From keyprov-bounces@ietf.org Mon May 07 16:53:45 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1HlADJ-00088e-22; Mon, 07 May 2007 16:53:45 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1HlADI-00088Q-7A for keyprov@ietf.org; Mon, 07 May 2007 16:53:44 -0400 Received: from gateway1.rsasecurity.com ([216.162.240.250]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1HlADH-0004Sn-TV for keyprov@ietf.org; Mon, 07 May 2007 16:53:44 -0400 Received: from hyperion.rsasecurity.com by gateway1.rsasecurity.com via smtpd (for stiedprmail1.ietf.ORG [156.154.16.150]) with SMTP; Mon, 7 May 2007 16:53:43 -0400 Received: from sdtihq24.securid.com (sdtihq24.na.rsa.net [10.100.8.152]) by hyperion.na.rsa.net (MOS 3.8.3-GA) with ESMTP id DCF54543; Mon, 7 May 2007 16:58:25 +0500 (GMT-5) Received: from rsana-ex-hq1.NA.RSA.NET (rsana-ex-hq1.na.rsa.net [10.100.8.50]) by sdtihq24.securid.com (8.12.10/8.12.9) with ESMTP id l47KrhoS000388 for ; Mon, 7 May 2007 16:53:43 -0400 (EDT) X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Mon, 7 May 2007 16:53:42 -0400 Message-ID: <017630AA6DF2DF4EBC1DD4454F8EE2970AC88ACB@rsana-ex-hq1.NA.RSA.NET> Thread-Topic: Comments on PSKC I-D thread-index: AceQ6cvB4EWLyCgqToGEhl0xoWL2Kg== From: "Doherty, Andrea" To: X-Spam-Score: 0.1 (/) X-Scan-Signature: 7fa173a723009a6ca8ce575a65a5d813 Subject: [KEYPROV] Comments on PSKC I-D X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org I reviewed draft-vassilev-portable-symmetric-key-container-02.txt, which is essentially the same as draft-hoyer-keyprov-portable-symmetric-key-container-00.txt, and have the following comments: General 1. Should draft be scrubbed of "OATH" and made more generic to types of authentication tokens, such as RSA SecurID, which are not produced by OATH? 2. Although the first application of the PSKC will be for authentication tokens, it could be applicable to other symmetric key management use cases (e.g., those considered in IEEE P1619.3. As such, it would be good to generalize where possible, with provisioning of authentication tokens as a near-term goal and/or as an example application, rather than as the target application. 3. XML schema itself needs to be more carefully reviewed, but waiting until comments are addressed. Section 1 1. "The goal is that the format will facilitate dynamic provisioning of OTP credentials using an OTP provisioning protocol to different flavors of embedded tokens ...from different vendors into the same infrastructure." =20 * This is very specific; perhaps it would better to mention this as a sample use case rather that a goal for the format. =20 2. Why is a "more explicit attribute schema definition" more desirable than PKCS#12? Doesn't that also make the format more heavyweight? Section 4. 1. Would be good to generalize the "event counter value" and "time value" OTP attributes. Section 5.1 1. Friendly Name is missing. Section 5.1.1 1. The attribute names are repeated in Section 6.1.1. 2. Attribute list should be extensible. Section 5.1.4 1. "global identifier" --- relative to what? What is the base of the hierarchy? For example, could it be the IEEE registry? Section 5.1.5 1. Please provide an example of what is meant by "Issuer". Section 5.1.6 1. Although not necessarily applicable here, where would a PIN policy be defined? In other words, if the symmetric key is loaded on an authentication token, will the token be a PIN-less or PIN-full one --- and where can that be set as an attribute? Section 5.1.7 1. The EncryptionMethod is only Mandatory when the SecretContainer->SecretType->Data->Value is encrypted (also, please refer to last paragraph of Section 6.1.1). Section 5.1.9 1. Are these attributes mandatory or optional? I would assume Optional if the format is intended for broader application than authentication tokens. 2. OTP attributes are not covered in any sub-sections of 5.1.9... Section 6.1.1 1. "Usage" implies that each secret in a "Device" could support a different algorithm. Correct? 2. "userPIN" - is the intent to have a different PIN for each secret stored in a Device? If no PIN is provided, the assumption is no PIN is required? Is this a correct interpretation? Where might a PIN policy fit here (also refer to comment on Section 5.1.6, above)? 3. "SecretId" - perhaps this should have a more structured type than "string", esp. one that could be represented as a URI should this be a global identifier. 4. "Issuer" - is this the same thing as "ServiceID" used in DSKPP (see draft-pei-keyprov-dynamic-symkey-prov-protocol-00.txt, Sec. 6.2)? Section 6.1.2 1. UsageType->AlgorithmIdentifier should be defined by an IANA identifier or a URI rather than an OCRA one. 2. Is UsageType->AlgorithmIdentifier the same identifier as described in Section 6.1.9 as "OTPAlgorithmIdentifier"? Judging by the schema for "UsageType" described in Sec 6.1.2, it appears that Usage is limited to OTP. Is that really the goal? 2. "Access Rules" -- typo - "weather" should be "whether". Section 6.1.3 1. There is a constraint specified here that could get lost, and should probably be added to the description of the Secret Container in Section 6.0. That is "a shared secret MUST be bound to one Device only". The only implications of this constraint that I can think of are applicable to the provisioning system than the container format (e.g., the secrets in a device may not be cloned). Perhaps there are some that are specific to the container? Section 6.1.4 1. "Since OATH devices" is too specific... 2. "identifying criteria" should be specified consistently along with applicability information, e.g., by registering IANA numbers. 3. "SerialNo" -- is this what is used to comply with statement that "criteria MUST identify uniquely the device"? If so, is the SerialNo also going to have global scope? To satisfy the use cases around cross-vendor credential migration, it would seem this is a requirement. Section 6.1.9 1. Where does this fit? See comments under Section 6.1.2, above. 2. "OCRA-HOTP", etc. --- see comment under Section 6.1.2, above. Section 6.5 1. HOTP is quite specific, and perhaps other OTP algorithm types should be included. _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Mon May 07 17:12:20 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1HlAVG-0003vF-0M; Mon, 07 May 2007 17:12:18 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1HlAVF-0003vA-Dc for keyprov@ietf.org; Mon, 07 May 2007 17:12:17 -0400 Received: from robin.verisign.com ([65.205.251.75]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1HlAVC-0000Dh-S1 for keyprov@ietf.org; Mon, 07 May 2007 17:12:17 -0400 Received: from mou1wnexcn01.vcorp.ad.vrsn.com (mailer1.verisign.com [65.205.251.34]) by robin.verisign.com (8.13.6/8.13.4) with ESMTP id l47LCCbM007481; Mon, 7 May 2007 14:12:12 -0700 Received: from MOU1WNEXMB04.vcorp.ad.vrsn.com ([10.25.13.157]) by mou1wnexcn01.vcorp.ad.vrsn.