Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5TJp8bL052305; Thu, 29 Jun 2006 12:51:08 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.13.5/8.13.5/Submit) id k5TJp8R3052304; Thu, 29 Jun 2006 12:51:08 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from cypress.neustar.com (cypress.neustar.com [209.173.57.84]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5TJp7wA052269 for ; Thu, 29 Jun 2006 12:51:07 -0700 (MST) (envelope-from ietf@ietf.org) Received: from stiedprstage1.ietf.org (stiedprstage1.va.neustar.com [10.31.47.10]) by cypress.neustar.com (8.12.8/8.12.8) with ESMTP id k5TJo2jx010158 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT); Thu, 29 Jun 2006 19:50:02 GMT Received: from ietf by stiedprstage1.ietf.org with local (Exim 4.43) id 1Fw2WY-0003TE-4r; Thu, 29 Jun 2006 15:50:02 -0400 Content-Type: Multipart/Mixed; Boundary="NextPart" Mime-Version: 1.0 To: i-d-announce@ietf.org Cc: ietf-ltans@imc.org From: Internet-Drafts@ietf.org Subject: I-D ACTION:draft-ietf-ltans-ltap-02.txt Message-Id: Date: Thu, 29 Jun 2006 15:50:02 -0400 Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Long-Term Archive and Notary Services Working Group of the IETF. Title : Long-term Archive Protocol (LTAP) Author(s) : A. Jerman-Blazic, et al. Filename : draft-ietf-ltans-ltap-02.txt Pages : 44 Date : 2006-6-29 This document describes a service operated as a trusted third party to securely archive electronic document called a long-term archive service (LTA). We describe an architecture framework and a protocol allowing clients to interact with such a service. Bindings to concrete transport and security protocol layers are given. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-ltans-ltap-02.txt To remove yourself from the I-D Announcement list, send a message to i-d-announce-request@ietf.org with the word unsubscribe in the body of the message. You can also visit https://www1.ietf.org/mailman/listinfo/I-D-announce to change your subscription settings. Internet-Drafts are also available by anonymous FTP. Login with the username "anonymous" and a password of your e-mail address. After logging in, type "cd internet-drafts" and then "get draft-ietf-ltans-ltap-02.txt". A list of Internet-Drafts directories can be found in http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt Internet-Drafts can also be obtained by e-mail. Send a message to: mailserv@ietf.org. In the body type: "FILE /internet-drafts/draft-ietf-ltans-ltap-02.txt". NOTE: The mail server at ietf.org can return the document in MIME-encoded form by using the "mpack" utility. To use this feature, insert the command "ENCODING mime" before the "FILE" command. To decode the response(s), you will need "munpack" or a MIME-compliant mail reader. Different MIME-compliant mail readers exhibit different behavior, especially when dealing with "multipart" MIME messages (i.e. documents which have been split up into multiple messages), so check your local documentation on how to manipulate these messages. Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Multipart/Alternative; Boundary="OtherAccess" --OtherAccess Content-Type: Message/External-body; access-type="mail-server"; server="mailserv@ietf.org" Content-Type: text/plain Content-ID: <2006-6-29110614.I-D@ietf.org> ENCODING mime FILE /internet-drafts/draft-ietf-ltans-ltap-02.txt --OtherAccess Content-Type: Message/External-body; name="draft-ietf-ltans-ltap-02.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2006-6-29110614.I-D@ietf.org> --OtherAccess-- --NextPart-- Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5QBLbdb095883; Mon, 26 Jun 2006 04:21:37 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.13.5/8.13.5/Submit) id k5QBLbeH095882; Mon, 26 Jun 2006 04:21:37 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from EXVS01.ex.dslextreme.net (exvs01.ex.dslextreme.net [66.51.199.51]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5QBLaIw095860 for ; Mon, 26 Jun 2006 04:21:36 -0700 (MST) (envelope-from cwallace@orionsec.com) Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" X-MimeOLE: Produced By Microsoft Exchange V6.5 Subject: 66th IETF LTANS agenda slots Date: Mon, 26 Jun 2006 04:21:29 -0700 Message-ID: <82D5657AE1F54347A734BDD33637C879035DBBD2@EXVS01.ex.dslextreme.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: 66th IETF LTANS agenda slots Thread-Index: AcaZEqusgQDgLd1QS4mvGrCmZJGhjQ== From: "Carl Wallace" To: Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by balder-227.proper.com id k5QBLaIw095877 Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Folks, If anyone would like time on the agenda during the LTANS meeting in Montreal, please send a note to me and Tobias. We'll post a draft agenda later this week. Carl Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5JD7FTx068558; Mon, 19 Jun 2006 06:07:15 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.13.5/8.13.5/Submit) id k5JD7Fb2068557; Mon, 19 Jun 2006 06:07:15 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from ncsusraimge01.jnj.com (ncsusraimge01.jnj.com [148.177.2.21]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5JD7EW2068546 for ; Mon, 19 Jun 2006 06:07:14 -0700 (MST) (envelope-from RGuida@CORUS.JNJ.com) Received: from ncsusrawsa2.na.jnj.com ([10.4.21.2]) by ncsusraimge01.jnj.com (Switch-3.1.8/Switch-3.1.7) with SMTP id k5JD73VZ005823; Mon, 19 Jun 2006 09:07:07 -0400 (EDT) Received: from (10.4.20.168) by ncsusrawsa2.na.jnj.com via smtp id 25d5_5d82ab7a_ff96_11da_8a4b_0002b3ec9bcc; Mon, 19 Jun 2006 09:20:23 -0400 Received: by NCSUSRAEXIMS1.na.jnj.com with Internet Mail Service (5.5.2658.3) id ; Mon, 19 Jun 2006 09:07:03 -0400 Message-ID: <8C9266D8DEC7B3439D3A49E57068441008234EF6@jjcusnbexs4.na.jnj.com> From: "Guida, Richard [JJCUS]" To: "'Bill Russell'" , "'Tobias Gondrom'" , ietf-ltans@imc.org Subject: RE: Signed messages - test Date: Mon, 19 Jun 2006 09:07:01 -0400 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2658.3) MIME-Version: 1.0 Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0012_01C6937F.B9950A80" X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807 Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: This is a multi-part message in MIME format. ------=_NextPart_000_0012_01C6937F.B9950A80 Content-Type: multipart/alternative; boundary="----=_NextPart_001_0013_01C6937F.B99817C0" ------=_NextPart_001_0013_01C6937F.B99817C0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Yep - working perfectly. I should have suggested that myself - opaque signing usually causes this problem, I am negligent in not thinking deeply enough about what might have caused the problem. Richard A. Guida Director, Information Security Johnson & Johnson Room GS8217 410 George Street New Brunswick, New Jersey 08901 Phone: 732 524 3785 -----Original Message----- From: Bill Russell [mailto:russellwc@mountaireygroup.net] Sent: Monday, June 19, 2006 6:52 AM To: 'Tobias Gondrom'; 'Guida, Richard [JJCUS]'; ietf-ltans@imc.org Subject: RE: Signed messages - test Set to clear sign now. Let's see if that did the trick. Thanks, Bill _____ From: Tobias Gondrom [mailto:tgondrom@opentext.com] Sent: Monday, June 19, 2006 4:39 AM To: Guida, Richard [JJCUS]; Bill Russell; ietf-ltans@imc.org Subject: RE: Signed messages Importance: Low Bill, had the same problem (as Richard) with the one signed message you sent. With Richards' signed message it's working tine as are others. (probably just a configuration problem wit your client) Tobias _____ From: owner-ietf-ltans@mail.imc.org [mailto:owner-ietf-ltans@mail.imc.org] On Behalf Of Guida, Richard [JJCUS] Sent: Thursday, June 15, 2006 3:40 PM To: 'Bill Russell'; ietf-ltans@imc.org Subject: RE: Signed messages Bill - I also could not read your signed message - it came in with the blue encrypted icon. When I opened it using a hex editor, it was of course not encrypted - I could actually read your text - but for some reason, Outlook (at least my Outlook - both 2000 and 2003) was interpreting the SMIME package as encrypted and not decoding it properly. I do experience this problem (very infrequently) with incoming e-mail I will send a signed e-mail to the listserv shortly using my J&J cert and Outlook 2000 as the client, just for test purposes. Of course the signature will show up as invalid because you don't have my trusted root (it is publicly available on the internet through an SSL-secure site using a VeriSign cert, URL https://www.jnj.com/jjeds/index.html?secure=true, so don't be surprised when that happens. Richard A. Guida Director, Information Security Johnson & Johnson Room GS8217 410 George Street New Brunswick, New Jersey 08901 Phone: 732 524 3785 -----Original Message----- From: owner-ietf-ltans@mail.imc.org [mailto:owner-ietf-ltans@mail.imc.org]On Behalf Of Bill Russell Sent: Wednesday, June 14, 2006 10:36 PM To: ietf-ltans@imc.org Subject: Signed messages Has anyone else had any trouble sending signed messages to the listserv? I noticed Peter's are going through, but two of mine have gone out signed and get distributed as signed/encrypted (which my own client can't even read). I'm not sure if that is a product of using an Entrust plug-in rather than native S/MIME for Outlook, but just curious if anyone else has had any similar problems. Thanks, Bill Russell, CISSP, ISSAP Vice President Mount Airey Group, Inc. http://www.mountaireygroup.net Cell: 571-334-1671 Fax: 703-738-7715 ------=_NextPart_001_0013_01C6937F.B99817C0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Yep -=20 working perfectly.  I should have suggested that myself - opaque = signing=20 usually causes this problem, I am negligent in not thinking deeply = enough about=20 what might have caused the problem.
 

Richard A. Guida =
Director, Information Security

Johnson = &=20 Johnson
Room = GS8217=20
410 George Street
New Brunswick, New Jersey  08901
Phone:  732 524 3785

-----Original Message-----
From: Bill Russell=20 [mailto:russellwc@mountaireygroup.net]
Sent: Monday, June = 19, 2006=20 6:52 AM
To: 'Tobias Gondrom'; 'Guida, Richard [JJCUS]';=20 ietf-ltans@imc.org
Subject: RE: Signed messages -=20 test

Set to clear sign now.  Let's see if = that did the=20 trick.
 
Thanks,
Bill

From: Tobias Gondrom=20 [mailto:tgondrom@opentext.com]
Sent: Monday, June 19, 2006 = 4:39=20 AM
To: Guida, Richard [JJCUS]; Bill Russell;=20 ietf-ltans@imc.org
Subject: RE: Signed=20 messages
Importance: Low

Bill, had = the same=20 problem (as Richard) with the one signed message you=20 sent.

With = Richards’ signed=20 message it’s working tine as are = others.

(probably = just a=20 configuration problem wit your client)

 

Tobias

 

From: = owner-ietf-ltans@mail.imc.org=20 [mailto:owner-ietf-ltans@mail.imc.org] On=20 Behalf Of Guida, Richard [JJCUS]
Sent: Thursday, June 15, 2006 = 3:40=20 PM
To: 'Bill = Russell';=20 ietf-ltans@imc.org
Subject:=20 RE: Signed messages

 

Bill - I = also could=20 not read your signed message - it came in with the blue encrypted = icon. =20 When I opened it using a hex editor, it was of course not encrypted - = I could=20 actually read your text - but for some reason, Outlook (at least my = Outlook -=20 both 2000 and 2003) was interpreting the SMIME package as encrypted = and not=20 decoding it properly.  I do experience this problem (very = infrequently)=20 with incoming e-mail   I will send a signed e-mail to the = listserv=20 shortly using my J&J cert and Outlook 2000 as the client, just for = test=20 purposes.  Of course the signature will show up as invalid = because you=20 don't have my trusted root (it is publicly available on the internet = through=20 an SSL-secure site using a VeriSign cert, URL https://www.jnj.com/jjeds/index.html?secure=3Dtrue, so don't = be=20 surprised when that happens.

 

 

Richard A.=20 Guida
Director,=20 Information Security =

Johnson=20 & Johnson =
Room = GS8217
410 George=20 Street
New = Brunswick, New=20 Jersey  08901
Phone:  732 524=20 3785

-----Original=20 Message-----
From:=20 owner-ietf-ltans@mail.imc.org = [mailto:owner-ietf-ltans@mail.imc.org]On Behalf Of Bill = Russell
Sent: Wednesday, June 14, = 2006 10:36=20 PM
To:=20 ietf-ltans@imc.org
Subject:=20 Signed messages

Has anyone else had = any trouble=20 sending signed messages to the listserv?  I noticed Peter's are = going=20 through, but two of mine have gone out signed and get distributed as = signed/encrypted (which my own client can't even read).  I'm = not sure=20 if that is a product of using an Entrust plug-in rather than native = S/MIME=20 for Outlook, but just curious if anyone else has had any similar=20 problems.

 

Thanks,

 

Bill Russell, CISSP,=20 ISSAP

Vice=20 President

Mount Airey Group,=20 Inc.

http://www.mountaireygroup.net

Cell:=20 571-334-1671

Fax:=20 703-738-7715

 

 

<= /BLOCKQUOTE> ------=_NextPart_001_0013_01C6937F.B99817C0-- ------=_NextPart_000_0012_01C6937F.B9950A80 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMsjCCA7Aw ggMZoAMCAQICBDxXq94wDQYJKoZIhvcNAQEFBQAwdzELMAkGA1UEBhMCVVMxDDAKBgNVBAoTA0pO SjEjMCEGA1UECxMaSk5KIFB1YmxpYyBLZXkgQXV0aG9yaXRpZXMxNTAzBgNVBAMTLEpOSiBQcmlu Y2lwYWwgT25MaW5lIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTAxMTIxMjIxNTczNVoXDTA2 MTIxMTIxNTczNVowfTELMAkGA1UEBhMCVVMxDDAKBgNVBAoTA0pOSjESMBAGA1UECxMJRW1wbG95 ZWVzMQ8wDQYDVQQLEwYxNzE3MDkxFjAUBgNVBAMTDVJJQ0hBUkQgR1VJREExIzAhBgkqhkiG9w0B CQEWFFJHdWlkYUBDT1JVUy5KTkouY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCUAb1X gf4DB2UHZcJDSzAaU4uUEWu3LFQLuhev9lTFVBXjt/5RaSQ6ekE55AL+xqgbOqMr36zaNDr5bSWu fHsFI+aD8ODY+v1Jkw/rP/dlfJHWkbXUL60IRyNl0VTc9ab92Jf8YgCyxF3v6Wi2u9gbj6qvfgRW OX3Bwzi9Z1sgFQIDAQABo4IBQTCCAT0wHwYDVR0RBBgwFoEUUkd1aWRhQENPUlVTLkpOSi5jb20w DgYDVR0PAQH/BAQDAgQwMGIGA1UdIARbMFkwVwYLYIZIAYb4AgMCAQMwSDAqBggrBgEFBQcCARYe aHR0cDovL2pqZWRzY3BzLmpuai5jb20vY3AucGRmMBoGCCsGAQUFBwICMA4aDGNlcnRTb2Z0d2Fy ZTAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vamplZHNjcmwuam5qLmNvbS9wb2xjYS5jcmwwEQYJ YIZIAYb4QgEBBAQDAgUgMB8GA1UdJQQYMBYGCisGAQQBgjcKAwQGCCsGAQUFBwMEMB0GA1UdDgQW BBR7oqPyNZLeR/EOT/Wpz7D3pDyCEDAfBgNVHSMEGDAWgBTrP3LTphVRQO45ABi6TPJuzU+uxjAN BgkqhkiG9w0BAQUFAAOBgQArKFlO5Cw+Onb2XvomK39pGKHZhgzPHL8+cKQ/23xadl+AtLaFJZxK AJCAIvDLHdK00x2nTQqcWZyP2jd0TEazbWJ8tdsk5mxhu3P/+D/bFcYv0ApJaPBq6yX8auPqrjuV Ev9ZbA32teQTB5STCNt2VmcxWiZp8a3R0iPkjrQCXjCCA7owggMjoAMCAQICBDxXq90wDQYJKoZI hvcNAQEFBQAwdzELMAkGA1UEBhMCVVMxDDAKBgNVBAoTA0pOSjEjMCEGA1UECxMaSk5KIFB1Ymxp YyBLZXkgQXV0aG9yaXRpZXMxNTAzBgNVBAMTLEpOSiBQcmluY2lwYWwgT25MaW5lIENlcnRpZmlj YXRpb24gQXV0aG9yaXR5MB4XDTAxMTIxMjIxNTQ1NFoXDTA2MTIxMTIxNTQ1NFowfTELMAkGA1UE BhMCVVMxDDAKBgNVBAoTA0pOSjESMBAGA1UECxMJRW1wbG95ZWVzMQ8wDQYDVQQLEwYxNzE3MDkx FjAUBgNVBAMTDVJJQ0hBUkQgR1VJREExIzAhBgkqhkiG9w0BCQEWFFJHdWlkYUBDT1JVUy5KTkou Y29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC9NQ9n1rFwYOnrgkZru+WvEm5vxYMy8s9L X7lsWm031Yz4LBexxj1PHaR3gQG+lXw0KlJdflfLRsBJcf6zR/OgtFJSYQO6Erj551Bilj7V3sa/ syIaWCb9in1BMTCDi1527MpxhaWtpifONkcdTYvCUxcSkzD7561wrB8HPulxTwIDAQABo4IBSzCC AUcwHwYDVR0RBBgwFoEUUkd1aWRhQENPUlVTLkpOSi5jb20wDgYDVR0PAQH/BAQDAgbAMDIGA1Ud HwQrMCkwJ6AloCOGIWh0dHA6Ly9qamVkc2NybC5qbmouY29tL3BvbGNhLmNybDARBglghkgBhvhC AQEEBAMCBaAwYgYDVR0gBFswWTBXBgtghkgBhvgCAwIBBDBIMCoGCCsGAQUFBwIBFh5odHRwOi8v amplZHNjcHMuam5qLmNvbS9jcC5wZGYwGgYIKwYBBQUHAgIwDhoMY2VydEhhcmR3YXJlMCkGA1Ud JQQiMCAGCisGAQQBgjcUAgIGCCsGAQUFBwMCBggrBgEFBQcDBDAdBgNVHQ4EFgQU7s3lQNtc00F2 r1Oem9BgGxfYXhEwHwYDVR0jBBgwFoAU6z9y06YVUUDuOQAYukzybs1PrsYwDQYJKoZIhvcNAQEF BQADgYEAVrb4QfqYd0w6Iv3iUwG6giCw31bw4LhnjwgTQeNKD1gPPoA/jIhsXmfB/TdKhBlIqi5v FyM0+ZOyWQu8JJ/HvnjPl6rcf89VWz5jI0lw6iu3gGJZyiDJHJRcEmWlyC+oPOUi8umRV763FVTX XOoD806/ETmIgL/iPP3fPd5LjNMwggU8MIIEpaADAgECAgphJLZBAAAAAAAEMA0GCSqGSIb3DQEB BQUAMGsxCzAJBgNVBAYTAlVTMQwwCgYDVQQKEwNKTkoxIzAhBgNVBAsTGkpOSiBQdWJsaWMgS2V5 IEF1dGhvcml0aWVzMSkwJwYDVQQDEyBKTkogUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAe Fw0wNTA3MDcxOTI0NTRaFw0xNTA3MDUxMTI0NTRaMHcxCzAJBgNVBAYTAlVTMQwwCgYDVQQKEwNK TkoxIzAhBgNVBAsTGkpOSiBQdWJsaWMgS2V5IEF1dGhvcml0aWVzMTUwMwYDVQQDEyxKTkogUHJp bmNpcGFsIE9uTGluZSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCBnzANBgkqhkiG9w0BAQEFAAOB jQAwgYkCgYEAsuYeuKgfWKTUz2rW2IFHt9VLLoPMJlQk0KqRFJQLF/xJM5pfz6fVW1KS+ozG7RPH y1XnTtrP0R4/yk8Hh1o5bSGSHH1QH52vscDIJnAUX0CClnxfALl+HkyOyluxtFLH5lzmf1zduqqZ Dmt1dUoDVAI8csl6fCwoZ0mIh+uKD00CAwEAAaOCAtkwggLVMB0GA1UdDgQWBBTrP3LTphVRQO45 ABi6TPJuzU+uxjAfBgNVHSMEGDAWgBTLsdBFEC05nLwT9l3r4dQPIDK7dTAzBgNVHR8ELDAqMCig JqAkhiJodHRwOi8vamplZHNjcmwuam5qLmNvbS9yb290Y2EuY3JsMGcGCCsGAQUFBwEBBFswWTAm BggrBgEFBQcwAYYaaHR0cDovL2pqZWRzb2NzcDEuam5qLmNvbS8wLwYIKwYBBQUHMAKGI2h0dHA6 Ly9qamVkc2RhdGEuam5qLmNvbS9yb290Y2EucDdjMBIGA1UdEwEB/wQIMAYBAf8CAQAwDgYDVR0P AQH/BAQDAgEGMIIBzwYDVR0gBIIBxjCCAcIwDQYLYIZIAYb4AgMCAQAwDQYLYIZIAYb4AgMCAQEw DQYLYIZIAYb4AgMCAQIwDQYLYIZIAYb4AgMCAQMwDQYLYIZIAYb4AgMCAQQwDQYLYIZIAYb4AgMC AQUwDQYLYIZIAYb4AgMCAQYwDQYLYIZIAYb4AgMCAQcwDQYLYIZIAYb4AgMCAQgwDQYLYIZIAYb4 AgMCAQkwDQYLYIZIAYb4AgMCAQowDQYLYIZIAYb4AgMCAQswDQYLYIZIAYb4AgMCAQwwDQYLYIZI AYb4AgMCAQ0wDQYLYIZIAYb4AgMCAQ4wDQYLYIZIAYb4AgMCAQ8wDQYLYIZIAYb4AgMCARAwDQYL YIZIAYb4AgMCAREwDQYLYIZIAYb4AgMCARIwDQYLYIZIAYb4AgMCARMwDQYLYIZIAYb4AgMCARQw DQYLYIZIAYb4AgMCARUwDQYLYIZIAYb4AgMCARYwDQYLYIZIAYb4AgMCARcwDQYLYIZIAYb4AgMC ARgwDQYLYIZIAYb4AgMCARkwDQYLYIZIAYb4AgMCARowDQYLYIZIAYb4AgMCARswDQYLYIZIAYb4 AgMCARwwDQYLYIZIAYb4AgMCAR0wDQYJKoZIhvcNAQEFBQADgYEAQdVmnm/Pn39odmUYOVWhPDHR P+x/dGm8tD/5MQ+HFDKZ33ytEe9KZFtNsv8wxUo6LZJkKsLPRpH4mce74c+VKVo5v08GJ8oAqdOv w1Mv6+ICNyfAupHKSTgy+bxzU38xmwgi8EHy+VfXUNPI2mNaVLdvMpiW86eKKjrDbDg4MQ8xggL3 MIIC8wIBATB/MHcxCzAJBgNVBAYTAlVTMQwwCgYDVQQKEwNKTkoxIzAhBgNVBAsTGkpOSiBQdWJs aWMgS2V5IEF1dGhvcml0aWVzMTUwMwYDVQQDEyxKTkogUHJpbmNpcGFsIE9uTGluZSBDZXJ0aWZp Y2F0aW9uIEF1dGhvcml0eQIEPFer3TAJBgUrDgMCGgUAoIIBzjAYBgkqhkiG9w0BCQMxCwYJKoZI hvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0wNjA2MTkxMzA3MDFaMCMGCSqGSIb3DQEJBDEWBBTZVNBZ 3kiebsyeswRtLTQWotuNeDBJBgkqhkiG9w0BCQ8xPDA6MAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMC AgIAgDAHBgUrDgMCBzAHBgUrDgMCGjAKBggqhkiG9w0CBTCBjwYJKwYBBAGCNxAEMYGBMH8wdzEL MAkGA1UEBhMCVVMxDDAKBgNVBAoTA0pOSjEjMCEGA1UECxMaSk5KIFB1YmxpYyBLZXkgQXV0aG9y aXRpZXMxNTAzBgNVBAMTLEpOSiBQcmluY2lwYWwgT25MaW5lIENlcnRpZmljYXRpb24gQXV0aG9y aXR5AgQ8V6veMIGRBgsqhkiG9w0BCRACCzGBgaB/MHcxCzAJBgNVBAYTAlVTMQwwCgYDVQQKEwNK TkoxIzAhBgNVBAsTGkpOSiBQdWJsaWMgS2V5IEF1dGhvcml0aWVzMTUwMwYDVQQDEyxKTkogUHJp bmNpcGFsIE9uTGluZSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eQIEPFer3jANBgkqhkiG9w0BAQEF AASBgJddfF7iqeVTrcbgBr/xcPig9Rhm0MreTYQtZU0tx+cbRZB1n/jQLT3KeB+hllfQbnaN8B9z uXOV+F1t/a+jAfbjRrcYhxqLUogMnNU84cHbBLg13jpe1+Jg8nGD5qAyORZiE+g3dJFiSOhqJ/CR hFO3BPn8XiYT5qfAOan92T0cAAAAAAAA ------=_NextPart_000_0012_01C6937F.B9950A80-- Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5JApnaj046764; Mon, 19 Jun 2006 03:51:49 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.13.5/8.13.5/Submit) id k5JApnHY046763; Mon, 19 Jun 2006 03:51:49 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from mta13.adelphia.net (mta13.mail.adelphia.net [68.168.78.44]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5JAplBM046755 for ; Mon, 19 Jun 2006 03:51:47 -0700 (MST) (envelope-from russellwc@mountaireygroup.net) Received: from mocha ([69.175.246.32]) by mta13.adelphia.net (InterMail vM.6.01.05.02 201-2131-123-102-20050715) with ESMTP id <20060619105140.RUT10985.mta13.adelphia.net@mocha>; Mon, 19 Jun 2006 06:51:40 -0400 From: "Bill Russell" To: "'Tobias Gondrom'" , "'Guida, Richard [JJCUS]'" , Subject: RE: Signed messages - test Date: Mon, 19 Jun 2006 06:51:45 -0400 MIME-Version: 1.0 X-Mailer: Microsoft Office Outlook, Build 11.0.6353 Thread-Index: AcaQgtyRKbepW95VSqKNHk2PUI5jkgC5w+wAAAkUxZA= In-Reply-To: <2666EB2A846BAC4BB2D7F593301A78683C5E8C@MUCXGC2.opentext.net> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869 Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="--=_NextPart_DJD_34442552.065144218" Message-Id: <20060619105140.RUT10985.mta13.adelphia.net@mocha> Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: This is a multi-part message in MIME format. ----=_NextPart_DJD_34442552.065144218 Content-Type: multipart/alternative; boundary="--=_NextPart_DJD_34442552.065144088" ----=_NextPart_DJD_34442552.065144088 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: base64 U2V0IHRvIGNsZWFyIHNpZ24gbm93LiAgTGV0J3Mgc2VlIGlmIHRoYXQgZGlkIHRo ZSB0cmljay4NCiANClRoYW5rcywNCkJpbGwNCg0KICBfX19fXyAgDQoNCkZyb206 IFRvYmlhcyBHb25kcm9tIFttYWlsdG86dGdvbmRyb21Ab3BlbnRleHQuY29tXSAN ClNlbnQ6IE1vbmRheSwgSnVuZSAxOSwgMjAwNiA0OjM5IEFNDQpUbzogR3VpZGEs IFJpY2hhcmQgW0pKQ1VTXTsgQmlsbCBSdXNzZWxsOyBpZXRmLWx0YW5zQGltYy5v cmcNClN1YmplY3Q6IFJFOiBTaWduZWQgbWVzc2FnZXMNCkltcG9ydGFuY2U6IExv dw0KDQoNCg0KQmlsbCwgaGFkIHRoZSBzYW1lIHByb2JsZW0gKGFzIFJpY2hhcmQp IHdpdGggdGhlIG9uZSBzaWduZWQgbWVzc2FnZSB5b3Ugc2VudC4NCg0KV2l0aCBS aWNoYXJkc5Igc2lnbmVkIG1lc3NhZ2UgaXSScyB3b3JraW5nIHRpbmUgYXMgYXJl IG90aGVycy4NCg0KKHByb2JhYmx5IGp1c3QgYSBjb25maWd1cmF0aW9uIHByb2Js ZW0gd2l0IHlvdXIgY2xpZW50KQ0KDQogDQoNClRvYmlhcw0KDQogDQoNCiAgX19f X18gIA0KDQpGcm9tOiBvd25lci1pZXRmLWx0YW5zQG1haWwuaW1jLm9yZyBbbWFp bHRvOm93bmVyLWlldGYtbHRhbnNAbWFpbC5pbWMub3JnXSBPbiBCZWhhbGYgT2Yg R3VpZGEsIFJpY2hhcmQgW0pKQ1VTXQ0KU2VudDogVGh1cnNkYXksIEp1bmUgMTUs IDIwMDYgMzo0MCBQTQ0KVG86ICdCaWxsIFJ1c3NlbGwnOyBpZXRmLWx0YW5zQGlt Yy5vcmcNClN1YmplY3Q6IFJFOiBTaWduZWQgbWVzc2FnZXMNCg0KIA0KDQpCaWxs IC0gSSBhbHNvIGNvdWxkIG5vdCByZWFkIHlvdXIgc2lnbmVkIG1lc3NhZ2UgLSBp dCBjYW1lIGluIHdpdGggdGhlIGJsdWUgZW5jcnlwdGVkIGljb24uICBXaGVuIEkg b3BlbmVkIGl0IHVzaW5nIGEgaGV4IGVkaXRvciwgaXQgd2FzIG9mIGNvdXJzZSBu b3QgZW5jcnlwdGVkIC0gSSBjb3VsZCBhY3R1YWxseSByZWFkIHlvdXIgdGV4dCAt IGJ1dCBmb3Igc29tZSByZWFzb24sIE91dGxvb2sgKGF0IGxlYXN0IG15IE91dGxv b2sgLSBib3RoIDIwMDAgYW5kIDIwMDMpIHdhcyBpbnRlcnByZXRpbmcgdGhlIFNN SU1FIHBhY2thZ2UgYXMgZW5jcnlwdGVkIGFuZCBub3QgZGVjb2RpbmcgaXQgcHJv cGVybHkuICBJIGRvIGV4cGVyaWVuY2UgdGhpcyBwcm9ibGVtICh2ZXJ5IGluZnJl cXVlbnRseSkgd2l0aCBpbmNvbWluZyBlLW1haWwgICBJIHdpbGwgc2VuZCBhIHNp Z25lZCBlLW1haWwgdG8gdGhlIGxpc3RzZXJ2IHNob3J0bHkgdXNpbmcgbXkgSiZK IGNlcnQgYW5kIE91dGxvb2sgMjAwMCBhcyB0aGUgY2xpZW50LCBqdXN0IGZvciB0 ZXN0IHB1cnBvc2VzLiAgT2YgY291cnNlIHRoZSBzaWduYXR1cmUgd2lsbCBzaG93 IHVwIGFzIGludmFsaWQgYmVjYXVzZSB5b3UgZG9uJ3QgaGF2ZSBteSB0cnVzdGVk IHJvb3QgKGl0IGlzIHB1YmxpY2x5IGF2YWlsYWJsZSBvbiB0aGUgaW50ZXJuZXQg dGhyb3VnaCBhbiBTU0wtc2VjdXJlIHNpdGUgdXNpbmcgYSBWZXJpU2lnbiBjZXJ0 LCBVUkwgaHR0cHM6Ly93d3cuam5qLmNvbS9qamVkcy9pbmRleC5odG1sP3NlY3Vy ZT10cnVlLCBzbyBkb24ndCBiZSBzdXJwcmlzZWQgd2hlbiB0aGF0IGhhcHBlbnMu DQoNCiANCg0KIA0KDQpSaWNoYXJkIEEuIEd1aWRhIA0KRGlyZWN0b3IsIEluZm9y bWF0aW9uIFNlY3VyaXR5IA0KDQpKb2huc29uICYgSm9obnNvbiANClJvb20gR1M4 MjE3IA0KNDEwIEdlb3JnZSBTdHJlZXQgDQpOZXcgQnJ1bnN3aWNrLCBOZXcgSmVy c2V5ICAwODkwMSANClBob25lOiAgNzMyIDUyNCAzNzg1IA0KDQotLS0tLU9yaWdp bmFsIE1lc3NhZ2UtLS0tLQ0KRnJvbTogb3duZXItaWV0Zi1sdGFuc0BtYWlsLmlt Yy5vcmcgW21haWx0bzpvd25lci1pZXRmLWx0YW5zQG1haWwuaW1jLm9yZ11PbiBC ZWhhbGYgT2YgQmlsbCBSdXNzZWxsDQpTZW50OiBXZWRuZXNkYXksIEp1bmUgMTQs IDIwMDYgMTA6MzYgUE0NClRvOiBpZXRmLWx0YW5zQGltYy5vcmcNClN1YmplY3Q6 IFNpZ25lZCBtZXNzYWdlcw0KDQpIYXMgYW55b25lIGVsc2UgaGFkIGFueSB0cm91 YmxlIHNlbmRpbmcgc2lnbmVkIG1lc3NhZ2VzIHRvIHRoZSBsaXN0c2Vydj8gIEkg bm90aWNlZCBQZXRlcidzIGFyZSBnb2luZyB0aHJvdWdoLCBidXQgdHdvIG9mIG1p bmUgaGF2ZSBnb25lIG91dCBzaWduZWQgYW5kIGdldCBkaXN0cmlidXRlZCBhcyBz aWduZWQvZW5jcnlwdGVkICh3aGljaCBteSBvd24gY2xpZW50IGNhbid0IGV2ZW4g cmVhZCkuICBJJ20gbm90IHN1cmUgaWYgdGhhdCBpcyBhIHByb2R1Y3Qgb2YgdXNp bmcgYW4gRW50cnVzdCBwbHVnLWluIHJhdGhlciB0aGFuIG5hdGl2ZSBTL01JTUUg Zm9yIE91dGxvb2ssIGJ1dCBqdXN0IGN1cmlvdXMgaWYgYW55b25lIGVsc2UgaGFz IGhhZCBhbnkgc2ltaWxhciBwcm9ibGVtcy4NCg0KIA0KDQpUaGFua3MsDQoNCiAN Cg0KQmlsbCBSdXNzZWxsLCBDSVNTUCwgSVNTQVANCg0KVmljZSBQcmVzaWRlbnQN Cg0KTW91bnQgQWlyZXkgR3JvdXAsIEluYy4NCg0KaHR0cDovL3d3dy5tb3VudGFp cmV5Z3JvdXAubmV0DQoNCkNlbGw6IDU3MS0zMzQtMTY3MQ0KDQpGYXg6IDcwMy03 MzgtNzcxNQ0KDQogDQoNCiANCg0K ----=_NextPart_DJD_34442552.065144088 Content-Type: text/html; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable <=21DOCTYPE HTML PUBLIC =22-//W3C//DTD HTML 4.0 Transitional//EN=22> <=21--=5Bif =21m= so=5D> <=21=5Bendif=5D-->
Set to clear sign now.  Let's see if that did the=20 trick.
 
Thanks,
Bill

From: Tobias Gondrom=20 =5Bmailto:tgondrom=40opentext.com=5D
Sent: Monday, June 19, 2006 4:3= 9=20 AM
To: Guida, Richard =5BJJCUS=5D; Bill Russell;=20 ietf-ltans=40imc.org
Subject: RE: Signed messages
Importance= :=20 Low

Bill, had the same= =20 problem (as Richard) with the one signed message you=20 sent.

With Richards&=23= 8217; signed=20 message it&=238217;s working tine as are others.

(probably just a=20 configuration problem wit your client)

 

Tobias

 

From: owner-ietf-ltans=40mail.i= mc.org=20 =5Bmailto:owner-ietf-ltans=40mail.imc.org=5D On=20 Behalf Of Guida, Richard =5BJJCUS=5D
Sent: Thursday, June 15, 2006 3:40=20 PM
To: 'Bill Russell';= =20 ietf-ltans=40imc.org
Subject: RE:=20 Signed messages

 

Bill - I also could= not=20 read your signed message - it came in with the blue encrypted icon.  When I=20 opened it using a hex editor, it was of course not encrypted - I could actually=20 read your text - but for some reason, Outlook (at least my Outlook - both 2000=20 and 2003) was interpreting the SMIME package as encrypted and not decoding it=20 properly.  I do experience this problem (very infrequently) with incoming=20 e-mail   I will send a signed e-mail to the listserv shortly using my=20 J&J cert and Outlook 2000 as the client, just for test purposes.  Of=20 course the signature will show up as invalid because you don't have my trusted=20 root (it is publicly available on the internet through an SSL-secure site using=20 a VeriSign cert, URL https://www.jnj.com/jjeds/index.html?secure=3Dtrue, so don't be surpr= ised=20 when that happens.

 

 

Richard A.= =20 Guida
Director,= =20 Information Security =

Johnson=20 & Johnson
= Room=20 GS8217
410 George=20 Street
New Brunswick, N= ew=20 Jersey  08901
= Phone: =20 732 524 3785

-----Origina= l=20 Message-----
From:=20 owner-ietf-ltans=40mail.imc.org =5Bmailto:owner-ietf-ltans=40mail.imc.org= =5DOn Behalf Of Bill Russell
Sent: Wednesday, June 14, 2006 10:3= 6=20 PM
To:=20 ietf-ltans=40imc.org
Subject:<= /SPAN>=20 Signed messages

Has anyone else had any troubl= e=20 sending signed messages to the listserv?  I noticed Peter's are going=20 through, but two of mine have gone out signed and get distributed as=20 signed/encrypted (which my own client can't even read).  I'm not sure if=20 that is a product of using an Entrust plug-in rather than native S/MIME for=20 Outlook, but just curious if anyone else has had any similar=20 problems.

