :
3.1.9 Lack of mecha=
nism for Key Management/Deterministic Generation and Provisioning for commu=
nicating protocols
 
There is a need for=
 a framework/data model for a key management protocol that may be used to c=
reate and manage session
keys for message authentication and integrity. As of now there is n=
o much focus on an abstraction for keying information that describes the in=
terface
between protocols, operators, and automated key management.
 
In March 2006, the Internet Architecture Board (IAB) held a worksho=
p
on the topic of "Unwanted Internet Traffic".  The re=
port from that workshop is documented in RFC 4948 [RFC4948]. 
Section 8.1 of that document states that "A simple risk analys=
is would suggest that an ideal attack target of minimal 
cost but maximal disruption is the core routing infrastructure"=
;.  Section 8.2 calls for "Tightening the security of 
the core routing infrastructure".  =

 
One of the four main steps were identified for that tightening the =
security for the protocol packets on the wire.=

It is concerned with guidelines for describing issues and technique=
s for protecting the messages between directly communicating peers.
 

Conceptually, when routing protocols send or receive messages, they=



   might need to look up the key to use in this abstract =
key table.


   Conceptually, there must be an interface defined for a=
 protocols to


   make requests of automated key management when it is b=
eing used; when


   keys become available, they might be made available in=
 the key table.


   There might not be any requirement that this abstracti=
on be used for


   implementation:


 


   1) I2NSF need to design the key table abstraction, the=
 interface between


      key management protocols and routing=
/other protocols, and possibly


      security protocols at other layers.<=
o:p class=3D"">


 


   2) For each routing/other protocol, I2NSF need to defi=
ne the mapping between


      how the protocol represents key mate=
rial and the protocol-


      independent key table abstraction.&n=
bsp; When routing/other protocols share a

      common mechanism for authentication,=
 such as the TCP


      Authentication Option, the same mapp=
ing is likely to be reused


      between protocols.  An implemen=
tation may be able to move much of


      the keying logic into code related t=
o this shared authentication


      primitive rather than code specific =
to routing/other protocols.


 


   3) When designing automated key management for both sy=
mmetric keys


      and group keys, we will only need to=
 use the abstractions designed based on


      point 1 above to communicate between=
 automated key management and


      routing/other protocols.

DRL> As Linda said, you should clarify what is the purpose for this= . The intent of I2NSF is not to define new security functions, but to defin= e an interface to them. And I=92d say you are proposing the definition of a= new key management service to be used by routing and other protocols.

Be goode,

--
"Esta vez no fallaremos, Doctor Infierno"

Dr Diego R. Lopez
Telefonica I+D
http://people.tid.= es/diego.lopez/

e-mail: diego.r.lopez@telef= onica.com
Tel:    +34 913 129 041
Mobile: +34 682 051 091
----------------------------------



Este mensaje y sus adjuntos se dirigen exclusivamente a su destinatario, pu= ede contener informaci=F3n privilegiada o confidencial y es para uso exclus= ivo de la persona o entidad de destino. Si no es usted. el destinatario ind= icado, queda notificado de que la lectura, utilizaci=F3n, divulgaci=F3n y/o copia sin autorizaci=F3n puede e= star prohibida en virtud de la legislaci=F3n vigente. Si ha recibido este m= ensaje por error, le rogamos que nos lo comunique inmediatamente por esta m= isma v=EDa y proceda a su destrucci=F3n.

The information contained in this transmission is privileged and confidenti= al information intended only for the use of the individual or entity named = above. If the reader of this message is not the intended recipient, you are= hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If y= ou have received this transmission in error, do not read it. Please immedia= tely reply to the sender that you have received this communication in error= and then delete it.

Esta mensagem e seus anexos se dirigem exclusivamente ao seu destinat=E1rio= , pode conter informa=E7=E3o privilegiada ou confidencial e =E9 para uso ex= clusivo da pessoa ou entidade de destino. Se n=E3o =E9 vossa senhoria o des= tinat=E1rio indicado, fica notificado de que a leitura, utiliza=E7=E3o, divulga=E7=E3o e/ou c=F3pia sem autoriza=E7=E3o p= ode estar proibida em virtude da legisla=E7=E3o vigente. Se recebeu esta me= nsagem por erro, rogamos-lhe que nos o comunique imediatamente por esta mes= ma via e proceda a sua destrui=E7=E3o
_______________________________________________
I2nsf mailing list
I2nsf@ietf.org
https://www.i= etf.org/mailman/listinfo/i2nsf
--_000_A00862EF35D24A8FBE07B54AE6046B50F5com_-- From nobody Tue Nov 24 08:02:08 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E05AC1B2FB1 for ; Sun, 22 Nov 2015 20:04:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.385 X-Spam-Level: X-Spam-Status: No, score=-3.385 tagged_above=-999 required=5 tests=[BAYES_05=-0.5, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.585, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qWm9to6q13OH for ; Sun, 22 Nov 2015 20:04:04 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7C3DA1AD0D7 for ; Sun, 22 Nov 2015 20:04:03 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml402-hub.china.huawei.com) ([172.18.7.190]) by lhrrg01-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CEL61653; Mon, 23 Nov 2015 04:03:59 +0000 (GMT) Received: from NKGEML408-HUB.china.huawei.com (10.98.56.39) by lhreml402-hub.china.huawei.com (10.201.5.241) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 23 Nov 2015 04:03:58 +0000 Received: from NKGEML512-MBX.china.huawei.com ([169.254.7.181]) by nkgeml408-hub.china.huawei.com ([10.98.56.39]) with mapi id 14.03.0235.001; Mon, 23 Nov 2015 12:03:46 +0800 From: "Anil Kumar S N (VRP Network BL)" To: Linda Dunbar , "draft-dunbar-i2nsf-problem-statement-05@ietf.org" Thread-Topic: Comments on draft-dunbar-i2nsf-problem-statement-05 Thread-Index: AdEioAyIQfd93omoRVuyqnHeGuMT8AAmR5vwACd+fyAAcavA0A== Date: Mon, 23 Nov 2015 04:03:46 +0000 Message-ID: <327562D94EA7BF428CD805F338C31EF06C07EFE5@nkgeml512-mbx.china.huawei.com> References: <327562D94EA7BF428CD805F338C31EF06C07EC8B@nkgeml512-mbx.china.huawei.com> <4A95BA014132FF49AE685FAB4B9F17F657DA6474@dfweml701-chm> In-Reply-To: <4A95BA014132FF49AE685FAB4B9F17F657DA6474@dfweml701-chm> Accept-Language: en-US, zh-CN Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.18.213.92] Content-Type: multipart/alternative; boundary="_000_327562D94EA7BF428CD805F338C31EF06C07EFE5nkgeml512mbxchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A020202.56529030.0189, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=169.254.7.181, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: 1d2d13dabd616f755d8e28c3846f2490 Archived-At: X-Mailman-Approved-At: Tue, 24 Nov 2015 08:02:05 -0800 Cc: Jayaraghavendran k , "i2nsf@ietf.org" Subject: Re: [I2nsf] Comments on draft-dunbar-i2nsf-problem-statement-05 X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Nov 2015 04:04:10 -0000 --_000_327562D94EA7BF428CD805F338C31EF06C07EFE5nkgeml512mbxchi_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Linda, Reply is inline. Thanks & Regards Anil S N "Be liberal in what you accept, and conservative in what you send" - Jon Po= stel From: Linda Dunbar Sent: 21 November 2015 06:07 To: Anil Kumar S N (VRP Network BL); draft-dunbar-i2nsf-problem-statement-0= 5@ietf.org Cc: Jayaraghavendran k; i2nsf@ietf.org Subject: RE: Comments on draft-dunbar-i2nsf-problem-statement-05 Anil, Thank you very much for the comments. Reply are inserted below: From: Anil Kumar S N (VRP Network BL) Sent: Thursday, November 19, 2015 8:23 PM To: draft-dunbar-i2nsf-problem-statement-05@ietf.org Cc: Linda Dunbar; Jayaraghavendran k; i2nsf@ietf.org Subject: Comments on draft-dunbar-i2nsf-problem-statement-05 Hi Authors, I was reading the draft for understanding and contributing toward= s I2NSF working group and found few comments : * Introduction section : I think all these use cases are merged as= "draft-pastor-i2nsf-merged-use-cases-00" request you to update the same This document does not elaborate on specific use case. The reader should refer to [I2NSF-ACCESS], [I2NSF-DC] and [I2NSF-Mobile] for a more in-depth discussion on the I2NSF use cases. [Linda] you are correct. Actually all of them will be merged together with = the problem statement. * Requirements Language, terms and acronyms section : We need to de= scribe following abbreviations which are used in the documents as it the fi= rst document to be referred by any newcomer into I2NSF WG IPS, IDS, ACL, FWs, AAA, CA, VNFpool, Etc... [Linda] Good point. Has been added. * 3.1.1. Diverse types of Security Functions Section : Below state= ment is contradicting each other, I2NSF wants to standardize the interface = to control the behavior of NSF but doesn't want to standardize the interface which carries the information= of firewall filter and its application on specific flow. I Feel we could a= dd more clarity on the scope of I2NSF with respect to what is under its perview and what is not in this document if at all we wan= t to talk about "what is needed" in this document. there is no need to standardize on how a firewall filters are created or applied. What is needed is having an interface to control and monitor the behavior of NSFs. [Linda] What in the I2NSF scope is "Rule Set" to those "Firewall filter". How about this: "What is needed is having an interface to control and monit= or the rule sets that NSFs use to treat packets traversing through." [[Anil >>]] Sounds good * 3.1.2. Diverse Interface to monitor the behavior of NSFs : Repa= rsed as below You Can't Monitor What You Can't See. So enabling a security function (e.g., firewall [I-D.ietf-opsawg-firewalls]) does not mean that a network i= s protected. As such, it is necessary to have a mechanism to monitor and provide executi= on status of NSFs to security and compliance management tools. There exist various network secur= ity monitoring vendor specific interfaces for forensics and troubleshooting * Adding new section : 3.1.9 Lack of mechanism for Key Management/Deterministic Generation and Pro= visioning for communicating protocols [Linda] Do you see it as challenge facing providers? Or the customers? Do = you mean "Lack of Mechanism for security keys distribution to NSFs by diff= erent vendors"? There is a need for a framework/data model for a key management protocol th= at may be used to create and manage session [Linda] You need to provide more wording: Manage What Session? Is it IPSec = session ? is VPN session? What do you think of this "There is a need for controller to distribute various keys to distributed N= SFs." [[Anil >>]] Agreed, Will rephrase; Idea is that there are many key manageme= nt methods and KDF (key derivation function) exist but there is a need for standardizing the interface to provision and manage= it. Here any two communicating protocols could use same KDF to deterministically derive keys and to communicate. The reference to sess= ion should have been two communicating entities. Which will enhances the security by reducing life time of a key used and no= n repetitive of the keys for a very long time which is very much important = for control plane packets. Derived keys may be extended to IPsec/VPN data packet. Since the lack of such management framework/interface limited service provi= ders to use keys with very longer lifetime or a key chain with a set of key= which were repeated in a cycle. We would like to address above issue with I2NSF framework. Please correct m= e if I am wrong. keys for message authentication and integrity. As of now there is no much f= ocus on an abstraction for keying information that describes the interface between protocols, operators, and automated key management. [[Anil >>]] How about below text : 3.1.9 Lack of framework/standard interface to provisioning the usage of Key= Derivation Function (KDF) and managing KDF A Key Derivation Function (KDF) or Key Derivation Algorithm is intended to = be used in two ways: (1) to derive a long-term Master Secret from a short-lived shared secret (2) to derive secure channel session keys from a shared secret and a seed. There is a need for a framework to ensure secure exchange of initial secret= e between managing entity and managed entity (NSF). There is a need for a framework/standard interface in provisioning two comm= unicating protocols to use KDF as their key source for Specific period of time or for a set of interaction. There is also need for framework/standard interface in controlling and mana= ging KDF used between two communicating protocols The Provisioning and Managing framework could be extended to data plane too= . With Regards Anil S N "Be liberal in what you accept, and conservative in what you send" - Jon Po= stel --_000_327562D94EA7BF428CD805F338C31EF06C07EFE5nkgeml512mbxchi_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Linda,