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 7 May 2007 14:12:11 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Subject: RE: [KEYPROV] Comments on PSKC I-D Date: Mon, 7 May 2007 14:11:27 -0700 Message-ID: <198A730C2044DE4A96749D13E167AD370124D43A@MOU1WNEXMB04.vcorp.ad.vrsn.com> In-Reply-To: <017630AA6DF2DF4EBC1DD4454F8EE2970AC88ACB@rsana-ex-hq1.NA.RSA.NET> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [KEYPROV] Comments on PSKC I-D Thread-Index: AceQ6cvB4EWLyCgqToGEhl0xoWL2KgAAjIaQ From: "Hallam-Baker, Phillip" To: "Doherty, Andrea" , X-OriginalArrivalTime: 07 May 2007 21:12:11.0941 (UTC) FILETIME=[611E5D50:01C790EC] X-Spam-Score: 0.1 (/) X-Scan-Signature: 36b1f8810cb91289d885dc8ab4fc8172 Cc: X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Best avoid mention of any vendor product. Symmetric keyed authentication = token. =20 > -----Original Message----- > From: Doherty, Andrea [mailto:adoherty@rsasecurity.com]=20 > Sent: Monday, May 07, 2007 4:54 PM > To: keyprov@ietf.org > Subject: [KEYPROV] Comments on PSKC I-D >=20 > I reviewed=20 > draft-vassilev-portable-symmetric-key-container-02.txt, which=20 > is essentially the same as=20 > draft-hoyer-keyprov-portable-symmetric-key-container-00.txt,=20 > and have the following comments: >=20 > General > 1. Should draft be scrubbed of "OATH" and made more generic=20 > to types of authentication tokens, such as RSA SecurID, which=20 > are not produced by OATH? > 2. Although the first application of the PSKC will be for=20 > authentication tokens, it could be applicable to other=20 > symmetric key management use cases (e.g., those considered in=20 > IEEE P1619.3. As such, it would be good to generalize where=20 > possible, with provisioning of authentication tokens as a=20 > near-term goal and/or as an example application, rather than=20 > as the target application. > 3. XML schema itself needs to be more carefully reviewed, but=20 > waiting until comments are addressed. >=20 > Section 1 > 1. "The goal is that the format will facilitate dynamic=20 > provisioning of OTP credentials using an OTP provisioning=20 > protocol to different flavors of embedded tokens ...from=20 > different vendors into the same infrastructure." =20 > * This is very specific; perhaps it would better to mention this > as a sample use case rather that a goal for the format. =20 > 2. Why is a "more explicit attribute schema definition" more=20 > desirable than PKCS#12? Doesn't that also make the format=20 > more heavyweight? >=20 > Section 4. > 1. Would be good to generalize the "event counter value" and=20 > "time value" OTP attributes. >=20 > Section 5.1 > 1. Friendly Name is missing. >=20 > Section 5.1.1 > 1. The attribute names are repeated in Section 6.1.1. > 2. Attribute list should be extensible. >=20 > Section 5.1.4 > 1. "global identifier" --- relative to what? What is the=20 > base of the hierarchy? For example, could it be the IEEE registry? >=20 > Section 5.1.5 > 1. Please provide an example of what is meant by "Issuer". >=20 > Section 5.1.6 > 1. Although not necessarily applicable here, where would a=20 > PIN policy be defined? In other words, if the symmetric key=20 > is loaded on an authentication token, will the token be a=20 > PIN-less or PIN-full one --- and where can that be set as an=20 > attribute? >=20 > Section 5.1.7 > 1. The EncryptionMethod is only Mandatory when the > SecretContainer->SecretType->Data->Value is encrypted (also, please > refer to last paragraph of Section 6.1.1). >=20 > Section 5.1.9 > 1. Are these attributes mandatory or optional? I would=20 > assume Optional if the format is intended for broader=20 > application than authentication tokens. > 2. OTP attributes are not covered in any sub-sections of 5.1.9... >=20 > Section 6.1.1 > 1. "Usage" implies that each secret in a "Device" could=20 > support a different algorithm. Correct? > 2. "userPIN" - is the intent to have a different PIN for each=20 > secret stored in a Device? If no PIN is provided, the=20 > assumption is no PIN is required? Is this a correct=20 > interpretation? Where might a PIN policy fit here (also=20 > refer to comment on Section 5.1.6, above)? > 3. "SecretId" - perhaps this should have a more structured=20 > type than "string", esp. one that could be represented as a=20 > URI should this be a global identifier. > 4. "Issuer" - is this the same thing as "ServiceID" used in=20 > DSKPP (see=20 > draft-pei-keyprov-dynamic-symkey-prov-protocol-00.txt, Sec. 6.2)? >=20 > Section 6.1.2 > 1. UsageType->AlgorithmIdentifier should be defined by an=20 > IANA identifier or a URI rather than an OCRA one. > 2. Is UsageType->AlgorithmIdentifier the same identifier as=20 > described in Section 6.1.9 as "OTPAlgorithmIdentifier"? =20 > Judging by the schema for "UsageType" described in Sec 6.1.2,=20 > it appears that Usage is limited to > OTP. Is that really the goal? > 2. "Access Rules" -- typo - "weather" should be "whether". >=20 > Section 6.1.3 > 1. There is a constraint specified here that could get lost,=20 > and should probably be added to the description of the Secret=20 > Container in Section 6.0. That is "a shared secret MUST be=20 > bound to one Device only". The only implications of this=20 > constraint that I can think of are applicable to the=20 > provisioning system than the container format (e.g., the=20 > secrets in a device may not be cloned). Perhaps there are=20 > some that are specific to the container? >=20 > Section 6.1.4 > 1. "Since OATH devices" is too specific... > 2. "identifying criteria" should be specified consistently=20 > along with applicability information, e.g., by registering=20 > IANA numbers. > 3. "SerialNo" -- is this what is used to comply with=20 > statement that "criteria MUST identify uniquely the device"? =20 > If so, is the SerialNo also going to have global scope? To=20 > satisfy the use cases around cross-vendor credential=20 > migration, it would seem this is a requirement. >=20 > Section 6.1.9 > 1. Where does this fit? See comments under Section 6.1.2, above. > 2. "OCRA-HOTP", etc. --- see comment under Section 6.1.2, above. >=20 > Section 6.5 > 1. HOTP is quite specific, and perhaps other OTP algorithm=20 > types should be included. >=20 >=20 > _______________________________________________ > KEYPROV mailing list > KEYPROV@ietf.org > https://www1.ietf.org/mailman/listinfo/keyprov >=20 _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Thu May 10 11:28:00 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1HmAYi-0003D1-2Z; Thu, 10 May 2007 11:28:00 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1HmAYh-0003Cw-Gn for keyprov@ietf.org; Thu, 10 May 2007 11:27:59 -0400 Received: from frhub1.activcard.fr ([195.115.13.145]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1HmAYg-0004ji-0G for keyprov@ietf.org; Thu, 10 May 2007 11:27:59 -0400 Received: from sur-corp-ex-01.activcard.fr (unknown [192.168.33.28]) by frhub1.activcard.fr (Postfix) with ESMTP id 7F9D925ED4A; Thu, 10 May 2007 17:27:56 +0200 (CEST) Received: by sur-corp-ex-01.corp.ad.activcard.com with Internet Mail Service (5.5.2657.72) id ; Thu, 10 May 2007 17:30:09 +0200 Message-ID: <3ADD8819CB7CC84BA3200866926CC2180B516E48@sur-corp-ex-01.corp.ad.activcard.com> From: Philip Hoyer To: "Doherty, Andrea" , keyprov@ietf.org Subject: RE: [KEYPROV] Comments on PSKC I-D Date: Thu, 10 May 2007 17:30:09 +0200 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2657.72) Content-Type: text/plain X-Spam-Score: 0.0 (/) X-Scan-Signature: b2809b6f39decc6de467dcf252f42af1 Cc: X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Andrea, I will look at your comments and respond to them individually this coming week. Thanks for your thorough review, Philip -----Original Message----- From: Doherty, Andrea [mailto:adoherty@rsasecurity.com] Sent: 07 May 2007 21:54 To: keyprov@ietf.org Subject: [KEYPROV] Comments on PSKC I-D I reviewed draft-vassilev-portable-symmetric-key-container-02.txt, which is essentially the same as draft-hoyer-keyprov-portable-symmetric-key-container-00.txt, and have the following comments: General 1. Should draft be scrubbed of "OATH" and made more generic to types of authentication tokens, such as RSA SecurID, which are not produced by OATH? 2. Although the first application of the PSKC will be for authentication tokens, it could be applicable to other symmetric key management use cases (e.g., those considered in IEEE P1619.3. As such, it would be good to generalize where possible, with provisioning of authentication tokens as a near-term goal and/or as an example application, rather than as the target application. 