From nobody Thu Sep 24 16:01:34 2015 Return-Path: X-Original-To: int-dir@ietfa.amsl.com Delivered-To: int-dir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7AC531B2CEE; Thu, 24 Sep 2015 16:01:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.001 X-Spam-Level: X-Spam-Status: No, score=-102.001 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j5Ta7GhomFUZ; Thu, 24 Sep 2015 16:01:29 -0700 (PDT) Received: from na01-by2-obe.outbound.protection.outlook.com (mail-by2on0133.outbound.protection.outlook.com [207.46.100.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 60BBC1B4016; Thu, 24 Sep 2015 16:01:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=lZk5vBwx50ao19jtwb5CjQFAmCyUBU2qaEBNXJvegLM=; b=JPDDeAhB1PFmjIhkWUDCO73opeW2kt+rKrQdPlIhtdwxRjJ/4BJyjjbfCpzZsC2YTvsvgubc4BwuymjwqDSsgAT92cPJ2de1HgTpqXGBfGKML/wcvLMumbNKV8+3PUiA9d8T0hzITaZzuVX/X3JXXqyTz0gWXwdoELInurBUjK0= Received: from BY2PR03MB412.namprd03.prod.outlook.com (10.141.141.25) by BY2PR03MB409.namprd03.prod.outlook.com (10.141.141.11) with Microsoft SMTP Server (TLS) id 15.1.274.16; Thu, 24 Sep 2015 23:01:27 +0000 Received: from BY2PR03MB412.namprd03.prod.outlook.com ([10.141.141.25]) by BY2PR03MB412.namprd03.prod.outlook.com ([10.141.141.25]) with mapi id 15.01.0274.009; Thu, 24 Sep 2015 23:01:27 +0000 From: Dave Thaler To: "int-dir@ietf.org" , "int-ads@tools.ietf.org" Thread-Topic: INT Dir review: draft-ietf-lwig-ikev2-minimal-03 Thread-Index: AdD3FuN4CHRlsH5OSSWYtx057DmQnAAA2aWQ Date: Thu, 24 Sep 2015 23:01:26 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [2001:4898:80e8:4::437] x-microsoft-exchange-diagnostics: 1; BY2PR03MB409; 5:8DWJnOZykWg7whJfAO0ik4gkNcJ++ggT6ZjnuX35VuFt7oAkedkj0jTxPPTsaqGzW+KsAbpUNitp5p8PpJxr40k+2Ha5EzfuOhEKCRl02dYqg1mxZeNII2JYF2DNhZvPRSzx061RIVbgvvIjcKnFVw==; 24:2kCpbk+cYBNLtZiwkEmRHTZgCblurIwAuFYg3QDtXKDKIsNm5QZRJD2dnGfVb058eY2WgzCZCif2bQewE8su7yF8Xh/Kh17wvThrfCCzRt0=; 20:tcDOwmx3F81fjpWcPxdUx4iKFr/rMmP12rZNJqExRhpgs5k2XYJCwtufHWBFDjRFv+ZaGgcAoeC1ZyrZ+x0hiw== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB409; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(108003899814671); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(5005006)(520078)(8121501046)(3002001)(61426024)(61427024); SRVR:BY2PR03MB409; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB409; x-forefront-prvs: 070912876F x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(189002)(199003)(3905003)(243025005)(19625215002)(33656002)(64706001)(54356999)(77096005)(2950100001)(74316001)(15975445007)(16236675004)(102836002)(99286002)(105586002)(106356001)(229853001)(68736005)(19580395003)(92566002)(2900100001)(5001960100002)(2501003)(5005710100001)(46102003)(5004730100002)(8990500004)(189998001)(50986999)(5002640100001)(10090500001)(10290500002)(10400500002)(19617315012)(11100500001)(5007970100001)(86362001)(101416001)(40100003)(62966003)(87936001)(122556002)(5003600100002)(86612001)(19273905006)(77156002)(19300405004)(5001860100001)(5001920100001)(76176999)(230783001)(76576001)(5001830100001)(5001770100001)(97736004)(81156007)(4001540100001)(3826002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB409; H:BY2PR03MB412.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR03MB4126563A7DF1A50455658F3A3430BY2PR03MB412namprd_" MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Sep 2015 23:01:26.3511 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB409 Archived-At: Cc: "draft-ietf-lwig-ikev2-minimal@tools.ietf.org" , "lwig-chairs@ietf.org" Subject: [Int-dir] INT Dir review: draft-ietf-lwig-ikev2-minimal-03 X-BeenThere: int-dir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is for discussion between the members of the Internet Area directorate." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Sep 2015 23:01:33 -0000 --_000_BY2PR03MB4126563A7DF1A50455658F3A3430BY2PR03MB412namprd_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi, I am an assigned INT directorate reviewer for draft-ietf-lwig-ikev2-minimal= -03. These comments were written primarily for the benefit of the Internet Area Directors. Document editors and shepherd(s) should treat these comments just like they would treat comments from any other IETF contributors and resolve them along with any other Last Call comments that have been received. For more details on the INT Directorate, see http://www.ietf.org/iesg/directorate.html. A marked up copy with my comments in line is at http://research.microsoft.com/~dthaler/draft-ietf-lwig-ikev2-minimal-03.pdf Possibly technical: 1) Page 5 discusses cryptographic algorithms but does not state, nor r= eference any other document that states, what algorithm(s) are mandatory to implement in a minimal implementation. Without that, implementations may not interoperate. 2) Page 6 talks about agreeing on a PRF. But it does not state, nor = reference anywhere else that states, how such is agreed upon or what is mandatory to implement. 3) I am not familiar with IKEv2 protocol details, but the second parag= raph of section 2.1 implies that only initiators send requests, and only responders send responses, and only requests are retransmitted. However, much of the rest of the document, including parts of section 2.1, imply that initiators (especially minimal implementations of an initiator) receive requests such as CREATE_CHILD_SA, etc. This contradiction should be addressed. 4) Several places talk about what a "typical" minimal implementation w= ould do, or what a minimal implementation would "usually" do. However, it's not clear what the alternative(s) are. Since an implementation of this dra= ft is not RFC 7296 compliant, it's unclear whether there are other atypical things that are also non-compliant but legal in this document, or whether the only alternatives are to do exactly what RFC 7296 says. 5) The security considerations section needs work. Since this documen= t removes functionality that is mandatory in RFC 7296, it needs to discuss the considerations resulting from lacking that support. For example, if that support was there to close security holes, then this document would introduce new security vulnerabilities, or at least narrow the cases where this is safe to use. E.g., is a minimal implementation lacking that other functionality dangerous to put on the public Internet? Why or why not? Editorial: 6) Question: What if a doc comes along that Updates RFC 7296? Is suc= h a doc expected to Update this document too or not? How do we ensure that such authors are aware of this document since this one doesn't Update RFC 7296 itself? 7) The document needs a number of English grammar fixes throughout. I propose editorial fixes using tracked changes in place in the PDF above for most such cases where I could tell what was intended. There were a number of cases where I could not tell what the authors intended though, and so called those out with comments. 8) A number of terms are used without definition or reference, at leas= t before they're used. I've called out a number of such cases in the marked up copy. Examples include IKE_SA_INIT in section 1, "home area network server" in section 1.1, "child SA" in section 2.1, etc. If a reader is exp= ected to know these terms before reading this document, it would be good for the Introduction to say what is expected pre-reading. Another example is the use of the term "server" which is unclear as to whether it's synonymous with "responder", since the term "server" is undefined. If they are synonymous, it would be better to use consistent terminology. 9) [IPSECARCH] is cited on Page 12 but is not in the references sectio= n. Dave --_000_BY2PR03MB4126563A7DF1A50455658F3A3430BY2PR03MB412namprd_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi,

 

I am an assigned INT directorate reviewer for dra= ft-ietf-lwig-ikev2-minimal-03.