 

Thanks,

 

<=21= -- Converted from text/rtf format -->

Bill Russell, CISSP,=20 ISSAP=

Vice=20 President=

Mount Airey Group,=20 Inc.=

http://www.mountaireygroup.net

Cell:=20 571-334-1671<= /P>

Fax:=20 703-738-7715<= /P>

 

 

----=_NextPart_DJD_34442552.065144088 Content-Type: application/rtf Content-Transfer-Encoding: base64 e1xydGYxXGFuc2lcYW5zaWNwZzEyNTJcZnJvbWh0bWwxIFxkZWZmMHtcZm9udHRi bA0Ke1xmMFxmc3dpc3NcZmNoYXJzZXQwIEFyaWFsO30NCntcZjFcZm1vZGVybiBD b3VyaWVyIE5ldzt9DQp7XGYyXGZuaWxcZmNoYXJzZXQyIFN5bWJvbDt9DQp7XGYz XGZtb2Rlcm5cZmNoYXJzZXQwIENvdXJpZXIgTmV3O30NCntcZjRcZnN3aXNzXGZj aGFyc2V0MCBBcmlhbDt9DQp7XGY1XGZzd2lzcyBUYWhvbWE7fQ0Ke1xmNlxmc3dp c3NcZmNoYXJzZXQwIFRpbWVzIE5ldyBSb21hbjt9fQ0Ke1xjb2xvcnRibFxyZWQw XGdyZWVuMFxibHVlMDtccmVkMFxncmVlbjBcYmx1ZTI1NTtccmVkMFxncmVlbjBc Ymx1ZTI1NTtccmVkMFxncmVlbjBcYmx1ZTEyODtccmVkMjU1XGdyZWVuMFxibHVl MDt9DQpcdWMxXHBhcmRccGxhaW5cZGVmdGFiMzYwIFxmMFxmczI0IA0Ke1wqXGh0 bWx0YWcyNDMgPCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1M IDQuMCBUcmFuc2l0aW9uYWwvL0VOIj59DQp7XCpcaHRtbHRhZzMgXHBhciB9DQp7 XCpcaHRtbHRhZzE5IDxIVE1MIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy9UUi9S RUMtaHRtbDQwIiB4bWxuczp2ID0gXHBhciAidXJuOnNjaGVtYXMtbWljcm9zb2Z0 LWNvbTp2bWwiIHhtbG5zOm8gPSBccGFyICJ1cm46c2NoZW1hcy1taWNyb3NvZnQt Y29tOm9mZmljZTpvZmZpY2UiIHhtbG5zOncgPSBccGFyICJ1cm46c2NoZW1hcy1t aWNyb3NvZnQtY29tOm9mZmljZTp3b3JkIj59DQp7XCpcaHRtbHRhZzM0IDxIRUFE Pn0NCntcKlxodG1sdGFnMSBccGFyIH0NCntcKlxodG1sdGFnMSBccGFyIH0NCntc KlxodG1sdGFnMTYxIDxNRVRBIGNvbnRlbnQ9Ik1TSFRNTCA2LjAwLjI5MDAuMjkx MiIgbmFtZT1HRU5FUkFUT1I+fQ0Ke1wqXGh0bWx0YWcyNDEgPCEtLVtpZiAhbXNv XT5ccGFyIDxTVFlMRT52XFw6KiBce1xwYXIgXHRhYiBCRUhBVklPUjogdXJsKCNk ZWZhdWx0I1ZNTClccGFyIFx9XHBhciBvXFw6KiBce1xwYXIgXHRhYiBCRUhBVklP UjogdXJsKCNkZWZhdWx0I1ZNTClccGFyIFx9XHBhciB3XFw6KiBce1xwYXIgXHRh YiBCRUhBVklPUjogdXJsKCNkZWZhdWx0I1ZNTClccGFyIFx9XHBhciAuc2hhcGUg XHtccGFyIFx0YWIgQkVIQVZJT1I6IHVybCgjZGVmYXVsdCNWTUwpXHBhciBcfVxw YXIgPC9TVFlMRT5ccGFyIDwhW2VuZGlmXS0tPn0NCntcKlxodG1sdGFnMSBccGFy IH0NCntcKlxodG1sdGFnMjQxIDxTVFlMRT59DQp7XCpcaHRtbHRhZzI0MSBAZm9u dC1mYWNlIFx7XHBhciBcdGFiIGZvbnQtZmFtaWx5OiBUYWhvbWE7XHBhciBcfVxw YXIgQHBhZ2UgU2VjdGlvbjEgXHtzaXplOiA1OTUuM3B0IDg0MS45cHQ7IG1hcmdp bjogNzAuODVwdCA3MC44NXB0IDIuMGNtIDcwLjg1cHQ7IFx9XHBhciBQLk1zb05v cm1hbCBce1xwYXIgXHRhYiBGT05ULVNJWkU6IDEycHQ7IE1BUkdJTjogMGNtIDBj bSAwcHQ7IEZPTlQtRkFNSUxZOiAiVGltZXMgTmV3IFJvbWFuIlxwYXIgXH1ccGFy IExJLk1zb05vcm1hbCBce1xwYXIgXHRhYiBGT05ULVNJWkU6IDEycHQ7IE1BUkdJ TjogMGNtIDBjbSAwcHQ7IEZPTlQtRkFNSUxZOiAiVGltZXMgTmV3IFJvbWFuIlxw YXIgXH1ccGFyIERJVi5Nc29Ob3JtYWwgXHtccGFyIFx0YWIgRk9OVC1TSVpFOiAx MnB0OyBNQVJHSU46IDBjbSAwY20gMHB0OyBGT05ULUZBTUlMWTogIlRpbWVzIE5l dyBSb21hbiJccGFyIFx9XHBhciBBOmxpbmsgXHtccGFyIFx0YWIgQ09MT1I6IGJs dWU7IFRFWFQtREVDT1JBVElPTjogdW5kZXJsaW5lXHBhciBcfVxwYXIgU1BBTi5N c29IeXBlcmxpbmsgXHtccGFyIFx0YWIgQ09MT1I6IGJsdWU7IFRFWFQtREVDT1JB VElPTjogdW5kZXJsaW5lXHBhciBcfVxwYXIgQTp2aXNpdGVkIFx7XHBhciBcdGFi IENPTE9SOiBibHVlOyBURVhULURFQ09SQVRJT046IHVuZGVybGluZVxwYXIgXH1c cGFyIFNQQU4uTXNvSHlwZXJsaW5rRm9sbG93ZWQgXHtccGFyIFx0YWIgQ09MT1I6 IGJsdWU7IFRFWFQtREVDT1JBVElPTjogdW5kZXJsaW5lXHBhciBcfVxwYXIgUCBc e1xwYXIgXHRhYiBGT05ULVNJWkU6IDEycHQ7IE1BUkdJTi1MRUZUOiAwY207IE1B UkdJTi1SSUdIVDogMGNtOyBGT05ULUZBTUlMWTogIlRpbWVzIE5ldyBSb21hbiI7 IG1zby1tYXJnaW4tdG9wLWFsdDogYXV0bzsgbXNvLW1hcmdpbi1ib3R0b20tYWx0 OiBhdXRvXHBhciBcfVxwYXIgU1BBTi5FbWFpbFN0eWxlMTggXHtccGFyIFx0YWIg Q09MT1I6IG5hdnk7IEZPTlQtRkFNSUxZOiBBcmlhbDsgbXNvLXN0eWxlLXR5cGU6 IHBlcnNvbmFsLXJlcGx5XHBhciBcfVxwYXIgRElWLlNlY3Rpb24xIFx7XHBhciBc dGFiIHBhZ2U6IFNlY3Rpb24xXHBhciBcfVxwYXIgfQ0Ke1wqXGh0bWx0YWcyNDkg PC9TVFlMRT59DQp7XCpcaHRtbHRhZzEgXHBhciB9DQp7XCpcaHRtbHRhZzQxIDwv SEVBRD59DQp7XCpcaHRtbHRhZzIgXHBhciB9DQp7XCpcaHRtbHRhZzUwIDxCT0RZ IGxhbmc9REUgdkxpbms9Ymx1ZSBsaW5rPWJsdWU+fVxodG1scnRmIFxsYW5nMTAz MSBcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzAgXHBhciB9DQp7XCpcaHRtbHRhZzk2 IDxESVYgZGlyPWx0ciBhbGlnbj1sZWZ0Pn1caHRtbHJ0ZiB7XGx0cnBhclxsdHJj aFxxbCBccWwgXGh0bWxydGYwIHtcKlxodG1sdGFnNjR9XGh0bWxydGYge1xodG1s cnRmMCANCntcKlxodG1sdGFnODQgPFNQQU4gY2xhc3M9NDMyNTg1MDEwLTE5MDYy MDA2Pn1caHRtbHJ0ZiB7XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcxNDggPEZPTlQg ZmFjZT1BcmlhbCBccGFyIGNvbG9yPSMwMDAwZmYgc2l6ZT0yPn1caHRtbHJ0ZiB7 XGY0IFxjZjIgXGZzMjAgXGh0bWxydGYwIFNldCB0byBjbGVhciBzaWduIG5vdy4N CntcKlxodG1sdGFnODQgJm5ic3A7fVxodG1scnRmIFwnYTBcaHRtbHJ0ZjAgIExl dCdzIHNlZSBpZiB0aGF0IGRpZCB0aGUgDQp7XCpcaHRtbHRhZzQgXHBhciB9dHJp Y2suDQp7XCpcaHRtbHRhZzE1NiA8L0ZPTlQ+fVxodG1scnRmIH1caHRtbHJ0ZjAg DQp7XCpcaHRtbHRhZzkyIDwvU1BBTj59XGh0bWxydGYgfVxodG1scnRmMCB7XCpc aHRtbHRhZzcyfVxodG1scnRmXHBhcn1caHRtbHJ0ZjANCg0Ke1wqXGh0bWx0YWcx MDQgPC9ESVY+fVxodG1scnRmIH1caHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzAgXHBh ciB9DQp7XCpcaHRtbHRhZzk2IDxESVYgZGlyPWx0ciBhbGlnbj1sZWZ0Pn1caHRt bHJ0ZiB7XGx0cnBhclxsdHJjaFxxbCBccWwgXGh0bWxydGYwIHtcKlxodG1sdGFn NjR9XGh0bWxydGYge1xodG1scnRmMCANCntcKlxodG1sdGFnODQgPFNQQU4gY2xh c3M9NDMyNTg1MDEwLTE5MDYyMDA2Pn1caHRtbHJ0ZiB7XGh0bWxydGYwIA0Ke1wq XGh0bWx0YWcxNDggPEZPTlQgZmFjZT1BcmlhbCBccGFyIGNvbG9yPSMwMDAwZmYg c2l6ZT0yPn1caHRtbHJ0ZiB7XGY0IFxjZjIgXGZzMjAgXGh0bWxydGYwIA0Ke1wq XGh0bWx0YWcxNTYgPC9GT05UPn1caHRtbHJ0ZiB9XGh0bWxydGYwIA0Ke1wqXGh0 bWx0YWc5MiA8L1NQQU4+fVxodG1scnRmIH1caHRtbHJ0ZjAgDQp7XCpcaHRtbHRh Zzg0ICZuYnNwO31caHRtbHJ0ZiBcJ2EwXGh0bWxydGYwIHtcKlxodG1sdGFnNzJ9 XGh0bWxydGZccGFyfVxodG1scnRmMA0KDQp7XCpcaHRtbHRhZzEwNCA8L0RJVj59 XGh0bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnMCBccGFyIH0NCntcKlxo dG1sdGFnOTYgPERJViBkaXI9bHRyIGFsaWduPWxlZnQ+fVxodG1scnRmIHtcbHRy cGFyXGx0cmNoXHFsIFxxbCBcaHRtbHJ0ZjAge1wqXGh0bWx0YWc2NH1caHRtbHJ0 ZiB7XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc4NCA8U1BBTiBjbGFzcz00MzI1ODUw MTAtMTkwNjIwMDY+fVxodG1scnRmIHtcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzE0 OCA8Rk9OVCBmYWNlPUFyaWFsIFxwYXIgY29sb3I9IzAwMDBmZiBzaXplPTI+fVxo dG1scnRmIHtcZjQgXGNmMiBcZnMyMCBcaHRtbHJ0ZjAgVGhhbmtzLA0Ke1wqXGh0 bWx0YWcxNTYgPC9GT05UPn1caHRtbHJ0ZiB9XGh0bWxydGYwIA0Ke1wqXGh0bWx0 YWc5MiA8L1NQQU4+fVxodG1scnRmIH1caHRtbHJ0ZjAge1wqXGh0bWx0YWc3Mn1c aHRtbHJ0ZlxwYXJ9XGh0bWxydGYwDQoNCntcKlxodG1sdGFnMTA0IDwvRElWPn1c aHRtbHJ0ZiB9XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcwIFxwYXIgfQ0Ke1wqXGh0 bWx0YWc5NiA8RElWIGRpcj1sdHIgYWxpZ249bGVmdD59XGh0bWxydGYge1xsdHJw YXJcbHRyY2hccWwgXHFsIFxodG1scnRmMCB7XCpcaHRtbHRhZzY0fVxodG1scnRm IHtcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzg0IDxTUEFOIGNsYXNzPTQzMjU4NTAx MC0xOTA2MjAwNj59XGh0bWxydGYge1xodG1scnRmMCANCntcKlxodG1sdGFnMTQ4 IDxGT05UIGZhY2U9QXJpYWwgXHBhciBjb2xvcj0jMDAwMGZmIHNpemU9Mj59XGh0 bWxydGYge1xmNCBcY2YyIFxmczIwIFxodG1scnRmMCBCaWxsDQp7XCpcaHRtbHRh ZzE1NiA8L0ZPTlQ+fVxodG1scnRmIH1caHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzky IDwvU1BBTj59XGh0bWxydGYgfVxodG1scnRmMCB7XCpcaHRtbHRhZzcyfVxodG1s cnRmXHBhcn1caHRtbHJ0ZjANCg0Ke1wqXGh0bWx0YWcxMDQgPC9ESVY+fVxodG1s cnRmIH1caHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzExMiA8QlI+fVxodG1scnRmIFxw YXINClxodG1scnRmMCANCntcKlxodG1sdGFnMCBccGFyIH0NCntcKlxodG1sdGFn OTYgPERJViBjbGFzcz1PdXRsb29rTWVzc2FnZUhlYWRlciBsYW5nPWVuLXVzIGRp cj1sdHIgYWxpZ249bGVmdD59XGh0bWxydGYge1xsYW5nMTAzMyBcbHRycGFyXGx0 cmNoXHFsIFxxbCBcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzAgXHBhciB9DQp7XCpc aHRtbHRhZzk2IDxIUiB0YWJJbmRleD0tMT59XGh0bWxydGYge1xmMVxxY1xxalx1 bGRiIFx+IF9fX19fIFx+XGxpbmVccGFyfQ0KXGh0bWxydGYwIA0Ke1wqXGh0bWx0 YWcwIFxwYXIgfXtcKlxodG1sdGFnNjR9XGh0bWxydGYge1xodG1scnRmMCANCntc KlxodG1sdGFnMTQ4IDxGT05UIGZhY2U9VGFob21hIHNpemU9Mj59XGh0bWxydGYg e1xmNSBcZnMyMCBcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzg0IDxCPn1caHRtbHJ0 ZiB7XGIgXGh0bWxydGYwIEZyb206DQp7XCpcaHRtbHRhZzkyIDwvQj59XGh0bWxy dGYgfVxodG1scnRmMCAgVG9iaWFzIEdvbmRyb20gDQp7XCpcaHRtbHRhZzQgXHBh ciB9W21haWx0bzp0Z29uZHJvbUBvcGVudGV4dC5jb21dIA0Ke1wqXGh0bWx0YWcx MTYgPEJSPn1caHRtbHJ0ZiBcbGluZQ0KXGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc4 NCA8Qj59XGh0bWxydGYge1xiIFxodG1scnRmMCBTZW50Og0Ke1wqXGh0bWx0YWc5 MiA8L0I+fVxodG1scnRmIH1caHRtbHJ0ZjAgIE1vbmRheSwgSnVuZSAxOSwgMjAw NiA0OjM5IA0Ke1wqXGh0bWx0YWc0IFxwYXIgfUFNDQp7XCpcaHRtbHRhZzExNiA8 QlI+fVxodG1scnRmIFxsaW5lDQpcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzg0IDxC Pn1caHRtbHJ0ZiB7XGIgXGh0bWxydGYwIFRvOg0Ke1wqXGh0bWx0YWc5MiA8L0I+ fVxodG1scnRmIH1caHRtbHJ0ZjAgIEd1aWRhLCBSaWNoYXJkIFtKSkNVU107IEJp bGwgUnVzc2VsbDsgDQp7XCpcaHRtbHRhZzQgXHBhciB9aWV0Zi1sdGFuc0BpbWMu b3JnDQp7XCpcaHRtbHRhZzExNiA8QlI+fVxodG1scnRmIFxsaW5lDQpcaHRtbHJ0 ZjAgDQp7XCpcaHRtbHRhZzg0IDxCPn1caHRtbHJ0ZiB7XGIgXGh0bWxydGYwIFN1 YmplY3Q6DQp7XCpcaHRtbHRhZzkyIDwvQj59XGh0bWxydGYgfVxodG1scnRmMCAg UkU6IFNpZ25lZCBtZXNzYWdlcw0Ke1wqXGh0bWx0YWcxMTYgPEJSPn1caHRtbHJ0 ZiBcbGluZQ0KXGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc4NCA8Qj59XGh0bWxydGYg e1xiIFxodG1scnRmMCBJbXBvcnRhbmNlOg0Ke1wqXGh0bWx0YWc5MiA8L0I+fVxo dG1scnRmIH1caHRtbHJ0ZjAgIA0Ke1wqXGh0bWx0YWc0IFxwYXIgfUxvdw0Ke1wq XGh0bWx0YWcxMTYgPEJSPn1caHRtbHJ0ZiBcbGluZQ0KXGh0bWxydGYwIA0Ke1wq XGh0bWx0YWcxNTYgPC9GT05UPn1caHRtbHJ0ZiB9XGh0bWxydGYwIA0Ke1wqXGh0 bWx0YWcxMTYgPEJSPn1caHRtbHJ0ZiBcbGluZQ0KXGh0bWxydGYwIHtcKlxodG1s dGFnNzJ9XGh0bWxydGZccGFyfVxodG1scnRmMA0KDQp7XCpcaHRtbHRhZzEwNCA8 L0RJVj59XGh0bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnMCBccGFyIH0N CntcKlxodG1sdGFnOTYgPERJVj59XGh0bWxydGYge1xodG1scnRmMCANCntcKlxo dG1sdGFnMTA0IDwvRElWPn1caHRtbHJ0ZiB9XGh0bWxydGYwIA0Ke1wqXGh0bWx0 YWcwIFxwYXIgfQ0Ke1wqXGh0bWx0YWc5NiA8RElWIGNsYXNzPVNlY3Rpb24xPn1c aHRtbHJ0ZiB7XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcwIFxwYXIgfQ0Ke1wqXGh0 bWx0YWc2NCA8UCBjbGFzcz1Nc29Ob3JtYWw+fVxodG1scnRmIFxwYXINClxodG1s cnRmMCBcaHRtbHJ0ZiB7XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcxNDggPEZPTlQg ZmFjZT1BcmlhbCBjb2xvcj1uYXZ5IHNpemU9Mj59XGh0bWxydGYge1xmNCBcY2Yz IFxmczIwIFxodG1scnRmMCANCntcKlxodG1sdGFnODQgPFNQQU4gbGFuZz1FTi1H QiBccGFyIHN0eWxlPSJGT05ULVNJWkU6IDEwcHQ7IENPTE9SOiBuYXZ5OyBGT05U LUZBTUlMWTogQXJpYWwiPn1caHRtbHJ0ZiB7XGxhbmcyMDU3IFxodG1scnRmMCBC aWxsLCBoYWQgdGhlIHNhbWUgDQp7XCpcaHRtbHRhZzQgXHBhciB9cHJvYmxlbSAo YXMgUmljaGFyZCkgd2l0aCB0aGUgb25lIHNpZ25lZCBtZXNzYWdlIHlvdSANCntc KlxodG1sdGFnNCBccGFyIH1zZW50Lg0Ke1wqXGh0bWx0YWcyNDQgPG86cD59DQp7 XCpcaHRtbHRhZzI1MiA8L286cD59DQp7XCpcaHRtbHRhZzkyIDwvU1BBTj59XGh0 bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnMTU2IDwvRk9OVD59XGh0bWxy dGYgfVxodG1scnRmMCBcaHRtbHJ0ZlxwYXJ9XGh0bWxydGYwDQpcaHRtbHJ0ZiBc cGFyDQpcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzcyIDwvUD59DQp7XCpcaHRtbHRh ZzAgXHBhciB9DQp7XCpcaHRtbHRhZzY0IDxQIGNsYXNzPU1zb05vcm1hbD59XGh0 bWxydGYge1xodG1scnRmMCANCntcKlxodG1sdGFnMTQ4IDxGT05UIGZhY2U9QXJp YWwgY29sb3I9bmF2eSBzaXplPTI+fVxodG1scnRmIHtcZjQgXGNmMyBcZnMyMCBc aHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzg0IDxTUEFOIGxhbmc9RU4tR0IgXHBhciBz dHlsZT0iRk9OVC1TSVpFOiAxMHB0OyBDT0xPUjogbmF2eTsgRk9OVC1GQU1JTFk6 IEFyaWFsIj59XGh0bWxydGYge1xsYW5nMjA1NyBcaHRtbHJ0ZjAgV2l0aCBSaWNo YXJkcw0Ke1wqXGh0bWx0YWc4NCAmIzgyMTc7fVxodG1scnRmIFwnOTJcaHRtbHJ0 ZjAgIHNpZ25lZCANCntcKlxodG1sdGFnNCBccGFyIH1tZXNzYWdlIGl0DQp7XCpc aHRtbHRhZzg0ICYjODIxNzt9XGh0bWxydGYgXCc5MlxodG1scnRmMCBzIHdvcmtp bmcgdGluZSBhcyBhcmUgb3RoZXJzLg0Ke1wqXGh0bWx0YWcyNDQgPG86cD59DQp7 XCpcaHRtbHRhZzI1MiA8L286cD59DQp7XCpcaHRtbHRhZzkyIDwvU1BBTj59XGh0 bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnMTU2IDwvRk9OVD59XGh0bWxy dGYgfVxodG1scnRmMCBcaHRtbHJ0ZlxwYXJ9XGh0bWxydGYwDQpcaHRtbHJ0ZiBc cGFyDQpcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzcyIDwvUD59DQp7XCpcaHRtbHRh ZzAgXHBhciB9DQp7XCpcaHRtbHRhZzY0IDxQIGNsYXNzPU1zb05vcm1hbD59XGh0 bWxydGYge1xodG1scnRmMCANCntcKlxodG1sdGFnMTQ4IDxGT05UIGZhY2U9QXJp YWwgY29sb3I9bmF2eSBzaXplPTI+fVxodG1scnRmIHtcZjQgXGNmMyBcZnMyMCBc aHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzg0IDxTUEFOIGxhbmc9RU4tR0IgXHBhciBz dHlsZT0iRk9OVC1TSVpFOiAxMHB0OyBDT0xPUjogbmF2eTsgRk9OVC1GQU1JTFk6 IEFyaWFsIj59XGh0bWxydGYge1xsYW5nMjA1NyBcaHRtbHJ0ZjAgKHByb2JhYmx5 IGp1c3QgYSANCntcKlxodG1sdGFnNCBccGFyIH1jb25maWd1cmF0aW9uIHByb2Js ZW0gd2l0IHlvdXIgY2xpZW50KQ0Ke1wqXGh0bWx0YWcyNDQgPG86cD59DQp7XCpc aHRtbHRhZzI1MiA8L286cD59DQp7XCpcaHRtbHRhZzkyIDwvU1BBTj59XGh0bWxy dGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnMTU2IDwvRk9OVD59XGh0bWxydGYg fVxodG1scnRmMCBcaHRtbHJ0ZlxwYXJ9XGh0bWxydGYwDQpcaHRtbHJ0ZiBccGFy DQpcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzcyIDwvUD59DQp7XCpcaHRtbHRhZzAg XHBhciB9DQp7XCpcaHRtbHRhZzY0IDxQIGNsYXNzPU1zb05vcm1hbD59XGh0bWxy dGYge1xodG1scnRmMCANCntcKlxodG1sdGFnMTQ4IDxGT05UIGZhY2U9QXJpYWwg Y29sb3I9bmF2eSBzaXplPTI+fVxodG1scnRmIHtcZjQgXGNmMyBcZnMyMCBcaHRt bHJ0ZjAgDQp7XCpcaHRtbHRhZzg0IDxTUEFOIGxhbmc9RU4tR0IgXHBhciBzdHls ZT0iRk9OVC1TSVpFOiAxMHB0OyBDT0xPUjogbmF2eTsgRk9OVC1GQU1JTFk6IEFy aWFsIj59XGh0bWxydGYge1xsYW5nMjA1NyBcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRh ZzI0NCA8bzpwPn0NCntcKlxodG1sdGFnODQgJm5ic3A7fVxodG1scnRmIFwnYTBc aHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzI1MiA8L286cD59DQp7XCpcaHRtbHRhZzky IDwvU1BBTj59XGh0bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnMTU2IDwv Rk9OVD59XGh0bWxydGYgfVxodG1scnRmMCBcaHRtbHJ0ZlxwYXJ9XGh0bWxydGYw DQpcaHRtbHJ0ZiBccGFyDQpcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzcyIDwvUD59 DQp7XCpcaHRtbHRhZzAgXHBhciB9DQp7XCpcaHRtbHRhZzY0IDxQIGNsYXNzPU1z b05vcm1hbD59XGh0bWxydGYge1xodG1scnRmMCANCntcKlxodG1sdGFnMTQ4IDxG T05UIGZhY2U9QXJpYWwgY29sb3I9bmF2eSBzaXplPTI+fVxodG1scnRmIHtcZjQg XGNmMyBcZnMyMCBcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzg0IDxTUEFOIGxhbmc9 RU4tR0IgXHBhciBzdHlsZT0iRk9OVC1TSVpFOiAxMHB0OyBDT0xPUjogbmF2eTsg Rk9OVC1GQU1JTFk6IEFyaWFsIj59XGh0bWxydGYge1xsYW5nMjA1NyBcaHRtbHJ0 ZjAgVG9iaWFzDQp7XCpcaHRtbHRhZzI0NCA8bzpwPn0NCntcKlxodG1sdGFnMjUy IDwvbzpwPn0NCntcKlxodG1sdGFnOTIgPC9TUEFOPn1caHRtbHJ0ZiB9XGh0bWxy dGYwIA0Ke1wqXGh0bWx0YWcxNTYgPC9GT05UPn1caHRtbHJ0ZiB9XGh0bWxydGYw IFxodG1scnRmXHBhcn1caHRtbHJ0ZjANClxodG1scnRmIFxwYXINClxodG1scnRm MCANCntcKlxodG1sdGFnNzIgPC9QPn0NCntcKlxodG1sdGFnMCBccGFyIH0NCntc KlxodG1sdGFnNjQgPFAgY2xhc3M9TXNvTm9ybWFsPn1caHRtbHJ0ZiB7XGh0bWxy dGYwIA0Ke1wqXGh0bWx0YWcxNDggPEZPTlQgZmFjZT1BcmlhbCBjb2xvcj1uYXZ5 IHNpemU9Mj59XGh0bWxydGYge1xmNCBcY2YzIFxmczIwIFxodG1scnRmMCANCntc KlxodG1sdGFnODQgPFNQQU4gbGFuZz1FTi1HQiBccGFyIHN0eWxlPSJGT05ULVNJ WkU6IDEwcHQ7IENPTE9SOiBuYXZ5OyBGT05ULUZBTUlMWTogQXJpYWwiPn1caHRt bHJ0ZiB7XGxhbmcyMDU3IFxodG1scnRmMCANCntcKlxodG1sdGFnMjQ0IDxvOnA+ fQ0Ke1wqXGh0bWx0YWc4NCAmbmJzcDt9XGh0bWxydGYgXCdhMFxodG1scnRmMCAN CntcKlxodG1sdGFnMjUyIDwvbzpwPn0NCntcKlxodG1sdGFnOTIgPC9TUEFOPn1c aHRtbHJ0ZiB9XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcxNTYgPC9GT05UPn1caHRt bHJ0ZiB9XGh0bWxydGYwIFxodG1scnRmXHBhcn1caHRtbHJ0ZjANClxodG1scnRm IFxwYXINClxodG1scnRmMCANCntcKlxodG1sdGFnNzIgPC9QPn0NCntcKlxodG1s dGFnMCBccGFyIH0NCntcKlxodG1sdGFnOTYgPERJViBccGFyIHN0eWxlPSJCT1JE RVItUklHSFQ6IG1lZGl1bSBub25lOyBQQURESU5HLVJJR0hUOiAwY207IEJPUkRF Ui1UT1A6IG1lZGl1bSBub25lOyBQQURESU5HLUxFRlQ6IDRwdDsgUEFERElORy1C T1RUT006IDBjbTsgQk9SREVSLUxFRlQ6IGJsdWUgMS41cHQgc29saWQ7IFBBRERJ TkctVE9QOiAwY207IEJPUkRFUi1CT1RUT006IG1lZGl1bSBub25lIj59XGh0bWxy dGYge1xodG1scnRmMCANCntcKlxodG1sdGFnMCBccGFyIH0NCntcKlxodG1sdGFn OTYgPERJVj59XGh0bWxydGYge1xodG1scnRmMCANCntcKlxodG1sdGFnMCBccGFy IH0NCntcKlxodG1sdGFnOTYgPERJViBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9IlRF WFQtQUxJR046IGNlbnRlciIgYWxpZ249Y2VudGVyPn1caHRtbHJ0ZiB7XHFjIFxo dG1scnRmMCB7XCpcaHRtbHRhZzY0fVxodG1scnRmIHtcaHRtbHJ0ZjAgDQp7XCpc aHRtbHRhZzE0OCA8Rk9OVCBccGFyIGZhY2U9IlRpbWVzIE5ldyBSb21hbiIgc2l6 ZT0zPn1caHRtbHJ0ZiB7XGY2IFxmczI0IFxodG1scnRmMCANCntcKlxodG1sdGFn ODQgPFNQQU4gbGFuZz1FTi1VUyBzdHlsZT0iRk9OVC1TSVpFOiAxMnB0Ij59XGh0 bWxydGYge1xsYW5nMTAzMyBcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzQgXHBhciB9 XGh0bWxydGYgfVxodG1scnRmMCBcaHRtbHJ0ZiB9XGh0bWxydGYwIHtcKlxodG1s dGFnNzJ9XGh0bWxydGZ9XGh0bWxydGYwDQoNCntcKlxodG1sdGFnOTYgPEhSIHRh YkluZGV4PS0xIGFsaWduPWNlbnRlciB3aWR0aD0iMTAwJSIgU0laRT0yPn1caHRt bHJ0ZiB7XGYxXHFjXHFqXHVsZGIgXH4gX19fX18gXH5cbGluZVxwYXJ9DQpcaHRt bHJ0ZjAgDQp7XCpcaHRtbHRhZzAgXHBhciB9DQp7XCpcaHRtbHRhZzI0OCA8L1NQ QU4+fQ0Ke1wqXGh0bWx0YWcyNDggPC9GT05UPn0NCntcKlxodG1sdGFnMTA0IDwv RElWPn1caHRtbHJ0ZiB9XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcwIFxwYXIgfQ0K e1wqXGh0bWx0YWc2NCA8UCBjbGFzcz1Nc29Ob3JtYWw+fVxodG1scnRmIHtcaHRt bHJ0ZjAgDQp7XCpcaHRtbHRhZzg0IDxCPn1caHRtbHJ0ZiB7XGIgXGh0bWxydGYw IA0Ke1wqXGh0bWx0YWcxNDggPEZPTlQgZmFjZT1UYWhvbWEgc2l6ZT0yPn1caHRt bHJ0ZiB7XGY1IFxmczIwIFxodG1scnRmMCANCntcKlxodG1sdGFnODQgPFNQQU4g bGFuZz1FTi1VUyBccGFyIHN0eWxlPSJGT05ULVdFSUdIVDogYm9sZDsgRk9OVC1T SVpFOiAxMHB0OyBGT05ULUZBTUlMWTogVGFob21hIj59XGh0bWxydGYge1xsYW5n MTAzMyBcaHRtbHJ0ZjAgRnJvbToNCntcKlxodG1sdGFnOTIgPC9TUEFOPn1caHRt bHJ0ZiB9XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcxNTYgPC9GT05UPn1caHRtbHJ0 ZiB9XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc5MiA8L0I+fVxodG1scnRmIH1caHRt bHJ0ZjAgDQp7XCpcaHRtbHRhZzE0OCA8Rk9OVCBccGFyIGZhY2U9VGFob21hIHNp emU9Mj59XGh0bWxydGYge1xmNSBcZnMyMCBcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRh Zzg0IDxTUEFOIGxhbmc9RU4tVVMgXHBhciBzdHlsZT0iRk9OVC1TSVpFOiAxMHB0 OyBGT05ULUZBTUlMWTogVGFob21hIj59XGh0bWxydGYge1xsYW5nMTAzMyBcaHRt bHJ0ZjAgIG93bmVyLWlldGYtbHRhbnNAbWFpbC5pbWMub3JnIA0Ke1wqXGh0bWx0 YWc0IFxwYXIgfVttYWlsdG86b3duZXItaWV0Zi1sdGFuc0BtYWlsLmltYy5vcmdd IA0Ke1wqXGh0bWx0YWc4NCA8Qj59XGh0bWxydGYge1xiIFxodG1scnRmMCANCntc KlxodG1sdGFnODQgPFNQQU4gc3R5bGU9IkZPTlQtV0VJR0hUOiBib2xkIj59XGh0 bWxydGYge1xodG1scnRmMCBPbiANCntcKlxodG1sdGFnNCBccGFyIH1CZWhhbGYg T2YgDQp7XCpcaHRtbHRhZzkyIDwvU1BBTj59XGh0bWxydGYgfVxodG1scnRmMCAN CntcKlxodG1sdGFnOTIgPC9CPn1caHRtbHJ0ZiB9XGh0bWxydGYwIEd1aWRhLCBS aWNoYXJkIFtKSkNVU10NCntcKlxodG1sdGFnMTE2IDxCUj59XGh0bWxydGYgXGxp bmUNClxodG1scnRmMCANCntcKlxodG1sdGFnODQgPEI+fVxodG1scnRmIHtcYiBc aHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzg0IDxTUEFOIFxwYXIgc3R5bGU9IkZPTlQt V0VJR0hUOiBib2xkIj59XGh0bWxydGYge1xodG1scnRmMCBTZW50Og0Ke1wqXGh0 bWx0YWc5MiA8L1NQQU4+fVxodG1scnRmIH1caHRtbHJ0ZjAgDQp7XCpcaHRtbHRh ZzkyIDwvQj59XGh0bWxydGYgfVxodG1scnRmMCAgVGh1cnNkYXksIEp1bmUgMTUs IDIwMDYgMzo0MCANCntcKlxodG1sdGFnNCBccGFyIH1QTQ0Ke1wqXGh0bWx0YWcx MTYgPEJSPn1caHRtbHJ0ZiBcbGluZQ0KXGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc4 NCA8Qj59XGh0bWxydGYge1xiIFxodG1scnRmMCANCntcKlxodG1sdGFnODQgPFNQ QU4gc3R5bGU9IkZPTlQtV0VJR0hUOiBib2xkIj59XGh0bWxydGYge1xodG1scnRm MCBUbzoNCntcKlxodG1sdGFnOTIgPC9TUEFOPn1caHRtbHJ0ZiB9XGh0bWxydGYw IA0Ke1wqXGh0bWx0YWc5MiA8L0I+fVxodG1scnRmIH1caHRtbHJ0ZjAgICdCaWxs IFJ1c3NlbGwnOyANCntcKlxodG1sdGFnNCBccGFyIH1pZXRmLWx0YW5zQGltYy5v cmcNCntcKlxodG1sdGFnMTE2IDxCUj59XGh0bWxydGYgXGxpbmUNClxodG1scnRm MCANCntcKlxodG1sdGFnODQgPEI+fVxodG1scnRmIHtcYiBcaHRtbHJ0ZjAgDQp7 XCpcaHRtbHRhZzg0IDxTUEFOIHN0eWxlPSJGT05ULVdFSUdIVDogYm9sZCI+fVxo dG1scnRmIHtcaHRtbHJ0ZjAgU3ViamVjdDoNCntcKlxodG1sdGFnOTIgPC9TUEFO Pn1caHRtbHJ0ZiB9XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc5MiA8L0I+fVxodG1s cnRmIH1caHRtbHJ0ZjAgIFJFOiANCntcKlxodG1sdGFnNCBccGFyIH1TaWduZWQg bWVzc2FnZXMNCntcKlxodG1sdGFnOTIgPC9TUEFOPn1caHRtbHJ0ZiB9XGh0bWxy dGYwIA0Ke1wqXGh0bWx0YWcxNTYgPC9GT05UPn1caHRtbHJ0ZiB9XGh0bWxydGYw IA0Ke1wqXGh0bWx0YWc4NCA8U1BBTiBsYW5nPUVOLVVTPn1caHRtbHJ0ZiB7XGxh bmcxMDMzIFxodG1scnRmMCANCntcKlxodG1sdGFnMjQ0IDxvOnA+fQ0Ke1wqXGh0 bWx0YWcyNTIgPC9vOnA+fQ0Ke1wqXGh0bWx0YWc5MiA8L1NQQU4+fVxodG1scnRm IH1caHRtbHJ0ZjAgXGh0bWxydGZccGFyfVxodG1scnRmMA0KXGh0bWxydGYgXHBh cg0KXGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc3MiA8L1A+fQ0Ke1wqXGh0bWx0YWcx MDQgPC9ESVY+fVxodG1scnRmIH1caHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzAgXHBh ciB9DQp7XCpcaHRtbHRhZzY0IDxQIGNsYXNzPU1zb05vcm1hbD59XGh0bWxydGYg e1xodG1scnRmMCANCntcKlxodG1sdGFnMTQ4IDxGT05UIGZhY2U9IlRpbWVzIE5l dyBSb21hbiIgc2l6ZT0zPn1caHRtbHJ0ZiB7XGY2IFxmczI0IFxodG1scnRmMCAN CntcKlxodG1sdGFnODQgPFNQQU4gbGFuZz1FTi1HQiBccGFyIHN0eWxlPSJGT05U LVNJWkU6IDEycHQiPn1caHRtbHJ0ZiB7XGxhbmcyMDU3IFxodG1scnRmMCANCntc KlxodG1sdGFnMjQ0IDxvOnA+fQ0Ke1wqXGh0bWx0YWc4NCAmbmJzcDt9XGh0bWxy dGYgXCdhMFxodG1scnRmMCANCntcKlxodG1sdGFnMjUyIDwvbzpwPn0NCntcKlxo dG1sdGFnOTIgPC9TUEFOPn1caHRtbHJ0ZiB9XGh0bWxydGYwIA0Ke1wqXGh0bWx0 YWcxNTYgPC9GT05UPn1caHRtbHJ0ZiB9XGh0bWxydGYwIFxodG1scnRmXHBhcn1c aHRtbHJ0ZjANClxodG1scnRmIFxwYXINClxodG1scnRmMCANCntcKlxodG1sdGFn NzIgPC9QPn0NCntcKlxodG1sdGFnMCBccGFyIH0NCntcKlxodG1sdGFnOTYgPERJ Vj59XGh0bWxydGYge1xodG1scnRmMCANCntcKlxodG1sdGFnMCBccGFyIH0NCntc KlxodG1sdGFnNjQgPFAgY2xhc3M9TXNvTm9ybWFsPn1caHRtbHJ0ZiB7XGh0bWxy dGYwIA0Ke1wqXGh0bWx0YWcxNDggPEZPTlQgZmFjZT1BcmlhbCBjb2xvcj1ibHVl IHNpemU9Mj59XGh0bWxydGYge1xmNCBcY2YyIFxmczIwIFxodG1scnRmMCANCntc KlxodG1sdGFnODQgPFNQQU4gbGFuZz1FTi1HQiBccGFyIHN0eWxlPSJGT05ULVNJ WkU6IDEwcHQ7IENPTE9SOiBibHVlOyBGT05ULUZBTUlMWTogQXJpYWwiPn1caHRt bHJ0ZiB7XGxhbmcyMDU3IFxodG1scnRmMCBCaWxsIC0gSSBhbHNvIGNvdWxkIG5v dCANCntcKlxodG1sdGFnNCBccGFyIH1yZWFkIHlvdXIgc2lnbmVkIG1lc3NhZ2Ug LSBpdCBjYW1lIGluIHdpdGggdGhlIGJsdWUgZW5jcnlwdGVkIGljb24uDQp7XCpc aHRtbHRhZzg0ICZuYnNwO31caHRtbHJ0ZiBcJ2EwXGh0bWxydGYwICBXaGVuIEkg DQp7XCpcaHRtbHRhZzQgXHBhciB9b3BlbmVkIGl0IHVzaW5nIGEgaGV4IGVkaXRv ciwgaXQgd2FzIG9mIGNvdXJzZSBub3QgZW5jcnlwdGVkIC0gSSBjb3VsZCBhY3R1 YWxseSANCntcKlxodG1sdGFnNCBccGFyIH1yZWFkIHlvdXIgdGV4dCAtIGJ1dCBm b3Igc29tZSByZWFzb24sIE91dGxvb2sgKGF0IGxlYXN0IG15IE91dGxvb2sgLSBi b3RoIDIwMDAgDQp7XCpcaHRtbHRhZzQgXHBhciB9YW5kIDIwMDMpIHdhcyBpbnRl cnByZXRpbmcgdGhlIFNNSU1FIHBhY2thZ2UgYXMgZW5jcnlwdGVkIGFuZCBub3Qg ZGVjb2RpbmcgaXQgDQp7XCpcaHRtbHRhZzQgXHBhciB9cHJvcGVybHkuDQp7XCpc aHRtbHRhZzg0ICZuYnNwO31caHRtbHJ0ZiBcJ2EwXGh0bWxydGYwICBJIGRvIGV4 cGVyaWVuY2UgdGhpcyBwcm9ibGVtICh2ZXJ5IGluZnJlcXVlbnRseSkgd2l0aCBp bmNvbWluZyANCntcKlxodG1sdGFnNCBccGFyIH1lLW1haWwNCntcKlxodG1sdGFn ODQgJm5ic3A7fVxodG1scnRmIFwnYTBcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzg0 ICZuYnNwO31caHRtbHJ0ZiBcJ2EwXGh0bWxydGYwICBJIHdpbGwgc2VuZCBhIHNp Z25lZCBlLW1haWwgdG8gdGhlIGxpc3RzZXJ2IHNob3J0bHkgdXNpbmcgbXkgDQp7 XCpcaHRtbHRhZzQgXHBhciB9Sg0Ke1wqXGh0bWx0YWc4NCAmYW1wO31caHRtbHJ0 ZiAmXGh0bWxydGYwIEogY2VydCBhbmQgT3V0bG9vayAyMDAwIGFzIHRoZSBjbGll bnQsIGp1c3QgZm9yIHRlc3QgcHVycG9zZXMuDQp7XCpcaHRtbHRhZzg0ICZuYnNw O31caHRtbHJ0ZiBcJ2EwXGh0bWxydGYwICBPZiANCntcKlxodG1sdGFnNCBccGFy IH1jb3Vyc2UgdGhlIHNpZ25hdHVyZSB3aWxsIHNob3cgdXAgYXMgaW52YWxpZCBi ZWNhdXNlIHlvdSBkb24ndCBoYXZlIG15IHRydXN0ZWQgDQp7XCpcaHRtbHRhZzQg XHBhciB9cm9vdCAoaXQgaXMgcHVibGljbHkgYXZhaWxhYmxlIG9uIHRoZSBpbnRl cm5ldCB0aHJvdWdoIGFuIFNTTC1zZWN1cmUgc2l0ZSB1c2luZyANCntcKlxodG1s dGFnNCBccGFyIH1hIFZlcmlTaWduIGNlcnQsIFVSTCANCntcKlxodG1sdGFnOTIg PC9TUEFOPn1caHRtbHJ0ZiB9XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcxNTYgPC9G T05UPn1caHRtbHJ0ZiB9XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcxNDggPEZPTlQg ZmFjZT1BcmlhbCBjb2xvcj1ibHVlIHNpemU9Mj59XGh0bWxydGYge1xmNCBcY2Yy IFxmczIwIFxodG1scnRmMCANCntcKlxodG1sdGFnODQgPFNQQU4gXHBhciBzdHls ZT0iRk9OVC1TSVpFOiAxMHB0OyBDT0xPUjogYmx1ZTsgRk9OVC1GQU1JTFk6IEFy aWFsIj59XGh0bWxydGYge1xodG1scnRmMCANCntcKlxodG1sdGFnODQgPEEgXHBh ciBocmVmPSJodHRwczovL3d3dy5qbmouY29tL2pqZWRzL2luZGV4Lmh0bWw/c2Vj dXJlPXRydWUiPn1caHRtbHJ0ZiB7XGZpZWxke1wqXGZsZGluc3R7SFlQRVJMSU5L ICJodHRwczovL3d3dy5qbmouY29tL2pqZWRzL2luZGV4Lmh0bWw/c2VjdXJlPXRy dWUifX17XGZsZHJzbHRcY2YxXHVsIFxodG1scnRmMCANCntcKlxodG1sdGFnODQg PFNQQU4gXHBhciBsYW5nPUVOLUdCPn1caHRtbHJ0ZiB7XGxhbmcyMDU3IFxodG1s cnRmMCBodHRwczovL3d3dy5qbmouY29tL2pqZWRzL2luZGV4Lmh0bWw/c2VjdXJl PXRydWUNCntcKlxodG1sdGFnOTIgPC9TUEFOPn1caHRtbHJ0ZiB9XGh0bWxydGYw IFxodG1scnRmIH1caHRtbHJ0ZjAgXGh0bWxydGYgfVxodG1scnRmMCANCntcKlxo dG1sdGFnOTIgPC9BPn0NCntcKlxodG1sdGFnOTIgPC9TUEFOPn1caHRtbHJ0ZiB9 XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcxNTYgPC9GT05UPn1caHRtbHJ0ZiB9XGh0 bWxydGYwIA0Ke1wqXGh0bWx0YWcxNDggPEZPTlQgXHBhciBmYWNlPUFyaWFsIGNv bG9yPWJsdWUgc2l6ZT0yPn1caHRtbHJ0ZiB7XGY0IFxjZjIgXGZzMjAgXGh0bWxy dGYwIA0Ke1wqXGh0bWx0YWc4NCA8U1BBTiBsYW5nPUVOLUdCIFxwYXIgc3R5bGU9 IkZPTlQtU0laRTogMTBwdDsgQ09MT1I6IGJsdWU7IEZPTlQtRkFNSUxZOiBBcmlh bCI+fVxodG1scnRmIHtcbGFuZzIwNTcgXGh0bWxydGYwICwgc28gZG9uJ3QgYmUg c3VycHJpc2VkIA0Ke1wqXGh0bWx0YWc0IFxwYXIgfXdoZW4gdGhhdCBoYXBwZW5z Lg0Ke1wqXGh0bWx0YWc5MiA8L1NQQU4+fVxodG1scnRmIH1caHRtbHJ0ZjAgDQp7 XCpcaHRtbHRhZzE1NiA8L0ZPTlQ+fVxodG1scnRmIH1caHRtbHJ0ZjAgDQp7XCpc aHRtbHRhZzg0IDxTUEFOIGxhbmc9RU4tR0I+fVxodG1scnRmIHtcbGFuZzIwNTcg XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcyNDQgPG86cD59DQp7XCpcaHRtbHRhZzI1 MiA8L286cD59DQp7XCpcaHRtbHRhZzkyIDwvU1BBTj59XGh0bWxydGYgfVxodG1s cnRmMCBcaHRtbHJ0ZlxwYXJ9XGh0bWxydGYwDQpcaHRtbHJ0ZiBccGFyDQpcaHRt bHJ0ZjAgDQp7XCpcaHRtbHRhZzcyIDwvUD59DQp7XCpcaHRtbHRhZzEwNCA8L0RJ Vj59XGh0bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnMCBccGFyIH0NCntc KlxodG1sdGFnOTYgPERJVj59XGh0bWxydGYge1xodG1scnRmMCANCntcKlxodG1s dGFnMCBccGFyIH0NCntcKlxodG1sdGFnNjQgPFAgY2xhc3M9TXNvTm9ybWFsPn1c aHRtbHJ0ZiB7XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcxNDggPEZPTlQgZmFjZT0i VGltZXMgTmV3IFJvbWFuIiBzaXplPTM+fVxodG1scnRmIHtcZjYgXGZzMjQgXGh0 bWxydGYwIA0Ke1wqXGh0bWx0YWc4NCA8U1BBTiBsYW5nPUVOLUdCIFxwYXIgc3R5 bGU9IkZPTlQtU0laRTogMTJwdCI+fVxodG1scnRmIHtcbGFuZzIwNTcgXGh0bWxy dGYwIA0Ke1wqXGh0bWx0YWc4NCAmbmJzcDt9XGh0bWxydGYgXCdhMFxodG1scnRm MCANCntcKlxodG1sdGFnMjQ0IDxvOnA+fQ0Ke1wqXGh0bWx0YWcyNTIgPC9vOnA+ fQ0Ke1wqXGh0bWx0YWc5MiA8L1NQQU4+fVxodG1scnRmIH1caHRtbHJ0ZjAgDQp7 XCpcaHRtbHRhZzE1NiA8L0ZPTlQ+fVxodG1scnRmIH1caHRtbHJ0ZjAgXGh0bWxy dGZccGFyfVxodG1scnRmMA0KXGh0bWxydGYgXHBhcg0KXGh0bWxydGYwIA0Ke1wq XGh0bWx0YWc3MiA8L1A+fQ0Ke1wqXGh0bWx0YWcxMDQgPC9ESVY+fVxodG1scnRm IH1caHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzAgXHBhciB9DQp7XCpcaHRtbHRhZzY0 IDxQIGNsYXNzPU1zb05vcm1hbD59XGh0bWxydGYge1xodG1scnRmMCANCntcKlxo dG1sdGFnMTQ4IDxGT05UIGZhY2U9IlRpbWVzIE5ldyBSb21hbiIgc2l6ZT0zPn1c aHRtbHJ0ZiB7XGY2IFxmczI0IFxodG1scnRmMCANCntcKlxodG1sdGFnODQgPFNQ QU4gbGFuZz1FTi1HQiBccGFyIHN0eWxlPSJGT05ULVNJWkU6IDEycHQiPn1caHRt bHJ0ZiB7XGxhbmcyMDU3IFxodG1scnRmMCANCntcKlxodG1sdGFnMjQ0IDxvOnA+ fQ0Ke1wqXGh0bWx0YWc4NCAmbmJzcDt9XGh0bWxydGYgXCdhMFxodG1scnRmMCAN CntcKlxodG1sdGFnMjUyIDwvbzpwPn0NCntcKlxodG1sdGFnOTIgPC9TUEFOPn1c aHRtbHJ0ZiB9XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcxNTYgPC9GT05UPn1caHRt bHJ0ZiB9XGh0bWxydGYwIFxodG1scnRmXHBhcn1caHRtbHJ0ZjANClxodG1scnRm IFxwYXINClxodG1scnRmMCANCntcKlxodG1sdGFnNzIgPC9QPn0NCntcKlxodG1s dGFnMCBccGFyIH0NCntcKlxodG1sdGFnNjQgPFA+fVxodG1scnRmIHtcaHRtbHJ0 ZjAgDQp7XCpcaHRtbHRhZzg0IDxCPn1caHRtbHJ0ZiB7XGIgXGh0bWxydGYwIA0K e1wqXGh0bWx0YWcxNDggPEZPTlQgZmFjZT1BcmlhbCBzaXplPTI+fVxodG1scnRm IHtcZjQgXGZzMjAgXGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc4NCA8U1BBTiBsYW5n PUVOLUdCIFxwYXIgc3R5bGU9IkZPTlQtV0VJR0hUOiBib2xkOyBGT05ULVNJWkU6 IDEwcHQ7IEZPTlQtRkFNSUxZOiBBcmlhbCI+fVxodG1scnRmIHtcbGFuZzIwNTcg XGh0bWxydGYwIFJpY2hhcmQgQS4gDQp7XCpcaHRtbHRhZzQgXHBhciB9R3VpZGEN CntcKlxodG1sdGFnOTIgPC9TUEFOPn1caHRtbHJ0ZiB9XGh0bWxydGYwIA0Ke1wq XGh0bWx0YWcxNTYgPC9GT05UPn1caHRtbHJ0ZiB9XGh0bWxydGYwIA0Ke1wqXGh0 bWx0YWc5MiA8L0I+fVxodG1scnRmIH1caHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzg0 IDxTUEFOIGxhbmc9RU4tR0I+fVxodG1scnRmIHtcbGFuZzIwNTcgXGh0bWxydGYw ICANCntcKlxodG1sdGFnMTE2IDxCUj59XGh0bWxydGYgXGxpbmUNClxodG1scnRm MCANCntcKlxodG1sdGFnOTIgPC9TUEFOPn1caHRtbHJ0ZiB9XGh0bWxydGYwIA0K e1wqXGh0bWx0YWc4NCA8Qj59XGh0bWxydGYge1xiIFxodG1scnRmMCANCntcKlxo dG1sdGFnMTQ4IDxGT05UIGZhY2U9QXJpYWwgXHBhciBzaXplPTI+fVxodG1scnRm IHtcZjQgXGZzMjAgXGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc4NCA8U1BBTiBsYW5n PUVOLUdCIFxwYXIgc3R5bGU9IkZPTlQtV0VJR0hUOiBib2xkOyBGT05ULVNJWkU6 IDEwcHQ7IEZPTlQtRkFNSUxZOiBBcmlhbCI+fVxodG1scnRmIHtcbGFuZzIwNTcg XGh0bWxydGYwIERpcmVjdG9yLCANCntcKlxodG1sdGFnNCBccGFyIH1JbmZvcm1h dGlvbiBTZWN1cml0eQ0Ke1wqXGh0bWx0YWc5MiA8L1NQQU4+fVxodG1scnRmIH1c aHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzE1NiA8L0ZPTlQ+fVxodG1scnRmIH1caHRt bHJ0ZjAgDQp7XCpcaHRtbHRhZzkyIDwvQj59XGh0bWxydGYgfVxodG1scnRmMCAN CntcKlxodG1sdGFnODQgPFNQQU4gbGFuZz1FTi1HQj59XGh0bWxydGYge1xsYW5n MjA1NyBcaHRtbHJ0ZjAgIA0Ke1wqXGh0bWx0YWcyNDQgPG86cD59DQp7XCpcaHRt bHRhZzI1MiA8L286cD59DQp7XCpcaHRtbHRhZzkyIDwvU1BBTj59XGh0bWxydGYg fVxodG1scnRmMCBcaHRtbHJ0ZlxwYXJ9XGh0bWxydGYwDQpcaHRtbHJ0ZiBccGFy DQpcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzcyIDwvUD59DQp7XCpcaHRtbHRhZzAg XHBhciB9DQp7XCpcaHRtbHRhZzY0IDxQPn1caHRtbHJ0ZiB7XGh0bWxydGYwIA0K e1wqXGh0bWx0YWc4NCA8Qj59XGh0bWxydGYge1xiIFxodG1scnRmMCANCntcKlxo dG1sdGFnODQgPEk+fVxodG1scnRmIHtcaSBcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRh ZzE0OCA8Rk9OVCBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iIGNvbG9yPXJlZCBzaXpl PTU+fVxodG1scnRmIHtcZjYgXGNmNCBcZnMzNiBcaHRtbHJ0ZjAgDQp7XCpcaHRt bHRhZzg0IDxTUEFOIGxhbmc9RU4tR0IgXHBhciBzdHlsZT0iRk9OVC1XRUlHSFQ6 IGJvbGQ7IEZPTlQtU0laRTogMThwdDsgQ09MT1I6IHJlZDsgRk9OVC1TVFlMRTog aXRhbGljIj59XGh0bWxydGYge1xsYW5nMjA1NyBcaHRtbHJ0ZjAgSm9obnNvbiAN CntcKlxodG1sdGFnNCBccGFyIH0NCntcKlxodG1sdGFnODQgJmFtcDt9XGh0bWxy dGYgJlxodG1scnRmMCAgSm9obnNvbg0Ke1wqXGh0bWx0YWc5MiA8L1NQQU4+fVxo dG1scnRmIH1caHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzE1NiA8L0ZPTlQ+fVxodG1s cnRmIH1caHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzkyIDwvST59XGh0bWxydGYgfVxo dG1scnRmMCANCntcKlxodG1sdGFnOTIgPC9CPn1caHRtbHJ0ZiB9XGh0bWxydGYw IA0Ke1wqXGh0bWx0YWc4NCA8U1BBTiBsYW5nPUVOLUdCPn1caHRtbHJ0ZiB7XGxh bmcyMDU3IFxodG1scnRmMCAgDQp7XCpcaHRtbHRhZzExNiA8QlI+fVxodG1scnRm IFxsaW5lDQpcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzkyIDwvU1BBTj59XGh0bWxy dGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnMTQ4IDxGT05UIGZhY2U9QXJpYWwg XHBhciBzaXplPTI+fVxodG1scnRmIHtcZjQgXGZzMjAgXGh0bWxydGYwIA0Ke1wq XGh0bWx0YWc4NCA8U1BBTiBsYW5nPUVOLUdCIHN0eWxlPSJGT05ULVNJWkU6IDEw cHQ7IEZPTlQtRkFNSUxZOiBBcmlhbCI+fVxodG1scnRmIHtcbGFuZzIwNTcgXGh0 bWxydGYwIFJvb20gDQp7XCpcaHRtbHRhZzQgXHBhciB9R1M4MjE3DQp7XCpcaHRt bHRhZzkyIDwvU1BBTj59XGh0bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFn MTU2IDwvRk9OVD59XGh0bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnODQg PFNQQU4gbGFuZz1FTi1HQj59XGh0bWxydGYge1xsYW5nMjA1NyBcaHRtbHJ0ZjAg IA0Ke1wqXGh0bWx0YWcxMTYgPEJSPn1caHRtbHJ0ZiBcbGluZQ0KXGh0bWxydGYw IA0Ke1wqXGh0bWx0YWc5MiA8L1NQQU4+fVxodG1scnRmIH1caHRtbHJ0ZjAgDQp7 XCpcaHRtbHRhZzE0OCA8Rk9OVCBmYWNlPUFyaWFsIHNpemU9Mj59XGh0bWxydGYg e1xmNCBcZnMyMCBcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzg0IDxTUEFOIFxwYXIg bGFuZz1FTi1HQiBzdHlsZT0iRk9OVC1TSVpFOiAxMHB0OyBGT05ULUZBTUlMWTog QXJpYWwiPn1caHRtbHJ0ZiB7XGxhbmcyMDU3IFxodG1scnRmMCA0MTAgR2Vvcmdl IA0Ke1wqXGh0bWx0YWc0IFxwYXIgfVN0cmVldA0Ke1wqXGh0bWx0YWc5MiA8L1NQ QU4+fVxodG1scnRmIH1caHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzE1NiA8L0ZPTlQ+ fVxodG1scnRmIH1caHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzg0IDxTUEFOIGxhbmc9 RU4tR0I+fVxodG1scnRmIHtcbGFuZzIwNTcgXGh0bWxydGYwICANCntcKlxodG1s dGFnMTE2IDxCUj59XGh0bWxydGYgXGxpbmUNClxodG1scnRmMCANCntcKlxodG1s dGFnOTIgPC9TUEFOPn1caHRtbHJ0ZiB9XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcx NDggPEZPTlQgZmFjZT1BcmlhbCBzaXplPTI+fVxodG1scnRmIHtcZjQgXGZzMjAg XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc4NCA8U1BBTiBccGFyIGxhbmc9RU4tR0Ig c3R5bGU9IkZPTlQtU0laRTogMTBwdDsgRk9OVC1GQU1JTFk6IEFyaWFsIj59XGh0 