3. XML schema itself needs to be more carefully reviewed, but waiting until comments are addressed. Section 1 1. "The goal is that the format will facilitate dynamic provisioning of OTP credentials using an OTP provisioning protocol to different flavors of embedded tokens ...from different vendors into the same infrastructure." * This is very specific; perhaps it would better to mention this as a sample use case rather that a goal for the format. 2. Why is a "more explicit attribute schema definition" more desirable than PKCS#12? Doesn't that also make the format more heavyweight? Section 4. 1. Would be good to generalize the "event counter value" and "time value" OTP attributes. Section 5.1 1. Friendly Name is missing. Section 5.1.1 1. The attribute names are repeated in Section 6.1.1. 2. Attribute list should be extensible. Section 5.1.4 1. "global identifier" --- relative to what? What is the base of the hierarchy? For example, could it be the IEEE registry? Section 5.1.5 1. Please provide an example of what is meant by "Issuer". Section 5.1.6 1. Although not necessarily applicable here, where would a PIN policy be defined? In other words, if the symmetric key is loaded on an authentication token, will the token be a PIN-less or PIN-full one --- and where can that be set as an attribute? Section 5.1.7 1. The EncryptionMethod is only Mandatory when the SecretContainer->SecretType->Data->Value is encrypted (also, please refer to last paragraph of Section 6.1.1). Section 5.1.9 1. Are these attributes mandatory or optional? I would assume Optional if the format is intended for broader application than authentication tokens. 2. OTP attributes are not covered in any sub-sections of 5.1.9... Section 6.1.1 1. "Usage" implies that each secret in a "Device" could support a different algorithm. Correct? 2. "userPIN" - is the intent to have a different PIN for each secret stored in a Device? If no PIN is provided, the assumption is no PIN is required? Is this a correct interpretation? Where might a PIN policy fit here (also refer to comment on Section 5.1.6, above)? 3. "SecretId" - perhaps this should have a more structured type than "string", esp. one that could be represented as a URI should this be a global identifier. 4. "Issuer" - is this the same thing as "ServiceID" used in DSKPP (see draft-pei-keyprov-dynamic-symkey-prov-protocol-00.txt, Sec. 6.2)? Section 6.1.2 1. UsageType->AlgorithmIdentifier should be defined by an IANA identifier or a URI rather than an OCRA one. 2. Is UsageType->AlgorithmIdentifier the same identifier as described in Section 6.1.9 as "OTPAlgorithmIdentifier"? Judging by the schema for "UsageType" described in Sec 6.1.2, it appears that Usage is limited to OTP. Is that really the goal? 2. "Access Rules" -- typo - "weather" should be "whether". Section 6.1.3 1. There is a constraint specified here that could get lost, and should probably be added to the description of the Secret Container in Section 6.0. That is "a shared secret MUST be bound to one Device only". The only implications of this constraint that I can think of are applicable to the provisioning system than the container format (e.g., the secrets in a device may not be cloned). Perhaps there are some that are specific to the container? Section 6.1.4 1. "Since OATH devices" is too specific... 2. "identifying criteria" should be specified consistently along with applicability information, e.g., by registering IANA numbers. 3. "SerialNo" -- is this what is used to comply with statement that "criteria MUST identify uniquely the device"? If so, is the SerialNo also going to have global scope? To satisfy the use cases around cross-vendor credential migration, it would seem this is a requirement. Section 6.1.9 1. Where does this fit? See comments under Section 6.1.2, above. 2. "OCRA-HOTP", etc. --- see comment under Section 6.1.2, above. Section 6.5 1. HOTP is quite specific, and perhaps other OTP algorithm types should be included. _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Wed May 23 21:27:45 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1Hr27E-00084z-Ur; Wed, 23 May 2007 21:27:44 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1Hr27D-00084u-6C for keyprov@ietf.org; Wed, 23 May 2007 21:27:43 -0400 Received: from gateway1.rsasecurity.com ([216.162.240.250]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1Hr27B-00036N-Jp for keyprov@ietf.org; Wed, 23 May 2007 21:27:43 -0400 Received: from hyperion.rsasecurity.com by gateway1.rsasecurity.com via smtpd (for ietf-mx.ietf.ORG [156.154.16.150]) with SMTP; Wed, 23 May 2007 21:27:41 -0400 Received: from sdtihq24.securid.com ([10.100.8.152]) by hyperion.na.rsa.net (MOS 3.8.3-GA) with ESMTP id DCV61031; Wed, 23 May 2007 21:30:53 +0500 (GMT-5) Received: from rsana-ex-hq1.NA.RSA.NET (rsana-ex-hq1.na.rsa.net [10.100.8.50]) by sdtihq24.securid.com (8.12.10/8.12.9) with ESMTP id l4O1RUoS021945 for ; Wed, 23 May 2007 21:27:40 -0400 (EDT) X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----_=_NextPart_001_01C79DA2.B226B6E2" Date: Wed, 23 May 2007 21:27:22 -0400 Message-ID: <017630AA6DF2DF4EBC1DD4454F8EE2970AEC4792@rsana-ex-hq1.NA.RSA.NET> X-MS-Has-Attach: yes Thread-Topic: XML instances thread-index: Acedoq1uWTKasZ24SzSdSirbf6PCag== From: "Doherty, Andrea" To: X-Spam-Score: 0.0 (/) X-Scan-Signature: b7b1e91f6d312d4248b994050b22d659 Subject: [KEYPROV] XML instances X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org This is a multi-part message in MIME format. ------_=_NextPart_001_01C79DA2.B226B6E2 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Mingliang Pei and I have made progress toward drafting a merged protocol specification. Working from the convergence plan we presented in Prague, he and I have developed components of a merged KEYPROV XML Schema that is based on CT-KIP, including four-pass, two-pass, and one-pass variants, while adding DSKPP capabilities, such as support for Portable Symmetric Key Container (PSKC), User Authentication, and Device Authentication. Before we get much further, attached please find the merged schema, which is very much a work-in-progress. Also attached please find XML instances for each of the KEYPROV messages, currently named ClientHello, ServerHello, ClientNonce, and ServerNonce. Comments are very welcome and hopefully sooner rather than later as we hope to incorporate feedback before submitting I-D for IETF-69. Andrea <> <> =20 <> <> =20 <> <>=20 ------_=_NextPart_001_01C79DA2.B226B6E2 Content-Type: text/xml; name="SampleServerHelloFourPass.xml" Content-Transfer-Encoding: base64 Content-Description: SampleServerHelloFourPass.xml Content-Disposition: attachment; filename="SampleServerHelloFourPass.xml" PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4NCg0KPCEtLSBTYW1wbGUgU2Vy dmVySGVsbG9QRFUgKG9ubHkgdmFsaWQgZm9yIEZvdXItUGFzcyB2YXJpYW50IG9mIHByb3RvY29s KS4gIC0tPg0KPEtFWVBST1ZuczpTZXJ2ZXJIZWxsbyANCiAgICBTdGF0dXM9IlN1Y2Nlc3MiIFZl cnNpb249IjEuMCIgDQogICAgeG1sbnM6S0VZUFJPVm5zPSJ1cm46aWV0ZjpwYXJhbXM6eG1sOm5z OmtleXByb3Y6cHJvdG9jb2wiIA0KICAgIHhtbG5zOnBza2M9InVybjppZXRmOnBhcmFtczp4bWw6 bnM6a2V5cHJvdjpjb250YWluZXIiDQogICAgeG1sbnM6eHNpPSJodHRwOi8vd3d3LnczLm9yZy8y MDAxL1hNTFNjaGVtYS1pbnN0YW5jZSIgDQogICAgeHNpOnNjaGVtYUxvY2F0aW9uPSJ1cm46aWV0 ZjpwYXJhbXM6eG1sOnNjaGVtYTprZXlwcm92OnByb3RvY29sDQogICAgQzpcUHJvamVjdHNcU1RT Q0dcSUVURlxLRVlQUk9WXE1FUkdFRH4xXEtFWVBST34xLlhTRCINCiAgICB4bWxuczpkcz0iaHR0 cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyI+DQogICAgPEtleVR5cGU+aHR0cDovL3d3 dy5zb21ld2hlcmUuY29tL3NjaGVtYXMvMjAwNy8wNS9vdHAtYWxnI1NlY3VySUQtQUVTPC9LZXlU eXBlPg0KICAgIDxFbmNyeXB0aW9uQWxnb3JpdGhtPmh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDUv eG1sZW5jI3JzYV8xXzU8L0VuY3J5cHRpb25BbGdvcml0aG0+DQogICAgPE1hY0FsZ29yaXRobT5o dHRwOi8vd3d3LnNvbWV3aGVyZS5jb20vc2NoZW1hcy8yMDA1LzEyL2N0LWtpcCNjdC1raXAtcHJm LWFlczwvTWFjQWxnb3JpdGhtPg0KICAgIDxFbmNyeXB0aW9uS2V5Pg0KICAgICAgICA8ZHM6S2V5 TmFtZT5LRVktMTwvZHM6S2V5TmFtZT4NCiAgICA8L0VuY3J5cHRpb25LZXk+DQogICAgPFNlY3Jl dENvbnRhaW5lckZvcm1hdD51cm46aWV0ZjpwYXJhbXM6eG1sOnNjaGVtYTprZXlwcm92OmNvbnRh aW5lcjwvU2VjcmV0Q29udGFpbmVyRm9ybWF0Pg0KICAgIDxQYXlsb2FkPg0KICAgICAgICA8Tm9u Y2U+cXcyZXdhc2RlMzEyYXNkZXIzOTRqdz09PC9Ob25jZT4NCiAgICA8L1BheWxvYWQ+DQo8L0tF WVBST1ZuczpTZXJ2ZXJIZWxsbz4NCg0K ------_=_NextPart_001_01C79DA2.B226B6E2 Content-Type: application/octet-stream; name="KEYPROV Draft 05-23-2007.xsd" Content-Transfer-Encoding: base64 Content-Description: KEYPROV Draft 05-23-2007.xsd Content-Disposition: attachment; filename="KEYPROV Draft 05-23-2007.xsd" PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4NCjx4czpzY2hlbWEgeG1sbnM6 eHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hIiANCiAgICAgICAgICAgeG1sbnM6 ZHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyMiIA0KICAgICAgICAgICB4bWxu czpwc2tjPSJ1cm46aWV0ZjpwYXJhbXM6eG1sOm5zOmtleXByb3Y6Y29udGFpbmVyIiANCiAgICAg ICAgICAgeG1sbnM9InVybjppZXRmOnBhcmFtczp4bWw6bnM6a2V5cHJvdjpwcm90b2NvbCIgDQog ICAgICAgICAgIHRhcmdldE5hbWVzcGFjZT0idXJuOmlldGY6cGFyYW1zOnhtbDpuczprZXlwcm92 OnByb3RvY29sIj4NCiAgICA8eHM6aW1wb3J0IG5hbWVzcGFjZT0idXJuOmlldGY6cGFyYW1zOnht bDpuczprZXlwcm92OmNvbnRhaW5lciIgICAgICANCiAgICAgICAgICAgICAgIHNjaGVtYUxvY2F0 aW9uPSJvYXRoX3Bza2Nfc2NoZW1hX3YxLjIueHNkIi8+DQogICAgPHhzOmltcG9ydCBuYW1lc3Bh Y2U9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyMiIA0KICAgICAgICAgICAgICAg c2NoZW1hTG9jYXRpb249Imh0dHA6Ly93d3cudzMub3JnL1RSLzIwMDIvUkVDLXhtbGRzaWctY29y ZS0yMDAyMDIxMi94bWxkc2lnLWNvcmUtc2NoZW1hLnhzZCIvPg0KICAgIA0KICAgIDwhLS0gICAg ICAgICAgICAgICAgICAgICAgIC0tPg0KICAgIDwhLS0gQWJzdHJhY3QgdHlwZXMgLS0+DQogICAg PCEtLSAgICAgICAgICAgICAgICAgICAgICAgLS0+DQogICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9 IkFic3RyYWN0UmVxdWVzdFR5cGUiIGFic3RyYWN0PSJ0cnVlIj4NCiAgICAgICAgPHhzOmF0dHJp YnV0ZSBuYW1lPSJWZXJzaW9uIiB0eXBlPSJWZXJzaW9uVHlwZSIgdXNlPSJyZXF1aXJlZCIvPg0K ICAgIDwveHM6Y29tcGxleFR5cGU+DQogICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9IkFic3RyYWN0 UmVzcG9uc2VUeXBlIiBhYnN0cmFjdD0idHJ1ZSI+DQogICAgICAgIDx4czphdHRyaWJ1dGUgbmFt ZT0iVmVyc2lvbiIgdHlwZT0iVmVyc2lvblR5cGUiIHVzZT0icmVxdWlyZWQiLz4NCiAgICAgICAg PHhzOmF0dHJpYnV0ZSBuYW1lPSJTZXNzaW9uSUQiIHR5cGU9IklkZW50aWZpZXJUeXBlIi8+DQog ICAgICAgIDx4czphdHRyaWJ1dGUgbmFtZT0iU3RhdHVzIiB0eXBlPSJTdGF0dXNDb2RlIiB1c2U9 InJlcXVpcmVkIi8+DQogICAgPC94czpjb21wbGV4VHlwZT4NCiAgICA8eHM6Y29tcGxleFR5cGUg bmFtZT0iQWJzdHJhY3RFeHRlbnNpb25UeXBlIiBhYnN0cmFjdD0idHJ1ZSI+DQogICAgICAgIDx4 czphdHRyaWJ1dGUgbmFtZT0iQ3JpdGljYWwiIHR5cGU9InhzOmJvb2xlYW4iLz4NCiAgICA8L3hz OmNvbXBsZXhUeXBlPg0KICAgIDwhLS0gICAgICAgICAgICAgICAgICAgICAgIC0tPg0KICAgIDwh LS0gICAgQ29yZSB0eXBlcyAgIC0tPg0KICAgIDwhLS0gICAgICAgICAgICAgICAgICAgICAgIC0t Pg0KICAgIDx4czpzaW1wbGVUeXBlIG5hbWU9IlN0YXR1c0NvZGUiPg0KICAgICAgICA8eHM6cmVz dHJpY3Rpb24gYmFzZT0ieHM6c3RyaW5nIj4NCiAgICAgICAgICAgIDx4czplbnVtZXJhdGlvbiB2 YWx1ZT0iQ29udGludWUiLz4NCiAgICAgICAgICAgIDx4czplbnVtZXJhdGlvbiB2YWx1ZT0iU3Vj Y2VzcyIvPg0KICAgICAgICAgICAgPHhzOmVudW1lcmF0aW9uIHZhbHVlPSJBYm9ydCIvPg0KICAg ICAgICAgICAgPHhzOmVudW1lcmF0aW9uIHZhbHVlPSJBY2Nlc3NEZW5pZWQiLz4NCiAgICAgICAg ICAgIDx4czplbnVtZXJhdGlvbiB2YWx1ZT0iTWFsZm9ybWVkUmVxdWVzdCIvPg0KICAgICAgICAg ICAgPHhzOmVudW1lcmF0aW9uIHZhbHVlPSJVbmtub3duUmVxdWVzdCIvPg0KICAgICAgICAgICAg PHhzOmVudW1lcmF0aW9uIHZhbHVlPSJVbmtub3duQ3JpdGljYWxFeHRlbnNpb24iLz4NCiAgICAg ICAgICAgIDx4czplbnVtZXJhdGlvbiB2YWx1ZT0iVW5zdXBwb3J0ZWRWZXJzaW9uIi8+DQogICAg ICAgICAgICA8eHM6ZW51bWVyYXRpb24gdmFsdWU9Ik5vU3VwcG9ydGVkS2V5VHlwZXMiLz4NCiAg ICAgICAgICAgIDx4czplbnVtZXJhdGlvbiB2YWx1ZT0iTm9TdXBwb3J0ZWRFbmNyeXB0aW9uQWxn b3JpdGhtcyIvPg0KICAgICAgICAgICAgPHhzOmVudW1lcmF0aW9uIHZhbHVlPSJOb1N1cHBvcnRl ZE1BQ0FsZ29yaXRobXMiLz4NCiAgICAgICAgICAgIDx4czplbnVtZXJhdGlvbiB2YWx1ZT0iSW5p dGlhbGl6YXRpb25GYWlsZWQiLz4NCiAgICAgICAgPC94czpyZXN0cmljdGlvbj4NCiAgICA8L3hz OnNpbXBsZVR5cGU+DQogICAgPHhzOnNpbXBsZVR5cGUgbmFtZT0iVmVyc2lvblR5cGUiPg0KICAg ICAgICA8eHM6cmVzdHJpY3Rpb24gYmFzZT0ieHM6c3RyaW5nIj4NCiAgICAgICAgICAgIDx4czpw YXR0ZXJuIHZhbHVlPSJcZHsxLDJ9XC5cZHsxLDN9Ii8+DQogICAgICAgIDwveHM6cmVzdHJpY3Rp b24+DQogICAgPC94czpzaW1wbGVUeXBlPg0KICAgIDx4czpzaW1wbGVUeXBlIG5hbWU9IklkZW50 aWZpZXJUeXBlIj4NCiAgICAgICAgPHhzOnJlc3RyaWN0aW9uIGJhc2U9InhzOnN0cmluZyI+DQog ICAgICAgICAgICA8eHM6bWF4TGVuZ3RoIHZhbHVlPSIxMjgiLz4NCiAgICAgICAgPC94czpyZXN0 cmljdGlvbj4NCiAgICA8L3hzOnNpbXBsZVR5cGU+DQogICAgPCEtLSBBbGdvcml0aG1zIGFyZSBp ZGVudGlmaWVkIHRocm91Z2ggVVJJcyAtLT4NCiAgICA8eHM6Y29tcGxleFR5cGUgbmFtZT0iQWxn b3JpdGhtc1R5cGUiPg0KICAgICAgICA8eHM6c2VxdWVuY2UgbWF4T2NjdXJzPSJ1bmJvdW5kZWQi Pg0KICAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iQWxnb3JpdGhtIiB0eXBlPSJBbGdvcml0 aG1UeXBlIi8+DQogICAgICAgIDwveHM6c2VxdWVuY2U+DQogICAgPC94czpjb21wbGV4VHlwZT4N CiAgICA8IS0tIE5PVEU6IFJlbHkgb24gWE1MIERTSUcgZm9yIFVSSSdzIC0tPg0KICAgIDx4czpz aW1wbGVUeXBlIG5hbWU9IkFsZ29yaXRobVR5cGUiPg0KICAgICAgICA8eHM6cmVzdHJpY3Rpb24g YmFzZT0ieHM6YW55VVJJIi8+DQogICAgPC94czpzaW1wbGVUeXBlPg0KICAgIDx4czpzaW1wbGVU eXBlIG5hbWU9Ik5vbmNlVHlwZSI+DQogICAgICAgIDx4czpyZXN0cmljdGlvbiBiYXNlPSJ4czpi YXNlNjRCaW5hcnkiPg0KICAgICAgICAgICAgPHhzOmxlbmd0aCB2YWx1ZT0iMTYiLz4NCiAgICAg ICAgPC94czpyZXN0cmljdGlvbj4NCiAgICA8L3hzOnNpbXBsZVR5cGU+DQogICAgPHhzOmNvbXBs ZXhUeXBlIG5hbWU9Ik1hY1R5cGUiPg0KICAgICAgICA8eHM6c2ltcGxlQ29udGVudD4NCiAgICAg ICAgICAgIDx4czpleHRlbnNpb24gYmFzZT0ieHM6YmFzZTY0QmluYXJ5Ij4NCiAgICAgICAgICAg ICAgICA8eHM6YXR0cmlidXRlIG5hbWU9Ik1hY0FsZ29yaXRobSIgdHlwZT0ieHM6YW55VVJJIi8+ DQogICAgICAgICAgICA8L3hzOmV4dGVuc2lvbj4NCiAgICAgICAgPC94czpzaW1wbGVDb250ZW50 Pg0KICAgIDwveHM6Y29tcGxleFR5cGU+DQogICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9IlBheWxv YWRUeXBlIj4NCiAgICAgICAgPHhzOmNob2ljZT4NCiAgICAgICAgICAgIDx4czplbGVtZW50IG5h bWU9Ik5vbmNlIiB0eXBlPSJOb25jZVR5cGUiLz4NCiAgICAgICAgICAgIDx4czphbnkgbmFtZXNw YWNlPSIjI290aGVyIiBwcm9jZXNzQ29udGVudHM9InN0cmljdCIvPg0KICAgICAgICA8L3hzOmNo b2ljZT4NCiAgICA8L3hzOmNvbXBsZXhUeXBlPg0KICAgIDwhLS0gTk9URTogVGhlIGZvbGxvd2lu ZyB0eXBlIGlzIG5ldyAtLT4NCiAgICA8eHM6c2ltcGxlVHlwZSBuYW1lPSJBdXRoZW50aWNhdGlv bkNvZGVUeXBlIj4NCiAgICAgICAgPHhzOmFubm90YXRpb24+DQogICAgICAgICAgICA8eHM6ZG9j dW1lbnRhdGlvbiB4bWw6bGFuZz0iZW4iPg0KICAgICAgICAgICAgICAgIE1heGltdW0gbGVuZ3Ro IG9mIGFjdGl2YXRpb24gY29kZSByZXN0cmljdGVkIHRvIDIwIGJ5dGVzLg0KICAgICAgICAgICAg PC94czpkb2N1bWVudGF0aW9uPg0KICAgICAgICA8L3hzOmFubm90YXRpb24+DQogICAgICAgIDx4 czpyZXN0cmljdGlvbiBiYXNlPSJ4czpzdHJpbmciPg0KICAgICAgICAgICAgPHhzOm1heExlbmd0 aCB2YWx1ZT0iMjAiLz4NCiAgICAgICAgPC94czpyZXN0cmljdGlvbj4NCiAgICA8L3hzOnNpbXBs ZVR5cGU+DQogICAgPCEtLSBOT1RFOiBUaGUgZm9sbG93aW5nIHR5cGUgaXMgbmV3IC0tPg0KICAg IDx4czpjb21wbGV4VHlwZSBuYW1lPSJBdXRoZW50aWNhdGlvbkNvZGVEaWdlc3RUeXBlIj4NCiAg ICAgICAgPHhzOmFubm90YXRpb24+DQogICAgICAgICAgICA8eHM6ZG9jdW1lbnRhdGlvbiB4bWw6 bGFuZz0iZW4iPg0KICAgICAgICAgICAgICAgIEluY2x1ZGVzIGEgZGlnZXN0IG9mIHRoZSBhdXRo