These comments were written primarily for the ben= efit of the Internet

Area Directors.  Document editors and shephe= rd(s) should treat these

comments just like they would treat comments from= any other IETF

contributors and resolve them along with any othe= r Last Call comments

that have been received. For more details on the = INT Directorate,

see http://www.ietf.org/iesg/directorate.html.

 

A marked up copy with my comments in line is at

http://research.microsoft.com/~dthaler/= draft-ietf-lwig-ikev2-minimal-03.pdf

 

Possibly technical:

1)      Page 5 discusses cryptographic algorithms but does = not state, nor reference

any other document tha= t states, what algorithm(s) are mandatory to

implement in a minimal= implementation.  Without that, implementations

may not interoperate.<= o:p>

2)      Page 6 talks about agreeing on a PRF.   B= ut it does not state, nor reference

anywhere else that sta= tes, how such is agreed upon or what is mandatory

to implement.

3)      I am not familiar with IKEv2 protocol details, but = the second paragraph

of section 2.1 implies that only initiators s= end requests, and only

responders send responses, and only requests = are retransmitted.  However,

much of the rest of the document, including p= arts of section 2.1, imply

that initiators (especially minimal implement= ations of an initiator)

receive requests such as CREATE_CHILD_SA, etc= .   This contradiction

should be addressed.

4)      Several places talk about what a “typicalR= 21; minimal implementation would

do, or what a minimal implementation would &#= 8220;usually” do.  However, it’s

not clear what the alternative(s) are.  = Since an implementation of this draft

is not RFC 7296 compliant, it’s unclear= whether there are other atypical

things that are also non-compliant but legal = in this document, or whether

the only alternatives are to do exactly what = RFC 7296 says.

5)      The security considerations section needs work.&nbs= p; Since this document

removes functionality that is mandatory in RF= C 7296, it needs to discuss

the considerations resulting from lacking tha= t support.  For example, if

that support was there to close security hole= s, then this document would

introduce new security vulnerabilities, or at= least narrow the cases where

this is safe to use.  E.g., is a minimal= implementation lacking that other

functionality dangerous to put on the public = Internet?  Why or why not?

 

Editorial:

6)      Question: What if a doc comes along that Updates RF= C 7296?   Is such a doc

expected to Update this document too or not?&= nbsp; How do we ensure that such

authors are aware of this document since this= one doesn’t Update RFC 7296

itself?

7)      The document needs a number of English grammar fixe= s throughout.

I propose editorial fi= xes using tracked changes in place in the PDF

above for most such ca= ses where I could tell what was intended.

There were a number of ca= ses where I could not tell what the authors

intended though, and so c= alled those out with comments.

8)      A number of terms are used without definition or re= ference, at least

before they’re used.  I’ve c= alled out a number of such cases in the marked

up copy.  Examples include IKE_SA_INIT i= n section 1, “home area network

server” in section 1.1, “child SA= ” in section 2.1, etc.  If a reader is expected

to know these terms before reading this docum= ent, it would be good for

the Introduction to say what is expected pre-= reading.   Another example

is the use of the term “server” w= hich is unclear as to whether it’s

synonymous with “responder”, sinc= e the term “server” is undefined.

If they are synonymous, it would be better to= use consistent terminology.

9)      [IPSECARCH] is cited on Page 12 but is not in the r= eferences section.

 