 

Reply is inline.<= /o:p>

 

Thanks & Regards

Anil S N

 

“Be liberal in w= hat you accept, and conservative in what you send” - Jon Postel<= /o:p>

 

 

From: Linda Du= nbar
Sent: 21 November 2015 06:07
To: Anil Kumar S N (VRP Network BL); draft-dunbar-i2nsf-problem-stat= ement-05@ietf.org
Cc: Jayaraghavendran k; i2nsf@ietf.org
Subject: RE: Comments on draft-dunbar-i2nsf-problem-statement-05

 

Anil,

 

Thank you very much fo= r the comments. Reply are inserted below:

 

 

From: Anil Kum= ar S N (VRP Network BL)
Sent: Thursday, November 19, 2015 8:23 PM
To: draft-dunbar-i2nsf-problem-statement-05@ietf.org
Cc: Linda Dunbar; Jayaraghavendran k; i2nsf@ietf.org
Subject: Comments on draft-dunbar-i2nsf-problem-statement-05

 

Hi Authors,

 

     &nbs= p;    I was reading the draft for understanding and contribu= ting towards I2NSF working group and found few comments :=

 

·         Introduction section :&nbs= p; I think all these use cases are merged as “draft-pastor-i2nsf-merg= ed-use-cases-00” request you to update the same

 

 

This = document does not elaborate on specific use case. The reader

shoul= d refer to [I2NSF-ACCESS], [I2NSF-DC] and [I2NSF-Mobile] for a

more = in-depth discussion on the I2NSF use cases.     &n= bsp; 

 

[Linda] you are correc= t. Actually all of them will be merged together with the problem statement.

 

·         Requirements Language, ter= ms and acronyms section : We need to describe following abbreviations which= are used in the documents as it the first document

to be referred by any newcomer int= o I2NSF WG

 

IPS, IDS, ACL, FWs, AAA, CA, VNFpo= ol, Etc...

 

[Linda] Good point. Ha= s been added.

 

 

·         3.1.1. Diverse types of Se= curity Functions Section :  Below statement is contradicting each othe= r, I2NSF wants to standardize the interface to control the behavior of NSF

but doesn’t want to standard= ize the interface which carries the information of firewall filter and its = application on specific flow. I Feel we could add more clarity on the scope of I2NSF with respect to

what is under its perview and what= is not in this document if at all we want to talk about “what is nee= ded” in this document.

 

     there is = no need to standardize on how a

     firewall = filters are created or applied. What is needed is having<= /p>

     an interf= ace to control and monitor the behavior of NSFs.

[Linda]  What in = the I2NSF scope is “Rule Set” to those “Firewall filter&#= 8221;.

How about this: “= ;What is needed is having an interface to control and monitor the rule sets= that NSFs use to treat packets traversing through.”

[[Anil >>]= ] Sounds good

     &nbs= p;   

·         3.1.2.  Diverse Inter= face to monitor the behavior of NSFs :  Reparsed as below 

You Can’t Monitor What You CanR=
17;t See. So enabling a security function 
(e.g., firewall [I-D.ietf-opsawg-firewal=
ls]) does not mean that a network is protected. 
As such, it is necessary to have a mecha=
nism to monitor and provide execution status of NSFs to

security and compliance management tools. There exis=
t various network security monitoring vendor specific interfaces 


for forensics and troubleshooting =



 


 


·      &nbs=
p;  Add=
ing new section :


3.1.9 Lack of mechanism for Key Manage=
ment/Deterministic Generation and Provisioning for communicating protocols<=
o:p>


 


[Linda] Do you see it as challenge facing p=
roviders? Or the customers?  Do you mean  “Lack of Mechanis=
m for security keys distribution to NSFs by different vendors”? =



 


 


There is a need for a framework/data m=
odel for a key management protocol that may be used to create and manage se=
ssion


 


[Linda] You need to provide more wording: M=
anage What Session? Is it IPSec session ? is VPN session? 


What do you think of this 


“There is a need for controller to di=
stribute various keys to distributed NSFs.” 


 


[[Anil >>]] Agreed, Will rephra=
se; Idea is that there are many key management methods and KDF (key derivat=
ion function) exist 


but there is a need for standardizing=
 the interface to provision and manage it.  Here any two communicating=
 protocols could use same KDF 


to deterministically derive keys and =
 to communicate. The reference to session should have been two communi=
cating entities.


Which will enhances the security by r=
educing life time of a key used and non repetitive of the keys for a very l=
ong time which is very much important for control plane packets.=



Derived keys may be extended to IPsec=
/VPN  data packet.


Since the lack of such management fra=
mework/interface limited service providers to use keys with very longer lif=
etime or a key chain with a set of key which were repeated in a cycle.=



We would like to address above issue =
with I2NSF framework. Please correct me if I am wrong.


 


key=
s for message authentication and integrity. As of now there is no much focu=
s on an abstraction for keying information that describes the interface


bet=
ween protocols, operators, and automated key management.<=
/pre>

 


[[=
Anil >>]] How about below text :


3.1.9 Lack of framework/standard inter=
face to provisioning the usage of Key Derivation Function (KDF) and managin=
g KDF


 


A Key Derivation Function (KDF) or Key=
 Derivation Algorithm is intended to be used in two ways: 


(1) to derive a long-term Master Secre=
t from a short-lived shared secret 


(2) to derive secure channel session k=
eys from a shared secret and a seed.


 


There is a need for a framework to ens=
ure secure exchange of initial secrete between managing entity and managed =
entity (NSF). 


 


There is a need for a framework/standa=
rd interface in provisioning two communicating protocols to use KDF as thei=
r key source for 


Specific period of time or for a set o=
f interaction. 


There is also need for framework/stand=
ard interface in controlling and managing KDF used between two communicatin=
g protocols 


The Provisioning and Managing framewor=
k could be extended to data plane too. 


&nb=
sp;


With =
Regards


Anil =
S N


 