ZW50aWNhdGlvbiBjb2RlLg0KICAgICAgICAgICAgPC94czpkb2N1bWVudGF0aW9uPg0KICAgICAg ICA8L3hzOmFubm90YXRpb24+DQogICAgICAgIDx4czpzaW1wbGVDb250ZW50Pg0KICAgICAgICAg ICAgPHhzOmV4dGVuc2lvbiBiYXNlPSJ4czpiYXNlNjRCaW5hcnkiPg0KICAgICAgICAgICAgICAg IDx4czphdHRyaWJ1dGUgbmFtZT0iSGFzaEFsZ29yaXRobSIgdHlwZT0ieHM6YW55VVJJIiB1c2U9 InJlcXVpcmVkIi8+DQogICAgICAgICAgICA8L3hzOmV4dGVuc2lvbj4NCiAgICAgICAgPC94czpz aW1wbGVDb250ZW50Pg0KICAgIDwveHM6Y29tcGxleFR5cGU+DQogICAgPCEtLSBOT1RFOiBUaGUg Zm9sbG93aW5nIHR5cGUgaXMgbmV3IC0tPg0KICAgIDx4czpjb21wbGV4VHlwZSBuYW1lPSJBdXRo ZW50aWNhdGlvbkNvZGVNYWNUeXBlIj4NCiAgICAgICAgPHhzOmFubm90YXRpb24+DQogICAgICAg ICAgICA8eHM6ZG9jdW1lbnRhdGlvbiB4bWw6bGFuZz0iZW4iPg0KICAgICAgICAgICAgICAgIElu Y2x1ZGVzIGFuIEhNQUMgb2YgdGhlIGF1dGhlbnRpY2F0aW9uIGNvZGUgd2l0aCBub25jZSBhcyBr ZXkuDQogICAgICAgICAgICA8L3hzOmRvY3VtZW50YXRpb24+DQogICAgICAgIDwveHM6YW5ub3Rh dGlvbj4NCiAgICAgICAgPHhzOnNlcXVlbmNlPg0KICAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFt ZT0iRGF0YSIgdHlwZT0ieHM6YmFzZTY0QmluYXJ5Ii8+DQogICAgICAgICAgICA8eHM6ZWxlbWVu dCBuYW1lPSJOb25jZSIgdHlwZT0iTm9uY2VUeXBlIiBtaW5PY2N1cnM9IjAiLz4NCiAgICAgICAg PC94czpzZXF1ZW5jZT4NCiAgICAgICAgPHhzOmF0dHJpYnV0ZSBuYW1lPSJITUFDQWxnb3JpdGht IiB0eXBlPSJ4czphbnlVUkkiIHVzZT0icmVxdWlyZWQiLz4NCiAgICA8L3hzOmNvbXBsZXhUeXBl Pg0KICAgIDwhLS0gTk9URTogVGhlIGZvbGxvd2luZyB0eXBlIGlzIG1vZGlmaWVkIGZyb20gdGhl IG9yaWdpbmFsIHRoYXQgd2FzIHNwZWNpZmllZCBpbiBDVC1LSVAgRXh0ZW5zaW9ucyBJLUQgLS0+ DQogICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9IkF1dGhlbnRpY2F0aW9uRGF0YVR5cGUiPg0KICAg ICAgICA8eHM6YW5ub3RhdGlvbj4NCiAgICAgICAgICAgIDx4czpkb2N1bWVudGF0aW9uIHhtbDps YW5nPSJlbiI+DQogICAgICAgICAgICAgICAgVGhpcyBpcyB2YWxpZCBmb3IgQ2xpZW50SGVsbG8s IENsaWVudE5vbmNlLCBhbmQgU2VydmVyRmluaXNoZWQgUERVcy4gIFdoZW4gdXNlZCBpbiBjb25q dW5jdGlvbg0KICAgICAgICAgICAgICAgIHdpdGggQ2xpZW50SGVsbG8gb3IgQ2xpZW50Tm9uY2Ug UERVcywgaXQgY29udGFpbnM6IA0KICAgICAgICAgICAgICAgICogQSBDbGllbnRJRCBhbmQgQWN0 aXZhdGlvbkNvZGUgZm9yIGF1dGhlbnRpY2F0aW5nIHRoZSB1c2VyIG9mIHRoZSBwcm90b2NvbCwg b3INCiAgICAgICAgICAgICAgICAqIEFuIFguNTA5IENlcnRpZmljYXRlIGZvciBhdXRoZW50aWNh dGluZyB0aGUgZGV2aWNlLg0KICAgICAgICAgICAgICAgIFdoZW4gdXNlZCBpbiBjb25qdW5jdGlv biB3aXRoIHRoZSBTZXJ2ZXJGaW5pc2hlZCBQRFUsIGl0IGNvbnRhaW5zIGEgTUFDIGF1dGhlbnRp Y2F0aW5nIHRoZSBLRVlQUk9WIHNlcnZlciANCiAgICAgICAgICAgICAgICB0byB0aGUgdG9rZW4u DQogICAgICAgICAgICA8L3hzOmRvY3VtZW50YXRpb24+DQogICAgICAgIDwveHM6YW5ub3RhdGlv bj4NCiAgICAgICAgPHhzOnNlcXVlbmNlPg0KICAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0i Q2xpZW50SUQiIHR5cGU9IklkZW50aWZpZXJUeXBlIiBtaW5PY2N1cnM9IjAiLz4NCiAgICAgICAg ICAgIDx4czpjaG9pY2UgbWluT2NjdXJzPSIwIj4NCiAgICAgICAgICAgICAgICA8IS0tIE5PVEU6 IFJlbmFtZWQgQWN0aXZhdGlvbkNvZGUgdG8gQXV0aGVudGljYXRpb25Db2RlIHRvIHJlZmxlY3Qg VXNlciBBdXRoZW50aWNhdGlvbiBzY2VuYXJpby4NCgkJCQkJCQkJCSJBY3RpdmF0aW9uIiBwZXJ0 YWlucyB0byBhIGNvbXBsZXRlIFByb3Zpc2lvbmluZyBBcHBsaWNhdGlvbi4gLS0+DQogICAgICAg ICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iQXV0aGVudGljYXRpb25Db2RlIiB0eXBlPSJBdXRo ZW50aWNhdGlvbkNvZGVUeXBlIi8+DQogICAgICAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0i QXV0aGVudGljYXRpb25Db2RlRGlnZXN0IiB0eXBlPSJBdXRoZW50aWNhdGlvbkNvZGVEaWdlc3RU eXBlIi8+DQogICAgICAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iQXV0aGVudGljYXRpb25D b2RlTWFjIiB0eXBlPSJBdXRoZW50aWNhdGlvbkNvZGVNYWNUeXBlIi8+DQogICAgICAgICAgICAg ICAgPHhzOmVsZW1lbnQgbmFtZT0iQXV0aGVudGljYXRpb25DZXJ0aWZpY2F0ZSIgdHlwZT0iZHM6 S2V5SW5mb1R5cGUiLz4NCiAgICAgICAgICAgIDwveHM6Y2hvaWNlPg0KICAgICAgICA8L3hzOnNl cXVlbmNlPg0KICAgIDwveHM6Y29tcGxleFR5cGU+DQogICAgPCEtLSBOT1RFOiBUaGUgZm9sbG93 aW5nIHR5cGUgaXMgbmV3IC0tPg0KICAgIDx4czpjb21wbGV4VHlwZSBuYW1lPSJEZXZpY2VEYXRh VHlwZSI+DQogICAgICAgIDx4czpjaG9pY2U+DQogICAgICAgICAgICA8eHM6ZWxlbWVudCBuYW1l PSJEZXZpY2VJZCIgdHlwZT0icHNrYzpEZXZpY2VJZFR5cGUiLz4NCiAgICAgICAgICAgIDx4czph bnkgbmFtZXNwYWNlPSIjI290aGVyIiBwcm9jZXNzQ29udGVudHM9InN0cmljdCIvPg0KICAgICAg ICA8L3hzOmNob2ljZT4NCiAgICA8L3hzOmNvbXBsZXhUeXBlPg0KICAgIDwhLS0gTk9URTogVGhl IGZvbGxvd2luZyB0eXBlIGlzIG5ldyAtLT4NCiAgICA8eHM6Y29tcGxleFR5cGUgbmFtZT0iUHJv dG9jb2xWYXJpYW50c1R5cGUiPg0KICAgICAgICA8eHM6c2VxdWVuY2U+DQogICAgICAgICAgICA8 eHM6ZWxlbWVudCBuYW1lPSJUd29QYXNzIiB0eXBlPSJUd29QYXNzU3VwcG9ydFR5cGUiIG1pbk9j Y3Vycz0iMCIvPg0KICAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iRm91clBhc3MiIG1pbk9j Y3Vycz0iMCIvPg0KICAgICAgICA8L3hzOnNlcXVlbmNlPg0KICAgIDwveHM6Y29tcGxleFR5cGU+ DQogICAgPCEtLSBOT1RFOiBUaGUgZm9sbG93aW5nIHR5cGUgaXMgbmV3IC0tPg0KICAgIDx4czpj b21wbGV4VHlwZSBuYW1lPSJUd29QYXNzU3VwcG9ydFR5cGUiPg0KICAgICAgICA8eHM6YW5ub3Rh dGlvbj4NCiAgICAgICAgICAgIDx4czpkb2N1bWVudGF0aW9uIHhtbDpsYW5nPSJlbiI+DQogICAg ICAgICAgICAgICAgVGhpcyB0eXBlIGlzIG9ubHkgdmFsaWQgaW4gQ2xpZW50SGVsbG8gUERVcy4g IEl0IGluZm9ybXMgdGhlIHNlcnZlciBvZiB0aGUgY2xpZW50J3Mgc3VwcG9ydCBmb3IgdGhlIHR3 by1wYXNzIHZlcnNpb24gb2YNCiAgICAgICAgICAgICAgICBLRVlQUk9WLCBhbmQgY2FycmllcyBv cHRpb25hbCBwYXlsb2FkIGRhdGEgYXNzb2NpYXRlZCB3aXRoIGVhY2ggc3VwcG9ydCB0d28tcGFz cyBrZXkgaW5pdGlhbGl6YXRpb24gbWV0aG9kLg0KICAgICAgICAgICAgPC94czpkb2N1bWVudGF0 aW9uPg0KICAgICAgICA8L3hzOmFubm90YXRpb24+DQogICAgICAgIDx4czpzZXF1ZW5jZSBtYXhP Y2N1cnM9InVuYm91bmRlZCI+DQogICAgICAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJTdXBwb3J0 ZWRLZXlJbml0aWFsaXphdGlvbk1ldGhvZCIgdHlwZT0ieHM6YW55VVJJIi8+DQogICAgICAgICAg ICA8eHM6ZWxlbWVudCBuYW1lPSJQYXlsb2FkIiBtaW5PY2N1cnM9IjAiLz4NCiAgICAgICAgPC94 czpzZXF1ZW5jZT4NCiAgICA8L3hzOmNvbXBsZXhUeXBlPg0KICAgIDwhLS0gTk9URTogVGhlIGZv bGxvd2luZyB0eXBlIGlzIG5ldyAtLT4NCiAgICA8eHM6Y29tcGxleFR5cGUgbmFtZT0iU2VjcmV0 Q29udGFpbmVyc0Zvcm1hdFR5cGUiPg0KICAgICAgICA8eHM6c2VxdWVuY2UgbWF4T2NjdXJzPSJ1 bmJvdW5kZWQiPg0KICAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iU2VjcmV0Q29udGFpbmVy Rm9ybWF0IiB0eXBlPSJTZWNyZXRDb250YWluZXJGb3JtYXRUeXBlIi8+DQogICAgICAgIDwveHM6 c2VxdWVuY2U+DQogICAgPC94czpjb21wbGV4VHlwZT4NCiAgICA8IS0tIE5PVEU6IFRoZSBmb2xs b3dpbmcgdHlwZSBpcyBuZXcgLS0+DQogICAgPHhzOnNpbXBsZVR5cGUgbmFtZT0iU2VjcmV0Q29u dGFpbmVyRm9ybWF0VHlwZSI+DQogICAgICAgIDx4czpyZXN0cmljdGlvbiBiYXNlPSJ4czphbnlV UkkiLz4NCiAgICA8L3hzOnNpbXBsZVR5cGU+DQogICAgPCEtLSBOT1RFOiBUaGUgZm9sbG93aW5n IHR5cGUgaXMgbmV3IC0tPg0KICAgIDx4czpjb21wbGV4VHlwZSBuYW1lPSJTZWNyZXRDb250YWlu ZXJUeXBlIj4NCiAgICAgICAgPHhzOmNob2ljZT4NCiAgICAgICAgICAgIDwhLS0gTk9URTogVW5h YmxlIHRvIHJlbHkgb24gcHNrYyBuYW1lc3BhY2UgdW50aWwgdGhlIFBTS0MgeHNkIGlzIHB1Ymxp Y2x5IGF2YWlsYWJsZS4gLS0+DQogICAgICAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJTZWNyZXRD b250YWluZXIiIHR5cGU9InBza2M6U2VjcmV0Q29udGFpbmVyVHlwZSIvPg0KICAgICAgICAgICAg PHhzOmFueSBuYW1lc3BhY2U9IiMjb3RoZXIiIHByb2Nlc3NDb250ZW50cz0ic3RyaWN0Ii8+DQog ICAgICAgIDwveHM6Y2hvaWNlPg0KICAgIDwveHM6Y29tcGxleFR5cGU+DQogICAgPHhzOnNpbXBs ZVR5cGUgbmFtZT0iUGxhdGZvcm1UeXBlIj4NCiAgICAgICAgPHhzOnJlc3RyaWN0aW9uIGJhc2U9 InhzOnN0cmluZyI+DQogICAgICAgICAgICA8eHM6ZW51bWVyYXRpb24gdmFsdWU9IkhhcmR3YXJl Ii8+DQogICAgICAgICAgICA8eHM6ZW51bWVyYXRpb24gdmFsdWU9IlNvZnR3YXJlIi8+DQogICAg ICAgICAgICA8eHM6ZW51bWVyYXRpb24gdmFsdWU9IlVuc3BlY2lmaWVkIi8+DQogICAgICAgIDwv eHM6cmVzdHJpY3Rpb24+DQogICAgPC94czpzaW1wbGVUeXBlPg0KICAgIDwhLS0gTk9URTogVGhl IG5hbWUgb2YgdGhpcyB0eXBlIGFwcGVhcnMgdG9vIHNwZWNpZmljIHRvIEF1dGhlbnRpY2F0aW9u IFRva2Vucy4gQ29uc2lkZXIgcmV2aXNpbmcuLi4gLS0+DQogICAgPHhzOmNvbXBsZXhUeXBlIG5h bWU9IlRva2VuUGxhdGZvcm1JbmZvVHlwZSI+DQogICAgICAgIDx4czphbm5vdGF0aW9uPg0KICAg ICAgICAgICAgPHhzOmRvY3VtZW50YXRpb24geG1sOmxhbmc9ImVuIj4NCiAgICAgICAgICAgICAg ICBDYXJyaWVzIHRva2VuIHBsYXRmb3JtIGluZm9ybWF0aW9uIGhlbHBpbmcgdGhlIGNsaWVudCB0 byBzZWxlY3QgYSBzdWl0YWJsZSB0b2tlbi4NCiAgICAgICAgICAgIDwveHM6ZG9jdW1lbnRhdGlv bj4NCiAgICAgICAgPC94czphbm5vdGF0aW9uPg0KICAgICAgICA8eHM6YXR0cmlidXRlIG5hbWU9 IktleUxvY2F0aW9uIiB0eXBlPSJQbGF0Zm9ybVR5cGUiLz4NCiAgICAgICAgPHhzOmF0dHJpYnV0 