bWxydGYge1xsYW5nMjA1NyBcaHRtbHJ0ZjAgTmV3IEJydW5zd2ljaywgTmV3IA0K e1wqXGh0bWx0YWc0IFxwYXIgfUplcnNleQ0Ke1wqXGh0bWx0YWc4NCAmbmJzcDt9 XGh0bWxydGYgXCdhMFxodG1scnRmMCAgMDg5MDENCntcKlxodG1sdGFnOTIgPC9T UEFOPn1caHRtbHJ0ZiB9XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcxNTYgPC9GT05U Pn1caHRtbHJ0ZiB9XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc4NCA8U1BBTiBsYW5n PUVOLUdCPn1caHRtbHJ0ZiB7XGxhbmcyMDU3IFxodG1scnRmMCAgDQp7XCpcaHRt bHRhZzExNiA8QlI+fVxodG1scnRmIFxsaW5lDQpcaHRtbHJ0ZjAgDQp7XCpcaHRt bHRhZzkyIDwvU1BBTj59XGh0bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFn MTQ4IDxGT05UIGZhY2U9QXJpYWwgXHBhciBzaXplPTI+fVxodG1scnRmIHtcZjQg XGZzMjAgXGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc4NCA8U1BBTiBsYW5nPUVOLUdC IHN0eWxlPSJGT05ULVNJWkU6IDEwcHQ7IEZPTlQtRkFNSUxZOiBBcmlhbCI+fVxo dG1scnRmIHtcbGFuZzIwNTcgXGh0bWxydGYwIFBob25lOg0Ke1wqXGh0bWx0YWc4 NCAmbmJzcDt9XGh0bWxydGYgXCdhMFxodG1scnRmMCAgDQp7XCpcaHRtbHRhZzQg XHBhciB9NzMyIDUyNCAzNzg1DQp7XCpcaHRtbHRhZzkyIDwvU1BBTj59XGh0bWxy dGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnMTU2IDwvRk9OVD59XGh0bWxydGYg fVxodG1scnRmMCANCntcKlxodG1sdGFnODQgPFNQQU4gbGFuZz1FTi1HQj59XGh0 bWxydGYge1xsYW5nMjA1NyBcaHRtbHJ0ZjAgIA0Ke1wqXGh0bWx0YWcyNDQgPG86 cD59DQp7XCpcaHRtbHRhZzI1MiA8L286cD59DQp7XCpcaHRtbHRhZzkyIDwvU1BB Tj59XGh0bWxydGYgfVxodG1scnRmMCBcaHRtbHJ0ZlxwYXJ9XGh0bWxydGYwDQpc aHRtbHJ0ZiBccGFyDQpcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzcyIDwvUD59DQp7 XCpcaHRtbHRhZzAgXHBhciB9DQp7XCpcaHRtbHRhZzk2IDxCTE9DS1FVT1RFIHN0 eWxlPSJNQVJHSU4tVE9QOiA1cHQ7IE1BUkdJTi1CT1RUT006IDVwdDsgTUFSR0lO LVJJR0hUOiAwY20iPn1caHRtbHJ0ZiB7XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcw IFxwYXIgfQ0Ke1wqXGh0bWx0YWcyNDAgICB9DQp7XCpcaHRtbHRhZzY0IDxQIGNs YXNzPU1zb05vcm1hbCBzdHlsZT0iTUFSR0lOLUJPVFRPTTogMTJwdCI+fVxodG1s cnRmIHtcaHRtbHJ0ZjAgXGxpMzYwIA0Ke1wqXGh0bWx0YWcxNDggPEZPTlQgZmFj ZT1UYWhvbWEgc2l6ZT0yPn1caHRtbHJ0ZiB7XGY1IFxmczIwIFxodG1scnRmMCAN CntcKlxodG1sdGFnODQgPFNQQU4gXHBhciAgIGxhbmc9RU4tR0Igc3R5bGU9IkZP TlQtU0laRTogMTBwdDsgRk9OVC1GQU1JTFk6IFRhaG9tYSI+fVxodG1scnRmIHtc bGFuZzIwNTcgXGh0bWxydGYwIC0tLS0tT3JpZ2luYWwgDQp7XCpcaHRtbHRhZzQg XHBhciB9DQp7XCpcaHRtbHRhZzg0ICAgfU1lc3NhZ2UtLS0tLQ0Ke1wqXGh0bWx0 YWcxMTYgPEJSPn1caHRtbHJ0ZiBcbGluZQ0KXGh0bWxydGYwIA0Ke1wqXGh0bWx0 YWc4NCA8Qj59XGh0bWxydGYge1xiIFxodG1scnRmMCANCntcKlxodG1sdGFnODQg PFNQQU4gc3R5bGU9IkZPTlQtV0VJR0hUOiBib2xkIj59XGh0bWxydGYge1xodG1s cnRmMCBGcm9tOg0Ke1wqXGh0bWx0YWc5MiA8L1NQQU4+fVxodG1scnRmIH1caHRt bHJ0ZjAgDQp7XCpcaHRtbHRhZzkyIDwvQj59XGh0bWxydGYgfVxodG1scnRmMCAg DQp7XCpcaHRtbHRhZzQgXHBhciB9DQp7XCpcaHRtbHRhZzg0ICAgfW93bmVyLWll dGYtbHRhbnNAbWFpbC5pbWMub3JnIFttYWlsdG86b3duZXItaWV0Zi1sdGFuc0Bt YWlsLmltYy5vcmddDQp7XCpcaHRtbHRhZzg0IDxCPn1caHRtbHJ0ZiB7XGIgXGh0 bWxydGYwIA0Ke1wqXGh0bWx0YWc4NCA8U1BBTiBccGFyICAgc3R5bGU9IkZPTlQt V0VJR0hUOiBib2xkIj59XGh0bWxydGYge1xodG1scnRmMCBPbiBCZWhhbGYgT2Yg DQp7XCpcaHRtbHRhZzkyIDwvU1BBTj59XGh0bWxydGYgfVxodG1scnRmMCANCntc KlxodG1sdGFnOTIgPC9CPn1caHRtbHJ0ZiB9XGh0bWxydGYwIEJpbGwgUnVzc2Vs bA0Ke1wqXGh0bWx0YWcxMTYgPEJSPn1caHRtbHJ0ZiBcbGluZQ0KXGh0bWxydGYw IA0Ke1wqXGh0bWx0YWc4NCA8Qj59XGh0bWxydGYge1xiIFxodG1scnRmMCANCntc KlxodG1sdGFnODQgPFNQQU4gXHBhciAgIHN0eWxlPSJGT05ULVdFSUdIVDogYm9s ZCI+fVxodG1scnRmIHtcaHRtbHJ0ZjAgU2VudDoNCntcKlxodG1sdGFnOTIgPC9T UEFOPn1caHRtbHJ0ZiB9XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc5MiA8L0I+fVxo dG1scnRmIH1caHRtbHJ0ZjAgIFdlZG5lc2RheSwgSnVuZSAxNCwgMjAwNiAxMDoz NiANCntcKlxodG1sdGFnNCBccGFyIH0NCntcKlxodG1sdGFnODQgICB9UE0NCntc KlxodG1sdGFnMTE2IDxCUj59XGh0bWxydGYgXGxpbmUNClxodG1scnRmMCANCntc KlxodG1sdGFnODQgPEI+fVxodG1scnRmIHtcYiBcaHRtbHJ0ZjAgDQp7XCpcaHRt bHRhZzg0IDxTUEFOIHN0eWxlPSJGT05ULVdFSUdIVDogYm9sZCI+fVxodG1scnRm IHtcaHRtbHJ0ZjAgVG86DQp7XCpcaHRtbHRhZzkyIDwvU1BBTj59XGh0bWxydGYg fVxodG1scnRmMCANCntcKlxodG1sdGFnOTIgPC9CPn1caHRtbHJ0ZiB9XGh0bWxy dGYwICANCntcKlxodG1sdGFnNCBccGFyIH0NCntcKlxodG1sdGFnODQgICB9aWV0 Zi1sdGFuc0BpbWMub3JnDQp7XCpcaHRtbHRhZzExNiA8QlI+fVxodG1scnRmIFxs aW5lDQpcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzg0IDxCPn1caHRtbHJ0ZiB7XGIg XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc4NCA8U1BBTiBzdHlsZT0iRk9OVC1XRUlH SFQ6IGJvbGQiPn1caHRtbHJ0ZiB7XGh0bWxydGYwIFN1YmplY3Q6DQp7XCpcaHRt bHRhZzkyIDwvU1BBTj59XGh0bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFn OTIgPC9CPn1caHRtbHJ0ZiB9XGh0bWxydGYwICANCntcKlxodG1sdGFnNCBccGFy IH0NCntcKlxodG1sdGFnODQgICB9U2lnbmVkIG1lc3NhZ2VzDQp7XCpcaHRtbHRh ZzkyIDwvU1BBTj59XGh0bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnMTU2 IDwvRk9OVD59XGh0bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnODQgPFNQ QU4gbGFuZz1FTi1HQj59XGh0bWxydGYge1xsYW5nMjA1NyBcaHRtbHJ0ZjAgDQp7 XCpcaHRtbHRhZzI0NCA8bzpwPn0NCntcKlxodG1sdGFnMjUyIDwvbzpwPn0NCntc KlxodG1sdGFnOTIgPC9TUEFOPn1caHRtbHJ0ZiB9XGh0bWxydGYwIFxodG1scnRm XHBhcn1caHRtbHJ0ZjANClxodG1scnRmIFxwYXINClxodG1scnRmMCANCntcKlxo dG1sdGFnNzIgPC9QPn0NCntcKlxodG1sdGFnMCBccGFyIH0NCntcKlxodG1sdGFn MjQwICAgfQ0Ke1wqXGh0bWx0YWc5NiA8RElWPn1caHRtbHJ0ZiB7XGh0bWxydGYw IA0Ke1wqXGh0bWx0YWcwIFxwYXIgfQ0Ke1wqXGh0bWx0YWcyNDAgICB9DQp7XCpc aHRtbHRhZzY0IDxQIGNsYXNzPU1zb05vcm1hbD59XGh0bWxydGYge1xodG1scnRm MCBcbGkzNjAgDQp7XCpcaHRtbHRhZzE0OCA8Rk9OVCBmYWNlPUFyaWFsIHNpemU9 Mj59XGh0bWxydGYge1xmNCBcZnMyMCBcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzg0 IDxTUEFOIGxhbmc9RU4tR0IgXHBhciAgIHN0eWxlPSJGT05ULVNJWkU6IDEwcHQ7 IEZPTlQtRkFNSUxZOiBBcmlhbCI+fVxodG1scnRmIHtcbGFuZzIwNTcgXGh0bWxy dGYwIEhhcyBhbnlvbmUgZWxzZSBoYWQgYW55IHRyb3VibGUgDQp7XCpcaHRtbHRh ZzQgXHBhciB9DQp7XCpcaHRtbHRhZzg0ICAgfXNlbmRpbmcgc2lnbmVkIG1lc3Nh Z2VzIHRvIHRoZSBsaXN0c2Vydj8NCntcKlxodG1sdGFnODQgJm5ic3A7fVxodG1s cnRmIFwnYTBcaHRtbHJ0ZjAgIEkgbm90aWNlZCBQZXRlcidzIGFyZSBnb2luZyAN CntcKlxodG1sdGFnNCBccGFyIH0NCntcKlxodG1sdGFnODQgICB9dGhyb3VnaCwg YnV0IHR3byBvZiBtaW5lIGhhdmUgZ29uZSBvdXQgc2lnbmVkIGFuZCBnZXQgZGlz dHJpYnV0ZWQgYXMgDQp7XCpcaHRtbHRhZzQgXHBhciB9DQp7XCpcaHRtbHRhZzg0 ICAgfXNpZ25lZC9lbmNyeXB0ZWQgKHdoaWNoIG15IG93biBjbGllbnQgY2FuJ3Qg ZXZlbiByZWFkKS4NCntcKlxodG1sdGFnODQgJm5ic3A7fVxodG1scnRmIFwnYTBc aHRtbHJ0ZjAgIEknbSBub3Qgc3VyZSBpZiANCntcKlxodG1sdGFnNCBccGFyIH0N CntcKlxodG1sdGFnODQgICB9dGhhdCBpcyBhIHByb2R1Y3Qgb2YgdXNpbmcgYW4g RW50cnVzdCBwbHVnLWluIHJhdGhlciB0aGFuIG5hdGl2ZSBTL01JTUUgZm9yIA0K e1wqXGh0bWx0YWc0IFxwYXIgfQ0Ke1wqXGh0bWx0YWc4NCAgIH1PdXRsb29rLCBi dXQganVzdCBjdXJpb3VzIGlmIGFueW9uZSBlbHNlIGhhcyBoYWQgYW55IHNpbWls YXIgDQp7XCpcaHRtbHRhZzQgXHBhciB9DQp7XCpcaHRtbHRhZzg0ICAgfXByb2Js ZW1zLg0Ke1wqXGh0bWx0YWc5MiA8L1NQQU4+fVxodG1scnRmIH1caHRtbHJ0ZjAg DQp7XCpcaHRtbHRhZzE1NiA8L0ZPTlQ+fVxodG1scnRmIH1caHRtbHJ0ZjAgDQp7 XCpcaHRtbHRhZzg0IDxTUEFOIGxhbmc9RU4tR0I+fVxodG1scnRmIHtcbGFuZzIw NTcgXGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcyNDQgPG86cD59DQp7XCpcaHRtbHRh ZzI1MiA8L286cD59DQp7XCpcaHRtbHRhZzkyIDwvU1BBTj59XGh0bWxydGYgfVxo dG1scnRmMCBcaHRtbHJ0ZlxwYXJ9XGh0bWxydGYwDQpcaHRtbHJ0ZiBccGFyDQpc aHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzcyIDwvUD59DQp7XCpcaHRtbHRhZzEwNCA8 L0RJVj59XGh0bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnMCBccGFyIH0N CntcKlxodG1sdGFnMjQwICAgfQ0Ke1wqXGh0bWx0YWc5NiA8RElWPn1caHRtbHJ0 ZiB7XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcwIFxwYXIgfQ0Ke1wqXGh0bWx0YWcy NDAgICB9DQp7XCpcaHRtbHRhZzY0IDxQIGNsYXNzPU1zb05vcm1hbD59XGh0bWxy dGYge1xodG1scnRmMCBcbGkzNjAgDQp7XCpcaHRtbHRhZzE0OCA8Rk9OVCBmYWNl PSJUaW1lcyBOZXcgUm9tYW4iIHNpemU9Mz59XGh0bWxydGYge1xmNiBcZnMyNCBc aHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzg0IDxTUEFOIGxhbmc9RU4tR0IgXHBhciAg IHN0eWxlPSJGT05ULVNJWkU6IDEycHQiPn1caHRtbHJ0ZiB7XGxhbmcyMDU3IFxo dG1scnRmMCANCntcKlxodG1sdGFnODQgJm5ic3A7fVxodG1scnRmIFwnYTBcaHRt bHJ0ZjAgDQp7XCpcaHRtbHRhZzI0NCA8bzpwPn0NCntcKlxodG1sdGFnMjUyIDwv bzpwPn0NCntcKlxodG1sdGFnOTIgPC9TUEFOPn1caHRtbHJ0ZiB9XGh0bWxydGYw IA0Ke1wqXGh0bWx0YWcxNTYgPC9GT05UPn1caHRtbHJ0ZiB9XGh0bWxydGYwIFxo dG1scnRmXHBhcn1caHRtbHJ0ZjANClxodG1scnRmIFxwYXINClxodG1scnRmMCAN CntcKlxodG1sdGFnNzIgPC9QPn0NCntcKlxodG1sdGFnMTA0IDwvRElWPn1caHRt bHJ0ZiB9XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcwIFxwYXIgfQ0Ke1wqXGh0bWx0 YWcyNDAgICB9DQp7XCpcaHRtbHRhZzk2IDxESVY+fVxodG1scnRmIHtcaHRtbHJ0 ZjAgDQp7XCpcaHRtbHRhZzAgXHBhciB9DQp7XCpcaHRtbHRhZzI0MCAgIH0NCntc KlxodG1sdGFnNjQgPFAgY2xhc3M9TXNvTm9ybWFsPn1caHRtbHJ0ZiB7XGh0bWxy dGYwIFxsaTM2MCANCntcKlxodG1sdGFnMTQ4IDxGT05UIGZhY2U9QXJpYWwgc2l6 ZT0yPn1caHRtbHJ0ZiB7XGY0IFxmczIwIFxodG1scnRmMCANCntcKlxodG1sdGFn ODQgPFNQQU4gbGFuZz1FTi1HQiBccGFyICAgc3R5bGU9IkZPTlQtU0laRTogMTBw dDsgRk9OVC1GQU1JTFk6IEFyaWFsIj59XGh0bWxydGYge1xsYW5nMjA1NyBcaHRt bHJ0ZjAgVGhhbmtzLA0Ke1wqXGh0bWx0YWc5MiA8L1NQQU4+fVxodG1scnRmIH1c aHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzE1NiA8L0ZPTlQ+fVxodG1scnRmIH1caHRt bHJ0ZjAgDQp7XCpcaHRtbHRhZzg0IDxTUEFOIFxwYXIgICBsYW5nPUVOLUdCPn1c aHRtbHJ0ZiB7XGxhbmcyMDU3IFxodG1scnRmMCANCntcKlxodG1sdGFnMjQ0IDxv OnA+fQ0Ke1wqXGh0bWx0YWcyNTIgPC9vOnA+fQ0Ke1wqXGh0bWx0YWc5MiA8L1NQ QU4+fVxodG1scnRmIH1caHRtbHJ0ZjAgXGh0bWxydGZccGFyfVxodG1scnRmMA0K XGh0bWxydGYgXHBhcg0KXGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc3MiA8L1A+fQ0K e1wqXGh0bWx0YWcxMDQgPC9ESVY+fVxodG1scnRmIH1caHRtbHJ0ZjAgDQp7XCpc aHRtbHRhZzAgXHBhciB9DQp7XCpcaHRtbHRhZzI0MCAgIH0NCntcKlxodG1sdGFn OTYgPERJVj59XGh0bWxydGYge1xodG1scnRmMCANCntcKlxodG1sdGFnMCBccGFy IH0NCntcKlxodG1sdGFnMjQwICAgfQ0Ke1wqXGh0bWx0YWc2NCA8UCBjbGFzcz1N c29Ob3JtYWw+fVxodG1scnRmIHtcaHRtbHJ0ZjAgXGxpMzYwIA0Ke1wqXGh0bWx0 YWcxNDggPEZPTlQgZmFjZT0iVGltZXMgTmV3IFJvbWFuIiBzaXplPTM+fVxodG1s cnRmIHtcZjYgXGZzMjQgXGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc4NCA8U1BBTiBs YW5nPUVOLUdCIFxwYXIgICBzdHlsZT0iRk9OVC1TSVpFOiAxMnB0Ij59XGh0bWxy dGYge1xsYW5nMjA1NyBcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzg0ICZuYnNwO31c aHRtbHJ0ZiBcJ2EwXGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcyNDQgPG86cD59DQp7 XCpcaHRtbHRhZzI1MiA8L286cD59DQp7XCpcaHRtbHRhZzkyIDwvU1BBTj59XGh0 bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnMTU2IDwvRk9OVD59XGh0bWxy dGYgfVxodG1scnRmMCBcaHRtbHJ0ZlxwYXJ9XGh0bWxydGYwDQpcaHRtbHJ0ZiBc cGFyDQpcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzcyIDwvUD59DQp7XCpcaHRtbHRh ZzEwNCA8L0RJVj59XGh0bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnMjQw IDwhLS0gQ29udmVydGVkIGZyb20gdGV4dC9ydGYgZm9ybWF0IC0tPn0NCntcKlxo dG1sdGFnMCBccGFyIH0NCntcKlxodG1sdGFnMjQwICAgfQ0Ke1wqXGh0bWx0YWc2 NCA8UCBjbGFzcz1Nc29Ob3JtYWw+fVxodG1scnRmIHtcaHRtbHJ0ZjAgXGxpMzYw IA0Ke1wqXGh0bWx0YWc4NCA8RU0+fVxodG1scnRmIHtcaSBcaHRtbHJ0ZjAgDQp7 XCpcaHRtbHRhZzg0IDxJPn1caHRtbHJ0ZiB7XGkgXGh0bWxydGYwIA0Ke1wqXGh0 bWx0YWcxNDggPEZPTlQgZmFjZT1BcmlhbCBzaXplPTI+fVxodG1scnRmIHtcZjQg XGZzMjAgXGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc4NCA8U1BBTiBsYW5nPUVOLVVT IFxwYXIgICBzdHlsZT0iRk9OVC1TSVpFOiAxMHB0OyBGT05ULUZBTUlMWTogQXJp YWwiPn1caHRtbHJ0ZiB7XGxhbmcxMDMzIFxodG1scnRmMCBCaWxsIFJ1c3NlbGws IENJU1NQLCANCntcKlxodG1sdGFnNCBccGFyIH0NCntcKlxodG1sdGFnODQgICB9 SVNTQVANCntcKlxodG1sdGFnOTIgPC9TUEFOPn1caHRtbHJ0ZiB9XGh0bWxydGYw IA0Ke1wqXGh0bWx0YWcxNTYgPC9GT05UPn1caHRtbHJ0ZiB9XGh0bWxydGYwIA0K e1wqXGh0bWx0YWc5MiA8L0k+fVxodG1scnRmIH1caHRtbHJ0ZjAgDQp7XCpcaHRt bHRhZzkyIDwvRU0+fVxodG1scnRmIH1caHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzE0 OCA8Rk9OVCBmYWNlPUFyaWFsIHNpemU9Mj59XGh0bWxydGYge1xmNCBcZnMyMCBc aHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzg0IDxTUEFOIGxhbmc9RU4tVVMgXHBhciAg IHN0eWxlPSJGT05ULVNJWkU6IDEwcHQ7IEZPTlQtRkFNSUxZOiBBcmlhbCI+fVxo dG1scnRmIHtcbGFuZzEwMzMgXGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcyNDQgPG86 cD59DQp7XCpcaHRtbHRhZzI1MiA8L286cD59DQp7XCpcaHRtbHRhZzkyIDwvU1BB Tj59XGh0bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnMTU2IDwvRk9OVD59 XGh0bWxydGYgfVxodG1scnRmMCBcaHRtbHJ0ZlxwYXJ9XGh0bWxydGYwDQpcaHRt bHJ0ZiBccGFyDQpcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzcyIDwvUD59DQp7XCpc aHRtbHRhZzAgXHBhciB9DQp7XCpcaHRtbHRhZzI0MCAgIH0NCntcKlxodG1sdGFn NjQgPFAgY2xhc3M9TXNvTm9ybWFsPn1caHRtbHJ0ZiB7XGh0bWxydGYwIFxsaTM2 MCANCntcKlxodG1sdGFnODQgPEVNPn1caHRtbHJ0ZiB7XGkgXGh0bWxydGYwIA0K e1wqXGh0bWx0YWc4NCA8ST59XGh0bWxydGYge1xpIFxodG1scnRmMCANCntcKlxo dG1sdGFnMTQ4IDxGT05UIGZhY2U9QXJpYWwgc2l6ZT0yPn1caHRtbHJ0ZiB7XGY0 IFxmczIwIFxodG1scnRmMCANCntcKlxodG1sdGFnODQgPFNQQU4gbGFuZz1FTi1V UyBccGFyICAgc3R5bGU9IkZPTlQtU0laRTogMTBwdDsgRk9OVC1GQU1JTFk6IEFy aWFsIj59XGh0bWxydGYge1xsYW5nMTAzMyBcaHRtbHJ0ZjAgVmljZSANCntcKlxo dG1sdGFnNCBccGFyIH0NCntcKlxodG1sdGFnODQgICB9UHJlc2lkZW50DQp7XCpc aHRtbHRhZzkyIDwvU1BBTj59XGh0bWxydGYgfVxodG1scnRmMCANCntcKlxodG1s dGFnMTU2IDwvRk9OVD59XGh0bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFn OTIgPC9JPn1caHRtbHJ0ZiB9XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc5MiA8L0VN Pn1caHRtbHJ0ZiB9XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcxNDggPEZPTlQgZmFj ZT1BcmlhbCBzaXplPTI+fVxodG1scnRmIHtcZjQgXGZzMjAgXGh0bWxydGYwIA0K e1wqXGh0bWx0YWc4NCA8U1BBTiBsYW5nPUVOLVVTIFxwYXIgICBzdHlsZT0iRk9O VC1TSVpFOiAxMHB0OyBGT05ULUZBTUlMWTogQXJpYWwiPn1caHRtbHJ0ZiB7XGxh bmcxMDMzIFxodG1scnRmMCANCntcKlxodG1sdGFnMjQ0IDxvOnA+fQ0Ke1wqXGh0 bWx0YWcyNTIgPC9vOnA+fQ0Ke1wqXGh0bWx0YWc5MiA8L1NQQU4+fVxodG1scnRm IH1caHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzE1NiA8L0ZPTlQ+fVxodG1scnRmIH1c aHRtbHJ0ZjAgXGh0bWxydGZccGFyfVxodG1scnRmMA0KXGh0bWxydGYgXHBhcg0K XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc3MiA8L1A+fQ0Ke1wqXGh0bWx0YWcwIFxw YXIgfQ0Ke1wqXGh0bWx0YWcyNDAgICB9DQp7XCpcaHRtbHRhZzY0IDxQIGNsYXNz PU1zb05vcm1hbD59XGh0bWxydGYge1xodG1scnRmMCBcbGkzNjAgDQp7XCpcaHRt bHRhZzg0IDxFTT59XGh0bWxydGYge1xpIFxodG1scnRmMCANCntcKlxodG1sdGFn ODQgPEk+fVxodG1scnRmIHtcaSBcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzE0OCA8 Rk9OVCBmYWNlPUFyaWFsIHNpemU9Mj59XGh0bWxydGYge1xmNCBcZnMyMCBcaHRt bHJ0ZjAgDQp7XCpcaHRtbHRhZzg0IDxTUEFOIGxhbmc9RU4tVVMgXHBhciAgIHN0 eWxlPSJGT05ULVNJWkU6IDEwcHQ7IEZPTlQtRkFNSUxZOiBBcmlhbCI+fVxodG1s cnRmIHtcbGFuZzEwMzMgXGh0bWxydGYwIE1vdW50IEFpcmV5IEdyb3VwLCANCntc KlxodG1sdGFnNCBccGFyIH0NCntcKlxodG1sdGFnODQgICB9SW5jLg0Ke1wqXGh0 bWx0YWc5MiA8L1NQQU4+fVxodG1scnRmIH1caHRtbHJ0ZjAgDQp7XCpcaHRtbHRh ZzE1NiA8L0ZPTlQ+fVxodG1scnRmIH1caHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzky IDwvST59XGh0bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnOTIgPC9FTT59 XGh0bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnMTQ4IDxGT05UIGZhY2U9 QXJpYWwgc2l6ZT0yPn1caHRtbHJ0ZiB7XGY0IFxmczIwIFxodG1scnRmMCANCntc KlxodG1sdGFnODQgPFNQQU4gbGFuZz1FTi1VUyBccGFyICAgc3R5bGU9IkZPTlQt U0laRTogMTBwdDsgRk9OVC1GQU1JTFk6IEFyaWFsIj59XGh0bWxydGYge1xsYW5n MTAzMyBcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzI0NCA8bzpwPn0NCntcKlxodG1s dGFnMjUyIDwvbzpwPn0NCntcKlxodG1sdGFnOTIgPC9TUEFOPn1caHRtbHJ0ZiB9 XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcxNTYgPC9GT05UPn1caHRtbHJ0ZiB9XGh0 bWxydGYwIFxodG1scnRmXHBhcn1caHRtbHJ0ZjANClxodG1scnRmIFxwYXINClxo dG1scnRmMCANCntcKlxodG1sdGFnNzIgPC9QPn0NCntcKlxodG1sdGFnMCBccGFy IH0NCntcKlxodG1sdGFnMjQwICAgfQ0Ke1wqXGh0bWx0YWc2NCA8UCBjbGFzcz1N c29Ob3JtYWw+fVxodG1scnRmIHtcaHRtbHJ0ZjAgXGxpMzYwIA0Ke1wqXGh0bWx0 YWcxNDggPEZPTlQgZmFjZT1BcmlhbCBzaXplPTI+fVxodG1scnRmIHtcZjQgXGZz MjAgXGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc4NCA8U1BBTiBsYW5nPUVOLVVTIFxw YXIgICBzdHlsZT0iRk9OVC1TSVpFOiAxMHB0OyBGT05ULUZBTUlMWTogQXJpYWwi Pn1caHRtbHJ0ZiB7XGxhbmcxMDMzIFxodG1scnRmMCANCntcKlxodG1sdGFnODQg PEEgXHBhciAgIHRpdGxlPWh0dHA6Ly93d3cubW91bnRhaXJleWdyb3VwLm5ldC8g XHBhciAgIGhyZWY9Imh0dHA6Ly93d3cubW91bnRhaXJleWdyb3VwLm5ldC8iPn1c aHRtbHJ0ZiB7XGZpZWxke1wqXGZsZGluc3R7SFlQRVJMSU5LICJodHRwOi8vd3d3 Lm1vdW50YWlyZXlncm91cC5uZXQvIn19e1xmbGRyc2x0XGNmMVx1bCBcaHRtbHJ0 ZjAgDQp7XCpcaHRtbHRhZzg0IDxFTT59XGh0bWxydGYge1xpIFxodG1scnRmMCAN CntcKlxodG1sdGFnODQgPEk+fVxodG1scnRmIHtcaSBcaHRtbHJ0ZjAgDQp7XCpc aHRtbHRhZzE0OCA8Rk9OVCBmYWNlPUFyaWFsPn1caHRtbHJ0ZiB7XGY0IFxodG1s cnRmMCANCntcKlxodG1sdGFnODQgPFNQQU4gXHBhciAgIHN0eWxlPSJGT05ULUZB TUlMWTogQXJpYWwiPn1caHRtbHJ0ZiB7XGh0bWxydGYwIGh0dHA6Ly93d3cubW91 bnRhaXJleWdyb3VwLm5ldA0Ke1wqXGh0bWx0YWc5MiA8L1NQQU4+fVxodG1scnRm IH1caHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzE1NiA8L0ZPTlQ+fVxodG1scnRmIH1c aHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzkyIDwvST59XGh0bWxydGYgfVxodG1scnRm MCANCntcKlxodG1sdGFnOTIgPC9FTT59XGh0bWxydGYgfVxodG1scnRmMCBcaHRt bHJ0ZiB9XGh0bWxydGYwIFxodG1scnRmIH1caHRtbHJ0ZjAgDQp7XCpcaHRtbHRh ZzkyIDwvQT59DQp7XCpcaHRtbHRhZzI0NCA8bzpwPn0NCntcKlxodG1sdGFnMjUy IDwvbzpwPn0NCntcKlxodG1sdGFnOTIgPC9TUEFOPn1caHRtbHJ0ZiB9XGh0bWxy dGYwIA0Ke1wqXGh0bWx0YWcxNTYgPC9GT05UPn1caHRtbHJ0ZiB9XGh0bWxydGYw IFxodG1scnRmXHBhcn1caHRtbHJ0ZjANClxodG1scnRmIFxwYXINClxodG1scnRm MCANCntcKlxodG1sdGFnNzIgPC9QPn0NCntcKlxodG1sdGFnMCBccGFyIH0NCntc KlxodG1sdGFnMjQwICAgfQ0Ke1wqXGh0bWx0YWc2NCA8UCBjbGFzcz1Nc29Ob3Jt YWw+fVxodG1scnRmIHtcaHRtbHJ0ZjAgXGxpMzYwIA0Ke1wqXGh0bWx0YWc4NCA8 RU0+fVxodG1scnRmIHtcaSBcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzg0IDxJPn1c aHRtbHJ0ZiB7XGkgXGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcxNDggPEZPTlQgZmFj ZT1BcmlhbCBzaXplPTI+fVxodG1scnRmIHtcZjQgXGZzMjAgXGh0bWxydGYwIA0K e1wqXGh0bWx0YWc4NCA8U1BBTiBsYW5nPUVOLVVTIFxwYXIgICBzdHlsZT0iRk9O VC1TSVpFOiAxMHB0OyBGT05ULUZBTUlMWTogQXJpYWwiPn1caHRtbHJ0ZiB7XGxh bmcxMDMzIFxodG1scnRmMCBDZWxsOiANCntcKlxodG1sdGFnNCBccGFyIH0NCntc KlxodG1sdGFnODQgICB9NTcxLTMzNC0xNjcxDQp7XCpcaHRtbHRhZzkyIDwvU1BB Tj59XGh0bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnMTU2IDwvRk9OVD59 XGh0bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnOTIgPC9JPn1caHRtbHJ0 ZiB9XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc5MiA8L0VNPn1caHRtbHJ0ZiB9XGh0 bWxydGYwIA0Ke1wqXGh0bWx0YWc4NCA8U1BBTiBsYW5nPUVOLVVTPn1caHRtbHJ0 ZiB7XGxhbmcxMDMzIFxodG1scnRmMCANCntcKlxodG1sdGFnMjQ0IDxvOnA+fQ0K e1wqXGh0bWx0YWcyNTIgPC9vOnA+fQ0Ke1wqXGh0bWx0YWc5MiA8L1NQQU4+fVxo dG1scnRmIH1caHRtbHJ0ZjAgXGh0bWxydGZccGFyfVxodG1scnRmMA0KXGh0bWxy dGYgXHBhcg0KXGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc3MiA8L1A+fQ0Ke1wqXGh0 bWx0YWcwIFxwYXIgfQ0Ke1wqXGh0bWx0YWcyNDAgICB9DQp7XCpcaHRtbHRhZzY0 IDxQIGNsYXNzPU1zb05vcm1hbD59XGh0bWxydGYge1xodG1scnRmMCBcbGkzNjAg DQp7XCpcaHRtbHRhZzg0IDxFTT59XGh0bWxydGYge1xpIFxodG1scnRmMCANCntc KlxodG1sdGFnODQgPEk+fVxodG1scnRmIHtcaSBcaHRtbHJ0ZjAgDQp7XCpcaHRt bHRhZzE0OCA8Rk9OVCBmYWNlPUFyaWFsIHNpemU9Mj59XGh0bWxydGYge1xmNCBc ZnMyMCBcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzg0IDxTUEFOIGxhbmc9RU4tVVMg XHBhciAgIHN0eWxlPSJGT05ULVNJWkU6IDEwcHQ7IEZPTlQtRkFNSUxZOiBBcmlh bCI+fVxodG1scnRmIHtcbGFuZzEwMzMgXGh0bWxydGYwIEZheDogDQp7XCpcaHRt bHRhZzQgXHBhciB9DQp7XCpcaHRtbHRhZzg0ICAgfTcwMy03MzgtNzcxNQ0Ke1wq XGh0bWx0YWc5MiA8L1NQQU4+fVxodG1scnRmIH1caHRtbHJ0ZjAgDQp7XCpcaHRt bHRhZzE1NiA8L0ZPTlQ+fVxodG1scnRmIH1caHRtbHJ0ZjAgDQp7XCpcaHRtbHRh ZzkyIDwvST59XGh0bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnOTIgPC9F TT59XGh0bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnODQgPFNQQU4gbGFu Zz1FTi1VUz59XGh0bWxydGYge1xsYW5nMTAzMyBcaHRtbHJ0ZjAgDQp7XCpcaHRt bHRhZzI0NCA8bzpwPn0NCntcKlxodG1sdGFnMjUyIDwvbzpwPn0NCntcKlxodG1s dGFnOTIgPC9TUEFOPn1caHRtbHJ0ZiB9XGh0bWxydGYwIFxodG1scnRmXHBhcn1c aHRtbHJ0ZjANClxodG1scnRmIFxwYXINClxodG1scnRmMCANCntcKlxodG1sdGFn NzIgPC9QPn0NCntcKlxodG1sdGFnMCBccGFyIH0NCntcKlxodG1sdGFnMjQwICAg fQ0Ke1wqXGh0bWx0YWc2NCA8UCBjbGFzcz1Nc29Ob3JtYWw+fVxodG1scnRmIHtc aHRtbHJ0ZjAgXGxpMzYwIA0Ke1wqXGh0bWx0YWcxNDggPEZPTlQgZmFjZT0iVGlt ZXMgTmV3IFJvbWFuIiBzaXplPTM+fVxodG1scnRmIHtcZjYgXGZzMjQgXGh0bWxy dGYwIA0Ke1wqXGh0bWx0YWc4NCA8U1BBTiBccGFyICAgc3R5bGU9IkZPTlQtU0la RTogMTJwdCI+fVxodG1scnRmIHtcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzg0ICZu YnNwO31caHRtbHJ0ZiBcJ2EwXGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcyNDQgPG86 cD59DQp7XCpcaHRtbHRhZzI1MiA8L286cD59DQp7XCpcaHRtbHRhZzkyIDwvU1BB Tj59XGh0bWxydGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnMTU2IDwvRk9OVD59 XGh0bWxydGYgfVxodG1scnRmMCBcaHRtbHJ0ZlxwYXJ9XGh0bWxydGYwDQpcaHRt bHJ0ZiBccGFyDQpcaHRtbHJ0ZjAgDQp7XCpcaHRtbHRhZzcyIDwvUD59DQp7XCpc aHRtbHRhZzAgXHBhciB9DQp7XCpcaHRtbHRhZzI0MCAgIH0NCntcKlxodG1sdGFn OTYgPERJVj59XGh0bWxydGYge1xodG1scnRmMCANCntcKlxodG1sdGFnMCBccGFy IH0NCntcKlxodG1sdGFnMjQwICAgfQ0Ke1wqXGh0bWx0YWc2NCA8UCBjbGFzcz1N c29Ob3JtYWw+fVxodG1scnRmIHtcaHRtbHJ0ZjAgXGxpMzYwIA0Ke1wqXGh0bWx0 YWcxNDggPEZPTlQgZmFjZT0iVGltZXMgTmV3IFJvbWFuIiBzaXplPTM+fVxodG1s cnRmIHtcZjYgXGZzMjQgXGh0bWxydGYwIA0Ke1wqXGh0bWx0YWc4NCA8U1BBTiBc cGFyICAgc3R5bGU9IkZPTlQtU0laRTogMTJwdCI+fVxodG1scnRmIHtcaHRtbHJ0 ZjAgDQp7XCpcaHRtbHRhZzg0ICZuYnNwO31caHRtbHJ0ZiBcJ2EwXGh0bWxydGYw IA0Ke1wqXGh0bWx0YWcyNDQgPG86cD59DQp7XCpcaHRtbHRhZzI1MiA8L286cD59 DQp7XCpcaHRtbHRhZzkyIDwvU1BBTj59XGh0bWxydGYgfVxodG1scnRmMCANCntc KlxodG1sdGFnMTU2IDwvRk9OVD59XGh0bWxydGYgfVxodG1scnRmMCBcaHRtbHJ0 ZlxwYXJ9XGh0bWxydGYwDQpcaHRtbHJ0ZiBccGFyDQpcaHRtbHJ0ZjAgDQp7XCpc aHRtbHRhZzcyIDwvUD59DQp7XCpcaHRtbHRhZzEwNCA8L0RJVj59XGh0bWxydGYg fVxodG1scnRmMCANCntcKlxodG1sdGFnMTA0IDwvQkxPQ0tRVU9URT59XGh0bWxy dGYgfVxodG1scnRmMCANCntcKlxodG1sdGFnMTA0IDwvRElWPn1caHRtbHJ0ZiB9 XGh0bWxydGYwIA0Ke1wqXGh0bWx0YWcxMDQgPC9ESVY+fVxodG1scnRmIH1caHRt bHJ0ZjAgDQp7XCpcaHRtbHRhZzU4IDwvQk9EWT59DQp7XCpcaHRtbHRhZzI3IDwv SFRNTD59DQp7XCpcaHRtbHRhZzMgXHBhciB9fQ== ----=_NextPart_DJD_34442552.065144088-- ----=_NextPart_DJD_34442552.065144218 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIIQ2AYJKoZIhvcNAQcCoIIQyTCCEMUCAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3 DQEHAaCCDOswggaIMIIFcKADAgECAgQ8eJdGMA0GCSqGSIb3DQEBBQUAMIGwMQsw CQYDVQQGEwJVUzEYMBYGA1UEChMPVS5TLiBHb3Zlcm5tZW50MRwwGgYDVQQLExNE ZXBhcnRtZW50IG9mIFN0YXRlMRAwDgYDVQQLEwdGQURTUEtJMSIwIAYDVQQLExlD ZXJ0aWZpY2F0aW9uIEF1dGhvcml0aWVzMTMwMQYDVQQLEypVLlMuIERlcGFydG1l bnQgb2YgU3RhdGUgSGlnaCBBc3N1cmFuY2UgQ0EwHhcNMDUwNDIxMjAyNjQyWhcN MDgwNDIxMjA1NjQyWjByMQswCQYDVQQGEwJVUzEYMBYGA1UEChMPVS5TLiBHb3Zl cm5tZW50MRwwGgYDVQQLExNEZXBhcnRtZW50IG9mIFN0YXRlMQ8wDQYDVQQLEwZJ TlNBTVMxGjAYBgNVBAMTEUJpbGwgUnVzc2VsbChNQUcpMIGfMA0GCSqGSIb3DQEB AQUAA4GNADCBiQKBgQCxMUVdfe2sSx0fIMdtVIHUE52jmJ/lU9ZLAFGXGNiQwHyv 382g+qGEdlklVjQmcwTTO7BFm8llCXBbrn8MbIHyiTJrIXi9+aGU/eGu7dy/o+1x No0Abfn2uUQr+JgpwAdnR5KvYCe7hQSW84HuhaFZi2zebugcvgd9/U4y+ExyQwID AQABo4IDaTCCA2UwDgYDVR0PAQH/BAQDAgbAMCsGA1UdEAQkMCKADzIwMDUwNDIx MjAyNjQyWoEPMjAwNzA0MjYwMzU2NDJaMCUGA1UdIAQeMBwwDAYKYIZIAWUDAgEG ATAMBgpghkgBZQMCAQYCMAwGA1UdEwEB/wQCMAAwWAYJYIZIAYb6ax4BBEsMSVRo ZSBwcml2YXRlIGtleSBjb3JyZXNwb25kaW5nIHRvIHRoaXMgY2VydGlmaWNhdGUg bWF5IGhhdmUgYmVlbiBleHBvcnRlZC4wKAYDVR0RBCEwH4EdcnVzc2VsbHdjQG1v dW50YWlyZXlncm91cC5uZXQwGwYDVR0JBBQwEjAQBgkqhkiG9n0HRB0xAwIBEjCC AfMGA1UdHwSCAeowggHmMIHMoIHJoIHGpIHDMIHAMQswCQYDVQQGEwJVUzEYMBYG A1UEChMPVS5TLiBHb3Zlcm5tZW50MRwwGgYDVQQLExNEZXBhcnRtZW50IG9mIFN0 YXRlMRAwDgYDVQQLEwdGQURTUEtJMSIwIAYDVQQLExlDZXJ0aWZpY2F0aW9uIEF1 dGhvcml0aWVzMTMwMQYDVQQLEypVLlMuIERlcGFydG1lbnQgb2YgU3RhdGUgSGln aCBBc3N1cmFuY2UgQ0ExDjAMBgNVBAMTBUNSTDkzMIHfoIHcoIHZhoHWbGRhcDov L2ZhZHNwdWJsaWMuc3RhdGUuZ292L291PVUuUy4lMjBEZXBhcnRtZW50JTIwb2Yl MjBTdGF0ZSUyMEhpZ2glMjBBc3N1cmFuY2UlMjBDQSxvdT1DZXJ0aWZpY2F0aW9u JTIwQXV0aG9yaXRpZXMsb3U9RkFEU1BLSSxvdT1EZXBhcnRtZW50JTIwb2YlMjBT dGF0ZSxvPVUuUy4lMjBHb3Zlcm5tZW50LGM9VVM/Y2VydGlmaWNhdGVSZXZvY2F0 aW9uTGlzdCUzQmJpbmFyeTAzoDGgL4YtaHR0cDovL3BraWNybHMuaXJtLnN0YXRl Lmdvdi9jcmxzL2Z1bGxjcmwuY3JsMB8GA1UdIwQYMBaAFOM6fPj3p+xJ8XOFwzmC VrEKM7oaMB0GA1UdDgQWBBRAxzlqQ1isI4o/mJxKiXmn79IyNTAZBgkqhkiG9n0H QQAEDDAKGwRWNy4wAwIEsDANBgkqhkiG9w0BAQUFAAOCAQEAmVBikh9eGx6OqQC7 +EaFSVB4PAtgGVntFnluPOaOX7eQ5wKjX44j7RNslWvh9/gU53Ltd888QrpYsinL UzHhj7YqFRQ3J7zEj+YmhXxPnb1CuonqttNIdiROE3xGZOGAGm5Bpi/GWPPNFKaF zJQ3VWJ3QlmXC8Z6SAUfo6CJX+GpeJbJ8Kljy/tSYTh1Cf9gfMnD1hQ6pYoHwmlO 2wzp5eW9OwGvwh4wqHxxBn0ohw15Sx/X7uDIPQl2aCAqIe/PTfg9bNBMBu9HDVkM 126wdWKCfYkAd1B27OJupVIgZVoPFfUhgiVueUEKYi9DKucnuc5umFefC6qgqCjr uP0/qzCCBlswggVDoAMCAQICBDx4XzAwDQYJKoZIhvcNAQEFBQAwgbAxCzAJBgNV BAYTAlVTMRgwFgYDVQQKEw9VLlMuIEdvdmVybm1lbnQxHDAaBgNVBAsTE0RlcGFy dG1lbnQgb2YgU3RhdGUxEDAOBgNVBAsTB0ZBRFNQS0kxIjAgBgNVBAsTGUNlcnRp ZmljYXRpb24gQXV0aG9yaXRpZXMxMzAxBgNVBAsTKlUuUy4gRGVwYXJ0bWVudCBv ZiBTdGF0ZSBIaWdoIEFzc3VyYW5jZSBDQTAeFw0wNTAyMDkxOTU1NDJaFw0wODAy MDkyMDI1NDJaMHIxCzAJBgNVBAYTAlVTMRgwFgYDVQQKEw9VLlMuIEdvdmVybm1l bnQxHDAaBgNVBAsTE0RlcGFydG1lbnQgb2YgU3RhdGUxDzANBgNVBAsTBklOU0FN UzEaMBgGA1UEAxMRQmlsbCBSdXNzZWxsKE1BRykwgZ8wDQYJKoZIhvcNAQEBBQAD gY0AMIGJAoGBAK8vY4h12CR2PQnpeuc6oebNxNTNBMqVaRFe/S5ZPIXgg7SdpiRi NXA3AKEGVxIFbNEt0dufjy7tcLuaTya40duwx0Z7/qsuSSYFt19bIcNv5mHVl5gy B0/LU/EbbKcFIxQdWkPQmBLCuRSc0Ozfzv5vk3y9Ljxvq19dHETUfl7xAgMBAAGj ggM8MIIDODAOBgNVHQ8BAf8EBAMCBSAwJQYDVR0gBB4wHDAMBgpghkgBZQMCAQYB MAwGCmCGSAFlAwIBBgIwDAYDVR0TAQH/BAIwADBYBglghkgBhvprHgEESwxJVGhl IHByaXZhdGUga2V5IGNvcnJlc3BvbmRpbmcgdG8gdGhpcyBjZXJ0aWZpY2F0ZSBt YXkgaGF2ZSBiZWVuIGV4cG9ydGVkLjAoBgNVHREEITAfgR1ydXNzZWxsd2NAbW91 bnRhaXJleWdyb3VwLm5ldDAbBgNVHQkEFDASMBAGCSqGSIb2fQdEHTEDAgESMIIB 8wYDVR0fBIIB6jCCAeYwgcyggcmggcakgcMwgcAxCzAJBgNVBAYTAlVTMRgwFgYD VQQKEw9VLlMuIEdvdmVybm1lbnQxHDAaBgNVBAsTE0RlcGFydG1lbnQgb2YgU3Rh dGUxEDAOBgNVBAsTB0ZBRFNQS0kxIjAgBgNVBAsTGUNlcnRpZmljYXRpb24gQXV0 aG9yaXRpZXMxMzAxBgNVBAsTKlUuUy4gRGVwYXJ0bWVudCBvZiBTdGF0ZSBIaWdo IEFzc3VyYW5jZSBDQTEOMAwGA1UEAxMFQ1JMODMwgd+ggdyggdmGgdZsZGFwOi8v ZmFkc3B1YmxpYy5zdGF0ZS5nb3Yvb3U9VS5TLiUyMERlcGFydG1lbnQlMjBvZiUy MFN0YXRlJTIwSGlnaCUyMEFzc3VyYW5jZSUyMENBLG91PUNlcnRpZmljYXRpb24l MjBBdXRob3JpdGllcyxvdT1GQURTUEtJLG91PURlcGFydG1lbnQlMjBvZiUyMFN0 YXRlLG89VS5TLiUyMEdvdmVybm1lbnQsYz1VUz9jZXJ0aWZpY2F0ZVJldm9jYXRp b25MaXN0JTNCYmluYXJ5MDOgMaAvhi1odHRwOi8vcGtpY3Jscy5pcm0uc3RhdGUu Z292L2NybHMvZnVsbGNybC5jcmwwHwYDVR0jBBgwFoAU4zp8+Pen7Enxc4XDOYJW sQozuhowHQYDVR0OBBYEFIcv+ykY7rMeaasLgi41VzopQI+oMBkGCSqGSIb2fQdB AAQMMAobBFY3LjADAgSQMA0GCSqGSIb3DQEBBQUAA4IBAQAruPnfZr40S4nuaT7Z DqGnh1XRxd8SzGvhmz8UWjimK3GVSNIU33B5GJY5pV/fj+xgqyoNdPo4hZXIAF2X Aj0fhUQezYvr69PIXIgQFiKFlQAlpQ+9nRExgpKKhiAnD4L96IZBtqvyt3yFs3zp 8AVGOooJyRv0hcOXYqgFInxEcgMr/WyZ1r5KqRQ7TELZTZPCCiPL2tdmG1yJIA7W lfHvGF7L7m0GJT70BEhv/rMX+1E2zAJVx4oYJB1+ADC2Q6ma3Lpt6xdfmhUkLtTB WY0oK8EZbatCuHkAy5vYZyDxDS9ADfgae7F1l+c+yEYrQ1FouaUrScx7aTwwIlVe 4Tu0MYIDtTCCA7ECAQEwgbkwgbAxCzAJBgNVBAYTAlVTMRgwFgYDVQQKEw9VLlMu IEdvdmVybm1lbnQxHDAaBgNVBAsTE0RlcGFydG1lbnQgb2YgU3RhdGUxEDAOBgNV BAsTB0ZBRFNQS0kxIjAgBgNVBAsTGUNlcnRpZmljYXRpb24gQXV0aG9yaXRpZXMx MzAxBgNVBAsTKlUuUy4gRGVwYXJ0bWVudCBvZiBTdGF0ZSBIaWdoIEFzc3VyYW5j ZSBDQQIEPHiXRjAJBgUrDgMCGgUAoIICUTAYBgkqhkiG9w0BCQMxCwYJKoZIhvcN AQcBMBwGCSqGSIb3DQEJBTEPFw0wNjA2MTkxMDUxNDRaMCMGCSqGSIb3DQEJBDEW BBS/FE7IJ9HoU72QTF5GzkhugmxzHTCBzAYLKoZIhvcNAQkQAgsxgbyggbkwgbAx CzAJBgNVBAYTAlVTMRgwFgYDVQQKEw9VLlMuIEdvdmVybm1lbnQxHDAaBgNVBAsT E0RlcGFydG1lbnQgb2YgU3RhdGUxEDAOBgNVBAsTB0ZBRFNQS0kxIjAgBgNVBAsT GUNlcnRpZmljYXRpb24gQXV0aG9yaXRpZXMxMzAxBgNVBAsTKlUuUy4gRGVwYXJ0 bWVudCBvZiBTdGF0ZSBIaWdoIEFzc3VyYW5jZSBDQQIEPHhfMDCCASEGCSqGSIb3 DQEJDzGCARIwggEOMAsGCWCGSAFlAwQBKjALBglghkgBZQMEARYwCwYJYIZIAWUD BAECMA8GCSqGSIb2fQdCCgICAIAwDgYIKoZIhvcNAwICAgCAMAoGCCqGSIb3DQMH MA0GCysGAQQBgTwHAQECMA4GCSqGSIb2fQdCCgIBKDANBggqhkiG9w0DAgIBKDAH BgUrDgMCBzAHBgUrDgMCGjAKBggqhkiG9w0CBTALBgkqhkiG9w0BAQEwCwYJKoZI hvcNAQEHMAkGByqGSM44BAEwCQYHKoZIzj0CATALBgkqhkiG9w0BAQUwCwYJKoZI hvcNAQEEMAkGByqGSM44BAMwCQYHKoZIzj0EATAMBgoqhkiG9w0BCQ8BMA0GCSqG SIb3DQEBAQUABIGAH06Sgv38SVgg7Z/FqNOPnLbOw+7/Tp9fJFcsHOkp1R64l/++ sQudJwG9YlwEk7g6pzsxP4ZWQil4GgkCbUoK390sgUAr0AahziW4KmZwcCfdVgC/ luHN2NHLqx+E7uZOQ83JmzcXvtsZhSP0CAFCWOSt6hQ1X56ouhlSNMyanVk= ----=_NextPart_DJD_34442552.065144218-- Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5J8cxsg023229; Mon, 19 Jun 2006 01:38:59 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.13.5/8.13.5/Submit) id k5J8cx6P023228; Mon, 19 Jun 2006 01:38:59 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from mucmx01.ixos.de (mucmx01.ixos.de [149.235.128.48]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5J8cvfq023221 for ; Mon, 19 Jun 2006 01:38:57 -0700 (MST) (envelope-from tgondrom@opentext.com) Received: from MUCXGC2.opentext.net (localhost [127.0.0.1]) by mucmx01.ixos.de (8.12.10+Sun/8.12.10) with ESMTP id k5J8cVFV024455; Mon, 19 Jun 2006 10:38:44 +0200 (MEST) X-MimeOLE: Produced By Microsoft Exchange V6.5.7226.0 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C6937B.C1864A50" Subject: RE: Signed messages Date: Mon, 19 Jun 2006 10:38:36 +0200 Message-ID: <2666EB2A846BAC4BB2D7F593301A78683C5E8C@MUCXGC2.opentext.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Signed messages Thread-Index: AcaQgtyRKbepW95VSqKNHk2PUI5jkgC5w+wA X-Priority: 5 Importance: low From: "Tobias Gondrom" To: "Guida, Richard [JJCUS]" , "Bill Russell" , Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: This is a multi-part message in MIME format. ------_=_NextPart_001_01C6937B.C1864A50 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Bill, had the same problem (as Richard) with the one signed message you sent. With Richards' signed message it's working tine as are others. (probably just a configuration problem wit your client) =20 Tobias =20 ________________________________ From: owner-ietf-ltans@mail.imc.org [mailto:owner-ietf-ltans@mail.imc.org] On Behalf Of Guida, Richard [JJCUS] Sent: Thursday, June 15, 2006 3:40 PM To: 'Bill Russell'; ietf-ltans@imc.org Subject: RE: Signed messages =20 Bill - I also could not read your signed message - it came in with the blue encrypted icon. When I opened it using a hex editor, it was of course not encrypted - I could actually read your text - but for some reason, Outlook (at least my Outlook - both 2000 and 2003) was interpreting the SMIME package as encrypted and not decoding it properly. I do experience this problem (very infrequently) with incoming e-mail I will send a signed e-mail to the listserv shortly using my J&J cert and Outlook 2000 as the client, just for test purposes. Of course the signature will show up as invalid because you don't have my trusted root (it is publicly available on the internet through an SSL-secure site using a VeriSign cert, URL https://www.jnj.com/jjeds/index.html?secure=3Dtrue , so don't be surprised when that happens. =20 =20 Richard A. Guida=20 Director, Information Security=20 Johnson & Johnson=20 Room GS8217=20 410 George Street=20 New Brunswick, New Jersey 08901=20 Phone: 732 524 3785=20 -----Original Message----- From: owner-ietf-ltans@mail.imc.org [mailto:owner-ietf-ltans@mail.imc.org]On Behalf Of Bill Russell Sent: Wednesday, June 14, 2006 10:36 PM To: ietf-ltans@imc.org Subject: Signed messages Has anyone else had any trouble sending signed messages to the listserv? I noticed Peter's are going through, but two of mine have gone out signed and get distributed as signed/encrypted (which my own client can't even read). I'm not sure if that is a product of using an Entrust plug-in rather than native S/MIME for Outlook, but just curious if anyone else has had any similar problems. =20 Thanks, =20 Bill Russell, CISSP, ISSAP Vice President Mount Airey Group, Inc. http://www.mountaireygroup.net Cell: 571-334-1671 Fax: 703-738-7715 =20 =20 ------_=_NextPart_001_01C6937B.C1864A50 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Bill, had the = same problem (as Richard) with the one signed message you = sent.