“Be liberal in what you acce=
pt, and conservative in what you send” - Jon Postel=
--_000_327562D94EA7BF428CD805F338C31EF06C07EFE5nkgeml512mbxchi_-- From nobody Tue Nov 24 08:02:10 2015 Return-Path: X-Original-To: i2nsf@ietfa.amsl.com Delivered-To: i2nsf@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1491A1B3638 for ; Sun, 22 Nov 2015 21:03:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.785 X-Spam-Level: X-Spam-Status: No, score=-4.785 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.585, SPF_PASS=-0.001] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iKEhUMdhMQfc for ; Sun, 22 Nov 2015 21:03:54 -0800 (PST) Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 730FE1B3615 for ; Sun, 22 Nov 2015 21:03:53 -0800 (PST) Received: from 172.18.7.190 (EHLO lhreml403-hub.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id CAR14142; Mon, 23 Nov 2015 05:03:49 +0000 (GMT) Received: from NKGEML403-HUB.china.huawei.com (10.98.56.34) by lhreml403-hub.china.huawei.com (10.201.5.217) with Microsoft SMTP Server (TLS) id 14.3.235.1; Mon, 23 Nov 2015 05:03:46 +0000 Received: from NKGEML512-MBX.china.huawei.com ([169.254.7.181]) by nkgeml403-hub.china.huawei.com ([10.98.56.34]) with mapi id 14.03.0235.001; Mon, 23 Nov 2015 13:03:35 +0800 From: "Anil Kumar S N (VRP Network BL)" To: DIEGO LOPEZ GARCIA Thread-Topic: [I2nsf] Comments on draft-dunbar-i2nsf-problem-statement-05 Thread-Index: AdEioAyIQfd93omoRVuyqnHeGuMT8AAmR5vwAEe5yYAAVOxPsA== Date: Mon, 23 Nov 2015 05:03:35 +0000 Message-ID: <327562D94EA7BF428CD805F338C31EF06C07F012@nkgeml512-mbx.china.huawei.com> References: <327562D94EA7BF428CD805F338C31EF06C07EC8B@nkgeml512-mbx.china.huawei.com> In-Reply-To: Accept-Language: en-US, zh-CN Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.18.213.92] Content-Type: multipart/alternative; boundary="_000_327562D94EA7BF428CD805F338C31EF06C07F012nkgeml512mbxchi_" MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A090205.56529E36.0029, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=169.254.7.181, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: c9e5dc008c4f41a75904a489b1769490 Archived-At: X-Mailman-Approved-At: Tue, 24 Nov 2015 08:02:05 -0800 Cc: Jayaraghavendran k , "i2nsf@ietf.org" , "draft-dunbar-i2nsf-problem-statement-05@ietf.org" , Linda Dunbar Subject: Re: [I2nsf] Comments on draft-dunbar-i2nsf-problem-statement-05 X-BeenThere: i2nsf@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "*I2NSF: Interface to Network Security Functions mailing list*" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 23 Nov 2015 05:03:58 -0000 --_000_327562D94EA7BF428CD805F338C31EF06C07F012nkgeml512mbxchi_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgRGllZ28sDQoNCiAgICAgICAgICAgICAgICBQbGVhc2Ugc2VlIGlubGluZSBmb3IgcmVzcG9u c2UuDQoNClRoYW5rcyAmIFJlZ2FyZHMNCkFuaWwgUyBODQoNCuKAnEJlIGxpYmVyYWwgaW4gd2hh dCB5b3UgYWNjZXB0LCBhbmQgY29uc2VydmF0aXZlIGluIHdoYXQgeW91IHNlbmTigJ0gLSBKb24g UG9zdGVsDQoNCg0KRnJvbTogRElFR08gTE9QRVogR0FSQ0lBIFttYWlsdG86ZGllZ28uci5sb3Bl ekB0ZWxlZm9uaWNhLmNvbV0NClNlbnQ6IDIxIE5vdmVtYmVyIDIwMTUgMjA6MjgNClRvOiBBbmls IEt1bWFyIFMgTiAoVlJQIE5ldHdvcmsgQkwpDQpDYzogZHJhZnQtZHVuYmFyLWkybnNmLXByb2Js ZW0tc3RhdGVtZW50LTA1QGlldGYub3JnOyBKYXlhcmFnaGF2ZW5kcmFuIGs7IGkybnNmQGlldGYu b3JnOyBMaW5kYSBEdW5iYXINClN1YmplY3Q6IFJlOiBbSTJuc2ZdIENvbW1lbnRzIG9uIGRyYWZ0 LWR1bmJhci1pMm5zZi1wcm9ibGVtLXN0YXRlbWVudC0wNQ0KDQpIaSwNCg0KQSBjb3VwbGUgb2Yg Y29tbWVudHMgaW4gbGluZSBiZWxvd+KApg0KDQpPbiAyMCBOb3YgMjAxNSwgYXQgMDM6MjIgLCBB bmlsIEt1bWFyIFMgTiAoVlJQIE5ldHdvcmsgQkwpIDxhbmlsLnNuQGh1YXdlaS5jb208bWFpbHRv OmFuaWwuc25AaHVhd2VpLmNvbT4+IHdyb3RlOg0K4oCiICAgICAgICAgUmVxdWlyZW1lbnRzIExh bmd1YWdlLCB0ZXJtcyBhbmQgYWNyb255bXMgc2VjdGlvbiA6IFdlIG5lZWQgdG8gZGVzY3JpYmUg Zm9sbG93aW5nIGFiYnJldmlhdGlvbnMgd2hpY2ggYXJlIHVzZWQgaW4gdGhlIGRvY3VtZW50cyBh cyBpdCB0aGUgZmlyc3QgZG9jdW1lbnQNCnRvIGJlIHJlZmVycmVkIGJ5IGFueSBuZXdjb21lciBp bnRvIEkyTlNGIFdHDQoNCklQUywgSURTLCBBQ0wsIEZXcywgQUFBLCBDQSwgVk5GcG9vbCwgRXRj 4oCmDQoNCkRSTD4gSSBkaXNhZ3JlZS4gVGVybXMgbGlrZSBJRFMsIEFBQSwgQUNMIG9yIENBIGFy ZSB3ZWxsIGRlZmluZWQgZWxzZXdoZXJlLCBoYXZlIGJlZW4gb2YgY29tbW9uIHVzYWdlIGZvciBx dWl0ZSBhIHdoaWxlLCBhbmQgdGhlcmUgaXMgbm8gYWR2YW50YWdlIGluIHJlZGVmaW5pbmcgdGhl bSBpbiB0aGlzIGRvY3VtZW50LiBGb3Igd2hhdCBpcyB3b3J0aCwgd2UgY291bGQgbmVlZCB0byBk ZWZpbmUgdGVybXMgbGlrZSDigJxuZXR3b3Jr4oCdIG9yIOKAnFRDUOKAneKApiBUaGVyZSBtYXkg YmUgb3RoZXJzIGxpa2UgVk5GcG9vbCB0aGF0IHdvdWxkIG5lZWQgYSBkZWZpbml0aW9uIGJlY2F1 c2UgdGhleSBhcmUgYnkgbm8gbWVhbnMgd2lkZXNwcmVhZCwgdGhvdWdoIGluIHRob3NlIGNhc2Ug d2Ugc2hvdWxkIGZpcnN0IGNvbnNpZGVyIHdoZXRoZXIgdGhlIHRlcm0gbWFrZXMgc2Vuc2UgaW4g dGhlIGRvY3VtZW50LCB3aGljaCBJ4oCZZCBzYXkgaXQgaXMgbm90IHRoZSBjYXNlIGZvciDigJxW TkZwb29s4oCdIGluIHBhcnRpY3VsYXIuDQpbW0FuaWwgPj5dXSAgU29ycnkgbXkgYXBvbG9naWVz IERpZWdvLCBJIHNob3VsZCBoYXZlIGNvbW1lbnRlZCBiZXR0ZXIsIEkgbWVhbnQgdG8gYWRkIHRo ZXNlIHVuZGVyIGFiYnJldmlhdGlvbiBzZWN0aW9uLiBJIGRpZG7igJl0IG1lYW4gdG8gcmVkZWZp bmUgaXQuDQoNCg0KDQrigKIgICAgICAgICBBZGRpbmcgbmV3IHNlY3Rpb24gOg0KDQozLjEuOSBM YWNrIG9mIG1lY2hhbmlzbSBmb3IgS2V5IE1hbmFnZW1lbnQvRGV0ZXJtaW5pc3RpYyBHZW5lcmF0 aW9uIGFuZCBQcm92aXNpb25pbmcgZm9yIGNvbW11bmljYXRpbmcgcHJvdG9jb2xzDQoNCg0KDQpU aGVyZSBpcyBhIG5lZWQgZm9yIGEgZnJhbWV3b3JrL2RhdGEgbW9kZWwgZm9yIGEga2V5IG1hbmFn ZW1lbnQgcHJvdG9jb2wgdGhhdCBtYXkgYmUgdXNlZCB0byBjcmVhdGUgYW5kIG1hbmFnZSBzZXNz aW9uDQoNCmtleXMgZm9yIG1lc3NhZ2UgYXV0aGVudGljYXRpb24gYW5kIGludGVncml0eS4gQXMg b2Ygbm93IHRoZXJlIGlzIG5vIG11Y2ggZm9jdXMgb24gYW4gYWJzdHJhY3Rpb24gZm9yIGtleWlu ZyBpbmZvcm1hdGlvbiB0aGF0IGRlc2NyaWJlcyB0aGUgaW50ZXJmYWNlDQoNCmJldHdlZW4gcHJv dG9jb2xzLCBvcGVyYXRvcnMsIGFuZCBhdXRvbWF0ZWQga2V5IG1hbmFnZW1lbnQuDQoNCg0KDQpJ biBNYXJjaCAyMDA2LCB0aGUgSW50ZXJuZXQgQXJjaGl0ZWN0dXJlIEJvYXJkIChJQUIpIGhlbGQg YSB3b3Jrc2hvcA0KDQpvbiB0aGUgdG9waWMgb2YgIlVud2FudGVkIEludGVybmV0IFRyYWZmaWMi LiAgVGhlIHJlcG9ydCBmcm9tIHRoYXQgd29ya3Nob3AgaXMgZG9jdW1lbnRlZCBpbiBSRkMgNDk0 OCBbUkZDNDk0OF0uDQoNClNlY3Rpb24gOC4xIG9mIHRoYXQgZG9jdW1lbnQgc3RhdGVzIHRoYXQg IkEgc2ltcGxlIHJpc2sgYW5hbHlzaXMgd291bGQgc3VnZ2VzdCB0aGF0IGFuIGlkZWFsIGF0dGFj ayB0YXJnZXQgb2YgbWluaW1hbA0KDQpjb3N0IGJ1dCBtYXhpbWFsIGRpc3J1cHRpb24gaXMgdGhl IGNvcmUgcm91dGluZyBpbmZyYXN0cnVjdHVyZSIuICBTZWN0aW9uIDguMiBjYWxscyBmb3IgIlRp