Dave

--_000_BY2PR03MB4126563A7DF1A50455658F3A3430BY2PR03MB412namprd_-- From nobody Mon Sep 28 12:58:12 2015 Return-Path: X-Original-To: int-dir@ietfa.amsl.com Delivered-To: int-dir@ietfa.amsl.com Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E6C9B1B2C43; Mon, 28 Sep 2015 12:58:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.002 X-Spam-Level: X-Spam-Status: No, score=-102.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, USER_IN_WHITELIST=-100] autolearn=ham Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZkKhcvGkr2dq; Mon, 28 Sep 2015 12:58:04 -0700 (PDT) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0784.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::784]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 094821B2C4B; Mon, 28 Sep 2015 12:58:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=hrgnQNTpFURDFquGXwcmfBWB/znW6zabsfIqfVk6lGE=; b=c7CXMnx+SpjtGFiP1AfMyME8vpLCcNhP+/jXd2GrZtb1sv0U4PfWH1KOyERcvnw8yN7+Nl6iQ+EfrKJhdPBrYv8e15gB9aLaUKan4Jzdj8+bd0qJEE9lV8hjCZ9vIZWSDe/qQL7SBRR/KQ+A332If1JVLyohFm+dw7WVduPqyPo= Received: from BY2PR03MB412.namprd03.prod.outlook.com (10.141.141.25) by BY2PR03MB412.namprd03.prod.outlook.com (10.141.141.25) with Microsoft SMTP Server (TLS) id 15.1.274.16; Mon, 28 Sep 2015 19:57:39 +0000 Received: from BY2PR03MB412.namprd03.prod.outlook.com ([10.141.141.25]) by BY2PR03MB412.namprd03.prod.outlook.com ([10.141.141.25]) with mapi id 15.01.0274.009; Mon, 28 Sep 2015 19:57:39 +0000 From: Dave Thaler To: Tero Kivinen Thread-Topic: INT Dir review: draft-ietf-lwig-ikev2-minimal-03 Thread-Index: AdD3FuN4CHRlsH5OSSWYtx057DmQnAAA2aWQALQVGoAADvYLoA== Date: Mon, 28 Sep 2015 19:57:39 +0000 Message-ID: References: <22025.13527.197542.933179@fireball.acr.fi> In-Reply-To: <22025.13527.197542.933179@fireball.acr.fi> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dthaler@microsoft.com; x-originating-ip: [131.107.192.62] x-microsoft-exchange-diagnostics: 1; BY2PR03MB412; 5:JDmYK4GHhoc8iVmJGQSiCVP8h3coY0GwjkYo0Xnv4/IUsoOq870y6752lN1f4W9PcLOlCKJtAtACPQkGInbTBqbdpCZcsr01YIlMWEiTnBtWruWEbmuiR5gGjtDnbrd0+SWM9MNq8QnkqPDiecmopg==; 24:wwrAq56tPk2aqZVniQkiKyEfCpc4n/WFKIGckeE/2n/iZYpZI1eHddzdBq4Ej8AiS6DZEc9S5yNkzuapvEnWgtrpQeVCtyfRj954RWJCRLs=; 20:iAgniAwKt11+doReZ/hMVabBqHPmptD74CHhEkZ4j4K89oQ4jXyk4apR7g+0zWJHYqZFZKyEs0oNithJUIb00Q== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR03MB412; x-o365eop-header: O365_EOP: Allow for Unauthenticated Relay x-o365ent-eop-header: Message processed by - O365_ENT: Allow from ranges (Engineering ONLY) x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(108003899814671); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425024)(601004)(2401047)(5005006)(520078)(8121501046)(3002001)(61426024)(61427024); SRVR:BY2PR03MB412; BCL:0; PCL:0; RULEID:; SRVR:BY2PR03MB412; x-forefront-prvs: 0713BC207F x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(189002)(377454003)(199003)(13464003)(561944003)(230783001)(74316001)(101416001)(54356999)(50986999)(76176999)(81156007)(5001860100001)(8990500004)(5007970100001)(4001540100001)(102836002)(76576001)(97736004)(11100500001)(5001830100001)(86612001)(86362001)(5003600100002)(66066001)(10290500002)(5001920100001)(62966003)(5005710100001)(64706001)(19580395003)(10090500001)(551544002)(2900100001)(19580405001)(40100003)(189998001)(77096005)(92566002)(5004730100002)(68736005)(10400500002)(5002640100001)(122556002)(2950100001)(110136002)(77156002)(5001960100002)(33656002)(106356001)(46102003)(99286002)(87936001)(105586002); DIR:OUT; SFP:1102; SCL:1; SRVR:BY2PR03MB412; H:BY2PR03MB412.namprd03.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: microsoft.com does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Sep 2015 19:57:39.4747 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR03MB412 Archived-At: Cc: "draft-ietf-lwig-ikev2-minimal@tools.ietf.org" , "int-ads@tools.ietf.org" , "lwig-chairs@ietf.org" , "int-dir@ietf.org" Subject: Re: [Int-dir] INT Dir review: draft-ietf-lwig-ikev2-minimal-03 X-BeenThere: int-dir@ietf.