From keyprov-bounces@ietf.org Tue Jul 03 14:08:52 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I5mns-0003k4-5j; Tue, 03 Jul 2007 14:08:44 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I5mnr-0003eo-Bz for keyprov@ietf.org; Tue, 03 Jul 2007 14:08:43 -0400 Received: from gateway1.rsasecurity.com ([216.162.240.250]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1I5mnl-00046u-0D for keyprov@ietf.org; Tue, 03 Jul 2007 14:08:43 -0400 Received: from hyperion.rsasecurity.com by gateway1.rsasecurity.com via smtpd (for stiedprmail1.ietf.ORG [156.154.16.150]) with SMTP; Tue, 3 Jul 2007 14:08:36 -0400 Received: from sdtihq24.securid.com (sdtihq24.na.rsa.net [10.100.8.152]) by hyperion.na.rsa.net (MOS 3.8.3-GA) with ESMTP id DEV21899; Tue, 3 Jul 2007 14:15:47 +0500 (GMT-5) Received: from rsana-ex-hq1.NA.RSA.NET (rsana-ex-hq1.na.rsa.net [10.100.8.50]) by sdtihq24.securid.com (8.12.10/8.12.9) with ESMTP id l63I8VX1003437; Tue, 3 Jul 2007 14:08:31 -0400 (EDT) X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Subject: RE: [KEYPROV] Some comments on Section 1 of DSKPP draft Date: Tue, 3 Jul 2007 14:08:30 -0400 Message-ID: <017630AA6DF2DF4EBC1DD4454F8EE2970B68C744@rsana-ex-hq1.NA.RSA.NET> In-Reply-To: Thread-Topic: [KEYPROV] Some comments on Section 1 of DSKPP draft thread-index: AcevhXm9wKs+A0nSR0it/oucCNIWYAB8pWWAAuEe8TA= References: <4672EBD5.8070000@gmx.net> From: "Doherty, Andrea" To: "Meyer, Ulrike" , X-Junkmail-Whitelist: YES (by domain whitelist at hyperion.na.rsa.net) X-Spam-Score: 0.1 (/) X-Scan-Signature: 848ed35f2a4fc0638fa89629cb640f48 Cc: X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Uli, Thank you for your comments. Please see my responses below. Andrea=20 -----Original Message----- From: Meyer, Ulrike [mailto:ulrike.meyer@nsn.com]=20 Sent: Monday, June 18, 2007 3:37 AM To: keyprov@ietf.org Subject: [KEYPROV] Some comments on Section 1 of DSKPP draft Hi Andrea, Pei, all, here are some review comments on Section 1 of the DSKPP draft. Please = excuse, if I bring up anything that has already been discussed on the list before. * Page 5 (Scope): what is meant by "without exposing generated, secret material to any other entities than the server and the cryptographic token itself" mean? In particular: doesn't the user at least in some application scenarios have access to the content of the token? And = doesn't in use case 1.3.4 the issuer get hold of the provisioned key as well? What is meant is that the secret material is protected during = provisioning, i.e., A. 4-pass: The secret is not transferred between the server and the = token; rather, it is generated on each side via key agreement. B. 2-pass, 1-pass: The secret is transferred between the server and the = token; however, it is encrypted and therefore not "exposed" to the = server or token. =20 The quote that you referred to does apply more to 4-pass in that with = 4-pass one can definitely state the secret is not (and cannot be) = exposed since it is not transferred. With respect to application scenarios that have access to the content of = the token, these are out-of-scope for the protocol, which is specific to = provisioning. With respect to use case 1.3.4, it is the third party provisioning = service that generates and provisions the key using the protocol. If = the issuer acquires symmetric keys on behalf of its users, then it is = acting as a client of the protocol. To then push the key to the token = would mean that the issuer is the manufacturer of the token, or would = become the server in the keyprov protocol (1- or 2-pass). Perhaps Ming = would have more to say on this scenario? * Page 5 (Scope): The term "connected cryptographic tokens" should be explained already here, e.g. by "remotely accessible". "Connected could be misinterpreted as interconnected tokens Good point. * Page 6 (Background, second paragraph, last sentence): "This is the = strongest approach to symmetric key provisioning, as the key is not transported between = systems, and is therefore not vulnerable to man-in-the-middle attacks". Could be = missunderstood, as man-in-the-middle attacks can not only possible if a key itself is transported between systems, = but also is any input (such as nonces, DH-parameters etc.) to a key = derivation function are transported between systems. You are correct. It is a stretch to imply the protocol is not = vulnerable to MITM attacks. * Page 6 (Background): "Direct" communication should be explained more precisely. In addition, it is a little unclear from the text which = scenarios (both, the direct and the indirect one or only one of them??) are addressed by DSKPP Yes, this should be cleaned up. * Page 6 (Use case): An example for why a client would want to be provisioned a symmetric key would be nice Agree; will add. * Page 6 (Use cases 1.3.2 and 1.3.3) these use cases sound more like requirements then like use cases. Yes, esp. with the use of the RFC2119 terminology ("MAY", "MAY NOT", = etc). Hannes pointed out that this language does not belong until = Section 3 and beyond. This will be fixed for the -01 submission. * Page 7 (Use case 1.3.4) In this use case: which entities are to end up with the newly generated symmetric key? The user (in form of the token) and the issuer? If yes, how does the issuer obtain the key from the provisioning server? Is this covered by the protocol or not? More clarification is needed in this section. For answers to specific = questions, see response to first comment above. * Page 8 (2nd last paragraph before 1.3.8): Sentence incomplete Ok, will fix. * Page 8 (Section 1.3.8) Last sentence does not make sense Agree; will clean up. * Page 8 (Section 1.4.8): It highly depends on the application if SMS can provide an exceptable level of protection for the transport of secret keys. Good point that will be added to the section. * Page 9 (R1): What is meant by different key types? Differnt lengths? Key types here refer to different types of shared secrets (e.g., one = that supports signatures, one that supports encryption, one that support = OTP generation/verification). A different length could be associated = with each key type but that is not what is being referred to in this = section. * Page 9 (R2 and R3): what is the difference between re-generated and mutually generated keys?? R2 is derived from use case 1.3.1; "re-generated" is a typo that should = read "pre-generated". "mutually generated keys" refers to key = generation using the four-pass protocol, wherein the keys are generated = on the client and server, but not transmitted in between. = "pre-generated" keys correspond with 1-pass or 2-pass protocol variants = since these are capable of handling transport of pre-existing (or = legacy) keys). * Page 9 (R6) What is the difference between cryptographic and security capabilities? This section needs cleanup. The use of "security capabilities" does not = make sense here. * Page 9 (R7) why is this requirement not a MUST It should be; actually all of the "Mandatory Requirements" in this = section are MUST's. * Page 11: The document structure section seems a little superflouse as = the same information can be gathered from the table of content Agree; will remove. Best regards, Uli Dr. Ulrike Meyer =20 Nokia Siemens Networks GmbH & Co. KG RTP NT NAS Otto-Hahn-Ring 6 D-81730 Muenchen=20 Phone: +49 89 636 41496 Fax: +49 89 636 48000 ulrike.meyer@nsn.com =20 Nokia Siemens Networks GmbH & Co. KG - Sitz der Gesellschaft/ Registered = office: M=FCnchen (Munich) - Registergericht /Commercial register: = M=FCnchen (Munich), HRA 88537 - WEEE-Reg.-No. DE 52984304. Pers=F6nlich = haftende Gesellschafterin /General Partner: Nokia Siemens Networks = Management GmbH - Gesch=E4ftsf=FChrer /Board of Directors: Christian = Unterberger, Joachim Malterer, Roland Meinzer - Sitz der Gesellschaft / = Registered office: M=FCnchen (Munich) - Registergericht /Commercial = register: M=FCnchen (Munich), HRB 163416 ------=20 _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Tue Jul 03 17:49:15 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I5qFF-0001zb-IJ; Tue, 03 Jul 2007 17:49:13 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I5qFE-0001zK-2n for keyprov@ietf.org; Tue, 03 Jul 2007 17:49:12 -0400 Received: from gateway1.rsasecurity.com ([216.162.240.250]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1I5qF8-0002lb-27 for keyprov@ietf.org; Tue, 03 Jul 2007 17:49:12 -0400 Received: from hyperion.rsasecurity.com by gateway1.rsasecurity.com via smtpd (for ietf-mx.ietf.ORG [156.154.16.150]) with SMTP; Tue, 3 Jul 2007 17:49:06 -0400 Received: from sdtihq24.securid.com (sdtihq24.na.rsa.net [10.100.8.152]) by hyperion.na.rsa.net (MOS 3.8.3-GA) with ESMTP id DEV39583; Tue, 3 Jul 2007 17:56:21 +0500 (GMT-5) Received: from rsana-ex-hq1.NA.RSA.NET (rsana-ex-hq1.na.rsa.net [10.100.8.50]) by sdtihq24.securid.com (8.12.10/8.12.9) with ESMTP id l63Ln5X1023322; Tue, 3 Jul 2007 17:49:05 -0400 (EDT) X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: [KEYPROV] RE: Some comments about DSKPP draft Date: Tue, 3 Jul 2007 17:49:04 -0400 Message-ID: <017630AA6DF2DF4EBC1DD4454F8EE2970B68C9B8@rsana-ex-hq1.NA.RSA.NET> In-Reply-To: <017630AA6DF2DF4EBC1DD4454F8EE2970B1FA5BA@rsana-ex-hq1.NA.RSA.NET> Thread-Topic: [KEYPROV] RE: Some comments about DSKPP draft thread-index: AcepQla0LQA5elbpRq2+WNqxbpUBdQEuMYNAAClLMPAAAir2EAACcVtQA7vwolA= References: <017630AA6DF2DF4EBC1DD4454F8EE2970B1FA429@rsana-ex-hq1.NA.RSA.NET><3E5A2F1AD44F5E49A74F79AB47C0C0C934E177@mou1wnexmb10.vcorp.ad.vrsn.com> <017630AA6DF2DF4EBC1DD4454F8EE2970B1FA5BA@rsana-ex-hq1.NA.RSA.NET> From: "Doherty, Andrea" To: "Pei, Mingliang" X-Junkmail-Whitelist: YES (by domain whitelist at hyperion.na.rsa.net) X-Spam-Score: 0.1 (/) X-Scan-Signature: 8068004c042dabd7f1301bcc80e039df Cc: keyprov@ietf.org X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Ming, Please find my responses below. Andrea -----Original Message----- From: Pei, Mingliang [mailto:mpei@verisign.com]=20 Sent: Thursday, June 14, 2007 1:39 PM To: Doherty, Andrea Cc: Hallam-Baker, Phillip; KEYPROV Roundup Issue Tracker; Salah Machani Subject: Some comments about DSKPP draft Hi Andrea, Thank you for the DSKPP draft. It is 94 pages; you have put a huge effort there.=20 Here are a few comments from my initial read of DSKPP while I am still reviewing some more sections. 1. Section 3.3:=20 Make it more explicit that OTP secret is derived from client and server mutual contribution,=20 and OTP secret is purely server's reply in two pass case. This was said in the beginning of the doc, but somehow didn't appear very obvious when 2 pass is described. (adoherty)Agree, will do. Suggest to add a section 3.3.4 or 3.4 to provide a best practice section about when each=20 one should be used. (adoherty)Yes, adding a section something like this and/or a table mapping use cases to protocol variants should clear up a lot of confusion. 2. Section 3.7: it looks like that it implies to all passes. We should label it under 4 pass section. Suggest to have a section particular about 4 pass and client participated key=20 derivation there. This section can then have current 3.6 - 3.8 as sub-sections=20 which applies only to 4 pass case. (adoherty)Actually, Sections 3.6 - 3.8 pertain to four and two pass. For two-pass, consider Use Case 1.3.2, wherein the key is generated locally (by the DSKPP server) in real-time. To accomplish this, the client nonce is passed in the ClientHelloPDU (refer to the ClientNonce optional parameter specified in Section 3.11.3). (adoherty)Note that these sections could also apply to one pass if the DSKPP server has a priori knowledge of the client nonce. (adoherty)I'll provide more words to this effect in Section 3.7. 3. Key confirmation section 3.9: the SecretContainer will have a MAC that=20 confirms key correctness upon decryption. The additional confirmation is redundant, right?=20 (adoherty)I don't think so, at least not until the MAC (called "ValueDigest"?) in the PSKC is better defined. In particular, an advantage of the key confirmation in Section 3.9.2 is the MAC is computed using a client component, that could only be known by the server that participated in the exchange. Do you feel that we can leave out the key confirmation in two pass case? (adoherty)No, not at this point. At least, we need to merge both. This seems to be an issue that we can add to the=20 Issue Tracker. 4. Section 3.9.2: Our sample ClientHello message doesn't give a nonce R, which is considered the main scenario for 2 pass. (adoherty)Yes, you are correct. This will be corrected. 5. HTTP hearder issue as we have described in Issue Tracker (adoherty)During our KEYPROV concall today, Hannes mentioned that he spoke with the AD about the HTTP binding issue, which turns out to get raised a lot in other groups as well. Hannes suggested we leave this section in there as is for now, and after resubmission (as -01) we'll address this with folks in the IETF community who are addressing this issue; this way we can ensure it is handled in a consistent manner with other groups in the IETF. 6. Unsupported is used in PSKC container of Sample ServerFinished for two pass: is used in Value element of a Secret in PSKC SecretContainer, which isn't PSKC spec. = 7JHUyp3azOkqJENSsh6b2vxXzwGBYypzJxEr+ikQAa229KV/BgZhGA=3D=3D While the value can be any thing, include further XML data, this may have an inter-op issue about=20 what value to expect for a secret. In our PSKC example, we assume the value is encrypted value with the key specified in top of the SecretContainer. (adoherty)In the PSKC example, it isn't obvious that the secret is encrypted, unless the digest is present (?). In any event, I will update the ServerFinished sample to be consistent with the PSKC spec. Thank you, (adoherty)Thank you! - Ming -----Original Message----- From: Doherty, Andrea [mailto:adoherty@rsa.com]=20 Sent: Thursday, June 14, 2007 9:31 AM To: CHANG Shuh; Pei, Mingliang Cc: Hannes Tschofenig; keyprov@ietf.org Subject: RE: [KEYPROV] Issue Tracker Up and Running Shuh, With respect to item 3, below, you are correct that there is a typo, and this was corrected in the schema included in draft-doherty-keyprov-dskpp-00.txt. I agree with your recommendations in #1 and #2 below. Do others also agree? Andrea -----Original Message----- From: CHANG Shuh [mailto:shuh.chang@gemalto.com] Sent: Wednesday, June 13, 2007 5:19 PM To: Doherty, Andrea; Pei, Mingliang Cc: Hannes Tschofenig; keyprov@ietf.org Subject: RE: [KEYPROV] Issue Tracker Up and Running Hi Andrea & Ming, I had a chance to go over the recently merged KeyProv XML schema "KEYPROV Draft 05-23-2007.xsd" and have a few minor suggestions. 1. Change the name KeyType (in ServerHelloPDU) to KeyAlgorithm so that it's more consistent with the other elements such as EncryptionAlgorithm and MacAlgorithm: Change to this =3D=3D=3D> The current declaration of might = look a bit confusing in the concatenated word "Type" for the element name. It's better to just use concatenated "Type" for type name like the rest. 2. Same change with SupportedKeyTypes (in ClientHelloPDU) to SupportedKeyAlgorithms for the same reason. 3. There seems to be a typo in SampleClientHelloTwoPass.xml file. Should the following line: =3D=3D=3D> Key-001> be changed to:=20 Key-001 Note the trailing ">" character at the end of "Key-001" KeyName in the current file. Thanks. Best Regards, Shuh Chang Senior Systems Architect Security, Network Identity Gemalto Tel: +1 512-257-3859 Fax: +1 512-257-3904 8311 North FM 620 Road Austin, Texas 78726-4001 shuh.chang@gemalto.com www.gemalto.com =20 > -----Original Message----- > From: Hannes Tschofenig [mailto:Hannes.Tschofenig@gmx.net] > Sent: Thursday, June 07, 2007 3:27 PM > To: keyprov@ietf.org > Subject: [KEYPROV] Issue Tracker Up and Running >=20 > Hi all, >=20 > we have installed an issue tracker (see > http://www.tschofenig.priv.at:8080/keyprov/index) and Ming has added 14=20 > issues, namely: >=20 > * Shall we send authentication ID in a separate field or the same=20 > value in part of authentication value? > * Shall we explicitly document how to construct AuthenticationCode=20 > over HTTP case? > * Should we use strongly typed message or any type for flexibility?=20 > > * How to refer to HOTP and SecurID OTP algorithms? > * Should TokenID and KeyID be string instead of binary? > * Consistent definition about IDs between Keyprov and PSKC:=20 > TokenID, DeviceID, and KeyID > * Register PSKC container URI and refer to this in keyprov spec=20 > > * Change element names to reflect keyprov and request / response style > > * Is special keyprov HTTP header definition required? > * Do we need to provide SOAP binding and where if so? > * Document the relationship between > SupportedKeyInitializationMethod and EncryptionMethod in a response=20 > message > * Shall we support an option for other response channel such as SMS?=20 > > * Refer to EncryptionAlgorithm from ClientHello for the=20 > SupportedEncryptionAlgorithms? > * Different approaches used to refer to algorithms in keyprov and PSKC > >=20 > Btw, I linked the issue tracker with the KEYPROV mailing list (as you=20 > have seen from the previous message to the list). >=20 > Ciao > Hannes > =20 >=20 > _______________________________________________ > KEYPROV mailing list > KEYPROV@ietf.org > https://www1.ietf.org/mailman/listinfo/keyprov >=20 _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Wed Jul 04 14:45:46 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I69rD-0007H1-IT; Wed, 04 Jul 2007 14:45:43 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I69rC-0007Gr-4J for keyprov@ietf.org; Wed, 04 Jul 2007 14:45:42 -0400 Received: from dvnet26.diversinet.com ([207.245.6.208]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1I69r5-0008NC-UZ for keyprov@ietf.org; Wed, 04 Jul 2007 14:45:42 -0400 Received: from dvnet26.diversinet.com(10.11.12.8) by mcafee_webshield.diversinet.com via smtp id 28ef_4e160516_2a5f_11dc_81b1_0002b3ca872d; Wed, 04 Jul 2007 14:49:33 -0400 Content-class: urn:content-classes:message MIME-Version: 1.0 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Date: Wed, 4 Jul 2007 14:45:21 -0400 Message-ID: <2AB4BF7823761E4E90BA9372C429F1A901B9999C@DVNET26.DIVERSINET.COM> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: comments on dskpp draft Thread-Index: Ace+a3mmklkj2ma+SFyo/6uzSAN2kA== From: "Salah Machani" To: "Doherty, Andrea" , X-Spam-Score: 0.0 (/) X-Scan-Signature: 4166dd0e0c668adc975c3d3e0f1bce3b Cc: Subject: [KEYPROV] comments on dskpp draft X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1542573804==" Errors-To: keyprov-bounces@ietf.org This is a multi-part message in MIME format. --===============1542573804== Content-class: urn:content-classes:message Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C7BE6B.7A583123" This is a multi-part message in MIME format. ------_=_NextPart_001_01C7BE6B.7A583123 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable X-NAIMIME-Disclaimer: 1 X-NAIMIME-Modified: 1 Hi Andrea, =20 I scanned through the DSKPP draft and noticed few things I wanted to point out - see below. Overall very good work. =20 =20 =20 Section 1.2 - last paragraph - There is a reference to [4] which I think is not needed here. This specification also defines mutual key generation between client and server similar to [4]. =20 Section 1.4 requirements =20 - This section does not state whether the protocol should or should not support some of the use cases that are identified in section 1.3, specifically the following use cases: o Use case 1.3.3: provisioning time window=20 o Use case 1.3.5: smart card provisioning and support for smart card APDUs o Use case 1.3.8 - SMS based provisioning =20 Section 1.4.1: Mandatory requirements: =20 - General comment: all requirements are expressed with *SHOULD* instead of *MUST* while they are classified as mandatory requirements. We may have to revisit this list.=20 - R2: typo: "re-generated" should be changed to "pre-generated" - R10: This might be a requirement for the secret container and not for the provisioning protocol.=20 =20 Sections 3.3.2 and 3.3.3 - It will be useful to introduce here or somewhere else in the spec before section 5 the different profiles that are supported. The pass-phrase profile is mentioned in section 5.6.5 and is not introduced anywhere else before. =20 =20 =20 Section 3.10.14: the AuthenticationDataType Type Paragraph b) and last bullet indicate the use of client certificates for authentication without further details on how they are used while section 3.4.1.3 suggests using signed data with client certificate for authentication. We should clarify this in more details.=20 Section 9.2 - Ref [4] needs to be updated. - Ref [7] is incorrect and needs to be updated =20 =20 Thanks, =20 =20 Salah Machani Diversinet Corp.,=20 [O] +1 (416) 756 2324 x321| [M] +1 (647) 284 7816 |http://www.diversinet.com =20 =20 =20 =20 =20 Notice to Recipient: The information in this message is meant only for t= he intended recipient of the transmission and may contain confidential or= privileged information. =0D Any copying, retransmittal, taking of action in reliance on, or other use= of the information in this communication by persons other than the addre= ssees is prohibited. =0D If you received this email in error, please immediately notify us and ple= ase delete or destroy all copies of this message.=0D This message may have been altered without your or our knowledge and the = sender does not accept any liability for any errors. Thank you.=0D ------_=_NextPart_001_01C7BE6B.7A583123 Content-Type: text/HTML; charset="utf-8" Content-Transfer-Encoding: base64 X-NAIMIME-Disclaimer: 1 X-NAIMIME-Modified: 1 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnL1RS L1JFQy1odG1sNDAiPgoKPGhlYWQ+CjxtZXRhIGh0dHAtZXF1aXY9Q29udGVudC1UeXBlIGNvbnRl bnQ9InRleHQvaHRtbDsgY2hhcnNldD11cy1hc2NpaSI+CjxtZXRhIG5hbWU9R2VuZXJhdG9yIGNv bnRlbnQ9Ik1pY3Jvc29mdCBXb3JkIDExIChmaWx0ZXJlZCBtZWRpdW0pIj4KPHN0eWxlPgo8IS0t CiAvKiBGb250IERlZmluaXRpb25zICovCiBAZm9udC1mYWNlCgl7Zm9udC1mYW1pbHk6Ik1TIE1p bmNobyI7CglwYW5vc2UtMToyIDIgNiA5IDQgMiA1IDggMyA0O30KQGZvbnQtZmFjZQoJe2ZvbnQt ZmFtaWx5OiJcQE1TIE1pbmNobyI7fQogLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8KIHAuTXNvTm9y bWFsLCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwKCXttYXJnaW46MGluOwoJbWFyZ2luLWJv dHRvbTouMDAwMXB0OwoJZm9udC1zaXplOjEyLjBwdDsKCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcg Um9tYW4iO30KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluawoJe2NvbG9yOmJsdWU7Cgl0ZXh0LWRl Y29yYXRpb246dW5kZXJsaW5lO30KYTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2Vk Cgl7Y29sb3I6cHVycGxlOwoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9CnAKCXttc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzsKCW1hcmdpbi1yaWdodDowaW47Cgltc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0bzsKCW1hcmdpbi1sZWZ0OjBpbjsKCWZvbnQtc2l6ZToxMi4wcHQ7Cglmb250LWZhbWls eToiVGltZXMgTmV3IFJvbWFuIjt9CnNwYW4uRW1haWxTdHlsZTE3Cgl7bXNvLXN0eWxlLXR5cGU6 cGVyc29uYWwtY29tcG9zZTsKCWZvbnQtZmFtaWx5OkFyaWFsOwoJY29sb3I6d2luZG93dGV4dDt9 CkBwYWdlIFNlY3Rpb24xCgl7c2l6ZTo4LjVpbiAxMS4waW47CgltYXJnaW46MS4waW4gMS4yNWlu IDEuMGluIDEuMjVpbjt9CmRpdi5TZWN0aW9uMQoJe3BhZ2U6U2VjdGlvbjE7fQogLyogTGlzdCBE ZWZpbml0aW9ucyAqLwogQGxpc3QgbDAKCXttc28tbGlzdC1pZDo4ODQ4NzA2MjI7Cgltc28tbGlz dC10eXBlOmh5YnJpZDsKCW1zby1saXN0LXRlbXBsYXRlLWlkczoxMTE0NjQ3Njk2IC0xNTg2NDQ4 MTg0IDY3Njk4NjkxIDY3Njk4NjkzIDY3Njk4Njg5IDY3Njk4NjkxIDY3Njk4NjkzIDY3Njk4Njg5 IDY3Njk4NjkxIDY3Njk4NjkzO30KQGxpc3QgbDA6bGV2ZWwxCgl7bXNvLWxldmVsLW51bWJlci1m b3JtYXQ6YnVsbGV0OwoJbXNvLWxldmVsLXRleHQ6LTsKCW1zby1sZXZlbC10YWItc3RvcDouNWlu OwoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0OwoJdGV4dC1pbmRlbnQ6LS4yNWluOwoJ Zm9udC1mYW1pbHk6QXJpYWw7Cgltc28tZmFyZWFzdC1mb250LWZhbWlseToiTVMgTWluY2hvIjt9 CkBsaXN0IGwwOmxldmVsMgoJe21zby1sZXZlbC1udW1iZXItZm9ybWF0OmJ1bGxldDsKCW1zby1s ZXZlbC10ZXh0Om87Cgltc28tbGV2ZWwtdGFiLXN0b3A6MS4waW47Cgltc28tbGV2ZWwtbnVtYmVy LXBvc2l0aW9uOmxlZnQ7Cgl0ZXh0LWluZGVudDotLjI1aW47Cglmb250LWZhbWlseToiQ291cmll ciBOZXciO30KQGxpc3QgbDA6bGV2ZWwzCgl7bXNvLWxldmVsLXRhYi1zdG9wOjEuNWluOwoJbXNv LWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0OwoJdGV4dC1pbmRlbnQ6LS4yNWluO30KQGxpc3Qg bDA6bGV2ZWw0Cgl7bXNvLWxldmVsLXRhYi1zdG9wOjIuMGluOwoJbXNvLWxldmVsLW51bWJlci1w b3NpdGlvbjpsZWZ0OwoJdGV4dC1pbmRlbnQ6LS4yNWluO30KQGxpc3QgbDA6bGV2ZWw1Cgl7bXNv LWxldmVsLXRhYi1zdG9wOjIuNWluOwoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0OwoJ dGV4dC1pbmRlbnQ6LS4yNWluO30KQGxpc3QgbDA6bGV2ZWw2Cgl7bXNvLWxldmVsLXRhYi1zdG9w OjMuMGluOwoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0OwoJdGV4dC1pbmRlbnQ6LS4y NWluO30KQGxpc3QgbDA6bGV2ZWw3Cgl7bXNvLWxldmVsLXRhYi1zdG9wOjMuNWluOwoJbXNvLWxl dmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0OwoJdGV4dC1pbmRlbnQ6LS4yNWluO30KQGxpc3QgbDA6 bGV2ZWw4Cgl7bXNvLWxldmVsLXRhYi1zdG9wOjQuMGluOwoJbXNvLWxldmVsLW51bWJlci1wb3Np dGlvbjpsZWZ0OwoJdGV4dC1pbmRlbnQ6LS4yNWluO30KQGxpc3QgbDA6bGV2ZWw5Cgl7bXNvLWxl dmVsLXRhYi1zdG9wOjQuNWluOwoJbXNvLWxldmVsLW51bWJlci1wb3NpdGlvbjpsZWZ0OwoJdGV4 dC1pbmRlbnQ6LS4yNWluO30Kb2wKCXttYXJnaW4tYm90dG9tOjBpbjt9CnVsCgl7bWFyZ2luLWJv dHRvbTowaW47fQotLT4KPC9zdHlsZT4KPCEtLVtpZiBndGUgbXNvIDldPjx4bWw+CiA8bzpzaGFw ZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPgo8L3htbD48IVtlbmRpZl0t LT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4KIDxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4K ICA8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4KIDwvbzpzaGFwZWxheW91dD48L3ht bD48IVtlbmRpZl0tLT4KPC9oZWFkPgoKPGJvZHkgbGFuZz1FTi1VUyBsaW5rPWJsdWUgdmxpbms9 cHVycGxlPgoKPGRpdiBjbGFzcz1TZWN0aW9uMT4KCjxwIGNsYXNzPU1zb05vcm1hbD48Zm9udCBz aXplPTIgZmFjZT1BcmlhbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDsKZm9udC1mYW1p bHk6QXJpYWwnPkhpIEFuZHJlYSw8bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPgoKPHAgY2xh c3M9TXNvTm9ybWFsPjxmb250IHNpemU9MiBmYWNlPUFyaWFsPjxzcGFuIHN0eWxlPSdmb250LXNp emU6MTAuMHB0Owpmb250LWZhbWlseTpBcmlhbCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9m b250PjwvcD4KCjxwIGNsYXNzPU1zb05vcm1hbD48Zm9udCBzaXplPTIgZmFjZT1BcmlhbD48c3Bh biBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDsKZm9udC1mYW1pbHk6QXJpYWwnPkkgc2Nhbm5lZCB0 aHJvdWdoIHRoZSBEU0tQUCBkcmFmdCBhbmQgbm90aWNlZCBmZXcgdGhpbmdzIEkKd2FudGVkIHRv IHBvaW50IG91dCAmIzgyMTE7IHNlZSBiZWxvdy4gJm5ic3A7T3ZlcmFsbCB2ZXJ5IGdvb2Qgd29y ay48bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPgoKPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250 IHNpemU9MiBmYWNlPUFyaWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0Owpmb250LWZh bWlseTpBcmlhbCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9mb250PjwvcD4KCjxwIGNsYXNz PU1zb05vcm1hbD48Zm9udCBzaXplPTIgZmFjZT1BcmlhbD48c3BhbiBzdHlsZT0nZm9udC1zaXpl OjEwLjBwdDsKZm9udC1mYW1pbHk6QXJpYWwnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZm9u dD48L3A+Cgo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0yIGZhY2U9QXJpYWw+PHNwYW4g c3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7CmZvbnQtZmFtaWx5OkFyaWFsJz48bzpwPiZuYnNwOzwv bzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPgoKPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9MiBm YWNlPUFyaWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0Owpmb250LWZhbWlseTpBcmlh bCc+U2VjdGlvbiAxLjIgJiM4MjExOyBsYXN0IHBhcmFncmFwaDxvOnA+PC9vOnA+PC9zcGFuPjwv Zm9udD48L3A+Cgo8cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21hcmdpbi1sZWZ0Oi41aW47dGV4 dC1pbmRlbnQ6LS4yNWluO21zby1saXN0OmwwIGxldmVsMSBsZm8xJz48IVtpZiAhc3VwcG9ydExp c3RzXT48Zm9udApzaXplPTIgZmFjZT1BcmlhbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBw dDtmb250LWZhbWlseTpBcmlhbCc+PHNwYW4Kc3R5bGU9J21zby1saXN0Oklnbm9yZSc+LTxmb250 IHNpemU9MSBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPjxzcGFuCnN0eWxlPSdmb250OjcuMHB0ICJU aW1lcyBOZXcgUm9tYW4iJz4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsKPC9zcGFuPjwvZm9udD48L3NwYW4+PC9zcGFuPjwvZm9udD48IVtlbmRp Zl0+PGZvbnQgc2l6ZT0yIGZhY2U9QXJpYWw+PHNwYW4Kc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6QXJpYWwnPlRoZXJlIGlzIGEgcmVmZXJlbmNlIHRvIFs0XSB3aGljaCBJIHRo aW5rCmlzIG5vdCBuZWVkZWQgaGVyZS4mbmJzcDsmbmJzcDsgVGhpcyBzcGVjaWZpY2F0aW9uIGFs c28gZGVmaW5lcyBtdXR1YWwga2V5CmdlbmVyYXRpb24gYmV0d2VlbiBjbGllbnQgYW5kIHNlcnZl ciBzaW1pbGFyIHRvIFs0XS48bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPgoKPHAgY2xhc3M9 TXNvTm9ybWFsPjxmb250IHNpemU9MiBmYWNlPUFyaWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6 MTAuMHB0Owpmb250LWZhbWlseTpBcmlhbCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9mb250 PjwvcD4KCjxwIGNsYXNzPU1zb05vcm1hbD48Zm9udCBzaXplPTIgZmFjZT1BcmlhbD48c3BhbiBz dHlsZT0nZm9udC1zaXplOjEwLjBwdDsKZm9udC1mYW1pbHk6QXJpYWwnPlNlY3Rpb24gMS40IHJl cXVpcmVtZW50czxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+Cgo8cCBjbGFzcz1Nc29Ob3Jt YWw+PGZvbnQgc2l6ZT0yIGZhY2U9QXJpYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7 CmZvbnQtZmFtaWx5OkFyaWFsJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPgoK PHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtYXJnaW4tbGVmdDouNWluO3RleHQtaW5kZW50Oi0u MjVpbjttc28tbGlzdDpsMCBsZXZlbDEgbGZvMSc+PCFbaWYgIXN1cHBvcnRMaXN0c10+PGZvbnQK c2l6ZT0yIGZhY2U9QXJpYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1p bHk6QXJpYWwnPjxzcGFuCnN0eWxlPSdtc28tbGlzdDpJZ25vcmUnPi08Zm9udCBzaXplPTEgZmFj ZT0iVGltZXMgTmV3IFJvbWFuIj48c3BhbgpzdHlsZT0nZm9udDo3LjBwdCAiVGltZXMgTmV3IFJv bWFuIic+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Cjwvc3Bhbj48L2ZvbnQ+PC9zcGFuPjwvc3Bhbj48L2ZvbnQ+PCFbZW5kaWZdPjxmb250IHNp emU9MiBmYWNlPUFyaWFsPjxzcGFuCnN0eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5 OkFyaWFsJz5UaGlzIHNlY3Rpb24gZG9lcyBub3Qgc3RhdGUgd2hldGhlcgp0aGUgcHJvdG9jb2wg c2hvdWxkIG9yIHNob3VsZCBub3Qgc3VwcG9ydCBzb21lIG9mIHRoZSB1c2UgY2FzZXMgdGhhdCBh cmUKaWRlbnRpZmllZCBpbiBzZWN0aW9uIDEuMywgc3BlY2lmaWNhbGx5IHRoZSBmb2xsb3dpbmcg dXNlIGNhc2VzOjxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+Cgo8cCBjbGFzcz1Nc29Ob3Jt YWwgc3R5bGU9J21hcmdpbi1sZWZ0OjEuMGluO3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDps MCBsZXZlbDIgbGZvMSc+PCFbaWYgIXN1cHBvcnRMaXN0c10+PGZvbnQKc2l6ZT0yIGZhY2U9IkNv dXJpZXIgTmV3Ij48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291 cmllciBOZXciJz48c3BhbgpzdHlsZT0nbXNvLWxpc3Q6SWdub3JlJz5vPGZvbnQgc2l6ZT0xIGZh Y2U9IlRpbWVzIE5ldyBSb21hbiI+PHNwYW4Kc3R5bGU9J2ZvbnQ6Ny4wcHQgIlRpbWVzIE5ldyBS b21hbiInPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOwo8L3NwYW4+ PC9mb250Pjwvc3Bhbj48L3NwYW4+PC9mb250PjwhW2VuZGlmXT48Zm9udCBzaXplPTIgZmFjZT1B cmlhbD48c3BhbgpzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpBcmlhbCc+VXNl IGNhc2UgMS4zLjM6IHByb3Zpc2lvbmluZyB0aW1lCndpbmRvdyA8bzpwPjwvbzpwPjwvc3Bhbj48 L2ZvbnQ+PC9wPgoKPHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtYXJnaW4tbGVmdDoxLjBpbjt0 ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDAgbGV2ZWwyIGxmbzEnPjwhW2lmICFzdXBwb3J0 TGlzdHNdPjxmb250CnNpemU9MiBmYWNlPSJDb3VyaWVyIE5ldyI+PHNwYW4gc3R5bGU9J2ZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Iic+PHNwYW4Kc3R5bGU9J21zby1s aXN0Oklnbm9yZSc+bzxmb250IHNpemU9MSBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPjxzcGFuCnN0 eWxlPSdmb250OjcuMHB0ICJUaW1lcyBOZXcgUm9tYW4iJz4mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsKPC9zcGFuPjwvZm9udD48L3NwYW4+PC9zcGFuPjwvZm9udD48 IVtlbmRpZl0+PGZvbnQgc2l6ZT0yIGZhY2U9QXJpYWw+PHNwYW4Kc3R5bGU9J2ZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6QXJpYWwnPlVzZSBjYXNlIDEuMy41OiBzbWFydCBjYXJkCnByb3Zp c2lvbmluZyBhbmQgc3VwcG9ydCBmb3Igc21hcnQgY2FyZCBBUERVczxvOnA+PC9vOnA+PC9zcGFu PjwvZm9udD48L3A+Cgo8cCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9J21hcmdpbi1sZWZ0OjEuMGlu O3RleHQtaW5kZW50Oi0uMjVpbjttc28tbGlzdDpsMCBsZXZlbDIgbGZvMSc+PCFbaWYgIXN1cHBv cnRMaXN0c10+PGZvbnQKc2l6ZT0yIGZhY2U9IkNvdXJpZXIgTmV3Ij48c3BhbiBzdHlsZT0nZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseToiQ291cmllciBOZXciJz48c3BhbgpzdHlsZT0nbXNv LWxpc3Q6SWdub3JlJz5vPGZvbnQgc2l6ZT0xIGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+PHNwYW4K c3R5bGU9J2ZvbnQ6Ny4wcHQgIlRpbWVzIE5ldyBSb21hbiInPiZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOwo8L3NwYW4+PC9mb250Pjwvc3Bhbj48L3NwYW4+PC9mb250 PjwhW2VuZGlmXT48Zm9udCBzaXplPTIgZmFjZT1BcmlhbD48c3BhbgpzdHlsZT0nZm9udC1zaXpl OjEwLjBwdDtmb250LWZhbWlseTpBcmlhbCc+VXNlIGNhc2UgMS4zLjggJiM4MjExOyBTTVMgYmFz ZWQKcHJvdmlzaW9uaW5nPG86cD48L286cD48L3NwYW4+PC9mb250PjwvcD4KCjxwIGNsYXNzPU1z b05vcm1hbD48Zm9udCBzaXplPTIgZmFjZT1BcmlhbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEw LjBwdDsKZm9udC1mYW1pbHk6QXJpYWwnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZm9udD48 L3A+Cgo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0yIGZhY2U9QXJpYWw+PHNwYW4gc3R5 bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7CmZvbnQtZmFtaWx5OkFyaWFsJz5TZWN0aW9uIDEuNC4xOiBN YW5kYXRvcnkgcmVxdWlyZW1lbnRzOjxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+Cgo8cCBj bGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0yIGZhY2U9QXJpYWw+PHNwYW4gc3R5bGU9J2ZvbnQt c2l6ZToxMC4wcHQ7CmZvbnQtZmFtaWx5OkFyaWFsJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48 L2ZvbnQ+PC9wPgoKPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9MiBmYWNlPUFyaWFsPjxz cGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0Owpmb250LWZhbWlseTpBcmlhbCc+LSBHZW5lcmFs IGNvbW1lbnQ6Jm5ic3A7IGFsbCByZXF1aXJlbWVudHMgYXJlIGV4cHJlc3NlZCB3aXRoCipTSE9V TEQqIGluc3RlYWQgb2YgKjxiPjxzcGFuIHN0eWxlPSdmb250LXdlaWdodDpib2xkJz5NVVNUPC9z cGFuPjwvYj4qIHdoaWxlCnRoZXkgYXJlIGNsYXNzaWZpZWQgYXMgbWFuZGF0b3J5IHJlcXVpcmVt ZW50cy4gV2UgbWF5IGhhdmUgdG8gcmV2aXNpdCB0aGlzCmxpc3QuIDxvOnA+PC9vOnA+PC9zcGFu PjwvZm9udD48L3A+Cgo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0yIGZhY2U9QXJpYWw+ PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7CmZvbnQtZmFtaWx5OkFyaWFsJz4tIFIyOiB0 eXBvOiAmIzgyMjA7cmUtZ2VuZXJhdGVkJiM4MjIxOyZuYnNwOyZuYnNwOyBzaG91bGQgYmUKY2hh bmdlZCB0byAmIzgyMjA7cHJlLWdlbmVyYXRlZCYjODIyMTs8bzpwPjwvbzpwPjwvc3Bhbj48L2Zv bnQ+PC9wPgoKPHAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSdtYXJnaW4tYm90dG9tOjEyLjBwdCc+ PGZvbnQgc2l6ZT0yIGZhY2U9QXJpYWw+PHNwYW4Kc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6QXJpYWwnPi0gUjEwOiZuYnNwOyBUaGlzIG1pZ2h0IGJlIGEKcmVxdWlyZW1lbnQg Zm9yIHRoZSBzZWNyZXQgY29udGFpbmVyIGFuZCBub3QgZm9yIHRoZSBwcm92aXNpb25pbmcgcHJv dG9jb2wuIDxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+Cgo8cCBjbGFzcz1Nc29Ob3JtYWw+ PGZvbnQgc2l6ZT0yIGZhY2U9QXJpYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7CmZv bnQtZmFtaWx5OkFyaWFsJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPgoKPHAg Y2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9MiBmYWNlPUFyaWFsPjxzcGFuIHN0eWxlPSdmb250 LXNpemU6MTAuMHB0Owpmb250LWZhbWlseTpBcmlhbCc+U2VjdGlvbnMgMy4zLjIgYW5kIDMuMy4z PG86cD48L286cD48L3NwYW4+PC9mb250PjwvcD4KCjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0n bWFyZ2luLWxlZnQ6LjVpbjt0ZXh0LWluZGVudDotLjI1aW47bXNvLWxpc3Q6bDAgbGV2ZWwxIGxm bzEnPjwhW2lmICFzdXBwb3J0TGlzdHNdPjxmb250CnNpemU9MiBmYWNlPUFyaWFsPjxzcGFuIHN0 eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkFyaWFsJz48c3BhbgpzdHlsZT0nbXNv LWxpc3Q6SWdub3JlJz4tPGZvbnQgc2l6ZT0xIGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+PHNwYW4K c3R5bGU9J2ZvbnQ6Ny4wcHQgIlRpbWVzIE5ldyBSb21hbiInPiZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOwo8L3NwYW4+PC9mb250Pjwvc3Bhbj48 L3NwYW4+PC9mb250PjwhW2VuZGlmXT48Zm9udCBzaXplPTIgZmFjZT1BcmlhbD48c3BhbgpzdHls ZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpBcmlhbCc+SXQgd2lsbCBiZSB1c2VmdWwg dG8gaW50cm9kdWNlIGhlcmUKb3Igc29tZXdoZXJlIGVsc2UgaW4gdGhlIHNwZWMgYmVmb3JlIHNl Y3Rpb24gNSB0aGUgZGlmZmVyZW50IHByb2ZpbGVzIHRoYXQgYXJlCnN1cHBvcnRlZC4mbmJzcDsg VGhlIHBhc3MtcGhyYXNlIHByb2ZpbGUgaXMgbWVudGlvbmVkIGluIHNlY3Rpb24gNS42LjUgYW5k IGlzCm5vdCBpbnRyb2R1Y2VkIGFueXdoZXJlIGVsc2UgYmVmb3JlLiZuYnNwOyA8bzpwPjwvbzpw Pjwvc3Bhbj48L2ZvbnQ+PC9wPgoKPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9MiBmYWNl PUFyaWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0Owpmb250LWZhbWlseTpBcmlhbCc+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9mb250PjwvcD4KCjxwIGNsYXNzPU1zb05vcm1hbCBz dHlsZT0nbWFyZ2luLWxlZnQ6LjI1aW4nPjxmb250IHNpemU9MiBmYWNlPUFyaWFsPjxzcGFuCnN0 eWxlPSdmb250LXNpemU6MTAuMHB0O2ZvbnQtZmFtaWx5OkFyaWFsJz48bzpwPiZuYnNwOzwvbzpw Pjwvc3Bhbj48L2ZvbnQ+PC9wPgoKPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9MiBmYWNl PUFyaWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0Owpmb250LWZhbWlseTpBcmlhbCc+ U2VjdGlvbiAzLjEwLjE0OiB0aGUgQXV0aGVudGljYXRpb25EYXRhVHlwZSBUeXBlPG86cD48L286 cD48L3NwYW4+PC9mb250PjwvcD4KCjxwIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0nbWFyZ2luLWxl ZnQ6LjI1aW4nPjxmb250IHNpemU9MiBmYWNlPUFyaWFsPjxzcGFuCnN0eWxlPSdmb250LXNpemU6 MTAuMHB0O2ZvbnQtZmFtaWx5OkFyaWFsJz5QYXJhZ3JhcGggYikgYW5kIGxhc3QgYnVsbGV0Cmlu ZGljYXRlIHRoZSB1c2Ugb2YgY2xpZW50IGNlcnRpZmljYXRlcyBmb3IgYXV0aGVudGljYXRpb24g d2l0aG91dCBmdXJ0aGVyIGRldGFpbHMKb24gaG93IHRoZXkgYXJlIHVzZWQgd2hpbGUgc2VjdGlv biAzLjQuMS4zIHN1Z2dlc3RzIHVzaW5nIHNpZ25lZCBkYXRhIHdpdGgKY2xpZW50IGNlcnRpZmlj YXRlIGZvciBhdXRoZW50aWNhdGlvbi4mbmJzcDsmbmJzcDsgV2Ugc2hvdWxkIGNsYXJpZnkgdGhp cyBpbgptb3JlIGRldGFpbHMuIDxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+Cgo8cD48Zm9u dCBzaXplPTIgZmFjZT1BcmlhbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZh bWlseTpBcmlhbCc+U2VjdGlvbgo5LjI8bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPgoKPHAg c3R5bGU9J21hcmdpbi1sZWZ0Oi41aW47dGV4dC1pbmRlbnQ6LS4yNWluO21zby1saXN0OmwwIGxl dmVsMSBsZm8xJz48IVtpZiAhc3VwcG9ydExpc3RzXT48Zm9udApzaXplPTIgZmFjZT1BcmlhbD48 c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpBcmlhbCc+PHNwYW4Kc3R5 bGU9J21zby1saXN0Oklnbm9yZSc+LTxmb250IHNpemU9MSBmYWNlPSJUaW1lcyBOZXcgUm9tYW4i PjxzcGFuCnN0eWxlPSdmb250OjcuMHB0ICJUaW1lcyBOZXcgUm9tYW4iJz4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsKPC9zcGFuPjwvZm9udD48 L3NwYW4+PC9zcGFuPjwvZm9udD48IVtlbmRpZl0+PGZvbnQgc2l6ZT0yIGZhY2U9QXJpYWw+PHNw YW4Kc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6QXJpYWwnPlJlZiBbNF0gbmVl ZHMgdG8gYmUgdXBkYXRlZC48bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPgoKPHAgc3R5bGU9 J21hcmdpbi1sZWZ0Oi41aW47dGV4dC1pbmRlbnQ6LS4yNWluO21zby1saXN0OmwwIGxldmVsMSBs Zm8xJz48IVtpZiAhc3VwcG9ydExpc3RzXT48Zm9udApzaXplPTIgZmFjZT1BcmlhbD48c3BhbiBz dHlsZT0nZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTpBcmlhbCc+PHNwYW4Kc3R5bGU9J21z by1saXN0Oklnbm9yZSc+LTxmb250IHNpemU9MSBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPjxzcGFu CnN0eWxlPSdmb250OjcuMHB0ICJUaW1lcyBOZXcgUm9tYW4iJz4mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsKPC9zcGFuPjwvZm9udD48L3NwYW4+ PC9zcGFuPjwvZm9udD48IVtlbmRpZl0+PGZvbnQgc2l6ZT0yIGZhY2U9QXJpYWw+PHNwYW4Kc3R5 bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6QXJpYWwnPlJlZiBbN10gaXMgaW5jb3Jy ZWN0IGFuZCBuZWVkcyB0byBiZQp1cGRhdGVkPG86cD48L286cD48L3NwYW4+PC9mb250PjwvcD4K CjxwPjxmb250IHNpemU9MiBmYWNlPUFyaWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0 O2ZvbnQtZmFtaWx5OkFyaWFsJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPgoK PHA+PGZvbnQgc2l6ZT0yIGZhY2U9QXJpYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7 Zm9udC1mYW1pbHk6QXJpYWwnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+Cgo8 cD48Zm9udCBzaXplPTIgZmFjZT1BcmlhbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTpBcmlhbCc+VGhhbmtzLDxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+Cgo8 cD48Zm9udCBzaXplPTIgZmFjZT1BcmlhbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtm b250LWZhbWlseTpBcmlhbCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9mb250PjwvcD4KCjxw Pjxmb250IHNpemU9MiBmYWNlPUFyaWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0O2Zv bnQtZmFtaWx5OkFyaWFsJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPgoKPHA+ PGZvbnQgc2l6ZT0yIGZhY2U9QXJpYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7Zm9u dC1mYW1pbHk6QXJpYWwnPlNhbGFoCk1hY2hhbmk8L3NwYW4+PC9mb250PjxvOnA+PC9vOnA+PC9w PgoKPHA+PGZvbnQgc2l6ZT0yIGZhY2U9QXJpYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4w cHQ7Zm9udC1mYW1pbHk6QXJpYWwnPjxicj4KRGl2ZXJzaW5ldCBDb3JwLiwmbmJzcDs8bzpwPjwv bzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPgoKPHA+PGZvbnQgc2l6ZT0xIGZhY2U9QXJpYWw+PHNwYW4g c3R5bGU9J2ZvbnQtc2l6ZTo3LjVwdDtmb250LWZhbWlseTpBcmlhbCc+W09dJm5ic3A7KzEKKDQx NikmbmJzcDs3NTYgMjMyNCB4MzIxfCZuYnNwO1tNXSArMSAoNjQ3KSZuYnNwOzI4NCZuYnNwOzc4 MTYgfDwvc3Bhbj48L2ZvbnQ+PGEKaHJlZj0iaHR0cDovL3d3dy5kaXZlcnNpbmV0LmNvbSIgdGl0 bGU9ImJsb2NrZWQ6Omh0dHA6Ly93d3cuZGl2ZXJzaW5ldC5jb20vIj48Zm9udApzaXplPTEgZmFj ZT1BcmlhbCB0aXRsZT0iYmxvY2tlZDo6aHR0cDovL3d3dy5kaXZlcnNpbmV0LmNvbS8iPjxzcGFu CnRpdGxlPSJibG9ja2VkOjpodHRwOi8vd3d3LmRpdmVyc2luZXQuY29tLyI+PHNwYW4gc3R5bGU9 J2ZvbnQtc2l6ZTo3LjVwdDsKZm9udC1mYW1pbHk6QXJpYWwnPmh0dHA6Ly93d3cuZGl2ZXJzaW5l dC5jb208L3NwYW4+PC9zcGFuPjwvZm9udD48L2E+PG86cD48L286cD48L3A+Cgo8cCBjbGFzcz1N c29Ob3JtYWw+PGZvbnQgc2l6ZT0zIGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+PHNwYW4gc3R5bGU9 J2ZvbnQtc2l6ZToKMTIuMHB0Jz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPgoK PHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9MiBmYWNlPUFyaWFsPjxzcGFuIHN0eWxlPSdm b250LXNpemU6MTAuMHB0Owpmb250LWZhbWlseTpBcmlhbCc+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9mb250PjwvcD4KCjxwIGNsYXNzPU1zb05vcm1hbD48Zm9udCBzaXplPTIgZmFjZT1Bcmlh bD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDsKZm9udC1mYW1pbHk6QXJpYWwnPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+Cgo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQg c2l6ZT0zIGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToKMTIu MHB0Jz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPgoKPC9kaXY+CgoKPERJVj48 UD48SFI+Ck5vdGljZSB0byBSZWNpcGllbnQ6ICBUaGUgaW5mb3JtYXRpb24gaW4gdGhpcyBtZXNz YWdlIGlzIG1lYW50IG9ubHkgZm9yIHRoZSBpbnRlbmRlZCByZWNpcGllbnQgb2YgdGhlIHRyYW5z bWlzc2lvbiBhbmQgbWF5IGNvbnRhaW4gY29uZmlkZW50aWFsIG9yIHByaXZpbGVnZWQgaW5mb3Jt YXRpb24uIDxCUj4KQW55IGNvcHlpbmcsIHJldHJhbnNtaXR0YWwsIHRha2luZyBvZiBhY3Rpb24g aW4gcmVsaWFuY2Ugb24sIG9yIG90aGVyIHVzZSBvZiB0aGUgaW5mb3JtYXRpb24gaW4gdGhpcyBj b21tdW5pY2F0aW9uIGJ5IHBlcnNvbnMgb3RoZXIgdGhhbiB0aGUgYWRkcmVzc2VlcyBpcyBwcm9o aWJpdGVkLiAgPEJSPgpJZiB5b3UgcmVjZWl2ZWQgdGhpcyBlbWFpbCBpbiBlcnJvciwgcGxlYXNl IGltbWVkaWF0ZWx5IG5vdGlmeSB1cyBhbmQgcGxlYXNlIGRlbGV0ZSBvciBkZXN0cm95IGFsbCBj b3BpZXMgb2YgdGhpcyBtZXNzYWdlLjxCUj4KVGhpcyBtZXNzYWdlIG1heSBoYXZlIGJlZW4gYWx0 ZXJlZCB3aXRob3V0IHlvdXIgb3Igb3VyIGtub3dsZWRnZSBhbmQgdGhlIHNlbmRlciBkb2VzIG5v dCBhY2NlcHQgYW55IGxpYWJpbGl0eSBmb3IgYW55IGVycm9ycy4gIFRoYW5rIHlvdS48QlI+Cgo8 L1A+PC9ESVY+CjwvYm9keT4KCjwvaHRtbD4K ------_=_NextPart_001_01C7BE6B.7A583123-- --===============1542573804== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov --===============1542573804==-- From keyprov-bounces@ietf.org Wed Jul 04 14:58:07 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6A3D-0000zg-I7; Wed, 04 Jul 2007 14:58:07 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6A3C-0000zY-Sd for keyprov@ietf.org; Wed, 04 Jul 2007 14:58:06 -0400 Received: from gateway1.rsasecurity.com ([216.162.240.250]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1I6A36-00059z-Uw for keyprov@ietf.org; Wed, 04 Jul 2007 14:58:06 -0400 Received: from hyperion.rsasecurity.com by gateway1.rsasecurity.com via smtpd (for stiedprmail1.ietf.ORG [156.154.16.150]) with SMTP; Wed, 4 Jul 2007 14:58:00 -0400 Received: from sdtihq24.securid.com (sdtihq24.na.rsa.net [10.100.8.152]) by hyperion.na.rsa.net (MOS 3.8.3-GA) with ESMTP id DEW52120; Wed, 4 Jul 2007 15:05:16 +0500 (GMT-5) Received: from rsana-ex-hq1.NA.RSA.NET (rsana-ex-hq1.na.rsa.net [10.100.8.50]) by sdtihq24.securid.com (8.12.10/8.12.9) with ESMTP id l64IvsX1004963; Wed, 4 Jul 2007 14:57:54 -0400 (EDT) X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----_=_NextPart_001_01C7BE6D.3A8B53BB" Subject: RE: [KEYPROV] Comments on Section 2 and 3 of DSKPP draft Date: Wed, 4 Jul 2007 14:57:53 -0400 Message-ID: <017630AA6DF2DF4EBC1DD4454F8EE2970B68CA34@rsana-ex-hq1.NA.RSA.NET> In-Reply-To: X-MS-Has-Attach: yes Thread-Topic: [KEYPROV] Comments on Section 2 and 3 of DSKPP draft thread-index: Aceya7JEY6FIgibJTkCMmDpn72HTagLUIzWQ References: From: "Doherty, Andrea" To: "Meyer, Ulrike" , X-Junkmail-Whitelist: YES (by domain whitelist at hyperion.na.rsa.net) X-Spam-Score: 0.1 (/) X-Scan-Signature: 2889dc68d2cf470fa7030a7e1b787855 Cc: X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org This is a multi-part message in MIME format. ------_=_NextPart_001_01C7BE6D.3A8B53BB Content-Type: multipart/alternative; boundary="----_=_NextPart_002_01C7BE6D.3A8B53BB" ------_=_NextPart_002_01C7BE6D.3A8B53BB Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Uli, Thanks for your excellent comments. Please see responses below. Andrea ________________________________ From: Meyer, Ulrike [mailto:ulrike.meyer@nsn.com]=20 Sent: Tuesday, June 19, 2007 8:17 AM To: keyprov@ietf.org Subject: [KEYPROV] Comments on Section 2 and 3 of DSKPP draft Hi Andrea, Pei, all, =20 here are some review comments on Section 3 of the DSKPP draft =20 Best regards, Uli =20 General: ------------ * The relation between the different types of client authentication, = server authentication and protocol variants is not very clear to me. In = particular it is unclear what is mandatory and what optional, when the = "secure channel" assumption is made and when not, and when the security = of the protocol relies on the security properties of the underlying = transport protocol.=20 [Doherty, Andrea] Ok...I'll try to clarify this in the next draft.=20 * The relation between the different protocol variants and the use cases = / purposes for which they are designed is not clear [Doherty, Andrea] Plan to add a section and/or table to indicate when to = apply which protocol variant to which use case.=20 =20 Section2: ------------- * Page 13: Definition of R_C and R_S could be completed with "and used = as input to the generation of K_TOKEN" [Doherty, Andrea] Agree, and will add.=20 * Page 13: Definition of R could mention "mandatory for 2-pass, optional = for 4-pass" [Doherty, Andrea] Agree, and will add.=20 * The notation K_MAC' is used in Sections 3.9.3.1 and 3.9.3.2 but not = defined here=20 [Doherty, Andrea] Good catch; will add. =20 Section 3.3.1 in general: ----------------------------------- * What is meant by "provisioning of legacy keys"? [Doherty, Andrea] "Legacy keys" are the same thing as pre-generated keys = except that "legacy" implies a situation wherein the keys were generated = and available for issuance before the protocol was ever implemented. = I'll either add these words, or simply state "provisioning pre-generated = keys".=20 * Paragraph a.: there seems to be a repetition: "cryptographic = algorithms supported by the token" and "encryption and MAC algorithms = supported by the cryptographic token" [Doherty, Andrea]Good catch - this is a typo that made it all the way = through to RFC in the original CT-KIP spec!=20 * it is described that the ClientHello includes the MAC algorithms = supported by the token, but ServerHello and ServerFinished do not = mention MAC1 and MAC2. This makes it difficult to understand immediately = how the 4-pass-protocol is protected against Server impersonation [Doherty, Andrea] Good point - will add.=20 * the optional client nonce R seems to be missing in the description of = ClientHello [Doherty, Andrea] Yes, you're right. This will be added (if even to = point out that it is not required for 4-pass, although required for = 2-pass).=20 * the supported variants of DSKPP (4-pass, 2-pass) is missing in the = description of ClientHello (mentioned in 3.11.3) [Doherty, Andrea] Will add.=20 * in c. the verification of the server certificate (if K_SERVER is used) = could be mentioned [Doherty, Andrea] Ok.=20 * Client authentication should somehow be mentioned in this general = description of the 4-pass protocol, as otherwise it is unclear how the = protocol protects against client impersonation [Doherty, Andrea] Ok.=20 * Splitting R_C in the two components R_C1 and R_C2 protects against = token impersonation in the case K_SERVER is used. If this split is not = used, and there is no authenticated channel between client and server, = and K_SERVER is used, then the protocol is vulnerable against token = impersonation as in this case anyone (not only the token as in the case = of K_SHARED) can compute R_C and therefore anyone would be able to = request a new K_TOKEN from the server on behalf of the token and compute = the token. In particular the sentence "The inclusion of the encryption = key K ensures that no man-in-the-middle MAY be present, or else the = cryptographic token will end up with a key different from the one stored = by the legitimate DSKPP server" does therefore not seem to hold [Doherty, Andrea] In the scenario you describe you are correct, i.e., = one where there was not an authenticated channel. Even if this could = not/did not exist, user pre-authentication should help to ensure that = K_TOKEN is not delivered to a MITM.=20 =20 Section 3.3.2 in general: ----------------------------------- * The message content of ClientHello and ServerFinished should be = described here again, as it differs greately from the messages in = Section 3.3.1=20 [Doherty, Andrea] I think this is a great idea, and will incorporate.=20 * It could be mentioned for which use case teh 2-pass variant is = suiteable [Doherty, Andrea] Agree.=20 =20 Section 3.3.3. in general: ------------------------------------ * The content of the ServerFinished message should be described here = again, as it differs greately form the messages in Section 3.3.1 and it = relation to the ServerFinished message in Secion 3.3.2 is unclear [Doherty, Andrea] Agree.=20 =20 Section 3.4.1.3: ----------------------- * by "The DSKPP client includes the authentication data in its request = message..." do you mean the ClientHello message? This means that this = meachnism is not usable in connection with 1-pass DSKPP, right? [Doherty, Andrea] Yes, that is correct. I will make this more evident = to avoid confusion.=20 * does "...the client MUST use both the server nonce R_S and the = Authentication Code to derive authentication data" mean, that if the = underlying transport channel is insecure, then only 4-pass DSKPP can be = used, as only then there is an R_S?=20 [Doherty, Andrea]Yes, this is true. This calculation for AuthenticationData should be changed in accordance = with the attached from Salah. =20 Section 3.9.1.1: ----------------------- * Does this mean that K_AUTH is a secret key shared between the token = and the server and that it may be the old K_TOKEN or a seperate key? = I.e. for the 4-pass case, server and token are required to share at = least one secret key namely K_AUTH even if the server's publiv key is = used to encrypt R_C? [Doherty, Andrea] Please refer to Section 3.11.4 for a description of = the element. The primary use of the MAC is for when the protocol = run results in key renewal, and therefore K_TOKEN would be available. = However, if this a MAC is desired and there is not a pre-existing = K_TOKEN, then the Trigger message (i.e., "DSKPP Initialization", sec. = 3.11.2) could be used to provide K_AUTH in the form of a trigger nonce. = The value of this would depend, however, on whether the channel is = secure. * What is the relation between K_SHARED and K_AUTH? Shouldn't they be = mandated to be different?=20 [Doherty, Andrea]Yes, I agree that they should. This note provides some = rationale for this (taken from last paragraph of Section 3.8). * In case K_AUTH and K_TOKEN are equal, K_AUTH is updated with the new = K_TOKEN at the end of DSKPP? [Doherty, Andrea] In this case, K_AUTH is no longer needed at the end of = the protocol run. A new K_AUTH should be used for the next protocol run = if K_TOKEN is used as in the key renewal scenario. * What happens if there is no K_AUTH (in Section 3.9.1.2 this case is = treated, but in this section it is not covered)? The new K_TOKEN cannot = be used to protect the ServerHello message as the server cannot generate = it before receiving the ClientNonce [Doherty, Andrea] This case should be addressed in this section. If = there is no K_AUTH and no K_TOKEN (as would be the case if the old = K_TOKEN is not available; we cannot rely on the new K_TOKEN as you = mention), then there can be no MAC. =20 Section 3.9.1.2: [Doherty, Andrea] I think you meant Section 3.9.2.1.=20 ----------------------- * How is K_MAC provided to the token "together with K_TOKEN"? Does this = mean that both are sent in the ServerFinished message? [Doherty, Andrea] Yes, as this is the two-pass case, wherein K_TOKEN is = transported to the client. =20 Section 3.11.3: ---------------------- * Does the server check the KeyID provided by the client in the = ClientHello? [Doherty, Andrea]Yes, it should...I'll make mention of this.=20 =20 3.11.4: ---------- * : Does the client check whether an old K_TOKEN exisits and if it = does, reject ServerHello messages that do not have a MAC? [Doherty, Andrea] Good point; I'll add this as a "SHOULD".=20 =20 =20 Dr. Ulrike Meyer =20 Nokia Siemens Networks GmbH & Co. KG RTP NT NAS Otto-Hahn-Ring 6 D-81730 Muenchen=20 Phone: +49 89 636 41496 Fax: +49 89 636 48000 ulrike.meyer@nsn.com =20 Nokia Siemens Networks GmbH & Co. KG - Sitz der Gesellschaft/ Registered = office: M=FCnchen (Munich) - Registergericht /Commercial register: = M=FCnchen (Munich), HRA 88537 - WEEE-Reg.-No. DE 52984304. Pers=F6nlich = haftende Gesellschafterin /General Partner: Nokia Siemens Networks = Management GmbH - Gesch=E4ftsf=FChrer /Board of Directors: Christian = Unterberger, Joachim Malterer, Roland Meinzer - Sitz der Gesellschaft / = Registered office: M=FCnchen (Munich) - Registergericht /Commercial = register: M=FCnchen (Munich), HRB 163416 ------=20 =20 ------_=_NextPart_002_01C7BE6D.3A8B53BB Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Uli,
Thanks for your excellent comments.  = Please see=20 responses below.
Andrea

From: Meyer, Ulrike=20 [mailto:ulrike.meyer@nsn.com]
Sent: Tuesday, June 19, 2007 = 8:17=20 AM
To: keyprov@ietf.org
Subject: [KEYPROV] Comments = on=20 Section 2 and 3 of DSKPP draft

Hi = Andrea, Pei,=20 all,
 
here = are some review=20 comments on Section 3 of the DSKPP draft
 
Best=20 regards,
Uli
 
General:
------------
* The relation=20 between the different types of client authentication, server = authentication and=20 protocol variants is not very clear to me. In particular it is unclear = what is=20 mandatory and what optional, when the "secure channel" = assumption is=20 made and when not, and when the security of the protocol relies on = the=20 security properties of the underlying transport protocol. 
[Doherty, Andrea] = Ok...I'll try to=20 clarify this in the next = draft. 
* The relation=20 between the different protocol variants and the use cases / purposes for = which=20 they are designed is not clear
[Doherty, Andrea] Plan to add a section and/or = table to=20 indicate when to apply which protocol variant to which use=20 case. 
 
Section2:
-------------
* Page 13:=20 Definition of R_C and R_S could be completed with "and used as input to = the=20 generation of K_TOKEN"
[Doherty, Andrea] Agree, and will=20 add. 
* Page 13:=20 Definition of R could mention "mandatory for 2-pass, optional for=20 4-pass"
[Doherty,=20 Andrea] Agree, and will = add. 
* The notation=20 K_MAC' is used in Sections 3.9.3.1 and 3.9.3.2 but not defined here =
[Doherty, = Andrea]  Good=20 catch; will add.
 
Section 3.3.1 in=20 general:
-----------------------------------
* What is=20 meant by "provisioning of legacy keys"?
[Doherty, Andrea] "Legacy keys" are the same = thing as=20 pre-generated keys except that "legacy" implies a situation wherein = the=20 keys were generated and available for issuance before the protocol = was ever=20 implemented.  I'll either add these words, or simply state = "provisioning=20 pre-generated keys". 
* Paragraph=20 a.: there seems to be a repetition: "cryptographic algorithms supported = by the=20 token" and "encryption and MAC algorithms supported by the cryptographic = token"
[Doherty,=20 Andrea]Good catch - this is a typo that made it all the way through to = RFC in=20 the original CT-KIP spec! 
* it = is described=20 that the ClientHello includes the MAC algorithms supported by the token, = but=20 ServerHello and ServerFinished do not mention MAC1 and MAC2. This makes = it=20 difficult to understand immediately how the 4-pass-protocol is protected = against=20 Server impersonation
[Doherty, Andrea] Good point - will=20 add. 
* the optional=20 client nonce R seems to be missing in the description of=20 ClientHello
[Doherty,=20 Andrea] Yes, you're right.  This will be added (if even to = point out=20 that it is not required for 4-pass, although required for=20 2-pass). 
* the=20 supported variants of DSKPP (4-pass, 2-pass) is missing in the = description of=20 ClientHello (mentioned in 3.11.3)
[Doherty, Andrea] Will=20 add. 
* in c. the=20 verification of the server certificate (if K_SERVER is used) could be=20 mentioned
[Doherty,=20 Andrea] Ok. 
* Client=20 authentication should somehow be mentioned in this general description = of the=20 4-pass protocol, as otherwise it is unclear how the protocol protects = against=20 client impersonation
[Doherty,=20 Andrea] Ok. 
* Splitting=20 R_C in the two components R_C1 and R_C2 protects against token = impersonation in=20 the case K_SERVER is used. If this split is not used, and there is no=20 authenticated channel between client and server, and K_SERVER is used, = then the=20 protocol is vulnerable against token impersonation as in this case = anyone (not=20 only the token as in the case of K_SHARED) can compute R_C and therefore = anyone=20 would be able to request a new K_TOKEN from the server on behalf of the = token=20 and compute the token. In particular the sentence "The inclusion of the=20 encryption key K ensures that no man-in-the-middle MAY be present, or = else the=20 cryptographic token will end up with a key different from the one stored = by the=20 legitimate DSKPP server" does therefore not seem to hold
[Doherty, = Andrea] In the=20 scenario you describe you are correct, i.e., one where there was = not an=20 authenticated channel.  Even if this could not/did not exist, = user=20 pre-authentication should help to ensure that K_TOKEN is not delivered = to a=20 MITM. 
 
Section 3.3.2 in=20 general:
-----------------------------------
* The message=20 content of ClientHello and ServerFinished should be described here = again, as it=20 differs greately from the messages in Section 3.3.1
[Doherty, = Andrea] I think this=20 is a great idea, and will=20 incorporate. 
* It could be=20 mentioned for which use case teh 2-pass variant is suiteable
[Doherty,=20 Andrea] Agree. 
 
Section 3.3.3. in=20 general:
------------------------------------
* The content=20 of the ServerFinished message should be described here again, as it = differs=20 greately form the messages in Section 3.3.1 and it relation to the=20 ServerFinished message in Secion 3.3.2 is unclear
[Doherty,=20 Andrea] Agree. 
 
Section=20 3.4.1.3:
-----------------------
* by "The=20 DSKPP client includes the authentication data in its request message..." = do you=20 mean the ClientHello message? This means that this meachnism is not = usable in=20 connection with 1-pass DSKPP, right?
[Doherty, Andrea] Yes, that is correct.  I = will make=20 this more evident to avoid=20 confusion. 
* does "...the=20 client MUST use both the server nonce R_S and the Authentication Code to = derive=20 authentication data" mean, that if the underlying transport channel is = insecure,=20 then only 4-pass DSKPP can be used, as only then there is an R_S? =
[Doherty, Andrea]Yes, = this is=20 true.
This calculation = for=20 AuthenticationData should be changed in accordance with the = attached=20 from Salah.
 
Section=20 3.9.1.1:
-----------------------
* Does this=20 mean that K_AUTH is a secret key shared between the token and the = server=20 and that it may be the old K_TOKEN or a seperate key? I.e. for the = 4-pass case,=20 server and token are required to share at least one secret key namely = K_AUTH=20 even if the server's publiv key is used to encrypt R_C?
[Doherty, = Andrea] Please refer=20 to Section 3.11.4 for a description of the <Mac> element.  = The=20 primary use of the MAC is for when the protocol run results in key = renewal, and=20 therefore K_TOKEN would be available.  However, if this a MAC is = desired=20 and there is not a pre-existing K_TOKEN, then the Trigger message (i.e., = "DSKPP=20 Initialization", sec. 3.11.2) could be used to provide K_AUTH in the = form of a=20 trigger nonce.  The value of this would depend, however, on whether = the=20 channel is secure.
* What is the=20 relation between K_SHARED and K_AUTH? Shouldn't they be mandated to be=20 different?
[Doherty,=20 Andrea]Yes, I agree that they should.  This note provides some = rationale=20 for this (taken from last paragraph of Section=20 3.8).
* In case=20 K_AUTH and K_TOKEN are equal, K_AUTH is updated with the new K_TOKEN at = the end=20 of DSKPP?
[Doherty,=20 Andrea] In this case, K_AUTH is no longer needed at the end of the = protocol=20 run. A new K_AUTH should be used for = the next=20 protocol run if K_TOKEN is used as in the key renewal=20 scenario.
* What happens=20 if there is no K_AUTH (in Section 3.9.1.2 this case is treated, but in = this=20 section it is not covered)? The new K_TOKEN cannot be used to protect = the=20 ServerHello message as the server cannot generate it before receiving = the=20 ClientNonce
[Doherty,=20 Andrea] This case should be addressed in this section.  If = there is no=20 K_AUTH and no K_TOKEN (as would be the case if the old K_TOKEN is not = available;=20 we cannot rely on the new K_TOKEN as you mention), then there can be no=20 MAC.
 
Section=20 3.9.1.2:
[Doherty,=20 Andrea] I think you meant Section=20 3.9.2.1. 
-----------------------
* How is K_MAC=20 provided to the token "together with K_TOKEN"? Does this mean that = both are=20 sent in the ServerFinished message?
[Doherty, Andrea] Yes, as this is the two-pass = case, wherein=20 K_TOKEN is transported to the = client.
 
Section=20 3.11.3:
----------------------
* Does the=20 server check the KeyID provided by the client in the = ClientHello?
[Doherty, Andrea]Yes, = it=20 should...I'll make mention of=20 this. 
 
3.11.4:
----------
* <Mac>:=20 Does the client check whether an old K_TOKEN exisits and if it = does, reject=20 ServerHello messages that do not have a MAC?
[Doherty, = Andrea] Good point;=20 I'll add this as a = "SHOULD". 
 
 

Dr. Ulrike=20 Meyer

 

Nokia Siemens Networks GmbH & Co. KG

RTP NT NAS

Otto-Hahn-Ring 6

D-81730 Muenchen

Phone: +49 89 636 41496

Fax: +49 89 636 48000

ulrike.meyer@nsn.com

 

Nokia Siemens Networks GmbH & Co. KG - Sitz der = Gesellschaft/=20 Registered office: M=FCnchen (Munich) - Registergericht /Commercial = register:=20 M=FCnchen (Munich), HRA 88537 - WEEE-Reg.-No. DE 52984304. Pers=F6nlich = haftende=20 Gesellschafterin /General Partner: Nokia Siemens Networks Management = GmbH -=20 Gesch=E4ftsf=FChrer /Board of Directors: Christian Unterberger, Joachim = Malterer,=20 Roland Meinzer - Sitz der Gesellschaft / Registered office: M=FCnchen = (Munich) -=20 Registergericht /Commercial register: M=FCnchen (Munich), HRB 163416=20 ------ 

 
------_=_NextPart_002_01C7BE6D.3A8B53BB-- ------_=_NextPart_001_01C7BE6D.3A8B53BB Content-Type: application/msword; name="ct-kip-ws-authentication.doc" Content-Transfer-Encoding: base64 Content-Description: ct-kip-ws-authentication.doc Content-Disposition: attachment; filename="ct-kip-ws-authentication.doc" 0M8R4KGxGuEAAAAAAAAAAAAAAAAAAAAAPgADAP7/CQAGAAAAAAAAAAAAAAABAAAATQAAAAAAAAAA EAAAXAAAAAEAAAD+////AAAAAE4AAAD///////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ///////////////////////////////////////////////////////////////////////////s pcEAcWAJBAAA8BK/AAAAAAAAEAAAAAAABgAAKhoAAA4AYmpianFQcVAAAAAAAAAAAAAAAAAAAAAA AAAJBBYALjgAABM6AQATOgEAlBAAAIgBAAANAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD//w8AAAAA AAAAAAD//w8AAAAAAAAAAAD//w8AAAAAAAAAAAAAAAAAAAAAAKQAAAAAAGIFAAAAAAAAYgUAAGIF AAAQAAAAcgUAABAAAACCBQAAAAAAAIIFAAAAAAAAggUAABQAAAAAAAAAAAAAAJYFAAAAAAAA3hcA AAAAAADeFwAAAAAAAN4XAAA4AAAAFhgAAEwAAABiGAAAJAAAAJYFAAAAAAAAXzsAAGgBAACSGAAA AAAAAJIYAAAAAAAAkhgAAAAAAACSGAAAAAAAAJIYAAAAAAAAbRkAAAAAAABtGQAAAAAAAG0ZAAAA AAAA3joAAAIAAADgOgAAAAAAAOA6AAAAAAAA4DoAAAAAAADgOgAAAAAAAOA6AAAAAAAA4DoAACQA AADHPAAAaAIAAC8/AABWAAAABDsAABUAAAAAAAAAAAAAAAAAAAAAAAAAggUAAAAAAABtGQAAAAAA AAAAAAAAAAAAAAAAAAAAAABtGQAAAAAAAG0ZAAAAAAAAbRkAAAAAAABtGQAAAAAAAAQ7AAAAAAAA AAAAAAAAAACCBQAAAAAAAIIFAAAAAAAAkhgAAAAAAAAAAAAAAAAAAJIYAADbAAAAGTsAABYAAACJ HAAAAAAAAIkcAAAAAAAAiRwAAAAAAABtGQAA9AAAAIIFAAAAAAAAkhgAAAAAAACCBQAAAAAAAJIY AAAAAAAA3joAAAAAAAAAAAAAAAAAAIkcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAbRkAAAAAAADeOgAAAAAAAAAAAAAAAAAAiRwAAAAAAACJHAAA GgEAAHA3AABQAQAAggUAAAAAAACCBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODoAAAAAAACSGAAAAAAAAIYYAAAMAAAAAK0LIjei xwEAAAAAAAAAAN4XAAAAAAAAYRoAACQBAADAOAAAGgAAAAAAAAAAAAAA3joAAAAAAAAvOwAAMAAA AF87AAAAAAAA2jgAAF4BAACFPwAAAAAAAIUbAACsAAAAhT8AADQAAAA4OgAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4 OgAAJgAAAIU/AAAAAAAAAAAAAAAAAACCBQAAAAAAAF46AACAAAAAbRkAAAAAAABtGQAAAAAAAIkc AAAAAAAAbRkAAAAAAABtGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbRkA AAAAAABtGQAAAAAAAG0ZAAAAAAAABDsAAAAAAAAEOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAMRwAAFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG0ZAAAA AAAAbRkAAAAAAABtGQAAAAAAAF87AAAAAAAAbRkAAAAAAABtGQAAAAAAAG0ZAAAAAAAAbRkAAAAA AAAAAAAAAAAAAJYFAAAAAAAAlgUAAAAAAACWBQAAJAoAALoPAAAkCAAAlgUAAAAAAACWBQAAAAAA AJYFAAAAAAAAug8AAAAAAACWBQAAAAAAAJYFAAAAAAAAlgUAAAAAAACCBQAAAAAAAIIFAAAAAAAA ggUAAAAAAACCBQAAAAAAAIIFAAAAAAAAggUAAAAAAAD/////AAAAAAIADAEAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0NVXNl ciBBdXRoZW50aWNhdGlvbiBpbiBDVC1LSS1XUw1BcHJpbCAwNiAyMDA2DVNhbGFoIE1hY2hhbmkN DQ1UaGlzIGRvY3VtZW50IGRlc2NyaWJlcyBhIGZvcm1hdCBhbmQgYSBtZXRob2QgZ2VuZXJhdGlu ZyBhbiBhdXRob3JpemF0aW9uIGNvZGUgYW5kIGEgbWV0aG9kIGZvciB1c2luZyB0aGUgYXV0aG9y aXphdGlvbiBjb2RlIGluIGN0LWtpcC13cyBpbiBvcmRlciB0byBzZWN1cmVseSBwcm92aXNpb24g bmV3IE9UUCB0b2tlbnMuDTEuIEF1dGhvcml6YXRpb24gQ29kZSAob3IgYXV0aHpDb2RlKSBHZW5l cmF0aW9uDQ1UaGUgIGF1dGh6Q29kZSBpcyBnZW5lcmF0ZWQgZHVyaW5nIHRoZSB0b2tlbiBvcmRl cmluZyBwcm9jZXNzIGFzIGNvbWJpbmF0aW9uIG9mIGEgdW5pcXVlIGlkZW50aWZpZXIgKGF1dGh6 Q29kZS0+Y3NuICkgYW5kIGEgcGFzc3dvcmQgKGF1dGh6Q29kZS0+cGFzc3dvcmQpLiBUaGUgYXV0 aHpDb2RlIG11c3QgYmUgaHVtYW4gcmVhZGFibGUgYW5kIHNob3VsZCBpbmNsdWRlIG51bWVyaWMg Y2hhcmFjdGVycyBvbmx5LiAgT25lIGZvcm1hdCBmb3IgZ2VuZXJhdGluZyB0aGUgYXV0aHpDb2Rl IGlzIGRlc2NyaWJlZCBpbiBzZWN0aW9uIDMuIEEgc2ltcGxlIGZvcm1hdCB3b3VsZCBiZSBjb25j YXRlbmF0ZSBhIGZpeGVkIGxlbmd0aCBpZGVudGlmaWVyIGUuZy4gMTAgZGlnaXRzIHdpdGggYSBm aXhlZCBsZW5ndGggcGFzc3dvcmQgZS5nLiA2IGRpZ2l0cy4gDUEgY29weSBvZiB0aGUgYXV0aHpD b2RlIGlzIHByb3ZpZGVkIHRvIHRoZSBlbmQgdXNlciBhbmQgYW5vdGhlciBjb3B5IGlzIHN0b3Jl ZCBpbiB0aGUgc2VydmVyIGZvciBsYXRlciB2ZXJpZmljYXRpb24uIFRoZSBlbmQgdXNlcpJzIGNv cHkgc2hvdWxkIGJlIGNvbW11bmljYXRlZCB0byB0aGUgZW5kIHVzZXIgdXNpbmcgYSBzZWN1cmUg bWV0aG9kICh0aG9yb3VnaCBhIHNlY3VyZSBicm93c2VyIHNlc3Npb24gaW4gc2VsZi1lbnJvbGxt ZW50IHNjZW5hcmlvIG9yIG91dCBvZiBiYW5kIGluIGNzci9hZG1pbiBhc3Npc3RlZCBlbnJvbGxt ZW50KS4gICBUaGUgc2VydmVyIHNpZGUgY29weSBzaG91bGQgYmUgc3RvcmVkIHByb3RlY3RlZC4g IFRoZSBzZXJ2ZXIgbWF5IHN0b3JlIHRoZSBhdXRoekNvZGUtPmNzbiBwb3J0aW9uIGZvciB1c2Ug YXMgYW4gaW5kZXggYW5kIHRoZSBoYXNoIG9mIHRoZSBhdXRoekNvZGUtPnBhc3N3b3JkIHBvcnRp b24gZm9yIHVzZSBkdXJpbmcgYXV0aGVudGljYXRpb24uICANVGhlIGVuZCB1c2VyIHByb3ZpZGVz IHRoZSBhdXRoekNvZGUgZHVyaW5nIHRoZSBwcm92aXNpb25pbmcgb2YgdGhlIHRva2VuIHNlZWQg YnkgZW50ZXJpbmcgdGhlIGF1dGh6Q29kZSBhdCB0aGUgcHJvbXB0IG9uIGhpcyBkZXZpY2UgKG1v YmlsZSBvciBQQykuDTIuIGN0LWtpcC13czphdXRoRGF0YSBDYWxjdWxhdGlvbg0NVGhlIDxhdXRo RGF0YT4gZWxlbWVudCBpcyBpbnRyb2R1Y2VkIGluIGN0LWtpcC13cyB0byBhbGxvdyB0aGUgY3Qt a2lwLXdzIHNlcnZpY2UgYXV0aGVudGljYXRlIHRoZSB1c2VyIGluaXRpYXRpbmcgdGhlIGN0LWtp cCBwcm90b2NvbCBhbmQgaW4gdGhlIHByb3Bvc2VkIHNjaGVtZSB0byBtYWtlIHRoZSBEb1MgaGFy ZGVyIGFuZCBwcmV2ZW50IGFnYWluc3QgY3Qta2lwIHNlc3Npb24gaGlqYWNraW5nLg0NDVVzZXIg c3RhcnMgU1dUIGFwcGxpY2F0aW9uIGFuZCBzZWxlY3RzIJNEb3dubG9hZCBUb2tlbpQgb3B0aW9u DVNXVCBwcm9tcHRzIHVzZXIgdG8gZW50ZXIgc2VydmVyIFVSTCAoc2VydmVyVVJMKSBhbmQgYXV0 aG9yaXphdGlvbiBjb2RlIChhdXRoekNvZGUpDVVzZXIgZW50ZXJzIHNlcnZlclVSTCBhbmQgYXV0 aHpDb2RlIA1TV1QgdmVyaWZpZXMgYW5kIHBhcnNlcyBhdXRob3JpemF0aW9uIGNvZGUgYW5kIGV4 dHJhY3RzIGF1dGh6Q29kZS0+SUQgYW5kIGF1dGh6Q29kZS0+cGFzc3dvcmQgZnJvbSBhdXRoekNv ZGUuDVNXVCBhcHBsaWNhdGlvbiBjYWxjdWxhdGVzIGF1dGhEYXRhIGZyb20gYXV0aHpDb2RlLT5J RCwgYXV0aHpDb2RlLT5wYXNzd29yZCBhbmQgc2VydmVyVVJMIHRoZW4gY3JlYXRlcyBhbmQgc2Vu ZHMgY3RraXA6Q2xpZW50UmVxdWVzdDEgIHRvIHRoZSBzZXJ2ZXINVGhlIHNlcnZlciB2ZXJpZmll cyB0aGUgYXV0aERhdGEgaW4gY3RraXAtd3M6Q2xpZW50UmVxdWVzdDEgYW5kIGlmIHZhbGlkIHBy b2Nlc3NlcyB0aGUgY3RraXA6Q2xpZW50SGVsbG8gUERVIGFuZCByZXR1cm5zIGN0a2lwLXdzOlNl cnZlclJlc3BvbnNlMS4gVGhlIGN0a2lwLXdzOlNlcnZlclJlc3BvbnNlMSBpbmNsdWRlcyBhIHNl cnZlciBub25jZQIgaW4gdGhlIGF1dGhEYXRhIGZpZWxkLiANVGhlIFNXVCBhcHBsaWNhdGlvbiBw YXJlc2VzIGN0a2lwLXdzOlNlcnZlclJlc3BvbnNlMSwgcHJvY2Vzc2VzICBjdGtpcDpTZXJ2ZXJI ZWxsbyBQRFUgYW5kIGNhbGN1bGF0ZXMgYSBuZXcgYXV0aERhdGEgZnJvbSBhdXRoekNvZGUtPklE LCBhdXRoekNvZGUtPnBhc3N3b3JkLCBzZXJ2ZXJVUkwgYW5kIGN0a2lwLXdzOlNlcnZlclJlc3Bv bnNlMS0+YXV0aERhdGECIHRoZW4gY3JlYXRlcyBhbmQgc2VuZHMgY3RraXA6Q2xpZW50UmVxdWVz dDIgdG8gdGhlIHNlcnZlcg1UaGUgc2VydmVyIHZlcmlmaWVzIHRoZSBhdXRoRGF0YSBpbiBjdGtp cC13czpDbGllbnRSZXF1ZXN0MiBhbmQgaWYgdmFsaWQgcHJvY2Vzc2VzIHRoZSBjdGtpcDpDbGll bnROb25jZSBQRFUgYW5kIHJldHVybnMgY3RraXAtd3M6U2VydmVyUmVzcG9uc2UyIA0NVGhlIGF1 dGh6RGF0YSBpbiBjdGtpcC13czpDbGllbnRSZXF1ZXN0MSB3aWxsIGJlIGNhbGN1bGF0ZWQgYXMg Zm9sbG93cw0NDWF1dGhEYXRhID0gYXV0aHpDb2RlLT5JRHx8QjY0KERpZ2VzdCkNDVdoZXJlIA0N RGlnZXN0ID0gQ1QtS0lQLVBSRi1BRVMgKEtfQVVUSCwgYXV0aHpDb2RlLT5JRCB8fCBzZXJ2ZXJV UkwsIDE2KQ0NDVRoZSBhdXRoekRhdGEgaW4gY3RraXAtd3M6Q2xpZW50UmVxdWVzdDIgd2lsbCBi ZSBjYWxjdWxhdGVkIGFzIGZvbGxvd3MNDWF1dGhEYXRhID0gYXV0aHpDb2RlLT5JRHx8QjY0KERp Z2VzdCkNDXdoZXJlOg0NRGlnZXN0ID0gQ1QtS0lQLVBSRi1BRVMgKEtfQVVUSCwgIGF1dGh6Q29k ZS0+SUQgfHwgc2VydmVyVVJMfHwgU2VydmVyTm9uY2UsIDE2KSANDVNlcnZlck5vbmNlIGlzIHRo ZSBTZXJ2ZXIgbm9uY2UgdGhhdCBpcyByZXR1cm5lZCBpbiB0aGUgY3RraXA6U2VydmVyUmVzcG5z ZTEtPmF1dGhEYXRhDQ1LX0FVVEggaXMgYSBkZXJpdmVkIEFFUyBrZXkgZnJvbSBhdXRoekNvZGUt PnBhc3N3b3JkLiAgS19BVVRIIGlzIGRlcml2ZWQgYXMgZm9sbG93czoNDUtfQVVUSCA9IHRydW5j YXRlKFNIQS0xKFNIQS0xKC4uLm4gdGltZXMuLi4oYXV0aHpDb2RlLT5wYXNzd29yZCkpKSkgDQ1X aGVyZQ0NdHJ1bmNhdGUoKSBmdW5jdGlvbiByZXR1cm5zIHRoZSBmaXJzdCAxNiBieXRlcyBmcm9t IHRoZSByZXN1bHQgb2YgdGhlIGxhc3QgU0hBLTEgaXRlcmF0aW9uLg0NbiBpcyBudW1iZXIgb2Yg aGFzaCBpdGVyYXRpb25zLiAgbiB3aWxsIGJlIHNldCB0byBmaXhlZCB2YWx1ZSBiZXR3ZWVuIDEw IGFuZCAxMDANMy4gYXV0aG9yaXphdGlvbkNvZGUgRm9ybWF0DQ1hdXRob3JpemF0aW9uLWNvZGU9 IHBhc3Nvd3JkX2xlbmd0aHx8aWRlbnRpZmllcnx8cGFzc3dvcmR8fGNoZWNrc3VtDQ0ob3IgYXMg YXV0aG9yaXphdGlvbi1jb2RlPSByYW5kb21fbGVuZ3RofHxzZXFfbnVtfHxyYW5kb218fGNoZWNr c3VtKQ0NV2hlcmU6DXBhc3N3b3JkX2xlbmd0aDogMSBkaWdpdCBpbmRpY2F0aW5nIHRoZSBwYXNz d29yZCBsZW5ndGguIFRoZSBtYXhpbXVtIGxlbmd0aCBvZiB0aGUgcGFzc3dvcmQgaXMgMTAuIA1p ZGVudGlmaWVyOiBhIGdsb2JhbGx5IHVuaXF1ZSBpZGVudGlmaWVyIG9mIHRoZSB1c2VyknMgcmVm ZXJlbnRpYWwgYWNjb3VudC9vcmRlci6gVGhlIGxlbmd0aCBvZiBpZGVudGlmaWVyIG1heSBiZSBm aXhlZCBlLmcuIDEwIGRpZ2l0cyBvciB2YXJpYWJsZSBpLmUuIDEgdG8gMTAgZGlnaXRzICh0aGlz IGNhbiBiZSBpbmNyZWFzZWQgdG8gdXAgdG8gMjAgIGRpZ2l0cykuDXBhc3N3b3JkOiA0IHRvIDEw IGRpZ2l0cy4gVGhlIHBhc3N3b3JkIHNob3VsZCBiZSBnZW5lcmF0ZWQgYnkgdGhlIHN5c3RlbSBh cyBhIHJhbmRvbSBudW1iZXIgdG8gbWFrZSB0aGUgYXV0aHpDb2RlIG1vcmUgZGlmZmljdWx0IHRv IGd1ZXNzLg1jaGVja3N1bTogMSBkaWdpdCBjYWxjdWxhdGVkIGZyb20gdGhlIHJlbWFpbmluZyBk aWdpdHMgaW4gdGhlIGNvZGUuDQ0NAiBUaGlzIHNlcnZlciBub25jZSBpcyBkaWZmZXJlbnQgZnJv bSB0aGUgY3Qta2lwIHByb3RvY29sIHNlcnZlck5vbmNlIFJzLiAgDQIgVGhlIGF1dGhEYXRhIGNv bnRhaW5zIHRoZSBzZXJ2ZXIgbm9uY2UgZ2VuZXJhdGVkIGluIHN0ZXAgNi4gSXQgaXMgcG9zc2li bGUgdG8gdXNlIHRoZSBub25jZSBScyBmcm9tIHRoZSBjdC1raXAgU2VydmVySGVsbG8gUERVIGhv d2V2ZXIsIGJ5IGRvaW5nIHNvIHRoZSBzZXJ2ZXIgd291bGQgaGF2ZSB0byBwYXJzZSB0aGUgY3Rr aXA6IENsaWVudE5vbmNlUERVIGluIHN0ZXAgOCBiZWZvcmUgdmVyaWZ5aW5nIHRoZSBhdXRoRGF0 YSBJLGUuIG1ha2luZyB1c2VyIGF1dGhlbnRpY2F0aW9uIGRlcGVuZGVudCBvbiBjdGtpcCBQRFUg aW5mb3JtYXRpb24uDQ0DDQ0EDQ0DDQ0EDQ0NDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYAAAEIAAACCAAAPggA AEAIAACPCAAAkwgAAKAIAADTCAAA1ggAAN8IAADoCAAA6QgAAPYIAAD3CAAA+AgAAPkIAAD8CAAA CwkAACgJAAApCQAAKgkAAC4JAAAvCQAAOAkAADkJAABoCQAAaQkAAGoJAACOCQAAjwkAAJ4JAACg CQAArgkAALAJAADy7uLayLnIuci5yLnIuci52rGpoZOLgG+Ai4CLgGdcZ4BnAAAAAAAAAAAAABQV aIs2wAAWaGw+5wBDShQAYUoUAAAOFmhsPucAQ0oUAGFKFAAAIBVoizbAABZo6E9rAENKFABPSgMA UUoDAF5KAwBhShQAABQVaIs2wAAWaOhPawBDShQAYUoUAAAOFmgiL/QAQ0oUAGFKFAAAGhZo6E9r AENKFABPSgMAUUoDAF5KAwBhShQAAA4WaOhPawBDShYAYUoWAAAOFmiLNsAAQ0oWAGFKFgAADhZo UFoaAENKFgBhShYAAB0WaH0zdAA1CIFDShYAT0oAAFFKAABeSgAAYUoWACMVaH0zdAAWaH0zdAA1 CIFDShYAT0oAAFFKAABeSgAAYUoWAA4WaH0zdABDShYAYUoWAAAXFWh9M3QAFmh9M3QANQiBQ0oc AGFKHAAGFmjtPwwAABoWaOhPawBDShQAT0oCAFFKAgBeSgIAYUoUACIABgAAAQgAAAIIAAAiCAAA MAgAAD4IAAA/CAAAQAgAAPkIAAApCQAAKgkAANYKAADWDAAAag0AAIwNAACNDQAAcw4AAHQOAAB1 DgAAtA4AAAgPAAAtDwAAmw8AADAQAAAREQAA+gAAAAAAAAAAAAAAAPgAAAAAAAAAAAAAAADzAAAA AAAAAAAAAAAA8wAAAAAAAAAAAAAAAPMAAAAAAAAAAAAAAADuAAAAAAAAAAAAAAAA7gAAAAAAAAAA AAAAAO4AAAAAAAAAAAAAAADuAAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAOYAAAAAAAAAAAAAAADe AAAAAAAAAAAAAAAA5gAAAAAAAAAAAAAAAO4AAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA2QAAAAAA AAAAAAAAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAA AADRAAAAAAAAAAAAAAAA0QAAAAAAAAAAAAAAANEAAAAAAAAAAAAAAADRAAAAAAAAAAAAAAAAAAAA AAAACAAACiYAC0YGAGdkBgiWAAAEAABnZFxTggAIAAAKJgALRg0AZ2QiL/QACAAACiYAC0YNAGdk rG1fAAAEAwBnZOhPawAABAAAZ2R9M3QAAAEAAAAEAABnZOhPawAAGAAGAACUGAAAHBoAACkaAAD+ /v4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAQEDsAkAAMMJAADECQAATQoAANUK AADWCgAA5AoAAO4KAAD9CgAACgsAAEkLAABLCwAAdQsAAHYLAACGCwAADQwAACgMAABaDAAAaQwA AIkMAACZDAAArAwAANQMAADWDAAA1wwAADQNAAA6DQAAUw0AAFsNAABnDQAAaA0AAGkNAABqDQAA bQ0AAG4NAACBDQAAjA0AAI0NAADv4dbL1sPLw8vDy8PLw8vDu7C7sJ+7sMOXu5e7l7uXjIR8hHRm AAAAAAAAAAAAAAAAAAAAGhZoHBIrAENKFABPSgMAUUoDAF5KAwBhShQAAA4WaOhPawBDShYAYUoW AAAOFmgcEisAQ0oWAGFKFgAADhZoUFoaAENKFgBhShYAABQVaIs2wAAWaKxtXwBDShQAYUoUAAAO FmisbV8AQ0oUAGFKFAAAIBVodkNOABZoIi/0AENKFABPSgMAUUoDAF5KAwBhShQAABQVaIs2wAAW aCIv9ABDShQAYUoUAAAOFmhsPucAQ0oUAGFKFAAADhZoIi/0AENKFABhShQAABQVaIs2wAAWaBwS KwBDShQAYUoUAAAUFWiLNsAAFmjoT2sAQ0oUAGFKFAAAGhZobD7nAENKFABPSgMAUUoDAF5KAwBh ShQAACAVaHZDTgAWaGw+5wBDShQAT0oDAFFKAwBeSgMAYUoUACWNDQAAkQ0AAJINAACaDQAAmw0A AJwNAACkDQAApw0AAMcNAAD0DQAA/g0AABMOAABQDgAAdA4AAJwOAACdDgAAqw4AALMOAADUDgAA 1Q4AANkOAADaDgAA4w4AAOUOAAD7DgAA/Q4AAAYPAAAHDwAAFA8AAB0PAAAiDwAAKw8AACwPAAA+ DwAARA8AAGMPAABkDwAAZQ8AAHIPAAB3DwAAig8AAJAPAACaDwAAtg8AAL4PAADEDwAA0Q8AANMP AADmDwAA6w8AAPQPAAAMEAAAEhAAAPXk0+T1y/XD9bj1w7iwy7DLsMuwy+TLsMvky7CfsOTLsJew y7CfsJ+wn7CfsJ+wn7CfsIkAAAAAAAAAAAAAGhZoizbAAENKFABPSgMAUUoDAF5KAwBhShQAAA4W aHYChwBDShQAYUoUAAAgFWiLNsAAFmgGCJYAQ0oUAE9KAwBRSgMAXkoDAGFKFAAADhZoBgiWAENK FABhShQAABQVaFBaGgAWaFBaGgBDShQAYUoUAAAOFmhcU4IAQ0oUAGFKFAAADhZoizbAAENKFABh ShQAACAVaIs2wAAWaBwSKwBDShQAT0oDAFFKAwBeSgMAYUoUAAAgFWiLNsAAFmiLNsAAQ0oUAE9K AwBRSgMAXkoDAGFKFAAAFBVoUFoaABZoHBIrAENKFABhShQANBIQAAAhEAAASBAAAFAQAABUEAAA ZhAAAGcQAABoEAAAahAAAGsQAACHEAAAmBAAAKkQAACyEAAAwRAAAMcQAADQEAAA3xAAAOsQAAD3 EAAA+BAAAAkRAAAOEQAADxEAABERAAASEQAALREAADYRAABFEQAAUhEAAGMRAAB9EQAAhREAAIsR AACYEQAAmhEAAK0RAAC9EQAAxhEAANURAADfEQAA4BEAAPgRAAAHEgAACBIAAAkSAAALEgAADBIA AD8SAABFEgAAUxIAAPLq2ery2fLZ8urZ6tnyy7ryy6mVy4rL6oLq2fLq2erZ6tnq2erZ8suV6vLZ 8tny6tnyAAAAAAAADhZoizbAAENKFABhShQAABQVaL89HQAWaL89HQBDShQAYUoUAAAnA2oAAAAA Fmi/PR0AMEoQAENKFABPSgMAUUoDAFUIAV5KAwBhShQAIBVovz0dABZovz0dAENKFABPSgMAUUoD AF5KAwBhShQAACAVaIs2wAAWaL89HQBDShQAT0oDAFFKAwBeSgMAYUoUAAAaFmi/PR0AQ0oUAE9K AwBRSgMAXkoDAGFKFAAAIBVoizbAABZoBgiWAENKFABPSgMAUUoDAF5KAwBhShQAAA4WaAYIlgBD ShQAYUoUAAAaFmhcU4IAQ0oUAE9KAwBRSgMAXkoDAGFKFAAyEREAABsSAACuEgAArxIAAPYSAAD3 EgAA+BIAAB4TAAAfEwAAJhMAACcTAABoEwAAaRMAAGoTAACxEwAAshMAANgTAADZEwAA4BMAAOET AAAyFAAAMxQAAIoUAACLFAAA4BQAAOEUAAD3AAAAAAAAAAAAAAAA9wAAAAAAAAAAAAAAAPIAAAAA AAAAAAAAAADyAAAAAAAAAAAAAAAA8gAAAAAAAAAAAAAAAPIAAAAAAAAAAAAAAADtAAAAAAAAAAAA AAAA7QAAAAAAAAAAAAAAAO0AAAAAAAAAAAAAAADtAAAAAAAAAAAAAAAA5QAAAAAAAAAAAAAAAO0A AAAAAAAAAAAAAADtAAAAAAAAAAAAAAAA4AAAAAAAAAAAAAAAAO0AAAAAAAAAAAAAAADtAAAAAAAA AAAAAAAA7QAAAAAAAAAAAAAAAO0AAAAAAAAAAAAAAADtAAAAAAAAAAAAAAAA2AAAAAAAAAAAAAAA AO0AAAAAAAAAAAAAAADYAAAAAAAAAAAAAAAA8gAAAAAAAAAAAAAAAPIAAAAAAAAAAAAAAADyAAAA AAAAAAAAAAAAAAAACAAACiYAC0YJAGdkdgKHAAAEAABnZHYChwAIAAAKJgALRgoAZ2R2AocAAAQA AGdkUFoaAAAEAABnZOhPawAIAAAKJgALRgYAZ2QGCJYAABlTEgAAVRIAAFYSAAByEgAAgxIAAJQS AACdEgAArBIAAK8SAACzEgAAvBIAAMASAADYEgAA9RIAAPYSAAD3EgAA+BIAAB8TAAAkEwAAJhMA AGgTAADv4dnI2bfh2azvrKSsmY1/al9URgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAABoWaFBaGgBDShQAT0oDAFFKAwBeSgMAYUoUAAAUFWgabCAAFmhQWhoAQ0oUAGFKFAAAFBVo GmwgABZodgKHAENKFABhShQAACgVaCIv9AAWaFBaGgBDShQAT0oDAFFKAwBeSgMAYUoUAG1IBwRz SAcEABoWaBwSKwBDShQAT0oDAFFKAwBeSgMAYUoUAAAXFWhQWhoAFmh2AocAPioBQ0oUAGFKFAAU FWh2AocAFmhQWhoAQ0oUAGFKFAAADhZoXFOCAENKFABhShQAABQVaHYChwAWaHYChwBDShQAYUoU AAAgFWi/PR0AFmgGCJYAQ0oUAE9KAwBRSgMAXkoDAGFKFAAAIBVoizbAABZoBgiWAENKFABPSgMA UUoDAF5KAwBhShQAAA4WaAYIlgBDShQAYUoUAAAaFmhcU4IAQ0oUAE9KAwBRSgMAXkoDAGFKFAAA IBVoizbAABZodgKHAENKFABPSgMAUUoDAF5KAwBhShQAFGgTAABqEwAAexMAAJMTAACxEwAAshMA ANkTAADeEwAAAhQAABEUAAArFAAAMxQAAD4UAAA/FAAAThQAAFwUAABrFAAAiRQAAIoUAACLFAAA kRQAAJIUAACsFAAAtxQAAO/k3OTOua6gzpKghKDcedxoeaBXTORXAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAFBVodgKHABZo6E9rAENKFABhShQAACAVaHYChwAWaOhPawBDShQAT0oD AFFKAwBeSgMAYUoUAAAgFWhcU4IAFmhcU4IAQ0oUAE9KAwBRSgMAXkoDAGFKFAAAFBVodgKHABZo UFoaAENKFABhShQAABoWaFxTggBDShQAT0oDAFFKAwBeSgMAYUoUAAAaFmi/PR0AQ0oUAE9KAwBR SgMAXkoDAGFKFAAAGhZoUFoaAENKFABPSgMAUUoDAF5KAwBhShQAABQVaBpsIAAWaFBaGgBDShQA YUoUAAAoFWgiL/QAFmhQWhoAQ0oUAE9KAwBRSgMAXkoDAGFKFABtSAcEc0gHBAAaFmh2AocAQ0oU AE9KAwBRSgMAXkoDAGFKFAAADhZoXFOCAENKFABhShQAABQVaHYChwAWaHYChwBDShQAYUoUAAAg FWh2AocAFmhQWhoAQ0oUAE9KAwBRSgMAXkoDAGFKFAAXtxQAAL8UAADCFAAAyBQAAN8UAADgFAAA DRUAACAVAAAtFQAALhUAAC8VAAA5FQAAiBUAAI0VAACQFQAAthUAAMkVAADVFQAA2xUAANwVAADf FQAA8RUAAPIVAAD3FQAA+BUAAPkVAAA9FgAAPhYAAF8WAADv5O/k2cu9y6+hy9nL2ZbZltmOioaC hn6GbV9RAAAAAAAAAAAAAAAAAAAAAAAAGhZoGmwgAENKFABPSgMAUUoDAF5KAwBhShQAABoWaBwS KwBDShQAT0oDAFFKAwBeSgMAYUoUAAAgFWgcEisAFmgcEisAQ0oUAE9KAwBRSgMAXkoDAGFKFAAA BhZo6E9rAAAGFmiLNsAAAAYWaBwSKwAABhZodgKHAAAOFmjoT2sAQ0oUAGFKFAAAFBVodgKHABZo UFoaAENKFABhShQAABoWaFxTggBDShQAT0oDAFFKAwBeSgMAYUoUAAAaFmh2AocAQ0oUAE9KAwBR SgMAXkoDAGFKFAAAGhZoUFoaAENKFABPSgMAUUoDAF5KAwBhShQAABoWaOhPawBDShQAT0oDAFFK AwBeSgMAYUoUAAAUFWh2AocAFmjoT2sAQ0oUAGFKFAAAFBVodgKHABZodgKHAENKFABhShQAACAV aHYChwAWaHYChwBDShQAT0oDAFFKAwBeSgMAYUoUABzhFAAAJhUAACcVAAAtFQAALhUAAIoVAACL FQAA3BUAAPgVAAD5FQAAPRYAAD4WAACDFgAAhBYAAIsWAADvFgAAwxcAAE4YAACSGAAAkxgAAJQY AADgGAAAGxoAABwaAAAeGgAAHxoAAPoAAAAAAAAAAAAAAAD6AAAAAAAAAAAAAAAA+gAAAAAAAAAA AAAAAPoAAAAAAAAAAAAAAADyAAAAAAAAAAAAAAAA+gAAAAAAAAAAAAAAAPIAAAAAAAAAAAAAAADt AAAAAAAAAAAAAAAA6wAAAAAAAAAAAAAAAOYAAAAAAAAAAAAAAADmAAAAAAAAAAAAAAAA4QAAAAAA AAAAAAAAAOYAAAAAAAAAAAAAAADmAAAAAAAAAAAAAAAA2QAAAAAAAAAAAAAAANkAAAAAAAAAAAAA AADZAAAAAAAAAAAAAAAA2QAAAAAAAAAAAAAAAOYAAAAAAAAAAAAAAADrAAAAAAAAAAAAAAAA1wAA AAAAAAAAAAAAANcAAAAAAAAAAAAAAADrAAAAAAAAAAAAAAAA6wAAAAAAAAAAAAAAAOsAAAAAAAAA AAAAAAAAAAEPAAgAAAomAAtGCABnZHYChwAABAAAZ2QabCAAAAQAAGdkHBIrAAABAAAABAMAZ2R2 AocACAAACiYAC0YLAGdkdgKHAAAEAABnZOhPawAAGV8WAABoFgAAbxYAAHEWAAB3FgAAgRYAAIIW AACEFgAAixYAAJoWAADvFgAA+RYAAAMXAAAMFwAAixcAAMEXAADDFwAAyxcAAMwXAADNFwAAThgA AFYYAACSGAAAkxgAAJQYAACVGAAA2xgAANwYAADeGAAA3xgAAOAYAADhGAAAmRkAAKoZAACvGQAA /hkAAAAaAAAZGgAAGhoAABsaAAAcGgAA7+Hv4e/h79bF1sXWvda91sXWvdbF1q+roZ2VkJ2JoZ18 comdiXKdbgAAAAAAAAAAAAAAAAAAAAAGFmgCSlYAABIWaLg5CQBPSgMAUUoDAF5KAwAAGBVoizbA ABZouDkJAE9KAwBRSgMAXkoDAAAMFWi/PR0AFmi4OQkAAAkWaLg5CQBIKgIPFWi/PR0AFmi4OQkA SCoCBhZouDkJAAATA2oAAAAAFmi4OQkAMEoQAFUIAQYWaBwSKwAAGhZoHBIrAENKFABPSgMAUUoD AF5KAwBhShQAAA4WaBpsIABDShQAYUoUAAAgFWgabCAAFmgcEisAQ0oUAE9KAwBRSgMAXkoDAGFK FAAAFBVoGmwgABZoHBIrAENKFABhShQAABoWaBpsIABDShQAT0oDAFFKAwBeSgMAYUoUAAAgFWgc EisAFmgabCAAQ0oUAE9KAwBRSgMAXkoDAGFKFAAoHBoAAB0aAAAfGgAAIBoAACIaAAAjGgAAJRoA ACYaAAApGgAAKhoAAPfz9/P38/fz7wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYWaBwS KwAABhZoAkpWAAAPA2oAAAAAFmgCSlYAVQgBAAkfGgAAIRoAACIaAAAkGgAAJRoAACcaAAAoGgAA KRoAACoaAAD9AAAAAAAAAAAAAAAA/QAAAAAAAAAAAAAAAP0AAAAAAAAAAAAAAAD9AAAAAAAAAAAA AAAA/QAAAAAAAAAAAAAAAP0AAAAAAAAAAAAAAAD9AAAAAAAAAAAAAAAA/QAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAACCwAMZBoAR+w0C8gsOA9IbAIByKwCAcjkKAFJJCg BSWwAAAXsNACGLDQAgyQ0AIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAIYCEgASAAEAnAAPAAQAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAEDx/wIAQAAMBAAAAAAA AAAABgBOAG8AcgBtAGEAbAAAAAIAAAAYAENKGABfSAEEYUoYAG1ICQRzSAkEdEgJBAAAnAACQAEA AgCcAA0AAADcTsIAAAApAEgAZQBhAGQAaQBuAGcAIAAyACwAaAAyACwAMgBuAGQAIABsAGUAdgBl AGwALABIADIALABVAE4ARABFAFIAUgBVAEIAUgBJAEsAIAAxAC0AMgAAABcAAgAGJAEKJgELRgMA E6TwABSkeABAJgEAFwA1CIFDShwAT0oCAFFKAgBtSAkQc0gJEABWAANAAQAyAFYADAAAAOhPawAA AAkASABlAGEAZABpAG4AZwAgADMAAAAQAAMABiQBE6TwABSkPABAJgIaADUIgUNKGgBPSgIAUUoC AFwIgV5KAgBhShoAAAAAAAAAAAAAAAAARABBQPL/oQBEAAwFAAAAAAAAAAAWAEQAZQBmAGEAdQBs AHQAIABQAGEAcgBhAGcAcgBhAHAAaAAgAEYAbwBuAHQAAAAAAFIAaUDz/7MAUgAMBQAAAAAAAAAA DABUAGEAYgBsAGUAIABOAG8AcgBtAGEAbAAAABwAF/YDAAA01gYAAQoDbAA01gYAAQUDAABh9gMA AAIACwAAACgAa0D0/8EAKAAABQAAAAAAAAAABwBOAG8AIABMAGkAcwB0AAAAAgAAAAAAAAA+AB1A AQDyAD4ADAUAABpsIAAAAA0ARgBvAG8AdABuAG8AdABlACAAVABlAHgAdAAAAAIADwAIAENKFABh ShQAQAAmQKIAAQFAAAwFAAAabCAAAAASAEYAbwBvAHQAbgBvAHQAZQAgAFIAZQBmAGUAcgBlAG4A YwBlAAAAAwBIKgEASACZAAEAEgFIAAwFAAB2Q04AAAAMAEIAYQBsAGwAbwBvAG4AIABUAGUAeAB0 AAAAAgARABQAQ0oQAE9KBABRSgQAXkoEAGFKEAD3CAAA3wkAACoSAAABAAIAAAAAAEwAAACHAQAA igEAAAAAAAAqEgAACAAAOAAABgD/////AAAAAAEAAAACAAAAIgAAADAAAAA+AAAAPwAAAEAAAAD5 AAAAKQEAACoBAADWAgAA1gQAAGoFAACMBQAAjQUAAHMGAAB0BgAAdQYAALQGAAAIBwAALQcAAJsH AAAwCAAAEQkAABsKAACuCgAArwoAAPYKAAD3CgAA+AoAAB4LAAAfCwAAJgsAACcLAABoCwAAaQsA AGoLAACxCwAAsgsAANgLAADZCwAA4AsAAOELAAAyDAAAMwwAAIoMAACLDAAA4AwAAOEMAAAmDQAA Jw0AAC0NAAAuDQAAig0AAIsNAADcDQAA+A0AAPkNAAA9DgAAPg4AAIMOAACEDgAAiw4AAO8OAADD DwAAThAAAJIQAACTEAAAlBAAAOAQAAAbEgAAHBIAAB4SAAAfEgAAIRIAACISAAAkEgAAJRIAACcS AAAoEgAAKxIAAJgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgAAAAIAA AAAAAAAAAAAAmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACAAAAAgAAA AAAAAAAAAACYAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAAKAAAAAMwAAAAAAAAAIAAAACAAAAA AAAAAAAAACgAAAADMAAAAAAAAACAAAAAgAAAAAAAAAAAAAAoAAAAAzAAAAAAAAAAgAAAAIAAAAAA AAAAAAAAKAAAAAMwAAAAAAAAAIAAAACAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACA+QAAAAAAAAAA AAAAAACYAA0gADAAAAAAAAAAgPkAAAAAAAAAAAAAAAAAmAANIAAwAQAAAAAAAID5AAAAAAAAAAAA AACAAJgADSAAMAIAAAAAAACA+QAAAAAAAAAAAAAAgAAoAAAAAzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAAmAAAAAAwAAAAAAAAAIBqBQAAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACAagUAAAAAAAAAAAAA AACYAAAAADAAAAAAAAAAgGoFAAAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIBqBQAAAAAAAAAAAAAA AJgABiAAMAAAAAAAAACAagUAAAAAAAAAAAAAAACYAAYgADABAAAAAAAAgGoFAAAAAAAAAAAAAAAA mAAGIAAwAgAAAAAAAIBqBQAAAAAAAAAAAAAAAJgABiAAMAMAAAAAAACAagUAAAAAAAAAAAAAAACY AAYgADAEAAAAAAAAgGoFAAAAAAAAAAAAAAAAmAAGIAAwBQAAAAAAAIBqBQAAAAAAAAAAAAAAAJgA BiAAMAYAAAAAAACAagUAAAAAAAAAAAAAAACYAAYgADAHAAAAAAAAgGoFAAAAAAAAAAAAAAAAmAAA AAAwAAAAAAAAAIDQBAAAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACA0AQAAAAAAAAAAAAAAACYAAAA ADAAAAAAAAAAgNAEAAAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIDQBAAAAAAAAAAAAAAAAJgAAAAA MAAAAAAAAACA0AQAAAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgNAEAAAAAAAAAAAAAAAAmAAAAAAw AAAAAAAAAIDQBAAAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACA0AQAAAAAAAAAAAAAAACYAAogADAA AAAAAAAAgNAEAAAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIDQBAAAAAAAAAAAAAAAAJgAAAAAMAAA AAAAAACA0AQAAAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgNAEAAAAAAAAAAAAAAAAmAAAAAAwAAAA AAAAAIDQBAAAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACA0AQAAAAAAAAAAAAAAACYAAAAADAAAAAA AAAAgNAEAAAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIDQBAAAAAAAAAAAAAAAAJgAAAAAMAAAAAAA AACA0AQAAAAAAAAAAAAAAACYAAkgADAAAAAAAAAAgNAEAAAAAAAAAAAAAAAAmAAAAAAwAAAAAAAA AIDQBAAAAAAAAAAAAAAAAJgACSAAMAEAAAAAAACA0AQAAAAAAAAAAAAAAACYAAAAADAAAAAAAAAA gNAEAAAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIDQBAAAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACA 0AQAAAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgNAEAAAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIDQ BAAAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACA0AQAAAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgNAE AAAAAAAAAAAAAAAAmAALIAAwAAAAAAAAAIDQBAAAAAAAAAAAAAAAAJgAAAAAMAAAAAAAAACA0AQA AAAAAAAAAAAAAACYAAsgADABAAAAAAAAgNAEAAAAAAAAAAAAAAAAKAAAAAMwAAAAAAAAAIAAAACA AAAAAAAAAAAAAJgAAAAAMAAAAAAAAACAQg0AAAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgEINAAAA AAAAAAAAAAAAmAAAAAAwAAAAAAAAAIBCDQAAAAAAAAAAAACAAJgAAAAAMAAAAAAAAACAQg0AAAAA AAAAAAAAAACYAAAAADAAAAAAAAAAgEINAAAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIBCDQAAAAAA AAAAAAAAAJgACCAAMAAAAAAAAACAQg0AAAAAAAAAAAAAAACYAAggADABAAAAAAAAgEINAAAAAAAA AAAAAAAAmAAIIAAwAgAAAAAAAIBCDQAAAAAAAAAAAAAAAJgACCAAMAMAAAAAAACAQg0AAAAAAAAA AAAAgACYAAAAADAAAAAAAAAAgEINAAAAAAAAAAAAAAAAmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAA AAAAAJhAAAAPMAAAAAAAAACAAAAAgAAAAAAAAAAAAAeYQAAADzAAAAAAAAAAgAAAAIAAAAAAAAAA AAAACAAAAAAwAAAAAAAAAAAAAAAABjCHAQAAAAAAB5hAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAA AAdJiAAwADAAAAAAAAABAAAAAAAAAAAAAAAAANQHmEAAAAAwAAAAAAAAAIAAAACAAAAAAAAAAAAA B0mIADAAMAAAAAAAAAEAAAAAAAAAAAAAAAAA1AeYQAAAADAAAAAAAAAAgAAAAIAAAAAAAAAAAAAH SYgAMAAwAAAAAAAAAQAAAAAAAAAAAAAAAADUB5hAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAAdJ iAAwADAAAAAAAAABAAAAAAAAAAAAAAAAANQHSYgAMAAwAAAAAAAAAQAAAAAAAAAAAAAAwAzUBwAA AAABAAAAAgAAACIAAAAwAAAAPgAAAD8AAABAAAAA+QAAACkBAAAqAQAA1gIAANYEAABqBQAAjAUA AI0FAABzBgAAdAYAAHUGAAC0BgAACAcAAC0HAACbBwAAMAgAABEJAAAbCgAArgoAAPYKAAD3CgAA +AoAAB4LAAAfCwAAJgsAAGgLAABpCwAAagsAALELAADYCwAA2QsAAOALAADhCwAAMgwAADMMAACK DAAAiwwAAOEMAAAmDQAAJw0AAC0NAACKDQAAiw0AAPkNAAA9DgAAPg4AAIMOAACEDgAAiw4AAO8O AADDDwAAThAAAJIQAACTEAAAlBAAAOAQAAAbEgAAKxIAAJgAAAAAMAAAAAAAAACAAAAAgAAAADAA AAAAgACYAAAAADAAAAAAAAAAgAAAAIAAAAAwAAAAAIAAmAAAAAAwAAAAAAAAAIAAAACAAAAAAAAA AAAAAJgAAAAAMAAAAAAAAACAAAAAgAAAAAAAAAAAAACYAAAAADAAAAAAAAAAgAAAAIAAAAAwAAAA AIAAKAAAAAMwAAAAAAAAAIAAAACAAAAAMAAAAACAACgAAAADMAAAAAAAAACAAAAAgAAAADAAAAAA gAAoAAAAAzAAAAAAAAAAgAAAAIAAAAAwAAAAAIAAKAAAAAMwAAAAAAAAAIAAAACAAAAAMAAAAACA AJgAAAAAMAAAAAAAAACA+QAAAAAAADAAAAAAgACaAA0gADAAAAAAAAAAgPkAAAAAAAAwAAAAAIAH mgANIAAwAgAAAAAAAIAFAQAAAAAAAAAAAAAAB5oABCAAMAMAAAAAAACAAwAAAAAAADAAAAAAgAco AAAAAzAAAAAAAAAAgAAAAIAAAAAwAAAAAIAAmAAAAAAwAAAAAAAAAIBEAwAAAAAAMAAAAACAAJoA AAAAMAAAAAAAAACARAMAAAAAADAAAAAAgAeYAAAAADAAAAAAAAAAgEQDAAAAAAAAAAAAAAAAmAAA AAAwAAAAAAAAAIBEAwAAAAAAAAAAAAAAAJgABiAAMAAAAAAAAACARAMAAAAAAAAAAAAAAACYAAYg ADABAAAAAAAAgEQDAAAAAAAAAAAAAAAAmAAGIAAwAgAAAAAAAIBEAwAAAAAAAAAAAAAAAJgABiAA MAMAAAAAAACARAMAAAAAAAAAAAAAAACaAAYgADAEAAAAAAAAgEQDAAAAAAAAAAAAAAAHmgAGIAAw BQAAAAAAAIBEAwAAAAAAMAAAAACAB5oABiAAMAYAAAAAAACAOwMAAAAAAAAAAAAAAAeaAAYgADAG AAAAAAAAgDsDAAAAAAAwAAAAAIAHaosAMBowAAAAAAAAAQAAADMAAAAbAAAAZOMgB2iLADAaMAAA AAAAAAEAAAAyAAAAAAAAAAAAAAFoiwAwGjAAAAAAAAABAAAAMQAAAAAAAAAAAAABmkAAAAAwAAAA AAAAAIAAAACAAAAAMAAAAACAB5pAAAAAMAAAAAAAAACAAAAAgAAAADAAAAAAgAeaQAAAADAAAAAA AAAAgAAAAIAAAAAwAAAAAIAHmkAAAAAwAAAAAAAAAIAAAACAAAAAMAAAAACAB5hAAAAAMAAAAAAA AACAAAAAgAAAADAAAAAAgAFoiwAwIjAAAAAAAAABAAAAKwAAAAAAAAAAAAABassAMBowAAAAAAAA AQAAADMAAAAAAAAAAAAAB5pAAAAAMAAAAAAAAACAAAAAgAAAADAAAAAAgAeYQAAAADAAAAAAAAAA gAAAAIAAAAAwAAAAAIABmEAAAAAwAAAAAAAAAIAAAACAAAAAMAAAAACAAZhAAAAAMAAAAAAAAACA AAAAgAAAADAAAAAAgAGaQAAAADAAAAAAAAAAgAAAAIAAAAAwAAAAAIAHmkAAAAAwAAAAAAAAAIAA AACAAAAAMAAAAACAB5pAAAAAMAAAAAAAAACAAAAAgAAAADAAAAAAgAeaQAAAADAAAAAAAAAAgAAA AIAAAAAwAAAAAIAHmkAAAAAwAAAAAAAAAIAAAACAAAAAMAAAAACAB5pAAAAAMAAAAAAAAACAAAAA gAAAADAAAAAAgAeaQAAAADAAAAAAAAAAgAAAAIAAAAAwAAAAAIAHmkAAAAAwAAAAAAAAAIAAAACA AAAAMAAAAACAB5pAAAAAMAAAAAAAAACAAAAAgAAAADAAAAAAgAeaQAAAADAAAAAAAAAAgAAAAIAA AAAwAAAAAIAHaosAMDYwAAAAAAAAAQAAAAwAAAA3AAAAdOYgB2jLADAAMAAAAAAAAAEAAAAAAAAA ADAAAAAAgAFoiwAwNzAAAAAAAAABAAAACgAAAAAAAAAAAAABassAMAAwAAAAAAAAAQAAAAAAAAAA MAAAAACAB2rLADAAMAAAAAAAAAEAAAAAAAAAADAAAAAAoQdqywAwADAAAAAAAAABAAAAAAAAAAAw AAAAAKEHaosAMCswAAAAAAAAAQAAAAUAAAAsAAAAADtuB2rLADAAMAAAAAAAAAEAAAAAAAAAADAA AAAAgAdqywAwADAAAAAAAAABAAAAAAAAAAAwAAAAAIAHassAMAAwAAAAAAAAAQAAAAAAAAAAMAAA AACAB5pAAAAAMAAAAAAAAACAAAAAgAAAADAAAAAAgAeaAAAAADAAAAAAAAAAgAAAAIAAAAAAAAAA AAAHassAMAAwAAAAAAAAAQAAAAAAAAAAAAAAAAAAAWrLADAAMAAAAAAAAAEAAAAAAAAAAAAAAAAA gAcKAAAAADAAAAAAAAAAAAAAAAAGMIcBAAAAAAAHAAAAAAMAAAAGAAAABgAAAAkAAAAMAAAADAAA AAwAAAAMAAAADAAAAAwAAAAMAAAADAAAAA8AAAAABgAAsAkAAI0NAAASEAAAUxIAAGgTAAC3FAAA XxYAABwaAAAqGgAADgAAABEAAAASAAAAEwAAABUAAAAWAAAAFwAAABkAAAAaAAAAAAYAABERAADh FAAAHxoAACoaAAAPAAAAFAAAABgAAAAbAAAAAAYAACkaAAAQAAAADwAA8DgAAAAAAAbwGAAAAAII AAACAAAAAQAAAAEAAAABAAAAAgAAAEAAHvEQAAAA//8AAAAA/wCAgIAA9wAAEAAPAALwkgAAABAA CPAIAAAAAQAAAAEEAAAPAAPwMAAAAA8ABPAoAAAAAQAJ8BAAAAAAAAAAAAAAAAAAAAAAAAAAAgAK 8AgAAAAABAAABQAAAA8ABPBCAAAAEgAK8AgAAAABBAAAAA4AAFMAC/AeAAAAvwEAABAAywEAAAAA /wEAAAgABAMJAAAAPwMBAAEAAAAR8AQAAAABAAAAAAAAAC8BAAA4AQAAjwEAAJgBAACaAQAAnQEA ALABAAC5AQAAygEAANMBAADkAgAA7QIAAFoEAABjBAAAZQQAAGgEAACZBAAAogQAADQFAAA9BQAA +AoAAB4LAACyCwAA2AsAAJQQAADXEQAA2hEAABwSAAAcEgAAHhIAAB4SAAAfEgAAHxIAACESAAAi EgAAJBIAACUSAAAnEgAAKBIAACsSAAAHABwABwAcAAcAHAAHABwABwAcAAcAHAAHABwABwAcAAcA HAAHABwABwAFAAcABQAHAAcAHAAHAAQABwAEAAIABAAHAAQABwAEAAcABAACAAAAAAAqAQAAOAEA AHYFAAB/BQAAXAgAAGsIAADPCAAA3wgAAMgKAADXCgAA+AoAAB0LAACDCwAAkgsAALILAADXCwAA 2QsAAN4LAADqDAAA8wwAAC4NAAA3DQAAiw0AAIwNAADfDQAA8A0AAPkNAAALDgAAPw4AAEEOAAC2 DwAAwA8AAJQQAADYEQAA2hEAABwSAAAcEgAAHhIAAB4SAAAfEgAAHxIAACESAAAiEgAAJBIAACUS AAAnEgAAKBIAACsSAAAHADMABwAzAAcAMwAHADMABwAzAAcABQAHADMABwAFAAcAMwAHADMABwAz AAcAMwAHADMABwAzAAcAMwAHADMABwAHADMABwAEAAcABAACAAQABwAEAAcABAAHAAQAAgAAAAAA IgAAADAAAAD5AAAAKgEAAAgHAAAtBwAAHwsAACcLAADZCwAAMwwAACcNAAAuDQAAhA4AAIsOAACU EAAAHBIAABwSAAAeEgAAHhIAAB8SAAAfEgAAIRIAACISAAAkEgAAJRIAACcSAAAoEgAAKxIAAAcA BQAHAAUABwAFAAcABQAHAAUABwAFAAcABQAHAAcABAAHAAQAAgAEAAcABAAHAAQABwAEAAIAAAAA AJQQAAAcEgAAHBIAAB4SAAAeEgAAHxIAAB8SAAAhEgAAIhIAACQSAAAlEgAAJxIAACgSAAArEgAA BwAHAAQABwAEAAIABAAHAAQABwAEAAcABAACAAoAsHtFGhozUqz/D/8P/w//D/8P/w//D/8P/w8Q AHMi3B7SR2SM/w//D/8P/w//D/8P/w//D/8PEABtWF0f9BvCHf8P/w//D/8P/w//D/8P/w//DxAA zhoqOpAysDP/D/8P/w//D/8P/w//D/8P/w8QAH5+jEBkzogD/w//D/8P/w//D/8P/w//D/8PEABe e/dPhmg+aP8P/w//D/8P/w//D/8P/w//DxAAFlA9VQhm6Dj/D/8P/w//D/8P/w//D/8P/w8QAHtM IlgkNuTg/w8CAP8P/w//D/8P/w//D/8PAAAAWF1xfBFEb/8P/w//D/8P/w//D/8P/w//DxAAjFzy fnBf2kj/D/8P/w//D/8P/w//D/8P/w8QAAAAAAAXEAAAAAAAAAAAAABoAQAAAAAAABMYAAAPhNAC EYSY/hXGBQAB0AIGXoTQAmCEmP5PSgMAUEoAAFFKAwBeSgMAbygAAQAtAAEAAAAXkAAAAAAAAAAA AABoAQAAAAAAABkYAAAPhKAFEYSY/hXGBQABoAUGXoSgBWCEmP5PSgMAUUoDAF5KAwBvKACHaAAA AACISAAAAQBvAAEAAAAXkAAAAAAAAAAAAABoAQAAAAAAABUYAAAPhHAIEYSY/hXGBQABcAgGXoRw CGCEmP5PSgUAUUoFAG8oAIdoAAAAAIhIAAABAKfwAQAAABeQAAAAAAAAAAAAAGgBAAAAAAAAFRgA AA+EQAsRhJj+FcYFAAFACwZehEALYISY/k9KAQBRSgEAbygAh2gAAAAAiEgAAAEAt/ABAAAAF5AA AAAAAAAAAAAAaAEAAAAAAAAZGAAAD4QQDhGEmP4VxgUAARAOBl6EEA5ghJj+T0oDAFFKAwBeSgMA bygAh2gAAAAAiEgAAAEAbwABAAAAF5AAAAAAAAAAAAAAaAEAAAAAAAAVGAAAD4TgEBGEmP4VxgUA AeAQBl6E4BBghJj+T0oFAFFKBQBvKACHaAAAAACISAAAAQCn8AEAAAAXkAAAAAAAAAAAAABoAQAA AAAAABUYAAAPhLATEYSY/hXGBQABsBMGXoSwE2CEmP5PSgEAUUoBAG8oAIdoAAAAAIhIAAABALfw AQAAABeQAAAAAAAAAAAAAGgBAAAAAAAAGRgAAA+EgBYRhJj+FcYFAAGAFgZehIAWYISY/k9KAwBR SgMAXkoDAG8oAIdoAAAAAIhIAAABAG8AAQAAABeQAAAAAAAAAAAAAGgBAAAAAAAAFRgAAA+EUBkR hJj+FcYFAAFQGQZehFAZYISY/k9KBQBRSgUAbygAh2gAAAAAiEgAAAEAp/ABAAAAFxAAAAAAAAAA AAAAaAEAAAAAAAAVGAAAD4TQAhGEmP4VxgUAAdACBl6E0AJghJj+T0oFAFFKBQBvKACHaAAAAACI SAAAAQCn8AEAAAAXkAAAAAAAAAAAAABoAQAAAAAAABkYAAAPhKAFEYSY/hXGBQABoAUGXoSgBWCE mP5PSgMAUUoDAF5KAwBvKACHaAAAAACISAAAAQBvAAEAAAAXkAAAAAAAAAAAAABoAQAAAAAAABUY AAAPhHAIEYSY/hXGBQABcAgGXoRwCGCEmP5PSgUAUUoFAG8oAIdoAAAAAIhIAAABAKfwAQAAABeQ AAAAAAAAAAAAAGgBAAAAAAAAFRgAAA+EQAsRhJj+FcYFAAFACwZehEALYISY/k9KAQBRSgEAbygA h2gAAAAAiEgAAAEAt/ABAAAAF5AAAAAAAAAAAAAAaAEAAAAAAAAZGAAAD4QQDhGEmP4VxgUAARAO Bl6EEA5ghJj+T0oDAFFKAwBeSgMAbygAh2gAAAAAiEgAAAEAbwABAAAAF5AAAAAAAAAAAAAAaAEA AAAAAAAVGAAAD4TgEBGEmP4VxgUAAeAQBl6E4BBghJj+T0oFAFFKBQBvKACHaAAAAACISAAAAQCn 8AEAAAAXkAAAAAAAAAAAAABoAQAAAAAAABUYAAAPhLATEYSY/hXGBQABsBMGXoSwE2CEmP5PSgEA UUoBAG8oAIdoAAAAAIhIAAABALfwAQAAABeQAAAAAAAAAAAAAGgBAAAAAAAAGRgAAA+EgBYRhJj+ FcYFAAGAFgZehIAWYISY/k9KAwBRSgMAXkoDAG8oAIdoAAAAAIhIAAABAG8AAQAAABeQAAAAAAAA AAAAAGgBAAAAAAAAFRgAAA+EUBkRhJj+FcYFAAFQGQZehFAZYISY/k9KBQBRSgUAbygAh2gAAAAA iEgAAAEAp/AAAAAAFxAAAAAAAAAAAAAAaAEAAAAAAAATGAAAD4TQAhGEmP4VxgUAAdACBl6E0AJg hJj+T0oDAFBKAABRSgMAXkoDAG8oAAEALQABAAAAF5AAAAAAAAAAAAAAaAEAAAAAAAAZGAAAD4Sg BRGEmP4VxgUAAaAFBl6EoAVghJj+T0oDAFFKAwBeSgMAbygAh2gAAAAAiEgAAAEAbwABAAAAF5AA AAAAAAAAAAAAaAEAAAAAAAAVGAAAD4RwCBGEmP4VxgUAAXAIBl6EcAhghJj+T0oFAFFKBQBvKACH aAAAAACISAAAAQCn8AEAAAAXkAAAAAAAAAAAAABoAQAAAAAAABUYAAAPhEALEYSY/hXGBQABQAsG XoRAC2CEmP5PSgEAUUoBAG8oAIdoAAAAAIhIAAABALfwAQAAABeQAAAAAAAAAAAAAGgBAAAAAAAA GRgAAA+EEA4RhJj+FcYFAAEQDgZehBAOYISY/k9KAwBRSgMAXkoDAG8oAIdoAAAAAIhIAAABAG8A AQAAABeQAAAAAAAAAAAAAGgBAAAAAAAAFRgAAA+E4BARhJj+FcYFAAHgEAZehOAQYISY/k9KBQBR SgUAbygAh2gAAAAAiEgAAAEAp/ABAAAAF5AAAAAAAAAAAAAAaAEAAAAAAAAVGAAAD4SwExGEmP4V xgUAAbATBl6EsBNghJj+T0oBAFFKAQBvKACHaAAAAACISAAAAQC38AEAAAAXkAAAAAAAAAAAAABo AQAAAAAAABkYAAAPhIAWEYSY/hXGBQABgBYGXoSAFmCEmP5PSgMAUUoDAF5KAwBvKACHaAAAAACI SAAAAQBvAAEAAAAXkAAAAAAAAAAAAABoAQAAAAAAABUYAAAPhFAZEYSY/hXGBQABUBkGXoRQGWCE mP5PSgUAUUoFAG8oAIdoAAAAAIhIAAABAKfwAQAAAAAQAQAAAAAAAAAAAGgBAAAAAAAAChgAAA+E OAQRhJj+FcYFAAE4BAZehDgEYISY/odoAAAAAIhIAAACAAAALgABAAAABJABAAAAAAAAAAAAaAEA AAAAAAAKGAAAD4QIBxGEmP4VxgUAAQgHBl6ECAdghJj+h2gAAAAAiEgAAAIAAQAuAAEAAAACkgEA AAAAAAAAAABoAQAAAAAAAAoYAAAPhNgJEYRM/xXGBQAB2AkGXoTYCWCETP+HaAAAAACISAAAAgAC AC4AAQAAAACQAQAAAAAAAAAAAGgBAAAAAAAAChgAAA+EqAwRhJj+FcYFAAGoDAZehKgMYISY/odo AAAAAIhIAAACAAMALgABAAAABJABAAAAAAAAAAAAaAEAAAAAAAAKGAAAD4R4DxGEmP4VxgUAAXgP Bl6EeA9ghJj+h2gAAAAAiEgAAAIABAAuAAEAAAACkgEAAAAAAAAAAABoAQAAAAAAAAoYAAAPhEgS EYRM/xXGBQABSBIGXoRIEmCETP+HaAAAAACISAAAAgAFAC4AAQAAAACQAQAAAAAAAAAAAGgBAAAA AAAAChgAAA+EGBURhJj+FcYFAAEYFQZehBgVYISY/odoAAAAAIhIAAACAAYALgABAAAABJABAAAA AAAAAAAAaAEAAAAAAAAKGAAAD4ToFxGEmP4VxgUAAegXBl6E6BdghJj+h2gAAAAAiEgAAAIABwAu AAEAAAACkgEAAAAAAAAAAABoAQAAAAAAAAoYAAAPhLgaEYRM/xXGBQABuBoGXoS4GmCETP+HaAAA AACISAAAAgAIAC4AAQAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAChgAAA+E0AIRhJj+FcYFAAHQAgZe hNACYISY/odoAAAAAIhIAAACAAAALgABAAAABAABAAAAAAAAAAAAAAAAAAAAAAAKGAAAD4SgBRGE mP4VxgUAAaAFBl6EoAVghJj+h2gAAAAAiEgAAAIAAQAuAAEAAAAAAAEAAAAAAAAAAAAAAAAAAAAA AAoYAAAPhHAIEYSY/hXGBQABcAgGXoRwCGCEmP6HaAAAAACISAAAAgACAC4AAQAAAAAAAQAAAAAA AAAAAAAAAAAAAAAAChgAAA+EQAsRhJj+FcYFAAFACwZehEALYISY/odoAAAAAIhIAAACAAMALgAB AAAAAAABAAAAAAAAAAAAAAAAAAAAAAAKGAAAD4QQDhGEmP4VxgUAARAOBl6EEA5ghJj+h2gAAAAA iEgAAAIABAAuAAEAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAoYAAAPhOAQEYSY/hXGBQAB4BAGXoTg EGCEmP6HaAAAAACISAAAAgAFAC4AAQAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAChgAAA+EsBMRhJj+ FcYFAAGwEwZehLATYISY/odoAAAAAIhIAAACAAYALgABAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAK GAAAD4SAFhGEmP4VxgUAAYAWBl6EgBZghJj+h2gAAAAAiEgAAAIABwAuAAEAAAAAAAEAAAAAAAAA AAAAAAAAAAAAAAoYAAAPhFAZEYSY/hXGBQABUBkGXoRQGWCEmP6HaAAAAACISAAAAgAIAC4AAAAA ABcAAAAAAAAAAAAAAAAAAAAAAAAAExgAAA+E0AIRhJj+FcYFAAHQAgZehNACYISY/k9KAwBQSgAA UUoDAF5KAwBvKAABAC0AAQAAABeAAAAAAAAAAAAAAAAAAAAAAAAAGRgAAA+EoAURhJj+FcYFAAGg BQZehKAFYISY/k9KAwBRSgMAXkoDAG8oAIdoAAAAAIhIAAABAG8AAQAAABeAAAAAAAAAAAAAAAAA AAAAAAAAFRgAAA+EcAgRhJj+FcYFAAFwCAZehHAIYISY/k9KBQBRSgUAbygAh2gAAAAAiEgAAAEA p/ABAAAAF4AAAAAAAAAAAAAAAAAAAAAAAAAVGAAAD4RACxGEmP4VxgUAAUALBl6EQAtghJj+T0oB AFFKAQBvKACHaAAAAACISAAAAQC38AEAAAAXgAAAAAAAAAAAAAAAAAAAAAAAABkYAAAPhBAOEYSY /hXGBQABEA4GXoQQDmCEmP5PSgMAUUoDAF5KAwBvKACHaAAAAACISAAAAQBvAAEAAAAXgAAAAAAA AAAAAAAAAAAAAAAAABUYAAAPhOAQEYSY/hXGBQAB4BAGXoTgEGCEmP5PSgUAUUoFAG8oAIdoAAAA AIhIAAABAKfwAQAAABeAAAAAAAAAAAAAAAAAAAAAAAAAFRgAAA+EsBMRhJj+FcYFAAGwEwZehLAT YISY/k9KAQBRSgEAbygAh2gAAAAAiEgAAAEAt/ABAAAAF4AAAAAAAAAAAAAAAAAAAAAAAAAZGAAA D4SAFhGEmP4VxgUAAYAWBl6EgBZghJj+T0oDAFFKAwBeSgMAbygAh2gAAAAAiEgAAAEAbwABAAAA F4AAAAAAAAAAAAAAAAAAAAAAAAAVGAAAD4RQGRGEmP4VxgUAAVAZBl6EUBlghJj+T0oFAFFKBQBv KACHaAAAAACISAAAAQCn8AAAAAAXEAAAAAAAAAAAAABoAQAAAAAAABMYAAAPhNACEYSY/hXGBQAB 0AIGXoTQAmCEmP5PSgMAUEoAAFFKAwBeSgMAbygAAQAtAAEAAAAXkAAAAAAAAAAAAABoAQAAAAAA ABkYAAAPhKAFEYSY/hXGBQABoAUGXoSgBWCEmP5PSgMAUUoDAF5KAwBvKACHaAAAAACISAAAAQBv AAEAAAAXkAAAAAAAAAAAAABoAQAAAAAAABUYAAAPhHAIEYSY/hXGBQABcAgGXoRwCGCEmP5PSgUA UUoFAG8oAIdoAAAAAIhIAAABAKfwAQAAABeQAAAAAAAAAAAAAGgBAAAAAAAAFRgAAA+EQAsRhJj+ FcYFAAFACwZehEALYISY/k9KAQBRSgEAbygAh2gAAAAAiEgAAAEAt/ABAAAAF5AAAAAAAAAAAAAA aAEAAAAAAAAZGAAAD4QQDhGEmP4VxgUAARAOBl6EEA5ghJj+T0oDAFFKAwBeSgMAbygAh2gAAAAA iEgAAAEAbwABAAAAF5AAAAAAAAAAAAAAaAEAAAAAAAAVGAAAD4TgEBGEmP4VxgUAAeAQBl6E4BBg hJj+T0oFAFFKBQBvKACHaAAAAACISAAAAQCn8AEAAAAXkAAAAAAAAAAAAABoAQAAAAAAABUYAAAP hLATEYSY/hXGBQABsBMGXoSwE2CEmP5PSgEAUUoBAG8oAIdoAAAAAIhIAAABALfwAQAAABeQAAAA AAAAAAAAAGgBAAAAAAAAGRgAAA+EgBYRhJj+FcYFAAGAFgZehIAWYISY/k9KAwBRSgMAXkoDAG8o AIdoAAAAAIhIAAABAG8AAQAAABeQAAAAAAAAAAAAAGgBAAAAAAAAFRgAAA+EUBkRhJj+FcYFAAFQ GQZehFAZYISY/k9KBQBRSgUAbygAh2gAAAAAiEgAAAEAp/AHAAAAAAABAAAAAAAAAAABAAAAAAAA AAANEAAAD4QAABGEAABehAAAYIQAAG8oAIdoAAAAAIhIAAABAAAAAQAAAAAAAQMAAAAAAAAAAQAA AAAAAAAADRABAA+EWgARhKb/XoRaAGCEpv9vKACHaAAAAACISAAAAwAAAC4AAQABAAAAAAABAwUA AAAAAAABAAAAAAAAAAANEAIAD4QAABGEAABehAAAYIQAAG8oAIdoAAAAAIhIAAAFAAAALgABAC4A AgABAAAA/wAAAAAAAAAAAAACAAAAAAAAAAANEAMAD4QAABGEAABehAAAYIQAAG8oAIdoAAAAAIhI AAAAAAEAAAD/AAAAAAAAAAAAAAIAAAAAAAAAAA0QBAAPhAAAEYQAAF6EAABghAAAbygAh2gAAAAA iEgAAAAAAQAAAP8AAAAAAAAAAAAAAgAAAAAAAAAADRAFAA+EAAARhAAAXoQAAGCEAABvKACHaAAA AACISAAAAAABAAAA/wAAAAAAAAAAAAACAAAAAAAAAAANEAYAD4QAABGEAABehAAAYIQAAG8oAIdo AAAAAIhIAAAAAAEAAAD/AAAAAAAAAAAAAAIAAAAAAAAAAA0QBwAPhAAAEYQAAF6EAABghAAAbygA h2gAAAAAiEgAAAAAAQAAAP8AAAAAAAAAAAAAAgAAAAAAAAAADRAIAA+EAAARhAAAXoQAAGCEAABv KACHaAAAAACISAAAAAABAAAAABABAAAAAAAAAAAAaAEAAAAAAAAKGAAAD4TQAhGEmP4VxgUAAdAC Bl6E0AJghJj+h2gAAAAAiEgAAAIAAAAuAAEAAAAEkAEAAAAAAAAAAABoAQAAAAAAAAoYAAAPhKAF EYSY/hXGBQABoAUGXoSgBWCEmP6HaAAAAACISAAAAgABAC4AAQAAAAKSAQAAAAAAAAAAAGgBAAAA AAAAChgAAA+EcAgRhEz/FcYFAAFwCAZehHAIYIRM/4doAAAAAIhIAAACAAIALgABAAAAAJABAAAA AAAAAAAAaAEAAAAAAAAKGAAAD4RACxGEmP4VxgUAAUALBl6EQAtghJj+h2gAAAAAiEgAAAIAAwAu AAEAAAAEkAEAAAAAAAAAAABoAQAAAAAAAAoYAAAPhBAOEYSY/hXGBQABEA4GXoQQDmCEmP6HaAAA AACISAAAAgAEAC4AAQAAAAKSAQAAAAAAAAAAAGgBAAAAAAAAChgAAA+E4BARhEz/FcYFAAHgEAZe hOAQYIRM/4doAAAAAIhIAAACAAUALgABAAAAAJABAAAAAAAAAAAAaAEAAAAAAAAKGAAAD4SwExGE mP4VxgUAAbATBl6EsBNghJj+h2gAAAAAiEgAAAIABgAuAAEAAAAEkAEAAAAAAAAAAABoAQAAAAAA AAoYAAAPhIAWEYSY/hXGBQABgBYGXoSAFmCEmP6HaAAAAACISAAAAgAHAC4AAQAAAAKSAQAAAAAA AAAAAGgBAAAAAAAAChgAAA+EUBkRhEz/FcYFAAFQGQZehFAZYIRM/4doAAAAAIhIAAACAAgALgAA AAAAFxAAAAAAAAAAAAAAaAEAAAAAAAATGAAAD4TQAhGEmP4VxgUAAdACBl6E0AJghJj+T0oDAFBK AABRSgMAXkoDAG8oAAEALQABAAAAF5AAAAAAAAAAAAAAaAEAAAAAAAAZGAAAD4SgBRGEmP4VxgUA AaAFBl6EoAVghJj+T0oDAFFKAwBeSgMAbygAh2gAAAAAiEgAAAEAbwABAAAAF5AAAAAAAAAAAAAA aAEAAAAAAAAVGAAAD4RwCBGEmP4VxgUAAXAIBl6EcAhghJj+T0oFAFFKBQBvKACHaAAAAACISAAA AQCn8AEAAAAXkAAAAAAAAAAAAABoAQAAAAAAABUYAAAPhEALEYSY/hXGBQABQAsGXoRAC2CEmP5P SgEAUUoBAG8oAIdoAAAAAIhIAAABALfwAQAAABeQAAAAAAAAAAAAAGgBAAAAAAAAGRgAAA+EEA4R hJj+FcYFAAEQDgZehBAOYISY/k9KAwBRSgMAXkoDAG8oAIdoAAAAAIhIAAABAG8AAQAAABeQAAAA AAAAAAAAAGgBAAAAAAAAFRgAAA+E4BARhJj+FcYFAAHgEAZehOAQYISY/k9KBQBRSgUAbygAh2gA AAAAiEgAAAEAp/ABAAAAF5AAAAAAAAAAAAAAaAEAAAAAAAAVGAAAD4SwExGEmP4VxgUAAbATBl6E sBNghJj+T0oBAFFKAQBvKACHaAAAAACISAAAAQC38AEAAAAXkAAAAAAAAAAAAABoAQAAAAAAABkY AAAPhIAWEYSY/hXGBQABgBYGXoSAFmCEmP5PSgMAUUoDAF5KAwBvKACHaAAAAACISAAAAQBvAAEA AAAXkAAAAAAAAAAAAABoAQAAAAAAABUYAAAPhFAZEYSY/hXGBQABUBkGXoRQGWCEmP5PSgUAUUoF AG8oAIdoAAAAAIhIAAABAKfwDQAAAHtMIlgAAAAAAAAAAAAAAAB7TCJYAAAAAAAAAAAAAAAAe0wi WAAAAAAAAAAAAAAAAH5+jEAAAAAAfGqwAAkA/gB+foxAAAAAAAAAAAAAAAAAAFhdcQAAAAAAAAAA AAAAAHMi3B4AAAAAAAAAAAAAAABee/dPAAAAAAAAAAAAAAAAsHtFGgAAAAAAAAAAAAAAAIxc8n4A AAAAAAAAAAAAAAAWUD1VAAAAAAAAAAAAAAAAbVhdHwAAAAAAAAAAAAAAAM4aKjoAAAAAAAAAAAAA AAD/////////////////////AQAAAJCzEgABAAAAEQAAAAEAAACSFKEAAQAAAFOzEgABAAAAlP5h MQEAAABV+sowAQAAABYAAAABAAAAFwAAAAEAAAAYACwG//////////////////////////////// //////////////////8KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD//woAAAASABjwtskDAAkEBQAJ BAEACQQDAAkEBQAJBAEACQQDAAkEBQAJBBIABQAJBAMACQQFAAkEAQAJBAMACQQFAAkEAQAJBAMA CQQFAAkEEgAY8LbJAwAJBAUACQQBAAkEAwAJBAUACQQBAAkEAwAJBAUACQQSAA8ACQQZAAkEGwAJ BA8ACQQZAAkEGwAJBA8ACQQZAAkEGwAJBBIADwAJBBkACQQbAAkEDwAJBBkACQQbAAkEDwAJBBkA CQQbAAkEEgAY8LbJAwAJBAUACQQBAAkEAwAJBAUACQQBAAkEAwAJBAUACQQSABjwtskDAAkEBQAJ BAEACQQDAAkEBQAJBAEACQQDAAkEBQAJBAAAEgAPAAkEGQAJBBsACQQPAAkEGQAJBBsACQQPAAkE GQAJBBsACQQSABjwtskDAAkEBQAJBAEACQQDAAkEBQAJBAEACQQDAAkEBQAJBAIAJD4RCwAAAAAA AAAAAAECAAIAAVEeagAAAAAAAAAAAAECAAIAGgAAAAQAAAAIAAAA5QAAAAAAAAAZAAAAdgoCALg5 CQDtPwwAUFoaAL89HQAabCAAOA8oABwSKwAjJC0A6l8tAHZDTgACSlYArG1fAEBXZQDoT2sAfTN0 AMFJegBcU4IAdgKHADp2iQAGCJYAizbAANxOwgAcVM4AbD7nACIv9AD/QAGAAQAAAAAAAAAAAJgj 7AcBAAEAAAAAAAAAAAAAAAAAAAAAAAIQAAAAAAAAACoSAACAAAAQAEAAAP//AQAAAAcAVQBuAGsA bgBvAHcAbgD//wEACAAAAAAAAAAAAAAA//8BAAAAAAD//wAAAgD//wAAAAD//wAAAgD//wAAAAAG AAAARxaQAQAAAgIGAwUEBQIDBId6ACAAAACACAAAAAAAAAD/AQAAAAAAAFQAaQBtAGUAcwAgAE4A ZQB3ACAAUgBvAG0AYQBuAAAANRaQAQIABQUBAgEHBgIFBwAAAAAAAAAQAAAAAAAAAAAAAACAAAAA AFMAeQBtAGIAbwBsAAAAMyaQAQAAAgsGBAICAgICBId6ACAAAACACAAAAAAAAAD/AQAAAAAAAEEA cgBpAGEAbAAAAD81kAEAAAIHAwkCAgUCBASHegAgAAAAgAgAAAAAAAAA/wEAAAAAAABDAG8AdQBy AGkAZQByACAATgBlAHcAAAA1JpABAAACCwYEAwUEBAIEh3oAYQAAAIAIAAAAAAAAAP8BAQAAAAAA VABhAGgAbwBtAGEAAAA7BpABAgAFAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAAAAIAAAAAAVwBp AG4AZwBkAGkAbgBnAHMAAAAiAAQAMQiIGADw0AIAAGgBAAAAAFTstUZU7LVGbDSkhgIAAQAAAHkC AAAbDgAAAQAIAAAABAADEB4AAAB5AgAAGw4AAAEACAAAAB4AAAAAAAAAIQMA8BAAAAABAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAACAegBbQAtACBgRI0AAAQABkAZAAAABkAAACMEAAAjBAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA AAAAAAAAAAAEMoNRAPAQAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEtYAAAAAAnw/w8B AAE/AADkBAAA////f////3////9/////f////3////9/////f+hPawAAAAAAMgAAAAAAAAAAAAAA AAAAAAAA//8SAAAAAAAAAAEAMQAAAAAAAAANAFMAYQBsAGEAaAAgAE0AYQBjAGgAYQBuAGkACABT AE0AQQBDAEgAQQBOAEkAAAAAAAAAAAAAAAAAAAAAAAAAAAA0AAAABgAAAAoAAAAAAAwAAQAMAAIA DAADAAwABAAMAAUADAAGAAwABwAMAAgADAAJAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+/wAABQECAAAAAAAA AAAAAAAAAAAAAAABAAAA4IWf8vlPaBCrkQgAKyez2TAAAACIAQAAEgAAAAEAAACYAAAAAgAAAKAA AAADAAAArAAAAAQAAAC4AAAABQAAANAAAAAGAAAA3AAAAAcAAADoAAAACAAAAPgAAAAJAAAADAEA ABIAAAAYAQAACgAAADgBAAALAAAARAEAAAwAAABQAQAADQAAAFwBAAAOAAAAaAEAAA8AAABwAQAA EAAAAHgBAAATAAAAgAEAAAIAAADkBAAAHgAAAAQAAAAxAAAAHgAAAAQAAAAAAAAAHgAAABAAAABT YWxhaCBNYWNoYW5pAAAAHgAAAAQAAAAAAAAAHgAAAAQAAAAAAAAAHgAAAAgAAABOb3JtYWwAAB4A AAAMAAAAU01BQ0hBTkkAAAAAHgAAAAQAAAAyAAAAHgAAABgAAABNaWNyb3NvZnQgT2ZmaWNlIFdv cmQAAABAAAAAAEbDIwAAAABAAAAAABDUNsNZxgFAAAAAAAAxHTeixwFAAAAAAAAxHTeixwEDAAAA AQAAAAMAAAB5AgAAAwAAABsOAAADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUgBvAG8AdAAgAEUAbgB0AHIAeQAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYABQH//////////wMA AAAGCQIAAAAAAMAAAAAAAABGAAAAAAAAAAAAAAAAkLgPOm2+xwFPAAAAAAIAAAAAAABEAGEAdABh AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA CgACAf///////////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0AAAAA EAAAAAAAADEAVABhAGIAbABlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAOAAIBAQAAAAYAAAD/////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAJQAAALk/AAAAAAAAVwBvAHIAZABEAG8AYwB1AG0AZQBuAHQAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoAAgECAAAABQAAAP////8AAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjgAAAAAAAABAAAAAgAAAAMAAAAEAAAABQAAAAYA AAAHAAAACAAAAAkAAAAKAAAACwAAAAwAAAANAAAADgAAAA8AAAAQAAAAEQAAABIAAAATAAAAFAAA ABUAAAAWAAAAFwAAABgAAAAZAAAAGgAAABsAAAAcAAAA/v///x4AAAAfAAAAIAAAACEAAAAiAAAA IwAAACQAAAD+////JgAAACcAAAAoAAAAKQAAACoAAAArAAAALAAAAC0AAAAuAAAALwAAADAAAAAx AAAAMgAAADMAAAA0AAAANQAAADYAAAA3AAAAOAAAADkAAAA6AAAAOwAAADwAAAA9AAAAPgAAAD8A AABAAAAAQQAAAEIAAABDAAAARAAAAP7///9GAAAARwAAAEgAAABJAAAASgAAAEsAAABMAAAA/v// /10AAAD9/////v////////////////////////////////////////////////////////////// //////7////+//////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////wEA/v8DCgAA/////wYJAgAAAAAAwAAA AAAAAEYfAAAATWljcm9zb2Z0IE9mZmljZSBXb3JkIERvY3VtZW50AAoAAABNU1dvcmREb2MAEAAA AFdvcmQuRG9jdW1lbnQuOAD0ObJxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/v8AAAUBAgAA AAAAAAAAAAAAAAAAAAAAAgAAAALVzdWcLhsQk5cIACss+a5EAAAABdXN1ZwuGxCTlwgAKyz5rjwB AAD4AAAADAAAAAEAAABoAAAADwAAAHAAAAAFAAAAjAAAAAYAAACUAAAAEQAAAJwAAAAXAAAApAAA AAsAAACsAAAAEAAAALQAAAATAAAAvAAAABYAAADEAAAADQAAAMwAAAAMAAAA2gAAAAIAAADkBAAA HgAAABQAAAAgRGl2ZXJzaW5ldCBDb3JwLgAAAAMAAAAeAAAAAwAAAAgAAAADAAAAjBAAAAMAAADm FQsACwAAAAAAAAALAAAAAAAAAAsAAAAAAAAACwAAAAAAAAAeEAAAAQAAAAIAAAAxAAwQAAACAAAA HgAAAAYAAABUaXRsZQADAAAAAQAAADQAAAADAAAAAAAAACAAAAABAAAAJAAAAAAAAIAsAAAAAAAA AAIAAACwBAAAEwAAAAkEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAACAAAAAwAAAAQAAAAFAAAABgAAAAcAAAAI AAAACQAAAAoAAAALAAAADAAAAA0AAAAOAAAADwAAABAAAAARAAAAEgAAABMAAAAUAAAAFQAAABYA AAAXAAAAGAAAABkAAAAaAAAAGwAAABwAAAD+////HgAAAB8AAAAgAAAAIQAAACIAAAAjAAAAJAAA AP7///8mAAAAJwAAACgAAAApAAAAKgAAACsAAAAsAAAALQAAAC4AAAAvAAAAMAAAADEAAAAyAAAA MwAAADQAAAA1AAAANgAAADcAAAA4AAAAOQAAADoAAAA7AAAAPAAAAD0AAAA+AAAAPwAAAEAAAABB AAAAQgAAAEMAAABEAAAA/v///0YAAABHAAAASAAAAEkAAABKAAAASwAAAEwAAAD+////TgAAAE8A AABQAAAAUQAAAFIAAABTAAAAVAAAAP7////9////VwAAAP7////+/////v////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ////////////////////////////////////UgBvAG8AdAAgAEUAbgB0AHIAeQAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYABQH//////////wMAAAAGCQIAAAAA AMAAAAAAAABGAAAAAAAAAAAAAAAAYNw/IjeixwFZAAAAgAAAAAAAAABEAGEAdABhAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgACAf////// /////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0AAAAAEAAAAAAAADEA VABhAGIAbABlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAOAAIBAQAAAAYAAAD/////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA JQAAALk/AAAAAAAAVwBvAHIAZABEAG8AYwB1AG0AZQBuAHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAABoAAgECAAAABQAAAP////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAALjgAAAAAAAAFAFMAdQBtAG0AYQByAHkASQBuAGYAbwByAG0AYQB0 AGkAbwBuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAACAf///////////////wAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEUAAAAAEAAAAAAAAAUARABvAGMAdQBtAGUAbgB0 AFMAdQBtAG0AYQByAHkASQBuAGYAbwByAG0AYQB0AGkAbwBuAAAAAAAAAAAAAAA4AAIBBAAAAP// ////////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATQAAAAAQAAAAAAAAAQBD AG8AbQBwAE8AYgBqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAABIAAgD///////////////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAcQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAP///////////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAD+//////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ////////////////////////////////AQD+/wMKAAD/////BgkCAAAAAADAAAAAAAAARh8AAABN aWNyb3NvZnQgT2ZmaWNlIFdvcmQgRG9jdW1lbnQACgAAAE1TV29yZERvYwAQAAAAV29yZC5Eb2N1 bWVudC44APQ5snEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABSAG8AbwB0ACAARQBuAHQAcgB5AAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFgAFAf//////////AwAAAAYJAgAAAAAAwAAA AAAAAEYAAAAAAAAAAAAAAACw7ak4N6LHAV4AAAAAAgAAAAAAAEQAYQB0AGEAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAAIB//////////// ////AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHQAAAAAQAAAAAAAAMQBUAGEA YgBsAGUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AA4AAgEBAAAABgAAAP////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlAAAA uT8AAAAAAABXAG8AcgBkAEQAbwBjAHUAbQBlAG4AdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAGgACAQIAAAAFAAAA/////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAuOAAAAAAAAAEAAAACAAAAAwAAAAQAAAAFAAAABgAAAAcAAAAIAAAACQAA AAoAAAALAAAADAAAAA0AAAAOAAAADwAAABAAAAARAAAAEgAAABMAAAAUAAAAFQAAABYAAAAXAAAA GAAAABkAAAAaAAAAGwAAABwAAAD+////HgAAAB8AAAAgAAAAIQAAACIAAAAjAAAAJAAAAP7///8m AAAAJwAAACgAAAApAAAAKgAAACsAAAAsAAAALQAAAC4AAAAvAAAAMAAAADEAAAAyAAAAMwAAADQA AAA1AAAANgAAADcAAAA4AAAAOQAAADoAAAA7AAAAPAAAAD0AAAA+AAAAPwAAAEAAAABBAAAAQgAA AEMAAABEAAAA/v///0YAAABHAAAASAAAAEkAAABKAAAASwAAAEwAAAD+//////////////////// /////////////////////////////////////////////////////10AAAD9/////v////7////+ //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// ////////////////////////////AQAAAP7///8DAAAABAAAAAUAAAAGAAAABwAAAP7///////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////8FAFMAdQBtAG0AYQByAHkASQBuAGYAbwByAG0AYQB0AGkAbwBu AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAACAf///////////////wAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAEUAAAAAEAAAAAAAAAUARABvAGMAdQBtAGUAbgB0AFMAdQBt AG0AYQByAHkASQBuAGYAbwByAG0AYQB0AGkAbwBuAAAAAAAAAAAAAAA4AAIBBAAAAP////////// AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAHABAAAAAAAAAQBDAG8AbQBw AE8AYgBqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABIA AgD///////////////8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcQAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAP///////////////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAA== ------_=_NextPart_001_01C7BE6D.3A8B53BB Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov ------_=_NextPart_001_01C7BE6D.3A8B53BB-- From keyprov-bounces@ietf.org Wed Jul 04 15:33:03 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6Aay-0003Hg-RF; Wed, 04 Jul 2007 15:33:00 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6Aax-0003HX-Dg for keyprov@ietf.org; Wed, 04 Jul 2007 15:32:59 -0400 Received: from gateway1.rsasecurity.com ([216.162.240.250]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1I6Aas-00035Y-ML for keyprov@ietf.org; Wed, 04 Jul 2007 15:32:59 -0400 Received: from hyperion.rsasecurity.com by gateway1.rsasecurity.com via smtpd (for stiedprmail1.ietf.ORG [156.154.16.150]) with SMTP; Wed, 4 Jul 2007 15:32:54 -0400 Received: from sdtihq24.securid.com (sdtihq24.na.rsa.net [10.100.8.152]) by hyperion.na.rsa.net (MOS 3.8.3-GA) with ESMTP id DEW54292; Wed, 4 Jul 2007 15:40:15 +0500 (GMT-5) Received: from rsana-ex-hq1.NA.RSA.NET (rsana-ex-hq1.na.rsa.net [10.100.8.50]) by sdtihq24.securid.com (8.12.10/8.12.9) with ESMTP id l64JWkX1006403; Wed, 4 Jul 2007 15:32:52 -0400 (EDT) X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Wed, 4 Jul 2007 15:32:46 -0400 Message-ID: <017630AA6DF2DF4EBC1DD4454F8EE2970B68CA36@rsana-ex-hq1.NA.RSA.NET> In-Reply-To: <2AB4BF7823761E4E90BA9372C429F1A901B9999C@DVNET26.DIVERSINET.COM> Thread-Topic: comments on dskpp draft thread-index: Ace+a3mmklkj2ma+SFyo/6uzSAN2kAAA4LQw References: <2AB4BF7823761E4E90BA9372C429F1A901B9999C@DVNET26.DIVERSINET.COM> From: "Doherty, Andrea" To: "Salah Machani" , X-Junkmail-Whitelist: YES (by domain whitelist at hyperion.na.rsa.net) X-Spam-Score: 0.1 (/) X-Scan-Signature: 559439f19b20fd64c5cd872aef84c6f3 Cc: Subject: [KEYPROV] RE: comments on dskpp draft X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0739612222==" Errors-To: keyprov-bounces@ietf.org This is a multi-part message in MIME format. --===============0739612222== Content-class: urn:content-classes:message Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C7BE72.19941A33" This is a multi-part message in MIME format. ------_=_NextPart_001_01C7BE72.19941A33 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Salah, Please see responses below. Andrea ________________________________ From: Salah Machani [mailto:SMachani@DIVERSINET.COM]=20 Sent: Wednesday, July 04, 2007 2:45 PM To: Doherty, Andrea; keyprov@ietf.org Subject: comments on dskpp draft Hi Andrea, =20 I scanned through the DSKPP draft and noticed few things I wanted to point out - see below. Overall very good work. [Doherty, Andrea] Thanks.=20 =20 =20 =20 Section 1.2 - last paragraph - There is a reference to [4] which I think is not needed here. This specification also defines mutual key generation between client and server similar to [4]. [Doherty, Andrea] Yes, I agree. =20 Somewhere mention of RFC4758 may be required, if even to state that this spec obsoletes that one. Not sure how to do that... Perhaps it is not actually handled in this document but only if this draft made it to RFC status (?) =20 Section 1.4 requirements =20 - This section does not state whether the protocol should or should not support some of the use cases that are identified in section 1.3, specifically the following use cases: o Use case 1.3.3: provisioning time window=20 [Doherty, Andrea] This use case is more of a desirable requirement, and is not explicitly covered by the protocol at this time. Would you agree?=20 o Use case 1.3.5: smart card provisioning and support for smart card APDUs [Doherty, Andrea] The requirement here pertains to the last paragraph of this section, and is already covered by R11.=20 o Use case 1.3.8 - SMS based provisioning [Doherty, Andrea] Issue#7 in the Issue Tracker covers this, and I did not address it in the recent draft, as it seemed to be out-of-scope until we resolve whether it is desired or not. How about if for now we add this as a Desirable Requirement? =20 Section 1.4.1: Mandatory requirements: =20 - General comment: all requirements are expressed with *SHOULD* instead of *MUST* while they are classified as mandatory requirements. We may have to revisit this list.=20 [Doherty, Andrea] Agree. For now I'll change to "must".=20 - R2: typo: "re-generated" should be changed to "pre-generated" [Doherty, Andrea] Good catch.=20 - R10: This might be a requirement for the secret container and not for the provisioning protocol.=20 [Doherty, Andrea] Agree if the PSKC is the only option, which it is not. That said, since PSKC is the default container, and since container details are out of the scope of the protocol, I think this requirement should be removed.=20 =20 Sections 3.3.2 and 3.3.3 - It will be useful to introduce here or somewhere else in the spec before section 5 the different profiles that are supported. The pass-phrase profile is mentioned in section 5.6.5 and is not introduced anywhere else before. =20 [Doherty, Andrea] You're right. They are covered in the appendix, but should be mentioned before section 5.=20 =20 =20 Section 3.10.14: the AuthenticationDataType Type Paragraph b) and last bullet indicate the use of client certificates for authentication without further details on how they are used while section 3.4.1.3 suggests using signed data with client certificate for authentication. We should clarify this in more details.=20 Section 9.2 - Ref [4] needs to be updated. [Doherty, Andrea] Will update as per comment (above) on Section 1.2.=20 - Ref [7] is incorrect and needs to be updated [Doherty, Andrea] Will update.=20 =20 =20 Thanks, =20 =20 Salah Machani Diversinet Corp.,=20 [O] +1 (416) 756 2324 x321| [M] +1 (647) 284 7816 |http://www.diversinet.com =20 =20 =20 =20 =20 ________________________________ Notice to Recipient: The information in this message is meant only for the intended recipient of the transmission and may contain confidential or privileged information.=20 Any copying, retransmittal, taking of action in reliance on, or other use of the information in this communication by persons other than the addressees is prohibited.=20 If you received this email in error, please immediately notify us and please delete or destroy all copies of this message. This message may have been altered without your or our knowledge and the sender does not accept any liability for any errors. Thank you. ------_=_NextPart_001_01C7BE72.19941A33 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Salah,
Please see responses below.
Andrea

From: Salah Machani=20 [mailto:SMachani@DIVERSINET.COM]
Sent: Wednesday, July 04, = 2007 2:45=20 PM
To: Doherty, Andrea; keyprov@ietf.org
Subject: = comments=20 on dskpp draft

Hi=20 Andrea,

 

I scanned=20 through the DSKPP draft and noticed few things I wanted to point out = – see=20 below.  Overall very good work.
[Doherty,=20 Andrea] Thanks. 