With = Richards’ signed message it’s working tine as are = others.

(probably just a configuration problem wit your client)

 =

Tobias=

 =

From: owner-ietf-ltans@mail.imc.org [mailto:owner-ietf-ltans@mail.imc.org] = On Behalf Of Guida, Richard = [JJCUS]
Sent: Thursday, June 15, = 2006 3:40 PM
To: 'Bill Russell'; ietf-ltans@imc.org
Subject: RE: Signed = messages

 

Bill - I also = could not read your signed message - it came in with the blue encrypted = icon.  When I opened it using a hex editor, it was of course not encrypted - I could actually read your text - but for some reason, Outlook (at least my = Outlook - both 2000 and 2003) was interpreting the SMIME package as encrypted and = not decoding it properly.  I do experience this problem (very = infrequently) with incoming e-mail   I will send a signed e-mail to the = listserv shortly using my J&J cert and Outlook 2000 as the client, just for = test purposes.  Of course the signature will show up as invalid because = you don't have my trusted root (it is publicly available on the internet = through an SSL-secure site using a VeriSign cert, URL https://www.jnj.com/jjeds/index.html?secure=3Dtrue, so don't be surprised when that = happens.

 

 

Richard A. = Guida
Director, Information = Security

J= ohnson & Johnson
Room GS8217
410 George Street =
New Brunswick, New Jersey  = 08901
Phone:  732 524 3785

-----Original Message-----
From: owner-ietf-ltans@mail.imc.org = [mailto:owner-ietf-ltans@mail.imc.org]On Behalf Of Bill Russell
Sent: Wednesday, June 14, = 2006 10:36 PM
To: = ietf-ltans@imc.org
Subject: Signed = messages

Has anyone else had any trouble sending signed messages to the listserv?  I noticed Peter's are going through, but = two of mine have gone out signed and get distributed as signed/encrypted (which = my own client can't even read).  I'm not sure if that is a product of = using an Entrust plug-in rather than native S/MIME for Outlook, but just curious = if anyone else has had any similar problems.

 

Thanks,

 

Bill Russell, CISSP, = ISSAP

Vice = President

Mount Airey Group, = Inc.

http://www.mountaireygroup.net<= /i>

Cell: = 571-334-1671

Fax: = 703-738-7715

 

 

------_=_NextPart_001_01C6937B.C1864A50-- Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5FDegNO075992; Thu, 15 Jun 2006 06:40:42 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.13.5/8.13.5/Submit) id k5FDegdq075991; Thu, 15 Jun 2006 06:40:42 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from ncsusraimge01.jnj.com (ncsusraimge01.jnj.com [148.177.2.21]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5FDefmW075951 for ; Thu, 15 Jun 2006 06:40:41 -0700 (MST) (envelope-from RGuida@CORUS.JNJ.com) Received: from ncsusrawsa2.na.jnj.com ([10.4.21.2]) by ncsusraimge01.jnj.com (Switch-3.1.8/Switch-3.1.7) with SMTP id k5FDeZrQ024008; Thu, 15 Jun 2006 09:40:35 -0400 (EDT) Received: from (10.4.20.170) by ncsusrawsa2.na.jnj.com via smtp id 1ffb_542982ce_fc76_11da_99f4_0002b3ec9bcc; Thu, 15 Jun 2006 09:53:30 -0400 Received: by ncsusraexims2.na.jnj.com with Internet Mail Service (5.5.2658.3) id ; Thu, 15 Jun 2006 09:40:35 -0400 Message-ID: <8C9266D8DEC7B3439D3A49E57068441008234E93@jjcusnbexs4.na.jnj.com> From: "Guida, Richard [JJCUS]" To: "'Bill Russell'" , ietf-ltans@imc.org Subject: RE: Signed messages Date: Thu, 15 Jun 2006 09:40:23 -0400 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2658.3) MIME-Version: 1.0 Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0009_01C6905F.B6857410" X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1807 Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: This is a multi-part message in MIME format. ------=_NextPart_000_0009_01C6905F.B6857410 Content-Type: multipart/alternative; boundary="----=_NextPart_001_000A_01C6905F.B6857410" ------=_NextPart_001_000A_01C6905F.B6857410 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit O.k. this one is signed using my J&J cert (of course, my J&J private key corresponding to the public key in the cert....) Richard A. Guida Director, Information Security Johnson & Johnson Room GS8217 410 George Street New Brunswick, New Jersey 08901 Phone: 732 524 3785 -----Original Message----- From: owner-ietf-ltans@mail.imc.org [mailto:owner-ietf-ltans@mail.imc.org]On Behalf Of Bill Russell Sent: Wednesday, June 14, 2006 10:36 PM To: ietf-ltans@imc.org Subject: Signed messages Has anyone else had any trouble sending signed messages to the listserv? I noticed Peter's are going through, but two of mine have gone out signed and get distributed as signed/encrypted (which my own client can't even read). I'm not sure if that is a product of using an Entrust plug-in rather than native S/MIME for Outlook, but just curious if anyone else has had any similar problems. Thanks, Bill Russell, CISSP, ISSAP Vice President Mount Airey Group, Inc. http://www.mountaireygroup.net Cell: 571-334-1671 Fax: 703-738-7715 ------=_NextPart_001_000A_01C6905F.B6857410 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
O.k.=20 this one is signed using my J&J cert (of course, my J&J private = key=20 corresponding to the public key in the cert....)
 

Johnson = &=20 Johnson
Room = GS8217=20
410 George Street
New Brunswick, New Jersey  08901
Phone:  732 524 3785

-----Original Message-----
From:=20 owner-ietf-ltans@mail.imc.org = [mailto:owner-ietf-ltans@mail.imc.org]On=20 Behalf Of Bill Russell
Sent: Wednesday, June 14, 2006 = 10:36=20 PM
To: ietf-ltans@imc.org
Subject: Signed=20 messages

Has = anyone else=20 had any trouble sending signed messages to the listserv?  I = noticed=20 Peter's are going through, but two of mine have gone out signed and = get=20 distributed as signed/encrypted (which my own client can't even = read). =20 I'm not sure if that is a product of using an Entrust plug-in rather = than=20 native S/MIME for Outlook, but just curious if anyone else has had any = similar=20 problems.
 
Thanks,
 

Bill Russell, CISSP,=20 ISSAP

Vice = President

Mount Airey Group,=20 Inc.

http://www.mountaireygroup.net

Cell: = 571-334-1671

Fax: = 703-738-7715

 

 
------=_NextPart_001_000A_01C6905F.B6857410-- ------=_NextPart_000_0009_01C6905F.B6857410 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIMyzCCA7Aw ggMZoAMCAQICBDxXq94wDQYJKoZIhvcNAQEFBQAwdzELMAkGA1UEBhMCVVMxDDAKBgNVBAoTA0pO SjEjMCEGA1UECxMaSk5KIFB1YmxpYyBLZXkgQXV0aG9yaXRpZXMxNTAzBgNVBAMTLEpOSiBQcmlu Y2lwYWwgT25MaW5lIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTAxMTIxMjIxNTczNVoXDTA2 MTIxMTIxNTczNVowfTELMAkGA1UEBhMCVVMxDDAKBgNVBAoTA0pOSjESMBAGA1UECxMJRW1wbG95 ZWVzMQ8wDQYDVQQLEwYxNzE3MDkxFjAUBgNVBAMTDVJJQ0hBUkQgR1VJREExIzAhBgkqhkiG9w0B CQEWFFJHdWlkYUBDT1JVUy5KTkouY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCUAb1X gf4DB2UHZcJDSzAaU4uUEWu3LFQLuhev9lTFVBXjt/5RaSQ6ekE55AL+xqgbOqMr36zaNDr5bSWu fHsFI+aD8ODY+v1Jkw/rP/dlfJHWkbXUL60IRyNl0VTc9ab92Jf8YgCyxF3v6Wi2u9gbj6qvfgRW OX3Bwzi9Z1sgFQIDAQABo4IBQTCCAT0wHwYDVR0RBBgwFoEUUkd1aWRhQENPUlVTLkpOSi5jb20w DgYDVR0PAQH/BAQDAgQwMGIGA1UdIARbMFkwVwYLYIZIAYb4AgMCAQMwSDAqBggrBgEFBQcCARYe aHR0cDovL2pqZWRzY3BzLmpuai5jb20vY3AucGRmMBoGCCsGAQUFBwICMA4aDGNlcnRTb2Z0d2Fy ZTAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vamplZHNjcmwuam5qLmNvbS9wb2xjYS5jcmwwEQYJ YIZIAYb4QgEBBAQDAgUgMB8GA1UdJQQYMBYGCisGAQQBgjcKAwQGCCsGAQUFBwMEMB0GA1UdDgQW BBR7oqPyNZLeR/EOT/Wpz7D3pDyCEDAfBgNVHSMEGDAWgBTrP3LTphVRQO45ABi6TPJuzU+uxjAN BgkqhkiG9w0BAQUFAAOBgQArKFlO5Cw+Onb2XvomK39pGKHZhgzPHL8+cKQ/23xadl+AtLaFJZxK AJCAIvDLHdK00x2nTQqcWZyP2jd0TEazbWJ8tdsk5mxhu3P/+D/bFcYv0ApJaPBq6yX8auPqrjuV Ev9ZbA32teQTB5STCNt2VmcxWiZp8a3R0iPkjrQCXjCCA7owggMjoAMCAQICBDxXq90wDQYJKoZI hvcNAQEFBQAwdzELMAkGA1UEBhMCVVMxDDAKBgNVBAoTA0pOSjEjMCEGA1UECxMaSk5KIFB1Ymxp YyBLZXkgQXV0aG9yaXRpZXMxNTAzBgNVBAMTLEpOSiBQcmluY2lwYWwgT25MaW5lIENlcnRpZmlj YXRpb24gQXV0aG9yaXR5MB4XDTAxMTIxMjIxNTQ1NFoXDTA2MTIxMTIxNTQ1NFowfTELMAkGA1UE BhMCVVMxDDAKBgNVBAoTA0pOSjESMBAGA1UECxMJRW1wbG95ZWVzMQ8wDQYDVQQLEwYxNzE3MDkx FjAUBgNVBAMTDVJJQ0hBUkQgR1VJREExIzAhBgkqhkiG9w0BCQEWFFJHdWlkYUBDT1JVUy5KTkou Y29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC9NQ9n1rFwYOnrgkZru+WvEm5vxYMy8s9L X7lsWm031Yz4LBexxj1PHaR3gQG+lXw0KlJdflfLRsBJcf6zR/OgtFJSYQO6Erj551Bilj7V3sa/ syIaWCb9in1BMTCDi1527MpxhaWtpifONkcdTYvCUxcSkzD7561wrB8HPulxTwIDAQABo4IBSzCC AUcwHwYDVR0RBBgwFoEUUkd1aWRhQENPUlVTLkpOSi5jb20wDgYDVR0PAQH/BAQDAgbAMDIGA1Ud HwQrMCkwJ6AloCOGIWh0dHA6Ly9qamVkc2NybC5qbmouY29tL3BvbGNhLmNybDARBglghkgBhvhC AQEEBAMCBaAwYgYDVR0gBFswWTBXBgtghkgBhvgCAwIBBDBIMCoGCCsGAQUFBwIBFh5odHRwOi8v amplZHNjcHMuam5qLmNvbS9jcC5wZGYwGgYIKwYBBQUHAgIwDhoMY2VydEhhcmR3YXJlMCkGA1Ud JQQiMCAGCisGAQQBgjcUAgIGCCsGAQUFBwMCBggrBgEFBQcDBDAdBgNVHQ4EFgQU7s3lQNtc00F2 r1Oem9BgGxfYXhEwHwYDVR0jBBgwFoAU6z9y06YVUUDuOQAYukzybs1PrsYwDQYJKoZIhvcNAQEF BQADgYEAVrb4QfqYd0w6Iv3iUwG6giCw31bw4LhnjwgTQeNKD1gPPoA/jIhsXmfB/TdKhBlIqi5v FyM0+ZOyWQu8JJ/HvnjPl6rcf89VWz5jI0lw6iu3gGJZyiDJHJRcEmWlyC+oPOUi8umRV763FVTX XOoD806/ETmIgL/iPP3fPd5LjNMwggVVMIIEvqADAgECAgQ8WAg3MA0GCSqGSIb3DQEBBQUAMGsx CzAJBgNVBAYTAlVTMQwwCgYDVQQKEwNKTkoxIzAhBgNVBAsTGkpOSiBQdWJsaWMgS2V5IEF1dGhv cml0aWVzMSkwJwYDVQQDEyBKTkogUm9vdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAeFw0wMTEy MDMxNzI1NTBaFw0xMTEyMDIxNzI1NTBaMHcxCzAJBgNVBAYTAlVTMQwwCgYDVQQKEwNKTkoxIzAh BgNVBAsTGkpOSiBQdWJsaWMgS2V5IEF1dGhvcml0aWVzMTUwMwYDVQQDEyxKTkogUHJpbmNpcGFs IE9uTGluZSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkC gYEAsuYeuKgfWKTUz2rW2IFHt9VLLoPMJlQk0KqRFJQLF/xJM5pfz6fVW1KS+ozG7RPHy1XnTtrP 0R4/yk8Hh1o5bSGSHH1QH52vscDIJnAUX0CClnxfALl+HkyOyluxtFLH5lzmf1zduqqZDmt1dUoD VAI8csl6fCwoZ0mIh+uKD00CAwEAAaOCAvgwggL0MB0GA1UdDgQWBBTrP3LTphVRQO45ABi6TPJu zU+uxjAfBgNVHSMEGDAWgBTLsdBFEC05nLwT9l3r4dQPIDK7dTASBgNVHRMBAf8ECDAGAQH/AgEA MBEGCWCGSAGG+EIBAQQEAwIABzCBpwYDVR0fBIGfMIGcMIGZoCagJIYiaHR0cDovL2pqZWRzY3Js Lmpuai5jb20vcm9vdGNhLmNybKJvpG0wazELMAkGA1UEBhMCVVMxDDAKBgNVBAoTA0pOSjEjMCEG A1UECxMaSk5KIFB1YmxpYyBLZXkgQXV0aG9yaXRpZXMxKTAnBgNVBAMTIEpOSiBSb290IENlcnRp ZmljYXRpb24gQXV0aG9yaXR5MIIBzwYDVR0gBIIBxjCCAcIwDQYLYIZIAYb4AgMCAQAwDQYLYIZI AYb4AgMCAQEwDQYLYIZIAYb4AgMCAQIwDQYLYIZIAYb4AgMCAQMwDQYLYIZIAYb4AgMCAQQwDQYL YIZIAYb4AgMCAQUwDQYLYIZIAYb4AgMCAQYwDQYLYIZIAYb4AgMCAQcwDQYLYIZIAYb4AgMCAQgw DQYLYIZIAYb4AgMCAQkwDQYLYIZIAYb4AgMCAQowDQYLYIZIAYb4AgMCAQswDQYLYIZIAYb4AgMC AQwwDQYLYIZIAYb4AgMCAQ0wDQYLYIZIAYb4AgMCAQ4wDQYLYIZIAYb4AgMCAQ8wDQYLYIZIAYb4 AgMCARAwDQYLYIZIAYb4AgMCAREwDQYLYIZIAYb4AgMCARIwDQYLYIZIAYb4AgMCARMwDQYLYIZI AYb4AgMCARQwDQYLYIZIAYb4AgMCARUwDQYLYIZIAYb4AgMCARYwDQYLYIZIAYb4AgMCARcwDQYL YIZIAYb4AgMCARgwDQYLYIZIAYb4AgMCARkwDQYLYIZIAYb4AgMCARowDQYLYIZIAYb4AgMCARsw DQYLYIZIAYb4AgMCARwwDQYLYIZIAYb4AgMCAR0wDgYDVR0PAQH/BAQDAgEGMA0GCSqGSIb3DQEB BQUAA4GBABWc0KeDrhI8YiloFLxD9Vn7ftTLYWfBunjSVFu7lPYYR7UpizQ3/yn5M4yAj3YFmzlp FC5fCEX1kWe1DrWuUNCu9205J1RpPEWBeUEpQrV0u3PaMeK1q6JnKXreb8fGq9G9a/wkSoQdaP+K kfY+jZ96E+cF9HtR1cXKNzNU5ZekMYIC9zCCAvMCAQEwfzB3MQswCQYDVQQGEwJVUzEMMAoGA1UE ChMDSk5KMSMwIQYDVQQLExpKTkogUHVibGljIEtleSBBdXRob3JpdGllczE1MDMGA1UEAxMsSk5K IFByaW5jaXBhbCBPbkxpbmUgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkCBDxXq90wCQYFKw4DAhoF AKCCAc4wGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMDYwNjE1MTM0 MDE4WjAjBgkqhkiG9w0BCQQxFgQUSKLd+8eJtiuVESHo2IblQwV1ihMwSQYJKoZIhvcNAQkPMTww OjAKBggqhkiG9w0DBzAOBggqhkiG9w0DAgICAIAwBwYFKw4DAgcwBwYFKw4DAhowCgYIKoZIhvcN AgUwgY8GCSsGAQQBgjcQBDGBgTB/MHcxCzAJBgNVBAYTAlVTMQwwCgYDVQQKEwNKTkoxIzAhBgNV BAsTGkpOSiBQdWJsaWMgS2V5IEF1dGhvcml0aWVzMTUwMwYDVQQDEyxKTkogUHJpbmNpcGFsIE9u TGluZSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eQIEPFer3jCBkQYLKoZIhvcNAQkQAgsxgYGgfzB3 MQswCQYDVQQGEwJVUzEMMAoGA1UEChMDSk5KMSMwIQYDVQQLExpKTkogUHVibGljIEtleSBBdXRo b3JpdGllczE1MDMGA1UEAxMsSk5KIFByaW5jaXBhbCBPbkxpbmUgQ2VydGlmaWNhdGlvbiBBdXRo b3JpdHkCBDxXq94wDQYJKoZIhvcNAQEBBQAEgYCYUQHv1GVgoa5dxZOjcEhpRQ9qA8LbDL8F1/mO +1AjEyVH1PnwYG9iD7XbAH7aXm/LlODt6jJ1TBicintry+ydrcHrO9hsX5is7vPA5DHxTTuIhU2w tYxWlbl+HoZAojxpLxMYeIU+N985Dnd7nInZpk3bKT77vu07Ti4YDF5UagAAAAAAAA== ------=_NextPart_000_0009_01C6905F.B6857410-- Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5FDduUM075757; Thu, 15 Jun 2006 06:39:56 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.13.5/8.13.5/Submit) id k5FDduhe075756; Thu, 15 Jun 2006 06:39:56 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from ncsusraimge01.jnj.com (ncsusraimge01.jnj.com [148.177.2.21]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5FDds5c075713 for ; Thu, 15 Jun 2006 06:39:55 -0700 (MST) (envelope-from RGuida@CORUS.JNJ.com) Received: from ncsusrawsa2.na.jnj.com ([10.4.21.2]) by ncsusraimge01.jnj.com (Switch-3.1.8/Switch-3.1.7) with SMTP id k5FDdjHa023661; Thu, 15 Jun 2006 09:39:48 -0400 (EDT) Received: from (10.4.20.168) by ncsusrawsa2.na.jnj.com via smtp id 1b85_364c91d8_fc76_11da_8456_0002b3ec9bcc; Thu, 15 Jun 2006 09:52:40 -0400 Received: by NCSUSRAEXIMS1.na.jnj.com with Internet Mail Service (5.5.2658.3) id ; Thu, 15 Jun 2006 09:39:45 -0400 Message-ID: <8C9266D8DEC7B3439D3A49E57068441008234E92@jjcusnbexs4.na.jnj.com> From: "Guida, Richard [JJCUS]" To: "'Bill Russell'" , ietf-ltans@imc.org Subject: RE: Signed messages Date: Thu, 15 Jun 2006 09:39:42 -0400 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2658.3) Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C69080.68DF8DFC" Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01C69080.68DF8DFC Content-Type: text/plain Bill - I also could not read your signed message - it came in with the blue encrypted icon. When I opened it using a hex editor, it was of course not encrypted - I could actually read your text - but for some reason, Outlook (at least my Outlook - both 2000 and 2003) was interpreting the SMIME package as encrypted and not decoding it properly. I do experience this problem (very infrequently) with incoming e-mail I will send a signed e-mail to the listserv shortly using my J&J cert and Outlook 2000 as the client, just for test purposes. Of course the signature will show up as invalid because you don't have my trusted root (it is publicly available on the internet through an SSL-secure site using a VeriSign cert, URL https://www.jnj.com/jjeds/index.html?secure=true , so don't be surprised when that happens. Richard A. Guida Director, Information Security Johnson & Johnson Room GS8217 410 George Street New Brunswick, New Jersey 08901 Phone: 732 524 3785 -----Original Message----- From: owner-ietf-ltans@mail.imc.org [mailto:owner-ietf-ltans@mail.imc.org]On Behalf Of Bill Russell Sent: Wednesday, June 14, 2006 10:36 PM To: ietf-ltans@imc.org Subject: Signed messages Has anyone else had any trouble sending signed messages to the listserv? I noticed Peter's are going through, but two of mine have gone out signed and get distributed as signed/encrypted (which my own client can't even read). I'm not sure if that is a product of using an Entrust plug-in rather than native S/MIME for Outlook, but just curious if anyone else has had any similar problems. Thanks, Bill Russell, CISSP, ISSAP Vice President Mount Airey Group, Inc. http://www.mountaireygroup.net Cell: 571-334-1671 Fax: 703-738-7715 ------_=_NextPart_001_01C69080.68DF8DFC Content-Type: text/html
Bill - I also could not read your signed message - it came in with the blue encrypted icon.  When I opened it using a hex editor, it was of course not encrypted - I could actually read your text - but for some reason, Outlook (at least my Outlook - both 2000 and 2003) was interpreting the SMIME package as encrypted and not decoding it properly.  I do experience this problem (very infrequently) with incoming e-mail   I will send a signed e-mail to the listserv shortly using my J&J cert and Outlook 2000 as the client, just for test purposes.  Of course the signature will show up as invalid because you don't have my trusted root (it is publicly available on the internet through an SSL-secure site using a VeriSign cert, URL https://www.jnj.com/jjeds/index.html?secure=true, so don't be surprised when that happens.
 

Richard A. Guida
Director, Information Security

Johnson & Johnson
Room GS8217
410 George Street
New Brunswick, New Jersey  08901
Phone:  732 524 3785

-----Original Message-----
From: owner-ietf-ltans@mail.imc.org [mailto:owner-ietf-ltans@mail.imc.org]On Behalf Of Bill Russell
Sent: Wednesday, June 14, 2006 10:36 PM
To: ietf-ltans@imc.org
Subject: Signed messages

Has anyone else had any trouble sending signed messages to the listserv?  I noticed Peter's are going through, but two of mine have gone out signed and get distributed as signed/encrypted (which my own client can't even read).  I'm not sure if that is a product of using an Entrust plug-in rather than native S/MIME for Outlook, but just curious if anyone else has had any similar problems.
 
Thanks,
 

Bill Russell, CISSP, ISSAP

Vice President

Mount Airey Group, Inc.

http://www.mountaireygroup.net

Cell: 571-334-1671

Fax: 703-738-7715

 

 
------_=_NextPart_001_01C69080.68DF8DFC-- Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5FBGMJx030440; Thu, 15 Jun 2006 04:16:22 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.13.5/8.13.5/Submit) id k5FBGMlv030439; Thu, 15 Jun 2006 04:16:22 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from edelweb.fr (edelweb.fr [212.234.46.16]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5FBGLZh030431 for ; Thu, 15 Jun 2006 04:16:22 -0700 (MST) (envelope-from Peter.Sylvester@edelweb.fr) Received: from [193.51.14.5] (localhost [127.0.0.1]) by edelweb.fr (8.11.7p1+Sun/8.11.7) with ESMTP id k5FBGK024314 for ; Thu, 15 Jun 2006 13:16:20 +0200 (MEST) Received: from [193.51.14.5] (emeriau.edelweb.fr [193.51.14.5]) by edelweb.fr (nospam/2.4); Thu, 15 Jun 2006 13:16:20 +0200 (MET DST) Message-ID: <44914119.9030009@edelweb.fr> Date: Thu, 15 Jun 2006 13:14:33 +0200 From: Peter Sylvester User-Agent: Thunderbird 1.5 (X11/20051025) MIME-Version: 1.0 To: ietf-ltans@imc.org Subject: [Fwd: Re: ERS 7] Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: -------- Original Message -------- Subject: Re: ERS 7 Date: Wed, 14 Jun 2006 13:41:47 +0200 From: Peter Sylvester To: Bill Russell CC: ietf-ltans@imc.org References: <20060612214319.HCID21801.mta9.adelphia.net@mocha> Bill Russell wrote: > > / / > > I apologize if the group as already addressed some of these points, > but I've been going through the latest draft and have a couple of > comments/questions. > > For the ArchiveTimeStamp, defined as: > > ArchiveTimeStamp ::= SEQUENCE { > digestAlgorithm AlgorithmIdentifier OPTIONAL, > reducedHashtree [0] EXPLICIT SEQUENCE OF SEQUENCE OF OCTET > STRING OPTIONAL, > timeStamp ContentInfo } It has already been discussed that this syntax is ambiguous and furthermore there is no need for the EXPLICIT. I propose AchiveTimeStamp ::= SEQUENCE { digestAlgorithm AlgorithmIdentifier OPTIONAL, reducedHashtree [0] SEQUENCE OF SEQUENCE OF OCTET STRING OPTIONAL, timeStamp [1] ContentInfo } or AchiveTimeStamp ::= SEQUENCE { digestAlgorithm [0] AlgorithmIdentifier OPTIONAL, reducedHashtree [1] SEQUENCE OF SEQUENCE OF OCTET STRING OPTIONAL, timeStamp ContentInfo } or something similar > > > * It's not clear to me why the reducedHashtree is OPTIONAL. Even if > the tree only has one node, wouldn't you still want it to contain a > hash of the one node? It seems to add unnecessary complexity to make > it optional. If it makes since to keep it optional, is there a reason > why we would choose to make it EXPLICIT instead of IMPLICIT? I know > it only adds a couple of bytes, but I'm not clear why we would use > it. If we remove "OPTIONAL" from the reducedHashTree, then we can > also remove it from digestAlgorithm. I leave it to the authors to comment about making the tree OPTIONAL. > > * For the ContentInfo, would it make sense to just expand it in place > here rather than import this from CMS? Is it borrowing conceptually > from CMS for this? I couldn't think of why conceptually we were > borrowing from CMS rather than just defining it outright. In fact, to me it seems that the ContentType should be a parameterized type so that one can limit the possible types. > > For the EvidenceRecord, I have a couple of comments: > > EvidenceRecord ::= SEQUENCE { > version INTEGER { v1(1) }, > digestAlgorithms SEQUENCE SIZE (1..MAX) OF > AlgorithmIdentifier, > cryptoInfos [0] CryptoInfos OPTIONAL, > encryptionInfo [1] EncryptionInfo OPTIONAL, > archiveTimeStampSequence ArchiveTimeStampSequence } > > * The version integer probably should start at 0 to keep convention of > other RFCs, cf RFC 3280 > * For digestAlgorithms, I think it would be better to import from RFC > 3852 and use DigestAlgorithmIdentifiers (which does this as a SET > instead of a sequence). Conceptually, this serves the same purpose > as CMS's DigestAlgorithmIdentifiers. > > For EncryptionInfo, defined as: > EncryptionInfo ::= SEQUENCE { > encryptionInfoType OBJECT IDENTIFIER, > encryptionInfoValue [0] EXPLICIT ANY DEFINED BY encryptionInfoType > } > > * The context point of [0] seems unnecessary since the field is not > optional indeed. and it should not be ANY DEFINED BY but > > Take care, > Bill > -- To verify the signature, see http://edelpki.edelweb.fr/ Cela vous permet de charger le certificat de l'autorité; die Liste mit zurückgerufenen Zertifikaten finden Sie da auch. -- To verify the signature, see http://edelpki.edelweb.fr/ Cela vous permet de charger le certificat de l'autorité; die Liste mit zurückgerufenen Zertifikaten finden Sie da auch. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5FAPVtW015189; Thu, 15 Jun 2006 03:25:31 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.13.5/8.13.5/Submit) id k5FAPVoo015188; Thu, 15 Jun 2006 03:25:31 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from EXVS01.ex.dslextreme.net (exvs01.ex.dslextreme.net [66.51.199.51]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5FAPUEY015154 for ; Thu, 15 Jun 2006 03:25:31 -0700 (MST) (envelope-from cwallace@orionsec.com) X-MimeOLE: Produced By Microsoft Exchange V6.5 Content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C69066.8027666E" Subject: RE: Signed messages Date: Thu, 15 Jun 2006 03:25:20 -0700 Message-ID: <82D5657AE1F54347A734BDD33637C879033E011A@EXVS01.ex.dslextreme.net> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: Signed messages Thread-Index: AcaQJHR1xnZQei7WTdmhNqx/+A5mJwAQVBEA From: "Carl Wallace" To: "Bill Russell" , Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: This is a multi-part message in MIME format. ------_=_NextPart_001_01C69066.8027666E Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Make sure you have the S/MIME option set in your plug-in. I think there is a non-SMIME option in that plug-in. ________________________________ From: owner-ietf-ltans@mail.imc.org [mailto:owner-ietf-ltans@mail.imc.org] On Behalf Of Bill Russell Sent: Wednesday, June 14, 2006 10:36 PM To: ietf-ltans@imc.org Subject: Signed messages =09 =09 Has anyone else had any trouble sending signed messages to the listserv? I noticed Peter's are going through, but two of mine have gone out signed and get distributed as signed/encrypted (which my own client can't even read). I'm not sure if that is a product of using an Entrust plug-in rather than native S/MIME for Outlook, but just curious if anyone else has had any similar problems. =20 Thanks, =20 Bill Russell, CISSP, ISSAP Vice President Mount Airey Group, Inc. http://www.mountaireygroup.net Cell: 571-334-1671 Fax: 703-738-7715 =20 =20 ------_=_NextPart_001_01C69066.8027666E Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Make sure you have the S/MIME option set in = your=20 plug-in.  I think there is a non-SMIME option in that=20 plug-in.

From: = owner-ietf-ltans@mail.imc.org=20 [mailto:owner-ietf-ltans@mail.imc.org] On Behalf Of Bill=20 Russell
Sent: Wednesday, June 14, 2006 10:36 = PM
To:=20 ietf-ltans@imc.org
Subject: Signed = messages

Has = anyone else=20 had any trouble sending signed messages to the listserv?  I = noticed=20 Peter's are going through, but two of mine have gone out signed and = get=20 distributed as signed/encrypted (which my own client can't even = read). =20 I'm not sure if that is a product of using an Entrust plug-in rather = than=20 native S/MIME for Outlook, but just curious if anyone else has had any = similar=20 problems.
 
Thanks,
 

Bill Russell, CISSP,=20 ISSAP

Vice = President

Mount Airey Group,=20 Inc.

http://www.mountaireygroup.net

Cell: = 571-334-1671

Fax: = 703-738-7715

 

 
------_=_NextPart_001_01C69066.8027666E-- Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5F2aEv7053678; Wed, 14 Jun 2006 19:36:14 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.13.5/8.13.5/Submit) id k5F2aEYc053677; Wed, 14 Jun 2006 19:36:14 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from mta9.adelphia.net (mta9.adelphia.net [68.168.78.199]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5F2aDZC053640 for ; Wed, 14 Jun 2006 19:36:14 -0700 (MST) (envelope-from russellwc@mountaireygroup.net) Received: from mocha ([69.175.246.66]) by mta9.adelphia.net (InterMail vM.6.01.05.02 201-2131-123-102-20050715) with ESMTP id <20060615023607.NJWK17359.mta9.adelphia.net@mocha> for ; Wed, 14 Jun 2006 22:36:07 -0400 From: "Bill Russell" To: Subject: Signed messages Date: Wed, 14 Jun 2006 22:36:07 -0400 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_01A0_01C69002.EE398840" X-Mailer: Microsoft Office Outlook, Build 11.0.6353 Thread-Index: AcaQJHR1xnZQei7WTdmhNqx/+A5mJw== X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869 Message-Id: <20060615023607.NJWK17359.mta9.adelphia.net@mocha> Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: This is a multi-part message in MIME format. ------=_NextPart_000_01A0_01C69002.EE398840 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Has anyone else had any trouble sending signed messages to the listserv? I noticed Peter's are going through, but two of mine have gone out signed and get distributed as signed/encrypted (which my own client can't even read). I'm not sure if that is a product of using an Entrust plug-in rather than native S/MIME for Outlook, but just curious if anyone else has had any similar problems. Thanks, Bill Russell, CISSP, ISSAP Vice President Mount Airey Group, Inc. http://www.mountaireygroup.net Cell: 571-334-1671 Fax: 703-738-7715 ------=_NextPart_000_01A0_01C69002.EE398840 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Has = anyone else had=20 any trouble sending signed messages to the listserv?  I noticed = Peter's are=20 going through, but two of mine have gone out signed and get distributed = as=20 signed/encrypted (which my own client can't even read).  I'm not = sure if=20 that is a product of using an Entrust plug-in rather than native S/MIME = for=20 Outlook, but just curious if anyone else has had any similar=20 problems.
 