Z2h0ZW5pbmcgdGhlIHNlY3VyaXR5IG9mDQoNCnRoZSBjb3JlIHJvdXRpbmcgaW5mcmFzdHJ1Y3R1 cmUiLg0KDQoNCg0KT25lIG9mIHRoZSBmb3VyIG1haW4gc3RlcHMgd2VyZSBpZGVudGlmaWVkIGZv ciB0aGF0IHRpZ2h0ZW5pbmcgdGhlIHNlY3VyaXR5IGZvciB0aGUgcHJvdG9jb2wgcGFja2V0cyBv biB0aGUgd2lyZS4NCg0KSXQgaXMgY29uY2VybmVkIHdpdGggZ3VpZGVsaW5lcyBmb3IgZGVzY3Jp YmluZyBpc3N1ZXMgYW5kIHRlY2huaXF1ZXMgZm9yIHByb3RlY3RpbmcgdGhlIG1lc3NhZ2VzIGJl dHdlZW4gZGlyZWN0bHkgY29tbXVuaWNhdGluZyBwZWVycy4NCg0KDQoNCkNvbmNlcHR1YWxseSwg d2hlbiByb3V0aW5nIHByb3RvY29scyBzZW5kIG9yIHJlY2VpdmUgbWVzc2FnZXMsIHRoZXkNCg0K ICAgbWlnaHQgbmVlZCB0byBsb29rIHVwIHRoZSBrZXkgdG8gdXNlIGluIHRoaXMgYWJzdHJhY3Qg a2V5IHRhYmxlLg0KDQogICBDb25jZXB0dWFsbHksIHRoZXJlIG11c3QgYmUgYW4gaW50ZXJmYWNl IGRlZmluZWQgZm9yIGEgcHJvdG9jb2xzIHRvDQoNCiAgIG1ha2UgcmVxdWVzdHMgb2YgYXV0b21h dGVkIGtleSBtYW5hZ2VtZW50IHdoZW4gaXQgaXMgYmVpbmcgdXNlZDsgd2hlbg0KDQogICBrZXlz IGJlY29tZSBhdmFpbGFibGUsIHRoZXkgbWlnaHQgYmUgbWFkZSBhdmFpbGFibGUgaW4gdGhlIGtl eSB0YWJsZS4NCg0KICAgVGhlcmUgbWlnaHQgbm90IGJlIGFueSByZXF1aXJlbWVudCB0aGF0IHRo aXMgYWJzdHJhY3Rpb24gYmUgdXNlZCBmb3INCg0KICAgaW1wbGVtZW50YXRpb246DQoNCg0KDQog ICAxKSBJMk5TRiBuZWVkIHRvIGRlc2lnbiB0aGUga2V5IHRhYmxlIGFic3RyYWN0aW9uLCB0aGUg aW50ZXJmYWNlIGJldHdlZW4NCg0KICAgICAga2V5IG1hbmFnZW1lbnQgcHJvdG9jb2xzIGFuZCBy b3V0aW5nL290aGVyIHByb3RvY29scywgYW5kIHBvc3NpYmx5DQoNCiAgICAgIHNlY3VyaXR5IHBy b3RvY29scyBhdCBvdGhlciBsYXllcnMuDQoNCg0KDQogICAyKSBGb3IgZWFjaCByb3V0aW5nL290 aGVyIHByb3RvY29sLCBJMk5TRiBuZWVkIHRvIGRlZmluZSB0aGUgbWFwcGluZyBiZXR3ZWVuDQoN CiAgICAgIGhvdyB0aGUgcHJvdG9jb2wgcmVwcmVzZW50cyBrZXkgbWF0ZXJpYWwgYW5kIHRoZSBw cm90b2NvbC0NCg0KICAgICAgaW5kZXBlbmRlbnQga2V5IHRhYmxlIGFic3RyYWN0aW9uLiAgV2hl biByb3V0aW5nL290aGVyIHByb3RvY29scyBzaGFyZSBhDQoNCiAgICAgIGNvbW1vbiBtZWNoYW5p c20gZm9yIGF1dGhlbnRpY2F0aW9uLCBzdWNoIGFzIHRoZSBUQ1ANCg0KICAgICAgQXV0aGVudGlj YXRpb24gT3B0aW9uLCB0aGUgc2FtZSBtYXBwaW5nIGlzIGxpa2VseSB0byBiZSByZXVzZWQNCg0K ICAgICAgYmV0d2VlbiBwcm90b2NvbHMuICBBbiBpbXBsZW1lbnRhdGlvbiBtYXkgYmUgYWJsZSB0 byBtb3ZlIG11Y2ggb2YNCg0KICAgICAgdGhlIGtleWluZyBsb2dpYyBpbnRvIGNvZGUgcmVsYXRl ZCB0byB0aGlzIHNoYXJlZCBhdXRoZW50aWNhdGlvbg0KDQogICAgICBwcmltaXRpdmUgcmF0aGVy IHRoYW4gY29kZSBzcGVjaWZpYyB0byByb3V0aW5nL290aGVyIHByb3RvY29scy4NCg0KDQoNCiAg IDMpIFdoZW4gZGVzaWduaW5nIGF1dG9tYXRlZCBrZXkgbWFuYWdlbWVudCBmb3IgYm90aCBzeW1t ZXRyaWMga2V5cw0KDQogICAgICBhbmQgZ3JvdXAga2V5cywgd2Ugd2lsbCBvbmx5IG5lZWQgdG8g dXNlIHRoZSBhYnN0cmFjdGlvbnMgZGVzaWduZWQgYmFzZWQgb24NCg0KICAgICAgcG9pbnQgMSBh Ym92ZSB0byBjb21tdW5pY2F0ZSBiZXR3ZWVuIGF1dG9tYXRlZCBrZXkgbWFuYWdlbWVudCBhbmQN Cg0KICAgICAgcm91dGluZy9vdGhlciBwcm90b2NvbHMuDQoNCkRSTD4gQXMgTGluZGEgc2FpZCwg eW91IHNob3VsZCBjbGFyaWZ5IHdoYXQgaXMgdGhlIHB1cnBvc2UgZm9yIHRoaXMuIFRoZSBpbnRl bnQgb2YgSTJOU0YgaXMgbm90IHRvIGRlZmluZSBuZXcgc2VjdXJpdHkgZnVuY3Rpb25zLCBidXQg dG8gZGVmaW5lIGFuIGludGVyZmFjZSB0byB0aGVtLiBBbmQgSeKAmWQgc2F5IHlvdSBhcmUgcHJv cG9zaW5nIHRoZSBkZWZpbml0aW9uIG9mIGEgbmV3IGtleSBtYW5hZ2VtZW50IHNlcnZpY2UgdG8g YmUgdXNlZCBieSByb3V0aW5nIGFuZCBvdGhlciBwcm90b2NvbHMuDQpbW0FuaWwgPj5dXSBJbnRl bnRpb24gaXMgbm90IHRvIGRlZmluZSBuZXcgc2VjdXJpdHkgZnVuY3Rpb24sIGludGVuc2lvbiBp cyB0byB1dGlsaXplIEkyTlNGIGFzIGludGVyZmFjZS9tYW5hZ2luZyBmcmFtZXdvcmsgdG8gdXRp bGl6ZSBLREYgZm9yIHByb3RvY29sLg0KSSBoYXZlIHJlcGxpZWQgaW4gZGV0YWlsIHRvIExpbmRh 4oCZcyBtYWlsLg0KDQpCZSBnb29kZSwNCg0KLS0NCiJFc3RhIHZleiBubyBmYWxsYXJlbW9zLCBE b2N0b3IgSW5maWVybm8iDQoNCkRyIERpZWdvIFIuIExvcGV6DQpUZWxlZm9uaWNhIEkrRA0KaHR0 cDovL3Blb3BsZS50aWQuZXMvZGllZ28ubG9wZXovDQoNCmUtbWFpbDogZGllZ28uci5sb3BlekB0 ZWxlZm9uaWNhLmNvbTxtYWlsdG86ZGllZ28uci5sb3BlekB0ZWxlZm9uaWNhLmNvbT4NClRlbDog ICAgKzM0IDkxMyAxMjkgMDQxDQpNb2JpbGU6ICszNCA2ODIgMDUxIDA5MQ0KLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fDQoNCkVzdGUgbWVuc2FqZSB5IHN1cyBhZGp1bnRvcyBzZSBkaXJpZ2VuIGV4Y2x1c2l2YW1l bnRlIGEgc3UgZGVzdGluYXRhcmlvLCBwdWVkZSBjb250ZW5lciBpbmZvcm1hY2nDs24gcHJpdmls ZWdpYWRhIG8gY29uZmlkZW5jaWFsIHkgZXMgcGFyYSB1c28gZXhjbHVzaXZvIGRlIGxhIHBlcnNv bmEgbyBlbnRpZGFkIGRlIGRlc3Rpbm8uIFNpIG5vIGVzIHVzdGVkLiBlbCBkZXN0aW5hdGFyaW8g aW5kaWNhZG8sIHF1ZWRhIG5vdGlmaWNhZG8gZGUgcXVlIGxhIGxlY3R1cmEsIHV0aWxpemFjacOz biwgZGl2dWxnYWNpw7NuIHkvbyBjb3BpYSBzaW4gYXV0b3JpemFjacOzbiBwdWVkZSBlc3RhciBw cm9oaWJpZGEgZW4gdmlydHVkIGRlIGxhIGxlZ2lzbGFjacOzbiB2aWdlbnRlLiBTaSBoYSByZWNp YmlkbyBlc3RlIG1lbnNhamUgcG9yIGVycm9yLCBsZSByb2dhbW9zIHF1ZSBub3MgbG8gY29tdW5p cXVlIGlubWVkaWF0YW1lbnRlIHBvciBlc3RhIG1pc21hIHbDrWEgeSBwcm9jZWRhIGEgc3UgZGVz dHJ1Y2Npw7NuLg0KDQpUaGUgaW5mb3JtYXRpb24gY29udGFpbmVkIGluIHRoaXMgdHJhbnNtaXNz aW9uIGlzIHByaXZpbGVnZWQgYW5kIGNvbmZpZGVudGlhbCBpbmZvcm1hdGlvbiBpbnRlbmRlZCBv bmx5IGZvciB0aGUgdXNlIG9mIHRoZSBpbmRpdmlkdWFsIG9yIGVudGl0eSBuYW1lZCBhYm92ZS4g SWYgdGhlIHJlYWRlciBvZiB0aGlzIG1lc3NhZ2UgaXMgbm90IHRoZSBpbnRlbmRlZCByZWNpcGll bnQsIHlvdSBhcmUgaGVyZWJ5IG5vdGlmaWVkIHRoYXQgYW55IGRpc3NlbWluYXRpb24sIGRpc3Ry aWJ1dGlvbiBvciBjb3B5aW5nIG9mIHRoaXMgY29tbXVuaWNhdGlvbiBpcyBzdHJpY3RseSBwcm9o aWJpdGVkLiBJZiB5b3UgaGF2ZSByZWNlaXZlZCB0aGlzIHRyYW5zbWlzc2lvbiBpbiBlcnJvciwg ZG8gbm90IHJlYWQgaXQuIFBsZWFzZSBpbW1lZGlhdGVseSByZXBseSB0byB0aGUgc2VuZGVyIHRo YXQgeW91IGhhdmUgcmVjZWl2ZWQgdGhpcyBjb21tdW5pY2F0aW9uIGluIGVycm9yIGFuZCB0aGVu IGRlbGV0ZSBpdC4NCg0KRXN0YSBtZW5zYWdlbSBlIHNldXMgYW5leG9zIHNlIGRpcmlnZW0gZXhj bHVzaXZhbWVudGUgYW8gc2V1IGRlc3RpbmF0w6FyaW8sIHBvZGUgY29udGVyIGluZm9ybWHDp8Oj byBwcml2aWxlZ2lhZGEgb3UgY29uZmlkZW5jaWFsIGUgw6kgcGFyYSB1c28gZXhjbHVzaXZvIGRh IHBlc3NvYSBvdSBlbnRpZGFkZSBkZSBkZXN0aW5vLiBTZSBuw6NvIMOpIHZvc3NhIHNlbmhvcmlh IG8gZGVzdGluYXTDoXJpbyBpbmRpY2FkbywgZmljYSBub3RpZmljYWRvIGRlIHF1ZSBhIGxlaXR1 cmEsIHV0aWxpemHDp8OjbywgZGl2dWxnYcOnw6NvIGUvb3UgY8OzcGlhIHNlbSBhdXRvcml6YcOn w6NvIHBvZGUgZXN0YXIgcHJvaWJpZGEgZW0gdmlydHVkZSBkYSBsZWdpc2xhw6fDo28gdmlnZW50 ZS4gU2UgcmVjZWJldSBlc3RhIG1lbnNhZ2VtIHBvciBlcnJvLCByb2dhbW9zLWxoZSBxdWUgbm9z IG8gY29tdW5pcXVlIGltZWRpYXRhbWVudGUgcG9yIGVzdGEgbWVzbWEgdmlhIGUgcHJvY2VkYSBh IHN1YSBkZXN0cnVpw6fDo28NCg== --_000_327562D94EA7BF428CD805F338C31EF06C07F012nkgeml512mbxchi_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTIgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OuWui+S9kzsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30N CkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk65a6L5L2TOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAx IDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0x OjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6VGFob21h Ow0KCXBhbm9zZS0xOjIgMTEgNiA0IDMgNSA0IDQgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1m YW1pbHk6IlxA5a6L5L2TIjsNCglwYW5vc2UtMToyIDEgNiAwIDMgMSAxIDEgMSAxO30NCkBmb250 LWZhY2UNCgl7Zm9udC1mYW1pbHk6Q29uc29sYXM7DQoJcGFub3NlLTE6MiAxMSA2IDkgMiAyIDQg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseToiQm9va21hbiBPbGQgU3R5bGUiOw0K CXBhbm9zZS0xOjIgNSA2IDQgNSA1IDUgMiAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8N CnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBjbTsN CgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWls eToiVGltZXMgTmV3IFJvbWFuIiwic2VyaWYiO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsN Cgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9u OnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNv LXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5k ZXJsaW5lO30NCnByZQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6 IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1hcmdpbjowY207DQoJbWFyZ2luLWJvdHRvbTou MDAwMXB0Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9 DQpzcGFuLmFwcGxlLWNvbnZlcnRlZC1zcGFjZQ0KCXttc28tc3R5bGUtbmFtZTphcHBsZS1jb252 ZXJ0ZWQtc3BhY2U7fQ0Kc3Bhbi5IVE1MUHJlZm9ybWF0dGVkQ2hhcg0KCXttc28tc3R5bGUtbmFt ZToiSFRNTCBQcmVmb3JtYXR0ZWQgQ2hhciI7DQoJbXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCW1z by1zdHlsZS1saW5rOiJIVE1MIFByZWZvcm1hdHRlZCI7DQoJZm9udC1mYW1pbHk6Q29uc29sYXM7 fQ0Kc3Bhbi5FbWFpbFN0eWxlMjANCgl7bXNvLXN0eWxlLXR5cGU6cGVyc29uYWwtcmVwbHk7DQoJ Zm9udC1mYW1pbHk6IkNhbGlicmkiLCJzYW5zLXNlcmlmIjsNCgljb2xvcjojMUY0OTdEO30NCi5N c29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZTox MC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6NjEyLjBwdCA3OTIuMHB0Ow0KCW1h cmdpbjo3Mi4wcHQgOTAuMHB0IDcyLjBwdCA5MC4wcHQ7fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtw YWdlOldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0K PG86c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwh W2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9 ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlv dXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0i Ymx1ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0Qi PkhpIERpZWdvLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5z LXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyBQbGVhc2Ugc2VlIGlubGluZSBmb3IgcmVzcG9uc2UuPG86cD48L286cD48L3NwYW4+PC9w Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9y OiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5UaGFua3MgJmFt cDsgUmVnYXJkczxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5BbmlsIFMgTjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJp ZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3 RCI+4oCcQmUgbGliZXJhbCBpbiB3aGF0IHlvdSBhY2NlcHQsIGFuZCBjb25zZXJ2YXRpdmUgaW4g d2hhdCB5b3Ugc2VuZOKAnSAtIEpvbiBQb3N0ZWw8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3 RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LCZxdW90O3NhbnMtc2VyaWYmcXVvdDs7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJz cDs8L286cD48L3NwYW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6 c29saWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBjbSAwY20gMGNtIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2 IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGlu ZzozLjBwdCAwY20gMGNtIDBjbSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHls ZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssJnF1b3Q7 c2Fucy1zZXJpZiZxdW90OyI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1RhaG9tYSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1 b3Q7Ij4gRElFR08gTE9QRVogR0FSQ0lBIFttYWlsdG86ZGllZ28uci5sb3BlekB0ZWxlZm9uaWNh LmNvbV0NCjxicj4NCjxiPlNlbnQ6PC9iPiAyMSBOb3ZlbWJlciAyMDE1IDIwOjI4PGJyPg0KPGI+ VG86PC9iPiBBbmlsIEt1bWFyIFMgTiAoVlJQIE5ldHdvcmsgQkwpPGJyPg0KPGI+Q2M6PC9iPiBk cmFmdC1kdW5iYXItaTJuc2YtcHJvYmxlbS1zdGF0ZW1lbnQtMDVAaWV0Zi5vcmc7IEpheWFyYWdo YXZlbmRyYW4gazsgaTJuc2ZAaWV0Zi5vcmc7IExpbmRhIER1bmJhcjxicj4NCjxiPlN1YmplY3Q6 PC9iPiBSZTogW0kybnNmXSBDb21tZW50cyBvbiBkcmFmdC1kdW5iYXItaTJuc2YtcHJvYmxlbS1z dGF0ZW1lbnQtMDU8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij5IaSwgPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5BIGNv dXBsZSBvZiBjb21tZW50cyBpbiBsaW5lIGJlbG934oCmPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+ DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0 Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiAyMCBOb3YgMjAxNSwgYXQgMDM6MjIg LCBBbmlsIEt1bWFyIFMgTiAoVlJQIE5ldHdvcmsgQkwpICZsdDs8YSBocmVmPSJtYWlsdG86YW5p bC5zbkBodWF3ZWkuY29tIj5hbmlsLnNuQGh1YXdlaS5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXYgc3R5bGU9Im1hcmdpbi1sZWZ0OjM2LjBwdCI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0idGV4dC1pbmRlbnQ6LTE4LjBwdCI+PHNwYW4g c3R5bGU9ImZvbnQtZmFtaWx5OlN5bWJvbCI+wrc8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZTo3LjBwdCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48 c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1b3Q7Qm9va21hbiBPbGQgU3R5bGUmcXVvdDssJnF1 b3Q7c2VyaWYmcXVvdDsiPlJlcXVpcmVtZW50cyBMYW5ndWFnZSwgdGVybXMNCiBhbmQgYWNyb255 bXMgc2VjdGlvbiA6IFdlIG5lZWQgdG8gZGVzY3JpYmUgZm9sbG93aW5nIGFiYnJldmlhdGlvbnMg d2hpY2ggYXJlIHVzZWQgaW4gdGhlIGRvY3VtZW50cyBhcyBpdCB0aGUgZmlyc3QgZG9jdW1lbnQ8 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1m YW1pbHk6JnF1b3Q7Qm9va21hbiBPbGQgU3R5bGUmcXVvdDssJnF1b3Q7c2VyaWYmcXVvdDsiPnRv IGJlIHJlZmVycmVkIGJ5IGFueSBuZXdjb21lciBpbnRvIEkyTlNGIFdHPC9zcGFuPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1 b3Q7c2Fucy1zZXJpZiZxdW90OyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtZmFtaWx5OiZxdW90O0Jv b2ttYW4gT2xkIFN0eWxlJnF1b3Q7LCZxdW90O3NlcmlmJnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PHNw YW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90 OywmcXVvdDtzYW5zLXNlcmlmJnF1b3Q7Ij48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1mYW1pbHk6JnF1 b3Q7Qm9va21hbiBPbGQgU3R5bGUmcXVvdDssJnF1b3Q7c2VyaWYmcXVvdDsiPklQUywgSURTLCBB Q0wsIEZXcywgQUFBLCBDQSwgVk5GcG9vbCwgRXRj4oCmPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1z ZXJpZiZxdW90OyI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvYmxv Y2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkRSTCZndDsgSSBkaXNhZ3Jl ZS4gVGVybXMgbGlrZSBJRFMsIEFBQSwgQUNMIG9yIENBIGFyZSB3ZWxsIGRlZmluZWQgZWxzZXdo ZXJlLCBoYXZlIGJlZW4gb2YgY29tbW9uIHVzYWdlIGZvciBxdWl0ZSBhIHdoaWxlLCBhbmQgdGhl cmUgaXMgbm8gYWR2YW50YWdlIGluIHJlZGVmaW5pbmcgdGhlbSBpbiB0aGlzIGRvY3VtZW50LiBG b3Igd2hhdCBpcyB3b3J0aCwgd2UgY291bGQgbmVlZCB0byBkZWZpbmUgdGVybXMgbGlrZQ0KIOKA nG5ldHdvcmvigJ0gb3Ig4oCcVENQ4oCd4oCmIFRoZXJlIG1heSBiZSBvdGhlcnMgbGlrZSBWTkZw b29sIHRoYXQgd291bGQgbmVlZCBhIGRlZmluaXRpb24gYmVjYXVzZSB0aGV5IGFyZSBieSBubyBt ZWFucyB3aWRlc3ByZWFkLCB0aG91Z2ggaW4gdGhvc2UgY2FzZSB3ZSBzaG91bGQgZmlyc3QgY29u c2lkZXIgd2hldGhlciB0aGUgdGVybSBtYWtlcyBzZW5zZSBpbiB0aGUgZG9jdW1lbnQsIHdoaWNo IEnigJlkIHNheSBpdCBpcyBub3QgdGhlIGNhc2UgZm9yIOKAnFZORnBvb2zigJ0NCiBpbiBwYXJ0 aWN1bGFyLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PGk+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oywm cXVvdDtzYW5zLXNlcmlmJnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPltbQW5pbCAmZ3Q7Jmd0O11dICZu YnNwO1NvcnJ5IG15IGFwb2xvZ2llcyBEaWVnbywgSSBzaG91bGQgaGF2ZSBjb21tZW50ZWQgYmV0 dGVyLCBJIG1lYW50IHRvIGFkZCB0aGVzZSB1bmRlciBhYmJyZXZpYXRpb24gc2VjdGlvbi4gSSBk aWRu4oCZdCBtZWFuIHRvIHJlZGVmaW5lIGl0Ljwvc3Bhbj48L2k+PC9iPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fu cy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPHBy ZSBzdHlsZT0ibWFyZ2luLWxlZnQ6MzYuMHB0O3RleHQtaW5kZW50Oi0xOC4wcHQiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OlN5bWJvbDtjb2xvcjojMTczNjVEIj7C tzwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O1Rp bWVzIE5ldyBSb21hbiZxdW90OywmcXVvdDtzZXJpZiZxdW90Oztjb2xvcjojMTczNjVEIj4mbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Jvb2ttYW4gT2xkIFN0 eWxlJnF1b3Q7LCZxdW90O3NlcmlmJnF1b3Q7O2NvbG9yOiMxNzM2NUQiPkFkZGluZyBuZXcgc2Vj dGlvbiA6PC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Jvb2ttYW4gT2xkIFN0eWxlJnF1b3Q7LCZxdW90 O3NlcmlmJnF1b3Q7O2NvbG9yOiMxNzM2NUQiPjMuMS45IExhY2sgb2YgbWVjaGFuaXNtIGZvciBL ZXkgTWFuYWdlbWVudC9EZXRlcm1pbmlzdGljIEdlbmVyYXRpb24gYW5kIFByb3Zpc2lvbmluZyBm b3IgY29tbXVuaWNhdGluZyBwcm90b2NvbHM8L3NwYW4+PG86cD48L286cD48L3ByZT4NCjxwcmU+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Qm9va21hbiBP bGQgU3R5bGUmcXVvdDssJnF1b3Q7c2VyaWYmcXVvdDs7Y29sb3I6IzE3MzY1RCI+Jm5ic3A7PC9z cGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0Jvb2ttYW4gT2xkIFN0eWxlJnF1b3Q7LCZxdW90O3NlcmlmJnF1 b3Q7O2NvbG9yOiMxNzM2NUQiPlRoZXJlIGlzIGEgbmVlZCBmb3IgYSBmcmFtZXdvcmsvZGF0YSBt b2RlbCBmb3IgYSBrZXkgbWFuYWdlbWVudCBwcm90b2NvbCB0aGF0IG1heSBiZSB1c2VkIHRvIGNy ZWF0ZSBhbmQgbWFuYWdlIHNlc3Npb248L3NwYW4+PG86cD48L286cD48L3ByZT4NCjxwcmUgc3R5 bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Qm9va21hbiBPbGQgU3R5bGUmcXVvdDssJnF1b3Q7c2VyaWYm cXVvdDs7Y29sb3I6IzE3MzY1RCI+a2V5cyBmb3IgbWVzc2FnZSBhdXRoZW50aWNhdGlvbiBhbmQg aW50ZWdyaXR5LiBBcyBvZiBub3cgdGhlcmUgaXMgbm8gbXVjaCBmb2N1cyBvbiBhbiBhYnN0cmFj dGlvbiBmb3Iga2V5aW5nIGluZm9ybWF0aW9uIHRoYXQgZGVzY3JpYmVzIHRoZSBpbnRlcmZhY2U8 L3NwYW4+PG86cD48L286cD48L3ByZT4NCjxwcmUgc3R5bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFs d2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Qm9v a21hbiBPbGQgU3R5bGUmcXVvdDssJnF1b3Q7c2VyaWYmcXVvdDs7Y29sb3I6IzE3MzY1RCI+YmV0 d2VlbiBwcm90b2NvbHMsIG9wZXJhdG9ycywgYW5kIGF1dG9tYXRlZCBrZXkgbWFuYWdlbWVudC48 L3NwYW4+PG86cD48L286cD48L3ByZT4NCjxwcmUgc3R5bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFs d2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Qm9v a21hbiBPbGQgU3R5bGUmcXVvdDssJnF1b3Q7c2VyaWYmcXVvdDs7Y29sb3I6IzE3MzY1RCI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9y ZTphbHdheXMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0Jvb2ttYW4gT2xkIFN0eWxlJnF1b3Q7LCZxdW90O3NlcmlmJnF1b3Q7O2NvbG9yOiMxNzM2NUQi PkluIE1hcmNoIDIwMDYsIHRoZSBJbnRlcm5ldCBBcmNoaXRlY3R1cmUgQm9hcmQgKElBQikgaGVs ZCBhIHdvcmtzaG9wPC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJwYWdlLWJy ZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0Jvb2ttYW4gT2xkIFN0eWxlJnF1b3Q7LCZxdW90O3NlcmlmJnF1b3Q7O2NvbG9y OiMxNzM2NUQiPm9uIHRoZSB0b3BpYyBvZiAmcXVvdDtVbndhbnRlZCBJbnRlcm5ldCBUcmFmZmlj JnF1b3Q7LiZuYnNwOyBUaGUgcmVwb3J0IGZyb20gdGhhdCB3b3Jrc2hvcCBpcyBkb2N1bWVudGVk IGluIFJGQyA0OTQ4IFtSRkM0OTQ4XS4gPC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0 eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Jvb2ttYW4gT2xkIFN0eWxlJnF1b3Q7LCZxdW90O3Nlcmlm JnF1b3Q7O2NvbG9yOiMxNzM2NUQiPlNlY3Rpb24gOC4xIG9mIHRoYXQgZG9jdW1lbnQgc3RhdGVz IHRoYXQgJnF1b3Q7QSBzaW1wbGUgcmlzayBhbmFseXNpcyB3b3VsZCBzdWdnZXN0IHRoYXQgYW4g aWRlYWwgYXR0YWNrIHRhcmdldCBvZiBtaW5pbWFsIDwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0K PHByZSBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtCb29rbWFuIE9sZCBTdHlsZSZxdW90OywmcXVv dDtzZXJpZiZxdW90Oztjb2xvcjojMTczNjVEIj5jb3N0IGJ1dCBtYXhpbWFsIGRpc3J1cHRpb24g aXMgdGhlIGNvcmUgcm91dGluZyBpbmZyYXN0cnVjdHVyZSZxdW90Oy4mbmJzcDsgU2VjdGlvbiA4 LjIgY2FsbHMgZm9yICZxdW90O1RpZ2h0ZW5pbmcgdGhlIHNlY3VyaXR5IG9mIDwvc3Bhbj48bzpw PjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtCb29rbWFuIE9sZCBT dHlsZSZxdW90OywmcXVvdDtzZXJpZiZxdW90Oztjb2xvcjojMTczNjVEIj50aGUgY29yZSByb3V0 aW5nIGluZnJhc3RydWN0dXJlJnF1b3Q7LiZuYnNwOyA8L3NwYW4+PG86cD48L286cD48L3ByZT4N CjxwcmUgc3R5bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Qm9va21hbiBPbGQgU3R5bGUmcXVvdDssJnF1 b3Q7c2VyaWYmcXVvdDs7Y29sb3I6IzE3MzY1RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9w cmU+DQo8cHJlIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Jvb2ttYW4gT2xkIFN0eWxlJnF1b3Q7 LCZxdW90O3NlcmlmJnF1b3Q7O2NvbG9yOiMxNzM2NUQiPk9uZSBvZiB0aGUgZm91ciBtYWluIHN0 ZXBzIHdlcmUgaWRlbnRpZmllZCBmb3IgdGhhdCB0aWdodGVuaW5nIHRoZSBzZWN1cml0eSBmb3Ig dGhlIHByb3RvY29sIHBhY2tldHMgb24gdGhlIHdpcmUuPC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+ DQo8cHJlIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Jvb2ttYW4gT2xkIFN0eWxlJnF1b3Q7LCZx dW90O3NlcmlmJnF1b3Q7O2NvbG9yOiMxNzM2NUQiPkl0IGlzIGNvbmNlcm5lZCB3aXRoIGd1aWRl bGluZXMgZm9yIGRlc2NyaWJpbmcgaXNzdWVzIGFuZCB0ZWNobmlxdWVzIGZvciBwcm90ZWN0aW5n IHRoZSBtZXNzYWdlcyBiZXR3ZWVuIGRpcmVjdGx5IGNvbW11bmljYXRpbmcgcGVlcnMuPC9zcGFu PjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Jvb2ttYW4g T2xkIFN0eWxlJnF1b3Q7LCZxdW90O3NlcmlmJnF1b3Q7Ij4mbmJzcDs8L3NwYW4+PG86cD48L286 