ZSBuYW1lPSJBbGdvcml0aG1Mb2NhdGlvbiIgdHlwZT0iUGxhdGZvcm1UeXBlIi8+DQogICAgPC94 czpjb21wbGV4VHlwZT4NCiAgICA8eHM6Y29tcGxleFR5cGUgbmFtZT0iSW5pdGlhbGl6YXRpb25U cmlnZ2VyVHlwZSI+DQogICAgICAgIDx4czpzZXF1ZW5jZT4NCiAgICAgICAgICAgIDx4czplbGVt ZW50IG5hbWU9IkRldmljZURhdGEiIHR5cGU9IkRldmljZURhdGFUeXBlIiBtaW5PY2N1cnM9IjAi Lz4NCiAgICAgICAgICAgIDx4czplbGVtZW50IG5hbWU9IktleUlEIiB0eXBlPSJ4czpiYXNlNjRC aW5hcnkiIG1pbk9jY3Vycz0iMCIvPg0KICAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iVG9r ZW5QbGF0Zm9ybUluZm8iIHR5cGU9IlRva2VuUGxhdGZvcm1JbmZvVHlwZSIgbWluT2NjdXJzPSIw Ii8+DQogICAgICAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJUcmlnZ2VyTm9uY2UiIHR5cGU9Ik5v bmNlVHlwZSIvPg0KICAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iS0VZUFJPVi1VUkwiIHR5 cGU9InhzOmFueVVSSSIgbWluT2NjdXJzPSIwIi8+DQogICAgICAgICAgICA8eHM6YW55IG5hbWVz cGFjZT0iIyNvdGhlciIgcHJvY2Vzc0NvbnRlbnRzPSJzdHJpY3QiIG1pbk9jY3Vycz0iMCIvPg0K ICAgICAgICA8L3hzOnNlcXVlbmNlPg0KICAgIDwveHM6Y29tcGxleFR5cGU+DQogICAgPCEtLSAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLS0+DQogICAgPCEtLSBLRVlQUk9WIEV4 dGVuc2lvbnMgLS0+DQogICAgPCEtLSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg LS0+DQogICAgPCEtLSBHZW5lcmljIGV4dGVuc2lvbnMgKGZvciBmdXR1cmUgdXNlKSAtLT4NCiAg ICA8eHM6Y29tcGxleFR5cGUgbmFtZT0iRXh0ZW5zaW9uc1R5cGUiPg0KICAgICAgICA8eHM6c2Vx dWVuY2UgbWF4T2NjdXJzPSJ1bmJvdW5kZWQiPg0KICAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFt ZT0iRXh0ZW5zaW9uIiB0eXBlPSJBYnN0cmFjdEV4dGVuc2lvblR5cGUiLz4NCiAgICAgICAgPC94 czpzZXF1ZW5jZT4NCiAgICA8L3hzOmNvbXBsZXhUeXBlPg0KICAgIDx4czpjb21wbGV4VHlwZSBu YW1lPSJDbGllbnRJbmZvVHlwZSI+DQogICAgICAgIDx4czpjb21wbGV4Q29udGVudD4NCiAgICAg ICAgICAgIDx4czpleHRlbnNpb24gYmFzZT0iQWJzdHJhY3RFeHRlbnNpb25UeXBlIj4NCiAgICAg ICAgICAgICAgICA8eHM6c2VxdWVuY2U+DQogICAgICAgICAgICAgICAgICAgIDx4czplbGVtZW50 IG5hbWU9IkRhdGEiIHR5cGU9InhzOmJhc2U2NEJpbmFyeSIvPg0KICAgICAgICAgICAgICAgIDwv eHM6c2VxdWVuY2U+DQogICAgICAgICAgICA8L3hzOmV4dGVuc2lvbj4NCiAgICAgICAgPC94czpj b21wbGV4Q29udGVudD4NCiAgICA8L3hzOmNvbXBsZXhUeXBlPg0KICAgIDx4czpjb21wbGV4VHlw ZSBuYW1lPSJTZXJ2ZXJJbmZvVHlwZSI+DQogICAgICAgIDx4czpjb21wbGV4Q29udGVudD4NCiAg ICAgICAgICAgIDx4czpleHRlbnNpb24gYmFzZT0iQWJzdHJhY3RFeHRlbnNpb25UeXBlIj4NCiAg ICAgICAgICAgICAgICA8eHM6c2VxdWVuY2U+DQogICAgICAgICAgICAgICAgICAgIDx4czplbGVt ZW50IG5hbWU9IkRhdGEiIHR5cGU9InhzOmJhc2U2NEJpbmFyeSIvPg0KICAgICAgICAgICAgICAg IDwveHM6c2VxdWVuY2U+DQogICAgICAgICAgICA8L3hzOmV4dGVuc2lvbj4NCiAgICAgICAgPC94 czpjb21wbGV4Q29udGVudD4NCiAgICA8L3hzOmNvbXBsZXhUeXBlPg0KICAgIDx4czpjb21wbGV4 VHlwZSBuYW1lPSJLZXlJbml0aWFsaXphdGlvbkRhdGFUeXBlIj4NCiAgICAgICAgPHhzOmFubm90 YXRpb24+DQogICAgICAgICAgICA8eHM6ZG9jdW1lbnRhdGlvbiB4bWw6bGFuZz0iZW4iPg0KICAg ICAgICAgICAgICAgIFRoaXMgZXh0ZW5zaW9uIGlzIHZhbGlkIGluIFNlcnZlckZpbmlzaGVkIFBE VXMuICBJdCBjb250YWlucyBrZXkgaW5pdGlhbGl6YXRpb24gZGF0YSBhbmQgaXRzIHByZXNlbmNl IA0KICAgICAgICAgICAgICAgIHJlc3VsdHMgaW4gYSB0d28tcGFzcyAob3Igb25lLXBhc3MsIGlm IG5vIENsaWVudEhlbGxvIHdhcyBzZW50KSBLRVlQUk9WIGV4Y2hhbmdlLg0KICAgICAgICAgICAg PC94czpkb2N1bWVudGF0aW9uPg0KICAgICAgICA8L3hzOmFubm90YXRpb24+DQogICAgICAgIDx4 czpjb21wbGV4Q29udGVudD4NCiAgICAgICAgICAgIDx4czpleHRlbnNpb24gYmFzZT0iQWJzdHJh Y3RFeHRlbnNpb25UeXBlIj4NCiAgICAgICAgICAgICAgICA8eHM6c2VxdWVuY2U+DQogICAgICAg ICAgICAgICAgICAgIDx4czplbGVtZW50IG5hbWU9IktleUluaXRpYWxpemF0aW9uTWV0aG9kIiB0 eXBlPSJ4czphbnlVUkkiLz4NCiAgICAgICAgICAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0i UGF5bG9hZCIvPg0KICAgICAgICAgICAgICAgIDwveHM6c2VxdWVuY2U+DQogICAgICAgICAgICA8 L3hzOmV4dGVuc2lvbj4NCiAgICAgICAgPC94czpjb21wbGV4Q29udGVudD4NCiAgICA8L3hzOmNv bXBsZXhUeXBlPg0KICAgIDwhLS0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgLS0+ DQogICAgPCEtLSBLRVlQUk9WIE1lc3NhZ2VzIC0tPg0KICAgIDwhLS0gICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgLS0+DQogICAgPCEtLSBLRVlQUk9WIFRyaWdnZXIgLS0+DQogICAg PHhzOmVsZW1lbnQgbmFtZT0iS0VZUFJPVlRyaWdnZXIiIHR5cGU9IktFWVBST1ZUcmlnZ2VyVHlw ZSIvPg0KICAgIDx4czpjb21wbGV4VHlwZSBuYW1lPSJLRVlQUk9WVHJpZ2dlclR5cGUiPg0KICAg ICAgICA8eHM6YW5ub3RhdGlvbj4NCiAgICAgICAgICAgIDx4czpkb2N1bWVudGF0aW9uIHhtbDps YW5nPSJlbiI+DQogICAgICAgICAgICAgICAgTWVzc2FnZSB1c2VkIHRvIHRyaWdnZXIgdGhlIGRl dmljZSB0byBpbml0aWF0ZSBhIEtFWVBST1YgcHJvdG9jb2wgcnVuLg0KICAgICAgICAgICAgPC94 czpkb2N1bWVudGF0aW9uPg0KICAgICAgICA8L3hzOmFubm90YXRpb24+DQogICAgICAgIDx4czpz ZXF1ZW5jZT4NCiAgICAgICAgICAgIDx4czpjaG9pY2U+DQogICAgICAgICAgICAgICAgPHhzOmVs ZW1lbnQgbmFtZT0iSW5pdGlhbGl6YXRpb25UcmlnZ2VyIiB0eXBlPSJJbml0aWFsaXphdGlvblRy aWdnZXJUeXBlIi8+DQogICAgICAgICAgICAgICAgPHhzOmFueSBuYW1lc3BhY2U9IiMjb3RoZXIi IHByb2Nlc3NDb250ZW50cz0ic3RyaWN0Ii8+DQogICAgICAgICAgICA8L3hzOmNob2ljZT4NCiAg ICAgICAgPC94czpzZXF1ZW5jZT4NCiAgICAgICAgPHhzOmF0dHJpYnV0ZSBuYW1lPSJWZXJzaW9u IiB0eXBlPSJWZXJzaW9uVHlwZSIvPg0KICAgIDwveHM6Y29tcGxleFR5cGU+DQogICAgPCEtLSBD bGllbnRIZWxsb1BEVSAtLT4NCiAgICA8eHM6ZWxlbWVudCBuYW1lPSJDbGllbnRIZWxsbyIgdHlw ZT0iQ2xpZW50SGVsbG9QRFUiLz4NCiAgICA8eHM6Y29tcGxleFR5cGUgbmFtZT0iQ2xpZW50SGVs bG9QRFUiPg0KICAgICAgICA8eHM6YW5ub3RhdGlvbj4NCiAgICAgICAgICAgIDx4czpkb2N1bWVu dGF0aW9uIHhtbDpsYW5nPSJlbiI+DQogICAgICAgICAgICAgICAgTWVzc2FnZSBzZW50IGZyb20g S0VZUFJPViBjbGllbnQgdG8gS0VZUFJPViBzZXJ2ZXIgdG8gaW5pdGlhdGUgYSBLRVlQUk9WIHNl c3Npb24uDQogICAgICAgICAgICA8L3hzOmRvY3VtZW50YXRpb24+DQogICAgICAgIDwveHM6YW5u b3RhdGlvbj4NCiAgICAgICAgPHhzOmNvbXBsZXhDb250ZW50Pg0KICAgICAgICAgICAgPHhzOmV4 dGVuc2lvbiBiYXNlPSJBYnN0cmFjdFJlcXVlc3RUeXBlIj4NCiAgICAgICAgICAgICAgICA8eHM6 c2VxdWVuY2U+DQogICAgICAgICAgICAgICAgICAgIDx4czplbGVtZW50IG5hbWU9IkRldmljZURh dGEiIHR5cGU9IkRldmljZURhdGFUeXBlIiBtaW5PY2N1cnM9IjAiLz4NCiAgICAgICAgICAgICAg ICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iS2V5SUQiIHR5cGU9InhzOmJhc2U2NEJpbmFyeSIgbWlu T2NjdXJzPSIwIi8+DQogICAgICAgICAgICAgICAgICAgIDx4czplbGVtZW50IG5hbWU9IkNsaWVu dE5vbmNlIiB0eXBlPSJOb25jZVR5cGUiIG1pbk9jY3Vycz0iMCIvPg0KICAgICAgICAgICAgICAg ICAgICA8eHM6ZWxlbWVudCBuYW1lPSJUcmlnZ2VyTm9uY2UiIHR5cGU9Ik5vbmNlVHlwZSIgbWlu T2NjdXJzPSIwIi8+DQogICAgICAgICAgICAgICAgICAgIDx4czplbGVtZW50IG5hbWU9IlN1cHBv cnRlZEtleVR5cGVzIiB0eXBlPSJBbGdvcml0aG1zVHlwZSIvPg0KICAgICAgICAgICAgICAgICAg ICA8eHM6ZWxlbWVudCBuYW1lPSJTdXBwb3J0ZWRFbmNyeXB0aW9uQWxnb3JpdGhtcyIgdHlwZT0i QWxnb3JpdGhtc1R5cGUiLz4NCiAgICAgICAgICAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0i U3VwcG9ydGVkTUFDQWxnb3JpdGhtcyIgdHlwZT0iQWxnb3JpdGhtc1R5cGUiLz4NCiAgICAgICAg ICAgICAgICAgICAgPCEtLSBOT1RFOiBUaGUgZm9sbG93aW5nIGVsZW1lbnQgaXMgdXNlZCB0byBu ZWdvdGlhdGUgc3VwcG9ydCBmb3IgbnVtYmVyIG9mIHBhc3NlcyBtYWRlIGJ5IHRoZSBwcm90b2Nv bC4NCgkJCQkJCQkJCSBUaGUgZGVmYXVsdCBpcyBGb3VyUGFzcy4tLT4NCiAgICAgICAgICAgICAg ICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iU3VwcG9ydGVkUHJvdG9jb2xWYXJpYW50cyIgdHlwZT0i UHJvdG9jb2xWYXJpYW50c1R5cGUiIG1pbk9jY3Vycz0iMCIvPg0KICAgICAgICAgICAgICAgICAg ICA8IS0tIE5PVEU6IFRoZSBmb2xsb3dpbmcgZWxlbWVudCBpcyB1c2VkIHRvIG5lZ290aWF0ZSBr ZXkgY29udGFpbmVyIGZvcm1hdCB1c2FnZS4NCgkJCQkJCQkJCSBUaGUgZGVmYXVsdCBpcyBQU0tD Li0tPg0KICAgICAgICAgICAgICAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJTdXBwb3J0ZWRTZWNy ZXRDb250YWluZXJzIiB0eXBlPSJTZWNyZXRDb250YWluZXJzRm9ybWF0VHlwZSIgbWluT2NjdXJz PSIwIi8+DQogICAgICAgICAgICAgICAgICAgIDwhLS0gTk9URTogVGhlIGZvbGxvd2luZyBlbGVt ZW50IGlzIGZvciB1c2VyIGF1dGhlbnRpY2F0aW9uLi0tPg0KICAgICAgICAgICAgICAgICAgICA8 eHM6ZWxlbWVudCBuYW1lPSJBdXRoZW50aWNhdGlvbkRhdGEiIHR5cGU9IkF1dGhlbnRpY2F0aW9u RGF0YVR5cGUiIG1pbk9jY3Vycz0iMCIvPg0KICAgICAgICAgICAgICAgICAgICA8eHM6ZWxlbWVu dCBuYW1lPSJFeHRlbnNpb25zIiB0eXBlPSJFeHRlbnNpb25zVHlwZSIgbWluT2NjdXJzPSIwIi8+ DQogICAgICAgICAgICAgICAgPC94czpzZXF1ZW5jZT4NCiAgICAgICAgICAgIDwveHM6ZXh0ZW5z aW9uPg0KICAgICAgICA8L3hzOmNvbXBsZXhDb250ZW50Pg0KICAgIDwveHM6Y29tcGxleFR5cGU+ DQogICAgPCEtLSBTZXJ2ZXJIZWxsbyBQRFUgLS0+DQogICAgPHhzOmVsZW1lbnQgbmFtZT0iU2Vy