Thanks,
 

Bill Russell, CISSP,=20 ISSAP

Vice = President

Mount Airey Group,=20 Inc.

http://www.mountaireygroup.net

Cell: = 571-334-1671

Fax: = 703-738-7715

 

 
------=_NextPart_000_01A0_01C69002.EE398840-- Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5F2FuJ4045982; Wed, 14 Jun 2006 19:15:56 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.13.5/8.13.5/Submit) id k5F2FuTX045981; Wed, 14 Jun 2006 19:15:56 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from mta13.adelphia.net (mta13.mail.adelphia.net [68.168.78.44]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5F2Fsmm045947 for ; Wed, 14 Jun 2006 19:15:55 -0700 (MST) (envelope-from russellwc@mountaireygroup.net) Received: from mocha ([69.175.246.66]) by mta13.adelphia.net (InterMail vM.6.01.05.02 201-2131-123-102-20050715) with ESMTP id <20060615021548.OVAD10985.mta13.adelphia.net@mocha> for ; Wed, 14 Jun 2006 22:15:48 -0400 From: "Bill Russell" To: Subject: RE: ERS 7 Date: Wed, 14 Jun 2006 22:15:48 -0400 MIME-Version: 1.0 Content-Type: application/x-pkcs7-mime; name="smime.p7m" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="smime.p7m" X-Mailer: Microsoft Office Outlook, Build 11.0.6353 Thread-Index: AcaPqalYU+kF9SlLQ3mGfozjEhiXRgAd6gAw X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869 In-Reply-To: <448FF5FB.4070504@edelweb.fr> Message-Id: <20060615021548.OVAD10985.mta13.adelphia.net@mocha> Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: 0=82h=F7=06 *=86H=86=F7=0D=01=07=02=A0=82h=E80=82h=E4=02=01=011=0B0 = =06=05+=0E=03=02=1A=05=000=82X(=06 = *=86H=86=F7=0D=01=07=01=A0=82X=19=04=82X=15Content-Type: = multipart/alternative; boundary=3D"--=3D_NextPart_DJD_200065160.221548046" ----=3D_NextPart_DJD_200065160.221548046 Content-Type: text/plain; charset=3D"iso-8859-1" Content-Transfer-Encoding: base64 SGFzIGFueW9uZSBzdGFydGVkIHRvIGJ1aWxkIGEgcHJvdG90eXBlIExUQVAgc2Vy dmVyIHVzaW5nIEVSUyB5ZXQ/IA0KDQotLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0t LQ0KRnJvbTogb3duZXItaWV0Zi1sdGFuc0BtYWlsLmltYy5vcmcgW21haWx0bzpv d25lci1pZXRmLWx0YW5zQG1haWwuaW1jLm9yZ10gT24gQmVoYWxmIE9mIFBldGVy IFN5bHZlc3Rlcg0KU2VudDogV2VkbmVzZGF5LCBKdW5lIDE0LCAyMDA2IDc6NDIg QU0NClRvOiBCaWxsIFJ1c3NlbGwNCkNjOiBpZXRmLWx0YW5zQGltYy5vcmcNClN1 YmplY3Q6IFJlOiBFUlMgNw0KDQpCaWxsIFJ1c3NlbGwgd3JvdGU6DQo+DQo+IC8g Lw0KPg0KPiBJIGFwb2xvZ2l6ZSBpZiB0aGUgZ3JvdXAgYXMgYWxyZWFkeSBhZGRy ZXNzZWQgc29tZSBvZiB0aGVzZSBwb2ludHMsIA0KPiBidXQgSSd2ZSBiZWVuIGdv aW5nIHRocm91Z2ggdGhlIGxhdGVzdCBkcmFmdCBhbmQgaGF2ZSBhIGNvdXBsZSBv ZiANCj4gY29tbWVudHMvcXVlc3Rpb25zLg0KPiAgDQo+IEZvciB0aGUgQXJjaGl2 ZVRpbWVTdGFtcCwgZGVmaW5lZCBhczoNCj4gIA0KPiAgICBBcmNoaXZlVGltZVN0 YW1wIDo6PSBTRVFVRU5DRSB7DQo+ICAgICAgZGlnZXN0QWxnb3JpdGhtICAgIEFs Z29yaXRobUlkZW50aWZpZXIgT1BUSU9OQUwsICAgICAgDQo+ICAgICAgcmVkdWNl ZEhhc2h0cmVlICAgWzBdIEVYUExJQ0lUIFNFUVVFTkNFIE9GIFNFUVVFTkNFIE9G IE9DVEVUIA0KPiBTVFJJTkcgT1BUSU9OQUwsDQo+ICAgICAgdGltZVN0YW1wICAg ICAgICAgQ29udGVudEluZm8gfSAgICAgIA0KSXQgaGFzIGFscmVhZHkgYmVlbiBk aXNjdXNzZWQgdGhhdCB0aGlzIHN5bnRheCBpcyBhbWJpZ3VvdXMgYW5kIGZ1cnRo ZXJtb3JlIHRoZXJlIGlzIG5vIG5lZWQgZm9yIHRoZSBFWFBMSUNJVC4gSSBwcm9w b3NlDQoNCiAgIEFjaGl2ZVRpbWVTdGFtcCA6Oj0gU0VRVUVOQ0Ugew0KICAgICBk aWdlc3RBbGdvcml0aG0gICAgQWxnb3JpdGhtSWRlbnRpZmllciBPUFRJT05BTCwg ICAgICANCiAgICAgcmVkdWNlZEhhc2h0cmVlICAgWzBdIFNFUVVFTkNFIE9GIFNF UVVFTkNFIE9GIE9DVEVUIFNUUklORyBPUFRJT05BTCwNCiAgICAgdGltZVN0YW1w ICAgICAgICAgWzFdIENvbnRlbnRJbmZvIH0gDQoNCm9yDQoNCiAgQWNoaXZlVGlt ZVN0YW1wIDo6PSBTRVFVRU5DRSB7DQogICAgIGRpZ2VzdEFsZ29yaXRobSAgICBb MF0gQWxnb3JpdGhtSWRlbnRpZmllciBPUFRJT05BTCwgICAgICANCiAgICAgcmVk dWNlZEhhc2h0cmVlICAgWzFdIFNFUVVFTkNFIE9GIFNFUVVFTkNFIE9GIE9DVEVU IFNUUklORyBPUFRJT05BTCwNCiAgICAgdGltZVN0YW1wICAgICAgICAgQ29udGVu dEluZm8gfSANCg0Kb3INCiAgIHNvbWV0aGluZyBzaW1pbGFyDQo+ICANCj4gIA0K PiAqIEl0J3Mgbm90IGNsZWFyIHRvIG1lIHdoeSB0aGUgcmVkdWNlZEhhc2h0cmVl IGlzIE9QVElPTkFMLiAgRXZlbiBpZiANCj4gdGhlIHRyZWUgb25seSBoYXMgb25l IG5vZGUsIHdvdWxkbid0IHlvdSBzdGlsbCB3YW50IGl0IHRvIGNvbnRhaW4gYSAN Cj4gaGFzaCBvZiB0aGUgb25lIG5vZGU/ICBJdCBzZWVtcyB0byBhZGQgdW5uZWNl c3NhcnkgY29tcGxleGl0eSB0byBtYWtlIA0KPiBpdCBvcHRpb25hbC4gIElmIGl0 IG1ha2VzIHNpbmNlIHRvIGtlZXAgaXQgb3B0aW9uYWwsIGlzIHRoZXJlIGEgcmVh c29uIA0KPiB3aHkgd2Ugd291bGQgY2hvb3NlIHRvIG1ha2UgaXQgRVhQTElDSVQg aW5zdGVhZCBvZiBJTVBMSUNJVD8gIEkga25vdyANCj4gaXQgb25seSBhZGRzIGEg Y291cGxlIG9mIGJ5dGVzLCBidXQgSSdtIG5vdCBjbGVhciB3aHkgd2Ugd291bGQg dXNlIGl0LiAgDQo+IElmIHdlIHJlbW92ZSAiT1BUSU9OQUwiIGZyb20gdGhlIHJl ZHVjZWRIYXNoVHJlZSwgdGhlbiB3ZSBjYW4gYWxzbyANCj4gcmVtb3ZlIGl0IGZy b20gZGlnZXN0QWxnb3JpdGhtLg0KDQpJIGxlYXZlIGl0IHRvIHRoZSBhdXRob3Jz IHRvIGNvbW1lbnQgYWJvdXQgbWFraW5nIHRoZSB0cmVlICBPUFRJT05BTC4NCj4g IA0KPiAqIEZvciB0aGUgQ29udGVudEluZm8sIHdvdWxkIGl0IG1ha2Ugc2Vuc2Ug dG8ganVzdCBleHBhbmQgaXQgaW4gcGxhY2UgDQo+IGhlcmUgcmF0aGVyIHRoYW4g aW1wb3J0IHRoaXMgZnJvbSBDTVM/ICBJcyBpdCBib3Jyb3dpbmcgY29uY2VwdHVh bGx5IA0KPiBmcm9tIENNUyBmb3IgdGhpcz8gIEkgY291bGRuJ3QgdGhpbmsgb2Yg d2h5IGNvbmNlcHR1YWxseSB3ZSB3ZXJlIA0KPiBib3Jyb3dpbmcgZnJvbSBDTVMg cmF0aGVyIHRoYW4ganVzdCBkZWZpbmluZyBpdCBvdXRyaWdodC4NCkluIGZhY3Qs IHRvIG1lIGl0IHNlZW1zIHRoYXQgdGhlIENvbnRlbnRUeXBlIHNob3VsZCBiZSBh IHBhcmFtZXRlcml6ZWQgdHlwZSBzbyB0aGF0IG9uZSBjYW4gbGltaXQgdGhlIHBv c3NpYmxlIHR5cGVzLg0KDQoNCj4gIA0KPiBGb3IgdGhlIEV2aWRlbmNlUmVjb3Jk LCBJIGhhdmUgYSBjb3VwbGUgb2YgY29tbWVudHM6DQo+ICANCj4gICAgRXZpZGVu Y2VSZWNvcmQgOjo9IFNFUVVFTkNFIHsNCj4gICAgICB2ZXJzaW9uICAgICAgICAg ICAgICAgICAgIElOVEVHRVIgeyB2MSgxKSB9LCAgICANCj4gICAgICBkaWdlc3RB bGdvcml0aG1zICAgICAgICAgIFNFUVVFTkNFIFNJWkUgKDEuLk1BWCkgT0YgDQo+ IEFsZ29yaXRobUlkZW50aWZpZXIsDQo+ICAgICAgY3J5cHRvSW5mb3MgICAgICAg ICAgICAgICBbMF0gQ3J5cHRvSW5mb3MgT1BUSU9OQUwsDQo+ICAgICAgZW5jcnlw dGlvbkluZm8gICAgICAgICAgICBbMV0gRW5jcnlwdGlvbkluZm8gT1BUSU9OQUws DQo+ICAgICAgYXJjaGl2ZVRpbWVTdGFtcFNlcXVlbmNlICBBcmNoaXZlVGltZVN0 YW1wU2VxdWVuY2UgfQ0KPiAgDQo+ICogVGhlIHZlcnNpb24gaW50ZWdlciBwcm9i YWJseSBzaG91bGQgc3RhcnQgYXQgMCB0byBrZWVwIGNvbnZlbnRpb24gb2YgDQo+ IG90aGVyIFJGQ3MsIGNmIFJGQyAzMjgwDQo+ICogRm9yIGRpZ2VzdEFsZ29yaXRo bXMsIEkgdGhpbmsgaXQgd291bGQgYmUgYmV0dGVyIHRvIGltcG9ydCBmcm9tIFJG QyANCj4gMzg1MiBhbmQgdXNlIERpZ2VzdEFsZ29yaXRobUlkZW50aWZpZXJzICh3 aGljaCBkb2VzIHRoaXMgYXMgYSBTRVQgDQo+IGluc3RlYWQgb2YgYSBzZXF1ZW5j ZSkuICBDb25jZXB0dWFsbHksIHRoaXMgc2VydmVzIHRoZSBzYW1lIHB1cnBvc2Ug DQo+IGFzIENNUydzIERpZ2VzdEFsZ29yaXRobUlkZW50aWZpZXJzLg0KPiAgDQo+ IEZvciBFbmNyeXB0aW9uSW5mbywgZGVmaW5lZCBhczoNCj4gICAgRW5jcnlwdGlv bkluZm8gOjo9IFNFUVVFTkNFIHsNCj4gICAgICAgZW5jcnlwdGlvbkluZm9UeXBl IE9CSkVDVCBJREVOVElGSUVSLA0KPiAgICAgICBlbmNyeXB0aW9uSW5mb1ZhbHVl IFswXSBFWFBMSUNJVCBBTlkgREVGSU5FRCBCWSBlbmNyeXB0aW9uSW5mb1R5cGUN Cj4gICAgfQ0KPiAgDQo+ICogVGhlIGNvbnRleHQgcG9pbnQgb2YgWzBdIHNlZW1z IHVubmVjZXNzYXJ5IHNpbmNlIHRoZSBmaWVsZCBpcyBub3QgDQo+IG9wdGlvbmFs DQppbmRlZWQuIGFuZCBpdCBzaG91bGQgbm90IGJlIEFOWSBERUZJTkVEIEJZIGJ1 dA0KDQo+ICANCj4gVGFrZSBjYXJlLA0KPiBCaWxsDQo+ICANCg0KDQotLSANClRv IHZlcmlmeSB0aGUgc2lnbmF0dXJlLCBzZWUgaHR0cDovL2VkZWxwa2kuZWRlbHdl Yi5mci8gDQpDZWxhIHZvdXMgcGVybWV0IGRlIGNoYXJnZXIgbGUgY2VydGlmaWNh dCBkZSBsJ2F1dG9yaXTpOyANCmRpZSBMaXN0ZSBtaXQgenVy/GNrZ2VydWZlbmVu IFplcnRpZmlrYXRlbiBmaW5kZW4gU2llIGRhIGF1Y2guIA0K ----=3D_NextPart_DJD_200065160.221548046 Content-Type: text/html; charset=3D"iso-8859-1" Content-Transfer-Encoding: base64 PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDMuMi8vRU4i Pg0KPEhUTUw+DQo8SEVBRD4NCjxNRVRBIEhUVFAtRVFVSVY9IkNvbnRlbnQtVHlw ZSIgQ09OVEVOVD0idGV4dC9odG1sOyBjaGFyc2V0PWlzby04ODU5LTEiPg0KPE1F VEEgTkFNRT0iR2VuZXJhdG9yIiBDT05URU5UPSJNUyBFeGNoYW5nZSBTZXJ2ZXIg dmVyc2lvbiA2LjUuNzAzNi4wIj4NCjxUSVRMRT5SRTogRVJTIDc8L1RJVExFPg0K PC9IRUFEPg0KPEJPRFk+DQo8IS0tIENvbnZlcnRlZCBmcm9tIHRleHQvcGxhaW4g Zm9ybWF0IC0tPg0KDQo8UD48Rk9OVCBTSVpFPTI+SGFzIGFueW9uZSBzdGFydGVk IHRvIGJ1aWxkIGEgcHJvdG90eXBlIExUQVAgc2VydmVyIHVzaW5nIEVSUyB5ZXQ/ IDwvRk9OVD4NCjwvUD4NCg0KPFA+PEZPTlQgU0laRT0yPi0tLS0tT3JpZ2luYWwg TWVzc2FnZS0tLS0tPC9GT05UPg0KDQo8QlI+PEZPTlQgU0laRT0yPkZyb206IG93 bmVyLWlldGYtbHRhbnNAbWFpbC5pbWMub3JnIFs8QSBIUkVGPSJtYWlsdG86b3du ZXItaWV0Zi1sdGFuc0BtYWlsLmltYy5vcmciPm1haWx0bzpvd25lci1pZXRmLWx0 YW5zQG1haWwuaW1jLm9yZzwvQT5dIE9uIEJlaGFsZiBPZiBQZXRlciBTeWx2ZXN0 ZXI8L0ZPTlQ+DQoNCjxCUj48Rk9OVCBTSVpFPTI+U2VudDogV2VkbmVzZGF5LCBK dW5lIDE0LCAyMDA2IDc6NDIgQU08L0ZPTlQ+DQoNCjxCUj48Rk9OVCBTSVpFPTI+ VG86IEJpbGwgUnVzc2VsbDwvRk9OVD4NCg0KPEJSPjxGT05UIFNJWkU9Mj5DYzog aWV0Zi1sdGFuc0BpbWMub3JnPC9GT05UPg0KDQo8QlI+PEZPTlQgU0laRT0yPlN1 YmplY3Q6IFJlOiBFUlMgNzwvRk9OVD4NCjwvUD4NCg0KPFA+PEZPTlQgU0laRT0y PkJpbGwgUnVzc2VsbCB3cm90ZTo8L0ZPTlQ+DQoNCjxCUj48Rk9OVCBTSVpFPTI+ Jmd0OzwvRk9OVD4NCg0KPEJSPjxGT05UIFNJWkU9Mj4mZ3Q7IC8gLzwvRk9OVD4N Cg0KPEJSPjxGT05UIFNJWkU9Mj4mZ3Q7PC9GT05UPg0KDQo8QlI+PEZPTlQgU0la RT0yPiZndDsgSSBhcG9sb2dpemUgaWYgdGhlIGdyb3VwIGFzIGFscmVhZHkgYWRk cmVzc2VkIHNvbWUgb2YgdGhlc2UgcG9pbnRzLCA8L0ZPTlQ+DQoNCjxCUj48Rk9O VCBTSVpFPTI+Jmd0OyBidXQgSSd2ZSBiZWVuIGdvaW5nIHRocm91Z2ggdGhlIGxh dGVzdCBkcmFmdCBhbmQgaGF2ZSBhIGNvdXBsZSBvZiA8L0ZPTlQ+DQoNCjxCUj48 Rk9OVCBTSVpFPTI+Jmd0OyBjb21tZW50cy9xdWVzdGlvbnMuPC9GT05UPg0KDQo8 QlI+PEZPTlQgU0laRT0yPiZndDsmbmJzcDsgPC9GT05UPg0KDQo8QlI+PEZPTlQg U0laRT0yPiZndDsgRm9yIHRoZSBBcmNoaXZlVGltZVN0YW1wLCBkZWZpbmVkIGFz OjwvRk9OVD4NCg0KPEJSPjxGT05UIFNJWkU9Mj4mZ3Q7Jm5ic3A7IDwvRk9OVD4N Cg0KPEJSPjxGT05UIFNJWkU9Mj4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7IEFyY2hp dmVUaW1lU3RhbXAgOjo9IFNFUVVFTkNFIHs8L0ZPTlQ+DQoNCjxCUj48Rk9OVCBT SVpFPTI+Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBkaWdlc3RB bGdvcml0aG0mbmJzcDsmbmJzcDsmbmJzcDsgQWxnb3JpdGhtSWRlbnRpZmllciBP UFRJT05BTCwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPC9GT05UPg0K DQo8QlI+PEZPTlQgU0laRT0yPiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsgcmVkdWNlZEhhc2h0cmVlJm5ic3A7Jm5ic3A7IFswXSBFWFBMSUNJVCBT RVFVRU5DRSBPRiBTRVFVRU5DRSBPRiBPQ1RFVCA8L0ZPTlQ+DQoNCjxCUj48Rk9O VCBTSVpFPTI+Jmd0OyBTVFJJTkcgT1BUSU9OQUwsPC9GT05UPg0KDQo8QlI+PEZP TlQgU0laRT0yPiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgdGlt ZVN0YW1wJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IENvbnRlbnRJbmZvIH0mbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsgPC9GT05UPg0KDQo8QlI+PEZPTlQgU0laRT0yPkl0IGhhcyBhbHJlYWR5IGJl ZW4gZGlzY3Vzc2VkIHRoYXQgdGhpcyBzeW50YXggaXMgYW1iaWd1b3VzIGFuZCBm dXJ0aGVybW9yZSB0aGVyZSBpcyBubyBuZWVkIGZvciB0aGUgRVhQTElDSVQuIEkg cHJvcG9zZTwvRk9OVD48L1A+DQoNCjxQPjxGT05UIFNJWkU9Mj4mbmJzcDsmbmJz cDsgQWNoaXZlVGltZVN0YW1wIDo6PSBTRVFVRU5DRSB7PC9GT05UPg0KDQo8QlI+ PEZPTlQgU0laRT0yPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBkaWdlc3RBbGdv cml0aG0mbmJzcDsmbmJzcDsmbmJzcDsgQWxnb3JpdGhtSWRlbnRpZmllciBPUFRJ T05BTCwmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPC9GT05UPg0KDQo8 QlI+PEZPTlQgU0laRT0yPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyByZWR1Y2Vk SGFzaHRyZWUmbmJzcDsmbmJzcDsgWzBdIFNFUVVFTkNFIE9GIFNFUVVFTkNFIE9G IE9DVEVUIFNUUklORyBPUFRJT05BTCw8L0ZPTlQ+DQoNCjxCUj48Rk9OVCBTSVpF PTI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHRpbWVTdGFtcCZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBbMV0gQ29udGVu dEluZm8gfSA8L0ZPTlQ+DQo8L1A+DQoNCjxQPjxGT05UIFNJWkU9Mj5vcjwvRk9O VD4NCjwvUD4NCg0KPFA+PEZPTlQgU0laRT0yPiZuYnNwOyBBY2hpdmVUaW1lU3Rh bXAgOjo9IFNFUVVFTkNFIHs8L0ZPTlQ+DQoNCjxCUj48Rk9OVCBTSVpFPTI+Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGRpZ2VzdEFsZ29yaXRobSZuYnNwOyZuYnNw OyZuYnNwOyBbMF0gQWxnb3JpdGhtSWRlbnRpZmllciBPUFRJT05BTCwmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgPC9GT05UPg0KDQo8QlI+PEZPTlQgU0la RT0yPiZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyByZWR1Y2VkSGFzaHRyZWUmbmJz cDsmbmJzcDsgWzFdIFNFUVVFTkNFIE9GIFNFUVVFTkNFIE9GIE9DVEVUIFNUUklO RyBPUFRJT05BTCw8L0ZPTlQ+DQoNCjxCUj48Rk9OVCBTSVpFPTI+Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7IHRpbWVTdGFtcCZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBDb250ZW50SW5mbyB9IDwvRk9OVD4N CjwvUD4NCg0KPFA+PEZPTlQgU0laRT0yPm9yPC9GT05UPg0KDQo8QlI+PEZPTlQg U0laRT0yPiZuYnNwOyZuYnNwOyBzb21ldGhpbmcgc2ltaWxhcjwvRk9OVD4NCg0K PEJSPjxGT05UIFNJWkU9Mj4mZ3Q7Jm5ic3A7IDwvRk9OVD4NCg0KPEJSPjxGT05U IFNJWkU9Mj4mZ3Q7Jm5ic3A7IDwvRk9OVD4NCg0KPEJSPjxGT05UIFNJWkU9Mj4m Z3Q7ICogSXQncyBub3QgY2xlYXIgdG8gbWUgd2h5IHRoZSByZWR1Y2VkSGFzaHRy ZWUgaXMgT1BUSU9OQUwuJm5ic3A7IEV2ZW4gaWYgPC9GT05UPg0KDQo8QlI+PEZP TlQgU0laRT0yPiZndDsgdGhlIHRyZWUgb25seSBoYXMgb25lIG5vZGUsIHdvdWxk bid0IHlvdSBzdGlsbCB3YW50IGl0IHRvIGNvbnRhaW4gYSA8L0ZPTlQ+DQoNCjxC Uj48Rk9OVCBTSVpFPTI+Jmd0OyBoYXNoIG9mIHRoZSBvbmUgbm9kZT8mbmJzcDsg SXQgc2VlbXMgdG8gYWRkIHVubmVjZXNzYXJ5IGNvbXBsZXhpdHkgdG8gbWFrZSA8 L0ZPTlQ+DQoNCjxCUj48Rk9OVCBTSVpFPTI+Jmd0OyBpdCBvcHRpb25hbC4mbmJz cDsgSWYgaXQgbWFrZXMgc2luY2UgdG8ga2VlcCBpdCBvcHRpb25hbCwgaXMgdGhl cmUgYSByZWFzb24gPC9GT05UPg0KDQo8QlI+PEZPTlQgU0laRT0yPiZndDsgd2h5 IHdlIHdvdWxkIGNob29zZSB0byBtYWtlIGl0IEVYUExJQ0lUIGluc3RlYWQgb2Yg SU1QTElDSVQ/Jm5ic3A7IEkga25vdyA8L0ZPTlQ+DQoNCjxCUj48Rk9OVCBTSVpF PTI+Jmd0OyBpdCBvbmx5IGFkZHMgYSBjb3VwbGUgb2YgYnl0ZXMsIGJ1dCBJJ20g bm90IGNsZWFyIHdoeSB3ZSB3b3VsZCB1c2UgaXQuJm5ic3A7IDwvRk9OVD4NCg0K PEJSPjxGT05UIFNJWkU9Mj4mZ3Q7IElmIHdlIHJlbW92ZSAmcXVvdDtPUFRJT05B TCZxdW90OyBmcm9tIHRoZSByZWR1Y2VkSGFzaFRyZWUsIHRoZW4gd2UgY2FuIGFs c28gPC9GT05UPg0KDQo8QlI+PEZPTlQgU0laRT0yPiZndDsgcmVtb3ZlIGl0IGZy b20gZGlnZXN0QWxnb3JpdGhtLjwvRk9OVD4NCjwvUD4NCg0KPFA+PEZPTlQgU0la RT0yPkkgbGVhdmUgaXQgdG8gdGhlIGF1dGhvcnMgdG8gY29tbWVudCBhYm91dCBt YWtpbmcgdGhlIHRyZWUmbmJzcDsgT1BUSU9OQUwuPC9GT05UPg0KDQo8QlI+PEZP TlQgU0laRT0yPiZndDsmbmJzcDsgPC9GT05UPg0KDQo8QlI+PEZPTlQgU0laRT0y PiZndDsgKiBGb3IgdGhlIENvbnRlbnRJbmZvLCB3b3VsZCBpdCBtYWtlIHNlbnNl IHRvIGp1c3QgZXhwYW5kIGl0IGluIHBsYWNlIDwvRk9OVD4NCg0KPEJSPjxGT05U IFNJWkU9Mj4mZ3Q7IGhlcmUgcmF0aGVyIHRoYW4gaW1wb3J0IHRoaXMgZnJvbSBD TVM/Jm5ic3A7IElzIGl0IGJvcnJvd2luZyBjb25jZXB0dWFsbHkgPC9GT05UPg0K DQo8QlI+PEZPTlQgU0laRT0yPiZndDsgZnJvbSBDTVMgZm9yIHRoaXM/Jm5ic3A7 IEkgY291bGRuJ3QgdGhpbmsgb2Ygd2h5IGNvbmNlcHR1YWxseSB3ZSB3ZXJlIDwv Rk9OVD4NCg0KPEJSPjxGT05UIFNJWkU9Mj4mZ3Q7IGJvcnJvd2luZyBmcm9tIENN UyByYXRoZXIgdGhhbiBqdXN0IGRlZmluaW5nIGl0IG91dHJpZ2h0LjwvRk9OVD4N Cg0KPEJSPjxGT05UIFNJWkU9Mj5JbiBmYWN0LCB0byBtZSBpdCBzZWVtcyB0aGF0 IHRoZSBDb250ZW50VHlwZSBzaG91bGQgYmUgYSBwYXJhbWV0ZXJpemVkIHR5cGUg c28gdGhhdCBvbmUgY2FuIGxpbWl0IHRoZSBwb3NzaWJsZSB0eXBlcy48L0ZPTlQ+ DQo8L1A+DQo8QlI+DQoNCjxQPjxGT05UIFNJWkU9Mj4mZ3Q7Jm5ic3A7IDwvRk9O VD4NCg0KPEJSPjxGT05UIFNJWkU9Mj4mZ3Q7IEZvciB0aGUgRXZpZGVuY2VSZWNv cmQsIEkgaGF2ZSBhIGNvdXBsZSBvZiBjb21tZW50czo8L0ZPTlQ+DQoNCjxCUj48 Rk9OVCBTSVpFPTI+Jmd0OyZuYnNwOyA8L0ZPTlQ+DQoNCjxCUj48Rk9OVCBTSVpF PTI+Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyBFdmlkZW5jZVJlY29yZCA6Oj0gU0VR VUVOQ0UgezwvRk9OVD4NCg0KPEJSPjxGT05UIFNJWkU9Mj4mZ3Q7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IHZlcnNpb24mbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgSU5URUdF UiB7IHYxKDEpIH0sJm5ic3A7Jm5ic3A7Jm5ic3A7IDwvRk9OVD4NCg0KPEJSPjxG T05UIFNJWkU9Mj4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGRp Z2VzdEFsZ29yaXRobXMmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsgU0VRVUVOQ0UgU0laRSAoMS4uTUFYKSBPRiA8 L0ZPTlQ+DQoNCjxCUj48Rk9OVCBTSVpFPTI+Jmd0OyBBbGdvcml0aG1JZGVudGlm aWVyLDwvRk9OVD4NCg0KPEJSPjxGT05UIFNJWkU9Mj4mZ3Q7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7IGNyeXB0b0luZm9zJm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7IFswXSBDcnlwdG9JbmZvcyBPUFRJT05BTCw8L0ZP TlQ+DQoNCjxCUj48Rk9OVCBTSVpFPTI+Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyBlbmNyeXB0aW9uSW5mbyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBbMV0g RW5jcnlwdGlvbkluZm8gT1BUSU9OQUwsPC9GT05UPg0KDQo8QlI+PEZPTlQgU0la RT0yPiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgYXJjaGl2ZVRp bWVTdGFtcFNlcXVlbmNlJm5ic3A7IEFyY2hpdmVUaW1lU3RhbXBTZXF1ZW5jZSB9 PC9GT05UPg0KDQo8QlI+PEZPTlQgU0laRT0yPiZndDsmbmJzcDsgPC9GT05UPg0K DQo8QlI+PEZPTlQgU0laRT0yPiZndDsgKiBUaGUgdmVyc2lvbiBpbnRlZ2VyIHBy b2JhYmx5IHNob3VsZCBzdGFydCBhdCAwIHRvIGtlZXAgY29udmVudGlvbiBvZiA8 L0ZPTlQ+DQoNCjxCUj48Rk9OVCBTSVpFPTI+Jmd0OyBvdGhlciBSRkNzLCBjZiBS RkMgMzI4MDwvRk9OVD4NCg0KPEJSPjxGT05UIFNJWkU9Mj4mZ3Q7ICogRm9yIGRp Z2VzdEFsZ29yaXRobXMsIEkgdGhpbmsgaXQgd291bGQgYmUgYmV0dGVyIHRvIGlt cG9ydCBmcm9tIFJGQyA8L0ZPTlQ+DQoNCjxCUj48Rk9OVCBTSVpFPTI+Jmd0OyAz ODUyIGFuZCB1c2UgRGlnZXN0QWxnb3JpdGhtSWRlbnRpZmllcnMgKHdoaWNoIGRv ZXMgdGhpcyBhcyBhIFNFVCA8L0ZPTlQ+DQoNCjxCUj48Rk9OVCBTSVpFPTI+Jmd0 OyBpbnN0ZWFkIG9mIGEgc2VxdWVuY2UpLiZuYnNwOyBDb25jZXB0dWFsbHksIHRo aXMgc2VydmVzIHRoZSBzYW1lIHB1cnBvc2UgPC9GT05UPg0KDQo8QlI+PEZPTlQg U0laRT0yPiZndDsgYXMgQ01TJ3MgRGlnZXN0QWxnb3JpdGhtSWRlbnRpZmllcnMu PC9GT05UPg0KDQo8QlI+PEZPTlQgU0laRT0yPiZndDsmbmJzcDsgPC9GT05UPg0K DQo8QlI+PEZPTlQgU0laRT0yPiZndDsgRm9yIEVuY3J5cHRpb25JbmZvLCBkZWZp bmVkIGFzOjwvRk9OVD4NCg0KPEJSPjxGT05UIFNJWkU9Mj4mZ3Q7Jm5ic3A7Jm5i c3A7Jm5ic3A7IEVuY3J5cHRpb25JbmZvIDo6PSBTRVFVRU5DRSB7PC9GT05UPg0K DQo8QlI+PEZPTlQgU0laRT0yPiZndDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgZW5jcnlwdGlvbkluZm9UeXBlIE9CSkVDVCBJREVOVElGSUVS LDwvRk9OVD4NCg0KPEJSPjxGT05UIFNJWkU9Mj4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IGVuY3J5cHRpb25JbmZvVmFsdWUgWzBdIEVY UExJQ0lUIEFOWSBERUZJTkVEIEJZIGVuY3J5cHRpb25JbmZvVHlwZTwvRk9OVD4N Cg0KPEJSPjxGT05UIFNJWkU9Mj4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7IH08L0ZP TlQ+DQoNCjxCUj48Rk9OVCBTSVpFPTI+Jmd0OyZuYnNwOyA8L0ZPTlQ+DQoNCjxC Uj48Rk9OVCBTSVpFPTI+Jmd0OyAqIFRoZSBjb250ZXh0IHBvaW50IG9mIFswXSBz ZWVtcyB1bm5lY2Vzc2FyeSBzaW5jZSB0aGUgZmllbGQgaXMgbm90IDwvRk9OVD4N Cg0KPEJSPjxGT05UIFNJWkU9Mj4mZ3Q7IG9wdGlvbmFsPC9GT05UPg0KDQo8QlI+ PEZPTlQgU0laRT0yPmluZGVlZC4gYW5kIGl0IHNob3VsZCBub3QgYmUgQU5ZIERF RklORUQgQlkgYnV0PC9GT05UPg0KPC9QPg0KDQo8UD48Rk9OVCBTSVpFPTI+Jmd0 OyZuYnNwOyA8L0ZPTlQ+DQoNCjxCUj48Rk9OVCBTSVpFPTI+Jmd0OyBUYWtlIGNh cmUsPC9GT05UPg0KDQo8QlI+PEZPTlQgU0laRT0yPiZndDsgQmlsbDwvRk9OVD4N Cg0KPEJSPjxGT05UIFNJWkU9Mj4mZ3Q7Jm5ic3A7IDwvRk9OVD4NCjwvUD4NCjxC Uj4NCg0KPFA+PEZPTlQgU0laRT0yPi0tIDwvRk9OVD4NCg0KPEJSPjxGT05UIFNJ WkU9Mj5UbyB2ZXJpZnkgdGhlIHNpZ25hdHVyZSwgc2VlIDxBIEhSRUY9Imh0dHA6 Ly9lZGVscGtpLmVkZWx3ZWIuZnIvIj5odHRwOi8vZWRlbHBraS5lZGVsd2ViLmZy LzwvQT4gPC9GT05UPg0KDQo8QlI+PEZPTlQgU0laRT0yPkNlbGEgdm91cyBwZXJt ZXQgZGUgY2hhcmdlciBsZSBjZXJ0aWZpY2F0IGRlIGwnYXV0b3JpdOk7IDwvRk9O VD4NCg0KPEJSPjxGT05UIFNJWkU9Mj5kaWUgTGlzdGUgbWl0IHp1cvxja2dlcnVm ZW5lbiBaZXJ0aWZpa2F0ZW4gZmluZGVuIFNpZSBkYSBhdWNoLiA8L0ZPTlQ+DQo8 L1A+DQoNCjwvQk9EWT4NCjwvSFRNTD4=3D ----=3D_NextPart_DJD_200065160.221548046 Content-Type: application/rtf Content-Transfer-Encoding: base64 e1xydGYxXGFuc2lcYW5zaWNwZzEyNTJcZnJvbXRleHQgXGRlZmYwe1xmb250dGJs DQp7XGYwXGZzd2lzc1xmY2hhcnNldDAgQXJpYWw7fQ0Ke1xmMVxmbW9kZXJuIENv dXJpZXIgTmV3O30NCntcZjJcZm5pbFxmY2hhcnNldDIgU3ltYm9sO30NCntcZjNc Zm1vZGVyblxmY2hhcnNldDAgQ291cmllciBOZXc7fX0NCntcY29sb3J0YmxccmVk MFxncmVlbjBcYmx1ZTA7XHJlZDBcZ3JlZW4wXGJsdWUyNTU7fQ0KXHVjMVxwYXJk XHBsYWluXGRlZnRhYjM2MCBcZjBcZnMyMCBIYXMgYW55b25lIHN0YXJ0ZWQgdG8g YnVpbGQgYSBwcm90b3R5cGUgTFRBUCBzZXJ2ZXIgdXNpbmcgRVJTIHlldD8gXHBh cg0KXHBhcg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS1ccGFyDQpGcm9tOiBv d25lci1pZXRmLWx0YW5zQG1haWwuaW1jLm9yZyBbbWFpbHRvOm93bmVyLWlldGYt bHRhbnNAbWFpbC5pbWMub3JnXSBPbiBCZWhhbGYgT2YgUGV0ZXIgU3lsdmVzdGVy XHBhcg0KU2VudDogV2VkbmVzZGF5LCBKdW5lIDE0LCAyMDA2IDc6NDIgQU1ccGFy DQpUbzogQmlsbCBSdXNzZWxsXHBhcg0KQ2M6IGlldGYtbHRhbnNAaW1jLm9yZ1xw YXINClN1YmplY3Q6IFJlOiBFUlMgN1xwYXINClxwYXINCkJpbGwgUnVzc2VsbCB3 cm90ZTpccGFyDQo+XHBhcg0KPiAvIC9ccGFyDQo+XHBhcg0KPiBJIGFwb2xvZ2l6 ZSBpZiB0aGUgZ3JvdXAgYXMgYWxyZWFkeSBhZGRyZXNzZWQgc29tZSBvZiB0aGVz ZSBwb2ludHMsIFxwYXINCj4gYnV0IEkndmUgYmVlbiBnb2luZyB0aHJvdWdoIHRo ZSBsYXRlc3QgZHJhZnQgYW5kIGhhdmUgYSBjb3VwbGUgb2YgXHBhcg0KPiBjb21t ZW50cy9xdWVzdGlvbnMuXHBhcg0KPiAgXHBhcg0KPiBGb3IgdGhlIEFyY2hpdmVU aW1lU3RhbXAsIGRlZmluZWQgYXM6XHBhcg0KPiAgXHBhcg0KPiAgICBBcmNoaXZl VGltZVN0YW1wIDo6PSBTRVFVRU5DRSBce1xwYXINCj4gICAgICBkaWdlc3RBbGdv cml0aG0gICAgQWxnb3JpdGhtSWRlbnRpZmllciBPUFRJT05BTCwgICAgICBccGFy DQo+ICAgICAgcmVkdWNlZEhhc2h0cmVlICAgWzBdIEVYUExJQ0lUIFNFUVVFTkNF IE9GIFNFUVVFTkNFIE9GIE9DVEVUIFxwYXINCj4gU1RSSU5HIE9QVElPTkFMLFxw YXINCj4gICAgICB0aW1lU3RhbXAgICAgICAgICBDb250ZW50SW5mbyBcfSAgICAg IFxwYXINCkl0IGhhcyBhbHJlYWR5IGJlZW4gZGlzY3Vzc2VkIHRoYXQgdGhpcyBz eW50YXggaXMgYW1iaWd1b3VzIGFuZCBmdXJ0aGVybW9yZSB0aGVyZSBpcyBubyBu ZWVkIGZvciB0aGUgRVhQTElDSVQuIEkgcHJvcG9zZVxwYXINClxwYXINCiAgIEFj aGl2ZVRpbWVTdGFtcCA6Oj0gU0VRVUVOQ0UgXHtccGFyDQogICAgIGRpZ2VzdEFs Z29yaXRobSAgICBBbGdvcml0aG1JZGVudGlmaWVyIE9QVElPTkFMLCAgICAgIFxw YXINCiAgICAgcmVkdWNlZEhhc2h0cmVlICAgWzBdIFNFUVVFTkNFIE9GIFNFUVVF TkNFIE9GIE9DVEVUIFNUUklORyBPUFRJT05BTCxccGFyDQogICAgIHRpbWVTdGFt cCAgICAgICAgIFsxXSBDb250ZW50SW5mbyBcfSBccGFyDQpccGFyDQpvclxwYXIN ClxwYXINCiAgQWNoaXZlVGltZVN0YW1wIDo6PSBTRVFVRU5DRSBce1xwYXINCiAg ICAgZGlnZXN0QWxnb3JpdGhtICAgIFswXSBBbGdvcml0aG1JZGVudGlmaWVyIE9Q VElPTkFMLCAgICAgIFxwYXINCiAgICAgcmVkdWNlZEhhc2h0cmVlICAgWzFdIFNF UVVFTkNFIE9GIFNFUVVFTkNFIE9GIE9DVEVUIFNUUklORyBPUFRJT05BTCxccGFy DQogICAgIHRpbWVTdGFtcCAgICAgICAgIENvbnRlbnRJbmZvIFx9IFxwYXINClxw YXINCm9yXHBhcg0KICAgc29tZXRoaW5nIHNpbWlsYXJccGFyDQo+ICBccGFyDQo+ ICBccGFyDQo+ICogSXQncyBub3QgY2xlYXIgdG8gbWUgd2h5IHRoZSByZWR1Y2Vk SGFzaHRyZWUgaXMgT1BUSU9OQUwuICBFdmVuIGlmIFxwYXINCj4gdGhlIHRyZWUg b25seSBoYXMgb25lIG5vZGUsIHdvdWxkbid0IHlvdSBzdGlsbCB3YW50IGl0IHRv IGNvbnRhaW4gYSBccGFyDQo+IGhhc2ggb2YgdGhlIG9uZSBub2RlPyAgSXQgc2Vl bXMgdG8gYWRkIHVubmVjZXNzYXJ5IGNvbXBsZXhpdHkgdG8gbWFrZSBccGFyDQo+ IGl0IG9wdGlvbmFsLiAgSWYgaXQgbWFrZXMgc2luY2UgdG8ga2VlcCBpdCBvcHRp b25hbCwgaXMgdGhlcmUgYSByZWFzb24gXHBhcg0KPiB3aHkgd2Ugd291bGQgY2hv b3NlIHRvIG1ha2UgaXQgRVhQTElDSVQgaW5zdGVhZCBvZiBJTVBMSUNJVD8gIEkg a25vdyBccGFyDQo+IGl0IG9ubHkgYWRkcyBhIGNvdXBsZSBvZiBieXRlcywgYnV0 IEknbSBub3QgY2xlYXIgd2h5IHdlIHdvdWxkIHVzZSBpdC4gIFxwYXINCj4gSWYg d2UgcmVtb3ZlICJPUFRJT05BTCIgZnJvbSB0aGUgcmVkdWNlZEhhc2hUcmVlLCB0 aGVuIHdlIGNhbiBhbHNvIFxwYXINCj4gcmVtb3ZlIGl0IGZyb20gZGlnZXN0QWxn b3JpdGhtLlxwYXINClxwYXINCkkgbGVhdmUgaXQgdG8gdGhlIGF1dGhvcnMgdG8g Y29tbWVudCBhYm91dCBtYWtpbmcgdGhlIHRyZWUgIE9QVElPTkFMLlxwYXINCj4g IFxwYXINCj4gKiBGb3IgdGhlIENvbnRlbnRJbmZvLCB3b3VsZCBpdCBtYWtlIHNl bnNlIHRvIGp1c3QgZXhwYW5kIGl0IGluIHBsYWNlIFxwYXINCj4gaGVyZSByYXRo ZXIgdGhhbiBpbXBvcnQgdGhpcyBmcm9tIENNUz8gIElzIGl0IGJvcnJvd2luZyBj b25jZXB0dWFsbHkgXHBhcg0KPiBmcm9tIENNUyBmb3IgdGhpcz8gIEkgY291bGRu J3QgdGhpbmsgb2Ygd2h5IGNvbmNlcHR1YWxseSB3ZSB3ZXJlIFxwYXINCj4gYm9y cm93aW5nIGZyb20gQ01TIHJhdGhlciB0aGFuIGp1c3QgZGVmaW5pbmcgaXQgb3V0 cmlnaHQuXHBhcg0KSW4gZmFjdCwgdG8gbWUgaXQgc2VlbXMgdGhhdCB0aGUgQ29u dGVudFR5cGUgc2hvdWxkIGJlIGEgcGFyYW1ldGVyaXplZCB0eXBlIHNvIHRoYXQg b25lIGNhbiBsaW1pdCB0aGUgcG9zc2libGUgdHlwZXMuXHBhcg0KXHBhcg0KXHBh cg0KPiAgXHBhcg0KPiBGb3IgdGhlIEV2aWRlbmNlUmVjb3JkLCBJIGhhdmUgYSBj b3VwbGUgb2YgY29tbWVudHM6XHBhcg0KPiAgXHBhcg0KPiAgICBFdmlkZW5jZVJl Y29yZCA6Oj0gU0VRVUVOQ0UgXHtccGFyDQo+ICAgICAgdmVyc2lvbiAgICAgICAg ICAgICAgICAgICBJTlRFR0VSIFx7IHYxKDEpIFx9LCAgICBccGFyDQo+ICAgICAg ZGlnZXN0QWxnb3JpdGhtcyAgICAgICAgICBTRVFVRU5DRSBTSVpFICgxLi5NQVgp IE9GIFxwYXINCj4gQWxnb3JpdGhtSWRlbnRpZmllcixccGFyDQo+ICAgICAgY3J5 cHRvSW5mb3MgICAgICAgICAgICAgICBbMF0gQ3J5cHRvSW5mb3MgT1BUSU9OQUws XHBhcg0KPiAgICAgIGVuY3J5cHRpb25JbmZvICAgICAgICAgICAgWzFdIEVuY3J5 cHRpb25JbmZvIE9QVElPTkFMLFxwYXINCj4gICAgICBhcmNoaXZlVGltZVN0YW1w U2VxdWVuY2UgIEFyY2hpdmVUaW1lU3RhbXBTZXF1ZW5jZSBcfVxwYXINCj4gIFxw YXINCj4gKiBUaGUgdmVyc2lvbiBpbnRlZ2VyIHByb2JhYmx5IHNob3VsZCBzdGFy dCBhdCAwIHRvIGtlZXAgY29udmVudGlvbiBvZiBccGFyDQo+IG90aGVyIFJGQ3Ms IGNmIFJGQyAzMjgwXHBhcg0KPiAqIEZvciBkaWdlc3RBbGdvcml0aG1zLCBJIHRo aW5rIGl0IHdvdWxkIGJlIGJldHRlciB0byBpbXBvcnQgZnJvbSBSRkMgXHBhcg0K PiAzODUyIGFuZCB1c2UgRGlnZXN0QWxnb3JpdGhtSWRlbnRpZmllcnMgKHdoaWNo IGRvZXMgdGhpcyBhcyBhIFNFVCBccGFyDQo+IGluc3RlYWQgb2YgYSBzZXF1ZW5j ZSkuICBDb25jZXB0dWFsbHksIHRoaXMgc2VydmVzIHRoZSBzYW1lIHB1cnBvc2Ug XHBhcg0KPiBhcyBDTVMncyBEaWdlc3RBbGdvcml0aG1JZGVudGlmaWVycy5ccGFy DQo+ICBccGFyDQo+IEZvciBFbmNyeXB0aW9uSW5mbywgZGVmaW5lZCBhczpccGFy DQo+ICAgIEVuY3J5cHRpb25JbmZvIDo6PSBTRVFVRU5DRSBce1xwYXINCj4gICAg ICAgZW5jcnlwdGlvbkluZm9UeXBlIE9CSkVDVCBJREVOVElGSUVSLFxwYXINCj4g ICAgICAgZW5jcnlwdGlvbkluZm9WYWx1ZSBbMF0gRVhQTElDSVQgQU5ZIERFRklO RUQgQlkgZW5jcnlwdGlvbkluZm9UeXBlXHBhcg0KPiAgICBcfVxwYXINCj4gIFxw YXINCj4gKiBUaGUgY29udGV4dCBwb2ludCBvZiBbMF0gc2VlbXMgdW5uZWNlc3Nh cnkgc2luY2UgdGhlIGZpZWxkIGlzIG5vdCBccGFyDQo+IG9wdGlvbmFsXHBhcg0K aW5kZWVkLiBhbmQgaXQgc2hvdWxkIG5vdCBiZSBBTlkgREVGSU5FRCBCWSBidXRc cGFyDQpccGFyDQo+ICBccGFyDQo+IFRha2UgY2FyZSxccGFyDQo+IEJpbGxccGFy DQo+ICBccGFyDQpccGFyDQpccGFyDQotLSBccGFyDQpUbyB2ZXJpZnkgdGhlIHNp Z25hdHVyZSwgc2VlIGh0dHA6Ly9lZGVscGtpLmVkZWx3ZWIuZnIvIFxwYXINCkNl bGEgdm91cyBwZXJtZXQgZGUgY2hhcmdlciBsZSBjZXJ0aWZpY2F0IGRlIGwnYXV0 b3JpdFwnZTk7IFxwYXINCmRpZSBMaXN0ZSBtaXQgenVyXCdmY2NrZ2VydWZlbmVu IFplcnRpZmlrYXRlbiBmaW5kZW4gU2llIGRhIGF1Y2guIFxwYXINCn0=3D ----=3D_NextPart_DJD_200065160.221548046-- =A0=82=0C=EB0=82=06=880=82=05p=A0=03=02=01=02=02=04=D9=0E= =A1=A7=87U=D1=C5=DF=12=CCk=E1=9B?