 

 

 

Section 1.2 – last=20 paragraph

-         =20 There is a reference to = [4] which I=20 think is not needed here.   This specification also defines = mutual key=20 generation between client and server similar to [4].
[Doherty, = Andrea] Yes, I=20 agree.  

      = Somewhere mention=20 of RFC4758 may be required, if even to state that this spec = obsoletes=20 that one.  Not sure how to do that...   Perhaps it = is not=20 actually handled in this document but only if this draft made it to RFC = status=20 (?)

 

Section 1.4=20 requirements

 

-         =20 This section does not = state whether=20 the protocol should or should not support some of the use cases that are = identified in section 1.3, specifically the following use=20 cases:

o       =20 Use case 1.3.3: = provisioning time=20 window
[Doherty,=20 Andrea] This use case is more of a desirable requirement, and = is=20 not explicitly covered by the protocol at this time.  Would = you=20 agree? 

o       =20 Use case 1.3.5: smart card = provisioning and support for smart card APDUs
[Doherty, Andrea] The requirement here = pertains to=20 the last paragraph of this section, and is already covered by=20 R11. 

o       =20 Use case 1.3.8 – SMS = based=20 provisioning
[Doherty,=20 Andrea] Issue#7 in the Issue Tracker covers this, and I did not = address it=20 in the recent draft, as it seemed to be out-of-scope until we resolve = whether it=20 is desired or not.  How about if for now we add this as a Desirable = Requirement?

 

Section 1.4.1: Mandatory=20 requirements:

 

- General=20 comment:  all requirements are expressed with *SHOULD* instead of = *MUST* while they are classified = as=20 mandatory requirements. We may have to revisit this list.
[Doherty, = Andrea] Agree. =20 For now I'll change to = "must". 

- R2: typo:=20 “re-generated”   should be changed to = “pre-generated”
[Doherty, = Andrea] Good=20 catch. 

- R10:  This might be = a=20 requirement for the secret container and not for the provisioning = protocol.=20
[Doherty,=20 Andrea] Agree if the PSKC is the only option, which it is = not. =20 That said, since PSKC is the default container, and since container = details are out of the scope of the protocol, I think this = requirement=20 should be removed. 

 

Sections 3.3.2 and=20 3.3.3

-         =20 It will be useful to = introduce here=20 or somewhere else in the spec before section 5 the different profiles = that are=20 supported.  The pass-phrase profile is mentioned in section 5.6.5 = and is=20 not introduced anywhere else before. 
[Doherty, Andrea] You're right.  = They=20 are covered in the appendix, but should be mentioned before section = 5. 

 

 

Section 3.10.14: the=20 AuthenticationDataType Type

Paragraph b) and last = bullet=20 indicate the use of client certificates for authentication without = further=20 details on how they are used while section 3.4.1.3 suggests using signed = data=20 with client certificate for authentication.   We should = clarify this=20 in more details.

Section=20 9.2

-         =20 Ref [4] needs to be=20 updated.
[Doherty,=20 Andrea] Will update as per comment (above) on Section=20 1.2. 

-         =20 Ref [7] is incorrect and = needs to be=20 updated
[Doherty,=20 Andrea] Will update. 

 

 

Thanks,

 

 

Salah=20 Machani


Diversinet=20 Corp., 

[O] +1 = (416) 756 2324=20 x321| [M] +1 (647) 284 7816 |http://www.diversinet.com

 

 

 

 

Notice to Recipient: The information in this message is meant only for = the=20 intended recipient of the transmission and may contain confidential or=20 privileged information.
Any copying, retransmittal, taking of action = in=20 reliance on, or other use of the information in this communication by = persons=20 other than the addressees is prohibited.
If you received this email = in=20 error, please immediately notify us and please delete or destroy all = copies of=20 this message.
This message may have been altered without your or our=20 knowledge and the sender does not accept any liability for any errors. = Thank=20 you.

------_=_NextPart_001_01C7BE72.19941A33-- --===============0739612222== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov --===============0739612222==-- From keyprov-bounces@ietf.org Wed Jul 04 16:06:48 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6B7g-0005rW-6b; Wed, 04 Jul 2007 16:06:48 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6B7f-0005kv-CF for keyprov@ietf.org; Wed, 04 Jul 2007 16:06:47 -0400 Received: from gateway1.rsasecurity.com ([216.162.240.250]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1I6B7a-0002FO-WD for keyprov@ietf.org; Wed, 04 Jul 2007 16:06:47 -0400 Received: from hyperion.rsasecurity.com by gateway1.rsasecurity.com via smtpd (for stiedprmail1.ietf.ORG [156.154.16.150]) with SMTP; Wed, 4 Jul 2007 16:06:42 -0400 Received: from sdtihq24.securid.com (sdtihq24.na.rsa.net [10.100.8.152]) by hyperion.na.rsa.net (MOS 3.8.3-GA) with ESMTP id DEW56629; Wed, 4 Jul 2007 16:14:01 +0500 (GMT-5) Received: from rsana-ex-hq1.NA.RSA.NET (rsana-ex-hq1.na.rsa.net [10.100.8.50]) by sdtihq24.securid.com (8.12.10/8.12.9) with ESMTP id l64K6cX1007821; Wed, 4 Jul 2007 16:06:38 -0400 (EDT) X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: [KEYPROV] Keyprov Draft Review by Niklas Neumann Date: Wed, 4 Jul 2007 16:06:32 -0400 Message-ID: <017630AA6DF2DF4EBC1DD4454F8EE2970B68CA38@rsana-ex-hq1.NA.RSA.NET> In-Reply-To: <4686709D.2040904@gmx.net> Thread-Topic: [KEYPROV] Keyprov Draft Review by Niklas Neumann thread-index: Ace7J9NRY82gm/qTRc+3E1q2KQnJsQDSplZA References: <4686709D.2040904@gmx.net> From: "Doherty, Andrea" To: "Hannes Tschofenig" , X-Junkmail-Whitelist: YES (by domain whitelist at hyperion.na.rsa.net) X-Spam-Score: 0.1 (/) X-Scan-Signature: 36b1f8810cb91289d885dc8ab4fc8172 Cc: Niklas Neumann X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Niklas, Thanks for your comments. Please see responses below. Andrea=20 -----Original Message----- From: Hannes Tschofenig [mailto:Hannes.Tschofenig@gmx.net]=20 Sent: Saturday, June 30, 2007 11:03 AM To: keyprov@ietf.org Cc: Niklas Neumann Subject: [KEYPROV] Keyprov Draft Review by Niklas Neumann I got the following draft review comments from Niklas Neumann. My forward to the mailing list... ------------------ Short Review of Keyprov Draft 1.3.6. A user renews its symmetric key with the same key ID * What is a Key ID in this context?=20 (adoherty)It is like a serial number for the key that is associated with a user's account (or a GUID associated with a user's account). The "same key ID" refers to the ID associated with the old K_TOKEN that is being renewed. 1.4.1. Mandatory Requirements * Section is called mandatory requirements but only lists recommended=20 requirements.=20 (adoherty)This will be corrected. 3.3.1. Four-pass DSKPP * Item e: I don't understand why there would be any use of including the=20 DSKPP Servers identity at this point. Shouldn't the identity be clear in the=20 beginning?=20 (adoherty)RFC4758 states that "The server's identity is an optional identifier for the service that has stored the generated key. The cryptographic token may store this identifier associated with the key in order to simplify later lookups." (adoherty)Note that for the DSKPP draft, the server's identity is part of the key container, no longer explicitly part of . Hence, item (e) will be corrected to refer to the container, which might include this type of information, such as specified in PSKC spec (ref [7]). 3.3.2. Two-pass DSKPP * "Note that the DSKPP "trigger" message MAY be used to trigger the=20 client's sending of the message.": Isn't that somewhat=20 self-explanatory? What else would the DSKPP trigger be doing than to trigger=20 the DSKPP Protocol?=20 (adoherty)Yes, you are right...perhaps the sentence should be rephrased to "the client's sending of the message can be OPTIONALLY triggered by the server if it first sends a DSKPP Initialization message." 3.10.7. The StatusCode Type * "NoSupportedKeyTypes" and following items: "Note that the error will=20 only occur if ..." is tautologous to the previous explanation in the same=20 paragraph.=20 (adoherty)Yes, it is "redundant" and will be fixed ("tautologous"...I had to look that one up :-) ) 3.10.12. The ProtocolVariantsType and the TwoPassSupportType Types * "Because 1-pass DSKPP does include a client request to the server, the=20 ProtocolVariantsType type MAY NOT be used to indicate support for 1-pass DSKPP.": Should mean "Because 1-pass DSKPP does *not!* ....". Also since the=20 ProtocolVariantsType type does not include an element to indicate support for=20 1-pass DSKPP it actually isn't an option which MAY be used.=20 (adoherty)Good catch! On a side note:=20 wouldn't it make sense to allow the client to indicate that it supports=20 1-pass DSKPP support? Maybe the server can remember the option and use 1-pass=20 DSKPP in the future with this client.=20 (adoherty)It seems more complete, to be sure. For now, I'll add it unless there are objections. 4.2.3. HTTP Headers * "There are no other restrictions on HTTP headers, ...": Maybe change it=20 to "... besides the requirement to set the Content-Type header value=20 according to 4.2.2." to not have redundant information at different locations=20 inside the document. Applies to 4.2.7. as well. EDIT: Not sure about this=20 anymore myself tbh.=20 (adoherty)Good catch on the redundancies...these will be removed. Overall Syntax and Semantics The documents structure is clear and good to follow and except for some run-on=20 sentences in the beginning it is coherent to read.=20 I only have 1 minor remark: Especially for me as a non-native English speaker the use of SHALL and SHOULD=20 in the same document does regularly bring me some confusion. While SHOULD=20 indicates a recommendation, SHALL expresses a requirement. I'd therefore prefer the use of the word MUST instead of the word SHALL. This maybe only a=20 personal issue though :) (adoherty)I think this is a perfectly reasonable request! _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Wed Jul 04 16:32:49 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6BWr-0005zu-1s; Wed, 04 Jul 2007 16:32:49 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6BWp-0005zk-Rc for keyprov@ietf.org; Wed, 04 Jul 2007 16:32:47 -0400 Received: from mail.gmx.net ([213.165.64.20]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1I6BWl-0006Yo-As for keyprov@ietf.org; Wed, 04 Jul 2007 16:32:47 -0400 Received: (qmail invoked by alias); 04 Jul 2007 20:32:41 -0000 Received: from p549877AB.dip.t-dialin.net (EHLO [192.168.1.4]) [84.152.119.171] by mail.gmx.net (mp043) with SMTP; 04 Jul 2007 22:32:41 +0200 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX1+nV0QgnAenwweZhSDsAH9ySb/I3tWd1X+PiN/dLt XVdWBdv7BreG+Y Message-ID: <468C03E9.5010302@gmx.net> Date: Wed, 04 Jul 2007 22:32:41 +0200 From: Hannes Tschofenig User-Agent: Thunderbird 2.0.0.4 (Windows/20070604) MIME-Version: 1.0 To: keyprov@ietf.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Y-GMX-Trusted: 0 X-Spam-Score: 0.0 (/) X-Scan-Signature: 0e9ebc0cbd700a87c0637ad0e2c91610 Subject: [KEYPROV] Comments regarding Requirements X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Hi all, I have a few comments to the requirements per the updated draft version: http://www.tschofenig.priv.at/svn/keyprov/work-in-progress/draft-doherty-keyprov-dskpp-01.txt Appendix C. Requirements This section specifies mandatory and desirable protocol requirements. Req-1: The protocol MUST support multiple types of keys for symmetric key-based authentication methods. [hannes] When we have the definition for "key type" then this requirement will be much easier to understand. I suggest to simplify it with: " The protocol MUST support multiple key types whereby a client has to express the key type it wants to get provisioned. It MUST be possible to define new key types without re-issuing a new specification. " Req-2: The protocol MUST support re-generated symmetric keys (by separate key issuance service) or locally generated keys in real-time (by provisioning server). [hannes] It is difficult to know what the protocol implication is. Req-3: The protocol MUST support mutually generated symmetric keys by both client and server (i.e., joint key control). [hannes] I added the term "joint key control" since I assume that's what is meant here. Please not that not all DSKPP versions support this property. Req-4: The protocol MUST allow devices to host multiple symmetric keys; each key MAY be acquired in a separate provisioning session. [hannes] This requirement is fine except for the fact that we use a different terminology, namely cryptographic token, in other places to refer to the keying material, algorithms, and context information that is provisioned. Hence, we might want to use the same terminology here as well. This requirement seems to imply that there is a bulk provisioning capability as well where you can obtain more than one cryptographic token with a single protocol exchange. Req-5: The protocol MUST support renewal of a symmetric key with the same key ID. [hannes] Cannot you just re-run the protocol to produce a key (with algorithms, etc.)? What is the actual implication for the protocol based on this requirement? Req-6: The protocol MUST allow clients to specify their cryptographic and security capabilities to the server and the server to indicate the cryptography and algorithm types that it will be using. [hannes] I think you want to say more than just "capabilities". The client might want to present the cryptographic algorithms it wans to use with the cryptographic token, it wants to use in the protocol run itself, identity information, etc. Req-7: The protocol MUST support mutual authentication and confidentiality of sensitive provisioning data. Fine. Req-8: The protocol MAY use a public-key infrastructure and the use of client certificates for device authentication or symmetric key data protection. The protocol MUST allow for other mechanisms, such as symmetric key-based techniques, to be used. Fine. Req-9: The protocol SHOULD NOT only rely on transport layer security. It SHOULD be compatible with transport layer security when available. Fine. Req-10: The protocol MUST carry key expiration date set by the key issuer. Fine Req-11: The protocol SHOULD allow the server to use pre-loaded symmetric transport keys on a device-by-device basis (i.e., smart card update keys, such as used by Global Platform for establishing a secure channel). I am not sure I understood this requirement. Req-12: The protocol MUST protect against replay attacks. Fine Req-13: The protocol MUST protect against MITM attacks. Fine Req-14: The protocol MAY support a device request to acquire multiple symmetric keys in the same session. [hannes] delete the term 'device' and replace "in the same session" with "with a single request". Req-15: The protocol MAY allow the provisioning server to verify that the key has been correctly provisioned to the client (i.e., key confirmation). [hannes] Since the DSKPP is a two party protocol we should just speak about a (DSKPP) client and a (DSKPP) server. Hence, we could write: "The protocol MAY allow the DSKPP server to verify that the key has been correctly provisioned to the DSKPP client (i.e., key confirmation). " Req-16: The protocol MAY support a client to notify the server upon symmetric key deletion. [hannes] Hmm. What motivates this requirement? Ciao Hannes _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Wed Jul 04 16:41:30 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6BfG-0001eS-0l; Wed, 04 Jul 2007 16:41:30 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6BfE-0001am-Fm for keyprov@ietf.org; Wed, 04 Jul 2007 16:41:28 -0400 Received: from mail.gmx.net ([213.165.64.20]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1I6BfA-0008Ej-5U for keyprov@ietf.org; Wed, 04 Jul 2007 16:41:28 -0400 Received: (qmail invoked by alias); 04 Jul 2007 20:41:23 -0000 Received: from p549877AB.dip.t-dialin.net (EHLO [192.168.1.4]) [84.152.119.171] by mail.gmx.net (mp019) with SMTP; 04 Jul 2007 22:41:23 +0200 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX18JkAIGrtAJxDdGAgZuYxXy3of0oCs8HufMmnXBml tTKetFLIVuCyiW Message-ID: <468C05F2.2060008@gmx.net> Date: Wed, 04 Jul 2007 22:41:22 +0200 From: Hannes Tschofenig User-Agent: Thunderbird 2.0.0.4 (Windows/20070604) MIME-Version: 1.0 To: keyprov@ietf.org, ECRIT , dime@ietf.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Y-GMX-Trusted: 0 X-Spam-Score: 0.0 (/) X-Scan-Signature: 7aefe408d50e9c7c47615841cb314bed Cc: Subject: [KEYPROV] Submission cut-off date before Chicago X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Please note the submission dates for Internet-Drafts before Chicago. July 9, Monday - Internet Draft final submission cut-off by 09:00 ET (13:00 UTC/GMT) Hannes _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Wed Jul 04 16:53:37 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6Bqx-0004QH-8a; Wed, 04 Jul 2007 16:53:35 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6Bqw-0004QC-HP for keyprov@ietf.org; Wed, 04 Jul 2007 16:53:34 -0400 Received: from mail.gmx.net ([213.165.64.20]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1I6Bps-0002Dz-D1 for keyprov@ietf.org; Wed, 04 Jul 2007 16:53:34 -0400 Received: (qmail invoked by alias); 04 Jul 2007 20:52:27 -0000 Received: from p549877AB.dip.t-dialin.net (EHLO [192.168.1.4]) [84.152.119.171] by mail.gmx.net (mp042) with SMTP; 04 Jul 2007 22:52:27 +0200 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX18rlskrJkYrCm3MpBcK6ZoMer7tv5/07CxSDNzcTm PsM2e2nSIqYr4a Message-ID: <468C0889.8000808@gmx.net> Date: Wed, 04 Jul 2007 22:52:25 +0200 From: Hannes Tschofenig User-Agent: Thunderbird 2.0.0.4 (Windows/20070604) MIME-Version: 1.0 To: keyprov@ietf.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Y-GMX-Trusted: 0 X-Spam-Score: 0.0 (/) X-Scan-Signature: de4f315c9369b71d7dd5909b42224370 Subject: [KEYPROV] Minutes of the KEYPROV Phone Conference (3rd July) X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org KEYPROV Design Phone Conference: 3rd July, 2007 Attendees: Andrea Doherty Hannes Tschofenig Discussion: Next steps for draft submissions and open issues with the current document. The plan is to submit a -01 version before the draft submission deadline. A couple of review comments have been sent to the mailing list and they will be incorporated and the document will be restructured a bit. Around IETF#69 the chairs will ask the group whether the current document can become a working group item. _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Thu Jul 05 17:16:18 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6YgN-0006EH-JC; Thu, 05 Jul 2007 17:16:11 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6Yg1-0005HX-3Q for keyprov@ietf.org; Thu, 05 Jul 2007 17:15:49 -0400 Received: from v29431.1blu.de ([88.84.142.131]) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1I6Yg0-0003lY-Ma for keyprov@ietf.org; Thu, 05 Jul 2007 17:15:49 -0400 Received: (qmail 20134 invoked from network); 5 Jul 2007 23:14:58 +0200 Received: from 213-239-234-98.clients.your-server.de (HELO ?213.239.196.40?) (213.239.234.98) by v29431.1blu.de with SMTP; 5 Jul 2007 23:14:58 +0200 Content-Type: text/plain; charset=utf-8 To: keyprov@ietf.org, mpei@verisign.com From: Andrea Doherty Date: Thu, 05 Jul 2007 20:57:01 +0000 X-Roundup-Name: KEYPROV Roundup Issue Tracker X-Roundup-Loop: hello X-Roundup-Version: 0.8.2 MIME-Version: 1.0 Message-Id: <1183669020.96.0.881494085382.issue21@http://www.tschofenig.priv.at> Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-Scan-Signature: d8ae4fd88fcaf47c1a71c804d04f413d Cc: Subject: [KEYPROV] [issue21] Consider to add object diagram in DSKPP for relationships among IDs X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: KEYPROV Roundup Issue Tracker List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Andrea Doherty added the comment: Device pertains to something physical that the user holds, and "cryptograph= ic=20 token", as stated in PKCS#11, "stores objects and can perform cryptographic=20 functions". However, the use of the word "token" is often confused with th= e=20 physical device, and equally often confused with the software that performs= the=20 functions. In addition, note that "token" gets used in different and equal= ly=20 confusing ways in other arenas, e.g., OASIS WS Security. =20 Thus, I propose that we do not use "token". I also propose that we refer=20 to "cryptographic module" wherever the PKCS#11 definition applies (on first=20 look, this will be almost a 1:1 replacement of "cryptographic token"=20 with "cryptographic module). With this proposal in mind, please consider t= he=20 following alternative to Shuh's initial object diagram: DSKPP Basic Object Model =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D ----------- ------------- |User | |Device |=20 |---------|* owns *|-----------| | UserID |--------->| DeviceID | | ... | | ... | ----------- ------------- | 1 | | contains | | 1 | V (DSKPP Client) ----------------------- |Cryptographic Module | |---------------------| | | |Encryption Algorithms| |MAC Algorithms | |... | ----------------------- | 1 | | contains | | 1 V ----------------------- |Key Container | |---------------------| | | |Encryption Algorithms| |MAC Algorithms | |... | ----------------------- | 1 | | contains | V * ------------- |Key |=20 |-----------| | KeyID | | ... | ------------- _________________________________________________________ KEYPROV Roundup Issue Tracker _________________________________________________________ _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Fri Jul 06 09:42:12 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6o4R-0006tE-VU; Fri, 06 Jul 2007 09:42:03 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6o4Q-0006t6-Qi for keyprov@ietf.org; Fri, 06 Jul 2007 09:42:02 -0400 Received: from v29431.1blu.de ([88.84.142.131]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1I6o4I-0008Jy-T1 for keyprov@ietf.org; Fri, 06 Jul 2007 09:42:02 -0400 Received: (qmail 1399 invoked from network); 6 Jul 2007 15:41:53 +0200 Received: from 213-239-234-98.clients.your-server.de (HELO ?213.239.196.40?) (213.239.234.98) by v29431.1blu.de with SMTP; 6 Jul 2007 15:41:53 +0200 Content-Type: text/plain; charset=utf-8 To: keyprov@ietf.org, mpei@verisign.com From: Andrea Doherty Date: Fri, 06 Jul 2007 13:23:53 +0000 X-Roundup-Name: KEYPROV Roundup Issue Tracker X-Roundup-Loop: hello X-Roundup-Version: 0.8.2 MIME-Version: 1.0 Message-Id: <1183728233.84.0.505898463343.issue21@http://www.tschofenig.priv.at> Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-Scan-Signature: 30ac594df0e66ffa5a93eb4c48bcb014 Cc: Subject: [KEYPROV] [issue21] Consider to add object diagram in DSKPP for relationships among IDs X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: KEYPROV Roundup Issue Tracker List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Andrea Doherty added the comment: Re-submitting as it did not reach the mailing list the first time... _________________________________________________________ KEYPROV Roundup Issue Tracker _________________________________________________________ _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Fri Jul 06 09:45:16 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6o7X-0001Zr-OM; Fri, 06 Jul 2007 09:45:15 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6o7W-0001Si-Nj for keyprov@ietf.org; Fri, 06 Jul 2007 09:45:14 -0400 Received: from gateway1.rsasecurity.com ([216.162.240.250]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1I6o7N-0000Do-5N for keyprov@ietf.org; Fri, 06 Jul 2007 09:45:14 -0400 Received: from hyperion.rsasecurity.com by gateway1.rsasecurity.com via smtpd (for ietf-mx.ietf.ORG [156.154.16.150]) with SMTP; Fri, 6 Jul 2007 09:45:05 -0400 Received: from sdtihq24.securid.com (sdtihq24.na.rsa.net [10.100.8.152]) by hyperion.na.rsa.net (MOS 3.8.3-GA) with ESMTP id DEY77877; Fri, 6 Jul 2007 09:52:36 +0500 (GMT-5) Received: from rsana-ex-hq1.NA.RSA.NET (rsana-ex-hq1.na.rsa.net [10.100.8.50]) by sdtihq24.securid.com (8.12.10/8.12.9) with ESMTP id l66Dj4X1020134 for ; Fri, 6 Jul 2007 09:45:04 -0400 (EDT) X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Fri, 6 Jul 2007 09:45:03 -0400 Message-ID: <017630AA6DF2DF4EBC1DD4454F8EE2970B68D153@rsana-ex-hq1.NA.RSA.NET> Thread-Topic: Re Issue 21 (object model) thread-index: Ace/09syZ3EwezqdQ6+hX/ysU3MF4w== From: "Doherty, Andrea" To: X-Junkmail-Whitelist: YES (by domain whitelist at hyperion.na.rsa.net) X-Spam-Score: 0.1 (/) X-Scan-Signature: d8ae4fd88fcaf47c1a71c804d04f413d Subject: [KEYPROV] Re Issue 21 (object model) X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Yesterday I added this message to the Issue Tracker, but for some reason it was not propagated to the mailing list. Here it is: Issue 21 - new message (5 July 07) Device pertains to something physical that the user holds, and "cryptographic=20 token", as stated in PKCS#11, "stores objects and can perform cryptographic=20 functions". However, the use of the word "token" is often confused with the=20 physical device, and equally often confused with the software that performs the=20 functions. In addition, note that "token" gets used in different and equally=20 confusing ways in other arenas, e.g., OASIS WS Security. =20 Thus, I propose that we do not use "token". I also propose that we refer=20 to "cryptographic module" wherever the PKCS#11 definition applies (on first=20 look, this will be almost a 1:1 replacement of "cryptographic token"=20 with "cryptographic module). With this proposal in mind, please consider the=20 following alternative to Shuh's initial object diagram: DSKPP Basic Object Model =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D ----------- ------------- |User | |Device |=20 |---------|* owns *|-----------| | UserID |--------->| DeviceID | | ... | | ... | ----------- ------------- | 1 | | contains | | 1 | V (DSKPP Client) ----------------------- |Cryptographic Module | |---------------------| | | |Encryption Algorithms| |MAC Algorithms | |... | ----------------------- | 1 | | contains | | 1 V ----------------------- |Key Container | |---------------------| | | |Encryption Algorithms| |MAC Algorithms | |... | ----------------------- | 1 | | contains | V * ------------- |Key |=20 |-----------| | KeyID | | ... | ------------- _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Fri Jul 06 11:01:09 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6pIz-0004Mo-Et; Fri, 06 Jul 2007 11:01:09 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6pIy-0004MT-Ii for keyprov@ietf.org; Fri, 06 Jul 2007 11:01:08 -0400 Received: from mail.gmx.net ([213.165.64.20]) by chiedprmail1.ietf.org with smtp (Exim 4.43) id 1I6pIy-0000KN-3g for keyprov@ietf.org; Fri, 06 Jul 2007 11:01:08 -0400 Received: (qmail invoked by alias); 06 Jul 2007 15:00:51 -0000 Received: from socks1.netz.sbs.de (EHLO [192.35.17.26]) [192.35.17.26] by mail.gmx.net (mp027) with SMTP; 06 Jul 2007 17:00:51 +0200 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX181DWBdnuE1GZowZlbwol5qxMRur58ugiuRvuWQqN FNyquOIIeOsges Message-ID: <468E5920.90105@gmx.net> Date: Fri, 06 Jul 2007 17:00:48 +0200 From: Hannes Tschofenig User-Agent: Thunderbird 2.0.0.4 (Windows/20070604) MIME-Version: 1.0 To: "Doherty, Andrea" Subject: Re: [KEYPROV] Re Issue 21 (object model) References: <017630AA6DF2DF4EBC1DD4454F8EE2970B68D153@rsana-ex-hq1.NA.RSA.NET> In-Reply-To: <017630AA6DF2DF4EBC1DD4454F8EE2970B68D153@rsana-ex-hq1.NA.RSA.NET> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Y-GMX-Trusted: 0 X-Spam-Score: 0.0 (/) X-Scan-Signature: e1b0e72ff1bbd457ceef31828f216a86 Cc: keyprov@ietf.org X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Hi Andrea, when we use the term "cryptographic module" as a replacement for "cryptographic token" then I am not sure the cardinality between device and "cryptographic module" is correct. Shouldn't it be 1 device may be have multiple "cryptographic modules"? Furthermore, where does the "Key Container" concept come from? Cannot you just collapse the "Key Container" and the "Key"? I believe that the MAC and encryption algorithms belong to the Key rather than to the container. Where does the Key Type fit in there? Ciao Hannes Doherty, Andrea wrote: > Yesterday I added this message to the Issue Tracker, but for some reason > it was not propagated to the mailing list. Here it is: > > Issue 21 - new message (5 July 07) > Device pertains to something physical that the user holds, and > "cryptographic > token", as stated in PKCS#11, "stores objects and can perform > cryptographic > functions". However, the use of the word "token" is often confused with > the > physical device, and equally often confused with the software that > performs the > functions. In addition, note that "token" gets used in different and > equally > confusing ways in other arenas, e.g., OASIS WS Security. > > Thus, I propose that we do not use "token". I also propose that we > refer > to "cryptographic module" wherever the PKCS#11 definition applies (on > first > look, this will be almost a 1:1 replacement of "cryptographic token" > with "cryptographic module). With this proposal in mind, please > consider the > following alternative to Shuh's initial object diagram: > > DSKPP Basic Object Model > ======================== > > ----------- ------------- > |User | |Device | > |---------|* owns *|-----------| > | UserID |--------->| DeviceID | > | ... | | ... | > ----------- ------------- > | 1 > | > | contains > | > | 1 > | > V (DSKPP Client) > ----------------------- > |Cryptographic Module | > |---------------------| > | | > |Encryption Algorithms| > |MAC Algorithms | > |... | > ----------------------- > | 1 > | > | contains > | > | 1 > V > ----------------------- > |f | > |---------------------| > | | > |Encryption Algorithms| > |MAC Algorithms | > |... | > ----------------------- > | 1 > | > | contains > | > V * > ------------- > |Key | > |-----------| > | KeyID | > | ... | > ------------- > > > _______________________________________________ > KEYPROV mailing list > KEYPROV@ietf.org > https://www1.ietf.org/mailman/listinfo/keyprov > _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Fri Jul 06 11:22:09 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6pdJ-0007N7-Im; Fri, 06 Jul 2007 11:22:09 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6pdF-0007JZ-5v for keyprov@ietf.org; Fri, 06 Jul 2007 11:22:05 -0400 Received: from gateway1.rsasecurity.com ([216.162.240.250]) by chiedprmail1.ietf.org with smtp (Exim 4.43) id 1I6pdE-0003NM-QX for keyprov@ietf.org; Fri, 06 Jul 2007 11:22:05 -0400 Received: from hyperion.rsasecurity.com by gateway1.rsasecurity.com via smtpd (for chiedprmail1.ietf.ORG [156.154.24.150]) with SMTP; Fri, 6 Jul 2007 11:21:23 -0400 Received: from sdtihq24.securid.com (sdtihq24.na.rsa.net [10.100.8.152]) by hyperion.na.rsa.net (MOS 3.8.3-GA) with ESMTP id DEY87773; Fri, 6 Jul 2007 11:28:53 +0500 (GMT-5) Received: from rsana-ex-hq1.NA.RSA.NET (rsana-ex-hq1.na.rsa.net [10.100.8.50]) by sdtihq24.securid.com (8.12.10/8.12.9) with ESMTP id l66FLFX3001014; Fri, 6 Jul 2007 11:21:21 -0400 (EDT) X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: [KEYPROV] Re Issue 21 (object model) Date: Fri, 6 Jul 2007 11:21:18 -0400 Message-ID: <017630AA6DF2DF4EBC1DD4454F8EE2970B68D24C@rsana-ex-hq1.NA.RSA.NET> In-Reply-To: <468E5920.90105@gmx.net> Thread-Topic: [KEYPROV] Re Issue 21 (object model) thread-index: Ace/3nNHGZCONXFqTJ+S3S4aq6NWQAAAFu4w References: <017630AA6DF2DF4EBC1DD4454F8EE2970B68D153@rsana-ex-hq1.NA.RSA.NET> <468E5920.90105@gmx.net> From: "Doherty, Andrea" To: "Hannes Tschofenig" X-Junkmail-Whitelist: YES (by domain whitelist at hyperion.na.rsa.net) X-Spam-Score: 0.1 (/) X-Scan-Signature: 6ba8aaf827dcb437101951262f69b3de Cc: keyprov@ietf.org X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Hannes, I agree with your points. The only challenge I see is that we are referring to a Key Container in the DSKPP to include key config data (including key type); the way the PSKC describes the object model for Key Container implies one container for multiple devices (see draft-vassilev-portable-symmetric-key-cointainer-02, section 6). However, because the PSKC view pertains to server-side store more than client-side, and since it is dealing with a broader set of use cases than DSKPP (including bulk key provisioning and migration), perhaps it would indeed be best to do the collapsing here, making a general reference to "Key Container" as shown below (?)=20 Andrea DSKPP Basic Object Model =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D ----------- ------------- |User | |Device |=20 |---------|* owns *|-----------| | UserID |--------->| DeviceID | | ... | | ... | ----------- ------------- | 1 | | contains |=20 | * V (DSKPP Client) ----------------------- |Cryptographic Module | |---------------------| |Encryption Algorithms| |MAC Algorithms | |... | ----------------------- | 1 | | contains | | * V (Key Container) ----------------------- |Key | |---------------------| |KeyID | |Key Type | |... | -----------------------=20 -----Original Message----- From: Hannes Tschofenig [mailto:Hannes.Tschofenig@gmx.net]=20 Sent: Friday, July 06, 2007 11:01 AM To: Doherty, Andrea Cc: keyprov@ietf.org Subject: Re: [KEYPROV] Re Issue 21 (object model) Hi Andrea, when we use the term "cryptographic module" as a replacement for=20 "cryptographic token" then I am not sure the cardinality between device=20 and "cryptographic module" is correct. Shouldn't it be 1 device may be=20 have multiple "cryptographic modules"? Furthermore, where does the "Key Container" concept come from? Cannot=20 you just collapse the "Key Container" and the "Key"? I believe that the MAC and encryption algorithms belong to the Key=20 rather than to the container. Where does the Key Type fit in there? Ciao Hannes Doherty, Andrea wrote: > Yesterday I added this message to the Issue Tracker, but for some reason > it was not propagated to the mailing list. Here it is: > > Issue 21 - new message (5 July 07) > Device pertains to something physical that the user holds, and > "cryptographic=20 > token", as stated in PKCS#11, "stores objects and can perform > cryptographic=20 > functions". However, the use of the word "token" is often confused with > the=20 > physical device, and equally often confused with the software that > performs the=20 > functions. In addition, note that "token" gets used in different and > equally=20 > confusing ways in other arenas, e.g., OASIS WS Security. =20 > > Thus, I propose that we do not use "token". I also propose that we > refer=20 > to "cryptographic module" wherever the PKCS#11 definition applies (on > first=20 > look, this will be almost a 1:1 replacement of "cryptographic token"=20 > with "cryptographic module). With this proposal in mind, please > consider the=20 > following alternative to Shuh's initial object diagram: > > DSKPP Basic Object Model > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > > ----------- ------------- > |User | |Device |=20 > |---------|* owns *|-----------| > | UserID |--------->| DeviceID | > | ... | | ... | > ----------- ------------- > | 1 > | > | contains > | > | 1 > | > V (DSKPP Client) > ----------------------- > |Cryptographic Module | > |---------------------| > | | > |Encryption Algorithms| > |MAC Algorithms | > |... | > ----------------------- > | 1 > | > | contains > | > | 1 > V > ----------------------- > |f | > |---------------------| > | | > |Encryption Algorithms| > |MAC Algorithms | > |... | > ----------------------- > | 1 > | > | contains > | > V * > ------------- > |Key |=20 > |-----------| > | KeyID | > | ... | > ------------- > > > _______________________________________________ > KEYPROV mailing list > KEYPROV@ietf.org > https://www1.ietf.org/mailman/listinfo/keyprov > =20 _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Fri Jul 06 11:38:24 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6pt2-0003Nh-Ft; Fri, 06 Jul 2007 11:38:24 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6pt1-0003G3-Do for keyprov@ietf.org; Fri, 06 Jul 2007 11:38:23 -0400 Received: from robin.verisign.com ([65.205.251.75]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1I6psw-0003Rg-QF for keyprov@ietf.org; Fri, 06 Jul 2007 11:38:23 -0400 Received: from MOU1WNEXCN03.vcorp.ad.vrsn.com (mailer6.verisign.com [65.205.251.33]) by robin.verisign.com (8.13.6/8.13.4) with ESMTP id l66FcBed000744; Fri, 6 Jul 2007 08:38:15 -0700 Received: from MOU1WNEXMB10.vcorp.ad.vrsn.com ([10.25.13.204]) by MOU1WNEXCN03.vcorp.ad.vrsn.com with Microsoft SMTPSVC(6.0.3790.1830); Fri, 6 Jul 2007 08:38:14 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Fri, 6 Jul 2007 08:38:12 -0700 Message-ID: <3E5A2F1AD44F5E49A74F79AB47C0C0C939F30F@mou1wnexmb10.vcorp.ad.vrsn.com> In-Reply-To: <017630AA6DF2DF4EBC1DD4454F8EE2970B68D24C@rsana-ex-hq1.NA.RSA.NET> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: PSKC draft submission discussion on 07/06/07 Thread-Index: Ace/3nNHGZCONXFqTJ+S3S4aq6NWQAAAFu4wAACxbiA= From: "Pei, Mingliang" To: "Doherty, Andrea" , "Hannes Tschofenig" X-OriginalArrivalTime: 06 Jul 2007 15:38:14.0864 (UTC) FILETIME=[AAE00D00:01C7BFE3] X-Spam-Score: 0.1 (/) X-Scan-Signature: f2984bf50fb52a9e56055f779793d783 Cc: keyprov@ietf.org Subject: [KEYPROV] PSKC draft submission discussion on 07/06/07 X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Attendee: Philip Baker Mingliang Pei The topic focused on draft submission plan before 69-th IETF meeting. We originally thought to have another conf call next Monday while it is a holiday week this week but it would be too late before the submission cut off date. We have had two meetings in the past two weeks, and have had many comments and changes agreed.=20 1. We are going to revise PSKC to include the changes agreed. 2. One concern is that some changes in PSKC may not be get to DSKPP in time while both drafts are revising. We consider that a revised PSKC is better for discussion in IETF. There are some issues that have not been completely resolved, which we can discuss in IETF meeting, and update into the draft afterwards. - Ming > -----Original Message----- > From: Doherty, Andrea [mailto:adoherty@rsa.com]=20 > Sent: Friday, July 06, 2007 8:21 AM > To: Hannes Tschofenig > Cc: keyprov@ietf.org > Subject: RE: [KEYPROV] Re Issue 21 (object model) >=20 > Hannes, > I agree with your points. The only challenge I see is that=20 > we are referring to a Key Container in the DSKPP to include=20 > key config data (including key type); the way the PSKC=20 > describes the object model for Key Container implies one=20 > container for multiple devices (see=20 > draft-vassilev-portable-symmetric-key-cointainer-02, section 6). > However, because the PSKC view pertains to server-side store=20 > more than client-side, and since it is dealing with a broader=20 > set of use cases than DSKPP (including bulk key provisioning=20 > and migration), perhaps it would indeed be best to do the=20 > collapsing here, making a general reference to "Key=20 > Container" as shown below (?) Andrea >=20 > DSKPP Basic Object Model > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > ----------- ------------- > |User | |Device |=20 > |---------|* owns *|-----------| > | UserID |--------->| DeviceID | > | ... | | ... | > ----------- ------------- > | 1 > | > | contains > |=20 > | * > V (DSKPP Client) > ----------------------- > |Cryptographic Module | > |---------------------| > |Encryption Algorithms| > |MAC Algorithms | > |... | > ----------------------- > | 1 > | > | contains > | > | * > V (Key Container) > ----------------------- > |Key | > |---------------------| > |KeyID | > |Key Type | > |... | > -----------------------=20 >=20 > -----Original Message----- > From: Hannes Tschofenig [mailto:Hannes.Tschofenig@gmx.net] > Sent: Friday, July 06, 2007 11:01 AM > To: Doherty, Andrea > Cc: keyprov@ietf.org > Subject: Re: [KEYPROV] Re Issue 21 (object model) >=20 > Hi Andrea, >=20 > when we use the term "cryptographic module" as a replacement=20 > for "cryptographic token" then I am not sure the cardinality=20 > between device and "cryptographic module" is correct.=20 > Shouldn't it be 1 device may be have multiple "cryptographic modules"? >=20 > Furthermore, where does the "Key Container" concept come=20 > from? Cannot you just collapse the "Key Container" and the "Key"? > I believe that the MAC and encryption algorithms belong to=20 > the Key rather than to the container. >=20 > Where does the Key Type fit in there? >=20 > Ciao > Hannes >=20 > Doherty, Andrea wrote: > > Yesterday I added this message to the Issue Tracker, but for some > reason > > it was not propagated to the mailing list. Here it is: > > > > Issue 21 - new message (5 July 07) > > Device pertains to something physical that the user holds, and=20 > > "cryptographic token", as stated in PKCS#11, "stores=20 > objects and can=20 > > perform cryptographic functions". However, the use of the word=20 > > "token" is often confused > with > > the > > physical device, and equally often confused with the software that=20 > > performs the functions. In addition, note that "token"=20 > gets used in=20 > > different and equally confusing ways in other arenas, e.g.,=20 > OASIS WS=20 > > Security. > > > > Thus, I propose that we do not use "token". I also propose that we=20 > > refer to "cryptographic module" wherever the PKCS#11 definition=20 > > applies (on first look, this will be almost a 1:1 replacement of=20 > > "cryptographic token" > > with "cryptographic module). With this proposal in mind, please=20 > > consider the following alternative to Shuh's initial object diagram: > > > > DSKPP Basic Object Model > > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > > > > ----------- ------------- > > |User | |Device |=20 > > |---------|* owns *|-----------| > > | UserID |--------->| DeviceID | > > | ... | | ... | > > ----------- ------------- > > | 1 > > | > > | contains > > | > > | 1 > > | > > V (DSKPP Client) > > ----------------------- > > |Cryptographic Module | > > |---------------------| > > | | > > |Encryption Algorithms| > > |MAC Algorithms | > > |... | > > ----------------------- > > | 1 > > | > > | contains > > | > > | 1 > > V > > ----------------------- > > |f | > > |---------------------| > > | | > > |Encryption Algorithms| > > |MAC Algorithms | > > |... | > > ----------------------- > > | 1 > > | > > | contains > > | > > V * > > ------------- > > |Key |=20 > > |-----------| > > | KeyID | > > | ... | > > ------------- > > > > > > _______________________________________________ > > KEYPROV mailing list > > KEYPROV@ietf.org > > https://www1.ietf.org/mailman/listinfo/keyprov > > =20 >=20 >=20 > _______________________________________________ > KEYPROV mailing list > KEYPROV@ietf.org > https://www1.ietf.org/mailman/listinfo/keyprov >=20 _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Fri Jul 06 11:52:57 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6q76-0002W6-Gd; Fri, 06 Jul 2007 11:52:56 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6q75-0002Tz-3s for keyprov@ietf.org; Fri, 06 Jul 2007 11:52:55 -0400 Received: from robin.verisign.com ([65.205.251.75]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1I6q6z-00071O-S6 for keyprov@ietf.org; Fri, 06 Jul 2007 11:52:55 -0400 Received: from MOU1WNEXCN02.vcorp.ad.vrsn.com (mailer2.verisign.com [65.205.251.35]) by robin.verisign.com (8.13.6/8.13.4) with ESMTP id l66Fqb9j006580; Fri, 6 Jul 2007 08:52:38 -0700 Received: from MOU1WNEXMB10.vcorp.ad.vrsn.com ([10.25.13.204]) by MOU1WNEXCN02.vcorp.ad.vrsn.com with Microsoft SMTPSVC(6.0.3790.1830); Fri, 6 Jul 2007 08:52:38 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:calendarmessage MIME-Version: 1.0 Date: Fri, 6 Jul 2007 08:52:35 -0700 Message-ID: <3E5A2F1AD44F5E49A74F79AB47C0C0C939F311@mou1wnexmb10.vcorp.ad.vrsn.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Revising PSKC RFC discussion Thread-Index: Ace83M5cnGyixloYTNqAlOxgH6xigADCN1vw From: "Pei, Mingliang" To: "Philip Hoyer" , "Shuh Chang" , "Salah Machani" , , "Hallam-Baker, Phillip" , "Hannes Tschofenig" , "Stuart Vaeth" , "M'Raihi, David" , X-OriginalArrivalTime: 06 Jul 2007 15:52:38.0082 (UTC) FILETIME=[AD64AA20:01C7BFE5] X-Spam-Score: 0.3 (/) X-Scan-Signature: 20f22c03b5c66958bff5ef54fcda6e48 Cc: Subject: [KEYPROV] Updated: Revising PSKC RFC discussion X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0894140444==" Errors-To: keyprov-bounces@ietf.org This is a multi-part message in MIME format. --===============0894140444== Content-class: urn:content-classes:calendarmessage Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C7BFE5.AD42DA4B" This is a multi-part message in MIME format. ------_=_NextPart_001_01C7BFE5.AD42DA4B Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable When: Monday, July 09, 2007 8:00 AM-9:00 AM (GMT-08:00) Pacific Time (US = & Canada). Where: 1-888-240-4148 Passcode 563960 *~*~*~*~*~*~*~*~*~* Let us this conf call before IETF meeting for the following agenda: 1. Review changes made to revised PSKC to next IETF and plan for = remaining issues 2. Discuss to prepare some slides for PSKC update presentation in = Chicago IETF Conference Access: Toll free: 1-888-240-4148 Toll: 1-719-234-0214=20 Passcode: 563960 ------_=_NextPart_001_01C7BFE5.AD42DA4B Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Updated: Revising PSKC RFC discussion

When: Monday, July 09, 2007 8:00 = AM-9:00 AM (GMT-08:00) Pacific Time (US & Canada).
Where: 1-888-240-4148 Passcode = 563960

*~*~*~*~*~*~*~*~*~*


Let us this conf call before IETF = meeting for the following agenda:

1. Review changes made to revised = PSKC to next IETF and plan for remaining issues
2. Discuss to prepare some = slides for PSKC update presentation in Chicago IETF

Conference Access:
  Toll = free:          = 1-888-240-4148
  = Toll:           &n= bsp;   1-719-234-0214
  = Passcode:           = 563960