cD48L3ByZT4NCjxwcmUgc3R5bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Qm9va21hbiBPbGQgU3R5bGUm cXVvdDssJnF1b3Q7c2VyaWYmcXVvdDs7Y29sb3I6IzE3MzY1RCI+Q29uY2VwdHVhbGx5LCB3aGVu IHJvdXRpbmcgcHJvdG9jb2xzIHNlbmQgb3IgcmVjZWl2ZSBtZXNzYWdlcywgdGhleTwvc3Bhbj48 bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtCb29rbWFuIE9s ZCBTdHlsZSZxdW90OywmcXVvdDtzZXJpZiZxdW90Oztjb2xvcjojMTczNjVEIj4mbmJzcDsmbmJz cDsgbWlnaHQgbmVlZCB0byBsb29rIHVwIHRoZSBrZXkgdG8gdXNlIGluIHRoaXMgYWJzdHJhY3Qg a2V5IHRhYmxlLjwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0icGFnZS1icmVh ay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWls eTomcXVvdDtCb29rbWFuIE9sZCBTdHlsZSZxdW90OywmcXVvdDtzZXJpZiZxdW90Oztjb2xvcjoj MTczNjVEIj4mbmJzcDsmbmJzcDsgQ29uY2VwdHVhbGx5LCB0aGVyZSBtdXN0IGJlIGFuIGludGVy ZmFjZSBkZWZpbmVkIGZvciBhIHByb3RvY29scyB0bzwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0K PHByZSBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtCb29rbWFuIE9sZCBTdHlsZSZxdW90OywmcXVv dDtzZXJpZiZxdW90Oztjb2xvcjojMTczNjVEIj4mbmJzcDsmbmJzcDsgbWFrZSByZXF1ZXN0cyBv ZiBhdXRvbWF0ZWQga2V5IG1hbmFnZW1lbnQgd2hlbiBpdCBpcyBiZWluZyB1c2VkOyB3aGVuPC9z cGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdh eXMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Jvb2tt YW4gT2xkIFN0eWxlJnF1b3Q7LCZxdW90O3NlcmlmJnF1b3Q7O2NvbG9yOiMxNzM2NUQiPiZuYnNw OyZuYnNwOyBrZXlzIGJlY29tZSBhdmFpbGFibGUsIHRoZXkgbWlnaHQgYmUgbWFkZSBhdmFpbGFi bGUgaW4gdGhlIGtleSB0YWJsZS48L3NwYW4+PG86cD48L286cD48L3ByZT4NCjxwcmUgc3R5bGU9 InBhZ2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Qm9va21hbiBPbGQgU3R5bGUmcXVvdDssJnF1b3Q7c2VyaWYmcXVv dDs7Y29sb3I6IzE3MzY1RCI+Jm5ic3A7Jm5ic3A7IFRoZXJlIG1pZ2h0IG5vdCBiZSBhbnkgcmVx dWlyZW1lbnQgdGhhdCB0aGlzIGFic3RyYWN0aW9uIGJlIHVzZWQgZm9yPC9zcGFuPjxvOnA+PC9v OnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Jvb2ttYW4gT2xkIFN0eWxl JnF1b3Q7LCZxdW90O3NlcmlmJnF1b3Q7O2NvbG9yOiMxNzM2NUQiPiZuYnNwOyZuYnNwOyBpbXBs ZW1lbnRhdGlvbjo8L3NwYW4+PG86cD48L286cD48L3ByZT4NCjxwcmUgc3R5bGU9InBhZ2UtYnJl YWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Qm9va21hbiBPbGQgU3R5bGUmcXVvdDssJnF1b3Q7c2VyaWYmcXVvdDs7Y29sb3I6 IzE3MzY1RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJwYWdl LWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0Jvb2ttYW4gT2xkIFN0eWxlJnF1b3Q7LCZxdW90O3NlcmlmJnF1b3Q7O2Nv bG9yOiMxNzM2NUQiPiZuYnNwOyZuYnNwOyAxKSBJMk5TRiBuZWVkIHRvIGRlc2lnbiB0aGUga2V5 IHRhYmxlIGFic3RyYWN0aW9uLCB0aGUgaW50ZXJmYWNlIGJldHdlZW48L3NwYW4+PG86cD48L286 cD48L3ByZT4NCjxwcmUgc3R5bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Qm9va21hbiBPbGQgU3R5bGUm cXVvdDssJnF1b3Q7c2VyaWYmcXVvdDs7Y29sb3I6IzE3MzY1RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IGtleSBtYW5hZ2VtZW50IHByb3RvY29scyBhbmQgcm91dGluZy9vdGhlciBw cm90b2NvbHMsIGFuZCBwb3NzaWJseTwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHls ZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBw dDtmb250LWZhbWlseTomcXVvdDtCb29rbWFuIE9sZCBTdHlsZSZxdW90OywmcXVvdDtzZXJpZiZx dW90Oztjb2xvcjojMTczNjVEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgc2VjdXJp dHkgcHJvdG9jb2xzIGF0IG90aGVyIGxheWVycy48L3NwYW4+PG86cD48L286cD48L3ByZT4NCjxw cmUgc3R5bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Qm9va21hbiBPbGQgU3R5bGUmcXVvdDssJnF1b3Q7 c2VyaWYmcXVvdDs7Y29sb3I6IzE3MzY1RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+ DQo8cHJlIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Jvb2ttYW4gT2xkIFN0eWxlJnF1b3Q7LCZx dW90O3NlcmlmJnF1b3Q7O2NvbG9yOiMxNzM2NUQiPiZuYnNwOyZuYnNwOyAyKSBGb3IgZWFjaCBy b3V0aW5nL290aGVyIHByb3RvY29sLCBJMk5TRiBuZWVkIHRvIGRlZmluZSB0aGUgbWFwcGluZyBi ZXR3ZWVuPC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJwYWdlLWJyZWFrLWJl Zm9yZTphbHdheXMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0Jvb2ttYW4gT2xkIFN0eWxlJnF1b3Q7LCZxdW90O3NlcmlmJnF1b3Q7O2NvbG9yOiMxNzM2 NUQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBob3cgdGhlIHByb3RvY29sIHJlcHJl c2VudHMga2V5IG1hdGVyaWFsIGFuZCB0aGUgcHJvdG9jb2wtPC9zcGFuPjxvOnA+PC9vOnA+PC9w cmU+DQo8cHJlIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Jvb2ttYW4gT2xkIFN0eWxlJnF1b3Q7 LCZxdW90O3NlcmlmJnF1b3Q7O2NvbG9yOiMxNzM2NUQiPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyBpbmRlcGVuZGVudCBrZXkgdGFibGUgYWJzdHJhY3Rpb24uJm5ic3A7IFdoZW4gcm91 dGluZy9vdGhlciBwcm90b2NvbHMgc2hhcmUgYTwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHBy ZSBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtCb29rbWFuIE9sZCBTdHlsZSZxdW90OywmcXVvdDtz ZXJpZiZxdW90Oztjb2xvcjojMTczNjVEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg Y29tbW9uIG1lY2hhbmlzbSBmb3IgYXV0aGVudGljYXRpb24sIHN1Y2ggYXMgdGhlIFRDUDwvc3Bh bj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlz Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtCb29rbWFu IE9sZCBTdHlsZSZxdW90OywmcXVvdDtzZXJpZiZxdW90Oztjb2xvcjojMTczNjVEIj4mbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgQXV0aGVudGljYXRpb24gT3B0aW9uLCB0aGUgc2FtZSBt YXBwaW5nIGlzIGxpa2VseSB0byBiZSByZXVzZWQ8L3NwYW4+PG86cD48L286cD48L3ByZT4NCjxw cmUgc3R5bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Qm9va21hbiBPbGQgU3R5bGUmcXVvdDssJnF1b3Q7 c2VyaWYmcXVvdDs7Y29sb3I6IzE3MzY1RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 IGJldHdlZW4gcHJvdG9jb2xzLiZuYnNwOyBBbiBpbXBsZW1lbnRhdGlvbiBtYXkgYmUgYWJsZSB0 byBtb3ZlIG11Y2ggb2Y8L3NwYW4+PG86cD48L286cD48L3ByZT4NCjxwcmUgc3R5bGU9InBhZ2Ut YnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Qm9va21hbiBPbGQgU3R5bGUmcXVvdDssJnF1b3Q7c2VyaWYmcXVvdDs7Y29s b3I6IzE3MzY1RCI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHRoZSBrZXlpbmcgbG9n aWMgaW50byBjb2RlIHJlbGF0ZWQgdG8gdGhpcyBzaGFyZWQgYXV0aGVudGljYXRpb248L3NwYW4+ PG86cD48L286cD48L3ByZT4NCjxwcmUgc3R5bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Qm9va21hbiBP bGQgU3R5bGUmcXVvdDssJnF1b3Q7c2VyaWYmcXVvdDs7Y29sb3I6IzE3MzY1RCI+Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHByaW1pdGl2ZSByYXRoZXIgdGhhbiBjb2RlIHNwZWNpZmlj IHRvIHJvdXRpbmcvb3RoZXIgcHJvdG9jb2xzLjwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHBy ZSBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtCb29rbWFuIE9sZCBTdHlsZSZxdW90OywmcXVvdDtz ZXJpZiZxdW90Oztjb2xvcjojMTczNjVEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3ByZT4N