=14Z8=A6+q=95H=D2=14=DFpy=18=969=A5_=DF=8F= =EC`=AB*=0Dt=FA8=85=95=C8=00]=97=02=3D=1F=85D=1E=CD=8B=EB=EB=D3=C8\=88=10= =16"=85=95=00%=A5=0F=BD=9D=111=82=92=8A=86 = '=0F=82=FD=E8=86A=B6=AB=F2=B7|=85=B3|=E9=F0=05F:=8A = =C9=1B=F4=85=C3=97b=A8=05"|Dr=03+=FDl=99=D6=BEJ=A9=14;LB=D9M=93=C2=0A= #=CB=DA=D7f=1B\=89 = =0E=D6=95=F1=EF=18^=CB=EEm=06%>=F4=04Ho=FE=B3=17=FBQ6=CC=02U=C7=8A=18$=1D= ~=000=B6C=A9=9A=DC=BAm=EB=17_=9A=15$.=D4=C1Y=8D(+=C1=19m=ABB=B8y=00=CB=9B= =D8g = =F1=0D/@=0D=F8=1A{=B1u=97=E7>=C8F+CQh=B9=A5+I=CC{i<0"U^=E1;=B41=82=03=B50= =82=03=B1=02=01=010=81=B90=81=B01=0B0 = =06=03U=04=06=13=02US1=180=16=06=03U=04=0A= =13=0FU.S. Government1=1C0=1A=06=03U=04=0B=13=13Department of = State1=100=0E=06=03U=04=0B=13=07FADSPKI1"0 = =06=03U=04=0B=13=19Certification Authorities1301=06=03U=04=0B=13*U.S. = Department of State High Assurance CA=02=04; Wed, 14 Jun 2006 04:43:39 -0700 (MST) (envelope-from Peter.Sylvester@edelweb.fr) Received: from [193.51.14.5] (localhost [127.0.0.1]) by edelweb.fr (8.11.7p1+Sun/8.11.7) with ESMTP id k5EBhX028630; Wed, 14 Jun 2006 13:43:33 +0200 (MEST) Received: from [193.51.14.5] (emeriau.edelweb.fr [193.51.14.5]) by edelweb.fr (nospam/2.4); Wed, 14 Jun 2006 13:43:33 +0200 (MET DST) Message-ID: <448FF5FB.4070504@edelweb.fr> Date: Wed, 14 Jun 2006 13:41:47 +0200 From: Peter Sylvester User-Agent: Thunderbird 1.5 (X11/20051025) MIME-Version: 1.0 To: Bill Russell CC: ietf-ltans@imc.org Subject: Re: ERS 7 References: <20060612214319.HCID21801.mta9.adelphia.net@mocha> In-Reply-To: <20060612214319.HCID21801.mta9.adelphia.net@mocha> Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms030700040509050301070205" Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: This is a cryptographically signed message in MIME format. --------------ms030700040509050301070205 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Bill Russell wrote: > > / / > > I apologize if the group as already addressed some of these points, > but I've been going through the latest draft and have a couple of > comments/questions. > > For the ArchiveTimeStamp, defined as: > > ArchiveTimeStamp ::= SEQUENCE { > digestAlgorithm AlgorithmIdentifier OPTIONAL, > reducedHashtree [0] EXPLICIT SEQUENCE OF SEQUENCE OF OCTET > STRING OPTIONAL, > timeStamp ContentInfo } It has already been discussed that this syntax is ambiguous and furthermore there is no need for the EXPLICIT. I propose AchiveTimeStamp ::= SEQUENCE { digestAlgorithm AlgorithmIdentifier OPTIONAL, reducedHashtree [0] SEQUENCE OF SEQUENCE OF OCTET STRING OPTIONAL, timeStamp [1] ContentInfo } or AchiveTimeStamp ::= SEQUENCE { digestAlgorithm [0] AlgorithmIdentifier OPTIONAL, reducedHashtree [1] SEQUENCE OF SEQUENCE OF OCTET STRING OPTIONAL, timeStamp ContentInfo } or something similar > > > * It's not clear to me why the reducedHashtree is OPTIONAL. Even if > the tree only has one node, wouldn't you still want it to contain a > hash of the one node? It seems to add unnecessary complexity to make > it optional. If it makes since to keep it optional, is there a reason > why we would choose to make it EXPLICIT instead of IMPLICIT? I know > it only adds a couple of bytes, but I'm not clear why we would use > it. If we remove "OPTIONAL" from the reducedHashTree, then we can > also remove it from digestAlgorithm. I leave it to the authors to comment about making the tree OPTIONAL. > > * For the ContentInfo, would it make sense to just expand it in place > here rather than import this from CMS? Is it borrowing conceptually > from CMS for this? I couldn't think of why conceptually we were > borrowing from CMS rather than just defining it outright. In fact, to me it seems that the ContentType should be a parameterized type so that one can limit the possible types. > > For the EvidenceRecord, I have a couple of comments: > > EvidenceRecord ::= SEQUENCE { > version INTEGER { v1(1) }, > digestAlgorithms SEQUENCE SIZE (1..MAX) OF > AlgorithmIdentifier, > cryptoInfos [0] CryptoInfos OPTIONAL, > encryptionInfo [1] EncryptionInfo OPTIONAL, > archiveTimeStampSequence ArchiveTimeStampSequence } > > * The version integer probably should start at 0 to keep convention of > other RFCs, cf RFC 3280 > * For digestAlgorithms, I think it would be better to import from RFC > 3852 and use DigestAlgorithmIdentifiers (which does this as a SET > instead of a sequence). Conceptually, this serves the same purpose > as CMS's DigestAlgorithmIdentifiers. > > For EncryptionInfo, defined as: > EncryptionInfo ::= SEQUENCE { > encryptionInfoType OBJECT IDENTIFIER, > encryptionInfoValue [0] EXPLICIT ANY DEFINED BY encryptionInfoType > } > > * The context point of [0] seems unnecessary since the field is not > optional indeed. and it should not be ANY DEFINED BY but > > Take care, > Bill > -- To verify the signature, see http://edelpki.edelweb.fr/ Cela vous permet de charger le certificat de l'autorité; die Liste mit zurückgerufenen Zertifikaten finden Sie da auch. --------------ms030700040509050301070205 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIOpDCC BHIwggLfoAMCAQICBgoMz+gAPzANBgkqhkiG9w0BAQUFADBbMQswCQYDVQQGEwJGUjEQMA4G A1UEChMHRWRlbFdlYjEYMBYGA1UECxMPU2VydmljZSBFZGVsUEtJMSAwHgYDVQQDExdFZGVs UEtJIEVkZWxXZWIgUGVyc0dFTjAeFw0wNTAxMDYxMjI3MTlaFw0wNzAzMTcxMjI3MTlaMHAx CzAJBgNVBAYTAkZSMRAwDgYDVQQKDAdFZGVsV2ViMRgwFgYDVQQLDA9TZXJ2aWNlIEVkZWxQ S0kxNTAzBgNVBAMMLFBldGVyIFNZTFZFU1RFUiA8UGV0ZXIuU3lsdmVzdGVyQGVkZWx3ZWIu ZnI+MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDn/izyem7Z1pUP/gpQDSzeGA/ZP4vo VaCxcPWyssTYTAl6csAql2IIcYNVb6funaMNOY1q5oSNtlguFpOK3atQElBIMsfSh0CTuvUq q2QDz1nHWOB96aU8G81+ZmC+iQOCAdG3qKWvMOzC0SzxKGbhTqDsjBvfYYk1Jk/Rb5TK0wID AQABo4IBLjCCASowYgYDVR0RBFswWYEaUGV0ZXIuU3lsdmVzdGVyQGVkZWx3ZWIuZnKkOzA5 MQswCQYDVQQGEwJGUjEQMA4GA1UECgwHRWRlbFdlYjEYMBYGA1UEAwwPUGV0ZXIgU1lMVkVT VEVSMA4GA1UdDwEB/wQEAwIF4DAdBgNVHSUEFjAUBggrBgEFBQcDBAYIKwYBBQUHAwIwSgYD VR0fBEMwQTA/oD2gO4Y5aHR0cDovL2VkZWxwa2kuZWRlbHdlYi5mci9jcmwvRWRlbFBLSS1F ZGVsV2ViLVBlcnNHRU4uY3JsMB0GA1UdDgQWBBSSHP6djxj58tIi5VvjJbMZMXC/fDAfBgNV HSMEGDAWgBSe5Q/BFJVJHN1aXV6crs0Bby+UeTAJBgNVHRMEAjAAMA0GCSqGSIb3DQEBBQUA A4IBfAANZYiEkyDqsT43U83wHLSYMGcEfmisT+WQrAAoHdlcIsnlHnufGnfmdpg5yvCQpl2U TI7/w3LdaItoWq5oMZitqdoPW8Z+jy2pkd/DqYG1MkpEyZ0PA37Zn5yigQXAk4Nox7Lgiom8 1WDNgPesNRX7PRNa+RkQcD8MasfbHcZ2ycs1SxUxiCy6BUzhgSB8cNb2t9LVWWynvWuK1Wa5 V2ZCd3PlbKsrbWH8pafpFWUQm0S2BfKUWLDG9cje5bL7p5EpV4a8gFpbD5dq+PPJglT0Dvs9 F0EcrfL2l3JxGIkZmW7sfiUoefB9hTS9m3/TGvXcne4RYpVpEHFV5TathMuHfKAti6PhSely LCqdPq/T9DHLJekBY0EA2yiVcKQnRZk7/pz0HImCPADOHSOWffJtc9b+Ak6HSDD1PlOSDfT+ udnrqwSAiuNN3hx1olPNxzVDu3jgiTSJFf2XJ1TnmGMT4pJmx7vkJkdE9sZvpiZwdVws37Nr LqhH5fMZMIIEcjCCAt+gAwIBAgIGCgzP6AA/MA0GCSqGSIb3DQEBBQUAMFsxCzAJBgNVBAYT AkZSMRAwDgYDVQQKEwdFZGVsV2ViMRgwFgYDVQQLEw9TZXJ2aWNlIEVkZWxQS0kxIDAeBgNV BAMTF0VkZWxQS0kgRWRlbFdlYiBQZXJzR0VOMB4XDTA1MDEwNjEyMjcxOVoXDTA3MDMxNzEy MjcxOVowcDELMAkGA1UEBhMCRlIxEDAOBgNVBAoMB0VkZWxXZWIxGDAWBgNVBAsMD1NlcnZp Y2UgRWRlbFBLSTE1MDMGA1UEAwwsUGV0ZXIgU1lMVkVTVEVSIDxQZXRlci5TeWx2ZXN0ZXJA ZWRlbHdlYi5mcj4wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAOf+LPJ6btnWlQ/+ClAN LN4YD9k/i+hVoLFw9bKyxNhMCXpywCqXYghxg1Vvp+6dow05jWrmhI22WC4Wk4rdq1ASUEgy x9KHQJO69SqrZAPPWcdY4H3ppTwbzX5mYL6JA4IB0beopa8w7MLRLPEoZuFOoOyMG99hiTUm T9FvlMrTAgMBAAGjggEuMIIBKjBiBgNVHREEWzBZgRpQZXRlci5TeWx2ZXN0ZXJAZWRlbHdl Yi5mcqQ7MDkxCzAJBgNVBAYTAkZSMRAwDgYDVQQKDAdFZGVsV2ViMRgwFgYDVQQDDA9QZXRl ciBTWUxWRVNURVIwDgYDVR0PAQH/BAQDAgXgMB0GA1UdJQQWMBQGCCsGAQUFBwMEBggrBgEF BQcDAjBKBgNVHR8EQzBBMD+gPaA7hjlodHRwOi8vZWRlbHBraS5lZGVsd2ViLmZyL2NybC9F ZGVsUEtJLUVkZWxXZWItUGVyc0dFTi5jcmwwHQYDVR0OBBYEFJIc/p2PGPny0iLlW+Mlsxkx cL98MB8GA1UdIwQYMBaAFJ7lD8EUlUkc3VpdXpyuzQFvL5R5MAkGA1UdEwQCMAAwDQYJKoZI hvcNAQEFBQADggF8AA1liISTIOqxPjdTzfActJgwZwR+aKxP5ZCsACgd2VwiyeUee58ad+Z2 mDnK8JCmXZRMjv/Dct1oi2harmgxmK2p2g9bxn6PLamR38OpgbUySkTJnQ8DftmfnKKBBcCT g2jHsuCKibzVYM2A96w1Ffs9E1r5GRBwPwxqx9sdxnbJyzVLFTGILLoFTOGBIHxw1va30tVZ bKe9a4rVZrlXZkJ3c+VsqyttYfylp+kVZRCbRLYF8pRYsMb1yN7lsvunkSlXhryAWlsPl2r4 88mCVPQO+z0XQRyt8vaXcnEYiRmZbux+JSh58H2FNL2bf9Ma9dyd7hFilWkQcVXlNq2Ey4d8 oC2Lo+FJ6XIsKp0+r9P0Mcsl6QFjQQDbKJVwpCdFmTv+nPQciYI8AM4dI5Z98m1z1v4CTodI MPU+U5IN9P652eurBICK403eHHWiU83HNUO7eOCJNIkV/ZcnVOeYYxPikmbHu+QmR0T2xm+m JnB1XCzfs2suqEfl8xkwggW0MIIDT6ADAgECAgYJ+oiVOzEwDQYJKoZIhvcNAQEFBQAwUjEL MAkGA1UEBhMCRlIxEDAOBgNVBAoTB0VkZWxXZWIxGDAWBgNVBAsTD1NlcnZpY2UgRWRlbFBL STEXMBUGA1UEAxMOUmFjaW5lIEVkZWxQS0kwHhcNMDQxMDA3MTU0MzMwWhcNMTEwODEyMTU0 MzMwWjBbMQswCQYDVQQGEwJGUjEQMA4GA1UEChMHRWRlbFdlYjEYMBYGA1UECxMPU2Vydmlj ZSBFZGVsUEtJMSAwHgYDVQQDExdFZGVsUEtJIEVkZWxXZWIgUGVyc0dFTjCCAZwwDQYJKoZI hvcNAQEBBQADggGJADCCAYQCggF7FyeP4kRrFG9y51CeWmJIxBSMD2bcrJKIlnAPn6eH8V1M ORWTPivMNQYq32XcEi9xrxjyREvvnhABrVcW+1VLyLH8WgRY6n5A5JfuDjU6Aq0RzmjqTWDe 1+ecbgAtN8FYjVk35vdQbgfYzpGHPT0NuxiHi8NB8lNFi8rG0t2hP7WLwHLA+sIKFzA/CCRt qeGPvQkB1pRamU2IAActykfzJb6Qc50uRobWUBJtVjEBy/lgIXU0rMnQNHeCgbUvebvAT9Hd UGIPbEiX7dKHxL5/AxzHK/rA5siMzNPk8nSckDeLvpf8c/gqQRpPqufy4DazzXfZosKeJATH pyONnairmwfzMTi63PvNovrbTgzUiyH+g5zvcNoci9cke0RiLQc1pI38psgnVLtPPITgOZrS cV9zs4+sD7x7vjRco7a9H2ErfAU+8/Ui2OkR1X0z8DpyBHD/fcaDXTD+EiISL7aJHQcJRoNB CdCFgZeomsXULIYoFTa1hH//TN0z9wIDAQABo4G/MIG8MDoGA1UdHwQzMDEwL6AtoCuGKWh0 dHA6Ly9lZGVscGtpLmVkZWx3ZWIuZnIvY3JsL0VkZWxQS0kuY3JsMA8GA1UdEwQIMAYBAf8C AQAwDgYDVR0PAQH/BAQDAgEGMB0GA1UdJQQWMBQGCCsGAQUFBwMEBggrBgEFBQcDAjAdBgNV HQ4EFgQUnuUPwRSVSRzdWl1enK7NAW8vlHkwHwYDVR0jBBgwFoAUqNkrj9SwZ7q9SVy8M/x3 UhG5Z50wDQYJKoZIhvcNAQEFBQADggJOAFZV+1m/H+Qud9iUQJnvZR8R/adID02c2B3aOUUy 4/4dxBb4UU1kW8DTUpD57Pjuocfvdg4AfQi7zgSQ8/NUGxNU4CPxtADZVrZtmrpKCjBh1tNz QbNbdP91KtP+Di0BpidqNwG00CC9j2EnBY88AsqKE28Rmw4eQ9/M/q/GbXsAfEsHV0IQjM7u US+usowZwm3Mwa5oF+6gmShSc/Wz8iIURxg4lTQto3AoBsiLJelq83I4XRQ0goXYGcM8xXYj PDioidvY5pSfT4qBR1Bx/vh+xD2evWyFbpuB99iuuewoELX8db7P74QEHhw6Bv1yxLYXGamq Uxo60WT/UCFjVSy3C/dLrraUZA4gh7Q5G+3/Fal62Qx+1rUEC2YbogEKggonklzUXA+sUbCf Ad5nZQ0eSszwKt8jmYoHfQ6rUMde0ZJD08n5HAot9hpl9R65j9fdPz9uTeANcRocftHfgM7Y rQyruWuFxgMUV80fD4RC9ej5KbLyO8jtgESjOCGXeJ95kXXP8vmW73xCYkJ9Pg7Op30o43l6 PV7vej3gdmSQISY+s+J3arz+bccljJCrKHBad3918/LjJ55sRtSb7mfQGti2UcxtJAa2NmUL d+BIv0MUuC6+k2yIIQKcLbDuuk8lLJmwWuYt1OLHEskZxOm7D7nRwe7ZNlTIZvR/VFWxlY18 k488tH9qcusIw8+7uXeHOZHyFUOHMINJZO9mq9HwGMC4v1xiPwoAJkzFtHf3D9VAholjhEFg d28aJSs6qN15PXDgDjptAl34eoUxggKuMIICqgIBATBlMFsxCzAJBgNVBAYTAkZSMRAwDgYD VQQKEwdFZGVsV2ViMRgwFgYDVQQLEw9TZXJ2aWNlIEVkZWxQS0kxIDAeBgNVBAMTF0VkZWxQ S0kgRWRlbFdlYiBQZXJzR0VOAgYKDM/oAD8wCQYFKw4DAhoFAKCCAZ8wGAYJKoZIhvcNAQkD MQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMDYwNjE0MTE0MTQ3WjAjBgkqhkiG9w0B CQQxFgQUm1S7DeBDQwkLDfRR/lUY6YmBcQwwUgYJKoZIhvcNAQkPMUUwQzAKBggqhkiG9w0D BzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwIC ASgwdAYJKwYBBAGCNxAEMWcwZTBbMQswCQYDVQQGEwJGUjEQMA4GA1UEChMHRWRlbFdlYjEY MBYGA1UECxMPU2VydmljZSBFZGVsUEtJMSAwHgYDVQQDExdFZGVsUEtJIEVkZWxXZWIgUGVy c0dFTgIGCgzP6AA/MHYGCyqGSIb3DQEJEAILMWegZTBbMQswCQYDVQQGEwJGUjEQMA4GA1UE ChMHRWRlbFdlYjEYMBYGA1UECxMPU2VydmljZSBFZGVsUEtJMSAwHgYDVQQDExdFZGVsUEtJ IEVkZWxXZWIgUGVyc0dFTgIGCgzP6AA/MA0GCSqGSIb3DQEBAQUABIGAN9H1LN+j1LfInhyF Jbnfc73k4bxAqYT29IUTZRKIyrk9RgzFkQqzI6mYBtcNL2C5xtA00IZYZS2rWrYZKa4Csubb GhVFVVnKnyuhEhXWXQSYtSY/ErhKJGubuTB3/hbeVoITkAKKk3skBrPAXUBUzCUsgbB2VUuB CKQDc2JpoDgAAAAAAAA= --------------ms030700040509050301070205-- Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5EAdmp0004435; Wed, 14 Jun 2006 03:39:48 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.13.5/8.13.5/Submit) id k5EAdmmI004434; Wed, 14 Jun 2006 03:39:48 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from mta13.adelphia.net (mta13.mail.adelphia.net [68.168.78.44]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5EAdkIi004416 for ; Wed, 14 Jun 2006 03:39:47 -0700 (MST) (envelope-from russellwc@mountaireygroup.net) Received: from mocha ([69.175.246.66]) by mta13.adelphia.net (InterMail vM.6.01.05.02 201-2131-123-102-20050715) with ESMTP id <20060614103941.BYKV10985.mta13.adelphia.net@mocha> for ; Wed, 14 Jun 2006 06:39:41 -0400 From: "Bill Russell" To: Subject: FW: ERS 7 Date: Wed, 14 Jun 2006 06:39:41 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" X-Mailer: Microsoft Office Outlook, Build 11.0.6353 Thread-Index: AcaO6rI1JKGFbmdCSF+ug4VWLYTofwAW2h7QABYnYmA= X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869 Message-Id: <20060614103941.BYKV10985.mta13.adelphia.net@mocha> Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by balder-227.proper.com id k5EAdlIi004421 Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Peter, Good point. I should have looked at 3161, which is a closer model for what we are doing anyway. I do like the idea of a v0 though that we can use while we are still working with drafts. What is your opinion for the reducedHashTree? Do you think there is any value in keeping it optional? It seems to me that even a trivial case should still have a value. Thoughts? Take care, Bill -----Original Message----- From: owner-ietf-ltans@mail.imc.org [mailto:owner-ietf-ltans@mail.imc.org] On Behalf Of Peter Sylvester Sent: Tuesday, June 13, 2006 8:54 AM To: Bill Russell Cc: ietf-ltans@imc.org Subject: Re: ERS 7 > For the EvidenceRecord, I have a couple of comments: > > EvidenceRecord ::= SEQUENCE { > version INTEGER { v1(1) }, > digestAlgorithms SEQUENCE SIZE (1..MAX) OF > AlgorithmIdentifier, > cryptoInfos [0] CryptoInfos OPTIONAL, > encryptionInfo [1] EncryptionInfo OPTIONAL, > archiveTimeStampSequence ArchiveTimeStampSequence } > > * The version integer probably should start at 0 to keep convention of > other RFCs, cf RFC 3280 Others have 1, but I think it may be useful to indicate a default version v1(1) and indicate that a v0(0) should be anything previous? rfc3161: v1(1) RFC3029: version INTEGER DEFAULT 1 -- To verify the signature, see http://edelpki.edelweb.fr/ Cela vous permet de charger le certificat de l'autorité; die Liste mit zurückgerufenen Zertifikaten finden Sie da auch. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5E8xotg069084; Wed, 14 Jun 2006 01:59:50 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.13.5/8.13.5/Submit) id k5E8xo1g069083; Wed, 14 Jun 2006 01:59:50 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from edelweb.fr (edelweb.fr [212.234.46.16]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5E8xnGT069058 for ; Wed, 14 Jun 2006 01:59:50 -0700 (MST) (envelope-from Peter.Sylvester@edelweb.fr) Received: from [193.51.14.5] (localhost [127.0.0.1]) by edelweb.fr (8.11.7p1+Sun/8.11.7) with ESMTP id k5E8xk024815; Wed, 14 Jun 2006 10:59:46 +0200 (MEST) Received: from [193.51.14.5] (emeriau.edelweb.fr [193.51.14.5]) by edelweb.fr (nospam/2.4); Wed, 14 Jun 2006 10:59:47 +0200 (MET DST) Message-ID: <448FCF98.5010008@edelweb.fr> Date: Wed, 14 Jun 2006 10:58:00 +0200 From: Peter Sylvester User-Agent: Thunderbird 1.5 (X11/20051025) MIME-Version: 1.0 To: Peter Sylvester CC: Bill Russell , ietf-ltans@imc.org Subject: Re: ERS 7 References: <20060612214319.HCID21801.mta9.adelphia.net@mocha> <448EB55C.2050905@edelweb.fr> In-Reply-To: <448EB55C.2050905@edelweb.fr> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: Peter Sylvester wrote: > >> For the EvidenceRecord, I have a couple of comments: >> >> EvidenceRecord ::= SEQUENCE { >> version INTEGER { v1(1) }, >> digestAlgorithms SEQUENCE SIZE (1..MAX) OF AlgorithmIdentifier, >> cryptoInfos [0] CryptoInfos OPTIONAL, >> encryptionInfo [1] EncryptionInfo OPTIONAL, >> archiveTimeStampSequence ArchiveTimeStampSequence } >> >> * The version integer probably should start at 0 to keep convention >> of other RFCs, cf RFC 3280 > Others have 1, but I think it may be useful to indicate a default > version v1(1) and indicate that > a v0(0) should be anything previous? > rfc3161: v1(1) > > RFC3029: version INTEGER DEFAULT 1 > > > > > -- To verify the signature, see http://edelpki.edelweb.fr/ Cela vous permet de charger le certificat de l'autorité; die Liste mit zurückgerufenen Zertifikaten finden Sie da auch. Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5E0Apus075856; Tue, 13 Jun 2006 17:10:51 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.13.5/8.13.5/Submit) id k5E0Apbq075855; Tue, 13 Jun 2006 17:10:51 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from mta13.adelphia.net (mta13.mail.adelphia.net [68.168.78.44]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5E0AnO0075816 for ; Tue, 13 Jun 2006 17:10:50 -0700 (MST) (envelope-from russellwc@mountaireygroup.net) Received: from mocha ([69.175.246.66]) by mta13.adelphia.net (InterMail vM.6.01.05.02 201-2131-123-102-20050715) with ESMTP id <20060614001043.ZTAX10985.mta13.adelphia.net@mocha>; Tue, 13 Jun 2006 20:10:43 -0400 From: "Bill Russell" To: "'Peter Sylvester'" Cc: Subject: RE: ERS 7 Date: Tue, 13 Jun 2006 20:10:43 -0400 MIME-Version: 1.0 Content-Type: application/x-pkcs7-mime; name="smime.p7m" Content-Transfer-Encoding: quoted-printable Content-Disposition: attachment; filename="smime.p7m" X-Mailer: Microsoft Office Outlook, Build 11.0.6353 Thread-Index: AcaO6rI1JKGFbmdCSF+ug4VWLYTofwAW2h7Q X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869 In-Reply-To: <448EB55C.2050905@edelweb.fr> Message-Id: <20060614001043.ZTAX10985.mta13.adelphia.net@mocha> Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: 0=828=BB=06 *=86H=86=F7=0D=01=07=02=A0=828=AC0=828=A8=02=01=011=0B0 = =06=05+=0E=03=02=1A=05=000=82'=EC=06 = *=86H=86=F7=0D=01=07=01=A0=82'=DD=04=82'=D9Content-Type: = multipart/alternative; boundary=3D"--=3D_NextPart_DJD_200114376.201039793" ----=3D_NextPart_DJD_200114376.201039793 Content-Type: text/plain; charset=3D"iso-8859-1" Content-Transfer-Encoding: base64 UGV0ZXIsDQoNCkdvb2QgcG9pbnQuICBJIHNob3VsZCBoYXZlIGxvb2tlZCBhdCAz MTYxLCB3aGljaCBpcyBhIGNsb3NlciBtb2RlbCBmb3Igd2hhdCB3ZSBhcmUgZG9p bmcgYW55d2F5LiAgSSBkbyBsaWtlIHRoZSBpZGVhIG9mIGEgdjAgdGhvdWdoIHRo YXQgd2UgY2FuIHVzZSB3aGlsZSB3ZSBhcmUgc3RpbGwgd29ya2luZyB3aXRoIGRy YWZ0cy4gICANCg0KV2hhdCBpcyB5b3VyIG9waW5pb24gZm9yIHRoZSByZWR1Y2Vk SGFzaFRyZWU/ICBEbyB5b3UgdGhpbmsgdGhlcmUgaXMgYW55IHZhbHVlIGluIGtl ZXBpbmcgaXQgb3B0aW9uYWw/ICBJdCBzZWVtcyB0byBtZSB0aGF0IGV2ZW4gYSB0 cml2aWFsIGNhc2Ugc2hvdWxkIHN0aWxsIGhhdmUgYSB2YWx1ZS4NCg0KVGhvdWdo dHM/DQoNClRha2UgY2FyZSwNCkJpbGwNCg0KDQotLS0tLU9yaWdpbmFsIE1lc3Nh Z2UtLS0tLQ0KRnJvbTogb3duZXItaWV0Zi1sdGFuc0BtYWlsLmltYy5vcmcgW21h aWx0bzpvd25lci1pZXRmLWx0YW5zQG1haWwuaW1jLm9yZ10gT24gQmVoYWxmIE9m IFBldGVyIFN5bHZlc3Rlcg0KU2VudDogVHVlc2RheSwgSnVuZSAxMywgMjAwNiA4 OjU0IEFNDQpUbzogQmlsbCBSdXNzZWxsDQpDYzogaWV0Zi1sdGFuc0BpbWMub3Jn DQpTdWJqZWN0OiBSZTogRVJTIDcNCg0KDQo+IEZvciB0aGUgRXZpZGVuY2VSZWNv cmQsIEkgaGF2ZSBhIGNvdXBsZSBvZiBjb21tZW50czoNCj4gIA0KPiAgICBFdmlk ZW5jZVJlY29yZCA6Oj0gU0VRVUVOQ0Ugew0KPiAgICAgIHZlcnNpb24gICAgICAg ICAgICAgICAgICAgSU5URUdFUiB7IHYxKDEpIH0sICAgIA0KPiAgICAgIGRpZ2Vz dEFsZ29yaXRobXMgICAgICAgICAgU0VRVUVOQ0UgU0laRSAoMS4uTUFYKSBPRiAN Cj4gQWxnb3JpdGhtSWRlbnRpZmllciwNCj4gICAgICBjcnlwdG9JbmZvcyAgICAg ICAgICAgICAgIFswXSBDcnlwdG9JbmZvcyBPUFRJT05BTCwNCj4gICAgICBlbmNy eXB0aW9uSW5mbyAgICAgICAgICAgIFsxXSBFbmNyeXB0aW9uSW5mbyBPUFRJT05B TCwNCj4gICAgICBhcmNoaXZlVGltZVN0YW1wU2VxdWVuY2UgIEFyY2hpdmVUaW1l U3RhbXBTZXF1ZW5jZSB9DQo+ICANCj4gKiBUaGUgdmVyc2lvbiBpbnRlZ2VyIHBy b2JhYmx5IHNob3VsZCBzdGFydCBhdCAwIHRvIGtlZXAgY29udmVudGlvbiBvZiAN Cj4gb3RoZXIgUkZDcywgY2YgUkZDIDMyODANCk90aGVycyBoYXZlIDEsIGJ1dCBJ IHRoaW5rIGl0IG1heSBiZSB1c2VmdWwgdG8gaW5kaWNhdGUgYSBkZWZhdWx0IHZl cnNpb24gdjEoMSkgYW5kIGluZGljYXRlIHRoYXQgYSB2MCgwKSBzaG91bGQgYmUg YW55dGhpbmcgcHJldmlvdXM/DQpyZmMzMTYxOiAgICB2MSgxKQ0KDQpSRkMzMDI5 OiAgIHZlcnNpb24gICAgICAgICAgICAgICAgICAgICAgSU5URUdFUiBERUZBVUxU IDENCg0KDQoNCg0KDQotLQ0KVG8gdmVyaWZ5IHRoZSBzaWduYXR1cmUsIHNlZSBo dHRwOi8vZWRlbHBraS5lZGVsd2ViLmZyLyBDZWxhIHZvdXMgcGVybWV0IGRlIGNo YXJnZXIgbGUgY2VydGlmaWNhdCBkZSBsJ2F1dG9yaXTpOyBkaWUgTGlzdGUgbWl0 IHp1cvxja2dlcnVmZW5lbiBaZXJ0aWZpa2F0ZW4gZmluZGVuIFNpZSBkYSBhdWNo LiANCg=3D=3D ----=3D_NextPart_DJD_200114376.201039793 Content-Type: text/html; charset=3D"iso-8859-1" Content-Transfer-Encoding: base64 PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDMuMi8vRU4i Pg0KPEhUTUw+DQo8SEVBRD4NCjxNRVRBIEhUVFAtRVFVSVY9IkNvbnRlbnQtVHlw ZSIgQ09OVEVOVD0idGV4dC9odG1sOyBjaGFyc2V0PWlzby04ODU5LTEiPg0KPE1F VEEgTkFNRT0iR2VuZXJhdG9yIiBDT05URU5UPSJNUyBFeGNoYW5nZSBTZXJ2ZXIg dmVyc2lvbiA2LjUuNzAzNi4wIj4NCjxUSVRMRT5SRTogRVJTIDc8L1RJVExFPg0K PC9IRUFEPg0KPEJPRFk+DQo8IS0tIENvbnZlcnRlZCBmcm9tIHRleHQvcGxhaW4g Zm9ybWF0IC0tPg0KDQo8UD48Rk9OVCBTSVpFPTI+UGV0ZXIsPC9GT05UPg0KPC9Q Pg0KDQo8UD48Rk9OVCBTSVpFPTI+R29vZCBwb2ludC4mbmJzcDsgSSBzaG91bGQg aGF2ZSBsb29rZWQgYXQgMzE2MSwgd2hpY2ggaXMgYSBjbG9zZXIgbW9kZWwgZm9y IHdoYXQgd2UgYXJlIGRvaW5nIGFueXdheS4mbmJzcDsgSSBkbyBsaWtlIHRoZSBp ZGVhIG9mIGEgdjAgdGhvdWdoIHRoYXQgd2UgY2FuIHVzZSB3aGlsZSB3ZSBhcmUg c3RpbGwgd29ya2luZyB3aXRoIGRyYWZ0cy4mbmJzcDsmbmJzcDsgPC9GT05UPjwv UD4NCg0KPFA+PEZPTlQgU0laRT0yPldoYXQgaXMgeW91ciBvcGluaW9uIGZvciB0 aGUgcmVkdWNlZEhhc2hUcmVlPyZuYnNwOyBEbyB5b3UgdGhpbmsgdGhlcmUgaXMg YW55IHZhbHVlIGluIGtlZXBpbmcgaXQgb3B0aW9uYWw/Jm5ic3A7IEl0IHNlZW1z IHRvIG1lIHRoYXQgZXZlbiBhIHRyaXZpYWwgY2FzZSBzaG91bGQgc3RpbGwgaGF2 ZSBhIHZhbHVlLjwvRk9OVD48L1A+DQoNCjxQPjxGT05UIFNJWkU9Mj5UaG91Z2h0 cz88L0ZPTlQ+DQo8L1A+DQoNCjxQPjxGT05UIFNJWkU9Mj5UYWtlIGNhcmUsPC9G T05UPg0KDQo8QlI+PEZPTlQgU0laRT0yPkJpbGw8L0ZPTlQ+DQo8L1A+DQo8QlI+ DQoNCjxQPjxGT05UIFNJWkU9Mj4tLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLTwv Rk9OVD4NCg0KPEJSPjxGT05UIFNJWkU9Mj5Gcm9tOiBvd25lci1pZXRmLWx0YW5z QG1haWwuaW1jLm9yZyBbPEEgSFJFRj0ibWFpbHRvOm93bmVyLWlldGYtbHRhbnNA bWFpbC5pbWMub3JnIj5tYWlsdG86b3duZXItaWV0Zi1sdGFuc0BtYWlsLmltYy5v cmc8L0E+XSBPbiBCZWhhbGYgT2YgUGV0ZXIgU3lsdmVzdGVyPC9GT05UPg0KDQo8 QlI+PEZPTlQgU0laRT0yPlNlbnQ6IFR1ZXNkYXksIEp1bmUgMTMsIDIwMDYgODo1 NCBBTTwvRk9OVD4NCg0KPEJSPjxGT05UIFNJWkU9Mj5UbzogQmlsbCBSdXNzZWxs PC9GT05UPg0KDQo8QlI+PEZPTlQgU0laRT0yPkNjOiBpZXRmLWx0YW5zQGltYy5v cmc8L0ZPTlQ+DQoNCjxCUj48Rk9OVCBTSVpFPTI+U3ViamVjdDogUmU6IEVSUyA3 PC9GT05UPg0KPC9QPg0KPEJSPg0KDQo8UD48Rk9OVCBTSVpFPTI+Jmd0OyBGb3Ig dGhlIEV2aWRlbmNlUmVjb3JkLCBJIGhhdmUgYSBjb3VwbGUgb2YgY29tbWVudHM6 PC9GT05UPg0KDQo8QlI+PEZPTlQgU0laRT0yPiZndDsmbmJzcDsgPC9GT05UPg0K DQo8QlI+PEZPTlQgU0laRT0yPiZndDsmbmJzcDsmbmJzcDsmbmJzcDsgRXZpZGVu Y2VSZWNvcmQgOjo9IFNFUVVFTkNFIHs8L0ZPTlQ+DQoNCjxCUj48Rk9OVCBTSVpF PTI+Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyB2ZXJzaW9uJm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7IElOVEVHRVIgeyB2MSgxKSB9LCZuYnNwOyZuYnNwOyZuYnNwOyA8 L0ZPTlQ+DQoNCjxCUj48Rk9OVCBTSVpFPTI+Jmd0OyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyBkaWdlc3RBbGdvcml0aG1zJm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7IFNFUVVFTkNFIFNJ WkUgKDEuLk1BWCkgT0YgPC9GT05UPg0KDQo8QlI+PEZPTlQgU0laRT0yPiZndDsg QWxnb3JpdGhtSWRlbnRpZmllciw8L0ZPTlQ+DQoNCjxCUj48Rk9OVCBTSVpFPTI+ Jmd0OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBjcnlwdG9JbmZvcyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyBbMF0gQ3J5cHRvSW5m b3MgT1BUSU9OQUwsPC9GT05UPg0KDQo8QlI+PEZPTlQgU0laRT0yPiZndDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsgZW5jcnlwdGlvbkluZm8mbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsgWzFdIEVuY3J5cHRpb25JbmZvIE9QVElPTkFMLDwvRk9OVD4N Cg0KPEJSPjxGT05UIFNJWkU9Mj4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7IGFyY2hpdmVUaW1lU3RhbXBTZXF1ZW5jZSZuYnNwOyBBcmNoaXZlVGlt ZVN0YW1wU2VxdWVuY2UgfTwvRk9OVD4NCg0KPEJSPjxGT05UIFNJWkU9Mj4mZ3Q7 Jm5ic3A7IDwvRk9OVD4NCg0KPEJSPjxGT05UIFNJWkU9Mj4mZ3Q7ICogVGhlIHZl cnNpb24gaW50ZWdlciBwcm9iYWJseSBzaG91bGQgc3RhcnQgYXQgMCB0byBrZWVw IGNvbnZlbnRpb24gb2YgPC9GT05UPg0KDQo8QlI+PEZPTlQgU0laRT0yPiZndDsg b3RoZXIgUkZDcywgY2YgUkZDIDMyODA8L0ZPTlQ+DQoNCjxCUj48Rk9OVCBTSVpF PTI+T3RoZXJzIGhhdmUgMSwgYnV0IEkgdGhpbmsgaXQgbWF5IGJlIHVzZWZ1bCB0 byBpbmRpY2F0ZSBhIGRlZmF1bHQgdmVyc2lvbiB2MSgxKSBhbmQgaW5kaWNhdGUg dGhhdCBhIHYwKDApIHNob3VsZCBiZSBhbnl0aGluZyBwcmV2aW91cz88L0ZPTlQ+ PC9QPg0KDQo8UD48Rk9OVCBTSVpFPTI+cmZjMzE2MTombmJzcDsmbmJzcDsmbmJz cDsgdjEoMSk8L0ZPTlQ+DQo8L1A+DQoNCjxQPjxGT05UIFNJWkU9Mj5SRkMzMDI5 OiZuYnNwOyZuYnNwOyB2ZXJzaW9uJm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7IElOVEVHRVIgREVGQVVMVCAxPC9GT05UPg0KPC9QPg0KPEJSPg0KPEJSPg0K PEJSPg0KPEJSPg0KDQo8UD48Rk9OVCBTSVpFPTI+LS08L0ZPTlQ+DQoNCjxCUj48 Rk9OVCBTSVpFPTI+VG8gdmVyaWZ5IHRoZSBzaWduYXR1cmUsIHNlZSA8QSBIUkVG PSJodHRwOi8vZWRlbHBraS5lZGVsd2ViLmZyLyI+aHR0cDovL2VkZWxwa2kuZWRl bHdlYi5mci88L0E+IENlbGEgdm91cyBwZXJtZXQgZGUgY2hhcmdlciBsZSBjZXJ0 aWZpY2F0IGRlIGwnYXV0b3JpdOk7IGRpZSBMaXN0ZSBtaXQgenVy/GNrZ2VydWZl bmVuIFplcnRpZmlrYXRlbiBmaW5kZW4gU2llIGRhIGF1Y2guIDwvRk9OVD48L1A+ DQoNCjwvQk9EWT4NCjwvSFRNTD4=3D ----=3D_NextPart_DJD_200114376.201039793 Content-Type: application/rtf Content-Transfer-Encoding: base64 e1xydGYxXGFuc2lcYW5zaWNwZzEyNTJcZnJvbXRleHQgXGRlZmYwe1xmb250dGJs DQp7XGYwXGZzd2lzc1xmY2hhcnNldDAgQXJpYWw7fQ0Ke1xmMVxmbW9kZXJuIENv dXJpZXIgTmV3O30NCntcZjJcZm5pbFxmY2hhcnNldDIgU3ltYm9sO30NCntcZjNc Zm1vZGVyblxmY2hhcnNldDAgQ291cmllciBOZXc7fX0NCntcY29sb3J0YmxccmVk MFxncmVlbjBcYmx1ZTA7XHJlZDBcZ3JlZW4wXGJsdWUyNTU7fQ0KXHVjMVxwYXJk XHBsYWluXGRlZnRhYjM2MCBcZjBcZnMyMCBQZXRlcixccGFyDQpccGFyDQpHb29k IHBvaW50LiAgSSBzaG91bGQgaGF2ZSBsb29rZWQgYXQgMzE2MSwgd2hpY2ggaXMg YSBjbG9zZXIgbW9kZWwgZm9yIHdoYXQgd2UgYXJlIGRvaW5nIGFueXdheS4gIEkg ZG8gbGlrZSB0aGUgaWRlYSBvZiBhIHYwIHRob3VnaCB0aGF0IHdlIGNhbiB1c2Ug d2hpbGUgd2UgYXJlIHN0aWxsIHdvcmtpbmcgd2l0aCBkcmFmdHMuICAgXHBhcg0K XHBhcg0KV2hhdCBpcyB5b3VyIG9waW5pb24gZm9yIHRoZSByZWR1Y2VkSGFzaFRy ZWU/ICBEbyB5b3UgdGhpbmsgdGhlcmUgaXMgYW55IHZhbHVlIGluIGtlZXBpbmcg aXQgb3B0aW9uYWw/ICBJdCBzZWVtcyB0byBtZSB0aGF0IGV2ZW4gYSB0cml2aWFs IGNhc2Ugc2hvdWxkIHN0aWxsIGhhdmUgYSB2YWx1ZS5ccGFyDQpccGFyDQpUaG91 Z2h0cz9ccGFyDQpccGFyDQpUYWtlIGNhcmUsXHBhcg0KQmlsbFxwYXINClxwYXIN ClxwYXINCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tXHBhcg0KRnJvbTogb3du ZXItaWV0Zi1sdGFuc0BtYWlsLmltYy5vcmcgW21haWx0bzpvd25lci1pZXRmLWx0 YW5zQG1haWwuaW1jLm9yZ10gT24gQmVoYWxmIE9mIFBldGVyIFN5bHZlc3Rlclxw YXINClNlbnQ6IFR1ZXNkYXksIEp1bmUgMTMsIDIwMDYgODo1NCBBTVxwYXINClRv OiBCaWxsIFJ1c3NlbGxccGFyDQpDYzogaWV0Zi1sdGFuc0BpbWMub3JnXHBhcg0K U3ViamVjdDogUmU6IEVSUyA3XHBhcg0KXHBhcg0KXHBhcg0KPiBGb3IgdGhlIEV2 aWRlbmNlUmVjb3JkLCBJIGhhdmUgYSBjb3VwbGUgb2YgY29tbWVudHM6XHBhcg0K PiAgXHBhcg0KPiAgICBFdmlkZW5jZVJlY29yZCA6Oj0gU0VRVUVOQ0UgXHtccGFy DQo+ICAgICAgdmVyc2lvbiAgICAgICAgICAgICAgICAgICBJTlRFR0VSIFx7IHYx KDEpIFx9LCAgICBccGFyDQo+ICAgICAgZGlnZXN0QWxnb3JpdGhtcyAgICAgICAg ICBTRVFVRU5DRSBTSVpFICgxLi5NQVgpIE9GIFxwYXINCj4gQWxnb3JpdGhtSWRl bnRpZmllcixccGFyDQo+ICAgICAgY3J5cHRvSW5mb3MgICAgICAgICAgICAgICBb MF0gQ3J5cHRvSW5mb3MgT1BUSU9OQUwsXHBhcg0KPiAgICAgIGVuY3J5cHRpb25J bmZvICAgICAgICAgICAgWzFdIEVuY3J5cHRpb25JbmZvIE9QVElPTkFMLFxwYXIN Cj4gICAgICBhcmNoaXZlVGltZVN0YW1wU2VxdWVuY2UgIEFyY2hpdmVUaW1lU3Rh bXBTZXF1ZW5jZSBcfVxwYXINCj4gIFxwYXINCj4gKiBUaGUgdmVyc2lvbiBpbnRl Z2VyIHByb2JhYmx5IHNob3VsZCBzdGFydCBhdCAwIHRvIGtlZXAgY29udmVudGlv biBvZiBccGFyDQo+IG90aGVyIFJGQ3MsIGNmIFJGQyAzMjgwXHBhcg0KT3RoZXJz IGhhdmUgMSwgYnV0IEkgdGhpbmsgaXQgbWF5IGJlIHVzZWZ1bCB0byBpbmRpY2F0 ZSBhIGRlZmF1bHQgdmVyc2lvbiB2MSgxKSBhbmQgaW5kaWNhdGUgdGhhdCBhIHYw KDApIHNob3VsZCBiZSBhbnl0aGluZyBwcmV2aW91cz9ccGFyDQpyZmMzMTYxOiAg ICB2MSgxKVxwYXINClxwYXINClJGQzMwMjk6ICAgdmVyc2lvbiAgICAgICAgICAg ICAgICAgICAgICBJTlRFR0VSIERFRkFVTFQgMVxwYXINClxwYXINClxwYXINClxw YXINClxwYXINClxwYXINCi0tXHBhcg0KVG8gdmVyaWZ5IHRoZSBzaWduYXR1cmUs IHNlZSBodHRwOi8vZWRlbHBraS5lZGVsd2ViLmZyLyBDZWxhIHZvdXMgcGVybWV0 IGRlIGNoYXJnZXIgbGUgY2VydGlmaWNhdCBkZSBsJ2F1dG9yaXRcJ2U5OyBkaWUg TGlzdGUgbWl0IHp1clwnZmNja2dlcnVmZW5lbiBaZXJ0aWZpa2F0ZW4gZmluZGVu IFNpZSBkYSBhdWNoLiBccGFyDQp9 ----=3D_NextPart_DJD_200114376.201039793-- =A0=82=0C=EB0=82=06=880=82=05p=A0=03=02=01=02=02=04=D9=0E= =A1=A7=87U=D1=C5=DF=12=CCk=E1=9B?=14Z8=A6+q=95H=D2=14=DFpy=18=969=A5_=DF=8F= =EC`=AB*=0Dt=FA8=85=95=C8=00]=97=02=3D=1F=85D=1E=CD=8B=EB=EB=D3=C8\=88=10= =16"=85=95=00%=A5=0F=BD=9D=111=82=92=8A=86 = '=0F=82=FD=E8=86A=B6=AB=F2=B7|=85=B3|=E9=F0=05F:=8A = =C9=1B=F4=85=C3=97b=A8=05"|Dr=03+=FDl=99=D6=BEJ=A9=14;LB=D9M=93=C2=0A= #=CB=DA=D7f=1B\=89 = =0E=D6=95=F1=EF=18^=CB=EEm=06%>=F4=04Ho=FE=B3=17=FBQ6=CC=02U=C7=8A=18$=1D= ~=000=B6C=A9=9A=DC=BAm=EB=17_=9A=15$.=D4=C1Y=8D(+=C1=19m=ABB=B8y=00=CB=9B= =D8g = =F1=0D/@=0D=F8=1A{=B1u=97=E7>=C8F+CQh=B9=A5+I=CC{i<0"U^=E1;=B41=82=03=B50= =82=03=B1=02=01=010=81=B90=81=B01=0B0 = =06=03U=04=06=13=02US1=180=16=06=03U=04=0A= =13=0FU.S. Government1=1C0=1A=06=03U=04=0B=13=13Department of = State1=100=0E=06=03U=04=0B=13=07FADSPKI1"0 = =06=03U=04=0B=13=19Certification Authorities1301=06=03U=04=0B=13*U.S. = Department of State High Assurance CA=02=04; Tue, 13 Jun 2006 05:55:39 -0700 (MST) (envelope-from Peter.Sylvester@edelweb.fr) Received: from [193.51.14.5] (localhost [127.0.0.1]) by edelweb.fr (8.11.7p1+Sun/8.11.7) with ESMTP id k5DCtZ001084; Tue, 13 Jun 2006 14:55:35 +0200 (MEST) Received: from [193.51.14.5] (emeriau.edelweb.fr [193.51.14.5]) by edelweb.fr (nospam/2.4); Tue, 13 Jun 2006 14:55:35 +0200 (MET DST) Message-ID: <448EB55C.2050905@edelweb.fr> Date: Tue, 13 Jun 2006 14:53:48 +0200 From: Peter Sylvester User-Agent: Thunderbird 1.5 (X11/20051025) MIME-Version: 1.0 To: Bill Russell CC: ietf-ltans@imc.org Subject: Re: ERS 7 References: <20060612214319.HCID21801.mta9.adelphia.net@mocha> In-Reply-To: <20060612214319.HCID21801.mta9.adelphia.net@mocha> Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms070107000508030703020004" Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: This is a cryptographically signed message in MIME format. --------------ms070107000508030703020004 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit > For the EvidenceRecord, I have a couple of comments: > > EvidenceRecord ::= SEQUENCE { > version INTEGER { v1(1) }, > digestAlgorithms SEQUENCE SIZE (1..MAX) OF > AlgorithmIdentifier, > cryptoInfos [0] CryptoInfos OPTIONAL, > encryptionInfo [1] EncryptionInfo OPTIONAL, > archiveTimeStampSequence ArchiveTimeStampSequence } > > * The version integer probably should start at 0 to keep convention of > other RFCs, cf RFC 3280 Others have 1, but I think it may be useful to indicate a default version v1(1) and indicate that a v0(0) should be anything previous? rfc3161: v1(1) RFC3029: version INTEGER DEFAULT 1 -- To verify the signature, see http://edelpki.edelweb.fr/ Cela vous permet de charger le certificat de l'autorité; die Liste mit zurückgerufenen Zertifikaten finden Sie da auch. --------------ms070107000508030703020004 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIOpDCC BHIwggLfoAMCAQICBgoMz+gAPzANBgkqhkiG9w0BAQUFADBbMQswCQYDVQQGEwJGUjEQMA4G A1UEChMHRWRlbFdlYjEYMBYGA1UECxMPU2VydmljZSBFZGVsUEtJMSAwHgYDVQQDExdFZGVs UEtJIEVkZWxXZWIgUGVyc0dFTjAeFw0wNTAxMDYxMjI3MTlaFw0wNzAzMTcxMjI3MTlaMHAx CzAJBgNVBAYTAkZSMRAwDgYDVQQKDAdFZGVsV2ViMRgwFgYDVQQLDA9TZXJ2aWNlIEVkZWxQ S0kxNTAzBgNVBAMMLFBldGVyIFNZTFZFU1RFUiA8UGV0ZXIuU3lsdmVzdGVyQGVkZWx3ZWIu ZnI+MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDn/izyem7Z1pUP/gpQDSzeGA/ZP4vo VaCxcPWyssTYTAl6csAql2IIcYNVb6funaMNOY1q5oSNtlguFpOK3atQElBIMsfSh0CTuvUq q2QDz1nHWOB96aU8G81+ZmC+iQOCAdG3qKWvMOzC0SzxKGbhTqDsjBvfYYk1Jk/Rb5TK0wID AQABo4IBLjCCASowYgYDVR0RBFswWYEaUGV0ZXIuU3lsdmVzdGVyQGVkZWx3ZWIuZnKkOzA5 MQswCQYDVQQGEwJGUjEQMA4GA1UECgwHRWRlbFdlYjEYMBYGA1UEAwwPUGV0ZXIgU1lMVkVT VEVSMA4GA1UdDwEB/wQEAwIF4DAdBgNVHSUEFjAUBggrBgEFBQcDBAYIKwYBBQUHAwIwSgYD VR0fBEMwQTA/oD2gO4Y5aHR0cDovL2VkZWxwa2kuZWRlbHdlYi5mci9jcmwvRWRlbFBLSS1F ZGVsV2ViLVBlcnNHRU4uY3JsMB0GA1UdDgQWBBSSHP6djxj58tIi5VvjJbMZMXC/fDAfBgNV HSMEGDAWgBSe5Q/BFJVJHN1aXV6crs0Bby+UeTAJBgNVHRMEAjAAMA0GCSqGSIb3DQEBBQUA A4IBfAANZYiEkyDqsT43U83wHLSYMGcEfmisT+WQrAAoHdlcIsnlHnufGnfmdpg5yvCQpl2U TI7/w3LdaItoWq5oMZitqdoPW8Z+jy2pkd/DqYG1MkpEyZ0PA37Zn5yigQXAk4Nox7Lgiom8 1WDNgPesNRX7PRNa+RkQcD8MasfbHcZ2ycs1SxUxiCy6BUzhgSB8cNb2t9LVWWynvWuK1Wa5 V2ZCd3PlbKsrbWH8pafpFWUQm0S2BfKUWLDG9cje5bL7p5EpV4a8gFpbD5dq+PPJglT0Dvs9 F0EcrfL2l3JxGIkZmW7sfiUoefB9hTS9m3/TGvXcne4RYpVpEHFV5TathMuHfKAti6PhSely LCqdPq/T9DHLJekBY0EA2yiVcKQnRZk7/pz0HImCPADOHSOWffJtc9b+Ak6HSDD1PlOSDfT+ udnrqwSAiuNN3hx1olPNxzVDu3jgiTSJFf2XJ1TnmGMT4pJmx7vkJkdE9sZvpiZwdVws37Nr LqhH5fMZMIIEcjCCAt+gAwIBAgIGCgzP6AA/MA0GCSqGSIb3DQEBBQUAMFsxCzAJBgNVBAYT AkZSMRAwDgYDVQQKEwdFZGVsV2ViMRgwFgYDVQQLEw9TZXJ2aWNlIEVkZWxQS0kxIDAeBgNV BAMTF0VkZWxQS0kgRWRlbFdlYiBQZXJzR0VOMB4XDTA1MDEwNjEyMjcxOVoXDTA3MDMxNzEy MjcxOVowcDELMAkGA1UEBhMCRlIxEDAOBgNVBAoMB0VkZWxXZWIxGDAWBgNVBAsMD1NlcnZp Y2UgRWRlbFBLSTE1MDMGA1UEAwwsUGV0ZXIgU1lMVkVTVEVSIDxQZXRlci5TeWx2ZXN0ZXJA ZWRlbHdlYi5mcj4wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAOf+LPJ6btnWlQ/+ClAN LN4YD9k/i+hVoLFw9bKyxNhMCXpywCqXYghxg1Vvp+6dow05jWrmhI22WC4Wk4rdq1ASUEgy x9KHQJO69SqrZAPPWcdY4H3ppTwbzX5mYL6JA4IB0beopa8w7MLRLPEoZuFOoOyMG99hiTUm T9FvlMrTAgMBAAGjggEuMIIBKjBiBgNVHREEWzBZgRpQZXRlci5TeWx2ZXN0ZXJAZWRlbHdl Yi5mcqQ7MDkxCzAJBgNVBAYTAkZSMRAwDgYDVQQKDAdFZGVsV2ViMRgwFgYDVQQDDA9QZXRl ciBTWUxWRVNURVIwDgYDVR0PAQH/BAQDAgXgMB0GA1UdJQQWMBQGCCsGAQUFBwMEBggrBgEF BQcDAjBKBgNVHR8EQzBBMD+gPaA7hjlodHRwOi8vZWRlbHBraS5lZGVsd2ViLmZyL2NybC9F ZGVsUEtJLUVkZWxXZWItUGVyc0dFTi5jcmwwHQYDVR0OBBYEFJIc/p2PGPny0iLlW+Mlsxkx cL98MB8GA1UdIwQYMBaAFJ7lD8EUlUkc3VpdXpyuzQFvL5R5MAkGA1UdEwQCMAAwDQYJKoZI hvcNAQEFBQADggF8AA1liISTIOqxPjdTzfActJgwZwR+aKxP5ZCsACgd2VwiyeUee58ad+Z2 mDnK8JCmXZRMjv/Dct1oi2harmgxmK2p2g9bxn6PLamR38OpgbUySkTJnQ8DftmfnKKBBcCT g2jHsuCKibzVYM2A96w1Ffs9E1r5GRBwPwxqx9sdxnbJyzVLFTGILLoFTOGBIHxw1va30tVZ bKe9a4rVZrlXZkJ3c+VsqyttYfylp+kVZRCbRLYF8pRYsMb1yN7lsvunkSlXhryAWlsPl2r4 88mCVPQO+z0XQRyt8vaXcnEYiRmZbux+JSh58H2FNL2bf9Ma9dyd7hFilWkQcVXlNq2Ey4d8 oC2Lo+FJ6XIsKp0+r9P0Mcsl6QFjQQDbKJVwpCdFmTv+nPQciYI8AM4dI5Z98m1z1v4CTodI MPU+U5IN9P652eurBICK403eHHWiU83HNUO7eOCJNIkV/ZcnVOeYYxPikmbHu+QmR0T2xm+m JnB1XCzfs2suqEfl8xkwggW0MIIDT6ADAgECAgYJ+oiVOzEwDQYJKoZIhvcNAQEFBQAwUjEL MAkGA1UEBhMCRlIxEDAOBgNVBAoTB0VkZWxXZWIxGDAWBgNVBAsTD1NlcnZpY2UgRWRlbFBL STEXMBUGA1UEAxMOUmFjaW5lIEVkZWxQS0kwHhcNMDQxMDA3MTU0MzMwWhcNMTEwODEyMTU0 MzMwWjBbMQswCQYDVQQGEwJGUjEQMA4GA1UEChMHRWRlbFdlYjEYMBYGA1UECxMPU2Vydmlj ZSBFZGVsUEtJMSAwHgYDVQQDExdFZGVsUEtJIEVkZWxXZWIgUGVyc0dFTjCCAZwwDQYJKoZI hvcNAQEBBQADggGJADCCAYQCggF7FyeP4kRrFG9y51CeWmJIxBSMD2bcrJKIlnAPn6eH8V1M ORWTPivMNQYq32XcEi9xrxjyREvvnhABrVcW+1VLyLH8WgRY6n5A5JfuDjU6Aq0RzmjqTWDe 1+ecbgAtN8FYjVk35vdQbgfYzpGHPT0NuxiHi8NB8lNFi8rG0t2hP7WLwHLA+sIKFzA/CCRt qeGPvQkB1pRamU2IAActykfzJb6Qc50uRobWUBJtVjEBy/lgIXU0rMnQNHeCgbUvebvAT9Hd UGIPbEiX7dKHxL5/AxzHK/rA5siMzNPk8nSckDeLvpf8c/gqQRpPqufy4DazzXfZosKeJATH pyONnairmwfzMTi63PvNovrbTgzUiyH+g5zvcNoci9cke0RiLQc1pI38psgnVLtPPITgOZrS cV9zs4+sD7x7vjRco7a9H2ErfAU+8/Ui2OkR1X0z8DpyBHD/fcaDXTD+EiISL7aJHQcJRoNB CdCFgZeomsXULIYoFTa1hH//TN0z9wIDAQABo4G/MIG8MDoGA1UdHwQzMDEwL6AtoCuGKWh0 dHA6Ly9lZGVscGtpLmVkZWx3ZWIuZnIvY3JsL0VkZWxQS0kuY3JsMA8GA1UdEwQIMAYBAf8C AQAwDgYDVR0PAQH/BAQDAgEGMB0GA1UdJQQWMBQGCCsGAQUFBwMEBggrBgEFBQcDAjAdBgNV HQ4EFgQUnuUPwRSVSRzdWl1enK7NAW8vlHkwHwYDVR0jBBgwFoAUqNkrj9SwZ7q9SVy8M/x3 UhG5Z50wDQYJKoZIhvcNAQEFBQADggJOAFZV+1m/H+Qud9iUQJnvZR8R/adID02c2B3aOUUy 4/4dxBb4UU1kW8DTUpD57Pjuocfvdg4AfQi7zgSQ8/NUGxNU4CPxtADZVrZtmrpKCjBh1tNz QbNbdP91KtP+Di0BpidqNwG00CC9j2EnBY88AsqKE28Rmw4eQ9/M/q/GbXsAfEsHV0IQjM7u US+usowZwm3Mwa5oF+6gmShSc/Wz8iIURxg4lTQto3AoBsiLJelq83I4XRQ0goXYGcM8xXYj PDioidvY5pSfT4qBR1Bx/vh+xD2evWyFbpuB99iuuewoELX8db7P74QEHhw6Bv1yxLYXGamq Uxo60WT/UCFjVSy3C/dLrraUZA4gh7Q5G+3/Fal62Qx+1rUEC2YbogEKggonklzUXA+sUbCf Ad5nZQ0eSszwKt8jmYoHfQ6rUMde0ZJD08n5HAot9hpl9R65j9fdPz9uTeANcRocftHfgM7Y rQyruWuFxgMUV80fD4RC9ej5KbLyO8jtgESjOCGXeJ95kXXP8vmW73xCYkJ9Pg7Op30o43l6 PV7vej3gdmSQISY+s+J3arz+bccljJCrKHBad3918/LjJ55sRtSb7mfQGti2UcxtJAa2NmUL d+BIv0MUuC6+k2yIIQKcLbDuuk8lLJmwWuYt1OLHEskZxOm7D7nRwe7ZNlTIZvR/VFWxlY18 k488tH9qcusIw8+7uXeHOZHyFUOHMINJZO9mq9HwGMC4v1xiPwoAJkzFtHf3D9VAholjhEFg d28aJSs6qN15PXDgDjptAl34eoUxggKuMIICqgIBATBlMFsxCzAJBgNVBAYTAkZSMRAwDgYD VQQKEwdFZGVsV2ViMRgwFgYDVQQLEw9TZXJ2aWNlIEVkZWxQS0kxIDAeBgNVBAMTF0VkZWxQ S0kgRWRlbFdlYiBQZXJzR0VOAgYKDM/oAD8wCQYFKw4DAhoFAKCCAZ8wGAYJKoZIhvcNAQkD MQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMDYwNjEzMTI1MzQ4WjAjBgkqhkiG9w0B CQQxFgQUGBL0qQc4tu3a7JMWRPLPDSoQtZowUgYJKoZIhvcNAQkPMUUwQzAKBggqhkiG9w0D BzAOBggqhkiG9w0DAgICAIAwDQYIKoZIhvcNAwICAUAwBwYFKw4DAgcwDQYIKoZIhvcNAwIC ASgwdAYJKwYBBAGCNxAEMWcwZTBbMQswCQYDVQQGEwJGUjEQMA4GA1UEChMHRWRlbFdlYjEY MBYGA1UECxMPU2VydmljZSBFZGVsUEtJMSAwHgYDVQQDExdFZGVsUEtJIEVkZWxXZWIgUGVy c0dFTgIGCgzP6AA/MHYGCyqGSIb3DQEJEAILMWegZTBbMQswCQYDVQQGEwJGUjEQMA4GA1UE ChMHRWRlbFdlYjEYMBYGA1UECxMPU2VydmljZSBFZGVsUEtJMSAwHgYDVQQDExdFZGVsUEtJ IEVkZWxXZWIgUGVyc0dFTgIGCgzP6AA/MA0GCSqGSIb3DQEBAQUABIGAr1O4TFVYFaMQ7Iv0 0O+sKdZdMGTZhp4LfAKDxhtFAgsaCzSHZRo5+gXaSv+OhX3FoV+H3actGEXl6xv09Dh33fPk sJKou1JS7SqUKJYpXNRlzCTuWalAVikHeG2+ckYrtDfn18Omv+R/DdAOpNHsuLdKEr8yBTaP CyljQtC3l9gAAAAAAAA= --------------ms070107000508030703020004-- Received: from balder-227.proper.com (localhost [127.0.0.1]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5CLhRKV086405; Mon, 12 Jun 2006 14:43:27 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) Received: (from majordom@localhost) by balder-227.proper.com (8.13.5/8.13.5/Submit) id k5CLhR2G086404; Mon, 12 Jun 2006 14:43:27 -0700 (MST) (envelope-from owner-ietf-ltans@mail.imc.org) X-Authentication-Warning: balder-227.proper.com: majordom set sender to owner-ietf-ltans@mail.imc.org using -f Received: from mta9.adelphia.net (mta9.adelphia.net [68.168.78.199]) by balder-227.proper.com (8.13.5/8.13.5) with ESMTP id k5CLhPW7086372 for ; Mon, 12 Jun 2006 14:43:26 -0700 (MST) (envelope-from russellwc@mountaireygroup.net) Received: from mocha ([69.175.246.66]) by mta9.adelphia.net (InterMail vM.6.01.05.02 201-2131-123-102-20050715) with ESMTP id <20060612214319.HCID21801.mta9.adelphia.net@mocha> for ; Mon, 12 Jun 2006 17:43:19 -0400 From: "Bill Russell" To: Subject: ERS 7 Date: Mon, 12 Jun 2006 17:43:19 -0400 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_00C8_01C68E47.B1869FD0" X-Mailer: Microsoft Office Outlook, Build 11.0.6353 Thread-Index: AcaOaTgfYs6Pi6hBQxem7QS5PKgc3g== X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869 Message-Id: <20060612214319.HCID21801.mta9.adelphia.net@mocha> Sender: owner-ietf-ltans@mail.imc.org Precedence: bulk List-Archive: List-Unsubscribe: List-ID: This is a multi-part message in MIME format. ------=_NextPart_000_00C8_01C68E47.B1869FD0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit I apologize if the group as already addressed some of these points, but I've been going through the latest draft and have a couple of comments/questions. For the ArchiveTimeStamp, defined as: ArchiveTimeStamp ::= SEQUENCE { digestAlgorithm AlgorithmIdentifier OPTIONAL, reducedHashtree [0] EXPLICIT SEQUENCE OF SEQUENCE OF OCTET STRING OPTIONAL, timeStamp ContentInfo } * It's not clear to me why the reducedHashtree is OPTIONAL. Even if the tree only has one node, wouldn't you still want it to contain a hash of the one node? It seems to add unnecessary complexity to make it optional. If it makes since to keep it optional, is there a reason why we would choose to make it EXPLICIT instead of IMPLICIT? I know it only adds a couple of bytes, but I'm not clear why we would use it. If we remove "OPTIONAL" from the reducedHashTree, then we can also remove it from digestAlgorithm. * For the ContentInfo, would it make sense to just expand it in place here rather than import this from CMS? Is it borrowing conceptually from CMS for this? I couldn't think of why conceptually we were borrowing from CMS rather than just defining it outright. For the EvidenceRecord, I have a couple of comments: EvidenceRecord ::= SEQUENCE { version INTEGER { v1(1) }, digestAlgorithms SEQUENCE SIZE (1..MAX) OF AlgorithmIdentifier, cryptoInfos [0] CryptoInfos OPTIONAL, encryptionInfo [1] EncryptionInfo OPTIONAL, archiveTimeStampSequence ArchiveTimeStampSequence } * The version integer probably should start at 0 to keep convention of other RFCs, cf RFC 3280 * For digestAlgorithms, I think it would be better to import from RFC 3852 and use DigestAlgorithmIdentifiers (which does this as a SET instead of a sequence). Conceptually, this serves the same purpose as CMS's DigestAlgorithmIdentifiers. For EncryptionInfo, defined as: EncryptionInfo ::= SEQUENCE { encryptionInfoType OBJECT IDENTIFIER, encryptionInfoValue [0] EXPLICIT ANY DEFINED BY encryptionInfoType } * The context point of [0] seems unnecessary since the field is not optional Take care, Bill ------=_NextPart_000_00C8_01C68E47.B1869FD0 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