------_=_NextPart_001_01C7BFE5.AD42DA4B Content-class: urn:content-classes:calendarmessage Content-Type: text/calendar; method=REQUEST; name="meeting.ics" Content-Transfer-Encoding: 8bit BEGIN:VCALENDAR METHOD:REQUEST PRODID:Microsoft CDO for Microsoft Exchange VERSION:2.0 BEGIN:VTIMEZONE TZID:(GMT-08.00) Pacific Time (US & Canada)/Tijuana X-MICROSOFT-CDO-TZID:13 BEGIN:STANDARD DTSTART:16010101T020000 TZOFFSETFROM:-0700 TZOFFSETTO:-0800 RRULE:FREQ=YEARLY;WKST=MO;INTERVAL=1;BYMONTH=11;BYDAY=1SU END:STANDARD BEGIN:DAYLIGHT DTSTART:16010101T020000 TZOFFSETFROM:-0800 TZOFFSETTO:-0700 RRULE:FREQ=YEARLY;WKST=MO;INTERVAL=1;BYMONTH=3;BYDAY=2SU END:DAYLIGHT END:VTIMEZONE BEGIN:VEVENT DTSTAMP:20070706T155235Z DTSTART;TZID="(GMT-08.00) Pacific Time (US & Canada)/Tijuana":20070709T0800 00 SUMMARY:Updated: Revising PSKC RFC discussion UID:040000008200E00074C5B7101A82E00800000000A02AF021A2BCC701000000000000000 010000000E8FB2ADB85CB5A4BB89ADB7B8E59EE66 ATTENDEE;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;X-REPLYTIME=16021023T00 1800Z;RSVP=TRUE;CN="'Philip Hoyer'":MAILTO:philip.hoyer@actividentity.com ATTENDEE;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;X-REPLYTIME=20070703T19 3200Z;RSVP=TRUE;CN="Shuh Chang":MAILTO:shuh.chang@gemalto.com ATTENDEE;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;X-REPLYTIME=20070703T13 0000Z;RSVP=TRUE;CN="Salah Machani":MAILTO:SMachani@DIVERSINET.COM ATTENDEE;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;X-REPLYTIME=16021023T00 1800Z;RSVP=TRUE;CN="jon.martinsson@portwise.com":MAILTO:jon.martinsson@por twise.com ATTENDEE;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;X-REPLYTIME=16021023T00 1800Z;RSVP=TRUE;CN="Hallam-Baker, Phillip":MAILTO:pbaker@verisign.com ATTENDEE;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;X-REPLYTIME=16021023T00 1800Z;RSVP=TRUE;CN="Hannes Tschofenig":MAILTO:Hannes.Tschofenig@gmx.net ATTENDEE;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;X-REPLYTIME=16021023T00 1800Z;RSVP=TRUE;CN="Stuart Vaeth":MAILTO:SVaeth@DIVERSINET.COM ATTENDEE;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;X-REPLYTIME=20070702T20 0000Z;RSVP=TRUE;CN="M'Raihi, David":MAILTO:dmraihi@verisign.com ATTENDEE;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP=TRUE;CN="keyprov@i etf.org":MAILTO:keyprov@ietf.org ORGANIZER;CN="Pei, Mingliang":MAILTO:mpei@verisign.com LOCATION:1-888-240-4148 Passcode 563960 DTEND;TZID="(GMT-08.00) Pacific Time (US & Canada)/Tijuana":20070709T090000 DESCRIPTION:\NLet us this conf call before IETF meeting for the following a genda:\N\N1. Review changes made to revised PSKC to next IETF and plan for remaining issues\N2. Discuss to prepare some slides for PSKC update prese ntation in Chicago IETF\N\NConference Access:\N Toll free: 1-888 -240-4148\N Toll: 1-719-234-0214 \N Passcode: 56 3960\N\N SEQUENCE:0 PRIORITY:5 CLASS: CREATED:20070706T155237Z LAST-MODIFIED:20070706T155237Z STATUS:CONFIRMED TRANSP:OPAQUE X-MICROSOFT-CDO-BUSYSTATUS:BUSY X-MICROSOFT-CDO-INSTTYPE:0 X-MICROSOFT-CDO-INTENDEDSTATUS:BUSY X-MICROSOFT-CDO-ALLDAYEVENT:FALSE X-MICROSOFT-CDO-IMPORTANCE:1 X-MICROSOFT-CDO-OWNERAPPTID:1398962135 X-MICROSOFT-CDO-APPT-SEQUENCE:2 X-MICROSOFT-CDO-ATTENDEE-CRITICAL-CHANGE:20070706T155235Z X-MICROSOFT-CDO-OWNER-CRITICAL-CHANGE:20070706T155235Z END:VEVENT END:VCALENDAR ------_=_NextPart_001_01C7BFE5.AD42DA4B-- --===============0894140444== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov --===============0894140444==-- From keyprov-bounces@ietf.org Fri Jul 06 12:02:38 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6qGS-00061o-KX; Fri, 06 Jul 2007 12:02:37 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6qGQ-00061X-Fd for keyprov@ietf.org; Fri, 06 Jul 2007 12:02:34 -0400 Received: from colibri.verisign.com ([65.205.251.74]) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1I6qGQ-0008H5-0l for keyprov@ietf.org; Fri, 06 Jul 2007 12:02:34 -0400 Received: from mou1wnexcn01.vcorp.ad.vrsn.com (mailer1.verisign.com [65.205.251.34]) by colibri.verisign.com (8.13.6/8.13.4) with ESMTP id l66G1gSH021144; Fri, 6 Jul 2007 09:01:42 -0700 Received: from MOU1WNEXMB10.vcorp.ad.vrsn.com ([10.25.13.204]) by mou1wnexcn01.vcorp.ad.vrsn.com with Microsoft SMTPSVC(6.0.3790.1830); Fri, 6 Jul 2007 09:01:41 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: [KEYPROV] Re Issue 21 (object model) Date: Fri, 6 Jul 2007 09:01:39 -0700 Message-ID: <3E5A2F1AD44F5E49A74F79AB47C0C0C939F312@mou1wnexmb10.vcorp.ad.vrsn.com> In-Reply-To: <017630AA6DF2DF4EBC1DD4454F8EE2970B68D24C@rsana-ex-hq1.NA.RSA.NET> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [KEYPROV] Re Issue 21 (object model) Thread-Index: Ace/3nNHGZCONXFqTJ+S3S4aq6NWQAAAFu4wAAH1G7A= From: "Pei, Mingliang" To: "Doherty, Andrea" , "Hannes Tschofenig" X-OriginalArrivalTime: 06 Jul 2007 16:01:41.0717 (UTC) FILETIME=[F16CC850:01C7BFE6] X-Spam-Score: 0.1 (/) X-Scan-Signature: 9af087f15dbdd4c64ae6bbcdbc5b1d44 Cc: keyprov@ietf.org X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org I think that this version is better. Key Container is used by server side to store and transport set of keys which can serve for multiple devices, and it doesn't have to reflect in client side logical diagram. - Ming=20 > -----Original Message----- > From: Doherty, Andrea [mailto:adoherty@rsa.com]=20 > Sent: Friday, July 06, 2007 8:21 AM > To: Hannes Tschofenig > Cc: keyprov@ietf.org > Subject: RE: [KEYPROV] Re Issue 21 (object model) >=20 > Hannes, > I agree with your points. The only challenge I see is that=20 > we are referring to a Key Container in the DSKPP to include=20 > key config data (including key type); the way the PSKC=20 > describes the object model for Key Container implies one=20 > container for multiple devices (see=20 > draft-vassilev-portable-symmetric-key-cointainer-02, section 6). > However, because the PSKC view pertains to server-side store=20 > more than client-side, and since it is dealing with a broader=20 > set of use cases than DSKPP (including bulk key provisioning=20 > and migration), perhaps it would indeed be best to do the=20 > collapsing here, making a general reference to "Key=20 > Container" as shown below (?) Andrea >=20 > DSKPP Basic Object Model > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > ----------- ------------- > |User | |Device |=20 > |---------|* owns *|-----------| > | UserID |--------->| DeviceID | > | ... | | ... | > ----------- ------------- > | 1 > | > | contains > |=20 > | * > V (DSKPP Client) > ----------------------- > |Cryptographic Module | > |---------------------| > |Encryption Algorithms| > |MAC Algorithms | > |... | > ----------------------- > | 1 > | > | contains > | > | * > V (Key Container) > ----------------------- > |Key | > |---------------------| > |KeyID | > |Key Type | > |... | > -----------------------=20 >=20 > -----Original Message----- > From: Hannes Tschofenig [mailto:Hannes.Tschofenig@gmx.net] > Sent: Friday, July 06, 2007 11:01 AM > To: Doherty, Andrea > Cc: keyprov@ietf.org > Subject: Re: [KEYPROV] Re Issue 21 (object model) >=20 > Hi Andrea, >=20 > when we use the term "cryptographic module" as a replacement=20 > for "cryptographic token" then I am not sure the cardinality=20 > between device and "cryptographic module" is correct.=20 > Shouldn't it be 1 device may be have multiple "cryptographic modules"? >=20 > Furthermore, where does the "Key Container" concept come=20 > from? Cannot you just collapse the "Key Container" and the "Key"? > I believe that the MAC and encryption algorithms belong to=20 > the Key rather than to the container. >=20 > Where does the Key Type fit in there? >=20 > Ciao > Hannes >=20 > Doherty, Andrea wrote: > > Yesterday I added this message to the Issue Tracker, but for some > reason > > it was not propagated to the mailing list. Here it is: > > > > Issue 21 - new message (5 July 07) > > Device pertains to something physical that the user holds, and=20 > > "cryptographic token", as stated in PKCS#11, "stores=20 > objects and can=20 > > perform cryptographic functions". However, the use of the word=20 > > "token" is often confused > with > > the > > physical device, and equally often confused with the software that=20 > > performs the functions. In addition, note that "token"=20 > gets used in=20 > > different and equally confusing ways in other arenas, e.g.,=20 > OASIS WS=20 > > Security. > > > > Thus, I propose that we do not use "token". I also propose that we=20 > > refer to "cryptographic module" wherever the PKCS#11 definition=20 > > applies (on first look, this will be almost a 1:1 replacement of=20 > > "cryptographic token" > > with "cryptographic module). With this proposal in mind, please=20 > > consider the following alternative to Shuh's initial object diagram: > > > > DSKPP Basic Object Model > > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > > > > ----------- ------------- > > |User | |Device |=20 > > |---------|* owns *|-----------| > > | UserID |--------->| DeviceID | > > | ... | | ... | > > ----------- ------------- > > | 1 > > | > > | contains > > | > > | 1 > > | > > V (DSKPP Client) > > ----------------------- > > |Cryptographic Module | > > |---------------------| > > | | > > |Encryption Algorithms| > > |MAC Algorithms | > > |... | > > ----------------------- > > | 1 > > | > > | contains > > | > > | 1 > > V > > ----------------------- > > |f | > > |---------------------| > > | | > > |Encryption Algorithms| > > |MAC Algorithms | > > |... | > > ----------------------- > > | 1 > > | > > | contains > > | > > V * > > ------------- > > |Key |=20 > > |-----------| > > | KeyID | > > | ... | > > ------------- > > > > > > _______________________________________________ > > KEYPROV mailing list > > KEYPROV@ietf.org > > https://www1.ietf.org/mailman/listinfo/keyprov > > =20 >=20 >=20 > _______________________________________________ > KEYPROV mailing list > KEYPROV@ietf.org > https://www1.ietf.org/mailman/listinfo/keyprov >=20 _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Fri Jul 06 13:22:58 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6rWE-0000s4-AB; Fri, 06 Jul 2007 13:22:58 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6rWD-0000py-2K for keyprov@ietf.org; Fri, 06 Jul 2007 13:22:57 -0400 Received: from dvnet26.diversinet.com ([207.245.6.208]) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1I6rW3-0006Ve-RZ for keyprov@ietf.org; Fri, 06 Jul 2007 13:22:56 -0400 Received: from dvnet26.diversinet.com(10.11.12.8) by mcafee_webshield.diversinet.com via smtp id 5ab5_0a977b7a_2be6_11dc_85b6_0002b3ca872d; Fri, 06 Jul 2007 13:26:41 -0400 Content-class: urn:content-classes:message MIME-Version: 1.0 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Date: Fri, 6 Jul 2007 13:21:56 -0400 Message-ID: <2AB4BF7823761E4E90BA9372C429F1A901B99AA5@DVNET26.DIVERSINET.COM> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: RE: PSKC - Issue 19: clarify the key generation for HMAC value of a secret data when a PBE is used for encryption Thread-Index: Ace/8icIvSo/ImqeSyq/hpNljiLbeQ== From: "Salah Machani" To: "KEYPROV Roundup Issue Tracker" , X-Spam-Score: 0.0 (/) X-Scan-Signature: 00134749b78ab2213964fc53d03de937 Cc: Subject: [KEYPROV] RE: PSKC - Issue 19: clarify the key generation for HMAC value of a secret data when a PBE is used for encryption X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0113697631==" Errors-To: keyprov-bounces@ietf.org This is a multi-part message in MIME format. --===============0113697631== Content-class: urn:content-classes:message Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C7BFF2.28AC7931" This is a multi-part message in MIME format. ------_=_NextPart_001_01C7BFF2.28AC7931 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable X-NAIMIME-Disclaimer: 1 X-NAIMIME-Modified: 1 I agree we should clarify this for inter-op. =20 My recommendation is to use a password derived key as opposed to the actual password. Also, I suggest we add an implementation note recommending using a different password for the MAC key derivation than the password used for the encryption key derivation. =20 =20 =20 Regards, =20 =20 =20 =20 \\\ Title PSKC: clarify the key generation for HMAC value of a secret data when a PBE is used for encryption Priority feature Status chatting Superseder =20 Nosy List keyprov, mpei=20 Assigned To mpei Topics =20 Created on 2007-06-20.14:19:52 by mpei, last changed 2007-06-20.14:19:52 by mpei. Messages msg34 (view) =20 Author: mpei Date: 2007-06-20.14:19:52 =20 Currently, PSKC SecretContainer contains an encryption method for data=20 encryption including an secret in DataType.=20 =20 =20 "The digest MUST be calculated on the unencrypted value and MUST use one of the Digest algorithms specified in DigestMethodType element of the=20 SecretContainer." =20 =20 When PBE is used as encryption and HMAC-SHA1 as digest algorithm, it isn't=20 clear whether one should use the password value as the key for HMAC or PBE=20 derived encryption key as the HMAC key. =20 It is worthywhile to clarify this in the document for inter-op clarify. =20 Salah Machani Diversinet Corp.,=20 [O] +1 (416) 756 2324 x321| [M] +1 (647) 284 7816 |http://www.diversinet.com =20 =20 Notice to Recipient: The information in this message is meant only for t= he intended recipient of the transmission and may contain confidential or= privileged information. =0D Any copying, retransmittal, taking of action in reliance on, or other use= of the information in this communication by persons other than the addre= ssees is prohibited. =0D If you received this email in error, please immediately notify us and ple= ase delete or destroy all copies of this message.=0D This message may have been altered without your or our knowledge and the = sender does not accept any liability for any errors. Thank you.=0D ------_=_NextPart_001_01C7BFF2.28AC7931 Content-Type: text/HTML; charset="utf-8" Content-Transfer-Encoding: base64 X-NAIMIME-Disclaimer: 1 X-NAIMIME-Modified: 1 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnL1RS L1JFQy1odG1sNDAiPgoKPGhlYWQ+CjxtZXRhIGh0dHAtZXF1aXY9Q29udGVudC1UeXBlIGNvbnRl bnQ9InRleHQvaHRtbDsgY2hhcnNldD11cy1hc2NpaSI+CjxtZXRhIG5hbWU9R2VuZXJhdG9yIGNv bnRlbnQ9Ik1pY3Jvc29mdCBXb3JkIDExIChmaWx0ZXJlZCBtZWRpdW0pIj4KPHN0eWxlPgo8IS0t CiAvKiBGb250IERlZmluaXRpb25zICovCiBAZm9udC1mYWNlCgl7Zm9udC1mYW1pbHk6Ik1TIE1p bmNobyI7CglwYW5vc2UtMToyIDIgNiA5IDQgMiA1IDggMyA0O30KQGZvbnQtZmFjZQoJe2ZvbnQt ZmFtaWx5OiJcQE1TIE1pbmNobyI7CglwYW5vc2UtMTowIDAgMCAwIDAgMCAwIDAgMCAwO30KIC8q IFN0eWxlIERlZmluaXRpb25zICovCiBwLk1zb05vcm1hbCwgbGkuTXNvTm9ybWFsLCBkaXYuTXNv Tm9ybWFsCgl7bWFyZ2luOjBpbjsKCW1hcmdpbi1ib3R0b206LjAwMDFwdDsKCWZvbnQtc2l6ZTox Mi4wcHQ7Cglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIjt9CmE6bGluaywgc3Bhbi5Nc29I eXBlcmxpbmsKCXtjb2xvcjpibHVlOwoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9CmE6dmlz aXRlZCwgc3Bhbi5Nc29IeXBlcmxpbmtGb2xsb3dlZAoJe2NvbG9yOnB1cnBsZTsKCXRleHQtZGVj b3JhdGlvbjp1bmRlcmxpbmU7fQpwCgl7bXNvLW1hcmdpbi10b3AtYWx0OmF1dG87CgltYXJnaW4t cmlnaHQ6MGluOwoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87CgltYXJnaW4tbGVmdDowaW47 Cglmb250LXNpemU6MTIuMHB0OwoJZm9udC1mYW1pbHk6IlRpbWVzIE5ldyBSb21hbiI7fQpwcmUK CXttYXJnaW46MGluOwoJbWFyZ2luLWJvdHRvbTouMDAwMXB0OwoJZm9udC1zaXplOjEwLjBwdDsK CWZvbnQtZmFtaWx5OiJDb3VyaWVyIE5ldyI7fQpzcGFuLkVtYWlsU3R5bGUxNwoJe21zby1zdHls ZS10eXBlOnBlcnNvbmFsLWNvbXBvc2U7Cglmb250LWZhbWlseTpBcmlhbDsKCWNvbG9yOndpbmRv d3RleHQ7fQpAcGFnZSBTZWN0aW9uMQoJe3NpemU6OC41aW4gMTEuMGluOwoJbWFyZ2luOjEuMGlu IDEuMjVpbiAxLjBpbiAxLjI1aW47fQpkaXYuU2VjdGlvbjEKCXtwYWdlOlNlY3Rpb24xO30KLS0+ Cjwvc3R5bGU+CjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPgogPG86c2hhcGVkZWZhdWx0cyB2OmV4 dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUg bXNvIDldPjx4bWw+CiA8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+CiAgPG86aWRtYXAgdjpl eHQ9ImVkaXQiIGRhdGE9IjEiIC8+CiA8L286c2hhcGVsYXlvdXQ+PC94bWw+PCFbZW5kaWZdLS0+ CjwvaGVhZD4KCjxib2R5IGxhbmc9RU4tVVMgbGluaz1ibHVlIHZsaW5rPXB1cnBsZT4KCjxkaXYg Y2xhc3M9U2VjdGlvbjE+Cgo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0yIGZhY2U9QXJp YWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7CmZvbnQtZmFtaWx5OkFyaWFsJz5JIGFn cmVlIHdlIHNob3VsZCBjbGFyaWZ5IHRoaXMgZm9yIGludGVyLW9wLjxvOnA+PC9vOnA+PC9zcGFu PjwvZm9udD48L3A+Cgo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0yIGZhY2U9QXJpYWw+ PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7CmZvbnQtZmFtaWx5OkFyaWFsJz48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPgoKPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNp emU9MiBmYWNlPUFyaWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0Owpmb250LWZhbWls eTpBcmlhbCc+TXkgcmVjb21tZW5kYXRpb24gaXMgdG8gdXNlIGEgcGFzc3dvcmQgZGVyaXZlZCBr ZXkgYXMKb3Bwb3NlZCB0byB0aGUgYWN0dWFsIHBhc3N3b3JkLiAmbmJzcDsmbmJzcDtBbHNvLCBJ IHN1Z2dlc3Qgd2UgYWRkIGFuCmltcGxlbWVudGF0aW9uIG5vdGUgcmVjb21tZW5kaW5nIHVzaW5n IGEgZGlmZmVyZW50IHBhc3N3b3JkIGZvciB0aGUgTUFDIGtleQpkZXJpdmF0aW9uIHRoYW4gdGhl IHBhc3N3b3JkIHVzZWQgZm9yIHRoZSBlbmNyeXB0aW9uIGtleSBkZXJpdmF0aW9uLiZuYnNwOyA8 bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPgoKPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNp emU9MiBmYWNlPUFyaWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0Owpmb250LWZhbWls eTpBcmlhbCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9mb250PjwvcD4KCjxwIGNsYXNzPU1z b05vcm1hbD48Zm9udCBzaXplPTIgZmFjZT1BcmlhbD48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEw LjBwdDsKZm9udC1mYW1pbHk6QXJpYWwnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZm9udD48 L3A+Cgo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0yIGZhY2U9QXJpYWw+PHNwYW4gc3R5 bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7CmZvbnQtZmFtaWx5OkFyaWFsJz5SZWdhcmRzLDxvOnA+PC9v OnA+PC9zcGFuPjwvZm9udD48L3A+Cgo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0yIGZh Y2U9QXJpYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7CmZvbnQtZmFtaWx5OkFyaWFs Jz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPgoKPHAgY2xhc3M9TXNvTm9ybWFs Pjxmb250IHNpemU9MiBmYWNlPUFyaWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0Owpm b250LWZhbWlseTpBcmlhbCc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9mb250PjwvcD4KCjxw IGNsYXNzPU1zb05vcm1hbD48Zm9udCBzaXplPTIgZmFjZT1BcmlhbD48c3BhbiBzdHlsZT0nZm9u dC1zaXplOjEwLjBwdDsKZm9udC1mYW1pbHk6QXJpYWwnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFu PjwvZm9udD48L3A+Cgo8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0yIGZhY2U9QXJpYWw+ PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7CmZvbnQtZmFtaWx5OkFyaWFsJz48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPgoKPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNp emU9MiBmYWNlPUFyaWFsPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0Owpmb250LWZhbWls eTpBcmlhbCc+XFxcPG86cD48L286cD48L3NwYW4+PC9mb250PjwvcD4KCjxmb3JtPgoKPHRhYmxl IGNsYXNzPU1zb05vcm1hbFRhYmxlIGJvcmRlcj0wIGNlbGxwYWRkaW5nPTA+CiA8dHI+CiAgPHRk IG5vd3JhcCB2YWxpZ249dG9wIHN0eWxlPSdwYWRkaW5nOjEuNXB0IDEuNXB0IDEuNXB0IDEuNXB0 Jz4KICA8cCBjbGFzcz1Nc29Ob3JtYWwgYWxpZ249cmlnaHQgc3R5bGU9J3RleHQtYWxpZ246cmln aHQnPjxiPjxmb250IHNpemU9MwogIGNvbG9yPSIjMzMzMzg4IiBmYWNlPSJUaW1lcyBOZXcgUm9t YW4iPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTIuMHB0OwogIGNvbG9yOiMzMzMzODg7Zm9udC13 ZWlnaHQ6Ym9sZCc+VGl0bGU8bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9iPjwvcD4KICA8L3Rk PgogIDx0ZCBjb2xzcGFuPTMgdmFsaWduPXRvcCBzdHlsZT0ncGFkZGluZzoxLjVwdCAxLjVwdCAx LjVwdCAxLjVwdCc+CiAgPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9MyBjb2xvcj0iIzMz MzMzMyIgZmFjZT0iVGltZXMgTmV3IFJvbWFuIj48c3BhbgogIHN0eWxlPSdmb250LXNpemU6MTIu MHB0O2NvbG9yOiMzMzMzMzMnPlBTS0M6IGNsYXJpZnkgdGhlIGtleSBnZW5lcmF0aW9uIGZvcgog IEhNQUMgdmFsdWUgb2YgYSBzZWNyZXQgZGF0YSB3aGVuIGEgUEJFIGlzIHVzZWQgZm9yIGVuY3J5 cHRpb248bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPgogIDwvdGQ+CiA8L3RyPgogPHRyPgog IDx0ZCBub3dyYXAgdmFsaWduPXRvcCBzdHlsZT0ncGFkZGluZzoxLjVwdCAxLjVwdCAxLjVwdCAx LjVwdCc+CiAgPHAgY2xhc3M9TXNvTm9ybWFsIGFsaWduPXJpZ2h0IHN0eWxlPSd0ZXh0LWFsaWdu OnJpZ2h0Jz48Yj48Zm9udCBzaXplPTMKICBjb2xvcj0iIzMzMzM4OCIgZmFjZT0iVGltZXMgTmV3 IFJvbWFuIj48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEyLjBwdDsKICBjb2xvcjojMzMzMzg4O2Zv bnQtd2VpZ2h0OmJvbGQnPlByaW9yaXR5PG86cD48L286cD48L3NwYW4+PC9mb250PjwvYj48L3A+ CiAgPC90ZD4KICA8dGQgdmFsaWduPXRvcCBzdHlsZT0ncGFkZGluZzoxLjVwdCAxLjVwdCAxLjVw dCAxLjVwdCc+CiAgPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9MyBjb2xvcj0iIzMzMzMz MyIgZmFjZT0iVGltZXMgTmV3IFJvbWFuIj48c3BhbgogIHN0eWxlPSdmb250LXNpemU6MTIuMHB0 O2NvbG9yOiMzMzMzMzMnPmZlYXR1cmU8bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPgogIDwv dGQ+CiAgPHRkIG5vd3JhcCB2YWxpZ249dG9wIHN0eWxlPSdwYWRkaW5nOjEuNXB0IDEuNXB0IDEu NXB0IDEuNXB0Jz4KICA8cCBjbGFzcz1Nc29Ob3JtYWwgYWxpZ249cmlnaHQgc3R5bGU9J3RleHQt YWxpZ246cmlnaHQnPjxmb250IHNpemU9MwogIGNvbG9yPSIjMzMzMzg4IiBmYWNlPSJUaW1lcyBO ZXcgUm9tYW4iPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTIuMHB0OwogIGNvbG9yOiMzMzMzODgn PlN0YXR1czxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+CiAgPC90ZD4KICA8dGQgdmFsaWdu PXRvcCBzdHlsZT0ncGFkZGluZzoxLjVwdCAxLjVwdCAxLjVwdCAxLjVwdCc+CiAgPHAgY2xhc3M9 TXNvTm9ybWFsPjxmb250IHNpemU9MyBjb2xvcj0iIzMzMzMzMyIgZmFjZT0iVGltZXMgTmV3IFJv bWFuIj48c3BhbgogIHN0eWxlPSdmb250LXNpemU6MTIuMHB0O2NvbG9yOiMzMzMzMzMnPmNoYXR0 aW5nPG86cD48L286cD48L3NwYW4+PC9mb250PjwvcD4KICA8L3RkPgogPC90cj4KIDx0cj4KICA8 dGQgbm93cmFwIHZhbGlnbj10b3Agc3R5bGU9J3BhZGRpbmc6MS41cHQgMS41cHQgMS41cHQgMS41 cHQnPgogIDxwIGNsYXNzPU1zb05vcm1hbCBhbGlnbj1yaWdodCBzdHlsZT0ndGV4dC1hbGlnbjpy aWdodCc+PGZvbnQgc2l6ZT0zCiAgY29sb3I9IiMzMzMzODgiIGZhY2U9IlRpbWVzIE5ldyBSb21h biI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMi4wcHQ7CiAgY29sb3I6IzMzMzM4OCc+U3VwZXJz ZWRlcjxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+CiAgPC90ZD4KICA8dGQgdmFsaWduPXRv cCBzdHlsZT0ncGFkZGluZzoxLjVwdCAxLjVwdCAxLjVwdCAxLjVwdCc+CiAgPHAgY2xhc3M9TXNv Tm9ybWFsPjxmb250IHNpemU9MyBjb2xvcj0iIzMzMzMzMyIgZmFjZT0iVGltZXMgTmV3IFJvbWFu Ij48c3BhbgogIHN0eWxlPSdmb250LXNpemU6MTIuMHB0O2NvbG9yOiMzMzMzMzMnPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+CiAgPC90ZD4KICA8dGQgbm93cmFwIHZhbGlnbj10 b3Agc3R5bGU9J3BhZGRpbmc6MS41cHQgMS41cHQgMS41cHQgMS41cHQnPgogIDxwIGNsYXNzPU1z b05vcm1hbCBhbGlnbj1yaWdodCBzdHlsZT0ndGV4dC1hbGlnbjpyaWdodCc+PGZvbnQgc2l6ZT0z CiAgY29sb3I9IiMzMzMzODgiIGZhY2U9IlRpbWVzIE5ldyBSb21hbiI+PHNwYW4gc3R5bGU9J2Zv bnQtc2l6ZToxMi4wcHQ7CiAgY29sb3I6IzMzMzM4OCc+Tm9zeSBMaXN0PG86cD48L286cD48L3Nw YW4+PC9mb250PjwvcD4KICA8L3RkPgogIDx0ZCB2YWxpZ249dG9wIHN0eWxlPSdwYWRkaW5nOjEu NXB0IDEuNXB0IDEuNXB0IDEuNXB0Jz4KICA8cCBjbGFzcz1Nc29Ob3JtYWw+PGZvbnQgc2l6ZT0z IGNvbG9yPSIjMzMzMzMzIiBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPjxzcGFuCiAgc3R5bGU9J2Zv bnQtc2l6ZToxMi4wcHQ7Y29sb3I6IzMzMzMzMyc+a2V5cHJvdiwgbXBlaSA8bzpwPjwvbzpwPjwv c3Bhbj48L2ZvbnQ+PC9wPgogIDwvdGQ+CiA8L3RyPgogPHRyPgogIDx0ZCBub3dyYXAgdmFsaWdu PXRvcCBzdHlsZT0ncGFkZGluZzoxLjVwdCAxLjVwdCAxLjVwdCAxLjVwdCc+CiAgPHAgY2xhc3M9 TXNvTm9ybWFsIGFsaWduPXJpZ2h0IHN0eWxlPSd0ZXh0LWFsaWduOnJpZ2h0Jz48Zm9udCBzaXpl PTMKICBjb2xvcj0iIzMzMzM4OCIgZmFjZT0iVGltZXMgTmV3IFJvbWFuIj48c3BhbiBzdHlsZT0n Zm9udC1zaXplOjEyLjBwdDsKICBjb2xvcjojMzMzMzg4Jz5Bc3NpZ25lZCBUbzxvOnA+PC9vOnA+ PC9zcGFuPjwvZm9udD48L3A+CiAgPC90ZD4KICA8dGQgdmFsaWduPXRvcCBzdHlsZT0ncGFkZGlu ZzoxLjVwdCAxLjVwdCAxLjVwdCAxLjVwdCc+CiAgPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNp emU9MyBjb2xvcj0iIzMzMzMzMyIgZmFjZT0iVGltZXMgTmV3IFJvbWFuIj48c3BhbgogIHN0eWxl PSdmb250LXNpemU6MTIuMHB0O2NvbG9yOiMzMzMzMzMnPm1wZWk8bzpwPjwvbzpwPjwvc3Bhbj48 L2ZvbnQ+PC9wPgogIDwvdGQ+CiAgPHRkIG5vd3JhcCB2YWxpZ249dG9wIHN0eWxlPSdwYWRkaW5n OjEuNXB0IDEuNXB0IDEuNXB0IDEuNXB0Jz4KICA8cCBjbGFzcz1Nc29Ob3JtYWwgYWxpZ249cmln aHQgc3R5bGU9J3RleHQtYWxpZ246cmlnaHQnPjxmb250IHNpemU9MwogIGNvbG9yPSIjMzMzMzg4 IiBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTIuMHB0Owog IGNvbG9yOiMzMzMzODgnPlRvcGljczxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+CiAgPC90 ZD4KICA8dGQgdmFsaWduPXRvcCBzdHlsZT0ncGFkZGluZzoxLjVwdCAxLjVwdCAxLjVwdCAxLjVw dCc+CiAgPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9MyBjb2xvcj0iIzMzMzMzMyIgZmFj ZT0iVGltZXMgTmV3IFJvbWFuIj48c3BhbgogIHN0eWxlPSdmb250LXNpemU6MTIuMHB0O2NvbG9y OiMzMzMzMzMnPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZm9udD48L3A+CiAgPC90ZD4KIDwv dHI+CjwvdGFibGU+Cgo8L2Zvcm0+Cgo8cD48Zm9udCBzaXplPTMgZmFjZT0iVGltZXMgTmV3IFJv bWFuIj48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEyLjBwdCc+Q3JlYXRlZApvbiA8Yj48c3BhbiBz dHlsZT0nZm9udC13ZWlnaHQ6Ym9sZCc+MjAwNy0wNi0yMC4xNDoxOTo1Mjwvc3Bhbj48L2I+IGJ5 IDxiPjxzcGFuCnN0eWxlPSdmb250LXdlaWdodDpib2xkJz5tcGVpPC9zcGFuPjwvYj4sIGxhc3Qg Y2hhbmdlZCA8Yj48c3BhbgpzdHlsZT0nZm9udC13ZWlnaHQ6Ym9sZCc+MjAwNy0wNi0yMC4xNDox OTo1Mjwvc3Bhbj48L2I+IGJ5IDxiPjxzcGFuCnN0eWxlPSdmb250LXdlaWdodDpib2xkJz5tcGVp PC9zcGFuPjwvYj4uPG86cD48L286cD48L3NwYW4+PC9mb250PjwvcD4KCjx0YWJsZSBjbGFzcz1N c29Ob3JtYWxUYWJsZSBib3JkZXI9MCBjZWxscGFkZGluZz0wIHdpZHRoPSIxMDAlIgogc3R5bGU9 J3dpZHRoOjEwMC4wJSc+CiA8dHI+CiAgPHRkIGNvbHNwYW49NCBiZ2NvbG9yPXdoaXRlIHN0eWxl PSdib3JkZXI6bm9uZTtib3JkZXItYm90dG9tOnNvbGlkIGdyYXkgMS4wcHQ7CiAgYmFja2dyb3Vu ZDp3aGl0ZTtwYWRkaW5nOjcuNXB0IC43NXB0IC43NXB0IC43NXB0Jz4KICA8cCBjbGFzcz1Nc29O b3JtYWw+PGI+PGZvbnQgc2l6ZT0zIGNvbG9yPSIjNzA3MDQwIiBmYWNlPSJUaW1lcyBOZXcgUm9t YW4iPjxzcGFuCiAgc3R5bGU9J2ZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6IzcwNzA0MDtmb250LXdl aWdodDpib2xkJz5NZXNzYWdlczxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L2I+PC9wPgogIDwv dGQ+CiA8L3RyPgogPHRyPgogIDx0ZCBzdHlsZT0nYm9yZGVyOm5vbmU7Ym9yZGVyLWJvdHRvbTpz b2xpZCAjQUZBRkFGIDEuMHB0O3BhZGRpbmc6Ljc1cHQgLjc1cHQgLjc1cHQgLjc1cHQnPgogIDxw IGNsYXNzPU1zb05vcm1hbD48Yj48Zm9udCBzaXplPTMgY29sb3I9YmxhY2sgZmFjZT0iVGltZXMg TmV3IFJvbWFuIj48c3BhbgogIHN0eWxlPSdmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrO2Zv bnQtd2VpZ2h0OmJvbGQnPjxhCiAgaHJlZj0iaHR0cDovL3d3dy50c2Nob2ZlbmlnLmNvbTo4MDgw L2tleXByb3YvbXNnMzQiPm1zZzM0ICh2aWV3KTwvYT48bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+ PC9iPjwvcD4KICA8L3RkPgogIDx0ZCBzdHlsZT0nYm9yZGVyOm5vbmU7Ym9yZGVyLWJvdHRvbTpz b2xpZCAjQUZBRkFGIDEuMHB0O3BhZGRpbmc6Ljc1cHQgLjc1cHQgLjc1cHQgLjc1cHQnPgogIDxw IGNsYXNzPU1zb05vcm1hbD48Yj48Zm9udCBzaXplPTMgY29sb3I9YmxhY2sgZmFjZT0iVGltZXMg TmV3IFJvbWFuIj48c3BhbgogIHN0eWxlPSdmb250LXNpemU6MTIuMHB0O2NvbG9yOmJsYWNrO2Zv bnQtd2VpZ2h0OmJvbGQnPkF1dGhvcjogbXBlaTxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L2I+ PC9wPgogIDwvdGQ+CiAgPHRkIHN0eWxlPSdib3JkZXI6bm9uZTtib3JkZXItYm90dG9tOnNvbGlk ICNBRkFGQUYgMS4wcHQ7cGFkZGluZzouNzVwdCAuNzVwdCAuNzVwdCAuNzVwdCc+CiAgPHAgY2xh c3M9TXNvTm9ybWFsPjxiPjxmb250IHNpemU9MyBjb2xvcj1ibGFjayBmYWNlPSJUaW1lcyBOZXcg Um9tYW4iPjxzcGFuCiAgc3R5bGU9J2ZvbnQtc2l6ZToxMi4wcHQ7Y29sb3I6YmxhY2s7Zm9udC13 ZWlnaHQ6Ym9sZCc+RGF0ZToKICAyMDA3LTA2LTIwLjE0OjE5OjUyPG86cD48L286cD48L3NwYW4+ PC9mb250PjwvYj48L3A+CiAgPC90ZD4KICA8dGQgc3R5bGU9J2JvcmRlcjpub25lO2JvcmRlci1i b3R0b206c29saWQgI0FGQUZBRiAxLjBwdDtwYWRkaW5nOi43NXB0IC43NXB0IC43NXB0IC43NXB0 Jz4KICA8cCBjbGFzcz1Nc29Ob3JtYWw+PGI+PGZvbnQgc2l6ZT0zIGNvbG9yPWJsYWNrIGZhY2U9 IlRpbWVzIE5ldyBSb21hbiI+PHNwYW4KICBzdHlsZT0nZm9udC1zaXplOjEyLjBwdDtjb2xvcjpi bGFjaztmb250LXdlaWdodDpib2xkJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9i PjwvcD4KICA8L3RkPgogPC90cj4KIDx0cj4KICA8dGQgd2lkdGg9IjEwMCUiIGNvbHNwYW49NCB2 YWxpZ249dG9wIGJnY29sb3I9IiNFRkVGRUYiIHN0eWxlPSd3aWR0aDoxMDAuMCU7CiAgYm9yZGVy LXRvcDpub25lO2JvcmRlci1sZWZ0Om5vbmU7Ym9yZGVyLWJvdHRvbTpzb2xpZCAjQUZBRkFGIDEu MHB0OwogIGJvcmRlci1yaWdodDpzb2xpZCAjQUZBRkFGIDEuMHB0O2JhY2tncm91bmQ6I0VGRUZF RjtwYWRkaW5nOjEuNXB0IDMuNzVwdCAxLjVwdCAzLjc1cHQnPjxwcmU+PGZvbnQKICBzaXplPTIg Y29sb3I9YmxhY2sgZmFjZT0iQ291cmllciBOZXciPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAu MHB0OwogIGNvbG9yOmJsYWNrJz5DdXJyZW50bHksIFBTS0MgU2VjcmV0Q29udGFpbmVyIGNvbnRh aW5zIGFuIGVuY3J5cHRpb24gbWV0aG9kIGZvciBkYXRhIDxvOnA+PC9vOnA+PC9zcGFuPjwvZm9u dD48L3ByZT48cHJlPjxmb250CiAgc2l6ZT0yIGNvbG9yPWJsYWNrIGZhY2U9IkNvdXJpZXIgTmV3 Ij48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDsKICBjb2xvcjpibGFjayc+ZW5jcnlwdGlv biBpbmNsdWRpbmcgYW4gc2VjcmV0IGluIERhdGFUeXBlLiA8bzpwPjwvbzpwPjwvc3Bhbj48L2Zv bnQ+PC9wcmU+PHByZT48Zm9udAogIHNpemU9MiBjb2xvcj1ibGFjayBmYWNlPSJDb3VyaWVyIE5l dyI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7CiAgY29sb3I6YmxhY2snPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvZm9udD48L3ByZT48cHJlPjxmb250IHNpemU9MgogIGNvbG9yPWJs YWNrIGZhY2U9IkNvdXJpZXIgTmV3Ij48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDtjb2xv cjpibGFjayc+Jmx0O2NvbXBsZXhUeXBlIG5hbWU9JnF1b3Q7RGF0YVR5cGUmcXVvdDsmZ3Q7PG86 cD48L286cD48L3NwYW4+PC9mb250PjwvcHJlPjxwcmU+PGZvbnQKICBzaXplPTIgY29sb3I9Ymxh Y2sgZmFjZT0iQ291cmllciBOZXciPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0OwogIGNv bG9yOmJsYWNrJz4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJmx0O3NlcXVlbmNlJmd0OzxvOnA+ PC9vOnA+PC9zcGFuPjwvZm9udD48L3ByZT48cHJlPjxmb250CiAgc2l6ZT0yIGNvbG9yPWJsYWNr IGZhY2U9IkNvdXJpZXIgTmV3Ij48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDsKICBjb2xv cjpibGFjayc+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZsdDtlbGVtZW50 IG5hbWU9JnF1b3Q7VmFsdWUmcXVvdDsgdHlwZT0mcXVvdDtiYXNlNjRCaW5hcnkmcXVvdDsvJmd0 OzxvOnA+PC9vOnA+PC9zcGFuPjwvZm9udD48L3ByZT48cHJlPjxmb250CiAgc2l6ZT0yIGNvbG9y PWJsYWNrIGZhY2U9IkNvdXJpZXIgTmV3Ij48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDsK ICBjb2xvcjpibGFjayc+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZsdDtl bGVtZW50IG5hbWU9JnF1b3Q7VmFsdWVEaWdlc3QmcXVvdDsgdHlwZT0mcXVvdDtiYXNlNjRCaW5h cnkmcXVvdDsgbWluT2NjdXJzPSZxdW90OzAmcXVvdDsvJmd0OzxvOnA+PC9vOnA+PC9zcGFuPjwv Zm9udD48L3ByZT48cHJlPjxmb250CiAgc2l6ZT0yIGNvbG9yPWJsYWNrIGZhY2U9IkNvdXJpZXIg TmV3Ij48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDsKICBjb2xvcjpibGFjayc+Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7ICZsdDthdHRyaWJ1dGUgbmFtZT0mcXVvdDtO YW1lJnF1b3Q7IHR5cGU9JnF1b3Q7c3RyaW5nJnF1b3Q7IHVzZT0mcXVvdDtyZXF1aXJlZCZxdW90 Oy8mZ3Q7PG86cD48L286cD48L3NwYW4+PC9mb250PjwvcHJlPjxwcmU+PGZvbnQKICBzaXplPTIg Y29sb3I9YmxhY2sgZmFjZT0iQ291cmllciBOZXciPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAu MHB0OwogIGNvbG9yOmJsYWNrJz4mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgJmx0Oy9zZXF1ZW5j ZSZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wcmU+PHByZT48Zm9udAogIHNpemU9MiBj b2xvcj1ibGFjayBmYWNlPSJDb3VyaWVyIE5ldyI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4w cHQ7CiAgY29sb3I6YmxhY2snPiZuYnNwOyZuYnNwOyAmbHQ7L2NvbXBsZXhUeXBlJmd0OzxvOnA+ PC9vOnA+PC9zcGFuPjwvZm9udD48L3ByZT48cHJlPjxmb250CiAgc2l6ZT0yIGNvbG9yPWJsYWNr IGZhY2U9IkNvdXJpZXIgTmV3Ij48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDsKICBjb2xv cjpibGFjayc+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9mb250PjwvcHJlPjxwcmU+PGZvbnQg c2l6ZT0yCiAgY29sb3I9YmxhY2sgZmFjZT0iQ291cmllciBOZXciPjxzcGFuIHN0eWxlPSdmb250 LXNpemU6MTAuMHB0O2NvbG9yOmJsYWNrJz4mcXVvdDtUaGUgZGlnZXN0IE1VU1QgYmUgY2FsY3Vs YXRlZCBvbiB0aGUgdW5lbmNyeXB0ZWQgdmFsdWUgYW5kIE1VU1QgdXNlIG9uZSA8bzpwPjwvbzpw Pjwvc3Bhbj48L2ZvbnQ+PC9wcmU+PHByZT48Zm9udAogIHNpemU9MiBjb2xvcj1ibGFjayBmYWNl PSJDb3VyaWVyIE5ldyI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7CiAgY29sb3I6Ymxh Y2snPm9mIHRoZSBEaWdlc3QgYWxnb3JpdGhtcyBzcGVjaWZpZWQgaW4gRGlnZXN0TWV0aG9kVHlw ZSBlbGVtZW50IG9mIHRoZSA8bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wcmU+PHByZT48Zm9u dAogIHNpemU9MiBjb2xvcj1ibGFjayBmYWNlPSJDb3VyaWVyIE5ldyI+PHNwYW4gc3R5bGU9J2Zv bnQtc2l6ZToxMC4wcHQ7CiAgY29sb3I6YmxhY2snPlNlY3JldENvbnRhaW5lci4mcXVvdDs8bzpw PjwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wcmU+PHByZT48Zm9udAogIHNpemU9MiBjb2xvcj1ibGFj ayBmYWNlPSJDb3VyaWVyIE5ldyI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7CiAgY29s b3I6YmxhY2snPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZm9udD48L3ByZT48cHJlPjxmb250 IHNpemU9MgogIGNvbG9yPWJsYWNrIGZhY2U9IkNvdXJpZXIgTmV3Ij48c3BhbiBzdHlsZT0nZm9u dC1zaXplOjEwLjBwdDtjb2xvcjpibGFjayc+Jmx0O2NvbXBsZXhUeXBlIG5hbWU9JnF1b3Q7RGln ZXN0TWV0aG9kVHlwZSZxdW90OyZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wcmU+PHBy ZT48Zm9udAogIHNpemU9MiBjb2xvcj1ibGFjayBmYWNlPSJDb3VyaWVyIE5ldyI+PHNwYW4gc3R5 bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7CiAgY29sb3I6YmxhY2snPiZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyAmbHQ7c2VxdWVuY2UmZ3Q7PG86cD48L286cD48L3NwYW4+PC9mb250PjwvcHJlPjxwcmU+ PGZvbnQKICBzaXplPTIgY29sb3I9YmxhY2sgZmFjZT0iQ291cmllciBOZXciPjxzcGFuIHN0eWxl PSdmb250LXNpemU6MTAuMHB0OwogIGNvbG9yOmJsYWNrJz4mbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsgJmx0O2VsZW1lbnQgbmFtZT0mcXVvdDtEaWdlc3RLZXlMYWJlbCZxdW90 OyBtaW5PY2N1cnM9JnF1b3Q7MCZxdW90Oy8mZ3Q7PG86cD48L286cD48L3NwYW4+PC9mb250Pjwv cHJlPjxwcmU+PGZvbnQKICBzaXplPTIgY29sb3I9YmxhY2sgZmFjZT0iQ291cmllciBOZXciPjxz cGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0OwogIGNvbG9yOmJsYWNrJz4mbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgJmx0Oy9zZXF1ZW5jZSZndDs8bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9w cmU+PHByZT48Zm9udAogIHNpemU9MiBjb2xvcj1ibGFjayBmYWNlPSJDb3VyaWVyIE5ldyI+PHNw YW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7CiAgY29sb3I6YmxhY2snPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyAmbHQ7YXR0cmlidXRlIG5hbWU9JnF1b3Q7YWxnb3JpdGhtJnF1b3Q7IHR5cGU9 JnF1b3Q7b2F0aC1wc2tjOkRpZ2VzdEFsZ29yaXRobVR5cGUmcXVvdDs8bzpwPjwvbzpwPjwvc3Bh bj48L2ZvbnQ+PC9wcmU+PHByZT48Zm9udAogIHNpemU9MiBjb2xvcj1ibGFjayBmYWNlPSJDb3Vy aWVyIE5ldyI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4wcHQ7CiAgY29sb3I6YmxhY2snPiZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB1c2U9JnF1b3Q7cmVxdWlyZWQmcXVvdDsvJmd0OzxvOnA+ PC9vOnA+PC9zcGFuPjwvZm9udD48L3ByZT48cHJlPjxmb250CiAgc2l6ZT0yIGNvbG9yPWJsYWNr IGZhY2U9IkNvdXJpZXIgTmV3Ij48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDsKICBjb2xv cjpibGFjayc+Jm5ic3A7Jm5ic3A7ICZsdDsvY29tcGxleFR5cGUmZ3Q7PG86cD48L286cD48L3Nw YW4+PC9mb250PjwvcHJlPjxwcmU+PGZvbnQKICBzaXplPTIgY29sb3I9YmxhY2sgZmFjZT0iQ291 cmllciBOZXciPjxzcGFuIHN0eWxlPSdmb250LXNpemU6MTAuMHB0OwogIGNvbG9yOmJsYWNrJz48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wcmU+PHByZT48Zm9udCBzaXplPTIKICBj b2xvcj1ibGFjayBmYWNlPSJDb3VyaWVyIE5ldyI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4w cHQ7Y29sb3I6YmxhY2snPldoZW4gUEJFIGlzIHVzZWQgYXMgZW5jcnlwdGlvbiBhbmQgSE1BQy1T SEExIGFzIGRpZ2VzdCBhbGdvcml0aG0sIGl0IGlzbid0IDxvOnA+PC9vOnA+PC9zcGFuPjwvZm9u dD48L3ByZT48cHJlPjxmb250CiAgc2l6ZT0yIGNvbG9yPWJsYWNrIGZhY2U9IkNvdXJpZXIgTmV3 Ij48c3BhbiBzdHlsZT0nZm9udC1zaXplOjEwLjBwdDsKICBjb2xvcjpibGFjayc+Y2xlYXIgd2hl dGhlciBvbmUgc2hvdWxkIHVzZSB0aGUgcGFzc3dvcmQgdmFsdWUgYXMgdGhlIGtleSBmb3IgSE1B QyBvciBQQkUgPG86cD48L286cD48L3NwYW4+PC9mb250PjwvcHJlPjxwcmU+PGZvbnQKICBzaXpl PTIgY29sb3I9YmxhY2sgZmFjZT0iQ291cmllciBOZXciPjxzcGFuIHN0eWxlPSdmb250LXNpemU6 MTAuMHB0OwogIGNvbG9yOmJsYWNrJz5kZXJpdmVkIGVuY3J5cHRpb24ga2V5IGFzIHRoZSBITUFD IGtleS48bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wcmU+PHByZT48Zm9udAogIHNpemU9MiBj b2xvcj1ibGFjayBmYWNlPSJDb3VyaWVyIE5ldyI+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZToxMC4w cHQ7CiAgY29sb3I6YmxhY2snPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvZm9udD48L3ByZT48 cHJlPjxmb250IHNpemU9MgogIGNvbG9yPWJsYWNrIGZhY2U9IkNvdXJpZXIgTmV3Ij48c3BhbiBz dHlsZT0nZm9udC1zaXplOjEwLjBwdDtjb2xvcjpibGFjayc+SXQgaXMgd29ydGh5d2hpbGUgdG8g Y2xhcmlmeSB0aGlzIGluIHRoZSBkb2N1bWVudCBmb3IgaW50ZXItb3AgY2xhcmlmeS48bzpwPjwv bzpwPjwvc3Bhbj48L2ZvbnQ+PC9wcmU+PC90ZD4KIDwvdHI+CjwvdGFibGU+Cgo8cCBjbGFzcz1N c29Ob3JtYWw+PGZvbnQgc2l6ZT0yIGZhY2U9QXJpYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTox MC4wcHQ7CmZvbnQtZmFtaWx5OkFyaWFsJz48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L2ZvbnQ+ PC9wPgoKPHA+PGZvbnQgc2l6ZT0yIGZhY2U9QXJpYWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTox MC4wcHQ7Zm9udC1mYW1pbHk6QXJpYWwnPlNhbGFoCk1hY2hhbmk8L3NwYW4+PC9mb250PjxvOnA+ PC9vOnA+PC9wPgoKPHA+PGZvbnQgc2l6ZT0yIGZhY2U9QXJpYWw+PHNwYW4gc3R5bGU9J2ZvbnQt c2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6QXJpYWwnPjxicj4KRGl2ZXJzaW5ldCBDb3JwLiwmbmJz cDs8bzpwPjwvbzpwPjwvc3Bhbj48L2ZvbnQ+PC9wPgoKPHA+PGZvbnQgc2l6ZT0xIGZhY2U9QXJp YWw+PHNwYW4gc3R5bGU9J2ZvbnQtc2l6ZTo3LjVwdDtmb250LWZhbWlseTpBcmlhbCc+W09dJm5i c3A7KzEKKDQxNikmbmJzcDs3NTYgMjMyNCB4MzIxfCZuYnNwO1tNXSArMSAoNjQ3KSZuYnNwOzI4 NCZuYnNwOzc4MTYgfDwvc3Bhbj48L2ZvbnQ+PGEKaHJlZj0iaHR0cDovL3d3dy5kaXZlcnNpbmV0 LmNvbSI+PGZvbnQgc2l6ZT0xIGZhY2U9QXJpYWw+PHNwYW4Kc3R5bGU9J2ZvbnQtc2l6ZTo3LjVw dDtmb250LWZhbWlseTpBcmlhbCc+aHR0cDovL3d3dy5kaXZlcnNpbmV0LmNvbTwvc3Bhbj48L2Zv bnQ+PC9hPjxvOnA+PC9vOnA+PC9wPgoKPHAgY2xhc3M9TXNvTm9ybWFsPjxmb250IHNpemU9MyBm YWNlPSJUaW1lcyBOZXcgUm9tYW4iPjxzcGFuIHN0eWxlPSdmb250LXNpemU6CjEyLjBwdCc+PG86 cD4mbmJzcDs8L286cD48L3NwYW4+PC9mb250PjwvcD4KCjwvZGl2PgoKCjxESVY+PFA+PEhSPgpO b3RpY2UgdG8gUmVjaXBpZW50OiAgVGhlIGluZm9ybWF0aW9uIGluIHRoaXMgbWVzc2FnZSBpcyBt ZWFudCBvbmx5IGZvciB0aGUgaW50ZW5kZWQgcmVjaXBpZW50IG9mIHRoZSB0cmFuc21pc3Npb24g YW5kIG1heSBjb250YWluIGNvbmZpZGVudGlhbCBvciBwcml2aWxlZ2VkIGluZm9ybWF0aW9uLiA8 QlI+CkFueSBjb3B5aW5nLCByZXRyYW5zbWl0dGFsLCB0YWtpbmcgb2YgYWN0aW9uIGluIHJlbGlh bmNlIG9uLCBvciBvdGhlciB1c2Ugb2YgdGhlIGluZm9ybWF0aW9uIGluIHRoaXMgY29tbXVuaWNh dGlvbiBieSBwZXJzb25zIG90aGVyIHRoYW4gdGhlIGFkZHJlc3NlZXMgaXMgcHJvaGliaXRlZC4g IDxCUj4KSWYgeW91IHJlY2VpdmVkIHRoaXMgZW1haWwgaW4gZXJyb3IsIHBsZWFzZSBpbW1lZGlh dGVseSBub3RpZnkgdXMgYW5kIHBsZWFzZSBkZWxldGUgb3IgZGVzdHJveSBhbGwgY29waWVzIG9m IHRoaXMgbWVzc2FnZS48QlI+ClRoaXMgbWVzc2FnZSBtYXkgaGF2ZSBiZWVuIGFsdGVyZWQgd2l0 aG91dCB5b3VyIG9yIG91ciBrbm93bGVkZ2UgYW5kIHRoZSBzZW5kZXIgZG9lcyBub3QgYWNjZXB0 IGFueSBsaWFiaWxpdHkgZm9yIGFueSBlcnJvcnMuICBUaGFuayB5b3UuPEJSPgoKPC9QPjwvRElW Pgo8L2JvZHk+Cgo8L2h0bWw+Cg== ------_=_NextPart_001_01C7BFF2.28AC7931-- --===============0113697631== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov --===============0113697631==-- From keyprov-bounces@ietf.org Fri Jul 06 14:42:22 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6sl4-0001iK-2p; Fri, 06 Jul 2007 14:42:22 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6sl3-0001hV-D2 for keyprov@ietf.org; Fri, 06 Jul 2007 14:42:21 -0400 Received: from mail.gmx.net ([213.165.64.20]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1I6sky-0004sI-PM for keyprov@ietf.org; Fri, 06 Jul 2007 14:42:21 -0400 Received: (qmail invoked by alias); 06 Jul 2007 18:42:15 -0000 Received: from p549846C8.dip.t-dialin.net (EHLO [192.168.1.4]) [84.152.70.200] by mail.gmx.net (mp050) with SMTP; 06 Jul 2007 20:42:15 +0200 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX1/KYUZB0gHKlex7A8j3I2W75+pCO8MXQJqKnDca+R om/wLj0Pbl3ymn Message-ID: <468E8D05.8070200@gmx.net> Date: Fri, 06 Jul 2007 20:42:13 +0200 From: Hannes Tschofenig User-Agent: Thunderbird 2.0.0.4 (Windows/20070604) MIME-Version: 1.0 To: "Doherty, Andrea" Subject: Re: [KEYPROV] Re Issue 21 (object model) References: <017630AA6DF2DF4EBC1DD4454F8EE2970B68D153@rsana-ex-hq1.NA.RSA.NET> <468E5920.90105@gmx.net> <017630AA6DF2DF4EBC1DD4454F8EE2970B68D24C@rsana-ex-hq1.NA.RSA.NET> In-Reply-To: <017630AA6DF2DF4EBC1DD4454F8EE2970B68D24C@rsana-ex-hq1.NA.RSA.NET> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Y-GMX-Trusted: 0 X-Spam-Score: 0.0 (/) X-Scan-Signature: d9238570526f12788af3d33c67f37625 Cc: keyprov@ietf.org X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Hi Andrea, what about the following minor modification? ----------- ------------- | User | | Device | |---------|* owns *|-----------| | UserID |--------->| DeviceID | | ... | | ... | ----------- ------------- | 1 | | contains | | * V ----------------------- |Cryptographic Module | |---------------------| |Encryption Algorithms| |MAC Algorithms | |... | ----------------------- | 1 | | contains | | * V ----------------------- |Key Container | |---------------------| |KeyID | |Key Type | |... | ----------------------- Is there something that identifies a particular a specific instance of a cryptographic module? Ciao Hannes PS: Regarding the terminology in the other documents: Once we got the terminology right then we have to clean-up the other docs as well. Doherty, Andrea wrote: > Hannes, > I agree with your points. The only challenge I see is that we are > referring to a Key Container in the DSKPP to include key config data > (including key type); the way the PSKC describes the object model for > Key Container implies one container for multiple devices (see > draft-vassilev-portable-symmetric-key-cointainer-02, section 6). > However, because the PSKC view pertains to server-side store more than > client-side, and since it is dealing with a broader set of use cases > than DSKPP (including bulk key provisioning and migration), perhaps it > would indeed be best to do the collapsing here, making a general > reference to "Key Container" as shown below (?) > Andrea > > DSKPP Basic Object Model > ======================== > ----------- ------------- > |User | |Device | > |---------|* owns *|-----------| > | UserID |--------->| DeviceID | > | ... | | ... | > ----------- ------------- > | 1 > | > | contains > | > | * > V (DSKPP Client) > ----------------------- > |Cryptographic Module | > |---------------------| > |Encryption Algorithms| > |MAC Algorithms | > |... | > ----------------------- > | 1 > | > | contains > | > | * > V (Key Container) > ----------------------- > |Key | > |---------------------| > |KeyID | > |Key Type | > |... | > ----------------------- > > -----Original Message----- > From: Hannes Tschofenig [mailto:Hannes.Tschofenig@gmx.net] > Sent: Friday, July 06, 2007 11:01 AM > To: Doherty, Andrea > Cc: keyprov@ietf.org > Subject: Re: [KEYPROV] Re Issue 21 (object model) > > Hi Andrea, > > when we use the term "cryptographic module" as a replacement for > "cryptographic token" then I am not sure the cardinality between device > and "cryptographic module" is correct. Shouldn't it be 1 device may be > have multiple "cryptographic modules"? > > Furthermore, where does the "Key Container" concept come from? Cannot > you just collapse the "Key Container" and the "Key"? > I believe that the MAC and encryption algorithms belong to the Key > rather than to the container. > > Where does the Key Type fit in there? > > Ciao > Hannes > > Doherty, Andrea wrote: > >> Yesterday I added this message to the Issue Tracker, but for some >> > reason > >> it was not propagated to the mailing list. Here it is: >> >> Issue 21 - new message (5 July 07) >> Device pertains to something physical that the user holds, and >> "cryptographic >> token", as stated in PKCS#11, "stores objects and can perform >> cryptographic >> functions". However, the use of the word "token" is often confused >> > with > >> the >> physical device, and equally often confused with the software that >> performs the >> functions. In addition, note that "token" gets used in different and >> equally >> confusing ways in other arenas, e.g., OASIS WS Security. >> >> Thus, I propose that we do not use "token". I also propose that we >> refer >> to "cryptographic module" wherever the PKCS#11 definition applies (on >> first >> look, this will be almost a 1:1 replacement of "cryptographic token" >> with "cryptographic module). With this proposal in mind, please >> consider the >> following alternative to Shuh's initial object diagram: >> >> DSKPP Basic Object Model >> ======================== >> >> ----------- ------------- >> |User | |Device | >> |---------|* owns *|-----------| >> | UserID |--------->| DeviceID | >> | ... | | ... | >> ----------- ------------- >> | 1 >> | >> | contains >> | >> | 1 >> | >> V (DSKPP Client) >> ----------------------- >> |Cryptographic Module | >> |---------------------| >> | | >> |Encryption Algorithms| >> |MAC Algorithms | >> |... | >> ----------------------- >> | 1 >> | >> | contains >> | >> | 1 >> V >> ----------------------- >> |f | >> |---------------------| >> | | >> |Encryption Algorithms| >> |MAC Algorithms | >> |... | >> ----------------------- >> | 1 >> | >> | contains >> | >> V * >> ------------- >> |Key | >> |-----------| >> | KeyID | >> | ... | >> ------------- >> >> >> _______________________________________________ >> KEYPROV mailing list >> KEYPROV@ietf.org >> https://www1.ietf.org/mailman/listinfo/keyprov >> >> _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Fri Jul 06 15:54:38 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6tsz-0006R8-Sm; Fri, 06 Jul 2007 15:54:37 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I6tsy-0006Qz-VD for keyprov@ietf.org; Fri, 06 Jul 2007 15:54:37 -0400 Received: from gateway1.rsasecurity.com ([216.162.240.250]) by chiedprmail1.ietf.org with smtp (Exim 4.43) id 1I6tsy-0007ua-Es for keyprov@ietf.org; Fri, 06 Jul 2007 15:54:36 -0400 Received: from hyperion.rsasecurity.com by gateway1.rsasecurity.com via smtpd (for chiedprmail1.ietf.ORG [156.154.24.150]) with SMTP; Fri, 6 Jul 2007 15:54:12 -0400 Received: from sdtihq24.securid.com (sdtihq24.na.rsa.net [10.100.8.152]) by hyperion.na.rsa.net (MOS 3.8.3-GA) with ESMTP id DEZ11637; Fri, 6 Jul 2007 16:01:33 +0500 (GMT-5) Received: from rsana-ex-hq1.NA.RSA.NET (rsana-ex-hq1.na.rsa.net [10.100.8.50]) by sdtihq24.securid.com (8.12.10/8.12.9) with ESMTP id l66JrxX1027122; Fri, 6 Jul 2007 15:53:59 -0400 (EDT) X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: [KEYPROV] Re Issue 21 (object model) Date: Fri, 6 Jul 2007 15:53:56 -0400 Message-ID: <017630AA6DF2DF4EBC1DD4454F8EE2970B75AA93@rsana-ex-hq1.NA.RSA.NET> In-Reply-To: <468E8D05.8070200@gmx.net> Thread-Topic: [KEYPROV] Re Issue 21 (object model) thread-index: Ace//WGxYwpMtZ5vR5CRxG5N2FifiwAB0tgg References: <017630AA6DF2DF4EBC1DD4454F8EE2970B68D153@rsana-ex-hq1.NA.RSA.NET> <468E5920.90105@gmx.net> <017630AA6DF2DF4EBC1DD4454F8EE2970B68D24C@rsana-ex-hq1.NA.RSA.NET> <468E8D05.8070200@gmx.net> From: "Doherty, Andrea" To: "Hannes Tschofenig" X-Junkmail-Whitelist: YES (by domain whitelist at hyperion.na.rsa.net) X-Spam-Score: 0.0 (/) X-Scan-Signature: ba0d4c5f57f7c289496fce758bbf4798 Cc: keyprov@ietf.org X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Hannes, Great question about the instance identifier. We replaced "TokenID" with "DeviceID" in the merge, where "TokenID" is what describes the instance of the crypto module. So, what if we add the element back in, but call it "CryptoModuleID"? See below: ----------- ------------- | User | | Device |=20 |---------|* owns *|-----------| | UserID |--------->| DeviceID | | ... | | ... | ----------- ------------- | 1 | | contains |=20 | * V =20 ----------------------- |Cryptographic Module | |---------------------| |CryptoModuleID |Encryption Algorithms| |MAC Algorithms | |... | ----------------------- | 1 | | contains | | * V =20 ----------------------- |Key Container | |---------------------| |KeyID | |Key Type | |... | ----------------------- =20 Andrea -----Original Message----- From: Hannes Tschofenig [mailto:Hannes.Tschofenig@gmx.net]=20 Sent: Friday, July 06, 2007 2:42 PM To: Doherty, Andrea Cc: keyprov@ietf.org Subject: Re: [KEYPROV] Re Issue 21 (object model) Hi Andrea,=20 what about the following minor modification?=20 ----------- ------------- | User | | Device |=20 |---------|* owns *|-----------| | UserID |--------->| DeviceID | | ... | | ... | ----------- ------------- | 1 | | contains |=20 | * V =20 ----------------------- |Cryptographic Module | |---------------------| |Encryption Algorithms| |MAC Algorithms | |... | ----------------------- | 1 | | contains | | * V =20 ----------------------- |Key Container | |---------------------| |KeyID | |Key Type | |... | -----------------------=20 Is there something that identifies a particular a specific instance of a cryptographic module? Ciao Hannes PS: Regarding the terminology in the other documents: Once we got the=20 terminology right then we have to clean-up the other docs as well. Doherty, Andrea wrote: > Hannes, > I agree with your points. The only challenge I see is that we are > referring to a Key Container in the DSKPP to include key config data > (including key type); the way the PSKC describes the object model for > Key Container implies one container for multiple devices (see > draft-vassilev-portable-symmetric-key-cointainer-02, section 6). > However, because the PSKC view pertains to server-side store more than > client-side, and since it is dealing with a broader set of use cases > than DSKPP (including bulk key provisioning and migration), perhaps it > would indeed be best to do the collapsing here, making a general > reference to "Key Container" as shown below (?)=20 > Andrea > > DSKPP Basic Object Model > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D > ----------- ------------- > |User | |Device |=20 > |---------|* owns *|-----------| > | UserID |--------->| DeviceID | > | ... | | ... | > ----------- ------------- > | 1 > | > | contains > |=20 > | * > V (DSKPP Client) > ----------------------- > |Cryptographic Module | > |---------------------| > |Encryption Algorithms| > |MAC Algorithms | > |... | > ----------------------- > | 1 > | > | contains > | > | * > V (Key Container) > ----------------------- > |Key | > |---------------------| > |KeyID | > |Key Type | > |... | > -----------------------=20 > > -----Original Message----- > From: Hannes Tschofenig [mailto:Hannes.Tschofenig@gmx.net]=20 > Sent: Friday, July 06, 2007 11:01 AM > To: Doherty, Andrea > Cc: keyprov@ietf.org > Subject: Re: [KEYPROV] Re Issue 21 (object model) > > Hi Andrea, > > when we use the term "cryptographic module" as a replacement for=20 > "cryptographic token" then I am not sure the cardinality between device=20 > and "cryptographic module" is correct. Shouldn't it be 1 device may be > have multiple "cryptographic modules"? > > Furthermore, where does the "Key Container" concept come from? Cannot=20 > you just collapse the "Key Container" and the "Key"? > I believe that the MAC and encryption algorithms belong to the Key=20 > rather than to the container. > > Where does the Key Type fit in there? > > Ciao > Hannes > > Doherty, Andrea wrote: > =20 >> Yesterday I added this message to the Issue Tracker, but for some >> =20 > reason > =20 >> it was not propagated to the mailing list. Here it is: >> >> Issue 21 - new message (5 July 07) >> Device pertains to something physical that the user holds, and >> "cryptographic=20 >> token", as stated in PKCS#11, "stores objects and can perform >> cryptographic=20 >> functions". However, the use of the word "token" is often confused >> =20 > with > =20 >> the=20 >> physical device, and equally often confused with the software that >> performs the=20 >> functions. In addition, note that "token" gets used in different and >> equally=20 >> confusing ways in other arenas, e.g., OASIS WS Security. =20 >> >> Thus, I propose that we do not use "token". I also propose that we >> refer=20 >> to "cryptographic module" wherever the PKCS#11 definition applies (on >> first=20 >> look, this will be almost a 1:1 replacement of "cryptographic token"=20 >> with "cryptographic module). With this proposal in mind, please >> consider the=20 >> following alternative to Shuh's initial object diagram: >> >> DSKPP Basic Object Model >> = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D >> >> ----------- ------------- >> |User | |Device |=20 >> |---------|* owns *|-----------| >> | UserID |--------->| DeviceID | >> | ... | | ... | >> ----------- ------------- >> | 1 >> | >> | contains >> | >> | 1 >> | >> V (DSKPP Client) >> ----------------------- >> |Cryptographic Module | >> |---------------------| >> | | >> |Encryption Algorithms| >> |MAC Algorithms | >> |... | >> ----------------------- >> | 1 >> | >> | contains >> | >> | 1 >> V >> ----------------------- >> |f | >> |---------------------| >> | | >> |Encryption Algorithms| >> |MAC Algorithms | >> |... | >> ----------------------- >> | 1 >> | >> | contains >> | >> V * >> ------------- >> |Key |=20 >> |-----------| >> | KeyID | >> | ... | >> ------------- >> >> >> _______________________________________________ >> KEYPROV mailing list >> KEYPROV@ietf.org >> https://www1.ietf.org/mailman/listinfo/keyprov >> =20 >> =20 _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Mon Jul 09 04:10:37 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7oKH-0000M8-T1; Mon, 09 Jul 2007 04:10:34 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7oKG-0000LZ-8c for keyprov@ietf.org; Mon, 09 Jul 2007 04:10:32 -0400 Received: from fawlty.rsasecurity.com ([135.196.176.113]) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1I7oK9-0008C4-0J for keyprov@ietf.org; Mon, 09 Jul 2007 04:10:32 -0400 Received: from mailhost.rsasecurity.com by fawlty.rsasecurity.com via smtpd (for chiedprmail1.ietf.ORG [156.154.24.150]) with ESMTP; Mon, 9 Jul 2007 09:04:41 +0100 Received: from rsasecurity.com (rsaeu-smtp-uk1.eu.rsa.net [10.148.48.70]) by echoes.eu.rsa.net (MOS 3.8.3-GA) with ESMTP id BSB33386; Mon, 9 Jul 2007 07:36:54 GMT Received: from sdtihq24.securid.com (sdtihq24.securid.com [10.100.8.152]) by rsasecurity.com (8.13.5/8.12.9) with ESMTP id l6981gh4026364 for ; Mon, 9 Jul 2007 08:01:42 GMT Received: from rsana-ex-hq1.NA.RSA.NET (rsana-ex-hq1.na.rsa.net [10.100.8.50]) by sdtihq24.securid.com (8.12.10/8.12.9) with ESMTP id l6989uwH019202 for ; Mon, 9 Jul 2007 04:09:56 -0400 (EDT) X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----_=_NextPart_001_01C7C200.890AE92B" Date: Mon, 9 Jul 2007 04:08:26 -0400 Message-ID: <017630AA6DF2DF4EBC1DD4454F8EE297067EA14B@rsana-ex-hq1.NA.RSA.NET> X-MS-Has-Attach: yes Thread-Topic: Internet Draft submission thread-index: AcfB/O8ckPDZVqwGQ1OEOd9QP7RZ8QAA2Swp References: <017630AA6DF2DF4EBC1DD4454F8EE297067EA146@rsana-ex-hq1.NA.RSA.NET> From: "Doherty, Andrea" To: X-Junkmail-Whitelist: YES (by domain whitelist at echoes.eu.rsa.net) X-Spam-Score: 0.0 (/) X-Scan-Signature: 9c5b3aa06c9d33cbcfdc9524277fd3f6 Subject: [KEYPROV] FW: Internet Draft submission X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org This is a multi-part message in MIME format. ------_=_NextPart_001_01C7C200.890AE92B Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Please find attached submission for which I just received an = auto-response from the IETF Submission Manager. Andrea ________________________________ From: Doherty, Andrea Sent: Mon 7/9/2007 3:44 AM To: internet-drafts@ietf.org Subject: Internet Draft submission To the IETF Secretariat:=20 Attached please find the -01 version of Internet-Draft submission = entitled "Dynamic Symmetric Key Provisioning Protocol (DSKPP)". Please = direct any questions or comments you may have to me. Thank you,=20 Andrea Doherty=20 ------_=_NextPart_001_01C7C200.890AE92B Content-Type: text/plain; name="draft-doherty-keyprov-dskpp-01.txt" Content-Transfer-Encoding: base64 Content-Description: draft-doherty-keyprov-dskpp-01.txt Content-Disposition: attachment; filename="draft-doherty-keyprov-dskpp-01.txt" DQoNCg0KS0VZUFJPViBXb3JraW5nIEdyb3VwICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBBLiBEb2hlcnR5DQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAg ICAgICBSU0EsIFRoZSBTZWN1cml0eSBEaXZpc2lvbiBvZiBFTUMNCkludGVuZGVkIHN0YXR1czog U3RhbmRhcmRzIFRyYWNrICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIE0uIFBlaQ0K RXhwaXJlczogSmFudWFyeSA5LCAyMDA4ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IFZlcmlTaWduLCBJbmMuDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgTS4gTnlzdHJvZW0NCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgIFJTQSwgVGhlIFNlY3VyaXR5IERpdmlzaW9uIG9mIEVNQw0KICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBT LiBNYWNoYW5pDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIERpdmVyc2luZXQgQ29ycC4NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgOCwgMjAwNw0KDQoNCiAgICAgICAg ICBEeW5hbWljIFN5bW1ldHJpYyBLZXkgUHJvdmlzaW9uaW5nIFByb3RvY29sIChEU0tQUCkNCiAg ICAgICAgICAgICAgICAgICBkcmFmdC1kb2hlcnR5LWtleXByb3YtZHNrcHAtMDEudHh0DQoNClN0 YXR1cyBvZiB0aGlzIE1lbW8NCg0KICAgQnkgc3VibWl0dGluZyB0aGlzIEludGVybmV0LURyYWZ0 LCBlYWNoIGF1dGhvciByZXByZXNlbnRzIHRoYXQgYW55DQogICBhcHBsaWNhYmxlIHBhdGVudCBv ciBvdGhlciBJUFIgY2xhaW1zIG9mIHdoaWNoIGhlIG9yIHNoZSBpcyBhd2FyZQ0KICAgaGF2ZSBi ZWVuIG9yIHdpbGwgYmUgZGlzY2xvc2VkLCBhbmQgYW55IG9mIHdoaWNoIGhlIG9yIHNoZSBiZWNv bWVzDQogICBhd2FyZSB3aWxsIGJlIGRpc2Nsb3NlZCwgaW4gYWNjb3JkYW5jZSB3aXRoIFNlY3Rp b24gNiBvZiBCQ1AgNzkuDQoNCiAgIEludGVybmV0LURyYWZ0cyBhcmUgd29ya2luZyBkb2N1bWVu dHMgb2YgdGhlIEludGVybmV0IEVuZ2luZWVyaW5nDQogICBUYXNrIEZvcmNlIChJRVRGKSwgaXRz IGFyZWFzLCBhbmQgaXRzIHdvcmtpbmcgZ3JvdXBzLiAgTm90ZSB0aGF0DQogICBvdGhlciBncm91 cHMgbWF5IGFsc28gZGlzdHJpYnV0ZSB3b3JraW5nIGRvY3VtZW50cyBhcyBJbnRlcm5ldC0NCiAg IERyYWZ0cy4NCg0KICAgSW50ZXJuZXQtRHJhZnRzIGFyZSBkcmFmdCBkb2N1bWVudHMgdmFsaWQg Zm9yIGEgbWF4aW11bSBvZiBzaXggbW9udGhzDQogICBhbmQgbWF5IGJlIHVwZGF0ZWQsIHJlcGxh Y2VkLCBvciBvYnNvbGV0ZWQgYnkgb3RoZXIgZG9jdW1lbnRzIGF0IGFueQ0KICAgdGltZS4gIEl0 IGlzIGluYXBwcm9wcmlhdGUgdG8gdXNlIEludGVybmV0LURyYWZ0cyBhcyByZWZlcmVuY2UNCiAg IG1hdGVyaWFsIG9yIHRvIGNpdGUgdGhlbSBvdGhlciB0aGFuIGFzICJ3b3JrIGluIHByb2dyZXNz LiINCg0KICAgVGhlIGxpc3Qgb2YgY3VycmVudCBJbnRlcm5ldC1EcmFmdHMgY2FuIGJlIGFjY2Vz c2VkIGF0DQogICBodHRwOi8vd3d3LmlldGYub3JnL2lldGYvMWlkLWFic3RyYWN0cy50eHQuDQoN CiAgIFRoZSBsaXN0IG9mIEludGVybmV0LURyYWZ0IFNoYWRvdyBEaXJlY3RvcmllcyBjYW4gYmUg YWNjZXNzZWQgYXQNCiAgIGh0dHA6Ly93d3cuaWV0Zi5vcmcvc2hhZG93Lmh0bWwuDQoNCiAgIFRo aXMgSW50ZXJuZXQtRHJhZnQgd2lsbCBleHBpcmUgb24gSmFudWFyeSA5LCAyMDA4Lg0KDQpDb3B5 cmlnaHQgTm90aWNlDQoNCiAgIENvcHlyaWdodCAoQykgVGhlIElFVEYgVHJ1c3QgKDIwMDcpLg0K DQpBYnN0cmFjdA0KDQogICBEU0tQUCBpcyBhIGNsaWVudC1zZXJ2ZXIgcHJvdG9jb2wgZm9yIGlu aXRpYWxpemF0aW9uIChhbmQNCiAgIGNvbmZpZ3VyYXRpb24pIG9mIHN5bW1ldHJpYyBrZXlzIHRv IGxvY2FsbHkgYW5kIHJlbW90ZWx5IGFjY2Vzc2libGUNCiAgIGNyeXB0b2dyYXBoaWMgbW9kdWxl cy4gIFRoZSBwcm90b2NvbCBjYW4gYmUgcnVuIHdpdGggb3Igd2l0aG91dA0KDQoNCg0KRG9oZXJ0 eSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAgICAgICAgICAgICAg IFtQYWdlIDFdDQoNCg0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgIERTS1BQICAg ICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KICAgcHJpdmF0ZS1rZXkgY2FwYWJp bGl0aWVzIGluIHRoZSBjcnlwdG9ncmFwaGljIG1vZHVsZXMsIGFuZCB3aXRoIG9yDQogICB3aXRo b3V0IGFuIGVzdGFibGlzaGVkIHB1YmxpYy1rZXkgaW5mcmFzdHJ1Y3R1cmUuDQoNCiAgIFRocmVl IHZhcmlhdGlvbnMgb2YgdGhlIHByb3RvY29sIHN1cHBvcnQgbXVsdGlwbGUgdXNhZ2Ugc2NlbmFy aW9zLg0KICAgVGhlIGZvdXItcGFzcyAoaS5lLiwgdHdvIHJvdW5kLXRyaXApIHZhcmlhbnQgZW5h YmxlcyBrZXkgZ2VuZXJhdGlvbg0KICAgaW4gbmVhciByZWFsLXRpbWUuICBXaXRoIHRoZSBmb3Vy LXBhc3MgdmFyaWFudCwga2V5cyBhcmUgbXV0dWFsbHkNCiAgIGdlbmVyYXRlZCBieSB0aGUgcHJv dmlzaW9uaW5nIHNlcnZlciBhbmQgY3J5cHRvZ3JhcGhpYyBtb2R1bGU7DQogICBwcm92aXNpb25l ZCBrZXlzIGFyZSBub3QgdHJhbnNmZXJyZWQgb3Zlci10aGUtd2lyZSBvciBvdmVyLXRoZS1haXIu DQogICBUd28tIGFuZCBvbmUtcGFzcyB2YXJpYW50cyBlbmFibGUgc2VjdXJlIGFuZCBlZmZpY2ll bnQgZG93bmxvYWQgYW5kDQogICBpbnN0YWxsYXRpb24gb2Ygc3ltbWV0cmljIGtleXMgdG8gYSBj cnlwdG9ncmFwaGljIG1vZHVsZSBpbg0KICAgZW52aXJvbm1lbnRzIHdoZXJlIG5lYXIgcmVhbC10 aW1lIGNvbW11bmljYXRpb24gbWF5IG5vdCBiZSBwb3NzaWJsZS4NCg0KICAgVGhpcyBkb2N1bWVu dCBidWlsZHMgb24gaW5mb3JtYXRpb24gY29udGFpbmVkIGluIFtSRkM0NzU4XSwgYWRkaW5nDQog ICBzcGVjaWZpYyBlbmhhbmNlbWVudHMgaW4gcmVzcG9uc2UgdG8gaW1wbGVtZW50YXRpb24gZXhw ZXJpZW5jZSBhbmQNCiAgIGxpYWlzb24gcmVxdWVzdHMuICBJdCBpcyBpbnRlbmRlZCwgdGhlcmVm b3JlLCB0aGF0IHRoaXMgZG9jdW1lbnQgb3IgYQ0KICAgc3VjY2Vzc29yIHZlcnNpb24gdGhlcmV0 byB3aWxsIGJlY29tZSB0aGUgYmFzaXMgZm9yIHN1YnNlcXVlbnQNCiAgIHByb2dyZXNzaW9uIG9m IGEgc3ltbWV0cmljIGtleSBwcm92aXNpb25pbmcgcHJvdG9jb2wgc3BlY2lmaWNhdGlvbiBvbg0K ICAgdGhlIHN0YW5kYXJkcyB0cmFjay4NCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCkRvaGVydHksIGV0IGFsLiAgICAgICAg ICBFeHBpcmVzIEphbnVhcnkgOSwgMjAwOCAgICAgICAgICAgICAgICBbUGFnZSAyXQ0KDQoNCklu dGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICBEU0tQUCAgICAgICAgICAgICAgICAgICAg ICAgIEp1bHkgMjAwNw0KDQoNClRhYmxlIG9mIENvbnRlbnRzDQoNCiAgIDEuICBJbnRyb2R1Y3Rp b24gIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgNw0K ICAgICAxLjEuICBTY29wZSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gICA3DQogICAgIDEuMi4gIEJhY2tncm91bmQgIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgIDcNCiAgIDIuICBOb3RhdGlvbiBhbmQgVGVy bWlub2xvZ3kgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgOA0KICAgMy4g IFVzZSBDYXNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gICA5DQogICAgIDMuMS4gIEEgY3J5cHRvZ3JhcGhpYyBtb2R1bGUgb2J0YWlucyBhIHN5 bW1ldHJpYyBrZXkgIC4gLiAuIC4gLiAgIDkNCiAgICAgMy4yLiAgQSBjcnlwdG9ncmFwaGljIG1v ZHVsZSBhY3F1aXJlcyBtdWx0aXBsZSBzeW1tZXRyaWMNCiAgICAgICAgICAga2V5cyBvZiBkaWZm ZXJlbnQgdHlwZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAgOQ0KICAgICAz LjMuICBBIHByb3Zpc2lvbmluZyBzZXJ2ZXIgaW1wb3NlcyBhIHZhbGlkaXR5IHBlcmlvZCBwb2xp Y3kNCiAgICAgICAgICAgZm9yIHByb3Zpc2lvbmluZyBzZXNzaW9ucyAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICAxMA0KICAgICAzLjQuICBBIHN5bW1ldHJpYyBrZXkgaXNzdWVyIHVz ZXMgYSB0aGlyZCBwYXJ0eSBwcm92aXNpb25pbmcNCiAgICAgICAgICAgc2VydmljZSBwcm92aWRl ciAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxMA0KICAgICAzLjUu ICBBIGNyeXB0b2dyYXBoaWMgbW9kdWxlIHJlbmV3cyBpdHMgc3ltbWV0cmljIGtleSB3aXRoDQog ICAgICAgICAgIHRoZSBzYW1lIGtleSBJRCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAgMTANCiAgICAgMy42LiAgQW4gYWRtaW5pc3RyYXRvciBpbml0aWF0ZXMgYSBz eW1tZXRyaWMga2V5IHJlcGxhY2VtZW50DQogICAgICAgICAgIGJlZm9yZSBpdCBjYW4gYmUgdXNl ZCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMTANCiAgICAgMy43LiAgQSBj cnlwdG9ncmFwaGljIG1vZHVsZSBob3N0ZWQgYnkgYSBzbWFydCBjYXJkIHVzZXMgYQ0KICAgICAg ICAgICBwcmUtc2hhcmVkIHRyYW5zcG9ydCBrZXkgdG8gY29tbXVuaWNhdGUgd2l0aCB0aGUNCiAg ICAgICAgICAgcHJvdmlzaW9uaW5nIHNlcnZlciAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuICAxMQ0KICAgICAzLjguICBBIGNyeXB0b2dyYXBoaWMgbW9kdWxlIGhvc3RlZCBi eSBhIG1vYmlsZSBkZXZpY2UNCiAgICAgICAgICAgZG93bmxvYWRzIGEgc3ltbWV0cmljIGtleSB0 aHJvdWdoIFNNUyAuIC4gLiAuIC4gLiAuIC4gLiAuICAxMQ0KICAgICAzLjkuICBBIGNyeXB0b2dy YXBoaWMgbW9kdWxlIGFjcXVpcmVzIGEgc3ltbWV0cmljIGtleSBvdmVyIGENCiAgICAgICAgICAg dHJhbnNwb3J0IHByb3RvY29sIHRoYXQgZG9lcyBub3QgZW5zdXJlIGRhdGENCiAgICAgICAgICAg Y29uZmlkZW50aWFsaXR5IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu ICAxMg0KICAgICAzLjEwLiBBIGNyeXB0b2dyYXBoaWMgbW9kdWxlIGFjcXVpcmVzIGEgc3ltbWV0 cmljIGtleSBvdmVyIGENCiAgICAgICAgICAgdHJhbnNwb3J0IHByb3RvY29sIHRoYXQgZG9lcyBu b3QgcHJvdmlkZSBhdXRoZW50aWNhdGlvbiAuICAxMg0KICAgNC4gIERTS1BQIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDEyDQogICAgIDQu MS4gIEVudGl0aWVzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAgMTINCiAgICAgNC4yLiAgUHJpbmNpcGxlcyBvZiBPcGVyYXRpb24gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuICAxNA0KICAgICAgIDQuMi4xLiAgRm91ci1wYXNzIERTS1BQ IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDE1DQogICAgICAgNC4yLjIu ICBUd28tcGFzcyBEU0tQUCAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAg MTkNCiAgICAgICA0LjIuMy4gIE9uZS1wYXNzIERTS1BQICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICAyMQ0KICAgICA0LjMuICBBdXRoZW50aWNhdGlvbiAgLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDIyDQogICAgICAgNC4zLjEuICBDbGll bnQgQXV0aGVudGljYXRpb24gKEFwcGxpY2FibGUgdG8gRm91ci0gYW5kDQogICAgICAgICAgICAg ICBUd28tUGFzcyBEU0tQUCkgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAg MjINCiAgICAgICA0LjMuMi4gIFNlcnZlciBBdXRoZW50aWNhdGlvbiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICAyNQ0KICAgICA0LjQuICBTeW1tZXRyaWMgS2V5IENvbnRhaW5lciBG b3JtYXQgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDI1DQogICAgIDQuNS4gIFRoZSBEU0tQ UCBPbmUtV2F5IFBzZXVkb3JhbmRvbSBGdW5jdGlvbiwgRFNLUFAtUFJGICAuIC4gLiAgMjUNCiAg ICAgICA0LjUuMS4gIEludHJvZHVjdGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuICAyNQ0KICAgICAgIDQuNS4yLiAgRGVjbGFyYXRpb24gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDI2DQogICAgIDQuNi4gIEdlbmVyYXRpb24gb2Yg U3ltbWV0cmljIEtleXMgZm9yIENyeXB0b2dyYXBoaWMgTW9kdWxlcyAgLiAgMjYNCiAgICAgNC43 LiAgRW5jcnlwdGlvbiBvZiBQc2V1ZG9yYW5kb20gTm9uY2VzIFNlbnQgZnJvbSB0aGUgRFNLUFAN CiAgICAgICAgICAgQ2xpZW50ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuICAyNw0KICAgICA0LjguICBNQUMgY2FsY3VsYXRpb25zICAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDI3DQogICAgICAgNC44LjEuICBGb3VyLXBh c3MgRFNLUFAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMjcNCiAgICAg ICA0LjguMi4gIFR3by1wYXNzIERTS1BQICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuICAyOA0KDQoNCg0KRG9oZXJ0eSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFy eSA5LCAyMDA4ICAgICAgICAgICAgICAgIFtQYWdlIDNdDQoNCg0KSW50ZXJuZXQtRHJhZnQgICAg ICAgICAgICAgICAgICAgIERTS1BQICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDA3DQoN Cg0KICAgICAgIDQuOC4zLiAgT25lLXBhc3MgRFNLUFAgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gIDI5DQogICAgIDQuOS4gIERTS1BQIFNjaGVtYSBCYXNpY3MgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMzANCiAgICAgICA0LjkuMS4gIFRoZSBB YnN0cmFjdFJlcXVlc3RUeXBlIFR5cGUgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAzMQ0KICAg ICAgIDQuOS4yLiAgVGhlIEFic3RyYWN0UmVzcG9uc2VUeXBlIFR5cGUgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gIDMxDQogICAgICAgNC45LjMuICBUaGUgVmVyc2lvblR5cGUgVHlwZSAgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMzINCiAgICAgICA0LjkuNC4gIFRoZSBJZGVudGlm aWVyVHlwZSBUeXBlIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAzMg0KICAgICAgIDQu OS41LiAgVGhlIFN0YXR1c0NvZGUgVHlwZSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gIDMyDQogICAgICAgNC45LjYuICBUaGUgRGV2aWNlSWRlbnRpZmllckRhdGFUeXBlIFR5cGUg LiAuIC4gLiAuIC4gLiAuIC4gLiAgMzQNCiAgICAgICA0LjkuNy4gIFRoZSBUb2tlblBsYXRmb3Jt SW5mb1R5cGUgYW5kIFBsYXRmb3JtVHlwZSBUeXBlcyAgLiAuICAzNQ0KICAgICAgIDQuOS44LiAg VGhlIE5vbmNlVHlwZSBUeXBlICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDM1 DQogICAgICAgNC45LjkuICBUaGUgQWxnb3JpdGhtc1R5cGUgVHlwZSAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAgMzYNCiAgICAgICA0LjkuMTAuIFRoZSBQcm90b2NvbFZhcmlhbnRzVHlw ZSBhbmQgdGhlDQogICAgICAgICAgICAgICBUd29QYXNzU3VwcG9ydFR5cGUgVHlwZXMgIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgMzYNCiAgICAgICA0LjkuMTEuIFRoZSBLZXlDb250YWlu ZXJzRm9ybWF0VHlwZVR5cGUgLiAuIC4gLiAuIC4gLiAuIC4gLiAuICAzNw0KICAgICAgIDQuOS4x Mi4gVGhlIEF1dGhlbnRpY2F0aW9uRGF0YVR5cGUgVHlwZSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g IDM4DQogICAgICAgNC45LjEzLiBUaGUgUGF5bG9hZFR5cGUgVHlwZSAgLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAgNDANCiAgICAgICA0LjkuMTQuIFRoZSBNYWNUeXBlIFR5cGUgIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA0MA0KICAgICAgIDQuOS4xNS4gVGhl IEtleUNvbnRhaW5lclR5cGUgVHlwZSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDQwDQog ICAgICAgNC45LjE2LiBUaGUgRXh0ZW5zaW9uc1R5cGUgYW5kIHRoZSBBYnN0cmFjdEV4dGVuc2lv blR5cGUNCiAgICAgICAgICAgICAgIFR5cGVzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuICA0MQ0KICAgICA0LjEwLiBEU0tQUCBNZXNzYWdlcyAgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDQxDQogICAgICAgNC4xMC4xLiBJ bnRyb2R1Y3Rpb24gIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNDEN CiAgICAgICA0LjEwLjIuIERTS1BQIEluaXRpYWxpemF0aW9uIChPUFRJT05BTCkgLiAuIC4gLiAu IC4gLiAuIC4gLiAuICA0MQ0KICAgICAgIDQuMTAuMy4gVGhlIERTS1BQIENsaWVudCdzIEluaXRp YWwgUERVICgyLSBhbmQgNC1QYXNzKSAgLiAuIC4gIDQzDQogICAgICAgNC4xMC40LiBUaGUgRFNL UFAgU2VydmVyJ3MgSW5pdGlhbCBQRFUgKDQtUGFzcyBPbmx5KSAgLiAuIC4gLiAgNDYNCiAgICAg ICA0LjEwLjUuIFRoZSBEU0tQUCBDbGllbnQncyBTZWNvbmQgUERVICg0LVBhc3MgT25seSkgLiAu IC4gLiAuICA0Nw0KICAgICAgIDQuMTAuNi4gVGhlIERTS1BQIFNlcnZlcidzIEZpbmFsIFBEVSAo MS0sIDItLCBhbmQgNC1QYXNzKSAuIC4gIDQ4DQogICAgIDQuMTEuIFByb3RvY29sIEV4dGVuc2lv bnMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNTANCiAgICAgICA0LjEx LjEuIFRoZSBDbGllbnRJbmZvVHlwZSBUeXBlIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu ICA1MA0KICAgICAgIDQuMTEuMi4gVGhlIFNlcnZlckluZm9UeXBlIFR5cGUgLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gIDUwDQogICAgICAgNC4xMS4zLiBUaGUgS2V5SW5pdGlhbGl6YXRp b25EYXRhVHlwZSBUeXBlICAuIC4gLiAuIC4gLiAuIC4gLiAgNTENCiAgIDUuICBQcm90b2NvbCBC aW5kaW5ncyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA1Mg0K ICAgICA1LjEuICBHZW5lcmFsIFJlcXVpcmVtZW50cyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gIDUyDQogICAgIDUuMi4gIEhUVFAvMS4xIEJpbmRpbmcgZm9yIERTS1BQICAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNTINCiAgICAgICA1LjIuMS4gIEludHJvZHVj dGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA1Mg0KICAgICAg IDUuMi4yLiAgSWRlbnRpZmljYXRpb24gb2YgRFNLUFAgTWVzc2FnZXMgIC4gLiAuIC4gLiAuIC4g LiAuIC4gIDUzDQogICAgICAgNS4yLjMuICBIVFRQIEhlYWRlcnMgIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNTMNCiAgICAgICA1LjIuNC4gIEhUVFAgT3BlcmF0aW9u cyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA1Mw0KICAgICAgIDUuMi41 LiAgSFRUUCBTdGF0dXMgQ29kZXMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g IDUzDQogICAgICAgNS4yLjYuICBIVFRQIEF1dGhlbnRpY2F0aW9uIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAgNTQNCiAgICAgICA1LjIuNy4gIEluaXRpYWxpemF0aW9uIG9mIERT S1BQIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA1NA0KICAgICAgIDUuMi44LiAgRXhh bXBsZSBNZXNzYWdlcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDU0DQog ICA2LiAgRFNLUFAgU2NoZW1hICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAgNTUNCiAgIDcuICBTZWN1cml0eSBDb25zaWRlcmF0aW9ucyAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA2Mw0KICAgICA3LjEuICBHZW5lcmFsIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDYzDQogICAgIDcu Mi4gIEFjdGl2ZSBBdHRhY2tzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAgNjMNCiAgICAgICA3LjIuMS4gIEludHJvZHVjdGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuICA2Mw0KICAgICAgIDcuMi4yLiAgTWVzc2FnZSBNb2RpZmlj YXRpb25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDY0DQoNCg0KDQpEb2hlcnR5 LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDksIDIwMDggICAgICAgICAgICAgICAg W1BhZ2UgNF0NCg0KDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgRFNLUFAgICAg ICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQogICAgICAgNy4yLjMuICBNZXNzYWdl IERlbGV0aW9uICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNjUNCiAgICAg ICA3LjIuNC4gIE1lc3NhZ2UgSW5zZXJ0aW9uIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuICA2NQ0KICAgICAgIDcuMi41LiAgTWVzc2FnZSBSZXBsYXkgIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDY2DQogICAgICAgNy4yLjYuICBNZXNzYWdlIFJlb3Jk ZXJpbmcgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNjYNCiAgICAgICA3LjIu Ny4gIE1hbi1pbi10aGUtTWlkZGxlIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu ICA2Ng0KICAgICA3LjMuICBQYXNzaXZlIEF0dGFja3MgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gIDY2DQogICAgIDcuNC4gIENyeXB0b2dyYXBoaWMgQXR0YWNrcyAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNjcNCiAgICAgNy41LiAgQXR0YWNr cyBvbiB0aGUgSW50ZXJhY3Rpb24gYmV0d2VlbiBEU0tQUCBhbmQgVXNlcg0KICAgICAgICAgICBB dXRoZW50aWNhdGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g IDY3DQogICAgIDcuNi4gIEFkZGl0aW9uYWwgQ29uc2lkZXJhdGlvbnMgU3BlY2lmaWMgdG8gMi0g YW5kIDEtcGFzcw0KICAgICAgICAgICBEU0tQUCAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDY4DQogICAgICAgNy42LjEuICBDbGllbnQgQ29udHJp YnV0aW9ucyB0byBLX1RPS0VOIEVudHJvcHkgLiAuIC4gLiAuIC4gLiAgNjgNCiAgICAgICA3LjYu Mi4gIEtleSBDb25maXJtYXRpb24gIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu ICA2OA0KICAgICAgIDcuNi4zLiAgU2VydmVyIEF1dGhlbnRpY2F0aW9uIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gIDY4DQogICAgICAgNy42LjQuICBDbGllbnQgQXV0aGVudGljYXRp b24gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNjgNCiAgICAgICA3LjYuNS4gIEtl eSBQcm90ZWN0aW9uIGluIHRoZSBQYXNzcGhyYXNlIFByb2ZpbGUgIC4gLiAuIC4gLiAuICA2OQ0K ICAgOC4gIElBTkEgQ29uc2lkZXJhdGlvbnMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gIDcwDQogICA5LiAgSW50ZWxsZWN0dWFsIFByb3BlcnR5IENvbnNpZGVyYXRp b25zICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNzANCiAgIDEwLiBBY2tub3dsZWRnZW1lbnRz ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA3MA0KICAgMTEu IFJlZmVyZW5jZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gIDcwDQogICAgIDExLjEuIE5vcm1hdGl2ZSByZWZlcmVuY2VzICAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNzANCiAgICAgMTEuMi4gSW5mb3JtYXRpdmUgcmVmZXJl bmNlcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA3MQ0KICAgQXBwZW5kaXgg QS4gIEtleSBJbml0aWFsaXphdGlvbiBQcm9maWxlcyBvZiBEU0tQUCAuIC4gLiAuIC4gLiAuIC4g IDcyDQogICAgIEEuMS4gIEludHJvZHVjdGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAgNzMNCiAgICAgQS4yLiAgS2V5IFRyYW5zcG9ydCBQcm9maWxlIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA3Mw0KICAgICAgIEEuMi4xLiAgSW50 cm9kdWN0aW9uICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDczDQog ICAgICAgQS4yLjIuICBJZGVudGlmaWNhdGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAgNzMNCiAgICAgICBBLjIuMy4gIFBheWxvYWRzICAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA3Mw0KICAgICBBLjMuICBLZXkgd3JhcCBwcm9m aWxlICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDc0DQogICAgICAg QS4zLjEuICBJbnRyb2R1Y3Rpb24gIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAgNzQNCiAgICAgICBBLjMuMi4gIElkZW50aWZpY2F0aW9uICAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuICA3NA0KICAgICAgIEEuMy4zLiAgUGF5bG9hZHMgIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDc0DQogICAgIEEuNC4gIFBh c3NwaHJhc2UtYmFzZWQga2V5IHdyYXAgcHJvZmlsZSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAg NzYNCiAgICAgICBBLjQuMS4gIEludHJvZHVjdGlvbiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuICA3Ng0KICAgICAgIEEuNC4yLiAgSWRlbnRpZmljYXRpb24gIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDc2DQogICAgICAgQS40LjMuICBQYXls b2FkcyAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgNzYNCiAg IEFwcGVuZGl4IEIuICBFeGFtcGxlIE1lc3NhZ2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuICA3Nw0KICAgICBCLjEuICBFeGFtcGxlIE1lc3NhZ2VzIGluIGEgRm91ci1wYXNz IEV4Y2hhbmdlICAuIC4gLiAuIC4gLiAuIC4gIDc3DQogICAgICAgQi4xLjEuICBFeGFtcGxlIG9m IGEgRFNLUFAgSW5pdGlhbGl6YXRpb24gKFRyaWdnZXIpIE1lc3NhZ2UgLiAgNzgNCiAgICAgICBC LjEuMi4gIEV4YW1wbGUgb2YgYSA8Q2xpZW50SGVsbG8+IE1lc3NhZ2UgIC4gLiAuIC4gLiAuIC4g LiAuICA3OQ0KICAgICAgIEIuMS4zLiAgRXhhbXBsZSBvZiBhIDxTZXJ2ZXJIZWxsbz4gTWVzc2Fn ZSAgLiAuIC4gLiAuIC4gLiAuIC4gIDgwDQogICAgICAgQi4xLjQuICBFeGFtcGxlIG9mIGEgPENs aWVudE5vbmNlPiBNZXNzYWdlICAuIC4gLiAuIC4gLiAuIC4gLiAgODANCiAgICAgICBCLjEuNS4g IEV4YW1wbGUgb2YgYSA8U2VydmVyRmluaXNoZWQ+IE1lc3NhZ2UgLiAuIC4gLiAuIC4gLiAuICA4 MA0KICAgICBCLjIuICBFeGFtcGxlIE1lc3NhZ2VzIGluIGEgVHdvLSBvciBPbmUtcGFzcyBFeGNo YW5nZSAuIC4gLiAuIC4gIDgxDQogICAgICAgQi4yLjEuICBFeGFtcGxlIG9mIGEgPENsaWVudEhl bGxvPiBNZXNzYWdlIEluZGljYXRpbmcNCiAgICAgICAgICAgICAgIFN1cHBvcnQgZm9yIFR3by1w YXNzIERTS1BQICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA4MQ0KICAgICAgIEIuMi4yLiAg RXhhbXBsZSBvZiBhIDxTZXJ2ZXJGaW5pc2hlZD4gTWVzc2FnZSBVc2luZyB0aGUNCiAgICAgICAg ICAgICAgIEtleSBUcmFuc3BvcnQgUHJvZmlsZSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuICA4Mw0KDQoNCg0KRG9oZXJ0eSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSA5 LCAyMDA4ICAgICAgICAgICAgICAgIFtQYWdlIDVdDQoNCg0KSW50ZXJuZXQtRHJhZnQgICAgICAg ICAgICAgICAgICAgIERTS1BQICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDA3DQoNCg0K ICAgICAgIEIuMi4zLiAgRXhhbXBsZSBvZiBhIDxTZXJ2ZXJGaW5pc2hlZD4gTWVzc2FnZSBVc2lu ZyB0aGUNCiAgICAgICAgICAgICAgIEtleSBXcmFwIFByb2ZpbGUgIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuICA4NQ0KICAgICAgIEIuMi40LiAgRXhhbXBsZSBvZiBhIDxTZXJ2 ZXJGaW5pc2hlZD4gTWVzc2FnZSB1c2luZyB0aGUNCiAgICAgICAgICAgICAgIFBhc3NwaHJhc2Ut YmFzZWQgS2V5IFdyYXAgUHJvZmlsZSAuIC4gLiAuIC4gLiAuIC4gLiAuICA4Ng0KICAgQXBwZW5k aXggQy4gIFJlcXVpcmVtZW50cyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gIDg4DQogICBBcHBlbmRpeCBELiAgSW50ZWdyYXRpb24gd2l0aCBQS0NTICMxMSAgLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAgOTANCiAgICAgRC4xLiAgVGhlIDQtcGFzcyBWYXJpYW50ICAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA5MQ0KICAgICBELjIuICBUaGUg Mi1wYXNzIFZhcmlhbnQgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDkx DQogICAgIEQuMy4gIFRoZSAxLXBhc3MgVmFyaWFudCAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAgOTMNCiAgIEFwcGVuZGl4IEUuICBFeGFtcGxlIG9mIERTS1BQLVBSRiBS ZWFsaXphdGlvbnMgIC4gLiAuIC4gLiAuIC4gLiAuICA5NQ0KICAgICBFLjEuICBJbnRyb2R1Y3Rp b24gIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDk2DQogICAg IEUuMi4gIERTS1BQLVBSRi1BRVMgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAgOTYNCiAgICAgICBFLjIuMS4gIElkZW50aWZpY2F0aW9uICAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA5Ng0KICAgICAgIEUuMi4yLiAgRGVmaW5pdGlvbiAg LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDk2DQogICAgICAgRS4y LjMuICBFeGFtcGxlIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAgOTcNCiAgICAgRS4zLiAgRFNLUFAtUFJGLVNIQTI1NiAgLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuICA5Nw0KICAgICAgIEUuMy4xLiAgSWRlbnRpZmljYXRpb24gIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDk3DQogICAgICAgRS4zLjIuICBE ZWZpbml0aW9uICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAgOTgN CiAgICAgICBFLjMuMy4gIEV4YW1wbGUgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuICA5OQ0KICAgQXV0aG9ycycgQWRkcmVzc2VzICAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDk5DQogICBJbnRlbGxlY3R1YWwgUHJvcGVy dHkgYW5kIENvcHlyaWdodCBTdGF0ZW1lbnRzICAuIC4gLiAuIC4gLiAuIC4gLiAxMDANCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCkRv aGVydHksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgOSwgMjAwOCAgICAgICAgICAg ICAgICBbUGFnZSA2XQ0KDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICBEU0tQ UCAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCjEuICBJbnRyb2R1Y3Rpb24N Cg0KMS4xLiAgU2NvcGUNCg0KICAgVGhpcyBkb2N1bWVudCBkZXNjcmliZXMgYSBjbGllbnQtc2Vy dmVyIHByb3RvY29sIGZvciBpbml0aWFsaXphdGlvbg0KICAgKGFuZCBjb25maWd1cmF0aW9uKSBv ZiBzeW1tZXRyaWMga2V5cyB0byBsb2NhbGx5IGFuZCByZW1vdGVseQ0KICAgYWNjZXNzaWJsZSBj cnlwdG9ncmFwaGljIG1vZHVsZXMuICBUaGUgcHJvdG9jb2wgY2FuIGJlIHJ1biB3aXRoIG9yDQog ICB3aXRob3V0IHByaXZhdGUta2V5IGNhcGFiaWxpdGllcyBpbiB0aGUgY3J5cHRvZ3JhcGhpYyBt b2R1bGVzLCBhbmQNCiAgIHdpdGggb3Igd2l0aG91dCBhbiBlc3RhYmxpc2hlZCBwdWJsaWMta2V5 IGluZnJhc3RydWN0dXJlLiAgVGhlDQogICBvYmplY3RpdmVzIG9mIHRoaXMgcHJvdG9jb2wgYXJl IHRvOg0KDQogICBvICAgICBQcm92aWRlIGEgc2VjdXJlIG1ldGhvZCBvZiBpbml0aWFsaXppbmcg Y3J5cHRvZ3JhcGhpYyBtb2R1bGVzDQogICAgICAgICB3aXRoIHN5bW1ldHJpYyBrZXlzIHdpdGhv dXQgZXhwb3NpbmcgZ2VuZXJhdGVkLCBzZWNyZXQgbWF0ZXJpYWwNCiAgICAgICAgIHRvIGFueSBv dGhlciBlbnRpdGllcyB0aGFuIHRoZSBzZXJ2ZXIgYW5kIHRoZSBjcnlwdG9ncmFwaGljDQogICAg ICAgICBtb2R1bGUgaXRzZWxmLg0KICAgbyAgICAgUHJvdmlkZSBhIHNlY3VyZSBtZXRob2Qgb2Yg Z2VuZXJhdGluZyBhbmQgdHJhbnNwb3J0aW5nDQogICAgICAgICBzeW1tZXRyaWMga2V5cyB0byBh IGNyeXB0b2dyYXBoaWMgbW9kdWxlIGluIGVudmlyb25tZW50cyB3aGVyZQ0KICAgICAgICAgbmVh ciByZWFsLXRpbWUgY29tbXVuaWNhdGlvbiBpcyBub3QgcG9zc2libGUuDQogICBvICAgICBQcm92 aWRlIGEgc2VjdXJlIG1ldGhvZCBvZiB0cmFuc3BvcnRpbmcgcHJlLWdlbmVyYXRlZCAoaS5lLiwN CiAgICAgICAgIGxlZ2FjeSkga2V5cyB0byBhIGNyeXB0b2dyYXBoaWMgbW9kdWxlLg0KICAgbyAg ICAgUHJvdmlkZSBhIHNvbHV0aW9uIHRoYXQgaXMgZWFzeSB0byBhZG1pbmlzdGVyIGFuZCBzY2Fs ZXMgd2VsbC4NCg0KICAgVGhlIG1lY2hhbmlzbSBpcyBpbnRlbmRlZCBmb3IgZ2VuZXJhbCB1c2Ug d2l0aGluIGNvbXB1dGVyIGFuZA0KICAgY29tbXVuaWNhdGlvbnMgc3lzdGVtcyBlbXBsb3lpbmcg c3ltbWV0cmljIGNyeXB0b2dyYXBoaWMgbW9kdWxlcyB0aGF0DQogICBhcmUgbG9jYWxseSAoaS5l Liwgb3Zlci10aGUtd2lyZSkgb3IgcmVtb3RlbHkgKGkuZS4sIG92ZXItdGhlLWFpcikNCiAgIGFj Y2Vzc2libGUuDQoNCjEuMi4gIEJhY2tncm91bmQNCg0KICAgQSBzeW1tZXRyaWMgY3J5cHRvZ3Jh cGhpYyBtb2R1bGUgbWF5IGJlIGhvc3RlZCBieSBhIGhhbmQtaGVsZA0KICAgaGFyZHdhcmUgZGV2 aWNlIChlLmcuLCBhIG1vYmlsZSBwaG9uZSksIGEgaGFyZHdhcmUgZGV2aWNlIGNvbm5lY3RlZA0K ICAgdG8gYSBwZXJzb25hbCBjb21wdXRlciB0aHJvdWdoIGFuIGVsZWN0cm9uaWMgaW50ZXJmYWNl LCBzdWNoIGFzIFVTQiwNCiAgIG9yIGEgc29mdHdhcmUgYXBwbGljYXRpb24gcmVzaWRlbnQgb24g YSBwZXJzb25hbCBjb21wdXRlci4gIFRoZQ0KICAgY3J5cHRvZ3JhcGhpYyBtb2R1bGUgb2ZmZXJz IHN5bW1ldHJpYyBjcnlwdG9ncmFwaGljIGZ1bmN0aW9uYWxpdHkNCiAgIHRoYXQgbWF5IGJlIHVz ZWQgdG8gYXV0aGVudGljYXRlIGEgdXNlciB0b3dhcmRzIHNvbWUgc2VydmljZSwgcGVyZm9ybQ0K ICAgZGF0YSBlbmNyeXB0aW9uLCBldGMuICBJbmNyZWFzaW5nbHksIHRoZXNlIG1vZHVsZXMgZW5h YmxlIHRoZWlyDQogICBwcm9ncmFtbWF0aWMgaW5pdGlhbGl6YXRpb24gYXMgd2VsbCBhcyBwcm9n cmFtbWF0aWMgcmV0cmlldmFsIG9mDQogICB0aGVpciBvdXRwdXQgdmFsdWVzLiAgVGhpcyBkb2N1 bWVudCBpbnRlbmRzIHRvIG1lZXQgdGhlIG5lZWQgZm9yIGFuDQogICBvcGVuIGFuZCBpbnRlci1v cGVyYWJsZSBtZWNoYW5pc20gdG8gcHJvZ3JhbW1hdGljYWxseSBpbml0aWFsaXplIGFuZA0KICAg Y29uZmlndXJlIHN5bW1ldHJpYyBrZXlzIHRvIGxvY2FsbHkgYW5kIHJlbW90ZWx5IGFjY2Vzc2li bGUNCiAgIGNyeXB0b2dyYXBoaWMgbW9kdWxlcy4NCg0KICAgVGhlIHRhcmdldCBtZWNoYW5pc20g YWRkcmVzc2VkIGhlcmVpbiBpcyBhIHN5bW1ldHJpYyBrZXkgcHJvdmlzaW9uaW5nDQogICBzZXJ2 ZXIuICBJbiBhbiBpZGVhbCBkZXBsb3ltZW50IHNjZW5hcmlvLCBuZWFyIHJlYWwtdGltZQ0KICAg Y29tbXVuaWNhdGlvbiBpcyBwb3NzaWJsZSBiZXR3ZWVuIHRoZSBwcm92aXNpb25pbmcgc2VydmVy IGFuZCB0aGUNCiAgIGNyeXB0b2dyYXBoaWMgbW9kdWxlLiAgSW4gc3VjaCBhbiBlbnZpcm9ubWVu dCwgaXQgaXMgcG9zc2libGUgZm9yIHRoZQ0KICAgY3J5cHRvZ3JhcGhpYyBtb2R1bGUgYW5kIHBy b3Zpc2lvbmluZyBzZXJ2ZXIgdG8gbXV0dWFsbHkgZ2VuZXJhdGUgYQ0KICAgc3ltbWV0cmljIGtl eSwgYW5kIHRvIGVuc3VyZSB0aGF0IGtleXMgYXJlIG5vdCB0cmFuc3BvcnRlZCBiZXR3ZWVuDQoN Cg0KDQpEb2hlcnR5LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDksIDIwMDggICAg ICAgICAgICAgICAgW1BhZ2UgN10NCg0KDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAg ICAgRFNLUFAgICAgICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQogICB0aGVtLg0K DQogICBUaGVyZSBhcmUsIGhvd2V2ZXIsIHNldmVyYWwgZGVwbG95bWVudCBzY2VuYXJpb3MgdGhh dCBtYWtlIG11dHVhbCBrZXkNCiAgIGdlbmVyYXRpb24gbGVzcyBzdWl0YWJsZS4gIFNwZWNpZmlj YWxseSwgc2NlbmFyaW9zIHdoZXJlIG5lYXIgcmVhbC0NCiAgIHRpbWUgY29tbXVuaWNhdGlvbiBi ZXR3ZWVuIHRoZSBzeW1tZXRyaWMga2V5IHByb3Zpc2lvbmluZyBzZXJ2ZXIgYW5kDQogICB0aGUg Y3J5cHRvZ3JhcGhpYyBtb2R1bGUgaXMgbm90IHBvc3NpYmxlLCBhbmQgc2NlbmFyaW9zIHdpdGgN CiAgIHNpZ25pZmljYW50IGRlc2lnbiBjb25zdHJhaW50cy4gIEV4YW1wbGVzIGluY2x1ZGUgd29y ay1mbG93DQogICBjb25zdHJhaW50cyAoZS5nLiwgcG9saWNpZXMgdGhhdCByZXF1aXJlIGluY3Jl bWVudGFsIGFkbWluaXN0cmF0aXZlDQogICBhcHByb3ZhbCksIG5ldHdvcmsgZGVzaWduIGNvbnN0 cmFpbnRzIHRoYXQgY3JlYXRlIG5ldHdvcmsgbGF0ZW5jeSwNCiAgIGFuZCBidWRnZXQgY29uc3Ry YWludHMgdGhhdCBzdXN0YWluIHJlbGlhbmNlIHVwb24gbGVnYWN5IHN5c3RlbXMgdGhhdA0KICAg YWxyZWFkeSBoYXZlIHN1cHBsaWVzIG9mIHByZS1nZW5lcmF0ZWQga2V5cy4gIEluIHRoZXNlIHNp dHVhdGlvbnMsDQogICB0aGUgY3J5cHRvZ3JhcGhpYyBtb2R1bGUgaXMgcmVxdWlyZWQgdG8gZG93 bmxvYWQgYW5kIGluc3RhbGwgYQ0KICAgc3ltbWV0cmljIGtleSBmcm9tIHRoZSBwcm92aXNpb25p bmcgc2VydmVyIGluIGEgc2VjdXJlIGFuZCBlZmZpY2llbnQNCiAgIG1hbm5lci4NCg0KICAgVGhp cyBkb2N1bWVudCB0cmllcyB0byBtZWV0IHRoZSBuZWVkcyBvZiB0aGVzZSBzY2VuYXJpb3MgYnkN CiAgIGRlc2NyaWJpbmcgdGhyZWUgdmFyaWF0aW9ucyB0byBEU0tQUCBmb3IgdGhlIHByb3Zpc2lv bmluZyBvZg0KICAgc3ltbWV0cmljIGtleXMgaW4gdHdvIHJvdW5kIHRyaXBzIG9yIGxlc3MuICBU aGUgZm91ci1wYXNzIChpLmUuLCB0d28NCiAgIHJvdW5kLXRyaXApIHZhcmlhbnQgZW5hYmxlcyBr ZXkgZ2VuZXJhdGlvbiBpbiBuZWFyIHJlYWwtdGltZS4gIFdpdGgNCiAgIHRoaXMgdmFyaWFudCwg a2V5cyBhcmUgbXV0dWFsbHkgZ2VuZXJhdGVkIGJ5IHRoZSBwcm92aXNpb25pbmcgc2VydmVyDQog ICBhbmQgY3J5cHRvZ3JhcGhpYyBtb2R1bGU7IHByb3Zpc2lvbmVkIGtleXMgYXJlIG5vdCB0cmFu c2ZlcnJlZCBvdmVyLQ0KICAgdGhlLXdpcmUgb3Igb3Zlci10aGUtYWlyLiAgSW4gY29udHJhc3Qs IHR3by0gYW5kIG9uZS1wYXNzIHZhcmlhbnRzDQogICBlbmFibGUgc2VjdXJlIGFuZCBlZmZpY2ll bnQgZG93bmxvYWQgYW5kIGluc3RhbGxhdGlvbiBvZiBzeW1tZXRyaWMNCiAgIGtleXMgdG8gYSBj cnlwdG9ncmFwaGljIG1vZHVsZSBpbiBlbnZpcm9ubWVudHMgd2hlcmUgbmVhciByZWFsLXRpbWUN CiAgIGNvbW11bmljYXRpb24gaXMgbm90IHBvc3NpYmxlLg0KDQoNCjIuICBOb3RhdGlvbiBhbmQg VGVybWlub2xvZ3kNCg0KICAgVGhlIGtleSB3b3JkcyAiTVVTVCIsICJNVVNUIE5PVCIsICJSRVFV SVJFRCIsICJTSEFMTCIsICJTSEFMTCBOT1QiLA0KICAgIlNIT1VMRCIsICJTSE9VTEQgTk9UIiwg IlJFQ09NTUVOREVEIiwgIk1BWSIsIGFuZCAiT1BUSU9OQUwiIGluIHRoaXMNCiAgIGRvY3VtZW50 IGFyZSB0byBiZSBpbnRlcnByZXRlZCBhcyBkZXNjcmliZWQgaW4gW1JGQzIxMTldLg0KDQogICBU aGUgZm9sbG93aW5nIG5vdGF0aW9ucyBhcmUgdXNlZCBpbiB0aGlzIGRvY3VtZW50Og0KDQogICB8 fCAgICAgICAgICAgICAgU3RyaW5nIGNvbmNhdGVuYXRpb24NCiAgIFt4XSAgICAgICAgICAgICBP cHRpb25hbCBlbGVtZW50IHgNCiAgIEEgXiBCICAgICAgICAgICBFeGNsdXNpdmUtT1Igb3BlcmF0 aW9uIG9uIHN0cmluZ3MgQSBhbmQgQiAod2hlcmUgQQ0KICAgICAgICAgICAgICAgICAgIGFuZCBC IGFyZSBvZiBlcXVhbCBsZW5ndGgpDQogICBEU0tQUCBjbGllbnQgICAgTWFuYWdlcyBjb21tdW5p Y2F0aW9uIGJldHdlZW4gdGhlIHN5bW1ldHJpYw0KICAgICAgICAgICAgICAgICAgIGNyeXB0b2dy YXBoaWMgbW9kdWxlIGFuZCB0aGUgRFNLUFAgc2VydmVyDQogICBEU0tQUCBzZXJ2ZXIgICAgVGhl IHN5bW1ldHJpYyBrZXkgcHJvdmlzaW9uaW5nIHNlcnZlciB0aGF0DQogICAgICAgICAgICAgICAg ICAgcGFydGljaXBhdGVzIGluIHRoZSBEU0tQUCBwcm90b2NvbCBydW4NCiAgIElEX0MgICAgICAg ICAgICBJZGVudGlmaWVyIGZvciBEU0tQUCBjbGllbnQNCg0KDQoNCg0KDQoNCg0KRG9oZXJ0eSwg ZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAgICAgICAgICAgICAgIFtQ YWdlIDhdDQoNCg0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgIERTS1BQICAgICAg ICAgICAgICAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KICAgSURfUyAgICAgICAgICAgIElkZW50 aWZpZXIgZm9yIERTS1BQIHNlcnZlcg0KICAgSyAgICAgICAgICAgICAgIEtleSB1c2VkIHRvIGVu Y3J5cHQgUl9DIChlaXRoZXIgS19TRVJWRVIgb3IgS19TSEFSRUQpDQogICBLX0FVVEggICAgICAg ICAgU2VjcmV0IGtleSB1c2VkIGZvciBzZXJ2ZXIgYXV0aGVudGljYXRpb24gcHVycG9zZXMgaW4N CiAgICAgICAgICAgICAgICAgICA0LXBhc3MgRFNLUFANCiAgIEtfQ0xJRU5UICAgICAgICBQdWJs aWMga2V5IG9mIHRoZSBEU0tQUCBjbGllbnQNCiAgIEtfREVSSVZFRCAgICAgICBTZWNyZXQga2V5 IGRlcml2ZWQgZnJvbSBhIHBhc3NwaHJhc2UgdGhhdCBpcyBrbm93biB0bw0KICAgICAgICAgICAg ICAgICAgIGJvdGggdGhlIERTS1BQIGNsaWVudCBvciB1c2VyIGFuZCB0aGUgRFNLUFAgc2VydmVy DQogICBLX01BQyAgICAgICAgICAgU2VjcmV0IGtleSB1c2VkIGZvciBrZXkgY29uZmlybWF0aW9u IGFuZCBzZXJ2ZXINCiAgICAgICAgICAgICAgICAgICBhdXRoZW50aWNhdGlvbiBwdXJwb3Nlcywg YW5kIGdlbmVyYXRlZCBpbiBEU0tQUA0KICAgS19NQUMnICAgICAgICAgIEEgc2Vjb25kIHNlY3Jl dCBrZXkgdXNlZCBmb3Igc2VydmVyIGF1dGhlbnRpY2F0aW9uDQogICAgICAgICAgICAgICAgICAg cHVycG9zZXMgaW4gMi0gYW5kIDEtcGFzcyBEU0tQUA0KICAgS19TRVJWRVIgICAgICAgIFB1Ymxp YyBrZXkgb2YgdGhlIERTS1BQIHNlcnZlcg0KICAgS19TSEFSRUQgICAgICAgIFNlY3JldCBrZXkg c2hhcmVkIGJldHdlZW4gdGhlIERTS1BQIGNsaWVudCBhbmQgdGhlDQogICAgICAgICAgICAgICAg ICAgRFNLUFAgc2VydmVyDQogICBLX1RPS0VOICAgICAgICAgU2VjcmV0IGtleSB1c2VkIGZvciBj cnlwdG9ncmFwaGljIG1vZHVsZQ0KICAgICAgICAgICAgICAgICAgIGNvbXB1dGF0aW9ucywgYW5k IGdlbmVyYXRlZCBpbiBEU0tQUA0KICAgUiAgICAgICAgICAgICAgIFBzZXVkb3JhbmRvbSB2YWx1 ZSBjaG9zZW4gYnkgdGhlIERTS1BQIGNsaWVudCBhbmQNCiAgICAgICAgICAgICAgICAgICB1c2Vk IGZvciBNQUMgY29tcHV0YXRpb25zLCB3aGljaCBpcyBtYW5kYXRvcnkgZm9yDQogICAgICAgICAg ICAgICAgICAgMi1wYXNzIERTS1BQIGFuZCBvcHRpb25hbCBmb3IgNC1wYXNzDQogICBSX0MgICAg ICAgICAgICAgUHNldWRvcmFuZG9tIHZhbHVlIGNob3NlbiBieSB0aGUgRFNLUFAgY2xpZW50IGFu ZA0KICAgICAgICAgICAgICAgICAgIHVzZWQgYXMgaW5wdXQgdG8gdGhlIGdlbmVyYXRpb24gb2Yg S19UT0tFTg0KICAgUl9TICAgICAgICAgICAgIFBzZXVkb3JhbmRvbSB2YWx1ZSBjaG9zZW4gYnkg dGhlIERTS1BQIHNlcnZlciBhbmQNCiAgICAgICAgICAgICAgICAgICB1c2VkIGFzIGlucHV0IHRv IHRoZSBnZW5lcmF0aW9uIG9mIEtfVE9LRU4NCg0KICAgVGhlIGZvbGxvd2luZyB0eXBvZ3JhcGhp Y2FsIGNvbnZlbnRpb24gaXMgdXNlZCBpbiB0aGUgYm9keSBvZiB0aGUNCiAgIHRleHQ6IDxYTUxF bGVtZW50Pi4NCg0KDQozLiAgVXNlIENhc2VzDQoNCiAgIFRoaXMgc2VjdGlvbiBkZXNjcmliZXMg dHlwaWNhbCB1c2UgY2FzZXMuDQoNCjMuMS4gIEEgY3J5cHRvZ3JhcGhpYyBtb2R1bGUgb2J0YWlu cyBhIHN5bW1ldHJpYyBrZXkNCg0KICAgQSBjcnlwdG9ncmFwaGljIG1vZHVsZSBob3N0ZWQgYnkg YSBkZXZpY2UsIHN1Y2ggYXMgYSBtb2JpbGUgcGhvbmUsDQogICBtYWtlcyBhIHJlcXVlc3QgZm9y IGEgc3ltbWV0cmljIGtleSBmcm9tIGEgcHJvdmlzaW9uaW5nIHNlcnZlci4NCiAgIERlcGVuZGlu ZyB1cG9uIGhvdyB0aGUgc3lzdGVtIGlzIGRlcGxveWVkLCB0aGUgcHJvdmlzaW9uaW5nIHNlcnZl cg0KICAgbWF5IGdlbmVyYXRlIGEgbmV3IGtleSBvbi10aGUtZmx5IG9yIHVzZSBhIHByZS1nZW5l cmF0ZWQga2V5LCBlLmcuLA0KICAgb25lIHByb3ZpZGVkIGJ5IGEgbGVnYWN5IGJhY2stZW5kIGlz c3VhbmNlIHNlcnZlci4gIFRoZSBwcm92aXNpb25pbmcNCiAgIHNlcnZlciBhc3NpZ25zIGEgdW5p cXVlIGtleSBJRCB0byB0aGUgc3ltbWV0cmljIGtleSBhbmQgcHJvdmlzaW9ucyBpdA0KICAgdG8g dGhlIGNyeXB0b2dyYXBoaWMgbW9kdWxlLg0KDQozLjIuICBBIGNyeXB0b2dyYXBoaWMgbW9kdWxl IGFjcXVpcmVzIG11bHRpcGxlIHN5bW1ldHJpYyBrZXlzIG9mDQogICAgICBkaWZmZXJlbnQgdHlw ZXMNCg0KICAgQSBjcnlwdG9ncmFwaGljIG1vZHVsZSBtYWtlcyBtdWx0aXBsZSByZXF1ZXN0cyBm b3Igc3ltbWV0cmljIGtleXMNCiAgIGZyb20gdGhlIHNhbWUgcHJvdmlzaW9uaW5nIHNlcnZlci4g IFRoZSBzeW1tZXRyaWMga2V5cyBtYXkgb3IgbWF5IG5vdA0KICAgYmUgb2YgdGhlIHNhbWUgdHlw ZSwgaS5lLiwgdGhlIGtleXMgbWF5IGJlIHVzZWQgd2l0aCBkaWZmZXJlbnQNCg0KDQoNCkRvaGVy dHksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgOSwgMjAwOCAgICAgICAgICAgICAg ICBbUGFnZSA5XQ0KDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICBEU0tQUCAg ICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgIHN5bW1ldHJpYyBjcnlwdG9n cmFwaGljIGFsZ29yaXRobXMsIGluY2x1ZGluZyB0aGUgSE1BQy1CYXNlZCBPbmUtVGltZQ0KICAg UGFzc3dvcmQgKEhPVFApLCBSU0EgU2VjdXJJRCwgY2hhbGxlbmdlLXJlc3BvbnNlLCBldGMuDQoN CjMuMy4gIEEgcHJvdmlzaW9uaW5nIHNlcnZlciBpbXBvc2VzIGEgdmFsaWRpdHkgcGVyaW9kIHBv bGljeSBmb3INCiAgICAgIHByb3Zpc2lvbmluZyBzZXNzaW9ucw0KDQogICBPbmNlIGEgY3J5cHRv Z3JhcGhpYyBtb2R1bGUgaW5pdGlhdGVzIGEgc3ltbWV0cmljIGtleSByZXF1ZXN0LCB0aGUNCiAg IHByb3Zpc2lvbmluZyBzZXJ2ZXIgbWF5IHJlcXVpcmUgdGhhdCBhbnkgc3Vic2VxdWVudCBhY3Rp b25zIHRvDQogICBjb21wbGV0ZSB0aGUgcHJvdmlzaW9uaW5nIGN5Y2xlIG9jY3VyIHdpdGhpbiBh IGNlcnRhaW4gdGltZSB3aW5kb3cuDQogICBGb3IgZXhhbXBsZSwgYW4gaXNzdWVyIG1heSBwcm92 aWRlIGEgdGltZS1saW1pdGVkIGF1dGhlbnRpY2F0aW9uIGNvZGUNCiAgIHRvIGEgdXNlciBkdXJp bmcgcmVnaXN0cmF0aW9uLCB3aGljaCB0aGUgdXNlciB3aWxsIGlucHV0IGludG8gdGhlDQogICBj cnlwdG9ncmFwaGljIG1vZHVsZSB0byBhdXRoZW50aWNhdGUgdGhlbXNlbHZlcyB3aXRoIHRoZSBw cm92aXNpb25pbmcNCiAgIHNlcnZlci4gIEFzIGxvbmcgYXMgdGhlIHVzZXIgaW5wdXRzIGEgdmFs aWQgYXV0aGVudGljYXRpb24gY29kZQ0KICAgd2l0aGluIHRoZSBmaXhlZCB0aW1lIHBlcmlvZCBl c3RhYmxpc2hlZCBieSB0aGUgaXNzdWVyLCB0aGUgc2VydmVyDQogICB3aWxsIHByb3Zpc2lvbiBh IGtleSB0byB0aGUgY3J5cHRvZ3JhcGhpYyBtb2R1bGUgaG9zdGVkIGJ5IHRoZSB1c2VyJ3MNCiAg IGRldmljZS4NCg0KMy40LiAgQSBzeW1tZXRyaWMga2V5IGlzc3VlciB1c2VzIGEgdGhpcmQgcGFy dHkgcHJvdmlzaW9uaW5nIHNlcnZpY2UNCiAgICAgIHByb3ZpZGVyDQoNCiAgIEEgc3ltbWV0cmlj IGtleSBpc3N1ZXIgb3V0c291cmNlcyBpdHMga2V5IHByb3Zpc2lvbmluZyB0byBhIHRoaXJkDQog ICBwYXJ0eSBrZXkgcHJvdmlzaW9uaW5nIHNlcnZlciBwcm92aWRlci4gIFRoZSBpc3N1ZXIgaXMg cmVzcG9uc2libGUNCiAgIGZvciBhdXRoZW50aWNhdGluZyBhbmQgZ3JhbnRpbmcgcmlnaHRzIHRv IHVzZXJzIHRvIGFjcXVpcmUga2V5cyB3aGlsZQ0KICAgYWN0aW5nIGFzIGEgcHJveHkgdG8gdGhl IGNyeXB0b2dyYXBoaWMgbW9kdWxlIHRvIGFjcXVpcmUgc3ltbWV0cmljDQogICBrZXlzIGZyb20g dGhlIHByb3Zpc2lvbmluZyBzZXJ2ZXI7IHRoZSBjcnlwdG9ncmFwaGljIG1vZHVsZQ0KICAgY29t bXVuaWNhdGVzIHdpdGggdGhlIGlzc3VlciBwcm94eSBzZXJ2ZXIsIHdoaWNoIGZvcndhcmRzDQog ICBwcm92aXNpb25pbmcgcmVxdWVzdHMgdG8gdGhlIHByb3Zpc2lvbmluZyBzZXJ2ZXIuDQoNCjMu NS4gIEEgY3J5cHRvZ3JhcGhpYyBtb2R1bGUgcmVuZXdzIGl0cyBzeW1tZXRyaWMga2V5IHdpdGgg dGhlIHNhbWUga2V5DQogICAgICBJRA0KDQogICBBIGNyeXB0b2dyYXBoaWMgbW9kdWxlIHJlcXVl c3RzIHJlbmV3YWwgb2YgYSBzeW1tZXRyaWMga2V5IHVzaW5nIHRoZQ0KICAgc2FtZSBrZXkgSUQg YWxyZWFkeSBhc3NvY2lhdGVkIHdpdGggdGhlIGtleS4gIFN1Y2ggYSBuZWVkIG1heSBvY2N1cg0K ICAgaW4gdGhlIGNhc2Ugd2hlbiBhIHVzZXIgd2FudHMgdG8gdXBncmFkZSBoZXIgZGV2aWNlIHRo YXQgaG91c2VzIHRoZQ0KICAgY3J5cHRvZ3JhcGhpYyBtb2R1bGUgb3Igd2hlbiBhIGtleSBoYXMg ZXhwaXJlZC4gIFdoZW4gYSB1c2VyIHVzZXMgdGhlDQogICBzYW1lIGNyeXB0b2dyYXBoaWMgbW9k dWxlIHRvLCBmb3IgZXhhbXBsZSwgcGVyZm9ybSBzdHJvbmcNCiAgIGF1dGhlbnRpY2F0aW9uIGF0 IG11bHRpcGxlIFdlYiBsb2dpbiBzaXRlcywga2VlcGluZyB0aGUgc2FtZSBrZXkgSUQNCiAgIHJl bW92ZXMgdGhlIG5lZWQgZm9yIHRoZSB1c2VyIHRvIHJlZ2lzdGVyIGEgbmV3IGtleSBJRCBhdCBl YWNoIHNpdGUuDQoNCjMuNi4gIEFuIGFkbWluaXN0cmF0b3IgaW5pdGlhdGVzIGEgc3ltbWV0cmlj IGtleSByZXBsYWNlbWVudCBiZWZvcmUgaXQNCiAgICAgIGNhbiBiZSB1c2VkDQoNCiAgIFRoaXMg dXNlIGNhc2UgcmVwcmVzZW50cyBhIHNwZWNpYWwgY2FzZSBvZiBzeW1tZXRyaWMga2V5IHJlbmV3 YWwgaW4NCiAgIHdoaWNoIGEgbG9jYWwgYWRtaW5pc3RyYXRvciBjYW4gYXV0aGVudGljYXRlIHRo ZSB1c2VyIHByb2NlZHVyYWxseQ0KICAgYmVmb3JlIGluaXRpYXRpbmcgdGhlIHByb3Zpc2lvbmlu ZyBwcm9jZXNzLiAgSXQgYWxzbyBhbGxvd3MgZm9yIGFuDQogICBpc3N1ZXIgdG8gcHJlLWxvYWQg YSBrZXkgb250byBhIGNyeXB0b2dyYXBoaWMgbW9kdWxlIHdpdGggYQ0KICAgcmVzdHJpY3Rpb24g dGhhdCB0aGUga2V5IGlzIHJlcGxhY2VkIHdpdGggYSBuZXcga2V5IHByaW9yIHRvIHVzZSBvZg0K ICAgdGhlIGNyeXB0b2dyYXBoaWMgbW9kdWxlLg0KDQoNCg0KRG9oZXJ0eSwgZXQgYWwuICAgICAg ICAgIEV4cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgMTBdDQoNCg0K SW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgIERTS1BQICAgICAgICAgICAgICAgICAg ICAgICAgSnVseSAyMDA3DQoNCg0KICAgQnVsayBpbml0aWFsaXphdGlvbiB1bmRlciBjb250cm9s bGVkIGNvbmRpdGlvbnMsIGUuZy4sIGR1cmluZw0KICAgbWFudWZhY3R1cmUsIGlzIGxpa2VseSB0 byBtZWV0IHRoZSBzZWN1cml0eSBuZWVkcyBvZiBtb3N0DQogICBhcHBsaWNhdGlvbnMuICBIb3dl dmVyLCByZWxpYW5jZSBvbiBhIHByZS1kaXNjbG9zZWQgc2VjcmV0IGlzDQogICB1bmFjY2VwdGFi bGUgaW4gc29tZSBjaXJjdW1zdGFuY2VzLiAgT25lIHN1Y2ggY2lyY3Vtc3RhbmNlIGlzIHdoZW4N CiAgIGNyeXB0b2dyYXBoaWMgbW9kdWxlcyBhcmUgaXNzdWVkIGZvciBjbGFzc2lmaWVkIGdvdmVy bm1lbnQgdXNlIG9yDQogICBoaWdoIHNlY3VyaXR5IGFwcGxpY2F0aW9ucy4gIEluIHN1Y2ggY2Fz ZXMsIHRoZSBpc3N1ZXIgcmVxdWlyZXMgdGhlDQogICBhYmlsaXR5IHRvIHJlbW92ZSBhbGwgc2Vj cmV0IGluZm9ybWF0aW9uIGFscmVhZHkgaW5zdGFsbGVkIG9uIHRoZQ0KICAgY3J5cHRvZ3JhcGhp YyBtb2R1bGUgYW5kIHJlcGxhY2UgaXQgd2l0aCBzeW1tZXRyaWMga2V5cyBlc3RhYmxpc2hlZA0K ICAgdW5kZXIgY29uZGl0aW9ucyBjb250cm9sbGVkIGJ5IHRoZSBpc3N1ZXIuDQoNCiAgIEFub3Ro ZXIgdmFyaWF0aW9uIG9mIHRoaXMgdXNlIGNhc2UgaXMgdGhlIGlzc3VlciB3aG8gcmVjeWNsZXMN CiAgIGRldmljZXMuICBJbiB0aGlzIGNhc2UsIGFuIGlzc3VlciB3b3VsZCBwcm92aXNpb24gYSBu ZXcgc3ltbWV0cmljIGtleQ0KICAgdG8gYSBjcnlwdG9ncmFwaGljIG1vZHVsZSBob3N0ZWQgb24g YSBkZXZpY2UgdGhhdCB3YXMgcHJldmlvdXNseQ0KICAgb3duZWQgYnkgYW5vdGhlciB1c2VyLg0K DQogICBOb3RlIHRoYXQgdGhpcyB1c2UgY2FzZSBpcyBlc3NlbnRpYWxseSB0aGUgc2FtZSBhcyB0 aGUgbGFzdCB1c2UgY2FzZQ0KICAgd2hlcmVpbiB0aGUgc2FtZSBrZXkgSUQgaXMgdXNlZCBmb3Ig cmVuZXdhbC4NCg0KMy43LiAgQSBjcnlwdG9ncmFwaGljIG1vZHVsZSBob3N0ZWQgYnkgYSBzbWFy dCBjYXJkIHVzZXMgYSBwcmUtc2hhcmVkDQogICAgICB0cmFuc3BvcnQga2V5IHRvIGNvbW11bmlj YXRlIHdpdGggdGhlIHByb3Zpc2lvbmluZyBzZXJ2ZXINCg0KICAgQSBjcnlwdG9ncmFwaGljIG1v ZHVsZSBpcyBsb2FkZWQgb250byBhIHNtYXJ0IGNhcmQgYWZ0ZXIgdGhlIGNhcmQgaXMNCiAgIGlz c3VlZCB0byBhIHVzZXIuICBUaGUgc3ltbWV0cmljIGtleSBmb3IgdGhlIGNyeXB0b2dyYXBoaWMg bW9kdWxlDQogICB3aWxsIHRoZW4gYmUgcHJvdmlzaW9uZWQgdXNpbmcgYSBzZWN1cmUgY2hhbm5l bCBtZWNoYW5pc20gcHJlc2VudCBpbg0KICAgbWFueSBzbWFydCBjYXJkIHBsYXRmb3Jtcy4gIFRo aXMgYWxsb3dzIGEgZGlyZWN0IHNlY3VyZSBjaGFubmVsIHRvIGJlDQogICBlc3RhYmxpc2hlZCBi ZXR3ZWVuIHRoZSBzbWFydCBjYXJkIGNoaXAgYW5kIHRoZSBwcm92aXNpb25pbmcgc2VydmVyLg0K ICAgRm9yIGV4YW1wbGUsIHRoZSBjYXJkIGNvbW1hbmRzIChpLmUuLCBBcHBsaWNhdGlvbiBQcm90 b2NvbCBEYXRhDQogICBVbml0cywgb3IgQVBEVXMpIGFyZSBlbmNyeXB0ZWQgd2l0aCBhIHByZS1z aGFyZWQgdHJhbnNwb3J0IGtleSBhbmQNCiAgIHNlbnQgZGlyZWN0bHkgdG8gdGhlIHNtYXJ0IGNh cmQgY2hpcCwgYWxsb3dpbmcgc2VjdXJlIHBvc3QtaXNzdWFuY2UNCiAgIGluLXRoZS1maWVsZCBw cm92aXNpb25pbmcuICBUaGlzIHNlY3VyZSBmbG93IGNhbiBwYXNzIFRyYW5zcG9ydCBMYXllcg0K ICAgU2VjdXJpdHkgKFRMUykgYW5kIG90aGVyIHRyYW5zcG9ydCBzZWN1cml0eSBib3VuZGFyaWVz Lg0KDQogICBOb3RlIHRoYXQgdHdvIHByZS1jb25kaXRpb25zIGZvciB0aGlzIHVzZSBjYXNlIGFy ZSBmb3IgdGhlIHByb3RvY29sDQogICB0byBiZSB0dW5uZWxlZCBhbmQgdGhlIHByb3Zpc2lvbmlu ZyBzZXJ2ZXIgdG8ga25vdyB0aGUgY29ycmVjdCBwcmUtDQogICBlc3RhYmxpc2hlZCB0cmFuc3Bv cnQga2V5Lg0KDQozLjguICBBIGNyeXB0b2dyYXBoaWMgbW9kdWxlIGhvc3RlZCBieSBhIG1vYmls ZSBkZXZpY2UgZG93bmxvYWRzIGENCiAgICAgIHN5bW1ldHJpYyBrZXkgdGhyb3VnaCBTTVMNCg0K ICAgQSBtb2JpbGUgZGV2aWNlIHN1cHBvcnRzIFNob3J0IE1lc3NhZ2UgU2VydmljZSAoU01TKSBi dXQgaXMgbm90IGFibGUNCiAgIHRvIHN1cHBvcnQgYSBkYXRhIHNlcnZpY2UgYWxsb3dpbmcgZm9y IEhUVFAgb3IgSFRUUFMgdHJhbnNwb3J0cy4gIEluDQogICBhZGRpdGlvbiwgdGhlIGNyeXB0b2dy YXBoaWMgbW9kdWxlIGNhbiBlbnN1cmUgdGhhdCBTTVMgd2lsbCBwcm92aWRlDQogICBhbiBhY2Nl cHRhYmxlIGxldmVsIG9mIHByb3RlY3Rpb24gZm9yIGRvd25sb2FkIG9mIHRoZSBzeW1tZXRyaWMg a2V5Lg0KICAgSW4gc3VjaCBhIGNhc2UsIHRoZSBjcnlwdG9ncmFwaGljIG1vZHVsZSBob3N0ZWQg YnkgdGhlIG1vYmlsZSBkZXZpY2UNCiAgIG1heSBpbml0aWF0ZSBhIHN5bW1ldHJpYyBrZXkgcmVx dWVzdCBmcm9tIGEgZGVza3RvcCBjb21wdXRlciBhbmQgYXNrDQogICB0aGUgc2VydmVyIHRvIHNl bmQgdGhlIGtleSB0byB0aGUgbW9iaWxlIGRldmljZSB0aHJvdWdoIFNNUy4gIFVzZXINCiAgIGF1 dGhlbnRpY2F0aW9uIGlzIGNhcnJpZWQgb3V0IHZpYSB0aGUgb25saW5lIGNvbW11bmljYXRpb24N CiAgIGVzdGFibGlzaGVkIGJldHdlZW4gdGhlIGRlc2t0b3AgY29tcHV0ZXIgYW5kIHRoZSBwcm92 aXNpb25pbmcgc2VydmVyLg0KDQoNCg0KRG9oZXJ0eSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMg SmFudWFyeSA5LCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgMTFdDQoNCg0KSW50ZXJuZXQtRHJh ZnQgICAgICAgICAgICAgICAgICAgIERTS1BQICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAy MDA3DQoNCg0KMy45LiAgQSBjcnlwdG9ncmFwaGljIG1vZHVsZSBhY3F1aXJlcyBhIHN5bW1ldHJp YyBrZXkgb3ZlciBhIHRyYW5zcG9ydA0KICAgICAgcHJvdG9jb2wgdGhhdCBkb2VzIG5vdCBlbnN1 cmUgZGF0YSBjb25maWRlbnRpYWxpdHkNCg0KICAgU29tZSBkZXZpY2VzIGFyZSBub3QgYWJsZSB0 byBzdXBwb3J0IGEgc2VjdXJlIHRyYW5zcG9ydCBjaGFubmVsIHN1Y2gNCiAgIGFzIFNTTCBvciBU TFMgdG8gcHJvdmlkZSBkYXRhIGNvbmZpZGVudGlhbGl0eS4gIEEgY3J5cHRvZ3JhcGhpYw0KICAg bW9kdWxlIGhvc3RlZCBieSBzdWNoIGEgZGV2aWNlIHJlcXVlc3RzIGEgc3ltbWV0cmljIGtleSBm cm9tIHRoZQ0KICAgcHJvdmlzaW9uaW5nIHNlcnZlci4gIEl0IGlzIHVwIHRvIERTS1BQIHRvIGVu c3VyZSBkYXRhDQogICBjb25maWRlbnRpYWxpdHkgb3ZlciBub24tc2VjdXJlIG5ldHdvcmtzLg0K DQozLjEwLiAgQSBjcnlwdG9ncmFwaGljIG1vZHVsZSBhY3F1aXJlcyBhIHN5bW1ldHJpYyBrZXkg b3ZlciBhIHRyYW5zcG9ydA0KICAgICAgIHByb3RvY29sIHRoYXQgZG9lcyBub3QgcHJvdmlkZSBh dXRoZW50aWNhdGlvbg0KDQogICBTb21lIGRldmljZXMgYXJlIG5vdCBhYmxlIHRvIHVzZSBhIHRy YW5zcG9ydCBwcm90b2NvbCB0aGF0IHByb3ZpZGVzDQogICBzZXJ2ZXIgYXV0aGVudGljYXRpb24g c3VjaCBhcyBTU0wgb3IgVExTLiAgQSBjcnlwdG9ncmFwaGljIG1vZHVsZQ0KICAgaG9zdGVkIGJ5 IHN1Y2ggYSBkZXZpY2Ugd2FudHMgdG8gYmUgc3VyZSB0aGF0IGl0IHNlbmRzIGEgcmVxdWVzdCBm b3INCiAgIGEgc3ltbWV0cmljIGtleSB0byBhIGxlZ2l0aW1hdGUgcHJvdmlzaW9uaW5nIHNlcnZl ci4gIEl0IGlzIHVwIHRvDQogICBEU0tQUCB0byBwcm92aWRlIHByb3BlciBjbGllbnQgYW5kIHNl cnZlciBhdXRoZW50aWNhdGlvbi4NCg0KDQo0LiAgRFNLUFANCg0KNC4xLiAgRW50aXRpZXMNCg0K ICAgSW4gcHJpbmNpcGxlLCB0aGUgcHJvdG9jb2wgaW52b2x2ZXMgYSBEU0tQUCBjbGllbnQgYW5k IGEgRFNLUFANCiAgIHNlcnZlci4gIFRoZSBEU0tQUCBjbGllbnQgbWFuYWdlcyBjb21tdW5pY2F0 aW9uIGJldHdlZW4gdGhlDQogICBjcnlwdG9ncmFwaGljIG1vZHVsZSBhbmQgdGhlIHByb3Zpc2lv bmluZyBzZXJ2ZXIuICBUaGUgRFNLUFAgc2VydmVyDQogICBoZXJlaW4gcmVwcmVzZW50cyB0aGUg cHJvdmlzaW9uaW5nIHNlcnZlci4NCg0KICAgQSBoaWdoLWxldmVsIG9iamVjdCBtb2RlbCB0aGF0 IGRlc2NyaWJlcyB0aGUgY2xpZW50LXNpZGUgZW50aXRpZXMgYW5kDQogICBob3cgdGhleSByZWxh dGUgdG8gZWFjaCBvdGhlciBpcyBzaG93biBpbiBGaWd1cmUgMS4gIENvbmNlcHR1YWxseSwNCiAg IGVhY2ggZW50aXR5IHJlcHJlc2VudHMgdGhlIGZvbGxvd2luZzoNCg0KICAgVXNlciAgICAgICAg ICAgICAgICAgICAgVGhlIHBlcnNvbiBvciBjbGllbnQgdG8gd2hvbSBkZXZpY2VzIGFyZQ0KICAg ICAgICAgICAgICAgICAgICAgICAgICAgaXNzdWVkDQogICBVc2VySUQgICAgICAgICAgICAgICAg ICBBIHVuaXF1ZSBpZGVudGlmaWVyIGZvciB0aGUgdXNlciBvciBjbGllbnQNCiAgIERldmljZSAg ICAgICAgICAgICAgICAgIEEgcGh5c2ljYWwgcGllY2Ugb2YgaGFyZHdhcmUgdGhhdCBob3N0cw0K ICAgICAgICAgICAgICAgICAgICAgICAgICAgc3ltbWV0cmljIGNyeXB0b2dyYXBoaWMgbW9kdWxl cw0KICAgRGV2aWNlSUQgICAgICAgICAgICAgICAgQSB1bmlxdWUgaWRlbnRpZmllciBmb3IgdGhl IGRldmljZQ0KICAgQ3J5cHRvZ3JhcGhpYyBNb2R1bGUgICAgQSBsb3ctbGV2ZWwgY29tcG9uZW50 IG9mIGFuIGFwcGxpY2F0aW9uLA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgd2hpY2ggZW5h YmxlcyBzeW1tZXRyaWMgY3J5cHRvZ3JhcGhpYw0KICAgICAgICAgICAgICAgICAgICAgICAgICAg ZnVuY3Rpb25hbGl0eQ0KICAgQ3J5cHRvTW9kdWxlSUQgICAgICAgICAgQSB1bmlxdWUgaWRlbnRp ZmllciBmb3IgYW4gaW5zdGFuY2Ugb2YgdGhlDQogICAgICAgICAgICAgICAgICAgICAgICAgICBj cnlwdG9ncmFwaGljIG1vZHVsZQ0KICAgRW5jcnlwdGlvbiBBbGdvcml0aG1zICAgRW5jcnlwdGlv biBhbGdvcml0aG1zIHN1cHBvcnRlZCBieSB0aGUNCiAgICAgICAgICAgICAgICAgICAgICAgICAg IGNyeXB0b2dyYXBoaWMgbW9kdWxlDQoNCg0KDQoNCg0KDQpEb2hlcnR5LCBldCBhbC4gICAgICAg ICAgRXhwaXJlcyBKYW51YXJ5IDksIDIwMDggICAgICAgICAgICAgICBbUGFnZSAxMl0NCg0KDQpJ bnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgRFNLUFAgICAgICAgICAgICAgICAgICAg ICAgICBKdWx5IDIwMDcNCg0KDQogICBNQUMgQWxnb3JpdGhtcyAgICAgICAgICBNQUMgYWxnb3Jp dGhtcyBzdXBwb3J0ZWQgYnkgdGhlIGNyeXB0b2dyYXBoaWMNCiAgICAgICAgICAgICAgICAgICAg ICAgICAgIG1vZHVsZQ0KICAgS2V5IENvbnRhaW5lciAgICAgICAgICAgQW4gb2JqZWN0IHRoYXQg ZW5jYXBzdWxhdGVzIGEgc3ltbWV0cmljIGtleQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAg YW5kIGl0cyBjb25maWd1cmF0aW9uIGRhdGENCiAgIEtleUlEICAgICAgICAgICAgICAgICAgIEEg dW5pcXVlIGlkZW50aWZpZXIgZm9yIHRoZSBzeW1tZXRyaWMga2V5DQogICBLZXkgVHlwZSAgICAg ICAgICAgICAgICBUaGUgdHlwZSBvZiBzeW1tZXRyaWMgY3J5cHRvZ3JhcGhpYyBtZXRob2RzDQog ICAgICAgICAgICAgICAgICAgICAgICAgICBmb3Igd2hpY2ggdGhlIGtleSB3aWxsIGJlIHVzZWQg KGUuZy4sIE9BVEgNCiAgICAgICAgICAgICAgICAgICAgICAgICAgIEhPVFAgb3IgUlNBIFNlY3Vy SUQgYXV0aGVudGljYXRpb24sIEFFUw0KICAgICAgICAgICAgICAgICAgICAgICAgICAgZW5jcnlw dGlvbiwgZXRjLikNCg0KICAgLS0tLS0tLS0tLS0gICAgICAgICAgLS0tLS0tLS0tLS0tLQ0KICAg fCBVc2VyICAgIHwgICAgICAgICAgfCBEZXZpY2UgICAgfA0KICAgfC0tLS0tLS0tLXwqICBvd25z ICAqfC0tLS0tLS0tLS0tfA0KICAgfCBVc2VySUQgIHwtLS0tLS0tLS0+fCBEZXZpY2VJRCAgfA0K ICAgfCAuLi4gICAgIHwgICAgICAgICAgfCAuLi4gICAgICAgfA0KICAgLS0tLS0tLS0tLS0gICAg ICAgICAgLS0tLS0tLS0tLS0tLQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgMQ0KICAg ICAgICAgICAgICAgICAgICAgICAgICAgIHwNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICB8 IGNvbnRhaW5zDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgfA0KICAgICAgICAgICAgICAg ICAgICAgICAgICAgIHwgKg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgIFYNCiAgICAgICAg ICAgICAgICAgICAgICAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KICAgICAgICAgICAgICAgICAg ICAgIHxDcnlwdG9ncmFwaGljIE1vZHVsZSB8DQogICAgICAgICAgICAgICAgICAgICAgfC0tLS0t LS0tLS0tLS0tLS0tLS0tLXwNCiAgICAgICAgICAgICAgICAgICAgICB8Q3J5cHRvTW9kdWxlSUQN CiAgICAgICAgICAgICAgICAgICAgICB8RW5jcnlwdGlvbiBBbGdvcml0aG1zfA0KICAgICAgICAg ICAgICAgICAgICAgIHxNQUMgQWxnb3JpdGhtcyAgICAgICB8DQogICAgICAgICAgICAgICAgICAg ICAgfC4uLiAgICAgICAgICAgICAgICAgIHwNCiAgICAgICAgICAgICAgICAgICAgICAtLS0tLS0t LS0tLS0tLS0tLS0tLS0tLQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgMQ0KICAgICAg ICAgICAgICAgICAgICAgICAgICAgIHwNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICB8IGNv bnRhaW5zDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgfA0KICAgICAgICAgICAgICAgICAg ICAgICAgICAgIHwgKg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgIFYNCiAgICAgICAgICAg ICAgICAgICAgICAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KICAgICAgICAgICAgICAgICAgICAg IHxLZXkgQ29udGFpbmVyICAgICAgICB8DQogICAgICAgICAgICAgICAgICAgICAgfC0tLS0tLS0t LS0tLS0tLS0tLS0tLXwNCiAgICAgICAgICAgICAgICAgICAgICB8S2V5SUQgICAgICAgICAgICAg ICAgfA0KICAgICAgICAgICAgICAgICAgICAgIHxLZXkgVHlwZSAgICAgICAgICAgICB8DQogICAg ICAgICAgICAgICAgICAgICAgfC4uLiAgICAgICAgICAgICAgICAgIHwNCiAgICAgICAgICAgICAg ICAgICAgICAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQ0KDQogICAgICAgICAgICAgICAgICAgICAg ICAgIEZpZ3VyZSAxOiBPYmplY3QgTW9kZWwNCg0KICAgSXQgaXMgYXNzdW1lZCB0aGF0IGEgZGV2 aWNlIHdpbGwgaG9zdCBhbiBhcHBsaWNhdGlvbiBsYXllcmVkIGFib3ZlDQogICB0aGUgY3J5cHRv Z3JhcGhpYyBtb2R1bGUsIGFuZCB0aGlzIGFwcGxpY2F0aW9uIHdpbGwgbWFuYWdlDQoNCg0KDQpE b2hlcnR5LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDksIDIwMDggICAgICAgICAg ICAgICBbUGFnZSAxM10NCg0KDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgRFNL UFAgICAgICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQogICBjb21tdW5pY2F0aW9u IGJldHdlZW4gdGhlIERTS1BQIGNsaWVudCBhbmQgY3J5cHRvZ3JhcGhpYyBtb2R1bGUuICBUaGUN CiAgIG1hbm5lciBpbiB3aGljaCB0aGUgY29tbXVuaWNhdGluZyBhcHBsaWNhdGlvbiB3aWxsIHRy YW5zZmVyIERTS1BQDQogICBwcm90b2NvbCBlbGVtZW50cyB0byBhbmQgZnJvbSB0aGUgY3J5cHRv Z3JhcGhpYyBtb2R1bGUgaXMgdHJhbnNwYXJlbnQNCiAgIHRvIHRoZSBEU0tQUCBzZXJ2ZXIuICBP bmUgbWV0aG9kIGZvciB0aGlzIHRyYW5zZmVyIGlzIGRlc2NyaWJlZCBpbg0KICAgW0NULUtJUC1Q MTFdLg0KDQo0LjIuICBQcmluY2lwbGVzIG9mIE9wZXJhdGlvbg0KDQogICBUbyBpbml0aWF0ZSBh IERTS1BQIHNlc3Npb24sIGEgdXNlciBtYXkgdXNlIGEgYnJvd3NlciB0byBjb25uZWN0IHRvIGEN CiAgIHdlYiBzZXJ2ZXIuICBUaGUgdXNlciBtYXkgdGhlbiBpZGVudGlmeSBhbmQgb3B0aW9uYWxs eSBhdXRoZW50aWNhdGUNCiAgIGhlcnNlbGYgYW5kIHBvc3NpYmx5IGluZGljYXRlIGhvdyB0aGUg RFNLUFAgY2xpZW50IGhhcyB0byBjb250YWN0IHRoZQ0KICAgRFNLUFAgc2VydmVyLiAgVGhlcmUg YXJlIGFsc28gb3RoZXIgYWx0ZXJuYXRpdmVzIGZvciBEU0tQUCBzZXNzaW9uDQogICBpbml0aWF0 aW9uLCBzdWNoIGFzIHRoZSBEU0tQUCBjbGllbnQgYmVpbmcgcHJlLWNvbmZpZ3VyZWQgdG8gY29u dGFjdA0KICAgYSBjZXJ0YWluIERTS1BQIHNlcnZlciwgb3IgdGhlIHVzZXIgYmVpbmcgaW5mb3Jt ZWQgb3V0LW9mLWJhbmQgYWJvdXQNCiAgIHRoZSBhZGRyZXNzIG9mIHRoZSBEU0tQUCBzZXJ2ZXIu DQoNCiAgIE9uY2UgdGhlIGxvY2F0aW9uIG9mIHRoZSBEU0tQUCBzZXJ2ZXIgaXMga25vd24sIHRo ZSBEU0tQUCBjbGllbnQgYW5kDQogICB0aGUgRFNLUFAgc2VydmVyIGVuZ2FnZSBpbiBhIDQtcGFz cywgMi1wYXNzLCBvciAxLXBhc3MgcHJvdG9jb2wuDQogICBXaXRoIHRoZSBmb3VyLXBhc3MgdmFy aWFudCwga2V5cyBhcmUgbXV0dWFsbHkgZ2VuZXJhdGVkIGJ5IHRoZQ0KICAgcHJvdmlzaW9uaW5n IHNlcnZlciBhbmQgY3J5cHRvZ3JhcGhpYyBtb2R1bGU7IHByb3Zpc2lvbmVkIGtleXMgYXJlDQog ICBub3QgdHJhbnNmZXJyZWQgb3Zlci10aGUtd2lyZSBvciBvdmVyLXRoZS1haXIuICBUd28tIGFu ZCBvbmUtcGFzcw0KICAgdmFyaWFudHMgZW5hYmxlIHNlY3VyZSBhbmQgZWZmaWNpZW50IGRvd25s b2FkIGFuZCBpbnN0YWxsYXRpb24gb2YNCiAgIHN5bW1ldHJpYyBrZXlzIHRvIGEgY3J5cHRvZ3Jh cGhpYyBtb2R1bGUgaW4gZW52aXJvbm1lbnRzIHdoZXJlIG5lYXINCiAgIHJlYWwtdGltZSBjb21t dW5pY2F0aW9uIG1heSBub3QgYmUgcG9zc2libGUuDQoNCiAgIERTS1BQIHByb3RvY29sIHZhcmlh bnRzIG1heSBiZSBhcHBsaWVkIHRvIHRoZSB1c2UgY2FzZXMgZGVzY3JpYmVkIGluDQogICBTZWN0 aW9uIDMsIGFzIHNob3duIGJlbG93Og0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KRG9oZXJ0eSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSA5 LCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgMTRdDQoNCg0KSW50ZXJuZXQtRHJhZnQgICAgICAg ICAgICAgICAgICAgIERTS1BQICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDA3DQoNCg0K ICAgPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PQ0KICAgUHJvdG9jb2wgICBBcHBsaWNhYmxlICAgICAgICAgICAgICAgIEFwcGxpY2FibGUN CiAgIFZhcmlhbnQgICAgVXNlIENhc2VzICAgICAgICAgICAgICAgICBEZXBsb3ltZW50IFNjZW5h cmlvcw0KICAgPT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PQ0KICAgNC1wYXNzICAgICBBbGwgYnV0IDMuNiBhbmQgICAgICAgICAgIE5lYXIg cmVhbC10aW1lDQogICAgICAgICAgICAgIDMuOCBpZiBtdXR1YWwga2V5ICAgICAgICAgY29tbXVu aWNhdGlvbiBpcw0KICAgICAgICAgICAgICBnZW5lcmF0aW9uIGlzIGRlc2lyZWQ7ICAgIHBvc3Np YmxlDQogICAgICAgICAgICAgIG5vbmUgaWYgdHJhbnNwb3J0IG9mDQogICAgICAgICAgICAgIGEg cHJlLWdlbmVyYXRlZCBrZXkNCiAgICAgICAgICAgICAgaXMgcmVxdWlyZWQNCiAgIC0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tDQogICAy LXBhc3MgICAgIEFsbCAgICAgICAgICAgICAgICAgICAgICAgRWl0aGVyIG5lYXIgcmVhbC10aW1l DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgb3Igbm9uIHJlYWwtdGlt ZQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGNvbW11bmljYXRpb24g bWF5IGJlDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgcG9zc2libGUN CiAgIC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tDQogICAxLXBhc3MgICAgIEFsbCBidXQgMy44ICAgICAgICAgICAgICAgRWl0aGVyIG5l YXIgcmVhbC10aW1lDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgb3Ig bm9uIHJlYWwtdGltZQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGNv bW11bmljYXRpb24gbWF5IGJlDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgcG9zc2libGUNCiAgICA9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09DQoNCiAgICAgICAgICAgIEZpZ3VyZSAyOiBNYXBwaW5nIG9mIHVz ZSBjYXNlcyB0byBwcm90b2NvbCB2YXJpYW50cw0KDQo0LjIuMS4gIEZvdXItcGFzcyBEU0tQUA0K DQogICBUaGUgNC1wYXNzIHByb3RvY29sIGZsb3cgaXMgc3VpdGFibGUgZm9yIGVudmlyb25tZW50 cyB3aGVyZWluIHRoZXJlDQogICBpcyBuZWFyIHJlYWwtdGltZSBjb21tdW5pY2F0aW9uIHBvc3Np YmxlIGJldHdlZW4gdGhlIERTS1BQIGNsaWVudCBhbmQNCiAgIERTS1BQIHNlcnZlci4gIEl0IGlz IG5vdCBzdWl0YWJsZSBmb3IgZW52aXJvbm1lbnRzIHdoZXJlaW4NCiAgIGFkbWluaXN0cmF0aXZl IGFwcHJvdmFsIGlzIGEgcmVxdWlyZWQgc3RlcCBpbiB0aGUgZmxvdywgbm9yIGZvcg0KICAgcHJv dmlzaW9uaW5nIG9mIHByZS1nZW5lcmF0ZWQga2V5cy4gIFRoZSA0LXBhc3MgcHJvdG9jb2wgZmxv dywgc2hvd24NCiAgIGluIEZpZ3VyZSAzIGFuZCBleHBhbmRlZCBpbiBGaWd1cmUgNCwgY29uc2lz dHMgb2YgdHdvIHJvdW5kIHRyaXBzDQogICBiZXR3ZWVuIHRoZSBEU0tQUCBjbGllbnQgYW5kIHNl cnZlci4NCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCkRvaGVydHksIGV0IGFs LiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgOSwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDE1 XQ0KDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICBEU0tQUCAgICAgICAgICAg ICAgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgICstLS0tLS0tLS0tLS0tLS0rICAgICAgICAg ICAgICAgICAgICAgICAgICAgICstLS0tLS0tLS0tLS0tLS0rDQogICB8ICAgICAgICAgICAgICAg fCAgICAgICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgICAgICAgfA0KICAgfCAgRFNL UFAgY2xpZW50IHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgRFNLUFAgc2VydmVyIHwN CiAgIHwgICAgICAgICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAg ICAgICAgICB8DQogICArLS0tLS0tLS0tLS0tLS0tKyAgICAgICAgICAgICAgICAgICAgICAgICAg ICArLS0tLS0tLS0tLS0tLS0tKw0KICAgICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICB8DQogICAgICAgICAgIHwgICAgICAgIFsgPC0tLS0gRFNLUFAg dHJpZ2dlciAtLS0tLSBdICAgICAgIHwNCiAgICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgfA0KICAgICAgICAgICB8ICAgICAgICAtLS0tLS0tIENs aWVudCBIZWxsbyAtLS0tLS0tPiAgICAgICB8DQogICAgICAgICAgIHwgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwNCiAgICAgICAgICAgfCAgICAgICAgPC0tLS0t LSBTZXJ2ZXIgSGVsbG8gLS0tLS0tLS0gICAgICAgfA0KICAgICAgICAgICB8ICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8DQogICAgICAgICAgIHwgICAgICAgIC0t LS0tLS0gQ2xpZW50IE5vbmNlIC0tLS0tLS0+ICAgICAgIHwNCiAgICAgICAgICAgfCAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfA0KICAgICAgICAgICB8ICAgICAg ICA8LS0tLS0gU2VydmVyIEZpbmlzaGVkIC0tLS0tLSAgICAgICB8DQogICAgICAgICAgIHwgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwNCg0KICAgICAgIEZpZ3Vy ZSAzOiBUaGUgNC1wYXNzIERTS1BQIHByb3RvY29sICh3aXRoIE9QVElPTkFMIHByZWNlZWRpbmcN CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHRyaWdnZXIpDQoNCiAgIGEuICAgIFRo ZSBEU0tQUCBjbGllbnQgc2VuZHMgYSA8Q2xpZW50SGVsbG8+IG1lc3NhZ2UgdG8gdGhlIERTS1BQ DQogICAgICAgICBzZXJ2ZXIuICBUaGUgbWVzc2FnZSBwcm92aWRlcyBpbmZvcm1hdGlvbiB0byB0 aGUgRFNLUFAgc2VydmVyDQogICAgICAgICBhYm91dCB0aGUgRFNLUFAgdmVyc2lvbnMsIHByb3Rv Y29sIHZhcmlhbnRzLCBrZXkgdHlwZXMsDQogICAgICAgICBlbmNyeXB0aW9uIGFuZCBNQUMgYWxn b3JpdGhtcyBzdXBwb3J0ZWQgYnkgdGhlIGNyeXB0b2dyYXBoaWMNCiAgICAgICAgIG1vZHVsZSBm b3IgdGhlIHB1cnBvc2VzIG9mIHRoaXMgcHJvdG9jb2wuICBUaGUgbWVzc2FnZSBtYXkgYWxzbw0K ICAgICAgICAgaW5jbHVkZSBjbGllbnQgYXV0aGVudGljYXRpb24gZGF0YSwgc3VjaCBhcyBhIGNl cnRpZmljYXRlIG9yDQogICAgICAgICBhdXRoZW50aWNhdGlvbiBjb2RlLg0KICAgYi4gICAgVGhl IERTS1BQIHNlcnZlciByZXNwb25kcyB0byB0aGUgRFNLUFAgY2xpZW50IHdpdGggYQ0KICAgICAg ICAgPFNlcnZlckhlbGxvPiBtZXNzYWdlLCB3aG9zZSBjb250ZW50IGluY2x1ZGVzIGEgcmFuZG9t IG5vbmNlLA0KICAgICAgICAgUl9TLCBhbG9uZyB3aXRoIGluZm9ybWF0aW9uIGFib3V0IHRoZSB0 eXBlIG9mIGtleSB0byBnZW5lcmF0ZSwNCiAgICAgICAgIGFuZCB0aGUgZW5jcnlwdGlvbiBhbGdv cml0aG0gY2hvc2VuIHRvIHByb3RlY3Qgc2Vuc2l0aXZlIGRhdGENCiAgICAgICAgIHNlbnQgaW4g dGhlIHByb3RvY29sLiAgVGhlIGxlbmd0aCBvZiB0aGUgbm9uY2UgUl9TIG1heSBkZXBlbmQNCiAg ICAgICAgIG9uIHRoZSBzZWxlY3RlZCBrZXkgdHlwZS4gIFRoZSA8U2VydmVySGVsbG8+IG1lc3Nh Z2UgYWxzbw0KICAgICAgICAgcHJvdmlkZXMgaW5mb3JtYXRpb24gYWJvdXQgZWl0aGVyIGEgc2hh cmVkIHNlY3JldCBrZXkgdG8gdXNlDQogICAgICAgICBmb3IgZW5jcnlwdGluZyB0aGUgY3J5cHRv