dmVySGVsbG8iIHR5cGU9IlNlcnZlckhlbGxvUERVIi8+DQogICAgPHhzOmNvbXBsZXhUeXBlIG5h bWU9IlNlcnZlckhlbGxvUERVIj4NCiAgICAgICAgPHhzOmFubm90YXRpb24+DQogICAgICAgICAg ICA8eHM6ZG9jdW1lbnRhdGlvbiB4bWw6bGFuZz0iZW4iPg0KICAgICAgICAgICAgICAgIE1lc3Nh Z2Ugc2VudCBmcm9tIEtFWVBST1Ygc2VydmVyIHRvIEtFWVBST1YgY2xpZW50IGluIHJlc3BvbnNl IHRvIGEgcmVjZWl2ZWQgQ2xpZW50SGVsbG8gUERVLg0KICAgICAgICAgICAgPC94czpkb2N1bWVu dGF0aW9uPg0KICAgICAgICA8L3hzOmFubm90YXRpb24+DQogICAgICAgIDx4czpjb21wbGV4Q29u dGVudD4NCiAgICAgICAgICAgIDx4czpleHRlbnNpb24gYmFzZT0iQWJzdHJhY3RSZXNwb25zZVR5 cGUiPg0KICAgICAgICAgICAgICAgIDx4czpzZXF1ZW5jZSBtaW5PY2N1cnM9IjAiPg0KICAgICAg ICAgICAgICAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJLZXlUeXBlIiB0eXBlPSJBbGdvcml0aG1U eXBlIi8+DQogICAgICAgICAgICAgICAgICAgIDx4czplbGVtZW50IG5hbWU9IkVuY3J5cHRpb25B bGdvcml0aG0iIHR5cGU9IkFsZ29yaXRobVR5cGUiLz4NCiAgICAgICAgICAgICAgICAgICAgPHhz OmVsZW1lbnQgbmFtZT0iTWFjQWxnb3JpdGhtIiB0eXBlPSJBbGdvcml0aG1UeXBlIi8+DQogICAg ICAgICAgICAgICAgICAgIDx4czplbGVtZW50IG5hbWU9IkVuY3J5cHRpb25LZXkiIHR5cGU9ImRz OktleUluZm9UeXBlIi8+DQogICAgICAgICAgICAgICAgICAgIDwhLS0gTk9URTogVGhlIGZvbGxv d2luZyBlbGVtZW50IGlzIHVzZWQgYnkgdGhlIHNlcnZlciB0byBjb25maXJtIHVzZSBvZiBhIHNl Y3JldCBjb250YWluZXIgZm9ybWF0LiAtLT4NCiAgICAgICAgICAgICAgICAgICAgPHhzOmVsZW1l bnQgbmFtZT0iU2VjcmV0Q29udGFpbmVyRm9ybWF0IiB0eXBlPSJTZWNyZXRDb250YWluZXJGb3Jt YXRUeXBlIi8+DQogICAgICAgICAgICAgICAgICAgIDx4czplbGVtZW50IG5hbWU9IlBheWxvYWQi IHR5cGU9IlBheWxvYWRUeXBlIi8+DQogICAgICAgICAgICAgICAgICAgIDx4czplbGVtZW50IG5h bWU9IkV4dGVuc2lvbnMiIHR5cGU9IkV4dGVuc2lvbnNUeXBlIiBtaW5PY2N1cnM9IjAiLz4NCiAg ICAgICAgICAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iTWFjIiB0eXBlPSJNYWNUeXBlIiBt aW5PY2N1cnM9IjAiLz4NCiAgICAgICAgICAgICAgICA8L3hzOnNlcXVlbmNlPg0KICAgICAgICAg ICAgPC94czpleHRlbnNpb24+DQogICAgICAgIDwveHM6Y29tcGxleENvbnRlbnQ+DQogICAgPC94 czpjb21wbGV4VHlwZT4NCiAgICA8IS0tIENsaWVudE5vbmNlIFBEVSAtLT4NCiAgICA8eHM6ZWxl bWVudCBuYW1lPSJDbGllbnROb25jZSIgdHlwZT0iQ2xpZW50Tm9uY2VQRFUiLz4NCiAgICA8eHM6 Y29tcGxleFR5cGUgbmFtZT0iQ2xpZW50Tm9uY2VQRFUiPg0KICAgICAgICA8eHM6YW5ub3RhdGlv bj4NCiAgICAgICAgICAgIDx4czpkb2N1bWVudGF0aW9uIHhtbDpsYW5nPSJlbiI+DQogICAgICAg ICAgICAgICAgU2Vjb25kIG1lc3NhZ2Ugc2VudCBmcm9tIEtFWVBST1YgY2xpZW50IHRvIEtFWVBS T1Ygc2VydmVyIHRvIGNvbnZleSB0aGUgY2xpZW50J3MgY2hvc2VuIHNlY3JldC4NCiAgICAgICAg ICAgIDwveHM6ZG9jdW1lbnRhdGlvbj4NCiAgICAgICAgPC94czphbm5vdGF0aW9uPg0KICAgICAg ICA8eHM6Y29tcGxleENvbnRlbnQ+DQogICAgICAgICAgICA8eHM6ZXh0ZW5zaW9uIGJhc2U9IkFi c3RyYWN0UmVxdWVzdFR5cGUiPg0KICAgICAgICAgICAgICAgIDx4czpzZXF1ZW5jZT4NCiAgICAg ICAgICAgICAgICAgICAgPCEtLSBOT1RFOiBXaHkgbm90IHVzZSBQYXlsb2FkVHlwZSBoZXJlPyAt LT4NCiAgICAgICAgICAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iRW5jcnlwdGVkTm9uY2Ui IHR5cGU9InhzOmJhc2U2NEJpbmFyeSIvPg0KICAgICAgICAgICAgICAgICAgICA8eHM6ZWxlbWVu dCBuYW1lPSJBdXRoZW50aWNhdGlvbkRhdGEiIHR5cGU9IkF1dGhlbnRpY2F0aW9uRGF0YVR5cGUi IG1pbk9jY3Vycz0iMCIvPg0KICAgICAgICAgICAgICAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJF eHRlbnNpb25zIiB0eXBlPSJFeHRlbnNpb25zVHlwZSIgbWluT2NjdXJzPSIwIi8+DQogICAgICAg ICAgICAgICAgPC94czpzZXF1ZW5jZT4NCiAgICAgICAgICAgICAgICA8eHM6YXR0cmlidXRlIG5h bWU9IlNlc3Npb25JRCIgdHlwZT0iSWRlbnRpZmllclR5cGUiIHVzZT0icmVxdWlyZWQiLz4NCiAg ICAgICAgICAgIDwveHM6ZXh0ZW5zaW9uPg0KICAgICAgICA8L3hzOmNvbXBsZXhDb250ZW50Pg0K ICAgIDwveHM6Y29tcGxleFR5cGU+DQogICAgPCEtLSBTZXJ2ZXJGaW5pc2hlZCBQRFUgLS0+DQog ICAgPHhzOmVsZW1lbnQgbmFtZT0iU2VydmVyRmluaXNoZWQiIHR5cGU9IlNlcnZlckZpbmlzaGVk UERVIi8+DQogICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9IlNlcnZlckZpbmlzaGVkUERVIj4NCiAg ICAgICAgPHhzOmFubm90YXRpb24+DQogICAgICAgICAgICA8eHM6ZG9jdW1lbnRhdGlvbiB4bWw6 bGFuZz0iZW4iPg0KICAgICAgICAgICAgICAgIEZpbmFsIG1lc3NhZ2Ugc2VudCBmcm9tIEtFWVBS T1Ygc2VydmVyIHRvIEtFWVBST1YgY2xpZW50IGluIGEgS0VZUFJPViBzZXNzaW9uLg0KICAgICAg ICAgICAgPC94czpkb2N1bWVudGF0aW9uPg0KICAgICAgICA8L3hzOmFubm90YXRpb24+DQogICAg ICAgIDx4czpjb21wbGV4Q29udGVudD4NCiAgICAgICAgICAgIDx4czpleHRlbnNpb24gYmFzZT0i QWJzdHJhY3RSZXNwb25zZVR5cGUiPg0KICAgICAgICAgICAgICAgIDx4czpzZXF1ZW5jZSBtaW5P Y2N1cnM9IjAiPg0KICAgICAgICAgICAgICAgICAgICA8IS0tIE5PVEU6IFV0aWxpemUgU2VjcmV0 IENvbnRhaW5lciBGb3JtYXQgc3BlY2lmaWVkIGluIFNlcnZlckhlbGxvIFBEVSAtLT4NCiAgICAg ICAgICAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iU2VjcmV0Q29udGFpbmVyIiB0eXBlPSJT ZWNyZXRDb250YWluZXJUeXBlIi8+DQogICAgICAgICAgICAgICAgICAgIDx4czplbGVtZW50IG5h bWU9IkV4dGVuc2lvbnMiIHR5cGU9IkV4dGVuc2lvbnNUeXBlIiBtaW5PY2N1cnM9IjAiLz4NCiAg ICAgICAgICAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iTWFjIiB0eXBlPSJNYWNUeXBlIiBt aW5PY2N1cnM9IjAiLz4NCiAgICAgICAgICAgICAgICA8L3hzOnNlcXVlbmNlPg0KICAgICAgICAg ICAgPC94czpleHRlbnNpb24+DQogICAgICAgIDwveHM6Y29tcGxleENvbnRlbnQ+DQogICAgPC94 czpjb21wbGV4VHlwZT4NCjwveHM6c2NoZW1hPg0K ------_=_NextPart_001_01C79DA2.B226B6E2 Content-Type: text/xml; name="SampleClientHelloTwoPass.xml" Content-Transfer-Encoding: base64 Content-Description: SampleClientHelloTwoPass.xml Content-Disposition: attachment; filename="SampleClientHelloTwoPass.xml" PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4NCg0KPCEtLSBTYW1wbGUgQ2xp ZW50SGVsbG9QRFUgc2hvd2luZyBzdXBwb3J0IGZvciBUd28tUGFzcyB2ZXJzaW9uIG9mIHByb3Rv Y29sLiAgLS0+DQo8S0VZUFJPVm5zOkNsaWVudEhlbGxvIFZlcnNpb249IjEuMCIgDQogICAgICAg ICAgICAgICAgICAgICAgIHhtbG5zOktFWVBST1Zucz0idXJuOmlldGY6cGFyYW1zOnhtbDpuczpr ZXlwcm92OnByb3RvY29sIg0KICAgICAgICAgICAgICAgICAgICAgICB4bWxuczpwc2tjPSJ1cm46 aWV0ZjpwYXJhbXM6eG1sOm5zOmtleXByb3Y6Y29udGFpbmVyIg0KICAgICAgICAgICAgICAgICAg ICAgICB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNl IiANCiAgICAgICAgICAgICAgICAgICAgICAgeHNpOnNjaGVtYUxvY2F0aW9uPSJ1cm46aWV0Zjpw YXJhbXM6eG1sOnNjaGVtYTprZXlwcm92OnByb3RvY29sDQogICAgICAgICAgICAgICAgICAgICAg IEM6XFByb2plY3RzXFNUU0NHXElFVEZcS0VZUFJPVlxNRVJHRUR+MVxLRVlQUk9+MS5YU0QiDQog ICAgICAgICAgICAgICAgICAgICAgIHhtbG5zOmRzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5 L3htbGRzaWcjIj4NCiAgICA8RGV2aWNlRGF0YT4gIA0KICAgICAgICA8RGV2aWNlSWQgeG1sbnM9 InVybjppZXRmOnBhcmFtczp4bWw6bnM6a2V5cHJvdjpjb250YWluZXIiPg0KICAgICAgICAgICAg PE1hbnVmYWN0dXJlcj5NYW51ZmFjdHVyZXJBQkM8L01hbnVmYWN0dXJlcj4NCiAgICAgICAgICAg IDxTZXJpYWxObz5YTDAwMDAwMDAwMDEyMzQ8L1NlcmlhbE5vPg0KICAgICAgICAgICAgPE1vZGVs PlUyPC9Nb2RlbD4NCiAgICAgICAgPC9EZXZpY2VJZD4NCiAgICA8L0RldmljZURhdGE+CQ0KICAg IDxTdXBwb3J0ZWRLZXlUeXBlcz4NCiAgICAgICAgPEFsZ29yaXRobT5odHRwOi8vd3d3LnNvbWV3 aGVyZS5jb20vc2NoZW1hcy8yMDA3LzA1L290cC1hbGcjU2VjdXJJRC1BRVM8L0FsZ29yaXRobT4N CiAgICAgICAgPEFsZ29yaXRobT5odHRwOi8vd3d3LnNvbWV3aGVyZWVsc2UuY29tL3NjaGVtYXMv MjAwNy8wNS9vdHAtYWxnI0hPVFAtQUVTPC9BbGdvcml0aG0+DQogICAgPC9TdXBwb3J0ZWRLZXlU eXBlcz4NCiAgICA8U3VwcG9ydGVkRW5jcnlwdGlvbkFsZ29yaXRobXM+DQogICAgICAgIDxBbGdv cml0aG0+aHR0cDovL3d3dy53My5vcmcvMjAwMS8wNS94bWxlbmMjcnNhXzFfNTwvQWxnb3JpdGht Pg0KICAgICAgICA8QWxnb3JpdGhtPmh0dHA6Ly93d3cuc29tZXdoZXJlLmNvbS9zY2hlbWFzLzIw MDUvMTIvY3Qta2lwI2N0LWtpcC1wcmYtYWVzPC9BbGdvcml0aG0+DQogICAgPC9TdXBwb3J0ZWRF bmNyeXB0aW9uQWxnb3JpdGhtcz4NCiAgICA8U3VwcG9ydGVkTUFDQWxnb3JpdGhtcz4NCiAgICAg ICAgPEFsZ29yaXRobT5odHRwOi8vd3d3LnNvbWV3aGVyZS5jb20vc2NoZW1hcy8yMDA1LzEyL2N0 LWtpcCNjdC1raXAtcHJmLWFlczwvQWxnb3JpdGhtPg0KICAgIDwvU3VwcG9ydGVkTUFDQWxnb3Jp dGhtcz4NCiAgICA8U3VwcG9ydGVkUHJvdG9jb2xWYXJpYW50cz4NCiAgICAgICAgPFZhcmlhbnQ+ DQogICAgICAgICAgICA8VHdvUGFzcz4NCiAgICAgICAgICAgICAgICA8U3VwcG9ydGVkS2V5SW5p dGlhbGl6YXRpb25NZXRob2Q+DQogICAgICAgICAgICAgICAgICAgIGh0dHA6Ly93d3cuc29tZXdo ZXJlLmNvbS9jdC1raXAjd3JhcA0KICAgICAgICAgICAgICAgIDwvU3VwcG9ydGVkS2V5SW5pdGlh bGl6YXRpb25NZXRob2Q+DQogICAgICAgICAgICAgICAgPFBheWxvYWQgeHNpOnR5cGU9ImRzOktl eUluZm9UeXBlIj4NCiAgICAgICAgICAgICAgICAgICAgPGRzOktleU5hbWU+S2V5LTAwMT48L2Rz