CjxwcmUgc3R5bGU9InBhZ2UtYnJlYWstYmVmb3JlOmFsd2F5cyI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMi4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Qm9va21hbiBPbGQgU3R5bGUmcXVvdDssJnF1 b3Q7c2VyaWYmcXVvdDs7Y29sb3I6IzE3MzY1RCI+Jm5ic3A7Jm5ic3A7IDMpIFdoZW4gZGVzaWdu aW5nIGF1dG9tYXRlZCBrZXkgbWFuYWdlbWVudCBmb3IgYm90aCBzeW1tZXRyaWMga2V5czwvc3Bh bj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHlsZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlz Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBwdDtmb250LWZhbWlseTomcXVvdDtCb29rbWFu IE9sZCBTdHlsZSZxdW90OywmcXVvdDtzZXJpZiZxdW90Oztjb2xvcjojMTczNjVEIj4mbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgYW5kIGdyb3VwIGtleXMsIHdlIHdpbGwgb25seSBuZWVk IHRvIHVzZSB0aGUgYWJzdHJhY3Rpb25zIGRlc2lnbmVkIGJhc2VkIG9uPC9zcGFuPjxvOnA+PC9v OnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJwYWdlLWJyZWFrLWJlZm9yZTphbHdheXMiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTIuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Jvb2ttYW4gT2xkIFN0eWxl JnF1b3Q7LCZxdW90O3NlcmlmJnF1b3Q7O2NvbG9yOiMxNzM2NUQiPiZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyBwb2ludCAxIGFib3ZlIHRvIGNvbW11bmljYXRlIGJldHdlZW4gYXV0b21h dGVkIGtleSBtYW5hZ2VtZW50IGFuZDwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZSBzdHls ZT0icGFnZS1icmVhay1iZWZvcmU6YWx3YXlzIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEyLjBw dDtmb250LWZhbWlseTomcXVvdDtCb29rbWFuIE9sZCBTdHlsZSZxdW90OywmcXVvdDtzZXJpZiZx dW90Oztjb2xvcjojMTczNjVEIj4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgcm91dGlu Zy9vdGhlciBwcm90b2NvbHMuPC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPkRSTCZndDsgQXMgTGluZGEgc2FpZCwgeW91IHNob3VsZCBjbGFyaWZ5IHdoYXQg aXMgdGhlIHB1cnBvc2UgZm9yIHRoaXMuIFRoZSBpbnRlbnQgb2YgSTJOU0YgaXMgbm90IHRvIGRl ZmluZSBuZXcgc2VjdXJpdHkgZnVuY3Rpb25zLCBidXQgdG8gZGVmaW5lIGFuIGludGVyZmFjZSB0 byB0aGVtLiBBbmQgSeKAmWQgc2F5IHlvdSBhcmUgcHJvcG9zaW5nIHRoZSBkZWZpbml0aW9uIG9m IGEgbmV3IGtleSBtYW5hZ2VtZW50IHNlcnZpY2UNCiB0byBiZSB1c2VkIGJ5IHJvdXRpbmcgYW5k IG90aGVyIHByb3RvY29scy48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxi PjxpPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xvcjojMUY0OTdEIj5bW0FuaWwgJmd0 OyZndDtdXSBJbnRlbnRpb24gaXMgbm90IHRvIGRlZmluZSBuZXcgc2VjdXJpdHkgZnVuY3Rpb24s IGludGVuc2lvbiBpcyB0byB1dGlsaXplIEkyTlNGIGFzIGludGVyZmFjZS9tYW5hZ2luZyBmcmFt ZXdvcmsgdG8gdXRpbGl6ZSBLREYgZm9yIHByb3RvY29sLjxvOnA+PC9vOnA+PC9zcGFuPjwvaT48 L2I+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PGk+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OywmcXVvdDtzYW5zLXNlcmlm JnF1b3Q7O2NvbG9yOiMxRjQ5N0QiPkkgaGF2ZSByZXBsaWVkIGluIGRldGFpbCB0byBMaW5kYeKA mXMgbWFpbC4NCjwvc3Bhbj48L2k+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssJnF1b3Q7c2Fucy1zZXJpZiZxdW90Oztjb2xv cjojMUY0OTdEIj48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+QmUgZ29vZGUsPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImNvbG9yOmJsYWNrIj4tLTxicj4NCiZxdW90O0Vz dGEgdmV6IG5vIGZhbGxhcmVtb3MsIERvY3RvciBJbmZpZXJubyZxdW90Ozxicj4NCjxicj4NCkRy IERpZWdvIFIuIExvcGV6PGJyPg0KVGVsZWZvbmljYSBJJiM0MztEPGJyPg0KPGEgaHJlZj0iaHR0 cDovL3Blb3BsZS50aWQuZXMvZGllZ28ubG9wZXovIj5odHRwOi8vcGVvcGxlLnRpZC5lcy9kaWVn by5sb3Blei88L2E+PGJyPg0KPGJyPg0KZS1tYWlsOiA8YSBocmVmPSJtYWlsdG86ZGllZ28uci5s b3BlekB0ZWxlZm9uaWNhLmNvbSI+ZGllZ28uci5sb3BlekB0ZWxlZm9uaWNhLmNvbTwvYT48YnI+ DQpUZWw6ICZuYnNwOyAmbmJzcDsmIzQzOzM0IDkxMyAxMjkgMDQxPGJyPg0KTW9iaWxlOiAmIzQz OzM0IDY4MiAwNTEgMDkxPGJyPg0KLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLTxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2IGNsYXNzPSJNc29Ob3JtYWwiIGFsaWduPSJjZW50ZXIi IHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+DQo8aHIgc2l6ZT0iMiIgd2lkdGg9IjEwMCUiIGFs aWduPSJjZW50ZXIiPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjcuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O0FyaWFsJnF1b3Q7LCZxdW90O3NhbnMt c2VyaWYmcXVvdDs7Y29sb3I6Z3JheSI+PGJyPg0KRXN0ZSBtZW5zYWplIHkgc3VzIGFkanVudG9z IHNlIGRpcmlnZW4gZXhjbHVzaXZhbWVudGUgYSBzdSBkZXN0aW5hdGFyaW8sIHB1ZWRlIGNvbnRl bmVyIGluZm9ybWFjacOzbiBwcml2aWxlZ2lhZGEgbyBjb25maWRlbmNpYWwgeSBlcyBwYXJhIHVz byBleGNsdXNpdm8gZGUgbGEgcGVyc29uYSBvIGVudGlkYWQgZGUgZGVzdGluby4gU2kgbm8gZXMg dXN0ZWQuIGVsIGRlc3RpbmF0YXJpbyBpbmRpY2FkbywgcXVlZGEgbm90aWZpY2FkbyBkZSBxdWUg bGENCiBsZWN0dXJhLCB1dGlsaXphY2nDs24sIGRpdnVsZ2FjacOzbiB5L28gY29waWEgc2luIGF1 dG9yaXphY2nDs24gcHVlZGUgZXN0YXIgcHJvaGliaWRhIGVuIHZpcnR1ZCBkZSBsYSBsZWdpc2xh Y2nDs24gdmlnZW50ZS4gU2kgaGEgcmVjaWJpZG8gZXN0ZSBtZW5zYWplIHBvciBlcnJvciwgbGUg cm9nYW1vcyBxdWUgbm9zIGxvIGNvbXVuaXF1ZSBpbm1lZGlhdGFtZW50ZSBwb3IgZXN0YSBtaXNt YSB2w61hIHkgcHJvY2VkYSBhIHN1IGRlc3RydWNjacOzbi48YnI+DQo8YnI+DQpUaGUgaW5mb3Jt YXRpb24gY29udGFpbmVkIGluIHRoaXMgdHJhbnNtaXNzaW9uIGlzIHByaXZpbGVnZWQgYW5kIGNv bmZpZGVudGlhbCBpbmZvcm1hdGlvbiBpbnRlbmRlZCBvbmx5IGZvciB0aGUgdXNlIG9mIHRoZSBp bmRpdmlkdWFsIG9yIGVudGl0eSBuYW1lZCBhYm92ZS4gSWYgdGhlIHJlYWRlciBvZiB0aGlzIG1l c3NhZ2UgaXMgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHlvdSBhcmUgaGVyZWJ5IG5vdGlm aWVkIHRoYXQgYW55IGRpc3NlbWluYXRpb24sDQogZGlzdHJpYnV0aW9uIG9yIGNvcHlpbmcgb2Yg dGhpcyBjb21tdW5pY2F0aW9uIGlzIHN0cmljdGx5IHByb2hpYml0ZWQuIElmIHlvdSBoYXZlIHJl Y2VpdmVkIHRoaXMgdHJhbnNtaXNzaW9uIGluIGVycm9yLCBkbyBub3QgcmVhZCBpdC4gUGxlYXNl IGltbWVkaWF0ZWx5IHJlcGx5IHRvIHRoZSBzZW5kZXIgdGhhdCB5b3UgaGF2ZSByZWNlaXZlZCB0 aGlzIGNvbW11bmljYXRpb24gaW4gZXJyb3IgYW5kIHRoZW4gZGVsZXRlIGl0Ljxicj4NCjxicj4N CkVzdGEgbWVuc2FnZW0gZSBzZXVzIGFuZXhvcyBzZSBkaXJpZ2VtIGV4Y2x1c2l2YW1lbnRlIGFv IHNldSBkZXN0aW5hdMOhcmlvLCBwb2RlIGNvbnRlciBpbmZvcm1hw6fDo28gcHJpdmlsZWdpYWRh IG91IGNvbmZpZGVuY2lhbCBlIMOpIHBhcmEgdXNvIGV4Y2x1c2l2byBkYSBwZXNzb2Egb3UgZW50 aWRhZGUgZGUgZGVzdGluby4gU2UgbsOjbyDDqSB2b3NzYSBzZW5ob3JpYSBvIGRlc3RpbmF0w6Fy aW8gaW5kaWNhZG8sIGZpY2Egbm90aWZpY2FkbyBkZSBxdWUgYQ0KIGxlaXR1cmEsIHV0aWxpemHD p8OjbywgZGl2dWxnYcOnw6NvIGUvb3UgY8OzcGlhIHNlbSBhdXRvcml6YcOnw6NvIHBvZGUgZXN0 YXIgcHJvaWJpZGEgZW0gdmlydHVkZSBkYSBsZWdpc2xhw6fDo28gdmlnZW50ZS4gU2UgcmVjZWJl dSBlc3RhIG1lbnNhZ2VtIHBvciBlcnJvLCByb2dhbW9zLWxoZSBxdWUgbm9zIG8gY29tdW5pcXVl IGltZWRpYXRhbWVudGUgcG9yIGVzdGEgbWVzbWEgdmlhIGUgcHJvY2VkYSBhIHN1YSBkZXN0cnVp w6fDo288L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9o dG1sPg0K --_000_327562D94EA7BF428CD805F338C31EF06C07F012nkgeml512mbxchi_--