Z3JhcGhpYyBtb2R1bGUncyByYW5kb20gbm9uY2UgKHNlZQ0KICAgICAgICAgZGVzY3JpcHRpb24g b2YgPENsaWVudE5vbmNlPiBiZWxvdyksIG9yIGl0cyBvd24gcHVibGljIGtleS4NCiAgICAgICAg IE9wdGlvbmFsbHksIDxTZXJ2ZXJIZWxsbz4gbWF5IGluY2x1ZGUgYSBNQUMgdGhhdCB0aGUgRFNL UFANCiAgICAgICAgIGNsaWVudCBtYXkgdXNlIGZvciBzZXJ2ZXIgYXV0aGVudGljYXRpb24uDQog ICBjLiAgICBCYXNlZCBvbiBpbmZvcm1hdGlvbiBjb250YWluZWQgaW4gdGhlIDxTZXJ2ZXJIZWxs bz4gbWVzc2FnZSwNCiAgICAgICAgIHRoZSBjcnlwdG9ncmFwaGljIG1vZHVsZSBnZW5lcmF0ZXMg YSByYW5kb20gbm9uY2UsIFJfQy4gVGhlDQogICAgICAgICBsZW5ndGggb2YgdGhlIG5vbmNlIFJf QyBtYXkgZGVwZW5kIG9uIHRoZSBzZWxlY3RlZCBrZXkgdHlwZS4NCiAgICAgICAgIFRoZSBjcnlw dG9ncmFwaGljIG1vZHVsZSBlbmNyeXB0cyBSX0MgdXNpbmcgdGhlIHNlbGVjdGVkDQogICAgICAg ICBlbmNyeXB0aW9uIGFsZ29yaXRobSBhbmQgd2l0aCBhIGtleSwgSywgdGhhdCBpcyBlaXRoZXIg dGhlDQogICAgICAgICBEU0tQUCBzZXJ2ZXIncyBwdWJsaWMga2V5LCBLX1NFUlZFUiwgb3IgYSBz aGFyZWQgc2VjcmV0IGtleSwNCiAgICAgICAgIEtfU0hBUkVELCBhcyBpbmRpY2F0ZWQgYnkgdGhl IERTS1BQIHNlcnZlci4gIElmIEsgaXMgZXF1aXZhbGVudA0KICAgICAgICAgdG8gS19TRVJWRVIs IHRoZW4gdGhlIGNyeXB0b2dyYXBoaWMgbW9kdWxlIFNIT1VMRCB2ZXJpZnkgdGhlDQogICAgICAg ICBzZXJ2ZXIncyBjZXJ0aWZpY2F0ZSBiZWZvcmUgdXNpbmcgaXQgdG8gZW5jcnlwdCBSX0MuIFRo ZSBEU0tQUA0KICAgICAgICAgY2xpZW50IHRoZW4gc2VuZHMgdGhlIGVuY3J5cHRlZCByYW5kb20g bm9uY2UgdG8gdGhlIERTS1BQDQoNCg0KDQpEb2hlcnR5LCBldCBhbC4gICAgICAgICAgRXhwaXJl cyBKYW51YXJ5IDksIDIwMDggICAgICAgICAgICAgICBbUGFnZSAxNl0NCg0KDQpJbnRlcm5ldC1E cmFmdCAgICAgICAgICAgICAgICAgICAgRFNLUFAgICAgICAgICAgICAgICAgICAgICAgICBKdWx5 IDIwMDcNCg0KDQogICAgICAgICBzZXJ2ZXIgaW4gYSA8Q2xpZW50Tm9uY2U+IG1lc3NhZ2UsIGFu ZCBtYXkgaW5jbHVkZSBjbGllbnQNCiAgICAgICAgIGF1dGhlbnRpY2F0aW9uIGRhdGEsIHN1Y2gg YXMgYSBjZXJ0aWZpY2F0ZSBvciBhdXRoZW50aWNhdGlvbg0KICAgICAgICAgY29kZS4gIEZpbmFs bHksIHRoZSBjcnlwdG9ncmFwaGljIG1vZHVsZSBjYWxjdWxhdGVzIGEgc3ltbWV0cmljDQogICAg ICAgICBrZXksIEtfVE9LRU4sIG9mIHRoZSBzZWxlY3RlZCB0eXBlIGZyb20gdGhlIGNvbWJpbmF0 aW9uIG9mIHRoZQ0KICAgICAgICAgdHdvIHJhbmRvbSBub25jZXMgUl9TIGFuZCBSX0MsIHRoZSBl bmNyeXB0aW9uIGtleSBLLCBhbmQNCiAgICAgICAgIHBvc3NpYmx5IHNvbWUgb3RoZXIgZGF0YSwg dXNpbmcgdGhlIERTS1BQLVBSRiBmdW5jdGlvbiBkZWZpbmVkDQogICAgICAgICBpbiBTZWN0aW9u IDQuNS4NCiAgIGQuICAgIFRoZSBEU0tQUCBzZXJ2ZXIgZGVjcnlwdHMgUl9DLCBjYWxjdWxhdGVz IEtfVE9LRU4gZnJvbSB0aGUNCiAgICAgICAgIGNvbWJpbmF0aW9uIG9mIHRoZSB0d28gcmFuZG9t IG5vbmNlcyBSX1MgYW5kIFJfQywgdGhlDQogICAgICAgICBlbmNyeXB0aW9uIGtleSBLLCBhbmQg cG9zc2libHkgc29tZSBvdGhlciBkYXRhLCB1c2luZyB0aGUNCiAgICAgICAgIERTS1BQLVBSRiBm dW5jdGlvbiBkZWZpbmVkIGluIFNlY3Rpb24gNC41LiAgVGhlIHNlcnZlciB0aGVuDQogICAgICAg ICBhc3NvY2lhdGVzIEtfVE9LRU4gd2l0aCB0aGUgY3J5cHRvZ3JhcGhpYyBtb2R1bGUgaW4gYSBz ZXJ2ZXItDQogICAgICAgICBzaWRlIGRhdGEgc3RvcmUuICBUaGUgaW50ZW50IGlzIHRoYXQgdGhl IGRhdGEgc3RvcmUgbGF0ZXIgb24NCiAgICAgICAgIHdpbGwgYmUgdXNlZCBieSBzb21lIHNlcnZp Y2UgdGhhdCBuZWVkcyB0byB2ZXJpZnkgb3IgZGVjcnlwdA0KICAgICAgICAgZGF0YSBwcm9kdWNl ZCBieSB0aGUgY3J5cHRvZ3JhcGhpYyBtb2R1bGUgYW5kIHRoZSBrZXkuDQogICBlLiAgICBPbmNl IHRoZSBhc3NvY2lhdGlvbiBoYXMgYmVlbiBtYWRlLCB0aGUgRFNLUFAgc2VydmVyIHNlbmRzIGEN CiAgICAgICAgIGNvbmZpcm1hdGlvbiBtZXNzYWdlIHRvIHRoZSBEU0tQUCBjbGllbnQgY2FsbGVk DQogICAgICAgICA8U2VydmVyRmluaXNoZWQ+LiAgVGhlIGNvbmZpcm1hdGlvbiBtZXNzYWdlIGlu Y2x1ZGVzIGEga2V5DQogICAgICAgICBjb250YWluZXIgdGhhdCBob2xkcyBhbiBpZGVudGlmaWVy IGZvciB0aGUgZ2VuZXJhdGVkIGtleSAoYnV0DQogICAgICAgICBub3QgdGhlIGtleSBpdHNlbGYp IGFuZCBhZGRpdGlvbmFsIGNvbmZpZ3VyYXRpb24gaW5mb3JtYXRpb24sDQogICAgICAgICBlLmcu LCB0aGUgaWRlbnRpdHkgb2YgdGhlIERTS1BQIHNlcnZlci4gIE9wdGlvbmFsbHksDQogICAgICAg ICA8U2VydmVyRmluaXNoZWQ+IG1heSBpbmNsdWRlIGEgTUFDIHRoYXQgdGhlIERTS1BQIGNsaWVu dCBtYXkNCiAgICAgICAgIHVzZSBmb3Igc2VydmVyIGF1dGhlbnRpY2F0aW9uLg0KICAgZi4gICAg VXBvbiByZWNlaXB0IG9mIHRoZSBEU0tQUCBzZXJ2ZXIncyBjb25maXJtYXRpb24gbWVzc2FnZSwg dGhlDQogICAgICAgICBjcnlwdG9ncmFwaGljIG1vZHVsZSBhc3NvY2lhdGVzIHRoZSBwcm92aWRl ZCBrZXkgY29udGFpbmVyIHdpdGgNCiAgICAgICAgIHRoZSBnZW5lcmF0ZWQga2V5IEtfVE9LRU4s IGFuZCBzdG9yZXMgYW55IHByb3ZpZGVkDQogICAgICAgICBjb25maWd1cmF0aW9uIGRhdGEuDQog ICBOb3RlOiBDb25jZXB0dWFsbHksIGFsdGhvdWdoIFJfQyBpcyBvbmUgcHNldWRvcmFuZG9tIHN0 cmluZywgaXQgbWF5DQogICBiZSB2aWV3ZWQgYXMgY29uc2lzdGluZyBvZiB0d28gY29tcG9uZW50 cywgUl9DMSBhbmQgUl9DMiwgd2hlcmUgUl9DMQ0KICAgaXMgZ2VuZXJhdGVkIGR1cmluZyB0aGUg cHJvdG9jb2wgcnVuLCBhbmQgUl9DMiBjYW4gYmUgcHJlLWdlbmVyYXRlZA0KICAgYW5kIGxvYWRl ZCBvbiB0aGUgY3J5cHRvZ3JhcGhpYyBtb2R1bGUgYmVmb3JlIHRoZSBkZXZpY2UgaXMgaXNzdWVk IHRvDQogICB0aGUgdXNlci4gIEluIHRoYXQgY2FzZSwgdGhlIGxhdHRlciBzdHJpbmcsIFJfQzIs IFNIT1VMRCBiZSB1bmlxdWUNCiAgIGZvciBlYWNoIGNyeXB0b2dyYXBoaWMgbW9kdWxlLg0KDQog ICBUaGUgaW5jbHVzaW9uIG9mIHRoZSB0d28gcmFuZG9tIG5vbmNlcyBSX1MgYW5kIFJfQyBpbiB0 aGUga2V5DQogICBnZW5lcmF0aW9uIHByb3ZpZGVzIGFzc3VyYW5jZSB0byBib3RoIHNpZGVzICh0 aGUgY3J5cHRvZ3JhcGhpYyBtb2R1bGUNCiAgIGFuZCB0aGUgRFNLUFAgc2VydmVyKSB0aGF0IHRo ZXkgaGF2ZSBjb250cmlidXRlZCB0byB0aGUga2V5J3MNCiAgIHJhbmRvbW5lc3MgYW5kIHRoYXQg dGhlIGtleSBpcyB1bmlxdWUuICBUaGUgaW5jbHVzaW9uIG9mIHRoZQ0KICAgZW5jcnlwdGlvbiBr ZXkgSyBlbnN1cmVzIHRoYXQgbm8gbWFuLWluLXRoZS1taWRkbGUgTUFZIGJlIHByZXNlbnQsIG9y DQogICBlbHNlIHRoZSBjcnlwdG9ncmFwaGljIG1vZHVsZSB3aWxsIGVuZCB1cCB3aXRoIGEga2V5 IGRpZmZlcmVudCBmcm9tDQogICB0aGUgb25lIHN0b3JlZCBieSB0aGUgbGVnaXRpbWF0ZSBEU0tQ UCBzZXJ2ZXIuDQoNCiAgIE5vdGU6IEEgbWFuLWluLXRoZS1taWRkbGUgKGluIHRoZSBmb3JtIG9m IGNvcnJ1cHQgY2xpZW50IHNvZnR3YXJlIG9yDQogICBhIG1pc3Rha2VubHkgY29udGFjdGVkIHNl cnZlcikgTUFZIHByZXNlbnQgaGlzIG93biBwdWJsaWMga2V5IHRvIHRoZQ0KICAgY3J5cHRvZ3Jh cGhpYyBtb2R1bGUuICBUaGlzIHdpbGwgZW5hYmxlIHRoZSBhdHRhY2tlciB0byBsZWFybiB0aGUN CiAgIGNsaWVudCdzIHZlcnNpb24gb2YgS19UT0tFTi4gIEhvd2V2ZXIsIHRoZSBhdHRhY2tlciBp cyBub3QgYWJsZSB0bw0KICAgcGVyc3VhZGUgdGhlIGxlZ2l0aW1hdGUgc2VydmVyIHRvIGRlcml2 ZSB0aGUgc2FtZSB2YWx1ZSBmb3IgS19UT0tFTiwNCiAgIHNpbmNlIEtfVE9LRU4gaXMgYSBmdW5j dGlvbiBvZiB0aGUgcHVibGljIGtleSBpbnZvbHZlZCwgYW5kIHRoZQ0KDQoNCg0KRG9oZXJ0eSwg ZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAgICAgICAgICAgICAgW1Bh Z2UgMTddDQoNCg0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgIERTS1BQICAgICAg ICAgICAgICAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KICAgYXR0YWNrZXIncyBwdWJsaWMga2V5 IG11c3QgYmUgZGlmZmVyZW50IHRoYW4gdGhlIGNvcnJlY3Qgc2VydmVyJ3MgKG9yDQogICBlbHNl IHRoZSBhdHRhY2tlciB3b3VsZCBub3QgYmUgYWJsZSB0byBkZWNyeXB0IHRoZSBpbmZvcm1hdGlv bg0KICAgcmVjZWl2ZWQgZnJvbSB0aGUgY2xpZW50KS4gIFRoZXJlZm9yZSwgb25jZSB0aGUgYXR0 YWNrZXIgaXMgbm8gbG9uZ2VyDQogICAiaW4gdGhlIG1pZGRsZSwiIHRoZSBjbGllbnQgYW5kIHNl cnZlciB3aWxsIGRldGVjdCB0aGF0IHRoZXkgYXJlICJvdXQNCiAgIG9mIHN5bmNoIiB3aGVuIHRo ZXkgdHJ5IHRvIHVzZSB0aGVpciBrZXlzLiAgSW4gdGhlIGNhc2Ugb2YgZW5jcnlwdGluZw0KICAg Ul9DIHdpdGggS19TRVJWRVIsIGl0IGlzIHRoZXJlZm9yZSBpbXBvcnRhbnQgdG8gdmVyaWZ5IHRo YXQgS19TRVJWRVINCiAgIHJlYWxseSBpcyB0aGUgbGVnaXRpbWF0ZSBzZXJ2ZXIncyBrZXkuICBP bmUgd2F5IHRvIGRvIHRoaXMgaXMgdG8NCiAgIGluZGVwZW5kZW50bHkgdmFsaWRhdGUgYSBuZXds eSBnZW5lcmF0ZWQgS19UT0tFTiBhZ2FpbnN0IHNvbWUNCiAgIHZhbGlkYXRpb24gc2VydmljZSBh dCB0aGUgc2VydmVyIChlLmcuIGJ5IHVzaW5nIGEgY29ubmVjdGlvbg0KICAgaW5kZXBlbmRlbnQg ZnJvbSB0aGUgb25lIHVzZWQgZm9yIHRoZSBrZXkgZ2VuZXJhdGlvbikuDQoNCiAgICstLS0tLS0t LS0tLS0tLS0tLS0tLS0tKyAgICArLS0tLS0tLSsgICAgICstLS0tLS0tLS0tLS0tLS0tLS0tLS0t Kw0KICAgfCAgICArLS0tLS0tLS0tLS0tKyAgICB8ICAgIHwgICAgICAgfCAgICAgfCAgICAgICAg ICAgICAgICAgICAgICB8DQogICB8ICAgIHwgU2VydmVyIGtleSB8ICAgIHwgICAgfCAgICAgICB8 ICAgICB8ICAgICAgICAgICAgICAgICAgICAgIHwNCiAgIHwgKzwtfCAgUHVibGljICAgIHwtLS0t LS0+LS0tLS0tLS0tLS0tLT4tLS0tLS0tLS0tLS0tKy0tLS0tLS0tLSsgfA0KICAgfCB8ICB8ICBQ cml2YXRlICAgfCAgICB8ICAgIHwgICAgICAgfCAgICAgfCAgICAgICAgICB8ICAgICAgICAgfCB8 DQogICB8IHwgICstLS0tLS0tLS0tLS0rICAgIHwgICAgfCAgICAgICB8ICAgICB8ICAgICAgICAg IHwgICAgICAgICB8IHwNCiAgIHwgfCAgICAgICAgfCAgICAgICAgICAgfCAgICB8ICAgICAgIHwg ICAgIHwgICAgICAgICAgfCAgICAgICAgIHwgfA0KICAgfCBWICAgICAgICBWICAgICAgICAgICB8 ICAgIHwgICAgICAgfCAgICAgfCAgICAgICAgICBWICAgICAgICAgViB8DQogICB8IHwgICArLS0t LS0tLS0tKyAgICAgIHwgICAgfCAgICAgICB8ICAgICB8ICAgICAgICArLS0tLS0tLS0tKyB8IHwN CiAgIHwgfCAgIHwgRGVjcnlwdCB8PC0tLS0tLS08LS0tLS0tLS0tLS0tLTwtLS0tLS0tLS0tLXwg RW5jcnlwdCB8IHwgfA0KICAgfCB8ICAgKy0tLS0tLS0tLSsgICAgICB8ICAgIHwgICAgICAgfCAg ICAgfCAgICAgICAgKy0tLS0tLS0tLSsgfCB8DQogICB8IHwgICAgICB8ICArLS0tLS0tLS0rIHwg ICAgfCAgICAgICB8ICAgICB8ICAgICAgICAgICAgXiAgICAgICB8IHwNCiAgIHwgfCAgICAgIHwg IHwgU2VydmVyIHwgfCAgICB8ICAgICAgIHwgICAgIHwgICAgICAgICAgICB8ICAgICAgIHwgfA0K ICAgfCB8ICAgICAgfCAgfCBSYW5kb20gfC0tLT4tLS0tLS0tLS0tLS0tPi0tLS0tLSsgICstLS0t LS0tLS0tKyAgfCB8DQogICB8IHwgICAgICB8ICArLS0tLS0tLS0rIHwgICAgfCAgICAgICB8ICAg ICB8ICAgfCAgfCBDbGllbnQgICB8ICB8IHwNCiAgIHwgfCAgICAgIHwgICAgICB8ICAgICAgfCAg ICB8ICAgICAgIHwgICAgIHwgICB8ICB8IFJhbmRvbSAgIHwgIHwgfA0KICAgfCB8ICAgICAgfCAg ICAgIHwgICAgICB8ICAgIHwgICAgICAgfCAgICAgfCAgIHwgICstLS0tLS0tLS0tKyAgfCB8DQog ICB8IHwgICAgICB8ICAgICAgfCAgICAgIHwgICAgfCAgICAgICB8ICAgICB8ICAgfCAgICAgICAg fCAgICAgICB8IHwNCiAgIHwgfCAgICAgIFYgICAgICBWICAgICAgfCAgICB8ICAgICAgIHwgICAg IHwgICBWICAgICAgICBWICAgICAgIHwgfA0KICAgfCB8ICAgKy0tLS0tLS0tLS0tLSsgICB8ICAg IHwgICAgICAgfCAgICAgfCArLS0tLS0tLS0tLS0tKyAgICAgfCB8DQogICB8ICstLT58ICBEU0tQ UCBQUkYgfCAgIHwgICAgfCAgICAgICB8ICAgICB8IHwgIERTS1BQIFBSRiB8PC0tLS0rIHwNCiAg IHwgICAgICstLS0tLS0tLS0tLS0rICAgfCAgICB8ICAgICAgIHwgICAgIHwgKy0tLS0tLS0tLS0t LSsgICAgICAgfA0KICAgfCAgICAgICAgICAgfCAgICAgICAgICB8ICAgIHwgICAgICAgfCAgICAg fCAgICAgICB8ICAgICAgICAgICAgICB8DQogICB8ICAgICAgICAgICBWICAgICAgICAgIHwgICAg fCAgICAgICB8ICAgICB8ICAgICAgIFYgICAgICAgICAgICAgIHwNCiAgIHwgICAgICAgKy0tLS0t LS0rICAgICAgfCAgICB8ICAgICAgIHwgICAgIHwgICArLS0tLS0tLSsgICAgICAgICAgfA0KICAg fCAgICAgICB8ICBLZXkgIHwgICAgICB8ICAgIHwgICAgICAgfCAgICAgfCAgIHwgIEtleSAgfCAg ICAgICAgICB8DQogICB8ICAgICAgICstLS0tLS0tKyAgICAgIHwgICAgfCAgICAgICB8ICAgICB8 ICAgKy0tLS0tLS0rICAgICAgICAgIHwNCiAgIHwgICAgICAgKy0tLS0tLS0rICAgICAgfCAgICB8 ICAgICAgIHwgICAgIHwgICArLS0tLS0tLSsgICAgICAgICAgfA0KICAgfCAgICAgICB8S2V5IElk IHwtLS0tLS0tLT4tLS0tLS0tLS0tLS0tPi0tLS0tLXxLZXkgSWQgfCAgICAgICAgICB8DQogICB8 ICAgICAgICstLS0tLS0tKyAgICAgIHwgICAgfCAgICAgICB8ICAgICB8ICAgKy0tLS0tLS0rICAg ICAgICAgIHwNCiAgICstLS0tLS0tLS0tLS0tLS0tLS0tLS0tKyAgICArLS0tLS0tLSsgICAgICst LS0tLS0tLS0tLS0tLS0tLS0tLS0tKw0KICAgICAgICAgRFNLUFAgU2VydmVyICAgICAgICAgRFNL UFAgQ2xpZW50ICAgICAgICAgRFNLUFAgQ2xpZW50DQogICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgKFBDIEhvc3QpICAgICAgKGNyeXB0b2dyYXBoaWMgbW9kdWxlKQ0KDQogICBGaWd1cmUg NDogUHJpbmNpcGFsIGRhdGEgZmxvdyBmb3IgRFNLUFAga2V5IGdlbmVyYXRpb24gICAgICAgICAg ICAgLQ0KICAgICAgICAgICAgICAgICAgICAgICAgICB1c2luZyBwdWJsaWMgc2VydmVyIGtleQ0K DQoNCg0KDQpEb2hlcnR5LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDksIDIwMDgg ICAgICAgICAgICAgICBbUGFnZSAxOF0NCg0KDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAg ICAgICAgRFNLUFAgICAgICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQo0LjIuMi4g IFR3by1wYXNzIERTS1BQDQoNCiAgIFRoZSAyLXBhc3MgcHJvdG9jb2wgZmxvdyBpcyBzdWl0YWJs ZSBmb3IgZW52aXJvbm1lbnRzIHdoZXJlaW4gbmVhcg0KICAgcmVhbC10aW1lIGNvbW11bmljYXRp b24gYmV0d2VlbiB0aGUgRFNLUFAgY2xpZW50IGFuZCBzZXJ2ZXIgbWF5IG5vdA0KICAgYmUgcG9z c2libGUuICBJdCBpcyBhbHNvIHN1aXRhYmxlIGZvciBlbnZpcm9ubWVudHMgd2hlcmVpbg0KICAg YWRtaW5pc3RyYXRpdmUgYXBwcm92YWwgaXMgYSByZXF1aXJlZCBzdGVwIGluIHRoZSBmbG93LCBh bmQgZm9yDQogICBwcm92aXNpb25pbmcgb2YgcHJlLWdlbmVyYXRlZCBrZXlzLiAgSW4gdGhlIDIt cGFzcyBwcm90b2NvbCBmbG93LA0KICAgc2hvd24gaW4gRmlndXJlIDUsIHRoZSBjbGllbnQncyBp bml0aWFsIDxDbGllbnRIZWxsbz4gbWVzc2FnZSBpcw0KICAgZGlyZWN0bHkgZm9sbG93ZWQgYnkg YSA8U2VydmVyRmluaXNoZWQ+IG1lc3NhZ2UuICBUaGVyZSBpcyBubw0KICAgZXhjaGFuZ2Ugb2Yg dGhlIDxTZXJ2ZXJIZWxsbz4gbWVzc2FnZSBvciB0aGUgPENsaWVudE5vbmNlPiBtZXNzYWdlLg0K ICAgSG93ZXZlciwgYXMgdGhlIHR3by1wYXNzIHZhcmlhbnQgb2YgRFNLUFAgY29uc2lzdHMgb2Yg b25lIHJvdW5kIHRyaXANCiAgIHRvIHRoZSBzZXJ2ZXIsIHRoZSBjbGllbnQgaXMgc3RpbGwgYWJs ZSB0byBpbmNsdWRlIGl0cyByYW5kb20gbm9uY2UsDQogICBSX0MsIGFsZ29yaXRobSBwcmVmZXJl bmNlcyBhbmQgc3VwcG9ydGVkIGtleSB0eXBlcyBpbiB0aGUNCiAgIDxDbGllbnRIZWxsbz4gbWVz c2FnZS4gIE5vdGUgdGhhbiBieSBpbmNsdWRpbmcgUl9DIGluIDxDbGllbnRIZWxsbz4sDQogICB0 aGUgRFNLUFAgY2xpZW50IGlzIGFibGUgdG8gZW5zdXJlIHRoZSBzZXJ2ZXIgaXMgYWxpdmUgYmVm b3JlDQogICAiY29tbWl0aW5nIiB0aGUga2V5LiAgQWxzbyBub3RlIHRoYXQgdGhlIERTS1BQICJ0 cmlnZ2VyIiBtZXNzYWdlIE1BWQ0KICAgYmUgdXNlZCB0byB0cmlnZ2VyIHRoZSBjbGllbnQncyBz ZW5kaW5nIG9mIHRoZSA8Q2xpZW50SGVsbG8+IG1lc3NhZ2UuDQoNCiAgIEVzc2VudGlhbGx5LCB0 d28tcGFzcyBEU0tQUCBpcyBhIHRyYW5zcG9ydCBvZiBrZXkgbWF0ZXJpYWwgZnJvbSB0aGUNCiAg IERTS1BQIHNlcnZlciB0byB0aGUgRFNLUFAgY2xpZW50LiAgVHdvLXBhc3MgRFNLUFAgc3VwcG9y dHMgbXVsdGlwbGUNCiAgIGtleSBpbml0aWFsaXphdGlvbiBtZXRob2RzIHRoYXQgZW5zdXJlIEtf VE9LRU4gaXMgbm90IGV4cG9zZWQgdG8gYW55DQogICBvdGhlciBlbnRpdHkgdGhhbiB0aGUgRFNL UFAgc2VydmVyIGFuZCB0aGUgY3J5cHRvZ3JhcGhpYyBtb2R1bGUNCiAgIGl0c2VsZi4gIEN1cnJl bnRseSwgdGhyZWUgc3VjaCBrZXkgaW5pdGlhbGl6YXRpb24gbWV0aG9kcyBhcmUgZGVmaW5lZA0K ICAgKHJlZmVyIHRvIEFwcGVuZGl4IEEpLCBlYWNoIHN1cHBvcnRpbmcgYSBkaWZmZXJlbnQgdXNh Z2Ugb2YgMi1wYXNzDQogICBEU0tQUDoNCg0KICAgS2V5IFRyYW5zcG9ydCAgICAgICAgICAgICAg IFRoaXMgcHJvZmlsZSBpcyBpbnRlbmRlZCBmb3IgUEtJLWNhcGFibGUNCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBkZXZpY2VzLiAgS2V5IHRyYW5zcG9ydCBpcyBjYXJyaWVkIG91dA0K ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHVzaW5nIGEgcHVibGljIGtleSwgS19DTElF TlQsIHdob3NlDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgcHJpdmF0ZSBrZXkgcGFy dCByZXNpZGVzIGluIHRoZQ0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGNyeXB0b2dy YXBoaWMgbW9kdWxlIGFzIHRoZSB0cmFuc3BvcnQNCiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBrZXkuDQogICBLZXkgV3JhcCAgICAgICAgICAgICAgICAgICAgVGhpcyBwcm9maWxlIGlz IGlkZWFsIGZvciBwcmUta2V5ZWQNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBkZXZp Y2VzLCBlLmcuLCBTSU0gY2FyZHMuICBLZXkgd3JhcCBpcw0KICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIGNhcnJpZWQgb3V0IHVzaW5nIGEgc3ltbWV0cmljIGtleS0NCiAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICB3cmFwcGluZyBrZXksIEtfU0hBUkVELCB3aGljaCBpcyBrbm93 biBpbg0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGFkdmFuY2UgYnkgYm90aCB0aGUg Y3J5cHRvZ3JhcGhpYyBtb2R1bGUNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBhbmQg dGhlIERTS1BQIHNlcnZlci4NCiAgIFBhc3NwaHJhc2UtYmFzZWQgS2V5IFdyYXAgICBUaGlzIHBy b2ZpbGUgaXMgYSB2YXJpYXRpb24gb2YgdGhlIEtleQ0KICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFdyYXAgUHJvZmlsZS4gIEl0IGlzIGFwcGxpY2FibGUgdG8NCiAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICBjb25zdHJhaW5lZCBkZXZpY2VzIHdpdGgga2V5cGFkcywgZS5nLiwN CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBtb2JpbGUgcGhvbmVzLiAgS2V5IHdyYXAg aXMgY2FycmllZCBvdXQNCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB1c2luZyBhIHBh c3NwaHJhc2UtZGVyaXZlZCBrZXktd3JhcHBpbmcNCiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICBrZXksIEtfREVSSVZFRCwgd2hpY2ggaXMga25vd24gaW4gYWR2YW5jZQ0KICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIGJ5IGJvdGggdGhlIGNyeXB0b2dyYXBoaWMgbW9kdWxlIGFu ZA0KICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIERTS1BQIHNlcnZlci4NCg0KDQoNCg0K DQpEb2hlcnR5LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDksIDIwMDggICAgICAg ICAgICAgICBbUGFnZSAxOV0NCg0KDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAg RFNLUFAgICAgICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQogICArLS0tLS0tLS0t LS0tLS0tKyAgICAgICAgICAgICAgICAgICAgICAgICAgICArLS0tLS0tLS0tLS0tLS0tKw0KICAg fCAgICAgICAgICAgICAgIHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgICAgICAgICAg ICAgIHwNCiAgIHwgIERTS1BQIGNsaWVudCB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwg IERTS1BQIHNlcnZlciB8DQogICB8ICAgICAgICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAg ICAgICAgICB8ICAgICAgICAgICAgICAgfA0KICAgKy0tLS0tLS0tLS0tLS0tLSsgICAgICAgICAg ICAgICAgICAgICAgICAgICAgKy0tLS0tLS0tLS0tLS0tLSsNCiAgICAgICAgICAgfCAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfA0KICAgICAgICAgICB8ICAgICAg ICBbIDwtLS0tIERTS1BQIHRyaWdnZXIgLS0tLS0gXSAgICAgICB8DQogICAgICAgICAgIHwgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwNCiAgICAgICAgICAgfCAg ICAgICAgLS0tLS0tLSBDbGllbnQgSGVsbG8gLS0tLS0tLT4gICAgICAgfA0KICAgICAgICAgICB8 ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB8DQogICAgICAgICAg IHwgICAgICAgIDwtLS0tLSBTZXJ2ZXIgRmluaXNoZWQgLS0tLS0tICAgICAgIHwNCiAgICAgICAg ICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfA0KDQogICBG aWd1cmUgNTogVGhlIDItcGFzcyBEU0tQUCBwcm90b2NvbCAod2l0aCBPUFRJT05BTCBwcmVjZWRp bmcgdHJpZ2dlcikNCg0KICAgYS4gICAgVGhlIERTS1BQIGNsaWVudCBzZW5kcyBhIDxDbGllbnRI ZWxsbz4gbWVzc2FnZSB0byB0aGUgRFNLUFANCiAgICAgICAgIHNlcnZlci4gIFRoZSBtZXNzYWdl IHByb3ZpZGVzIHRoZSBjbGllbnQgbm9uY2UsIFJfQywgYW5kDQogICAgICAgICBpbmZvcm1hdGlv biBhYm91dCB0aGUgRFNLUFAgdmVyc2lvbnMsIHByb3RvY29sIHZhcmlhbnRzLCBrZXkNCiAgICAg ICAgIHR5cGVzLCBlbmNyeXB0aW9uIGFuZCBNQUMgYWxnb3JpdGhtcyBzdXBwb3J0ZWQgYnkgdGhl DQogICAgICAgICBjcnlwdG9ncmFwaGljIG1vZHVsZSBmb3IgdGhlIHB1cnBvc2VzIG9mIHRoaXMg cHJvdG9jb2wuICBUaGUNCiAgICAgICAgIG1lc3NhZ2UgbWF5IGFsc28gaW5jbHVkZSBjbGllbnQg YXV0aGVudGljYXRpb24gZGF0YSwgc3VjaCBhcyBhDQogICAgICAgICBjZXJ0aWZpY2F0ZSBvciBh dXRoZW50aWNhdGlvbiBjb2RlLiAgVW5saWtlIDQtcGFzcyBEU0tQUCwNCiAgICAgICAgIDItcGFz cyBEU0tQUCBjbGllbnQgdXNlcyB0aGUgPENsaWVudEhlbGxvPiBtZXNzYWdlIHRvIGRlY2xhcmUN CiAgICAgICAgIHdoaWNoIGtleSBpbml0aWFsaXphdGlvbiBtZXRob2QgaXQgc3VwcG9ydHMsIHBy b3ZpZGluZyByZXF1aXJlZA0KICAgICAgICAgcGF5bG9hZCBpbmZvcm1hdGlvbiwgZS5nLiwgS19D TElFTlQgZm9yIHRoZSBLZXkgVHJhbnNwb3J0DQogICAgICAgICBQcm9maWxlLg0KICAgYi4gICAg VGhlIERTS1BQIHNlcnZlciBnZW5lcmF0ZXMgYSBrZXkgSyBmcm9tIHdoaWNoIHR3byBrZXlzLCBL X1RPS0VODQogICAgICAgICBhbmQgS19NQUMgYXJlIGRlcml2ZWQuICBLIGlzIGVpdGhlciB0cmFu c3BvcnRlZCBvciB3cmFwcGVkIGluDQogICAgICAgICBhY2NvcmRhbmNlIHdpdGggdGhlIGtleSBp bml0aWFsaXphdGlvbiBtZXRob2Qgc3BlY2lmaWVkIGJ5IHRoZQ0KICAgICAgICAgRFNLUFAgY2xp ZW50IGluIHRoZSA8Q2xpZW50SGVsbG8+IG1lc3NhZ2UuICBUaGUgc2VydmVyIHRoZW4NCiAgICAg ICAgIGFzc29jaWF0ZXMgS19UT0tFTiB3aXRoIHRoZSBjcnlwdG9ncmFwaGljIG1vZHVsZSBpbiBh IHNlcnZlci0NCiAgICAgICAgIHNpZGUgZGF0YSBzdG9yZS4gIFRoZSBpbnRlbnQgaXMgdGhhdCB0 aGUgZGF0YSBzdG9yZSBsYXRlciBvbg0KICAgICAgICAgd2lsbCBiZSB1c2VkIGJ5IHNvbWUgc2Vy dmljZSB0aGF0IG5lZWRzIHRvIHZlcmlmeSBvciBkZWNyeXB0DQogICAgICAgICBkYXRhIHByb2R1 Y2VkIGJ5IHRoZSBjcnlwdG9ncmFwaGljIG1vZHVsZSBhbmQgdGhlIGtleS4NCiAgIGMuICAgIE9u Y2UgdGhlIGFzc29jaWF0aW9uIGhhcyBiZWVuIG1hZGUsIHRoZSBEU0tQUCBzZXJ2ZXIgc2VuZHMg YQ0KICAgICAgICAgY29uZmlybWF0aW9uIG1lc3NhZ2UgdG8gdGhlIERTS1BQIGNsaWVudCBjYWxs ZWQNCiAgICAgICAgIDxTZXJ2ZXJGaW5pc2hlZD4uICBUaGUgY29uZmlybWF0aW9uIG1lc3NhZ2Ug aW5jbHVkZXMgYSBrZXkNCiAgICAgICAgIGNvbnRhaW5lciB0aGF0IGhvbGRzIGFuIGlkZW50aWZp ZXIgZm9yIHRoZSBrZXksIHRoZSBrZXkgSyBmcm9tDQogICAgICAgICB3aGljaCBLX1RPS0VOIGFu ZCBLX01BQyBhcmUgZGVyaXZlZCwgYW5kIGFkZGl0aW9uYWwNCiAgICAgICAgIGNvbmZpZ3VyYXRp b24gaW5mb3JtYXRpb24gKG5vdGUgdGhhdCB0aGUgbGF0dGVyIE1VU1QgaW5jbHVkZQ0KICAgICAg ICAgdGhlIGlkZW50aXR5IG9mIHRoZSBEU0tQUCBzZXJ2ZXIgZm9yIGF1dGhlbnRpY2F0aW9uIHB1 cnBvc2VzKS4NCiAgICAgICAgIEluIGFkZGl0aW9uLCA8U2VydmVyRmluaXNoZWQ+IE1VU1QgaW5j bHVkZSB0d28gTUFDcyB3aG9zZQ0KICAgICAgICAgdmFsdWVzIGFyZSBjYWxjdWxhdGVkIHdpdGgg Y29udHJpYnV0aW9uIGZyb20gdGhlIGNsaWVudCBub25jZSwNCiAgICAgICAgIFJfQywgcHJvdmlk ZWQgaW4gdGhlIDxDbGllbnRIZWxsbz4gbWVzc2FnZS4gIFRoZSBNQUMgdmFsdWVzDQogICAgICAg ICB3aWxsIGFsbG93IHRoZSBjcnlwdG9ncmFwaGljIG1vZHVsZSB0byBwZXJmb3JtIGtleSBjb25m aXJtYXRpb24NCiAgICAgICAgIGFuZCBzZXJ2ZXIgYXV0aGVudGljYXRpb24gYmVmb3JlICJjb21t aXRpbmciIHRoZSBrZXkuDQoNCg0KDQoNCg0KRG9oZXJ0eSwgZXQgYWwuICAgICAgICAgIEV4cGly ZXMgSmFudWFyeSA5LCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgMjBdDQoNCg0KSW50ZXJuZXQt RHJhZnQgICAgICAgICAgICAgICAgICAgIERTS1BQICAgICAgICAgICAgICAgICAgICAgICAgSnVs eSAyMDA3DQoNCg0KICAgZC4gICAgVXBvbiByZWNlaXB0IG9mIHRoZSBEU0tQUCBzZXJ2ZXIncyBj b25maXJtYXRpb24gbWVzc2FnZSwgdGhlDQogICAgICAgICBjcnlwdG9ncmFwaGljIG1vZHVsZSBl eHRyYWN0cyB0aGUga2V5IGRhdGEgZnJvbSB0aGUgcHJvdmlkZWQNCiAgICAgICAgIGtleSBjb250 YWluZXIsIHVzZXMgdGhlIHR3byBNQUMgdmFsdWVzIHRvIHBlcmZvcm0ga2V5DQogICAgICAgICBj b25maXJtYXRpb24gYW5kIHNlcnZlciBhdXRoZW50aWNhdGlvbiwgYW5kIHN0b3JlcyB0aGUga2V5 DQogICAgICAgICBtYXRlcmlhbCBsb2NhbGx5Lg0KDQo0LjIuMy4gIE9uZS1wYXNzIERTS1BQDQoN CiAgIFRoZSBvbmUtcGFzcyBwcm90b2NvbCBmbG93IGlzIHN1aXRhYmxlIGZvciBlbnZpcm9ubWVu dHMgd2hlcmVpbiBuZWFyDQogICByZWFsLXRpbWUgY29tbXVuaWNhdGlvbiBiZXR3ZWVuIHRoZSBE U0tQUCBjbGllbnQgYW5kIHNlcnZlciBtYXkgbm90DQogICBiZSBwb3NzaWJsZS4gIEl0IGlzIGFs c28gc3VpdGFibGUgZm9yIGVudmlyb25tZW50cyB3aGVyZWluDQogICBhZG1pbmlzdHJhdGl2ZSBh cHByb3ZhbCBpcyBhIHJlcXVpcmVkIHN0ZXAgaW4gdGhlIGZsb3csIGFuZCBmb3INCiAgIHByb3Zp c2lvbmluZyBvZiBwcmUtZ2VuZXJhdGVkIGtleXMuICBJbiBvbmUtcGFzcyBEU0tQUCwgc2hvd24g aW4NCiAgIEZpZ3VyZSA2LCB0aGUgc2VydmVyIHNpbXBseSBzZW5kcyBhIDxTZXJ2ZXJGaW5pc2hl ZD4gbWVzc2FnZSB0byB0aGUNCiAgIERTS1BQIGNsaWVudC4gIEluIHRoaXMgY2FzZSwgdGhlcmUg aXMgbm8gZXhjaGFuZ2Ugb2YgdGhlDQogICA8Q2xpZW50SGVsbG8+LCA8U2VydmVySGVsbG8+LCBh bmQgPENsaWVudE5vbmNlPiBEU0tQUCBtZXNzYWdlcywgYW5kDQogICBoZW5jZSB0aGVyZSBpcyBu byB3YXkgZm9yIHRoZSBjbGllbnQgdG8gZXhwcmVzcyBzdXBwb3J0ZWQgYWxnb3JpdGhtcw0KICAg b3Iga2V5IHR5cGVzLiAgQmVmb3JlIGF0dGVtcHRpbmcgb25lLXBhc3MgRFNLUFAsIHRoZSBzZXJ2 ZXIgTVVTVA0KICAgdGhlcmVmb3JlIGhhdmUgcHJpb3Iga25vd2xlZGdlIG5vdCBvbmx5IHRoYXQg dGhlIGNsaWVudCBpcyBhYmxlIGFuZA0KICAgd2lsbGluZyB0byBhY2NlcHQgdGhpcyB2YXJpYW50 IG9mIERTS1BQLCBidXQgYWxzbyBvZiBhbGdvcml0aG1zIGFuZA0KICAga2V5IHR5cGVzIHN1cHBv cnRlZCBieSB0aGUgY2xpZW50Lg0KDQogICBFc3NlbnRpYWxseSwgb25lLXBhc3MgRFNLUFAgaXMg YSB0cmFuc3BvcnQgb2Yga2V5IG1hdGVyaWFsIGZyb20gdGhlDQogICBEU0tQUCBzZXJ2ZXIgdG8g dGhlIERTS1BQIGNsaWVudC4gIEFzIHdpdGggdHdvLXBhc3MgRFNLUFAsIHRoZSBvbmUtDQogICBw YXNzIHZhcmlhbnQgcmVsaWVzIG9uIGtleSBpbml0aWFsaXphdGlvbiBtZXRob2RzIHRoYXQgZW5z dXJlIEtfVE9LRU4NCiAgIGlzIG5vdCBleHBvc2VkIHRvIGFueSBvdGhlciBlbnRpdHkgdGhhbiB0 aGUgRFNLUFAgc2VydmVyIGFuZCB0aGUNCiAgIGNyeXB0b2dyYXBoaWMgbW9kdWxlIGl0c2VsZi4g IFRoZSBzYW1lIGtleSBpbml0aWFsaXphdGlvbiBwcm9maWxlcw0KICAgYXJlIGRlZmluZWQgYXMg ZGVzY3JpYmVkIGluIFNlY3Rpb24gNC4yLjIgYW5kIEFwcGVuZGl4IEEuDQoNCiAgIE91dHNpZGUg dGhlIHNwZWNpZmljIGNhc2VzIHdoZXJlIG9uZS1wYXNzIERTS1BQIGlzIGRlc2lyZWQsIGNsaWVu dHMNCiAgIFNIT1VMRCBiZSBjb25zdHJ1Y3RlZCBhbmQgY29uZmlndXJlZCB0byBvbmx5IGFjY2Vw dCBEU0tQUCBzZXJ2ZXINCiAgIG1lc3NhZ2VzIGluIHJlc3BvbnNlIHRvIGNsaWVudC1pbml0aWF0 ZWQgdHJhbnNhY3Rpb25zLg0KDQoNCiAgICstLS0tLS0tLS0tLS0tLS0rICAgICAgICAgICAgICAg ICAgICAgICAgICAgICstLS0tLS0tLS0tLS0tLS0rDQogICB8ICAgICAgICAgICAgICAgfCAgICAg ICAgICAgICAgICAgICAgICAgICAgICB8ICAgICAgICAgICAgICAgfA0KICAgfCAgRFNLUFAgY2xp ZW50IHwgICAgICAgICAgICAgICAgICAgICAgICAgICAgfCAgRFNLUFAgc2VydmVyIHwNCiAgIHwg ICAgICAgICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgIHwgICAgICAgICAgICAg ICB8DQogICArLS0tLS0tLS0tLS0tLS0tKyAgICAgICAgICAgICAgICAgICAgICAgICAgICArLS0t LS0tLS0tLS0tLS0tKw0KICAgICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICB8DQogICAgICAgICAgIHwgICAgICAgIDwtLS0tLSBTZXJ2ZXIgRmluaXNo ZWQgLS0tLS0tICAgICAgIHwNCiAgICAgICAgICAgfCAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgfA0KDQogICAgICAgICAgICAgICAgICAgIEZpZ3VyZSA2OiBUaGUg MS1wYXNzIERTS1BQIHByb3RvY29sDQoNCg0KDQoNCg0KDQoNCkRvaGVydHksIGV0IGFsLiAgICAg ICAgICBFeHBpcmVzIEphbnVhcnkgOSwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDIxXQ0KDQoN CkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICBEU0tQUCAgICAgICAgICAgICAgICAg ICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgIGEuICAgIFRoZSBEU0tQUCBzZXJ2ZXIgZ2VuZXJhdGVz IGEga2V5IEsgZnJvbSB3aGljaCB0d28ga2V5cywgS19UT0tFTg0KICAgICAgICAgYW5kIEtfTUFD IGFyZSBkZXJpdmVkLiAgSyBpcyBlaXRoZXIgdHJhbnNwb3J0ZWQgb3Igd3JhcHBlZCBpbg0KICAg ICAgICAgYWNjb3JkYW5jZSB3aXRoIHRoZSBrZXkgaW5pdGlhbGl6YXRpb24gbWV0aG9kIGtub3du IGluIGFkdmFuY2UNCiAgICAgICAgIGJ5IHRoZSBEU0tQUCBzZXJ2ZXIuICBUaGUgc2VydmVyIHRo ZW4gYXNzb2NpYXRlcyBLX1RPS0VOIHdpdGgNCiAgICAgICAgIHRoZSBjcnlwdG9ncmFwaGljIG1v ZHVsZSBpbiBhIHNlcnZlci1zaWRlIGRhdGEgc3RvcmUuICBUaGUNCiAgICAgICAgIGludGVudCBp cyB0aGF0IHRoZSBkYXRhIHN0b3JlIGxhdGVyIG9uIHdpbGwgYmUgdXNlZCBieSBzb21lDQogICAg ICAgICBzZXJ2aWNlIHRoYXQgbmVlZHMgdG8gdmVyaWZ5IG9yIGRlY3J5cHQgZGF0YSBwcm9kdWNl ZCBieSB0aGUNCiAgICAgICAgIGNyeXB0b2dyYXBoaWMgbW9kdWxlIGFuZCB0aGUga2V5Lg0KICAg Yi4gICAgT25jZSB0aGUgYXNzb2NpYXRpb24gaGFzIGJlZW4gbWFkZSwgdGhlIERTS1BQIHNlcnZl ciBzZW5kcyBhDQogICAgICAgICBjb25maXJtYXRpb24gbWVzc2FnZSB0byB0aGUgRFNLUFAgY2xp ZW50IGNhbGxlZA0KICAgICAgICAgPFNlcnZlckZpbmlzaGVkPi4gIFRoZSBjb25maXJtYXRpb24g bWVzc2FnZSBpbmNsdWRlcyBhIGtleQ0KICAgICAgICAgY29udGFpbmVyIHRoYXQgaG9sZHMgYW4g aWRlbnRpZmllciBmb3IgdGhlIGtleSwgdGhlIGtleSBLIGZyb20NCiAgICAgICAgIHdoaWNoIEtf VE9LRU4gYW5kIEtfTUFDIGFyZSBkZXJpdmVkLCBhbmQgYWRkaXRpb25hbA0KICAgICAgICAgY29u ZmlndXJhdGlvbiBpbmZvcm1hdGlvbiAobm90ZSB0aGF0IHRoZSBsYXR0ZXIgTVVTVCBpbmNsdWRl DQogICAgICAgICB0aGUgaWRlbnRpdHkgb2YgdGhlIERTS1BQIHNlcnZlciBmb3IgYXV0aGVudGlj YXRpb24gcHVycG9zZXMpLg0KICAgICAgICAgSW4gYWRkaXRpb24sIDxTZXJ2ZXJGaW5pc2hlZD4g TVVTVCBpbmNsdWRlIHR3byBNQUNzLCB3aGljaCB3aWxsDQogICAgICAgICBhbGxvdyB0aGUgY3J5 cHRvZ3JhcGhpYyBtb2R1bGUgdG8gcGVyZm9ybSBrZXkgY29uZmlybWF0aW9uIGFuZA0KICAgICAg ICAgc2VydmVyIGF1dGhlbnRpY2F0aW9uIGJlZm9yZSAiY29tbWl0aW5nIiB0aGUga2V5LiAgTm90 ZSB0aGF0DQogICAgICAgICB1bmxpa2UgdHdvLXBhc3MgRFNLUFAsIGluIHRoZSBvbmUtcGFzcyB2 YXJpYW50LCB0aGUgc2VydmVyIGRvZXMNCiAgICAgICAgIG5vdCBoYXZlIHRoZSBjbGllbnQgbm9u Y2UsIFJfQywgYW5kIHRoZXJlZm9yZSB0aGUgTUFDcyB2YWx1ZXMNCiAgICAgICAgIGFyZSBjYWxj dWxhdGVkIHdpdGggY29udHJpYnV0aW9uIGZyb20gYW4gdW5zaWduZWQgaW50ZWdlciwgSSwNCiAg ICAgICAgIGdlbmVyYXRlZCBieSB0aGUgc2VydmVyIGR1cmluZyB0aGUgcHJvdG9jb2wgcnVuLg0K ICAgYy4gICAgVXBvbiByZWNlaXB0IG9mIHRoZSBEU0tQUCBzZXJ2ZXIncyBjb25maXJtYXRpb24g bWVzc2FnZSwgdGhlDQogICAgICAgICBjcnlwdG9ncmFwaGljIG1vZHVsZSBleHRyYWN0cyB0aGUg a2V5IGRhdGEgZnJvbSB0aGUgcHJvdmlkZWQNCiAgICAgICAgIGtleSBjb250YWluZXIsIHVzZXMg dGhlIHR3byBNQUMgdmFsdWVzIHRvIHBlcmZvcm0ga2V5DQogICAgICAgICBjb25maXJtYXRpb24g YW5kIHNlcnZlciBhdXRoZW50aWNhdGlvbiwgYW5kIHN0b3JlcyB0aGUga2V5DQogICAgICAgICBt YXRlcmlhbCBsb2NhbGx5Lg0KDQo0LjMuICBBdXRoZW50aWNhdGlvbg0KDQo0LjMuMS4gIENsaWVu dCBBdXRoZW50aWNhdGlvbiAoQXBwbGljYWJsZSB0byBGb3VyLSBhbmQgVHdvLVBhc3MgRFNLUFAp DQoNCiAgIFRvIGVuc3VyZSB0aGF0IGEgZ2VuZXJhdGVkIEtfVE9LRU4gZW5kcyB1cCBhc3NvY2lh dGVkIHdpdGggdGhlDQogICBjb3JyZWN0IGNyeXB0b2dyYXBoaWMgbW9kdWxlIGFuZCB1c2VyLCB0 aGUgRFNLUFAgc2VydmVyIE1BWSBjb3VwbGUgYW4NCiAgIGluaXRpYWwgdXNlciBhdXRoZW50aWNh dGlvbiB0byB0aGUgRFNLUFAgZXhlY3V0aW9uIGluIHNldmVyYWwgd2F5cywNCiAgIGFzIGRpc2N1 c3NlZCBpbiB0aGUgZm9sbG93aW5nIHN1Yi1zZWN0aW9ucy4gIFdoYXRldmVyIHRoZSBtZXRob2Qs IHRoZQ0KICAgRFNLUFAgc2VydmVyIE1VU1QgZW5zdXJlIHRoYXQgYSBnZW5lcmF0ZWQga2V5IGlz IGFzc29jaWF0ZWQgd2l0aCB0aGUNCiAgIGNvcnJlY3QgY3J5cHRvZ3JhcGhpYyBtb2R1bGUsIGFu ZCBpZiBhcHBsaWNhYmxlLCB0aGUgY29ycmVjdCB1c2VyLg0KICAgRm9yIGEgZnVydGhlciBkaXNj dXNzaW9uIG9mIHRoaXMsIGFuZCB0aHJlYXRzIHJlbGF0ZWQgdG8gbWFuLWluLXRoZS0NCiAgIG1p ZGRsZSBhdHRhY2tzIGluIHRoaXMgY29udGV4dCwgc2VlIFNlY3Rpb24gNy4NCg0KNC4zLjEuMS4g IERldmljZSBDZXJ0aWZpY2F0ZQ0KDQogICBJbnN0ZWFkIG9mIHJlcXVpcmluZyBhbiBBdXRoZW50 aWNhdGlvbiBDb2RlIGZvciBpbi1iYW5kDQogICBhdXRoZW50aWNhdGlvbiwgYSBkZXZpY2UgY2Vy dGlmaWNhdGUgY291bGQgYmUgdXNlZCwgd2hpY2ggd2FzDQogICBzdXBwbGllZCB3aXRoIHRoZSBj cnlwdG9ncmFwaGljIG1vZHVsZSBieSBpdHMgaXNzdWVyLg0KDQoNCg0KDQoNCkRvaGVydHksIGV0 IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgOSwgMjAwOCAgICAgICAgICAgICAgIFtQYWdl IDIyXQ0KDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICBEU0tQUCAgICAgICAg ICAgICAgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCjQuMy4xLjIuICBEZXZpY2UgSWRlbnRpZmll cg0KDQogICBUaGUgcHJvdmlzaW9uaW5nIHNlcnZlciBjb3VsZCBiZSBwcmUtY29uZmlndXJlZCB3 aXRoIGEgZGV2aWNlDQogICBpZGVudGlmaWVyLiAgVGhlIERTS1BQIHNlcnZlciBNQVkgdGhlbiBp bmNsdWRlIHRoaXMgaWRlbnRpZmllciBpbiB0aGUNCiAgIERTS1BQIGluaXRpYWxpemF0aW9uIHRy aWdnZXIsIGFuZCB0aGUgRFNLUFAgY2xpZW50IHdvdWxkIGluY2x1ZGUgaXQNCiAgIGluIGl0cyBt ZXNzYWdlKHMpIHRvIHRoZSBEU0tQUCBzZXJ2ZXIgZm9yIGF1dGhlbnRpY2F0aW9uLiAgTm90ZSB0 aGF0DQogICBpdCBpcyBhbHNvIGxlZ2l0aW1hdGUgZm9yIGEgRFNLUFAgY2xpZW50IHRvIGluaXRp YXRlIHRoZSBEU0tQUA0KICAgcHJvdG9jb2wgcnVuIHdpdGhvdXQgaGF2aW5nIHJlY2VpdmVkIGFu IGluaXRpYWxpemF0aW9uIG1lc3NhZ2UgZnJvbSBhDQogICBzZXJ2ZXIsIGJ1dCBpbiB0aGlzIGNh c2UgYW55IHByb3ZpZGVkIGRldmljZSBpZGVudGlmaWVyIE1VU1QgTk9UIGJlDQogICBhY2NlcHRl ZCBieSB0aGUgRFNLUFAgc2VydmVyIHVubGVzcyB0aGUgc2VydmVyIGhhcyBhY2Nlc3MgdG8gYSB1 bmlxdWUNCiAgIGtleSBmb3IgdGhlIGlkZW50aWZpZWQgZGV2aWNlIGFuZCB0aGF0IGtleSB3aWxs IGJlIHVzZWQgaW4gdGhlDQogICBwcm90b2NvbC4NCg0KNC4zLjEuMy4gIE9uZS10aW1lIFVzZSBB dXRoZW50aWNhdGlvbiBDb2RlDQoNCiAgIEEga2V5IGlzc3VlciBtYXkgcHJvdmlkZSBhIG9uZS10 aW1lIHZhbHVlLCBjYWxsZWQgYW4gQXV0aGVudGljYXRpb24NCiAgIENvZGUsIHRvIHRoZSB1c2Vy IG9yIGRldmljZSBvdXQtb2YtYmFuZCBhbmQgcmVxdWlyZSB0aGlzIHZhbHVlIHRvIGJlDQogICB1 c2VkIGJ5IHRoZSBEU0tQUCBjbGllbnQgd2hlbiBjb250YWN0aW5nIHRoZSBEU0tQUCBzZXJ2ZXIu ICBUaGUgRFNLUFANCiAgIGNsaWVudCBNQVkgaW5jbHVkZSB0aGUgYXV0aGVudGljYXRpb24gZGF0 YSBpbiBpdHMgPENsaWVudEhlbGxvPiAoYW5kDQogICA8Q2xpZW50Tm9uY2U+IGZvciBmb3VyLXBh c3MpIG1lc3NhZ2UsIGFuZCB0aGUgRFNLUFAgc2VydmVyIE1VU1QNCiAgIHZlcmlmeSB0aGUgZGF0 YSBiZWZvcmUgY29udGludWluZyB3aXRoIHRoZSBwcm90b2NvbCBydW4uICBOb3RlOiBBbg0KICAg YWx0ZXJuYXRlIG1ldGhvZCBmb3IgZ2V0dGluZyB0aGUgQXV0aGVudGljYXRpb24gQ29kZSB0byB0 aGUgY2xpZW50LA0KICAgaXMgZm9yIHRoZSBEU0tQUCBzZXJ2ZXIgdG8gcGxhY2UgdGhlIHZhbHVl IGluIHRoZSA8VHJpZ2dlck5vbmNlPg0KICAgZWxlbWVudCBvZiB0aGUgRFNLUFAgaW5pdGlhbGl6 YXRpb24gdHJpZ2dlciAoaWYgdHJpZ2dlcnMgYXJlIHVzZWQ7DQogICBzZWUgU2VjdGlvbiA1LjIu NykgLg0KDQoNCiAgICstLS0tLS0tLS0tLS0rICBHZXQgQXV0aGVudGljYXRpb24gQ29kZSAgKy0t LS0tLS0tLS0tLSsNCiAgIHwgICAgVXNlciAgICB8PC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0+ fCAgIElzc3VlciAgIHwNCiAgICstLS0tLS0tLS0tLS0rICAgICAgICAgICAgICAgICAgICAgICAg ICAgKy0tLS0tLS0tLS0tLSsNCiAgICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIHwNCiAgICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIHwNCiAgICAgICAgICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIHwNCiAgICAgICAgICBWICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIFYNCiAgICstLS0tLS0tLS0tLS0tLSsgICAgICAgICAgICAgICAgICAgICAgICArLS0tLS0t LS0tLS0tLS0rDQogICB8IFByb3Zpc2lvbmluZyB8ICAgQXV0aGVudGljYXRpb24gRGF0YSAgfCBQ cm92aXNpb25pbmcgfA0KICAgfCAgICBDbGllbnQgICAgfC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t PnwgICAgU2VydmVyICAgIHwNCiAgICstLS0tLS0tLS0tLS0tLSsgICAgICAgICAgICAgICAgICAg ICAgICArLS0tLS0tLS0tLS0tLS0rDQoNCiAgICAgIEZpZ3VyZSA3OiBVc2VyIEF1dGhlbnRpY2F0 aW9uIHdpdGggT25lLVRpbWUgICAgICAgICAgICAgICBDb2RlDQoNCiAgIENvbnNpZGVyaW5nIGFu IEF1dGhlbnRpY2F0aW9uIENvZGUgYXMgYSBzcGVjaWFsIGZvcm0gb2Ygc2hhcmVkIHNlY3JldA0K ICAgYmV0d2VlbiBhIHVzZXIgYW5kIGEgcHJvdmlzaW9uaW5nIHNlcnZlciwgQXV0aGVudGljYXRp b24gRGF0YSBjYW4NCiAgIGhhdmUgb25lIG9mIHRoZSBmb2xsb3dpbmcgZm9ybXM6DQoNCiAgIG8g IEF1dGhlbnRpY2F0aW9uRGF0YSA9IEhhc2ggKEF1dGhlbnRpY2F0aW9uIENvZGUpDQoNCg0KDQoN Cg0KRG9oZXJ0eSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAgICAg ICAgICAgICAgW1BhZ2UgMjNdDQoNCg0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAg IERTS1BQICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KDQoNCiAgICAgIFdo ZW4gYW4gQXV0aGVudGljYXRpb24gQ29kZSBpcyB1c2VkIHRvIGluaXRpYXRlIHRoZSBwcm90b2Nv bCBydW4sDQogICAgICB0aGUgQXV0aGVudGljYXRpb24gQ29kZSBNVVNUIGJlIHNlbnQgdG8gdGhl IERTS1BQIHNlcnZlciBpbiBhDQogICAgICBzZWN1cmUgbWFubmVyLiAgSWYgdGhlIHVuZGVybHlp bmcgdHJhbnNwb3J0IGNoYW5uZWwgaXMgc2VjdXJlLCB0aGUNCiAgICAgIGF1dGhlbnRpY2F0aW9u IGRhdGEgTUFZIGNvbnRhaW4gdGhlIHBsYWludGV4dCBmb3JtYXQgb3IgdGhlIGhhc2hlZA0KICAg ICAgZm9ybWF0IG9mIHRoZSBBdXRoZW50aWNhdGlvbiBDb2RlIHVzaW5nIGEgaGFzaCBmdW5jdGlv bi4NCg0KICAgbyAgQXV0aGVudGljYXRpb25EYXRhID0gSE1BQyhBdXRoZW50aWNhdGlvbiBDb2Rl LCBLX0FVVEgpDQoNCiAgICAgIElmIHRoZSB1bmRlcmx5aW5nIHRyYW5zcG9ydCBpcyBub3Qgc2Vj dXJlLCB0aGUgY2xpZW50IE1VU1QgdXNlIGENCiAgICAgIGtleSBLX0FVVEggYW5kIHRoZSBBdXRo ZW50aWNhdGlvbiBDb2RlIHRvIGRlcml2ZSBhdXRoZW50aWNhdGlvbg0KICAgICAgZGF0YS4gIEZv ciBleGFtcGxlLCBpZiB0aGUgQXV0aGVudGljYXRpb24gQ29kZSBoYXMgYSBmaXhlZCBmb3JtYXQs DQogICAgICBlLmcuLA0KDQogICAgICBBdXRoZW50aWNhdGlvbkNvZGUgPSBwYXNzd29yZExlbmd0 aCB8fCBJRCB8fCBwYXNzd29yZCB8fCBjaGVja3N1bQ0KDQogICAgICB0aGVuIEF1dGhlbnRpY2F0 aW9uRGF0YSBNQVkgYmUgY2FsY3VsYXRlZCBhcyBmb2xsb3dzOg0KDQogICAgICBBdXRoZW50aWNh dGlvbkRhdGEgPSBBdXRoZW50aWNhdGlvbkNvZGUtPklEIHx8IEI2NChEaWdlc3QpDQoNCiAgICAg IHdoZXJlIGZvciBmb3VyLXBhc3MgRFNLUFAsIHRoZSBjcnlwdG9ncmFwaGljIG1vZHVsZSB1c2Vz IHRoZQ0KICAgICAgc2VydmVyIG5vbmNlIFJfUyBpbiBjb21iaW5hdGlvbiB3aXRoIHRoZSBzZXJ2 ZXIgVVJMIHRvIGNhbGN1bGF0ZQ0KICAgICAgdGhlIERpZ2VzdDoNCg0KICAgICAgRGlnZXN0ID0g RFNLUFAtUFJGLUFFUyhLX0FVVEgsIEF1dGhDb2RlLT5JRCB8fCBzZXJ2ZXJVUkwgfHwgUl9TLA0K ICAgICAgMTYpDQoNCiAgICAgIFJlZmVyIHRvIFNlY3Rpb24gNC41IGZvciBhIGRlc2NyaXB0aW9u IG9mIERTS1BQLVBSRiBpbiBnZW5lcmFsIGFuZA0KICAgICAgQXBwZW5kaXggRSBmb3IgYSBkZXNj cmlwdGlvbiBvZiBEU0tQUC1QUkYtQUVTLg0KDQogICAgICBGb3IgdHdvLXBhc3MgRFNLUFAsIHRo ZSBjcnlwdG9ncmFwaGljIG1vZHVsZSBkb2VzIG5vdCBoYXZlIGFjY2Vzcw0KICAgICAgdG8gdGhl IHNlcnZlciBub25jZSBSX1MgaW4gY29tYmluYXRpb24gYW5kIHNvOg0KDQogICAgICBEaWdlc3Qg PSBEU0tQUC1QUkYtQUVTKEtfQVVUSCwgQXV0aGVudGljYXRpb25Db2RlLT5JRCB8fA0KICAgICAg c2VydmVyVVJMLCAxNikNCg0KICAgICAgSW4gZWl0aGVyIGNhc2UsIEtfQVVUSCBNQVkgYmUgZGVy aXZlZCBBRVMga2V5IGZyb20NCiAgICAgIEF1dGhlbnRpY2F0aW9uQ29kZS0+cGFzc3dvcmQgYXMg aW46DQoNCiAgICAgIEtfQVVUSCA9IHRydW5jYXRlKCBIYXNoKCBIYXNoKC4uLm4gdGltZXMuLi4o IEF1dGhDb2RlLT5wYXNzd29yZCApDQogICAgICApICkgKQ0KDQogICAgICB3aGVyZSB0cnVuY2F0 ZSgpIHJldHVybnMgdGhlIGZpcnN0IDE2IGJ5dGVzIGZyb20gdGhlIHJlc3VsdCBvZiB0aGUNCiAg ICAgIGxhc3QgaGFzaCBpdGVyYXRpb24sIGFuZCBuIGlzIHRoZSBudW1iZXIgb2YgaGFzaCBpdGVy YXRpb25zIChzZXQNCiAgICAgIHRvIGZpeGVkIHZhbHVlcywgZS5nLiwgYmV0d2VlbiAxMCBhbmQg MTAwKS4NCg0KDQoNCg0KDQpEb2hlcnR5LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5 IDksIDIwMDggICAgICAgICAgICAgICBbUGFnZSAyNF0NCg0KDQpJbnRlcm5ldC1EcmFmdCAgICAg ICAgICAgICAgICAgICAgRFNLUFAgICAgICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMDcNCg0K DQogICBvICBBdXRoZW50aWNhdGlvbkRhdGEgPSA8U2lnbmVkIGRhdGEgd2l0aCBhIGNsaWVudCBj ZXJ0aWZpY2F0ZT4NCg0KICAgICAgV2hlbiBhIGNlcnRpZmljYXRlIGlzIHVzZWQgZm9yIGF1dGhl bnRpY2F0aW9uLCB0aGUgYXV0aGVudGljYXRpb24NCiAgICAgIGRhdGEgTUFZIGJlIGNsaWVudC1z aWduZWQuICBBdXRoZW50aWNhdGlvbiBkYXRhIE1BWSBiZSBvbWl0dGVkIGlmDQogICAgICBjbGll bnQgY2VydGlmaWNhdGUgYXV0aGVudGljYXRpb24gaGFzIGJlZW4gcHJvdmlkZWQgYnkgdGhlDQog ICAgICB0cmFuc3BvcnQgY2hhbm5lbCBzdWNoIGFzIFRMUy4NCg0KICAgV2hlbiBhbiBpc3N1ZXIg ZGVsZWdhdGVzIHN5bW1ldHJpYyBrZXkgcHJvdmlzaW9uaW5nIHRvIGEgdGhpcmQgcGFydHkNCiAg IHByb3Zpc2lvbmluZyBzZXJ2aWNlIHByb3ZpZGVyLCBib3RoIGNsaWVudCBhdXRoZW50aWNhdGlv biBhbmQgaXNzdWVyDQogICBhdXRoZW50aWNhdGlvbiBhcmUgcmVxdWlyZWQgYnkgdGhlIHByb3Zp c2lvbmluZyBzZXJ2ZXIuICBDbGllbnQNCiAgIGF1dGhlbnRpY2F0aW9uIHRvIHRoZSBJc3N1ZXIg TUFZIGJlIGluLWJhbmQgb3Igb3V0LW9mLWJhbmQgYXMNCiAgIGRlc2NyaWJlZCBhYm92ZS4gIFRo ZSBpc3N1ZXIgYWN0cyBhcyBhIHByb3h5IGZvciB0aGUgcHJvdmlzaW9uaW5nDQogICBzZXJ2ZXIu ICBUaGUgaXNzdWVyIGF1dGhlbnRpY2F0ZXMgdG8gdGhlIHByb3Zpc2lvbmluZyBzZXJ2aWNlDQog ICBwcm92aWRlciBlaXRoZXIgdXNpbmcgYSBjZXJ0aWZpY2F0ZSBvciBhIHByZS1lc3RhYmxpc2hl ZCBzZWNyZXQga2V5Lg0KDQo0LjMuMi4gIFNlcnZlciBBdXRoZW50aWNhdGlvbg0KDQogICBBIERT S1BQIHNlcnZlciBNVVNUIGF1dGhlbnRpY2F0ZSBpdHNlbGYgdG8gYXZvaWQgYSBmYWxzZSAiQ29t bWl0IiBvZg0KICAgYSBzeW1tZXRyaWMga2V5IHRoYXQgd2hpY2ggY291bGQgY2F1c2UgdGhlIGNy eXB0b2dyYXBoaWMgbW9kdWxlIHRvDQogICBlbmQgdXAgaW4gYW4gaW5pdGlhbGl6ZWQgc3RhdGUg Zm9yIHdoaWNoIHRoZSBzZXJ2ZXIgZG9lcyBub3Qga25vdyB0aGUNCiAgIHN0b3JlZCBrZXkuICBU byBkbyB0aGlzLCB0aGUgRFNLUFAgc2VydmVyIGF1dGhlbnRpY2F0ZXMgaXRzZWxmIGJ5DQogICBp bmNsdWRpbmcgYSBNQUMgaW4gZWFjaCBvZiBpdHMgcmVzcG9uc2VzIHRvIHRoZSBjbGllbnQuICBJ biAyLXBhc3MNCiAgIGFuZCAxLXBhc3MgRFNLUFAsIHNlcnZlcnMgYXV0aGVudGljYXRlIHRoZW1z ZWx2ZXMgYnkgaW5jbHVkaW5nIGENCiAgIHNlY29uZCBNQUMgdmFsdWUgaW4gdGhlIHJlc3BvbnNl IG1lc3NhZ2UuICBJbiBhZGRpdGlvbiwgYSBEU0tQUA0KICAgc2VydmVyIGNhbiBsZXZlcmFnZSB0 cmFuc3BvcnQgbGF5ZXIgYXV0aGVudGljYXRpb24gaWYgaXQgaXMNCiAgIGF2YWlsYWJsZS4NCg0K NC40LiAgU3ltbWV0cmljIEtleSBDb250YWluZXIgRm9ybWF0DQoNCiAgIFRoZSBkZWZhdWx0IHN5 bW1ldHJpYyBrZXkgY29udGFpbmVyIGZvcm1hdCB0aGF0IGlzIHVzZWQgaW4gdGhlDQogICA8U2Vy dmVyRmluaXNoZWQ+IG1lc3NhZ2UgaXMgYmFzZWQgb24gdGhlIFBvcnRhYmxlIFN5bW1ldHJpYyBL ZXkNCiAgIENvbnRhaW5lciAoUFNLQykgZGVmaW5lZCBpbiBbUFNLQ10uICBBbHRlcm5hdGl2ZSBm b3JtYXRzIE1BWSBpbmNsdWRlDQogICBQS0NTIzEyIFtQS0NTLTEyXSBvciBQS0NTIzUgWE1MIFtQ S0NTLTUtWE1MXSBmb3JtYXQuDQoNCjQuNS4gIFRoZSBEU0tQUCBPbmUtV2F5IFBzZXVkb3JhbmRv bSBGdW5jdGlvbiwgRFNLUFAtUFJGDQoNCjQuNS4xLiAgSW50cm9kdWN0aW9uDQoNCiAgIFRoZSBn ZW5lcmFsIHJlcXVpcmVtZW50cyBvbiBEU0tQUC1QUkYgYXJlIHRoZSBzYW1lIGFzIG9uIGtleWVk IGhhc2gNCiAgIGZ1bmN0aW9uczogSXQgTVVTVCB0YWtlIGFuIGFyYml0cmFyeSBsZW5ndGggaW5w dXQsIGFuZCBiZSBvbmUtd2F5IGFuZA0KICAgY29sbGlzaW9uLWZyZWUgKGZvciBhIGRlZmluaXRp b24gb2YgdGhlc2UgdGVybXMsIHNlZSwgZS5nLiwgW0ZBUV0pLg0KICAgRnVydGhlciwgdGhlIERT S1BQLVBSRiBmdW5jdGlvbiBNVVNUIGJlIGNhcGFibGUgb2YgZ2VuZXJhdGluZyBhDQogICB2YXJp YWJsZS1sZW5ndGggb3V0cHV0LCBhbmQgaXRzIG91dHB1dCBNVVNUIGJlIHVucHJlZGljdGFibGUg ZXZlbiBpZg0KICAgb3RoZXIgb3V0cHV0cyBmb3IgdGhlIHNhbWUga2V5IGFyZSBrbm93bi4NCg0K ICAgSXQgaXMgYXNzdW1lZCB0aGF0IGFueSByZWFsaXphdGlvbiBvZiBEU0tQUC1QUkYgdGFrZXMg dGhyZWUgaW5wdXQNCiAgIHBhcmFtZXRlcnM6IEEgc2VjcmV0IGtleSBrLCBzb21lIGNvbWJpbmF0 aW9uIG9mIHZhcmlhYmxlIGRhdGEsIGFuZA0KICAgdGhlIGRlc2lyZWQgbGVuZ3RoIG9mIHRoZSBv dXRwdXQuICBUaGUgY29tYmluYXRpb24gb2YgdmFyaWFibGUgZGF0YQ0KDQoNCg0KRG9oZXJ0eSwg ZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAgICAgICAgICAgICAgW1Bh Z2UgMjVdDQoNCg0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgIERTS1BQICAgICAg ICAgICAgICAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KICAgY2FuLCB3aXRob3V0IGxvc3Mgb2Yg Z2VuZXJhbGl6YXRpb24sIGJlIGNvbnNpZGVyZWQgYXMgYSBzYWx0IHZhbHVlDQogICAoc2VlIFBL Q1MjNSBWZXJzaW9uIDIuMCBbUEtDUy01XSwgU2VjdGlvbiA0KSwgYW5kIHRoaXMNCiAgIGNoYXJh Y3Rlcml6YXRpb24gb2YgRFNLUFAtUFJGIFNIT1VMRCBmaXQgYWxsIGFjdHVhbCBQUkYgYWxnb3Jp dGhtcw0KICAgaW1wbGVtZW50ZWQgYnkgY3J5cHRvZ3JhcGhpYyBtb2R1bGVzLiAgRnJvbSB0aGUg cG9pbnQgb2YgdmlldyBvZiB0aGlzDQogICBzcGVjaWZpY2F0aW9uLCBEU0tQUC1QUkYgaXMgYSAi YmxhY2stYm94IiBmdW5jdGlvbiB0aGF0LCBnaXZlbiB0aGUNCiAgIGlucHV0cywgZ2VuZXJhdGVz IGEgcHNldWRvcmFuZG9tIHZhbHVlLg0KDQogICBTZXBhcmF0ZSBzcGVjaWZpY2F0aW9ucyBNQVkg ZGVmaW5lIHRoZSBpbXBsZW1lbnRhdGlvbiBvZiBEU0tQUC1QUkYNCiAgIGZvciB2YXJpb3VzIHR5 cGVzIG9mIGNyeXB0b2dyYXBoaWMgbW9kdWxlcy4gIEFwcGVuZGl4IEUgY29udGFpbnMgdHdvDQog ICBleGFtcGxlIHJlYWxpemF0aW9ucyBvZiBEU0tQUC1QUkYuDQoNCjQuNS4yLiAgRGVjbGFyYXRp b24NCg0KICAgRFNLUFAtUFJGIChrLCBzLCBkc0xlbikNCg0KICAgSW5wdXQ6DQoNCiAgIGsgICAg IHNlY3JldCBrZXkgaW4gb2N0ZXQgc3RyaW5nIGZvcm1hdA0KICAgcyAgICAgb2N0ZXQgc3RyaW5n IG9mIHZhcnlpbmcgbGVuZ3RoIGNvbnNpc3Rpbmcgb2YgdmFyaWFibGUgZGF0YQ0KICAgICAgICAg ZGlzdGluZ3Vpc2hpbmcgdGhlIHBhcnRpY3VsYXIgc3RyaW5nIGJlaW5nIGRlcml2ZWQNCiAgIGRz TGVuIGRlc2lyZWQgbGVuZ3RoIG9mIHRoZSBvdXRwdXQNCg0KICAgT3V0cHV0Og0KDQogICBEUyAg ICBwc2V1ZG9yYW5kb20gc3RyaW5nLCBkc0xlbi1vY3RldHMgbG9uZw0KICAgRm9yIHRoZSBwdXJw b3NlcyBvZiB0aGlzIGRvY3VtZW50LCB0aGUgc2VjcmV0IGtleSBrIE1VU1QgYmUgMTYgb2N0ZXRz DQogICBsb25nLg0KDQo0LjYuICBHZW5lcmF0aW9uIG9mIFN5bW1ldHJpYyBLZXlzIGZvciBDcnlw dG9ncmFwaGljIE1vZHVsZXMNCg0KICAgSW4gRFNLUFAsIGtleXMgYXJlIGdlbmVyYXRlZCB1c2lu ZyB0aGUgRFNLUFAtUFJGIGZ1bmN0aW9uLCBhIHNlY3JldA0KICAgcmFuZG9tIHZhbHVlIFJfQyBj aG9zZW4gYnkgdGhlIERTS1BQIGNsaWVudCwgYSByYW5kb20gdmFsdWUgUl9TDQogICBjaG9zZW4g YnkgdGhlIERTS1BQIHNlcnZlciwgYW5kIHRoZSBrZXkgayB1c2VkIHRvIGVuY3J5cHQgUl9DLiBU aGUNCiAgIGlucHV0IHBhcmFtZXRlciBzIG9mIERTS1BQLVBSRiBpcyBzZXQgdG8gdGhlIGNvbmNh dGVuYXRpb24gb2YgdGhlDQogICAoQVNDSUkpIHN0cmluZyAiS2V5IGdlbmVyYXRpb24iLCBrLCBh bmQgUl9TLCBhbmQgdGhlIGlucHV0IHBhcmFtZXRlcg0KICAgZHNMZW4gaXMgc2V0IHRvIHRoZSBk ZXNpcmVkIGxlbmd0aCBvZiB0aGUga2V5LCBLX1RPS0VOICh0aGUgbGVuZ3RoIG9mDQogICBLX1RP S0VOIGlzIGdpdmVuIGJ5IHRoZSBrZXkncyB0eXBlKToNCg0KICAgZHNMZW4gPSAoZGVzaXJlZCBs ZW5ndGggb2YgS19UT0tFTikNCg0KICAgS19UT0tFTiA9IERTS1BQLVBSRiAoUl9DLCAiS2V5IGdl bmVyYXRpb24iIHx8IGsgfHwgUl9TLCBkc0xlbikNCg0KICAgV2hlbiBjb21wdXRpbmcgS19UT0tF TiBhYm92ZSwgdGhlIG91dHB1dCBvZiBEU0tQUC1QUkYgTUFZIGJlIHN1YmplY3QNCiAgIHRvIGFu IGFsZ29yaXRobS1kZXBlbmRlbnQgdHJhbnNmb3JtIGJlZm9yZSBiZWluZyBhZG9wdGVkIGFzIGEg a2V5IG9mDQogICB0aGUgc2VsZWN0ZWQgdHlwZS4gIE9uZSBleGFtcGxlIG9mIHRoaXMgaXMgdGhl IG5lZWQgZm9yIHBhcml0eSBpbiBERVMNCiAgIGtleXMuDQoNCg0KDQoNCg0KRG9oZXJ0eSwgZXQg YWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2Ug MjZdDQoNCg0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgIERTS1BQICAgICAgICAg ICAgICAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KNC43LiAgRW5jcnlwdGlvbiBvZiBQc2V1ZG9y YW5kb20gTm9uY2VzIFNlbnQgZnJvbSB0aGUgRFNLUFAgQ2xpZW50DQoNCiAgIERTS1BQIGNsaWVu dCByYW5kb20gbm9uY2UocykgYXJlIGVpdGhlciBlbmNyeXB0ZWQgd2l0aCB0aGUgcHVibGljIGtl eQ0KICAgcHJvdmlkZWQgYnkgdGhlIERTS1BQIHNlcnZlciBvciBieSBhIHNoYXJlZCBzZWNyZXQg a2V5LiAgRm9yIGV4YW1wbGUsDQogICBpbiB0aGUgY2FzZSBvZiBhIHB1YmxpYyBSU0Ega2V5LCBh biBSU0EgZW5jcnlwdGlvbiBzY2hlbWUgZnJvbSBQS0NTDQogICAjMSBbUEtDUy0xXSBNQVkgYmUg dXNlZC4NCg0KICAgSW4gdGhlIGNhc2Ugb2YgYSBzaGFyZWQgc2VjcmV0IGtleSwgdG8gYXZvaWQg ZGVwZW5kZW5jZSBvbiBvdGhlcg0KICAgYWxnb3JpdGhtcywgdGhlIERTS1BQIGNsaWVudCBNQVkg dXNlIHRoZSBEU0tQUC1QUkYgZnVuY3Rpb24gZGVzY3JpYmVkDQogICBoZXJlaW4gd2l0aCB0aGUg c2hhcmVkIHNlY3JldCBrZXkgS19TSEFSRUQgYXMgaW5wdXQgcGFyYW1ldGVyIGsgKGluDQogICB0 aGlzIGNhc2UsIEtfU0hBUkVEIFNIT1VMRCBiZSB1c2VkIHNvbGVseSBmb3IgdGhpcyBwdXJwb3Nl KSwgdGhlDQogICBjb25jYXRlbmF0aW9uIG9mIHRoZSAoQVNDSUkpIHN0cmluZyAiRW5jcnlwdGlv biIgYW5kIHRoZSBzZXJ2ZXIncw0KICAgbm9uY2UgUl9TIGFzIGlucHV0IHBhcmFtZXRlciBzLCBh bmQgZHNMZW4gc2V0IHRvIHRoZSBsZW5ndGggb2YgUl9DOg0KDQogICBkc0xlbiA9IGxlbihSX0Mp DQoNCiAgIERTID0gRFNLUFAtUFJGKEtfU0hBUkVELCAiRW5jcnlwdGlvbiIgfHwgUl9TLCBkc0xl bikNCg0KICAgVGhpcyB3aWxsIHByb2R1Y2UgYSBwc2V1ZG9yYW5kb20gc3RyaW5nIERTIG9mIGxl bmd0aCBlcXVhbCB0byBSX0MuDQogICBFbmNyeXB0aW9uIG9mIFJfQyBNQVkgdGhlbiBiZSBhY2hp ZXZlZCBieSBYT1ItaW5nIERTIHdpdGggUl9DOg0KDQogICBFbmMtUl9DID0gRFMgXiBSX0MNCg0K ICAgVGhlIERTS1BQIHNlcnZlciB3aWxsIHRoZW4gcGVyZm9ybSB0aGUgcmV2ZXJzZSBvcGVyYXRp b24gdG8gZXh0cmFjdA0KICAgUl9DIGZyb20gRW5jLVJfQy4NCg0KICAgTm90ZTogSXQgbWF5IGFw cGVhciB0aGF0IGFuIGF0dGFja2VyLCB3aG8gbGVhcm5zIGEgcHJldmlvdXMgdmFsdWUgb2YNCiAg IFJfQywgbWF5IGJlIGFibGUgdG8gcmVwbGF5IHRoZSBjb3JyZXNwb25kaW5nIFJfUyBhbmQsIGhl bmNlLCBsZWFybiBhDQogICBuZXcgUl9DIGFzIHdlbGwuICBIb3dldmVyLCB0aGlzIGF0dGFjayBp cyBtaXRpZ2F0ZWQgYnkgdGhlDQogICByZXF1aXJlbWVudCBmb3IgYSBzZXJ2ZXIgdG8gc2hvdyBr bm93bGVkZ2Ugb2YgS19BVVRIIChzZWUgYmVsb3cpIGluDQogICBvcmRlciB0byBzdWNjZXNzZnVs bHkgY29tcGxldGUgYSBrZXkgcmUtZ2VuZXJhdGlvbi4NCg0KNC44LiAgTUFDIGNhbGN1bGF0aW9u cw0KDQo0LjguMS4gIEZvdXItcGFzcyBEU0tQUA0KDQo0LjguMS4xLiAgU2VydmVyIEF1dGhlbnRp Y2F0aW9uOiA8U2VydmVySGVsbG8+DQoNCiAgIFRoZSBNQUMgdmFsdWUgTVVTVCBiZSBjb21wdXRl ZCBvbiB0aGUgKEFTQ0lJKSBzdHJpbmcgIk1BQyAxDQogICBjb21wdXRhdGlvbiIsIHRoZSBjbGll bnQncyBub25jZSBSIChpZiBzZW50KSwgYW5kIHRoZSBzZXJ2ZXIncyBub25jZQ0KICAgUl9TIHVz aW5nIGFuIGF1dGhlbnRpY2F0aW9uIGtleSBLX0FVVEggdGhhdCBTSE9VTEQgYmUgYSBzcGVjaWFs DQogICBhdXRoZW50aWNhdGlvbiBrZXkgdXNlZCBvbmx5IGZvciB0aGlzIHB1cnBvc2UgYnV0IE1B WSBiZSB0aGUgY3VycmVudA0KICAgS19UT0tFTi4NCg0KICAgVGhlIE1BQyB2YWx1ZSBNQVkgYmUg Y29tcHV0ZWQgYnkgdXNpbmcgdGhlIERTS1BQLVBSRiBmdW5jdGlvbiBvZg0KICAgU2VjdGlvbiA0 LjUsIGluIHdoaWNoIGNhc2UgdGhlIGlucHV0IHBhcmFtZXRlciBzIE1VU1QgYmUgc2V0IHRvIHRo ZQ0KICAgY29uY2F0ZW5hdGlvbiBvZiB0aGUgKEFTQ0lJKSBzdHJpbmcgIk1BQyAxIGNvbXB1dGF0 aW9uIiwgUiAoaWYgc2VudA0KICAgYnkgdGhlIGNsaWVudCksIGFuZCBSX1MsIGFuZCBrIE1VU1Qg YmUgc2V0IHRvIEtfQVVUSC4gIFRoZSBpbnB1dA0KDQoNCg0KRG9oZXJ0eSwgZXQgYWwuICAgICAg ICAgIEV4cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgMjddDQoNCg0K SW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgIERTS1BQICAgICAgICAgICAgICAgICAg ICAgICAgSnVseSAyMDA3DQoNCg0KICAgcGFyYW1ldGVyIGRzTGVuIE1VU1QgYmUgc2V0IHRvIHRo ZSBsZW5ndGggb2YgUl9TOg0KDQogICBkc0xlbiA9IGxlbihSX1MpDQoNCiAgIE1BQyA9IERTS1BQ LVBSRiAoS19BVVRILCAiTUFDIDEgY29tcHV0YXRpb24iIHx8IFtSIHx8XSBSX1MsIGRzTGVuKQ0K DQo0LjguMS4yLiAgU2VydmVyIEF1dGhlbnRpY2F0aW9uOiA8U2VydmVyRmluaXNoZWQ+DQoNCiAg IFRoZSBNQUMgdmFsdWUgTVVTVCBiZSBjb21wdXRlZCBvbiB0aGUgKEFTQ0lJKSBzdHJpbmcgIk1B QyAyDQogICBjb21wdXRhdGlvbiIgYW5kIFJfQyB1c2luZyBhbiBhdXRoZW50aWNhdGlvbiBrZXkg S19BVVRILiAgQWdhaW4sIHRoaXMNCiAgIFNIT1VMRCBiZSBhIHNwZWNpYWwgYXV0aGVudGljYXRp b24ga2V5IHVzZWQgb25seSBmb3IgdGhpcyBwdXJwb3NlLA0KICAgYnV0IE1BWSBhbHNvIGJlIGFu IGV4aXN0aW5nIEtfVE9LRU4uICAoSW4gdGhpcyBjYXNlLCBpbXBsZW1lbnRhdGlvbnMNCiAgIE1V U1QgcHJvdGVjdCBhZ2FpbnN0IGF0dGFja3Mgd2hlcmUgS19UT0tFTiBpcyB1c2VkIHRvIHByZS1j b21wdXRlIE1BQw0KICAgdmFsdWVzLikgIElmIG5vIGF1dGhlbnRpY2F0aW9uIGtleSBpcyBwcmVz ZW50IGluIHRoZSBjcnlwdG9ncmFwaGljDQogICBtb2R1bGUsIGFuZCBubyBLX1RPS0VOIGV4aXN0 ZWQgYmVmb3JlIHRoZSBEU0tQUCBydW4sIEtfQVVUSCBNVVNUIGJlDQogICB0aGUgbmV3bHkgZ2Vu ZXJhdGVkIEtfVE9LRU4uDQoNCiAgIElmIERTS1BQLVBSRiBpcyB1c2VkIGFzIHRoZSBNQUMgYWxn b3JpdGhtLCB0aGVuIHRoZSBpbnB1dCBwYXJhbWV0ZXIgcw0KICAgTVVTVCBjb25zaXN0IG9mIHRo ZSBjb25jYXRlbmF0aW9uIG9mIHRoZSAoQVNDSUkpIHN0cmluZyAiTUFDIDINCiAgIGNvbXB1dGF0 aW9uIiwgUl9DLCB0aGUgcGFyYW1ldGVyIGRzTGVuIE1VU1QgYmUgc2V0IHRvIHRoZSBsZW5ndGgg b2YNCiAgIFJfQzoNCg0KICAgZHNMZW4gPSBsZW4oUl9DKQ0KDQogICBNQUMgPSBEU0tQUC1QUkYg KEtfQVVUSCwgIk1BQyAyIGNvbXB1dGF0aW9uIiB8fCBSX0MsIGRzTGVuKQ0KDQo0LjguMi4gIFR3 by1wYXNzIERTS1BQDQoNCjQuOC4yLjEuICBLZXkgQ29uZmlybWF0aW9uDQoNCiAgIEluIHR3by1w YXNzIERTS1BQLCB0aGUgY2xpZW50IGlzIFJFUVVJUkVEIHRvIGluY2x1ZGUgYSBub25jZSBSIGlu IHRoZQ0KICAgPENsaWVudEhlbGxvPiBtZXNzYWdlLiAgRnVydGhlciwgdGhlIHNlcnZlciBpcyBS RVFVSVJFRCB0byBpbmNsdWRlIGFuDQogICBpZGVudGlmaWVyLCBJRF9TLCBmb3IgaXRzZWxmICh2 aWEgdGhlIGtleSBjb250YWluZXIpIGluIHRoZQ0KICAgPFNlcnZlckZpbmlzaGVkPiBtZXNzYWdl LiAgVGhlIE1BQyB2YWx1ZSBpbiB0aGUgPFNlcnZlckZpbmlzaGVkPg0KICAgbWVzc2FnZSBNVVNU IGJlIGNvbXB1dGVkIG9uIHRoZSAoQVNDSUkpIHN0cmluZyAiTUFDIDEgY29tcHV0YXRpb24iLA0K ICAgdGhlIHNlcnZlciBpZGVudGlmaWVyIElEX1MsIGFuZCBSIHVzaW5nIGEgTUFDIGtleSBLX01B Qy4gIEFnYWluLCBpbg0KICAgY29udHJhc3Qgd2l0aCB0aGUgTUFDIGNhbGN1bGF0aW9uIGluIHRo ZSBmb3VyLXBhc3MgRFNLUFAsIHRoaXMga2V5DQogICBNVVNUIGJlIHByb3ZpZGVkIHRvZ2V0aGVy IHdpdGggS19UT0tFTiB0byB0aGUgY3J5cHRvZ3JhcGhpYyBtb2R1bGUsDQogICBhbmQgaGVuY2Ug dGhlcmUgaXMgbm8gbmVlZCBmb3IgYSBLX0FVVEggZm9yIGtleSBjb25maXJtYXRpb24NCiAgIHB1 cnBvc2VzLg0KDQogICBJZiBEU0tQUC1QUkYgaXMgdXNlZCBhcyB0aGUgTUFDIGFsZ29yaXRobSwg dGhlbiB0aGUgaW5wdXQgcGFyYW1ldGVyIHMNCiAgIE1VU1QgY29uc2lzdCBvZiB0aGUgY29uY2F0 ZW5hdGlvbiBvZiB0aGUgKEFTQ0lJKSBzdHJpbmcgIk1BQyAxDQogICBjb21wdXRhdGlvbiIgYW5k IFIsIGFuZCB0aGUgcGFyYW1ldGVyIGRzTGVuIE1VU1QgYmUgc2V0IHRvIHRoZSBsZW5ndGgNCiAg IG9mIFI6DQoNCiAgIGRzTGVuID0gbGVuKFIpDQoNCg0KDQoNCkRvaGVydHksIGV0IGFsLiAgICAg ICAgICBFeHBpcmVzIEphbnVhcnkgOSwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDI4XQ0KDQoN CkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICBEU0tQUCAgICAgICAgICAgICAgICAg ICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgIE1BQyA9IERTS1BQLVBSRiAoS19NQUMsICJNQUMgMSBj b21wdXRhdGlvbiIgfHwgSURfUyB8fCBSLCBkc0xlbikNCg0KNC44LjIuMi4gIFNlcnZlciBBdXRo ZW50aWNhdGlvbg0KDQogICBBcyBkaXNjdXNzZWQgaW4gU2VjdGlvbiA0LjMuMiwgc2VydmVycyBu ZWVkIHRvIGF1dGhlbnRpY2F0ZQ0KICAgdGhlbXNlbHZlcyB3aGVuIGF0dGVtcHRpbmcgdG8gcmVw bGFjZSBhbiBleGlzdGluZyBLX1RPS0VOLiAgSW4gMi1wYXNzDQogICBEU0tQUCwgc2VydmVycyBh dXRoZW50aWNhdGUgdGhlbXNlbHZlcyBieSBpbmNsdWRpbmcgYSBzZWNvbmQgTUFDDQogICB2YWx1 ZSBpbiB0aGUgQXV0aGVudGljYXRpb25EYXRhVHlwZSBlbGVtZW50LiAgVGhlIE1BQyB2YWx1ZSBp biB0aGUNCiAgIEF1dGhlbnRpY2F0aW9uRGF0YVR5cGUgZWxlbWVudCBNVVNUIGJlIGNvbXB1dGVk IG9uIHRoZSAoQVNDSUkpIHN0cmluZw0KICAgIk1BQyAxIGNvbXB1dGF0aW9uIiwgdGhlIHNlcnZl ciBpZGVudGlmaWVyIElEX1MsIGFuZCBSLCB1c2luZyB0aGUNCiAgIGV4aXN0aW5nIE1BQyBrZXkg S19NQUMnICh0aGUgTUFDIGtleSB0aGF0IGV4aXN0ZWQgYmVmb3JlIHRoaXMNCiAgIHByb3RvY29s IHJ1bikuICBUaGUgTUFDIGFsZ29yaXRobSBNVVNUIGJlIHRoZSBzYW1lIGFzIHRoZSBhbGdvcml0 aG0NCiAgIHVzZWQgZm9yIGtleSBjb25maXJtYXRpb24gcHVycG9zZXMuDQoNCiAgIElmIERTS1BQ LVBSRiBpcyB1c2VkIGFzIHRoZSBNQUMgYWxnb3JpdGhtLCB0aGVuIHRoZSBpbnB1dCBwYXJhbWV0 ZXIgcw0KICAgTVVTVCBjb25zaXN0IG9mIHRoZSBjb25jYXRlbmF0aW9uIG9mIHRoZSAoQVNDSUkp IHN0cmluZyAiTUFDIDENCiAgIGNvbXB1dGF0aW9uIiBJRF9TLCBhbmQgUi4gVGhlIHBhcmFtZXRl ciBkc0xlbiBNVVNUIGJlIHNldCB0byBhdCBsZWFzdA0KICAgMTYgKGkuZS4gdGhlIGxlbmd0aCBv ZiB0aGUgTUFDIE1VU1QgYmUgYXQgbGVhc3QgMTYgb2N0ZXRzKToNCg0KICAgZHNMZW4gPj0gMTYN Cg0KICAgTUFDID0gRFNLUFAtUFJGIChLX01BQycsICJNQUMgMSBjb21wdXRhdGlvbiIgfHwgSURf UyB8fCBSLCBkc0xlbikNCg0KNC44LjMuICBPbmUtcGFzcyBEU0tQUA0KDQo0LjguMy4xLiAgS2V5 IENvbmZpcm1hdGlvbg0KDQogICBJbiBvbmUtcGFzcyBEU0tQUCwgdGhlIHNlcnZlciBNVVNUIGlu Y2x1ZGUgYW4gaWRlbnRpZmllciwgSURfUywgZm9yDQogICBpdHNlbGYgKHZpYSB0aGUga2V5IGNv bnRhaW5lcikgaW4gdGhlIDxTZXJ2ZXJGaW5pc2hlZD4gbWVzc2FnZS4gIFRoZQ0KICAgTUFDIHZh bHVlIGluIHRoZSA8U2VydmVyRmluaXNoZWQ+IG1lc3NhZ2UgTVVTVCBiZSBjb21wdXRlZCBvbiB0 aGUNCiAgIChBU0NJSSkgc3RyaW5nICJNQUMgMSBjb21wdXRhdGlvbiIsIHRoZSBzZXJ2ZXIgaWRl bnRpZmllciBJRF9TLCBhbmQNCiAgIGFuIHVuc2lnbmVkIGludGVnZXIgdmFsdWUgSSwgdXNpbmcg YSBNQUMga2V5IEtfTUFDLiAgVGhlIHZhbHVlIEkgTVVTVA0KICAgYmUgbW9ub3RvbmljYWxseSBp bmNyZWFzaW5nIGFuZCBndWFyYW50ZWVkIG5vdCB0byBiZSB1c2VkIGFnYWluIGJ5DQogICB0aGlz IHNlcnZlciB0b3dhcmRzIHRoaXMgY3J5cHRvZ3JhcGhpYyBtb2R1bGUuICBJdCBjb3VsZCBmb3Ig ZXhhbXBsZQ0KICAgYmUgdGhlIG51bWJlciBvZiBzZWNvbmRzIHNpbmNlIHNvbWUgcG9pbnQgaW4g dGltZSB3aXRoIHN1ZmZpY2llbnQNCiAgIGdyYW51bGFyaXR5LCBhIGNvdW50ZXIgdmFsdWUsIG9y IGEgY29tYmluYXRpb24gb2YgdGhlIHR3byB3aGVyZSB0aGUNCiAgIGNvdW50ZXIgdmFsdWUgaXMg cmVzZXQgZm9yIGVhY2ggbmV3IHRpbWUgdmFsdWUuICBJbiBjb250cmFzdCB0byB0aGUNCiAgIE1B QyBjYWxjdWxhdGlvbiBpbiBmb3VyLXBhc3MgRFNLUFAsIHRoZSBNQUMga2V5IEtfTUFDIE1VU1Qg YmUNCiAgIHByb3ZpZGVkIHRvZ2V0aGVyIHdpdGggS19UT0tFTiB0byB0aGUgY3J5cHRvZ3JhcGhp YyBtb2R1bGUsIGFuZCBoZW5jZQ0KICAgdGhlcmUgaXMgbm8gbmVlZCBmb3IgYSBLX0FVVEggZm9y IGtleSBjb25maXJtYXRpb24gcHVycG9zZXMuDQoNCiAgIE5vdGU6IFRoZSBpbnRlZ2VyIEkgZG9l cyBub3QgbmVjZXNzYXJpbHkgbmVlZCB0byBiZSBtYWludGFpbmVkIHBlcg0KICAgY3J5cHRvZ3Jh cGhpYyBtb2R1bGUgYnkgdGhlIERTS1BQIHNlcnZlciAoaXQgaXMgZW5vdWdoIGlmIHRoZSBzZXJ2 ZXINCiAgIGNhbiBndWFyYW50ZWUgdGhhdCB0aGUgc2FtZSB2YWx1ZSBpcyBuZXZlciBiZWluZyBz ZW50IHR3aWNlIHRvIHRoZQ0KICAgc2FtZSBjcnlwdG9ncmFwaGljIG1vZHVsZSkuDQoNCiAgIElm IERTS1BQLVBSRiBpcyB1c2VkIGFzIHRoZSBNQUMgYWxnb3JpdGhtLCB0aGVuIHRoZSBpbnB1dCBw YXJhbWV0ZXIgcw0KICAgTVVTVCBjb25zaXN0IG9mIHRoZSBjb25jYXRlbmF0aW9uIG9mIHRoZSAo QVNDSUkpIHN0cmluZyAiTUFDIDENCg0KDQoNCkRvaGVydHksIGV0IGFsLiAgICAgICAgICBFeHBp cmVzIEphbnVhcnkgOSwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDI5XQ0KDQoNCkludGVybmV0 LURyYWZ0ICAgICAgICAgICAgICAgICAgICBEU0tQUCAgICAgICAgICAgICAgICAgICAgICAgIEp1 bHkgMjAwNw0KDQoNCiAgIGNvbXB1dGF0aW9uIiwgSURfUywgYW5kIEkuIFRoZSBwYXJhbWV0ZXIg ZHNMZW4gTVVTVCBiZSBzZXQgdG8gYXQNCiAgIGxlYXN0IDE2IChpLmUuIHRoZSBsZW5ndGggb2Yg dGhlIE1BQyBNVVNUIGJlIGF0IGxlYXN0IDE2IG9jdGV0cyk6DQoNCiAgIGRzTGVuID49IDE2DQoN CiAgIE1BQyA9IERTS1BQLVBSRiAoS19NQUMsICJNQUMgMSBjb21wdXRhdGlvbiIgfHwgSURfUyB8 fCBJLCBkc0xlbikNCg0KICAgVGhlIHNlcnZlciBNVVNUIHByb3ZpZGUgSSB0byB0aGUgY2xpZW50 IGluIHRoZSBOb25jZSBhdHRyaWJ1dGUgb2YgdGhlDQogICA8TWFjPiBlbGVtZW50IG9mIHRoZSA8 U2VydmVyRmluaXNoZWQ+IG1lc3NhZ2UgdXNpbmcgdGhlDQogICBBdXRoZW50aWNhdGlvbkNvZGVN YWNUeXBlIGRlZmluZWQgaW4gU2VjdGlvbiA0LjkuMTIuDQoNCjQuOC4zLjIuICBTZXJ2ZXIgQXV0 aGVudGljYXRpb24NCg0KICAgQXMgZGlzY3Vzc2VkIGluIFNlY3Rpb24gNC4zLjIsIHNlcnZlcnMg bmVlZCB0byBhdXRoZW50aWNhdGUNCiAgIHRoZW1zZWx2ZXMgd2hlbiBhdHRlbXB0aW5nIHRvIHJl cGxhY2UgYW4gZXhpc3RpbmcgS19UT0tFTi4gIEluIDEtcGFzcw0KICAgRFNLUFAsIHNlcnZlcnMg YXV0aGVudGljYXRlIHRoZW1zZWx2ZXMgYnkgaW5jbHVkaW5nIGEgc2Vjb25kIE1BQw0KICAgdmFs dWUgaW4gdGhlIEF1dGhlbnRpY2F0aW9uRGF0YVR5cGUgZWxlbWVudC4gIFRoZSBNQUMgdmFsdWUg aW4gdGhlDQogICBBdXRoZW50aWNhdGlvbkRhdGFUeXBlIGVsZW1lbnQgTVVTVCBiZSBjb21wdXRl ZCBvbiB0aGUgKEFTQ0lJKSBzdHJpbmcNCiAgICJNQUMgMSBjb21wdXRhdGlvbiIsIHRoZSBzZXJ2 ZXIgaWRlbnRpZmllciBJRF9TLCBhbmQgYSBuZXcgdmFsdWUgSScsDQogICBJJyA+IEksIHVzaW5n IHRoZSBleGlzdGluZyBNQUMga2V5IEtfTUFDJyAodGhlIE1BQyBrZXkgdGhhdCBleGlzdGVkDQog ICBiZWZvcmUgdGhpcyBwcm90b2NvbCBydW4pLiAgVGhlIE1BQyBhbGdvcml0aG0gTVVTVCBiZSB0 aGUgc2FtZSBhcyB0aGUNCiAgIGFsZ29yaXRobSB1c2VkIGZvciBrZXkgY29uZmlybWF0aW9uIHB1 cnBvc2VzLg0KDQogICBJZiBEU0tQUC1QUkYgaXMgdXNlZCBhcyB0aGUgTUFDIGFsZ29yaXRobSwg dGhlbiB0aGUgaW5wdXQgcGFyYW1ldGVyIHMNCiAgIE1VU1QgY29uc2lzdCBvZiB0aGUgY29uY2F0 ZW5hdGlvbiBvZiB0aGUgKEFTQ0lJKSBzdHJpbmcgIk1BQyAxDQogICBjb21wdXRhdGlvbiIgSURf UywgYW5kIEknLiAgVGhlIHBhcmFtZXRlciBkc0xlbiBNVVNUIGJlIHNldCB0byBhdA0KICAgbGVh c3QgMTYgKGkuZS4gdGhlIGxlbmd0aCBvZiB0aGUgTUFDIE1VU1QgYmUgYXQgbGVhc3QgMTYgb2N0 ZXRzKToNCg0KICAgZHNMZW4gPj0gMTYNCg0KICAgTUFDID0gRFNLUFAtUFJGIChLX01BQycsICJN QUMgMSBjb21wdXRhdGlvbiIgfHwgSURfUyB8fCBJJywgZHNMZW4pDQoNCiAgIFRoZSBzZXJ2ZXIg TVVTVCBwcm92aWRlIEknIHRvIHRoZSBjbGllbnQgaW4gdGhlIE5vbmNlIGF0dHJpYnV0ZSBvZg0K ICAgdGhlIDxNYWM+IGVsZW1lbnQgb2YgdGhlIEF1dGhlbnRpY2F0aW9uRGF0YVR5cGUgZXh0ZW5z aW9uLiAgSWYgdGhlDQogICBwcm90b2NvbCBydW4gaXMgc3VjY2Vzc2Z1bCwgdGhlIGNsaWVudCBz dG9yZXMgSScgYXMgdGhlIG5ldyB2YWx1ZSBvZg0KICAgSSBmb3IgdGhpcyBzZXJ2ZXIuDQoNCjQu OS4gIERTS1BQIFNjaGVtYSBCYXNpY3MNCg0KICAgVGhpcyBzZWN0aW9uIGRlc2NyaWJlcyB0aGUg c2NoZW1hIHVzZWQgYnkgRFNLUFAuICBUaGUgRFNLUFAgWE1MDQogICBzY2hlbWEgaXRzZWxmIGNh biBiZSBmb3VuZCBpbiBTZWN0aW9uIDYuICBTcGVjaWZpYyBwcm90b2NvbCBtZXNzYWdlDQogICBl bGVtZW50cyBhcmUgZGVmaW5lZCBpbiBTZWN0aW9uIDQuMTAuICBFeGFtcGxlcyBjYW4gYmUgZm91 bmQgaW4NCiAgIEFwcGVuZGl4IEIuDQoNCiAgIFNvbWUgRFNLUFAgZWxlbWVudHMgcmVseSBvbiB0 aGUgcGFydGllcyBiZWluZyBhYmxlIHRvIGNvbXBhcmUNCiAgIHJlY2VpdmVkIHZhbHVlcyB3aXRo IHN0b3JlZCB2YWx1ZXMuICBVbmxlc3Mgb3RoZXJ3aXNlIG5vdGVkLCBhbGwNCiAgIGVsZW1lbnRz IGluIHRoaXMgZG9jdW1lbnQgdGhhdCBoYXZlIHRoZSBYTUwgU2NoZW1hICJ4czpzdHJpbmciIHR5 cGUsDQogICBvciBhIHR5cGUgZGVyaXZlZCBmcm9tIGl0LCBNVVNUIGJlIGNvbXBhcmVkIHVzaW5n IGFuIGV4YWN0IGJpbmFyeQ0KDQoNCg0KRG9oZXJ0eSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMg SmFudWFyeSA5LCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgMzBdDQoNCg0KSW50ZXJuZXQtRHJh ZnQgICAgICAgICAgICAgICAgICAgIERTS1BQICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAy MDA3DQoNCg0KICAgY29tcGFyaXNvbi4gIEluIHBhcnRpY3VsYXIsIERTS1BQIGltcGxlbWVudGF0 aW9ucyBNVVNUIE5PVCBkZXBlbmQgb24NCiAgIGNhc2UtaW5zZW5zaXRpdmUgc3RyaW5nIGNvbXBh cmlzb25zLCBub3JtYWxpemF0aW9uIG9yIHRyaW1taW5nIG9mDQogICB3aGl0ZSBzcGFjZSwgb3Ig Y29udmVyc2lvbiBvZiBsb2NhbGUtc3BlY2lmaWMgZm9ybWF0cyBzdWNoIGFzDQogICBudW1iZXJz Lg0KDQogICBJbXBsZW1lbnRhdGlvbnMgdGhhdCBjb21wYXJlIHZhbHVlcyB0aGF0IGFyZSByZXBy ZXNlbnRlZCB1c2luZw0KICAgZGlmZmVyZW50IGNoYXJhY3RlciBlbmNvZGluZ3MgTVVTVCB1c2Ug YSBjb21wYXJpc29uIG1ldGhvZCB0aGF0DQogICByZXR1cm5zIHRoZSBzYW1lIHJlc3VsdCBhcyBj b252ZXJ0aW5nIGJvdGggdmFsdWVzIHRvIHRoZSBVbmljb2RlDQogICBjaGFyYWN0ZXIgZW5jb2Rp bmcsIE5vcm1hbGl6YXRpb24gRm9ybSBDIFtVTklDT0RFXSwgYW5kIHRoZW4NCiAgIHBlcmZvcm1p bmcgYW4gZXhhY3QgYmluYXJ5IGNvbXBhcmlzb24uDQoNCiAgIE5vIGNvbGxhdGlvbiBvciBzb3J0 aW5nIG9yZGVyIGZvciBhdHRyaWJ1dGVzIG9yIGVsZW1lbnQgdmFsdWVzIGlzDQogICBkZWZpbmVk LiAgVGhlcmVmb3JlLCBEU0tQUCBpbXBsZW1lbnRhdGlvbnMgTVVTVCBOT1QgZGVwZW5kIG9uDQog ICBzcGVjaWZpYyBzb3J0aW5nIG9yZGVycyBmb3IgdmFsdWVzLg0KDQo0LjkuMS4gIFRoZSBBYnN0 cmFjdFJlcXVlc3RUeXBlIFR5cGUNCg0KICAgQWxsIERTS1BQIHJlcXVlc3RzIGFyZSBkZWZpbmVk IGFzIGV4dGVuc2lvbnMgdG8gdGhlIGFic3RyYWN0DQogICBBYnN0cmFjdFJlcXVlc3RUeXBlIHR5 cGUuICBUaGUgZWxlbWVudHMgb2YgdGhlIEFic3RyYWN0UmVxdWVzdFR5cGUsDQogICB0aGVyZWZv cmUsIGFwcGx5IHRvIGFsbCBEU0tQUCByZXF1ZXN0cy4gIEFsbCBEU0tQUCByZXF1ZXN0cyBNVVNU DQogICBjb250YWluIGEgVmVyc2lvbiBhdHRyaWJ1dGUuICBGb3IgdGhpcyB2ZXJzaW9uIG9mIHRo aXMgc3BlY2lmaWNhdGlvbiwNCiAgIFZlcnNpb24gTVVTVCBiZSBzZXQgdG8gIjEuMCIuDQoNCiAg IDx4czpjb21wbGV4VHlwZSBuYW1lPSJBYnN0cmFjdFJlcXVlc3RUeXBlIiBhYnN0cmFjdD0idHJ1 ZSI+DQogICAgIDx4czphdHRyaWJ1dGUgbmFtZT0iVmVyc2lvbiIgdHlwZT0iVmVyc2lvblR5cGUi IHVzZT0icmVxdWlyZWQiLz4NCiAgIDwveHM6Y29tcGxleFR5cGU+DQoNCjQuOS4yLiAgVGhlIEFi c3RyYWN0UmVzcG9uc2VUeXBlIFR5cGUNCg0KICAgQWxsIERTS1BQIHJlc3BvbnNlcyBhcmUgZGVm aW5lZCBhcyBleHRlbnNpb25zIHRvIHRoZSBhYnN0cmFjdA0KICAgQWJzdHJhY3RSZXNwb25zZVR5 cGUgdHlwZS4gIFRoZSBlbGVtZW50cyBvZiB0aGUgQWJzdHJhY3RSZXNwb25zZVR5cGUsDQogICB0 aGVyZWZvcmUsIGFwcGx5IHRvIGFsbCBEU0tQUCByZXNwb25zZXMuICBBbGwgRFNLUFAgcmVzcG9u c2VzIGNvbnRhaW4NCiAgIGEgVmVyc2lvbiBhdHRyaWJ1dGUgaW5kaWNhdGluZyB0aGUgdmVyc2lv biB0aGF0IHdhcyB1c2VkLiAgQSBTdGF0dXMNCiAgIGF0dHJpYnV0ZSwgd2hpY2ggaW5kaWNhdGVz IHdoZXRoZXIgdGhlIHByZWNlZGluZyByZXF1ZXN0IHdhcw0KICAgc3VjY2Vzc2Z1bCBvciBub3Qg TVVTVCBhbHNvIGJlIHByZXNlbnQuICBGaW5hbGx5LCBhbGwgcmVzcG9uc2VzIE1BWQ0KICAgY29u dGFpbiBhIFNlc3Npb25JRCBhdHRyaWJ1dGUgaWRlbnRpZnlpbmcgdGhlIHBhcnRpY3VsYXIgRFNL UFANCiAgIHNlc3Npb24uICBUaGUgU2Vzc2lvbklEIGF0dHJpYnV0ZSBuZWVkcyBvbmx5IGJlIHBy ZXNlbnQgaWYgbW9yZSB0aGFuDQogICBvbmUgcm91bmR0cmlwIGlzIFJFUVVJUkVEIGZvciBhIHN1 Y2Nlc3NmdWwgcHJvdG9jb2wgcnVuICh0aGlzIGlzIHRoZQ0KICAgY2FzZSB3aXRoIHRoZSBwcm90 b2NvbCB2ZXJzaW9uIGRlc2NyaWJlZCBoZXJlaW4pLg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K RG9oZXJ0eSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAgICAgICAg ICAgICAgW1BhZ2UgMzFdDQoNCg0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgIERT S1BQICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KICAgPHhzOmNvbXBsZXhU eXBlIG5hbWU9IkFic3RyYWN0UmVzcG9uc2VUeXBlIiBhYnN0cmFjdD0idHJ1ZSI+DQogICAgIDx4 czphdHRyaWJ1dGUgbmFtZT0iVmVyc2lvbiIgdHlwZT0iVmVyc2lvblR5cGUiIHVzZT0icmVxdWly ZWQiLz4NCiAgICAgPHhzOmF0dHJpYnV0ZSBuYW1lPSJTZXNzaW9uSUQiIHR5cGU9IklkZW50aWZp ZXJUeXBlIi8+DQogICAgIDx4czphdHRyaWJ1dGUgbmFtZT0iU3RhdHVzIiB0eXBlPSJTdGF0dXND b2RlIiB1c2U9InJlcXVpcmVkIi8+DQogICA8L3hzOmNvbXBsZXhUeXBlPg0KDQo0LjkuMy4gIFRo ZSBWZXJzaW9uVHlwZSBUeXBlDQoNCiAgIFRoZSBWZXJzaW9uVHlwZSB0eXBlIGlzIHVzZWQgd2l0 aGluIERTS1BQIG1lc3NhZ2VzIHRvIGlkZW50aWZ5IHRoZQ0KICAgaGlnaGVzdCB2ZXJzaW9uIG9m IHRoaXMgcHJvdG9jb2wgc3VwcG9ydGVkIGJ5IHRoZSBEU0tQUCBjbGllbnQgYW5kDQogICBzZXJ2 ZXIuDQoNCiAgIDx4czpzaW1wbGVUeXBlIG5hbWU9IlZlcnNpb25UeXBlIj4NCiAgICAgPHhzOnJl c3RyaWN0aW9uIGJhc2U9InhzOnN0cmluZyI+DQogICAgICAgPHhzOnBhdHRlcm4gdmFsdWU9Ilxk ezEsMn1cLlxkezEsM30iLz4NCiAgICAgPC94czpyZXN0cmljdGlvbj4NCiAgIDwveHM6c2ltcGxl VHlwZT4NCg0KNC45LjQuICBUaGUgSWRlbnRpZmllclR5cGUgVHlwZQ0KDQogICBUaGUgSWRlbnRp ZmllclR5cGUgdHlwZSBpcyB1c2VkIHRvIGlkZW50aWZ5IHZhcmlvdXMgRFNLUFAgZWxlbWVudHMs DQogICBzdWNoIGFzIHNlc3Npb25zLCB1c2VycywgYW5kIHNlcnZpY2VzLiAgSWRlbnRpZmllcnMg TVVTVCBOT1QgYmUNCiAgIGxvbmdlciB0aGFuIDEyOCBvY3RldHMuDQoNCiAgIDx4czpzaW1wbGVU eXBlIG5hbWU9IklkZW50aWZpZXJUeXBlIj4NCiAgICAgPHhzOnJlc3RyaWN0aW9uIGJhc2U9Inhz OnN0cmluZyI+DQogICAgICAgPHhzOm1heExlbmd0aCB2YWx1ZT0iMTI4Ii8+DQogICAgIDwveHM6 cmVzdHJpY3Rpb24+DQogICA8L3hzOnNpbXBsZVR5cGU+DQoNCjQuOS41LiAgVGhlIFN0YXR1c0Nv ZGUgVHlwZQ0KDQogICBUaGUgU3RhdHVzQ29kZSB0eXBlIGVudW1lcmF0ZXMgYWxsIHBvc3NpYmxl IHJldHVybiBjb2RlczoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCkRvaGVy dHksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgOSwgMjAwOCAgICAgICAgICAgICAg IFtQYWdlIDMyXQ0KDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICBEU0tQUCAg ICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgIDx4czpzaW1wbGVUeXBlIG5h bWU9IlN0YXR1c0NvZGUiPg0KICAgICA8eHM6cmVzdHJpY3Rpb24gYmFzZT0ieHM6c3RyaW5nIj4N CiAgICAgICA8eHM6ZW51bWVyYXRpb24gdmFsdWU9IkNvbnRpbnVlIi8+DQogICAgICAgPHhzOmVu dW1lcmF0aW9uIHZhbHVlPSJTdWNjZXNzIi8+DQogICAgICAgPHhzOmVudW1lcmF0aW9uIHZhbHVl PSJBYm9ydCIvPg0KICAgICAgIDx4czplbnVtZXJhdGlvbiB2YWx1ZT0iQWNjZXNzRGVuaWVkIi8+ DQogICAgICAgPHhzOmVudW1lcmF0aW9uIHZhbHVlPSJNYWxmb3JtZWRSZXF1ZXN0Ii8+DQogICAg ICAgPHhzOmVudW1lcmF0aW9uIHZhbHVlPSJVbmtub3duUmVxdWVzdCIvPg0KICAgICAgIDx4czpl bnVtZXJhdGlvbiB2YWx1ZT0iVW5rbm93bkNyaXRpY2FsRXh0ZW5zaW9uIi8+DQogICAgICAgPHhz OmVudW1lcmF0aW9uIHZhbHVlPSJVbnN1cHBvcnRlZFZlcnNpb24iLz4NCiAgICAgICA8eHM6ZW51 bWVyYXRpb24gdmFsdWU9Ik5vU3VwcG9ydGVkS2V5VHlwZXMiLz4NCiAgICAgICA8eHM6ZW51bWVy YXRpb24gdmFsdWU9Ik5vU3VwcG9ydGVkRW5jcnlwdGlvbkFsZ29yaXRobXMiLz4NCiAgICAgICA8 eHM6ZW51bWVyYXRpb24gdmFsdWU9Ik5vU3VwcG9ydGVkTUFDQWxnb3JpdGhtcyIvPg0KICAgICAg IDx4czplbnVtZXJhdGlvbiB2YWx1ZT0iTm9Qcm90b2NvbFZhcmlhbnRzIi8+DQogICAgICAgPHhz OmVudW1lcmF0aW9uIHZhbHVlPSJOb1N1cHBvcnRlZEtleUNvbnRhaW5lcnMiLz4NCiAgICAgICA8 eHM6ZW51bWVyYXRpb24gdmFsdWU9IkF1dGhlbnRpY2F0aW9uRGF0YUludmFsaWQiLz4NCiAgICAg ICA8eHM6ZW51bWVyYXRpb24gdmFsdWU9IkluaXRpYWxpemF0aW9uRmFpbGVkIi8+DQogICAgIDwv eHM6cmVzdHJpY3Rpb24+DQogICA8L3hzOnNpbXBsZVR5cGU+DQoNCiAgIFVwb24gdHJhbnNtaXNz aW9uIG9yIHJlY2VpcHQgb2YgYSBtZXNzYWdlIGZvciB3aGljaCB0aGUgU3RhdHVzDQogICBhdHRy aWJ1dGUncyB2YWx1ZSBpcyBub3QgIlN1Y2Nlc3MiIG9yICJDb250aW51ZSIsIHRoZSBkZWZhdWx0 DQogICBiZWhhdmlvciwgdW5sZXNzIGV4cGxpY2l0bHkgc3RhdGVkIG90aGVyd2lzZSBiZWxvdywg aXMgdGhhdCBib3RoIHRoZQ0KICAgRFNLUFAgc2VydmVyIGFuZCB0aGUgRFNLUFAgY2xpZW50IE1V U1QgaW1tZWRpYXRlbHkgdGVybWluYXRlIHRoZQ0KICAgRFNLUFAgc2Vzc2lvbi4gIERTS1BQIHNl cnZlcnMgYW5kIERTS1BQIGNsaWVudHMgTVVTVCBkZWxldGUgYW55DQogICBzZWNyZXQgdmFsdWVz IGdlbmVyYXRlZCBhcyBhIHJlc3VsdCBvZiBmYWlsZWQgcnVucyBvZiB0aGUgRFNLUFANCiAgIHBy b3RvY29sLiAgU2Vzc2lvbiBpZGVudGlmaWVycyBNQVkgYmUgcmV0YWluZWQgZnJvbSBzdWNjZXNz ZnVsIG9yDQogICBmYWlsZWQgcHJvdG9jb2wgcnVucyBmb3IgcmVwbGF5IGRldGVjdGlvbiBwdXJw b3NlcywgYnV0IHN1Y2ggcmV0YWluZWQNCiAgIGlkZW50aWZpZXJzIE1VU1Qgbm90IGJlIHJldXNl ZCBmb3Igc3Vic2VxdWVudCBydW5zIG9mIHRoZSBwcm90b2NvbC4NCg0KICAgV2hlbiBwb3NzaWJs ZSwgdGhlIERTS1BQIGNsaWVudCBTSE9VTEQgcHJlc2VudCBhbiBhcHByb3ByaWF0ZSBlcnJvcg0K ICAgbWVzc2FnZSB0byB0aGUgdXNlci4NCg0KICAgVGhlc2Ugc3RhdHVzIGNvZGVzIGFyZSB2YWxp ZCBpbiBhbGwgRFNLUFAgUmVzcG9uc2UgbWVzc2FnZXMgdW5sZXNzDQogICBleHBsaWNpdGx5IHN0 YXRlZCBvdGhlcndpc2U6DQogICBvICAiQ29udGludWUiIGluZGljYXRlcyB0aGF0IHRoZSBEU0tQ UCBzZXJ2ZXIgaXMgcmVhZHkgZm9yIGENCiAgICAgIHN1YnNlcXVlbnQgcmVxdWVzdCBmcm9tIHRo ZSBEU0tQUCBjbGllbnQuICBJdCBjYW5ub3QgYmUgc2VudCBpbg0KICAgICAgdGhlIHNlcnZlcidz IGZpbmFsIG1lc3NhZ2UuDQogICBvICAiU3VjY2VzcyIgaW5kaWNhdGVzIHN1Y2Nlc3NmdWwgY29t cGxldGlvbiBvZiB0aGUgRFNLUFAgc2Vzc2lvbi4NCiAgICAgIEl0IGNhbiBvbmx5IGJlIHNlbnQg aW4gdGhlIHNlcnZlcidzIGZpbmFsIG1lc3NhZ2UuDQogICBvICAiQWJvcnQiIGluZGljYXRlcyB0 aGF0IHRoZSBEU0tQUCBzZXJ2ZXIgcmVqZWN0ZWQgdGhlIERTS1BQDQogICAgICBjbGllbnQncyBy ZXF1ZXN0IGZvciB1bnNwZWNpZmllZCByZWFzb25zLg0KICAgbyAgIkFjY2Vzc0RlbmllZCIgaW5k aWNhdGVzIHRoYXQgdGhlIERTS1BQIGNsaWVudCBpcyBub3QgYXV0aG9yaXplZA0KICAgICAgdG8g Y29udGFjdCB0aGlzIERTS1BQIHNlcnZlci4NCiAgIG8gICJNYWxmb3JtZWRSZXF1ZXN0IiBpbmRp Y2F0ZXMgdGhhdCB0aGUgRFNLUFAgc2VydmVyIGZhaWxlZCB0byBwYXJzZQ0KICAgICAgdGhlIERT S1BQIGNsaWVudCdzIHJlcXVlc3QuDQoNCg0KDQoNCg0KRG9oZXJ0eSwgZXQgYWwuICAgICAgICAg IEV4cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgMzNdDQoNCg0KSW50 ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgIERTS1BQICAgICAgICAgICAgICAgICAgICAg ICAgSnVseSAyMDA3DQoNCg0KICAgbyAgIlVua25vd25SZXF1ZXN0IiBpbmRpY2F0ZXMgdGhhdCB0 aGUgRFNLUFAgY2xpZW50IG1hZGUgYSByZXF1ZXN0DQogICAgICB0aGF0IGlzIHVua25vd24gdG8g dGhlIERTS1BQIHNlcnZlci4NCiAgIG8gICJVbmtub3duQ3JpdGljYWxFeHRlbnNpb24iIGluZGlj YXRlcyB0aGF0IGEgY3JpdGljYWwgRFNLUFANCiAgICAgIGV4dGVuc2lvbiAoc2VlIGJlbG93KSB1 c2VkIGJ5IHRoZSBEU0tQUCBjbGllbnQgd2FzIG5vdCBzdXBwb3J0ZWQNCiAgICAgIG9yIHJlY29n bml6ZWQgYnkgdGhlIERTS1BQIHNlcnZlci4NCiAgIG8gICJVbnN1cHBvcnRlZFZlcnNpb24iIGlu ZGljYXRlcyB0aGF0IHRoZSBEU0tQUCBjbGllbnQgdXNlZCBhIERTS1BQDQogICAgICBwcm90b2Nv bCB2ZXJzaW9uIG5vdCBzdXBwb3J0ZWQgYnkgdGhlIERTS1BQIHNlcnZlci4gIFRoaXMgZXJyb3Ig aXMNCiAgICAgIG9ubHkgdmFsaWQgaW4gdGhlIERTS1BQIHNlcnZlcidzIGZpcnN0IHJlc3BvbnNl IG1lc3NhZ2UuDQogICBvICAiTm9TdXBwb3J0ZWRLZXlUeXBlcyIgaW5kaWNhdGVzIHRoYXQgdGhl IERTS1BQIGNsaWVudCBvbmx5DQogICAgICBzdWdnZXN0ZWQga2V5IHR5cGVzIHRoYXQgYXJlIG5v dCBzdXBwb3J0ZWQgYnkgdGhlIERTS1BQIHNlcnZlci4NCiAgICAgIFRoaXMgZXJyb3IgaXMgb25s eSB2YWxpZCBpbiB0aGUgRFNLUFAgc2VydmVyJ3MgZmlyc3QgcmVzcG9uc2UNCiAgICAgIG1lc3Nh Z2UuDQogICBvICAiTm9TdXBwb3J0ZWRFbmNyeXB0aW9uQWxnb3JpdGhtcyIgaW5kaWNhdGVzIHRo YXQgdGhlIERTS1BQIGNsaWVudA0KICAgICAgb25seSBzdWdnZXN0ZWQgZW5jcnlwdGlvbiBhbGdv cml0aG1zIHRoYXQgYXJlIG5vdCBzdXBwb3J0ZWQgYnkgdGhlDQogICAgICBEU0tQUCBzZXJ2ZXIu ICBUaGlzIGVycm9yIGlzIG9ubHkgdmFsaWQgaW4gdGhlIERTS1BQIHNlcnZlcidzDQogICAgICBm aXJzdCByZXNwb25zZSBtZXNzYWdlLiAgTm90ZSB0aGF0IHRoZSBlcnJvciB3aWxsIG9ubHkgb2Nj dXIgaWYNCiAgICAgIHRoZSBEU0tQUCBzZXJ2ZXIgZG9lcyBub3Qgc3VwcG9ydCBhbnkgb2YgdGhl IERTS1BQIGNsaWVudCdzDQogICAgICBzdWdnZXN0ZWQgZW5jcnlwdGlvbiBhbGdvcml0aG1zLg0K ICAgbyAgIk5vU3VwcG9ydGVkTUFDQWxnb3JpdGhtcyIgaW5kaWNhdGVzIHRoYXQgdGhlIERTS1BQ IGNsaWVudCBvbmx5DQogICAgICBzdWdnZXN0ZWQgTUFDIGFsZ29yaXRobXMgdGhhdCBhcmUgbm90 IHN1cHBvcnRlZCBieSB0aGUgRFNLUFANCiAgICAgIHNlcnZlci4gIFRoaXMgZXJyb3IgaXMgb25s eSB2YWxpZCBpbiB0aGUgRFNLUFAgc2VydmVyJ3MgZmlyc3QNCiAgICAgIHJlc3BvbnNlIG1lc3Nh Z2UuICBOb3RlIHRoYXQgdGhlIGVycm9yIHdpbGwgb25seSBvY2N1ciBpZiB0aGUNCiAgICAgIERT S1BQIHNlcnZlciBkb2VzIG5vdCBzdXBwb3J0IGFueSBvZiB0aGUgRFNLUFAgY2xpZW50J3Mgc3Vn Z2VzdGVkDQogICAgICBNQUMgYWxnb3JpdGhtcy4NCiAgIG8gICJOb1Byb3RvY29sVmFyaWFudHMi IGluZGljYXRlcyB0aGF0IHRoZSBEU0tQUCBjbGllbnQgb25seQ0KICAgICAgc3VnZ2VzdGVkIGEg cHJvdG9jb2wgdmFyaWFudCAoZWl0aGVyIDItcGFzcyBvciA0LXBhc3MpIHRoYXQgaXMgbm90DQog ICAgICBzdXBwb3J0ZWQgYnkgdGhlIERTS1BQIHNlcnZlci4gIFRoaXMgZXJyb3IgaXMgb25seSB2 YWxpZCBpbiB0aGUNCiAgICAgIERTS1BQIHNlcnZlcidzIGZpcnN0IHJlc3BvbnNlIG1lc3NhZ2Uu ICBOb3RlIHRoYXQgdGhlIGVycm9yIHdpbGwNCiAgICAgIG9ubHkgb2NjdXIgaWYgdGhlIERTS1BQ IHNlcnZlciBkb2VzIG5vdCBzdXBwb3J0IGFueSBvZiB0aGUgRFNLUFANCiAgICAgIGNsaWVudCdz IHN1Z2dlc3RlZCBwcm90b2NvbCB2YXJpYW50cy4NCiAgIG8gICJOb1N1cHBvcnRlZEtleUNvbnRh aW5lcnMiIGluZGljYXRlcyB0aGF0IHRoZSBEU0tQUCBjbGllbnQgb25seQ0KICAgICAgc3VnZ2Vz dGVkIGtleSBjb250YWluZXIgZm9ybWF0cyB0aGF0IGFyZSBub3Qgc3VwcG9ydGVkIGJ5IHRoZQ0K ICAgICAgRFNLUFAgc2VydmVyLiAgVGhpcyBlcnJvciBpcyBvbmx5IHZhbGlkIGluIHRoZSBEU0tQ UCBzZXJ2ZXIncw0KICAgICAgZmlyc3QgcmVzcG9uc2UgbWVzc2FnZS4gIE5vdGUgdGhhdCB0aGUg ZXJyb3Igd2lsbCBvbmx5IG9jY3VyIGlmDQogICAgICB0aGUgRFNLUFAgc2VydmVyIGRvZXMgbm90 IHN1cHBvcnQgYW55IG9mIHRoZSBEU0tQUCBjbGllbnQncw0KICAgICAgc3VnZ2VzdGVkIGtleSBj b250YWluZXIgZm9ybWF0cy4NCiAgIG8gICJBdXRoZW50aWNhdGlvbkRhdGFJbnZhbGlkIiBpbmRp Y2F0ZXMgdGhhdCB0aGUgRFNLUFAgY2xpZW50DQogICAgICBzdXBwbGllZCB1c2VyIG9yIGRldmlj ZSBhdXRoZW50aWNhdGlvbiBkYXRhIHRoYXQgdGhlIERTS1BQIHNlcnZlcg0KICAgICAgZmFpbGVk IHRvIHZhbGlkYXRlLg0KICAgbyAgIkluaXRpYWxpemF0aW9uRmFpbGVkIiBpbmRpY2F0ZXMgdGhh dCB0aGUgRFNLUFAgc2VydmVyIGNvdWxkIG5vdA0KICAgICAgZ2VuZXJhdGUgYSB2YWxpZCBrZXkg Z2l2ZW4gdGhlIHByb3ZpZGVkIGRhdGEuICBXaGVuIHRoaXMgc3RhdHVzDQogICAgICBjb2RlIGlz IHJlY2VpdmVkLCB0aGUgRFNLUFAgY2xpZW50IFNIT1VMRCB0cnkgdG8gcmVzdGFydCBEU0tQUCwg YXMNCiAgICAgIGl0IGlzIHBvc3NpYmxlIHRoYXQgYSBuZXcgcnVuIHdpbGwgc3VjY2VlZC4NCg0K NC45LjYuICBUaGUgRGV2aWNlSWRlbnRpZmllckRhdGFUeXBlIFR5cGUNCg0KICAgVGhlIERldmlj ZUlkZW50aWZpZXJEYXRhVHlwZSB0eXBlIGlzIHVzZWQgdG8gdW5pcXVlbHkgaWRlbnRpZnkgdGhl DQogICBkZXZpY2UgdGhhdCBob3VzZXMgdGhlIGNyeXB0b2dyYXBoaWMgbW9kdWxlLCBlLmcuLCBh IG1vYmlsZSBwaG9uZS4NCg0KDQoNCkRvaGVydHksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEph bnVhcnkgOSwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDM0XQ0KDQoNCkludGVybmV0LURyYWZ0 ICAgICAgICAgICAgICAgICAgICBEU0tQUCAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAw Nw0KDQoNCiAgIFRoZSBkZXZpY2UgaWRlbnRpZmllciBhbGxvd3MgdGhlIERTS1BQIHNlcnZlciB0 byBmaW5kLCBlLmcuLCBhIHByZS0NCiAgIHNoYXJlZCB0cmFuc3BvcnQga2V5IGZvciAyLXBhc3Mg RFNLUFAgYW5kL29yIHRoZSBjb3JyZWN0IHNoYXJlZA0KICAgc2VjcmV0IGZvciBNQUMnaW5nIHB1 cnBvc2VzLiAgVGhlIGRlZmF1bHQgRGV2aWNlSWRlbnRpZmllckRhdGFUeXBlIGlzDQogICBkZWZp bmVkIGluIFtQU0tDXS4NCg0KICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9IkRldmljZUlkZW50aWZp ZXJEYXRhVHlwZSI+DQogICAgIDx4czpjaG9pY2U+DQogICAgICAgPHhzOmVsZW1lbnQgbmFtZT0i RGV2aWNlSUQiIHR5cGU9InBza2M6RGV2aWNlSWRUeXBlIi8+DQogICAgICAgPHhzOmFueSBuYW1l c3BhY2U9IiMjb3RoZXIiIHByb2Nlc3NDb250ZW50cz0ic3RyaWN0Ii8+DQogICAgIDwveHM6Y2hv aWNlPg0KICAgPC94czpjb21wbGV4VHlwZT4NCg0KNC45LjcuICBUaGUgVG9rZW5QbGF0Zm9ybUlu Zm9UeXBlIGFuZCBQbGF0Zm9ybVR5cGUgVHlwZXMNCg0KICAgVGhlIFRva2VuUGxhdGZvcm1JbmZv VHlwZSB0eXBlIGlzIHVzZWQgdG8gY2FycnkgY2hhcmFjdGVyaXN0aWNzIG9mDQogICB0aGUgaW50 ZW5kZWQgY3J5cHRvZ3JhcGhpYyBtb2R1bGUgcGxhdGZvcm0sIGFuZCBhcHBsaWVzIGluIHRoZQ0K ICAgcHVibGljLWtleSB2YXJpYW50IG9mIERTS1BQIGluIHNpdHVhdGlvbnMgd2hlbiB0aGUgY2xp ZW50IHBvdGVudGlhbGx5DQogICBuZWVkcyB0byBzZWxlY3QgYSBjcnlwdG9ncmFwaGljIG1vZHVs ZSB0byBpbml0aWFsaXplLg0KDQogICA8eHM6c2ltcGxlVHlwZSBuYW1lPSJQbGF0Zm9ybVR5cGUi Pg0KICAgICA8eHM6cmVzdHJpY3Rpb24gYmFzZT0ieHM6c3RyaW5nIj4NCiAgICAgICA8eHM6ZW51 bWVyYXRpb24gdmFsdWU9IkhhcmR3YXJlIi8+DQogICAgICAgPHhzOmVudW1lcmF0aW9uIHZhbHVl PSJTb2Z0d2FyZSIvPg0KICAgICAgIDx4czplbnVtZXJhdGlvbiB2YWx1ZT0iVW5zcGVjaWZpZWQi Lz4NCiAgICAgPC94czpyZXN0cmljdGlvbj4NCiAgIDwveHM6c2ltcGxlVHlwZT4NCg0KICAgPHhz OmNvbXBsZXhUeXBlIG5hbWU9IlRva2VuUGxhdGZvcm1JbmZvVHlwZSI+DQogICAgIDx4czphdHRy aWJ1dGUgbmFtZT0iS2V5TG9jYXRpb24iIHR5cGU9ImRza3BwOlBsYXRmb3JtVHlwZSIvPg0KICAg ICA8eHM6YXR0cmlidXRlIG5hbWU9IkFsZ29yaXRobUxvY2F0aW9uIiB0eXBlPSJkc2twcDpQbGF0 Zm9ybVR5cGUiLz4NCiAgIDwveHM6Y29tcGxleFR5cGU+DQoNCjQuOS44LiAgVGhlIE5vbmNlVHlw ZSBUeXBlDQoNCiAgIFRoZSBOb25jZVR5cGUgdHlwZSBpcyB1c2VkIHRvIGNhcnJ5IHBzZXVkb3Jh bmRvbSB2YWx1ZXMgaW4gRFNLUFANCiAgIG1lc3NhZ2VzLiAgQSBub25jZSwgYXMgdGhlIG5hbWUg aW1wbGllcywgTVVTVCBiZSB1c2VkIG9ubHkgb25jZS4gIEZvcg0KICAgZWFjaCBEU0tQUCBtZXNz YWdlIHRoYXQgcmVxdWlyZXMgYSBub25jZSBlbGVtZW50IHRvIGJlIHNlbnQsIGEgZnJlc2gNCiAg IG5vbmNlIE1VU1QgYmUgZ2VuZXJhdGVkIGVhY2ggdGltZS4gIE5vbmNlIHZhbHVlcyBNVVNUIGJl IGF0IGxlYXN0IDE2DQogICBvY3RldHMgbG9uZy4NCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCkRv aGVydHksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgOSwgMjAwOCAgICAgICAgICAg ICAgIFtQYWdlIDM1XQ0KDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICBEU0tQ UCAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgIDx4czpzaW1wbGVUeXBl IG5hbWU9Ik5vbmNlVHlwZSI+DQogICAgIDx4czpyZXN0cmljdGlvbiBiYXNlPSJ4czpiYXNlNjRC aW5hcnkiPg0KICAgICAgIDx4czptaW5MZW5ndGggdmFsdWU9IjE2Ii8+DQogICAgIDwveHM6cmVz dHJpY3Rpb24+DQogICA8L3hzOnNpbXBsZVR5cGU+DQoNCjQuOS45LiAgVGhlIEFsZ29yaXRobXNU eXBlIFR5cGUNCg0KICAgVGhlIEFsZ29yaXRobXNUeXBlIHR5cGUgaXMgYSBsaXN0IG9mIHR5cGUt dmFsdWUgcGFpcnMgdGhhdCBkZWZpbmUNCiAgIGFsZ29yaXRobXMgc3VwcG9ydGVkIGJ5IGEgRFNL UFAgY2xpZW50IG9yIHNlcnZlci4gIEFsZ29yaXRobXMgYXJlDQogICBpZGVudGlmaWVkIHRocm91 Z2ggVVJJcy4NCg0KICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9IkFsZ29yaXRobXNUeXBlIj4NCiAg ICAgPHhzOnNlcXVlbmNlIG1heE9jY3Vycz0idW5ib3VuZGVkIj4NCiAgICAgICA8eHM6ZWxlbWVu dCBuYW1lPSJBbGdvcml0aG0iIHR5cGU9IkFsZ29yaXRobVR5cGUiLz4NCiAgICAgPC94czpzZXF1 ZW5jZT4NCiAgIDwveHM6Y29tcGxleFR5cGU+DQoNCiAgIDx4czpzaW1wbGVUeXBlIG5hbWU9IkFs Z29yaXRobVR5cGUiPg0KICAgICA8eHM6cmVzdHJpY3Rpb24gYmFzZT0ieHM6YW55VVJJIi8+DQog ICA8L3hzOnNpbXBsZVR5cGU+DQoNCjQuOS4xMC4gIFRoZSBQcm90b2NvbFZhcmlhbnRzVHlwZSBh bmQgdGhlIFR3b1Bhc3NTdXBwb3J0VHlwZSBUeXBlcw0KDQogICBUaGUgUHJvdG9jb2xWYXJpYW50 c1R5cGUgdHlwZSBpcyBPUFRJT05BTExZIHVzZWQgYnkgdGhlIERTS1BQIGNsaWVudA0KICAgdG8g aW5kaWNhdGUgdGhlIG51bWJlciBvZiBwYXNzZXMgb2YgdGhlIERTS1BQIHByb3RvY29sIHRoYXQg aXQNCiAgIHN1cHBvcnRzIChzZWUgU2VjdGlvbiA0LjIpLiAgVGhlIFByb3RvY29sVmFyaWFudHNU eXBlIE1BWSBiZSB1c2VkIHRvDQogICBpbmRpY2F0ZSBzdXBwb3J0IGZvciA0LXBhc3Mgb3IgMi1w YXNzIERTS1BQLiAgQmVjYXVzZSAxLXBhc3MgRFNLUFANCiAgIGRvZXMgbm90IGluY2x1ZGUgYSBj bGllbnQgcmVxdWVzdCB0byB0aGUgc2VydmVyLCB0aGUNCiAgIFByb3RvY29sVmFyaWFudHNUeXBl IHR5cGUgTUFZIE5PVCBiZSB1c2VkIHRvIGluZGljYXRlIHN1cHBvcnQgZm9yDQogICAxLXBhc3Mg RFNLUFAuICBJZiB0aGUgUHJvdG9jb2xWYXJpYW50c1R5cGUgaXMgbm90IHVzZWQsIHRoZW4gdGhl DQogICBEU0tQUCBzZXJ2ZXIgd2lsbCBwcm9jZWVkIHdpdGggb3JkaW5hcnkgNC1wYXNzIERTS1BQ LiAgSG93ZXZlciwgaXQNCiAgIGRvZXMgbm90IHN1cHBvcnQgNC1wYXNzIERTS1BQLCB0aGVuIHRo ZSBzZXJ2ZXIgTVVTVCBmaW5kIGEgc3VpdGFibGUNCiAgIHR3by1wYXNzIHZhcmlhbnQgb3IgZWxz ZSB0aGUgcHJvdG9jb2wgcnVuIHdpbGwgZmFpbC4NCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQpEb2hlcnR5LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDksIDIwMDgg ICAgICAgICAgICAgICBbUGFnZSAzNl0NCg0KDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAg ICAgICAgRFNLUFAgICAgICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQogICA8eHM6 Y29tcGxleFR5cGUgbmFtZT0iUHJvdG9jb2xWYXJpYW50c1R5cGUiPg0KICAgICA8eHM6c2VxdWVu Y2U+DQogICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iRm91clBhc3MiIG1pbk9jY3Vycz0iMCIvPg0K ICAgICAgIDx4czplbGVtZW50IG5hbWU9IlR3b1Bhc3MiIHR5cGU9ImRza3BwOlR3b1Bhc3NTdXBw b3J0VHlwZSINCiAgICAgICAgIG1pbk9jY3Vycz0iMCIvPg0KICAgICAgIDx4czplbGVtZW50IG5h bWU9Ik9uZVBhc3MiIG1pbk9jY3Vycz0iMCIvPg0KICAgICA8L3hzOnNlcXVlbmNlPg0KICAgPC94 czpjb21wbGV4VHlwZT4NCg0KICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9IlR3b1Bhc3NTdXBwb3J0 VHlwZSI+DQogICAgIDx4czpzZXF1ZW5jZSBtYXhPY2N1cnM9InVuYm91bmRlZCI+DQogICAgICAg PHhzOmVsZW1lbnQgbmFtZT0iU3VwcG9ydGVkS2V5SW5pdGlhbGl6YXRpb25NZXRob2QiDQogICAg ICAgICB0eXBlPSJ4czphbnlVUkkiLz4NCiAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJQYXlsb2Fk IiBtaW5PY2N1cnM9IjAiLz4NCiAgICAgPC94czpzZXF1ZW5jZT4NCiAgIDwveHM6Y29tcGxleFR5 cGU+DQoNCiAgIFRoZSBUd29QYXNzU3VwcG9ydFR5cGUgdHlwZSBzaWduYWxzIGNsaWVudCBzdXBw b3J0IGZvciB0aGUgMi1wYXNzDQogICB2ZXJzaW9uIG9mIERTS1BQLCBpbmZvcm1zIHRoZSBzZXJ2 ZXIgb2Ygc3VwcG9ydGVkIHR3by1wYXNzIHZhcmlhbnRzLA0KICAgYW5kIHByb3ZpZGVzIE9QVElP TkFMIHBheWxvYWQgZGF0YSB0byB0aGUgRFNLUFAgc2VydmVyLiAgVGhlIHBheWxvYWQNCiAgIGlz IHNlbnQgaW4gYW4gb3Bwb3J0dW5pc3RpYyBmYXNoaW9uLCBhbmQgTUFZIGJlIGRpc2NhcmRlZCBi eSB0aGUNCiAgIERTS1BQIHNlcnZlciBpZiB0aGUgc2VydmVyIGRvZXMgbm90IHN1cHBvcnQgdGhl IHR3by1wYXNzIHZhcmlhbnQgdGhlDQogICBwYXlsb2FkIGlzIGFzc29jaWF0ZWQgd2l0aC4gIFRo ZSBlbGVtZW50cyBvZiB0aGlzIHR5cGUgaGF2ZSB0aGUNCiAgIGZvbGxvd2luZyBtZWFuaW5nOg0K ICAgbyAgPFN1cHBvcnRlZEtleUluaXRpYWxpemF0aW9uTWV0aG9kPjogQSB0d28tcGFzcyBrZXkg aW5pdGlhbGl6YXRpb24NCiAgICAgIG1ldGhvZCBzdXBwb3J0ZWQgYnkgdGhlIERTS1BQIGNsaWVu dC4gIE11bHRpcGxlIHN1cHBvcnRlZCBtZXRob2RzDQogICAgICBNQVkgYmUgcHJlc2VudCwgaW4g d2hpY2ggY2FzZSB0aGV5IE1VU1QgYmUgbGlzdGVkIGluIG9yZGVyIG9mDQogICAgICBwcmVjZWRl bmNlLg0KICAgbyAgPFBheWxvYWQ+OiBBbiBPUFRJT05BTCBwYXlsb2FkIGFzc29jaWF0ZWQgd2l0 aCBlYWNoIHN1cHBvcnRlZCBrZXkNCiAgICAgIGluaXRpYWxpemF0aW9uIG1ldGhvZC4NCiAgIEEg RFNLUFAgY2xpZW50IHRoYXQgaW5kaWNhdGVzIHN1cHBvcnQgZm9yIHR3by1wYXNzIERTS1BQIE1V U1QgYWxzbw0KICAgaW5jbHVkZSB0aGUgbm9uY2UgUiBpbiBpdHMgPENsaWVudEhlbGxvPiBtZXNz YWdlICh0aGlzIHdpbGwgZW5hYmxlDQogICB0aGUgY2xpZW50IHRvIHZlcmlmeSB0aGF0IHRoZSBE U0tQUCBzZXJ2ZXIgaXQgaXMgY29tbXVuaWNhdGluZyB3aXRoDQogICBpcyBhbGl2ZSkuDQoNCjQu OS4xMS4gIFRoZSBLZXlDb250YWluZXJzRm9ybWF0VHlwZVR5cGUNCg0KICAgVGhlIEtleUNvbnRh aW5lcnNGb3JtYXRUeXBlIHR5cGUgaXMgYSBsaXN0IG9mIHR5cGUtdmFsdWUgcGFpcnMgdGhhdA0K ICAgYXJlIE9QVElPTkFMTFkgdXNlZCB0byBkZWZpbmUga2V5IGNvbnRhaW5lciBmb3JtYXRzIHN1 cHBvcnRlZCBieSBhDQogICBEU0tQUCBjbGllbnQgb3Igc2VydmVyLiAgS2V5IGNvbnRhaW5lciBm b3JtYXRzIGFyZSBpZGVudGlmaWVkIHRocm91Z2gNCiAgIFVSSXMsIGUuZy4sIHRoZSBQU0tDIFVS SQ0KICAgImh0dHA6Ly93d3cub3BlbmF1dGhlbnRpY2F0aW9uLm9yZy9PQVRILzIwMDYvMTAvUFNL QyNLZXlDb250YWluZXIiDQogICAoc2VlIFtQU0tDXS4NCg0KDQoNCg0KDQoNCg0KDQpEb2hlcnR5 LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDksIDIwMDggICAgICAgICAgICAgICBb UGFnZSAzN10NCg0KDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgRFNLUFAgICAg ICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQogICA8eHM6Y29tcGxleFR5cGUgbmFt ZT0iS2V5Q29udGFpbmVyc0Zvcm1hdFR5cGUiPg0KICAgICA8eHM6c2VxdWVuY2UgbWF4T2NjdXJz PSJ1bmJvdW5kZWQiPg0KICAgICAgIDx4czplbGVtZW50IG5hbWU9IktleUNvbnRhaW5lckZvcm1h dCINCiAgICAgICAgIHR5cGU9ImRza3BwOktleUNvbnRhaW5lckZvcm1hdFR5cGUiLz4NCiAgICAg PC94czpzZXF1ZW5jZT4NCiAgIDwveHM6Y29tcGxleFR5cGU+DQoNCiAgIDx4czpzaW1wbGVUeXBl IG5hbWU9IktleUNvbnRhaW5lckZvcm1hdFR5cGUiPg0KICAgICA8eHM6cmVzdHJpY3Rpb24gYmFz ZT0ieHM6YW55VVJJIi8+DQogICA8L3hzOnNpbXBsZVR5cGU+DQoNCjQuOS4xMi4gIFRoZSBBdXRo ZW50aWNhdGlvbkRhdGFUeXBlIFR5cGUNCg0KICAgVGhlIEF1dGhlbnRpY2F0aW9uRGF0YVR5cGUg dHlwZSBpcyBPUFRJT05BTExZIHVzZWQgdG8gY2FycnkgY2xpZW50IG9yDQogICBzZXJ2ZXIgYXV0 aGVudGljYXRpb24gdmFsdWVzIGluIERTS1BQIG1lc3NhZ2VzIChzZWUgU2VjdGlvbiA0LjMpLg0K ICAgVGhlIGVsZW1lbnQgTUFZIGJlIHVzZWQgYXMgZm9sbG93czoNCiAgIGEuICBBIERTS1BQIGNs aWVudCBNQVkgaW5jbHVkZSBhIG9uZS10aW1lIHVzZSBBdXRoZW50aWNhdGlvbkNvZGUgdGhhdA0K ICAgICAgIHdhcyBnaXZlbiBieSB0aGUgaXNzdWVyIHRvIHRoZSB1c2VyIGZvciBhY3F1aXJpbmcg YSBzeW1tZXRyaWMNCiAgICAgICBrZXkuICBBbiBBdXRoZW50aWNhdGlvbkNvZGUgTUFZIG9yIE1B WSBOT1QgY29udGFpbiBhbHBoYW51bWVyaWMNCiAgICAgICBjaGFyYWN0ZXJzIGluIGFkZGl0aW9u IHRvIG51bWVyaWMgZGlnaXRzIGRlcGVuZGluZyBvbiB0aGUgZGV2aWNlDQogICAgICAgdHlwZSBh bmQgcG9saWN5IG9mIHRoZSBpc3N1ZXIuICBGb3IgZXhhbXBsZSwgaWYgdGhlIGRldmljZSBpcyBh DQogICAgICAgbW9iaWxlIHBob25lLCBhIGNvZGUgdGhhdCB0aGUgdXNlciBlbnRlcnMgb24gdGhl IGtleXBhZCB3b3VsZA0KICAgICAgIHR5cGljYWxseSBiZSByZXN0cmljdGVkIHRvIG51bWVyaWMg ZGlnaXRzIGZvciBlYXNlIG9mIHVzZS4gIEFuDQogICAgICAgYWN0aXZhdGlvbiBjb2RlIGNhbiBi ZSBzZW50IHRvIHRoZSBEU0tQUCBzZXJ2ZXIgaW4gcGxhaW50ZXh0DQogICAgICAgZm9ybSwgaGFz aGVkIGRhdGEgZm9ybSwgb3Iga2V5ZWQgaGFzaCBkYXRhIGZvcm0gZGVwZW5kaW5nIG9uIHRoZQ0K ICAgICAgIHVuZGVybHlpbmcgdHJhbnNwb3J0IHByb3RvY29sLg0KICAgYi4gIEEgRFNLUFAgY2xp ZW50IE1BWSBpbmNsdWRlIGFuIEF1dGhlbnRpY2F0aW9uQ2VydGlmaWNhdGUgdGhhdA0KICAgICAg IGNvbnRhaW5zIGEgY2VydGlmaWNhdGUgaXNzdWVkIHdpdGggdGhlIGRldmljZSBieSB0aGUgaXNz dWVyLg0KICAgYy4gIEEgRFNLUFAgc2VydmVyIE1BWSB1c2UgdGhlIEF1dGhlbnRpY2F0aW9uRGF0 YVR5cGUgZWxlbWVudA0KICAgICAgIEF1dGhlbnRpY2F0aW9uQ29kZU1hYyB0byBjYXJyeSBhIE1B QyBmb3IgYXV0aGVudGljYXRpbmcgaXRzZWxmIHRvDQogICAgICAgdGhlIGNsaWVudC4gIEZvciBl eGFtcGxlLCB3aGVuIGEgc3VjY2Vzc2Z1bCAxLSBvciAyLXBhc3MgRFNLUFANCiAgICAgICBwcm90 b2NvbCBydW4gd2lsbCByZXN1bHQgaW4gYW4gZXhpc3Rpbmcga2V5IGJlaW5nIHJlcGxhY2VkLCB0 aGVuDQogICAgICAgdGhlIERTS1BQIHNlcnZlciBNVVNUIGluY2x1ZGUgYSBNQUMgcHJvdmluZyB0 byB0aGUgRFNLUFAgY2xpZW50DQogICAgICAgdGhhdCB0aGUgc2VydmVyIGtub3dzIHRoZSB2YWx1 ZSBvZiB0aGUga2V5IGl0IGlzIGFib3V0IHRvDQogICAgICAgcmVwbGFjZS4NCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KRG9oZXJ0eSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFu dWFyeSA5LCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgMzhdDQoNCg0KSW50ZXJuZXQtRHJhZnQg ICAgICAgICAgICAgICAgICAgIERTS1BQICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDA3 DQoNCg0KICAgPHhzOmNvbXBsZXh0eXBlIG5hbWU9IkF1dGhlbnRpY2F0aW9uRGF0YVR5cGUiPg0K ICAgICA8eHM6c2VxdWVuY2U+DQogICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iQ2xpZW50SUQiIHR5 cGU9ImRza3BwOklkZW50aWZpZXJUeXBlIg0KICAgICAgICAgbWluT2NjdXJzPSIwIi8+DQogICAg ICAgPHhzOmNob2ljZSBtaW5PY2N1cnM9IjAiPg0KICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0i QXV0aGVudGljYXRpb25Db2RlIg0KICAgICAgICAgICB0eXBlPSJkc2twcDpBdXRoZW50aWNhdGlv bkNvZGVUeXBlIi8+DQogICAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJBdXRoZW50aWNhdGlvbkNv ZGVEaWdlc3QiDQogICAgICAgICAgIHR5cGU9ImRza3BwOkF1dGhlbnRpY2F0aW9uQ29kZURpZ2Vz dFR5cGUiLz4NCiAgICAgICAgIDx4czplbGVtZW50IG5hbWU9IkF1dGhlbnRpY2F0aW9uQ29kZU1h YyINCiAgICAgICAgICAgdHlwZT0iZHNrcHA6QXV0aGVudGljYXRpb25Db2RlTWFjVHlwZSIvPg0K ICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iQXV0aGVudGljYXRpb25DZXJ0aWZpY2F0ZSINCiAg ICAgICAgICAgdHlwZT0iZHM6S2V5SW5mb1R5cGUiLz4NCiAgICAgICA8L3hzOmNob2ljZT4NCiAg ICAgPC94czpzZXF1ZW5jZT4NCiAgIDwveHM6Y29tcGxleFR5cGU+DQoNCiAgIDx4czpzaW1wbGVU eXBlIG5hbWU9IkF1dGhlbnRpY2F0aW9uQ29kZVR5cGUiPg0KICAgICA8eHM6cmVzdHJpY3Rpb24g YmFzZT0ieHM6c3RyaW5nIj4NCiAgICAgICA8eHM6bWF4TGVuZ3RoIHZhbHVlPSIyMCIvPg0KICAg ICA8L3hzOnJlc3RyaWN0aW9uPg0KICAgPC94czpzaW1wbGVUeXBlPg0KDQogICA8eHM6Y29tcGxl eFR5cGUgbmFtZT0iQXV0aGVudGljYXRpb25Db2RlRGlnZXN0VHlwZSI+DQogICAgIDx4czpzaW1w bGVDb250ZW50Pg0KICAgICAgIDx4czpleHRlbnNpb24gYmFzZT0ieHM6YmFzZTY0QmluYXJ5Ij4N CiAgICAgICAgIDx4czphdHRyaWJ1dGUgbmFtZT0iSGFzaEFsZ29yaXRobSIgdHlwZT0ieHM6YW55 VVJJIg0KICAgICAgICAgICB1c2U9InJlcXVpcmVkIi8+DQogICAgICAgPC94czpleHRlbnNpb24+ DQogICAgIDwveHM6c2ltcGxlQ29udGVudD4NCiAgIDwveHM6Y29tcGxleFR5cGU+DQoNCiAgIDx4 czpjb21wbGV4VHlwZSBuYW1lPSJBdXRoZW50aWNhdGlvbkNvZGVNYWNUeXBlIj4NCiAgICAgPHhz OnNlcXVlbmNlPg0KICAgICAgIDx4czplbGVtZW50IG5hbWU9IkRhdGEiIHR5cGU9InhzOmJhc2U2 NEJpbmFyeSI+DQogICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iTm9uY2UiIHR5cGU9ImRza3BwOk5v bmNlVHlwZSIvPg0KICAgICA8L3hzOnNlcXVlbmNlPg0KICAgICA8YXR0cmlidXRlIG5hbWU9IkhN QUNBbGdvcml0aG0iIHR5cGU9InhzOmFueVVSSSINCiAgICAgICB1c2U9InJlcXVpcmVkIi8+DQog ICAgIDxhdHRyaWJ1dGUgbmFtZT0iTm9uY2VJZCIgdHlwZT0iZHNrcHA6SWRlbnRpZmllclR5cGUi Lz4NCiAgIDwveHM6Y29tcGxleFR5cGU+DQoNCiAgIFRoZSBlbGVtZW50IG9mIHRoZSBBdXRoZW50 aWNhdGlvbkRhdGFUeXBlIHR5cGUgaGF2ZSB0aGUgZm9sbG93aW5nDQogICBtZWFuaW5nOg0KICAg byAgPENsaWVudElEPjogQSByZXF1ZXN0b3IncyBpZGVudGlmaWVyLiAgVGhlIHZhbHVlIE1BWSBi ZSBhIHVzZXIgSUQsDQogICAgICBhIGRldmljZSBJRCwgb3IgYSBrZXlJRCBhc3NvY2lhdGVkIHdp dGggdGhlIHJlcXVlc3RvcidzDQogICAgICBhdXRoZW50aWNhdGlvbiB2YWx1ZS4gIFdoZW4gdGhl IGF1dGhlbnRpY2F0aW9uIGRhdGEgaXMgYmFzZWQgb24gYQ0KICAgICAgY2VydGlmaWNhdGUsIDxD bGllbnRJRD4gY2FuIGJlIG9taXR0ZWQsIGFzIHRoZSBjZXJ0aWZpY2F0ZSBpdHNlbGYNCg0KDQoN CkRvaGVydHksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgOSwgMjAwOCAgICAgICAg ICAgICAgIFtQYWdlIDM5XQ0KDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICBE U0tQUCAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgICAgIGlzIHR5cGlj YWxseSBzdWZmaWNpZW50IHRvIGlkZW50aWZ5IHRoZSByZXF1ZXN0b3IuICBBbHNvLCBpZiBhDQog ICAgICA8RFNLUFBUcmlnZ2VyPiBtZXNzYWdlIHdhcyBwcm92aWRlZCBieSB0aGUgc2VydmVyIHRv IGluaXRpYXRlIHRoZQ0KICAgICAgRFNLUFAgcHJvdG9jb2wgcnVuLCA8Q2xpZW50SUQ+IGNhbiBi ZSBvbWl0dGVkLCBhcyB0aGUgRGV2aWNlSUQsDQogICAgICBLZXlJRCwgYW5kL29yIG5vbmNlIHBy b3ZpZGVkIGluIHRoZSA8SW5pdGlhbGl6YXRpb25UcmlnZ2VyVHlwZT4NCiAgICAgIGVsZW1lbnQg b3VnaHQgdG8gYmUgc3VmZmljaWVudCB0byBpZGVudGlmeSB0aGUgcmVxdWVzdG9yLg0KICAgbyAg PEF1dGhlbnRpY2F0aW9uQ29kZT46IEEgb25lLXRpbWUgdXNlIHZhbHVlIHNlbnQgaW4gdGhlIGNs ZWFyIHRvDQogICAgICB0aGUgRFNLUFAgc2VydmVyLg0KICAgbyAgPEF1dGhlbnRpY2F0aW9uQ29k ZURpZ2VzdD46IEEgb25lLXRpbWUgdXNlIHZhbHVlIHNlbnQgaW4gZGlnZXN0DQogICAgICBmb3Jt IHRvIHRoZSBEU0tQUCBzZXJ2ZXIuDQogICBvICA8QXV0aGVudGljYXRpb25Db2RlTWFjPjogQW4g YXV0aGVudGljYXRpb24gTUFDIGFuZCBPUFRJT05BTA0KICAgICAgYWRkaXRpb25hbCBpbmZvcm1h dGlvbiAoZS5nLiwgTUFDIGFsZ29yaXRobSkuICBUaGUgdmFsdWUgY291bGQgYmUNCiAgICAgIGEg b25lLXRpbWUgdXNlIHZhbHVlIHNlbnQgYXMgYSBNQUMgdmFsdWUgdG8gdGhlIERTS1BQIHNlcnZl cjsgb3IsDQogICAgICBpdCBjb3VsZCBiZSBhIE1BQyB2YWx1ZSBzZW50IHRvIHRoZSBEU0tQUCBj bGllbnQsIHdoZXJlIHRoZSBNQUMgaXMNCiAgICAgIGNhbGN1bGF0ZWQgYXMgZGVzY3JpYmVkIGlu IFNlY3Rpb24gNC44Lg0KICAgbyAgPEF1dGhlbnRpY2F0aW9uQ2VydGlmaWNhdGU+OiBBIGRldmlj ZSBjZXJ0aWZpY2F0ZSBzZW50IHRvIHRoZQ0KICAgICAgRFNLUFAgc2VydmVyLg0KDQo0LjkuMTMu ICBUaGUgUGF5bG9hZFR5cGUgVHlwZQ0KDQogICBUaGUgUGF5bG9hZFR5cGUgdHlwZSBpcyB1c2Vk IHRvIGNhcnJ5IGRhdGEgaW4gYSBEU0tQUCBjbGllbnQgb3INCiAgIHNlcnZlciBtZXNzYWdlLiAg Rm9yIHRoaXMgdmVyc2lvbiBvZiB0aGUgcHJvdG9jb2wsIG9ubHkgb25lIHBheWxvYWQNCiAgIGlz IGRlZmluZWQsIHRoZSBwc2V1ZG9yYW5kb20gc3RyaW5nIFJfUywgZm9yIG9uZSBtZXNzYWdlLCB0 aGUgRFNLUFANCiAgIDxTZXJ2ZXJIZWxsbz4uDQoNCiAgIDx4czpjb21wbGV4VHlwZSBuYW1lPSJQ YXlsb2FkVHlwZSI+DQogICAgIDx4czpjaG9pY2U+DQogICAgICAgPHhzOmVsZW1lbnQgbmFtZT0i Tm9uY2UiIHR5cGU9ImRza3BwOk5vbmNlVHlwZSIvPg0KICAgICAgIDx4czphbnkgbmFtZXNwYWNl PSIjI290aGVyIiBwcm9jZXNzQ29udGVudHM9InN0cmljdCIvPg0KICAgICA8L3hzOmNob2ljZT4N CiAgIDwveHM6Y29tcGxleFR5cGU+DQoNCjQuOS4xNC4gIFRoZSBNYWNUeXBlIFR5cGUNCg0KICAg VGhlIE1hY1R5cGUgdHlwZSBpcyB1c2VkIGJ5IHRoZSBEU0tQUCBzZXJ2ZXIgdG8gY2FycnkgYSBN QUMgdmFsdWUNCiAgIHRoYXQgdGhlIERTS1BQIHNlcnZlciB1c2VzIHRvIGF1dGhlbnRpY2F0ZSBp dHNlbGYgdG8gdGhlIGNsaWVudC4NCg0KICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9Ik1hY1R5cGUi Pg0KICAgICA8eHM6c2ltcGxlQ29udGVudD4NCiAgICAgICA8eHM6ZXh0ZW5zaW9uIGJhc2U9Inhz OmJhc2U2NEJpbmFyeSI+DQogICAgICAgICA8eHM6YXR0cmlidXRlIG5hbWU9Ik1hY0FsZ29yaXRo bSIgdHlwZT0ieHM6YW55VVJJIi8+DQogICAgICAgPC94czpleHRlbnNpb24+DQogICAgIDwveHM6 c2ltcGxlQ29udGVudD4NCiAgIDwveHM6Y29tcGxleFR5cGU+DQoNCjQuOS4xNS4gIFRoZSBLZXlD b250YWluZXJUeXBlIFR5cGUNCg0KICAgVGhlIEtleUNvbnRhaW5lclR5cGUgdHlwZSBpcyB1c2Vk IGJ5IHRoZSBEU0tQUCBzZXJ2ZXIgaW4gaXRzIGZpbmFsDQogICBtZXNzYWdlIHRvIGNhcnJ5IHN5 bW1ldHJpYyBrZXkocykgKGluIHRoZSAyLSBhbmQgMS1wYXNzIGV4Y2hhbmdlcykNCg0KDQoNCkRv aGVydHksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgOSwgMjAwOCAgICAgICAgICAg ICAgIFtQYWdlIDQwXQ0KDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICBEU0tQ UCAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgIGFuZCBjb25maWd1cmF0 aW9uIGRhdGEuICBUaGUgZGVmYXVsdCBlbGVtZW50IGRlZmluZWQgZm9yIHRoZQ0KICAgS2V5Q29u dGFpbmVyVHlwZSBpcyBjb250YWluZWQgaW4gdGhlIG5hbWVzcGFjZSBkZWZpbmVkIGluIHRoZSBQ U0tDDQogICBuYW1lc3BhY2UgYXMgS2V5Q29udGFpbmVyVHlwZSAoc2VlIFtQU0tDXS4NCg0KICAg PHhzOmNvbXBsZXhUeXBlIG5hbWU9IktleUNvbnRhaW5lclR5cGUiPg0KICAgICA8eHM6Y2hvaWNl Pg0KICAgICAgIDx4czplbGVtZW50IG5hbWU9IktleUNvbnRhaW5lciINCiAgICAgICAgIHR5cGU9 InBza2M6S2V5Q29udGFpbmVyVHlwZSIvPg0KICAgICAgIDx4czplbGVtZW50IG5hbWU9IiMjb3Ro ZXIiIHByb2Nlc3NDb250ZW50cz0ic3RyaWN0Ii8+DQogICAgIDwveHM6Y2hvaWNlPg0KICAgPC94 czpjb21wbGV4VHlwZT4NCg0KNC45LjE2LiAgVGhlIEV4dGVuc2lvbnNUeXBlIGFuZCB0aGUgQWJz dHJhY3RFeHRlbnNpb25UeXBlIFR5cGVzDQoNCiAgIFRoZSBFeHRlbnNpb25zVHlwZSB0eXBlIGlz IGEgbGlzdCBvZiB0eXBlLXZhbHVlIHBhaXJzIHRoYXQgZGVmaW5lDQogICBPUFRJT05BTCBEU0tQ UCBmZWF0dXJlcyBzdXBwb3J0ZWQgYnkgYSBEU0tQUCBjbGllbnQgb3Igc2VydmVyLg0KICAgRXh0 ZW5zaW9ucyBNQVkgYmUgc2VudCB3aXRoIGFueSBEU0tQUCBtZXNzYWdlLiAgUGxlYXNlIHNlZSB0 aGUNCiAgIGRlc2NyaXB0aW9uIG9mIGluZGl2aWR1YWwgRFNLUFAgbWVzc2FnZXMgaW4gU2VjdGlv biA0LjExIG9mIHRoaXMNCiAgIGRvY3VtZW50IGZvciBhcHBsaWNhYmxlIGV4dGVuc2lvbnMuICBB bGwgRFNLUFAgZXh0ZW5zaW9ucyBhcmUgZGVmaW5lZA0KICAgYXMgZXh0ZW5zaW9ucyB0byB0aGUg QWJzdHJhY3RFeHRlbnNpb25UeXBlIHR5cGUuICBUaGUgZWxlbWVudHMgb2YgdGhlDQogICBBYnN0 cmFjdEV4dGVuc2lvblR5cGUsIHRoZXJlZm9yZSwgYXBwbHkgdG8gYWxsIERTS1BQIGV4dGVuc2lv bnMuDQogICBVbmxlc3MgYW4gZXh0ZW5zaW9uIGlzIG1hcmtlZCBhcyBDcml0aWNhbCwgYSByZWNl aXZpbmcgcGFydHkgbmVlZCBub3QNCiAgIGJlIGFibGUgdG8gaW50ZXJwcmV0IGl0LiAgQSByZWNl aXZpbmcgcGFydHkgaXMgYWx3YXlzIGZyZWUgdG8NCiAgIGRpc3JlZ2FyZCBhbnkgKG5vbi1jcml0 aWNhbCkgZXh0ZW5zaW9ucy4NCg0KICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9IkV4dGVuc2lvbnNU eXBlIj4NCiAgICAgPHhzOnNlcXVlbmNlIG1heE9jY3Vycz0idW5ib3VuZGVkIj4NCiAgICAgICA8 eHM6ZWxlbWVudCBuYW1lPSJFeHRlbnNpb24iIHR5cGU9IkFic3RyYWN0RXh0ZW5zaW9uVHlwZSIv Pg0KICAgICA8L3hzOnNlcXVlbmNlPg0KICAgPC94czpjb21wbGV4VHlwZT4NCg0KICAgPHhzOmNv bXBsZXhUeXBlIG5hbWU9IkFic3RyYWN0RXh0ZW5zaW9uVHlwZSIgYWJzdHJhY3Q9InRydWUiPg0K ICAgICA8eHM6YXR0cmlidXRlIG5hbWU9IkNyaXRpY2FsIiB0eXBlPSJ4czpib29sZWFuIi8+DQog ICA8L3hzOmNvbXBsZXhUeXBlPg0KDQo0LjEwLiAgRFNLUFAgTWVzc2FnZXMNCg0KNC4xMC4xLiAg SW50cm9kdWN0aW9uDQoNCiAgIEluIHRoaXMgc2VjdGlvbiwgRFNLUFAgbWVzc2FnZXMsIGluY2x1 ZGluZyB0aGVpciBwYXJhbWV0ZXJzLCBlbmNvZGluZw0KICAgYW5kIHNlbWFudGljcyBhcmUgZGVm aW5lZC4NCg0KNC4xMC4yLiAgRFNLUFAgSW5pdGlhbGl6YXRpb24gKE9QVElPTkFMKQ0KDQogICBU aGUgRFNLUFAgc2VydmVyIE1BWSBpbml0aWFsaXplIHRoZSBEU0tQUCBwcm90b2NvbCBieSBzZW5k aW5nIGENCiAgIDxEU0tQUFRyaWdnZXI+IG1lc3NhZ2UuICBUaGlzIG1lc3NhZ2UgTUFZLCBlLmcu LCBiZSBzZW50IGluIHJlc3BvbnNlDQogICB0byBhIHVzZXIgcmVxdWVzdGluZyBrZXkgaW5pdGlh bGl6YXRpb24gaW4gYSBicm93c2luZyBzZXNzaW9uLg0KDQoNCg0KDQpEb2hlcnR5LCBldCBhbC4g ICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDksIDIwMDggICAgICAgICAgICAgICBbUGFnZSA0MV0N Cg0KDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgRFNLUFAgICAgICAgICAgICAg ICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQogICA8eHM6Y29tcGxleFR5cGUgbmFtZT0iSW5pdGlh bGl6YXRpb25UcmlnZ2VyVHlwZSI+DQogICAgIDx4czpzZXF1ZW5jZT4NCiAgICAgICA8eHM6ZWxl bWVudCBuYW1lPSJEZXZpY2VJZGVudGlmaWVyRGF0YSINCiAgICAgICAgIHR5cGU9ImRza3BwOkRl dmljZUlkZW50aWZpZXJEYXRhVHlwZSIgbWluT2NjdXJzPSIwIi8+DQogICAgICAgPHhzOmVsZW1l bnQgbmFtZT0iS2V5SUQiIHR5cGU9InhzOmJhc2U2NEJpbmFyeSIgbWluT2NjdXJzPSIwIi8+DQog ICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iVG9rZW5QbGF0Zm9ybUluZm8iDQogICAgICAgICB0eXBl PSJkc2twcDpUb2tlblBsYXRmb3JtSW5mb1R5cGUiIG1pbk9jY3Vycz0iMCIvPg0KICAgICAgIDx4 czplbGVtZW50IG5hbWU9IlRyaWdnZXJOb25jZSIgdHlwZT0iZHNrcHA6Tm9uY2VUeXBlIi8+DQog ICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iRFNLUFBfVVJMIiB0eXBlPSJ4czphbnlVUkkiIG1pbk9j Y3Vycz0iMCIvPg0KICAgICAgIDx4czphbnkgbmFtZXNwYWNlPSIjI290aGVyIiBwcm9jZXNzQ29u dGVudHM9InN0cmljdCINCiAgICAgICAgIG1pbk9jY3Vycz0iMCIvPg0KICAgICA8L3hzOnNlcXVl bmNlPg0KICAgPC94czpjb21wbGV4VHlwZT4NCg0KICAgPHhzOmVsZW1lbnQgbmFtZT0iRFNLUFBU cmlnZ2VyIiB0eXBlPSJEU0tQUFRyaWdnZXJUeXBlIi8+DQoNCiAgIDx4czpjb21wbGV4VHlwZSBu YW1lPSJEU0tQUFRyaWdnZXJUeXBlIj4NCiAgICAgPHhzOmFubm90YXRpb24+DQogICAgICAgPHhz OmRvY3VtZW50YXRpb24geG1sOmxhbmc9ImVuIj4NCiAgICAgICAgIE1lc3NhZ2UgdXNlZCB0byB0 cmlnZ2VyIHRoZSBkZXZpY2UgdG8gaW5pdGlhdGUgYQ0KICAgICAgICAgRFNLUFAgcHJvdG9jb2wg cnVuLg0KICAgICAgIDwveHM6ZG9jdW1lbnRhdGlvbj4NCiAgICAgPC94czphbm5vdGF0aW9uPg0K ICAgICA8eHM6c2VxdWVuY2U+DQogICAgICAgPHhzOmNob2ljZT4NCiAgICAgICAgIDx4czplbGVt ZW50IG5hbWU9IkluaXRpYWxpemF0aW9uVHJpZ2dlciINCiAgICAgICAgICAgdHlwZT0iZHNrcHA6 SW5pdGlhbGl6YXRpb25UcmlnZ2VyVHlwZSIvPg0KICAgICAgICAgPHhzOmFueSBuYW1lc3BhY2U9 IiMjb3RoZXIiIHByb2Nlc3NDb250ZW50cz0ic3RyaWN0Ii8+DQogICAgICAgPC94czpjaG9pY2U+ DQogICAgIDwveHM6c2VxdWVuY2U+DQogICAgIDx4czphdHRyaWJ1dGUgbmFtZT0iVmVyc2lvbiIg dHlwZT0iZHNrcHA6VmVyc2lvblR5cGUiLz4NCiAgIDwveHM6Y29tcGxleFR5cGU+DQoNCiAgIFRo ZSA8RFNLUFBUcmlnZ2VyPiBlbGVtZW50IGlzIGludGVuZGVkIGZvciB0aGUgRFNLUFAgY2xpZW50 IGFuZCBNQVkNCiAgIGluZm9ybSB0aGUgRFNLUFAgY2xpZW50IGFib3V0IHRoZSBpZGVudGlmaWVy IGZvciB0aGUgZGV2aWNlIHRoYXQNCiAgIGhvdXNlcyB0aGUgY3J5cHRvZ3JhcGhpYyBtb2R1bGUg dG8gYmUgaW5pdGlhbGl6ZWQsIGFuZCwgT1BUSU9OQUxMWSwNCiAgIG9mIHRoZSBpZGVudGlmaWVy IGZvciB0aGUga2V5IG9uIHRoYXQgbW9kdWxlLiAgVGhlIGxhdHRlciB3b3VsZCBhcHBseQ0KICAg dG8ga2V5IHJlbmV3YWwuICBUaGUgdHJpZ2dlciBhbHdheXMgY29udGFpbnMgYSBub25jZSB0byBh bGxvdyB0aGUNCiAgIERTS1BQIHNlcnZlciB0byBjb3VwbGUgdGhlIHRyaWdnZXIgd2l0aCBhIGxh dGVyIERTS1BQIDxDbGllbnRIZWxsbz4NCiAgIHJlcXVlc3QuICBGaW5hbGx5LCB0aGUgdHJpZ2dl ciBNQVkgY29udGFpbiBhIFVSTCB0byB1c2Ugd2hlbg0KICAgY29udGFjdGluZyB0aGUgRFNLUFAg c2VydmVyLiAgVGhlIDx4czphbnk+IGVsZW1lbnRzIGFyZSBmb3IgZnV0dXJlDQogICBleHRlbnNp YmlsaXR5LiAgQW55IHByb3ZpZGVkIDxEZXZpY2VJZGVudGlmaWVyRGF0YT4gb3IgPEtleUlEPiB2 YWx1ZXMNCiAgIE1VU1QgYmUgdXNlZCBieSB0aGUgRFNLUFAgY2xpZW50IGluIHRoZSBzdWJzZXF1 ZW50IDxDbGllbnRIZWxsbz4NCiAgIHJlcXVlc3QuICBUaGUgT1BUSU9OQUwgPFRva2VuUGxhdGZv cm1JbmZvPiBlbGVtZW50IGluZm9ybXMgdGhlIERTS1BQDQogICBjbGllbnQgYWJvdXQgdGhlIGNo YXJhY3RlcmlzdGljcyBvZiB0aGUgaW50ZW5kZWQgY3J5cHRvZ3JhcGhpYyBtb2R1bGUNCiAgIHBs YXRmb3JtLCBhbmQgYXBwbGllcyBpbiB0aGUgcHVibGljLWtleSB2YXJpYW50IG9mIERTS1BQIGlu DQogICBzaXR1YXRpb25zIHdoZW4gdGhlIGNsaWVudCBwb3RlbnRpYWxseSBuZWVkcyB0byBkZWNp ZGUgd2hpY2ggb25lIG9mDQogICBzZXZlcmFsIG1vZHVsZXMgdG8gaW5pdGlhbGl6ZS4NCg0KDQoN CkRvaGVydHksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgOSwgMjAwOCAgICAgICAg ICAgICAgIFtQYWdlIDQyXQ0KDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICBE U0tQUCAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgIFRoZSBWZXJzaW9u IGF0dHJpYnV0ZSBNVVNUIGJlIHNldCB0byAiMS4wIiBmb3IgdGhpcyB2ZXJzaW9uIG9mIERTS1BQ Lg0KDQo0LjEwLjMuICBUaGUgRFNLUFAgQ2xpZW50J3MgSW5pdGlhbCBQRFUgKDItIGFuZCA0LVBh c3MpDQoNCiAgIFRoaXMgbWVzc2FnZSBpcyB0aGUgaW5pdGlhbCBtZXNzYWdlIHNlbnQgZnJvbSB0 aGUgRFNLUFAgY2xpZW50IHRvIHRoZQ0KICAgRFNLUFAgc2VydmVyLg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KRG9oZXJ0eSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFy eSA5LCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgNDNdDQoNCg0KSW50ZXJuZXQtRHJhZnQgICAg ICAgICAgICAgICAgICAgIERTS1BQICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDA3DQoN Cg0KICAgPHhzOmVsZW1lbnQgbmFtZT0iQ2xpZW50SGVsbG8iIHR5cGU9IkNsaWVudEhlbGxvUERV Ii8+DQoNCiAgIDx4czpjb21wbGV4VHlwZSBuYW1lPSJDbGllbnRIZWxsb1BEVSI+DQogICAgIDx4 czphbm5vdGF0aW9uPg0KICAgICAgIDx4czpkb2N1bWVudGF0aW9uIHhtbDpsYW5nPSJlbiI+DQog ICAgICAgICBNZXNzYWdlIHNlbnQgZnJvbSBEU0tQUCBjbGllbnQgdG8gRFNLUFAgc2VydmVyIHRv IGluaXRpYXRlIGENCiAgICAgICAgIERTS1BQIHNlc3Npb24uDQogICAgICAgPC94czpkb2N1bWVu dGF0aW9uPg0KICAgICA8L3hzOmFubm90YXRpb24+DQogICAgIDx4czpjb21wbGV4Q29udGVudD4N CiAgICAgICA8eHM6ZXh0ZW5zaW9uIGJhc2U9IkFic3RyYWN0UmVxdWVzdFR5cGUiPg0KICAgICAg ICAgPHhzOnNlcXVlbmNlPg0KICAgICAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJEZXZpY2VJZGVu dGlmaWVyRGF0YSINCiAgICAgICAgICAgICB0eXBlPSJkc2twcDpEZXZpY2VJZGVudGlmaWVyRGF0 YVR5cGUiIG1pbk9jY3Vycz0iMCIvPg0KICAgICAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJLZXlJ RCIgdHlwZT0ieHM6YmFzZTY0QmluYXJ5Ig0KICAgICAgICAgICAgIG1pbk9jY3Vycz0iMCIvPg0K ICAgICAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJDbGllbnROb25jZSIgdHlwZT0iZHNrcHA6Tm9u Y2VUeXBlIg0KICAgICAgICAgICAgIG1pbk9jY3Vycz0iMCIvPg0KICAgICAgICAgICA8eHM6ZWxl bWVudCBuYW1lPSJUcmlnZ2VyTm9uY2UiIHR5cGU9ImRza3BwOk5vbmNlVHlwZSINCiAgICAgICAg ICAgICBtaW5PY2N1cnM9IjAiLz4NCiAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iU3VwcG9y dGVkS2V5VHlwZXMiDQogICAgICAgICAgICAgdHlwZT0iZHNrcHA6QWxnb3JpdGhtc1R5cGUiLz4N CiAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iU3VwcG9ydGVkRW5jcnlwdGlvbkFsZ29yaXRo bXMiDQogICAgICAgICAgICAgdHlwZT0iZHNrcHA6QWxnb3JpdGhtc1R5cGUiLz4NCiAgICAgICAg ICAgPHhzOmVsZW1lbnQgbmFtZT0iU3VwcG9ydGVkTUFDQWxnb3JpdGhtcyINCiAgICAgICAgICAg ICB0eXBlPSJkc2twcDpBbGdvcml0aG1zVHlwZSIvPg0KICAgICAgICAgICA8eHM6ZWxlbWVudCBu YW1lPSJTdXBwb3J0ZWRQcm90b2NvbFZhcmlhbnRzIg0KICAgICAgICAgICAgIHR5cGU9ImRza3Bw OlByb3RvY29sVmFyaWFudHNUeXBlIiBtaW5PY2N1cnM9IjAiLz4NCiAgICAgICAgICAgPHhzOmVs ZW1lbnQgbmFtZT0iU3VwcG9ydGVkS2V5Q29udGFpbmVycyINCiAgICAgICAgICAgICB0eXBlPSJk c2twcDpLZXlDb250YWluZXJzRm9ybWF0VHlwZSIgbWluT2NjdXJzPSIwIi8+DQogICAgICAgICAg IDx4czplbGVtZW50IG5hbWU9IkF1dGhlbnRpY2F0aW9uRGF0YSINCiAgICAgICAgICAgICB0eXBl PSJkc2twcDpBdXRoZW50aWNhdGlvbkRhdGFUeXBlIiBtaW5PY2N1cnM9IjAiLz4NCiAgICAgICAg ICAgPHhzOmVsZW1lbnQgbmFtZT0iRXh0ZW5zaW9ucyIgdHlwZT0iZHNrcHA6RXh0ZW5zaW9uc1R5 cGUiDQogICAgICAgICAgICAgbWluT2NjdXJzPSIwIi8+DQogICAgICAgICA8L3hzOnNlcXVlbmNl Pg0KICAgICAgIDwveHM6ZXh0ZW5zaW9uPg0KICAgICA8L3hzOmNvbXBsZXhDb250ZW50Pg0KICAg PC94czpjb21wbGV4VHlwZT4NCg0KICAgVGhlIGNvbXBvbmVudHMgb2YgdGhpcyBtZXNzYWdlIGhh dmUgdGhlIGZvbGxvd2luZyBtZWFuaW5nOg0KICAgbyAgVmVyc2lvbjogKGF0dHJpYnV0ZSBpbmhl cml0ZWQgZnJvbSB0aGUgQWJzdHJhY3RSZXF1ZXN0VHlwZSB0eXBlKQ0KICAgICAgVGhlIGhpZ2hl c3QgdmVyc2lvbiBvZiB0aGlzIHByb3RvY29sIHRoZSBjbGllbnQgc3VwcG9ydHMuICBPbmx5DQog ICAgICB2ZXJzaW9uIG9uZSAoIjEuMCIpIGlzIGN1cnJlbnRseSBzcGVjaWZpZWQuDQogICBvICA8 RGV2aWNlSWRlbnRpZmllckRhdGE+OiBBbiBpZGVudGlmaWVyIGZvciB0aGUgY3J5cHRvZ3JhcGhp YyBtb2R1bGUNCiAgICAgIGFzIGRlZmluZWQgaW4gU2VjdGlvbiA0LjMuMSBhYm92ZS4gIFRoZSBp ZGVudGlmaWVyIE1VU1Qgb25seSBiZQ0KICAgICAgcHJlc2VudCBpZiBzdWNoIHNoYXJlZCBzZWNy ZXRzIGV4aXN0IG9yIGlmIHRoZSBpZGVudGlmaWVyIHdhcw0KICAgICAgcHJvdmlkZWQgYnkgdGhl IHNlcnZlciBpbiBhIDxEU0tQUFRyaWdnZXI+IGVsZW1lbnQgKHNlZQ0KICAgICAgU2VjdGlvbiA1 LjIuNyBiZWxvdykuICBJbiB0aGUgbGF0dGVyIGNhc2UsIGl0IE1VU1QgaGF2ZSB0aGUgc2FtZQ0K DQoNCg0KRG9oZXJ0eSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAg ICAgICAgICAgICAgW1BhZ2UgNDRdDQoNCg0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAg ICAgIERTS1BQICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KICAgICAgdmFs dWUgYXMgdGhlIGlkZW50aWZpZXIgcHJvdmlkZWQgaW4gdGhhdCBlbGVtZW50Lg0KICAgbyAgPEtl eUlEPjogQW4gaWRlbnRpZmllciBmb3IgdGhlIGtleSB0aGF0IHdpbGwgYmUgb3ZlcndyaXR0ZW4g aWYgdGhlDQogICAgICBwcm90b2NvbCBydW4gaXMgc3VjY2Vzc2Z1bC4gIFRoZSBpZGVudGlmaWVy IE1VU1Qgb25seSBiZSBwcmVzZW50DQogICAgICBpZiB0aGUga2V5IGV4aXN0cyBvciB3YXMgcHJv dmlkZWQgYnkgdGhlIHNlcnZlciBpbiBhDQogICAgICA8RFNLUFBUcmlnZ2VyPiBlbGVtZW50IChz ZWUgU2VjdGlvbiA1LjIuNyBiZWxvdykuICBJbiB0aGUgbGF0dGVyDQogICAgICBjYXNlLCBpdCBN VVNUIGhhdmUgdGhlIHNhbWUgdmFsdWUgYXMgdGhlIGlkZW50aWZpZXIgcHJvdmlkZWQgaW4NCiAg ICAgIHRoYXQgZWxlbWVudC4NCiAgIG8gIDxDbGllbnROb25jZT46IFRoaXMgaXMgdGhlIG5vbmNl IFIsIHdoaWNoLCB3aGVuIHByZXNlbnQsIE1VU1QgYmUNCiAgICAgIHVzZWQgYnkgdGhlIHNlcnZl ciB3aGVuIGNhbGN1bGF0aW5nIE1BQyB2YWx1ZXMgKHNlZSBiZWxvdykuICBJdCBpcw0KICAgICAg UkVDT01NRU5ERUQgdGhhdCBjbGllbnRzIGluY2x1ZGUgdGhpcyBlbGVtZW50IHdoZW5ldmVyIHRo ZSA8S2V5SUQ+DQogICAgICBlbGVtZW50IGlzIHByZXNlbnQuDQogICBvICA8VHJpZ2dlck5vbmNl PjogVGhpcyBPUFRJT05BTCBlbGVtZW50IE1VU1QgYmUgcHJlc2VudCBpZiBhbmQgb25seQ0KICAg ICAgaWYgdGhlIERTS1BQIHJ1biB3YXMgaW5pdGlhbGl6ZWQgd2l0aCBhIDxEU0tQUFRyaWdnZXI+ IG1lc3NhZ2UNCiAgICAgIChzZWUgU2VjdGlvbiA1LjIuNyBiZWxvdyksIGFuZCBNVVNULCBpbiB0 aGF0IGNhc2UsIGhhdmUgdGhlIHNhbWUNCiAgICAgIHZhbHVlIGFzIHRoZSA8VHJpZ2dlck5vbmNl PiBjaGlsZCBvZiB0aGF0IG1lc3NhZ2UuICBBIHNlcnZlciB1c2luZw0KICAgICAgbm9uY2VzIGlu IHRoaXMgd2F5IE1VU1QgdmVyaWZ5IHRoYXQgdGhlIG5vbmNlIGlzIHZhbGlkIGFuZCB0aGF0DQog ICAgICBhbnkgZGV2aWNlIG9yIGtleSBpZGVudGlmaWVyIHZhbHVlcyBwcm92aWRlZCBpbiB0aGUg PERTS1BQVHJpZ2dlcj4NCiAgICAgIG1lc3NhZ2UgbWF0Y2ggdGhlIGNvcnJlc3BvbmRpbmcgaWRl bnRpZmllciB2YWx1ZXMgaW4gdGhlDQogICAgICA8Q2xpZW50SGVsbG8+IG1lc3NhZ2UuDQogICBv ICA8U3VwcG9ydGVkS2V5VHlwZXM+OiBBIHNlcXVlbmNlIG9mIFVSSXMgaW5kaWNhdGluZyB0aGUg a2V5IHR5cGVzDQogICAgICBmb3Igd2hpY2ggdGhlIGNyeXB0b2dyYXBoaWMgbW9kdWxlIGlzIHdp bGxpbmcgdG8gZ2VuZXJhdGUga2V5cw0KICAgICAgdGhyb3VnaCBEU0tQUC4NCiAgIG8gIDxTdXBw b3J0ZWRFbmNyeXB0aW9uQWxnb3JpdGhtcz46IEEgc2VxdWVuY2Ugb2YgVVJJcyBpbmRpY2F0aW5n IHRoZQ0KICAgICAgZW5jcnlwdGlvbiBhbGdvcml0aG1zIHN1cHBvcnRlZCBieSB0aGUgY3J5cHRv Z3JhcGhpYyBtb2R1bGUgZm9yDQogICAgICB0aGUgcHVycG9zZXMgb2YgRFNLUFAuICBUaGUgRFNL UFAgY2xpZW50IE1BWSBpbmRpY2F0ZSB0aGUgc2FtZQ0KICAgICAgYWxnb3JpdGhtIGJvdGggYXMg YSBzdXBwb3J0ZWQga2V5IHR5cGUgYW5kIGFzIGFuIGVuY3J5cHRpb24NCiAgICAgIGFsZ29yaXRo bS4NCiAgIG8gIDxTdXBwb3J0ZWRNQUNBbGdvcml0aG1zPjogQSBzZXF1ZW5jZSBvZiBVUklzIGlu ZGljYXRpbmcgdGhlIE1BQw0KICAgICAgYWxnb3JpdGhtcyBzdXBwb3J0ZWQgYnkgdGhlIGNyeXB0 b2dyYXBoaWMgbW9kdWxlIGZvciB0aGUgcHVycG9zZXMNCiAgICAgIG9mIERTS1BQLiAgVGhlIERT S1BQIGNsaWVudCBNQVkgaW5kaWNhdGUgdGhlIHNhbWUgYWxnb3JpdGhtIGJvdGgNCiAgICAgIGFz IGFuIGVuY3J5cHRpb24gYWxnb3JpdGhtIGFuZCBhcyBhIE1BQyBhbGdvcml0aG0gKGUuZy4sDQog ICAgICB1cm46aWV0ZjpwYXJhbXM6eG1sOnNjaGVtYTprZXlwcm92OnByb3RvY29sI2Rza3BwLXBy Zi1hZXMgZGVmaW5lZA0KICAgICAgaW4gQXBwZW5kaXggRSkuDQogICBvICA8U3VwcG9ydGVkUHJv dG9jb2xWYXJpYW50cz46IFRoaXMgT1BUSU9OQUwgZWxlbWVudCBpcyB1c2VkIGJ5IHRoZQ0KICAg ICAgRFNLUFAgY2xpZW50IHRvIGluZGljYXRlIHN1cHBvcnQgZm9yIGZvdXItcGFzcyBvciB0d28t cGFzcyBEU0tQUC4NCiAgICAgIElmIHR3by1wYXNzIHN1cHBvcnQgaXMgc3BlY2lmaWVkLCB0aGVu IDxDbGllbnROb25jZT4gTVVTVCBiZSBzZXQNCiAgICAgIHRvIG5vbmNlIFIgaW4gdGhlIDxDbGll bnRIZWxsbz4gbWVzc2FnZSB1bmxlc3MgPFRyaWdnZXJOb25jZT4gaXMNCiAgICAgIGFscmVhZHkg cHJlc2VudC4NCiAgIG8gIDxTdXBwb3J0ZWRLZXlDb250YWluZXJzPjogVGhpcyBPUFRJT05BTCBl bGVtZW50IGlzIGEgc2VxdWVuY2Ugb2YNCiAgICAgIFVSSXMgaW5kaWNhdGluZyB0aGUga2V5IGNv bnRhaW5lciBmb3JtYXRzIHN1cHBvcnRlZCBieSB0aGUgRFNLUFANCiAgICAgIGNsaWVudC4gIElm IHRoaXMgZWxlbWVudCBpcyBub3QgcHJvdmlkZWQsIHRoZW4gdGhlIERTS1BQIHNlcnZlcg0KICAg ICAgTVVTVCBwcm9jZWVkIHdpdGgNCiAgICAgICJodHRwOi8vd3d3Lm9wZW5hdXRoZW50aWNhdGlv bi5vcmcvT0FUSC8yMDA2LzEwL1BTS0MjS2V5Q29udGFpbmVyIg0KICAgICAgKHNlZSBbUFNLQ10u DQogICBvICA8QXV0aGVudGljYXRpb25EYXRhPjogVGhpcyBPUFRJT05BTCBlbGVtZW50IGNvbnRh aW5zIGRhdGEgdGhhdCB0aGUNCiAgICAgIERTS1BQIGNsaWVudCB1c2VzIHRvIGF1dGhlbnRpY2F0 ZSB0aGUgdXNlciBvciBkZXZpY2UgdG8gdGhlIERTS1BQDQogICAgICBzZXJ2ZXIuICBUaGUgZWxl bWVudCBpcyBzZXQgYXMgc3BlY2lmaWVkIGluIFNlY3Rpb24gNC4zLjEuDQoNCg0KDQoNCkRvaGVy dHksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgOSwgMjAwOCAgICAgICAgICAgICAg IFtQYWdlIDQ1XQ0KDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICBEU0tQUCAg ICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgIG8gIDxFeHRlbnNpb25zPjog QSBzZXF1ZW5jZSBvZiBleHRlbnNpb25zLiAgT25lIGV4dGVuc2lvbiBpcyBkZWZpbmVkDQogICAg ICBmb3IgdGhpcyBtZXNzYWdlIGluIHRoaXMgdmVyc2lvbiBvZiBEU0tQUDogdGhlIENsaWVudElu Zm9UeXBlIChzZWUNCiAgICAgIFNlY3Rpb24gNC4xMSkuDQoNCjQuMTAuNC4gIFRoZSBEU0tQUCBT ZXJ2ZXIncyBJbml0aWFsIFBEVSAoNC1QYXNzIE9ubHkpDQoNCiAgIFRoaXMgbWVzc2FnZSBpcyB0 aGUgZmlyc3QgbWVzc2FnZSBzZW50IGZyb20gdGhlIERTS1BQIHNlcnZlciB0byB0aGUNCiAgIERT S1BQIGNsaWVudCAoYXNzdW1pbmcgYSB0cmlnZ2VyIG1lc3NhZ2UgaGFzIG5vdCBiZWVuIHNlbnQg dG8NCiAgIGluaXRpYXRlIHRoZSBwcm90b2NvbCwgaW4gd2hpY2ggY2FzZSwgdGhpcyBtZXNzYWdl IGlzIHRoZSBzZWNvbmQNCiAgIG1lc3NhZ2Ugc2VudCBmcm9tIHRoZSBEU0tQUCBzZXJ2ZXIgdG8g dGhlIERTS1BQIGNsaWVudCkuICBJdCBpcyBzZW50DQogICB1cG9uIHJlY2VwdGlvbiBvZiBhIDxD bGllbnRIZWxsbz4gbWVzc2FnZS4NCg0KICAgPHhzOmVsZW1lbnQgbmFtZT0iU2VydmVySGVsbG8i IHR5cGU9IlNlcnZlckhlbGxvUERVIi8+DQoNCiAgIDx4czpjb21wbGV4VHlwZSBuYW1lPSJTZXJ2 ZXJIZWxsb1BEVSI+DQogICAgIDx4czphbm5vdGF0aW9uPg0KICAgICAgIDx4czpkb2N1bWVudGF0 aW9uIHhtbDpsYW5nPSJlbiI+DQogICAgICAgICBNZXNzYWdlIHNlbnQgZnJvbSBEU0tQUCBzZXJ2 ZXIgdG8gRFNLUFAgY2xpZW50DQogICAgICAgICBpbiByZXNwb25zZSB0byBhIHJlY2VpdmVkIENs aWVudEhlbGxvIFBEVS4NCiAgICAgICA8L3hzOmRvY3VtZW50YXRpb24+DQogICAgIDwveHM6YW5u b3RhdGlvbj4NCiAgICAgPHhzOmNvbXBsZXhDb250ZW50Pg0KICAgICAgIDx4czpleHRlbnNpb24g YmFzZT0iQWJzdHJhY3RSZXNwb25zZVR5cGUiPg0KICAgICAgICAgPHhzOnNlcXVlbmNlIG1pbk9j Y3Vycz0iMCI+DQogICAgICAgICAgIDx4czplbGVtZW50IG5hbWU9IktleVR5cGUiDQogICAgICAg ICAgICAgdHlwZT0iZHNrcHA6QWxnb3JpdGhtVHlwZSIvPg0KICAgICAgICAgICA8eHM6ZWxlbWVu dCBuYW1lPSJFbmNyeXB0aW9uQWxnb3JpdGhtIg0KICAgICAgICAgICAgIHR5cGU9ImRza3BwOkFs Z29yaXRobVR5cGUiLz4NCiAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iTWFjQWxnb3JpdGht Ig0KICAgICAgICAgICAgIHR5cGU9ImRza3BwOkFsZ29yaXRobVR5cGUiLz4NCiAgICAgICAgICAg PHhzOmVsZW1lbnQgbmFtZT0iRW5jcnlwdGlvbktleSINCiAgICAgICAgICAgICB0eXBlPSJkczpL ZXlJbmZvVHlwZSIvPg0KICAgICAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJLZXlDb250YWluZXJG b3JtYXQiDQogICAgICAgICAgICAgdHlwZT0iZHNrcHA6S2V5Q29udGFpbmVyRm9ybWF0VHlwZSIv Pg0KICAgICAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJQYXlsb2FkIg0KICAgICAgICAgICAgIHR5 cGU9ImRza3BwOlBheWxvYWRUeXBlIi8+DQogICAgICAgICAgIDx4czplbGVtZW50IG5hbWU9IkV4 dGVuc2lvbnMiDQogICAgICAgICAgICAgdHlwZT0iZHNrcHA6RXh0ZW5zaW9uc1R5cGUiIG1pbk9j Y3Vycz0iMCIvPg0KICAgICAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJNYWMiIHR5cGU9ImRza3Bw Ok1hY1R5cGUiDQogICAgICAgICAgICAgbWluT2NjdXJzPSIwIi8+DQogICAgICAgICA8L3hzOnNl cXVlbmNlPg0KICAgICAgIDwveHM6ZXh0ZW5zaW9uPg0KICAgICA8L3hzOmNvbXBsZXhDb250ZW50 Pg0KICAgPC94czpjb21wbGV4VHlwZT4NCg0KICAgVGhlIGNvbXBvbmVudHMgb2YgdGhpcyBtZXNz YWdlIGhhdmUgdGhlIGZvbGxvd2luZyBtZWFuaW5nOg0KDQoNCg0KDQoNCkRvaGVydHksIGV0IGFs LiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgOSwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDQ2 XQ0KDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICBEU0tQUCAgICAgICAgICAg ICAgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgIG8gIFZlcnNpb246IChhdHRyaWJ1dGUgaW5o ZXJpdGVkIGZyb20gdGhlIEFic3RyYWN0UmVzcG9uc2VUeXBlIHR5cGUpDQogICAgICBUaGUgdmVy c2lvbiBzZWxlY3RlZCBieSB0aGUgRFNLUFAgc2VydmVyLiAgTUFZIGJlIGxvd2VyIHRoYW4gdGhl DQogICAgICB2ZXJzaW9uIGluZGljYXRlZCBieSB0aGUgRFNLUFAgY2xpZW50LCBpbiB3aGljaCBj YXNlLCBsb2NhbCBwb2xpY3kNCiAgICAgIGF0IHRoZSBjbGllbnQgTVVTVCBkZXRlcm1pbmUgd2hl dGhlciBvciBub3QgdG8gY29udGludWUgdGhlDQogICAgICBzZXNzaW9uLg0KICAgbyAgU2Vzc2lv bklEOiAoYXR0cmlidXRlIGluaGVyaXRlZCBmcm9tIHRoZSBBYnN0cmFjdFJlc3BvbnNlVHlwZQ0K ICAgICAgdHlwZSkgQW4gaWRlbnRpZmllciBmb3IgdGhpcyBzZXNzaW9uLg0KICAgbyAgU3RhdHVz OiAoYXR0cmlidXRlIGluaGVyaXRlZCBmcm9tIHRoZSBBYnN0cmFjdFJlc3BvbnNlVHlwZSB0eXBl KQ0KICAgICAgUmV0dXJuIGNvZGUgZm9yIHRoZSA8Q2xpZW50SGVsbG8+LiAgSWYgU3RhdHVzIGlz IG5vdCAiQ29udGludWUiLA0KICAgICAgb25seSB0aGUgU3RhdHVzIGFuZCBWZXJzaW9uIGF0dHJp YnV0ZXMgd2lsbCBiZSBwcmVzZW50OyBvdGhlcndpc2UsDQogICAgICBhbGwgdGhlIG90aGVyIGVs ZW1lbnQgTVVTVCBiZSBwcmVzZW50IGFzIHdlbGwuDQogICBvICA8S2V5VHlwZT46IFRoZSB0eXBl IG9mIHRoZSBrZXkgdG8gYmUgZ2VuZXJhdGVkLg0KICAgbyAgPEVuY3J5cHRpb25BbGdvcml0aG0+ OiBUaGUgZW5jcnlwdGlvbiBhbGdvcml0aG0gdG8gdXNlIHdoZW4NCiAgICAgIHByb3RlY3Rpbmcg Ul9DLg0KICAgbyAgPE1hY0FsZ29yaXRobT46IFRoZSBNQUMgYWxnb3JpdGhtIHRvIGJlIHVzZWQg YnkgdGhlIERTS1BQIHNlcnZlci4NCiAgIG8gIDxFbmNyeXB0aW9uS2V5PjogSW5mb3JtYXRpb24g YWJvdXQgdGhlIGtleSB0byB1c2Ugd2hlbiBlbmNyeXB0aW5nDQogICAgICBSX0MuIEl0IHdpbGwg ZWl0aGVyIGJlIHRoZSBzZXJ2ZXIncyBwdWJsaWMga2V5ICh0aGUgPGRzOktleVZhbHVlPg0KICAg ICAgYWx0ZXJuYXRpdmUgb2YgZHM6S2V5SW5mb1R5cGUpIG9yIGFuIGlkZW50aWZpZXIgZm9yIGEg c2hhcmVkDQogICAgICBzZWNyZXQga2V5ICh0aGUgPGRzOktleU5hbWU+IGFsdGVybmF0aXZlIG9m IGRzOktleUluZm9UeXBlKS4NCiAgIG8gIDxLZXlDb250YWluZXJGb3JtYXQ+OiBUaGUga2V5IGNv bnRhaW5lciBmb3JtYXQgdHlwZSB0byBiZSB1c2VkIGJ5DQogICAgICB0aGUgRFNLUFAgc2VydmVy LiAgVGhlIGRlZmF1bHQgc2V0dGluZyByZWxpZXMgb24gdGhlDQogICAgICBLZXlDb250YWluZXJU eXBlIGVsZW1lbnQgZGVmaW5lZCBpbg0KICAgICAgInVybjppZXRmOnBhcmFtczp4bWw6c2NoZW1h OmtleXByb3Y6Y29udGFpbmVyIiBbUFNLQ10uDQogICBvICA8UGF5bG9hZD46IFRoZSBhY3R1YWwg cGF5bG9hZC4gIEZvciB0aGlzIHZlcnNpb24gb2YgdGhlIHByb3RvY29sLA0KICAgICAgb25seSBv bmUgcGF5bG9hZCBpcyBkZWZpbmVkOiB0aGUgcHNldWRvcmFuZG9tIHN0cmluZyBSX1MuDQogICBv ICA8RXh0ZW5zaW9ucz46IEEgbGlzdCBvZiBzZXJ2ZXIgZXh0ZW5zaW9ucy4gIFR3byBleHRlbnNp b25zIGFyZQ0KICAgICAgZGVmaW5lZCBmb3IgdGhpcyBtZXNzYWdlIGluIHRoaXMgdmVyc2lvbiBv ZiBEU0tQUDogdGhlDQogICAgICBDbGllbnRJbmZvVHlwZSBhbmQgdGhlIFNlcnZlckluZm9UeXBl IChzZWUgU2VjdGlvbiA0LjExKS4NCiAgIG8gIDxNYWM+OiBUaGUgTUFDIE1VU1QgYmUgcHJlc2Vu dCBpZiB0aGUgRFNLUFAgcnVuIHdpbGwgcmVzdWx0IGluIHRoZQ0KICAgICAgcmVwbGFjZW1lbnQg b2YgYW4gZXhpc3Rpbmcgc3ltbWV0cmljIGtleSB3aXRoIGEgbmV3IG9uZSAoaS5lLiwgaWYNCiAg ICAgIHRoZSA8S2V5SUQ+IGVsZW1lbnQgd2FzIHByZXNlbnQgaW4gdGhlIDxDbGllbnRIZWxsbyBt ZXNzYWdlKS4gIEluDQogICAgICB0aGlzIGNhc2UsIHRoZSBEU0tQUCBzZXJ2ZXIgTVVTVCBwcm92 ZSB0byB0aGUgY3J5cHRvZ3JhcGhpYyBtb2R1bGUNCiAgICAgIHRoYXQgaXQgaXMgYXV0aG9yaXpl ZCB0byByZXBsYWNlIGl0LiAgVGhlIE1BQyB2YWx1ZSBNVVNUIGJlDQogICAgICBjb21wdXRlZCBh cyBkZWZpbmVkIGluIFNlY3Rpb24gNC44LjEuMS4NCiAgICAgIFRoZSBEU0tQUCBjbGllbnQgTVVT VCB2ZXJpZnkgdGhlIE1BQyBpZiB0aGUgc3VjY2Vzc2Z1bCBleGVjdXRpb24NCiAgICAgIG9mIHRo ZSBwcm90b2NvbCB3aWxsIHJlc3VsdCBpbiB0aGUgcmVwbGFjZW1lbnQgb2YgYW4gZXhpc3RpbmcN CiAgICAgIHN5bW1ldHJpYyBrZXkgd2l0aCBhIG5ld2x5IGdlbmVyYXRlZCBvbmUuICBUaGUgRFNL UFAgY2xpZW50IE1VU1QNCiAgICAgIHRlcm1pbmF0ZSB0aGUgRFNLUFAgc2Vzc2lvbiBpZiB0aGUg TUFDIGRvZXMgbm90IHZlcmlmeSwgYW5kIE1VU1QNCiAgICAgIGRlbGV0ZSBhbnkgbm9uY2VzLCBr ZXlzLCBhbmQvb3Igc2VjcmV0cyBhc3NvY2lhdGVkIHdpdGggdGhlIGZhaWxlZA0KICAgICAgcnVu IG9mIHRoZSBEU0tQUCBwcm90b2NvbC4NCiAgICAgIFRoZSBNYWNUeXBlJ3MgTWFjQWxnb3JpdGht IGF0dHJpYnV0ZSBNVVNULCB3aGVuIHByZXNlbnQsIGlkZW50aWZ5DQogICAgICB0aGUgbmVnb3Rp YXRlZCBNQUMgYWxnb3JpdGhtLg0KDQo0LjEwLjUuICBUaGUgRFNLUFAgQ2xpZW50J3MgU2Vjb25k IFBEVSAoNC1QYXNzIE9ubHkpDQoNCiAgIFRoaXMgbWVzc2FnZSBjb250YWlucyB0aGUgbm9uY2Ug Y2hvc2VuIGJ5IHRoZSBjcnlwdG9ncmFwaGljIG1vZHVsZSwNCiAgIFJfQywgZW5jcnlwdGVkIGJ5 IHRoZSBzcGVjaWZpZWQgZW5jcnlwdGlvbiBrZXkgYW5kIGVuY3J5cHRpb24NCiAgIGFsZ29yaXRo bS4NCg0KDQoNCkRvaGVydHksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgOSwgMjAw OCAgICAgICAgICAgICAgIFtQYWdlIDQ3XQ0KDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAg ICAgICAgICBEU0tQUCAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgIDx4 czplbGVtZW50IG5hbWU9IkNsaWVudE5vbmNlIiB0eXBlPSJDbGllbnROb25jZVBEVSIvPg0KDQog ICA8eHM6Y29tcGxleFR5cGUgbmFtZT0iQ2xpZW50Tm9uY2VQRFUiPg0KICAgICA8eHM6YW5ub3Rh dGlvbj4NCiAgICAgICA8eHM6ZG9jdW1lbnRhdGlvbiB4bWw6bGFuZz0iZW4iPg0KICAgICAgICAg U2Vjb25kIG1lc3NhZ2Ugc2VudCBmcm9tIERTS1BQIGNsaWVudCB0bw0KICAgICAgICAgRFNLUFAg c2VydmVyIGluIGEgRFNLUFAgc2Vzc2lvbi4NCiAgICAgICA8L3hzOmRvY3VtZW50YXRpb24+DQog ICAgIDwveHM6YW5ub3RhdGlvbj4NCiAgICAgPHhzOmNvbXBsZXhDb250ZW50Pg0KICAgICAgIDx4 czpleHRlbnNpb24gYmFzZT0iQWJzdHJhY3RSZXF1ZXN0VHlwZSI+DQogICAgICAgICA8eHM6c2Vx dWVuY2U+DQogICAgICAgICAgIDx4czplbGVtZW50IG5hbWU9IkVuY3J5cHRlZE5vbmNlIg0KICAg ICAgICAgICAgIHR5cGU9InhzOmJhc2U2NEJpbmFyeSIvPg0KICAgICAgICAgICA8eHM6ZWxlbWVu dCBuYW1lPSJBdXRoZW50aWNhdGlvbkRhdGEiDQogICAgICAgICAgICAgdHlwZT0iZHNrcHA6QXV0 aGVudGljYXRpb25EYXRhVHlwZSIgbWluT2NjdXJzPSIwIi8+DQogICAgICAgICAgIDx4czplbGVt ZW50IG5hbWU9IkV4dGVuc2lvbnMiDQogICAgICAgICAgICAgdHlwZT0iZHNrcHA6RXh0ZW5zaW9u c1R5cGUiIG1pbk9jY3Vycz0iMCIvPg0KICAgICAgICAgPC94czpzZXF1ZW5jZT4NCiAgICAgICAg IDx4czphdHRyaWJ1dGUgbmFtZT0iU2Vzc2lvbklEIiB0eXBlPSJkc2twcDpJZGVudGlmaWVyVHlw ZSINCiAgICAgICAgICAgdXNlPSJyZXF1aXJlZCIvPg0KICAgICAgIDwveHM6ZXh0ZW5zaW9uPg0K ICAgICA8L3hzOmNvbXBsZXhDb250ZW50Pg0KICAgPC94czpjb21wbGV4VHlwZT4NCg0KICAgVGhl IGNvbXBvbmVudHMgb2YgdGhpcyBtZXNzYWdlIGhhdmUgdGhlIGZvbGxvd2luZyBtZWFuaW5nOg0K DQogICBvICBWZXJzaW9uOiAoaW5oZXJpdGVkIGZyb20gdGhlIEFic3RyYWN0UmVxdWVzdFR5cGUg dHlwZSkgTVVTVCBiZSB0aGUNCiAgICAgIHNhbWUgdmVyc2lvbiBhcyBpbiB0aGUgPFNlcnZlckhl bGxvPiBtZXNzYWdlLg0KICAgbyAgPFNlc3Npb25JRD46IE1VU1QgaGF2ZSB0aGUgc2FtZSB2YWx1 ZSBhcyB0aGUgU2Vzc2lvbklEIGF0dHJpYnV0ZQ0KICAgICAgaW4gdGhlIHJlY2VpdmVkIDxTZXJ2 ZXJIZWxsbz4gbWVzc2FnZS4NCiAgIG8gIDxFbmNyeXB0ZWROb25jZT46IFRoZSBub25jZSBnZW5l cmF0ZWQgYW5kIGVuY3J5cHRlZCBieSB0aGUNCiAgICAgIGNyeXB0b2dyYXBoaWMgbW9kdWxlLiAg VGhlIGVuY3J5cHRpb24gTVVTVCBiZSBtYWRlIHVzaW5nIHRoZQ0KICAgICAgc2VsZWN0ZWQgZW5j cnlwdGlvbiBhbGdvcml0aG0gYW5kIGlkZW50aWZpZWQga2V5LCBhbmQgYXMgc3BlY2lmaWVkDQog ICAgICBpbiBTZWN0aW9uIDQuNS4NCiAgIG8gIDxBdXRoZW50aWNhdGlvbkRhdGE+OiBUaGUgYXV0 aGVudGljYXRpb24gZGF0YSB2YWx1ZSwgd2hpY2ggTUFZDQogICAgICBPUFRJT05BTExZIGJlIHRo ZSBzYW1lIGFzIHByb3ZpZGVkIGluIHRoZSA8Q2xpZW50SGVsbG8+LCBNVVNUIGJlDQogICAgICBz ZXQgYXMgc3BlY2lmaWVkIGluIFNlY3Rpb24gNC4zLjEuDQogICBvICA8RXh0ZW5zaW9ucz46IEEg bGlzdCBvZiBleHRlbnNpb25zLiAgVHdvIGV4dGVuc2lvbnMgYXJlIGRlZmluZWQNCiAgICAgIGZv ciB0aGlzIG1lc3NhZ2UgaW4gdGhpcyB2ZXJzaW9uIG9mIERTS1BQOiB0aGUgQ2xpZW50SW5mb1R5 cGUgYW5kDQogICAgICB0aGUgU2VydmVySW5mb1R5cGUgKHNlZSBTZWN0aW9uIDQuMTEpLg0KDQo0 LjEwLjYuICBUaGUgRFNLUFAgU2VydmVyJ3MgRmluYWwgUERVICgxLSwgMi0sIGFuZCA0LVBhc3Mp DQoNCiAgIFRoaXMgbWVzc2FnZSBpcyB0aGUgbGFzdCBtZXNzYWdlIG9mIHRoZSBEU0tQUCBwcm90 b2NvbCBydW4uICBJbiBhDQogICA0LXBhc3MgZXhjaGFuZ2UsIHRoZSBEU0tQUCBzZXJ2ZXIgc2Vu ZHMgdGhpcyBtZXNzYWdlIGluIHJlc3BvbnNlIHRvIGENCiAgIDxDbGllbnROb25jZT4gbWVzc2Fn ZSwgd2hlcmVhcyBpbiBhIDItcGFzcyBleGNoYW5nZSwgdGhlIERTS1BQIHNlcnZlcg0KICAgc2Vu ZHMgdGhpcyBtZXNzYWdlIGluIHJlc3BvbnNlIHRvIGEgPENsaWVudEhlbGxvPiBtZXNzYWdlLiAg SW4gYQ0KDQoNCg0KRG9oZXJ0eSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSA5LCAy MDA4ICAgICAgICAgICAgICAgW1BhZ2UgNDhdDQoNCg0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAg ICAgICAgICAgIERTS1BQICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KICAg MS1wYXNzIGV4Y2hhbmdlLCB0aGUgRFNLUFAgc2VydmVyIHNlbmRzIG9ubHkgdGhpcyBtZXNzYWdl IHRvIHRoZQ0KICAgY2xpZW50Lg0KDQogICA8eHM6ZWxlbWVudCBuYW1lPSJTZXJ2ZXJGaW5pc2hl ZCIgdHlwZT0iU2VydmVyRmluaXNoZWRQRFUiLz4NCg0KICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9 IlNlcnZlckZpbmlzaGVkUERVIj4NCiAgICAgPHhzOmFubm90YXRpb24+DQogICAgICAgPHhzOmRv Y3VtZW50YXRpb24geG1sOmxhbmc9ImVuIj4NCiAgICAgICAgIEZpbmFsIG1lc3NhZ2Ugc2VudCBm cm9tIERTS1BQIHNlcnZlciB0bw0KICAgICAgICAgRFNLUFAgY2xpZW50IGluIGEgRFNLUFAgc2Vz c2lvbi4NCiAgICAgICA8L3hzOmRvY3VtZW50YXRpb24+DQogICAgIDwveHM6YW5ub3RhdGlvbj4N CiAgICAgPHhzOmNvbXBsZXhDb250ZW50Pg0KICAgICAgIDx4czpleHRlbnNpb24gYmFzZT0iQWJz dHJhY3RSZXNwb25zZVR5cGUiPg0KICAgICAgICAgPHhzOnNlcXVlbmNlIG1pbk9jY3Vycz0iMCI+ DQogICAgICAgICAgIDx4czplbGVtZW50IG5hbWU9IktleUNvbnRhaW5lciINCiAgICAgICAgICAg ICB0eXBlPSJkc2twcDpLZXlDb250YWluZXJUeXBlIi8+DQogICAgICAgICAgIDx4czplbGVtZW50 IG5hbWU9IkV4dGVuc2lvbnMiDQogICAgICAgICAgICAgdHlwZT0iZHNrcHA6RXh0ZW5zaW9uc1R5 cGUiIG1pbk9jY3Vycz0iMCIvPg0KICAgICAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJNYWMiDQog ICAgICAgICAgICAgdHlwZT0iZHNrcHA6TWFjVHlwZSIvPg0KICAgICAgICAgPC94czpzZXF1ZW5j ZT4NCiAgICAgICA8L3hzOmV4dGVuc2lvbj4NCiAgICAgPC94czpjb21wbGV4Q29udGVudD4NCiAg IDwveHM6Y29tcGxleFR5cGU+DQoNCiAgIFRoZSBjb21wb25lbnRzIG9mIHRoaXMgbWVzc2FnZSBo YXZlIHRoZSBmb2xsb3dpbmcgbWVhbmluZzoNCg0KICAgbyAgVmVyc2lvbjogKGluaGVyaXRlZCBm cm9tIHRoZSBBYnN0cmFjdFJlc3BvbnNlVHlwZSB0eXBlKSBUaGUgRFNLUFANCiAgICAgIHZlcnNp b24gdXNlZCBpbiB0aGlzIHNlc3Npb24uDQogICBvICBTZXNzaW9uSUQ6IChpbmhlcml0ZWQgZnJv bSB0aGUgQWJzdHJhY3RSZXNwb25zZVR5cGUgdHlwZSkgVGhlDQogICAgICBwcmV2aW91c2x5IGVz dGFibGlzaGVkIGlkZW50aWZpZXIgZm9yIHRoaXMgc2Vzc2lvbi4NCiAgIG8gIFN0YXR1czogKGlu aGVyaXRlZCBmcm9tIHRoZSBBYnN0cmFjdFJlc3BvbnNlVHlwZSB0eXBlKSBSZXR1cm4gY29kZQ0K ICAgICAgZm9yIHRoZSA8U2VydmVyRmluaXNoZWQ+IG1lc3NhZ2UuICBJZiBTdGF0dXMgaXMgbm90 ICJTdWNjZXNzIiwNCiAgICAgIG9ubHkgdGhlIFN0YXR1cywgU2Vzc2lvbklELCBhbmQgVmVyc2lv biBhdHRyaWJ1dGVzIHdpbGwgYmUgcHJlc2VudA0KICAgICAgKHRoZSBwcmVzZW5jZSBvZiB0aGUg U2Vzc2lvbklEIGF0dHJpYnV0ZSBpcyBkZXBlbmRlbnQgb24gdGhlIHR5cGUNCiAgICAgIG9mIHJl cG9ydGVkIGVycm9yKTsgb3RoZXJ3aXNlLCBhbGwgdGhlIG90aGVyIGVsZW1lbnRzIE1VU1QgYmUN CiAgICAgIHByZXNlbnQgYXMgd2VsbC4gIEluIHRoaXMgbGF0dGVyIGNhc2UsIHRoZSA8U2VydmVy RmluaXNoZWQ+DQogICAgICBtZXNzYWdlIGNhbiBiZSBzZWVuIGFzIGEgIkNvbW1pdCIgbWVzc2Fn ZSwgaW5zdHJ1Y3RpbmcgdGhlDQogICAgICBjcnlwdG9ncmFwaGljIG1vZHVsZSB0byBzdG9yZSB0 aGUgZ2VuZXJhdGVkIGtleSBhbmQgYXNzb2NpYXRlIHRoZQ0KICAgICAgZ2l2ZW4ga2V5IGlkZW50 aWZpZXIgd2l0aCB0aGlzIGtleS4NCiAgIG8gIDxLZXlDb250YWluZXI+OiBUaGUga2V5IGNvbnRh aW5lciBjb250YWluaW5nIHN5bW1ldHJpYyBrZXkgdmFsdWVzDQogICAgICAoaW4gdGhlIGNhc2Ug b2YgYSAyLSBvciAxLXBhc3MgZXhjaGFuZ2UpIGFuZCBjb25maWd1cmF0aW9uIGRhdGEuDQogICAg ICBUaGUgZGVmYXVsdCBjb250YWluZXIgZm9ybWF0IGlzIGJhc2VkIG9uIHRoZSBLZXlDb250YWlu ZXJUeXBlIHR5cGUNCiAgICAgIGZyb20gUFNLQywgYXMgZGVmaW5lZCBpbiBbUFNLQ10uDQogICBv ICA8RXh0ZW5zaW9ucz46IEEgbGlzdCBvZiBleHRlbnNpb25zIGNob3NlbiBieSB0aGUgRFNLUFAg