From nobody Thu Mar 3 03:19:38 2022 Return-Path: X-Original-To: iotops@ietfa.amsl.com Delivered-To: iotops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E1C353A1505; Thu, 3 Mar 2022 03:19:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.092 X-Spam-Level: X-Spam-Status: No, score=0.092 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, PDS_OTHER_BAD_TLD=1.998, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001, WEIRD_PORT=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=iH4rbbSk; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=iH4rbbSk Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5JnDNoS75yzB; Thu, 3 Mar 2022 03:19:08 -0800 (PST) Received: from EUR05-DB8-obe.outbound.protection.outlook.com (mail-db8eur05on20609.outbound.protection.outlook.com [IPv6:2a01:111:f400:7e1a::609]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 30E253A150C; Thu, 3 Mar 2022 03:19:07 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=V/I81O3eVtUCNgKv4C6JJpn3taxvdOzgRwLIZMt7peg=; b=iH4rbbSkYDVq3ZH0TrGP9Rzkvuf0RyhwlNpLQfK9DRnLk3yNONael8UmZtWSLuz+wj0ywTL+VShzPwzdVg14u8SkLuKFeltP9RT4voLBrrBNOO/wbbKAheI2BcLP2C/bbq2LS5RZNx2V2xhIbQWTJmvVhNhRXCmJq7z0+47CA9o= Received: from AM6PR08CA0004.eurprd08.prod.outlook.com (2603:10a6:20b:b2::16) by PR2PR08MB4905.eurprd08.prod.outlook.com (2603:10a6:101:1b::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5038.14; Thu, 3 Mar 2022 11:19:00 +0000 Received: from AM5EUR03FT022.eop-EUR03.prod.protection.outlook.com (2603:10a6:20b:b2:cafe::60) by AM6PR08CA0004.outlook.office365.com (2603:10a6:20b:b2::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5038.14 via Frontend Transport; Thu, 3 Mar 2022 11:19:00 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;dmarc=pass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by AM5EUR03FT022.mail.protection.outlook.com (10.152.16.79) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5017.22 via Frontend Transport; Thu, 3 Mar 2022 11:18:58 +0000 Received: ("Tessian outbound 826a6d8e58c3:v113"); Thu, 03 Mar 2022 11:18:58 +0000 X-CR-MTA-TID: 64aa7808 Received: from ea73a31e535e.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 1A6B04BA-4D01-4679-A556-E6845B6F73E1.1; Thu, 03 Mar 2022 11:18:52 +0000 Received: from EUR05-VI1-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id ea73a31e535e.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Thu, 03 Mar 2022 11:18:52 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=CSdNX7dwl8+gecmTjn7Hp+j53SK0ktvp6Uot5GM+W5g9Ru2G0jeJcvCsH3RZ11dkjPFvXRqnNYP/IOXZC+DhVT3b514w2MIkpGSo3PVnYVa+tzBpg0BxGgs/GdRzvQ4WdRB4+ArpRDBXmeumHHYaZHX9fHSWysId9cTpwf0jgPW2tniiE7QNgTzp3KkSDOi14xtj5OecKiKxVDKaRl9L3XFon5UiuFjT/Vxmiw45/OBqgtDmlfSluOO94Yd9xPIiJjmjUo4np1k53EZwe4S3RZ8+PffQnvHd5sDNSdCBCMokJlwRdX3OvbKgK5zVeLOQMOMjBd3igzLoYSDljpbkpA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=V/I81O3eVtUCNgKv4C6JJpn3taxvdOzgRwLIZMt7peg=; b=Y2qv3IFgkQ6/0HvAnurS19tNJno+PWWqcHq0SuleAaxZ6K2pV4YVvPHFyjcLKUHxxds1uhmjC/xCNvDjnGyl69S2IHxjqwoCYJLKp1je+rzgHIquQ0o8CboBjqI40K9zzJrvjCIJHt5iyBKD38l4NLuUiVBKGtD6QcE3zGXKs2jEc3Yy02QaYT+0NbcQ3iXUVJAiMaZuKNJlYU7mw/fG4jSj6NqVaCw+fN5sibl6dXz8zo0RclRLn7FNbFITobacWYIT+HXLzkOca7/AAcs56K8Bfw/uIbpWLS5OTGdzzgQmql+UkcbkaimCViiV3iYmjwZooHyj7pDcQ+UFKrbnng== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=V/I81O3eVtUCNgKv4C6JJpn3taxvdOzgRwLIZMt7peg=; b=iH4rbbSkYDVq3ZH0TrGP9Rzkvuf0RyhwlNpLQfK9DRnLk3yNONael8UmZtWSLuz+wj0ywTL+VShzPwzdVg14u8SkLuKFeltP9RT4voLBrrBNOO/wbbKAheI2BcLP2C/bbq2LS5RZNx2V2xhIbQWTJmvVhNhRXCmJq7z0+47CA9o= Received: from DBBPR08MB5915.eurprd08.prod.outlook.com (2603:10a6:10:20d::17) by PAXPR08MB7393.eurprd08.prod.outlook.com (2603:10a6:102:2bd::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5038.14; Thu, 3 Mar 2022 11:18:49 +0000 Received: from DBBPR08MB5915.eurprd08.prod.outlook.com ([fe80::b478:3f3d:2464:65c8]) by DBBPR08MB5915.eurprd08.prod.outlook.com ([fe80::b478:3f3d:2464:65c8%5]) with mapi id 15.20.5038.014; Thu, 3 Mar 2022 11:18:48 +0000 From: Hannes Tschofenig To: Jim Zubov , "secdispatch@ietf.org" , Michael Richardson , "iotops@ietf.org" , "anima@ietf.org" Thread-Topic: [Iotops] [Secdispatch] I-D: Deploying Publicly Trusted TLS Servers on IoT Devices Using SNI-based End-to-End TLS Forwarding (SNIF) Thread-Index: AQHYHtVKop3offyr+0q9saoG3HE46Kyg/hiwgABVHACAAAMKAIABhbeAgAq46OA= Date: Thu, 3 Mar 2022 11:18:48 +0000 Message-ID: References: <0075B437-024A-4D84-ABD7-92FE8DAFA59F@commercebyte.com>, <1865.1644434146@localhost> <4026.1644516168@localhost> <685366A1-01F4-4788-B025-0F5F4CE7947F@commercebyte.com> <665685D3-B9AA-4A5E-B5B0-33D313A40716@commercebyte.com> In-Reply-To: <665685D3-B9AA-4A5E-B5B0-33D313A40716@commercebyte.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ts-tracking-id: D51AC80D4A539548A7C97D9316E61FF7.0 x-checkrecipientchecked: true Authentication-Results-Original: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=arm.com; X-MS-Office365-Filtering-Correlation-Id: ff45fee5-a4ba-4c2a-864d-08d9fd079cec x-ms-traffictypediagnostic: PAXPR08MB7393:EE_|AM5EUR03FT022:EE_|PR2PR08MB4905:EE_ X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: rM5MCuwg70uIfmnfVKbbkTjZP/y1szwX5BWpwufd5eB2BvchxT9NHbumCY6XZ3I7odP3/E0ux646PLdLeaPa7Ud9xOKGRSefPHUK9hIDc6GdwOpxhYWMEyx9M30Sk4Nz2hrm56fIU5lKFi2CKY4sRlFr03aJE8/bVReRPY1GVjHidcrQjz5AmV3Zpl3sKLhCWwyw725+pGKcTObcUqMQBhDHm/OWvsAa5TY/H0gby6cS+dqELsJdUqgPkcahtHBHZxoJQdVLsiFzdmCyybJl7pFTjWMN6s9OrxKtKK15oKAJ7z0sAgfX7orWUg0YJbd+ZoZrmVI0u2xIuxnC6Vt93qP5ZdKITG4kBDbX6LYFJbZq+kk/z5Nk6c74519WWFa7O0qBxlK1VgaEj6fcaUNb9n+0iG5dGJ7lhzhxWXG2IfOdPssgAUrvUj4BSAUc5oU6LRyFmzf0wwKl4PAKcvms3l3JXKAnK3YPttD1czpFQ5xDmRHP9T/QKQi7b1j6BYIhUxzaU5Zy++0qQTaSgoIu6oZD0Nq+ZEhYIZQ+JgRJFARr+rCmww9jtpV1aQqIdulOnE5A9Av/CQsqsGrwz1J+F4/Xr5l1OaFCm/KJGbOuwSq03tRVCOCofkagg8aVsQeYhikdFQ6f5BTHYljqioZGXCF67zmOp0O2hL4+m4BVguvAwAQNeTewNg+ybNEWNSDHDwtaL4KJnaTi2L0ykjzaxQhGu0yDNR1QU3DvT5W/6jQ7uECaQuLuvtPnawu/xSr+orLYzYJRStQvW/x0gCDiyNbhmR5GgwZ0lBlV7R4wgObQSSFPfGGlI9N/h7LqZqmkCPi+rOXMSbk/AGlxk5mb4w== X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DBBPR08MB5915.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230001)(4636009)(366004)(508600001)(86362001)(9326002)(166002)(966005)(33656002)(52536014)(8936002)(71200400001)(55016003)(110136005)(83380400001)(30864003)(38100700002)(9686003)(186003)(38070700005)(26005)(316002)(66574015)(66476007)(66446008)(64756008)(53546011)(5660300002)(7696005)(6506007)(66556008)(8676002)(122000001)(76116006)(66946007)(2906002)(69594002); DIR:OUT; SFP:1101; Content-Type: multipart/alternative; boundary="_000_DBBPR08MB591548B0B00B68F0A4A013ACFA049DBBPR08MB5915eurp_" MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAXPR08MB7393 Original-Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: AM5EUR03FT022.eop-EUR03.prod.protection.outlook.com X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id-Prvs: 7b5357c5-7083-489d-4821-08d9fd0796b9 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFS:(13230001)(4636009)(46966006)(36840700001)(40470700004)(110136005)(7696005)(53546011)(6506007)(66574015)(336012)(40460700003)(2906002)(33964004)(186003)(26005)(82310400004)(86362001)(33656002)(36860700001)(166002)(55016003)(81166007)(83380400001)(47076005)(356005)(30864003)(5660300002)(9326002)(70206006)(8936002)(450100002)(52536014)(966005)(508600001)(316002)(70586007)(8676002)(9686003)(69594002)(559001)(579004); DIR:OUT; SFP:1101; X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Mar 2022 11:18:58.7887 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: ff45fee5-a4ba-4c2a-864d-08d9fd079cec X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: AM5EUR03FT022.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: PR2PR08MB4905 Archived-At: Subject: Re: [Iotops] [Secdispatch] I-D: Deploying Publicly Trusted TLS Servers on IoT Devices Using SNI-based End-to-End TLS Forwarding (SNIF) X-BeenThere: iotops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IOT Operations List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 03 Mar 2022 11:19:13 -0000 --_000_DBBPR08MB591548B0B00B68F0A4A013ACFA049DBBPR08MB5915eurp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgSmltLA0KDQpUaGFua3MgZm9yIHlvdXIgcmVzcG9uc2UuDQoNCj4gVGhlcmUgYXJlIHNvbWUg SW9UIG1hbmFnZW1lbnQgc29sdXRpb25zIG9uIHRoZSBtYXJrZXQsIGJvdGggb3BlbiBzb3VyY2Ug YW5kIHByb3ByaWV0YXJ5LCBidXQgYXMgZmFyIGFzIEkgY2FuIHRlbGwgbm9uZSBvZiB0aGVtIGZ1 bGx5IGZvbGxvd3MgdGhlIGVuZCB0byBlbmQgcGFyYWRpZ20uDQpbSGFubmVzXSBJdCBkZXBlbmRz IHdoYXQgeW91IGNhbGwgZW5kLXRvLWVuZC4gQXMgYW4gSW9UIHNlcnZpY2UgcHJvdmlkZXIgeW91 IGhhdmUgdG8gbWFrZSBhIGZldyBkZWNpc2lvbnMgYWJvdXQgaG93IHRvIG1hbmFnZSBhbmQgZGVw bG95IElvVCBkZXZpY2VzLiBCcm9hZGx5IHNwZWFraW5nLCB5b3UgaGF2ZSB0aHJlZSBvcHRpb25z Og0KDQogICogICBZb3UgIHNlZWsgb3V0IHRvIGEgdGhpcmQgcGFydHkgdG8gbWFuYWdlIHlvdXIg ZGV2aWNlcy4gTmVlZGxlc3MgdG8gc2F5IHRoYXQgeW91IHNob3VsZCBwaWNrIGEgY29tcGFueSB0 aGF0IHlvdSBmZWVsIGNvbWZvcnRhYmxlIHdpdGguIFRoZXkgd2lsbCBtYW5hZ2UgeW91ciBkZXZp Y2VzIGFuZCB0aGV5IHdpbGwgYWxzbyBvZmZlciB3YXlzIHRvIHN0b3JlIHRoZSBkYXRhIG9idGFp bmVkIGZyb20gdGhlIGRldmljZXMsIHRvIG1hbmFnZSBhbmQgZGlzdHJpYnV0ZSBmaXJtd2FyZSB1 cGRhdGVzLCBhbmQgZXZlbiB0byBwZXJmb3JtIGFuYWx5c2lzIG9mIHRoZSBkYXRhIChtYWNoaW5l IGxlYXJuaW5nKS4gVGhlbiwgeW91IGNhbiB0eXBpY2FsbHkgY29ubmVjdCBiYWNrZW5kIGFwcGxp Y2F0aW9uIHNlcnZlcnMgdG8gdGhlIGRldmljZSBtYW5hZ2VtZW50IG9mZmVyaW5nLiBPZiBjb3Vy c2UsIHRoZSBkZXRhaWxzIHZhcnkgYSBsb3Qgd2l0aCB3aGF0IHlvdSBhcmUgYWN0dWFsbHkgZG9p bmcgYXMgYW4gSW9UIHNlcnZpY2UgcHJvdmlkZXIgd2l0aCB0aGUgSW9UIGRldmljZXMgYW5kIHRo ZSBkYXRhLg0KICAqICAgWW91IGdldCB0aGUgc29mdHdhcmUgZnJvbSBhIHByb3ZpZGVyIGFuZCB5 b3UgbWFuYWdlIHRoZSBkZXZpY2VzIG9uIHlvdXIgb3duLiBUaGlzIGlzIG9mdGVuIHRoZSBjYXNl IHdoZW4geW91IHdhbnQgdG8gZGVwbG95IGFuIG9uLXByZW1pc2Ugc29sdXRpb24uIEhlcmUgeW91 IGhhdmUgdG8gdHJ1c3QgdGhlIHByb3ZpZGVyIG9mIHRoZSBkZXZpY2UgbWFuYWdlbWVudCBzb2Z0 d2FyZSB0aGF0IHRoZSBjb2RlIGlzIGNvcnJlY3QgYW5kIGRvZXMgd2hhdCBpdCBpcyBzdXBwb3Nl ZCB0byBkby4gSW4gc29tZSBjYXNlcyB5b3Ugbm90IG9ubHkgZ2V0IHRoZSBiaW5hcnkgYnV0IGFs c28gdGhlIHNvdXJjZSBjb2RlLiBJbiB0aGVvcnksIHlvdSBjb3VsZCBjaGVjayB3aGF0IGNvZGUg aXMgYWN0dWFsbHkgcnVubmluZyAoYWx0aG91Z2ggSSBkb3VidCB0aGF0IGFueW9uZSByZWFsbHkg Y2hlY2tzKS4NCiAgKiAgIEZpbmFsbHksIHlvdSBidWlsZCB5b3VyIG93biBkZXZpY2UgbWFuYWdl bWVudCBzb2x1dGlvbiAob2Z0ZW4gdXNpbmcgYXZhaWxhYmxlIG9wZW4gc291cmNlIHNvZnR3YXJl KS4NCkluIHByYWN0aWNlLCBJIGhhdmUgYWxzbyBzZWVuIGEgY29tYmluYXRpb24gb2YgdGhlIHZh cmlhbnRzIGFib3ZlLiBGb3IgZXhhbXBsZSwgSSBoYXZlIHNlZW4gYSBjYXNlIHdoZXJlIHRoZSBk ZXZpY2VzIHdlcmUgbWFuYWdlZCBieSBhIHRoaXJkIHBhcnR5IGJ1dCB0aGUgdmlkZW8gc3RyZWFt IG9mIHRoZSBzdXJ2ZWlsbGFuY2UgY2FtZXJhIHdhcyBzZW50IGRpcmVjdGx5IHRvIGEgZGVkaWNh dGVkIHNlcnZlciBtYW5hZ2VkIGJ5IHRoZSBJb1Qgc2VydmljZSBwcm92aWRlci4gKFRoZXJlIHdl cmUgYWxzbyB2YXJpb3VzIHRlY2huaXF1ZXMgdG8gcHJldmVudCBtb2RpZmljYXRpb25zIHRvIHRo ZSBkZXZpY2UgdG8gaGF2ZSB0aGUgdmlkZW8gc3RyZWFtIHJlLWRpcmVjdGVkIG9yIHRoZSBjcmVk ZW50aWFscyBjaGFuZ2VzIGJ1dCBJIHRoaW5rIHlvdSBnZXQgdGhlIGlkZWEuKSBUaGUgY29tbXVu aWNhdGlvbiBtb2RlbCB0aGVyZSB3YXMgYSBiaXQgZGlmZmVyZW50IHRoYW4geW91cnMgYmVjYXVz ZSB0aGUgY2xpZW50IGluaXRpYXRlZCB0aGUgY29tbXVuaWNhdGlvbiB3aXRoIHRoZSB2aWRlbyBz ZXJ2ZXIuIEhlbmNlLCB0aGVyZSB3YXMgbm8gaXNzdWUgd2l0aCBydW5uaW5nIGEgVExTIHNlcnZl ciBvbiB0aGUgZGV2aWNlLg0KT24gdG9wIG9mIHRoaXMsIGl0IGlzIGFsc28gY29tbW9uIHRvIHBy b3ZpZGUgc3BlY2lhbCBzZWN1cml0eSBwcm90ZWN0aW9uIGZvciBzZWxlY3RlZCBkYXRhLiBGb3Ig ZXhhbXBsZSwgZmlybXdhcmUgdXBkYXRlcyBhcmUgc2lnbmVkIGJ5IHBhcnR5IGRpZmZlcmVudCBm cm9tIHRoZSBjb21wYW55IG9mZmVyaW5nIHRoZSBkZXZpY2UgbWFuYWdlbWVudCBzb2x1dGlvbi4g VGhleSBhcmUsIGZvciBleGFtcGxlLCBzaW5nZWQgYnkgdGhlIGNvbXBhbnkgZGV2ZWxvcGluZyB0 aGUgY29kZS4gVGhleSBhcmUgc3RpbGwgZGlzdHJpYnV0ZWQgYnkgdGhlIGRldmljZSBtYW5hZ2Vt ZW50IGluZnJhc3RydWN0dXJlIGFuZCBoZW5jZSB5b3UgaGF2ZSB0byByZWx5IG9uIHRoZSBkaXN0 cmlidXRpb24gb2YgdGhlbSBidXQgdGhlcmUgaXMgbm8gY2hhbmNlIGZvciB0aGUgZGV2aWNlIG1h bmFnZW1lbnQgcHJvdmlkZXIgdG8gaW5qZWN0IG1hbGljaW91cyBjb2RlIGludG8gdGhlIGRldmlj ZS4NCkZyb20gd2hhdCBJIGFtIHNlZWluZywgdGhlIGZpcnN0IGRlcGxveW1lbnQgbW9kZWwgaXMg dmVyeSBwb3B1bGFyLiBUaGUgYXBwcm9hY2ggb2Yg4oCcZGVzaWduaW5nIHlvdXIgb3duIHNvbHV0 aW9u4oCdIHdhcyBwb3B1bGFyIGluIHRoZSBlYXJseSBkYXlzIGJlY2F1c2UgY29tcGFuaWVzIHdl cmUgZ2l2ZW4gdGhlIGltcHJlc3Npb24gdGhhdCB0aGlzIElvVCBzdHVmZiBpcyBzbyBzaW1wbGUg dGhhdCB5b3UgY2FuIHB1dCBhIHNvbHV0aW9uIHRvZ2V0aGVyIGluIGEgd2Vla2VuZC4gSXQgdHVy bmVkIG91dCB0aGF0IHRoaXMgaXMgbm90IHF1aXRlIHRoZSBjYXNlIChpZiB5b3UgaGF2ZSBhIGxh cmdlciBudW1iZXIgb2YgZGV2aWNlcykuIE1hbnkgSW9UIHNlcnZpY2UgcHJvdmlkZXJzIGFsc28g bmVlZCBoZWxwIGRlc2lnbmluZyB0aGUgZW50aXJlIHNvbHV0aW9uLCBhbHNvIHRoZSBzb2x1dGlv biBvbiB0aGUgSW9UIGRldmljZSBpdHNlbGYuDQpIb3cgZG9lcyB5b3VyIHNvbHV0aW9uIGZpdCBp bnRvIHRoaXMgcGljdHVyZT8NCj4gSSBiZWxpZXZlIGl0J3Mgd29ydGggaGF2aW5nIGEgdW5pdmVy c2FsIGNyb3NzLXZlbmRvciBzb2x1dGlvbiB0aGF0IGhhbmRsZXMgU05JRiBkZXZpY2Ugb25ib2Fy ZGluZywgbWFpbnRhaW5zIHRoZSBjcmVkZW50aWFscyBpbiBhIGxvY2FsIHNlY3VyZSBzdG9yYWdl LCBhbmQgY29uc29saWRhdGVzIGh0dHBzIGJhc2VkIG1hbmFnZW1lbnQgaW50ZXJmYWNlIGhvc3Rl ZCBieSBpbmRpdmlkdWFsIGRldmljZXMgdGhyb3VnaCBTTklGLg0KW0hhbm5lc10gVGhlcmUgaXMg ZGVmaW5pdGVseSBhIGxvdCBvZiBleGNpdGVtZW50IHdoZW4gaXQgY29tZXMgdG8gdGhlIGRldmVs b3BtZW50IG9mIGRldmljZSBvbmJvYXJkaW5nIHNvbHV0aW9ucy4gSSBoYXZlIHRvIHRydXN0IHlv dSB0aGF0IHRoZXJlIGlzIGZ1cnRoZXIgaW50ZXJlc3QgZm9yIHNvbHV0aW9ucyBiZWNhdXNlIEkg aGF2ZW7igJl0IGNoZWNrZWQuDQoNCj4gVGhlIHJlcXVpcmVtZW50cyBmb3Igc3VjaCBzb2x1dGlv biBpcyBhIHRvcGljIGZvciBhIHNlcGFyYXRlIGRyYWZ0LCBhbHRob3VnaCBJIGFscmVhZHkgb3V0 bGluZWQgdGhlIHBvc3NpYmxlIHNlY3VyZSBvbmJvYXJkaW5nIHByb2Nlc3MgaW4gdGhlIHNlY3Vy aXR5IHNlY3Rpb24uDQpJIHdpbGwgcmUtcmVhZCB5b3VyIHNlY3VyaXR5IGNvbnNpZGVyYXRpb24g c2VjdGlvbiBhZ2Fpbi4NCg0KTm90ZSB0aGF0IEkgYW0gY2VydGFpbmx5IG5vdCBhZ2FpbnN0IHlv dXIgc29sdXRpb24uIElmIHlvdXIgYXBwcm9hY2ggaGFzIHN1Y2Nlc3MsIGt1ZG9zIHRvIHlvdS4N Cg0KQ2lhbw0KSGFubmVzDQoNCk9uIEZlYnJ1YXJ5IDI0LCAyMDIyIDU6Mzc6NDYgQU0gRVNULCBI YW5uZXMgVHNjaG9mZW5pZyA8SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbTxtYWlsdG86SGFubmVz LlRzY2hvZmVuaWdAYXJtLmNvbT4+IHdyb3RlOg0KDQpIaSBKaW0sDQoNClRoYW5rcyBmb3IgdGhl IHF1aWNrIHJlc3BvbnNlLiBUaGUgbGluayB0byB5b3VyIHdlYnNpdGUgaXMgaGVscGZ1bC4gSSBu b3cgdW5kZXJzdG9vZCB0aGF0IHlvdSB3b3VsZCBhbHNvIHJlbGF5IHRoZSBjb21tdW5pY2F0aW9u IHRocm91Z2ggdGhlIHByb3h5LCB3aGljaCBkZWFscyB3aXRoIHRoZSBJb1QgZGV2aWNlIGJlaW5n IGJlaGluZCBhIE5BVCBhbmQvb3IgZmlyZXdhbGwgaWYgdGhlIElvVCBkZXZpY2Uga2VlcHMgdGhl IGNvbm5lY3Rpb24gYWxpdmUuDQoNCkkgd29uZGVyIHdoZXRoZXIgeW91IGhhdmUgY29uc2lkZXJl ZCB0byByZS11c2UgYW4gZXhpc3RpbmcgZGV2aWNlIG1hbmFnZW1lbnQgc29sdXRpb25zIHNpbmNl IHRob3NlIGlzIHdpZGVseSBkZXBsb3llZCB0b2RheT8NCg0KQ2lhbw0KSGFubmVzDQoNCi0tLS0t T3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBJb3RvcHMgPGlvdG9wcy1ib3VuY2VzQGlldGYu b3JnPG1haWx0bzppb3RvcHMtYm91bmNlc0BpZXRmLm9yZz4+IE9uIEJlaGFsZiBPZiBKaW0gWnVi b3YNClNlbnQ6IFdlZG5lc2RheSwgRmVicnVhcnkgMjMsIDIwMjIgNDoxNyBQTQ0KVG86IHNlY2Rp c3BhdGNoQGlldGYub3JnPG1haWx0bzpzZWNkaXNwYXRjaEBpZXRmLm9yZz47IEhhbm5lcyBUc2No b2ZlbmlnIDxIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPG1haWx0bzpIYW5uZXMuVHNjaG9mZW5p Z0Bhcm0uY29tPj47IEppbSBadWJvdiA8aWV0Zi1saXN0QGNvbW1lcmNlYnl0ZS5jb208bWFpbHRv OmlldGYtbGlzdEBjb21tZXJjZWJ5dGUuY29tPj47IHNlY2Rpc3BhdGNoQGlldGYub3JnPG1haWx0 bzpzZWNkaXNwYXRjaEBpZXRmLm9yZz47IE1pY2hhZWwgUmljaGFyZHNvbiA8bWNyK2lldGZAc2Fu ZGVsbWFuLmNhPG1haWx0bzptY3IraWV0ZkBzYW5kZWxtYW4uY2E+PjsgaW90b3BzQGlldGYub3Jn PG1haWx0bzppb3RvcHNAaWV0Zi5vcmc+OyBhbmltYUBpZXRmLm9yZzxtYWlsdG86YW5pbWFAaWV0 Zi5vcmc+DQpTdWJqZWN0OiBSZTogW0lvdG9wc10gW1NlY2Rpc3BhdGNoXSBJLUQ6IERlcGxveWlu ZyBQdWJsaWNseSBUcnVzdGVkIFRMUyBTZXJ2ZXJzIG9uIElvVCBEZXZpY2VzIFVzaW5nIFNOSS1i YXNlZCBFbmQtdG8tRW5kIFRMUyBGb3J3YXJkaW5nIChTTklGKQ0KDQpUaGFuayBZb3UgZm9yIHlv dXIgZmVlZGJhY2sgSGFubmVzLCBJIGFkZHJlc3NlZCB0aGUgY29tbWVudHMgYmVsb3cgLQ0KDQpP biBGZWJydWFyeSAyMywgMjAyMiA1OjM2OjE1IEFNIEVTVCwgSGFubmVzIFRzY2hvZmVuaWcgPEhh bm5lcy5Uc2Nob2ZlbmlnQGFybS5jb208bWFpbHRvOkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20+ PiB3cm90ZToNCg0KSGkgYWxsLA0KDQpUaGFua3MgZm9yIHRoaXMgY29udHJpYnV0aW9uLCBKaW0u DQoNClJlYWRpbmcgdGhyb3VnaCB0aGUgZG9jdW1lbnQgSSBhZ3JlZSB0aGF0IHRoZSBTVUlCIHRv cGljIGRpc2N1c3NlZCBpbiB0aGUgSU9UT1BTIFdHIGFwcGVhcnMgcmVsZXZhbnQuIEkgYWxzbyB3 b25kZXIgd2hldGhlciB0aGUgd29yayBpbiB0aGUgREFOSVNIIGdyb3VwIChzZWUgaHR0cHM6Ly9k YXRhdHJhY2tlci5pZXRmLm9yZy93Zy9kYW5pc2gvYWJvdXQvKSBpcyByZWxldmFudC4NCg0KQWdy ZWVkIGFib3V0IFNVSUIsIG5vdCBxdWl0ZSBzdXJlIGFib3V0IERBTklTSC4gREFOSVNIIGlzIGFi b3V0IGNlcnRpZmljYXRlIGJhc2VkIGF1dGhlbnRpY2F0aW9uIGFuZCBQS0kgZXh0ZW5zaW9ucywg d2hpbGUgU05JRiBpcyBhYm91dCBlbmQtdG8tZW5kIHJlbGF5ZWQgdHJ1c3RlZCBUTFMgdGhhdCBy ZWxpZXMgb24gdGhlIHN0YW5kYXJkIFBLSS4NCg0KUmVnYXJkaW5nIHRoZSB1c2UgaW4gSW9UIEkg aGF2ZSBhIHF1ZXN0aW9uIGZvciBteSB1bmRlcnN0YW5kaW5nLg0KDQpJbiBhIG51dHNoZWxsLCB5 b3UgaW50cm9kdWNlIGEgcHJveHkgdGhhdCBhbGxvY2F0ZXMgYSBob3N0bmFtZSBhbmQgcmVxdWVz dHMgYSBjcmVhdGlvbiBvZiBhIGNlcnRpZmljYXRlIG9uIGJlaGFsZiBvZiB0aGUgSW9UIGRldmlj ZS4NCg0KQ29ycmVjdCwgcGx1cyBhbiBlMmUgVExTIHJlbGF5Lg0KDQpUbyBnZXQgdGhpcyB0byB3 b3JrIHlvdSByZWx5IG9uIHRocmVlIGFzc3VtcHRpb25zOg0KKDEpIFRoZXJlIGhhcyB0byBiZSBh IGNvbW11bmljYXRpb24gaW5mcmFzdHJ1Y3R1cmUgdGhhdCBhc3NvY2lhdGVzIHRoZSAiYW5vbnlt b3VzIiBob3N0bmFtZSB3aXRoIGEgc3BlY2lmaWMgZGV2aWNlIGFuZCBjb252ZXlzIHRoZXNlIGlk ZW50aWZpZXJzIHRvIHRoZSByZWxldmFudCBwYXJ0aWVzLg0KDQpFYWNoIGRldmljZSBpcyBjb25m aWd1cmVkIHdpdGggYW4gaW5pdFVybCBwb2ludGluZyB0byBhIHNwZWNpZmljIENBIHByb3h5IHRo YXQgYWxsb2NhdGVzIGEgcmFuZG9tIGhvc3RuYW1lIChhIENOIHRvIGJlIG1vcmUgYWNjdXJhdGUp LCBub3JtYWxseSBhIHN1YmRvbWFpbiBvZiBhIG1hc3RlciBkb21haW4gdGhhdCBoYXMgYSB3aWxk Y2FyZCBETlMgcmVjb3JkIHBvaW50aW5nIHRvIHRoZSBDQSBwcm94eS4NCkV4YW1wbGUgLSB0aGUg aW5pdFVybCBmb3IgcHVibGljIGV4cGVyaW1lbnRhbCB1c2UgLSBodHRwczovL3NuaWYuc25pZi54 eXo6NDQ0MyBUaGUgYWxsb2NhdGVkIHdpbGRjYXJkIENOIGlzIGEgc3ViZG9tYWluIG9mIHRoZSBt YXN0ZXIgZG9tYWluIHNuaWYueHl6DQoNCg0KKDIpIFlvdSBhc3N1bWUgdGhhdCBhIHBhcnR5IHRo YXQgd2FudHMgdG8gY29udGFjdCB0aGUgSW9UIGRldmljZSBpcyBhYmxlIHRvIHJlYWNoIHRoZSBk ZXZpY2UgKGkuZS4gdGhlIElvVCBkZXZpY2UgaXMgbm90IGJlaGluZCBhIGZpcmV3YWxsIG9yIE5B VCkuDQoNCkJvdGggdGhlIElvVCBkZXZpY2UgYW5kIHRoZSBjbGllbnQgY29ubmVjdCB0byB0aGUg U05JRiByZWxheS4gVGhlIHdob2xlIHB1cnBvc2Ugb2YgU05JRiBpcyB0byBiZSBhYmxlIHRvIHdv cmsgZnJvbSBiZWhpbmQgTkFUIC8gZmlyZXdhbGwgL2V0YywgYW5kIGl0J3MgYmVlbiBjb25maXJt ZWQgdG8gd29yayBpbiBwcmUtcHJvZHVjdGlvbi4gSW4gZmFjdCBJIGhhZCBhIG1pbm9yIGhpY2t1 cCB3aXRoIEZvcnRpZ2F0ZSBpbiB0aGUgcHJvY2VzcyBvZiB0ZXN0aW5nIHdoaWNoIGhhcyBiZWVu IHJlc29sdmVkLg0KVGhlcmUgYXJlIHNpbXBsaWZpZWQgZGlhZ3JhbXMgb24gaHR0cHM6Ly9zbmlm Lmhvc3QgdG8gaWxsdXN0cmF0ZSB0aGUgY29uY2VwdC4NCg0KDQooMykgU29tZW9uZSBvcGVyYXRp bmcgSW9UIGRldmljZXMgaGFzIHRvIHRydXN0IHRoZSBwcm94eSBzaW5jZSBpdCBpcyBlYXN5IGZv ciB0aGUgcHJveHkgdG8gYXNzb2NpYXRlIGEgaG9zdG5hbWUgd2l0aCBhIHB1YmxpYyBrZXkgdGhh dCB3YXMgY3JlYXRlZCBieSB0aGUgcHJveHkgKHJhdGhlciB0aGFuIHRoZSBlbmQgZGV2aWNlKS4g VGhpcyBlc3NlbnRpYWxseSBhbGxvd3MgdGhlIHByb3h5IHRvIGltcGVyc29uYXRpbmcgdGhlIElv VCBkZXZpY2UuDQoNCklzIG15IHVuZGVyc3RhbmRpbmcgY29ycmVjdD8NCg0KWWVzLCBJIG1lbnRp b25lZCB0aGlzIHZ1bG5lcmFiaWxpdHkgaW4gdGhlIHNlY3VyaXR5IHNlY3Rpb24uIFRoZSBhbnN3 ZXIgaXMNCi0gd2F0Y2ggdGhlIHB1YmxpYyBUTFMgdHJhbnNwYXJlbmN5IGxvZ3MsIGFueSBwYXJ0 eSBjYW4gZG8gaXQuIElmIGFueSBvdmVybGFwcGluZyBDTnMgYXJlIGZvdW5kIC0gdGhlIENBIHBy b3h5IGlzIHBlcm1hbmVudGx5IGNvbXByb21pc2VkLA0KLSBkbyBub3QgdXNlIHJhbmRvbSBDQSBw cm94aWVzIG93bmVkIGJ5IHVua25vd24gcGFydGllcy4NCg0KDQpDaWFvDQpIYW5uZXMNCg0KQW55 IGZ1cnRoZXIgcXVlc3Rpb25zL3N1Z2dlc3Rpb25zIGFyZSB3ZWxjb21lLg0KDQotLS0tLU9yaWdp bmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogU2VjZGlzcGF0Y2ggPHNlY2Rpc3BhdGNoLWJvdW5jZXNA aWV0Zi5vcmc8bWFpbHRvOnNlY2Rpc3BhdGNoLWJvdW5jZXNAaWV0Zi5vcmc+PiBPbiBCZWhhbGYg T2YgSmltIFp1Ym92DQpTZW50OiBGcmlkYXksIEZlYnJ1YXJ5IDExLCAyMDIyIDEyOjIyIEFNDQpU bzogc2VjZGlzcGF0Y2hAaWV0Zi5vcmc8bWFpbHRvOnNlY2Rpc3BhdGNoQGlldGYub3JnPjsgTWlj aGFlbCBSaWNoYXJkc29uIDxtY3IraWV0ZkBzYW5kZWxtYW4uY2E8bWFpbHRvOm1jcitpZXRmQHNh bmRlbG1hbi5jYT4+Ow0KSmltIFp1Ym92IDxpZXRmLWxpc3RAY29tbWVyY2VieXRlLmNvbTxtYWls dG86aWV0Zi1saXN0QGNvbW1lcmNlYnl0ZS5jb20+PjsgaW90b3BzQGlldGYub3JnPG1haWx0bzpp b3RvcHNAaWV0Zi5vcmc+OyBhbmltYUBpZXRmLm9yZzxtYWlsdG86YW5pbWFAaWV0Zi5vcmc+DQpT dWJqZWN0OiBSZTogW1NlY2Rpc3BhdGNoXSBJLUQ6IERlcGxveWluZyBQdWJsaWNseSBUcnVzdGVk IFRMUyBTZXJ2ZXJzDQpvbiBJb1QgRGV2aWNlcyBVc2luZyBTTkktYmFzZWQgRW5kLXRvLUVuZCBU TFMgRm9yd2FyZGluZyAoU05JRikNCg0KVGhhbmtzIGZvciB0aGUgZmVlZGJhY2sgYWdhaW4sIG15 IGNvbW1lbnQgYXJlIGJlbG93Lg0KSSBzdWJtaXR0ZWQgYSBuZXcgdmVyc2lvbiBvZiB0aGUgZHJh ZnQgdG8gcmVmbGVjdCBzb21lIGNoYW5nZXMuDQoNCk9uIEZlYnJ1YXJ5IDEwLCAyMDIyIDE6MDI6 NDggUE0gRVNULCBNaWNoYWVsIFJpY2hhcmRzb24gPG1jcitpZXRmQHNhbmRlbG1hbi5jYTxtYWls dG86bWNyK2lldGZAc2FuZGVsbWFuLmNhPj4gd3JvdGU6DQoNCkppbSBadWJvdiA8aWV0Zi1saXN0 QGNvbW1lcmNlYnl0ZS5jb208bWFpbHRvOmlldGYtbGlzdEBjb21tZXJjZWJ5dGUuY29tPj4gd3Jv dGU6DQoNCiBUaGlzIHdhcyBhbHNvIG9uIHRoZSBJRVRGMTEyIElPVE9QUyBXRyBhZ2VuZGE6DQog c2xpZGVzOg0KIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvbWVldGluZy8xMTIvbWF0ZXJp YWxzL3NsaWRlcy0xMTItaW90b3BzLXN1aWItYnJvd3NpbmctbG9jYWwtd2ViLXJlc291cmNlcy1p bi1hLXNlY3VyZS11c2FibGUtbWFubmVyLWlvdC1kZXZpY2UtY29uZmlndXJhdGlvbi1hcy1hLXNw ZWNpYWwtY2FzZS0wMA0KIHZpZGVvOiAgaHR0cHM6Ly95b3V0dS5iZS9PSWxKclV2d0RjST90PTE2 NDkNCg0KIGFuZCB3ZSBob3BlIHRvIHJldHVybiBhdCBJRVRGMTEzLg0KDQoNCg0KUmlnaHQsIGxv b2tzIGxpa2UgU1VJQiBpcyB3b3JraW5nIG9uIGEgc2ltaWxhciBwcm9ibGVtLiBUaGFua3MgZm9y DQpwb2ludGluZyB0aGlzIG91dC4gSW4gcGFydGljdWxhciwgdGhlICJTb2wgIzYgRGV2aWNlIG5h bWUgRE5TIiBzbGlkZQ0KbG9va3MgcXVpdGUgc2ltaWxhciB0byBTTklGIENBIFByb3h5IChTZWN0 aW9uIDMpLiBIb3dldmVyLCBTVUlCIHB1cnN1ZXMNCmJpZ2dlciBpbmZyYXN0cnVjdHVyYWwgZ29h bHMgc3VjaCBhcyBjaGFuZ2luZyB0aGUgbG9jYWxob3N0IFRMUw0KY29ubmVjdGlvbiBwb2xpY2ll cyAoSSB0b3RhbGx5IGFncmVlIGFuZCByZWFsbHkgYXBwcmVjaWF0ZSB0aGUgZWZmb3J0KSwNCndo aWxlIFNOSUYgaXMgYSBmdW5jdGlvbmluZyBzb2x1dGlvbiB3aXRoaW4gdGhlIGV4aXN0aW5nDQpp bmZyYXN0cnVjdHVyZSwgdGVzdGVkIGFuZCBwcm92ZW4gdG8gd29yayBpbiBwcmUtcHJvZHVjdGlv bi4NCg0KVGhlIHNsaWRlcyBtYXkgYmUgdG9vIHZhZ3VlLiAgQ2hhbmdpbmcgdGhlIFRMUyBwb2xp Y2llcyBpcyBhIHBvc3NpYmxlDQpzb2x1dGlvbiwgYnV0IHByb2JhYmx5IGFuIGltcHJhY3RpY2Fs IG9uZS4gIE5ldmVydGhlbGVzcywgbWFueSBwZW9wbGUNCihub3Qgc3RlZXBlZCBpbiB0aGUgYXJ0 cywgYW5kIG9mdGVuIGZhaWxsaW5nIGludG8gdGhlIFBIQiBjYXRlZ29yeSkNCnRoaW5rIHRoYXQg aXQgaXMgYW4gb2J2aW91cyBzb2x1dGlvbiwgc28gd2UgbGlzdCBpdCBpbiBvcmRlciB0byBleHBs YWluIHdoeSBpdCB3b24ndCB3b3JrLg0KDQpZZXMsIHN0aWxsIHNhZCB0aGF0IGxvY2FsaG9zdCBz bGlwcGVkIHRocm91Z2ggdGhlIGNyYWNrcyB3aGVuIHRoZSBvcmlnaW5hbCBzZWN1cml0eSBzdGFu ZGFyZHMgd2VyZSB3cml0dGVuLg0KDQoNCg0KIFRoZSBTVUlCIHByb2JsZW0gYWRkcmVzc2VzIHRo ZSBjaGFsbGVuZ2Ugb2YgY29ubmVjdGluZyAqbG9jYWxseSogdG8gYQ0KIGRldmljZSwNCiBhbmQg ZG9pbmcgaXQgc2VjdXJlbHkuICBGb3IgdGhpcyB0byBiZSBwb3NzaWJsZSB3aXRoIFJGQzYxMjUt RE5TLUlEDQogc3RhbmRhcmQNCiBicm93c2VyLCB3ZSBuZWVkIGEgbmFtZSBmb3IgdGhlIGRldmlj ZSwgYW5kIHdlIG5lZWQgYSB3YXkgdG8gdHJhbnNsYXRlDQogdGhhdA0KIG5hbWUgaW50byBhIGxv Y2FsbHkgcmVhY2hhYmxlIElQIGFkZHJlc3MuDQoNCiBUaGUgU05JRiBwcm9wb3NhbCBkb2VzIG5v dCBxdWl0ZSBzb2x2ZSB0aGUgYWJvdmUgcHJvYmxlbS4NCg0KDQoNCkluIGZhY3QsIEkgb3JpZ2lu YWxseSBkZXNpZ25lZCBTTklGIHRvIHNvbHZlIHRoaXMgc3BlY2lmaWMgcHJvYmxlbSAtDQpsb2Nh bC10by1sb2NhbCB0cnVzdGVkIFRMUyBjb25uZWN0aW9ucy4NCg0KQWgsIHZlcnkgbmljZSB0byBr bm93Lg0KDQoqIElzc3VlIGEgd2lsZGNhcmQgY2VydCB0aHJvdWdoIFNOSUYgQ0EgUHJveHkNCihl LmcuIENOPSouZG9tYWluLnNuaWYueHl6KSwgc2V0IGEgRE5TIHJlY29yZCBmb3INCmxvY2FsaG9z dC5kb21haW4uc25pZi54eXogdG8gcG9pbnQgdG8gbG9jYWxob3N0J3MgSVB2NC92NiwgYW5kIHVz ZQ0KaHR0cHM6Ly9sb2NhbGhvc3QuZG9tYWluLnNuaWYueHl6IChvciBvdGhlciBhcHAgcHJvdG9j b2wgLSBpbWFwcw0KZXRjKS4gSG93ZXZlciwgbG9va3MgbGlrZSBzb21lIGNsaWVudHMgdHJlYXQg dGhlIGxvY2FsaG9zdCBJUCBhcw0KaW5oZXJlbnRseSB1bnNlY3VyZSwgYW5kIGlzc3VlIGEgd2Fy bmluZyBldmVyIGlzIHRoZSBjZXJ0IGlzIHBlcmZlY3RseQ0KdmFsaWQuIFRoZSBvcHRpb24gaXMg c3RpbGwgcG9zc2libGUsIGJ1dCB0aGUgYXBwbGljYWJpbGl0eSBtaWdodCBiZQ0KbGltaXRlZC4N Cg0KVGhlIHByb2Nlc3Mgd2UgZGVzY3JpYmVkIGF0DQoNCmh0dHBzOi8vc3BlY3MubWFueXNlY3Vy ZWQub3JnL3N1aWIvU29sdXRpb25zL2Ruc25hbWUtZW1iZWRkZWQtc29sdXRpb24NCg0KYWxzbyB1 c2VzIGEgd2lsZGNhcmQgY2VydCwgYnV0IGhhcyBhIG1hZ2ljIGF1dGhvcml0YXRpdmUgRE5TIHNl cnZlcg0KdGhhdCB0cmFuc2xhdGVzIHRoZSBsZWZ0LW1vc3QgbGFiZWwgaW50byBhbiBBIG9yIEFB QUEgcmVjb3JkLiAgSXQncw0KcmF0aGVyIGEgY3V0ZSBoYWNrLCBidXQgYXQgbGVhc3Q6DQogIGEp IGl0J3MgY2FjaGFibGUNCiAgYikgaXQgY291bGQgZXZlbiBiZSBjYWxjdWxhdGVkIGxvY2FsbHks IGlmIG9uZSBpZ25vcmVzIEROU1NFQy4NCg0KWWVzLCB1c2luZyBhIGxvY2FsIG5ldHdvcmsgSVAg aW5zdGVhZCBvZiBhIGxvY2FsaG9zdCBJUCBpcyBhY3R1YWxseSBhIHNtYXJ0IGlkZWEuDQpIb3dl dmVyLCBpbmxpbmluZyB0aGUgbG9jYWwgSVAgaW4gdGhlIGhvc3RuYW1lLCBhcyBTVUlCIGRvZXMs IG1lYW5zIHlvdSdsbCBoYXZlIHRvIGNoYW5nZSB0aGUgaG9zdG5hbWUgaW4geW91ciBjbGllbnQg ZXZlcnkgdGltZSB5b3VyIG5ldHdvcmsgaXMgY2hhbmdlZC4NCkkgaGF2ZSBhbiB0aG91Z2h0IGZv ciBTTklGIGltcHJvdmVtZW50IC0gU05JRiBjb25uZWN0b3Igc2VuZHMgYSBTTklGIEROUyBjb21t YW5kIHRvIHNldCBhIGR5bmFtaWMgRE5TIEEvQUFBQSBmb3IgYSBjZXJ0YWluIGhvc3RuYW1lIHdp dGhpbiB0aGUgQ04gd2lsZGNhcmQsIGFuZCB0aGUgQ0EgcHJveHkgdXBkYXRlcyB0aGUgRE5TIGFj Y29yZGluZ2x5LiBUaGlzIHdheSB0aGUgaG9zdG5hbWUgY2FuIGJlIHBlcm1hbmVudCwgYnV0IHdp dGggZHluYW1pYyBETlMuDQpBbm90aGVyIHByb2JsZW0gLSBtb3N0IHBsYXRmb3JtcyB3b24ndCBs ZXQgeW91IGJpbmQgdG8gcG9ydCA8IDEwMjQgdW5sZXNzIHlvdSdyZSBhIHJvb3QuIE1pZ2h0IGJl IG9rIGZvciBhIGRldmljZSBtYW51ZmFjdHVyZXIsIGJ1dCBpcyBhIHBvdGVudGlhbCBzaG93IHN0 b3BwZXIgZm9yIGFueSB1c2VyIHNwYWNlIGFwcC4gUmVsYXllZCBTTklGIHdvcmtzIGFyb3VuZCB0 aGlzIHByb2JsZW0gc2luY2UgdGhlIGxpc3RlbmluZyBwb3J0cyBhcmUgb24gdGhlIHJlbGF5Lg0K DQoNCg0KDQoqIEFub3RoZXIgb3B0aW9uIGlzIHRvIG92ZXJyaWRlIHRoZSBJUCByb3V0aW5nIHJ1 bGVzLiBJdCBpcyB0b3RhbGx5DQpwb3NzaWJsZSBvbiBpT1MgYW5kIE1hYyB0aHJvdWdoIGEgdXNl cnNwYWNlIFZQTiAob25seSBvbmUgVlBOIHBlcg0KZGV2aWNlIHRob3VnaCAtIGJld2FyZSBvZiBw b3NzaWJsZSBjb25mbGljdHMpLiBJbiBmYWN0IEkgaGF2ZSBhDQpmdW5jdGlvbmluZyBzb2x1dGlv biBmb3IgaXQsIGluIGJldGEgbm93IC0NCg0KVGhhdCBkb2Vzbid0IHJlYWxseSBzY2FsZSB0byBt YW55IGRpZmZlcmVudCBkb21haW5zLg0KDQpUb3RhbGx5IGFncmVlZCwgSSBqdXN0IG1lbnRpb25l ZCB0aGF0IHRoaXMgb3B0aW9uIHdvcmtzIGZvciAqc29tZSogY2FzZXMsIHR1bi90YXAgYSBpcyBw b3NzaWJsZSBvcHRpb24gdG9vIGlmIHlvdSdyZSBhIHJvb3QuDQoNCg0KDQpTdGlsbCwgaWYgU05J RiBpcyByZXBsYWNpbmcgYSBtYW51ZmFjdHVyZXIgcHJvcHJpZXRhcnkgY2FsbC1ob21lIHByb3Rv Y29sLA0KdGhlcmUgY291bGQgYmUgYWR2YW50YWdlcyBmcm9tIGhhdmluZyB3ZWxsIHJldmlld2Vk IGNvZGUgYmFzZXMsIGFuZA0KcG90ZW50aWFsbHkgYW4gZWNvc3lzdGVtIG9mIFNOSUYgUHJvdmlk ZXJzIHRoYXQgbWFudWZhY3R1cmVycyBjb3VsZA0Kb3V0c291cmNlDQoNCg0KDQp0by4gIEF6dXJl L0FtYXpvbi8uLi4gY291bGQgZWFzaWx5IHJ1biBzdWNoIHNlcnZpY2VzLg0KDQoNCg0KSSBzZWUg dHdvIG9wdGlvbnMgLSBhIFNOSUYgc2VydmVyIGltcGxlbWVudGVkIGJ5IGVhY2ggdmVuZG9yIGZv ciB0aGVpcg0Kb3duIGRldmljZXMvc2VydmljZXMsIG9yIGEgYmlnZ2VyIFNOSUYgU2FhUyBpbXBs ZW1lbnRlZCBieSBhIHRydXN0ZWQNCnByb3ZpZGVyLCB1c2VkIGJ5IHZlbmRvcnMuDQoNClllcywg YnV0IHdoYXQncyB0aGUgZmluYW5jaWFsIG1vdGl2ZSBmb3IgdGhpcyBwcm92aWRlcj8NCg0KKDEp IEZvciBhIHZlbmRvciB0byBydW4gdGhlaXIgb3duIFNOSUYgc2VydmVyOiBtYXJrZXQgYXMgYSB0 cnVlIGF1ZGl0YWJsZSBlbmQtdG8tZW5kIGZvciBJb1QgZGV2aWNlcyB0aGV5IG9mZmVyLg0KKDIp IEZvciBhIHZlbmRvciB1c2luZyBTTklGIFNhYVM6IG1hcmtldCBhcyAoMSkgYmFja2VkIGJ5DQp7 VHJ1c3RlZEJpZ05hbWV9DQooMykgRm9yIGEge1RydXN0ZWRCaWdOYW1lfSB0byBydW4gU05JRiBT YWFTOiBjb2xsZWN0IGZlZXMgZnJvbSAoMikgZm9yIHVzaW5nIHRoZWlyIHNlcnZpY2UgYW5kIGJp ZyBuYW1lLg0KDQpBcyBhIG1hdHRlciBvZiBmYWN0LCBTTklGIHJlbGF5IGlzIGxpZ2h0IG9uIHNl cnZlciByZXNvdXJjZXMuIEkndmUgYmVlbiBydW5uaW5nIGl0IG9uIGEgbWluaW11bSBEaWdpdGFs T2NlYW4gdmlydHVhbCBzZXJ2ZXIgZm9yIG1vbnRocyB3aXRoIG1vcmUgdGhhbiBhIGRvemVuIGNv bm5lY3RvcnMsICAgdGhlIHNlcnZlciBsb2FkIGlzIGEgZnJhY3Rpb24gb2YgYSBwZXJjZW50LiBP ZiBjb3Vyc2UgaWYgc29tZWJvZHkgY29ubmVjdHMgSW9UIGNhbWVyYXMgdGhleSBjYW4gZ2VuZXJh dGUgc29tZSB0cmFmZmljLCBidXQgSW9UIHZlbmRvcnMgYWxyZWFkeSBoYW5kbGUgaXQgdGhyb3Vn aCB0aGVpciBwcm9wcmlldGFyeSByZWxheXMuDQoNCg0KDQpTTklGIHNlZW1zIHZlcnkgbXVjaCBJ UHY0IE5BVDQ0IGZvY3VzZWQsIGFuZCBpdCBjb3VsZCBiZW5lZml0IGZyb20gc29tZQ0KdW5kZXJz dGFuZGluZyBvZiBJUHY2IGFuZCBJUHY2LW92ZXItSVB2NCB0ZWNobm9sb2dpZXMsDQoNCiBwYXJ0 aWN1bGFybHkNCg0KVGVyZWRvLg0KDQoNCg0KU05JRiBpcyBub3QgZXhhY3RseSBmb2N1c2VkIG9u IHY0LCBpdCB3b3JrcyBmaW5lIHdpdGggdjYgYXMgd2VsbC4gSXQncw0KZGVzaWduZWQgdG8gd29y ayBhcm91bmQgTkFULCB0aGF0J3MgdHJ1ZS4gSG93ZXZlciwgSVB2NiBuZXR3b3JrcyBtYXkNCnBv c2UgaXNzdWVzIHRvbyAtIGZpcmV3YWxscyBldGMsIHdoaWNoIHdpbGwgcHJldmVudCB0byBkaXJl Y3RseSBhY2NlcHQNCmluY29taW5nIFRDUCBvbiBJUHY2IGFkZHJlc3MuDQoNClRlcmVkbyBjb3Vs ZCBiZSB1c2VkIGluc3RlYWQgYW5kIGFsbG93cyB0aGUgcmVsYXkgdG8gYmUgc3RhdGVsZXNzIGFu ZA0KZGlzdHJpYnV0ZWQsIGFuZCBkZXZvbHZlcyB0byBvcmRpbmFyeSBJUHY2IHdoZW4gaXQgaXMg cHJlc2VudC4NCg0KWWVzLCBidXQgVGVyZWRvIGlzIElQdjYgc3BlY2lmaWMsIHRoZSB3b3JsZCBp cyBub3Qgc3RyaWN0bHkgSVB2NiB5ZXQuIEFuZCBpdCdzIGEgc3lzdGVtIGxldmVsIHNvbHV0aW9u LCB3aGlsZSBTTklGIHdvcmtzIGZpbmUgaW4gYSB1c2VyIHNwYWNlLg0KDQoNCg0KSXQgY2xlYXJs eSBoYXMgdG8gc3BlYWsgSFRUUFMgb25seS4NCg0KDQoNCkkgc3BlY2lmaWVkIEhUVFAgYmVjYXVz ZSBQS0NTIzEwIGFuZCBYLjUwOSBhcmUgaW5oZXJlbnRseSBzZWN1cmUgdG8gYmUNCnNlbnQgb3Zl ciBhIHBsYWluIGNvbm5lY3Rpb24uDQoNClllcywgYnV0IHRoZXJlIGFyZSBwcml2YWN5IGNvbmNl cm5zIHdoaWNoIHdpbGwgYmVjb21lIGEgcGFpbiwgc28NCmJldHRlciB0byBqdXN0IHNheSBIVFRQ UyBoZXJlLg0KDQpJIHJlc3BlY3RmdWxseSBkaXNhZ3JlZSwgc3RpbGwgdGhpbmsgSFRUUCBpcyBh biBlYXNpZXIgYW5zd2VyIGZvciBTTklGLiBUaGUgcHJvYmxlbSB3aXRoIEhUVFBTIGlzIC0gU05J RiByZWxheSAodXN1YWxseSkgcm91dGVzIGh0dHBzIHBvcnQgdG8gU05JRiBjb25uZWN0b3JzLCBh bmQgZG9lcyBub3Qgc2VydmUgaXQgd2l0aGluIHRoZSBzZXJ2ZXIuIEhhdmluZyBhIGRlZGljYXRl ZCBob3N0bmFtZSBvciBhbiBhbHRlcm5hdGUgcG9ydCBtZWFucyB0aGFuIFNOSUYgY29ubmVjdG9y cyBuZWVkIGFkZGl0aW9uYWwgY29uZmlndXJhdGlvbiBvcHRpb25zLCBvciBhZGRpdGlvbmFsIGRp c2NvdmVyeSBwcm90b2NvbHMuIE9uIHRoZSBvdGhlciBoYW5kLCBIVFRQIGFsbG93cyB0byBkZXJp dmUgYWxsIEFQSSBVUkxzIGRldGVybWluaXN0aWNhbGx5IGZyb20gdGhlIENOLg0KSSBhZGRyZXNz ZWQgdGhlIHBvc3NpYmxlIHNlY3VyaXR5IGNvbmNlcm5zIGluIG1vcmUgZGV0YWlscyBhbmQgYW1l bmRlZCB0aGUgU2VjdXJpdHkgc2VjdGlvbiBpbiB0aGUgZHJhZnQuDQoNCg0KDQoNClRoZSBiZXN0 IG9wdGlvbiBpcyB0aGUgbWFudWZhY3R1cmVyIEkgYmVsaWV2ZS4gVGhlIG1hbnVmYWN0dXJlciBj YW4NCmhhdmUgZWl0aGVyIHRoZWlyIG93biBTTklGIHNlcnZlciwgb3Igd29yayB3aXRoIGEgdHJ1 c3RlZCBTYWFTLiBUaGlzDQp3YXkgaXQncyB6ZXJvIHNldHVwIGZvciB0aGUgZW5kIHVzZXIsIGFu ZCBkb2Vzbid0IG5lZWQgYW55DQppbmZyYXN0cnVjdHVyZSBhZGRpdGlvbnMuDQoNCkFncmVlZCwg dGhlIG1hbnVmYWN0dXJlciBoYXMgdG8gcHJvdmlzaW9uIGEgY3JlZGVudGlhbC4NCg0KWWVzIEkg cHJvcG9zZWQgc29tZSBvdXRsaW5lcyBpbiB0aGUgc2VjdXJpdHkgc2VjdGlvbiwgbW9yZSBkZXRh aWxlZCBzcGVjcyBhcmUgcHJvYmFibHkgYmV0dGVyIHRvIGRlc2NyaWJlIGluIGEgc2VwYXJhdGUg ZHJhZnQuDQoNCg0KDQpTdXJlLCBlbGxpcHRpYyBjdXJ2ZXMgYXJlIGJldHRlciwgYnV0IHNvbWUg b2xkIHNjaG9vbCBjbGllbnRzIG1heSBoYXZlDQpwcm9ibGVtcyB3aXRoIHRoZW0uIEl0IG1heSBt YWtlIHNlbnNlIHRvIG5vdCBtZW50aW9uIHRoZSByZWNvbW1lbmRlZA0KYWxnb3JpdGhtIGluIHRo ZSBkcmFmdCwgYW5kIGp1c3QgdG8gZm9sbG93IHRoZSBDQSdzIHJlY29tbWVuZGF0aW9ucy4NCg0K RUNEU0EgYWNjZWxlcmF0aW9uIGlzIHByZXR0eSBtdWNoIHViaXF1aXRvdXMsIHdoaWxlIFJTQSBp cyBub3QuDQoNCkhvbmVzdGx5IEkgZG9uJ3QgdGhpbmsgYWNjZWxlcmF0aW9uIGlzIHN1Y2ggYSBi aWcgZGVhbCwgbW9zdCBvZiBUTFMgam9iIGlzIHN5bW1ldHJpYyBjaXBoZXJzIGFueXdheS4gQnV0 IEkgYWdyZWUgLSBpdCdzIGJldHRlciB0byBmb2xsb3cgdGhlIENBIHN1Z2dlc3Rpb25zIGFuZCBp bmR1c3RyeSBwcmFjdGljZXMuDQoNCg0KDQpJIGJlbGlldmUgdGhlcmUncyBubyBzZWN1cml0eSBp c3N1ZSwgYXMgbG9uZyBhcyB0aGUgQ04gZW50cm9weSBpcyBzdWZmaWNpZW50Lg0KDQoNCg0KSSBz cGVjaWZpZWQgdGhlIFgtU05JRi1DTjogYXMgbWFuZGF0b3J5LCBhbmQgdGV4dC9wbGFpbiBib2R5 IGFzIGFuDQpvcHRpb25hbCBkdXBsaWNhdGUgb2YgaXQuIFRvIG1ha2UgaXQgY2xlYW5lciwgSSBj YW4gcmVtb3ZlIHRoZSBib2R5DQpmcm9tIHRoZSBzcGVjcyBhbmQgc2F5IHRoZSByZXNwb25zZSBi b2R5IGlzIHRvIGJlIGlnbm9yZWQuDQoNCklmIGJvdGggYXJlIHByZXNlbnQsIGFuZCB0aGV5IGRv bid0IG1hdGNoLCB0aGVuIHRoZXJlIGlzIGNvbmZ1c2lvbi4NClNvIGp1c3QgZ28gd2l0aCBvbmUu ICBJIHRoaW5rIHRoYXQgaXQgc2hvdWxkIGFjdHVhbGx5IGJlIGEgSlNPTiBvciBDQk9SIHBheWxv YWQgcmV0dXJuLg0KDQpBZ3JlZWQsIEkgcmVtb3ZlZCB0aGUgcmVzcG9uc2UgYm9keSBmcm9tIHRo ZSBkcmFmdCwgZ29pbmcgd2l0aCB0aGUgaGVhZGVyLg0KDQoNCg0KDQpUaGV5ICphcmVuJ3QqIHdo YXQgSUFOQSB3b3VsZCBjYWxsICJJUCBwcm90b2NvbHMiLCB3aGljaCB3b3VsZCBiZSB0aGluZ3MN Cmxpa2UNClRDUCwgVURQLCBTQ1RQLCBFU1AsIC4uLg0KDQoNCg0KSGFzIElBTkEgKmFscmVhZHkq IHJlZ2lzdGVyZWQgcG9ydCA3MTIzIHRoZW4/DQoNCg0KDQpJdCdzIG5vdCBhbiBJUCBwcm90b2Nv bC4gSXQncyBhIHNlcnZpY2UgdGhhdCBsaXN0ZW5zIG9uIFRDUCA3MTIzLCBJDQpyZWdpc3RlcmVk IHdpdGggSUFOQSBiYXNlZCBvbiBhIHByZXZpb3VzIHZlcnNpb24gb2YgdGhlIGRvY3VtZW50LA0K YmVmb3JlIEkgdHVybmVkIGl0IGludG8gYW4gSS1ELg0KDQpJIHRoaW5rIHlvdSBzaG91bGQgZHJv cCB0aGUgInNuaWYtKiIgc2VudGVuY2UgYXMgaXQgbWFrZXMgbm8gc2Vuc2UuDQpZb3UgaGF2ZSBh bHJlYWR5IGFsbG9jYXRlZCBUQ1AgcG9ydCA3MTIzIHRvIHRoZSBTTklGICpzZXJ2aWNlKiwgc28N CnRoYXQncyBncmVhdC4NCg0KSXQncyBhY3R1YWxseSBjYWxsZWQgIlNlcnZpY2UgTmFtZXMiIGlu IElBTkEgdGVybWlub2xvZ3ksIHNvcnJ5IGZvciB0aGUgY29uZnVzaW9uLiBJIHVwZGF0ZWQgaW4g dGhlIGRyYWZ0Lg0KDQoNCg0KLS0NCl0gICAgICAgICAgICAgICBOZXZlciB0ZWxsIG1lIHRoZSBv ZGRzISAgICAgICAgICAgICAgICAgfCBpcHY2IG1lc2ggbmV0d29ya3MgWw0KXSAgIE1pY2hhZWwg UmljaGFyZHNvbiwgU2FuZGVsbWFuIFNvZnR3YXJlIFdvcmtzICAgICAgICB8ICAgIElvVCBhcmNo aXRlY3QgICBbDQpdICAgICBtY3JAc2FuZGVsbWFuLmNhPG1haWx0bzptY3JAc2FuZGVsbWFuLmNh PiAgaHR0cDovL3d3dy5zYW5kZWxtYW4uY2EvICAgICAgICB8ICAgcnVieSBvbiByYWlscyAgICBb DQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQoNClNlY2Rpc3BhdGNoIG1haWxp bmcgbGlzdA0KU2VjZGlzcGF0Y2hAaWV0Zi5vcmc8bWFpbHRvOlNlY2Rpc3BhdGNoQGlldGYub3Jn Pg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zZWNkaXNwYXRjaA0KSU1Q T1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFueSBhdHRhY2ht ZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2VkLiBJZiB5b3Ug YXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRoZSBzZW5kZXIg aW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8gYW55IG90aGVy IHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29weSB0aGUgaW5m b3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0KDQpfX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXw0KDQpTZWNkaXNwYXRjaCBtYWlsaW5nIGxpc3QNClNlY2Rpc3BhdGNoQGll dGYub3JnPG1haWx0bzpTZWNkaXNwYXRjaEBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vc2VjZGlzcGF0Y2gNCg0KLS0NCklvdG9wcyBtYWlsaW5nIGxpc3QN CklvdG9wc0BpZXRmLm9yZzxtYWlsdG86SW90b3BzQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pb3RvcHMNCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250 ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBh bmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJl Y2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3Qg ZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55 IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0u IFRoYW5rIHlvdS4NCg0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1h aWwgYW5kIGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBw cml2aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ug bm90aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29u dGVudHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3Rv cmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0K --_000_DBBPR08MB591548B0B00B68F0A4A013ACFA049DBBPR08MB5915eurp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OldpbmdkaW5nczsNCglwYW5vc2UtMTo1IDAgMCAwIDAgMCAwIDAgMCAw O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6 MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkRlbmdYaWFu Ow0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZh bWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZh Y2UNCgl7Zm9udC1mYW1pbHk6IlxARGVuZ1hpYW4iOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEg MSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25zb2xhczsNCglwYW5vc2UtMToy IDExIDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCWZvbnQtc2l6 ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBz cGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsN Cgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnByZQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6 OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1hcmdpbjow aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1m YW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpwLk1zb0xpc3RQYXJhZ3JhcGgsIGxpLk1zb0xpc3RQYXJh Z3JhcGgsIGRpdi5Nc29MaXN0UGFyYWdyYXBoDQoJe21zby1zdHlsZS1wcmlvcml0eTozNDsNCglt YXJnaW4tdG9wOjBpbjsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1hcmdpbi1ib3R0b206MGluOw0K CW1hcmdpbi1sZWZ0Oi41aW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2Fs aWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkhUTUxQcmVmb3JtYXR0ZWRDaGFyDQoJe21zby1zdHls ZS1uYW1lOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7 DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIjsNCglmb250LWZhbWlseTpDb25z b2xhczt9DQpzcGFuLkVtYWlsU3R5bGUyMQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBs eTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0 O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQt c2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0K CW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3Bh Z2U6V29yZFNlY3Rpb24xO30NCi8qIExpc3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21z by1saXN0LWlkOjE0ODkwNTA3Mzg7DQoJbXNvLWxpc3QtdHlwZTpoeWJyaWQ7DQoJbXNvLWxpc3Qt dGVtcGxhdGUtaWRzOjQ1OTY5NzUyNCA2MTkxMTU5MzIgNjc2OTg2OTEgNjc2OTg2OTMgNjc2OTg2 ODkgNjc2OTg2OTEgNjc2OTg2OTMgNjc2OTg2ODkgNjc2OTg2OTEgNjc2OTg2OTM7fQ0KQGxpc3Qg bDA6bGV2ZWwxDQoJe21zby1sZXZlbC1zdGFydC1hdDowOw0KCW1zby1sZXZlbC1udW1iZXItZm9y bWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5v bmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVp bjsNCglmb250LWZhbWlseTpTeW1ib2w7DQoJbXNvLWZhcmVhc3QtZm9udC1mYW1pbHk6RGVuZ1hp YW47DQoJbXNvLWJpZGktZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiI7fQ0KQGxpc3QgbDA6 bGV2ZWwyDQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4 dDpvOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3 Ijt9DQpAbGlzdCBsMDpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0K CW1zby1sZXZlbC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2 ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFt aWx5OldpbmdkaW5nczt9DQpAbGlzdCBsMDpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9u ZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWlu Ow0KCWZvbnQtZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMDpsZXZlbDUNCgl7bXNvLWxldmVsLW51 bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1z dG9wOm5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50 Oi0uMjVpbjsNCglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGwwOmxldmVsNg0K CXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0K CW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVm dDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0 IGwwOmxldmVsNw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVs LXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXIt cG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6U3ltYm9s O30NCkBsaXN0IGwwOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJ bXNvLWxldmVsLXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwt bnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5 OiJDb3VyaWVyIE5ldyI7fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9y bWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5v bmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVp bjsNCglmb250LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDENCgl7bXNvLWxpc3QtaWQ6MTc2 NjQ4ODQ0NjsNCgltc28tbGlzdC10eXBlOmh5YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6 MTkyMTM5MDQ0NiAtMzQzNjE3MjQ4IDY3Njk4NjkxIDY3Njk4NjkzIDY3Njk4Njg5IDY3Njk4Njkx IDY3Njk4NjkzIDY3Njk4Njg5IDY3Njk4NjkxIDY3Njk4NjkzO30NCkBsaXN0IGwxOmxldmVsMQ0K CXttc28tbGV2ZWwtc3RhcnQtYXQ6MDsNCgltc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7 DQoJbXNvLWxldmVsLXRleHQ674OYOw0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1m YW1pbHk6V2luZ2RpbmdzOw0KCW1zby1mYXJlYXN0LWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9t YW4iOw0KCW1zby1iaWRpLWZvbnQtZmFtaWx5OkNhbGlicmk7fQ0KQGxpc3QgbDE6bGV2ZWwyDQoJ e21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1z by1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsN Cgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlz dCBsMTpsZXZlbDMNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZl bC10ZXh0Ou+CpzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5Oldpbmdk aW5nczt9DQpAbGlzdCBsMTpsZXZlbDQNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0 Ow0KCW1zby1sZXZlbC10ZXh0Ou+CtzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28t bGV2ZWwtbnVtYmVyLXBvc2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQt ZmFtaWx5OlN5bWJvbDt9DQpAbGlzdCBsMTpsZXZlbDUNCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsN Cglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGwxOmxldmVsNg0KCXttc28tbGV2 ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZl bC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0 LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGwxOmxldmVs Nw0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3 Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246 bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0 IGwxOmxldmVsOA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVs LXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVy IE5ldyI7fQ0KQGxpc3QgbDE6bGV2ZWw5DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxl dDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250 LWZhbWlseTpXaW5nZGluZ3M7fQ0Kb2wNCgl7bWFyZ2luLWJvdHRvbTowaW47fQ0KdWwNCgl7bWFy Z2luLWJvdHRvbTowaW47fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxv OnNoYXBlZGVmYXVsdHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtl bmRpZl0tLT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJl ZGl0Ij4NCjxvOmlkbWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0 PjwveG1sPjwhW2VuZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJs dWUiIHZsaW5rPSJwdXJwbGUiIHN0eWxlPSJ3b3JkLXdyYXA6YnJlYWstd29yZCI+DQo8ZGl2IGNs YXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGkgSmltLCA8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+VGhhbmtzIGZvciB5b3VyIHJlc3BvbnNlLiA8bzpwPjwvbzpwPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij4mZ3Q7IFRoZXJlIGFyZSBz b21lIElvVCBtYW5hZ2VtZW50IHNvbHV0aW9ucyBvbiB0aGUgbWFya2V0LCBib3RoIG9wZW4gc291 cmNlIGFuZCBwcm9wcmlldGFyeSwgYnV0IGFzIGZhciBhcyBJIGNhbiB0ZWxsIG5vbmUgb2YgdGhl bSBmdWxseSBmb2xsb3dzIHRoZSBlbmQgdG8gZW5kIHBhcmFkaWdtLjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5bSGFubmVz XSBJdCBkZXBlbmRzIHdoYXQgeW91IGNhbGwgZW5kLXRvLWVuZC4gQXMgYW4gSW9UIHNlcnZpY2Ug cHJvdmlkZXIgeW91IGhhdmUgdG8gbWFrZSBhIGZldyBkZWNpc2lvbnMgYWJvdXQgaG93IHRvIG1h bmFnZSBhbmQgZGVwbG95IElvVCBkZXZpY2VzLiBCcm9hZGx5IHNwZWFraW5nLCB5b3UgaGF2ZSB0 aHJlZSBvcHRpb25zOg0KPG86cD48L286cD48L3A+DQo8dWwgc3R5bGU9Im1hcmdpbi10b3A6MGlu IiB0eXBlPSJkaXNjIj4NCjxsaSBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9Im1hcmdp bi1ib3R0b206MTIuMHB0O21hcmdpbi1sZWZ0OjBpbjttc28tbGlzdDpsMCBsZXZlbDEgbGZvMSI+ DQpZb3UgJm5ic3A7c2VlayBvdXQgdG8gYSB0aGlyZCBwYXJ0eSB0byBtYW5hZ2UgeW91ciBkZXZp Y2VzLiBOZWVkbGVzcyB0byBzYXkgdGhhdCB5b3Ugc2hvdWxkIHBpY2sgYSBjb21wYW55IHRoYXQg eW91IGZlZWwgY29tZm9ydGFibGUgd2l0aC4gVGhleSB3aWxsIG1hbmFnZSB5b3VyIGRldmljZXMg YW5kIHRoZXkgd2lsbCBhbHNvIG9mZmVyIHdheXMgdG8gc3RvcmUgdGhlIGRhdGEgb2J0YWluZWQg ZnJvbSB0aGUgZGV2aWNlcywgdG8gbWFuYWdlIGFuZCBkaXN0cmlidXRlDQogZmlybXdhcmUgdXBk YXRlcywgYW5kIGV2ZW4gdG8gcGVyZm9ybSBhbmFseXNpcyBvZiB0aGUgZGF0YSAobWFjaGluZSBs ZWFybmluZykuIFRoZW4sIHlvdSBjYW4gdHlwaWNhbGx5IGNvbm5lY3QgYmFja2VuZCBhcHBsaWNh dGlvbiBzZXJ2ZXJzIHRvIHRoZSBkZXZpY2UgbWFuYWdlbWVudCBvZmZlcmluZy4gT2YgY291cnNl LCB0aGUgZGV0YWlscyB2YXJ5IGEgbG90IHdpdGggd2hhdCB5b3UgYXJlIGFjdHVhbGx5IGRvaW5n IGFzIGFuIElvVCBzZXJ2aWNlDQogcHJvdmlkZXIgd2l0aCB0aGUgSW9UIGRldmljZXMgYW5kIHRo ZSBkYXRhLjxvOnA+PC9vOnA+PC9saT48bGkgY2xhc3M9Ik1zb0xpc3RQYXJhZ3JhcGgiIHN0eWxl PSJtYXJnaW4tYm90dG9tOjEyLjBwdDttYXJnaW4tbGVmdDowaW47bXNvLWxpc3Q6bDAgbGV2ZWwx IGxmbzEiPg0KWW91IGdldCB0aGUgc29mdHdhcmUgZnJvbSBhIHByb3ZpZGVyIGFuZCB5b3UgbWFu YWdlIHRoZSBkZXZpY2VzIG9uIHlvdXIgb3duLiBUaGlzIGlzIG9mdGVuIHRoZSBjYXNlIHdoZW4g eW91IHdhbnQgdG8gZGVwbG95IGFuIG9uLXByZW1pc2Ugc29sdXRpb24uIEhlcmUgeW91IGhhdmUg dG8gdHJ1c3QgdGhlIHByb3ZpZGVyIG9mIHRoZSBkZXZpY2UgbWFuYWdlbWVudCBzb2Z0d2FyZSB0 aGF0IHRoZSBjb2RlIGlzIGNvcnJlY3QgYW5kIGRvZXMgd2hhdA0KIGl0IGlzIHN1cHBvc2VkIHRv IGRvLiBJbiBzb21lIGNhc2VzIHlvdSBub3Qgb25seSBnZXQgdGhlIGJpbmFyeSBidXQgYWxzbyB0 aGUgc291cmNlIGNvZGUuIEluIHRoZW9yeSwgeW91IGNvdWxkIGNoZWNrIHdoYXQgY29kZSBpcyBh Y3R1YWxseSBydW5uaW5nIChhbHRob3VnaCBJIGRvdWJ0IHRoYXQgYW55b25lIHJlYWxseSBjaGVj a3MpLg0KPG86cD48L286cD48L2xpPjxsaSBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5bGU9 Im1hcmdpbi1ib3R0b206MTIuMHB0O21hcmdpbi1sZWZ0OjBpbjttc28tbGlzdDpsMCBsZXZlbDEg bGZvMSI+DQpGaW5hbGx5LCB5b3UgYnVpbGQgeW91ciBvd24gZGV2aWNlIG1hbmFnZW1lbnQgc29s dXRpb24gKG9mdGVuIHVzaW5nIGF2YWlsYWJsZSBvcGVuIHNvdXJjZSBzb2Z0d2FyZSkuDQo8bzpw PjwvbzpwPjwvbGk+PC91bD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90 dG9tOjEyLjBwdCI+SW4gcHJhY3RpY2UsIEkgaGF2ZSBhbHNvIHNlZW4gYSBjb21iaW5hdGlvbiBv ZiB0aGUgdmFyaWFudHMgYWJvdmUuIEZvciBleGFtcGxlLCBJIGhhdmUgc2VlbiBhIGNhc2Ugd2hl cmUgdGhlIGRldmljZXMgd2VyZSBtYW5hZ2VkIGJ5IGEgdGhpcmQgcGFydHkgYnV0IHRoZSB2aWRl byBzdHJlYW0gb2YgdGhlIHN1cnZlaWxsYW5jZSBjYW1lcmEgd2FzIHNlbnQgZGlyZWN0bHkNCiB0 byBhIGRlZGljYXRlZCBzZXJ2ZXIgbWFuYWdlZCBieSB0aGUgSW9UIHNlcnZpY2UgcHJvdmlkZXIu IChUaGVyZSB3ZXJlIGFsc28gdmFyaW91cyB0ZWNobmlxdWVzIHRvIHByZXZlbnQgbW9kaWZpY2F0 aW9ucyB0byB0aGUgZGV2aWNlIHRvIGhhdmUgdGhlIHZpZGVvIHN0cmVhbSByZS1kaXJlY3RlZCBv ciB0aGUgY3JlZGVudGlhbHMgY2hhbmdlcyBidXQgSSB0aGluayB5b3UgZ2V0IHRoZSBpZGVhLikg VGhlIGNvbW11bmljYXRpb24gbW9kZWwgdGhlcmUNCiB3YXMgYSBiaXQgZGlmZmVyZW50IHRoYW4g eW91cnMgYmVjYXVzZSB0aGUgY2xpZW50IGluaXRpYXRlZCB0aGUgY29tbXVuaWNhdGlvbiB3aXRo IHRoZSB2aWRlbyBzZXJ2ZXIuIEhlbmNlLCB0aGVyZSB3YXMgbm8gaXNzdWUgd2l0aCBydW5uaW5n IGEgVExTIHNlcnZlciBvbiB0aGUgZGV2aWNlLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5PbiB0b3Agb2YgdGhpcywgaXQg aXMgYWxzbyBjb21tb24gdG8gcHJvdmlkZSBzcGVjaWFsIHNlY3VyaXR5IHByb3RlY3Rpb24gZm9y IHNlbGVjdGVkIGRhdGEuIEZvciBleGFtcGxlLCBmaXJtd2FyZSB1cGRhdGVzIGFyZSBzaWduZWQg YnkgcGFydHkgZGlmZmVyZW50IGZyb20gdGhlIGNvbXBhbnkgb2ZmZXJpbmcgdGhlIGRldmljZSBt YW5hZ2VtZW50IHNvbHV0aW9uLg0KIFRoZXkgYXJlLCBmb3IgZXhhbXBsZSwgc2luZ2VkIGJ5IHRo ZSBjb21wYW55IGRldmVsb3BpbmcgdGhlIGNvZGUuIFRoZXkgYXJlIHN0aWxsIGRpc3RyaWJ1dGVk IGJ5IHRoZSBkZXZpY2UgbWFuYWdlbWVudCBpbmZyYXN0cnVjdHVyZSBhbmQgaGVuY2UgeW91IGhh dmUgdG8gcmVseSBvbiB0aGUgZGlzdHJpYnV0aW9uIG9mIHRoZW0gYnV0IHRoZXJlIGlzIG5vIGNo YW5jZSBmb3IgdGhlIGRldmljZSBtYW5hZ2VtZW50IHByb3ZpZGVyIHRvIGluamVjdA0KIG1hbGlj aW91cyBjb2RlIGludG8gdGhlIGRldmljZS4gPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPkZyb20gd2hhdCBJIGFtIHNlZWlu ZywgdGhlIGZpcnN0IGRlcGxveW1lbnQgbW9kZWwgaXMgdmVyeSBwb3B1bGFyLiBUaGUgYXBwcm9h Y2ggb2Yg4oCcZGVzaWduaW5nIHlvdXIgb3duIHNvbHV0aW9u4oCdIHdhcyBwb3B1bGFyIGluIHRo ZSBlYXJseSBkYXlzIGJlY2F1c2UgY29tcGFuaWVzIHdlcmUgZ2l2ZW4gdGhlIGltcHJlc3Npb24g dGhhdCB0aGlzIElvVCBzdHVmZg0KIGlzIHNvIHNpbXBsZSB0aGF0IHlvdSBjYW4gcHV0IGEgc29s dXRpb24gdG9nZXRoZXIgaW4gYSB3ZWVrZW5kLiBJdCB0dXJuZWQgb3V0IHRoYXQgdGhpcyBpcyBu b3QgcXVpdGUgdGhlIGNhc2UgKGlmIHlvdSBoYXZlIGEgbGFyZ2VyIG51bWJlciBvZiBkZXZpY2Vz KS4gTWFueSBJb1Qgc2VydmljZSBwcm92aWRlcnMgYWxzbyBuZWVkIGhlbHAgZGVzaWduaW5nIHRo ZSBlbnRpcmUgc29sdXRpb24sIGFsc28gdGhlIHNvbHV0aW9uIG9uIHRoZSBJb1QgZGV2aWNlDQog aXRzZWxmLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1ib3R0b206MTIuMHB0Ij5Ib3cgZG9lcyB5b3VyIHNvbHV0aW9uIGZpdCBpbnRvIHRoaXMgcGlj dHVyZT88bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4t Ym90dG9tOjEyLjBwdCI+Jmd0OyBJIGJlbGlldmUgaXQncyB3b3J0aCBoYXZpbmcgYSB1bml2ZXJz YWwgY3Jvc3MtdmVuZG9yIHNvbHV0aW9uIHRoYXQgaGFuZGxlcyBTTklGIGRldmljZSBvbmJvYXJk aW5nLCBtYWludGFpbnMgdGhlIGNyZWRlbnRpYWxzIGluIGEgbG9jYWwgc2VjdXJlIHN0b3JhZ2Us IGFuZCBjb25zb2xpZGF0ZXMgaHR0cHMgYmFzZWQgbWFuYWdlbWVudCBpbnRlcmZhY2UgaG9zdGVk DQogYnkgaW5kaXZpZHVhbCBkZXZpY2VzIHRocm91Z2ggU05JRi48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+W0hhbm5lc10g VGhlcmUgaXMgZGVmaW5pdGVseSBhIGxvdCBvZiBleGNpdGVtZW50IHdoZW4gaXQgY29tZXMgdG8g dGhlIGRldmVsb3BtZW50IG9mIGRldmljZSBvbmJvYXJkaW5nIHNvbHV0aW9ucy4gSSBoYXZlIHRv IHRydXN0IHlvdSB0aGF0IHRoZXJlIGlzIGZ1cnRoZXIgaW50ZXJlc3QgZm9yIHNvbHV0aW9ucyBi ZWNhdXNlIEkgaGF2ZW7igJl0IGNoZWNrZWQuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxicj4NCiZndDsgVGhlIHJlcXVp cmVtZW50cyBmb3Igc3VjaCBzb2x1dGlvbiBpcyBhIHRvcGljIGZvciBhIHNlcGFyYXRlIGRyYWZ0 LCBhbHRob3VnaCBJIGFscmVhZHkgb3V0bGluZWQgdGhlIHBvc3NpYmxlIHNlY3VyZSBvbmJvYXJk aW5nIHByb2Nlc3MgaW4gdGhlIHNlY3VyaXR5IHNlY3Rpb24uPG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPkkgd2lsbCByZS1y ZWFkIHlvdXIgc2VjdXJpdHkgY29uc2lkZXJhdGlvbiBzZWN0aW9uIGFnYWluLg0KPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1ib3R0b206MTIuMHB0Ij5Ob3RlIHRoYXQgSSBhbSBjZXJ0YWlubHkgbm90IGFnYWluc3QgeW91 ciBzb2x1dGlvbi4gSWYgeW91ciBhcHByb2FjaCBoYXMgc3VjY2Vzcywga3Vkb3MgdG8geW91Lg0K PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRv bToxMi4wcHQiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5DaWFvPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPkhhbm5lczxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48 bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBGZWJy dWFyeSAyNCwgMjAyMiA1OjM3OjQ2IEFNIEVTVCwgSGFubmVzIFRzY2hvZmVuaWcgJmx0OzxhIGhy ZWY9Im1haWx0bzpIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tIj5IYW5uZXMuVHNjaG9mZW5pZ0Bh cm0uY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0i Ym9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBpbiAw aW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW4iPg0KPHByZT5I aSBKaW0sPGJyPjxicj5UaGFua3MgZm9yIHRoZSBxdWljayByZXNwb25zZS4gVGhlIGxpbmsgdG8g eW91ciB3ZWJzaXRlIGlzIGhlbHBmdWwuIEkgbm93IHVuZGVyc3Rvb2QgdGhhdCB5b3Ugd291bGQg YWxzbyByZWxheSB0aGUgY29tbXVuaWNhdGlvbiB0aHJvdWdoIHRoZSBwcm94eSwgd2hpY2ggZGVh bHMgd2l0aCB0aGUgSW9UIGRldmljZSBiZWluZyBiZWhpbmQgYSBOQVQgYW5kL29yIGZpcmV3YWxs IGlmIHRoZSBJb1QgZGV2aWNlIGtlZXBzIHRoZSBjb25uZWN0aW9uIGFsaXZlLjxicj48YnI+SSB3 b25kZXIgd2hldGhlciB5b3UgaGF2ZSBjb25zaWRlcmVkIHRvIHJlLXVzZSBhbiBleGlzdGluZyBk ZXZpY2UgbWFuYWdlbWVudCBzb2x1dGlvbnMgc2luY2UgdGhvc2UgaXMgd2lkZWx5IGRlcGxveWVk IHRvZGF5Pzxicj48YnI+Q2lhbzxicj5IYW5uZXM8YnI+PGJyPi0tLS0tT3JpZ2luYWwgTWVzc2Fn ZS0tLS0tPGJyPkZyb206IElvdG9wcyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlvdG9wcy1ib3VuY2Vz QGlldGYub3JnIj5pb3RvcHMtYm91bmNlc0BpZXRmLm9yZzwvYT4mZ3Q7IE9uIEJlaGFsZiBPZiBK aW0gWnVib3Y8YnI+U2VudDogV2VkbmVzZGF5LCBGZWJydWFyeSAyMywgMjAyMiA0OjE3IFBNPGJy PlRvOiA8YSBocmVmPSJtYWlsdG86c2VjZGlzcGF0Y2hAaWV0Zi5vcmciPnNlY2Rpc3BhdGNoQGll dGYub3JnPC9hPjsgSGFubmVzIFRzY2hvZmVuaWcgJmx0OzxhIGhyZWY9Im1haWx0bzpIYW5uZXMu VHNjaG9mZW5pZ0Bhcm0uY29tIj5IYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPC9hPiZndDs7IEpp bSBadWJvdiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlldGYtbGlzdEBjb21tZXJjZWJ5dGUuY29tIj5p ZXRmLWxpc3RAY29tbWVyY2VieXRlLmNvbTwvYT4mZ3Q7OyA8YSBocmVmPSJtYWlsdG86c2VjZGlz cGF0Y2hAaWV0Zi5vcmciPnNlY2Rpc3BhdGNoQGlldGYub3JnPC9hPjsgTWljaGFlbCBSaWNoYXJk c29uICZsdDs8YSBocmVmPSJtYWlsdG86bWNyK2lldGZAc2FuZGVsbWFuLmNhIj5tY3IraWV0ZkBz YW5kZWxtYW4uY2E8L2E+Jmd0OzsgPGEgaHJlZj0ibWFpbHRvOmlvdG9wc0BpZXRmLm9yZyI+aW90 b3BzQGlldGYub3JnPC9hPjsgPGEgaHJlZj0ibWFpbHRvOmFuaW1hQGlldGYub3JnIj5hbmltYUBp ZXRmLm9yZzwvYT48YnI+U3ViamVjdDogUmU6IFtJb3RvcHNdIFtTZWNkaXNwYXRjaF0gSS1EOiBE ZXBsb3lpbmcgUHVibGljbHkgVHJ1c3RlZCBUTFMgU2VydmVycyBvbiBJb1QgRGV2aWNlcyBVc2lu ZyBTTkktYmFzZWQgRW5kLXRvLUVuZCBUTFMgRm9yd2FyZGluZyAoU05JRik8YnI+PGJyPlRoYW5r IFlvdSBmb3IgeW91ciBmZWVkYmFjayBIYW5uZXMsIEkgYWRkcmVzc2VkIHRoZSBjb21tZW50cyBi ZWxvdyAtPGJyPjxicj5PbiBGZWJydWFyeSAyMywgMjAyMiA1OjM2OjE1IEFNIEVTVCwgSGFubmVz IFRzY2hvZmVuaWcgJmx0OzxhIGhyZWY9Im1haWx0bzpIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29t Ij5IYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3By ZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjNzI5 RkNGIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFy Z2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4NCjxwcmU+SGkgYWxsLDxicj48YnI+ VGhhbmtzIGZvciB0aGlzIGNvbnRyaWJ1dGlvbiwgSmltLjxicj48YnI+UmVhZGluZyB0aHJvdWdo IHRoZSBkb2N1bWVudCBJIGFncmVlIHRoYXQgdGhlIFNVSUIgdG9waWMgZGlzY3Vzc2VkIGluIHRo ZSBJT1RPUFMgV0cgYXBwZWFycyByZWxldmFudC4gSSBhbHNvIHdvbmRlciB3aGV0aGVyIHRoZSB3 b3JrIGluIHRoZSBEQU5JU0ggZ3JvdXAgKHNlZSA8YSBocmVmPSJodHRwczovL2RhdGF0cmFja2Vy LmlldGYub3JnL3dnL2RhbmlzaC9hYm91dC8pIj5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3Jn L3dnL2RhbmlzaC9hYm91dC8pPC9hPiBpcyByZWxldmFudC48bzpwPjwvbzpwPjwvcHJlPg0KPC9i bG9ja3F1b3RlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxicj5BZ3JlZWQg YWJvdXQgU1VJQiwgbm90IHF1aXRlIHN1cmUgYWJvdXQgREFOSVNILiBEQU5JU0ggaXMgYWJvdXQg Y2VydGlmaWNhdGUgYmFzZWQgYXV0aGVudGljYXRpb24gYW5kIFBLSSBleHRlbnNpb25zLCB3aGls ZSBTTklGIGlzIGFib3V0IGVuZC10by1lbmQgcmVsYXllZCB0cnVzdGVkIFRMUyB0aGF0IHJlbGll cyBvbiB0aGUgc3RhbmRhcmQgUEtJLjxvOnA+PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90ZSBzdHls ZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgIzcyOUZDRiAxLjBwdDtwYWRkaW5nOjBp biAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW47bWFyZ2lu LWJvdHRvbTo2LjBwdCI+DQo8cHJlPjxicj5SZWdhcmRpbmcgdGhlIHVzZSBpbiBJb1QgSSBoYXZl IGEgcXVlc3Rpb24gZm9yIG15IHVuZGVyc3RhbmRpbmcuPGJyPjxicj5JbiBhIG51dHNoZWxsLCB5 b3UgaW50cm9kdWNlIGEgcHJveHkgdGhhdCBhbGxvY2F0ZXMgYSBob3N0bmFtZSBhbmQgcmVxdWVz dHMgYSBjcmVhdGlvbiBvZiBhIGNlcnRpZmljYXRlIG9uIGJlaGFsZiBvZiB0aGUgSW9UIGRldmlj ZS48bzpwPjwvbzpwPjwvcHJlPg0KPC9ibG9ja3F1b3RlPg0KPHByZT48YnI+Q29ycmVjdCwgcGx1 cyBhbiBlMmUgVExTIHJlbGF5LjxvOnA+PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90ZSBzdHlsZT0i Ym9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgIzcyOUZDRiAxLjBwdDtwYWRkaW5nOjBpbiAw aW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJv dHRvbTo2LjBwdCI+DQo8cHJlPjxicj5UbyBnZXQgdGhpcyB0byB3b3JrIHlvdSByZWx5IG9uIHRo cmVlIGFzc3VtcHRpb25zOjxicj4oMSkgVGhlcmUgaGFzIHRvIGJlIGEgY29tbXVuaWNhdGlvbiBp bmZyYXN0cnVjdHVyZSB0aGF0IGFzc29jaWF0ZXMgdGhlICZxdW90O2Fub255bW91cyZxdW90OyBo b3N0bmFtZSB3aXRoIGEgc3BlY2lmaWMgZGV2aWNlIGFuZCBjb252ZXlzIHRoZXNlIGlkZW50aWZp ZXJzIHRvIHRoZSByZWxldmFudCBwYXJ0aWVzLjxvOnA+PC9vOnA+PC9wcmU+DQo8L2Jsb2NrcXVv dGU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PGJyPkVhY2ggZGV2aWNlIGlz IGNvbmZpZ3VyZWQgd2l0aCBhbiBpbml0VXJsIHBvaW50aW5nIHRvIGEgc3BlY2lmaWMgQ0EgcHJv eHkgdGhhdCBhbGxvY2F0ZXMgYSByYW5kb20gaG9zdG5hbWUgKGEgQ04gdG8gYmUgbW9yZSBhY2N1 cmF0ZSksIG5vcm1hbGx5IGEgc3ViZG9tYWluIG9mIGEgbWFzdGVyIGRvbWFpbiB0aGF0IGhhcyBh IHdpbGRjYXJkIEROUyByZWNvcmQgcG9pbnRpbmcgdG8gdGhlIENBIHByb3h5Ljxicj5FeGFtcGxl IC0gdGhlIGluaXRVcmwgZm9yIHB1YmxpYyBleHBlcmltZW50YWwgdXNlIC0gPGEgaHJlZj0iaHR0 cHM6Ly9zbmlmLnNuaWYueHl6OjQ0NDMiPmh0dHBzOi8vc25pZi5zbmlmLnh5ejo0NDQzPC9hPiBU aGUgYWxsb2NhdGVkIHdpbGRjYXJkIENOIGlzIGEgc3ViZG9tYWluIG9mIHRoZSBtYXN0ZXIgZG9t YWluIHNuaWYueHl6PGJyPjxicj48bzpwPjwvbzpwPjwvcHJlPg0KPGJsb2NrcXVvdGUgc3R5bGU9 ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICM3MjlGQ0YgMS4wcHQ7cGFkZGluZzowaW4g MGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1i b3R0b206Ni4wcHQiPg0KPHByZT4oMikgWW91IGFzc3VtZSB0aGF0IGEgcGFydHkgdGhhdCB3YW50 cyB0byBjb250YWN0IHRoZSBJb1QgZGV2aWNlIGlzIGFibGUgdG8gcmVhY2ggdGhlIGRldmljZSAo aS5lLiB0aGUgSW9UIGRldmljZSBpcyBub3QgYmVoaW5kIGEgZmlyZXdhbGwgb3IgTkFUKS48bzpw PjwvbzpwPjwvcHJlPg0KPC9ibG9ja3F1b3RlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWJvdHRvbTox Mi4wcHQiPjxicj5Cb3RoIHRoZSBJb1QgZGV2aWNlIGFuZCB0aGUgY2xpZW50IGNvbm5lY3QgdG8g dGhlIFNOSUYgcmVsYXkuIFRoZSB3aG9sZSBwdXJwb3NlIG9mIFNOSUYgaXMgdG8gYmUgYWJsZSB0 byB3b3JrIGZyb20gYmVoaW5kIE5BVCAvIGZpcmV3YWxsIC9ldGMsIGFuZCBpdCdzIGJlZW4gY29u ZmlybWVkIHRvIHdvcmsgaW4gcHJlLXByb2R1Y3Rpb24uIEluIGZhY3QgSSBoYWQgYSBtaW5vciBo aWNrdXAgd2l0aCBGb3J0aWdhdGUgaW4gdGhlIHByb2Nlc3Mgb2YgdGVzdGluZyB3aGljaCBoYXMg YmVlbiByZXNvbHZlZC48YnI+VGhlcmUgYXJlIHNpbXBsaWZpZWQgZGlhZ3JhbXMgb24gPGEgaHJl