I apologize if the group as already addressed = some of=20 these points, but I've been going through the latest draft and have a = couple of=20 comments/questions.
 
For the = ArchiveTimeStamp,=20 defined as:
 
  =20 ArchiveTimeStamp ::=3D SEQUENCE {
    =20 digestAlgorithm    AlgorithmIdentifier=20 OPTIONAL,       =
    =20 reducedHashtree   [0] EXPLICIT SEQUENCE OF SEQUENCE OF OCTET = STRING=20 OPTIONAL,
    =20 timeStamp         ContentInfo=20 }        
 
* It's not = clear to me=20 why the reducedHashtree is OPTIONAL.  Even if the tree only has one = node,=20 wouldn't you still want it to contain a hash of the one node?  It = seems to=20 add unnecessary complexity to make it optional.  If it makes since = to keep=20 it optional, is there a reason why we would choose to make it EXPLICIT = instead=20 of IMPLICIT?  I know it only adds a couple of bytes, but I'm not = clear why=20 we would use it.  If we remove = "OPTIONAL"=20 from the reducedHashTree, then we can also remove it from=20 digestAlgorithm.
 
* For the = ContentInfo,=20 would it make sense to just expand it in place here rather than import = this from=20 CMS?  Is it borrowing conceptually from CMS for this?  I = couldn't=20 think of why conceptually we were borrowing from CMS rather than just = defining=20 it outright.
 
For the = EvidenceRecord, I=20 have a couple of comments:
 
  =20 EvidenceRecord ::=3D SEQUENCE {
    =20 version           =        =20 INTEGER { v1(1) },    
    =20 digestAlgorithms          = SEQUENCE=20 SIZE (1..MAX) OF AlgorithmIdentifier,
    =20 cryptoInfos          &n= bsp;   =20 [0] CryptoInfos OPTIONAL,
    =20 encryptionInfo          = ; =20 [1] EncryptionInfo OPTIONAL,
    =20 archiveTimeStampSequence  ArchiveTimeStampSequence }
 
* The version = integer=20 probably should start at 0 to keep convention of other RFCs, cf RFC = 3280
*=20 For digestAlgorithms, I think it would be better to import from RFC 3852 = and use=20 DigestAlgorithmIdentifiers (which does this as a SET instead of a=20 sequence).  Conceptually, this serves the same purpose = as CMS's = DigestAlgorithmIdentifiers.
 
For = EncryptionInfo,=20 defined as:
  =20 EncryptionInfo ::=3D SEQUENCE {
     =20 encryptionInfoType OBJECT IDENTIFIER,
     =20 encryptionInfoValue [0] EXPLICIT ANY DEFINED BY encryptionInfoType=20
   }
 
* The context = point of=20 [0] seems unnecessary since = the field=20 is not optional
 
Take care,
Bill
 
------=_NextPart_000_00C8_01C68E47.B1869FD0--

Richard A. Guida =
Director, Information Security