c2VydmVyLg0KICAgICAgRm9yIHRoaXMgbWVzc2FnZSwgdGhpcyB2ZXJzaW9uIG9mIERTS1BQIGRl ZmluZXMgb25lIGV4dGVuc2lvbiwgdGhlDQogICAgICBDbGllbnRJbmZvVHlwZSAoc2VlIFNlY3Rp b24gNC4xMSkuDQoNCg0KDQpEb2hlcnR5LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5 IDksIDIwMDggICAgICAgICAgICAgICBbUGFnZSA0OV0NCg0KDQpJbnRlcm5ldC1EcmFmdCAgICAg ICAgICAgICAgICAgICAgRFNLUFAgICAgICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMDcNCg0K DQogICBvICA8TWFjPjogVG8gYXZvaWQgYSBmYWxzZSAiQ29tbWl0IiBtZXNzYWdlIGNhdXNpbmcg dGhlIGNyeXB0b2dyYXBoaWMNCiAgICAgIG1vZHVsZSB0byBlbmQgdXAgaW4gYW4gaW5pdGlhbGl6 ZWQgc3RhdGUgZm9yIHdoaWNoIHRoZSBzZXJ2ZXIgZG9lcw0KICAgICAgbm90IGtub3cgdGhlIHN0 b3JlZCBrZXksIDxTZXJ2ZXJGaW5pc2hlZD4gbWVzc2FnZXMgTVVTVCBhbHdheXMgYmUNCiAgICAg IGF1dGhlbnRpY2F0ZWQgd2l0aCBhIE1BQy4gIFRoZSBNQUMgTVVTVCBiZSBtYWRlIHVzaW5nIHRo ZSBhbHJlYWR5DQogICAgICBlc3RhYmxpc2hlZCBNQUMgYWxnb3JpdGhtLiAgVGhlIE1BQyB2YWx1 ZSBNVVNUIGJlIGNvbXB1dGVkIGFzDQogICAgICBzcGVjaWZpZWQgaW4gU2VjdGlvbiA0LjguMS4y Lg0KICAgICAgV2hlbiByZWNlaXZpbmcgYSA8U2VydmVyRmluaXNoZWQ+IG1lc3NhZ2Ugd2l0aCBT dGF0dXM9IlN1Y2Nlc3MiDQogICAgICBmb3Igd2hpY2ggdGhlIE1BQyB2ZXJpZmllcywgdGhlIERT S1BQIGNsaWVudCBNVVNUIGFzc29jaWF0ZSB0aGUNCiAgICAgIGdlbmVyYXRlZCBrZXkgS19UT0tF TiB3aXRoIHRoZSBwcm92aWRlZCBrZXkgaWRlbnRpZmllciBhbmQgc3RvcmUNCiAgICAgIHRoaXMg ZGF0YSBwZXJtYW5lbnRseS4gIEFmdGVyIHRoaXMgb3BlcmF0aW9uLCBpdCBNVVNUIG5vdCBiZQ0K ICAgICAgcG9zc2libGUgdG8gb3ZlcndyaXRlIHRoZSBrZXkgdW5sZXNzIGtub3dsZWRnZSBvZiBh biBhdXRob3JpemluZw0KICAgICAga2V5IGlzIHByb3ZlbiB0aHJvdWdoIGEgTUFDIG9uIGEgbGF0 ZXIgPFNlcnZlckhlbGxvPiAoYW5kDQogICAgICA8U2VydmVyRmluaXNoZWQ+KSBtZXNzYWdlLg0K ICAgICAgVGhlIERTS1BQIGNsaWVudCBNVVNUIHZlcmlmeSB0aGUgTUFDLiAgVGhlIERTS1BQIGNs aWVudCBNVVNUDQogICAgICB0ZXJtaW5hdGUgdGhlIERTS1BQIHNlc3Npb24gaWYgdGhlIE1BQyBk b2VzIG5vdCB2ZXJpZnksIGFuZCBNVVNULA0KICAgICAgaW4gdGhpcyBjYXNlLCBhbHNvIGRlbGV0 ZSBhbnkgbm9uY2VzLCBrZXlzLCBhbmQvb3Igc2VjcmV0cw0KICAgICAgYXNzb2NpYXRlZCB3aXRo IHRoZSBmYWlsZWQgcnVuIG9mIHRoZSBEU0tQUCBwcm90b2NvbC4NCiAgICAgIFRoZSBNYWNUeXBl J3MgTWFjQWxnb3JpdGhtIGF0dHJpYnV0ZSBNVVNULCB3aGVuIHByZXNlbnQsIGlkZW50aWZ5DQog ICAgICB0aGUgbmVnb3RpYXRlZCBNQUMgYWxnb3JpdGhtLg0KDQo0LjExLiAgUHJvdG9jb2wgRXh0 ZW5zaW9ucw0KDQo0LjExLjEuICBUaGUgQ2xpZW50SW5mb1R5cGUgVHlwZQ0KDQogICBXaGVuIHBy ZXNlbnQgaW4gYSA8Q2xpZW50SGVsbG8+IG9yIGEgPENsaWVudE5vbmNlPiBtZXNzYWdlLCB0aGUN CiAgIE9QVElPTkFMIENsaWVudEluZm9UeXBlIGV4dGVuc2lvbiBjb250YWlucyBEU0tQUCBjbGll bnQtc3BlY2lmaWMNCiAgIGluZm9ybWF0aW9uLiAgRFNLUFAgc2VydmVycyBNVVNUIHN1cHBvcnQg dGhpcyBleHRlbnNpb24uICBEU0tQUA0KICAgc2VydmVycyBNVVNUIE5PVCBhdHRlbXB0IHRvIGlu dGVycHJldCB0aGUgZGF0YSBpdCBjYXJyaWVzIGFuZCwgaWYNCiAgIHJlY2VpdmVkLCBNVVNUIGlu Y2x1ZGUgaXQgdW5tb2RpZmllZCBpbiB0aGUgY3VycmVudCBwcm90b2NvbCBydW4ncw0KICAgbmV4 dCBzZXJ2ZXIgcmVzcG9uc2UuICBTZXJ2ZXJzIG5lZWQgbm90IHJldGFpbiB0aGUgQ2xpZW50SW5m b1R5cGUncw0KICAgZGF0YSBhZnRlciB0aGF0IHJlc3BvbnNlIGhhcyBiZWVuIGdlbmVyYXRlZC4N Cg0KICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9IkNsaWVudEluZm9UeXBlIj4NCiAgICAgPHhzOmNv bXBsZXhDb250ZW50Pg0KICAgICAgIDx4czpleHRlbnNpb24gYmFzZT0iQWJzdHJhY3RFeHRlbnNp b25UeXBlIj4NCiAgICAgICAgIDx4czpzZXF1ZW5jZT4NCiAgICAgICAgICAgPHhzOmVsZW1lbnQg bmFtZT0iRGF0YSINCiAgICAgICAgICAgICB0eXBlPSJ4czpiYXNlNjRCaW5hcnkiLz4NCiAgICAg ICAgIDwveHM6c2VxdWVuY2U+DQogICAgICAgPC94czpleHRlbnNpb24+DQogICAgIDwveHM6Y29t cGxleENvbnRlbnQ+DQogICA8L3hzOmNvbXBsZXhUeXBlPg0KDQo0LjExLjIuICBUaGUgU2VydmVy SW5mb1R5cGUgVHlwZQ0KDQogICBXaGVuIHByZXNlbnQsIHRoZSBPUFRJT05BTCBTZXJ2ZXJJbmZv VHlwZSBleHRlbnNpb24gY29udGFpbnMgRFNLUFANCiAgIHNlcnZlci1zcGVjaWZpYyBpbmZvcm1h dGlvbi4gIFRoaXMgZXh0ZW5zaW9uIGlzIG9ubHkgdmFsaWQgaW4NCiAgIDxTZXJ2ZXJIZWxsbz4g bWVzc2FnZXMgZm9yIHdoaWNoIFN0YXR1cyA9ICJDb250aW51ZSIuICBEU0tQUCBjbGllbnRzDQoN Cg0KDQpEb2hlcnR5LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDksIDIwMDggICAg ICAgICAgICAgICBbUGFnZSA1MF0NCg0KDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAg ICAgRFNLUFAgICAgICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQogICBNVVNUIHN1 cHBvcnQgdGhpcyBleHRlbnNpb24uICBEU0tQUCBjbGllbnRzIE1VU1QgTk9UIGF0dGVtcHQgdG8N CiAgIGludGVycHJldCB0aGUgZGF0YSBpdCBjYXJyaWVzIGFuZCwgaWYgcmVjZWl2ZWQsIE1VU1Qg aW5jbHVkZSBpdA0KICAgdW5tb2RpZmllZCBpbiB0aGUgY3VycmVudCBwcm90b2NvbCBydW4ncyBu ZXh0IGNsaWVudCByZXF1ZXN0IChpLmUuLA0KICAgdGhlIDxDbGllbnROb25jZT4gbWVzc2FnZSku ICBEU0tQUCBjbGllbnRzIG5lZWQgbm90IHJldGFpbiB0aGUNCiAgIFNlcnZlckluZm9UeXBlJ3Mg ZGF0YSBhZnRlciB0aGF0IHJlcXVlc3QgaGFzIGJlZW4gZ2VuZXJhdGVkLiAgVGhpcw0KICAgZXh0 ZW5zaW9uIE1BWSBiZSB1c2VkLCBlLmcuLCBmb3Igc3RhdGUgbWFuYWdlbWVudCBpbiB0aGUgRFNL UFANCiAgIHNlcnZlci4NCg0KICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9IlNlcnZlckluZm9UeXBl Ij4NCiAgICAgPHhzOmNvbXBsZXhDb250ZW50Pg0KICAgICAgIDx4czpleHRlbnNpb24gYmFzZT0i QWJzdHJhY3RFeHRlbnNpb25UeXBlIj4NCiAgICAgICAgIDx4czpzZXF1ZW5jZT4NCiAgICAgICAg ICAgPHhzOmVsZW1lbnQgbmFtZT0iRGF0YSINCiAgICAgICAgICAgICB0eXBlPSJ4czpiYXNlNjRC aW5hcnkiLz4NCiAgICAgICAgIDwveHM6c2VxdWVuY2U+DQogICAgICAgPC94czpleHRlbnNpb24+ DQogICAgIDwveHM6Y29tcGxleENvbnRlbnQ+DQogICA8L3hzOmNvbXBsZXhUeXBlPg0KDQo0LjEx LjMuICBUaGUgS2V5SW5pdGlhbGl6YXRpb25EYXRhVHlwZSBUeXBlDQoNCiAgIFRoaXMgZXh0ZW5z aW9uIGlzIHVzZWQgZm9yIDItIGFuZCAxLXBhc3MgRFNLUFAgZXhjaGFuZ2U7IGl0IGNhcnJpZXMN CiAgIGFuIGlkZW50aWZpZXIgZm9yIHRoZSBzZWxlY3RlZCBrZXkgaW5pdGlhbGl6YXRpb24gbWV0 aG9kIGFzIHdlbGwgYXMNCiAgIGtleSBpbml0aWFsaXphdGlvbiBtZXRob2QtZGVwZW5kZW50IHBh eWxvYWQgZGF0YS4NCg0KICAgU2VydmVycyBNQVkgaW5jbHVkZSB0aGlzIGV4dGVuc2lvbiBpbiBh IDxTZXJ2ZXJGaW5pc2hlZD4gbWVzc2FnZSB0aGF0DQogICBpcyBiZWluZyBzZW50IGluIHJlc3Bv bnNlIHRvIGEgcmVjZWl2ZWQgPENsaWVudEhlbGxvPiBtZXNzYWdlIGlmIGFuZA0KICAgb25seSBp ZiB0aGF0IDxDbGllbnRIZWxsbz4gbWVzc2FnZSBzZWxlY3RlZCBUd29QYXNzU3VwcG9ydCBhcyB0 aGUNCiAgIFByb3RvY29sVmFyaWFudFR5cGUgYW5kIHRoZSBjbGllbnQgaW5kaWNhdGVkIHN1cHBv cnQgZm9yIHRoZSBzZWxlY3RlZA0KICAga2V5IGluaXRpYWxpemF0aW9uIG1ldGhvZC4gIFNlcnZl cnMgTVVTVCBpbmNsdWRlIHRoaXMgZXh0ZW5zaW9uIGluIGENCiAgIDxTZXJ2ZXJGaW5pc2hlZD4g bWVzc2FnZSB0aGF0IGlzIHNlbnQgYXMgcGFydCBvZiBhIDEtcGFzcyBEU0tQUC4NCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQpEb2hlcnR5LCBldCBhbC4gICAgICAgICAg RXhwaXJlcyBKYW51YXJ5IDksIDIwMDggICAgICAgICAgICAgICBbUGFnZSA1MV0NCg0KDQpJbnRl cm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgRFNLUFAgICAgICAgICAgICAgICAgICAgICAg ICBKdWx5IDIwMDcNCg0KDQogICA8eHM6Y29tcGxleFR5cGUgbmFtZT0iS2V5SW5pdGlhbGl6YXRp b25EYXRhVHlwZSI+DQogICAgIDx4czphbm5vdGF0aW9uPg0KICAgICAgIDx4czpkb2N1bWVudGF0 aW9uIHhtbDpsYW5nPSJlbiI+DQogICAgICAgICBUaGlzIGV4dGVuc2lvbiBpcyBvbmx5IHZhbGlk IGluIFNlcnZlckZpbmlzaGVkIFBEVXMuIEl0DQogICAgICAgICBjb250YWlucyBrZXkgaW5pdGlh bGl6YXRpb24gZGF0YSBhbmQgaXRzIHByZXNlbmNlIHJlc3VsdHMgaW4gYQ0KICAgICAgICAgdHdv LXBhc3MgKG9yIG9uZS1wYXNzLCBpZiBubyBDbGllbnRIZWxsbyB3YXMgc2VudCkgRFNLUFANCiAg ICAgICAgIGV4Y2hhbmdlLg0KICAgICAgIDwveHM6ZG9jdW1lbnRhdGlvbj4NCiAgICAgPC94czph bm5vdGF0aW9uPg0KICAgICA8eHM6Y29tcGxleENvbnRlbnQ+DQogICAgICAgPHhzOmV4dGVuc2lv biBiYXNlPSJkc2twcDpBYnN0cmFjdEV4dGVuc2lvblR5cGUiPg0KICAgICAgICAgPHhzOnNlcXVl bmNlPg0KICAgICAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJLZXlJbml0aWFsaXphdGlvbk1ldGhv ZCIgdHlwZT0ieHM6YW55VVJJIi8+DQogICAgICAgICAgIDx4czplbGVtZW50IG5hbWU9IlBheWxv YWQiLz4NCiAgICAgICAgIDwveHM6c2VxdWVuY2U+DQogICAgICAgPC94czpleHRlbnNpb24+DQog ICAgIDwveHM6Y29tcGxleENvbnRlbnQ+DQogICA8L3hzOmNvbXBsZXhUeXBlPg0KDQogICBUaGUg ZWxlbWVudHMgb2YgdGhpcyB0eXBlIGhhdmUgdGhlIGZvbGxvd2luZyBtZWFuaW5nOg0KDQogICBv ICA8S2V5SW5pdGlhbGl6YXRpb25NZXRob2Q+OiBBIHR3by1wYXNzIGtleSBpbml0aWFsaXphdGlv biBtZXRob2QNCiAgICAgIHN1cHBvcnRlZCBieSB0aGUgRFNLUFAgY2xpZW50Lg0KICAgbyAgPFBh eWxvYWQ+OiBBIHBheWxvYWQgYXNzb2NpYXRlZCB3aXRoIHRoZSBrZXkgaW5pdGlhbGl6YXRpb24N CiAgICAgIG1ldGhvZC4gIFNpbmNlIHRoZSBzeW50YXggaXMgYSBzaG9ydGhhbmQgZm9yIDx4czpl bGVtZW50DQogICAgICBuYW1lPSJQYXlsb2FkIiB0eXBlPSJ4czphbnlUeXBlIi8+LCBhbnkgd2Vs bC1mb3JtZWQgcGF5bG9hZHMgY2FuDQogICAgICBiZSBjYXJyaWVkIGluIHRoaXMgZWxlbWVudC4N Cg0KDQo1LiAgUHJvdG9jb2wgQmluZGluZ3MNCg0KNS4xLiAgR2VuZXJhbCBSZXF1aXJlbWVudHMN Cg0KICAgRFNLUFAgYXNzdW1lcyBhIHJlbGlhYmxlIHRyYW5zcG9ydC4NCg0KNS4yLiAgSFRUUC8x LjEgQmluZGluZyBmb3IgRFNLUFANCg0KNS4yLjEuICBJbnRyb2R1Y3Rpb24NCg0KICAgVGhpcyBz ZWN0aW9uIHByZXNlbnRzIGEgYmluZGluZyBvZiB0aGUgcHJldmlvdXMgbWVzc2FnZXMgdG8gSFRU UC8xLjENCiAgIFtSRkMyNjE2XS4gIE5vdGUgdGhhdCB0aGUgSFRUUCBjbGllbnQgbm9ybWFsbHkg d2lsbCBiZSBkaWZmZXJlbnQgZnJvbQ0KICAgdGhlIERTS1BQIGNsaWVudCwgaS5lLiwgdGhlIEhU VFAgY2xpZW50IHdpbGwgb25seSBleGlzdCB0byAicHJveHkiDQogICBEU0tQUCBtZXNzYWdlcyBm cm9tIHRoZSBEU0tQUCBjbGllbnQgdG8gdGhlIERTS1BQIHNlcnZlci4gIExpa2V3aXNlLA0KICAg b24gdGhlIEhUVFAgc2VydmVyIHNpZGUsIHRoZSBEU0tQUCBzZXJ2ZXIgTUFZIHJlY2VpdmUgRFNL UFAgUERVcyBmcm9tDQogICBhICJmcm9udC1lbmQiIEhUVFAgc2VydmVyLg0KDQoNCg0KDQoNCg0K RG9oZXJ0eSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAgICAgICAg ICAgICAgW1BhZ2UgNTJdDQoNCg0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgIERT S1BQICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KNS4yLjIuICBJZGVudGlm aWNhdGlvbiBvZiBEU0tQUCBNZXNzYWdlcw0KDQogICBUaGUgTUlNRS10eXBlIGZvciBhbGwgRFNL UFAgbWVzc2FnZXMgTVVTVCBiZQ0KDQogICBhcHBsaWNhdGlvbi92bmQuaWV0Zi5rZXlwcm92LmRz a3BwK3htbA0KDQo1LjIuMy4gIEhUVFAgSGVhZGVycw0KDQogICBIVFRQIHByb3hpZXMgTVVTVCBO T1QgY2FjaGUgcmVzcG9uc2VzIGNhcnJ5aW5nIERTS1BQIG1lc3NhZ2VzLiAgRm9yDQogICB0aGlz IHJlYXNvbiwgdGhlIGZvbGxvd2luZyBob2xkczoNCiAgIG8gIFdoZW4gdXNpbmcgSFRUUC8xLjEs IHJlcXVlc3RlcnMgU0hPVUxEOg0KICAgICAgKiAgSW5jbHVkZSBhIENhY2hlLUNvbnRyb2wgaGVh ZGVyIGZpZWxkIHNldCB0byAibm8tY2FjaGUsIG5vLQ0KICAgICAgICAgc3RvcmUiLg0KICAgICAg KiAgSW5jbHVkZSBhIFByYWdtYSBoZWFkZXIgZmllbGQgc2V0IHRvICJuby1jYWNoZSIuDQogICBv ICBXaGVuIHVzaW5nIEhUVFAvMS4xLCByZXNwb25kZXJzIFNIT1VMRDoNCiAgICAgICogIEluY2x1 ZGUgYSBDYWNoZS1Db250cm9sIGhlYWRlciBmaWVsZCBzZXQgdG8gIm5vLWNhY2hlLCBuby1tdXN0 LQ0KICAgICAgICAgcmV2YWxpZGF0ZSwgcHJpdmF0ZSIuDQogICAgICAqICBJbmNsdWRlIGEgUHJh Z21hIGhlYWRlciBmaWVsZCBzZXQgdG8gIm5vLWNhY2hlIi4NCiAgICAgICogIE5PVCBpbmNsdWRl IGEgVmFsaWRhdG9yLCBzdWNoIGFzIGEgTGFzdC1Nb2RpZmllZCBvciBFVGFnDQogICAgICAgICBo ZWFkZXIuDQogICBUaGVyZSBhcmUgbm8gb3RoZXIgcmVzdHJpY3Rpb25zIG9uIEhUVFAgaGVhZGVy cywgYmVzaWRlcyB0aGUNCiAgIHJlcXVpcmVtZW50IHRvIHNldCB0aGUgQ29udGVudC1UeXBlIGhl YWRlciB2YWx1ZSBhY2NvcmRpbmcgdG8NCiAgIFNlY3Rpb24gNS4yLjIuDQoNCjUuMi40LiAgSFRU UCBPcGVyYXRpb25zDQoNCiAgIFBlcnNpc3RlbnQgY29ubmVjdGlvbnMgYXMgZGVmaW5lZCBpbiBI VFRQLzEuMSBhcmUgYXNzdW1lZCBidXQgbm90DQogICByZXF1aXJlZC4gIERTS1BQIHJlcXVlc3Rz IGFyZSBtYXBwZWQgdG8gSFRUUCBQT1NUIG9wZXJhdGlvbnMuICBEU0tQUA0KICAgcmVzcG9uc2Vz IGFyZSBtYXBwZWQgdG8gSFRUUCByZXNwb25zZXMuDQoNCjUuMi41LiAgSFRUUCBTdGF0dXMgQ29k ZXMNCg0KICAgQSBEU0tQUCBIVFRQIHJlc3BvbmRlciB0aGF0IHJlZnVzZXMgdG8gcGVyZm9ybSBh IG1lc3NhZ2UgZXhjaGFuZ2UNCiAgIHdpdGggYSBEU0tQUCBIVFRQIHJlcXVlc3RlciBTSE9VTEQg cmV0dXJuIGEgNDAzIChGb3JiaWRkZW4pIHJlc3BvbnNlLg0KICAgSW4gdGhpcyBjYXNlLCB0aGUg Y29udGVudCBvZiB0aGUgSFRUUCBib2R5IGlzIG5vdCBzaWduaWZpY2FudC4gIEluDQogICB0aGUg Y2FzZSBvZiBhbiBIVFRQIGVycm9yIHdoaWxlIHByb2Nlc3NpbmcgYSBEU0tQUCByZXF1ZXN0LCB0 aGUgSFRUUA0KICAgc2VydmVyIE1VU1QgcmV0dXJuIGEgNTAwIChJbnRlcm5hbCBTZXJ2ZXIgRXJy b3IpIHJlc3BvbnNlLiAgVGhpcyB0eXBlDQogICBvZiBlcnJvciBTSE9VTEQgYmUgcmV0dXJuZWQg Zm9yIEhUVFAtcmVsYXRlZCBlcnJvcnMgZGV0ZWN0ZWQgYmVmb3JlDQogICBjb250cm9sIGlzIHBh c3NlZCB0byB0aGUgRFNLUFAgcHJvY2Vzc29yLCBvciB3aGVuIHRoZSBEU0tQUCBwcm9jZXNzb3IN CiAgIHJlcG9ydHMgYW4gaW50ZXJuYWwgZXJyb3IgKGZvciBleGFtcGxlLCB0aGUgRFNLUFAgWE1M IG5hbWVzcGFjZSBpcw0KICAgaW5jb3JyZWN0LCBvciB0aGUgRFNLUFAgc2NoZW1hIGNhbm5vdCBi ZSBsb2NhdGVkKS4gIElmIHRoZSB0eXBlIG9mIGENCiAgIERTS1BQIHJlcXVlc3QgY2Fubm90IGJl IGRldGVybWluZWQsIHRoZSBEU0tQUCByZXNwb25kZXIgTVVTVCByZXR1cm4gYQ0KICAgNDAwIChC YWQgcmVxdWVzdCkgcmVzcG9uc2UuDQoNCiAgIEluIHRoZXNlIGNhc2VzIChpLmUuLCB3aGVuIHRo ZSBIVFRQIHJlc3BvbnNlIGNvZGUgaXMgNHh4IG9yIDV4eCksIHRoZQ0KICAgY29udGVudCBvZiB0 aGUgSFRUUCBib2R5IGlzIG5vdCBzaWduaWZpY2FudC4NCg0KICAgUmVkaXJlY3Rpb24gc3RhdHVz IGNvZGVzICgzeHgpIGFwcGx5IGFzIHVzdWFsLg0KDQoNCg0KRG9oZXJ0eSwgZXQgYWwuICAgICAg ICAgIEV4cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgNTNdDQoNCg0K SW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgIERTS1BQICAgICAgICAgICAgICAgICAg ICAgICAgSnVseSAyMDA3DQoNCg0KICAgV2hlbmV2ZXIgdGhlIEhUVFAgUE9TVCBpcyBzdWNjZXNz ZnVsbHkgaW52b2tlZCwgdGhlIERTS1BQIEhUVFANCiAgIHJlc3BvbmRlciBNVVNUIHVzZSB0aGUg MjAwIHN0YXR1cyBjb2RlIGFuZCBwcm92aWRlIGEgc3VpdGFibGUgRFNLUFANCiAgIG1lc3NhZ2Ug KHBvc3NpYmx5IHdpdGggRFNLUFAgZXJyb3IgaW5mb3JtYXRpb24gaW5jbHVkZWQpIGluIHRoZSBI VFRQDQogICBib2R5Lg0KDQo1LjIuNi4gIEhUVFAgQXV0aGVudGljYXRpb24NCg0KICAgTm8gc3Vw cG9ydCBmb3IgSFRUUC8xLjEgYXV0aGVudGljYXRpb24gaXMgYXNzdW1lZC4NCg0KNS4yLjcuICBJ bml0aWFsaXphdGlvbiBvZiBEU0tQUA0KDQogICBUaGUgRFNLUFAgc2VydmVyIE1BWSBpbml0aWFs aXplIHRoZSBEU0tQUCBwcm90b2NvbCBieSBzZW5kaW5nIGFuIEhUVFANCiAgIHJlc3BvbnNlIHdp dGggQ29udGVudC1UeXBlIHNldCBhY2NvcmRpbmcgdG8gU2VjdGlvbiA1LjIuMiBhbmQNCiAgIHJl c3BvbnNlIGNvZGUgc2V0IHRvIDIwMCAoT0spLiAgVGhpcyBtZXNzYWdlIE1BWSwgZS5nLiwgYmUg c2VudCBpbg0KICAgcmVzcG9uc2UgdG8gYSB1c2VyIHJlcXVlc3Rpbmcga2V5IGluaXRpYWxpemF0 aW9uIGluIGEgYnJvd3NpbmcNCiAgIHNlc3Npb24uICBUaGUgaW5pdGlhbGl6YXRpb24gbWVzc2Fn ZSBNQVkgY2FycnkgZGF0YSBpbiBpdHMgYm9keS4gIElmDQogICB0aGlzIGlzIHRoZSBjYXNlLCB0 aGUgZGF0YSBNVVNUIGJlIGEgdmFsaWQgaW5zdGFuY2Ugb2YgYQ0KICAgPERTS1BQVHJpZ2dlcj4g ZWxlbWVudC4NCg0KNS4yLjguICBFeGFtcGxlIE1lc3NhZ2VzDQoNCiAgIGEuICBJbml0aWFsaXph dGlvbiBmcm9tIERTS1BQIHNlcnZlcjoNCiAgICAgICBIVFRQLzEuMSAyMDAgT0sNCg0KICAgICAg IENhY2hlLUNvbnRyb2w6IG5vLXN0b3JlDQogICAgICAgQ29udGVudC1UeXBlOiBhcHBsaWNhdGlv bi92bmQuaWV0Zi5rZXlwcm92LmRza3BwK3htbA0KICAgICAgIENvbnRlbnQtTGVuZ3RoOiA8c29t ZSB2YWx1ZT4NCg0KICAgICAgIERTS1BQIGluaXRpYWxpemF0aW9uIGRhdGEgaW4gWE1MIGZvcm0u Li4NCg0KICAgYi4gIEluaXRpYWwgcmVxdWVzdCBmcm9tIERTS1BQIGNsaWVudDoNCiAgICAgICBQ T1NUIGh0dHA6Ly9leGFtcGxlLmNvbS9jZ2ktYmluL0RTS1BQLXNlcnZlciBIVFRQLzEuMQ0KICAg ICAgIENhY2hlLUNvbnRyb2w6IG5vLXN0b3JlDQogICAgICAgUHJhZ21hOiBuby1jYWNoZQ0KICAg ICAgIEhvc3Q6IGV4YW1wbGUuY29tDQogICAgICAgQ29udGVudC1UeXBlOiBhcHBsaWNhdGlvbi92 bmQuaWV0Zi5rZXlwcm92LmRza3BwK3htbA0KICAgICAgIENvbnRlbnQtTGVuZ3RoOiA8c29tZSB2 YWx1ZT4NCg0KICAgICAgIERTS1BQIGRhdGEgaW4gWE1MIGZvcm0gKHN1cHBvcnRlZCB2ZXJzaW9u LCBzdXBwb3J0ZWQNCiAgICAgICBhbGdvcml0aG1zLi4uKQ0KDQogICBjLiAgSW5pdGlhbCByZXNw b25zZSBmcm9tIERTS1BQIHNlcnZlcjoNCiAgICAgICBIVFRQLzEuMSAyMDAgT0sNCg0KICAgICAg IENhY2hlLUNvbnRyb2w6IG5vLXN0b3JlDQogICAgICAgQ29udGVudC1UeXBlOiBhcHBsaWNhdGlv bi92bmQuaWV0Zi5rZXlwcm92LmRza3BwK3htbA0KICAgICAgIENvbnRlbnQtTGVuZ3RoOiA8c29t ZSB2YWx1ZT4NCg0KDQoNCg0KRG9oZXJ0eSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFy eSA5LCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgNTRdDQoNCg0KSW50ZXJuZXQtRHJhZnQgICAg ICAgICAgICAgICAgICAgIERTS1BQICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDA3DQoN Cg0KICAgICAgIERTS1BQIGRhdGEgaW4gWE1MIGZvcm0gKHNlcnZlciByYW5kb20gbm9uY2UsIHNl cnZlciBwdWJsaWMga2V5LA0KICAgICAgIC4uLikNCg0KDQo2LiAgRFNLUFAgU2NoZW1hDQoNCg0K IDw/eG1sIHZlcnNpb249IjEuMCIgZW5jb2Rpbmc9IlVURi04Ij8+DQoNCiA8eHM6c2NoZW1hDQog ICB0YXJnZXROYW1lc3BhY2U9InVybjppZXRmOnBhcmFtczp4bWw6bnM6a2V5cHJvdjpwcm90b2Nv bCINCiAgIHhtbG5zOmRza3BwPSJ1cm46aWV0ZjpwYXJhbXM6eG1sOm5zOmtleXByb3Y6cHJvdG9j b2wiDQogICB4bWxuczpwc2tjPSJ1cm46aWV0ZjpwYXJhbXM6eG1sOm5zOmtleXByb3Y6cHJvdG9j b2wiDQogICB4bWxuczp4cz0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEiDQogICB4 bWxuczpkcz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyI+DQoNCiAgIDx4czpp bXBvcnQgbmFtZXNwYWNlPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjIg0KICAg ICBzY2hlbWFMb2NhdGlvbj0iaHR0cDovL3d3dy53My5vcmcvVFIvMjAwMi8NCiAgICAgUkVDLXht bGRzaWctY29yZS0yMDAyMDIxMi94bWxkc2lnLWNvcmUtc2NoZW1hLnhzZCIvPg0KDQogICA8IS0t IEJhc2ljIHR5cGVzIC0tPg0KICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9IkFic3RyYWN0UmVxdWVz dFR5cGUiIGFic3RyYWN0PSJ0cnVlIj4NCiAgICAgPHhzOmF0dHJpYnV0ZSBuYW1lPSJWZXJzaW9u IiB0eXBlPSJWZXJzaW9uVHlwZSIgdXNlPSJyZXF1aXJlZCIvPg0KICAgPC94czpjb21wbGV4VHlw ZT4NCg0KICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9IkFic3RyYWN0UmVzcG9uc2VUeXBlIiBhYnN0 cmFjdD0idHJ1ZSI+DQogICAgIDx4czphdHRyaWJ1dGUgbmFtZT0iVmVyc2lvbiIgdHlwZT0iVmVy c2lvblR5cGUiIHVzZT0icmVxdWlyZWQiLz4NCiAgICAgPHhzOmF0dHJpYnV0ZSBuYW1lPSJTZXNz aW9uSUQiIHR5cGU9IklkZW50aWZpZXJUeXBlIi8+DQogICAgIDx4czphdHRyaWJ1dGUgbmFtZT0i U3RhdHVzIiB0eXBlPSJTdGF0dXNDb2RlIiB1c2U9InJlcXVpcmVkIi8+DQogICA8L3hzOmNvbXBs ZXhUeXBlPg0KDQogICA8eHM6c2ltcGxlVHlwZSBuYW1lPSJWZXJzaW9uVHlwZSI+DQogICAgIDx4 czpyZXN0cmljdGlvbiBiYXNlPSJ4czpzdHJpbmciPg0KICAgICAgIDx4czpwYXR0ZXJuIHZhbHVl PSJcZHsxLDJ9XC5cZHsxLDN9Ii8+DQogICAgIDwveHM6cmVzdHJpY3Rpb24+DQogICA8L3hzOnNp bXBsZVR5cGU+DQoNCiAgIDx4czpzaW1wbGVUeXBlIG5hbWU9IklkZW50aWZpZXJUeXBlIj4NCiAg ICAgPHhzOnJlc3RyaWN0aW9uIGJhc2U9InhzOnN0cmluZyI+DQogICAgICAgPHhzOm1heExlbmd0 aCB2YWx1ZT0iMTI4Ii8+DQogICAgIDwveHM6cmVzdHJpY3Rpb24+DQogICA8L3hzOnNpbXBsZVR5 cGU+DQoNCiAgIDx4czpzaW1wbGVUeXBlIG5hbWU9IlN0YXR1c0NvZGUiPg0KICAgICA8eHM6cmVz dHJpY3Rpb24gYmFzZT0ieHM6c3RyaW5nIj4NCiAgICAgICA8eHM6ZW51bWVyYXRpb24gdmFsdWU9 IkNvbnRpbnVlIi8+DQogICAgICAgPHhzOmVudW1lcmF0aW9uIHZhbHVlPSJTdWNjZXNzIi8+DQog ICAgICAgPHhzOmVudW1lcmF0aW9uIHZhbHVlPSJBYm9ydCIvPg0KDQoNCg0KRG9oZXJ0eSwgZXQg YWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2Ug NTVdDQoNCg0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgIERTS1BQICAgICAgICAg ICAgICAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KICAgICAgIDx4czplbnVtZXJhdGlvbiB2YWx1 ZT0iQWNjZXNzRGVuaWVkIi8+DQogICAgICAgPHhzOmVudW1lcmF0aW9uIHZhbHVlPSJNYWxmb3Jt ZWRSZXF1ZXN0Ii8+DQogICAgICAgPHhzOmVudW1lcmF0aW9uIHZhbHVlPSJVbmtub3duUmVxdWVz dCIvPg0KICAgICAgIDx4czplbnVtZXJhdGlvbiB2YWx1ZT0iVW5rbm93bkNyaXRpY2FsRXh0ZW5z aW9uIi8+DQogICAgICAgPHhzOmVudW1lcmF0aW9uIHZhbHVlPSJVbnN1cHBvcnRlZFZlcnNpb24i Lz4NCiAgICAgICA8eHM6ZW51bWVyYXRpb24gdmFsdWU9Ik5vU3VwcG9ydGVkS2V5VHlwZXMiLz4N CiAgICAgICA8eHM6ZW51bWVyYXRpb24gdmFsdWU9Ik5vU3VwcG9ydGVkRW5jcnlwdGlvbkFsZ29y aXRobXMiLz4NCiAgICAgICA8eHM6ZW51bWVyYXRpb24gdmFsdWU9Ik5vU3VwcG9ydGVkTUFDQWxn b3JpdGhtcyIvPg0KICAgICAgIDx4czplbnVtZXJhdGlvbiB2YWx1ZT0iTm9Qcm90b2NvbFZhcmlh bnRzIi8+DQogICAgICAgPHhzOmVudW1lcmF0aW9uIHZhbHVlPSJOb1N1cHBvcnRlZEtleUNvbnRh aW5lcnMiLz4NCiAgICAgICA8eHM6ZW51bWVyYXRpb24gdmFsdWU9IkF1dGhlbnRpY2F0aW9uRGF0 YUludmFsaWQiLz4NCiAgICAgICA8eHM6ZW51bWVyYXRpb24gdmFsdWU9IkluaXRpYWxpemF0aW9u RmFpbGVkIi8+DQogICAgIDwveHM6cmVzdHJpY3Rpb24+DQogICA8L3hzOnNpbXBsZVR5cGU+DQoN CiAgIDx4czpjb21wbGV4VHlwZSBuYW1lPSJEZXZpY2VJZGVudGlmaWVyRGF0YVR5cGUiPg0KICAg ICA8eHM6Y2hvaWNlPg0KICAgICAgIDx4czplbGVtZW50IG5hbWU9IkRldmljZUlEIiB0eXBlPSJw c2tjOkRldmljZUlkVHlwZSIvPg0KICAgICAgIDx4czphbnkgbmFtZXNwYWNlPSIjI290aGVyIiBw cm9jZXNzQ29udGVudHM9InN0cmljdCIvPg0KICAgICA8L3hzOmNob2ljZT4NCiAgIDwveHM6Y29t cGxleFR5cGU+DQoNCiAgIDx4czpzaW1wbGVUeXBlIG5hbWU9IlBsYXRmb3JtVHlwZSI+DQogICAg IDx4czpyZXN0cmljdGlvbiBiYXNlPSJ4czpzdHJpbmciPg0KICAgICAgIDx4czplbnVtZXJhdGlv biB2YWx1ZT0iSGFyZHdhcmUiLz4NCiAgICAgICA8eHM6ZW51bWVyYXRpb24gdmFsdWU9IlNvZnR3 YXJlIi8+DQogICAgICAgPHhzOmVudW1lcmF0aW9uIHZhbHVlPSJVbnNwZWNpZmllZCIvPg0KICAg ICA8L3hzOnJlc3RyaWN0aW9uPg0KICAgPC94czpzaW1wbGVUeXBlPg0KDQogICA8eHM6Y29tcGxl eFR5cGUgbmFtZT0iVG9rZW5QbGF0Zm9ybUluZm9UeXBlIj4NCiAgICAgPHhzOmF0dHJpYnV0ZSBu YW1lPSJLZXlMb2NhdGlvbiIgdHlwZT0iZHNrcHA6UGxhdGZvcm1UeXBlIi8+DQogICAgIDx4czph dHRyaWJ1dGUgbmFtZT0iQWxnb3JpdGhtTG9jYXRpb24iIHR5cGU9ImRza3BwOlBsYXRmb3JtVHlw ZSIvPg0KICAgPC94czpjb21wbGV4VHlwZT4NCg0KICAgPHhzOnNpbXBsZVR5cGUgbmFtZT0iTm9u Y2VUeXBlIj4NCiAgICAgPHhzOnJlc3RyaWN0aW9uIGJhc2U9InhzOmJhc2U2NEJpbmFyeSI+DQog ICAgICAgPHhzOm1pbkxlbmd0aCB2YWx1ZT0iMTYiLz4NCiAgICAgPC94czpyZXN0cmljdGlvbj4N CiAgIDwveHM6c2ltcGxlVHlwZT4NCg0KICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9IkFsZ29yaXRo bXNUeXBlIj4NCiAgICAgPHhzOnNlcXVlbmNlIG1heE9jY3Vycz0idW5ib3VuZGVkIj4NCiAgICAg ICA8eHM6ZWxlbWVudCBuYW1lPSJBbGdvcml0aG0iIHR5cGU9IkFsZ29yaXRobVR5cGUiLz4NCiAg ICAgPC94czpzZXF1ZW5jZT4NCiAgIDwveHM6Y29tcGxleFR5cGU+DQoNCiAgIDx4czpzaW1wbGVU eXBlIG5hbWU9IkFsZ29yaXRobVR5cGUiPg0KDQoNCg0KRG9oZXJ0eSwgZXQgYWwuICAgICAgICAg IEV4cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgNTZdDQoNCg0KSW50 ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgIERTS1BQICAgICAgICAgICAgICAgICAgICAg ICAgSnVseSAyMDA3DQoNCg0KICAgICA8eHM6cmVzdHJpY3Rpb24gYmFzZT0ieHM6YW55VVJJIi8+ DQogICA8L3hzOnNpbXBsZVR5cGU+DQoNCiAgIDx4czpjb21wbGV4VHlwZSBuYW1lPSJQcm90b2Nv bFZhcmlhbnRzVHlwZSI+DQogICAgIDx4czpzZXF1ZW5jZT4NCiAgICAgICA8eHM6ZWxlbWVudCBu YW1lPSJGb3VyUGFzcyIgbWluT2NjdXJzPSIwIi8+DQogICAgICAgPHhzOmVsZW1lbnQgbmFtZT0i VHdvUGFzcyIgdHlwZT0iZHNrcHA6VHdvUGFzc1N1cHBvcnRUeXBlIg0KICAgICAgICAgbWluT2Nj dXJzPSIwIi8+DQogICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iT25lUGFzcyIgbWluT2NjdXJzPSIw Ii8+DQogICAgIDwveHM6c2VxdWVuY2U+DQogICA8L3hzOmNvbXBsZXhUeXBlPg0KDQogICA8eHM6 Y29tcGxleFR5cGUgbmFtZT0iVHdvUGFzc1N1cHBvcnRUeXBlIj4NCiAgICAgPHhzOnNlcXVlbmNl IG1heE9jY3Vycz0idW5ib3VuZGVkIj4NCiAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJTdXBwb3J0 ZWRLZXlJbml0aWFsaXphdGlvbk1ldGhvZCINCiAgICAgICAgIHR5cGU9InhzOmFueVVSSSIvPg0K ICAgICAgIDx4czplbGVtZW50IG5hbWU9IlBheWxvYWQiIG1pbk9jY3Vycz0iMCIvPg0KICAgICA8 L3hzOnNlcXVlbmNlPg0KICAgPC94czpjb21wbGV4VHlwZT4NCg0KICAgPHhzOmNvbXBsZXhUeXBl IG5hbWU9IktleUNvbnRhaW5lcnNGb3JtYXRUeXBlIj4NCiAgICAgPHhzOnNlcXVlbmNlIG1heE9j Y3Vycz0idW5ib3VuZGVkIj4NCiAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJLZXlDb250YWluZXJG b3JtYXQiDQogICAgICAgICB0eXBlPSJkc2twcDpLZXlDb250YWluZXJGb3JtYXRUeXBlIi8+DQog ICAgIDwveHM6c2VxdWVuY2U+DQogICA8L3hzOmNvbXBsZXhUeXBlPg0KDQogICA8eHM6c2ltcGxl VHlwZSBuYW1lPSJLZXlDb250YWluZXJGb3JtYXRUeXBlIj4NCiAgICAgPHhzOnJlc3RyaWN0aW9u IGJhc2U9InhzOmFueVVSSSIvPg0KICAgPC94czpzaW1wbGVUeXBlPg0KDQogICA8eHM6Y29tcGxl eHR5cGUgbmFtZT0iQXV0aGVudGljYXRpb25EYXRhVHlwZSI+DQogICAgIDx4czpzZXF1ZW5jZT4N CiAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJDbGllbnRJRCIgdHlwZT0iZHNrcHA6SWRlbnRpZmll clR5cGUiDQogICAgICAgICBtaW5PY2N1cnM9IjAiLz4NCiAgICAgICA8eHM6Y2hvaWNlIG1pbk9j Y3Vycz0iMCI+DQogICAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJBdXRoZW50aWNhdGlvbkNvZGUi DQogICAgICAgICAgIHR5cGU9ImRza3BwOkF1dGhlbnRpY2F0aW9uQ29kZVR5cGUiLz4NCiAgICAg ICAgIDx4czplbGVtZW50IG5hbWU9IkF1dGhlbnRpY2F0aW9uQ29kZURpZ2VzdCINCiAgICAgICAg ICAgdHlwZT0iZHNrcHA6QXV0aGVudGljYXRpb25Db2RlRGlnZXN0VHlwZSIvPg0KICAgICAgICAg PHhzOmVsZW1lbnQgbmFtZT0iQXV0aGVudGljYXRpb25Db2RlTWFjIg0KICAgICAgICAgICB0eXBl PSJkc2twcDpBdXRoZW50aWNhdGlvbkNvZGVNYWNUeXBlIi8+DQogICAgICAgICA8eHM6ZWxlbWVu dCBuYW1lPSJBdXRoZW50aWNhdGlvbkNlcnRpZmljYXRlIg0KICAgICAgICAgICB0eXBlPSJkczpL ZXlJbmZvVHlwZSIvPg0KICAgICAgIDwveHM6Y2hvaWNlPg0KICAgICA8L3hzOnNlcXVlbmNlPg0K ICAgPC94czpjb21wbGV4VHlwZT4NCg0KDQoNCg0KRG9oZXJ0eSwgZXQgYWwuICAgICAgICAgIEV4 cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgNTddDQoNCg0KSW50ZXJu ZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgIERTS1BQICAgICAgICAgICAgICAgICAgICAgICAg SnVseSAyMDA3DQoNCg0KICAgPHhzOnNpbXBsZVR5cGUgbmFtZT0iQXV0aGVudGljYXRpb25Db2Rl VHlwZSI+DQogICAgIDx4czpyZXN0cmljdGlvbiBiYXNlPSJ4czpzdHJpbmciPg0KICAgICAgIDx4 czptYXhMZW5ndGggdmFsdWU9IjIwIi8+DQogICAgIDwveHM6cmVzdHJpY3Rpb24+DQogICA8L3hz OnNpbXBsZVR5cGU+DQoNCiAgIDx4czpjb21wbGV4VHlwZSBuYW1lPSJBdXRoZW50aWNhdGlvbkNv ZGVEaWdlc3RUeXBlIj4NCiAgICAgPHhzOnNpbXBsZUNvbnRlbnQ+DQogICAgICAgPHhzOmV4dGVu c2lvbiBiYXNlPSJ4czpiYXNlNjRCaW5hcnkiPg0KICAgICAgICAgPHhzOmF0dHJpYnV0ZSBuYW1l PSJIYXNoQWxnb3JpdGhtIiB0eXBlPSJ4czphbnlVUkkiDQogICAgICAgICAgIHVzZT0icmVxdWly ZWQiLz4NCiAgICAgICA8L3hzOmV4dGVuc2lvbj4NCiAgICAgPC94czpzaW1wbGVDb250ZW50Pg0K ICAgPC94czpjb21wbGV4VHlwZT4NCg0KICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9IkF1dGhlbnRp Y2F0aW9uQ29kZU1hY1R5cGUiPg0KICAgICA8eHM6c2VxdWVuY2U+DQogICAgICAgPHhzOmVsZW1l bnQgbmFtZT0iRGF0YSIgdHlwZT0ieHM6YmFzZTY0QmluYXJ5Ij4NCiAgICAgICA8eHM6ZWxlbWVu dCBuYW1lPSJOb25jZSIgdHlwZT0iZHNrcHA6Tm9uY2VUeXBlIi8+DQogICAgIDwveHM6c2VxdWVu Y2U+DQogICAgIDxhdHRyaWJ1dGUgbmFtZT0iSE1BQ0FsZ29yaXRobSIgdHlwZT0ieHM6YW55VVJJ Ig0KICAgICAgIHVzZT0icmVxdWlyZWQiLz4NCiAgICAgPGF0dHJpYnV0ZSBuYW1lPSJOb25jZUlk IiB0eXBlPSJkc2twcDpJZGVudGlmaWVyVHlwZSIvPg0KICAgPC94czpjb21wbGV4VHlwZT4NCg0K ICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9IlBheWxvYWRUeXBlIj4NCiAgICAgPHhzOmNob2ljZT4N CiAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJOb25jZSIgdHlwZT0iZHNrcHA6Tm9uY2VUeXBlIi8+ DQogICAgICAgPHhzOmFueSBuYW1lc3BhY2U9IiMjb3RoZXIiIHByb2Nlc3NDb250ZW50cz0ic3Ry aWN0Ii8+DQogICAgIDwveHM6Y2hvaWNlPg0KICAgPC94czpjb21wbGV4VHlwZT4NCg0KICAgPHhz OmNvbXBsZXhUeXBlIG5hbWU9Ik1hY1R5cGUiPg0KICAgICA8eHM6c2ltcGxlQ29udGVudD4NCiAg ICAgICA8eHM6ZXh0ZW5zaW9uIGJhc2U9InhzOmJhc2U2NEJpbmFyeSI+DQogICAgICAgICA8eHM6 YXR0cmlidXRlIG5hbWU9Ik1hY0FsZ29yaXRobSIgdHlwZT0ieHM6YW55VVJJIi8+DQogICAgICAg PC94czpleHRlbnNpb24+DQogICAgIDwveHM6c2ltcGxlQ29udGVudD4NCiAgIDwveHM6Y29tcGxl eFR5cGU+DQoNCiAgIDx4czpjb21wbGV4VHlwZSBuYW1lPSJLZXlDb250YWluZXJUeXBlIj4NCiAg ICAgPHhzOmNob2ljZT4NCiAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJLZXlDb250YWluZXIiDQog ICAgICAgICB0eXBlPSJwc2tjOktleUNvbnRhaW5lclR5cGUiLz4NCiAgICAgICA8eHM6ZWxlbWVu dCBuYW1lPSIjI290aGVyIiBwcm9jZXNzQ29udGVudHM9InN0cmljdCIvPg0KICAgICA8L3hzOmNo b2ljZT4NCiAgIDwveHM6Y29tcGxleFR5cGU+DQoNCg0KDQoNCkRvaGVydHksIGV0IGFsLiAgICAg ICAgICBFeHBpcmVzIEphbnVhcnkgOSwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDU4XQ0KDQoN CkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICBEU0tQUCAgICAgICAgICAgICAgICAg ICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgIDx4czpjb21wbGV4VHlwZSBuYW1lPSJJbml0aWFsaXph dGlvblRyaWdnZXJUeXBlIj4NCiAgICAgPHhzOnNlcXVlbmNlPg0KICAgICAgIDx4czplbGVtZW50 IG5hbWU9IkRldmljZUlkZW50aWZpZXJEYXRhIg0KICAgICAgICAgdHlwZT0iZHNrcHA6RGV2aWNl SWRlbnRpZmllckRhdGFUeXBlIiBtaW5PY2N1cnM9IjAiLz4NCiAgICAgICA8eHM6ZWxlbWVudCBu YW1lPSJLZXlJRCIgdHlwZT0ieHM6YmFzZTY0QmluYXJ5IiBtaW5PY2N1cnM9IjAiLz4NCiAgICAg ICA8eHM6ZWxlbWVudCBuYW1lPSJUb2tlblBsYXRmb3JtSW5mbyINCiAgICAgICAgIHR5cGU9ImRz a3BwOlRva2VuUGxhdGZvcm1JbmZvVHlwZSIgbWluT2NjdXJzPSIwIi8+DQogICAgICAgPHhzOmVs ZW1lbnQgbmFtZT0iVHJpZ2dlck5vbmNlIiB0eXBlPSJkc2twcDpOb25jZVR5cGUiLz4NCiAgICAg ICA8eHM6ZWxlbWVudCBuYW1lPSJEU0tQUF9VUkwiIHR5cGU9InhzOmFueVVSSSIgbWluT2NjdXJz PSIwIi8+DQogICAgICAgPHhzOmFueSBuYW1lc3BhY2U9IiMjb3RoZXIiIHByb2Nlc3NDb250ZW50 cz0ic3RyaWN0Ig0KICAgICAgICAgbWluT2NjdXJzPSIwIi8+DQogICAgIDwveHM6c2VxdWVuY2U+ DQogICA8L3hzOmNvbXBsZXhUeXBlPg0KDQogICA8IS0tIEV4dGVuc2lvbiB0eXBlcyAtLT4NCiAg IDx4czpjb21wbGV4VHlwZSBuYW1lPSJFeHRlbnNpb25zVHlwZSI+DQogICAgIDx4czpzZXF1ZW5j ZSBtYXhPY2N1cnM9InVuYm91bmRlZCI+DQogICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iRXh0ZW5z aW9uIiB0eXBlPSJBYnN0cmFjdEV4dGVuc2lvblR5cGUiLz4NCiAgICAgPC94czpzZXF1ZW5jZT4N CiAgIDwveHM6Y29tcGxleFR5cGU+DQoNCiAgIDx4czpjb21wbGV4VHlwZSBuYW1lPSJBYnN0cmFj dEV4dGVuc2lvblR5cGUiIGFic3RyYWN0PSJ0cnVlIj4NCiAgICAgPHhzOmF0dHJpYnV0ZSBuYW1l PSJDcml0aWNhbCIgdHlwZT0ieHM6Ym9vbGVhbiIvPg0KICAgPC94czpjb21wbGV4VHlwZT4NCg0K ICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9IkNsaWVudEluZm9UeXBlIj4NCiAgICAgPHhzOmNvbXBs ZXhDb250ZW50Pg0KICAgICAgIDx4czpleHRlbnNpb24gYmFzZT0iQWJzdHJhY3RFeHRlbnNpb25U eXBlIj4NCiAgICAgICAgIDx4czpzZXF1ZW5jZT4NCiAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFt ZT0iRGF0YSINCiAgICAgICAgICAgICB0eXBlPSJ4czpiYXNlNjRCaW5hcnkiLz4NCiAgICAgICAg IDwveHM6c2VxdWVuY2U+DQogICAgICAgPC94czpleHRlbnNpb24+DQogICAgIDwveHM6Y29tcGxl eENvbnRlbnQ+DQogICA8L3hzOmNvbXBsZXhUeXBlPg0KDQogICA8eHM6Y29tcGxleFR5cGUgbmFt ZT0iU2VydmVySW5mb1R5cGUiPg0KICAgICA8eHM6Y29tcGxleENvbnRlbnQ+DQogICAgICAgPHhz OmV4dGVuc2lvbiBiYXNlPSJBYnN0cmFjdEV4dGVuc2lvblR5cGUiPg0KICAgICAgICAgPHhzOnNl cXVlbmNlPg0KICAgICAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJEYXRhIg0KICAgICAgICAgICAg IHR5cGU9InhzOmJhc2U2NEJpbmFyeSIvPg0KICAgICAgICAgPC94czpzZXF1ZW5jZT4NCiAgICAg ICA8L3hzOmV4dGVuc2lvbj4NCiAgICAgPC94czpjb21wbGV4Q29udGVudD4NCiAgIDwveHM6Y29t cGxleFR5cGU+DQoNCiAgIDx4czpjb21wbGV4VHlwZSBuYW1lPSJLZXlJbml0aWFsaXphdGlvbkRh dGFUeXBlIj4NCg0KDQoNCkRvaGVydHksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkg OSwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDU5XQ0KDQoNCkludGVybmV0LURyYWZ0ICAgICAg ICAgICAgICAgICAgICBEU0tQUCAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAwNw0KDQoN CiAgICAgPHhzOmFubm90YXRpb24+DQogICAgICAgPHhzOmRvY3VtZW50YXRpb24geG1sOmxhbmc9 ImVuIj4NCiAgICAgICAgIFRoaXMgZXh0ZW5zaW9uIGlzIG9ubHkgdmFsaWQgaW4gU2VydmVyRmlu aXNoZWQgUERVcy4gSXQNCiAgICAgICAgIGNvbnRhaW5zIGtleSBpbml0aWFsaXphdGlvbiBkYXRh IGFuZCBpdHMgcHJlc2VuY2UgcmVzdWx0cyBpbiBhDQogICAgICAgICB0d28tcGFzcyAob3Igb25l LXBhc3MsIGlmIG5vIENsaWVudEhlbGxvIHdhcyBzZW50KSBEU0tQUA0KICAgICAgICAgZXhjaGFu Z2UuDQogICAgICAgPC94czpkb2N1bWVudGF0aW9uPg0KICAgICA8L3hzOmFubm90YXRpb24+DQog ICAgIDx4czpjb21wbGV4Q29udGVudD4NCiAgICAgICA8eHM6ZXh0ZW5zaW9uIGJhc2U9ImRza3Bw OkFic3RyYWN0RXh0ZW5zaW9uVHlwZSI+DQogICAgICAgICA8eHM6c2VxdWVuY2U+DQogICAgICAg ICAgIDx4czplbGVtZW50IG5hbWU9IktleUluaXRpYWxpemF0aW9uTWV0aG9kIiB0eXBlPSJ4czph bnlVUkkiLz4NCiAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iUGF5bG9hZCIvPg0KICAgICAg ICAgPC94czpzZXF1ZW5jZT4NCiAgICAgICA8L3hzOmV4dGVuc2lvbj4NCiAgICAgPC94czpjb21w bGV4Q29udGVudD4NCiAgIDwveHM6Y29tcGxleFR5cGU+DQoNCiAgIDwhLS0gRFNLUFAgUERVcyAt LT4NCg0KICAgPCEtLSBEU0tQUCB0cmlnZ2VyIC0tPg0KICAgPHhzOmVsZW1lbnQgbmFtZT0iRFNL UFBUcmlnZ2VyIiB0eXBlPSJEU0tQUFRyaWdnZXJUeXBlIi8+DQoNCiAgIDx4czpjb21wbGV4VHlw ZSBuYW1lPSJEU0tQUFRyaWdnZXJUeXBlIj4NCiAgICAgPHhzOmFubm90YXRpb24+DQogICAgICAg PHhzOmRvY3VtZW50YXRpb24geG1sOmxhbmc9ImVuIj4NCiAgICAgICAgIE1lc3NhZ2UgdXNlZCB0 byB0cmlnZ2VyIHRoZSBkZXZpY2UgdG8gaW5pdGlhdGUgYQ0KICAgICAgICAgRFNLUFAgcHJvdG9j b2wgcnVuLg0KICAgICAgIDwveHM6ZG9jdW1lbnRhdGlvbj4NCiAgICAgPC94czphbm5vdGF0aW9u Pg0KICAgICA8eHM6c2VxdWVuY2U+DQogICAgICAgPHhzOmNob2ljZT4NCiAgICAgICAgIDx4czpl bGVtZW50IG5hbWU9IkluaXRpYWxpemF0aW9uVHJpZ2dlciINCiAgICAgICAgICAgdHlwZT0iZHNr cHA6SW5pdGlhbGl6YXRpb25UcmlnZ2VyVHlwZSIvPg0KICAgICAgICAgPHhzOmFueSBuYW1lc3Bh Y2U9IiMjb3RoZXIiIHByb2Nlc3NDb250ZW50cz0ic3RyaWN0Ii8+DQogICAgICAgPC94czpjaG9p Y2U+DQogICAgIDwveHM6c2VxdWVuY2U+DQogICAgIDx4czphdHRyaWJ1dGUgbmFtZT0iVmVyc2lv biIgdHlwZT0iZHNrcHA6VmVyc2lvblR5cGUiLz4NCiAgIDwveHM6Y29tcGxleFR5cGU+DQoNCiAg IDwhLS0gQ2xpZW50SGVsbG8gUERVIC0tPg0KICAgPHhzOmVsZW1lbnQgbmFtZT0iQ2xpZW50SGVs bG8iIHR5cGU9IkNsaWVudEhlbGxvUERVIi8+DQoNCiAgIDx4czpjb21wbGV4VHlwZSBuYW1lPSJD bGllbnRIZWxsb1BEVSI+DQogICAgIDx4czphbm5vdGF0aW9uPg0KICAgICAgIDx4czpkb2N1bWVu dGF0aW9uIHhtbDpsYW5nPSJlbiI+DQogICAgICAgICBNZXNzYWdlIHNlbnQgZnJvbSBEU0tQUCBj bGllbnQgdG8gRFNLUFAgc2VydmVyIHRvIGluaXRpYXRlIGENCiAgICAgICAgIERTS1BQIHNlc3Np b24uDQoNCg0KDQpEb2hlcnR5LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDksIDIw MDggICAgICAgICAgICAgICBbUGFnZSA2MF0NCg0KDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAg ICAgICAgICAgRFNLUFAgICAgICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQogICAg ICAgPC94czpkb2N1bWVudGF0aW9uPg0KICAgICA8L3hzOmFubm90YXRpb24+DQogICAgIDx4czpj b21wbGV4Q29udGVudD4NCiAgICAgICA8eHM6ZXh0ZW5zaW9uIGJhc2U9IkFic3RyYWN0UmVxdWVz dFR5cGUiPg0KICAgICAgICAgPHhzOnNlcXVlbmNlPg0KICAgICAgICAgICA8eHM6ZWxlbWVudCBu YW1lPSJEZXZpY2VJZGVudGlmaWVyRGF0YSINCiAgICAgICAgICAgICB0eXBlPSJkc2twcDpEZXZp Y2VJZGVudGlmaWVyRGF0YVR5cGUiIG1pbk9jY3Vycz0iMCIvPg0KICAgICAgICAgICA8eHM6ZWxl bWVudCBuYW1lPSJLZXlJRCIgdHlwZT0ieHM6YmFzZTY0QmluYXJ5Ig0KICAgICAgICAgICAgIG1p bk9jY3Vycz0iMCIvPg0KICAgICAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJDbGllbnROb25jZSIg dHlwZT0iZHNrcHA6Tm9uY2VUeXBlIg0KICAgICAgICAgICAgIG1pbk9jY3Vycz0iMCIvPg0KICAg ICAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJUcmlnZ2VyTm9uY2UiIHR5cGU9ImRza3BwOk5vbmNl VHlwZSINCiAgICAgICAgICAgICBtaW5PY2N1cnM9IjAiLz4NCiAgICAgICAgICAgPHhzOmVsZW1l bnQgbmFtZT0iU3VwcG9ydGVkS2V5VHlwZXMiDQogICAgICAgICAgICAgdHlwZT0iZHNrcHA6QWxn b3JpdGhtc1R5cGUiLz4NCiAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iU3VwcG9ydGVkRW5j cnlwdGlvbkFsZ29yaXRobXMiDQogICAgICAgICAgICAgdHlwZT0iZHNrcHA6QWxnb3JpdGhtc1R5 cGUiLz4NCiAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iU3VwcG9ydGVkTUFDQWxnb3JpdGht cyINCiAgICAgICAgICAgICB0eXBlPSJkc2twcDpBbGdvcml0aG1zVHlwZSIvPg0KICAgICAgICAg ICA8eHM6ZWxlbWVudCBuYW1lPSJTdXBwb3J0ZWRQcm90b2NvbFZhcmlhbnRzIg0KICAgICAgICAg ICAgIHR5cGU9ImRza3BwOlByb3RvY29sVmFyaWFudHNUeXBlIiBtaW5PY2N1cnM9IjAiLz4NCiAg ICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iU3VwcG9ydGVkS2V5Q29udGFpbmVycyINCiAgICAg ICAgICAgICB0eXBlPSJkc2twcDpLZXlDb250YWluZXJzRm9ybWF0VHlwZSIgbWluT2NjdXJzPSIw Ii8+DQogICAgICAgICAgIDx4czplbGVtZW50IG5hbWU9IkF1dGhlbnRpY2F0aW9uRGF0YSINCiAg ICAgICAgICAgICB0eXBlPSJkc2twcDpBdXRoZW50aWNhdGlvbkRhdGFUeXBlIiBtaW5PY2N1cnM9 IjAiLz4NCiAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iRXh0ZW5zaW9ucyIgdHlwZT0iZHNr cHA6RXh0ZW5zaW9uc1R5cGUiDQogICAgICAgICAgICAgbWluT2NjdXJzPSIwIi8+DQogICAgICAg ICA8L3hzOnNlcXVlbmNlPg0KICAgICAgIDwveHM6ZXh0ZW5zaW9uPg0KICAgICA8L3hzOmNvbXBs ZXhDb250ZW50Pg0KICAgPC94czpjb21wbGV4VHlwZT4NCg0KICAgPCEtLSBTZXJ2ZXJIZWxsbyBQ RFUgLS0+DQogICA8eHM6ZWxlbWVudCBuYW1lPSJTZXJ2ZXJIZWxsbyIgdHlwZT0iU2VydmVySGVs bG9QRFUiLz4NCg0KICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9IlNlcnZlckhlbGxvUERVIj4NCiAg ICAgPHhzOmFubm90YXRpb24+DQogICAgICAgPHhzOmRvY3VtZW50YXRpb24geG1sOmxhbmc9ImVu Ij4NCiAgICAgICAgIE1lc3NhZ2Ugc2VudCBmcm9tIERTS1BQIHNlcnZlciB0byBEU0tQUCBjbGll bnQNCiAgICAgICAgIGluIHJlc3BvbnNlIHRvIGEgcmVjZWl2ZWQgQ2xpZW50SGVsbG8gUERVLg0K ICAgICAgIDwveHM6ZG9jdW1lbnRhdGlvbj4NCiAgICAgPC94czphbm5vdGF0aW9uPg0KICAgICA8 eHM6Y29tcGxleENvbnRlbnQ+DQogICAgICAgPHhzOmV4dGVuc2lvbiBiYXNlPSJBYnN0cmFjdFJl c3BvbnNlVHlwZSI+DQogICAgICAgICA8eHM6c2VxdWVuY2UgbWluT2NjdXJzPSIwIj4NCiAgICAg ICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iS2V5VHlwZSINCiAgICAgICAgICAgICB0eXBlPSJkc2tw cDpBbGdvcml0aG1UeXBlIi8+DQogICAgICAgICAgIDx4czplbGVtZW50IG5hbWU9IkVuY3J5cHRp b25BbGdvcml0aG0iDQoNCg0KDQpEb2hlcnR5LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51 YXJ5IDksIDIwMDggICAgICAgICAgICAgICBbUGFnZSA2MV0NCg0KDQpJbnRlcm5ldC1EcmFmdCAg ICAgICAgICAgICAgICAgICAgRFNLUFAgICAgICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMDcN Cg0KDQogICAgICAgICAgICAgdHlwZT0iZHNrcHA6QWxnb3JpdGhtVHlwZSIvPg0KICAgICAgICAg ICA8eHM6ZWxlbWVudCBuYW1lPSJNYWNBbGdvcml0aG0iDQogICAgICAgICAgICAgdHlwZT0iZHNr cHA6QWxnb3JpdGhtVHlwZSIvPg0KICAgICAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJFbmNyeXB0 aW9uS2V5Ig0KICAgICAgICAgICAgIHR5cGU9ImRzOktleUluZm9UeXBlIi8+DQogICAgICAgICAg IDx4czplbGVtZW50IG5hbWU9IktleUNvbnRhaW5lckZvcm1hdCINCiAgICAgICAgICAgICB0eXBl PSJkc2twcDpLZXlDb250YWluZXJGb3JtYXRUeXBlIi8+DQogICAgICAgICAgIDx4czplbGVtZW50 IG5hbWU9IlBheWxvYWQiDQogICAgICAgICAgICAgdHlwZT0iZHNrcHA6UGF5bG9hZFR5cGUiLz4N CiAgICAgICAgICAgPHhzOmVsZW1lbnQgbmFtZT0iRXh0ZW5zaW9ucyINCiAgICAgICAgICAgICB0 eXBlPSJkc2twcDpFeHRlbnNpb25zVHlwZSIgbWluT2NjdXJzPSIwIi8+DQogICAgICAgICAgIDx4 czplbGVtZW50IG5hbWU9Ik1hYyIgdHlwZT0iZHNrcHA6TWFjVHlwZSINCiAgICAgICAgICAgICBt aW5PY2N1cnM9IjAiLz4NCiAgICAgICAgIDwveHM6c2VxdWVuY2U+DQogICAgICAgPC94czpleHRl bnNpb24+DQogICAgIDwveHM6Y29tcGxleENvbnRlbnQ+DQogICA8L3hzOmNvbXBsZXhUeXBlPg0K DQogICA8IS0tIENsaWVudE5vbmNlIFBEVSAtLT4NCiAgIDx4czplbGVtZW50IG5hbWU9IkNsaWVu dE5vbmNlIiB0eXBlPSJDbGllbnROb25jZVBEVSIvPg0KDQogICA8eHM6Y29tcGxleFR5cGUgbmFt ZT0iQ2xpZW50Tm9uY2VQRFUiPg0KICAgICA8eHM6YW5ub3RhdGlvbj4NCiAgICAgICA8eHM6ZG9j dW1lbnRhdGlvbiB4bWw6bGFuZz0iZW4iPg0KICAgICAgICAgU2Vjb25kIG1lc3NhZ2Ugc2VudCBm cm9tIERTS1BQIGNsaWVudCB0bw0KICAgICAgICAgRFNLUFAgc2VydmVyIGluIGEgRFNLUFAgc2Vz c2lvbi4NCiAgICAgICA8L3hzOmRvY3VtZW50YXRpb24+DQogICAgIDwveHM6YW5ub3RhdGlvbj4N CiAgICAgPHhzOmNvbXBsZXhDb250ZW50Pg0KICAgICAgIDx4czpleHRlbnNpb24gYmFzZT0iQWJz dHJhY3RSZXF1ZXN0VHlwZSI+DQogICAgICAgICA8eHM6c2VxdWVuY2U+DQogICAgICAgICAgIDx4 czplbGVtZW50IG5hbWU9IkVuY3J5cHRlZE5vbmNlIg0KICAgICAgICAgICAgIHR5cGU9InhzOmJh c2U2NEJpbmFyeSIvPg0KICAgICAgICAgICA8eHM6ZWxlbWVudCBuYW1lPSJBdXRoZW50aWNhdGlv bkRhdGEiDQogICAgICAgICAgICAgdHlwZT0iZHNrcHA6QXV0aGVudGljYXRpb25EYXRhVHlwZSIg bWluT2NjdXJzPSIwIi8+DQogICAgICAgICAgIDx4czplbGVtZW50IG5hbWU9IkV4dGVuc2lvbnMi DQogICAgICAgICAgICAgdHlwZT0iZHNrcHA6RXh0ZW5zaW9uc1R5cGUiIG1pbk9jY3Vycz0iMCIv Pg0KICAgICAgICAgPC94czpzZXF1ZW5jZT4NCiAgICAgICAgIDx4czphdHRyaWJ1dGUgbmFtZT0i U2Vzc2lvbklEIiB0eXBlPSJkc2twcDpJZGVudGlmaWVyVHlwZSINCiAgICAgICAgICAgdXNlPSJy ZXF1aXJlZCIvPg0KICAgICAgIDwveHM6ZXh0ZW5zaW9uPg0KICAgICA8L3hzOmNvbXBsZXhDb250 ZW50Pg0KICAgPC94czpjb21wbGV4VHlwZT4NCg0KICAgPCEtLSBTZXJ2ZXJGaW5pc2hlZCBQRFUg LS0+DQogICA8eHM6ZWxlbWVudCBuYW1lPSJTZXJ2ZXJGaW5pc2hlZCIgdHlwZT0iU2VydmVyRmlu aXNoZWRQRFUiLz4NCg0KICAgPHhzOmNvbXBsZXhUeXBlIG5hbWU9IlNlcnZlckZpbmlzaGVkUERV Ij4NCg0KDQoNCkRvaGVydHksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgOSwgMjAw OCAgICAgICAgICAgICAgIFtQYWdlIDYyXQ0KDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAg ICAgICAgICBEU0tQUCAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgICAg PHhzOmFubm90YXRpb24+DQogICAgICAgPHhzOmRvY3VtZW50YXRpb24geG1sOmxhbmc9ImVuIj4N CiAgICAgICAgIEZpbmFsIG1lc3NhZ2Ugc2VudCBmcm9tIERTS1BQIHNlcnZlciB0bw0KICAgICAg ICAgRFNLUFAgY2xpZW50IGluIGEgRFNLUFAgc2Vzc2lvbi4NCiAgICAgICA8L3hzOmRvY3VtZW50 YXRpb24+DQogICAgIDwveHM6YW5ub3RhdGlvbj4NCiAgICAgPHhzOmNvbXBsZXhDb250ZW50Pg0K ICAgICAgIDx4czpleHRlbnNpb24gYmFzZT0iQWJzdHJhY3RSZXNwb25zZVR5cGUiPg0KICAgICAg ICAgPHhzOnNlcXVlbmNlIG1pbk9jY3Vycz0iMCI+DQogICAgICAgICAgIDx4czplbGVtZW50IG5h bWU9IktleUNvbnRhaW5lciINCiAgICAgICAgICAgICB0eXBlPSJkc2twcDpLZXlDb250YWluZXJU eXBlIi8+DQogICAgICAgICAgIDx4czplbGVtZW50IG5hbWU9IkV4dGVuc2lvbnMiDQogICAgICAg ICAgICAgdHlwZT0iZHNrcHA6RXh0ZW5zaW9uc1R5cGUiIG1pbk9jY3Vycz0iMCIvPg0KICAgICAg ICAgICA8eHM6ZWxlbWVudCBuYW1lPSJNYWMiDQogICAgICAgICAgICAgdHlwZT0iZHNrcHA6TWFj VHlwZSIvPg0KICAgICAgICAgPC94czpzZXF1ZW5jZT4NCiAgICAgICA8L3hzOmV4dGVuc2lvbj4N CiAgICAgPC94czpjb21wbGV4Q29udGVudD4NCiAgIDwveHM6Y29tcGxleFR5cGU+DQoNCiA8L3hz OnNjaGVtYT4NCg0KDQo3LiAgU2VjdXJpdHkgQ29uc2lkZXJhdGlvbnMNCg0KNy4xLiAgR2VuZXJh bA0KDQogICBEU0tQUCBpcyBkZXNpZ25lZCB0byBwcm90ZWN0IGdlbmVyYXRlZCBrZXkgbWF0ZXJp YWwgZnJvbSBleHBvc3VyZS4NCiAgIE5vIG90aGVyIGVudGl0aWVzIHRoYW4gdGhlIERTS1BQIHNl cnZlciBhbmQgdGhlIGNyeXB0b2dyYXBoaWMgbW9kdWxlDQogICB3aWxsIGhhdmUgYWNjZXNzIHRv IGEgZ2VuZXJhdGVkIEtfVE9LRU4gaWYgdGhlIGNyeXB0b2dyYXBoaWMNCiAgIGFsZ29yaXRobXMg dXNlZCBhcmUgb2Ygc3VmZmljaWVudCBzdHJlbmd0aCBhbmQsIG9uIHRoZSBEU0tQUCBjbGllbnQN CiAgIHNpZGUsIGdlbmVyYXRpb24gYW5kIGVuY3J5cHRpb24gb2YgUl9DIGFuZCBnZW5lcmF0aW9u IG9mIEtfVE9LRU4gdGFrZQ0KICAgcGxhY2UgYXMgc3BlY2lmaWVkIGFuZCBpbiB0aGUgY3J5cHRv Z3JhcGhpYyBtb2R1bGUuICBUaGlzIGFwcGxpZXMNCiAgIGV2ZW4gaWYgbWFsaWNpb3VzIHNvZnR3 YXJlIGlzIHByZXNlbnQgaW4gdGhlIERTS1BQIGNsaWVudC4gIEhvd2V2ZXIsDQogICBhcyBkaXNj dXNzZWQgaW4gdGhlIGZvbGxvd2luZywgRFNLUFAgZG9lcyBub3QgcHJvdGVjdCBhZ2FpbnN0IGNl cnRhaW4NCiAgIG90aGVyIHRocmVhdHMgcmVzdWx0aW5nIGZyb20gbWFuLWluLXRoZS1taWRkbGUg YXR0YWNrcyBhbmQgb3RoZXINCiAgIGZvcm1zIG9mIGF0dGFja3MuICBEU0tQUCBTSE9VTEQsIHRo ZXJlZm9yZSwgYmUgcnVuIG92ZXIgYSB0cmFuc3BvcnQNCiAgIHByb3ZpZGluZyBwcml2YWN5IGFu ZCBpbnRlZ3JpdHksIHN1Y2ggYXMgSFRUUCBvdmVyIFRyYW5zcG9ydCBMYXllcg0KICAgU2VjdXJp dHkgKFRMUykgd2l0aCBhIHN1aXRhYmxlIGNpcGhlcnN1aXRlLCB3aGVuIHN1Y2ggdGhyZWF0cyBh cmUgYQ0KICAgY29uY2Vybi4gIE5vdGUgdGhhdCBUTFMgY2lwaGVyc3VpdGVzIHdpdGggYW5vbnlt b3VzIGtleSBleGNoYW5nZXMgYXJlDQogICBub3Qgc3VpdGFibGUgaW4gdGhvc2Ugc2l0dWF0aW9u cy4NCg0KNy4yLiAgQWN0aXZlIEF0dGFja3MNCg0KNy4yLjEuICBJbnRyb2R1Y3Rpb24NCg0KICAg QW4gYWN0aXZlIGF0dGFja2VyIE1BWSBhdHRlbXB0IHRvIG1vZGlmeSwgZGVsZXRlLCBpbnNlcnQs IHJlcGxheSwgb3INCiAgIHJlb3JkZXIgbWVzc2FnZXMgZm9yIGEgdmFyaWV0eSBvZiBwdXJwb3Nl cyBpbmNsdWRpbmcgc2VydmljZSBkZW5pYWwNCg0KDQoNCkRvaGVydHksIGV0IGFsLiAgICAgICAg ICBFeHBpcmVzIEphbnVhcnkgOSwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDYzXQ0KDQoNCklu dGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICBEU0tQUCAgICAgICAgICAgICAgICAgICAg ICAgIEp1bHkgMjAwNw0KDQoNCiAgIGFuZCBjb21wcm9taXNlIG9mIGdlbmVyYXRlZCBrZXkgbWF0 ZXJpYWwuICBTZWN0aW9uIDcuMi4yIHRocm91Z2gNCiAgIFNlY3Rpb24gNy4yLjcuDQoNCjcuMi4y LiAgTWVzc2FnZSBNb2RpZmljYXRpb25zDQoNCiAgIE1vZGlmaWNhdGlvbnMgdG8gYSA8RFNLUFBQ VHJpZ2dlcj4gbWVzc2FnZSB3aWxsIGVpdGhlciBjYXVzZSBkZW5pYWwtDQogICBvZi1zZXJ2aWNl IChtb2RpZmljYXRpb25zIG9mIGFueSBvZiB0aGUgaWRlbnRpZmllcnMgb3IgdGhlIG5vbmNlKSBv cg0KICAgdGhlIERTS1BQIGNsaWVudCB0byBjb250YWN0IHRoZSB3cm9uZyBEU0tQUCBzZXJ2ZXIu ICBUaGUgbGF0dGVyIGlzIGluDQogICBlZmZlY3QgYSBtYW4taW4tdGhlLW1pZGRsZSBhdHRhY2sg YW5kIGlzIGRpc2N1c3NlZCBmdXJ0aGVyIGluDQogICBTZWN0aW9uIDcuMi43Lg0KDQogICBBbiBh dHRhY2tlciBtYXkgbW9kaWZ5IGEgPENsaWVudEhlbGxvPiBtZXNzYWdlLiAgVGhpcyBtZWFucyB0 aGF0IHRoZQ0KICAgYXR0YWNrZXIgY291bGQgaW5kaWNhdGUgYSBkaWZmZXJlbnQga2V5IG9yIGRl dmljZSB0aGFuIHRoZSBvbmUNCiAgIGludGVuZGVkIGJ5IHRoZSBEU0tQUCBjbGllbnQsIGFuZCBj b3VsZCBhbHNvIHN1Z2dlc3Qgb3RoZXINCiAgIGNyeXB0b2dyYXBoaWMgYWxnb3JpdGhtcyB0aGFu IHRoZSBvbmVzIHByZWZlcnJlZCBieSB0aGUgRFNLUFAgY2xpZW50LA0KICAgZS5nLiwgY3J5cHRv Z3JhcGhpY2FsbHkgd2Vha2VyIG9uZXMuICBUaGUgYXR0YWNrZXIgY291bGQgYWxzbyBzdWdnZXN0 DQogICBlYXJsaWVyIHZlcnNpb25zIG9mIHRoZSBEU0tQUCBwcm90b2NvbCwgaW4gY2FzZSB0aGVz ZSB2ZXJzaW9ucyBoYXZlDQogICBiZWVuIHNob3duIHRvIGhhdmUgdnVsbmVyYWJpbGl0aWVzLiAg VGhlc2UgbW9kaWZpY2F0aW9ucyBjb3VsZCBsZWFkDQogICB0byBhbiBhdHRhY2tlciBzdWNjZWVk aW5nIGluIGluaXRpYWxpemluZyBvciBtb2RpZnlpbmcgYW5vdGhlcg0KICAgY3J5cHRvZ3JhcGhp YyBtb2R1bGUgdGhhbiB0aGUgb25lIGludGVuZGVkIChpLmUuLCB0aGUgc2VydmVyDQogICBhc3Np Z25pbmcgdGhlIGdlbmVyYXRlZCBrZXkgdG8gdGhlIHdyb25nIG1vZHVsZSksIG9yIGdhaW5pbmcg YWNjZXNzDQogICB0byBhIGdlbmVyYXRlZCBrZXkgdGhyb3VnaCB0aGUgdXNlIG9mIHdlYWsgY3J5 cHRvZ3JhcGhpYyBhbGdvcml0aG1zDQogICBvciBwcm90b2NvbCB2ZXJzaW9ucy4gIERTS1BQIGlt cGxlbWVudGF0aW9ucyBNQVkgcHJvdGVjdCBhZ2FpbnN0IHRoZQ0KICAgbGF0dGVyIGJ5IGhhdmlu ZyBzdHJpY3QgcG9saWNpZXMgYWJvdXQgd2hhdCB2ZXJzaW9ucyBhbmQgYWxnb3JpdGhtcw0KICAg dGhleSBzdXBwb3J0IGFuZCBhY2NlcHQuICBUaGUgZm9ybWVyIHRocmVhdCAoYXNzaWdubWVudCBv ZiBhDQogICBnZW5lcmF0ZWQga2V5IHRvIHRoZSB3cm9uZyBtb2R1bGUpIGlzIG5vdCBwb3NzaWJs ZSB3aGVuIHRoZSBzaGFyZWQtDQogICBrZXkgdmFyaWFudCBvZiBEU0tQUCBpcyBlbXBsb3llZCAo YXNzdW1pbmcgZXhpc3Rpbmcgc2hhcmVkIGtleXMgYXJlDQogICB1bmlxdWUgcGVyIGNyeXB0b2dy YXBoaWMgbW9kdWxlKSwgYnV0IGlzIHBvc3NpYmxlIGluIHRoZSBwdWJsaWMta2V5DQogICB2YXJp YW50LiAgVGhlcmVmb3JlLCBEU0tQUCBzZXJ2ZXJzIE1VU1QgTk9UIGFjY2VwdCB1bmlsYXRlcmFs bHkNCiAgIHByb3ZpZGVkIGRldmljZSBpZGVudGlmaWVycyBpbiB0aGUgcHVibGljLWtleSB2YXJp YW50LiAgVGhpcyBpcyBhbHNvDQogICBpbmRpY2F0ZWQgaW4gdGhlIHByb3RvY29sIGRlc2NyaXB0 aW9uLiAgSW4gdGhlIHNoYXJlZC1rZXkgdmFyaWFudCwNCiAgIGhvd2V2ZXIsIGFuIGF0dGFja2Vy IG1heSBiZSBhYmxlIHRvIHByb3ZpZGUgdGhlIHdyb25nIGlkZW50aWZpZXINCiAgIChwb3NzaWJs eSBhbHNvIGxlYWRpbmcgdG8gdGhlIGluY29ycmVjdCB1c2VyIGJlaW5nIGFzc29jaWF0ZWQgd2l0 aA0KICAgdGhlIGdlbmVyYXRlZCBrZXkpIGlmIHRoZSBhdHRhY2tlciBoYXMgcmVhbC10aW1lIGFj Y2VzcyB0byB0aGUNCiAgIGNyeXB0b2dyYXBoaWMgbW9kdWxlIHdpdGggdGhlIGlkZW50aWZpZWQg a2V5LiAgSW4gb3RoZXIgd29yZHMsIHRoZQ0KICAgZ2VuZXJhdGVkIGtleSBpcyBhc3NvY2lhdGVk IHdpdGggdGhlIGNvcnJlY3QgY3J5cHRvZ3JhcGhpYyBtb2R1bGUgYnV0DQogICB0aGUgbW9kdWxl IGlzIGFzc29jaWF0ZWQgd2l0aCB0aGUgaW5jb3JyZWN0IHVzZXIuICBTZWUgZnVydGhlcg0KICAg U2VjdGlvbiA3LjUgZm9yIGEgZGlzY3Vzc2lvbiBvZiB0aGlzIHRocmVhdCBhbmQgcG9zc2libGUN CiAgIGNvdW50ZXJtZWFzdXJlcy4NCg0KICAgQW4gYXR0YWNrZXIgbWF5IGFsc28gbW9kaWZ5IGEg PFNlcnZlckhlbGxvPiBtZXNzYWdlLiAgVGhpcyBtZWFucyB0aGF0DQogICB0aGUgYXR0YWNrZXIg Y291bGQgaW5kaWNhdGUgZGlmZmVyZW50IGtleSB0eXBlcywgYWxnb3JpdGhtcywgb3INCiAgIHBy b3RvY29sIHZlcnNpb25zIHRoYW4gdGhlIGxlZ2l0aW1hdGUgc2VydmVyIHdvdWxkLCBlLmcuLA0K ICAgY3J5cHRvZ3JhcGhpY2FsbHkgd2Vha2VyIG9uZXMuICBUaGUgYXR0YWNrZXIgY291bGQgYWxz byBwcm92aWRlIGENCiAgIGRpZmZlcmVudCBub25jZSB0aGFuIHRoZSBvbmUgc2VudCBieSB0aGUg bGVnaXRpbWF0ZSBzZXJ2ZXIuICBDbGllbnRzDQogICB3aWxsIHByb3RlY3QgYWdhaW5zdCB0aGUg Zm9ybWVyIHRocm91Z2ggc3RyaWN0IGFkaGVyZW5jZSB0byBwb2xpY2llcw0KICAgcmVnYXJkaW5n IHBlcm1pc3NpYmxlIGFsZ29yaXRobXMgYW5kIHByb3RvY29sIHZlcnNpb25zLiAgVGhlIGxhdHRl cg0KICAgKHdyb25nIG5vbmNlKSB3aWxsIG5vdCBjb25zdGl0dXRlIGEgc2VjdXJpdHkgcHJvYmxl bSwgYXMgYSBnZW5lcmF0ZWQNCg0KDQoNCkRvaGVydHksIGV0IGFsLiAgICAgICAgICBFeHBpcmVz IEphbnVhcnkgOSwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDY0XQ0KDQoNCkludGVybmV0LURy YWZ0ICAgICAgICAgICAgICAgICAgICBEU0tQUCAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkg MjAwNw0KDQoNCiAgIGtleSB3aWxsIG5vdCBtYXRjaCB0aGUga2V5IGdlbmVyYXRlZCBvbiB0aGUg bGVnaXRpbWF0ZSBzZXJ2ZXIuICBBbHNvLA0KICAgd2hlbmV2ZXIgdGhlIERTS1BQIHJ1biB3b3Vs ZCByZXN1bHQgaW4gdGhlIHJlcGxhY2VtZW50IG9mIGFuIGV4aXN0aW5nDQogICBrZXksIHRoZSA8 TWFjPiBlbGVtZW50IHByb3RlY3RzIGFnYWluc3QgbW9kaWZpY2F0aW9ucyBvZiBSX1MuDQoNCiAg IE1vZGlmaWNhdGlvbnMgb2YgPENsaWVudE5vbmNlPiBtZXNzYWdlcyBhcmUgYWxzbyBwb3NzaWJs ZS4gIElmIGFuDQogICBhdHRhY2tlciBtb2RpZmllcyB0aGUgU2Vzc2lvbklEIGF0dHJpYnV0ZSwg dGhlbiwgaW4gZWZmZWN0LCBhIHN3aXRjaA0KICAgdG8gYW5vdGhlciBzZXNzaW9uIHdpbGwgb2Nj dXIgYXQgdGhlIHNlcnZlciwgYXNzdW1pbmcgdGhlIG5ldw0KICAgU2Vzc2lvbklEIGlzIHZhbGlk IGF0IHRoYXQgdGltZSBvbiB0aGUgc2VydmVyLiAgSXQgc3RpbGwgd2lsbCBub3QNCiAgIGFsbG93 IHRoZSBhdHRhY2tlciB0byBsZWFybiBhIGdlbmVyYXRlZCBLX1RPS0VOIHNpbmNlIFJfQyBoYXMg YmVlbg0KICAgd3JhcHBlZCBmb3IgdGhlIGxlZ2l0aW1hdGUgc2VydmVyLiAgTW9kaWZpY2F0aW9u cyBvZiB0aGUNCiAgIDxFbmNyeXB0ZWROb25jZT4gZWxlbWVudCwgZS5nLiwgcmVwbGFjaW5nIGl0 IHdpdGggYSB2YWx1ZSBmb3Igd2hpY2gNCiAgIHRoZSBhdHRhY2tlciBrbm93cyBhbiB1bmRlcmx5 aW5nIFInQywgd2lsbCBub3QgcmVzdWx0IGluIHRoZSBjbGllbnQNCiAgIGNoYW5naW5nIGl0cyBw cmUtRFNLUFAgc3RhdGUsIHNpbmNlIHRoZSBzZXJ2ZXIgd2lsbCBiZSB1bmFibGUgdG8NCiAgIHBy b3ZpZGUgYSB2YWxpZCBNQUMgaW4gaXRzIGZpbmFsIG1lc3NhZ2UgdG8gdGhlIGNsaWVudC4gIFRo ZSBzZXJ2ZXINCiAgIE1BWSwgaG93ZXZlciwgZW5kIHVwIHN0b3JpbmcgSydUT0tFTiByYXRoZXIg dGhhbiBLX1RPS0VOLiAgSWYgdGhlDQogICBjcnlwdG9ncmFwaGljIG1vZHVsZSBoYXMgYmVlbiBh c3NvY2lhdGVkIHdpdGggYSBwYXJ0aWN1bGFyIHVzZXIsIHRoZW4NCiAgIHRoaXMgY291bGQgY29u c3RpdHV0ZSBhIHNlY3VyaXR5IHByb2JsZW0uICBGb3IgYSBmdXJ0aGVyIGRpc2N1c3Npb24NCiAg IGFib3V0IHRoaXMgdGhyZWF0LCBhbmQgYSBwb3NzaWJsZSBjb3VudGVybWVhc3VyZSwgc2VlIFNl Y3Rpb24gNy41DQogICBiZWxvdy4gIE5vdGUgdGhhdCB1c2Ugb2YgU2VjdXJlIFNvY2tldCBMYXll ciAoU1NMKSBvciBUTFMgZG9lcyBub3QNCiAgIHByb3RlY3QgYWdhaW5zdCB0aGlzIGF0dGFjayBp ZiB0aGUgYXR0YWNrZXIgaGFzIGFjY2VzcyB0byB0aGUgRFNLUFANCiAgIGNsaWVudCAoZS5nLiwg dGhyb3VnaCBtYWxpY2lvdXMgc29mdHdhcmUsICJ0cm9qYW5zIikuDQoNCiAgIEZpbmFsbHksIGF0 dGFja2VycyBtYXkgYWxzbyBtb2RpZnkgdGhlIDxTZXJ2ZXJGaW5pc2hlZD4gbWVzc2FnZS4NCiAg IFJlcGxhY2luZyB0aGUgPE1hYz4gZWxlbWVudCB3aWxsIG9ubHkgcmVzdWx0IGluIGRlbmlhbC1v Zi1zZXJ2aWNlLg0KICAgUmVwbGFjZW1lbnQgb2YgYW55IG90aGVyIGVsZW1lbnQgbWF5IGNhdXNl IHRoZSBEU0tQUCBjbGllbnQgdG8NCiAgIGFzc29jaWF0ZSwgZS5nLiwgdGhlIHdyb25nIHNlcnZp Y2Ugd2l0aCB0aGUgZ2VuZXJhdGVkIGtleS4gIERTS1BQDQogICBTSE9VTEQgYmUgcnVuIG92ZXIg YSB0cmFuc3BvcnQgcHJvdmlkaW5nIHByaXZhY3kgYW5kIGludGVncml0eSB3aGVuDQogICB0aGlz IGlzIGEgY29uY2Vybi4NCg0KNy4yLjMuICBNZXNzYWdlIERlbGV0aW9uDQoNCiAgIE1lc3NhZ2Ug ZGVsZXRpb24gd2lsbCBub3QgY2F1c2UgYW55IG90aGVyIGhhcm0gdGhhbiBkZW5pYWwtb2YtDQog ICBzZXJ2aWNlLCBzaW5jZSBhIGNyeXB0b2dyYXBoaWMgbW9kdWxlIE1VU1QgTk9UIGNoYW5nZSBp dHMgc3RhdGUNCiAgIChpLmUuLCAiY29tbWl0IiB0byBhIGdlbmVyYXRlZCBrZXkpIHVudGlsIGl0 IHJlY2VpdmVzIHRoZSBmaW5hbA0KICAgbWVzc2FnZSBmcm9tIHRoZSBEU0tQUCBzZXJ2ZXIgYW5k IHN1Y2Nlc3NmdWxseSBoYXMgcHJvY2Vzc2VkIHRoYXQNCiAgIG1lc3NhZ2UsIGluY2x1ZGluZyB2 YWxpZGF0aW9uIG9mIGl0cyBNQUMuICBBIGRlbGV0ZWQgPFNlcnZlckZpbmlzaGVkPg0KICAgbWVz c2FnZSB3aWxsIG5vdCBjYXVzZSB0aGUgc2VydmVyIHRvIGVuZCB1cCBpbiBhbiBpbmNvbnNpc3Rl bnQgc3RhdGUNCiAgIHZpcy1hLXZpcyB0aGUgY3J5cHRvZ3JhcGhpYyBtb2R1bGUgaWYgdGhlIHNl cnZlciBpbXBsZW1lbnRzIHRoZQ0KICAgc3VnZ2VzdGlvbnMgaW4gU2VjdGlvbiA3LjUuDQoNCjcu Mi40LiAgTWVzc2FnZSBJbnNlcnRpb24NCg0KICAgQW4gYWN0aXZlIGF0dGFja2VyIG1heSBpbml0 aWF0ZSBhIERTS1BQIHJ1biBhdCBhbnkgdGltZSwgYW5kIHN1Z2dlc3QNCiAgIGFueSBkZXZpY2Ug aWRlbnRpZmllci4gIERTS1BQIHNlcnZlciBpbXBsZW1lbnRhdGlvbnMgTUFZIHJlY2VpdmUgc29t ZQ0KICAgcHJvdGVjdGlvbiBhZ2FpbnN0IGluYWR2ZXJ0ZW50bHkgaW5pdGlhbGl6aW5nIGEga2V5 IG9yIGluYWR2ZXJ0ZW50bHkNCiAgIHJlcGxhY2luZyBhbiBleGlzdGluZyBrZXkgb3IgYXNzaWdu aW5nIGEga2V5IHRvIGEgY3J5cHRvZ3JhcGhpYw0KICAgbW9kdWxlIGJ5IGluaXRpYWxpemluZyB0 aGUgRFNLUFAgcnVuIGJ5IHVzZSBvZiB0aGUgPERTS1BQVHJpZ2dlcj4uDQogICBUaGUgPFRyaWdn ZXJOb25jZT4gZWxlbWVudCBhbGxvd3MgdGhlIHNlcnZlciB0byBhc3NvY2lhdGUgYSBEU0tQUA0K DQoNCg0KRG9oZXJ0eSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAg ICAgICAgICAgICAgW1BhZ2UgNjVdDQoNCg0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAg ICAgIERTS1BQICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KICAgcHJvdG9j b2wgcnVuIHdpdGgsIGUuZy4sIGFuIGVhcmxpZXIgdXNlci1hdXRoZW50aWNhdGVkIHNlc3Npb24u ICBUaGUNCiAgIHNlY3VyaXR5IG9mIHRoaXMgbWV0aG9kLCB0aGVyZWZvcmUsIGRlcGVuZHMgb24g dGhlIGFiaWxpdHkgdG8gcHJvdGVjdA0KICAgdGhlIDxUcmlnZ2VyTm9uY2U+IGVsZW1lbnQgaW4g dGhlIERTS1BQIGluaXRpYWxpemF0aW9uIG1lc3NhZ2UuICBJZg0KICAgYW4gZWF2ZXNkcm9wcGVy IGlzIGFibGUgdG8gY2FwdHVyZSB0aGlzIG1lc3NhZ2UsIGhlIG1heSByYWNlIHRoZQ0KICAgbGVn aXRpbWF0ZSB1c2VyIGZvciBhIGtleSBpbml0aWFsaXphdGlvbi4gIERTS1BQIG92ZXIgYSB0cmFu c3BvcnQNCiAgIHByb3ZpZGluZyBwcml2YWN5IGFuZCBpbnRlZ3JpdHksIGNvdXBsZWQgd2l0aCB0 aGUgcmVjb21tZW5kYXRpb25zIGluDQogICBTZWN0aW9uIDcuNSwgaXMgUkVDT01NRU5ERUQgd2hl biB0aGlzIGlzIGEgY29uY2Vybi4NCg0KICAgSW5zZXJ0aW9uIG9mIG90aGVyIG1lc3NhZ2VzIGlu dG8gYW4gZXhpc3RpbmcgcHJvdG9jb2wgcnVuIGlzIHNlZW4gYXMNCiAgIGVxdWl2YWxlbnQgdG8g bW9kaWZpY2F0aW9uIG9mIGxlZ2l0aW1hdGVseSBzZW50IG1lc3NhZ2VzLg0KDQo3LjIuNS4gIE1l c3NhZ2UgUmVwbGF5DQoNCiAgIER1cmluZyA0LXBhc3MgRFNLUFAsIGF0dGVtcHRzIHRvIHJlcGxh eSBhIHByZXZpb3VzbHkgcmVjb3JkZWQgRFNLUFANCiAgIG1lc3NhZ2Ugd2lsbCBiZSBkZXRlY3Rl ZCwgYXMgdGhlIHVzZSBvZiBub25jZXMgZW5zdXJlcyB0aGF0IGJvdGgNCiAgIHBhcnRpZXMgYXJl IGxpdmUuICBGb3IgZXhhbXBsZSwgYSBEU0tQUCBjbGllbnQga25vd3MgdGhhdCBhIHNlcnZlciBp dA0KICAgaXMgY29tbXVuaWNhdGluZyB3aXRoIGlzICJsaXZlIiBzaW5jZSB0aGUgc2VydmVyIE1V U1QgY3JlYXRlIGEgTUFDIG9uDQogICBpbmZvcm1hdGlvbiBzZW50IGJ5IHRoZSBjbGllbnQuDQoN CiAgIFRoZSBzYW1lIGlzIHRydWUgZm9yIDItcGFzcyBEU0tQUCB0aGFua3MgdG8gdGhlIHJlcXVp cmVtZW50IHRoYXQgdGhlDQogICBjbGllbnQgc2VuZHMgUiBpbiB0aGUgPENsaWVudEhlbGxvPiBt ZXNzYWdlIGFuZCB0aGF0IHRoZSBzZXJ2ZXINCiAgIGluY2x1ZGVzIFIgaW4gdGhlIE1BQyBjb21w dXRhdGlvbi4NCg0KICAgSW4gMS1wYXNzIERTS1BQIGNsaWVudHMgdGhhdCByZWNvcmQgdGhlIGxh dGVzdCBJIHVzZWQgYnkgYSBwYXJ0aWN1bGFyDQogICBzZXJ2ZXIgKGFzIGlkZW50aWZpZWQgYnkg SURfUykgd2lsbCBiZSBhYmxlIHRvIGRldGVjdCByZXBsYXlzLg0KDQo3LjIuNi4gIE1lc3NhZ2Ug UmVvcmRlcmluZw0KDQogICBBbiBhdHRhY2tlciBtYXkgYXR0ZW1wdCB0byByZS1vcmRlciA0LXBh c3MgRFNLUFAgbWVzc2FnZXMgYnV0IHRoaXMNCiAgIHdpbGwgYmUgZGV0ZWN0ZWQsIGFzIGVhY2gg bWVzc2FnZSBpcyBvZiBhIHVuaXF1ZSB0eXBlLiAgTm90ZTogTWVzc2FnZQ0KICAgcmUtb3JkZXJp bmcgYXR0YWNrcyBjYW5ub3Qgb2NjdXIgaW4gMi0gYW5kIDEtcGFzcyBEU0tQUCBzaW5jZSBlYWNo DQogICBwYXJ0eSBzZW5kcyBhdCBtb3N0IG9uZSBtZXNzYWdlIGVhY2guDQoNCjcuMi43LiAgTWFu LWluLXRoZS1NaWRkbGUNCg0KICAgSW4gYWRkaXRpb24gdG8gb3RoZXIgYWN0aXZlIGF0dGFja3Ms IGFuIGF0dGFja2VyIHBvc2luZyBhcyBhIG1hbiBpbg0KICAgdGhlIG1pZGRsZSBtYXkgYmUgYWJs ZSB0byBwcm92aWRlIGhpcyBvd24gcHVibGljIGtleSB0byB0aGUgRFNLUFANCiAgIGNsaWVudC4g IFRoaXMgdGhyZWF0IGFuZCBjb3VudGVybWVhc3VyZXMgdG8gaXQgYXJlIGRpc2N1c3NlZCBpbg0K ICAgU2VjdGlvbiA0LjIuICBBbiBhdHRhY2tlciBwb3NpbmcgYXMgYSBtYW4taW4tdGhlLW1pZGRs ZSBtYXkgYWxzbyBiZQ0KICAgYWN0aW5nIGFzIGEgcHJveHkgYW5kLCBoZW5jZSwgbWF5IG5vdCBp bnRlcmZlcmUgd2l0aCBEU0tQUCBydW5zIGJ1dA0KICAgc3RpbGwgbGVhcm4gdmFsdWFibGUgaW5m b3JtYXRpb247IHNlZSBTZWN0aW9uIDcuMy4NCg0KNy4zLiAgUGFzc2l2ZSBBdHRhY2tzDQoNCiAg IFBhc3NpdmUgYXR0YWNrZXJzIG1heSBlYXZlc2Ryb3Agb24gRFNLUFAgcnVucyB0byBsZWFybiBp bmZvcm1hdGlvbg0KICAgdGhhdCBsYXRlciBvbiBtYXkgYmUgdXNlZCB0byBpbXBlcnNvbmF0ZSB1 c2VycywgbW91bnQgYWN0aXZlIGF0dGFja3MsDQogICBldGMuDQoNCg0KDQoNCkRvaGVydHksIGV0 IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgOSwgMjAwOCAgICAgICAgICAgICAgIFtQYWdl IDY2XQ0KDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICBEU0tQUCAgICAgICAg ICAgICAgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgIElmIERTS1BQIGlzIG5vdCBydW4gb3Zl ciBhIHRyYW5zcG9ydCBwcm92aWRpbmcgcHJpdmFjeSwgYSBwYXNzaXZlDQogICBhdHRhY2tlciBt YXkgbGVhcm46DQogICBvICBXaGF0IGNyeXB0b2dyYXBoaWMgbW9kdWxlcyBhIHBhcnRpY3VsYXIg dXNlciBpcyBpbiBwb3NzZXNzaW9uIG9mOw0KICAgbyAgVGhlIGlkZW50aWZpZXJzIG9mIGtleXMg b24gdGhvc2UgY3J5cG90Z3JhcGhpYyBtb2R1bGVzIGFuZCBvdGhlcg0KICAgICAgYXR0cmlidXRl cyBwZXJ0YWluaW5nIHRvIHRob3NlIGtleXMsIGUuZy4sIHRoZSBsaWZldGltZSBvZiB0aGUNCiAg ICAgIGtleXM7IGFuZA0KICAgbyAgRFNLUFAgdmVyc2lvbnMgYW5kIGNyeXB0b2dyYXBoaWMgYWxn b3JpdGhtcyBzdXBwb3J0ZWQgYnkgYQ0KICAgICAgcGFydGljdWxhciBEU0tQUCBjbGllbnQgb3Ig c2VydmVyLg0KICAgV2hlbmV2ZXIgdGhlIGFib3ZlIGlzIGEgY29uY2VyLCBEU0tQUCBTSE9VTEQg YmUgcnVuIG92ZXIgYSB0cmFuc3BvcnQNCiAgIHByb3ZpZGluZyBwcml2YWN5LiAgSWYgbWFuLWlu LXRoZS1taWRkbGUgYXR0YWNrcyBmb3IgdGhlIHB1cnBvc2VzDQogICBkZXNjcmliZWQgYWJvdmUg YXJlIGEgY29uY2VybiwgdGhlIHRyYW5zcG9ydCBTSE9VTEQgYWxzbyBvZmZlcg0KICAgc2VydmVy LXNpZGUgYXV0aGVudGljYXRpb24uDQoNCjcuNC4gIENyeXB0b2dyYXBoaWMgQXR0YWNrcw0KDQog ICBBbiBhdHRhY2tlciB3aXRoIHVubGltaXRlZCBhY2Nlc3MgdG8gYW4gaW5pdGlhbGl6ZWQgY3J5 cHRvZ3JhcGhpYw0KICAgbW9kdWxlIG1heSB1c2UgdGhlIG1vZHVsZSBhcyBhbiAib3JhY2xlIiB0 byBwcmUtY29tcHV0ZSB2YWx1ZXMgdGhhdA0KICAgbGF0ZXIgb24gbWF5IGJlIHVzZWQgdG8gaW1w ZXJzb25hdGUgdGhlIERTS1BQIHNlcnZlci4gIFNlY3Rpb24gNC43DQogICBhbmQgU2VjdGlvbiA0 LjEwIGNvbnRhaW4gZGlzY3Vzc2lvbnMgb2YgdGhpcyB0aHJlYXQgYW5kIHN0ZXBzDQogICBSRUNP TU1FTkRFRCB0byBwcm90ZWN0IGFnYWluc3QgaXQuDQoNCjcuNS4gIEF0dGFja3Mgb24gdGhlIElu dGVyYWN0aW9uIGJldHdlZW4gRFNLUFAgYW5kIFVzZXIgQXV0aGVudGljYXRpb24NCg0KICAgSWYg a2V5cyBnZW5lcmF0ZWQgaW4gRFNLUFAgd2lsbCBiZSBhc3NvY2lhdGVkIHdpdGggYSBwYXJ0aWN1 bGFyIHVzZXINCiAgIGF0IHRoZSBEU0tQUCBzZXJ2ZXIgKG9yIGEgc2VydmVyIHRydXN0ZWQgYnks IGFuZCBjb21tdW5pY2F0aW5nIHdpdGgNCiAgIHRoZSBEU0tQUCBzZXJ2ZXIpLCB0aGVuIGluIG9y ZGVyIHRvIHByb3RlY3QgYWdhaW5zdCB0aHJlYXRzIHdoZXJlIGFuDQogICBhdHRhY2tlciByZXBs YWNlcyBhIGNsaWVudC1wcm92aWRlZCBlbmNyeXB0ZWQgUl9DIHdpdGggaGlzIG93biBSJ0MNCiAg IChyZWdhcmRsZXNzIG9mIHdoZXRoZXIgdGhlIHB1YmxpYy1rZXkgdmFyaWFudCBvciB0aGUgc2hh cmVkLXNlY3JldA0KICAgdmFyaWFudCBvZiBEU0tQUCBpcyBlbXBsb3llZCB0byBlbmNyeXB0IHRo ZSBjbGllbnQgbm9uY2UpLCB0aGUgc2VydmVyDQogICBTSE9VTEQgbm90IGNvbW1pdCB0byBhc3Nv Y2lhdGUgYSBnZW5lcmF0ZWQgS19UT0tFTiB3aXRoIHRoZSBnaXZlbg0KICAgY3J5cHRvZ3JhcGhp YyBtb2R1bGUgdW50aWwgdGhlIHVzZXIgc2ltdWx0YW5lb3VzbHkgaGFzIHByb3ZlbiBib3RoDQog ICBwb3NzZXNzaW9uIG9mIHRoZSBkZXZpY2UgdGhhdCBob3N0cyB0aGUgY3J5cHRvZ3JhcGhpYyBt b2R1bGUNCiAgIGNvbnRhaW5pbmcgS19UT0tFTiBhbmQgc29tZSBvdXQtb2YtYmFuZCBwcm92aWRl ZCBhdXRoZW50aWNhdGluZw0KICAgaW5mb3JtYXRpb24gKGUuZy4sIGEgdGVtcG9yYXJ5IHBhc3N3 b3JkKS4gIEZvciBleGFtcGxlLCBpZiB0aGUNCiAgIGNyeXB0b2dyYXBoaWMgbW9kdWxlIGlzIGEg b25lLXRpbWUgcGFzc3dvcmQgdG9rZW4sIHRoZSB1c2VyIGNvdWxkIGJlDQogICByZXF1aXJlZCB0 byBhdXRoZW50aWNhdGUgd2l0aCBib3RoIGEgb25lLXRpbWUgcGFzc3dvcmQgZ2VuZXJhdGVkIGJ5 DQogICB0aGUgY3J5cHRvZ3JhcGhpYyBtb2R1bGUgYW5kIGFuIG91dC1vZi1iYW5kIHByb3ZpZGVk IHRlbXBvcmFyeSBQSU4gaW4NCiAgIG9yZGVyIHRvIGhhdmUgdGhlIHNlcnZlciAiY29tbWl0IiB0 byB0aGUgZ2VuZXJhdGVkIE9UUCB2YWx1ZSBmb3IgdGhlDQogICBnaXZlbiB1c2VyLiAgUHJlZmVy YWJseSwgdGhlIHVzZXIgU0hPVUxEIHBlcmZvcm0gdGhpcyBvcGVyYXRpb24gZnJvbQ0KICAgYW5v dGhlciBob3N0IHRoYW4gdGhlIG9uZSB1c2VkIHRvIGluaXRpYWxpemUga2V5cyBvbiB0aGUNCiAg IGNyeXB0b2dyYXBoaWMgbW9kdWxlLCBpbiBvcmRlciB0byBtaW5pbWl6ZSB0aGUgcmlzayBvZiBt YWxpY2lvdXMNCiAgIHNvZnR3YXJlIG9uIHRoZSBjbGllbnQgaW50ZXJmZXJpbmcgd2l0aCB0aGUg cHJvY2Vzcy4NCg0KICAgTm90ZTogVGhpcyBzY2VuYXJpbywgd2hlcmVpbiB0aGUgYXR0YWNrZXIg cmVwbGFjZXMgYSBjbGllbnQtcHJvdmlkZWQNCiAgIFJfQyB3aXRoIGhpcyBvd24gUidDLCBkb2Vz IG5vdCBhcHBseSB0byAyLSBhbmQgMS1wYXNzIERTS1BQIGFzIHRoZQ0KICAgY2xpZW50IGRvZXMg bm90IHByb3ZpZGUgYW55IGVudHJvcHkgdG8gS19UT0tFTi4gIFRoZSBhdHRhY2sgYXMgc3VjaA0K ICAgKGFuZCBpdHMgY291bnRlcm1lYXN1cmVzKSBzdGlsbCBhcHBsaWVzIHRvIDItIGFuZCAxLXBh c3MgRFNLUFAsDQogICBob3dldmVyLCBhcyBpdCBlc3NlbnRpYWxseSBpcyBhIG1hbi1pbi10aGUt bWlkZGxlIGF0dGFjay4NCg0KDQoNCkRvaGVydHksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEph bnVhcnkgOSwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDY3XQ0KDQoNCkludGVybmV0LURyYWZ0 ICAgICAgICAgICAgICAgICAgICBEU0tQUCAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAw Nw0KDQoNCiAgIEFub3RoZXIgdGhyZWF0IGFyaXNlcyB3aGVuIGFuIGF0dGFja2VyIGlzIGFibGUg dG8gdHJpY2sgYSB1c2VyIHRvDQogICBhdXRoZW50aWNhdGUgdG8gdGhlIGF0dGFja2VyIHJhdGhl ciB0aGFuIHRvIHRoZSBsZWdpdGltYXRlIHNlcnZpY2UNCiAgIGJlZm9yZSB0aGUgRFNLUFAgcHJv dG9jb2wgcnVuLiAgSWYgc3VjY2Vzc2Z1bCwgdGhlIGF0dGFja2VyIHdpbGwgdGhlbg0KICAgYmUg YWJsZSB0byBpbXBlcnNvbmF0ZSB0aGUgdXNlciB0b3dhcmRzIHRoZSBsZWdpdGltYXRlIHNlcnZp Y2UsIGFuZA0KICAgc3Vic2VxdWVudGx5IHJlY2VpdmUgYSB2YWxpZCBEU0tQUCB0cmlnZ2VyLiAg SWYgdGhlIHB1YmxpYy1rZXkNCiAgIHZhcmlhbnQgb2YgRFNLUFAgaXMgdXNlZCwgdGhpcyBtYXkg cmVzdWx0IGluIHRoZSBhdHRhY2tlciBiZWluZyBhYmxlDQogICB0byAoYWZ0ZXIgYSBzdWNjZXNz ZnVsIERTS1BQIHByb3RvY29sIHJ1bikgaW1wZXJzb25hdGUgdGhlIHVzZXIuDQogICBPcmRpbmFy eSBwcmVjYXV0aW9ucyBNVVNULCB0aGVyZWZvcmUsIGJlIGluIHBsYWNlIHRvIGVuc3VyZSB0aGF0 DQogICB1c2VycyBhdXRoZW50aWNhdGUgb25seSB0byBsZWdpdGltYXRlIHNlcnZpY2VzLg0KDQo3 LjYuICBBZGRpdGlvbmFsIENvbnNpZGVyYXRpb25zIFNwZWNpZmljIHRvIDItIGFuZCAxLXBhc3Mg RFNLUFANCg0KNy42LjEuICBDbGllbnQgQ29udHJpYnV0aW9ucyB0byBLX1RPS0VOIEVudHJvcHkN Cg0KICAgSW4gNC1wYXNzIERTS1BQLCBib3RoIHRoZSBjbGllbnQgYW5kIHRoZSBzZXJ2ZXIgcHJv dmlkZSByYW5kb21pemluZw0KICAgbWF0ZXJpYWwgdG8gS19UT0tFTiAsIGluIGEgbWFubmVyIHRo YXQgYWxsb3dzIGJvdGggcGFydGllcyB0byB2ZXJpZnkNCiAgIHRoYXQgdGhleSBkaWQgY29udHJp YnV0ZSB0byB0aGUgcmVzdWx0aW5nIGtleS4gIEluIHRoZSAxLSBhbmQgMi1wYXNzDQogICBEU0tQ UCB2ZXJzaW9ucyBkZWZpbmVkIGhlcmVpbiwgb25seSB0aGUgc2VydmVyIGNvbnRyaWJ1dGVzIHRv IHRoZQ0KICAgZW50cm9weSBvZiBLX1RPS0VOLiAgVGhpcyBtZWFucyB0aGF0IGEgYnJva2VuIG9y IGNvbXByb21pc2VkDQogICAocHNldWRvLSlyYW5kb20gbnVtYmVyIGdlbmVyYXRvciBpbiB0aGUg c2VydmVyIG1heSBjYXVzZSBtb3JlIGRhbWFnZQ0KICAgdGhhbiBpdCB3b3VsZCBpbiB0aGUgNC1w YXNzIHZhcmlhbnQuICBTZXJ2ZXIgaW1wbGVtZW50YXRpb25zIFNIT1VMRA0KICAgdGhlcmVmb3Jl IHRha2UgZXh0cmVtZSBjYXJlIHRvIGVuc3VyZSB0aGF0IHRoaXMgc2l0dWF0aW9uIGRvZXMgbm90 DQogICBvY2N1ci4NCg0KNy42LjIuICBLZXkgQ29uZmlybWF0aW9uDQoNCiAgIDQtcGFzcyBEU0tQ UCBzZXJ2ZXJzIHByb3ZpZGUga2V5IGNvbmZpcm1hdGlvbiB0aHJvdWdoIHRoZSBNQUMgb24gUl9D DQogICBpbiB0aGUgPFNlcnZlckZpbmlzaGVkPiBtZXNzYWdlLiAgSW4gdGhlIDEtIGFuZCAyLXBh c3MgRFNLUFAgdmFyaWFudHMNCiAgIGRlc2NyaWJlZCBoZXJlaW4sIGtleSBjb25maXJtYXRpb24g aXMgcHJvdmlkZWQgYnkgdGhlIE1BQyBpbmNsdWRpbmcgSQ0KICAgKGluIHRoZSAxLXBhc3MgY2Fz ZSkgb3IgUiAoMi1wYXNzIGNhc2UpLCB1c2luZyBLX01BQy4NCg0KNy42LjMuICBTZXJ2ZXIgQXV0 aGVudGljYXRpb24NCg0KICAgRFNLUFAgc2VydmVycyBNVVNUIGF1dGhlbnRpY2F0ZSB0aGVtc2Vs dmVzIHdoZW5ldmVyIGEgc3VjY2Vzc2Z1bA0KICAgRFNLUFAgMS0gb3IgMi1wYXNzIHByb3RvY29s IHJ1biB3b3VsZCByZXN1bHQgaW4gYW4gZXhpc3RpbmcgS19UT0tFTg0KICAgYmVpbmcgcmVwbGFj ZWQgYnkgYSBLX1RPS0VOJywgb3IgZWxzZSBhIGRlbmlhbC1vZi1zZXJ2aWNlIGF0dGFjaw0KICAg d2hlcmUgYW4gdW5hdXRob3JpemVkIERTS1BQIHNlcnZlciByZXBsYWNlcyBhIEtfVE9LRU4gd2l0 aCBhbm90aGVyDQogICBrZXkgd291bGQgYmUgcG9zc2libGUuICBJbiAxLSBhbmQgMi1wYXNzIERT S1BQLCBzZXJ2ZXJzIGF1dGhlbnRpY2F0ZQ0KICAgYnkgaW5jbHVkaW5nIHRoZSBBdXRoZW50aWNh dGlvbkRhdGFUeXBlIGV4dGVuc2lvbiBjb250YWluaW5nIGEgTUFDIGFzDQogICBkZXNjcmliZWQg aW4gU2VjdGlvbiA0LjggYWJvdmUuDQoNCjcuNi40LiAgQ2xpZW50IEF1dGhlbnRpY2F0aW9uDQoN CiAgIEEgRFNLUFAgc2VydmVyIE1VU1QgYXV0aGVudGljYXRlIGEgY2xpZW50IHRvIGVuc3VyZSB0 aGF0IEtfVE9LRU4gaXMNCiAgIGRlbGl2ZXJlZCB0byB0aGUgaW50ZW5kZWQgZGV2aWNlLiAgVGhl IGZvbGxvd2luZyBtZWFzdXJlcyBTSE9VTEQgYmUNCiAgIGNvbnNpZGVyZWQ6DQoNCg0KDQoNCg0K RG9oZXJ0eSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAgICAgICAg ICAgICAgW1BhZ2UgNjhdDQoNCg0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgIERT S1BQICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KICAgbyAgV2hlbiBhIGRl dmljZSBjZXJ0aWZpY2F0ZSBpcyB1c2VkIGZvciBjbGllbnQgYXV0aGVudGljYXRpb24sIHRoZQ0K ICAgICAgRFNLUFAgc2VydmVyIFNIT1VMRCBmb2xsb3cgc3RhbmRhcmQgY2VydGlmaWNhdGUgdmVy aWZpY2F0aW9uDQogICAgICBwcm9jZXNzZXMgdG8gZW5zdXJlIHRoYXQgaXQgaXMgYSB0cnVzdGVk IGRldmljZS4NCiAgIG8gIFdoZW4gYW4gQXV0aGVudGljYXRpb24gQ29kZSBpcyB1c2VkIGZvciBj bGllbnQgYXV0aGVudGljYXRpb24sIGENCiAgICAgIHBhc3N3b3JkIGRpY3Rpb25hcnkgYXR0YWNr IG9uIHRoZSBhdXRoZW50aWNhdGlvbiBkYXRhIGlzIHBvc3NpYmxlLg0KICAgICAgV2hlbiBhIHNl Y3VyZSBjaGFubmVsLCBlLmcuLCBTU0wgb3IgVExTLCBpcyBlc3RhYmxpc2hlZCBiZXR3ZWVuIGEN CiAgICAgIERTS1BQIGNsaWVudCBhbmQgc2VydmVyLCBhbiBhdHRhY2tlciBjb3VsZCBzdWNjZXNz ZnVsbHkgYnJ1dGUtDQogICAgICBmb3JjZSBndWVzcyBhbiBBdXRoZW50aWNhdGlvbiBDb2RlLCBh bGxvd2luZyBoaW0gdG8gaWxsZWdpdGltYXRlbHkNCiAgICAgIHJlY2VpdmUgS19UT0tFTi4NCiAg IG8gIFRoZSBsZW5ndGggdGhlIG9mIHRoZSBBdXRoZW50aWNhdGlvbiBDb2RlIHdoZW4gdXNlZCBv dmVyIGEgbm9uLQ0KICAgICAgc2VjdXJlIGNoYW5uZWwgU0hPVUxEIGJlIGxvbmdlciB0aGFuIHdo YXQgaXMgdXNlZCBvdmVyIGEgc2VjdXJlDQogICAgICBjaGFubmVsLiAgV2hlbiBhIGRldmljZSwg ZS5nLiwgc29tZSBtb2JpbGUgcGhvbmVzIHdpdGggc21hbGwNCiAgICAgIHNjcmVlbnMsIGNhbm5v dCBoYW5kbGUgYSBsb25nIEF1dGhlbnRpY2F0aW9uIENvZGUgaW4gYSB1c2VyLQ0KICAgICAgZnJp ZW5kbHkgbWFubmVyLCBEU0tQUCBTSE9VTEQgcmVseSBvbiBhIHNlY3VyZSBjaGFubmVsIGZvcg0K ICAgICAgY29tbXVuaWNhdGlvbi4NCiAgIG8gIEluIHRoZSBjYXNlIHRoYXQgYSBub24tc2VjdXJl IGNoYW5uZWwgaGFzIHRvIGJlIHVzZWQsIHRoZQ0KICAgICAgQXV0aGVudGljYXRpb24gQ29kZSBT SE9VTEQgYmUgc2VudCB0byB0aGUgc2VydmVyIE1BQydzIHdpdGggYQ0KICAgICAgRFNLUFAgc2Vy dmVyJ3Mgbm9uY2UgdmFsdWUuICBUaGUgQXV0aGVudGljYXRpb24gQ29kZSBhbmQgbm9uY2UNCiAg ICAgIHZhbHVlIE1VU1QgYmUgc3Ryb25nIGVub3VnaCB0byBwcmV2ZW50IG9mZmxpbmUgYnJ1dGUt Zm9yY2UNCiAgICAgIHJlY292ZXJ5IG9mIHRoZSBBdXRoZW50aWNhdGlvbiBDb2RlIGZyb20gdGhl IEhNQUMgZGF0YS4gIEJlY2F1c2UNCiAgICAgIHRoZSBub25jZSB2YWx1ZSBpcyBhbG1vc3QgcHVi bGljIGFjcm9zcyBhIG5vbi1zZWN1cmUgY2hhbm5lbCwgdGhlDQogICAgICBrZXkgc3RyZW5ndGgg aXMgZGVwZW5kZW50IG9uIHRoZSBBdXRoZW50aWNhdGlvbiBDb2RlLg0KDQo3LjYuNS4gIEtleSBQ cm90ZWN0aW9uIGluIHRoZSBQYXNzcGhyYXNlIFByb2ZpbGUNCg0KICAgVGhlIHBhc3NwaHJhc2Ut YmFzZWQga2V5IHdyYXAgcHJvZmlsZSB1c2VzIHRoZSBQQktERjIgZnVuY3Rpb24gZnJvbQ0KICAg W1BLQ1MtNV0gdG8gZ2VuZXJhdGUgYW4gZW5jcnlwdGlvbiBrZXkgZnJvbSBhIHBhc3NwaHJhc2Ug YW5kIHNhbHQNCiAgIHN0cmluZy4gIFRoZSBkZXJpdmVkIGtleSwgS19ERVJJVkVEIGlzIHVzZWQg YnkgdGhlIHNlcnZlciB0byBlbmNyeXB0DQogICBLX1RPS0VOIGFuZCBieSB0aGUgY3J5cHRvZ3Jh cGhpYyBtb2R1bGUgdG8gZGVjcnlwdCB0aGUgbmV3bHkNCiAgIGRlbGl2ZXJlZCBLX1RPS0VOLiAg SXQgaXMgaW1wb3J0YW50IHRvIG5vdGUgdGhhdCBwYXNzcGhyYXNlLWJhc2VkDQogICBlbmNyeXB0 aW9uIGlzIGdlbmVyYWxseSBsaW1pdGVkIGluIHRoZSBzZWN1cml0eSB0aGF0IGl0IHByb3ZpZGVz DQogICBkZXNwaXRlIHRoZSB1c2Ugb2Ygc2FsdCBhbmQgaXRlcmF0aW9uIGNvdW50IGluIFBCS0RG MiB0byBpbmNyZWFzZSB0aGUNCiAgIGNvbXBsZXhpdHkgb2YgYXR0YWNrLiAgSW1wbGVtZW50YXRp b25zIFNIT1VMRCB0aGVyZWZvcmUgdGFrZQ0KICAgYWRkaXRpb25hbCBtZWFzdXJlcyB0byBzdHJl bmd0aGVuIHRoZSBzZWN1cml0eSBvZiB0aGUgcGFzc3BocmFzZS0NCiAgIGJhc2VkIGtleSB3cmFw IHByb2ZpbGUuICBUaGUgZm9sbG93aW5nIG1lYXN1cmVzIFNIT1VMRCBiZSBjb25zaWRlcmVkDQog ICB3aGVyZSBhcHBsaWNhYmxlOg0KDQogICBvICBUaGUgcGFzc3BocmFzZSBTSE9VTEQgYmUgc2Vs ZWN0ZWQgd2VsbCwgYW5kIHVzYWdlIGd1aWRlbGluZXMgc3VjaA0KICAgICAgYXMgdGhlIG9uZXMg aW4gW05JU1QtUFdEXSBTSE9VTEQgYmUgdGFrZW4gaW50byBhY2NvdW50Lg0KICAgbyAgQSBkaWZm ZXJlbnQgcGFzc3BocmFzZSBTSE9VTEQgYmUgdXNlZCBmb3IgZXZlcnkga2V5IGluaXRpYWxpemF0 aW9uDQogICAgICB3aGVyZXZlciBwb3NzaWJsZSAodGhlIHVzZSBvZiBhIGdsb2JhbCBwYXNzcGhy YXNlIGZvciBhIGJhdGNoIG9mDQogICAgICBjcnlwdG9ncmFwaGljIG1vZHVsZXMgU0hPVUxEIGJl IGF2b2lkZWQsIGZvciBleGFtcGxlKS4gIE9uZSB3YXkgdG8NCiAgICAgIGFjaGlldmUgdGhpcyBp cyB0byB1c2UgcmFuZG9tbHktZ2VuZXJhdGVkIHBhc3NwaHJhc2VzLg0KICAgbyAgVGhlIHBhc3Nw aHJhc2UgU0hPVUxEIGJlIHByb3RlY3RlZCB3ZWxsIGlmIHN0b3JlZCBvbiB0aGUgc2VydmVyDQog ICAgICBhbmQvb3Igb24gdGhlIGNyeXB0b2dyYXBoaWMgbW9kdWxlIGFuZCBTSE9VTEQgYmUgZGVs aXZlcmVkIHRvIHRoZQ0KICAgICAgZGV2aWNlJ3MgdXNlciB1c2luZyBzZWN1cmUgbWV0aG9kcy4N Cg0KDQoNCg0KDQpEb2hlcnR5LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDksIDIw MDggICAgICAgICAgICAgICBbUGFnZSA2OV0NCg0KDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAg ICAgICAgICAgRFNLUFAgICAgICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQogICBv ICBVc2VyIHByZS1hdXRoZW50aWNhdGlvbiBTSE9VTEQgYmUgaW1wbGVtZW50ZWQgdG8gZW5zdXJl IHRoYXQNCiAgICAgIEtfVE9LRU4gaXMgbm90IGRlbGl2ZXJlZCB0byBhIHJvZ3VlIHJlY2lwaWVu dC4NCiAgIG8gIFRoZSBpdGVyYXRpb24gY291bnQgaW4gUEJLREYyIFNIT1VMRCBiZSBoaWdoIHRv IGltcG9zZSBtb3JlIHdvcmsNCiAgICAgIGZvciBhbiBhdHRhY2tlciB1c2luZyBicnV0ZS1mb3Jj ZSBtZXRob2RzIChzZWUgW1BLQ1MtNV0gZm9yDQogICAgICByZWNvbW1lbmRhdGlvbnMpLiAgSG93 ZXZlciwgaXQgTVVTVCBiZSBub3RlZCB0aGF0IHRoZSBoaWdoZXIgdGhlDQogICAgICBjb3VudCwg dGhlIG1vcmUgd29yayBpcyByZXF1aXJlZCBvbiB0aGUgbGVnaXRpbWF0ZSBjcnlwdG9ncmFwaGlj DQogICAgICBtb2R1bGUgdG8gZGVjcnlwdCB0aGUgbmV3bHkgZGVsaXZlcmVkIEtfVE9LRU4uICBT ZXJ2ZXJzIE1BWSB1c2UNCiAgICAgIHJlbGF0aXZlbHkgbG93IGl0ZXJhdGlvbiBjb3VudHMgdG8g YWNjb21tb2RhdGUgZGV2aWNlcyB3aXRoDQogICAgICBsaW1pdGVkIHByb2Nlc3NpbmcgcG93ZXIg c3VjaCBhcyBzb21lIFBEQSBhbmQgY2VsbCBwaG9uZXMgd2hlbg0KICAgICAgb3RoZXIgc2VjdXJp dHkgbWVhc3VyZXMgYXJlIGltcGxlbWVudGVkIGFuZCB0aGUgc2VjdXJpdHkgb2YgdGhlDQogICAg ICBwYXNzcGhyYXNlLWJhc2VkIGtleSB3cmFwIG1ldGhvZCBpcyBub3Qgd2Vha2VuZWQuDQogICBv ICBUcmFuc3BvcnQgbGV2ZWwgc2VjdXJpdHkgKGUuZy4gIFRMUykgU0hPVUxEIGJlIHVzZWQgd2hl cmUgcG9zc2libGUNCiAgICAgIHRvIHByb3RlY3QgYSAyLXBhc3Mgb3IgMS1wYXNzIHByb3RvY29s IHJ1bi4gIFRyYW5zcG9ydCBsZXZlbA0KICAgICAgc2VjdXJpdHkgcHJvdmlkZXMgYSBzZWNvbmQg bGF5ZXIgb2YgcHJvdGVjdGlvbiBmb3IgdGhlIG5ld2x5DQogICAgICBnZW5lcmF0ZWQgS19UT0tF Ti4NCg0KDQo4LiAgSUFOQSBDb25zaWRlcmF0aW9ucw0KDQogICBUaGlzIGRvY3VtZW50IGNhbGxz IGZvciByZWdpc3RyYXRpb24gb2YgbmV3IFVSTnMgd2l0aGluIHRoZSBJRVRGIHN1Yi0NCiAgIG5h bWVzcGFjZSBwZXIgUkZDMzU1MyBbUkZDMzU1M10uICBUaGUgZm9sbG93aW5nIFVSTnMgYXJlIFJF Q09NTUVOREVEOg0KICAgbyAgRFNLUFAgWE1MIHNjaGVtYTogInVybjppZXRmOnBhcmFtczp4bWw6 c2NoZW1hOmtleXByb3Y6cHJvdG9jb2wiDQogICBvICBEU0tQUCBYTUwgbmFtZXNwYWNlOiAidXJu OmlldGY6cGFyYW1zOnhtbDpuczprZXlwcm92OnByb3RvY29sIg0KDQoNCjkuICBJbnRlbGxlY3R1 YWwgUHJvcGVydHkgQ29uc2lkZXJhdGlvbnMNCg0KICAgUlNBIGFuZCBSU0EgU2VjdXJpdHkgYXJl IHJlZ2lzdGVyZWQgdHJhZGVtYXJrcyBvciB0cmFkZW1hcmtzIG9mIFJTQQ0KICAgU2VjdXJpdHkg SW5jLiBpbiB0aGUgVW5pdGVkIFN0YXRlcyBhbmQvb3Igb3RoZXIgY291bnRyaWVzLiAgVGhlIG5h bWVzDQogICBvZiBvdGhlciBwcm9kdWN0cyBhbmQgc2VydmljZXMgbWVudGlvbmVkIG1heSBiZSB0 aGUgdHJhZGVtYXJrcyBvZg0KICAgdGhlaXIgcmVzcGVjdGl2ZSBvd25lcnMuDQoNCg0KMTAuICBB Y2tub3dsZWRnZW1lbnRzDQoNCiAgIFRoZSBhdXRob3JzIHdvdWxkIGxpa2UgdG8gdGhhbmsgYWxs IHRoZSBtZW1iZXJzIG9mIE9BVEggW09BVEhdIGFuZA0KICAgcGFydGljaXBhbnRzIG9mIE9UUFMg d29ya3Nob3BzIGZvciB0aGVpciByZXZpZXcgYW5kIGNvbW1lbnRzIHJlbGF0ZWQNCiAgIHRvIHRo aXMgZG9jdW1lbnQuDQoNCg0KMTEuICBSZWZlcmVuY2VzDQoNCjExLjEuICBOb3JtYXRpdmUgcmVm ZXJlbmNlcw0KDQogICBbVU5JQ09ERV0gIERhdmlzLCBNLiBhbmQgTS4gRHVlcnN0LCAiVW5pY29k ZSBOb3JtYWxpemF0aW9uIEZvcm1zIiwNCiAgICAgICAgICAgICAgTWFyY2ggMjAwMSwNCiAgICAg ICAgICAgICAgPGh0dHA6Ly93d3cudW5pY29kZS5vcmcvdW5pY29kZS9yZXBvcnRzL3RyMTUvDQog ICAgICAgICAgICAgIHRyMTUtMjEuaHRtbD4uDQoNCg0KDQpEb2hlcnR5LCBldCBhbC4gICAgICAg ICAgRXhwaXJlcyBKYW51YXJ5IDksIDIwMDggICAgICAgICAgICAgICBbUGFnZSA3MF0NCg0KDQpJ bnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgRFNLUFAgICAgICAgICAgICAgICAgICAg ICAgICBKdWx5IDIwMDcNCg0KDQogICBbWE1MRFNJR10gIFczQywgIlhNTCBTaWduYXR1cmUgU3lu dGF4IGFuZCBQcm9jZXNzaW5nIiwNCiAgICAgICAgICAgICAgVzNDIFJlY29tbWVuZGF0aW9uLCBG ZWJydWFyeSAyMDAyLA0KICAgICAgICAgICAgICA8aHR0cDovL3d3dy53My5vcmcvVFIvMjAwMi9S RUMteG1sZHNpZy1jb3JlLTIwMDIwMjEyLz4uDQoNCiAgIFtYTUxFTkNdICAgVzNDLCAiWE1MIEVu Y3J5cHRpb24gU3ludGF4IGFuZCBQcm9jZXNzaW5nIiwNCiAgICAgICAgICAgICAgVzNDIFJlY29t bWVuZGF0aW9uLCBEZWNlbWJlciAyMDAyLA0KICAgICAgICAgICAgICA8aHR0cDovL3d3dy53My5v cmcvVFIvMjAwMi9SRUMteG1sZHNpZy1jb3JlLTIwMDIwMjEyLz4uDQoNCjExLjIuICBJbmZvcm1h dGl2ZSByZWZlcmVuY2VzDQoNCiAgIFtDVC1LSVAtUDExXQ0KICAgICAgICAgICAgICBSU0EgTGFi b3JhdG9yaWVzLCAiUEtDUyAjMTEgTWVjaGFuaXNtcyBmb3IgdGhlDQogICAgICAgICAgICAgIENy eXB0b2dyYXBoaWMgVG9rZW4gS2V5IEluaXRpYWxpemF0aW9uIFByb3RvY29sIiwgUEtDUyAjMTEN CiAgICAgICAgICAgICAgVmVyc2lvbiAyLjIwIEFtZC4yLCBEZWNlbWJlciAyMDA1LA0KICAgICAg ICAgICAgICA8aHR0cDovL3d3dy5yc2FzZWN1cml0eS5jb20vcnNhbGFicy9wa2NzLz4uDQoNCiAg IFtGQVFdICAgICAgUlNBIExhYm9yYXRvcmllcywgIkZyZXF1ZW50bHkgQXNrZWQgUXVlc3Rpb25z IEFib3V0DQogICAgICAgICAgICAgIFRvZGF5J3MgQ3J5cHRvZ3JhcGh5IiwgIFZlcnNpb24gNC4x LCAyMDAwLg0KDQogICBbRklQUzE4MC1TSEFdDQogICAgICAgICAgICAgIE5hdGlvbmFsIEluc3Rp dHV0ZSBvZiBTdGFuZGFyZHMgYW5kIFRlY2hub2xvZ3ksICJTZWN1cmUNCiAgICAgICAgICAgICAg SGFzaCBTdGFuZGFyZCIsIEZJUFMgMTgwLTIsIEZlYnJ1YXJ5IDIwMDQsIDxodHRwOi8vDQogICAg ICAgICAgICAgIGNzcmMubmlzdC5nb3YvcHVibGljYXRpb25zL2ZpcHMvZmlwczE4MC0yLw0KICAg ICAgICAgICAgICBmaXBzMTgwLTJ3aXRoY2hhbmdlbm90aWNlLnBkZj4uDQoNCiAgIFtGSVBTMTk3 LUFFU10NCiAgICAgICAgICAgICAgTmF0aW9uYWwgSW5zdGl0dXRlIG9mIFN0YW5kYXJkcyBhbmQg VGVjaG5vbG9neSwNCiAgICAgICAgICAgICAgIlNwZWNpZmljYXRpb24gZm9yIHRoZSBBZHZhbmNl ZCBFbmNyeXB0aW9uIFN0YW5kYXJkDQogICAgICAgICAgICAgIChBRVMpIiwgRklQUyAxOTcsIE5v dmVtYmVyIDIwMDEsIDxodHRwOi8vY3NyYy5uaXN0Lmdvdi8NCiAgICAgICAgICAgICAgcHVibGlj YXRpb25zL2ZpcHMvZmlwczE5Ny9maXBzLTE5Ny5wZGY+Lg0KDQogICBbRlNFMjAwM10gIEl3YXRh LCBULiBhbmQgSy4gS3Vyb3Nhd2EsICJPTUFDOiBPbmUtS2V5IENCQyBNQUMuIEluIEZhc3QNCiAg ICAgICAgICAgICAgU29mdHdhcmUgRW5jcnlwdGlvbiIsIEZTRSAyMDAzLCBTcHJpbmdlci1WZXJs YWcgLCAyMDAzLA0KICAgICAgICAgICAgICA8aHR0cDovL2NyeXB0LmNpcy5pYmFyYWtpLmFjLmpw L29tYWMvZG9jcy9vbWFjLnBkZj4uDQoNCiAgIFtOSVNULVBXRF0NCiAgICAgICAgICAgICAgTmF0 aW9uYWwgSW5zdGl0dXRlIG9mIFN0YW5kYXJkcyBhbmQgVGVjaG5vbG9neSwgIlBhc3N3b3JkDQog ICAgICAgICAgICAgIFVzYWdlIiwgRklQUyAxMTIsIE1heSAxOTg1LA0KICAgICAgICAgICAgICA8 aHR0cDovL3d3dy5pdGwubmlzdC5nb3YvZmlwc3B1YnMvZmlwMTEyLmh0bT4uDQoNCiAgIFtPQVRI XSAgICAgIkluaXRpYXRpdmUgZm9yIE9wZW4gQXVUSGVudGljYXRpb24iLCAyMDA1LA0KICAgICAg ICAgICAgICA8aHR0cDovL3d3dy5vcGVuYXV0aGVudGljYXRpb24ub3JnPi4NCg0KICAgW1BLQ1Mt MV0gICBSU0EgTGFib3JhdG9yaWVzLCAiUlNBIENyeXB0b2dyYXBoeSBTdGFuZGFyZCIsIFBLQ1Mg IzENCiAgICAgICAgICAgICAgVmVyc2lvbiAyLjEsIEp1bmUgMjAwMiwNCiAgICAgICAgICAgICAg PGh0dHA6Ly93d3cucnNhc2VjdXJpdHkuY29tL3JzYWxhYnMvcGtjcy8+Lg0KDQogICBbUEtDUy0x MV0gIFJTQSBMYWJvcmF0b3JpZXMsICJDcnlwdG9ncmFwaGljIFRva2VuIEludGVyZmFjZQ0KDQoN Cg0KRG9oZXJ0eSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAgICAg ICAgICAgICAgW1BhZ2UgNzFdDQoNCg0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAg IERTS1BQICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KICAgICAgICAgICAg ICBTdGFuZGFyZCIsIFBLQ1MgIzExIFZlcnNpb24gMi4yMCwgSnVuZSAyMDA0LA0KICAgICAgICAg ICAgICA8aHR0cDovL3d3dy5yc2FzZWN1cml0eS5jb20vcnNhbGFicy9wa2NzLz4uDQoNCiAgIFtQ S0NTLTEyXSAgIlBlcnNvbmFsIEluZm9ybWF0aW9uIEV4Y2hhbmdlIFN5bnRheCBTdGFuZGFyZCIs IFBLQ1MgIzEyDQogICAgICAgICAgICAgIFZlcnNpb24gMS4wLCAyMDA1LA0KICAgICAgICAgICAg ICA8ZnRwOi8vZnRwLnJzYXNlY3VyaXR5LmNvbS9wdWIvcGtjcy9wa2NzLTEyLw0KICAgICAgICAg ICAgICBwa2NzLTEydjEucGRmPi4NCg0KICAgW1BLQ1MtNV0gICBSU0EgTGFib3JhdG9yaWVzLCAi UGFzc3dvcmQtQmFzZWQgQ3J5cHRvZ3JhcGh5IFN0YW5kYXJkIiwNCiAgICAgICAgICAgICAgUEtD UyAjNSBWZXJzaW9uIDIuMCwgTWFyY2ggMTk5OSwNCiAgICAgICAgICAgICAgPGh0dHA6Ly93d3cu cnNhc2VjdXJpdHkuY29tL3JzYWxhYnMvcGtjcy8+Lg0KDQogICBbUEtDUy01LVhNTF0NCiAgICAg ICAgICAgICAgUlNBIExhYm9yYXRvcmllcywgIlhNTCBTY2hlbWEgZm9yIFBLQ1MgIzUgVmVyc2lv biAyLjAiLA0KICAgICAgICAgICAgICBQS0NTICM1IFZlcnNpb24gMi4wIEFtZC4xIChGSU5BTCBE UkFGVCksIE9jdG9iZXIgMjAwNiwNCiAgICAgICAgICAgICAgPGh0dHA6Ly93d3cucnNhc2VjdXJp dHkuY29tL3JzYWxhYnMvcGtjcy8+Lg0KDQogICBbUFNLQ10gICAgICJQb3J0YWJsZSBTeW1tZXRy aWMgS2V5IENvbnRhaW5lciIsIDIwMDUsIDxodHRwOi8vDQogICAgICAgICAgICAgIHd3dy5pZXRm Lm9yZy9pbnRlcm5ldC1kcmFmdHMvDQogICAgICAgICAgICAgIGRyYWZ0LWhveWVyLWtleXByb3Yt cG9ydGFibGUtc3ltbWV0cmljLWtleS1jb250YWluZXItDQogICAgICAgICAgICAgIDAwLnR4dD4u DQoNCiAgIFtSRkMyMTA0XSAgS3Jhd3pjeWssIEguLCBCZWxsYXJlLCBNLiwgYW5kIFIuIENhbmV0 dGksICJITUFDOiBLZXllZC0NCiAgICAgICAgICAgICAgSGFzaGluZyBmb3IgTWVzc2FnZSBBdXRo ZW50aWNhdGlvbiIsIFJGQyAyMTA0LA0KICAgICAgICAgICAgICBGZWJydWFyeSAxOTk3Lg0KDQog ICBbUkZDMjExOV0gICJLZXkgd29yZHMgZm9yIHVzZSBpbiBSRkNzIHRvIEluZGljYXRlIFJlcXVp cmVtZW50DQogICAgICAgICAgICAgIExldmVscyIsIEJDUCAxNCwgUkZDIDIxMTksIE1hcmNoIDE5 OTcsDQogICAgICAgICAgICAgIDxodHRwOi8vd3d3LmlldGYub3JnL3JmYy9yZmMyMTE5LnR4dD4u DQoNCiAgIFtSRkMyNjE2XSAgRmllbGRpbmcsIFIuLCBHZXR0eXMsIEouLCBNb2d1bCwgSi4sIEZy eXN0eWssIEguLA0KICAgICAgICAgICAgICBNYXNpbnRlciwgTC4sIExlYWNoLCBQLiwgYW5kIFQu IEJlcm5lcnMtTGVlLCAiSHlwZXJ0ZXh0DQogICAgICAgICAgICAgIFRyYW5zZmVyIFByb3RvY29s IC0tIEhUVFAvMS4xIiwgUkZDIDI2MTYsIEp1bmUgMTk5OSwNCiAgICAgICAgICAgICAgPGh0dHA6 Ly93d3cuaWV0Zi5vcmcvcmZjL3JmYzI2MTYudHh0Pi4NCg0KICAgW1JGQzM1NTNdICBNZWFsbGlu ZywgTS4sIE1hc2ludGVyLCBMLiwgSGFyZGllLCBULiwgYW5kIEcuIEtseW5lLCAiQW4NCiAgICAg ICAgICAgICAgSUVURiBVUk4gU3ViLW5hbWVzcGFjZSBmb3IgUmVnaXN0ZXJlZCBQcm90b2NvbA0K ICAgICAgICAgICAgICBQYXJhbWV0ZXJzIiwgUkZDIDM1NTMsIEJDUCA3MywgSnVuZSAyMDAzLg0K DQogICBbUkZDNDc1OF0gIFJTQSwgVGhlIFNlY3VyaXR5IERpdmlzaW9uIG9mIEVNQywgIkNyeXB0 b2dyYXBoaWMgVG9rZW4NCiAgICAgICAgICAgICAgS2V5IEluaXRpYWxpemF0aW9uIFByb3RvY29s IChDVC1LSVApIiwgTm92ZW1iZXIgMjAwNiwNCiAgICAgICAgICAgICAgPGh0dHA6Ly93d3cuaWV0 Zi5vcmcvcmZjL3JmYzQ3NTgudHh0Pi4NCg0KDQpBcHBlbmRpeCBBLiAgS2V5IEluaXRpYWxpemF0 aW9uIFByb2ZpbGVzIG9mIERTS1BQDQoNCg0KDQoNCg0KDQpEb2hlcnR5LCBldCBhbC4gICAgICAg ICAgRXhwaXJlcyBKYW51YXJ5IDksIDIwMDggICAgICAgICAgICAgICBbUGFnZSA3Ml0NCg0KDQpJ bnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgRFNLUFAgICAgICAgICAgICAgICAgICAg ICAgICBKdWx5IDIwMDcNCg0KDQpBLjEuICBJbnRyb2R1Y3Rpb24NCg0KICAgVGhpcyBhcHBlbmRp eCBpbnRyb2R1Y2VzIHRocmVlIHByb2ZpbGVzIG9mIERTS1BQIGZvciBrZXkNCiAgIGluaXRpYWxp emF0aW9uLiAgVGhleSBNQVkgYWxsIGJlIHVzZWQgZm9yIHR3by0gYXMgd2VsbCBhcyBvbmUtcGFz cw0KICAgaW5pdGlhbGl6YXRpb24gb2YgY3J5cHRvZ3JhcGhpYyBtb2R1bGVzLiAgRnVydGhlciBw cm9maWxlcyBNQVkgYmUNCiAgIGRlZmluZWQgYnkgZXh0ZXJuYWwgZW50aXRpZXMgb3IgdGhyb3Vn aCB0aGUgSUVURiBwcm9jZXNzLg0KDQpBLjIuICBLZXkgVHJhbnNwb3J0IFByb2ZpbGUNCg0KQS4y LjEuICBJbnRyb2R1Y3Rpb24NCg0KICAgVGhpcyBwcm9maWxlIGluaXRpYWxpemVzIHRoZSBjcnlw dG9ncmFwaGljIG1vZHVsZSB3aXRoIGEgc3ltbWV0cmljDQogICBrZXksIEtfVE9LRU4sIHRocm91 Z2gga2V5IHRyYW5zcG9ydCBhbmQga2V5IGRlcml2YXRpb24uICBUaGUga2V5DQogICB0cmFuc3Bv cnQgaXMgY2FycmllZCBvdXQgdXNpbmcgYSBwdWJsaWMga2V5LCBLX0NMSUVOVCwgd2hvc2UgcHJp dmF0ZQ0KICAga2V5IHBhcnQgcmVzaWRlcyBpbiB0aGUgY3J5cHRvZ3JhcGhpYyBtb2R1bGUgYXMg dGhlIHRyYW5zcG9ydCBrZXkuICBBDQogICBrZXkgSyBmcm9tIHdoaWNoIHR3byBrZXlzLCBLX1RP S0VOIGFuZCBLX01BQyBhcmUgZGVyaXZlZCBNVVNUIGJlDQogICB0cmFuc3BvcnRlZC4NCg0KQS4y LjIuICBJZGVudGlmaWNhdGlvbg0KDQogICBUaGlzIHByb2ZpbGUgTVVTVCBiZSBpZGVudGlmaWVk IHdpdGggdGhlIGZvbGxvd2luZyBVUk46DQoNCiAgIHVybjppZXRmOnBhcmFtczp4bWw6c2NoZW1h OmtleXByb3Y6cHJvdG9jb2wjdHJhbnNwb3J0DQoNCkEuMi4zLiAgUGF5bG9hZHMNCg0KICAgSW4g dGhlIHR3by1wYXNzIHZlcnNpb24gb2YgRFNLUFAsIHRoZSBjbGllbnQgTVVTVCBzZW5kIGEgcGF5 bG9hZA0KICAgYXNzb2NpYXRlZCB3aXRoIHRoaXMga2V5IGluaXRpYWxpemF0aW9uIG1ldGhvZC4g IFRoZSBwYXlsb2FkIE1VU1QgYmUNCiAgIG9mIHR5cGUgZHM6S2V5SW5mb1R5cGUgKFtYTUxEU0lH XSksIGFuZCBvbmx5IHRob3NlIGNob2ljZXMgb2YgdGhlIGRzOg0KICAgS2V5SW5mb1R5cGUgdGhh dCBpZGVudGlmeSBhIHB1YmxpYyBrZXkgYXJlIGFsbG93ZWQuICBUaGUgZHM6DQogICBYNTA5Q2Vy dGlmaWNhdGUgb3B0aW9uIG9mIHRoZSBkczpYNTA5RGF0YSBhbHRlcm5hdGl2ZSBpcyBSRUNPTU1F TkRFRA0KICAgd2hlbiB0aGUgcHVibGljIGtleSBjb3JyZXNwb25kaW5nIHRvIHRoZSBwcml2YXRl IGtleSBvbiB0aGUNCiAgIGNyeXB0b2dyYXBoaWMgbW9kdWxlIGhhcyBiZWVuIGNlcnRpZmllZC4N Cg0KICAgVGhlIHNlcnZlciBwYXlsb2FkIGFzc29jaWF0ZWQgd2l0aCB0aGlzIGtleSBpbml0aWFs aXphdGlvbiBtZXRob2QNCiAgIE1VU1QgYmUgb2YgdHlwZSB4ZW5jOkVuY3J5cHRlZEtleVR5cGUg KFtYTUxFTkNdKSwgYW5kIG9ubHkgdGhvc2UNCiAgIGVuY3J5cHRpb24gbWV0aG9kcyB1dGlsaXpp bmcgYSBwdWJsaWMga2V5IHRoYXQgYXJlIHN1cHBvcnRlZCBieSB0aGUNCiAgIERTS1BQIGNsaWVu dCAoYXMgaW5kaWNhdGVkIGluIHRoZSA8U3VwcG9ydGVkRW5jcnlwdGlvbkFsZ29yaXRobXM+DQog ICBlbGVtZW50IG9mIHRoZSA8Q2xpZW50SGVsbG8+IG1lc3NhZ2UgaW4gdGhlIGNhc2Ugb2YgMi1w YXNzIERTS1BQLCBvcg0KICAgYXMgb3RoZXJ3aXNlIGtub3duIGluIHRoZSBjYXNlIG9mIDEtcGFz cyBEU0tQUCkgYXJlIGFsbG93ZWQgYXMgdmFsdWVzDQogICBmb3IgdGhlIDx4ZW5jOkVuY3J5cHRp b25NZXRob2Q+IGVsZW1lbnQuICBGdXJ0aGVyLCBpbiB0aGUgY2FzZSBvZg0KICAgMi1wYXNzIERT S1BQLCB0aGUgPGRzOktleUluZm8+IGVsZW1lbnQgTVVTVCBjb250YWluIHRoZSBzYW1lIHZhbHVl DQogICAoaS5lLiBpZGVudGlmeSB0aGUgc2FtZSBwdWJsaWMga2V5KSBhcyB0aGUgPFBheWxvYWQ+ IG9mIHRoZQ0KICAgY29ycmVzcG9uZGluZyBzdXBwb3J0ZWQga2V5IGluaXRpYWxpemF0aW9uIG1l dGhvZCBpbiB0aGUNCiAgIDxDbGllbnRIZWxsbz4gbWVzc2FnZSB0aGF0IHRyaWdnZXJlZCB0aGUg cmVzcG9uc2UuICBUaGUNCiAgIDxDYXJyaWVkS2V5TmFtZT4gZWxlbWVudCBNQVkgYmUgcHJlc2Vu dCwgYnV0IE1VU1QsIHdoZW4gcHJlc2VudCwNCiAgIGNvbnRhaW4gdGhlIHNhbWUgdmFsdWUgYXMg dGhlIDxLZXlJRD4gZWxlbWVudCBvZiB0aGUgPFNlcnZlckZpbmlzaGVkPg0KICAgbWVzc2FnZS4g IFRoZSBUeXBlIGF0dHJpYnV0ZSBvZiB0aGUgeGVuYzpFbmNyeXB0ZWRLZXlUeXBlIE1VU1QgYmUN Cg0KDQoNCkRvaGVydHksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgOSwgMjAwOCAg ICAgICAgICAgICAgIFtQYWdlIDczXQ0KDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAg ICAgICBEU0tQUCAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgIHByZXNl bnQgYW5kIE1VU1QgaWRlbnRpZnkgdGhlIHR5cGUgb2YgdGhlIHdyYXBwZWQga2V5LiAgVGhlIHR5 cGUgTVVTVA0KICAgYmUgb25lIG9mIHRoZSB0eXBlcyBzdXBwb3J0ZWQgYnkgdGhlIERTS1BQIGNs aWVudCAoYXMgcmVwb3J0ZWQgaW4gdGhlDQogICA8U3VwcG9ydGVkS2V5VHlwZXM+IG9mIHRoZSBw cmVjZWRpbmcgPENsaWVudEhlbGxvPiBtZXNzYWdlIGluIHRoZQ0KICAgY2FzZSBvZiAyLXBhc3Mg RFNLUFAsIG9yIGFzIG90aGVyd2lzZSBrbm93biBpbiB0aGUgY2FzZSBvZiAxLXBhc3MNCiAgIERT S1BQKS4gIFRoZSB0cmFuc3BvcnRlZCBrZXkgTVVTVCBjb25zaXN0IG9mIHR3byBwYXJ0cyBvZiBl cXVhbA0KICAgbGVuZ3RoLiAgVGhlIGZpcnN0IGhhbGYgY29uc3RpdHV0ZXMgS19NQUMgYW5kIHRo ZSBzZWNvbmQgaGFsZg0KICAgY29uc3RpdHV0ZXMgS19UT0tFTi4gIFRoZSBsZW5ndGggb2YgS19U T0tFTiAoYW5kIGhlbmNlIGFsc28gdGhlDQogICBsZW5ndGggb2YgS19NQUMpIGlzIGRldGVybWlu ZWQgYnkgdGhlIHR5cGUgb2YgS19UT0tFTi4NCg0KICAgRFNLUFAgc2VydmVycyBhbmQgY3J5cHRv Z3JhcGhpYyBtb2R1bGVzIHN1cHBvcnRpbmcgdGhpcyBwcm9maWxlIE1VU1QNCiAgIHN1cHBvcnQg dGhlIGh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDQveG1sZW5jI3JzYS0xXzUga2V5LXdyYXBwaW5n DQogICBtZWNoYW5pc20gZGVmaW5lZCBpbiBbWE1MRU5DXS4NCg0KICAgV2hlbiB0aGlzIHByb2Zp bGUgaXMgdXNlZCwgdGhlIE1hY0FsZ29yaXRobSBhdHRyaWJ1dGUgb2YgdGhlIDxNYWM+DQogICBl bGVtZW50IG9mIHRoZSA8U2VydmVyRmluaXNoZWQ+IG1lc3NhZ2UgTVVTVCBiZSBwcmVzZW50IGFu ZCBNVVNUDQogICBpZGVudGlmeSB0aGUgc2VsZWN0ZWQgTUFDIGFsZ29yaXRobS4gIFRoZSBzZWxl Y3RlZCBNQUMgYWxnb3JpdGhtIE1VU1QNCiAgIGJlIG9uZSBvZiB0aGUgTUFDIGFsZ29yaXRobXMg c3VwcG9ydGVkIGJ5IHRoZSBEU0tQUCBjbGllbnQgKGFzDQogICBpbmRpY2F0ZWQgaW4gdGhlIDxT dXBwb3J0ZWRNQUNBbGdvcml0aG1zPiBlbGVtZW50IG9mIHRoZQ0KICAgPENsaWVudEhlbGxvPiBt ZXNzYWdlIGluIHRoZSBjYXNlIG9mIDItcGFzcyBEU0tQUCwgb3IgYXMgb3RoZXJ3aXNlDQogICBr bm93biBpbiB0aGUgY2FzZSBvZiAxLXBhc3MgRFNLUFApLiAgVGhlIE1BQyBNVVNUIGJlIGNhbGN1 bGF0ZWQgYXMNCiAgIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDQuOA0KDQogICBJbiBhZGRpdGlvbiwg RFNLUFAgc2VydmVycyBNVVNUIGluY2x1ZGUgdGhlIEF1dGhlbnRpY2F0aW9uRGF0YVR5cGUNCiAg IGVsZW1lbnQgKHNlZSBmdXJ0aGVyIFNlY3Rpb24gNC44KSBpbiB0aGVpciA8U2VydmVyRmluaXNo ZWQ+IG1lc3NhZ2VzDQogICB3aGVuZXZlciBhIHN1Y2Nlc3NmdWwgcHJvdG9jb2wgcnVuIHdpbGwg cmVzdWx0IGluIGFuIGV4aXN0aW5nIEtfVE9LRU4NCiAgIGJlaW5nIHJlcGxhY2VkLg0KDQpBLjMu ICBLZXkgd3JhcCBwcm9maWxlDQoNCkEuMy4xLiAgSW50cm9kdWN0aW9uDQoNCiAgIFRoaXMgcHJv ZmlsZSBpbml0aWFsaXplcyB0aGUgY3J5cHRvZ3JhcGhpYyBtb2R1bGUgd2l0aCBhIHN5bW1ldHJp Yw0KICAga2V5LCBLX1RPS0VOLCB0aHJvdWdoIGtleSB3cmFwIGFuZCBrZXkgZGVyaXZhdGlvbi4g IFRoZSBrZXkgd3JhcCBNVVNUDQogICBiZSBjYXJyaWVkIG91dCB1c2luZyBhIChzeW1tZXRyaWMp IGtleS13cmFwcGluZyBrZXksIEtfU0hBUkVELCBrbm93bg0KICAgaW4gYWR2YW5jZSBieSBib3Ro IHRoZSBjcnlwdG9ncmFwaGljIG1vZHVsZSBhbmQgdGhlIERTS1BQIHNlcnZlci4gIEENCiAgIGtl eSBLIGZyb20gd2hpY2ggdHdvIGtleXMsIEtfVE9LRU4gYW5kIEtfTUFDIGFyZSBkZXJpdmVkIE1V U1QgYmUNCiAgIHdyYXBwZWQuDQoNCkEuMy4yLiAgSWRlbnRpZmljYXRpb24NCg0KICAgVGhpcyBw cm9maWxlIE1VU1QgYmUgaWRlbnRpZmllZCB3aXRoIHRoZSBmb2xsb3dpbmcgVVJJOg0KDQogICB1 cm46aWV0ZjpwYXJhbXM6eG1sOnNjaGVtYTprZXlwcm92OnByb3RvY29sI3dyYXANCg0KQS4zLjMu ICBQYXlsb2Fkcw0KDQogICBJbiB0aGUgMi1wYXNzIHZlcnNpb24gb2YgRFNLUFAsIHRoZSBjbGll bnQgTVVTVCBzZW5kIGEgcGF5bG9hZA0KICAgYXNzb2NpYXRlZCB3aXRoIHRoaXMga2V5IGluaXRp YWxpemF0aW9uIG1ldGhvZC4gIFRoZSBwYXlsb2FkIE1VU1QgYmUNCg0KDQoNCkRvaGVydHksIGV0 IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgOSwgMjAwOCAgICAgICAgICAgICAgIFtQYWdl IDc0XQ0KDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICBEU0tQUCAgICAgICAg ICAgICAgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgIG9mIHR5cGUgZHM6S2V5SW5mb1R5cGUg KFtYTUxEU0lHXSksIGFuZCBvbmx5IHRob3NlIGNob2ljZXMgb2YgdGhlIGRzOg0KICAgS2V5SW5m b1R5cGUgdGhhdCBpZGVudGlmeSBhIHN5bW1ldHJpYyBrZXkgYXJlIGFsbG93ZWQuICBUaGUgZHM6 DQogICBLZXlOYW1lIGFsdGVybmF0aXZlIGlzIFJFQ09NTUVOREVELg0KDQogICBUaGUgc2VydmVy IHBheWxvYWQgYXNzb2NpYXRlZCB3aXRoIHRoaXMga2V5IGluaXRpYWxpemF0aW9uIG1ldGhvZA0K ICAgTVVTVCBiZSBvZiB0eXBlIHhlbmM6RW5jcnlwdGVkS2V5VHlwZSAoW1hNTEVOQ10pLCBhbmQg b25seSB0aG9zZQ0KICAgZW5jcnlwdGlvbiBtZXRob2RzIHV0aWxpemluZyBhIHN5bW1ldHJpYyBr ZXkgdGhhdCBhcmUgc3VwcG9ydGVkIGJ5DQogICB0aGUgRFNLUFAgY2xpZW50IChhcyBpbmRpY2F0 ZWQgaW4gdGhlIDxTdXBwb3J0ZWRFbmNyeXB0aW9uQWxnb3JpdGhtcz4NCiAgIGVsZW1lbnQgb2Yg dGhlIDxDbGllbnRIZWxsbz4gbWVzc2FnZSBpbiB0aGUgY2FzZSBvZiAyLXBhc3MgRFNLUFAsIG9y DQogICBhcyBvdGhlcndpc2Uga25vd24gaW4gdGhlIGNhc2Ugb2YgMS1wYXNzIERTS1BQKSBhcmUg YWxsb3dlZCBhcyB2YWx1ZXMNCiAgIGZvciB0aGUgPHhlbmM6RW5jcnlwdGlvbk1ldGhvZD4gZWxl bWVudC4gIEZ1cnRoZXIsIGluIHRoZSBjYXNlIG9mDQogICAyLXBhc3MgRFNLUFAsIHRoZSA8ZHM6 S2V5SW5mbz4gZWxlbWVudCBNVVNUIGNvbnRhaW4gdGhlIHNhbWUgdmFsdWUNCiAgIChpLmUuIGlk ZW50aWZ5IHRoZSBzYW1lIHN5bW1ldHJpYyBrZXkpIGFzIHRoZSA8UGF5bG9hZD4gb2YgdGhlDQog ICBjb3JyZXNwb25kaW5nIHN1cHBvcnRlZCBrZXkgaW5pdGlhbGl6YXRpb24gbWV0aG9kIGluIHRo ZQ0KICAgPENsaWVudEhlbGxvPiBtZXNzYWdlIHRoYXQgdHJpZ2dlcmVkIHRoZSByZXNwb25zZS4g IFRoZQ0KICAgPENhcnJpZWRLZXlOYW1lPiBlbGVtZW50IE1BWSBiZSBwcmVzZW50LCBhbmQgTVVT VCwgd2hlbiBwcmVzZW50LA0KICAgY29udGFpbiB0aGUgc2FtZSB2YWx1ZSBhcyB0aGUgPEtleUlE PiBlbGVtZW50IG9mIHRoZSA8U2VydmVyRmluaXNoZWQ+DQogICBtZXNzYWdlLiAgVGhlIFR5cGUg YXR0cmlidXRlIG9mIHRoZSB4ZW5jOkVuY3J5cHRlZEtleVR5cGUgTVVTVCBiZQ0KICAgcHJlc2Vu dCBhbmQgTVVTVCBpZGVudGlmeSB0aGUgdHlwZSBvZiB0aGUgd3JhcHBlZCBrZXkuICBUaGUgdHlw ZSBNVVNUDQogICBiZSBvbmUgb2YgdGhlIHR5cGVzIHN1cHBvcnRlZCBieSB0aGUgRFNLUFAgY2xp ZW50IChhcyByZXBvcnRlZCBpbiB0aGUNCiAgIDxTdXBwb3J0ZWRLZXlUeXBlcz4gb2YgdGhlIHBy ZWNlZGluZyA8Q2xpZW50SGVsbG8+IG1lc3NhZ2UgaW4gdGhlDQogICBjYXNlIG9mIDItcGFzcyBE U0tQUCwgb3IgYXMgb3RoZXJ3aXNlIGtub3duIGluIHRoZSBjYXNlIG9mIDEtcGFzcw0KICAgRFNL UFApLiAgVGhlIHdyYXBwZWQga2V5IE1VU1QgY29uc2lzdCBvZiB0d28gcGFydHMgb2YgZXF1YWwg bGVuZ3RoLg0KICAgVGhlIGZpcnN0IGhhbGYgY29uc3RpdHV0ZXMgS19NQUMgYW5kIHRoZSBzZWNv bmQgaGFsZiBjb25zdGl0dXRlcw0KICAgS19UT0tFTi4gIFRoZSBsZW5ndGggb2YgS19UT0tFTiAo YW5kIGhlbmNlIGFsc28gdGhlIGxlbmd0aCBvZiBLX01BQykNCiAgIGlzIGRldGVybWluZWQgYnkg dGhlIHR5cGUgb2YgS19UT0tFTi4NCg0KICAgRFNLUCBzZXJ2ZXJzIGFuZCBjcnlwdG9ncmFwaGlj IG1vZHVsZXMgc3VwcG9ydGluZyB0aGlzIHByb2ZpbGUgTVVTVA0KICAgc3VwcG9ydCB0aGUgaHR0 cDovL3d3dy53My5vcmcvMjAwMS8wNC94bWxlbmMja3ctYWVzMTI4IGtleS13cmFwcGluZw0KICAg bWVjaGFuaXNtIGRlZmluZWQgaW4gW1hNTEVOQ10uDQoNCiAgIFdoZW4gdGhpcyBwcm9maWxlIGlz IHVzZWQsIHRoZSBNYWNBbGdvcml0aG0gYXR0cmlidXRlIG9mIHRoZSA8TWFjPg0KICAgZWxlbWVu dCBvZiB0aGUgPFNlcnZlckZpbmlzaGVkPiBtZXNzYWdlIE1VU1QgYmUgcHJlc2VudCBhbmQgTVVT VA0KICAgaWRlbnRpZnkgdGhlIHNlbGVjdGVkIE1BQyBhbGdvcml0aG0uICBUaGUgc2VsZWN0ZWQg TUFDIGFsZ29yaXRobSBNVVNUDQogICBiZSBvbmUgb2YgdGhlIE1BQyBhbGdvcml0aG1zIHN1cHBv cnRlZCBieSB0aGUgRFNLUFAgY2xpZW50IChhcw0KICAgaW5kaWNhdGVkIGluIHRoZSA8U3VwcG9y dGVkTUFDQWxnb3JpdGhtcz4gZWxlbWVudCBvZiB0aGUNCiAgIDxDbGllbnRIZWxsbz4gbWVzc2Fn ZSBpbiB0aGUgY2FzZSBvZiAyLXBhc3MgRFNLUFAsIG9yIGFzIG90aGVyd2lzZQ0KICAga25vd24g aW4gdGhlIGNhc2Ugb2YgMS1wYXNzIERTS1BQKS4gIFRoZSBNQUMgTVVTVCBiZSBjYWxjdWxhdGVk IGFzDQogICBkZXNjcmliZWQgaW4gU2VjdGlvbiA0LjgNCg0KICAgSW4gYWRkaXRpb24sIERTS1BQ IHNlcnZlcnMgTVVTVCBpbmNsdWRlIHRoZSBBdXRoZW50aWNhdGlvbkRhdGFUeXBlDQogICBlbGVt ZW50IChzZWUgZnVydGhlciBTZWN0aW9uIDQuOCkgaW4gdGhlaXIgPFNlcnZlckZpbmlzaGVkPiBt ZXNzYWdlcw0KICAgd2hlbmV2ZXIgYSBzdWNjZXNzZnVsIHByb3RvY29sIHJ1biB3aWxsIHJlc3Vs dCBpbiBhbiBleGlzdGluZyBLX1RPS0VODQogICBiZWluZyByZXBsYWNlZC4NCg0KDQoNCg0KDQoN Cg0KRG9oZXJ0eSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAgICAg ICAgICAgICAgW1BhZ2UgNzVdDQoNCg0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAg IERTS1BQICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KQS40LiAgUGFzc3Bo cmFzZS1iYXNlZCBrZXkgd3JhcCBwcm9maWxlDQoNCkEuNC4xLiAgSW50cm9kdWN0aW9uDQoNCiAg IFRoaXMgcHJvZmlsZSBpcyBhIHZhcmlhdGlvbiBvZiB0aGUga2V5IHdyYXAgcHJvZmlsZS4gIEl0 IGluaXRpYWxpemVzDQogICB0aGUgY3J5cHRvZ3JhcGhpYyBtb2R1bGUgd2l0aCBhIHN5bW1ldHJp YyBrZXksIEtfVE9LRU4sIHRocm91Z2gga2V5DQogICB3cmFwIGFuZCBrZXkgZGVyaXZhdGlvbiwg dXNpbmcgYSBwYXNzcGhyYXNlLWRlcml2ZWQga2V5LXdyYXBwaW5nIGtleSwNCiAgIEtfREVSSVZF RC4gIFRoZSBwYXNzcGhyYXNlIGlzIGtub3duIGluIGFkdmFuY2UgYnkgYm90aCB0aGUgZGV2aWNl DQogICB1c2VyIGFuZCB0aGUgRFNLUFAgc2VydmVyLiAgVG8gcHJlc2VydmUgdGhlIHByb3BlcnR5 IG9mIG5vdCBleHBvc2luZw0KICAgS19UT0tFTiB0byBhbnkgb3RoZXIgZW50aXR5IHRoYW4gdGhl IERTS1BQIHNlcnZlciBhbmQgdGhlDQogICBjcnlwdG9ncmFwaGljIG1vZHVsZSBpdHNlbGYsIHRo ZSBtZXRob2QgU0hPVUxEIGJlIGVtcGxveWVkIG9ubHkgd2hlbg0KICAgdGhlIGRldmljZSBjb250 YWlucyBmYWNpbGl0aWVzIChlLmcuIGEga2V5cGFkKSBmb3IgZGlyZWN0IGVudHJ5IG9mDQogICB0 aGUgcGFzc3BocmFzZS4gIEEga2V5IEsgZnJvbSB3aGljaCB0d28ga2V5cywgS19UT0tFTiBhbmQg S19NQUMgYXJlDQogICBkZXJpdmVkIE1VU1QgYmUgd3JhcHBlZC4NCg0KQS40LjIuICBJZGVudGlm aWNhdGlvbg0KDQogICBUaGlzIHByb2ZpbGUgTVVTVCBiZSBpZGVudGlmaWVkIHdpdGggdGhlIGZv bGxvd2luZyBVUkk6DQoNCiAgIHVybjppZXRmOnBhcmFtczp4bWw6c2NoZW1hOmtleXByb3Y6cHJv dG9jb2wjcGFzc3BocmFzZS13cmFwDQoNCkEuNC4zLiAgUGF5bG9hZHMNCg0KICAgSW4gdGhlIDIt cGFzcyB2ZXJzaW9uIG9mIERTS1BQLCB0aGUgY2xpZW50IE1VU1Qgc2VuZCBhIHBheWxvYWQNCiAg IGFzc29jaWF0ZWQgd2l0aCB0aGlzIGtleSBpbml0aWFsaXphdGlvbiBtZXRob2QuICBUaGUgcGF5 bG9hZCBNVVNUIGJlDQogICBvZiB0eXBlIGRzOktleUluZm9UeXBlIChbWE1MRFNJR10pLiAgVGhl IGRzOktleU5hbWUgb3B0aW9uIE1VU1QgYmUNCiAgIHVzZWQgYW5kIHRoZSBrZXkgbmFtZSBNVVNU IGlkZW50aWZ5IHRoZSBwYXNzcGhyYXNlIHRoYXQgd2lsbCBiZSB1c2VkDQogICBieSB0aGUgc2Vy dmVyIHRvIGdlbmVyYXRlIHRoZSBrZXktd3JhcHBpbmcga2V5LiAgQXMgYW4gZXhhbXBsZSwgdGhl DQogICBpZGVudGlmaWVyIGNvdWxkIGJlIGEgdXNlciBpZGVudGlmaWVyIG9yIGEgcmVnaXN0cmF0 aW9uIGlkZW50aWZpZXINCiAgIGlzc3VlZCBieSB0aGUgc2VydmVyIHRvIHRoZSB1c2VyIGR1cmlu ZyBhIHNlc3Npb24gcHJlY2VkaW5nIHRoZSBEU0tQUA0KICAgcHJvdG9jb2wgcnVuLg0KDQogICBU aGUgc2VydmVyIHBheWxvYWQgYXNzb2NpYXRlZCB3aXRoIHRoaXMga2V5IGluaXRpYWxpemF0aW9u IG1ldGhvZA0KICAgTVVTVCBiZSBvZiB0eXBlIHhlbmM6RW5jcnlwdGVkS2V5VHlwZSAoW1hNTEVO Q10pLCBhbmQgb25seSB0aG9zZQ0KICAgZW5jcnlwdGlvbiBtZXRob2RzIHV0aWxpemluZyBhIHBh c3NwaHJhc2UgdG8gZGVyaXZlIHRoZSBrZXktd3JhcHBpbmcNCiAgIGtleSB0aGF0IGFyZSBzdXBw b3J0ZWQgYnkgdGhlIERTS1BQIGNsaWVudCAoYXMgaW5kaWNhdGVkIGluIHRoZQ0KICAgPFN1cHBv cnRlZEVuY3J5cHRpb25BbGdvcml0aG1zPiBlbGVtZW50IG9mIHRoZSA8Q2xpZW50SGVsbG8+IG1l c3NhZ2UNCiAgIGluIHRoZSBjYXNlIG9mIDItcGFzcyBEU0tQUCwgb3IgYXMgb3RoZXJ3aXNlIGtu b3duIGluIHRoZSBjYXNlIG9mDQogICAxLXBhc3MgRFNLUFApIGFyZSBhbGxvd2VkIGFzIHZhbHVl cyBmb3IgdGhlIDx4ZW5jOkVuY3J5cHRpb25NZXRob2Q+DQogICBlbGVtZW50LiAgRnVydGhlciwg aW4gdGhlIGNhc2Ugb2YgMi1wYXNzIERTS1BQLCB0aGUgPGRzOktleUluZm8+DQogICBlbGVtZW50 IE1VU1QgY29udGFpbiB0aGUgc2FtZSB2YWx1ZSAoaS5lLiBpZGVudGlmeSB0aGUgc2FtZQ0KICAg cGFzc3BocmFzZSkgYXMgdGhlIDxQYXlsb2FkPiBvZiB0aGUgY29ycmVzcG9uZGluZyBzdXBwb3J0 ZWQga2V5DQogICBpbml0aWFsaXphdGlvbiBtZXRob2QgaW4gdGhlIDxDbGllbnRIZWxsbz4gbWVz c2FnZSB0aGF0IHRyaWdnZXJlZCB0aGUNCiAgIHJlc3BvbnNlLiAgVGhlIDxDYXJyaWVkS2V5TmFt ZT4gZWxlbWVudCBNQVkgYmUgcHJlc2VudCwgYW5kIE1VU1QsDQogICB3aGVuIHByZXNlbnQsIGNv bnRhaW4gdGhlIHNhbWUgdmFsdWUgYXMgdGhlIDxLZXlJRD4gZWxlbWVudCBvZiB0aGUNCiAgIDxT ZXJ2ZXJGaW5pc2hlZD4gbWVzc2FnZS4gIFRoZSBUeXBlIGF0dHJpYnV0ZSBvZiB0aGUgeGVuYzoN CiAgIEVuY3J5cHRlZEtleVR5cGUgTVVTVCBiZSBwcmVzZW50IGFuZCBNVVNUIGlkZW50aWZ5IHRo ZSB0eXBlIG9mIHRoZQ0KICAgd3JhcHBlZCBrZXkuICBUaGUgdHlwZSBNVVNUIGJlIG9uZSBvZiB0 aGUgdHlwZXMgc3VwcG9ydGVkIGJ5IHRoZQ0KDQoNCg0KRG9oZXJ0eSwgZXQgYWwuICAgICAgICAg IEV4cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgNzZdDQoNCg0KSW50 ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgIERTS1BQICAgICAgICAgICAgICAgICAgICAg ICAgSnVseSAyMDA3DQoNCg0KICAgRFNLUFAgY2xpZW50IChhcyByZXBvcnRlZCBpbiB0aGUgPFN1 cHBvcnRlZEtleVR5cGVzPiBvZiB0aGUgcHJlY2VkaW5nDQogICA8Q2xpZW50SGVsbG8+IG1lc3Nh Z2UgaW4gdGhlIGNhc2Ugb2YgMi1wYXNzIERTS1BQLCBvciBhcyBvdGhlcndpc2UNCiAgIGtub3du IGluIHRoZSBjYXNlIG9mIDEtcGFzcyBEU0tQUCkuICBUaGUgd3JhcHBlZCBrZXkgTVVTVCBjb25z aXN0IG9mDQogICB0d28gcGFydHMgb2YgZXF1YWwgbGVuZ3RoLiAgVGhlIGZpcnN0IGhhbGYgY29u c3RpdHV0ZXMgS19NQUMgYW5kIHRoZQ0KICAgc2Vjb25kIGhhbGYgY29uc3RpdHV0ZXMgS19UT0tF Ti4gIFRoZSBsZW5ndGggb2YgS19UT0tFTiAoYW5kIGhlbmNlDQogICBhbHNvIHRoZSBsZW5ndGgg b2YgS19NQUMpIGlzIGRldGVybWluZWQgYnkgdGhlIHR5cGUgb2YgS19UT0tFTi4NCg0KICAgRFNL UFAgc2VydmVycyBhbmQgY3J5cHRvZ3JhcGhpYyBtb2R1bGVzIHN1cHBvcnRpbmcgdGhpcyBwcm9m aWxlIE1VU1QNCiAgIHN1cHBvcnQgdGhlIFBCRVMyIHBhc3N3b3JkIGJhc2VkIGVuY3J5cHRpb24g c2NoZW1lIGRlZmluZWQgaW4NCiAgIFtQS0NTLTVdIChhbmQgaWRlbnRpZmllZCBhcw0KICAgaHR0 cDovL3d3dy5yc2FzZWN1cml0eS5jb20vcnNhbGFicy9wa2NzL3NjaGVtYXMvcGtjcy01I3BiZXMy IGluDQogICBbUEtDUy01LVhNTF0pLCB0aGUgUEJLREYyIHBhc3NwaHJhc2UtYmFzZWQga2V5IGRl cml2YXRpb24gZnVuY3Rpb24NCiAgIGFsc28gZGVmaW5lZCBpbiBbUEtDUy01XSAoYW5kIGlkZW50 aWZpZWQgYXMNCiAgIGh0dHA6Ly93d3cucnNhc2VjdXJpdHkuY29tL3JzYWxhYnMvcGtjcy9zY2hl bWFzL3BrY3MtNSNwYmtkZjIgaW4NCiAgIFtQS0NTLTUtWE1MXSksIGFuZCB0aGUgaHR0cDovL3d3 dy53My5vcmcvMjAwMS8wNC94bWxlbmMja3ctYWVzMTI4DQogICBrZXktd3JhcHBpbmcgbWVjaGFu aXNtIGRlZmluZWQgaW4gW1hNTEVOQ10uDQoNCiAgIFdoZW4gdGhpcyBwcm9maWxlIGlzIHVzZWQs IHRoZSBNYWNBbGdvcml0aG0gYXR0cmlidXRlIG9mIHRoZSA8TWFjPg0KICAgZWxlbWVudCBvZiB0 aGUgPFNlcnZlckZpbmlzaGVkPiBtZXNzYWdlIE1VU1QgYmUgcHJlc2VudCBhbmQgTVVTVA0KICAg aWRlbnRpZnkgdGhlIHNlbGVjdGVkIE1BQyBhbGdvcml0aG0uICBUaGUgc2VsZWN0ZWQgTUFDIGFs Z29yaXRobSBNVVNUDQogICBiZSBvbmUgb2YgdGhlIE1BQyBhbGdvcml0aG1zIHN1cHBvcnRlZCBi eSB0aGUgRFNLUFAgY2xpZW50IChhcw0KICAgaW5kaWNhdGVkIGluIHRoZSA8U3VwcG9ydGVkTUFD QWxnb3JpdGhtcz4gZWxlbWVudCBvZiB0aGUNCiAgIDxDbGllbnRIZWxsbz4gbWVzc2FnZSBpbiB0 aGUgY2FzZSBvZiAyLXBhc3MgRFNLUFAsIG9yIGFzIG90aGVyd2lzZQ0KICAga25vd24gaW4gdGhl IGNhc2Ugb2YgMS1wYXNzIERTS1BQKS4gIFRoZSBNQUMgTVVTVCBiZSBjYWxjdWxhdGVkIGFzDQog ICBkZXNjcmliZWQgaW4gU2VjdGlvbiA0LjgNCg0KICAgSW4gYWRkaXRpb24sIERTS1BQIHNlcnZl cnMgTVVTVCBpbmNsdWRlIHRoZSBBdXRoZW50aWNhdGlvbkRhdGFUeXBlDQogICBlbGVtZW50IChz ZWUgZnVydGhlciBTZWN0aW9uIDQuOCkgaW4gdGhlaXIgPFNlcnZlckZpbmlzaGVkPiBtZXNzYWdl cw0KICAgd2hlbmV2ZXIgYSBzdWNjZXNzZnVsIHByb3RvY29sIHJ1biB3aWxsIHJlc3VsdCBpbiBh biBleGlzdGluZyBLX1RPS0VODQogICBiZWluZyByZXBsYWNlZC4NCg0KDQpBcHBlbmRpeCBCLiAg RXhhbXBsZSBNZXNzYWdlcw0KDQogICBBbGwgZXhhbXBsZXMgYXJlIHN5bnRhY3RpY2FsbHkgY29y cmVjdC4gIE1BQyBhbmQgY2lwaGVyIHZhbHVlcyBhcmUNCiAgIGZpY3RpdGlvdXMgaG93ZXZlci4N Cg0KQi4xLiAgRXhhbXBsZSBNZXNzYWdlcyBpbiBhIEZvdXItcGFzcyBFeGNoYW5nZQ0KDQogICBU aGUgZXhhbXBsZXMgYmVsb3cgaWxsdXN0cmF0ZSBhIGNvbXBsZXRlIGZvdXItcGFzcyBEU0tQUCBl eGNoYW5nZS4NCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQpEb2hlcnR5LCBldCBhbC4gICAgICAgICAg RXhwaXJlcyBKYW51YXJ5IDksIDIwMDggICAgICAgICAgICAgICBbUGFnZSA3N10NCg0KDQpJbnRl cm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgRFNLUFAgICAgICAgICAgICAgICAgICAgICAg ICBKdWx5IDIwMDcNCg0KDQpCLjEuMS4gIEV4YW1wbGUgb2YgYSBEU0tQUCBJbml0aWFsaXphdGlv biAoVHJpZ2dlcikgTWVzc2FnZQ0KDQogICA8P3htbCB2ZXJzaW9uPSIxLjAiIGVuY29kaW5nPSJV VEYtOCI/Pg0KICAgPGRza3BwOkRTS1BQVHJpZ2dlciBWZXJzaW9uPSIxLjAiDQogICAgIHhtbG5z OmRza3BwPSJ1cm46aWV0ZjpwYXJhbXM6eG1sOnNjaGVtYTprZXlwcm92OnByb3RvY29sIg0KICAg ICB4bWxuczpwc2tjPSJ1cm46aWV0ZjpwYXJhbXM6eG1sOm5zOmtleXByb3Y6Y29udGFpbmVyIg0K ICAgICB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNl Ig0KICAgICAgIHhzaTpzY2hlbWFMb2NhdGlvbj0idXJuOmlldGY6cGFyYW1zOnhtbDpzY2hlbWE6 a2V5cHJvdjpwcm90b2NvbCI+DQogICAgIDxJbml0aWFsaXphdGlvblRyaWdnZXI+DQogICAgICAg PERldmljZUlkZW50aWZpZXJEYXRhPg0KICAgICAgICAgPHBza2M6RGV2aWNlSUQ+DQogICAgICAg ICAgIDxNYW51ZmFjdHVyZXI+TWFudWZhY3R1cmVyQUJDPC9NYW51ZmFjdHVyZXI+DQogICAgICAg ICAgIDxTZXJpYWxObz5YTDAwMDAwMDAwMDEyMzQ8L1NlcmlhbE5vPg0KICAgICAgICAgICA8TW9k ZWw+VTI8L01vZGVsPg0KICAgICAgICAgPC9EZXZpY2VJRD4NCiAgICAgICA8L0RldmljZUlkZW50 aWZpZXJEYXRhPg0KICAgICAgIDxUcmlnZ2VyTm9uY2U+MTEyZHNkZndmMzEyYXNkZXIzOTRqdz09 PC9UcmlnZ2VyTm9uY2U+DQogICAgIDwvSW5pdGlhbGl6YXRpb25UcmlnZ2VyPg0KICAgPC9kc2tw cDpEU0tQUFRyaWdnZXI+DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KRG9oZXJ0eSwgZXQgYWwuICAgICAgICAgIEV4cGlyZXMg SmFudWFyeSA5LCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgNzhdDQoNCg0KSW50ZXJuZXQtRHJh ZnQgICAgICAgICAgICAgICAgICAgIERTS1BQICAgICAgICAgICAgICAgICAgICAgICAgSnVseSAy MDA3DQoNCg0KQi4xLjIuICBFeGFtcGxlIG9mIGEgPENsaWVudEhlbGxvPiBNZXNzYWdlDQoNCiAg IDw/eG1sIHZlcnNpb249IjEuMCIgZW5jb2Rpbmc9IlVURi04Ij8+DQogICA8ZHNrcHA6Q2xpZW50 SGVsbG8gVmVyc2lvbj0iMS4wIg0KICAgICB4bWxuczpkc2twcD0idXJuOmlldGY6cGFyYW1zOnht bDpzY2hlbWE6a2V5cHJvdjpwcm90b2NvbCINCiAgICAgeG1sbnM6cHNrYz0idXJuOmlldGY6cGFy YW1zOnhtbDpuczprZXlwcm92OmNvbnRhaW5lciINCiAgICAgeG1sbnM6eHNpPSJodHRwOi8vd3d3 LnczLm9yZy8yMDAxL1hNTFNjaGVtYS1pbnN0YW5jZSINCiAgICAgICB4c2k6c2NoZW1hTG9jYXRp b249InVybjppZXRmOnBhcmFtczp4bWw6c2NoZW1hOmtleXByb3Y6cHJvdG9jb2wiDQogICAgIHht bG5zOmRzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjIj4NCiAgICAgPERldmlj ZUlkZW50aWZpZXJEYXRhPg0KICAgICAgIDxwc2tjOkRldmljZUlEPg0KICAgICAgICAgPE1hbnVm YWN0dXJlcj5NYW51ZmFjdHVyZXJBQkM8L01hbnVmYWN0dXJlcj4NCiAgICAgICAgIDxTZXJpYWxO bz5YTDAwMDAwMDAwMDEyMzQ8L1NlcmlhbE5vPg0KICAgICAgICAgPE1vZGVsPlUyPC9Nb2RlbD4N CiAgICAgICA8L0RldmljZUlEPg0KICAgICA8L0RldmljZUlkZW50aWZpZXJEYXRhPg0KICAgICA8 VHJpZ2dlck5vbmNlPjExMmRzZGZ3ZjMxMmFzZGVyMzk0anc9PTwvVHJpZ2dlck5vbmNlPg0KICAg ICA8U3VwcG9ydGVkS2V5VHlwZXM+DQogICAgICAgPEFsZ29yaXRobT5odHRwOi8vd3d3LnJzYS5j b20vcnNhbGFicy9vdHBzL3NjaGVtYXMvMjAwNS8wOS8NCiAgICAgICAgIG90cHMtd3N0I1NlY3Vy SUQtQUVTPC9BbGdvcml0aG0+DQogICAgICAgPEFsZ29yaXRobT5odHRwOi8vd3d3Lm9wZW5hdXRo ZW50aWNhdGlvbi5vcmcvT0FUSC8yMDA2LzEwL1BTS0MjDQogICAgICAgICBIT1RQPC9BbGdvcml0 aG0+DQogICAgIDwvU3VwcG9ydGVkS2V5VHlwZXM+DQogICAgIDxTdXBwb3J0ZWRFbmNyeXB0aW9u QWxnb3JpdGhtcz4NCiAgICAgICA8QWxnb3JpdGhtPmh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDUv eG1sZW5jI3JzYV8xXzU8L0FsZ29yaXRobT4NCiAgICAgICA8QWxnb3JpdGhtPnVybjppZXRmOnBh cmFtczp4bWw6c2NoZW1hOmtleXByb3Y6cHJvdG9jb2wjDQogICAgICAgICBkc2twcC1wcmYtYWVz PC9BbGdvcml0aG0+DQogICAgIDwvU3VwcG9ydGVkTUFDQWxnb3JpdGhtcz4NCiAgICAgICA8QWxn b3JpdGhtPnVybjppZXRmOnBhcmFtczp4bWw6c2NoZW1hOmtleXByb3Y6cHJvdG9jb2wjDQogICAg ICAgICBkc2twcC1wcmYtYWVzPC9BbGdvcml0aG0+DQogICAgIDwvU3VwcG9ydGVkTUFDQWxnb3Jp dGhtcz4NCiAgICAgPFN1cHBvcnRlZFByb3RvY29sVmFyaWFudHM+Rm91clBhc3M8L1N1cHBvcnRl ZFByb3RvY29sVmFyaWFudHM+DQogICAgIDxTdXBwb3J0ZWRLZXlDb250YWluZXJzPg0KICAgICAg IDxLZXlDb250YWluZXJGb3JtYXQ+DQogICAgICAgICB1cm46aWV0ZjpwYXJhbXM6eG1sOnNjaGVt YTprZXlwcm92OmNvbnRhaW5lcg0KICAgICAgIDwvS2V5Q29udGFpbmVyRm9ybWF0Pg0KICAgICA8 L1N1cHBvcnRlZEtleUNvbnRhaW5lcnM+DQogICAgIDxBdXRoZW50aWNhdGlvbkRhdGE+DQogICAg ICAgPEF1dGhlbnRpY2F0aW9uQ29kZT4xZXJkMzU0NjU3Njg5MTAyYWJjZDwvQXV0aGVudGljYXRp b25Db2RlPg0KICAgICA8L0F1dGhlbnRpY2F0aW9uRGF0YT4NCiAgIDwvZHNrcHA6Q2xpZW50SGVs bG8+DQoNCg0KDQoNCg0KDQoNCg0KDQoNCkRvaGVydHksIGV0IGFsLiAgICAgICAgICBFeHBpcmVz IEphbnVhcnkgOSwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDc5XQ0KDQoNCkludGVybmV0LURy YWZ0ICAgICAgICAgICAgICAgICAgICBEU0tQUCAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkg MjAwNw0KDQoNCkIuMS4zLiAgRXhhbXBsZSBvZiBhIDxTZXJ2ZXJIZWxsbz4gTWVzc2FnZQ0KDQog ICA8P3htbCB2ZXJzaW9uPSIxLjAiIGVuY29kaW5nPSJVVEYtOCI/Pg0KICAgPGRza3BwOlNlcnZl ckhlbGxvIFZlcnNpb249IjEuMCIgU2Vzc2lvbklEPSI0MTE0IiBTdGF0dXM9IlN1Y2Nlc3MiDQog ICAgIHhtbG5zOmRza3BwPSJ1cm46aWV0ZjpwYXJhbXM6eG1sOnNjaGVtYTprZXlwcm92OnByb3Rv Y29sIg0KICAgICB4bWxuczpwc2tjPSJ1cm46aWV0ZjpwYXJhbXM6eG1sOm5zOmtleXByb3Y6Y29u dGFpbmVyIg0KICAgICB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1h LWluc3RhbmNlIg0KICAgICAgIHhzaTpzY2hlbWFMb2NhdGlvbj0idXJuOmlldGY6cGFyYW1zOnht bDpzY2hlbWE6a2V5cHJvdjpwcm90b2NvbCINCiAgICAgeG1sbnM6ZHM9Imh0dHA6Ly93d3cudzMu b3JnLzIwMDAvMDkveG1sZHNpZyMiPg0KICAgICA8S2V5VHlwZT4NCiAgICAgICBodHRwOi8vd3d3 LnJzYS5jb20vcnNhbGFicy9vdHBzL3NjaGVtYXMvMjAwNS8wOS9vdHBzLXdzdCMNCiAgICAgICAg IFNlY3VySUQtQUVTDQogICAgIDwvS2V5VHlwZT4NCiAgICAgPEVuY3J5cHRpb25BbGdvcml0aG0+ DQogICAgICAgdXJuOmlldGY6cGFyYW1zOnhtbDpzY2hlbWE6a2V5cHJvdjpwcm90b2NvbCNkc2tw cC1wcmYtYWVzDQogICAgIDwvRW5jcnlwdGlvbkFsZ29yaXRobT4NCiAgICAgPE1hY0FsZ29yaXRo bT4NCiAgICAgICB1cm46aWV0ZjpwYXJhbXM6eG1sOnNjaGVtYTprZXlwcm92OnByb3RvY29sI2Rz a3BwLXByZi1hZXMNCiAgICAgPC9NYWNBbGdvcml0aG0+DQogICAgIDxFbmNyeXB0aW9uS2V5Pg0K ICAgICAgIDxkczpLZXlOYW1lPktFWS0xPC9kczpLZXlOYW1lPg0KICAgICA8L0VuY3J5cHRpb25L ZXk+DQogICAgIDxLZXlDb250YWluZXJGb3JtYXQ+DQogICAgICAgdXJuOmlldGY6cGFyYW1zOnht bDpzY2hlbWE6a2V5cHJvdjpjb250YWluZXINCiAgICAgPC9LZXlDb250YWluZXJGb3JtYXQ+DQog ICAgIDxQYXlsb2FkPg0KICAgICAgIDxOb25jZT5xdzJld2FzZGUzMTJhc2RlcjM5NGp3PT08L05v bmNlPg0KICAgICA8L1BheWxvYWQ+DQogICA8L2Rza3BwOlNlcnZlckhlbGxvPg0KDQpCLjEuNC4g IEV4YW1wbGUgb2YgYSA8Q2xpZW50Tm9uY2U+IE1lc3NhZ2UNCg0KICAgPD94bWwgdmVyc2lvbj0i MS4wIiBlbmNvZGluZz0iVVRGLTgiPz4NCiAgIDxkc2twcDpDbGllbnROb25jZSBWZXJzaW9uPSIx LjAiIFNlc3Npb25JRD0iNDExNCINCiAgICAgeG1sbnM6ZHNrcHA9InVybjppZXRmOnBhcmFtczp4 bWw6c2NoZW1hOmtleXByb3Y6cHJvdG9jb2wiDQogICAgIHhtbG5zOnhzaT0iaHR0cDovL3d3dy53 My5vcmcvMjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiDQogICAgICAgeHNpOnNjaGVtYUxvY2F0aW9u PSJ1cm46aWV0ZjpwYXJhbXM6eG1sOnNjaGVtYTprZXlwcm92OnByb3RvY29sIg0KICAgICB4bWxu czpkcz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyI+DQogICAgIDxFbmNyeXB0 ZWROb25jZT5WWEVOYytVbS85L052bVlLaUhETGFFckswZ2s9PC9FbmNyeXB0ZWROb25jZT4NCiAg ICAgPEF1dGhlbnRpY2F0aW9uRGF0YT4NCiAgICAgICA8QXV0aGVudGljYXRpb25Db2RlPjFlcmQz NTQ2NTc2ODkxMDJhYmNkPC9BdXRoZW50aWNhdGlvbkNvZGU+DQogICAgIDwvQXV0aGVudGljYXRp b25EYXRhPg0KICAgPC9kc2twcDpDbGllbnROb25jZT4NCg0KQi4xLjUuICBFeGFtcGxlIG9mIGEg PFNlcnZlckZpbmlzaGVkPiBNZXNzYWdlDQoNCg0KDQoNCg0KDQpEb2hlcnR5LCBldCBhbC4gICAg ICAgICAgRXhwaXJlcyBKYW51YXJ5IDksIDIwMDggICAgICAgICAgICAgICBbUGFnZSA4MF0NCg0K DQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgRFNLUFAgICAgICAgICAgICAgICAg ICAgICAgICBKdWx5IDIwMDcNCg0KDQogICA8P3htbCB2ZXJzaW9uPSIxLjAiIGVuY29kaW5nPSJV VEYtOCI/Pg0KICAgPGRza3BwOlNlcnZlckZpbmlzaGVkIFZlcnNpb249IjEuMCIgU2Vzc2lvbklE PSI0MTE0IiBTdGF0dXM9IlN1Y2Nlc3MiDQogICAgIHhtbG5zOmRza3BwPSJ1cm46aWV0ZjpwYXJh bXM6eG1sOnNjaGVtYTprZXlwcm92OnByb3RvY29sIg0KICAgICB4bWxuczpwc2tjPSJ1cm46aWV0 ZjpwYXJhbXM6eG1sOm5zOmtleXByb3Y6Y29udGFpbmVyIg0KICAgICB4bWxuczp4c2k9Imh0dHA6 Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIg0KICAgICAgIHhzaTpzY2hlbWFM b2NhdGlvbj0idXJuOmlldGY6cGFyYW1zOnhtbDpzY2hlbWE6a2V5cHJvdjpwcm90b2NvbCI+DQog ICAgIDxwc2tjOktleUNvbnRhaW5lciB2ZXJzaW9uPSIxLjAiPg0KICAgICAgIDxEZXZpY2U+DQog ICAgICAgICA8U2VjcmV0IFNlY3JldEFsZ29yaXRobT0ib3RoZXIiIFNlY3JldEFsZ29yaXRobS1l eHQ9IlNlY3VySUQiDQogICAgICAgICAgIFNlY3JldElkPSJYTDAwMDAwMDAwMDEyMzQiPg0KICAg ICAgICAgICA8SXNzdWVyPkNyZWRlbnRpYWxJc3N1ZXI8L0lzc3Vlcj4NCiAgICAgICAgICAgPFVz YWdlIG90cD0idHJ1ZSI+DQogICAgICAgICAgICAgPFJlc3BvbnNlRm9ybWF0IGZvcm1hdD0iREVD SU1BTCIgbGVuZ3RoPSI2Ii8+DQogICAgICAgICAgIDwvVXNhZ2U+DQogICAgICAgICAgIDxGcmll bmRseU5hbWU+TXlGaXJzdFRva2VuPC9GcmllbmRseU5hbWU+DQogICAgICAgICAgIDxEYXRhIE5h bWU9IlRJTUUiPg0KICAgICAgICAgICAgIDxWYWx1ZT5UaW1lPC9WYWx1ZT4NCiAgICAgICAgICAg PC9EYXRhPg0KICAgICAgICAgICA8RXhwaXJ5PjEwLzMwLzIwMDk8L0V4cGlyeT4NCiAgICAgICAg IDwvU2VjcmV0Pg0KICAgICAgIDwvRGV2aWNlPg0KICAgICA8L3Bza2M6S2V5Q29udGFpbmVyPg0K ICAgICA8TWFjPm1paWRmYXNkZTMxMmFzZGVyMzk0anc9PTwvTWFjPg0KICAgPC9kc2twcDpTZXJ2 ZXJGaW5pc2hlZD4NCg0KQi4yLiAgRXhhbXBsZSBNZXNzYWdlcyBpbiBhIFR3by0gb3IgT25lLXBh c3MgRXhjaGFuZ2UNCg0KICAgVGhlIGV4YW1wbGVzIGlsbHVzdHJhdGUgYSBjb21wbGV0ZSB0d28t cGFzcyBEU0tQUCBleGNoYW5nZS4gIFRoZQ0KICAgc2VydmVyIG1lc3NhZ2VzIE1BWSBhbHNvIGNv bnN0aXR1dGUgdGhlIG9ubHkgbWVzc2FnZXMgaW4gYSBvbmUtcGFzcw0KICAgRFNLUFAgZXhjaGFu Z2UuDQoNCkIuMi4xLiAgRXhhbXBsZSBvZiBhIDxDbGllbnRIZWxsbz4gTWVzc2FnZSBJbmRpY2F0 aW5nIFN1cHBvcnQgZm9yIFR3by0NCiAgICAgICAgcGFzcyBEU0tQUA0KDQogICBUaGUgY2xpZW50 IGluZGljYXRlcyBzdXBwb3J0IGJvdGggZm9yIHRoZSB0d28tcGFzcyBrZXkgdHJhbnNwb3J0DQog ICB2YXJpYW50IGFzIHdlbGwgYXMgdGhlIHR3by1wYXNzIGtleSB3cmFwIHZhcmlhbnQuDQoNCiAg IDw/eG1sIHZlcnNpb249IjEuMCIgZW5jb2Rpbmc9IlVURi04Ij8+DQogICA8ZHNrcHA6Q2xpZW50 SGVsbG8gVmVyc2lvbj0iMS4wIg0KICAgICB4bWxuczpkc2twcD0idXJuOmlldGY6cGFyYW1zOnht bDpzY2hlbWE6a2V5cHJvdjpwcm90b2NvbCINCiAgICAgeG1sbnM6cHNrYz0idXJuOmlldGY6cGFy YW1zOnhtbDpuczprZXlwcm92OmNvbnRhaW5lciINCiAgICAgeG1sbnM6eHNpPSJodHRwOi8vd3d3 LnczLm9yZy8yMDAxL1hNTFNjaGVtYS1pbnN0YW5jZSINCiAgICAgICB4c2k6c2NoZW1hTG9jYXRp b249InVybjppZXRmOnBhcmFtczp4bWw6c2NoZW1hOmtleXByb3Y6cHJvdG9jb2wiDQogICAgIHht bG5zOmRzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjIg0KICAgICB4bWxuczpw a2NzLTU9DQogICAgICJodHRwOi8vd3d3LnJzYXNlY3VyaXR5LmNvbS9yc2FsYWJzL3BrY3Mvc2No ZW1hcy9wa2NzLTV2Mi0wIyI+DQogICAgIDxEZXZpY2VJZGVudGlmaWVyRGF0YT4NCiAgICAgICA8 cHNrYzpEZXZpY2VJRD4NCg0KDQoNCkRvaGVydHksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEph bnVhcnkgOSwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDgxXQ0KDQoNCkludGVybmV0LURyYWZ0 ICAgICAgICAgICAgICAgICAgICBEU0tQUCAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAw Nw0KDQoNCiAgICAgICAgIDxNYW51ZmFjdHVyZXI+TWFudWZhY3R1cmVyQUJDPC9NYW51ZmFjdHVy ZXI+DQogICAgICAgICA8U2VyaWFsTm8+WEwwMDAwMDAwMDAxMjM0PC9TZXJpYWxObz4NCiAgICAg ICAgIDxNb2RlbD5VMjwvTW9kZWw+DQogICAgICAgPC9EZXZpY2VJRD4NCiAgICAgPC9EZXZpY2VJ ZGVudGlmaWVyRGF0YT4NCiAgICAgPENsaWVudE5vbmNlPjE1MjNzZGZ4ZTc5OGpvd2llOTEzb2w9 PTwvQ2xpZW50Tm9uY2U+DQogICAgIDxTdXBwb3J0ZWRLZXlUeXBlcz4NCiAgICAgICA8QWxnb3Jp dGhtPg0KICAgICAgICAgaHR0cDovL3d3dy5yc2EuY29tL3JzYWxhYnMvb3Rwcy9zY2hlbWFzLzIw MDUvMDkvb3Rwcy13c3QjDQogICAgICAgICAgIFNlY3VySUQtQUVTDQogICAgICAgPC9BbGdvcml0 aG0+DQogICAgICAgPEFsZ29yaXRobT4NCiAgICAgICAgIGh0dHA6Ly93d3cub3BlbmF1dGhlbnRp Y2F0aW9uLm9yZy9PQVRILzIwMDYvMTAvUFNLQyNIT1RQDQogICAgICAgPC9BbGdvcml0aG0+DQog ICAgIDwvU3VwcG9ydGVkS2V5VHlwZXM+DQogICAgIDxTdXBwb3J0ZWRFbmNyeXB0aW9uQWxnb3Jp dGhtcz4NCiAgICAgICA8QWxnb3JpdGhtPg0KICAgICAgICAgaHR0cDovL3d3dy53My5vcmcvMjAw MS8wNS94bWxlbmMjcnNhXzFfNQ0KICAgICAgIDwvQWxnb3JpdGhtPg0KICAgICAgIDxBbGdvcml0 aG0+DQogICAgICAgICBodHRwOi8vd3d3LnczLm9yZy8yMDAxLzA0L3htbGVuYyNrdy1hZXMxMjgN CiAgICAgICA8L0FsZ29yaXRobT4NCiAgICAgICA8QWxnb3JpdGhtPg0KICAgICAgICAgaHR0cDov L3d3dy5yc2FzZWN1cml0eS5jb20vcnNhbGFicy9wa2NzL3NjaGVtYXMvcGtjcy01Iw0KICAgICAg ICAgICBwYmVzMg0KICAgICAgIDwvQWxnb3JpdGhtPg0KICAgICAgIDxBbGdvcml0aG0+DQogICAg ICAgICB1cm46aWV0ZjpwYXJhbXM6eG1sOnNjaGVtYTprZXlwcm92OnByb3RvY29sI2Rza3BwLXBy Zi1hZXMNCiAgICAgICA8L0FsZ29yaXRobT4NCiAgICAgPC9TdXBwb3J0ZWRNQUNBbGdvcml0aG1z Pg0KICAgICAgIDxBbGdvcml0aG0+dXJuOmlldGY6cGFyYW1zOnhtbDpzY2hlbWE6a2V5cHJvdjpw cm90b2NvbCMNCiAgICAgICAgIGRza3BwLXByZi1hZXM8L0FsZ29yaXRobT4NCiAgICAgPC9TdXBw b3J0ZWRNQUNBbGdvcml0aG1zPg0KICAgICA8U3VwcG9ydGVkUHJvdG9jb2xWYXJpYW50cz4NCiAg ICAgICA8VmFyaWFudD4NCiAgICAgICAgIDxUd29QYXNzPg0KICAgICAgICAgICA8U3VwcG9ydGVk S2V5SW5pdGlhbGl6YXRpb25NZXRob2Q+DQogICAgICAgICAgICAgdXJuOmlldGY6cGFyYW1zOnht bDpzY2hlbWE6a2V5cHJvdjpwcm90b2NvbCN3cmFwDQogICAgICAgICAgIDwvU3VwcG9ydGVkS2V5 SW5pdGlhbGl6YXRpb25NZXRob2Q+DQogICAgICAgICAgIDxQYXlsb2FkIHhzaTp0eXBlPSJkczpL ZXlJbmZvVHlwZSI+DQogICAgICAgICAgICAgPGRzOktleU5hbWU+S2V5XzAwMTwvZHM6S2V5TmFt ZT4NCiAgICAgICAgICAgPC9QYXlsb2FkPg0KICAgICAgICAgICA8U3VwcG9ydGVkS2V5SW5pdGlh bGl6YXRpb25NZXRob2Q+DQogICAgICAgICAgICAgdXJuOmlldGY6cGFyYW1zOnhtbDpzY2hlbWE6 a2V5cHJvdjpwcm90b2NvbCN0cmFuc3BvcnQNCiAgICAgICAgICAgPC9TdXBwb3J0ZWRLZXlJbml0 aWFsaXphdGlvbk1ldGhvZD4NCiAgICAgICAgICAgPFBheWxvYWQgeHNpOnR5cGU9ImRzOktleUlu Zm9UeXBlIj4NCiAgICAgICAgICAgICA8ZHM6WDUwOURhdGE+DQogICAgICAgICAgICAgICA8ZHM6 WDUwOUNlcnRpZmljYXRlPm1paWI8L2RzOlg1MDlDZXJ0aWZpY2F0ZT4NCg0KDQoNCkRvaGVydHks IGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgOSwgMjAwOCAgICAgICAgICAgICAgIFtQ YWdlIDgyXQ0KDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICBEU0tQUCAgICAg ICAgICAgICAgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgICAgICAgICAgICA8L2RzOlg1MDlE YXRhPg0KICAgICAgICAgICA8L1BheWxvYWQ+DQogICAgICAgICA8L1R3b1Bhc3M+DQogICAgICAg PC9WYXJpYW50Pg0KICAgICA8L1N1cHBvcnRlZFByb3RvY29sVmFyaWFudHMNCiAgICAgPFN1cHBv cnRlZEtleUNvbnRhaW5lcnM+DQogICAgICAgPEtleUNvbnRhaW5lckZvcm1hdD4NCiAgICAgICAg IHVybjppZXRmOnBhcmFtczp4bWw6c2NoZW1hOmtleXByb3Y6Y29udGFpbmVyDQogICAgICAgPC9L ZXlDb250YWluZXJGb3JtYXQ+DQogICAgIDwvU3VwcG9ydGVkS2V5Q29udGFpbmVycz4NCiAgICAg PEF1dGhlbnRpY2F0aW9uRGF0YT4NCiAgICAgICA8QXV0aGVudGljYXRpb25Db2RlPjFlcmQzNTQ2 NTc2ODkxMDJhYmNkPC9BdXRoZW50aWNhdGlvbkNvZGU+DQogICAgIDwvQXV0aGVudGljYXRpb25E YXRhPg0KICAgPC9kc2twcDpDbGllbnRIZWxsbz4NCg0KQi4yLjIuICBFeGFtcGxlIG9mIGEgPFNl cnZlckZpbmlzaGVkPiBNZXNzYWdlIFVzaW5nIHRoZSBLZXkgVHJhbnNwb3J0DQogICAgICAgIFBy b2ZpbGUNCg0KICAgSW4gdGhpcyBleGFtcGxlLCB0aGUgc2VydmVyIHJlc3BvbmRzIHRvIHRoZSBw cmV2aW91cyByZXF1ZXN0IHVzaW5nDQogICB0aGUga2V5IHRyYW5zcG9ydCBwcm9maWxlLg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQpEb2hlcnR5LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDksIDIwMDggICAgICAg ICAgICAgICBbUGFnZSA4M10NCg0KDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAg RFNLUFAgICAgICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQogICA8P3htbCB2ZXJz aW9uPSIxLjAiIGVuY29kaW5nPSJVVEYtOCI/Pg0KICAgPGRza3BwOlNlcnZlckZpbmlzaGVkIFZl cnNpb249IjEuMCIgU2Vzc2lvbklEPSI0MTE0IiBTdGF0dXM9IlN1Y2Nlc3MiDQogICAgIHhtbG5z OmRza3BwPSJ1cm46aWV0ZjpwYXJhbXM6eG1sOnNjaGVtYTprZXlwcm92OnByb3RvY29sIg0KICAg ICB4bWxuczpwc2tjPSJ1cm46aWV0ZjpwYXJhbXM6eG1sOm5zOmtleXByb3Y6Y29udGFpbmVyIg0K ICAgICB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNl Ig0KICAgICAgIHhzaTpzY2hlbWFMb2NhdGlvbj0idXJuOmlldGY6cGFyYW1zOnhtbDpzY2hlbWE6 a2V5cHJvdjpwcm90b2NvbCINCiAgICAgeG1sbnM6ZHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAv MDkveG1sZHNpZyMiDQogICAgIHhtbG5zOnhlbmM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDQv eG1sZW5jIyI+DQogICAgIDxwc2tjOktleUNvbnRhaW5lciB2ZXJzaW9uPSIxLjAiPg0KICAgICAg IDxFbmNyeXB0aW9uTWV0aG9kDQogICAgICAgICBhbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3Jn LzIwMDEvMDUveG1sZW5jI3JzYV8xXzUiPg0KICAgICAgICAgPEVuY0tleUxhYmVsPjQzMjEyMDkz PA0KICAgICAgICAgPGRzOktleUluZm8+DQogICAgICAgICAgIDxkczpYNTA5RGF0YT4NCiAgICAg ICAgICAgICA8ZHM6WDUwOUNlcnRpZmljYXRlPm1paWI8L2RzOlg1MDlDZXJ0aWZpY2F0ZT4NCiAg ICAgICAgICAgPC9kczpYNTA5RGF0YT4NCiAgICAgICAgIDwvZHM6S2V5SW5mbz4NCiAgICAgICA8 L0VuY3J5cHRpb25NZXRob2Q+DQogICAgICAgPERldmljZT4NCiAgICAgICAgIDxTZWNyZXQgU2Vj cmV0QWxnb3JpdGhtPSJIT1RQIiBTZWNyZXRJZD0iU0RVMzEyMzQ1Njc4Ij4NCiAgICAgICAgICAg PElzc3Vlcj5DcmVkZW50aWFsSXNzdWVyPC9Jc3N1ZXI+DQogICAgICAgICAgIDxVc2FnZSBvdHA9 InRydWUiPg0KICAgICAgICAgICAgIDxSZXNwb25zZUZvcm1hdCBmb3JtYXQ9IkRFQ0lNQUwiIGxl bmd0aD0iNiIvPg0KICAgICAgICAgICA8L1VzYWdlPg0KICAgICAgICAgICA8RnJpZW5kbHlOYW1l Pk15Rmlyc3RUb2tlbjwvRnJpZW5kbHlOYW1lPg0KICAgICAgICAgICA8RGF0YSBOYW1lPSJTRUNS RVQiPg0KICAgICAgICAgICAgIDxWYWx1ZT4NCiAgICAgICAgICAgICAgIDdKSFV5cDNhek9rcUpF TlNzaDZiMnZ4WHp3R0JZeXB6SnhFcitpa1FBYTIyOUtWL0JnWmhHQT09DQogICAgICAgICAgICAg PC9WYWx1ZT4NCiAgICAgICAgICAgICA8VmFsdWVEaWdlc3Q+DQogICAgICAgICAgICAgICA5QUVE cGQ0dGQ0NG1SU0FTYWI2MjVvUHFsdkhISXBsekFEZXIrcFBPbEwxMThKVy9BaElvSEI9PQ0KICAg ICAgICAgICAgIDwvVmFsdWVEaWdlc3Q+DQogICAgICAgICAgIDwvRGF0YT4NCiAgICAgICAgICAg PERhdGEgTmFtZT0iQ09VTlRFUiI+DQogICAgICAgICAgICAgPFZhbHVlPjE8L1ZhbHVlPg0KICAg ICAgICAgICA8L0RhdGE+DQogICAgICAgICAgIDxFeHBpcnk+MTAvMzAvMjAwOTwvRXhwaXJ5Pg0K ICAgICAgICAgPC9TZWNyZXQ+DQogICAgICAgPC9EZXZpY2U+DQogICAgIDwvcHNrYzpLZXlDb250 YWluZXI+DQogICAgIDxNYWMgTWFjQWxnb3JpdGhtPQ0KICAgICAgICJ1cm46aWV0ZjpwYXJhbXM6 eG1sOnNjaGVtYTprZXlwcm92OnByb3RvY29sI2Rza3BwLXByZi1hZXMiPg0KICAgICAgIG1paWRm YXNkZTMxMmFzZGVyMzk0anc9PQ0KICAgICA8L01hYz4NCiAgIDwvZHNrcHA6U2VydmVyRmluaXNo ZWQ+DQoNCg0KDQoNCg0KDQpEb2hlcnR5LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5 IDksIDIwMDggICAgICAgICAgICAgICBbUGFnZSA4NF0NCg0KDQpJbnRlcm5ldC1EcmFmdCAgICAg ICAgICAgICAgICAgICAgRFNLUFAgICAgICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMDcNCg0K DQpCLjIuMy4gIEV4YW1wbGUgb2YgYSA8U2VydmVyRmluaXNoZWQ+IE1lc3NhZ2UgVXNpbmcgdGhl IEtleSBXcmFwIFByb2ZpbGUNCg0KICAgSW4gdGhpcyBleGFtcGxlLCB0aGUgc2VydmVyIHJlc3Bv bmRzIHRvIHRoZSBwcmV2aW91cyByZXF1ZXN0IHVzaW5nDQogICB0aGUga2V5IHdyYXAgcHJvZmls ZS4NCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQpEb2hlcnR5LCBldCBhbC4g ICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDksIDIwMDggICAgICAgICAgICAgICBbUGFnZSA4NV0N Cg0KDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgRFNLUFAgICAgICAgICAgICAg ICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQogICA8P3htbCB2ZXJzaW9uPSIxLjAiIGVuY29kaW5n PSJVVEYtOCI/Pg0KICAgPGRza3BwOlNlcnZlckZpbmlzaGVkIFZlcnNpb249IjEuMCIgU2Vzc2lv bklEPSI0MTE0IiBTdGF0dXM9IlN1Y2Nlc3MiDQogICAgIHhtbG5zOmRza3BwPSJ1cm46aWV0Zjpw YXJhbXM6eG1sOnNjaGVtYTprZXlwcm92OnByb3RvY29sIg0KICAgICB4bWxuczpwc2tjPSJ1cm46 aWV0ZjpwYXJhbXM6eG1sOm5zOmtleXByb3Y6Y29udGFpbmVyIg0KICAgICB4bWxuczp4c2k9Imh0 dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIg0KICAgICAgIHhzaTpzY2hl bWFMb2NhdGlvbj0idXJuOmlldGY6cGFyYW1zOnhtbDpzY2hlbWE6a2V5cHJvdjpwcm90b2NvbCIN CiAgICAgeG1sbnM6ZHM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyMiDQogICAg IHhtbG5zOnhlbmM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDQveG1sZW5jIyI+DQogICAgIDxw c2tjOktleUNvbnRhaW5lciB2ZXJzaW9uPSIxLjAiPg0KICAgICAgIDxFbmNyeXB0aW9uTWV0aG9k DQogICAgICAgICBhbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDUveG1sZW5jI2t3 LWFlczEyOCI+DQogICAgICAgICA8RW5jS2V5TGFiZWw+NDMyMTIwOTM8L0VuY0tleUxhYmVsPg0K ICAgICAgICAgPGRzOktleUluZm8+DQogICAgICAgICAgIDxkczpLZXlOYW1lPktleS0wMDE8L2Rz OktleU5hbWU+DQogICAgICAgICA8L2RzOktleUluZm8+DQogICAgICAgPC9FbmNyeXB0aW9uTWV0 aG9kPg0KICAgICAgIDxEZXZpY2U+DQogICAgICAgICA8U2VjcmV0IFNlY3JldEFsZ29yaXRobT0i SE9UUCIgU2VjcmV0SWQ9IlNEVTMxMjM0NTY3OCI+DQogICAgICAgICAgIDxJc3N1ZXI+Q3JlZGVu dGlhbElzc3VlcjwvSXNzdWVyPg0KICAgICAgICAgICA8VXNhZ2Ugb3RwPSJ0cnVlIj4NCiAgICAg ICAgICAgICA8UmVzcG9uc2VGb3JtYXQgZm9ybWF0PSJERUNJTUFMIiBsZW5ndGg9IjYiLz4NCiAg ICAgICAgICAgPC9Vc2FnZT4NCiAgICAgICAgICAgPEZyaWVuZGx5TmFtZT5NeUZpcnN0VG9rZW48 L0ZyaWVuZGx5TmFtZT4NCiAgICAgICAgICAgPERhdGEgTmFtZT0iU0VDUkVUIj4NCiAgICAgICAg ICAgICAgPFZhbHVlPg0KICAgICAgICAgICAgICAgN0pIVXlwM2F6T2txSkVOU3NoNmIydnhYendH Qll5cHpKeEVyK2lrUUFhMjI5S1YvQmdaaEdBPT0NCiAgICAgICAgICAgICA8L1ZhbHVlPg0KICAg ICAgICAgICAgIDxWYWx1ZURpZ2VzdD4NCiAgICAgICAgICAgICAgIDlBRURwZDR0ZDQ0bVJTQVNh YjYyNW9QcWx2SEhJcGx6QURlcitwUE9sTDExOEpXL0FoSW9IQj09DQogICAgICAgICAgICAgPC9W YWx1ZURpZ2VzdD4NCiAgICAgICAgICAgPC9EYXRhPg0KICAgICAgICAgICA8RGF0YSBOYW1lPSJD T1VOVEVSIj4NCiAgICAgICAgICAgICA8VmFsdWU+MTwvVmFsdWU+DQogICAgICAgICAgIDwvRGF0 YT4NCiAgICAgICAgICAgPEV4cGlyeT4xMC8zMC8yMDA5PC9FeHBpcnk+DQogICAgICAgICA8L1Nl Y3JldD4NCiAgICAgICA8L0RldmljZT4NCiAgICAgPC9wc2tjOktleUNvbnRhaW5lcj4NCiAgICAg PE1hYyBNYWNBbGdvcml0aG09DQogICAgICAgInVybjppZXRmOnBhcmFtczp4bWw6c2NoZW1hOmtl eXByb3Y6cHJvdG9jb2wjZHNrcHAtcHJmLWFlcyI+DQogICAgICAgbWlpZGZhc2RlMzEyYXNkZXIz OTRqdz09DQogICAgIDwvTWFjPg0KICAgPC9kc2twcDpTZXJ2ZXJGaW5pc2hlZD4NCg0KQi4yLjQu ICBFeGFtcGxlIG9mIGEgPFNlcnZlckZpbmlzaGVkPiBNZXNzYWdlIHVzaW5nIHRoZSBQYXNzcGhy YXNlLWJhc2VkDQogICAgICAgIEtleSBXcmFwIFByb2ZpbGUNCg0KICAgSW4gdGhpcyBleGFtcGxl LCB0aGUgc2VydmVyIHJlc3BvbmRzIHRvIHRoZSBwcmV2aW91cyByZXF1ZXN0IHVzaW5nDQoNCg0K DQpEb2hlcnR5LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDksIDIwMDggICAgICAg ICAgICAgICBbUGFnZSA4Nl0NCg0KDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAg RFNLUFAgICAgICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQogICB0aGUgcGFzc3Bo cmFzZS1iYXNlZCBrZXkgd3JhcCBwcm9maWxlLg0KDQogPD94bWwgdmVyc2lvbj0iMS4wIiBlbmNv ZGluZz0iVVRGLTgiPz4NCiA8ZHNrcHA6U2VydmVyRmluaXNoZWQgVmVyc2lvbj0iMS4wIiBTZXNz aW9uSUQ9IjQxMTQiIFN0YXR1cz0iU3VjY2VzcyINCiAgIHhtbG5zOmRza3BwPSJ1cm46aWV0Zjpw YXJhbXM6eG1sOnNjaGVtYTprZXlwcm92OnByb3RvY29sIg0KICAgeG1sbnM6cHNrYz0idXJuOmll dGY6cGFyYW1zOnhtbDpuczprZXlwcm92OmNvbnRhaW5lciINCiAgIHhtbG5zOnhzaT0iaHR0cDov L3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEtaW5zdGFuY2UiDQogICAgIHhzaTpzY2hlbWFMb2Nh dGlvbj0idXJuOmlldGY6cGFyYW1zOnhtbDpzY2hlbWE6a2V5cHJvdjpwcm90b2NvbCINCiAgIHht bG5zOmRzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjIg0KICAgeG1sbnM6eGVu Yz1odHRwOi8vd3d3LnczLm9yZy8yMDAxLzA0L3htbGVuYyMNCiAgIHhtbG5zOnBrY3MtNT0NCiAg ICJodHRwOi8vd3d3LnJzYXNlY3VyaXR5LmNvbS9yc2FsYWJzL3BrY3Mvc2NoZW1hcy9wa2NzLTV2 Mi0wIyI+DQogICA8cHNrYzpLZXlDb250YWluZXIgdmVyc2lvbj0iMS4wIj4NCiAgICAgPEVuY3J5 cHRpb25NZXRob2QgYWxnb3JpdGhtPQ0KICAgICAgICAgImh0dHA6Ly93d3cucnNhc2VjdXJpdHku Y29tL3JzYWxhYnMvcGtjcy9zY2hlbWFzL3BrY3MtNSNwYmVzMiI+DQogICAgICAgPHBrY3MtNTpQ QkVTMi1wYXJhbXM+DQogICAgICAgICA8S2V5RGVyaXZhdGlvbkZ1bmMgQWxnb3JpdGhtPQ0KICAg ICAgICAgICAiaHR0cDovL3d3dy5yc2FzZWN1cml0eS5jb20vcnNhbGFicy9wa2NzL3NjaGVtYXMv cGtjcy01Iw0KICAgICAgICAgICBwYmtkZjIiPg0KICAgICAgICAgICA8cGtjcy01OlBCS0RGMi1w YXJhbXM+DQogICAgICAgICAgICAgPFNhbHQ+DQogICAgICAgICAgICAgICA8U3BlY2lmaWVkPjMy MTEzNDM1PC9TcGVjaWZpZWQ+DQogICAgICAgICAgICAgPC9TYWx0Pg0KICAgICAgICAgICAgIDxJ dGVyYXRpb25Db3VudD4xMDI0PC9JdGVyYXRpb25Db3VudD4NCiAgICAgICAgICAgICA8S2V5TGVu Z3RoPjEyODwvS2V5TGVuZ3RoPg0KICAgICAgICAgICAgIDxQUkYvPg0KICAgICAgICAgICA8L3Br Y3MtNTpQQktERjItcGFyYW1zPg0KICAgICAgICAgPC9LZXlEZXJpdmF0aW9uRnVuYz4NCiAgICAg ICAgIDxFbmNyeXB0aW9uU2NoZW1lIEFsZ29yaXRobT0NCiAgICAgICAgICAgImh0dHA6Ly93d3cu dzMub3JnLzIwMDEvMDQveG1sZW5jI2t3LWFlczEyOC1jYmMiPg0KICAgICAgICAgPC9FbmNyeXB0 aW9uU2NoZW1lDQogICAgICAgPC9wa2NzLTU6UEJFUzItcGFyYW1zPg0KICAgICAgIDxFbmNLZXlM YWJlbD40MzIxMjA5MzwvRW5jS2V5TGFiZWw+DQogICAgICAgPGRzOktleUluZm8+DQogICAgICAg ICA8ZHM6S2V5TmFtZT5QYXNzcGhyYXNlMTwvZHM6S2V5TmFtZT4NCiAgICAgICA8L2RzOktleUlu Zm8+DQogICAgIDwvRW5jcnlwdGlvbk1ldGhvZD4NCiAgICAgPERldmljZT4NCiAgICAgICA8U2Vj cmV0IFNlY3JldEFsZ29yaXRobT0iSE9UUCIgU2VjcmV0SWQ9IlNEVTMxMjM0NTY3OCI+DQogICAg ICAgICA8SXNzdWVyPkNyZWRlbnRpYWxJc3N1ZXI8L0lzc3Vlcj4NCiAgICAgICAgIDxVc2FnZSBv dHA9InRydWUiPg0KICAgICAgICAgICA8UmVzcG9uc2VGb3JtYXQgZm9ybWF0PSJERUNJTUFMIiBs ZW5ndGg9IjYiLz4NCiAgICAgICAgIDwvVXNhZ2U+DQogICAgICAgICA8RnJpZW5kbHlOYW1lPk15 Rmlyc3RUb2tlbjwvRnJpZW5kbHlOYW1lPg0KICAgICAgICAgPERhdGEgTmFtZT0iU0VDUkVUIj4N CiAgICAgICAgICAgPFZhbHVlPg0KICAgICAgICAgICAgIDdKSFV5cDNhek9rcUpFTlNzaDZiMnZ4 WHp3R0JZeXB6SnhFcitpa1FBYTIyOUtWL0JnWmhHQT09DQogICAgICAgICAgIDwvVmFsdWU+DQoN Cg0KDQpEb2hlcnR5LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDksIDIwMDggICAg ICAgICAgICAgICBbUGFnZSA4N10NCg0KDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAg ICAgRFNLUFAgICAgICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQogICAgICAgICAg IDxWYWx1ZURpZ2VzdD4NCiAgICAgICAgICAgICA5QUVEcGQ0dGQ0NG1SU0FTYWI2MjVvUHFsdkhI SXBsekFEZXIrcFBPbEwxMThKVy9BaElvSEI9PQ0KICAgICAgICAgICA8L1ZhbHVlRGlnZXN0Pg0K ICAgICAgICAgPC9EYXRhPg0KICAgICAgICAgPERhdGEgTmFtZT0iQ09VTlRFUiI+DQogICAgICAg ICAgIDxWYWx1ZT4xPC9WYWx1ZT4NCiAgICAgICAgIDwvRGF0YT4NCiAgICAgICAgIDxFeHBpcnk+ MTAvMzAvMjAwOTwvRXhwaXJ5Pg0KICAgICAgIDwvU2VjcmV0Pg0KICAgICA8L0RldmljZT4NCiAg IDwvcHNrYzpLZXlDb250YWluZXI+DQogICA8TWFjIE1hY0FsZ29yaXRobT0NCiAgICAgInVybjpp ZXRmOnBhcmFtczp4bWw6c2NoZW1hOmtleXByb3Y6cHJvdG9jb2wjZHNrcHAtcHJmLWFlcyI+DQog ICAgIG1paWRmYXNkZTMxMmFzZGVyMzk0anc9PQ0KICAgPC9NYWM+DQogPC9kc2twcDpTZXJ2ZXJG aW5pc2hlZD4NCg0KDQpBcHBlbmRpeCBDLiAgUmVxdWlyZW1lbnRzDQoNCiAgIFRoaXMgc2VjdGlv biBzcGVjaWZpZXMgbWFuZGF0b3J5IGFuZCBkZXNpcmFibGUgcHJvdG9jb2wgcmVxdWlyZW1lbnRz Lg0KDQogICBSZXEtMToNCg0KICAgICAgVGhlIHByb3RvY29sIE1VU1Qgc3VwcG9ydCBwcm92aXNp b25pbmcgb2Yga2V5cyBmb3IgdXNlIHdpdGgNCiAgICAgIG11bHRpcGxlIHR5cGVzIG9mIHN5bW1l dHJpYyBjcnlwdG9ncmFwaGljIGFsZ29yaXRobXMuDQoNCiAgIFJlcS0yOg0KDQogICAgICBUaGUg cHJvdG9jb2wgTVVTVCBzdXBwb3J0IHByZS1nZW5lcmF0ZWQgc3ltbWV0cmljIGtleXMgKGJ5DQog ICAgICBzZXBhcmF0ZSBrZXkgaXNzdWFuY2Ugc2VydmljZSkgb3IgbG9jYWxseSBnZW5lcmF0ZWQg a2V5cyBpbiByZWFsLQ0KICAgICAgdGltZSAoYnkgcHJvdmlzaW9uaW5nIHNlcnZlcikuDQoNCiAg IFJlcS0zOg0KDQogICAgICBUaGUgcHJvdG9jb2wgTVVTVCBzdXBwb3J0IG11dHVhbGx5IGdlbmVy YXRlZCBzeW1tZXRyaWMga2V5cyBieQ0KICAgICAgYm90aCBjbGllbnQgYW5kIHNlcnZlciAoaS5l Liwgam9pbnQga2V5IGNvbnRyb2wpLg0KDQogICBSZXEtNDoNCg0KICAgICAgVGhlIHByb3RvY29s IE1VU1QgYWxsb3cgY3J5cHRvZ3JhcGhpYyBtb2R1bGVzIHRvIGFjcXVpcmUgbXVsdGlwbGUNCiAg ICAgIHN5bW1ldHJpYyBrZXlzOyBlYWNoIGtleSBNQVkgYmUgYWNxdWlyZWQgaW4gYSBzZXBhcmF0 ZQ0KICAgICAgcHJvdmlzaW9uaW5nIHNlc3Npb24uDQoNCg0KDQoNCg0KDQoNCg0KRG9oZXJ0eSwg ZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAgICAgICAgICAgICAgW1Bh Z2UgODhdDQoNCg0KSW50ZXJuZXQtRHJhZnQgICAgICAgICAgICAgICAgICAgIERTS1BQICAgICAg ICAgICAgICAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KICAgUmVxLTU6DQoNCiAgICAgIFRoZSBw cm90b2NvbCBNVVNUIHN1cHBvcnQgcmVuZXdhbCBvZiBhIHN5bW1ldHJpYyBrZXkgd2l0aCB0aGUN CiAgICAgIG9yaWdpbmFsIGtleSBJRC4NCg0KICAgUmVxLTY6DQoNCiAgICAgIFRoZSBwcm90b2Nv bCBNVVNUIGFsbG93IGNsaWVudHMgdG8gc3BlY2lmeSB0aGVpciBjcnlwdG9ncmFwaGljDQogICAg ICBjYXBhYmlsaXRpZXMgdG8gdGhlIHNlcnZlciBhbmQgdGhlIHNlcnZlciB0byBpbmRpY2F0ZSB0 aGUNCiAgICAgIGNyeXB0b2dyYXBoeSBhbmQgYWxnb3JpdGhtIHR5cGVzIHRoYXQgaXQgd2lsbCBi ZSB1c2luZy4NCg0KICAgUmVxLTc6DQoNCiAgICAgIFRoZSBwcm90b2NvbCBNVVNUIHN1cHBvcnQg bXV0dWFsIGF1dGhlbnRpY2F0aW9uIGFuZA0KICAgICAgY29uZmlkZW50aWFsaXR5IG9mIHNlbnNp dGl2ZSBkYXRhIGR1cmluZyBwcm92aXNpb25pbmcuDQoNCiAgIFJlcS04Og0KDQogICAgICBUaGUg cHJvdG9jb2wgTUFZIHVzZSBhIHB1YmxpYy1rZXkgaW5mcmFzdHJ1Y3R1cmUgYW5kIHRoZSB1c2Ug b2YNCiAgICAgIGNsaWVudCBjZXJ0aWZpY2F0ZXMgZm9yIGRldmljZSBhdXRoZW50aWNhdGlvbiBv ciBzeW1tZXRyaWMga2V5DQogICAgICBkYXRhIHByb3RlY3Rpb24uICBUaGUgcHJvdG9jb2wgTVVT VCBhbGxvdyBmb3Igb3RoZXIgbWVjaGFuaXNtcywNCiAgICAgIHN1Y2ggYXMgc3ltbWV0cmljIGtl eS1iYXNlZCB0ZWNobmlxdWVzLCB0byBiZSB1c2VkLg0KDQogICBSZXEtOToNCg0KICAgICAgVGhl IHByb3RvY29sIFNIT1VMRCBOT1Qgb25seSByZWx5IG9uIHRyYW5zcG9ydCBsYXllciBzZWN1cml0 eS4gIEl0DQogICAgICBTSE9VTEQgYmUgY29tcGF0aWJsZSB3aXRoIHRyYW5zcG9ydCBsYXllciBz ZWN1cml0eSB3aGVuIGF2YWlsYWJsZS4NCg0KICAgUmVxLTEwOg0KDQogICAgICBUaGUgcHJvdG9j b2wgU0hPVUxEIGFsbG93IHRoZSBzZXJ2ZXIgdG8gdXNlIHByZS1sb2FkZWQgc3ltbWV0cmljDQog ICAgICB0cmFuc3BvcnQga2V5cyBpZiBhdmFpbGFibGUgb24gdGhlIGRldmljZSB0aGF0IGhvc3Rz IHRoZQ0KICAgICAgY3J5cHRvZ3JhcGhpYyBtb2R1bGUgKGkuZS4sIHNtYXJ0IGNhcmQgdXBkYXRl IGtleXMsIHN1Y2ggYXMgdXNlZA0KICAgICAgYnkgR2xvYmFsIFBsYXRmb3JtIGZvciBlc3RhYmxp c2hpbmcgYSBzZWN1cmUgY2hhbm5lbCkuDQoNCiAgIFJlcS0xMToNCg0KICAgICAgVGhlIHByb3Rv Y29sIE1VU1QgcHJvdGVjdCBhZ2FpbnN0IHJlcGxheSBhdHRhY2tzLg0KDQogICBSZXEtMTI6DQoN CiAgICAgIFRoZSBwcm90b2NvbCBNVVNUIHByb3RlY3QgYWdhaW5zdCBNSVRNIGF0dGFja3MuDQoN CiAgIFJlcS0xMzoNCg0KICAgICAgVGhlIHByb3RvY29sIE1BWSBzdXBwb3J0IGEgY3J5cHRvZ3Jh cGhpYyBtb2R1bGUgcmVxdWVzdCB0byBhY3F1aXJlDQogICAgICBtdWx0aXBsZSBzeW1tZXRyaWMg a2V5cyBpbiB0aGUgc2FtZSBzZXNzaW9uLg0KDQoNCg0KDQpEb2hlcnR5LCBldCBhbC4gICAgICAg ICAgRXhwaXJlcyBKYW51YXJ5IDksIDIwMDggICAgICAgICAgICAgICBbUGFnZSA4OV0NCg0KDQpJ bnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgRFNLUFAgICAgICAgICAgICAgICAgICAg ICAgICBKdWx5IDIwMDcNCg0KDQogICBSZXEtMTQ6DQoNCiAgICAgIFRoZSBwcm90b2NvbCBNQVkg YWxsb3cgdGhlIHByb3Zpc2lvbmluZyBzZXJ2ZXIgdG8gdmVyaWZ5IHRoYXQgdGhlDQogICAgICBr ZXkgaGFzIGJlZW4gY29ycmVjdGx5IHByb3Zpc2lvbmVkIHRvIHRoZSBjcnlwdG9ncmFwaGljIG1v ZHVsZQ0KICAgICAgKGkuZS4sIGtleSBjb25maXJtYXRpb24pLg0KDQogICBSZXEtMTU6DQoNCiAg ICAgIFRoZSBwcm90b2NvbCBNQVkgYWxsb3cgYSBjcnlwdG9ncmFwaGljIG1vZHVsZSB0byBub3Rp ZnkgdGhlDQogICAgICBwcm92aXNpb25pbmcgc2VydmVyIHVwb24gc3ltbWV0cmljIGtleSBkZWxl dGlvbi4NCg0KICAgUmVxLTE2Og0KDQogICAgICBUaGUgcHJvdG9jb2wgTUFZIGxpbWl0IGEgcHJv dG9jb2wgcnVuIHRvIGNvbXBsZXRlIHdpdGhpbiBhIGNlcnRhaW4NCiAgICAgIHRpbWUgd2luZG93 Lg0KDQogICBSZXEtMTc6DQoNCiAgICAgIFRoZSBwcm90b2NvbCBNQVkgc3VwcG9ydCBkb3dubG9h ZCBvZiBhIGtleSB0byBhIGNyeXB0b2dyYXBoaWMNCiAgICAgIG1vZHVsZSB2aWEgU01TIGRlcGVu ZGluZyB1cG9uIHdoZXRoZXIgdGhlIGFwcGxpY2F0aW9uIGNhbiBwcm92aWRlDQogICAgICBhbiBh Y2NlcHRhYmxlIGxldmVsIG9mIHByb3RlY3Rpb24gZm9yIHRyYW5zcG9ydCBvZiB0aGUgc3ltbWV0 cmljDQogICAgICBrZXkuDQoNCg0KICAgVGhlIGZvbGxvd2luZyBpcyBhIGxpc3Qgb2YgZmVhdHVy ZXMgdGhhdCBhcmUgbm90IHJlcXVpcmVkIGJ5IHRoZQ0KICAgcHJvdG9jb2w6DQoNCiAgIE5vbi1S ZXEtMToNCg0KICAgICAgU3VwcG9ydCBmb3IgY3J5cHRvZ3JhcGhpYyBtb2R1bGUgZ2VuZXJhdGVk IHN5bW1ldHJpYyBrZXkgdXBsb2FkIHRvDQogICAgICBhIHByb3Zpc2lvbmluZyBzZXJ2ZXIuDQoN CiAgIE5vbi1SZXEtMjoNCg0KICAgICAgU3VwcG9ydCBmb3Igb3RoZXIga2V5IGxpZmVjeWNsZSBt YW5hZ2VtZW50IGZ1bmN0aW9ucywgc3VjaCBhcyBrZXkNCiAgICAgIHN1c3BlbnNpb24sIGxvY2ss IGFuZCBhY3RpdmF0aW9uLiAgVGhlc2UgZnVuY3Rpb25zIGFyZSBzdXBwb3J0ZWQNCiAgICAgIGlu IGEgc3ltbWV0cmljIGtleS1iYXNlZCBhcHBsaWNhdGlvbiwgc3VjaCBhcyBhbiBhdXRoZW50aWNh dGlvbg0KICAgICAgc3lzdGVtLg0KDQogICBOb24tUmVxLTM6DQoNCiAgICAgIFN1cHBvcnQgZm9y IGFzeW1tZXRyaWMga2V5IHBhaXIgcHJvdmlzaW9uaW5nLg0KDQoNCkFwcGVuZGl4IEQuICBJbnRl Z3JhdGlvbiB3aXRoIFBLQ1MgIzExDQoNCiAgIEEgRFNLUFAgY2xpZW50IHRoYXQgbmVlZHMgdG8g Y29tbXVuaWNhdGUgd2l0aCBhIGNvbm5jZWN0ZWQNCiAgIGNyeXB0b2dyYXBoaWMgbW9kdWxlIHRv IHBlcmZvcm0gYSBEU0tQUCBleGNoYW5nZSBNQVkgdXNlIFBLQ1MgIzExDQoNCg0KDQpEb2hlcnR5 LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDksIDIwMDggICAgICAgICAgICAgICBb UGFnZSA5MF0NCg0KDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgRFNLUFAgICAg ICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQogICBbUEtDUy0xMV1hcyBhIHByb2dy YW1taW5nIGludGVyZmFjZS4NCg0KRC4xLiAgVGhlIDQtcGFzcyBWYXJpYW50DQoNCiAgIFdoZW4g cGVyZm9ybWluZyA0LXBhc3MgRFNLUFAgd2l0aCBhIGNyeXB0b2dyYXBoaWMgbW9kdWxlIHVzaW5n IHRoZQ0KICAgUEtDUyAjMTEgcHJvZ3JhbW1pbmcgaW50ZXJmYWNlLCB0aGUgcHJvY2VkdXJlIGRl c2NyaWJlZCBpbg0KICAgW0NULUtJUC1QMTFdLCBBcHBlbmRpeCBCLCBpcyBSRUNPTU1FTkRFRC4N Cg0KRC4yLiAgVGhlIDItcGFzcyBWYXJpYW50DQoNCiAgIEEgc3VnZ2VzdGVkIHByb2NlZHVyZSB0 byBwZXJmb3JtIDItcGFzcyBEU0tQUCB3aXRoIGEgY3J5cHRvZ3JhcGhpYw0KICAgbW9kdWxlIHRo cm91Z2ggdGhlIFBLQ1MgIzExIGludGVyZmFjZSB1c2luZyB0aGUgbWVjaGFuaXNtcyBkZWZpbmVk IGluDQogICBbQ1QtS0lQLVAxMV0gaXMgYXMgZm9sbG93czoNCg0KICAgYS4gIE9uIHRoZSBjbGll bnQgc2lkZSwNCiAgICAgICAxLiAgVGhlIGNsaWVudCBzZWxlY3RzIGEgc3VpdGFibGUgc2xvdCBh bmQgdG9rZW4gKGUuZy4gdGhyb3VnaA0KICAgICAgICAgICB1c2Ugb2YgdGhlIDxEZXZpY2VJZGVu dGlmaWVyPiBvciB0aGUgPFBsYXRmb3JtSW5mbz4gZWxlbWVudA0KICAgICAgICAgICBvZiB0aGUg RFNLUFAgdHJpZ2dlciBtZXNzYWdlKS4NCiAgICAgICAyLiAgQSBub25jZSBSIGlzIGdlbmVyYXRl ZCwgZS5nLiBieSBjYWxsaW5nIENfU2VlZFJhbmRvbSBhbmQNCiAgICAgICAgICAgQ19HZW5lcmF0 ZVJhbmRvbS4NCiAgICAgICAzLiAgVGhlIGNsaWVudCBzZW5kcyBpdHMgZmlyc3QgbWVzc2FnZSB0 byB0aGUgc2VydmVyLCBpbmNsdWRpbmcNCiAgICAgICAgICAgdGhlIG5vbmNlIFIuDQogICBiLiAg T24gdGhlIHNlcnZlciBzaWRlLA0KICAgICAgIDEuICBBIGdlbmVyaWMga2V5IEsgPSBLX1RPS0VO IHwgSyBfTUFDICh3aGVyZSAnfCcgZGVub3Rlcw0KICAgICAgICAgICBjb25jYXRlbmF0aW9uKSBp cyBnZW5lcmF0ZWQsIGUuZy4gYnkgY2FsbGluZyBDX0dlbmVyYXRlS2V5DQogICAgICAgICAgICh1 c2luZyBrZXkgdHlwZSBDS0tfR0VORVJJQ19TRUNSRVQpLiAgVGhlIHRlbXBsYXRlIGZvciBLIE1V U1QNCiAgICAgICAgICAgYWxsb3cgaXQgdG8gYmUgZXhwb3J0ZWQgKGJ1dCBvbmx5IGluIHdyYXBw ZWQgZm9ybSwgaS5lLg0KICAgICAgICAgICBDS0FfU0VOU0lUSVZFIE1VU1QgYmUgc2V0IHRvIENL X1RSVUUgYW5kIENLQV9FWFRSQUNUQUJMRSBNVVNUDQogICAgICAgICAgIGFsc28gYmUgc2V0IHRv IENLX1RSVUUpLCBhbmQgYWxzbyB0byBiZSB1c2VkIGZvciBmdXJ0aGVyIGtleQ0KICAgICAgICAg ICBkZXJpdmF0aW9uLiAgRnJvbSBLLCBhIHRva2VuIGtleSBLX1RPS0VOIG9mIHN1aXRhYmxlIHR5 cGUgaXMNCiAgICAgICAgICAgZGVyaXZlZCBieSBjYWxsaW5nIENfRGVyaXZlS2V5IHVzaW5nIHRo ZSBQS0NTICMxMSBtZWNoYW5pc20NCiAgICAgICAgICAgQ0tNX0VYVFJBQ1RfS0VZX0ZST01fS0VZ IGFuZCBzZXR0aW5nIHRoZSBDS19FWFRSQUNUX1BBUkFNUyB0bw0KICAgICAgICAgICB0aGUgZmly c3QgYml0IG9mIHRoZSBnZW5lcmljIHNlY3JldCBrZXkgKGkuZS4gc2V0IHRvIDApLg0KICAgICAg ICAgICBMaWtld2lzZSwgYSBNQUMga2V5IEtfTUFDIGlzIGRlcml2ZWQgZnJvbSBLIGJ5IGNhbGxp bmcNCiAgICAgICAgICAgQ19EZXJpdmVLZXkgdXNpbmcgdGhlIENLTV9FWFRSQUNUX0tFWV9GUk9N X0tFWSBtZWNoYW5pc20sDQogICAgICAgICAgIHRoaXMgdGltZSBzZXR0aW5nIENLX0VYVFJBQ1Rf UEFSQU1TIHRvIHRoZSBsZW5ndGggb2YgSyAoaW4NCiAgICAgICAgICAgYml0cykgZGl2aWRlZCBi eSB0d28uDQogICAgICAgMi4gIFRoZSBzZXJ2ZXIgd3JhcHMgSyB3aXRoIGVpdGhlciB0aGUgdG9r ZW4ncyBwdWJsaWMga2V5DQogICAgICAgICAgIEtfQ0xJRU5ULCB0aGUgc2hhcmVkIHNlY3JldCBr ZXkgS19TSEFSRUQsIG9yIHRoZSBkZXJpdmVkDQogICAgICAgICAgIHNoYXJlZCBzZWNyZXQga2V5 IEtfREVSSVZFRCBieSB1c2luZyBDX1dyYXBLZXkuICBJZiB1c2Ugb2YNCiAgICAgICAgICAgdGhl IERTS1BQIGtleSB3cmFwIGFsZ29yaXRobSBoYXMgYmVlbiBuZWdvdGlhdGVkIHRoZW4gdGhlDQog ICAgICAgICAgIENLTV9LSVBfV1JBUCBtZWNoYW5pc20gTVVTVCBiZSB1c2VkIHRvIHdyYXAgSy4g V2hlbiBjYWxsaW5nDQogICAgICAgICAgIENfV3JhcEtleSwgdGhlIGhLZXkgaGFuZGxlIGluIHRo ZSBDS19LSVBfUEFSQU1TIHN0cnVjdHVyZQ0KICAgICAgICAgICBNVVNUIGJlIHNldCB0byBOVUxM X1BUUi4gIFRoZSBwU2VlZCBwYXJhbWV0ZXIgaW4gdGhlDQogICAgICAgICAgIENLX0tJUF9QQVJB TVMgc3RydWN0dXJlIE1VU1QgcG9pbnQgdG8gdGhlIG5vbmNlIFIgcHJvdmlkZWQgYnkNCiAgICAg ICAgICAgdGhlIERTS1BQIGNsaWVudCwgYW5kIHRoZSB1bFNlZWRMZW4gcGFyYW1ldGVyIE1VU1Qg aW5kaWNhdGUNCiAgICAgICAgICAgdGhlIGxlbmd0aCBvZiBSLiBUaGUgaFdyYXBwaW5nS2V5IHBh cmFtZXRlciBpbiB0aGUgY2FsbCB0bw0KICAgICAgICAgICBDX1dyYXBLZXkgTVVTVCBiZSBzZXQg dG8gcmVmZXIgdG8gdGhlIHdyYXBwaW5nIGtleS4NCg0KDQoNCkRvaGVydHksIGV0IGFsLiAgICAg ICAgICBFeHBpcmVzIEphbnVhcnkgOSwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDkxXQ0KDQoN CkludGVybmV0LURyYWZ0ICAgICAgICAgICAgICAgICAgICBEU0tQUCAgICAgICAgICAgICAgICAg ICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgICAgICAzLiAgTmV4dCwgdGhlIHNlcnZlciBuZWVkcyB0 byBjYWxjdWxhdGUgYSBNQUMgdXNpbmcgS19NQUMuICBJZg0KICAgICAgICAgICB1c2Ugb2YgdGhl IERTS1BQIE1BQyBhbGdvcml0aG0gaGFzIGJlZW4gbmVnb3RpYXRlZCwgdGhlbiB0aGUNCiAgICAg ICAgICAgTUFDIGlzIGNhbGN1bGF0ZWQgYnkgY2FsbGluZyBDX1NpZ25Jbml0IHdpdGggdGhlIENL TV9LSVBfTUFDDQogICAgICAgICAgIG1lY2hhbmlzbSBmb2xsb3dlZCBieSBhIGNhbGwgdG8gQ19T aWduLiAgSW4gdGhlIGNhbGwgdG8NCiAgICAgICAgICAgQ19TaWduSW5pdCwgS19NQUMgTVVTVCBi ZSB0aGUgc2lnbmF0dXJlIGtleSwgdGhlIGhLZXkNCiAgICAgICAgICAgcGFyYW1ldGVyIGluIHRo ZSBDS19LSVBfUEFSQU1TIHN0cnVjdHVyZSBNVVNUIGJlIHNldCB0bw0KICAgICAgICAgICBOVUxM X1BUUiwgdGhlIHBTZWVkIHBhcmFtZXRlciBvZiB0aGUgQ1RfS0lQX1BBUkFNUyBzdHJ1Y3R1cmUN CiAgICAgICAgICAgTVVTVCBiZSBzZXQgdG8gTlVMTF9QVFIsIGFuZCB0aGUgdWxTZWVkTGVuIHBh cmFtZXRlciBNVVNUIGJlDQogICAgICAgICAgIHNldCB0byB6ZXJvLiAgSW4gdGhlIGNhbGwgdG8g Q19TaWduLCB0aGUgcERhdGEgcGFyYW1ldGVyIE1VU1QNCiAgICAgICAgICAgYmUgc2V0IHRvIHRo ZSBjb25jYXRlbmF0aW9uIG9mIHRoZSBzdHJpbmcgSURfUyBhbmQgdGhlIG5vbmNlDQogICAgICAg ICAgIFIsIGFuZCB0aGUgdWxEYXRhTGVuIHBhcmFtZXRlciBNVVNUIGJlIHNldCB0byB0aGUgbGVu Z3RoIG9mDQogICAgICAgICAgIHRoZSBjb25jYXRlbmF0ZWQgc3RyaW5nLiAgVGhlIGRlc2lyZWQg bGVuZ3RoIG9mIHRoZSBNQUMgTVVTVA0KICAgICAgICAgICBiZSBzcGVjaWZpZWQgdGhyb3VnaCB0 aGUgcHVsU2lnbmF0dXJlTGVuIHBhcmFtZXRlciBhbmQgTVVTVA0KICAgICAgICAgICBiZSBzZXQg dG8gdGhlIGxlbmd0aCBvZiBSLg0KICAgICAgIDQuICBJZiB0aGUgc2VydmVyIGFsc28gbmVlZHMg dG8gYXV0aGVudGljYXRlIGl0cyBtZXNzYWdlIChkdWUgdG8NCiAgICAgICAgICAgYW4gZXhpc3Rp bmcgS19UT0tFTiBiZWluZyByZXBsYWNlZCksIHRoZSBzZXJ2ZXIgTVVTVA0KICAgICAgICAgICBj YWxjdWxhdGUgYSBzZWNvbmQgTUFDLiAgQWdhaW4sIGlmIHVzZSBvZiB0aGUgRFNLUFAgTUFDDQog ICAgICAgICAgIGFsZ29yaXRobSBoYXMgYmVlbiBuZWdvdGlhdGVkLCB0aGVuIHRoZSBNQUMgaXMg Y2FsY3VsYXRlZCBieQ0KICAgICAgICAgICBjYWxsaW5nIENfU2lnbkluaXQgd2l0aCB0aGUgQ0tN X0tJUF9NQUMgbWVjaGFuaXNtIGZvbGxvd2VkIGJ5DQogICAgICAgICAgIGEgY2FsbCB0byBDX1Np Z24uICBJbiB0aGlzIGNhbGwgdG8gQ19TaWduSW5pdCwgdGhlIEtfTUFDDQogICAgICAgICAgIGV4 aXN0aW5nIGJlZm9yZSB0aGlzIERTS1BQIHByb3RvY29sIHJ1biBNVVNUIGJlIHRoZSBzaWduYXR1 cmUNCiAgICAgICAgICAga2V5LCB0aGUgaEtleSBwYXJhbWV0ZXIgaW4gdGhlIENLX0tJUF9QQVJB TVMgc3RydWN0dXJlIE1VU1QNCiAgICAgICAgICAgYmUgc2V0IHRvIE5VTEwsIHRoZSBwU2VlZCBw YXJhbWV0ZXIgb2YgdGhlIENUX0tJUF9QQVJBTVMNCiAgICAgICAgICAgc3RydWN0dXJlIE1VU1Qg YmUgc2V0IHRvIE5VTExfUFRSLCBhbmQgdGhlIHVsU2VlaWRMZW4NCiAgICAgICAgICAgcGFyYW1l dGVyIE1VU1QgYmUgc2V0IHRvIHplcm8uICBJbiB0aGUgY2FsbCB0byBDX1NpZ24sIHRoZQ0KICAg ICAgICAgICBwRGF0YSBwYXJhbWV0ZXIgTVVTVCBiZSBzZXQgdG8gdGhlIGNvbmNhdGVuYXRpb24g b2YgdGhlDQogICAgICAgICAgIHN0cmluZyBJRF9TIGFuZCB0aGUgbm9uY2UgUiwgYW5kIHRoZSB1 bERhdGFMZW4gcGFyYW1ldGVyIE1VU1QNCiAgICAgICAgICAgYmUgc2V0IHRvIHRoZSBsZW5ndGgg b2YgY29uY2F0ZW5hdGVkIHN0cmluZy4gIFRoZSBkZXNpcmVkDQogICAgICAgICAgIGxlbmd0aCBv ZiB0aGUgTUFDIE1VU1QgYmUgc3BlY2lmaWVkIHRocm91Z2ggdGhlDQogICAgICAgICAgIHB1bFNp Z25hdHVyZUxlbiBwYXJhbWV0ZXIgYW5kIE1VU1QgYmUgc2V0IHRvIHRoZSBsZW5ndGggb2YgUi4N CiAgICAgICA1LiAgVGhlIHNlcnZlciBzZW5kcyBpdHMgbWVzc2FnZSB0byB0aGUgY2xpZW50LCBp bmNsdWRpbmcgdGhlDQogICAgICAgICAgIHdyYXBwZWQga2V5IEssIHRoZSBNQUMgYW5kIHBvc3Np Ymx5IGFsc28gdGhlIGF1dGhlbnRpY2F0aW5nDQogICAgICAgICAgIE1BQy4NCiAgIGMuICBPbiB0 aGUgY2xpZW50IHNpZGUsDQogICAgICAgMS4gIFRoZSBjbGllbnQgY2FsbHMgQ19VbndyYXBLZXkg dG8gcmVjZWl2ZSBhIGhhbmRsZSB0byBLLiBBZnRlcg0KICAgICAgICAgICB0aGlzLCB0aGUgY2xp ZW50IGNhbGxzIENfRGVyaXZlS2V5IHR3aWNlOiBPbmNlIHRvIGRlcml2ZQ0KICAgICAgICAgICBL X1RPS0VOIGFuZCBvbmNlIHRvIGRlcml2ZSBLX01BQy4gIFRoZSBjbGllbnQgTVVTVCB1c2UgdGhl DQogICAgICAgICAgIHNhbWUgbWVjaGFuaXNtIChDS01fRVhUUkFDVF9LRVlfRlJPTV9LRVkpIGFu ZCB0aGUgc2FtZQ0KICAgICAgICAgICBtZWNoYW5pc20gcGFyYW1ldGVycyBhcyB1c2VkIGJ5IHRo ZSBzZXJ2ZXIgYWJvdmUuICBXaGVuDQogICAgICAgICAgIGNhbGxpbmcgQ19VbndyYXBLZXkgYW5k IENfRGVyaXZlS2V5LCB0aGUgcFRlbXBsYXRlIHBhcmFtZXRlcg0KICAgICAgICAgICBNVVNUIGJl IHVzZWQgdG8gc2V0IGFkZGl0aW9uYWwga2V5IGF0dHJpYnV0ZXMgaW4gYWNjb3JkYW5jZQ0KICAg ICAgICAgICB3aXRoIGxvY2FsIHBvbGljeSBhbmQgYXMgbmVnb3RpYXRlZCBhbmQgZXhwcmVzc2Vk IGluIHRoZQ0KICAgICAgICAgICBwcm90b2NvbC4gIEluIHBhcnRpY3VsYXIsIHRoZSB2YWx1ZSBv ZiB0aGUgPEtleUlEPiBlbGVtZW50IGluDQogICAgICAgICAgIHRoZSBzZXJ2ZXIncyByZXNwb25z ZSBtZXNzYWdlIE1BWSBiZSB1c2VkIGFzIENLQV9JRCBmb3INCiAgICAgICAgICAgS19UT0tFTi4g IFRoZSBrZXkgSyBNVVNUIGJlIGRlc3Ryb3llZCBhZnRlciBkZXJpdmluZyBLX1RPS0VODQogICAg ICAgICAgIGFuZCBLX01BQy4NCg0KDQoNCg0KDQpEb2hlcnR5LCBldCBhbC4gICAgICAgICAgRXhw aXJlcyBKYW51YXJ5IDksIDIwMDggICAgICAgICAgICAgICBbUGFnZSA5Ml0NCg0KDQpJbnRlcm5l dC1EcmFmdCAgICAgICAgICAgICAgICAgICAgRFNLUFAgICAgICAgICAgICAgICAgICAgICAgICBK dWx5IDIwMDcNCg0KDQogICAgICAgMi4gIFRoZSBNQUMgaXMgdmVyaWZpZWQgaW4gYSByZWNpcHJv Y2FsIGZhc2hpb24gYXMgaXQgd2FzDQogICAgICAgICAgIGdlbmVyYXRlZCBieSB0aGUgc2VydmVy LiAgSWYgdXNlIG9mIHRoZSBDS01fS0lQX01BQyBtZWNoYW5pc20NCiAgICAgICAgICAgaGFzIGJl ZW4gbmVnb3RpYXRlZCwgdGhlbiBpbiB0aGUgY2FsbCB0byBDX1ZlcmlmeUluaXQsIHRoZQ0KICAg ICAgICAgICBoS2V5IHBhcmFtZXRlciBpbiB0aGUgQ0tfS0lQX1BBUkFNUyBzdHJ1Y3R1cmUgTVVT VCBiZSBzZXQgdG8NCiAgICAgICAgICAgTlVMTF9QVFIsIHRoZSBwU2VlZCBwYXJhbWV0ZXIgTVVT VCBiZSBzZXQgdG8gTlVMTF9QVFIsIGFuZA0KICAgICAgICAgICB1bFNlZWRMZW4gTVVTVCBiZSBz ZXQgdG8gMC4gIFRoZSBoS2V5IHBhcmFtZXRlciBvZg0KICAgICAgICAgICBDX1ZlcmlmeUluaXQg TVVTVCByZWZlciB0byBLX01BQy4gIEluIHRoZSBjYWxsIHRvIENfVmVyaWZ5LA0KICAgICAgICAg ICBwRGF0YSBNVVNUIGJlIHNldCB0byB0aGUgY29uY2F0ZW5hdGlvbiBvZiB0aGUgc3RyaW5nIElE X1MgYW5kDQogICAgICAgICAgIHRoZSBub25jZSBSLCBhbmQgdGhlIHVsRGF0YUxlbiBwYXJhbWV0 ZXIgTVVTVCBiZSBzZXQgdG8gdGhlDQogICAgICAgICAgIGxlbmd0aCBvZiB0aGUgY29uY2F0ZW5h dGVkIHN0cmluZywgcFNpZ25hdHVyZSB0byB0aGUgTUFDDQogICAgICAgICAgIHZhbHVlIHJlY2Vp dmVkIGZyb20gdGhlIHNlcnZlciwgYW5kIHVsU2lnbmF0dXJlTGVuIHRvIHRoZQ0KICAgICAgICAg ICBsZW5ndGggb2YgdGhlIE1BQy4gIElmIHRoZSBNQUMgZG9lcyBub3QgdmVyaWZ5IHRoZSBwcm90 b2NvbA0KICAgICAgICAgICBzZXNzaW9uIGVuZHMgd2l0aCBhIGZhaWx1cmUuICBUaGUgdG9rZW4g TVVTVCBiZSBjb25zdHJ1Y3RlZA0KICAgICAgICAgICB0byBub3QgImNvbW1pdCIgdG8gdGhlIG5l dyBLX1RPS0VOIG9yIHRoZSBuZXcgS19NQUMgdW5sZXNzDQogICAgICAgICAgIHRoZSBNQUMgdmVy aWZpZXMuDQogICAgICAgMy4gIElmIGFuIGF1dGhlbnRpY2F0aW5nIE1BQyB3YXMgcmVjZWl2ZWQg KFJFUVVJUkVEIGlmIHRoZSBuZXcNCiAgICAgICAgICAgS19UT0tFTiB3aWxsIHJlcGxhY2UgYW4g ZXhpc3Rpbmcga2V5IG9uIHRoZSB0b2tlbiksIHRoZW4gaXQNCiAgICAgICAgICAgaXMgdmVyaWZp ZWQgaW4gYSBzaW1pbGFyIHZlaW4gYnV0IHVzaW5nIHRoZSBLX01BQyBhc3NvY2lhdGVkDQogICAg ICAgICAgIHdpdGggdGhpcyBzZXJ2ZXIgYW5kIGV4aXN0aW5nIGJlZm9yZSB0aGUgcHJvdG9jb2wg cnVuLg0KICAgICAgICAgICBBZ2FpbiwgaWYgdGhlIE1BQyBkb2VzIG5vdCB2ZXJpZnkgdGhlIHBy b3RvY29sIHNlc3Npb24gZW5kcw0KICAgICAgICAgICB3aXRoIGEgZmFpbHVyZSwgYW5kIHRoZSB0 b2tlbiBNVVNUIGJlIGNvbnN0cnVjdGVkIG5vIHRvDQogICAgICAgICAgICJjb21taXQiIHRvIHRo ZSBuZXcgS19UT0tFTiBvciB0aGUgbmV3IEtfTUFDIHVubGVzcyB0aGUgTUFDDQogICAgICAgICAg IHZlcmlmaWVzLg0KDQpELjMuICBUaGUgMS1wYXNzIFZhcmlhbnQNCg0KICAgQSBzdWdnZXN0ZWQg cHJvY2VkdXJlIHRvIHBlcmZvcm0gMS1wYXNzIERTS1BQIHdpdGggYSBjcnlwdG9ncmFwaGljDQog ICBtb2R1bGUgdGhyb3VnaCB0aGUgUEtDUyAjMTEgaW50ZXJmYWNlIHVzaW5nIHRoZSBtZWNoYW5p c21zIGRlZmluZWQgaW4NCiAgIFtDVC1LSVAtUDExXSBpcyBhcyBmb2xsb3dzOg0KDQogICBhLiAg T24gdGhlIHNlcnZlciBzaWRlLA0KICAgICAgIDEuICBBIGdlbmVyaWMga2V5IEsgPSBLX1RPS0VO IHwgSyBfTUFDICh3aGVyZSAnfCcgZGVub3Rlcw0KICAgICAgICAgICBjb25jYXRlbmF0aW9uKSBp cyBnZW5lcmF0ZWQsIGUuZy4gYnkgY2FsbGluZyBDX0dlbmVyYXRlS2V5DQogICAgICAgICAgICh1 c2luZyBrZXkgdHlwZSBDS0tfR0VORVJJQ19TRUNSRVQpLiAgVGhlIHRlbXBsYXRlIGZvciBLIE1V U1QNCiAgICAgICAgICAgYWxsb3cgaXQgdG8gYmUgZXhwb3J0ZWQgKGJ1dCBvbmx5IGluIHdyYXBw ZWQgZm9ybSwgaS5lLg0KICAgICAgICAgICBDS0FfU0VOU0lUSVZFIE1VU1QgYmUgc2V0IHRvIENL X1RSVUUgYW5kIENLQV9FWFRSQUNUQUJMRSBNVVNUDQogICAgICAgICAgIGFsc28gYmUgc2V0IHRv IENLX1RSVUUpLCBhbmQgYWxzbyB0byBiZSB1c2VkIGZvciBmdXJ0aGVyIGtleQ0KICAgICAgICAg ICBkZXJpdmF0aW9uLiAgRnJvbSBLLCBhIHRva2VuIGtleSBLX1RPS0VOIG9mIHN1aXRhYmxlIHR5 cGUgaXMNCiAgICAgICAgICAgZGVyaXZlZCBieSBjYWxsaW5nIENfRGVyaXZlS2V5IHVzaW5nIHRo ZSBQS0NTICMxMSBtZWNoYW5pc20NCiAgICAgICAgICAgQ0tNX0VYVFJBQ1RfS0VZX0ZST01fS0VZ IGFuZCBzZXR0aW5nIHRoZSBDS19FWFRSQUNUX1BBUkFNUyB0bw0KICAgICAgICAgICB0aGUgZmly c3QgYml0IG9mIHRoZSBnZW5lcmljIHNlY3JldCBrZXkgKGkuZS4gc2V0IHRvIDApLg0KICAgICAg ICAgICBMaWtld2lzZSwgYSBNQUMga2V5IEtfTUFDIGlzIGRlcml2ZWQgZnJvbSBLIGJ5IGNhbGxp bmcNCiAgICAgICAgICAgQ19EZXJpdmVLZXkgdXNpbmcgdGhlIENLTV9FWFRSQUNUX0tFWV9GUk9N X0tFWSBtZWNoYW5pc20sDQogICAgICAgICAgIHRoaXMgdGltZSBzZXR0aW5nIENLX0VYVFJBQ1Rf UEFSQU1TIHRvIHRoZSBsZW5ndGggb2YgSyAoaW4NCiAgICAgICAgICAgYml0cykgZGl2aWRlZCBi eSB0d28uDQoNCg0KDQoNCg0KDQpEb2hlcnR5LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51 YXJ5IDksIDIwMDggICAgICAgICAgICAgICBbUGFnZSA5M10NCg0KDQpJbnRlcm5ldC1EcmFmdCAg ICAgICAgICAgICAgICAgICAgRFNLUFAgICAgICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMDcN Cg0KDQogICAgICAgMi4gIFRoZSBzZXJ2ZXIgd3JhcHMgSyB3aXRoIGVpdGhlciB0aGUgdG9rZW4n cyBwdWJsaWMga2V5LA0KICAgICAgICAgICBLX0NMSUVOVCwgdGhlIHNoYXJlZCBzZWNyZXQga2V5 LCBLX1NIQVJFRCwgb3IgdGhlIGRlcml2ZWQNCiAgICAgICAgICAgc2hhcmVkIHNlY3JldCBrZXks IEtfREVSSVZFRCBieSB1c2luZyBDX1dyYXBLZXkuICBJZiB1c2Ugb2YNCiAgICAgICAgICAgdGhl IERTS1BQIGtleSB3cmFwIGFsZ29yaXRobSBoYXMgYmVlbiBuZWdvdGlhdGVkLCB0aGVuIHRoZQ0K ICAgICAgICAgICBDS01fS0lQX1dSQVAgbWVjaGFuaXNtIE1VU1QgYmUgdXNlZCB0byB3cmFwIEsu IFdoZW4gY2FsbGluZw0KICAgICAgICAgICBDX1dyYXBLZXksIHRoZSBoS2V5IGhhbmRsZSBpbiB0 aGUgQ0tfS0lQX1BBUkFNUyBzdHJ1Y3R1cmUNCiAgICAgICAgICAgTVVTVCBiZSBzZXQgdG8gTlVM TF9QVFIuICBUaGUgcFNlZWQgcGFyYW1ldGVyIGluIHRoZQ0KICAgICAgICAgICBDS19LSVBfUEFS QU1TIHN0cnVjdHVyZSBNVVNUIHBvaW50IHRvIHRoZSBvY3RldC1zdHJpbmcNCiAgICAgICAgICAg cmVwcmVzZW50YXRpb24gb2YgYW4gaW50ZWdlciBJIHdob3NlIHZhbHVlIE1VU1QgYmUNCiAgICAg ICAgICAgaW5jcmVtZW50ZWQgYmVmb3JlIGVhY2ggcHJvdG9jb2wgcnVuLCBhbmQgdGhlIHVsU2Vl ZExlbg0KICAgICAgICAgICBwYXJhbWV0ZXIgTVVTVCBpbmRpY2F0ZSB0aGUgbGVuZ3RoIG9mIHRo ZSBvY3RldC1zdHJpbmcNCiAgICAgICAgICAgcmVwcmVzZW50YXRpb24gb2YgSS4gVGhlIGhXcmFw cGluZ0tleSBwYXJhbWV0ZXIgaW4gdGhlIGNhbGwNCiAgICAgICAgICAgdG8gQ19XcmFwS2V5IE1V U1QgYmUgc2V0IHRvIHJlZmVyIHRvIHRoZSB3cmFwcGluZyBrZXkuDQoNCiAgICAgICAgICAgTm90 ZTogVGhlIGludGVnZXItdG8tb2N0ZXQgc3RyaW5nIGNvbnZlcnNpb24gTVVTVCBiZSBtYWRlDQog ICAgICAgICAgIHVzaW5nIHRoZSBJMk9TUCBwcmltaXRpdmUgZnJvbSBbUEtDUy0xXS4gIFRoZXJl IE1VU1QgYmUgbm8NCiAgICAgICAgICAgbGVhZGluZyB6ZXJvcy4NCiAgICAgICAzLiAgRm9yIHRo ZSBzZXJ2ZXIncyBtZXNzYWdlIHRvIHRoZSBjbGllbnQsIGlmIHVzZSBvZiB0aGUgRFNLUFANCiAg ICAgICAgICAgTUFDIGFsZ29yaXRobSBoYXMgYmVlbiBuZWdvdGlhdGVkLCB0aGVuIHRoZSBNQUMg aXMgY2FsY3VsYXRlZA0KICAgICAgICAgICBieSBjYWxsaW5nIENfU2lnbkluaXQgd2l0aCB0aGUg Q0tNX0tJUF9NQUMgbWVjaGFuaXNtIGZvbGxvd2VkDQogICAgICAgICAgIGJ5IGEgY2FsbCB0byBD X1NpZ24uICBJbiB0aGUgY2FsbCB0byBDX1NpZ25Jbml0LCBLX01BQyBNVVNUDQogICAgICAgICAg IGJlIHRoZSBzaWduYXR1cmUga2V5LCB0aGUgaEtleSBwYXJhbWV0ZXIgaW4gdGhlIENLX0tJUF9Q QVJBTVMNCiAgICAgICAgICAgc3RydWN0dXJlIE1VU1QgYmUgc2V0IHRvIE5VTExfUFRSLCB0aGUg cFNlZWQgcGFyYW1ldGVyIG9mIHRoZQ0KICAgICAgICAgICBDVF9LSVBfUEFSQU1TIHN0cnVjdHVy ZSBNVVNUIGJlIHNldCB0byBOVUxMX1BUUiwgYW5kIHRoZQ0KICAgICAgICAgICB1bFNlZWRMZW4g cGFyYW1ldGVyIE1VU1QgYmUgc2V0IHRvIHplcm8uICBJbiB0aGUgY2FsbCB0bw0KICAgICAgICAg ICBDX1NpZ24sIHRoZSBwRGF0YSBwYXJhbWV0ZXIgTVVTVCBiZSBzZXQgdG8gdGhlIGNvbmNhdGVu YXRpb24NCiAgICAgICAgICAgb2YgdGhlIHN0cmluZyBJRF9TIGFuZCB0aGUgb2N0ZXQtc3RyaW5n IHJlcHJlc2VudGF0aW9uIG9mIHRoZQ0KICAgICAgICAgICBpbnRlZ2VyIEksIGFuZCB0aGUgdWxE YXRhTGVuIHBhcmFtZXRlciBNVVNUIGJlIHNldCB0byB0aGUNCiAgICAgICAgICAgbGVuZ3RoIG9m IGNvbmNhdGVuYXRlZCBzdHJpbmcuICBUaGUgZGVzaXJlZCBsZW5ndGggb2YgdGhlIE1BQw0KICAg ICAgICAgICBNVVNUIGJlIHNwZWNpZmllZCB0aHJvdWdoIHRoZSBwdWxTaWduYXR1cmVMZW4gcGFy YW1ldGVyIGFzDQogICAgICAgICAgIHVzdWFsLCBhbmQgTVVTVCBiZSBlcXVhbCB0bywgb3IgZ3Jl YXRlciB0aGFuLCBzaXh0ZWVuICgxNikuDQogICAgICAgNC4gIElmIHRoZSBzZXJ2ZXIgYWxzbyBu ZWVkcyB0byBhdXRoZW50aWNhdGUgaXRzIG1lc3NhZ2UgKGR1ZSB0bw0KICAgICAgICAgICBhbiBl eGlzdGluZyBLX1RPS0VOIGJlaW5nIHJlcGxhY2VkKSwgdGhlIHNlcnZlciBjYWxjdWxhdGVzIGEN CiAgICAgICAgICAgc2Vjb25kIE1BQy4gIElmIHRoZSBEU0tQUCBNQUMgbWVjaGFuaXNtIGlzIHVz ZWQsIHRoZSBzZXJ2ZXINCiAgICAgICAgICAgZG9lcyB0aGlzIGJ5IGNhbGxpbmcgQ19TaWduSW5p dCB3aXRoIHRoZSBDS01fS0lQX01BQw0KICAgICAgICAgICBtZWNoYW5pc20gZm9sbG93ZWQgYnkg YSBjYWxsIHRvIENfU2lnbi4gIEluIHRoZSBjYWxsIHRvDQogICAgICAgICAgIENfU2lnbkluaXQs IHRoZSBLX01BQyBleGlzdGluZyBvbiB0aGUgdG9rZW4gYmVmb3JlIHRoaXMNCiAgICAgICAgICAg cHJvdG9jb2wgcnVuIE1VU1QgYmUgdGhlIHNpZ25hdHVyZSBrZXksIHRoZSBoS2V5IHBhcmFtZXRl ciBpbg0KICAgICAgICAgICB0aGUgQ0tfS0lQX1BBUkFNUyBzdHJ1Y3R1cmUgTVVTVCBiZSBzZXQg dG8gTlVMTF9QVFIsIHRoZQ0KICAgICAgICAgICBwU2VlZCBwYXJhbWV0ZXIgb2YgdGhlIENUX0tJ UF9QQVJBTVMgc3RydWN0dXJlIE1VU1QgYmUgc2V0IHRvDQogICAgICAgICAgIE5VTExfUFRSLCBh bmQgdGhlIHVsU2VlZExlbiBwYXJhbWV0ZXIgTVVTVCBiZSBzZXQgdG8gemVyby4NCiAgICAgICAg ICAgSW4gdGhlIGNhbGwgdG8gQ19TaWduLCB0aGUgcERhdGEgcGFyYW1ldGVyIE1VU1QgYmUgc2V0 IHRvIHRoZQ0KICAgICAgICAgICBjb25jYXRlbmF0aW9uIG9mIHRoZSBzdHJpbmcgSURfUyBhbmQg dGhlIG9jdGV0LXN0cmluZw0KICAgICAgICAgICByZXByZXNlbnRhdGlvbiBvZiB0aGUgaW50ZWdl ciBJKzEgKGkuZS4gIEkgTVVTVCBiZQ0KICAgICAgICAgICBpbmNyZW1lbnRlZCBiZWZvcmUgZWFj aCB1c2UpLCBhbmQgdGhlIHVsRGF0YUxlbiBwYXJhbWV0ZXINCiAgICAgICAgICAgTVVTVCBiZSBz ZXQgdG8gdGhlIGxlbmd0aCBvZiB0aGUgY29uY2F0ZW5hdGVkIHN0cmluZy4gIFRoZQ0KICAgICAg ICAgICBkZXNpcmVkIGxlbmd0aCBvZiB0aGUgTUFDIE1VU1QgYmUgc3BlY2lmaWVkIHRocm91Z2gg dGhlDQogICAgICAgICAgIHB1bFNpZ25hdHVyZUxlbiBwYXJhbWV0ZXIgYXMgdXN1YWwsIGFuZCBN VVNUIGJlIGVxdWFsIHRvLCBvcg0KDQoNCg0KRG9oZXJ0eSwgZXQgYWwuICAgICAgICAgIEV4cGly ZXMgSmFudWFyeSA5LCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgOTRdDQoNCg0KSW50ZXJuZXQt RHJhZnQgICAgICAgICAgICAgICAgICAgIERTS1BQICAgICAgICAgICAgICAgICAgICAgICAgSnVs eSAyMDA3DQoNCg0KICAgICAgICAgICBncmVhdGVyIHRoYW4sIHNpeHRlZW4gKDE2KS4NCiAgICAg ICA1LiAgVGhlIHNlcnZlciBzZW5kcyBpdHMgbWVzc2FnZSB0byB0aGUgY2xpZW50LCBpbmNsdWRp bmcgdGhlIE1BQw0KICAgICAgICAgICBhbmQgcG9zc2libHkgYWxzbyB0aGUgYXV0aGVudGljYXRp bmcgTUFDLg0KICAgYi4gIE9uIHRoZSBjbGllbnQgc2lkZSwNCiAgICAgICAxLiAgVGhlIGNsaWVu dCBjYWxscyBDX1Vud3JhcEtleSB0byByZWNlaXZlIGEgaGFuZGxlIHRvIEsuIEFmdGVyDQogICAg ICAgICAgIHRoaXMsIHRoZSBjbGllbnQgY2FsbHMgQ19EZXJpdmVLZXkgdHdpY2U6IE9uY2UgdG8g ZGVyaXZlDQogICAgICAgICAgIEtfVE9LRU4gYW5kIG9uY2UgdG8gZGVyaXZlIEtfTUFDLiAgVGhl IGNsaWVudCBNVVNUIHVzZSB0aGUNCiAgICAgICAgICAgc2FtZSBtZWNoYW5pc20gKENLTV9FWFRS QUNUX0tFWV9GUk9NX0tFWSkgYW5kIHRoZSBzYW1lDQogICAgICAgICAgIG1lY2hhbmlzbSBwYXJh bWV0ZXJzIGFzIHVzZWQgYnkgdGhlIHNlcnZlciBhYm92ZS4gIFdoZW4NCiAgICAgICAgICAgY2Fs bGluZyBDX1Vud3JhcEtleSBhbmQgQ19EZXJpdmVLZXksIHRoZSBwVGVtcGxhdGUgcGFyYW1ldGVy DQogICAgICAgICAgIE1VU1QgYmUgdXNlZCB0byBzZXQgYWRkaXRpb25hbCBrZXkgYXR0cmlidXRl cyBpbiBhY2NvcmRhbmNlDQogICAgICAgICAgIHdpdGggbG9jYWwgcG9saWN5IGFuZCBhcyBuZWdv dGlhdGVkIGFuZCBleHByZXNzZWQgaW4gdGhlDQogICAgICAgICAgIHByb3RvY29sLiAgSW4gcGFy dGljdWxhciwgdGhlIHZhbHVlIG9mIHRoZSA8S2V5SUQ+IGVsZW1lbnQgaW4NCiAgICAgICAgICAg dGhlIHNlcnZlcidzIHJlc3BvbnNlIG1lc3NhZ2UgTUFZIGJlIHVzZWQgYXMgQ0tBX0lEIGZvcg0K ICAgICAgICAgICBLX1RPS0VOLiAgVGhlIGtleSBLIE1VU1QgYmUgZGVzdHJveWVkIGFmdGVyIGRl cml2aW5nIEtfVE9LRU4NCiAgICAgICAgICAgYW5kIEtfTUFDLg0KICAgICAgIDIuICBUaGUgTUFD IGlzIHZlcmlmaWVkIGluIGEgcmVjaXByb2NhbCBmYXNoaW9uIGFzIGl0IHdhcw0KICAgICAgICAg ICBnZW5lcmF0ZWQgYnkgdGhlIHNlcnZlci4gIElmIHVzZSBvZiB0aGUgQ0tNX0tJUF9NQUMgbWVj aGFuaXNtDQogICAgICAgICAgIGhhcyBiZWVuIG5lZ290aWF0ZWQsIHRoZW4gaW4gdGhlIGNhbGwg dG8gQ19WZXJpZnlJbml0LCB0aGUNCiAgICAgICAgICAgaEtleSBwYXJhbWV0ZXIgaW4gdGhlIENL X0tJUF9QQVJBTVMgc3RydWN0dXJlIE1VU1QgYmUgc2V0IHRvDQogICAgICAgICAgIE5VTExfUFRS LCB0aGUgcFNlZWQgcGFyYW1ldGVyIE1VU1QgYmUgc2V0IHRvIE5VTExfUFRSLCBhbmQNCiAgICAg ICAgICAgdWxTZWVkTGVuIE1VU1QgYmUgc2V0IHRvIDAuICBUaGUgaEtleSBwYXJhbWV0ZXIgb2YN CiAgICAgICAgICAgQ19WZXJpZnlJbml0IE1VU1QgcmVmZXIgdG8gS19NQUMuICBJbiB0aGUgY2Fs bCB0byBDX1ZlcmlmeSwNCiAgICAgICAgICAgcERhdGEgTVVTVCBiZSBzZXQgdG8gdGhlIGNvbmNh dGVuYXRpb24gb2YgdGhlIHN0cmluZyBJRF9TIGFuZA0KICAgICAgICAgICB0aGUgb2N0ZXQtc3Ry aW5nIHJlcHJlc2VudGF0aW9uIG9mIHRoZSBwcm92aWRlZCB2YWx1ZSBmb3IgSSwNCiAgICAgICAg ICAgYW5kIHRoZSB1bERhdGFMZW4gcGFyYW1ldGVyIE1VU1QgYmUgc2V0IHRvIHRoZSBsZW5ndGgg b2YgdGhlDQogICAgICAgICAgIGNvbmNhdGVuYXRlZCBzdHJpbmcsIHBTaWduYXR1cmUgdG8gdGhl IE1BQyB2YWx1ZSByZWNlaXZlZA0KICAgICAgICAgICBmcm9tIHRoZSBzZXJ2ZXIsIGFuZCB1bFNp Z25hdHVyZUxlbiB0byB0aGUgbGVuZ3RoIG9mIHRoZSBNQUMuDQogICAgICAgICAgIElmIHRoZSBN QUMgZG9lcyBub3QgdmVyaWZ5IG9yIGlmIHRoZSBwcm92aWRlZCB2YWx1ZSBvZiBJIGlzDQogICAg ICAgICAgIG5vdCBsYXJnZXIgdGhhbiBhbnkgc3RvcmVkIHZhbHVlIEknIGZvciB0aGUgaWRlbnRp ZmllZCBzZXJ2ZXINCiAgICAgICAgICAgSURfUyB0aGUgcHJvdG9jb2wgc2Vzc2lvbiBlbmRzIHdp dGggYSBmYWlsdXJlLiAgVGhlIHRva2VuDQogICAgICAgICAgIE1VU1QgYmUgY29uc3RydWN0ZWQg dG8gbm90ICJjb21taXQiIHRvIHRoZSBuZXcgS19UT0tFTiBvciB0aGUNCiAgICAgICAgICAgbmV3 IEtfTUFDIHVubGVzcyB0aGUgTUFDIHZlcmlmaWVzLiAgSWYgdGhlIHZlcmlmaWNhdGlvbg0KICAg ICAgICAgICBzdWNjZWVkcywgdGhlIHRva2VuIE1VU1Qgc3RvcmUgdGhlIHByb3ZpZGVkIHZhbHVl IG9mIEkgYXMgYQ0KICAgICAgICAgICBuZXcgSScgZm9yIElEX1MuDQogICAgICAgMy4gIElmIGFu IGF1dGhlbnRpY2F0aW5nIE1BQyB3YXMgcmVjZWl2ZWQgKFJFUVVJUkVEIGlmIEtfVE9LRU4NCiAg ICAgICAgICAgd2lsbCByZXBsYWNlIGFuIGV4aXN0aW5nIGtleSBvbiB0aGUgdG9rZW4pLCBpdCBp cyB2ZXJpZmllZCBpbg0KICAgICAgICAgICBhIHNpbWlsYXIgdmVpbiBidXQgdXNpbmcgdGhlIEtf TUFDIGV4aXN0aW5nIGJlZm9yZSB0aGUNCiAgICAgICAgICAgcHJvdG9jb2wgcnVuLiAgQWdhaW4s IGlmIHRoZSBNQUMgZG9lcyBub3QgdmVyaWZ5IHRoZSBwcm90b2NvbA0KICAgICAgICAgICBzZXNz aW9uIGVuZHMgd2l0aCBhIGZhaWx1cmUsIGFuZCB0aGUgdG9rZW4gTVVTVCBiZQ0KICAgICAgICAg ICBjb25zdHJ1Y3RlZCBubyB0byAiY29tbWl0IiB0byB0aGUgbmV3IEtfVE9LRU4gb3IgdGhlIG5l dw0KICAgICAgICAgICBLX01BQyB1bmxlc3MgdGhlIE1BQyB2ZXJpZmllcy4NCg0KDQpBcHBlbmRp eCBFLiAgRXhhbXBsZSBvZiBEU0tQUC1QUkYgUmVhbGl6YXRpb25zDQoNCg0KDQoNCg0KDQpEb2hl cnR5LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDksIDIwMDggICAgICAgICAgICAg ICBbUGFnZSA5NV0NCg0KDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgRFNLUFAg ICAgICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQpFLjEuICBJbnRyb2R1Y3Rpb24N Cg0KICAgVGhpcyBleGFtcGxlIGFwcGVuZGl4IGRlZmluZXMgRFNLUFAtUFJGIGluIHRlcm1zIG9m IEFFUyBbRklQUzE5Ny1BRVNdDQogICBhbmQgSE1BQyBbUkZDMjEwNF0uDQoNCkUuMi4gIERTS1BQ LVBSRi1BRVMNCg0KRS4yLjEuICBJZGVudGlmaWNhdGlvbg0KDQogICBGb3IgY3J5cHRvZ3JhcGhp YyBtb2R1bGVzIHN1cHBvcnRpbmcgdGhpcyByZWFsaXphdGlvbiBvZiBEU0tQUC1QUkYsDQogICB0 aGUgZm9sbG93aW5nIFVSSSBNQVkgYmUgdXNlZCB0byBpZGVudGlmeSB0aGlzIGFsZ29yaXRobSBp biBEU0tQUDoNCg0KICAgdXJuOmlldGY6cGFyYW1zOnhtbDpzY2hlbWE6a2V5cHJvdjpwcm90b2Nv bCNkc2twcC1wcmYtYWVzDQoNCiAgIFdoZW4gdGhpcyBVUkkgaXMgdXNlZCB0byBpZGVudGlmeSB0 aGUgZW5jcnlwdGlvbiBhbGdvcml0aG0gdG8gdXNlLA0KICAgdGhlIG1ldGhvZCBmb3IgZW5jcnlw dGlvbiBvZiBSX0MgdmFsdWVzIGRlc2NyaWJlZCBpbiBTZWN0aW9uIDQuNyBNVVNUDQogICBiZSB1 c2VkLg0KDQpFLjIuMi4gIERlZmluaXRpb24NCg0KICAgRFNLUFAtUFJGLUFFUyAoaywgcywgZHNM ZW4pDQoNCiAgIElucHV0Og0KICAgayAgICAgICAgIEVuY3J5cHRpb24ga2V5dG8gdXNlDQogICBz ICAgICAgICAgT2N0ZXQgc3RyaW5nIGNvbnNpc3Rpbmcgb2YgcmFuZG9taXppbmcgbWF0ZXJpYWwu ICBUaGUNCiAgICAgICAgICAgICBsZW5ndGggb2YgdGhlIHN0cmluZyBzIGlzIHNMZW4uDQogICBk c0xlbiAgICAgRGVzaXJlZCBsZW5ndGggb2YgdGhlIG91dHB1dA0KDQogICBPdXRwdXQ6DQoNCiAg IERTICAgICAgICBBIHBzZXVkb3JhbmRvbSBzdHJpbmcsIGRzTGVuLW9jdGV0cyBsb25nDQoNCiAg IFN0ZXBzOg0KDQogICAxLiAgTGV0IGJMZW4gYmUgdGhlIG91dHB1dCBibG9jayBzaXplIG9mIEFF UyBpbiBvY3RldHM6DQoNCiAgICAgICBiTGVuID0gKEFFUyBvdXRwdXQgYmxvY2sgbGVuZ3RoIGlu IG9jdGV0cykNCiAgICAgICAobm9ybWFsbHksIGJMZW4gPSAxNikNCiAgIDIuICBJZiBkc0xlbiA+ ICgyKiozMiAtIDEpICogYkxlbiwgb3V0cHV0ICJkZXJpdmVkIGRhdGEgdG9vIGxvbmciIGFuZA0K ICAgICAgIHN0b3ANCiAgIDMuICBMZXQgbiBiZSB0aGUgbnVtYmVyIG9mIGJMZW4tb2N0ZXQgYmxv Y2tzIGluIHRoZSBvdXRwdXQgZGF0YSwNCiAgICAgICByb3VuZGluZyB1cCwgYW5kIGxldCBqIGJl IHRoZSBudW1iZXIgb2Ygb2N0ZXRzIGluIHRoZSBsYXN0IGJsb2NrOg0KDQogICAgICAgbiA9IFJP VU5EKCBkc0xlbiAvIGJMZW4pDQogICAgICAgaiA9IGRzTGVuIC0gKG4gLSAxKSAqIGJMZW4NCg0K DQoNCg0KDQoNCkRvaGVydHksIGV0IGFsLiAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgOSwgMjAw OCAgICAgICAgICAgICAgIFtQYWdlIDk2XQ0KDQoNCkludGVybmV0LURyYWZ0ICAgICAgICAgICAg ICAgICAgICBEU0tQUCAgICAgICAgICAgICAgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgIDQu ICBGb3IgZWFjaCBibG9jayBvZiB0aGUgcHNldWRvcmFuZG9tIHN0cmluZyBEUywgYXBwbHkgdGhl IGZ1bmN0aW9uDQogICAgICAgRiBkZWZpbmVkIGJlbG93IHRvIHRoZSBrZXkgaywgdGhlIHN0cmlu ZyBzIGFuZCB0aGUgYmxvY2sgaW5kZXggdG8NCiAgICAgICBjb21wdXRlIHRoZSBibG9jazoNCg0K ICAgICAgIEIxID0gRiAoaywgcywgMSkgLA0KICAgICAgIEIyID0gRiAoaywgcywgMikgLA0KICAg ICAgIC4uLg0KICAgICAgIEJuID0gRiAoaywgcywgbikNCiAgIFRoZSBmdW5jdGlvbiBGIGlzIGRl ZmluZWQgaW4gdGVybXMgb2YgdGhlIE9NQUMxIGNvbnN0cnVjdGlvbiBmcm9tDQogICBbRlNFMjAw M10sIHVzaW5nIEFFUyBhcyB0aGUgYmxvY2sgY2lwaGVyOg0KDQogICBGIChrLCBzLCBpKSA9IE9N QUMxLUFFUyAoaywgSU5UIChpKSB8fCBzKQ0KDQogICB3aGVyZSBJTlQgKGkpIGlzIGEgZm91ci1v Y3RldCBlbmNvZGluZyBvZiB0aGUgaW50ZWdlciBpLCBtb3N0DQogICBzaWduaWZpY2FudCBvY3Rl dCBmaXJzdCwgYW5kIHRoZSBvdXRwdXQgbGVuZ3RoIG9mIE9NQUMxIGlzIHNldCB0bw0KICAgYkxl bi4NCg0KICAgQ29uY2F0ZW5hdGUgdGhlIGJsb2NrcyBhbmQgZXh0cmFjdCB0aGUgZmlyc3QgZHNM ZW4gb2N0ZXRzIHRvIHByb2R1Y3QNCiAgIHRoZSBkZXNpcmVkIGRhdGEgc3RyaW5nIERTOg0KDQog ICBEUyA9IEIxIHx8IEIyIHx8IC4uLiB8fCBCbjwwLi5qLTE+DQoNCiAgIE91dHB1dCB0aGUgZGVy aXZlZCBkYXRhIERTLg0KDQpFLjIuMy4gIEV4YW1wbGUNCg0KICAgSWYgd2UgYXNzdW1lIHRoYXQg ZHNMZW4gPSAxNiwgdGhlbjoNCg0KICAgbiA9IDE2IC8gMTYgPSAxDQoNCiAgIGogPSAxNiAtICgx IC0gMSkgKiAxNiA9IDE2DQoNCiAgIERTID0gQjEgPSBGIChrLCBzLCAxKSA9IE9NQUMxLUFFUyAo aywgSU5UICgxKSB8fCBzKQ0KDQpFLjMuICBEU0tQUC1QUkYtU0hBMjU2DQoNCkUuMy4xLiAgSWRl bnRpZmljYXRpb24NCg0KICAgRm9yIGNyeXB0b2dyYXBoaWMgbW9kdWxlcyBzdXBwb3J0aW5nIHRo aXMgcmVhbGl6YXRpb24gb2YgRFNLUFAtUFJGLA0KICAgdGhlIGZvbGxvd2luZyBVUkkgTUFZIGJl IHVzZWQgdG8gaWRlbnRpZnkgdGhpcyBhbGdvcml0aG0gaW4gRFNLUFA6DQoNCiAgIHVybjppZXRm OnBhcmFtczp4bWw6c2NoZW1hOmtleXByb3Y6cHJvdG9jb2wjZHNrcHAtcHJmLXNoYTI1Ng0KDQog ICBXaGVuIHRoaXMgVVJJIGlzIHVzZWQgdG8gaWRlbnRpZnkgdGhlIGVuY3J5cHRpb24gYWxnb3Jp dGhtIHRvIHVzZSwNCiAgIHRoZSBtZXRob2QgZm9yIGVuY3J5cHRpb24gb2YgUl9DIHZhbHVlcyBk ZXNjcmliZWQgaW4gU2VjdGlvbiA0LjcgTVVTVA0KICAgYmUgdXNlZC4NCg0KDQoNCg0KDQpEb2hl cnR5LCBldCBhbC4gICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDksIDIwMDggICAgICAgICAgICAg ICBbUGFnZSA5N10NCg0KDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgRFNLUFAg ICAgICAgICAgICAgICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQpFLjMuMi4gIERlZmluaXRpb24N Cg0KICAgRFNLUFAtUFJGLVNIQTI1NiAoaywgcywgZHNMZW4pDQoNCiAgIElucHV0Og0KICAgayAg ICAgICAgIEVuY3J5cHRpb24ga2V5IHRvIHVzZQ0KICAgcyAgICAgICAgIE9jdGV0IHN0cmluZyBj b25zaXN0aW5nIG9mIHJhbmRvbWl6aW5nIG1hdGVyaWFsLiAgVGhlDQogICAgICAgICAgICAgbGVu Z3RoIG9mIHRoZSBzdHJpbmcgcyBpcyBzTGVuLg0KICAgZHNMZW4gICAgIERlc2lyZWQgbGVuZ3Ro IG9mIHRoZSBvdXRwdXQNCg0KICAgT3V0cHV0Og0KDQogICBEUyAgICAgICAgQSBwc2V1ZG9yYW5k b20gc3RyaW5nLCBkc0xlbi1vY3RldHMgbG9uZw0KDQogICBTdGVwczoNCg0KICAgMS4gIExldCBi TGVuIGJlIHRoZSBvdXRwdXQgc2l6ZSBvZiBTSEEtMjU2IGluIG9jdGV0cyBvZiBbRklQUzE4MC1T SEFdDQogICAgICAgKG5vIHRydW5jYXRpb24gaXMgZG9uZSBvbiB0aGUgSE1BQyBvdXRwdXQpOg0K DQogICAgICAgYkxlbiA9IDMyDQogICAgICAgKG5vcm1hbGx5LCBiTGVuID0gMTYpDQogICAyLiAg SWYgZHNMZW4gPiAoMioqMzIgLSAxKSAqIGJMZW4sIG91dHB1dCAiZGVyaXZlZCBkYXRhIHRvbyBs b25nIiBhbmQNCiAgICAgICBzdG9wDQogICAzLiAgTGV0IG4gYmUgdGhlIG51bWJlciBvZiBiTGVu LW9jdGV0IGJsb2NrcyBpbiB0aGUgb3V0cHV0IGRhdGEsDQogICAgICAgcm91bmRpbmcgdXAsIGFu ZCBsZXQgaiBiZSB0aGUgbnVtYmVyIG9mIG9jdGV0cyBpbiB0aGUgbGFzdCBibG9jazoNCg0KICAg ICAgIG4gPSBST1VORCggZHNMZW4gLyBiTGVuKQ0KICAgICAgIGogPSBkc0xlbiAtIChuIC0gMSkg KiBiTGVuDQogICA0LiAgRm9yIGVhY2ggYmxvY2sgb2YgdGhlIHBzZXVkb3JhbmRvbSBzdHJpbmcg RFMsIGFwcGx5IHRoZSBmdW5jdGlvbg0KICAgICAgIEYgZGVmaW5lZCBiZWxvdyB0byB0aGUga2V5 IGssIHRoZSBzdHJpbmcgcyBhbmQgdGhlIGJsb2NrIGluZGV4IHRvDQogICAgICAgY29tcHV0ZSB0 aGUgYmxvY2s6DQoNCiAgICAgICBCMSA9IEYgKGssIHMsIDEpICwNCiAgICAgICBCMiA9IEYgKGss IHMsIDIpICwNCiAgICAgICAuLi4NCiAgICAgICBCbiA9IEYgKGssIHMsIG4pDQogICBUaGUgZnVu Y3Rpb24gRiBpcyBkZWZpbmVkIGluIHRlcm1zIG9mIHRoZSBITUFDIGNvbnN0cnVjdGlvbiBmcm9t DQogICBbUkZDMjEwNF0sIHVzaW5nIFNIQS0yNTYgYXMgdGhlIGRpZ2VzdCBhbGdvcml0aG06DQoN CiAgIEYgKGssIHMsIGkpID0gSE1BQy1TSEEyNTYgKGssIElOVCAoaSkgfHwgcykNCg0KICAgd2hl cmUgSU5UIChpKSBpcyBhIGZvdXItb2N0ZXQgZW5jb2Rpbmcgb2YgdGhlIGludGVnZXIgaSwgbW9z dA0KICAgc2lnbmlmaWNhbnQgb2N0ZXQgZmlyc3QsIGFuZCB0aGUgb3V0cHV0IGxlbmd0aCBvZiBI TUFDIGlzIHNldCB0bw0KICAgYkxlbi4NCg0KICAgQ29uY2F0ZW5hdGUgdGhlIGJsb2NrcyBhbmQg ZXh0cmFjdCB0aGUgZmlyc3QgZHNMZW4gb2N0ZXRzIHRvIHByb2R1Y3QNCiAgIHRoZSBkZXNpcmVk IGRhdGEgc3RyaW5nIERTOg0KDQoNCg0KDQpEb2hlcnR5LCBldCBhbC4gICAgICAgICAgRXhwaXJl cyBKYW51YXJ5IDksIDIwMDggICAgICAgICAgICAgICBbUGFnZSA5OF0NCg0KDQpJbnRlcm5ldC1E cmFmdCAgICAgICAgICAgICAgICAgICAgRFNLUFAgICAgICAgICAgICAgICAgICAgICAgICBKdWx5 IDIwMDcNCg0KDQogICBEUyA9IEIxIHx8IEIyIHx8IC4uLiB8fCBCbjwwLi5qLTE+DQoNCiAgIE91 dHB1dCB0aGUgZGVyaXZlZCBkYXRhIERTLg0KDQpFLjMuMy4gIEV4YW1wbGUNCg0KICAgSWYgd2Ug YXNzdW1lIHRoYXQgc0xlbiA9IDI1NiAodHdvIDEyOC1vY3RldCBsb25nIHZhbHVlcykgYW5kIGRz TGVuID0NCiAgIDE2LCB0aGVuOg0KDQogICBuID0gUk9VTkQgKCAxNiAvIDMyICkgPSAxDQoNCiAg IGogPSAxNiAtICgxIC0gMSkgKiAzMiA9IDE2DQoNCiAgIEIxID0gRiAoaywgcywgMSkgPSBITUFD LVNIQTI1NiAoaywgSU5UICgxKSB8fCBzKQ0KDQogICBEUyA9IEIxPDAgLi4uIDE1Pg0KDQogICBU aGF0IGlzLCB0aGUgcmVzdWx0IHdpbGwgYmUgdGhlIGZpcnN0IDE2IG9jdGV0cyBvZiB0aGUgSE1B QyBvdXRwdXQuDQoNCg0KQXV0aG9ycycgQWRkcmVzc2VzDQoNCiAgIEFuZHJlYSBEb2hlcnR5DQog ICBSU0EsIFRoZSBTZWN1cml0eSBEaXZpc2lvbiBvZiBFTUMNCg0KICAgRW1haWw6IGFkb2hlcnR5 QHJzYS5jb20NCg0KDQogICBNaW5nbGlhbmcgUGVpDQogICBWZXJpU2lnbiwgSW5jLg0KDQogICBF bWFpbDogbXBlaUB2ZXJpc2lnbi5jb20NCg0KDQogICBNYWdudXMgTnlzdHJvZW0NCiAgIFJTQSwg VGhlIFNlY3VyaXR5IERpdmlzaW9uIG9mIEVNQw0KDQogICBFbWFpbDogbWFnbnVzQHJzYS5jb20N Cg0KDQogICBTYWxhaCBNYWNoYW5pDQogICBEaXZlcnNpbmV0IENvcnAuDQoNCiAgIEVtYWlsOiBz bWFjaGFuaUBkaXZlcnNpbmV0LmNvbQ0KDQoNCg0KDQoNCg0KDQpEb2hlcnR5LCBldCBhbC4gICAg ICAgICAgRXhwaXJlcyBKYW51YXJ5IDksIDIwMDggICAgICAgICAgICAgICBbUGFnZSA5OV0NCg0K DQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAgRFNLUFAgICAgICAgICAgICAgICAg ICAgICAgICBKdWx5IDIwMDcNCg0KDQpGdWxsIENvcHlyaWdodCBTdGF0ZW1lbnQNCg0KICAgQ29w eXJpZ2h0IChDKSBUaGUgSUVURiBUcnVzdCAoMjAwNykuDQoNCiAgIFRoaXMgZG9jdW1lbnQgaXMg c3ViamVjdCB0byB0aGUgcmlnaHRzLCBsaWNlbnNlcyBhbmQgcmVzdHJpY3Rpb25zDQogICBjb250 YWluZWQgaW4gQkNQIDc4LCBhbmQgZXhjZXB0IGFzIHNldCBmb3J0aCB0aGVyZWluLCB0aGUgYXV0 aG9ycw0KICAgcmV0YWluIGFsbCB0aGVpciByaWdodHMuDQoNCiAgIFRoaXMgZG9jdW1lbnQgYW5k IHRoZSBpbmZvcm1hdGlvbiBjb250YWluZWQgaGVyZWluIGFyZSBwcm92aWRlZCBvbiBhbg0KICAg IkFTIElTIiBiYXNpcyBhbmQgVEhFIENPTlRSSUJVVE9SLCBUSEUgT1JHQU5JWkFUSU9OIEhFL1NI RSBSRVBSRVNFTlRTDQogICBPUiBJUyBTUE9OU09SRUQgQlkgKElGIEFOWSksIFRIRSBJTlRFUk5F VCBTT0NJRVRZLCBUSEUgSUVURiBUUlVTVCBBTkQNCiAgIFRIRSBJTlRFUk5FVCBFTkdJTkVFUklO RyBUQVNLIEZPUkNFIERJU0NMQUlNIEFMTCBXQVJSQU5USUVTLCBFWFBSRVNTDQogICBPUiBJTVBM SUVELCBJTkNMVURJTkcgQlVUIE5PVCBMSU1JVEVEIFRPIEFOWSBXQVJSQU5UWSBUSEFUIFRIRSBV U0UgT0YNCiAgIFRIRSBJTkZPUk1BVElPTiBIRVJFSU4gV0lMTCBOT1QgSU5GUklOR0UgQU5ZIFJJ R0hUUyBPUiBBTlkgSU1QTElFRA0KICAgV0FSUkFOVElFUyBPRiBNRVJDSEFOVEFCSUxJVFkgT1Ig RklUTkVTUyBGT1IgQSBQQVJUSUNVTEFSIFBVUlBPU0UuDQoNCg0KSW50ZWxsZWN0dWFsIFByb3Bl cnR5DQoNCiAgIFRoZSBJRVRGIHRha2VzIG5vIHBvc2l0aW9uIHJlZ2FyZGluZyB0aGUgdmFsaWRp dHkgb3Igc2NvcGUgb2YgYW55DQogICBJbnRlbGxlY3R1YWwgUHJvcGVydHkgUmlnaHRzIG9yIG90 aGVyIHJpZ2h0cyB0aGF0IG1pZ2h0IGJlIGNsYWltZWQgdG8NCiAgIHBlcnRhaW4gdG8gdGhlIGlt cGxlbWVudGF0aW9uIG9yIHVzZSBvZiB0aGUgdGVjaG5vbG9neSBkZXNjcmliZWQgaW4NCiAgIHRo aXMgZG9jdW1lbnQgb3IgdGhlIGV4dGVudCB0byB3aGljaCBhbnkgbGljZW5zZSB1bmRlciBzdWNo IHJpZ2h0cw0KICAgbWlnaHQgb3IgbWlnaHQgbm90IGJlIGF2YWlsYWJsZTsgbm9yIGRvZXMgaXQg cmVwcmVzZW50IHRoYXQgaXQgaGFzDQogICBtYWRlIGFueSBpbmRlcGVuZGVudCBlZmZvcnQgdG8g aWRlbnRpZnkgYW55IHN1Y2ggcmlnaHRzLiAgSW5mb3JtYXRpb24NCiAgIG9uIHRoZSBwcm9jZWR1 cmVzIHdpdGggcmVzcGVjdCB0byByaWdodHMgaW4gUkZDIGRvY3VtZW50cyBjYW4gYmUNCiAgIGZv dW5kIGluIEJDUCA3OCBhbmQgQkNQIDc5Lg0KDQogICBDb3BpZXMgb2YgSVBSIGRpc2Nsb3N1cmVz IG1hZGUgdG8gdGhlIElFVEYgU2VjcmV0YXJpYXQgYW5kIGFueQ0KICAgYXNzdXJhbmNlcyBvZiBs aWNlbnNlcyB0byBiZSBtYWRlIGF2YWlsYWJsZSwgb3IgdGhlIHJlc3VsdCBvZiBhbg0KICAgYXR0 ZW1wdCBtYWRlIHRvIG9idGFpbiBhIGdlbmVyYWwgbGljZW5zZSBvciBwZXJtaXNzaW9uIGZvciB0 aGUgdXNlIG9mDQogICBzdWNoIHByb3ByaWV0YXJ5IHJpZ2h0cyBieSBpbXBsZW1lbnRlcnMgb3Ig dXNlcnMgb2YgdGhpcw0KICAgc3BlY2lmaWNhdGlvbiBjYW4gYmUgb2J0YWluZWQgZnJvbSB0aGUg SUVURiBvbi1saW5lIElQUiByZXBvc2l0b3J5IGF0DQogICBodHRwOi8vd3d3LmlldGYub3JnL2lw ci4NCg0KICAgVGhlIElFVEYgaW52aXRlcyBhbnkgaW50ZXJlc3RlZCBwYXJ0eSB0byBicmluZyB0 byBpdHMgYXR0ZW50aW9uIGFueQ0KICAgY29weXJpZ2h0cywgcGF0ZW50cyBvciBwYXRlbnQgYXBw bGljYXRpb25zLCBvciBvdGhlciBwcm9wcmlldGFyeQ0KICAgcmlnaHRzIHRoYXQgbWF5IGNvdmVy IHRlY2hub2xvZ3kgdGhhdCBtYXkgYmUgcmVxdWlyZWQgdG8gaW1wbGVtZW50DQogICB0aGlzIHN0 YW5kYXJkLiAgUGxlYXNlIGFkZHJlc3MgdGhlIGluZm9ybWF0aW9uIHRvIHRoZSBJRVRGIGF0DQog ICBpZXRmLWlwckBpZXRmLm9yZy4NCg0KDQpBY2tub3dsZWRnbWVudA0KDQogICBGdW5kaW5nIGZv ciB0aGUgUkZDIEVkaXRvciBmdW5jdGlvbiBpcyBwcm92aWRlZCBieSB0aGUgSUVURg0KICAgQWRt aW5pc3RyYXRpdmUgU3VwcG9ydCBBY3Rpdml0eSAoSUFTQSkuDQoNCg0KDQoNCg0KRG9oZXJ0eSwg ZXQgYWwuICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSA5LCAyMDA4ICAgICAgICAgICAgICBbUGFn ZSAxMDBdDQoNCg0KDQoNCg== ------_=_NextPart_001_01C7C200.890AE92B Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov ------_=_NextPart_001_01C7C200.890AE92B-- From keyprov-bounces@ietf.org Mon Jul 09 04:28:22 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7obW-0006Or-8x; Mon, 09 Jul 2007 04:28:22 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7obT-0006NS-1K for keyprov@ietf.org; Mon, 09 Jul 2007 04:28:20 -0400 Received: from robin.verisign.com ([65.205.251.75]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1I7obO-0007gX-KX for keyprov@ietf.org; Mon, 09 Jul 2007 04:28:19 -0400 Received: from MOU1WNEXCN03.vcorp.ad.vrsn.com (mailer6.verisign.com [65.205.251.33]) by robin.verisign.com (8.13.6/8.13.4) with ESMTP id l698SDhQ012836; Mon, 9 Jul 2007 01:28:14 -0700 Received: from MOU1WNEXMB10.vcorp.ad.vrsn.com ([10.25.13.204]) by MOU1WNEXCN03.vcorp.ad.vrsn.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 9 Jul 2007 01:28:13 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: [KEYPROV] FW: Internet Draft submission Date: Mon, 9 Jul 2007 01:28:12 -0700 Message-ID: <3E5A2F1AD44F5E49A74F79AB47C0C0C939F322@mou1wnexmb10.vcorp.ad.vrsn.com> In-Reply-To: <017630AA6DF2DF4EBC1DD4454F8EE297067EA14B@rsana-ex-hq1.NA.RSA.NET> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [KEYPROV] FW: Internet Draft submission Thread-Index: AcfB/O8ckPDZVqwGQ1OEOd9QP7RZ8QAA2SwpAACea4A= From: "Pei, Mingliang" To: "Doherty, Andrea" , X-OriginalArrivalTime: 09 Jul 2007 08:28:13.0497 (UTC) FILETIME=[174D2290:01C7C203] X-Spam-Score: 0.1 (/) X-Scan-Signature: 69a74e02bbee44ab4f8eafdbcedd94a1 Cc: X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Andrea, Thanks. Just notice that PSKC has also made type changes from to , SecretId to KeyId, SecretAlgorithm to KeyAlgorithm when making SecretContainerType to KeyContainerType.=20 DSKPP samples don't reflect these yet, and we can update in next revision.=20 - Ming=20 -----Original Message----- From: Doherty, Andrea [mailto:adoherty@rsa.com]=20 Sent: Monday, July 09, 2007 1:08 AM To: keyprov@ietf.org Subject: [KEYPROV] FW: Internet Draft submission Please find attached submission for which I just received an auto-response from the IETF Submission Manager. Andrea ________________________________ From: Doherty, Andrea Sent: Mon 7/9/2007 3:44 AM To: internet-drafts@ietf.org Subject: Internet Draft submission To the IETF Secretariat:=20 Attached please find the -01 version of Internet-Draft submission entitled "Dynamic Symmetric Key Provisioning Protocol (DSKPP)". Please direct any questions or comments you may have to me. Thank you, Andrea Doherty=20 _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Mon Jul 09 04:37:36 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7okS-00032o-OT; Mon, 09 Jul 2007 04:37:36 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7okS-00032j-Cb for keyprov@ietf.org; Mon, 09 Jul 2007 04:37:36 -0400 Received: from robin.verisign.com ([65.205.251.75]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1I7okN-0007sR-PT for keyprov@ietf.org; Mon, 09 Jul 2007 04:37:36 -0400 Received: from mou1wnexcn01.vcorp.ad.vrsn.com (mailer1.verisign.com [65.205.251.34]) by robin.verisign.com (8.13.6/8.13.4) with ESMTP id l698bSKh017721; Mon, 9 Jul 2007 01:37:31 -0700 Received: from MOU1WNEXMB10.vcorp.ad.vrsn.com ([10.25.13.204]) by mou1wnexcn01.vcorp.ad.vrsn.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 9 Jul 2007 01:37:30 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----_=_NextPart_001_01C7C204.62D94913" Subject: RE: [KEYPROV] FW: Internet Draft submission Date: Mon, 9 Jul 2007 01:37:29 -0700 Message-ID: <3E5A2F1AD44F5E49A74F79AB47C0C0C939F324@mou1wnexmb10.vcorp.ad.vrsn.com> In-Reply-To: <017630AA6DF2DF4EBC1DD4454F8EE297067EA14B@rsana-ex-hq1.NA.RSA.NET> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [KEYPROV] FW: Internet Draft submission Thread-Index: AcfB/O8ckPDZVqwGQ1OEOd9QP7RZ8QAA2SwpAAD9P0A= From: "Pei, Mingliang" To: "Doherty, Andrea" , X-OriginalArrivalTime: 09 Jul 2007 08:37:30.0293 (UTC) FILETIME=[632D7650:01C7C204] X-Spam-Score: 0.1 (/) X-Scan-Signature: 8b6657e60309a1317174c9db2ae5f227 Cc: X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org This is a multi-part message in MIME format. ------_=_NextPart_001_01C7C204.62D94913 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Please see these updated sample messages. - Ming=20 -----Original Message----- From: Doherty, Andrea [mailto:adoherty@rsa.com]=20 Sent: Monday, July 09, 2007 1:08 AM To: keyprov@ietf.org Subject: [KEYPROV] FW: Internet Draft submission Please find attached submission for which I just received an auto-response from the IETF Submission Manager. Andrea ________________________________ From: Doherty, Andrea Sent: Mon 7/9/2007 3:44 AM To: internet-drafts@ietf.org Subject: Internet Draft submission To the IETF Secretariat:=20 Attached please find the -01 version of Internet-Draft submission entitled "Dynamic Symmetric Key Provisioning Protocol (DSKPP)". Please direct any questions or comments you may have to me. Thank you, Andrea Doherty=20 ------_=_NextPart_001_01C7C204.62D94913 Content-Type: text/xml; name="serverfinished4.xml" Content-Transfer-Encoding: base64 Content-Description: serverfinished4.xml Content-Disposition: attachment; filename="serverfinished4.xml" IDw/eG1sIHZlcnNpb249IjEuMCIgZW5jb2Rpbmc9IlVURi04Ij8+CiA8ZHNrcHA6U2VydmVyRmlu aXNoZWQgVmVyc2lvbj0iMS4wIiBTZXNzaW9uSUQ9IjQxMTQiIFN0YXR1cz0iU3VjY2VzcyIKICAg eG1sbnM6ZHNrcHA9InVybjppZXRmOnBhcmFtczp4bWw6c2NoZW1hOmtleXByb3Y6cHJvdG9jb2wi CiAgIHhtbG5zOnBza2M9InVybjppZXRmOnBhcmFtczp4bWw6bnM6a2V5cHJvdjpjb250YWluZXIi CiAgIHhtbG5zOnhzaT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS9YTUxTY2hlbWEtaW5zdGFuY2Ui CiAgICAgeHNpOnNjaGVtYUxvY2F0aW9uPSJ1cm46aWV0ZjpwYXJhbXM6eG1sOnNjaGVtYTprZXlw cm92OnByb3RvY29sIgogICB4bWxuczpkcz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxk c2lnIyIKICAgeG1sbnM6eGVuYz1odHRwOi8vd3d3LnczLm9yZy8yMDAxLzA0L3htbGVuYyMKICAg eG1sbnM6cGtjcy01PQogICAiaHR0cDovL3d3dy5yc2FzZWN1cml0eS5jb20vcnNhbGFicy9wa2Nz L3NjaGVtYXMvcGtjcy01djItMCMiPgogICA8cHNrYzpLZXlDb250YWluZXIgdmVyc2lvbj0iMS4w Ij4KICAgICA8RW5jcnlwdGlvbk1ldGhvZCBhbGdvcml0aG09CiAgICAgICAgICJodHRwOi8vd3d3 LnJzYXNlY3VyaXR5LmNvbS9yc2FsYWJzL3BrY3Mvc2NoZW1hcy9wa2NzLTUjcGJlczIiPgogICAg ICAgPHBrY3MtNTpQQkVTMi1wYXJhbXM+CiAgICAgICAgIDxLZXlEZXJpdmF0aW9uRnVuYyBBbGdv cml0aG09CiAgICAgICAgICAgImh0dHA6Ly93d3cucnNhc2VjdXJpdHkuY29tL3JzYWxhYnMvcGtj cy9zY2hlbWFzL3BrY3MtNSMKICAgICAgICAgICBwYmtkZjIiPgogICAgICAgICAgIDxwa2NzLTU6 UEJLREYyLXBhcmFtcz4KICAgICAgICAgICAgIDxTYWx0PgogICAgICAgICAgICAgICA8U3BlY2lm aWVkPjMyMTEzNDM1PC9TcGVjaWZpZWQ+CiAgICAgICAgICAgICA8L1NhbHQ+CiAgICAgICAgICAg ICA8SXRlcmF0aW9uQ291bnQ+MTAyNDwvSXRlcmF0aW9uQ291bnQ+CiAgICAgICAgICAgICA8S2V5 TGVuZ3RoPjEyODwvS2V5TGVuZ3RoPgogICAgICAgICAgICAgPFBSRi8+CiAgICAgICAgICAgPC9w a2NzLTU6UEJLREYyLXBhcmFtcz4KICAgICAgICAgPC9LZXlEZXJpdmF0aW9uRnVuYz4KICAgICAg ICAgPEVuY3J5cHRpb25TY2hlbWUgQWxnb3JpdGhtPQogICAgICAgICAgICJodHRwOi8vd3d3Lncz Lm9yZy8yMDAxLzA0L3htbGVuYyNrdy1hZXMxMjgtY2JjIj4KICAgICAgICAgPC9FbmNyeXB0aW9u U2NoZW1lCiAgICAgICA8L3BrY3MtNTpQQkVTMi1wYXJhbXM+CiAgICAgICA8RW5jS2V5TGFiZWw+ NDMyMTIwOTM8L0VuY0tleUxhYmVsPgogICAgICAgPGRzOktleUluZm8+CiAgICAgICAgIDxkczpL ZXlOYW1lPlBhc3NwaHJhc2UxPC9kczpLZXlOYW1lPgogICAgICAgPC9kczpLZXlJbmZvPgogICAg IDwvRW5jcnlwdGlvbk1ldGhvZD4KICAgICA8RGV2aWNlPgogICAgICAgPEtleSBLZXlBbGdvcml0 aG09IkhPVFAiIEtleUlkPSJTRFUzMTIzNDU2NzgiPgogICAgICAgICA8SXNzdWVyPkNyZWRlbnRp YWxJc3N1ZXI8L0lzc3Vlcj4KICAgICAgICAgPFVzYWdlIG90cD0idHJ1ZSI+CiAgICAgICAgICAg PFJlc3BvbnNlRm9ybWF0IGZvcm1hdD0iREVDSU1BTCIgbGVuZ3RoPSI2Ii8+CiAgICAgICAgIDwv VXNhZ2U+CiAgICAgICAgIDxGcmllbmRseU5hbWU+TXlGaXJzdFRva2VuPC9GcmllbmRseU5hbWU+ CiAgICAgICAgIDxEYXRhIE5hbWU9IlNFQ1JFVCI+CiAgICAgICAgICAgPFZhbHVlPgogICAgICAg ICAgICAgN0pIVXlwM2F6T2txSkVOU3NoNmIydnhYendHQll5cHpKeEVyK2lrUUFhMjI5S1YvQmda aEdBPT0KICAgICAgICAgICA8L1ZhbHVlPgogICAgICAgICAgIDxWYWx1ZURpZ2VzdD4KICAgICAg ICAgICAgIDlBRURwZDR0ZDQ0bVJTQVNhYjYyNW9QcWx2SEhJcGx6QURlcitwUE9sTDExOEpXL0Fo SW9IQj09CiAgICAgICAgICAgPC9WYWx1ZURpZ2VzdD4KICAgICAgICAgPC9EYXRhPgogICAgICAg ICA8RGF0YSBOYW1lPSJDT1VOVEVSIj4KICAgICAgICAgICA8VmFsdWU+MTwvVmFsdWU+CiAgICAg ICAgIDwvRGF0YT4KICAgICAgICAgPEV4cGlyeT4xMC8zMC8yMDA5PC9FeHBpcnk+CiAgICAgICA8 L0tleT4KICAgICA8L0RldmljZT4KICAgPC9wc2tjOktleUNvbnRhaW5lcj4KICAgPE1hYyBNYWNB bGdvcml0aG09CiAgICAgInVybjppZXRmOnBhcmFtczp4bWw6c2NoZW1hOmtleXByb3Y6cHJvdG9j b2wjZHNrcHAtcHJmLWFlcyI+CiAgICAgbWlpZGZhc2RlMzEyYXNkZXIzOTRqdz09CiAgIDwvTWFj PgogPC9kc2twcDpTZXJ2ZXJGaW5pc2hlZD4KCg== ------_=_NextPart_001_01C7C204.62D94913 Content-Type: text/xml; name="serverfinished.xml" Content-Transfer-Encoding: base64 Content-Description: serverfinished.xml Content-Disposition: attachment; filename="serverfinished.xml" PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPGRza3BwOlNlcnZlckZpbmlz aGVkIFZlcnNpb249IjEuMCIgU2Vzc2lvbklEPSI0MTE0IiBTdGF0dXM9IlN1Y2Nlc3MiCiAgICAg ICAgICAgICAgICAgICAgICB4bWxuczpkc2twcD0idXJuOmlldGY6cGFyYW1zOnhtbDpzY2hlbWE6 a2V5cHJvdjpwcm90b2NvbCIKICAgICAgICAgICAgICAgICAgICAgIHhtbG5zOnBza2M9InVybjpp ZXRmOnBhcmFtczp4bWw6bnM6a2V5cHJvdjpjb250YWluZXIiCiAgICAgICAgICAgICAgICAgICAg ICB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIgog ICAgICAgICAgICAgICAgICAgICAgeHNpOnNjaGVtYUxvY2F0aW9uPSJ1cm46aWV0ZjpwYXJhbXM6 eG1sOnNjaGVtYTprZXlwcm92OnByb3RvY29sIj4KICAgIDxwc2tjOktleUNvbnRhaW5lciB2ZXJz aW9uPSIxLjAiPgogICAgICAgIDxEZXZpY2U+CiAgICAgICAgICAgIDxLZXkgS2V5QWxnb3JpdGht PSJvdGhlciIgZXh0LUtleUFsZ29yaXRobT0iU2VjdXJJRCIKICAgICAgICAgICAgICAgICAgICBT ZWNyZXRJZD0iWEwwMDAwMDAwMDAxMjM0Ij4KICAgICAgICAgICAgICAgIDxJc3N1ZXI+Q3JlZGVu dGlhbElzc3VlcjwvSXNzdWVyPgogICAgICAgICAgICAgICAgPFVzYWdlIG90cD0idHJ1ZSI+CiAg ICAgICAgICAgICAgICAgICAgPFJlc3BvbnNlRm9ybWF0IGZvcm1hdD0iREVDSU1BTCIgbGVuZ3Ro PSI2Ii8+CiAgICAgICAgICAgICAgICA8L1VzYWdlPgogICAgICAgICAgICAgICAgPEZyaWVuZGx5 TmFtZT5NeUZpcnN0VG9rZW48L0ZyaWVuZGx5TmFtZT4KICAgICAgICAgICAgICAgIDxEYXRhIE5h bWU9IlRJTUUiPgogICAgICAgICAgICAgICAgICAgIDxWYWx1ZT5UaW1lPC9WYWx1ZT4KICAgICAg ICAgICAgICAgIDwvRGF0YT4KICAgICAgICAgICAgICAgIDxFeHBpcnk+MTAvMzAvMjAwOTwvRXhw aXJ5PgogICAgICAgICAgICA8L0tleT4KICAgICAgICA8L0RldmljZT4KICAgIDwvcHNrYzpLZXlD b250YWluZXI+CiAgICA8TWFjPm1paWRmYXNkZTMxMmFzZGVyMzk0anc9PTwvTWFjPgo8L2Rza3Bw OlNlcnZlckZpbmlzaGVkPgo= ------_=_NextPart_001_01C7C204.62D94913 Content-Type: text/xml; name="serverfinished2.xml" Content-Transfer-Encoding: base64 Content-Description: serverfinished2.xml Content-Disposition: attachment; filename="serverfinished2.xml" ICAgPD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KICAgPGRza3BwOlNlcnZl ckZpbmlzaGVkIFZlcnNpb249IjEuMCIgU2Vzc2lvbklEPSI0MTE0IiBTdGF0dXM9IlN1Y2Nlc3Mi CiAgICAgeG1sbnM6ZHNrcHA9InVybjppZXRmOnBhcmFtczp4bWw6c2NoZW1hOmtleXByb3Y6cHJv dG9jb2wiCiAgICAgeG1sbnM6cHNrYz0idXJuOmlldGY6cGFyYW1zOnhtbDpuczprZXlwcm92OmNv bnRhaW5lciIKICAgICB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1h LWluc3RhbmNlIgogICAgICAgeHNpOnNjaGVtYUxvY2F0aW9uPSJ1cm46aWV0ZjpwYXJhbXM6eG1s OnNjaGVtYTprZXlwcm92OnByb3RvY29sIgogICAgIHhtbG5zOmRzPSJodHRwOi8vd3d3LnczLm9y Zy8yMDAwLzA5L3htbGRzaWcjIgogICAgIHhtbG5zOnhlbmM9Imh0dHA6Ly93d3cudzMub3JnLzIw MDEvMDQveG1sZW5jIyI+CiAgICAgPHBza2M6S2V5Q29udGFpbmVyIHZlcnNpb249IjEuMCI+CiAg ICAgICA8RW5jcnlwdGlvbk1ldGhvZAogICAgICAgICBhbGdvcml0aG09Imh0dHA6Ly93d3cudzMu b3JnLzIwMDEvMDUveG1sZW5jI3JzYV8xXzUiPgogICAgICAgICA8RW5jS2V5TGFiZWw+NDMyMTIw OTM8CiAgICAgICAgIDxkczpLZXlJbmZvPgogICAgICAgICAgIDxkczpYNTA5RGF0YT4KICAgICAg ICAgICAgIDxkczpYNTA5Q2VydGlmaWNhdGU+bWlpYjwvZHM6WDUwOUNlcnRpZmljYXRlPgogICAg ICAgICAgIDwvZHM6WDUwOURhdGE+CiAgICAgICAgIDwvZHM6S2V5SW5mbz4KICAgICAgIDwvRW5j cnlwdGlvbk1ldGhvZD4KICAgICAgIDxEZXZpY2U+CiAgICAgICAgIDxLZXkgS2V5QWxnb3JpdGht PSJIT1RQIiBLZXlJZD0iU0RVMzEyMzQ1Njc4Ij4KICAgICAgICAgICA8SXNzdWVyPkNyZWRlbnRp YWxJc3N1ZXI8L0lzc3Vlcj4KICAgICAgICAgICA8VXNhZ2Ugb3RwPSJ0cnVlIj4KICAgICAgICAg ICAgIDxSZXNwb25zZUZvcm1hdCBmb3JtYXQ9IkRFQ0lNQUwiIGxlbmd0aD0iNiIvPgogICAgICAg ICAgIDwvVXNhZ2U+CiAgICAgICAgICAgPEZyaWVuZGx5TmFtZT5NeUZpcnN0VG9rZW48L0ZyaWVu ZGx5TmFtZT4KICAgICAgICAgICA8RGF0YSBOYW1lPSJTRUNSRVQiPgogICAgICAgICAgICAgPFZh bHVlPgogICAgICAgICAgICAgICA3SkhVeXAzYXpPa3FKRU5Tc2g2YjJ2eFh6d0dCWXlwekp4RXIr aWtRQWEyMjlLVi9CZ1poR0E9PQogICAgICAgICAgICAgPC9WYWx1ZT4KICAgICAgICAgICAgIDxW YWx1ZURpZ2VzdD4KICAgICAgICAgICAgICAgOUFFRHBkNHRkNDRtUlNBU2FiNjI1b1BxbHZISElw bHpBRGVyK3BQT2xMMTE4SlcvQWhJb0hCPT0KICAgICAgICAgICAgIDwvVmFsdWVEaWdlc3Q+CiAg ICAgICAgICAgPC9EYXRhPgogICAgICAgICAgIDxEYXRhIE5hbWU9IkNPVU5URVIiPgogICAgICAg ICAgICAgPFZhbHVlPjE8L1ZhbHVlPgogICAgICAgICAgIDwvRGF0YT4KICAgICAgICAgICA8RXhw aXJ5PjEwLzMwLzIwMDk8L0V4cGlyeT4KICAgICAgICAgPC9LZXk+CiAgICAgICA8L0RldmljZT4K ICAgICA8L3Bza2M6S2V5Q29udGFpbmVyPgogICAgIDxNYWMgTWFjQWxnb3JpdGhtPQogICAgICAg InVybjppZXRmOnBhcmFtczp4bWw6c2NoZW1hOmtleXByb3Y6cHJvdG9jb2wjZHNrcHAtcHJmLWFl cyI+CiAgICAgICBtaWlkZmFzZGUzMTJhc2RlcjM5NGp3PT0KICAgICA8L01hYz4KICAgPC9kc2tw cDpTZXJ2ZXJGaW5pc2hlZD4KCg== ------_=_NextPart_001_01C7C204.62D94913 Content-Type: text/xml; name="serverfinished3.xml" Content-Transfer-Encoding: base64 Content-Description: serverfinished3.xml Content-Disposition: attachment; filename="serverfinished3.xml" ICAgPD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KICAgPGRza3BwOlNlcnZl ckZpbmlzaGVkIFZlcnNpb249IjEuMCIgU2Vzc2lvbklEPSI0MTE0IiBTdGF0dXM9IlN1Y2Nlc3Mi CiAgICAgeG1sbnM6ZHNrcHA9InVybjppZXRmOnBhcmFtczp4bWw6c2NoZW1hOmtleXByb3Y6cHJv dG9jb2wiCiAgICAgeG1sbnM6cHNrYz0idXJuOmlldGY6cGFyYW1zOnhtbDpuczprZXlwcm92OmNv bnRhaW5lciIKICAgICB4bWxuczp4c2k9Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1h LWluc3RhbmNlIgogICAgICAgeHNpOnNjaGVtYUxvY2F0aW9uPSJ1cm46aWV0ZjpwYXJhbXM6eG1s OnNjaGVtYTprZXlwcm92OnByb3RvY29sIgogICAgIHhtbG5zOmRzPSJodHRwOi8vd3d3LnczLm9y Zy8yMDAwLzA5L3htbGRzaWcjIgogICAgIHhtbG5zOnhlbmM9Imh0dHA6Ly93d3cudzMub3JnLzIw MDEvMDQveG1sZW5jIyI+CiAgICAgPHBza2M6S2V5Q29udGFpbmVyIHZlcnNpb249IjEuMCI+CiAg ICAgICA8RW5jcnlwdGlvbk1ldGhvZAogICAgICAgICBhbGdvcml0aG09Imh0dHA6Ly93d3cudzMu b3JnLzIwMDEvMDUveG1sZW5jI2t3LWFlczEyOCI+CiAgICAgICAgIDxFbmNLZXlMYWJlbD40MzIx MjA5MzwvRW5jS2V5TGFiZWw+CiAgICAgICAgIDxkczpLZXlJbmZvPgogICAgICAgICAgIDxkczpL ZXlOYW1lPktleS0wMDE8L2RzOktleU5hbWU+CiAgICAgICAgIDwvZHM6S2V5SW5mbz4KICAgICAg IDwvRW5jcnlwdGlvbk1ldGhvZD4KICAgICAgIDxEZXZpY2U+CiAgICAgICAgIDxLZXkgS2V5QWxn b3JpdGhtPSJIT1RQIiBLZXlJZD0iU0RVMzEyMzQ1Njc4Ij4KICAgICAgICAgICA8SXNzdWVyPkNy ZWRlbnRpYWxJc3N1ZXI8L0lzc3Vlcj4KICAgICAgICAgICA8VXNhZ2Ugb3RwPSJ0cnVlIj4KICAg ICAgICAgICAgIDxSZXNwb25zZUZvcm1hdCBmb3JtYXQ9IkRFQ0lNQUwiIGxlbmd0aD0iNiIvPgog ICAgICAgICAgIDwvVXNhZ2U+CiAgICAgICAgICAgPEZyaWVuZGx5TmFtZT5NeUZpcnN0VG9rZW48 L0ZyaWVuZGx5TmFtZT4KICAgICAgICAgICA8RGF0YSBOYW1lPSJTRUNSRVQiPgogICAgICAgICAg ICAgIDxWYWx1ZT4KICAgICAgICAgICAgICAgN0pIVXlwM2F6T2txSkVOU3NoNmIydnhYendHQll5 cHpKeEVyK2lrUUFhMjI5S1YvQmdaaEdBPT0KICAgICAgICAgICAgIDwvVmFsdWU+CiAgICAgICAg ICAgICA8VmFsdWVEaWdlc3Q+CiAgICAgICAgICAgICAgIDlBRURwZDR0ZDQ0bVJTQVNhYjYyNW9Q cWx2SEhJcGx6QURlcitwUE9sTDExOEpXL0FoSW9IQj09CiAgICAgICAgICAgICA8L1ZhbHVlRGln ZXN0PgogICAgICAgICAgIDwvRGF0YT4KICAgICAgICAgICA8RGF0YSBOYW1lPSJDT1VOVEVSIj4K ICAgICAgICAgICAgIDxWYWx1ZT4xPC9WYWx1ZT4KICAgICAgICAgICA8L0RhdGE+CiAgICAgICAg ICAgPEV4cGlyeT4xMC8zMC8yMDA5PC9FeHBpcnk+CiAgICAgICAgIDwvS2V5PgogICAgICAgPC9E ZXZpY2U+CiAgICAgPC9wc2tjOktleUNvbnRhaW5lcj4KICAgICA8TWFjIE1hY0FsZ29yaXRobT0K ICAgICAgICJ1cm46aWV0ZjpwYXJhbXM6eG1sOnNjaGVtYTprZXlwcm92OnByb3RvY29sI2Rza3Bw LXByZi1hZXMiPgogICAgICAgbWlpZGZhc2RlMzEyYXNkZXIzOTRqdz09CiAgICAgPC9NYWM+CiAg IDwvZHNrcHA6U2VydmVyRmluaXNoZWQ+Cgo= ------_=_NextPart_001_01C7C204.62D94913 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov ------_=_NextPart_001_01C7C204.62D94913-- From keyprov-bounces@ietf.org Mon Jul 09 04:50:26 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7owr-0007rJ-Ec; Mon, 09 Jul 2007 04:50:25 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7owp-0007iQ-Mz for keyprov@ietf.org; Mon, 09 Jul 2007 04:50:23 -0400 Received: from v29431.1blu.de ([88.84.142.131]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1I7owl-00089G-8u for keyprov@ietf.org; Mon, 09 Jul 2007 04:50:23 -0400 Received: (qmail 29826 invoked from network); 9 Jul 2007 10:50:17 +0200 Received: from 213-239-234-98.clients.your-server.de (HELO ?213.239.196.40?) (213.239.234.98) by v29431.1blu.de with SMTP; 9 Jul 2007 10:50:17 +0200 Content-Type: text/plain; charset=utf-8 To: keyprov@ietf.org From: Mingliang Pei Date: Mon, 09 Jul 2007 08:32:12 +0000 X-Roundup-Name: KEYPROV Roundup Issue Tracker X-Roundup-Loop: hello X-Roundup-Version: 0.8.2 MIME-Version: 1.0 Message-Id: <1183969932.63.0.362979395833.issue23@http://www.tschofenig.priv.at> Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-Scan-Signature: 68c8cc8a64a9d0402e43b8eee9fc4199 Subject: [KEYPROV] [issue23] Shall we use word "Key" in XML type names to replace word "Secret"? X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: KEYPROV Roundup Issue Tracker List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Mingliang Pei added the comment: Changed in the PSKC draft v1.1. ---------- status: in-progress -> testing _________________________________________________________ KEYPROV Roundup Issue Tracker _________________________________________________________ _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Mon Jul 09 04:51:26 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7oxp-0008N6-Vc; Mon, 09 Jul 2007 04:51:25 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7oxo-0008N1-P2 for keyprov@ietf.org; Mon, 09 Jul 2007 04:51:24 -0400 Received: from v29431.1blu.de ([88.84.142.131]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1I7oxk-0008AW-Aw for keyprov@ietf.org; Mon, 09 Jul 2007 04:51:24 -0400 Received: (qmail 29983 invoked from network); 9 Jul 2007 10:51:19 +0200 Received: from 213-239-234-98.clients.your-server.de (HELO ?213.239.196.40?) (213.239.234.98) by v29431.1blu.de with SMTP; 9 Jul 2007 10:51:19 +0200 Content-Type: text/plain; charset=utf-8 To: keyprov@ietf.org From: Mingliang Pei Date: Mon, 09 Jul 2007 08:33:09 +0000 X-Roundup-Name: KEYPROV Roundup Issue Tracker X-Roundup-Loop: hello X-Roundup-Version: 0.8.2 MIME-Version: 1.0 Message-Id: <1183969989.44.0.369440714253.issue2@http://www.tschofenig.priv.at> Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-Scan-Signature: 68c8cc8a64a9d0402e43b8eee9fc4199 Subject: [KEYPROV] [issue2] Register PSKC container URI and refer to this in keyprov spec X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: KEYPROV Roundup Issue Tracker List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Mingliang Pei added the comment: New namespace has been used in later version of PSKC and DSKPP drafts v1.1. ---------- status: chatting -> testing _________________________________________________________ KEYPROV Roundup Issue Tracker _________________________________________________________ _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Mon Jul 09 04:52:59 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7ozL-0000bE-3g; Mon, 09 Jul 2007 04:52:59 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7ozJ-0000b8-Oj for keyprov@ietf.org; Mon, 09 Jul 2007 04:52:57 -0400 Received: from v29431.1blu.de ([88.84.142.131]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1I7ozF-0008CQ-AD for keyprov@ietf.org; Mon, 09 Jul 2007 04:52:57 -0400 Received: (qmail 30102 invoked from network); 9 Jul 2007 10:52:52 +0200 Received: from 213-239-234-98.clients.your-server.de (HELO ?213.239.196.40?) (213.239.234.98) by v29431.1blu.de with SMTP; 9 Jul 2007 10:52:52 +0200 Content-Type: text/plain; charset=utf-8 To: adoherty@rsa.com, keyprov@ietf.org From: Mingliang Pei Date: Mon, 09 Jul 2007 08:34:38 +0000 X-Roundup-Name: KEYPROV Roundup Issue Tracker X-Roundup-Loop: hello X-Roundup-Version: 0.8.2 MIME-Version: 1.0 Message-Id: <1183970078.3.0.872892643638.issue3@http://www.tschofenig.priv.at> Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-Scan-Signature: 68c8cc8a64a9d0402e43b8eee9fc4199 Cc: Subject: [KEYPROV] [issue3] Consistent definition about IDs between Keyprov and PSKC: TokenID, DeviceID, and KeyID X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: KEYPROV Roundup Issue Tracker List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Mingliang Pei added the comment: The changes have been adopted in the revised drafts. ---------- status: chatting -> in-progress _________________________________________________________ KEYPROV Roundup Issue Tracker _________________________________________________________ _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Mon Jul 09 04:54:48 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7p16-0002Nm-2L; Mon, 09 Jul 2007 04:54:48 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7p14-0002Nh-M8 for keyprov@ietf.org; Mon, 09 Jul 2007 04:54:46 -0400 Received: from v29431.1blu.de ([88.84.142.131]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1I7p10-0008FD-7e for keyprov@ietf.org; Mon, 09 Jul 2007 04:54:46 -0400 Received: (qmail 30257 invoked from network); 9 Jul 2007 10:54:41 +0200 Received: from 213-239-234-98.clients.your-server.de (HELO ?213.239.196.40?) (213.239.234.98) by v29431.1blu.de with SMTP; 9 Jul 2007 10:54:41 +0200 Content-Type: text/plain; charset=utf-8 To: keyprov@ietf.org From: Mingliang Pei Date: Mon, 09 Jul 2007 08:36:36 +0000 X-Roundup-Name: KEYPROV Roundup Issue Tracker X-Roundup-Loop: hello X-Roundup-Version: 0.8.2 MIME-Version: 1.0 Message-Id: <1183970196.85.0.399242240327.issue19@http://www.tschofenig.priv.at> Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-Scan-Signature: 856eb5f76e7a34990d1d457d8e8e5b7f Subject: [KEYPROV] [issue19] PSKC: clarify the key generation for HMAC value of a secret data when a PBE is used for encryption X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: KEYPROV Roundup Issue Tracker List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Mingliang Pei added the comment: PSKC has been updated to specify MAC key for the ValueDigest. It is recomme= nded=20 to be the same key as encryption key unless a separate key is specified. Wh= en=20 PBE is used, a separate password is recommended for MAC key derivation. Pen= ding=20 reviews. ---------- status: chatting -> testing _________________________________________________________ KEYPROV Roundup Issue Tracker _________________________________________________________ _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Mon Jul 09 11:18:27 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7v0K-00081W-I4; Mon, 09 Jul 2007 11:18:24 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7v04-0007u4-QP for keyprov@ietf.org; Mon, 09 Jul 2007 11:18:09 -0400 Received: from colibri.verisign.com ([65.205.251.74]) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1I7v01-0001sx-TP for keyprov@ietf.org; Mon, 09 Jul 2007 11:18:08 -0400 Received: from mou1wnexcn01.vcorp.ad.vrsn.com (mailer1.verisign.com [65.205.251.34]) by colibri.verisign.com (8.13.6/8.13.4) with ESMTP id l69FH1hp001529 for ; Mon, 9 Jul 2007 08:17:01 -0700 Received: from MOU1WNEXMB10.vcorp.ad.vrsn.com ([10.25.13.204]) by mou1wnexcn01.vcorp.ad.vrsn.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 9 Jul 2007 08:17:00 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----_=_NextPart_001_01C7C23C.32BC39CB" Date: Mon, 9 Jul 2007 08:16:59 -0700 Message-ID: <3E5A2F1AD44F5E49A74F79AB47C0C0C939F330@mou1wnexmb10.vcorp.ad.vrsn.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [Auto Response] I-D submission: Portal Symmetric Key Container v1.2 for KeyProv Thread-Index: AcfCF8H5roqi9T3eT+Sz0sEoRNv5sAAJE+nA From: "Pei, Mingliang" To: X-OriginalArrivalTime: 09 Jul 2007 15:17:00.0900 (UTC) FILETIME=[32C5D240:01C7C23C] X-Spam-Score: 0.0 (/) X-Scan-Signature: 4be2aa0b9b7503c00db3fcd56f952704 Subject: [KEYPROV] FW: [Auto Response] I-D submission: Portal Symmetric Key Container v1.2 for KeyProv X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org This is a multi-part message in MIME format. ------_=_NextPart_001_01C7C23C.32BC39CB Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable The latest PSKC I-D revision. - Ming -----Original Message----- From: Philip Hoyer [mailto:philip.hoyer@actividentity.com]=20 Sent: Monday, July 09, 2007 3:59 AM To: Pei, Mingliang Cc: Hallam-Baker, Phillip; Hannes Tschofenig Subject: FW: [Auto Response] I-D submission: Portal Symmetric Key Container v1.2 for KeyProv=20 I sumbmitted a -02. Have a look, Some additional changes to Ming's version, not major, Philip -----Original Message----- From: Internet Draft Submission Manager [mailto:internet-drafts-reply@ietf.org] Sent: 09 July 2007 11:54 To: Philip Hoyer Subject: [Auto Response] I-D submission: Portal Symmetric Key Container v1.2 for KeyProv=20 Greetings: This message is being sent to acknowledge receipt of your Internet-Draft submission or message to internet-drafts@ietf.org. Please note that the pre-meeting cutoff date for new documents (i.e., version -00 Internet-Drafts) was Monday, July 2 at 9:00 AM ET. Your submission was received after this time. The Internet-Drafts administrator will examine your submission, and the posting decision will be made as follows: * If you submitted a version -00 Internet-Draft before the cutoff deadline, then your document will be posted on the Internet-Drafts page of the IETF Web site as soon as possible, and an I-D Action message will be sent to the I-D Announce List. If your document was submitted before the cutoff deadline, but was rejected due to boilerplate or format issues, then the Internet-Drafts administrator will work with you to attempt to resolve these issues and post the document in time for the meeting.=20 * If you submitted a version -00 Internet-Draft after the cutoff deadline, then your document will NOT be processed until on or after Monday, July 23 at 9:00 AM ET, when Internet-Draft posting resumes. * If you submitted a version -01 or higher Internet-Draft, then your document will be posted on the Internet-Drafts page of the IETF Web site as soon as possible, and an I-D Action message will be sent to the I-D Announce List. As you may be aware, the pre-meeting cutoff date for updated submissions is Monday, July 9 at 9:00 AM ET. Since the Secretariat receives a large number of Internet-Drafts in the week preceding the cutoff date for updated submissions, your document may not be processed and announced for a number of days. Our goal is to process and announce all valid pre-meeting Internet-Draft submissions by Friday, July 13 at the latest. If you need to track the status of your Internet-Draft submission, then please send a note to ietf-action@ietf.org (using the suggested subject line Status of I-D Submission: ) and reference this auto-response acknowledgement in the body. Please note that all Internet-Drafts offered for publication as RFCs must conform to the requirements specified in the ID-Checklist (http://www.ietf.org/ID-Checklist.html) or they will be returned to the author(s) for revision. Therefore, the IETF Secretariat strongly recommends that you address all of the issues raised in this document before submitting a request to publish your Internet-Draft to the IESG. The IETF Secretariat ------_=_NextPart_001_01C7C23C.32BC39CB Content-Type: text/plain; name="draft-hoyer-keyprov-portable-symmetric-key-container-02.txt" Content-Transfer-Encoding: base64 Content-Description: draft-hoyer-keyprov-portable-symmetric-key-container-02.txt Content-Disposition: attachment; filename="draft-hoyer-keyprov-portable-symmetric-key-container-02.txt" DQoNCg0KTmV0d29yayBXb3JraW5nIEdyb3VwICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIFAuIEhveWVyDQpJbnRlcm5ldC1EcmFmdCAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIEFjdGl2SWRlbnRpdHkNCkludGVuZGVkIHN0YXR1czog U3RhbmRhcmRzIFRyYWNrICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIE0uIFBlaQ0K RXhwaXJlczogSmFudWFyeSAxMCwgMjAwOCAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIFZlcmlTaWduDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIFMuIE1hY2hhbmkNCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgRGl2ZXJzaW5ldA0KICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEEu IFZhc3NpbGV2DQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBBeGFsdG8NCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgSi4gTWFydGluc3Nvbg0KICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFBvcnRX aXNlDQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBKdWx5IDksIDIwMDcNCg0KDQogICAgICAgICAgICAgICAgICAgIFBvcnRhYmxlIFN5 bW1ldHJpYyBLZXkgQ29udGFpbmVyDQogICAgICBkcmFmdC1ob3llci1rZXlwcm92LXBvcnRhYmxl LXN5bW1ldHJpYy1rZXktY29udGFpbmVyLTAyLnR4dA0KDQpTdGF0dXMgb2YgdGhpcyBNZW1vDQoN CiAgIEJ5IHN1Ym1pdHRpbmcgdGhpcyBJbnRlcm5ldC1EcmFmdCwgZWFjaCBhdXRob3IgcmVwcmVz ZW50cyB0aGF0IGFueQ0KICAgYXBwbGljYWJsZSBwYXRlbnQgb3Igb3RoZXIgSVBSIGNsYWltcyBv ZiB3aGljaCBoZSBvciBzaGUgaXMgYXdhcmUNCiAgIGhhdmUgYmVlbiBvciB3aWxsIGJlIGRpc2Ns b3NlZCwgYW5kIGFueSBvZiB3aGljaCBoZSBvciBzaGUgYmVjb21lcw0KICAgYXdhcmUgd2lsbCBi ZSBkaXNjbG9zZWQsIGluIGFjY29yZGFuY2Ugd2l0aCBTZWN0aW9uIDYgb2YgQkNQIDc5Lg0KDQog ICBJbnRlcm5ldC1EcmFmdHMgYXJlIHdvcmtpbmcgZG9jdW1lbnRzIG9mIHRoZSBJbnRlcm5ldCBF bmdpbmVlcmluZw0KICAgVGFzayBGb3JjZSAoSUVURiksIGl0cyBhcmVhcywgYW5kIGl0cyB3b3Jr aW5nIGdyb3Vwcy4gIE5vdGUgdGhhdA0KICAgb3RoZXIgZ3JvdXBzIG1heSBhbHNvIGRpc3RyaWJ1 dGUgd29ya2luZyBkb2N1bWVudHMgYXMgSW50ZXJuZXQtDQogICBEcmFmdHMuDQoNCiAgIEludGVy bmV0LURyYWZ0cyBhcmUgZHJhZnQgZG9jdW1lbnRzIHZhbGlkIGZvciBhIG1heGltdW0gb2Ygc2l4 IG1vbnRocw0KICAgYW5kIG1heSBiZSB1cGRhdGVkLCByZXBsYWNlZCwgb3Igb2Jzb2xldGVkIGJ5 IG90aGVyIGRvY3VtZW50cyBhdCBhbnkNCiAgIHRpbWUuICBJdCBpcyBpbmFwcHJvcHJpYXRlIHRv IHVzZSBJbnRlcm5ldC1EcmFmdHMgYXMgcmVmZXJlbmNlDQogICBtYXRlcmlhbCBvciB0byBjaXRl IHRoZW0gb3RoZXIgdGhhbiBhcyAid29yayBpbiBwcm9ncmVzcy4iDQoNCiAgIFRoZSBsaXN0IG9m IGN1cnJlbnQgSW50ZXJuZXQtRHJhZnRzIGNhbiBiZSBhY2Nlc3NlZCBhdA0KICAgaHR0cDovL3d3 dy5pZXRmLm9yZy9pZXRmLzFpZC1hYnN0cmFjdHMudHh0Lg0KDQogICBUaGUgbGlzdCBvZiBJbnRl cm5ldC1EcmFmdCBTaGFkb3cgRGlyZWN0b3JpZXMgY2FuIGJlIGFjY2Vzc2VkIGF0DQogICBodHRw Oi8vd3d3LmlldGYub3JnL3NoYWRvdy5odG1sLg0KDQogICBUaGlzIEludGVybmV0LURyYWZ0IHdp bGwgZXhwaXJlIG9uIEphbnVhcnkgMTAsIDIwMDguDQoNCkNvcHlyaWdodCBOb3RpY2UNCg0KICAg Q29weXJpZ2h0IChDKSBUaGUgSUVURiBUcnVzdCAoMjAwNykuDQoNCg0KDQoNCg0KDQoNCkhveWVy LCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxMCwgMjAwOCAgICAgICAgICAgICAg ICBbUGFnZSAxXQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICBQb3J0YWJsZSBTeW1tZXRyaWMgS2V5 IENvbnRhaW5lciAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KQWJzdHJhY3QNCg0KICAgVGhpcyBk b2N1bWVudCBzcGVjaWZpZXMgYSBzeW1tZXRyaWMga2V5IGZvcm1hdCBmb3IgdHJhbnNwb3J0IGFu ZA0KICAgcHJvdmlzaW9uaW5nIG9mIHN5bW1ldHJpYyBrZXlzIChPbmUgVGltZSBQYXNzd29yZCAo T1RQKSBzaGFyZWQNCiAgIHNlY3JldHMgb3Igc3ltbWV0cmljIGNyeXB0b2dyYXBoaWMga2V5cykg dG8gZGlmZmVyZW50IHR5cGVzIG9mIHN0cm9uZw0KICAgYXV0aGVudGljYXRpb24gZGV2aWNlcy4g IFRoZSBzdGFuZGFyZCB0b2tlbiBmb3JtYXQgZW5hYmxlcw0KICAgZW50ZXJwcmlzZXMgdG8gZGVw bG95IGJlc3Qtb2YtYnJlZWQgc29sdXRpb25zIGNvbWJpbmluZyBjb21wb25lbnRzDQogICBmcm9t IGRpZmZlcmVudCB2ZW5kb3JzIGludG8gdGhlIHNhbWUgaW5mcmFzdHJ1Y3R1cmUuDQoNCiAgIFRo aXMgd29yayBpcyBhIGpvaW50IGVmZm9ydCBieSB0aGUgbWVtYmVycyBvZiBPQVRIIChJbml0aWF0 aXZlIGZvcg0KICAgT3BlbiBBdVRIZW50aWNhdGlvbikgdG8gc3BlY2lmeSBhIGZvcm1hdCB0aGF0 IGNhbiBiZSBmcmVlbHkNCiAgIGRpc3RyaWJ1dGVkIHRvIHRoZSB0ZWNobmljYWwgY29tbXVuaXR5 LiAgVGhlIGF1dGhvcnMgYmVsaWV2ZSB0aGF0IGENCiAgIGNvbW1vbiBhbmQgc2hhcmVkIHNwZWNp ZmljYXRpb24gd2lsbCBmYWNpbGl0YXRlIGFkb3B0aW9uIG9mIHR3by0NCiAgIGZhY3RvciBhdXRo ZW50aWNhdGlvbiBvbiB0aGUgSW50ZXJuZXQgYnkgZW5hYmxpbmcgaW50ZXJvcGVyYWJpbGl0eQ0K ICAgYmV0d2VlbiBjb21tZXJjaWFsIGFuZCBvcGVuLXNvdXJjZSBpbXBsZW1lbnRhdGlvbnMuDQoN Cg0KVGFibGUgb2YgQ29udGVudHMNCg0KICAgMS4gIEludHJvZHVjdGlvbiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA0DQogICAyLiAgQ29udmVudGlv bnMgdXNlZCBpbiB0aGlzIGRvY3VtZW50ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDUN CiAgIDMuICBVc2UgQ2FzZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAgNg0KICAgICAzLjEuICBPZmZsaW5lIFVzZSBDYXNlcyAgLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA2DQogICAgICAgMy4xLjEuICBDcmVkZW50 aWFsIG1pZ3JhdGlvbiBieSBlbmQtdXNlciAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDYNCiAgICAg ICAzLjEuMi4gIEJ1bGsgaW1wb3J0IG9mIG5ldyBjcmVkZW50aWFscyAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAgNg0KICAgICAgIDMuMS4zLiAgQnVsayBtaWdyYXRpb24gb2YgZXhpc3RpbmcgY3Jl ZGVudGlhbHMgLiAuIC4gLiAuIC4gLiAuICA2DQogICAgICAgMy4xLjQuICBDcmVkZW50aWFsIHVw bG9hZCBjYXNlIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gIDcNCiAgICAgMy4yLiAg T25saW5lIFVzZSBDYXNlcyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAgNw0KICAgICAgIDMuMi4xLiAgT25saW5lIHByb3Zpc2lvbmluZyBhIGNyZWRlbnRpYWwgdG8g ZW5kLXVzZXIncw0KICAgICAgICAgICAgICAgYXV0aGVudGljYXRpb24gdG9rZW4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA3DQogICAgICAgMy4yLjIuICBTZXJ2ZXIgdG8gc2Vy dmVyIHByb3Zpc2lvbmluZyBvZiBjcmVkZW50aWFscyAuIC4gLiAuIC4gIDgNCiAgICAgICAzLjIu My4gIE9ubGluZSB1cGRhdGUgb2YgYW4gZXhpc3RpbmcgYXV0aGVudGljYXRpb24gdG9rZW4NCiAg ICAgICAgICAgICAgIGNyZWRlbnRpYWwgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAgOA0KICAgNC4gIFJlcXVpcmVtZW50cyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuICA5DQogICA1LiAgU3ltbWV0cmljIEtleSBBdHRy aWJ1dGVzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTENCiAgICAgNS4x LiAgQ29tbW9uIEF0dHJpYnV0ZXMgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAxMQ0KICAgICAgIDUuMS4xLiAgRGF0YSAoT1BUSU9OQUwpICAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIDExDQogICAgICAgNS4xLjIuICBLZXlBbGdvcml0aG0gKE1B TkRBVE9SWSkgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTENCiAgICAgICA1LjEuMy4g IFVzYWdlIChNQU5EQVRPUlkpICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAx MQ0KICAgICAgIDUuMS40LiAgS2V5SWQgKE1BTkRBVE9SWSkgIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIDEyDQogICAgICAgNS4xLjUuICBJc3N1ZXIgKE1BTkRBVE9SWSkgLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTINCiAgICAgICA1LjEuNi4gIEZyaWVu ZGx5TmFtZSAoT1BUSU9OQUwpICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAxMg0KICAg ICAgIDUuMS43LiAgQWNjZXNzUnVsZXMgKE9QVElPTkFMKSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIDEyDQogICAgICAgNS4xLjguICBFbmNyeXB0aW9uTWV0aG9kIChNQU5EQVRPUlkg d2hlbiAnRGF0YScgYXR0cmlidXRlDQogICAgICAgICAgICAgICBpcyBlbmNyeXB0ZWQpKSAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTINCiAgICAgICA1LjEuOS4gIERp Z2VzdE1ldGhvZCAoTUFOREFUT1JZIHdoZW4gRGlnZXN0IGlzIHByZXNlbnQpICAuIC4gLiAxMw0K ICAgICAgIDUuMS4xMC4gT1RQIGFuZCBDUiBzcGVjaWZpYyBBdHRyaWJ1dGVzIChPUFRJT05BTCkg IC4gLiAuIC4gLiAuIDEzDQogICA2LiAgS2V5IGNvbnRhaW5lciBYTUwgc2NoZW1hIGRlZmluaXRp b25zIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTcNCg0KDQoNCkhveWVyLCBldCBhbC4gICAg ICAgICAgIEV4cGlyZXMgSmFudWFyeSAxMCwgMjAwOCAgICAgICAgICAgICAgICBbUGFnZSAyXQ0K DA0KSW50ZXJuZXQtRHJhZnQgICAgICBQb3J0YWJsZSBTeW1tZXRyaWMgS2V5IENvbnRhaW5lciAg ICAgICAgICAgSnVseSAyMDA3DQoNCg0KICAgICA2LjEuICBYTUwgU2NoZW1hIFR5cGVzIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDE3DQogICAgICAgNi4xLjEuICBL ZXlUeXBlICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMTgN CiAgICAgICA2LjEuMi4gIFVzYWdlVHlwZSAgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAyMA0KICAgICAgIDYuMS4zLiAgRGV2aWNlVHlwZSAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDIyDQogICAgICAgNi4xLjQuICBEZXZpY2VJ ZFR5cGUgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMjINCiAgICAg ICA2LjEuNS4gIFVzZXJUeXBlIFR5cGUgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAyMw0KICAgICAgIDYuMS42LiAgS2V5Q29udGFpbmVyVHlwZSAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDI0DQogICAgICAgNi4xLjcuICBFbmNyeXB0aW9uTWV0 aG9kVHlwZSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMjUNCiAgICAgICA2LjEu OC4gIERpZ2VzdE1ldGhvZFR5cGUgLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAyNw0KICAgICAgIDYuMS45LiAgQWxnb3JpdGhtSWRlbnRpZmllclR5cGUgIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIDI4DQogICAgIDYuMi4gIEVuY3J5cHRpb25BbGdvcml0aG1UeXBl ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMjgNCiAgICAgNi4zLiAgSGFzaEFs Z29yaXRobVR5cGUgIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAzMA0K ICAgICA2LjQuICBEaWdlc3RBbGdvcml0aG1UeXBlICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIDMwDQogICAgIDYuNS4gIEtleUFsZ29yaXRobVR5cGUgLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMzENCiAgICAgNi42LiAgdmFsdWVGb3JtYXQg IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAzMw0KICAgICA2 LjcuICBEYXRhIGVsZW1lbnRzICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IC4gLiAuIDMzDQogICAgICAgNi43LjEuICBLZXlDb250YWluZXIgLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gMzMNCiAgIDcuICBGb3JtYWwgU3ludGF4ICAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAzNQ0KICAgOC4gIFNlY3Vy aXR5IENvbnNpZGVyYXRpb25zICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAu IDQxDQogICAgIDguMS4gIFBheWxvYWQgY29uZmlkZW50aWFsaXR5ICAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gNDENCiAgICAgOC4yLiAgUGF5bG9hZCBpbnRlZ3JpdHkgIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiA0Mg0KICAgICA4LjMuICBQYXlsb2Fk IGF1dGhlbnRpY2l0eSAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDQyDQog ICA5LiAgQWNrbm93bGVkZ2VtZW50cyAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4g LiAuIC4gLiAuIC4gNDMNCiAgIDEwLiBBcHBlbmRpeCBBIC0gRXhhbXBsZSBTeW1tZXRyaWMgS2V5 IENvbnRhaW5lcnMgIC4gLiAuIC4gLiAuIC4gLiA0NA0KICAgICAxMC4xLiBTeW1tZXRyaWMgS2V5 IENvbnRhaW5lciB3aXRoIGEgc2luZ2xlIE5vbi1FbmNyeXB0ZWQNCiAgICAgICAgICAgSE9UUCBT ZWNyZXQgS2V5ICAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiA0NA0K ICAgICAxMC4yLiBTeW1tZXRyaWMgS2V5IENvbnRhaW5lciB3aXRoIGEgc2luZ2xlIFBhc3N3b3Jk LWJhc2VkDQogICAgICAgICAgIEVuY3J5cHRlZCBIT1RQIFNlY3JldCBLZXkgIC4gLiAuIC4gLiAu IC4gLiAuIC4gLiAuIC4gLiAuIC4gNDUNCiAgIDExLiBOb3JtYXRpdmUgUmVmZXJlbmNlcyAuIC4g LiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiA0Ng0KICAgQXV0aG9ycycgQWRk cmVzc2VzIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIC4gLiAuIDQ4 DQogICBJbnRlbGxlY3R1YWwgUHJvcGVydHkgYW5kIENvcHlyaWdodCBTdGF0ZW1lbnRzIC4gLiAu IC4gLiAuIC4gLiAuIC4gNTANCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQpIb3llciwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgMTAsIDIwMDggICAgICAg ICAgICAgICAgW1BhZ2UgM10NCgwNCkludGVybmV0LURyYWZ0ICAgICAgUG9ydGFibGUgU3ltbWV0 cmljIEtleSBDb250YWluZXIgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCjEuICBJbnRyb2R1Y3Rp b24NCg0KICAgV2l0aCBpbmNyZWFzaW5nIHVzZSBvZiBzeW1tZXRyaWMga2V5IGJhc2VkIGF1dGhl bnRpY2F0aW9uIHN5c3RlbXMNCiAgIHN1Y2ggYXMgc3lzdGVtcyBiYXNlZCBvbmUgdGltZSBwYXNz d29yZCAoT1RQKSBhbmQgY2hhbGxlbmdlIHJlc3BvbnNlDQogICBtZWNoYW5pc21zLCB0aGVyZSBp cyBhIG5lZWQgZm9yIHZlbmRvciBpbnRlcm9wZXJhYmlsaXR5IGFuZCBhDQogICBzdGFuZGFyZCBm b3JtYXQgZm9yIGltcG9ydGluZywgZXhwb3J0aW5nIG9yIHByb3Zpc2lvbmluZyBzeW1tZXRyaWMN CiAgIGtleSBiYXNlZCBjcmVkZW50aWFscyBmcm9tIG9uZSBzeXN0ZW0gdG8gYW5vdGhlci4gIFRy YWRpdGlvbmFsbHkNCiAgIGF1dGhlbnRpY2F0aW9uIHNlcnZlciB2ZW5kb3JzIGFuZCBzZXJ2aWNl IHByb3ZpZGVycyBoYXZlIHVzZWQNCiAgIHByb3ByaWV0YXJ5IGZvcm1hdHMgZm9yIGltcG9ydGlu ZywgZXhwb3J0aW5nIGFuZCBwcm92aXNpb25pbmcgdGhlc2UNCiAgIGNyZWRlbnRpYWxzIGludG8g dGhlaXIgc3lzdGVtcyBtYWtpbmcgaXQgaGFyZCB0byB1c2UgdG9rZW5zIGZyb20NCiAgIHZlbmRv ciBBIHdpdGggYSBzZXJ2ZXIgZnJvbSB2ZW5kb3IgQi4NCg0KICAgVGhpcyBJbnRlcm5ldCBkcmFm dCBkZXNjcmliZXMgYSBzdGFuZGFyZCBmb3JtYXQgZm9yIHNlcmlhbGl6aW5nDQogICBzeW1tZXRy aWMga2V5IGJhc2VkIGNyZWRlbnRpYWxzIHN1Y2ggYXMgT1RQIHNoYXJlZCBzZWNyZXRzIGZvciBz eXN0ZW0NCiAgIGltcG9ydCwgZXhwb3J0IG9yIG5ldHdvcmsvcHJvdG9jb2wgdHJhbnNwb3J0LiAg VGhlIGdvYWwgaXMgdGhhdCB0aGUNCiAgIGZvcm1hdCB3aWxsIGZhY2lsaXRhdGUgZHluYW1pYyBw cm92aXNpb25pbmcgYW5kIHRyYW5zZmVyIG9mIGENCiAgIHN5bW1ldHJpYyBrZXkgc3VjaCBhcyBh biBPVFAgc2hhcmVkIHNlY3JldCBvciBhbiBlbmNyeXB0aW9uIGtleSBvZg0KICAgZGlmZmVyZW50 IHR5cGVzLiAgSW4gdGhlIGNhc2Ugb2YgT1RQIHNoYXJlZCBzZWNyZXRzLCB0aGUgZm9ybWF0IHdp bGwNCiAgIGZhY2lsaXRhdGUgZHluYW1pYyBwcm92aXNpb25pbmcgdXNpbmcgYW4gT1RQIHByb3Zp c2lvbmluZyBwcm90b2NvbCB0bw0KICAgZGlmZmVyZW50IGZsYXZvcnMgb2YgZW1iZWRkZWQgdG9r ZW5zIGZvciBPVFAgY3JlZGVudGlhbHMgb3IgYWxsb3cNCiAgIGN1c3RvbWVycyB0byBpbXBvcnQg bmV3IG9yIGV4aXN0aW5nIHRva2VucyBpbiBiYXRjaCBvciBzaW5nbGUNCiAgIGluc3RhbmNlcyBp bnRvIGEgY29tcGxpYW50IHN5c3RlbS4NCg0KICAgVGhpcyBkcmFmdCBhbHNvIHNwZWNpZmllcyB0 aGUgdG9rZW4gYXR0cmlidXRlcyByZXF1aXJlZCBmb3INCiAgIGludGVyb3BlcmFiaWxpdHkgc3Vj aCBhcyB0aGUgaW5pdGlhbCBldmVudCBjb3VudGVyIHVzZWQgaW4gdGhlIEhPVFANCiAgIGFsZ29y aXRobSBbSE9UUF0uICBJdCBpcyBhbHNvIGFwcGxpY2FibGUgZm9yIG90aGVyIHRpbWUtYmFzZWQg b3INCiAgIHByb3ByaWV0YXJ5IGFsZ29yaXRobXMuDQoNCiAgIFRvIHByb3ZpZGUgYW4gYW5hbG9n eSwgaW4gcHVibGljIGtleSBlbnZpcm9ubWVudHMgdGhlIFBLQ1MjMTIgZm9ybWF0DQogICBbUEtD UzEyXSBpcyBjb21tb25seSB1c2VkIGZvciBpbXBvcnRpbmcgYW5kIGV4cG9ydGluZyBwcml2YXRl IGtleXMNCiAgIGFuZCBjZXJ0aWZpY2F0ZXMgYmV0d2VlbiBzeXN0ZW1zLiAgSW4gdGhlIGVudmly b25tZW50cyBvdXRsaW5lZCBpbg0KICAgdGhpcyBkb2N1bWVudCB3aGVyZSBPVFAgY3JlZGVudGlh bHMgbWF5IGJlIHRyYW5zcG9ydGVkIGRpcmVjdGx5IGRvd24NCiAgIHRvIHNtYXJ0Y2FyZHMgb3Ig ZGV2aWNlcyB3aXRoIGxpbWl0ZWQgY29tcHV0aW5nIGNhcGFiaWxpdGllcywgYQ0KICAgZm9ybWF0 IHdpdGggc21hbGwgKHNpemUgaW4gYnl0ZXMpIGFuZCBleHBsaWNpdCBzaGFyZWQgc2VjcmV0DQog ICBjb25maWd1cmF0aW9uIGF0dHJpYnV0ZSBpbmZvcm1hdGlvbiBpcyBkZXNpcmFibGUsIGF2b2Rp bmcgY29tcGxleGl0eQ0KICAgb2YgUEtDUyMxMi4gIEZvciBleGFtcGxlLCBvbmUgd291bGQgaGF2 ZSB0byB1c2Ugb3BhcXVlIGRhdGEgd2l0aGluDQogICBQS0NTIzEyIHRvIGNhcnJ5IHNoYXJlZCBz ZWNyZXQgYXR0cmlidXRlcyB1c2VkIGZvciBPVFAgY2FsY3VsYXRpb25zLA0KICAgd2hlcmVhcnMg YSBtb3JlIGV4cGxpY2l0IGF0dHJpYnV0ZSBzY2hlbWEgZGVmaW5pdGlvbiBpcyBiZXR0ZXIgZm9y DQogICBpbnRlcm9wZXJhdGlvbiBhbmQgZWZmaWNpZW5jeS4NCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCkhveWVyLCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxMCwgMjAwOCAgICAg ICAgICAgICAgICBbUGFnZSA0XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICBQb3J0YWJsZSBTeW1t ZXRyaWMgS2V5IENvbnRhaW5lciAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KMi4gIENvbnZlbnRp b25zIHVzZWQgaW4gdGhpcyBkb2N1bWVudA0KDQogICBUaGUga2V5IHdvcmRzICJNVVNUIiwgIk1V U1QgTk9UIiwgIlJFUVVJUkVEIiwgIlNIQUxMIiwgIlNIQUxMIE5PVCIsDQogICAiU0hPVUxEIiwg IlNIT1VMRCBOT1QiLCAiUkVDT01NRU5ERUQiLCAiTUFZIiwgYW5kICJPUFRJT05BTCIgaW4gdGhp cw0KICAgZG9jdW1lbnQgYXJlIHRvIGJlIGludGVycHJldGVkIGFzIGRlc2NyaWJlZCBpbiBbUkZD MjExOV0uDQoNCiAgIEluIGV4YW1wbGVzLCAiQzoiIGFuZCAiUzoiIGluZGljYXRlIGxpbmVzIHNl bnQgYnkgdGhlIGNsaWVudCBhbmQNCiAgIHNlcnZlciByZXNwZWN0aXZlbHkuDQoNCiAgIEluIHRo ZSB0ZXh0IGJlbG93LCBPVFAgcmVmZXJzIHRvIG9uZSB0aW1lIHBhc3N3b3JkLg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCkhveWVyLCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAx MCwgMjAwOCAgICAgICAgICAgICAgICBbUGFnZSA1XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICBQ b3J0YWJsZSBTeW1tZXRyaWMgS2V5IENvbnRhaW5lciAgICAgICAgICAgSnVseSAyMDA3DQoNCg0K My4gIFVzZSBDYXNlcw0KDQogICBUaGlzIHNlY3Rpb24gZGVzY3JpYmVzIGEgY29tcHJlaGVuc2l2 ZSBsaXN0IG9mIHVzZSBjYXNlcyB0aGF0DQogICBpbnNwaXJlZCB0aGUgZGV2ZWxvcG1lbnQgb2Yg dGhpcyBzcGVjaWZpY2F0aW9uLiAgVGhlc2UgcmVxdWlyZW1lbnRzDQogICB3ZXJlIHVzZWQgdG8g ZGVyaXZlIHRoZSBwcmltYXJ5IHJlcXVpcmVtZW50IHRoYXQgZHJvdmUgdGhlIGRlc2lnbi4NCiAg IFRoZXNlIHJlcXVpcmVtZW50cyBhcmUgY292ZXJlZCBpbiB0aGUgbmV4dCBzZWN0aW9uLg0KDQog ICBUaGVzZSB1c2UgY2FzZXMgYWxzbyBoZWxwIGluIHVuZGVyc3RhbmRpbmcgdGhlIGFwcGxpY2Fi aWxpdHkgb2YgdGhpcw0KICAgc3BlY2lmaWNhdGlvbiB0byByZWFsIHdvcmxkIHNpdHVhdGlvbnMu DQoNCjMuMS4gIE9mZmxpbmUgVXNlIENhc2VzDQoNCiAgIFRoaXMgc2VjdGlvbiBkZXNjcmliZXMg dGhlIHVzZSBjYXNlcyByZWxhdGluZyB0byBvZmZsaW5lIHRyYW5zcG9ydCBvZg0KICAgY3JlZGVu dGlhbHMgZnJvbSBvbmUgc3lzdGVtIHRvIGFub3RoZXIsIHVzaW5nIHNvbWUgZm9ybSBvZiBleHBv cnQgYW5kDQogICBpbXBvcnQgbW9kZWwuDQoNCjMuMS4xLiAgQ3JlZGVudGlhbCBtaWdyYXRpb24g YnkgZW5kLXVzZXINCg0KICAgQSB1c2VyIHdhbnRzIHRvIG1pZ3JhdGUgYSBjcmVkZW50aWFsIGZy b20gb25lIGF1dGhlbnRpY2F0aW9uIHRva2VuDQogICAoY29udGFpbmVyKSB0byBhIGRpZmZlcmVu dCBhdXRoZW50aWNhdGlvbiB0b2tlbi4gIEZvciBleGFtcGxlLCB0aGUNCiAgIGF1dGhlbnRpY2F0 aW9uIHRva2VucyBtYXkgYmUgc29mdCB0b2tlbnMgb24gdHdvIGRpZmZlcmVudCBzeXN0ZW1zDQog ICAoY29tcHV0ZXJzIG9yIG1vYmlsZSBwaG9uZXMpLiAgVGhlIHVzZXIgY2FuIGV4cG9ydCB0aGUg Y3JlZGVudGlhbCBpbg0KICAgYSBzdGFuZGFyZCBmb3JtYXQgZm9yIGltcG9ydCBpbnRvIHRoZSBv dGhlciBhdXRoZW50aWNhdGlvbiB0b2tlbi4NCg0KICAgVGhlIGtleSBwcm90ZWN0aW9uIG1lY2hh bmlzbSBtYXkgcmVseSBvbiBwYXNzd29yZC1iYXNlZCBlbmNyeXB0aW9uDQogICBmb3Igc29mdCB0 b2tlbnMsIGEgcHJlLXBsYWNlZCBoYXJkd2FyZS1wcm90ZWN0ZWQgdHJhbnNmZXIga2V5IHNoYXJl ZA0KICAgYmV0d2VlbiB0aGUgdHdvIHN5c3RlbXMgb3IgbWF5IGFsc28gcmVseSBvbiBhc3ltbWV0 cmljIGtleXMvIFBLSSBpZg0KICAgYXZhaWxhYmxlLg0KDQozLjEuMi4gIEJ1bGsgaW1wb3J0IG9m IG5ldyBjcmVkZW50aWFscw0KDQogICBUb2tlbnMgYXJlIG1hbnVmYWN0dXJlZCBpbiBidWxrIGFu ZCBhc3NvY2lhdGVkIGNyZWRlbnRpYWxzIChrZXkNCiAgIHJlY29yZHMpIG5lZWQgdG8gYmUgbG9h ZGVkIGludG8gdGhlIHZhbGlkYXRpb24gc3lzdGVtIHRocm91Z2ggYSBmaWxlDQogICBvbiBwb3J0 YWJsZSBtZWRpYS4gIFRoZSBtYW51ZmFjdHVyZXIgcHJvdmlkZXMgdGhlIGNyZWRlbnRpYWxzIGlu IHRoZQ0KICAgZm9ybSBvZiBhIGZpbGUgY29udGFpbmluZyByZWNvcmRzIGluIHN0YW5kYXJkIGZv cm1hdCwgdHlwaWNhbGx5IG9uIGENCiAgIENELiAgTm90ZSB0aGF0IHRoZSB0b2tlbiBtYW51ZmFj dHVyZXIgYW5kIHRoZSB2ZW5kb3IgZm9yIHRoZQ0KICAgdmFsaWRhdGlvbiBzeXN0ZW0gbWF5IGJl IHRoZSBzYW1lIG9yIGRpZmZlcmVudC4NCg0KICAgSW4gdGhpcyBjYXNlIHRoZSBmaWxlIHVzdWFs bHkgaXMgcHJvdGVjdGVkIGJ5IGEgc3ltbWV0cmljIHRyYW5zcG9ydA0KICAga2V5IHdoaWNoIHdh cyBjb21tdW5pY2F0ZWQgc2VwYXJhdGVseSBvdXRzaWRlIG9mIHRoZSBmaWxlIGJldHdlZW4gdGhl DQogICB0d28gcGFydGllcy4NCg0KMy4xLjMuICBCdWxrIG1pZ3JhdGlvbiBvZiBleGlzdGluZyBj cmVkZW50aWFscw0KDQogICBBbiBlbnRlcnByaXNlIHdhbnRzIHRvIHBvcnQgY3JlZGVudGlhbHMg ZnJvbSBhbiBleGlzdGluZyB2YWxpZGF0aW9uDQogICBzeXN0ZW0gQSBpbnRvIGEgZGlmZmVyZW50 IHZhbGlkYXRpb24gc3lzdGVtIEIuIFRoZSBleGlzdGluZw0KICAgdmFsaWRhdGlvbiBzeXN0ZW0g cHJvdmlkZXMgdGhlIGVudGVycHJpc2Ugd2l0aCBhIGZ1bmN0aW9uYWxpdHkgdGhhdA0KICAgZW5h YmxlcyBleHBvcnQgb2YgY3JlZGVudGlhbHMgKE9UUCB0b2tlbnMpIGluIGEgc3RhbmRhcmQgZm9y bWF0Lg0KDQoNCg0KSG95ZXIsIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDEwLCAy MDA4ICAgICAgICAgICAgICAgIFtQYWdlIDZdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICAgIFBvcnRh YmxlIFN5bW1ldHJpYyBLZXkgQ29udGFpbmVyICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQogICBT aW5jZSB0aGUgT1RQIHRva2VucyBhcmUgaW4gdGhlIHN0YW5kYXJkIGZvcm1hdCwgdGhlIGVudGVy cHJpc2UgY2FuDQogICBpbXBvcnQgdGhlIHRva2VuIHJlY29yZHMgaW50byB0aGUgbmV3IHZhbGlk YXRpb24gc3lzdGVtIEIgYW5kIHN0YXJ0DQogICB1c2luZyB0aGUgZXhpc3RpbmcgdG9rZW5zLiAg Tm90ZSB0aGF0IHRoZSB2ZW5kb3JzIGZvciB0aGUgdHdvDQogICB2YWxpZGF0aW9uIHN5c3RlbXMg bWF5IGJlIHRoZSBzYW1lIG9yIGRpZmZlcmVudC4NCg0KICAgSW4gdGhpcyBjYXNlIHRoZSBmaWxl IHVzdWFsbHkgaXMgcHJvdGVjdGVkIGJ5IGEgc3ltbWV0cmljIHRyYW5zcG9ydA0KICAga2V5IHdo aWNoIHdhcyBjb21tdW5pY2F0ZWQgc2VwYXJhdGVseSBvdXRzaWRlIG9mIHRoZSBmaWxlIGJldHdl ZW4gdGhlDQogICB0d28gdmFsaWRhdGlvbiBzeXN0ZW1zLg0KDQozLjEuNC4gIENyZWRlbnRpYWwg dXBsb2FkIGNhc2UNCg0KICAgVXNlciB3YW50cyB0byBhY3RpdmF0ZSBhbmQgdXNlIGEgbmV3IGNy ZWRlbnRpYWwgYWdhaW5zdCBhIHZhbGlkYXRpb24NCiAgIHN5c3RlbSB0aGF0IGlzIG5vdCBhd2Fy ZSBvZiB0aGlzIGNyZWRlbnRpYWwuICBUaGlzIGNyZWRlbnRpYWwgbWF5IGJlDQogICBlbWJlZGRl ZCBpbiB0aGUgYXV0aGVudGljYXRpb24gdG9rZW4gKGUuZy4gIFNEIGNhcmQsIFVTQiBkcml2ZSkg dGhhdA0KICAgdGhlIHVzZXIgaGFzIHB1cmNoYXNlZCBhdCB0aGUgbG9jYWwgZWxlY3Ryb25pY3Mg cmV0YWlsZXIuICBBbG9uZyB3aXRoDQogICB0aGUgYXV0aGVudGljYXRpb24gdG9rZW4sIHRoZSB1 c2VyIG1heSBnZXQgdGhlIGNyZWRlbnRpYWwgb24gYSBDRCBvcg0KICAgYSBmbG9wcHkgaW4gYSBz dGFuZGFyZCBmb3JtYXQuICBUaGUgdXNlciBjYW4gbm93IHVwbG9hZCB2aWEgYSBzZWN1cmUNCiAg IG9ubGluZSBjaGFubmVsIG9yIGltcG9ydCB0aGlzIGNyZWRlbnRpYWwgaW50byB0aGUgbmV3IHZh bGlkYXRpb24NCiAgIHN5c3RlbSBhbmQgc3RhcnQgdXNpbmcgdGhlIGNyZWRlbnRpYWwuDQoNCiAg IFRoZSBrZXkgcHJvdGVjdGlvbiBtZWNoYW5pc20gbWF5IHJlbHkgb24gcGFzc3dvcmQtYmFzZWQg ZW5jcnlwdGlvbiwNCiAgIG9yIGEgcHJlLXBsYWNlZCBoYXJkd2FyZS1wcm90ZWN0ZWQgdHJhbnNm ZXIga2V5IHNoYXJlZCBiZXR3ZWVuIHRoZQ0KICAgdG9rZW4gbWFudWZhY3R1cmVyIGFuZCB0aGUg dmFsaWRhdGlvbiBzeXN0ZW0ocykgaWYgYXZhaWxhYmxlLg0KDQozLjIuICBPbmxpbmUgVXNlIENh c2VzDQoNCiAgIFRoaXMgc2VjdGlvbiBkZXNjcmliZXMgdGhlIHVzZSBjYXNlcyByZWxhdGVkIHRv IHByb3Zpc2lvbmluZyB0aGUNCiAgIGNyZWRlbnRpYWxzIHVzaW5nIHNvbWUgZm9ybSBvZiBhIG9u bGluZSBwcm92aXNpb25pbmcgcHJvdG9jb2wuDQoNCjMuMi4xLiAgT25saW5lIHByb3Zpc2lvbmlu ZyBhIGNyZWRlbnRpYWwgdG8gZW5kLXVzZXIncyBhdXRoZW50aWNhdGlvbg0KICAgICAgICB0b2tl bg0KDQogICBBIG1vYmlsZSBkZXZpY2UgdXNlciB3YW50cyB0byBvYnRhaW4gYW4gT1RQIGNyZWRl bnRpYWwgKHNoYXJlZA0KICAgc2VjcmV0KSBmb3IgdXNlIHdpdGggYW4gT1RQIHNvZnQgdG9rZW4g b24gdGhlIGRldmljZS4gIFRoZSBzb2Z0IHRva2VuDQogICBjbGllbnQgZnJvbSB2ZW5kb3IgQSBp bml0aWF0ZXMgdGhlIHByb3Zpc2lvbmluZyBwcm9jZXNzIGFnYWluc3QgYQ0KICAgcHJvdmlzaW9u aW5nIHN5c3RlbSBmcm9tIHZlbmRvciBCIHVzaW5nIGEgc3RhbmRhcmRzLWJhc2VkDQogICBwcm92 aXNpb25pbmcgcHJvdG9jb2wgc3VjaCBhcyBbRFNLUFBdLiAgVGhlIHByb3Zpc2lvbmluZyBzeXN0 ZW0NCiAgIGRlbGl2ZXJzIGFuIE9UUCBjcmVkZW50aWFsIGluIGEgc3RhbmRhcmQgZm9ybWF0IHRo YXQgY2FuIGJlIHByb2Nlc3NlZA0KICAgYnkgdGhlIG1vYmlsZSBkZXZpY2UuICBUaGUgdXNlciBj YW4gZG93bmxvYWQgbW9yZSB0aGFuIG9uZSBjcmVkZW50aWFsDQogICBpbiBhIHNpbmdsZSBzZXNz aW9uIGlmIHRoZSBwcm92aXNpb25pbmcgc2VydmVyIGhvbGRzIG11bHRpcGxlDQogICBjcmVkZW50 aWFscyBmb3IgdGhhdCB1c2VyLg0KDQogICBJbiBhIHZhcmlhdGlvbiBvZiB0aGUgYWJvdmUsIGlu c3RlYWQgb2YgdGhlIHVzZXIncyBtb2JpbGUgcGhvbmUsIGENCiAgIGNyZWRlbnRpYWwgaXMgcHJv dmlzaW9uZWQgaW4gdGhlIHVzZXIncyBzb2Z0IHRva2VuIGFwcGxpY2F0aW9uIG9uIGENCiAgIGxh cHRvcCB1c2luZyBhIG5ldHdvcmstYmFzZWQgb25saW5lIHByb3RvY29sLiAgQXMgYmVmb3JlLCB0 aGUNCiAgIHByb3Zpc2lvbmluZyBzeXN0ZW0gZGVsaXZlcnMgYW4gT1RQIGNyZWRlbnRpYWwgaW4g YSBzdGFuZGFyZCBmb3JtYXQNCiAgIHRoYXQgY2FuIGJlIHByb2Nlc3NlZCBieSB0aGUgc29mdCB0 b2tlbiBvbiB0aGUgUEMuDQoNCg0KDQoNCkhveWVyLCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMg SmFudWFyeSAxMCwgMjAwOCAgICAgICAgICAgICAgICBbUGFnZSA3XQ0KDA0KSW50ZXJuZXQtRHJh ZnQgICAgICBQb3J0YWJsZSBTeW1tZXRyaWMgS2V5IENvbnRhaW5lciAgICAgICAgICAgSnVseSAy MDA3DQoNCg0KMy4yLjIuICBTZXJ2ZXIgdG8gc2VydmVyIHByb3Zpc2lvbmluZyBvZiBjcmVkZW50 aWFscw0KDQogICBTb21ldGltZXMsIGluc3RlYWQgb2YgaW1wb3J0aW5nIHRva2VuIGluZm9ybWF0 aW9uIGZyb20gbWFudWZhY3R1cmVyDQogICB1c2luZyBhIGZpbGUsIGFuIE9UUCB2YWxpZGF0aW9u IHNlcnZlciBtYXkgZG93bmxvYWQgdGhlIGNyZWRlbnRpYWwNCiAgIHNlZWQgcmVjb3JkcyB1c2lu ZyBhbiBvbmxpbmUgcHJvdG9jb2wuICBUaGUgY3JlZGVudGlhbHMgY2FuIGJlDQogICBkb3dubG9h ZGVkIGluIGEgc3RhbmRhcmQgZm9ybWF0IHRoYXQgY2FuIGJlIHByb2Nlc3NlZCBieSBhIHZhbGlk YXRpb24NCiAgIHN5c3RlbS4NCg0KICAgSW4gYW5vdGhlciBzY2VuYXJpbywgYW4gT1RBIChvdmVy LXRoZS1haXIpIGNyZWRlbnRpYWwgcHJvdmlzaW9uaW5nDQogICBnYXRld2F5IHRoYXQgcHJvdmlz aW9ucyBjcmVkZW50aWFscyB0byBtb2JpbGUgcGhvbmVzIG1heSBvYnRhaW4NCiAgIGNyZWRlbnRp YWxzIGZyb20gdGhlIGNyZWRlbnRpYWwgaXNzdWVyIHVzaW5nIGFuIG9ubGluZSBwcm90b2NvbC4g IFRoZQ0KICAgY3JlZGVudGlhbHMgYXJlIGRlbGl2ZXJlZCBpbiBhIHN0YW5kYXJkIGZvcm1hdCB0 aGF0IGNhbiBiZSBwcm9jZXNzZWQNCiAgIGJ5IHRoZSBPVEEgY3JlZGVudGlhbCBwcm92aXNpb25p bmcgZ2F0ZXdheSBhbmQgc3Vic2VxdWVudGx5IHNlbnQgdG8NCiAgIHRoZSBlbmQtdXNlcidzIG1v YmlsZSBwaG9uZS4NCg0KMy4yLjMuICBPbmxpbmUgdXBkYXRlIG9mIGFuIGV4aXN0aW5nIGF1dGhl bnRpY2F0aW9uIHRva2VuIGNyZWRlbnRpYWwNCg0KICAgVGhlIGVuZC11c2VyIG9yIHRoZSBjcmVk ZW50aWFsIGlzc3VlciB3YW50cyB0byB1cGRhdGUgb3IgY29uZmlndXJlIGFuDQogICBleGlzdGlu ZyBjcmVkZW50aWFsIGluIHRoZSBhdXRoZW50aWNhdGlvbiB0b2tlbiBhbmQgcmVxdWVzdHMgYQ0K ICAgcmVwbGFjZW1lbnQgY3JlZGVudGlhbCBjb250YWluZXIuICBUaGUgY29udGFpbmVyIG1heSBv ciBtYXkgbm90DQogICBpbmNsdWRlIGEgbmV3IHNlY3JldCBrZXkgYW5kIG1heSBpbmNsdWRlIG5l dyBvciB1cGRhdGVkIHNlY3JldCBrZXkNCiAgIGF0dHJpYnV0ZXMgc3VjaCBhcyBhIG5ldyBjb3Vu dGVyIHZhbHVlIGluIEhPVFAgY3JlZGVudGlhbCBjYXNlLCBhIG5ldw0KICAgbG9nbywgYSBtb2Rp ZmllZCByZXNwb25zZSBmb3JtYXQgb3IgbGVuZ3RoLCBhIG5ldyBmcmllbmRseSBuYW1lLCBldGMu DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN CkhveWVyLCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxMCwgMjAwOCAgICAgICAg ICAgICAgICBbUGFnZSA4XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICBQb3J0YWJsZSBTeW1tZXRy aWMgS2V5IENvbnRhaW5lciAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KNC4gIFJlcXVpcmVtZW50 cw0KDQogICBUaGlzIHNlY3Rpb24gb3V0bGluZXMgdGhlIG1vc3QgcmVsZXZhbnQgcmVxdWlyZW1l bnRzIHRoYXQgYXJlIHRoZQ0KICAgYmFzaXMgb2YgdGhpcyB3b3JrLiAgU2V2ZXJhbCBvZiB0aGUg cmVxdWlyZW1lbnRzIHdlcmUgZGVyaXZlZCBmcm9tDQogICB1c2UgY2FzZXMgZGVzY3JpYmVkIGFi b3ZlLg0KDQogICBSMTogICBUaGUgZm9ybWF0IE1VU1Qgc3VwcG9ydCB0cmFuc3BvcnQgb2YgbXVs dGlwbGUgdHlwZXMgb2YNCiAgICAgICAgIHN5bW1ldHJpYyBrZXkgY3JlZGVudGlhbHMgaW5jbHVk aW5nIEhPVFAsIG90aGVyIE9UUCwgY2hhbGxlbmdlLQ0KICAgICAgICAgcmVzcG9uc2UsIGV0Yy4N Cg0KICAgUjI6ICAgVGhlIGZvcm1hdCBNVVNUIGhhbmRsZSB0aGUgc3ltbWV0cmljIGtleSBpdHNl bGYgYXMgd2VsbCBvZg0KICAgICAgICAgYXR0cmlidXRlcyB0aGF0IGFyZSB0eXBpY2FsbHkgYXNz b2NpYXRlZCB3aXRoIHN5bW1ldHJpYyBrZXlzLg0KICAgICAgICAgU29tZSBvZiB0aGVzZSBhdHRy aWJ1dGVzIG1heSBiZQ0KDQogICAgICAgICAqICBVbmlxdWUgS2V5IElkZW50aWZpZXINCg0KICAg ICAgICAgKiAgSXNzdWVyIGluZm9ybWF0aW9uDQoNCiAgICAgICAgICogIEFsZ29yaXRobSBJRA0K DQogICAgICAgICAqICBBbGdvcml0aG0gbW9kZQ0KDQogICAgICAgICAqICBJc3N1ZXIgTmFtZQ0K DQogICAgICAgICAqICBJc3N1ZXIgbG9nbw0KDQogICAgICAgICAqICBDcmVkZW50aWFsIGZyaWVu ZGx5IG5hbWUNCg0KICAgICAgICAgKiAgRXZlbnQgY291bnRlciB2YWx1ZSAobW92aW5nIGZhY3Rv ciBmb3IgT1RQIGFsZ29yaXRobXMpDQoNCiAgICAgICAgICogIFRpbWUgdmFsdWUNCg0KICAgUjM6 ICAgVGhlIGZvcm1hdCBTSE9VTEQgc3VwcG9ydCBib3RoIG9mZmxpbmUgYW5kIG9ubGluZSBzY2Vu YXJpb3MuDQogICAgICAgICBUaGF0IGlzIGl0IHNob3VsZCBiZSBzZXJpYWxpemFibGUgdG8gYSBm aWxlIGFzIHdlbGwgYXMgaXQNCiAgICAgICAgIHNob3VsZCBiZSBwb3NzaWJsZSB0byB1c2UgdGhp cyBmb3JtYXQgaW4gb25saW5lIHByb3Zpc2lvbmluZw0KICAgICAgICAgcHJvdG9jb2xzDQoNCiAg IFI0OiAgIFRoZSBmb3JtYXQgU0hPVUxEIGFsbG93IGJ1bGsgcmVwcmVzZW50YXRpb24gb2Ygc3lt bWV0cmljIGtleQ0KICAgICAgICAgY3JlZGVudGlhbHMuDQoNCiAgIFI1OiAgIFRoZSBmb3JtYXQg U0hPVUxEIGJlIHBvcnRhYmxlIHRvIHZhcmlvdXMgcGxhdGZvcm1zLg0KICAgICAgICAgRnVydGhl cm1vcmUsIGl0IFNIT1VMRCBiZSBjb21wdXRhdGlvbmFsbHkgZWZmaWNpZW50IHRvIHByb2Nlc3Mu DQoNCiAgIFI2OiAgIFRoZSBmb3JtYXQgTVVTVCBwcm92aWRlIGFwcHJvcHJpYXRlIGxldmVsIG9m IHNlY3VyaXR5IGluIHRlcm1zDQogICAgICAgICBvZiBkYXRhIGVuY3J5cHRpb24gYW5kIGRhdGEg aW50ZWdyaXR5Lg0KDQoNCg0KDQoNCg0KSG95ZXIsIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBK YW51YXJ5IDEwLCAyMDA4ICAgICAgICAgICAgICAgIFtQYWdlIDldDQoMDQpJbnRlcm5ldC1EcmFm dCAgICAgIFBvcnRhYmxlIFN5bW1ldHJpYyBLZXkgQ29udGFpbmVyICAgICAgICAgICBKdWx5IDIw MDcNCg0KDQogICBSNzogICBGb3Igb25saW5lIHNjZW5hcmlvcyB0aGUgZm9ybWF0IFNIT1VMRCBO T1QgcmVseSBvbiB0cmFuc3BvcnQNCiAgICAgICAgIGxldmVsIHNlY3VyaXR5IChlLmcuLCBTU0wv VExTKSBmb3IgY29yZSBzZWN1cml0eSByZXF1aXJlbWVudHMuDQoNCiAgIFI4OiAgIFRoZSBmb3Jt YXQgU0hPVUxEIGJlIGV4dGVuc2libGUuICBJdCBTSE9VTEQgZW5hYmxlIGV4dGVuc2lvbg0KICAg ICAgICAgcG9pbnRzIGFsbG93aW5nIHZlbmRvcnMgdG8gc3BlY2lmeSBhZGRpdGlvbmFsIGF0dHJp YnV0ZXMgaW4gdGhlDQogICAgICAgICBmdXR1cmUuDQoNCiAgIFI5OiAgIFRoZSBmb3JtYXQgU0hP VUxEIGFsbG93IGZvciBkaXN0cmlidXRpb24gb2Yga2V5IGRlcml2YXRpb24gZGF0YQ0KICAgICAg ICAgd2l0aG91dCB0aGUgYWN0dWFsIHN5bW1ldHJpYyBrZXkgaXRzZWxmLiAgVGhpcyBpcyB0byBz dXBwb3J0DQogICAgICAgICBzeW1tZXRyaWMga2V5IG1hbmFnZW1lbnQgc2NoZW1lcyB0aGF0IHJl bHkgb24ga2V5IGRlcml2YXRpb24NCiAgICAgICAgIGFsZ29yaXRobXMgYmFzZWQgb24gYSBwcmUt cGxhY2VkIG1hc3RlciBrZXkuICBUaGUga2V5DQogICAgICAgICBkZXJpdmF0aW9uIGRhdGEgdHlw aWNhbGx5IGNvbnNpc3RzIG9mIGEgcmVmZXJlbmNlIHRvIHRoZSBrZXksDQogICAgICAgICByYXRo ZXIgdGhhbiB0aGUga2V5IHZhbHVlIGl0c2VsZi4NCg0KICAgUjEwOiAgVGhlIGZvcm1hdCBTSE9V TEQgYWxsb3cgZm9yIGFkZGl0aW9uYWwgbGlmZWN5Y2xlIG1hbmFnZW1lbnQNCiAgICAgICAgIG9w ZXJhdGlvbnMgc3VjaCBhcyBjb3VudGVyIHJlc3luY2hyb25pemF0aW9uLiAgU3VjaCBwcm9jZXNz ZXMNCiAgICAgICAgIHJlcXVpcmUgY29uZmlkZW50aWFsaXR5IGJldHdlZW4gY2xpZW50IGFuZCBz ZXJ2ZXIsIHRodXMgY291bGQNCiAgICAgICAgIHVzZSBhIGNvbW1vbiBzZWN1cmUgY29udGFpbmVy IGZvcm1hdCwgd2l0aG91dCB0aGUgdHJhbnNmZXIgb2YNCiAgICAgICAgIGtleSBtYXRlcmlhbC4N Cg0KICAgUjExOiAgVGhlIGZvcm1hdCBNVVNUIHN1cHBvcnQgdGhlIHVzZSBvZiBwcmUtc2hhcmVk IHN5bW1ldHJpYyBrZXlzIHRvDQogICAgICAgICBlbnN1cmUgY29uZmlkZW50aWFsaXR5IG9mIHNl bnNpdGl2ZSBkYXRhIGVsZW1lbnRzLg0KDQogICBSMTI6ICBUaGUgZm9ybWF0IE1VU1Qgc3VwcG9y dCBhIHBhc3N3b3JkLWJhc2VkIGVuY3J5cHRpb24gKFBCRSkNCiAgICAgICAgIFtQS0NTNV0gc2No ZW1lIHRvIGVuc3VyZSBzZWN1cml0eSBvZiBzZW5zaXRpdmUgZGF0YSBlbGVtZW50cy4NCiAgICAg ICAgIFRoaXMgaXMgYSB3aWRlbHkgdXNlZCBtZXRob2QgZm9yIHZhcmlvdXMgcHJvdmlzaW9uaW5n DQogICAgICAgICBzY2VuYXJpb3MuDQoNCiAgIFIxMzogIFRoZSBmb3JtYXQgU0hPVUxEIHN1cHBv cnQgYXN5bW1ldHJpYyBlbmNyeXB0aW9uIGFsZ29yaXRobXMgc3VjaA0KICAgICAgICAgYXMgUlNB IHRvIGVuc3VyZSBlbmQtdG8tZW5kIHNlY3VyaXR5IG9mIHNlbnNpdGl2ZSBkYXRhDQogICAgICAg ICBlbGVtZW50cy4gIFRoaXMgaXMgdG8gc3VwcG9ydCBzY2VuYXJpb3Mgd2hlcmUgYSBwcmUtc2V0 IHNoYXJlZA0KICAgICAgICAgZW5jcnlwdGlvbiBrZXkgaXMgZGlmZmljdWx0IHRvIHVzZS4NCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KSG95ZXIsIGV0IGFsLiAgICAgICAg ICAgRXhwaXJlcyBKYW51YXJ5IDEwLCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgMTBdDQoMDQpJ bnRlcm5ldC1EcmFmdCAgICAgIFBvcnRhYmxlIFN5bW1ldHJpYyBLZXkgQ29udGFpbmVyICAgICAg ICAgICBKdWx5IDIwMDcNCg0KDQo1LiAgU3ltbWV0cmljIEtleSBBdHRyaWJ1dGVzDQoNCiAgIFRo ZSBzeW1tZXRyaWMga2V5IGluY2x1ZGVzIGEgbnVtYmVyIG9mIGRhdGEgYXR0cmlidXRlcyB0aGF0 IGRlZmluZQ0KICAgdGhlIHR5cGUgb2YgdGhlIGtleSBpdHMgdXNhZ2UgYW5kIGFzc29jaWF0ZWQg bWV0YS1pbmZvcm1hdGlvbg0KICAgcmVxdWlyZWQgZHVyaW5nIHRoZSBwcm92aXNpb25pbmcsIGNv bmZpZ3VyYXRpb24sIGFjY2VzcyBvciB1c2FnZSBpbg0KICAgdGhlIGhvc3QgZGV2aWNlLg0KDQo1 LjEuICBDb21tb24gQXR0cmlidXRlcw0KDQo1LjEuMS4gIERhdGEgKE9QVElPTkFMKQ0KDQogICBE ZWZpbmVzIHRoZSBkYXRhIGF0dHJpYnV0ZXMgb2YgdGhlIHN5bW1ldHJpYyBrZXkuICBFYWNoIGlz IGEgbmFtZQ0KICAgdmFsdWUgcGFpciB3aGljaCBoYXMgYm90aCBhIGJhc2U2NCBlbmNvZGVkIHZh bHVlIGFuZCBhIGJhc2UgNjQNCiAgIGVuY29kZWQgdmFsdWVEaWdlc3QuICBUaGUgdmFsdWUgY2Fu IGJlIGVuY3J5cHRlZC4gIElmIHRoZSBjb250YWluZXINCiAgIGhhcyBiZWVuIGVuY3J5cHRlZCB0 aGUgdmFsdWVEaWdlc3QgTVVTVCBiZSBwb3B1bGF0ZWQgd2l0aCB0aGUgZGlnZXN0DQogICBvZiB0 aGUgdW5lbmNyeXB0ZWQgdmFsdWUuDQoNCiAgIFRoaXMgaXMgYWxzbyB3aGVyZSB0aGUga2V5IHZh bHVlIGlzIGhlbGQsIHRoZXJlZm9yZSB0aGUgZm9sbHdvaW5nDQogICBsaXN0IG9mIGF0dHJpYnV0 ZSBuYW1lcyBoYXZlIGJlZW4gcmVzZXJ2ZWQ6DQoNCiAgICAgIFNFQ1JFVDogdGhlIHNoYXJlZCBz ZWNyZXQga2V5IHZhbHVlIGluIGJpbmFyeSwgYmFzZTY0IGVuY29kZWQNCg0KICAgICAgQ09VTlRF UjogdGhlIGV2ZW50IGNvdW50ZXIgZm9yIGV2ZW50IGJhc2VkIE9UUCBhbGdvcml0aG1zLiA4IGJ5 dGVzDQogICAgICB1bnNpZ25lZCBpbnRlZ2VyIGluIGJpZyBlbmRpYW4gKGkuZS4gbmV0d29yayBi eXRlIG9yZGVyKSBmb3JtDQogICAgICBiYXNlNjQgZW5jb2RlZA0KDQogICAgICBUSU1FOiB0aGUg dGltZSBmb3IgdGltZSBiYXNlZCBPVFAgYWxnb3JpdGhtcy4gOCBieXRlcyB1bnNpZ25lZA0KICAg ICAgaW50ZWdlciBpbiBiaWcgZW5kaWFuIChpLmUuIG5ldHdvcmsgYnl0ZSBvcmRlcikgZm9ybSBi YXNlNjQNCiAgICAgIGVuY29kZWQgKE51bWJlciBvZiBzZWNvbmRzIHNpbmNlIDE5NzApDQoNCiAg ICAgIFRJTUVfSU5URVJWQUw6IHRoZSB0aW1lIGludGVydmFsIHZhbHVlIGZvciB0aW1lIGJhc2Vk IE9UUA0KICAgICAgYWxnb3JpdGhtcy4gOCBieXRlcyB1bnNpZ25lZCBpbnRlZ2VyIGluIGJpZyBl bmRpYW4gKGkuZS4gbmV0d29yaw0KICAgICAgYnl0ZSBvcmRlcikgZm9ybSBiYXNlNjQgZW5jb2Rl ZC4NCg0KNS4xLjIuICBLZXlBbGdvcml0aG0gKE1BTkRBVE9SWSkNCg0KICAgRGVmaW5lcyB0aGUg dHlwZSBvZiBhbGdvcml0aG0gb2YgdGhlIHNlY3JldCBrZXkgYW5kIE1VU1QgYmUgc2V0IHRvDQog ICBvbmUgb2YgdGhlIHZhbHVlcyBkZWZpbmVkIGluIFNlY3Rpb24gNi41LiAgSWYgJ09USEVSJyBp cyBzcGVjaWZpZWQgYW4NCiAgIGV4dGVuc2lvbiB2YWx1ZSBNVVNUIGJlIHNldCBpbiB0aGUgJ2V4 dC1LZXlBbGdvcml0aG0nIGF0dHJpYnV0ZS4NCg0KNS4xLjMuICBVc2FnZSAoTUFOREFUT1JZKQ0K DQogICBEZWZpbmVzIHRoZSBpbnRlbmRlZCB1c2FnZSBvZiB0aGUga2V5IGFuZCBpcyBhIGNvbWJp bmF0aW9uIG9mIG9uZSBvcg0KICAgbW9yZSBvZiB0aGUgZm9sbG93aW5nIChzZXQgdG8gdHJ1ZSk6 DQoNCg0KDQoNCg0KDQoNCkhveWVyLCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAx MCwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDExXQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICBQ b3J0YWJsZSBTeW1tZXRyaWMgS2V5IENvbnRhaW5lciAgICAgICAgICAgSnVseSAyMDA3DQoNCg0K ICAgICAgT1RQOiB0aGUga2V5IHdpbGwgYmUgdXNlZCBmb3IgT1RQIGdlbmVyYXRpb24NCg0KICAg ICAgQ1I6IHRoZSBrZXkgd2lsbCBiZSB1c2VkIGZvciBDaGFsbGVuZ2UvUmVzcG9uc2UgcHVycG9z ZXMNCg0KICAgICAgRU5DUllQVDogdGhlIGtleSB3aWxsIGJlIHVzZWQgZm9yIGRhdGEgZW5jcnlw dGlvbiBwdXJwb3Nlcw0KDQogICAgICBTSUdOOiB0aGUga2V5IHdpbGwgYmUgdXNlZCB0byBnZW5l cmF0ZSBhIHNpZ25hdHVyZSBvciBrZXllZA0KICAgICAgaGFzaGluZyBmb3IgZGF0YSBpbnRlZ3Jp dHkgb3IgYXV0aGVudGljYXRpb24gcHVycG9zZXMuDQoNCiAgICAgIFVOTE9DSzogdGhlIGtleSB3 aWxsIGJlIHVzZWQgZm9yIGFuIGludmVyc2UgY2hhbGxlbmdlIHJlc3BvbnNlIGluDQogICAgICB0 aGUgY2FzZSBhIHVzZXIgaGFzIGxvY2tlZCB0aGUgZGV2aWNlIGJ5IGVudGVyaW5nIGEgd3Jvbmcg UElOIHRvbw0KICAgICAgbWFueSB0aW1lcyAoZm9yIGRldmljZXMgd2l0aCBQSU4taW5wdXQgY2Fw YWJpbGl0eSkNCg0KICAgQWRkaXRpb25hbCBhdHRyaWJ1dGVzIHRoYXQgYXJlIHNwZWNpZmljIHRv IHRoZSB1c2FnZSB0eXBlIE1BWSBiZQ0KICAgcmVxdWlyZWQuICBTZWN0aW9uIDYuMSBkZXNjcmli ZXMgT1RQIGFuZCBDUiBzcGVjaWZpYyBhdHRyaWJ1dGVzLg0KDQo1LjEuNC4gIEtleUlkIChNQU5E QVRPUlkpDQoNCiAgIEEgdW5pcXVlIGFuZCBnbG9iYWwgaWRlbnRpZmllciBvZiB0aGUgc3ltbWV0 cmljIGtleS4gIFRoZSBpZGVudGlmaWVyDQogICBpcyBkZWZpbmVkIGFzIGEgc3RyaW5nIG9mIGFs cGhhbnVtZXJpYyBjaGFyYWN0ZXJzLg0KDQo1LjEuNS4gIElzc3VlciAoTUFOREFUT1JZKQ0KDQog ICBUaGUga2V5IGlzc3VlciBuYW1lLCB0aGlzIGlzIG5vcm1hbGx5IHRoZSBuYW1lIG9mIHRoZSBv cmdhbmlzYXRpb24NCiAgIHRoYXQgaXNzdWVzIHRoZSBrZXkgdG8gdGhlIGVuZCB1c2VyIG9mIHRo ZSBrZXkuICBGb3IgZXhhbXBsZSBNeUJhbmsNCiAgIGlzc3VpbmcgaGFyZHdhcmUgdG9rZW5zIHRv IHRoZWlyIHJldGFpbCBiYW5raW5nIHVzZXJzICdNeUJhbmsnIHdvdWxkDQogICBiZSB0aGUgaXNz dWVyLiAgVGhlIElzc3VlciBpcyBkZWZpbmVkIGFzIGEgU3RyaW5nLg0KDQo1LjEuNi4gIEZyaWVu ZGx5TmFtZSAoT1BUSU9OQUwpDQoNCiAgIFRoZSB1c2VyIGZyaWVuZGx5IG5hbWUgdGhhdCBpcyBh c3NpZ25lZCB0byB0aGUgc2VjcmV0IGtleSBmb3IgZWFzeQ0KICAgcmVmZXJlbmNlLiAgVGhlIEZy aWVuZGx5TmFtZSBpcyBkZWZpbmVkIGFzIGEgU3RyaW5nLg0KDQo1LjEuNy4gIEFjY2Vzc1J1bGVz IChPUFRJT05BTCkNCg0KICAgRGVmaW5lcyBhIHNldCBvZiBhY2Nlc3MgcnVsZXMgYW5kIHBvbGlj aWVzIGZvciB0aGUgcHJvdGVjdGlvbiBvZiB0aGUNCiAgIGtleSBvbiB0aGUgaG9zdCBEZXZpY2Uu ICBDdXJyZW50bHkgb25seSB0aGUgdXNlclBJTiBwb2xpY3kgaXMNCiAgIGRlZmluZWQuICBUaGUg dXNlclBJTiBwb2xpY3kgc3BlY2lmaWVzIHdoZXRoZXIgdGhlIHVzZXIgTVVTVCBlbnRlciBhDQog ICBQSU4gKGZvciBkZXZpY2VzIHdpdGggUElOIGlucHV0IGNhcGFiaWxpdHkpIGluIG9yZGVyIHRv IHVubG9jayBvcg0KICAgYXV0aGVudGljYXRlIHRvIHRoZSBkZXZpY2UgaG9zdGluZyB0aGUga2V5 IGNvbnRhaW5lci4gIFRoZSB1c2VyUElOIGlzDQogICBkZWZpbmVkIGFzIGEgQm9vbGVhbiAoVFJV RSBvciBGQUxTRSkuICBXaGVuIHRoZSB1c2VyIFBJTiBpcyByZXF1aXJlZCwNCiAgIHRoZSBwb2xp Y3kgTVVTVCBiZSBzZXQgdG8gVFJVRS4gIElmIHRoZSB1c2VyUElOIGlzIE5PVCBwcm92aWRlZCwN CiAgIGltcGxlbWVudGF0aW9ucyBTSEFMTCBkZWZhdWx0IHRoZSB2YWx1ZSB0byBGQUxTRS4NCg0K NS4xLjguICBFbmNyeXB0aW9uTWV0aG9kIChNQU5EQVRPUlkgd2hlbiAnRGF0YScgYXR0cmlidXRl IGlzIGVuY3J5cHRlZCkpDQoNCiAgIElkZW50aWZpZXMgdGhlIGVuY3J5cHRpb24gYWxnb3JpdGht IGFuZCBwb3NzaWJsZSBwYXJhbWV0ZXJzIHVzZWQgdG8NCiAgIHByb3RlY3QgdGhlIFNlY3JldCBL ZXkgZGF0YSBpbiB0aGUgY29udGFpbmVyIGFuZCBNVVNUIGJlIHNldCB0byBvbmUNCg0KDQoNCkhv eWVyLCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxMCwgMjAwOCAgICAgICAgICAg ICAgIFtQYWdlIDEyXQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICBQb3J0YWJsZSBTeW1tZXRyaWMg S2V5IENvbnRhaW5lciAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KICAgb2YgdGhlIHZhbHVlcyBk ZWZpbmVkIGluIFNlY3Rpb24gNi4yLiAgSWYgJ09USEVSJyBpcyBzcGVjaWZpZWQgYW4NCiAgIGV4 dGVuc2lvbiB2YWx1ZSBNVVNUIGJlIHNldCBpbiB0aGUgJ2V4dC1hbGdvcml0aG0nIGF0dHJpYnV0 ZS4NCg0KICAgV2hlbiB0aGUgdmFsdWUgaXMgc2V0IHRvIE5PTkUsIGltcGxlbWVudGF0aW9ucyBT SEFMTCBlbnN1cmUgdGhlDQogICBwcml2YWN5IG9mIHRoZSBrZXkgZGF0YSB0aHJvdWdoIG90aGVy IHN0YW5kYXJkIG1lY2hhbmlzbXMgZS5nLg0KICAgdHJhbnNwb3J0IGxldmVsIGVuY3J5cHRpb24u DQoNCiAgIFdoZW4gdGhlIEtleUNvbnRhaW5lciBjb250YWlucyBtb3JlIHRoYW4gb25lIGtleSBh bmQgRW5jcnlwdGlvbk1ldGhvZA0KICAgaXMgZGlmZmVyZW50IGZyb20gTk9ORSwgdGhlIHNhbWUg ZW5jcnlwdGlvbiBrZXkgTVVTVCBiZSB1c2VkIHRvDQogICBlbmNyeXB0IGFsbCB0aGUga2V5IGRh dGEgZWxlbWVudHMgaW4gdGhlIGNvbnRhaW5lci4NCg0KNS4xLjkuICBEaWdlc3RNZXRob2QgKE1B TkRBVE9SWSB3aGVuIERpZ2VzdCBpcyBwcmVzZW50KQ0KDQogICBJZGVudGlmaWVzIHRoZSBhbGdv cml0aG0gYW5kIHBvc3NpYmxlIHBhcmFtZXRlcnMgdXNlZCB0byBnZW5lcmF0ZSBhDQogICBkaWdl c3Qgb2YgdGhlIHRoZSBTZWNyZXQgS2V5IGRhdGEuICBUaGUgZGlnZXN0IGd1YXJhbnRlZXMgdGhl DQogICBpbnRlZ3JpdHkgYW5kIHRoZSBhdXRoZW50aWNpdHkgb2YgdGhlIGtleSBkYXRhLiAgVGhl IERpZ2VzdCBhbGdvcml0aG0NCiAgIE1VU1QgYmUgc2V0IHRvIG9uZSBvZiB0aGUgdmFsdWVzIGRl ZmluZWQgaW4gU2VjdGlvbiA2LjQuICBJZiAnT1RIRVInDQogICBpcyBzcGVjaWZpZWQgYW4gZXh0 ZW5zaW9uIHZhbHVlIE1VU1QgYmUgc2V0IGluIHRoZSAnZXh0LWFsZ29yaXRobScNCiAgIGF0dHJp YnV0ZS4NCg0KICAgU2VlIFNlY3Rpb24gNi4xLjggZm9yIG1vcmUgaW5mb3JtYXRpb24gb24gRGln ZXN0IGRhdGEgdmFsdWUgdHlwZS4NCg0KNS4xLjEwLiAgT1RQIGFuZCBDUiBzcGVjaWZpYyBBdHRy aWJ1dGVzIChPUFRJT05BTCkNCg0KICAgV2hlbiB0aGUga2V5IHVzYWdlIGlzIHNldCB0byBPVFAg b3IgQ1IsIGFkZGl0aW9uYWwgYXR0cmlidXRlcyBNVVNUIGJlDQogICBwcm92aWRlZCB0byBzdXBw b3J0IHRoZSBPVFAgYW5kL29yIHRoZSByZXNwb25zZSBjb21wdXRhdGlvbiBhcw0KICAgcmVxdWly ZWQgYnkgdGhlIHVuZGVybHlpbmcgYWxnb3JpdGhtIGFuZCB0byBjdXN0b21pemUgb3IgY29uZmln dXJlDQogICB0aGUgb3V0Y29tZSBvZiB0aGUgY29tcHV0YXRpb24gKGZvcm1hdCwgbGVuZ3RoIGFu ZCB1c2FnZSBtb2RlcykuDQoNCjUuMS4xMC4xLiAgQ2hhbGxlbmdlRm9ybWF0IChNQU5EQVRPUlkp DQoNCiAgIFRoZSBDaGFsbGVuZ2VGb3JtYXQgYXR0cmlidXRlIGRlZmluZXMgdGhlIGNoYXJhY3Rl cmlzdGljcyBvZiB0aGUNCiAgIGNoYWxsZW5nZSBpbiBhIENSIHVzYWdlIHNjZW5hcmlvLiAgVGhl IENoYWxsZW5nZSBhdHRyaWJ1dGUgaXMgZGVmaW5lZA0KICAgYnkgdGhlIGZvbGxvd2luZyBzdWIt YXR0cmlidXRlczoNCg0KICAgMS4gIEZvcm1hdCAoTUFOREFUT1JZKQ0KDQogICAgICAgICAgRGVm aW5lcyB0aGUgZm9ybWF0IG9mIHRoZSBjaGFsbGVuZ2UgYWNjZXB0ZWQgYnkgdGhlIGRldmljZSBh bmQNCiAgICAgICAgICBNVVNUIGJlIG9uZSBvZiB0aGUgdmFsdWVzIGRlZmluZWQgaW4gU2VjdGlv biA2LjYNCg0KICAgMi4gIENoZWNrRGlnaXQgKE9QVElPTkFMKQ0KDQogICAgICAgICAgRGVmaW5l cyBpZiB0aGUgZGV2aWNlIG5lZWRzIHRvIGNoZWNrIHRoZSBhcHBlbmRlZCBMdWhuIGNoZWNrDQog ICAgICAgICAgZGlnaXQgY29udGFpbmVkIGluIGEgcHJvdmlkZWQgY2hhbGxlbmdlLiAgVGhpcyBp cyBvbmx5IHZhbGlkDQogICAgICAgICAgaWYgdGhlIEZvcm1hdCBhdHRyaWJ1dGUgaXMnREVDSU1B TCcuICBWYWx1ZSBNVVNUIGJlOg0KDQoNCg0KDQoNCg0KSG95ZXIsIGV0IGFsLiAgICAgICAgICAg RXhwaXJlcyBKYW51YXJ5IDEwLCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgMTNdDQoMDQpJbnRl cm5ldC1EcmFmdCAgICAgIFBvcnRhYmxlIFN5bW1ldHJpYyBLZXkgQ29udGFpbmVyICAgICAgICAg ICBKdWx5IDIwMDcNCg0KDQogICAgICAgICAgICAgVFJVRSBkZXZpY2Ugd2lsbCBjaGVjayB0aGUg YXBwZW5kZWQgTHVobiBjaGVjayBkaWdpdCBpbiBhDQogICAgICAgICAgICAgcHJvdmlkZWQgY2hh bGxlbmdlDQoNCiAgICAgICAgICAgICBGQUxTRSBkZXZpY2Ugd2lsbCBub3QgY2hlY2sgYXBwZW5k ZWQgTHVobiBjaGVjayBkaWdpdCBpbg0KICAgICAgICAgICAgIGNoYWxsZW5nZQ0KDQogICAzLiAg TWluIChNQU5EQVRPUlkpDQoNCiAgICAgICAgICBEZWZpbmVzIHRoZSBtaW5pbXVtIHNpemUgb2Yg dGhlIGNoYWxsZW5nZSBhY2NlcHRlZCBieSB0aGUNCiAgICAgICAgICBkZXZpY2UgZm9yIENSIG1v ZGUuDQoNCiAgICAgICAgICBJZiB0aGUgRm9ybWF0IGF0dHJpYnV0ZSBpcyAnREVDSU1BTCcsJ0hF WEFERUNJTUFMJyBvcg0KICAgICAgICAgICdBTFBIQU5VTUVSSUMnIHRoaXMgdmFsdWUgaW5kaWNh dGVzIHRoZSBtaW5pbXVtIG51bWJlciBvZg0KICAgICAgICAgIGRpZ2l0cy9jaGFyYWN0ZXJzLg0K DQogICAgICAgICAgSWYgdGhlIEZvcm1hdCBhdHRyaWJ1dGUgaXMgJ0JBU0U2NCcgb3IgJ0JJTkFS WScsIHRoaXMgdmFsdWUNCiAgICAgICAgICBpbmRpY2F0ZXMgdGhlIG1pbmltdW0gbnVtYmVyIG9m IGJ5dGVzIG9mIHRoZSB1bmVuY29kZWQgdmFsdWUuDQoNCiAgICAgICAgICBWYWx1ZSBNVVNUIGJl Og0KDQoNCg0KICAgICAgICAgICAgIFVuc2lnbmVkIGludGVnZXIuDQoNCiAgIDQuICBNYXggKE1B TkRBVE9SWSkNCg0KICAgICAgICAgIERlZmluZXMgdGhlIG1heGltdW0gc2l6ZSBvZiB0aGUgY2hh bGxlbmdlIGFjY2VwdGVkIGJ5IHRoZQ0KICAgICAgICAgIGRldmljZSBmb3IgQ1IgbW9kZS4NCg0K ICAgICAgICAgIElmIHRoZSBGb3JtYXQgYXR0cmlidXRlIGlzICdERUNJTUFMJywnSEVYQURFQ0lN QUwnIG9yDQogICAgICAgICAgJ0FMUEhBTlVNRVJJQycgdGhpcyB2YWx1ZSBpbmRpY2F0ZXMgdGhl IG1heGltdW0gbnVtYmVyIG9mDQogICAgICAgICAgZGlnaXRzL2NoYXJhY3RlcnMuDQoNCiAgICAg ICAgICBJZiB0aGUgRm9ybWF0IGF0dHJpYnV0ZSBpcyAnQkFTRTY0JyBvciAnQklOQVJZJywgdGhp cyB2YWx1ZQ0KICAgICAgICAgIGluZGljYXRlcyB0aGUgbWF4aW11bSBudW1iZXIgb2YgYnl0ZXMg b2YgdGhlIHVuZW5jb2RlZCB2YWx1ZS4NCg0KICAgICAgICAgIFZhbHVlIE1VU1QgYmU6DQoNCg0K DQogICAgICAgICAgICAgVW5zaWduZWQgaW50ZWdlci4NCg0KNS4xLjEwLjIuICBSZXNwb25zZUZv cm1hdCAoTUFOREFUT1JZKQ0KDQogICBUaGUgUmVzcG9uc2VGb3JtYXQgYXR0cmlidXRlIGRlZmlu ZXMgdGhlIGNoYXJhY3RlcmlzdGljcyBvZiB0aGUNCiAgIHJlc3VsdCBvZiBhIGNvbXB1dGF0aW9u LiAgVGhpcyBkZWZpbmVzIHRoZSBmb3JtYXQgb2YgdGhlIE9UUCBvciBvZg0KICAgdGhlIHJlc3Bv bnNlIHRvIGEgY2hhbGxlbmdlLiAgVGhlIFJlc3BvbnNlIGF0dHJpYnV0ZSBpcyBkZWZpbmVkIGJ5 DQogICB0aGUgZm9sbG93aW5nIHN1Yi1hdHRyaWJ1dGVzOg0KDQoNCg0KSG95ZXIsIGV0IGFsLiAg ICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDEwLCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgMTRd DQoMDQpJbnRlcm5ldC1EcmFmdCAgICAgIFBvcnRhYmxlIFN5bW1ldHJpYyBLZXkgQ29udGFpbmVy ICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQogICAxLiAgRm9ybWF0IChNQU5EQVRPUlkpDQoNCiAg ICAgICAgICBEZWZpbmVzIHRoZSBmb3JtYXQgb2YgdGhlIHJlc3BvbnNlIGdlbmVyYXRlZCBieSB0 aGUgZGV2aWNlIGFuZA0KICAgICAgICAgIE1VU1QgYmUgb25lIG9mIHRoZSB2YWx1ZXMgZGVmaW5l ZCBpbiBTZWN0aW9uIDYuNg0KDQogICAyLiAgQ2hlY2tEaWdpdCAoT1BUSU9OQUwpDQoNCiAgICAg ICAgICBEZWZpbmVzIGlmIHRoZSBkZXZpY2UgbmVlZHMgdG8gYXBwZW5kIGEgTHVobiBjaGVjayBk aWdpdCB0bw0KICAgICAgICAgIHRoZSByZXNwb25zZS4gIFRoaXMgaXMgb25seSB2YWxpZCBpZiB0 aGUgRm9ybWF0IGF0dHJpYnV0ZQ0KICAgICAgICAgIGlzJ0RFQ0lNQUwnLiAgVmFsdWUgTVVTVCBi ZToNCg0KICAgICAgICAgICAgIFRSVUUgZGV2aWNlIHdpbGwgYXBwZW5kIGEgTHVobiBjaGVjayBk aWdpdCB0byB0aGUgcmVzcG9uc2UuDQoNCiAgICAgICAgICAgICBGQUxTRSBkZXZpY2Ugd2lsbCBu b3QgYXBwZW5kIGEgTHVobiBjaGVjayBkaWdpdCB0byB0aGUNCiAgICAgICAgICAgICByZXNwb25z ZS4NCg0KICAgMy4gIExlbmd0aCAoTUFOREFUT1JZKQ0KDQogICAgICAgICAgRGVmaW5lcyB0aGUg bGVuZ3RoIG9mIHRoZSByZXNwb25zZSBnZW5lcmF0ZWQgYnkgdGhlIGRldmljZS4NCg0KICAgICAg ICAgIElmIHRoZSBGb3JtYXQgYXR0cmlidXRlIGlzICdERUNJTUFMJywnSEVYQURFQ0lNQUwnIG9y DQogICAgICAgICAgJ0FMUEhBTlVNRVJJQycgdGhpcyB2YWx1ZSBpbmRpY2F0ZXMgdGhlIG51bWJl ciBvZiBkaWdpdHMvDQogICAgICAgICAgY2hhcmFjdGVycy4NCg0KICAgICAgICAgIElmIHRoZSBG b3JtYXQgYXR0cmlidXRlIGlzICdCQVNFNjQnIG9yICdCSU5BUlknLCB0aGlzIHZhbHVlDQogICAg ICAgICAgaW5kaWNhdGVzIHRoZSBudW1iZXIgb2YgYnl0ZXMgb2YgdGhlIHVuZW5jb2RlZCB2YWx1 ZS4NCg0KICAgICAgICAgIFZhbHVlIE1VU1QgYmU6DQoNCg0KDQogICAgICAgICAgICAgVW5zaWdu ZWQgaW50ZWdlci4NCg0KNS4xLjEwLjMuICBBcHBQcm9maWxlSWQgKE9QVElPTkFMKQ0KDQogICBE ZWZpbmVzIHRoZSBhcHBsaWNhdGlvbiBwcm9maWxlIGlkIHJlbGF0ZWQgdG8gYXR0cmlidXRlcyBw cmVzZW50IG9uIGENCiAgIHNtYXJ0IGNhcmQgdGhhdCBoYXZlIGluZmx1ZW5jZSB3aGVuIGNvbXB1 dGluZyBhIHJlc3BvbnNlLiAgQW4gZXhhbXBsZQ0KICAgY291bGQgYmUgYW4gRU1WIE1hc3RlckNh cmQgQ0FQIFtDQVBdIGFwcGxpY2F0aW9uIG9uIGEgY2FyZCB0aGF0DQogICBjb250YWlucyBhdHRy aWJ1dGVzIG9yIHVzZXMgZml4ZWQgZGF0YSBmb3IgYSBzcGVjaWZpYyBiYXRjaCBvZiBjYXJkcw0K ICAgc3VjaCBhczoNCg0KICAgICAgSUFGIEludGVybmV0IGF1dGhlbnRpY2F0aW9uIGZsYWcNCg0K ICAgICAgQ1ZOIENyeXB0b2dyYW0gdmVyc2lvbiBudW1iZXIsIGZvciBleGFtcGxlIChNQ0hJUDIs IE1DSElQNCwgVklTQQ0KICAgICAgMTMsIFZJU0ExNCkNCg0KDQoNCg0KDQoNCkhveWVyLCBldCBh bC4gICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxMCwgMjAwOCAgICAgICAgICAgICAgIFtQYWdl IDE1XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICBQb3J0YWJsZSBTeW1tZXRyaWMgS2V5IENvbnRh aW5lciAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KICAgICAgQUlQIChBcHBsaWNhdGlvbiBJbnRl cmNoYW5nZSBQcm9maWxlKSwgMiBieXRlcw0KDQogICAgICBUVlIgVGVybWluYWwgVmVyaWZpY2F0 aW9uIFJlc3VsdCwgNSBieXRlcw0KDQogICAgICBDVlIgVGhlIGNhcmQgdmVyaWZpY2F0aW9uIHJl