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: "This list is for discussion between the members of the Internet Area directorate." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Sep 2015 19:58:09 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBUZXJvIEtpdmluZW4gW21haWx0 bzpraXZpbmVuQGlraS5maV0NCj4gU2VudDogTW9uZGF5LCBTZXB0ZW1iZXIgMjgsIDIwMTUgNToz OSBBTQ0KPiBUbzogRGF2ZSBUaGFsZXIgPGR0aGFsZXJAbWljcm9zb2Z0LmNvbT4NCj4gQ2M6IGlu dC1kaXJAaWV0Zi5vcmc7IGludC1hZHNAdG9vbHMuaWV0Zi5vcmc7IGRyYWZ0LWlldGYtbHdpZy1p a2V2Mi0NCj4gbWluaW1hbEB0b29scy5pZXRmLm9yZzsgbHdpZy1jaGFpcnNAaWV0Zi5vcmcNCj4g U3ViamVjdDogSU5UIERpciByZXZpZXc6IGRyYWZ0LWlldGYtbHdpZy1pa2V2Mi1taW5pbWFsLTAz DQo+IA0KPiBEYXZlIFRoYWxlciB3cml0ZXM6DQo+ID4gUG9zc2libHkgdGVjaG5pY2FsOg0KPiA+ DQo+ID4gMSkgUGFnZSA1IGRpc2N1c3NlcyBjcnlwdG9ncmFwaGljIGFsZ29yaXRobXMgYnV0IGRv ZXMgbm90IHN0YXRlLCBub3INCj4gPiByZWZlcmVuY2UgYW55IG90aGVyIGRvY3VtZW50IHRoYXQg c3RhdGVzLCB3aGF0IGFsZ29yaXRobShzKSBhcmUNCj4gPiBtYW5kYXRvcnkgdG8gaW1wbGVtZW50 IGluIGEgbWluaW1hbCBpbXBsZW1lbnRhdGlvbi4gV2l0aG91dCB0aGF0LA0KPiA+IGltcGxlbWVu dGF0aW9ucyBtYXkgbm90IGludGVyb3BlcmF0ZS4NCj4gDQo+IEluIElQc2VjIGFuZCBJS0Ugd2Ug aGF2ZSBkZWNpZGVkIHRvIHNwZWNpZnkgdGhlIG1hbmRhdG9yeSB0byBpbXBsZW1lbnQNCj4gYWxn b3JpdGhtcyBpbiBzZXBhcmF0ZSBkb2N1bWVudCwgbm90IGluIHRoZSBiYXNlIHNwZWNpZmljYXRp b24uDQo+IA0KPiBUaGlzIHdheSB0aGUgbWFuZGF0b3J5IHRvIGltcGxlbWVudCBhbGdvcml0aG1z IGNhbiBiZSBjaGFuZ2VkIHdpdGhvdXQgbmVlZA0KPiB0byBtb2RpZnkgdGhlIGJhc2Ugc3BlY2lm aWNhdGlvbi4NCg0KVGhlbiB5b3Ugc2hvdWxkIGNpdGUgdGhlIHNlcGFyYXRlIGRvY3VtZW50Lg0K DQo+IA0KPiBBcyB0aGlzIGRvY3VtZW50IGhhcyBzYW1lIG1hbmRhdG9yeSB0byBpbXBsZW1lbnQg YWxnb3JpdGhtcyBhcyBiYXNlIElLRXYyLA0KPiBpdCB1c2VzIHNhbWUgZG9jdW1lbnRzIGZvciB0 aG9zZS4gVGhpcyBtZWFucyB0aGF0IGZvciBJS0V2MiB0aGUgbWFuZGF0b3J5IHRvDQo+IGltcGxl bWVudCBhbGdvcml0aG1zIGFyZSBzcGVjaWZpZWQgaW4gdGhlIFJGQzQzMDcgYW5kIGZvciBJUHNl YyB0aGV5IGFyZQ0KPiBzcGVjaWZpZWQgaW4gdGhlIFJGQzczMjEuDQo+IA0KPiBJbiBwcmFjdGlj ZSBtb3N0IG9mIHRoZSBtaW5pbWFsIGltcGxlbWVudGF0aW9ucyB3aWxsIGltcGxlbWVudCB3aGF0 ZXZlciBpcw0KPiB1c2FibGUgaW4gdGhlIHVzZSBzY2VuYXJpbyB3aGVyZSB0aGV5IGFyZSB0byBi ZSB1c2VkLiBJLmUgY29tbW9uIGNhc2UgaXMgdGhhdA0KPiB0aGUgc2VydmVyIGVuZCBpcyBmdWxs IElLRXYyIGltcGxlbWVudGF0aW9uIGFuZCBpdCB3aWxsIHN1cHBvcnQgd2lkZSByYW5nZSBvZg0K PiBhbGdvcml0aG1zLiBUaGUgbWluaW1hbCBpbXBsZW1lbnRhdGlvbiB3aWxsIHRoZW4gaW1wbGVt ZW50IHNvbWUgYWxnb3JpdGhtDQo+IHN1cHBvcnRlZCBieSB0aGUgb3RoZXIgZW5kLg0KPiANCj4g VGhlIFJGQzQzMDcgaXMgYml0IG9sZCBhbmQgd291bGQgbmVlZCB0byBiZSB1cGRhdGVkLCBhcyBp dCBzdGlsbCBzcGVjaWZpZXMgYXMNCj4gM0RFUyBhcyBvbmx5IG1hbmRhdG9yeSB0byBpbXBsZW1l bnQgZW5jcnlwdGlvbiBhbGdvcml0aG0gYW5kIDEwMjQtYml0DQo+IE1PRFAgZ3JvdXAgYXMgb25s eSBtYW5kYXRvcnkgdG8gaW1wbGVtZW50IElLRXYyIERpZmZpZS1IZWxsbWFuIEdyb3VwLg0KPiBC b3RoIG9mIHRob3NlIGFyZSBiaXQgcXVlc3Rpb25hYmxlIGZvciB0aGUgc2VjdXJpdHkgcG9pbnQg b2Ygdmlldy4gVGhlDQo+IFBSRl9ITUFDX1NIQTEgYW5kIEFVVEhfSE1BQ19TSEExXzk2IHNob3Vs ZCBzdGlsbCBiZSBvay4NCj4gDQo+IEkgd291bGQgZXhwZWN0IG1pbmltYWwgaW1wbGVtZW50YXRp b25zIHJldXNpbmcgZXhpc3RpbmcgY3J5cHRvIGFsZ29yaXRobXMNCj4gdGhleSBoYXZlIGluIHRo ZWlyIHN5c3RlbSwgZm9yIGV4YW1wbGUgdGhlIDgwMi4xNS40IGhhcmR3YXJlIHVzdWFsbHkgaGF2 ZQ0KPiBoYXJkd2FyZSBzdXBwb3J0IGZvciBBRVMtQ0NNLCBzbyByZXVzaW5nIHRoYXQgaW4gdGhl IG1pbmltYWwgSUtFIGxldmVsIHdvdWxkDQo+IGJlIHNtYXJ0IGFuZCBtYWtlIHRoZSBjb2RlIHNt YWxsZXIuDQo+IA0KPiBBbnl3YXlzIHRoaXMgZG9jdW1lbnQgZG9lcyBub3QgY2hhbmdlIHdoYXQg SUtFdjIgYWxyZWFkeSBzcGVjaWZpZXMgZm9yIHRoZQ0KPiBtYW5kYXRvcnkgdG8gdXNlIGFsZ29y aXRobXMsIGFuZCBJIHdhbnQgdG8ga2VlcCBpdCB0aGF0IHdheS4NCj4gDQo+IFVwZGF0aW5nIHRo ZSBSRkM0MzA3IGJlbG9uZ3MgdG8gdGhlIElQc2VjTUUgV0cuDQo+IA0KPiA+IDIpIFBhZ2UgNiB0 YWxrcyBhYm91dCBhZ3JlZWluZyBvbiBhIFBSRi4gQnV0IGl0IGRvZXMgbm90IHN0YXRlLCBub3IN Cj4gPiByZWZlcmVuY2UgYW55d2hlcmUgZWxzZSB0aGF0IHN0YXRlcywgaG93IHN1Y2ggaXMgYWdy ZWVkIHVwb24gb3Igd2hhdA0KPiA+IGlzIG1hbmRhdG9yeSB0byBpbXBsZW1lbnQuDQo+IA0KPiBU aGUgY3J5cHRvZ3JhcGhpYyBhbGdvcml0aG1zIGFyZSBuZWdvdGlhdGVkIGJ5IHRoZSBJS0VfU0Ff SU5JVCBleGNoYW5nZSwgaS5lLg0KPiB0aGUgaW5pdGlhdG9yIHNlbmRzIFNBaTEgd2hpY2ggInN0 