Zj0iaHR0cHM6Ly9zbmlmLmhvc3QiPmh0dHBzOi8vc25pZi5ob3N0PC9hPiB0byBpbGx1c3RyYXRl IHRoZSBjb25jZXB0Ljxicj48YnI+PG86cD48L286cD48L3ByZT4NCjxibG9ja3F1b3RlIHN0eWxl PSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjNzI5RkNGIDEuMHB0O3BhZGRpbmc6MGlu IDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4t Ym90dG9tOjYuMHB0Ij4NCjxwcmU+KDMpIFNvbWVvbmUgb3BlcmF0aW5nIElvVCBkZXZpY2VzIGhh cyB0byB0cnVzdCB0aGUgcHJveHkgc2luY2UgaXQgaXMgZWFzeSBmb3IgdGhlIHByb3h5IHRvIGFz c29jaWF0ZSBhIGhvc3RuYW1lIHdpdGggYSBwdWJsaWMga2V5IHRoYXQgd2FzIGNyZWF0ZWQgYnkg dGhlIHByb3h5IChyYXRoZXIgdGhhbiB0aGUgZW5kIGRldmljZSkuIFRoaXMgZXNzZW50aWFsbHkg YWxsb3dzIHRoZSBwcm94eSB0byBpbXBlcnNvbmF0aW5nIHRoZSBJb1QgZGV2aWNlLjxicj48YnI+ SXMgbXkgdW5kZXJzdGFuZGluZyBjb3JyZWN0PzxvOnA+PC9vOnA+PC9wcmU+DQo8L2Jsb2NrcXVv dGU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PGJyPlllcywgSSBtZW50aW9u ZWQgdGhpcyB2dWxuZXJhYmlsaXR5IGluIHRoZSBzZWN1cml0eSBzZWN0aW9uLiBUaGUgYW5zd2Vy IGlzPGJyPi0gd2F0Y2ggdGhlIHB1YmxpYyBUTFMgdHJhbnNwYXJlbmN5IGxvZ3MsIGFueSBwYXJ0 eSBjYW4gZG8gaXQuIElmIGFueSBvdmVybGFwcGluZyBDTnMgYXJlIGZvdW5kIC0gdGhlIENBIHBy b3h5IGlzIHBlcm1hbmVudGx5IGNvbXByb21pc2VkLDxicj4tIGRvIG5vdCB1c2UgcmFuZG9tIENB IHByb3hpZXMgb3duZWQgYnkgdW5rbm93biBwYXJ0aWVzLjxicj48YnI+PG86cD48L286cD48L3By ZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjNzI5 RkNGIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFy Z2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4NCjxwcmU+PGJyPkNpYW88YnI+SGFu bmVzPG86cD48L286cD48L3ByZT4NCjwvYmxvY2txdW90ZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1i b3R0b206MTIuMHB0Ij48YnI+QW55IGZ1cnRoZXIgcXVlc3Rpb25zL3N1Z2dlc3Rpb25zIGFyZSB3 ZWxjb21lLjxvOnA+PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7 Ym9yZGVyLWxlZnQ6c29saWQgIzcyOUZDRiAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0 O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTo2LjBwdCI+ DQo8cHJlPjxicj4tLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLTxicj5Gcm9tOiBTZWNkaXNwYXRj aCAmbHQ7PGEgaHJlZj0ibWFpbHRvOnNlY2Rpc3BhdGNoLWJvdW5jZXNAaWV0Zi5vcmciPnNlY2Rp c3BhdGNoLWJvdW5jZXNAaWV0Zi5vcmc8L2E+Jmd0OyBPbiBCZWhhbGYgT2YgSmltIFp1Ym92PGJy PlNlbnQ6IEZyaWRheSwgRmVicnVhcnkgMTEsIDIwMjIgMTI6MjIgQU08YnI+VG86IDxhIGhyZWY9 Im1haWx0bzpzZWNkaXNwYXRjaEBpZXRmLm9yZyI+c2VjZGlzcGF0Y2hAaWV0Zi5vcmc8L2E+OyBN aWNoYWVsIFJpY2hhcmRzb24gJmx0OzxhIGhyZWY9Im1haWx0bzptY3IraWV0ZkBzYW5kZWxtYW4u Y2EiPm1jcitpZXRmQHNhbmRlbG1hbi5jYTwvYT4mZ3Q7Ozxicj5KaW0gWnVib3YgJmx0OzxhIGhy ZWY9Im1haWx0bzppZXRmLWxpc3RAY29tbWVyY2VieXRlLmNvbSI+aWV0Zi1saXN0QGNvbW1lcmNl Ynl0ZS5jb208L2E+Jmd0OzsgPGEgaHJlZj0ibWFpbHRvOmlvdG9wc0BpZXRmLm9yZyI+aW90b3Bz QGlldGYub3JnPC9hPjsgPGEgaHJlZj0ibWFpbHRvOmFuaW1hQGlldGYub3JnIj5hbmltYUBpZXRm Lm9yZzwvYT48YnI+U3ViamVjdDogUmU6IFtTZWNkaXNwYXRjaF0gSS1EOiBEZXBsb3lpbmcgUHVi bGljbHkgVHJ1c3RlZCBUTFMgU2VydmVyczxicj5vbiBJb1QgRGV2aWNlcyBVc2luZyBTTkktYmFz ZWQgRW5kLXRvLUVuZCBUTFMgRm9yd2FyZGluZyAoU05JRik8YnI+PGJyPlRoYW5rcyBmb3IgdGhl IGZlZWRiYWNrIGFnYWluLCBteSBjb21tZW50IGFyZSBiZWxvdy48YnI+SSBzdWJtaXR0ZWQgYSBu ZXcgdmVyc2lvbiBvZiB0aGUgZHJhZnQgdG8gcmVmbGVjdCBzb21lIGNoYW5nZXMuPGJyPjxicj5P biBGZWJydWFyeSAxMCwgMjAyMiAxOjAyOjQ4IFBNIEVTVCwgTWljaGFlbCBSaWNoYXJkc29uICZs dDs8YSBocmVmPSJtYWlsdG86bWNyK2lldGZAc2FuZGVsbWFuLmNhIj5tY3IraWV0ZkBzYW5kZWxt YW4uY2E8L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcHJlPg0KPGJsb2NrcXVvdGUgc3R5bGU9 ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNBRDdGQTggMS4wcHQ7cGFkZGluZzowaW4g MGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1i b3R0b206Ni4wcHQiPg0KPHByZT48YnI+SmltIFp1Ym92ICZsdDs8YSBocmVmPSJtYWlsdG86aWV0 Zi1saXN0QGNvbW1lcmNlYnl0ZS5jb20iPmlldGYtbGlzdEBjb21tZXJjZWJ5dGUuY29tPC9hPiZn dDsgd3JvdGU6PG86cD48L286cD48L3ByZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9u ZTtib3JkZXItbGVmdDpzb2xpZCAjOEFFMjM0IDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4w cHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0 Ij4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjRkNB RjNFIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFy Z2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4NCjxwcmU+IFRoaXMgd2FzIGFsc28g b24gdGhlIElFVEYxMTIgSU9UT1BTIFdHIGFnZW5kYTo8YnI+IHNsaWRlczo8YnI+IDxhIGhyZWY9 Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvbWVldGluZy8xMTIvbWF0ZXJpYWxzL3NsaWRl cy0xMTItaW90b3BzLXN1aWItYnJvd3NpbmctbG9jYWwtd2ViLXJlc291cmNlcy1pbi1hLXNlY3Vy ZS11c2FibGUtbWFubmVyLWlvdC1kZXZpY2UtY29uZmlndXJhdGlvbi1hcy1hLXNwZWNpYWwtY2Fz ZS0wMCI+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9tZWV0aW5nLzExMi9tYXRlcmlhbHMv c2xpZGVzLTExMi1pb3RvcHMtc3VpYi1icm93c2luZy1sb2NhbC13ZWItcmVzb3VyY2VzLWluLWEt c2VjdXJlLXVzYWJsZS1tYW5uZXItaW90LWRldmljZS1jb25maWd1cmF0aW9uLWFzLWEtc3BlY2lh bC1jYXNlLTAwPC9hPjxicj4gdmlkZW86Jm5ic3A7IDxhIGhyZWY9Imh0dHBzOi8veW91dHUuYmUv T0lsSnJVdndEY0k/dD0xNjQ5Ij5odHRwczovL3lvdXR1LmJlL09JbEpyVXZ3RGNJP3Q9MTY0OTwv YT48YnI+PGJyPiBhbmQgd2UgaG9wZSB0byByZXR1cm4gYXQgSUVURjExMy48bzpwPjwvbzpwPjwv cHJlPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0KPHByZT48bzpwPiZuYnNwOzwvbzpw PjwvcHJlPg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlk ICM4QUUyMzQgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0Ljhw dDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQiPg0KPHByZT5SaWdodCwgbG9v a3MgbGlrZSBTVUlCIGlzIHdvcmtpbmcgb24gYSBzaW1pbGFyIHByb2JsZW0uIFRoYW5rcyBmb3I8 YnI+cG9pbnRpbmcgdGhpcyBvdXQuIEluIHBhcnRpY3VsYXIsIHRoZSAmcXVvdDtTb2wgIzYgRGV2 aWNlIG5hbWUgRE5TJnF1b3Q7IHNsaWRlPGJyPmxvb2tzIHF1aXRlIHNpbWlsYXIgdG8gU05JRiBD QSBQcm94eSAoU2VjdGlvbiAzKS4gSG93ZXZlciwgU1VJQiBwdXJzdWVzPGJyPmJpZ2dlciBpbmZy YXN0cnVjdHVyYWwgZ29hbHMgc3VjaCBhcyBjaGFuZ2luZyB0aGUgbG9jYWxob3N0IFRMUzxicj5j b25uZWN0aW9uIHBvbGljaWVzIChJIHRvdGFsbHkgYWdyZWUgYW5kIHJlYWxseSBhcHByZWNpYXRl IHRoZSBlZmZvcnQpLDxicj53aGlsZSBTTklGIGlzIGEgZnVuY3Rpb25pbmcgc29sdXRpb24gd2l0 aGluIHRoZSBleGlzdGluZzxicj5pbmZyYXN0cnVjdHVyZSwgdGVzdGVkIGFuZCBwcm92ZW4gdG8g d29yayBpbiBwcmUtcHJvZHVjdGlvbi48bzpwPjwvbzpwPjwvcHJlPg0KPC9ibG9ja3F1b3RlPg0K PHByZT48YnI+VGhlIHNsaWRlcyBtYXkgYmUgdG9vIHZhZ3VlLiZuYnNwOyBDaGFuZ2luZyB0aGUg VExTIHBvbGljaWVzIGlzIGEgcG9zc2libGU8YnI+c29sdXRpb24sIGJ1dCBwcm9iYWJseSBhbiBp bXByYWN0aWNhbCBvbmUuJm5ic3A7IE5ldmVydGhlbGVzcywgbWFueSBwZW9wbGU8YnI+KG5vdCBz dGVlcGVkIGluIHRoZSBhcnRzLCBhbmQgb2Z0ZW4gZmFpbGxpbmcgaW50byB0aGUgUEhCIGNhdGVn b3J5KTxicj50aGluayB0aGF0IGl0IGlzIGFuIG9idmlvdXMgc29sdXRpb24sIHNvIHdlIGxpc3Qg aXQgaW4gb3JkZXIgdG8gZXhwbGFpbiB3aHkgaXQgd29uJ3Qgd29yay48bzpwPjwvbzpwPjwvcHJl Pg0KPC9ibG9ja3F1b3RlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxicj5Z ZXMsIHN0aWxsIHNhZCB0aGF0IGxvY2FsaG9zdCBzbGlwcGVkIHRocm91Z2ggdGhlIGNyYWNrcyB3 aGVuIHRoZSBvcmlnaW5hbCBzZWN1cml0eSBzdGFuZGFyZHMgd2VyZSB3cml0dGVuLjxvOnA+PC9v OnA+PC9wcmU+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29s aWQgI0FEN0ZBOCAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQu OHB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTo2LjBwdCI+DQo8cHJlPjxvOnA+Jm5i c3A7PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxl ZnQ6c29saWQgIzhBRTIzNCAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1s ZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTo2LjBwdCI+DQo8YmxvY2tx dW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0ZDQUYzRSAxLjBwdDtw YWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDow aW47bWFyZ2luLWJvdHRvbTo2LjBwdCI+DQo8cHJlPiBUaGUgU1VJQiBwcm9ibGVtIGFkZHJlc3Nl cyB0aGUgY2hhbGxlbmdlIG9mIGNvbm5lY3RpbmcgKmxvY2FsbHkqIHRvIGE8YnI+IGRldmljZSw8 YnI+IGFuZCBkb2luZyBpdCBzZWN1cmVseS4mbmJzcDsgRm9yIHRoaXMgdG8gYmUgcG9zc2libGUg d2l0aCBSRkM2MTI1LUROUy1JRDxicj4gc3RhbmRhcmQ8YnI+IGJyb3dzZXIsIHdlIG5lZWQgYSBu YW1lIGZvciB0aGUgZGV2aWNlLCBhbmQgd2UgbmVlZCBhIHdheSB0byB0cmFuc2xhdGU8YnI+IHRo YXQ8YnI+IG5hbWUgaW50byBhIGxvY2FsbHkgcmVhY2hhYmxlIElQIGFkZHJlc3MuPGJyPjxicj4g VGhlIFNOSUYgcHJvcG9zYWwgZG9lcyBub3QgcXVpdGUgc29sdmUgdGhlIGFib3ZlIHByb2JsZW0u PG86cD48L286cD48L3ByZT4NCjwvYmxvY2txdW90ZT4NCjwvYmxvY2txdW90ZT4NCjxwcmU+PG86 cD4mbmJzcDs8L286cD48L3ByZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3Jk ZXItbGVmdDpzb2xpZCAjOEFFMjM0IDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFy Z2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4NCjxw cmU+SW4gZmFjdCwgSSBvcmlnaW5hbGx5IGRlc2lnbmVkIFNOSUYgdG8gc29sdmUgdGhpcyBzcGVj aWZpYyBwcm9ibGVtIC08YnI+bG9jYWwtdG8tbG9jYWwgdHJ1c3RlZCBUTFMgY29ubmVjdGlvbnMu PG86cD48L286cD48L3ByZT4NCjwvYmxvY2txdW90ZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1ib3R0 b206MTIuMHB0Ij48YnI+QWgsIHZlcnkgbmljZSB0byBrbm93LjxvOnA+PC9vOnA+PC9wcmU+DQo8 YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgIzhBRTIzNCAx LjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1y aWdodDowaW47bWFyZ2luLWJvdHRvbTo2LjBwdCI+DQo8cHJlPiogSXNzdWUgYSB3aWxkY2FyZCBj ZXJ0IHRocm91Z2ggU05JRiBDQSBQcm94eTxicj4oZS5nLiBDTj0qLmRvbWFpbi5zbmlmLnh5eiks IHNldCBhIEROUyByZWNvcmQgZm9yPGJyPmxvY2FsaG9zdC5kb21haW4uc25pZi54eXogdG8gcG9p bnQgdG8gbG9jYWxob3N0J3MgSVB2NC92NiwgYW5kIHVzZTxicj48YSBocmVmPSJodHRwczovL2xv Y2FsaG9zdC5kb21haW4uc25pZi54eXoiPmh0dHBzOi8vbG9jYWxob3N0LmRvbWFpbi5zbmlmLnh5 ejwvYT4gKG9yIG90aGVyIGFwcCBwcm90b2NvbCAtIGltYXBzPGJyPmV0YykuIEhvd2V2ZXIsIGxv b2tzIGxpa2Ugc29tZSBjbGllbnRzIHRyZWF0IHRoZSBsb2NhbGhvc3QgSVAgYXM8YnI+aW5oZXJl bnRseSB1bnNlY3VyZSwgYW5kIGlzc3VlIGEgd2FybmluZyBldmVyIGlzIHRoZSBjZXJ0IGlzIHBl cmZlY3RseTxicj52YWxpZC4gVGhlIG9wdGlvbiBpcyBzdGlsbCBwb3NzaWJsZSwgYnV0IHRoZSBh cHBsaWNhYmlsaXR5IG1pZ2h0IGJlPGJyPmxpbWl0ZWQuPG86cD48L286cD48L3ByZT4NCjwvYmxv Y2txdW90ZT4NCjxwcmU+PGJyPlRoZSBwcm9jZXNzIHdlIGRlc2NyaWJlZCBhdDxicj48YnI+PGEg aHJlZj0iaHR0cHM6Ly9zcGVjcy5tYW55c2VjdXJlZC5vcmcvc3VpYi9Tb2x1dGlvbnMvZG5zbmFt ZS1lbWJlZGRlZC1zb2x1dGlvbiI+aHR0cHM6Ly9zcGVjcy5tYW55c2VjdXJlZC5vcmcvc3VpYi9T b2x1dGlvbnMvZG5zbmFtZS1lbWJlZGRlZC1zb2x1dGlvbjwvYT48YnI+PGJyPmFsc28gdXNlcyBh IHdpbGRjYXJkIGNlcnQsIGJ1dCBoYXMgYSBtYWdpYyBhdXRob3JpdGF0aXZlIEROUyBzZXJ2ZXI8 YnI+dGhhdCB0cmFuc2xhdGVzIHRoZSBsZWZ0LW1vc3QgbGFiZWwgaW50byBhbiBBIG9yIEFBQUEg cmVjb3JkLiZuYnNwOyBJdCdzPGJyPnJhdGhlciBhIGN1dGUgaGFjaywgYnV0IGF0IGxlYXN0Ojxi cj4mbmJzcDsgYSkgaXQncyBjYWNoYWJsZTxicj4mbmJzcDsgYikgaXQgY291bGQgZXZlbiBiZSBj YWxjdWxhdGVkIGxvY2FsbHksIGlmIG9uZSBpZ25vcmVzIEROU1NFQy48bzpwPjwvbzpwPjwvcHJl Pg0KPC9ibG9ja3F1b3RlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxicj5Z ZXMsIHVzaW5nIGEgbG9jYWwgbmV0d29yayBJUCBpbnN0ZWFkIG9mIGEgbG9jYWxob3N0IElQIGlz IGFjdHVhbGx5IGEgc21hcnQgaWRlYS48YnI+SG93ZXZlciwgaW5saW5pbmcgdGhlIGxvY2FsIElQ IGluIHRoZSBob3N0bmFtZSwgYXMgU1VJQiBkb2VzLCBtZWFucyB5b3UnbGwgaGF2ZSB0byBjaGFu Z2UgdGhlIGhvc3RuYW1lIGluIHlvdXIgY2xpZW50IGV2ZXJ5IHRpbWUgeW91ciBuZXR3b3JrIGlz IGNoYW5nZWQuPGJyPkkgaGF2ZSBhbiB0aG91Z2h0IGZvciBTTklGIGltcHJvdmVtZW50IC0gU05J RiBjb25uZWN0b3Igc2VuZHMgYSBTTklGIEROUyBjb21tYW5kIHRvIHNldCBhIGR5bmFtaWMgRE5T IEEvQUFBQSBmb3IgYSBjZXJ0YWluIGhvc3RuYW1lIHdpdGhpbiB0aGUgQ04gd2lsZGNhcmQsIGFu ZCB0aGUgQ0EgcHJveHkgdXBkYXRlcyB0aGUgRE5TIGFjY29yZGluZ2x5LiBUaGlzIHdheSB0aGUg aG9zdG5hbWUgY2FuIGJlIHBlcm1hbmVudCwgYnV0IHdpdGggZHluYW1pYyBETlMuPGJyPkFub3Ro ZXIgcHJvYmxlbSAtIG1vc3QgcGxhdGZvcm1zIHdvbid0IGxldCB5b3UgYmluZCB0byBwb3J0ICZs dDsgMTAyNCB1bmxlc3MgeW91J3JlIGEgcm9vdC4gTWlnaHQgYmUgb2sgZm9yIGEgZGV2aWNlIG1h bnVmYWN0dXJlciwgYnV0IGlzIGEgcG90ZW50aWFsIHNob3cgc3RvcHBlciBmb3IgYW55IHVzZXIg c3BhY2UgYXBwLiBSZWxheWVkIFNOSUYgd29ya3MgYXJvdW5kIHRoaXMgcHJvYmxlbSBzaW5jZSB0 aGUgbGlzdGVuaW5nIHBvcnRzIGFyZSBvbiB0aGUgcmVsYXkuPGJyPjxicj48bzpwPjwvbzpwPjwv cHJlPg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNB RDdGQTggMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDtt YXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQiPg0KPHByZT48bzpwPiZuYnNwOzwv bzpwPjwvcHJlPg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNv bGlkICM4QUUyMzQgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0 LjhwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQiPg0KPHByZT4qIEFub3Ro ZXIgb3B0aW9uIGlzIHRvIG92ZXJyaWRlIHRoZSBJUCByb3V0aW5nIHJ1bGVzLiBJdCBpcyB0b3Rh bGx5PGJyPnBvc3NpYmxlIG9uIGlPUyBhbmQgTWFjIHRocm91Z2ggYSB1c2Vyc3BhY2UgVlBOIChv bmx5IG9uZSBWUE4gcGVyPGJyPmRldmljZSB0aG91Z2ggLSBiZXdhcmUgb2YgcG9zc2libGUgY29u ZmxpY3RzKS4gSW4gZmFjdCBJIGhhdmUgYTxicj5mdW5jdGlvbmluZyBzb2x1dGlvbiBmb3IgaXQs IGluIGJldGEgbm93IC08bzpwPjwvbzpwPjwvcHJlPg0KPC9ibG9ja3F1b3RlPg0KPHByZT48YnI+ VGhhdCBkb2Vzbid0IHJlYWxseSBzY2FsZSB0byBtYW55IGRpZmZlcmVudCBkb21haW5zLjxvOnA+ PC9vOnA+PC9wcmU+DQo8L2Jsb2NrcXVvdGU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEy LjBwdCI+PGJyPlRvdGFsbHkgYWdyZWVkLCBJIGp1c3QgbWVudGlvbmVkIHRoYXQgdGhpcyBvcHRp b24gd29ya3MgZm9yICpzb21lKiBjYXNlcywgdHVuL3RhcCBhIGlzIHBvc3NpYmxlIG9wdGlvbiB0 b28gaWYgeW91J3JlIGEgcm9vdC48bzpwPjwvbzpwPjwvcHJlPg0KPGJsb2NrcXVvdGUgc3R5bGU9 ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNBRDdGQTggMS4wcHQ7cGFkZGluZzowaW4g MGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1i b3R0b206Ni4wcHQiPg0KPHByZT48bzpwPiZuYnNwOzwvbzpwPjwvcHJlPg0KPGJsb2NrcXVvdGUg c3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICM4QUUyMzQgMS4wcHQ7cGFkZGlu ZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGluO21h cmdpbi1ib3R0b206Ni4wcHQiPg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRl ci1sZWZ0OnNvbGlkICNGQ0FGM0UgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJn aW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQiPg0KPHBy ZT5TdGlsbCwgaWYgU05JRiBpcyByZXBsYWNpbmcgYSBtYW51ZmFjdHVyZXIgcHJvcHJpZXRhcnkg Y2FsbC1ob21lIHByb3RvY29sLDxicj50aGVyZSBjb3VsZCBiZSBhZHZhbnRhZ2VzIGZyb20gaGF2 aW5nIHdlbGwgcmV2aWV3ZWQgY29kZSBiYXNlcywgYW5kPGJyPnBvdGVudGlhbGx5IGFuIGVjb3N5 c3RlbSBvZiBTTklGIFByb3ZpZGVycyB0aGF0IG1hbnVmYWN0dXJlcnMgY291bGQ8YnI+b3V0c291 cmNlPG86cD48L286cD48L3ByZT4NCjwvYmxvY2txdW90ZT4NCjwvYmxvY2txdW90ZT4NCjxwcmU+ PG86cD4mbmJzcDs8L286cD48L3ByZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTti b3JkZXItbGVmdDpzb2xpZCAjOEFFMjM0IDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7 bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4N CjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjRkNBRjNF IDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2lu LXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4NCjxwcmU+dG8uJm5ic3A7IEF6dXJlL0Ft YXpvbi8uLi4gY291bGQgZWFzaWx5IHJ1biBzdWNoIHNlcnZpY2VzLjxvOnA+PC9vOnA+PC9wcmU+ DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQo8cHJlPjxvOnA+Jm5ic3A7PC9vOnA+PC9w cmU+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgIzhB RTIzNCAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21h cmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTo2LjBwdCI+DQo8cHJlPkkgc2VlIHR3byBvcHRp b25zIC0gYSBTTklGIHNlcnZlciBpbXBsZW1lbnRlZCBieSBlYWNoIHZlbmRvciBmb3IgdGhlaXI8 YnI+b3duIGRldmljZXMvc2VydmljZXMsIG9yIGEgYmlnZ2VyIFNOSUYgU2FhUyBpbXBsZW1lbnRl ZCBieSBhIHRydXN0ZWQ8YnI+cHJvdmlkZXIsIHVzZWQgYnkgdmVuZG9ycy48bzpwPjwvbzpwPjwv cHJlPg0KPC9ibG9ja3F1b3RlPg0KPHByZT48YnI+WWVzLCBidXQgd2hhdCdzIHRoZSBmaW5hbmNp YWwgbW90aXZlIGZvciB0aGlzIHByb3ZpZGVyPzxvOnA+PC9vOnA+PC9wcmU+DQo8L2Jsb2NrcXVv dGU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PGJyPigxKSBGb3IgYSB2ZW5k b3IgdG8gcnVuIHRoZWlyIG93biBTTklGIHNlcnZlcjogbWFya2V0IGFzIGEgdHJ1ZSBhdWRpdGFi bGUgZW5kLXRvLWVuZCBmb3IgSW9UIGRldmljZXMgdGhleSBvZmZlci48YnI+KDIpIEZvciBhIHZl bmRvciB1c2luZyBTTklGIFNhYVM6IG1hcmtldCBhcyAoMSkgYmFja2VkIGJ5PGJyPntUcnVzdGVk QmlnTmFtZX08YnI+KDMpIEZvciBhIHtUcnVzdGVkQmlnTmFtZX0gdG8gcnVuIFNOSUYgU2FhUzog Y29sbGVjdCBmZWVzIGZyb20gKDIpIGZvciB1c2luZyB0aGVpciBzZXJ2aWNlIGFuZCBiaWcgbmFt ZS48YnI+PGJyPkFzIGEgbWF0dGVyIG9mIGZhY3QsIFNOSUYgcmVsYXkgaXMgbGlnaHQgb24gc2Vy dmVyIHJlc291cmNlcy4gSSd2ZSBiZWVuIHJ1bm5pbmcgaXQgb24gYSBtaW5pbXVtIERpZ2l0YWxP Y2VhbiB2aXJ0dWFsIHNlcnZlciBmb3IgbW9udGhzIHdpdGggbW9yZSB0aGFuIGEgZG96ZW4gY29u bmVjdG9ycywmbmJzcDsmbmJzcDsgdGhlIHNlcnZlciBsb2FkIGlzIGEgZnJhY3Rpb24gb2YgYSBw ZXJjZW50LiBPZiBjb3Vyc2UgaWYgc29tZWJvZHkgY29ubmVjdHMgSW9UIGNhbWVyYXMgdGhleSBj YW4gZ2VuZXJhdGUgc29tZSB0cmFmZmljLCBidXQgSW9UIHZlbmRvcnMgYWxyZWFkeSBoYW5kbGUg aXQgdGhyb3VnaCB0aGVpciBwcm9wcmlldGFyeSByZWxheXMuPG86cD48L286cD48L3ByZT4NCjxi bG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQUQ3RkE4IDEu MHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJp Z2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4NCjxwcmU+PG86cD4mbmJzcDs8L286cD48L3By ZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjOEFF MjM0IDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFy Z2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4NCjxibG9ja3F1b3RlIHN0eWxlPSJi b3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjRkNBRjNFIDEuMHB0O3BhZGRpbmc6MGluIDBp biAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90 dG9tOjYuMHB0Ij4NCjxwcmU+U05JRiBzZWVtcyB2ZXJ5IG11Y2ggSVB2NCBOQVQ0NCBmb2N1c2Vk LCBhbmQgaXQgY291bGQgYmVuZWZpdCBmcm9tIHNvbWU8YnI+dW5kZXJzdGFuZGluZyBvZiBJUHY2 IGFuZCBJUHY2LW92ZXItSVB2NCB0ZWNobm9sb2dpZXMsPG86cD48L286cD48L3ByZT4NCjwvYmxv Y2txdW90ZT4NCjwvYmxvY2txdW90ZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0 Ij4gcGFydGljdWxhcmx5PG86cD48L286cD48L3ByZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3Jk ZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjOEFFMjM0IDEuMHB0O3BhZGRpbmc6MGluIDBpbiAw aW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9t OjYuMHB0Ij4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xp ZCAjRkNBRjNFIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44 cHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4NCjxwcmU+VGVyZWRvLjxv OnA+PC9vOnA+PC9wcmU+DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQo8cHJlPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVy LWxlZnQ6c29saWQgIzhBRTIzNCAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdp bi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTo2LjBwdCI+DQo8cHJl PlNOSUYgaXMgbm90IGV4YWN0bHkgZm9jdXNlZCBvbiB2NCwgaXQgd29ya3MgZmluZSB3aXRoIHY2 IGFzIHdlbGwuIEl0J3M8YnI+ZGVzaWduZWQgdG8gd29yayBhcm91bmQgTkFULCB0aGF0J3MgdHJ1 ZS4gSG93ZXZlciwgSVB2NiBuZXR3b3JrcyBtYXk8YnI+cG9zZSBpc3N1ZXMgdG9vIC0gZmlyZXdh bGxzIGV0Yywgd2hpY2ggd2lsbCBwcmV2ZW50IHRvIGRpcmVjdGx5IGFjY2VwdDxicj5pbmNvbWlu ZyBUQ1Agb24gSVB2NiBhZGRyZXNzLjxvOnA+PC9vOnA+PC9wcmU+DQo8L2Jsb2NrcXVvdGU+DQo8 cHJlPjxicj5UZXJlZG8gY291bGQgYmUgdXNlZCBpbnN0ZWFkIGFuZCBhbGxvd3MgdGhlIHJlbGF5 IHRvIGJlIHN0YXRlbGVzcyBhbmQ8YnI+ZGlzdHJpYnV0ZWQsIGFuZCBkZXZvbHZlcyB0byBvcmRp bmFyeSBJUHY2IHdoZW4gaXQgaXMgcHJlc2VudC48bzpwPjwvbzpwPjwvcHJlPg0KPC9ibG9ja3F1 b3RlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxicj5ZZXMsIGJ1dCBUZXJl ZG8gaXMgSVB2NiBzcGVjaWZpYywgdGhlIHdvcmxkIGlzIG5vdCBzdHJpY3RseSBJUHY2IHlldC4g QW5kIGl0J3MgYSBzeXN0ZW0gbGV2ZWwgc29sdXRpb24sIHdoaWxlIFNOSUYgd29ya3MgZmluZSBp biBhIHVzZXIgc3BhY2UuPG86cD48L286cD48L3ByZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3Jk ZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQUQ3RkE4IDEuMHB0O3BhZGRpbmc6MGluIDBpbiAw aW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9t OjYuMHB0Ij4NCjxwcmU+PG86cD4mbmJzcDs8L286cD48L3ByZT4NCjxibG9ja3F1b3RlIHN0eWxl PSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjOEFFMjM0IDEuMHB0O3BhZGRpbmc6MGlu IDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4t Ym90dG9tOjYuMHB0Ij4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVm dDpzb2xpZCAjRkNBRjNFIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxl ZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4NCjxwcmU+SXQg Y2xlYXJseSBoYXMgdG8gc3BlYWsgSFRUUFMgb25seS48bzpwPjwvbzpwPjwvcHJlPg0KPC9ibG9j a3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0KPHByZT48bzpwPiZuYnNwOzwvbzpwPjwvcHJlPg0KPGJs b2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICM4QUUyMzQgMS4w cHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmln aHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQiPg0KPHByZT5JIHNwZWNpZmllZCBIVFRQIGJlY2F1 c2UgUEtDUyMxMCBhbmQgWC41MDkgYXJlIGluaGVyZW50bHkgc2VjdXJlIHRvIGJlPGJyPnNlbnQg b3ZlciBhIHBsYWluIGNvbm5lY3Rpb24uPG86cD48L286cD48L3ByZT4NCjwvYmxvY2txdW90ZT4N CjxwcmU+PGJyPlllcywgYnV0IHRoZXJlIGFyZSBwcml2YWN5IGNvbmNlcm5zIHdoaWNoIHdpbGwg YmVjb21lIGEgcGFpbiwgc288YnI+YmV0dGVyIHRvIGp1c3Qgc2F5IEhUVFBTIGhlcmUuPG86cD48 L286cD48L3ByZT4NCjwvYmxvY2txdW90ZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIu MHB0Ij48YnI+SSByZXNwZWN0ZnVsbHkgZGlzYWdyZWUsIHN0aWxsIHRoaW5rIEhUVFAgaXMgYW4g ZWFzaWVyIGFuc3dlciBmb3IgU05JRi4gVGhlIHByb2JsZW0gd2l0aCBIVFRQUyBpcyAtIFNOSUYg cmVsYXkgKHVzdWFsbHkpIHJvdXRlcyBodHRwcyBwb3J0IHRvIFNOSUYgY29ubmVjdG9ycywgYW5k IGRvZXMgbm90IHNlcnZlIGl0IHdpdGhpbiB0aGUgc2VydmVyLiBIYXZpbmcgYSBkZWRpY2F0ZWQg aG9zdG5hbWUgb3IgYW4gYWx0ZXJuYXRlIHBvcnQgbWVhbnMgdGhhbiBTTklGIGNvbm5lY3RvcnMg bmVlZCBhZGRpdGlvbmFsIGNvbmZpZ3VyYXRpb24gb3B0aW9ucywgb3IgYWRkaXRpb25hbCBkaXNj b3ZlcnkgcHJvdG9jb2xzLiBPbiB0aGUgb3RoZXIgaGFuZCwgSFRUUCBhbGxvd3MgdG8gZGVyaXZl IGFsbCBBUEkgVVJMcyBkZXRlcm1pbmlzdGljYWxseSBmcm9tIHRoZSBDTi48YnI+SSBhZGRyZXNz ZWQgdGhlIHBvc3NpYmxlIHNlY3VyaXR5IGNvbmNlcm5zIGluIG1vcmUgZGV0YWlscyBhbmQgYW1l bmRlZCB0aGUgU2VjdXJpdHkgc2VjdGlvbiBpbiB0aGUgZHJhZnQuPGJyPjxicj48bzpwPjwvbzpw PjwvcHJlPg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlk ICNBRDdGQTggMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0Ljhw dDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQiPg0KPHByZT48bzpwPiZuYnNw OzwvbzpwPjwvcHJlPg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0 OnNvbGlkICM4QUUyMzQgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVm dDo0LjhwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQiPg0KPHByZT5UaGUg YmVzdCBvcHRpb24gaXMgdGhlIG1hbnVmYWN0dXJlciBJIGJlbGlldmUuIFRoZSBtYW51ZmFjdHVy ZXIgY2FuPGJyPmhhdmUgZWl0aGVyIHRoZWlyIG93biBTTklGIHNlcnZlciwgb3Igd29yayB3aXRo IGEgdHJ1c3RlZCBTYWFTLiBUaGlzPGJyPndheSBpdCdzIHplcm8gc2V0dXAgZm9yIHRoZSBlbmQg dXNlciwgYW5kIGRvZXNuJ3QgbmVlZCBhbnk8YnI+aW5mcmFzdHJ1Y3R1cmUgYWRkaXRpb25zLjxv OnA+PC9vOnA+PC9wcmU+DQo8L2Jsb2NrcXVvdGU+DQo8cHJlPjxicj5BZ3JlZWQsIHRoZSBtYW51 ZmFjdHVyZXIgaGFzIHRvIHByb3Zpc2lvbiBhIGNyZWRlbnRpYWwuPG86cD48L286cD48L3ByZT4N CjwvYmxvY2txdW90ZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48YnI+WWVz IEkgcHJvcG9zZWQgc29tZSBvdXRsaW5lcyBpbiB0aGUgc2VjdXJpdHkgc2VjdGlvbiwgbW9yZSBk ZXRhaWxlZCBzcGVjcyBhcmUgcHJvYmFibHkgYmV0dGVyIHRvIGRlc2NyaWJlIGluIGEgc2VwYXJh dGUgZHJhZnQuPG86cD48L286cD48L3ByZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9u ZTtib3JkZXItbGVmdDpzb2xpZCAjQUQ3RkE4IDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4w cHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0 Ij4NCjxwcmU+PG86cD4mbmJzcDs8L286cD48L3ByZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3Jk ZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjOEFFMjM0IDEuMHB0O3BhZGRpbmc6MGluIDBpbiAw aW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9t OjYuMHB0Ij4NCjxwcmU+U3VyZSwgZWxsaXB0aWMgY3VydmVzIGFyZSBiZXR0ZXIsIGJ1dCBzb21l IG9sZCBzY2hvb2wgY2xpZW50cyBtYXkgaGF2ZTxicj5wcm9ibGVtcyB3aXRoIHRoZW0uIEl0IG1h eSBtYWtlIHNlbnNlIHRvIG5vdCBtZW50aW9uIHRoZSByZWNvbW1lbmRlZDxicj5hbGdvcml0aG0g aW4gdGhlIGRyYWZ0LCBhbmQganVzdCB0byBmb2xsb3cgdGhlIENBJ3MgcmVjb21tZW5kYXRpb25z LjxvOnA+PC9vOnA+PC9wcmU+DQo8L2Jsb2NrcXVvdGU+DQo8cHJlPjxicj5FQ0RTQSBhY2NlbGVy YXRpb24gaXMgcHJldHR5IG11Y2ggdWJpcXVpdG91cywgd2hpbGUgUlNBIGlzIG5vdC48bzpwPjwv bzpwPjwvcHJlPg0KPC9ibG9ja3F1b3RlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4w cHQiPjxicj5Ib25lc3RseSBJIGRvbid0IHRoaW5rIGFjY2VsZXJhdGlvbiBpcyBzdWNoIGEgYmln IGRlYWwsIG1vc3Qgb2YgVExTIGpvYiBpcyBzeW1tZXRyaWMgY2lwaGVycyBhbnl3YXkuIEJ1dCBJ IGFncmVlIC0gaXQncyBiZXR0ZXIgdG8gZm9sbG93IHRoZSBDQSBzdWdnZXN0aW9ucyBhbmQgaW5k dXN0cnkgcHJhY3RpY2VzLjxvOnA+PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9y ZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0FEN0ZBOCAxLjBwdDtwYWRkaW5nOjBpbiAwaW4g MGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRv bTo2LjBwdCI+DQo8cHJlPjxvOnA+Jm5ic3A7PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90ZSBzdHls ZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgIzhBRTIzNCAxLjBwdDtwYWRkaW5nOjBp biAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW47bWFyZ2lu LWJvdHRvbTo2LjBwdCI+DQo8cHJlPkkgYmVsaWV2ZSB0aGVyZSdzIG5vIHNlY3VyaXR5IGlzc3Vl LCBhcyBsb25nIGFzIHRoZSBDTiBlbnRyb3B5IGlzIHN1ZmZpY2llbnQuPG86cD48L286cD48L3By ZT4NCjwvYmxvY2txdW90ZT4NCjxwcmU+PG86cD4mbmJzcDs8L286cD48L3ByZT4NCjxibG9ja3F1 b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjOEFFMjM0IDEuMHB0O3Bh ZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBp bjttYXJnaW4tYm90dG9tOjYuMHB0Ij4NCjxwcmU+SSBzcGVjaWZpZWQgdGhlIFgtU05JRi1DTjog YXMgbWFuZGF0b3J5LCBhbmQgdGV4dC9wbGFpbiBib2R5IGFzIGFuPGJyPm9wdGlvbmFsIGR1cGxp Y2F0ZSBvZiBpdC4gVG8gbWFrZSBpdCBjbGVhbmVyLCBJIGNhbiByZW1vdmUgdGhlIGJvZHk8YnI+ ZnJvbSB0aGUgc3BlY3MgYW5kIHNheSB0aGUgcmVzcG9uc2UgYm9keSBpcyB0byBiZSBpZ25vcmVk LjxvOnA+PC9vOnA+PC9wcmU+DQo8L2Jsb2NrcXVvdGU+DQo8cHJlPjxicj5JZiBib3RoIGFyZSBw cmVzZW50LCBhbmQgdGhleSBkb24ndCBtYXRjaCwgdGhlbiB0aGVyZSBpcyBjb25mdXNpb24uPGJy PlNvIGp1c3QgZ28gd2l0aCBvbmUuJm5ic3A7IEkgdGhpbmsgdGhhdCBpdCBzaG91bGQgYWN0dWFs bHkgYmUgYSBKU09OIG9yIENCT1IgcGF5bG9hZCByZXR1cm4uPG86cD48L286cD48L3ByZT4NCjwv YmxvY2txdW90ZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48YnI+QWdyZWVk LCBJIHJlbW92ZWQgdGhlIHJlc3BvbnNlIGJvZHkgZnJvbSB0aGUgZHJhZnQsIGdvaW5nIHdpdGgg dGhlIGhlYWRlci48YnI+PGJyPjxvOnA+PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90ZSBzdHlsZT0i Ym9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0FEN0ZBOCAxLjBwdDtwYWRkaW5nOjBpbiAw aW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJv dHRvbTo2LjBwdCI+DQo8cHJlPjxvOnA+Jm5ic3A7PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90ZSBz dHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgIzhBRTIzNCAxLjBwdDtwYWRkaW5n OjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW47bWFy Z2luLWJvdHRvbTo2LjBwdCI+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVy LWxlZnQ6c29saWQgI0ZDQUYzRSAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdp bi1sZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTo2LjBwdCI+DQo8cHJl PlRoZXkgKmFyZW4ndCogd2hhdCBJQU5BIHdvdWxkIGNhbGwgJnF1b3Q7SVAgcHJvdG9jb2xzJnF1 b3Q7LCB3aGljaCB3b3VsZCBiZSB0aGluZ3M8YnI+bGlrZTxicj5UQ1AsIFVEUCwgU0NUUCwgRVNQ LCAuLi48bzpwPjwvbzpwPjwvcHJlPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0KPHBy ZT48bzpwPiZuYnNwOzwvbzpwPjwvcHJlPg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25l O2JvcmRlci1sZWZ0OnNvbGlkICM4QUUyMzQgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBw dDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQi Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNGQ0FG M0UgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJn aW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQiPg0KPHByZT5IYXMgSUFOQSAqYWxyZWFk eSogcmVnaXN0ZXJlZCBwb3J0IDcxMjMgdGhlbj88bzpwPjwvbzpwPjwvcHJlPg0KPC9ibG9ja3F1 b3RlPg0KPC9ibG9ja3F1b3RlPg0KPHByZT48bzpwPiZuYnNwOzwvbzpwPjwvcHJlPg0KPGJsb2Nr cXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICM4QUUyMzQgMS4wcHQ7 cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tcmlnaHQ6 MGluO21hcmdpbi1ib3R0b206Ni4wcHQiPg0KPHByZT5JdCdzIG5vdCBhbiBJUCBwcm90b2NvbC4g SXQncyBhIHNlcnZpY2UgdGhhdCBsaXN0ZW5zIG9uIFRDUCA3MTIzLCBJPGJyPnJlZ2lzdGVyZWQg d2l0aCBJQU5BIGJhc2VkIG9uIGEgcHJldmlvdXMgdmVyc2lvbiBvZiB0aGUgZG9jdW1lbnQsPGJy PmJlZm9yZSBJIHR1cm5lZCBpdCBpbnRvIGFuIEktRC48bzpwPjwvbzpwPjwvcHJlPg0KPC9ibG9j a3F1b3RlPg0KPHByZT48YnI+SSB0aGluayB5b3Ugc2hvdWxkIGRyb3AgdGhlICZxdW90O3NuaWYt KiZxdW90OyBzZW50ZW5jZSBhcyBpdCBtYWtlcyBubyBzZW5zZS48YnI+WW91IGhhdmUgYWxyZWFk eSBhbGxvY2F0ZWQgVENQIHBvcnQgNzEyMyB0byB0aGUgU05JRiAqc2VydmljZSosIHNvPGJyPnRo YXQncyBncmVhdC48bzpwPjwvbzpwPjwvcHJlPg0KPC9ibG9ja3F1b3RlPg0KPHByZSBzdHlsZT0i bWFyZ2luLWJvdHRvbToxMi4wcHQiPjxicj5JdCdzIGFjdHVhbGx5IGNhbGxlZCAmcXVvdDtTZXJ2 aWNlIE5hbWVzJnF1b3Q7IGluIElBTkEgdGVybWlub2xvZ3ksIHNvcnJ5IGZvciB0aGUgY29uZnVz aW9uLiBJIHVwZGF0ZWQgaW4gdGhlIGRyYWZ0Ljxicj48YnI+PGJyPjxvOnA+PC9vOnA+PC9wcmU+ DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0FEN0ZB OCAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdp bi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTo2LjBwdCI+DQo8cHJlIHN0eWxlPSJtYXJnaW4tYm90 dG9tOjEyLjBwdCI+PGJyPi0tPGJyPl0mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgTmV2ZXIg dGVsbCBtZSB0aGUgb2RkcyEmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsg fCBpcHY2IG1lc2ggbmV0d29ya3MgWzxicj5dJm5ic3A7Jm5ic3A7IE1pY2hhZWwgUmljaGFyZHNv biwgU2FuZGVsbWFuIFNvZnR3YXJlIFdvcmtzJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7IHwmbmJzcDsmbmJzcDsmbmJzcDsgSW9UIGFyY2hpdGVjdCZuYnNwOyZuYnNw OyBbPGJyPl0mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPGEgaHJlZj0ibWFpbHRvOm1jckBzYW5k ZWxtYW4uY2EiPm1jckBzYW5kZWxtYW4uY2E8L2E+Jm5ic3A7IDxhIGhyZWY9Imh0dHA6Ly93d3cu c2FuZGVsbWFuLmNhLyI+aHR0cDovL3d3dy5zYW5kZWxtYW4uY2EvPC9hPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB8Jm5ic3A7Jm5ic3A7IHJ1Ynkgb24gcmFpbHMm bmJzcDsmbmJzcDsmbmJzcDsgWzxvOnA+PC9vOnA+PC9wcmU+DQo8L2Jsb2NrcXVvdGU+DQo8cHJl IHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PGhyIHNpemU9IjIiIHdpZHRoPSIxMDAlIiBhbGln bj0iY2VudGVyIj48L3ByZT4NCjxwcmU+U2VjZGlzcGF0Y2ggbWFpbGluZyBsaXN0PGJyPjxhIGhy ZWY9Im1haWx0bzpTZWNkaXNwYXRjaEBpZXRmLm9yZyI+U2VjZGlzcGF0Y2hAaWV0Zi5vcmc8L2E+ PGJyPjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2VjZGlz cGF0Y2giPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2VjZGlzcGF0Y2g8 L2E+PGJyPklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBh bnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdl ZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0 aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRv IGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNv cHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS48bzpwPjwvbzpwPjwv cHJlPg0KPHByZSBzdHlsZT0idGV4dC1hbGlnbjpjZW50ZXIiPjxociBzaXplPSIyIiB3aWR0aD0i MTAwJSIgYWxpZ249ImNlbnRlciI+PC9wcmU+DQo8cHJlPlNlY2Rpc3BhdGNoIG1haWxpbmcgbGlz dDxicj48YSBocmVmPSJtYWlsdG86U2VjZGlzcGF0Y2hAaWV0Zi5vcmciPlNlY2Rpc3BhdGNoQGll dGYub3JnPC9hPjxicj48YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3Rp bmZvL3NlY2Rpc3BhdGNoIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3Nl Y2Rpc3BhdGNoPC9hPjxvOnA+PC9vOnA+PC9wcmU+DQo8L2Jsb2NrcXVvdGU+DQo8cHJlPjxicj4t LTxicj5Jb3RvcHMgbWFpbGluZyBsaXN0PGJyPjxhIGhyZWY9Im1haWx0bzpJb3RvcHNAaWV0Zi5v cmciPklvdG9wc0BpZXRmLm9yZzwvYT48YnI+PGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby9pb3RvcHMiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlz dGluZm8vaW90b3BzPC9hPjxicj5JTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhp cyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNv IGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBs ZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRo ZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVyc29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLCBv ciBzdG9yZSBvciBjb3B5IHRoZSBpbmZvcm1hdGlvbiBpbiBhbnkgbWVkaXVtLiBUaGFuayB5b3Uu PG86cD48L286cD48L3ByZT4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPC9kaXY+DQpJTVBPUlRB TlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBhbmQgYW55IGF0dGFjaG1lbnRz IGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZpbGVnZWQuIElmIHlvdSBhcmUg bm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3RpZnkgdGhlIHNlbmRlciBpbW1l ZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50cyB0byBhbnkgb3RoZXIgcGVy c29uLCB1c2UgaXQgZm9yIGFueSBwdXJwb3NlLA0KIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9y bWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_DBBPR08MB591548B0B00B68F0A4A013ACFA049DBBPR08MB5915eurp_-- From nobody Fri Mar 4 17:11:15 2022 Return-Path: X-Original-To: iotops@ietfa.amsl.com Delivered-To: iotops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 21CB43A13E0; Fri, 4 Mar 2022 17:10:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.108 X-Spam-Level: X-Spam-Status: No, score=-0.108 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, PDS_OTHER_BAD_TLD=1.998, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001, WEIRD_PORT=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=commercebyte.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l5TIDIREQ663; Fri, 4 Mar 2022 17:10:37 -0800 (PST) Received: from ocean1.commercebyte.com (ocean1.commercebyte.com [104.131.120.15]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 90B803A13D6; Fri, 4 Mar 2022 17:10:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=commercebyte.com; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID:References:In-Reply-To:Subject:To:From:Date; bh=SwmF6A4541GVnfGuvjTaTYrjpHBqD4fcEbHRGmXVbjc=; b=JMflBwunUBgMyozQqNB+tJbAnpLnjN9EXRfH8ZStexNhpKKkJKiZbV1FlMs5fUMxFo7Ei3+1KULOuQ3grCgPfWu9uSZnz9LjhKxQyl2Y+4xzoe1tFjbhxN2zT/RXj1c5H74Z2V3McH4kDRADWDkVW4M5HPVM81HT3sc6KuVyC2I=; Received: from [47.204.174.73] (port=39590 helo=[127.0.0.1]) by ocean1.commercebyte.com with esmtpsa (UNKNOWN:DHE-RSA-AES256-GCM-SHA384:256) (Exim 4.82) (envelope-from ) id 1nQIwM-0006FG-9y; Fri, 04 Mar 2022 20:10:34 -0500 Received: from [206.81.2.95]:7120 (helo=[127.0.0.1]) by [192.168.254.152]:48276 (localhost) with VESmail ESMTP Proxy 1.59 (encrypt=FALSE mode=FALLBACK); Fri, 04 Mar 2022 20:10:33 -0500 Date: Fri, 04 Mar 2022 20:10:26 -0500 From: Jim Zubov To: secdispatch@ietf.org, Hannes Tschofenig , Jim Zubov , "secdispatch@ietf.org" , Michael Richardson , "iotops@ietf.org" , "anima@ietf.org" User-Agent: K-9 Mail for Android In-Reply-To: References: <0075B437-024A-4D84-ABD7-92FE8DAFA59F@commercebyte.com>, <1865.1644434146@localhost> <4026.1644516168@localhost> <685366A1-01F4-4788-B025-0F5F4CE7947F@commercebyte.com> <665685D3-B9AA-4A5E-B5B0-33D313A40716@commercebyte.com> Message-ID: MIME-Version: 1.0 Content-Type: multipart/alternative; boundary=----IZU1C3FBSABSWSQA60NDZM9OFRL82B Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - ocean1.commercebyte.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - commercebyte.com X-Get-Message-Sender-Via: ocean1.commercebyte.com: authenticated_id: jz@nixob.com Archived-At: Subject: Re: [Iotops] [Secdispatch] I-D: Deploying Publicly Trusted TLS Servers on IoT Devices Using SNI-based End-to-End TLS Forwarding (SNIF) X-BeenThere: iotops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IOT Operations List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Mar 2022 01:10:42 -0000 ------IZU1C3FBSABSWSQA60NDZM9OFRL82B Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi Hannes, Good overview of strategic approaches, let me add another dimension - - Can the relay access any information communicated between the device and= the user, - If the answer is _no_ - can the user or some independent party verify th= e validity of such claim=2E In case of SNIF, the setup consists of - an IoT device capable of serving HTTPS (user friendly pages or an API), = running a SNIF connector, - a web based device manager on the user side that works with the device's= HTTPS content (and expects a trusted cert), - a SNIF relay / CA proxy server in the cloud, - potentially, an independent observer that watches TLS transparency logs = and raises an alert if any duplicate certs are found for the CNs issued by = the CA proxy=2E This way, the IoT device owns the private key, and there's a proof through= the public trust PKI that the device manager is communicating to the authe= ntic device=2E In case if the public CA trust is not enough, the device manager can exami= ne the public key on the cert on every connection (should be possible to do= with the Forge project in regular js), and raise an alert if the key is ch= anged (just like ssh does)=2E SNIF is the answer for a smart home, a security cam, or any other private = IoT you don't want anybody to sniff on (pun intended)=2E If you're deploying a device accessable to a large group, like a public we= bcam, SNIF might be not a good option, it might be better to have an interm= idiate proxy that handles all traffic without choking the device=2E But, en= d-to-end privacy is a lesser concern in such case=2E Regarding the conversion of any existing devices to SNIF - - serve the content on the device over HTTPS or local plain HTTP, whether = it's a web page, a video stream or an API, listening on a local port (say 4= 43) - run a SNIF connector process to maintain the cert and to relay to incomi= ng SNIF connections to the local port=2E On March 3, 2022 6:18:48 AM EST, Hannes Tschofenig wrote: >Hi Jim, > >Thanks for your response=2E > >> There are some IoT management solutions on the market, both open source= and proprietary, but as far as I can tell none of them fully follows the e= nd to end paradigm=2E >[Hannes] It depends what you call end-to-end=2E As an IoT service provide= r you have to make a few decisions about how to manage and deploy IoT devic= es=2E Broadly speaking, you have three options: > > * You seek out to a third party to manage your devices=2E Needless t= o say that you should pick a company that you feel comfortable with=2E They= will manage your devices and they will also offer ways to store the data o= btained from the devices, to manage and distribute firmware updates, and ev= en to perform analysis of the data (machine learning)=2E Then, you can typi= cally connect backend application servers to the device management offering= =2E Of course, the details vary a lot with what you are actually doing as a= n IoT service provider with the IoT devices and the data=2E > * You get the software from a provider and you manage the devices on = your own=2E This is often the case when you want to deploy an on-premise so= lution=2E Here you have to trust the provider of the device management soft= ware that the code is correct and does what it is supposed to do=2E In some= cases you not only get the binary but also the source code=2E In theory, y= ou could check what code is actually running (although I doubt that anyone = really checks)=2E > * Finally, you build your own device management solution (often using= available open source software)=2E >In practice, I have also seen a combination of the variants above=2E For = example, I have seen a case where the devices were managed by a third party= but the video stream of the surveillance camera was sent directly to a ded= icated server managed by the IoT service provider=2E (There were also vario= us techniques to prevent modifications to the device to have the video stre= am re-directed or the credentials changes but I think you get the idea=2E) = The communication model there was a bit different than yours because the cl= ient initiated the communication with the video server=2E Hence, there was = no issue with running a TLS server on the device=2E >On top of this, it is also common to provide special security protection = for selected data=2E For example, firmware updates are signed by party diff= erent from the company offering the device management solution=2E They are,= for example, singed by the company developing the code=2E They are still d= istributed by the device management infrastructure and hence you have to re= ly on the distribution of them but there is no chance for the device manage= ment provider to inject malicious code into the device=2E >From what I am seeing, the first deployment model is very popular=2E The = approach of =E2=80=9Cdesigning your own solution=E2=80=9D was popular in th= e early days because companies were given the impression that this IoT stuf= f is so simple that you can put a solution together in a weekend=2E It turn= ed out that this is not quite the case (if you have a larger number of devi= ces)=2E Many IoT service providers also need help designing the entire solu= tion, also the solution on the IoT device itself=2E >How does your solution fit into this picture? >> I believe it's worth having a universal cross-vendor solution that hand= les SNIF device onboarding, maintains the credentials in a local secure sto= rage, and consolidates https based management interface hosted by individua= l devices through SNIF=2E >[Hannes] There is definitely a lot of excitement when it comes to the dev= elopment of device onboarding solutions=2E I have to trust you that there i= s further interest for solutions because I haven=E2=80=99t checked=2E > >> The requirements for such solution is a topic for a separate draft, alt= hough I already outlined the possible secure onboarding process in the secu= rity section=2E >I will re-read your security consideration section again=2E > >Note that I am certainly not against your solution=2E If your approach ha= s success, kudos to you=2E > >Ciao >Hannes > >On February 24, 2022 5:37:46 AM EST, Hannes Tschofenig > wrote: > >Hi Jim, > >Thanks for the quick response=2E The link to your website is helpful=2E I= now understood that you would also relay the communication through the pro= xy, which deals with the IoT device being behind a NAT and/or firewall if t= he IoT device keeps the connection alive=2E > >I wonder whether you have considered to re-use an existing device managem= ent solutions since those is widely deployed today? > >Ciao >Hannes > >-----Original Message----- >From: Iotops = > On Behalf Of Jim Zubov >Sent: Wednesday, February 23, 2022 4:17 PM >To: secdispatch@ietf=2Eorg; Hannes Tschofe= nig >; = Jim Zubov >; secdispatch@ietf=2Eorg; Michael Richards= on >; iotops@ietf= =2Eorg; anima@ietf=2Eorg >Subject: Re: [Iotops] [Secdispatch] I-D: Deploying Publicly Trusted TLS S= ervers on IoT Devices Using SNI-based End-to-End TLS Forwarding (SNIF) > >Thank You for your feedback Hannes, I addressed the comments below - > >On February 23, 2022 5:36:15 AM EST, Hannes Tschofenig > wrote: > >Hi all, > >Thanks for this contribution, Jim=2E > >Reading through the document I agree that the SUIB topic discussed in the= IOTOPS WG appears relevant=2E I also wonder whether the work in the DANISH= group (see https://datatracker=2Eietf=2Eorg/wg/danish/about/) is relevant= =2E > >Agreed about SUIB, not quite sure about DANISH=2E DANISH is about certifi= cate based authentication and PKI extensions, while SNIF is about end-to-en= d relayed trusted TLS that relies on the standard PKI=2E > >Regarding the use in IoT I have a question for my understanding=2E > >In a nutshell, you introduce a proxy that allocates a hostname and reques= ts a creation of a certificate on behalf of the IoT device=2E > >Correct, plus an e2e TLS relay=2E > >To get this to work you rely on three assumptions: >(1) There has to be a communication infrastructure that associates the "a= nonymous" hostname with a specific device and conveys these identifiers to = the relevant parties=2E > >Each device is configured with an initUrl pointing to a specific CA proxy= that allocates a random hostname (a CN to be more accurate), normally a su= bdomain of a master domain that has a wildcard DNS record pointing to the C= A proxy=2E >Example - the initUrl for public experimental use - https://snif=2Esnif= =2Exyz:4443 The allocated wildcard CN is a subdomain of the master domain s= nif=2Exyz > > >(2) You assume that a party that wants to contact the IoT device is able = to reach the device (i=2Ee=2E the IoT device is not behind a firewall or NA= T)=2E > >Both the IoT device and the client connect to the SNIF relay=2E The whole= purpose of SNIF is to be able to work from behind NAT / firewall /etc, and= it's been confirmed to work in pre-production=2E In fact I had a minor hic= kup with Fortigate in the process of testing which has been resolved=2E >There are simplified diagrams on https://snif=2Ehost to illustrate the co= ncept=2E > > >(3) Someone operating IoT devices has to trust the proxy since it is easy= for the proxy to associate a hostname with a public key that was created b= y the proxy (rather than the end device)=2E This essentially allows the pro= xy to impersonating the IoT device=2E > >Is my understanding correct? > >Yes, I mentioned this vulnerability in the security section=2E The answer= is >- watch the public TLS transparency logs, any party can do it=2E If any o= verlapping CNs are found - the CA proxy is permanently compromised, >- do not use random CA proxies owned by unknown parties=2E > > >Ciao >Hannes > >Any further questions/suggestions are welcome=2E > >-----Original Message----- >From: Secdispatch > On Behalf Of Jim Zubov >Sent: Friday, February 11, 2022 12:22 AM >To: secdispatch@ietf=2Eorg; Michael Richar= dson >; >Jim Zubov >; iotops@ietf=2Eorg; anima@ietf=2Eorg >Subject: Re: [Secdispatch] I-D: Deploying Publicly Trusted TLS Servers >on IoT Devices Using SNI-based End-to-End TLS Forwarding (SNIF) > >Thanks for the feedback again, my comment are below=2E >I submitted a new version of the draft to reflect some changes=2E > >On February 10, 2022 1:02:48 PM EST, Michael Richardson > wrote: > >Jim Zubov > wrote: > > This was also on the IETF112 IOTOPS WG agenda: > slides: > https://datatracker=2Eietf=2Eorg/meeting/112/materials/slides-112-iotops= -suib-browsing-local-web-resources-in-a-secure-usable-manner-iot-device-con= figuration-as-a-special-case-00 > video: https://youtu=2Ebe/OIlJrUvwDcI?t=3D1649 > > and we hope to return at IETF113=2E > > > >Right, looks like SUIB is working on a similar problem=2E Thanks for >pointing this out=2E In particular, the "Sol #6 Device name DNS" slide >looks quite similar to SNIF CA Proxy (Section 3)=2E However, SUIB pursues >bigger infrastructural goals such as changing the localhost TLS >connection policies (I totally agree and really appreciate the effort), >while SNIF is a functioning solution within the existing >infrastructure, tested and proven to work in pre-production=2E > >The slides may be too vague=2E Changing the TLS policies is a possible >solution, but probably an impractical one=2E Nevertheless, many people >(not steeped in the arts, and often failling into the PHB category) >think that it is an obvious solution, so we list it in order to explain w= hy it won't work=2E > >Yes, still sad that localhost slipped through the cracks when the origina= l security standards were written=2E > > > > The SUIB problem addresses the challenge of connecting *locally* to a > device, > and doing it securely=2E For this to be possible with RFC6125-DNS-ID > standard > browser, we need a name for the device, and we need a way to translate > that > name into a locally reachable IP address=2E > > The SNIF proposal does not quite solve the above problem=2E > > > >In fact, I originally designed SNIF to solve this specific problem - >local-to-local trusted TLS connections=2E > >Ah, very nice to know=2E > >* Issue a wildcard cert through SNIF CA Proxy >(e=2Eg=2E CN=3D*=2Edomain=2Esnif=2Exyz), set a DNS record for >localhost=2Edomain=2Esnif=2Exyz to point to localhost's IPv4/v6, and use >https://localhost=2Edomain=2Esnif=2Exyz (or other app protocol - imaps >etc)=2E However, looks like some clients treat the localhost IP as >inherently unsecure, and issue a warning ever is the cert is perfectly >valid=2E The option is still possible, but the applicability might be >limited=2E > >The process we described at > >https://specs=2Emanysecured=2Eorg/suib/Solutions/dnsname-embedded-solutio= n > >also uses a wildcard cert, but has a magic authoritative DNS server >that translates the left-most label into an A or AAAA record=2E It's >rather a cute hack, but at least: > a) it's cachable > b) it could even be calculated locally, if one ignores DNSSEC=2E > >Yes, using a local network IP instead of a localhost IP is actually a sma= rt idea=2E >However, inlining the local IP in the hostname, as SUIB does, means you'l= l have to change the hostname in your client every time your network is cha= nged=2E >I have an thought for SNIF improvement - SNIF connector sends a SNIF DNS = command to set a dynamic DNS A/AAAA for a certain hostname within the CN wi= ldcard, and the CA proxy updates the DNS accordingly=2E This way the hostna= me can be permanent, but with dynamic DNS=2E >Another problem - most platforms won't let you bind to port < 1024 unless= you're a root=2E Might be ok for a device manufacturer, but is a potential= show stopper for any user space app=2E Relayed SNIF works around this prob= lem since the listening ports are on the relay=2E > > > > >* Another option is to override the IP routing rules=2E It is totally >possible on iOS and Mac through a userspace VPN (only one VPN per >device though - beware of possible conflicts)=2E In fact I have a >functioning solution for it, in beta now - > >That doesn't really scale to many different domains=2E > >Totally agreed, I just mentioned that this option works for *some* cases,= tun/tap a is possible option too if you're a root=2E > > > >Still, if SNIF is replacing a manufacturer proprietary call-home protocol= , >there could be advantages from having well reviewed code bases, and >potentially an ecosystem of SNIF Providers that manufacturers could >outsource > > > >to=2E Azure/Amazon/=2E=2E=2E could easily run such services=2E > > > >I see two options - a SNIF server implemented by each vendor for their >own devices/services, or a bigger SNIF SaaS implemented by a trusted >provider, used by vendors=2E > >Yes, but what's the financial motive for this provider? > >(1) For a vendor to run their own SNIF server: market as a true auditable= end-to-end for IoT devices they offer=2E >(2) For a vendor using SNIF SaaS: market as (1) backed by >{TrustedBigName} >(3) For a {TrustedBigName} to run SNIF SaaS: collect fees from (2) for us= ing their service and big name=2E > >As a matter of fact, SNIF relay is light on server resources=2E I've been= running it on a minimum DigitalOcean virtual server for months with more t= han a dozen connectors, the server load is a fraction of a percent=2E Of = course if somebody connects IoT cameras they can generate some traffic, but= IoT vendors already handle it through their proprietary relays=2E > > > >SNIF seems very much IPv4 NAT44 focused, and it could benefit from some >understanding of IPv6 and IPv6-over-IPv4 technologies, > > particularly > >Teredo=2E > > > >SNIF is not exactly focused on v4, it works fine with v6 as well=2E It's >designed to work around NAT, that's true=2E However, IPv6 networks may >pose issues too - firewalls etc, which will prevent to directly accept >incoming TCP on IPv6 address=2E > >Teredo could be used instead and allows the relay to be stateless and >distributed, and devolves to ordinary IPv6 when it is present=2E > >Yes, but Teredo is IPv6 specific, the world is not strictly IPv6 yet=2E A= nd it's a system level solution, while SNIF works fine in a user space=2E > > > >It clearly has to speak HTTPS only=2E > > > >I specified HTTP because PKCS#10 and X=2E509 are inherently secure to be >sent over a plain connection=2E > >Yes, but there are privacy concerns which will become a pain, so >better to just say HTTPS here=2E > >I respectfully disagree, still think HTTP is an easier answer for SNIF=2E= The problem with HTTPS is - SNIF relay (usually) routes https port to SNIF= connectors, and does not serve it within the server=2E Having a dedicated = hostname or an alternate port means than SNIF connectors need additional co= nfiguration options, or additional discovery protocols=2E On the other hand= , HTTP allows to derive all API URLs deterministically from the CN=2E >I addressed the possible security concerns in more details and amended th= e Security section in the draft=2E > > > > >The best option is the manufacturer I believe=2E The manufacturer can >have either their own SNIF server, or work with a trusted SaaS=2E This >way it's zero setup for the end user, and doesn't need any >infrastructure additions=2E > >Agreed, the manufacturer has to provision a credential=2E > >Yes I proposed some outlines in the security section, more detailed specs= are probably better to describe in a separate draft=2E > > > >Sure, elliptic curves are better, but some old school clients may have >problems with them=2E It may make sense to not mention the recommended >algorithm in the draft, and just to follow the CA's recommendations=2E > >ECDSA acceleration is pretty much ubiquitous, while RSA is not=2E > >Honestly I don't think acceleration is such a big deal, most of TLS job i= s symmetric ciphers anyway=2E But I agree - it's better to follow the CA su= ggestions and industry practices=2E > > > >I believe there's no security issue, as long as the CN entropy is suffici= ent=2E > > > >I specified the X-SNIF-CN: as mandatory, and text/plain body as an >optional duplicate of it=2E To make it cleaner, I can remove the body >from the specs and say the response body is to be ignored=2E > >If both are present, and they don't match, then there is confusion=2E >So just go with one=2E I think that it should actually be a JSON or CBOR= payload return=2E > >Agreed, I removed the response body from the draft, going with the header= =2E > > > > >They *aren't* what IANA would call "IP protocols", which would be things >like >TCP, UDP, SCTP, ESP, =2E=2E=2E > > > >Has IANA *already* registered port 7123 then? > > > >It's not an IP protocol=2E It's a service that listens on TCP 7123, I >registered with IANA based on a previous version of the document, >before I turned it into an I-D=2E > >I think you should drop the "snif-*" sentence as it makes no sense=2E >You have already allocated TCP port 7123 to the SNIF *service*, so >that's great=2E > >It's actually called "Service Names" in IANA terminology, sorry for the c= onfusion=2E I updated in the draft=2E > > > >-- >] Never tell me the odds! | ipv6 mesh netwo= rks [ >] Michael Richardson, Sandelman Software Works | IoT architec= t [ >] mcr@sandelman=2Eca http://www=2Esandelm= an=2Eca/ | ruby on rails [ > >________________________________ > >Secdispatch mailing list >Secdispatch@ietf=2Eorg >https://www=2Eietf=2Eorg/mailman/listinfo/secdispatch >IMPORTANT NOTICE: The contents of this email and any attachments are conf= idential and may also be privileged=2E If you are not the intended recipien= t, please notify the sender immediately and do not disclose the contents to= any other person, use it for any purpose, or store or copy the information= in any medium=2E Thank you=2E > >________________________________ > >Secdispatch mailing list >Secdispatch@ietf=2Eorg >https://www=2Eietf=2Eorg/mailman/listinfo/secdispatch > >-- >Iotops mailing list >Iotops@ietf=2Eorg >https://www=2Eietf=2Eorg/mailman/listinfo/iotops >IMPORTANT NOTICE: The contents of this email and any attachments are conf= idential and may also be privileged=2E If you are not the intended recipien= t, please notify the sender immediately and do not disclose the contents to= any other person, use it for any purpose, or store or copy the information= in any medium=2E Thank you=2E > >IMPORTANT NOTICE: The contents of this email and any attachments are conf= idential and may also be privileged=2E If you are not the intended recipien= t, please notify the sender immediately and do not disclose the contents to= any other person, use it for any purpose, or store or copy the information= in any medium=2E Thank you=2E ------IZU1C3FBSABSWSQA60NDZM9OFRL82B Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi Hannes,