c3VsdA0KDQogICAgICBBbW91bnRPdGhlcg0KDQogICAgICBUcmFuc2FjdGlvbkRhdGUNCg0KICAg ICAgVGVybWluYWxDb3VudHJ5Q29kZQ0KDQogICAgICBUcmFuc2FjdGlvbkN1cnJlbmN5Q29kZQ0K DQogICAgICBBbW91bnRBdXRob3Jpc2VkDQoNCiAgICAgIElJUEINCg0KICAgVGhlc2UgdmFsdWVz IGFyZSBub3QgY29udGFpbmVkIHdpdGhpbiBhdHRyaWJ1dGVzIGluIHRoZSBjb250YWluZXIgYnV0 DQogICBhcmUgc2hhcmVkIGJldHdlZW4gdGhlIG1hbnVmYWN0dXJpbmcgYW5kIHRoZSB2YWxpZGF0 aW9uIHNlcnZpY2UNCiAgIHRocm91Z2ggdGhpcyB1bmlxdWUgQXBwUHJvZmlsZUlkLg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KSG95 ZXIsIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDEwLCAyMDA4ICAgICAgICAgICAg ICAgW1BhZ2UgMTZdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICAgIFBvcnRhYmxlIFN5bW1ldHJpYyBL ZXkgQ29udGFpbmVyICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQo2LiAgS2V5IGNvbnRhaW5lciBY TUwgc2NoZW1hIGRlZmluaXRpb25zDQoNCiAgIFRoZSBwb3J0YWJsZSBrZXkgY29udGFpbmVyIGlz IGRlZmluZWQgYnkgdGhlIGZvbGxvd2luZyBlbnRpdGllczoNCg0KICAgMS4gIEtleUNvbnRhaW5l ciBlbnRpdHkNCg0KICAgMi4gIERldmljZSBlbnRpdHkNCg0KICAgMy4gIEtleSBlbnRpdHkNCg0K ICAgNC4gIFVzZXIgZW50aXR5DQoNCiAgIEEgS2V5Q29udGFpbmVyIE1BWSBjb250YWluIG9uZSBv ciBtb3JlIERldmljZSBlbnRpdGllcy4gIEEgRGV2aWNlIE1BWQ0KICAgY29udGFpbiBvbmUgb3Ig bW9yZSBLZXkgZW50aXRpZXMgYW5kIG1heSBiZSBhc3NvY2lhdGVkIHRvIG9uZSBvciBtb3JlDQog ICBVc2VyIGVudGl0aWVzLg0KDQogICBUaGUgZmlndXJlIGJlbG93IGluZGljYXRlcyBhIHBvc3Np YmxlIHJlbGF0aW9uc2hpcCBkaWFncmFtIG9mIGENCiAgIGNvbnRhaW5lci4NCg0KICAgLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiAgIHwgS2V5Q29udGFpbmVy ICAgICAgICAgICAgICAgICAgICAgICAgICB8DQogICB8ICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgfA0KICAgfCAgLS0tLS0tLS0tLS0tLS0tLS0gICAgLS0tLS0tLS0t LS0tLS0tLS0gIHwNCiAgIHwgIHwgRGV2aWNlIDEgICAgICAgfCAgIHwgRGV2aWNlIG4gICAgICB8 ICB8DQogICB8ICB8ICAgICAgICAgICAgICAgIHwgICB8ICAgICAgICAgICAgICAgfCAgfA0KICAg fCAgfCAgLS0tLS0tLS0tLS0gICB8ICAgfCAgLS0tLS0tLS0tLS0gIHwgIHwNCiAgIHwgIHwgIHwg S2V5IDEgICAgfCAgfCAgIHwgfCBLZXkgbiAgICB8ICB8ICB8DQogICB8ICB8ICAtLS0tLS0tLS0t LSAgIHwgICB8ICAtLS0tLS0tLS0tLSAgfCAgfA0KICAgfCAgfCAgICAgfCAgIHwgICAgICB8ICAg fCB8ICAgICAgICAgICAgIHwgIHwNCiAgIHwgIHwgICAgIHwgICB8ICAgICAgfCAgIHwgfCAgICAg ICAgICAgICB8ICB8DQogICB8ICB8ICAtLS0tLS0tLS0tLSAgIHwgICB8ICAtLS0tLS0tLS0tLSAg fCAgfA0KICAgfCAgfCAgfCBLZXkgbSAgICB8ICB8ICAgfCB8IEtleSBwICAgIHwgIHwgIHwNCiAg IHwgIHwgIC0tLS0tLS0tLS0tICAgfCAgIHwgIC0tLS0tLS0tLS0tICB8ICB8DQogICB8ICAtLS0t LS0tLS0tLS0tLS0tLSAgICAtLS0tLS0tLS0tLS0tLS0tLSAgfA0KICAgfCAgICAgIHwgICAgICAg ICAgICAgICAgICB8ICAgICAgICB8ICAgICAgIHwNCiAgIHwgICAgICB8ICAgICAgICAgICAgICAg ICAgfCAgICAgICAgfCAgICAgICB8DQogICB8ICAtLS0tLS0tLS0gICAgICAgICAtLS0tLS0tLS0g IC0tLS0tLS0tLSAgfA0KICAgfCAgfCBVc2VyIDEgfCAgICAgICAgfCBVc2VyIDEgfCB8IFVzZXIg biB8IHwNCiAgIHwgIC0tLS0tLS0tLSAgICAgICAgIC0tLS0tLS0tLSAgLS0tLS0tLS0tICB8DQog ICB8ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgfA0KICAgLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCg0KNi4xLiAgWE1MIFNjaGVt YSBUeXBlcw0KDQogICBUaGUgZm9sbG93aW5nIHR5cGVzIGFyZSBkZWZpbmVkIHRvIHJlcHJlc2Vu dCB0aGUgcG9ydGFibGUga2V5DQogICBjb250YWluZXIgZW50aXRpZXMgYW5kIGFzc29jaWF0ZWQg YXR0cmlidXRlcy4NCg0KDQoNCg0KDQpIb3llciwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIEph bnVhcnkgMTAsIDIwMDggICAgICAgICAgICAgICBbUGFnZSAxN10NCgwNCkludGVybmV0LURyYWZ0 ICAgICAgUG9ydGFibGUgU3ltbWV0cmljIEtleSBDb250YWluZXIgICAgICAgICAgIEp1bHkgMjAw Nw0KDQoNCjYuMS4xLiAgS2V5VHlwZQ0KDQogICBUaGUgS2V5VHlwZSByZXByZXNlbnRzIHRoZSBr ZXkgZW50aXR5IGluIHRoZSBLZXlDb250YWluZXIuICBUaGUNCiAgIEtleVR5cGUgaXMgZGVmaW5l ZCBhcyBmb2xsb3dzOg0KDQoNCiAgIDxjb21wbGV4VHlwZSBuYW1lPSJLZXlUeXBlIj4NCiAgICAg PHNlcXVlbmNlPg0KICAgICAgICA8ZWxlbWVudCBuYW1lPSJJc3N1ZXIiIHR5cGU9InN0cmluZyIv Pg0KICAgICAgICA8ZWxlbWVudCBuYW1lPSJVc2FnZSIgdHlwZT0icHNrYzpVc2FnZVR5cGUiLz4N CiAgICAgICAgPGVsZW1lbnQgbmFtZT0iRnJpZW5kbHlOYW1lIiB0eXBlPSJzdHJpbmciIG1pbk9j Y3Vycz0iMCIvPg0KICAgICAgICA8ZWxlbWVudCBuYW1lPSJEYXRhIiB0eXBlPSJwc2tjOkRhdGFU eXBlIiBtaW5PY2N1cnM9IjAiDQogICAgICAgIG1heE9jY3Vycz0idW5ib3VuZGVkIi8+DQogICAg ICAgIDxlbGVtZW50IG5hbWU9IkFjY2Vzc1J1bGVzIiBtaW5PY2N1cnM9IjAiPg0KICAgICAgICAg ICA8Y29tcGxleFR5cGU+DQogICAgICAgICAgICAgPHNpbXBsZUNvbnRlbnQ+DQogICAgICAgICAg ICAgPGV4dGVuc2lvbiBiYXNlPSJzdHJpbmciPg0KICAgICAgICAgICAgICAgPGF0dHJpYnV0ZSBu YW1lPSJ1c2VyUElOIiB0eXBlPSJib29sZWFuIiB1c2U9Im9wdGlvbmFsIg0KICAgICAgICAgICAg ICAgZGVmYXVsdD0iZmFsc2UiLz4NCiAgICAgICAgICAgICA8L2V4dGVuc2lvbj4NCiAgICAgICAg ICAgIDwvc2ltcGxlQ29udGVudD4NCiAgICAgICAgICAgPC9jb21wbGV4VHlwZT4NCiAgICAgICAg PC9lbGVtZW50Pg0KICAgICAgICA8ZWxlbWVudCBuYW1lPSJMb2dvIiB0eXBlPSJsb2dvOkxvZ29U eXBlIiBtaW5PY2N1cnM9IjAiLz4NCiAgICAgICAgPGVsZW1lbnQgbmFtZT0iRXhwaXJ5IiB0eXBl PSJzdHJpbmciIG1pbk9jY3Vycz0iMCIvPg0KICAgICA8L3NlcXVlbmNlPg0KICAgICA8YXR0cmli dXRlIG5hbWU9IktleUlkIiB0eXBlPSJzdHJpbmciIHVzZT0icmVxdWlyZWQiLz4NCiAgICAgPGF0 dHJpYnV0ZSBuYW1lPSJLZXlBbGdvcml0aG0iIHR5cGU9DQogICAgICJwc2tjOktleUFsZ29yaXRo bVR5cGUiIHVzZT0icmVxdWlyZWQiLz4NCiAgICAgPGF0dHJpYnV0ZSBuYW1lPSJleHQtS2V5QWxn b3JpdGhtIiB0eXBlPSJzdHJpbmciLz4NCiAgIDwvY29tcGxleFR5cGU+DQoNCiAgIFRoZSBjb21w b25lbnRzIG9mIHRoZSBLZXlUeXBlIGhhdmUgdGhlIGZvbGxvd2luZyBtZWFuaW5ncyAoc2VlDQog ICBTZWN0aW9uIDUgZm9yIGZ1cnRoZXIgaW5mb3JtYXRpb24pOg0KDQogICBvICA8VXNhZ2U+IG9m IHR5cGUgVXNhZ2VUeXBlIGRlZmluZXMgdGhlIHVzYWdlIG9mIHRoZSBTZWNyZXQgS2V5LiBUaGUN CiAgICAgIFVzYWdlIGF0dHJpYnV0ZSBpcyBkZXNjcmliZWQgaW4gU2VjdGlvbiA1LjEuMy4NCg0K ICAgbyAgPElzc3Vlcj4gaWRlbnRpZmllcyB0aGUgaXNzdWVyIG9mIHRoZSBTZWNyZXQgS2V5LiBU aGUgSXNzdWVyDQogICAgICBhdHRyaWJ1dGUgaXMgZGVzY3JpYmVkIGluIFNlY3Rpb24gNS4xLjUu DQoNCiAgIG8gIDxGcmllbmRseU5hbWU+IGlzIGEgdXNlciBmcmllbmRseSBuYW1lIHRoYXQgaXMg YXNzaWduZWQgdG8gdGhlDQogICAgICBTZWNyZXQgS2V5IGZvciBlYXN5IHJlZmVyZW5jZS4NCg0K ICAgbyAgPERhdGE+IGNvbnZleXMgdGhlIGRhdGEgYXR0cmlidXRlcyAoZWcgdGhlIFNlY3JldCBL ZXkpIGluIG5hbWUNCiAgICAgIChzdHJpbmcpIHZhbHVlIChiYXNlNjQgZW5jb2RlZCkgcGFpcnMu ICBUaGUgdmFsdWUgY2FuIGJlDQogICAgICBlbmNyeXB0ZWQsIGluIHRoaXMgY2FzZSBhIGRpZ2Vz dCBvZiB0aGUgbm9uLWVuY3J5cHRlZCBkYXRhIGlzDQogICAgICBwcmVzZW50LiAgVGhlIDxEYXRh PiBjb21wb25lbnQgaXMgZnVydGhlciBkZXNjcmliZWQgYmVsb3cuDQoNCg0KDQpIb3llciwgZXQg YWwuICAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgMTAsIDIwMDggICAgICAgICAgICAgICBbUGFn ZSAxOF0NCgwNCkludGVybmV0LURyYWZ0ICAgICAgUG9ydGFibGUgU3ltbWV0cmljIEtleSBDb250 YWluZXIgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgIG8gIDxBY2Nlc3NSdWxlcz4gRGVmaW5l cyB0aGUgcnVsZXMgZm9yIGFjY2Vzc2luZyB0aGUgY3JlZGVudGlhbCBvbg0KICAgICAgdGhlIGRl dmljZSBlLmcuIGEgcGFzc3dvcmQgbXVzdCBiZSBwcm92aWRlZCBieSB0aGUgdXNlciB0byB2aWV3 DQogICAgICBjcmVkZW50aWFsIGluZm8gb3IgdXNlIHRoZSBjcmVkZW50aWFsIHRvIGdlbmVyYXRl IGFuIE9UUCByZXNwb25zZQ0KDQogICBvICBLZXlJZCBpcyBhIGdsb2JhbCBpZGVudGlmaWVyIG9m IHRoZSBTZWNyZXQgS2V5LiBTZWUgU2VjdGlvbiA1LjEuNC4NCg0KICAgbyAgS2V5QWxnb3JpdGht IGRlZmluZXMgdGhlIGFsZ29yaXRobSB1c2VkIHdpdGggdGhlIFNlY3JldCBLZXkuIFRoZQ0KICAg ICAgdHlwZSB2YWx1ZXMgYXJlIGRlZmluZWQgaW4gU2VjdGlvbiA2LjUuICBJZiAnT1RIRVInIGlz IHNwZWNpZmllZA0KICAgICAgYW4gZXh0ZW5zaW9uIHZhbHVlIE1VU1QgYmUgc2V0IGluIHRoZSAn ZXh0LUtleUFsZ29yaXRobScNCiAgICAgIGF0dHJpYnV0ZS4NCg0KICAgbyAgZXh0LUtleUFsZ29y aXRobSBpcyB0aGUgZXh0ZW5zaW9uIHBvaW50IGZvciBLZXlBbGdvcml0aG1zIG5vdA0KICAgICAg YWxyZWFkeSBkZWZpbmVkIFNlY3Rpb24gNi41DQoNCiAgIG8gIExvZ28gb2YgdHlwZSBMb2dvVHlw ZSBhc3NvY2lhdGVzIGRpc3BsYXkgbG9nb3Mgd2l0aCB0aGlzIFNlY3JldA0KICAgICAgS2V5DQoN CiAgIG8gIEV4cGlyeSBkZWZpbmVzIHRoZSBleHBpcnkgZGF0ZSBvZiB0aGUgU2VjcmV0IEtleSBp biBmb3JtYXQgREQvTU0vDQogICAgICBZWVlZDQoNCiAgIFRoZSA8RGF0YT4gZWxlbWVudCBpcyBv ZiB0eXBlIDxEYXRhVHlwZT4gYW5kIGlzIGRlZmluZWQgYXMgZm9sbG93czoNCg0KDQogICA8Y29t cGxleFR5cGUgbmFtZT0iRGF0YVR5cGUiPg0KICAgICA8c2VxdWVuY2U+DQogICAgICAgPGVsZW1l bnQgbmFtZT0iVmFsdWUiIHR5cGU9ImJhc2U2NEJpbmFyeSIvPg0KICAgICAgIDxlbGVtZW50IG5h bWU9IlZhbHVlRGlnZXN0IiB0eXBlPSJiYXNlNjRCaW5hcnkiIG1pbk9jY3Vycz0iMCIvPg0KICAg ICAgIDxhdHRyaWJ1dGUgbmFtZT0iTmFtZSIgdHlwZT0ic3RyaW5nIiB1c2U9InJlcXVpcmVkIi8+ DQogICAgIDwvc2VxdWVuY2U+DQogICA8L2NvbXBsZXhUeXBlPg0KDQogICBUaGUgJ05hbWUnIGF0 dHJpYnV0ZSBkZWZpbmVzIHRoZSBuYW1lIG9mIHRoZSBuYW1lLXZhbHVlIHBhaXIsIHRoZQ0KICAg Zm9sbHdvaW5nIGxpc3Qgb2YgYXR0cmlidXRlIG5hbWVzIGhhdmUgYmVlbiByZXNlcnZlZDoNCg0K ICAgICAgU0VDUkVUOiB0aGUga2V5IGtleSB2YWx1ZSBpbiBiaW5hcnksIGJhc2U2NCBlbmNvZGVk DQoNCiAgICAgIENPVU5URVI6IHRoZSBldmVudCBjb3VudGVyIGZvciBldmVudCBiYXNlZCBPVFAg YWxnb3JpdGhtcy4gOCBieXRlcw0KICAgICAgdW5zaWduZWQgaW50ZWdlciBpbiBiaWcgZW5kaWFu IChpLmUuIG5ldHdvcmsgYnl0ZSBvcmRlcikgZm9ybQ0KICAgICAgYmFzZTY0IGVuY29kZWQNCg0K ICAgICAgVElNRTogdGhlIHRpbWUgZm9yIHRpbWUgYmFzZWQgT1RQIGFsZ29yaXRobXMuIDggYnl0 ZXMgdW5zaWduZWQNCiAgICAgIGludGVnZXIgaW4gYmlnIGVuZGlhbiAoaS5lLiBuZXR3b3JrIGJ5 dGUgb3JkZXIpIGZvcm0gYmFzZTY0DQogICAgICBlbmNvZGVkIChOdW1iZXIgb2Ygc2Vjb25kcyBz aW5jZSAxOTcwKQ0KDQogICAgICBUSU1FX0lOVEVSVkFMOiB0aGUgdGltZSBpbnRlcnZhbCB2YWx1 ZSBmb3IgdGltZSBiYXNlZCBPVFANCiAgICAgIGFsZ29yaXRobXMuIDggYnl0ZXMgdW5zaWduZWQg aW50ZWdlciBpbiBiaWcgZW5kaWFuIChpLmUuIG5ldHdvcmsNCiAgICAgIGJ5dGUgb3JkZXIpIGZv cm0gYmFzZTY0IGVuY29kZWQuDQoNCg0KDQoNCkhveWVyLCBldCBhbC4gICAgICAgICAgIEV4cGly ZXMgSmFudWFyeSAxMCwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDE5XQ0KDA0KSW50ZXJuZXQt RHJhZnQgICAgICBQb3J0YWJsZSBTeW1tZXRyaWMgS2V5IENvbnRhaW5lciAgICAgICAgICAgSnVs eSAyMDA3DQoNCg0KICAgVGhlIDxWYWx1ZT4gZWxlbWVudCBpbiB0aGUgRGF0YVR5cGUgY29udmV5 cyB0aGUgdmFsdWUgb2YgdGhlIG5hbWUtDQogICB2YWx1ZSBwYWlyIGluIGJhc2UgNjQgZW5jb2Rp bmcuICBUaGUgdmFsdWUgTUFZIGJlIGVuY3J5cHRlZCBvciBpbg0KICAgY2xlYXIgdGV4dCBhcyBw ZXIgdGhlIEVuY3J5cHRpb25NZXRob2QgZGF0YSBlbGVtZW50IGluIHRoZQ0KICAgS2V5Q29udGFp bmVyIChzZWUgU2VjdGlvbiA2LjEuNiBmb3IgZGV0YWlscyBhYm91dCBLZXlDb250YWluZXJUeXBl KS4NCiAgIFdoZW4gdGhlIHZhbHVlIGlzIGVuY3J5cHRlZCwgdGhlIGRpZ2VzdCB2YWx1ZSBpbiAn VmFsdWVEaWdlc3QnIE1VU1QNCiAgIGJlIHByb3ZpZGVkLiAgVGhlIGRpZ2VzdCBNVVNUIGJlIGNh bGN1bGF0ZWQgb24gdGhlIHVuZW5jcnlwdGVkIHZhbHVlDQogICBhbmQgTVVTVCB1c2Ugb25lIG9m IHRoZSBEaWdlc3QgYWxnb3JpdGhtcyBzcGVjaWZpZWQgaW4NCiAgIERpZ2VzdE1ldGhvZFR5cGUg ZWxlbWVudCBvZiB0aGUgS2V5Q29udGFpbmVyLiAgVGhlIE1BQyBrZXkgZm9yIHRoZQ0KICAgTUFD IGNhbGN1bGF0aW9uIHNob3VsZCB1c2UgdGhlIHNhbWUga2V5IGFzIHRoZSBlbmNyeXB0aW9uIGtl eQ0KICAgc3BlY2lmaWVkIGluIHRoZSBFbmNyeXB0aW9uTWV0aG9kIHVubGVzcyBhIHNlcGFyYXRl IE1BQyBrZXkgaXMNCiAgIHNwZWNpZmllZC4gIFdoZW4gUEJFIG1ldGhvZCBpcyB1c2VkIGZvciBl bmNyeXB0aW9uLCBhIGRpZmZlcmVudA0KICAgcGFzc3dvcmQgaXMgcmVjb21tZW5kZWQgZm9yIHRo ZSBNQUMga2V5IGRlcml2YXRpb24uICBXaGVuIHRoZSBrZXkNCiAgIGRhdGEgaXMgaW4gY2xlYXIg dGV4dCwgdGhlIEtleUNvbnRhaW5lciBwYXlsb2FkIHNpZ25hdHVyZSBNQVkgYmUgdXNlZA0KICAg dG8gY2hlY2sgdGhlIGludGVncml0eSBvZiB0aGUga2V5IG9jdGV0cy4NCg0KNi4xLjIuICBVc2Fn ZVR5cGUNCg0KICAgVGhlIFVzYWdlVHlwZSBkZWZpbmVzIHRoZSB1c2FnZSBhdHRyaWJ1dGUgb2Yg dGhlIGtleSBlbnRpdHkuICBUaGUNCiAgIFVzYWdlVHlwZSBpcyBkZWZpbmVkIGFzIGZvbGxvd3M6 DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KSG95ZXIsIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDEwLCAyMDA4 ICAgICAgICAgICAgICAgW1BhZ2UgMjBdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICAgIFBvcnRhYmxl IFN5bW1ldHJpYyBLZXkgQ29udGFpbmVyICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQogICA8Y29t cGxleFR5cGUgbmFtZT0iVXNhZ2VUeXBlIj4NCiAgICAgPHNlcXVlbmNlPg0KICAgICAgIDxlbGVt ZW50IG5hbWU9IkFsZ29yaXRobUlkZW50aWZpZXIiDQogICAgICAgdHlwZT0icHNrYzpBbGdvcml0 aG1JZGVudGlmaWVyVHlwZSIgbWluT2NjdXJzPSIwIi8+DQogICAgICAgPGVsZW1lbnQgbmFtZT0i UmVzcG9uc2VGb3JtYXQiPg0KICAgICAgICAgPGNvbXBsZXhUeXBlPg0KICAgICAgICAgICA8YXR0 cmlidXRlIG5hbWU9ImZvcm1hdCIgdHlwZT0icHNrYzp2YWx1ZUZvcm1hdCINCiAgICAgICAgICAg dXNlPSJyZXF1aXJlZCIvPg0KICAgICAgICAgICA8YXR0cmlidXRlIG5hbWU9Imxlbmd0aCIgdHlw ZT0idW5zaWduZWRJbnQiDQogICAgICAgICAgIHVzZT0icmVxdWlyZWQiLz4NCiAgICAgICAgICAg PGF0dHJpYnV0ZSBuYW1lPSJjaGVja0RpZ2l0cyIgdHlwZT0iYm9vbGVhbiINCiAgICAgICAgICAg dXNlPSJvcHRpb25hbCIgIGRlZmF1bHQ9ImZhbHNlIi8+DQogICAgICAgICA8L2NvbXBsZXhUeXBl Pg0KICAgICAgIDwvZWxlbWVudD4NCiAgICAgICA8ZWxlbWVudCBuYW1lPSJDaGFsbGVuZ2VGb3Jt YXQiIG1pbk9jY3Vycz0iMCI+DQogICAgICAgICA8Y29tcGxleFR5cGU+DQogICAgICAgICAgIDxh dHRyaWJ1dGUgbmFtZT0iZm9ybWF0IiB0eXBlPSJwc2tjOnZhbHVlRm9ybWF0Ig0KICAgICAgICAg ICB1c2U9InJlcXVpcmVkIi8+DQogICAgICAgICAgIDxhdHRyaWJ1dGUgbmFtZT0ibWluIiB0eXBl PSJ1bnNpZ25lZEludCIgdXNlPSJyZXF1aXJlZCIvPg0KICAgICAgICAgICA8YXR0cmlidXRlIG5h bWU9Im1heCIgdHlwZT0idW5zaWduZWRJbnQiIHVzZT0icmVxdWlyZWQiLz4NCiAgICAgICAgICAg PGF0dHJpYnV0ZSBuYW1lPSJjaGVja0RpZ2l0cyIgdHlwZT0iYm9vbGVhbiIgdXNlPSJvcHRpb25h bCINCiAgICAgICAgICAgZGVmYXVsdD0iZmFsc2UiLz4NCiAgICAgICAgIDwvY29tcGxleFR5cGU+ DQogICAgICAgPC9lbGVtZW50Pg0KICAgICAgIDxlbGVtZW50IG5hbWU9IkFwcFByb2ZpbGVJZCIg dHlwZT0ic3RyaW5nIiBtaW5PY2N1cnM9IjAiLz4NCiAgICAgPC9zZXF1ZW5jZT4NCiAgICAgPGF0 dHJpYnV0ZSBuYW1lPSJvdHAiIHR5cGU9ImJvb2xlYW4iIHVzZT0ib3B0aW9uYWwiDQogICAgIGRl ZmF1bHQ9ImZhbHNlIi8+DQogICAgIDxhdHRyaWJ1dGUgbmFtZT0iY3IiIHR5cGU9ImJvb2xlYW4i IHVzZT0ib3B0aW9uYWwiDQogICAgIGRlZmF1bHQ9ImZhbHNlIi8+DQogICAgIDxhdHRyaWJ1dGUg bmFtZT0ic2lnbiIgdHlwZT0iYm9vbGVhbiIgdXNlPSJvcHRpb25hbCINCiAgICAgZGVmYXVsdD0i ZmFsc2UiLz4NCiAgICAgPGF0dHJpYnV0ZSBuYW1lPSJlbmNyeXB0IiB0eXBlPSJib29sZWFuIiB1 c2U9Im9wdGlvbmFsIg0KICAgICBkZWZhdWx0PSJmYWxzZSIvPg0KICAgICA8YXR0cmlidXRlIG5h bWU9InVubG9jayIgdHlwZT0iYm9vbGVhbiIgdXNlPSJvcHRpb25hbCINCiAgICAgZGVmYXVsdD0i ZmFsc2UiLz4NCiAgIDwvY29tcGxleFR5cGU+DQoNCiAgIFRoZSBVc2FnZVR5cGUgY29tcG9uZW50 cyBoYXZlIHRoZSBmb2xsb3dpbmcgbWVhbmluZ3M6DQoNCiAgIG8gIDxBbGdvcml0aG1JZGVudGlm aWVyPiB0aGUgQWxnb3JpdGhtSWRlbnRpZmllciBhcyBkZWZpbmVkIGluDQogICAgICBbT0NSQV1d Lg0KDQogICBvICA8Q2hhbGxlbmdlRm9ybWF0PiBob2xkIHRoZSBjaGFsbGVuZ2UgYXR0cmlidXRl cyBpbiBDUiBiYXNlZA0KICAgICAgYWxnb3JpdGhtIGNvbXB1dGF0aW9ucy4NCg0KICAgbyAgPFJl c3BvbnNlRm9ybWF0PiBob2xkcyB0aGUgYWxnb3JpdGhtIHJlc3BvbnNlIGF0dHJpYnV0ZXMuDQoN Cg0KDQoNCkhveWVyLCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxMCwgMjAwOCAg ICAgICAgICAgICAgIFtQYWdlIDIxXQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICBQb3J0YWJsZSBT eW1tZXRyaWMgS2V5IENvbnRhaW5lciAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KICAgbyAgPEFj Y2Vzc1J1bGVzPiBob2xkcyBhIHNldCBvZiBhY2Nlc3MgcnVsZXMgYW5kIHBvbGljaWVzIGZvciB0 aGUga2V5DQogICAgICBvbmNlIHByb3Zpc2lvbmVkIG9uIHRoZSBEZXZpY2UuICBDdXJyZW50bHkg b25seSB0aGUgdXNlclBJTg0KICAgICAgYXR0cmlidXRlIGlzIGRlZmluZWQuICBUaGUgdXNlclBJ TiBpbmRpY2F0ZXMgd2hldGhlciB0aGUgdXNlciBNVVNUDQogICAgICBwcm92aWRlIGEgUElOIHRv IHVubG9jayB0aGUga2V5Lg0KDQogICBvICA8QXBwUHJvZmlsZUlkPiBJcyB0aGUgdW5pcXVlIHNo YXJlZCBpZGVudGlmaWVyIGZvciBvdXQgb2YgYmFuZA0KICAgICAgc2hhcmVkIGNvbW1vbiBwYXJh bWV0ZXJzLg0KDQo2LjEuMy4gIERldmljZVR5cGUNCg0KICAgVGhlIERldmljZVR5cGUgdHlwZSBy ZXByZXNlbnRzIHRoZSBEZXZpY2UgZW50aXR5IGluIHRoZSBDb250YWluZXIuICBBDQogICBEZXZp Y2UgTUFZIGJlIGJvdW5kIHRvIGEgdXNlciBhbmQgTUFZIGNvbnRhaW4gbW9yZSB0aGFuIG9uZSBr ZXlzLiAgSXQNCiAgIGlzIHJlY29tbWVuZGVkIHRoYXQgYSBrZXkgaXMgYm91bmQgdG8gb25lIGFu ZCBvbmx5IG9uZSBEZXZpY2UuDQoNCiAgIFRoZSBEZXZpY2VUeXBlIGlzIGRlZmluZWQgYXMgZm9s bG93czoNCg0KDQogICA8Y29tcGxleFR5cGUgbmFtZT0iRGV2aWNlVHlwZSI+DQogICAgIDxzZXF1 ZW5jZT4NCiAgICAgICA8ZWxlbWVudCBuYW1lPSJEZXZpY2VJZCIgdHlwZT0icHNrYzpEZXZpY2VJ ZFR5cGUiDQogICAgICAgbWluT2NjdXJzPSIwIi8+DQogICAgICAgPGVsZW1lbnQgbmFtZT0iS2V5 IiB0eXBlPSJwc2tjOktleVR5cGUiDQogICAgICAgbWF4T2NjdXJzPSJ1bmJvdW5kZWQiLz4NCiAg ICAgICA8ZWxlbWVudCBuYW1lPSJVc2VyIiB0eXBlPSJwc2tjOlVzZXJUeXBlIiBtaW5PY2N1cnM9 IjAiLz4NCiAgICAgPC9zZXF1ZW5jZT4NCiAgIDwvY29tcGxleFR5cGU+DQoNCiAgIFRoZSBjb21w b25lbnRzIG9mIHRoZSBEZXZpY2VUeXBlIGhhdmUgdGhlIGZvbGxvd2luZyBtZWFuaW5nczoNCg0K ICAgbyAgPERldmljZUlkPiwgYSB1bmlxdWUgaWRlbnRpZmllciBmb3IgdGhlIGRldmljZSwgZGVm aW5lZCBieSB0aGUNCiAgICAgIERldmljZUlkIHR5cGUuDQoNCiAgIG8gIDxLZXk+LCByZXByZXNl bnRzIHRoZSBrZXkgZW50aXR5IGRlZmluZWQgYnkgdGhlIEtleVR5cGUuDQoNCiAgIG8gIDxVc2Vy Piwgb3B0aW9uYWxseSBpZGVudGlmaWVzIHRoZSBvd25lciBvciB0aGUgdXNlciBvZiB0aGUgRGV2 aWNlLA0KICAgICAgYXMgZGVmaW5lZCBieSB0aGUgVXNlclR5cGUgLg0KDQo2LjEuNC4gIERldmlj ZUlkVHlwZQ0KDQogICBUaGUgRGV2aWNlSWQgdHlwZSByZXByZXNlbnRzIHRoZSBpZGVudGlmeWlu ZyBjcml0ZXJpYSB0byB1bmlxdWVseQ0KICAgaWRlbnRpZnkgdGhlIGRldmljZSB0aGF0IGNvbnRh aW5zIHRoZSBhc3NvY2lhdGVkIGtleXMuICBTaW5jZSBkZXZpY2VzDQogICBjYW4gY29tZSBpbiBk aWZmZXJlbnQgZm9ybSBmYWN0b3JzIHN1Y2ggYXMgaGFyZHdhcmUgdG9rZW5zLA0KICAgc21hcnRj YXJkcywgc29mdCB0b2tlbnMgaW4gYSBtb2JpbGUgcGhvbmUgb3IgUEMgZXRjIHRoaXMgdHlwZSBh bGxvd3MNCiAgIGRpZmZlcmVudCBjcml0ZXJpYSB0byBiZSB1c2VkLiAgQ29tYmluZWQgdGhvdWdo IHRoZSBjcml0ZXJpYSBNVVNUDQogICB1bmlxdWVseSBpZGVudGlmeSB0aGUgZGV2aWNlLiAgRm9y IGV4YW1wbGUgZm9yIGhhcmR3YXJlIHRva2VucyB0aGUNCiAgIGNvbWJpbmF0aW9uIG9mIFNlcmlh bE5vIGFuZCBNYW51ZmFjdHVyZXIgd2lsbCB1bmlxdWVseSBpZGVudGlmeSBhDQogICBkZXZpY2Ug YnV0IG5vdCBzZXJpYWxObyBhbG9uZSBzaW5jZSB0d28gZGlmZmVyZW50IHRva2VuIG1hbnVmYWN0 dXJlcnMNCiAgIG1pZ2h0IGlzc3VlIGRldmljZXMgd2l0aCB0aGUgc2FtZSBzZXJpYWxudW1iZXIg KHNpbWlsYXIgdG8gdGhlDQoNCg0KDQpIb3llciwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIEph bnVhcnkgMTAsIDIwMDggICAgICAgICAgICAgICBbUGFnZSAyMl0NCgwNCkludGVybmV0LURyYWZ0 ICAgICAgUG9ydGFibGUgU3ltbWV0cmljIEtleSBDb250YWluZXIgICAgICAgICAgIEp1bHkgMjAw Nw0KDQoNCiAgIElzc3VlckROIGFuZCBzZXJpYWxudW1iZXIgb2YgYSBjZXJ0aWZpY2F0ZSkuICBG b3Iga2V5cyBob2xkIG9uDQogICBiYW5raW5nIGNhcmRzIHRoZSBpZGVudGlmaWNhdGlvbiBvZiB0 aGUgZGV2aWNlIGlzIG9mdGVuIGRvbmUgdmlhIHRoZQ0KICAgUHJpbWFyeSBBY2NvdW50IE51bWJl ciAoUEFOLCB0aGUgYmlnIG51bWJlciBwcmludGVkIG9uIHRoZSBmcm9udCBvZg0KICAgdGhlIGNh cmQpIGFuZCBhbiBleHBpcnkgZGF0ZSBvZiB0aGUgY2FyZC4gIERldmljZUlkIGlzIGFuIGV4dGVu c2libGUNCiAgIHR5cGUgdGhhdCBhbGxvd3MgYWxsIHRoZXNlIGRpZmZlcmVudCB3YXlzIHRvIHVu aXF1ZWx5IGlkZW50aWZ5IGENCiAgIHNwZWNpZmljIGtleSBjb250YWluaW5nIGRldmljZS4NCg0K ICAgVGhlIERldmljZUlkVHlwZSBpcyBkZWZpbmVkIGFzIGZvbGxvd3M6DQoNCg0KICAgPGNvbXBs ZXhUeXBlIG5hbWU9IkRldmljZUlkVHlwZSI+DQogICAgPHNlcXVlbmNlPg0KICAgICA8ZWxlbWVu dCBuYW1lPSJNYW51ZmFjdHVyZXIiIHR5cGU9InN0cmluZyIvPg0KICAgICA8ZWxlbWVudCBuYW1l PSJTZXJpYWxObyIgdHlwZT0ic3RyaW5nIi8+DQogICAgIDxlbGVtZW50IG5hbWU9Ik1vZGVsIiB0 eXBlPSJzdHJpbmciIG1pbk9jY3Vycz0iMCIvPg0KICAgICA8ZWxlbWVudCBuYW1lPSJJc3N1ZU5v IiB0eXBlPSJzdHJpbmciIG1pbk9jY3Vycz0iMCIvPg0KICAgICA8ZWxlbWVudCBuYW1lPSJFeHBp cnkiIHR5cGU9InN0cmluZyIgbWluT2NjdXJzPSIwIi8+DQogICAgPC9zZXF1ZW5jZT4NCiAgIDwv Y29tcGxleFR5cGU+DQoNCiAgIFRoZSBjb21wb25lbnRzIG9mIHRoZSBEZXZpY2VJZCB0eXBlIGhh dmUgdGhlIGZvbGxvd2luZyBtZWFuaW5nczoNCg0KICAgbyAgPE1hbnVmYWN0dXJlcj4sIHRoZSBt YW51ZmFjdHVyZXIgb2YgdGhlIGRldmljZS4NCg0KICAgbyAgPE1vZGVsPiwgdGhlIG1vZGVsIG9m IHRoZSBkZXZpY2UgKGUuZyBvbmUtYnV0dG9uLUhPVFAtdG9rZW4tVjEpDQoNCiAgIG8gIDxTZXJp YWxObz4sIHRoZSBzZXJpYWwgbnVtYmVyIG9mIHRoZSBkZXZpY2Ugb3IgdGhlIFBBTiAocHJpbWFy eQ0KICAgICAgYWNjb3VudCBudW1iZXIpIGluIGNhc2Ugb2YgRU1WIChFdXJvcGF5LU1hc3RlckNh cmQtVmlzYSkgc21hcnQNCiAgICAgIGNhcmRzLg0KDQogICBvICA8SXNzdWVObz4sIHRoZSBpc3N1 ZSBudW1iZXIgaW4gY2FzZSBvZiBzbWFydCBjYXJkcyB3aXRoIHRoZSBzYW1lDQogICAgICBQQU4s IGVxdWl2YWxlbnQgdG8gYSBQU04gKFBBTiBTZXF1ZW5jZSBOdW1iZXIpLg0KDQogICBvICA8RXhw aXJ5PiwgdGhlIGV4cGlyeSBkYXRlIG9mIGEgZGV2aWNlIChzdWNoIGFzIHRoZSBvbmUgb24gYW4g RU1WDQogICAgICBjYXJkLHVzZWQgd2hlbiBpc3N1ZSBudW1iZXJzIGFyZSBub3QgcHJpbnRlZCBv biBjYXJkcykuICBJbiBmb3JtYXQNCiAgICAgIEREL01NL1lZWVkNCg0KNi4xLjUuICBVc2VyVHlw ZSBUeXBlDQoNCiAgIFRoZSBVc2VyVHlwZSByZXByZXNlbnRzIHRoZSBpZGVudGlmeWluZyBjcml0 ZXJpYSB0byB1bmlxdWVseSBpZGVudGlmeQ0KICAgdGhlIHVzZXIgd2hvIGlzIGJvdW5kIHRvIHRo aXMgZGV2aWNlLg0KDQogICBUaGUgVXNlclR5cGUgaXMgZGVmaW5lZCBhcyBmb2xsb3dzOg0KDQoN Cg0KDQoNCg0KDQoNCkhveWVyLCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxMCwg MjAwOCAgICAgICAgICAgICAgIFtQYWdlIDIzXQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICBQb3J0 YWJsZSBTeW1tZXRyaWMgS2V5IENvbnRhaW5lciAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KICAg PGNvbXBsZXhUeXBlIG5hbWU9IlVzZXJUeXBlIj4NCiAgICAgPHNlcXVlbmNlPg0KICAgICAgIDxz ZXF1ZW5jZT4NCiAgICAgICAgIDxlbGVtZW50IG5hbWU9IlVzZXJJZCIgdHlwZT0ic3RyaW5nIiBt aW5PY2N1cnM9IjAiLz4NCiAgICAgICAgIDxlbGVtZW50IG5hbWU9IkZpcnN0TmFtZSIgdHlwZT0i c3RyaW5nIiBtaW5PY2N1cnM9IjAiLz4NCiAgICAgICAgIDxlbGVtZW50IG5hbWU9Ikxhc3ROYW1l IiBtaW5PY2N1cnM9IjAiLz4NCiAgICAgICA8L3NlcXVlbmNlPg0KICAgICAgIDxlbGVtZW50IG5h bWU9Ik9yZyIgdHlwZT0ic3RyaW5nIiBtaW5PY2N1cnM9IjAiLz4NCiAgICAgPC9zZXF1ZW5jZT4N CiAgIDwvY29tcGxleFR5cGU+DQoNCiAgIFRoZSBjb21wb25lbnRzIG9mIHRoZSBVc2VyVHlwZSB0 eXBlIGhhdmUgdGhlIGZvbGxvd2luZyBtZWFuaW5nczoNCg0KICAgbyAgPEZpcnN0TmFtZT4sIHVz ZXIgZmlyc3QgbmFtZS4NCg0KICAgbyAgPExhc3ROYW1lPiwgdXNlciBsYXN0IG5hbWUuDQoNCiAg IG8gIDxVc2VySWQ+LCB1c2VyIGlkIChVSUQpIG9yIHVzZXIgbmFtZS4NCg0KICAgbyAgPE9yZz4s IHVzZXIgb3JnYW5pemF0aW9uIG5hbWUuDQoNCjYuMS42LiAgS2V5Q29udGFpbmVyVHlwZQ0KDQog ICBUaGUgS2V5Q29udGFpbmVyVHlwZSByZXByZXNlbnRzIHRoZSBrZXkgY29udGFpbmVyIGVudGl0 eS4gIEENCiAgIENvbnRhaW5lciBNQVkgY29udGFpbiBtb3JlIHRoYW4gb25lIERldmljZSBlbnRp dHk7IGVhY2ggRGV2aWNlIGVudGl0eQ0KICAgTUFZIGNvbnRhaW4gbW9yZSB0aGFuIG9uZSBLZXkg ZW50aXR5Lg0KDQogICBUaGUgS2V5Q29udGFpbmVyVHlwZSBpcyBkZWZpbmVkIGFzIGZvbGxvd3M6 DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KSG95ZXIsIGV0 IGFsLiAgICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDEwLCAyMDA4ICAgICAgICAgICAgICAgW1Bh Z2UgMjRdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICAgIFBvcnRhYmxlIFN5bW1ldHJpYyBLZXkgQ29u dGFpbmVyICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQogICA8Y29tcGxleFR5cGUgbmFtZT0iS2V5 Q29udGFpbmVyVHlwZSI+DQogICAgIDxzZXF1ZW5jZT4NCiAgICAgICA8ZWxlbWVudCBuYW1lPSJF bmNyeXB0aW9uTWV0aG9kIj4NCiAgICAgICAgIDxjb21wbGV4VHlwZT4NCiAgICAgICAgICAgPGNv bXBsZXhDb250ZW50Pg0KICAgICAgICAgICAgIDxleHRlbnNpb24gYmFzZT0icHNrYzpFbmNyeXB0 aW9uTWV0aG9kVHlwZSIvPg0KICAgICAgICAgICA8L2NvbXBsZXhDb250ZW50Pg0KICAgICAgICAg PC9jb21wbGV4VHlwZT4NCiAgICAgICA8L2VsZW1lbnQ+DQogICAgICAgPGVsZW1lbnQgbmFtZT0i RGlnZXN0TWV0aG9kIj4NCiAgICAgICAgIDxjb21wbGV4VHlwZT4NCiAgICAgICAgICAgPGNvbXBs ZXhDb250ZW50Pg0KICAgICAgICAgICAgIDxleHRlbnNpb24gYmFzZT0icHNrYzpEaWdlc3RNZXRo b2RUeXBlIi8+DQogICAgICAgICAgIDwvY29tcGxleENvbnRlbnQ+DQogICAgICAgICA8L2NvbXBs ZXhUeXBlPg0KICAgICAgIDwvZWxlbWVudD4NCiAgICAgICA8ZWxlbWVudCBuYW1lPSJEZXZpY2Ui IHR5cGU9InBza2M6RGV2aWNlVHlwZSINCiAgICAgICBtYXhPY2N1cnM9InVuYm91bmRlZCIvPg0K ICAgICAgIDxlbGVtZW50IG5hbWU9IlNpZ25hdHVyZSIgdHlwZT0iZHM6U2lnbmF0dXJlVHlwZSIN CiAgICAgICBtaW5PY2N1cnM9IjAiLz4NCiAgICAgPC9zZXF1ZW5jZT4NCiAgICAgPGF0dHJpYnV0 ZSBuYW1lPSJ2ZXJzaW9uIiB0eXBlPSJwc2tjOlZlcnNpb25UeXBlIg0KICAgICB1c2U9InJlcXVp cmVkIi8+DQogICA8L2NvbXBsZXhUeXBlPg0KDQogICBUaGUgY29tcG9uZW50cyBvZiB0aGUgS2V5 Q29udGFpbmVyIGhhdmUgdGhlIGZvbGxvd2luZyBtZWFuaW5nczoNCg0KICAgbyAgdmVyc2lvbiwg dGhlIHZlcnNpb24gbnVtYmVyIGZvciB0aGUgcG9ydGFibGUga2V5IGNvbnRhaW5lciBmb3JtYXQN CiAgICAgICh0aGUgWE1MIHNjaGVtYSBkZWZpbmVkIGluIHRoaXMgZG9jdW1lbnQpLg0KDQogICBv ICA8RW5jcnlwdGlvbk1ldGhvZD4sIHRoZSBlbmNyeXB0aW9uIG1ldGhvZCB1c2VkIHRvIHByb3Rl Y3QgdGhlIEtleQ0KICAgICAgZGF0YSBhdHRyaWJ1dGVzDQoNCiAgIG8gIDxEaWdlc3RNZXRob2Q+ LCB0aGUgZGlnZXN0IG1ldGhvZCB1c2VkIHRvIHNpZ24gdGhlIHVuZW5jcnlwdGVkIHRoZQ0KICAg ICAgU2VjcmV0IEtleSBkYXRhIGF0dHJpYnV0ZXMNCg0KICAgbyAgPERldmljZT4sIHRoZSBob3N0 IERldmljZSBmb3Igb25lIG9yIG1vcmUgS2V5cy4NCg0KICAgbyAgPFNpZ25hdHVyZT4sIGNvbnRh aW5zIHRoZSBzaWduYXR1cmUgdmFsdWUgb2YgdGhlIENvbnRhaW5lci4gIFdoZW4NCiAgICAgIHRo ZSBzaWduYXR1cmUgaXMgYXBwbGllZCB0byB0aGUgZW50aXJlIGNvbnRhaW5lciwgaXQgTVVTVCB1 c2UgWE1MDQogICAgICBTaWduYXR1cmUgbWV0aG9kcyBhcyBkZWZpbmVkIGluIFtYTUxTSUddLiAg VGhlIHNpZ25hdHVyZSBpcw0KICAgICAgZW52ZWxvcGVkLg0KDQo2LjEuNy4gIEVuY3J5cHRpb25N ZXRob2RUeXBlDQoNCiAgIFRoZSBFbmNyeXB0aW9uTWV0aG9kVHlwZSBkZWZpbmVzIHRoZSBhbGdv cml0aG0gYW5kIHBhcmFtZXRlcnMgdXNlZCB0bw0KICAgZW5jcnlwdCB0aGUgU2VjcmV0IEtleSBk YXRhIGF0dHJpYnV0ZXMgaW4gdGhlIENvbnRhaW5lci4gIFRoZQ0KICAgZW5jcnlwdGlvbiBpcyBh cHBsaWVkIG9uIGVhY2ggaW5kaXZpZHVhbCBTZWNyZXQgS2V5IGRhdGEgaW4gdGhlDQoNCg0KDQpI b3llciwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgMTAsIDIwMDggICAgICAgICAg ICAgICBbUGFnZSAyNV0NCgwNCkludGVybmV0LURyYWZ0ICAgICAgUG9ydGFibGUgU3ltbWV0cmlj IEtleSBDb250YWluZXIgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgIENvbnRhaW5lci4gIFRo ZSBlbmNyeXB0aW9uIG1ldGhvZCBNVVNUIGJlIHRoZSBzYW1lIGZvciBhbGwgU2VjcmV0IEtleQ0K ICAgZGF0YSBpbiB0aGUgY29udGFpbmVyLg0KDQogICBUaGUgRW5jcnlwdGlvbk1ldGhvZFR5cGUg aXMgZGVmaW5lZCBhcyBmb2xsb3dzOg0KDQoNCjxjb21wbGV4VHlwZSBuYW1lPSJFbmNyeXB0aW9u TWV0aG9kVHlwZSI+DQogIDxzZXF1ZW5jZT4NCiAgICA8ZWxlbWVudCBuYW1lPSJFbmNLZXlMYWJl bCIgbWluT2NjdXJzPSIwIi8+DQogICAgPGNob2ljZT4NCiAgICAgICAgPHNlcXVlbmNlPg0KICAg ICAgICAgIDxlbGVtZW50IG5hbWU9IktleUluZm8iIHR5cGU9ImRzOktleUluZm9UeXBlIiBtaW5P Y2N1cnM9IjAiLz4NCiAgICAgICAgICA8ZWxlbWVudCBuYW1lPSJPQUVQUGFyYW1zIiB0eXBlPSJi YXNlNjRCaW5hcnkiIG1pbk9jY3Vycz0iMCIvPg0KICAgICAgICAgIDxlbGVtZW50IG5hbWU9Ikhh c2hBbGdvcml0aG0iDQogICAgICAgICAgdHlwZT0icHNrYzpIYXNoQWxnb3JpdGhtVHlwZSIgbWlu T2NjdXJzPSIwIi8+DQogICAgICAgIDwvc2VxdWVuY2U+DQogICAgICA8c2VxdWVuY2U+DQogICAg ICAgIDxlbGVtZW50IG5hbWU9IlBCRVNhbHQiIHR5cGU9ImJhc2U2NEJpbmFyeSIgbWluT2NjdXJz PSIwIi8+DQogICAgICAgIDxlbGVtZW50IG5hbWU9IlBCRUl0ZXJhdGlvbkNvdW50IiB0eXBlPSJp bnQiIG1pbk9jY3Vycz0iMCIvPg0KICAgICAgICA8ZWxlbWVudCBuYW1lPSJJViIgdHlwZT0iYmFz ZTY0QmluYXJ5IiBtaW5PY2N1cnM9IjAiLz4NCiAgICAgIDwvc2VxdWVuY2U+DQogICAgPC9jaG9p Y2U+DQogIDwvc2VxdWVuY2U+DQogIDxhdHRyaWJ1dGUgbmFtZT0iYWxnb3JpdGhtIiB0eXBlPSJw c2tjOkVuY3J5cHRpb25BbGdvcml0aG1UeXBlIg0KICB1c2U9InJlcXVpcmVkIi8+DQogIDxhdHRy aWJ1dGUgbmFtZT0iZXh0LWFsZ29yaXRobSIgdHlwZT0ic3RyaW5nIi8+DQo8L2NvbXBsZXhUeXBl Pg0KDQogICBUaGUgY29tcG9uZW50cyBvZiB0aGUgRW5jcnlwdGlvbk1ldGhvZFR5cGUgaGF2ZSB0 aGUgZm9sbG93aW5nDQogICBtZWFuaW5nczoNCg0KICAgbyAgYWxnb3JpdGhtOiBpZGVudGlmaWVz IHRoZSBlbmNyeXB0aW9uIGFsZ29yaXRobSB1c2VkIHRvIHByb3RlY3QgdGhlDQogICAgICBTZWNy ZXQgS2V5IGRhdGEuICBXaGVuICdOT05FJyBpcyBzcGVjaWZpZWQsIGltcGxlbWVudGF0aW9ucyBN VVNUDQogICAgICBndWFyYW50ZWUgdGhlIHByaXZhY3kgb2YgdGhlIFNlY3JldCBLZXkgRGF0YSB0 aHJvdWdoIG90aGVyDQogICAgICBtZWNoYW5pc21zIGUuZy4gdGhyb3VnaCB0cmFuc3BvcnQgbGV2 ZWwgc2VjdXJpdHkuICBJZiAnT1RIRVInIGlzDQogICAgICBzcGVjaWZpZWQgYW4gZXh0ZW5zaW9u IHZhbHVlIE1VU1QgYmUgc2V0IGluIHRoZSAnZXh0LWFsZ29yaXRobScNCiAgICAgIGF0dHJpYnV0 ZS4gIFBsZWFzZSBzZWUgRW5jcnlwdGlvbkFsZ29yaXRobVR5cGUgZm9yIG1vcmUNCiAgICAgIGlu Zm9ybWF0aW9uIG9uIHN1cHBvcnRlZCBhbGdvcml0aG1zDQoNCiAgIG8gIDxQQkVTYWx0PjogY29u dmV5cyB0aGUgU2FsdCB3aGVuIFtQS0NTNV0gcGFzc3dvcmQtYmFzZWQgZW5jcnlwdGlvbg0KICAg ICAgaXMgYXBwbGllZC4NCg0KICAgbyAgPFBCRUl0ZXJhdGlvbkNvdW50PjogY29udmV5cyB0aGUg aXRlcmF0aW9uIGNvdW50IHZhbHVlIGluIFtQS0NTNV0NCiAgICAgIHBhc3N3b3JkLWJhc2VkIGVu Y3J5cHRpb24gaWYgaXQgaXMgZGlmZmVyZW50IGZyb20gdGhlIGRlZmF1bHQNCiAgICAgIHZhbHVl Lg0KDQogICBvICA8SVY+OiBjb252ZXlzIHRoZSBpbml0aWFsaXphdGlvbiB2ZWN0b3IgZm9yIENC QyBiYXNlZCBlbmNyeXB0aW9uDQogICAgICBhbGdvcml0aG1zLiAgSXQgaXMgcmVjb21tZW5kZWQg Zm9yIHNlY3VyaXR5IHJlYXNvbnMgdG8gdHJhbnNtaXQNCg0KDQoNCkhveWVyLCBldCBhbC4gICAg ICAgICAgIEV4cGlyZXMgSmFudWFyeSAxMCwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDI2XQ0K DA0KSW50ZXJuZXQtRHJhZnQgICAgICBQb3J0YWJsZSBTeW1tZXRyaWMgS2V5IENvbnRhaW5lciAg ICAgICAgICAgSnVseSAyMDA3DQoNCg0KICAgICAgdGhpcyB2YWx1ZSBvdXQgb2YgYmFuZCBhbmQg dHJlYXQgaXQgdGhlIHNhbWUgbWFubmVyIGFzIHRoZSBrZXkNCiAgICAgIHZhbHVlLg0KDQogICBv ICA8RW5jS2V5TGFiZWw+OiBpZGVudGlmaWVzIGEgdW5pcXVlIGxhYmVsIGZvciBhIHByZS1zaGFy ZWQNCiAgICAgIGVuY3J5cHRpb24ga2V5Lg0KDQogICBvICA8S2V5SW5mbz46IGNvbnZleXMgdGhl IGluZm9ybWF0aW9uIG9mIHRoZSBrZXkgaWYgYW4gUlNBIGFsZ29yaXRobQ0KICAgICAgaGFzIGJl ZW4gdXNlZC4NCg0KICAgbyAgPE9BRVBQYXJhbXM+OiBjb252ZXlzIHRoZSBPQUVQIHBhcmFtZXRl cnMgaWYgYW4gUlNBIGFsZ29yaXRobSBoYXMNCiAgICAgIGJlZW4gdXNlZC4NCg0KICAgbyAgPEhh c2hBbGdvcml0aG0+OiBjb252ZXlzIHRoZSBkaWdlc3QgYWxnb3JpdGhtIGlmIGFuIFJTQSBhbGdv cml0aG0NCiAgICAgIGhhcyBiZWVuIHVzZWQuDQoNCjYuMS44LiAgRGlnZXN0TWV0aG9kVHlwZQ0K DQogICBUaGUgRGlnZXN0TWV0aG9kVHlwZSBkZWZpbmVzIHRoZSBhbGdvcml0aG0gYW5kIHBhcmFt ZXRlcnMgdXNlZCB0bw0KICAgY3JlYXRlIHRoZSBkaWdlc3Qgb24gdGhlIHVuZW5jcnlwdGVkIFNl Y3JldCBLZXkgZGF0YSBpbiB0aGUNCiAgIENvbnRhaW5lci4gIFRoZSBkaWdlc3QgaXMgYXBwbGll ZCBvbiBlYWNoIGluZGl2aWR1YWwgU2VjcmV0IEtleSBkYXRhDQogICBpbiB0aGUgQ29udGFpbmVy IGJlZm9yZSBlbmNyeXB0aW9uLiAgVGhlIGRpZ2VzdCBtZXRob2QgTVVTVCBiZSB0aGUNCiAgIHNh bWUgZm9yIGFsbCBTZWNyZXQgS2V5IGRhdGEgaW4gdGhlIGNvbnRhaW5lci4gIFVubGVzcyBhIGRp ZmZlcmVudA0KICAgZGlnZXN0IGtleSBpcyBzcGVjaWZpZWQgaXQgaXMgYXNzdW1lZCB0aGF0IGtl eWVkIGRpZ2VzdCBhbGdvcml0aG1zDQogICB3aWxsIHVzZSB0aGUgc2FtZSBrZXkgYXMgZm9yIGVu Y3J5cHRpb24NCg0KICAgVGhlIERpZ2VzdE1ldGhvZFR5cGUgaXMgZGVmaW5lZCBhcyBmb2xsb3dz Og0KDQoNCiAgIDxjb21wbGV4VHlwZSBuYW1lPSJEaWdlc3RNZXRob2RUeXBlIj4NCiAgICAgPHNl cXVlbmNlPg0KICAgICAgIDxlbGVtZW50IG5hbWU9IkRpZ2VzdEtleUxhYmVsIiBtaW5PY2N1cnM9 IjAiLz4NCiAgICAgPC9zZXF1ZW5jZT4NCiAgICAgPGF0dHJpYnV0ZSBuYW1lPSJhbGdvcml0aG0i IHR5cGU9InBza2M6RGlnZXN0QWxnb3JpdGhtVHlwZSINCiAgICAgdXNlPSJyZXF1aXJlZCIvPg0K ICAgPC9jb21wbGV4VHlwZT4NCg0KICAgVGhlIGNvbXBvbmVudHMgb2YgdGhlIERpZ2VzdE1ldGhv ZFR5cGUgaGF2ZSB0aGUgZm9sbG93aW5nIG1lYW5pbmdzOg0KDQogICBvICBhbGdvcml0aG0sIGlk ZW50aWZpZXMgdGhlIGRpZ2VzdCBhbGdvcml0aG0gdXNlZCB0byBwcm90ZWN0IHRoZQ0KICAgICAg U2VjcmV0IEtleSBkYXRhLiAgUGxlYXNlIHNlZSBEaWdlc3RBbGdvcml0aG1UeXBlIGZvciBtb3Jl DQogICAgICBpbmZvcm1hdGlvbiBvbiBzdXBwb3J0ZWQgYWxnb3JpdGhtcw0KDQogICBvICA8RGln ZXN0S2V5TGFiZWw+OiBpZGVudGlmaWVzIGEgdW5pcXVlIGxhYmVsIGZvciBhIHByZS1zaGFyZWQN CiAgICAgIGRpZ2VzdCBrZXkuDQoNCg0KDQoNCg0KDQoNCkhveWVyLCBldCBhbC4gICAgICAgICAg IEV4cGlyZXMgSmFudWFyeSAxMCwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDI3XQ0KDA0KSW50 ZXJuZXQtRHJhZnQgICAgICBQb3J0YWJsZSBTeW1tZXRyaWMgS2V5IENvbnRhaW5lciAgICAgICAg ICAgSnVseSAyMDA3DQoNCg0KNi4xLjkuICBBbGdvcml0aG1JZGVudGlmaWVyVHlwZQ0KDQogICBU aGUgQWxnb3JpdGhtSWRlbnRpZmVyVHlwZSBkZWZpbmVzIHRoZSBBbGdvcml0aG0gaWRlbnRpZmll ciAoQUkpDQogICBzcGVjaWZpZWQgaW4gW09DUkFdLg0KDQogICBUaGUgQWxnb3JpdGhtSWRlbnRp ZmllclR5cGUgaXMgZGVmaW5lcyBhcyBmb2xsb3dzOg0KDQoNCiAgIDxjb21wbGV4VHlwZSBuYW1l PSJBbGdvcml0aG1JZGVudGlmaWVyVHlwZSI+DQogICAgICAgPHNlcXVlbmNlPg0KICAgICAgICAg PGVsZW1lbnQgbmFtZT0iQWxnb3JpdGhtIj4NCiAgICAgICAgICAgPHNpbXBsZVR5cGU+DQogICAg ICAgICAgICAgPHJlc3RyaWN0aW9uIGJhc2U9InN0cmluZyI+DQogICAgICAgICAgICAgICA8ZW51 bWVyYXRpb24gdmFsdWU9Ik9DUkEtSE9UUCIvPg0KICAgICAgICAgICAgIDwvcmVzdHJpY3Rpb24+ DQogICAgICAgICAgIDwvc2ltcGxlVHlwZT4NCiAgICAgICAgIDwvZWxlbWVudD4NCiAgICAgICAg IDxlbGVtZW50IG5hbWU9IkNyeXB0b0Z1bmN0aW9uIg0KICAgICAgICAgdHlwZT0icHNrYzpEaWdl c3RBbGdvcml0aG1UeXBlIi8+DQogICAgICAgICA8ZWxlbWVudCBuYW1lPSJUcnVuY2F0aW9uIj4N CiAgICAgICAgICAgPHNpbXBsZVR5cGU+DQogICAgICAgICAgICAgPHJlc3RyaWN0aW9uIGJhc2U9 ImRlY2ltYWwiPg0KICAgICAgICAgICAgICAgPG1pbkluY2x1c2l2ZSB2YWx1ZT0iNCIvPg0KICAg ICAgICAgICAgICAgPG1heEluY2x1c2l2ZSB2YWx1ZT0iMTAiLz4NCiAgICAgICAgICAgICA8L3Jl c3RyaWN0aW9uPg0KICAgICAgICAgICA8L3NpbXBsZVR5cGU+DQogICAgICAgICA8L2VsZW1lbnQ+ DQogICAgICAgICA8ZWxlbWVudCBuYW1lPSJQaW4iIHR5cGU9ImJvb2xlYW4iLz4NCiAgICAgICAg IDxlbGVtZW50IG5hbWU9IkNvdW50ZXIiIHR5cGU9ImJvb2xlYW4iLz4NCiAgICAgICAgIDxlbGVt ZW50IG5hbWU9IlRpbWUiIHR5cGU9ImJvb2xlYW4iLz4NCiAgICAgICAgIDxlbGVtZW50IG5hbWU9 IlNlc3Npb24iIHR5cGU9ImJvb2xlYW4iLz4NCiAgICAgICAgIDxlbGVtZW50IG5hbWU9IkNoYWxs ZW5nZSIgdHlwZT0iYm9vbGVhbiIvPg0KICAgICAgIDwvc2VxdWVuY2U+DQogICAgIDwvY29tcGxl eFR5cGU+DQoNCiAgIFNlZSBbT0NSQV0gZm9yIGEgZnVsbCBkZXNjcmlwdGlvbiBvZiB0aGUgY29t cG9uZW50cyBvZiB0aGUNCiAgIEFsZ29yaXRobUlkZW50aWZpZXJUeXBlLg0KDQo2LjIuICBFbmNy eXB0aW9uQWxnb3JpdGhtVHlwZQ0KDQogICBUaGUgRW5jcnlwdGlvbkFsZ29yaXRobVR5cGUgZGVm aW5lcyB0aGUgYWxsb3dlZCBhbGdvcml0aG1zIGZvcg0KICAgZW5jcnlwdGluZyB0aGUgU2VjcmV0 IEtleSBkYXRhIGluIHRoZSBDb250YWluZXIuDQoNCiAgIFRoZSBFbmNyeXB0aW9uQWxnb3JpdGht VHlwZSBpcyBkZWZpbmVkIGFzIGZvbGxvd3M6DQoNCg0KDQoNCg0KDQoNCkhveWVyLCBldCBhbC4g ICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxMCwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDI4 XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICBQb3J0YWJsZSBTeW1tZXRyaWMgS2V5IENvbnRhaW5l ciAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KICAgPHNpbXBsZVR5cGUgbmFtZT0iRW5jcnlwdGlv bkFsZ29yaXRobVR5cGUiPg0KICAgICA8cmVzdHJpY3Rpb24gYmFzZT0ic3RyaW5nIj4NCiAgICAg ICA8ZW51bWVyYXRpb24gdmFsdWU9Ik5PTkUiLz4NCiAgICAgICA8ZW51bWVyYXRpb24gdmFsdWU9 IlBCRS0zREVTMTEyLUNCQyIvPg0KICAgICAgIDxlbnVtZXJhdGlvbiB2YWx1ZT0iUEJFLTNERVMx NjgtQ0JDIi8+DQogICAgICAgPGVudW1lcmF0aW9uIHZhbHVlPSJQQkUtQUVTMTI4LUNCQyIvPg0K ICAgICAgIDxlbnVtZXJhdGlvbiB2YWx1ZT0iUEJFLUFFUzI1Ni1DQkMiLz4NCiAgICAgICA8ZW51 bWVyYXRpb24gdmFsdWU9IlBCRS1BRVMxOTItQ0JDIi8+DQogICAgICAgPGVudW1lcmF0aW9uIHZh bHVlPSIzREVTMTEyLUNCQyIvPg0KICAgICAgIDxlbnVtZXJhdGlvbiB2YWx1ZT0iM0RFUzE2OC1D QkMiLz4NCiAgICAgICA8ZW51bWVyYXRpb24gdmFsdWU9IkFFUzEyOC1DQkMiLz4NCiAgICAgICA8 ZW51bWVyYXRpb24gdmFsdWU9IkFFUzE5Mi1DQkMiLz4NCiAgICAgICA8ZW51bWVyYXRpb24gdmFs dWU9IkFFUzI1Ni1DQkMiLz4NCiAgICAgICA8ZW51bWVyYXRpb24gdmFsdWU9IlJTQS0xXzUiLz4N CiAgICAgICA8ZW51bWVyYXRpb24gdmFsdWU9IlJTQS1PQUVQLU1HRjFQIi8+DQogICAgICAgPGVu dW1lcmF0aW9uIHZhbHVlPSJPVEhFUiIvPg0KICAgICA8L3Jlc3RyaWN0aW9uPg0KICAgPC9zaW1w bGVUeXBlPg0KDQogICAgICBOT05FIHdoZW4gbm8gZW5jcnlwdGlvbiBpcyBhcHBsaWVkIG9uIHRo ZSBrZXkNCg0KICAgICAgUEJFLTNERVMxMTItQ0JDIHdoZW4gcGFzc3dvcmQtYmFzZWQgZW5jcnlw dGlvbiBpcyBhcHBsaWVkIHVzaW5nIGENCiAgICAgIDExMi1iaXQgM0RFUyBrZXkgaW4gQ0JDIG1v ZGUNCg0KICAgICAgUEJFLTNERVMxNjgtQ0JDIHdoZW4gcGFzc3dvcmQtYmFzZWQgZW5jcnlwdGlv biBpcyBhcHBsaWVkIHVzaW5nIGENCiAgICAgIDE2OC1iaXQgM0RFUyBrZXkgaW4gQ0JDIG1vZGUN Cg0KICAgICAgUEJFLUFFUzEyOC1DQkMgd2hlbiBwYXNzd29yZC1iYXNlZCBlbmNyeXB0aW9uIGlz IGFwcGxpZWQgdXNpbmcgYQ0KICAgICAgMTI4LWJpdCBBRVMga2V5IGluIENCQyBtb2RlDQoNCiAg ICAgIFBCRS1BRVMxOTItQ0JDIHdoZW4gcGFzc3dvcmQtYmFzZWQgZW5jcnlwdGlvbiBpcyBhcHBs aWVkIHVzaW5nIGENCiAgICAgIDE5Mi1iaXQgQUVTIGtleSBpbiBDQkMgbW9kZSBpcyBhcHBsaWVk Lg0KDQogICAgICBQQkUtQUVTMjU2LUNCQyBwYXNzd29yZC1iYXNlZCBlbmNyeXB0aW9uIGlzIGFw cGxpZWQgdXNpbmcgYSAyNTYtDQogICAgICBiaXQgQUVTIGtleSBpbiBDQkMgbW9kZSBpcyBhcHBs aWVkLg0KDQogICAgICAzREVTMTEyLUNCQyBlbmNyeXB0aW9uIHVzaW5nIGEgcHJlLXNoYXJlZCAx MTItYml0IDNERVMga2V5IGluIENCQw0KICAgICAgbW9kZSBpcyBhcHBsaWVkLg0KDQogICAgICAz REVTMTY4LUNCQyBlbmNyeXB0aW9uIHVzaW5nIGEgcHJlLXNoYXJlZCAxNjgtYml0IDNERVMga2V5 IGluIENCQw0KICAgICAgbW9kZSBpcyBhcHBsaWVkLg0KDQogICAgICBBRVMxMjgtQ0JDIGVuY3J5 cHRpb24gdXNpbmcgYSBwcmUtc2hhcmVkIDEyOC1iaXQgQUVTIGtleSBpbiBDQkMNCiAgICAgIG1v ZGUgaXMgYXBwbGllZC4NCg0KDQoNCg0KDQoNCg0KSG95ZXIsIGV0IGFsLiAgICAgICAgICAgRXhw aXJlcyBKYW51YXJ5IDEwLCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgMjldDQoMDQpJbnRlcm5l dC1EcmFmdCAgICAgIFBvcnRhYmxlIFN5bW1ldHJpYyBLZXkgQ29udGFpbmVyICAgICAgICAgICBK dWx5IDIwMDcNCg0KDQogICAgICBBRVMxOTItQ0JDIGVuY3J5cHRpb24gdXNpbmcgYSBwcmUtc2hh cmVkIDE5Mi1iaXQgQUVTIGtleSBpbiBDQkMNCiAgICAgIG1vZGUgaXMgYXBwbGllZC4NCg0KICAg ICAgQUVTMjU2LUNCQyBlbmNyeXB0aW9uIHVzaW5nIGEgcHJlLXNoYXJlZCAyNTYtYml0IEFFUyBr ZXkgaW4gQ0JDDQogICAgICBtb2RlIGlzIGFwcGxpZWQuDQoNCiAgICAgIFJTQS0xXzUgVGhlIFJT QUVTLVBLQ1MxLXYxXzUgYWxnb3JpdGhtLCBzcGVjaWZpZWQgaW4gW1BLQ1MxXSwNCiAgICAgIHRh a2VzIG5vIGV4cGxpY2l0IHBhcmFtZXRlcnMuDQoNCiAgICAgIFJTQS1PQUVQLU1HRjFQIFRoZSBz YW1lIGFsZ29yaXRobSBhcyBkZWZpbmVkIGluIHNlY3Rpb24gNS40LjIgUlNBLQ0KICAgICAgT0FF UCBpbiBbWE1MRU5DXSBJdCBpcyB0aGUgUlNBRVMtT0FFUC1FTkNSWVBUIGFsZ29yaXRobSwgYXMN CiAgICAgIHNwZWNpZmllZCBpbiBbUEtDUzFdLCBpdCB0YWtlcyB0aHJlZSBwYXJhbWV0ZXJzLiAg VGhlIHR3byB1c2VyDQogICAgICBzcGVjaWZpZWQgcGFyYW1ldGVycyBhcmUgYSBNQU5EQVRPUlkg bWVzc2FnZSBkaWdlc3QgZnVuY3Rpb24gYW5kDQogICAgICBhbiBPUFRJT05BTCBlbmNvZGluZyBv Y3RldCBzdHJpbmcgT0FFUHBhcmFtcy4gIFRoZSBtZXNzYWdlIGRpZ2VzdA0KICAgICAgZnVuY3Rp b24gaXMgaW5kaWNhdGVkIGJ5IHRoZSBBbGdvcml0aG0gYXR0cmlidXRlIG9mIGEgY2hpbGQgZHM6 DQogICAgICBEaWdlc3RNZXRob2QgZWxlbWVudCBhbmQgdGhlIG1hc2sgZ2VuZXJhdGlvbiBmdW5j dGlvbiwgdGhlIHRoaXJkDQogICAgICBwYXJhbWV0ZXIsIGlzIGFsd2F5cyBNR0YxIHdpdGggU0hB MSAobWdmMVNIQTFJZGVudGlmaWVyKS4NCg0KICAgICAgT1RIRVIgZXh0ZW5zaW9uIHBvaW50IGZv ciBub3QgYWxyZWFkeSBkZWZpbmVkIGFsZ29yaXRobXMgaW4gdGhpcw0KICAgICAgbGlzdC4NCg0K Ni4zLiAgSGFzaEFsZ29yaXRobVR5cGUNCg0KICAgVGhlIEhhc2hBbGdvcml0aG1UeXBlIGRlZmlu ZXMgdGhlIGFsbG93ZWQgYWxnb3JpdGhtcyBmb3IgZ2VuZXJhdGluZyBhDQogICBkaWdlc3QgaW4g dGhlIFJTQSBhbGdvcml0aG1zLg0KDQogICBUaGUgSGFzaEFsZ29yaXRobVR5cGUgaXMgZGVmaW5l ZCBhcyBmb2xsb3dzOg0KDQoNCiAgICAgPHNpbXBsZVR5cGUgbmFtZT0iSGFzaEFsZ29yaXRobVR5 cGUiPg0KICAgICAgIDxyZXN0cmljdGlvbiBiYXNlPSJzdHJpbmciPg0KICAgICAgICAgPGVudW1l cmF0aW9uIHZhbHVlPSJTSEExIi8+DQogICAgICAgICA8ZW51bWVyYXRpb24gdmFsdWU9IlNIQTI1 NiIvPg0KICAgICAgICAgPGVudW1lcmF0aW9uIHZhbHVlPSJTSEE1MTIiLz4NCiAgICAgICA8L3Jl c3RyaWN0aW9uPg0KICAgICA8L3NpbXBsZVR5cGU+DQoNCiAgICAgIFNIQTEgd2hlbiB0aGUgZGln ZXN0IHdhcyBwZXJmb3JtZWQgdXNpbmcgdGhlIFNIQTEgYWxnb3JpdGhtDQoNCiAgICAgIFNIQTE5 MiB3aGVuIHRoZSBkaWdlc3Qgd2FzIHBlcmZvcm1lZCB1c2luZyB0aGUgU0hBMTkyIGFsZ29yaXRo bQ0KDQogICAgICBTSEEyNTYgd2hlbiB0aGUgZGlnZXN0IHdhcyBwZXJmb3JtZWQgdXNpbmcgdGhl IFNIQTI1NiBhbGdvcml0aG0NCg0KNi40LiAgRGlnZXN0QWxnb3JpdGhtVHlwZQ0KDQogICBUaGUg RGlnZXN0QWxnb3JpdGhtVHlwZSBkZWZpbmVzIHRoZSBhbGxvd2VkIGFsZ29yaXRobXMgZm9yIGdl bmVyYXRpbmcNCiAgIGEgZGlnZXN0IG9uIHRoZSB1bmVuY3J5cHRlZCBTZWNyZXQgS2V5IGRhdGEg aW4gdGhlIENvbnRhaW5lci4NCg0KDQoNCg0KSG95ZXIsIGV0IGFsLiAgICAgICAgICAgRXhwaXJl cyBKYW51YXJ5IDEwLCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgMzBdDQoMDQpJbnRlcm5ldC1E cmFmdCAgICAgIFBvcnRhYmxlIFN5bW1ldHJpYyBLZXkgQ29udGFpbmVyICAgICAgICAgICBKdWx5 IDIwMDcNCg0KDQogICBUaGUgRGlnZXN0QWxnb3JpdGhtVHlwZSBpcyBkZWZpbmVkIGFzIGZvbGxv d3M6DQoNCg0KICAgPHNpbXBsZVR5cGUgbmFtZT0iRGlnZXN0QWxnb3JpdGhtVHlwZSI+DQogICAg IDxyZXN0cmljdGlvbiBiYXNlPSJzdHJpbmciPg0KICAgICAgIDxlbnVtZXJhdGlvbiB2YWx1ZT0i SE1BQy1TSEExIi8+DQogICAgICAgPGVudW1lcmF0aW9uIHZhbHVlPSJITUFDLVNIQTI1NiIvPg0K ICAgICAgIDxlbnVtZXJhdGlvbiB2YWx1ZT0iSE1BQy1TSEE1MTIiLz4NCiAgICAgICA8ZW51bWVy YXRpb24gdmFsdWU9Ik9USEVSIi8+DQogICAgIDwvcmVzdHJpY3Rpb24+DQogICA8L3NpbXBsZVR5 cGU+DQoNCiAgICAgIEhNQUMtU0hBMSB3aGVuIHRoZSBkaWdlc3Qgd2FzIHBlcmZvcm1lZCB1c2lu ZyB0aGUgSE1BQy1TSEExDQogICAgICBhbGdvcml0aG0NCg0KICAgICAgSE1BQy1TSEExOTIgd2hl biB0aGUgZGlnZXN0IHdhcyBwZXJmb3JtZWQgdXNpbmcgdGhlIEhNQUMtU0hBMTkyDQogICAgICBh bGdvcml0aG0NCg0KICAgICAgSE1BQy1TSEEyNTYgd2hlbiB0aGUgZGlnZXN0IHdhcyBwZXJmb3Jt ZWQgdXNpbmcgdGhlIEhNQUMtU0hBMjU2DQogICAgICBhbGdvcml0aG0NCg0KICAgICAgT1RIRVIg ZXh0ZW5zaW9uIHBvaW50IGZvciBub3QgYWxyZWFkeSBkZWZpbmVkIGFsZ29yaXRobXMgaW4gdGhp cw0KICAgICAgbGlzdC4NCg0KNi41LiAgS2V5QWxnb3JpdGhtVHlwZQ0KDQogICBUaGUgS2V5QWxn b3JpdGhtVHlwZSBkZWZpbmVzIHRoZSBhbGdvcml0aG1zIGluIHdoaWNoIHRoZSBTZWNyZXQgS2V5 DQogICBkYXRhIGlzIHVzZWQuDQoNCiAgIFRoZSBLZXlBbGdvcml0aG1UeXBlIGlzIGRlZmluZWQg YXMgZm9sbG93czoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCkhv eWVyLCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxMCwgMjAwOCAgICAgICAgICAg ICAgIFtQYWdlIDMxXQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICBQb3J0YWJsZSBTeW1tZXRyaWMg S2V5IENvbnRhaW5lciAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KICAgPHNpbXBsZVR5cGUgbmFt ZT0iS2V5QWxnb3JpdGhtVHlwZSI+DQogICAgIDxyZXN0cmljdGlvbiBiYXNlPSJzdHJpbmciPg0K ICAgICAgIDxlbnVtZXJhdGlvbiB2YWx1ZT0iM0RFUzExMiIvPg0KICAgICAgIDxlbnVtZXJhdGlv biB2YWx1ZT0iM0RFUzE2OCIvPg0KICAgICAgIDxlbnVtZXJhdGlvbiB2YWx1ZT0iQUNUSSIvPg0K ICAgICAgIDxlbnVtZXJhdGlvbiB2YWx1ZT0iQUVTMTI4Ii8+DQogICAgICAgPGVudW1lcmF0aW9u IHZhbHVlPSJBRVMxOTIiLz4NCiAgICAgICA8ZW51bWVyYXRpb24gdmFsdWU9IkFFUzI1NiIvPg0K ICAgICAgIDxlbnVtZXJhdGlvbiB2YWx1ZT0iQU5TSVg5LjkiLz4NCiAgICAgICA8ZW51bWVyYXRp b24gdmFsdWU9IkRFUyIvPg0KICAgICAgIDxlbnVtZXJhdGlvbiB2YWx1ZT0iSE9UUCIvPg0KICAg ICAgIDxlbnVtZXJhdGlvbiB2YWx1ZT0iTUtFWUxBQkVMIi8+DQogICAgICAgPGVudW1lcmF0aW9u IHZhbHVlPSJSU0FTRUNVUkVJRCIvPg0KICAgICAgIDxlbnVtZXJhdGlvbiB2YWx1ZT0iVkFTQ08i Lz4NCiAgICAgICA8ZW51bWVyYXRpb24gdmFsdWU9Ik9USEVSIi8+DQogICAgIDwvcmVzdHJpY3Rp b24+DQogICA8L3NpbXBsZVR5cGU+DQoNCiAgICAgIDNERVMxMTIsIGEgMTEyLWJpdCAzREVTIGtl eSAoYS5rLmEuIHR3by1rZXkgM0RFUykNCg0KICAgICAgM0RFUzE2OCwgYSAxNjgtYml0IHBhcml0 eS1jaGVja2VkIDNERVMga2V5DQoNCiAgICAgIEFDVEksIGFsZ29yaXRobSBmYW1pbHkgZnJvbSBB Y3RpdklkZW50aXR5DQoNCiAgICAgIEFFUzEyOCwgYSAxMjgtYml0IEFFUyBrZXkNCg0KICAgICAg QUVTMTkyLCBhIDE5Mi1iaXQgQUVTIGtleQ0KDQogICAgICBBRVMyNTYsIGEgMjU2LWJpdCBBRVMg a2V5DQoNCiAgICAgIEFOU0lYOS45LCBBTlNJIFg5LjkgYWxnb3JpdGhtDQoNCiAgICAgIERFUywg YSBzdGFuZGFyZCBERVMga2V5DQoNCiAgICAgIEhPVFAsIGFzIGRlZmluZWQgaW4gW0hPVFBdDQoN CiAgICAgIE1LRVlMQUJFTCwgbWFzdGVyIGtleSBhYmVsIG9yIG5hbWUgd2hlbiBhbiBlbWJlZGRl ZCBkZXZpY2Uga2V5IGlzDQogICAgICB1c2VkIHRvIGRlcml2ZSB0aGUgS2V5DQoNCiAgICAgIFJT QVNFQ1VSRUlELCBTZWN1cmVJZCBhbGdvcml0aG0gZmFtaWx5IGZyb20gUlNBDQoNCiAgICAgIFZB U0NPLCBhbGdvcml0aG0gZmFtaWx5IGZyb20gVmFzY28NCg0KICAgICAgT1RIRVIgZXh0ZW5zaW9u IHBvaW50IGZvciBub3QgYWxyZWFkeSBkZWZpbmVkIGFsZ29yaXRobXMgaW4gdGhpcw0KICAgICAg bGlzdC4NCg0KDQoNCg0KDQoNCkhveWVyLCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgSmFudWFy eSAxMCwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDMyXQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAg ICBQb3J0YWJsZSBTeW1tZXRyaWMgS2V5IENvbnRhaW5lciAgICAgICAgICAgSnVseSAyMDA3DQoN Cg0KNi42LiAgdmFsdWVGb3JtYXQNCg0KICAgVGhlIHZhbHVlRm9ybWF0IGRlZmluZXMgYWxsb3dl ZCBmb3JtYXRzIGZvciBjaGFsbGVuZ2VzIG9yIHJlc3BvbnNlcw0KICAgaW4gdGhlIE9UUCBhbGdv cml0aG1zLg0KDQogICBUaGUgdmFsdWVGb3JtYXQgaXMgZGVmaW5lZCBhcyBmb2xsb3dzOg0KDQoN CiAgIDxzaW1wbGVUeXBlIG5hbWU9InZhbHVlRm9ybWF0Ij4NCiAgICAgPHJlc3RyaWN0aW9uIGJh c2U9InN0cmluZyI+DQogICAgICAgPGVudW1lcmF0aW9uIHZhbHVlPSJERUNJTUFMIi8+DQogICAg ICAgPGVudW1lcmF0aW9uIHZhbHVlPSJIRVhBREVDSU1BTCIvPg0KICAgICAgIDxlbnVtZXJhdGlv biB2YWx1ZT0iQUxQSEFOVU1FUklDIi8+DQogICAgICAgPGVudW1lcmF0aW9uIHZhbHVlPSJCQVNF NjQiLz4NCiAgICAgICA8ZW51bWVyYXRpb24gdmFsdWU9IkJJTkFSWSIvPg0KICAgICA8L3Jlc3Ry aWN0aW9uPg0KICAgPC9zaW1wbGVUeXBlPg0KDQogICAgICBERUNJTUFMIE9ubHkgbnVtZXJpY2Fs IGRpZ2l0cw0KDQogICAgICBIRVhBREVDSU1BTCBIZXhhZGVjaW1hbCByZXNwb25zZQ0KDQogICAg ICBBTFBIQU5VTUVSSUMgQWxsIGxldHRlcnMgYW5kIG51bWJlcnMgKGNhc2Ugc2Vuc2l0aXZlKQ0K DQogICAgICBCQVNFNjQgQmFzZSA2NCBlbmNvZGVkDQoNCiAgICAgIEJJTkFSWSBCaW5hcnkgZGF0 YSwgdGhpcyBpcyBtYWlubHkgdXNlZCBpbiBjYXNlIG9mIGNvbm5lY3RlZA0KICAgICAgZGV2aWNl cw0KDQo2LjcuICBEYXRhIGVsZW1lbnRzDQoNCjYuNy4xLiAgS2V5Q29udGFpbmVyDQoNCiAgIFRo ZSBLZXlDb250YWluZXIgZGF0YSBlbGVtZW50IGlzIGRlZmluZWQgYXM6DQoNCg0KICAgPGVsZW1l bnQgbmFtZT0iS2V5Q29udGFpbmVyIiB0eXBlPSJwc2tjOktleUNvbnRhaW5lclR5cGUiLz4NCg0K ICAgVGhlIEtleUNvbnRhaW5lciBkYXRhIGVsZW1lbnQgaXMgb2YgdHlwZSBLZXlDb250YWluZXJU eXBlIGRlZmluZWQgaW4NCiAgIFNlY3Rpb24gNi4xLjYuDQoNCiAgIFRoZSBFbmNyeXB0aW9uTWV0 aG9kIGRhdGEgZWxlbWVudCBpbiB0aGUgS2V5Q29udGFpbmVyIGRlZmluZXMgdGhlDQogICBlbmNy eXB0aW9uIGFsZ29yaXRobSB1c2VkIHRvIHByb3RlY3QgdGhlIEtleSBkYXRhLiAgSW4gYSBtdWx0 aS1rZXkNCiAgIEtleUNvbnRhaW5lciwgdGhlIHNhbWUgZW5jcnlwdGlvbiBtZXRob2QgYW5kIHRo ZSBzYW1lIGVuY3J5cHRpb24ga2V5DQogICBNVVNUIGJlIHVzZWQgZm9yIGFsbCBrZXkgZGF0YSBl bGVtZW50cy4NCg0KICAgVGhlIEtleUNvbnRhaW5lciBkYXRhIGVsZW1lbnQgTUFZIGNvbnRhaW4g bXVsdGlwbGUgRGV2aWNlIGRhdGENCiAgIGVsZW1lbnRzLCBhbGxvd2luZyBmb3IgYnVsayBwcm92 aXNpb25pbmcgb2Yga2V5cy4NCg0KDQoNCkhveWVyLCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMg SmFudWFyeSAxMCwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDMzXQ0KDA0KSW50ZXJuZXQtRHJh ZnQgICAgICBQb3J0YWJsZSBTeW1tZXRyaWMgS2V5IENvbnRhaW5lciAgICAgICAgICAgSnVseSAy MDA3DQoNCg0KICAgVGhlIFNpZ25hdHVyZSBkYXRhIGVsZW1lbnQgaXMgb2YgdHlwZSA8ZHM6U2ln bmF0dXJlPiBhcyBkZWZpbmVkIGluDQogICBbWE1MU0lHXSBhbmQgTUFZIGJlIG9taXR0ZWQgaW4g dGhlIEtleUNvbnRhaW5lciBkYXRhIGVsZW1lbnQgd2hlbg0KICAgYXBwbGljYXRpb24gbGF5ZXIg cHJvdmlzaW9uaW5nIG9yIHRyYW5zcG9ydCBsYXllciBwcm92aXNpb25pbmcNCiAgIHByb3RvY29s cyBwcm92aWRlIHRoZSBpbnRlZ3JpdHkgYW5kIGF1dGhlbnRpY2l0eSBvZiB0aGUgcGF5bG9hZA0K ICAgYmV0d2VlbiB0aGUgc2VuZGVyIGFuZCB0aGUgcmVjaXBpZW50IG9mIHRoZSBjb250YWluZXIu ICBXaGVuDQogICByZXF1aXJlZCwgdGhpcyBzcGVjaWZpY2F0aW9uIHJlY29tbWVuZHMgdXNpbmcg YSBzeW1tZXRyaWMga2V5IGJhc2VkDQogICBzaWduYXR1cmUgd2l0aCB0aGUgc2FtZSBrZXkgdXNl ZCBpbiB0aGUgZW5jcnlwdGlvbiBvZiB0aGUgc2VjcmV0IGtleQ0KICAgZGF0YS4gIFRoZSBzaWdu YXR1cmUgaXMgZW52ZWxvcGVkLg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQpIb3llciwg ZXQgYWwuICAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgMTAsIDIwMDggICAgICAgICAgICAgICBb UGFnZSAzNF0NCgwNCkludGVybmV0LURyYWZ0ICAgICAgUG9ydGFibGUgU3ltbWV0cmljIEtleSBD b250YWluZXIgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCjcuICBGb3JtYWwgU3ludGF4DQoNCiAg IFRoZSBmb2xsb3dpbmcgc3ludGF4IHNwZWNpZmljYXRpb24gdXNlcyB0aGUgd2lkZWx5IGFkb3B0 ZWQgWE1MIHNjaGVtYQ0KICAgZm9ybWF0IGFzIGRlZmluZWQgYnkgYSBXM0MgcmVjb21tZW5kYXRp b24NCiAgIChodHRwOi8vd3d3LnczLm9yZy9UUi94bWxzY2hlbWEtMC8pLiAgSXQgaXMgYSBjb21w bGV0ZSBzeW50YXgNCiAgIGRlZmluaXRpb24gaW4gdGhlIFhNTCBTY2hlbWEgRGVmaW5pdGlvbiBm b3JtYXQgKFhTRCkNCg0KICAgQWxsIGltcGxlbnRhdGlvbnMgb2YgdGhpcyBzdGFuZGFyZCBtdXN0 IGNvbXBseSB3aXRoIHRoZSBzY2hlbWEgYmVsb3cuDQoNCg0KICAgPD94bWwgdmVyc2lvbj0iMS4w IiBlbmNvZGluZz0iVVRGLTgiPz4NCiAgIDxzY2hlbWEgeG1sbnM9Imh0dHA6Ly93d3cudzMub3Jn LzIwMDEvWE1MU2NoZW1hIg0KICAgeG1sbnM6cHNrYz0idXJuOmlldGY6cGFyYW1zOnhtbDpuczpr ZXlwcm92OmNvbnRhaW5lciINCiAgIHhtbG5zOmRzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5 L3htbGRzaWcjIg0KICAgeG1sbnM6bG9nbz0idXJuOmlldGY6cGFyYW1zOnhtbDpuczprZXlwcm92 OmxvZ28iDQogICB0YXJnZXROYW1lc3BhY2U9InVybjppZXRmOnBhcmFtczp4bWw6bnM6a2V5cHJv djpjb250YWluZXIiDQogICBlbGVtZW50Rm9ybURlZmF1bHQ9InF1YWxpZmllZCIgYXR0cmlidXRl Rm9ybURlZmF1bHQ9InVucXVhbGlmaWVkIj4NCiAgIDxpbXBvcnQgbmFtZXNwYWNlPSJodHRwOi8v d3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjIg0KICAgc2NoZW1hTG9jYXRpb249Imh0dHA6Ly93 d3cudzMub3JnL1RSLzIwMDIvUkVDLXhtbGRzaWctY29yZS0yMDAyMDIxMi8NCiAgIHhtbGRzaWct Y29yZS1zY2hlbWEueHNkIi8+DQogICA8aW1wb3J0IG5hbWVzcGFjZT0idXJuOmlldGY6cGFyYW1z OnhtbDpuczprZXlwcm92OmxvZ28iDQogICBzY2hlbWFMb2NhdGlvbj0ib2F0aF9sb2dvdHlwZV92 MS4wLnhzZCIvPg0KICAgPGNvbXBsZXhUeXBlIG5hbWU9IktleUNvbnRhaW5lclR5cGUiPg0KICAg PHNlcXVlbmNlPg0KICAgPGVsZW1lbnQgbmFtZT0iRW5jcnlwdGlvbk1ldGhvZCI+DQogICA8Y29t cGxleFR5cGU+DQogICA8Y29tcGxleENvbnRlbnQ+DQogICA8ZXh0ZW5zaW9uIGJhc2U9InBza2M6 RW5jcnlwdGlvbk1ldGhvZFR5cGUiLz4NCiAgIDwvY29tcGxleENvbnRlbnQ+DQogICA8L2NvbXBs ZXhUeXBlPg0KICAgPC9lbGVtZW50Pg0KICAgPGVsZW1lbnQgbmFtZT0iRGlnZXN0TWV0aG9kIj4N CiAgIDxjb21wbGV4VHlwZT4NCiAgIDxjb21wbGV4Q29udGVudD4NCiAgIDxleHRlbnNpb24gYmFz ZT0icHNrYzpEaWdlc3RNZXRob2RUeXBlIi8+DQogICA8L2NvbXBsZXhDb250ZW50Pg0KICAgPC9j b21wbGV4VHlwZT4NCiAgIDwvZWxlbWVudD4NCiAgIDxlbGVtZW50IG5hbWU9IkRldmljZSIgdHlw ZT0icHNrYzpEZXZpY2VUeXBlIg0KICAgbWF4T2NjdXJzPSJ1bmJvdW5kZWQiLz4NCiAgIDxlbGVt ZW50IG5hbWU9IlNpZ25hdHVyZSIgdHlwZT0iZHM6U2lnbmF0dXJlVHlwZSINCiAgIG1pbk9jY3Vy cz0iMCIvPg0KICAgPC9zZXF1ZW5jZT4NCiAgIDxhdHRyaWJ1dGUgbmFtZT0idmVyc2lvbiIgdHlw ZT0icHNrYzpWZXJzaW9uVHlwZSINCiAgIHVzZT0icmVxdWlyZWQiLz4NCiAgIDwvY29tcGxleFR5 cGU+DQogICAgIDxjb21wbGV4VHlwZSBuYW1lPSJBbGdvcml0aG1JZGVudGlmaWVyVHlwZSI+DQog ICAgICAgPHNlcXVlbmNlPg0KDQoNCg0KSG95ZXIsIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBK YW51YXJ5IDEwLCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgMzVdDQoMDQpJbnRlcm5ldC1EcmFm dCAgICAgIFBvcnRhYmxlIFN5bW1ldHJpYyBLZXkgQ29udGFpbmVyICAgICAgICAgICBKdWx5IDIw MDcNCg0KDQogICAgICAgICA8ZWxlbWVudCBuYW1lPSJBbGdvcml0aG0iPg0KICAgICAgICAgICA8 c2ltcGxlVHlwZT4NCiAgICAgICAgICAgICA8cmVzdHJpY3Rpb24gYmFzZT0ic3RyaW5nIj4NCiAg ICAgICAgICAgICAgIDxlbnVtZXJhdGlvbiB2YWx1ZT0iT0NSQS1IT1RQIi8+DQogICAgICAgICAg ICAgPC9yZXN0cmljdGlvbj4NCiAgICAgICAgICAgPC9zaW1wbGVUeXBlPg0KICAgICAgICAgPC9l bGVtZW50Pg0KICAgICAgICAgPGVsZW1lbnQgbmFtZT0iQ3J5cHRvRnVuY3Rpb24iDQogICAgICAg ICB0eXBlPSJwc2tjOkRpZ2VzdEFsZ29yaXRobVR5cGUiLz4NCiAgICAgICAgIDxlbGVtZW50IG5h bWU9IlRydW5jYXRpb24iPg0KICAgICAgICAgICA8c2ltcGxlVHlwZT4NCiAgICAgICAgICAgICA8 cmVzdHJpY3Rpb24gYmFzZT0iZGVjaW1hbCI+DQogICAgICAgICAgICAgICA8bWluSW5jbHVzaXZl IHZhbHVlPSI0Ii8+DQogICAgICAgICAgICAgICA8bWF4SW5jbHVzaXZlIHZhbHVlPSIxMCIvPg0K ICAgICAgICAgICAgIDwvcmVzdHJpY3Rpb24+DQogICAgICAgICAgIDwvc2ltcGxlVHlwZT4NCiAg ICAgICAgIDwvZWxlbWVudD4NCiAgICAgICAgIDxlbGVtZW50IG5hbWU9IlBpbiINCiAgICAgICAg IHR5cGU9ImJvb2xlYW4iLz4NCiAgICAgICAgIDxlbGVtZW50IG5hbWU9IkNvdW50ZXIiDQogICAg ICAgICB0eXBlPSJib29sZWFuIi8+DQogICAgICAgICA8ZWxlbWVudCBuYW1lPSJUaW1lIg0KICAg ICAgICAgdHlwZT0iYm9vbGVhbiIvPg0KICAgICAgICAgPGVsZW1lbnQgbmFtZT0iU2Vzc2lvbiIN CiAgICAgICAgIHR5cGU9ImJvb2xlYW4iLz4NCiAgICAgICAgIDxlbGVtZW50IG5hbWU9IkNoYWxs ZW5nZSINCiAgICAgICAgIHR5cGU9ImJvb2xlYW4iLz4NCiAgICAgICA8L3NlcXVlbmNlPg0KICAg ICA8L2NvbXBsZXhUeXBlPg0KICAgPGNvbXBsZXhUeXBlIG5hbWU9IktleVR5cGUiPg0KICAgPHNl cXVlbmNlPg0KICAgPGVsZW1lbnQgbmFtZT0iSXNzdWVyIiB0eXBlPSJzdHJpbmciLz4NCiAgIDxl bGVtZW50IG5hbWU9IlVzYWdlIiB0eXBlPSJwc2tjOlVzYWdlVHlwZSIvPg0KICAgPGVsZW1lbnQg bmFtZT0iRnJpZW5kbHlOYW1lIiB0eXBlPSJzdHJpbmciDQogICBtaW5PY2N1cnM9IjAiLz4NCiAg IDxlbGVtZW50IG5hbWU9IkRhdGEiIHR5cGU9InBza2M6RGF0YVR5cGUiDQogICBtaW5PY2N1cnM9 IjAiLz4NCiAgIDxlbGVtZW50IG5hbWU9IkFjY2Vzc1J1bGVzIiBtaW5PY2N1cnM9IjAiPg0KICAg PGNvbXBsZXhUeXBlPg0KICAgPHNpbXBsZUNvbnRlbnQ+DQogICA8ZXh0ZW5zaW9uIGJhc2U9InN0 cmluZyI+DQogICA8YXR0cmlidXRlIG5hbWU9InVzZXJQSU4iIHR5cGU9ImJvb2xlYW4iDQogICB1 c2U9Im9wdGlvbmFsIiBkZWZhdWx0PSJmYWxzZSIvPg0KICAgPC9leHRlbnNpb24+DQogICA8L3Np bXBsZUNvbnRlbnQ+DQogICA8L2NvbXBsZXhUeXBlPg0KICAgPC9lbGVtZW50Pg0KICAgPGVsZW1l bnQgbmFtZT0iTG9nbyIgdHlwZT0ibG9nbzpMb2dvVHlwZSINCg0KDQoNCkhveWVyLCBldCBhbC4g ICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxMCwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDM2 XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICBQb3J0YWJsZSBTeW1tZXRyaWMgS2V5IENvbnRhaW5l ciAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KICAgbWluT2NjdXJzPSIwIi8+DQogICA8ZWxlbWVu dCBuYW1lPSJFeHBpcnkiIHR5cGU9InN0cmluZyIgbWluT2NjdXJzPSIwIi8+DQogICA8L3NlcXVl bmNlPg0KICAgPGF0dHJpYnV0ZSBuYW1lPSJLZXlJZCIgdHlwZT0ic3RyaW5nIiB1c2U9InJlcXVp cmVkIi8+DQogICA8YXR0cmlidXRlIG5hbWU9IktleUFsZ29yaXRobSINCiAgIHR5cGU9InBza2M6 S2V5QWxnb3JpdGhtVHlwZSIgdXNlPSJyZXF1aXJlZCIvPg0KICAgPGF0dHJpYnV0ZSBuYW1lPSJl eHQtS2V5QWxnb3JpdGhtIiB0eXBlPSJzdHJpbmciLz4NCiAgIDwvY29tcGxleFR5cGU+DQogICA8 Y29tcGxleFR5cGUgbmFtZT0iRGV2aWNlSWRUeXBlIj4NCiAgIDxzZXF1ZW5jZT4NCiAgIDxlbGVt ZW50IG5hbWU9Ik1hbnVmYWN0dXJlciIgdHlwZT0ic3RyaW5nIi8+DQogICA8ZWxlbWVudCBuYW1l PSJTZXJpYWxObyIgdHlwZT0ic3RyaW5nIi8+DQogICA8ZWxlbWVudCBuYW1lPSJNb2RlbCIgdHlw ZT0ic3RyaW5nIiBtaW5PY2N1cnM9IjAiLz4NCiAgIDxlbGVtZW50IG5hbWU9Iklzc3VlTm8iIHR5 cGU9InN0cmluZyIgbWluT2NjdXJzPSIwIi8+DQogICA8ZWxlbWVudCBuYW1lPSJFeHBpcnkiIHR5 cGU9InN0cmluZyIgbWluT2NjdXJzPSIwIi8+DQogICA8L3NlcXVlbmNlPg0KICAgPC9jb21wbGV4 VHlwZT4NCiAgIDxjb21wbGV4VHlwZSBuYW1lPSJEZXZpY2VUeXBlIj4NCiAgIDxzZXF1ZW5jZT4N CiAgIDxlbGVtZW50IG5hbWU9IkRldmljZUlkIiB0eXBlPSJwc2tjOkRldmljZUlkVHlwZSINCiAg IG1pbk9jY3Vycz0iMCIvPg0KICAgPGVsZW1lbnQgbmFtZT0iS2V5IiB0eXBlPSJwc2tjOktleVR5 cGUiDQogICBtYXhPY2N1cnM9InVuYm91bmRlZCIvPg0KICAgPGVsZW1lbnQgbmFtZT0iVXNlciIg dHlwZT0icHNrYzpVc2VyVHlwZSINCiAgIG1pbk9jY3Vycz0iMCIvPg0KICAgPC9zZXF1ZW5jZT4N CiAgIDwvY29tcGxleFR5cGU+DQogICA8Y29tcGxleFR5cGUgbmFtZT0iVXNlclR5cGUiPg0KICAg PHNlcXVlbmNlPg0KICAgPHNlcXVlbmNlPg0KICAgPGVsZW1lbnQgbmFtZT0iVXNlcklkIiB0eXBl PSJzdHJpbmciIG1pbk9jY3Vycz0iMCIvPg0KICAgPGVsZW1lbnQgbmFtZT0iRmlyc3ROYW1lIiB0 eXBlPSJzdHJpbmciIG1pbk9jY3Vycz0iMCIvPg0KICAgPGVsZW1lbnQgbmFtZT0iTGFzdE5hbWUi IG1pbk9jY3Vycz0iMCIvPg0KICAgPC9zZXF1ZW5jZT4NCiAgIDxlbGVtZW50IG5hbWU9Ik9yZyIg dHlwZT0ic3RyaW5nIiBtaW5PY2N1cnM9IjAiLz4NCiAgIDwvc2VxdWVuY2U+DQogICA8L2NvbXBs ZXhUeXBlPg0KICAgPGNvbXBsZXhUeXBlIG5hbWU9IlVzYWdlVHlwZSI+DQogICA8c2VxdWVuY2U+ DQogICA8ZWxlbWVudCBuYW1lPSJBbGdvcml0aG1JZGVudGlmaWVyIg0KICAgdHlwZT0icHNrYzpB bGdvcml0aG1JZGVudGlmaWVyVHlwZSIgbWluT2NjdXJzPSIwIi8+DQogICA8ZWxlbWVudCBuYW1l PSJSZXNwb25zZUZvcm1hdCI+DQogICA8Y29tcGxleFR5cGU+DQogICA8YXR0cmlidXRlIG5hbWU9 ImZvcm1hdCIgdHlwZT0icHNrYzp2YWx1ZUZvcm1hdCINCiAgIHVzZT0icmVxdWlyZWQiLz4NCiAg IDxhdHRyaWJ1dGUgbmFtZT0ibGVuZ3RoIiB0eXBlPSJ1bnNpZ25lZEludCIgdXNlPSJyZXF1aXJl ZCIvPg0KICAgPGF0dHJpYnV0ZSBuYW1lPSJjaGVja0RpZ2l0cyIgdHlwZT0iYm9vbGVhbiIgdXNl PSJvcHRpb25hbCINCiAgIGRlZmF1bHQ9ImZhbHNlIi8+DQoNCg0KDQpIb3llciwgZXQgYWwuICAg ICAgICAgICBFeHBpcmVzIEphbnVhcnkgMTAsIDIwMDggICAgICAgICAgICAgICBbUGFnZSAzN10N CgwNCkludGVybmV0LURyYWZ0ICAgICAgUG9ydGFibGUgU3ltbWV0cmljIEtleSBDb250YWluZXIg ICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCiAgIDwvY29tcGxleFR5cGU+DQogICA8L2VsZW1lbnQ+ DQogICA8ZWxlbWVudCBuYW1lPSJDaGFsbGVuZ2VGb3JtYXQiIG1pbk9jY3Vycz0iMCI+DQogICA8 Y29tcGxleFR5cGU+DQogICA8YXR0cmlidXRlIG5hbWU9ImZvcm1hdCIgdHlwZT0icHNrYzp2YWx1 ZUZvcm1hdCINCiAgIHVzZT0icmVxdWlyZWQiLz4NCiAgIDxhdHRyaWJ1dGUgbmFtZT0ibWluIiB0 eXBlPSJ1bnNpZ25lZEludCIgdXNlPSJyZXF1aXJlZCIvPg0KICAgPGF0dHJpYnV0ZSBuYW1lPSJt YXgiIHR5cGU9InVuc2lnbmVkSW50IiB1c2U9InJlcXVpcmVkIi8+DQogICA8YXR0cmlidXRlIG5h bWU9ImNoZWNrRGlnaXRzIiB0eXBlPSJib29sZWFuIiB1c2U9Im9wdGlvbmFsIg0KICAgZGVmYXVs dD0iZmFsc2UiLz4NCiAgIDwvY29tcGxleFR5cGU+DQogICA8L2VsZW1lbnQ+DQogICA8ZWxlbWVu dCBuYW1lPSJUaW1lIiB0eXBlPSJ1bnNpZ25lZExvbmciIG1pbk9jY3Vycz0iMCIvPg0KICAgPGVs ZW1lbnQgbmFtZT0iQXBwUHJvZmlsZUlkIiB0eXBlPSJzdHJpbmciIG1pbk9jY3Vycz0iMCIvPg0K ICAgPC9zZXF1ZW5jZT4NCiAgIDxhdHRyaWJ1dGUgbmFtZT0ib3RwIiB0eXBlPSJib29sZWFuIiB1 c2U9Im9wdGlvbmFsIg0KICAgZGVmYXVsdD0iZmFsc2UiLz4NCiAgIDxhdHRyaWJ1dGUgbmFtZT0i Y3IiIHR5cGU9ImJvb2xlYW4iIHVzZT0ib3B0aW9uYWwiDQogICBkZWZhdWx0PSJmYWxzZSIvPg0K ICAgPGF0dHJpYnV0ZSBuYW1lPSJzaWduIiB0eXBlPSJib29sZWFuIiB1c2U9Im9wdGlvbmFsIg0K ICAgZGVmYXVsdD0iZmFsc2UiLz4NCiAgIDxhdHRyaWJ1dGUgbmFtZT0iZW5jcnlwdCIgdHlwZT0i Ym9vbGVhbiIgdXNlPSJvcHRpb25hbCINCiAgIGRlZmF1bHQ9ImZhbHNlIi8+DQogICA8YXR0cmli dXRlIG5hbWU9InVubG9jayIgdHlwZT0iYm9vbGVhbiIgdXNlPSJvcHRpb25hbCINCiAgIGRlZmF1 bHQ9ImZhbHNlIi8+DQogICA8L2NvbXBsZXhUeXBlPg0KICAgPGNvbXBsZXhUeXBlIG5hbWU9IkF0 dHJpYnV0ZVR5cGUiPg0KICAgPHNpbXBsZUNvbnRlbnQ+DQogICA8ZXh0ZW5zaW9uIGJhc2U9InN0 cmluZyI+DQogICA8YXR0cmlidXRlIG5hbWU9Im5hbWUiIHR5cGU9InN0cmluZyIgdXNlPSJyZXF1 aXJlZCIvPg0KICAgPC9leHRlbnNpb24+DQogICA8L3NpbXBsZUNvbnRlbnQ+DQogICA8L2NvbXBs ZXhUeXBlPg0KICAgPGNvbXBsZXhUeXBlIG5hbWU9IkVuY3J5cHRpb25NZXRob2RUeXBlIj4NCiAg IDxzZXF1ZW5jZT4NCiAgIDxlbGVtZW50IG5hbWU9IkVuY0tleUxhYmVsIiBtaW5PY2N1cnM9IjAi Lz4NCiAgIDxjaG9pY2U+DQogICAgICAgICAgIDxzZXF1ZW5jZT4NCiAgICAgICAgICAgICA8ZWxl bWVudCBuYW1lPSJLZXlJbmZvIg0KICAgICAgICAgICAgIHR5cGU9ImRzOktleUluZm9UeXBlIiBt aW5PY2N1cnM9IjAiLz4NCiAgICAgICAgICAgICA8ZWxlbWVudCBuYW1lPSJPQUVQUGFyYW1zIg0K ICAgICAgICAgICAgIHR5cGU9ImJhc2U2NEJpbmFyeSIgbWluT2NjdXJzPSIwIi8+DQogICAgICAg ICAgICAgPGVsZW1lbnQgbmFtZT0iSGFzaEFsZ29yaXRobSINCiAgICAgICAgICAgICB0eXBlPSJw c2tjOkhhc2hBbGdvcml0aG1UeXBlIiBtaW5PY2N1cnM9IjAiLz4NCiAgICAgICAgICAgPC9zZXF1 ZW5jZT4NCiAgIDxzZXF1ZW5jZT4NCiAgIDxlbGVtZW50IG5hbWU9IlBCRVNhbHQiIHR5cGU9ImJh c2U2NEJpbmFyeSINCiAgIG1pbk9jY3Vycz0iMCIvPg0KDQoNCg0KSG95ZXIsIGV0IGFsLiAgICAg ICAgICAgRXhwaXJlcyBKYW51YXJ5IDEwLCAyMDA4ICAgICAgICAgICAgICAgW1BhZ2UgMzhdDQoM DQpJbnRlcm5ldC1EcmFmdCAgICAgIFBvcnRhYmxlIFN5bW1ldHJpYyBLZXkgQ29udGFpbmVyICAg ICAgICAgICBKdWx5IDIwMDcNCg0KDQogICA8ZWxlbWVudCBuYW1lPSJQQkVJdGVyYXRpb25Db3Vu dCIgdHlwZT0iaW50Ig0KICAgbWluT2NjdXJzPSIwIi8+DQogICA8ZWxlbWVudCBuYW1lPSJJViIg dHlwZT0iYmFzZTY0QmluYXJ5IiBtaW5PY2N1cnM9IjAiLz4NCiAgIDwvc2VxdWVuY2U+DQogICA8 L2Nob2ljZT4NCiAgIDwvc2VxdWVuY2U+DQogICA8YXR0cmlidXRlIG5hbWU9ImFsZ29yaXRobSIN CiAgIHR5cGU9InBza2M6RW5jcnlwdGlvbkFsZ29yaXRobVR5cGUiIHVzZT0icmVxdWlyZWQiLz4N CiAgIDwvY29tcGxleFR5cGU+DQogICA8Y29tcGxleFR5cGUgbmFtZT0iRGlnZXN0TWV0aG9kVHlw ZSI+DQogICA8c2VxdWVuY2U+DQogICA8ZWxlbWVudCBuYW1lPSJEaWdlc3RLZXlMYWJlbCIgbWlu T2NjdXJzPSIwIi8+DQogICA8L3NlcXVlbmNlPg0KICAgPGF0dHJpYnV0ZSBuYW1lPSJhbGdvcml0 aG0iDQogICB0eXBlPSJwc2tjOkRpZ2VzdEFsZ29yaXRobVR5cGUiIHVzZT0icmVxdWlyZWQiLz4N CiAgIDxhdHRyaWJ1dGUgbmFtZT0iZXh0LWFsZ29yaXRobSIgdHlwZT0ic3RyaW5nIi8+DQogICA8 L2NvbXBsZXhUeXBlPg0KICAgPHNpbXBsZVR5cGUgbmFtZT0iRW5jcnlwdGlvbkFsZ29yaXRobVR5 cGUiPg0KICAgPHJlc3RyaWN0aW9uIGJhc2U9InN0cmluZyI+DQogICA8ZW51bWVyYXRpb24gdmFs dWU9Ik5PTkUiLz4NCiAgIDxlbnVtZXJhdGlvbiB2YWx1ZT0iUEJFLTNERVMxMTItQ0JDIi8+DQog ICA8ZW51bWVyYXRpb24gdmFsdWU9IlBCRS0zREVTMTY4LUNCQyIvPg0KICAgPGVudW1lcmF0aW9u IHZhbHVlPSJQQkUtQUVTMTI4LUNCQyIvPg0KICAgPGVudW1lcmF0aW9uIHZhbHVlPSJQQkUtQUVT MjU2LUNCQyIvPg0KICAgPGVudW1lcmF0aW9uIHZhbHVlPSJQQkUtQUVTMTkyLUNCQyIvPg0KICAg PGVudW1lcmF0aW9uIHZhbHVlPSIzREVTMTEyLUNCQyIvPg0KICAgPGVudW1lcmF0aW9uIHZhbHVl PSIzREVTMTY4LUNCQyIvPg0KICAgPGVudW1lcmF0aW9uIHZhbHVlPSJBRVMxMjgtQ0JDIi8+DQog ICA8ZW51bWVyYXRpb24gdmFsdWU9IkFFUzE5Mi1DQkMiLz4NCiAgIDxlbnVtZXJhdGlvbiB2YWx1 ZT0iQUVTMjU2LUNCQyIvPg0KICAgPGVudW1lcmF0aW9uIHZhbHVlPSJSU0EtMV81Ii8+DQogICA8 ZW51bWVyYXRpb24gdmFsdWU9IlJTQS1PQUVQLU1HRjFQIi8+DQogICA8ZW51bWVyYXRpb24gdmFs dWU9Ik9USEVSIi8+DQogICA8L3Jlc3RyaWN0aW9uPg0KICAgPC9zaW1wbGVUeXBlPg0KICAgPHNp bXBsZVR5cGUgbmFtZT0iRGlnZXN0QWxnb3JpdGhtVHlwZSI+DQogICA8cmVzdHJpY3Rpb24gYmFz ZT0ic3RyaW5nIj4NCiAgIDxlbnVtZXJhdGlvbiB2YWx1ZT0iSE1BQy1TSEExIi8+DQogICA8ZW51 bWVyYXRpb24gdmFsdWU9IkhNQUMtU0hBMjU2Ii8+DQogICA8ZW51bWVyYXRpb24gdmFsdWU9IkhN QUMtU0hBNTEyIi8+DQogICA8ZW51bWVyYXRpb24gdmFsdWU9Ik9USEVSIi8+DQogICA8L3Jlc3Ry aWN0aW9uPg0KICAgPC9zaW1wbGVUeXBlPg0KICAgICA8c2ltcGxlVHlwZSBuYW1lPSJIYXNoQWxn b3JpdGhtVHlwZSI+DQogICAgICAgPHJlc3RyaWN0aW9uIGJhc2U9InN0cmluZyI+DQogICAgICAg ICA8ZW51bWVyYXRpb24gdmFsdWU9IlNIQTEiLz4NCiAgICAgICAgIDxlbnVtZXJhdGlvbiB2YWx1 ZT0iU0hBMjU2Ii8+DQogICAgICAgICA8ZW51bWVyYXRpb24gdmFsdWU9IlNIQTUxMiIvPg0KDQoN Cg0KSG95ZXIsIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDEwLCAyMDA4ICAgICAg ICAgICAgICAgW1BhZ2UgMzldDQoMDQpJbnRlcm5ldC1EcmFmdCAgICAgIFBvcnRhYmxlIFN5bW1l dHJpYyBLZXkgQ29udGFpbmVyICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQogICAgICAgPC9yZXN0 cmljdGlvbj4NCiAgICAgPC9zaW1wbGVUeXBlPg0KICAgPHNpbXBsZVR5cGUgbmFtZT0iS2V5QWxn b3JpdGhtVHlwZSI+DQogICA8cmVzdHJpY3Rpb24gYmFzZT0ic3RyaW5nIj4NCiAgIDxlbnVtZXJh dGlvbiB2YWx1ZT0iM0RFUzExMiIvPg0KICAgPGVudW1lcmF0aW9uIHZhbHVlPSIzREVTMTY4Ii8+ DQogICA8ZW51bWVyYXRpb24gdmFsdWU9IkFDVEkiLz4NCiAgIDxlbnVtZXJhdGlvbiB2YWx1ZT0i QUVTMTI4Ii8+DQogICA8ZW51bWVyYXRpb24gdmFsdWU9IkFFUzE5MiIvPg0KICAgPGVudW1lcmF0 aW9uIHZhbHVlPSJBRVMyNTYiLz4NCiAgIDxlbnVtZXJhdGlvbiB2YWx1ZT0iQU5TSVg5LjkiLz4N CiAgIDxlbnVtZXJhdGlvbiB2YWx1ZT0iREVTIi8+DQogICA8ZW51bWVyYXRpb24gdmFsdWU9IkhP VFAiLz4NCiAgIDxlbnVtZXJhdGlvbiB2YWx1ZT0iTUtFWUxBQkVMIi8+DQogICA8ZW51bWVyYXRp b24gdmFsdWU9IlJTQVNFQ1VSRUlEIi8+DQogICA8ZW51bWVyYXRpb24gdmFsdWU9IlZBU0NPIi8+ DQogICA8ZW51bWVyYXRpb24gdmFsdWU9Ik9USEVSIi8+DQogICA8L3Jlc3RyaWN0aW9uPg0KICAg PC9zaW1wbGVUeXBlPg0KICAgPHNpbXBsZVR5cGUgbmFtZT0idmFsdWVGb3JtYXQiPg0KICAgPHJl c3RyaWN0aW9uIGJhc2U9InN0cmluZyI+DQogICA8ZW51bWVyYXRpb24gdmFsdWU9IkRFQ0lNQUwi Lz4NCiAgIDxlbnVtZXJhdGlvbiB2YWx1ZT0iSEVYQURFQ0lNQUwiLz4NCiAgIDxlbnVtZXJhdGlv biB2YWx1ZT0iQUxQSEFOVU1FUklDIi8+DQogICA8ZW51bWVyYXRpb24gdmFsdWU9IkJBU0U2NCIv Pg0KICAgPGVudW1lcmF0aW9uIHZhbHVlPSJCSU5BUlkiLz4NCiAgIDwvcmVzdHJpY3Rpb24+DQog ICA8L3NpbXBsZVR5cGU+DQogICA8c2ltcGxlVHlwZSBuYW1lPSJWZXJzaW9uVHlwZSIgZmluYWw9 InJlc3RyaWN0aW9uIj4NCiAgIDxyZXN0cmljdGlvbiBiYXNlPSJzdHJpbmciPg0KICAgPHBhdHRl cm4gdmFsdWU9IlxkezEsOX1cLlxkezAsOX0iLz4NCiAgIDwvcmVzdHJpY3Rpb24+DQogICA8L3Np bXBsZVR5cGU+DQogICA8ZWxlbWVudCBuYW1lPSJLZXlDb250YWluZXIiDQogICB0eXBlPSJwc2tj OktleUNvbnRhaW5lclR5cGUiLz4NCiAgIDxjb21wbGV4VHlwZSBuYW1lPSJEYXRhVHlwZSI+DQog ICA8c2VxdWVuY2U+DQogICA8ZWxlbWVudCBuYW1lPSJWYWx1ZSIgdHlwZT0iYmFzZTY0QmluYXJ5 Ii8+DQogICA8ZWxlbWVudCBuYW1lPSJWYWx1ZURpZ2VzdCINCiAgIHR5cGU9ImJhc2U2NEJpbmFy eSIgbWluT2NjdXJzPSIwIi8+DQogICA8L3NlcXVlbmNlPg0KICAgPC9jb21wbGV4VHlwZT4NCiAg IDwvc2NoZW1hPg0KDQoNCg0KDQoNCg0KDQoNCkhveWVyLCBldCBhbC4gICAgICAgICAgIEV4cGly ZXMgSmFudWFyeSAxMCwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDQwXQ0KDA0KSW50ZXJuZXQt RHJhZnQgICAgICBQb3J0YWJsZSBTeW1tZXRyaWMgS2V5IENvbnRhaW5lciAgICAgICAgICAgSnVs eSAyMDA3DQoNCg0KOC4gIFNlY3VyaXR5IENvbnNpZGVyYXRpb25zDQoNCiAgIFRoZSBwb3J0YWJs ZSBrZXkgY29udGFpbmVyIGNhcnJpZXMgc2Vuc2l0aXZlIGluZm9ybWF0aW9uIChlLmcuLA0KICAg Y3J5cHRvZ3JhcGhpYyBrZXlzKSBhbmQgbWF5IGJlIHRyYW5zcG9ydGVkIGFjcm9zcyB0aGUgYm91 bmRhcmllcyBvZg0KICAgb25lIHNlY3VyZSBwZXJpbWV0ZXIgdG8gYW5vdGhlci4gIEZvciBleGFt cGxlLCBhIGNvbnRhaW5lciByZXNpZGluZw0KICAgd2l0aGluIHRoZSBzZWN1cmUgcGVyaW1ldGVy IG9mIGEgYmFjay1lbmQgcHJvdmlzaW9uaW5nIHNlcnZlciBpbiBhDQogICBzZWN1cmUgcm9vbSBt YXkgYmUgdHJhbnNwb3J0ZWQgYWNyb3NzIHRoZSBpbnRlcm5ldCB0byBhbiBlbmQtdXNlcg0KICAg ZGV2aWNlIGF0dGFjaGVkIHRvIGEgcGVyc29uYWwgY29tcHV0ZXIuICBUaGlzIG1lYW5zIHRoYXQg c3BlY2lhbCBjYXJlDQogICBtdXN0IGJlIHRha2VuIHRvIGVuc3VyZSB0aGUgY29uZmlkZW50aWFs aXR5LCBpbnRlZ3JpdHksIGFuZA0KICAgYXV0aGVudGljaXR5IG9mIHRoZSBpbmZvcm1hdGlvbiBj b250YWluZWQgd2l0aGluLg0KDQo4LjEuICBQYXlsb2FkIGNvbmZpZGVudGlhbGl0eQ0KDQogICBC eSBkZXNpZ24sIHRoZSBjb250YWluZXIgYWxsb3dzIHR3byBtYWluIGFwcHJvYWNoZXMgdG8gZ3Vh cmFudGVlaW5nDQogICB0aGUgY29uZmlkZW50aWFsaXR5IG9mIHRoZSBpbmZvcm1hdGlvbiBpdCBj b250YWlucyB3aGlsZSB0cmFuc3BvcnRlZC4NCg0KICAgRmlyc3QsIHRoZSBjb250YWluZXIga2V5 IGRhdGEgcGF5bG9hZCBtYXkgYmUgZW5jcnlwdGVkLg0KDQogICBJbiB0aGlzIGNhc2Ugbm8gdHJh bnNwb3J0IGxheWVyIHNlY3VyaXR5IGlzIHJlcXVpcmVkLiAgSG93ZXZlciwNCiAgIHN0YW5kYXJk IHNlY3VyaXR5IGJlc3QgcHJhY3RpY2VzIGFwcGx5IHdoZW4gc2VsZWN0aW5nIHRoZSBzdHJlbmd0 aCBvZg0KICAgdGhlIGNyeXB0b2dyYXBoaWMgYWxnb3JpdGhtIGZvciBwYXlsb2FkIGVuY3J5cHRp b24uICBTeW1tZXRyaWMNCiAgIGNyeXB0b2dyYXBoaWMgY2lwaGVyIHNob3VsZCBiZSB1c2VkIC0g dGhlIGxvbmdlciB0aGUgY3J5cHRvZ3JhcGhpYw0KICAga2V5LCB0aGUgc3Ryb25nZXIgdGhlIHBy b3RlY3Rpb24uICBBdCB0aGUgdGltZSBvZiB0aGlzIHdyaXRpbmcgYm90aA0KICAgM0RFUyBhbmQg QUVTIGFyZSByZWNvbW1lbmRlZCBhbGdvcml0aG1zIGJ1dCAzREVTIG1heSBiZSBkcm9wcGVkIGlu DQogICB0aGUgcmVsYXRpdmVseSBuZWFyIGZ1dHVyZS4gIEFwcGxpY2F0aW9ucyBjb25jZXJuZWQg d2l0aCBhbGdvcml0aG0NCiAgIGxvbmdldml0eSBhcmUgYWR2aXNlZCB0byB1c2UgQUVTLiAgSW4g Y2FzZXMgd2hlcmUgdGhlIGV4Y2hhbmdlIG9mDQogICBlbmNyeXB0aW9uIGtleXMgYmV0d2VlbiB0 aGUgc2VuZGVyIGFuZCB0aGUgcmVjZWl2ZXIgaXMgbm90IHBvc3NpYmxlLA0KICAgYXN5bW1ldHJp YyBlbmNyeXB0aW9uIG9mIHRoZSBzZWNyZXQga2V5IHBheWxvYWQgbWF5IGJlIGVtcGxveWVkLg0K ICAgU2ltaWxhcmx5IHRvIHN5bW1ldHJpYyBrZXkgY3J5cHRvZ3JhcGh5LCB0aGUgc3Ryb25nZXIg dGhlIGFzeW1tZXRyaWMNCiAgIGtleSwgdGhlIG1vcmUgc2VjdXJlIHRoZSBwcm90ZWN0aW9uIGlz Lg0KDQogICBJZiB0aGUgcGF5bG9hZCBpcyBlbmNyeXB0ZWQgd2l0aCBhIG1ldGhvZCB0aGF0IHVz ZXMgb25lIG9mIHRoZQ0KICAgcGFzc3dvcmQtYmFzZWQgZW5jcnlwdGlvbiBtZXRob2RzIHByb3Zp ZGVkIGFib3ZlLCB0aGUgcGF5bG9hZCBtYXkgYmUNCiAgIHN1YmplY3RlZCB0byBwYXNzd29yZCBk aWN0aW9uYXJ5IGF0dGFja3MgdG8gYnJlYWsgdGhlIGVuY3J5cHRpb24NCiAgIHBhc3N3b3JkIGFu ZCByZWNvdmVyIHRoZSBpbmZvcm1hdGlvbi4gIFN0YW5kYXJkIHNlY3VyaXR5IGJlc3QNCiAgIHBy YWN0aWNlcyBmb3Igc2VsZWN0aW9uIG9mIHN0cm9uZyBlbmNyeXB0aW9uIHBhc3N3b3JkcyBhcHBs eQ0KICAgW1NjaG5laWVyXS4NCg0KICAgUHJhY3RpY2FsIGltcGxlbWVudGF0aW9ucyBzaG91bGQg dXNlIFBCRVNhbHQgYW5kIFBCRUl0ZXJhdGlvbkNvdW50DQogICB3aGVuIFBCRSBlbmNyeXB0aW9u IGlzIHVzZWQuICBEaWZmZXJlbnQgUEJFU2FsdCB2YWx1ZSBwZXIgY3JlZGVudGlhbA0KICAgcmVj b3JkIHNob3VsZCBiZSB1c2VkIGZvciBiZXN0IHByb3RlY3Rpb24uDQoNCiAgIFRoZSBzZWNvbmQg YXBwcm9hY2ggdG8gcHJvdGVjdGluZyB0aGUgY29uZmlkZW50aWFsaXR5IG9mIHRoZSBwYXlsb2Fk DQogICBpcyBiYXNlZCBvbiB1c2luZyB0cmFuc3BvcnQgbGF5ZXIgc2VjdXJpdHkuICBUaGUgc2Vj dXJlIGNoYW5uZWwNCiAgIGVzdGFibGlzaGVkIGJldHdlZW4gdGhlIHNvdXJjZSBzZWN1cmUgcGVy aW1ldGVyICh0aGUgcHJvdmlzaW9uaW5nDQogICBzZXJ2ZXIgZnJvbSB0aGUgZXhhbXBsZSBhYm92 ZSkgYW5kIHRoZSB0YXJnZXQgcGVyaW1ldGVyICh0aGUgZGV2aWNlDQogICBhdHRhY2hlZCB0byB0 aGUgZW5kLXVzZXIgY29tcHV0ZXIpIHV0aWxpemVzIGVuY3J5cHRpb24gdG8gdHJhbnNwb3J0DQog ICB0aGUgbWVzc2FnZXMgdGhhdCB0cmF2ZWwgYWNyb3NzLiAgTm8gcGF5bG9hZCBlbmNyeXB0aW9u IGlzIHJlcXVpcmVkDQoNCg0KDQpIb3llciwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIEphbnVh cnkgMTAsIDIwMDggICAgICAgICAgICAgICBbUGFnZSA0MV0NCgwNCkludGVybmV0LURyYWZ0ICAg ICAgUG9ydGFibGUgU3ltbWV0cmljIEtleSBDb250YWluZXIgICAgICAgICAgIEp1bHkgMjAwNw0K DQoNCiAgIGluIHRoaXMgbW9kZS4gIFNlY3VyZSBjaGFubmVscyB0aGF0IGVuY3J5cHQgYW5kIGRp Z2VzdCBlYWNoIG1lc3NhZ2UNCiAgIHByb3ZpZGUgYW4gZXh0cmEgbWVhc3VyZSBvZiBzZWN1cml0 eSwgZXNwZWNpYWxseSB3aGVuIHRoZSBzaWduYXR1cmUNCiAgIG9mIHRoZSBwYXlsb2FkIGRvZXMg bm90IGVuY29tcGFzcyB0aGUgZW50aXJlIHBheWxvYWQuDQoNCiAgIEJlY2F1c2Ugb2YgdGhlIGZh Y3QgdGhhdCB0aGUgcGxhaW4gdGV4dCBwYXlsb2FkIGlzIHByb3RlY3RlZCBvbmx5IGJ5DQogICB0 aGUgdHJhbnNwb3J0IGxheWVyIHNlY3VyaXR5LCBwcmFjdGljYWwgaW1wbGVtZW50YXRpb24gbXVz dCBlbnN1cmUNCiAgIHByb3RlY3Rpb24gYWdhaW5zdCBtYW4taW4tdGhlLW1pZGRsZSBhdHRhY2tz IFtTY2huZWllcl0uICBWYWxpZGF0aW5nDQogICB0aGUgc2VjdXJlIGNoYW5uZWwgZW5kLXBvaW50 cyBpcyBjcml0aWNhbGx5IGltcG9ydGFudCBmb3IgZWxpbWluYXRpbmcNCiAgIGludHJ1ZGVycyB0 aGF0IG1heSBjb21wcm9taXNlIHRoZSBjb25maWRlbnRpYWxpdHkgb2YgdGhlIHBheWxvYWQuDQoN CjguMi4gIFBheWxvYWQgaW50ZWdyaXR5DQoNCiAgIFRoZSBwb3J0YWJsZSBzeW1tZXRyaWMga2V5 IGNvbnRhaW5lciBwcm92aWRlcyBhIG1lYW4gdG8gZ3VhcmFudGVlIHRoZQ0KICAgaW50ZWdyaXR5 IG9mIHRoZSBpbmZvcm1hdGlvbiBpdCBjb250YWlucyB0aHJvdWdoIGRpZ2l0YWwgc2lnbmF0dXJl cy4NCiAgIEZvciBiZXN0IHNlY3VyaXR5IHByYWN0aWNlcywgdGhlIGRpZ2l0YWwgc2lnbmF0dXJl IG9mIHRoZSBjb250YWluZXINCiAgIHNob3VsZCBlbmNvbXBhc3MgdGhlIGVudGlyZSBwYXlsb2Fk LiAgVGhpcyBwcm92aWRlcyBhc3N1cmFuY2VzIGZvcg0KICAgdGhlIGludGVncml0eSBvZiBhbGwg YXR0cmlidXRlcy4gIEl0IGFsc28gYWxsb3dzIHZlcmlmaWNhdGlvbiBvZiB0aGUNCiAgIGludGVn cml0eSBvZiBhIGdpdmVuIHBheWxvYWQgZXZlbiBhZnRlciB0aGUgY29udGFpbmVyIGlzIGRlbGl2 ZXJlZA0KICAgdGhyb3VnaCB0aGUgY29tbXVuaWNhdGlvbiBjaGFubmVsIHRvIHRoZSB0YXJnZXQg cGVyaW1ldGVyIGFuZCBjaGFubmVsDQogICBtZXNzYWdlIGludGVncml0eSBjaGVjayBpcyBubyBs b25nZXIgcG9zc2libGUuDQoNCjguMy4gIFBheWxvYWQgYXV0aGVudGljaXR5DQoNCiAgIFRoZSBk aWdpdGFsIHNpZ25hdHVyZSBvZiB0aGUgcGF5bG9hZCBpcyB0aGUgcHJpbWFyeSB3YXkgb2Ygc2hv d2luZw0KICAgaXRzIGF1dGhlbnRpY2l0eS4gIFRoZSByZWNpcGllbnQgb2YgdGhlIGNvbnRhaW5l ciBtYXkgdXNlIHRoZSBwdWJsaWMNCiAgIGtleSBhc3NvY2lhdGVkIHdpdGggdGhlIHNpZ25hdHVy ZSB0byBhc3NlcnQgdGhlIGF1dGhlbnRpY2l0eSBvZiB0aGUNCiAgIHNlbmRlciBieSB0cmFjaW5n IGl0IGJhY2sgdG8gYSBwcmVsb2FkZWQgcHVibGljIGtleSBvciBjZXJ0aWZpY2F0ZS4NCiAgIE5v dGUgdGhhdCB0aGUgZGlnaXRhbCBzaWduYXR1cmUgb2YgdGhlIHBheWxvYWQgY2FuIGJlIGNoZWNr ZWQgZXZlbg0KICAgYWZ0ZXIgdGhlIGNvbnRhaW5lciBoYXMgYmVlbiBkZWxpdmVyZWQgdGhyb3Vn aCB0aGUgc2VjdXJlIGNoYW5uZWwgb2YNCiAgIGNvbW11bmljYXRpb24uDQoNCiAgIEEgd2Vha2Vy IHBheWxvYWQgYXV0aGVudGljaXR5IGd1YXJhbnRlZSBtYXkgYmUgcHJvdmlkZWQgYnkgdGhlDQog ICB0cmFuc3BvcnQgbGF5ZXIgaWYgaXQgaXMgY29uZmlndXJlZCB0byBkaWdlc3QgZWFjaCBtZXNz YWdlIGl0DQogICB0cmFuc3BvcnRzLiAgSG93ZXZlciwgbm8gYXV0aGVudGljaXR5IHZlcmlmaWNh dGlvbiBpcyBwb3NzaWJsZSBvbmNlDQogICB0aGUgY29udGFpbmVyIGlzIGRlbGl2ZXJlZCBhdCB0 aGUgcmVjaXBpZW50IGVuZC4gIFRoaXMgYXBwcm9hY2ggbWF5DQogICBiZSB1c2VmdWwgaW4gY2Fz ZXMgd2hlcmUgdGhlIGRpZ2l0YWwgc2lnbmF0dXJlIG9mIHRoZSBjb250YWluZXIgZG9lcw0KICAg bm90IGVuY29tcGFzcyB0aGUgZW50aXJlIHBheWxvYWQuDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KSG95ZXIsIGV0IGFsLiAgICAgICAgICAgRXhwaXJlcyBKYW51YXJ5IDEwLCAyMDA4ICAg ICAgICAgICAgICAgW1BhZ2UgNDJdDQoMDQpJbnRlcm5ldC1EcmFmdCAgICAgIFBvcnRhYmxlIFN5 bW1ldHJpYyBLZXkgQ29udGFpbmVyICAgICAgICAgICBKdWx5IDIwMDcNCg0KDQo5LiAgQWNrbm93 bGVkZ2VtZW50cw0KDQogICBUaGUgYXV0aG9ycyBvZiB0aGlzIGRyYWZ0IHdvdWxkIGxpa2UgdG8g dGhhbmsgdGhlIGZvbGxvd2luZyBwZW9wbGUNCiAgIGZvciB0aGVpciBjb250cmlidXRpb25zIGFu ZCBzdXBwb3J0IHRvIG1ha2UgdGhpcyBhIGJldHRlcg0KICAgc3BlY2lmaWNhdGlvbjogU2h1aCBD aGFuZywgU2lkZGhhcnQgQmFqYWosIFN0dSBWZWF0aCwgS2V2aW4gTGV3aXMsDQogICBhbmQgQW5k cmVhIERvaGVydHkuDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQpIb3llciwgZXQg YWwuICAgICAgICAgICBFeHBpcmVzIEphbnVhcnkgMTAsIDIwMDggICAgICAgICAgICAgICBbUGFn ZSA0M10NCgwNCkludGVybmV0LURyYWZ0ICAgICAgUG9ydGFibGUgU3ltbWV0cmljIEtleSBDb250 YWluZXIgICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCjEwLiAgQXBwZW5kaXggQSAtIEV4YW1wbGUg U3ltbWV0cmljIEtleSBDb250YWluZXJzDQoNCiAgIEFsbCBleGFtcGxlcyBhcmUgc3ludGFjdGlj YWxseSBjb3JyZWN0IGFuZCBjb21wYXRpYmxlIHdpdGggdGhlIFhNTA0KICAgc2NoZW1hIGluIHNl Y3Rpb24gNy4gIEhvd2V2ZXIsIDxTaWduYXR1cmU+LCBLZXkgPFZhbHVlPiBhbmQgS2V5DQogICA8 VmFsdWVEaWdlc3Q+IGRhdGEgdmFsdWVzIGFyZSBmaWN0aXRpb3VzDQoNCjEwLjEuICBTeW1tZXRy aWMgS2V5IENvbnRhaW5lciB3aXRoIGEgc2luZ2xlIE5vbi1FbmNyeXB0ZWQgSE9UUCBTZWNyZXQN CiAgICAgICBLZXkNCg0KDQogICA8P3htbCB2ZXJzaW9uPSIxLjAiIGVuY29kaW5nPSJVVEYtOCI/ Pg0KICAgPEtleUNvbnRhaW5lcg0KICAgeG1sbnM9InVybjppZXRmOnBhcmFtczp4bWw6bnM6a2V5 cHJvdjpjb250YWluZXIiDQogICB4bWxuczpsb2dvPSJ1cm46aWV0ZjpwYXJhbXM6eG1sOm5zOmtl eXByb3Y6bG9nbyINCiAgIHhtbG5zOmRzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRz aWcjIg0KICAgeG1sbnM6eHNpPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxL1hNTFNjaGVtYS1pbnN0 YW5jZSINCiAgIHhzaTpzY2hlbWFMb2NhdGlvbj0idXJuOmlldGY6cGFyYW1zOnhtbDpuczprZXlw cm92OmNvbnRhaW5lcg0KICAga2V5cHJvdl9wc2tjX3NjaGVtYV92MS4xLnhzZCIgdmVyc2lvbj0i MS4xIj4NCiAgICAgPEVuY3J5cHRpb25NZXRob2QgYWxnb3JpdGhtPSJOT05FIi8+DQogICAgIDxE aWdlc3RNZXRob2QgYWxnb3JpdGhtPSJITUFDLVNIQTEiPjwvRGlnZXN0TWV0aG9kPg0KICAgICA8 RGV2aWNlPg0KICAgICAgIDxEZXZpY2VJZD4NCiAgICAgICAgIDxNYW51ZmFjdHVyZXI+VG9rZW4g TWFudWZhY3R1cmVyPC9NYW51ZmFjdHVyZXI+DQogICAgICAgICA8U2VyaWFsTm8+OTg3NjU0MzIx ODc8L1NlcmlhbE5vPg0KICAgICAgICAgPEV4cGlyeT4wMS8wMS8yMDA4PC9FeHBpcnk+DQogICAg ICAgPC9EZXZpY2VJZD4NCiAgICAgICA8S2V5IEtleUFsZ29yaXRobT0iSE9UUCIgIEtleUlkPSI5 ODc2NTQzMjE4NyI+DQogICAgICAgICA8SXNzdWVyPkNyZWRlbnRpYWwgSXNzdWVyPC9Jc3N1ZXI+ DQogICAgICAgICA8VXNhZ2U+DQogICAgICAgICAgPFJlc3BvbnNlRm9ybWF0IGZvcm1hdD0iREVD SU1BTCIgbGVuZ3RoPSI2Ii8+DQogICAgICAgICA8L1VzYWdlPg0KICAgICAgICAgPEZyaWVuZGx5 TmFtZT5NeUZpcnN0VG9rZW48L0ZyaWVuZGx5TmFtZT4NCiAgICAgICAgIDxEYXRhIE5hbWU9IlNF Q1JFVCI+DQogICAgICAgICAgIDxWYWx1ZT5XbGRqVEhad1JtOVlUa2hCUnl0c2VETXJVbmM9PC9W YWx1ZT4NCiAgICAgICAgICAgPFZhbHVlRGlnZXN0PldsZGpUSFp3Um05WVRraEJSeXRzZURNPTwv VmFsdWVEaWdlc3Q+DQogICAgICAgICA8L0RhdGE+DQogICAgICAgICA8RGF0YSBOYW1lPSJDT1VO VEVSIj4NCiAgICAgICAgICAgPFZhbHVlPldsZGpUSFp3Um05WVRraEJSeXRzZURNclVuYz08L1Zh bHVlPg0KICAgICAgICAgICA8VmFsdWVEaWdlc3Q+V2xkalRIWndSbTlZVGtoQlJ5dHNlRE09PC9W YWx1ZURpZ2VzdD4NCiAgICAgICAgIDwvRGF0YT4NCiAgICAgICA8L0tleT4NCiAgICAgPC9EZXZp Y2U+DQogICA8L0tleUNvbnRhaW5lcj4NCg0KDQoNCg0KDQoNCg0KDQpIb3llciwgZXQgYWwuICAg ICAgICAgICBFeHBpcmVzIEphbnVhcnkgMTAsIDIwMDggICAgICAgICAgICAgICBbUGFnZSA0NF0N CgwNCkludGVybmV0LURyYWZ0ICAgICAgUG9ydGFibGUgU3ltbWV0cmljIEtleSBDb250YWluZXIg ICAgICAgICAgIEp1bHkgMjAwNw0KDQoNCjEwLjIuICBTeW1tZXRyaWMgS2V5IENvbnRhaW5lciB3 aXRoIGEgc2luZ2xlIFBhc3N3b3JkLWJhc2VkIEVuY3J5cHRlZA0KICAgICAgIEhPVFAgU2VjcmV0 IEtleQ0KDQoNCiA8P3htbCB2ZXJzaW9uPSIxLjAiIGVuY29kaW5nPSJVVEYtOCI/Pg0KIDxLZXlD b250YWluZXINCiB4bWxucz0idXJuOmlldGY6cGFyYW1zOnhtbDpuczprZXlwcm92OmNvbnRhaW5l ciINCiB4bWxuczpsb2dvPSJ1cm46aWV0ZjpwYXJhbXM6eG1sOm5zOmtleXByb3Y6bG9nbyINCiB4 bWxuczpkcz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyINCiB4bWxuczp4c2k9 Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvWE1MU2NoZW1hLWluc3RhbmNlIg0KIHhzaTpzY2hlbWFM b2NhdGlvbj0idXJuOmlldGY6cGFyYW1zOnhtbDpuczprZXlwcm92OmNvbnRhaW5lcg0KIC5ca2V5 cHJvdl9wc2tjX3NjaGVtYV92MS4xLnhzZCIgdmVyc2lvbj0iMS4xIj4NCiAgIDxFbmNyeXB0aW9u TWV0aG9kIGFsZ29yaXRobT0iUEJFLTNERVMxMTItQ0JDIj4NCiAgICAgPFBCRVNhbHQ+eTZUemNr ZUxSUXc9PC9QQkVTYWx0Pg0KICAgICA8UEJFSXRlcmF0aW9uQ291bnQ+OTk5PC9QQkVJdGVyYXRp b25Db3VudD4NCiAgIDwvRW5jcnlwdGlvbk1ldGhvZD4NCiAgIDxEaWdlc3RNZXRob2QgYWxnb3Jp dGhtPSJITUFDLVNIQTEiPjwvRGlnZXN0TWV0aG9kPg0KICAgPERldmljZT4NCiAgICAgPERldmlj ZUlkPg0KICAgICAgIDxNYW51ZmFjdHVyZXI+VG9rZW4gTWFudWZhY3R1cmVyPC9NYW51ZmFjdHVy ZXI+DQogICAgICAgPFNlcmlhbE5vPjk4NzY1NDMyMTg3PC9TZXJpYWxObz4NCiAgICAgICA8RXhw aXJ5PjAxLzAxLzIwMDg8L0V4cGlyeT4NCiAgICAgPC9EZXZpY2VJZD4NCiAgIDxLZXkgS2V5QWxn b3JpdGhtPSJIT1RQIiAgS2V5SWQ9Ijc3NjU0MzIxODcwIj4NCiAgICAgPElzc3Vlcj5DcmVkZW50 aWFsIElzc3VlcjwvSXNzdWVyPg0KICAgICA8VXNhZ2U+DQogICAgICAgPFJlc3BvbnNlRm9ybWF0 IGZvcm1hdD0iREVDSU1BTCIgbGVuZ3RoPSI2Ii8+DQogICAgIDwvVXNhZ2U+DQogICAgIDxGcmll bmRseU5hbWU+TXlTZWNvbmRUb2tlbjwvRnJpZW5kbHlOYW1lPg0KICAgICAgIDxEYXRhIE5hbWU9 IlNFQ1JFVCI+DQogPFZhbHVlPjdKSFV5cDNhek9rcUpFTlNzaDZiMnZ4WHp3R0JZeXB6SnhFcitp a1FBYTIyOUtWL0JnWmhHQT09PC9WYWx1ZT4NCiAgICAgICA8VmFsdWVEaWdlc3Q+V2xkalRIWndS bTlZVGtoQlJ5dHNlRE1yVW5jPTwvVmFsdWVEaWdlc3Q+DQogICAgICAgPC9EYXRhPg0KICAgICAg IDxEYXRhIE5hbWU9IkNPVU5URVIiPg0KIDxWYWx1ZT43SkhVeXAzYXpPa3FKRU5Tc2g2YjJ2eFh6 d0dCWXlwekp4RXIraWtRQWEyMjlLVi9CZ1poR0E9PTwvVmFsdWU+DQogICAgICAgPFZhbHVlRGln ZXN0PldsZGpUSFp3Um05WVRraEJSeXRzZURNclVuYz08L1ZhbHVlRGlnZXN0Pg0KICAgICAgIDwv RGF0YT4NCiAgICAgPC9LZXk+DQogICA8L0RldmljZT4NCiA8L0tleUNvbnRhaW5lcj4NCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQpIb3llciwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIEphbnVhcnkg MTAsIDIwMDggICAgICAgICAgICAgICBbUGFnZSA0NV0NCgwNCkludGVybmV0LURyYWZ0ICAgICAg UG9ydGFibGUgU3ltbWV0cmljIEtleSBDb250YWluZXIgICAgICAgICAgIEp1bHkgMjAwNw0KDQoN CjExLiAgTm9ybWF0aXZlIFJlZmVyZW5jZXMNCg0KICAgW0NBUF0gICAgICBNYXN0ZXJDYXJkIElu dGVybmF0aW9uYWwsICJDaGlwIEF1dGhlbnRpY2F0aW9uIFByb2dyYW0NCiAgICAgICAgICAgICAg RnVuY3Rpb25hbCBBcmNoaXRlY3R1cmUiLCBTZXB0ZW1iZXIgMjAwNC4NCg0KICAgW0RTS1BQXSAg ICAiRHluYW1pYyBTeW1tZXRyaWMgS2V5IFByb3Zpc2lvbmluZyBQcm90b2NvbCIsIEludGVybmV0 DQogICAgICAgICAgICAgIERyYWZ0IEluZm9ybWF0aW9uYWwsIFVSTDogaHR0cDovL3Rvb2xzLmll dGYub3JnL3dnLw0KICAgICAgICAgICAgICBrZXlwcm92L2RyYWZ0LWRvaGVydHkta2V5cHJvdi1k c2twcC0wMC50eHQsIEp1bmUgMjAwNy4NCg0KICAgW0hPVFBdICAgICBNUmFpaGksIEQuLCAiSE9U UDogQW4gSE1BQy1CYXNlZCBPbmUgVGltZSBQYXNzd29yZA0KICAgICAgICAgICAgICBBbGdvcml0 aG0iLCBSRkMgNDIyNiwNCiAgICAgICAgICAgICAgVVJMOiBodHRwOi8vcmZjLnN1bnNpdGUuZGsv cmZjL3JmYzQyMjYuaHRtbCwNCiAgICAgICAgICAgICAgRGVjZW1iZXIgMjAwNS4NCg0KICAgW09B VEhdICAgICAiSW5pdGlhdGl2ZSBmb3IgT3BlbiBBdVRIZW50aWNhdGlvbiIsDQogICAgICAgICAg ICAgIFVSTDogaHR0cDovL3d3dy5vcGVuYXV0aGVudGljYXRpb24ub3JnLg0KDQogICBbT0FUSFJl ZkFyY2hdDQogICAgICAgICAgICAgIE9BVEgsICJSZWZlcmVuY2UgQXJjaGl0ZWN0dXJlIiwNCiAg ICAgICAgICAgICAgVVJMOiBodHRwOi8vd3d3Lm9wZW5hdXRoZW50aWNhdGlvbi5vcmcsIFZlcnNp b24gMS4wLCAyMDA1Lg0KDQogICBbT0NSQV0gICAgIE1SYWloaSwgRC4sICJPQ1JBOiBPQVRIIENo YWxsZW5nZSBSZXNwb25zZSBBbGdvcml0aG0iLA0KICAgICAgICAgICAgICBJbnRlcm5ldCBEcmFm dCBJbmZvcm1hdGlvbmFsLCBVUkw6IGh0dHA6Ly93d3cuaWV0Zi5vcmcvDQogICAgICAgICAgICAg IGludGVybmV0LWRyYWZ0cy8NCiAgICAgICAgICAgICAgZHJhZnQtbXJhaWhpLW11dHVhbC1vYXRo LWhvdHAtdmFyaWFudHMtMDEudHh0LA0KICAgICAgICAgICAgICBEZWNlbWJlciAyMDA1Lg0KDQog ICBbUEtDUzFdICAgIEthbGlza2ksIEIuLCAiUkZDIDI0Mzc6IFBLQ1MgIzE6IFJTQSBDcnlwdG9n cmFwaHkNCiAgICAgICAgICAgICAgU3BlY2lmaWNhdGlvbnMgVmVyc2lvbiAyLjAuIiwNCiAgICAg ICAgICAgICAgVVJMOiBodHRwOi8vd3d3LmlldGYub3JnL3JmYy9yZmMyNDM3LnR4dCwgVmVyc2lv bjogMi4wLA0KICAgICAgICAgICAgICBPY3RvYmVyIDE5OTguDQoNCiAgIFtQS0NTMTJdICAgUlNB IExhYm9yYXRvcmllcywgIlBLQ1MgIzEyOiBQZXJzb25hbCBJbmZvcm1hdGlvbiBFeGNoYW5nZQ0K ICAgICAgICAgICAgICBTeW50YXggU3RhbmRhcmQiLCBWZXJzaW9uIDEuMCwNCiAgICAgICAgICAg ICAgVVJMOiBmdHA6Ly9mdHAucnNhc2VjdXJpdHkuY29tL3B1Yi9wa2NzL3BrY3MtMTIvLg0KDQog ICBbUEtDUzVdICAgIFJTQSBMYWJvcmF0b3JpZXMsICJQS0NTICM1OiBQYXNzd29yZC1CYXNlZCBD cnlwdG9ncmFwaHkNCiAgICAgICAgICAgICAgU3RhbmRhcmQiLCBWZXJzaW9uIDIuMCwNCiAgICAg ICAgICAgICAgVVJMOiBmdHA6Ly9mdHAucnNhc2VjdXJpdHkuY29tL3B1Yi9wa2NzL3BrY3MtNS8s DQogICAgICAgICAgICAgIE1hcmNoIDE5OTkuDQoNCiAgIFtSRkMyMTE5XSAgQnJhZG5lciwgUy4s ICJLZXkgd29yZHMgZm9yIHVzZSBpbiBSRkNzIHRvIEluZGljYXRlDQogICAgICAgICAgICAgIFJl cXVpcmVtZW50IExldmVscyIsIEJDUCAxNCwgUkZDIDIxMTksIE1hcmNoIDE5OTcuDQoNCiAgIFtT Y2huZWllcl0NCiAgICAgICAgICAgICAgU2NobmVpZXIsIEIuLCAiU2VjcmV0cyBhbmQgTGllczog RGlnaXRpYWwgU2VjdXJpdHkgaW4gYQ0KICAgICAgICAgICAgICBOZXR3b3JrZWQgV29ybGQiLCAg V2lsZXkgQ29tcHV0ZXIgUHVibGlzaGluZywgSVNCTiAwLTg0OTMtDQogICAgICAgICAgICAgIDgy NTMtNywgMjAwMC4NCg0KDQoNCkhveWVyLCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgSmFudWFy eSAxMCwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDQ2XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAg ICBQb3J0YWJsZSBTeW1tZXRyaWMgS2V5IENvbnRhaW5lciAgICAgICAgICAgSnVseSAyMDA3DQoN Cg0KICAgW1hNTEVOQ10gICBFYXN0bGFrZSwgRC4sICJYTUwgRW5jcnlwdGlvbiBTeW50YXggYW5k IFByb2Nlc3NpbmcuIiwNCiAgICAgICAgICAgICAgVVJMOiBodHRwOi8vd3d3LnczLm9yZy9UUi94 bWxlbmMtY29yZS8sIERlY2VtYmVyIDIwMDIuDQoNCiAgIFtYTUxTSUddICAgRWFzdGxha2UsIEQu LCAiWE1MLVNpZ25hdHVyZSBTeW50YXggYW5kIFByb2Nlc3NpbmciLA0KICAgICAgICAgICAgICBV Ukw6IGh0dHA6Ly93d3cudzMub3JnL1RSLzIwMDIvUkVDLXhtbGRzaWctY29yZS0yMDAyMDIxMi8s DQogICAgICAgICAgICAgIFczQyBSZWNvbW1lbmRhdGlvbiwgRmVicnVhcnkgMjAwMi4NCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCkhveWVyLCBldCBhbC4gICAgICAgICAgIEV4cGly ZXMgSmFudWFyeSAxMCwgMjAwOCAgICAgICAgICAgICAgIFtQYWdlIDQ3XQ0KDA0KSW50ZXJuZXQt RHJhZnQgICAgICBQb3J0YWJsZSBTeW1tZXRyaWMgS2V5IENvbnRhaW5lciAgICAgICAgICAgSnVs eSAyMDA3DQoNCg0KQXV0aG9ycycgQWRkcmVzc2VzDQoNCiAgIFBoaWxpcCBIb3llcg0KICAgQWN0 aXZJZGVuaXR5LCBJbmMuDQogICAxMDkgQm9yb3VnaCBIaWdoIFN0cmVldA0KICAgTG9uZG9uLCBT RTEgIDFOTA0KICAgVUsNCg0KICAgUGhvbmU6ICs0NCAoMCkgMjAgNzc0NCA2NDU1DQogICBFbWFp bDogUGhpbGlwLkhveWVyQGFjdGl2aWRlbnRpdHkuY29tDQoNCg0KICAgTWluZ2xpYW5nIFBlaQ0K ICAgVmVyaVNpZ24sIEluYy4NCiAgIDQ4NyBFLiBNaWRkbGVmaWVsZCBSb2FkDQogICBNb3VudGFp biBWaWV3LCBDQSAgOTQwNDMNCiAgIFVTQQ0KDQogICBQaG9uZTogKzEgNjUwIDQyNiA1MTczDQog ICBFbWFpbDogbXBlaUB2ZXJpc2lnbi5jb20NCg0KDQogICBTYWxhaCBNYWNoYW5pDQogICBEaXZl cnNpbmV0LCBJbmMuDQogICAyMjI1IFNoZXBwYXJkIEF2ZW51ZSBFYXN0DQogICBTdWl0ZSAxODAx DQogICBUb3JvbnRvLCBPbnRhcmlvICBNMkogNUMyDQogICBDYW5hZGENCg0KICAgUGhvbmU6ICsx IDQxNiA3NTYgMjMyNCBFeHQuIDMyMQ0KICAgRW1haWw6IHNtYWNoYW5pQGRpdmVyc2luZXQuY29t DQoNCg0KICAgQXBvc3RvbCBULiBWYXNzaWxldg0KICAgQXhhbHRvIEluYy4NCiAgIDgzMTEgTi4g Rk0gNjIwDQogICBBdXN0aW4sIFRYICA3ODcyNg0KICAgVVNBDQoNCiAgIFBob25lOiArMSA1MTIg MzMxIDM3MjMNCiAgIEVtYWlsOiB2YXNzaWxldkBheGFsdG8uY29tDQoNCg0KDQoNCg0KDQoNCg0K DQoNCkhveWVyLCBldCBhbC4gICAgICAgICAgIEV4cGlyZXMgSmFudWFyeSAxMCwgMjAwOCAgICAg ICAgICAgICAgIFtQYWdlIDQ4XQ0KDA0KSW50ZXJuZXQtRHJhZnQgICAgICBQb3J0YWJsZSBTeW1t ZXRyaWMgS2V5IENvbnRhaW5lciAgICAgICAgICAgSnVseSAyMDA3DQoNCg0KICAgSm9uIE1hcnRp bnNzb24NCiAgIFBvcnRXaXNlIEFCDQogICBGP2dhdGFuIDMzIC8gS2lzdGEgU2NpZW5jZSBUb3dl cg0KICAgS2lzdGEsIFNFICAxNjQgMjENCiAgIFN3ZWRlbg0KDQogICBQaG9uZTogKzQ2IDggNTYy IDkxNCA1NQ0KICAgRW1haWw6IGpvbi5tYXJ0aW5zc29uQHBvcnR3aXNlLmNvbQ0KDQoNCg0KDQoN Cg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0KDQoNCg0K DQoNCg0KDQoNCg0KDQoNCg0KDQpIb3llciwgZXQgYWwuICAgICAgICAgICBFeHBpcmVzIEphbnVh cnkgMTAsIDIwMDggICAgICAgICAgICAgICBbUGFnZSA0OV0NCgwNCkludGVybmV0LURyYWZ0ICAg ICAgUG9ydGFibGUgU3ltbWV0cmljIEtleSBDb250YWluZXIgICAgICAgICAgIEp1bHkgMjAwNw0K DQoNCkZ1bGwgQ29weXJpZ2h0IFN0YXRlbWVudA0KDQogICBDb3B5cmlnaHQgKEMpIFRoZSBJRVRG IFRydXN0ICgyMDA3KS4NCg0KICAgVGhpcyBkb2N1bWVudCBpcyBzdWJqZWN0IHRvIHRoZSByaWdo dHMsIGxpY2Vuc2VzIGFuZCByZXN0cmljdGlvbnMNCiAgIGNvbnRhaW5lZCBpbiBCQ1AgNzgsIGFu ZCBleGNlcHQgYXMgc2V0IGZvcnRoIHRoZXJlaW4sIHRoZSBhdXRob3JzDQogICByZXRhaW4gYWxs IHRoZWlyIHJpZ2h0cy4NCg0KICAgVGhpcyBkb2N1bWVudCBhbmQgdGhlIGluZm9ybWF0aW9uIGNv bnRhaW5lZCBoZXJlaW4gYXJlIHByb3ZpZGVkIG9uIGFuDQogICAiQVMgSVMiIGJhc2lzIGFuZCBU SEUgQ09OVFJJQlVUT1IsIFRIRSBPUkdBTklaQVRJT04gSEUvU0hFIFJFUFJFU0VOVFMNCiAgIE9S IElTIFNQT05TT1JFRCBCWSAoSUYgQU5ZKSwgVEhFIElOVEVSTkVUIFNPQ0lFVFksIFRIRSBJRVRG IFRSVVNUIEFORA0KICAgVEhFIElOVEVSTkVUIEVOR0lORUVSSU5HIFRBU0sgRk9SQ0UgRElTQ0xB SU0gQUxMIFdBUlJBTlRJRVMsIEVYUFJFU1MNCiAgIE9SIElNUExJRUQsIElOQ0xVRElORyBCVVQg Tk9UIExJTUlURUQgVE8gQU5ZIFdBUlJBTlRZIFRIQVQgVEhFIFVTRSBPRg0KICAgVEhFIElORk9S TUFUSU9OIEhFUkVJTiBXSUxMIE5PVCBJTkZSSU5HRSBBTlkgUklHSFRTIE9SIEFOWSBJTVBMSUVE DQogICBXQVJSQU5USUVTIE9GIE1FUkNIQU5UQUJJTElUWSBPUiBGSVRORVNTIEZPUiBBIFBBUlRJ Q1VMQVIgUFVSUE9TRS4NCg0KDQpJbnRlbGxlY3R1YWwgUHJvcGVydHkNCg0KICAgVGhlIElFVEYg dGFrZXMgbm8gcG9zaXRpb24gcmVnYXJkaW5nIHRoZSB2YWxpZGl0eSBvciBzY29wZSBvZiBhbnkN CiAgIEludGVsbGVjdHVhbCBQcm9wZXJ0eSBSaWdodHMgb3Igb3RoZXIgcmlnaHRzIHRoYXQgbWln aHQgYmUgY2xhaW1lZCB0bw0KICAgcGVydGFpbiB0byB0aGUgaW1wbGVtZW50YXRpb24gb3IgdXNl IG9mIHRoZSB0ZWNobm9sb2d5IGRlc2NyaWJlZCBpbg0KICAgdGhpcyBkb2N1bWVudCBvciB0aGUg ZXh0ZW50IHRvIHdoaWNoIGFueSBsaWNlbnNlIHVuZGVyIHN1Y2ggcmlnaHRzDQogICBtaWdodCBv ciBtaWdodCBub3QgYmUgYXZhaWxhYmxlOyBub3IgZG9lcyBpdCByZXByZXNlbnQgdGhhdCBpdCBo YXMNCiAgIG1hZGUgYW55IGluZGVwZW5kZW50IGVmZm9ydCB0byBpZGVudGlmeSBhbnkgc3VjaCBy aWdodHMuICBJbmZvcm1hdGlvbg0KICAgb24gdGhlIHByb2NlZHVyZXMgd2l0aCByZXNwZWN0IHRv IHJpZ2h0cyBpbiBSRkMgZG9jdW1lbnRzIGNhbiBiZQ0KICAgZm91bmQgaW4gQkNQIDc4IGFuZCBC Q1AgNzkuDQoNCiAgIENvcGllcyBvZiBJUFIgZGlzY2xvc3VyZXMgbWFkZSB0byB0aGUgSUVURiBT ZWNyZXRhcmlhdCBhbmQgYW55DQogICBhc3N1cmFuY2VzIG9mIGxpY2Vuc2VzIHRvIGJlIG1hZGUg YXZhaWxhYmxlLCBvciB0aGUgcmVzdWx0IG9mIGFuDQogICBhdHRlbXB0IG1hZGUgdG8gb2J0YWlu IGEgZ2VuZXJhbCBsaWNlbnNlIG9yIHBlcm1pc3Npb24gZm9yIHRoZSB1c2Ugb2YNCiAgIHN1Y2gg cHJvcHJpZXRhcnkgcmlnaHRzIGJ5IGltcGxlbWVudGVycyBvciB1c2VycyBvZiB0aGlzDQogICBz cGVjaWZpY2F0aW9uIGNhbiBiZSBvYnRhaW5lZCBmcm9tIHRoZSBJRVRGIG9uLWxpbmUgSVBSIHJl cG9zaXRvcnkgYXQNCiAgIGh0dHA6Ly93d3cuaWV0Zi5vcmcvaXByLg0KDQogICBUaGUgSUVURiBp bnZpdGVzIGFueSBpbnRlcmVzdGVkIHBhcnR5IHRvIGJyaW5nIHRvIGl0cyBhdHRlbnRpb24gYW55 DQogICBjb3B5cmlnaHRzLCBwYXRlbnRzIG9yIHBhdGVudCBhcHBsaWNhdGlvbnMsIG9yIG90aGVy IHByb3ByaWV0YXJ5DQogICByaWdodHMgdGhhdCBtYXkgY292ZXIgdGVjaG5vbG9neSB0aGF0IG1h eSBiZSByZXF1aXJlZCB0byBpbXBsZW1lbnQNCiAgIHRoaXMgc3RhbmRhcmQuICBQbGVhc2UgYWRk cmVzcyB0aGUgaW5mb3JtYXRpb24gdG8gdGhlIElFVEYgYXQNCiAgIGlldGYtaXByQGlldGYub3Jn Lg0KDQoNCkFja25vd2xlZGdtZW50DQoNCiAgIEZ1bmRpbmcgZm9yIHRoZSBSRkMgRWRpdG9yIGZ1 bmN0aW9uIGlzIHByb3ZpZGVkIGJ5IHRoZSBJRVRGDQogICBBZG1pbmlzdHJhdGl2ZSBTdXBwb3J0 IEFjdGl2aXR5IChJQVNBKS4NCg0KDQoNCg0KDQpIb3llciwgZXQgYWwuICAgICAgICAgICBFeHBp cmVzIEphbnVhcnkgMTAsIDIwMDggICAgICAgICAgICAgICBbUGFnZSA1MF0NCgwNCg== ------_=_NextPart_001_01C7C23C.32BC39CB Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov ------_=_NextPart_001_01C7C23C.32BC39CB-- From keyprov-bounces@ietf.org Mon Jul 09 13:23:12 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7wx3-0001v5-PI; Mon, 09 Jul 2007 13:23:09 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7wx3-0001uk-1y for keyprov@ietf.org; Mon, 09 Jul 2007 13:23:09 -0400 Received: from supertimor.gemalto.com ([194.88.222.178] helo=supertimor.gemplus.com) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1I7wwn-0006QE-IN for keyprov@ietf.org; Mon, 09 Jul 2007 13:23:08 -0400 Received: from GMSEXC02.CORP.DS.GEMPLUS.COM (unknown [10.2.158.62]) by supertimor.gemplus.com (Postfix) with ESMTP id DED541FB045; Mon, 9 Jul 2007 17:22:24 +0000 (GMT) Received: from GMSEXC07.CORP.DS.GEMPLUS.COM ([10.2.158.55]) by GMSEXC02.CORP.DS.GEMPLUS.COM with Microsoft SMTPSVC(6.0.3790.1830); Mon, 9 Jul 2007 19:22:21 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: [KEYPROV] FW: Internet Draft submission Date: Mon, 9 Jul 2007 19:22:02 +0200 Message-ID: <093F8C873752A84D98A28841099DF380178D38@GMSEXC07.CORP.DS.GEMPLUS.COM> In-Reply-To: <3E5A2F1AD44F5E49A74F79AB47C0C0C939F324@mou1wnexmb10.vcorp.ad.vrsn.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [KEYPROV] FW: Internet Draft submission thread-index: AcfB/O8ckPDZVqwGQ1OEOd9QP7RZ8QAA2SwpAAD9P0AAEesecA== From: "CHANG Shuh" To: "Pei, Mingliang" , "Doherty, Andrea" , X-OriginalArrivalTime: 09 Jul 2007 17:22:21.0272 (UTC) FILETIME=[B5438580:01C7C24D] X-Spam-Score: 0.0 (/) X-Scan-Signature: 02ec665d00de228c50c93ed6b5e4fc1a Cc: X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Hi Ming & Andrea, Sorry for missing the PSKC conf calls last week. I was on vacation last week. I saw that you sent out the lastest PSKC XSD schema files (keyprov_pskc_schema_v1.1.xsd and keyprov_logotype_v1.0.xsd) and the sample XML file (draft-hoyer-keyprov-portable-symmetric-key-container-01.xml). You also sent out the sample XML files for DSKPP (serverfinished.xml, serverfinished2.xml, serverfinished3.xml, serverfinished4.xml).=20 Do you also have the latest XSD schema file for the DSKPP? The latest one that I have is from the May version, KEYPROV Draft 05-23-2007.xsd. Is this still the valid schema file for DSKPP? Thanks. Regards, Shuh =20 > -----Original Message----- > From: Pei, Mingliang [mailto:mpei@verisign.com]=20 > Sent: Monday, July 09, 2007 3:37 AM > To: Doherty, Andrea; keyprov@ietf.org > Subject: RE: [KEYPROV] FW: Internet Draft submission >=20 >=20 > Please see these updated sample messages. >=20 > - Ming=20 >=20 > -----Original Message----- > From: Doherty, Andrea [mailto:adoherty@rsa.com] > Sent: Monday, July 09, 2007 1:08 AM > To: keyprov@ietf.org > Subject: [KEYPROV] FW: Internet Draft submission >=20 > Please find attached submission for which I just received an=20 > auto-response from the IETF Submission Manager. > Andrea >=20 > ________________________________ >=20 > From: Doherty, Andrea > Sent: Mon 7/9/2007 3:44 AM > To: internet-drafts@ietf.org > Subject: Internet Draft submission >=20 >=20 > To the IETF Secretariat:=20 > Attached please find the -01 version of Internet-Draft=20 > submission entitled "Dynamic Symmetric Key Provisioning=20 > Protocol (DSKPP)". Please direct any questions or comments=20 > you may have to me. >=20 > Thank you, > Andrea Doherty=20 >=20 >=20 >=20 _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Mon Jul 09 15:13:14 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7yfZ-0007J3-87; Mon, 09 Jul 2007 15:13:13 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7yfX-0007Iv-PN for keyprov@ietf.org; Mon, 09 Jul 2007 15:13:11 -0400 Received: from colibri.verisign.com ([65.205.251.74]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1I7yfT-00027y-CY for keyprov@ietf.org; Mon, 09 Jul 2007 15:13:11 -0400 Received: from MOU1WNEXCN03.vcorp.ad.vrsn.com (mailer6.verisign.com [65.205.251.33]) by colibri.verisign.com (8.13.6/8.13.4) with ESMTP id l69JD4T9022761; Mon, 9 Jul 2007 12:13:04 -0700 Received: from MOU1WNEXMB10.vcorp.ad.vrsn.com ([10.25.13.204]) by MOU1WNEXCN03.vcorp.ad.vrsn.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 9 Jul 2007 12:13:03 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: [KEYPROV] FW: Internet Draft submission Date: Mon, 9 Jul 2007 12:13:03 -0700 Message-ID: <3E5A2F1AD44F5E49A74F79AB47C0C0C939F343@mou1wnexmb10.vcorp.ad.vrsn.com> In-Reply-To: <093F8C873752A84D98A28841099DF380178D38@GMSEXC07.CORP.DS.GEMPLUS.COM> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [KEYPROV] FW: Internet Draft submission Thread-Index: AcfB/O8ckPDZVqwGQ1OEOd9QP7RZ8QAA2SwpAAD9P0AAEesecAAEPGIw From: "Pei, Mingliang" To: "CHANG Shuh" , "Doherty, Andrea" , X-OriginalArrivalTime: 09 Jul 2007 19:13:03.0875 (UTC) FILETIME=[2C904D30:01C7C25D] X-Spam-Score: 0.1 (/) X-Scan-Signature: d8ae4fd88fcaf47c1a71c804d04f413d Cc: X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Shuh, DSKPP v1.1 schema file will be sent soon later. I sent PSKC schema file v1.1, and a minor update v1.2 by Philip will be sent later too. - Ming=20 -----Original Message----- From: CHANG Shuh [mailto:shuh.chang@gemalto.com]=20 Sent: Monday, July 09, 2007 10:22 AM To: Pei, Mingliang; Doherty, Andrea; keyprov@ietf.org Subject: RE: [KEYPROV] FW: Internet Draft submission Hi Ming & Andrea, Sorry for missing the PSKC conf calls last week. I was on vacation last week. I saw that you sent out the lastest PSKC XSD schema files (keyprov_pskc_schema_v1.1.xsd and keyprov_logotype_v1.0.xsd) and the sample XML file (draft-hoyer-keyprov-portable-symmetric-key-container-01.xml). You also sent out the sample XML files for DSKPP (serverfinished.xml, serverfinished2.xml, serverfinished3.xml, serverfinished4.xml).=20 Do you also have the latest XSD schema file for the DSKPP? The latest one that I have is from the May version, KEYPROV Draft 05-23-2007.xsd. Is this still the valid schema file for DSKPP? Thanks. Regards, Shuh =20 > -----Original Message----- > From: Pei, Mingliang [mailto:mpei@verisign.com] > Sent: Monday, July 09, 2007 3:37 AM > To: Doherty, Andrea; keyprov@ietf.org > Subject: RE: [KEYPROV] FW: Internet Draft submission >=20 >=20 > Please see these updated sample messages. >=20 > - Ming >=20 > -----Original Message----- > From: Doherty, Andrea [mailto:adoherty@rsa.com] > Sent: Monday, July 09, 2007 1:08 AM > To: keyprov@ietf.org > Subject: [KEYPROV] FW: Internet Draft submission >=20 > Please find attached submission for which I just received an=20 > auto-response from the IETF Submission Manager. > Andrea >=20 > ________________________________ >=20 > From: Doherty, Andrea > Sent: Mon 7/9/2007 3:44 AM > To: internet-drafts@ietf.org > Subject: Internet Draft submission >=20 >=20 > To the IETF Secretariat:=20 > Attached please find the -01 version of Internet-Draft submission=20 > entitled "Dynamic Symmetric Key Provisioning Protocol (DSKPP)". Please > direct any questions or comments you may have to me. >=20 > Thank you, > Andrea Doherty >=20 >=20 >=20 _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Mon Jul 09 15:36:19 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7z1t-0000Nl-D5; Mon, 09 Jul 2007 15:36:17 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7z1s-0000NY-Af for keyprov@ietf.org; Mon, 09 Jul 2007 15:36:16 -0400 Received: from gateway1.rsasecurity.com ([216.162.240.250]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1I7z1o-0003am-1J for keyprov@ietf.org; Mon, 09 Jul 2007 15:36:16 -0400 Received: from hyperion.rsasecurity.com by gateway1.rsasecurity.com via smtpd (for ietf-mx.ietf.ORG [156.154.16.150]) with SMTP; Mon, 9 Jul 2007 15:36:11 -0400 Received: from sdtihq24.securid.com (sdtihq24.na.rsa.net [10.100.8.152]) by hyperion.na.rsa.net (MOS 3.8.3-GA) with ESMTP id DFH54200; Mon, 9 Jul 2007 15:40:52 +0500 (GMT-5) Received: from rsana-ex-hq1.NA.RSA.NET (rsana-ex-hq1.na.rsa.net [10.100.8.50]) by sdtihq24.securid.com (8.12.10/8.12.9) with ESMTP id l69Ja7Oo000687; Mon, 9 Jul 2007 15:36:07 -0400 (EDT) X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: [KEYPROV] FW: Internet Draft submission Date: Mon, 9 Jul 2007 15:36:05 -0400 Message-ID: <017630AA6DF2DF4EBC1DD4454F8EE2970B75B2F9@rsana-ex-hq1.NA.RSA.NET> In-Reply-To: <093F8C873752A84D98A28841099DF380178D38@GMSEXC07.CORP.DS.GEMPLUS.COM> Thread-Topic: [KEYPROV] FW: Internet Draft submission thread-index: AcfB/O8ckPDZVqwGQ1OEOd9QP7RZ8QAA2SwpAAD9P0AAEesecAAFEb/w References: <3E5A2F1AD44F5E49A74F79AB47C0C0C939F324@mou1wnexmb10.vcorp.ad.vrsn.com> <093F8C873752A84D98A28841099DF380178D38@GMSEXC07.CORP.DS.GEMPLUS.COM> From: "Doherty, Andrea" To: "CHANG Shuh" , "Pei, Mingliang" , X-Junkmail-Whitelist: YES (by domain whitelist at hyperion.na.rsa.net) X-Spam-Score: 0.1 (/) X-Scan-Signature: 25620135586de10c627e3628c432b04a Cc: X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Shuh, There is not an updated .xsd, however, the schema was slightly modified, and can be found in the .txt file that was submitted to the IETF. Note that the sample files that you refer to below probably differ from what was submitted. Andrea=20 -----Original Message----- From: CHANG Shuh [mailto:shuh.chang@gemalto.com]=20 Sent: Monday, July 09, 2007 1:22 PM To: Pei, Mingliang; Doherty, Andrea; keyprov@ietf.org Subject: RE: [KEYPROV] FW: Internet Draft submission Hi Ming & Andrea, Sorry for missing the PSKC conf calls last week. I was on vacation last week. I saw that you sent out the lastest PSKC XSD schema files (keyprov_pskc_schema_v1.1.xsd and keyprov_logotype_v1.0.xsd) and the sample XML file (draft-hoyer-keyprov-portable-symmetric-key-container-01.xml). You also sent out the sample XML files for DSKPP (serverfinished.xml, serverfinished2.xml, serverfinished3.xml, serverfinished4.xml).=20 Do you also have the latest XSD schema file for the DSKPP? The latest one that I have is from the May version, KEYPROV Draft 05-23-2007.xsd. Is this still the valid schema file for DSKPP? Thanks. Regards, Shuh =20 > -----Original Message----- > From: Pei, Mingliang [mailto:mpei@verisign.com]=20 > Sent: Monday, July 09, 2007 3:37 AM > To: Doherty, Andrea; keyprov@ietf.org > Subject: RE: [KEYPROV] FW: Internet Draft submission >=20 >=20 > Please see these updated sample messages. >=20 > - Ming=20 >=20 > -----Original Message----- > From: Doherty, Andrea [mailto:adoherty@rsa.com] > Sent: Monday, July 09, 2007 1:08 AM > To: keyprov@ietf.org > Subject: [KEYPROV] FW: Internet Draft submission >=20 > Please find attached submission for which I just received an=20 > auto-response from the IETF Submission Manager. > Andrea >=20 > ________________________________ >=20 > From: Doherty, Andrea > Sent: Mon 7/9/2007 3:44 AM > To: internet-drafts@ietf.org > Subject: Internet Draft submission >=20 >=20 > To the IETF Secretariat:=20 > Attached please find the -01 version of Internet-Draft=20 > submission entitled "Dynamic Symmetric Key Provisioning=20 > Protocol (DSKPP)". Please direct any questions or comments=20 > you may have to me. >=20 > Thank you, > Andrea Doherty=20 >=20 >=20 >=20 _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Mon Jul 09 16:23:49 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7zls-0004CP-VN; Mon, 09 Jul 2007 16:23:48 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7zlq-0004Bv-Ee for keyprov@ietf.org; Mon, 09 Jul 2007 16:23:46 -0400 Received: from supertimor.gemalto.com ([194.88.222.178] helo=supertimor.gemplus.com) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1I7zll-0000vw-2e for keyprov@ietf.org; Mon, 09 Jul 2007 16:23:46 -0400 Received: from GMSEXC02.CORP.DS.GEMPLUS.COM (unknown [10.2.158.62]) by supertimor.gemplus.com (Postfix) with ESMTP id 669481FB07D; Mon, 9 Jul 2007 20:23:28 +0000 (GMT) Received: from GMSEXC07.CORP.DS.GEMPLUS.COM ([10.2.158.55]) by GMSEXC02.CORP.DS.GEMPLUS.COM with Microsoft SMTPSVC(6.0.3790.1830); Mon, 9 Jul 2007 22:23:28 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: [KEYPROV] FW: Internet Draft submission Date: Mon, 9 Jul 2007 22:23:10 +0200 Message-ID: <093F8C873752A84D98A28841099DF380178D3A@GMSEXC07.CORP.DS.GEMPLUS.COM> In-Reply-To: <017630AA6DF2DF4EBC1DD4454F8EE2970B75B2F9@rsana-ex-hq1.NA.RSA.NET> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [KEYPROV] FW: Internet Draft submission thread-index: AcfB/O8ckPDZVqwGQ1OEOd9QP7RZ8QAA2SwpAAD9P0AAEesecAAFEb/wAAGrPnA= From: "CHANG Shuh" To: "Doherty, Andrea" , "Pei, Mingliang" , X-OriginalArrivalTime: 09 Jul 2007 20:23:28.0512 (UTC) FILETIME=[02A4C000:01C7C267] X-Spam-Score: 0.0 (/) X-Scan-Signature: 5ebbf074524e58e662bc8209a6235027 Cc: X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Doherty, Andrea wrote: > Note that the sample files that you > refer to below probably differ from what was submitted. Hi Andrea, I did notice that the sample XML files that Ming sent out are different from the ones that you sent out back in May. I have not had a chance to review the new sample set yet. I'd assume that these new XML sample files are for different use cases than the ones that you sent out in May. Correct? [I'll take a closer look at them when I have a chance.] Thanks. Ming, Based on what you indicated, you will be sending out the following updated XSD schema files: DSKPP V1.1 XSD PSKC V1.2 XSD as the "equivalent" of the latest IETF submission. Correct? [I'd like to make sure to have the schema files that reflect (in synch. with) what are stated in the IETF I-D submission.] Regards, Shuh =20 > -----Original Message----- > From: Doherty, Andrea [mailto:adoherty@rsa.com]=20 > Sent: Monday, July 09, 2007 2:36 PM > To: CHANG Shuh; Pei, Mingliang; keyprov@ietf.org > Subject: RE: [KEYPROV] FW: Internet Draft submission >=20 > Shuh, > There is not an updated .xsd, however, the schema was=20 > slightly modified, and can be found in the .txt file that was=20 > submitted to the IETF. Note that the sample files that you=20 > refer to below probably differ from what was submitted. > Andrea=20 >=20 > -----Original Message----- > From: CHANG Shuh [mailto:shuh.chang@gemalto.com] > Sent: Monday, July 09, 2007 1:22 PM > To: Pei, Mingliang; Doherty, Andrea; keyprov@ietf.org > Subject: RE: [KEYPROV] FW: Internet Draft submission >=20 > Hi Ming & Andrea, >=20 > Sorry for missing the PSKC conf calls last week. I was on=20 > vacation last week. >=20 > I saw that you sent out the lastest PSKC XSD schema files=20 > (keyprov_pskc_schema_v1.1.xsd and keyprov_logotype_v1.0.xsd)=20 > and the sample XML file=20 > (draft-hoyer-keyprov-portable-symmetric-key-container-01.xml). > You also sent out the sample XML files for DSKPP=20 > (serverfinished.xml, serverfinished2.xml,=20 > serverfinished3.xml, serverfinished4.xml).=20 >=20 > Do you also have the latest XSD schema file for the DSKPP?=20 > The latest one that I have is from the May version, KEYPROV=20 > Draft 05-23-2007.xsd. > Is this still the valid schema file for DSKPP? Thanks. >=20 > Regards, > Shuh >=20 > =20 >=20 > > -----Original Message----- > > From: Pei, Mingliang [mailto:mpei@verisign.com] > > Sent: Monday, July 09, 2007 3:37 AM > > To: Doherty, Andrea; keyprov@ietf.org > > Subject: RE: [KEYPROV] FW: Internet Draft submission > >=20 > >=20 > > Please see these updated sample messages. > >=20 > > - Ming > >=20 > > -----Original Message----- > > From: Doherty, Andrea [mailto:adoherty@rsa.com] > > Sent: Monday, July 09, 2007 1:08 AM > > To: keyprov@ietf.org > > Subject: [KEYPROV] FW: Internet Draft submission > >=20 > > Please find attached submission for which I just received an=20 > > auto-response from the IETF Submission Manager. > > Andrea > >=20 > > ________________________________ > >=20 > > From: Doherty, Andrea > > Sent: Mon 7/9/2007 3:44 AM > > To: internet-drafts@ietf.org > > Subject: Internet Draft submission > >=20 > >=20 > > To the IETF Secretariat:=20 > > Attached please find the -01 version of Internet-Draft submission=20 > > entitled "Dynamic Symmetric Key Provisioning Protocol=20 > (DSKPP)". Please=20 > > direct any questions or comments you may have to me. > >=20 > > Thank you, > > Andrea Doherty > >=20 > >=20 > >=20 >=20 _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Mon Jul 09 16:32:54 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7zuf-0006xf-E1; Mon, 09 Jul 2007 16:32:53 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I7zuc-0006vb-9g for keyprov@ietf.org; Mon, 09 Jul 2007 16:32:51 -0400 Received: from colibri.verisign.com ([65.205.251.74]) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1I7zuR-0001DX-V8 for keyprov@ietf.org; Mon, 09 Jul 2007 16:32:50 -0400 Received: from MOU1WNEXCN02.vcorp.ad.vrsn.com (mailer2.verisign.com [65.205.251.35]) by colibri.verisign.com (8.13.6/8.13.4) with ESMTP id l69KVB6q007401; Mon, 9 Jul 2007 13:31:11 -0700 Received: from MOU1WNEXMB10.vcorp.ad.vrsn.com ([10.25.13.204]) by MOU1WNEXCN02.vcorp.ad.vrsn.com with Microsoft SMTPSVC(6.0.3790.1830); Mon, 9 Jul 2007 13:31:11 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: [KEYPROV] FW: Internet Draft submission Date: Mon, 9 Jul 2007 13:31:10 -0700 Message-ID: <3E5A2F1AD44F5E49A74F79AB47C0C0C939F349@mou1wnexmb10.vcorp.ad.vrsn.com> In-Reply-To: <093F8C873752A84D98A28841099DF380178D3A@GMSEXC07.CORP.DS.GEMPLUS.COM> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [KEYPROV] FW: Internet Draft submission Thread-Index: AcfB/O8ckPDZVqwGQ1OEOd9QP7RZ8QAA2SwpAAD9P0AAEesecAAFEb/wAAGrPnAAACntcA== From: "Pei, Mingliang" To: "CHANG Shuh" , "Doherty, Andrea" , X-OriginalArrivalTime: 09 Jul 2007 20:31:11.0097 (UTC) FILETIME=[165D9E90:01C7C268] X-Spam-Score: 0.0 (/) X-Scan-Signature: 8fbbaa16f9fd29df280814cb95ae2290 Cc: X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Shuh, Yes, I will get .xsd file to be up to date for publishing. Meanwhile, please refer to the I-D themselves which contains the latest schema. We want to figure out a place to host these schema files. For PSKC, it used to be in OATH web site. This is an issue to be discussed later under keyprov. - Ming=20 -----Original Message----- From: CHANG Shuh [mailto:shuh.chang@gemalto.com]=20 Sent: Monday, July 09, 2007 1:23 PM To: Doherty, Andrea; Pei, Mingliang; keyprov@ietf.org Subject: RE: [KEYPROV] FW: Internet Draft submission Doherty, Andrea wrote: > Note that the sample files that you > refer to below probably differ from what was submitted. Hi Andrea, I did notice that the sample XML files that Ming sent out are different from the ones that you sent out back in May. I have not had a chance to review the new sample set yet. I'd assume that these new XML sample files are for different use cases than the ones that you sent out in May. Correct? [I'll take a closer look at them when I have a chance.] Thanks. Ming, Based on what you indicated, you will be sending out the following updated XSD schema files: DSKPP V1.1 XSD PSKC V1.2 XSD as the "equivalent" of the latest IETF submission. Correct? [I'd like to make sure to have the schema files that reflect (in synch. with) what are stated in the IETF I-D submission.] Regards, Shuh =20 > -----Original Message----- > From: Doherty, Andrea [mailto:adoherty@rsa.com] > Sent: Monday, July 09, 2007 2:36 PM > To: CHANG Shuh; Pei, Mingliang; keyprov@ietf.org > Subject: RE: [KEYPROV] FW: Internet Draft submission >=20 > Shuh, > There is not an updated .xsd, however, the schema was slightly=20 > modified, and can be found in the .txt file that was submitted to the=20 > IETF. Note that the sample files that you refer to below probably=20 > differ from what was submitted. > Andrea >=20 > -----Original Message----- > From: CHANG Shuh [mailto:shuh.chang@gemalto.com] > Sent: Monday, July 09, 2007 1:22 PM > To: Pei, Mingliang; Doherty, Andrea; keyprov@ietf.org > Subject: RE: [KEYPROV] FW: Internet Draft submission >=20 > Hi Ming & Andrea, >=20 > Sorry for missing the PSKC conf calls last week. I was on vacation=20 > last week. >=20 > I saw that you sent out the lastest PSKC XSD schema files=20 > (keyprov_pskc_schema_v1.1.xsd and keyprov_logotype_v1.0.xsd) and the=20 > sample XML file=20 > (draft-hoyer-keyprov-portable-symmetric-key-container-01.xml). > You also sent out the sample XML files for DSKPP (serverfinished.xml, > serverfinished2.xml, serverfinished3.xml, serverfinished4.xml). >=20 > Do you also have the latest XSD schema file for the DSKPP?=20 > The latest one that I have is from the May version, KEYPROV Draft=20 > 05-23-2007.xsd. > Is this still the valid schema file for DSKPP? Thanks. >=20 > Regards, > Shuh >=20 > =20 >=20 > > -----Original Message----- > > From: Pei, Mingliang [mailto:mpei@verisign.com] > > Sent: Monday, July 09, 2007 3:37 AM > > To: Doherty, Andrea; keyprov@ietf.org > > Subject: RE: [KEYPROV] FW: Internet Draft submission > >=20 > >=20 > > Please see these updated sample messages. > >=20 > > - Ming > >=20 > > -----Original Message----- > > From: Doherty, Andrea [mailto:adoherty@rsa.com] > > Sent: Monday, July 09, 2007 1:08 AM > > To: keyprov@ietf.org > > Subject: [KEYPROV] FW: Internet Draft submission > >=20 > > Please find attached submission for which I just received an=20 > > auto-response from the IETF Submission Manager. > > Andrea > >=20 > > ________________________________ > >=20 > > From: Doherty, Andrea > > Sent: Mon 7/9/2007 3:44 AM > > To: internet-drafts@ietf.org > > Subject: Internet Draft submission > >=20 > >=20 > > To the IETF Secretariat:=20 > > Attached please find the -01 version of Internet-Draft submission=20 > > entitled "Dynamic Symmetric Key Provisioning Protocol > (DSKPP)". Please > > direct any questions or comments you may have to me. > >=20 > > Thank you, > > Andrea Doherty > >=20 > >=20 > >=20 >=20 _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Tue Jul 10 03:21:13 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I8A25-0006dt-Ad; Tue, 10 Jul 2007 03:21:13 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I8A24-0006do-4V for keyprov@ietf.org; Tue, 10 Jul 2007 03:21:12 -0400 Received: from mail.gmx.net ([213.165.64.20]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1I8A20-0002DA-R3 for keyprov@ietf.org; Tue, 10 Jul 2007 03:21:12 -0400 Received: (qmail invoked by alias); 10 Jul 2007 07:21:07 -0000 Received: from p54985C02.dip.t-dialin.net (EHLO [192.168.1.4]) [84.152.92.2] by mail.gmx.net (mp058) with SMTP; 10 Jul 2007 09:21:07 +0200 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX18rLnd+3jArPu/uPQ3v95V6qzT4RshtMmRqM6oQHK dnseWupNv4St8y Message-ID: <46933360.8080408@gmx.net> Date: Tue, 10 Jul 2007 09:21:04 +0200 From: Hannes Tschofenig User-Agent: Thunderbird 2.0.0.4 (Windows/20070604) MIME-Version: 1.0 To: keyprov@ietf.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Y-GMX-Trusted: 0 X-Spam-Score: 0.0 (/) X-Scan-Signature: 8ac499381112328dd60aea5b1ff596ea Subject: [KEYPROV] Tentative Agenda for KEYPROV meeting X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Here is the first try: http://www3.ietf.org/proceedings/07jul/agenda/keyprov.txt Ciao Hannes & Phillip _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Tue Jul 10 11:20:32 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I8HVt-0008VM-M8; Tue, 10 Jul 2007 11:20:29 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I8HVs-0008V6-CF for keyprov@ietf.org; Tue, 10 Jul 2007 11:20:28 -0400 Received: from gateway1.rsasecurity.com ([216.162.240.250]) by chiedprmail1.ietf.org with smtp (Exim 4.43) id 1I8HVs-0007s4-5g for keyprov@ietf.org; Tue, 10 Jul 2007 11:20:28 -0400 Received: from hyperion.rsasecurity.com by gateway1.rsasecurity.com via smtpd (for chiedprmail1.ietf.ORG [156.154.24.150]) with SMTP; Tue, 10 Jul 2007 11:20:19 -0400 Received: from sdtihq24.securid.com (sdtihq24.na.rsa.net [10.100.8.152]) by hyperion.na.rsa.net (MOS 3.8.3-GA) with ESMTP id DFI54382; Tue, 10 Jul 2007 11:24:44 +0500 (GMT-5) Received: from rsana-ex-hq1.NA.RSA.NET (rsana-ex-hq1.na.rsa.net [10.100.8.50]) by sdtihq24.securid.com (8.12.10/8.12.9) with ESMTP id l6AFJjOs009746; Tue, 10 Jul 2007 11:19:53 -0400 (EDT) X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: [KEYPROV] Tentative Agenda for KEYPROV meeting Date: Tue, 10 Jul 2007 11:19:50 -0400 Message-ID: <017630AA6DF2DF4EBC1DD4454F8EE2970B75B85E@rsana-ex-hq1.NA.RSA.NET> In-Reply-To: <46933360.8080408@gmx.net> Thread-Topic: [KEYPROV] Tentative Agenda for KEYPROV meeting thread-index: AcfCwuj8nE9BQ/SyTDOs0yyULaYYxwAQsskA References: <46933360.8080408@gmx.net> From: "Doherty, Andrea" To: "Hannes Tschofenig" , X-Junkmail-Whitelist: YES (by domain whitelist at hyperion.na.rsa.net) X-Spam-Score: 0.0 (/) X-Scan-Signature: 93238566e09e6e262849b4f805833007 Cc: X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Hannes, A couple of comments on the agenda: The names for the I-Ds are reversed. The I-D version numbers are -00; there should be -01 (DSKPP) and -02 (PSKC) available online in time for the meeting. Andrea=20 -----Original Message----- From: Hannes Tschofenig [mailto:Hannes.Tschofenig@gmx.net]=20 Sent: Tuesday, July 10, 2007 3:21 AM To: keyprov@ietf.org Subject: [KEYPROV] Tentative Agenda for KEYPROV meeting Here is the first try: http://www3.ietf.org/proceedings/07jul/agenda/keyprov.txt Ciao Hannes & Phillip _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Tue Jul 10 11:45:43 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I8HuJ-0005Ry-QI; Tue, 10 Jul 2007 11:45:43 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I8HuI-0005Oh-UO for keyprov@ietf.org; Tue, 10 Jul 2007 11:45:42 -0400 Received: from mail.gmx.net ([213.165.64.20]) by chiedprmail1.ietf.org with smtp (Exim 4.43) id 1I8HuI-0008Ny-7L for keyprov@ietf.org; Tue, 10 Jul 2007 11:45:42 -0400 Received: (qmail invoked by alias); 10 Jul 2007 15:45:17 -0000 Received: from p5498565A.dip.t-dialin.net (EHLO [192.168.1.4]) [84.152.86.90] by mail.gmx.net (mp030) with SMTP; 10 Jul 2007 17:45:17 +0200 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX1/Hl24pkJTHRxKfAHM3BrB+/gTyslx1Hi+dh7Y06V 1WAcuS6wPv5UNk Message-ID: <4693A970.9020606@gmx.net> Date: Tue, 10 Jul 2007 17:44:48 +0200 From: Hannes Tschofenig User-Agent: Thunderbird 2.0.0.4 (Windows/20070604) MIME-Version: 1.0 To: "Doherty, Andrea" Subject: Re: [KEYPROV] Tentative Agenda for KEYPROV meeting References: <46933360.8080408@gmx.net> <017630AA6DF2DF4EBC1DD4454F8EE2970B75B85E@rsana-ex-hq1.NA.RSA.NET> In-Reply-To: <017630AA6DF2DF4EBC1DD4454F8EE2970B75B85E@rsana-ex-hq1.NA.RSA.NET> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Y-GMX-Trusted: 0 X-Spam-Score: 0.0 (/) X-Scan-Signature: e1e48a527f609d1be2bc8d8a70eb76cb Cc: keyprov@ietf.org X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org The problem is only that the new draft versions are not yet distributed. Hence, I don't have the links to them. What I can offer is a link to my server: http://www.tschofenig.priv.at/svn/keyprov/stable/draft-doherty-keyprov-dskpp-01.txt http://www.tschofenig.priv.at/svn/keyprov/PSKC/draft-hoyer-keyprov-portable-symmetric-key-container-02.txt I uploaded a new version of the agenda and I will replace the links with the "official" links as soon as the docs get published. Ciao Hannes Doherty, Andrea wrote: > Hannes, > A couple of comments on the agenda: > The names for the I-Ds are reversed. > The I-D version numbers are -00; there should be -01 (DSKPP) and -02 > (PSKC) available online in time for the meeting. > Andrea > > -----Original Message----- > From: Hannes Tschofenig [mailto:Hannes.Tschofenig@gmx.net] > Sent: Tuesday, July 10, 2007 3:21 AM > To: keyprov@ietf.org > Subject: [KEYPROV] Tentative Agenda for KEYPROV meeting > > Here is the first try: > http://www3.ietf.org/proceedings/07jul/agenda/keyprov.txt > > Ciao > Hannes & Phillip > > > _______________________________________________ > KEYPROV mailing list > KEYPROV@ietf.org > https://www1.ietf.org/mailman/listinfo/keyprov > _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Tue Jul 10 12:14:33 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I8IMC-0006Ya-Ut; Tue, 10 Jul 2007 12:14:32 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I8IMC-0006YG-7Q for keyprov@ietf.org; Tue, 10 Jul 2007 12:14:32 -0400 Received: from colibri.verisign.com ([65.205.251.74]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1I8IMB-0001OX-Rd for keyprov@ietf.org; Tue, 10 Jul 2007 12:14:32 -0400 Received: from MOU1WNEXCN03.vcorp.ad.vrsn.com (mailer6.verisign.com [65.205.251.33]) by colibri.verisign.com (8.13.6/8.13.4) with ESMTP id l6AGEVLT018426 for ; Tue, 10 Jul 2007 09:14:31 -0700 Received: from MOU1WNEXMB04.vcorp.ad.vrsn.com ([10.25.13.157]) by MOU1WNEXCN03.vcorp.ad.vrsn.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 10 Jul 2007 09:14:31 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Date: Tue, 10 Jul 2007 09:14:31 -0700 Message-ID: <198A730C2044DE4A96749D13E167AD37565E33@MOU1WNEXMB04.vcorp.ad.vrsn.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Web Service Description Language Thread-Index: AcfDDAaoIBR+0SYuS6qALl7EkkTqww== From: "Hallam-Baker, Phillip" To: X-OriginalArrivalTime: 10 Jul 2007 16:14:31.0207 (UTC) FILETIME=[65BAA370:01C7C30D] X-Spam-Score: 1.0 (+) X-Scan-Signature: 0fa76816851382eb71b0a882ccdc29ac Subject: [KEYPROV] Web Service Description Language X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============2042955146==" Errors-To: keyprov-bounces@ietf.org This is a multi-part message in MIME format. --===============2042955146== Content-class: urn:content-classes:message Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C7C30D.659B8BAA" This is a multi-part message in MIME format. ------_=_NextPart_001_01C7C30D.659B8BAA Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable =20 I spent this morning looking into some changes that have been made to = WSDL since the original scheme. I think they might have a significant = effect on how we might want to approach the specification of HTTP and = SOAP bindings. =20 In the past the general approach has been to regard the WSDL document as = an afterthought, something that is thrown together at the last minute = and at best put in an appendix to the main spec, or circulated as a = Samizdat file. =20 WSDL 2.0 has an adjunct that specifies an HTTP binding. http://www.w3.org/TR/wsdl20-adjuncts/#http-binding =20 This creates a rather interesting option: use WSDL in conjunction with = XML schema to structure the presentation of the protocol document. =20 The basic mechanics of using WSDL are that you define a series of = messages, group the messages together as 'ports' which in our case = correspond to request/response pairs and finaly apply a binding which = may be SOAP or HTTP. =20 We already have much of the structure required in the DSKPP draft. =20 ------_=_NextPart_001_01C7C30D.659B8BAA Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable =0A= =0A= =0A= =0A=
<hat = mode=3D"personal">
=0A=
 