OktleU5hbWU+DQogICAgICAgICAgICAgICAgPC9QYXlsb2FkPg0KICAgICAgICAgICAgICAgIDxT dXBwb3J0ZWRLZXlJbml0aWFsaXphdGlvbk1ldGhvZD4NCiAgICAgICAgICAgICAgICAgICAgaHR0 cDovL3d3dy5zb21ld2hlcmUuY29tL2N0LWtpcCN0cmFuc3BvcnQNCiAgICAgICAgICAgICAgICA8 L1N1cHBvcnRlZEtleUluaXRpYWxpemF0aW9uTWV0aG9kPg0KICAgICAgICAgICAgICAgIDxQYXls b2FkIHhzaTp0eXBlPSJkczpLZXlJbmZvVHlwZSI+DQogICAgICAgICAgICAgICAgICAgIDxkczpY NTA5RGF0YT4NCiAgICAgICAgICAgICAgICAgICAgICAgIDxkczpYNTA5Q2VydGlmaWNhdGU+bWlp YjwvZHM6WDUwOUNlcnRpZmljYXRlPg0KICAgICAgICAgICAgICAgICAgICA8L2RzOlg1MDlEYXRh Pg0KICAgICAgICAgICAgICAgIDwvUGF5bG9hZD4NCiAgICAgICAgICAgIDwvVHdvUGFzcz4JCQkN CiAgICAgICAgPC9WYXJpYW50Pg0KICAgIDwvU3VwcG9ydGVkUHJvdG9jb2xWYXJpYW50cz4NCiAg ICA8U3VwcG9ydGVkU2VjcmV0Q29udGFpbmVycz4NCiAgICAgICAgPFNlY3JldENvbnRhaW5lckZv cm1hdD51cm46aWV0ZjpwYXJhbXM6eG1sOnNjaGVtYTprZXlwcm92OmNvbnRhaW5lcjwvU2VjcmV0 Q29udGFpbmVyRm9ybWF0Pg0KICAgIDwvU3VwcG9ydGVkU2VjcmV0Q29udGFpbmVycz4NCiAgICA8 QXV0aGVudGljYXRpb25EYXRhPg0KICAgICAgICA8QXV0aGVudGljYXRpb25Db2RlPjFlcmQzNTQ2 NTc2ODkxMDJhYmNkPC9BdXRoZW50aWNhdGlvbkNvZGU+DQogICAgPC9BdXRoZW50aWNhdGlvbkRh dGE+CQ0KPC9LRVlQUk9WbnM6Q2xpZW50SGVsbG8+DQo= ------_=_NextPart_001_01C79DA2.B226B6E2 Content-Type: text/xml; name="SampleClientNonceFourPass.xml" Content-Transfer-Encoding: base64 Content-Description: SampleClientNonceFourPass.xml Content-Disposition: attachment; filename="SampleClientNonceFourPass.xml" PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4NCg0KPCEtLSBTYW1wbGUgQ2xp ZW50Tm9uY2VQRFUgKG9ubHkgdmFsaWQgZm9yIEZvdXItUGFzcyB2YXJpYW50IG9mIHByb3RvY29s KS4gIC0tPg0KDQo8S0VZUFJPVm5zOkNsaWVudE5vbmNlIFNlc3Npb25JRD0iNDExNCIgVmVyc2lv bj0iMS4wIiB4bWxuczpLRVlQUk9WbnM9InVybjppZXRmOnBhcmFtczp4bWw6bnM6a2V5cHJvdjpw cm90b2NvbCIgeG1sbnM6eHNpPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYS1pbnN0 YW5jZSIgeHNpOnNjaGVtYUxvY2F0aW9uPSJ1cm46aWV0ZjpwYXJhbXM6eG1sOnNjaGVtYTprZXlw cm92OnByb3RvY29sIEM6XFByb2plY3RzXFNUU0NHXElFVEZcS0VZUFJPVlxNRVJHRUR+MVxLRVlQ Uk9+MS5YU0QiPg0KICAgIDxFbmNyeXB0ZWROb25jZT5WWEVOYytVbS85L052bVlLaUhETGFFcksw Z2s9PC9FbmNyeXB0ZWROb25jZT4NCiAgICA8QXV0aGVudGljYXRpb25EYXRhPg0KICAgICAgICA8 Q2xpZW50SUQ+MTIzNDU2Nzg8L0NsaWVudElEPg0KICAgICAgICA8QXV0aGVudGljYXRpb25Db2Rl TWFjPg0KICAgICAgICAgICAgPERhdGE+MWVyZDM1NDY1NzY4OTEwMmFiY2Q8L0RhdGE+DQogICAg ICAgIDwvQXV0aGVudGljYXRpb25Db2RlTWFjPg0KICAgIDwvQXV0aGVudGljYXRpb25EYXRhPgkN CjwvS0VZUFJPVm5zOkNsaWVudE5vbmNlPg0K ------_=_NextPart_001_01C79DA2.B226B6E2 Content-Type: text/xml; name="SampleServerFinishedHOTP.xml" Content-Transfer-Encoding: base64 Content-Description: SampleServerFinishedHOTP.xml Content-Disposition: attachment; filename="SampleServerFinishedHOTP.xml" PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPFNlcnZlckZpbmlzaGVkCiAg ICB4bWxucz0idXJuOmlldGY6cGFyYW1zOnhtbDpuczprZXlwcm92OnByb3RvY29sIgogICAgeG1s bnM6eHNpPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYS1pbnN0YW5jZSIKICAgIFZl cnNpb249IjEuMCIgU2Vzc2lvbklEPSI0MTE0IiBTdGF0dXM9IlN1Y2Nlc3MiPgogICAgPFNlY3Jl dENvbnRhaW5lciB2ZXJzaW9uPSIxLjAiCiAgICAgICAgICAgICAgICAgICAgIHhtbG5zPSJ1cm46 aWV0ZjpwYXJhbXM6eG1sOm5zOmtleXByb3Y6Y29udGFpbmVyIj4KICAgICAgICA8RW5jcnlwdGlv bk1ldGhvZCBhbGdvcml0aG09IlBCRS0zREVTMTY4LUNCQyI+CiAgICAgICAgICAgIDxQQkVTYWx0 Pnk2VHpja2VMUlF3PTwvUEJFU2FsdD4KICAgICAgICAgICAgPFBCRUl0ZXJhdGlvbkNvdW50Pjk5 OTwvUEJFSXRlcmF0aW9uQ291bnQ+CiAgICAgICAgPC9FbmNyeXB0aW9uTWV0aG9kPgogICAgICAg IDxEaWdlc3RNZXRob2QgYWxnb3JpdGhtPSJITUFDLVNIQTEiLz4KICAgICAgICA8RGV2aWNlPgog ICAgICAgICAgICA8U2VjcmV0IFNlY3JldEFsZ29yaXRobT0iSE9UUCIgU2VjcmV0SWQ9IlNEVTMx MjM0NTY3OCI+CiAgICAgICAgICAgICAgICA8SXNzdWVyPkNyZWRlbnRpYWxJc3N1ZXI8L0lzc3Vl cj4KICAgICAgICAgICAgICAgIDxVc2FnZSBvdHA9InRydWUiPgogICAgICAgICAgICAgICAgICAg IDxSZXNwb25zZUZvcm1hdCBmb3JtYXQ9IkRFQ0lNQUwiIGxlbmd0aD0iNiIvPgogICAgICAgICAg ICAgICAgPC9Vc2FnZT4KICAgICAgICAgICAgICAgIDxGcmllbmRseU5hbWU+TXlGaXJzdFRva2Vu PC9GcmllbmRseU5hbWU+ICAgICAgICAKICAgICAgICAgICAgICAgIDxEYXRhIE5hbWU9IlNFQ1JF VCI+CiAgICAgICAgICAgICAgICAgICAgPFZhbHVlPjdKSFV5cDNhek9rcUpFTlNzaDZiMnZ4WHp3 R0JZeXB6SnhFcitpa1FBYTIyOUtWL0JnWmhHQT09PC9WYWx1ZT4KICAgICAgICAgICAgICAgICAg ICA8VmFsdWVEaWdlc3Q+V2xkalRIWndSbTlZVGtoQlJ5dHNlRE1yVW5jPTwvVmFsdWVEaWdlc3Q+ CiAgICAgICAgICAgICAgICA8L0RhdGE+CiAgICAgICAgICAgICAgICA8RGF0YSBOYW1lPSJDT1VO VEVSIj4KICAgICAgICAgICAgICAgICAgICA8VmFsdWU+MTwvVmFsdWU+CiAgICAgICAgICAgICAg ICA8L0RhdGE+CiAgICAgICAgICAgICAgICA8RXhwaXJ5PjEwLzMwLzIwMDk8L0V4cGlyeT4KICAg ICAgICAgICAgPC9TZWNyZXQ+CiAgICAgICAgPC9EZXZpY2U+CiAgICA8L1NlY3JldENvbnRhaW5l cj4KICAgIDxNYWM+bWlpZGZhc2RlMzEyYXNkZXIzOTRqdz09PC9NYWM+CjwvU2VydmVyRmluaXNo ZWQ+Cg== ------_=_NextPart_001_01C79DA2.B226B6E2 Content-Type: text/xml; name="SampleServerFinishedSecurID.xml" Content-Transfer-Encoding: base64 Content-Description: SampleServerFinishedSecurID.xml Content-Disposition: attachment; filename="SampleServerFinishedSecurID.xml" PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPFNlcnZlckZpbmlzaGVkCiAg ICB4bWxucz0idXJuOmlldGY6cGFyYW1zOnhtbDpuczprZXlwcm92OnByb3RvY29sIgogICAgeG1s bnM6eHNpPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYS1pbnN0YW5jZSIKICAgIFZl cnNpb249IjEuMCIgU2Vzc2lvbklEPSI0MTE0IiBTdGF0dXM9IlN1Y2Nlc3MiPgogICAgPFNlY3Jl dENvbnRhaW5lciB2ZXJzaW9uPSIxLjAiCiAgICAgICAgICAgICAgICAgICAgIHhtbG5zPSJ1cm46 aWV0ZjpwYXJhbXM6eG1sOm5zOmtleXByb3Y6Y29udGFpbmVyIj4KICAgICAgICA8RW5jcnlwdGlv bk1ldGhvZCBhbGdvcml0aG09IlBCRS0zREVTMTY4LUNCQyI+CiAgICAgICAgICAgIDxQQkVTYWx0 Pnk2VHpja2VMUlF3PTwvUEJFU2FsdD4KICAgICAgICAgICAgPFBCRUl0ZXJhdGlvbkNvdW50Pjk5 OTwvUEJFSXRlcmF0aW9uQ291bnQ+CiAgICAgICAgPC9FbmNyeXB0aW9uTWV0aG9kPgogICAgICAg IDxEaWdlc3RNZXRob2QgYWxnb3JpdGhtPSJITUFDLVNIQTEiLz4KICAgICAgICA8RGV2aWNlPgog ICAgICAgICAgICA8U2VjcmV0IFNlY3JldEFsZ29yaXRobT0ib3RoZXIiIFNlY3JldEFsZ29yaXRo bS1leHQ9IlNlY3VySUQiIFNlY3JldElkPSJTRUlEMTIzNDU2NzgiPgogICAgICAgICAgICAgICAg PElzc3Vlcj5DcmVkZW50aWFsSXNzdWVyPC9Jc3N1ZXI+CiAgICAgICAgICAgICAgICA8RnJpZW5k bHlOYW1lPk15Rmlyc3RUb2tlbjwvRnJpZW5kbHlOYW1lPiAgICAgICAgCiAgICAgICAgICAgICAg ICA8RGF0YSBOYW1lPSJTRUNSRVQiPgogICAgICAgICAgICAgICAgICAgIDxWYWx1ZT43SkhVeXAz YXpPa3FKRU5Tc2g2YjJ2eFh6d0dCWXlwekp4RXIraWtRQWEyMjlLVi9CZ1poR0E9PTwvVmFsdWU+ CiAgICAgICAgICAgICAgICAgICAgPFZhbHVlRGlnZXN0PldsZGpUSFp3Um05WVRraEJSeXRzZURN clVuYz08L1ZhbHVlRGlnZXN0PgogICAgICAgICAgICAgICAgPC9EYXRhPgogICAgICAgICAgICAg ICAgPCEtLSBTZWN1cklEIHNwZWNpZmljIE9UUCBjb25maWd1cmF0aW9uIGRhdGEgLS0+CiAgICAg ICAgICAgICAgICA8RGF0YSBOYW1lPSJPVFBGb3JtYXQiPgogICAgICAgICAgICAgICAgICAgIDxW YWx1ZT5EZWNpbWFsPC9WYWx1ZT4KICAgICAgICAgICAgICAgIDwvRGF0YT4KICAgICAgICAgICAg ICAgIDxEYXRhIE5hbWU9Ik9UUExlbmd0aCI+CiAgICAgICAgICAgICAgICAgICAgPFZhbHVlPjY8 L1ZhbHVlPgogICAgICAgICAgICAgICAgPC9EYXRhPgogICAgICAgICAgICAgICAgPERhdGEgTmFt ZT0iT1RQTW9kZSI+CiAgICAgICAgICAgICAgICAgICAgPFZhbHVlPlRpbWU8L1ZhbHVlPgogICAg ICAgICAgICAgICAgPC9EYXRhPgogICAgICAgICAgICAgICAgPCEtLSAKICAgICAgICAgICAgICAg ICAgICBBbHRlcm5hdGl2ZSBhcHByb2FjaCBpbiBQU0tDIHRvIGFsbG93IGFueSBjb25maWd1cmF0 aW9uIGV4dGVuc2lvbiB0eXBlIGFzIGZvbGxvd3MuCiAgICAgICAgICAgICAgICA8Q29uZmlndXJh dGlvbkRhdGEgeHNpOnR5cGU9IlNlY3VySURPVFBLZXlDb25maWd1cmF0aW9uRGF0YVR5cGUiPgog ICAgICAgICAgICAgICAgICAgIDxPVFBGb3JtYXQ+RGVjaW1hbDwvT1RQRm9ybWF0PgogICAgICAg ICAgICAgICAgICAgIDxPVFBMZW5ndGg+NjwvT1RQTGVuZ3RoPgogICAgICAgICAgICAgICAgICAg IDxPVFBNb2RlPjxUaW1lLz48L09UUE1vZGU+CiAgICAgICAgICAgICAgICA8L0NvbmZpZ3VyYXRp b25EYXRhPgogICAgICAgICAgICAgICAgPC0tPgogICAgICAgICAgICAgICAgPEV4cGlyeT4xMC8z MC8yMDA5PC9FeHBpcnk+CiAgICAgICAgICAgIDwvU2VjcmV0PgogICAgICAgIDwvRGV2aWNlPgog ICAgPC9TZWNyZXRDb250YWluZXI+CiAgICA8TWFjPm1paWRmYXNkZTMxMmFzZGVyMzk0anc9PTwv TWFjPgo8L1NlcnZlckZpbmlzaGVkPgo= ------_=_NextPart_001_01C79DA2.B226B6E2 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov ------_=_NextPart_001_01C79DA2.B226B6E2--