Good overview of strategic approaches, let me ad= d another dimension -
- Can the relay access any information communicate= d between the device and the user,
- If the answer is _no_ - can the use= r or some independent party verify the validity of such claim=2E

In = case of SNIF, the setup consists of
- an IoT device capable of serving H= TTPS (user friendly pages or an API), running a SNIF connector,
- a web = based device manager on the user side that works with the device's HTTPS co= ntent (and expects a trusted cert),
- a SNIF relay / CA proxy server in = the cloud,
- potentially, an independent observer that watches TLS trans= parency logs and raises an alert if any duplicate certs are found for the C= Ns issued by the CA proxy=2E

This way, the IoT device owns the priva= te key, and there's a proof through the public trust PKI that the device ma= nager is communicating to the authentic device=2E
In case if the public = CA trust is not enough, the device manager can examine the public key on th= e cert on every connection (should be possible to do with the Forge project= in regular js), and raise an alert if the key is changed (just like ssh do= es)=2E

SNIF is the answer for a smart home, a security cam, or any o= ther private IoT you don't want anybody to sniff on (pun intended)=2E
If you're deploying a device accessable to a large group, like a public w= ebcam, SNIF might be not a good option, it might be better to have an inter= midiate proxy that handles all traffic without choking the device=2E But, e= nd-to-end privacy is a lesser concern in such case=2E

Regarding the = conversion of any existing devices to SNIF -
- serve the content on the = device over HTTPS or local plain HTTP, whether it's a web page, a video str= eam or an API, listening on a local port (say 443)
- run a SNIF connecto= r process to maintain the cert and to relay to incoming SNIF connections to= the local port=2E

On March 3, 2022 6:18:= 48 AM EST, Hannes Tschofenig <Hannes=2ETschofenig@arm=2Ecom> wrote:

Hi Jim,

 

Thanks for your response=2E

 

> There are som= e IoT management solutions on the market, both open source and proprietary,= but as far as I can tell none of them fully follows the end to end paradig= m=2E

[Hannes] It depend= s what you call end-to-end=2E As an IoT service provider you have to make a= few decisions about how to manage and deploy IoT devices=2E Broadly speaki= ng, you have three options:

  • You  seek out to a third party to manage your devices=2E Needless to = say that you should pick a company that you feel comfortable with=2E They w= ill manage your devices and they will also offer ways to store the data obt= ained from the devices, to manage and distribute firmware updates, and even to perform analysis of the data (machine learn= ing)=2E Then, you can typically connect backend application servers to the = device management offering=2E Of course, the details vary a lot with what y= ou are actually doing as an IoT service provider with the IoT devices and the data=2E
  • You get the software from a provider and you manage the devices on your ow= n=2E This is often the case when you want to deploy an on-premise solution= =2E Here you have to trust the provider of the device management software t= hat the code is correct and does what it is supposed to do=2E In some cases you not only get the binary but als= o the source code=2E In theory, you could check what code is actually runni= ng (although I doubt that anyone really checks)=2E
  • Finally, you build your own device management solution (often using availa= ble open source software)=2E

In practice, I hav= e also seen a combination of the variants above=2E For example, I have seen= a case where the devices were managed by a third party but the video strea= m of the surveillance camera was sent directly to a dedicated server managed by the IoT service provider=2E (There were = also various techniques to prevent modifications to the device to have the = video stream re-directed or the credentials changes but I think you get the= idea=2E) The communication model there was a bit different than yours because the client initiated the communica= tion with the video server=2E Hence, there was no issue with running a TLS = server on the device=2E

On top of this, it= is also common to provide special security protection for selected data=2E= For example, firmware updates are signed by party different from the compa= ny offering the device management solution=2E They are, for example, singed by the company developing the code=2E They = are still distributed by the device management infrastructure and hence you= have to rely on the distribution of them but there is no chance for the de= vice management provider to inject malicious code into the device=2E

From what I am see= ing, the first deployment model is very popular=2E The approach of =E2=80= =9Cdesigning your own solution=E2=80=9D was popular in the early days becau= se companies were given the impression that this IoT stuff is so simple that you can put a solution together in a weekend=2E It turn= ed out that this is not quite the case (if you have a larger number of devi= ces)=2E Many IoT service providers also need help designing the entire solu= tion, also the solution on the IoT device itself=2E

How does your solu= tion fit into this picture?

> I believe it'= s worth having a universal cross-vendor solution that handles SNIF device o= nboarding, maintains the credentials in a local secure storage, and consoli= dates https based management interface hosted by individual devices through SNIF=2E

[Hannes] There is = definitely a lot of excitement when it comes to the development of device o= nboarding solutions=2E I have to trust you that there is further interest f= or solutions because I haven=E2=80=99t checked=2E


> The requirements for such solution is a topic for a separate draft, a= lthough I already outlined the possible secure onboarding process in the se= curity section=2E

I will re-read you= r security consideration section again=2E

 <= /p>

Note that I am cer= tainly not against your solution=2E If your approach has success, kudos to = you=2E

 <= /p>

Ciao

Hannes<= /p>

 <= /p>

On February 24, 2022 5:37:46 AM EST, Hannes Tschofe= nig <Hannes=2ETschofeni= g@arm=2Ecom> wrote:

Hi Jim,

Thanks for the quick response=2E The link to your webs=
ite is helpful=2E I now understood that you would also relay the communicat=
ion through the proxy, which deals with the IoT device being behind a NAT a=
nd/or firewall if the IoT device keeps the connection alive=2E

I won=
der whether you have considered to re-use an existing device management sol=
utions since those is widely deployed today?

Ciao
Hannes

-=
----Original Message-----
From: Iotops <iotops-bounces@ietf=2Eorg> On Behalf Of Jim ZubovSent: Wednesday, February 23, 2022 4:17 PM
To: secdispatch@ietf=2Eorg; Hannes Tschofenig <Hannes=2ETschofenig@arm=2Ecom=
>; Jim Zubov <ietf-li=
st@commercebyte=2Ecom>; se=
cdispatch@ietf=2Eorg; Michael Richardson <mcr+ietf@sandelman=2Eca>; iotops@ietf=2Eorg; anim=
a@ietf=2Eorg
Subject: Re: [Iotops] [Secdispatch] I-D: Deploying Publ=
icly Trusted TLS Servers on IoT Devices Using SNI-based End-to-End TLS Forw=
arding (SNIF)

Thank You for your feedback Hannes, I addressed the co=
mments below -

On February 23, 2022 5:36:15 AM EST, Hannes Tschofeni=
g <Hannes=2ETschofenig@=
arm=2Ecom> wrote:
Hi all,

Thanks for this contribution, Jim=2E

Reading th=
rough the document I agree that the SUIB topic discussed in the IOTOPS WG a=
ppears relevant=2E I also wonder whether the work in the DANISH group (see =
https://data=
tracker=2Eietf=2Eorg/wg/danish/about/) is relevant=2E

Agreed about SUIB, not quite sur=
e about DANISH=2E DANISH is about certificate based authentication and PKI =
extensions, while SNIF is about end-to-end relayed trusted TLS that relies =
on the standard PKI=2E

Regarding the use in IoT I have a question for my understanding=
=2E

In a nutshell, you introduce a proxy that allocates a hostname a=
nd requests a creation of a certificate on behalf of the IoT device=2E=


Correct, plus an e2e TLS relay=2E

To get this to work you rely on three assumptions:
(1) There h=
as to be a communication infrastructure that associates the "anonymous" hos=
tname with a specific device and conveys these identifiers to the relevant =
parties=2E

Each device is configured with a=
n initUrl pointing to a specific CA proxy that allocates a random hostname =
(a CN to be more accurate), normally a subdomain of a master domain that ha=
s a wildcard DNS record pointing to the CA proxy=2E
Example - the initUr=
l for public experimental use - =
https://snif=2Esnif=2Exyz:4443 The allocated wildcard CN is a subdomain=
 of the master domain snif=2Exyz

(2) You assume that a party that wants to contact the IoT device is a=
ble to reach the device (i=2Ee=2E the IoT device is not behind a firewall o=
r NAT)=2E

Both the IoT device and the clie=
nt connect to the SNIF relay=2E The whole purpose of SNIF is to be able to =
work from behind NAT / firewall /etc, and it's been confirmed to work in pr=
e-production=2E In fact I had a minor hickup with Fortigate in the process =
of testing which has been resolved=2E
There are simplified diagrams on <=
a href=3D"https://snif=2Ehost">https://snif=2Ehost to illustrate the co=
ncept=2E

(3) Someone operating IoT devices has to trust the proxy since it is =
easy for the proxy to associate a hostname with a public key that was creat=
ed by the proxy (rather than the end device)=2E This essentially allows the=
 proxy to impersonating the IoT device=2E

Is my understanding correc=
t?

Yes, I mentioned this vulnerabil=
ity in the security section=2E The answer is
- watch the public TLS tran=
sparency logs, any party can do it=2E If any overlapping CNs are found - th=
e CA proxy is permanently compromised,
- do not use random CA proxies ow=
ned by unknown parties=2E


Ciao
Hannes

Any further questions/suggestion=
s are welcome=2E

-----Original Message-----
From: Secdispatch <secdispatch-bounces@ietf=2Eorg>=
 On Behalf Of Jim Zubov
Sent: Friday, February 11, 2022 12:22 AM
To: =
secdispatch@ietf=2Eorg; Micha=
el Richardson <mcr+ietf@sande=
lman=2Eca>;
Jim Zubov <ietf-list@commercebyte=2Ecom>; iotops@ietf=2Eorg; anima@i=
etf=2Eorg
Subject: Re: [Secdispatch] I-D: Deploying Publicly Trusted=
 TLS Servers
on IoT Devices Using SNI-based End-to-End TLS Forwarding (S=
NIF)

Thanks for the feedback again, my comment are below=2E
I sub=
mitted a new version of the draft to reflect some changes=2E

On Febr=
uary 10, 2022 1:02:48 PM EST, Michael Richardson <mcr+ietf@sandelman=2Eca> wrote:




Jim Zubov <iet=
f-list@commercebyte=2Ecom> wrote:






 This was also on the IETF112 IOTOPS WG agenda:
 slides:
 https://datatracker=2Eietf=2Eorg/meetin=
g/112/materials/slides-112-iotops-suib-browsing-local-web-resources-in-a-se=
cure-usable-manner-iot-device-configuration-as-a-special-case-00
 vi=
deo:  https://yout=
u=2Ebe/OIlJrUvwDcI?t=3D1649

 and we hope to return at IETF113=2E=







 




Right, looks like SUIB is working on a similar problem=2E Thanks for<=
br>pointing this out=2E In particular, the "Sol #6 Device name DNS" slidelooks quite similar to SNIF CA Proxy (Section 3)=2E However, SUIB pursues=

bigger infrastructural goals such as changing the localhost TLS
conn=
ection policies (I totally agree and really appreciate the effort),
whil=
e SNIF is a functioning solution within the existing
infrastructure, tes=
ted and proven to work in pre-production=2E





The slides may be too vague=2E  Changing the TLS policies is=
 a possible
solution, but probably an impractical one=2E  Neverthel=
ess, many people
(not steeped in the arts, and often failling into the P=
HB category)
think that it is an obvious solution, so we list it in orde=
r to explain why it won't work=2E





Yes, still sad that localhost sl=
ipped through the cracks when the original security standards were written=
=2E




 






 The SUIB problem addresses the challenge of connecting *locally* to =
a
 device,
 and doing it securely=2E  For this to be possible wi=
th RFC6125-DNS-ID
 standard
 browser, we need a name for the device, =
and we need a way to translate
 that
 name into a locally reachable I=
P address=2E

 The SNIF proposal does not quite solve the above probl=
em=2E






 




In fact, I originally designed SNIF to solve this specific problem -<=
br>local-to-local trusted TLS connections=2E





Ah, very nice to know=2E




* Issue a wildcard cert through SNIF CA Proxy
(e=2Eg=2E CN=3D*=2Ed=
omain=2Esnif=2Exyz), set a DNS record for
localhost=2Edomain=2Esnif=2Exy=
z to point to localhost's IPv4/v6, and use
https://localhost=2Edomain=2Esnif=2Exyz (or oth=
er app protocol - imaps
etc)=2E However, looks like some clients treat t=
he localhost IP as
inherently unsecure, and issue a warning ever is the =
cert is perfectly
valid=2E The option is still possible, but the applica=
bility might be
limited=2E





The process we described at

https://specs=2Ema=
nysecured=2Eorg/suib/Solutions/dnsname-embedded-solution

also us=
es a wildcard cert, but has a magic authoritative DNS server
that transl=
ates the left-most label into an A or AAAA record=2E  It's
rather a=
 cute hack, but at least:
  a) it's cachable
  b) it could =
even be calculated locally, if one ignores DNSSEC=2E





Yes, using a local network IP in=
stead of a localhost IP is actually a smart idea=2E
However, inlining th=
e local IP in the hostname, as SUIB does, means you'll have to change the h=
ostname in your client every time your network is changed=2E
I have an t=
hought for SNIF improvement - SNIF connector sends a SNIF DNS command to se=
t a dynamic DNS A/AAAA for a certain hostname within the CN wildcard, and t=
he CA proxy updates the DNS accordingly=2E This way the hostname can be per=
manent, but with dynamic DNS=2E
Another problem - most platforms won't l=
et you bind to port < 1024 unless you're a root=2E Might be ok for a dev=
ice manufacturer, but is a potential show stopper for any user space app=2E=
 Relayed SNIF works around this problem since the listening ports are on th=
e relay=2E





 




* Another option is to override the IP routing rules=2E It is totally=

possible on iOS and Mac through a userspace VPN (only one VPN per
de=
vice though - beware of possible conflicts)=2E In fact I have a
function=
ing solution for it, in beta now -





That doesn't really scale to many different domains=2E=






Totally agreed, I just mentioned=
 that this option works for *some* cases, tun/tap a is possible option too =
if you're a root=2E




 






Still, if SNIF is replacing a manufacturer proprietary call-home prot=
ocol,
there could be advantages from having well reviewed code bases, an=
d
potentially an ecosystem of SNIF Providers that manufacturers couldoutsource






 






to=2E  Azure/Amazon/=2E=2E=2E could easily run such services=2E<=
o:p>






 




I see two options - a SNIF server implemented by each vendor for thei=
r
own devices/services, or a bigger SNIF SaaS implemented by a trustedprovider, used by vendors=2E





Yes, but what's the financial motive for this provider?