=0A=
I spent this morning = looking into some changes that have been made to WSDL since the original = scheme. I think they might have a significant effect on how we might = want to approach the specification of HTTP and SOAP = bindings.
=0A=
 
=0A=
In the past the general approach has = been to regard the WSDL document as an afterthought, something that is = thrown together at the last minute and at best put in an appendix to the = main spec, or circulated as a Samizdat file.
=0A=
 
=0A=
WSDL 2.0 has an adjunct that specifies = an HTTP binding.
=0A= =0A=
 
=0A=
This creates a rather interesting option: use WSDL in conjunction = with XML schema to structure the presentation of the protocol = document.
=0A=
 
=0A=
The basic mechanics of using WSDL are that you define a series of = messages, group the messages together as 'ports' which in our case = correspond to request/response pairs and finaly apply a binding which = may be SOAP or HTTP.
=0A=
 
=0A=
We already have much of the structure = required in the DSKPP draft.
=0A=
 
=0A=
</hat>
------_=_NextPart_001_01C7C30D.659B8BAA-- --===============2042955146== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov --===============2042955146==-- From keyprov-bounces@ietf.org Tue Jul 10 15:13:05 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I8L8y-0002al-PJ; Tue, 10 Jul 2007 15:13:04 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I8L8x-0002aX-DI for keyprov@ietf.org; Tue, 10 Jul 2007 15:13:03 -0400 Received: from mail.gmx.net ([213.165.64.20]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1I8L8t-0008NW-3s for keyprov@ietf.org; Tue, 10 Jul 2007 15:13:03 -0400 Received: (qmail invoked by alias); 10 Jul 2007 19:12:57 -0000 Received: from p5498565A.dip.t-dialin.net (EHLO [192.168.1.4]) [84.152.86.90] by mail.gmx.net (mp008) with SMTP; 10 Jul 2007 21:12:57 +0200 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX1+kY3coLE6kL+E5bCUuu6rUg7K5zSVO6sUjLaHwCa uAWIk9wXMRDkNj Message-ID: <4693DA34.40203@gmx.net> Date: Tue, 10 Jul 2007 21:12:52 +0200 From: Hannes Tschofenig User-Agent: Thunderbird 2.0.0.4 (Windows/20070604) MIME-Version: 1.0 To: keyprov@ietf.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Y-GMX-Trusted: 0 X-Spam-Score: 0.0 (/) X-Scan-Signature: 08e48e05374109708c00c6208b534009 Subject: [KEYPROV] KEYPROV WG Status Update (July 2007) X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Hi all, an new WG status update is available: http://www.tschofenig.priv.at/twiki/bin/view/KeyProv/KeyprovStatusUpdate Ciao Hannes _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Wed Jul 11 09:46:07 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I8cW7-0005mx-73; Wed, 11 Jul 2007 09:46:07 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I8cW6-0005mU-DF for keyprov@ietf.org; Wed, 11 Jul 2007 09:46:06 -0400 Received: from smtp101.biz.mail.re2.yahoo.com ([68.142.229.215]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1I8cW2-0000bF-0a for keyprov@ietf.org; Wed, 11 Jul 2007 09:46:06 -0400 Received: (qmail 73861 invoked from network); 11 Jul 2007 13:46:01 -0000 Received: from unknown (HELO Wylie) (turners@ieca.com@70.108.33.50 with login) by smtp101.biz.mail.re2.yahoo.com with SMTP; 11 Jul 2007 13:46:01 -0000 X-YMail-OSG: uySH40AVM1lnLY6Lp98sErZ9anLqjsMjaixuBhNIm6zV7U77LCnaAk657rWeZ67oLo3FiSjKV2W46mAXbxEGWOFWOYHavIpO_Z3mnSltXFOH19thrbDB5jkQW8woeiw2.ARaYNfW43YxYIQ- From: "Turner, Sean P." To: Date: Wed, 11 Jul 2007 09:36:42 -0400 Organization: IECA, Inc. Message-ID: <00be01c7c3c0$848c68c0$0301a8c0@Wylie> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 11 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 Thread-Index: AcfDwIQZjfhL0kMuT32nDTXXZMzg+g== X-Spam-Score: 0.0 (/) X-Scan-Signature: 386e0819b1192672467565a524848168 Subject: [KEYPROV] FW: I-D ACTION:draft-turner-symmetrickeyformat-00.txt X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: turners@ieca.com List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org FYI - here is a symmetric key container draft that uses ASN.1 that I was hoping the WG might consider. Is there a chance I can get 5 minutes to talk about this on the agenda at IETF 69 to talk about it? spt ---------------------------------------------------------------------------- ---- To: i-d-announce at ietf.org Subject: I-D ACTION:draft-turner-symmetrickeyformat-00.txt From: Internet-Drafts at ietf.org Date: Tue, 03 Jul 2007 19:15:01 -0400 Cc: List-archive: List-help: List-id: i-d-announce.ietf.org List-post: List-subscribe: , List-unsubscribe: , Reply-to: internet-drafts at ietf.org ---------------------------------------------------------------------------- ---- A New Internet-Draft is available from the on-line Internet-Drafts directories. Title : Symmetric Key Package Content Type Author(s) : S. Turner, R. Housley Filename : draft-turner-symmetrickeyformat-00.txt Pages : 9 Date : 2007-7-3 This document defines the symmetric key format content type. It is transport independent. The Cryptographic Message Syntax [RFC3852] can be used to digitally sign, digest, authenticate, or encrypt this content type. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-turner-symmetrickeyformat-00.txt To remove yourself from the I-D Announcement list, send a message to i-d-announce-request at ietf.org with the word unsubscribe in the body of the message. You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce to change your subscription settings. Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-turner-symmetrickeyformat-00.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv at ietf.org. In the body type: "FILE /internet-drafts/draft-turner-symmetrickeyformat-00.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. _______________________________________________ I-D-Announce mailing list I-D-Announce at ietf.org https://www1.ietf.org/mailman/listinfo/i-d-announce _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Wed Jul 11 14:43:32 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I8h9v-000669-VY; Wed, 11 Jul 2007 14:43:31 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I8h9u-00065n-Ni for keyprov@ietf.org; Wed, 11 Jul 2007 14:43:30 -0400 Received: from mail.gmx.net ([213.165.64.20]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1I8h9q-0002xH-7A for keyprov@ietf.org; Wed, 11 Jul 2007 14:43:30 -0400 Received: (qmail invoked by alias); 11 Jul 2007 18:43:25 -0000 Received: from p54987C44.dip.t-dialin.net (EHLO [192.168.1.4]) [84.152.124.68] by mail.gmx.net (mp031) with SMTP; 11 Jul 2007 20:43:25 +0200 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX1+WlVsk0LiWjfK0yChfacLopLxaQk29MckS5nWeRM /+IO/CYlupONdG Message-ID: <469524C5.5060208@gmx.net> Date: Wed, 11 Jul 2007 20:43:17 +0200 From: Hannes Tschofenig User-Agent: Thunderbird 2.0.0.4 (Windows/20070604) MIME-Version: 1.0 To: keyprov@ietf.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Y-GMX-Trusted: 0 X-Spam-Score: 0.0 (/) X-Scan-Signature: 5011df3e2a27abcc044eaa15befcaa87 Cc: Subject: [KEYPROV] Accepting draft-doherty-keyprov-dskpp-01.txt as WG item X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org KEYPROV working group members! [Responses to this message are necessary by July 20th] At IETF#69 the KEYPROV working group was quite satisfied with the proposal of merging the two individual solutions. Phillip and myself decided to wait until we have a merged draft for the group to look at. Now, we have a revised version of the -00 document available for review. We believe that this document provides a basis for further work. This is a call for input on accepting "Dynamic Symmetric Key Provisioning Protocol (DSKPP)" (draft-doherty-keyprov-dskpp-01.txt) as WG item. Please provide any input, both positive and negative. Ciao Hannes & Phillip -------- Original Message -------- Subject: I-D ACTION:draft-doherty-keyprov-dskpp-01.txt Date: Wed, 11 Jul 2007 14:15:01 -0400 From: Internet-Drafts@ietf.org Reply-To: internet-drafts@ietf.org To: i-d-announce@ietf.org A New Internet-Draft is available from the on-line Internet-Drafts directories. Title : Dynamic Symmetric Key Provisioning Protocol (DSKPP) Author(s) : M. Nystroem, et al. Filename : draft-doherty-keyprov-dskpp-01.txt Pages : 100 Date : 2007-7-11 DSKPP is a client-server protocol for initialization (and configuration) of symmetric keys to locally and remotely accessible cryptographic modules. The protocol can be run with or without private-key capabilities in the cryptographic modules, and with or without an established public-key infrastructure. Three variations of the protocol support multiple usage scenarios. The four-pass (i.e., two round-trip) variant enables key generation in near real-time. With the four-pass variant, keys are mutually generated by the provisioning server and cryptographic module; provisioned keys are not transferred over-the-wire or over-the-air. Two- and one-pass variants enable secure and efficient download and installation of symmetric keys to a cryptographic module in environments where near real-time communication may not be possible. This document builds on information contained in [RFC4758], adding specific enhancements in response to implementation experience and liaison requests. It is intended, therefore, that this document or a successor version thereto will become the basis for subsequent progression of a symmetric key provisioning protocol specification on the standards track. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-doherty-keyprov-dskpp-01.txt To remove yourself from the I-D Announcement list, send a message to i-d-announce-request@ietf.org with the word unsubscribe in the body of the message. You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce to change your subscription settings. Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-doherty-keyprov-dskpp-01.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-doherty-keyprov-dskpp-01.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Wed Jul 11 14:54:36 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I8hKe-0004HW-1E; Wed, 11 Jul 2007 14:54:36 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I8gq1-0007bn-G7 for keyprov@ietf.org; Wed, 11 Jul 2007 14:22:57 -0400 Received: from robin.verisign.com ([65.205.251.75]) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1I8gq0-0002sq-UB for keyprov@ietf.org; Wed, 11 Jul 2007 14:22:57 -0400 Received: from MOU1WNEXCN02.vcorp.ad.vrsn.com (mailer2.verisign.com [65.205.251.35]) by robin.verisign.com (8.13.6/8.13.4) with ESMTP id l6BIMIoK021651 for ; Wed, 11 Jul 2007 11:22:18 -0700 Received: from MOU1WNEXMB10.vcorp.ad.vrsn.com ([10.25.13.204]) by MOU1WNEXCN02.vcorp.ad.vrsn.com with Microsoft SMTPSVC(6.0.3790.1830); Wed, 11 Jul 2007 11:22:18 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----_=_NextPart_001_01C7C3E8.69EDA673" Date: Wed, 11 Jul 2007 11:22:17 -0700 Message-ID: <3E5A2F1AD44F5E49A74F79AB47C0C0C939F3E2@mou1wnexmb10.vcorp.ad.vrsn.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: I-D ACTION:draft-doherty-keyprov-dskpp-01.txt Thread-Index: AcfD5+DzWKo5h5lmT4mXV5dHsyuWNwAAHOBQ From: "Pei, Mingliang" To: X-OriginalArrivalTime: 11 Jul 2007 18:22:18.0297 (UTC) FILETIME=[6A157A90:01C7C3E8] X-Spam-Score: 0.0 (/) X-Scan-Signature: 6ffdee8af20de249c24731d8414917d3 Subject: [KEYPROV] FW: I-D ACTION:draft-doherty-keyprov-dskpp-01.txt X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org This is a multi-part message in MIME format. ------_=_NextPart_001_01C7C3E8.69EDA673 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable =20 -----Original Message----- From: Internet-Drafts@ietf.org [mailto:Internet-Drafts@ietf.org]=20 Sent: Wednesday, July 11, 2007 11:15 AM To: i-d-announce@ietf.org Subject: I-D ACTION:draft-doherty-keyprov-dskpp-01.txt=20 A New Internet-Draft is available from the on-line Internet-Drafts directories. Title : Dynamic Symmetric Key Provisioning Protocol (DSKPP) Author(s) : M. Nystroem, et al. Filename : draft-doherty-keyprov-dskpp-01.txt Pages : 100 Date : 2007-7-11 =09 DSKPP is a client-server protocol for initialization (and configuration) of symmetric keys to locally and remotely accessible cryptographic modules. The protocol can be run with or without private-key capabilities in the cryptographic modules, and with or without an established public-key infrastructure. Three variations of the protocol support multiple usage scenarios. The four-pass (i.e., two round-trip) variant enables key generation in near real-time. With the four-pass variant, keys are mutually generated by the provisioning server and cryptographic module; provisioned keys are not transferred over-the-wire or over-the-air. Two- and one-pass variants enable secure and efficient download and installation of symmetric keys to a cryptographic module in environments where near real-time communication may not be possible. This document builds on information contained in [RFC4758], adding specific enhancements in response to implementation experience and liaison requests. It is intended, therefore, that this document or a successor version thereto will become the basis for subsequent progression of a symmetric key provisioning protocol specification on the standards track. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-doherty-keyprov-dskpp-01.txt To remove yourself from the I-D Announcement list, send a message to=20 i-d-announce-request@ietf.org with the word unsubscribe in the body of=20 the message.=20 You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce=20 to change your subscription settings. Internet-Drafts are also available by anonymous FTP. Login with the=20 username "anonymous" and a password of your e-mail address. After=20 logging in, type "cd internet-drafts" and then=20 "get draft-doherty-keyprov-dskpp-01.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html=20 or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-doherty-keyprov-dskpp-01.txt". =09 NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. ------_=_NextPart_001_01C7C3E8.69EDA673 Content-Type: application/octet-stream; name="ATT483784.TXT" Content-Transfer-Encoding: base64 Content-Description: ATT483784.TXT Content-Disposition: attachment; filename="ATT483784.TXT" Q29udGVudC1UeXBlOiBNZXNzYWdlL0V4dGVybmFsLWJvZHk7IGFjY2Vzcy10eXBlPSJtYWlsLXNl cnZlciI7DQoJc2VydmVyPSJtYWlsc2VydkBpZXRmLm9yZyINCg0KQ29udGVudC1UeXBlOiB0ZXh0 L3BsYWluDQpDb250ZW50LUlEOiA8MjAwNy03LTExMTMyNjMyLkktREBpZXRmLm9yZz4NCg0KRU5D T0RJTkcgbWltZQ0KRklMRSAvaW50ZXJuZXQtZHJhZnRzL2RyYWZ0LWRvaGVydHkta2V5cHJvdi1k c2twcC0wMS50eHQNCg== ------_=_NextPart_001_01C7C3E8.69EDA673 Content-Type: application/octet-stream; name="draft-doherty-keyprov-dskpp-01.URL" Content-Transfer-Encoding: base64 Content-Description: draft-doherty-keyprov-dskpp-01.URL Content-Disposition: attachment; filename="draft-doherty-keyprov-dskpp-01.URL" W0ludGVybmV0U2hvcnRjdXRdDQpVUkw9ZnRwOi8vZnRwLmlldGYub3JnL2ludGVybmV0LWRyYWZ0 cy9kcmFmdC1kb2hlcnR5LWtleXByb3YtZHNrcHAtMDEudHh0DQo= ------_=_NextPart_001_01C7C3E8.69EDA673 Content-Type: text/plain; name="ATT483785.txt" Content-Transfer-Encoding: base64 Content-Description: ATT483785.txt Content-Disposition: attachment; filename="ATT483785.txt" X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkktRC1Bbm5v dW5jZSBtYWlsaW5nIGxpc3QNCkktRC1Bbm5vdW5jZUBpZXRmLm9yZw0KaHR0cHM6Ly93d3cxLmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vaS1kLWFubm91bmNlDQo= ------_=_NextPart_001_01C7C3E8.69EDA673 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov ------_=_NextPart_001_01C7C3E8.69EDA673-- From keyprov-bounces@ietf.org Thu Jul 12 13:44:10 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I92i2-0000cx-0W; Thu, 12 Jul 2007 13:44:10 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I92i0-0000cU-Nl for keyprov@ietf.org; Thu, 12 Jul 2007 13:44:08 -0400 Received: from colibri.verisign.com ([65.205.251.74]) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1I92i0-0000xJ-8y for keyprov@ietf.org; Thu, 12 Jul 2007 13:44:08 -0400 Received: from MOU1WNEXCN03.vcorp.ad.vrsn.com (mailer6.verisign.com [65.205.251.33]) by colibri.verisign.com (8.13.6/8.13.4) with ESMTP id l6CHgghG009960 for ; Thu, 12 Jul 2007 10:42:42 -0700 Received: from MOU1WNEXMB10.vcorp.ad.vrsn.com ([10.25.13.204]) by MOU1WNEXCN03.vcorp.ad.vrsn.com with Microsoft SMTPSVC(6.0.3790.1830); Thu, 12 Jul 2007 10:42:42 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----_=_NextPart_001_01C7C4AC.0C0AB6C3" Date: Thu, 12 Jul 2007 10:42:40 -0700 Message-ID: <3E5A2F1AD44F5E49A74F79AB47C0C0C939F43E@mou1wnexmb10.vcorp.ad.vrsn.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: I-D ACTION:draft-hoyer-keyprov-portable-symmetric-key-container-01.txt Thread-Index: AcfEl+BLfwE+6MrBR8ihhCT1x3rhTQAFA+qQ From: "Pei, Mingliang" To: X-OriginalArrivalTime: 12 Jul 2007 17:42:42.0124 (UTC) FILETIME=[0C3000C0:01C7C4AC] X-Spam-Score: 0.0 (/) X-Scan-Signature: 2086112c730e13d5955355df27e3074b Subject: [KEYPROV] FW: I-D ACTION:draft-hoyer-keyprov-portable-symmetric-key-container-01.txt X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org This is a multi-part message in MIME format. ------_=_NextPart_001_01C7C4AC.0C0AB6C3 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable =20 FYI. PSKC v1.2 I-D for keyprov work group. - Ming -----Original Message----- From: Internet-Drafts@ietf.org [mailto:Internet-Drafts@ietf.org]=20 Sent: Thursday, July 12, 2007 8:15 AM To: i-d-announce@ietf.org Subject: I-D ACTION:draft-hoyer-keyprov-portable-symmetric-key-container-01.txt=20 A New Internet-Draft is available from the on-line Internet-Drafts directories. Title : Portable Symmetric Key Container Author(s) : P. Hoyer, et al. Filename : draft-hoyer-keyprov-portable-symmetric-key-container-01.txt Pages : 49 Date : 2007-7-12 =09 This document specifies a symmetric key format for transport and provisioning of symmetric keys (One Time Password (OTP) shared secrets or symmetric cryptographic keys) to different types of strong authentication devices. The standard token format enables enterprises to deploy best-of-breed solutions combining components from different vendors into the same infrastructure. This work is a joint effort by the members of OATH (Initiative for Open AuTHentication) to specify a format that can be freely distributed to the technical community. The authors believe that a common and shared specification will facilitate adoption of two- factor authentication on the Internet by enabling interoperability between commercial and open-source implementations. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-hoyer-keyprov-portable-symmetr ic-key-container-01.txt To remove yourself from the I-D Announcement list, send a message to=20 i-d-announce-request@ietf.org with the word unsubscribe in the body of=20 the message.=20 You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce=20 to change your subscription settings. Internet-Drafts are also available by anonymous FTP. Login with the=20 username "anonymous" and a password of your e-mail address. After=20 logging in, type "cd internet-drafts" and then=20 "get draft-hoyer-keyprov-portable-symmetric-key-container-01.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html=20 or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-hoyer-keyprov-portable-symmetric-key-container-01 .txt". =09 NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. ------_=_NextPart_001_01C7C4AC.0C0AB6C3 Content-Type: application/octet-stream; name="ATT495018.TXT" Content-Transfer-Encoding: base64 Content-Description: ATT495018.TXT Content-Disposition: attachment; filename="ATT495018.TXT" Q29udGVudC1UeXBlOiBNZXNzYWdlL0V4dGVybmFsLWJvZHk7IGFjY2Vzcy10eXBlPSJtYWlsLXNl cnZlciI7DQoJc2VydmVyPSJtYWlsc2VydkBpZXRmLm9yZyINCg0KQ29udGVudC1UeXBlOiB0ZXh0 L3BsYWluDQpDb250ZW50LUlEOiA8MjAwNy03LTEyMTA1MzE4LkktREBpZXRmLm9yZz4NCg0KRU5D T0RJTkcgbWltZQ0KRklMRSAvaW50ZXJuZXQtZHJhZnRzL2RyYWZ0LWhveWVyLWtleXByb3YtcG9y dGFibGUtc3ltbWV0cmljLWtleS1jb250YWluZXItMDEudHh0DQo= ------_=_NextPart_001_01C7C4AC.0C0AB6C3 Content-Type: application/octet-stream; name="draft-hoyer-keyprov-portable-symmetric-key-container-01.URL" Content-Transfer-Encoding: base64 Content-Description: draft-hoyer-keyprov-portable-symmetric-key-container-01.URL Content-Disposition: attachment; filename="draft-hoyer-keyprov-portable-symmetric-key-container-01.URL" W0ludGVybmV0U2hvcnRjdXRdDQpVUkw9ZnRwOi8vZnRwLmlldGYub3JnL2ludGVybmV0LWRyYWZ0 cy9kcmFmdC1ob3llci1rZXlwcm92LXBvcnRhYmxlLXN5bW1ldHJpYy1rZXktY29udGFpbmVyLTAx LnR4dA0K ------_=_NextPart_001_01C7C4AC.0C0AB6C3 Content-Type: text/plain; name="ATT495019.txt" Content-Transfer-Encoding: base64 Content-Description: ATT495019.txt Content-Disposition: attachment; filename="ATT495019.txt" X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCkktRC1Bbm5v dW5jZSBtYWlsaW5nIGxpc3QNCkktRC1Bbm5vdW5jZUBpZXRmLm9yZw0KaHR0cHM6Ly93d3cxLmll dGYub3JnL21haWxtYW4vbGlzdGluZm8vaS1kLWFubm91bmNlDQo= ------_=_NextPart_001_01C7C4AC.0C0AB6C3 Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov ------_=_NextPart_001_01C7C4AC.0C0AB6C3-- From keyprov-bounces@ietf.org Thu Jul 12 13:48:54 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I92mc-0002gC-MK; Thu, 12 Jul 2007 13:48:54 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I92mb-0002g1-S9 for keyprov@ietf.org; Thu, 12 Jul 2007 13:48:53 -0400 Received: from gateway1.rsasecurity.com ([216.162.240.250]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1I92mX-0006j2-In for keyprov@ietf.org; Thu, 12 Jul 2007 13:48:53 -0400 Received: from hyperion.rsasecurity.com by gateway1.rsasecurity.com via smtpd (for ietf-mx.ietf.ORG [156.154.16.150]) with SMTP; Thu, 12 Jul 2007 13:48:49 -0400 Received: from sdtihq24.securid.com (sdtihq24.na.rsa.net [10.100.8.152]) by hyperion.na.rsa.net (MOS 3.8.3-GA) with ESMTP id DFL17814; Thu, 12 Jul 2007 13:53:51 +0500 (GMT-5) Received: from rsana-ex-hq1.NA.RSA.NET (rsana-ex-hq1.na.rsa.net [10.100.8.50]) by sdtihq24.securid.com (8.12.10/8.12.9) with ESMTP id l6CHmmOo012108 for ; Thu, 12 Jul 2007 13:48:48 -0400 (EDT) X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Thu, 12 Jul 2007 13:48:47 -0400 Message-ID: <017630AA6DF2DF4EBC1DD4454F8EE2970B8DBE69@rsana-ex-hq1.NA.RSA.NET> Thread-Topic: Summary of draft-doherty-keyprov-dskpp-01 changes thread-index: AcfErOYf6dGI0dgEQjqXWIHEk0Em2A== From: "Doherty, Andrea" To: X-Junkmail-Whitelist: YES (by domain whitelist at hyperion.na.rsa.net) X-Spam-Score: 0.1 (/) X-Scan-Signature: 3e15cc4fdc61d7bce84032741d11c8e5 Subject: [KEYPROV] Summary of draft-doherty-keyprov-dskpp-01 changes X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org The following summarizes changes between the -01 and -00 versions of draft-doherty-keyprov-dskpp: 1. General: * The recent draft-doherty-keyprov-dskpp-01 protocol draft submission incorporated nearly all feedback to -00 review that was received on the KEYPROV mailing list (i.e., from Mingliang Pei, Salah Machani, Ulrike Meyer, Niklas Neumann, Shah Chang, and Hannes Tschofenig). 2. Editorial: * Intended status changed from "Informational" to "Standards Track" * Order of authors changed in order of current activity * Abstract was expanded to: * Better describe protocol variants. =20 * Note on Informational RFC4758 was added. * Scope (Section 1.1) was reworded * Background (Section 1.2) was reworded and expanded to better describe rationale for using different protocol variants. * Document Organization section removed=20 * Acronyms removed, and definition of terms added/modified * Use Cases were moved to a new Section (3.0). These were reworded such that requirements language was removed, and use cases were reordered in terms of most typical to least typical. * Requirements were moved to Appendix. New ones were added that were missing from -00 version (esp. regarding validity time period and provisioning via SMS) * HTTP Binding: Reworded to remove redundancies 3. Terminology changes across the document: * "cryptographic token" was replaced by "cryptographic module" to avoid confusion the former term raises * The ambiguous phrase "direct communication" was removed * The ambiguous phrase "connected" was replaced by "locally and remotely accessible" * "Secret Container" was replaced with "Key Container" * "SHALL" was replaced with "MUST" 4. DSKPP, Entities, subsection: New object model was added to clarify terminology 5. DSKPP, Principles of Operation: Added table that maps DSKPP use cases to protocol variants 6. DSKPP, Four-pass: Expanded description to include new entities as of -00 version 7. DSKPP, Two-pass:=20 * Expanded to describe steps in more detail * Identification and description of key initialization profiles was added 8. DSKPP, One-pass: Expanded to describe steps in more detail, and to reference key initialization profiles 9. Authentication, Client AuthN, One-time Use AuthenticationData: Computation was corrected to not require a server nonce in the scenario wherein underlying transport layer is not secure for a two-pass protocol run. --Andrea _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Thu Jul 12 15:06:34 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I93zj-0000KY-UW; Thu, 12 Jul 2007 15:06:31 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I93zi-0000KR-Qy for keyprov@ietf.org; Thu, 12 Jul 2007 15:06:30 -0400 Received: from gateway1.rsasecurity.com ([216.162.240.250]) by chiedprmail1.ietf.org with smtp (Exim 4.43) id 1I93zb-0004N9-Jj for keyprov@ietf.org; Thu, 12 Jul 2007 15:06:30 -0400 Received: from hyperion.rsasecurity.com by gateway1.rsasecurity.com via smtpd (for chiedprmail1.ietf.ORG [156.154.24.150]) with SMTP; Thu, 12 Jul 2007 15:06:15 -0400 Received: from sdtihq24.securid.com (sdtihq24.na.rsa.net [10.100.8.152]) by hyperion.na.rsa.net (MOS 3.8.3-GA) with ESMTP id DFL26041; Thu, 12 Jul 2007 15:10:53 +0500 (GMT-5) Received: from rsana-ex-hq1.NA.RSA.NET (rsana-ex-hq1.na.rsa.net [10.100.8.50]) by sdtihq24.securid.com (8.12.10/8.12.9) with ESMTP id l6CJ5jOo022166 for ; Thu, 12 Jul 2007 15:05:50 -0400 (EDT) X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Thu, 12 Jul 2007 15:05:44 -0400 Message-ID: <017630AA6DF2DF4EBC1DD4454F8EE2970B8DBF80@rsana-ex-hq1.NA.RSA.NET> Thread-Topic: Update to summary of draft-doherty-keyprov-dskpp-01 changes thread-index: AcfErOYf6dGI0dgEQjqXWIHEk0Em2AACnhFg From: "Doherty, Andrea" To: X-Junkmail-Whitelist: YES (by domain whitelist at hyperion.na.rsa.net) X-Spam-Score: 0.0 (/) X-Scan-Signature: f4c2cf0bccc868e4cc88dace71fb3f44 Subject: [KEYPROV] Update to summary of draft-doherty-keyprov-dskpp-01 changes X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Fixed spelling of Shuh's name in item#1 below.=20 > The following summarizes changes between the -01 and -00 versions of > draft-doherty-keyprov-dskpp: >=20 > 1. General: > * The recent draft-doherty-keyprov-dskpp-01 protocol draft > submission incorporated nearly all feedback to -00 review that was > received on the KEYPROV mailing list (i.e., from Mingliang Pei, Salah > Machani, Ulrike Meyer, Niklas Neumann Shuh Chang, and Hannes > Tschofenig). > 2. Editorial: > * Intended status changed from "Informational" to "Standards > Track" > * Order of authors changed in order of current activity > * Abstract was expanded to: > * Better describe protocol variants. =20 > * Note on Informational RFC4758 was added. > * Scope (Section 1.1) was reworded > * Background (Section 1.2) was reworded and expanded to better > describe rationale for using different protocol variants. > * Document Organization section removed=20 > * Acronyms removed, and definition of terms added/modified > * Use Cases were moved to a new Section (3.0). These were > reworded such that requirements language was removed, and use cases > were reordered in terms of most typical to least typical. > * Requirements were moved to Appendix. New ones were added that > were missing from -00 version (esp. regarding validity time period and > provisioning via SMS) > * HTTP Binding: Reworded to remove redundancies > 3. Terminology changes across the document: > * "cryptographic token" was replaced by "cryptographic module" to > avoid confusion the former term raises > * The ambiguous phrase "direct communication" was removed > * The ambiguous phrase "connected" was replaced by "locally and > remotely accessible" > * "Secret Container" was replaced with "Key Container" > * "SHALL" was replaced with "MUST" > 4. DSKPP, Entities, subsection: New object model was added to clarify > terminology > 5. DSKPP, Principles of Operation: Added table that maps DSKPP use > cases to protocol variants > 6. DSKPP, Four-pass: Expanded description to include new entities as > of -00 version > 7. DSKPP, Two-pass:=20 > * Expanded to describe steps in more detail > * Identification and description of key initialization profiles > was added > 8. DSKPP, One-pass: Expanded to describe steps in more detail, and to > reference key initialization profiles > 9. Authentication, Client AuthN, One-time Use AuthenticationData: > Computation was corrected to not require a server nonce in the > scenario wherein underlying transport layer is not secure for a > two-pass protocol run. >=20 > --Andrea >=20 _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Fri Jul 13 20:04:20 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1I9V7R-0001XM-Og; Fri, 13 Jul 2007 20:04:17 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1I9V7Q-0001P6-EX for keyprov@ietf.org; Fri, 13 Jul 2007 20:04:16 -0400 Received: from robin.verisign.com ([65.205.251.75]) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1I9V7B-0006HE-0Y for keyprov@ietf.org; Fri, 13 Jul 2007 20:04:16 -0400 Received: from MOU1WNEXCN03.vcorp.ad.vrsn.com (mailer6.verisign.com [65.205.251.33]) by robin.verisign.com (8.13.6/8.13.4) with ESMTP id l6E037OA011303 for ; Fri, 13 Jul 2007 17:03:11 -0700 Received: from MOU1WNEXMB10.vcorp.ad.vrsn.com ([10.25.13.204]) by MOU1WNEXCN03.vcorp.ad.vrsn.com with Microsoft SMTPSVC(6.0.3790.1830); Fri, 13 Jul 2007 17:03:10 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Date: Fri, 13 Jul 2007 17:03:09 -0700 Message-ID: <3E5A2F1AD44F5E49A74F79AB47C0C0C939F4C3@mou1wnexmb10.vcorp.ad.vrsn.com> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Changes made in I-D PSKC revision v1.2 from v1.0 Thread-Index: Ace41mO+hg/MDMqKQb61Z47ua87g9gJEBBiQAAcHfwAA6J6dEA== From: "Pei, Mingliang" To: X-OriginalArrivalTime: 14 Jul 2007 00:03:10.0135 (UTC) FILETIME=[5D27CC70:01C7C5AA] X-Spam-Score: 0.0 (/) X-Scan-Signature: 7fa173a723009a6ca8ce575a65a5d813 Subject: [KEYPROV] Changes made in I-D PSKC revision v1.2 from v1.0 X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org We revised I-D PSKC in this Monday's submission with the following changes: Changes in v1.2 from v1.1 Some minor changes after v1.1 was submitted on Sunday night. The changes are: Section 4:=20 - added description for "event counter" with "(moving factor for OTP algorithms)" - added description about key issuer name Section 5.1.6: changed title from "FriendlyName OPTIONAL" to "FriendlyName (OPTIONAL)" Section 5.1.8: added condition "when 'Data' attribute is encrypted" for "EncryptionMethod (MANDATORY)" Section 6.1.3: revised description for DeviceType to explain bound carnality Section 6.1.4: revised description for DeviceIdType to explain what composes uniqueness. Section 6.5: added more key algorithm types include RSA / VASCO OTP algorithms Changes in v1.1 from v1.0 Changes for the issues tracked: Issue 2: Register PSKC container URI and refer to this in keyprov spec - Changed to use new name space=20 urn:ietf:params:xml:ns:keyprov:container urn:ietf:params:xml:ns:keyprov:logo instead of http://www.openauthentication.org/OATH/2006/08/PSKC http://www.openauthentication.org/OATH/2006/08/logo Issue 18: PSKC: Sync OtpAlgorithmIdentifierType with schema - fixed the typo and revised description Issue 19: PSKC: clarify the key generation for HMAC value of a secret data when a PBE is used for encryption - changed in section 6.1.1 to give recommendation about key choice for HMAC Issue 22: PSKC: work on clarifications and updates for comments received (i.e., this email thread) - changed for the comments provided by Andrea. See list below. Issue 23: Shall we use word "Key" in XML type names toreplace word "Secret"? - Changed "SecretContainer" to "KeyContainer", "SecretType" to "KeyType", and reference of "shared secret" to "symmetric key" or "secret key" wherever it is proper. The change is across the entire document. General: - Removed reference and limitation to OATH specific tokens, device, applications, or use cases wherever it applies. - Revised provisioning of authentication tokens as an example application, rather than as the target application such that general key, e.g., IEEE 1619 could be applied later. Section 1 1. Revised the sentence about the "The goal is that the format will facilitate dynamic provisioning of OTP credentials using an OTP provisioning protocol to different flavors of embedded tokens ...from different vendors into the same infrastructure.". See general change above. 2. Revised the sentence about why this format is defined instead of using existing PKCS#12. Section 5.1 1. Added section about "FriendlyName" Section 5.1.9 1. Added "OPTIONAL" title. Section 6.1.1 1. Changed SecretType to KeyType Section 6.1.2 1. Fixed OTPAlgorithmIdentifier. 2. "Access Rules" -- fixed typo - "weather" should be "whether". Section 6.1.3 1. Changed to RECOMMEND "a shared secret be bound to one Device only" instead of MUST. Section 6.1.6 1. Changed SecretContainer to KeyContainer Section 6.5: 1. Changed SecretAlgorithmType to KeyAlgorithmType Section 6.7.1 1. Changed SecretContainer to KeyContainer Section 7 1. Schema updates for the changes above Section 10 1. Sample message updates for the changes above Please review. Thanks, - Ming _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Tue Jul 17 16:37:45 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1IAtnj-0003Ux-3L; Tue, 17 Jul 2007 16:37:43 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1IAtnh-0003Up-St for keyprov@ietf.org; Tue, 17 Jul 2007 16:37:41 -0400 Received: from gateway1.rsasecurity.com ([216.162.240.250]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1IAtng-0006mp-Kx for keyprov@ietf.org; Tue, 17 Jul 2007 16:37:41 -0400 Received: from hyperion.rsasecurity.com by gateway1.rsasecurity.com via smtpd (for ietf-mx.ietf.ORG [156.154.16.150]) with SMTP; Tue, 17 Jul 2007 16:37:40 -0400 Received: from sdtihq24.securid.com (sdtihq24.na.rsa.net [10.100.8.152]) by hyperion.na.rsa.net (MOS 3.8.3-GA) with ESMTP id DFR61297; Tue, 17 Jul 2007 16:43:12 +0500 (GMT-5) Received: from rsana-ex-hq1.NA.RSA.NET (rsana-ex-hq1.na.rsa.net [10.100.8.50]) by sdtihq24.securid.com (8.12.10/8.12.9) with ESMTP id l6HKbcOo004574; Tue, 17 Jul 2007 16:37:38 -0400 (EDT) X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: [KEYPROV] Accepting draft-doherty-keyprov-dskpp-01.txt as WG item Date: Tue, 17 Jul 2007 16:37:34 -0400 Message-ID: <017630AA6DF2DF4EBC1DD4454F8EE2970B98D7BD@rsana-ex-hq1.NA.RSA.NET> In-Reply-To: <469524C5.5060208@gmx.net> Thread-Topic: [KEYPROV] Accepting draft-doherty-keyprov-dskpp-01.txt as WG item thread-index: AcfD62TkE4V86XH6TkSqbvBlLPR5KAExPZeQ References: <469524C5.5060208@gmx.net> From: "Doherty, Andrea" To: "Hannes Tschofenig" , X-Junkmail-Whitelist: YES (by domain whitelist at hyperion.na.rsa.net) X-Spam-Score: 0.0 (/) X-Scan-Signature: ff03b0075c3fc728d7d60a15b4ee1ad2 Cc: X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Hannes, I recommend (and accept) "Dynamic Symmetric Key Provisioning Protocol (DSKPP)" (draft-doherty-keyprov-dskpp-01.txt) as a KEYPROV WG item. This draft protocol proposal is within the scope of the WG charter, esp. "for delivery of a protocol definition for provisioning of symmetric cryptographic keys and associated attributes". Furthermore, this proposal incorporates the plan for a converged protocol that was agreed upon at the KEYPROV WG meeting at IETF-68 Prague. Andrea=20 -----Original Message----- From: Hannes Tschofenig [mailto:Hannes.Tschofenig@gmx.net]=20 Sent: Wednesday, July 11, 2007 2:43 PM To: keyprov@ietf.org Subject: [KEYPROV] Accepting draft-doherty-keyprov-dskpp-01.txt as WG item KEYPROV working group members! [Responses to this message are necessary by July 20th] At IETF#69 the KEYPROV working group was quite satisfied with the=20 proposal of merging the two individual solutions. Phillip and myself=20 decided to wait until we have a merged draft for the group to look at.=20 Now, we have a revised version of the -00 document available for review. We believe that this document provides a basis for further work. =20 This is a call for input on accepting "Dynamic Symmetric Key=20 Provisioning Protocol (DSKPP)" (draft-doherty-keyprov-dskpp-01.txt) as=20 WG item. Please provide any input, both positive and negative. Ciao Hannes & Phillip -------- Original Message -------- Subject: I-D ACTION:draft-doherty-keyprov-dskpp-01.txt Date: Wed, 11 Jul 2007 14:15:01 -0400 From: Internet-Drafts@ietf.org Reply-To: internet-drafts@ietf.org To: i-d-announce@ietf.org A New Internet-Draft is available from the on-line Internet-Drafts=20 directories. Title : Dynamic Symmetric Key Provisioning Protocol (DSKPP) Author(s) : M. Nystroem, et al. Filename : draft-doherty-keyprov-dskpp-01.txt Pages : 100 Date : 2007-7-11 =09 DSKPP is a client-server protocol for initialization (and configuration) of symmetric keys to locally and remotely accessible cryptographic modules. The protocol can be run with or without private-key capabilities in the cryptographic modules, and with or without an established public-key infrastructure. Three variations of the protocol support multiple usage scenarios. The four-pass (i.e., two round-trip) variant enables key generation in near real-time. With the four-pass variant, keys are mutually generated by the provisioning server and cryptographic module; provisioned keys are not transferred over-the-wire or over-the-air. Two- and one-pass variants enable secure and efficient download and installation of symmetric keys to a cryptographic module in environments where near real-time communication may not be possible. This document builds on information contained in [RFC4758], adding specific enhancements in response to implementation experience and liaison requests. It is intended, therefore, that this document or a successor version thereto will become the basis for subsequent progression of a symmetric key provisioning protocol specification on the standards track. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-doherty-keyprov-dskpp-01.txt To remove yourself from the I-D Announcement list, send a message to=20 i-d-announce-request@ietf.org with the word unsubscribe in the body of=20 the message.=20 You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce=20 to change your subscription settings. Internet-Drafts are also available by anonymous FTP. Login with the=20 username "anonymous" and a password of your e-mail address. After=20 logging in, type "cd internet-drafts" and then=20 "get draft-doherty-keyprov-dskpp-01.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html=20 or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-doherty-keyprov-dskpp-01.txt". =09 NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Tue Jul 17 16:44:13 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1IAtu1-0002Od-Ec; Tue, 17 Jul 2007 16:44:13 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1IAtu0-0002KH-DG for keyprov@ietf.org; Tue, 17 Jul 2007 16:44:12 -0400 Received: from mail.gmx.net ([213.165.64.20]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1IAtty-0006xz-Ry for keyprov@ietf.org; Tue, 17 Jul 2007 16:44:12 -0400 Received: (qmail invoked by alias); 17 Jul 2007 20:44:09 -0000 Received: from p54984CE1.dip.t-dialin.net (EHLO [192.168.1.4]) [84.152.76.225] by mail.gmx.net (mp041) with SMTP; 17 Jul 2007 22:44:09 +0200 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX19C3U1BjEdCDcwdM0IXuQRJcyjqZVzKDLU/vpsIBk ycWGBOYucig9zx Message-ID: <469D2A13.1000005@gmx.net> Date: Tue, 17 Jul 2007 22:44:03 +0200 From: Hannes Tschofenig User-Agent: Thunderbird 2.0.0.4 (Windows/20070604) MIME-Version: 1.0 To: keyprov@ietf.org References: <469524C5.5060208@gmx.net> In-Reply-To: <469524C5.5060208@gmx.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Y-GMX-Trusted: 0 X-Spam-Score: 0.0 (/) X-Scan-Signature: a7d2e37451f7f22841e3b6f40c67db0f Subject: [KEYPROV] REMINDER --- Accepting draft-doherty-keyprov-dskpp-01.txt as WG item X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Please state your opinion. Hannes Tschofenig wrote: > KEYPROV working group members! > > [Responses to this message are necessary by July 20th] > > At IETF#69 the KEYPROV working group was quite satisfied with the > proposal of merging the two individual solutions. Phillip and myself > decided to wait until we have a merged draft for the group to look at. > Now, we have a revised version of the -00 document available for review. > > We believe that this document provides a basis for further work. > > This is a call for input on accepting "Dynamic Symmetric Key > Provisioning Protocol (DSKPP)" (draft-doherty-keyprov-dskpp-01.txt) as > WG item. Please provide any input, both positive and negative. > > Ciao > Hannes & Phillip > > -------- Original Message -------- > Subject: I-D ACTION:draft-doherty-keyprov-dskpp-01.txt > Date: Wed, 11 Jul 2007 14:15:01 -0400 > From: Internet-Drafts@ietf.org > Reply-To: internet-drafts@ietf.org > To: i-d-announce@ietf.org > > > > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > > > Title : Dynamic Symmetric Key Provisioning Protocol (DSKPP) > Author(s) : M. Nystroem, et al. > Filename : draft-doherty-keyprov-dskpp-01.txt > Pages : 100 > Date : 2007-7-11 > > DSKPP is a client-server protocol for initialization (and > configuration) of symmetric keys to locally and remotely accessible > cryptographic modules. The protocol can be run with or without > private-key capabilities in the cryptographic modules, and with or > without an established public-key infrastructure. > > Three variations of the protocol support multiple usage scenarios. > The four-pass (i.e., two round-trip) variant enables key generation > in near real-time. With the four-pass variant, keys are mutually > generated by the provisioning server and cryptographic module; > provisioned keys are not transferred over-the-wire or over-the-air. > Two- and one-pass variants enable secure and efficient download and > installation of symmetric keys to a cryptographic module in > environments where near real-time communication may not be possible. > > This document builds on information contained in [RFC4758], adding > specific enhancements in response to implementation experience and > liaison requests. It is intended, therefore, that this document or a > successor version thereto will become the basis for subsequent > progression of a symmetric key provisioning protocol specification on > the standards track. > > A URL for this Internet-Draft is: > http://www.ietf.org/internet-drafts/draft-doherty-keyprov-dskpp-01.txt > > To remove yourself from the I-D Announcement list, send a message to > i-d-announce-request@ietf.org with the word unsubscribe in the body of > the message. You can also visit > https://www1.ietf.org/mailman/listinfo/I-D-announce to change your > subscription settings. > > Internet-Drafts are also available by anonymous FTP. Login with the > username "anonymous" and a password of your e-mail address. After > logging in, type "cd internet-drafts" and then "get > draft-doherty-keyprov-dskpp-01.txt". > > A list of Internet-Drafts directories can be found in > http://www.ietf.org/shadow.html or > ftp://ftp.ietf.org/ietf/1shadow-sites.txt > > Internet-Drafts can also be obtained by e-mail. > > Send a message to: > mailserv@ietf.org. > In the body type: > "FILE /internet-drafts/draft-doherty-keyprov-dskpp-01.txt". > > NOTE: The mail server at ietf.org can return the document in > MIME-encoded form by using the "mpack" utility. To use this > feature, insert the command "ENCODING mime" before the "FILE" > command. To decode the response(s), you will need "munpack" or > a MIME-compliant mail reader. Different MIME-compliant mail readers > exhibit different behavior, especially when dealing with > "multipart" MIME messages (i.e. documents which have been split > up into multiple messages), so check your local documentation on > how to manipulate these messages. > > Below is the data which will enable a MIME compliant mail reader > implementation to automatically retrieve the ASCII version of the > Internet-Draft. > > > > _______________________________________________ > KEYPROV mailing list > KEYPROV@ietf.org > https://www1.ietf.org/mailman/listinfo/keyprov _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Tue Jul 17 18:26:34 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1IAvV4-0005AK-6n; Tue, 17 Jul 2007 18:26:34 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1IAvV3-0005AF-C4 for keyprov@ietf.org; Tue, 17 Jul 2007 18:26:33 -0400 Received: from robin.verisign.com ([65.205.251.75]) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1IAvV0-0001bu-Pe for keyprov@ietf.org; Tue, 17 Jul 2007 18:26:33 -0400 Received: from MOU1WNEXCN02.vcorp.ad.vrsn.com (mailer2.verisign.com [65.205.251.35]) by robin.verisign.com (8.13.6/8.13.4) with ESMTP id l6HMQPRs024065; Tue, 17 Jul 2007 15:26:26 -0700 Received: from MOU1WNEXMB10.vcorp.ad.vrsn.com ([10.25.13.204]) by MOU1WNEXCN02.vcorp.ad.vrsn.com with Microsoft SMTPSVC(6.0.3790.1830); Tue, 17 Jul 2007 15:26:25 -0700 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: [KEYPROV] Accepting draft-doherty-keyprov-dskpp-01.txt as WG item Date: Tue, 17 Jul 2007 15:26:24 -0700 Message-ID: <3E5A2F1AD44F5E49A74F79AB47C0C0C939F536@mou1wnexmb10.vcorp.ad.vrsn.com> In-Reply-To: <017630AA6DF2DF4EBC1DD4454F8EE2970B98D7BD@rsana-ex-hq1.NA.RSA.NET> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [KEYPROV] Accepting draft-doherty-keyprov-dskpp-01.txt as WG item Thread-Index: AcfD62TkE4V86XH6TkSqbvBlLPR5KAExPZeQAAQ6GUA= From: "Pei, Mingliang" To: "Doherty, Andrea" , "Hannes Tschofenig" , X-OriginalArrivalTime: 17 Jul 2007 22:26:25.0160 (UTC) FILETIME=[82C5E880:01C7C8C1] X-Spam-Score: 0.1 (/) X-Scan-Signature: f49c97ce49302a02285a2d36a99eef8c Cc: X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org I would also like to recommend the revised DSKPP as KEYPROV WG item. - Ming=20 -----Original Message----- From: Doherty, Andrea [mailto:adoherty@rsa.com]=20 Sent: Tuesday, July 17, 2007 1:38 PM To: Hannes Tschofenig; keyprov@ietf.org Subject: RE: [KEYPROV] Accepting draft-doherty-keyprov-dskpp-01.txt as WG item Hannes, I recommend (and accept) "Dynamic Symmetric Key Provisioning Protocol (DSKPP)" (draft-doherty-keyprov-dskpp-01.txt) as a KEYPROV WG item. This draft protocol proposal is within the scope of the WG charter, esp. "for delivery of a protocol definition for provisioning of symmetric cryptographic keys and associated attributes". Furthermore, this proposal incorporates the plan for a converged protocol that was agreed upon at the KEYPROV WG meeting at IETF-68 Prague. Andrea=20 -----Original Message----- From: Hannes Tschofenig [mailto:Hannes.Tschofenig@gmx.net] Sent: Wednesday, July 11, 2007 2:43 PM To: keyprov@ietf.org Subject: [KEYPROV] Accepting draft-doherty-keyprov-dskpp-01.txt as WG item KEYPROV working group members! [Responses to this message are necessary by July 20th] At IETF#69 the KEYPROV working group was quite satisfied with the proposal of merging the two individual solutions. Phillip and myself decided to wait until we have a merged draft for the group to look at.=20 Now, we have a revised version of the -00 document available for review. We believe that this document provides a basis for further work. =20 This is a call for input on accepting "Dynamic Symmetric Key Provisioning Protocol (DSKPP)" (draft-doherty-keyprov-dskpp-01.txt) as WG item. Please provide any input, both positive and negative. Ciao Hannes & Phillip -------- Original Message -------- Subject: I-D ACTION:draft-doherty-keyprov-dskpp-01.txt Date: Wed, 11 Jul 2007 14:15:01 -0400 From: Internet-Drafts@ietf.org Reply-To: internet-drafts@ietf.org To: i-d-announce@ietf.org A New Internet-Draft is available from the on-line Internet-Drafts directories. Title : Dynamic Symmetric Key Provisioning Protocol (DSKPP) Author(s) : M. Nystroem, et al. Filename : draft-doherty-keyprov-dskpp-01.txt Pages : 100 Date : 2007-7-11 =09 DSKPP is a client-server protocol for initialization (and configuration) of symmetric keys to locally and remotely accessible cryptographic modules. The protocol can be run with or without private-key capabilities in the cryptographic modules, and with or without an established public-key infrastructure. Three variations of the protocol support multiple usage scenarios. The four-pass (i.e., two round-trip) variant enables key generation in near real-time. With the four-pass variant, keys are mutually generated by the provisioning server and cryptographic module; provisioned keys are not transferred over-the-wire or over-the-air. Two- and one-pass variants enable secure and efficient download and installation of symmetric keys to a cryptographic module in environments where near real-time communication may not be possible. This document builds on information contained in [RFC4758], adding specific enhancements in response to implementation experience and liaison requests. It is intended, therefore, that this document or a successor version thereto will become the basis for subsequent progression of a symmetric key provisioning protocol specification on the standards track. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-doherty-keyprov-dskpp-01.txt To remove yourself from the I-D Announcement list, send a message to=20 i-d-announce-request@ietf.org with the word unsubscribe in the body of=20 the message.=20 You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce=20 to change your subscription settings. Internet-Drafts are also available by anonymous FTP. Login with the=20 username "anonymous" and a password of your e-mail address. After=20 logging in, type "cd internet-drafts" and then=20 "get draft-doherty-keyprov-dskpp-01.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html=20 or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-doherty-keyprov-dskpp-01.txt". =09 NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Wed Jul 18 02:31:06 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1IB33x-0004a2-Ns; Wed, 18 Jul 2007 02:31:05 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1IB2dY-0004FH-Nx for keyprov@ietf.org; Wed, 18 Jul 2007 02:03:49 -0400 Received: from gateway1.rsasecurity.com ([216.162.240.250]) by chiedprmail1.ietf.org with smtp (Exim 4.43) id 1IB2dX-0004pu-54 for keyprov@ietf.org; Wed, 18 Jul 2007 02:03:48 -0400 Received: from hyperion.rsasecurity.com by gateway1.rsasecurity.com via smtpd (for chiedprmail1.ietf.ORG [156.154.24.150]) with SMTP; Wed, 18 Jul 2007 02:03:46 -0400 Received: from sdtihq24.securid.com (sdtihq24.na.rsa.net [10.100.8.152]) by hyperion.na.rsa.net (MOS 3.8.3-GA) with ESMTP id DFS05469; Wed, 18 Jul 2007 02:09:18 +0500 (GMT-5) Received: from rsana-ex-hq1.NA.RSA.NET (rsana-ex-hq1.na.rsa.net [10.100.8.50]) by sdtihq24.securid.com (8.12.10/8.12.9) with ESMTP id l6I63gOo011081; Wed, 18 Jul 2007 02:03:42 -0400 (EDT) Received: from CTO-LAPTOP.eu.rsa.net ([10.3.9.44]) by rsana-ex-hq1.NA.RSA.NET with Microsoft SMTPSVC(6.0.3790.211); Wed, 18 Jul 2007 02:03:30 -0400 Date: Wed, 18 Jul 2007 08:04:43 +0200 (W. Europe Daylight Time) From: =?iso-8859-1?Q?Magnus_Nystr=F6m?= To: Hannes Tschofenig Subject: Re: [KEYPROV] REMINDER --- Accepting draft-doherty-keyprov-dskpp-01.txt as WG item In-Reply-To: <469D2A13.1000005@gmx.net> Message-ID: References: <469524C5.5060208@gmx.net> <469D2A13.1000005@gmx.net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-OriginalArrivalTime: 18 Jul 2007 06:03:35.0930 (UTC) FILETIME=[60C93DA0:01C7C901] X-Junkmail-Whitelist: YES (by domain whitelist at hyperion.na.rsa.net) X-Spam-Score: 0.1 (/) X-Scan-Signature: 3a4bc66230659131057bb68ed51598f8 X-Mailman-Approved-At: Wed, 18 Jul 2007 02:31:04 -0400 Cc: keyprov@ietf.org X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: magnus@rsa.com List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org I support adopting this draft as a working group item. -- Magnus On Tue, 17 Jul 2007, Hannes Tschofenig wrote: > Please state your opinion. > > Hannes Tschofenig wrote: >> KEYPROV working group members! >> >> [Responses to this message are necessary by July 20th] >> >> At IETF#69 the KEYPROV working group was quite satisfied with the proposal >> of merging the two individual solutions. Phillip and myself decided to wait >> until we have a merged draft for the group to look at. Now, we have a >> revised version of the -00 document available for review. >> >> We believe that this document provides a basis for further work. >> >> This is a call for input on accepting "Dynamic Symmetric Key Provisioning >> Protocol (DSKPP)" (draft-doherty-keyprov-dskpp-01.txt) as WG item. Please >> provide any input, both positive and negative. >> >> Ciao >> Hannes & Phillip >> >> -------- Original Message -------- >> Subject: I-D ACTION:draft-doherty-keyprov-dskpp-01.txt >> Date: Wed, 11 Jul 2007 14:15:01 -0400 >> From: Internet-Drafts@ietf.org >> Reply-To: internet-drafts@ietf.org >> To: i-d-announce@ietf.org >> >> >> >> A New Internet-Draft is available from the on-line Internet-Drafts >> directories. >> >> >> Title : Dynamic Symmetric Key Provisioning Protocol (DSKPP) >> Author(s) : M. Nystroem, et al. >> Filename : draft-doherty-keyprov-dskpp-01.txt >> Pages : 100 >> Date : 2007-7-11 >> DSKPP is a client-server protocol for initialization (and >> configuration) of symmetric keys to locally and remotely accessible >> cryptographic modules. The protocol can be run with or without >> private-key capabilities in the cryptographic modules, and with or >> without an established public-key infrastructure. >> >> Three variations of the protocol support multiple usage scenarios. >> The four-pass (i.e., two round-trip) variant enables key generation >> in near real-time. With the four-pass variant, keys are mutually >> generated by the provisioning server and cryptographic module; >> provisioned keys are not transferred over-the-wire or over-the-air. >> Two- and one-pass variants enable secure and efficient download and >> installation of symmetric keys to a cryptographic module in >> environments where near real-time communication may not be possible. >> >> This document builds on information contained in [RFC4758], adding >> specific enhancements in response to implementation experience and >> liaison requests. It is intended, therefore, that this document or a >> successor version thereto will become the basis for subsequent >> progression of a symmetric key provisioning protocol specification on >> the standards track. >> >> A URL for this Internet-Draft is: >> http://www.ietf.org/internet-drafts/draft-doherty-keyprov-dskpp-01.txt >> >> To remove yourself from the I-D Announcement list, send a message to >> i-d-announce-request@ietf.org with the word unsubscribe in the body of the >> message. You can also visit >> https://www1.ietf.org/mailman/listinfo/I-D-announce to change your >> subscription settings. >> >> Internet-Drafts are also available by anonymous FTP. Login with the >> username "anonymous" and a password of your e-mail address. After logging >> in, type "cd internet-drafts" and then "get >> draft-doherty-keyprov-dskpp-01.txt". >> >> A list of Internet-Drafts directories can be found in >> http://www.ietf.org/shadow.html or >> ftp://ftp.ietf.org/ietf/1shadow-sites.txt >> >> Internet-Drafts can also be obtained by e-mail. >> >> Send a message to: >> mailserv@ietf.org. >> In the body type: >> "FILE /internet-drafts/draft-doherty-keyprov-dskpp-01.txt". >> NOTE: The mail server at ietf.org can return the document in >> MIME-encoded form by using the "mpack" utility. To use this >> feature, insert the command "ENCODING mime" before the "FILE" >> command. To decode the response(s), you will need "munpack" or >> a MIME-compliant mail reader. Different MIME-compliant mail readers >> exhibit different behavior, especially when dealing with >> "multipart" MIME messages (i.e. documents which have been split >> up into multiple messages), so check your local documentation on >> how to manipulate these messages. >> >> Below is the data which will enable a MIME compliant mail reader >> implementation to automatically retrieve the ASCII version of the >> Internet-Draft. >> >> >> >> _______________________________________________ >> KEYPROV mailing list >> KEYPROV@ietf.org >> https://www1.ietf.org/mailman/listinfo/keyprov > > > _______________________________________________ > KEYPROV mailing list > KEYPROV@ietf.org > https://www1.ietf.org/mailman/listinfo/keyprov > _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Wed Jul 18 04:29:20 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1IB4uO-0007bt-IK; Wed, 18 Jul 2007 04:29:20 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1IB4uM-0007YY-TU for keyprov@ietf.org; Wed, 18 Jul 2007 04:29:18 -0400 Received: from thoth.sbs.de ([192.35.17.2]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1IB4uM-0000Ot-1h for keyprov@ietf.org; Wed, 18 Jul 2007 04:29:18 -0400 Received: from mail2.siemens.de (localhost [127.0.0.1]) by thoth.sbs.de (8.12.6/8.12.6) with ESMTP id l6I8THSr014206 for ; Wed, 18 Jul 2007 10:29:17 +0200 Received: from mchp771a.ww002.siemens.net (mchp771a.ww002.siemens.net [139.25.131.189]) by mail2.siemens.de (8.12.6/8.12.6) with ESMTP id l6I8TGSg013539 for ; Wed, 18 Jul 2007 10:29:17 +0200 Received: from MCHP7R6A.ww002.siemens.net ([139.25.131.164]) by mchp771a.ww002.siemens.net with Microsoft SMTPSVC(6.0.3790.1830); Wed, 18 Jul 2007 10:29:16 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Subject: AW: [KEYPROV] REMINDER --- Accepting draft-doherty-keyprov-dskpp-01.txtas WG item Date: Wed, 18 Jul 2007 10:28:25 +0200 Message-ID: In-Reply-To: <469D2A13.1000005@gmx.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [KEYPROV] REMINDER --- Accepting draft-doherty-keyprov-dskpp-01.txtas WG item Thread-Index: AcfIsz82qsJF/+FIR8ejNlaI02xeUwAYiAKw References: <469524C5.5060208@gmx.net> <469D2A13.1000005@gmx.net> From: "Meyer, Ulrike" To: X-OriginalArrivalTime: 18 Jul 2007 08:29:16.0443 (UTC) FILETIME=[BA89AEB0:01C7C915] X-Spam-Score: 0.0 (/) X-Scan-Signature: dbb8771284c7a36189745aa720dc20ab X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Hi all, I also support accepting draft-doherty-keyprov-dskpp-01 as working group = item! Br, Uli -----Urspr=FCngliche Nachricht----- Von: ext Hannes Tschofenig [mailto:Hannes.Tschofenig@gmx.net]=20 Gesendet: Dienstag, 17. Juli 2007 22:44 An: keyprov@ietf.org Betreff: [KEYPROV] REMINDER --- Accepting = draft-doherty-keyprov-dskpp-01.txtas WG item Please state your opinion. Hannes Tschofenig wrote: > KEYPROV working group members! > > [Responses to this message are necessary by July 20th] > > At IETF#69 the KEYPROV working group was quite satisfied with the=20 > proposal of merging the two individual solutions. Phillip and myself=20 > decided to wait until we have a merged draft for the group to look at. = > Now, we have a revised version of the -00 document available for = review. > > We believe that this document provides a basis for further work. > > This is a call for input on accepting "Dynamic Symmetric Key=20 > Provisioning Protocol (DSKPP)" (draft-doherty-keyprov-dskpp-01.txt) as = > WG item. Please provide any input, both positive and negative. > > Ciao > Hannes & Phillip > > -------- Original Message -------- > Subject: I-D ACTION:draft-doherty-keyprov-dskpp-01.txt > Date: Wed, 11 Jul 2007 14:15:01 -0400 > From: Internet-Drafts@ietf.org > Reply-To: internet-drafts@ietf.org > To: i-d-announce@ietf.org > > > > A New Internet-Draft is available from the on-line Internet-Drafts=20 > directories. > > > Title : Dynamic Symmetric Key Provisioning Protocol (DSKPP) > Author(s) : M. Nystroem, et al. > Filename : draft-doherty-keyprov-dskpp-01.txt > Pages : 100 > Date : 2007-7-11 > =20 > DSKPP is a client-server protocol for initialization (and > configuration) of symmetric keys to locally and remotely accessible > cryptographic modules. The protocol can be run with or without > private-key capabilities in the cryptographic modules, and with or > without an established public-key infrastructure. > > Three variations of the protocol support multiple usage scenarios. > The four-pass (i.e., two round-trip) variant enables key generation > in near real-time. With the four-pass variant, keys are mutually > generated by the provisioning server and cryptographic module; > provisioned keys are not transferred over-the-wire or over-the-air. > Two- and one-pass variants enable secure and efficient download and > installation of symmetric keys to a cryptographic module in > environments where near real-time communication may not be possible. > > This document builds on information contained in [RFC4758], adding > specific enhancements in response to implementation experience and > liaison requests. It is intended, therefore, that this document or = a > successor version thereto will become the basis for subsequent > progression of a symmetric key provisioning protocol specification = on > the standards track. > > A URL for this Internet-Draft is: > http://www.ietf.org/internet-drafts/draft-doherty-keyprov-dskpp-01.txt > > To remove yourself from the I-D Announcement list, send a message to=20 > i-d-announce-request@ietf.org with the word unsubscribe in the body of = > the message. You can also visit=20 > https://www1.ietf.org/mailman/listinfo/I-D-announce to change your=20 > subscription settings. > > Internet-Drafts are also available by anonymous FTP. Login with the=20 > username "anonymous" and a password of your e-mail address. After=20 > logging in, type "cd internet-drafts" and then "get=20 > draft-doherty-keyprov-dskpp-01.txt". > > A list of Internet-Drafts directories can be found in > http://www.ietf.org/shadow.html or=20 > ftp://ftp.ietf.org/ietf/1shadow-sites.txt > > Internet-Drafts can also be obtained by e-mail. > > Send a message to: > mailserv@ietf.org. > In the body type: > "FILE /internet-drafts/draft-doherty-keyprov-dskpp-01.txt". > =20 > NOTE: The mail server at ietf.org can return the document in > MIME-encoded form by using the "mpack" utility. To use this > feature, insert the command "ENCODING mime" before the "FILE" > command. To decode the response(s), you will need "munpack" or > a MIME-compliant mail reader. Different MIME-compliant mail = readers > exhibit different behavior, especially when dealing with > "multipart" MIME messages (i.e. documents which have been split > up into multiple messages), so check your local documentation on > how to manipulate these messages. > > Below is the data which will enable a MIME compliant mail reader > implementation to automatically retrieve the ASCII version of the > Internet-Draft. > > > > _______________________________________________ > KEYPROV mailing list > KEYPROV@ietf.org > https://www1.ietf.org/mailman/listinfo/keyprov _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Wed Jul 18 08:56:40 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1IB954-0003Vc-DL; Wed, 18 Jul 2007 08:56:38 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1IB952-0003VP-JD for keyprov@ietf.org; Wed, 18 Jul 2007 08:56:36 -0400 Received: from frhub1.activcard.fr ([195.115.13.145]) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1IB950-0000sw-Vq for keyprov@ietf.org; Wed, 18 Jul 2007 08:56:36 -0400 Received: from sur-corp-ex-01.activcard.fr (unknown [192.168.33.28]) by frhub1.activcard.fr (Postfix) with ESMTP id 70C6025ED44; Wed, 18 Jul 2007 14:56:33 +0200 (CEST) Received: from sur-corp-ex-02.corp.ad.activcard.com ([192.168.33.40]) by sur-corp-ex-01.activcard.fr with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2657.72) id 33MLV1S8; Wed, 18 Jul 2007 15:00:09 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: [KEYPROV] REMINDER --- Accepting draft-doherty-keyprov-dskpp-01.txtas WG item Date: Wed, 18 Jul 2007 14:53:49 +0200 Message-ID: <5BFE9E473DBFC24CA87F18F29B3F0AC475809A@sur-corp-ex-02.corp.ad.activcard.com> In-Reply-To: <469D2A13.1000005@gmx.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [KEYPROV] REMINDER --- Accepting draft-doherty-keyprov-dskpp-01.txtas WG item Thread-Index: AcfIs2Av5epFJxIoQMONlSWx97/2ywAh0nJw References: <469524C5.5060208@gmx.net> <469D2A13.1000005@gmx.net> From: "Philip Hoyer" To: "Hannes Tschofenig" , X-Spam-Score: 0.0 (/) X-Scan-Signature: b1c41982e167b872076d0018e4e1dc3c Cc: X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org I support adopting this draft as a working group item. Philip -----Original Message----- From: Hannes Tschofenig [mailto:Hannes.Tschofenig@gmx.net]=20 Sent: 17 July 2007 21:44 To: keyprov@ietf.org Subject: [KEYPROV] REMINDER --- Accepting draft-doherty-keyprov-dskpp-01.txtas WG item Please state your opinion. Hannes Tschofenig wrote: > KEYPROV working group members! > > [Responses to this message are necessary by July 20th] > > At IETF#69 the KEYPROV working group was quite satisfied with the=20 > proposal of merging the two individual solutions. Phillip and myself=20 > decided to wait until we have a merged draft for the group to look at. > Now, we have a revised version of the -00 document available for review. > > We believe that this document provides a basis for further work. > > This is a call for input on accepting "Dynamic Symmetric Key=20 > Provisioning Protocol (DSKPP)" (draft-doherty-keyprov-dskpp-01.txt) as > WG item. Please provide any input, both positive and negative. > > Ciao > Hannes & Phillip > > -------- Original Message -------- > Subject: I-D ACTION:draft-doherty-keyprov-dskpp-01.txt > Date: Wed, 11 Jul 2007 14:15:01 -0400 > From: Internet-Drafts@ietf.org > Reply-To: internet-drafts@ietf.org > To: i-d-announce@ietf.org > > > > A New Internet-Draft is available from the on-line Internet-Drafts=20 > directories. > > > Title : Dynamic Symmetric Key Provisioning Protocol (DSKPP) > Author(s) : M. Nystroem, et al. > Filename : draft-doherty-keyprov-dskpp-01.txt > Pages : 100 > Date : 2007-7-11 > =20 > DSKPP is a client-server protocol for initialization (and > configuration) of symmetric keys to locally and remotely accessible > cryptographic modules. The protocol can be run with or without > private-key capabilities in the cryptographic modules, and with or > without an established public-key infrastructure. > > Three variations of the protocol support multiple usage scenarios. > The four-pass (i.e., two round-trip) variant enables key generation > in near real-time. With the four-pass variant, keys are mutually > generated by the provisioning server and cryptographic module; > provisioned keys are not transferred over-the-wire or over-the-air. > Two- and one-pass variants enable secure and efficient download and > installation of symmetric keys to a cryptographic module in > environments where near real-time communication may not be possible. > > This document builds on information contained in [RFC4758], adding > specific enhancements in response to implementation experience and > liaison requests. It is intended, therefore, that this document or a > successor version thereto will become the basis for subsequent > progression of a symmetric key provisioning protocol specification on > the standards track. > > A URL for this Internet-Draft is: > http://www.ietf.org/internet-drafts/draft-doherty-keyprov-dskpp-01.txt > > To remove yourself from the I-D Announcement list, send a message to=20 > i-d-announce-request@ietf.org with the word unsubscribe in the body of > the message. You can also visit=20 > https://www1.ietf.org/mailman/listinfo/I-D-announce to change your=20 > subscription settings. > > Internet-Drafts are also available by anonymous FTP. Login with the=20 > username "anonymous" and a password of your e-mail address. After=20 > logging in, type "cd internet-drafts" and then "get=20 > draft-doherty-keyprov-dskpp-01.txt". > > A list of Internet-Drafts directories can be found in > http://www.ietf.org/shadow.html or=20 > ftp://ftp.ietf.org/ietf/1shadow-sites.txt > > Internet-Drafts can also be obtained by e-mail. > > Send a message to: > mailserv@ietf.org. > In the body type: > "FILE /internet-drafts/draft-doherty-keyprov-dskpp-01.txt". > =20 > NOTE: The mail server at ietf.org can return the document in > MIME-encoded form by using the "mpack" utility. To use this > feature, insert the command "ENCODING mime" before the "FILE" > command. To decode the response(s), you will need "munpack" or > a MIME-compliant mail reader. Different MIME-compliant mail readers > exhibit different behavior, especially when dealing with > "multipart" MIME messages (i.e. documents which have been split > up into multiple messages), so check your local documentation on > how to manipulate these messages. > > Below is the data which will enable a MIME compliant mail reader > implementation to automatically retrieve the ASCII version of the > Internet-Draft. > > > > _______________________________________________ > KEYPROV mailing list > KEYPROV@ietf.org > https://www1.ietf.org/mailman/listinfo/keyprov _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Wed Jul 18 09:23:42 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1IB9VG-0003up-2E; Wed, 18 Jul 2007 09:23:42 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1IB9VE-0003tZ-Ki for keyprov@ietf.org; Wed, 18 Jul 2007 09:23:40 -0400 Received: from dvnet26.diversinet.com ([207.245.6.208]) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1IB9VD-0001lk-3G for keyprov@ietf.org; Wed, 18 Jul 2007 09:23:40 -0400 Received: from dvnet26.diversinet.com(10.11.12.8) by mcafee_webshield.diversinet.com via smtp id 2620_9f1d8ad2_3532_11dc_8616_0002b3ca872d; Wed, 18 Jul 2007 09:27:27 -0400 X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: [KEYPROV] REMINDER --- Accepting draft-doherty-keyprov-dskpp-01.txtas WG item Date: Wed, 18 Jul 2007 09:23:09 -0400 Message-ID: <2AB4BF7823761E4E90BA9372C429F1A901B99EFF@DVNET26.DIVERSINET.COM> In-Reply-To: <469D2A13.1000005@gmx.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [KEYPROV] REMINDER --- Accepting draft-doherty-keyprov-dskpp-01.txtas WG item Thread-Index: AcfIszK/3IwzTBy+Tda1xQxm36TH6wAi3lQg From: "Salah Machani" To: "Hannes Tschofenig" , X-NAIMIME-Disclaimer: 1 X-NAIMIME-Modified: 1 X-Spam-Score: 0.0 (/) X-Scan-Signature: 42e3ed3f10a1d8bef690f09da16f507a Cc: X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org I support accepting the draft as WG item. Salah -----Original Message----- From: Hannes Tschofenig [mailto:Hannes.Tschofenig@gmx.net]=20 Sent: Tuesday, July 17, 2007 4:44 PM To: keyprov@ietf.org Subject: [KEYPROV] REMINDER --- Accepting draft-doherty-keyprov-dskpp-01.txtas WG item Please state your opinion. Hannes Tschofenig wrote: > KEYPROV working group members! > > [Responses to this message are necessary by July 20th] > > At IETF#69 the KEYPROV working group was quite satisfied with the=20 > proposal of merging the two individual solutions. Phillip and myself=20 > decided to wait until we have a merged draft for the group to look at. > Now, we have a revised version of the -00 document available for review. > > We believe that this document provides a basis for further work. > > This is a call for input on accepting "Dynamic Symmetric Key=20 > Provisioning Protocol (DSKPP)" (draft-doherty-keyprov-dskpp-01.txt) as > WG item. Please provide any input, both positive and negative. > > Ciao > Hannes & Phillip > > -------- Original Message -------- > Subject: I-D ACTION:draft-doherty-keyprov-dskpp-01.txt > Date: Wed, 11 Jul 2007 14:15:01 -0400 > From: Internet-Drafts@ietf.org > Reply-To: internet-drafts@ietf.org > To: i-d-announce@ietf.org > > > > A New Internet-Draft is available from the on-line Internet-Drafts=20 > directories. > > > Title : Dynamic Symmetric Key Provisioning Protocol (DSKPP) > Author(s) : M. Nystroem, et al. > Filename : draft-doherty-keyprov-dskpp-01.txt > Pages : 100 > Date : 2007-7-11 > =20 > DSKPP is a client-server protocol for initialization (and > configuration) of symmetric keys to locally and remotely accessible > cryptographic modules. The protocol can be run with or without > private-key capabilities in the cryptographic modules, and with or > without an established public-key infrastructure. > > Three variations of the protocol support multiple usage scenarios. > The four-pass (i.e., two round-trip) variant enables key generation > in near real-time. With the four-pass variant, keys are mutually > generated by the provisioning server and cryptographic module; > provisioned keys are not transferred over-the-wire or over-the-air. > Two- and one-pass variants enable secure and efficient download and > installation of symmetric keys to a cryptographic module in > environments where near real-time communication may not be possible. > > This document builds on information contained in [RFC4758], adding > specific enhancements in response to implementation experience and > liaison requests. It is intended, therefore, that this document or a > successor version thereto will become the basis for subsequent > progression of a symmetric key provisioning protocol specification on > the standards track. > > A URL for this Internet-Draft is: > http://www.ietf.org/internet-drafts/draft-doherty-keyprov-dskpp-01.txt > > To remove yourself from the I-D Announcement list, send a message to=20 > i-d-announce-request@ietf.org with the word unsubscribe in the body of > the message. You can also visit=20 > https://www1.ietf.org/mailman/listinfo/I-D-announce to change your=20 > subscription settings. > > Internet-Drafts are also available by anonymous FTP. Login with the=20 > username "anonymous" and a password of your e-mail address. After=20 > logging in, type "cd internet-drafts" and then "get=20 > draft-doherty-keyprov-dskpp-01.txt". > > A list of Internet-Drafts directories can be found in > http://www.ietf.org/shadow.html or=20 > ftp://ftp.ietf.org/ietf/1shadow-sites.txt > > Internet-Drafts can also be obtained by e-mail. > > Send a message to: > mailserv@ietf.org. > In the body type: > "FILE /internet-drafts/draft-doherty-keyprov-dskpp-01.txt". > =20 > NOTE: The mail server at ietf.org can return the document in > MIME-encoded form by using the "mpack" utility. To use this > feature, insert the command "ENCODING mime" before the "FILE" > command. To decode the response(s), you will need "munpack" or > a MIME-compliant mail reader. Different MIME-compliant mail readers > exhibit different behavior, especially when dealing with > "multipart" MIME messages (i.e. documents which have been split > up into multiple messages), so check your local documentation on > how to manipulate these messages. > > Below is the data which will enable a MIME compliant mail reader > implementation to automatically retrieve the ASCII version of the > Internet-Draft. > > > > _______________________________________________ > KEYPROV mailing list > KEYPROV@ietf.org > https://www1.ietf.org/mailman/listinfo/keyprov _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov Notice to Recipient: The information in this message is meant only for t= he intended recipient of the transmission and may contain confidential or= privileged information. =0D Any copying, retransmittal, taking of action in reliance on, or other use= of the information in this communication by persons other than the addre= ssees is prohibited. =0D If you received this email in error, please immediately notify us and ple= ase delete or destroy all copies of this message.=0D This message may have been altered without your or our knowledge and the = sender does not accept any liability for any errors. Thank you.=0D _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Wed Jul 18 10:55:07 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1IBAvj-0001G5-O5; Wed, 18 Jul 2007 10:55:07 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1IBAvi-0001Fq-QL for keyprov@ietf.org; Wed, 18 Jul 2007 10:55:06 -0400 Received: from supertimor.gemalto.com ([194.88.222.178] helo=supertimor.gemplus.com) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1IBAvh-0004QV-7b for keyprov@ietf.org; Wed, 18 Jul 2007 10:55:06 -0400 Received: from GMSEXC02.CORP.DS.GEMPLUS.COM (unknown [10.2.158.62]) by supertimor.gemplus.com (Postfix) with ESMTP id 7643E1FB04C; Wed, 18 Jul 2007 14:55:04 +0000 (GMT) Received: from GMSEXC07.CORP.DS.GEMPLUS.COM ([10.2.158.55]) by GMSEXC02.CORP.DS.GEMPLUS.COM with Microsoft SMTPSVC(6.0.3790.1830); Wed, 18 Jul 2007 16:55:04 +0200 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: [KEYPROV] REMINDER --- Accepting draft-doherty-keyprov-dskpp-01.txtas WG item Date: Wed, 18 Jul 2007 16:54:28 +0200 Message-ID: <093F8C873752A84D98A28841099DF380178D44@GMSEXC07.CORP.DS.GEMPLUS.COM> In-Reply-To: <469D2A13.1000005@gmx.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [KEYPROV] REMINDER --- Accepting draft-doherty-keyprov-dskpp-01.txtas WG item thread-index: AcfIs0gUyhbemBWLSpizZtMYSSVsgAAl/X5A From: "CHANG Shuh" To: "Hannes Tschofenig" , X-OriginalArrivalTime: 18 Jul 2007 14:55:04.0290 (UTC) FILETIME=[9FBAD420:01C7C94B] X-Spam-Score: 0.1 (/) X-Scan-Signature: 42e3ed3f10a1d8bef690f09da16f507a Cc: X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Yes, I'd endorse accepting "Dynamic Symmetric Key Provisioning Protocol (DSKPP)" (draft-doherty-keyprov-dskpp-01.txt) as WG item. Thanks. Regards, Shuh =20 > -----Original Message----- > From: Hannes Tschofenig [mailto:Hannes.Tschofenig@gmx.net]=20 > Sent: Tuesday, July 17, 2007 3:44 PM > To: keyprov@ietf.org > Subject: [KEYPROV] REMINDER --- Accepting=20 > draft-doherty-keyprov-dskpp-01.txtas WG item >=20 > Please state your opinion. >=20 > Hannes Tschofenig wrote: > > KEYPROV working group members! > > > > [Responses to this message are necessary by July 20th] > > > > At IETF#69 the KEYPROV working group was quite satisfied with the=20 > > proposal of merging the two individual solutions. Phillip=20 > and myself=20 > > decided to wait until we have a merged draft for the group=20 > to look at. > > Now, we have a revised version of the -00 document=20 > available for review. > > > > We believe that this document provides a basis for further work. > > > > This is a call for input on accepting "Dynamic Symmetric Key=20 > > Provisioning Protocol (DSKPP)"=20 > (draft-doherty-keyprov-dskpp-01.txt) as=20 > > WG item. Please provide any input, both positive and negative. > > > > Ciao > > Hannes & Phillip > > > > -------- Original Message -------- > > Subject: I-D ACTION:draft-doherty-keyprov-dskpp-01.txt > > Date: Wed, 11 Jul 2007 14:15:01 -0400 > > From: Internet-Drafts@ietf.org > > Reply-To: internet-drafts@ietf.org > > To: i-d-announce@ietf.org > > > > > > > > A New Internet-Draft is available from the on-line Internet-Drafts=20 > > directories. > > > > > > Title : Dynamic Symmetric Key Provisioning=20 > Protocol (DSKPP) > > Author(s) : M. Nystroem, et al. > > Filename : draft-doherty-keyprov-dskpp-01.txt > > Pages : 100 > > Date : 2007-7-11 > > =20 > > DSKPP is a client-server protocol for initialization (and > > configuration) of symmetric keys to locally and remotely=20 > accessible > > cryptographic modules. The protocol can be run with or without > > private-key capabilities in the cryptographic modules, and with or > > without an established public-key infrastructure. > > > > Three variations of the protocol support multiple usage scenarios. > > The four-pass (i.e., two round-trip) variant enables key=20 > generation > > in near real-time. With the four-pass variant, keys are mutually > > generated by the provisioning server and cryptographic module; > > provisioned keys are not transferred over-the-wire or=20 > over-the-air. > > Two- and one-pass variants enable secure and efficient=20 > download and > > installation of symmetric keys to a cryptographic module in > > environments where near real-time communication may not=20 > be possible. > > > > This document builds on information contained in [RFC4758], adding > > specific enhancements in response to implementation experience and > > liaison requests. It is intended, therefore, that this=20 > document or a > > successor version thereto will become the basis for subsequent > > progression of a symmetric key provisioning protocol=20 > specification on > > the standards track. > > > > A URL for this Internet-Draft is: > >=20 > http://www.ietf.org/internet-drafts/draft-doherty-keyprov-dskpp-01.txt > > > > To remove yourself from the I-D Announcement list, send a=20 > message to=20 > > i-d-announce-request@ietf.org with the word unsubscribe in=20 > the body of=20 > > the message. You can also visit=20 > > https://www1.ietf.org/mailman/listinfo/I-D-announce to change your=20 > > subscription settings. > > > > Internet-Drafts are also available by anonymous FTP. Login with the=20 > > username "anonymous" and a password of your e-mail address. After=20 > > logging in, type "cd internet-drafts" and then "get=20 > > draft-doherty-keyprov-dskpp-01.txt". > > > > A list of Internet-Drafts directories can be found in=20 > > http://www.ietf.org/shadow.html or=20 > > ftp://ftp.ietf.org/ietf/1shadow-sites.txt > > > > Internet-Drafts can also be obtained by e-mail. > > > > Send a message to: > > mailserv@ietf.org. > > In the body type: > > "FILE /internet-drafts/draft-doherty-keyprov-dskpp-01.txt". > > =20 > > NOTE: The mail server at ietf.org can return the document in > > MIME-encoded form by using the "mpack" utility. To use this > > feature, insert the command "ENCODING mime" before the "FILE" > > command. To decode the response(s), you will need "munpack" or > > a MIME-compliant mail reader. Different MIME-compliant=20 > mail readers > > exhibit different behavior, especially when dealing with > > "multipart" MIME messages (i.e. documents which have been split > > up into multiple messages), so check your local documentation on > > how to manipulate these messages. > > > > Below is the data which will enable a MIME compliant mail reader=20 > > implementation to automatically retrieve the ASCII version of the=20 > > Internet-Draft. > > > > > > > > _______________________________________________ > > KEYPROV mailing list > > KEYPROV@ietf.org > > https://www1.ietf.org/mailman/listinfo/keyprov >=20 >=20 > _______________________________________________ > KEYPROV mailing list > KEYPROV@ietf.org > https://www1.ietf.org/mailman/listinfo/keyprov >=20 _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Wed Jul 18 11:08:49 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1IBB8y-00060K-Tt; Wed, 18 Jul 2007 11:08:49 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1IBB8y-000609-1Q for keyprov@ietf.org; Wed, 18 Jul 2007 11:08:48 -0400 Received: from fmmailgate03.web.de ([217.72.192.234]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1IBB8w-0003eH-Kj for keyprov@ietf.org; Wed, 18 Jul 2007 11:08:48 -0400 Received: from smtp05.web.de (fmsmtp05.dlan.cinetic.de [172.20.4.166]) by fmmailgate03.web.de (Postfix) with ESMTP id CA7C28C95AF6; Wed, 18 Jul 2007 17:08:45 +0200 (CEST) Received: from [134.76.63.222] (helo=thor.zim.wh.local) by smtp05.web.de with asmtp (TLSv1:AES256-SHA:256) (WEB.DE 4.108 #197) id 1IBB8t-000872-00; Wed, 18 Jul 2007 17:08:44 +0200 From: Niklas Neumann To: keyprov@ietf.org, "Hannes Tschofenig" Subject: Re: [KEYPROV] REMINDER --- Accepting draft-doherty-keyprov-dskpp-01.txt as WG item Date: Wed, 18 Jul 2007 17:08:38 +0200 User-Agent: KMail/1.9.6 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200707181708.38359.niklas.neumann@cs.uni-goettingen.de> X-Sender: n.neumann@web.de X-Provags-ID: V01U2FsdGVkX1/17blRNiyc5x8fkK8Fs5+jNTYIefbv1We3IGgQ YFWD9qszCGx6zIJwvb9MQXBlLm99CD6Aw/Og5LcdOyIuoe0BDq XZYvNpYKA= X-Spam-Score: 0.0 (/) X-Scan-Signature: 7aefe408d50e9c7c47615841cb314bed Cc: X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Hello everybody, i support accepting draft-doherty-keyprov-dskpp-01 as a working group item as well. Regards, Niklas _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Wed Jul 18 14:43:20 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1IBEUa-0002Cl-NH; Wed, 18 Jul 2007 14:43:20 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1IBEUZ-0002C2-Oy for keyprov@ietf.org; Wed, 18 Jul 2007 14:43:19 -0400 Received: from sottccs1.entrust.com ([216.191.252.13]) by chiedprmail1.ietf.org with smtp (Exim 4.43) id 1IBEUZ-0002k8-3C for keyprov@ietf.org; Wed, 18 Jul 2007 14:43:19 -0400 Received: (qmail 5116 invoked from network); 18 Jul 2007 18:43:12 -0000 Received: from sharon.boeyen@entrust.com by sottccs1.entrust.com with EntrustECS-Server-8.0; 18 Jul 2007 18:43:12 -0000 Received: from unknown (HELO sottexch1.corp.ad.entrust.com) (10.4.51.28) by sottccs1.entrust.com with SMTP; 18 Jul 2007 18:43:11 -0000 X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Subject: RE: [KEYPROV] REMINDER --- Accepting draft-doherty-keyprov-dskpp-01.txtas WG item Date: Wed, 18 Jul 2007 14:43:14 -0400 Message-ID: <04398A2C9F306C4690265C144089972D01BE7632@sottexch1.corp.ad.entrust.com> In-Reply-To: <469D2A13.1000005@gmx.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: [KEYPROV] REMINDER --- Accepting draft-doherty-keyprov-dskpp-01.txtas WG item Thread-Index: AcfIszz6jfFi7OxKTC+mzok6GCLPTAAuC9vw References: <469524C5.5060208@gmx.net> <469D2A13.1000005@gmx.net> From: "Sharon Boeyen" To: "Hannes Tschofenig" , X-Spam-Score: 0.0 (/) X-Scan-Signature: b2809b6f39decc6de467dcf252f42af1 Cc: X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org I also support accepting DSKPP as a WG item.=20 -----Original Message----- From: Hannes Tschofenig [mailto:Hannes.Tschofenig@gmx.net]=20 Sent: Tuesday, July 17, 2007 4:44 PM To: keyprov@ietf.org Subject: [KEYPROV] REMINDER --- Accepting draft-doherty-keyprov-dskpp-01.txtas WG item Please state your opinion. Hannes Tschofenig wrote: > KEYPROV working group members! > > [Responses to this message are necessary by July 20th] > > At IETF#69 the KEYPROV working group was quite satisfied with the=20 > proposal of merging the two individual solutions. Phillip and myself=20 > decided to wait until we have a merged draft for the group to look at. > Now, we have a revised version of the -00 document available for review. > > We believe that this document provides a basis for further work. > > This is a call for input on accepting "Dynamic Symmetric Key=20 > Provisioning Protocol (DSKPP)" (draft-doherty-keyprov-dskpp-01.txt) as > WG item. Please provide any input, both positive and negative. > > Ciao > Hannes & Phillip > > -------- Original Message -------- > Subject: I-D ACTION:draft-doherty-keyprov-dskpp-01.txt > Date: Wed, 11 Jul 2007 14:15:01 -0400 > From: Internet-Drafts@ietf.org > Reply-To: internet-drafts@ietf.org > To: i-d-announce@ietf.org > > > > A New Internet-Draft is available from the on-line Internet-Drafts=20 > directories. > > > Title : Dynamic Symmetric Key Provisioning Protocol (DSKPP) > Author(s) : M. Nystroem, et al. > Filename : draft-doherty-keyprov-dskpp-01.txt > Pages : 100 > Date : 2007-7-11 > =20 > DSKPP is a client-server protocol for initialization (and > configuration) of symmetric keys to locally and remotely accessible > cryptographic modules. The protocol can be run with or without > private-key capabilities in the cryptographic modules, and with or > without an established public-key infrastructure. > > Three variations of the protocol support multiple usage scenarios. > The four-pass (i.e., two round-trip) variant enables key generation > in near real-time. With the four-pass variant, keys are mutually > generated by the provisioning server and cryptographic module; > provisioned keys are not transferred over-the-wire or over-the-air. > Two- and one-pass variants enable secure and efficient download and > installation of symmetric keys to a cryptographic module in > environments where near real-time communication may not be possible. > > This document builds on information contained in [RFC4758], adding > specific enhancements in response to implementation experience and > liaison requests. It is intended, therefore, that this document or a > successor version thereto will become the basis for subsequent > progression of a symmetric key provisioning protocol specification on > the standards track. > > A URL for this Internet-Draft is: > http://www.ietf.org/internet-drafts/draft-doherty-keyprov-dskpp-01.txt > > To remove yourself from the I-D Announcement list, send a message to=20 > i-d-announce-request@ietf.org with the word unsubscribe in the body of > the message. You can also visit=20 > https://www1.ietf.org/mailman/listinfo/I-D-announce to change your=20 > subscription settings. > > Internet-Drafts are also available by anonymous FTP. Login with the=20 > username "anonymous" and a password of your e-mail address. After=20 > logging in, type "cd internet-drafts" and then "get=20 > draft-doherty-keyprov-dskpp-01.txt". > > A list of Internet-Drafts directories can be found in=20 > http://www.ietf.org/shadow.html or=20 > ftp://ftp.ietf.org/ietf/1shadow-sites.txt > > Internet-Drafts can also be obtained by e-mail. > > Send a message to: > mailserv@ietf.org. > In the body type: > "FILE /internet-drafts/draft-doherty-keyprov-dskpp-01.txt". > =20 > NOTE: The mail server at ietf.org can return the document in > MIME-encoded form by using the "mpack" utility. To use this > feature, insert the command "ENCODING mime" before the "FILE" > command. To decode the response(s), you will need "munpack" or > a MIME-compliant mail reader. Different MIME-compliant mail readers > exhibit different behavior, especially when dealing with > "multipart" MIME messages (i.e. documents which have been split > up into multiple messages), so check your local documentation on > how to manipulate these messages. > > Below is the data which will enable a MIME compliant mail reader=20 > implementation to automatically retrieve the ASCII version of the=20 > Internet-Draft. > > > > _______________________________________________ > KEYPROV mailing list > KEYPROV@ietf.org > https://www1.ietf.org/mailman/listinfo/keyprov _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Thu Jul 19 09:50:37 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1IBWOr-0006Wu-Dv; Thu, 19 Jul 2007 09:50:37 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1IBWOp-0006Wm-Js for keyprov@ietf.org; Thu, 19 Jul 2007 09:50:35 -0400 Received: from vms046pub.verizon.net ([206.46.252.46]) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1IBWOo-0000oz-T9 for keyprov@ietf.org; Thu, 19 Jul 2007 09:50:35 -0400 Received: from 480037D956F7448 ([76.24.175.165]) by vms046.mailsrvcs.net (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPA id <0JLF0018LIG4RL32@vms046.mailsrvcs.net> for keyprov@ietf.org; Thu, 19 Jul 2007 08:50:34 -0500 (CDT) Date: Thu, 19 Jul 2007 09:50:28 -0400 From: "Stuart Vaeth" Subject: RE: [KEYPROV] REMINDER --- Accepting draft-doherty-keyprov-dskpp-01.txtas WG item In-reply-to: <469D2A13.1000005@gmx.net> To: "'Hannes Tschofenig'" Message-id: <0JLF0019KIG9RL32@vms046.mailsrvcs.net> MIME-version: 1.0 X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 X-Mailer: Microsoft Office Outlook, Build 11.0.6353 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7bit Thread-index: AcfIszIvxrC+tjJVSCCYZKjkthsCpgBWFvyg X-Spam-Score: 0.0 (/) X-Scan-Signature: 093efd19b5f651b2707595638f6c4003 Cc: keyprov@ietf.org X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org I support accepting DSKPP as a WG item. Stu Vaeth -----Original Message----- From: Hannes Tschofenig [mailto:Hannes.Tschofenig@gmx.net] Sent: Tuesday, July 17, 2007 4:44 PM To: keyprov@ietf.org Subject: [KEYPROV] REMINDER --- Accepting draft-doherty-keyprov-dskpp-01.txtas WG item Please state your opinion. Hannes Tschofenig wrote: > KEYPROV working group members! > > [Responses to this message are necessary by July 20th] > > At IETF#69 the KEYPROV working group was quite satisfied with the > proposal of merging the two individual solutions. Phillip and myself > decided to wait until we have a merged draft for the group to look at. > Now, we have a revised version of the -00 document available for review. > > We believe that this document provides a basis for further work. > > This is a call for input on accepting "Dynamic Symmetric Key > Provisioning Protocol (DSKPP)" (draft-doherty-keyprov-dskpp-01.txt) as > WG item. Please provide any input, both positive and negative. > > Ciao > Hannes & Phillip > > -------- Original Message -------- > Subject: I-D ACTION:draft-doherty-keyprov-dskpp-01.txt > Date: Wed, 11 Jul 2007 14:15:01 -0400 > From: Internet-Drafts@ietf.org > Reply-To: internet-drafts@ietf.org > To: i-d-announce@ietf.org > > > > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > > > Title : Dynamic Symmetric Key Provisioning Protocol (DSKPP) > Author(s) : M. Nystroem, et al. > Filename : draft-doherty-keyprov-dskpp-01.txt > Pages : 100 > Date : 2007-7-11 > > DSKPP is a client-server protocol for initialization (and > configuration) of symmetric keys to locally and remotely accessible > cryptographic modules. The protocol can be run with or without > private-key capabilities in the cryptographic modules, and with or > without an established public-key infrastructure. > > Three variations of the protocol support multiple usage scenarios. > The four-pass (i.e., two round-trip) variant enables key generation > in near real-time. With the four-pass variant, keys are mutually > generated by the provisioning server and cryptographic module; > provisioned keys are not transferred over-the-wire or over-the-air. > Two- and one-pass variants enable secure and efficient download and > installation of symmetric keys to a cryptographic module in > environments where near real-time communication may not be possible. > > This document builds on information contained in [RFC4758], adding > specific enhancements in response to implementation experience and > liaison requests. It is intended, therefore, that this document or a > successor version thereto will become the basis for subsequent > progression of a symmetric key provisioning protocol specification on > the standards track. > > A URL for this Internet-Draft is: > http://www.ietf.org/internet-drafts/draft-doherty-keyprov-dskpp-01.txt > > To remove yourself from the I-D Announcement list, send a message to > i-d-announce-request@ietf.org with the word unsubscribe in the body of > the message. You can also visit > https://www1.ietf.org/mailman/listinfo/I-D-announce to change your > subscription settings. > > Internet-Drafts are also available by anonymous FTP. Login with the > username "anonymous" and a password of your e-mail address. After > logging in, type "cd internet-drafts" and then "get > draft-doherty-keyprov-dskpp-01.txt". > > A list of Internet-Drafts directories can be found in > http://www.ietf.org/shadow.html or > ftp://ftp.ietf.org/ietf/1shadow-sites.txt > > Internet-Drafts can also be obtained by e-mail. > > Send a message to: > mailserv@ietf.org. > In the body type: > "FILE /internet-drafts/draft-doherty-keyprov-dskpp-01.txt". > > NOTE: The mail server at ietf.org can return the document in > MIME-encoded form by using the "mpack" utility. To use this > feature, insert the command "ENCODING mime" before the "FILE" > command. To decode the response(s), you will need "munpack" or > a MIME-compliant mail reader. Different MIME-compliant mail readers > exhibit different behavior, especially when dealing with > "multipart" MIME messages (i.e. documents which have been split > up into multiple messages), so check your local documentation on > how to manipulate these messages. > > Below is the data which will enable a MIME compliant mail reader > implementation to automatically retrieve the ASCII version of the > Internet-Draft. > > > > _______________________________________________ > KEYPROV mailing list > KEYPROV@ietf.org > https://www1.ietf.org/mailman/listinfo/keyprov _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Tue Jul 24 12:43:20 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1IDNTk-0002S1-MY; Tue, 24 Jul 2007 12:43:20 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1IDNTj-0002Rl-OI for keyprov@ietf.org; Tue, 24 Jul 2007 12:43:19 -0400 Received: from v29431.1blu.de ([88.84.142.131]) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1IDNTj-0008PB-6q for keyprov@ietf.org; Tue, 24 Jul 2007 12:43:19 -0400 Received: (qmail 2027 invoked from network); 24 Jul 2007 18:43:17 +0200 Received: from 213-239-234-98.clients.your-server.de (HELO ?213.239.196.40?) (213.239.234.98) by v29431.1blu.de with SMTP; 24 Jul 2007 18:43:17 +0200 Content-Type: text/plain; charset=utf-8 To: keyprov@ietf.org, mpei@verisign.com From: Andrea Doherty Date: Tue, 24 Jul 2007 16:24:40 +0000 X-Roundup-Name: KEYPROV Roundup Issue Tracker X-Roundup-Loop: hello X-Roundup-Version: 0.8.2 MIME-Version: 1.0 Message-Id: <1185294280.11.0.605071161865.issue2@http://www.tschofenig.priv.at> Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-Scan-Signature: 1ac7cc0a4cd376402b85bc1961a86ac2 Cc: Subject: [KEYPROV] [issue2] Register PSKC container URI and refer to this in keyprov spec X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: KEYPROV Roundup Issue Tracker List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Andrea Doherty added the comment: Closing; Information regarding PSKC URI was added to the IANA Consideration= s=20 section of the DSKPP protocol document. ---------- status: testing -> resolved _________________________________________________________ KEYPROV Roundup Issue Tracker _________________________________________________________ _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Tue Jul 24 12:44:21 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1IDNUj-0002cj-JD; Tue, 24 Jul 2007 12:44:21 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1IDNUi-0002cZ-NG for keyprov@ietf.org; Tue, 24 Jul 2007 12:44:20 -0400 Received: from v29431.1blu.de ([88.84.142.131]) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1IDNUi-0008Qn-0Q for keyprov@ietf.org; Tue, 24 Jul 2007 12:44:20 -0400 Received: (qmail 3730 invoked from network); 24 Jul 2007 18:44:19 +0200 Received: from 213-239-234-98.clients.your-server.de (HELO ?213.239.196.40?) (213.239.234.98) by v29431.1blu.de with SMTP; 24 Jul 2007 18:44:19 +0200 Content-Type: text/plain; charset=utf-8 To: keyprov@ietf.org, mpei@verisign.com From: Andrea Doherty Date: Tue, 24 Jul 2007 16:25:41 +0000 X-Roundup-Name: KEYPROV Roundup Issue Tracker X-Roundup-Loop: hello X-Roundup-Version: 0.8.2 MIME-Version: 1.0 Message-Id: <1185294341.97.0.493546452616.issue3@http://www.tschofenig.priv.at> Content-Transfer-Encoding: quoted-printable X-Spam-Score: 0.0 (/) X-Scan-Signature: 1ac7cc0a4cd376402b85bc1961a86ac2 Cc: Subject: [KEYPROV] [issue3] Consistent definition about IDs between Keyprov and PSKC: TokenID, DeviceID, and KeyID X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: KEYPROV Roundup Issue Tracker List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Andrea Doherty added the comment: Closing; agreed that the object model is required; discussed the same on th= e=20 mailing list; and added result to draft-doherty-keyprov-dskpp-01.txt. ---------- status: in-progress -> resolved _________________________________________________________ KEYPROV Roundup Issue Tracker _________________________________________________________ _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Tue Jul 24 12:47:05 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1IDNXN-00036c-0h; Tue, 24 Jul 2007 12:47:05 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1IDNXM-00036Q-Mr for keyprov@ietf.org; Tue, 24 Jul 2007 12:47:04 -0400 Received: from v29431.1blu.de ([88.84.142.131]) by chiedprmail1.ietf.org with esmtp (Exim 4.43) id 1IDNXL-0008UT-UY for keyprov@ietf.org; Tue, 24 Jul 2007 12:47:04 -0400 Received: (qmail 9714 invoked from network); 24 Jul 2007 18:47:02 +0200 Received: from 213-239-234-98.clients.your-server.de (HELO ?213.239.196.40?) (213.239.234.98) by v29431.1blu.de with SMTP; 24 Jul 2007 18:47:02 +0200 Content-Type: text/plain; charset=utf-8 To: keyprov@ietf.org, mpei@verisign.com From: Andrea Doherty Date: Tue, 24 Jul 2007 16:28:25 +0000 X-Roundup-Name: KEYPROV Roundup Issue Tracker X-Roundup-Loop: hello X-Roundup-Version: 0.8.2 MIME-Version: 1.0 Message-Id: <1185294505.66.0.261964617757.issue21@http://www.tschofenig.priv.at> Content-Transfer-Encoding: quoted-printable X-Spam-Score: 1.8 (+) X-Scan-Signature: 7a6398bf8aaeabc7a7bb696b6b0a2aad Cc: Subject: [KEYPROV] [issue21] Consider to add object diagram in DSKPP for relationships among IDs X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: KEYPROV Roundup Issue Tracker List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Andrea Doherty added the comment: Closing; this object model was added to draft-doherty-keyprov-dskpp-01.txt=20 after discussion of the same on the mailing list. See also id #3. ---------- status: chatting -> resolved _________________________________________________________ KEYPROV Roundup Issue Tracker _________________________________________________________ _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Wed Jul 25 10:27:39 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1IDhpx-0001k9-4g; Wed, 25 Jul 2007 10:27:37 -0400 Received: from [10.90.34.44] (helo=chiedprmail1.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1IDhpv-0001TH-MQ for keyprov@ietf.org; Wed, 25 Jul 2007 10:27:35 -0400 Received: from smtp102.biz.mail.mud.yahoo.com ([68.142.200.237]) by chiedprmail1.ietf.org with smtp (Exim 4.43) id 1IDhpu-0004dV-R0 for keyprov@ietf.org; Wed, 25 Jul 2007 10:27:35 -0400 Received: (qmail 33744 invoked from network); 25 Jul 2007 14:27:34 -0000 Received: from unknown (HELO Wylie) (turners@ieca.com@130.129.18.223 with login) by smtp102.biz.mail.mud.yahoo.com with SMTP; 25 Jul 2007 14:27:33 -0000 X-YMail-OSG: T7_6s2QVM1k2_zFZyZh_8.ggSigGOSQyG0eZFL075eY6plK9L0K4WNUsoiUGbTymRxkhJ08D218.JNfm_CpivD9_XF5WcbhemgPwzCg8g1U7rOe53kw- From: "Turner, Sean P." To: References: <469524C5.5060208@gmx.net> <469D2A13.1000005@gmx.net> Subject: RE: [KEYPROV] REMINDER --- Accepting draft-doherty-keyprov-dskpp-01.txtas WG item Date: Wed, 25 Jul 2007 09:17:29 -0500 Organization: IECA, Inc. Message-ID: <000b01c7cec6$895c1bf0$df128182@Wylie> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Office Outlook 11 In-Reply-To: <469D2A13.1000005@gmx.net> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3138 Thread-Index: AcfIsz4a+ZirrpRAQxuCT+NVjqoaVwGEt4pA X-Spam-Score: 0.0 (/) X-Scan-Signature: 6ffdee8af20de249c24731d8414917d3 X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: turners@ieca.com List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org I missed the deadline but for what it's worth this is a good draft to accept in the WG. spt -----Original Message----- From: Hannes Tschofenig [mailto:Hannes.Tschofenig@gmx.net] Sent: Tuesday, July 17, 2007 3:44 PM To: keyprov@ietf.org Subject: [KEYPROV] REMINDER --- Accepting draft-doherty-keyprov-dskpp-01.txtas WG item Please state your opinion. Hannes Tschofenig wrote: > KEYPROV working group members! > > [Responses to this message are necessary by July 20th] > > At IETF#69 the KEYPROV working group was quite satisfied with the > proposal of merging the two individual solutions. Phillip and myself > decided to wait until we have a merged draft for the group to look at. > Now, we have a revised version of the -00 document available for review. > > We believe that this document provides a basis for further work. > > This is a call for input on accepting "Dynamic Symmetric Key > Provisioning Protocol (DSKPP)" (draft-doherty-keyprov-dskpp-01.txt) as > WG item. Please provide any input, both positive and negative. > > Ciao > Hannes & Phillip > > -------- Original Message -------- > Subject: I-D ACTION:draft-doherty-keyprov-dskpp-01.txt > Date: Wed, 11 Jul 2007 14:15:01 -0400 > From: Internet-Drafts@ietf.org > Reply-To: internet-drafts@ietf.org > To: i-d-announce@ietf.org > > > > A New Internet-Draft is available from the on-line Internet-Drafts > directories. > > > Title : Dynamic Symmetric Key Provisioning Protocol (DSKPP) > Author(s) : M. Nystroem, et al. > Filename : draft-doherty-keyprov-dskpp-01.txt > Pages : 100 > Date : 2007-7-11 > > DSKPP is a client-server protocol for initialization (and > configuration) of symmetric keys to locally and remotely accessible > cryptographic modules. The protocol can be run with or without > private-key capabilities in the cryptographic modules, and with or > without an established public-key infrastructure. > > Three variations of the protocol support multiple usage scenarios. > The four-pass (i.e., two round-trip) variant enables key generation > in near real-time. With the four-pass variant, keys are mutually > generated by the provisioning server and cryptographic module; > provisioned keys are not transferred over-the-wire or over-the-air. > Two- and one-pass variants enable secure and efficient download and > installation of symmetric keys to a cryptographic module in > environments where near real-time communication may not be possible. > > This document builds on information contained in [RFC4758], adding > specific enhancements in response to implementation experience and > liaison requests. It is intended, therefore, that this document or a > successor version thereto will become the basis for subsequent > progression of a symmetric key provisioning protocol specification on > the standards track. > > A URL for this Internet-Draft is: > http://www.ietf.org/internet-drafts/draft-doherty-keyprov-dskpp-01.txt > > To remove yourself from the I-D Announcement list, send a message to > i-d-announce-request@ietf.org with the word unsubscribe in the body of > the message. You can also visit > https://www1.ietf.org/mailman/listinfo/I-D-announce to change your > subscription settings. > > Internet-Drafts are also available by anonymous FTP. Login with the > username "anonymous" and a password of your e-mail address. After > logging in, type "cd internet-drafts" and then "get > draft-doherty-keyprov-dskpp-01.txt". > > A list of Internet-Drafts directories can be found in > http://www.ietf.org/shadow.html or > ftp://ftp.ietf.org/ietf/1shadow-sites.txt > > Internet-Drafts can also be obtained by e-mail. > > Send a message to: > mailserv@ietf.org. > In the body type: > "FILE /internet-drafts/draft-doherty-keyprov-dskpp-01.txt". > > NOTE: The mail server at ietf.org can return the document in > MIME-encoded form by using the "mpack" utility. To use this > feature, insert the command "ENCODING mime" before the "FILE" > command. To decode the response(s), you will need "munpack" or > a MIME-compliant mail reader. Different MIME-compliant mail readers > exhibit different behavior, especially when dealing with > "multipart" MIME messages (i.e. documents which have been split > up into multiple messages), so check your local documentation on > how to manipulate these messages. > > Below is the data which will enable a MIME compliant mail reader > implementation to automatically retrieve the ASCII version of the > Internet-Draft. > > > > _______________________________________________ > KEYPROV mailing list > KEYPROV@ietf.org > https://www1.ietf.org/mailman/listinfo/keyprov _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Wed Jul 25 19:26:34 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1IDqFV-00046X-MH; Wed, 25 Jul 2007 19:26:33 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1IDqFU-00046M-2q for keyprov@ietf.org; Wed, 25 Jul 2007 19:26:32 -0400 Received: from mail.gmx.net ([213.165.64.20]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1IDqFT-0006zz-HM for keyprov@ietf.org; Wed, 25 Jul 2007 19:26:32 -0400 Received: (qmail invoked by alias); 25 Jul 2007 23:26:30 -0000 Received: from dhcp-15f4.ietf69.org (EHLO [130.129.21.244]) [130.129.21.244] by mail.gmx.net (mp010) with SMTP; 26 Jul 2007 01:26:30 +0200 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX1/swwRfvbbsX7pvUfhZlJslo9XfQNAoxsP5+8qR1L RMMhpgz0rRHTfE Message-ID: <46A7DC26.3090508@gmx.net> Date: Thu, 26 Jul 2007 01:26:30 +0200 From: Hannes Tschofenig User-Agent: Thunderbird 2.0.0.5 (Windows/20070716) MIME-Version: 1.0 To: keyprov@ietf.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Y-GMX-Trusted: 0 X-Spam-Score: 0.0 (/) X-Scan-Signature: 68c8cc8a64a9d0402e43b8eee9fc4199 Subject: [KEYPROV] DSKPP X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Hi all, we would like to thank for the response to our call for input on accepting "Dynamic Symmetric Key Provisioning Protocol (DSKPP)" (draft-doherty-keyprov-dskpp-01.txt) as WG item. We received many positive responses and no objection. We instructed the draft editor to re-submit the document as WG item. Ciao Hannes & Phillip _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Thu Jul 26 15:28:16 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1IE90S-0000Ky-1Y; Thu, 26 Jul 2007 15:28:16 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1IE90Q-0000Gz-CP for keyprov@ietf.org; Thu, 26 Jul 2007 15:28:14 -0400 Received: from mail.gmx.net ([213.165.64.20]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1IE90O-00077A-BE for keyprov@ietf.org; Thu, 26 Jul 2007 15:28:14 -0400 Received: (qmail invoked by alias); 26 Jul 2007 19:28:10 -0000 Received: from dhcp-15f4.ietf69.org (EHLO [130.129.21.244]) [130.129.21.244] by mail.gmx.net (mp052) with SMTP; 26 Jul 2007 21:28:10 +0200 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX1+cYANRsUectMcMGmnnQhGBuApuvIwc3F7Odrg994 zoGFqPjQ/h1Xbv Message-ID: <46A8F5CD.7020908@gmx.net> Date: Thu, 26 Jul 2007 21:28:13 +0200 From: Hannes Tschofenig User-Agent: Thunderbird 2.0.0.5 (Windows/20070716) MIME-Version: 1.0 To: keyprov@ietf.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Y-GMX-Trusted: 0 X-Spam-Score: 0.0 (/) X-Scan-Signature: 1ac7cc0a4cd376402b85bc1961a86ac2 Subject: [KEYPROV] Confirmation of KEYPROV IETF 69 Working Group Hums on draft-hoyer-keyprov-portable-symmetric-key-container-02.txt X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Hi all, we asked the group during the KEYPROV session whether draft-hoyer-keyprov-portable-symmetric-key-container-02.txt should become a WG item as a baseline for the work on the mandatory-to-implement XML-based key container format. The group was in favor. No objections have been raised. If you have objections please post a mail. Deadline: 11th August 2007 Ciao Hannes & Phillip _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov From keyprov-bounces@ietf.org Thu Jul 26 15:28:33 2007 Return-path: Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1IE90j-00018B-CC; Thu, 26 Jul 2007 15:28:33 -0400 Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1IE90i-00013j-3s for keyprov@ietf.org; Thu, 26 Jul 2007 15:28:32 -0400 Received: from mail.gmx.net ([213.165.64.20]) by ietf-mx.ietf.org with smtp (Exim 4.43) id 1IE90h-00077c-Gc for keyprov@ietf.org; Thu, 26 Jul 2007 15:28:32 -0400 Received: (qmail invoked by alias); 26 Jul 2007 19:28:29 -0000 Received: from dhcp-15f4.ietf69.org (EHLO [130.129.21.244]) [130.129.21.244] by mail.gmx.net (mp018) with SMTP; 26 Jul 2007 21:28:29 +0200 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX1/xpYtsIEnxPaYwdNdCuU0LDTT/1e7aXrb1TzfO7q KRpFAOQfRJM4qE Message-ID: <46A8F5E0.5060405@gmx.net> Date: Thu, 26 Jul 2007 21:28:32 +0200 From: Hannes Tschofenig User-Agent: Thunderbird 2.0.0.5 (Windows/20070716) MIME-Version: 1.0 To: keyprov@ietf.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Y-GMX-Trusted: 0 X-Spam-Score: 0.0 (/) X-Scan-Signature: 1ac7cc0a4cd376402b85bc1961a86ac2 Subject: [KEYPROV] Confirmation of KEYPROV IETF 69 Working Group Hums on draft-turner-symmetrickeyformat-00.txt X-BeenThere: keyprov@ietf.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Provisioning of Symmetric Keys \(keyprov\)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: keyprov-bounces@ietf.org Hi all, we asked the group during the KEYPROV session whether draft-turner-symmetrickeyformat-00.txt should become a WG item as a baseline for the work on an optional-to-implement ASN.1-based key container format. The group was in favor. No objections have been raised. If you have objections please post a mail. Deadline: 11th August 2007 Ciao Hannes & Phillip _______________________________________________ KEYPROV mailing list KEYPROV@ietf.org https://www1.ietf.org/mailman/listinfo/keyprov