YXRlcyB0aGUgY3J5cHRvZ3JhcGhpYyBhbGdvcml0aG1zIHRoZSBpbml0aWF0b3INCj4gc3VwcG9y dHMgZm9yIHRoZSBJS0UgU0EiLCBhbmQgdGhlbiB0aGUgcmVzcG9uZGVyIHJlcGxpZXMgd2l0aCBT QXIxIHdoaWNoDQo+ICJjb250YWlucyBjaG9zZW4gY3J5cHRvZ3JhcGhpYyBzdWl0ZSBmcm9tIGlu aXRpYXRvcidzIG9mZmVyZWQgY2hvaWNlcy4iLg0KPiANCj4gSS5lLiBvbmUgb2YgdGhvc2UgY3J5 cHRvZ3JhcGhpYyBhbGdvcml0aG1zIGFncmVlZCBkdXJpbmcgdGhhdCBleGhjYW5nZSBpcw0KPiBU cmFuc2Zvcm0gVHlwZSAyLCBQc2V1ZG9yYW5kb20gRnVuY3Rpb24gKFBSRikuIEZvciBtb3JlIGlu Zm9ybWF0aW9uIG9mIHRoYXQNCj4gc2VlIHNlY3Rpb24gQS4zLjIgZm9yIGFjdHVhbCB0cmFuc2Zv cm1zIGFuZCBBLjMgaW4gZ2VuZXJhbC4NCg0KVGhlbiBhZGQgYSByZWZlcmVuY2UgZnJvbSBwYWdl IDYgdG8gdGhvc2UgYXBwZW5kaXggc2VjdGlvbnMuICBJLmUuIGRvbid0IGp1c3QgDQphbnN3ZXIg bWUgaW4gZW1haWwsIHB1dCB0aGUgYW5zd2VyIGludG8gdGhlIHJlbGV2YW50IHRleHQuDQoNCj4g DQo+ID4gMykgSSBhbSBub3QgZmFtaWxpYXIgd2l0aCBJS0V2MiBwcm90b2NvbCBkZXRhaWxzLCBi dXQgdGhlIHNlY29uZA0KPiA+IHBhcmFncmFwaCBvZiBzZWN0aW9uIDIuMSBpbXBsaWVzIHRoYXQg b25seSBpbml0aWF0b3JzIHNlbmQgcmVxdWVzdHMsDQo+ID4gYW5kIG9ubHkgcmVzcG9uZGVycyBz ZW5kIHJlc3BvbnNlcywgYW5kIG9ubHkgcmVxdWVzdHMgYXJlDQo+ID4gcmV0cmFuc21pdHRlZC4N Cj4gDQo+IFllcy4gSW5pdGlhdG9yID09IHRoZSBvbmUgd2hvIGluaXRpYXRlZCB0aGUgZXhjaGFu Z2UuIFRoZXJlIGlzIGFsc28gdGVybSBjYWxsZWQNCj4gIm9yaWdpbmFsIGluaXRpYXRvciIgd2hp Y2ggc3BlY2lmaWVzIHdobyB3YXMgdGhlIG9yaWdpbmFsIGluaXRpYXRvciBvZiB0aGUNCj4gSUtF X1NBX0lOSVQgd2hpY2ggY3JlYXRlZCB0aGUgSUtFIFNBLg0KPiANCj4gPiBIb3dldmVyLCBtdWNo IG9mIHRoZSByZXN0IG9mIHRoZSBkb2N1bWVudCwgaW5jbHVkaW5nIHBhcnRzIG9mIHNlY3Rpb24N Cj4gPiAyLjEsIGltcGx5IHRoYXQgaW5pdGlhdG9ycyAoZXNwZWNpYWxseSBtaW5pbWFsIGltcGxl bWVudGF0aW9ucyBvZiBhbg0KPiA+IGluaXRpYXRvcikgcmVjZWl2ZSByZXF1ZXN0cyBzdWNoIGFz IENSRUFURV9DSElMRF9TQSwgZXRjLiBUaGlzDQo+ID4gY29udHJhZGljdGlvbiBzaG91bGQgYmUg YWRkcmVzc2VkLg0KPiANCj4gSW4gMi4xIHRoZSBpbml0aWF0b3IgPSBpbml0aWF0b3Igb2YgdGhl IElLRV9TQV9JTklUIGFuZCBJS0VfQVVUSCA9PSBtaW5pbWFsDQo+IGltcGxlbWVudGF0aW9uLg0K PiANCj4gVGhlIHNlY3Rpb24gMi4yIGlzIHdyb25nLCBhcyBpdCBzaG91bGQgbm90IGNvbnRhaW4g dGhlIHdvcmRzICJJbml0aWF0b3IiIGFuZA0KPiAiUmVzcG9uZGVyIiBpbiB0aGUgZmlndXJlcywg YXMgaW4gdGhhdCBjYXNlIHRoZSBNaW5pbWFsIGltcGxlbWVudGF0aW9uIHdpbGwgYmUNCj4gYWN0 aW5nIGFzIHJlc3BvbmRlciwgYW5kIHRoZSBvdGhlciBlbmQgd2lsbCBhY3QgYXMgaW5pdGlhdG9y LiBJIHdpbGwgY2hhbmdlIHRob3NlDQo+IHRvIHRvIGJlICJNaW5pbWFsIGltcGxlbWVudGF0aW9u IiBhbmQgIk90aGVyIGVuZCIuDQo+IA0KPiA+IDQpIFNldmVyYWwgcGxhY2VzIHRhbGsgYWJvdXQg d2hhdCBhIOKAnHR5cGljYWzigJ0gbWluaW1hbCBpbXBsZW1lbnRhdGlvbg0KPiA+IHdvdWxkIGRv LCBvciB3aGF0IGEgbWluaW1hbCBpbXBsZW1lbnRhdGlvbiB3b3VsZCDigJx1c3VhbGx54oCdIGRv Lg0KPiA+IEhvd2V2ZXIsIGl04oCZcyBub3QgY2xlYXIgd2hhdCB0aGUgYWx0ZXJuYXRpdmUocykg YXJlLiAgU2luY2UgYW4NCj4gPiBpbXBsZW1lbnRhdGlvbiBvZiB0aGlzIGRyYWZ0IGlzIG5vdCBS RkMgNzI5NiBjb21wbGlhbnQsIGl04oCZcyB1bmNsZWFyDQo+IA0KPiBJbXBsZW1lbnRhdGlvbnMg b2YgdGhpcyBkcmFmdCBpcyBtb3N0bHkgUkZDIDcyOTYgY29tcGxpZW50LCBvbmx5IHRoaW5nIGxl ZnQgb3V0DQo+IGlzIHRoZSBjZXJ0aWZpY2F0ZSBhdXRoZW50aWNhdGlvbi4NCj4gDQo+ID4gd2hl dGhlciB0aGVyZSBhcmUgb3RoZXIgYXR5cGljYWwgdGhpbmdzIHRoYXQgYXJlIGFsc28gbm9uLWNv bXBsaWFudA0KPiA+IGJ1dCBsZWdhbCBpbiB0aGlzIGRvY3VtZW50LCBvciB3aGV0aGVyIHRoZSBv bmx5IGFsdGVybmF0aXZlcyBhcmUgdG8gZG8NCj4gPiBleGFjdGx5IHdoYXQgUkZDIDcyOTYgc2F5 cy4NCj4gDQo+IFRoZSB3b3JkcyAidHlwaWNhbCIgYW5kICJ1c3VhbGx5IiBhcmUgdXNlZCB0byBz cGVjaWZ5IHdoaWNoIGlzIHRoZSBtaW5pbWFsIHdheQ0KPiBpbXBsZW1lbnRhdGlvbnMgY2FuIGRv IGFuZCBzdGlsbCBiZSBjb25mb3JtaW5nIHRvIHRoZSBSRkMNCj4gNzI5NiBmb3IgdGhhdCBwYXJ0 LiBGb3IgZXhhbXBsZToNCj4gDQo+ICAgICAgIEFzIG1pbmltYWwgaW1wbGVtZW50YXRpb24gdXN1 YWxseSBoYXMgb25seSBvbmUgaG9zdCB3aGVyZSBpdA0KPiAgICAgICBjb25uZWN0cywgYW5kIHRo YXQgbWVhbnMgaXQgaGFzIG9ubHkgb25lIHNoYXJlZCBzZWNyZXQuIFRoaXMNCj4gICAgICAgbWVh bnMgaXQgZG9lcyBub3QgbmVlZCB0byBjYXJlIGFib3V0IElEciBwYXlsb2FkIHRoYXQgbXVjaC4g SWYNCj4gICAgICAgdGhlIG90aGVyIGVuZCBzZW5kcyBBVVRIIHBheWxvYWQgd2hpY2ggaW5pdGlh dG9yIGNhbiB2ZXJpZnkNCj4gICAgICAgdXNpbmcgdGhlIHNoYXJlZCBzZWNyZXQgaXQgaGFzLCB0 aGVuIGl0IGtub3dzIHRoZSBvdGhlciBlbmQgaXMNCj4gICAgICAgdGhlIHBlZXIgaXQgd2FzIGNv bmZpZ3VyZWQgdG8gdGFsayB0by4NCj4gDQo+IFRoZSB0ZXh0ICJ1c3VhbGx5IGhhcyBvbmx5IG9u ZSBob3N0IiBtZWFucyB0aGF0IGl0IGlzIGNvbXBsZXRlbHkgdmFsaWQgYnkNCj4gUkZDNzI5NiB0 