(1) For a vendor to run their ow=
n SNIF server: market as a true auditable end-to-end for IoT devices they o=
ffer=2E
(2) For a vendor using SNIF SaaS: market as (1) backed by
{Tr=
ustedBigName}
(3) For a {TrustedBigName} to run SNIF SaaS: collect fees =
from (2) for using their service and big name=2E

As a matter of fact=
, SNIF relay is light on server resources=2E I've been running it on a mini=
mum DigitalOcean virtual server for months with more than a dozen connector=
s,   the server load is a fraction of a percent=2E Of course if s=
omebody connects IoT cameras they can generate some traffic, but IoT vendor=
s already handle it through their proprietary relays=2E




 






SNIF seems very much IPv4 NAT44 focused, and it could benefit from so=
me
understanding of IPv6 and IPv6-over-IPv4 technologies,





 particularly






Teredo=2E






 




SNIF is not exactly focused on v4, it works fine with v6 as well=2E I=
t's
designed to work around NAT, that's true=2E However, IPv6 networks m=
ay
pose issues too - firewalls etc, which will prevent to directly accep=
t
incoming TCP on IPv6 address=2E





Teredo could be used instead and allows the relay to be stateless=
 and
distributed, and devolves to ordinary IPv6 when it is present=2E





Yes, but Teredo is IPv6 specific=
, the world is not strictly IPv6 yet=2E And it's a system level solution, w=
hile SNIF works fine in a user space=2E




 






It clearly has to speak HTTPS only=2E






 




I specified HTTP because PKCS#10 and X=2E509 are inherently secure to=
 be
sent over a plain connection=2E





Yes, but there are privacy concerns which will become a pain, so<=
br>better to just say HTTPS here=2E





I respectfully disagree, still t=
hink HTTP is an easier answer for SNIF=2E The problem with HTTPS is - SNIF =
relay (usually) routes https port to SNIF connectors, and does not serve it=
 within the server=2E Having a dedicated hostname or an alternate port mean=
s than SNIF connectors need additional configuration options, or additional=
 discovery protocols=2E On the other hand, HTTP allows to derive all API UR=
Ls deterministically from the CN=2E
I addressed the possible security co=
ncerns in more details and amended the Security section in the draft=2E
=





 




The best option is the manufacturer I believe=2E The manufacturer can=

have either their own SNIF server, or work with a trusted SaaS=2E This<=
br>way it's zero setup for the end user, and doesn't need any
infrastruc=
ture additions=2E





Agreed, the manufacturer has to provision a credential=2E





Yes I proposed some outlines in =
the security section, more detailed specs are probably better to describe i=
n a separate draft=2E




 




Sure, elliptic curves are better, but some old school clients may hav=
e
problems with them=2E It may make sense to not mention the recommended=

algorithm in the draft, and just to follow the CA's recommendations=2E<=
o:p>





ECDSA acceleration is pretty much ubiquitous, while RSA is not=2E=






Honestly I don't think accelerat=
ion is such a big deal, most of TLS job is symmetric ciphers anyway=2E But =
I agree - it's better to follow the CA suggestions and industry practices=
=2E




 




I believe there's no security issue, as long as the CN entropy is suf=
ficient=2E




 




I specified the X-SNIF-CN: as mandatory, and text/plain body as anoptional duplicate of it=2E To make it cleaner, I can remove the body
f=
rom the specs and say the response body is to be ignored=2E




If both are present, and they don't match, then there is confusio=
n=2E
So just go with one=2E  I think that it should actually be a J=
SON or CBOR payload return=2E





Agreed, I removed the response b=
ody from the draft, going with the header=2E





 






They *aren't* what IANA would call "IP protocols", which would be thi=
ngs
like
TCP, UDP, SCTP, ESP, =2E=2E=2E






 






Has IANA *already* registered port 7123 then?






 




It's not an IP protocol=2E It's a service that listens on TCP 7123, I=

registered with IANA based on a previous version of the document,
be=
fore I turned it into an I-D=2E





I think you should drop the "snif-*" sentence as it makes no sens=
e=2E
You have already allocated TCP port 7123 to the SNIF *service*, so<=
br>that's great=2E





It's actually called "Service Na=
mes" in IANA terminology, sorry for the confusion=2E I updated in the draft=
=2E







--
]    &=
nbsp;          Never tell me t=
he odds!           &=
nbsp;     | ipv6 mesh networks [
]   Micha=
el Richardson, Sandelman Software Works      =
  |    IoT architect   [
]  &nbs=
p;  mcr@sandelman=2Eca =
 http://www=2Esandelman=2Eca/&=
nbsp;       |   ruby on rails =
   [






Secdispatch mailing list
Secdispatch@ietf=2Eorg
https://www=2Eietf=2Eorg/mailman/listinfo/secdispatch=

IMPORTANT NOTICE: The contents of this email and any attachments ar=
e confidential and may also be privileged=2E If you are not the intended re=
cipient, please notify the sender immediately and do not disclose the conte=
nts to any other person, use it for any purpose, or store or copy the infor=
mation in any medium=2E Thank you=2E




Secdispatch mailing list
Secdispatch@ietf=2Eorg
https://www=2Eietf=2Eorg/mailman/listinfo/secdispatch=




--
Iotops mailing list
Iotops@ietf=2Eorg
https://www=2Eietf=2Eorg/mailman/listinfo/iotops
IMPORTA=
NT NOTICE: The contents of this email and any attachments are confidential =
and may also be privileged=2E If you are not the intended recipient, please=
 notify the sender immediately and do not disclose the contents to any othe=
r person, use it for any purpose, or store or copy the information in any m=
edium=2E Thank you=2E
IMPORTANT NOTICE: The contents of this email and any attachments are confi= dential and may also be privileged=2E If you are not the intended recipient= , please notify the sender immediately and do not disclose the contents to = any other person, use it for any purpose, or store or copy the information in any medium=2E Thank you=2E
------IZU1C3FBSABSWSQA60NDZM9OFRL82B-- From nobody Sat Mar 5 03:51:47 2022 Return-Path: X-Original-To: iotops@ietfa.amsl.com Delivered-To: iotops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 433E23A16D1; Sat, 5 Mar 2022 03:51:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.092 X-Spam-Level: X-Spam-Status: No, score=0.092 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, PDS_OTHER_BAD_TLD=1.998, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, UNPARSEABLE_RELAY=0.001, URIBL_BLOCKED=0.001, WEIRD_PORT=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=r/wry6xI; dkim=pass (1024-bit key) header.d=armh.onmicrosoft.com header.b=r/wry6xI Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id njG3_N0iCI_M; Sat, 5 Mar 2022 03:51:39 -0800 (PST) Received: from EUR01-VE1-obe.outbound.protection.outlook.com (mail-ve1eur01on062d.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe1f::62d]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A69733A16CD; Sat, 5 Mar 2022 03:51:38 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=UGUOQmZUj2Gs0xPz3UB4kysUXjMRxkW3fcFcXP4tiEc=; b=r/wry6xI9N5EvWOfG3ro8Pc/B0YqqyW+XXlDmLOBLp/HvjoCOfnIM/h/N5Hh+ngzNvUaaKBuuHwWTY4OJ1voBtRCPDPml+De9DW8WvBR38adUrjArBBSErA2LL4SwSy8aviXW0//CUEv7NZQQT8mFyfPCCB4Y7W+2eHxcedWEKM= Received: from DB3PR06CA0020.eurprd06.prod.outlook.com (2603:10a6:8:1::33) by VI1PR08MB5344.eurprd08.prod.outlook.com (2603:10a6:803:13e::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5038.16; Sat, 5 Mar 2022 11:51:32 +0000 Received: from DB5EUR03FT005.eop-EUR03.prod.protection.outlook.com (2603:10a6:8:1:cafe::6f) by DB3PR06CA0020.outlook.office365.com (2603:10a6:8:1::33) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5038.14 via Frontend Transport; Sat, 5 Mar 2022 11:51:32 +0000 X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 63.35.35.123) smtp.mailfrom=arm.com; dkim=pass (signature was verified) header.d=armh.onmicrosoft.com;dmarc=pass action=none header.from=arm.com; Received-SPF: Pass (protection.outlook.com: domain of arm.com designates 63.35.35.123 as permitted sender) receiver=protection.outlook.com; client-ip=63.35.35.123; helo=64aa7808-outbound-1.mta.getcheckrecipient.com; Received: from 64aa7808-outbound-1.mta.getcheckrecipient.com (63.35.35.123) by DB5EUR03FT005.mail.protection.outlook.com (10.152.20.122) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5017.22 via Frontend Transport; Sat, 5 Mar 2022 11:51:31 +0000 Received: ("Tessian outbound 1f399c739551:v113"); Sat, 05 Mar 2022 11:51:31 +0000 X-CR-MTA-TID: 64aa7808 Received: from 66cf2fc34903.1 by 64aa7808-outbound-1.mta.getcheckrecipient.com id 80CAC27A-9AAA-4D1C-985A-119CF831BDC2.1; Sat, 05 Mar 2022 11:51:25 +0000 Received: from EUR04-DB3-obe.outbound.protection.outlook.com by 64aa7808-outbound-1.mta.getcheckrecipient.com with ESMTPS id 66cf2fc34903.1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384); Sat, 05 Mar 2022 11:51:25 +0000 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=A+lBMYaJNEeSnJ9UdfsvRy8XjGyE2rADgMb+9A6b9ZKeoi5LYQCA6A5E1x/msHWd0Ua6GPNB01PtCdWdDRWXoAXxGpzEVSRFa6Wju1BqzjbNwcG3uDTpv7arHL/ZIbSSUIYo7BUAVca8ImH5PZjjGR9PRCyM36eWFJDpJySUHCM3f0NDJXUY15biqb2hORbsYpl5LUFeLTKtixZJKh8vy0a/U0zxCJevJx421dbZMY2HbwBELlbHWUEVvoJ/3CPfkPFo5XwbUEw3NCQoY/UwqMZxBLq5W29gwFhyFFwCrwfJXPPD4Gelr10S5fbdAMQBB1dXS3rulyix21kMibuj5Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=UGUOQmZUj2Gs0xPz3UB4kysUXjMRxkW3fcFcXP4tiEc=; b=Y+kuq8HT083QI8WQNHoa7vaSBglw3HOxl48IoxBm4xyjs3HDufOmBvVAMRcB7S4ki60++zFyJPLE3SNQHoCibX/LnkT0vD1i0SWlGzuec/GHdYFUN4bghB0X3JWbWRZORMvxDEoxkhcx9iS1OOA0C17q8imSyibnbx+xvIszJ4XaCrl82ajHUDjcTCTjM/HYtK6joVQ4WfcYy1Jr/sTwZX0R2ZDPJYiEIfMARwv8BZBEJvkQlJsnFV737cgsH4LkgQdBnvqrkFxk+ANGUfgVsMF2Czm0lwwmwRLHyIJ6Huh7cigb5AXZW8Pk/BwzzGBkYfim7rJdgrMxPJbDpM69nw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=arm.com; dmarc=pass action=none header.from=arm.com; dkim=pass header.d=arm.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=armh.onmicrosoft.com; s=selector2-armh-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=UGUOQmZUj2Gs0xPz3UB4kysUXjMRxkW3fcFcXP4tiEc=; b=r/wry6xI9N5EvWOfG3ro8Pc/B0YqqyW+XXlDmLOBLp/HvjoCOfnIM/h/N5Hh+ngzNvUaaKBuuHwWTY4OJ1voBtRCPDPml+De9DW8WvBR38adUrjArBBSErA2LL4SwSy8aviXW0//CUEv7NZQQT8mFyfPCCB4Y7W+2eHxcedWEKM= Received: from DBBPR08MB5915.eurprd08.prod.outlook.com (2603:10a6:10:20d::17) by AS8PR08MB6024.eurprd08.prod.outlook.com (2603:10a6:20b:23d::15) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5038.17; Sat, 5 Mar 2022 11:50:32 +0000 Received: from DBBPR08MB5915.eurprd08.prod.outlook.com ([fe80::b478:3f3d:2464:65c8]) by DBBPR08MB5915.eurprd08.prod.outlook.com ([fe80::b478:3f3d:2464:65c8%5]) with mapi id 15.20.5038.016; Sat, 5 Mar 2022 11:50:31 +0000 From: Hannes Tschofenig To: Jim Zubov , "secdispatch@ietf.org" , "secdispatch@ietf.org" , Michael Richardson , "iotops@ietf.org" , "anima@ietf.org" Thread-Topic: [Secdispatch] [Iotops] I-D: Deploying Publicly Trusted TLS Servers on IoT Devices Using SNI-based End-to-End TLS Forwarding (SNIF) Thread-Index: AQHYMC30YaXh1baPBkeosHdKaSSDsaywrUdQ Date: Sat, 5 Mar 2022 11:50:31 +0000 Message-ID: References: <0075B437-024A-4D84-ABD7-92FE8DAFA59F@commercebyte.com>, <1865.1644434146@localhost> <4026.1644516168@localhost> <685366A1-01F4-4788-B025-0F5F4CE7947F@commercebyte.com> <665685D3-B9AA-4A5E-B5B0-33D313A40716@commercebyte.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ts-tracking-id: BCF5F38E5AB0EF46B59FEE34BE7E1065.0 x-checkrecipientchecked: true Authentication-Results-Original: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=arm.com; X-MS-Office365-Filtering-Correlation-Id: 2cd52fee-0907-46f2-d59c-08d9fe9e7dc2 x-ms-traffictypediagnostic: AS8PR08MB6024:EE_|DB5EUR03FT005:EE_|VI1PR08MB5344:EE_ X-Microsoft-Antispam-PRVS: x-checkrecipientrouted: true nodisclaimer: true X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam-Untrusted: BCL:0; X-Microsoft-Antispam-Message-Info-Original: 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 X-Forefront-Antispam-Report-Untrusted: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DBBPR08MB5915.eurprd08.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230001)(4636009)(366004)(66574015)(5660300002)(26005)(186003)(9326002)(52536014)(30864003)(110136005)(122000001)(966005)(83380400001)(66476007)(76116006)(38100700002)(66446008)(66556008)(64756008)(8676002)(66946007)(8936002)(316002)(2906002)(9686003)(6506007)(33656002)(7696005)(53546011)(508600001)(71200400001)(38070700005)(55016003)(166002)(86362001)(69594002)(579004); DIR:OUT; SFP:1101; Content-Type: multipart/alternative; boundary="_000_DBBPR08MB5915AC6A162154A6B53D27B7FA069DBBPR08MB5915eurp_" MIME-Version: 1.0 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR08MB6024 Original-Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=arm.com; X-EOPAttributedMessage: 0 X-MS-Exchange-Transport-CrossTenantHeadersStripped: DB5EUR03FT005.eop-EUR03.prod.protection.outlook.com X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id-Prvs: 6e6df3bf-e8b5-4875-67ff-08d9fe9e5a11 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:63.35.35.123; CTRY:IE; LANG:en; SCL:1; SRV:; IPV:CAL; SFV:NSPM; H:64aa7808-outbound-1.mta.getcheckrecipient.com; PTR:ec2-63-35-35-123.eu-west-1.compute.amazonaws.com; CAT:NONE; SFS:(13230001)(4636009)(36840700001)(40470700004)(46966006)(166002)(66574015)(30864003)(86362001)(9326002)(52536014)(110136005)(8676002)(83380400001)(356005)(450100002)(5660300002)(70206006)(70586007)(316002)(53546011)(33964004)(7696005)(9686003)(47076005)(82310400004)(8936002)(36860700001)(55016003)(6506007)(2906002)(33656002)(81166007)(26005)(186003)(336012)(40460700003)(966005)(508600001)(69594002)(579004)(559001); DIR:OUT; SFP:1101; X-OriginatorOrg: arm.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 05 Mar 2022 11:51:31.7694 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 2cd52fee-0907-46f2-d59c-08d9fe9e7dc2 X-MS-Exchange-CrossTenant-Id: f34e5979-57d9-4aaa-ad4d-b122a662184d X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=f34e5979-57d9-4aaa-ad4d-b122a662184d; Ip=[63.35.35.123]; Helo=[64aa7808-outbound-1.mta.getcheckrecipient.com] X-MS-Exchange-CrossTenant-AuthSource: DB5EUR03FT005.eop-EUR03.prod.protection.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Anonymous X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR08MB5344 Archived-At: Subject: Re: [Iotops] [Secdispatch] I-D: Deploying Publicly Trusted TLS Servers on IoT Devices Using SNI-based End-to-End TLS Forwarding (SNIF) X-BeenThere: iotops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IOT Operations List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Mar 2022 11:51:45 -0000 --_000_DBBPR08MB5915AC6A162154A6B53D27B7FA069DBBPR08MB5915eurp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgSmltLA0KDQpHb29kIGRpc2N1c3Npb24uDQoNCkJhc2VkIG9uIHdoYXQgeW91IHdyb3RlIGJl bG93IEkgd2FzIGFjdHVhbGx5IHdvbmRlcmluZyBpZiB0aGUgdXNlIG9mIFRMUyBvciBEVExTIGF0 IHRoZSBhcHBsaWNhdGlvbiBsYXllciB3b3VsZG7igJl0IGV2ZW4gYmUgYSBiZXR0ZXIgc29sdXRp b24uIFRoaXMgd2F5IHlvdSBjb3VsZCByZS11c2UgYW4gZXhpc3RpbmcgSW9UIGRldmljZSBtYW5h Z2VtZW50IGluZnJhc3RydWN0dXJlICh3aGljaCBtYXkgYmUgYmFzZWQgb24gSFRUUCBidXQgd2ls bCBtb3N0IGxpa2VseSB1c2UgTVFUVCBvciBDb0FQKSBhbmQgdGhlbiB5b3UgYWRkIHRoZSBlbmQt dG8tZW5kIHNlY3VyaXR5IG9uIHRvcCBvZiBpdCBmb3IgdGhvc2UgY2FzZXMgd2hlcmUgeW91IG5l ZWQgaXQuIFlvdSB0aGVuIGFsc28gZG8gbm90IGhhdmUgdG8gd29ycnkgYWJvdXQgZGVwbG95aW5n IGEgc2VwYXJhdGUgcHJveHkuDQoNCkhlcmUgaXMgc29tZSBpbmZvcm1hdGlvbiBhYm91dCB0aGlz IGFwcHJvYWNoOg0KaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvaHRtbC9kcmFmdC1m cmllbC10bHMtYXRscy0wNQ0KDQpDaWFvDQpIYW5uZXMNCg0KRnJvbTogU2VjZGlzcGF0Y2ggPHNl Y2Rpc3BhdGNoLWJvdW5jZXNAaWV0Zi5vcmc+IE9uIEJlaGFsZiBPZiBKaW0gWnVib3YNClNlbnQ6 IFNhdHVyZGF5LCBNYXJjaCA1LCAyMDIyIDI6MTAgQU0NClRvOiBzZWNkaXNwYXRjaEBpZXRmLm9y ZzsgSGFubmVzIFRzY2hvZmVuaWcgPEhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20+OyBKaW0gWnVi b3YgPGlldGYtbGlzdEBjb21tZXJjZWJ5dGUuY29tPjsgc2VjZGlzcGF0Y2hAaWV0Zi5vcmc7IE1p Y2hhZWwgUmljaGFyZHNvbiA8bWNyK2lldGZAc2FuZGVsbWFuLmNhPjsgaW90b3BzQGlldGYub3Jn OyBhbmltYUBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtTZWNkaXNwYXRjaF0gW0lvdG9wc10gSS1E OiBEZXBsb3lpbmcgUHVibGljbHkgVHJ1c3RlZCBUTFMgU2VydmVycyBvbiBJb1QgRGV2aWNlcyBV c2luZyBTTkktYmFzZWQgRW5kLXRvLUVuZCBUTFMgRm9yd2FyZGluZyAoU05JRikNCg0KSGkgSGFu bmVzLA0KDQpHb29kIG92ZXJ2aWV3IG9mIHN0cmF0ZWdpYyBhcHByb2FjaGVzLCBsZXQgbWUgYWRk IGFub3RoZXIgZGltZW5zaW9uIC0NCi0gQ2FuIHRoZSByZWxheSBhY2Nlc3MgYW55IGluZm9ybWF0 aW9uIGNvbW11bmljYXRlZCBiZXR3ZWVuIHRoZSBkZXZpY2UgYW5kIHRoZSB1c2VyLA0KLSBJZiB0 aGUgYW5zd2VyIGlzIF9ub18gLSBjYW4gdGhlIHVzZXIgb3Igc29tZSBpbmRlcGVuZGVudCBwYXJ0 eSB2ZXJpZnkgdGhlIHZhbGlkaXR5IG9mIHN1Y2ggY2xhaW0uDQoNCkluIGNhc2Ugb2YgU05JRiwg dGhlIHNldHVwIGNvbnNpc3RzIG9mDQotIGFuIElvVCBkZXZpY2UgY2FwYWJsZSBvZiBzZXJ2aW5n IEhUVFBTICh1c2VyIGZyaWVuZGx5IHBhZ2VzIG9yIGFuIEFQSSksIHJ1bm5pbmcgYSBTTklGIGNv bm5lY3RvciwNCi0gYSB3ZWIgYmFzZWQgZGV2aWNlIG1hbmFnZXIgb24gdGhlIHVzZXIgc2lkZSB0 aGF0IHdvcmtzIHdpdGggdGhlIGRldmljZSdzIEhUVFBTIGNvbnRlbnQgKGFuZCBleHBlY3RzIGEg dHJ1c3RlZCBjZXJ0KSwNCi0gYSBTTklGIHJlbGF5IC8gQ0EgcHJveHkgc2VydmVyIGluIHRoZSBj bG91ZCwNCi0gcG90ZW50aWFsbHksIGFuIGluZGVwZW5kZW50IG9ic2VydmVyIHRoYXQgd2F0Y2hl cyBUTFMgdHJhbnNwYXJlbmN5IGxvZ3MgYW5kIHJhaXNlcyBhbiBhbGVydCBpZiBhbnkgZHVwbGlj YXRlIGNlcnRzIGFyZSBmb3VuZCBmb3IgdGhlIENOcyBpc3N1ZWQgYnkgdGhlIENBIHByb3h5Lg0K DQpUaGlzIHdheSwgdGhlIElvVCBkZXZpY2Ugb3ducyB0aGUgcHJpdmF0ZSBrZXksIGFuZCB0aGVy ZSdzIGEgcHJvb2YgdGhyb3VnaCB0aGUgcHVibGljIHRydXN0IFBLSSB0aGF0IHRoZSBkZXZpY2Ug bWFuYWdlciBpcyBjb21tdW5pY2F0aW5nIHRvIHRoZSBhdXRoZW50aWMgZGV2aWNlLg0KSW4gY2Fz ZSBpZiB0aGUgcHVibGljIENBIHRydXN0IGlzIG5vdCBlbm91Z2gsIHRoZSBkZXZpY2UgbWFuYWdl ciBjYW4gZXhhbWluZSB0aGUgcHVibGljIGtleSBvbiB0aGUgY2VydCBvbiBldmVyeSBjb25uZWN0 aW9uIChzaG91bGQgYmUgcG9zc2libGUgdG8gZG8gd2l0aCB0aGUgRm9yZ2UgcHJvamVjdCBpbiBy ZWd1bGFyIGpzKSwgYW5kIHJhaXNlIGFuIGFsZXJ0IGlmIHRoZSBrZXkgaXMgY2hhbmdlZCAoanVz dCBsaWtlIHNzaCBkb2VzKS4NCg0KU05JRiBpcyB0aGUgYW5zd2VyIGZvciBhIHNtYXJ0IGhvbWUs IGEgc2VjdXJpdHkgY2FtLCBvciBhbnkgb3RoZXIgcHJpdmF0ZSBJb1QgeW91IGRvbid0IHdhbnQg YW55Ym9keSB0byBzbmlmZiBvbiAocHVuIGludGVuZGVkKS4NCg0KSWYgeW91J3JlIGRlcGxveWlu ZyBhIGRldmljZSBhY2Nlc3NhYmxlIHRvIGEgbGFyZ2UgZ3JvdXAsIGxpa2UgYSBwdWJsaWMgd2Vi Y2FtLCBTTklGIG1pZ2h0IGJlIG5vdCBhIGdvb2Qgb3B0aW9uLCBpdCBtaWdodCBiZSBiZXR0ZXIg dG8gaGF2ZSBhbiBpbnRlcm1pZGlhdGUgcHJveHkgdGhhdCBoYW5kbGVzIGFsbCB0cmFmZmljIHdp dGhvdXQgY2hva2luZyB0aGUgZGV2aWNlLiBCdXQsIGVuZC10by1lbmQgcHJpdmFjeSBpcyBhIGxl c3NlciBjb25jZXJuIGluIHN1Y2ggY2FzZS4NCg0KUmVnYXJkaW5nIHRoZSBjb252ZXJzaW9uIG9m IGFueSBleGlzdGluZyBkZXZpY2VzIHRvIFNOSUYgLQ0KLSBzZXJ2ZSB0aGUgY29udGVudCBvbiB0 aGUgZGV2aWNlIG92ZXIgSFRUUFMgb3IgbG9jYWwgcGxhaW4gSFRUUCwgd2hldGhlciBpdCdzIGEg d2ViIHBhZ2UsIGEgdmlkZW8gc3RyZWFtIG9yIGFuIEFQSSwgbGlzdGVuaW5nIG9uIGEgbG9jYWwg cG9ydCAoc2F5IDQ0MykNCi0gcnVuIGEgU05JRiBjb25uZWN0b3IgcHJvY2VzcyB0byBtYWludGFp biB0aGUgY2VydCBhbmQgdG8gcmVsYXkgdG8gaW5jb21pbmcgU05JRiBjb25uZWN0aW9ucyB0byB0 aGUgbG9jYWwgcG9ydC4NCk9uIE1hcmNoIDMsIDIwMjIgNjoxODo0OCBBTSBFU1QsIEhhbm5lcyBU c2Nob2ZlbmlnIDxIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPG1haWx0bzpIYW5uZXMuVHNjaG9m ZW5pZ0Bhcm0uY29tPj4gd3JvdGU6DQpIaSBKaW0sDQoNClRoYW5rcyBmb3IgeW91ciByZXNwb25z ZS4NCg0KPiBUaGVyZSBhcmUgc29tZSBJb1QgbWFuYWdlbWVudCBzb2x1dGlvbnMgb24gdGhlIG1h cmtldCwgYm90aCBvcGVuIHNvdXJjZSBhbmQgcHJvcHJpZXRhcnksIGJ1dCBhcyBmYXIgYXMgSSBj YW4gdGVsbCBub25lIG9mIHRoZW0gZnVsbHkgZm9sbG93cyB0aGUgZW5kIHRvIGVuZCBwYXJhZGln bS4NCltIYW5uZXNdIEl0IGRlcGVuZHMgd2hhdCB5b3UgY2FsbCBlbmQtdG8tZW5kLiBBcyBhbiBJ b1Qgc2VydmljZSBwcm92aWRlciB5b3UgaGF2ZSB0byBtYWtlIGEgZmV3IGRlY2lzaW9ucyBhYm91 dCBob3cgdG8gbWFuYWdlIGFuZCBkZXBsb3kgSW9UIGRldmljZXMuIEJyb2FkbHkgc3BlYWtpbmcs IHlvdSBoYXZlIHRocmVlIG9wdGlvbnM6DQoNCiAgKiAgIFlvdSAgc2VlayBvdXQgdG8gYSB0aGly ZCBwYXJ0eSB0byBtYW5hZ2UgeW91ciBkZXZpY2VzLiBOZWVkbGVzcyB0byBzYXkgdGhhdCB5b3Ug c2hvdWxkIHBpY2sgYSBjb21wYW55IHRoYXQgeW91IGZlZWwgY29tZm9ydGFibGUgd2l0aC4gVGhl eSB3aWxsIG1hbmFnZSB5b3VyIGRldmljZXMgYW5kIHRoZXkgd2lsbCBhbHNvIG9mZmVyIHdheXMg dG8gc3RvcmUgdGhlIGRhdGEgb2J0YWluZWQgZnJvbSB0aGUgZGV2aWNlcywgdG8gbWFuYWdlIGFu ZCBkaXN0cmlidXRlIGZpcm13YXJlIHVwZGF0ZXMsIGFuZCBldmVuIHRvIHBlcmZvcm0gYW5hbHlz aXMgb2YgdGhlIGRhdGEgKG1hY2hpbmUgbGVhcm5pbmcpLiBUaGVuLCB5b3UgY2FuIHR5cGljYWxs eSBjb25uZWN0IGJhY2tlbmQgYXBwbGljYXRpb24gc2VydmVycyB0byB0aGUgZGV2aWNlIG1hbmFn ZW1lbnQgb2ZmZXJpbmcuIE9mIGNvdXJzZSwgdGhlIGRldGFpbHMgdmFyeSBhIGxvdCB3aXRoIHdo YXQgeW91IGFyZSBhY3R1YWxseSBkb2luZyBhcyBhbiBJb1Qgc2VydmljZSBwcm92aWRlciB3aXRo IHRoZSBJb1QgZGV2aWNlcyBhbmQgdGhlIGRhdGEuDQogICogICBZb3UgZ2V0IHRoZSBzb2Z0d2Fy ZSBmcm9tIGEgcHJvdmlkZXIgYW5kIHlvdSBtYW5hZ2UgdGhlIGRldmljZXMgb24geW91ciBvd24u IFRoaXMgaXMgb2Z0ZW4gdGhlIGNhc2Ugd2hlbiB5b3Ugd2FudCB0byBkZXBsb3kgYW4gb24tcHJl bWlzZSBzb2x1dGlvbi4gSGVyZSB5b3UgaGF2ZSB0byB0cnVzdCB0aGUgcHJvdmlkZXIgb2YgdGhl IGRldmljZSBtYW5hZ2VtZW50IHNvZnR3YXJlIHRoYXQgdGhlIGNvZGUgaXMgY29ycmVjdCBhbmQg ZG9lcyB3aGF0IGl0IGlzIHN1cHBvc2VkIHRvIGRvLiBJbiBzb21lIGNhc2VzIHlvdSBub3Qgb25s eSBnZXQgdGhlIGJpbmFyeSBidXQgYWxzbyB0aGUgc291cmNlIGNvZGUuIEluIHRoZW9yeSwgeW91 IGNvdWxkIGNoZWNrIHdoYXQgY29kZSBpcyBhY3R1YWxseSBydW5uaW5nIChhbHRob3VnaCBJIGRv dWJ0IHRoYXQgYW55b25lIHJlYWxseSBjaGVja3MpLg0KICAqICAgRmluYWxseSwgeW91IGJ1aWxk IHlvdXIgb3duIGRldmljZSBtYW5hZ2VtZW50IHNvbHV0aW9uIChvZnRlbiB1c2luZyBhdmFpbGFi bGUgb3BlbiBzb3VyY2Ugc29mdHdhcmUpLg0KSW4gcHJhY3RpY2UsIEkgaGF2ZSBhbHNvIHNlZW4g YSBjb21iaW5hdGlvbiBvZiB0aGUgdmFyaWFudHMgYWJvdmUuIEZvciBleGFtcGxlLCBJIGhhdmUg c2VlbiBhIGNhc2Ugd2hlcmUgdGhlIGRldmljZXMgd2VyZSBtYW5hZ2VkIGJ5IGEgdGhpcmQgcGFy dHkgYnV0IHRoZSB2aWRlbyBzdHJlYW0gb2YgdGhlIHN1cnZlaWxsYW5jZSBjYW1lcmEgd2FzIHNl bnQgZGlyZWN0bHkgdG8gYSBkZWRpY2F0ZWQgc2VydmVyIG1hbmFnZWQgYnkgdGhlIElvVCBzZXJ2 aWNlIHByb3ZpZGVyLiAoVGhlcmUgd2VyZSBhbHNvIHZhcmlvdXMgdGVjaG5pcXVlcyB0byBwcmV2 ZW50IG1vZGlmaWNhdGlvbnMgdG8gdGhlIGRldmljZSB0byBoYXZlIHRoZSB2aWRlbyBzdHJlYW0g cmUtZGlyZWN0ZWQgb3IgdGhlIGNyZWRlbnRpYWxzIGNoYW5nZXMgYnV0IEkgdGhpbmsgeW91IGdl dCB0aGUgaWRlYS4pIFRoZSBjb21tdW5pY2F0aW9uIG1vZGVsIHRoZXJlIHdhcyBhIGJpdCBkaWZm ZXJlbnQgdGhhbiB5b3VycyBiZWNhdXNlIHRoZSBjbGllbnQgaW5pdGlhdGVkIHRoZSBjb21tdW5p Y2F0aW9uIHdpdGggdGhlIHZpZGVvIHNlcnZlci4gSGVuY2UsIHRoZXJlIHdhcyBubyBpc3N1ZSB3 aXRoIHJ1bm5pbmcgYSBUTFMgc2VydmVyIG9uIHRoZSBkZXZpY2UuDQpPbiB0b3Agb2YgdGhpcywg aXQgaXMgYWxzbyBjb21tb24gdG8gcHJvdmlkZSBzcGVjaWFsIHNlY3VyaXR5IHByb3RlY3Rpb24g Zm9yIHNlbGVjdGVkIGRhdGEuIEZvciBleGFtcGxlLCBmaXJtd2FyZSB1cGRhdGVzIGFyZSBzaWdu ZWQgYnkgcGFydHkgZGlmZmVyZW50IGZyb20gdGhlIGNvbXBhbnkgb2ZmZXJpbmcgdGhlIGRldmlj ZSBtYW5hZ2VtZW50IHNvbHV0aW9uLiBUaGV5IGFyZSwgZm9yIGV4YW1wbGUsIHNpbmdlZCBieSB0 aGUgY29tcGFueSBkZXZlbG9waW5nIHRoZSBjb2RlLiBUaGV5IGFyZSBzdGlsbCBkaXN0cmlidXRl ZCBieSB0aGUgZGV2aWNlIG1hbmFnZW1lbnQgaW5mcmFzdHJ1Y3R1cmUgYW5kIGhlbmNlIHlvdSBo YXZlIHRvIHJlbHkgb24gdGhlIGRpc3RyaWJ1dGlvbiBvZiB0aGVtIGJ1dCB0aGVyZSBpcyBubyBj aGFuY2UgZm9yIHRoZSBkZXZpY2UgbWFuYWdlbWVudCBwcm92aWRlciB0byBpbmplY3QgbWFsaWNp b3VzIGNvZGUgaW50byB0aGUgZGV2aWNlLg0KRnJvbSB3aGF0IEkgYW0gc2VlaW5nLCB0aGUgZmly c3QgZGVwbG95bWVudCBtb2RlbCBpcyB2ZXJ5IHBvcHVsYXIuIFRoZSBhcHByb2FjaCBvZiDigJxk ZXNpZ25pbmcgeW91ciBvd24gc29sdXRpb27igJ0gd2FzIHBvcHVsYXIgaW4gdGhlIGVhcmx5IGRh eXMgYmVjYXVzZSBjb21wYW5pZXMgd2VyZSBnaXZlbiB0aGUgaW1wcmVzc2lvbiB0aGF0IHRoaXMg SW9UIHN0dWZmIGlzIHNvIHNpbXBsZSB0aGF0IHlvdSBjYW4gcHV0IGEgc29sdXRpb24gdG9nZXRo ZXIgaW4gYSB3ZWVrZW5kLiBJdCB0dXJuZWQgb3V0IHRoYXQgdGhpcyBpcyBub3QgcXVpdGUgdGhl IGNhc2UgKGlmIHlvdSBoYXZlIGEgbGFyZ2VyIG51bWJlciBvZiBkZXZpY2VzKS4gTWFueSBJb1Qg c2VydmljZSBwcm92aWRlcnMgYWxzbyBuZWVkIGhlbHAgZGVzaWduaW5nIHRoZSBlbnRpcmUgc29s dXRpb24sIGFsc28gdGhlIHNvbHV0aW9uIG9uIHRoZSBJb1QgZGV2aWNlIGl0c2VsZi4NCkhvdyBk b2VzIHlvdXIgc29sdXRpb24gZml0IGludG8gdGhpcyBwaWN0dXJlPw0KPiBJIGJlbGlldmUgaXQn cyB3b3J0aCBoYXZpbmcgYSB1bml2ZXJzYWwgY3Jvc3MtdmVuZG9yIHNvbHV0aW9uIHRoYXQgaGFu ZGxlcyBTTklGIGRldmljZSBvbmJvYXJkaW5nLCBtYWludGFpbnMgdGhlIGNyZWRlbnRpYWxzIGlu IGEgbG9jYWwgc2VjdXJlIHN0b3JhZ2UsIGFuZCBjb25zb2xpZGF0ZXMgaHR0cHMgYmFzZWQgbWFu YWdlbWVudCBpbnRlcmZhY2UgaG9zdGVkIGJ5IGluZGl2aWR1YWwgZGV2aWNlcyB0aHJvdWdoIFNO SUYuDQpbSGFubmVzXSBUaGVyZSBpcyBkZWZpbml0ZWx5IGEgbG90IG9mIGV4Y2l0ZW1lbnQgd2hl biBpdCBjb21lcyB0byB0aGUgZGV2ZWxvcG1lbnQgb2YgZGV2aWNlIG9uYm9hcmRpbmcgc29sdXRp b25zLiBJIGhhdmUgdG8gdHJ1c3QgeW91IHRoYXQgdGhlcmUgaXMgZnVydGhlciBpbnRlcmVzdCBm b3Igc29sdXRpb25zIGJlY2F1c2UgSSBoYXZlbuKAmXQgY2hlY2tlZC4NCg0KPiBUaGUgcmVxdWly ZW1lbnRzIGZvciBzdWNoIHNvbHV0aW9uIGlzIGEgdG9waWMgZm9yIGEgc2VwYXJhdGUgZHJhZnQs IGFsdGhvdWdoIEkgYWxyZWFkeSBvdXRsaW5lZCB0aGUgcG9zc2libGUgc2VjdXJlIG9uYm9hcmRp bmcgcHJvY2VzcyBpbiB0aGUgc2VjdXJpdHkgc2VjdGlvbi4NCkkgd2lsbCByZS1yZWFkIHlvdXIg c2VjdXJpdHkgY29uc2lkZXJhdGlvbiBzZWN0aW9uIGFnYWluLg0KDQpOb3RlIHRoYXQgSSBhbSBj ZXJ0YWlubHkgbm90IGFnYWluc3QgeW91ciBzb2x1dGlvbi4gSWYgeW91ciBhcHByb2FjaCBoYXMg c3VjY2Vzcywga3Vkb3MgdG8geW91Lg0KDQpDaWFvDQpIYW5uZXMNCg0KT24gRmVicnVhcnkgMjQs IDIwMjIgNTozNzo0NiBBTSBFU1QsIEhhbm5lcyBUc2Nob2ZlbmlnIDxIYW5uZXMuVHNjaG9mZW5p Z0Bhcm0uY29tPG1haWx0bzpIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPj4gd3JvdGU6DQoNCkhp IEppbSwNCg0KVGhhbmtzIGZvciB0aGUgcXVpY2sgcmVzcG9uc2UuIFRoZSBsaW5rIHRvIHlvdXIg d2Vic2l0ZSBpcyBoZWxwZnVsLiBJIG5vdyB1bmRlcnN0b29kIHRoYXQgeW91IHdvdWxkIGFsc28g cmVsYXkgdGhlIGNvbW11bmljYXRpb24gdGhyb3VnaCB0aGUgcHJveHksIHdoaWNoIGRlYWxzIHdp dGggdGhlIElvVCBkZXZpY2UgYmVpbmcgYmVoaW5kIGEgTkFUIGFuZC9vciBmaXJld2FsbCBpZiB0 aGUgSW9UIGRldmljZSBrZWVwcyB0aGUgY29ubmVjdGlvbiBhbGl2ZS4NCg0KSSB3b25kZXIgd2hl dGhlciB5b3UgaGF2ZSBjb25zaWRlcmVkIHRvIHJlLXVzZSBhbiBleGlzdGluZyBkZXZpY2UgbWFu YWdlbWVudCBzb2x1dGlvbnMgc2luY2UgdGhvc2UgaXMgd2lkZWx5IGRlcGxveWVkIHRvZGF5Pw0K DQpDaWFvDQpIYW5uZXMNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IElvdG9w cyA8aW90b3BzLWJvdW5jZXNAaWV0Zi5vcmc8bWFpbHRvOmlvdG9wcy1ib3VuY2VzQGlldGYub3Jn Pj4gT24gQmVoYWxmIE9mIEppbSBadWJvdg0KU2VudDogV2VkbmVzZGF5LCBGZWJydWFyeSAyMywg MjAyMiA0OjE3IFBNDQpUbzogc2VjZGlzcGF0Y2hAaWV0Zi5vcmc8bWFpbHRvOnNlY2Rpc3BhdGNo QGlldGYub3JnPjsgSGFubmVzIFRzY2hvZmVuaWcgPEhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb208 bWFpbHRvOkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20+PjsgSmltIFp1Ym92IDxpZXRmLWxpc3RA Y29tbWVyY2VieXRlLmNvbTxtYWlsdG86aWV0Zi1saXN0QGNvbW1lcmNlYnl0ZS5jb20+Pjsgc2Vj ZGlzcGF0Y2hAaWV0Zi5vcmc8bWFpbHRvOnNlY2Rpc3BhdGNoQGlldGYub3JnPjsgTWljaGFlbCBS aWNoYXJkc29uIDxtY3IraWV0ZkBzYW5kZWxtYW4uY2E8bWFpbHRvOm1jcitpZXRmQHNhbmRlbG1h bi5jYT4+OyBpb3RvcHNAaWV0Zi5vcmc8bWFpbHRvOmlvdG9wc0BpZXRmLm9yZz47IGFuaW1hQGll dGYub3JnPG1haWx0bzphbmltYUBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbSW90b3BzXSBbU2Vj ZGlzcGF0Y2hdIEktRDogRGVwbG95aW5nIFB1YmxpY2x5IFRydXN0ZWQgVExTIFNlcnZlcnMgb24g SW9UIERldmljZXMgVXNpbmcgU05JLWJhc2VkIEVuZC10by1FbmQgVExTIEZvcndhcmRpbmcgKFNO SUYpDQoNClRoYW5rIFlvdSBmb3IgeW91ciBmZWVkYmFjayBIYW5uZXMsIEkgYWRkcmVzc2VkIHRo ZSBjb21tZW50cyBiZWxvdyAtDQoNCk9uIEZlYnJ1YXJ5IDIzLCAyMDIyIDU6MzY6MTUgQU0gRVNU LCBIYW5uZXMgVHNjaG9mZW5pZyA8SGFubmVzLlRzY2hvZmVuaWdAYXJtLmNvbTxtYWlsdG86SGFu bmVzLlRzY2hvZmVuaWdAYXJtLmNvbT4+IHdyb3RlOg0KDQpIaSBhbGwsDQoNClRoYW5rcyBmb3Ig dGhpcyBjb250cmlidXRpb24sIEppbS4NCg0KUmVhZGluZyB0aHJvdWdoIHRoZSBkb2N1bWVudCBJ IGFncmVlIHRoYXQgdGhlIFNVSUIgdG9waWMgZGlzY3Vzc2VkIGluIHRoZSBJT1RPUFMgV0cgYXBw ZWFycyByZWxldmFudC4gSSBhbHNvIHdvbmRlciB3aGV0aGVyIHRoZSB3b3JrIGluIHRoZSBEQU5J U0ggZ3JvdXAgKHNlZSBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL3dnL2RhbmlzaC9hYm91 dC8pIGlzIHJlbGV2YW50Lg0KDQpBZ3JlZWQgYWJvdXQgU1VJQiwgbm90IHF1aXRlIHN1cmUgYWJv dXQgREFOSVNILiBEQU5JU0ggaXMgYWJvdXQgY2VydGlmaWNhdGUgYmFzZWQgYXV0aGVudGljYXRp b24gYW5kIFBLSSBleHRlbnNpb25zLCB3aGlsZSBTTklGIGlzIGFib3V0IGVuZC10by1lbmQgcmVs YXllZCB0cnVzdGVkIFRMUyB0aGF0IHJlbGllcyBvbiB0aGUgc3RhbmRhcmQgUEtJLg0KDQpSZWdh cmRpbmcgdGhlIHVzZSBpbiBJb1QgSSBoYXZlIGEgcXVlc3Rpb24gZm9yIG15IHVuZGVyc3RhbmRp bmcuDQoNCkluIGEgbnV0c2hlbGwsIHlvdSBpbnRyb2R1Y2UgYSBwcm94eSB0aGF0IGFsbG9jYXRl cyBhIGhvc3RuYW1lIGFuZCByZXF1ZXN0cyBhIGNyZWF0aW9uIG9mIGEgY2VydGlmaWNhdGUgb24g YmVoYWxmIG9mIHRoZSBJb1QgZGV2aWNlLg0KDQpDb3JyZWN0LCBwbHVzIGFuIGUyZSBUTFMgcmVs YXkuDQoNClRvIGdldCB0aGlzIHRvIHdvcmsgeW91IHJlbHkgb24gdGhyZWUgYXNzdW1wdGlvbnM6 DQooMSkgVGhlcmUgaGFzIHRvIGJlIGEgY29tbXVuaWNhdGlvbiBpbmZyYXN0cnVjdHVyZSB0aGF0 IGFzc29jaWF0ZXMgdGhlICJhbm9ueW1vdXMiIGhvc3RuYW1lIHdpdGggYSBzcGVjaWZpYyBkZXZp Y2UgYW5kIGNvbnZleXMgdGhlc2UgaWRlbnRpZmllcnMgdG8gdGhlIHJlbGV2YW50IHBhcnRpZXMu DQoNCkVhY2ggZGV2aWNlIGlzIGNvbmZpZ3VyZWQgd2l0aCBhbiBpbml0VXJsIHBvaW50aW5nIHRv IGEgc3BlY2lmaWMgQ0EgcHJveHkgdGhhdCBhbGxvY2F0ZXMgYSByYW5kb20gaG9zdG5hbWUgKGEg Q04gdG8gYmUgbW9yZSBhY2N1cmF0ZSksIG5vcm1hbGx5IGEgc3ViZG9tYWluIG9mIGEgbWFzdGVy IGRvbWFpbiB0aGF0IGhhcyBhIHdpbGRjYXJkIEROUyByZWNvcmQgcG9pbnRpbmcgdG8gdGhlIENB IHByb3h5Lg0KRXhhbXBsZSAtIHRoZSBpbml0VXJsIGZvciBwdWJsaWMgZXhwZXJpbWVudGFsIHVz ZSAtIGh0dHBzOi8vc25pZi5zbmlmLnh5ejo0NDQzIFRoZSBhbGxvY2F0ZWQgd2lsZGNhcmQgQ04g aXMgYSBzdWJkb21haW4gb2YgdGhlIG1hc3RlciBkb21haW4gc25pZi54eXoNCg0KKDIpIFlvdSBh c3N1bWUgdGhhdCBhIHBhcnR5IHRoYXQgd2FudHMgdG8gY29udGFjdCB0aGUgSW9UIGRldmljZSBp cyBhYmxlIHRvIHJlYWNoIHRoZSBkZXZpY2UgKGkuZS4gdGhlIElvVCBkZXZpY2UgaXMgbm90IGJl aGluZCBhIGZpcmV3YWxsIG9yIE5BVCkuDQoNCkJvdGggdGhlIElvVCBkZXZpY2UgYW5kIHRoZSBj bGllbnQgY29ubmVjdCB0byB0aGUgU05JRiByZWxheS4gVGhlIHdob2xlIHB1cnBvc2Ugb2YgU05J RiBpcyB0byBiZSBhYmxlIHRvIHdvcmsgZnJvbSBiZWhpbmQgTkFUIC8gZmlyZXdhbGwgL2V0Yywg YW5kIGl0J3MgYmVlbiBjb25maXJtZWQgdG8gd29yayBpbiBwcmUtcHJvZHVjdGlvbi4gSW4gZmFj dCBJIGhhZCBhIG1pbm9yIGhpY2t1cCB3aXRoIEZvcnRpZ2F0ZSBpbiB0aGUgcHJvY2VzcyBvZiB0 ZXN0aW5nIHdoaWNoIGhhcyBiZWVuIHJlc29sdmVkLg0KVGhlcmUgYXJlIHNpbXBsaWZpZWQgZGlh Z3JhbXMgb24gaHR0cHM6Ly9zbmlmLmhvc3QgdG8gaWxsdXN0cmF0ZSB0aGUgY29uY2VwdC4NCg0K KDMpIFNvbWVvbmUgb3BlcmF0aW5nIElvVCBkZXZpY2VzIGhhcyB0byB0cnVzdCB0aGUgcHJveHkg c2luY2UgaXQgaXMgZWFzeSBmb3IgdGhlIHByb3h5IHRvIGFzc29jaWF0ZSBhIGhvc3RuYW1lIHdp dGggYSBwdWJsaWMga2V5IHRoYXQgd2FzIGNyZWF0ZWQgYnkgdGhlIHByb3h5IChyYXRoZXIgdGhh biB0aGUgZW5kIGRldmljZSkuIFRoaXMgZXNzZW50aWFsbHkgYWxsb3dzIHRoZSBwcm94eSB0byBp bXBlcnNvbmF0aW5nIHRoZSBJb1QgZGV2aWNlLg0KDQpJcyBteSB1bmRlcnN0YW5kaW5nIGNvcnJl Y3Q/DQoNClllcywgSSBtZW50aW9uZWQgdGhpcyB2dWxuZXJhYmlsaXR5IGluIHRoZSBzZWN1cml0 eSBzZWN0aW9uLiBUaGUgYW5zd2VyIGlzDQotIHdhdGNoIHRoZSBwdWJsaWMgVExTIHRyYW5zcGFy ZW5jeSBsb2dzLCBhbnkgcGFydHkgY2FuIGRvIGl0LiBJZiBhbnkgb3ZlcmxhcHBpbmcgQ05zIGFy ZSBmb3VuZCAtIHRoZSBDQSBwcm94eSBpcyBwZXJtYW5lbnRseSBjb21wcm9taXNlZCwNCi0gZG8g bm90IHVzZSByYW5kb20gQ0EgcHJveGllcyBvd25lZCBieSB1bmtub3duIHBhcnRpZXMuDQoNCkNp YW8NCkhhbm5lcw0KDQpBbnkgZnVydGhlciBxdWVzdGlvbnMvc3VnZ2VzdGlvbnMgYXJlIHdlbGNv bWUuDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBTZWNkaXNwYXRjaCA8c2Vj ZGlzcGF0Y2gtYm91bmNlc0BpZXRmLm9yZzxtYWlsdG86c2VjZGlzcGF0Y2gtYm91bmNlc0BpZXRm Lm9yZz4+IE9uIEJlaGFsZiBPZiBKaW0gWnVib3YNClNlbnQ6IEZyaWRheSwgRmVicnVhcnkgMTEs IDIwMjIgMTI6MjIgQU0NClRvOiBzZWNkaXNwYXRjaEBpZXRmLm9yZzxtYWlsdG86c2VjZGlzcGF0 Y2hAaWV0Zi5vcmc+OyBNaWNoYWVsIFJpY2hhcmRzb24gPG1jcitpZXRmQHNhbmRlbG1hbi5jYTxt YWlsdG86bWNyK2lldGZAc2FuZGVsbWFuLmNhPj47DQpKaW0gWnVib3YgPGlldGYtbGlzdEBjb21t ZXJjZWJ5dGUuY29tPG1haWx0bzppZXRmLWxpc3RAY29tbWVyY2VieXRlLmNvbT4+OyBpb3RvcHNA aWV0Zi5vcmc8bWFpbHRvOmlvdG9wc0BpZXRmLm9yZz47IGFuaW1hQGlldGYub3JnPG1haWx0bzph bmltYUBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbU2VjZGlzcGF0Y2hdIEktRDogRGVwbG95aW5n IFB1YmxpY2x5IFRydXN0ZWQgVExTIFNlcnZlcnMNCm9uIElvVCBEZXZpY2VzIFVzaW5nIFNOSS1i YXNlZCBFbmQtdG8tRW5kIFRMUyBGb3J3YXJkaW5nIChTTklGKQ0KDQpUaGFua3MgZm9yIHRoZSBm ZWVkYmFjayBhZ2FpbiwgbXkgY29tbWVudCBhcmUgYmVsb3cuDQpJIHN1Ym1pdHRlZCBhIG5ldyB2 ZXJzaW9uIG9mIHRoZSBkcmFmdCB0byByZWZsZWN0IHNvbWUgY2hhbmdlcy4NCg0KT24gRmVicnVh cnkgMTAsIDIwMjIgMTowMjo0OCBQTSBFU1QsIE1pY2hhZWwgUmljaGFyZHNvbiA8bWNyK2lldGZA c2FuZGVsbWFuLmNhPG1haWx0bzptY3IraWV0ZkBzYW5kZWxtYW4uY2E+PiB3cm90ZToNCg0KSmlt IFp1Ym92IDxpZXRmLWxpc3RAY29tbWVyY2VieXRlLmNvbTxtYWlsdG86aWV0Zi1saXN0QGNvbW1l cmNlYnl0ZS5jb20+PiB3cm90ZToNCg0KIFRoaXMgd2FzIGFsc28gb24gdGhlIElFVEYxMTIgSU9U T1BTIFdHIGFnZW5kYToNCiBzbGlkZXM6DQogaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9t ZWV0aW5nLzExMi9tYXRlcmlhbHMvc2xpZGVzLTExMi1pb3RvcHMtc3VpYi1icm93c2luZy1sb2Nh bC13ZWItcmVzb3VyY2VzLWluLWEtc2VjdXJlLXVzYWJsZS1tYW5uZXItaW90LWRldmljZS1jb25m aWd1cmF0aW9uLWFzLWEtc3BlY2lhbC1jYXNlLTAwDQogdmlkZW86ICBodHRwczovL3lvdXR1LmJl L09JbEpyVXZ3RGNJP3Q9MTY0OQ0KDQogYW5kIHdlIGhvcGUgdG8gcmV0dXJuIGF0IElFVEYxMTMu DQoNCg0KDQpSaWdodCwgbG9va3MgbGlrZSBTVUlCIGlzIHdvcmtpbmcgb24gYSBzaW1pbGFyIHBy b2JsZW0uIFRoYW5rcyBmb3INCnBvaW50aW5nIHRoaXMgb3V0LiBJbiBwYXJ0aWN1bGFyLCB0aGUg IlNvbCAjNiBEZXZpY2UgbmFtZSBETlMiIHNsaWRlDQpsb29rcyBxdWl0ZSBzaW1pbGFyIHRvIFNO SUYgQ0EgUHJveHkgKFNlY3Rpb24gMykuIEhvd2V2ZXIsIFNVSUIgcHVyc3Vlcw0KYmlnZ2VyIGlu ZnJhc3RydWN0dXJhbCBnb2FscyBzdWNoIGFzIGNoYW5naW5nIHRoZSBsb2NhbGhvc3QgVExTDQpj b25uZWN0aW9uIHBvbGljaWVzIChJIHRvdGFsbHkgYWdyZWUgYW5kIHJlYWxseSBhcHByZWNpYXRl IHRoZSBlZmZvcnQpLA0Kd2hpbGUgU05JRiBpcyBhIGZ1bmN0aW9uaW5nIHNvbHV0aW9uIHdpdGhp biB0aGUgZXhpc3RpbmcNCmluZnJhc3RydWN0dXJlLCB0ZXN0ZWQgYW5kIHByb3ZlbiB0byB3b3Jr IGluIHByZS1wcm9kdWN0aW9uLg0KDQpUaGUgc2xpZGVzIG1heSBiZSB0b28gdmFndWUuICBDaGFu Z2luZyB0aGUgVExTIHBvbGljaWVzIGlzIGEgcG9zc2libGUNCnNvbHV0aW9uLCBidXQgcHJvYmFi bHkgYW4gaW1wcmFjdGljYWwgb25lLiAgTmV2ZXJ0aGVsZXNzLCBtYW55IHBlb3BsZQ0KKG5vdCBz dGVlcGVkIGluIHRoZSBhcnRzLCBhbmQgb2Z0ZW4gZmFpbGxpbmcgaW50byB0aGUgUEhCIGNhdGVn b3J5KQ0KdGhpbmsgdGhhdCBpdCBpcyBhbiBvYnZpb3VzIHNvbHV0aW9uLCBzbyB3ZSBsaXN0IGl0 IGluIG9yZGVyIHRvIGV4cGxhaW4gd2h5IGl0IHdvbid0IHdvcmsuDQoNClllcywgc3RpbGwgc2Fk IHRoYXQgbG9jYWxob3N0IHNsaXBwZWQgdGhyb3VnaCB0aGUgY3JhY2tzIHdoZW4gdGhlIG9yaWdp bmFsIHNlY3VyaXR5IHN0YW5kYXJkcyB3ZXJlIHdyaXR0ZW4uDQoNCg0KDQogVGhlIFNVSUIgcHJv YmxlbSBhZGRyZXNzZXMgdGhlIGNoYWxsZW5nZSBvZiBjb25uZWN0aW5nICpsb2NhbGx5KiB0byBh DQogZGV2aWNlLA0KIGFuZCBkb2luZyBpdCBzZWN1cmVseS4gIEZvciB0aGlzIHRvIGJlIHBvc3Np YmxlIHdpdGggUkZDNjEyNS1ETlMtSUQNCiBzdGFuZGFyZA0KIGJyb3dzZXIsIHdlIG5lZWQgYSBu YW1lIGZvciB0aGUgZGV2aWNlLCBhbmQgd2UgbmVlZCBhIHdheSB0byB0cmFuc2xhdGUNCiB0aGF0 DQogbmFtZSBpbnRvIGEgbG9jYWxseSByZWFjaGFibGUgSVAgYWRkcmVzcy4NCg0KIFRoZSBTTklG IHByb3Bvc2FsIGRvZXMgbm90IHF1aXRlIHNvbHZlIHRoZSBhYm92ZSBwcm9ibGVtLg0KDQoNCg0K SW4gZmFjdCwgSSBvcmlnaW5hbGx5IGRlc2lnbmVkIFNOSUYgdG8gc29sdmUgdGhpcyBzcGVjaWZp YyBwcm9ibGVtIC0NCmxvY2FsLXRvLWxvY2FsIHRydXN0ZWQgVExTIGNvbm5lY3Rpb25zLg0KDQpB aCwgdmVyeSBuaWNlIHRvIGtub3cuDQoNCiogSXNzdWUgYSB3aWxkY2FyZCBjZXJ0IHRocm91Z2gg U05JRiBDQSBQcm94eQ0KKGUuZy4gQ049Ki5kb21haW4uc25pZi54eXopLCBzZXQgYSBETlMgcmVj b3JkIGZvcg0KbG9jYWxob3N0LmRvbWFpbi5zbmlmLnh5eiB0byBwb2ludCB0byBsb2NhbGhvc3Qn cyBJUHY0L3Y2LCBhbmQgdXNlDQpodHRwczovL2xvY2FsaG9zdC5kb21haW4uc25pZi54eXogKG9y IG90aGVyIGFwcCBwcm90b2NvbCAtIGltYXBzDQpldGMpLiBIb3dldmVyLCBsb29rcyBsaWtlIHNv bWUgY2xpZW50cyB0cmVhdCB0aGUgbG9jYWxob3N0IElQIGFzDQppbmhlcmVudGx5IHVuc2VjdXJl LCBhbmQgaXNzdWUgYSB3YXJuaW5nIGV2ZXIgaXMgdGhlIGNlcnQgaXMgcGVyZmVjdGx5DQp2YWxp ZC4gVGhlIG9wdGlvbiBpcyBzdGlsbCBwb3NzaWJsZSwgYnV0IHRoZSBhcHBsaWNhYmlsaXR5IG1p Z2h0IGJlDQpsaW1pdGVkLg0KDQpUaGUgcHJvY2VzcyB3ZSBkZXNjcmliZWQgYXQNCg0KaHR0cHM6 Ly9zcGVjcy5tYW55c2VjdXJlZC5vcmcvc3VpYi9Tb2x1dGlvbnMvZG5zbmFtZS1lbWJlZGRlZC1z b2x1dGlvbg0KDQphbHNvIHVzZXMgYSB3aWxkY2FyZCBjZXJ0LCBidXQgaGFzIGEgbWFnaWMgYXV0 aG9yaXRhdGl2ZSBETlMgc2VydmVyDQp0aGF0IHRyYW5zbGF0ZXMgdGhlIGxlZnQtbW9zdCBsYWJl bCBpbnRvIGFuIEEgb3IgQUFBQSByZWNvcmQuICBJdCdzDQpyYXRoZXIgYSBjdXRlIGhhY2ssIGJ1 dCBhdCBsZWFzdDoNCiAgYSkgaXQncyBjYWNoYWJsZQ0KICBiKSBpdCBjb3VsZCBldmVuIGJlIGNh bGN1bGF0ZWQgbG9jYWxseSwgaWYgb25lIGlnbm9yZXMgRE5TU0VDLg0KDQpZZXMsIHVzaW5nIGEg bG9jYWwgbmV0d29yayBJUCBpbnN0ZWFkIG9mIGEgbG9jYWxob3N0IElQIGlzIGFjdHVhbGx5IGEg c21hcnQgaWRlYS4NCkhvd2V2ZXIsIGlubGluaW5nIHRoZSBsb2NhbCBJUCBpbiB0aGUgaG9zdG5h bWUsIGFzIFNVSUIgZG9lcywgbWVhbnMgeW91J2xsIGhhdmUgdG8gY2hhbmdlIHRoZSBob3N0bmFt ZSBpbiB5b3VyIGNsaWVudCBldmVyeSB0aW1lIHlvdXIgbmV0d29yayBpcyBjaGFuZ2VkLg0KSSBo YXZlIGFuIHRob3VnaHQgZm9yIFNOSUYgaW1wcm92ZW1lbnQgLSBTTklGIGNvbm5lY3RvciBzZW5k cyBhIFNOSUYgRE5TIGNvbW1hbmQgdG8gc2V0IGEgZHluYW1pYyBETlMgQS9BQUFBIGZvciBhIGNl cnRhaW4gaG9zdG5hbWUgd2l0aGluIHRoZSBDTiB3aWxkY2FyZCwgYW5kIHRoZSBDQSBwcm94eSB1 cGRhdGVzIHRoZSBETlMgYWNjb3JkaW5nbHkuIFRoaXMgd2F5IHRoZSBob3N0bmFtZSBjYW4gYmUg cGVybWFuZW50LCBidXQgd2l0aCBkeW5hbWljIEROUy4NCkFub3RoZXIgcHJvYmxlbSAtIG1vc3Qg cGxhdGZvcm1zIHdvbid0IGxldCB5b3UgYmluZCB0byBwb3J0IDwgMTAyNCB1bmxlc3MgeW91J3Jl IGEgcm9vdC4gTWlnaHQgYmUgb2sgZm9yIGEgZGV2aWNlIG1hbnVmYWN0dXJlciwgYnV0IGlzIGEg cG90ZW50aWFsIHNob3cgc3RvcHBlciBmb3IgYW55IHVzZXIgc3BhY2UgYXBwLiBSZWxheWVkIFNO SUYgd29ya3MgYXJvdW5kIHRoaXMgcHJvYmxlbSBzaW5jZSB0aGUgbGlzdGVuaW5nIHBvcnRzIGFy ZSBvbiB0aGUgcmVsYXkuDQoNCg0KDQoqIEFub3RoZXIgb3B0aW9uIGlzIHRvIG92ZXJyaWRlIHRo ZSBJUCByb3V0aW5nIHJ1bGVzLiBJdCBpcyB0b3RhbGx5DQpwb3NzaWJsZSBvbiBpT1MgYW5kIE1h YyB0aHJvdWdoIGEgdXNlcnNwYWNlIFZQTiAob25seSBvbmUgVlBOIHBlcg0KZGV2aWNlIHRob3Vn aCAtIGJld2FyZSBvZiBwb3NzaWJsZSBjb25mbGljdHMpLiBJbiBmYWN0IEkgaGF2ZSBhDQpmdW5j dGlvbmluZyBzb2x1dGlvbiBmb3IgaXQsIGluIGJldGEgbm93IC0NCg0KVGhhdCBkb2Vzbid0IHJl YWxseSBzY2FsZSB0byBtYW55IGRpZmZlcmVudCBkb21haW5zLg0KDQpUb3RhbGx5IGFncmVlZCwg SSBqdXN0IG1lbnRpb25lZCB0aGF0IHRoaXMgb3B0aW9uIHdvcmtzIGZvciAqc29tZSogY2FzZXMs IHR1bi90YXAgYSBpcyBwb3NzaWJsZSBvcHRpb24gdG9vIGlmIHlvdSdyZSBhIHJvb3QuDQoNCg0K DQpTdGlsbCwgaWYgU05JRiBpcyByZXBsYWNpbmcgYSBtYW51ZmFjdHVyZXIgcHJvcHJpZXRhcnkg Y2FsbC1ob21lIHByb3RvY29sLA0KdGhlcmUgY291bGQgYmUgYWR2YW50YWdlcyBmcm9tIGhhdmlu ZyB3ZWxsIHJldmlld2VkIGNvZGUgYmFzZXMsIGFuZA0KcG90ZW50aWFsbHkgYW4gZWNvc3lzdGVt IG9mIFNOSUYgUHJvdmlkZXJzIHRoYXQgbWFudWZhY3R1cmVycyBjb3VsZA0Kb3V0c291cmNlDQoN Cg0KDQp0by4gIEF6dXJlL0FtYXpvbi8uLi4gY291bGQgZWFzaWx5IHJ1biBzdWNoIHNlcnZpY2Vz Lg0KDQoNCg0KSSBzZWUgdHdvIG9wdGlvbnMgLSBhIFNOSUYgc2VydmVyIGltcGxlbWVudGVkIGJ5 IGVhY2ggdmVuZG9yIGZvciB0aGVpcg0Kb3duIGRldmljZXMvc2VydmljZXMsIG9yIGEgYmlnZ2Vy IFNOSUYgU2FhUyBpbXBsZW1lbnRlZCBieSBhIHRydXN0ZWQNCnByb3ZpZGVyLCB1c2VkIGJ5IHZl bmRvcnMuDQoNClllcywgYnV0IHdoYXQncyB0aGUgZmluYW5jaWFsIG1vdGl2ZSBmb3IgdGhpcyBw cm92aWRlcj8NCg0KKDEpIEZvciBhIHZlbmRvciB0byBydW4gdGhlaXIgb3duIFNOSUYgc2VydmVy OiBtYXJrZXQgYXMgYSB0cnVlIGF1ZGl0YWJsZSBlbmQtdG8tZW5kIGZvciBJb1QgZGV2aWNlcyB0 aGV5IG9mZmVyLg0KKDIpIEZvciBhIHZlbmRvciB1c2luZyBTTklGIFNhYVM6IG1hcmtldCBhcyAo MSkgYmFja2VkIGJ5DQp7VHJ1c3RlZEJpZ05hbWV9DQooMykgRm9yIGEge1RydXN0ZWRCaWdOYW1l fSB0byBydW4gU05JRiBTYWFTOiBjb2xsZWN0IGZlZXMgZnJvbSAoMikgZm9yIHVzaW5nIHRoZWly IHNlcnZpY2UgYW5kIGJpZyBuYW1lLg0KDQpBcyBhIG1hdHRlciBvZiBmYWN0LCBTTklGIHJlbGF5 IGlzIGxpZ2h0IG9uIHNlcnZlciByZXNvdXJjZXMuIEkndmUgYmVlbiBydW5uaW5nIGl0IG9uIGEg bWluaW11bSBEaWdpdGFsT2NlYW4gdmlydHVhbCBzZXJ2ZXIgZm9yIG1vbnRocyB3aXRoIG1vcmUg dGhhbiBhIGRvemVuIGNvbm5lY3RvcnMsICAgdGhlIHNlcnZlciBsb2FkIGlzIGEgZnJhY3Rpb24g b2YgYSBwZXJjZW50LiBPZiBjb3Vyc2UgaWYgc29tZWJvZHkgY29ubmVjdHMgSW9UIGNhbWVyYXMg dGhleSBjYW4gZ2VuZXJhdGUgc29tZSB0cmFmZmljLCBidXQgSW9UIHZlbmRvcnMgYWxyZWFkeSBo YW5kbGUgaXQgdGhyb3VnaCB0aGVpciBwcm9wcmlldGFyeSByZWxheXMuDQoNCg0KDQpTTklGIHNl ZW1zIHZlcnkgbXVjaCBJUHY0IE5BVDQ0IGZvY3VzZWQsIGFuZCBpdCBjb3VsZCBiZW5lZml0IGZy b20gc29tZQ0KdW5kZXJzdGFuZGluZyBvZiBJUHY2IGFuZCBJUHY2LW92ZXItSVB2NCB0ZWNobm9s b2dpZXMsDQoNCiBwYXJ0aWN1bGFybHkNCg0KVGVyZWRvLg0KDQoNCg0KU05JRiBpcyBub3QgZXhh Y3RseSBmb2N1c2VkIG9uIHY0LCBpdCB3b3JrcyBmaW5lIHdpdGggdjYgYXMgd2VsbC4gSXQncw0K ZGVzaWduZWQgdG8gd29yayBhcm91bmQgTkFULCB0aGF0J3MgdHJ1ZS4gSG93ZXZlciwgSVB2NiBu ZXR3b3JrcyBtYXkNCnBvc2UgaXNzdWVzIHRvbyAtIGZpcmV3YWxscyBldGMsIHdoaWNoIHdpbGwg cHJldmVudCB0byBkaXJlY3RseSBhY2NlcHQNCmluY29taW5nIFRDUCBvbiBJUHY2IGFkZHJlc3Mu DQoNClRlcmVkbyBjb3VsZCBiZSB1c2VkIGluc3RlYWQgYW5kIGFsbG93cyB0aGUgcmVsYXkgdG8g YmUgc3RhdGVsZXNzIGFuZA0KZGlzdHJpYnV0ZWQsIGFuZCBkZXZvbHZlcyB0byBvcmRpbmFyeSBJ UHY2IHdoZW4gaXQgaXMgcHJlc2VudC4NCg0KWWVzLCBidXQgVGVyZWRvIGlzIElQdjYgc3BlY2lm aWMsIHRoZSB3b3JsZCBpcyBub3Qgc3RyaWN0bHkgSVB2NiB5ZXQuIEFuZCBpdCdzIGEgc3lzdGVt IGxldmVsIHNvbHV0aW9uLCB3aGlsZSBTTklGIHdvcmtzIGZpbmUgaW4gYSB1c2VyIHNwYWNlLg0K DQoNCg0KSXQgY2xlYXJseSBoYXMgdG8gc3BlYWsgSFRUUFMgb25seS4NCg0KDQoNCkkgc3BlY2lm aWVkIEhUVFAgYmVjYXVzZSBQS0NTIzEwIGFuZCBYLjUwOSBhcmUgaW5oZXJlbnRseSBzZWN1cmUg dG8gYmUNCnNlbnQgb3ZlciBhIHBsYWluIGNvbm5lY3Rpb24uDQoNClllcywgYnV0IHRoZXJlIGFy ZSBwcml2YWN5IGNvbmNlcm5zIHdoaWNoIHdpbGwgYmVjb21lIGEgcGFpbiwgc28NCmJldHRlciB0 byBqdXN0IHNheSBIVFRQUyBoZXJlLg0KDQpJIHJlc3BlY3RmdWxseSBkaXNhZ3JlZSwgc3RpbGwg dGhpbmsgSFRUUCBpcyBhbiBlYXNpZXIgYW5zd2VyIGZvciBTTklGLiBUaGUgcHJvYmxlbSB3aXRo IEhUVFBTIGlzIC0gU05JRiByZWxheSAodXN1YWxseSkgcm91dGVzIGh0dHBzIHBvcnQgdG8gU05J RiBjb25uZWN0b3JzLCBhbmQgZG9lcyBub3Qgc2VydmUgaXQgd2l0aGluIHRoZSBzZXJ2ZXIuIEhh dmluZyBhIGRlZGljYXRlZCBob3N0bmFtZSBvciBhbiBhbHRlcm5hdGUgcG9ydCBtZWFucyB0aGFu IFNOSUYgY29ubmVjdG9ycyBuZWVkIGFkZGl0aW9uYWwgY29uZmlndXJhdGlvbiBvcHRpb25zLCBv ciBhZGRpdGlvbmFsIGRpc2NvdmVyeSBwcm90b2NvbHMuIE9uIHRoZSBvdGhlciBoYW5kLCBIVFRQ IGFsbG93cyB0byBkZXJpdmUgYWxsIEFQSSBVUkxzIGRldGVybWluaXN0aWNhbGx5IGZyb20gdGhl IENOLg0KSSBhZGRyZXNzZWQgdGhlIHBvc3NpYmxlIHNlY3VyaXR5IGNvbmNlcm5zIGluIG1vcmUg ZGV0YWlscyBhbmQgYW1lbmRlZCB0aGUgU2VjdXJpdHkgc2VjdGlvbiBpbiB0aGUgZHJhZnQuDQoN Cg0KDQpUaGUgYmVzdCBvcHRpb24gaXMgdGhlIG1hbnVmYWN0dXJlciBJIGJlbGlldmUuIFRoZSBt YW51ZmFjdHVyZXIgY2FuDQpoYXZlIGVpdGhlciB0aGVpciBvd24gU05JRiBzZXJ2ZXIsIG9yIHdv cmsgd2l0aCBhIHRydXN0ZWQgU2FhUy4gVGhpcw0Kd2F5IGl0J3MgemVybyBzZXR1cCBmb3IgdGhl IGVuZCB1c2VyLCBhbmQgZG9lc24ndCBuZWVkIGFueQ0KaW5mcmFzdHJ1Y3R1cmUgYWRkaXRpb25z Lg0KDQpBZ3JlZWQsIHRoZSBtYW51ZmFjdHVyZXIgaGFzIHRvIHByb3Zpc2lvbiBhIGNyZWRlbnRp YWwuDQoNClllcyBJIHByb3Bvc2VkIHNvbWUgb3V0bGluZXMgaW4gdGhlIHNlY3VyaXR5IHNlY3Rp b24sIG1vcmUgZGV0YWlsZWQgc3BlY3MgYXJlIHByb2JhYmx5IGJldHRlciB0byBkZXNjcmliZSBp biBhIHNlcGFyYXRlIGRyYWZ0Lg0KDQoNCg0KU3VyZSwgZWxsaXB0aWMgY3VydmVzIGFyZSBiZXR0 ZXIsIGJ1dCBzb21lIG9sZCBzY2hvb2wgY2xpZW50cyBtYXkgaGF2ZQ0KcHJvYmxlbXMgd2l0aCB0 aGVtLiBJdCBtYXkgbWFrZSBzZW5zZSB0byBub3QgbWVudGlvbiB0aGUgcmVjb21tZW5kZWQNCmFs Z29yaXRobSBpbiB0aGUgZHJhZnQsIGFuZCBqdXN0IHRvIGZvbGxvdyB0aGUgQ0EncyByZWNvbW1l bmRhdGlvbnMuDQoNCkVDRFNBIGFjY2VsZXJhdGlvbiBpcyBwcmV0dHkgbXVjaCB1YmlxdWl0b3Vz LCB3aGlsZSBSU0EgaXMgbm90Lg0KDQpIb25lc3RseSBJIGRvbid0IHRoaW5rIGFjY2VsZXJhdGlv biBpcyBzdWNoIGEgYmlnIGRlYWwsIG1vc3Qgb2YgVExTIGpvYiBpcyBzeW1tZXRyaWMgY2lwaGVy cyBhbnl3YXkuIEJ1dCBJIGFncmVlIC0gaXQncyBiZXR0ZXIgdG8gZm9sbG93IHRoZSBDQSBzdWdn ZXN0aW9ucyBhbmQgaW5kdXN0cnkgcHJhY3RpY2VzLg0KDQoNCg0KSSBiZWxpZXZlIHRoZXJlJ3Mg bm8gc2VjdXJpdHkgaXNzdWUsIGFzIGxvbmcgYXMgdGhlIENOIGVudHJvcHkgaXMgc3VmZmljaWVu dC4NCg0KDQoNCkkgc3BlY2lmaWVkIHRoZSBYLVNOSUYtQ046IGFzIG1hbmRhdG9yeSwgYW5kIHRl eHQvcGxhaW4gYm9keSBhcyBhbg0Kb3B0aW9uYWwgZHVwbGljYXRlIG9mIGl0LiBUbyBtYWtlIGl0 IGNsZWFuZXIsIEkgY2FuIHJlbW92ZSB0aGUgYm9keQ0KZnJvbSB0aGUgc3BlY3MgYW5kIHNheSB0 aGUgcmVzcG9uc2UgYm9keSBpcyB0byBiZSBpZ25vcmVkLg0KDQpJZiBib3RoIGFyZSBwcmVzZW50 LCBhbmQgdGhleSBkb24ndCBtYXRjaCwgdGhlbiB0aGVyZSBpcyBjb25mdXNpb24uDQpTbyBqdXN0 IGdvIHdpdGggb25lLiAgSSB0aGluayB0aGF0IGl0IHNob3VsZCBhY3R1YWxseSBiZSBhIEpTT04g b3IgQ0JPUiBwYXlsb2FkIHJldHVybi4NCg0KQWdyZWVkLCBJIHJlbW92ZWQgdGhlIHJlc3BvbnNl IGJvZHkgZnJvbSB0aGUgZHJhZnQsIGdvaW5nIHdpdGggdGhlIGhlYWRlci4NCg0KDQoNClRoZXkg KmFyZW4ndCogd2hhdCBJQU5BIHdvdWxkIGNhbGwgIklQIHByb3RvY29scyIsIHdoaWNoIHdvdWxk IGJlIHRoaW5ncw0KbGlrZQ0KVENQLCBVRFAsIFNDVFAsIEVTUCwgLi4uDQoNCg0KDQpIYXMgSUFO QSAqYWxyZWFkeSogcmVnaXN0ZXJlZCBwb3J0IDcxMjMgdGhlbj8NCg0KDQoNCkl0J3Mgbm90IGFu IElQIHByb3RvY29sLiBJdCdzIGEgc2VydmljZSB0aGF0IGxpc3RlbnMgb24gVENQIDcxMjMsIEkN CnJlZ2lzdGVyZWQgd2l0aCBJQU5BIGJhc2VkIG9uIGEgcHJldmlvdXMgdmVyc2lvbiBvZiB0aGUg ZG9jdW1lbnQsDQpiZWZvcmUgSSB0dXJuZWQgaXQgaW50byBhbiBJLUQuDQoNCkkgdGhpbmsgeW91 IHNob3VsZCBkcm9wIHRoZSAic25pZi0qIiBzZW50ZW5jZSBhcyBpdCBtYWtlcyBubyBzZW5zZS4N CllvdSBoYXZlIGFscmVhZHkgYWxsb2NhdGVkIFRDUCBwb3J0IDcxMjMgdG8gdGhlIFNOSUYgKnNl cnZpY2UqLCBzbw0KdGhhdCdzIGdyZWF0Lg0KDQpJdCdzIGFjdHVhbGx5IGNhbGxlZCAiU2Vydmlj ZSBOYW1lcyIgaW4gSUFOQSB0ZXJtaW5vbG9neSwgc29ycnkgZm9yIHRoZSBjb25mdXNpb24uIEkg dXBkYXRlZCBpbiB0aGUgZHJhZnQuDQoNCg0KLS0NCl0gICAgICAgICAgICAgICBOZXZlciB0ZWxs IG1lIHRoZSBvZGRzISAgICAgICAgICAgICAgICAgfCBpcHY2IG1lc2ggbmV0d29ya3MgWw0KXSAg IE1pY2hhZWwgUmljaGFyZHNvbiwgU2FuZGVsbWFuIFNvZnR3YXJlIFdvcmtzICAgICAgICB8ICAg IElvVCBhcmNoaXRlY3QgICBbDQpdICAgICBtY3JAc2FuZGVsbWFuLmNhPG1haWx0bzptY3JAc2Fu ZGVsbWFuLmNhPiAgaHR0cDovL3d3dy5zYW5kZWxtYW4uY2EvICAgICAgICB8ICAgcnVieSBvbiBy YWlscyAgICBbDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQoNClNlY2Rpc3Bh dGNoIG1haWxpbmcgbGlzdA0KU2VjZGlzcGF0Y2hAaWV0Zi5vcmc8bWFpbHRvOlNlY2Rpc3BhdGNo QGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zZWNkaXNw YXRjaA0KSU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwgYW5kIGFu eSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2aWxlZ2Vk LiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90aWZ5IHRo ZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVudHMgdG8g YW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUgb3IgY29w eSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0KDQpfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXw0KDQpTZWNkaXNwYXRjaCBtYWlsaW5nIGxpc3QNClNlY2Rp c3BhdGNoQGlldGYub3JnPG1haWx0bzpTZWNkaXNwYXRjaEBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2VjZGlzcGF0Y2gNCg0KLS0NCklvdG9wcyBtYWls aW5nIGxpc3QNCklvdG9wc0BpZXRmLm9yZzxtYWlsdG86SW90b3BzQGlldGYub3JnPg0KaHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9pb3RvcHMNCklNUE9SVEFOVCBOT1RJQ0U6 IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZp ZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGlu dGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFu ZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBp dCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFu eSBtZWRpdW0uIFRoYW5rIHlvdS4NCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0 aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFs c28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwg cGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2Ug dGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2Us IG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlv dS4NCklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkg YXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4g SWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUg c2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFu eSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3JlIG9yIGNvcHkg dGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCg== --_000_DBBPR08MB5915AC6A162154A6B53D27B7FA069DBBPR08MB5915eurp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OldpbmdkaW5nczsNCglwYW5vc2UtMTo1IDAgMCAwIDAgMCAwIDAgMCAw O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6 MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkRlbmdYaWFu Ow0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEgMSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZh bWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIgMTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZh Y2UNCgl7Zm9udC1mYW1pbHk6IlxARGVuZ1hpYW4iOw0KCXBhbm9zZS0xOjIgMSA2IDAgMyAxIDEg MSAxIDE7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25zb2xhczsNCglwYW5vc2UtMToy IDExIDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3Jt YWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCWZvbnQtc2l6 ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KYTpsaW5rLCBz cGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJY29sb3I6Ymx1ZTsN Cgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnByZQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6 OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1hcmdpbjow aW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1m YW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpwLk1zb0xpc3RQYXJhZ3JhcGgsIGxpLk1zb0xpc3RQYXJh Z3JhcGgsIGRpdi5Nc29MaXN0UGFyYWdyYXBoDQoJe21zby1zdHlsZS1wcmlvcml0eTozNDsNCglt YXJnaW4tdG9wOjBpbjsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1hcmdpbi1ib3R0b206MGluOw0K CW1hcmdpbi1sZWZ0Oi41aW47DQoJZm9udC1zaXplOjExLjBwdDsNCglmb250LWZhbWlseToiQ2Fs aWJyaSIsc2Fucy1zZXJpZjt9DQpzcGFuLkhUTUxQcmVmb3JtYXR0ZWRDaGFyDQoJe21zby1zdHls ZS1uYW1lOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltc28tc3R5bGUtcHJpb3JpdHk6OTk7 DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIjsNCglmb250LWZhbWlseTpDb25z b2xhczt9DQpzcGFuLkVtYWlsU3R5bGUyMw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1yZXBs eTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0ZXh0 O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQt c2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0K CW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3Bh Z2U6V29yZFNlY3Rpb24xO30NCi8qIExpc3QgRGVmaW5pdGlvbnMgKi8NCkBsaXN0IGwwDQoJe21z by1saXN0LWlkOjEwNzUwMTA3MzE7DQoJbXNvLWxpc3QtdGVtcGxhdGUtaWRzOi0xOTkxOTk0Mjcy O30NCkBsaXN0IGwwOmxldmVsMQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJ bXNvLWxldmVsLXRleHQ674K3Ow0KCW1zby1sZXZlbC10YWItc3RvcDouNWluOw0KCW1zby1sZXZl bC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2kt Zm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWwy DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7 DQoJbXNvLWxldmVsLXRhYi1zdG9wOjEuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246 bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsN Cglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWwzDQoJe21zby1sZXZlbC1udW1i ZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1z dG9wOjEuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVu dDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1i b2w7fQ0KQGxpc3QgbDA6bGV2ZWw0DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsN Cgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIuMGluOw0KCW1zby1s ZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFu c2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2 ZWw1DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrv grc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjIuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRp b246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBw dDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw2DQoJe21zby1sZXZlbC1u dW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRh Yi1zdG9wOjMuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpT eW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxl dDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjMuNWluOw0KCW1z by1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNv LWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6 bGV2ZWw4DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4 dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOjQuMGluOw0KCW1zby1sZXZlbC1udW1iZXItcG9z aXRpb246bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEw LjBwdDsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDA6bGV2ZWw5DQoJe21zby1sZXZl bC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVs LXRhYi1zdG9wOjQuNWluOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0 LWluZGVudDotLjI1aW47DQoJbXNvLWFuc2ktZm9udC1zaXplOjEwLjBwdDsNCglmb250LWZhbWls eTpTeW1ib2w7fQ0KQGxpc3QgbDENCgl7bXNvLWxpc3QtaWQ6MTQ4OTA1MDczODsNCgltc28tbGlz dC10eXBlOmh5YnJpZDsNCgltc28tbGlzdC10ZW1wbGF0ZS1pZHM6NDU5Njk3NTI0IDYxOTExNTkz MiA2NzY5ODY5MSA2NzY5ODY5MyA2NzY5ODY4OSA2NzY5ODY5MSA2NzY5ODY5MyA2NzY5ODY4OSA2 NzY5ODY5MSA2NzY5ODY5Mzt9DQpAbGlzdCBsMTpsZXZlbDENCgl7bXNvLWxldmVsLXN0YXJ0LWF0 OjA7DQoJbXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+C tzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OlN5bWJvbDsNCgltc28t ZmFyZWFzdC1mb250LWZhbWlseTpEZW5nWGlhbjsNCgltc28tYmlkaS1mb250LWZhbWlseToiVGlt ZXMgTmV3IFJvbWFuIjt9DQpAbGlzdCBsMTpsZXZlbDINCgl7bXNvLWxldmVsLW51bWJlci1mb3Jt YXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Om87DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7 DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsN Cglmb250LWZhbWlseToiQ291cmllciBOZXciO30NCkBsaXN0IGwxOmxldmVsMw0KCXttc28tbGV2 ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674KnOw0KCW1zby1sZXZl bC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0 LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6V2luZ2RpbmdzO30NCkBsaXN0IGwxOmxldmVs NA0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVsLXRleHQ674K3 Ow0KCW1zby1sZXZlbC10YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246 bGVmdDsNCgl0ZXh0LWluZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6U3ltYm9sO30NCkBsaXN0 IGwxOmxldmVsNQ0KCXttc28tbGV2ZWwtbnVtYmVyLWZvcm1hdDpidWxsZXQ7DQoJbXNvLWxldmVs LXRleHQ6bzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBv c2l0aW9uOmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OiJDb3VyaWVy IE5ldyI7fQ0KQGxpc3QgbDE6bGV2ZWw2DQoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxl dDsNCgltc28tbGV2ZWwtdGV4dDrvgqc7DQoJbXNvLWxldmVsLXRhYi1zdG9wOm5vbmU7DQoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0uMjVpbjsNCglmb250 LWZhbWlseTpXaW5nZGluZ3M7fQ0KQGxpc3QgbDE6bGV2ZWw3DQoJe21zby1sZXZlbC1udW1iZXIt Zm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDrvgrc7DQoJbXNvLWxldmVsLXRhYi1zdG9w Om5vbmU7DQoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0Ow0KCXRleHQtaW5kZW50Oi0u MjVpbjsNCglmb250LWZhbWlseTpTeW1ib2w7fQ0KQGxpc3QgbDE6bGV2ZWw4DQoJe21zby1sZXZl bC1udW1iZXItZm9ybWF0OmJ1bGxldDsNCgltc28tbGV2ZWwtdGV4dDpvOw0KCW1zby1sZXZlbC10 YWItc3RvcDpub25lOw0KCW1zby1sZXZlbC1udW1iZXItcG9zaXRpb246bGVmdDsNCgl0ZXh0LWlu ZGVudDotLjI1aW47DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpAbGlzdCBsMTpsZXZl bDkNCgl7bXNvLWxldmVsLW51bWJlci1mb3JtYXQ6YnVsbGV0Ow0KCW1zby1sZXZlbC10ZXh0Ou+C pzsNCgltc28tbGV2ZWwtdGFiLXN0b3A6bm9uZTsNCgltc28tbGV2ZWwtbnVtYmVyLXBvc2l0aW9u OmxlZnQ7DQoJdGV4dC1pbmRlbnQ6LS4yNWluOw0KCWZvbnQtZmFtaWx5OldpbmdkaW5nczt9DQpv bA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQp1bA0KCXttYXJnaW4tYm90dG9tOjBpbjt9DQotLT48 L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVkZWZhdWx0cyB2OmV4dD0i ZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2VuZGlmXS0tPjwhLS1baWYgZ3RlIG1z byA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVkaXQiPg0KPG86aWRtYXAgdjpleHQ9 ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+DQo8 L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1ZSIgdmxpbms9InB1cnBsZSIgc3R5 bGU9IndvcmQtd3JhcDpicmVhay13b3JkIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj5IaSBKaW0sIDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5Hb29k IGRpc2N1c3Npb24uIDxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5CYXNlZCBvbiB3aGF0IHlvdSB3 cm90ZSBiZWxvdyBJIHdhcyBhY3R1YWxseSB3b25kZXJpbmcgaWYgdGhlIHVzZSBvZiBUTFMgb3Ig RFRMUyBhdCB0aGUgYXBwbGljYXRpb24gbGF5ZXIgd291bGRu4oCZdCBldmVuIGJlIGEgYmV0dGVy IHNvbHV0aW9uLiBUaGlzIHdheSB5b3UgY291bGQgcmUtdXNlIGFuIGV4aXN0aW5nIElvVCBkZXZp Y2UgbWFuYWdlbWVudCBpbmZyYXN0cnVjdHVyZSAod2hpY2ggbWF5IGJlIGJhc2VkDQogb24gSFRU UCBidXQgd2lsbCBtb3N0IGxpa2VseSB1c2UgTVFUVCBvciBDb0FQKSBhbmQgdGhlbiB5b3UgYWRk IHRoZSBlbmQtdG8tZW5kIHNlY3VyaXR5IG9uIHRvcCBvZiBpdCBmb3IgdGhvc2UgY2FzZXMgd2hl cmUgeW91IG5lZWQgaXQuIFlvdSB0aGVuIGFsc28gZG8gbm90IGhhdmUgdG8gd29ycnkgYWJvdXQg ZGVwbG95aW5nIGEgc2VwYXJhdGUgcHJveHkuDQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGVy ZSBpcyBzb21lIGluZm9ybWF0aW9uIGFib3V0IHRoaXMgYXBwcm9hY2g6PG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YSBocmVmPSJodHRwczovL2RhdGF0cmFja2VyLmlldGYu b3JnL2RvYy9odG1sL2RyYWZ0LWZyaWVsLXRscy1hdGxzLTA1Ij5odHRwczovL2RhdGF0cmFja2Vy LmlldGYub3JnL2RvYy9odG1sL2RyYWZ0LWZyaWVsLXRscy1hdGxzLTA1PC9hPjxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5DaWFvPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5I YW5uZXM8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9v OnA+PC9wPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQg I0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPjxiPkZyb206PC9iPiBTZWNkaXNwYXRjaCAmbHQ7c2VjZGlzcGF0Y2gtYm91bmNlc0Bp ZXRmLm9yZyZndDsgPGI+T24gQmVoYWxmIE9mDQo8L2I+SmltIFp1Ym92PGJyPg0KPGI+U2VudDo8 L2I+IFNhdHVyZGF5LCBNYXJjaCA1LCAyMDIyIDI6MTAgQU08YnI+DQo8Yj5Ubzo8L2I+IHNlY2Rp c3BhdGNoQGlldGYub3JnOyBIYW5uZXMgVHNjaG9mZW5pZyAmbHQ7SGFubmVzLlRzY2hvZmVuaWdA YXJtLmNvbSZndDs7IEppbSBadWJvdiAmbHQ7aWV0Zi1saXN0QGNvbW1lcmNlYnl0ZS5jb20mZ3Q7 OyBzZWNkaXNwYXRjaEBpZXRmLm9yZzsgTWljaGFlbCBSaWNoYXJkc29uICZsdDttY3IraWV0ZkBz YW5kZWxtYW4uY2EmZ3Q7OyBpb3RvcHNAaWV0Zi5vcmc7IGFuaW1hQGlldGYub3JnPGJyPg0KPGI+ U3ViamVjdDo8L2I+IFJlOiBbU2VjZGlzcGF0Y2hdIFtJb3RvcHNdIEktRDogRGVwbG95aW5nIFB1 YmxpY2x5IFRydXN0ZWQgVExTIFNlcnZlcnMgb24gSW9UIERldmljZXMgVXNpbmcgU05JLWJhc2Vk IEVuZC10by1FbmQgVExTIEZvcndhcmRpbmcgKFNOSUYpPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPkhpIEhhbm5lcyw8 YnI+DQo8YnI+DQpHb29kIG92ZXJ2aWV3IG9mIHN0cmF0ZWdpYyBhcHByb2FjaGVzLCBsZXQgbWUg YWRkIGFub3RoZXIgZGltZW5zaW9uIC08YnI+DQotIENhbiB0aGUgcmVsYXkgYWNjZXNzIGFueSBp bmZvcm1hdGlvbiBjb21tdW5pY2F0ZWQgYmV0d2VlbiB0aGUgZGV2aWNlIGFuZCB0aGUgdXNlciw8 YnI+DQotIElmIHRoZSBhbnN3ZXIgaXMgX25vXyAtIGNhbiB0aGUgdXNlciBvciBzb21lIGluZGVw ZW5kZW50IHBhcnR5IHZlcmlmeSB0aGUgdmFsaWRpdHkgb2Ygc3VjaCBjbGFpbS48YnI+DQo8YnI+ DQpJbiBjYXNlIG9mIFNOSUYsIHRoZSBzZXR1cCBjb25zaXN0cyBvZjxicj4NCi0gYW4gSW9UIGRl dmljZSBjYXBhYmxlIG9mIHNlcnZpbmcgSFRUUFMgKHVzZXIgZnJpZW5kbHkgcGFnZXMgb3IgYW4g QVBJKSwgcnVubmluZyBhIFNOSUYgY29ubmVjdG9yLDxicj4NCi0gYSB3ZWIgYmFzZWQgZGV2aWNl IG1hbmFnZXIgb24gdGhlIHVzZXIgc2lkZSB0aGF0IHdvcmtzIHdpdGggdGhlIGRldmljZSdzIEhU VFBTIGNvbnRlbnQgKGFuZCBleHBlY3RzIGEgdHJ1c3RlZCBjZXJ0KSw8YnI+DQotIGEgU05JRiBy ZWxheSAvIENBIHByb3h5IHNlcnZlciBpbiB0aGUgY2xvdWQsPGJyPg0KLSBwb3RlbnRpYWxseSwg YW4gaW5kZXBlbmRlbnQgb2JzZXJ2ZXIgdGhhdCB3YXRjaGVzIFRMUyB0cmFuc3BhcmVuY3kgbG9n cyBhbmQgcmFpc2VzIGFuIGFsZXJ0IGlmIGFueSBkdXBsaWNhdGUgY2VydHMgYXJlIGZvdW5kIGZv ciB0aGUgQ05zIGlzc3VlZCBieSB0aGUgQ0EgcHJveHkuPGJyPg0KPGJyPg0KVGhpcyB3YXksIHRo ZSBJb1QgZGV2aWNlIG93bnMgdGhlIHByaXZhdGUga2V5LCBhbmQgdGhlcmUncyBhIHByb29mIHRo cm91Z2ggdGhlIHB1YmxpYyB0cnVzdCBQS0kgdGhhdCB0aGUgZGV2aWNlIG1hbmFnZXIgaXMgY29t bXVuaWNhdGluZyB0byB0aGUgYXV0aGVudGljIGRldmljZS48YnI+DQpJbiBjYXNlIGlmIHRoZSBw dWJsaWMgQ0EgdHJ1c3QgaXMgbm90IGVub3VnaCwgdGhlIGRldmljZSBtYW5hZ2VyIGNhbiBleGFt aW5lIHRoZSBwdWJsaWMga2V5IG9uIHRoZSBjZXJ0IG9uIGV2ZXJ5IGNvbm5lY3Rpb24gKHNob3Vs ZCBiZSBwb3NzaWJsZSB0byBkbyB3aXRoIHRoZSBGb3JnZSBwcm9qZWN0IGluIHJlZ3VsYXIganMp LCBhbmQgcmFpc2UgYW4gYWxlcnQgaWYgdGhlIGtleSBpcyBjaGFuZ2VkIChqdXN0IGxpa2Ugc3No IGRvZXMpLjxicj4NCjxicj4NClNOSUYgaXMgdGhlIGFuc3dlciBmb3IgYSBzbWFydCBob21lLCBh IHNlY3VyaXR5IGNhbSwgb3IgYW55IG90aGVyIHByaXZhdGUgSW9UIHlvdSBkb24ndCB3YW50IGFu eWJvZHkgdG8gc25pZmYgb24gKHB1biBpbnRlbmRlZCkuPGJyPg0KPGJyPg0KSWYgeW91J3JlIGRl cGxveWluZyBhIGRldmljZSBhY2Nlc3NhYmxlIHRvIGEgbGFyZ2UgZ3JvdXAsIGxpa2UgYSBwdWJs aWMgd2ViY2FtLCBTTklGIG1pZ2h0IGJlIG5vdCBhIGdvb2Qgb3B0aW9uLCBpdCBtaWdodCBiZSBi ZXR0ZXIgdG8gaGF2ZSBhbiBpbnRlcm1pZGlhdGUgcHJveHkgdGhhdCBoYW5kbGVzIGFsbCB0cmFm ZmljIHdpdGhvdXQgY2hva2luZyB0aGUgZGV2aWNlLiBCdXQsIGVuZC10by1lbmQgcHJpdmFjeSBp cyBhIGxlc3NlciBjb25jZXJuDQogaW4gc3VjaCBjYXNlLjxicj4NCjxicj4NClJlZ2FyZGluZyB0 aGUgY29udmVyc2lvbiBvZiBhbnkgZXhpc3RpbmcgZGV2aWNlcyB0byBTTklGIC08YnI+DQotIHNl cnZlIHRoZSBjb250ZW50IG9uIHRoZSBkZXZpY2Ugb3ZlciBIVFRQUyBvciBsb2NhbCBwbGFpbiBI VFRQLCB3aGV0aGVyIGl0J3MgYSB3ZWIgcGFnZSwgYSB2aWRlbyBzdHJlYW0gb3IgYW4gQVBJLCBs aXN0ZW5pbmcgb24gYSBsb2NhbCBwb3J0IChzYXkgNDQzKTxicj4NCi0gcnVuIGEgU05JRiBjb25u ZWN0b3IgcHJvY2VzcyB0byBtYWludGFpbiB0aGUgY2VydCBhbmQgdG8gcmVsYXkgdG8gaW5jb21p bmcgU05JRiBjb25uZWN0aW9ucyB0byB0aGUgbG9jYWwgcG9ydC48bzpwPjwvbzpwPjwvcD4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBNYXJjaCAzLCAyMDIyIDY6MTg6NDggQU0gRVNU LCBIYW5uZXMgVHNjaG9mZW5pZyAmbHQ7PGEgaHJlZj0ibWFpbHRvOkhhbm5lcy5Uc2Nob2Zlbmln QGFybS5jb20iPkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwv bzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xp ZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44 cHQ7bWFyZ2luLXJpZ2h0OjBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5IaSBKaW0sIDxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFua3MgZm9yIHlvdXIgcmVzcG9uc2UuIDxvOnA+PC9vOnA+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPiZndDsgVGhlcmUgYXJl IHNvbWUgSW9UIG1hbmFnZW1lbnQgc29sdXRpb25zIG9uIHRoZSBtYXJrZXQsIGJvdGggb3BlbiBz b3VyY2UgYW5kIHByb3ByaWV0YXJ5LCBidXQgYXMgZmFyIGFzIEkgY2FuIHRlbGwgbm9uZSBvZiB0 aGVtIGZ1bGx5IGZvbGxvd3MgdGhlIGVuZCB0byBlbmQgcGFyYWRpZ20uPG86cD48L286cD48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPltIYW5u ZXNdIEl0IGRlcGVuZHMgd2hhdCB5b3UgY2FsbCBlbmQtdG8tZW5kLiBBcyBhbiBJb1Qgc2Vydmlj ZSBwcm92aWRlciB5b3UgaGF2ZSB0byBtYWtlIGEgZmV3IGRlY2lzaW9ucyBhYm91dCBob3cgdG8g bWFuYWdlIGFuZCBkZXBsb3kgSW9UIGRldmljZXMuIEJyb2FkbHkgc3BlYWtpbmcsIHlvdSBoYXZl IHRocmVlIG9wdGlvbnM6DQo8bzpwPjwvbzpwPjwvcD4NCjx1bCBzdHlsZT0ibWFyZ2luLXRvcDow aW4iIHR5cGU9ImRpc2MiPg0KPGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHlsZT0ibWFy Z2luLWJvdHRvbToxMi4wcHQ7bWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwxIGxldmVsMSBsZm8z Ij4NCllvdSAmbmJzcDtzZWVrIG91dCB0byBhIHRoaXJkIHBhcnR5IHRvIG1hbmFnZSB5b3VyIGRl dmljZXMuIE5lZWRsZXNzIHRvIHNheSB0aGF0IHlvdSBzaG91bGQgcGljayBhIGNvbXBhbnkgdGhh dCB5b3UgZmVlbCBjb21mb3J0YWJsZSB3aXRoLiBUaGV5IHdpbGwgbWFuYWdlIHlvdXIgZGV2aWNl cyBhbmQgdGhleSB3aWxsIGFsc28gb2ZmZXIgd2F5cyB0byBzdG9yZSB0aGUgZGF0YSBvYnRhaW5l ZCBmcm9tIHRoZSBkZXZpY2VzLCB0byBtYW5hZ2UgYW5kIGRpc3RyaWJ1dGUNCiBmaXJtd2FyZSB1 cGRhdGVzLCBhbmQgZXZlbiB0byBwZXJmb3JtIGFuYWx5c2lzIG9mIHRoZSBkYXRhIChtYWNoaW5l IGxlYXJuaW5nKS4gVGhlbiwgeW91IGNhbiB0eXBpY2FsbHkgY29ubmVjdCBiYWNrZW5kIGFwcGxp Y2F0aW9uIHNlcnZlcnMgdG8gdGhlIGRldmljZSBtYW5hZ2VtZW50IG9mZmVyaW5nLiBPZiBjb3Vy c2UsIHRoZSBkZXRhaWxzIHZhcnkgYSBsb3Qgd2l0aCB3aGF0IHlvdSBhcmUgYWN0dWFsbHkgZG9p bmcgYXMgYW4gSW9UIHNlcnZpY2UNCiBwcm92aWRlciB3aXRoIHRoZSBJb1QgZGV2aWNlcyBhbmQg dGhlIGRhdGEuPG86cD48L286cD48L2xpPjxsaSBjbGFzcz0iTXNvTGlzdFBhcmFncmFwaCIgc3R5 bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0O21hcmdpbi1sZWZ0OjBpbjttc28tbGlzdDpsMSBsZXZl bDEgbGZvMyI+DQpZb3UgZ2V0IHRoZSBzb2Z0d2FyZSBmcm9tIGEgcHJvdmlkZXIgYW5kIHlvdSBt YW5hZ2UgdGhlIGRldmljZXMgb24geW91ciBvd24uIFRoaXMgaXMgb2Z0ZW4gdGhlIGNhc2Ugd2hl biB5b3Ugd2FudCB0byBkZXBsb3kgYW4gb24tcHJlbWlzZSBzb2x1dGlvbi4gSGVyZSB5b3UgaGF2 ZSB0byB0cnVzdCB0aGUgcHJvdmlkZXIgb2YgdGhlIGRldmljZSBtYW5hZ2VtZW50IHNvZnR3YXJl IHRoYXQgdGhlIGNvZGUgaXMgY29ycmVjdCBhbmQgZG9lcyB3aGF0DQogaXQgaXMgc3VwcG9zZWQg dG8gZG8uIEluIHNvbWUgY2FzZXMgeW91IG5vdCBvbmx5IGdldCB0aGUgYmluYXJ5IGJ1dCBhbHNv IHRoZSBzb3VyY2UgY29kZS4gSW4gdGhlb3J5LCB5b3UgY291bGQgY2hlY2sgd2hhdCBjb2RlIGlz IGFjdHVhbGx5IHJ1bm5pbmcgKGFsdGhvdWdoIEkgZG91YnQgdGhhdCBhbnlvbmUgcmVhbGx5IGNo ZWNrcykuDQo8bzpwPjwvbzpwPjwvbGk+PGxpIGNsYXNzPSJNc29MaXN0UGFyYWdyYXBoIiBzdHls ZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQ7bWFyZ2luLWxlZnQ6MGluO21zby1saXN0OmwxIGxldmVs MSBsZm8zIj4NCkZpbmFsbHksIHlvdSBidWlsZCB5b3VyIG93biBkZXZpY2UgbWFuYWdlbWVudCBz b2x1dGlvbiAob2Z0ZW4gdXNpbmcgYXZhaWxhYmxlIG9wZW4gc291cmNlIHNvZnR3YXJlKS4NCjxv OnA+PC9vOnA+PC9saT48L3VsPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1i b3R0b206MTIuMHB0Ij5JbiBwcmFjdGljZSwgSSBoYXZlIGFsc28gc2VlbiBhIGNvbWJpbmF0aW9u IG9mIHRoZSB2YXJpYW50cyBhYm92ZS4gRm9yIGV4YW1wbGUsIEkgaGF2ZSBzZWVuIGEgY2FzZSB3 aGVyZSB0aGUgZGV2aWNlcyB3ZXJlIG1hbmFnZWQgYnkgYSB0aGlyZCBwYXJ0eSBidXQgdGhlIHZp ZGVvIHN0cmVhbSBvZiB0aGUgc3VydmVpbGxhbmNlIGNhbWVyYSB3YXMgc2VudCBkaXJlY3RseQ0K IHRvIGEgZGVkaWNhdGVkIHNlcnZlciBtYW5hZ2VkIGJ5IHRoZSBJb1Qgc2VydmljZSBwcm92aWRl ci4gKFRoZXJlIHdlcmUgYWxzbyB2YXJpb3VzIHRlY2huaXF1ZXMgdG8gcHJldmVudCBtb2RpZmlj YXRpb25zIHRvIHRoZSBkZXZpY2UgdG8gaGF2ZSB0aGUgdmlkZW8gc3RyZWFtIHJlLWRpcmVjdGVk IG9yIHRoZSBjcmVkZW50aWFscyBjaGFuZ2VzIGJ1dCBJIHRoaW5rIHlvdSBnZXQgdGhlIGlkZWEu KSBUaGUgY29tbXVuaWNhdGlvbiBtb2RlbCB0aGVyZQ0KIHdhcyBhIGJpdCBkaWZmZXJlbnQgdGhh biB5b3VycyBiZWNhdXNlIHRoZSBjbGllbnQgaW5pdGlhdGVkIHRoZSBjb21tdW5pY2F0aW9uIHdp dGggdGhlIHZpZGVvIHNlcnZlci4gSGVuY2UsIHRoZXJlIHdhcyBubyBpc3N1ZSB3aXRoIHJ1bm5p bmcgYSBUTFMgc2VydmVyIG9uIHRoZSBkZXZpY2UuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPk9uIHRvcCBvZiB0aGlzLCBp dCBpcyBhbHNvIGNvbW1vbiB0byBwcm92aWRlIHNwZWNpYWwgc2VjdXJpdHkgcHJvdGVjdGlvbiBm b3Igc2VsZWN0ZWQgZGF0YS4gRm9yIGV4YW1wbGUsIGZpcm13YXJlIHVwZGF0ZXMgYXJlIHNpZ25l ZCBieSBwYXJ0eSBkaWZmZXJlbnQgZnJvbSB0aGUgY29tcGFueSBvZmZlcmluZyB0aGUgZGV2aWNl IG1hbmFnZW1lbnQgc29sdXRpb24uDQogVGhleSBhcmUsIGZvciBleGFtcGxlLCBzaW5nZWQgYnkg dGhlIGNvbXBhbnkgZGV2ZWxvcGluZyB0aGUgY29kZS4gVGhleSBhcmUgc3RpbGwgZGlzdHJpYnV0 ZWQgYnkgdGhlIGRldmljZSBtYW5hZ2VtZW50IGluZnJhc3RydWN0dXJlIGFuZCBoZW5jZSB5b3Ug aGF2ZSB0byByZWx5IG9uIHRoZSBkaXN0cmlidXRpb24gb2YgdGhlbSBidXQgdGhlcmUgaXMgbm8g Y2hhbmNlIGZvciB0aGUgZGV2aWNlIG1hbmFnZW1lbnQgcHJvdmlkZXIgdG8gaW5qZWN0DQogbWFs aWNpb3VzIGNvZGUgaW50byB0aGUgZGV2aWNlLiA8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+RnJvbSB3aGF0IEkgYW0gc2Vl aW5nLCB0aGUgZmlyc3QgZGVwbG95bWVudCBtb2RlbCBpcyB2ZXJ5IHBvcHVsYXIuIFRoZSBhcHBy b2FjaCBvZiDigJxkZXNpZ25pbmcgeW91ciBvd24gc29sdXRpb27igJ0gd2FzIHBvcHVsYXIgaW4g dGhlIGVhcmx5IGRheXMgYmVjYXVzZSBjb21wYW5pZXMgd2VyZSBnaXZlbiB0aGUgaW1wcmVzc2lv biB0aGF0IHRoaXMgSW9UIHN0dWZmDQogaXMgc28gc2ltcGxlIHRoYXQgeW91IGNhbiBwdXQgYSBz b2x1dGlvbiB0b2dldGhlciBpbiBhIHdlZWtlbmQuIEl0IHR1cm5lZCBvdXQgdGhhdCB0aGlzIGlz IG5vdCBxdWl0ZSB0aGUgY2FzZSAoaWYgeW91IGhhdmUgYSBsYXJnZXIgbnVtYmVyIG9mIGRldmlj ZXMpLiBNYW55IElvVCBzZXJ2aWNlIHByb3ZpZGVycyBhbHNvIG5lZWQgaGVscCBkZXNpZ25pbmcg dGhlIGVudGlyZSBzb2x1dGlvbiwgYWxzbyB0aGUgc29sdXRpb24gb24gdGhlIElvVCBkZXZpY2UN CiBpdHNlbGYuPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWJvdHRvbToxMi4wcHQiPkhvdyBkb2VzIHlvdXIgc29sdXRpb24gZml0IGludG8gdGhpcyBw aWN0dXJlPzxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdp bi1ib3R0b206MTIuMHB0Ij4mZ3Q7IEkgYmVsaWV2ZSBpdCdzIHdvcnRoIGhhdmluZyBhIHVuaXZl cnNhbCBjcm9zcy12ZW5kb3Igc29sdXRpb24gdGhhdCBoYW5kbGVzIFNOSUYgZGV2aWNlIG9uYm9h cmRpbmcsIG1haW50YWlucyB0aGUgY3JlZGVudGlhbHMgaW4gYSBsb2NhbCBzZWN1cmUgc3RvcmFn ZSwgYW5kIGNvbnNvbGlkYXRlcyBodHRwcyBiYXNlZCBtYW5hZ2VtZW50IGludGVyZmFjZSBob3N0 ZWQNCiBieSBpbmRpdmlkdWFsIGRldmljZXMgdGhyb3VnaCBTTklGLjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5bSGFubmVz XSBUaGVyZSBpcyBkZWZpbml0ZWx5IGEgbG90IG9mIGV4Y2l0ZW1lbnQgd2hlbiBpdCBjb21lcyB0 byB0aGUgZGV2ZWxvcG1lbnQgb2YgZGV2aWNlIG9uYm9hcmRpbmcgc29sdXRpb25zLiBJIGhhdmUg dG8gdHJ1c3QgeW91IHRoYXQgdGhlcmUgaXMgZnVydGhlciBpbnRlcmVzdCBmb3Igc29sdXRpb25z IGJlY2F1c2UgSSBoYXZlbuKAmXQgY2hlY2tlZC48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PGJyPg0KJmd0OyBUaGUgcmVx dWlyZW1lbnRzIGZvciBzdWNoIHNvbHV0aW9uIGlzIGEgdG9waWMgZm9yIGEgc2VwYXJhdGUgZHJh ZnQsIGFsdGhvdWdoIEkgYWxyZWFkeSBvdXRsaW5lZCB0aGUgcG9zc2libGUgc2VjdXJlIG9uYm9h cmRpbmcgcHJvY2VzcyBpbiB0aGUgc2VjdXJpdHkgc2VjdGlvbi48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+SSB3aWxsIHJl LXJlYWQgeW91ciBzZWN1cml0eSBjb25zaWRlcmF0aW9uIHNlY3Rpb24gYWdhaW4uDQo8bzpwPjwv bzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBw dCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFy Z2luLWJvdHRvbToxMi4wcHQiPk5vdGUgdGhhdCBJIGFtIGNlcnRhaW5seSBub3QgYWdhaW5zdCB5 b3VyIHNvbHV0aW9uLiBJZiB5b3VyIGFwcHJvYWNoIGhhcyBzdWNjZXNzLCBrdWRvcyB0byB5b3Uu DQo8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90 dG9tOjEyLjBwdCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPkNpYW88bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+SGFubmVzPG86cD48L286 cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIEZl YnJ1YXJ5IDI0LCAyMDIyIDU6Mzc6NDYgQU0gRVNULCBIYW5uZXMgVHNjaG9mZW5pZyAmbHQ7PGEg aHJlZj0ibWFpbHRvOkhhbm5lcy5Uc2Nob2ZlbmlnQGFybS5jb20iPkhhbm5lcy5Uc2Nob2Zlbmln QGFybS5jb208L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxl PSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3BhZGRpbmc6MGlu IDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4t cmlnaHQ6MGluO21hcmdpbi1ib3R0b206NS4wcHQiPg0KPHByZT5IaSBKaW0sPGJyPjxicj5UaGFu a3MgZm9yIHRoZSBxdWljayByZXNwb25zZS4gVGhlIGxpbmsgdG8geW91ciB3ZWJzaXRlIGlzIGhl bHBmdWwuIEkgbm93IHVuZGVyc3Rvb2QgdGhhdCB5b3Ugd291bGQgYWxzbyByZWxheSB0aGUgY29t bXVuaWNhdGlvbiB0aHJvdWdoIHRoZSBwcm94eSwgd2hpY2ggZGVhbHMgd2l0aCB0aGUgSW9UIGRl dmljZSBiZWluZyBiZWhpbmQgYSBOQVQgYW5kL29yIGZpcmV3YWxsIGlmIHRoZSBJb1QgZGV2aWNl IGtlZXBzIHRoZSBjb25uZWN0aW9uIGFsaXZlLjxicj48YnI+SSB3b25kZXIgd2hldGhlciB5b3Ug aGF2ZSBjb25zaWRlcmVkIHRvIHJlLXVzZSBhbiBleGlzdGluZyBkZXZpY2UgbWFuYWdlbWVudCBz b2x1dGlvbnMgc2luY2UgdGhvc2UgaXMgd2lkZWx5IGRlcGxveWVkIHRvZGF5Pzxicj48YnI+Q2lh bzxicj5IYW5uZXM8YnI+PGJyPi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tPGJyPkZyb206IElv dG9wcyAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlvdG9wcy1ib3VuY2VzQGlldGYub3JnIj5pb3RvcHMt Ym91bmNlc0BpZXRmLm9yZzwvYT4mZ3Q7IE9uIEJlaGFsZiBPZiBKaW0gWnVib3Y8YnI+U2VudDog V2VkbmVzZGF5LCBGZWJydWFyeSAyMywgMjAyMiA0OjE3IFBNPGJyPlRvOiA8YSBocmVmPSJtYWls dG86c2VjZGlzcGF0Y2hAaWV0Zi5vcmciPnNlY2Rpc3BhdGNoQGlldGYub3JnPC9hPjsgSGFubmVz IFRzY2hvZmVuaWcgJmx0OzxhIGhyZWY9Im1haWx0bzpIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29t Ij5IYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tPC9hPiZndDs7IEppbSBadWJvdiAmbHQ7PGEgaHJl Zj0ibWFpbHRvOmlldGYtbGlzdEBjb21tZXJjZWJ5dGUuY29tIj5pZXRmLWxpc3RAY29tbWVyY2Vi eXRlLmNvbTwvYT4mZ3Q7OyA8YSBocmVmPSJtYWlsdG86c2VjZGlzcGF0Y2hAaWV0Zi5vcmciPnNl Y2Rpc3BhdGNoQGlldGYub3JnPC9hPjsgTWljaGFlbCBSaWNoYXJkc29uICZsdDs8YSBocmVmPSJt YWlsdG86bWNyK2lldGZAc2FuZGVsbWFuLmNhIj5tY3IraWV0ZkBzYW5kZWxtYW4uY2E8L2E+Jmd0 OzsgPGEgaHJlZj0ibWFpbHRvOmlvdG9wc0BpZXRmLm9yZyI+aW90b3BzQGlldGYub3JnPC9hPjsg PGEgaHJlZj0ibWFpbHRvOmFuaW1hQGlldGYub3JnIj5hbmltYUBpZXRmLm9yZzwvYT48YnI+U3Vi amVjdDogUmU6IFtJb3RvcHNdIFtTZWNkaXNwYXRjaF0gSS1EOiBEZXBsb3lpbmcgUHVibGljbHkg VHJ1c3RlZCBUTFMgU2VydmVycyBvbiBJb1QgRGV2aWNlcyBVc2luZyBTTkktYmFzZWQgRW5kLXRv LUVuZCBUTFMgRm9yd2FyZGluZyAoU05JRik8YnI+PGJyPlRoYW5rIFlvdSBmb3IgeW91ciBmZWVk YmFjayBIYW5uZXMsIEkgYWRkcmVzc2VkIHRoZSBjb21tZW50cyBiZWxvdyAtPGJyPjxicj5PbiBG ZWJydWFyeSAyMywgMjAyMiA1OjM2OjE1IEFNIEVTVCwgSGFubmVzIFRzY2hvZmVuaWcgJmx0Ozxh IGhyZWY9Im1haWx0bzpIYW5uZXMuVHNjaG9mZW5pZ0Bhcm0uY29tIj5IYW5uZXMuVHNjaG9mZW5p Z0Bhcm0uY29tPC9hPiZndDsgd3JvdGU6PG86cD48L286cD48L3ByZT4NCjxibG9ja3F1b3RlIHN0 eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjNzI5RkNGIDEuMHB0O3BhZGRpbmc6 MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXRvcDo1LjBwdDttYXJn aW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQiPg0KPHByZT5IaSBhbGwsPGJyPjxicj5U aGFua3MgZm9yIHRoaXMgY29udHJpYnV0aW9uLCBKaW0uPGJyPjxicj5SZWFkaW5nIHRocm91Z2gg dGhlIGRvY3VtZW50IEkgYWdyZWUgdGhhdCB0aGUgU1VJQiB0b3BpYyBkaXNjdXNzZWQgaW4gdGhl IElPVE9QUyBXRyBhcHBlYXJzIHJlbGV2YW50LiBJIGFsc28gd29uZGVyIHdoZXRoZXIgdGhlIHdv cmsgaW4gdGhlIERBTklTSCBncm91cCAoc2VlIDxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIu aWV0Zi5vcmcvd2cvZGFuaXNoL2Fib3V0LykiPmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcv d2cvZGFuaXNoL2Fib3V0Lyk8L2E+IGlzIHJlbGV2YW50LjxvOnA+PC9vOnA+PC9wcmU+DQo8L2Js b2NrcXVvdGU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PGJyPkFncmVlZCBh Ym91dCBTVUlCLCBub3QgcXVpdGUgc3VyZSBhYm91dCBEQU5JU0guIERBTklTSCBpcyBhYm91dCBj ZXJ0aWZpY2F0ZSBiYXNlZCBhdXRoZW50aWNhdGlvbiBhbmQgUEtJIGV4dGVuc2lvbnMsIHdoaWxl IFNOSUYgaXMgYWJvdXQgZW5kLXRvLWVuZCByZWxheWVkIHRydXN0ZWQgVExTIHRoYXQgcmVsaWVz IG9uIHRoZSBzdGFuZGFyZCBQS0kuPG86cD48L286cD48L3ByZT4NCjxibG9ja3F1b3RlIHN0eWxl PSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjNzI5RkNGIDEuMHB0O3BhZGRpbmc6MGlu IDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4t cmlnaHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQiPg0KPHByZT48YnI+UmVnYXJkaW5nIHRoZSB1 c2UgaW4gSW9UIEkgaGF2ZSBhIHF1ZXN0aW9uIGZvciBteSB1bmRlcnN0YW5kaW5nLjxicj48YnI+ SW4gYSBudXRzaGVsbCwgeW91IGludHJvZHVjZSBhIHByb3h5IHRoYXQgYWxsb2NhdGVzIGEgaG9z dG5hbWUgYW5kIHJlcXVlc3RzIGEgY3JlYXRpb24gb2YgYSBjZXJ0aWZpY2F0ZSBvbiBiZWhhbGYg b2YgdGhlIElvVCBkZXZpY2UuPG86cD48L286cD48L3ByZT4NCjwvYmxvY2txdW90ZT4NCjxwcmU+ PGJyPkNvcnJlY3QsIHBsdXMgYW4gZTJlIFRMUyByZWxheS48bzpwPjwvbzpwPjwvcHJlPg0KPGJs b2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICM3MjlGQ0YgMS4w cHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tdG9w OjUuMHB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTo2LjBwdCI+DQo8cHJlPjxicj5U byBnZXQgdGhpcyB0byB3b3JrIHlvdSByZWx5IG9uIHRocmVlIGFzc3VtcHRpb25zOjxicj4oMSkg VGhlcmUgaGFzIHRvIGJlIGEgY29tbXVuaWNhdGlvbiBpbmZyYXN0cnVjdHVyZSB0aGF0IGFzc29j aWF0ZXMgdGhlICZxdW90O2Fub255bW91cyZxdW90OyBob3N0bmFtZSB3aXRoIGEgc3BlY2lmaWMg ZGV2aWNlIGFuZCBjb252ZXlzIHRoZXNlIGlkZW50aWZpZXJzIHRvIHRoZSByZWxldmFudCBwYXJ0 aWVzLjxvOnA+PC9vOnA+PC9wcmU+DQo8L2Jsb2NrcXVvdGU+DQo8cHJlIHN0eWxlPSJtYXJnaW4t Ym90dG9tOjEyLjBwdCI+PGJyPkVhY2ggZGV2aWNlIGlzIGNvbmZpZ3VyZWQgd2l0aCBhbiBpbml0 VXJsIHBvaW50aW5nIHRvIGEgc3BlY2lmaWMgQ0EgcHJveHkgdGhhdCBhbGxvY2F0ZXMgYSByYW5k b20gaG9zdG5hbWUgKGEgQ04gdG8gYmUgbW9yZSBhY2N1cmF0ZSksIG5vcm1hbGx5IGEgc3ViZG9t YWluIG9mIGEgbWFzdGVyIGRvbWFpbiB0aGF0IGhhcyBhIHdpbGRjYXJkIEROUyByZWNvcmQgcG9p bnRpbmcgdG8gdGhlIENBIHByb3h5Ljxicj5FeGFtcGxlIC0gdGhlIGluaXRVcmwgZm9yIHB1Ymxp YyBleHBlcmltZW50YWwgdXNlIC0gPGEgaHJlZj0iaHR0cHM6Ly9zbmlmLnNuaWYueHl6OjQ0NDMi Pmh0dHBzOi8vc25pZi5zbmlmLnh5ejo0NDQzPC9hPiBUaGUgYWxsb2NhdGVkIHdpbGRjYXJkIENO IGlzIGEgc3ViZG9tYWluIG9mIHRoZSBtYXN0ZXIgZG9tYWluIHNuaWYueHl6PG86cD48L286cD48 L3ByZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAj NzI5RkNGIDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7 bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQiPg0K PHByZT4oMikgWW91IGFzc3VtZSB0aGF0IGEgcGFydHkgdGhhdCB3YW50cyB0byBjb250YWN0IHRo ZSBJb1QgZGV2aWNlIGlzIGFibGUgdG8gcmVhY2ggdGhlIGRldmljZSAoaS5lLiB0aGUgSW9UIGRl dmljZSBpcyBub3QgYmVoaW5kIGEgZmlyZXdhbGwgb3IgTkFUKS48bzpwPjwvbzpwPjwvcHJlPg0K PC9ibG9ja3F1b3RlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxicj5Cb3Ro IHRoZSBJb1QgZGV2aWNlIGFuZCB0aGUgY2xpZW50IGNvbm5lY3QgdG8gdGhlIFNOSUYgcmVsYXku IFRoZSB3aG9sZSBwdXJwb3NlIG9mIFNOSUYgaXMgdG8gYmUgYWJsZSB0byB3b3JrIGZyb20gYmVo aW5kIE5BVCAvIGZpcmV3YWxsIC9ldGMsIGFuZCBpdCdzIGJlZW4gY29uZmlybWVkIHRvIHdvcmsg aW4gcHJlLXByb2R1Y3Rpb24uIEluIGZhY3QgSSBoYWQgYSBtaW5vciBoaWNrdXAgd2l0aCBGb3J0 aWdhdGUgaW4gdGhlIHByb2Nlc3Mgb2YgdGVzdGluZyB3aGljaCBoYXMgYmVlbiByZXNvbHZlZC48 YnI+VGhlcmUgYXJlIHNpbXBsaWZpZWQgZGlhZ3JhbXMgb24gPGEgaHJlZj0iaHR0cHM6Ly9zbmlm Lmhvc3QiPmh0dHBzOi8vc25pZi5ob3N0PC9hPiB0byBpbGx1c3RyYXRlIHRoZSBjb25jZXB0Ljxv OnA+PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxl ZnQ6c29saWQgIzcyOUZDRiAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1s ZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9t OjYuMHB0Ij4NCjxwcmU+KDMpIFNvbWVvbmUgb3BlcmF0aW5nIElvVCBkZXZpY2VzIGhhcyB0byB0 cnVzdCB0aGUgcHJveHkgc2luY2UgaXQgaXMgZWFzeSBmb3IgdGhlIHByb3h5IHRvIGFzc29jaWF0 ZSBhIGhvc3RuYW1lIHdpdGggYSBwdWJsaWMga2V5IHRoYXQgd2FzIGNyZWF0ZWQgYnkgdGhlIHBy b3h5IChyYXRoZXIgdGhhbiB0aGUgZW5kIGRldmljZSkuIFRoaXMgZXNzZW50aWFsbHkgYWxsb3dz IHRoZSBwcm94eSB0byBpbXBlcnNvbmF0aW5nIHRoZSBJb1QgZGV2aWNlLjxicj48YnI+SXMgbXkg dW5kZXJzdGFuZGluZyBjb3JyZWN0PzxvOnA+PC9vOnA+PC9wcmU+DQo8L2Jsb2NrcXVvdGU+DQo8 cHJlIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PGJyPlllcywgSSBtZW50aW9uZWQgdGhp cyB2dWxuZXJhYmlsaXR5IGluIHRoZSBzZWN1cml0eSBzZWN0aW9uLiBUaGUgYW5zd2VyIGlzPGJy Pi0gd2F0Y2ggdGhlIHB1YmxpYyBUTFMgdHJhbnNwYXJlbmN5IGxvZ3MsIGFueSBwYXJ0eSBjYW4g ZG8gaXQuIElmIGFueSBvdmVybGFwcGluZyBDTnMgYXJlIGZvdW5kIC0gdGhlIENBIHByb3h5IGlz IHBlcm1hbmVudGx5IGNvbXByb21pc2VkLDxicj4tIGRvIG5vdCB1c2UgcmFuZG9tIENBIHByb3hp ZXMgb3duZWQgYnkgdW5rbm93biBwYXJ0aWVzLjxvOnA+PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90 ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgIzcyOUZDRiAxLjBwdDtwYWRk aW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7 bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4NCjxwcmU+PGJyPkNpYW88YnI+ SGFubmVzPG86cD48L286cD48L3ByZT4NCjwvYmxvY2txdW90ZT4NCjxwcmUgc3R5bGU9Im1hcmdp bi1ib3R0b206MTIuMHB0Ij48YnI+QW55IGZ1cnRoZXIgcXVlc3Rpb25zL3N1Z2dlc3Rpb25zIGFy ZSB3ZWxjb21lLjxvOnA+PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5v bmU7Ym9yZGVyLWxlZnQ6c29saWQgIzcyOUZDRiAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYu MHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0OjBpbjtt YXJnaW4tYm90dG9tOjYuMHB0Ij4NCjxwcmU+PGJyPi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0t PGJyPkZyb206IFNlY2Rpc3BhdGNoICZsdDs8YSBocmVmPSJtYWlsdG86c2VjZGlzcGF0Y2gtYm91 bmNlc0BpZXRmLm9yZyI+c2VjZGlzcGF0Y2gtYm91bmNlc0BpZXRmLm9yZzwvYT4mZ3Q7IE9uIEJl aGFsZiBPZiBKaW0gWnVib3Y8YnI+U2VudDogRnJpZGF5LCBGZWJydWFyeSAxMSwgMjAyMiAxMjoy MiBBTTxicj5UbzogPGEgaHJlZj0ibWFpbHRvOnNlY2Rpc3BhdGNoQGlldGYub3JnIj5zZWNkaXNw YXRjaEBpZXRmLm9yZzwvYT47IE1pY2hhZWwgUmljaGFyZHNvbiAmbHQ7PGEgaHJlZj0ibWFpbHRv Om1jcitpZXRmQHNhbmRlbG1hbi5jYSI+bWNyK2lldGZAc2FuZGVsbWFuLmNhPC9hPiZndDs7PGJy PkppbSBadWJvdiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlldGYtbGlzdEBjb21tZXJjZWJ5dGUuY29t Ij5pZXRmLWxpc3RAY29tbWVyY2VieXRlLmNvbTwvYT4mZ3Q7OyA8YSBocmVmPSJtYWlsdG86aW90 b3BzQGlldGYub3JnIj5pb3RvcHNAaWV0Zi5vcmc8L2E+OyA8YSBocmVmPSJtYWlsdG86YW5pbWFA aWV0Zi5vcmciPmFuaW1hQGlldGYub3JnPC9hPjxicj5TdWJqZWN0OiBSZTogW1NlY2Rpc3BhdGNo XSBJLUQ6IERlcGxveWluZyBQdWJsaWNseSBUcnVzdGVkIFRMUyBTZXJ2ZXJzPGJyPm9uIElvVCBE ZXZpY2VzIFVzaW5nIFNOSS1iYXNlZCBFbmQtdG8tRW5kIFRMUyBGb3J3YXJkaW5nIChTTklGKTxi cj48YnI+VGhhbmtzIGZvciB0aGUgZmVlZGJhY2sgYWdhaW4sIG15IGNvbW1lbnQgYXJlIGJlbG93 Ljxicj5JIHN1Ym1pdHRlZCBhIG5ldyB2ZXJzaW9uIG9mIHRoZSBkcmFmdCB0byByZWZsZWN0IHNv bWUgY2hhbmdlcy48YnI+PGJyPk9uIEZlYnJ1YXJ5IDEwLCAyMDIyIDE6MDI6NDggUE0gRVNULCBN aWNoYWVsIFJpY2hhcmRzb24gJmx0OzxhIGhyZWY9Im1haWx0bzptY3IraWV0ZkBzYW5kZWxtYW4u Y2EiPm1jcitpZXRmQHNhbmRlbG1hbi5jYTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wcmU+ DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0FEN0ZB OCAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdp bi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4NCjxwcmU+ PGJyPkppbSBadWJvdiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmlldGYtbGlzdEBjb21tZXJjZWJ5dGUu Y29tIj5pZXRmLWxpc3RAY29tbWVyY2VieXRlLmNvbTwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+ PC9wcmU+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQg IzhBRTIzNCAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0 O21hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4N CjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjRkNBRjNF IDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2lu LXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQiPg0KPHByZT4g VGhpcyB3YXMgYWxzbyBvbiB0aGUgSUVURjExMiBJT1RPUFMgV0cgYWdlbmRhOjxicj4gc2xpZGVz Ojxicj4gPGEgaHJlZj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9tZWV0aW5nLzExMi9t YXRlcmlhbHMvc2xpZGVzLTExMi1pb3RvcHMtc3VpYi1icm93c2luZy1sb2NhbC13ZWItcmVzb3Vy Y2VzLWluLWEtc2VjdXJlLXVzYWJsZS1tYW5uZXItaW90LWRldmljZS1jb25maWd1cmF0aW9uLWFz LWEtc3BlY2lhbC1jYXNlLTAwIj5odHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL21lZXRpbmcv MTEyL21hdGVyaWFscy9zbGlkZXMtMTEyLWlvdG9wcy1zdWliLWJyb3dzaW5nLWxvY2FsLXdlYi1y ZXNvdXJjZXMtaW4tYS1zZWN1cmUtdXNhYmxlLW1hbm5lci1pb3QtZGV2aWNlLWNvbmZpZ3VyYXRp b24tYXMtYS1zcGVjaWFsLWNhc2UtMDA8L2E+PGJyPiB2aWRlbzombmJzcDsgPGEgaHJlZj0iaHR0 cHM6Ly95b3V0dS5iZS9PSWxKclV2d0RjST90PTE2NDkiPmh0dHBzOi8veW91dHUuYmUvT0lsSnJV dndEY0k/dD0xNjQ5PC9hPjxicj48YnI+IGFuZCB3ZSBob3BlIHRvIHJldHVybiBhdCBJRVRGMTEz LjxvOnA+PC9vOnA+PC9wcmU+DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQo8cHJlPjxv OnA+Jm5ic3A7PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLWxlZnQ6c29saWQgIzhBRTIzNCAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21h cmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4t Ym90dG9tOjYuMHB0Ij4NCjxwcmU+UmlnaHQsIGxvb2tzIGxpa2UgU1VJQiBpcyB3b3JraW5nIG9u IGEgc2ltaWxhciBwcm9ibGVtLiBUaGFua3MgZm9yPGJyPnBvaW50aW5nIHRoaXMgb3V0LiBJbiBw YXJ0aWN1bGFyLCB0aGUgJnF1b3Q7U29sICM2IERldmljZSBuYW1lIEROUyZxdW90OyBzbGlkZTxi cj5sb29rcyBxdWl0ZSBzaW1pbGFyIHRvIFNOSUYgQ0EgUHJveHkgKFNlY3Rpb24gMykuIEhvd2V2 ZXIsIFNVSUIgcHVyc3Vlczxicj5iaWdnZXIgaW5mcmFzdHJ1Y3R1cmFsIGdvYWxzIHN1Y2ggYXMg Y2hhbmdpbmcgdGhlIGxvY2FsaG9zdCBUTFM8YnI+Y29ubmVjdGlvbiBwb2xpY2llcyAoSSB0b3Rh bGx5IGFncmVlIGFuZCByZWFsbHkgYXBwcmVjaWF0ZSB0aGUgZWZmb3J0KSw8YnI+d2hpbGUgU05J RiBpcyBhIGZ1bmN0aW9uaW5nIHNvbHV0aW9uIHdpdGhpbiB0aGUgZXhpc3Rpbmc8YnI+aW5mcmFz dHJ1Y3R1cmUsIHRlc3RlZCBhbmQgcHJvdmVuIHRvIHdvcmsgaW4gcHJlLXByb2R1Y3Rpb24uPG86 cD48L286cD48L3ByZT4NCjwvYmxvY2txdW90ZT4NCjxwcmU+PGJyPlRoZSBzbGlkZXMgbWF5IGJl IHRvbyB2YWd1ZS4mbmJzcDsgQ2hhbmdpbmcgdGhlIFRMUyBwb2xpY2llcyBpcyBhIHBvc3NpYmxl PGJyPnNvbHV0aW9uLCBidXQgcHJvYmFibHkgYW4gaW1wcmFjdGljYWwgb25lLiZuYnNwOyBOZXZl cnRoZWxlc3MsIG1hbnkgcGVvcGxlPGJyPihub3Qgc3RlZXBlZCBpbiB0aGUgYXJ0cywgYW5kIG9m dGVuIGZhaWxsaW5nIGludG8gdGhlIFBIQiBjYXRlZ29yeSk8YnI+dGhpbmsgdGhhdCBpdCBpcyBh biBvYnZpb3VzIHNvbHV0aW9uLCBzbyB3ZSBsaXN0IGl0IGluIG9yZGVyIHRvIGV4cGxhaW4gd2h5 IGl0IHdvbid0IHdvcmsuPG86cD48L286cD48L3ByZT4NCjwvYmxvY2txdW90ZT4NCjxwcmUgc3R5 bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48YnI+WWVzLCBzdGlsbCBzYWQgdGhhdCBsb2NhbGhv c3Qgc2xpcHBlZCB0aHJvdWdoIHRoZSBjcmFja3Mgd2hlbiB0aGUgb3JpZ2luYWwgc2VjdXJpdHkg c3RhbmRhcmRzIHdlcmUgd3JpdHRlbi48bzpwPjwvbzpwPjwvcHJlPg0KPGJsb2NrcXVvdGUgc3R5 bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNBRDdGQTggMS4wcHQ7cGFkZGluZzow aW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tdG9wOjUuMHB0O21hcmdp bi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTo2LjBwdCI+DQo8cHJlPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wcmU+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQg IzhBRTIzNCAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0 O21hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4N CjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjRkNBRjNF IDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2lu LXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQiPg0KPHByZT4g VGhlIFNVSUIgcHJvYmxlbSBhZGRyZXNzZXMgdGhlIGNoYWxsZW5nZSBvZiBjb25uZWN0aW5nICps b2NhbGx5KiB0byBhPGJyPiBkZXZpY2UsPGJyPiBhbmQgZG9pbmcgaXQgc2VjdXJlbHkuJm5ic3A7 IEZvciB0aGlzIHRvIGJlIHBvc3NpYmxlIHdpdGggUkZDNjEyNS1ETlMtSUQ8YnI+IHN0YW5kYXJk PGJyPiBicm93c2VyLCB3ZSBuZWVkIGEgbmFtZSBmb3IgdGhlIGRldmljZSwgYW5kIHdlIG5lZWQg YSB3YXkgdG8gdHJhbnNsYXRlPGJyPiB0aGF0PGJyPiBuYW1lIGludG8gYSBsb2NhbGx5IHJlYWNo YWJsZSBJUCBhZGRyZXNzLjxicj48YnI+IFRoZSBTTklGIHByb3Bvc2FsIGRvZXMgbm90IHF1aXRl IHNvbHZlIHRoZSBhYm92ZSBwcm9ibGVtLjxvOnA+PC9vOnA+PC9wcmU+DQo8L2Jsb2NrcXVvdGU+ DQo8L2Jsb2NrcXVvdGU+DQo8cHJlPjxvOnA+Jm5ic3A7PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90 ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgIzhBRTIzNCAxLjBwdDtwYWRk aW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7 bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4NCjxwcmU+SW4gZmFjdCwgSSBv cmlnaW5hbGx5IGRlc2lnbmVkIFNOSUYgdG8gc29sdmUgdGhpcyBzcGVjaWZpYyBwcm9ibGVtIC08 YnI+bG9jYWwtdG8tbG9jYWwgdHJ1c3RlZCBUTFMgY29ubmVjdGlvbnMuPG86cD48L286cD48L3By ZT4NCjwvYmxvY2txdW90ZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48YnI+ QWgsIHZlcnkgbmljZSB0byBrbm93LjxvOnA+PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90ZSBzdHls ZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgIzhBRTIzNCAxLjBwdDtwYWRkaW5nOjBp biAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7bWFyZ2lu LXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4NCjxwcmU+KiBJc3N1ZSBhIHdpbGRjYXJk IGNlcnQgdGhyb3VnaCBTTklGIENBIFByb3h5PGJyPihlLmcuIENOPSouZG9tYWluLnNuaWYueHl6 KSwgc2V0IGEgRE5TIHJlY29yZCBmb3I8YnI+bG9jYWxob3N0LmRvbWFpbi5zbmlmLnh5eiB0byBw b2ludCB0byBsb2NhbGhvc3QncyBJUHY0L3Y2LCBhbmQgdXNlPGJyPjxhIGhyZWY9Imh0dHBzOi8v bG9jYWxob3N0LmRvbWFpbi5zbmlmLnh5eiI+aHR0cHM6Ly9sb2NhbGhvc3QuZG9tYWluLnNuaWYu eHl6PC9hPiAob3Igb3RoZXIgYXBwIHByb3RvY29sIC0gaW1hcHM8YnI+ZXRjKS4gSG93ZXZlciwg bG9va3MgbGlrZSBzb21lIGNsaWVudHMgdHJlYXQgdGhlIGxvY2FsaG9zdCBJUCBhczxicj5pbmhl cmVudGx5IHVuc2VjdXJlLCBhbmQgaXNzdWUgYSB3YXJuaW5nIGV2ZXIgaXMgdGhlIGNlcnQgaXMg cGVyZmVjdGx5PGJyPnZhbGlkLiBUaGUgb3B0aW9uIGlzIHN0aWxsIHBvc3NpYmxlLCBidXQgdGhl IGFwcGxpY2FiaWxpdHkgbWlnaHQgYmU8YnI+bGltaXRlZC48bzpwPjwvbzpwPjwvcHJlPg0KPC9i bG9ja3F1b3RlPg0KPHByZT48YnI+VGhlIHByb2Nlc3Mgd2UgZGVzY3JpYmVkIGF0PGJyPjxicj48 YSBocmVmPSJodHRwczovL3NwZWNzLm1hbnlzZWN1cmVkLm9yZy9zdWliL1NvbHV0aW9ucy9kbnNu YW1lLWVtYmVkZGVkLXNvbHV0aW9uIj5odHRwczovL3NwZWNzLm1hbnlzZWN1cmVkLm9yZy9zdWli L1NvbHV0aW9ucy9kbnNuYW1lLWVtYmVkZGVkLXNvbHV0aW9uPC9hPjxicj48YnI+YWxzbyB1c2Vz IGEgd2lsZGNhcmQgY2VydCwgYnV0IGhhcyBhIG1hZ2ljIGF1dGhvcml0YXRpdmUgRE5TIHNlcnZl cjxicj50aGF0IHRyYW5zbGF0ZXMgdGhlIGxlZnQtbW9zdCBsYWJlbCBpbnRvIGFuIEEgb3IgQUFB QSByZWNvcmQuJm5ic3A7IEl0J3M8YnI+cmF0aGVyIGEgY3V0ZSBoYWNrLCBidXQgYXQgbGVhc3Q6 PGJyPiZuYnNwOyBhKSBpdCdzIGNhY2hhYmxlPGJyPiZuYnNwOyBiKSBpdCBjb3VsZCBldmVuIGJl IGNhbGN1bGF0ZWQgbG9jYWxseSwgaWYgb25lIGlnbm9yZXMgRE5TU0VDLjxvOnA+PC9vOnA+PC9w cmU+DQo8L2Jsb2NrcXVvdGU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tYm90dG9tOjEyLjBwdCI+PGJy PlllcywgdXNpbmcgYSBsb2NhbCBuZXR3b3JrIElQIGluc3RlYWQgb2YgYSBsb2NhbGhvc3QgSVAg aXMgYWN0dWFsbHkgYSBzbWFydCBpZGVhLjxicj5Ib3dldmVyLCBpbmxpbmluZyB0aGUgbG9jYWwg SVAgaW4gdGhlIGhvc3RuYW1lLCBhcyBTVUlCIGRvZXMsIG1lYW5zIHlvdSdsbCBoYXZlIHRvIGNo YW5nZSB0aGUgaG9zdG5hbWUgaW4geW91ciBjbGllbnQgZXZlcnkgdGltZSB5b3VyIG5ldHdvcmsg aXMgY2hhbmdlZC48YnI+SSBoYXZlIGFuIHRob3VnaHQgZm9yIFNOSUYgaW1wcm92ZW1lbnQgLSBT TklGIGNvbm5lY3RvciBzZW5kcyBhIFNOSUYgRE5TIGNvbW1hbmQgdG8gc2V0IGEgZHluYW1pYyBE TlMgQS9BQUFBIGZvciBhIGNlcnRhaW4gaG9zdG5hbWUgd2l0aGluIHRoZSBDTiB3aWxkY2FyZCwg YW5kIHRoZSBDQSBwcm94eSB1cGRhdGVzIHRoZSBETlMgYWNjb3JkaW5nbHkuIFRoaXMgd2F5IHRo ZSBob3N0bmFtZSBjYW4gYmUgcGVybWFuZW50LCBidXQgd2l0aCBkeW5hbWljIEROUy48YnI+QW5v dGhlciBwcm9ibGVtIC0gbW9zdCBwbGF0Zm9ybXMgd29uJ3QgbGV0IHlvdSBiaW5kIHRvIHBvcnQg Jmx0OyAxMDI0IHVubGVzcyB5b3UncmUgYSByb290LiBNaWdodCBiZSBvayBmb3IgYSBkZXZpY2Ug bWFudWZhY3R1cmVyLCBidXQgaXMgYSBwb3RlbnRpYWwgc2hvdyBzdG9wcGVyIGZvciBhbnkgdXNl ciBzcGFjZSBhcHAuIFJlbGF5ZWQgU05JRiB3b3JrcyBhcm91bmQgdGhpcyBwcm9ibGVtIHNpbmNl IHRoZSBsaXN0ZW5pbmcgcG9ydHMgYXJlIG9uIHRoZSByZWxheS48bzpwPjwvbzpwPjwvcHJlPg0K PGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNBRDdGQTgg MS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4t dG9wOjUuMHB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTo2LjBwdCI+DQo8cHJlPjxv OnA+Jm5ic3A7PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9y ZGVyLWxlZnQ6c29saWQgIzhBRTIzNCAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21h cmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4t Ym90dG9tOjYuMHB0Ij4NCjxwcmU+KiBBbm90aGVyIG9wdGlvbiBpcyB0byBvdmVycmlkZSB0aGUg SVAgcm91dGluZyBydWxlcy4gSXQgaXMgdG90YWxseTxicj5wb3NzaWJsZSBvbiBpT1MgYW5kIE1h YyB0aHJvdWdoIGEgdXNlcnNwYWNlIFZQTiAob25seSBvbmUgVlBOIHBlcjxicj5kZXZpY2UgdGhv dWdoIC0gYmV3YXJlIG9mIHBvc3NpYmxlIGNvbmZsaWN0cykuIEluIGZhY3QgSSBoYXZlIGE8YnI+ ZnVuY3Rpb25pbmcgc29sdXRpb24gZm9yIGl0LCBpbiBiZXRhIG5vdyAtPG86cD48L286cD48L3By ZT4NCjwvYmxvY2txdW90ZT4NCjxwcmU+PGJyPlRoYXQgZG9lc24ndCByZWFsbHkgc2NhbGUgdG8g bWFueSBkaWZmZXJlbnQgZG9tYWlucy48bzpwPjwvbzpwPjwvcHJlPg0KPC9ibG9ja3F1b3RlPg0K PHByZSBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxicj5Ub3RhbGx5IGFncmVlZCwgSSBq dXN0IG1lbnRpb25lZCB0aGF0IHRoaXMgb3B0aW9uIHdvcmtzIGZvciAqc29tZSogY2FzZXMsIHR1 bi90YXAgYSBpcyBwb3NzaWJsZSBvcHRpb24gdG9vIGlmIHlvdSdyZSBhIHJvb3QuPG86cD48L286 cD48L3ByZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xp ZCAjQUQ3RkE4IDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44 cHQ7bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQi Pg0KPHByZT48bzpwPiZuYnNwOzwvbzpwPjwvcHJlPg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRl cjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICM4QUUyMzQgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBp biA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1yaWdodDow aW47bWFyZ2luLWJvdHRvbTo2LjBwdCI+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7 Ym9yZGVyLWxlZnQ6c29saWQgI0ZDQUYzRSAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0 O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJn aW4tYm90dG9tOjYuMHB0Ij4NCjxwcmU+U3RpbGwsIGlmIFNOSUYgaXMgcmVwbGFjaW5nIGEgbWFu dWZhY3R1cmVyIHByb3ByaWV0YXJ5IGNhbGwtaG9tZSBwcm90b2NvbCw8YnI+dGhlcmUgY291bGQg YmUgYWR2YW50YWdlcyBmcm9tIGhhdmluZyB3ZWxsIHJldmlld2VkIGNvZGUgYmFzZXMsIGFuZDxi cj5wb3RlbnRpYWxseSBhbiBlY29zeXN0ZW0gb2YgU05JRiBQcm92aWRlcnMgdGhhdCBtYW51ZmFj dHVyZXJzIGNvdWxkPGJyPm91dHNvdXJjZTxvOnA+PC9vOnA+PC9wcmU+DQo8L2Jsb2NrcXVvdGU+ DQo8L2Jsb2NrcXVvdGU+DQo8cHJlPjxvOnA+Jm5ic3A7PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90 ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgIzhBRTIzNCAxLjBwdDtwYWRk aW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7 bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4NCjxibG9ja3F1b3RlIHN0eWxl PSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjRkNBRjNFIDEuMHB0O3BhZGRpbmc6MGlu IDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4t cmlnaHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQiPg0KPHByZT50by4mbmJzcDsgQXp1cmUvQW1h em9uLy4uLiBjb3VsZCBlYXNpbHkgcnVuIHN1Y2ggc2VydmljZXMuPG86cD48L286cD48L3ByZT4N CjwvYmxvY2txdW90ZT4NCjwvYmxvY2txdW90ZT4NCjxwcmU+PG86cD4mbmJzcDs8L286cD48L3By ZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjOEFF MjM0IDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFy Z2luLXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQiPg0KPHBy ZT5JIHNlZSB0d28gb3B0aW9ucyAtIGEgU05JRiBzZXJ2ZXIgaW1wbGVtZW50ZWQgYnkgZWFjaCB2 ZW5kb3IgZm9yIHRoZWlyPGJyPm93biBkZXZpY2VzL3NlcnZpY2VzLCBvciBhIGJpZ2dlciBTTklG IFNhYVMgaW1wbGVtZW50ZWQgYnkgYSB0cnVzdGVkPGJyPnByb3ZpZGVyLCB1c2VkIGJ5IHZlbmRv cnMuPG86cD48L286cD48L3ByZT4NCjwvYmxvY2txdW90ZT4NCjxwcmU+PGJyPlllcywgYnV0IHdo YXQncyB0aGUgZmluYW5jaWFsIG1vdGl2ZSBmb3IgdGhpcyBwcm92aWRlcj88bzpwPjwvbzpwPjwv cHJlPg0KPC9ibG9ja3F1b3RlPg0KPHByZSBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxi cj4oMSkgRm9yIGEgdmVuZG9yIHRvIHJ1biB0aGVpciBvd24gU05JRiBzZXJ2ZXI6IG1hcmtldCBh cyBhIHRydWUgYXVkaXRhYmxlIGVuZC10by1lbmQgZm9yIElvVCBkZXZpY2VzIHRoZXkgb2ZmZXIu PGJyPigyKSBGb3IgYSB2ZW5kb3IgdXNpbmcgU05JRiBTYWFTOiBtYXJrZXQgYXMgKDEpIGJhY2tl ZCBieTxicj57VHJ1c3RlZEJpZ05hbWV9PGJyPigzKSBGb3IgYSB7VHJ1c3RlZEJpZ05hbWV9IHRv IHJ1biBTTklGIFNhYVM6IGNvbGxlY3QgZmVlcyBmcm9tICgyKSBmb3IgdXNpbmcgdGhlaXIgc2Vy dmljZSBhbmQgYmlnIG5hbWUuPGJyPjxicj5BcyBhIG1hdHRlciBvZiBmYWN0LCBTTklGIHJlbGF5 IGlzIGxpZ2h0IG9uIHNlcnZlciByZXNvdXJjZXMuIEkndmUgYmVlbiBydW5uaW5nIGl0IG9uIGEg bWluaW11bSBEaWdpdGFsT2NlYW4gdmlydHVhbCBzZXJ2ZXIgZm9yIG1vbnRocyB3aXRoIG1vcmUg dGhhbiBhIGRvemVuIGNvbm5lY3RvcnMsJm5ic3A7Jm5ic3A7IHRoZSBzZXJ2ZXIgbG9hZCBpcyBh IGZyYWN0aW9uIG9mIGEgcGVyY2VudC4gT2YgY291cnNlIGlmIHNvbWVib2R5IGNvbm5lY3RzIElv VCBjYW1lcmFzIHRoZXkgY2FuIGdlbmVyYXRlIHNvbWUgdHJhZmZpYywgYnV0IElvVCB2ZW5kb3Jz IGFscmVhZHkgaGFuZGxlIGl0IHRocm91Z2ggdGhlaXIgcHJvcHJpZXRhcnkgcmVsYXlzLjxvOnA+ PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6 c29saWQgI0FEN0ZBOCAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0 OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYu MHB0Ij4NCjxwcmU+PG86cD4mbmJzcDs8L286cD48L3ByZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJi b3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjOEFFMjM0IDEuMHB0O3BhZGRpbmc6MGluIDBp biAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tcmln aHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQiPg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpu b25lO2JvcmRlci1sZWZ0OnNvbGlkICNGQ0FGM0UgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2 LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1yaWdodDowaW47 bWFyZ2luLWJvdHRvbTo2LjBwdCI+DQo8cHJlPlNOSUYgc2VlbXMgdmVyeSBtdWNoIElQdjQgTkFU NDQgZm9jdXNlZCwgYW5kIGl0IGNvdWxkIGJlbmVmaXQgZnJvbSBzb21lPGJyPnVuZGVyc3RhbmRp bmcgb2YgSVB2NiBhbmQgSVB2Ni1vdmVyLUlQdjQgdGVjaG5vbG9naWVzLDxvOnA+PC9vOnA+PC9w cmU+DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQo8cHJlIHN0eWxlPSJtYXJnaW4tYm90 dG9tOjEyLjBwdCI+IHBhcnRpY3VsYXJseTxvOnA+PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90ZSBz dHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgIzhBRTIzNCAxLjBwdDtwYWRkaW5n OjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7bWFy Z2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4NCjxibG9ja3F1b3RlIHN0eWxlPSJi b3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjRkNBRjNFIDEuMHB0O3BhZGRpbmc6MGluIDBp biAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tcmln aHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQiPg0KPHByZT5UZXJlZG8uPG86cD48L286cD48L3By ZT4NCjwvYmxvY2txdW90ZT4NCjwvYmxvY2txdW90ZT4NCjxwcmU+PG86cD4mbmJzcDs8L286cD48 L3ByZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAj OEFFMjM0IDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7 bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQiPg0K PHByZT5TTklGIGlzIG5vdCBleGFjdGx5IGZvY3VzZWQgb24gdjQsIGl0IHdvcmtzIGZpbmUgd2l0 aCB2NiBhcyB3ZWxsLiBJdCdzPGJyPmRlc2lnbmVkIHRvIHdvcmsgYXJvdW5kIE5BVCwgdGhhdCdz IHRydWUuIEhvd2V2ZXIsIElQdjYgbmV0d29ya3MgbWF5PGJyPnBvc2UgaXNzdWVzIHRvbyAtIGZp cmV3YWxscyBldGMsIHdoaWNoIHdpbGwgcHJldmVudCB0byBkaXJlY3RseSBhY2NlcHQ8YnI+aW5j b21pbmcgVENQIG9uIElQdjYgYWRkcmVzcy48bzpwPjwvbzpwPjwvcHJlPg0KPC9ibG9ja3F1b3Rl Pg0KPHByZT48YnI+VGVyZWRvIGNvdWxkIGJlIHVzZWQgaW5zdGVhZCBhbmQgYWxsb3dzIHRoZSBy ZWxheSB0byBiZSBzdGF0ZWxlc3MgYW5kPGJyPmRpc3RyaWJ1dGVkLCBhbmQgZGV2b2x2ZXMgdG8g b3JkaW5hcnkgSVB2NiB3aGVuIGl0IGlzIHByZXNlbnQuPG86cD48L286cD48L3ByZT4NCjwvYmxv Y2txdW90ZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48YnI+WWVzLCBidXQg VGVyZWRvIGlzIElQdjYgc3BlY2lmaWMsIHRoZSB3b3JsZCBpcyBub3Qgc3RyaWN0bHkgSVB2NiB5 ZXQuIEFuZCBpdCdzIGEgc3lzdGVtIGxldmVsIHNvbHV0aW9uLCB3aGlsZSBTTklGIHdvcmtzIGZp bmUgaW4gYSB1c2VyIHNwYWNlLjxvOnA+PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90ZSBzdHlsZT0i Ym9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0FEN0ZBOCAxLjBwdDtwYWRkaW5nOjBpbiAw aW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLXJp Z2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4NCjxwcmU+PG86cD4mbmJzcDs8L286cD48L3By ZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjOEFF MjM0IDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFy Z2luLXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQiPg0KPGJs b2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNGQ0FGM0UgMS4w cHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tdG9w OjUuMHB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTo2LjBwdCI+DQo8cHJlPkl0IGNs ZWFybHkgaGFzIHRvIHNwZWFrIEhUVFBTIG9ubHkuPG86cD48L286cD48L3ByZT4NCjwvYmxvY2tx dW90ZT4NCjwvYmxvY2txdW90ZT4NCjxwcmU+PG86cD4mbmJzcDs8L286cD48L3ByZT4NCjxibG9j a3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjOEFFMjM0IDEuMHB0 O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXRvcDo1 LjBwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQiPg0KPHByZT5JIHNwZWNp ZmllZCBIVFRQIGJlY2F1c2UgUEtDUyMxMCBhbmQgWC41MDkgYXJlIGluaGVyZW50bHkgc2VjdXJl IHRvIGJlPGJyPnNlbnQgb3ZlciBhIHBsYWluIGNvbm5lY3Rpb24uPG86cD48L286cD48L3ByZT4N CjwvYmxvY2txdW90ZT4NCjxwcmU+PGJyPlllcywgYnV0IHRoZXJlIGFyZSBwcml2YWN5IGNvbmNl cm5zIHdoaWNoIHdpbGwgYmVjb21lIGEgcGFpbiwgc288YnI+YmV0dGVyIHRvIGp1c3Qgc2F5IEhU VFBTIGhlcmUuPG86cD48L286cD48L3ByZT4NCjwvYmxvY2txdW90ZT4NCjxwcmUgc3R5bGU9Im1h cmdpbi1ib3R0b206MTIuMHB0Ij48YnI+SSByZXNwZWN0ZnVsbHkgZGlzYWdyZWUsIHN0aWxsIHRo aW5rIEhUVFAgaXMgYW4gZWFzaWVyIGFuc3dlciBmb3IgU05JRi4gVGhlIHByb2JsZW0gd2l0aCBI VFRQUyBpcyAtIFNOSUYgcmVsYXkgKHVzdWFsbHkpIHJvdXRlcyBodHRwcyBwb3J0IHRvIFNOSUYg Y29ubmVjdG9ycywgYW5kIGRvZXMgbm90IHNlcnZlIGl0IHdpdGhpbiB0aGUgc2VydmVyLiBIYXZp bmcgYSBkZWRpY2F0ZWQgaG9zdG5hbWUgb3IgYW4gYWx0ZXJuYXRlIHBvcnQgbWVhbnMgdGhhbiBT TklGIGNvbm5lY3RvcnMgbmVlZCBhZGRpdGlvbmFsIGNvbmZpZ3VyYXRpb24gb3B0aW9ucywgb3Ig YWRkaXRpb25hbCBkaXNjb3ZlcnkgcHJvdG9jb2xzLiBPbiB0aGUgb3RoZXIgaGFuZCwgSFRUUCBh bGxvd3MgdG8gZGVyaXZlIGFsbCBBUEkgVVJMcyBkZXRlcm1pbmlzdGljYWxseSBmcm9tIHRoZSBD Ti48YnI+SSBhZGRyZXNzZWQgdGhlIHBvc3NpYmxlIHNlY3VyaXR5IGNvbmNlcm5zIGluIG1vcmUg ZGV0YWlscyBhbmQgYW1lbmRlZCB0aGUgU2VjdXJpdHkgc2VjdGlvbiBpbiB0aGUgZHJhZnQuPG86 cD48L286cD48L3ByZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVm dDpzb2xpZCAjQUQ3RkE4IDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxl ZnQ6NC44cHQ7bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206 Ni4wcHQiPg0KPHByZT48bzpwPiZuYnNwOzwvbzpwPjwvcHJlPg0KPGJsb2NrcXVvdGUgc3R5bGU9 ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICM4QUUyMzQgMS4wcHQ7cGFkZGluZzowaW4g MGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1y aWdodDowaW47bWFyZ2luLWJvdHRvbTo2LjBwdCI+DQo8cHJlPlRoZSBiZXN0IG9wdGlvbiBpcyB0 aGUgbWFudWZhY3R1cmVyIEkgYmVsaWV2ZS4gVGhlIG1hbnVmYWN0dXJlciBjYW48YnI+aGF2ZSBl aXRoZXIgdGhlaXIgb3duIFNOSUYgc2VydmVyLCBvciB3b3JrIHdpdGggYSB0cnVzdGVkIFNhYVMu IFRoaXM8YnI+d2F5IGl0J3MgemVybyBzZXR1cCBmb3IgdGhlIGVuZCB1c2VyLCBhbmQgZG9lc24n dCBuZWVkIGFueTxicj5pbmZyYXN0cnVjdHVyZSBhZGRpdGlvbnMuPG86cD48L286cD48L3ByZT4N CjwvYmxvY2txdW90ZT4NCjxwcmU+PGJyPkFncmVlZCwgdGhlIG1hbnVmYWN0dXJlciBoYXMgdG8g cHJvdmlzaW9uIGEgY3JlZGVudGlhbC48bzpwPjwvbzpwPjwvcHJlPg0KPC9ibG9ja3F1b3RlPg0K PHByZSBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxicj5ZZXMgSSBwcm9wb3NlZCBzb21l IG91dGxpbmVzIGluIHRoZSBzZWN1cml0eSBzZWN0aW9uLCBtb3JlIGRldGFpbGVkIHNwZWNzIGFy ZSBwcm9iYWJseSBiZXR0ZXIgdG8gZGVzY3JpYmUgaW4gYSBzZXBhcmF0ZSBkcmFmdC48bzpwPjwv bzpwPjwvcHJlPg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNv bGlkICNBRDdGQTggMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0 LjhwdDttYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTo2LjBw dCI+DQo8cHJlPjxvOnA+Jm5ic3A7PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9y ZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgIzhBRTIzNCAxLjBwdDtwYWRkaW5nOjBpbiAwaW4g MGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0 OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4NCjxwcmU+U3VyZSwgZWxsaXB0aWMgY3VydmVzIGFy ZSBiZXR0ZXIsIGJ1dCBzb21lIG9sZCBzY2hvb2wgY2xpZW50cyBtYXkgaGF2ZTxicj5wcm9ibGVt cyB3aXRoIHRoZW0uIEl0IG1heSBtYWtlIHNlbnNlIHRvIG5vdCBtZW50aW9uIHRoZSByZWNvbW1l bmRlZDxicj5hbGdvcml0aG0gaW4gdGhlIGRyYWZ0LCBhbmQganVzdCB0byBmb2xsb3cgdGhlIENB J3MgcmVjb21tZW5kYXRpb25zLjxvOnA+PC9vOnA+PC9wcmU+DQo8L2Jsb2NrcXVvdGU+DQo8cHJl Pjxicj5FQ0RTQSBhY2NlbGVyYXRpb24gaXMgcHJldHR5IG11Y2ggdWJpcXVpdG91cywgd2hpbGUg UlNBIGlzIG5vdC48bzpwPjwvbzpwPjwvcHJlPg0KPC9ibG9ja3F1b3RlPg0KPHByZSBzdHlsZT0i bWFyZ2luLWJvdHRvbToxMi4wcHQiPjxicj5Ib25lc3RseSBJIGRvbid0IHRoaW5rIGFjY2VsZXJh dGlvbiBpcyBzdWNoIGEgYmlnIGRlYWwsIG1vc3Qgb2YgVExTIGpvYiBpcyBzeW1tZXRyaWMgY2lw aGVycyBhbnl3YXkuIEJ1dCBJIGFncmVlIC0gaXQncyBiZXR0ZXIgdG8gZm9sbG93IHRoZSBDQSBz dWdnZXN0aW9ucyBhbmQgaW5kdXN0cnkgcHJhY3RpY2VzLjxvOnA+PC9vOnA+PC9wcmU+DQo8Ymxv Y2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0FEN0ZBOCAxLjBw dDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6 NS4wcHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4NCjxwcmU+PG86cD4m bmJzcDs8L286cD48L3ByZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXIt bGVmdDpzb2xpZCAjOEFFMjM0IDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2lu LWxlZnQ6NC44cHQ7bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0 b206Ni4wcHQiPg0KPHByZT5JIGJlbGlldmUgdGhlcmUncyBubyBzZWN1cml0eSBpc3N1ZSwgYXMg bG9uZyBhcyB0aGUgQ04gZW50cm9weSBpcyBzdWZmaWNpZW50LjxvOnA+PC9vOnA+PC9wcmU+DQo8 L2Jsb2NrcXVvdGU+DQo8cHJlPjxvOnA+Jm5ic3A7PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90ZSBz dHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgIzhBRTIzNCAxLjBwdDtwYWRkaW5n OjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7bWFy Z2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4NCjxwcmU+SSBzcGVjaWZpZWQgdGhl IFgtU05JRi1DTjogYXMgbWFuZGF0b3J5LCBhbmQgdGV4dC9wbGFpbiBib2R5IGFzIGFuPGJyPm9w dGlvbmFsIGR1cGxpY2F0ZSBvZiBpdC4gVG8gbWFrZSBpdCBjbGVhbmVyLCBJIGNhbiByZW1vdmUg dGhlIGJvZHk8YnI+ZnJvbSB0aGUgc3BlY3MgYW5kIHNheSB0aGUgcmVzcG9uc2UgYm9keSBpcyB0 byBiZSBpZ25vcmVkLjxvOnA+PC9vOnA+PC9wcmU+DQo8L2Jsb2NrcXVvdGU+DQo8cHJlPjxicj5J ZiBib3RoIGFyZSBwcmVzZW50LCBhbmQgdGhleSBkb24ndCBtYXRjaCwgdGhlbiB0aGVyZSBpcyBj b25mdXNpb24uPGJyPlNvIGp1c3QgZ28gd2l0aCBvbmUuJm5ic3A7IEkgdGhpbmsgdGhhdCBpdCBz aG91bGQgYWN0dWFsbHkgYmUgYSBKU09OIG9yIENCT1IgcGF5bG9hZCByZXR1cm4uPG86cD48L286 cD48L3ByZT4NCjwvYmxvY2txdW90ZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0 Ij48YnI+QWdyZWVkLCBJIHJlbW92ZWQgdGhlIHJlc3BvbnNlIGJvZHkgZnJvbSB0aGUgZHJhZnQs IGdvaW5nIHdpdGggdGhlIGhlYWRlci48bzpwPjwvbzpwPjwvcHJlPg0KPGJsb2NrcXVvdGUgc3R5 bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNBRDdGQTggMS4wcHQ7cGFkZGluZzow aW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tdG9wOjUuMHB0O21hcmdp bi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTo2LjBwdCI+DQo8cHJlPjxvOnA+Jm5ic3A7PC9vOnA+ PC9wcmU+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQg IzhBRTIzNCAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0 O21hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4N CjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjRkNBRjNF IDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2lu LXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdpbi1ib3R0b206Ni4wcHQiPg0KPHByZT5U aGV5ICphcmVuJ3QqIHdoYXQgSUFOQSB3b3VsZCBjYWxsICZxdW90O0lQIHByb3RvY29scyZxdW90 Oywgd2hpY2ggd291bGQgYmUgdGhpbmdzPGJyPmxpa2U8YnI+VENQLCBVRFAsIFNDVFAsIEVTUCwg Li4uPG86cD48L286cD48L3ByZT4NCjwvYmxvY2txdW90ZT4NCjwvYmxvY2txdW90ZT4NCjxwcmU+ PG86cD4mbmJzcDs8L286cD48L3ByZT4NCjxibG9ja3F1b3RlIHN0eWxlPSJib3JkZXI6bm9uZTti b3JkZXItbGVmdDpzb2xpZCAjOEFFMjM0IDEuMHB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7 bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tcmlnaHQ6MGluO21hcmdp bi1ib3R0b206Ni4wcHQiPg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1s ZWZ0OnNvbGlkICNGQ0FGM0UgMS4wcHQ7cGFkZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4t bGVmdDo0LjhwdDttYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRv bTo2LjBwdCI+DQo8cHJlPkhhcyBJQU5BICphbHJlYWR5KiByZWdpc3RlcmVkIHBvcnQgNzEyMyB0 aGVuPzxvOnA+PC9vOnA+PC9wcmU+DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQo8cHJl PjxvOnA+Jm5ic3A7PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7 Ym9yZGVyLWxlZnQ6c29saWQgIzhBRTIzNCAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0 O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLXJpZ2h0OjBpbjttYXJn aW4tYm90dG9tOjYuMHB0Ij4NCjxwcmU+SXQncyBub3QgYW4gSVAgcHJvdG9jb2wuIEl0J3MgYSBz ZXJ2aWNlIHRoYXQgbGlzdGVucyBvbiBUQ1AgNzEyMywgSTxicj5yZWdpc3RlcmVkIHdpdGggSUFO QSBiYXNlZCBvbiBhIHByZXZpb3VzIHZlcnNpb24gb2YgdGhlIGRvY3VtZW50LDxicj5iZWZvcmUg SSB0dXJuZWQgaXQgaW50byBhbiBJLUQuPG86cD48L286cD48L3ByZT4NCjwvYmxvY2txdW90ZT4N CjxwcmU+PGJyPkkgdGhpbmsgeW91IHNob3VsZCBkcm9wIHRoZSAmcXVvdDtzbmlmLSomcXVvdDsg c2VudGVuY2UgYXMgaXQgbWFrZXMgbm8gc2Vuc2UuPGJyPllvdSBoYXZlIGFscmVhZHkgYWxsb2Nh dGVkIFRDUCBwb3J0IDcxMjMgdG8gdGhlIFNOSUYgKnNlcnZpY2UqLCBzbzxicj50aGF0J3MgZ3Jl YXQuPG86cD48L286cD48L3ByZT4NCjwvYmxvY2txdW90ZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1i b3R0b206MTIuMHB0Ij48YnI+SXQncyBhY3R1YWxseSBjYWxsZWQgJnF1b3Q7U2VydmljZSBOYW1l cyZxdW90OyBpbiBJQU5BIHRlcm1pbm9sb2d5LCBzb3JyeSBmb3IgdGhlIGNvbmZ1c2lvbi4gSSB1 cGRhdGVkIGluIHRoZSBkcmFmdC48YnI+PGJyPjxvOnA+PC9vOnA+PC9wcmU+DQo8YmxvY2txdW90 ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgI0FEN0ZBOCAxLjBwdDtwYWRk aW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1sZWZ0OjQuOHB0O21hcmdpbi10b3A6NS4wcHQ7 bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjYuMHB0Ij4NCjxwcmUgc3R5bGU9Im1hcmdp bi1ib3R0b206MTIuMHB0Ij48YnI+LS08YnI+XSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBO ZXZlciB0ZWxsIG1lIHRoZSBvZGRzISZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyB8IGlwdjYgbWVzaCBuZXR3b3JrcyBbPGJyPl0mbmJzcDsmbmJzcDsgTWljaGFlbCBSaWNo YXJkc29uLCBTYW5kZWxtYW4gU29mdHdhcmUgV29ya3MmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsgfCZuYnNwOyZuYnNwOyZuYnNwOyBJb1QgYXJjaGl0ZWN0Jm5ic3A7 Jm5ic3A7IFs8YnI+XSZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyA8YSBocmVmPSJtYWlsdG86bWNy QHNhbmRlbG1hbi5jYSI+bWNyQHNhbmRlbG1hbi5jYTwvYT4mbmJzcDsgPGEgaHJlZj0iaHR0cDov L3d3dy5zYW5kZWxtYW4uY2EvIj5odHRwOi8vd3d3LnNhbmRlbG1hbi5jYS88L2E+Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHwmbmJzcDsmbmJzcDsgcnVieSBvbiBy YWlscyZuYnNwOyZuYnNwOyZuYnNwOyBbPG86cD48L286cD48L3ByZT4NCjwvYmxvY2txdW90ZT4N CjxwcmUgc3R5bGU9InRleHQtYWxpZ246Y2VudGVyIj48aHIgc2l6ZT0iMiIgd2lkdGg9IjEwMCUi IGFsaWduPSJjZW50ZXIiPjwvcHJlPg0KPHByZT5TZWNkaXNwYXRjaCBtYWlsaW5nIGxpc3Q8YnI+ PGEgaHJlZj0ibWFpbHRvOlNlY2Rpc3BhdGNoQGlldGYub3JnIj5TZWNkaXNwYXRjaEBpZXRmLm9y ZzwvYT48YnI+PGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9z ZWNkaXNwYXRjaCI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zZWNkaXNw YXRjaDwvYT48YnI+SU1QT1JUQU5UIE5PVElDRTogVGhlIGNvbnRlbnRzIG9mIHRoaXMgZW1haWwg YW5kIGFueSBhdHRhY2htZW50cyBhcmUgY29uZmlkZW50aWFsIGFuZCBtYXkgYWxzbyBiZSBwcml2 aWxlZ2VkLiBJZiB5b3UgYXJlIG5vdCB0aGUgaW50ZW5kZWQgcmVjaXBpZW50LCBwbGVhc2Ugbm90 aWZ5IHRoZSBzZW5kZXIgaW1tZWRpYXRlbHkgYW5kIGRvIG5vdCBkaXNjbG9zZSB0aGUgY29udGVu dHMgdG8gYW55IG90aGVyIHBlcnNvbiwgdXNlIGl0IGZvciBhbnkgcHVycG9zZSwgb3Igc3RvcmUg b3IgY29weSB0aGUgaW5mb3JtYXRpb24gaW4gYW55IG1lZGl1bS4gVGhhbmsgeW91LjxvOnA+PC9v OnA+PC9wcmU+DQo8cHJlIHN0eWxlPSJ0ZXh0LWFsaWduOmNlbnRlciI+PGhyIHNpemU9IjIiIHdp ZHRoPSIxMDAlIiBhbGlnbj0iY2VudGVyIj48L3ByZT4NCjxwcmU+U2VjZGlzcGF0Y2ggbWFpbGlu ZyBsaXN0PGJyPjxhIGhyZWY9Im1haWx0bzpTZWNkaXNwYXRjaEBpZXRmLm9yZyI+U2VjZGlzcGF0 Y2hAaWV0Zi5vcmc8L2E+PGJyPjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vc2VjZGlzcGF0Y2giPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vc2VjZGlzcGF0Y2g8L2E+PG86cD48L286cD48L3ByZT4NCjwvYmxvY2txdW90ZT4NCjxwcmU+ PGJyPi0tPGJyPklvdG9wcyBtYWlsaW5nIGxpc3Q8YnI+PGEgaHJlZj0ibWFpbHRvOklvdG9wc0Bp ZXRmLm9yZyI+SW90b3BzQGlldGYub3JnPC9hPjxicj48YSBocmVmPSJodHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL2lvdG9wcyI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1h bi9saXN0aW5mby9pb3RvcHM8L2E+PGJyPklNUE9SVEFOVCBOT1RJQ0U6IFRoZSBjb250ZW50cyBv ZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNvbmZpZGVudGlhbCBhbmQgbWF5 IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVu dCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5IGFuZCBkbyBub3QgZGlzY2xv c2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVzZSBpdCBmb3IgYW55IHB1cnBv c2UsIG9yIHN0b3JlIG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5r IHlvdS48bzpwPjwvbzpwPjwvcHJlPg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5JTVBPUlRBTlQgTk9USUNFOiBUaGUgY29udGVudHMgb2YgdGhpcyBlbWFpbCBh bmQgYW55IGF0dGFjaG1lbnRzIGFyZSBjb25maWRlbnRpYWwgYW5kIG1heSBhbHNvIGJlIHByaXZp bGVnZWQuIElmIHlvdSBhcmUgbm90IHRoZSBpbnRlbmRlZCByZWNpcGllbnQsIHBsZWFzZSBub3Rp ZnkgdGhlIHNlbmRlciBpbW1lZGlhdGVseSBhbmQgZG8gbm90IGRpc2Nsb3NlIHRoZSBjb250ZW50 cyB0byBhbnkgb3RoZXIgcGVyc29uLA0KIHVzZSBpdCBmb3IgYW55IHB1cnBvc2UsIG9yIHN0b3Jl IG9yIGNvcHkgdGhlIGluZm9ybWF0aW9uIGluIGFueSBtZWRpdW0uIFRoYW5rIHlvdS4NCjxvOnA+ PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Rpdj4NCklNUE9SVEFOVCBOT1RJ Q0U6IFRoZSBjb250ZW50cyBvZiB0aGlzIGVtYWlsIGFuZCBhbnkgYXR0YWNobWVudHMgYXJlIGNv bmZpZGVudGlhbCBhbmQgbWF5IGFsc28gYmUgcHJpdmlsZWdlZC4gSWYgeW91IGFyZSBub3QgdGhl IGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlIG5vdGlmeSB0aGUgc2VuZGVyIGltbWVkaWF0ZWx5 IGFuZCBkbyBub3QgZGlzY2xvc2UgdGhlIGNvbnRlbnRzIHRvIGFueSBvdGhlciBwZXJzb24sIHVz ZSBpdCBmb3IgYW55IHB1cnBvc2UsDQogb3Igc3RvcmUgb3IgY29weSB0aGUgaW5mb3JtYXRpb24g aW4gYW55IG1lZGl1bS4gVGhhbmsgeW91Lg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_DBBPR08MB5915AC6A162154A6B53D27B7FA069DBBPR08MB5915eurp_-- From nobody Sat Mar 5 11:44:36 2022 Return-Path: X-Original-To: iotops@ietfa.amsl.com Delivered-To: iotops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 37B663A0B0D; Sat, 5 Mar 2022 11:44:04 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.109 X-Spam-Level: X-Spam-Status: No, score=-2.109 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sandelman.ca Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IAbYgFYyHTG5; Sat, 5 Mar 2022 11:43:59 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 45AEA3A0AFE; Sat, 5 Mar 2022 11:43:59 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 94A8538CA9; Sat, 5 Mar 2022 14:53:10 -0500 (EST) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id j-ph8OPEw8Ps; Sat, 5 Mar 2022 14:53:09 -0500 (EST) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id E3EED38CA8; Sat, 5 Mar 2022 14:53:08 -0500 (EST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=sandelman.ca; s=mail; t=1646509988; bh=3B6Fj53Lm7D403dvp8pM2fc5zyjWXKpcasOuFBfUa4I=; h=From:To:cc:Subject:In-Reply-To:References:Date:From; b=xNK9wtrkovnpLkGWfKnHPehl1N6vxoyHXHz5dvDFz5q/ZboCv2v3AoLEYR66HLJVS ioSP/oFIfL6B+ssfEjUNOEzKB24mSKIRX3zurbEXCJVZwDAIpq9vAze+mzTBdBZJb2 QQbeHnYdB/LZobeBEYh0c8h5KG7TeLYryXyM86mkNcOJck9aRVEaFvrvuchFpGPI8U pJFJhtZx4w5i52F2pC378KEqB83ASasbSyoebQzVtV42ie+UF5eUawPTmaTDGh51kb rRfy0aZjwvg0MRIl9nUM5FlOHdaNqQdG+962KWnSgmkMDdij2cIX8ub2N56k5lNwR3 CU1gmAfz15Sig== Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 8A2457CD; Sat, 5 Mar 2022 14:43:56 -0500 (EST) From: Michael Richardson To: "secdispatch\@ietf.org" , Jim Zubov cc: Hannes Tschofenig , "iotops\@ietf.org" , "anima\@ietf.org" In-Reply-To: <665685D3-B9AA-4A5E-B5B0-33D313A40716@commercebyte.com> References: <0075B437-024A-4D84-ABD7-92FE8DAFA59F@commercebyte.com>, <1865.1644434146@localhost> <4026.1644516168@localhost> <685366A1-01F4-4788-B025-0F5F4CE7947F@commercebyte.com> <665685D3-B9AA-4A5E-B5B0-33D313A40716@commercebyte.com> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Iotops] [Secdispatch] I-D: Deploying Publicly Trusted TLS Servers on IoT Devices Using SNI-based End-to-End TLS Forwarding (SNIF) X-BeenThere: iotops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IOT Operations List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Mar 2022 19:44:05 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Jim Zubov wrote: > I just want to emphasize once again that the relay is end to end TLS. > There are some IoT management solutions on the market, both open sour= ce > and proprietary, but as far as I can tell none of them fully follows > the end to end paradigm. I believe it's worth having a universal > cross-vendor solution that handles SNIF device onboarding, maintains > the credentials in a local secure storage, and consolidates https bas= ed > management interface hosted by individual devices through SNIF. Even if SNIF winds up "just" being a standardized way to call-home, I think that has value. I think that some text needs to be added contrasting SNIF to UPnP and RFC6887 (Port Control Protocol). What I haven't heard any comments in on the SECDISPATCH point of view about what to do with this document. Have the SECDISPATCH chairs put it on the agenda, or is there any agreement that maybe IOTOPS should dispatch it? Hannes: what do you think? =2D- Michael Richardson . o O ( IPv6 I=C3=B8T consulti= ng ) Sandelman Software Works Inc, Ottawa and Worldwide --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iPMEAQEKAB0WIQSk7ZHEG9TCGBNASfm/sjw/rPYc8wUCYiO9fAAKCRC/sjw/rPYc 88KwBf9sU7BKrkflIFz3rS0mPu+ZyiIHYcWdDkwMMbiqB6tIk2B/5ZUvt/urhXaY 7js3zwkusEdcELV0qVXixUbwxb1As81Y/o4MK2bjkLPGBV5nyfmTkD9EduQS4fim PsJenCqC9JnrA1Vcxbc+mcNWLw+689bVyjhFVhvtbW3xexGx7WwHEBEkAIys9cdm pJ0BmK4ZBKJvSv0vP+kHmyl5V4qBoSI/kM8iq2XcVjRXcnkIohEPv6TzhmkfFh4p mHFibUs= =LA4u -----END PGP SIGNATURE----- --=-=-=-- From nobody Sat Mar 5 11:49:41 2022 Return-Path: X-Original-To: iotops@ietfa.amsl.com Delivered-To: iotops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE9863A0B11 for ; Sat, 5 Mar 2022 11:49:17 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.906 X-Spam-Level: X-Spam-Status: No, score=-1.906 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20210112.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mcGEVT79evUh for ; Sat, 5 Mar 2022 11:49:12 -0800 (PST) Received: from mail-io1-xd2a.google.com (mail-io1-xd2a.google.com [IPv6:2607:f8b0:4864:20::d2a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3A1B03A0B0D for ; Sat, 5 Mar 2022 11:49:12 -0800 (PST) Received: by mail-io1-xd2a.google.com with SMTP id c23so13082857ioi.4 for ; Sat, 05 Mar 2022 11:49:12 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20210112.gappssmtp.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=IJfrC52m1u9nkBdZBayL/hU/5Umt8cjuxnhcX5Xv87w=; b=40NJY1W9ry+LtJ94GkPG1A91/9/4euASBqD93YBOKj+cBGUwfOsjAEEvgNfYa6LX5Y hqA4Lyg7Y7AVuD75Me38gMr4wAwWp/sov32My7yThqFl0LuS+pBVbjR1wnJohV7Zhuvw QMNK+qDk17Q6G1y1Fi4NHlv+THsXER8xcS1C57V4fgcTCl79Pfj9AEzRFk7V3bUBRLzg icWy3pC4lT4Vuxc5We3EIk1Njlk5eDJzp51/Lu5MmrG3S6w4uKrgI8cFPWH+XdagAkOH cFyE4XJFz5g5/tg+QXTfS9tUS9LCOH2/3VLvIp0EGhIGGm//fzFr7541QTrFg/Dl7B+4 ewdQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=IJfrC52m1u9nkBdZBayL/hU/5Umt8cjuxnhcX5Xv87w=; b=JDdJKjAoLYoCPiUnXP0S9mEA/PdX6nIoHu+BWxp8k3DRmWONOgnRAPVv0OfQHHgT7K 3IN+fMmmPGldzuRIGJJf9D4ls81YemrWx0cwlJchKGwoK5HhcBzyonWiwE5lruQnHE8h BlxYT8Y2MOq5f2g5FWp8s0Nrywl69tK6dmzBiW/sCPcFAWjJeU2zgyTrZ8mlP7pCvdWv HqaUyb8/twIL4FluWjcxAYHz6LHAR9GkKWTJ6/bxmyHQ4SAMBso/KsrAZ2Y1OE7TzFTM EJQJoxhzhwjo4k/CGZmGwrnxvBnn2T6saWYFgnIppkv1KVgejGzZhvR1F9MqcKeCG/YP r6nQ== X-Gm-Message-State: AOAM53357VLDOMuHHg77XOnWTJIv0Gfb1vt8JYJNephFKSwoqF2FMBSB v6uvGQPcaodO61ln2NIqSPvsy/UOBgHWMt6+P6/1qw== X-Google-Smtp-Source: ABdhPJxEVFsd03Rn/BaQvFblPyFHt3OXynNS+3Qo9TLWOaJ9/J0QEN8/Biwq0HRqAuxpSiTz8mMKar5ehd9L72reGmk= X-Received: by 2002:a5e:d60d:0:b0:640:9e90:c1c4 with SMTP id w13-20020a5ed60d000000b006409e90c1c4mr3941293iom.0.1646509751178; Sat, 05 Mar 2022 11:49:11 -0800 (PST) MIME-Version: 1.0 References: <0075B437-024A-4D84-ABD7-92FE8DAFA59F@commercebyte.com> <1865.1644434146@localhost> <4026.1644516168@localhost> <685366A1-01F4-4788-B025-0F5F4CE7947F@commercebyte.com> <665685D3-B9AA-4A5E-B5B0-33D313A40716@commercebyte.com> <6296.1646509436@localhost> In-Reply-To: <6296.1646509436@localhost> From: Eric Rescorla Date: Sat, 5 Mar 2022 11:48:35 -0800 Message-ID: To: Michael Richardson Cc: "secdispatch@ietf.org" , Jim Zubov , Hannes Tschofenig , "anima@ietf.org" , "iotops@ietf.org" Content-Type: multipart/alternative; boundary="000000000000d6afef05d97dec49" Archived-At: Subject: Re: [Iotops] [Anima] [Secdispatch] I-D: Deploying Publicly Trusted TLS Servers on IoT Devices Using SNI-based End-to-End TLS Forwarding (SNIF) X-BeenThere: iotops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IOT Operations List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Mar 2022 19:49:18 -0000 --000000000000d6afef05d97dec49 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Sat, Mar 5, 2022 at 11:44 AM Michael Richardson wrote: > > Jim Zubov wrote: > > I just want to emphasize once again that the relay is end to end TL= S. > > There are some IoT management solutions on the market, both open > source > > and proprietary, but as far as I can tell none of them fully follow= s > > the end to end paradigm. I believe it's worth having a universal > > cross-vendor solution that handles SNIF device onboarding, maintain= s > > the credentials in a local secure storage, and consolidates https > based > > management interface hosted by individual devices through SNIF. > > Even if SNIF winds up "just" being a standardized way to call-home, I thi= nk > that has value. I think that some text needs to be added contrasting > SNIF > to UPnP and RFC6887 (Port Control Protocol). > > What I haven't heard any comments in on the SECDISPATCH point of view abo= ut > what to do with this document. I provided some comments at the end of my review. Briefly, I have doubts that this is the best technical approach and so I think if we are to work on this problem we should start by working out the problem statement and requirements first= . Have the SECDISPATCH chairs put it on the > agenda, I think putting it on the SECDISPATCH agenda would be appropriate > or is there any agreement that maybe IOTOPS should dispatch it? > I think that would be a bad idea. There's nothing really IoT-specific here. -Ekr > Hannes: what do you think? > > > -- > Michael Richardson . o O ( IPv6 I=C3=B8T consul= ting ) > Sandelman Software Works Inc, Ottawa and Worldwide > > > > > _______________________________________________ > Anima mailing list > Anima@ietf.org > https://www.ietf.org/mailman/listinfo/anima > --000000000000d6afef05d97dec49 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Sat, Mar 5, 2022 at 11:44 AM Micha= el Richardson <mcr+ietf@sande= lman.ca> wrote:

Jim Zubov <ietf-list@commercebyte.com> wrote:
=C2=A0 =C2=A0 > I just want to emphasize once again that the relay is en= d to end TLS.
=C2=A0 =C2=A0 > There are some IoT management solutions on the market, b= oth open source
=C2=A0 =C2=A0 > and proprietary, but as far as I can tell none of them f= ully follows
=C2=A0 =C2=A0 > the end to end paradigm. I believe it's worth having= a universal
=C2=A0 =C2=A0 > cross-vendor solution that handles SNIF device onboardin= g, maintains
=C2=A0 =C2=A0 > the credentials in a local secure storage, and consolida= tes https based
=C2=A0 =C2=A0 > management interface hosted by individual devices throug= h SNIF.

Even if SNIF winds up "just" being a standardized way to call-hom= e, I think
that has value.=C2=A0 =C2=A0 I think that some text needs to be added contr= asting SNIF
to UPnP and RFC6887 (Port Control Protocol).

What I haven't heard any comments in on the SECDISPATCH point of view a= bout
what to do with this document.=C2=A0

I prov= ided some comments at the end of my review. Briefly, I have doubts that thi= s
is the best technical approach and so I think if we are to work= on this problem
we should start by working out the problem state= ment and requirements first.


=C2=A0 Have the SECDISPATCH chairs = put it on the
agenda,

I think putting it on the SECDISPAT= CH agenda would be appropriate

=C2=A0
or is there any agreement t= hat maybe IOTOPS should dispatch it?

I = think that would be a bad idea. There's nothing really IoT-specific her= e.

-Ekr



Hannes: what do you think?


--
Michael Richardson <mcr+IETF@sandelman.ca>=C2=A0 =C2=A0. o O ( IPv6 I=C3=B8T co= nsulting )
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Sandelman Software Works Inc, Otta= wa and Worldwide




_______________________________________________
Anima mailing list
Anima@ietf.org
https://www.ietf.org/mailman/listinfo/anima
--000000000000d6afef05d97dec49-- From nobody Sat Mar 5 12:15:40 2022 Return-Path: X-Original-To: iotops@ietfa.amsl.com Delivered-To: iotops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 630CA3A0B55; Sat, 5 Mar 2022 12:15:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.109 X-Spam-Level: X-Spam-Status: No, score=-2.109 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sandelman.ca Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wER8jOkIJPhU; Sat, 5 Mar 2022 12:15:33 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [IPv6:2607:f0b0:f:3:216:3eff:fe7c:d1f3]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 822A23A0B5B; Sat, 5 Mar 2022 12:15:32 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 6460E38CD1; Sat, 5 Mar 2022 15:24:42 -0500 (EST) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id zGZmMz4sEb7A; Sat, 5 Mar 2022 15:24:40 -0500 (EST) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 7392338B20; Sat, 5 Mar 2022 15:24:40 -0500 (EST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=sandelman.ca; s=mail; t=1646511880; bh=3lNcGikwMsQwwZf4tJM0t71t1ZqZGr7taQqQQVLEipA=; h=From:To:cc:Subject:In-Reply-To:References:Date:From; b=vIHo/xvSOg6++olONzvxBt05ZgzsOPu0wn6teKgnQQTwdVpi5dggk5WT7FP8NBVjf 4ACX2oyNJJLhqTk0vb21DcPEdYcvjySEDWh+Q+5jsk4RmrWVq2kOnMwt70XqWVgisp 39VhAUb+AFhUvqNckLlJ76dzNttsnsqSXTBYTER+uXLW+YZpiKxCdjxRs+Nx5EbzjA bIY2eR4s4SmuyldlB9E+rI3dpegDeKNNBscBvCGIEonLZ5liWGzG3RLMowuqsmNzDF DXuECSHeUjR4nhfg3HMdKbfn5RVkD2wF2h1XQH9Y8bBA/o4hnlKDo5G1hl+RCf24sT gip22JtLN9dSw== Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 069207CD; Sat, 5 Mar 2022 15:15:28 -0500 (EST) From: Michael Richardson To: Hannes Tschofenig cc: Jim Zubov , "secdispatch\@ietf.org" , "iotops\@ietf.org" , "anima\@ietf.org" In-Reply-To: References: <0075B437-024A-4D84-ABD7-92FE8DAFA59F@commercebyte.com>, <1865.1644434146@localhost> <4026.1644516168@localhost> <685366A1-01F4-4788-B025-0F5F4CE7947F@commercebyte.com> <665685D3-B9AA-4A5E-B5B0-33D313A40716@commercebyte.com> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Iotops] [Secdispatch] I-D: Deploying Publicly Trusted TLS Servers on IoT Devices Using SNI-based End-to-End TLS Forwarding (SNIF) X-BeenThere: iotops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IOT Operations List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Mar 2022 20:15:39 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hannes Tschofenig wrote: > Based on what you wrote below I was actually wondering if the use of > TLS or DTLS at the application layer wouldn=E2=80=99t even be a better It took me a few moments to realize you meant ATLAS. There is also, now, oblivious HTTP/TLS. =2D- Michael Richardson . o O ( IPv6 I=C3=B8T consulti= ng ) Sandelman Software Works Inc, Ottawa and Worldwide --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iPMEAQEKAB0WIQSk7ZHEG9TCGBNASfm/sjw/rPYc8wUCYiPE3wAKCRC/sjw/rPYc 85aIBf0brGXKr6G0JslqJaRcZKbVKotfQEbFY+GDupMZXXLcEEIOrKs4Okj4e8jP /q5otgC8BR+5wjB7cuWsq8LNH81DCdY09sygHKUf6nOi+VNwBATY8OSKGRDy6aIG SoRH1m/FSn4+bZQ9cl/P80IVeBHfShxyBfqYRvhC8eUM+Z3vPy1q5nINh9zHsBG8 HQD+vXt80aNFX8fL+5coZhvCI6Yh0xIWGBx/WdjH/MDnwMOxailT+iwS9QS180Ev 0hFhWlg= =3xG7 -----END PGP SIGNATURE----- --=-=-=-- From nobody Sat Mar 5 14:05:54 2022 Return-Path: X-Original-To: iotops@ietfa.amsl.com Delivered-To: iotops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7DC0B3A0D35; Sat, 5 Mar 2022 14:05:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.108 X-Spam-Level: X-Spam-Status: No, score=-2.108 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=commercebyte.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VIdie205eJbO; Sat, 5 Mar 2022 14:05:47 -0800 (PST) Received: from ocean1.commercebyte.com (ocean1.commercebyte.com [104.131.120.15]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4AF453A0D32; Sat, 5 Mar 2022 14:05:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=commercebyte.com; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID:References:In-Reply-To:Subject:CC:To:From:Date; bh=ywXPKJjpJyWsBL2ELGS7cWGzz3ntmncojLcMaqCFNY4=; b=AVlhfmP0G5UHYYYA4hiTx7SUYwupFHonUSwCzDc5bkEY9XG0f7giX/bZ6iV7m5cWcZUUdefWrCDie0EgIMuNxS1gpoxWK8BwRQRMqOwtn4vXvAtWf6ngb0hHoTQI/I5b8Wp/aXShVPpkbeQLmP38qAPoiNLL+tYulE24fSF3cIE=; Received: from [47.204.174.73] (port=40730 helo=[127.0.0.1]) by ocean1.commercebyte.com with esmtpsa (UNKNOWN:DHE-RSA-AES256-GCM-SHA384:256) (Exim 4.82) (envelope-from ) id 1nQcX2-0000EF-HP; Sat, 05 Mar 2022 17:05:44 -0500 Received: from [206.81.2.95]:7120 (helo=[127.0.0.1]) by [192.168.254.152]:49416 (localhost) with VESmail ESMTP Proxy 1.59 (encrypt=FALSE mode=FALLBACK); Sat, 05 Mar 2022 17:05:43 -0500 Date: Sat, 05 Mar 2022 17:04:57 -0500 From: Jim Zubov To: secdispatch@ietf.org, Michael Richardson , Hannes Tschofenig CC: "secdispatch@ietf.org" , "anima@ietf.org" , "iotops@ietf.org" , Jim Zubov User-Agent: K-9 Mail for Android In-Reply-To: <16442.1646511327@localhost> References: <0075B437-024A-4D84-ABD7-92FE8DAFA59F@commercebyte.com>, <1865.1644434146@localhost> <4026.1644516168@localhost> <685366A1-01F4-4788-B025-0F5F4CE7947F@commercebyte.com> <665685D3-B9AA-4A5E-B5B0-33D313A40716@commercebyte.com> <16442.1646511327@localhost> Message-ID: MIME-Version: 1.0 Content-Type: multipart/alternative; boundary=----LI0I12QGORW6V91BMZIZHG09AW0CJ6 Content-Transfer-Encoding: 7bit X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - ocean1.commercebyte.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - commercebyte.com X-Get-Message-Sender-Via: ocean1.commercebyte.com: authenticated_id: jz@nixob.com Archived-At: Subject: Re: [Iotops] [Secdispatch] I-D: Deploying Publicly Trusted TLS Servers on IoT Devices Using SNI-based End-to-End TLS Forwarding (SNIF) X-BeenThere: iotops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IOT Operations List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Mar 2022 22:05:53 -0000 ------LI0I12QGORW6V91BMZIZHG09AW0CJ6 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable I agree with Hannes that a pre-existing relay infrastructure can be used to= tunnel TLS in place of SNIF relay=2E The CA proxy is still needed to maint= ain the cert=2E As per Eric Rescorla's arguments, i can also envision a possibility to upg= rade an established SNIF control socket to MASQUE over H2, or to use MASQUE= over QUIC as an alternative=2E However I still don't see any added value i= n doing so, opposed to multiple added complications, as I don't see a pract= ical case with a large number of concurrent SNIF service connections=2E If anybody has a different opinion please chime in=2E On March 5, 2022 3:15:27 PM EST, Michael Richardson wrote: > >Hannes Tschofenig wrote: > > Based on what you wrote below I was actually wondering if the use o= f > > TLS or DTLS at the application layer wouldn=E2=80=99t even be a bet= ter > >It took me a few moments to realize you meant ATLAS=2E >There is also, now, oblivious HTTP/TLS=2E > >-- >Michael Richardson =2E o O ( IPv6 I=C3=B8T co= nsulting ) > Sandelman Software Works Inc, Ottawa and Worldwide > > > > ------LI0I12QGORW6V91BMZIZHG09AW0CJ6 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable I agree with Hannes that a pre-existing relay infr= astructure can be used to tunnel TLS in place of SNIF relay=2E The CA proxy= is still needed to maintain the cert=2E

As per Eric Rescorla's argu= ments, i can also envision a possibility to upgrade an established SNIF con= trol socket to MASQUE over H2, or to use MASQUE over QUIC as an alternative= =2E However I still don't see any added value in doing so, opposed to multi= ple added complications, as I don't see a practical case with a large numbe= r of concurrent SNIF service connections=2E
If anybody has a different o= pinion please chime in=2E

On March 5, 202= 2 3:15:27 PM EST, Michael Richardson <mcr+ietf@sandelman=2Eca> wrote:= 

Hannes Tschofenig <Hannes=2ETsch=
ofenig@arm=2Ecom> wrote:
Based on what you wrote below I was actually wondering if the use ofTLS or DTLS at the application layer wouldn=E2=80=99t even be a better

It took me a few moments to realize you meant ATLAS=2EThere is also, now, oblivious HTTP/TLS=2E

--
Michael Richardson =
<mcr+IETF@sandelman=2Eca>   =2E o O ( IPv6 I=C3=B8T consulting )
 =
          Sandelman Software Works Inc, Ottawa and Worldwide



------LI0I12QGORW6V91BMZIZHG09AW0CJ6-- From nobody Sat Mar 5 14:28:02 2022 Return-Path: X-Original-To: iotops@ietfa.amsl.com Delivered-To: iotops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 07BC23A0D58; Sat, 5 Mar 2022 14:28:00 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.109 X-Spam-Level: X-Spam-Status: No, score=-2.109 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sandelman.ca Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TTkd00A7CRPP; Sat, 5 Mar 2022 14:27:55 -0800 (PST) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8255E3A0D51; Sat, 5 Mar 2022 14:27:53 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 5466638CC5; Sat, 5 Mar 2022 17:37:04 -0500 (EST) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id lDQ8XiIamZt2; Sat, 5 Mar 2022 17:37:00 -0500 (EST) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id D1D3638CC3; Sat, 5 Mar 2022 17:37:00 -0500 (EST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=sandelman.ca; s=mail; t=1646519820; bh=/NRgkXE8y2KcNRMIgp3e8LwmKBeMWEh8dLr78Lv11aw=; h=From:To:Subject:In-Reply-To:References:Date:From; b=1ntN62jvxcCpFSE5ypFkzTeu2cdL1S0C/K7zWlcnPqAwN7XLmHJZRUzprWeLIr4eY MquZdek5245FlOHz0YhD3PbSxxtJk8RpnoS1f0zyHWpTCpetlCkv1n8r68vGIAfAw1 oMXlbFnuBw6PUgXAh/kmV0lUx+HsNvt3+bMC7g+zxTLr0s7SriCbX6miFdnYTCaM7I JjYlcezrzN+ThCTKgRBrWFytANEbA5CMuUA68mydzUTLmryP6kHn5TD1Y3KZ9WKSPI RRpp+n3KP7j0XDFK7Jul1+G7e0u/mAeBWWWR9kOGvHecF4SO8jvkMp4fuIfr+7qZZU GkCS9aTEZfRRg== Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 0F8D266A; Sat, 5 Mar 2022 17:27:48 -0500 (EST) From: Michael Richardson To: Eric Rescorla , "secdispatch\@ietf.org" , Jim Zubov , Hannes Tschofenig , "anima\@ietf.org" , "iotops\@ietf.org" In-Reply-To: References: <0075B437-024A-4D84-ABD7-92FE8DAFA59F@commercebyte.com> <1865.1644434146@localhost> <4026.1644516168@localhost> <685366A1-01F4-4788-B025-0F5F4CE7947F@commercebyte.com> <665685D3-B9AA-4A5E-B5B0-33D313A40716@commercebyte.com> <6296.1646509436@localhost> X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: Re: [Iotops] [Anima] [Secdispatch] I-D: Deploying Publicly Trusted TLS Servers on IoT Devices Using SNI-based End-to-End TLS Forwarding (SNIF) X-BeenThere: iotops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IOT Operations List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Mar 2022 22:28:00 -0000 --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Eric Rescorla wrote: > I provided some comments at the end of my review. Briefly, I have dou= bts > that this > is the best technical approach and so I think if we are to work on th= is > problem > we should start by working out the problem statement and requirements= first. I would agree with you. In particular, I think that UPnP or PCP, in combination with some kind of dynamic DNS infrastructure, could do everything SNIF does, and do it in a far more decentralized fashion. So what is it that SNIF does that is truly different? >> Have the SECDISPATCH chairs put it on the >> agenda, > I think putting it on the SECDISPATCH agenda would be appropriate Good. >> or is there any agreement that maybe IOTOPS should dispatch it? > I think that would be a bad idea. There's nothing really IoT-specific= here. There is often nothing IoT specific about many things. There is however a community of people who understand the set of tradeoff in deploying systems at large scale that have no human at the helm. =2D- Michael Richardson . o O ( IPv6 I=C3=B8T consulti= ng ) Sandelman Software Works Inc, Ottawa and Worldwide --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iPMEAQEKAB0WIQSk7ZHEG9TCGBNASfm/sjw/rPYc8wUCYiPj4wAKCRC/sjw/rPYc 8zW1Bf4y2JnW5465qzZxol3PnKLU4pQ1PofoKw77a8eAUNiNvn3Hob3LFBfjwTBJ 72Gw+pcgfb7Ww50aJmt9fa3RAR+5VpB68YXU561uzwEmN13sHcToqv0FFtThq9M6 SAiWcnmS2zbHXVrrWE0ua0EyQXtidCXD0NrsLeUJ/LpFZiE6qbbJQNbzltpX3Njh TZgkn2uhMv4gChRwkwnA5AiHTeknKFiMX6QBhwiiyjqThNx5qxe7XiYAoqF74gcY 7l34TVQ= =REA/ -----END PGP SIGNATURE----- --=-=-=-- From nobody Sat Mar 5 14:47:32 2022 Return-Path: X-Original-To: iotops@ietfa.amsl.com Delivered-To: iotops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E718A3A0DD1 for ; Sat, 5 Mar 2022 14:46:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.906 X-Spam-Level: X-Spam-Status: No, score=-1.906 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=rtfm-com.20210112.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0-ujwS_f_eCf for ; Sat, 5 Mar 2022 14:46:45 -0800 (PST) Received: from mail-io1-xd36.google.com (mail-io1-xd36.google.com [IPv6:2607:f8b0:4864:20::d36]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7842B3A0DD2 for ; Sat, 5 Mar 2022 14:46:45 -0800 (PST) Received: by mail-io1-xd36.google.com with SMTP id d62so13205403iog.13 for ; Sat, 05 Mar 2022 14:46:45 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rtfm-com.20210112.gappssmtp.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=EgtbuW9z4EyWSCZ2kgxiH7sG4IRPplCeugl7xSA21YU=; b=qxqtphbw9DB6uwd5z66hzGQnR7pAE85bFl0DU/0T16uHLq9jD/2UJbbGVXfIHwPWOr 8qTWtT+6H20XOn5eTo9ENcbXKLd6dt2CHn6ZJkdFN2mf4hid6OnvWXYp7eIR5jOYVaBz If7i32DkS5XY1Qa7Vb6NHCyqTq7BjS4ZmaCAtJRY9ACC3MchAXmaHKQjM4M/JjXkTenk L7DFjJVR9rFGvT9fr0eXgnqqLA8U8vaDzMO2oz83/5HPsD7QsdhbazDyFAq4/rumr1GG /9derRjNLSB6kKlL4E2GUZZV40miF0K6WaMjnyI/COX0kLtsA/DgE11wJpM/8ktP8MH9 e/tw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=EgtbuW9z4EyWSCZ2kgxiH7sG4IRPplCeugl7xSA21YU=; b=CuDJAVw7+R4zOl/P+LM7ykFW5etzK2L7q5NzJLRpwSAEpxpjBA3I+VC9YJWMGWOLkP wDCTtRYxSmIVIFvdjP7v+F3E5E+wZoBjAtkMEJBUMPlXRsyPyDw+8++30Z2jdJa+hJr+ TO7XAzVJkf7i35UXS7yVJJyF4HfzEB628nTAy0h8FQQBRkRoEnKuUM9A5LlCIEO/XFLR hSlgfI/HTJwE9BzItoVpkRTMdA/yCz7N41bxyEliYpciSwD/iO3CvjUsDl9InIWXhouW cmKEBZhBnQT9+YY7aL8tvu58UVYQd5U+0Kddd8ap4Hk7R3xhUmwFIb/nKotR4f6oExmb 9q6A== X-Gm-Message-State: AOAM533s8mDyn3coTieU7zvfn1WLNc83lMZa660QsbwDNEqi+Fzp6iuz TZnMZN05BkLkrwODGQUm7fWsCJ2o8jCGHQkFx9M82w== X-Google-Smtp-Source: ABdhPJzt1rirroXpirILwyPlTBvA+sY4XhYbsfH3k8wiMOtaYTAhrDBlJWKMjkJcAJtVWo5yxuR+9NtoFtmyNjNvvAw= X-Received: by 2002:a05:6638:218b:b0:317:9e47:bf43 with SMTP id s11-20020a056638218b00b003179e47bf43mr4432434jaj.20.1646520404553; Sat, 05 Mar 2022 14:46:44 -0800 (PST) MIME-Version: 1.0 References: <0075B437-024A-4D84-ABD7-92FE8DAFA59F@commercebyte.com> <1865.1644434146@localhost> <4026.1644516168@localhost> <685366A1-01F4-4788-B025-0F5F4CE7947F@commercebyte.com> <665685D3-B9AA-4A5E-B5B0-33D313A40716@commercebyte.com> <6296.1646509436@localhost> <22243.1646519268@localhost> In-Reply-To: <22243.1646519268@localhost> From: Eric Rescorla Date: Sat, 5 Mar 2022 14:46:08 -0800 Message-ID: To: Michael Richardson Cc: "secdispatch@ietf.org" , Jim Zubov , Hannes Tschofenig , "anima@ietf.org" , "iotops@ietf.org" Content-Type: multipart/alternative; boundary="000000000000d44ef205d9806728" Archived-At: Subject: Re: [Iotops] [Anima] [Secdispatch] I-D: Deploying Publicly Trusted TLS Servers on IoT Devices Using SNI-based End-to-End TLS Forwarding (SNIF) X-BeenThere: iotops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IOT Operations List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 05 Mar 2022 22:46:52 -0000 --000000000000d44ef205d9806728 Content-Type: text/plain; charset="UTF-8" On Sat, Mar 5, 2022 at 2:27 PM Michael Richardson wrote: > > Eric Rescorla wrote: > > >> or is there any agreement that maybe IOTOPS should dispatch it? > > > I think that would be a bad idea. There's nothing really > IoT-specific here. > > There is often nothing IoT specific about many things. > There is however a community of people who understand the set of tradeoff > in > deploying systems at large scale that have no human at the helm. > I think it would be fine to consult IOTOPs. I'm merely saying that I don't think it's a good idea to have them dispatch something that is so obviously generic. -Ekr --000000000000d44ef205d9806728 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable


=
On Sat, Mar 5, 2022 at 2:27 PM Michae= l Richardson <mcr+ietf@sandel= man.ca> wrote:

Eric Rescorla <ekr@rtf= m.com> wrote:

=C2=A0 =C2=A0 >> or is there any agreement that maybe IOTOPS should d= ispatch it?

=C2=A0 =C2=A0 > I think that would be a bad idea. There's nothing re= ally IoT-specific here.

There is often nothing IoT specific about many things.
There is however a community of people who understand the set of tradeoff i= n
deploying systems at large scale that have no human at the helm.

I think it would be fine to consult IOTOPs. I'= ;m merely saying that I don't think it's
a good idea to h= ave them dispatch something that is so obviously generic.

-Ekr
--000000000000d44ef205d9806728-- From nobody Sun Mar 6 15:14:43 2022 Return-Path: X-Original-To: iotops@ietfa.amsl.com Delivered-To: iotops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 505193A0E06 for ; Sun, 6 Mar 2022 15:14:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.107 X-Spam-Level: X-Spam-Status: No, score=-2.107 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 54RqfAcC0jyd for ; Sun, 6 Mar 2022 15:14:31 -0800 (PST) Received: from mail-pj1-x1031.google.com (mail-pj1-x1031.google.com [IPv6:2607:f8b0:4864:20::1031]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 937293A0E05 for ; Sun, 6 Mar 2022 15:14:31 -0800 (PST) Received: by mail-pj1-x1031.google.com with SMTP id ge19-20020a17090b0e1300b001bcca16e2e7so15038299pjb.3 for ; Sun, 06 Mar 2022 15:14:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=message-id:date:mime-version:user-agent:subject:references :content-language:from:to:in-reply-to; bh=sONG030HVcQvyFcyFU/qRZ5yFOrAZVvLo5AOyCWIsuQ=; b=dYfQCYgFnbBZSXJ297SANpnXAueyyYktvgzdM9Rx5olQSB1mnxpjoYKCQ5aLwtyatb mcJwridrYX5ZCXpZ9sBX9ZXeGHCaYJLYOiaVhKUALAzDvkQgDhT+YMwf0qDI3HJ/MxpA 3jmUQ7vfH3SyVI+leDqVYD+MVjrtceE6QV4PgYfWSnbf8KSKQ71RBObaoz7hLR2T9II6 t8m00WwAOE9lFXl0TS0waoOTwkshwp5HVZUT11Q0c7IfE+qZR6AT/0z6gr9MX73C2jVV 8tc6Pw/+35NBnog5oJJRJBgO7uwjgXnIUiwOdaIQn7VITgbVJ63UPa4z8FhTaGjtP25H HPhA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:message-id:date:mime-version:user-agent:subject :references:content-language:from:to:in-reply-to; bh=sONG030HVcQvyFcyFU/qRZ5yFOrAZVvLo5AOyCWIsuQ=; b=b2gRFIK18TI3TqM2Mp+yDBSvgQt3GwIbjgBoihIaCsEPCTYnETAahAHF90wlPng4Dv QDcbXo+PcACLyCdWR+B01DgSKXbZQPcYSwmrfyrfsgaplxMYHZHjflrQ8k09ZrZNjOOA UxIsBmxdkuuqBCD7VsobmNsRV8SoCJ/U8wazykv5FZbcTXQVQVhnTJgvNqYjyMUnVN3s S+jPs+dpFiXWbsnmi/dM8JuBAWiWgzfkiC3CwUvbBKfSQlPFQm62aJvAHgNWTcGf0raw b7K4tiuWbT+TV1zBM7PwAAidx1TPUq+u3r/95cNP+SUL9jq2M2rM0w8taShfAZDkKawf HGMw== X-Gm-Message-State: AOAM531W5JDQUCOxUL89STugqiB31lrszuzEbenZt+NnB3l/xFc+I5A+ Unjs20xHLlLhzeLjPyMq+gP5R9lawrxMFQ== X-Google-Smtp-Source: ABdhPJw1EM3Nh2kaDB0oVFbltGeVDqpVOqwJBYpOLuRS8EarQOfAWItc/g+cqidmTc+h2UT7PyAQ7g== X-Received: by 2002:a17:902:6846:b0:151:cc47:1b19 with SMTP id f6-20020a170902684600b00151cc471b19mr9231754pln.109.1646608470529; Sun, 06 Mar 2022 15:14:30 -0800 (PST) Received: from [192.168.1.15] (c-73-202-182-183.hsd1.ca.comcast.net. [73.202.182.183]) by smtp.gmail.com with ESMTPSA id g6-20020a056a001a0600b004f2a4316a0asm12932303pfv.60.2022.03.06.15.14.29 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sun, 06 Mar 2022 15:14:30 -0800 (PST) Content-Type: multipart/alternative; boundary="------------0I4cUYEvFYBwKKV6kmYy4uxV" Message-ID: <5af013cf-c92d-8015-d537-c2eaf0c4bf22@gmail.com> Date: Sun, 6 Mar 2022 15:14:28 -0800 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:91.0) Gecko/20100101 Thunderbird/91.6.1 References: <164654595454.17661.1874276275607183275@ietfa.amsl.com> Content-Language: en-US From: Kiran M To: iotops@ietf.org In-Reply-To: <164654595454.17661.1874276275607183275@ietfa.amsl.com> X-Forwarded-Message-Id: <164654595454.17661.1874276275607183275@ietfa.amsl.com> Archived-At: Subject: [Iotops] Fwd: New Version Notification for draft-km-iotops-iiot-frwk-02.txt X-BeenThere: iotops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IOT Operations List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 06 Mar 2022 23:14:40 -0000 This is a multi-part message in MIME format. --------------0I4cUYEvFYBwKKV6kmYy4uxV Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Hi Iotops, As you know I have been studying several aspects of industrial networks to improve interoperability through use of standard protocols/technologies. We have put our thoughts on virtualization of PLCs, how they could be better than conventional ones and what could be their potential impact on the traditional industrial network designs. I look forward to feedback and discussion on the topic to improve it further. Thanks Kiran ------------------------------------------------------------------------ *From:* internet-drafts@ietf.org *Sent:* Saturday, March 5, 2022, 9:52 PM *To:* Kiran Makhijani; Lijun Dong *Subject:* New Version Notification for draft-km-iotops-iiot-frwk-02.txt A new version of I-D, draft-km-iotops-iiot-frwk-02.txt has been successfully submitted by Kiran Makhijani and posted to the IETF repository. Name: draft-km-iotops-iiot-frwk Revision: 02 Title: Virtualization of PLC in Industrial Networks - Problem Statement Document date: 2022-03-05 Group: Individual Submission Pages: 22 URL: https://www.ietf.org/archive/id/draft-km-iotops-iiot-frwk-02.txt Status: https://datatracker.ietf.org/doc/draft-km-iotops-iiot-frwk/ Html: https://www.ietf.org/archive/id/draft-km-iotops-iiot-frwk-02.html Htmlized: https://datatracker.ietf.org/doc/html/draft-km-iotops-iiot-frwk Diff: https://www.ietf.org/rfcdiff?url2=draft-km-iotops-iiot-frwk-02 Abstract: Conventional Programmable Logic Controllers (PLCs) impose several challenges on factory floors as their numbers and size on the factory floors/plants continues to grow. Virtualized PLCs can help overcome many of those concerns. They can improve the automation in Industry control networks by simplifying communication between higher-level applications and low-level factory floor machine operations. Virtual PLCs provide an opportunity to integrate a diverse set of non- internet protocols supporting Industrial-IoT and IP connections to improve coordination between applications and field devices. Besides automation, virtual PLCs also enhance programmability in industry process control systems by abstracting control functions from I/O modules. However, to achieve desired outcome and benefits, both operational and application networks should evolve. This document introduces virtual PLC concept, describes the details and benefits of virtualized PLCs, then focuses on the problem statement and requirements. The IETF Secretariat -- Cheers, Kiran --------------0I4cUYEvFYBwKKV6kmYy4uxV Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Hi Iotops,

As you know I have been studying several aspects of industrial networks to improve interoperability through use of standard protocols/technologies. We have put our thoughts on virtualization of PLCs, how they could be better than conventional ones and what could be their potential impact on the traditional industrial network designs.

I look forward to feedback and discussion on the topic to improve it further.

Thanks
Kiran
Sent: Saturday, March 5, 2022, 9:52 PM
To: Kiran Makhijani; Lijun Dong
Subject: New Version Notification for draft-km-iotops-iiot-frwk-02.txt

A new version of I-D, draft-km-iotops-iiot-frwk-02.txt
has been successfully submitted by Kiran Makhijani and posted to the
IETF repository.

Name: draft-km-iotops-iiot-frwk
Revision: 02
Title: Virtualization of PLC in Industrial Networks - Problem Statement
Document date: 2022-03-05
Group: Individual Submission
Pages: 22
URL: https://www.ietf.org/archive/id/draft-km-iotops-iiot-frwk-02.txt
Status: https://datatracker.ietf.org/doc/draft-km-iotops-iiot-frwk/
Html: https://www.ietf.org/archive/id/draft-km-iotops-iiot-frwk-02.html
Htmlized: https://datatracker.ietf.org/doc/html/draft-km-iotops-iiot-frwk
Diff: https://www.ietf.org/rfcdiff?url2=draft-km-iotops-iiot-frwk-02

Abstract:
Conventional Programmable Logic Controllers (PLCs) impose several
challenges on factory floors as their numbers and size on the factory
floors/plants continues to grow. Virtualized PLCs can help overcome
many of those concerns. They can improve the automation in Industry
control networks by simplifying communication between higher-level
applications and low-level factory floor machine operations. Virtual
PLCs provide an opportunity to integrate a diverse set of non-
internet protocols supporting Industrial-IoT and IP connections to
improve coordination between applications and field devices. Besides
automation, virtual PLCs also enhance programmability in industry
process control systems by abstracting control functions from I/O
modules. However, to achieve desired outcome and benefits, both
operational and application networks should evolve.

This document introduces virtual PLC concept, describes the details
and benefits of virtualized PLCs, then focuses on the problem
statement and requirements.