byBvbmx5IGhhdmUgb25lIGhvc3QgdG8gd2hpY2ggaXQgY2FuIGNvbm5lY3QsIHRoZXJlIGlzIG5v IHJlcXVpcmVtZW50DQo+IGluIFJGQzcyOTYgdG8gYmUgYWJsZSB0byB0YWxrIHRvIG11bHRpcGxl IGhvc3RzIGF0IHNhbWUgdGltZS4gQW5kIGlmIG1pbmltYWwNCj4gaW1wbGVtZW50YXRpb24gY2Fu IG9ubHkgdGFsayB0byBvbmUgaG9zdCwgaXQgZG9lcyBub3QgbmVlZCB0byBjYXJlIGFib3V0IElE ciwgYXMNCj4gaXQgZG9lcyBub3QgbmVlZCB0aGF0IHRvIGlkZW50aWZ5IHRvIHdob20gaXQgaXMg dGFsa2luZyB0bywgYXMgaXQgaGFzIG9ubHkgb25lIGhvc3QNCj4gaXQgY2FuIGJlIHRhbGtpbmcg dG8uDQo+IElmIG90aGVyIGVuZCBrbm93cyBob3cgdG8gYXV0aGVudGljYXRlIGhpbXNlbGYsIHRo YXQgaXMgZW5vdWdoLg0KPiANCj4gT24gdGhlIG90aGVyIGhhbmQgdGhlcmUgYXJlIHVzZSBjYXNl cyB3aGVyZSB0aGUgbWluaW1hbCBpbXBsZW1lbnRhdGlvbiBpcw0KPiBub3Qgc28gbWluaW1hbCBh bnltb3JlLCBidXQgaW5zdGVhZCB3YW50cyB0byB0YWxrIHRvIGZvciBleGFtcGxlIHR3byBkZXZp Y2VzDQo+IGluc3RlYWQgb2Ygb25lLiBUaGVuIGl0IGNhbm5vdCB1c2UgdGhpcyBvcHRpbWl6YXRp b24uDQoNCllvdXIgYW5zd2VyIGNhbm5vdCBiZSBmb3VuZCBpbiB0aGUgZG9jdW1lbnQuICBJIHJl Y29tbWVuZCBhZGRpbmcgdGV4dA0KZnJhbWluZyB0aGUgY29udGV4dC4gIE1heWJlIG9uY2UgZWFy bHkgb24gZXhwbGFpbmluZyBob3cgInVzdWFsbHkvdHlwaWNhbGx5Ig0Kc2hvdWxkIGJlIGludGVy cHJldGVkPw0KIA0KPiA+IDUpIFRoZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBzZWN0aW9uIG5l ZWRzIHdvcmsuIFNpbmNlIHRoaXMgZG9jdW1lbnQNCj4gPiByZW1vdmVzIGZ1bmN0aW9uYWxpdHkg dGhhdCBpcyBtYW5kYXRvcnkgaW4gUkZDIDcyOTYsIGl0IG5lZWRzIHRvDQo+ID4gZGlzY3VzcyB0 aGUgY29uc2lkZXJhdGlvbnMgcmVzdWx0aW5nIGZyb20gbGFja2luZyB0aGF0IHN1cHBvcnQuIEZv cg0KPiA+IGV4YW1wbGUsIGlmIHRoYXQgc3VwcG9ydCB3YXMgdGhlcmUgdG8gY2xvc2Ugc2VjdXJp dHkgaG9sZXMsIHRoZW4gdGhpcw0KPiA+IGRvY3VtZW50IHdvdWxkIGludHJvZHVjZSBuZXcgc2Vj dXJpdHkgdnVsbmVyYWJpbGl0aWVzLCBvciBhdCBsZWFzdA0KPiA+IG5hcnJvdyB0aGUgY2FzZXMg d2hlcmUgdGhpcyBpcyBzYWZlIHRvIHVzZS4gRS5nLiwgaXMgYSBtaW5pbWFsDQo+ID4gaW1wbGVt ZW50YXRpb24gbGFja2luZyB0aGF0IG90aGVyIGZ1bmN0aW9uYWxpdHkgZGFuZ2Vyb3VzIHRvIHB1 dCBvbg0KPiA+IHRoZSBwdWJsaWMgSW50ZXJuZXQ/IFdoeSBvciB3aHkgbm90Pw0KPiANCj4gVGhp cyBkb2N1bWVudCBpcyBjb25mb3JtaW5nIHRvIHRoZSBSRkM3Mjk2LCBzbyBpdCBpcyBpbmhlcml0 cyBhbGwgc2FtZSBzZWN1cml0eQ0KPiBwcm9wZXJ0aWVzIGZyb20gaXQuIEl0IHVzZXMgb25lIG9m IHRoZSBtYW5kYXRvcnkgdG8gaW1wbGVtZW50IGF1dGhlbnRpY2F0aW9uDQo+IG1ldGhvZHMsIHdo aWNoIGlzIGFscmVhZHkgY292ZXJlZCBpbiB0aGUgUkZDNzI5NiBzZWN1cml0eSBjb25zaWRlcmF0 aW9ucw0KPiBzZWN0aW9uLiBUaGUgUkZDNzI5NiBkaWQgYWxyZWFkeSBjb25zaWRlciBwcmUtc2hh cmVkIGtleXMgYXV0aGVudGljYXRpb24NCj4gYmVpbmcgc2FmZSBlbm91Z2ggdG8gYmUgdXNlZCBp biBnZW5lcmFsIGNhc2UuIFRoaXMgZG9lcyBub3QgY2hhbmdlIHRoaXMuDQo+IA0KPiBUaGVyZSBh cmUgbG90cyBvZiBpbXBsZW1lbnRhdGlvbnMgb3V0IHRoZXJlIHdoaWNoIGRvIHVzZSBwcmUtc2hh cmVkIGtleXMgYXMNCj4gdGhlaXIgYXV0aGVudGljYXRpb24gbWV0aG9kIGluIHRoZSBpbnRlcm5l dCBhbHJlYWR5LCBzbyB0aGlzIGRvY3VtZW50IGRvZXMgbm90DQo+IGNoYW5nZSB0aGF0LiBXZSBk byBjb3ZlciB0aGUgY2FzZSB3aGVyZSBzaGFyZWQgc2VjcmV0IGF1dGhlbnRpY2F0aW9uIGlzIG5v dA0KPiBnb29kIGVub3VnaCwgaS5lLiBpbiB0aGUgQXBwZW5kaXggQi4yIHdoZXJlIHdlIGRpc2N1 c3MgYWJvdXQgdGhlIHJhdyBwdWJsaWMNCj4ga2V5cy4NCj4gDQo+IFRoZSBSRkM3Mjk2IHNlY3Vy aXR5IGNvbnNpZGVyYXRpb25zIHNlY3Rpb24gd2FybnMgYWJvdXQgcHJlLXNoYXJlZCBrZXlzIGFz DQo+IGZvbGxvd3M6DQo+IA0KPiAgICBXaGVuIHVzaW5nIHByZS1zaGFyZWQga2V5cywgYSBjcml0 aWNhbCBjb25zaWRlcmF0aW9uIGlzIGhvdyB0byBhc3N1cmUNCj4gICAgdGhlIHJhbmRvbW5lc3Mg b2YgdGhlc2Ugc2VjcmV0cy4gIFRoZSBzdHJvbmdlc3QgcHJhY3RpY2UgaXMgdG8gZW5zdXJlDQo+ ICAgIHRoYXQgYW55IHByZS1zaGFyZWQga2V5IGNvbnRhaW4gYXMgbXVjaCByYW5kb21uZXNzIGFz IHRoZSBzdHJvbmdlc3QNCj4gICAga2V5IGJlaW5nIG5lZ290aWF0ZWQuICBEZXJpdmluZyBhIHNo YXJlZCBzZWNyZXQgZnJvbSBhIHBhc3N3b3JkLA0KPiAgICBuYW1lLCBvciBvdGhlciBsb3ctZW50 cm9weSBzb3VyY2UgaXMgbm90IHNlY3VyZS4gIFRoZXNlIHNvdXJjZXMgYXJlDQo+ICAgIHN1Ympl Y3QgdG8gZGljdGlvbmFyeSBhbmQgc29jaWFsLWVuZ2luZWVyaW5nIGF0dGFja3MsIGFtb25nIG90 aGVycy4NCg0KVGhhdCBkb2Vzbid0IGFkZHJlc3MgbXkgY29tbWVudCBhdCBhbGwuDQpJZiB5b3Ug aGF2ZSBhIGRldmljZSB3aGljaCBpcyBpbmNhcGFibGUgb2YgYmVpbmcgY29uZmlndXJlZCB3aXRo DQpjZXJ0aWZpY2F0ZSBhdXRoLCB0aGVuIGl0IGNhbm5vdCBiZSB1c2VkIGluIGFueSBjYXNlcyB3 aGVyZSBwcmUtc2hhcmVkIGtleXMNCmFyZSBsZXNzIHNlY3VyZSAodGhhbiBjZXJ0cykgZm9yIHdo YXRldmVyIHJlYXNvbi4gICBBcyBzdWNoLCB5b3UncmUgDQpwb3RlbnRpYWxseSBpbnRyb2R1Y2lu