The IETF Secretariat


-- 
Cheers,
Kiran
--------------0I4cUYEvFYBwKKV6kmYy4uxV-- From nobody Sun Mar 6 19:30:54 2022 Return-Path: X-Original-To: iotops@ietfa.amsl.com Delivered-To: iotops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 108773A0CF0; Sun, 6 Mar 2022 19:30:43 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.109 X-Spam-Level: X-Spam-Status: No, score=-1.109 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, GB_AFFORDABLE=1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=commercebyte.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oW2P0v6KwtSc; Sun, 6 Mar 2022 19:30:38 -0800 (PST) Received: from ocean1.commercebyte.com (ocean1.commercebyte.com [104.131.120.15]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 844D93A0D3C; Sun, 6 Mar 2022 19:30:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=commercebyte.com; s=default; h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID:References:In-Reply-To:Subject:To:From:Date; bh=YkQ5OtXQJZkMUoHqJ9ynomA1Bb1Vt4hsQfCgRUmKUGA=; b=pH43SdXpwygJyXBx2zWBWsvJathkOl29LSjfMeJoFslrw7AwgR2hUxG3F5+f5lKNekHkuE/0y0V2b5veRBPGCV9caFvsVymusikpCXLuN5pvabd5smYUVl1XvqHKhJrc3zsSByrTjuQujrplLEK0hByXisDe9NnCXAKzVJmZe+M=; Received: from [47.204.174.73] (port=45334 helo=[127.0.0.1]) by ocean1.commercebyte.com with esmtpsa (UNKNOWN:DHE-RSA-AES256-GCM-SHA384:256) (Exim 4.82) (envelope-from ) id 1nR44w-0007yC-DU; Sun, 06 Mar 2022 22:30:34 -0500 Received: from [206.81.2.95]:7120 (helo=[127.0.0.1]) by [192.168.254.152]:41020 (localhost) with VESmail ESMTP Proxy 1.59 (encrypt=FALSE mode=FALLBACK); Sun, 06 Mar 2022 22:30:33 -0500 Date: Sun, 06 Mar 2022 22:30:24 -0500 From: Jim Zubov To: secdispatch@ietf.org, Michael Richardson , Eric Rescorla , "secdispatch@ietf.org" , Jim Zubov , Hannes Tschofenig , "anima@ietf.org" , "iotops@ietf.org" User-Agent: K-9 Mail for Android In-Reply-To: <22243.1646519268@localhost> References: <0075B437-024A-4D84-ABD7-92FE8DAFA59F@commercebyte.com> <1865.1644434146@localhost> <4026.1644516168@localhost> <685366A1-01F4-4788-B025-0F5F4CE7947F@commercebyte.com> <665685D3-B9AA-4A5E-B5B0-33D313A40716@commercebyte.com> <6296.1646509436@localhost> <22243.1646519268@localhost> Message-ID: <1075E99A-C00A-455E-97E8-2A29BA175F8F@commercebyte.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - ocean1.commercebyte.com X-AntiAbuse: Original Domain - ietf.org X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12] X-AntiAbuse: Sender Address Domain - commercebyte.com X-Get-Message-Sender-Via: ocean1.commercebyte.com: authenticated_id: jz@nixob.com Archived-At: Subject: Re: [Iotops] [Secdispatch] [Anima] I-D: Deploying Publicly Trusted TLS Servers on IoT Devices Using SNI-based End-to-End TLS Forwarding (SNIF) X-BeenThere: iotops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IOT Operations List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Mar 2022 03:30:52 -0000 On March 5, 2022 5:27:48 PM EST, Michael Richardson wrote: > >Eric Rescorla wrote: > > I provided some comments at the end of my review=2E Briefly, I have= doubts > > that this > > is the best technical approach and so I think if we are to work on = this > > problem > > we should start by working out the problem statement and requiremen= ts first=2E > >I would agree with you=2E > >In particular, I think that UPnP or PCP, in combination with some kind >of dynamic DNS infrastructure, could do everything SNIF does, and do it i= n a >far more decentralized fashion=2E > >So what is it that SNIF does that is truly different? I had a discussion with Eric about it=2E SNIF can work for an IoT device behind NAT or firewall through the relay= =2E For IoT devices that have a clean static IP it's possible to use DDNS t= o directly connect to the device instead of the relay (not described in my = draft but is fairly easy to implement through a peripheral process)=2E Regarding the certs, a CA, for example Let's Encrypt, operates in terms of= a 'Registered Domain', e=2Eg=2E something=2Ecom, that you purchase from a = TLD=2E Registered domains are not free, hence having a unique registered do= main per an IoT device is not affordable - even if it's $2/yr nobody's goin= g to eat that cost, and very few IoT end users will be willing to set up th= eir own additional billing=2E Therefore, hostnames for individual IoT devices should be subdomains of a = certain registered domain=2E Since a CA sets limits on API calls within eac= h registered domain, if you allow IoT devices to randomly interact with the= CA you set yourself on a path to a DoS=2E So, having a CA proxy that maint= ains control over the DNS zone and interacts with the CA (without having ac= cess to anybody's private keys) while enforcing anti-abuse policies sounds = like a good solution=2E As for the security risk, it lies in the CA challenge=2E Having a DDNS ser= ver for a zone poses same risk as a CA proxy that has sole control over a D= NS zone, with additional headaches and risks of DDNS authentication for eac= h IoT device=2E If anybody disagrees or has something to add - please chime in=2E > > >> Have the SECDISPATCH chairs put it on the > >> agenda, > > > I think putting it on the SECDISPATCH agenda would be appropriate > >Good=2E > > >> or is there any agreement that maybe IOTOPS should dispatch it? > > > I think that would be a bad idea=2E There's nothing really IoT-spec= ific here=2E > >There is often nothing IoT specific about many things=2E >There is however a community of people who understand the set of tradeoff= in >deploying systems at large scale that have no human at the helm=2E > >-- >Michael Richardson =2E o O ( IPv6 I=C3=B8T co= nsulting ) > Sandelman Software Works Inc, Ottawa and Worldwide > > > > From nobody Sun Mar 6 19:46:02 2022 Return-Path: X-Original-To: iotops@ietfa.amsl.com Delivered-To: iotops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7536E3A0C1C; Sun, 6 Mar 2022 19:45:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.011 X-Spam-Level: X-Spam-Status: No, score=-6.011 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, GB_AFFORDABLE=1, NICE_REPLY_A=-0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=cs.tcd.ie Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q_gRrps_cJDf; Sun, 6 Mar 2022 19:45:38 -0800 (PST) Received: from EUR03-AM5-obe.outbound.protection.outlook.com (mail-am5eur03on0728.outbound.protection.outlook.com [IPv6:2a01:111:f400:fe08::728]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E76B43A0C10; Sun, 6 Mar 2022 19:45:37 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Lr+yb9XJAC1YcHKmK0i39PaN4e3oelRszyrNoNqTS2D/XeFQrLCe2EuDGj9rGytodplgNK5j90QHypCzOWKBaxk/C0oYs3ZyFxymkoTzpHW/V0pUWjidXRoP+XW7jy64HosimsIycWrG9RDGAQCiFSy6Fz7XR7maC/vzylArmVY61H48I2Da6J7zLqvBbrYPuaVqbccW3yERg7Qlnux92ZrXnIIdt4aPNgAKWg4N0xVrAyOoJXUaYfBJeHLAp/qK7+GCuBcamTi6gpOBwD4auBahGxnE0uiSEuZ6w+AgjIERpfenq76pwSeEblvX9oifYhZW9USgJhcKaqGn1v+Ipg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=6B2BM1IuBIi4PdRQIcbWUdQBHpPvozDit+DQHVNC2dM=; b=PHmtt5fq6ahF4kCdPxSli6HC0FNv2MrsW6iY4HZxjOMbIcYvWl/pjs+d5i2ypVKcmir08K1/r9pt776BY2oJzx1YKaIwEx7mbCDHDbwGUcCsvSOB/jrlxpkWbgiipWvWOgth72EjvyBONKePFvvQr9epsmHZEEUIrkNDNTdaM6UU0ildSI3+0bNdWbyHyGqw+tG/yfTH2w8F6FDxswLDQV5Onl9o1RWm1bSLbuBwNh9ucDFZ0mr1pbEk/sucfmMUJNeSt/2h/ThtbHKxFe0+0tbgtiZPlmwUQSk025RkVm/iOdTzuf6qmYPG4v9aZ510fdm33xy4bkWwN8mWGpux3g== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cs.tcd.ie; dmarc=pass action=none header.from=cs.tcd.ie; dkim=pass header.d=cs.tcd.ie; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cs.tcd.ie; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=6B2BM1IuBIi4PdRQIcbWUdQBHpPvozDit+DQHVNC2dM=; b=P+S7xdFygYUASwqqVEzuiXErj3Ct6Y/t/wvZ5Lgo5c/tEocGURB5u745neQHLmY5yHdCMFVffMsRp8XpFTwvewV7oWPTrm4JCK98SVymRa93icVByLUtPKOq/dwtDkCHVb5n1wNDAHjQ3CG3a7Tsr23WmHrCVHSnqc2F99MZH1M8Qb8Rauh6d8/vAcfa6uUROqAPx6vvL19VEPDfAOgb+FDVWkEnyJZL1/gN4tdmTTJDiCECbC78GyXaUNS02q1FnBffPWcVgLcgiOkTj0wGAA6K7C9TAC+VotDAzcNywYrLwKoUeuRTGj6AWT1R6gAjv5h7u6AODhuv7VAW24BK4g== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=cs.tcd.ie; Received: from DB7PR02MB5113.eurprd02.prod.outlook.com (2603:10a6:10:77::15) by AS8PR02MB7176.eurprd02.prod.outlook.com (2603:10a6:20b:3f8::13) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5038.14; Mon, 7 Mar 2022 03:45:29 +0000 Received: from DB7PR02MB5113.eurprd02.prod.outlook.com ([fe80::d814:ffb7:9500:d217]) by DB7PR02MB5113.eurprd02.prod.outlook.com ([fe80::d814:ffb7:9500:d217%4]) with mapi id 15.20.5038.026; Mon, 7 Mar 2022 03:45:29 +0000 Message-ID: Date: Mon, 7 Mar 2022 03:45:26 +0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.5.0 Content-Language: en-US To: Jim Zubov , secdispatch@ietf.org, Michael Richardson , Eric Rescorla , Hannes Tschofenig , "anima@ietf.org" , "iotops@ietf.org" References: <0075B437-024A-4D84-ABD7-92FE8DAFA59F@commercebyte.com> <1865.1644434146@localhost> <4026.1644516168@localhost> <685366A1-01F4-4788-B025-0F5F4CE7947F@commercebyte.com> <665685D3-B9AA-4A5E-B5B0-33D313A40716@commercebyte.com> <6296.1646509436@localhost> <22243.1646519268@localhost> <1075E99A-C00A-455E-97E8-2A29BA175F8F@commercebyte.com> From: Stephen Farrell In-Reply-To: <1075E99A-C00A-455E-97E8-2A29BA175F8F@commercebyte.com> Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------lpr8kEKEbcaT3HJxYZIsZj6U" X-ClientProxiedBy: DU2PR04CA0284.eurprd04.prod.outlook.com (2603:10a6:10:28c::19) To DB7PR02MB5113.eurprd02.prod.outlook.com (2603:10a6:10:77::15) MIME-Version: 1.0 X-MS-Exchange-MessageSentRepresentingType: 1 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 66e4133f-bafc-4845-d814-08d9ffecebd4 X-MS-TrafficTypeDiagnostic: AS8PR02MB7176:EE_ X-MS-Exchange-SharedMailbox-RoutingAgent-Processed: True X-Microsoft-Antispam-PRVS: X-TCD-Routed-via-EOP: Routed via EOP X-TCD-ROUTED: Passed-Transport-Routing-Rules X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB7PR02MB5113.eurprd02.prod.outlook.com; PTR:; CAT:NONE; SFS:(13230001)(4636009)(366004)(31696002)(5660300002)(38100700002)(53546011)(6506007)(83380400001)(86362001)(966005)(45080400002)(8676002)(66556008)(6486002)(31686004)(66476007)(508600001)(316002)(786003)(110136005)(66946007)(6666004)(36756003)(235185007)(186003)(8936002)(66574015)(2616005)(44832011)(2906002)(21480400003)(6512007)(33964004)(45980500001)(43740500002); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?VU5ZT2dkeUhHLzJ6U3VUYjhSb0xzNEFLbzBrL0thbXJHclVYRWRoMU9kV0U1?= =?utf-8?B?eC9FNTlsbW9oQnRuVHVOY3hPUHRnQWhnblIzejdvTGRlVEdhMHpYeHpaTlFT?= =?utf-8?B?TW9aWlNiVXJNdUxiNkJBYUcvbE1PbWxCTlJCZVA5SUJsZGo3TERmdTRmcmhr?= =?utf-8?B?a01RM1pSR20vT0xvS2dWcklmS2Q4RUhoZEtkVTFBbjhnaHYydjN0SVYxZ3ZU?= =?utf-8?B?VGtOZVFnRnE0MVNtNWNCUjUrM2YwTDhDQmcvaDQ0SXh5VDY5K3JSTlNMUG9a?= =?utf-8?B?cVMvbStEWEdxSVE2TWpRUUxUOHBYQ2d3QTltcXFkaDhrK1lkZlYyQS8zRDhZ?= =?utf-8?B?ZXAwVnVscVZ4R3pxSmRyd3MxcWFIdUM1aWJVOEhVcWhSNHFDak9RWElnY0JK?= =?utf-8?B?NitHYjIrYVVFbmpWYWpuTHFiWUZhOXZKRXEwVUk3N3JMdFB2WkdoWUVRRDdB?= =?utf-8?B?RzFERFdYMEc4TjhjN1V3ZmhVU0ZDUU5TQy9CVWhjY3NUZ3ZIS1ZrVUhpMEpi?= =?utf-8?B?VTh2eXdvcmdWUENwNXFqUDZXM2c2MjVydmNiRjJ5R2Mza3JyWGl6d3ZxOXZB?= =?utf-8?B?bk93K3huVFVqcnVudStlQzIyV1VDcW5OaTlYNkY4dDVCcDk4R01Hbk1vdFlV?= =?utf-8?B?eHk1T1ozbEFJK3pFYTJxZmVEM3lKcFBvNVErT3VZQWtMUmcyTVFEWUJBd2hF?= =?utf-8?B?N1R0dXVWa0IzTXlZYmtFVWkrMTV5WEpYS0plVStjY0tQM3F0NGtJa2U2cnpE?= =?utf-8?B?RmxqdzVBRGYxY0NCZExzb0dWb3hReks0bklJZDJKTFRlbUFkQVRPNGw2bFhi?= =?utf-8?B?dGN4bkpPdzVZUmwxTHhTaEpiRDFRaDdMUmpLTjRweGJHY3lWbUZpUU90R2Rl?= =?utf-8?B?WDREK0tiRis1Z3VOL3FlMVVYb0hpdVZDY0pZZS9BVDFlMVU0WlVWUnhmOTQx?= =?utf-8?B?a1lmbHlybDBFV1NHWHNPWnh6R1RFRm5MQzRUbXdwTTF1TURYTUFPNXBscDN6?= =?utf-8?B?L3RBTHBoMHlZYi9vMTdjaFNMVzRsK2xXNFp6WWJ4czQ0VUZ6NzJxYmdvNjgz?= =?utf-8?B?bm50VkVwd0ZTdTNNLzFyWkJIKzZOMkthQ0o3UVd1Ymt6UWRuZi83QmtFem1Q?= =?utf-8?B?L0xVRnZhUkMvRnVKbm8wZFM1emtKTFJyaE5hdzhmUTc1S3h3b2dndEN3NWxs?= =?utf-8?B?Mm9ZR054c21tYkROTHQ2dXpwc2lXQm5laHE2VlRJeWVPQk05K2x2Y2VCS2xK?= =?utf-8?B?VmM4NU03OGVQcTBFaVFzTUhMQ1RId3p6dWw0UWE5UGt5THljWlU1RDFERWt0?= =?utf-8?B?Q1ZzN3EzaEFPU05Pc05RWEFNVzJTYllBZmdxckdsY1BFNldwSHlXd09XVGRX?= =?utf-8?B?MVhnRC9aYlNZc2ZhNGlmaERkSDI2ZjVSUUNZWnBrZkY4OVlaUW8rWE9hSkN3?= =?utf-8?B?ZU40MnAwajJ5Y3gwVWdCeFhHb2lWdjJSVmdnUkJ3bERhaWpwWE9DMDVQZ2M1?= =?utf-8?B?K2RNRHVlMkZuSnEzWHFPSFdIK3B3T01pQWwwamU5R1JtUjlGamhCYk01eTlU?= =?utf-8?B?cmVZRlY1MHM3TEgvNGlYN0RHczZycm1jWXRnQW9rYzVwd2hNK21TREpKaGhs?= =?utf-8?B?Z0dZbXRZQ2dDbHNMbDlLcWVjN05QQTMxUG1wWlI0czRTRkg5QTFidTFBOEN1?= =?utf-8?B?eENQaHdCQkkvOHpWcUp3YkNDYm41MjNXQXVmbWVlUWkwVnljanh4bmNtanpJ?= =?utf-8?B?TFBycU9OdGhnRjRLYmNtU1VuN1NjT1RQcjY4djF5aFI3VGRoY1ZKRFdzMXRr?= =?utf-8?B?Z2NiUTZjQUJISjJxNjVhbHVuSDVaQ3R5WDZTbUNGcktaUXFpUnVlMUhBQkdj?= =?utf-8?B?QkNWcDFRN3liMHVid2tzZ2JTd3NNS2dUdlluZHZoa1h2aFpLeWxad1c2M1NX?= =?utf-8?B?Q2ZSeUZZcWpWUng2UFRycFhDaTlYU0g1Q3JYRVFuZnFsN2tUN25RWklNZUNu?= =?utf-8?B?OWwvanhNdUdhcVNkYnpWb3lzY1lZeXFTaTMzVTNjaUlkdVBVOVVJWmxXNHZa?= =?utf-8?B?QWs1RHBTbisraExMQ1p0eDhNbVZUZUpvZzd6OVoxOTF5SW5iaTdWUzVseTFv?= =?utf-8?B?ck5ORUMwU01rUkZqRXNmeEg0T3Z1cmRNQ0ptY3NoT2lmeXRoN0pDblhoZG96?= =?utf-8?Q?IT7rxAFYlKN1nR3huSbFERQ=3D?= X-OriginatorOrg: cs.tcd.ie X-MS-Exchange-CrossTenant-Network-Message-Id: 66e4133f-bafc-4845-d814-08d9ffecebd4 X-MS-Exchange-CrossTenant-AuthSource: DB7PR02MB5113.eurprd02.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Mar 2022 03:45:28.8594 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: d595be8d-b306-45f4-8064-9e5b82fbe52b X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: 6EHw9MqvBMlaHpn8VnpumaL7ytUiRKG9sCL9aXy0F8rZ/Hyux+vz9OR6qs1Zle73 X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8PR02MB7176 Archived-At: Subject: Re: [Iotops] ***SPAM**** Re: [Secdispatch] [Anima] I-D: Deploying Publicly Trusted TLS Servers on IoT Devices Using SNI-based End-to-End TLS Forwarding (SNIF) X-BeenThere: iotops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IOT Operations List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Mar 2022 03:45:45 -0000 --------------lpr8kEKEbcaT3HJxYZIsZj6U Content-Type: multipart/mixed; boundary="------------30Le0bjotYBPvT00EHjebSTf"; protected-headers="v1" From: Stephen Farrell To: Jim Zubov , secdispatch@ietf.org, Michael Richardson , Eric Rescorla , Hannes Tschofenig , "anima@ietf.org" , "iotops@ietf.org" Message-ID: Subject: Re: ***SPAM**** Re: [Secdispatch] [Anima] [Iotops] I-D: Deploying Publicly Trusted TLS Servers on IoT Devices Using SNI-based End-to-End TLS Forwarding (SNIF) References: <0075B437-024A-4D84-ABD7-92FE8DAFA59F@commercebyte.com> <1865.1644434146@localhost> <4026.1644516168@localhost> <685366A1-01F4-4788-B025-0F5F4CE7947F@commercebyte.com> <665685D3-B9AA-4A5E-B5B0-33D313A40716@commercebyte.com> <6296.1646509436@localhost> <22243.1646519268@localhost> <1075E99A-C00A-455E-97E8-2A29BA175F8F@commercebyte.com> In-Reply-To: <1075E99A-C00A-455E-97E8-2A29BA175F8F@commercebyte.com> --------------30Le0bjotYBPvT00EHjebSTf Content-Type: multipart/mixed; boundary="------------Etq7lIqz2gK915AbJJrIdQRa" --------------Etq7lIqz2gK915AbJJrIdQRa Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 DQooY2F2ZWF0OiBJJ3ZlIHlldCB0byByZWFkIHRoZSBkcmFmdCBidXQgd2lsbC4uLikNCg0K T24gMDcvMDMvMjAyMiAwMzozMCwgSmltIFp1Ym92IHdyb3RlOg0KPiANCj4gDQo+IE9uIE1h cmNoIDUsIDIwMjIgNToyNzo0OCBQTSBFU1QsIE1pY2hhZWwgUmljaGFyZHNvbg0KPiA8bWNy K2lldGZAc2FuZGVsbWFuLmNhPiB3cm90ZToNCj4+IA0KPj4gRXJpYyBSZXNjb3JsYSA8ZWty QHJ0Zm0uY29tPiB3cm90ZToNCj4+PiBJIHByb3ZpZGVkIHNvbWUgY29tbWVudHMgYXQgdGhl IGVuZCBvZiBteSByZXZpZXcuIEJyaWVmbHksIEkgaGF2ZQ0KPj4+IGRvdWJ0cyB0aGF0IHRo aXMgaXMgdGhlIGJlc3QgdGVjaG5pY2FsIGFwcHJvYWNoIGFuZCBzbyBJIHRoaW5rIGlmDQo+ Pj4gd2UgYXJlIHRvIHdvcmsgb24gdGhpcyBwcm9ibGVtIHdlIHNob3VsZCBzdGFydCBieSB3 b3JraW5nIG91dCB0aGUNCj4+PiBwcm9ibGVtIHN0YXRlbWVudCBhbmQgcmVxdWlyZW1lbnRz IGZpcnN0Lg0KPj4gDQo+PiBJIHdvdWxkIGFncmVlIHdpdGggeW91Lg0KPj4gDQo+PiBJbiBw YXJ0aWN1bGFyLCAgSSB0aGluayB0aGF0IFVQblAgb3IgUENQLCBpbiBjb21iaW5hdGlvbiB3 aXRoIHNvbWUNCj4+IGtpbmQgb2YgZHluYW1pYyBETlMgaW5mcmFzdHJ1Y3R1cmUsIGNvdWxk IGRvIGV2ZXJ5dGhpbmcgU05JRiBkb2VzLA0KPj4gYW5kIGRvIGl0IGluIGEgZmFyIG1vcmUg ZGVjZW50cmFsaXplZCBmYXNoaW9uLg0KPj4gDQo+PiBTbyB3aGF0IGlzIGl0IHRoYXQgU05J RiBkb2VzIHRoYXQgaXMgdHJ1bHkgZGlmZmVyZW50Pw0KPiANCj4gDQo+IEkgaGFkIGEgZGlz Y3Vzc2lvbiB3aXRoIEVyaWMgYWJvdXQgaXQuDQo+IA0KPiBTTklGIGNhbiB3b3JrIGZvciBh biBJb1QgZGV2aWNlIGJlaGluZCBOQVQgb3IgZmlyZXdhbGwgdGhyb3VnaCB0aGUNCj4gcmVs YXkuIEZvciBJb1QgZGV2aWNlcyB0aGF0IGhhdmUgYSBjbGVhbiBzdGF0aWMgSVAgaXQncyBw b3NzaWJsZSB0bw0KPiB1c2UgREROUyB0byBkaXJlY3RseSBjb25uZWN0IHRvIHRoZSBkZXZp Y2UgaW5zdGVhZCBvZiB0aGUgcmVsYXkgKG5vdA0KPiBkZXNjcmliZWQgaW4gbXkgZHJhZnQg YnV0IGlzIGZhaXJseSBlYXN5IHRvIGltcGxlbWVudCB0aHJvdWdoIGENCj4gcGVyaXBoZXJh bCBwcm9jZXNzKS4NCj4gDQo+IFJlZ2FyZGluZyB0aGUgY2VydHMsIGEgQ0EsIGZvciBleGFt cGxlIExldCdzIEVuY3J5cHQsIG9wZXJhdGVzIGluDQo+IHRlcm1zIG9mIGEgJ1JlZ2lzdGVy ZWQgRG9tYWluJywgZS5nLiBzb21ldGhpbmcuY29tLCB0aGF0IHlvdSBwdXJjaGFzZQ0KPiBm cm9tIGEgVExELiBSZWdpc3RlcmVkIGRvbWFpbnMgYXJlIG5vdCBmcmVlLCBoZW5jZSBoYXZp bmcgYSB1bmlxdWUNCj4gcmVnaXN0ZXJlZCBkb21haW4gcGVyIGFuIElvVCBkZXZpY2UgaXMg bm90IGFmZm9yZGFibGUgLSBldmVuIGlmIGl0J3MNCj4gJDIveXIgbm9ib2R5J3MgZ29pbmcg dG8gZWF0IHRoYXQgY29zdCwgYW5kIHZlcnkgZmV3IElvVCBlbmQgdXNlcnMNCj4gd2lsbCBi ZSB3aWxsaW5nIHRvIHNldCB1cCB0aGVpciBvd24gYWRkaXRpb25hbCBiaWxsaW5nLiANCg0K VGhlIGFib3ZlIElNTyByZXByZXNlbnRzIGEgcGVzc2ltYWwgdmlldyBvZiB3aGVyZSB3ZSB3 YW50IHRvDQpnby4gRWl0aGVyIHRoZXNlIGRldmljZXMgKGluIHRoZSBob21lKSB3aWxsIGJl IGEgbG9hZCBvZiBjcmFwDQpvciBub3QgKG15IGd1ZXNzOiBtb3N0LCBidXQgbm90IGFsbCwg d2lsbCBiZSBjcmFwKS4gSWYgdGhlcmUNCmFyZSBsYXN0aW5nIG5vbi1jcmFwIGRldmljZSB0 eXBlcyBmcm9tIGRpZmZlcmVudCB2ZW5kb3JzIHRoZW4NCml0J2xsIGJlIHdheSBiZXR0ZXIg KGFsc28gZm9yIHZlbmRvcnMpIHRoYXQgdGhlIGhvdXNlaG9sZGVyDQpoYXMgdGhlaXIgb3du IHBhcmVudCBkb21haW4gZm9yIHRoZSBjb2xsZWN0aXZlLiBZZXMsIGdldHRpbmcNCnRoZXJl IHNlZW1zIGhhcmQgYnV0IHRoYXQncyB3aGVyZSB3ZSBvdWdodCBnby4gKEluIHJlYWxpdHks DQppdCdzIG5vdCB0aGF0IGhhcmQsIGl0IGp1c3QgcmVxdWlyZXMgYSBiaXQgb2YgZm9jdXMg b24gdGhpbmdzDQpiZXlvbmQgdGhlIGN1cnJlbnQgZmluYW5jaWFsIHF1YXJ0ZXIuKQ0KDQpD aGVlcnMsDQpTLg0KDQo+IFRoZXJlZm9yZSwNCj4gaG9zdG5hbWVzIGZvciBpbmRpdmlkdWFs IElvVCBkZXZpY2VzIHNob3VsZCBiZSBzdWJkb21haW5zIG9mIGENCj4gY2VydGFpbiByZWdp c3RlcmVkIGRvbWFpbi4gU2luY2UgYSBDQSBzZXRzIGxpbWl0cyBvbiBBUEkgY2FsbHMgd2l0 aGluDQo+IGVhY2ggcmVnaXN0ZXJlZCBkb21haW4sIGlmIHlvdSBhbGxvdyBJb1QgZGV2aWNl cyB0byByYW5kb21seSBpbnRlcmFjdA0KPiB3aXRoIHRoZSBDQSB5b3Ugc2V0IHlvdXJzZWxm IG9uIGEgcGF0aCB0byBhIERvUy4gU28sIGhhdmluZyBhIENBDQo+IHByb3h5IHRoYXQgbWFp bnRhaW5zIGNvbnRyb2wgb3ZlciB0aGUgRE5TIHpvbmUgYW5kIGludGVyYWN0cyB3aXRoIHRo ZQ0KPiBDQSAod2l0aG91dCBoYXZpbmcgYWNjZXNzIHRvIGFueWJvZHkncyBwcml2YXRlIGtl eXMpIHdoaWxlIGVuZm9yY2luZw0KPiBhbnRpLWFidXNlIHBvbGljaWVzIHNvdW5kcyBsaWtl IGEgZ29vZCBzb2x1dGlvbi4gQXMgZm9yIHRoZSBzZWN1cml0eQ0KPiByaXNrLCBpdCBsaWVz IGluIHRoZSBDQSBjaGFsbGVuZ2UuIEhhdmluZyBhIERETlMgc2VydmVyIGZvciBhIHpvbmUN Cj4gcG9zZXMgc2FtZSByaXNrIGFzIGEgQ0EgcHJveHkgdGhhdCBoYXMgc29sZSBjb250cm9s IG92ZXIgYSBETlMgem9uZSwNCj4gd2l0aCBhZGRpdGlvbmFsIGhlYWRhY2hlcyBhbmQgcmlz a3Mgb2YgREROUyBhdXRoZW50aWNhdGlvbiBmb3IgZWFjaA0KPiBJb1QgZGV2aWNlLiBJZiBh bnlib2R5IGRpc2FncmVlcyBvciBoYXMgc29tZXRoaW5nIHRvIGFkZCAtIHBsZWFzZQ0KPiBj aGltZSBpbi4NCj4gDQo+IA0KPj4gDQo+Pj4+IEhhdmUgdGhlIFNFQ0RJU1BBVENIIGNoYWly cyBwdXQgaXQgb24gdGhlIGFnZW5kYSwNCj4+IA0KPj4+IEkgdGhpbmsgcHV0dGluZyBpdCBv biB0aGUgU0VDRElTUEFUQ0ggYWdlbmRhIHdvdWxkIGJlDQo+Pj4gYXBwcm9wcmlhdGUNCj4+ IA0KPj4gR29vZC4NCj4+IA0KPj4+PiBvciBpcyB0aGVyZSBhbnkgYWdyZWVtZW50IHRoYXQg bWF5YmUgSU9UT1BTIHNob3VsZCBkaXNwYXRjaA0KPj4+PiBpdD8NCj4+IA0KPj4+IEkgdGhp bmsgdGhhdCB3b3VsZCBiZSBhIGJhZCBpZGVhLiBUaGVyZSdzIG5vdGhpbmcgcmVhbGx5DQo+ Pj4gSW9ULXNwZWNpZmljIGhlcmUuDQo+PiANCj4+IFRoZXJlIGlzIG9mdGVuIG5vdGhpbmcg SW9UIHNwZWNpZmljIGFib3V0IG1hbnkgdGhpbmdzLiBUaGVyZSBpcw0KPj4gaG93ZXZlciBh IGNvbW11bml0eSBvZiBwZW9wbGUgd2hvIHVuZGVyc3RhbmQgdGhlIHNldCBvZiB0cmFkZW9m Zg0KPj4gaW4gZGVwbG95aW5nIHN5c3RlbXMgYXQgbGFyZ2Ugc2NhbGUgdGhhdCBoYXZlIG5v IGh1bWFuIGF0IHRoZQ0KPj4gaGVsbS4NCj4+IA0KPj4gLS0gTWljaGFlbCBSaWNoYXJkc29u IDxtY3IrSUVURkBzYW5kZWxtYW4uY2E+ICAgLiBvIE8gKCBJUHY2IEnDuFQNCj4+IGNvbnN1 bHRpbmcgKSBTYW5kZWxtYW4gU29mdHdhcmUgV29ya3MgSW5jLCBPdHRhd2EgYW5kIFdvcmxk d2lkZQ0KPj4gDQo+PiANCj4+IA0KPj4gDQo+IA0KPiBfX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fXyBTZWNkaXNwYXRjaCBtYWlsaW5nDQo+IGxpc3Qg U2VjZGlzcGF0Y2hAaWV0Zi5vcmcgDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vc2VjZGlzcGF0Y2gNCg== --------------Etq7lIqz2gK915AbJJrIdQRa Content-Type: application/pgp-keys; name="OpenPGP_0x5AB2FAF17B172BEA.asc" Content-Disposition: attachment; filename="OpenPGP_0x5AB2FAF17B172BEA.asc" Content-Description: OpenPGP public key Content-Transfer-Encoding: quoted-printable -----BEGIN PGP PUBLIC KEY BLOCK----- xsFNBFo9UDIBEADUH4ZPcUnX5WWRWO4kEkHea5Y5eEvZjSwe/YA+G0nrTuOU9nem CP5PMvmh5Cg8gBTyWyN4Z2+O25p9Tja5zUb+vPMWYvOtokRrp46yhFZOmiS5b6kT q0IqYzsEv5HI58S+QtaFq978CRa4xH9Gi9u4yzUmT03QNIGDXE37honcAM4MOEtE gvw4fVhVWJuyy3w//0F2tzKrEMjmL5VGuD/Q9+G/7abuXiYNNd9ZFjv4625AUWwy +pAh4EKzS1FE7BOZp9daMu9MUQmDqtZUbUv0Q+DnQAB/4tNncejJPz0p2z3MWCp5 iSwHiQvytYgatMp34a50l6CWqa13n6vY8VcPlIqOVz+7L+WiVfxLbeVqBwV+4uL9 to9zLF9IyUvl94lCxpscR2kgRgpM6A5LylRDkR6E0oudFnJgb097ZaNyuY1ETghV B5Uir1GCYChs8NUNumTHXiOkuzk+Gs4DAHx/a78YxBolKHi+esLH8r2k4LyM2lp5 FmBKjG7cGcpBGmWavACYEa7rwAadg4uBx9SHMV5i33vDXQUZcmW0vslQ2Is02NMK 7uB7E7HlVE1IM1zNkVTYYGkKreU8DVQu8qNOtPVE/CdaCJ/pbXoYeHz2B1Nvbl9t lyWxn5XiHzFPJleXc0ksb9SkJokAfwTSZzTxeQPER8la5lsEEPbU/cDTcwARAQAB zSFTdGVwaGVuIEZhcnJlbGwgPHN0ZXBoZW5AamVsbC5pZT7CwX0EEwEIACcFAlo9 UYwCGwMFCQmUJgAFCwkIBwIGFQgJCgsCBBYCAwECHgECF4AACgkQWrL68XsXK+qG CxAApYHWYgGOIL3G6/OpkejdAkQoCVQAK8LJUSf6vzwost4iVfxIKcKW/3RqKNKk rRl8beJ7j1CWXAz9+VXAOsE9+zNxXIDgGA7HlvJnhffl+qwibVgiHgUcJFhCSbBr sjC+1uULaTU8zYEyET//GOGPLF+X+degkE/sesh4zcEAjF7fGPnlncdCCH3tvPZZ sdTcjwOCRVonKsDgQzBTCMz/RPBfEFX44HZx4g1UQAcCA4xlucY8QkJEyCrSNGpG nvGK8DcGSmnstl1/a9fnlhpdFxieX3oY2phJ1WKkYTn6Advrek3UP71CKxpgtPmk d3iUUz/VZa0Cv6YxQXskspRDVEvdCMYSQBtJPQ4y2+5UxVR9GIQXenwYp9AP2niv Voh+ITsDWWeWnnvYMq07rSDjq0nGdj41MJkNX+Yb2PXVyXItcj5ybE3T2+y3pSBG FEZYJGuaL4NwtBJFMOdOtBmUOPbetS2971EL3Izxb7ibOZWDwexv+8R6SWYfP1wV N3p46RyBQuXqJV8ccE11m6vtZTGSYgnLUUFZMRQYH+0hwuYe0T3AA18xDdSYsa8v ovCCd3l5S4UNzIM2PMChqGrEzKapUpZg7+8ACcxRU3b9Ihd7WYjJ+pQPCoWYKozv tEvenbNpE/govO/ED3B14e+R2yevRPjRrsN7PJzSf15fQLvCwFwEEAEIAAYFAlo9 UqAACgkQLzyHNoBfjaLrSwf+MIHbFRQ4O5cmLYR5sIByWelN3SuRN/gW8rpKo9Ok Cz6An8uV/iCXy5tNMLzzi0BFl8f22DwBcC5qy9qnlIAdogWam1qWoTAoAD8veEqm uKhYrqJsCcAyNrKYmK0hP3rpHxx1LySDmKYXmw/8qtBXKHTouMm+5tSsznhykRMT AAr2p7PSaHgo+hIVaW/rKSspHjDhhZS+G9mtOZad1IH29M6G1Q1NCO0Ywe8krKLQ IAQlFxtgvOqpPOZNzeKBa/+KbE8TGgMWrkOhC8OeEM5PVzdDhlhD9kPzB/pCKDF5 DofJ/ZRqnDpbKPQ0bsW38AOig3kOc0A27awiBEw3urqR1cLBcwQQAQgAHRYhBH4X CgRchM9GDit5oBDvedn9g1MSBQJbtyScAAoJEBDvedn9g1MSI/oP/0A9J9nrnBMq Zpm857lfYWw+rshLK+tyeP4OQeOqnDFvs9jePpcyJLG3DF2r6VbVKPQq+AE6Uf5h cJBDEN6BjEhRPSbLcqG3A1cz/nNwm8rPmNp+oKhmaBBQGxwciMLmzgynsDydnjPp MyEs04zvsbsl4vrp2095o105l8KcrrxQrioFjbwveGwHQK9bxJKhx9D+gIk+MouB ur45UDKTZkMZrr9FGrtkyXCGAxvKdcNC5Oa8z9sj1rcUJfG/OpVAMWhArdlZbFUQ yoX6pU2Zb1CR2qpWAVerGSfBhmfCyStjARqaKxlftjO+Bj3Jj73Cr5eqej3qB5+V 4BCsPjr4RLvVbYUCPsRdxWc+nBLlfVYkRURu21g1hFm5KFPjgUkyo1s4vjUOY8Dy I+xLGF7f/IhUBG6l+Vswhpwu7ydalZkeFiPx5xna5NfbEYxvsIf71DvipGvIOaHv X4egWoFgm8n/9c3rcMxJtpwHPSsUt5dgLsyu6VE0IbvOAc3dN7CWJ355DVFJq9Zg 2YVf0izSpyyzJeGsgkfjW6xpmdvZxuT2UcN4BTcm6vYqueASGrb3lfhzC5gpeVsc /MoSjTS65vNWbpzONZWMZuLEFraxWJzC0JrDK3NCd0VN3kstqGkVbUIiYOnUm8Vu 4zoVMLlGWzHLIGoPRG2nRezn1YyNfyb5wsDcBBABCgAGBQJbxcflAAoJEGo7ETk8 pK1gE7QL/ApC5P68W5DrI1787WJVZv1u4t/g39vTr7Xer3UMTVQg10vpa7pmqOGh jIDzDMg3Pe3K3M7fVzfAlUA1qw6ne4RCueVoRKpubeF4AlYbMr0K6hNCPjt5uAxm bBVuejKTc6pru5rv5gKL0nDbr+Snft5xt7juBLSSimw0/41sZnkjCxo9rF/RA/v6 +uWyK171RKmsEYu8fFtw1eqUNt/Xj792TUixE3pxXheNtQtZGk/9P3W83ChhG4Fh 5EQsn0pIh9wZIAbMRLpgRKyW87fWHZC8/YH8h7afarvn9Thl5pFUldCe22mNJj6K LChn2aEHQd+PdY1GBpZEcmNEUPuovwzatM0h64hCzTm41eDqRfihZVBT7TbfXQnv 8rywa42Mk756RGzzEZcQEhwQXZcMQUfxIQQ2VyJo0zG36VdZTQF7TF/4Lz7/3cJ5 6jOIm+dwPXtu+C2wAQuD4USOLt4JWPYpqzDfHYJIND/497P9Z9SuQeahr2ez3DRB g3qsHEjBV80yU3RlcGhlbiBGYXJyZWxsICgyMDE3KSA8c3RlcGhlbi5mYXJyZWxs QGNzLnRjZC5pZT7CwYAEEwEIACoCGwMFCQmUJgAFCwkIBwIGFQgJCgsCBBYCAwEC HgECF4AFAlo+o3cCGQEACgkQWrL68XsXK+qO0A//ZsfQzyXrZlu/eEV5jU620yeO M3P7SW3C3UQYdCgZ/TlvxGgKow5oDSXgjMiUyq9csGqbPBxlDYSxFZHNeDVKYIuP 2ZK24tw5k6duTh4+sFwUualTMlcp0zBCIzn3hRcsRvuPKHfl5+6oOi0+xqx3jX/s /69L/fvHmdSKet5LIUAxoYaZkTCruFrPWb01tgAl5JExWkhmCY98iD+EeiIMAWBj Mw1xV+p0uCwNbN6XDzcToK7wsm+tAIiWUy3DpP60a6WbVwdV0HNt2WZq5U5Jdh2k 4S+sN2CnYk4tTW7jHjsWarV3FLISCOObADZuB7ljU4kYfdwZ+WzenXY4LGlxGQSl AblGjwZe4EIkCXAJUtzJhoFUuGaF/PlWjxqV3UFRcgTERZTijguVyREre8GNERNg vDxZvuXssEjvz9X5JfcIZDIJpdzhLiEIj9noUbfx1SzB5KDPQj0O7elMHa1671/r wWcpGr/MfVPTOik4H7F8rcVJelceZTzC4tvya7M+jM4fyFWWt8Y4atTixUiP7U9o 4uBZCQ0GzvsmFA4XLqn2pA5rVizMXnGbGOjufAP/efEJ4ul3qvjYe8ye8DXEDjKA xo/tuHYtk19XCi83QzFhWls5TT+XQeVTMEvVqo9Wek8yoxo67qvLKKqIcG9givQd 8MxYNAbNYgSPtkbhZ8TCwFwEEAEIAAYFAlo9UqAACgkQLzyHNoBfjaLzHAgAlWT6 NXEGtw/r1miKNGcopzvzILQ9oB8rKI9U9EL6tOf/y2V5oYee/GyQDb3ZdoPxxYYc Jf+RyiH1nMoqUIZiZJaf3bJXinDZ5+AdfE++UR2NBvqaNyC6u3r24jo1B/sagKbY tWgsYtRqHLD4IWi37MZrVyjBuF7u14Q07+uhjq6mX2O/tHpCYw/Q82tbeTRPyUf1 WQOAfD1kfBpW9PvAva5Iw9FWeXpCXRzwxnCZhYfGfqtuSw6CPBYLdbikqML6FZ7E DuTBb/8um1wK7Y9bgeIQC+CYjhYB5RXa1tDJRab2Js4luCvSR0w/CgHw26293tlv e2Q6UTrmHxP5U22DlsLBfQQTAQgAJwUCWj1QMgIbAwUJCZQmAAULCQgHAgYVCAkK CwIEFgIDAQIeAQIXgAAKCRBasvrxexcr6tJpD/4rrILH+meP07vrx8wW5eYuqCiP GYnh/CXxIF8eLrfbe5d4QRgtq+w6UeQPMyzKRIRiCoBXB2oJLBZHyxBPxZlg33dT MrEGn8QWKx2iNuz9rZMXyOSWFetuO01d/aUPd5BnbLbIyK5of8xCQlXM6KH8bc+9 gQ7edR9mfLTdvBf2FR522hg8BRBM1imKc3vO8v39+qIHHRjuiwxBBCAOhHtHRsZX ripS0uFA07dM46Oi/E8osjx6fQt/lH5z/PN+2adxYSrLSAXfr1oD3RxYNhuWgyGF L64/VCQb1YGjf0Z5MBPnWm9jgUoOY5K9eNSS0L83WeJjlF5+Q/WOgB+rb49Prm2D Feo9+S9f2V53Llz1WIspXJg6f+n9lmHE94MfQj1GAHCzI0FeL19lvM+LhD8jJSCb hrC3+yobyy/AUOs5Z3E+njjX1FF/VCVAs6iOa6i+XG+Y1hh3ir2y1kckJ5auT10M SU8GEZu9ayU4M3o3N9yxOjaoP0NuQ4MMLL/n/u4u94AeZaHPNBXn/hVfVRRmpRXt GKvJtFAEppGEYezB+bLKIm6XlpPkhnwYzleLZ7AMEco2C6QM8QPB3g3JpS3sqRhA 5rEP4lL16BmijmF+CHoPE/zwgKZbKpyVDqvIW5IDgvfIC2X4pbZDRvGIUKaGSB4+ ksZgUUnNyvfQr2p7jsLBcwQQAQgAHRYhBH4XCgRchM9GDit5oBDvedn9g1MSBQJb tySbAAoJEBDvedn9g1MSeKkQAJm44jt1kwHgQgeDBKdjdvl0AjE0xVEQxriZ6lP/ l//34YT0auFfzsYIrChSpQXAEtobBAr4Ohw1Us+BZe+H5P8vm6LRuPwozC3SjwfX 4Iec8+9ot6tIVg4sbedDSgb/CCFVjsmIGcQ1P73JLJTBJ6mxYCV/gn3QC6bwDOFo 7kD9FDHCjRN8XfhHQ4Q9cYyt06uF31qG/aumgWYC9geCGgAwiHgwxNYb9GoJ0iZj CROwbYvLTcQgsVUW2bTmsVR13UVKDsdl02sRV7qcVYW6R0a3Ra8KudX+nt25H5DR Gd382KZ5W8pydsy/viTvD9z6v0ulChBYxAedIvGIClrhbxlLEPmIg4ImVOLGqsUg Vm32J95WOjEkk4PEZ12xSDBtwhSJqmJNboWlfmw43KdIbY8zNhffIO3N6O7FsdGx mqyHeLoTpqY+ySVUPpbuyW8ujnI/J//+6hdTZ9dQsEJQlWngKuWOQ5ma58MPSN88 zllsqhZAFQjNxqnkSzL6ZQ+v/jvuRRe16B80AeO55DsmbWsMv/YLLD1mSi7+Khy2 EtMBhgojWwrGMvdLN6X3mnzNJEscYyLxM9tSk+iySP2sLthK0BVgpAzBSdaf/ezI z60P+neHDzteNFf8Mn7lmgYk1amvZoJ29s5+n2HwxyRL5dVMyMdyQmntubbctfqr Z0tIwsDcBBABCgAGBQJbxcflAAoJEGo7ETk8pK1gnCYMAJY4FeIYjlIXGghFWzsB 4fYwK1+iaFpU3fSto5qcrqVtVPjXpwqczqBWeXGyQxiB0kan4OVAXydIeaP8EAuF CA7paP3s9STLJBO3KurkwyRkPW5zo0X7xVqaVToRsX2Ul98KVJoHYQD1KdezEtwl vpNwiiBr42AYR751Vm6JBVAbQXuFpB3c8bUV0OkkRxNFtL8/2PieHar58n5dntGk bPlPkztahsFqktgacIgXHX5vaT+7YeeZ1DWLOYjGO0wNhkOSeroCmxwJUikU7joB p823L7r5KfpqWTPpSCzVstQKZUGmmoE1qCswY/Ud5wvp9SccpIILkRXj0rZRtfnE 5MpL3hjmtNzfDd9qIsJtBJlSB2hZwAsVm1l+EWN9hG3tqyA43niUMy2n6q690of3 berSiQ+kvY/aC9Hx8I+bKzOV9/J2VUTqfaPZa4Uy2rVX5Q2p69n/PMj7mEer0rCL 3j9V16J9c+s0BSkXoKdtYdB0TWVhBgUybd9qtYcwHWvhP80uU3RlcGhlbiBGYXJy ZWxsIDxzdGVwaGVuQHRvbGVyYW50bmV0d29ya3MuY29tPsLBfQQTAQgAJwUCWj1R WgIbAwUJCZQmAAULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgAAKCRBasvrxexcr6jsc EADEcB0WQEZn2AkrzDs1RhL0Lp6cZi0BigofkbcGfdhJyMSs19C0dhvncrAFClVI 6/Udw3yFtDyYtOCf2W3M3A1K6/RfEizCLzTsdFIhni9gOJLlUpXViQtgrlstjk7h qVV3Ooz4BlCqS4cG7rfqf4LQQPpTAuFUEV9I28FBUB2irqC+v4gTysIgpMw0bA1y BU9sX5jE/tRkzqnuzZrkwiobDtRFJ9qp+7O2JtcY4EsVtLAsaodJKc5cF8R4OvB1 n66vxxcgg9Eh4JNWZ47xsaCmAGo1Bcb2jIY35OtgAL7gCGLRSMKTtAaPy1/fEgIq hCljJ9x40Fkn/3r2BX21WC9HFSPFTBz2RluLRzxdgxOrkYK8EiHUPoE5b1AEzZKw 2AbeXfr57f5zYsN3IqfbQLUjMYtUN1wK3Pjb+idD972wyXMWt8uOzlI7b9Ocu+nY m2whBfJv9Pmp3QYTmPz+LB9lH65VNVUSxSXVr5iWXO3qx1HtEiGEqkporMQCTh3T 5Ud3PvMSRBFFKNs9WhJ/Lxz+SV30WLwG6dr5mQqlzAhb4Phc/zekZyXRdS/oDKrB LUucS36O//49JeyRi1QvOfxnfmIqRIAf/k3PoYJmTo5E82//r5Qj3YGlRu78ba0H Arxs+ACD6AnEHHcbswpbtVEKYzlSu0Ar0Dc7vRWM/IyQdMLAXAQQAQgABgUCWj1S oAAKCRAvPIc2gF+NosIsB/9f/29FNla3BJfGIEIDnhrqGD0i9bSa89SqBd++uG06 TQgW5wsqtNcrwn81yZTq6XE6i9VtD4GKfqC0d4KZJr9bnbeD81cI64VOdL8zJWJs 0vj5EIXCobKyX74Kb4uePUyZqwT2Q74I116u/HwA9/FXsPo5isbh4ZqD4t0VHpWk mfq1FPT9a/JPyX46qKqB2Fce/7Qy+SQP1NfkuUlbhUH/JG9aSSYvk3lznNiH41x9 M+FDlL106itXOubrl3oi2fT3fsSedq7uzt+IV0DQEeNaoQAUuwEhdB8IWOMqN2wo DjGVKJftfsSWY9ilZrnDBNDrp0vRqcx33LUMkIw4d7iBwsFzBBABCAAdFiEEfhcK BFyEz0YOK3mgEO952f2DUxIFAlu3JJwACgkQEO952f2DUxJjuw/6ApHSsVTWD4a0 H6FJ23A9Ftpy+aXZ4vYlzkSrfsn2ECrEfK3lXQh/uzwjJUDYZeB1/BQsFZtcYNQO JSSHbQ49BFRLwb1J/wBZG4bbmrkLxnNbKDKQvzxEpclkMW0Dj0J6o7kGrmzIGGrh B+JJN99AcineHRug8ZSFIERRCmigxdhAKU0BFD7P+5HNHltSL3DF1c2fFOf2JrgB KVoE+9RhMZjWNbYetFFLCkjXb5Rpay9zeMm1DxfSTGAnuOwUXW6qq4hnl5+VC/48 ceDZElLLfu7RQUZv44pkSTOWZs+iQoJiHMFHk9wPqyB2Vok1yJ2a2j27WhXrJlPw nZbgJO5RyWDG3p/eVmpl5Uuc2dsfIpR17KnAuWpghK6V+cyFncDoGCl/YG2Mvool sW08FiZh3Ej4dnJjj25TZkeFG74JJDXLvMYpJfSBGnmETv4Dhcm2xPqVMuFuL1qJ lMbVLrMo2GXeo03OzNyvbs+u8WLIaGm5hC7N1CXY8wZs4jo6OJ/expvnc07dEuws 4zT3AiWv3nIouWReRStZy9QkavDocqbyPmilcdPCYk4BsOlzpwwO74hNG7iyl0Kd AlwTxGQ7y0rJou6HYa1TmRhIEr3vKvlW+JfUUrqtjXgsuacTXo4+Ira2JUErL2cY zQMq1j4r1ZyhFnuz93s7Rsx/Nw0+0YvCwNwEEAEKAAYFAlvFx+UACgkQajsROTyk rWCJqwv+NLVPE4sD4sDA2/6Ek7UsRIUkg+S39fhqWsLc4rtw/mDunv8Un61I3K04 fZ2Ry4nF9hZM0a710UvXFbStvrzRJO3EAAcdJR9LTCd19e8UeruQbIee3YT91U4N kC9JMpecfq62/teOAU2e5P3fWYaLs5ZX7zCLwWuBcW2l3SyoljQczM85HhJ3XHm+ FnwQ6D9xRle+lvWTcuC9d1yAyUb8IOospcL2lJTmy8e3r79R24hPlSB4LDe0wEN8 AXbagrcAQZjwyaHyWxjJbTwZ0b43WGdfIqZ1ElOeoffbketPGRmWvx5xUvb2ALFB BdETzV270gs5XDJgJ1SIIKOyDADxwvroTe2jD8C/841eEql5QSow3s/U3zRqk3mt tto8Qw/DN71aeh6dmYSsvd2UjsHw/vofOPRBGxZLEkKTEvMnhmMW9hiKPkPia+Qg evYE020qpKSxLEdWA8nprHwxmGiDNesCfXSC6vm1qfyj5g8HzxSckq9ZaMhKMCo7 vxflUEDuzsFNBFo9UDIBEAD6DdHQfMav8OXfhjTteoarOrlJTSdci727xiezGPuB HmpvceBRZgRasdbaMc4HJee+R9+5x/nLPCuy/DxDyIjwIUeJNgc+l7LjI9WfpHTD 8U4xxjvR5Mi7+ToQQUOUNuzT0O0pyuxP1uY3RehHEhOVfBZO59ipSeZL5iQC6T5M sK1SKfs51pLa5ToC1rc8tBJ4zZmxRAyZiYc/AH2uZ/6rYjTTkAn1DVI9DYo2D/zE 4bGjXdJW5pKphFB2lX3dG4I7ODi+5e1H6A/QpCu6z8/ZkIQ+9T1xcX/YwiFeA7Pb TuW/eITbMbI1eV3+fyym9aT7Rsflmp31Zxtr+sZwGGZf00ooMBFmqOS//NUQ/Vf3 vDUew1h5QU1yDaWT3NApvi+XWPH9TPy6TMfZA2FThHf11sX/gDBa5JWQZbptPEcm oazpiKZt91CrFPOaoXDPck/Q61dfmr/oPikfByYnASIM3OwEuXqyQ9JDRfKrem5r +oA/wxWb5jELElAhOpnyqMMvOh7uz1foUssL8MAv2TGXmxpVJ8Nu4je6wf96Z22f Q0D38zud+CKH3bMP3ayXXJBcdPoENrzFbWP5FTg/4TTDJ3vOAHZR5iCunYghx8b7 Ffa4UbkwlD+dh8GiIAtvT51Ac0cO0Wc0Zjc57zPUz1zloMbf+zb1Bsn7DuEQoqj1 gwARAQABwsFlBBgBCAAPBQJaPVAyAhsMBQkJlCYAAAoJEFqy+vF7FyvqrC8P/1tF 6TeR83xD6MasqXyrBjwcLmziaF0Mlkj8k/YUiZ/knb53n97xQnh9yxPv0TT8Wpfd n3BmvqGyh8+ouHX9jMOxiRkMdNhIauVYY/8jmRfBSYWcFkfMzdYasvdLtmYJgx25 2HKTFdeOrszoOjWjEzwmh+tca3AFMu/nB++/KAmi5UJV7zsZ7uYJ5jm97LV5SLjN JIXXM+lHqCDrjDaDhNczmq1LCRlU6/WDjvkuwaVhZG4lXxMDrvKnXMkjseQ2oKjw rIdfQM86H1z5J31lfhqop+of0cimcIsBgSCPu+h96LHuAzeRBCbDKeqrfZtAZAGs okRina9947fRWxXHh3O66ILmXKNRxxWbDkPvYnQWUat8SbSTDoPWrDIGDRIAypqY o3pcN2OE0C1chqgDZQxkr+9kYZQpupOAN2TR+fM7JvbO9coKI8Uqog8CopoMeDQk d0YjcqlB1E0svODHTzcSoRzogDBYDqNLP7qVkNXpcOAXSVioBgiSDf7o5RdS/qmU yXBIeq6I5z8xBcd+BQ/n/9Frkm6K7IKP3ngUP4wEoiPx5ZE5+fPIScGmVUcZIMhk vMvem9XXh1yyhqN14gfjmLwPGdWbrgG8QUe0s2WeWIyss6uTiyF+ZbJSo2XOKVc3 YFMVUUfgyudqAV1wWdZinUk+H3pkqOKoHAy/8fST =3D40Nd -----END PGP PUBLIC KEY BLOCK----- --------------Etq7lIqz2gK915AbJJrIdQRa-- --------------30Le0bjotYBPvT00EHjebSTf-- --------------lpr8kEKEbcaT3HJxYZIsZj6U Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- wsF5BAABCAAjFiEEW7Wm6ldl0sWGPK4nWrL68XsXK+oFAmIlf9YFAwAAAAAACgkQWrL68XsXK+rz lQ//avIMunhhHTI1sjJA65QSyE5tUworRlPNtsqRj87Lc9/pGzln67URxOrU74I3KPHK6i0Ji+V9 DdhfnaZGlOvQtod6UgFQ0pe4QV1Id6ja/fzMxkUfwx10tKYu7l0RrLUZTyy3jex78ksuy9ExCrPl +aLsJjd0F1s3hdt7uLZDu1n6fX7xNEUDEyYt0twJ78CMqNUU7JHYLVCCGq+sjO7Q6J+AcnujPPbt Fe2HjaaZffK524EBFi4i7vg0sLMxNIOrzfG0nc6QvzKNc358znSXnD2PAjchohm1CAmJGDekj99R KDyT3AHo4pSTgz6hOEPZDi2leY7YAry75Lim1S7IO820jIv1DUnEXcxWCNADtVnYtoPqnJARoG11 /TnP8Z90E/uP7vAordAEpZWZOhau5iSW5JxpPQ6VnqEQXzQ84d3yd1edFuRDSVzDdO2FKgKt5AUv K7Ny5/s4QZUUBUfZCFdV/5tnAnU9cke4jSyZs9a2MctdPoRpf2CugUuiU1WQ2MC83sqcQ3dGY2WO cv71qsQbrTwz07MFcXDsBMD/Pf+XYCuVGX9oKeoSupwSmJQHwknNKiEMDppqDqti3G1+xoAD7o4a BRq8cxgzZec2ZlnBXxEv8kMi0l+qO1UoSke2VvaeOTVV4n0SQLC4r0oEvBK3exsMXO7M6c4R0Ec0 qGk= =eQMX -----END PGP SIGNATURE----- --------------lpr8kEKEbcaT3HJxYZIsZj6U-- From nobody Wed Mar 23 07:08:57 2022 Return-Path: X-Original-To: iotops@ietfa.amsl.com Delivered-To: iotops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 47B493A153E for ; Wed, 23 Mar 2022 07:08:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.109 X-Spam-Level: X-Spam-Status: No, score=-2.109 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=isode.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RwHCgMbYq0iN for ; Wed, 23 Mar 2022 07:08:50 -0700 (PDT) Received: from waldorf.isode.com (waldorf.isode.com [62.232.206.188]) by ietfa.amsl.com (Postfix) with ESMTP id 71E0F3A1549 for ; Wed, 23 Mar 2022 07:08:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1648044529; d=isode.com; s=june2016; i=@isode.com; bh=doh+1Fj7DteI0v2El2fp29nh1L6++/P1E+mmiecYyU0=; h=From:Sender:Reply-To:Subject:Date:Message-ID:To:Cc:MIME-Version: In-Reply-To:References:Content-Type:Content-Transfer-Encoding: Content-ID:Content-Description; b=Jd2IPHVTiShOFzx5Ivg3xjBPOPTBuHbpg47r3NRKwmAiCkrlSiGAkqO2Z3TjcPSBCPTjnP ZPZ+49sslvEJd0bhO10IMxiDNVTxZ49NFP9fj0FvjQmxC5DQzJnH9h7aYeR3j9cdAv4Lhe Q2rR7tG0RE2VPgFTs+fhXH/XmvgHt1I=; Received: from [31.133.136.168] (dhcp-88a8.meeting.ietf.org [31.133.136.168]) by waldorf.isode.com (submission channel) via TCP with ESMTPSA id for ; Wed, 23 Mar 2022 14:08:48 +0000 Message-ID: <9bb75191-227e-1729-63b9-ab0a277c2ccf@isode.com> Date: Wed, 23 Mar 2022 14:08:47 +0000 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.7.0 To: "iotops@ietf.org" From: Alexey Melnikov MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: [Iotops] IOTOPS slides are expected by the end of today (Vienna time) X-BeenThere: iotops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IOT Operations List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Mar 2022 14:08:55 -0000 Hi, A reminder to all presenters that all your slides should be sent to chairs by the end of today. If you don't send chairs slides by the end of today, chairs reserve the right to deny you the right to present tomorrow. Best Regards, Alexey From nobody Thu Mar 24 12:49:33 2022 Return-Path: X-Original-To: iotops@ietfa.amsl.com Delivered-To: iotops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 51CCE3A0D63 for ; Thu, 24 Mar 2022 12:49:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.109 X-Spam-Level: X-Spam-Status: No, score=-2.109 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hxQcqQ9Cb6t1 for ; Thu, 24 Mar 2022 12:49:28 -0700 (PDT) Received: from mail-pj1-x1034.google.com (mail-pj1-x1034.google.com [IPv6:2607:f8b0:4864:20::1034]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3186B3A0C95 for ; Thu, 24 Mar 2022 12:49:28 -0700 (PDT) Received: by mail-pj1-x1034.google.com with SMTP id o3-20020a17090a3d4300b001c6bc749227so6143913pjf.1 for ; Thu, 24 Mar 2022 12:49:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=message-id:date:mime-version:user-agent:content-language:from :subject:to:content-transfer-encoding; bh=wvpVGnIB4dtyp7NKPch3fDl3e2z91n9COc94+cZzXDk=; b=B7mxxDWOFtF+RDHiGBRI+xX5H/ltemNzXzWXzqSh+0oTChgY4E+vq+wHRUq/cZb+3j M/3eY1rHwnmzDtMp2jcNk/UxnuMY8xGeXw1aaOZlbxvcIPrfas+bJLrCdhovJl7gnTI1 Wr/WQ5nkyGzfVWcLcHnxuUVJFHrpLb8uCm+OWXdfkrcVSRcDTT8WSjXikTQn6+jryFtn OcPQb6Dl9Pnu3i6fniPUyjU75q6nzqcCM4TSFA1eByFV63o3zyV3xiZtnel4WQNJcwRw bvhtf7NNZrayYRYKqiz0ZhI06uTDxgKimA9Gn/FBOjdH0LrvCosa6Z1hWwVFg0YPQQ0R 2OOw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:message-id:date:mime-version:user-agent :content-language:from:subject:to:content-transfer-encoding; bh=wvpVGnIB4dtyp7NKPch3fDl3e2z91n9COc94+cZzXDk=; b=bvJ+RW2dJw157B3vAbjfFHbdk1CbA6acCeEbmUSN+ozrPuY5hDBw9qIPCiMRtnmJum HjXzwB3q28GS3z/vAyTmWeh69IyNynKI7rciq2zAmrrVw4LZ7pnzdiwo+SPIhH8BG6uJ hXWA4Uhsapf//og0n+9Leo+4Rd2MpT2SVxn5wAygPd90DdlOuI5Fpkw/O0LDsKOV9Eh1 bnUVTXYR2AeGNrZiIUu1UZaUwdDYSijHUSpUiRwTCkQk/zaJL4h216uoSotZOn71kFyF 5AL5F69tmFpnC4z2orVS+/NzfIgEIe8Y9/25DUs0/35tIweIcw9ybV6dU5/OeQ+alP3e F+eg== X-Gm-Message-State: AOAM532A2xy9MylGCD5dxoISb50zdX+zHrZQDBkNkfEX2IOlfNgKZg1M jQDLv3YJXigVzD37QUW8U3gAFzJHKf8= X-Google-Smtp-Source: ABdhPJyU6zelsoOv/gB7+On+9E+ejk0Juj8ztKN8Zr4KMDJFJFyBEigXW7numCE+4IVKesYKEZPbkw== X-Received: by 2002:a17:902:d508:b0:154:2f99:a531 with SMTP id b8-20020a170902d50800b001542f99a531mr7689542plg.133.1648151366803; Thu, 24 Mar 2022 12:49:26 -0700 (PDT) Received: from [192.168.1.15] (c-73-202-182-183.hsd1.ca.comcast.net. [73.202.182.183]) by smtp.gmail.com with ESMTPSA id l4-20020a056a0016c400b004f79504ef9csm4066919pfc.3.2022.03.24.12.49.26 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 24 Mar 2022 12:49:26 -0700 (PDT) Message-ID: <9c1291e0-82d8-ec17-fe4f-cde9025251e6@gmail.com> Date: Thu, 24 Mar 2022 12:49:25 -0700 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:91.0) Gecko/20100101 Thunderbird/91.7.0 Content-Language: en-US From: Kiran M To: iotops@ietf.org Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Archived-At: Subject: [Iotops] Comments on virtualizing PLC X-BeenThere: iotops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IOT Operations List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 24 Mar 2022 19:49:31 -0000 Hi all, I realized my responses to the comments could have been  better: 1. Henk's: on the volume of work involved:     IMHO,  this is due to missing pieces such as a common reference framework or a model for such conversations. The document highlights problems from an operator's view, i.e. "what will it take to realize virtual PLCs?" This does not mean that IETF solutions are not available already, had hinted at SFC & Detnet possibilities. The next step would be to show how these methods apply and where the potential gaps are? More converged the IT/OT get, higher the likelihood of using protocols developed here. I mentioned common interface between virtual PLC and I/O was the place to solve the problem of many protocol formats. 2. On detnet status: I should clarify that I meant to say Detnet connects (not over) TSNs.  It could be used for edge to factory site connectivity. Detnet dataplane is in RFCs 9024, 9025, 9037. More importantly, the document's focus is on other aspects of industrial networking and would reuse Detnet when possible. 3. On vendor PLCs: The document did not dwell in to commodity hardware, it's focus is on abstraction and dis-aggregation. Same vendors could utilize standard methods with their own platforms to start with. Even though there is specific interest on converging OT protocols, background context should be established too. Therefore, it will be useful to have an active discussion here on the list. Cheers, Kiran From nobody Sat Mar 26 05:42:19 2022 Return-Path: X-Original-To: iotops@ietfa.amsl.com Delivered-To: iotops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9D0CB3A0933; Sat, 26 Mar 2022 05:42:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.908 X-Spam-Level: X-Spam-Status: No, score=-1.908 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l4iHKjQ30I6n; Sat, 26 Mar 2022 05:42:12 -0700 (PDT) Received: from relay.sandelman.ca (relay.cooperix.net [IPv6:2a01:7e00:e000:2bb::1]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CEC933A08C6; Sat, 26 Mar 2022 05:42:08 -0700 (PDT) Received: from dooku.sandelman.ca (unknown [62.218.44.74]) by relay.sandelman.ca (Postfix) with ESMTPS id BBDDB1F458; Sat, 26 Mar 2022 12:42:06 +0000 (UTC) Received: by dooku.sandelman.ca (Postfix, from userid 179) id BC2DB1A01DE; Sat, 26 Mar 2022 13:42:05 +0100 (CET) From: Michael Richardson To: uta@ietf.org, core@ietf.org, iotops@ietf.org cc: hannes.tschofenig@arm.com X-Attribution: mcr X-Mailer: MH-E 8.6+git; nmh 1.7.1; GNU Emacs 26.3 MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Date: Sat, 26 Mar 2022 13:42:05 +0100 Message-ID: <59686.1648298525@dooku> Archived-At: Subject: [Iotops] comments on draft-ietf-uta-tls13-iot-profile-04: X-BeenThere: iotops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IOT Operations List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Mar 2022 12:42:18 -0000 --=-=-= Content-Type: text/plain I read draft-ietf-uta-tls13-iot-profile-04 today. Thank you Hannes for presenting it at IOTOPS. To be, it is precisely this kind of thing that IOTOPS was created for. 1) I feel that the 4.25 Too Early allocation for CoAP could use a bit more explanation, and probably there needs to be some more clear review at CORE. (maybe it already happened and I missed it?) Reading through the lines, it appears that a server that can't handle early data needs to send an error code. But such a server probably doesn't know about the error code. I would have thought it should just hang on to the data until the (D)TLS negotiation is complete. I'm also concerned that this requires too much cross-layer communication between DTLS layer and CoAP layer. 2) A long thread at LAMPS two years suggests that the term "Intermediate CA" applies only to cross-certification authoritiy bridges, and the term "Subordinate CA" should be used. That this is consistent with history going back to RFC4949. 3) While section 10 on SNI does not say *how* to use DoH or DPRIVE to provide for confidentiality of names that are looked up, a naive use of DoH with Google/Cloudflare/etc. by IoT devices would be a problem for almost all enterprises that wish to filter the DNS used by IoT devices, and to use DNS canaries to identify malware. Given that such an involved discussion is not in scope for this document, it might be better just to refer to the ADD WG without mentioning specific solutions. I am, in general, not convinced that encrypted SNI serves any purpose for most IoT devices. 4) section 15 There is much discussion about what goes into the certificates. I didn't really understand why that is in this document. Validation of server certificates is well covered in RFC6125, I think. Validation of client certificates (whether factory provisioned IDevIDs, or locally enrolled LDevIDs) is a topic that I care a lot about, and this text is inadequate. As the (industrial) IoT market embraces IDevID certificates, there is some concern that different markets will put different requirements on IDevID contents. So far it does not appear that anyone has created a situation where a single (fat) IDevID certificate couldn't be used in a variety of market verticals, the concern remains. It was my intention to introduce a document about this issue. I think that it's something that only the IETF can do. Perhaps that would fit into this UTA document, or perhaps parts of this section 15 goes into another document. -- Michael Richardson , Sandelman Software Works -= IPv6 IoT consulting =- --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQGzBAEBCgAdFiEEow/1qDVgAbWL2zxYcAKuwszYgEMFAmI/Ch0ACgkQcAKuwszY gENN4wv+Nr0vkaKlaI0ihlhfwiUQRtro83BoZ6TrgCofDtZLebDqwCI+tbg4isrM CBKD+4rcHJdwmEaMPR0GbdWB9bAxydE33J5JbN11UU8IE0hut1XUzrdm9e4PJHjt Gp2UjivwF8YmN5wysiyj4NT60HkAtmHxPWhZWzRzqIEzkllSsokQbvqZgOS3lnQs nfPW9xh3xD+g8vTPoFwcJxvw1XnKVeAFn1usfKK2mjD8NyeAl4ooAkuDseWZoXoy xfy0RVM5pZSjABu1dKaeGmemsWBGUSPsqO/lPhP7w103h5Gd6n2zNdvvk/ui679L Tw8Nk0mm6F4jl89qft+PRqYv8csp1+zv8k383RrXCGC9oS0r2YlYbn7U06IVuevq CDw7+MbOleU9czLeHtuHU4yc7PAqs79fexy7x1Wuhs9COte6jUXb5kFdFfpeBNw9 szv83o9MsLsJYGHqinskWbfVViBHMQUbiRDkfURi182KT4DUyFnVDKomDm3OPoZU HHjhxx/B =UtqA -----END PGP SIGNATURE----- --=-=-=-- From nobody Tue Mar 29 06:39:36 2022 Return-Path: X-Original-To: iotops@ietfa.amsl.com Delivered-To: iotops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BA0C73A18E7 for ; Tue, 29 Mar 2022 06:39:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.107 X-Spam-Level: X-Spam-Status: No, score=-2.107 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5AHp-SlztIQT for ; Tue, 29 Mar 2022 06:39:29 -0700 (PDT) Received: from mail-yw1-x1135.google.com (mail-yw1-x1135.google.com [IPv6:2607:f8b0:4864:20::1135]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D54F93A18E0 for ; Tue, 29 Mar 2022 06:39:29 -0700 (PDT) Received: by mail-yw1-x1135.google.com with SMTP id 00721157ae682-2e6ceb45174so143850387b3.8 for ; Tue, 29 Mar 2022 06:39:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:from:date:message-id:subject:to; bh=BwN3TJJFi1tHqOFdiCCkkc00WgfUc8qCShMjZ+CfRK4=; b=KYoKteWrcI1jNE6BmVsX+3bvdEAUwgZ0jtDH8hv3+s13SIV0xYU+mIAgoUEY0sNaYe UD0hJccCa8cHHBbp+fZvDdiGt8bwqy9/M5h0+bniqxt+8ZHjZYl2pWmWzzLsc8z1FpqT 8mCYk4hFA4rhgSTA48jioHuOweCLY60a8fv1vbTvHaqladprPJVia5S6UL8FtBl0YrLc WzNcMEfJqIdlsFA5ghOWNm6X5Lhxi/IHGsgoCy/6n1noy5QwdGF8wQ348/Mk1YzAF1EF 0dpRn72+vQNOIPrNCH+sPymk2NF46gmTtjaui67zzxcsypXeBiFweOs+CYmwF1k+8AoU UvzQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=BwN3TJJFi1tHqOFdiCCkkc00WgfUc8qCShMjZ+CfRK4=; b=BijH0AqXJZe6M0EMAyAy8CNs4PWgPPF/yi+eTLVFhUO27htrKZDM25IBvLQXf5IiV0 WS/i4C+3tQaqbtlivXZ40BRdM0kYit7by1GwrzsPKKSI0etFnDZWHRp9kpHBy3vzvaQP 97DIGg0cvs6KzOPHRRcx91E8FkImAvnAD1u32jeeeKyRHzpRqRzdP89Oi0bxE1+NNOdz Bs73g5MGBD/oHa8JtzJlBkl6AnXzzYJWeEPmbUhCYTMww50aJ5eq6M1AFUFeNO1VCckd 9QVpdMotl7gPN/uMYTGsGt3SihsHRevc+JgJTW2h+d/D7q3eqgx00HwjRgnYnKf1IUUd UoKg== X-Gm-Message-State: AOAM530nM/MhdqZlcbP7Xy1duiXY70pVcIIAuF0VDHyvyRm8JGLYdP9P ymFLuKgCjusde4lkjIFbpUUpW+wFHjo7M8fBQZJogiU/sMBlvw== X-Google-Smtp-Source: ABdhPJyHaDGU1Cgty2EGd3f60BKI/EWzN/0xcQXN/Yfvz/fjahfaGuVFOIn0n1WLEYmNkqN16krJS/awVFoflLYPPr4= X-Received: by 2002:a81:c44b:0:b0:2d6:4726:ef4b with SMTP id s11-20020a81c44b000000b002d64726ef4bmr31354554ywj.184.1648561168568; Tue, 29 Mar 2022 06:39:28 -0700 (PDT) MIME-Version: 1.0 From: =?UTF-8?Q?S=C3=A1vyo_Morais?= Date: Tue, 29 Mar 2022 10:39:17 -0300 Message-ID: To: iotops@ietf.org Content-Type: multipart/alternative; boundary="000000000000d7d52305db5b8ed1" Archived-At: Subject: [Iotops] Question about updating drafts X-BeenThere: iotops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IOT Operations List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Mar 2022 13:39:35 -0000 --000000000000d7d52305db5b8ed1 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi guys, I'm sending this email with an honest question about the minimum requisites for allowing a draft update. Well, everyone knows that, when there is no more talk about one draft, it might not be updated. But the point for me is: what about it received only one or two comments? How much "not humming" is necessary for one draft to be discontinued? Furthermore, after the answer to this question (or discussion about that), I would like to bring one concrete case to the table. In the past November, I've submitted a draft [1] and received only one comment on this list with a few suggestions for typo corrections. Therefore, as the draft's expiration is approaching, I have doubts if I can update it based on those comments. [1] https://datatracker.ietf.org/doc/draft-morais-iotops-inxu/ -- Regards, S=C3=A1vyo Morais --000000000000d7d52305db5b8ed1 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
Hi guys,

I'm sending this email wit= h an honest question about the minimum requisites for allowing a draft upda= te.

Well, everyone knows that, when there is no mo= re talk about one draft, it might not be updated. But the point for me is: = what about it received only one or two comments? How much "not humming= " is necessary for one draft to be discontinued?

<= div>Furthermore, after the answer=C2=A0to this question (or discussion abou= t that), I would like to bring one concrete case to the table. In the past = November, I've submitted a draft [1] and received only one comment on t= his list=C2=A0with a few suggestions for typo corrections.

Therefore, as the draft's expiration is approaching, I have do= ubts if I can update it based on those comments.

[= 1]=C2=A0https://datatracker.ietf.org/doc/draft-morais-iotops-inxu/

--
Regards,
S=C3=A1vyo Morais
--000000000000d7d52305db5b8ed1-- From nobody Thu Mar 31 06:43:48 2022 Return-Path: X-Original-To: iotops@ietfa.amsl.com Delivered-To: iotops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 61DA63A11B6 for ; Thu, 31 Mar 2022 06:43:46 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.11 X-Spam-Level: X-Spam-Status: No, score=-2.11 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=msweet.org Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rfwlexS1RxYb for ; Thu, 31 Mar 2022 06:43:41 -0700 (PDT) Received: from mail.msweet.org (mail.msweet.org [173.255.209.91]) by ietfa.amsl.com (Postfix) with ESMTP id B5E9B3A11E6 for ; Thu, 31 Mar 2022 06:43:41 -0700 (PDT) Received: from smtpclient.apple (cbl-66-186-76-47.vianet.ca [66.186.76.47]) by mail.msweet.org (Postfix) with ESMTPSA id A821681012; Thu, 31 Mar 2022 13:43:40 +0000 (UTC) DKIM-Filter: OpenDKIM Filter v2.11.0 mail.msweet.org A821681012 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=msweet.org; s=default; t=1648734221; bh=mjTIJZP//j8dK3pBJwKERG1iGgeC+SjzoTXBKpbl2HY=; h=Subject:From:In-Reply-To:Date:Cc:References:To:From; b=CFnQYzNdQ2iriFOT44dCxNjOZE9UsJx31B1VIiroFQutVS87ADsaLS7urBTERgSPC 4hMn0tjHISEjd1YTd9GBmxEFLKU3fd8oz4ohPs6QaphIfFs0A2vUIptExJ9sY+1hNv pmYcFDU6gp0UtOaO+/gH3oZCBWAbqxgbQfnGPSM8= Content-Type: multipart/signed; boundary="Apple-Mail=_9C63DD76-FDAE-4808-B572-231202F6DDFE"; protocol="application/pgp-signature"; micalg=pgp-sha256 Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3696.80.82.1.1\)) From: Michael Sweet In-Reply-To: Date: Thu, 31 Mar 2022 09:43:39 -0400 Cc: iotops@ietf.org Message-Id: References: To: =?utf-8?Q?S=C3=A1vyo_Morais?= X-Mailer: Apple Mail (2.3696.80.82.1.1) Archived-At: Subject: Re: [Iotops] Question about updating drafts X-BeenThere: iotops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IOT Operations List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 Mar 2022 13:43:47 -0000 --Apple-Mail=_9C63DD76-FDAE-4808-B572-231202F6DDFE Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 S=C3=A1vyo, I skimmed the referenced draft along with RFC 8250, since I wasn't = familiar with that work... My $0.02 CAD is that if MUDs are being = implemented by vendors then MTDs would be a useful addition. But in the = printer world we've only been talking about TNC and EAP for securing = enterprise networks... > On Mar 29, 2022, at 9:39 AM, S=C3=A1vyo Morais = wrote: >=20 > Hi guys, >=20 > I'm sending this email with an honest question about the minimum = requisites for allowing a draft update. >=20 > Well, everyone knows that, when there is no more talk about one draft, = it might not be updated. But the point for me is: what about it received = only one or two comments? How much "not humming" is necessary for one = draft to be discontinued? >=20 > Furthermore, after the answer to this question (or discussion about = that), I would like to bring one concrete case to the table. In the past = November, I've submitted a draft [1] and received only one comment on = this list with a few suggestions for typo corrections. >=20 > Therefore, as the draft's expiration is approaching, I have doubts if = I can update it based on those comments. >=20 > [1] https://datatracker.ietf.org/doc/draft-morais-iotops-inxu/ >=20 > -- > Regards, > S=C3=A1vyo Morais > -- > Iotops mailing list > Iotops@ietf.org > https://www.ietf.org/mailman/listinfo/iotops ________________________ Michael Sweet --Apple-Mail=_9C63DD76-FDAE-4808-B572-231202F6DDFE Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEkIbDzcZsP1Y8+PQFvmfHXsgfMkQFAmJFsAsACgkQvmfHXsgf MkQowBAAtrZZJsBrrasc/J6IGTH0fl7YrxKvg7qyjEM8awYEfNii+8n2xke5yRkB YBakSf4t0wFTG6Fd/9acErWAOJ2/9Ltx0neDjcEKZFUiKF0m+WHDbx+ElWW83Lhd uIIZS86VmQZW9NdcH5lPJ/5NMVahnZ5sg22BCEE+fpHQORiYARIuIFFbVe0pl5UW AkIdOKHXbpnvTablgpf96rrAaoSiq63nBKI+MoxdZ8vC9giSwUxtsNkiBz6oNZYJ mnvlG5khTI5d5qxnZSSw6qlpgUObIuW5m/Dh1nq33z6ubrBqWDOqnWv6PbJ1BL9z SUvdv985KMrBVLzRjy+B0p7+DZ5dQEmhUE0TJjxOMC+HK1Y1UyRposKJH+tFgzhK NVDKCZ6jGB3KdGgG84+erRadNCrCbxQ0TATtHurSy/ozZ/Aa0GxHlthYmE0Ag/GX qKx00KdvexRLCB7qVY/mM9tT3DEZc68qAH8A1WVDjt7jNUpI/RZVqRP1ZSOZpYjA oKr1a+f/Yp/jqZjVh4w4+eg+s5j7ENNf28fbSuE0P5Rn+nQJEkUf3kDsBhTM8kxB kszlnqS5j1xNI3wfqIwqoBZpyWtI2yiWR+4eD7XsCNd0DyjBln+brWGOQnVonstS 80hOL0dzpRlllX1ICw60z8vvH1Lf0niHlf2J0IC/9GMvfzdoyiM= =At1u -----END PGP SIGNATURE----- --Apple-Mail=_9C63DD76-FDAE-4808-B572-231202F6DDFE-- From nobody Thu Mar 31 09:43:27 2022 Return-Path: X-Original-To: iotops@ietfa.amsl.com Delivered-To: iotops@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 735083A10CE for ; Thu, 31 Mar 2022 09:43:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -7.109 X-Spam-Level: X-Spam-Status: No, score=-7.109 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_HI=-5, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=sandelman.ca Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BdUUGL0G3oDR for ; Thu, 31 Mar 2022 09:43:20 -0700 (PDT) Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.249.19]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C5A763A19A3 for ; Thu, 31 Mar 2022 09:43:19 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by tuna.sandelman.ca (Postfix) with ESMTP id 9231138D63; Thu, 31 Mar 2022 12:54:07 -0400 (EDT) Received: from tuna.sandelman.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with LMTP id UuZOOQcdKoKV; Thu, 31 Mar 2022 12:54:03 -0400 (EDT) Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 373F438C91; Thu, 31 Mar 2022 12:54:03 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=sandelman.ca; s=mail; t=1648745643; bh=5SAQP4hZrmyZOK8AxUyfZr+y2nCo15IJ0CX7zhEpmRw=; h=From:To:Subject:In-Reply-To:References:Date:From; b=qWoO5MpeetTXsI2CcMOG/JrWAmI/YMdeJtgJEO5Du4bl2YBgDL/XrKyOHYED6W910 z5nZpW2AIpG8u5V02ZA65fWYdVq6Dkmmgi8LqzKsSmhWeCWlCIWBtdzfHkprDTFrQO Z4yiaL4UlwTjpYF4qgxjh+YV3ejdvxwWVCFZI5cULr2tKMaYBogbcINmhXIPle8C6J c2JI1QqxzdwEzOK5wu3tHxiqTaVv+12m29tY8zD6K38YCOn3xVopJ0FBUUiqVS+I7w cF56oRRPBuno/wSmGZm+1Nekc3xOtjgcVy24Vra+mS0zOhh+yHwKTOZNUSyQcBtsy2 TCj6J8jiuFv/A== Received: from localhost (localhost [IPv6:::1]) by sandelman.ca (Postfix) with ESMTP id 9AE644EE; Thu, 31 Mar 2022 12:43:13 -0400 (EDT) From: Michael Richardson To: Michael Sweet , iotops@ietf.org, =?us-ascii?Q?=3D=3Futf-8=3FQ=3FS=3DC3=3DA1vyo=5FMorais=3F=3D?= In-Reply-To: References: X-Mailer: MH-E 8.6+git; nmh 1.7+dev; GNU Emacs 26.1 X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m Archived-At: Subject: [Iotops] INXU documents --- Re: Question about updating drafts X-BeenThere: iotops@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: IOT Operations List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 31 Mar 2022 16:43:26 -0000 --=-=-= Content-Type: text/plain >> Well, everyone knows that, when there is no more talk about one draft, >> it might not be updated. But the point for me is: what about it received >> only one or two comments? How much "not humming" is necessary for one >> draft to be discontinued? In general, anyone may call for a draft to be adopted by a WG. (In practice, it is usually done by the WG chairs) The job of the WG chairs is to judge consensus on whether or not the document: a) fits into the WG charter b) is supported by some rough consensus of people c) whether there are IPR restrictions that might affect publication RFC7221 discusses some of this, and there was an rfc7221bis to further clarify that. IOTOPS is unusual in that it doesn't have a mandate to process protocol documents. The INXU document would have to be adopted in the OPSAWG group, which is where MUD extensions are being sent. It is not coincidence that OPSAWG and IOTOPS have a chair in common... It might be that the DOTS WG would be a better place. This would be a topic that needs discussion. My feeling is that we need some solution in this space, but I'm not (yet) convinced that your solution is the right one. In general, you should probably repost/edit your draft until such time as it gets adopted or there is rough consensus that it's a bad idea. Michael Sweet wrote: > I skimmed the referenced draft along with RFC 8250, since I wasn't > familiar with that work... My $0.02 CAD is that if MUDs are being > implemented by vendors then MTDs would be a useful addition. But in > the printer world we've only been talking about TNC and EAP for > securing enterprise networks... the problem is that todate, MUDs are not being implemented en mass by vendors. There is a chicken and egg problem, and there still needs to be some strategic decisions to make it work out. -- ] Never tell me the odds! | ipv6 mesh networks [ ] Michael Richardson, Sandelman Software Works | IoT architect [ ] mcr@sandelman.ca http://www.sandelman.ca/ | ruby on rails [ --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAEBCgAdFiEEbsyLEzg/qUTA43uogItw+93Q3WUFAmJF2iEACgkQgItw+93Q 3WU1Lwf+Lx9GAQeqY6Lo7++A4czWCwiF6piBrTOSaVWjkQ8MbjFa8MI4a4VHSlPp pkc+kGF8vY90+NhsgljsfmmBErjso9gBeWBnnZcd205WgIjVKHoHxO3nGLAr8oJf Zizly9gOLyVmeHZmV/tl2SpDoZ4k0HrQ2iK96wT8YrTr2wTIKWGCSCCXVFexc61j U4CW4wemCy2roRyRrT/RmqCP1x3MrQvDIK2Xg9fVoV9i4w9+iGfJBkMdkYLeqWk6 ud5XVu6rDKuAS8URDEhw9rqtCBHMGwYxklJJMk8n/xZQF9TBJ3jbFYh6/pE4UClH ptBWyz53GiMslnX4RIwAIf128T/5bA== =g3sg -----END PGP SIGNATURE----- --=-=-=--