ZyBuZXcgc2VjdXJpdHkgY29uc2lkZXJhdGlvbnMgYnkgcHJlY2x1ZGluZyBzdWNoDQpzdXBwb3J0 IGluIGRldmljZXMuICBUaGF0IG5lZWRzIHRvIGJlIGFkZHJlc3NlZCBpbiB0aGUgc2VjLiBjb25z aWRlcmF0aW9ucw0Kc2VjdGlvbiwgaXQncyBub3Qgc3VmZmljaWVudCB0byBqdXN0IHNheSBpdCdz ICJzYW1lIGFzIFJGQyA3Mjk2Ii4NCg0KPiANCj4gPiBFZGl0b3JpYWw6DQo+ID4NCj4gPiA2KSBR dWVzdGlvbjogV2hhdCBpZiBhIGRvYyBjb21lcyBhbG9uZyB0aGF0IFVwZGF0ZXMgUkZDIDcyOTY/ IElzIHN1Y2gNCj4gPiBhIGRvYyBleHBlY3RlZCB0byBVcGRhdGUgdGhpcyBkb2N1bWVudCB0b28g b3Igbm90PyBIb3cgZG8gd2UgZW5zdXJlDQo+ID4gdGhhdCBzdWNoIGF1dGhvcnMgYXJlIGF3YXJl IG9mIHRoaXMgZG9jdW1lbnQgc2luY2UgdGhpcyBvbmUgZG9lc27igJl0DQo+ID4gVXBkYXRlIFJG QyA3Mjk2IGl0c2VsZj8NCj4gDQo+IElmIGRvY3VtZW50IHdoaWNoIHVwZGF0ZXMgNzI5NiBjaGFu Z2VzIHNvbWV0aGluZyBpbiBzdWNoIHdheSB0aGF0IGl0IGlzIG5vDQo+IGxvbmdlciBjb25mb3Jt YW50IHdpdGggNzI5NiAoYW5kIHRvIHRoaXMgZG9jdW1lbnQpIHRoZW4gbW9zdCBsaWtlbHkgdGhp cw0KPiBkb2N1bWVudCB3b3VsZCBuZWVkIHRvIGJlIHVwZGF0ZWQgdG9vLiBPbiB0aGUgb3RoZXIg aGFuZA0KPiBSRkM0MzA2IHdhcyB1cGRhdGVkIHRvIFJGQzU5OTYgYW5kIHRoYXQgd2FzIHVwZGF0 ZWQgdG8gUkZDNzI5NiwgYW5kIG9ubHkNCj4gY2hhbmdlIHRoYXQgd291bGQgaGF2ZSBhZmZlY3Rl ZCB0aGlzIGRvY3VtZW50IHdhcyB0aGUgcmF3IFJTQSBzdXBwb3J0IHZzDQo+IHJhdyBwdWJsaWMg a2V5IHN1cHBvcnQgaW4gQXBwZW5kaXggQi4yLg0KPiANCj4gSVBzZWMgY29tbXVuaXR5IGlzIHF1 aXRlIHNtYWxsLCBhbmQgSSBkbyBub3QgZXhwZWN0IHRoZXJlIHRvIGJlIHByb2JsZW1zIHdpdGgN Cj4gYXV0aG9ycyBiZWluZyBhd2FyZSBvZiB0aGlzIGRvY3VtZW50Li4uDQo+DQo+ID4gNykgVGhl IGRvY3VtZW50IG5lZWRzIGEgbnVtYmVyIG9mIEVuZ2xpc2ggZ3JhbW1hciBmaXhlcyB0aHJvdWdo b3V0Lg0KPiA+IEkgcHJvcG9zZSBlZGl0b3JpYWwgZml4ZXMgdXNpbmcgdHJhY2tlZCBjaGFuZ2Vz IGluIHBsYWNlIGluIHRoZSBQREYNCj4gPiBhYm92ZSBmb3IgbW9zdCBzdWNoIGNhc2VzIHdoZXJl IEkgY291bGQgdGVsbCB3aGF0IHdhcyBpbnRlbmRlZC4NCj4gPiBUaGVyZSB3ZXJlIGEgbnVtYmVy IG9mIGNhc2VzIHdoZXJlIEkgY291bGQgbm90IHRlbGwgd2hhdCB0aGUgYXV0aG9ycw0KPiA+IGlu dGVuZGVkIHRob3VnaCwgYW5kIHNvIGNhbGxlZCB0aG9zZSBvdXQgd2l0aCBjb21tZW50cy4NCj4g DQo+IEkgd2lsbCBjaGVja2VkIHRoZSBwZGYgYW5kIG1hZGUgdGhlIGVkaXRvcmlhbCBjaGFuZ2Vz LiBTb21lIG9mIHRoZSB0ZXh0IGhhZA0KPiBhbHJlYWR5IGNoYW5nZWQsIHNvIGRpZG4ndCBhcHBs eSBhbGwgdGhlIGNoYW5nZXMgZGlyZWN0bHkuDQo+IA0KPiBZb3UgYWxzbyBjb21tZW50ZWQgc2V2 ZXJhbCBzZW50ZW5jZXMgd2hpY2ggd2VyZSB0YWtlbiBkaXJlY3RseSBmcm9tIHRoZQ0KPiBSRkM3 Mjk2IChpbiBzZWN0aW9uIDIuMSkuIEkga2VwdCB0aG9zZSBhcyB0aGV5IHdlcmUgaW4gdGhlIFJG QzcyOTYuDQo+IA0KPiBTb21lIHJlcGxpZXM6DQo+IA0KPiBEVDQ6IFllcywgaXQgaXMgaW50ZW5k ZWQgdG8gYmUgYWJsZSB0byB1bmRlcnN0YW5kIHRob3NlIHRlcm1zIHdoaWxlIHlvdSBnbw0KPiBm b3dhcmQuIE5vIG5lZWQgdG8gcmVhZCA3Mjk2IGZvciB0aG9zZS4NCj4gDQo+IERUMTAsIERUMTI6 IEJvdGggc2VudGVuY2VzIGFyZSBmcm9tIDcyOTYuDQo+IA0KPiBEVDE2OiBEaXJlY3RseSBmcm9t IDcyOTYuIFJlYXNvbiBiZWluZyB0aGF0IElEaSwgSURyLCBUU2ksIGFuZCBUU3IsIGhhdmUNCj4g c2VwYXJhdGUgcGF5bG9hZCBudW1iZXJzLCBidXQgTmkgYW5kIE5yIGhhdmUgc2FtZSBudW1iZXIs IGkuZS4NCj4gdGhlIHBheWxvYWQgbnVtYmVyIGZvciBOaSBhbmQgTnIgYXJlIHNhbWUuDQo+IA0K PiBEVDE3OiBGcm9tIDcyOTYuIEhvdyB0aGV5IGFyZSBnZW5lcmF0ZWQgb3IgY2hvc2VuIGlzIGxl ZnQgdG8gdGhlDQo+IGltcGxlbWVudGF0aW9ucy4gU29tZSB1c2UgaGFzaGVzLCBzb21lLCB1c2Ug c29tZSBraW5kIGNvdW50ZXJzLCBzb21lIGNvdWxkDQo+IGV2ZW4gdXNlIHRoZSBtZW1vcnkgYWRk cmVzcyBvZiB0aGUgSUtFIFNBIHN0cnVjdHVyZSBldGMuDQo+IA0KPiBEVDE5OiBJIG9ubHkgdXNl IHRoZSBNVVNUL1NIT1VMRCBldGMgd2hlbiBJIGdldCB0ZXh0IGRpcmVjdGx5IGZyb20gUkZDNzI5 NiwNCj4gc28gSSBjYW4gYmUgc3VyZSB0aGUgbWVhbmluZyBpcyBzYW1lLiBUaGF0cyB3aHkgSSB1 c2VkICJuZWVkcyB0byIgaGVyZSBhcyB0aGlzDQo+IHRleHQgaXMgbm90IGZyb20gNzI5Ni4gQWxz byBpZiBtaW5pbWFsIGltcGxlbWVudGF0aW9uIG9ubHkgc3VwcG9ydHMgb25lIHNldCBvZg0KPiBh bGdvcml0aG1zLCB0aGVyZSBpcyBhY3R1YWxseSBubyBuZWVkIHRvIGNoZWNrIHdoZXRoZXIgb3Ro ZXIgZW5kIGFjY2VwdGVkIGhpcw0KPiBwcm9wb3NhbCBvciBub3QsIGFzIG90aGVyIGVuZCBjYW5u b3QgdHJpY2sgaGltIHRvIHVzZSB1c2VjdXJlIGFsZ29yaXRobXMsIGlmIGhlDQo+IG9ubHkgc3Vw cG9ydHMgb25lLg0KPiANCj4gRFQyMDogcHJmKyB3YXMgZGVmaW5lZCBmZXcgbGluZXMgYWJvY2Ug aW4gdGhlIGZpZ3VyZS4NCj4gDQo+IERUMjE6IEkgdGhpbmsgRGlmZmllLUhlbGxtYW4gaXMga25v d24gd2lkZWx5IGVub3VnaCwgYW5kIGFkZGluZyByZWZlcmVuY2UgdG8NCj4gcGFwZXIgZnJvbSAx OTc3IGRvZXMgbm90IHJlYWxseSBoZWxwIGFueWJvZHkuDQo+IA0KPiBEVDIyLCBEVDIzOiBGcm9t IDcyOTYuDQo+IA0KPiBEVDI0LCBEVDI1OiBZZXMgKGxlZnQgYXMgdGhleSBhcmUpLg0KPiANCj4g RFQyODogSWYgaW1wbGVtZW5hdGlvbiB3YW50cyB0byBoYXZlIHN1cHBvcnQgZm9yIG11bHRpcGxl IGFsZ29yaXRobXMsIHRoZW4NCj4gdGhleSBjYW4gaW1wbGVtZW50IHRoYXQsIGFuZCB0aGVuIHRo ZXkgbmVlZCB0byBhZGQgc3VwcG9ydCBmb3IgdGhhdCB0b28uDQo+IA0KPiBEVDMxLCBEVDMyOiBt YXkgYmUgaWdub3JlZCB3b3VsZCBhbHNvIHdvcmssIGJ1dCBJIHRyeSB0byBhdm9pZCAyMTE5IGxh bmd1YWdlDQo+IHVubGVzcyBpdCBjb21lcyBmcm9tIHRoZSA3Mjk2Lg0KPiANCj4gRFQzMzogTW9z dCBsaWtlbHkgaW1wbGVtZW50YXRpb25zIHdpbGwgc2VuZCB0aGF0IG5vdGlmeSwgYXMgaXQgZG9l cyBub3QgY29zdA0KPiB0aGVtIHRoYXQgbXVjaCwgYnV0IGNhbiBoZWxwIHRoZSBzZXJ2ZXIgdG8g Y2xlYW4gdXAgc3RhdGUuIE9uIHRoZSBvdGhlciBoYW5kIGlmDQo+IHRoZXkgYXJlIHJlYWxseSBt aW5pbWFsLCB0aGVuIHRoZXkgbWlnaHQgbGVhdmUgaXQgb3V0IGFzIGl0IGRvIGNvc3Qgc29tZSBi eXRlcyB0bw0KPiBiZSB0cmFuc21pdHRlZCwgYW5kIGZldyBieXRlcyB0byBhZGQgdGhhdCBzZXQg b2YgYnl0ZXMgdG8gdGhlIG1lc3NhZ2UuDQo+IA0KPiBEVDM5OiBTZW5kaW5nIHNvbWUgb3RoZXIg ZXJyb3IgY29kZSwgZnVsbHkgaW1wbGVtZW50aW5nIENSRUFURV9DSElMRF9TQQ0KPiBldGMuDQo+ IA0KPiBEVDQwLCA0MTogRnJvbSA3Mjk2Lg0KPiANCj4gRFQ0MzogSSBoYXRlIHRoZSBUT0ZVIHRl cm0uIEkgZG8gbm90IHRydXN0IHRoZSBvdGhlciBlbmQgYXQgdGhlIGZpcnN0IHVzZSwgSSBtaWdo dA0KPiBiZSB3aWxsaW5nIHRvIGFjY2VwdCB0aGUgcmlzayBvbiBmaXJzdCB1c2UsIGkuZS4gbGVh cCBvZiBmYXRlIGRlc2NyaWJlcyB0aGF0IHlvdSBhcmUNCj4gd2lsbGluZyB0byB0YWtlIHJpc2sg YW5kIGFzc3VtZSBvdGhlciBlbmQgaXMgd2hvIGl0IGNsYWltcyB0byBiZS4NCj4gDQo+IERUNDQ6 IEJhYnkgZHVjayB3aWxsIGltcHJpbnQgdG8gZmlyc3QgYmVpbmcgaXQgc2Vlcy4gTm90IHN1cmUg aWYgdGhlcmUgaXMgYW55IGdvb2QNCj4gcmVmZXJlbmNlIGZvciB0aGF0LiBJdCBpcyBkaWZmZXJl bnQgZnJvbSBMZWFwIG9mIEZhdGUsIGFzIGl0IGRvZXMgbm90IGtub3cgd2hvIGhlDQo+IGlzIHRh bGtpbmcgdG8sIGJ1dCBqdXN0IGFzc3VtZXMgdGhhdCBmaXJzdCBvbmUgd2hvIGFuc3dlcnMgaXMg dGhlIG9uZSB3aG8gaGUNCj4gc2hvdWxkIGJlIHRhbGtpbmcgdG8uIEkgZG8gZGVmaW5lIGl0IGlu IHRoZSBzYW1lIHNlbnRlbmNlLg0KPiANCj4gDQo+ID4gOCkgQSBudW1iZXIgb2YgdGVybXMgYXJl IHVzZWQgd2l0aG91dCBkZWZpbml0aW9uIG9yIHJlZmVyZW5jZSwgYXQNCj4gPiBsZWFzdCBiZWZv cmUgdGhleeKAmXJlIHVzZWQuIEnigJl2ZSBjYWxsZWQgb3V0IGEgbnVtYmVyIG9mIHN1Y2ggY2Fz ZXMgaW4NCj4gPiB0aGUgbWFya2VkIHVwIGNvcHkuIEV4YW1wbGVzIGluY2x1ZGUgSUtFX1NBX0lO SVQgaW4gc2VjdGlvbiAxLCDigJxob21lDQo+ID4gYXJlYSBuZXR3b3JrIHNlcnZlcuKAnSBpbiBz ZWN0aW9uIDEuMSwg4oCcY2hpbGQgU0HigJ0gaW4gc2VjdGlvbiAyLjEsIGV0Yy4NCj4gPiBJZiBh IHJlYWRlciBpcyBleHBlY3RlZCB0byBrbm93IHRoZXNlIHRlcm1zIGJlZm9yZSByZWFkaW5nIHRo aXMNCj4gPiBkb2N1bWVudCwgaXQgd291bGQgYmUgZ29vZCBmb3IgdGhlIEludHJvZHVjdGlvbiB0 byBzYXkgd2hhdCBpcw0KPiA+IGV4cGVjdGVkIHByZS1yZWFkaW5nLg0KPiANCj4gWW91IHNob3Vs ZCBiZSBhYmxlIHRvIHJlYWQgdGhpcyB3aXRob3V0IHJlYWRpbmcgYW55dGhpbmcgZWxzZSwgYnV0 IEkgYWdyZWUgdGhhdA0KPiB0aGVyZSBhcmUgc29tZSBjYXNlcyB3aGVyZSB3ZSBmaXJzdCB1c2Ug dGVybSwgYW5kIHRoZW4gY29tZSB0byBkZWZpbmUgaXQgb25seQ0KPiBmZXcgcGFyYWdyYXBoIGJl bG93LiBBZGRpbmcgcmVmZXJlbmNlcyB0byBzdWNoIGNhc2VzIHdvdWxkIGJlIHVubmVjZXNzYXJl bHkNCj4gYXQgbGVhc3QgZm9yIG15IHBvaW50IG9mIHZpZXcuDQo+IA0KPiA+IEFub3RoZXIgZXhh bXBsZSBpcyB0aGUgdXNlIG9mIHRoZSB0ZXJtIOKAnHNlcnZlcuKAnSB3aGljaCBpcyB1bmNsZWFy IGFzIHRvDQo+ID4gd2hldGhlciBpdOKAmXMgc3lub255bW91cyB3aXRoIOKAnHJlc3BvbmRlcuKA nSwgc2luY2UgdGhlIHRlcm0g4oCcc2VydmVy4oCdDQo+ID4gaXMgdW5kZWZpbmVkLiBJZiB0aGV5 IGFyZSBzeW5vbnltb3VzLCBpdCB3b3VsZCBiZSBiZXR0ZXIgdG8gdXNlDQo+ID4gY29uc2lzdGVu dCB0ZXJtaW5vbG9neS4NCj4gDQo+IENoYW5nZWQgbW9zdCBvZiB0aGUgdXNlcyBvZiAic2VydmVy IiBpbiB0aGUgc2VjdGlvbiAyIHRvIHJlc3BvbmRlciwgYXMgdGhhdCBpcw0KPiBjb3JyZWN0IHRl cm0uIEl0IGlzIHN0aWxsIHVzZWQgaW4gVXNlIGNhc2VzLCBJbXBsZW1lbnRhdGlvbiBTdGF0dXMg YW5kIFJhdyBQdWJsaWMNCj4gS2V5cyBzZWN0aW9ucw0KPiANCj4gPiA5KSBbSVBTRUNBUkNIXSBp cyBjaXRlZCBvbiBQYWdlIDEyIGJ1dCBpcyBub3QgaW4gdGhlIHJlZmVyZW5jZXMNCj4gPiBzZWN0 aW9uLg0KPiANCj4gVGhhdCB0ZXh0IGlzIGRpcmVjdCBjb3B5IGZyb20gdGhlIFJGQzcyOTYgYW5k IHRoZXJlIGFyZSBzb21lIG90aGVyIHNpbWlsYXINCj4gb25lcyBbSUROQV0sIFtFQUldLCBhbmQg W1BLQ1MxXS4NCj4gDQo+IEkgY291bGQgc2ltcGx5IHJlbW92ZSB0aG9zZSByZWZlcmVuY2VzIGFz IEkgZG8gbm90IHRoaW5rIHRoZXkgYXJlIG5lZWRlZCBmb3INCj4gdGhpcyBkb2N1bWVudCwgYnV0 IEkgbGVmdCB0aGVtIGluIGFzIHRoZXkgd2VyZSBpbiB0aGUgUkZDNzI5NiwgYW5kIEkgZGlkIG5v dA0KPiB3YW50IHRvIG1vZGlmeSB0aGF0IHRleHQgSSBjb3BpZWQgZnJvbSB0aGVyZSB0b28gbXVj aC4NCj4gLS0NCj4ga2l2aW5lbkBpa2kuZmkNCg==